mirror of
https://github.com/mainwp/mainwp-child.git
synced 2025-09-01 03:58:07 +08:00
3074 lines
106 KiB
PHP
3074 lines
106 KiB
PHP
<?php
|
|
/**
|
|
* Credits
|
|
*
|
|
* Plugin-Name: Wordfence Security
|
|
* Plugin URI: http://www.wordfence.com/
|
|
* Author: Wordfence
|
|
* Author URI: http://www.wordfence.com/
|
|
*
|
|
* The code is used for the MainWP Wordfence Extension
|
|
* Extension URL: https://mainwp.com/extension/wordfence/
|
|
*/
|
|
|
|
use MainWP\Child\MainWP_Helper;
|
|
use MainWP\Child\MainWP_Utility;
|
|
use MainWP\Child\MainWP_Child_DB;
|
|
|
|
// phpcs:disable PSR1.Classes.ClassDeclaration, WordPress.WP.AlternativeFunctions -- to use external code.
|
|
|
|
class MainWP_Child_Wordfence {
|
|
public static $instance = null;
|
|
public $is_wordfence_installed = false;
|
|
public $plugin_translate = 'mainwp-child';
|
|
|
|
const OPTIONS_TYPE_GLOBAL = 'global';
|
|
const OPTIONS_TYPE_FIREWALL = 'firewall';
|
|
const OPTIONS_TYPE_BLOCKING = 'blocking';
|
|
const OPTIONS_TYPE_SCANNER = 'scanner';
|
|
const OPTIONS_TYPE_TWO_FACTOR = 'twofactor';
|
|
const OPTIONS_TYPE_LIVE_TRAFFIC = 'livetraffic';
|
|
const OPTIONS_TYPE_COMMENT_SPAM = 'commentspam';
|
|
const OPTIONS_TYPE_DIAGNOSTICS = 'diagnostics';
|
|
const OPTIONS_TYPE_ALL = 'alloptions';
|
|
|
|
public static $options_filter = array(
|
|
'alertEmails',
|
|
'alertOn_adminLogin',
|
|
'alertOn_firstAdminLoginOnly',
|
|
'alertOn_block',
|
|
'alertOn_critical',
|
|
'alertOn_loginLockout',
|
|
'alertOn_breachLogin',
|
|
'alertOn_lostPasswdForm',
|
|
'alertOn_nonAdminLogin',
|
|
'alertOn_firstNonAdminLoginOnly',
|
|
'alertOn_wordfenceDeactivated',
|
|
'alertOn_update',
|
|
'alertOn_warnings',
|
|
'alert_maxHourly',
|
|
'autoUpdate',
|
|
'firewallEnabled',
|
|
'howGetIPs',
|
|
'liveTrafficEnabled',
|
|
'loginSec_blockAdminReg',
|
|
'loginSec_countFailMins',
|
|
'loginSec_disableAuthorScan',
|
|
'notification_updatesNeeded',
|
|
'notification_securityAlerts',
|
|
'notification_promotions',
|
|
'notification_blogHighlights',
|
|
'notification_productUpdates',
|
|
'notification_scanStatus',
|
|
'loginSec_lockInvalidUsers',
|
|
'loginSec_breachPasswds_enabled',
|
|
'loginSec_breachPasswds',
|
|
'loginSec_lockoutMins',
|
|
'loginSec_maskLoginErrors',
|
|
'loginSec_maxFailures',
|
|
'loginSec_maxForgotPasswd',
|
|
'loginSec_strongPasswds_enabled',
|
|
'loginSec_strongPasswds',
|
|
'loginSec_userBlacklist',
|
|
'loginSecurityEnabled',
|
|
'other_scanOutside',
|
|
'scan_exclude',
|
|
'scan_maxIssues',
|
|
'scan_maxDuration',
|
|
'scansEnabled_checkReadableConfig',
|
|
'scansEnabled_suspectedFiles',
|
|
'scansEnabled_comments',
|
|
'scansEnabled_core',
|
|
'scansEnabled_diskSpace',
|
|
'scansEnabled_dns',
|
|
'scansEnabled_fileContents',
|
|
'scansEnabled_fileContentsGSB',
|
|
'scan_include_extra',
|
|
'scansEnabled_checkHowGetIPs',
|
|
'scansEnabled_highSense',
|
|
'lowResourceScansEnabled',
|
|
'scansEnabled_malware',
|
|
'scansEnabled_oldVersions',
|
|
'scansEnabled_suspiciousAdminUsers',
|
|
'scansEnabled_passwds',
|
|
'scansEnabled_plugins',
|
|
'scansEnabled_coreUnknown',
|
|
'scansEnabled_posts',
|
|
'scansEnabled_scanImages',
|
|
'scansEnabled_themes',
|
|
'scheduledScansEnabled',
|
|
'securityLevel',
|
|
'blockFakeBots',
|
|
'neverBlockBG',
|
|
'maxGlobalRequests',
|
|
'maxGlobalRequests_action',
|
|
'maxRequestsCrawlers',
|
|
'maxRequestsCrawlers_action',
|
|
'max404Crawlers',
|
|
'max404Crawlers_action',
|
|
'maxRequestsHumans',
|
|
'maxRequestsHumans_action',
|
|
'max404Humans',
|
|
'max404Humans_action',
|
|
'maxScanHits',
|
|
'maxScanHits_action',
|
|
'blockedTime',
|
|
'liveTraf_ignorePublishers',
|
|
'liveTraf_displayExpandedRecords',
|
|
'liveTraf_ignoreUsers',
|
|
'liveTraf_ignoreIPs',
|
|
'liveTraf_ignoreUA',
|
|
'liveTraf_maxRows',
|
|
'displayTopLevelLiveTraffic',
|
|
'whitelisted',
|
|
'bannedURLs',
|
|
'other_hideWPVersion',
|
|
'other_noAnonMemberComments',
|
|
'other_scanComments',
|
|
'other_pwStrengthOnUpdate',
|
|
'other_WFNet',
|
|
'maxMem',
|
|
'maxExecutionTime',
|
|
'actUpdateInterval',
|
|
'debugOn',
|
|
'deleteTablesOnDeact',
|
|
'disableCookies',
|
|
'liveActivityPauseEnabled',
|
|
'startScansRemotely',
|
|
'disableCodeExecutionUploads',
|
|
'advancedCommentScanning',
|
|
'scansEnabled_checkGSB',
|
|
'checkSpamIP',
|
|
'spamvertizeCheck',
|
|
'email_summary_enabled',
|
|
'email_summary_dashboard_widget_enabled',
|
|
'ssl_verify',
|
|
'email_summary_interval',
|
|
'email_summary_excluded_directories',
|
|
'allowed404s',
|
|
'wafAlertWhitelist',
|
|
'wafAlertOnAttacks',
|
|
'howGetIPs_trusted_proxies',
|
|
'other_bypassLitespeedNoabort',
|
|
'disableWAFIPBlocking',
|
|
'other_blockBadPOST',
|
|
'displayTopLevelBlocking',
|
|
'betaThreatDefenseFeed',
|
|
'scanType',
|
|
'schedMode',
|
|
'wafStatus',
|
|
'learningModeGracePeriodEnabled',
|
|
'learningModeGracePeriod',
|
|
);
|
|
|
|
// for separated saving this values.
|
|
public static $diagnosticParams = array(
|
|
'debugOn',
|
|
'startScansRemotely',
|
|
'ssl_verify',
|
|
'betaThreatDefenseFeed',
|
|
);
|
|
|
|
public static $firewall_options_filter = array(
|
|
'wafStatus',
|
|
'learningModeGracePeriodEnabled',
|
|
'learningModeGracePeriod',
|
|
);
|
|
|
|
public static function instance() {
|
|
if ( null === self::$instance ) {
|
|
self::$instance = new self();
|
|
}
|
|
|
|
return self::$instance;
|
|
}
|
|
|
|
public function __construct() {
|
|
add_action( 'mainwp_child_deactivation', array( $this, 'deactivation' ) );
|
|
|
|
require_once ABSPATH . 'wp-admin/includes/plugin.php';
|
|
|
|
if ( is_plugin_active( 'wordfence/wordfence.php' ) && file_exists( plugin_dir_path( __FILE__ ) . '../../wordfence/wordfence.php' ) ) {
|
|
require_once plugin_dir_path( __FILE__ ) . '../../wordfence/wordfence.php';
|
|
$this->is_wordfence_installed = true;
|
|
}
|
|
|
|
if ( $this->is_wordfence_installed ) {
|
|
add_action( 'wp_ajax_mainwp_wordfence_download_htaccess', array( $this, 'download_htaccess' ) );
|
|
}
|
|
}
|
|
|
|
public function deactivation() {
|
|
$sched = wp_next_scheduled( 'mainwp_child_wordfence_cron_scan' );
|
|
if ( $sched ) {
|
|
wp_unschedule_event( $sched, 'mainwp_child_wordfence_cron_scan' );
|
|
}
|
|
}
|
|
|
|
public function action() { // phpcs:ignore -- not quite complex method
|
|
$information = array();
|
|
if ( ! $this->is_wordfence_installed ) {
|
|
MainWP_Helper::write( array( 'error' => __( 'Please install the Wordfence plugin on the child site.', $this->plugin_translate ) ) );
|
|
return;
|
|
}
|
|
|
|
if ( ! class_exists( 'wordfence' ) || ! class_exists( 'wfScanEngine' ) ) {
|
|
$information['error'] = 'NO_WORDFENCE';
|
|
MainWP_Helper::write( $information );
|
|
}
|
|
if ( isset( $_POST['mwp_action'] ) ) {
|
|
|
|
switch ( $_POST['mwp_action'] ) {
|
|
case 'start_scan':
|
|
$information = $this->start_scan();
|
|
break;
|
|
case 'kill_scan':
|
|
$information = $this->kill_scan();
|
|
break;
|
|
case 'requestScan':
|
|
$information = $this->request_scan();
|
|
break;
|
|
case 'killScan':
|
|
$information = $this->kill_ajax_scan();
|
|
break;
|
|
case 'set_showhide':
|
|
$information = $this->set_showhide();
|
|
break;
|
|
case 'get_log':
|
|
$information = $this->get_log();
|
|
break;
|
|
case 'update_log':
|
|
$information = $this->update_log();
|
|
break;
|
|
case 'load_issues': // not used in from version 2.0 of WF ext!
|
|
$information = $this->load_issues();
|
|
break;
|
|
case 'loadIssues':
|
|
$information = $this->ajax_load_issues_callback();
|
|
break;
|
|
case 'load_wafData':
|
|
$information = $this->load_waf_data();
|
|
break;
|
|
case 'update_all_issues':
|
|
$information = $this->update_all_issues();
|
|
break;
|
|
case 'update_issues_status':
|
|
$information = $this->update_issues_status();
|
|
break;
|
|
case 'updateIssueStatus':
|
|
$information = $this->update_issue_status();
|
|
break;
|
|
case 'delete_issues':
|
|
$information = $this->delete_issues();
|
|
break;
|
|
case 'bulk_operation':
|
|
$information = $this->bulk_operation();
|
|
break;
|
|
case 'bulkOperation':
|
|
$information = $this->bulk_ajax_operation(); // new version.
