# wpfunnels/3.13.1/includes/core/rest-api/Controllers/class-settings-controller.php WPFunnels – Funnel Builder for WooCommerce with Checkout & One Click Upsell, version 3.13.1. 740 lines. - Page: https://pluginprobe.com/plugins/wpfunnels/3.13.1/code/includes/core/rest-api/Controllers/class-settings-controller.php - Raw: https://pluginprobe.com/plugins/wpfunnels/3.13.1/raw/includes/core/rest-api/Controllers/class-settings-controller.php - Modified: 2026-09-15T04:31:16+00:00 Line numbers below start at 1. Link to a line or a range by appending a fragment to the page URL, for example `https://pluginprobe.com/plugins/wpfunnels/3.13.1/code/includes/core/rest-api/Controllers/class-settings-controller.php#L10-L20`. ```php [\w-]+)'; protected $rest_wc_plugin_active_base = 'settings/activate_wc_plugins'; protected $rest_mrm_plugin_active_base = 'settings/activate_mrm_plugins'; protected $rest_funnel_settings = 'settings'; public function update_items_permissions_check( $request ) { $permission = current_user_can('wpf_manage_funnels'); if ( ! Wpfnl_functions::wpfnl_rest_check_manager_permissions( 'settings' ) ) { return new WP_Error( 'wpfunnels_rest_cannot_edit', __( 'Sorry, you cannot edit this resource.', 'wpfnl' ), array( 'status' => rest_authorization_required_code() ) ); } return true; } /** * Makes sure the current user has access to READ the settings APIs. * * @param WP_REST_Request $request Full data about the request. * * @return WP_Error|boolean * @since 3.0.0 */ public function get_items_permissions_check( $request ) { if ( ! Wpfnl_functions::wpfnl_rest_check_manager_permissions( 'settings' ) ) { return new WP_Error( 'wpfunnels_rest_cannot_view', __( 'Sorry, you cannot list resources.', 'wpfnl' ), array( 'status' => rest_authorization_required_code() ) ); } return true; } public function register_routes() { register_rest_route( $this->namespace, '/' . $this->rest_base . '/(?P[\w-]+)', array( 'args' => array( 'settings_id' => array( 'description' => __( 'Settings group ID.', 'wpfnl' ), 'type' => 'string', ) ), // array( // 'methods' => WP_REST_Server::READABLE, // 'callback' => array( $this, 'get_item' ), // 'permission_callback' => array( $this, 'get_items_permissions_check' ), // ), array( 'methods' => WP_REST_Server::EDITABLE, 'callback' => array( $this, 'update_settings' ), 'permission_callback' => array( $this, 'update_items_permissions_check' ), 'args' => $this->get_endpoint_args_for_item_schema( WP_REST_Server::EDITABLE ), ) ) ); register_rest_route( $this->namespace, '/' . $this->rest_wc_plugin_active_base , array( array( 'methods' => WP_REST_Server::EDITABLE, 'callback' => array( $this, 'activate_wc_plugins' ), 'permission_callback' => array( $this, 'update_items_permissions_check' ), 'args' => $this->get_endpoint_args_for_item_schema( WP_REST_Server::EDITABLE ), ) ) ); register_rest_route( $this->namespace, '/' . $this->rest_mrm_plugin_active_base , array( array( 'methods' => WP_REST_Server::EDITABLE, 'callback' => array( $this, 'activate_mrm_plugins' ), 'permission_callback' => array( $this, 'update_items_permissions_check' ), 'args' => $this->get_endpoint_args_for_item_schema( WP_REST_Server::EDITABLE ), ) ) ); register_rest_route( $this->namespace, '/' . $this->rest_funnel_settings . '/is-lms/(?P[\w-]+)' , array( array( 'methods' => 'GET', 'callback' => array( $this, 'is_lms' ), 'permission_callback' => array( $this, 'update_items_permissions_check' ), 'args' => $this->get_endpoint_args_for_item_schema( WP_REST_Server::EDITABLE ), ) ) ); register_rest_route( $this->namespace, '/' . $this->rest_funnel_settings . '/activate-plugins' , array( array( 'methods' => 'POST', 'callback' => array( $this, 'activate_plugins' ), 'permission_callback' => array( $this, 'update_items_permissions_check' ), 'args' => $this->get_endpoint_args_for_item_schema( WP_REST_Server::EDITABLE ), ) ) ); register_rest_route( $this->namespace, '/' . $this->rest_funnel_settings . '/create-contact' , array( array( 