Ubuntu
editor->is_edit_mode();
if ( $is_edit_mode || false === $response ) {
$filter_id = $settings['match_id'];
$fields = '?fields=id,create_time,cover_image_url,share_url,video_description,duration,height,width,title,embed_html,embed_link,like_count,comment_count,share_count,view_count';
$args = array(
'headers' => array(
'Authorization' => 'Bearer ' . $token,
'Content-Type' => 'application/json',
),
);
if ( ! empty( $filter_id ) ) {
$filters = explode( ',', $filter_id );
$endpoint = 'video/query/';
$filters = array(
'filters' => array(
'video_ids' => $filters,
),
);
$args['body'] = wp_json_encode( $filters );
} else {
$endpoint = 'video/list/';
$limit = $settings['no_of_posts'];
if ( ! empty( $limit ) ) {
$limit = array(
'max_count' => $limit,
);
$args['body'] = wp_json_encode( $limit );
}
}
$url = TIKTOK_API_URL . $endpoint . $fields;
$response = wp_remote_post(
$url,
$args
);
if ( is_wp_error( $response ) ) {
return;
}
$response = wp_remote_retrieve_body( $response );
$response = json_decode( $response, true );
if ( 'ok' !== $response['error']['code'] ) {
?>
' . $response['error']['message']; ?>
array(
'Authorization' => 'Bearer ' . $token,
),
)
);
if ( is_wp_error( $response ) ) {
return 'error';
}
$response = wp_remote_retrieve_body( $response );
$response = json_decode( $response, true );
if ( 'ok' !== $response['error']['code'] ) {
?>
' . $response['error']['message']; ?>
15,
'sslverify' => true,
)
);
$response = wp_remote_retrieve_body( $response );
$response = json_decode( $response, true );
set_transient( 'pa_tiktok_token_' . $token, $response, 23 * HOUR_IN_SECONDS );
return $response;
}
/**
* Refresh TikTok Token.
*
* @param string $token old token.
*/
function get_tiktok_videos_urls( $settings, $feed, $widget_id ) {
$token = $settings['access_token'];
$transient_name = sprintf( 'papro_tiktok_urls_%s_%s', substr( $token, -8 ), $widget_id );
$response = get_transient( $transient_name );
if ( false === $response ) {
foreach ( $feed as $index => $video ) {
$video_url = get_video_url( $video['share_url'] );
download_tiktok_video( $video_url, $video['id'] );
}
$transient = Helper_Functions::transient_expire( $settings['reload'] );
set_transient( $transient_name, true, $transient );
}
}
function get_video_url( $url ) {
$url = strtok( $url, '?' );
$content = get_video_content( $url );
$check = explode( '"playAddr":"', $content );
$contentURL = explode( '"', $check[1] )[0];
$contentURL = escape_sequence_decode( $contentURL );
return $contentURL;
}
function escape_sequence_decode( $str ) {
// [U+D800 - U+DBFF][U+DC00 - U+DFFF]|[U+0000 - U+FFFF]
$regex = '/\\\u([dD][89abAB][\da-fA-F]{2})\\\u([dD][c-fC-F][\da-fA-F]{2})
|\\\u([\da-fA-F]{4})/sx';
return preg_replace_callback(
$regex,
function ( $matches ) {
if ( isset( $matches[3] ) ) {
$cp = hexdec( $matches[3] );
} else {
$lead = hexdec( $matches[1] );
$trail = hexdec( $matches[2] );
// http://unicode.org/faq/utf_bom.html#utf16-4
$cp = ( $lead << 10 ) + $trail + 0x10000 - ( 0xD800 << 10 ) - 0xDC00;
}
// https://tools.ietf.org/html/rfc3629#section-3
// Characters between U+D800 and U+DFFF are not allowed in UTF-8
if ( $cp > 0xD7FF && 0xE000 > $cp ) {
$cp = 0xFFFD;
}
// https://github.com/php/php-src/blob/php-5.6.4/ext/standard/html.c#L471
// php_utf32_utf8(unsigned char *buf, unsigned k)
if ( $cp < 0x80 ) {
return chr( $cp );
} elseif ( $cp < 0xA0 ) {
return chr( 0xC0 | $cp >> 6 ) . chr( 0x80 | $cp & 0x3F );
