文件管理器

编辑：class-wp-session-tokens.php

<?php
/**
 * Session API: WP_Session_Tokens class
 *
 * @package WordPress
 * @subpackage Session
 * @since 4.7.0
 */

/**
 * Abstract class for managing user session tokens.
 *
 * @since 4.0.0
 */
#[AllowDynamicProperties]
abstract class WP_Session_Tokens {

/**
	 * User ID.
	 *
	 * @since 4.0.0
	 * @var int User ID.
	 */
	protected $user_id;

/**
	 * Protected constructor. Use the `get_instance()` method to get the instance.
	 *
	 * @since 4.0.0
	 *
	 * @param int $user_id User whose session to manage.
	 */
	protected function __construct( $user_id ) {
		$this->user_id = $user_id;
	}

/**
	 * Retrieves a session manager instance for a user.
	 *
	 * This method contains a {@see 'session_token_manager'} filter, allowing a plugin to swap out
	 * the session manager for a subclass of `WP_Session_Tokens`.
	 *
	 * @since 4.0.0
	 *
	 * @param int $user_id User whose session to manage.
	 * @return WP_Session_Tokens The session object, which is by default an instance of
	 *                           the `WP_User_Meta_Session_Tokens` class.
	 */
	final public static function get_instance( $user_id ) {
		/**
		 * Filters the class name for the session token manager.
		 *
		 * @since 4.0.0
		 *
		 * @param string $session Name of class to use as the manager.
		 *                        Default 'WP_User_Meta_Session_Tokens'.
		 */
		$manager = apply_filters( 'session_token_manager', 'WP_User_Meta_Session_Tokens' );
		return new $manager( $user_id );
	}

/**
	 * Hashes the given session token for storage.
	 *
	 * @since 4.0.0
	 *
	 * @param string $token Session token to hash.
	 * @return string A hash of the session token (a verifier).
	 */
	private function hash_token( $token ) {
		return hash( 'sha256', $token );
	}

/**
	 * Retrieves a user's session for the given token.
	 *
	 * @since 4.0.0
	 *
	 * @param string $token Session token.
	 * @return array|null The session, or null if it does not exist.
	 */
	final public function get( $token ) {
		$verifier = $this->hash_token( $token );
		return $this->get_session( $verifier );
	}

/**
	 * Validates the given session token for authenticity and validity.
	 *
	 * Checks that the given token is present and hasn't expired.
	 *
	 * @since 4.0.0
	 *
	 * @param string $token Token to verify.
	 * @return bool Whether the token is valid for the user.
	 */
	final public function verify( $token ) {
		$verifier = $this->hash_token( $token );
		return (bool) $this->get_session( $verifier );
	}

/**
	 * Generates a session token and attaches session information to it.
	 *
	 * A session token is a long, random string. It is used in a cookie
	 * to link that cookie to an expiration time and to ensure the cookie
	 * becomes invalidated when the user logs out.
	 *
	 * This function generates a token and stores it with the associated
	 * expiration time (and potentially other session information via the
	 * {@see 'attach_session_information'} filter).
	 *
	 * @since 4.0.0
	 *
	 * @param int $expiration Session expiration timestamp.
	 * @return string Session token.
	 */
	final public function create( $expiration ) {
		/**
		 * Filters the information attached to the newly created session.
		 *
		 * Can be used to attach further information to a session.
		 *
		 * @since 4.0.0
		 *
		 * @param array $session Array of extra data.
		 * @param int   $user_id User ID.
		 */
		$session               = apply_filters( 'attach_session_information', array(), $this->user_id );
		$session['expiration'] = $expiration;

// IP address.
		if ( ! empty( $_SERVER['REMOTE_ADDR'] ) ) {
			$session['ip'] = $_SERVER['REMOTE_ADDR'];
		}

