Edit File by line

<?php

[0] Fix | Delete

[1] Fix | Delete

namespace NinjaForms;

[2] Fix | Delete

[3] Fix | Delete

class OAuth

[4] Fix | Delete

{

[5] Fix | Delete

protected static $instance;

[6] Fix | Delete

[7] Fix | Delete

protected $base_url;

[8] Fix | Delete

[9] Fix | Delete

protected $client_id,

[10] Fix | Delete

$client_secret;

[11] Fix | Delete

[12] Fix | Delete

public static function getInstance() {

[13] Fix | Delete

if ( null == self::$instance ) {

[14] Fix | Delete

self::$instance = new static();

[15] Fix | Delete

}

[16] Fix | Delete

return self::$instance;

[17] Fix | Delete

}

[18] Fix | Delete

[19] Fix | Delete

public static function set_base_url( $base_url ) {

[20] Fix | Delete

self::getInstance()->base_url = trailingslashit( $base_url );

[21] Fix | Delete

}

[22] Fix | Delete

[23] Fix | Delete

protected function __construct() {

[24] Fix | Delete

[25] Fix | Delete

$this->client_id = get_option( 'ninja_forms_oauth_client_id' );

[26] Fix | Delete

[27] Fix | Delete

$this->client_secret = get_option( 'ninja_forms_oauth_client_secret' );

[28] Fix | Delete

if( ! $this->client_secret ){

[29] Fix | Delete

$this->client_secret = self::generate_secret();

[30] Fix | Delete

update_option( 'ninja_forms_oauth_client_secret', $this->client_secret );

[31] Fix | Delete

}

[32] Fix | Delete

}

[33] Fix | Delete

[34] Fix | Delete

public function setup() {

[35] Fix | Delete

add_action( 'wp_ajax_nf_oauth', function(){

[36] Fix | Delete

// Does the current user have admin privileges

[37] Fix | Delete

if (!current_user_can(apply_filters('ninja_forms_admin_all_forms_capabilities', 'manage_options'))) {

[38] Fix | Delete

return;

[39] Fix | Delete

}

[40] Fix | Delete

wp_die( json_encode( [

[41] Fix | Delete

'data' => [

[42] Fix | Delete

'connected' => ( $this->client_id ),

[43] Fix | Delete

'connect_url' => self::connect_url(),

[44] Fix | Delete

]

[45] Fix | Delete

] ) );

[46] Fix | Delete

});

[47] Fix | Delete

[48] Fix | Delete

// These Ajax calls handled in 'connect' and 'disconnect', respectively

[49] Fix | Delete

add_action( 'wp_ajax_nf_oauth_connect', [ $this, 'connect' ] );

[50] Fix | Delete

add_action( 'wp_ajax_nf_oauth_disconnect', [ $this, 'disconnect' ] );

[51] Fix | Delete

}

[52] Fix | Delete

[53] Fix | Delete

public static function is_connected() {

[54] Fix | Delete

return ( self::getInstance()->client_id );

[55] Fix | Delete

}

[56] Fix | Delete

[57] Fix | Delete

public static function get_client_id() {

[58] Fix | Delete

return self::getInstance()->client_id;

[59] Fix | Delete

}

[60] Fix | Delete

[61] Fix | Delete

public static function get_client_secret() {

[62] Fix | Delete

return self::getInstance()->client_secret;

[63] Fix | Delete

}

[64] Fix | Delete

[65] Fix | Delete

public static function connect_url( $endpoint = 'connect' ) {

[66] Fix | Delete

[67] Fix | Delete

$client_redirect = add_query_arg( [

[68] Fix | Delete

'action' => 'nf_oauth_connect',

[69] Fix | Delete

'nonce' => wp_create_nonce( 'nf-oauth-connect' )

[70] Fix | Delete

], admin_url( 'admin-ajax.php' ) );

[71] Fix | Delete

[72] Fix | Delete

return add_query_arg([

[73] Fix | Delete

'client_secret' => self::get_client_secret(),

[74] Fix | Delete

'client_redirect' => urlencode( $client_redirect ),

[75] Fix | Delete

'client_site_url' => urlencode( site_url() ),

[76] Fix | Delete

], self::getInstance()->base_url . $endpoint );