|
|
break;
|
|
case 'delete_file':
|
|
$information = $this->delete_file();
|
|
break;
|
|
case 'restore_file':
|
|
$information = $this->restore_file();
|
|
break;
|
|
case 'save_setting':
|
|
$information = $this->save_setting();
|
|
break;
|
|
case 'save_settings_new':
|
|
$information = $this->save_settings_new();
|
|
break;
|
|
case 'saveOptions':
|
|
$information = $this->save_options();
|
|
break;
|
|
case 'recentTraffic':
|
|
$information = $this->recent_traffic();
|
|
break;
|
|
case 'ticker':
|
|
$information = $this->ticker();
|
|
break;
|
|
case 'reverse_lookup':
|
|
$information = $this->reverse_lookup();
|
|
break;
|
|
case 'block_ip':
|
|
$information = $this->ajax_block_ip_callback();
|
|
break;
|
|
case 'whois':
|
|
$information = $this->whois();
|
|
break;
|
|
case 'createBlock':
|
|
$information = $this->ajax_create_block_callback();
|
|
break;
|
|
case 'getBlocks':
|
|
$information = $this->ajax_get_blocks_callback();
|
|
break;
|
|
case 'deleteBlocks':
|
|
$information = $this->ajax_delete_blocks_callback();
|
|
break;
|
|
case 'makePermanentBlocks':
|
|
$information = $this->ajax_make_permanent_blocks_callback();
|
|
break;
|
|
case 'unblock_ip':
|
|
$information = $this->unblock_ip();
|
|
break;
|
|
case 'load_static_panel':
|
|
$information = $this->load_static_panel();
|
|
break;
|
|
case 'downgrade_license':
|
|
$information = $this->downgrade_license();
|
|
break;
|
|
case 'import_settings':
|
|
$information = $this->import_settings();
|
|
break;
|
|
case 'export_settings':
|
|
$information = $this->export_settings();
|
|
break;
|
|
case 'save_cache_config':
|
|
$information = $this->save_cache_config();
|
|
break;
|
|
case 'check_falcon_htaccess':
|
|
$information = self::check_falcon_htaccess();
|
|
break;
|
|
case 'checkHtaccess':
|
|
$information = $this->check_htaccess();
|
|
break;
|
|
case 'save_cache_options':
|
|
$information = $this->save_cache_options();
|
|
break;
|
|
case 'clear_page_cache':
|
|
$information = $this->clear_page_cache();
|
|
break;
|
|
case 'get_cache_stats':
|
|
$information = $this->get_cache_stats();
|
|
break;
|
|
case 'add_cache_exclusion':
|
|
$information = $this->add_cache_exclusion();
|
|
break;
|
|
case 'load_cache_exclusions':
|
|
$information = $this->load_cache_exclusions();
|
|
break;
|
|
case 'remove_cache_exclusion':
|
|
$information = $this->remove_cache_exclusion();
|
|
break;
|
|
case 'get_diagnostics':
|
|
$information = $this->get_diagnostics();
|
|
break;
|
|
case 'update_waf_rules':
|
|
$information = $this->update_waf_rules();
|
|
break;
|
|
case 'update_waf_rules_new':
|
|
$information = $this->update_waf_rules_new();
|
|
break;
|
|
case 'save_debugging_config':
|
|
$information = $this->save_debugging_config();
|
|
break;
|
|
case 'load_live_traffic':
|
|
$information = $this->load_live_traffic();
|
|
break;
|
|
case 'white_list_waf':
|
|
$information = $this->whitelist_waf_param_key();
|
|
break;
|
|
case 'hide_file_htaccess':
|
|
$information = $this->hide_file_htaccess();
|
|
break;
|
|
case 'fix_fpd':
|
|
$information = $this->fix_fpd();
|
|
break;
|
|
case 'disable_directory_listing':
|
|
$information = $this->disable_directory_listing();
|
|
break;
|
|
case 'delete_database_option':
|
|
$information = $this->delete_database_option();
|
|
break;
|
|
case 'misconfigured_howget_ips_choice':
|
|
$information = $this->mis_configured_how_get_ips_choice();
|
|
break;
|
|
case 'delete_admin_user':
|
|
$information = $this->delete_admin_user();
|
|
break;
|
|
case 'revoke_admin_user':
|
|
$information = $this->revoke_admin_user();
|
|
break;
|
|
case 'clear_all_blocked':
|
|
$information = $this->clear_all_blocked();
|
|
break;
|
|
case 'permanently_block_all_ips':
|
|
$information = $this->permanently_block_all_ips();
|
|
break;
|
|
case 'unlockout_ip':
|
|
$information = $this->unlock_out_ip();
|
|
break;
|
|
case 'unblock_range':
|
|
$information = $this->unblock_range();
|
|
break;
|
|
case 'block_ip_ua_range':
|
|
$information = $this->block_ip_ua_range();
|
|
break;
|
|
case 'load_block_ranges':
|
|
$information = $this->load_block_ranges();
|
|
break;
|
|
case 'save_waf_config':
|
|
$information = $this->save_waf_config();
|
|
break;
|
|
case 'whitelist_bulk_delete':
|
|
$information = $this->whitelist_bulk_delete();
|
|
break;
|
|
case 'whitelist_bulk_enable':
|
|
$information = $this->whitelist_bulk_enable();
|
|
break;
|
|
case 'whitelist_bulk_disable':
|
|
$information = $this->whitelist_bulk_disable();
|
|
break;
|
|
case 'update_config':
|
|
$information = $this->update_config();
|
|
break;
|
|
case 'save_country_blocking':
|
|
$information = $this->save_country_blocking();
|
|
break;
|
|
}
|
|
}
|
|
MainWP_Helper::write( $information );
|
|
}
|
|
|
|
|
|
public static function get_section_settings( $section ) {
|
|
$general_opts = array(
|
|
'scheduleScan',
|
|
'apiKey',
|
|
'autoUpdate',
|
|
'alertEmails',
|
|
'howGetIPs',
|
|
'howGetIPs_trusted_proxies',
|
|
'other_hideWPVersion',
|
|
'disableCodeExecutionUploads',
|
|
'disableCookies',
|
|
'liveActivityPauseEnabled',
|
|
'actUpdateInterval',
|
|
'other_bypassLitespeedNoabort',
|
|
'deleteTablesOnDeact',
|
|
'notification_updatesNeeded',
|
|
'notification_securityAlerts',
|
|
'notification_promotions',
|
|
'notification_blogHighlights',
|
|
'notification_productUpdates',
|
|
'notification_scanStatus',
|
|
'alertOn_update',
|
|
'alertOn_wordfenceDeactivated',
|
|
'alertOn_critical',
|
|
'alertOn_warnings',
|
|
'alertOn_block',
|
|
'alertOn_loginLockout',
|
|
'alertOn_breachLogin',
|
|
'alertOn_lostPasswdForm',
|
|
'alertOn_adminLogin',
|
|
'alertOn_firstAdminLoginOnly',
|
|
'alertOn_nonAdminLogin',
|
|
'alertOn_firstNonAdminLoginOnly',
|
|
'wafAlertOnAttacks',
|
|
'alert_maxHourly',
|
|
'email_summary_enabled',
|
|
'email_summary_interval',
|
|
'email_summary_excluded_directories',
|
|
'email_summary_dashboard_widget_enabled',
|
|
'other_noAnonMemberComments',
|
|
'other_scanComments',
|
|
'advancedCommentScanning',
|
|
);
|
|
|
|
$traffic_opts = array(
|
|
'liveTrafficEnabled',
|
|
'liveTraf_ignorePublishers',
|
|
'liveTraf_displayExpandedRecords',
|
|
'liveTraf_ignoreUsers',
|
|
'liveTraf_ignoreIPs',
|
|
'liveTraf_ignoreUA',
|
|
'liveTraf_maxRows',
|
|
'displayTopLevelLiveTraffic',
|
|
);
|
|
|
|
$firewall_opts = array(
|
|
'disableWAFIPBlocking',
|
|
'whitelisted',
|
|
'bannedURLs',
|
|
'wafAlertWhitelist',
|
|
'firewallEnabled',
|
|
'blockFakeBots',
|
|
'neverBlockBG',
|
|
'maxGlobalRequests',
|
|
'maxGlobalRequests_action',
|
|
'maxRequestsCrawlers',
|
|
'maxRequestsCrawlers_action',
|
|
'max404Crawlers',
|
|
'max404Crawlers_action',
|
|
'maxRequestsHumans',
|
|
'maxRequestsHumans_action',
|
|
'max404Humans',
|
|
'max404Humans_action',
|
|
'maxScanHits',
|
|
'maxScanHits_action',
|
|
'blockedTime',
|
|
'allowed404s',
|
|
'loginSecurityEnabled',
|
|
'loginSec_maxFailures',
|
|
'loginSec_maxForgotPasswd',
|
|
'loginSec_countFailMins',
|
|
'loginSec_lockoutMins',
|
|
'loginSec_lockInvalidUsers',
|
|
'loginSec_breachPasswds_enabled',
|
|
'loginSec_breachPasswds',
|
|
'loginSec_userBlacklist',
|
|
'loginSec_strongPasswds_enabled',
|
|
'loginSec_strongPasswds',
|
|
'loginSec_maskLoginErrors',
|
|
'loginSec_blockAdminReg',
|
|
'loginSec_disableAuthorScan',
|
|
'other_blockBadPOST',
|
|
'other_pwStrengthOnUpdate',
|
|
'other_WFNet',
|
|
'wafStatus',
|
|
'learningModeGracePeriodEnabled',
|
|
'learningModeGracePeriod',
|
|
);
|
|
|
|
$scan_opts = array(
|
|
'scansEnabled_checkGSB',
|
|
'spamvertizeCheck',
|
|
'checkSpamIP',
|
|
'scansEnabled_checkHowGetIPs',
|
|
'scansEnabled_checkReadableConfig',
|
|
'scansEnabled_suspectedFiles',
|
|
'scansEnabled_core',
|
|
'scansEnabled_themes',
|
|
'scansEnabled_plugins',
|
|
'scansEnabled_coreUnknown',
|
|
'scansEnabled_malware',
|
|
'scansEnabled_fileContents',
|
|
'scansEnabled_fileContentsGSB',
|
|
'scansEnabled_posts',
|
|
'scansEnabled_comments',
|
|
'scansEnabled_suspiciousOptions',
|
|
'scansEnabled_oldVersions',
|
|
'scansEnabled_suspiciousAdminUsers',
|
|
'scansEnabled_passwds',
|
|
'scansEnabled_diskSpace',
|
|
'scansEnabled_dns',
|
|
'other_scanOutside',
|
|
'scansEnabled_scanImages',
|
|
'scansEnabled_highSense',
|
|
'scheduledScansEnabled',
|
|
'lowResourceScansEnabled',
|
|
'scan_maxIssues',
|
|
'scan_maxDuration',
|
|
'maxMem',
|
|
'maxExecutionTime',
|
|
'scan_exclude',
|
|
'scan_include_extra',
|
|
'scanType',
|
|
'schedMode',
|
|
);
|
|
$diagnostics_opts = array(
|
|
'debugOn',
|
|
'startScansRemotely',
|
|
'ssl_verify',
|
|
'betaThreatDefenseFeed',
|
|
);
|
|
|
|
$blocking_opts = array(
|
|
'displayTopLevelBlocking',
|
|
);
|
|
|
|
$options = array();
|
|
|
|
switch ( $section ) {
|
|
case self::OPTIONS_TYPE_GLOBAL:
|
|
$options = $general_opts;
|
|
break;
|
|
case self::OPTIONS_TYPE_LIVE_TRAFFIC:
|
|
$options = $traffic_opts;
|
|
break;
|
|
case self::OPTIONS_TYPE_FIREWALL:
|
|
$options = $firewall_opts;
|
|
break;
|
|
case self::OPTIONS_TYPE_SCANNER:
|
|
$options = $scan_opts;
|
|
break;
|
|
case self::OPTIONS_TYPE_DIAGNOSTICS:
|
|
$options = $diagnostics_opts;
|
|
break;
|
|
case self::OPTIONS_TYPE_BLOCKING:
|
|
$options = $blocking_opts;
|
|
break;
|
|
case self::OPTIONS_TYPE_ALL:
|
|
$options = array_merge( $general_opts, $traffic_opts, $firewall_opts, $scan_opts, $diagnostics_opts, $blocking_opts );
|
|
break;
|
|
}
|
|
return $options;
|
|
}
|
|
|
|
|
|
private function start_scan() {
|
|
$information = wordfence::ajax_scan_callback();
|
|
if ( is_array( $information ) && isset( $information['ok'] ) ) {
|
|
$information['result'] = 'SUCCESS';
|
|
}
|
|
|
|
return $information;
|
|
}
|
|
|
|
private function kill_scan() {
|
|
wordfence::status( 1, 'info', 'Scan kill request received.' );
|
|
wordfence::status( 10, 'info', 'SUM_KILLED:A request was received to kill the previous scan.' );
|
|
wfUtils::clearScanLock(); // Clear the lock now because there may not be a scan running to pick up the kill request and clear the lock.
|
|
wfScanEngine::requestKill();
|
|
return array(
|
|
'ok' => 1,
|
|
);
|
|
}
|
|
|
|
private function request_scan() {
|
|
return wordfence::ajax_scan_callback();
|
|
}
|
|
|
|
private function kill_ajax_scan() {
|
|
return wordfence::ajax_killScan_callback();
|
|
}
|
|
|
|
public function set_showhide() {
|
|
$hide = isset( $_POST['showhide'] ) && ( 'hide' === $_POST['showhide'] ) ? 'hide' : '';
|
|
MainWP_Helper::update_option( 'mainwp_wordfence_hide_plugin', $hide, 'yes' );
|
|
$information['result'] = 'SUCCESS';
|
|
|
|
return $information;
|
|
}
|
|
|
|
public function wordfence_init() {
|
|
|
|
if ( ! $this->is_wordfence_installed ) {
|
|
return;
|
|
}
|
|
|
|
add_action( 'mainwp_child_site_stats', array( $this, 'do_site_stats' ) );
|
|
if ( get_option( 'mainwp_wordfence_hide_plugin' ) === 'hide' ) {
|
|
add_filter( 'all_plugins', array( $this, 'all_plugins' ) );
|
|
add_action( 'admin_menu', array( $this, 'remove_menu' ) );
|
|
add_action( 'admin_init', array( $this, 'admin_init' ) );
|
|
}
|
|
$this->init_cron();
|
|
}
|
|
|
|
public function do_site_stats() {
|
|
do_action( 'mainwp_child_reports_log', 'wordfence' );
|
|
}
|
|
|
|
public function do_reports_log( $ext = '' ) {
|
|
if ( 'wordfence' !== $ext ) {
|
|
return;
|
|
}
|
|
if ( ! $this->is_wordfence_installed ) {
|
|
return;
|
|
}
|
|
|
|
global $wpdb;
|
|
|
|
$lastcheck = get_option( 'mainwp_wordfence_lastcheck_scan' );
|
|
if ( false == $lastcheck ) {
|
|
$lastcheck = time() - 3600 * 24 * 10;
|
|
}
|
|
|
|
$table_wfStatus = wfDB::networkTable( 'wfStatus' );
|
|
|
|
// fix prepare sql empty.
|
|
$sql = sprintf( "SELECT * FROM {$table_wfStatus} WHERE ctime >= %d AND level = 1 AND type = 'info' AND msg LIKE ", $lastcheck );
|
|
$sql .= " 'Scan Complete.%';";
|
|
$rows = MainWP_Child_DB::to_query( $sql, $wpdb->dbh );
|
|
|
|
$scan_time = array();
|
|
if ( $rows ) {
|
|
while ( $row = MainWP_Child_DB::fetch_array( $rows ) ) {
|
|
$scan_time[ $row['ctime'] ] = $row['msg'];
|
|
}
|
|
}
|
|
|
|
if ( $scan_time ) {
|
|
$message = 'Wordfence scan completed';
|
|
foreach ( $scan_time as $ctime => $details ) {
|
|
$sql = sprintf( "SELECT * FROM {$table_wfStatus} WHERE ctime > %d AND ctime < %d AND level = 10 AND type = 'info' AND msg LIKE ", $ctime, $ctime + 100 ); // to get nearest SUM_FINAL msg.
|
|
$sql .= " 'SUM_FINAL:Scan complete.%';";
|
|
|
|
$sum_rows = MainWP_Child_DB::to_query( $sql, $wpdb->dbh );
|
|
$result = '';
|
|
if ( $sum_rows ) {
|
|
$sum_row = MainWP_Child_DB::fetch_array( $sum_rows );
|
|
if ( is_array( $sum_row ) && isset( $sum_row['msg'] ) ) {
|
|
$result = $sum_row['msg'];
|
|
}
|
|
}
|
|
do_action( 'mainwp_reports_wordfence_scan', $message, $ctime, $details, $result );
|
|
}
|
|
}
|
|
|
|
update_option( 'mainwp_wordfence_lastcheck_scan', time() );
|
|
}
|
|
|
|
public function admin_init() {
|
|
remove_meta_box( 'wordfence_activity_report_widget', 'dashboard', 'normal' );
|
|
}
|
|
|
|
public function init_cron() {
|
|
$sched = wp_next_scheduled( 'mainwp_child_wordfence_cron_scan' );
|
|
$sch = get_option( 'mainwp_child_wordfence_cron_time' );
|
|
if ( 'twicedaily' === $sch || 'daily' === $sch || 'weekly' === $sch || 'monthly' === $sch ) {
|
|
add_action( 'mainwp_child_wordfence_cron_scan', array( $this, 'wfc_cron_scan' ) );
|
|
if ( false === $sched ) {
|
|
$sched = wp_schedule_event( time(), $sch, 'mainwp_child_wordfence_cron_scan' );
|
|
}
|
|
} else {
|
|
if ( false !== $sched ) {
|
|
wp_unschedule_event( $sched, 'mainwp_child_wordfence_cron_scan' );
|
|
}
|
|
}
|
|
}
|
|
|
|
public function wfc_cron_scan() {
|
|
if ( ! class_exists( 'wordfence' ) || ! class_exists( 'wfScanEngine' ) ) {
|
|
return;
|
|
}
|
|
$this->start_scan();
|
|
}
|
|
|
|
public function all_plugins( $plugins ) {
|
|
foreach ( $plugins as $key => $value ) {
|
|
$plugin_slug = basename( $key, '.php' );
|
|
if ( 'wordfence' === $plugin_slug ) {
|
|
unset( $plugins[ $key ] );
|
|
}
|
|
}
|
|
|
|
return $plugins;
|
|
}
|
|
|
|
public function remove_menu() {
|
|
remove_menu_page( 'Wordfence' );
|
|
}
|
|
|
|
public function get_log() {
|
|
$information = array();
|
|
$wfLog = wordfence::getLog();
|
|
if ( $wfLog ) {
|
|
$information['events'] = $wfLog->getStatusEvents( 0 );
|
|
|
|
if ( method_exists( $wfLog, 'getSummaryEvents' ) ) {
|
|
$information['summary'] = $wfLog->getSummaryEvents();
|
|
} else {
|
|
$information['summary'] = '';
|
|
}
|
|
}
|
|
$information['debugOn'] = wfConfig::get( 'debugOn', false );
|
|
$information['timeOffset'] = 3600 * get_option( 'gmt_offset' );
|
|
|
|
return $information;
|
|
}
|
|
|
|
public function update_log() {
|
|
return wordfence::ajax_activityLogUpdate_callback();
|
|
}
|
|
|
|
// not used!