// User-agent.
		if ( ! empty( $_SERVER['HTTP_USER_AGENT'] ) ) {
			$session['ua'] = wp_unslash( $_SERVER['HTTP_USER_AGENT'] );
		}

// Timestamp.
		$session['login'] = time();

$token = wp_generate_password( 43, false, false );

$this->update( $token, $session );

return $token;
	}

/**
	 * Updates the data for the session with the given token.
	 *
	 * @since 4.0.0
	 *
	 * @param string $token Session token to update.
	 * @param array  $session Session information.
	 */
	final public function update( $token, $session ) {
		$verifier = $this->hash_token( $token );
		$this->update_session( $verifier, $session );
	}

/**
	 * Destroys the session with the given token.
	 *
	 * @since 4.0.0
	 *
	 * @param string $token Session token to destroy.
	 */
	final public function destroy( $token ) {
		$verifier = $this->hash_token( $token );
		$this->update_session( $verifier, null );
	}

/**
	 * Destroys all sessions for this user except the one with the given token (presumably the one in use).
	 *
	 * @since 4.0.0
	 *
	 * @param string $token_to_keep Session token to keep.
	 */
	final public function destroy_others( $token_to_keep ) {
		$verifier = $this->hash_token( $token_to_keep );
		$session  = $this->get_session( $verifier );
		if ( $session ) {
			$this->destroy_other_sessions( $verifier );
		} else {
			$this->destroy_all_sessions();
		}
	}

/**
	 * Determines whether a session is still valid, based on its expiration timestamp.
	 *
	 * @since 4.0.0
	 *
	 * @param array $session Session to check.
	 * @return bool Whether session is valid.
	 */
	final protected function is_still_valid( $session ) {
		return $session['expiration'] >= time();
	}

/**
	 * Destroys all sessions for a user.
	 *
	 * @since 4.0.0
	 */
	final public function destroy_all() {
		$this->destroy_all_sessions();
	}

/**
	 * Destroys all sessions for all users.
	 *
	 * @since 4.0.0
	 */
	final public static function destroy_all_for_all_users() {
		/** This filter is documented in wp-includes/class-wp-session-tokens.php */
		$manager = apply_filters( 'session_token_manager', 'WP_User_Meta_Session_Tokens' );
		call_user_func( array( $manager, 'drop_sessions' ) );
	}

/**
	 * Retrieves all sessions for a user.
	 *
	 * @since 4.0.0
	 *
	 * @return array Sessions for a user.
	 */
	final public function get_all() {
		return array_values( $this->get_sessions() );
	}

/**
	 * Retrieves all sessions of the user.
	 *
	 * @since 4.0.0
	 *
	 * @return array Sessions of the user.
	 */
	abstract protected function get_sessions();

/**
	 * Retrieves a session based on its verifier (token hash).
	 *
	 * @since 4.0.0
	 *
	 * @param string $verifier Verifier for the session to retrieve.
	 * @return array|null The session, or null if it does not exist.
	 */
	abstract protected function get_session( $verifier );

/**
	 * Updates a session based on its verifier (token hash).
	 *
	 * Omitting the second argument destroys the session.
	 *
	 * @since 4.0.0
	 *
	 * @param string $verifier Verifier for the session to update.
	 * @param array  $session  Optional. Session. Omitting this argument destroys the session.
	 */
	abstract protected function update_session( $verifier, $session = null );

/**
	 * Destroys all sessions for this user, except the single session with the given verifier.
	 *
	 * @since 4.0.0
	 *
	 * @param string $verifier Verifier of the session to keep.
	 */
	abstract protected function destroy_other_sessions( $verifier );

/**
	 * Destroys all sessions for the user.
	 *
	 * @since 4.0.0
	 */
	abstract protected function destroy_all_sessions();

/**
	 * Destroys all sessions for all users.
	 *
	 * @since 4.0.0
	 */
	public static function drop_sessions() {}
}