}
return html_entity_decode( '&#' . $cp . ';' );
},
$str
);
}
function get_video_content( $url, $geturl = false ) {
$ch = curl_init();
$options = array(
CURLOPT_URL => $url,
CURLOPT_RETURNTRANSFER => true,
CURLOPT_HEADER => false,
CURLOPT_FOLLOWLOCATION => false, // Disable redirects
CURLOPT_USERAGENT => 'okhttp',
CURLOPT_COOKIEJAR => 'cookie.txt',
CURLOPT_COOKIEFILE => 'cookie.txt',
CURLOPT_REFERER => 'https://www.tiktok.com/',
CURLOPT_SSL_VERIFYHOST => 2, // Enable SSL verification
CURLOPT_SSL_VERIFYPEER => true, // Enable SSL verification
CURLOPT_TIMEOUT => 30,
CURLOPT_MAXREDIRS => 10,
);
curl_setopt_array( $ch, $options );
if ( defined( 'CURLOPT_IPRESOLVE' ) && defined( 'CURL_IPRESOLVE_V4' ) ) {
curl_setopt( $ch, CURLOPT_IPRESOLVE, CURL_IPRESOLVE_V4 );
}
$data = curl_exec( $ch );
$httpcode = curl_getinfo( $ch, CURLINFO_HTTP_CODE );
if ( $geturl === true ) {
return curl_getinfo( $ch, CURLINFO_EFFECTIVE_URL );
}
curl_close( $ch );
return strval( $data );
}
function download_tiktok_video( $video_url, $video_id, $geturl = false ) {
// Validate video ID
$video_id = validate_video_id( $video_id );
if ( ! $video_id ) {
return new WP_Error( 'invalid_video_id', 'Invalid video ID provided' );
}
// Validate URL
if ( ! filter_var( $video_url, FILTER_VALIDATE_URL ) ) {
return new WP_Error( 'invalid_url', 'Invalid video URL' );
}
// Only allow TikTok domains
$parsed_url = parse_url( $video_url );
if ( empty( $parsed_url['host'] ) ) {
return false;
}
// return;
if ( strpos( $parsed_url['host'], 'tiktok' ) === false ) {
return new WP_Error( 'unauthorized_host', 'Unauthorized video host' );
}
$tiktok_dir = set_url_scheme( wp_upload_dir()['basedir'] . '/tiktok-videos' );
if ( ! file_exists( $tiktok_dir ) ) {
wp_mkdir_p( $tiktok_dir );
}
$ch = curl_init();
$options = array(
CURLOPT_URL => $video_url,
CURLOPT_RETURNTRANSFER => true,
CURLOPT_HEADER => false,
CURLOPT_FOLLOWLOCATION => false, // Disable redirects
CURLOPT_USERAGENT => 'okhttp',
CURLOPT_COOKIEJAR => 'cookie.txt',
CURLOPT_COOKIEFILE => 'cookie.txt',
CURLOPT_REFERER => 'https://www.tiktok.com/',
CURLOPT_SSL_VERIFYHOST => 2, // Enable SSL verification
CURLOPT_SSL_VERIFYPEER => true, // Enable SSL verification
CURLOPT_TIMEOUT => 30,
CURLOPT_MAXFILESIZE => 50 * 1024 * 1024, // 50MB limit
);
curl_setopt_array( $ch, $options );
$data = curl_exec( $ch );
$httpcode = curl_getinfo( $ch, CURLINFO_HTTP_CODE );
// if ( $httpcode !== 200 ) {
// curl_close( $ch );
// return new WP_Error( 'download_failed', 'Failed to download video' );
// }
if ( strlen( $data ) > 50 * 1024 * 1024 ) {
curl_close( $ch );
return new WP_Error( 'file_too_large', 'Video is larger than 50MB' );
}
curl_close( $ch );
// Secure filename generation
$filename = $tiktok_dir . '/' . basename( $video_id ) . '.mp4';
// Use WordPress filesystem API
global $wp_filesystem;
if ( ! $wp_filesystem ) {
require_once ABSPATH . 'wp-admin/includes/file.php';
WP_Filesystem();
}
$result = $wp_filesystem->put_contents( $filename, $data, FS_CHMOD_FILE );
if ( ! $result ) {
return new WP_Error( 'file_write_failed', 'Failed to save video file' );
}
return $filename;
}
function validate_video_id( $video_id ) {
// Only allow alphanumeric characters and hyphens
if ( ! preg_match( '/^[a-zA-Z0-9_-]+$/', $video_id ) ) {
return false;
}
// Limit length
if ( strlen( $video_id ) > 50 ) {
return false;
}
return sanitize_text_field( $video_id );
}