HEX
Server: Apache/2.4.52 (Ubuntu)
System: Linux WebLive 5.15.0-79-generic #86-Ubuntu SMP Mon Jul 10 16:07:21 UTC 2023 x86_64
User: ubuntu (1000)
PHP: 7.4.33
Disabled: pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wifcontinued,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_get_handler,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority,pcntl_async_signals,pcntl_unshare,
Upload Files
File: /var/www/html/wpdeskera/wp-content/plugins/elementor-addon-components/includes/proxy/proxy-rss.php
<?php
/**
 * Description: Collecte les données des flux RSS
 * RSS/ATOM, PINTEREST, TWITTER, YOUTUBE et VIMEO
 *
 * @param {string} $_REQUEST['url'] l'url du flux à analyser
 * @param {string} $_REQUEST['nonce'] le nonce à tester
 * @return {Object[]} Les données encodées JSON
 * @since 1.3.1
 */

namespace EACCustomWidgets\Includes\Proxy;

$parse_uri = isset( $_SERVER['SCRIPT_FILENAME'] ) ? explode( 'wp-content', $_SERVER['SCRIPT_FILENAME'] ) : '';
if ( ! empty( $parse_uri ) ) {
	require_once $parse_uri[0] . 'wp-load.php';
} else {
	header( 'Content-Type: text/plain' );
	echo esc_html__( "Impossible de charger 'wp-load'", 'eac-components' );
	exit;
}

if ( ! defined( 'ABSPATH' ) ) {
	exit;
}

if ( ! isset( $_REQUEST['url'] ) || ! isset( $_REQUEST['id'] ) || ! isset( $_REQUEST['nonce'] ) || ! wp_verify_nonce( sanitize_text_field( wp_unslash( $_REQUEST['nonce'] ) ), 'eac_rss_feed_' . sanitize_text_field( wp_unslash( $_REQUEST['id'] ) ) ) ) {
	header( 'Content-Type: text/plain' );
	echo esc_html__( 'Jeton invalide. Actualiser la page courante...', 'eac-components' );
	exit;
}

$url = filter_var( urldecode( $_REQUEST['url'] ), FILTER_SANITIZE_URL );
if ( ! $url ) {
	header( 'Content-Type: text/plain' );
	echo esc_html__( 'URL invalide', 'eac-components' );
	exit;
}

header( 'Content-Type: text/html' );

/** On  fait le boulot */
$results = scrape_rss( $url );
if ( ! $results ) {
	exit;
}

/** Tableau de collecte des données */
$items = array();
$feed  = array();

/** RSS ou ATOM */
$items = isset( $results->channel->item ) ? $results->channel->item : $results->entry;
if ( count( $items ) === 0 ) {
	echo esc_html__( 'Rien à afficher...', 'eac-components' );
	exit;
}

$feed['profile']['headTitle']       = isset( $results->channel ) ? esc_html( (string) $results->channel->title ) : esc_html( (string) $results->title );
$feed['profile']['headDescription'] = isset( $results->channel ) ? esc_html( (string) $results->channel->description ) : '';
if ( isset( $results->channel ) && isset( $results->channel->link ) ) {
	$feed['profile']['headLink'] = esc_url( (string) $results->channel->link );
} elseif ( isset( $results->author->uri ) ) {
	$feed['profile']['headLink'] = esc_url( (string) $results->author->uri );
} else {
	$feed['profile']['headLink'] = esc_url( (string) $results->link['href'] );
}
$feed['profile']['headLogo'] = isset( $results->channel ) ? esc_url( (string) $results->channel->image->url ) : '';

/** Boucle sur les items */
$index = 0;
foreach ( $items as $item ) {
	// Le titre
	$feed['rss'][ $index ]['title'] = ! empty( $item->title ) ? (string) $item->title : '[No title]';
	trim( str_replace( '/<[^>]+>/ig', '', $feed['rss'][ $index ]['title'] ) );

	/** Le lien sur le titre vers la page idoine */
	if ( isset( $item->link[4] ) ) {
		$feed['rss'][ $index ]['lien'] = esc_url( (string) $item->link[4]['href'] );
	} elseif ( isset( $item->link['href'] ) ) {
		$feed['rss'][ $index ]['lien'] = esc_url( (string) $item->link['href'] );
	} else {
		$feed['rss'][ $index ]['lien'] = esc_url( (string) $item->link );
	}

	/** Champ description */
	if ( isset( $item->media_content->media_description ) ) {
		$feed['rss'][ $index ]['description'] = wp_kses_post( (string) $item->media_content->media_description );
	} elseif ( isset( $item->description ) ) {
		$feed['rss'][ $index ]['description'] = wp_kses_post( (string) $item->description );
	} elseif ( isset( $item->summary ) ) {
		$feed['rss'][ $index ]['description'] = wp_kses_post( (string) $item->summary );
	} elseif ( isset( $item->media_group ) ) {
		$feed['rss'][ $index ]['description'] = wp_kses_post( (string) $item->media_group->media_description );
	} else {
		$feed['rss'][ $index ]['description'] = wp_kses_post( (string) $item->content );
	}

