HEX
Server: nginx/1.18.0
System: Linux iZj6c1ieg2jrpk1z5tzi19Z 6.3.9-1.el7.elrepo.x86_64 #1 SMP PREEMPT_DYNAMIC Wed Jun 21 22:18:40 EDT 2023 x86_64
User: www (1001)
PHP: 8.2.4
Disabled: passthru,exec,system,putenv,chroot,chgrp,chown,shell_exec,popen,proc_open,pcntl_exec,ini_alter,ini_restore,dl,openlog,syslog,readlink,symlink,popepassthru,pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wifcontinued,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority,imap_open,apache_setenv
Upload Files
File: /www/wwwroot/www.cytocare.cn/wp-content/plugins/woo-discount-rules/v1/index.php
<?php
if (!defined('ABSPATH')) exit; // Exit if accessed directly

/**
 * Plugin Directory URI.
 */
define('WOO_DISCOUNT_URI', untrailingslashit(plugin_dir_url(__FILE__)));

Class WDRV1Deprecated {

    /**
     * Init events
     * */
    public function init(){
        add_action('admin_menu', array(__CLASS__, 'adminMenu'));
    }

    /**
     * Load admin menu
     * */
    public static function adminMenu(){
        if (!is_admin()) return;
        global $submenu;
        if (isset($submenu['woocommerce'])) {
            add_submenu_page(
                'woocommerce',
                __('Discount Rules', 'woo-discount-rules'),
                __('Discount Rules', 'woo-discount-rules'),
                'manage_woocommerce', 'woo_discount_rules',
                array(__CLASS__, 'loadWDRV1DeprecatedHTML')
            );
        }
    }

    /**
     * Load HTML content
     * */
    public static function loadWDRV1DeprecatedHTML(){
        include_once(__DIR__ . "/menu-html.php");
    }

    /**
     * Create nonce for v1
     * @param int $action
     * @return mixed
     */
    public static function createNonce($action = -1){
        return wp_create_nonce($action);
    }

    /**
     * Verify nonce
     * @param $nonce
     * @param int $action
     * @return bool
     */
    protected static function verifyNonce($nonce, $action = -1 ){
        if (wp_verify_nonce($nonce, $action)){
            return true;
        } else {
            return false;
        }
    }

    /**
     * check valid nonce for v1
     * @param $method
     * @param null $wdr_nonce
     * @return bool
     */
    public static function validateRequest($method, $wdr_nonce = null){
        if($wdr_nonce === null){
			$wdr_nonce = isset($_REQUEST['wdr_nonce']) && !empty($_REQUEST['wdr_nonce']) ? sanitize_text_field(wp_unslash($_REQUEST['wdr_nonce'])) : null; //phpcs:ignore WordPress.Security.NonceVerification.Recommended
            if(!empty($wdr_nonce)){
                if(self::verifyNonce($wdr_nonce, $method)){
                    return true;
                }
            }
        } else {
            if(self::verifyNonce(sanitize_text_field(wp_unslash($wdr_nonce)), $method)){
                return true;
            }
        }

        die(esc_html__('Invalid token', 'woo-discount-rules'));
    }
}

(new WDRV1Deprecated())->init();