'methods' => 'POST', 'callback' => array( $this, 'create_contact' ), 'permission_callback' => array( $this, 'update_items_permissions_check' ), 'args' => $this->get_endpoint_args_for_item_schema( WP_REST_Server::EDITABLE ), ) ) ); register_rest_route( $this->namespace, '/' . $this->rest_funnel_settings . '/save-setup-wizard-settings' , array( array( 'methods' => 'POST', 'callback' => array( $this, 'save_setup_wizard_settings' ), 'permission_callback' => array( $this, 'update_items_permissions_check' ), 'args' => $this->get_endpoint_args_for_item_schema( WP_REST_Server::EDITABLE ), ) ) ); register_rest_route( $this->namespace, '/' . $this->rest_funnel_settings . '/update-builder-type' , array( array( 'methods' => 'POST', 'callback' => array( $this, 'update_builder_type' ), 'permission_callback' => array( $this, 'update_items_permissions_check' ), 'args' => $this->get_endpoint_args_for_item_schema( WP_REST_Server::EDITABLE ), ) ) ); register_rest_route( $this->namespace, '/' . $this->rest_funnel_settings . '/get-funnel-type-id/(?P[\w-]+)' , array( array( 'methods' => 'GET', 'callback' => array( $this, 'get_funnel_type_id' ), 'permission_callback' => array( $this, 'update_items_permissions_check' ), 'args' => $this->get_endpoint_args_for_item_schema( WP_REST_Server::EDITABLE ), ) ) ); register_rest_route( $this->namespace, '/' . $this->rest_funnel_settings . '/canvas-view-mode' , array( array( 'methods' => 'POST', 'callback' => array( $this, 'update_canvas_view_mode' ), 'permission_callback' => array( $this, 'update_items_permissions_check' ), 'args' => $this->get_endpoint_args_for_item_schema( WP_REST_Server::EDITABLE ), ) ) ); } /** * Get all settings in a group. * * @param string $group_id Group ID. * * @return array|WP_Error */ public function get_group_settings( $group_id ) { if ( empty( $group_id ) ) { return new WP_Error( 'rest_setting_setting_group_invalid', __( 'Invalid setting group.', 'wpfnl' ), array( 'status' => 404 ) ); } if ( ! $this->is_allowed_settings_group( $group_id ) ) { return new WP_Error( 'rest_setting_setting_group_invalid', __( 'Invalid setting group.', 'wpfnl' ), array( 'status' => 403 ) ); } $settings = Wpfnl_functions::get_admin_settings( $group_id ); if ( empty( $settings ) ) { return new WP_Error( 'rest_setting_setting_group_invalid', __( 'Invalid setting group.', 'wpfnl' ), array( 'status' => 404 ) ); } $filtered_settings = array(); foreach ($settings as $key => $setting) { $filtered_settings[] = array( 'id' => $key, 'value' => $setting ); } return $filtered_settings; } /** * Get setting data. * * @param string $group_id Group ID. * @param string $setting_id Setting ID. * * @return stdClass|WP_Error * @since 3.0.0 */ public function get_setting( $group_id, $setting_id ) { if ( empty( $setting_id ) ) { return new WP_Error( 'rest_setting_setting_invalid', __( 'Invalid setting.', 'wpfnl' ), array( 'status' => 404 ) ); } $settings = $this->get_group_settings( $group_id ); if ( is_wp_error( $settings ) ) { return $settings; } $array_key = array_keys( wp_list_pluck( $settings, 'id' ), $setting_id ); if ( empty( $array_key ) ) { return new WP_Error( 'rest_setting_setting_invalid', __( 'Invalid setting.', 'wpfnl' ), array( 'status' => 404 ) ); } $setting = $settings[ $array_key[0] ]; return $setting; } /** * Active required plugin based on slug * * @param $plugin_name * * @return WP_Error|WP_REST_Response * @since 1.0.0 */ public function activate_wc_plugins( \WP_REST_Request $request ) { if( !function_exists('activate_plugin') ) { include_once( ABSPATH . 