|
|
public function load_issues() {
|
|
$offset = isset( $_POST['offset'] ) ? intval( $_POST['offset'] ) : 0;
|
|
$limit = isset( $_POST['limit'] ) ? intval( $_POST['limit'] ) : WORDFENCE_SCAN_ISSUES_PER_PAGE;
|
|
|
|
$i = new wfIssues();
|
|
$iss = $i->getIssues( $offset, $limit );
|
|
$counts = $i->getIssueCounts();
|
|
|
|
return array(
|
|
'issuesLists' => $iss,
|
|
'issueCounts' => $counts,
|
|
'lastScanCompleted' => wfConfig::get( 'lastScanCompleted' ),
|
|
'apiKey' => wfConfig::get( 'apiKey' ),
|
|
'isPaid' => wfConfig::get( 'isPaid' ),
|
|
'lastscan_timestamp' => $this->get_lastscan(),
|
|
'isNginx' => wfUtils::isNginx() ? 1 : 0,
|
|
'todayAttBlocked' => $this->count_attacks_blocked( 1 ),
|
|
'weekAttBlocked' => $this->count_attacks_blocked( 7 ),
|
|
'monthAttBlocked' => $this->count_attacks_blocked( 30 ),
|
|
'wafData' => self::get_waf_data(),
|
|
);
|
|
}
|
|
|
|
public static function ajax_load_issues_callback() {
|
|
$offset = isset( $_POST['offset'] ) ? intval( $_POST['offset'] ) : 0;
|
|
$limit = isset( $_POST['limit'] ) ? intval( $_POST['limit'] ) : WORDFENCE_SCAN_ISSUES_PER_PAGE;
|
|
|
|
$i = new wfIssues();
|
|
$iss = $i->getIssues( $offset, $limit );
|
|
$counts = $i->getIssueCounts();
|
|
$return = array(
|
|
'issuesLists' => $iss,
|
|
'issueCounts' => $counts,
|
|
'lastScanCompleted' => wfConfig::get( 'lastScanCompleted' ),
|
|
'apiKey' => wfConfig::get( 'apiKey' ),
|
|
'isPaid' => wfConfig::get( 'isPaid' ),
|
|
'lastscan_timestamp' => self::instance()->get_lastscan(),
|
|
'todayAttBlocked' => self::instance()->count_attacks_blocked( 1 ),
|
|
'weekAttBlocked' => self::instance()->count_attacks_blocked( 7 ),
|
|
'monthAttBlocked' => self::instance()->count_attacks_blocked( 30 ),
|
|
'issueCount' => $i->getIssueCount(),
|
|
);
|
|
return $return;
|
|
}
|
|
|
|
public function load_waf_data() {
|
|
$return = array(
|
|
'wafData' => self::get_waf_data(),
|
|
'ip' => wfUtils::getIP(),
|
|
'ajaxWatcherDisabled_front' => (bool) wfConfig::get( 'ajaxWatcherDisabled_front' ),
|
|
'ajaxWatcherDisabled_admin' => (bool) wfConfig::get( 'ajaxWatcherDisabled_admin' ),
|
|
);
|
|
|
|
if ( class_exists( 'wfFirewall' ) ) {
|
|
$firewall = new wfFirewall();
|
|
$return['isSubDirectoryInstallation'] = $firewall->isSubDirectoryInstallation();
|
|
}
|
|
return $return;
|
|
}
|
|
|
|
public function count_attacks_blocked( $maxAgeDays ) {
|
|
global $wpdb;
|
|
$table_wfBlockedIPLog = wfDB::networkTable( 'wfBlockedIPLog' );
|
|
$interval = 'FLOOR(UNIX_TIMESTAMP(DATE_SUB(NOW(), interval ' . $maxAgeDays . ' day)) / 86400)';
|
|
// phpcs:disable -- third party code, safe.
|
|
return $wpdb->get_var(
|
|
<<<SQL
|
|
SELECT SUM(blockCount) as blockCount FROM {$table_wfBlockedIPLog} WHERE unixday >= {$interval}
|
|
SQL
|
|
);
|
|
}
|
|
|
|
public function get_lastscan() {
|
|
$wfdb = new wfDB();
|
|
$table_wfStatus = wfDB::networkTable( 'wfStatus' );
|
|
$ctime = $wfdb->querySingle( "SELECT MAX(ctime) FROM {$table_wfStatus} WHERE msg LIKE '%SUM_PREP:Preparing a new scan.%'" );
|
|
return $ctime;
|
|
}
|
|
|
|
public function update_all_issues() {
|
|
$op = $_POST['op'];
|
|
$i = new wfIssues();
|
|
if ( 'deleteIgnored' === $op ) {
|
|
$i->deleteIgnored();
|
|
} elseif ( 'deleteNew' === $op ) {
|
|
$i->deleteNew();
|
|
} elseif ( 'ignoreAllNew' === $op ) {
|
|
$i->ignoreAllNew();
|
|
} else {
|
|
return array( 'errorMsg' => 'An invalid operation was called.' );
|
|
}
|
|
|
|
return array( 'ok' => 1 );
|
|
}
|
|
|
|
public function update_issue_status() {
|
|
$wfIssues = new wfIssues();
|
|
$status = $_POST['status'];
|
|
$issueID = $_POST['id'];
|
|
if ( ! preg_match( '/^(?:new|delete|ignoreP|ignoreC)$/', $status ) ) {
|
|
return array( 'errorMsg' => 'An invalid status was specified when trying to update that issue.' );
|
|
}
|
|
$wfIssues->updateIssue( $issueID, $status );
|
|
wfScanEngine::refreshScanNotification( $wfIssues );
|
|
|
|
$counts = $wfIssues->getIssueCounts();
|
|
return array(
|
|
'ok' => 1,
|
|
'issueCounts' => $counts,
|
|
);
|
|
}
|
|
|
|
public function update_issues_status() {
|
|
$wfIssues = new wfIssues();
|
|
$status = $_POST['status'];
|
|
$issueID = $_POST['id'];
|
|
if ( ! preg_match( '/^(?:new|delete|ignoreP|ignoreC)$/', $status ) ) {
|
|
return array( 'errorMsg' => 'An invalid status was specified when trying to update that issue.' );
|
|
}
|
|
$wfIssues->updateIssue( $issueID, $status );
|
|
|
|
return array( 'ok' => 1 );
|
|
}
|
|
|
|
public function delete_issues() {
|
|
$wfIssues = new wfIssues();
|
|
$issueID = $_POST['id'];
|
|
$wfIssues->deleteIssue( $issueID );
|
|
|
|
return array( 'ok' => 1 );
|
|
}
|
|
|
|
public function bulk_operation() {
|
|
$op = $_POST['op'];
|
|
if ( 'del' === $op || 'repair' === $op ) {
|
|
$ids = $_POST['ids'];
|
|
$filesWorkedOn = 0;
|
|
$errors = array();
|
|
$issues = new wfIssues();
|
|
foreach ( $ids as $id ) {
|
|
$issue = $issues->getIssueByID( $id );
|
|
if ( ! $issue ) {
|
|
$errors[] = "Could not delete one of the files because we could not find the issue. Perhaps it's been resolved?";
|
|
continue;
|
|
}
|
|
$file = $issue['data']['file'];
|
|
$localFile = ABSPATH . '/' . preg_replace( '/^[\.\/]+/', '', $file );
|
|
$localFile = realpath( $localFile );
|
|
if ( strpos( $localFile, ABSPATH ) !== 0 ) {
|
|
$errors[] = 'An invalid file was requested: ' . htmlentities( $file );
|
|
continue;
|
|
}
|
|
if ( 'del' === $op ) {
|
|
if ( unlink( $localFile ) ) {
|
|
$issues->updateIssue( $id, 'delete' );
|
|
$filesWorkedOn ++;
|
|
} else {
|
|
$err = error_get_last();
|
|
$errors[] = 'Could not delete file ' . htmlentities( $file ) . '. Error was: ' . htmlentities( $err['message'] );
|
|
}
|
|
} elseif ( 'repair' === $op ) {
|
|
$dat = $issue['data'];
|
|
$result = wordfence::getWPFileContent( $dat['file'], $dat['cType'], $dat['cName'], $dat['cVersion'] );
|
|
if ( $result['cerrorMsg'] ) {
|
|
$errors[] = $result['cerrorMsg'];
|
|
continue;
|
|
} elseif ( ! $result['fileContent'] ) {
|
|
$errors[] = 'We could not get the original file of ' . htmlentities( $file ) . ' to do a repair.';
|
|
continue;
|
|
}
|
|
|
|
if ( preg_match( '/\.\./', $file ) ) {
|
|
$errors[] = 'An invalid file ' . htmlentities( $file ) . ' was specified for repair.';
|
|
continue;
|
|
}
|
|
$fh = fopen( $localFile, 'w' );
|
|
if ( ! $fh ) {
|
|
$err = error_get_last();
|
|
if ( preg_match( '/Permission denied/i', $err['message'] ) ) {
|
|
$errMsg = "You don't have permission to repair " . htmlentities( $file ) . '. You need to either fix the file manually using FTP or change the file permissions and ownership so that your web server has write access to repair the file.';
|
|
} else {
|
|
$errMsg = 'We could not write to ' . htmlentities( $file ) . '. The error was: ' . $err['message'];
|
|
}
|
|
$errors[] = $errMsg;
|
|
continue;
|
|
}
|
|
flock( $fh, LOCK_EX );
|
|
$bytes = fwrite( $fh, $result['fileContent'] );
|
|
flock( $fh, LOCK_UN );
|
|
fclose( $fh );
|
|
if ( $bytes < 1 ) {
|
|
$errors[] = 'We could not write to ' . htmlentities( $file ) . ". ( $bytes bytes written ) You may not have permission to modify files on your WordPress server.";
|
|
continue;
|
|
}
|
|
$filesWorkedOn ++;
|
|
$issues->updateIssue( $id, 'delete' );
|
|
}
|
|
}
|
|
$headMsg = '';
|
|
$bodyMsg = '';
|
|
$verb = 'del' === $op ? 'Deleted' : 'Repaired';
|
|
$verb2 = 'del' === $op ? 'delete' : 'repair';
|
|
if ( $filesWorkedOn > 0 && count( $errors ) > 0 ) {
|
|
$headMsg = "$verb some files with errors";
|
|
$bodyMsg = "$verb $filesWorkedOn files but we encountered the following errors with other files: " . implode( '<br />', $errors );
|
|
} elseif ( $filesWorkedOn > 0 ) {
|
|
$headMsg = "$verb $filesWorkedOn files successfully";
|
|
$bodyMsg = "$verb $filesWorkedOn files successfully. No errors were encountered.";
|
|
} elseif ( count( $errors ) > 0 ) {
|
|
$headMsg = "Could not $verb2 files";
|
|
$bodyMsg = "We could not $verb2 any of the files you selected. We encountered the following errors: " . implode( '<br />', $errors );
|
|
} else {
|
|
$headMsg = 'Nothing done';
|
|
$bodyMsg = "We didn't $verb2 anything and no errors were found.";
|
|
}
|
|
|
|
return array(
|
|
'ok' => 1,
|
|
'bulkHeading' => $headMsg,
|
|
'bulkBody' => $bodyMsg,
|
|
);
|
|
} else {
|
|
return array( 'errorMsg' => 'Invalid bulk operation selected' );
|
|
}
|
|
}
|
|
|
|
public function bulk_ajax_operation() {
|
|
return wordfence::ajax_bulkOperation_callback();
|
|
}
|
|
|
|
public function delete_file() {
|
|
$issueID = $_POST['issueID'];
|
|
$wfIssues = new wfIssues();
|
|
$issue = $wfIssues->getIssueByID( $issueID );
|
|
if ( ! $issue ) {
|
|
return array( 'errorMsg' => 'Could not delete file because we could not find that issue.' );
|
|
}
|
|
if ( ! $issue['data']['file'] ) {
|
|
return array( 'errorMsg' => 'Could not delete file because that issue does not appear to be a file related issue.' );
|
|
}
|
|
$file = $issue['data']['file'];
|
|
$localFile = ABSPATH . '/' . preg_replace( '/^[\.\/]+/', '', $file );
|
|
$localFile = realpath( $localFile );
|
|
if ( strpos( $localFile, ABSPATH ) !== 0 ) {
|
|
return array( 'errorMsg' => 'An invalid file was requested for deletion.' );
|
|
}
|
|
if ( unlink( $localFile ) ) {
|
|
$wfIssues->updateIssue( $issueID, 'delete' );
|
|
|
|
return array(
|
|
'ok' => 1,
|
|
'localFile' => $localFile,
|
|
'file' => $file,
|
|
);
|
|
} else {
|
|
$err = error_get_last();
|
|
|
|
return array( 'errorMsg' => 'Could not delete file ' . htmlentities( $file ) . '. The error was: ' . htmlentities( $err['message'] ) );
|
|
}
|
|
}
|
|
|
|
public function restore_file() {
|
|
$issueID = $_POST['issueID'];
|
|
$wfIssues = new wfIssues();
|
|
$issue = $wfIssues->getIssueByID( $issueID );
|
|
if ( ! $issue ) {
|
|
return array( 'cerrorMsg' => 'We could not find that issue in our database.' );
|
|
}
|
|
$dat = $issue['data'];
|
|
$result = wordfence::getWPFileContent( $dat['file'], $dat['cType'], ( isset( $dat['cName'] ) ? $dat['cName'] : '' ), ( isset( $dat['cVersion'] ) ? $dat['cVersion'] : '' ) );
|
|
$file = $dat['file'];
|
|
if ( isset( $result['cerrorMsg'] ) && $result['cerrorMsg'] ) {
|
|
return $result;
|
|
} elseif ( ! $result['fileContent'] ) {
|
|
return array( 'cerrorMsg' => 'We could not get the original file to do a repair.' );
|
|
}
|
|
|
|
if ( preg_match( '/\.\./', $file ) ) {
|
|
return array( 'cerrorMsg' => 'An invalid file was specified for repair.' );
|
|
}
|
|
$localFile = ABSPATH . '/' . preg_replace( '/^[\.\/]+/', '', $file );
|
|
$fh = fopen( $localFile, 'w' );
|
|
if ( ! $fh ) {
|
|
$err = error_get_last();
|
|
if ( preg_match( '/Permission denied/i', $err['message'] ) ) {
|
|
$errMsg = "You don't have permission to repair that file. You need to either fix the file manually using FTP or change the file permissions and ownership so that your web server has write access to repair the file.";
|
|
} else {
|
|
$errMsg = 'We could not write to that file. The error was: ' . $err['message'];
|
|
}
|
|
|
|
return array( 'cerrorMsg' => $errMsg );
|
|
}
|
|
flock( $fh, LOCK_EX );
|
|
$bytes = fwrite( $fh, $result['fileContent'] );
|
|
flock( $fh, LOCK_UN );
|
|
fclose( $fh );
|
|
if ( $bytes < 1 ) {
|
|
return array( 'cerrorMsg' => "We could not write to that file. ( $bytes bytes written ) You may not have permission to modify files on your WordPress server." );
|
|
}
|
|
$wfIssues->updateIssue( $issueID, 'delete' );
|
|
|
|
return array(
|
|
'ok' => 1,
|
|
'file' => $localFile,
|
|
);
|
|
}
|
|
|
|
public function simple_crypt( $key, $data, $action = 'encrypt' ) {
|
|
$res = '';
|
|
if ( 'encrypt' == $action ) {
|
|
$string = base64_encode( serialize( $data ) ); // phpcs:ignore WordPress.PHP.DiscouragedPHPFunctions -- base64_encode function is used for begin reasons.
|
|
} else {
|
|
$string = $data;
|
|
}
|
|
$string_lenght = strlen( $string );
|
|
for ( $i = 0; $i < $string_lenght; $i++ ) {
|
|
$c = ord( substr( $string, $i ) );
|
|
if ( 'encrypt' == $action ) {
|
|
$c += ord( substr( $key, ( ( $i + 1 ) % strlen( $key ) ) ) );
|
|
$res .= chr( $c & 0xFF );
|
|
} else {
|
|
$c -= ord( substr( $key, ( ( $i + 1 ) % strlen( $key ) ) ) );
|
|
$res .= chr( abs( $c ) & 0xFF );
|
|
}
|
|
}
|
|
|
|
if ( 'encrypt' !== $action ) {
|
|
$res = unserialize( base64_decode( $res ) ); // phpcs:ignore WordPress.PHP.DiscouragedPHPFunctions -- base64_encode function is used for begin reasons.
