Find this useful? Enter your email to receive occasional updates for securing PHP code.
Signing you up...
Thank you for signing up!
PHP Decode
<?php namespace MoOauthClient; use MoOauthClient\Base\InstanceHelper; use MoOauth..
Decoded Output download
<?php
namespace MoOauthClient;
use MoOauthClient\Base\InstanceHelper;
use MoOauthClient\MO_Custom_OAuth1;
use MoOauthClient\OauthHandler;
use MoOauthClient\StorageManager;
class LoginHandler
{
public $oauth_handler;
public function __construct()
{
$this->oauth_handler = new OauthHandler();
add_action("init", array($this, "mo_oauth_decide_flow"));
add_action("mo_oauth_client_tight_login_internal", array($this, "handle_sso"), 10, 4);
}
public function mo_oauth_decide_flow()
{
global $H0;
if (!(isset($_REQUEST[\MoOAuthConstants::OPTION]) && "testattrmappingconfig" === $_REQUEST[\MoOAuthConstants::OPTION])) {
goto Zq;
}
$Ev = isset($_REQUEST["app"]) ? sanitize_text_field(wp_unslash($_REQUEST["app"])) : '';
wp_safe_redirect(site_url() . "?option=oauthredirect&app_name=" . rawurlencode($Ev) . "&test=true");
exit;
Zq:
$this->mo_oauth_login_validate();
}
public function mo_oauth_login_validate()
{
global $H0;
$aQ = new StorageManager();
if (!(isset($_REQUEST[\MoOAuthConstants::OPTION]) && !is_array($_REQUEST["option"]) && strpos(sanitize_text_field(wp_unslash($_REQUEST[\MoOAuthConstants::OPTION])), "oauthredirect") !== false)) {
goto R_;
}
if (isset($_REQUEST["mo_login_popup"])) {
goto qZ;
}
if (!(isset($_REQUEST["resource"]) && !empty($_REQUEST["resource"]))) {
goto tz;
}
if (!empty($_REQUEST["resource"])) {
goto g7;
}
$H0->handle_error("The response from userinfo was empty.");
MO_Oauth_Debug::mo_oauth_log("The response from userinfo was empty.");
wp_die(wp_kses("The response from userinfo was empty.", \mo_oauth_get_valid_html()));
g7:
$aQ = new StorageManager(isset($_REQUEST["resource"]) ? sanitize_text_field(wp_unslash(urldecode($_REQUEST["resource"]))) : '');
$Kx = $aQ->get_value("resource");
$Hr = $aQ->get_value("appname");
$ZW = $aQ->get_value("redirect_uri");
$Ah = $aQ->get_value("access_token");
$FX = $H0->get_app_by_name($Hr)->get_app_config();
$MU = isset($_REQUEST["test"]) && !empty($_REQUEST["test"]);
if (!($MU && '' !== $MU)) {
goto QU;
}
$this->handle_group_test_conf($Kx, $FX, $Ah, false, $MU);
exit;
QU:
$aQ->remove_key("resource");
$aQ->add_replace_entry("popup", "ignore");
if (!has_filter("woocommerce_checkout_get_value")) {
goto cu;
}
$Kx["appname"] = $Hr;
cu:
do_action("mo_abr_filter_login", $Kx);
$this->handle_sso($Hr, $FX, $Kx, $aQ->get_state(), ["access_token" => $Ah]);
tz:
if (isset($_REQUEST["app_name"])) {
goto dh;
}
$t0 = "Please check if you are sending the 'app_name' parameter";
$H0->handle_error($t0);
MO_Oauth_Debug::mo_oauth_log($t0);
wp_die(wp_kses($t0, \mo_oauth_get_valid_html()));
exit;
dh:
$M1 = isset($_REQUEST["app_name"]) && !empty($_REQUEST["app_name"]) ? sanitize_text_field(wp_unslash($_REQUEST["app_name"])) : '';
if (!($M1 == '')) {
goto zf;
}
$t0 = "No such app found configured. Please check if you are sending the correct app_name";
MO_Oauth_Debug::mo_oauth_log($t0);
$H0->handle_error($t0);
wp_die(wp_kses($t0, \mo_oauth_get_valid_html()));
exit;
zf:
$Zc = $H0->mo_oauth_client_get_option("mo_oauth_apps_list");
if (is_array($Zc) && isset($Zc[$M1])) {
goto of;
}
$t0 = "No such app found configured. Please check if you are sending the correct app_name";
MO_Oauth_Debug::mo_oauth_log($t0);
$H0->handle_error($t0);
wp_die(wp_kses($t0, \mo_oauth_get_valid_html()));
exit;
of:
$tC = "//" . $_SERVER["HTTP_HOST"] . $_SERVER["REQUEST_URI"];
$tC = strtok($tC, "?");
$KK = isset($_REQUEST["redirect_url"]) ? sanitize_text_field(wp_unslash(urldecode($_REQUEST["redirect_url"]))) : $tC;
$MU = isset($_REQUEST["test"]) ? sanitize_text_field(wp_unslash(urldecode($_REQUEST["test"]))) : false;
$Fh = isset($_REQUEST["restrictredirect"]) ? sanitize_text_field(wp_unslash(urldecode($_REQUEST["restrictredirect"]))) : false;
$qg = $H0->get_app_by_name($M1);
$Gl = $qg->get_app_config("grant_type");
if (!is_multisite()) {
goto AI;
}
$blog_id = get_current_blog_id();
$EG = $H0->mo_oauth_client_get_option("mo_oauth_c3Vic2l0ZXNzZWxlY3RlZA");
$Gx = array();
if (!isset($EG)) {
goto vp;
}
$Gx = json_decode($H0->mooauthdecrypt($EG), true);
vp:
$M0 = false;
$Hp = $H0->mo_oauth_client_get_option("mo_oauth_isMultiSitePluginRequested");
if (!(is_array($Gx) && in_array($blog_id, $Gx))) {
goto Qr;
}
$M0 = true;
Qr:
if (!(is_multisite() && $Hp && ($Hp && !$M0) && !$MU && $H0->mo_oauth_client_get_option("noOfSubSites") < 1000)) {
goto VU;
}
$H0->handle_error("Login is disabled for this site. Please contact your administrator.");
MO_Oauth_Debug::mo_oauth_log("Login is disabled for this site. Please contact your administrator.");
wp_die("Login is disabled for this site. Please contact your administrator.");
VU:
$aQ->add_replace_entry("blog_id", $blog_id);
AI:
MO_Oauth_Debug::mo_oauth_log("Grant: " . $Gl);
if ($Gl && "Password Grant" === $Gl) {
goto oS;
}
if (!($Gl && "Client Credentials Grant" === $Gl)) {
goto oJ;
}
do_action("mo_oauth_client_credentials_grant_initiate", $M1, $MU);
exit;
oJ:
goto Pr;
oS:
do_action("pwd_essentials_internal");
do_action("mo_oauth_client_add_pwd_js");
echo "\x9 \x9 <script>
\x9 \x9\x9var mo_oauth_app_name = "";
echo wp_kses($M1, \mo_oauth_get_valid_html());
echo "";
\x9 document.addEventListener('DOMContentLoaded', function() {\xa \x9\x9\x9 ";
if ($MU) {
goto TL;
}
echo "\x9\x9 \x9\x9 moOAuthLoginPwd(mo_oauth_app_name, false, '";
echo esc_url($KK);
echo "');
";
goto ak;
TL:
echo " \x9 \x9\x9 moOAuthLoginPwd(mo_oauth_app_name, true, '";
echo esc_url($KK);
echo "');\xa\x9\x9\x9\x9\x9\x9";
ak:
echo "\x9 \x9}, false);\xa \x9 </script>\xa\x9 ";
exit;
Pr:
if (!($qg->get_app_config("appId") === "twitter" || $qg->get_app_config("appId") === "oauth1")) {
goto IZ;
}
MO_Oauth_Debug::mo_oauth_log("Oauth1 flow");
$MU = isset($_REQUEST["test"]) && !empty($_REQUEST["test"]);
if (!($MU && '' !== $MU)) {
goto dX;
}
setcookie("oauth1_test", "1", time() + 20);
dX:
setcookie("oauth1appname", $M1, time() + 60);
$_COOKIE["oauth1appname"] = $M1;
MO_Custom_OAuth1::mo_oauth1_auth_request($M1);
exit;
IZ:
$pd = md5(rand(0, 15));
$aQ->add_replace_entry("appname", $M1);
$aQ->add_replace_entry("redirect_uri", $KK);
$aQ->add_replace_entry("test_config", $MU);
$aQ->add_replace_entry("restrictredirect", $Fh);
$aQ->add_replace_entry("state_nonce", $pd);
$aQ = apply_filters("mo_oauth_set_custom_storage", $aQ);
$Wh = $aQ->get_state();
$Wh = apply_filters("state_internal", $Wh);
$Lm = $qg->get_app_config("authorizeurl");
if (!($qg->get_app_config("send_state") === false || $qg->get_app_config("send_state") === '')) {
goto Dx;
}
$qg->update_app_config("send_state", 1);
$H0->set_app_by_name($M1, $qg->get_app_config('', false));
Dx:
if ($qg->get_app_config("send_state")) {
goto Lo;
}
setcookie("state_param", $Wh, time() + 60);
Lo:
$YC = $qg->get_app_config("pkce_flow");
$ZW = $qg->get_app_config("redirect_uri");
$rC = urlencode($qg->get_app_config("client_id"));
$ZW = empty($ZW) ? \site_url() : $ZW;
if ($YC && 1 === $YC) {
goto pF;
}
$fi = $qg->get_app_config("send_state") ? "&state=" . $Wh : '';
if ($qg->get_app_config("send_state")) {
goto ih;
}
setcookie("state_param", $Wh, time() + 60);
MO_Oauth_Debug::mo_oauth_log("state parameter not sent");
goto EP;
ih:
MO_Oauth_Debug::mo_oauth_log("state parameter sent");
EP:
if (strpos($Lm, "?") !== false) {
goto RG;
}
$Lm = $Lm . "?client_id=" . $rC . "&scope=" . $qg->get_app_config("scope") . "&redirect_uri=" . urlencode($ZW) . "&response_type=code" . $fi;
goto NM;
RG:
$Lm = $Lm . "&client_id=" . $rC . "&scope=" . $qg->get_app_config("scope") . "&redirect_uri=" . urlencode($ZW) . "&response_type=code" . $fi;
NM:
goto lJ;
pF:
MO_Oauth_Debug::mo_oauth_log("PKCE flow");
$do = bin2hex(openssl_random_pseudo_bytes(32));
$yd = $H0->base64url_encode(pack("H*", $do));
$tO = $H0->base64url_encode(pack("H*", hash("sha256", $yd)));
$aQ->add_replace_entry("code_verifier", $yd);
$Wh = $aQ->get_state();
$fi = $qg->get_app_config("send_state") ? "&state=" . $Wh : '';
if ($qg->get_app_config("send_state")) {
goto fa;
}
MO_Oauth_Debug::mo_oauth_log("state parameter not sent");
goto P9;
fa:
MO_Oauth_Debug::mo_oauth_log("state parameter sent");
P9:
if (strpos($Lm, "?") !== false) {
goto SG;
}
$Lm = $Lm . "?client_id=" . $rC . "&scope=" . $qg->get_app_config("scope") . "&redirect_uri=" . urlencode($ZW) . "&response_type=code" . $fi . "&code_challenge=" . $tO . "&code_challenge_method=S256";
goto tk;
SG:
$Lm = $Lm . "&client_id=" . $rC . "&scope=" . $qg->get_app_config("scope") . "&redirect_uri=" . urlencode($ZW) . "&response_type=code" . $fi . "&code_challenge=" . $tO . "&code_challenge_method=S256";
tk:
lJ:
if (!(null !== $qg->get_app_config("send_nonce") && $qg->get_app_config("send_nonce"))) {
goto lB;
}
$QJ = md5(rand());
$H0->set_transient("mo_oauth_nonce_" . $QJ, $QJ, time() + 120);
$Lm = $Lm . "&nonce=" . $QJ;
MO_Oauth_Debug::mo_oauth_log("nonce parameter sent");
lB:
if (!(strpos($Lm, "apple") !== false)) {
goto sM;
}
$Lm = $Lm . "&response_mode=form_post";
sM:
if (!(isset($_SERVER["REQUEST_URI"]) and strpos($_SERVER["REQUEST_URI"], "mooidccallback") !== false)) {
goto I5;
}
if (!($qg->get_app_config("appId") == "Vendasta" && isset($_REQUEST["account_id"]))) {
goto sN;
}
$Lm .= "&account_id=" . $_REQUEST["account_id"];
sN:
I5:
$Lm = apply_filters("mo_auth_url_internal", $Lm, $M1);
MO_Oauth_Debug::mo_oauth_log("Authorizaion Endpoint => " . $Lm);
header("Location: " . $Lm);
exit;
qZ:
R_:
if (isset($_GET["error_description"])) {
goto yj;
}
if (!isset($_GET["error"])) {
goto r0;
}
if (!empty($_GET["error"])) {
goto Rm;
}
MO_Oauth_Debug::mo_oauth_log("Received, Empty Error from Authorize Endpoint");
return;
Rm:
do_action("mo_redirect_to_custom_error_page");
$oC = "Error from Authorize Endpoint: " . sanitize_text_field(wp_unslash($_GET["error"]));
MO_Oauth_Debug::mo_oauth_log($oC);
$H0->handle_error($oC);
wp_die($oC);
r0:
goto Xs;
yj:
if (!(strpos($_GET["state"], "dokan-stripe-connect") !== false)) {
goto qr;
}
return;
qr:
do_action("mo_redirect_to_custom_error_page");
$Dg = "Error description from Authorize Endpoint: " . sanitize_text_field($_GET["error_description"]);
MO_Oauth_Debug::mo_oauth_log($Dg);
$H0->handle_error($Dg);
wp_die($Dg);
Xs:
if (!(strpos($_SERVER["REQUEST_URI"], "openidcallback") !== false || strpos($_SERVER["REQUEST_URI"], "oauth_token") !== false && strpos($_SERVER["REQUEST_URI"], "oauth_verifier"))) {
goto aQ;
}
MO_Oauth_Debug::mo_oauth_log("Oauth1 callback flow");
if (!empty($_COOKIE["oauth1appname"])) {
goto Aj;
}
MO_Oauth_Debug::mo_oauth_log("Returning from OAuth1");
return;
Aj:
MO_Oauth_Debug::mo_oauth_log("OAuth1 app found");
$M1 = $_COOKIE["oauth1appname"];
$Kx = MO_Custom_OAuth1::mo_oidc1_get_access_token($_COOKIE["oauth1appname"]);
$Qi = apply_filters("mo_tr_after_profile_info_extraction_from_token", $Kx);
$ff = [];
$U1 = $this->dropdownattrmapping('', $Kx, $ff);
$H0->mo_oauth_client_update_option("mo_oauth_attr_name_list" . $M1, $U1);
if (!(isset($_COOKIE["oauth1_test"]) && $_COOKIE["oauth1_test"] == "1")) {
goto t6;
}
$qg = $H0->get_app_by_name($M1);
$V4 = $qg->get_app_config();
$this->render_test_config_output($Kx, false, $V4, $M1);
exit;
t6:
$qg = $H0->get_app_by_name($M1);
$VS = $qg->get_app_config("username_attr");
$wu = isset($FX["email_attr"]) ? $FX["email_attr"] : '';
$U2 = $H0->getnestedattribute($Kx, $wu);
$Nh = $H0->getnestedattribute($Kx, $VS);
if (!empty($Nh)) {
goto p7;
}
MO_Oauth_Debug::mo_oauth_log("Username not received.Please configure Attribute Mapping");
$H0->handle_error("Username not received.Please configure Attribute Mapping");
wp_die("Username not received.Please configure Attribute Mapping");
p7:
if (!empty($U2)) {
goto Q7;
}
$user = get_user_by("login", $Nh);
goto IW;
Q7:
$U2 = $H0->getnestedattribute($Kx, $wu);
if (!(false === strpos($U2, "@"))) {
goto tA;
}
