FM / OMAPI

/home/techb158/public_html/wp-content/plugins/optinmonster/OMAPI/

/home/techb158/public_html/wp-content/plugins/optinmonster/OMAPI

Name	Size	Mode	Actions
EasyDigitalDownloads/	-	0755	rm
Elementor/	-	0755	rm
Integrations/	-	0755	rm
MemberPress/	-	0755	rm
Plugins/	-	0755	rm
Promos/	-	0755	rm
Rules/	-	0755	rm
Shortcodes/	-	0755	rm
WooCommerce/	-	0755	rm
WPForms/	-	0755	rm
Actions.php	7970	0666	edit dl rm
Ajax.php	1494	0666	edit dl rm
Api.php	14507	0666	edit dl rm
ApiAuth.php	2463	0666	edit dl rm
ApiKey.php	5203	0666	edit dl rm
AssetLoader.php	5489	0666	edit dl rm
BaseRestApi.php	6889	0666	edit dl rm
Blocks.php	13105	0666	edit dl rm
ClassicEditor.php	7084	0666	edit dl rm
ConstantContact.php	7591	0666	edit dl rm
Debug.php	4592	0666	edit dl rm
EasyDigitalDownloads.php	9553	0666	edit dl rm
Elementor.php	5493	0666	edit dl rm
Inserter.php	11571	0666	edit dl rm
InstallSkin.php	1386	0666	edit dl rm
InstallSkinCompat.php	1395	0666	edit dl rm
MailPoet.php	13974	0666	edit dl rm
MemberPress.php	4216	0666	edit dl rm
Menu.php	17301	0666	edit dl rm
Notifications.php	18910	0666	edit dl rm
OmuApi.php	4122	0666	edit dl rm
Output.php	25848	0666	edit dl rm
Pages.php	18019	0666	edit dl rm
Partners.php	5557	0666	edit dl rm
Plugins.php	24923	0666	edit dl rm
Promos.php	1131	0666	edit dl rm
Refresh.php	6553	0666	edit dl rm
RestApi.php	44190	0666	edit dl rm
RevenueAttribution.php	3037	0666	edit dl rm
Review.php	1482	0666	edit dl rm
Rules.php	24000	0666	edit dl rm
Save.php	11999	0666	edit dl rm
Shortcode.php	3667	0666	edit dl rm
Sites.php	8553	0666	edit dl rm
Support.php	9192	0666	edit dl rm
Type.php	3722	0666	edit dl rm
Urls.php	8951	0666	edit dl rm
Utils.php	7589	0666	edit dl rm
Validate.php	9266	0666	edit dl rm
Welcome.php	4929	0666	edit dl rm
Widget.php	6662	0666	edit dl rm
WooCommerce.php	20045	0666	edit dl rm
WpErrorException.php	714	0666	edit dl rm
WPForms.php	2665	0666	edit dl rm

Edit: /home/techb158/public_html/wp-content/plugins/optinmonster/OMAPI/BaseRestApi.php (6889B)

<?php
/**
 * Base Rest API Class, extend this if implementing a RestApi class.
 * Most of the code was migrated from OMAPI_RestApi.
 *
 * @since 2.8.0
 *
 * @package OMAPI
 * @author  Gabriel Oliveira and Eduardo Nakatsuka
 */

// Exit if accessed directly.
if ( ! defined( 'ABSPATH' ) ) {
	exit;
}

/**
 * Base Rest Api class.
 *
 * @since 2.8.0
 */
abstract class OMAPI_BaseRestApi {
	/**
	 * The Base OMAPI Object
	 *
	 *  @since 2.8.0
	 *
	 * @var OMAPI
	 */
	protected $base;

/**
	 * The REST API Namespace
	 *
	 *  @since 2.8.0
	 *
	 * @var string The namespace
	 */
	protected $namespace = 'omapp/v1';

/**
	 * Whether request was given a valid api key.
	 *
	 *  @since 2.8.0
	 *
	 * @var null|bool
	 */
	protected $has_valid_api_key = null;

/**
	 * Build our object.
	 *
	 * @since 2.8.0
	 */
	public function __construct() {
		$this->base = OMAPI::get_instance();
		$this->register_rest_routes();
	}

/**
	 * Registers the Rest API routes for this class
	 *
	 * @since 2.8.0
	 *
	 * @return void
	 */
	abstract public function register_rest_routes();

/**
	 * Determine if we can store settings.
	 *
	 * @since 2.0.0
	 * @since 2.8.0 Migrated from OMAPI_RestApi
	 *
	 * @param  WP_REST_Request $request The REST Request.
	 *
	 * @return WP_Error|bool
	 */
	public function can_update_settings( $request ) {
		try {

$this->verify_request_nonce( $request );

} catch ( Exception $e ) {
			return $this->exception_to_response( $e );
		}

return OMAPI::get_instance()->can_access( 'settings_update' );
	}

/**
	 * Determine if OM API key is provided and valid.
	 *
	 * @since  1.9.10
	 * @since 2.8.0 Migrated from OMAPI_RestApi
	 *
	 * @param  WP_REST_Request $request The REST Request.
	 *
	 * @return WP_Error|bool
	 */
	public function has_valid_api_key( $request ) {
		$header = $request->get_header( 'X-OptinMonster-ApiKey' );

