<?php

[0] Fix | Delete

/**

[1] Fix | Delete

* The admin-panel specific functionality of the plugin.

[2] Fix | Delete

*

[3] Fix | Delete

* @since 1.0.0

[4] Fix | Delete

* @package LiteSpeed_Cache

[5] Fix | Delete

*/

[6] Fix | Delete

[7] Fix | Delete

namespace LiteSpeed;

[8] Fix | Delete

[9] Fix | Delete

defined( 'WPINC' ) || exit();

[10] Fix | Delete

[11] Fix | Delete

/**

[12] Fix | Delete

* Class Admin

[13] Fix | Delete

*

[14] Fix | Delete

* Wires admin-side hooks, actions, and safe redirects.

[15] Fix | Delete

*/

[16] Fix | Delete

class Admin extends Root {

[17] Fix | Delete

[18] Fix | Delete

const LOG_TAG = '👮';

[19] Fix | Delete

[20] Fix | Delete

const PAGE_EDIT_HTACCESS = 'litespeed-edit-htaccess';

[21] Fix | Delete

[22] Fix | Delete

/**

[23] Fix | Delete

* Initialize the class and set its properties.

[24] Fix | Delete

* Runs in hook `after_setup_theme` when is_admin().

[25] Fix | Delete

*

[26] Fix | Delete

* @since 1.0.0

[27] Fix | Delete

*/

[28] Fix | Delete

public function __construct() {

[29] Fix | Delete

// Define LSCWP_MU_PLUGIN if in mu-plugins.

[30] Fix | Delete

if ( defined( 'WPMU_PLUGIN_DIR' ) && dirname( LSCWP_DIR ) === WPMU_PLUGIN_DIR && ! defined( 'LSCWP_MU_PLUGIN' ) ) {

[31] Fix | Delete

define( 'LSCWP_MU_PLUGIN', true );

[32] Fix | Delete

}

[33] Fix | Delete

[34] Fix | Delete

self::debug( 'No cache due to Admin page' );

[35] Fix | Delete

[36] Fix | Delete

if ( ! defined( 'DONOTCACHEPAGE' ) ) {

[37] Fix | Delete

define( 'DONOTCACHEPAGE', true );

[38] Fix | Delete

}

[39] Fix | Delete

[40] Fix | Delete

// Additional LiteSpeed assets on admin display (also registers menus).

[41] Fix | Delete

$this->cls( 'Admin_Display' );

[42] Fix | Delete

[43] Fix | Delete

// Initialize admin actions.

[44] Fix | Delete

add_action( 'admin_init', [ $this, 'admin_init' ] );

[45] Fix | Delete

[46] Fix | Delete

// Add link to plugin list page.

[47] Fix | Delete

add_filter(

[48] Fix | Delete

'plugin_action_links_' . LSCWP_BASENAME,

[49] Fix | Delete

[ $this->cls( 'Admin_Display' ), 'add_plugin_links' ]

[50] Fix | Delete

);

[51] Fix | Delete

}

[52] Fix | Delete

[53] Fix | Delete

/**

[54] Fix | Delete

* Callback that initializes the admin options for LiteSpeed Cache.

[55] Fix | Delete

*

[56] Fix | Delete

* @since 1.0.0

[57] Fix | Delete

* @return void

[58] Fix | Delete

*/

[59] Fix | Delete

public function admin_init() {

[60] Fix | Delete

// Hook attachment upload auto optimization.

[61] Fix | Delete

if ( $this->conf( Base::O_IMG_OPTM_AUTO ) ) {

[62] Fix | Delete

add_filter( 'wp_update_attachment_metadata', [ $this, 'wp_update_attachment_metadata' ], 9999, 2 );

[63] Fix | Delete

}

[64] Fix | Delete

[65] Fix | Delete

$this->_proceed_admin_action();

[66] Fix | Delete

[67] Fix | Delete

// Terminate if user doesn't have access to settings.

[68] Fix | Delete

$capability = is_network_admin() ? 'manage_network_options' : 'manage_options';

[69] Fix | Delete

if ( ! current_user_can( $capability ) ) {

[70] Fix | Delete

return;

[71] Fix | Delete

}

[72] Fix | Delete

[73] Fix | Delete

// Add privacy policy (since 2.2.6).

[74] Fix | Delete

if ( function_exists( 'wp_add_privacy_policy_content' ) ) {

[75] Fix | Delete

wp_add_privacy_policy_content( Core::NAME, Doc::privacy_policy() );

[76] Fix | Delete

}

[77] Fix | Delete

[78] Fix | Delete

$this->cls( 'Media' )->after_admin_init();

[79] Fix | Delete

[80] Fix | Delete

do_action( 'litespeed_after_admin_init' );

[81] Fix | Delete

[82] Fix | Delete

if ( $this->cls( 'Router' )->esi_enabled() ) {

[83] Fix | Delete

add_action( 'in_widget_form', [ $this->cls( 'Admin_Display' ), 'show_widget_edit' ], 100, 3 );

[84] Fix | Delete

add_filter( 'widget_update_callback', __NAMESPACE__ . '\Admin_Settings::validate_widget_save', 10, 4 );

[85] Fix | Delete

}

[86] Fix | Delete

}

[87] Fix | Delete

[88] Fix | Delete

/**

[89] Fix | Delete

* Handle attachment metadata update.

[90] Fix | Delete

*

[91] Fix | Delete

* @since 4.0

[92] Fix | Delete

*

[93] Fix | Delete

* @param array $data Attachment meta.

[94] Fix | Delete

* @param int $post_id Attachment ID.

