HEX
Server: nginx/1.27.0
System: Linux 20d173156d2c 6.8.0-88-generic #89-Ubuntu SMP PREEMPT_DYNAMIC Sat Oct 11 01:02:46 UTC 2025 x86_64
User: www-data (33)
PHP: 8.1.29
Disabled: NONE
Upload Files
File: /var/www/html/wp-content/plugins/kadence-blocks/includes/class-mailerlite-form-rest-api.php
<?php
/**
 * REST API Mailchimp controller customized for Kadence Form
 */

if ( ! defined( 'ABSPATH' ) ) {
	exit;
}
/**
 * REST API Products controller class.
 *
 * @package WooCommerce/API
 */
class Kadence_MailerLite_REST_Controller extends WP_REST_Controller {

	/**
	 * api key property name.
	 */
	const PROP_API_KEY = 'apikey';

	/**
	 * Include property name.
	 */
	const PROP_END_POINT = 'endpoint';

	/**
	 * Per page property name.
	 */
	const PROP_QUERY_ARGS = 'queryargs';


	/**
	 * Constructor.
	 */
	public function __construct() {
		$this->namespace = 'kb-mailerlite/v1';
		$this->rest_base = 'get';
	}

	/**
	 * Registers the routes for the objects of the controller.
	 *
	 * @see register_rest_route()
	 */
	public function register_routes() {
		register_rest_route(
			$this->namespace,
			'/' . $this->rest_base,
			array(
				array(
					'methods'             => WP_REST_Server::READABLE,
					'callback'            => array( $this, 'get_items' ),
					'permission_callback' => array( $this, 'get_items_permission_check' ),
					'args'                => $this->get_collection_params(),
				),
			)
		);
	}
	/**
	 * Checks if a given request has access to search content.
	 *
	 *
	 * @param WP_REST_Request $request Full details about the request.
	 * @return true|WP_Error True if the request has search access, WP_Error object otherwise.
	 */
	public function get_items_permission_check( $request ) {
		return current_user_can( 'edit_posts' );
	}

	/**
	 * Retrieves a collection of objects.
	 *
	 * @param WP_REST_Request $request Full details about the request.
	 * @return WP_REST_Response|WP_Error Response object on success, or WP_Error object on failure.
	 */
	public function get_items( $request ) {
		$api_key    = $request->get_param( self::PROP_API_KEY );
		$end_point  = $request->get_param( self::PROP_END_POINT );
		$query_args = $request->get_param( self::PROP_QUERY_ARGS );
		if ( empty( $api_key ) ) {
			return 'Error';
		}
		if ( strlen( $api_key ) > 100 ) {
			// New connect API.
			$base_url = 'https://connect.mailerlite.com/api/';
			$args = array();
			if ( $query_args && is_array( $query_args ) ) {
				foreach ( $query_args as $key => $value ) {
					$value_parts = explode( '=', $value );
					$args[$value_parts[0]] = $value_parts[1];
				}
			}
			$url = $base_url . $end_point;
			$request_args = array(
				'headers' => array(
					'Content-Type' => 'application/json',
					'Accept'       => 'application/json',
					'Authorization' => 'Bearer ' . $api_key,
				),
				'timeout' => 90,
				'user-agent' => 'Kadence Forms/' . KADENCE_BLOCKS_VERSION,
				'body' => $args,
			);
		} else {
			$base_url = 'https://api.mailerlite.com/api/v2/';
			$request_args = array(
				'headers' => array(
					'accept'       => 'application/json',
					'content-type' => 'application/json',
					'X-MailerLite-ApiKey' => $api_key,
				),
			);
			if ( $query_args && is_array( $query_args ) ) {
				$args = array();
				foreach ( $query_args as $key => $value ) {
					$value_parts = explode( '=', $value );
					$args[$value_parts[0]] = $value_parts[1];
				}
				$url = add_query_arg( $args, $base_url . $end_point );
			} else {
				$url = $base_url . $end_point;
			}
		}
		$response = wp_safe_remote_get( $url, $request_args );
		if ( is_wp_error( $response ) || 200 != (int) wp_remote_retrieve_response_code( $response ) ) {
			if (  401 === wp_remote_retrieve_response_code( $response ) ) {
				return 'Unauthorized';
			} else if ( 403 === wp_remote_retrieve_response_code( $response ) ) {
				return 'Forbidden';
			} else {
				return 'Error';
			}
		}
		$body = json_decode( wp_remote_retrieve_body( $response ), true );
		if ( ! is_array( $body ) ) {
			//error_log( 'no content' );
			return 'No Content';
		}
		// $groups = array();
		// if ( 'groups' === $end_point ) {
		// 	foreach ( $body as $group ) {
		// 		$groups[] = array( 'id' => $group['id'], 'title' => $group['name'] );
		// 	}
		// 	return $groups;
		// }

		return $body;

	}
	/**
	 * Retrieves the query params for the search results collection.
	 *
	 * @return array Collection parameters.
	 */
	public function get_collection_params() {
		$query_params  = parent::get_collection_params();

		$query_params[ self::PROP_API_KEY ] = array(
			'description' => __( 'The API Key for Mailerlite account.', 'kadence-blocks' ),
			'type'        => 'string',
		);

		$query_params[ self::PROP_END_POINT ] = array(
			'description' => __( 'Actionable endpoint for api call.', 'kadence-blocks' ),
			'type'        => 'string',
		);

		$query_params[ self::PROP_QUERY_ARGS ] = array(
			'description' => __( 'Query Args for url.', 'kadence-blocks' ),
			'type'        => 'array',
		);

		return $query_params;
	}
}