use Hostinger\Admin\PluginSettings;
use Hostinger\WpHelper\Utils;
defined( 'ABSPATH' ) || exit;
public function __construct() {
add_filter( 'xmlrpc_enabled', array( $this, 'check_xmlrpc_enabled' ) );
add_filter( 'wp_headers', array( $this, 'check_pingback' ) );
add_filter( 'plugins_loaded', array( $this, 'plugins_loaded' ) );
public function plugins_loaded() {
$plugin_settings = new PluginSettings();
$settings = $plugin_settings->get_plugin_settings();
if ( defined( 'WP_CLI' ) && \WP_CLI ) {
if ( $settings->get_disable_xml_rpc() && $utils->isThisPage( 'xmlrpc.php' ) ) {
if ( $settings->get_force_https() && ! is_ssl() ) {
if ( isset( $_SERVER['HTTP_HOST'] ) && isset( $_SERVER['REQUEST_URI'] ) ) {
$host = sanitize_text_field( wp_unslash( $_SERVER['HTTP_HOST'] ) );
if ( $settings->get_force_www() && strpos( $host, 'www.' ) === false ) {
wp_safe_redirect( 'https://' . $host . sanitize_text_field( wp_unslash( $_SERVER['REQUEST_URI'] ) ), 301 );
if ( $settings->get_force_www() ) {
if ( isset( $_SERVER['HTTP_HOST'] ) && isset( $_SERVER['REQUEST_URI'] ) ) {
$host = sanitize_text_field( wp_unslash( $_SERVER['HTTP_HOST'] ) );
if ( strpos( $host, 'www.' ) === false ) {
wp_safe_redirect( 'https://www.' . $host . sanitize_text_field( wp_unslash( $_SERVER['REQUEST_URI'] ) ), 301 );
public function check_pingback( $headers ) {
$plugin_settings = new PluginSettings();
$settings = $plugin_settings->get_plugin_settings();
if ( $settings->get_disable_xml_rpc() ) {
unset( $headers['X-Pingback'] );
public function check_xmlrpc_enabled(): bool {
$plugin_settings = new PluginSettings();
$settings = $plugin_settings->get_plugin_settings();
if ( $settings->get_disable_xml_rpc() ) {