22

✏️ Editing: class-wpml-global-ajax.php

<?php

class WPML_Global_AJAX extends WPML_SP_User {

/**
	 * WPML_Global_AJAX constructor.
	 *
	 * @param SitePress $sitepress
	 */
	public function __construct( &$sitepress ) {
		parent::__construct( $sitepress );
		add_action( 'wp_ajax_save_language_negotiation_type', array( $this, 'save_language_negotiation_type_action' ) );
	}

public function save_language_negotiation_type_action() {
		$errors         = array();
		$response       = false;
		$nonce          = filter_input( INPUT_POST, 'nonce' );
		$action         = filter_input( INPUT_POST, 'action' );
		$is_valid_nonce = wp_verify_nonce( $nonce, $action );

if ( $is_valid_nonce ) {
			$icl_language_negotiation_type = filter_input( INPUT_POST, 'icl_language_negotiation_type', FILTER_SANITIZE_NUMBER_INT, FILTER_NULL_ON_FAILURE );
			$language_domains              = filter_input( INPUT_POST, 'language_domains', FILTER_SANITIZE_FULL_SPECIAL_CHARS, FILTER_REQUIRE_ARRAY | FILTER_NULL_ON_FAILURE );
			$use_directory                 = filter_input( INPUT_POST, 'use_directory', FILTER_SANITIZE_NUMBER_INT, FILTER_NULL_ON_FAILURE );
			$show_on_root                  = filter_input( INPUT_POST, 'show_on_root', FILTER_SANITIZE_FULL_SPECIAL_CHARS, FILTER_NULL_ON_FAILURE );
			$root_html_file_path           = filter_input( INPUT_POST, 'root_html_file_path', FILTER_SANITIZE_FULL_SPECIAL_CHARS, FILTER_NULL_ON_FAILURE );
			$hide_language_switchers       = filter_input( INPUT_POST, 'hide_language_switchers', FILTER_SANITIZE_NUMBER_INT, FILTER_NULL_ON_FAILURE );
			$icl_xdomain_data              = filter_input( INPUT_POST, 'xdomain', FILTER_SANITIZE_NUMBER_INT, FILTER_NULL_ON_FAILURE );
			$sso_enabled                   = filter_input( INPUT_POST, 'sso_enabled', FILTER_VALIDATE_BOOLEAN, FILTER_NULL_ON_FAILURE );

if ( $icl_language_negotiation_type ) {
				$this->sitepress->set_setting( 'language_negotiation_type', $icl_language_negotiation_type );
				$response = true;

if ( ! empty( $language_domains ) ) {
					$this->sitepress->set_setting( 'language_domains', $language_domains );
				}
				if ( 1 === (int) $icl_language_negotiation_type ) {
					$urls                                   = $this->sitepress->get_setting( 'urls' );
					$urls['directory_for_default_language'] = $use_directory ? true : 0;
					if ( $use_directory ) {
						$urls['show_on_root'] = $use_directory ? $show_on_root : '';
						if ( 'html_file' === $show_on_root ) {
							$root_page_url = $root_html_file_path ? $root_html_file_path : '';
							$response      = $this->validateRootPageUrl( $root_page_url, $errors );
							if ( $response ) {
								$urls['root_html_file_path'] = $root_page_url;
							}
						} else {
							$urls['hide_language_switchers'] = $hide_language_switchers ? $hide_language_switchers : 0;
						}
					}
					$this->sitepress->set_setting( 'urls', $urls );
				}

$this->sitepress->set_setting( 'xdomain_data', $icl_xdomain_data );
				$this->sitepress->set_setting( 'language_per_domain_sso_enabled', $sso_enabled );
				$this->sitepress->save_settings();
			}

if ( $response ) {
				$permalinks_settings_url = get_admin_url( null, 'options-permalink.php' );
				$save_permalinks_link    = '<a href="' . $permalinks_settings_url . '">' . _x( 're-save the site permalinks', 'You may need to {re-save the site permalinks} - 2/2', 'sitepress' ) . '</a>';
				$save_permalinks_message = sprintf( _x( 'You may need to %s.', 'You may need to {re-save the site permalinks} - 1/2', 'sitepress' ), $save_permalinks_link );
				wp_send_json_success( $save_permalinks_message );
			} else {
				if ( ! $errors ) {
					$errors[] = __( 'Error', 'sitepress' );
				}
				wp_send_json_error( $errors );
			}
		}
	}

/**
	 * @param string $url
	 * @param array $errors
	 *
	 * @return bool
	 */
	private function validateRootPageUrl( $url, array &$errors ) {
		$wp_http = new WP_HTTP();
		if ( '' === trim( $url ) ) {
			$errors[] = __( 'The URL of the HTML file is required', 'sitepress' );

return false;
		}
		if ( 0 !== strpos( $url, 'http' ) ) {
			$url = get_site_url( null, $url );
		}

if ( $this->is_external( $url ) ) {
			$errors[] = __( 'You are trying to use an external URL: this is not allowed.', 'sitepress' );

return false;
		}

try {
			$response = $wp_http->get( $url );
			if ( is_wp_error( $response ) ) {
				$errors[] = $response->get_error_code() . ' - ' . $response->get_error_message( $response->get_error_code() );

return false;
			}
			if ( 200 !== (int) $response['response']['code'] ) {
				$errors[] = __( 'An attempt to open the URL specified as a root page failed with the following error:', 'sitepress' );
				$errors[] = $response['response']['code'] . ': ' . $response['response']['message'];

return false;
			}
		} catch ( Exception $ex ) {
			$errors[] = $ex->getMessage();

return false;
		}

return true;
	}

function is_external( $url ) {
		$site_url        = get_site_url();
		$site_components = wp_parse_url( $site_url );
		$site_host       = strtolower( $site_components['host'] );

$url_components = wp_parse_url( $url );
		$url_host       = strtolower( $url_components['host'] );

if ( empty( $url_host ) || 0 === strcasecmp( $url_host, $site_host ) ) {
			return false;
		}

$site_host = $this->remove_www_prefix( $site_host );

$subdomain_position = strrpos( $url_host, '.' . $site_host );
		$subdomain_length   = strlen( $url_host ) - strlen( '.' . $site_host );

return $subdomain_position !== $subdomain_length; // check if the url host is a subdomain
	}

/**
	 * @param $site_host
	 *
	 * @return string
	 */
	function remove_www_prefix( $site_host ) {
		$site_host_levels = explode( '.', $site_host );
		if ( 2 > count( $site_host_levels ) && 'www' === $site_host_levels[0] ) {
			$site_host_levels = array_slice( $site_host_levels, - ( count( $site_host_levels ) - 1 ) );
			$site_host        = implode( '.', $site_host_levels );
		}

return $site_host;
	}
}

MR SKB