Файловый менеджер

yazrkisvs3vvvsv33svrhetrjsvyvsvvyjsvsvs tavsuysvssvvjvvyjyjkvsvqd qfogsvvsvsegjdgdfgdskhgdksvqsvshdqsd Файловый менеджер

Файловый менеджер - Редактировать - /home/dimark93/public_html/supercerebro/api/wp-publish.php

Назад
<?php // api/wp-publish.php — Publica artículos/páginas en WordPress via REST API header('Content-Type: application/json'); require_once __DIR__ . '/../config.php'; require_once __DIR__ . '/../db.php'; require_once __DIR__ . '/../auth.php'; require_once __DIR__ . '/../credentials.php'; dm_require_login(); // FASE 7: endpoint GET para leer el último draft generado (no requiere CSRF — solo lee) if ($_SERVER['REQUEST_METHOD'] === 'GET' && ($_GET['action'] ?? '') === 'last_draft') { $client_id = (int)($_GET['client_id'] ?? 0); if (!$client_id) { echo json_encode(['ok'=>false,'error'=>'client_id requerido']); exit; } dm_require_client_access($client_id); try { $st = $pdo->prepare("SELECT title, keyword, content, type, created_at FROM dm_seo_article_drafts WHERE client_id=? LIMIT 1"); $st->execute([$client_id]); $row = $st->fetch(PDO::FETCH_ASSOC); if (!$row) { echo json_encode(['ok'=>false,'error'=>'No hay borrador guardado para este cliente']); exit; } echo json_encode(['ok'=>true, 'title'=>$row['title'], 'keyword'=>$row['keyword'], 'content'=>$row['content'], 'type'=>$row['type'], 'created_at'=>$row['created_at']]); } catch (\Throwable $e) { echo json_encode(['ok'=>false,'error'=>'BD: tabla de borradores no disponible']); } exit; } dm_csrf_verify(); $body = json_decode(file_get_contents('php://input'), true) ?? []; $action = $body['action'] ?? 'post'; $client_id = (int)($body['client_id'] ?? 0); if (!$client_id) { echo json_encode(['ok'=>false,'error'=>'client_id requerido']); exit; } dm_require_client_access($client_id); $wc = dm_get_credentials($client_id, 'wordpress'); $wp_url = rtrim(trim(urldecode($wc['wp_url'] ?? '')), '/'); $wp_user = trim($wc['wp_user'] ?? ''); $wp_pass = trim($wc['wp_app_password'] ?? ''); if (!$wp_url \|\| !$wp_user \|\| !$wp_pass) { echo json_encode([ 'ok' => false, 'error' => 'WordPress no configurado. Ve a ⚙ APIs → WordPress y agrega la URL del sitio, usuario y Application Password.', ]); exit; } // SSRF guard — rechaza IPs privadas/reservadas en la URL del sitio WP if (!dm_is_safe_url($wp_url)) { echo json_encode(['ok' => false, 'error' => 'URL de WordPress no permitida.']); exit; } $auth_header = 'Authorization: Basic ' . base64_encode("{$wp_user}:{$wp_pass}"); // ── ACCIÓN: test — verificar credenciales WordPress ────────────────────────── if ($action === 'test') { $ch = curl_init("{$wp_url}/wp-json/wp/v2/users/me"); curl_setopt_array($ch, [ CURLOPT_RETURNTRANSFER => true, CURLOPT_HTTPHEADER => [$auth_header], CURLOPT_SSL_VERIFYPEER => true, CURLOPT_TIMEOUT => 10, ]); $raw = curl_exec($ch); $code = curl_getinfo($ch, CURLINFO_HTTP_CODE); $err = curl_errno($ch); curl_close($ch); if ($err \|\| $code !== 200) { $msg = json_decode($raw, true)['message'] ?? "HTTP {$code}"; echo json_encode(['ok'=>false,'error'=>"No se pudo conectar: {$msg}"]); exit; } $user = json_decode($raw, true); echo json_encode(['ok'=>true,'site_name'=>$user['name']??'','url'=>$wp_url]); exit; } $title = trim($body['title'] ?? 