HEX
Server: Apache/2.4.58 (Ubuntu)
System: Linux bsx-1-dev 6.8.0-101-generic #101-Ubuntu SMP PREEMPT_DYNAMIC Mon Feb 9 10:15:05 UTC 2026 x86_64
User: www-data (33)
PHP: 8.3.6
Disabled: NONE
Upload Files
File: /var/www/html/wp-content/plugins/memberpress/app/lib/MeprAddonUpdates.php
<?php

if (!defined('ABSPATH')) {
    die('You are not allowed to call this page directly.');
}

class MeprAddonUpdates
{
    /**
     * Indicates if the MemberPress plugin is active.
     *
     * @var boolean
     */
    public $memberpress_active;

    /**
     * The plugin slug.
     *
     * @var string
     */
    public $slug;

    /**
     * The main plugin file path.
     *
     * @var string
     */
    public $main_file;

    /**
     * The options key for storing license information.
     *
     * @var string
     */
    public $options_key;

    /**
     * The plugin title.
     *
     * @var string
     */
    public $title;

    /**
     * The plugin description.
     *
     * @var string
     */
    public $desc;

    /**
     * The plugin installation path.
     *
     * @var string
     */
    public $path;

    /**
     * Constructor.
     *
     * @param  string $slug        The slug.
     * @param  string $main_file   The main file.
     * @param  string $options_key The options key.
     * @param  string $title       The title.
     * @param  string $desc        The description.
     * @return void
     */
    public function __construct($slug, $main_file, $options_key = '', $title = '', $desc = '')
    {
        $this->slug        = $slug;
        $this->main_file   = $main_file;
        $this->options_key = $options_key;
        $this->title       = $title;
        $this->desc        = $desc;
        $this->path        = WP_PLUGIN_DIR . '/' . $slug;

        add_action('after_setup_theme', [$this, 'load_language']);
        add_filter('pre_set_site_transient_update_plugins', [$this, 'queue_update']);
        add_action("in_plugin_update_message-$main_file", [$this, 'check_incorrect_edition']);
        add_action('mepr_plugin_edition_changed', [$this, 'clear_update_transient']);
        add_action('mepr_license_activated_before_queue_update', [$this, 'clear_update_transient']);
        add_action('mepr_license_deactivated_before_queue_update', [$this, 'clear_update_transient']);

        include_once(ABSPATH . 'wp-admin/includes/plugin.php');
        $this->memberpress_active = is_plugin_active('memberpress/memberpress.php');
    }

    /**
     * Queue update.
     *
     * @param  object  $transient          The transient.
     * @param  boolean $first_time_install The first time install.
     * @return object
     */
    public function queue_update($transient, $first_time_install = false)
    {
        if (!$first_time_install && empty($transient->checked)) {
            return $transient;
        }

        $addons_ctrl       = MeprCtrlFactory::fetch('addons');
        $plugin_info       = $addons_ctrl->curr_plugin_info($this->main_file);
        $installed_version = (!$first_time_install && isset($plugin_info['Version'])) ? $plugin_info['Version'] : '0.0.0';
        $update_info       = get_site_transient('mepr_update_info_' . $this->slug);

        if (!is_array($update_info)) {
            $license = $this->license();

            if (empty($license)) {
                // Just here to query for the current version.
                $args = [];
                if (defined('MEMBERPRESS_EDGE') && MEMBERPRESS_EDGE) {
                    $args['edge'] = 'true';
                }

                try {
                    $version_info = $this->send_mothership_request('/versions/latest/' . $this->slug, $args);
                    $curr_version = $version_info['version'];
                    $download_url = '';
                } catch (Exception $e) {
                    if (isset($transient->response[$this->main_file])) {
                        unset($transient->response[$this->main_file]);
                    }

                    return $transient;
                }
            } else {
                try {
                    $domain = urlencode(MeprUtils::site_domain());
                    $args   = compact('domain');

                    if (defined('MEMBERPRESS_EDGE') && MEMBERPRESS_EDGE) {
                        $args['edge'] = 'true';
                    }
                    $license_info = $this->send_mothership_request('/versions/info/' . $this->slug . "/{$license}", $args);
                    $curr_version = $license_info['version'];
                    $download_url = $license_info['url'];

                    if (MeprUtils::is_incorrect_edition_installed()) {
                        $download_url = '';
                    }
                } catch (Exception $e) {
                    try {
                        // Just here to query for the current version.
                        $args = [];
                        if (defined('MEMBERPRESS_EDGE') && MEMBERPRESS_EDGE) {
                            $args['edge'] = 'true';
                        }

