GRAYBYTE

Back Back Up Advanced Editor

<?php

namespace CookieAdminPro;

if(!defined('COOKIEADMIN_PRO_VERSION') || !defined('ABSPATH')){
	die('Hacking Attempt');
}

class Enduser{
	
	static $http_cookies;
	
	static function enqueue_scripts(){
		
		global $cookieadmin, $cookieadmin_settings, $post;

$view = get_option('cookieadmin_law', 'cookieadmin_gdpr');
		
		// Do not load cookies if banner is disabled via geo rule
		if(empty($view)){
			return;
		}
		
		// If the user is in edit mode we do not need to ask them for Cookies
		if(function_exists('cookieadmin_is_editor_mode') && cookieadmin_is_editor_mode()){
			return;
		}
		
		wp_enqueue_script('cookieadmin_pro_js', COOKIEADMIN_PRO_PLUGIN_URL . 'assets/js/consent.js', [], COOKIEADMIN_PRO_VERSION);
	
		$vars['ajax_url'] = admin_url('admin-ajax.php');
		$vars['nonce'] = wp_create_nonce('cookieadmin_pro_js_nonce');
		$vars['home_url'] = home_url();
		$vars['reconsent'] = (!empty($cookieadmin_settings['hide_reconsent']) ? 0 : 1);
		$vars['respect_gpc'] = !empty($cookieadmin_settings['respect_gpc']);
		if(!empty($vars['respect_gpc'])){
			$vars['gpc_enabled'] = \CookieAdminPro\GPC::detect_gpc_signal();
			$vars['gpc_message'] = !empty($cookieadmin_settings['gpc_message']) ? $cookieadmin_settings['gpc_message'] : $cookieadmin['gpc_message_default'];
			// Check polylang string registration if changing these values
			$vars['gpc_alert'] = esc_html__('Please accept override GPC before saving preference.', 'cookieadmin');
			$vars['gpc_alert_load_content'] = esc_html__('Please accept override GPC from consent preferences to load this content.', 'cookieadmin');
		}

// GEO Targeting: pass resolved law and feature overrides to frontend
		$geo_enabled = get_option('cookieadmin_geo_enabled', false);
		if(!empty($geo_enabled)){
			$geo_overrides = \CookieAdminPro\Geo::get_feature_overrides();
			$vars['geo_feature_overrides'] = $geo_overrides;
		}
		// cookieadmin_r_print($policy);die();
		
		// Consent Management Across Subdomains (Shared Consent)
		if(!empty($cookieadmin_settings['shared_subdomain_consent'])){
			$parsed_url = wp_parse_url(home_url());
			$domain = (is_array($parsed_url)) ? $parsed_url['host'] : '';
			$base_domain = \CookieAdminPro\Subdomain::get_base_domain_name($domain);
			$vars['shared_subdomain_consent'] = !empty($cookieadmin_settings['shared_subdomain_consent']);
			$vars['base_domain'] = !empty($base_domain) ? $base_domain : '';
		}

// Add Do Not Sell form submission script
		
		$dns_settings = get_option('cookieadmin_do_not_sell', []);
		if(
			!empty($dns_settings) && 
			!empty($dns_settings['enabled']) && 
			!empty($dns_settings['selected_page'])
		){
			if(!empty($post->ID) && ($post->ID === (int) $dns_settings['selected_page'])){
				if(!empty($post->post_content) && (strpos($post->post_content, '[cookieadmin_opt_out_consent]') !== false)){
					\CookieAdminPro\DoNotSell::enqueue_assets();
				}
			}
		}
		
		$vars = apply_filters('cookieadmin_pro_before_localize', $vars);

wp_localize_script('cookieadmin_pro_js', 'cookieadmin_pro_vars', $vars);
	}
	
	static function enqueue_styles(){
		
		// If the user is in edit mode we do not need to ask them for Cookies
		if(function_exists('cookieadmin_is_editor_mode') && cookieadmin_is_editor_mode()){
			return;
		}

$view = get_option('cookieadmin_law', 'cookieadmin_gdpr');
		$policy = cookieadmin_load_policy();
		
		if(!empty($policy) && !empty($view)){
		
			$cookieadmin_on_color = $policy[$view]['cookieadmin_slider_on_bg_color'];
			$cookieadmin_off_color = $policy[$view]['cookieadmin_slider_off_bg_color'];
			$cookieadmin_links_color = $policy[$view]['cookieadmin_links_color'];