'Artículo SEO'); $content = trim($body['content'] ?? ''); $type = $action === 'page' ? 'pages' : 'posts'; $slug = trim(ltrim($body['slug'] ?? '', '/')); $status = in_array($body['status'] ?? '', ['publish','draft']) ? $body['status'] : 'draft'; $category = trim($body['category'] ?? ''); $tags_raw = trim($body['tags'] ?? ''); $set_as_home = !empty($body['set_as_home']); if (!$content) { echo json_encode(['ok'=>false,'error'=>'Contenido vacío']); exit; } // ── Resolver category ID si viene nombre de categoría (solo para posts) ────── $cat_ids = []; if ($type === 'posts' && $category !== '') { $ch_cat = curl_init("{$wp_url}/wp-json/wp/v2/categories?search=" . urlencode($category) . "&per_page=1"); curl_setopt_array($ch_cat, [ CURLOPT_RETURNTRANSFER => true, CURLOPT_HTTPHEADER => [$auth_header], CURLOPT_TIMEOUT => 10, ]); $cat_raw = curl_exec($ch_cat); curl_close($ch_cat); $cats = json_decode($cat_raw, true) ?? []; if (!empty($cats[0]['id'])) { $cat_ids = [(int)$cats[0]['id']]; } else { // Crear categoría si no existe $ch_new = curl_init("{$wp_url}/wp-json/wp/v2/categories"); curl_setopt_array($ch_new, [ CURLOPT_RETURNTRANSFER => true, CURLOPT_POST => true, CURLOPT_POSTFIELDS => json_encode(['name' => $category]), CURLOPT_HTTPHEADER => ['Content-Type: application/json', $auth_header], CURLOPT_TIMEOUT => 10, ]); $new_cat = json_decode(curl_exec($ch_new), true) ?? []; curl_close($ch_new); if (!empty($new_cat['id'])) $cat_ids = [(int)$new_cat['id']]; } } // ── Resolver tag IDs si vienen nombres (solo para posts) ───────────────────── $tag_ids = []; if ($type === 'posts' && $tags_raw !== '') { foreach (array_filter(array_map('trim', explode(',', $tags_raw))) as $tag_name) { $ch_tag = curl_init("{$wp_url}/wp-json/wp/v2/tags?search=" . urlencode($tag_name) . "&per_page=1"); curl_setopt_array($ch_tag, [CURLOPT_RETURNTRANSFER=>true, CURLOPT_HTTPHEADER=>[$auth_header], CURLOPT_TIMEOUT=>8]); $tag_data = json_decode(curl_exec($ch_tag), true) ?? []; curl_close($ch_tag); if (!empty($tag_data[0]['id'])) { $tag_ids[] = (int)$tag_data[0]['id']; } else { $ch_new_tag = curl_init("{$wp_url}/wp-json/wp/v2/tags"); curl_setopt_array($ch_new_tag, [CURLOPT_RETURNTRANSFER=>true, CURLOPT_POST=>true, CURLOPT_POSTFIELDS=>json_encode(['name'=>$tag_name]), CURLOPT_HTTPHEADER=>['Content-Type: application/json',$auth_header], CURLOPT_TIMEOUT=>8]); $nt = json_decode(curl_exec($ch_new_tag), true) ?? []; curl_close($ch_new_tag); if (!empty($nt['id'])) $tag_ids[] = (int)$nt['id']; } } } // set_as_home requiere que la página esté publicada para que WP la muestre como portada if ($set_as_home && $status === 'draft') $status = 'publish'; // ── Crear post / page ───────────────────────────────────────────────────────── $endpoint = "{$wp_url}/wp-json/wp/v2/{$type}"; $post_data = [ 'title' => $title, 'content' => $content, 'status' => $status, ]; // format solo aplica a posts, no a pages if ($type === 'posts') $post_data['format'] = 'standard'; if ($slug !