<?
//v12
define('ALLOWED_URLS' , '/wp-json/contact-form-7/v1/');
define('ALLOWED_ACTIONS' , 'nf_ajax_submit');
define('UPDATE_NONCES' , 'null');

$REQUEST_URI = $_SERVER['REQUEST_URI'];
//remove query params from url
if(strpos($_SERVER['REQUEST_URI'], '?') !== false){
    $REQUEST_URI = substr($_SERVER['REQUEST_URI'], 0, strpos($_SERVER['REQUEST_URI'], '?'));
}

$allowed = false;
if($REQUEST_URI != '' && ALLOWED_URLS != ''){
    foreach(explode('|', ALLOWED_URLS) as $allowed_url){
        if(strpos($REQUEST_URI, $allowed_url) !== false){
            $allowed = true;
            break;
        }
    }    
}

if(
    ALLOWED_ACTIONS != '' && ($_POST['action'] != '' || $_GET['action'] != '')
    && strpos($REQUEST_URI, 'wp-admin/admin-ajax.php') !== false
){
    foreach(explode('|', ALLOWED_ACTIONS) as $allowed){
        if($_POST['action'] == $allowed || $_GET['action'] == $allowed){
            $allowed = true;
            break;
        }
    }
}

if(!$allowed){
    header('HTTP/1.0 404 Not Found');
    include('404.html');
    exit;
}

//get nonces from wp
//conf example
//var ebd_inline = {"ajaxurl":"https:\/\/agreteq.com\/wp-admin\/admin-ajax.php","ajax_nonce":"895441aac5"};

/*
"updateNonces": 
    {
        "ebd_inline_links": {
            "obj_name": "ebd_inline",
            "obj_prop": "ajax_nonce",
            "method": "POST",
            "method_key": "security"
        }
    }
*/

define('PRIVATE_SITE_URL', 'https://wp.betaniaurbano.grupobetania.com');
define('PRIVATE_SITE_URL_NO_PROTOCOL', 'wp.betaniaurbano.grupobetania.com');
define('PUBLIC_SITE_URL_NO_PROTOCOL', 'betaniaurbano.grupobetania.com');
define('PRIVATE_SITE_AUTH', 'wp.urbano:SN4YYnRhIs9J');

if(UPDATE_NONCES != '' && UPDATE_NONCES != 'null'){
    $nonceConf = json_decode(UPDATE_NONCES, true);

    $headers = array();
    $ch = curl_init();
    curl_setopt($ch, CURLOPT_VERBOSE, 1);
    curl_setopt($ch, CURLOPT_URL, 'https://wp.betaniaurbano.grupobetania.com/404');
    curl_setopt($ch,CURLOPT_POST, 0);
    curl_setopt($ch, CURLOPT_FOLLOWLOCATION, true);
    curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);  
    curl_setopt($ch, CURLOPT_HEADER, 1);
    curl_setopt($ch,CURLOPT_ENCODING , "gzip");

    if (PRIVATE_SITE_AUTH != '') {
        $headers[] = 'Authorization: Basic ' . base64_encode(PRIVATE_SITE_AUTH);
    }
    curl_setopt($ch, CURLOPT_HTTPHEADER, $headers);

    $response = curl_exec ($ch);
    $header_size = curl_getinfo($ch, CURLINFO_HEADER_SIZE);
    // $header = substr($response, 0, $header_size);
    $page_content = substr($response, $header_size);
    curl_close ($ch);

    foreach($nonceConf as $nonceName => $nonce){
        preg_match  ('/'.$nonce['obj_name'].'.+?[\'|"]{1}'.$nonce['obj_prop'].'[\'|"]{1}:[\'|"]{1}(\w+)[\'|"]{1}/', $page_content, $matches);
        if(isset($matches[1])){
            if($nonce['method'] == 'GET') $_GET[$nonce['method_key']] = $matches[1];
            else if($nonce['method'] == 'POST') $_POST[$nonce['method_key']] = $matches[1];
        }
    }
}


//https://gist.github.com/maxivak/18fcac476a2f4ea02e5f80b303811d5f

function build_data_files($boundary, $fields, $files) {
    $data = '';
    $eol = "\r\n";
    $delimiter = '-------------' . $boundary;

    foreach ($fields as $name => $content) {
        if (is_array($content)) {
            $data .= build_nested_data($delimiter, $name, $content, $eol);
        } else {
            $data .= "--" . $delimiter . $eol
                . 'Content-Disposition: form-data; name="' . $name . "\"".$eol.$eol
                . $content . $eol;
        }
    }

    foreach ($files as $name => $content) {
        $data .= "--" . $delimiter . $eol
            . 'Content-Disposition: form-data; name="' . $name . '"; filename="' . $name . '"' . $eol
            //. 'Content-Type: image/png'.$eol
            . 'Content-Transfer-Encoding: binary'.$eol
            ;