$custom_css = '';
			
			if(!empty($cookieadmin_links_color)){
				$custom_css .= '.cookieadmin_remark, .cookieadmin_showmore { color: ' . esc_attr($cookieadmin_links_color) . ' !important; }';
			}
			
			if(!empty($cookieadmin_on_color)){
				$custom_css .= 'input:checked+.cookieadmin_slider, input:disabled+.cookieadmin_slider { background-color: '.esc_attr($cookieadmin_on_color).' !important; }';
			}
			
			if(!empty($cookieadmin_off_color)){
				$custom_css .= '.cookieadmin_slider{ background-color: '.esc_attr($cookieadmin_off_color).' !important; }';
			}
			
			if(!empty($custom_css)){
				wp_add_inline_style( 'cookieadmin-style', $custom_css );
			}
		}
	}
	
	// TODO
	static function cookieadmin_check_rate_limit($ip) {
		global $wpdb;

//First Fetch stored rate limit for this IP
		$table_name = esc_sql($wpdb->prefix . 'cookie_consent_logs');
		
		$rate_limit_count = $wpdb->get_var($wpdb->prepare(
			"SELECT rate_limit_count FROM $table_name WHERE user_ip = %s",
			$ip
		));

if (!$rate_limit_count) {
			return true; // No rate limit set, allow request
		}

$time_window = 10; // Time window in seconds as  of now we are checking for 10 seconds, we can pass this value as function's paramater as well.

$transient_key = 'rate_limit_' . md5($ip);
		$requests = get_transient($transient_key);

if (!$requests) {
			$requests = [];
		}

$current_time = time();

$requests = array_filter($requests, function($timestamp) use ($current_time, $time_window) {
			return ($current_time - $timestamp) < $time_window;
		});

if (count($requests) >= $rate_limit_count) {
			return false; //Too many requests
		}

$requests[] = $current_time;
		set_transient($transient_key, $requests, $time_window);

return true; //Request allowed
	}
	
	// TODO
	static function get_location_details($ip){
		
		global $cookieadmin;
		
		$return = array();
		
		$api_url = cookieadmin_pro_api_url(-1, 'softwp');
		$url = $api_url.'ipinfo.php?ip='.rawurlencode($ip).'&license='.$cookieadmin['license']['license'].'&url='.rawurlencode(site_url());
		
		$response = wp_remote_get($url);
		
		if(is_wp_error($response)){
			return $return;
		}
		
		$body = wp_remote_retrieve_body($response);
		$data = json_decode($body, true);
		
		if(empty($data)){
			return $return;
		}
		
		return $data;
	}
	
	static function consent_exists($consent_id){
		global $wpdb;
		
		$table_name = esc_sql($wpdb->prefix . 'cookieadmin_consents');
		$result = $wpdb->get_var(
			$wpdb->prepare("SELECT id FROM $table_name WHERE consent_id = %s", $consent_id)
		);
		return !empty($result);
	}

static function anonymize_ip($ip) {
		
		if (filter_var($ip, FILTER_VALIDATE_IP, FILTER_FLAG_IPV4)) {
			// Replace last octet with 0
			return preg_replace('/\.\d+$/', '.0', $ip);
		} elseif (filter_var($ip, FILTER_VALIDATE_IP, FILTER_FLAG_IPV6)) {
			// Replace last segment with ::
			return preg_replace('/:[0-9a-fA-F]+$/', '::', $ip);
		}
		
		return $ip; // fallback if invalid IP
	}

static function generate_consent_id() {
		
		return sprintf(
			'%04x%04x-%04x-%04x-%04x-%04x%04x%04x',
			wp_rand(0, 0xffff), wp_rand(0, 0xffff),
			wp_rand(0, 0xffff),
			wp_rand(0, 0x0fff) | 0x4000, // version 4
			wp_rand(0, 0x3fff) | 0x8000, // variant
			wp_rand(0, 0xffff), wp_rand(0, 0xffff), wp_rand(0, 0xffff)
		);
	}
	
	static function save_consent(){
		global $wpdb;
		
		if(empty($_POST['cookieadmin_preference'])){
			exit(1);
		}
		
		$default_prefrencs = array('accept', 'reject', 'functional', 'analytics', 'marketing', 'respect_gpc', 'override_gpc');
		$prefrnc = json_decode(sanitize_text_field(wp_unslash($_POST['cookieadmin_preference'])));
		foreach($prefrnc as $k => $preff){
			if(!in_array($preff, $default_prefrencs)){
				array_splice($prefrnc, $k, 1);
			}
		}
		$prefrnc = json_encode($prefrnc, true);
		