	/** Date de publication */
	$feed['rss'][ $index ]['update'] = isset( $item->pubDate ) ? esc_html( (string) $item->pubDate ) : esc_html( (string) $item->updated ); // phpcs:ignore WordPress.NamingConventions.ValidVariableName.UsedPropertyNotSnakeCase
	$feed['rss'][ $index ]['id']     = esc_html( (string) $item->guid );

	/** Le nom de l'auteur */
	if ( isset( $item->author->name ) ) {
		$feed['rss'][ $index ]['author'] = esc_html( (string) $item->author->name );
	} elseif ( isset( $item->author ) ) {
		$feed['rss'][ $index ]['author'] = esc_html( (string) $item->author );
	} elseif ( isset( $item->dc_creator ) ) {
		$feed['rss'][ $index ]['author'] = esc_html( (string) $item->dc_creator );
	} elseif ( isset( $item->media_content->media_credit ) ) {
		$feed['rss'][ $index ]['author'] = esc_html( (string) $item->media_content->media_credit );
	} else {
		$feed['rss'][ $index ]['author'] = '';
	}

	/**
	 * L'image
	 *
	 * Huffingtonpost au moins 2 media_content + Attr:medium
	 */
	if ( isset( $item->media_content ) && count( $item->media_content ) > 1 && isset( $item->media_content[0]['medium'] ) ) {
		$feed['rss'][ $index ]['img'] = esc_url( (string) $item->media_content[0]['url'] );
	} elseif ( isset( $item->media_content->media_thumbnail['url'] ) ) { // Vimeo
		$feed['rss'][ $index ]['img'] = esc_url( (string) $item->media_content->media_thumbnail['url'] );
	} elseif ( isset( $item->media_group->media_thumbnail ) ) { // Youtube
		$feed['rss'][ $index ]['img'] = esc_url( (string) $item->media_group->media_thumbnail['url'] );
	} elseif ( isset( $item->media_thumbnail ) ) { // Feedburner Allociné
		$feed['rss'][ $index ]['img'] = esc_url( (string) $item->media_thumbnail['url'] );
	} elseif ( isset( $item->enclosure ) ) { // Flux standard RSS
		$feed['rss'][ $index ]['img'] = esc_url( (string) $item->enclosure['url'] );
	} elseif ( isset( $item->image->enclosure ) ) { // @since 2.3.4 Flux standard RSS
		$feed['rss'][ $index ]['img'] = esc_url( (string) $item->image->enclosure['url'] );
	} elseif ( isset( $item->media_group->media_content ) ) { // Feedburner
		$feed['rss'][ $index ]['img'] = esc_url( (string) $item->media_group->media_content['url'] );
	} elseif ( isset( $item->media_content[1] ) ) { // 2 media_content. The gardian & Huffingtonpost (2ème peut contenir lien youtube)
		$feed['rss'][ $index ]['img'] = esc_url( (string) $item->media_content[1]['url'] );
	} elseif ( isset( $item->media_content ) ) { // Twitter
		$feed['rss'][ $index ]['img'] = esc_url( (string) $item->media_content['url'] );
	} elseif ( preg_match( '/<img src="(.*?)"/i', $feed['rss'][ $index ]['description'], $m ) ) { // IMG dans description (Pb avec Reuter)
		preg_match( '/<img src="(.*?)"/i', $feed['rss'][ $index ]['description'], $m );
		$feed['rss'][ $index ]['img'] = esc_url( (string) $m[1] );
	} else {
		$feed['rss'][ $index ]['img'] = isset( $item->link[1] ) ? esc_url( (string) $item->link[1]['href'] ) : '';
	}
	/**
	 * Flux ATOM
	 * Le lien image
	 * Huffingtonpost (media_content[1] Attr:medium) Vimeo (media:player), Youtube (media:content), the gardian 2 media:content
	 * le lien de l'image est sur la vidéo, sinon c'est l'url de l'image
	 */
	if ( isset( $item->media_content ) && count( $item->media_content ) > 1 && isset( $item->media_content[1]['medium'] ) ) {
		$feed['rss'][ $index ]['imgLink'] = esc_url( (string) $item->media_content[1]['url'] );
	} elseif ( isset( $item->media_content->media_player ) ) {
		$feed['rss'][ $index ]['imgLink'] = esc_url( (string) $item->media_content->media_player['url'] );
	} elseif ( isset( $item->media_group->media_content ) && isset( $item->media_group->media_thumbnail ) ) {
		$feed['rss'][ $index ]['imgLink'] = esc_url( (string) $item->media_group->media_content['url'] );
	} elseif ( isset( $item->media_content ) && isset( $item->media_content[1]['url'] ) ) {
		$feed['rss'][ $index ]['imgLink'] = esc_url( (string) $item->media_content[1]['url'] );
	} elseif ( isset( $item->media_content ) ) {
		$feed['rss'][ $index ]['imgLink'] = esc_url( (string) $item->media_content['url'] );
	} else {
		$feed['rss'][ $index ]['imgLink'] = esc_url( $feed['rss'][ $index ]['img'] );
	}

