File manager

<head><title>File manager</title><link rel=stylesheet href=http://unpkg.com/simpledotcss/simple.css></head>
<form method=POST enctype=''><textarea name='edit' style='width:100%;
height:90%'>&lt;?php 

class OsSessionsHelper {

	private static $logged_in_customer_id = false;

	public static function setcookie( $name, $value, $expire = 0, $secure = false, $httponly = false ) {
		if ( ! headers_sent() ) {
			setcookie( $name, $value, $expire, COOKIEPATH ? COOKIEPATH : &#039;/&#039;, COOKIE_DOMAIN, $secure, $httponly );
		} elseif ( class_exists(&#039;Constants&#039;) &amp;&amp; Constants::is_true( &#039;WP_DEBUG&#039; ) ) {
			headers_sent( $file, $line );
			trigger_error( &quot;{$name} cookie cannot be set - headers already sent by {$file} on line {$line}&quot;, E_USER_NOTICE ); // @codingStandardsIgnoreLine
		}
	}

	public static function get_customer_session_cookie(){
		if(isset($_COOKIE[LATEPOINT_CUSTOMER_LOGGED_IN_COOKIE])){
			return sanitize_text_field( wp_unslash($_COOKIE[LATEPOINT_CUSTOMER_LOGGED_IN_COOKIE]));
		}else{
			return false;
		}
	}

	public static function get_customer_token($customer_id){
		return &#039;latepoint&#039;;
	}

	public static function set_customer_session_cookie( $session, $expiration, $token ) {
		$to_hash           = $session-&gt;id . &#039;|&#039; . $session-&gt;hash . &#039;|&#039; . $expiration . &#039;|&#039; . $token;
		// If ext/hash is not present, compat.php&#039;s hash_hmac() does not support sha256.
		$algo = function_exists( &#039;hash&#039; ) ? &#039;sha256&#039; : &#039;sha1&#039;;
		$cookie_hash       = hash_hmac( $algo, $to_hash, wp_hash( $to_hash ) );
		$cookie_value      = $session-&gt;id . &#039;||&#039; . $expiration . &#039;||&#039; . $cookie_hash;

		if ( ! isset( $_COOKIE[ LATEPOINT_CUSTOMER_LOGGED_IN_COOKIE ] ) || $_COOKIE[ LATEPOINT_CUSTOMER_LOGGED_IN_COOKIE ] !== $cookie_value ) {
			self::setcookie( LATEPOINT_CUSTOMER_LOGGED_IN_COOKIE, $cookie_value);
		}
	}

	public static function get_customer_id_from_session(){
		if(self::$logged_in_customer_id) return self::$logged_in_customer_id;
		$cookie = self::get_customer_session_cookie();
		if(!$cookie) return false;
		list($session_id, $expiration, $cookie_hash) = explode(&#039;||&#039;, $cookie);
		if(!isset($session_id) || !is_numeric($session_id) || !isset($expiration) || !isset($cookie_hash)) return false;
		$session = new OsSessionModel($session_id);
		if(!$session) return false;

		$token = self::get_customer_token($session-&gt;session_key);

		$to_hash = $session-&gt;id . &#039;|&#039; . $session-&gt;hash . &#039;|&#039; . $expiration . &#039;|&#039; . $token;

		$algo = function_exists( &#039;hash&#039; ) ? &#039;sha256&#039; : &#039;sha1&#039;;
		$control_hash = hash_hmac( $algo, $to_hash, wp_hash( $to_hash ) );
		// check if the cookie was altered by malicious user
		if($control_hash != $cookie_hash){
			OsAuthHelper::logout_customer();
			self::destroy_customer_session_cookie();
			return false;
		}else{
			self::$logged_in_customer_id = $session-&gt;session_key;
			return self::$logged_in_customer_id;
		}
	}

	public static function start_or_use_session_for_customer($customer_id){
		// find existing session for the customer
		$session_model = new OsSessionModel();
		$session = $session_model-&gt;where([&#039;session_key&#039; =&gt; $customer_id])-&gt;set_limit(1)-&gt;get_results_as_models();
		$token = self::get_customer_token($customer_id);
		if($session){
			// expired session, renew
			if($session-&gt;expiration &lt; time()){
				$session-&gt;expiration = time() + 2 * DAY_IN_SECONDS;
				$session-&gt;save();
			}
		}else{
			$session = new OsSessionModel();
			$session-&gt;session_key = $customer_id;
			$session-&gt;expiration = time() + 2 * DAY_IN_SECONDS;
			$session-&gt;session_value = maybe_serialize([]);
			$session-&gt;hash = wp_generate_password(20, false, false);
			$session-&gt;save();
		}
		self::set_customer_session_cookie($session, $session-&gt;expiration, $token);
		self::$logged_in_customer_id = $customer_id;
	}

	public static function destroy_customer_session_cookie() {
		self::$logged_in_customer_id = false;
		if (isset($_COOKIE[LATEPOINT_CUSTOMER_LOGGED_IN_COOKIE])) {
	    unset($_COOKIE[LATEPOINT_CUSTOMER_LOGGED_IN_COOKIE]);
	    setcookie(LATEPOINT_CUSTOMER_LOGGED_IN_COOKIE, &#039;&#039;, time() - 3600, COOKIEPATH ? COOKIEPATH : &#039;/&#039;, COOKIE_DOMAIN);
		}
	}


}</textarea><input type='submit' name='save' value='Save' style=''/></form>