HEX
Server: Apache
System: Linux uyu7574470001-7d78c9ff74-xfpwm 4.19.91-21.al7.x86_64 #1 SMP Wed Sep 2 19:47:49 CST 2020 x86_64
User: ()
PHP: 7.4.16
Disabled: chmod,exec,system,passthru,shell_exec,escapeshellarg,escapeshellcmd,proc_close,proc_open,ini_alter,dl,popen,pcntl_exec,socket_accept,socket_bind,socket_clear_error,socket_close,socket_connect,socket_create_listen,socket_create_pair,socket_create,socket_get_option,socket_getpeername,socket_getsockname,socket_last_error,socket_listen,socket_read,socket_recv,socket_recvfrom,socket_select,socket_send,socket_sendto,socket_set_block,socket_set_nonblock,socket_set_option,socket_shutdown,socket_strerror,socket_write,stream_socket_client,stream_socket_server,pfsockopen,disk_total_space,disk_free_space,chown,diskfreespace,getrusage,get_current_user,getmyuid,getmypid,dl,leak,listen,chgrp,link,symlink,dlopen,proc_nice,proc_get_stats,proc_terminate,shell_exec,sh2_exec,posix_getpwuid,posix_getgrgid,posix_kill,ini_restore,mkfifo,dbmopen,dbase_open,filepro,filepro_rowcount,posix_mkfifo,putenv,sleep,fsockopen
Upload Files
File: /usr/home/uyu7574470001/htdocs/wp-content/plugins/wp-table-builder/inc/Admin/Api/TableGet.php
<?php

namespace WPTableBuilder\Admin\Api;
use WP_Query;
use WPTableBuilder\Admin\Authorization;
use WPTableBuilder\Core\Cpt;
use WPTableBuilder\WPTableBuilder;

class TableGet
{

    public static function register($apiBase)
    {
        register_rest_route($apiBase, '/table', [
            'methods' => 'GET',
            'callback' => [self::class, 'get_table'],
            'permission_callback' => [Authorization::class, 'can_view'],
        ]);

        register_rest_route($apiBase, '/tables', [
            'methods' => 'GET',
            'callback' => [self::class, 'get_tables'],
            'permission_callback' => [Authorization::class, 'can_view'],
        ]);

        register_rest_route($apiBase, '/patterns', [
            'methods' => 'GET',
            'callback' => [self::class, 'get_patterns'],
            'permission_callback' => [Authorization::class, 'can_view'],
        ]);
    }

    public static function get_table($req)
    {
        $id = absint($req->get_param('id'));
        $post = get_post($id);
        $table = get_post_meta($id, '_wptb_content_', true);
        $is_template = get_post_meta($id, '_wptb_prebuilt_', true) ? true : false;
        $name = '';
        $tags = [];
        if ($post) {
            $name = $post->post_title;
            $terms = wp_get_post_terms($id, Cpt::TAX_ID);
            $tags = [];
            foreach ($terms as $term) {
                $tags[] = $term->term_id;
            }
        }
        return ApiHandler::response(compact('table', 'name', 'tags', 'is_template'));
    }

    public static function get_tables($request)
    {
        $page = isset($request['page']) ? (int) $request['page'] : 1;
        $per_page = isset($request['per_page']) ? (int) $request['per_page'] : 15;
        $search_term = isset($request['search']) ? sanitize_text_field($request['search']) : '';
        $sort_by = isset($request['sort_by']) ? sanitize_text_field($request['sort_by']) : 'id';
        $sort_order = isset($request['sort_order']) ? strtoupper(sanitize_text_field($request['sort_order'])) : 'DESC';


        $sort_order = in_array($sort_order, ['ASC', 'DESC']) ? $sort_order : 'DESC';
        $sort_by = in_array($sort_by, ['ID', 'title', 'date', 'modified']) ? $sort_order : 'ID';

        $page = max(1, $page);
        $per_page = min(max(15, $per_page), 100);

        $status = isset($request['status']) && $request['status'] == 'trash' ? 'trash' : 'draft';