|
|
}
|
|
return $res;
|
|
}
|
|
|
|
public function save_settings_new() {
|
|
if ( isset( $_POST['encrypted'] ) ) {
|
|
$settings = $this->simple_crypt( 'thisisakey', $_POST['settings'], 'decrypt' ); // fix pass through sec rules of Dreamhost!
|
|
} else {
|
|
$settings = maybe_unserialize( base64_decode( $_POST['settings'] ) ); // phpcs:ignore WordPress.PHP.DiscouragedPHPFunctions -- base64_encode function is used for begin reasons.
|
|
}
|
|
|
|
$section = isset( $_POST['savingSection'] ) ? $_POST['savingSection'] : '';
|
|
$saving_opts = self::get_section_settings( $section );
|
|
|
|
$result = array();
|
|
|
|
if ( is_array( $settings ) && count( $settings ) > 0 && count( $saving_opts ) > 0 ) {
|
|
|
|
$reload = '';
|
|
$opts = $settings;
|
|
|
|
// if saving then validate data!
|
|
if ( in_array( 'liveTraf_ignoreUsers', $saving_opts ) ) {
|
|
$validUsers = array();
|
|
$invalidUsers = array();
|
|
foreach ( explode( ',', $opts['liveTraf_ignoreUsers'] ) as $val ) {
|
|
$val = trim( $val );
|
|
if ( strlen( $val ) > 0 ) {
|
|
if ( get_user_by( 'login', $val ) ) {
|
|
$validUsers[] = $val;
|
|
} else {
|
|
$invalidUsers[] = $val;
|
|
}
|
|
}
|
|
}
|
|
|
|
if ( count( $invalidUsers ) > 0 ) {
|
|
$result['invalid_users'] = htmlentities( implode( ', ', $invalidUsers ) );
|
|
}
|
|
|
|
if ( count( $validUsers ) > 0 ) {
|
|
$opts['liveTraf_ignoreUsers'] = implode( ',', $validUsers );
|
|
} else {
|
|
$opts['liveTraf_ignoreUsers'] = '';
|
|
}
|
|
}
|
|
|
|
// if saving then validate data!
|
|
if ( in_array( 'other_WFNet', $saving_opts ) ) {
|
|
if ( ! $opts['other_WFNet'] ) {
|
|
$wfdb = new wfDB();
|
|
$table_wfBlocks7 = wfDB::networkTable( 'wfBlocks7' );
|
|
$wfdb->queryWrite( "delete from {$table_wfBlocks7} where wfsn=1 and permanent=0" );
|
|
}
|
|
}
|
|
|
|
$regenerateHtaccess = false;
|
|
// if saving then validate data!
|
|
if ( in_array( 'bannedURLs', $saving_opts ) ) {
|
|
if ( wfConfig::get( 'bannedURLs', false ) !== $opts['bannedURLs'] ) {
|
|
$regenerateHtaccess = true;
|
|
}
|
|
}
|
|
|
|
// save the settings!
|
|
foreach ( $opts as $key => $val ) {
|
|
// check saving section fields.
|
|
if ( in_array( $key, $saving_opts ) ) {
|
|
if ( 'apiKey' == $key ) { // Don't save API key yet!
|
|
continue;
|
|
}
|
|
if ( in_array( $key, self::$firewall_options_filter ) ) {
|
|
wfWAF::getInstance()->getStorageEngine()->setConfig( $key, $val );
|
|
} else {
|
|
wfConfig::set( $key, $val ); // save it!
|
|
}
|
|
}
|
|
}
|
|
|
|
if ( $regenerateHtaccess && ( 'falcon' == wfConfig::get( 'cacheType' ) ) ) {
|
|
wfCache::addHtaccessCode( 'add' );
|
|
}
|
|
|
|
// if saving then validate data!
|
|
if ( in_array( 'autoUpdate', $saving_opts ) ) {
|
|
if ( '1' === $opts['autoUpdate'] ) {
|
|
wfConfig::enableAutoUpdate();
|
|
} elseif ( '0' === $opts['autoUpdate'] ) {
|
|
wfConfig::disableAutoUpdate();
|
|
}
|
|
}
|
|
|
|
// if saving then validate data!
|
|
if ( in_array( 'disableCodeExecutionUploads', $saving_opts ) ) {
|
|
if ( isset( $opts['disableCodeExecutionUploads'] ) ) {
|
|
try {
|
|
if ( $opts['disableCodeExecutionUploads'] ) {
|
|
wfConfig::disableCodeExecutionForUploads();
|
|
} else {
|
|
wfConfig::removeCodeExecutionProtectionForUploads();
|
|
}
|
|
} catch ( wfConfigException $e ) {
|
|
return array( 'error' => $e->getMessage() );
|
|
}
|
|
}
|
|
}
|
|
|
|
// if saving then validate data!
|
|
if ( in_array( 'email_summary_enabled', $saving_opts ) ) {
|
|
if ( isset( $opts['email_summary_enabled'] ) ) {
|
|
if ( ! empty( $opts['email_summary_enabled'] ) ) {
|
|
wfConfig::set( 'email_summary_enabled', 1 );
|
|
wfConfig::set( 'email_summary_interval', $opts['email_summary_interval'] );
|
|
wfConfig::set( 'email_summary_excluded_directories', $opts['email_summary_excluded_directories'] );
|
|
wfActivityReport::scheduleCronJob();
|
|
} else {
|
|
wfConfig::set( 'email_summary_enabled', 0 );
|
|
wfActivityReport::disableCronJob();
|
|
}
|
|
}
|
|
}
|
|
|
|
// if saving then validate data!
|
|
if ( in_array( 'scheduleScan', $saving_opts ) ) {
|
|
$sch = isset( $opts['scheduleScan'] ) ? $opts['scheduleScan'] : '';
|
|
if ( get_option( 'mainwp_child_wordfence_cron_time' ) !== $sch ) {
|
|
update_option( 'mainwp_child_wordfence_cron_time', $sch );
|
|
$sched = wp_next_scheduled( 'mainwp_child_wordfence_cron_scan' );
|
|
if ( false !== $sched ) {
|
|
wp_unschedule_event( $sched, 'mainwp_child_wordfence_cron_scan' );
|
|
}
|
|
}
|
|
}
|
|
|
|
$result['cacheType'] = wfConfig::get( 'cacheType' );
|
|
$result['paidKeyMsg'] = false;
|
|
|
|
// if saving then validate data!
|
|
if ( in_array( 'apiKey', $saving_opts ) ) {
|
|
|
|
$apiKey = trim( $_POST['apiKey'] );
|
|
$apiKey = strtolower( trim( $apiKey ) );
|
|
$existingAPIKey = wfConfig::get( 'apiKey', '' );
|
|
|
|
$ping = false;
|
|
if ( empty( $apiKey ) && empty( $existingAPIKey ) ) { // then try to get one.
|
|
|
|
$api = new wfAPI( '', wfUtils::getWPVersion() );
|
|
try {
|
|
$keyData = $api->call( 'get_anon_api_key' );
|
|
if ( $keyData['ok'] && $keyData['apiKey'] ) {
|
|
wfConfig::set( 'apiKey', $keyData['apiKey'] );
|
|
wfConfig::set( 'isPaid', 0 );
|
|
wfConfig::set( 'keyType', wfAPI::KEY_TYPE_FREE );
|
|
wordfence::licenseStatusChanged();
|
|
$result['apiKey'] = $keyData['apiKey'];
|
|
$apiKey = $keyData['apiKey'];
|
|
$result['isPaid'] = 0;
|
|
$reload = 'reload';
|
|
} else {
|
|
throw new \Exception( "The Wordfence server's response did not contain the expected elements." );
|
|
}
|
|
} catch ( \Exception $e ) {
|
|
$result['error'] = 'Your options have been saved, but you left your license key blank, so we tried to get you a free license key from the Wordfence servers. There was a problem fetching the free key: ' . wp_kses( $e->getMessage(), array() );
|
|
return $result;
|
|
}
|
|
} elseif ( ! empty( $apiKey ) && $existingAPIKey != $apiKey ) {
|
|
$api = new wfAPI( $apiKey, wfUtils::getWPVersion() );
|
|
try {
|
|
$res = $api->call( 'check_api_key', array(), array( 'previousLicense' => $existingAPIKey ) );
|
|
if ( $res['ok'] && isset( $res['isPaid'] ) ) {
|
|
|
|
$isPaid = wfUtils::truthyToBoolean( $res['isPaid'] );
|
|
wfConfig::set( 'apiKey', $apiKey );
|
|
wfConfig::set( 'isPaid', $isPaid ); // res['isPaid'] is boolean coming back as JSON and turned back into PHP struct. Assuming JSON to PHP handles bools.
|
|
wordfence::licenseStatusChanged();
|
|
if ( ! $isPaid ) {
|
|
wfConfig::set( 'keyType', wfAPI::KEY_TYPE_FREE );
|
|
}
|
|
|
|
$result['apiKey'] = $apiKey;
|
|
$result['isPaid'] = $isPaid;
|
|
if ( $isPaid ) {
|
|
$result['paidKeyMsg'] = true;
|
|
}
|
|
|
|
$ping = true;
|
|
$reload = 'reload';
|
|
} else {
|
|
throw new \Exception( 'We could not understand the Wordfence API server reply when updating your API key.' );
|
|
}
|
|
} catch ( \Exception $e ) {
|
|
$result['error'] = 'Your options have been saved. However we noticed you changed your API key and we tried to verify it with the Wordfence servers and received an error: ' . htmlentities( $e->getMessage() );
|
|
return $result;
|
|
}
|
|
} else {
|
|
$ping = true;
|
|
$apiKey = $existingAPIKey;
|
|
}
|
|
|
|
if ( $ping ) {
|
|
|
|
$api = new wfAPI( $apiKey, wfUtils::getWPVersion() );
|
|
try {
|
|
$keyType = wfAPI::KEY_TYPE_FREE;
|
|
$keyData = $api->call(
|
|
'ping_api_key',
|
|
array(),
|
|
array(
|
|
'supportHash' => wfConfig::get( 'supportHash', '' ),
|
|
'whitelistHash' => wfConfig::get( 'whitelistHash', '' ),
|
|
)
|
|
);
|
|
if ( isset( $keyData['_isPaidKey'] ) ) {
|
|
$keyType = wfConfig::get( 'keyType' );
|
|
}
|
|
if ( isset( $keyData['dashboard'] ) ) {
|
|
wfConfig::set( 'lastDashboardCheck', time() );
|
|
wfDashboard::processDashboardResponse( $keyData['dashboard'] );
|
|
}
|
|
if ( isset( $keyData['support'] ) && isset( $keyData['supportHash'] ) ) {
|
|
wfConfig::set( 'supportContent', $keyData['support'] );
|
|
wfConfig::set( 'supportHash', $keyData['supportHash'] );
|
|
}
|
|
if ( isset( $keyData['_whitelist'] ) && isset( $keyData['_whitelistHash'] ) ) {
|
|
wfConfig::setJSON( 'whitelistPresets', $keyData['_whitelist'] );
|
|
wfConfig::set( 'whitelistHash', $keyData['_whitelistHash'] );
|
|
}
|
|
if ( isset( $keyData['scanSchedule'] ) && is_array( $keyData['scanSchedule'] ) ) {
|
|
wfConfig::set_ser( 'noc1ScanSchedule', $keyData['scanSchedule'] );
|
|
if ( wfScanner::shared()->schedulingMode() == wfScanner::SCAN_SCHEDULING_MODE_AUTOMATIC ) {
|
|
wfScanner::shared()->scheduleScans();
|
|
}
|
|
}
|
|
|
|
wfConfig::set( 'keyType', $keyType );
|
|
|
|
if ( ! isset( $result['apiKey'] ) ) {
|
|
$isPaid = ( wfAPI::KEY_TYPE_FREE == $keyType ) ? false : true;
|
|
$result['apiKey'] = $apiKey;
|
|
$result['isPaid'] = $isPaid;
|
|
if ( $isPaid ) {
|
|
$result['paidKeyMsg'] = true;
|
|
}
|
|
}
|
|
} catch ( \Exception $e ) {
|
|
$result['error'] = 'Your options have been saved. However we tried to verify your license key with the Wordfence servers and received an error: ' . wp_kses( $e->getMessage(), array() );
|
|
return $result;
|
|
}
|
|
}
|
|
}
|
|
|
|
$result['ok'] = 1;
|
|
$result['reload'] = $reload;
|
|
|
|
return $result;
|
|
} else {
|
|
$result['error'] = 'Empty settings';
|
|
}
|
|
|
|
return $result;
|
|
}
|
|
|
|
public static function recent_traffic() {
|
|
return wordfence::ajax_recentTraffic_callback();
|
|
}
|
|
|
|
public function save_setting() {
|
|
if ( isset( $_POST['encrypted'] ) ) {
|
|
$settings = $this->simple_crypt( 'thisisakey', $_POST['settings'], 'decrypt' ); // to fix pass through sec rules of Dreamhost!
|
|
} else {
|
|
$settings = maybe_unserialize( base64_decode( $_POST['settings'] ) ); // phpcs:ignore WordPress.PHP.DiscouragedPHPFunctions -- base64_encode function is used for begin reasons.
|
|
}
|
|
|
|
if ( is_array( $settings ) && count( $settings ) > 0 ) {
|
|
$result = array();
|
|
$reload = '';
|
|
$opts = $settings;
|
|
$validUsers = array();
|
|
$invalidUsers = array();
|
|
foreach ( explode( ',', $opts['liveTraf_ignoreUsers'] ) as $val ) {
|
|
$val = trim( $val );
|
|
if ( strlen( $val ) > 0 ) {
|
|
if ( get_user_by( 'login', $val ) ) {
|
|
$validUsers[] = $val;
|
|
} else {
|
|
$invalidUsers[] = $val;
|
|
}
|
|
}
|
|
}
|
|
|
|
if ( count( $invalidUsers ) > 0 ) {
|
|
$result['invalid_users'] = htmlentities( implode( ', ', $invalidUsers ) );
|
|
}
|
|
|
|
if ( count( $validUsers ) > 0 ) {
|
|
$opts['liveTraf_ignoreUsers'] = implode( ',', $validUsers );
|
|
} else {
|
|
$opts['liveTraf_ignoreUsers'] = '';
|
|
}
|
|
|
|
if ( ! $opts['other_WFNet'] ) {
|
|
$wfdb = new wfDB();
|
|
$table_wfBlocks7 = wfDB::networkTable( 'wfBlocks7' );
|
|
$wfdb->queryWrite( "delete from {$table_wfBlocks7} where wfsn=1 and permanent=0" );
|
|
}
|
|
|
|
$regenerateHtaccess = false;
|
|
if ( wfConfig::get( 'bannedURLs', false ) !== $opts['bannedURLs'] ) {
|
|
$regenerateHtaccess = true;
|
|
}
|
|
|
|
foreach ( $opts as $key => $val ) {
|
|
if ( in_array( $key, self::$options_filter ) ) {
|
|
if ( 'apiKey' !== $key ) { // Don't save API key yet!
