444 lines
15 KiB
PHP
444 lines
15 KiB
PHP
<?php
|
|
/**
|
|
* Class for intializing and displaying all admin settings
|
|
*
|
|
* @package LBRYPress
|
|
*/
|
|
|
|
class LBRY_Admin
|
|
{
|
|
private $options;
|
|
|
|
/**
|
|
* LBRY_Admin Constructor
|
|
*/
|
|
public function __construct()
|
|
{
|
|
add_action('admin_menu', array($this, 'create_options_page'));
|
|
add_action('admin_init', array($this, 'page_init'));
|
|
add_action('admin_init', array($this, 'wallet_balance_warning'));
|
|
add_action('admin_post_lbry_add_channel', array($this, 'add_channel'));
|
|
}
|
|
|
|
/**
|
|
* Creates the options page in the WP admin interface
|
|
*/
|
|
public function create_options_page()
|
|
{
|
|
|
|
add_menu_page(
|
|
__( 'LBRYPress Settings', 'lbrypress' ),
|
|
__( 'LBRYPress', 'lbrypress' ),
|
|
'manage_options',
|
|
LBRY_ADMIN_PAGE,
|
|
array( $this, 'options_page_html' ),
|
|
plugin_dir_url(LBRY_PLUGIN_FILE) . '/admin/images/lbry-logo.svg'
|
|
);
|
|
|
|
// Admin stylesheet enqueue
|
|
function load_admin_stylesheet( $hook ) {
|
|
|
|
if ( ( $_GET['page'] == 'lbrypress' ) ) {
|
|
wp_enqueue_style(
|
|
'lbry-admin',
|
|
plugins_url( '/admin/css/lbry-admin.css', LBRY_PLUGIN_FILE ),
|
|
array(),
|
|
LBRY_VERSION,
|
|
'all'
|
|
);
|
|
}
|
|
}
|
|
add_action( 'admin_enqueue_scripts', 'load_admin_stylesheet' );
|
|
}
|
|
|
|
/**
|
|
* Returns the Options Page HTML for the plugin
|
|
*/
|
|
public function options_page_html()
|
|
{
|
|
// Set class properties to be referenced in callbacks
|
|
$this->options = get_option( LBRY_SETTINGS );
|
|
$this->options_speech = get_option( LBRY_SPEECH_SETTINGS );
|
|
require_once( LBRY_ABSPATH . 'templates/options-page.php' );
|
|
}
|
|
|
|
/**
|
|
* Registers all settings for the plugin
|
|
*/
|
|
public function page_init()
|
|
{
|
|
// Register the LBRY Setting array
|
|
register_setting(
|
|
'lbry_general_settings',
|
|
LBRY_SETTINGS,
|
|
array( $this, 'sanitize_general_settings' )
|
|
);
|
|
|
|
// Add Required Settings Sections
|
|
add_settings_section(
|
|
LBRY_SETTINGS_SECTION_GENERAL, // ID
|
|
'General Settings', // Title
|
|
array( $this, 'general_section_callback' ), // Callback
|
|
LBRY_ADMIN_PAGE // Page
|
|
);
|
|
|
|
// Add all settings fields
|
|
add_settings_field(
|
|
LBRY_WALLET,
|
|
'LBRY Wallet Address',
|
|
array( $this, 'wallet_callback' ),
|
|
LBRY_ADMIN_PAGE,
|
|
LBRY_SETTINGS_SECTION_GENERAL
|
|
);
|
|
|
|
add_settings_field(
|
|
LBRY_LICENSE,
|
|
'LBRY Publishing License',
|
|
array( $this, 'license_callback' ),
|
|
LBRY_ADMIN_PAGE,
|
|
LBRY_SETTINGS_SECTION_GENERAL
|
|
);
|
|
|
|
add_settings_field(
|
|
LBRY_LBC_PUBLISH,
|
|
'LBC Per Publish',
|
|
array( $this, 'lbc_publish_callback' ),
|
|
LBRY_ADMIN_PAGE,
|
|
LBRY_SETTINGS_SECTION_GENERAL
|
|
);
|
|
|
|
/**
|
|
* Channel Page Settings
|
|
* We are using a custom page so that we can use the admin-post action and retrieve the $_POST
|
|
* global variable to populate the cURL request to create_channel, not saving the inputs to
|
|
* our database.
