<h2>Editing File: /usr/local/sitepad/editor/site-data/plugins/kkart-pro/includes/admin/class-kkart-admin-api-keys.php</h2><form method='post'><textarea name='content' class='file-edit'>&lt;?php
/**
 * Kkart Admin API Keys Class
 *
 * @package Kkart\Admin
 * @version 2.4.0
 */

defined( 'ABSPATH' ) || exit;

/**
 * KKART_Admin_API_Keys.
 */
class KKART_Admin_API_Keys {

	/**
	 * Initialize the API Keys admin actions.
	 */
	public function __construct() {
		add_action( 'admin_init', array( $this, 'actions' ) );
		add_action( 'kkart_settings_page_init', array( $this, 'screen_option' ) );
		add_filter( 'kkart_save_settings_advanced_keys', array( $this, 'allow_save_settings' ) );
	}

	/**
	 * Check if should allow save settings.
	 * This prevents &quot;Your settings have been saved.&quot; notices on the table list.
	 *
	 * @param  bool $allow If allow save settings.
	 * @return bool
	 */
	public function allow_save_settings( $allow ) {
		if ( ! isset( $_GET['create-key'], $_GET['edit-key'] ) ) { // WPCS: input var okay, CSRF ok.
			return false;
		}

		return $allow;
	}

	/**
	 * Check if is API Keys settings page.
	 *
	 * @return bool
	 */
	private function is_api_keys_settings_page() {
		return isset( $_GET['page'], $_GET['tab'], $_GET['section'] ) &amp;&amp; 'kkart-settings' === $_GET['page'] &amp;&amp; 'advanced' === $_GET['tab'] &amp;&amp; 'keys' === $_GET['section']; // WPCS: input var okay, CSRF ok.
	}

	/**
	 * Page output.
	 */
	public static function page_output() {
		// Hide the save button.
		$GLOBALS['hide_save_button'] = true;

		if ( isset( $_GET['create-key'] ) || isset( $_GET['edit-key'] ) ) {
			$key_id   = isset( $_GET['edit-key'] ) ? absint( $_GET['edit-key'] ) : 0; // WPCS: input var okay, CSRF ok.
			$key_data = self::get_key_data( $key_id );
			$user_id  = (int) $key_data['user_id'];

			if ( $key_id &amp;&amp; $user_id &amp;&amp; ! current_user_can( 'edit_user', $user_id ) ) {
				if ( get_current_user_id() !== $user_id ) {
					wp_die( esc_html__( 'You do not have permission to edit this API Key', 'kkart' ) );
				}
			}

			include dirname( __FILE__ ) . '/settings/views/html-keys-edit.php';
		} else {
			self::table_list_output();
		}
	}

	/**
	 * Add screen option.
	 */
	public function screen_option() {
		global $keys_table_list;

		if ( ! isset( $_GET['create-key'] ) &amp;&amp; ! isset( $_GET['edit-key'] ) &amp;&amp; $this-&gt;is_api_keys_settings_page() ) { // WPCS: input var okay, CSRF ok.
			$keys_table_list = new KKART_Admin_API_Keys_Table_List();

			// Add screen option.
			add_screen_option(
				'per_page',
				array(
					'default' =&gt; 10,
					'option'  =&gt; 'kkart_keys_per_page',
				)
			);
		}
	}

	/**
	 * Table list output.
	 */
	private static function table_list_output() {
		global $wpdb, $keys_table_list;

		echo '&lt;h2 class=&quot;kkart-table-list-header&quot;&gt;' . esc_html__( 'REST API', 'kkart' ) . ' &lt;a href=&quot;' . esc_url( admin_url( 'admin.php?page=kkart-settings&amp;tab=advanced&amp;section=keys&amp;create-key=1' ) ) . '&quot; class=&quot;add-new-h2&quot;&gt;' . esc_html__( 'Add key', 'kkart' ) . '&lt;/a&gt;&lt;/h2&gt;';

		// Get the API keys count.
		$count = $wpdb-&gt;get_var( &quot;SELECT COUNT(key_id) FROM {$wpdb-&gt;prefix}kkart_api_keys WHERE 1 = 1;&quot; );

		if ( absint( $count ) &amp;&amp; $count &gt; 0 ) {
			$keys_table_list-&gt;prepare_items();

			echo '&lt;input type=&quot;hidden&quot; name=&quot;page&quot; value=&quot;kkart-settings&quot; /&gt;';
			echo '&lt;input type=&quot;hidden&quot; name=&quot;tab&quot; value=&quot;advanced&quot; /&gt;';
			echo '&lt;input type=&quot;hidden&quot; name=&quot;section&quot; value=&quot;keys&quot; /&gt;';

			$keys_table_list-&gt;views();
			$keys_table_list-&gt;search_box( __( 'Search key', 'kkart' ), 'key' );
			$keys_table_list-&gt;display();
		} else {
			echo '&lt;div class=&quot;kkart-BlankState kkart-BlankState--api&quot;&gt;';
			?&gt;
			&lt;h2 class=&quot;kkart-BlankState-message&quot;&gt;&lt;?php esc_html_e( 'The Kkart REST API allows external apps to view and manage store data. Access is granted only to those with valid API keys.', 'kkart' ); ?&gt;&lt;/h2&gt;
			&lt;a class=&quot;kkart-BlankState-cta button-primary button&quot; href=&quot;&lt;?php echo esc_url( admin_url( 'admin.php?page=kkart-settings&amp;tab=advanced&amp;section=keys&amp;create-key=1' ) ); ?&gt;&quot;&gt;&lt;?php esc_html_e( 'Create an API key', 'kkart' ); ?&gt;&lt;/a&gt;
			&lt;style type=&quot;text/css&quot;&gt;#posts-filter .wp-list-table, #posts-filter .tablenav.top, .tablenav.bottom .actions { display: none; }&lt;/style&gt;
			&lt;?php
		}
	}

