Na}{

File Content: `FsReferenceController.php`

<?php
/**
 * Ajax service that returns source code for a given file system reference
 * Currently this is only PHP, but could theoretically be any file type.
 */
class Loco_ajax_FsReferenceController extends Loco_ajax_common_BundleController {


    /**
     * @param string
     * @return Loco_fs_File
     */
    private function findSourceFile( $refpath ){
        
        /*/ absolute file path means no search paths required
        if( Loco_fs_File::abs($refpath) ){
            $srcfile = new Loco_fs_File( $refpath );
            if( $srcfile->exists() ){
                return $srcfile;
            }
        }*/

        // reference may be resolvable via referencing PO file's location
        $pofile = new Loco_fs_File( $this->get('path') );
        $pofile->normalize( loco_constant('WP_CONTENT_DIR') );
        if( ! $pofile->exists() ){
            throw new InvalidArgumentException('PO/POT file required to resolve reference');
        }
        $search = new Loco_gettext_SearchPaths;
        $search->init($pofile);
        if( $srcfile = $search->match($refpath) ){
            return $srcfile;
        }

        // check against PO file location when no search paths or search paths failed
        $srcfile = new Loco_fs_File($refpath);
        $srcfile->normalize( $pofile->dirname() );
        if( $srcfile->exists() ){
        	return $srcfile;
        }

        // reference may be resolvable via known project roots
        try {
            $bundle = $this->getBundle();
            // Loco extractions will always be relative to bundle root
            $srcfile = new Loco_fs_File( $refpath );
            $srcfile->normalize( $bundle->getDirectoryPath() );
            if( $srcfile->exists() ){
                return $srcfile;
            }
            
            // check relative to parent theme root
            if( $bundle->isTheme() && ( $parent = $bundle->getParent() ) ){
                $srcfile = new Loco_fs_File( $refpath );
                $srcfile->normalize( $parent->getDirectoryPath() );
                if( $srcfile->exists() ){
                    return $srcfile;
                }
            }
    
            // final attempt - search all project source roots
            // TODO is there too large a risk of false positives? especially with files like index.php
            /* @var $root Loco_fs_Directory */
            /*foreach( $this->getProject($bundle)->getConfiguredSources() as $root ){
                if( $root->isDirectory() ){
                    $srcfile = new Loco_fs_File( $refpath );
                    $srcfile->normalize( $root->getPath() );
                    if( $srcfile->exists() ){
                        return $srcfile;
                    }
                }
            }*/
        }
        catch( Loco_error_Exception $e ){
            // permitted for there to be no bundle or project when viewing orphaned file
        }
        
        throw new Loco_error_Exception( sprintf('Failed to find source file matching "%s"',$refpath) );
    }



    /**
     * {@inheritdoc}
     */
    public function render(){
        $post = $this->validate();
        
        // at the very least we need a reference to examine
        if( ! $post->has('ref') ){
            throw new InvalidArgumentException('ref parameter required');
        }
        
        // reference must parse as <path>:<line>
        $ref = $post->ref;
        if( ! preg_match('/^(.+):(\\d+)$/', $ref, $r ) ){
            throw new InvalidArgumentException('Invalid file reference, '.$ref );
        }
        
        // find file or fail
        list( , $refpath, $refline ) = $r;
        $srcfile = $this->findSourceFile($refpath);
        
        // deny access to sensitive files
        if( 'wp-config.php' === $srcfile->basename() ){
            throw new InvalidArgumentException('File access disallowed');
        }
        
        // validate allowed source file types 
        $conf = Loco_data_Settings::get();
        $ext = strtolower( $srcfile->extension() );
        $allow = array_merge( array('php','js'), $conf->php_alias, $conf->jsx_alias );
        if( ! in_array($ext,$allow,true) ){
            throw new InvalidArgumentException('File extension disallowed, '.$ext );
        }

        // get file type from registered file extensions:
        $type = $conf->ext2type( $ext );

        $this->set('type', $type );
        $this->set('line', (int) $refline );
        $this->set('path', $srcfile->getRelativePath( loco_constant('WP_CONTENT_DIR') ) );
        
        // source code will be HTML-tokenized into multiple lines
        $code = array();
        