== '') $post_data['slug'] = $slug; if (!empty($cat_ids)) $post_data['categories'] = $cat_ids; if (!empty($tag_ids)) $post_data['tags'] = $tag_ids; $ch = curl_init($endpoint); curl_setopt_array($ch, [ CURLOPT_RETURNTRANSFER => true, CURLOPT_POST => true, CURLOPT_POSTFIELDS => json_encode($post_data), CURLOPT_HTTPHEADER => ['Content-Type: application/json', $auth_header], CURLOPT_SSL_VERIFYPEER => true, CURLOPT_TIMEOUT => 20, CURLOPT_FOLLOWLOCATION => true, CURLOPT_MAXREDIRS => 5, ]); $raw = curl_exec($ch); $code = curl_getinfo($ch, CURLINFO_HTTP_CODE); $err = curl_errno($ch); $curl_msg = curl_error($ch); curl_close($ch); if ($err \|\| $code < 200 \|\| $code >= 300) { if ($err) { $hints = [ 28 => 'Timeout — el sitio tardó demasiado en responder', 6 => 'No se pudo resolver el dominio — verifica la URL', 7 => 'Conexión rechazada — puede ser Wordfence bloqueando la IP del servidor (144.217.252.229). Agrégala en Wordfence → Firewall → Allowlisted IPs', 35 => 'Error SSL — verifica que el certificado del sitio sea válido', 51 => 'Certificado SSL no coincide con el dominio', 60 => 'Certificado SSL no verificable', ]; $hint = $hints[$err] ?? "curl error #{$err}: {$curl_msg}"; echo json_encode(['ok'=>false,'error'=>"No se pudo conectar a WordPress: {$hint}", 'code'=>$code, 'curl_errno'=>$err]); exit; } // HTTP 0 = respuesta vacía — firewall bloqueó antes del handshake HTTP if ($code === 0) { echo json_encode([ 'ok' => false, 'error' => 'Wordfence u otro firewall bloqueó la conexión desde el servidor SuperCerebro (IP: 144.217.252.229). Para resolverlo: en el WP Admin del cliente ve a Wordfence → Firewall → "All Options" → sección "Allowlisted IP addresses" y agrega 144.217.252.229. Guarda cambios e intenta de nuevo.', 'code' => 0, ]); exit; } $parsed = json_decode($raw, true); $msg = $parsed['message'] ?? ($parsed['error'] ?? "HTTP {$code}"); $detail = $parsed['data']['details'] ?? ''; $full = $detail ? "{$msg} — {$detail}" : $msg; echo json_encode(['ok'=>false,'error'=>"Error WordPress: {$full}", 'code'=>$code]); exit; } $post = json_decode($raw, true); $post_id = $post['id'] ?? 0; $post_url = $post['link'] ?? ''; $edit_url = $post_id ? "{$wp_url}/wp-admin/post.php?post={$post_id}&action=edit" : ''; // ── set_as_home: establece esta página como front page ──────────────────────── if ($set_as_home && $post_id && $type === 'pages') { $ch_set = curl_init("{$wp_url}/wp-json/wp/v2/settings"); curl_setopt_array($ch_set, [ CURLOPT_RETURNTRANSFER => true, CURLOPT_CUSTOMREQUEST => 'POST', CURLOPT_POSTFIELDS => json_encode(['show_on_front' => 'page', 'page_on_front' => $post_id]), CURLOPT_HTTPHEADER => ['Content-Type: application/json', $auth_header], CURLOPT_TIMEOUT => 10, ]); curl_exec($ch_set); curl_close($ch_set); } $label = $status === 'publish' ? 'Publicado' : 'Borrador creado'; $view_url = $status === 'publish' ? $post_url : ''; echo json_encode([ 'ok' => true, 'post_id' => $post_id, 'edit_url' => $edit_url, 'view_url' => $view_url, 'status' => $status, 'message' => "{$label} en WordPress." . ($edit_url ? " Editor: {$edit_url}" : ''), ]);