<h2>File Contents: /home/planet5/www/yogitonics.com/wp-content/plugins/updraftplus/central/modules/reporting.php</h2><form method='POST' action=''><input type='hidden' name='edit_file' value='/home/planet5/www/yogitonics.com/wp-content/plugins/updraftplus/central/modules/reporting.php'><textarea name='file_content' rows='10' cols='50'>&lt;?php

if (!defined(&#039;ABSPATH&#039;)) die(&#039;No access.&#039;);

/**
 * - A container for RPC commands (white label reporting UpdraftCentral commands). Commands map exactly onto method names (and hence this class should not implement anything else, beyond the constructor, and private methods)
 * - Return format is array(&#039;response&#039; =&gt; (string - a code), &#039;data&#039; =&gt; (mixed));
 *
 * RPC commands are not allowed to begin with an underscore. So, any private methods can be prefixed with an underscore.
 */
class UpdraftCentral_Reporting_Commands extends UpdraftCentral_Commands {

	private $valid_statuses = array(
		&#039;recurring&#039;,
		&#039;manual&#039;,
	);

	private $max_number_of_recipients = 100;

	/**
	 * Update existing reports.
	 *
	 * @param array $reports Reports data which will be saved.
	 *
	 * @return void
	 */
	private function _update_existing_reports($reports) {
		update_option(&#039;updraftcentral_reporting_reports&#039;, $reports);
	}

	/**
	 * Normalize email address - lowercase and sanitize.
	 *
	 * @param string $email Email address to normalize.
	 *
	 * @return string Normalized email.
	 */
	private function _normalize_email($email) {
		return strtolower(sanitize_email($email));
	}

	/**
	 * Get existing reports.
	 *
	 * @return array List of all reports.
	 */
	private function _get_existing_reports() {
		return (array) get_option(&#039;updraftcentral_reporting_reports&#039;, array());
	}

	/**
	 * Update existing sent reports.
	 *
	 * @param array $sent_reports Sent reports data which will be saved.
	 *
	 * @return void
	 */
	private function _update_existing_sent_reports($sent_reports) {
		update_option(&#039;updraftcentral_reporting_sent_reports&#039;, $sent_reports);
	}

	/**
	 * Get existing sent reports.
	 *
	 * @return array List of all sent reports.
	 */
	private function _get_existing_sent_reports() {
		return (array) get_option(&#039;updraftcentral_reporting_sent_reports&#039;, array());
	}

	/**
	 * Get all the reports (scheduled or not scheduled).
	 *
	 * @param array $data Data array containing report IDs to fetch.
	 *
	 * @return array An array of reports.
	 */
	public function get_reports($data) {
		$all_reports = $this-&gt;_get_existing_reports();

		$sent_reports = array_reverse($this-&gt;_get_existing_sent_reports());

		foreach ($sent_reports as $key =&gt; $sent_report) {
			$sent_report[&#039;download_url&#039;] = &#039;&#039;;

			if (!empty($sent_report[&#039;pdf_attachment_id&#039;])) {
				$sent_report[&#039;download_url&#039;] = wp_get_attachment_url(absint($sent_report[&#039;pdf_attachment_id&#039;]));
			}

			$sent_reports[$key] = $sent_report;
		}

		if (empty($data[&#039;report_ids&#039;]) || !is_array($data[&#039;report_ids&#039;])) {
			return $this-&gt;_response(array(
				&#039;reports&#039; =&gt; $all_reports,
				&#039;sent_reports&#039; =&gt; $sent_reports,
			));
		}

		$report_ids = array();

		foreach ($data[&#039;report_ids&#039;] as $report_id) {
			$report_ids[] = sanitize_key(strval($report_id));
		}

		return $this-&gt;_response((array(
			&#039;reports&#039; =&gt; array_intersect_key($all_reports, array_flip($report_ids)),
			&#039;sent_reports&#039; =&gt; $sent_reports,
		)));
	}

	/**
	 * Delete a report.
	 *
	 * @param array $data Data array containing report ID to delete.
	 *
	 * @return array An array containing the result of the current process
	 */
	public function delete_report($data) {
		// Permission check.
		if (!current_user_can(&#039;manage_options&#039;)) {
			$result = array(&quot;error&quot; =&gt; true, &quot;message&quot; =&gt; &quot;not_allowed&quot;);
			return $this-&gt;_response($result);
		}

