<?php

[0] Fix | Delete

declare(strict_types=1);

[1] Fix | Delete

[2] Fix | Delete

namespace Automattic\WooCommerce\StoreApi;

[3] Fix | Delete

[4] Fix | Delete

use Automattic\Jetpack\Constants;

[5] Fix | Delete

use Automattic\WooCommerce\StoreApi\Utilities\CartTokenUtils;

[6] Fix | Delete

use WC_Session;

[7] Fix | Delete

[8] Fix | Delete

defined( 'ABSPATH' ) || exit;

[9] Fix | Delete

[10] Fix | Delete

/**

[11] Fix | Delete

* SessionHandler class

[12] Fix | Delete

*/

[13] Fix | Delete

final class SessionHandler extends WC_Session {

[14] Fix | Delete

/**

[15] Fix | Delete

* Token from HTTP headers.

[16] Fix | Delete

*

[17] Fix | Delete

* @var string

[18] Fix | Delete

*/

[19] Fix | Delete

protected $token;

[20] Fix | Delete

[21] Fix | Delete

/**

[22] Fix | Delete

* Table name for session data.

[23] Fix | Delete

*

[24] Fix | Delete

* @var string Custom session table name

[25] Fix | Delete

*/

[26] Fix | Delete

protected $table;

[27] Fix | Delete

[28] Fix | Delete

/**

[29] Fix | Delete

* Expiration timestamp.

[30] Fix | Delete

*

[31] Fix | Delete

* @var int

[32] Fix | Delete

*/

[33] Fix | Delete

protected $session_expiration;

[34] Fix | Delete

[35] Fix | Delete

/**

[36] Fix | Delete

* Constructor for the session class.

[37] Fix | Delete

*/

[38] Fix | Delete

public function __construct() {

[39] Fix | Delete

$this->token = wc_clean( wp_unslash( $_SERVER['HTTP_CART_TOKEN'] ?? '' ) );

[40] Fix | Delete

$this->table = $GLOBALS['wpdb']->prefix . 'woocommerce_sessions';

[41] Fix | Delete

}

[42] Fix | Delete

[43] Fix | Delete

/**

[44] Fix | Delete

* Init hooks and session data.

[45] Fix | Delete

*/

[46] Fix | Delete

public function init() {

[47] Fix | Delete

$this->init_session_from_token();

[48] Fix | Delete

add_action( 'shutdown', array( $this, 'save_data' ), 20 );

[49] Fix | Delete

}

[50] Fix | Delete

[51] Fix | Delete

/**

[52] Fix | Delete

* Process the token header to load the correct session.

[53] Fix | Delete

*/

[54] Fix | Delete

protected function init_session_from_token() {

[55] Fix | Delete

$payload = CartTokenUtils::get_cart_token_payload( $this->token );

[56] Fix | Delete

[57] Fix | Delete

$this->_customer_id = $payload['user_id'];

[58] Fix | Delete

$this->session_expiration = $payload['exp'];

[59] Fix | Delete

$this->_data = (array) $this->get_session( $this->_customer_id, array() );

[60] Fix | Delete

}

[61] Fix | Delete

[62] Fix | Delete

/**

[63] Fix | Delete

* Returns the session.

[64] Fix | Delete

*

[65] Fix | Delete

* @param string $customer_id Customer ID.

[66] Fix | Delete

* @param mixed $default_value Default session value.

[67] Fix | Delete

*

[68] Fix | Delete

* @return string|array|bool

[69] Fix | Delete

*/

[70] Fix | Delete

public function get_session( $customer_id, $default_value = false ) {

[71] Fix | Delete

global $wpdb;

[72] Fix | Delete

[73] Fix | Delete

// This mimics behaviour from default WC_Session_Handler class. There will be no sessions retrieved while WP setup is due.

[74] Fix | Delete

if ( Constants::is_defined( 'WP_SETUP_CONFIG' ) ) {

[75] Fix | Delete

return false;

[76] Fix | Delete

}

[77] Fix | Delete

[78] Fix | Delete

$value = $wpdb->get_var(

[79] Fix | Delete

$wpdb->prepare(

[80] Fix | Delete

'SELECT session_value FROM %i WHERE session_key = %s',

[81] Fix | Delete

$this->table,

[82] Fix | Delete

$customer_id

[83] Fix | Delete

)

[84] Fix | Delete

);

[85] Fix | Delete

[86] Fix | Delete

if ( is_null( $value ) ) {

[87] Fix | Delete

$value = $default_value;

[88] Fix | Delete

}

[89] Fix | Delete

[90] Fix | Delete

return maybe_unserialize( $value );

[91] Fix | Delete

}

[92] Fix | Delete

[93] Fix | Delete

/**

[94] Fix | Delete

* Save data and delete user session.

[95] Fix | Delete

*/

[96] Fix | Delete

public function save_data() {

[97] Fix | Delete

// Dirty if something changed - prevents saving nothing new.

[98] Fix | Delete

if ( $this->_dirty ) {

[99] Fix | Delete

global $wpdb;

[100] Fix | Delete

[101] Fix | Delete

$wpdb->query(

[102] Fix | Delete

$wpdb->prepare(

[103] Fix | Delete

'INSERT INTO %i (`session_key`, `session_value`, `session_expiry`) VALUES (%s, %s, %d) ON DUPLICATE KEY UPDATE `session_value` = VALUES(`session_value`), `session_expiry` = VALUES(`session_expiry`)',

[104] Fix | Delete

$this->table,

[105] Fix | Delete

$this->_customer_id,

[106] Fix | Delete

maybe_serialize( $this->_data ),

[107] Fix | Delete

$this->session_expiration

[108] Fix | Delete

)

[109] Fix | Delete

);

[110] Fix | Delete

[111] Fix | Delete

$this->_dirty = false;

[112] Fix | Delete

}

[113] Fix | Delete

}

[114] Fix | Delete

}

[115] Fix | Delete

[116] Fix | Delete