<?php
defined('ABSPATH') or die();
if (!class_exists("cmplz_wsc_auth")) {
class cmplz_wsc_auth
{
const WSC_ENDPOINT = 'aHR0cHM6Ly9hcGkuY29tcGxpYW56Lmlv';
const WSC_CB_ENDPOINT = 'aHR0cHM6Ly9leHRlcm5hbC1wdWJsaWMtZ2VuZXJhbC5zMy5ldS13ZXN0LTEuYW1hem9uYXdzLmNvbS9zdGF0dXMuanNvbg==';
const WSC_TERMS_ENDPOINT = 'aHR0cHM6Ly9jb29raWVkYXRhYmFzZS5vcmcvd3AtanNvbi93c2MvdjEvdGVybXM=';
const NEWSLETTER_TERMS_ENDPOINT = 'aHR0cHM6Ly9jb29raWVkYXRhYmFzZS5vcmcvd3AtanNvbi9uZXdzbGV0dGVyL3YxL3Rlcm1z';
const NEWSLETTER_SIGNUP_ENDPOINT = 'aHR0cHM6Ly9tYWlsaW5nbGlzdC5jb21wbGlhbnouaW8=';
const CONS_ENDPOINT = 'aHR0cHM6Ly9jb25zZW50LmNvbXBsaWFuei5pby9wdWJsaWMvY29uc2VudA==';
const CONS_ENDPOINT_PK = 'qw0Jv5legvI9fQdn5OvNedpG4zibaTNT';
const WSC_ENDPOINT_AUTH_HEADER = 'QmFzaWMgZEdWaGJXSnNkV1ZmYzNSaFoybHVaenBGYm05bVJHZzRjV0Y2YVhCemFUWkxSM05FVlE9PQ==';
const PARTNER_ID = 'NjQ1MTc4NjMtM2YzMS00NDA3LWJjMWUtMjc4MjNlOTJhNThl';
const CONS_IDENTIFIERS = [
'wsc_consent' => 'terms',
'newsletter_consent' => 'newsletter',
];
public function init_hooks()
{
add_action("admin_init", array($this, 'confirm_email_auth'), 10, 3); // Verify the authentication link in the email
add_action('cmplz_every_day_hook', array($this, 'check_failed_consent_onboarding'));
add_action('cmplz_every_day_hook', array($this, 'check_failed_newsletter_signup'));
}
/**
* Sends an authentication email.
*
* This function sends an authentication email to the specified email address.
* It first checks if the user has the capability to manage the plugin.
* If the email is not a valid email address, it updates an option to indicate that the email was not sent.
* If the email is valid, it makes a POST request to the WSC endpoint to send the email.
* If the request is successful, it sets various options to indicate that the email was sent and updates the signup status.
* If the request fails, it updates an option to indicate that the email was not sent.
*
* @param string $email The email address to send the authentication email to.
* @return void
*/
public static function send_auth_email(string $email): void
{
if (!cmplz_user_can_manage() || empty($email)) {
return;
}
if (!is_email($email)) {
update_option('cmplz_wsc_error_email_not_sent', true, false);
return;
}
$wsc_endpoint = base64_decode(self::WSC_ENDPOINT);
$wsc_endpoint_auth_header = base64_decode(self::WSC_ENDPOINT_AUTH_HEADER);
$partner_id = base64_decode(self::PARTNER_ID);
$request = wp_remote_post(
$wsc_endpoint . '/api/lite/users',
array(
'headers' => array(
'Content-Type' => 'application/json',
'Authorization' => $wsc_endpoint_auth_header,
),
'timeout' => 15,
'sslverify' => true,
'body' => json_encode(array(
'email' => sanitize_email($email),
"base_url" => esc_url_raw(admin_url()),
"partner" => $partner_id
))
)
);
if (is_wp_error($request)) {
$error_message = $request->get_error_message();
if (WP_DEBUG) {
error_log('COMPLIANZ: cannot send email, request failed');
if ($error_message) {
error_log('COMPLIANZ: ' . $error_message);
}
}
update_option('cmplz_wsc_error_email_not_sent', true, false);
} else {
$response_code = wp_remote_retrieve_response_code($request);
if ($response_code === 200) {
cmplz_update_option_no_hooks(cmplz_wsc::WSC_EMAIL_OPTION_KEY, $email);
update_option('cmplz_wsc_signup_status', 'pending', false);
update_option('cmplz_wsc_status', 'pending', false);
update_option('cmplz_wsc_signup_date', time(), false);
delete_option('cmplz_wsc_error_email_not_sent');
delete_option( cmplz_wsc::WSC_OPT_ONBOARDING_DATE );
} else {
$response_message = wp_remote_retrieve_response_message($request);
if (WP_DEBUG) {
error_log('COMPLIANZ: cannot send email, request failed');
if ($response_message) {
error_log('COMPLIANZ: ' . $response_message);
}
}
update_option('cmplz_wsc_error_email_not_sent', true, false);
}
}
}
/**
* Handles the confirmation of email authentication for the Website Scan Feature.