|
|
wfConfig::set( $key, $val );
|
|
}
|
|
}
|
|
}
|
|
|
|
if ( $regenerateHtaccess && ( 'falcon' == wfConfig::get( 'cacheType' ) ) ) {
|
|
wfCache::addHtaccessCode( 'add' );
|
|
}
|
|
|
|
if ( '1' === $opts['autoUpdate'] ) {
|
|
wfConfig::enableAutoUpdate();
|
|
} elseif ( '0' === $opts['autoUpdate'] ) {
|
|
wfConfig::disableAutoUpdate();
|
|
}
|
|
|
|
if ( isset( $opts['disableCodeExecutionUploads'] ) ) {
|
|
try {
|
|
if ( $opts['disableCodeExecutionUploads'] ) {
|
|
wfConfig::disableCodeExecutionForUploads();
|
|
} else {
|
|
wfConfig::removeCodeExecutionProtectionForUploads();
|
|
}
|
|
} catch ( wfConfig\Exception $e ) {
|
|
return array( 'error' => $e->getMessage() );
|
|
}
|
|
}
|
|
|
|
if ( isset( $opts['email_summary_enabled'] ) ) {
|
|
if ( ! empty( $opts['email_summary_enabled'] ) ) {
|
|
wfConfig::set( 'email_summary_enabled', 1 );
|
|
wfConfig::set( 'email_summary_interval', $opts['email_summary_interval'] );
|
|
wfConfig::set( 'email_summary_excluded_directories', $opts['email_summary_excluded_directories'] );
|
|
wfActivityReport::scheduleCronJob();
|
|
} else {
|
|
wfConfig::set( 'email_summary_enabled', 0 );
|
|
wfActivityReport::disableCronJob();
|
|
}
|
|
}
|
|
|
|
$sch = isset( $opts['scheduleScan'] ) ? $opts['scheduleScan'] : '';
|
|
if ( get_option( 'mainwp_child_wordfence_cron_time' ) !== $sch ) {
|
|
update_option( 'mainwp_child_wordfence_cron_time', $sch );
|
|
$sched = wp_next_scheduled( 'mainwp_child_wordfence_cron_scan' );
|
|
if ( false !== $sched ) {
|
|
wp_unschedule_event( $sched, 'mainwp_child_wordfence_cron_scan' );
|
|
}
|
|
}
|
|
|
|
$result['cacheType'] = wfConfig::get( 'cacheType' );
|
|
$result['paidKeyMsg'] = false;
|
|
$apiKey = trim( $_POST['apiKey'] );
|
|
if ( ! $apiKey ) { // Empty API key (after trim above), then try to get one.
|
|
$api = new wfAPI( '', wfUtils::getWPVersion() );
|
|
try {
|
|
$keyData = $api->call( 'get_anon_api_key' );
|
|
if ( $keyData['ok'] && $keyData['apiKey'] ) {
|
|
wfConfig::set( 'apiKey', $keyData['apiKey'] );
|
|
wfConfig::set( 'isPaid', 0 );
|
|
$result['apiKey'] = $keyData['apiKey'];
|
|
$result['isPaid'] = 0;
|
|
$reload = 'reload';
|
|
} else {
|
|
throw new \Exception( "We could not understand the Wordfence server's response because it did not contain an 'ok' and 'apiKey' element." );
|
|
}
|
|
} catch ( \Exception $e ) {
|
|
$result['error'] = 'Your options have been saved, but we encountered a problem. You left your API key blank, so we tried to get you a free API key from the Wordfence servers. However we encountered a problem fetching the free key: ' . htmlentities( $e->getMessage() );
|
|
|
|
return $result;
|
|
}
|
|
} elseif ( wfConfig::get( 'apiKey' ) !== $apiKey ) {
|
|
$api = new wfAPI( $apiKey, wfUtils::getWPVersion() );
|
|
try {
|
|
$res = $api->call( 'check_api_key', array(), array() );
|
|
if ( $res['ok'] && isset( $res['isPaid'] ) ) {
|
|
wfConfig::set( 'apiKey', $apiKey );
|
|
wfConfig::set( 'isPaid', $res['isPaid'] ); // res['isPaid'] is boolean coming back as JSON and turned back into PHP struct. Assuming JSON to PHP handles bools.
|
|
$result['apiKey'] = $apiKey;
|
|
$result['isPaid'] = $res['isPaid'];
|
|
if ( $res['isPaid'] ) {
|
|
$result['paidKeyMsg'] = true;
|
|
}
|
|
$reload = 'reload';
|
|
} else {
|
|
throw new \Exception( 'We could not understand the Wordfence API server reply when updating your API key.' );
|
|
}
|
|
} catch ( \Exception $e ) {
|
|
$result['error'] = 'Your options have been saved. However we noticed you changed your API key and we tried to verify it with the Wordfence servers and received an error: ' . htmlentities( $e->getMessage() );
|
|
|
|
return $result;
|
|
}
|
|
} else {
|
|
try {
|
|
$api = new wfAPI( $apiKey, wfUtils::getWPVersion() );
|
|
$res = $api->call( 'ping_api_key', array(), array() );
|
|
} catch ( \Exception $e ) {
|
|
$result['error'] = 'Your options have been saved. However we noticed you do not change your API key and we tried to verify it with the Wordfence servers and received an error: ' . htmlentities( $e->getMessage() );
|
|
|
|
return $result;
|
|
}
|
|
}
|
|
$result['ok'] = 1;
|
|
$result['reload'] = $reload;
|
|
|
|
return $result;
|
|
}
|
|
}
|
|
|
|
public function export_settings() {
|
|
|
|
$export = array();
|
|
|
|
// Basic Options.
|
|
$keys = wfConfig::getExportableOptionsKeys();
|
|
foreach ( $keys as $key ) {
|
|
$export[ $key ] = wfConfig::get( $key, '' );
|
|
}
|
|
|
|
// Serialized Options.
|
|
$export['scanSched'] = wfConfig::get_ser( 'scanSched', array() );
|
|
|
|
// Table-based Options.
|
|
$export['blocks'] = wfBlock::exportBlocks();
|
|
|
|
// Make the API call.
|
|
try {
|
|
$api = new wfAPI( wfConfig::get( 'apiKey' ), wfUtils::getWPVersion() );
|
|
$res = $api->call( 'export_options', array(), array( 'export' => wp_json_encode( $export ) ) );
|
|
if ( $res['ok'] && $res['token'] ) {
|
|
return array(
|
|
'ok' => 1,
|
|
'token' => $res['token'],
|
|
);
|
|
} elseif ( $res['err'] ) {
|
|
return array( 'errorExport' => __( 'An error occurred: ', 'wordfence' ) . $res['err'] );
|
|
} else {
|
|
throw new \Exception( __( 'Invalid response: ', 'wordfence' ) );
|
|
}
|
|
} catch ( \Exception $e ) {
|
|
return array( 'errorExport' => __( 'An error occurred: ', 'wordfence' ) . $e->getMessage() );
|
|
}
|
|
}
|
|
|
|
public function import_settings() {
|
|
$token = $_POST['token'];
|
|
try {
|
|
$api = new wfAPI( wfConfig::get( 'apiKey' ), wfUtils::getWPVersion() );
|
|
$res = $api->call( 'import_options', array(), array( 'token' => $token ) );
|
|
if ( $res['ok'] && $res['export'] ) {
|
|
$totalSet = 0;
|
|
$import = json_decode( $res['export'], true );
|
|
if ( ! is_array( $import ) ) {
|
|
return array( 'errorImport' => __( 'An error occurred: Invalid options format received.', 'wordfence' ) );
|
|
}
|
|
|
|
// Basic Options.
|
|
$keys = wfConfig::getExportableOptionsKeys();
|
|
$toSet = array();
|
|
foreach ( $keys as $key ) {
|
|
if ( isset( $import[ $key ] ) ) {
|
|
$toSet[ $key ] = $import[ $key ];
|
|
}
|
|
}
|
|
|
|
if ( count( $toSet ) ) {
|
|
$validation = wfConfig::validate( $toSet );
|
|
$skipped = array();
|
|
if ( true !== $validation ) {
|
|
foreach ( $validation as $error ) {
|
|
$skipped[ $error['option'] ] = $error['error'];
|
|
unset( $toSet[ $error['option'] ] );
|
|
}
|
|
}
|
|
|
|
$totalSet += count( $toSet );
|
|
wfConfig::save( wfConfig::clean( $toSet ) );
|
|
}
|
|
|
|
// Serialized Options.
|
|
if ( isset( $import['scanSched'] ) && is_array( $import['scanSched'] ) ) {
|
|
wfConfig::set_ser( 'scanSched', $import['scanSched'] );
|
|
wfScanner::shared()->scheduleScans();
|
|
$totalSet++;
|
|
}
|
|
|
|
// Table-based Options.
|
|
if ( isset( $import['blocks'] ) && is_array( $import['blocks'] ) ) {
|
|
wfBlock::importBlocks( $import['blocks'] );
|
|
$totalSet += count( $import['blocks'] );
|
|
}
|
|
|
|
return array(
|
|
'ok' => 1,
|
|
'totalSet' => $totalSet,
|
|
'settings' => $this->get_settings(),
|
|
);
|
|
} elseif ( $res['err'] ) {
|
|
return array( 'errorImport' => 'An error occurred: ' . $res['err'] );
|
|
} else {
|
|
throw new \Exception( 'Invalid response: ' );
|
|
}
|
|
} catch ( \Exception $e ) {
|
|
return array( 'errorImport' => 'An error occurred: ' . $e->getMessage() );
|
|
}
|
|
}
|
|
|
|
public function get_settings() {
|
|
$keys = wfConfig::getExportableOptionsKeys();
|
|
$settings = array();
|
|
foreach ( $keys as $key ) {
|
|
$settings[ $key ] = wfConfig::get( $key, '' );
|
|
}
|
|
$settings['apiKey'] = wfConfig::get( 'apiKey' );
|
|
$settings['isPaid'] = wfConfig::get( 'isPaid' );
|
|
return $settings;
|
|
}
|
|
|
|
public function ticker() {
|
|
$wfdb = new wfDB();
|
|
|
|
$serverTime = $wfdb->querySingle( 'select unix_timestamp()' );
|
|
|
|
$table_wfStatus = wfDB::networkTable( 'wfStatus' );
|
|
|
|
$jsonData = array(
|
|
'serverTime' => $serverTime,
|
|
'serverMicrotime' => microtime( true ),
|
|
'msg' => $wfdb->querySingle( "select msg from {$table_wfStatus} where level < 3 order by ctime desc limit 1" ),
|
|
);
|
|
|
|
$events = array();
|
|
$alsoGet = $_POST['alsoGet'];
|
|
if ( preg_match( '/^logList_(404|hit|human|ruser|crawler|gCrawler|loginLogout)$/', $alsoGet, $m ) ) {
|
|
$type = $m[1];
|
|
$newestEventTime = $_POST['otherParams'];
|
|
$listType = 'hits';
|
|
if ( 'loginLogout' === $type ) {
|
|
$listType = 'logins';
|
|
}
|
|
$events = wordfence::getLog()->getHits( $listType, $type, $newestEventTime );
|
|
} elseif ( 'perfStats' === $alsoGet ) {
|
|
$newestEventTime = $_POST['otherParams'];
|
|
$events = wordfence::getLog()->getPerfStats( $newestEventTime );
|
|
} elseif ( 'liveTraffic' == $alsoGet ) {
|
|
if ( get_site_option( 'wordfence_syncAttackDataAttempts' ) > 10 ) {
|
|
wordfence::syncAttackData( false );
|
|
}
|
|
$results = wordfence::ajax_loadLiveTraffic_callback();
|
|
$events = $results['data'];
|
|
if ( isset( $results['sql'] ) ) {
|
|
$jsonData['sql'] = $results['sql'];
|
|
}
|
|
}
|
|
$jsonData['events'] = $events;
|
|
$jsonData['alsoGet'] = $alsoGet; // send it back so we don't load data if panel has changed!