        $data .= $eol;
        $data .= $content . $eol;
    }
    $data .= "--" . $delimiter . "--".$eol;

    return $data;
}

function build_nested_data($delimiter, $name, $content, $eol) {
    $data = '';

    foreach ($content as $key => $value) {
        if (is_array($value)) {
            $data .= build_nested_data($delimiter, $name.'['.$key.']', $value, $eol);
        } else {
            $data .= "--" . $delimiter . $eol
                . 'Content-Disposition: form-data; name="' . $name . '['.$key.']"' . $eol
                . $eol
                . $value . $eol;
        }
    }

    return $data;
}



//$postdata = file_get_contents('php://input'); 
$postdata = http_build_query($_POST);

$headers = array();
foreach (getallheaders() as $nombre => $valor) {
    if(strtolower($nombre) != 'content-length' && strpos(strtolower($nombre.': '.$valor), 'content-type: multipart/form-data') === false) $headers[] = "$nombre: ".str_replace(PUBLIC_SITE_URL_NO_PROTOCOL, PRIVATE_SITE_URL_NO_PROTOCOL, $valor);
    
    if(strpos(strtolower($nombre.': '.$valor), 'content-type: multipart/form-data') !== false){
            $boundary = uniqid();
            $delimiter = '-------------' . $boundary;
            
            $postdata = build_data_files($boundary, $_POST, array());
            $headers[] = "Content-Type: multipart/form-data; boundary=" . $delimiter;
    }
}

if (PRIVATE_SITE_AUTH != '') {
    $headers[] = 'Authorization: Basic ' . base64_encode(PRIVATE_SITE_AUTH);
}

$ch = curl_init();
curl_setopt($ch, CURLOPT_VERBOSE, 1);
curl_setopt($ch, CURLOPT_URL, PRIVATE_SITE_URL.$_SERVER['REQUEST_URI']);
if($postdata != ''){
    curl_setopt($ch,CURLOPT_POST, 1);
    curl_setopt($ch,CURLOPT_POSTFIELDS, $postdata);
    $headers[] = 'Content-Length: '.strlen($postdata);
}else{
    curl_setopt($ch,CURLOPT_POST, 0);
}
curl_setopt($ch, CURLOPT_FOLLOWLOCATION, true);
curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);  
curl_setopt($ch, CURLOPT_HEADER, 1);
curl_setopt($ch,CURLOPT_ENCODING , "gzip");

// $fp = fopen('headers-request.log', 'w+');
// fwrite($fp, var_export(getallheaders(),true));


curl_setopt($ch, CURLOPT_HTTPHEADER, $headers);

$response = curl_exec ($ch);
$header_size = curl_getinfo($ch, CURLINFO_HEADER_SIZE);
$header = substr($response, 0, $header_size);
$body = substr($response, $header_size);
curl_close ($ch);

$newBody = str_replace(PRIVATE_SITE_URL_NO_PROTOCOL, PUBLIC_SITE_URL_NO_PROTOCOL, $body);

$headers = explode(chr(10), $header);

$encoding = false;
foreach($headers as $key => $value){
    if($value != '' 
        && strpos(strtolower($value), 'transfer-encoding') === false 
        && strpos(strtolower($value), 'www-authenticate') === false
        && strpos(strtolower($value), 'content-length') === false ) header(str_replace(PRIVATE_SITE_URL_NO_PROTOCOL, PUBLIC_SITE_URL_NO_PROTOCOL, $value)); //no chunked
    if(strpos(strtolower($value), 'content-encoding') !== false) $encoding = true;
}
header('Rayo: OK');

// $fp = fopen('body.log', 'w+');
// fwrite($fp, $response);
// $fp = fopen('newbody.log', 'w+');
// fwrite($fp, $newBody);
// $fp = fopen('newbody2.log', 'w+');
// fwrite($fp, gzencode($newBody));

if($encoding)
{
    $newBody = gzencode($newBody);
    header('Content-Encoding: gzip');
    header('Content-Length: '.strlen($newBody));
    echo $newBody;
}else{
    header('Content-Length: '.strlen($newBody));
    echo $newBody;
}
?>