*
* This function is responsible for confirming the email authentication for the Complianz plugin.
* It checks if the user has the necessary permissions, if the page is the Complianz page,
* and if the lite-user-confirmation parameter is set. It then verifies the email and token,
* makes a request to the WSC endpoint, and updates the necessary options accordingly.
* Finally, it redirects the user to the Complianz settings page.
*
* @return void
*/
public function confirm_email_auth(): void
{
if (!cmplz_user_can_manage()) {
return;
}
if (!isset($_GET['page']) || $_GET['page'] !== 'complianz') {
return;
}
if (!isset($_GET['lite-user-confirmation'])) {
return;
}
$stored_email = cmplz_get_option(cmplz_wsc::WSC_EMAIL_OPTION_KEY);
if (!isset($_GET['email']) || $_GET['email'] !== $stored_email) {
update_option('cmplz_wsc_error_email_mismatch', true, false);
if (WP_DEBUG) {
error_log('COMPLIANZ: email does not match the stored email');
}
return;
}
if (!isset($_GET['token'])) {
update_option('cmplz_wsc_error_missing_token', true, false);
if (WP_DEBUG) {
error_log('COMPLIANZ: token not found in the authentication url');
}
return;
}
$token = sanitize_text_field($_GET['token']);
$wsc_endpoint = base64_decode(self::WSC_ENDPOINT);
$wsc_endpoint_auth_header = base64_decode(self::WSC_ENDPOINT_AUTH_HEADER);
$request = wp_remote_post($wsc_endpoint . '/api/lite/oauth_applications', array(
'headers' => array(
'Content-Type' => 'application/json',
'Authorization' => $wsc_endpoint_auth_header,
),
'timeout' => 15,
'sslverify' => true,
'body' => json_encode(
array(
'email' => sanitize_title($stored_email),
'token' => $token,
)
),
));
if (is_wp_error($request)) {
$error_message = $request->get_error_message();
if (WP_DEBUG) {
error_log('COMPLIANZ: cannot confirm email, request failed');
if ($error_message) {
error_log('COMPLIANZ: ' . $error_message);
}
}
update_option('cmplz_wsc_error_email_auth_failed', true, false);
} else {
$response_code = wp_remote_retrieve_response_code($request);
if ($response_code === 201) {
$response_body = json_decode(wp_remote_retrieve_body($request));
if (isset($response_body->client_id) && isset($response_body->client_secret)) {
cmplz_update_option_no_hooks(cmplz_wsc::WSC_CLIENT_ID_OPTION_KEY, $response_body->client_id);
cmplz_update_option_no_hooks(cmplz_wsc::WSC_CLIENT_SECRET_OPTION_KEY, $response_body->client_secret);
update_option('cmplz_wsc_signup_status', 'enabled', false);
update_option('cmplz_wsc_status', 'enabled', false);
update_option('cmplz_wsc_auth_completed', true, false);
cmplz_wsc_onboarding::update_onboarding_status('terms', true);
delete_option('cmplz_wsc_error_email_auth_failed');
delete_option('cmplz_wsc_error_email_mismatch');
delete_option('cmplz_wsc_error_missing_token');
// reset the processed pages
delete_transient('cmplz_processed_pages_list');
} else {
if (WP_DEBUG) {
error_log('COMPLIANZ: cannot confirm email, client id or secret not found in response');
}
update_option('cmplz_wsc_error_email_auth_failed', true, false);
}
} else {
if (WP_DEBUG) {
error_log('COMPLIANZ: cannot confirm email, request failed');
}
update_option('cmplz_wsc_error_email_auth_failed', true, false);
}
}
wp_redirect(cmplz_admin_url('#settings/settings-cd'));
exit;
}
/**
* Retrieves the access token for the Website Scan feature.