MO_Oauth_Debug::mo_oauth_log("Mapped Email attribute does not contain valid email.");
$H0->handle_error("Mapped Email attribute does not contain valid email.");
wp_die("Mapped Email attribute does not contain valid email.");
tA:
IW:
if ($user) {
goto a2;
}
$o_ = 0;
if ($H0->mo_oauth_hbca_xyake()) {
goto jX;
}
$user = $H0->mo_oauth_hjsguh_kiishuyauh878gs($U2, $Nh);
goto yA;
jX:
if ($H0->mo_oauth_client_get_option("mo_oauth_flag") !== true) {
goto Xj;
}
$Cb = base64_decode('PGRpdiBzdHlsZT0ndGV4dC1hbGlnbjpjZW50ZXI7Jz48Yj5Vc2VyIEFjY291bnQgZG9lcyBub3QgZXhpc3QuPC9iPjwvZGl2Pjxicj48c21hbGw+VGhpcyB2ZXJzaW9uIHN1cHBvcnRzIEF1dG8gQ3JlYXRlIFVzZXIgZmVhdHVyZSB1cHRvIDEwIFVzZXJzLiBQbGVhc2UgdXBncmFkZSB0byB0aGUgaGlnaGVyIHZlcnNpb24gb2YgdGhlIHBsdWdpbiB0byBlbmFibGUgYXV0byBjcmVhdGUgdXNlciBmb3IgdW5saW1pdGVkIHVzZXJzIG9yIGFkZCB1c2VyIG1hbnVhbGx5Ljwvc21hbGw+');
$H0->handle_error($Cb);
MO_Oauth_Debug::mo_oauth_log($Cb);
wp_die($Cb);
goto jH;
Xj:
if (!empty($U2)) {
goto cP;
}
$user = $H0->mo_oauth_jhuyn_jgsukaj($Nh, $Nh);
goto Bi;
cP:
$user = $H0->mo_oauth_jhuyn_jgsukaj($U2, $Nh);
Bi:
jH:
yA:
goto in;
a2:
$o_ = $user->ID;
in:
if (!$user) {
goto jd;
}
wp_set_current_user($user->ID);
$J2 = false;
$J2 = apply_filters("mo_remember_me", $J2);
wp_set_auth_cookie($user->ID, $J2);
$user = get_user_by("ID", $user->ID);
do_action("wp_login", $user->user_login, $user);
wp_safe_redirect(home_url());
exit;
jd:
aQ:
if (!isset($_SERVER["HTTP_X_REQUESTED_WITH"]) && (strpos($_SERVER["REQUEST_URI"], "/oauthcallback") !== false || isset($_REQUEST["code"]) && !empty($_REQUEST["code"]) && !isset($_REQUEST["id_token"]))) {
goto Oh;
}
if (!empty($_POST["refresh_token"])) {
goto jL;
}
goto Ew;
Oh:
MO_Oauth_Debug::mo_oauth_log("Flow redirected back to OAuth plugin.");
MO_Oauth_Debug::mo_oauth_log($_REQUEST);
if (!(isset($_REQUEST["post_ID"]) || isset($_REQUEST["edd-action"]))) {
goto ae;
}
return;
ae:
if (!(isset($_REQUEST["page"]) && strcmp($_REQUEST["page"], "pmpro-discountcodes") !== false)) {
goto Nv;
}
return;
Nv:
if (!(strpos($_SERVER["REQUEST_URI"], "/wp-json/moserver/token") !== false)) {
goto ju;
}
return;
ju:
try {
if (isset($_COOKIE["state_param"])) {
goto Tm;
}
if (isset($_GET["state"]) && !empty($_GET["state"])) {
goto Cg;
}
$Ir = new StorageManager();
if (!is_multisite()) {
goto HJ;
}
$Ir->add_replace_entry("blog_id", 1);
HJ:
$GE = $H0->get_app_by_name();
if (isset($_GET["app_name"])) {
goto fu;
}
$Ir->add_replace_entry("appname", $GE->get_app_name());
goto yL;
fu:
$Ir->add_replace_entry("appname", sanitize_text_field(wp_unslash($_GET["app_name"])));
yL:
$Ir->add_replace_entry("test_config", false);
$Ir->add_replace_entry("redirect_uri", site_url());
$Wh = $Ir->get_state();
goto SY;
Tm:
MO_Oauth_Debug::mo_oauth_log("Fetched state parameter from cookie");
$Wh = $_COOKIE["state_param"];
goto SY;
Cg:
$Wh = sanitize_text_field(wp_unslash($_GET["state"]));
SY:
$aQ = new StorageManager($Wh);
MO_Oauth_Debug::mo_oauth_log("Set storage manager from state");
if (!empty($aQ->get_value("appname"))) {
goto IL;
}
return;
IL:
$M1 = $aQ->get_value("appname");
MO_Oauth_Debug::mo_oauth_log("Application Configured: " . $M1);
$MU = $aQ->get_value("test_config");
if (!is_multisite()) {
goto Eg;
}
if (!(empty($aQ->get_value("redirected_to_subsite")) || $aQ->get_value("redirected_to_subsite") !== "redirect")) {
goto Gq;
}
MO_Oauth_Debug::mo_oauth_log("Redirection for multisite environment.");
$blog_id = $aQ->get_value("blog_id");
$Qg = get_site_url($blog_id);
$aQ->add_replace_entry("redirected_to_subsite", "redirect");
$jA = $aQ->get_state();
$Qg = $Qg . "?code=" . $_REQUEST["code"] . "&state=" . $jA;
MO_Oauth_Debug::mo_oauth_log("Redirecting to subsite =>" . $Qg);
wp_redirect($Qg);
exit;
Gq:
Eg:
$Hr = $M1 ? $M1 : '';
$Zc = $H0->mo_oauth_client_get_option("mo_oauth_apps_list");
$VS = '';
$wu = '';
$zg = $H0->get_app_by_name($Hr);
if ($zg) {
goto bi;
}
$H0->handle_error("Application not configured.");
MO_Oauth_Debug::mo_oauth_log("Application not configured.");
exit("Application not configured.");
bi:
$FX = $zg->get_app_config();
if (!(isset($FX["send_nonce"]) && $FX["send_nonce"] === 1)) {
goto nG;
}
if (!(isset($_REQUEST["nonce"]) && !$H0->get_transient("mo_oauth_nonce_" . $_REQUEST["nonce"]))) {
goto x2;
}
$oC = "Nonce verification is failed. Please contact to your administrator.";
$H0->handle_error($oC);
MO_Oauth_Debug::mo_oauth_log($oC);
wp_die($oC);
x2:
nG:
$YC = $zg->get_app_config("pkce_flow");
$Dw = $zg->get_app_config("pkce_client_secret");
$F3 = array("grant_type" => "authorization_code", "client_id" => $FX["client_id"], "redirect_uri" => $FX["redirect_uri"], "code" => $_REQUEST["code"]);
if (!(strpos($FX["accesstokenurl"], "services/oauth2/token") === false && strpos($FX["accesstokenurl"], "salesforce") === false && strpos($FX["accesstokenurl"], "/oam/oauth2/access_token") === false)) {
goto CA;
}
$F3["scope"] = $zg->get_app_config("scope");
CA:
if ($YC && 1 === $YC) {
goto vR;
}
$F3["client_secret"] = $FX["client_secret"];
goto d0;
vR:
if (!($Dw && 1 === $Dw)) {
goto me;
}
$F3["client_secret"] = $FX["client_secret"];
me:
$F3 = apply_filters("mo_oauth_add_client_secret_pkce_flow", $F3, $FX);
$F3["code_verifier"] = $aQ->get_value("code_verifier");
d0:
$wd = isset($FX["send_headers"]) ? $FX["send_headers"] : 0;
$bc = isset($FX["send_body"]) ? $FX["send_body"] : 0;
if ("openidconnect" === $zg->get_app_config("app_type")) {
goto oH;
}
$cD = $FX["accesstokenurl"];
MO_Oauth_Debug::mo_oauth_log("OAuth flow");
if (strpos($FX["authorizeurl"], "clever.com/oauth") != false || strpos($FX["accesstokenurl"], "bitrix") != false) {
goto xa;
}
$k0 = json_decode($this->oauth_handler->get_token($cD, $F3, $wd, $bc), true);
goto GW;
xa:
$k0 = json_decode($this->oauth_handler->get_atoken($cD, $F3, $_GET["code"], $wd, $bc), true);
GW:
if (!(get_current_user_id() && $MU != 1)) {
goto hK;
}
if (has_filter("mo_oauth_break_sso_flow")) {
goto FV;
}
wp_clear_auth_cookie();
wp_set_current_user(0);
FV:
hK:
$_SESSION["procore_access_token"] = isset($k0["access_token"]) ? $k0["access_token"] : false;
if (isset($k0["access_token"])) {
goto Fy;
}
do_action("mo_redirect_to_custom_error_page");
$H0->handle_error("Invalid token received.");
MO_Oauth_Debug::mo_oauth_log("Invalid token received.");
exit("Invalid token received.");
Fy:
MO_Oauth_Debug::mo_oauth_log("Token Response => ");
MO_Oauth_Debug::mo_oauth_log($k0);
$QR = $FX["resourceownerdetailsurl"];
if (!(substr($QR, -1) === "=")) {
goto N7;
}
$QR .= $k0["access_token"];
N7:
MO_Oauth_Debug::mo_oauth_log("Access token received.");
MO_Oauth_Debug::mo_oauth_log("Access Token => " . $k0["access_token"]);
$Kx = false;
MO_Oauth_Debug::mo_oauth_log("Resource Owner => ");
if (!has_filter("mo_userinfo_flow_for_walmart")) {
goto Gt;
}
$Kx = apply_filters("mo_userinfo_flow_for_walmart", $QR, $k0, $F3, $Hr, $FX);
Gt:
if (!($Kx === false)) {
goto il;
}
$fl = null;
$fl = apply_filters("mo_polar_register_user", $k0);
if (!(!empty($fl) && !empty($k0["x_user_id"]))) {
goto Fl;
}
$QR .= "/" . $k0["x_user_id"];
Fl:
$Kx = $this->oauth_handler->get_resource_owner($QR, $k0["access_token"]);
$pM = array();
if (!(strpos($zg->get_app_config("authorizeurl"), "linkedin") !== false && strpos($FX["scope"], "r_emailaddress") != false)) {
goto m_;
}
$j0 = "https://api.linkedin.com/v2/emailAddress?q=members&projection=(elements*(handle~))";
$pM = $this->oauth_handler->get_resource_owner($j0, $k0["access_token"]);
m_:
$Kx = array_merge($Kx, $pM);
il:
if (!has_filter("mo_check_to_execute_post_userinfo_flow_for_walmart")) {
goto C6;
}
$Kx = apply_filters("mo_check_to_execute_post_userinfo_flow_for_walmart", $Kx, $Hr, $FX);
C6:
MO_Oauth_Debug::mo_oauth_log($Kx);
if (has_filter("mo_get_token_for_neon_membership")) {
goto Yz;
}
$Qi = apply_filters("mo_tr_after_profile_info_extraction_from_token", $Kx);
goto ko;
Yz:
$Qi = apply_filters("mo_get_token_for_neon_membership", $Kx, $k0["access_token"]);
ko:
if (!($Qi != '' && is_array($Qi))) {
goto AD;
}
$Kx = array_merge($Kx, $Qi);
AD:
$D6 = apply_filters("accreditions_endpoint", $k0["access_token"]);
if (!($D6 !== '' && is_array($D6))) {
goto Vz;
}
$Kx = array_merge($Kx, $D6);
Vz:
if (!has_filter("mo_polar_register_user")) {
goto Ow;
}
$Pc = array();
$Pc["token"] = $k0["access_token"];
$Kx = array_merge($Kx, $Pc);
Ow:
if (!(strpos($zg->get_app_config("authorizeurl"), "discord") !== false)) {
goto Zc;
}
apply_filters("mo_dis_user_attendance", $Kx["id"]);
$N7 = apply_filters("mo_drm_get_user_roles", array_key_exists("id", $Kx) ? $Kx["id"] : '');
if (!(false !== $N7)) {
goto o7;
}
MO_Oauth_Debug::mo_oauth_log("Discord Roles => ");
MO_Oauth_Debug::mo_oauth_log($N7);
$Kx["roles"] = $N7;
o7:
if (!(!$MU && '' == $MU)) {
goto Ey;
}
do_action("mo_oauth_add_dis_user_server", get_current_user_id(), $k0, $Kx);
Ey:
Zc:
if (!(isset($FX["send_nonce"]) && $FX["send_nonce"] === 1)) {
goto y1;
}
if (!(isset($Kx["nonce"]) && $Kx["nonce"] != NULL)) {
goto NR;
}
if ($H0->get_transient("mo_oauth_nonce_" . $Kx["nonce"])) {
goto ZP;
}
$oC = "Nonce verification is failed. Please contact to your administrator.";
$H0->handle_error($oC);
MO_Oauth_Debug::mo_oauth_log($oC);
wp_die($oC);
goto vV;
ZP:
$H0->delete_transient("mo_oauth_nonce_" . $Kx["nonce"]);
vV:
NR:
y1:
$ff = [];
$U1 = $this->dropdownattrmapping('', $Kx, $ff);
$H0->mo_oauth_client_update_option("mo_oauth_attr_name_list" . $Hr, $U1);
if (!($MU && '' !== $MU)) {
goto hv;
}
$this->handle_group_test_conf($Kx, $FX, $k0["access_token"], false, $MU);
exit;
hv:
goto Sz;
oH:
MO_Oauth_Debug::mo_oauth_log("OpenID Connect flow");
$k0 = json_decode($this->oauth_handler->get_token($FX["accesstokenurl"], $F3, $wd, $bc), true);
MO_Oauth_Debug::mo_oauth_log("Token Response => ");
MO_Oauth_Debug::mo_oauth_log($k0);
$qp = [];
try {
$qp = $this->resolve_and_get_oidc_response($k0);
} catch (\Exception $gP) {
$H0->handle_error($gP->getMessage());
MO_Oauth_Debug::mo_oauth_log("Invalid Response received.");
do_action("mo_redirect_to_custom_error_page");
wp_die("Invalid Response received.");
exit;
}
if (!has_action("mo_oauth_save_access_token_in_cookie")) {
goto Yx;
}
do_action("mo_oauth_save_access_token_in_cookie", $k0["access_token"]);
Yx:
MO_Oauth_Debug::mo_oauth_log("ID Token received Successfully");
MO_Oauth_Debug::mo_oauth_log("ID Token => ");
MO_Oauth_Debug::mo_oauth_log($qp);
$Kx = $this->get_resource_owner_from_app($qp, $Hr);
MO_Oauth_Debug::mo_oauth_log("Resource Owner => ");
MO_Oauth_Debug::mo_oauth_log($Kx);
if (!(strpos($zg->get_app_config("authorizeurl"), "twitch") !== false)) {
goto qM;
}
$xf = apply_filters("mo_tsm_get_user_subscription", $Kx["sub"], $FX["client_id"], $k0["access_token"]);
if (!(false !== $xf)) {
goto za;
}
MO_Oauth_Debug::mo_oauth_log("Twitch Subscription => ");
MO_Oauth_Debug::mo_oauth_log($xf);
$Kx["subscription"] = $xf;
za:
qM:
if (!($zg->get_app_config("appId") === "keycloak")) {
goto K5;
}
$yz = apply_filters("mo_krm_get_user_roles", $Kx, $k0);
if (!(false !== $yz)) {
goto GF;
}
$Kx["roles"] = $yz;
GF:
K5:
$Kx = apply_filters("mo_azureb2c_get_user_group_ids", $Kx, $FX);
$Qi = apply_filters("mo_tr_after_profile_info_extraction_from_token", $Kx);
if (!($Qi != '' && is_array($Qi))) {
goto v2;
}
$Kx = array_merge($Kx, $Qi);
v2:
if (!(isset($FX["send_nonce"]) && $FX["send_nonce"] === 1)) {
goto x6;
}
if (!(isset($Kx["nonce"]) && $Kx["nonce"] != NULL)) {
goto C2;
}
if ($H0->get_transient("mo_oauth_nonce_" . $Kx["nonce"])) {
goto DA;
}
$oC = "Nonce verification is failed. Please contact to your administrator.";
$H0->handle_error($oC);
MO_Oauth_Debug::mo_oauth_log($oC);
wp_die($oC);
goto r8;
DA:
$H0->delete_transient("mo_oauth_nonce_" . $Kx["nonce"]);
r8:
C2:
x6:
$ff = [];
$U1 = $this->dropdownattrmapping('', $Kx, $ff);
$H0->mo_oauth_client_update_option("mo_oauth_attr_name_list" . $Hr, $U1);
if (!($MU && '' !== $MU)) {
goto x9;
}
$k0["refresh_token"] = isset($k0["refresh_token"]) ? $k0["refresh_token"] : '';
$_SESSION["procore_refresh_token"] = $k0["refresh_token"];
