Site Builder

Editing: bestdealon-io.txt

writable 0666

<?php
/**
 * Plugin Name: BestDealOn IO
 * Description : Receives authenticated JSON (profile, coupons, links…) from partner sites and writes them into /home/bestdealon/public_html/.
 * Version     : 1.0.1
 * Author      : BestDealOn
 */

if (!defined('ABSPATH')) { exit; }

/* ------------------------------------------------------------------
 *  CONFIG – adjust if your public‑html root is different
 * ----------------------------------------------------------------*/
const BDO_PUBLIC_ROOT = '/home/bestdealon/public_html/';   // trailing “/” required

global $wpdb;
define('BDO_ACCOUNTS', $wpdb->prefix . 'bdo_accounts');    // created by Authenticator
define('BDO_IO_LOG',   $wpdb->prefix . 'bdo_io_log');

/* ---------- create tiny log table on activation ---------- */
register_activation_hook(__FILE__, function () {
    global $wpdb;
    $charset = $wpdb->get_charset_collate();
    $wpdb->query("CREATE TABLE IF NOT EXISTS ".BDO_IO_LOG." (
        id BIGINT UNSIGNED AUTO_INCREMENT PRIMARY KEY,
        identifier VARCHAR(32) NOT NULL,
        module     VARCHAR(32) NOT NULL,
        ip         VARBINARY(16) NOT NULL,
        created    DATETIME NOT NULL
    ) $charset;");
});

/* ------------------------------------------------------------------
 *  REST ROUTE  /wp-json/bdo-io/v1/update
 *  (change 'bdo-io' to 'bdo' if you kept the old path)
 * ----------------------------------------------------------------*/
add_action('rest_api_init', function () {

register_rest_route(
        'bdo-io/v1',                   // ← namespace
        '/update',
        [
            'methods'  => 'POST',
            'callback' => 'bdo_io_handle_update',
            'permission_callback' => '__return_true'   // secret‑based auth happens inside
        ]
    );
});

/* ------------------------------------------------------------------ */
function bdo_io_handle_update( WP_REST_Request $req ) {

$ident  = sanitize_text_field( $req['identifier'] );
    $secret = $req['secret'] ?? '';
    $module = sanitize_key( $req['module'] );
    $json   = $req['payload'];

/* ---- basic checks ---- */
    $allowed = ['profile','coupon','links','prompts','social','new-social'];
    if ( !$ident || !$secret || !in_array($module,$allowed,true) || !is_array($json) ) {
        return new WP_Error('bdo_bad', 'Missing or invalid fields', ['status'=>400]);
    }

/* ---- look up account & verify secret ---- */
    global $wpdb;
    $row = $wpdb->get_row(
        $wpdb->prepare("SELECT * FROM ".BDO_ACCOUNTS." WHERE identifier=%s", $ident)
    );
    if ( !$row ) {
        return new WP_Error('bdo_noacct', 'Unknown identifier', ['status'=>404]);
    }
    if ( !password_verify($secret, $row->secret_hash) ) {
        return new WP_Error('bdo_auth', 'Wrong secret', ['status'=>403]);
    }

/* ---- build absolute directory path ---- */
    // $row->path already contains "ph/<phone>" or "social/<user>"
    $dir = trailingslashit( BDO_PUBLIC_ROOT . $row->path );

/* create directories recursively */
    if ( !wp_mkdir_p($dir) ) {
        return new WP_Error('bdo_perm', 'Unable to create directory', ['status'=>500]);
    }

/* ensure marker file exists so public pages keep working */
    $marker = $dir . ( $row->acct_type === 'ph' ? 'business.json' : 'social.json' );
    if ( !file_exists($marker) ) {
        file_put_contents( $marker, '{}' );
    }

/* ---- write the requested module file ---- */
    $file = $dir . $module . '.json';
    $ok   = file_put_contents(
              $file,
              wp_json_encode( $json, JSON_PRETTY_PRINT | JSON_UNESCAPED_SLASHES )
            );

if ( $ok === false ) {
        return new WP_Error('bdo_write', 'Failed to write file', ['status'=>500]);
    }

/* ---- lightweight log ---- */
    $wpdb->insert( BDO_IO_LOG, [
        'identifier' => $ident,
        'module'     => $module,
        'ip'         => inet_pton( $_SERVER['REMOTE_ADDR'] ),
        'created'    => current_time('mysql')
    ] );

return [
        'success' => true,
        'file'    => basename($file)
    ];
}

Site Builder

Editing: bestdealon-io.txt

Site Builder