FileXXXXXXXXXXX

dvadf

File manager - Edit - /home/centroca/public_html/wp/wp-content/plugins/wp-smushit/core/security/class-security-utils.php

Back
<?php namespace Smush\Core\Security; use Smush\Core\Array_Utils; use Smush\Core\Threads\JSON_Object_Map; class Security_Utils { private static $expected_nonces_option_id = 'wp_smush_public_expected_nonces'; /** * @var Array_Utils / private $array_utils; /* * @var JSON_Object_Map / private $object_map; public function __construct() { $this->array_utils = new Array_Utils(); $this->object_map = new JSON_Object_Map( self::$expected_nonces_option_id ); } public function create_public_nonce( $action = - 1 ) { $nonce = wp_hash( wp_nonce_tick() . '\|' . $action, 'nonce' ); $added = $this->add_expected_nonce( $nonce ); if ( ! $added ) { return false; } return $nonce; } public function verify_public_nonce( $nonce, $action = - 1 ) { $nonce_valid = hash_equals( wp_hash( wp_nonce_tick() . '\|' . $action, 'nonce' ), $nonce ); $nonce_expected = $this->is_nonce_expected( $nonce ); return $nonce_valid && $nonce_expected; } public function clean_public_nonce( $nonce ) { $this->object_map->remove( $this->expected_nonce_key( $nonce ) ); } private function add_expected_nonce( $nonce ) { return $this->object_map->add( $this->expected_nonce_key( $nonce ), array( 'time' => time(), 'nonce' => $nonce ) ); } private function is_nonce_expected( $nonce ) { $expected_nonces = $this->get_expected_nonces(); foreach ( $expected_nonces as $data ) { $now = time(); $time = (int) $this->array_utils->get_array_value( $data, 'time' ); $is_fresh = ( $now - $time ) < $this->get_expected_nonce_expiry(); $expected_nonce = $this->array_utils->get_array_value( $data, 'nonce' ); if ( $is_fresh && $expected_nonce === $nonce ) { return true; } } return false; } public function clean_expected_nonces() { $expected_nonces = $this->clean_expected( $this->get_expected_nonces() ); $this->object_map->unsafe_set( $expected_nonces ); } private function clean_expected( $expected_nonces ) { $now = time(); foreach ( $expected_nonces as $key => $data ) { $time = (int) $this->array_utils->get_array_value( $data, 'time' ); if ( ( $now - $time ) > $this->get_expected_nonce_expiry() ) { unset( $expected_nonces[ $key ] ); } } return $expected_nonces; } /* * @return array / public function get_expected_nonces() { $nonces = $this->object_map->get( array() ); return $this->array_utils->ensure_array( $nonces ); } /* * @return float\|int / private function get_expected_nonce_expiry() { // 15 minutes return MINUTE_IN_SECONDS 15; } private function expected_nonce_key( $nonce ) { return "nonce_$nonce"; } /** * Get expected_nonces_option. * * @return string */ public static function get_expected_nonces_option_id() { return self::$expected_nonces_option_id; } }

dvadf

dvadf