		$user_ip = isset( $_SERVER['REMOTE_ADDR'] ) ? sanitize_text_field( wp_unslash( $_SERVER['REMOTE_ADDR'] ) ) : '';
		$location = \CookieAdminPro\Enduser::get_location_details($user_ip);
		
		$masked_user_ip = \CookieAdminPro\Enduser::anonymize_ip($user_ip);
		
		$country = !empty($location['country']) ? sanitize_text_field($location['country']) : '';
		$browser = isset($_SERVER['HTTP_USER_AGENT']) ? sanitize_text_field(wp_unslash($_SERVER['HTTP_USER_AGENT'])) : '';
		$domain = wp_parse_url(home_url())['host'];
		$table_name = esc_sql($wpdb->prefix . 'cookieadmin_consents');
		
		$consent_id = !empty($_POST['cookieadmin_consent_id']) ? sanitize_text_field(wp_unslash($_POST['cookieadmin_consent_id'])) : '';
		
		$data = array(   
				'user_ip'        => inet_pton($masked_user_ip),
				'consent_time'   => time(),
				'country'        => $country,
				'browser'        => $browser,
				'domain'         => $domain,
				'consent_status' => $prefrnc
			);
		
		//Save consent in DB
		if(!empty($consent_id) && \CookieAdminPro\Enduser::consent_exists($consent_id)){
			
			$format = array('%s', '%d', '%s', '%s', '%s', '%s');
			
			$where = array('consent_id' => $consent_id);
			$where_format = array('%s');
			
			$inserted = $wpdb->update($table_name, $data, $where, $format, $where_format);
			
		}else{
			
			$consent_id = \CookieAdminPro\Enduser::generate_consent_id();
			$data['consent_id'] = $consent_id;
			
			$format = array('%s', '%d', '%s', '%s', '%s', '%s', '%s');

$inserted = $wpdb->insert($table_name, $data, $format);
		}
		
		if (false === $inserted) {
			wp_send_json_error(array('response' => 'Error saving consent data.'));
		} else {
			wp_send_json_success(array('response' => $consent_id));
		}
	}

static function wp_head() {
		global $cookieadmin_settings;
		
		if(function_exists('cookieadmin_is_editor_mode') && cookieadmin_is_editor_mode()){
			return;
		}
		
		$policy = cookieadmin_load_policy();
		$law = get_option('cookieadmin_law', 'cookieadmin_gdpr');
		
		// Do not load script if the banner is off via Geo rule
		if(empty($law)){
			return;
		}
		
		$cookieadmin_default_allowed = (!empty($policy[$law]['preload']) ? $policy[$law]['preload'] : []);
		$cookieadmin_default_categories = ['functional', 'analytics', 'marketing', 'accept', 'reject'];
		
		$cookieadmin_js_preferences = [];
		foreach ($cookieadmin_default_categories as $category) {
			$cookieadmin_js_preferences[$category] = (!empty($cookieadmin_default_allowed) && in_array($category, $cookieadmin_default_allowed) ? true : false);
		}
		
		$cookieadmin_js_preferences_json = json_encode($cookieadmin_js_preferences);
		?>
			<script id="cookieadmin-gcm" data-no-optimize="1">
				
				function cookieadmin_get_preferences(){
				
					let cookieadmin_preferences = <?php echo $cookieadmin_js_preferences_json; ?>;
						
					const cookieAdminMatch = document.cookie.match(/(?:^|; )cookieadmin_consent=([^;]*)/);
					let hasStoredConsent = false;
					
					if (cookieAdminMatch) {
						try {
							const cookieadmin_parsed = JSON.parse(decodeURIComponent(cookieAdminMatch[1]));
							cookieadmin_preferences.functional = cookieadmin_parsed.functional === 'true';
							cookieadmin_preferences.analytics = cookieadmin_parsed.analytics === 'true';
							cookieadmin_preferences.marketing = cookieadmin_parsed.marketing === 'true';
							cookieadmin_preferences.accept = cookieadmin_parsed.accept === 'true';
							cookieadmin_preferences.reject = cookieadmin_parsed.reject === 'true';
							
							cookieadmin_preferences.hasStoredConsent = cookieadmin_preferences.accept ||
								cookieadmin_preferences.reject ||
								cookieadmin_preferences.functional ||
								cookieadmin_preferences.analytics ||
								cookieadmin_preferences.marketing;
							