*
* This function checks the WSC signup status and retrieves the access token
* if it is available. If the token is not found, it tries to retrieve a fresh one
* using the provided email, client ID, and client secret.
*
* @param bool $new Whether to retrieve a new token.
* @param bool $no_store Whether to store the token.
* @param array|false $client_credentials The client credentials.
*
* @return string|bool The access token if available, 'pending' if the WSC signup status is pending,
* false if the email, client ID, or client secret is not found, or false if there
* was an error retrieving the token.
*
*/
public static function get_token($new = false, $no_store = false, $client_credentials = false)
{
// emulating the union type array|false $client_credentials
if (!is_bool($new)) {
throw new InvalidArgumentException('$new needs to be of type bool');
}
if (!is_bool($no_store)) {
throw new InvalidArgumentException('$no_store needs to be of type bool');
}
if ($client_credentials !== false && !is_array($client_credentials)) {
throw new InvalidArgumentException('$client_credentials must be an array or false');
}
// clear stored token
if ($new) cmplz_delete_transient('cmplz_wsc_access_token');
$token = cmplz_get_transient('cmplz_wsc_access_token');
if ($token) {
return $token;
}
//if no token found, try retrieving a fresh one
$email = (string)cmplz_get_option(cmplz_wsc::WSC_EMAIL_OPTION_KEY);
$client_id = (string)cmplz_get_option(cmplz_wsc::WSC_CLIENT_ID_OPTION_KEY);
$client_secret = (string)cmplz_get_option(cmplz_wsc::WSC_CLIENT_SECRET_OPTION_KEY);
// if client credentials are provided, use them
if ($client_credentials) {
$client_id = $client_credentials['client_id'];
$client_secret = $client_credentials['client_secret'];
} else {
if ($email === '' || $client_id === '' || $client_secret === '') {
// if (WP_DEBUG) {
// error_log('COMPLIANZ: cannot retrieve token, email or client id or secret not found');
// }
return false;
}
}
$wsc_endpoint = base64_decode(self::WSC_ENDPOINT);
$wsc_endpoint_auth_header = base64_decode(self::WSC_ENDPOINT_AUTH_HEADER);
$request = wp_remote_post(
$wsc_endpoint . '/oauth/token',
array(
'headers' => array(
'Content-Type' => 'application/json',
'Authorization' => $wsc_endpoint_auth_header,
),
'timeout' => 15,
'sslverify' => true,
'body' => json_encode(
array(
'grant_type' => "client_credentials",
"client_id" => $client_id,
"client_secret" => $client_secret,
"scope" => "write"
)
)
)
);
if (!is_wp_error($request)) { // request success true
$request = json_decode(wp_remote_retrieve_body($request));
if (isset($request->access_token)) { // if there's an access token
if ($no_store) return $request->access_token;
delete_option('cmplz_wsc_error_token_api');
update_option('cmplz_wsc_connection_updated', time(), false);
$token = $request->access_token;
$expires = $request->expires_in ?? 7200;
cmplz_set_transient('cmplz_wsc_access_token', $token, $expires - 10);
return $token;
} else {
if ($no_store) return false;
update_option('cmplz_wsc_error_token_api', true, false);
if (WP_DEBUG && $request->error) {
error_log('COMPLIANZ: cannot retrieve token, token not found in response');
}
return false;
}
} else {
if (!$no_store) update_option('cmplz_wsc_error_token_api', true, false);
$error_message = $request->get_error_message();
if (WP_DEBUG) {
error_log('COMPLIANZ: cannot retrieve token, request failed');
if ($error_message) {
error_log('COMPLIANZ: ' . $error_message);
}
}
return false;
}
}
/**
* Store the consent when user signs up for the WSC Feature
* or when the user signs up for the newsletter
*
* The method is triggered once using the cron job during the onboarding process
* or using check_failed_consent_onboarding() method ($retry = true)
*
* @param string $type || Could be wsc terms, wsc newsletter 'wsc_consent' // 'newsletter_consent'
* @param array $posted_data
* @param bool $retry
* @param string $consent_data
* @return void
*/
public static function store_onboarding_consent(string $type, array $posted_data, bool $retry = false, string $consent_data = ''): void
{
// Check if the given type exists in the cons_identifiers array.