[77] Fix | Delete

}

[78] Fix | Delete

[79] Fix | Delete

public function connect() {

[80] Fix | Delete

// Does the current user have admin privileges

[81] Fix | Delete

if (!current_user_can('manage_options')) {

[82] Fix | Delete

return;

[83] Fix | Delete

}

[84] Fix | Delete

[85] Fix | Delete

if( ! wp_verify_nonce( $_REQUEST['nonce'], 'nf-oauth-connect' ) ) return;

[86] Fix | Delete

[87] Fix | Delete

if( ! isset( $_GET[ 'client_id' ] ) ) return;

[88] Fix | Delete

[89] Fix | Delete

$client_id = sanitize_text_field( $_GET[ 'client_id' ] );

[90] Fix | Delete

update_option( 'ninja_forms_oauth_client_id', $client_id );

[91] Fix | Delete

[92] Fix | Delete

if( isset( $_GET[ 'redirect' ] ) ){

[93] Fix | Delete

$redirect = sanitize_text_field( $_GET[ 'redirect' ] );

[94] Fix | Delete

$redirect = add_query_arg( 'client_id', $client_id, $redirect );

[95] Fix | Delete

wp_redirect( $redirect );

[96] Fix | Delete

exit;

[97] Fix | Delete

}

[98] Fix | Delete

[99] Fix | Delete

wp_safe_redirect( admin_url( 'admin.php?page=ninja-forms#services' ) );

[100] Fix | Delete

exit;

[101] Fix | Delete

}

[102] Fix | Delete

[103] Fix | Delete

public function disconnect() {

[104] Fix | Delete

[105] Fix | Delete

// Does the current user have admin privileges

[106] Fix | Delete

if (!current_user_can('manage_options')) {

[107] Fix | Delete

return;

[108] Fix | Delete

}

[109] Fix | Delete

[110] Fix | Delete

if( ! wp_verify_nonce( $_REQUEST['nonce'], 'nf-oauth-disconnect' ) ) return;

[111] Fix | Delete

[112] Fix | Delete

do_action( 'ninja_forms_oauth_disconnect' );

[113] Fix | Delete

[114] Fix | Delete

$url = trailingslashit( $this->base_url ) . 'disconnect';

[115] Fix | Delete

$args = [

[116] Fix | Delete

'blocking' => false,

[117] Fix | Delete

'method' => 'DELETE',

[118] Fix | Delete

'body' => [

[119] Fix | Delete

'client_id' => get_option( 'ninja_forms_oauth_client_id' ),

[120] Fix | Delete

'client_secret' => get_option( 'ninja_forms_oauth_client_secret' )

[121] Fix | Delete

]

[122] Fix | Delete

];

[123] Fix | Delete

$response = wp_remote_request( $url, $args );

[124] Fix | Delete

[125] Fix | Delete

delete_option( 'ninja_forms_oauth_client_id' );

[126] Fix | Delete

delete_option( 'ninja_forms_oauth_client_secret' );

[127] Fix | Delete

wp_die( 1 );

[128] Fix | Delete

}

[129] Fix | Delete

[130] Fix | Delete

public static function generate_secret( $length = 40 ) {

[131] Fix | Delete

[132] Fix | Delete

if( 0 >= $length ) $length = 40; // Min key length.

[133] Fix | Delete

if( 255 <= $length ) $length = 255; // Max key length.

[134] Fix | Delete

[135] Fix | Delete

$characters = '0123456789abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ';

[136] Fix | Delete

$random_string = '';

[137] Fix | Delete

for ( $i = 0; $i < $length; $i ++ ) {

[138] Fix | Delete

$random_string .= $characters[ rand( 0, strlen( $characters ) - 1 ) ];

[139] Fix | Delete

}

[140] Fix | Delete

[141] Fix | Delete

return $random_string;

[142] Fix | Delete

}

[143] Fix | Delete

}

[144] Fix | Delete

[145] Fix | Delete