From 3e03887bdadd38374a283c9cd4414ca807fdfc3e Mon Sep 17 00:00:00 2001 From: Brian Rogers Date: Tue, 14 Sep 2021 12:39:25 -0600 Subject: [PATCH] Adding direct access prevention to files --- admin/class-settings.php | 25 ++++++++++++++++--------- bootstrap.php | 4 ++++ constants/base.php | 4 ++++ constants/http-codes.php | 4 ++++ constants/rewrites.php | 4 ++++ includes/class-app.php | 4 ++++ includes/class-nmspcli.php | 2 +- includes/front/class-custompage.php | 4 ++++ includes/front/class-rewrites.php | 4 ++++ nmsp-plugin-name.php | 21 +++++++++++++++------ uninstall.php | 3 +-- 11 files changed, 61 insertions(+), 18 deletions(-) diff --git a/admin/class-settings.php b/admin/class-settings.php index 8ec9afb..840a7e9 100644 --- a/admin/class-settings.php +++ b/admin/class-settings.php @@ -2,6 +2,10 @@ namespace PluginNamespace\Admin; +if ( ! defined( 'ABSPATH' ) ) { + exit; +} + class Settings { /** @@ -26,11 +30,11 @@ class Settings { */ public function append_to_admin_menu(): void { $parent_slug = 'nmsp-plugin-name-menu-slug'; - $page_title = __( 'Namespace Plugin Name - Settings', 'nmsp_plugin_name_settings_title' ); - $menu_title = __( 'Settings', 'nmsp_plugin_name_settings_title' ); - $capability = 'manage_options'; - $menu_slug = $parent_slug; - $callback = array( $this, 'show_main_settings_page' ); + $page_title = __( 'Namespace Plugin Name - Settings', 'nmsp_plugin_name_settings_title' ); + $menu_title = __( 'Settings', 'nmsp_plugin_name_settings_title' ); + $capability = 'manage_options'; + $menu_slug = $parent_slug; + $callback = array( $this, 'show_main_settings_page' ); add_submenu_page( $parent_slug, $page_title, $menu_title, $capability, $menu_slug, $callback ); } @@ -45,7 +49,7 @@ class Settings { public function show_main_settings_page(): string { $data = array(); - $this->localize_script(); + $this->localize_script( array() ); ob_start(); echo nmsp_plugin_app()->blade->run( 'admin.settings', $data ); @@ -78,9 +82,12 @@ class Settings { private function localize_script( array $additional_data = array() ): void { wp_enqueue_script( 'nmsp-plugin-name-admin-js' ); - $payload = array( - 'wp_ajax_url' => admin_url( 'admin-ajax.php' ), - '_nonce' => wp_create_nonce( NMSP_PLUGIN_NONCE ), + $payload = array_merge( + $additional_data, + array( + 'wp_ajax_url' => admin_url( 'admin-ajax.php' ), + '_nonce' => wp_create_nonce( NMSP_PLUGIN_NONCE ), + ) ); wp_localize_script( 'nmsp-plugin-name-admin-js', 'nmspPluginAdminApi', $payload ); } diff --git a/bootstrap.php b/bootstrap.php index 322f9a8..2dda9d8 100644 --- a/bootstrap.php +++ b/bootstrap.php @@ -1,5 +1,9 @@