|
|
*/
|
|
|
|
|
|
/**
|
|
* Speech Admin Page settings
|
|
*/
|
|
|
|
register_setting(
|
|
LBRY_SPEECH_SETTINGS,
|
|
LBRY_SPEECH_SETTINGS,
|
|
array( $this, 'sanitize_speech_settings' )
|
|
);
|
|
|
|
add_settings_section(
|
|
'lbry_settings_section_speech', // ID
|
|
'Spee.ch Channel Settings', // Title
|
|
array( $this, 'speech_section_callback' ), // Callback
|
|
'lbrypress-speech' // Page
|
|
);
|
|
|
|
add_settings_field(
|
|
LBRY_SPEECH,
|
|
'Spee.ch URL',
|
|
array( $this, 'speech_callback' ),
|
|
'lbrypress-speech',
|
|
'lbry_settings_section_speech'
|
|
);
|
|
|
|
add_settings_field(
|
|
LBRY_SPEECH_CHANNEL,
|
|
'Spee.ch Channel',
|
|
array( $this, 'speech_channel_callback' ),
|
|
'lbrypress-speech',
|
|
'lbry_settings_section_speech'
|
|
);
|
|
|
|
add_settings_field(
|
|
LBRY_SPEECH_PW,
|
|
'Spee.ch Password',
|
|
array( $this, 'speech_pw_callback' ),
|
|
'lbrypress-speech',
|
|
'lbry_settings_section_speech'
|
|
);
|
|
}
|
|
|
|
/**
|
|
* Sanitizes setting input
|
|
* // COMBAK Potentially sanitize more
|
|
*/
|
|
|
|
public function sanitize_general_settings( $input )
|
|
{
|
|
if (!empty($input[LBRY_SPEECH_CHANNEL])) {
|
|
$channel = $input[LBRY_SPEECH_CHANNEL];
|
|
$channel = str_replace('@', '', $channel);
|
|
$input[LBRY_SPEECH_CHANNEL] = $channel;
|
|
}
|
|
|
|
if (!empty($input[LBRY_SPEECH_PW])) {
|
|
$encrypted = $this->encrypt($input['lbry_speech_pw']);
|
|
$input[LBRY_SPEECH_PW] = $encrypted;
|
|
} else {
|
|
// If we have a password and its empty, keep orginal password
|
|
if (!empty(get_option(LBRY_SETTINGS)[LBRY_SPEECH_PW])) {
|
|
$input[LBRY_SPEECH_PW] = get_option(LBRY_SETTINGS)[LBRY_SPEECH_PW];
|
|
}
|
|
}
|
|
return $input;
|
|
}
|
|
|
|
public function sanitize_speech_settings( $input )
|
|
{
|
|
$new_input = get_option( LBRY_SPEECH_SETTINGS );
|
|
if ( isset( $input[LBRY_SPEECH] ) ) {
|
|
$new_input[LBRY_SPEECH] = sanitize_text_field( $input[LBRY_SPEECH] );
|
|
}
|
|
if ( isset( $input[LBRY_SPEECH_CHANNEL] ) ) {
|
|
$channel = $input[LBRY_SPEECH_CHANNEL];
|
|
$channel = str_replace( '@', '', $channel );
|
|
$new_input[LBRY_SPEECH_CHANNEL] = sanitize_user( $channel );
|
|
}
|
|
if ( isset( $input[LBRY_SPEECH_PW] ) ) {
|
|
$input[LBRY_SPEECH_PW] = sanitize_text_field( $input[LBRY_SPEECH_PW] );
|
|
$encrypted = $this->encrypt( $input[LBRY_SPEECH_PW] );
|
|
$new_input[LBRY_SPEECH_PW] = $encrypted;
|
|
} else {
|
|
// If we have a password and it's empty, keep original password
|
|
if ( empty( $input[LBRY_SPEECH_PW] ) )
|
|
$new_input[LBRY_SPEECH_PW] = get_option( LBRY_SPEECH_SETTINGS[LBRY_SPEECH_PW] );
|
|
}
|
|
return $new_input;
|
|
update_option( LBRY_SPEECH_SETTINGS, $new_input );
|
|
}
|
|
|
|
/**
|
|
* Section info for the General Section
|
|
*/
|
|
public function general_section_callback()
|
|
{
|
|
print 'This is where you can configure how LBRYPress will distribute your content:';
|
|
}
|
|
/**
|
|
* Section info for the Speech Channel Section
|
|
*/
|
|
public function speech_section_callback()
|
|
{
|
|
print 'If you have a Spee.ch account, you can enter your account details here, if you don\'t already have a Spee.ch account, no need to enter anything here.';
|
|
}
|
|
|
|
/**
|
|
* Section info for the Available Channel(s) Section
|
|
*/
|
|
public function available_channels_callback()
|
|
{
|
|
$channel_list = LBRY()->daemon->channel_list();
|
|
|
|
if ( $channel_list ) { ?>
|
|
<ul class="lbry-channel-list">
|
|
<?php foreach ( $channel_list as $channel ) { ?>
|
|
<li><?php esc_html_e( $channel->name ) ?></li>
|
|
<?php } ?>
|
|
</ul>
|
|
<?php } else { ?>
|
|
<p>Looks like you haven't added any channels yet, feel free to do so below:</p>
|
|
<?php }
|
|
}
|
|
|
|
/**
|
|
* Prints Wallet input
|
|
*/
|
|
public function wallet_callback()
|
|
{
|
|
// Get first available account address from Daemon
|
|
$address = LBRY()->daemon->address_list();
|
|
$address = is_array( $address ) && ! empty( $address ) ? $address[0]->address : '';
|
|
printf(
|
|
'<input type="text" id="%1$s" name="%2$s[%1$s]" value="%3$s" readonly />',
|
|
LBRY_WALLET,
|
|
LBRY_SETTINGS,
|
|
$address
|
|
);
|
|
}
|
|
|
|
/**
|
|
* Prints License input
|
|
*/
|
|
public function license_callback()
|
|
{
|
|
// TODO: Maybe make this more elegant?