|
|
$jsonData['cacheType'] = wfConfig::get( 'cacheType' );
|
|
return $jsonData;
|
|
}
|
|
|
|
public static function load_live_traffic() {
|
|
$wfdb = new wfDB();
|
|
$serverTime = $wfdb->querySingle( 'select unix_timestamp()' );
|
|
$return = wordfence::ajax_loadLiveTraffic_callback();
|
|
$return['serverTime'] = $serverTime;
|
|
$return['serverMicrotime'] = microtime( true );
|
|
return $return;
|
|
}
|
|
|
|
public function whitelist_waf_param_key() {
|
|
$return = wordfence::ajax_whitelistWAFParamKey_callback();
|
|
return $return;
|
|
}
|
|
|
|
public function hide_file_htaccess() {
|
|
$return = wordfence::ajax_hideFileHtaccess_callback();
|
|
return $return;
|
|
}
|
|
|
|
public static function fix_fpd() {
|
|
$return = wordfence::ajax_fixFPD_callback();
|
|
return $return;
|
|
}
|
|
|
|
public static function disable_directory_listing() {
|
|
$return = wordfence::ajax_disableDirectoryListing_callback();
|
|
return $return;
|
|
}
|
|
|
|
public static function delete_database_option() {
|
|
$return = wordfence::ajax_deleteDatabaseOption_callback();
|
|
return $return;
|
|
}
|
|
|
|
public static function mis_configured_how_get_ips_choice() {
|
|
$return = wordfence::ajax_misconfiguredHowGetIPsChoice_callback();
|
|
return $return;
|
|
}
|
|
|
|
public static function delete_admin_user() {
|
|
$return = wordfence::ajax_deleteAdminUser_callback();
|
|
return $return;
|
|
}
|
|
|
|
public static function revoke_admin_user() {
|
|
$return = wordfence::ajax_revokeAdminUser_callback();
|
|
return $return;
|
|
}
|
|
|
|
public static function clear_all_blocked() {
|
|
$return = wordfence::ajax_clearAllBlocked_callback();
|
|
return $return;
|
|
}
|
|
|
|
public static function permanently_block_all_ips() {
|
|
$return = wordfence::ajax_permanentlyBlockAllIPs_callback();
|
|
return $return;
|
|
}
|
|
|
|
public static function unlock_out_ip() {
|
|
$return = wordfence::ajax_unlockOutIP_callback();
|
|
return $return;
|
|
}
|
|
|
|
public static function unblock_range() {
|
|
$return = wordfence::ajax_unblockRange_callback();
|
|
return $return;
|
|
}
|
|
|
|
public static function block_ip_ua_range() {
|
|
$return = wordfence::ajax_blockIPUARange_callback();
|
|
return $return;
|
|
}
|
|
|
|
public static function load_block_ranges() {
|
|
$return = wordfence::ajax_loadBlockRanges_callback();
|
|
return $return;
|
|
}
|
|
|
|
public static function save_waf_config() {
|
|
$return = wordfence::ajax_saveWAFConfig_callback();
|
|
if ( is_array( $return ) && isset( $return['data'] ) ) {
|
|
$return['learningModeGracePeriod'] = wfWAF::getInstance()->getStorageEngine()->getConfig( 'learningModeGracePeriod' );
|
|
}
|
|
return $return;
|
|
}
|
|
|
|
public static function whitelist_bulk_delete() {
|
|
$return = wordfence::ajax_whitelistBulkDelete_callback();
|
|
return $return;
|
|
}
|
|
|
|
public static function whitelist_bulk_enable() {
|
|
$return = wordfence::ajax_whitelistBulkEnable_callback();
|
|
return $return;
|
|
}
|
|
|
|
public static function whitelist_bulk_disable() {
|
|
$return = wordfence::ajax_whitelistBulkDisable_callback();
|
|
return $return;
|
|
}
|
|
public static function update_config() {
|
|
$return = wordfence::ajax_updateConfig_callback();
|
|
return $return;
|
|
}
|
|
|
|
private static function get_waf_data( $updated = null ) {
|
|
if ( ! class_exists( 'wfWAF' ) ) {
|
|
return false;
|
|
}
|
|
|
|
$data['learningMode'] = wfWAF::getInstance()->isInLearningMode();
|
|
$data['rules'] = wfWAF::getInstance()->getRules();
|
|
/** @var wfWAFRule $rule */
|
|
foreach ( $data['rules'] as $ruleID => $rule ) {
|
|
$data['rules'][ $ruleID ] = $rule->toArray();
|
|
}
|
|
|
|
$whitelistedURLParams = wfWAF::getInstance()->getStorageEngine()->getConfig( 'whitelistedURLParams', array() );
|
|
$data['whitelistedURLParams'] = array();
|
|
foreach ( $whitelistedURLParams as $urlParamKey => $rules ) {
|
|
list( $path, $paramKey ) = explode( '|', $urlParamKey );
|
|
$whitelistData = null;
|
|
foreach ( $rules as $ruleID => $whitelistedData ) {
|
|
if ( null === $whitelistData ) {
|
|
$whitelistData = $whitelistedData;
|
|
continue;
|
|
}
|
|
if ( 'all' === $ruleID ) {
|
|
$whitelistData = $whitelistedData;
|
|
break;
|
|
}
|
|
}
|
|
|
|
if ( is_array( $whitelistData ) && array_key_exists( 'userID', $whitelistData ) && function_exists( 'get_user_by' ) ) {
|
|
$user = get_user_by( 'id', $whitelistData['userID'] );
|
|
if ( $user ) {
|
|
$whitelistData['username'] = $user->user_login;
|
|
}
|
|
}
|
|
|
|
$data['whitelistedURLParams'][] = array(
|
|
'path' => $path,
|
|
'paramKey' => $paramKey,
|
|
'ruleID' => array_keys( $rules ),
|
|
'data' => $whitelistData,
|
|
);
|
|
}
|
|
|
|
$data['disabledRules'] = (array) wfWAF::getInstance()->getStorageEngine()->getConfig( 'disabledRules' );
|
|
$lastUpdated = wfWAF::getInstance()->getStorageEngine()->getConfig( 'rulesLastUpdated' );
|
|
if ( $lastUpdated ) {
|
|
$data['rulesLastUpdated'] = $lastUpdated;
|
|
}
|
|
$data['isPaid'] = (bool) wfConfig::get( 'isPaid', 0 );
|
|
|
|
if ( null !== $updated ) {
|
|
$data['updated'] = (bool) $updated;
|
|
}
|
|
return $data;
|
|
}
|
|
|
|
|
|
public function reverse_lookup() {
|
|
$ips = explode( ',', $_POST['ips'] );
|
|
$res = array();
|
|
foreach ( $ips as $ip ) {
|
|
$res[ $ip ] = wfUtils::reverseLookup( $ip );
|
|
}
|
|
|
|
return array(
|
|
'ok' => 1,
|
|
'ips' => $res,
|
|
);
|
|
}
|
|
|
|
|
|
public function save_options() {
|
|
$changes = json_decode( stripslashes( $_POST['changes'] ), true );
|
|
if ( ! empty( $_POST['changes'] ) && false !== $changes ) {
|
|
try {
|
|
if ( is_array( $changes ) && isset( $changes['whitelistedURLParams'] ) && isset( $changes['whitelistedURLParams']['add'] ) ) {
|
|
$user = wp_get_current_user();
|
|
foreach ( $changes['whitelistedURLParams']['add'] as $key => &$value ) :
|
|
if ( isset( $value['data'] ) ) {
|
|
|
|
if ( isset( $value['data']['userID'] ) ) {
|
|
$value['data']['userID'] = $user->ID;
|
|
}
|
|
if ( isset( $value['data']['username'] ) ) {
|
|
$value['data']['username'] = $user->user_login;
|
|
}
|
|
}
|
|
endforeach;
|
|
}
|
|
|
|
$errors = wfConfig::validate( $changes );
|
|
|
|
if ( true !== $errors ) {
|
|
if ( count( $errors ) == 1 ) {
|
|
return array(
|
|
'error' => sprintf( __( 'An error occurred while saving the configuration: %s', 'wordfence' ), $errors[0]['error'] ),
|
|
);
|
|
} elseif ( count( $errors ) > 1 ) {
|
|
$compoundMessage = array();
|
|
foreach ( $errors as $e ) {
|
|
$compoundMessage[] = $e['error'];
|
|
}
|
|
return array(
|
|
'error' => sprintf( __( 'Errors occurred while saving the configuration: %s', 'wordfence' ), implode( ', ', $compoundMessage ) ),
|
|
);
|
|
}
|
|
|
|
return array(
|
|
'error' => __( 'Errors occurred while saving the configuration.', 'wordfence' ),
|
|
);
|
|
}
|
|
|
|
wfConfig::save( $changes );
|
|
return array( 'success' => true );
|
|
} catch ( wfWAFStorageFile\Exception $e ) {
|
|
return array(
|
|
'error' => __( 'An error occurred while saving the configuration.', 'wordfence' ),
|
|
);
|
|
} catch ( \Exception $e ) {
|
|
return array(
|
|
'error' => $e->getMessage(),
|
|
);
|
|
}
|
|
}
|
|
|
|
return array(
|
|
'error' => __( 'No configuration changes were provided to save.', 'wordfence' ),
|
|
);
|
|
}
|
|
|
|
public function ajax_get_blocks_callback() {
|
|
$information = wordfence::ajax_getBlocks_callback();
|
|
return $information;
|
|
}
|
|
|
|
public function ajax_create_block_callback() {
|
|
return wordfence::ajax_createBlock_callback();
|
|
}
|
|
|
|
public static function ajax_delete_blocks_callback() {
|
|
$information = wordfence::ajax_deleteBlocks_callback();
|
|
return $information;
|
|
}
|
|
|
|
public static function ajax_make_permanent_blocks_callback() {
|
|
$information = wordfence::ajax_makePermanentBlocks_callback();
|
|
return $information;
|
|
}
|
|
|
|
public function ajax_block_ip_callback() {
|
|
return wordfence::ajax_blockIP_callback();
|
|
}
|
|
|
|
public function whois() {
|
|
return wordfence::ajax_whois_callback();
|
|
}
|
|
|
|
public function unblock_ip() {
|
|
if ( isset( $_POST['IP'] ) ) {
|
|
$IP = $_POST['IP'];
|
|
wfBlock::unblockIP( $IP );
|
|
return array( 'success' => 1 );
|
|
}
|
|
}
|
|
|
|
public static function save_country_blocking() {
|
|
if ( ! wfConfig::get( 'isPaid' ) ) {
|
|
return array( 'error' => 'Sorry but this feature is only available for paid customers.' );
|
|
}
|
|
$settings = $_POST['settings'];
|
|
wfConfig::set( 'cbl_action', $settings['blockAction'] );
|
|
wfConfig::set( 'cbl_countries', $settings['codes'] );
|
|
wfConfig::set( 'cbl_redirURL', $settings['redirURL'] );
|
|
wfConfig::set( 'cbl_loggedInBlocked', $settings['loggedInBlocked'] );
|
|
wfConfig::set( 'cbl_loginFormBlocked', $settings['loginFormBlocked'] );
|
|
wfConfig::set( 'cbl_restOfSiteBlocked', $settings['restOfSiteBlocked'] );
|
|
wfConfig::set( 'cbl_bypassRedirURL', $settings['bypassRedirURL'] );
|
|
wfConfig::set( 'cbl_bypassRedirDest', $settings['bypassRedirDest'] );
|
|
wfConfig::set( 'cbl_bypassViewURL', $settings['bypassViewURL'] );
|
|
return array( 'ok' => 1 );
|
|
}
|
|
|
|
public function load_static_panel() {
|
|
$mode = $_POST['mode'];
|
|
$wfLog = wordfence::getLog();
|
|
if ( 'topScanners' === $mode || 'topLeechers' === $mode ) {
|
|
$results = $wfLog->getLeechers( $mode );
|
|
} elseif ( 'blockedIPs' === $mode ) {
|
|
$results = $wfLog->getBlockedIPs();
|
|
} elseif ( 'lockedOutIPs' === $mode ) {
|
|
$results = $wfLog->getLockedOutIPs();
|
|
} elseif ( 'throttledIPs' === $mode ) {
|
|
$results = $wfLog->getThrottledIPs();
|
|
}
|
|
|
|
return array(
|
|
'ok' => 1,
|
|
'results' => $results,
|
|
);
|
|
}
|
|
|
|
public function downgrade_license() {
|
|
$api = new wfAPI( '', wfUtils::getWPVersion() );
|
|
$return = array();
|
|
try {
|
|
$keyData = $api->call( 'get_anon_api_key' );
|
|
if ( $keyData['ok'] && $keyData['apiKey'] ) {
|
|
wfConfig::set( 'apiKey', $keyData['apiKey'] );
|
|
wfConfig::set( 'isPaid', 0 );
|
|
$return['apiKey'] = $keyData['apiKey'];
|
|
$return['isPaid'] = 0;
|
|
// When downgrading we must disable all two factor authentication because it can lock an admin out if we don't.
|
|
wfConfig::set_ser( 'twoFactorUsers', array() );
|
|
} else {
|
|
throw new \Exception( 'Could not understand the response we received from the Wordfence servers when applying for a free API key.' );
|
|
}
|
|
} catch ( \Exception $e ) {
|
|
$return['errorMsg'] = 'Could not fetch free API key from Wordfence: ' . htmlentities( $e->getMessage() );
|
|
|
|
return $return;
|
|
}
|
|
$return['ok'] = 1;
|
|
|
|
return $return;
|
|
}
|
|
|
|
public static function save_cache_config() {
|
|
$noEditHtaccess = '1';
|
|
if ( isset( $_POST['needToCheckFalconHtaccess'] ) && ! empty( $_POST['needToCheckFalconHtaccess'] ) ) {
|
|
$checkHtaccess = self::check_falcon_htaccess();
|
|
if ( isset( $checkHtaccess['ok'] ) ) {
|
|
$noEditHtaccess = '0';
|
|
}
|
|
} elseif ( isset( $_POST['noEditHtaccess'] ) ) {
|
|
$noEditHtaccess = $_POST['noEditHtaccess'];
|
|
}
|
|
|
|
$cacheType = $_POST['cacheType'];
|
|
if ( 'falcon' == $cacheType || 'php' == $cacheType ) {
|
|
$plugins = get_plugins();
|
|
$badPlugins = array();
|
|
foreach ( $plugins as $pluginFile => $data ) {
|
|
if ( is_plugin_active( $pluginFile ) ) {
|
|
if ( 'w3-total-cache/w3-total-cache.php' == $pluginFile ) {
|
|
$badPlugins[] = 'W3 Total Cache';
|
|
} elseif ( 'quick-cache/quick-cache.php' == $pluginFile ) {
|
|
$badPlugins[] = 'Quick Cache';
|
|
} elseif ( 'wp-super-cache/wp-cache.php' == $pluginFile ) {
|
|
$badPlugins[] = 'WP Super Cache';
|
|
} elseif ( 'wp-fast-cache/wp-fast-cache.php' == $pluginFile ) {
|
|
$badPlugins[] = 'WP Fast Cache';
|
|
} elseif ( 'wp-fastest-cache/wpFastestCache.php' == $pluginFile ) {
|
|
$badPlugins[] = 'WP Fastest Cache';
|
|
}
|
|
}
|
|
}
|
|
if ( count( $badPlugins ) > 0 ) {
|
|
return array( 'errorMsg' => 'You can not enable caching in Wordfence with other caching plugins enabled. This may cause conflicts. You need to disable other caching plugins first. Wordfence caching is very fast and does not require other caching plugins to be active. The plugins you have that conflict are: ' . implode( ', ', $badPlugins ) . '. Disable these plugins, then return to this page and enable Wordfence caching.' );
|
|
}
|
|
$siteURL = site_url();
|
|
if ( preg_match( '/^https?:\/\/[^\/]+\/[^\/]+\/[^\/]+\/.+/i', $siteURL ) ) {
|
|
return array( 'errorMsg' => "Wordfence caching currently does not support sites that are installed in a subdirectory and have a home page that is more than 2 directory levels deep. e.g. we don't support sites who's home page is http://example.com/levelOne/levelTwo/levelThree" );
|
|
}
|
|
}
|
|
if ( 'falcon' == $cacheType ) {
|
|
if ( ! get_option( 'permalink_structure', '' ) ) {
|
|
return array( 'errorMsg' => 'You need to enable Permalinks for your site to use Falcon Engine. You can enable Permalinks in WordPress by going to the Settings - Permalinks menu and enabling it there. Permalinks change your site URL structure from something that looks like /p=123 to pretty URLs like /my-new-post-today/ that are generally more search engine friendly.' );
|
|
}
|
|
}
|
|
$warnHtaccess = false;
|
|
if ( 'disable' == $cacheType || 'php' == $cacheType ) {
|
|
$removeError = wfCache::addHtaccessCode( 'remove' );
|
|
$removeError2 = wfCache::updateBlockedIPs( 'remove' );
|
|
if ( $removeError || $removeError2 ) {
|
|
$warnHtaccess = true;
|
|
}
|
|
}
|
|
if ( 'php' == $cacheType || 'falcon' == $cacheType ) {
|
|
$err = wfCache::cacheDirectoryTest();
|
|
if ( $err ) {
|
|
return array(
|
|
'ok' => 1,
|
|
'heading' => 'Could not write to cache directory',
|
|
'body' => "To enable caching, Wordfence needs to be able to create and write to the /wp-content/wfcache/ directory. We did some tests that indicate this is not possible. You need to manually create the /wp-content/wfcache/ directory and make it writable by Wordfence. The error we encountered was during our tests was: $err",
|
|
);
|
|
}
|
|
}
|
|
|
|
// Mainly we clear the cache here so that any footer cache diagnostic comments are rebuilt. We could just leave it intact unless caching is being disabled.
|
|
if ( wfConfig::get( 'cacheType', false ) != $cacheType ) {
|
|
wfCache::scheduleCacheClear();
|
|
}
|
|
$htMsg = '';
|
|
if ( $warnHtaccess ) {
|
|
$htMsg = " <strong style='color: #F00;'>Warning: We could not remove the caching code from your .htaccess file. you need to remove this manually yourself.</strong> ";
|
|
}
|
|
if ( 'disable' == $cacheType ) {
|
|
wfConfig::set( 'cacheType', false );
|
|
return array(
|
|
'ok' => 1,
|
|
'heading' => 'Caching successfully disabled.',
|
|
'body' => "{$htMsg}Caching has been disabled on your system.<br /><br /><center><input type='button' name='wfReload' value='Click here now to refresh this page' onclick='window.location.reload(true);' /></center>",
|
|
);
|
|
} elseif ( 'php' == $cacheType ) {
|
|
wfConfig::set( 'cacheType', 'php' );
|
|
return array(
|
|
'ok' => 1,
|
|
'heading' => 'Wordfence Basic Caching Enabled',
|
|
'body' => "{$htMsg}Wordfence basic caching has been enabled on your system.<br /><br /><center><input type='button' name='wfReload' value='Click here now to refresh this page' onclick='window.location.reload(true);' /></center>",
|
|
);
|
|
} elseif ( 'falcon' == $cacheType ) {
|
|
if ( '1' != $noEditHtaccess ) {
|
|
$err = wfCache::addHtaccessCode( 'add' );
|
|
if ( $err ) {
|
|
return array(
|
|
'ok' => 1,
|
|
'heading' => 'Wordfence could not edit .htaccess',
|
|
'body' => 'Wordfence could not edit your .htaccess code. The error was: ' . $err,
|
|
);
|
|
}
|
|
}
|
|
wfConfig::set( 'cacheType', 'falcon' );
|
|
wfCache::scheduleUpdateBlockedIPs(); // Runs every 5 mins until we change cachetype.