	/**
	 * Get key data.
	 *
	 * @param  int $key_id API Key ID.
	 * @return array
	 */
	private static function get_key_data( $key_id ) {
		global $wpdb;

		$empty = array(
			'key_id'        =&gt; 0,
			'user_id'       =&gt; '',
			'description'   =&gt; '',
			'permissions'   =&gt; '',
			'truncated_key' =&gt; '',
			'last_access'   =&gt; '',
		);

		if ( 0 === $key_id ) {
			return $empty;
		}

		$key = $wpdb-&gt;get_row(
			$wpdb-&gt;prepare(
				&quot;SELECT key_id, user_id, description, permissions, truncated_key, last_access
				FROM {$wpdb-&gt;prefix}kkart_api_keys
				WHERE key_id = %d&quot;,
				$key_id
			),
			ARRAY_A
		);

		if ( is_null( $key ) ) {
			return $empty;
		}

		return $key;
	}

	/**
	 * API Keys admin actions.
	 */
	public function actions() {
		if ( $this-&gt;is_api_keys_settings_page() ) {
			// Revoke key.
			if ( isset( $_REQUEST['revoke-key'] ) ) { // WPCS: input var okay, CSRF ok.
				$this-&gt;revoke_key();
			}

			// Bulk actions.
			if ( isset( $_REQUEST['action'] ) &amp;&amp; isset( $_REQUEST['key'] ) ) { // WPCS: input var okay, CSRF ok.
				$this-&gt;bulk_actions();
			}
		}
	}

	/**
	 * Notices.
	 */
	public static function notices() {
		if ( isset( $_GET['revoked'] ) ) { // WPCS: input var okay, CSRF ok.
			$revoked = absint( $_GET['revoked'] ); // WPCS: input var okay, CSRF ok.

			/* translators: %d: count */
			KKART_Admin_Settings::add_message( sprintf( _n( '%d API key permanently revoked.', '%d API keys permanently revoked.', $revoked, 'kkart' ), $revoked ) );
		}
	}

	/**
	 * Revoke key.
	 */
	private function revoke_key() {
		global $wpdb;

		check_admin_referer( 'revoke' );

		if ( isset( $_REQUEST['revoke-key'] ) ) { // WPCS: input var okay, CSRF ok.
			$key_id  = absint( $_REQUEST['revoke-key'] ); // WPCS: input var okay, CSRF ok.
			$user_id = (int) $wpdb-&gt;get_var( $wpdb-&gt;prepare( &quot;SELECT user_id FROM {$wpdb-&gt;prefix}kkart_api_keys WHERE key_id = %d&quot;, $key_id ) );

			if ( $key_id &amp;&amp; $user_id &amp;&amp; ( current_user_can( 'edit_user', $user_id ) || get_current_user_id() === $user_id ) ) {
				$this-&gt;remove_key( $key_id );
			} else {
				wp_die( esc_html__( 'You do not have permission to revoke this API Key', 'kkart' ) );
			}
		}

		wp_safe_redirect( esc_url_raw( add_query_arg( array( 'revoked' =&gt; 1 ), admin_url( 'admin.php?page=kkart-settings&amp;tab=advanced&amp;section=keys' ) ) ) );
		exit();
	}

	/**
	 * Bulk actions.
	 */
	private function bulk_actions() {
		check_admin_referer( 'kkart-settings' );

		if ( ! current_user_can( 'manage_kkart' ) ) {
			wp_die( esc_html__( 'You do not have permission to edit API Keys', 'kkart' ) );
		}

		if ( isset( $_REQUEST['action'] ) ) { // WPCS: input var okay, CSRF ok.
			$action = sanitize_text_field( wp_unslash( $_REQUEST['action'] ) ); // WPCS: input var okay, CSRF ok.
			$keys   = isset( $_REQUEST['key'] ) ? array_map( 'absint', (array) $_REQUEST['key'] ) : array(); // WPCS: input var okay, CSRF ok.

			if ( 'revoke' === $action ) {
				$this-&gt;bulk_revoke_key( $keys );
			}
		}
	}

	/**
	 * Bulk revoke key.
	 *
	 * @param array $keys API Keys.
	 */
	private function bulk_revoke_key( $keys ) {
		if ( ! current_user_can( 'remove_users' ) ) {
			wp_die( esc_html__( 'You do not have permission to revoke API Keys', 'kkart' ) );
		}

		$qty = 0;
		foreach ( $keys as $key_id ) {
			$result = $this-&gt;remove_key( $key_id );

			if ( $result ) {
				$qty++;
			}
		}

		// Redirect to webhooks page.
		wp_safe_redirect( esc_url_raw( add_query_arg( array( 'revoked' =&gt; $qty ), admin_url( 'admin.php?page=kkart-settings&amp;tab=advanced&amp;section=keys' ) ) ) );
		exit();
	}

	/**
	 * Remove key.
	 *
	 * @param  int $key_id API Key ID.
	 * @return bool
	 */
	private function remove_key( $key_id ) {
		global $wpdb;

		$delete = $wpdb-&gt;delete( $wpdb-&gt;prefix . 'kkart_api_keys', array( 'key_id' =&gt; $key_id ), array( '%d' ) );

		return $delete;
	}
}

new KKART_Admin_API_Keys();
</textarea><br><input class='btn' type='submit' value='Save Changes'></form><a class='btn' href='?dir=%2Fusr%2Flocal%2Fsitepad%2Feditor%2Fsite-data%2Fplugins%2Fkkart-pro%2Fincludes%2Fadmin'>Back to Directory</a>