<?php

[0] Fix | Delete

[1] Fix | Delete

namespace passster;

[2] Fix | Delete

[3] Fix | Delete

class PS_Rest_Handler {

[4] Fix | Delete

[5] Fix | Delete

/**

[6] Fix | Delete

* Contains instance or null

[7] Fix | Delete

*

[8] Fix | Delete

* @var object|null

[9] Fix | Delete

*/

[10] Fix | Delete

private static $instance = null;

[11] Fix | Delete

[12] Fix | Delete

/**

[13] Fix | Delete

* Returns instance of PS_Rest_Handler.

[14] Fix | Delete

*

[15] Fix | Delete

* @return object

[16] Fix | Delete

*/

[17] Fix | Delete

public static function get_instance() {

[18] Fix | Delete

[19] Fix | Delete

if ( null === self::$instance ) {

[20] Fix | Delete

self::$instance = new self();

[21] Fix | Delete

}

[22] Fix | Delete

[23] Fix | Delete

return self::$instance;

[24] Fix | Delete

}

[25] Fix | Delete

[26] Fix | Delete

/**

[27] Fix | Delete

* Constructor for PS_Rest_Handler

[28] Fix | Delete

*/

[29] Fix | Delete

public function __construct() {

[30] Fix | Delete

add_filter( 'rest_authentication_errors', array( $this, 'restrict_rest_access' ) );

[31] Fix | Delete

}

[32] Fix | Delete

[33] Fix | Delete

public function restrict_rest_access( $result ) {

[34] Fix | Delete

[35] Fix | Delete

// If a previous authentication check was applied,

[36] Fix | Delete

// pass that result along without modification.

[37] Fix | Delete

if ( true === $result || is_wp_error( $result ) ) {

[38] Fix | Delete

return $result;

[39] Fix | Delete

}

[40] Fix | Delete

[41] Fix | Delete

// Check if request is coming from a frontend page builder.

[42] Fix | Delete

if ( current_user_can( 'administrator' ) && ( is_plugin_active( 'elementor/elementor.php' ) || is_plugin_active( 'livecanvas/livecanvas-plugin-index.php' ) || is_plugin_active( 'divi-builder/divi-builder.php' ) || is_plugin_active( 'oxygen/functions.php' ) || is_plugin_active( 'pagelayer/pagelayer.php' ) ) ) {

[43] Fix | Delete

return $result;

[44] Fix | Delete

}

[45] Fix | Delete

[46] Fix | Delete

// Global protection activated?

[47] Fix | Delete

$settings = get_option( 'passster' );

[48] Fix | Delete

$protection_enabled = $settings['activate_global_protection'] ?? false;

[49] Fix | Delete

$page_id = $settings['global_protection_id'];

[50] Fix | Delete

[51] Fix | Delete

// Check if access is allowed.

[52] Fix | Delete

$atts = array( 'password' => get_post_meta( $page_id, 'passster_password', true ) );

[53] Fix | Delete

$valid = PS_Conditional::is_valid( $atts );

[54] Fix | Delete

[55] Fix | Delete

if ( $protection_enabled && ! $valid && ! is_user_logged_in() ) {

[56] Fix | Delete

return new \WP_Error(

[57] Fix | Delete

'rest_not_logged_in',

[58] Fix | Delete

__( 'You are not allowed to access this content. Please authenticate with a password first.' ),

[59] Fix | Delete

array( 'status' => 401 )

[60] Fix | Delete

);

[61] Fix | Delete

}

[62] Fix | Delete

[63] Fix | Delete

return $result;

[64] Fix | Delete

}

[65] Fix | Delete

}

[66] Fix | Delete

[67] Fix | Delete

[68] Fix | Delete