|
|
return array(
|
|
'ok' => 1,
|
|
'heading' => 'Wordfence Falcon Engine Activated!',
|
|
'body' => "Wordfence Falcon Engine has been activated on your system. You will see this icon appear on the Wordfence admin pages as long as Falcon is active indicating your site is running in high performance mode:<div class='wfFalconImage'></div><center><input type='button' name='wfReload' value='Click here now to refresh this page' onclick='window.location.reload(true);' /></center>",
|
|
);
|
|
}
|
|
return array( 'errorMsg' => 'An error occurred.' );
|
|
}
|
|
|
|
public static function check_falcon_htaccess() {
|
|
if ( wfUtils::isNginx() ) {
|
|
return array( 'nginx' => 1 );
|
|
}
|
|
$file = wfCache::getHtaccessPath();
|
|
if ( ! $file ) {
|
|
return array(
|
|
'err' => 'We could not find your .htaccess file to modify it.',
|
|
'code' => wfCache::getHtaccessCode(),
|
|
);
|
|
}
|
|
$fh = fopen( $file, 'r+' );
|
|
if ( ! $fh ) {
|
|
$err = error_get_last();
|
|
return array(
|
|
'err' => 'We found your .htaccess file but could not open it for writing: ' . $err['message'],
|
|
'code' => wfCache::getHtaccessCode(),
|
|
);
|
|
}
|
|
$download_url = admin_url( 'admin-ajax.php' ) . '?action=mainwp_wordfence_download_htaccess&_wpnonce=' . MainWP_Utility::create_nonce_without_session( 'mainwp_download_htaccess' );
|
|
return array(
|
|
'ok' => 1,
|
|
'download_url' => $download_url,
|
|
);
|
|
}
|
|
|
|
public static function check_htaccess() {
|
|
if ( wfUtils::isNginx() ) {
|
|
return array( 'nginx' => 1 );
|
|
}
|
|
$file = wfCache::getHtaccessPath();
|
|
if ( ! $file ) {
|
|
return array( 'err' => 'We could not find your .htaccess file to modify it.' );
|
|
}
|
|
$fh = fopen( $file, 'r+' );
|
|
if ( ! $fh ) {
|
|
$err = error_get_last();
|
|
return array( 'err' => 'We found your .htaccess file but could not open it for writing: ' . $err['message'] );
|
|
}
|
|
return array( 'ok' => 1 );
|
|
}
|
|
|
|
public static function download_htaccess() {
|
|
if ( ! isset( $_GET['_wpnonce'] ) || empty( $_GET['_wpnonce'] ) ) {
|
|
die( '-1' );
|
|
}
|
|
|
|
if ( ! MainWP_Utility::verify_nonce_without_session( $_GET['_wpnonce'], 'mainwp_download_htaccess' ) ) {
|
|
die( '-2' );
|
|
}
|
|
|
|
$url = site_url();
|
|
$url = preg_replace( '/^https?:\/\//i', '', $url );
|
|
$url = preg_replace( '/[^a-zA-Z0-9\.]+/', '_', $url );
|
|
$url = preg_replace( '/^_+/', '', $url );
|
|
$url = preg_replace( '/_+$/', '', $url );
|
|
header( 'Content-Type: application/octet-stream' );
|
|
header( 'Content-Disposition: attachment; filename="htaccess_Backup_for_' . $url . '.txt"' );
|
|
$file = wfCache::getHtaccessPath();
|
|
readfile( $file );
|
|
die();
|
|
}
|
|
|
|
public static function save_cache_options() {
|
|
$changed = false;
|
|
if ( wfConfig::get( 'allowHTTPSCaching', false ) != $_POST['allowHTTPSCaching'] ) {
|
|
$changed = true;
|
|
}
|
|
wfConfig::set( 'allowHTTPSCaching', '1' == $_POST['allowHTTPSCaching'] ? 1 : 0 );
|
|
wfConfig::set( 'clearCacheSched', 1 == $_POST['clearCacheSched'] ? '1' : 0 );
|
|
if ( $changed && wfConfig::get( 'cacheType', false ) == 'falcon' ) {
|
|
$err = wfCache::addHtaccessCode( 'add' );
|
|
if ( $err ) {
|
|
return array(
|
|
'updateErr' => 'Wordfence could not edit your .htaccess file. The error was: ' . $err,
|
|
'code' => wfCache::getHtaccessCode(),
|
|
);
|
|
}
|
|
}
|
|
wfCache::scheduleCacheClear();
|
|
return array( 'ok' => 1 );
|
|
}
|
|
|
|
public static function clear_page_cache() {
|
|
$stats = wfCache::clearPageCache();
|
|
if ( $stats['error'] ) {
|
|
$body = 'A total of ' . $stats['totalErrors'] . ' errors occurred while trying to clear your cache. The last error was: ' . $stats['error'];
|
|
return array(
|
|
'ok' => 1,
|
|
'heading' => 'Error occurred while clearing cache',
|
|
'body' => $body,
|
|
);
|
|
}
|
|
$body = 'A total of ' . $stats['filesDeleted'] . ' files were deleted and ' . $stats['dirsDeleted'] . ' directories were removed. We cleared a total of ' . $stats['totalData'] . 'KB of data in the cache.';
|
|
if ( $stats['totalErrors'] > 0 ) {
|
|
$body .= ' A total of ' . $stats['totalErrors'] . ' errors were encountered. This probably means that we could not remove some of the files or directories in the cache. Please use your CPanel or file manager to remove the rest of the files in the directory: ' . WP_CONTENT_DIR . '/wfcache/';
|
|
}
|
|
return array(
|
|
'ok' => 1,
|
|
'heading' => 'Page Cache Cleared',
|
|
'body' => $body,
|
|
);
|
|
}
|
|
|
|
public static function get_cache_stats() {
|
|
$s = wfCache::getCacheStats();
|
|
if ( 0 == $s['files'] ) {
|
|
return array(
|
|
'ok' => 1,
|
|
'heading' => 'Cache Stats',
|
|
'body' => 'The cache is currently empty. It may be disabled or it may have been recently cleared.',
|
|
);
|
|
}
|
|
$body = 'Total files in cache: ' . $s['files'] .
|
|
'<br />Total directories in cache: ' . $s['dirs'] .
|
|
'<br />Total data: ' . $s['data'] . 'KB';
|
|
if ( $s['compressedFiles'] > 0 ) {
|
|
$body .= '<br />Files: ' . $s['uncompressedFiles'] .
|
|
'<br />Data: ' . $s['uncompressedKBytes'] . 'KB' .
|
|
'<br />Compressed files: ' . $s['compressedFiles'] .
|
|
'<br />Compressed data: ' . $s['compressedKBytes'] . 'KB';
|
|
}
|
|
if ( $s['largestFile'] > 0 ) {
|
|
$body .= '<br />Largest file: ' . $s['largestFile'] . 'KB';
|
|
}
|
|
if ( false !== $s['oldestFile'] ) {
|
|
$body .= '<br />Oldest file in cache created ';
|
|
if ( time() - $s['oldestFile'] < 300 ) {
|
|
$body .= ( time() - $s['oldestFile'] ) . ' seconds ago';
|
|
} else {
|
|
$body .= human_time_diff( $s['oldestFile'] ) . ' ago.';
|
|
}
|
|
}
|
|
if ( false !== $s['newestFile'] ) {
|
|
$body .= '<br />Newest file in cache created ';
|
|
if ( time() - $s['newestFile'] < 300 ) {
|
|
$body .= ( time() - $s['newestFile'] ) . ' seconds ago';
|
|
} else {
|
|
$body .= human_time_diff( $s['newestFile'] ) . ' ago.';
|
|
}
|
|
}
|
|
|
|
return array(
|
|
'ok' => 1,
|
|
'heading' => 'Cache Stats',
|
|
'body' => $body,
|
|
);
|
|
}
|
|
|
|
public static function add_cache_exclusion() {
|
|
$ex = wfConfig::get( 'cacheExclusions', false );
|
|
if ( $ex ) {
|
|
$ex = unserialize( $ex ); // phpcs:ignore -- third party credit.
|
|
} else {
|
|
$ex = array();
|
|
}
|
|
if ( isset( $_POST['cacheExclusions'] ) ) {
|
|
$ex = $_POST['cacheExclusions'];
|
|
} else {
|
|
$ex[] = array(
|
|
'pt' => $_POST['patternType'],
|
|
'p' => $_POST['pattern'],
|
|
'id' => $_POST['id'],
|
|
);
|
|
}
|
|
wfConfig::set( 'cacheExclusions', serialize( $ex ) ); // phpcs:ignore -- third party credit.
|
|
wfCache::scheduleCacheClear();
|
|
if ( wfConfig::get( 'cacheType', false ) == 'falcon' && preg_match( '/^(?:uac|uaeq|cc)$/', $_POST['patternType'] ) ) {
|
|
if ( wfCache::addHtaccessCode( 'add' ) ) {
|
|
return array(
|
|
'errorMsg' => 'We added the rule you requested but could not modify your .htaccess file. Please delete this rule, check the permissions on your .htaccess file and then try again.',
|
|
'ex' => $ex,
|
|
);
|
|
}
|
|
}
|
|
return array(
|
|
'ok' => 1,
|
|
'ex' => $ex,
|
|
);
|
|
}
|
|
|
|
public static function load_cache_exclusions() {
|
|
$ex = wfConfig::get( 'cacheExclusions', false );
|
|
if ( ! $ex ) {
|
|
return array( 'ex' => false );
|
|
}
|
|
$ex = unserialize( $ex ); // phpcs:ignore -- third party credit.
|
|
return array(
|
|
'ok' => 1,
|
|
'ex' => $ex,
|
|
);
|
|
}
|
|
|
|
public static function remove_cache_exclusion() {
|
|
$id = $_POST['id'];
|
|
$ex = wfConfig::get( 'cacheExclusions', false );
|
|
if ( ! $ex ) {
|
|
return array( 'ok' => 1 );
|
|
}
|
|
$ex = unserialize( $ex ); // phpcs:ignore -- third party credit.
|
|
$rewriteHtaccess = false;
|
|
$removed = false;
|
|
$count_ex = count( $ex );
|
|
for ( $i = 0; $i < $count_ex; $i++ ) {
|
|
if ( (string) $ex[ $i ]['id'] == (string) $id ) {
|
|
if ( wfConfig::get( 'cacheType', false ) == 'falcon' && preg_match( '/^(?:uac|uaeq|cc)$/', $ex[ $i ]['pt'] ) ) {
|
|
$rewriteHtaccess = true;
|
|
}
|
|
array_splice( $ex, $i, 1 );
|
|
// Dont break in case of dups!
|
|
$removed = true;
|
|
}
|
|
}
|
|
$return = array( 'ex' => $ex );
|
|
if ( ! $removed ) {
|
|
$return['error'] = 'Not found the cache exclusion.';
|
|
return $return;
|
|
}
|
|
|
|
wfConfig::set( 'cacheExclusions', serialize( $ex ) ); // phpcs:ignore -- third party credit.