[95] Fix | Delete

* @return array Filtered meta.

[96] Fix | Delete

*/

[97] Fix | Delete

public function wp_update_attachment_metadata( $data, $post_id ) {

[98] Fix | Delete

$this->cls( 'Img_Optm' )->wp_update_attachment_metadata( $data, $post_id );

[99] Fix | Delete

return $data;

[100] Fix | Delete

}

[101] Fix | Delete

[102] Fix | Delete

/**

[103] Fix | Delete

* Run LiteSpeed admin actions routed via Router.

[104] Fix | Delete

*

[105] Fix | Delete

* @since 1.1.0

[106] Fix | Delete

* @return void

[107] Fix | Delete

*/

[108] Fix | Delete

private function _proceed_admin_action() {

[109] Fix | Delete

$action = Router::get_action();

[110] Fix | Delete

[111] Fix | Delete

switch ( $action ) {

[112] Fix | Delete

case Router::ACTION_SAVE_SETTINGS:

[113] Fix | Delete

$this->cls( 'Admin_Settings' )->save( wp_unslash( $_POST ) ); // phpcs:ignore WordPress.Security.NonceVerification.Missing

[114] Fix | Delete

break;

[115] Fix | Delete

[116] Fix | Delete

case Router::ACTION_SAVE_SETTINGS_NETWORK:

[117] Fix | Delete

$this->cls( 'Admin_Settings' )->network_save( wp_unslash( $_POST ) ); // phpcs:ignore WordPress.Security.NonceVerification.Missing

[118] Fix | Delete

break;

[119] Fix | Delete

[120] Fix | Delete

default:

[121] Fix | Delete

break;

[122] Fix | Delete

}

[123] Fix | Delete

}

[124] Fix | Delete

[125] Fix | Delete

/**

[126] Fix | Delete

* Clean up the input (array or scalar) of any extra slashes/spaces.

[127] Fix | Delete

*

[128] Fix | Delete

* @since 1.0.4

[129] Fix | Delete

*

[130] Fix | Delete

* @param mixed $input The input value to clean.

[131] Fix | Delete

* @return mixed Cleaned value.

[132] Fix | Delete

*/

[133] Fix | Delete

public static function cleanup_text( $input ) {

[134] Fix | Delete

if ( is_array( $input ) ) {

[135] Fix | Delete

return array_map( __CLASS__ . '::cleanup_text', $input );

[136] Fix | Delete

}

[137] Fix | Delete

[138] Fix | Delete

return stripslashes(trim($input));

[139] Fix | Delete

}

[140] Fix | Delete

[141] Fix | Delete

/**

[142] Fix | Delete

* After a LSCWP_CTRL action, redirect back to same page

[143] Fix | Delete

* without nonce and action in the query string.

[144] Fix | Delete

*

[145] Fix | Delete

* If the redirect URL cannot be determined, redirects to the homepage.

[146] Fix | Delete

*

[147] Fix | Delete

* @since 1.0.12

[148] Fix | Delete

*

[149] Fix | Delete

* @param string|false $url Optional destination URL.

[150] Fix | Delete

* @return void

[151] Fix | Delete

*/

[152] Fix | Delete

public static function redirect( $url = false ) {

[153] Fix | Delete

global $pagenow;

[154] Fix | Delete

[155] Fix | Delete

// If originated, go back to referrer or home.

[156] Fix | Delete

if ( ! empty( $_GET['_litespeed_ori'] ) ) { // phpcs:ignore WordPress.Security.NonceVerification.Recommended

[157] Fix | Delete

$ref = wp_get_referer();

[158] Fix | Delete

wp_safe_redirect( $ref ? $ref : get_home_url() );

[159] Fix | Delete

exit;

[160] Fix | Delete

}

[161] Fix | Delete

[162] Fix | Delete

if ( ! $url ) {

[163] Fix | Delete

$clean = [];

[164] Fix | Delete

[165] Fix | Delete

// Sanitize current query args while removing our internals.

[166] Fix | Delete

if ( ! empty( $_GET ) ) { // phpcs:ignore WordPress.Security.NonceVerification.Recommended

[167] Fix | Delete

foreach ( $_GET as $k => $v ) { // phpcs:ignore WordPress.Security.NonceVerification.Recommended

[168] Fix | Delete

if ( in_array( $k, [ Router::ACTION, Router::NONCE, Router::TYPE, 'litespeed_i', 'litespeed_tb' ], true ) ) {

[169] Fix | Delete

continue;

[170] Fix | Delete

}

[171] Fix | Delete

// Normalize to string for URL building.

[172] Fix | Delete

$clean[ $k ] = is_array( $v ) ? array_map( 'sanitize_text_field', wp_unslash( $v ) ) : sanitize_text_field( wp_unslash( $v ) );

[173] Fix | Delete

}

[174] Fix | Delete

}

[175] Fix | Delete

[176] Fix | Delete

$qs = '';

[177] Fix | Delete

if ( ! empty( $clean ) ) {

[178] Fix | Delete

$qs = '?' . http_build_query( $clean );

[179] Fix | Delete

}

[180] Fix | Delete

[181] Fix | Delete

$url = is_network_admin() ? network_admin_url( $pagenow . $qs ) : admin_url( $pagenow . $qs );

[182] Fix | Delete

}

[183] Fix | Delete

[184] Fix | Delete

wp_safe_redirect( $url );

[185] Fix | Delete

exit;

[186] Fix | Delete

}

[187] Fix | Delete

}

[188] Fix | Delete

[189] Fix | Delete