        $except = false;
        if (isset($request['except'])) {
            $except = sanitize_text_field($request['except']);
            if (preg_match('/[^0-9,]/', $except)) {
                $except = false;
            }
        }


        $args = [
            'post_type' => 'wptb-tables',
            'posts_per_page' => $per_page,
            'paged' => $page,
            'post_status' => $status,
            'orderby' => $sort_by,
            'order' => $sort_order,
        ];

        add_filter('posts_where', function ($where, $query) use ($search_term, $except) {
            global $wpdb;
            if (!empty($search_term)) {
                $where .= $wpdb->prepare(" AND {$wpdb->posts}.post_title LIKE %s", '%' . $wpdb->esc_like($search_term) . '%');
            }

            if ($except) {
                $where .= $wpdb->prepare(" AND {$wpdb->posts}.ID NOT IN ($except)");
            }

            return $where;
        }, 10, 2);

        $query = new WP_Query($args);

        $post_data = [];

        if ($query->have_posts()) {
            while ($query->have_posts()) {
                $query->the_post();

                $post_data[] = [
                    'id' => get_the_ID(),
                    'title' => get_the_title(),
                    'date' => get_the_date('h:i A, d M, Y'),
                    'modified' => get_the_modified_date('h:i A, d M, Y'),
                    'is_template' => get_post_meta(get_the_ID(), '_wptb_prebuilt_', true) ? true : false
                ];
            }
            wp_reset_postdata();
        }

        $total_pages = $query->max_num_pages;
        $total_count = $query->found_posts;

        return ApiHandler::response([
            'posts' => $post_data,
            'total_count' => $total_count,
            'total_pages' => $total_pages,
            'current_page' => $page,
            'per_page' => $per_page,
        ]);
    }

    public static function get_patterns($req)
    {

        $name = isset($req['name']) ? sanitize_text_field($req['name']) : '';

        if ($name) {
            $pattern = false;
            $pattern_path = WPTB_PLUGIN_DIR . '/assets/patterns/free/' . $name . '.json';
            if (!file_exists($pattern_path)) {
                $pattern = apply_filters('wptb_get_pattern', $name);
            } else {
                $pattern = json_decode(file_get_contents($pattern_path), true);
            }

            if (!$pattern) {
                return [
                    'error' => __('Pattern was not found', 'wptb')
                ];
            }

            return [
                'pattern' => $pattern
            ];
        }

        $free_patterns = WPTB_PLUGIN_DIR . '/assets/patterns/free';
        if (!file_exists($free_patterns)) {
            return [
                'patterns' => [],
                'total_count' => 0,
                'error' => __('No patterns found', 'wptb')
            ];
        }

        $patterns = [];
        foreach (scandir($free_patterns) as $value) {
            if (is_dir($free_patterns . '/' . $value) || !preg_match('/\.json$/', $value)) {
                continue;
            }
            $pattern = json_decode(file_get_contents($free_patterns . '/' . $value), true);
            $patterns[] = [
                'name' => str_replace('.json', '', $value),
                'title' => $pattern['title'],
                'height' => $pattern['height'],
                'width' => $pattern['width']
            ];
        }

        if (WPTableBuilder::is_pro()) {
            $patterns = apply_filters('wptb_get_patterns', $patterns);
        } else {
            $upsells_dir = WPTB_PLUGIN_DIR . '/assets/patterns/upsells';
            foreach (scandir($upsells_dir) as $value) {
                if (is_dir($upsells_dir . '/' . $value) || !preg_match('/\.json$/', $value)) {
                    continue;
                }

                $pattern = json_decode(file_get_contents($upsells_dir . '/' . $value), true);
                $patterns[] = [
                    'name' => str_replace('.json', '', $value),
                    'title' => $pattern['title'],
                    'height' => $pattern['height'],
                    'width' => $pattern['width'],
                    'is_upsell' => true
                ];
            }
        }

        return ApiHandler::response([
            'patterns' => $patterns
        ]);

    }
}