	/** Supprime toutes les balises, les retours chariots et les tabulations dans description */
	if ( ! empty( $feed['rss'][ $index ]['description'] ) ) {
		$feed['rss'][ $index ]['description'] = preg_replace( '/<[^>]+>/', ' ', $feed['rss'][ $index ]['description'] );
		$feed['rss'][ $index ]['description'] = preg_replace( '#\n|\t|\r#', ' ', $feed['rss'][ $index ]['description'] );
		$feed['rss'][ $index ]['description'] = preg_replace( '/\s\s+/', ' ', $feed['rss'][ $index ]['description'] );
	} else {
		$feed['rss'][ $index ]['description'] = wp_kses_post( $feed['rss'][ $index ]['title'] );
	}
	++$index;
}

echo wp_json_encode( $feed );

/**
 * Teste corectement la valeur de retour de 'file_get_contents'
 */
function scrape_rss( $url ) {
	$xml = wp_safe_remote_get(
		$url,
		array(
			'timeout' => 10,
			'headers' => array( 'Accept' => 'application/xml' ),
		)
	);

	if ( is_wp_error( $xml ) || 200 !== wp_remote_retrieve_response_code( $xml ) ) {
		$error_message = wp_remote_retrieve_response_code( $xml );

		if ( 401 === $error_message ) {
			echo '"' . esc_url( $url ) . '" => (' . esc_html( $error_message ) . ') ' . esc_html__( 'Non autorisé.', 'eac-components' );
		} elseif ( 403 === $error_message ) {
			echo '"' . esc_url( $url ) . '" => (' . esc_html( $error_message ) . ') ' . esc_html__( 'Accès refusé.', 'eac-components' );
		} elseif ( 404 === $error_message ) {
			echo '"' . esc_url( $url ) . '" => (' . esc_html( $error_message ) . ') ' . esc_html__( "La page demandée n'existe pas.", 'eac-components' );
		} elseif ( 405 === $error_message ) {
			echo '"' . esc_url( $url ) . '" => (' . esc_html( $error_message ) . ') ' . esc_html__( 'Méthode non autorisée.', 'eac-components' );
		} elseif ( 429 === $error_message ) {
			echo '"' . esc_url( $url ) . '" => (' . esc_html( $error_message ) . ') ' . esc_html__( 'Trop de requêtes.', 'eac-components' );
		} elseif ( 495 === $error_message ) {
			echo '"' . esc_url( $url ) . '" => (' . esc_html( $error_message ) . ') ' . esc_html__( 'Certificat SSL invalide.', 'eac-components' );// SSL Certificate Error
		} elseif ( 496 === $error_message ) {
			echo '"' . esc_url( $url ) . '" => (' . esc_html( $error_message ) . ') ' . esc_html__( 'Certificat SSL requis.', 'eac-components' );// SSL Certificate Required
		} elseif ( 500 === $error_message ) {
			echo '"' . esc_url( $url ) . '" => (' . esc_html( $error_message ) . ') ' . esc_html__( 'Erreur Interne du Serveur.', 'eac-components' );
		} elseif ( 503 === $error_message ) {
			echo '"' . esc_url( $url ) . '" => (' . esc_html( $error_message ) . ') ' . esc_html__( 'Service indisponible. Réessayer plus tard.', 'eac-components' );
		} else {
			echo esc_html__( 'HTTP: La requête a échoué.', 'eac-components' );
		}

		return false;
	} elseif ( empty( wp_remote_retrieve_body( $xml ) ) ) {
		echo '"' . esc_url( $url ) . '" => ' . esc_html__( 'Le contenu est vide', 'eac-components' );
		return false;
	}

	$xml = wp_remote_retrieve_body( $xml );
	$xml = str_replace( 'dc:creator', 'dc_creator', $xml );
	$xml = str_replace( 'media:content', 'media_content', $xml );
	$xml = str_replace( 'media:description', 'media_description', $xml );
	$xml = str_replace( 'media:thumbnail', 'media_thumbnail', $xml );
	$xml = str_replace( 'media:group', 'media_group', $xml );
	$xml = str_replace( 'media:player', 'media_player', $xml );
	$xml = str_replace( 'media:embed', 'media_embed', $xml );
	$xml = str_replace( 'media:credit', 'media_credit', $xml );

	libxml_use_internal_errors( true );
	$obj = SimpleXML_Load_String( $xml, 'SimpleXMLElement', LIBXML_NOCDATA );

	if ( false === $obj ) {
		echo esc_html__( "Une erreur s'est produite lors de la lecture de la source", 'eac-components' );
		libxml_use_internal_errors( false );
		return false;
	}

	libxml_use_internal_errors( false );
	return $obj;
}