HEX
Server: Apache/2.4.52 (Ubuntu)
System: Linux ip-172-31-4-197 6.8.0-1036-aws #38~22.04.1-Ubuntu SMP Fri Aug 22 15:44:33 UTC 2025 x86_64
User: ubuntu (1000)
PHP: 7.4.33
Disabled: pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wifcontinued,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_get_handler,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority,pcntl_async_signals,pcntl_unshare,
Upload Files
File: /var/www/html/wordpress/wp-content/plugins/userway-accessibility-widget/includes/controller.php
<?php
/*
    Copyright 2021  UserWay  (email: admin@userway.org)
*/

class Userway_REST_Widget_Controller extends WP_REST_Controller
{
    /**
     * @const string
     */
    const REQUEST_BODY_ACCOUNT_PARAM = 'account';
    /**
     * @const string
     */
    const REQUEST_BODY_STATE_PARAM = 'state';

    /**
     * @var string
     */
    protected $namespace = 'userway/v1';
    /**
     * @var string
     */
    protected $tableName;

    /**
     *
     */
    function __construct()
    {
        global $wpdb;

        $this->tableName = $wpdb->prefix . 'userway';
    }

    /**
     *
     */
    public function register_routes()
    {
        register_rest_route($this->namespace, '/save', [
            'methods' => WP_REST_Server::CREATABLE,
            'callback' => [$this, 'save'],
            'permission_callback' => [$this, 'permissions_check'],
        ]);

        register_rest_route($this->namespace, '/debug', [
            'methods' => WP_REST_Server::READABLE,
            'callback' => [$this, 'debug'],
            'permission_callback' => function () {
	            return true;
            },
        ]);
    }

    public function debug()
    {
        $response = [];
        try {
            global $wp_version;
            global $wpdb;

            include_once('wp-admin/includes/plugin.php');

            $userway_table_exist = false;
            $account = $wpdb->get_results("SELECT * FROM $this->tableName LIMIT 1");
            if ($wpdb->get_var("SHOW TABLES LIKE '$this->tableName'") == $this->tableName) {
                $userway_table_exist = true;
            }

            $response = [
                'php' => phpversion(),
                'wordpress' => $wp_version,
                'userway' => [
                    'version' => '2.4.8',
                    'account' => $account,
                    'table' => $this->tableName,
                    'tableExist' => $userway_table_exist,
                ],
            ];
        } catch (Exception $e) {
            $response['error'] = $e->getTraceAsString();
            $response['message'] = $e->getMessage();
        }

        return wp_send_json($response, 200);
    }

    /**
     * @return string[]
     */
    public function permissions_check()
    {
        return current_user_can('administrator');
    }

	/**
     * @return string[]
     */
    public function permissions_check_debug()
    {
        return true;
    }

    /**
     * @param $request
     * @return WP_Error|WP_HTTP_Response|WP_REST_Response
     */
    public function save($request)
    {
        global $wpdb;

        $requestBody = $request->get_json_params();
        $accountId = isset($requestBody[self::REQUEST_BODY_ACCOUNT_PARAM]) ? $requestBody[self::REQUEST_BODY_ACCOUNT_PARAM] : null;
        $state = isset($requestBody[self::REQUEST_BODY_STATE_PARAM]) ? $requestBody[self::REQUEST_BODY_STATE_PARAM] : false;
        $date = $this->getDate();
        $accountModel = $this->getAccountModel();

        if ($accountId === null) {
            return rest_ensure_response($this->prepareResponseMessage('request payload is invalid'));
        }

        if ($accountModel) {
        	if ($accountModel->account_id == $accountId) {
        		$wpdb->update($this->tableName, [
                   'state' => $state,
                   'account_id' => $accountId,
                   'updated_time' => $date,
                ], ['account_id' => $accountModel->account_id]);
                return rest_ensure_response($this->prepareResponseMessage('account successfully saved'));
        	}

            return rest_ensure_response($this->prepareResponseMessage('account successfully found'));
        }

        $wpdb->insert($this->tableName, [
            'account_id' => $accountId,
            'state' => $state,
            'created_time' => $date,
            'updated_time' => $date,
        ]);

        return rest_ensure_response($this->prepareResponseMessage('account successfully created'));
    }

    /**
     * @param string $message
     * @return string
     */
    private function prepareResponseMessage($message = '')
    {
        $date = $this->getDate();

        return "{$date} [{$this->namespace}]: {$message}";
    }

    /**
     * @return mixed | null
     */
    private function getAccountModel()
    {
        global $wpdb;

        $account = $wpdb->get_results("SELECT * FROM $this->tableName LIMIT 1");

        return isset($account[0]) ? $account[0] : null;
    }

    /**
     * @return string
     */
    private function getDate()
    {
        return date("Y-m-d H:i:s");
    }
}

/**
 *
 */
function usw_register_rest_routes()
{
    $controller = new Userway_REST_Widget_Controller();
    $controller->register_routes();
}

add_action('rest_api_init', 'usw_register_rest_routes');