wordpress/php-fpm/wordpress_files/plugins/disable-json-api/admin.php

<style>
    #DRA_container ul li {
        padding-left: 20px;
    }

    #DRA_container em {
        font-size: 0.8em;
    }
</style>

<script>
    function dra_namespace_click(namespace, id) {
        if (jQuery('#dra_namespace_' + id).is(":checked")) {
            jQuery("input[data-namespace='" + namespace + "']").prop('checked', true);
        } else {
            jQuery("input[data-namespace='" + namespace + "']").prop('checked', false);
        }
    };
</script>

<div class="wrap">
    <h1><?php echo esc_html__( "Disable REST API", "disable-json-api" ); ?></h1>
	<?php settings_errors( 'DRA-notices' ); ?>
    <p><?php echo esc_html__( "By default, this plugin ensures that the entire REST API is protected from non-authenticated users. You may use this page to specify which endpoints should be allowed to behave as normal.", "disable-json-api" ); ?></p>
    <p>
        <strong><?php echo esc_html__( "IMPORTANT NOTE:", "disable-json-api" ); ?></strong> <?php echo esc_html__( "Checking a box merely restores default functionality to an endpoint. Other authentication and/or permissions may still be required for access, or other themes/plugins may also affect access to those endpoints.", "disable-json-api" ); ?>
    </p>

    <form method="post" action="" id="DRA_form">
		<?php wp_nonce_field( 'DRA_admin_nonce' ); ?>

        <div id="DRA_container"><?php DRA_display_route_checkboxes(); ?></div>

		<?php submit_button(); ?>
        <input type="submit" name="reset"
               value="<?php echo esc_attr__( "Reset Whitelisted Routes", "disable-json-api" ); ?>"
               onclick="return confirm('<?php echo esc_attr__( "Are you sure you wish to clear all whitelisted routes?", "disable-json-api" ); ?>');">
    </form>
</div>

<?php
/**
 * Loop through all routes returned by the REST API and display them on-screen
 *
 */
function DRA_display_route_checkboxes() {
	$wp_rest_server     = rest_get_server();
	$all_namespaces     = $wp_rest_server->get_namespaces();
	$all_routes         = array_keys( $wp_rest_server->get_routes() );
	$whitelisted_routes = is_array( get_option( 'DRA_route_whitelist' ) ) ? get_option( 'DRA_route_whitelist' ) : array();

	$loopCounter       = 0;
	$current_namespace = '';

	foreach ( $all_routes as $route ) {
		$is_route_namespace = in_array( ltrim( $route, "/" ), $all_namespaces );
		$checkedProp        = DRA_get_route_checked_prop( $route, $whitelisted_routes );

		if ( $is_route_namespace || "/" == $route ) {
			$current_namespace = $route;
			if ( 0 != $loopCounter ) {
				echo "</ul>";
			}

			$route_for_display = ( "/" == $route ) ? "/ <em>" . esc_html__( "REST API ROOT", "disable-json-api" ) . "</em>" : esc_html( $route );
			echo "<h2><label><input name='rest_routes[]' value='$route' type='checkbox' id='dra_namespace_$loopCounter' onclick='dra_namespace_click(\"$route\", $loopCounter)' $checkedProp>&nbsp;$route_for_display</label></h2><ul>";

			if ( "/" == $route ) {
				echo "<li>" . sprintf( esc_html__( "On this website, the REST API root is %s", "disable-json-api" ), "<strong>" . rest_url() . "</strong>" ) . "</li>";
			}

		} else {
			echo "<li><label><input name='rest_routes[]' value='$route' type='checkbox' data-namespace='$current_namespace' $checkedProp>&nbsp;" . esc_html( $route ) . "</label></li>";
		}

		$loopCounter ++;
	}
	echo "</ul>";
}


/**
 * During comparison, encode the route being requested in the same fashion that it's stored in the database option
 * Encoding during save happens in Disable_REST_API::maybe_process_settings_form()
 *
 * @param $route
 * @param $whitelisted_routes
 *
 * @return string
 */
function DRA_get_route_checked_prop( $route, $whitelisted_routes ) {
	$is_route_checked = in_array( esc_html( $route ), $whitelisted_routes, true );

	return checked( $is_route_checked, true, false );
}