123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130 |
- <?php
- /**
- * Error Protection API: WP_Recovery_Mode_Link_Handler class
- *
- * @package WordPress
- * @since 5.2.0
- */
- /**
- * Core class used to generate and handle recovery mode links.
- *
- * @since 5.2.0
- */
- #[AllowDynamicProperties]
- class WP_Recovery_Mode_Link_Service {
- const LOGIN_ACTION_ENTER = 'enter_recovery_mode';
- const LOGIN_ACTION_ENTERED = 'entered_recovery_mode';
- /**
- * Service to generate and validate recovery mode keys.
- *
- * @since 5.2.0
- * @var WP_Recovery_Mode_Key_Service
- */
- private $key_service;
- /**
- * Service to handle cookies.
- *
- * @since 5.2.0
- * @var WP_Recovery_Mode_Cookie_Service
- */
- private $cookie_service;
- /**
- * WP_Recovery_Mode_Link_Service constructor.
- *
- * @since 5.2.0
- *
- * @param WP_Recovery_Mode_Cookie_Service $cookie_service Service to handle setting the recovery mode cookie.
- * @param WP_Recovery_Mode_Key_Service $key_service Service to handle generating recovery mode keys.
- */
- public function __construct( WP_Recovery_Mode_Cookie_Service $cookie_service, WP_Recovery_Mode_Key_Service $key_service ) {
- $this->cookie_service = $cookie_service;
- $this->key_service = $key_service;
- }
- /**
- * Generates a URL to begin recovery mode.
- *
- * Only one recovery mode URL can may be valid at the same time.
- *
- * @since 5.2.0
- *
- * @return string Generated URL.
- */
- public function generate_url() {
- $token = $this->key_service->generate_recovery_mode_token();
- $key = $this->key_service->generate_and_store_recovery_mode_key( $token );
- return $this->get_recovery_mode_begin_url( $token, $key );
- }
- /**
- * Enters recovery mode when the user hits wp-login.php with a valid recovery mode link.
- *
- * @since 5.2.0
- *
- * @global string $pagenow The filename of the current screen.
- *
- * @param int $ttl Number of seconds the link should be valid for.
- */
- public function handle_begin_link( $ttl ) {
- if ( ! isset( $GLOBALS['pagenow'] ) || 'wp-login.php' !== $GLOBALS['pagenow'] ) {
- return;
- }
- if ( ! isset( $_GET['action'], $_GET['rm_token'], $_GET['rm_key'] ) || self::LOGIN_ACTION_ENTER !== $_GET['action'] ) {
- return;
- }
- if ( ! function_exists( 'wp_generate_password' ) ) {
- require_once ABSPATH . WPINC . '/pluggable.php';
- }
- $validated = $this->key_service->validate_recovery_mode_key( $_GET['rm_token'], $_GET['rm_key'], $ttl );
- if ( is_wp_error( $validated ) ) {
- wp_die( $validated, '' );
- }
- $this->cookie_service->set_cookie();
- $url = add_query_arg( 'action', self::LOGIN_ACTION_ENTERED, wp_login_url() );
- wp_redirect( $url );
- die;
- }
- /**
- * Gets a URL to begin recovery mode.
- *
- * @since 5.2.0
- *
- * @param string $token Recovery Mode token created by {@see generate_recovery_mode_token()}.
- * @param string $key Recovery Mode key created by {@see generate_and_store_recovery_mode_key()}.
- * @return string Recovery mode begin URL.
- */
- private function get_recovery_mode_begin_url( $token, $key ) {
- $url = add_query_arg(
- array(
- 'action' => self::LOGIN_ACTION_ENTER,
- 'rm_token' => $token,
- 'rm_key' => $key,
- ),
- wp_login_url()
- );
- /**
- * Filters the URL to begin recovery mode.
- *
- * @since 5.2.0
- *
- * @param string $url The generated recovery mode begin URL.
- * @param string $token The token used to identify the key.
- * @param string $key The recovery mode key.
- */
- return apply_filters( 'recovery_mode_begin_url', $url, $token, $key );
- }
- }
|