$Ie = isset($k0["access_token"]) ? $k0["access_token"] : '';
$this->handle_group_test_conf($Kx, $FX, $Ie, false, $MU);
MO_Oauth_Debug::mo_oauth_log("Attribute Received Successfully");
exit;
x9:
Sz:
if (!(isset($FX["groupdetailsurl"]) && !empty($FX["groupdetailsurl"]))) {
goto IJ;
}
$Kx = $this->handle_group_user_info($Kx, $FX, $k0["access_token"]);
MO_Oauth_Debug::mo_oauth_log("Group Details Obtained => ");
MO_Oauth_Debug::mo_oauth_log($Kx);
IJ:
MO_Oauth_Debug::mo_oauth_log("Fetched resource owner : " . json_encode($Kx));
if (!has_filter("woocommerce_checkout_get_value")) {
goto DG;
}
$Kx["appname"] = $Hr;
DG:
do_action("mo_abr_filter_login", $Kx);
$this->handle_sso($Hr, $FX, $Kx, $Wh, $k0);
} catch (Exception $gP) {
$H0->handle_error($gP->getMessage());
MO_Oauth_Debug::mo_oauth_log($gP->getMessage());
do_action("mo_redirect_to_custom_error_page");
exit(esc_html($gP->getMessage()));
}
goto Ew;
jL:
try {
if (isset($_COOKIE["state_param"])) {
goto md;
}
if (isset($_GET["state"])) {
goto pz;
}
$Ir = new StorageManager();
if (!is_multisite()) {
goto IT;
}
$Ir->add_replace_entry("blog_id", 1);
IT:
$GE = $H0->get_app_by_name();
if (isset($_GET["app_name"])) {
goto RX;
}
$Ir->add_replace_entry("appname", $GE->get_app_name());
goto zH;
RX:
$Ir->add_replace_entry("appname", sanitize_text_field(wp_unslash($_GET["app_name"])));
zH:
$Ir->add_replace_entry("test_config", false);
$Ir->add_replace_entry("redirect_uri", site_url());
$Wh = $Ir->get_state();
goto ZD;
pz:
$Wh = sanitize_text_field(wp_unslash($_GET["state"]));
ZD:
goto W8;
md:
$Wh = sanitize_text_field(wp_unslash($_COOKIE["state_param"]));
W8:
$aQ = new StorageManager($Wh);
if (!empty($aQ->get_value("appname"))) {
goto v4;
}
return;
v4:
$M1 = $aQ->get_value("appname");
$MU = $aQ->get_value("test_config");
$Hr = $M1 ? $M1 : '';
$Zc = $H0->mo_oauth_client_get_option("mo_oauth_apps_list");
$VS = '';
$wu = '';
$zg = $H0->get_app_by_name($Hr);
if ($zg) {
goto BL;
}
$H0->handle_error("Application not configured.");
MO_Oauth_Debug::mo_oauth_log("Application not configured.");
exit("Application not configured.");
BL:
$FX = $zg->get_app_config();
if (!(isset($FX["send_nonce"]) && $FX["send_nonce"] === 1)) {
goto DQ;
}
if (!(isset($_REQUEST["nonce"]) && !$H0->get_transient("mo_oauth_nonce_" . sanitize_text_field(wp_unslash($_REQUEST["nonce"]))))) {
goto KC;
}
$oC = "Nonce verification is failed. Please contact to your administrator.";
$H0->handle_error($oC);
MO_Oauth_Debug::mo_oauth_log($oC);
wp_die(esc_html($oC));
KC:
DQ:
$F3 = array("grant_type" => "refresh_token", "client_id" => $FX["client_id"], "redirect_uri" => $FX["redirect_uri"], "refresh_token" => $_POST["refresh_token"], "scope" => $zg->get_app_config("scope"), "client_secret" => $FX["client_secret"]);
$wd = isset($FX["send_headers"]) ? $FX["send_headers"] : 0;
$bc = isset($FX["send_body"]) ? $FX["send_body"] : 0;
$cD = $FX["accesstokenurl"];
MO_Oauth_Debug::mo_oauth_log("OAuth flow");
$k0 = json_decode($this->oauth_handler->get_token($cD, $F3, $wd, $bc), true);
$RV = isset($k0["access_token"]) ? $k0["access_token"] : false;
if (isset($RV)) {
goto QS;
}
do_action("mo_redirect_to_custom_error_page");
$H0->handle_error("Invalid token received.");
MO_Oauth_Debug::mo_oauth_log("Invalid token received.");
exit("Invalid token received.");
QS:
MO_Oauth_Debug::mo_oauth_log("Token Response => ");
MO_Oauth_Debug::mo_oauth_log($k0);
$QR = $FX["resourceownerdetailsurl"];
if (!(substr($QR, -1) == "=" && !empty($k0["userName"]))) {
goto pA;
}
$QR .= strtolower($k0["userName"]);
pA:
MO_Oauth_Debug::mo_oauth_log("Access token received.");
MO_Oauth_Debug::mo_oauth_log("Access Token => ");
MO_Oauth_Debug::mo_oauth_log($RV);
$Kx = false;
if (!($Kx === false)) {
goto w9;
}
$Kx = $this->oauth_handler->get_resource_owner($QR, $RV);
w9:
MO_Oauth_Debug::mo_oauth_log($Kx);
$ff = [];
$U1 = $this->dropdownattrmapping('', $Kx, $ff);
$H0->mo_oauth_client_update_option("mo_oauth_attr_name_list" . $Hr, $U1);
if (!($MU && '' !== $MU)) {
goto t0;
}
$this->handle_group_test_conf($Kx, $FX, $RV, false, $MU);
exit;
t0:
if (!(isset($FX["groupdetailsurl"]) && !empty($FX["groupdetailsurl"]))) {
goto s6;
}
$Kx = $this->handle_group_user_info($Kx, $FX, $RV);
MO_Oauth_Debug::mo_oauth_log("Group Details Obtained => " . $Kx);
s6:
MO_Oauth_Debug::mo_oauth_log("Fetched resource owner : " . json_encode($Kx));
if (!has_filter("woocommerce_checkout_get_value")) {
goto Im;
}
$Kx["appname"] = $Hr;
Im:
do_action("mo_abr_filter_login", $Kx);
$this->handle_sso($Hr, $FX, $Kx, $Wh, $k0);
} catch (Exception $gP) {
$H0->handle_error($gP->getMessage());
MO_Oauth_Debug::mo_oauth_log($gP->getMessage());
do_action("mo_redirect_to_custom_error_page");
exit(esc_html($gP->getMessage()));
}
Ew:
}
public function dropdownattrmapping($ia, $DC, $ff)
{
global $H0;
foreach ($DC as $ct => $ZN) {
if (is_array($ZN)) {
goto Tv;
}
if (!empty($ia)) {
goto UH;
}
array_push($ff, $ct);
goto dr;
UH:
array_push($ff, $ia . "." . $ct);
dr:
goto o2;
Tv:
if (empty($ia)) {
goto ib;
}
$ia .= ".";
ib:
$ff = $this->dropdownattrmapping($ia . $ct, $ZN, $ff);
$ia = rtrim($ia, ".");
o2:
g6:
}
OT:
return $ff;
}
public function resolve_and_get_oidc_response($k0 = array())
{
if (!empty($k0)) {
goto X3;
}
throw new \Exception("Token response is empty", "invalid_response");
X3:
global $H0;
$tf = isset($k0["id_token"]) ? $k0["id_token"] : false;
$Ah = isset($k0["access_token"]) ? $k0["access_token"] : false;
$_SESSION["procore_access_token"] = isset($Ah) ? $Ah : $tf;
if (!$H0->is_valid_jwt($tf)) {
goto yJ;
}
return $tf;
yJ:
if (!$H0->is_valid_jwt($Ah)) {
goto UA;
}
return $Ah;
UA:
MO_Oauth_Debug::mo_oauth_log("Token is not a valid JWT.");
throw new \Exception("Token is not a valid JWT.");
}
public function handle_group_test_conf($Kx = array(), $FX = array(), $Ah = '', $i1 = false, $MU = false)
{
$this->render_test_config_output($Kx, false);
}
public function testattrmappingconfig($ia, $DC)
{
foreach ($DC as $ct => $ZN) {
if (is_array($ZN) || is_object($ZN)) {
goto SZ;
}
echo "<tr><td>";
if (empty($ia)) {
goto Xd;
}
echo esc_attr($ia) . ".";
Xd:
echo esc_attr($ct) . "</td><td>" . esc_attr($ZN) . "</td></tr>";
goto Qi;
SZ:
if (empty($ia)) {
goto Bq;
}
$ia .= ".";
Bq:
$this->testattrmappingconfig($ia . $ct, $ZN);
$ia = rtrim($ia, ".");
Qi:
gi:
}
jJ:
}
public function render_test_config_output($Kx, $i1 = false)
{
MO_Oauth_Debug::mo_oauth_log("This is test configuration flow => ");
echo "<div style="font-family:Calibri;padding:0 3%;">";
echo "<style>table{border-collapse:collapse;}th {background-color: #eee; text-align: center; padding: 8px; border-width:1px; border-style:solid; border-color:#212121;}tr:nth-child(odd) {background-color: #f2f2f2;} td{padding:8px;border-width:1px; border-style:solid; border-color:#212121;}</style>";
echo "<h2>";
echo $i1 ? "Group Info" : "Test Configuration";
echo "</h2><table><tr><th>Attribute Name</th><th>Attribute Value</th></tr>";
$this->testattrmappingconfig('', $Kx);
echo "</table>";
if ($i1) {
goto aI;
}
echo "<div style="padding: 10px;"></div><input style="padding:1%;width:100px;background: #0091CD none repeat scroll 0% 0%;cursor: pointer;font-size:15px;border-width: 1px;border-style: solid;border-radius: 3px;white-space: nowrap;box-sizing: border-box;border-color: #0073AA;box-shadow: 0px 1px 0px rgba(120, 200, 230, 0.6) inset;color: #FFF;"type="button" value="Done" onClick="self.close();"></div>";
aI:
}
public function handle_sso($Hr, $FX, $Kx, $Wh, $k0, $aV = false)
{
MO_Oauth_Debug::mo_oauth_log("SSO handling flow");
global $H0;
if (!(get_class($this) === "MoOauthClient\LoginHandler" && $H0->check_versi(1))) {
goto Lu;
}
$sB = new InstanceHelper();
$EZ = $sB->get_login_handler_instance();
$EZ->handle_sso($Hr, $FX, $Kx, $Wh, $k0, $aV);
Lu:
$VS = isset($FX["name_attr"]) ? $FX["name_attr"] : '';
$wu = isset($FX["email_attr"]) ? $FX["email_attr"] : '';
$U2 = $H0->getnestedattribute($Kx, $wu);
$Nh = $H0->getnestedattribute($Kx, $VS);
if (!empty($U2)) {
goto aW;
}
MO_Oauth_Debug::mo_oauth_log("Email address not received. Check your Attribute Mapping configuration.");
$H0->handle_error("Email address not received. Check your <strong>Attribute Mapping</strong> configuration.");
wp_die("Email address not received. Check your <strong>Attribute Mapping</strong> configuration.");
aW:
if (!(false === strpos($U2, "@"))) {
goto D_;
}
MO_Oauth_Debug::mo_oauth_log("Mapped Email attribute does not contain valid email.");
$H0->handle_error("Mapped Email attribute does not contain valid email.");
wp_die("Mapped Email attribute does not contain valid email.");
D_:
$user = get_user_by("login", $U2);
if ($user) {
goto r4;
}
$user = get_user_by("email", $U2);
r4:
if ($user) {
goto sD;
}
$o_ = 0;
if ($H0->mo_oauth_hbca_xyake()) {
goto we;
}
$user = $H0->mo_oauth_hjsguh_kiishuyauh878gs($U2, $Nh);
goto y3;
we:
if ($H0->mo_oauth_client_get_option("mo_oauth_flag") !== true) {
goto TX;
}
$Cb = base64_decode('PGRpdiBzdHlsZT0ndGV4dC1hbGlnbjpjZW50ZXI7Jz48Yj5Vc2VyIEFjY291bnQgZG9lcyBub3QgZXhpc3QuPC9iPjwvZGl2Pjxicj48c21hbGw+VGhpcyB2ZXJzaW9uIHN1cHBvcnRzIEF1dG8gQ3JlYXRlIFVzZXIgZmVhdHVyZSB1cHRvIDEwIFVzZXJzLiBQbGVhc2UgdXBncmFkZSB0byB0aGUgaGlnaGVyIHZlcnNpb24gb2YgdGhlIHBsdWdpbiB0byBlbmFibGUgYXV0byBjcmVhdGUgdXNlciBmb3IgdW5saW1pdGVkIHVzZXJzIG9yIGFkZCB1c2VyIG1hbnVhbGx5Ljwvc21hbGw+');
$H0->handle_error($Cb);
MO_Oauth_Debug::mo_oauth_log($Cb);
wp_die($Cb);
goto Eu;
TX:
$user = $H0->mo_oauth_jhuyn_jgsukaj($U2, $Nh);
Eu:
y3:
goto II;
sD:
$o_ = $user->ID;
II:
if (!$user) {
goto L6;
}
wp_set_current_user($user->ID);
MO_Oauth_Debug::mo_oauth_log("User Found");
$J2 = false;
$J2 = apply_filters("mo_remember_me", $J2);
if (!$J2) {
goto Jf;
}
MO_Oauth_Debug::mo_oauth_log("Remember Addon activated");
Jf:
wp_set_auth_cookie($user->ID, $J2);
MO_Oauth_Debug::mo_oauth_log("User cookie set");
$user = get_user_by("ID", $user->ID);
do_action("wp_login", $user->user_login, $user);
wp_safe_redirect(home_url());
MO_Oauth_Debug::mo_oauth_log("User Redirected to home url");
exit;
L6:
}
public function get_resource_owner_from_app($tf, $Vk)
{
return $this->oauth_handler->get_resource_owner_from_id_token($tf);
}
}
?>Did this file decode correctly?
Original Code
<?php
namespace MoOauthClient;
use MoOauthClient\Base\InstanceHelper;
use MoOauthClient\MO_Custom_OAuth1;
use MoOauthClient\OauthHandler;
use MoOauthClient\StorageManager;
class LoginHandler
{
public $oauth_handler;
public function __construct()
{
$this->oauth_handler = new OauthHandler();
add_action("\151\156\x69\164", array($this, "\155\157\137\157\141\165\164\x68\137\144\x65\x63\151\x64\145\x5f\x66\154\157\x77"));
add_action("\155\157\x5f\157\x61\x75\x74\x68\137\x63\x6c\x69\145\x6e\164\137\164\151\x67\x68\164\x5f\154\157\147\151\x6e\137\151\156\164\145\x72\x6e\x61\154", array($this, "\x68\x61\156\x64\x6c\x65\x5f\163\x73\x6f"), 10, 4);
}
public function mo_oauth_decide_flow()
{
global $H0;
if (!(isset($_REQUEST[\MoOAuthConstants::OPTION]) && "\164\145\163\x74\141\x74\x74\162\155\x61\x70\x70\x69\x6e\x67\x63\157\156\146\x69\147" === $_REQUEST[\MoOAuthConstants::OPTION])) {
goto Zq;
}
$Ev = isset($_REQUEST["\141\160\160"]) ? sanitize_text_field(wp_unslash($_REQUEST["\141\x70\160"])) : '';
wp_safe_redirect(site_url() . "\x3f\157\x70\x74\x69\157\x6e\75\x6f\x61\165\164\x68\162\145\144\151\162\145\143\164\x26\x61\x70\160\x5f\156\141\155\145\75" . rawurlencode($Ev) . "\x26\x74\145\x73\164\75\x74\x72\x75\x65");
exit;
Zq:
$this->mo_oauth_login_validate();
}
public function mo_oauth_login_validate()
{
global $H0;
$aQ = new StorageManager();
if (!(isset($_REQUEST[\MoOAuthConstants::OPTION]) && !is_array($_REQUEST["\157\160\164\x69\x6f\x6e"]) && strpos(sanitize_text_field(wp_unslash($_REQUEST[\MoOAuthConstants::OPTION])), "\x6f\141\165\x74\150\162\145\144\151\x72\x65\143\x74") !== false)) {
goto R_;
}
if (isset($_REQUEST["\x6d\x6f\137\x6c\x6f\x67\x69\x6e\x5f\x70\x6f\x70\x75\x70"])) {
goto qZ;
}
