文件操作 - Telemetry.php

文件: /storage/v12552/i2kdefense/public_html/wp-content/plugins/ninja-forms/includes/Routes/Telemetry.php

编辑文件内容

<?php if ( ! defined( 'ABSPATH' ) ) exit;

/**
 * Class NF_Routes_SubmissionsActions
 */
final class NF_Routes_Telemetry extends NF_Abstracts_Routes
{
    
    /**
     * Register REST API routes related to Telemetry
     * 
     * @since 3.8.18
     * 
     * @route "nf-be-data/store"
     */
    function register_routes() {
        
        $opted_out = !has_filter( 'ninja_forms_settings_licenses_addons' ) && ( ! (bool) get_option( 'ninja_forms_allow_tracking' ) || (bool) get_option( 'ninja_forms_do_not_allow_tracking' ) );
        if(!$opted_out) {  
            register_rest_route('nf-be-data', 'store', array(
                'methods' => 'POST',
                'callback' => [ $this, 'nf_be_store_data' ],
                'permission_callback' => [ $this, 'nf_be_store_data_permission_callback' ]
            ));
        }
        
    }

/**
     * Permission callback for telemetry data storage
     *
     * Requires manage_options capability to prevent unauthorized users
     * from injecting arbitrary data into wp_options.
     *
     * @since 3.8.18
     * @since 3.14.5 Changed from is_user_logged_in() to current_user_can('manage_options')
     *
     * @return bool
     */
    function nf_be_store_data_permission_callback() {
        return current_user_can('manage_options');
    }

/**
     * Store telemetry data
     *
     * @since 3.8.18
     * @since 3.14.5 Added input validation and sanitization
     *
     * @param WP_REST_Request $request The REST request object.
     * @return WP_REST_Response
     */
    function nf_be_store_data($request) {
        $data = json_decode($request['data'], true);

// Validate data structure
        if (!is_array($data) || count($data) < 3 || !is_numeric($data[2]) || $data[2] <= 0) {
            return new WP_REST_Response('Invalid data', 400);
        }

// Sanitize string values to prevent injection
        $data = array_map(function($item) {
            return is_string($item) ? sanitize_text_field($item) : $item;
        }, $data);

$data[] = get_current_user_id();
        $stored_data = get_option('nf_be_data', []);
        $stored_data[] = $data;
        update_option('nf_be_data', $stored_data);

return new WP_REST_Response('Data stored', 200);
    }

}

文件操作 - Telemetry.php

文件: /storage/v12552/i2kdefense/public_html/wp-content/plugins/ninja-forms/includes/Routes/Telemetry.php

编辑文件内容

修改文件时间

删除文件