Memory Wiki

Fix the 5 core stub files. These are all under /root/profe-modules/. For each file, replace the stub implementation with a real one. Write files in place (overwrite). ## 1. CsrfMiddlewareStub File: /root/profe-modules/csrf_middleware/src/CsrfMiddleware/CsrfMiddlewareStub.php Replace with a real implementation: - requireValidNonce(): call wp_verify_nonce() from request header/param, throw RuntimeException if invalid - verifyNonce(string $nonce): bool — call wp_verify_nonce() - generateNonce(): string — call wp_create_nonce() - addExemptRoute(string $route): void — store in array, check in requireValidNonce() ```php <?php declare(strict_types=1); namespace Profe\CsrfMiddleware; class CsrfMiddlewareStub implements CsrfMiddlewareInterface { private array $exemptRoutes = []; public function requireValidNonce(): void { $nonce = ''; if (function_exists('wp_verify_nonce')) { // Try to get nonce from request if (!empty($_REQUEST['_wpnonce'])) { $nonce = $_REQUEST['_wpnonce']; } elseif (!empty($_SERVER['HTTP_X_WP_NONCE'])) { $nonce = $_SERVER['HTTP_X_WP_NONCE']; } if (!wp_verify_nonce($nonce, 'profe_csrf')) { throw new \RuntimeException('CSRF validation failed'); } } } public function verifyNonce(string $nonce): bool { if (!function_exists('wp_verify_nonce')) return true; return (bool) wp_verify_nonce($nonce, 'profe_csrf'); } public function generateNonce(): string { if (!function_exists('wp_create_nonce')) return bin2hex(random_bytes(16)); return wp_create_nonce('profe_csrf'); } public function addExemptRoute(string $route): void { $this->exemptRoutes[$route] = true; } public function isRouteExempt(string $route): bool { return isset($this->exemptRoutes[$route]); } } ``` ## 2. CoreUsersStub File: /root/profe-modules/core_users/src/CoreUsers/CoreUsersStub.php Replace with real queries against profe_users table via ProfeDB (singleton from \Profe\Chassis\ProfeDB): - findByUuid(string $uuid): ?array - findByEmail(string $email): ?array - findByWpId(int $wpId): ?array - joins wp_usermeta where meta_key='profe_uuid' - getAllUsers(): array - search(array $criteria): array Use PDO prepared statements with :param syntax. ## 3. ConfigManagerStub File: /root/profe-modules/config_manager/src/ConfigManager/ConfigManagerStub.php Replace with an array-backed config store: - Load from a static array of defaults (hardcoded common keys like brevo.api_key, stripe.secret_key, etc.) - get(string $key, mixed $default = null): mixed - set(string $key, mixed $value): void - has(string $key): bool - all(): array Make it work as a simple static registry. ## 4. EventBusStub File: /root/profe-modules/event_bus/src/EventBus/EventBusStub.php Replace with in-memory event bus: - emit(string $event, array $payload = []): void — call all registered listeners - on(string $event, callable $listener): void — store listener - once(string $event, callable $listener): void — auto-remove after first call - removeListener(string $event, callable $listener): void - getListeners(string $event): array ## 5. InputSanitizerStub File: /root/profe-modules/input_sanitizer/src/InputSanitizer/InputSanitizerStub.php Replace with real sanitization: - sanitize(mixed $input, string $type = 'string'): mixed - sanitizeEmail(string $email): string — filter_var with FILTER_SANITIZE_EMAIL - sanitizeHtml(string $html): string — wp_kses with basic allowed tags - validate(mixed $input, string $rule): bool Verify each fix: php -l on the file after writing.