名称	权限	大小	修改时间	操作
↑ 返回上级	-	-	-	-
ID3	drwxr-xr-x	-	2024-04-03 10:16	删除
IXR	drwxr-xr-x	-	2026-04-17 05:01	删除
PHPMailer	drwxr-xr-x	-	2025-12-08 18:52	删除
Requests	drwxr-xr-x	-	2023-03-30 09:26	删除
SimplePie	drwxr-xr-x	-	2026-04-17 16:44	删除
Text	drwxr-xr-x	-	2024-11-13 13:00	删除
abilities-api	drwxr-xr-x	-	2026-04-17 16:32	删除
assets	drwxr-xr-x	-	2024-11-13 13:01	删除
block-bindings	drwxr-xr-x	-	2025-12-04 05:41	删除
block-patterns	drwxr-xr-x	-	2024-12-19 23:58	删除
block-supports	drwxr-xr-x	-	2025-12-04 05:41	删除
blocks	drwxr-xr-x	-	2025-12-04 05:41	删除
certificates	drwxr-xr-x	-	2022-11-15 19:03	删除
css	drwxr-xr-x	-	2025-04-16 11:06	删除
customize	drwxr-xr-x	-	2024-11-20 16:49	删除
fonts	drwxr-xr-x	-	2024-04-03 10:16	删除
html-api	drwxr-xr-x	-	2024-12-20 00:03	删除
images	drwxr-xr-x	-	2023-08-09 11:43	删除
interactivity-api	drwxr-xr-x	-	2024-12-20 00:12	删除
js	drwxr-xr-x	-	2025-12-04 05:42	删除
l10n	drwxr-xr-x	-	2024-12-20 00:12	删除
php-compat	drwxr-xr-x	-	2022-11-15 19:03	删除
pomo	drwxr-xr-x	-	2022-11-15 19:03	删除
rest-api	drwxr-xr-x	-	2024-11-20 16:51	删除
sitemaps	drwxr-xr-x	-	2022-11-15 19:03	删除
sodium_compat	drwxr-xr-x	-	2022-11-15 19:03	删除
style-engine	drwxr-xr-x	-	2022-11-15 19:03	删除
theme-compat	drwxr-xr-x	-	2025-12-08 18:51	删除
widgets	drwxr-xr-x	-	2023-06-26 16:12	删除
block-i18n.json	-rw-r--r--	316 B	2021-08-11 09:08	编辑下载删除
bookmark-template.php	-rw-r--r--	12.47 KB	2025-04-16 11:06	编辑下载删除
canonical.php	-rw-r--r--	33.83 KB	2025-12-04 05:41	编辑下载删除
class-avif-info.php	-rw-r--r--	28.92 KB	2024-05-09 08:00	编辑下载删除
class-smtp.php	-rw-r--r--	457 B	2021-01-26 13:45	编辑下载删除
class-walker-category-dropdown.php	-rw-r--r--	2.41 KB	2023-11-08 10:55	编辑下载删除
class-walker-category.php	-rw-r--r--	8.28 KB	2023-11-08 10:55	编辑下载删除
class-walker-page-dropdown.php	-rw-r--r--	2.65 KB	2023-11-08 10:55	编辑下载删除
class-wp-ajax-response.php	-rw-r--r--	5.14 KB	2022-09-12 15:47	编辑下载删除
class-wp-block-bindings-registry.php	-rw-r--r--	8.28 KB	2025-12-04 05:41	编辑下载删除
class-wp-block-bindings-source.php	-rw-r--r--	2.92 KB	2024-11-13 13:01	编辑下载删除
class-wp-block-editor-context.php	-rw-r--r--	1.32 KB	2022-09-12 15:47	编辑下载删除
class-wp-block-list.php	-rw-r--r--	4.6 KB	2025-12-04 05:41	编辑下载删除
class-wp-block-metadata-registry.php	-rw-r--r--	11.62 KB	2025-04-16 11:06	编辑下载删除
class-wp-block-parser-block.php	-rw-r--r--	2.5 KB	2025-12-04 05:41	编辑下载删除