'wp-admin/includes/plugin.php' ); } $permission = $request['permission']; $islms = $request['islms']; $isWc = $request['isWc']; $plugin_slug_arr = array( 'woocommerce/woocommerce.php' => false, 'cart-lift/cart-lift.php' => false, 'sfwd-lms/sfwd_lms.php' => false, ); $should_activated = array( 'woocommerce/woocommerce.php' => false, 'cart-lift/cart-lift.php' => false, 'sfwd-lms/sfwd_lms.php' => false, ); if($permission == '' ){ unset($should_activated[ 'cart-lift/cart-lift.php' ]); unset($plugin_slug_arr[ 'cart-lift/cart-lift.php' ]); } if($permission == '' ){ unset($should_activated[ 'cart-lift/cart-lift.php' ]); unset($plugin_slug_arr[ 'cart-lift/cart-lift.php' ]); } if( $isWc == 'no' ){ unset($should_activated[ 'woocommerce/woocommerce.php' ]); unset($plugin_slug_arr[ 'woocommerce/woocommerce.php' ]); } if( $islms == '' ){ unset($should_activated[ 'sfwd-lms/sfwd_lms.php' ]); unset($plugin_slug_arr[ 'sfwd-lms/sfwd_lms.php' ]); } foreach ( $plugin_slug_arr as $slug => $is_silent ) { $data = activate_plugin( $slug, '', false, $is_silent ); if ( !is_wp_error( $data ) ) { $should_activated[ $slug ] = true; } } delete_transient( '_wc_activation_redirect' ); foreach ( $should_activated as $slug => $is_activated ) { if(!$is_activated) { $settings['success'] = false; return rest_ensure_response( $settings ); } } $settings['success'] = true; return rest_ensure_response( $settings ); } /** * Active required plugin based on slug * * @param $plugin_name * * @return WP_Error|WP_REST_Response * @since 1.0.0 */ public function activate_mrm_plugins( \WP_REST_Request $request ) { if( !function_exists('activate_plugin') ) { include_once( ABSPATH . 'wp-admin/includes/plugin.php' ); } $plugins = isset( $request['plugins'] ) ? $request['plugins'] : []; $plugin_slug_arr = []; $should_activated = []; if( !empty($plugins) ){ foreach( $plugins as $plugin ){ if( 'mail-mint' == $plugin ) { $plugin_slug_arr['mail-mint/mail-mint.php'] = false; $should_activated['mail-mint/mail-mint.php'] = false; } } } foreach ( $plugin_slug_arr as $slug => $is_silent ) { $data = activate_plugin( $slug, '', false, $is_silent ); if ( !is_wp_error( $data ) ) { $should_activated[ $slug ] = true; } } delete_transient( '_wc_activation_redirect' ); foreach ( $should_activated as $slug => $is_activated ) { if(!$is_activated) { $settings['success'] = false; return rest_ensure_response( $settings ); } } $settings['success'] = true; return rest_ensure_response( $settings ); } /** * Disable activation redirect */ public function disable_wc_activation_redirect() { delete_transient( '_wc_activation_redirect' ); } /** * Activate required plugins * * @param $plugin_name */ public function active_plugin($plugin_slug,$permission = 1) { $plugin_slug_arr = array(); switch ($plugin_slug) { case 'elementor': $plugin_slug_arr = array( 'elementor/elementor.php' => true, ); break; case 'gutenberg': if($permission == 1){ $plugin_slug_arr = array( 'qubely/qubely.php' => true, ); } break; case 'divi-builder': $is_divi_installed = Wpfnl_functions::wpfnl_check_is_plugin_installed( $plugin_slug.'/divi-builder.php' ); $is_divi_theme_active = Wpfnl_functions::wpfnl_is_theme_active( 'Divi' ); if( $is_divi_installed ){ $plugin_slug_arr = array( 'divi-builder/divi-builder.php' => true, ); } break; } if($plugin_slug_arr) { foreach ( $plugin_slug_arr as $slug => $is_silent ) { $activate[ $slug ] = activate_plugin( $slug, '', false, $is_silent ); } } if(is_plugin_active( 'elementor/elementor.php' )){ Manager::create_default_kit(); } } /** * Validate a settings group_id against WPFunnels-owned option keys. * * The `group_id` path parameter is passed straight into get_option()/update_option(), * so it MUST be restricted to plugin-owned option names. Without this guard a request * could target arbitrary WordPress options (e.g. `wp_user_roles`) and escalate privileges. * * @param string $group_id Option key supplied via the route. * * @return bool True when the key is a WPFunnels-owned option, false otherwise. * @since 3.12.9 */ protected function is_allowed_settings_group( $group_id ) { if ( ! is_string( $group_id ) || '' === $group_id ) { return false; } $allowed = array( '_wpfunnels_general_settings', '_wpfunnels_permalink_settings', '_wpfunnels_optin_settings', '_wpfunnels_advanced_settings', '_wpfunnels_integrations', '_wpfunnels_notification_settings', '_wpfunnels_lms_settings', '_wpfunnels_recaptcha_setting', '_wpfunnels_google_map_api_key', '_wpfunnels_user_roles', ); if ( in_array( $group_id, $allowed, true ) ) { return true; } // Defense in depth: only allow plugin-prefixed option keys so add-ons that // register their own `_wpfunnels_*` settings groups keep working, while any // WordPress core / third-party option name is rejected. return 0 === strpos( $group_id, '_wpfunnels_' ); } /** * Update a single setting in a group. * * @param WP_REST_Request $request Request data. * * @return WP_Error|WP_REST_Response * @since 1.0.0 */ public function update_settings( $request ) { if( isset( $request['settings_id'], $request['group_id'] )){ if ( ! $this->is_allowed_settings_group( $request['group_id'] ) ) { return new WP_Error( 'rest_setting_group_invalid', __( 'Invalid setting group.', 'wpfnl' ), array( 'status' => 403 ) ); } if( $request['settings_id'] === 'permalink') { $default = Wpfnl_functions::get_permalink_settings(); $settings = Wpfnl_functions::get_admin_settings( '_wpfunnels_permalink_settings', $default); } elseif( $request['settings_id'] === 'optin') { $default = Wpfnl_functions::get_optin_settings(); $settings = Wpfnl_functions::get_admin_settings( '_wpfunnels_optin_settings', $default); } else { $default = Wpfnl_functions::get_general_settings(); $settings = Wpfnl_functions::get_admin_settings( $request['group_id'], $default ); } if ( !$settings ) { return new WP_Error( 'rest_setting_invalid', __( 'Invalid setting.', 'wpfnl' ), array( 'status' => 404 ) ); } if ( empty( $settings ) ) { return new WP_Error( 'rest_setting_invalid', __( 'Invalid setting.', 'wpfnl' ), array( 'status' => 404 ) ); } if($request['type'] !== 'ignore_activation' ) { $this->active_plugin($request['slug'],$request['permission']); } if($request['settings_id'] === 'permalink') { $settings['structure'] = $request['settings']; $settings['funnel_base'] = $request['funnelBase']; $settings['step_base'] = $request['stepBase']; Wpfnl_functions::update_admin_settings('_wpfunnels_permalink_saved', true); Wpfnl_functions::update_admin_settings($request['group_id'], $settings); }else { $settings[$request['settings_id']] = $request['value']; Wpfnl_functions::update_admin_settings($request['group_id'], $settings); } } $settings['success'] = true; $settings = $this->prepare_item_for_response( $settings, $request ); delete_option(WPFNL_TEMPLATES_OPTION_KEY); delete_transient('wpfunnels_remote_template_data_' . WPFNL_VERSION); return rest_ensure_response( $settings ); } /** * Check lms or not */ public function is_lms( $request ){ $response = [ 'success' => false, 'is_lms' => false, ]; if( $request['funnel_id'] ){ $funnel_id = $request['funnel_id']; $type = get_post_meta( $funnel_id, '_wpfnl_funnel_type', true ); if( Wpfnl_functions::is_lms_addon_active() && $type == 'lms' ){ $response['success'] = true; $response['is_lms'] = true; }else{ $response['success'] = true; $response['is_lms'] = false; } } return rest_ensure_response( $response ); } /** * Update funnel builder * * @param Array $request * * @return Array * @since 2.5.3 */ public function update_builder_type( $request ){ $response = [ 'success' => false, ]; if( $request['builder'] ){ $builder = $request['builder']; $general_settings = get_option( '_wpfunnels_general_settings' ); $general_settings['builder'] = $builder; update_option('_wpfunnels_general_settings', $general_settings ); $response = [ 'success' => true, ]; } return rest_ensure_response( $response ); } /** * Remember which canvas layout the current user last switched to. * * Stored per user rather than in the shared settings, so one admin flipping * the view switcher does not change the canvas for the rest of the team. The * site-wide default in Settings still applies to anyone who never switched. * * @param WP_REST_Request $request The REST request object. * * @return WP_REST_Response * @since 3.12.13 */ public function update_canvas_view_mode( $request ) { $mode = isset( $request['mode'] ) ? sanitize_text_field( $request['mode'] ) : ''; $user_id = get_current_user_id(); if ( ! $user_id || ! in_array( $mode, Wpfnl_functions::get_funnel_builder_modes(), true ) ) { return rest_ensure_response( array( 'success' => false ) ); } update_user_meta( $user_id, Wpfnl_functions::CANVAS_VIEW_MODE_META_KEY, $mode ); if ( 'vertical' === $mode ) { do_action( 'wpfunnels_vertical_mode_used' ); } return rest_ensure_response( array( 'success' => true, 'mode' => $mode, ) ); } /** * Activates plugins. * * @param WP_REST_Request $request The REST request object. */ public function activate_plugins( $request ){ $response = [ 'success' => false, ]; if( !isset( $request['plugins'] )){ rest_ensure_response( $response ); } $plugins = $request['plugins']; $activatePluginInstance = new \WPFunnels\Admin\SetupWizard\ActivatePlugin( $plugins ); $response = $activatePluginInstance->activate_plugins(); return rest_ensure_response( $response ); } /** * Save setup wizard settings * * @param WP_REST_Request $request The REST request object containing name and value. * * @return WP_REST_Response Response object with success status and message. * @since 2.5.20 */ public function save_setup_wizard_settings( $request ){ $response = [ 'success' => false, ]; // Validate required parameters. if( !isset( $request['name'],$request['value'] )){ rest_ensure_response( $response ); } if( 'builder' === $request['name'] ){ // Get and process the value using the appropriate method. $name = sanitize_text_field($request['name']); $value = sanitize_text_field($request['value']); // Process the value based on the name. if( 'builder' === $name ){ $value = 'qubely' === $value ? 'gutenberg' : $value; } // Update the setting. $settings = Wpfnl_functions::get_general_settings(); $settings[$name] = $value; update_option('_wpfunnels_general_settings', $settings ); if( 'builder' === $name ){ delete_option(WPFNL_TEMPLATES_OPTION_KEY.'_wc'); delete_option(WPFNL_TEMPLATES_OPTION_KEY.'_lms'); delete_transient('wpfunnels_remote_template_data_wc_' . WPFNL_VERSION); delete_transient('wpfunnels_remote_template_data_lms_' . WPFNL_VERSION); delete_transient('wpfunnels_remote_template_data_lead_' . WPFNL_VERSION); delete_transient('wpfunnels_remote_template_data_store_checkout_' . WPFNL_VERSION); } $response = [ 'success' => true, ]; } return rest_ensure_response( $response ); } /** * Create contact to Mail Mint. * * @param WP_REST_Request $request The REST request object. */ public function create_contact( $request ){ $response = [ 'success' => false, ]; if( !isset( $request['email'] )){ rest_ensure_response( $response ); } $email = sanitize_text_field($request['email']); $name = isset($request['name']) ? sanitize_text_field($request['name']) : ''; $createContactInstance = new \WPFunnels\Admin\SetupWizard\CreateContact($email, $name ); $response = $createContactInstance->create_contact_via_webhook(); update_option( 'wpfunnels_activation_email', $email ); $createContactInstance->send_contact_to_appsero(); return rest_ensure_response( $response ); } /** * Get funnel type id */ public function get_funnel_type_id( $request ){ $response = [ 'success' => false, 'type_id' => '', ]; if( $request['funnel_id'] ){ $funnel_id = $request['funnel_id']; $type = get_post_meta( $funnel_id, '_wpfnl_funnel_type', true ); $term = get_term_by('slug', $type, 'template_type'); if( $term ){ $response['success'] = true; $response['type_id'] = $term->term_id; } } return rest_ensure_response( $response ); } /** * Prepare a single setting object for response. * * @param object $item Setting object. * @param WP_REST_Request $request Request object. * * @return WP_REST_Response $response Response data. * @since 3.0.0 */ public function prepare_item_for_response( $item, $request ) { $data = $this->add_additional_fields_to_object( $item, $request ); $response = rest_ensure_response( $data ); $response->add_links( $this->prepare_links( $request['settings_id'] ) ); return $response; } } ```