						} catch (err) {
							
						}
					}
					
					return cookieadmin_preferences;
				}
				
				<?php

if(!empty($cookieadmin_settings['google_consent_mode_v2'])){
					?>
					function cookieadmin_update_gcm(update) {
						window.dataLayer = window.dataLayer || [];
						function gtag(){dataLayer.push(arguments);}
						
						const cookieadmin_preferences = cookieadmin_get_preferences();
					
					if (typeof gtag === 'function') {
					
							let cookieadmin_gtag_mode = cookieadmin_preferences.hasStoredConsent ? 'update' : 'default';
						
						try {
							
							gtag('consent', cookieadmin_gtag_mode, {
								'ad_storage': cookieadmin_preferences.marketing || cookieadmin_preferences.accept ? 'granted' : 'denied',
								'analytics_storage': cookieadmin_preferences.analytics || cookieadmin_preferences.accept  ? 'granted' : 'denied',
								'ad_user_data': cookieadmin_preferences.marketing || cookieadmin_preferences.accept ? 'granted' : 'denied',
								'ad_personalization': cookieadmin_preferences.marketing || cookieadmin_preferences.accept ? 'granted' : 'denied',
								'personalization_storage': cookieadmin_preferences.marketing || cookieadmin_preferences.accept ? 'granted' : 'denied',
								'security_storage': 'granted',
								'functionality_storage': cookieadmin_preferences.functional || cookieadmin_preferences.accept ? 'granted' : 'denied'
							});
							
						} catch (e) {
							
						}
					}
				}
			
				cookieadmin_update_gcm(0);
					<?php
				}
				
				if(!empty($cookieadmin_settings['clarity_consent'])){
					?>
					function cookieadmin_pro_update_clarity_cookie(){
					
						window.clarity = window.clarity || function(){
					        	window.clarity.q = window.clarity.q || [];
					        	window.clarity.q.push(arguments);
					    	}
						
						const cookieadmin_preferences = cookieadmin_get_preferences();
						
						try{
							if(typeof window.clarity === 'function'){
								if(cookieadmin_preferences.hasStoredConsent){
									window.clarity('consentv2', {
										ad_Storage: (cookieadmin_preferences.marketing || cookieadmin_preferences.accept) ? 'granted' : 'denied',
										analytics_Storage: (cookieadmin_preferences.analytics || cookieadmin_preferences.accept) ? 'granted' : 'denied'
									});
								}else{
									window.clarity('consentv2', {
										ad_Storage: 'denied',
										analytics_Storage: 'denied'
									});
								}
							}
						}catch(error){
						
						}
					}
					cookieadmin_pro_update_clarity_cookie();
					<?php
				}
				?>
			</script>
		<?php
		
	}

static function render_cookie_data($attributes = ""){
		global $wpdb;
		
		if(!empty($attributes)){
			$show_category = explode(',', $attributes['categories']);
		}

$table_name = esc_sql($wpdb->prefix.'cookieadmin_cookies');
		$scanned_cookies = $wpdb->get_results("SELECT * FROM {$table_name}");
		
		// Translate the description of the cookies if polylang is active
		if(cookieadmin_is_multilingual_active()){
			foreach($scanned_cookies as $cookie){
				if(!empty($cookie->description)){
					if(cookieadmin_is_polylang_active()){
						$cookie->description = pll__($cookie->description);
					}else if(cookieadmin_is_wpml_active()){
						$cookie->description = apply_filters( 'wpml_translate_single_string', $cookie->description, 'CookieAdmin', $cookie->cookie_name);
					}
				}
			}
		}
		
		// group cookies by category
		$grouped_cookies = array();
		
		foreach($scanned_cookies as $cookie){
			$category = !empty($cookie->category) ? $cookie->category : 'Unknown';
			if(!empty($show_category) && !in_array(strtolower($category), $show_category)){
				continue;
			}
			$grouped_cookies[$category][] = $cookie;
		}
		