if (!(isset($_REQUEST["\162\145\163\157\x75\x72\143\x65"]) && !empty($_REQUEST["\x72\145\x73\x6f\x75\x72\x63\145"]))) {
goto tz;
}
if (!empty($_REQUEST["\162\x65\x73\x6f\x75\162\x63\x65"])) {
goto g7;
}
$H0->handle_error("\x54\150\145\x20\x72\x65\x73\160\x6f\156\163\x65\40\x66\162\157\155\x20\165\163\x65\x72\x69\156\146\157\40\x77\141\163\x20\145\x6d\x70\164\171\56");
MO_Oauth_Debug::mo_oauth_log("\x54\x68\x65\40\x72\145\x73\x70\x6f\156\163\145\x20\146\x72\x6f\155\40\165\163\x65\x72\151\x6e\x66\157\x20\x77\x61\163\x20\145\x6d\x70\164\x79\x2e");
wp_die(wp_kses("\124\x68\x65\40\x72\x65\163\x70\x6f\x6e\x73\145\40\x66\x72\x6f\x6d\x20\x75\x73\x65\162\x69\x6e\x66\157\40\x77\141\163\x20\145\155\x70\x74\x79\x2e", \mo_oauth_get_valid_html()));
g7:
$aQ = new StorageManager(isset($_REQUEST["\x72\x65\x73\157\x75\162\143\145"]) ? sanitize_text_field(wp_unslash(urldecode($_REQUEST["\162\145\x73\x6f\x75\x72\143\145"]))) : '');
$Kx = $aQ->get_value("\x72\145\163\x6f\x75\162\143\145");
$Hr = $aQ->get_value("\141\160\x70\156\141\155\x65");
$ZW = $aQ->get_value("\x72\x65\144\151\x72\x65\x63\164\137\165\162\x69");
$Ah = $aQ->get_value("\x61\143\143\145\163\163\137\x74\157\153\145\x6e");
$FX = $H0->get_app_by_name($Hr)->get_app_config();
$MU = isset($_REQUEST["\164\x65\163\164"]) && !empty($_REQUEST["\164\145\163\164"]);
if (!($MU && '' !== $MU)) {
goto QU;
}
$this->handle_group_test_conf($Kx, $FX, $Ah, false, $MU);
exit;
QU:
$aQ->remove_key("\162\145\x73\157\x75\162\143\145");
$aQ->add_replace_entry("\x70\157\x70\x75\160", "\151\x67\156\157\x72\145");
if (!has_filter("\167\x6f\x6f\143\157\x6d\x6d\145\x72\143\145\x5f\x63\x68\145\x63\153\157\165\x74\x5f\x67\145\x74\x5f\166\x61\154\x75\x65")) {
goto cu;
}
$Kx["\x61\x70\x70\x6e\x61\155\145"] = $Hr;
cu:
do_action("\155\157\x5f\141\x62\162\137\146\151\x6c\x74\145\x72\137\154\x6f\147\151\x6e", $Kx);
$this->handle_sso($Hr, $FX, $Kx, $aQ->get_state(), ["\x61\x63\143\x65\163\163\x5f\164\x6f\x6b\145\x6e" => $Ah]);
tz:
if (isset($_REQUEST["\141\x70\160\137\156\141\x6d\x65"])) {
goto dh;
}
$t0 = "\x50\154\145\x61\x73\x65\x20\143\x68\x65\143\153\40\x69\x66\x20\171\157\x75\x20\141\x72\x65\x20\163\x65\156\x64\x69\156\x67\40\x74\150\145\40\x27\141\160\160\137\x6e\x61\x6d\145\x27\x20\160\x61\162\141\x6d\x65\x74\145\x72";
$H0->handle_error($t0);
MO_Oauth_Debug::mo_oauth_log($t0);
wp_die(wp_kses($t0, \mo_oauth_get_valid_html()));
exit;
dh:
$M1 = isset($_REQUEST["\x61\160\x70\x5f\x6e\x61\155\145"]) && !empty($_REQUEST["\141\x70\x70\x5f\156\x61\x6d\x65"]) ? sanitize_text_field(wp_unslash($_REQUEST["\x61\x70\160\x5f\x6e\x61\x6d\145"])) : '';
if (!($M1 == '')) {
goto zf;
}
$t0 = "\116\x6f\40\x73\165\x63\150\x20\x61\160\x70\40\146\157\165\x6e\144\x20\143\157\156\x66\x69\147\165\162\145\x64\x2e\40\120\x6c\x65\141\x73\x65\40\143\150\145\x63\153\x20\151\146\x20\x79\x6f\165\40\x61\162\x65\40\163\145\x6e\144\x69\156\x67\40\x74\150\x65\x20\143\157\x72\162\145\143\x74\40\x61\160\x70\137\156\141\155\x65";
MO_Oauth_Debug::mo_oauth_log($t0);
$H0->handle_error($t0);
wp_die(wp_kses($t0, \mo_oauth_get_valid_html()));
exit;
zf:
$Zc = $H0->mo_oauth_client_get_option("\155\157\x5f\157\x61\165\x74\x68\137\x61\x70\160\163\137\x6c\151\x73\164");
if (is_array($Zc) && isset($Zc[$M1])) {
goto of;
}
$t0 = "\116\157\40\x73\165\x63\x68\40\141\160\160\40\x66\x6f\x75\156\x64\x20\x63\157\156\146\151\x67\165\162\x65\144\x2e\x20\120\x6c\145\x61\x73\145\x20\x63\x68\x65\143\x6b\40\151\x66\40\x79\157\165\x20\x61\162\145\40\163\145\156\144\151\156\x67\x20\x74\150\x65\40\143\x6f\162\162\x65\143\x74\x20\141\x70\x70\x5f\156\x61\155\145";
MO_Oauth_Debug::mo_oauth_log($t0);
$H0->handle_error($t0);
wp_die(wp_kses($t0, \mo_oauth_get_valid_html()));
exit;
of:
$tC = "\57\57" . $_SERVER["\x48\x54\x54\x50\137\110\x4f\123\x54"] . $_SERVER["\x52\105\121\x55\x45\123\x54\x5f\x55\122\x49"];
$tC = strtok($tC, "\x3f");
$KK = isset($_REQUEST["\162\145\x64\x69\162\x65\143\x74\137\165\162\x6c"]) ? sanitize_text_field(wp_unslash(urldecode($_REQUEST["\162\x65\x64\151\162\145\x63\164\137\x75\162\154"]))) : $tC;
$MU = isset($_REQUEST["\x74\145\x73\164"]) ? sanitize_text_field(wp_unslash(urldecode($_REQUEST["\x74\x65\163\164"]))) : false;
$Fh = isset($_REQUEST["\x72\145\x73\164\x72\151\143\164\162\145\144\x69\162\x65\143\x74"]) ? sanitize_text_field(wp_unslash(urldecode($_REQUEST["\x72\145\x73\x74\x72\151\143\x74\x72\x65\x64\151\162\x65\143\164"]))) : false;
$qg = $H0->get_app_by_name($M1);
$Gl = $qg->get_app_config("\147\x72\x61\156\164\137\164\x79\160\x65");
if (!is_multisite()) {
goto AI;
}
$blog_id = get_current_blog_id();
$EG = $H0->mo_oauth_client_get_option("\x6d\x6f\137\x6f\141\x75\164\x68\x5f\143\63\126\151\143\62\x6c\x30\x5a\130\116\x7a\132\x57\170\x6c\x59\x33\122\x6c\x5a\x41");
$Gx = array();
if (!isset($EG)) {
goto vp;
}
$Gx = json_decode($H0->mooauthdecrypt($EG), true);
vp:
$M0 = false;
$Hp = $H0->mo_oauth_client_get_option("\155\x6f\x5f\157\141\165\x74\x68\x5f\151\x73\115\x75\x6c\x74\x69\x53\x69\164\145\120\x6c\x75\147\x69\156\122\x65\x71\x75\145\163\164\145\x64");
if (!(is_array($Gx) && in_array($blog_id, $Gx))) {
goto Qr;
}
$M0 = true;
Qr:
if (!(is_multisite() && $Hp && ($Hp && !$M0) && !$MU && $H0->mo_oauth_client_get_option("\156\157\x4f\146\x53\165\142\123\151\x74\145\x73") < 1000)) {
goto VU;
}
$H0->handle_error("\114\157\x67\151\x6e\40\151\x73\x20\144\x69\163\x61\x62\x6c\x65\144\40\x66\157\x72\40\x74\150\x69\x73\x20\163\x69\164\145\56\x20\x50\154\145\141\x73\x65\40\143\x6f\x6e\164\x61\143\x74\x20\x79\x6f\165\162\40\141\144\155\151\x6e\151\x73\164\x72\141\164\x6f\162\56");
MO_Oauth_Debug::mo_oauth_log("\114\157\147\x69\x6e\40\151\163\x20\144\151\163\x61\x62\154\x65\144\40\x66\157\x72\x20\x74\x68\151\163\x20\x73\x69\x74\145\x2e\40\120\x6c\145\x61\x73\145\40\143\157\156\164\141\x63\164\x20\171\x6f\x75\x72\x20\x61\144\x6d\x69\156\x69\163\164\x72\141\164\x6f\x72\x2e");
wp_die("\114\x6f\x67\151\x6e\40\x69\163\x20\x64\x69\x73\141\x62\x6c\x65\x64\x20\x66\157\x72\40\x74\150\x69\163\x20\x73\151\x74\145\x2e\40\x50\x6c\145\141\x73\x65\x20\x63\x6f\156\x74\141\143\164\40\171\x6f\x75\162\40\141\144\x6d\x69\156\x69\163\164\162\x61\x74\x6f\x72\56");
VU:
$aQ->add_replace_entry("\142\154\157\147\137\x69\144", $blog_id);
AI:
MO_Oauth_Debug::mo_oauth_log("\x47\162\141\x6e\164\72\x20" . $Gl);
if ($Gl && "\x50\x61\x73\163\x77\157\162\144\x20\107\x72\141\156\164" === $Gl) {
goto oS;
}
if (!($Gl && "\103\154\151\x65\x6e\164\40\103\x72\x65\x64\145\x6e\164\x69\x61\154\x73\x20\x47\162\x61\x6e\164" === $Gl)) {
goto oJ;
}
do_action("\155\x6f\137\x6f\x61\165\x74\x68\x5f\x63\x6c\x69\x65\156\164\137\x63\x72\145\x64\145\x6e\x74\x69\141\154\x73\137\147\162\141\156\x74\x5f\151\x6e\151\164\x69\x61\x74\145", $M1, $MU);
exit;
oJ:
goto Pr;
oS:
do_action("\x70\x77\144\137\x65\163\x73\x65\x6e\164\x69\141\154\163\x5f\151\156\164\x65\x72\156\x61\x6c");
do_action("\x6d\157\x5f\x6f\x61\165\164\x68\137\x63\154\151\x65\x6e\x74\x5f\141\144\144\x5f\160\x77\x64\x5f\x6a\163");
echo "\x9\11\x9\11\74\163\143\x72\x69\x70\164\76\12\x9\11\11\x9\x9\166\141\162\x20\155\157\x5f\x6f\x61\165\x74\x68\x5f\x61\160\x70\x5f\156\141\155\x65\x20\x3d\x20\42";
echo wp_kses($M1, \mo_oauth_get_valid_html());
echo "\x22\x3b\12\11\11\11\x9\11\x64\x6f\143\x75\x6d\x65\156\164\56\141\144\144\x45\166\145\156\164\114\x69\x73\164\x65\156\145\x72\50\47\104\x4f\x4d\x43\157\x6e\x74\145\156\x74\x4c\157\x61\144\145\x64\x27\x2c\40\x66\x75\156\x63\x74\151\x6f\x6e\50\51\40\173\xa\11\x9\x9\x9\11\11";
if ($MU) {
goto TL;
}
echo "\x9\x9\11\x9\x9\11\11\x6d\157\x4f\x41\x75\x74\150\x4c\x6f\x67\x69\x6e\x50\x77\144\50\155\157\x5f\x6f\x61\x75\164\150\x5f\x61\160\160\x5f\156\x61\x6d\x65\x2c\40\x66\x61\x6c\163\x65\x2c\x20\47";
echo esc_url($KK);
echo "\47\51\73\12\11\11\11\11\11\11";
goto ak;
TL:
echo "\11\x9\11\x9\x9\11\11\x6d\x6f\x4f\101\x75\164\150\114\x6f\147\x69\x6e\120\167\144\x28\155\x6f\x5f\x6f\x61\165\164\x68\x5f\141\160\x70\x5f\156\141\x6d\x65\54\x20\x74\x72\165\145\54\40\47";
echo esc_url($KK);
echo "\x27\x29\x3b\xa\x9\x9\x9\x9\x9\x9";
ak:
echo "\x9\11\11\11\x9\175\54\x20\x66\141\x6c\163\145\51\73\xa\11\11\x9\11\74\x2f\x73\x63\x72\x69\x70\164\76\xa\x9\11\11\11";
exit;
Pr:
if (!($qg->get_app_config("\141\x70\160\x49\144") === "\164\167\151\x74\x74\145\x72" || $qg->get_app_config("\141\160\160\111\144") === "\x6f\x61\165\x74\x68\61")) {
goto IZ;
}
MO_Oauth_Debug::mo_oauth_log("\117\141\165\x74\150\x31\40\146\154\157\x77");
$MU = isset($_REQUEST["\164\x65\163\x74"]) && !empty($_REQUEST["\164\145\x73\x74"]);
if (!($MU && '' !== $MU)) {
goto dX;
}
setcookie("\157\x61\165\x74\x68\61\x5f\x74\x65\163\164", "\x31", time() + 20);
dX:
setcookie("\x6f\x61\165\164\150\x31\141\160\160\156\141\155\x65", $M1, time() + 60);
$_COOKIE["\x6f\x61\165\164\x68\61\141\x70\x70\156\x61\155\145"] = $M1;
MO_Custom_OAuth1::mo_oauth1_auth_request($M1);
exit;
IZ:
$pd = md5(rand(0, 15));
$aQ->add_replace_entry("\x61\160\x70\x6e\141\155\145", $M1);
$aQ->add_replace_entry("\x72\x65\144\x69\162\145\143\164\137\x75\162\x69", $KK);
$aQ->add_replace_entry("\164\x65\163\164\137\x63\157\x6e\146\151\147", $MU);
$aQ->add_replace_entry("\162\145\163\164\x72\x69\x63\x74\x72\145\x64\151\162\x65\x63\164", $Fh);
$aQ->add_replace_entry("\x73\164\141\x74\145\137\156\x6f\x6e\143\145", $pd);
$aQ = apply_filters("\155\157\137\x6f\x61\165\x74\x68\137\x73\x65\164\x5f\x63\x75\163\164\x6f\x6d\x5f\x73\x74\157\162\x61\147\x65", $aQ);
$Wh = $aQ->get_state();
$Wh = apply_filters("\x73\x74\x61\x74\x65\137\151\x6e\x74\x65\x72\x6e\x61\x6c", $Wh);
$Lm = $qg->get_app_config("\x61\165\164\150\x6f\x72\x69\x7a\x65\x75\162\x6c");
if (!($qg->get_app_config("\163\145\156\x64\x5f\x73\x74\141\164\x65") === false || $qg->get_app_config("\163\145\156\144\137\x73\164\x61\164\x65") === '')) {
goto Dx;
}
$qg->update_app_config("\163\145\156\144\x5f\163\164\141\x74\x65", 1);
$H0->set_app_by_name($M1, $qg->get_app_config('', false));
Dx:
if ($qg->get_app_config("\x73\x65\x6e\144\137\163\164\141\164\x65")) {
goto Lo;
}
setcookie("\163\x74\x61\164\x65\137\x70\x61\162\141\x6d", $Wh, time() + 60);
Lo:
$YC = $qg->get_app_config("\x70\153\x63\x65\x5f\146\x6c\157\167");
$ZW = $qg->get_app_config("\162\x65\x64\x69\162\x65\143\164\137\165\x72\x69");
$rC = urlencode($qg->get_app_config("\x63\154\x69\x65\156\x74\137\151\144"));
$ZW = empty($ZW) ? \site_url() : $ZW;
if ($YC && 1 === $YC) {
goto pF;
}
$fi = $qg->get_app_config("\163\x65\x6e\x64\x5f\x73\164\141\164\x65") ? "\x26\x73\x74\141\x74\145\75" . $Wh : '';
if ($qg->get_app_config("\163\x65\156\x64\137\163\164\x61\164\145")) {
goto ih;
}
setcookie("\x73\164\x61\x74\145\x5f\160\141\162\141\x6d", $Wh, time() + 60);
MO_Oauth_Debug::mo_oauth_log("\x73\164\141\x74\145\x20\160\x61\x72\x61\x6d\x65\164\145\162\40\156\157\164\40\163\145\156\x74");
goto EP;
ih:
MO_Oauth_Debug::mo_oauth_log("\x73\x74\x61\x74\145\x20\160\x61\x72\x61\x6d\x65\164\x65\x72\40\163\145\156\x74");
EP:
if (strpos($Lm, "\x3f") !== false) {
goto RG;
}
$Lm = $Lm . "\x3f\143\154\x69\145\x6e\164\137\x69\x64\75" . $rC . "\x26\163\x63\157\160\145\x3d" . $qg->get_app_config("\163\x63\157\160\145") . "\x26\x72\145\144\x69\x72\145\143\x74\x5f\x75\162\151\x3d" . urlencode($ZW) . "\46\162\x65\163\x70\x6f\156\x73\145\x5f\x74\x79\160\x65\75\x63\x6f\144\145" . $fi;
goto NM;
RG:
$Lm = $Lm . "\46\143\x6c\x69\145\156\x74\x5f\x69\144\x3d" . $rC . "\x26\x73\143\157\160\x65\x3d" . $qg->get_app_config("\163\143\157\x70\145") . "\46\162\145\144\151\x72\145\143\164\137\165\x72\x69\x3d" . urlencode($ZW) . "\x26\162\x65\x73\x70\157\156\x73\145\137\164\x79\x70\x65\x3d\143\x6f\x64\x65" . $fi;
NM:
goto lJ;
pF:
MO_Oauth_Debug::mo_oauth_log("\120\113\x43\105\x20\x66\154\x6f\167");
$do = bin2hex(openssl_random_pseudo_bytes(32));
$yd = $H0->base64url_encode(pack("\110\x2a", $do));
$tO = $H0->base64url_encode(pack("\x48\x2a", hash("\x73\x68\141\x32\65\x36", $yd)));
$aQ->add_replace_entry("\143\157\144\145\137\x76\145\162\151\x66\151\x65\x72", $yd);
$Wh = $aQ->get_state();
$fi = $qg->get_app_config("\x73\x65\156\144\x5f\x73\x74\x61\164\145") ? "\46\x73\x74\141\164\145\75" . $Wh : '';
if ($qg->get_app_config("\163\145\156\144\137\163\x74\141\x74\145")) {
goto fa;
}
MO_Oauth_Debug::mo_oauth_log("\163\x74\141\164\145\40\x70\x61\x72\141\x6d\x65\x74\145\162\x20\156\157\164\x20\163\x65\156\x74");
goto P9;
fa:
MO_Oauth_Debug::mo_oauth_log("\163\x74\141\164\145\40\160\141\162\x61\x6d\x65\x74\x65\162\40\x73\x65\x6e\164");
P9:
if (strpos($Lm, "\x3f") !== false) {
goto SG;
}
$Lm = $Lm . "\x3f\x63\x6c\x69\x65\x6e\164\x5f\x69\144\75" . $rC . "\46\x73\143\x6f\160\145\x3d" . $qg->get_app_config("\x73\143\x6f\x70\x65") . "\x26\162\145\144\x69\162\x65\x63\x74\x5f\x75\162\151\75" . urlencode($ZW) . "\x26\162\145\163\160\x6f\x6e\x73\x65\x5f\164\x79\x70\145\75\143\157\144\x65" . $fi . "\46\x63\x6f\144\x65\x5f\x63\x68\x61\154\x6c\x65\156\x67\145\75" . $tO . "\46\143\x6f\x64\x65\137\x63\x68\141\154\154\x65\x6e\147\x65\x5f\155\145\x74\150\x6f\144\75\x53\62\x35\x36";
goto tk;
SG:
$Lm = $Lm . "\46\143\x6c\151\145\x6e\x74\137\x69\144\75" . $rC . "\x26\163\143\x6f\160\145\x3d" . $qg->get_app_config("\163\x63\x6f\160\x65") . "\46\x72\145\144\x69\x72\145\143\164\137\165\162\x69\x3d" . urlencode($ZW) . "\x26\162\145\163\160\x6f\156\163\145\x5f\x74\171\160\145\x3d\143\x6f\144\x65" . $fi . "\46\x63\157\144\145\x5f\x63\150\141\x6c\154\145\x6e\x67\145\75" . $tO . "\x26\x63\x6f\x64\145\137\x63\150\x61\154\154\145\x6e\x67\x65\x5f\155\145\x74\x68\x6f\144\75\x53\62\65\x36";
tk:
lJ:
if (!(null !== $qg->get_app_config("\x73\x65\x6e\144\137\156\157\156\x63\x65") && $qg->get_app_config("\163\x65\156\144\137\x6e\x6f\x6e\x63\x65"))) {
goto lB;
}
$QJ = md5(rand());
$H0->set_transient("\155\157\137\157\141\x75\x74\150\x5f\156\157\x6e\143\x65\x5f" . $QJ, $QJ, time() + 120);
$Lm = $Lm . "\x26\156\x6f\156\x63\x65\x3d" . $QJ;
MO_Oauth_Debug::mo_oauth_log("\156\x6f\x6e\x63\x65\x20\160\x61\x72\x61\x6d\145\x74\145\x72\x20\x73\145\156\x74");
lB:
if (!(strpos($Lm, "\141\x70\x70\154\x65") !== false)) {
goto sM;
}
$Lm = $Lm . "\x26\x72\x65\x73\160\157\x6e\163\145\137\155\157\144\145\x3d\x66\x6f\162\155\x5f\160\157\x73\164";
sM:
if (!(isset($_SERVER["\122\105\121\x55\105\123\x54\137\125\x52\111"]) and strpos($_SERVER["\x52\x45\121\125\x45\123\124\x5f\x55\122\x49"], "\155\x6f\x6f\x69\x64\x63\x63\141\154\154\x62\141\143\153") !== false)) {
goto I5;
}
if (!($qg->get_app_config("\141\x70\x70\x49\x64") == "\x56\x65\156\144\141\163\x74\141" && isset($_REQUEST["\x61\x63\x63\157\x75\156\164\x5f\x69\144"]))) {
goto sN;
}
$Lm .= "\46\x61\143\x63\157\165\156\164\137\x69\144\75" . $_REQUEST["\x61\x63\143\x6f\x75\156\164\137\x69\144"];
sN:
I5:
$Lm = apply_filters("\x6d\157\x5f\x61\x75\x74\150\x5f\165\x72\154\x5f\151\156\164\145\162\x6e\141\154", $Lm, $M1);
MO_Oauth_Debug::mo_oauth_log("\x41\165\x74\150\x6f\162\151\172\x61\151\x6f\156\40\x45\156\144\160\x6f\151\x6e\x74\40\75\x3e\40" . $Lm);
header("\x4c\157\x63\141\164\151\x6f\x6e\72\x20" . $Lm);
exit;
qZ:
R_:
if (isset($_GET["\x65\x72\162\x6f\162\137\x64\145\x73\x63\162\x69\x70\164\x69\x6f\156"])) {
goto yj;
}
if (!isset($_GET["\x65\x72\x72\x6f\x72"])) {
goto r0;
}
if (!empty($_GET["\145\x72\162\157\162"])) {
goto Rm;
}
MO_Oauth_Debug::mo_oauth_log("\122\x65\x63\x65\x69\x76\145\144\x2c\x20\x45\x6d\160\164\x79\40\x45\162\x72\157\x72\40\146\162\157\155\x20\101\x75\x74\150\157\162\x69\172\x65\40\x45\x6e\x64\x70\x6f\x69\x6e\164");
return;
Rm:
do_action("\155\x6f\137\162\145\x64\x69\162\x65\x63\x74\x5f\164\157\137\x63\x75\x73\x74\x6f\155\137\x65\162\x72\157\162\x5f\160\141\x67\x65");
$oC = "\105\x72\x72\x6f\162\40\146\x72\157\x6d\x20\101\x75\x74\x68\157\162\x69\172\145\40\x45\156\x64\160\x6f\151\x6e\x74\72\40" . sanitize_text_field(wp_unslash($_GET["\145\x72\162\157\x72"]));
MO_Oauth_Debug::mo_oauth_log($oC);
$H0->handle_error($oC);
wp_die($oC);
r0:
goto Xs;
yj:
if (!(strpos($_GET["\x73\164\x61\x74\x65"], "\x64\157\153\141\x6e\x2d\163\x74\162\x69\160\x65\55\143\x6f\x6e\156\145\143\164") !== false)) {
goto qr;
}
return;
qr:
do_action("\x6d\x6f\x5f\162\145\144\x69\x72\145\x63\x74\137\164\x6f\x5f\x63\x75\163\x74\157\155\137\x65\x72\x72\x6f\x72\137\160\141\x67\x65");
$Dg = "\105\162\162\x6f\x72\40\144\x65\163\143\162\151\x70\164\x69\x6f\156\40\146\162\157\155\x20\x41\165\164\150\x6f\x72\151\172\x65\40\105\x6e\144\160\157\151\x6e\164\72\40" . sanitize_text_field($_GET["\145\x72\x72\x6f\x72\137\144\145\x73\143\x72\x69\160\x74\151\157\x6e"]);
MO_Oauth_Debug::mo_oauth_log($Dg);
$H0->handle_error($Dg);
wp_die($Dg);
Xs:
if (!(strpos($_SERVER["\122\105\121\125\x45\123\x54\x5f\125\x52\x49"], "\157\x70\x65\x6e\151\144\x63\141\154\154\142\x61\143\153") !== false || strpos($_SERVER["\x52\105\121\x55\105\x53\124\x5f\125\x52\111"], "\157\x61\165\x74\x68\x5f\x74\x6f\x6b\x65\x6e") !== false && strpos($_SERVER["\122\105\121\x55\x45\123\124\137\x55\122\111"], "\157\141\165\164\x68\137\x76\x65\x72\x69\x66\x69\145\x72"))) {
goto aQ;
}
MO_Oauth_Debug::mo_oauth_log("\x4f\141\x75\164\150\61\40\x63\141\x6c\154\x62\x61\x63\153\40\146\x6c\157\167");
if (!empty($_COOKIE["\x6f\141\165\x74\x68\x31\141\160\x70\x6e\141\x6d\x65"])) {
goto Aj;
}
MO_Oauth_Debug::mo_oauth_log("\x52\145\164\165\x72\156\151\x6e\147\x20\146\162\157\x6d\40\x4f\x41\x75\x74\150\x31");
return;
Aj:
MO_Oauth_Debug::mo_oauth_log("\117\101\165\164\150\x31\40\x61\160\x70\40\146\157\165\x6e\x64");
$M1 = $_COOKIE["\157\141\x75\164\150\x31\x61\160\160\156\141\155\x65"];
$Kx = MO_Custom_OAuth1::mo_oidc1_get_access_token($_COOKIE["\157\141\x75\x74\x68\61\141\160\x70\x6e\x61\x6d\x65"]);
$Qi = apply_filters("\155\157\x5f\164\x72\x5f\x61\146\164\x65\x72\x5f\x70\162\x6f\146\x69\x6c\145\137\x69\x6e\x66\157\137\145\x78\164\x72\x61\x63\164\151\157\x6e\x5f\x66\162\x6f\x6d\x5f\x74\157\x6b\145\x6e", $Kx);
$ff = [];
$U1 = $this->dropdownattrmapping('', $Kx, $ff);
$H0->mo_oauth_client_update_option("\155\x6f\137\x6f\x61\165\164\x68\x5f\141\x74\x74\x72\x5f\x6e\x61\x6d\x65\x5f\x6c\x69\x73\x74" . $M1, $U1);
if (!(isset($_COOKIE["\x6f\x61\165\164\x68\61\137\164\x65\163\164"]) && $_COOKIE["\x6f\141\x75\164\150\61\x5f\164\x65\163\164"] == "\61")) {
goto t6;
}
$qg = $H0->get_app_by_name($M1);
$V4 = $qg->get_app_config();
$this->render_test_config_output($Kx, false, $V4, $M1);
exit;
t6:
$qg = $H0->get_app_by_name($M1);
$VS = $qg->get_app_config("\165\163\145\x72\x6e\x61\155\145\x5f\x61\x74\x74\x72");
$wu = isset($FX["\x65\x6d\x61\x69\154\x5f\141\x74\x74\x72"]) ? $FX["\x65\155\x61\x69\x6c\137\141\x74\164\x72"] : '';
$U2 = $H0->getnestedattribute($Kx, $wu);
$Nh = $H0->getnestedattribute($Kx, $VS);
if (!empty($Nh)) {
goto p7;
}
MO_Oauth_Debug::mo_oauth_log("\x55\163\x65\x72\x6e\141\x6d\x65\40\x6e\x6f\164\40\x72\145\143\x65\x69\x76\x65\x64\x2e\x50\x6c\x65\x61\x73\x65\40\x63\157\x6e\x66\151\x67\x75\x72\145\40\101\164\164\162\151\142\x75\x74\145\x20\115\141\x70\160\x69\156\147");
$H0->handle_error("\x55\x73\x65\162\x6e\141\155\145\x20\x6e\x6f\x74\x20\x72\x65\x63\x65\x69\166\x65\144\x2e\x50\154\145\x61\163\145\40\x63\x6f\x6e\146\x69\147\x75\x72\x65\x20\101\x74\x74\162\151\x62\x75\x74\145\x20\115\x61\x70\160\151\156\147");
wp_die("\x55\163\x65\162\x6e\141\x6d\x65\40\156\157\x74\40\162\145\143\145\151\x76\145\144\x2e\120\x6c\x65\141\x73\x65\x20\x63\x6f\156\146\151\147\x75\x72\x65\40\101\164\x74\x72\151\x62\x75\x74\145\x20\x4d\x61\160\160\151\x6e\x67");
p7:
if (!empty($U2)) {
goto Q7;
}
$user = get_user_by("\x6c\x6f\x67\151\156", $Nh);
goto IW;
Q7:
$U2 = $H0->getnestedattribute($Kx, $wu);
if (!(false === strpos($U2, "\x40"))) {
goto tA;
}
MO_Oauth_Debug::mo_oauth_log("\x4d\x61\x70\x70\145\x64\40\105\155\x61\x69\154\40\x61\164\164\x72\x69\142\x75\164\145\40\x64\x6f\x65\x73\40\x6e\157\x74\x20\x63\x6f\156\164\x61\x69\x6e\40\166\141\x6c\151\x64\40\x65\x6d\x61\x69\154\56");
$H0->handle_error("\115\x61\160\160\145\144\x20\x45\155\x61\151\x6c\x20\x61\x74\164\162\x69\x62\165\x74\145\40\144\x6f\x65\x73\40\156\157\x74\40\143\157\156\x74\141\x69\x6e\x20\x76\x61\x6c\151\x64\40\x65\x6d\x61\151\154\56");
wp_die("\x4d\x61\160\x70\x65\144\x20\105\155\x61\151\154\40\x61\x74\164\162\x69\142\165\164\145\x20\144\157\x65\163\x20\156\157\164\x20\143\157\156\x74\141\x69\x6e\x20\166\x61\154\151\x64\x20\145\x6d\x61\151\154\56");
tA:
IW:
if ($user) {
goto a2;
}
$o_ = 0;
if ($H0->mo_oauth_hbca_xyake()) {
goto jX;
}
$user = $H0->mo_oauth_hjsguh_kiishuyauh878gs($U2, $Nh);
goto yA;
jX:
if ($H0->mo_oauth_client_get_option("\x6d\157\137\x6f\141\x75\164\150\137\x66\154\141\147") !== true) {
goto Xj;
}
$Cb = base64_decode('PGRpdiBzdHlsZT0ndGV4dC1hbGlnbjpjZW50ZXI7Jz48Yj5Vc2VyIEFjY291bnQgZG9lcyBub3QgZXhpc3QuPC9iPjwvZGl2Pjxicj48c21hbGw+VGhpcyB2ZXJzaW9uIHN1cHBvcnRzIEF1dG8gQ3JlYXRlIFVzZXIgZmVhdHVyZSB1cHRvIDEwIFVzZXJzLiBQbGVhc2UgdXBncmFkZSB0byB0aGUgaGlnaGVyIHZlcnNpb24gb2YgdGhlIHBsdWdpbiB0byBlbmFibGUgYXV0byBjcmVhdGUgdXNlciBmb3IgdW5saW1pdGVkIHVzZXJzIG9yIGFkZCB1c2VyIG1hbnVhbGx5Ljwvc21hbGw+');
$H0->handle_error($Cb);
MO_Oauth_Debug::mo_oauth_log($Cb);
wp_die($Cb);
goto jH;
Xj:
if (!empty($U2)) {
goto cP;
}
$user = $H0->mo_oauth_jhuyn_jgsukaj($Nh, $Nh);
goto Bi;
cP:
$user = $H0->mo_oauth_jhuyn_jgsukaj($U2, $Nh);
Bi:
jH:
yA:
goto in;
a2:
$o_ = $user->ID;
in:
if (!$user) {
goto jd;
}
wp_set_current_user($user->ID);
$J2 = false;
$J2 = apply_filters("\155\157\137\x72\x65\155\145\155\142\145\x72\x5f\155\145", $J2);
wp_set_auth_cookie($user->ID, $J2);
$user = get_user_by("\x49\x44", $user->ID);
do_action("\167\x70\137\x6c\157\147\x69\156", $user->user_login, $user);
wp_safe_redirect(home_url());
exit;
jd:
aQ:
if (!isset($_SERVER["\x48\124\124\x50\137\130\137\x52\x45\x51\x55\105\123\124\105\104\x5f\127\x49\x54\110"]) && (strpos($_SERVER["\122\105\x51\x55\x45\123\124\137\125\x52\111"], "\57\157\141\165\x74\150\x63\141\x6c\x6c\x62\141\143\x6b") !== false || isset($_REQUEST["\x63\157\x64\145"]) && !empty($_REQUEST["\143\x6f\144\x65"]) && !isset($_REQUEST["\x69\x64\x5f\x74\157\153\x65\x6e"]))) {
goto Oh;
}
if (!empty($_POST["\x72\x65\146\x72\145\163\150\x5f\164\157\x6b\x65\156"])) {
goto jL;
}
goto Ew;
Oh:
MO_Oauth_Debug::mo_oauth_log("\x46\154\157\167\40\162\x65\x64\x69\162\145\143\x74\145\144\40\142\x61\143\153\x20\164\157\40\x4f\x41\x75\x74\150\x20\160\x6c\x75\147\x69\x6e\x2e");
MO_Oauth_Debug::mo_oauth_log($_REQUEST);
if (!(isset($_REQUEST["\x70\157\163\164\x5f\111\x44"]) || isset($_REQUEST["\145\144\x64\55\x61\143\164\151\x6f\156"]))) {
goto ae;
}
return;
ae:
if (!(isset($_REQUEST["\160\x61\147\x65"]) && strcmp($_REQUEST["\160\x61\x67\x65"], "\160\x6d\x70\162\157\x2d\144\x69\163\x63\x6f\x75\156\x74\x63\157\x64\145\163") !== false)) {
goto Nv;
}
return;
Nv:
if (!(strpos($_SERVER["\x52\105\x51\x55\105\123\124\137\125\122\x49"], "\x2f\167\160\55\x6a\x73\157\156\x2f\x6d\x6f\163\145\162\x76\x65\162\57\164\x6f\x6b\x65\x6e") !== false)) {
goto ju;
}
return;
ju:
try {
if (isset($_COOKIE["\x73\x74\141\x74\x65\x5f\x70\x61\x72\x61\155"])) {
goto Tm;
}
if (isset($_GET["\x73\164\141\164\145"]) && !empty($_GET["\x73\x74\141\x74\145"])) {
goto Cg;
}
$Ir = new StorageManager();
if (!is_multisite()) {
goto HJ;
}
$Ir->add_replace_entry("\x62\x6c\157\147\137\x69\x64", 1);
HJ:
$GE = $H0->get_app_by_name();
if (isset($_GET["\x61\160\x70\137\x6e\141\155\x65"])) {
goto fu;
}
$Ir->add_replace_entry("\x61\160\160\x6e\x61\x6d\x65", $GE->get_app_name());
goto yL;
fu:
$Ir->add_replace_entry("\141\x70\x70\156\x61\x6d\145", sanitize_text_field(wp_unslash($_GET["\141\160\160\137\x6e\141\155\145"])));
yL:
$Ir->add_replace_entry("\164\x65\163\x74\x5f\143\x6f\x6e\146\x69\x67", false);
$Ir->add_replace_entry("\162\x65\144\151\x72\x65\x63\x74\x5f\165\162\x69", site_url());
$Wh = $Ir->get_state();
goto SY;
Tm:
MO_Oauth_Debug::mo_oauth_log("\106\145\x74\x63\150\145\x64\40\163\164\x61\164\145\40\160\141\162\x61\x6d\x65\x74\x65\162\40\146\x72\157\155\40\143\x6f\157\153\151\145");
$Wh = $_COOKIE["\x73\x74\x61\x74\145\x5f\160\x61\162\x61\x6d"];
goto SY;
Cg:
$Wh = sanitize_text_field(wp_unslash($_GET["\x73\164\x61\164\145"]));
SY:
$aQ = new StorageManager($Wh);
MO_Oauth_Debug::mo_oauth_log("\123\x65\164\x20\163\x74\157\x72\x61\147\145\x20\x6d\x61\x6e\141\147\x65\x72\x20\146\162\x6f\155\x20\163\x74\141\164\145");
if (!empty($aQ->get_value("\x61\160\x70\x6e\141\x6d\x65"))) {
goto IL;
}
return;
IL:
$M1 = $aQ->get_value("\141\x70\160\x6e\141\155\145");
MO_Oauth_Debug::mo_oauth_log("\101\160\160\x6c\151\x63\x61\x74\151\157\x6e\x20\x43\157\156\x66\x69\147\165\x72\x65\144\72\40" . $M1);
$MU = $aQ->get_value("\x74\145\x73\x74\x5f\x63\x6f\x6e\146\x69\147");
if (!is_multisite()) {
goto Eg;
}
if (!(empty($aQ->get_value("\x72\x65\144\x69\x72\x65\143\164\x65\x64\137\x74\x6f\x5f\163\165\142\163\151\164\145")) || $aQ->get_value("\x72\145\144\x69\x72\x65\x63\x74\x65\x64\x5f\x74\157\137\163\x75\x62\163\x69\164\145") !== "\162\145\x64\x69\x72\145\143\x74")) {
goto Gq;
}
MO_Oauth_Debug::mo_oauth_log("\122\x65\144\151\162\x65\x63\x74\151\x6f\x6e\40\146\157\x72\40\155\165\154\164\151\163\151\164\x65\x20\x65\156\x76\x69\x72\157\x6e\155\145\156\x74\x2e");
$blog_id = $aQ->get_value("\142\154\x6f\147\137\151\144");
$Qg = get_site_url($blog_id);
$aQ->add_replace_entry("\162\145\x64\x69\x72\x65\x63\x74\x65\144\137\164\157\x5f\x73\165\142\163\151\x74\145", "\x72\145\144\x69\162\145\x63\164");
$jA = $aQ->get_state();
$Qg = $Qg . "\77\143\157\144\x65\x3d" . $_REQUEST["\143\157\144\x65"] . "\46\x73\164\141\164\x65\75" . $jA;
MO_Oauth_Debug::mo_oauth_log("\122\145\x64\x69\x72\x65\143\x74\151\x6e\x67\40\x74\x6f\40\x73\x75\x62\x73\151\x74\x65\x20\x3d\x3e" . $Qg);
wp_redirect($Qg);
exit;
Gq:
Eg:
$Hr = $M1 ? $M1 : '';
$Zc = $H0->mo_oauth_client_get_option("\x6d\x6f\137\157\141\165\x74\150\137\141\160\160\163\137\154\x69\x73\x74");
$VS = '';
$wu = '';
$zg = $H0->get_app_by_name($Hr);
if ($zg) {
goto bi;
}
$H0->handle_error("\101\x70\160\154\151\x63\x61\x74\x69\x6f\156\x20\156\157\x74\40\x63\x6f\x6e\146\151\147\165\x72\145\x64\56");
MO_Oauth_Debug::mo_oauth_log("\101\x70\x70\154\x69\x63\x61\164\x69\x6f\x6e\x20\156\x6f\164\x20\x63\x6f\x6e\x66\151\147\x75\x72\145\144\56");
exit("\101\x70\160\154\151\x63\141\164\151\x6f\x6e\40\x6e\157\x74\x20\x63\x6f\x6e\x66\x69\x67\x75\x72\145\x64\x2e");
bi:
$FX = $zg->get_app_config();
if (!(isset($FX["\163\145\x6e\x64\x5f\156\x6f\x6e\x63\x65"]) && $FX["\x73\x65\156\144\137\x6e\x6f\156\x63\x65"] === 1)) {
goto nG;
}
if (!(isset($_REQUEST["\156\157\x6e\143\145"]) && !$H0->get_transient("\155\x6f\137\x6f\x61\x75\x74\150\x5f\x6e\x6f\x6e\143\x65\137" . $_REQUEST["\156\x6f\156\143\145"]))) {
goto x2;
}
$oC = "\116\x6f\x6e\143\x65\40\x76\x65\x72\151\x66\151\143\x61\164\x69\x6f\x6e\40\151\163\40\x66\141\x69\x6c\x65\144\56\x20\x50\154\x65\141\x73\x65\x20\x63\x6f\x6e\164\x61\x63\x74\x20\164\x6f\40\x79\x6f\x75\162\x20\141\x64\155\x69\156\151\x73\x74\162\x61\x74\x6f\x72\56";
$H0->handle_error($oC);
MO_Oauth_Debug::mo_oauth_log($oC);
wp_die($oC);
x2:
nG:
$YC = $zg->get_app_config("\x70\x6b\143\x65\137\x66\154\157\167");
$Dw = $zg->get_app_config("\x70\153\x63\x65\x5f\143\154\x69\x65\156\x74\x5f\163\145\143\162\145\x74");
$F3 = array("\147\x72\141\x6e\164\137\x74\171\x70\145" => "\x61\165\x74\150\x6f\162\x69\x7a\x61\x74\151\x6f\x6e\x5f\x63\157\x64\145", "\143\x6c\151\145\156\x74\137\151\x64" => $FX["\143\154\151\145\x6e\164\x5f\x69\144"], "\162\x65\x64\x69\x72\145\x63\x74\137\165\162\151" => $FX["\162\x65\144\151\162\x65\143\x74\x5f\165\x72\x69"], "\143\157\x64\x65" => $_REQUEST["\x63\x6f\144\145"]);
if (!(strpos($FX["\x61\x63\x63\x65\163\x73\164\x6f\153\x65\x6e\165\162\x6c"], "\163\x65\162\x76\151\x63\x65\x73\x2f\x6f\x61\x75\164\150\62\57\x74\157\x6b\145\x6e") === false && strpos($FX["\x61\x63\143\x65\163\x73\x74\x6f\153\145\156\x75\162\154"], "\x73\x61\154\145\x73\146\157\162\143\145") === false && strpos($FX["\141\143\143\x65\x73\163\164\157\x6b\145\x6e\x75\x72\x6c"], "\x2f\157\141\x6d\57\157\141\165\x74\150\62\57\141\x63\143\145\x73\163\137\164\x6f\153\145\156") === false)) {
goto CA;
}
$F3["\163\143\x6f\x70\x65"] = $zg->get_app_config("\x73\143\x6f\160\x65");
CA:
if ($YC && 1 === $YC) {
goto vR;
}
$F3["\143\154\x69\x65\156\164\137\x73\145\x63\x72\x65\164"] = $FX["\x63\x6c\151\145\x6e\x74\137\163\x65\143\x72\145\x74"];
goto d0;
vR:
if (!($Dw && 1 === $Dw)) {
goto me;
}
$F3["\143\x6c\x69\x65\x6e\x74\137\163\145\143\162\x65\x74"] = $FX["\143\x6c\151\145\x6e\164\137\x73\x65\143\x72\145\164"];
me:
$F3 = apply_filters("\155\157\x5f\157\141\x75\x74\x68\x5f\x61\144\x64\137\x63\154\x69\x65\156\x74\x5f\x73\x65\x63\162\x65\x74\x5f\160\153\x63\x65\x5f\146\x6c\x6f\167", $F3, $FX);
$F3["\143\x6f\144\x65\x5f\166\x65\x72\x69\x66\x69\145\x72"] = $aQ->get_value("\x63\157\144\145\x5f\166\145\x72\x69\146\x69\145\x72");
d0:
$wd = isset($FX["\x73\145\x6e\x64\137\x68\x65\141\x64\x65\x72\163"]) ? $FX["\x73\x65\x6e\144\x5f\x68\145\x61\144\145\x72\163"] : 0;
$bc = isset($FX["\x73\145\x6e\x64\137\x62\x6f\x64\171"]) ? $FX["\x73\x65\156\x64\137\142\x6f\x64\x79"] : 0;
if ("\x6f\160\x65\x6e\151\x64\x63\x6f\x6e\156\x65\x63\164" === $zg->get_app_config("\x61\160\160\137\164\x79\160\145")) {
goto oH;
}
$cD = $FX["\141\143\x63\145\163\163\x74\157\153\145\x6e\165\162\154"];
MO_Oauth_Debug::mo_oauth_log("\x4f\x41\x75\164\150\40\146\154\x6f\x77");
if (strpos($FX["\x61\165\164\150\x6f\162\x69\x7a\x65\x75\x72\154"], "\x63\x6c\x65\x76\145\162\56\x63\x6f\155\x2f\157\x61\165\x74\150") != false || strpos($FX["\141\143\x63\145\163\x73\x74\157\153\145\x6e\x75\162\x6c"], "\x62\151\x74\x72\x69\170") != false) {
goto xa;
}
$k0 = json_decode($this->oauth_handler->get_token($cD, $F3, $wd, $bc), true);
goto GW;
xa:
$k0 = json_decode($this->oauth_handler->get_atoken($cD, $F3, $_GET["\143\157\144\x65"], $wd, $bc), true);
GW:
if (!(get_current_user_id() && $MU != 1)) {
goto hK;
}
if (has_filter("\x6d\157\x5f\x6f\141\x75\164\x68\x5f\142\x72\145\141\153\137\163\x73\x6f\137\x66\154\157\x77")) {
goto FV;
}
wp_clear_auth_cookie();
wp_set_current_user(0);
FV:
hK:
$_SESSION["\160\162\x6f\143\157\162\x65\x5f\x61\x63\x63\x65\163\x73\137\x74\x6f\x6b\x65\x6e"] = isset($k0["\141\143\x63\145\x73\x73\x5f\164\x6f\x6b\145\156"]) ? $k0["\x61\143\143\x65\x73\163\x5f\164\157\x6b\x65\156"] : false;
if (isset($k0["\141\x63\143\x65\163\x73\x5f\164\x6f\153\145\x6e"])) {
goto Fy;
}
do_action("\155\157\x5f\162\x65\144\x69\x72\x65\x63\x74\137\164\157\137\143\x75\163\164\157\x6d\137\145\162\x72\x6f\162\137\x70\141\x67\145");
$H0->handle_error("\x49\156\166\x61\x6c\x69\x64\x20\x74\157\153\145\x6e\40\x72\145\x63\x65\x69\166\145\144\x2e");
MO_Oauth_Debug::mo_oauth_log("\x49\156\x76\141\154\151\x64\x20\164\157\x6b\x65\x6e\x20\x72\145\143\x65\x69\x76\145\x64\x2e");
exit("\111\x6e\x76\141\154\151\144\x20\164\157\x6b\145\156\x20\162\145\143\x65\151\166\x65\x64\56");
Fy:
MO_Oauth_Debug::mo_oauth_log("\124\x6f\x6b\145\x6e\40\122\x65\163\160\157\x6e\163\145\40\x3d\76\x20");
MO_Oauth_Debug::mo_oauth_log($k0);
$QR = $FX["\x72\145\163\157\x75\x72\x63\x65\157\167\x6e\145\162\x64\x65\x74\141\151\154\x73\165\162\154"];
if (!(substr($QR, -1) === "\x3d")) {
goto N7;
}
$QR .= $k0["\x61\x63\x63\145\x73\163\x5f\x74\x6f\153\145\x6e"];
N7:
MO_Oauth_Debug::mo_oauth_log("\101\143\x63\145\163\163\40\164\x6f\153\x65\156\x20\x72\145\x63\x65\x69\166\x65\x64\56");
MO_Oauth_Debug::mo_oauth_log("\101\143\x63\x65\x73\163\x20\124\x6f\153\145\156\40\75\x3e\x20" . $k0["\x61\143\x63\145\x73\163\137\x74\x6f\x6b\x65\156"]);
$Kx = false;
MO_Oauth_Debug::mo_oauth_log("\x52\145\x73\x6f\165\x72\x63\145\40\117\x77\156\145\162\x20\x3d\76\40");
if (!has_filter("\155\157\137\x75\163\145\x72\151\156\x66\x6f\137\146\x6c\x6f\x77\137\x66\x6f\162\137\x77\141\x6c\155\x61\162\164")) {
goto Gt;
}
$Kx = apply_filters("\155\x6f\137\x75\x73\145\162\x69\x6e\146\x6f\137\x66\x6c\x6f\167\x5f\x66\x6f\162\137\x77\141\154\155\x61\x72\164", $QR, $k0, $F3, $Hr, $FX);
Gt:
if (!($Kx === false)) {
goto il;
}
$fl = null;
$fl = apply_filters("\155\157\x5f\x70\x6f\x6c\x61\x72\137\x72\145\x67\x69\163\164\x65\x72\x5f\x75\x73\145\x72", $k0);
if (!(!empty($fl) && !empty($k0["\x78\x5f\x75\163\x65\x72\137\151\144"]))) {
goto Fl;
}
$QR .= "\57" . $k0["\170\x5f\x75\163\145\162\137\151\x64"];
Fl:
$Kx = $this->oauth_handler->get_resource_owner($QR, $k0["\x61\143\143\145\x73\x73\x5f\x74\x6f\x6b\145\156"]);
$pM = array();
if (!(strpos($zg->get_app_config("\141\x75\x74\x68\157\162\x69\x7a\x65\x75\x72\154"), "\x6c\151\x6e\153\x65\x64\151\x6e") !== false && strpos($FX["\163\143\157\x70\145"], "\x72\x5f\x65\x6d\141\x69\x6c\141\x64\x64\x72\x65\x73\x73") != false)) {
goto m_;
}
$j0 = "\x68\x74\164\x70\x73\x3a\57\x2f\x61\x70\x69\x2e\x6c\151\156\x6b\x65\144\151\x6e\56\x63\x6f\x6d\x2f\166\x32\57\145\155\x61\151\154\x41\x64\144\162\x65\x73\x73\x3f\161\x3d\x6d\x65\x6d\142\145\162\x73\46\160\x72\x6f\152\x65\x63\164\x69\x6f\x6e\75\50\x65\x6c\145\x6d\x65\x6e\x74\x73\x2a\x28\150\x61\x6e\x64\x6c\x65\x7e\51\x29";
$pM = $this->oauth_handler->get_resource_owner($j0, $k0["\141\x63\x63\145\163\x73\137\164\157\153\145\x6e"]);
m_:
$Kx = array_merge($Kx, $pM);
il:
if (!has_filter("\155\x6f\x5f\x63\150\145\x63\153\137\164\157\x5f\x65\x78\x65\143\165\x74\145\137\x70\157\x73\x74\137\x75\x73\x65\x72\151\x6e\x66\157\137\146\154\157\167\x5f\x66\x6f\162\137\x77\x61\x6c\155\x61\x72\164")) {
goto C6;
}
$Kx = apply_filters("\x6d\157\x5f\143\x68\x65\143\x6b\137\164\x6f\137\x65\x78\x65\x63\x75\x74\x65\137\160\x6f\x73\x74\137\x75\163\145\x72\151\156\146\x6f\137\x66\x6c\157\x77\137\x66\157\x72\137\x77\x61\x6c\x6d\x61\x72\x74", $Kx, $Hr, $FX);
C6:
MO_Oauth_Debug::mo_oauth_log($Kx);
if (has_filter("\155\157\x5f\147\145\164\x5f\x74\157\x6b\x65\156\x5f\146\157\162\137\x6e\145\157\156\x5f\x6d\145\x6d\142\x65\x72\x73\150\x69\160")) {
goto Yz;
}
$Qi = apply_filters("\x6d\157\137\164\x72\x5f\141\146\x74\145\x72\137\x70\162\x6f\146\x69\x6c\145\x5f\151\x6e\146\157\x5f\145\170\164\162\141\143\164\151\157\156\x5f\x66\162\x6f\x6d\137\x74\x6f\153\145\x6e", $Kx);
goto ko;
Yz:
$Qi = apply_filters("\155\157\x5f\x67\145\x74\137\164\x6f\x6b\x65\x6e\137\x66\157\162\x5f\x6e\145\x6f\156\x5f\x6d\x65\x6d\142\x65\162\x73\150\151\160", $Kx, $k0["\x61\143\143\x65\163\x73\137\x74\x6f\153\x65\156"]);
ko:
if (!($Qi != '' && is_array($Qi))) {
goto AD;
}
$Kx = array_merge($Kx, $Qi);
AD:
$D6 = apply_filters("\x61\143\x63\162\145\x64\151\164\x69\x6f\156\x73\137\x65\156\x64\160\157\x69\x6e\164", $k0["\141\143\143\x65\x73\x73\137\x74\x6f\x6b\145\x6e"]);
if (!($D6 !== '' && is_array($D6))) {
goto Vz;
}
$Kx = array_merge($Kx, $D6);
Vz:
if (!has_filter("\x6d\157\137\x70\x6f\x6c\141\162\x5f\162\x65\x67\151\x73\x74\145\162\x5f\165\x73\145\x72")) {
goto Ow;
}
$Pc = array();
$Pc["\164\157\153\x65\x6e"] = $k0["\141\x63\143\x65\163\x73\x5f\x74\157\x6b\x65\x6e"];
$Kx = array_merge($Kx, $Pc);
Ow:
if (!(strpos($zg->get_app_config("\141\x75\x74\x68\157\162\x69\172\x65\x75\162\x6c"), "\x64\x69\163\143\x6f\x72\x64") !== false)) {
goto Zc;
}
apply_filters("\x6d\x6f\x5f\x64\151\163\x5f\165\163\145\162\x5f\141\164\x74\145\x6e\x64\x61\156\x63\145", $Kx["\151\144"]);
$N7 = apply_filters("\155\157\137\x64\x72\155\x5f\147\x65\164\x5f\165\163\x65\162\137\x72\x6f\x6c\145\x73", array_key_exists("\x69\144", $Kx) ? $Kx["\151\x64"] : '');
if (!(false !== $N7)) {
goto o7;
}
MO_Oauth_Debug::mo_oauth_log("\x44\151\x73\143\x6f\162\x64\40\x52\x6f\x6c\145\163\40\x3d\76\40");
MO_Oauth_Debug::mo_oauth_log($N7);
$Kx["\x72\x6f\154\x65\163"] = $N7;
o7:
if (!(!$MU && '' == $MU)) {
goto Ey;
}
do_action("\x6d\x6f\137\x6f\141\x75\x74\x68\x5f\x61\144\x64\x5f\144\x69\163\137\x75\163\x65\x72\137\163\x65\x72\166\145\x72", get_current_user_id(), $k0, $Kx);
Ey:
Zc:
if (!(isset($FX["\163\145\x6e\144\137\x6e\x6f\156\x63\145"]) && $FX["\x73\145\156\144\x5f\156\x6f\x6e\x63\145"] === 1)) {
goto y1;
}
if (!(isset($Kx["\156\x6f\156\143\x65"]) && $Kx["\156\x6f\156\x63\x65"] != NULL)) {
goto NR;
}
if ($H0->get_transient("\155\x6f\137\x6f\x61\165\x74\150\x5f\x6e\157\x6e\x63\x65\137" . $Kx["\x6e\x6f\x6e\143\x65"])) {
goto ZP;
}
$oC = "\x4e\x6f\x6e\143\145\40\166\x65\162\151\x66\151\x63\141\164\x69\157\x6e\40\x69\163\x20\146\x61\x69\154\x65\x64\56\x20\x50\154\x65\x61\x73\x65\40\143\157\156\164\x61\x63\x74\40\x74\157\x20\x79\x6f\x75\x72\40\x61\x64\x6d\151\156\151\x73\x74\x72\x61\164\x6f\x72\56";
$H0->handle_error($oC);
MO_Oauth_Debug::mo_oauth_log($oC);
wp_die($oC);
goto vV;
ZP:
$H0->delete_transient("\155\157\137\157\141\x75\x74\150\137\x6e\x6f\156\x63\145\137" . $Kx["\x6e\157\x6e\143\145"]);
vV:
NR:
y1:
$ff = [];
$U1 = $this->dropdownattrmapping('', $Kx, $ff);
$H0->mo_oauth_client_update_option("\155\x6f\137\157\141\165\x74\150\137\141\x74\164\162\x5f\156\141\155\145\x5f\x6c\x69\x73\164" . $Hr, $U1);
if (!($MU && '' !== $MU)) {
goto hv;
}
$this->handle_group_test_conf($Kx, $FX, $k0["\x61\143\143\145\x73\x73\137\x74\x6f\153\x65\x6e"], false, $MU);
exit;
hv:
goto Sz;
oH:
MO_Oauth_Debug::mo_oauth_log("\117\x70\145\x6e\111\104\40\103\x6f\156\x6e\145\143\x74\x20\x66\x6c\157\x77");
$k0 = json_decode($this->oauth_handler->get_token($FX["\x61\x63\143\145\x73\163\x74\x6f\x6b\145\156\165\x72\154"], $F3, $wd, $bc), true);
MO_Oauth_Debug::mo_oauth_log("\x54\157\x6b\x65\x6e\x20\x52\145\163\160\157\x6e\163\145\40\x3d\76\x20");
MO_Oauth_Debug::mo_oauth_log($k0);
$qp = [];
try {
$qp = $this->resolve_and_get_oidc_response($k0);
} catch (\Exception $gP) {
$H0->handle_error($gP->getMessage());
MO_Oauth_Debug::mo_oauth_log("\x49\x6e\x76\141\154\x69\144\40\x52\145\x73\160\157\x6e\x73\x65\x20\162\x65\143\x65\151\166\145\144\x2e");
do_action("\x6d\x6f\x5f\162\145\144\x69\162\145\143\164\x5f\164\157\x5f\143\165\x73\x74\x6f\x6d\x5f\x65\162\162\157\162\x5f\x70\x61\x67\145");
wp_die("\x49\x6e\166\x61\x6c\151\144\x20\122\x65\x73\x70\x6f\x6e\x73\145\x20\162\145\143\145\x69\x76\x65\x64\56");
exit;
}
if (!has_action("\x6d\157\137\157\141\165\x74\150\x5f\163\141\166\x65\x5f\x61\143\143\x65\x73\x73\x5f\x74\x6f\x6b\x65\156\137\151\x6e\137\x63\x6f\x6f\x6b\x69\x65")) {
goto Yx;
}
do_action("\x6d\x6f\x5f\x6f\141\165\x74\x68\x5f\x73\141\x76\145\x5f\141\x63\143\x65\x73\x73\x5f\x74\x6f\x6b\x65\x6e\x5f\x69\x6e\137\x63\x6f\x6f\153\x69\145", $k0["\x61\x63\x63\x65\163\x73\x5f\x74\157\153\145\x6e"]);
Yx:
MO_Oauth_Debug::mo_oauth_log("\111\x44\x20\x54\x6f\x6b\x65\x6e\x20\x72\145\143\x65\151\x76\x65\144\40\123\x75\143\x63\145\163\163\x66\165\x6c\154\171");
MO_Oauth_Debug::mo_oauth_log("\x49\104\40\124\157\x6b\145\x6e\x20\x3d\x3e\40");
MO_Oauth_Debug::mo_oauth_log($qp);
$Kx = $this->get_resource_owner_from_app($qp, $Hr);
MO_Oauth_Debug::mo_oauth_log("\122\x65\163\157\x75\162\x63\x65\40\x4f\167\156\x65\162\x20\x3d\76\40");
MO_Oauth_Debug::mo_oauth_log($Kx);
if (!(strpos($zg->get_app_config("\141\x75\164\150\157\162\151\x7a\145\x75\162\154"), "\164\x77\x69\164\143\x68") !== false)) {
goto qM;
}
$xf = apply_filters("\x6d\157\137\x74\163\155\x5f\x67\145\x74\137\165\x73\145\x72\137\x73\x75\x62\x73\x63\x72\x69\160\164\x69\x6f\156", $Kx["\163\165\142"], $FX["\x63\154\151\145\x6e\x74\x5f\151\x64"], $k0["\141\143\x63\145\x73\163\x5f\x74\x6f\153\145\156"]);
if (!(false !== $xf)) {
goto za;
}
MO_Oauth_Debug::mo_oauth_log("\124\x77\151\x74\143\x68\40\123\165\142\x73\143\x72\x69\160\164\151\x6f\x6e\40\75\76\40");
MO_Oauth_Debug::mo_oauth_log($xf);
$Kx["\163\x75\142\x73\143\162\x69\160\164\x69\x6f\156"] = $xf;
za:
qM:
if (!($zg->get_app_config("\141\160\160\111\x64") === "\153\x65\x79\x63\x6c\x6f\x61\153")) {
goto K5;
}
$yz = apply_filters("\155\157\x5f\x6b\162\155\x5f\x67\145\x74\x5f\165\163\x65\x72\x5f\162\x6f\x6c\145\163", $Kx, $k0);
if (!(false !== $yz)) {
goto GF;
}
$Kx["\162\x6f\154\x65\x73"] = $yz;
GF:
K5:
$Kx = apply_filters("\x6d\157\137\141\172\x75\x72\145\142\x32\x63\137\x67\x65\x74\x5f\165\x73\x65\162\137\147\162\x6f\x75\x70\137\151\144\x73", $Kx, $FX);
$Qi = apply_filters("\155\x6f\x5f\x74\x72\x5f\141\146\x74\145\x72\x5f\160\162\x6f\x66\x69\x6c\145\137\151\156\146\157\x5f\145\170\x74\x72\141\143\164\x69\x6f\156\x5f\x66\162\157\155\137\164\x6f\153\145\156", $Kx);
if (!($Qi != '' && is_array($Qi))) {
goto v2;
}
$Kx = array_merge($Kx, $Qi);
v2:
if (!(isset($FX["\x73\145\156\144\137\x6e\x6f\156\143\145"]) && $FX["\x73\x65\x6e\x64\137\x6e\x6f\x6e\143\x65"] === 1)) {
goto x6;
}
if (!(isset($Kx["\x6e\157\156\x63\x65"]) && $Kx["\156\x6f\156\x63\145"] != NULL)) {
goto C2;
}
if ($H0->get_transient("\x6d\x6f\137\x6f\141\165\x74\150\x5f\156\x6f\x6e\143\145\137" . $Kx["\156\x6f\x6e\x63\x65"])) {
goto DA;
}
$oC = "\116\157\x6e\x63\x65\40\x76\x65\162\x69\x66\x69\x63\x61\164\151\x6f\156\x20\151\163\x20\146\141\x69\x6c\145\x64\56\x20\120\154\145\141\163\x65\x20\x63\x6f\156\164\141\143\x74\40\164\157\x20\x79\x6f\165\x72\x20\x61\x64\155\151\x6e\151\x73\x74\x72\x61\x74\157\162\x2e";
$H0->handle_error($oC);
MO_Oauth_Debug::mo_oauth_log($oC);
wp_die($oC);
goto r8;
DA:
$H0->delete_transient("\155\157\x5f\x6f\x61\x75\x74\150\137\156\157\156\x63\145\x5f" . $Kx["\156\x6f\x6e\x63\145"]);
r8:
C2:
x6:
$ff = [];
$U1 = $this->dropdownattrmapping('', $Kx, $ff);
$H0->mo_oauth_client_update_option("\x6d\157\x5f\157\141\x75\164\x68\x5f\x61\164\x74\162\x5f\x6e\x61\155\x65\137\154\151\x73\164" . $Hr, $U1);
if (!($MU && '' !== $MU)) {
goto x9;
}
$k0["\x72\x65\x66\162\x65\163\150\137\164\157\153\145\156"] = isset($k0["\162\145\146\162\x65\x73\x68\137\164\157\x6b\x65\156"]) ? $k0["\x72\145\146\x72\x65\x73\x68\137\164\x6f\153\x65\156"] : '';
$_SESSION["\x70\x72\x6f\143\157\x72\x65\137\162\145\x66\x72\x65\x73\x68\x5f\164\x6f\x6b\145\156"] = $k0["\x72\145\146\x72\145\x73\x68\137\164\157\153\x65\156"];
$Ie = isset($k0["\141\x63\143\145\163\x73\x5f\x74\157\x6b\145\156"]) ? $k0["\x61\x63\x63\145\x73\163\x5f\x74\x6f\153\145\156"] : '';
$this->handle_group_test_conf($Kx, $FX, $Ie, false, $MU);
MO_Oauth_Debug::mo_oauth_log("\x41\164\x74\162\151\142\x75\164\145\40\x52\145\143\x65\151\166\145\x64\40\x53\165\143\143\x65\x73\163\146\165\154\154\171");
exit;
x9:
Sz:
if (!(isset($FX["\x67\162\157\165\160\144\x65\x74\x61\151\x6c\163\165\162\154"]) && !empty($FX["\147\162\157\165\160\x64\145\x74\141\x69\154\163\165\x72\154"]))) {
goto IJ;
}
$Kx = $this->handle_group_user_info($Kx, $FX, $k0["\141\x63\143\x65\x73\163\137\x74\157\153\x65\156"]);
MO_Oauth_Debug::mo_oauth_log("\x47\162\x6f\165\x70\x20\x44\145\x74\141\151\154\163\40\117\x62\164\x61\151\x6e\x65\x64\40\75\x3e\40");
MO_Oauth_Debug::mo_oauth_log($Kx);
IJ:
MO_Oauth_Debug::mo_oauth_log("\106\145\164\143\150\145\x64\40\162\145\163\157\x75\x72\143\145\x20\x6f\167\x6e\145\x72\x20\x3a\x20" . json_encode($Kx));
if (!has_filter("\x77\157\x6f\x63\x6f\x6d\x6d\145\x72\x63\145\x5f\x63\150\x65\x63\153\157\165\x74\137\x67\x65\164\x5f\166\141\154\165\x65")) {
goto DG;
}
$Kx["\x61\x70\160\156\x61\x6d\x65"] = $Hr;
DG:
do_action("\155\157\137\141\x62\x72\137\x66\151\154\x74\x65\162\137\154\157\147\151\x6e", $Kx);
$this->handle_sso($Hr, $FX, $Kx, $Wh, $k0);
} catch (Exception $gP) {
$H0->handle_error($gP->getMessage());
MO_Oauth_Debug::mo_oauth_log($gP->getMessage());
do_action("\155\x6f\x5f\162\145\144\x69\162\x65\143\x74\137\164\x6f\137\143\x75\163\164\x6f\x6d\137\x65\x72\x72\157\162\137\x70\x61\x67\x65");
exit(esc_html($gP->getMessage()));
}
goto Ew;
jL:
try {
if (isset($_COOKIE["\x73\164\x61\164\x65\x5f\160\141\162\x61\155"])) {
goto md;
}
if (isset($_GET["\163\164\x61\x74\145"])) {
goto pz;
}
$Ir = new StorageManager();
if (!is_multisite()) {
goto IT;
}
$Ir->add_replace_entry("\142\154\x6f\147\x5f\151\x64", 1);
IT:
$GE = $H0->get_app_by_name();
if (isset($_GET["\141\160\160\x5f\156\x61\155\145"])) {
goto RX;
}
$Ir->add_replace_entry("\141\160\160\156\141\155\x65", $GE->get_app_name());
goto zH;
RX:
$Ir->add_replace_entry("\141\x70\x70\156\141\x6d\145", sanitize_text_field(wp_unslash($_GET["\141\x70\x70\x5f\x6e\x61\155\x65"])));
zH:
$Ir->add_replace_entry("\x74\x65\163\x74\x5f\x63\157\x6e\x66\151\147", false);
$Ir->add_replace_entry("\x72\145\144\151\162\x65\x63\x74\137\165\162\x69", site_url());
$Wh = $Ir->get_state();
goto ZD;
pz:
$Wh = sanitize_text_field(wp_unslash($_GET["\x73\164\x61\164\145"]));
ZD:
goto W8;
md:
$Wh = sanitize_text_field(wp_unslash($_COOKIE["\x73\164\x61\164\x65\137\x70\x61\162\141\x6d"]));
W8:
$aQ = new StorageManager($Wh);
if (!empty($aQ->get_value("\x61\160\160\x6e\141\155\145"))) {
goto v4;
}
return;
v4:
$M1 = $aQ->get_value("\x61\160\x70\156\141\x6d\x65");
$MU = $aQ->get_value("\164\x65\x73\x74\137\143\x6f\156\146\151\x67");
$Hr = $M1 ? $M1 : '';
$Zc = $H0->mo_oauth_client_get_option("\155\157\137\157\x61\x75\164\x68\x5f\141\160\x70\163\137\154\x69\x73\164");
$VS = '';
$wu = '';
$zg = $H0->get_app_by_name($Hr);
if ($zg) {
goto BL;
}
$H0->handle_error("\x41\x70\x70\x6c\x69\143\x61\x74\151\157\x6e\x20\x6e\157\164\x20\143\x6f\x6e\146\151\x67\x75\x72\x65\144\56");
MO_Oauth_Debug::mo_oauth_log("\101\x70\160\154\x69\143\141\164\x69\157\156\40\x6e\x6f\x74\40\x63\157\156\x66\x69\147\x75\162\x65\144\x2e");
exit("\101\x70\x70\154\151\143\x61\164\x69\x6f\x6e\40\x6e\157\164\x20\x63\157\x6e\x66\151\x67\165\162\145\144\x2e");
BL:
$FX = $zg->get_app_config();
if (!(isset($FX["\163\145\x6e\x64\137\156\157\156\143\145"]) && $FX["\x73\145\156\144\137\x6e\157\156\143\x65"] === 1)) {
goto DQ;
}
if (!(isset($_REQUEST["\156\157\156\143\145"]) && !$H0->get_transient("\155\x6f\x5f\157\x61\x75\x74\x68\x5f\156\157\156\x63\x65\x5f" . sanitize_text_field(wp_unslash($_REQUEST["\156\x6f\156\x63\145"]))))) {
goto KC;
}
$oC = "\x4e\157\x6e\143\x65\40\166\145\x72\x69\x66\151\143\x61\164\151\157\156\40\151\x73\x20\x66\x61\x69\x6c\x65\144\x2e\40\120\x6c\145\141\163\145\x20\x63\x6f\156\164\x61\x63\x74\40\164\157\x20\x79\157\x75\x72\x20\x61\x64\155\x69\156\x69\x73\x74\x72\x61\164\x6f\x72\56";
$H0->handle_error($oC);
MO_Oauth_Debug::mo_oauth_log($oC);
wp_die(esc_html($oC));
KC:
DQ:
$F3 = array("\147\162\141\x6e\x74\137\x74\x79\x70\145" => "\x72\145\146\x72\x65\x73\x68\x5f\x74\x6f\x6b\145\x6e", "\143\154\151\x65\x6e\x74\137\x69\x64" => $FX["\x63\154\151\x65\x6e\164\137\151\x64"], "\x72\145\x64\151\162\145\143\x74\137\x75\x72\x69" => $FX["\x72\x65\x64\151\x72\145\x63\164\x5f\x75\x72\151"], "\x72\x65\146\162\145\x73\x68\137\x74\157\153\x65\156" => $_POST["\x72\145\146\x72\145\x73\150\x5f\x74\x6f\153\145\x6e"], "\x73\143\x6f\160\145" => $zg->get_app_config("\x73\143\x6f\160\145"), "\143\x6c\x69\145\x6e\164\x5f\163\145\x63\162\x65\x74" => $FX["\x63\154\151\145\x6e\x74\x5f\x73\145\x63\x72\145\164"]);
$wd = isset($FX["\163\145\x6e\144\137\x68\145\x61\144\x65\162\x73"]) ? $FX["\163\145\x6e\144\x5f\x68\x65\141\144\145\162\x73"] : 0;
$bc = isset($FX["\x73\x65\156\144\x5f\x62\157\144\171"]) ? $FX["\163\145\x6e\144\x5f\142\x6f\x64\x79"] : 0;
$cD = $FX["\x61\143\x63\x65\x73\x73\x74\x6f\x6b\x65\156\165\162\x6c"];
MO_Oauth_Debug::mo_oauth_log("\x4f\101\x75\x74\150\40\x66\154\157\x77");
$k0 = json_decode($this->oauth_handler->get_token($cD, $F3, $wd, $bc), true);
$RV = isset($k0["\141\143\143\145\x73\x73\137\164\157\153\x65\x6e"]) ? $k0["\141\x63\143\x65\x73\x73\x5f\x74\x6f\x6b\145\x6e"] : false;
if (isset($RV)) {
goto QS;
}
do_action("\x6d\157\x5f\162\x65\144\151\x72\x65\143\x74\137\x74\157\137\143\x75\163\164\x6f\155\x5f\x65\x72\x72\x6f\x72\x5f\x70\141\x67\145");
$H0->handle_error("\x49\156\x76\x61\x6c\151\144\x20\164\157\x6b\145\156\40\x72\x65\143\x65\151\x76\145\x64\x2e");
MO_Oauth_Debug::mo_oauth_log("\111\x6e\166\x61\154\x69\144\40\164\x6f\153\x65\x6e\x20\x72\145\143\145\x69\166\145\x64\56");
exit("\x49\156\x76\x61\x6c\x69\144\40\x74\x6f\153\x65\156\x20\162\145\143\x65\151\166\x65\x64\56");
QS:
MO_Oauth_Debug::mo_oauth_log("\124\x6f\x6b\x65\156\x20\122\x65\163\x70\157\156\x73\x65\x20\x3d\x3e\x20");
MO_Oauth_Debug::mo_oauth_log($k0);
$QR = $FX["\x72\145\163\157\x75\162\x63\145\157\167\x6e\x65\162\x64\145\164\141\x69\x6c\x73\165\162\154"];
if (!(substr($QR, -1) == "\x3d" && !empty($k0["\165\163\145\162\x4e\x61\155\x65"]))) {
goto pA;
}
$QR .= strtolower($k0["\x75\x73\145\162\x4e\x61\155\x65"]);
pA:
MO_Oauth_Debug::mo_oauth_log("\101\143\143\x65\x73\163\40\x74\157\x6b\x65\x6e\x20\x72\x65\143\x65\151\x76\145\144\56");
MO_Oauth_Debug::mo_oauth_log("\101\143\x63\x65\x73\163\x20\x54\157\x6b\145\156\40\x3d\x3e\x20");
MO_Oauth_Debug::mo_oauth_log($RV);
$Kx = false;
if (!($Kx === false)) {
goto w9;
}
$Kx = $this->oauth_handler->get_resource_owner($QR, $RV);
w9:
MO_Oauth_Debug::mo_oauth_log($Kx);
$ff = [];
$U1 = $this->dropdownattrmapping('', $Kx, $ff);
$H0->mo_oauth_client_update_option("\155\157\x5f\157\x61\165\164\x68\x5f\x61\x74\164\162\x5f\156\141\155\145\137\154\151\x73\164" . $Hr, $U1);
if (!($MU && '' !== $MU)) {
goto t0;
}
$this->handle_group_test_conf($Kx, $FX, $RV, false, $MU);
exit;
t0:
if (!(isset($FX["\x67\162\x6f\165\160\144\x65\x74\141\151\x6c\x73\165\x72\154"]) && !empty($FX["\147\162\157\165\x70\x64\145\x74\x61\x69\154\x73\165\x72\154"]))) {
goto s6;
}
$Kx = $this->handle_group_user_info($Kx, $FX, $RV);
MO_Oauth_Debug::mo_oauth_log("\x47\162\x6f\x75\x70\x20\104\145\x74\x61\151\154\x73\x20\x4f\142\164\x61\151\156\x65\x64\x20\x3d\76\x20" . $Kx);
s6:
MO_Oauth_Debug::mo_oauth_log("\x46\145\164\x63\x68\x65\x64\40\162\145\x73\157\165\162\x63\x65\x20\x6f\x77\156\145\x72\40\72\x20" . json_encode($Kx));
if (!has_filter("\x77\x6f\x6f\x63\x6f\x6d\x6d\x65\x72\x63\x65\x5f\x63\150\145\143\153\x6f\x75\164\x5f\x67\x65\x74\137\166\141\x6c\x75\145")) {
goto Im;
}
$Kx["\141\160\160\x6e\141\155\145"] = $Hr;
Im:
do_action("\155\157\137\x61\142\162\137\x66\x69\x6c\164\x65\x72\x5f\154\x6f\x67\x69\x6e", $Kx);
$this->handle_sso($Hr, $FX, $Kx, $Wh, $k0);
} catch (Exception $gP) {
$H0->handle_error($gP->getMessage());
MO_Oauth_Debug::mo_oauth_log($gP->getMessage());
do_action("\x6d\x6f\x5f\x72\145\144\x69\x72\x65\143\164\x5f\x74\157\137\x63\x75\163\164\x6f\x6d\x5f\x65\x72\x72\157\x72\x5f\160\141\x67\x65");
exit(esc_html($gP->getMessage()));
}
Ew:
}
public function dropdownattrmapping($ia, $DC, $ff)
{
global $H0;
foreach ($DC as $ct => $ZN) {
if (is_array($ZN)) {
goto Tv;
}
if (!empty($ia)) {
goto UH;
}
array_push($ff, $ct);
goto dr;
UH:
array_push($ff, $ia . "\56" . $ct);
dr:
goto o2;
Tv:
if (empty($ia)) {
goto ib;
}
$ia .= "\56";
ib:
$ff = $this->dropdownattrmapping($ia . $ct, $ZN, $ff);
$ia = rtrim($ia, "\56");
o2:
g6:
}
OT:
return $ff;
}
public function resolve_and_get_oidc_response($k0 = array())
{
if (!empty($k0)) {
goto X3;
}
throw new \Exception("\124\x6f\153\145\156\x20\162\145\x73\160\157\156\163\145\x20\151\x73\40\145\155\x70\164\x79", "\151\156\x76\141\154\x69\144\x5f\162\x65\163\x70\157\156\x73\x65");
X3:
global $H0;
$tf = isset($k0["\x69\144\x5f\164\x6f\153\x65\156"]) ? $k0["\x69\x64\x5f\164\157\153\x65\156"] : false;
$Ah = isset($k0["\x61\143\143\145\163\163\137\164\157\x6b\x65\x6e"]) ? $k0["\x61\x63\x63\145\163\163\x5f\164\x6f\153\145\156"] : false;
$_SESSION["\x70\162\x6f\x63\157\162\x65\x5f\x61\143\x63\145\163\x73\x5f\164\157\153\145\x6e"] = isset($Ah) ? $Ah : $tf;
if (!$H0->is_valid_jwt($tf)) {
goto yJ;
}
return $tf;
yJ:
if (!$H0->is_valid_jwt($Ah)) {
goto UA;
}
return $Ah;
UA:
MO_Oauth_Debug::mo_oauth_log("\x54\x6f\x6b\145\156\x20\x69\x73\40\x6e\157\164\40\x61\40\166\x61\154\151\144\40\112\127\124\x2e");
throw new \Exception("\124\x6f\153\145\156\x20\151\x73\40\x6e\x6f\164\40\x61\40\x76\141\x6c\x69\x64\40\x4a\x57\124\x2e");
}
public function handle_group_test_conf($Kx = array(), $FX = array(), $Ah = '', $i1 = false, $MU = false)
{
$this->render_test_config_output($Kx, false);
}
public function testattrmappingconfig($ia, $DC)
{
foreach ($DC as $ct => $ZN) {
if (is_array($ZN) || is_object($ZN)) {
goto SZ;
}
echo "\74\164\x72\x3e\74\x74\144\76";
if (empty($ia)) {
goto Xd;
}
echo esc_attr($ia) . "\56";
Xd:
echo esc_attr($ct) . "\x3c\57\x74\x64\76\74\164\144\x3e" . esc_attr($ZN) . "\74\57\x74\144\x3e\74\x2f\164\x72\x3e";
goto Qi;
SZ:
if (empty($ia)) {
goto Bq;
}
$ia .= "\56";
Bq:
$this->testattrmappingconfig($ia . $ct, $ZN);
$ia = rtrim($ia, "\56");
Qi:
gi:
}
jJ:
}
public function render_test_config_output($Kx, $i1 = false)
{
MO_Oauth_Debug::mo_oauth_log("\x54\x68\x69\x73\40\151\163\x20\164\x65\x73\164\x20\x63\x6f\156\x66\x69\x67\x75\x72\141\164\x69\157\x6e\x20\x66\x6c\x6f\167\40\75\76\40");
echo "\74\144\151\166\x20\163\164\x79\x6c\145\75\x22\146\x6f\x6e\x74\55\146\x61\155\151\x6c\171\x3a\x43\141\154\151\x62\162\151\73\160\141\x64\x64\x69\156\147\x3a\x30\40\x33\45\73\42\76";
echo "\74\x73\x74\171\x6c\x65\76\x74\141\142\154\145\x7b\142\x6f\162\x64\x65\162\x2d\x63\157\x6c\154\x61\x70\x73\x65\72\x63\x6f\154\154\x61\160\163\145\x3b\175\164\x68\x20\173\142\x61\143\x6b\x67\162\157\165\156\144\x2d\x63\x6f\154\x6f\162\72\40\x23\145\x65\145\73\40\164\x65\170\x74\55\141\x6c\151\147\156\72\x20\x63\145\156\x74\145\162\x3b\40\x70\x61\144\x64\x69\156\147\x3a\40\70\160\170\73\40\142\x6f\x72\144\x65\162\x2d\x77\151\x64\x74\150\x3a\x31\160\x78\73\x20\x62\x6f\x72\x64\x65\x72\x2d\163\164\x79\x6c\x65\72\163\x6f\154\151\x64\73\x20\x62\157\162\x64\145\162\x2d\143\157\154\x6f\x72\x3a\43\62\x31\x32\61\x32\x31\73\175\164\x72\72\156\x74\150\x2d\x63\x68\151\154\x64\50\x6f\144\144\51\40\173\142\x61\143\x6b\147\x72\x6f\x75\156\144\55\x63\157\154\157\162\72\40\x23\146\62\x66\62\146\x32\x3b\175\40\x74\144\x7b\160\x61\144\x64\x69\x6e\147\72\x38\160\x78\x3b\x62\x6f\162\144\x65\162\x2d\x77\151\144\164\150\x3a\x31\160\170\x3b\x20\x62\157\x72\x64\x65\162\55\x73\164\171\x6c\x65\72\163\x6f\x6c\x69\x64\x3b\40\142\157\162\x64\145\x72\55\x63\157\x6c\x6f\x72\72\x23\62\x31\62\61\x32\61\x3b\x7d\x3c\x2f\x73\164\171\x6c\145\76";
echo "\x3c\150\x32\76";
echo $i1 ? "\x47\x72\x6f\x75\x70\40\x49\156\x66\157" : "\124\145\163\x74\40\103\x6f\x6e\x66\151\147\165\x72\x61\164\x69\157\156";
echo "\x3c\57\150\x32\x3e\74\x74\141\x62\154\145\x3e\74\164\x72\x3e\74\x74\x68\x3e\x41\164\164\162\151\x62\165\164\145\x20\x4e\141\155\145\74\x2f\x74\150\76\x3c\164\150\x3e\101\164\164\162\x69\142\x75\x74\145\x20\126\141\154\165\x65\74\57\164\150\76\74\x2f\x74\162\x3e";
$this->testattrmappingconfig('', $Kx);
echo "\74\x2f\164\141\x62\x6c\145\76";
if ($i1) {
goto aI;
}
echo "\x3c\x64\x69\166\40\x73\x74\x79\x6c\x65\x3d\42\160\x61\144\144\151\156\x67\72\40\x31\x30\x70\x78\73\x22\76\74\57\x64\151\x76\76\74\151\x6e\160\x75\x74\x20\x73\164\x79\x6c\145\x3d\42\160\141\144\x64\x69\x6e\147\x3a\61\45\73\x77\x69\144\x74\150\72\61\60\60\x70\170\x3b\142\x61\x63\153\x67\162\x6f\165\156\x64\72\40\x23\x30\60\71\x31\103\x44\x20\x6e\157\156\x65\40\162\x65\160\145\x61\164\40\163\x63\162\157\154\154\40\60\x25\x20\x30\45\73\143\165\x72\x73\157\162\x3a\40\x70\157\x69\156\164\x65\x72\73\x66\157\x6e\x74\x2d\163\151\x7a\145\x3a\61\x35\160\x78\73\x62\x6f\162\x64\x65\162\x2d\167\x69\144\164\x68\72\x20\61\160\x78\73\142\x6f\162\144\145\162\55\163\164\x79\x6c\x65\72\40\x73\x6f\154\x69\144\73\142\157\x72\144\x65\x72\x2d\x72\141\144\151\165\163\x3a\x20\63\160\170\73\x77\150\151\x74\x65\x2d\163\160\141\143\x65\x3a\40\156\x6f\167\162\x61\x70\73\x62\x6f\170\55\x73\x69\x7a\x69\156\x67\x3a\40\142\157\x72\144\145\162\x2d\142\157\170\73\x62\157\x72\144\x65\162\55\143\x6f\154\x6f\162\x3a\x20\43\x30\60\67\x33\101\x41\x3b\x62\x6f\170\55\x73\x68\141\x64\x6f\167\72\x20\60\160\170\40\61\160\170\x20\60\160\170\x20\x72\147\x62\x61\x28\61\x32\60\54\40\x32\60\60\x2c\x20\62\63\x30\x2c\40\60\x2e\66\x29\x20\x69\x6e\163\145\x74\73\x63\x6f\154\157\162\x3a\x20\x23\106\106\x46\73\42\x74\171\x70\x65\x3d\42\x62\x75\164\164\x6f\156\x22\x20\x76\x61\x6c\x75\x65\x3d\x22\104\x6f\156\145\x22\40\157\156\103\x6c\x69\143\x6b\x3d\42\x73\145\154\146\56\x63\x6c\157\x73\x65\50\x29\x3b\42\x3e\74\57\144\151\166\x3e";
aI:
}
public function handle_sso($Hr, $FX, $Kx, $Wh, $k0, $aV = false)
{
MO_Oauth_Debug::mo_oauth_log("\x53\x53\117\40\x68\x61\156\144\154\x69\x6e\147\40\x66\x6c\x6f\167");
global $H0;
if (!(get_class($this) === "\115\x6f\x4f\x61\x75\164\150\x43\x6c\x69\145\x6e\x74\x5c\114\157\x67\151\156\110\141\x6e\x64\154\x65\x72" && $H0->check_versi(1))) {
goto Lu;
}
$sB = new InstanceHelper();
$EZ = $sB->get_login_handler_instance();
$EZ->handle_sso($Hr, $FX, $Kx, $Wh, $k0, $aV);
Lu:
$VS = isset($FX["\156\141\x6d\145\x5f\x61\164\x74\162"]) ? $FX["\156\141\x6d\145\137\x61\164\x74\x72"] : '';
$wu = isset($FX["\x65\155\x61\151\154\x5f\x61\164\164\x72"]) ? $FX["\x65\x6d\141\x69\x6c\x5f\x61\x74\x74\x72"] : '';
$U2 = $H0->getnestedattribute($Kx, $wu);
$Nh = $H0->getnestedattribute($Kx, $VS);
if (!empty($U2)) {
goto aW;
}
MO_Oauth_Debug::mo_oauth_log("\105\155\x61\x69\154\x20\141\144\x64\162\145\163\x73\x20\156\x6f\x74\40\162\x65\x63\x65\151\166\x65\144\x2e\x20\x43\x68\x65\x63\x6b\40\x79\x6f\165\162\40\101\164\164\162\x69\142\x75\164\145\x20\115\x61\160\160\x69\156\x67\40\x63\x6f\x6e\x66\x69\x67\165\162\141\164\x69\x6f\x6e\x2e");
$H0->handle_error("\105\x6d\x61\x69\x6c\40\141\144\144\162\x65\163\x73\40\x6e\157\164\x20\x72\145\143\145\x69\166\x65\x64\x2e\x20\x43\150\x65\x63\153\40\x79\x6f\x75\162\40\x3c\x73\x74\162\x6f\x6e\147\x3e\x41\x74\164\162\x69\x62\x75\x74\145\40\115\141\160\160\151\x6e\x67\x3c\57\x73\164\162\157\x6e\x67\x3e\x20\x63\x6f\x6e\146\151\x67\165\162\x61\164\x69\x6f\156\x2e");
wp_die("\x45\x6d\x61\x69\x6c\40\x61\144\x64\162\145\163\x73\x20\x6e\x6f\x74\40\x72\145\x63\x65\151\x76\145\144\56\40\103\150\145\143\153\x20\x79\x6f\165\162\40\74\163\164\162\157\156\147\76\x41\164\164\x72\151\142\x75\x74\145\x20\x4d\x61\x70\x70\x69\x6e\x67\74\57\163\x74\x72\x6f\x6e\x67\x3e\40\x63\x6f\156\146\151\x67\x75\x72\x61\164\151\157\x6e\x2e");
aW:
if (!(false === strpos($U2, "\x40"))) {
goto D_;
}
MO_Oauth_Debug::mo_oauth_log("\x4d\141\x70\160\145\144\40\105\x6d\141\x69\154\x20\141\164\x74\162\151\142\165\164\145\40\144\157\145\163\40\156\x6f\x74\x20\143\x6f\156\164\141\x69\156\x20\x76\x61\154\151\x64\x20\145\155\141\x69\154\x2e");
$H0->handle_error("\115\141\x70\160\x65\x64\40\x45\155\141\x69\154\x20\x61\164\164\162\151\142\x75\x74\145\40\x64\x6f\x65\x73\x20\x6e\157\164\40\143\x6f\x6e\164\x61\151\x6e\40\166\141\x6c\x69\144\40\x65\155\x61\x69\x6c\x2e");
wp_die("\x4d\141\160\x70\145\x64\40\x45\155\141\x69\x6c\x20\141\164\164\162\x69\x62\x75\164\145\x20\x64\x6f\145\x73\x20\x6e\x6f\164\x20\143\x6f\x6e\x74\141\151\156\40\166\x61\154\x69\144\40\145\x6d\141\151\154\56");
D_:
$user = get_user_by("\154\157\x67\151\x6e", $U2);
if ($user) {
goto r4;
}
$user = get_user_by("\145\155\x61\x69\x6c", $U2);
r4:
if ($user) {
goto sD;
}
$o_ = 0;
if ($H0->mo_oauth_hbca_xyake()) {
goto we;
}
$user = $H0->mo_oauth_hjsguh_kiishuyauh878gs($U2, $Nh);
goto y3;
we:
if ($H0->mo_oauth_client_get_option("\155\x6f\137\157\x61\165\164\150\x5f\146\154\x61\x67") !== true) {
goto TX;
}
$Cb = base64_decode('PGRpdiBzdHlsZT0ndGV4dC1hbGlnbjpjZW50ZXI7Jz48Yj5Vc2VyIEFjY291bnQgZG9lcyBub3QgZXhpc3QuPC9iPjwvZGl2Pjxicj48c21hbGw+VGhpcyB2ZXJzaW9uIHN1cHBvcnRzIEF1dG8gQ3JlYXRlIFVzZXIgZmVhdHVyZSB1cHRvIDEwIFVzZXJzLiBQbGVhc2UgdXBncmFkZSB0byB0aGUgaGlnaGVyIHZlcnNpb24gb2YgdGhlIHBsdWdpbiB0byBlbmFibGUgYXV0byBjcmVhdGUgdXNlciBmb3IgdW5saW1pdGVkIHVzZXJzIG9yIGFkZCB1c2VyIG1hbnVhbGx5Ljwvc21hbGw+');
$H0->handle_error($Cb);
MO_Oauth_Debug::mo_oauth_log($Cb);
wp_die($Cb);
goto Eu;
TX:
$user = $H0->mo_oauth_jhuyn_jgsukaj($U2, $Nh);
Eu:
y3:
goto II;
sD:
$o_ = $user->ID;
II:
if (!$user) {
goto L6;
}
wp_set_current_user($user->ID);
MO_Oauth_Debug::mo_oauth_log("\125\163\x65\x72\40\106\x6f\x75\156\144");
$J2 = false;
$J2 = apply_filters("\155\157\x5f\x72\145\x6d\145\x6d\142\x65\162\x5f\155\145", $J2);
if (!$J2) {
goto Jf;
}
MO_Oauth_Debug::mo_oauth_log("\122\145\155\x65\155\x62\145\162\40\x41\x64\x64\x6f\156\x20\x61\143\x74\x69\x76\141\x74\145\x64");
Jf:
wp_set_auth_cookie($user->ID, $J2);
MO_Oauth_Debug::mo_oauth_log("\x55\x73\x65\x72\x20\143\157\157\x6b\x69\145\40\163\145\164");
$user = get_user_by("\x49\104", $user->ID);
do_action("\x77\160\x5f\154\157\147\151\156", $user->user_login, $user);
wp_safe_redirect(home_url());
MO_Oauth_Debug::mo_oauth_log("\125\163\145\162\40\122\x65\x64\x69\x72\145\x63\164\145\x64\x20\x74\x6f\40\150\x6f\x6d\145\x20\x75\162\x6c");
exit;
L6:
}
public function get_resource_owner_from_app($tf, $Vk)
{
return $this->oauth_handler->get_resource_owner_from_id_token($tf);
}
}
Function Calls
| None |
Stats
| MD5 | c5bab1fb71061da34e1d3fb15a4eeeeb |
| Eval Count | 0 |
| Decode Time | 83 ms |