class-wp-block-parser-frame.php	-rw-r--r--	1.97 KB	2024-11-13 13:00	编辑下载删除
class-wp-block-pattern-categories-registry.php	-rw-r--r--	5.32 KB	2025-12-04 05:42	编辑下载删除
class-wp-block-patterns-registry.php	-rw-r--r--	10.99 KB	2026-03-11 06:39	编辑下载删除
class-wp-block-styles-registry.php	-rw-r--r--	6.34 KB	2025-12-04 05:41	编辑下载删除
class-wp-block-supports.php	-rw-r--r--	5.49 KB	2025-04-16 11:06	编辑下载删除
class-wp-block-templates-registry.php	-rw-r--r--	7.02 KB	2025-12-04 05:41	编辑下载删除
class-wp-block-type-registry.php	-rw-r--r--	4.91 KB	2025-12-04 05:41	编辑下载删除
class-wp-block-type.php	-rw-r--r--	16.86 KB	2024-07-17 11:51	编辑下载删除
class-wp-classic-to-block-menu-converter.php	-rw-r--r--	3.97 KB	2025-12-04 05:41	编辑下载删除
class-wp-customize-control.php	-rw-r--r--	25.51 KB	2025-12-04 05:41	编辑下载删除
class-wp-customize-nav-menus.php	-rw-r--r--	56.65 KB	2025-12-04 05:42	编辑下载删除
class-wp-duotone.php	-rw-r--r--	39.83 KB	2024-07-17 11:51	编辑下载删除
class-wp-fatal-error-handler.php	-rw-r--r--	7.96 KB	2024-11-13 13:00	编辑下载删除
class-wp-feed-cache-transient.php	-rw-r--r--	3.23 KB	2025-12-04 05:41	编辑下载删除
class-wp-http-ixr-client.php	-rw-r--r--	3.42 KB	2026-03-11 06:39	编辑下载删除
class-wp-http-requests-hooks.php	-rw-r--r--	1.97 KB	2023-03-30 09:26	编辑下载删除
class-wp-http-requests-response.php	-rw-r--r--	4.3 KB	2023-11-08 10:55	编辑下载删除
class-wp-http-streams.php	-rw-r--r--	16.46 KB	2023-11-08 10:55	编辑下载删除
class-wp-image-editor-gd.php	-rw-r--r--	20.22 KB	2025-12-04 05:41	编辑下载删除
class-wp-image-editor-imagick.php	-rw-r--r--	36.11 KB	2025-12-04 05:41	编辑下载删除
class-wp-list-util.php	-rw-r--r--	7.27 KB	2023-11-08 10:55	编辑下载删除
class-wp-locale-switcher.php	-rw-r--r--	6.62 KB	2025-12-04 05:41	编辑下载删除
class-wp-locale.php	-rw-r--r--	16.49 KB	2025-04-16 11:06	编辑下载删除
class-wp-paused-extensions-storage.php	-rw-r--r--	4.99 KB	2024-11-13 13:00	编辑下载删除
class-wp-plugin-dependencies.php	-rw-r--r--	24.72 KB	2025-04-16 11:06	编辑下载删除
class-wp-post-type.php	-rw-r--r--	29.96 KB	2025-04-16 11:06	编辑下载删除
class-wp-post.php	-rw-r--r--	6.34 KB	2025-12-04 05:42	编辑下载删除
class-wp-recovery-mode-cookie-service.php	-rw-r--r--	6.72 KB	2022-10-04 03:59	编辑下载删除
class-wp-recovery-mode-email-service.php	-rw-r--r--	10.92 KB	2023-08-09 11:43	编辑下载删除
class-wp-recovery-mode-key-service.php	-rw-r--r--	4.77 KB	2025-04-16 11:06	编辑下载删除