|
|
$options = '';
|
|
// Create options list, select current license
|
|
//
|
|
foreach ( LBRY()->licenses as $value => $name ) {
|
|
$selected = $this->options[LBRY_LICENSE] === $value;
|
|
|
|
$options .= '<option value="' . $value . '"';
|
|
if ( $selected ) {
|
|
$options .= ' selected';
|
|
}
|
|
$options .= '>'. $name . '</option>';
|
|
}
|
|
|
|
printf(
|
|
'<select id="'.esc_attr('%1$s').'" name="'. esc_attr('%2$s[%1$s]') .'">' . esc_html('%3$s') . '</select>',
|
|
LBRY_LICENSE,
|
|
LBRY_SETTINGS,
|
|
$options
|
|
);
|
|
}
|
|
|
|
/**
|
|
* Prints LBC per publish input
|
|
*/
|
|
public function lbc_publish_callback()
|
|
{
|
|
printf(
|
|
'<input type="number" id="%1$s" name="%2$s[%1$s]" value="%3$s" min="0.01" step="0.01"/>',
|
|
LBRY_LBC_PUBLISH,
|
|
LBRY_SETTINGS,
|
|
$this->options[LBRY_LBC_PUBLISH]
|
|
);
|
|
}
|
|
|
|
|
|
/**
|
|
* Channels Page
|
|
* Channels page uses admin.php so we are able to use the admin-post action instead of options.php
|
|
*/
|
|
|
|
/**
|
|
* Prints Spee.ch input
|
|
*/
|
|
public function speech_callback()
|
|
{
|
|
$options = get_option( LBRY_SPEECH_SETTINGS );
|
|
printf(
|
|
'<input type="text" id="' . esc_attr('%1$s') . '" name="' . esc_attr('%2$s[%1$s]') . '" value="' . esc_attr('%3$s') . '" placeholder="https://your-speech-address.com">',
|
|
LBRY_SPEECH,
|
|
LBRY_SPEECH_SETTINGS,
|
|
isset( $options[LBRY_SPEECH] ) ? $options[LBRY_SPEECH] : '',
|
|
);
|
|
}
|
|
|
|
/**
|
|
* Prints Spee.ch channel input
|
|
*/
|
|
public function speech_channel_callback()
|
|
{
|
|
$options = get_option( LBRY_SPEECH_SETTINGS );
|
|
printf(
|
|
'<input type="text" id="' . esc_attr('%1$s') . '" name="' . esc_attr('%2$s[%1$s]') . '" value="@' . esc_attr('%3$s') . '" placeholder="your-speech-channel">',
|
|
LBRY_SPEECH_CHANNEL,
|
|
LBRY_SPEECH_SETTINGS,
|
|
isset( $options[LBRY_SPEECH_CHANNEL] ) ? $options[LBRY_SPEECH_CHANNEL] : '',
|
|
);
|
|
}
|
|
|
|
/**
|
|
* Prints Spee.ch password input
|
|
*/
|
|
public function speech_pw_callback()
|
|
{
|
|
printf(
|
|
'<input type="password" id="' . esc_attr('%1$s') . '" name="' . esc_attr('%2$s[%1$s]') . '" placeholder="Leave empty for same password">',
|
|
LBRY_SPEECH_PW,
|
|
LBRY_SPEECH_SETTINGS,
|
|
);
|
|
}
|
|
|
|
/**
|
|
* Handles new channel form submission
|
|
*/
|
|
public function add_channel()
|
|
{
|
|
|
|
$redirect_url = admin_url( add_query_arg( array( 'page' => 'lbrypress', 'tab' => 'channels' ), 'options.php' ) );
|
|
|
|
// Check that nonce
|
|
if ( isset( $_POST['_lbrynonce'] ) && wp_verify_nonce( $_POST['_lbrynonce'], 'add_channel_nonce' ) ) {
|
|
if ( empty( $_POST['lbry_new_channel'] ) || empty( $_POST['lbry_channel_bid_amount'] ) ) {
|
|
LBRY()->notice->set_notice( 'error', 'Must supply both channel name and bid amount' );
|
|
} elseif ( isset( $_POST['lbry_new_channel'] ) && isset( $_POST['lbry_channel_bid_amount'] ) ) {
|
|
$channel = $_POST['lbry_new_channel']; // TODO: sanitize key() only allows for lowercase chars, dashes, and underscores. maybe remove to allow more characters? and use something else for better control?