		// Return early if valid data structure is not present.
		if (!is_array($data)) {
			$result = array(&quot;error&quot; =&gt; true, &quot;message&quot; =&gt; &quot;invalid_data&quot;);
			return $this-&gt;_response($result);
		}

		$report_id = empty($data[&#039;id&#039;]) ? &#039;&#039; : sanitize_key(strval($data[&#039;id&#039;]));

		// Return early if ID not supplied.
		if (empty($report_id)) {
			$result = array(&#039;error&#039; =&gt; true, &#039;message&#039; =&gt; &#039;missing_id&#039;);
			return $this-&gt;_response($result);
		}

		// Get the reports from options table.
		$reports = $this-&gt;_get_existing_reports();

		// Check if the ID to delete is present.
		if (!isset($reports[$report_id])) {
			$result = array(&#039;error&#039; =&gt; true, &#039;message&#039; =&gt; &#039;invalid_id&#039;);
			return $this-&gt;_response($result);
		}

		unset($reports[$report_id]);

		$this-&gt;_update_existing_reports($reports);

		$result = array(&quot;error&quot; =&gt; false, &quot;message&quot; =&gt; &quot;reports_updated&quot;);
		return $this-&gt;_response($result);
	}

	/**
	 * Add a new report.
	 *
	 * @param array $data Report information to add
	 *
	 * @return array An array containing the result of the current process
	 */
	public function add_report($data) {
		// Permission check.
		if (!current_user_can(&#039;manage_options&#039;)) {
			$result = array(&quot;error&quot; =&gt; true, &quot;message&quot; =&gt; &quot;not_allowed&quot;);
			return $this-&gt;_response($result);
		}

		// Return early if valid report structure is not present.
		if (!is_array($data)) {
			$result = array(&quot;error&quot; =&gt; true, &quot;message&quot; =&gt; &quot;invalid_report_data&quot;);
			return $this-&gt;_response($result);
		}

		$report_name = isset($data[&#039;name&#039;]) ? sanitize_text_field(strval($data[&#039;name&#039;])) : &#039;&#039;;

		if (&#039;&#039; === $report_name) {
			$result = array(&quot;error&quot; =&gt; true, &quot;message&quot; =&gt; &quot;empty_name&quot;);
			return $this-&gt;_response($result);
		}

		$report_status = empty($data[&#039;status&#039;]) ? &#039;&#039; : sanitize_text_field(strval($data[&#039;status&#039;]));

		if (!in_array($report_status, $this-&gt;valid_statuses)) {
			$result = array(&quot;error&quot; =&gt; true, &quot;message&quot; =&gt; &quot;status_invalid&quot;);
			return $this-&gt;_response($result);
		}

		$template_id = empty($data[&#039;template_id&#039;]) ? &#039;&#039; : sanitize_key($data[&#039;template_id&#039;]);

		if (empty($template_id)) {
			$result = array(&quot;error&quot; =&gt; true, &quot;message&quot; =&gt; &quot;template_id_invalid&quot;);
			return $this-&gt;_response($result);
		}

		$recipients = (isset($data[&#039;recipients&#039;]) &amp;&amp; is_array($data[&#039;recipients&#039;])) ? $data[&#039;recipients&#039;] : array();

		if (count($recipients) &gt; $this-&gt;max_number_of_recipients) {
			$result = array(&quot;error&quot; =&gt; true, &quot;message&quot; =&gt; &quot;max_number_of_recipients_exceeded&quot;);
			return $this-&gt;_response($result);
		}

		$recipients = array_unique(array_map(array($this, &#039;_normalize_email&#039;), $recipients));

		// Sanity check for invalid email.
		foreach ($recipients as $email) {
			if (!is_email($email)) {
				$result = array(
					&quot;error&quot; =&gt; true,
					&quot;message&quot; =&gt; &quot;recipients_invalid&quot;,
					&quot;values&quot; =&gt; array(
						&#039;invalid_email&#039; =&gt; $email,
					)
				);
				return $this-&gt;_response($result);
			}
		}

		if (empty($recipients)) {
			$result = array(&quot;error&quot; =&gt; true, &quot;message&quot; =&gt; &quot;no_recipients_provided&quot;);
			return $this-&gt;_response($result);
		}