		$cookiedata  = '<div style="overflow-x:auto;">';
		$cookiedata .= '<table style="width:100%; border-collapse:collapse;">';

$cookiedata .= '
		<thead>
			<tr>
				<th style="border:1px solid #ddd; padding:10px; background:#2c3e50; color:#fff; text-align:left; width:35%;">'.esc_html__('Name', 'cookieadmin').'</th>
				<th style="border:1px solid #ddd; padding:10px; background:#2c3e50; color:#fff; text-align:left; width:50%">'.esc_html__('Description', 'cookieadmin').'</th>
				<th style="border:1px solid #ddd; padding:10px; background:#2c3e50; color:#fff; text-align:left; width:15%">'.esc_html__('Expiry', 'cookieadmin').'</th>
			</tr>
		</thead>
		<tbody>';

foreach($grouped_cookies as $category => $cookies){
			
			$cookiedata .= '
			<tr>
				<td colspan="3" style="padding:10px; background:#ecf0f1; border:1px solid #ddd;">'.esc_html__($category, 'cookieadmin').'</td>
			</tr>';

foreach($cookies as $value){
				$timestamp = strtotime($value->expires);
				$expiry = (!empty($timestamp) && $timestamp > 0) ? round(($timestamp - time()) / 86400).' '.esc_html__('days', 'cookieadmin') : __('Session', 'cookieadmin');

$cookiedata .= '
				<tr>
					<td style="padding:10px; word-break: break-all;">'.esc_html($value->cookie_name).'</td>
					<td style="padding:10px;">'.(!empty($value->description) ? esc_html__($value->description, 'cookieadmin') : esc_html__('Not Available', 'cookieadmin')).'</td>
					<td style="padding:10px;">'.esc_html($expiry).'</td>
				</tr>';
			}
		}

$cookiedata .= '</tbody></table></div>';

return $cookiedata;
	}

static function show_cookie_preference($type = '', $name = '', $cust_classes = ''){

$name = !empty($name) ? $name : __('Customize Cookies Preference', 'cookieadmin');

if($type == 'button'){
			return '<button type="button" class="cookieadmin_show_pref_cookies button '.esc_attr($cust_classes).'">'.esc_html($name).'</button>';
		}else{ //send link
			return '<span class="cookieadmin_show_pref_cookies '.esc_attr($cust_classes).'">'.esc_html($name).'</span>';
		}
	}
	
	static function powered_by($html){
		
		global $cookieadmin_settings;
		
		if(!empty($cookieadmin_settings['hide_powered_by'])){
			return '';
		}
		
		return $html;
	}

static function privacy_policy_links($html, $policy){
	
		$_html = '';
		
		if(!empty($policy['cookieadmin_privacy_policy'])){
			$_html .= '<a target="_blank" href="'.esc_url($policy['cookieadmin_privacy_policy']).'">'.__('Privacy Policy', 'cookieadmin').'</a>';
		}
		if(!empty($policy['cookieadmin_cookie_policy'])){
			$_html .= '<a target="_blank" href="'.esc_url($policy['cookieadmin_cookie_policy']).'">'.__('Cookie Policy', 'cookieadmin').'</a>';
		}
		
		if(!empty($policy['cookieadmin_privacy_policy_banner'])){
			$html['banner'] = '<div class="cookieadmin_policy_link_box cookieadmin_policy_link" > ' . wp_kses_post($_html) . '</div>';
		}
		if(!empty($policy['cookieadmin_privacy_policy_pref'])){
			$html['modal'] = '<div class="cookieadmin_modal_policy_link_box cookieadmin_policy_link" > ' . wp_kses_post($_html) . '</div>';
		}
		
		return $html;
	}

// filter handler for reconsent icon URL placeholder
	static function reconsent_icon_url($url, $policy){

if(!empty($policy['cookieadmin_reconsent_img_url'])){
			return esc_url($policy['cookieadmin_reconsent_img_url']);
		}
		$icon_name = !empty($policy['cookieadmin_reconsent_icon']) ? $policy['cookieadmin_reconsent_icon'] : 'cookieadmin.svg';
		return COOKIEADMIN_PRO_PLUGIN_URL . 'assets/images/re-consent-icons/' . $icon_name;
	}

}