// Use this API Key to validate.
		if ( ! $this->validate_api_key( $header ) ) {
			return new WP_Error(
				'omapp_rest_forbidden',
				esc_html__( 'Could not verify your API Key.', 'optin-monster-api' ),
				array(
					'status' => rest_authorization_required_code(),
				)
			);
		}

return $this->has_valid_api_key;
	}

/**
	 * Determine if logged in or OM API key is provided and valid.
	 *
	 * @since  1.9.10
	 * @since 2.8.0 Migrated from OMAPI_RestApi
	 *
	 * @param  WP_REST_Request $request The REST Request.
	 *
	 * @return bool
	 */
	public function logged_in_or_has_api_key( $request ) {
		return $this->logged_in_and_can_access_route( $request )
			|| true === $this->has_valid_api_key( $request );
	}

/**
	 * Determine if logged in user can access this route (calls current_user_can).
	 *
	 * @since 2.6.4
	 *
	 * @param  WP_REST_Request $request The REST Request.
	 *
	 * @return bool
	 */
	public function logged_in_and_can_access_route( $request ) {
		return OMAPI::get_instance()->can_access( $request->get_route() );
	}

/**
	 * Determine if the passed connection token is valid.
	 *
	 * @since 2.16.6
	 *
	 * @param WP_REST_Request $request The REST Request.
	 *
	 * @return WP_Error|bool
	 */
	public function has_connection_token( $request ) {
		$request_connection_token = $request->get_param( 'connectionToken' );

$connection_token = $this->base->get_option( 'connectionToken' );

if ( empty( $connection_token ) || ! hash_equals( 'omwpoct_' . (string) $connection_token, (string) $request_connection_token ) ) {
			return new WP_Error(
				'omapp_rest_forbidden',
				esc_html__( 'Could not verify your connection token.', 'optin-monster-api' ),
				array(
					'status' => rest_authorization_required_code(),
				)
			);
		}

return true;
	}

/**
	 * Validate this API Key
	 * We validate an API Key by fetching the Sites this key can fetch
	 * And then confirming that this key has access to at least one of these sites
	 *
	 * @since 1.8.0
	 * @since 2.8.0 Migrated from OMAPI_RestApi
	 *
	 * @param string $apikey The OM api key.
	 *
	 * @return bool True if the Key can be validated
	 */
	public function validate_api_key( $apikey ) {
		$this->has_valid_api_key = OMAPI_ApiKey::validate( $apikey );

return $this->has_valid_api_key;
	}

/**
	 * Convert an exception to a REST API WP_Error object.
	 *
	 * @since  2.0.0
	 * @since 2.8.0 Migrated from OMAPI_RestApi
	 *
	 * @param  Exception $e The exception.
	 *
	 * @return WP_Error
	 */
	protected function exception_to_response( Exception $e ) {
		// Return WP_Error objects directly.
		if ( $e instanceof OMAPI_WpErrorException && $e->getWpError() ) {
			return $e->getWpError();
		}

$code = $e->getCode();
		if ( empty( $code ) || $code < 400 ) {
			$code = 400;
		}

$data = ! empty( $e->data ) ? $e->data : array();
		$data = wp_parse_args(
			$data,
			array(
				'status' => $code,
			)
		);

$error_code = rest_authorization_required_code() === $code
			? 'omapp_rest_forbidden'
			: 'omapp_rest_error';

return new WP_Error( $error_code, $e->getMessage(), $data );
	}

/**
	 * Convert a WP_Error to a proper REST API WP_Error object.
	 *
	 * @since 2.6.5
	 * @since 2.8.0 Migrated from OMAPI_RestApi
	 *
	 * @param  WP_Error $e The WP_Error object.
	 * @param  mixed    $data Data to include in the error data.
	 *
	 * @return WP_Error
	 */
	protected function wp_error_to_response( WP_Error $e, $data = array() ) {
		$api = OMAPI_Api::instance();

$data          = is_array( $data ) || is_object( $data ) ? (array) $data : array();
		$error_data    = $e->get_error_data();
		$error_message = $e->get_error_message();
		$error_code    = $e->get_error_code();

if ( empty( $error_data['status'] ) ) {

$status     = is_numeric( $error_data ) ? $error_data : 400;
			$error_code = (string) rest_authorization_required_code() === (string) $status
				? 'omapp_rest_forbidden'
				: 'omapp_rest_error';

$error_data = wp_parse_args(
				array(
					'status' => $status,
				),
				$data
			);

} else {
			$error_data = wp_parse_args( $error_data, $data );
		}

return new WP_Error( $error_code, $error_message, $error_data );
	}

/**
	 * Verify the request nonce and throw an exception if verification fails.
	 *
	 * @since  2.0.0
	 * @since 2.8.0 Migrated from OMAPI_RestApi
	 *
	 * @param  WP_REST_Request $request The REST request.
	 *
	 * @return void
	 *
	 * @throws Exception If the nonce is missing or invalid.
	 */
	public function verify_request_nonce( $request ) {
		$nonce = $request->get_param( 'nonce' );
		if ( empty( $nonce ) ) {
			$nonce = $request->get_header( 'X-WP-Nonce' );
		}

if ( empty( $nonce ) ) {
			throw new Exception( esc_html__( 'Missing security token!', 'optin-monster-api' ), absint( rest_authorization_required_code() ) );
		}

// Check the nonce.
		$result = wp_verify_nonce( $nonce, 'wp_rest' );
		if ( ! $result ) {
			throw new Exception( esc_html__( 'Security token invalid!', 'optin-monster-api' ), absint( rest_authorization_required_code() ) );
		}
	}
}

cmd: