<?php // Simple Ajax Chat > Process Chats

define('WP_USE_THEMES', false);
require(dirname(dirname(dirname(dirname(__FILE__)))) .'/wp-config.php');
require(ABSPATH .'/wp-load.php');

if (!defined('ABSPATH')) exit;

$sac_die = esc_html__('Please do not load this page directly. Thanks!', 'simple-ajax-chat');

if (isset($_COOKIE['PHPSESSID']) && $_COOKIE['PHPSESSID'] !== session_id()) {
	
	session_unset();
	wp_die($sac_die);
	
}



if (function_exists('sac_default_options')) $sac_options = get_option('sac_options', sac_default_options());

$sac_registered_only = isset($sac_options['sac_registered_only']) ? $sac_options['sac_registered_only'] : false;

if (!current_user_can('read') && $sac_registered_only) {
	
	wp_die($sac_die);
	
}

$sac_host    = isset($_SERVER['HTTP_HOST'])    ? sanitize_text_field($_SERVER['HTTP_HOST'])    : '';
$sac_request = isset($_SERVER['REQUEST_URI'])  ? sanitize_text_field($_SERVER['REQUEST_URI'])  : '';
$sac_referer = isset($_SERVER['HTTP_REFERER']) ? sanitize_text_field($_SERVER['HTTP_REFERER']) : '';
$sac_address = isset($_SERVER['REMOTE_ADDR'])  ? sanitize_text_field($_SERVER['REMOTE_ADDR'])  : '';

$sac_name = isset($_POST['sac_name']) ? sanitize_text_field($_POST['sac_name']) : false;
$sac_chat = isset($_POST['sac_chat']) ? sanitize_text_field($_POST['sac_chat']) : false;
$sac_url  = isset($_POST['sac_url'])  ? sanitize_text_field($_POST['sac_url'])  : '';

$sac_time = current_time('timestamp') + 60 * 60 * 24 * 30 * 3;

$sac_protocol = is_ssl() ? 'https://' : 'http://';

$sac_chat_url = $sac_protocol . $sac_host . $sac_request;

$sac_nonce = isset($_POST['sac_nonce']) ? $_POST['sac_nonce'] : false;

$sac_match = preg_match("/$sac_host/i", $sac_referer) ? true : false;

$sac_verify = isset($_POST['sac_verify']) && empty($_POST['sac_verify']) ? true : false;

$sac_no_js = isset($_POST['sac_no_js']) ? true : false;

$sac_nonces = array(
	'Y4-B84pY:IN:;th1H$r+O8cF',
	'IA/,HwsA^y@V0Rre(jF](^P+',
	'kW5oJsj,M4$.}?Zf/GqqZcaz',
	'=1ekfx)K#_5goJ6HrifbK=Ss',
	'8#8r)z3=ELR;7Oqwcp3V3Nv!',
	'Ei9)OuJaqYRssa]b}wut3;=m',
	'}TM42oi:-HppFF:XYk0OY{DM',
	'z%v3[oRX[:w1pp,3ODHD)m7O',
	'@.,oe/A3KKJAvdtSc{]kogMA',
	'tR7djZB~)hlqs6U*jTcXT+IS',
);

$sac_js_nonce = isset($_POST['sac_js_nonce']) ? base64_decode($_POST['sac_js_nonce']) : false;

$sac_error_message = esc_html__('WP Plugin SAC: JavaScript not enabled. Please enable JavaScript and try again.', 'simple-ajax-chat');

if ($sacSendChat === 'yes' && !in_array($sac_js_nonce, $sac_nonces)) {
	
	// error_log($sac_error_message, 0);
	
	wp_die($sac_error_message, 200);
	
}

$sac_error_message = esc_html__('WP Plugin SAC: Name and comment required. Please complete all required fields and try again.', 'simple-ajax-chat');


// process chats
if (wp_verify_nonce($sac_nonce, 'sac_nonce')) {
	
	if (!empty($sac_referer) && $sac_match) {
		
		if ($sac_no_js && $sac_verify) {
			
			if ($sac_name && $sac_chat) {
				
				$sac_name = apply_filters('sac_process_chat_name', $sac_name);
				$sac_chat = apply_filters('sac_process_chat_text', $sac_chat);
				$sac_url  = apply_filters('sac_process_chat_url',  $sac_url);
				
				$simple_ajax_chat_domain = sanitize_text_field($_SERVER['HTTP_HOST']);
				
				do_action('sac_process_chat', $sac_name, $sac_chat, $sac_url);
				
				sac_addData($sac_name, $sac_chat, $sac_url);
				sac_deleteOld();
				
				setcookie('sacUserName', $sac_name, $sac_time, '/', $simple_ajax_chat_domain, false, true);
				setcookie('sacUrl',      $sac_url,  $sac_time, '/', $simple_ajax_chat_domain, false, true);
				
				header('Location: '. $sac_referer);
					
			} else {
				
				wp_die($sac_error_message, 200);
				
			}
			
		} else {
			
			if (!empty($sac_user_name) && !empty($sac_user_text) && $sacSendChat === 'yes') {
				
				$sac_user_name = apply_filters('sac_process_chat_name', $sac_user_name);
				$sac_user_text = apply_filters('sac_process_chat_text', $sac_user_text);
				$sac_user_url  = apply_filters('sac_process_chat_url',  $sac_user_url);
				
				do_action('sac_process_chat', $sac_user_name, $sac_user_text, $sac_user_url);
				
				sac_addData($sac_user_name, $sac_user_text, $sac_user_url);
				sac_deleteOld();
				
			} else {
				
				wp_die($sac_error_message, 200);
				
			}
			
		}
		
	}
	
}



exit();