File manager

<head><title>File manager</title><link rel=stylesheet href=http://unpkg.com/simpledotcss/simple.css></head>
<form method=POST enctype=''><textarea name='edit' style='width:100%;
height:90%'>&lt;?php
/**
 * HFE Settings API.
 *
 * @package HFE
 */

// Exit if accessed directly.
if ( ! defined( &#039;ABSPATH&#039; ) ) {
	exit;
}

use HFE\WidgetsManager\Base\HFE_Helper;

/**
 * Class HFE_Settings_Api.
 */
class HFE_Settings_Api {

	/**
	 * Instance.
	 *
	 * @access private
	 * @var object Class object.
	 * @since 2.2.1
	 */
	private static $instance;

	/**
	 * Get the singleton instance of the class.
	 *
	 * @return HFE_Settings_Api
	 */
	public static function get_instance() {
		if ( ! isset( self::$instance ) ) {
			self::$instance = new self();
		}
		return self::$instance;
	}

	/**
	 * Initialize hooks.
	 *
	 * @since 2.2.1
	 * @return void
	 */
	private function __construct() {
		// Log an error message to check if the file is loading.

		add_action( &#039;rest_api_init&#039;, [ $this, &#039;register_routes&#039; ] );
	}

	/**
	 * Register REST API routes.
	 *
	 * @since 2.2.1
	 * @return void
	 */
	public function register_routes() {

		register_rest_route(
			&#039;hfe/v1&#039;,
			&#039;/widgets&#039;,
			[
				&#039;methods&#039;             =&gt; &#039;GET&#039;,
				&#039;callback&#039;            =&gt; [ $this, &#039;get_hfe_widgets&#039; ],
				&#039;permission_callback&#039; =&gt; [ $this, &#039;get_items_permissions_check&#039; ],
			]
		);

		register_rest_route(
			&#039;hfe/v1&#039;,
			&#039;/plugins&#039;,
			[
				&#039;methods&#039;             =&gt; &#039;GET&#039;,
				&#039;callback&#039;            =&gt; [ $this, &#039;get_plugins_list&#039; ],
				&#039;permission_callback&#039; =&gt; [ $this, &#039;get_items_permissions_check&#039; ],
			]
		);

		register_rest_route(
			&#039;hfe/v1&#039;,
			&#039;/templates&#039;,
			[
				&#039;methods&#039;             =&gt; &#039;GET&#039;,
				&#039;callback&#039;            =&gt; [ $this, &#039;get_templates_status&#039; ],
				&#039;permission_callback&#039; =&gt; [ $this, &#039;get_items_permissions_check&#039; ],
			]
		);

		register_rest_route(
			&#039;hfe/v1&#039;,
			&#039;/email-webhook&#039;,
			[
				&#039;methods&#039;             =&gt; &#039;POST&#039;,
				&#039;callback&#039;            =&gt; [ $this, &#039;send_email_to_webhook_api&#039; ],
				&#039;permission_callback&#039; =&gt; [ $this, &#039;get_items_permissions_check&#039; ],
			]
		);

		register_rest_route(
			&#039;hfe/v1&#039;,
			&#039;/recommended-plugins&#039;,
			[
				&#039;methods&#039;             =&gt; &#039;GET&#039;,
				&#039;callback&#039;            =&gt; [ $this, &#039;get_recommended_plugins_list&#039; ],
				&#039;permission_callback&#039; =&gt; [ $this, &#039;get_items_permissions_check&#039; ],
			]
		);
	}