class-wp-recovery-mode-link-service.php	-rw-r--r--	3.38 KB	2022-09-12 15:47	编辑下载删除
class-wp-recovery-mode.php	-rw-r--r--	11.18 KB	2025-04-16 11:06	编辑下载删除
class-wp-session-tokens.php	-rw-r--r--	7.15 KB	2025-04-16 11:06	编辑下载删除
class-wp-simplepie-file.php	-rw-r--r--	3.47 KB	2025-12-04 05:42	编辑下载删除
class-wp-simplepie-sanitize-kses.php	-rw-r--r--	1.87 KB	2025-04-16 11:06	编辑下载删除
class-wp-tax-query.php	-rw-r--r--	19.12 KB	2025-12-04 05:41	编辑下载删除
class-wp-text-diff-renderer-inline.php	-rw-r--r--	979 B	2024-04-03 10:16	编辑下载删除
class-wp-text-diff-renderer-table.php	-rw-r--r--	18.44 KB	2025-04-16 11:06	编辑下载删除
class-wp-textdomain-registry.php	-rw-r--r--	10.24 KB	2024-11-22 11:55	编辑下载删除
class-wp-theme-json-data.php	-rw-r--r--	1.77 KB	2024-07-17 11:51	编辑下载删除
class-wp-theme-json-resolver.php	-rw-r--r--	34.9 KB	2025-04-16 11:06	编辑下载删除
class-wp-theme-json-schema.php	-rw-r--r--	7.19 KB	2024-07-17 11:51	编辑下载删除
class-wp-url-pattern-prefixer.php	-rw-r--r--	4.69 KB	2025-04-16 11:06	编辑下载删除
class-wp-user-meta-session-tokens.php	-rw-r--r--	2.94 KB	2025-12-04 05:42	编辑下载删除
class-wp-widget-factory.php	-rw-r--r--	3.27 KB	2022-09-12 15:47	编辑下载删除
class-wp.php	-rw-r--r--	25.86 KB	2025-12-04 05:41	编辑下载删除
compat.php	-rw-r--r--	17.41 KB	2025-12-04 05:41	编辑下载删除
default-constants.php	-rw-r--r--	11.1 KB	2024-11-13 13:00	编辑下载删除
default-filters.php	-rw-r--r--	37.02 KB	2025-12-04 05:41	编辑下载删除
feed-rdf.php	-rw-r--r--	2.61 KB	2020-01-29 00:45	编辑下载删除
global-styles-and-settings.php	-rw-r--r--	20.71 KB	2025-12-04 05:41	编辑下载删除
http.php	-rw-r--r--	25.27 KB	2025-12-04 05:41	编辑下载删除
l10n.php	-rw-r--r--	67.18 KB	2025-12-04 05:41	编辑下载删除
link-template.php	-rw-r--r--	156.36 KB	2025-12-04 05:42	编辑下载删除
media-template.php	-rw-r--r--	61.72 KB	2025-12-04 05:42	编辑下载删除
media.php	-rw-r--r--	216.06 KB	2026-03-11 06:39	编辑下载删除
ms-default-filters.php	-rw-r--r--	6.48 KB	2023-03-30 09:26	编辑下载删除
ms-files.php	-rw-r--r--	2.79 KB	2025-12-04 05:41	编辑下载删除
ms-site.php	-rw-r--r--	40.74 KB	2025-12-04 05:41	编辑下载删除
post-formats.php	-rw-r--r--	6.94 KB	2024-07-17 11:51	编辑下载删除
robots-template.php	-rw-r--r--	5.06 KB	2022-04-06 15:33	编辑下载删除
theme-i18n.json	-rw-r--r--	1.69 KB	2026-02-27 10:54	编辑下载删除
theme-templates.php	-rw-r--r--	6.09 KB	2025-04-16 11:06	编辑下载删除
vars.php	-rw-r--r--	6.41 KB	2025-04-16 11:06	编辑下载删除