HEX
Server: Apache/2
System: Linux cat17246.lnwhostname.com 3.10.0-1160.53.1.el7.x86_64 #1 SMP Fri Jan 14 13:59:45 UTC 2022 x86_64
User: firststeps (1017)
PHP: 7.3.33
Disabled: exec,system,passthru,shell_exec,proc_close,proc_open,dl,popen,show_source,posix_kill,posix_mkfifo,posix_getpwuid,posix_setpgid,posix_setsid,posix_setuid,posix_setgid,posix_seteuid,posix_setegid,posix_uname
Upload Files
File: /home/firststeps/public_html/wp-content/plugins/jetformbuilder/components/export/csv/service.php
<?php


namespace JFB_Components\Export\Csv;

use Jet_Form_Builder\Classes\Tools;
use JFB_Components\Export\Interfaces\Base_Export_It;

// If this file is called directly, abort.
if ( ! defined( 'WPINC' ) ) {
	die;
}

class Service implements Base_Export_It {

	/**
	 * Add BOM to fix UTF-8 in Excel
	 *
	 * @see https://www.php.net/manual/en/function.fputcsv.php#118252
	 */
	const UTF8_BOM = "\xEF\xBB\xBF";

	/**
	 * @see https://owasp.org/www-community/attacks/CSV_Injection
	 */
	const FORMULAS_START_CHARACTERS = array(
		'=',
		'-',
		'+',
		'@',
		"\t",
		"\r",
	);

	private $file;
	private $file_name;
	private $separator = ',';
	private $enclosure = '"';

	public function open() {
		if ( false === strpos( ini_get( 'disable_functions' ), 'set_time_limit' ) ) {
			set_time_limit( 0 );
		}
		ignore_user_abort( true );

		// phpcs:disable WordPress.PHP
		@session_write_close();
		@ini_set( 'zlib.output_compression', 'Off' );

		if ( function_exists( 'apache_setenv' ) ) {
			$variable = 'no-gzip';
			$value    = 1;
			@apache_setenv( $variable, $value );
		}
		nocache_headers();

		header( 'Robots: none' );
		header( 'Content-Type: text/csv; charset=utf-8' );
		header( 'Content-Description: File Transfer' );
		header( 'Content-Disposition: attachment; filename="' . $this->file_name . '";' );
		header( 'Content-Transfer-Encoding: binary' );

		// phpcs:enable WordPress.PHP
	}

	protected function get_file() {
		if ( ! is_null( $this->file ) ) {
			return $this->file;
		}

		$this->file = fopen( 'php://output', 'w' );

		// phpcs:ignore WordPress.WP.AlternativeFunctions.file_system_operations_fputs
		fputs( $this->file, self::UTF8_BOM );

		return $this->file;
	}

	public function add_row( array $row ) {
		$this->flatten( $row );

		fputcsv( $this->get_file(), $row, $this->separator, $this->enclosure );
	}

	private function flatten( array &$row ) {
		foreach ( $row as $key => &$value ) {
			if ( ! is_string( $value ) ) {
				$value = Tools::to_string( $value );
			}

			if ( in_array(
				substr( $value, 0, 1 ),
				self::FORMULAS_START_CHARACTERS,
				true
			) ) {
				$value = "'" . $value;
			}
		}
	}

	public function close() {
		// phpcs:ignore WordPress.WP.AlternativeFunctions.file_system_operations_fclose
		fclose( $this->get_file() );
	}

	public function set_title( string $title ) {
		$this->file_name = sanitize_title( $title ) . '.csv';
	}

	public function get_title(): string {
		return $this->file_name;
	}

	/**
	 * @param string $separator
	 */
	public function set_separator( string $separator ) {
		$this->separator = $separator;
	}

	/**
	 * @param string $enclosure
	 */
	public function set_enclosure( string $enclosure ) {
		$this->enclosure = $enclosure;
	}
}