HEX
Server: Apache
System: Linux WWW 6.1.0-40-amd64 #1 SMP PREEMPT_DYNAMIC Debian 6.1.153-1 (2025-09-20) x86_64
User: web11 (1011)
PHP: 8.2.29
Disabled: NONE
Upload Files
File: /var/www/intranet.kauko.lt/wp-content/plugins/prevent-direct-access/includes/pda_lite_api.php
<?php
/**
 *
 * Call PDA Lite API
 *
 */

// Check Class Exists or Not
if ( ! class_exists('PDA_Lite_API') ) {

    // Start Class for API
    class PDA_Lite_API
    {
        // Desclare some variable
        private $repo;

        // Call Constructor
        public function __construct()
        {
            $this->repo = new PDA_Repository();
        }

        /**
         * Create Private URL
         *
         * @param string $name
         *
         * @return string
         */
        private function prefix_role_name($name)
        {
            $hostname = is_ssl() ? home_url('/', 'https') : home_url('/');
            return $hostname . 'private/' . $name;
        }

        /**
         * Register Rest Routes
         */
        public function register_rest_routes()
        {
            // Register Routes
            register_rest_route(PDA_Lite_Constants::PREFIX_API_NAME, '/files/(?P<id>\d+)', array(
                'methods' => 'POST',
                'callback' => array($this, 'protect_files'),
                'permission_callback' => array( $this, 'pda_lite_custom_permission_check' ),
            ));

            // Register Routes
            register_rest_route(PDA_Lite_Constants::PREFIX_API_NAME, '/private-urls/(?P<id>\d+)', array(
                'methods' => 'GET',
                'callback' => array($this, 'list_private_links'),
                'permission_callback' => array( $this, 'pda_lite_custom_permission_check' ),
            ));

            // Register Routes
            register_rest_route(PDA_Lite_Constants::PREFIX_API_NAME, '/files/(?P<id>\d+)', array(
                'methods' => 'GET',
                'callback' => array($this, 'is_protected'),
                'permission_callback' => array( $this, 'pda_lite_custom_permission_check' ),
            ));

            // Register Routes
            register_rest_route(PDA_Lite_Constants::PREFIX_API_NAME, '/un-protect-files/(?P<id>\d+)', array(
                'methods' => 'POST',
                'callback' => array($this, 'un_protect_files'),
                'permission_callback' => array( $this, 'pda_lite_custom_permission_check' ),
            ));
        }

        public function pda_lite_custom_permission_check() {
			return current_user_can( 'manage_options' );
		 }
        /**
         * List Private Links
         *
         * @param array $data
         *
         * @return string
         */
        function list_private_links($data)
        {
            $links = $this->repo->get_private_links_by_post_id_and_type_is_null($data['id']);
            return array_map(function ($link) {
                $link['time'] = strtotime($link['time']);
                $link['full_url'] = $this->prefix_role_name($link['url']);
                return $link;
            }, $links);
        }

        /**
         * Check is protected
         *
         * @param array $data
         *
         * @return array
         */
        function is_protected($data)
        {
            $edit_url = wp_get_attachment_url($data['id']);
            $title = get_the_title($data['id']) === '' ? '(no title)' : get_the_title($data['id']);
            return array(
                'is_protected' => $this->repo->is_protected_file($data['id']),
                'post' => array(
                    'title' => $title,
                    'edit_url' => $edit_url,
                    's3_link' => false,
                    'is_file_deleted' => false
                ),
                'role_setting' => array(
                    "file_access_permission" => Pda_Helper::get_fap_setting(),
                    "whitelist_roles" => "",
                ),
            );
        }

        /**
         * Protected Files
         *
         * @param array $data
         *
         * @return string
         */
        function protect_files($data)
        {
            $pda_admin = new Pda_Admin();

            $file_result = $pda_admin->insert_prevent_direct_access($data['id'], 1);
            $pda_admin->handle_move_file($data['id']);
            return $file_result;
        }

        /**
         * Unprotected Files
         *
         * @param array $data
         *
         * @return string
         */
        function un_protect_files($data)
        {
            $pda_admin = new Pda_Admin();

            $file_result = $pda_admin->insert_prevent_direct_access($data['id'], 0);
            $pda_admin->handle_move_file($data['id']);
            return $file_result;
        }

    }

}