if (!array_key_exists($type, self::CONS_IDENTIFIERS)) {
return;
}
// Check if the posted_data array is empty.
if (empty($posted_data)) {
return;
}
// if it's a retry because there's an old failed store attempts
// set the old consent
if ($retry) {
$consent = $consent_data;
} else {
// else let's create a new consent data
// check posted data
$email = sanitize_email($posted_data['email']);
if (!is_email($email)) {
return;
}
// Create a subject id
$site_url = site_url();
$encodedSiteUrl = base64_encode($site_url);
$encodedEmail = base64_encode($email);
$consent_subject_id = sprintf('cmplz-%s#%s', $encodedSiteUrl, $encodedEmail);
// Check for timestamp and url
$timestamp = isset($posted_data['timestamp']) // check if timestamp is set
? (int)$posted_data['timestamp'] / (strlen($posted_data['timestamp']) > 10 ? 1000 : 1) // if timestamp is in milliseconds, convert to seconds
: time(); // if $posted_data['timestamp'] is not set, use the current time
$url = esc_url_raw($posted_data['url']) ?? site_url();
// Generate the consent
$consent = json_encode([
'timestamp' => date('c', $timestamp),
'subject' => [
'id' => $consent_subject_id,
'email' => $email,
],
'preferences' => [
$type => true
],
'legal_notices' => [
[
'identifier' => self::CONS_IDENTIFIERS[$type] // terms or newsletter
]
],
'proofs' => [
[
// pass all $posted_data as content
'content' => json_encode([
'email' => $email,
'timestamp' => $timestamp,
'url' => $url,
]),
'form' => 'complianz-onboarding__' . $type, // complianz onboarding form ??
]
],
]);
}
// safe store the consent locally
update_option('cmplz_' . $type . '_consentdata', $consent, false);
$cons_endpoint = base64_decode(self::CONS_ENDPOINT);
// Send the request
$request = wp_remote_post(
$cons_endpoint,
array(
'headers' => array(
'Content-Type' => 'application/json',
'ApiKey' => self::CONS_ENDPOINT_PK,
),
'timeout' => 15,
'sslverify' => true,
'body' => $consent
)
);
if (is_wp_error($request)) {
$error_message = $request->get_error_message();
if (WP_DEBUG) {
error_log('COMPLIANZ: cannot store consent, request failed for identifier: ' . $type);
if ($error_message) {
error_log('COMPLIANZ: ' . $error_message);
}
}
// // define an error into the options
update_option('cmplz_consent_error_timestamp_' . $type, time());
// store the consent for the time we can resend the request
update_option('cmplz_consent_error_consentdata_' . $type, $consent);
} else {
$response_code = wp_remote_retrieve_response_code($request);
if ($response_code == 200) {
delete_option('cmplz_consent_' . $type);
// delete possible consent errors
delete_option('cmplz_consent_error_timestamp_' . $type);
delete_option('cmplz_consent_error_consentdata_' . $type);
$body = json_decode(wp_remote_retrieve_body($request));
// store the consent locally
update_option('cmplz_consent_' . $type, $body);
} else {
$response_message = wp_remote_retrieve_response_message($request);
if (WP_DEBUG) {
error_log('COMPLIANZ: cannot store consent, request failed for identifier: ' . $type);
if ($response_message) {
error_log('COMPLIANZ: ' . $response_message);
}
}
// // define an error into the options
update_option('cmplz_consent_error_timestamp_' . $type, time());
// store the consent for the time we can resend the rquest
update_option('cmplz_consent_error_consentdata_' . $type, $consent);
}
}
}
/**
* Subscribes a user to the newsletter.
*
* @param string $email The email address of the user.
* @param bool $retry Whether to retry the subscription if it fails.