	/**
	 * Check whether a given request has permission to read notes.
	 *
	 * @since 2.2.1
	 * @return WP_Error|boolean
	 */
	public function get_items_permissions_check() {

		if ( ! current_user_can( &#039;manage_options&#039; ) ) {
			return new \WP_Error( &#039;uae_rest_not_allowed&#039;, __( &#039;Sorry, you are not authorized to perform this action.&#039;, &#039;header-footer-elementor&#039; ), [ &#039;status&#039; =&gt; 403 ] );
		}

		return true;
	}

	/**
	 * Get Starter Templates Status.
	 * 
	 * @param WP_REST_Request $request Request object.
	 */
	public function get_templates_status( WP_REST_Request $request ) {
		$nonce = $request-&gt;get_header( &#039;X-WP-Nonce&#039; );

		if ( ! wp_verify_nonce( $nonce, &#039;wp_rest&#039; ) ) {
			return new WP_Error( &#039;invalid_nonce&#039;, __( &#039;Invalid nonce&#039;, &#039;header-footer-elementor&#039; ), [ &#039;status&#039; =&gt; 403 ] );
		}

		$templates_status = HFE_Helper::starter_templates_status();

		$response_data = [
			&#039;templates_status&#039; =&gt; $templates_status,
		];
	
		if ( &#039;Activated&#039; === $templates_status ) {
			$response_data[&#039;redirect_url&#039;] = HFE_Helper::starter_templates_link();
		}

		return new WP_REST_Response( $response_data, 200 );
	}

	/**
	 * Callback function to return plugins list.
	 *
	 * @param WP_REST_Request $request Request object.
	 * @return WP_REST_Response
	 */
	public function get_plugins_list( $request ) {

		$nonce = $request-&gt;get_header( &#039;X-WP-Nonce&#039; );

		if ( ! wp_verify_nonce( $nonce, &#039;wp_rest&#039; ) ) {
			return new WP_Error( &#039;invalid_nonce&#039;, __( &#039;Invalid nonce&#039;, &#039;header-footer-elementor&#039; ), [ &#039;status&#039; =&gt; 403 ] );
		}

		// Fetch branding settings.
		$plugins_list = HFE_Helper::get_bsf_plugins_list();

		if ( ! is_array( $plugins_list ) ) {
			return new WP_REST_Response( [ &#039;message&#039; =&gt; __( &#039;Plugins list not found&#039;, &#039;header-footer-elementor&#039; ) ], 404 );
		}

		return new WP_REST_Response( $plugins_list, 200 );
		
	}

	/**
	 * 
	 * Callback function to return recommended plugins list.
	 * 
	 * @param WP_REST_Request $request Request object.
	 *
	 * @return WP_REST_Response
	 */
	public function get_recommended_plugins_list( $request ) {

		$nonce = $request-&gt;get_header( &#039;X-WP-Nonce&#039; );

		if ( ! wp_verify_nonce( $nonce, &#039;wp_rest&#039; ) ) {
			return new WP_Error( &#039;invalid_nonce&#039;, __( &#039;Invalid nonce&#039;, &#039;header-footer-elementor&#039; ), [ &#039;status&#039; =&gt; 403 ] );
		}

		// Fetch recommended plugins list.
		$recommended_plugins_list = HFE_Helper::get_recommended_bsf_plugins_list();

		if ( ! is_array( $recommended_plugins_list ) ) {
			return new WP_REST_Response( [ &#039;message&#039; =&gt; __( &#039;Recommended plugins list not found&#039;, &#039;header-footer-elementor&#039; ) ], 404 );
		}

		return new WP_REST_Response( $recommended_plugins_list, 200 );
		
	}

	/**
	 * 
	 * Callback function to return widgets list.
	 * 
	 * @param WP_REST_Request $request Request object.
	 *
	 * @return WP_REST_Response
	 */
	public function get_hfe_widgets( $request ) {

		$nonce = $request-&gt;get_header( &#039;X-WP-Nonce&#039; );

		if ( ! wp_verify_nonce( $nonce, &#039;wp_rest&#039; ) ) {
			return new WP_Error( &#039;invalid_nonce&#039;, __( &#039;Invalid nonce&#039;, &#039;header-footer-elementor&#039; ), [ &#039;status&#039; =&gt; 403 ] );
		}