|
|
$channel = trim( $channel );
|
|
$channel = str_replace( '@', '', $channel );
|
|
$channel = str_replace( ' ', '-', $channel );
|
|
$channel = str_replace( '_', '-', $channel );
|
|
$channel_name = sanitize_user( $channel );
|
|
|
|
$bid = $_POST['lbry_channel_bid_amount'];
|
|
$channel_bid = number_format( floatval( $bid ), 3, '.', '' );
|
|
|
|
// Try to add the new channel
|
|
try {
|
|
$result = LBRY()->daemon->channel_new( $channel_name, $channel_bid );
|
|
// Tell the user it takes some time to go through
|
|
LBRY()->notice->set_notice(
|
|
'success', 'Successfully added a new channel: @' . esc_html( $channel_name ) . '! Please allow a few minutes for the bid to process.', true );
|
|
|
|
} catch ( \Exception $e ) {
|
|
LBRY()->notice->set_notice( 'error', $e->getMessage(), false );
|
|
}
|
|
}
|
|
} else {
|
|
LBRY()->notice->set_notice('error', 'Security check failed' );
|
|
die( __( 'Security check failed', 'lbrypress' ) );
|
|
}
|
|
|
|
wp_safe_redirect( $redirect_url );
|
|
exit();
|
|
}
|
|
|
|
/**
|
|
* Checks at most once an hour to see if the wallet balance is too low
|
|
*/
|
|
// IDEA: Check user permissions possibly
|
|
public static function wallet_balance_warning()
|
|
{
|
|
// See if we've checked in the past two hours
|
|
if (!get_transient('lbry_wallet_check')) {
|
|
$balance = LBRY()->daemon->wallet_balance();
|
|
if ($balance < get_option(LBRY_SETTINGS)[LBRY_LBC_PUBLISH] * 20) {
|
|
// If LBRY Balance is low, send email, but only once per day
|
|
if (!get_transient('lbry_wallet_warning_email')) {
|
|
$email = get_option('admin_email');
|
|
$subject = 'Your LBRYPress Wallet Balance is Low!';
|
|
$message = "Your LBRY Wallet for your WordPress installation at " . site_url() . " is running very low.\r\n\r\nYou currently have " . $balance . ' LBC left in your wallet. In order to keep publishing to the LBRY network, please add some LBC to your account.';
|
|
wp_mail($email, $subject, $message);
|
|
set_transient('lbry_wallet_warning_email', true, DAY_IN_SECONDS);
|
|
}
|
|
}
|
|
set_transient('lbry_wallet_check', true, 2 * HOUR_IN_SECONDS);
|
|
}
|
|
}
|
|
|
|
private function encrypt($plaintext)
|
|
{
|
|
$ivlen = openssl_cipher_iv_length($cipher="AES-256-CTR");
|
|
$iv = openssl_random_pseudo_bytes($ivlen);
|
|
$ciphertext_raw = openssl_encrypt($plaintext, $cipher, wp_salt(), $options=OPENSSL_RAW_DATA, $iv);
|
|
$hmac = hash_hmac('sha256', $ciphertext_raw, wp_salt(), $as_binary=true);
|
|
return base64_encode($iv.$hmac.$ciphertext_raw);
|
|
}
|
|
|
|
private function decrypt($ciphertext)
|
|
{
|
|
$c = base64_decode($ciphertext);
|
|
$ivlen = openssl_cipher_iv_length($cipher="AES-256-CTR");
|
|
$iv = substr($c, 0, $ivlen);
|
|
$hmac = substr($c, $ivlen, $sha2len=32);
|
|
$ciphertext_raw = substr($c, $ivlen+$sha2len);
|
|
$original_plaintext = openssl_decrypt($ciphertext_raw, $cipher, wp_salt(), $options=OPENSSL_RAW_DATA, $iv);
|
|
$calcmac = hash_hmac('sha256', $ciphertext_raw, wp_salt(), $as_binary=true);
|
|
if (hash_equals($hmac, $calcmac)) {//PHP 5.6+ timing attack safe comparison
|
|
return $original_plaintext;
|
|
}
|
|
|
|
return false;
|
|
}
|
|
|
|
public function get_speech_pw()
|
|
{
|
|
$ciphertext = get_option(LBRY_SETTINGS)[LBRY_SPEECH_PW];
|
|
if (empty($ciphertext)) {
|
|
return false;
|
|
}
|
|
|
|
return $this->decrypt($ciphertext);
|
|
}
|
|
}
|