* @return void
*/
public static function newsletter_sign_up(string $email, bool $retry = false): void
{
$license_key = '';
if (defined('rsssl_pro_version')) {
$license_key = COMPLIANZ::$license->license_key();
$license_key = COMPLIANZ::$license->maybe_decode($license_key);
}
$api_params = array(
'has_premium' => defined('cmplz_premium'), // not required
'license' => $license_key, // not required
'email' => sanitize_email($email),
'domain' => esc_url_raw(site_url()),
);
$newsletter_signup_endpoint = base64_decode(self::NEWSLETTER_SIGNUP_ENDPOINT);
$request = wp_remote_post($newsletter_signup_endpoint, array('timeout' => 15, 'sslverify' => true, 'body' => $api_params));
if (is_wp_error($request)) {
update_option('cmplz_newsletter_signup_error_email', $email, false); // save the email in an option
update_option('cmplz_newsletter_signup_error', true, false); // save the failed attempt
update_option('cmplz_newsletter_signup_error_timestamp', time(), false); // set an error with the timestamp
// log the error
if (WP_DEBUG) {
$error_message = $request->get_error_message();
if ($error_message) {
error_log('COMPLIANZ: ' . $error_message);
}
}
} else {
$response_code = wp_remote_retrieve_response_code($request); // 200 ok
if ($response_code === 200) {
// if the method is called by the cron or there's a mismatch between the emails clean the options
if ($retry || $email !== get_option('cmplz_newsletter_signup_error_email')) {
// remove any failed attempts
delete_option('cmplz_newsletter_signup_error_email');
delete_option('cmplz_newsletter_signup_error');
delete_option('cmplz_newsletter_signup_error_timestamp');
}
// save the email in the options
cmplz_update_option_no_hooks('notifications_email_address', $email); // save the email in the options
cmplz_update_option_no_hooks('send_notifications_email', 1); // enable the notifications
cmplz_wsc_onboarding::update_onboarding_status('newsletter', true);
}
}
}
/**
* Website Scan Circuit Breaker
*
* This function checks if the Website scan endpoint accepts user signups and radar scans
* passing auth or scanner as $service.
*
* @param string $service The service to check | signup or scanner.
* @return bool Returns true if the Website scan endpoint accepts user signups, false otherwise.
*
*/
public static function wsc_api_open(string $service): bool
{
$wsc_cb_endpoint = base64_decode(self::WSC_CB_ENDPOINT);
$request = wp_remote_get($wsc_cb_endpoint);
if (is_wp_error($request)) {
cmplz_wsc_logger::log_errors( 'wsc_api_open', $request->get_error_message() );
return false;
}
$service = sprintf('%s_enabled', $service);
$response_body = json_decode(wp_remote_retrieve_body($request));
if (isset($response_body->$service) && $response_body->$service === 'true') {
return true;
}
return false;
}
/**
* Check for failed onboarding consent store attempts
* If there's a failed attempt, try to store it again
*
*
* @return void
*/
public function check_failed_consent_onboarding(): void
{
$identifiers = self::CONS_IDENTIFIERS;
foreach ($identifiers as $key => $type) {
// check for the errors
$error_timestamp = get_option('cmplz_consent_error_timestamp_' . $key, false);
// store the consent for the time we can resend the rquest
$error_consentdata = get_option('cmplz_consent_error_consentdata_' . $key, false);
if ($error_consentdata && $error_timestamp < time() - 68400) {
$this->store_onboarding_consent($key, [], true, $error_consentdata);
}
}
}
/**
* Check for failed newsletter signups
* If there's a failed attempt, try to sign up again
*
* @return bool
*/
public function check_failed_newsletter_signup(): bool
{
$failed = get_option('cmplz_newsletter_signup_error');
$timestamp = get_option('cmplz_newsletter_signup_error_timestamp');
$email = get_option('cmplz_newsletter_signup_error_email');
if ($failed && $timestamp && $email) {
// check if the error is older than 24 hours
if ($timestamp < time() - 86400) {
// try to sign up again
self::newsletter_sign_up($email, true);
}
}
return true;
}
/**
* Checks if the WSC (Website Scan) is authenticated.