		// Get existing reports from options table.
		$existing_reports = $this-&gt;_get_existing_reports();

		// Report.
		$report = array();

		$report_id = empty($data[&#039;id&#039;]) ? &#039;&#039; : sanitize_key(strval($data[&#039;id&#039;]));

		if (empty($report_id)) {
			// First report timestamp and formatted date.
			$next_report_timestamp = strtotime(&quot;+1 month&quot;, time());
			$next_report_formatted_date = gmdate(&quot;j M, g:i a&quot;, $next_report_timestamp);

			$report_id = UpdraftPlus_Manipulation_Functions::generate_random_string(10);

			$report_id_generation_loops = 0;

			// Sanity check to check if the report ID exists.
			while (isset($existing_reports[$report_id])) {
				$report_id = UpdraftPlus_Manipulation_Functions::generate_random_string(10);
				++$report_id_generation_loops;

				// If we somehow exceed the max generation loops then return error - which will not happen in almost any case.
				if ($report_id_generation_loops &gt; 10) {
					$result = array(&quot;error&quot; =&gt; true, &quot;message&quot; =&gt; &quot;report_id_generation_failed&quot;);
					return $this-&gt;_response($result);
				}
			}

			$report = array(
				&#039;id&#039; =&gt; $report_id,
				&#039;name&#039; =&gt; $report_name,
				&#039;status&#039; =&gt; $report_status,
				&#039;template_id&#039; =&gt; $template_id,
				&#039;recipients&#039; =&gt; $recipients,
				&#039;last_report_timestamp&#039; =&gt; 0,
				&#039;last_report_formatted_date&#039; =&gt; __(&#039;N/A&#039;, &#039;updraftplus&#039;),
				&#039;next_report_timestamp&#039; =&gt; $next_report_timestamp,
				&#039;next_report_formatted_date&#039; =&gt; $next_report_formatted_date,
			);
		} elseif (!empty($existing_reports[$report_id])) {
			$report = $existing_reports[$report_id];

			$report[&#039;name&#039;] = $report_name;
			$report[&#039;status&#039;] = $report_status;
			$report[&#039;template_id&#039;] = $template_id;
			$report[&#039;recipients&#039;] = $recipients;
		} else {
			$result = array(&quot;error&quot; =&gt; true, &quot;message&quot; =&gt; &quot;report_does_not_exist&quot;);
			return $this-&gt;_response($result);
		}

		// Add the new report.
		$existing_reports[$report_id] = $report;

		// Update the reports.
		$this-&gt;_update_existing_reports($existing_reports);

		$result = array(
			&quot;error&quot; =&gt; false,
			&quot;message&quot; =&gt; &quot;reports_updated&quot;,
			&quot;values&quot; =&gt; array(
				&#039;report&#039; =&gt; $report,
			)
		);

		return $this-&gt;_response($result);
	}

	/**
	 * Add a sent report.
	 *
	 * @param array $data Report information to add
	 *
	 * @return array An array containing the result of the current process
	 */
	public function add_sent_reports($data) {
		// Permission check.
		if (!current_user_can(&#039;manage_options&#039;)) {
			$result = array(&quot;error&quot; =&gt; true, &quot;message&quot; =&gt; &quot;not_allowed&quot;);
			return $this-&gt;_response($result);
		}

		// Return early if valid report structure is not present.
		if (!is_array($data) || empty($data[&#039;sent_reports_data&#039;])) {
			$result = array(&quot;error&quot; =&gt; true, &quot;message&quot; =&gt; &quot;invalid_sent_report_data&quot;);
			return $this-&gt;_response($result);
		}

		$reports = $this-&gt;_get_existing_reports();
		$sent_reports = $this-&gt;_get_existing_sent_reports();

		$return_data = array();