                        $version_info = $this->send_mothership_request('/versions/latest/' . $this->slug, $args);
                        $curr_version = $version_info['version'];
                        $download_url = '';
                    } catch (Exception $e) {
                        if (isset($transient->response[$this->main_file])) {
                            unset($transient->response[$this->main_file]);
                        }

                        return $transient;
                    }
                }
            }

            set_site_transient(
                'mepr_update_info_' . $this->slug,
                compact('curr_version', 'download_url'),
                MeprUtils::hours(12)
            );
        } else {
            $curr_version = isset($update_info['curr_version']) ? $update_info['curr_version'] : $installed_version;
            $download_url = isset($update_info['download_url']) ? $update_info['download_url'] : '';
        }

        if (isset($curr_version) && version_compare($curr_version, $installed_version, '>')) {
            $transient->response[$this->main_file] = (object)[
                'id'          => $curr_version,
                'slug'        => $this->slug,
                'plugin'      => $this->main_file,
                'new_version' => $curr_version,
                'url'         => MeprUtils::get_link_url('home'),
                'package'     => $download_url,
            ];
        } else {
            unset($transient->response[$this->main_file]);
        }

        return $transient;
    }

    /**
     * Send mothership request.
     *
     * @param  string  $endpoint The endpoint.
     * @param  array   $args     The args.
     * @param  string  $method   The method.
     * @param  string  $domain   The domain.
     * @param  boolean $blocking The blocking.
     * @return object
     * @throws Exception If the mothership request fails.
     */
    public function send_mothership_request(
        $endpoint,
        $args = [],
        $method = 'get',
        $domain = 'https://mothership.caseproof.com',
        $blocking = true
    ) {
        $mepr_options = MeprOptions::fetch();
        $domain       = defined('MEPR_MOTHERSHIP_DOMAIN') ? MEPR_MOTHERSHIP_DOMAIN : $domain;
        $uri          = $domain . $endpoint;

        $arg_array = [
            'method'    => strtoupper($method),
            'body'      => $args,
            'timeout'   => 15,
            'blocking'  => $blocking,
            'sslverify' => $mepr_options->sslverify,
        ];

        $resp = wp_remote_request($uri, $arg_array);

        // If we're not blocking then the response is irrelevant
        // So we'll just return true.
        if ($blocking === false) {
            return true;
        }

        if (is_wp_error($resp)) {
            throw new Exception(esc_html__('You had an HTTP error connecting to Caseproof\'s Mothership API', 'memberpress'));
        } else {
            $json_res = json_decode($resp['body'], true);
            if (null !== $json_res) {
                if (isset($json_res['error'])) {
                    throw new Exception(esc_html($json_res['error']));
                } else {
                    return $json_res;
                }
            } else {
                throw new Exception(esc_html__('Your License Key was invalid', 'memberpress'));
            }
        }

        return false;
    }

    /**
     * Manually queue update.
     *
     * @param  boolean $first_time_install The first time install.
     * @return void
     */
    public function manually_queue_update($first_time_install = false)
    {
        $transient = get_site_transient('update_plugins');
        set_site_transient('update_plugins', $this->queue_update($transient, $first_time_install));
    }

    /**
     * License.
     *
     * @return string
     */
    private function license()
    {
        if ($this->memberpress_active) {
            $mepr_options = MeprOptions::fetch();
            return $mepr_options->mothership_license;
        } elseif (!empty($this->options_key)) {
            return get_option($this->options_key);
        }

        return false;
    }

    /**
     * Load the add-on's translated strings.
     *
     * For backwards-compatibility only. It is recommended to add the .mo file into the /wp-content/languages/plugins
     * directory instead.
     */
    public function load_language()
    {
        if (is_dir(WP_PLUGIN_DIR . '/mepr-i18n')) {
            load_plugin_textdomain($this->slug, false, 'mepr-i18n');
        }
    }

    /**
     * Check incorrect edition.
     *
     * @return void
     */
    public function check_incorrect_edition()
    {
        if (MeprUtils::is_incorrect_edition_installed()) {
            printf(
                // Translators: %1$s: open link tag, %2$s: close link tag.
                ' <strong>' . esc_html__('To restore automatic updates, %1$sinstall the correct edition%2$s of MemberPress.', 'memberpress') . '</strong>',
                sprintf('<a href="%s">', esc_url(admin_url('admin.php?page=memberpress-options#mepr-license'))),
                '</a>'
            );
        }
    }

    /**
     * Clear update transient.
     *
     * @return void
     */
    public function clear_update_transient()
    {
        delete_site_transient('mepr_update_info_' . $this->slug);
    }
}