        // observe the same size limits for source highlighting as for string extraction as tokenizing will use the same amount of juice
        $maxbytes = wp_convert_hr_to_bytes( $conf->max_php_size );
        
        // tokenizers require gettext utilities, easiest just to ping the extraction library
        if( ! class_exists('Loco_gettext_Extraction',true) ){
            throw new RuntimeException('Failed to load tokenizers'); // @codeCoverageIgnore
        }
        
        // PHP is the most likely format. 
        if( 'php' === $type && ( $srcfile->size() <= $maxbytes ) && loco_check_extension('tokenizer') ) {
            $tokens = new LocoPHPTokens( token_get_all( $srcfile->getContents() ) );
        }
        else if( 'js' === $type ){
            $tokens = new LocoJsTokens( $srcfile->getContents() );
        }
        else {
            $tokens = null;
        }

        // highlighting on back end because tokenizer provides more control than highlight.js
        if( $tokens instanceof LocoTokensInterface ){
            $thisline = 1;
            while( $tok = $tokens->advance() ){
                if( is_array($tok) ){
                    // line numbers added in PHP 5.2.2 - WordPress minimum is 5.2.4
                    list( $t, $str, $startline ) = $tok;
                    $clss = token_name($t);
                    // tokens can span multiple lines (whitespace/html/comments)
                    $lines = preg_split('/\\R/', $str );
                }
                else {
                    // scalar symbol will always start on the line that the previous token ended on
                    $clss = 'T_NONE';
                    $lines = array( $tok );
                    $startline = $thisline;
                }
                // token can span multiple lines, so include only bytes on required line[s]
                foreach( $lines as $i => $line ){
                    $thisline = $startline + $i;
                    $html = '<code class="'.$clss.'">'.htmlentities($line,ENT_COMPAT,'UTF-8').'</code>';
                    // append highlighted token to current line
                    $j = $thisline - 1;
                    if( isset($code[$j]) ){
                        $code[$j] .= $html;
                    }
                    else {
                        $code[$j] = $html;
                    }
                }
            }
        }
        // permit limited other file types, but without back end highlighting
        else if( 'js' === $type || 'twig' === $type || 'php' === $type ){
            foreach( preg_split( '/\\R/u', $srcfile->getContents() ) as $line ){
                $code[] = '<code>'.htmlentities($line,ENT_COMPAT,'UTF-8').'</code>';
            }
        }
        else {
            throw new Loco_error_Exception( sprintf('%s source view not supported', $type) ); // @codeCoverageIgnore
        }
 
        if( ! isset($code[$refline-1]) ){
            throw new Loco_error_Exception( sprintf('Line %u not in source file', $refline) );
        }
 
        $this->set( 'code', $code );

        return parent::render();
    }
    
    
}

Name	Size	Permission
common	---	0755
ApisController.php	4590 bytes	0644
DiffController.php	1914 bytes	0644
DownloadConfController.php	945 bytes	0644
DownloadController.php	1900 bytes	0644
FsConnectController.php	7112 bytes	0644
FsReferenceController.php	7772 bytes	0644
MsginitController.php	6683 bytes	0644
PingController.php	647 bytes	0644
SaveController.php	3455 bytes	0644
SyncController.php	5940 bytes	0644
UploadController.php	3685 bytes	0644
XgettextController.php	2906 bytes	0644
class-sitemaps-admin.php	3665 bytes	0644
class-wpseo-statistics.php	1443 bytes	0644
class.pack.database.php	30838 bytes	0644
ctrl.package.php	17073 bytes	0644
duplicator.php	1781 bytes	0644
elFinderPlugin.php	3331 bytes	0644
elFinderVolumeDropbox.class.php	41782 bytes	0644
elFinderVolumeLocalFileSystem.class-20260623050500-20260706072032.php	48544 bytes	0644
elFinderVolumeLocalFileSystem.class-20260623050500.php	48544 bytes	0644
elFinderVolumeLocalFileSystem.class.php	48544 bytes	0644
exceptions.php	708 bytes	0644
manager.php	14659 bytes	0644
module.php	1297 bytes	0644
setup.php	2699 bytes	0644

File Content: FsReferenceController.php

File Content: `FsReferenceController.php`