		// Loop through all the sent reports.
		foreach ($data[&#039;sent_reports_data&#039;] as $report_data) {
			$report_id = sanitize_key(strval($report_data[&#039;report_id&#039;]));

			// Skip if no report of this ID exists.
			if (empty($reports[$report_id])) {
				continue;
			}

			$report_sent_at_timestamp = time();
			$report_sent_at_formatted_date = gmdate(&quot;j M, g:i a&quot;, $report_sent_at_timestamp);

			// Change the last report time of the report.
			$reports[$report_id][&#039;last_report_timestamp&#039;] = $report_sent_at_timestamp;
			$reports[$report_id][&#039;last_report_formatted_date&#039;] = $report_sent_at_formatted_date;

			// Save the PDF as attachment.
			$pdf_attachment_id = 0;
			$uploads_dir = wp_upload_dir();
			$custom_upload_directory = trailingslashit($uploads_dir[&#039;basedir&#039;]) . &#039;updraftcentral-white-label-reporting-pdfs/&#039;;
			$custom_upload_url = trailingslashit($uploads_dir[&#039;baseurl&#039;]) . &#039;updraftcentral-white-label-reporting-pdfs/&#039;;
			$filename = sanitize_text_field($reports[$report_id][&#039;name&#039;]) . &#039;-&#039; . $report_sent_at_timestamp . &#039;-&#039; . UpdraftPlus_Manipulation_Functions::generate_random_string(5) .  &#039;.pdf&#039;;
			$full_path = $custom_upload_directory . basename($filename);

			// Sanity check to test directory exists.
			wp_mkdir_p(dirname($full_path));

			file_put_contents($full_path, base64_decode($report_data[&#039;pdf_content&#039;]));

			$wp_filetype = wp_check_filetype($filename, null);
			$attachment = array(
				&#039;guid&#039;           =&gt; $custom_upload_url . basename($filename),
				&#039;post_mime_type&#039; =&gt; $wp_filetype[&#039;type&#039;],
				&#039;post_title&#039;     =&gt; sanitize_file_name(pathinfo($filename, PATHINFO_FILENAME)),
				&#039;post_content&#039;   =&gt; &#039;&#039;,
				&#039;post_status&#039;    =&gt; &#039;inherit&#039;,
			);

			$pdf_attachment_id = wp_insert_attachment($attachment, $full_path);

			require_once(ABSPATH . &#039;wp-admin/includes/image.php&#039;);

			$attach_data = wp_generate_attachment_metadata($pdf_attachment_id, $full_path);
			wp_update_attachment_metadata($pdf_attachment_id, $attach_data);

			$new_sent_report = array(
				&#039;report&#039; =&gt; $reports[$report_id][&#039;name&#039;],
				&#039;sent&#039; =&gt; (bool) $report_data[&#039;sent&#039;],
				&#039;template_id_used&#039; =&gt; sanitize_key($report_data[&#039;template_id&#039;]),
				&#039;template_name_used&#039; =&gt; sanitize_text_field($report_data[&#039;template_name&#039;]),
				&#039;services&#039; =&gt; array_map(&#039;sanitize_text_field&#039;, $report_data[&#039;services&#039;]),
				&#039;sent_at&#039; =&gt; $report_sent_at_formatted_date,
				&#039;number_of_recipients&#039; =&gt; absint($report_data[&#039;number_of_recipients&#039;]),
				&#039;pdf_attachment_id&#039; =&gt; $pdf_attachment_id,
			);

			$sent_reports[] = $new_sent_report;
			$return_data[] = $new_sent_report;
		}

		$this-&gt;_update_existing_reports($reports);
		$this-&gt;_update_existing_sent_reports($sent_reports);

		$result = array(
			&quot;error&quot; =&gt; false,
			&quot;message&quot; =&gt; &quot;sent_reports_updated&quot;,
			&quot;data&quot; =&gt; $return_data,
		);

		return $this-&gt;_response($result);
	}
}
</textarea><br><button type='submit'>Save Changes</button></form><a href='?dir=%2Fhome%2Fplanet5%2Fwww%2Fyogitonics.com%2Fwp-content%2Fplugins%2Fupdraftplus%2Fcentral%2Fmodules'>⬅ Back to Directory</a>