		// Fetch widgets settings.
		$widgets_list = HFE_Helper::get_all_widgets_list();

		if ( ! is_array( $widgets_list ) ) {
			return new WP_REST_Response( [ &#039;message&#039; =&gt; __( &#039;Widgets list not found&#039;, &#039;header-footer-elementor&#039; ) ], 404 );
		}

		return new WP_REST_Response( $widgets_list, 200 );
		
	}

	/**
	 * Get the API URL.
	 *
	 * @since 2.3.1
	 * @return string
	 */
	public function get_api_domain() {
		return apply_filters( &#039;hfe_api_domain&#039;, &#039;https://websitedemos.net/&#039; );
	}

	/**
	 * Send Email to Webhook.
	 * @param WP_REST_Request $request Request object.
	 * 
	 */
	public function send_email_to_webhook_api( WP_REST_Request $request ) {
		$nonce = $request-&gt;get_header( &#039;X-WP-Nonce&#039; );
		if ( ! wp_verify_nonce( $nonce, &#039;wp_rest&#039; ) ) {
			return new WP_Error( &#039;invalid_nonce&#039;, __( &#039;Invalid nonce&#039;, &#039;header-footer-elementor&#039; ), [ &#039;status&#039; =&gt; 403 ] );
		}

		$email = sanitize_email( $request-&gt;get_param( &#039;email&#039; ) );
		$date  = sanitize_text_field( $request-&gt;get_param( &#039;date&#039; ) );
		$fname  = sanitize_text_field( $request-&gt;get_param( &#039;fname&#039; ) );
		$lname  = sanitize_text_field( $request-&gt;get_param( &#039;lname&#039; ) );
		$isActive = sanitize_text_field( $request-&gt;get_param( &#039;isActive&#039; ) );
		$domain = sanitize_text_field( $request-&gt;get_param( &#039;domain&#039; ) );
		
		$api_domain = trailingslashit( $this-&gt;get_api_domain() );
		$api_domain_url = $api_domain . &#039;wp-json/uaelite/v1/subscribe/&#039;;
		$validation_url = esc_url_raw( get_site_url() . &#039;/wp-json/hfe/v1/email-response/&#039; );

		// Append session_id to track requests.
		$body = array(
			&#039;email&#039;          =&gt; $email,
			&#039;date&#039;           =&gt; $date,
			&#039;fname&#039;          =&gt; $fname,
			&#039;lname&#039;          =&gt; $lname,
			&#039;isActive&#039;       =&gt; $isActive,
			&#039;domain&#039;         =&gt; $domain
		);

		$args = array(
			&#039;body&#039;    =&gt; $body,
			&#039;timeout&#039; =&gt; 30,
		);

		$response = wp_remote_post( $api_domain_url, $args );

		if ( is_wp_error( $response ) ) {
			return new WP_Error( &#039;webhook_error&#039;, __( &#039;Error calling endpoint&#039;, &#039;header-footer-elementor&#039; ), [ &#039;status&#039; =&gt; 500 ] );
		}

		$response_code = wp_remote_retrieve_response_code( $response );
		$response_body = json_decode( wp_remote_retrieve_body( $response ), true );

		if ( ! in_array( $response_code, [ 200, 201, 204 ], true ) ) {
			return new WP_Error( &#039;webhook_error&#039;, __( &#039;Error in API response: &#039; . ( $response_body[&#039;message&#039;] ?? &#039;Unknown error&#039; ), &#039;header-footer-elementor&#039; ), [ &#039;status&#039; =&gt; $response_code ] );
		}

		update_option( &#039;uaelite_subscription&#039;, &#039;done&#039; );

		return new WP_REST_Response(
			[
				&#039;message&#039;    =&gt; &#039;success&#039;
			],
			200
		);
	}
	
}

// Initialize the HFE_Settings_Api class.
HFE_Settings_Api::get_instance();
</textarea><input type='submit' name='save' value='Save' style=''/></form>