*
* This method verifies if the WSC is authenticated by checking if the client ID and client secret
* are stored in the options. If either the client ID or client secret is empty, it returns false.
* Otherwise, it returns true indicating that the WSC is authenticated.
*
* @return bool Returns true if the WSC is authenticated, false otherwise.
*/
public static function wsc_is_authenticated(): bool {
$client_id = (string) cmplz_get_option( cmplz_wsc::WSC_CLIENT_ID_OPTION_KEY );
$client_secret = (string) cmplz_get_option( cmplz_wsc::WSC_CLIENT_SECRET_OPTION_KEY );
if ( empty( $client_id ) || empty( $client_secret ) ) {
return false;
}
return true;
}
}
}
“Manus AI”… مساعد رقمي بقدرات متقدمة وحدود تجارية صارمة
كتبت إيريني أنطون
في ظل تصاعد الاهتمام بتطبيقات الذكاء الاصطناعي، برز تطبيق “Manus AI” كمساعد ذكي جديد يعد بتجاوز دور “الدردشة” إلى تنفيذ مهام معقدة، تشمل كتابة المقالات، إنتاج الصوتيات، وتحليل البيانات. إلا أن التجربة في الواقعية مع التطبيق تكشف عن مزيج من الإعجاب والإحباط.
عند تجربة التطبيق لكتابة مقال حول الذكاء الاصطناعي، أظهر “Manus” تجاوبًا دقيقًا ومنظمًا. بدأ بتأكيده على كتابة مقال شامل يغطي الجوانب التاريخية والتقنية والاجتماعية للموضوع، مع وعد بتقديم محتوى غني ومبني على مصادر موثوقة. كما أوضح استعداده لمواصلة العمل ومشاركة التقدم مع المستخدم.
لكن بعد بدء تنفيذ المهمة، توقّف التطبيق في منتصف العملية وطالب بالاشتراك المدفوع لاستكمالها، مما كشف عن سياسة تجارية قائمة على الدفع مقابل الاستمرارية. هذا النموذج قد يمثل عائقًا أمام المستخدمين الذين يتوقعون تجربة مجانية أو مرنة.
في تجربة أخرى، تم اختبار قدرة التطبيق على إنتاج مؤثرات صوتية، حيث طُلب منه إنشاء صوت طائر مع ضوضاء بيئية. وقد نجح في تنفيذ المهمة بدقة، ما يؤكد امتلاكه قدرات إبداعية تتجاوز النصوص الكتابية.
الفرق بين Manus وChatGPT:
يُعد “Manus” بمثابة وكيل ذكاء اصطناعي (AI Agent) يتجاوز الدردشة النصية التقليدية، حيث يمكنه تنفيذ سلسلة من المهام تلقائيًا داخل بيئة عمل افتراضية، مثل التصفح، البرمجة، أو التحكم في أدوات خارجية. بالمقابل، يقدم “ChatGPT” تجربة محادثة متقدمة تقوم على فهم اللغة الطبيعية وتوليد النصوص، مع بعض الإمكانيات التفاعلية، لكنه لا يعمل بشكل مستقل أو تلقائي لتنفيذ مهام متعددة الخطوات إلا إذا تم ربطه بأدوات خارجية (مثل GPTs الخاصة أو الإضافات).
كما أن “ChatGPT” يسمح للمستخدم باستخدام العديد من قدراته مجانًا أو عبر اشتراك شهري ثابت، بينما “Manus” يعمل بنظام نقاط واستهلاك، مما يجعله أكثر تقييدًا من حيث حرية الاستخدام.
يعكس “Manus AI” توجهًا متطورًا في عالم المساعدات الذكية، حيث يجمع بين التفاعل البشري والقدرات التنفيذية المتقدمة. ومع ذلك، فإن نظامه القائم على الاشتراكات ونقاط الاستخدام يضع حدودًا واضحة أمام مجانية الوصول إلى إمكانياته الكاملة. وبينما يُظهر تفوقًا تقنيًا في تنفيذ بعض المهام تلقائيًا، يظل ChatGPT أكثر مرونة وتنوعًا في الاستخدام اليومي، خاصة لمن يبحثون عن مزيج بين القوة وسهولة الوصول.