|
|
if ( $rewriteHtaccess && wfCache::addHtaccessCode( 'add' ) ) {
|
|
$return['errorMsg'] = "We removed that rule but could not rewrite your .htaccess file. You're going to have to manually remove this rule from your .htaccess file. Please reload this page now.";
|
|
return $return;
|
|
}
|
|
|
|
$return['ok'] = 1;
|
|
return $return;
|
|
}
|
|
|
|
public function get_diagnostics() {
|
|
|
|
$diagnostic = new wfDiagnostic();
|
|
$plugins = get_plugins();
|
|
$activePlugins = array_flip( get_option( 'active_plugins' ) );
|
|
$activeNetworkPlugins = is_multisite() ? array_flip( wp_get_active_network_plugins() ) : array();
|
|
$muPlugins = get_mu_plugins();
|
|
$themes = wp_get_themes();
|
|
$currentTheme = wp_get_theme();
|
|
$cols = 3;
|
|
|
|
$w = new wfConfig();
|
|
|
|
$inEmail = false;
|
|
ob_start();
|
|
|
|
?>
|
|
<div id="wf-diagnostics">
|
|
<form id="wfConfigForm" style="overflow-x: auto;">
|
|
<?php
|
|
foreach ( $diagnostic->getResults() as $title => $tests ) :
|
|
$key = sanitize_key( 'wf-diagnostics-' . $title );
|
|
$hasFailingTest = false;
|
|
foreach ( $tests['results'] as $result ) {
|
|
if ( ! $result['test'] ) {
|
|
$hasFailingTest = true;
|
|
break;
|
|
}
|
|
}
|
|
|
|
if ( $inEmail ) :
|
|
?>
|
|
<table>
|
|
<thead>
|
|
<tr>
|
|
<th colspan="<?php echo $cols; ?>"><?php echo esc_html( __( $title, 'wordfence' ) ); ?></th>
|
|
</tr>
|
|
</thead>
|
|
<tbody>
|
|
<?php foreach ( $tests['results'] as $result ) : ?>
|
|
<tr>
|
|
<td style="width: 75%;" colspan="<?php echo $cols - 1; ?>">
|
|
<?php
|
|
echo wp_kses(
|
|
$result['label'],
|
|
array(
|
|
'code' => array(),
|
|
'strong' => array(),
|
|
'em' => array(),
|
|
'a' => array( 'href' => true ),
|
|
)
|
|
);
|
|
?>
|
|
</td>
|
|
<td>
|
|
<?php if ( $result['test'] ) : ?>
|
|
<div class="wf-result-success"><?php echo esc_html( $result['message'] ); ?></div>
|
|
<?php else : ?>
|
|
<div class="wf-result-error"><?php echo esc_html( $result['message'] ); ?></div>
|
|
<?php endif; ?>
|
|
</td>
|
|
</tr>
|
|
<?php endforeach; ?>
|
|
</tbody>
|
|
</table>
|
|
<?php else : ?>
|
|
<div class="wf-block <?php echo ( wfPersistenceController::shared()->isActive( $key ) ? ' wf-active' : '' ) . ( $hasFailingTest ? ' wf-diagnostic-fail' : '' ); ?>" data-persistence-key="<?php echo esc_attr( $key ); ?>">
|
|
<div class="wf-block-header">
|
|
<div class="wf-block-header-content">
|
|
<div class="wf-block-title">
|
|
<strong><?php echo esc_html( __( $title, 'wordfence' ) ); ?></strong>
|
|
<span class="wf-text-small"><?php echo esc_html( __( $tests['description'], 'wordfence' ) ); ?></span>
|
|
</div>
|
|
<div class="wf-block-header-action">
|
|
<div class="wf-block-header-action-disclosure"></div>
|
|
</div>
|
|
</div>
|
|
</div>
|
|
<div class="wf-block-content wf-clearfix">
|
|
<ul class="wf-block-list">
|
|
<?php foreach ( $tests['results'] as $result ) : ?>
|
|
<li>
|
|
<div style="width: 75%;" colspan="<?php echo $cols - 1; ?>">
|
|
<?php
|
|
echo wp_kses(
|
|
$result['label'],
|
|
array(
|
|
'code' => array(),
|
|
'strong' => array(),
|
|
'em' => array(),
|
|
'a' => array( 'href' => true ),
|
|
)
|
|
);
|
|
?>
|
|
</div>
|
|
<?php if ( $result['test'] ) : ?>
|
|
<div class="wf-result-success"><?php echo esc_html( $result['message'] ); ?></div>
|
|
<?php else : ?>
|
|
<div class="wf-result-error"><?php echo esc_html( $result['message'] ); ?></div>
|
|
<?php endif; ?>
|
|
</li>
|
|
<?php endforeach; ?>
|
|
</ul>
|
|
</div>
|
|
</div>
|
|
<?php endif; ?>
|
|
<?php endforeach; ?>
|
|
<?php
|
|
$howGet = wfConfig::get( 'howGetIPs', false );
|
|
list( $currentIP, $currentServerVarForIP ) = wfUtils::getIPAndServerVariable();
|
|
$howGetHasErrors = false;
|
|
foreach ( array(
|
|
'REMOTE_ADDR' => 'REMOTE_ADDR',
|
|
'HTTP_CF_CONNECTING_IP' => 'CF-Connecting-IP',
|
|
'HTTP_X_REAL_IP' => 'X-Real-IP',
|
|
'HTTP_X_FORWARDED_FOR' => 'X-Forwarded-For',
|
|
) as $variable => $label ) {
|
|
if ( ! ( $currentServerVarForIP && $currentServerVarForIP === $variable ) && $howGet === $variable ) {
|
|
$howGetHasErrors = true;
|
|
break;
|
|
}
|
|
}
|
|
?>
|
|
<div class="wf-block<?php echo ( $howGetHasErrors ? ' wf-diagnostic-fail' : '' ) . ( wfPersistenceController::shared()->isActive( 'wf-diagnostics-client-ip' ) ? ' wf-active' : '' ); ?>" data-persistence-key="<?php echo esc_attr( 'wf-diagnostics-client-ip' ); ?>">
|
|
<div class="wf-block-header">
|
|
<div class="wf-block-header-content">
|
|
<div class="wf-block-title">
|
|
<strong><?php esc_html_e( 'IP Detection', 'wordfence' ); ?></strong>
|
|
<span class="wf-text-small"><?php esc_html_e( 'Methods of detecting a visitor\'s IP address.', 'wordfence' ); ?></span>
|
|
</div>
|
|
<div class="wf-block-header-action">
|
|
<div class="wf-block-header-action-disclosure"></div>
|
|
</div>
|
|
</div>
|
|
</div>
|
|
<div class="wf-block-content wf-clearfix wf-padding-no-left wf-padding-no-right">
|
|
<table class="wf-striped-table"<?php echo ! empty( $inEmail ) ? ' border=1' : ''; ?>>
|
|
<tbody class="thead">
|
|
<tr>
|
|
<th><?php esc_html_e( 'IPs', 'wordfence' ); ?></th>
|
|
<th><?php esc_html_e( 'Value', 'wordfence' ); ?></th>
|
|
<th><?php esc_html_e( 'Used', 'wordfence' ); ?></th>
|
|
</tr>
|
|
</tbody>
|
|
<tbody>
|
|
<?php
|
|
$howGet = wfConfig::get( 'howGetIPs', false );
|
|
list( $currentIP, $currentServerVarForIP ) = wfUtils::getIPAndServerVariable();
|
|
foreach ( array(
|
|
'REMOTE_ADDR' => 'REMOTE_ADDR',
|
|
'HTTP_CF_CONNECTING_IP' => 'CF-Connecting-IP',
|
|
'HTTP_X_REAL_IP' => 'X-Real-IP',
|
|
'HTTP_X_FORWARDED_FOR' => 'X-Forwarded-For',
|
|
) as $variable => $label ) :
|
|
?>
|
|
<tr>
|
|
<td><?php echo $label; ?></td>
|
|
<td>
|
|
<?php
|
|
if ( ! array_key_exists( $variable, $_SERVER ) ) {
|
|
echo '(not set)';
|
|
} else {
|
|
if ( false !== strpos( $_SERVER[ $variable ], ',' ) ) {
|
|
$trustedProxies = explode( "\n", wfConfig::get( 'howGetIPs_trusted_proxies', '' ) );
|
|
$items = preg_replace( '/[\s,]/', '', explode( ',', $_SERVER[ $variable ] ) );
|
|
$items = array_reverse( $items );
|
|
$output = '';
|
|
$markedSelectedAddress = false;
|
|
foreach ( $items as $index => $i ) {
|
|
foreach ( $trustedProxies as $proxy ) {
|
|
if ( ! empty( $proxy ) ) {
|
|
if ( wfUtils::subnetContainsIP( $proxy, $i ) && $index < count( $items ) - 1 ) {
|
|
$output = esc_html( $i ) . ', ' . $output;
|
|
continue 2;
|
|
}
|
|
}
|
|
}
|
|
if ( ! $markedSelectedAddress ) {
|
|
$output = '<strong>' . esc_html( $i ) . '</strong>, ' . $output;
|
|
$markedSelectedAddress = true;
|
|
} else {
|
|
$output = esc_html( $i ) . ', ' . $output;
|
|
}
|
|
}
|
|
echo substr( $output, 0, -2 );
|
|
} else {
|
|
echo esc_html( $_SERVER[ $variable ] );
|
|
}
|
|
}
|
|
?>
|
|
</td>
|
|
<?php if ( $currentServerVarForIP && $currentServerVarForIP === $variable ) : ?>
|
|
<td class="wf-result-success">In use</td>
|
|
<?php elseif ( $howGet === $variable ) : ?>
|
|
<td class="wf-result-error">Configured, but not valid</td>
|
|
<?php else : ?>
|
|
<td></td>
|
|
<?php endif; ?>
|
|
</tr>
|
|
<?php endforeach; ?>
|
|
</tbody>
|
|
</table>
|
|
</div>
|
|
</div>
|
|
<div class="wf-block<?php echo( wfPersistenceController::shared()->isActive( 'wf-diagnostics-wordpress-constants' ) ? ' wf-active' : '' ); ?>" data-persistence-key="<?php echo esc_attr( 'wf-diagnostics-wordpress-constants' ); ?>">
|
|
<div class="wf-block-header">
|
|
<div class="wf-block-header-content">
|
|
<div class="wf-block-title">
|
|
<strong><?php _e( 'WordPress Settings', 'wordfence' ); ?></strong>
|
|
<span class="wf-text-small"><?php _e( 'WordPress version and internal settings/constants.', 'wordfence' ); ?></span>
|
|
</div>
|
|
<div class="wf-block-header-action">
|
|
<div class="wf-block-header-action-disclosure"></div>
|
|
</div>
|
|
</div>
|
|
</div>
|
|
<div class="wf-block-content wf-clearfix wf-padding-no-left wf-padding-no-right">
|
|
<table class="wf-striped-table"<?php echo ! empty( $inEmail ) ? ' border=1' : ''; ?>>
|
|
<tbody>
|
|
<?php
|
|
require ABSPATH . 'wp-includes/version.php';
|
|
$postRevisions = ( defined( 'WP_POST_REVISIONS' ) ? WP_POST_REVISIONS : true );
|
|
$wordPressValues = array(
|
|
'WordPress Version' => array(
|
|
'description' => '',
|
|
'value' => $wp_version,
|
|
),
|
|
'WP_DEBUG' => array(
|
|
'description' => 'WordPress debug mode',
|
|
'value' => ( defined( 'WP_DEBUG' ) && WP_DEBUG ? 'On' : 'Off' ),
|
|
),
|
|
'WP_DEBUG_LOG' => array(
|
|
'description' => 'WordPress error logging override',
|
|
'value' => defined( 'WP_DEBUG_LOG' ) ? ( WP_DEBUG_LOG ? 'Enabled' : 'Disabled' ) : '(not set)',
|
|
),
|
|
'WP_DEBUG_DISPLAY' => array(
|
|
'description' => 'WordPress error display override',
|
|
'value' => defined( 'WP_DEBUG_DISPLAY' ) ? ( WP_DEBUG_LOG ? 'Enabled' : 'Disabled' ) : '(not set)',
|
|
),
|
|
'SCRIPT_DEBUG' => array(
|
|
'description' => 'WordPress script debug mode',
|
|
'value' => ( defined( 'SCRIPT_DEBUG' ) && SCRIPT_DEBUG ? 'On' : 'Off' ),
|
|
),
|
|
'SAVEQUERIES' => array(
|
|
'description' => 'WordPress query debug mode',
|
|
'value' => ( defined( 'SAVEQUERIES' ) && SAVEQUERIES ? 'On' : 'Off' ),
|
|
),
|
|
'DB_CHARSET' => 'Database character set',
|
|
'DB_COLLATE' => 'Database collation',
|
|
'WP_SITEURL' => 'Explicitly set site URL',
|
|
'WP_HOME' => 'Explicitly set blog URL',
|
|
'WP_CONTENT_DIR' => array(
|
|
'description' => '"wp-content" folder is in default location',
|
|
'value' => ( realpath( WP_CONTENT_DIR ) === realpath( ABSPATH . 'wp-content' ) ? 'Yes' : 'No' ),
|
|
),
|
|
'WP_CONTENT_URL' => 'URL to the "wp-content" folder',
|
|
'WP_PLUGIN_DIR' => array(
|
|
'description' => '"plugins" folder is in default location',
|
|
'value' => ( realpath( WP_PLUGIN_DIR ) === realpath( ABSPATH . 'wp-content/plugins' ) ? 'Yes' : 'No' ),
|
|
),
|
|
'WP_LANG_DIR' => array(
|
|
'description' => '"languages" folder is in default location',
|
|
'value' => ( realpath( WP_LANG_DIR ) === realpath( ABSPATH . 'wp-content/languages' ) ? 'Yes' : 'No' ),
|
|
),
|
|
'WPLANG' => 'Language choice',
|
|
'UPLOADS' => 'Custom upload folder location',
|
|
'TEMPLATEPATH' => array(
|
|
'description' => 'Theme template folder override',
|
|
'value' => ( defined( 'TEMPLATEPATH' ) && realpath( get_template_directory() ) !== realpath( TEMPLATEPATH ) ? 'Overridden' : '(not set)' ), //phpcs:ignore -- use to check defined
|
|
),
|
|
'STYLESHEETPATH' => array(
|
|
'description' => 'Theme stylesheet folder override',
|
|
'value' => ( defined( 'STYLESHEETPATH' ) && realpath( get_stylesheet_directory() ) !== realpath( STYLESHEETPATH ) ? 'Overridden' : '(not set)' ), //phpcs:ignore -- use to check defined
|
|
),
|
|
'AUTOSAVE_INTERVAL' => 'Post editing automatic saving interval',
|
|
'WP_POST_REVISIONS' => array(
|
|
'description' => 'Post revisions saved by WordPress',
|
|
'value' => is_numeric( $postRevisions ) ? $postRevisions : ( $postRevisions ? 'Unlimited' : 'None' ),
|
|
),
|
|
'COOKIE_DOMAIN' => 'WordPress cookie domain',
|
|
'COOKIEPATH' => 'WordPress cookie path',
|
|
'SITECOOKIEPATH' => 'WordPress site cookie path',
|
|
'ADMIN_COOKIE_PATH' => 'WordPress admin cookie path',
|
|
'PLUGINS_COOKIE_PATH' => 'WordPress plugins cookie path',
|
|
'WP_ALLOW_MULTISITE' => array(
|
|
'description' => 'Multisite/network ability enabled',
|
|
'value' => ( defined( 'WP_ALLOW_MULTISITE' ) && WP_ALLOW_MULTISITE ? 'Yes' : 'No' ),
|
|
),
|
|
'NOBLOGREDIRECT' => 'URL redirected to if the visitor tries to access a nonexistent blog',
|
|
'CONCATENATE_SCRIPTS' => array(
|
|
'description' => 'Concatenate JavaScript files',
|
|
'value' => ( defined( 'CONCATENATE_SCRIPTS' ) && CONCATENATE_SCRIPTS ? 'Yes' : 'No' ),
|
|
),
|
|
'WP_MEMORY_LIMIT' => 'WordPress memory limit',
|
|
'WP_MAX_MEMORY_LIMIT' => 'Administrative memory limit',
|
|
'WP_CACHE' => array(
|
|
'description' => 'Built-in caching',
|
|
'value' => ( defined( 'WP_CACHE' ) && WP_CACHE ? 'Enabled' : 'Disabled' ),
|
|
),
|
|
'CUSTOM_USER_TABLE' => array(
|
|
'description' => 'Custom "users" table',
|
|
'value' => ( defined( 'CUSTOM_USER_TABLE' ) ? 'Set' : '(not set)' ),
|
|
),
|
|
'CUSTOM_USER_META_TABLE' => array(
|
|
'description' => 'Custom "usermeta" table',
|
|
'value' => ( defined( 'CUSTOM_USER_META_TABLE' ) ? 'Set' : '(not set)' ),
|
|
),
|
|
'FS_CHMOD_DIR' => array(
|
|
'description' => 'Overridden permissions for a new folder',
|
|
'value' => defined( 'FS_CHMOD_DIR' ) ? decoct( FS_CHMOD_DIR ) : '(not set)',
|
|
),
|
|
'FS_CHMOD_FILE' => array(
|
|
'description' => 'Overridden permissions for a new file',
|
|
'value' => defined( 'FS_CHMOD_FILE' ) ? decoct( FS_CHMOD_FILE ) : '(not set)',
|
|
),
|
|
'ALTERNATE_WP_CRON' => array(
|
|
'description' => 'Alternate WP cron',
|
|
'value' => ( defined( 'ALTERNATE_WP_CRON' ) && ALTERNATE_WP_CRON ? 'Enabled' : 'Disabled' ),
|
|
),
|
|
'DISABLE_WP_CRON' => array(
|
|
'description' => 'WP cron status',
|
|
'value' => ( defined( 'DISABLE_WP_CRON' ) && DISABLE_WP_CRON ? 'Disabled' : 'Enabled' ),
|
|
),
|
|
'WP_CRON_LOCK_TIMEOUT' => 'Cron running frequency lock',
|
|
'EMPTY_TRASH_DAYS' => array(
|
|
'description' => 'Interval the trash is automatically emptied at in days',
|
|
'value' => ( EMPTY_TRASH_DAYS > 0 ? EMPTY_TRASH_DAYS : 'Never' ),
|
|
),
|
|
'WP_ALLOW_REPAIR' => array(
|
|
'description' => 'Automatic database repair',
|
|
'value' => ( defined( 'WP_ALLOW_REPAIR' ) && WP_ALLOW_REPAIR ? 'Enabled' : 'Disabled' ),
|
|
),
|
|
'DO_NOT_UPGRADE_GLOBAL_TABLES' => array(
|
|
'description' => 'Do not upgrade global tables',
|
|
'value' => ( defined( 'DO_NOT_UPGRADE_GLOBAL_TABLES' ) && DO_NOT_UPGRADE_GLOBAL_TABLES ? 'Yes' : 'No' ),
|
|
),
|
|
'DISALLOW_FILE_EDIT' => array(
|
|
'description' => 'Disallow plugin/theme editing',
|
|
'value' => ( defined( 'DISALLOW_FILE_EDIT' ) && DISALLOW_FILE_EDIT ? 'Yes' : 'No' ),
|
|
),
|
|
'DISALLOW_FILE_MODS' => array(
|
|
'description' => 'Disallow plugin/theme update and installation',
|
|
'value' => ( defined( 'DISALLOW_FILE_MODS' ) && DISALLOW_FILE_MODS ? 'Yes' : 'No' ),
|
|
),
|
|
'IMAGE_EDIT_OVERWRITE' => array(
|
|
'description' => 'Overwrite image edits when restoring the original',
|
|
'value' => ( defined( 'IMAGE_EDIT_OVERWRITE' ) && IMAGE_EDIT_OVERWRITE ? 'Yes' : 'No' ),
|
|
),
|
|
'FORCE_SSL_ADMIN' => array(
|
|
'description' => 'Force SSL for administrative logins',
|
|
'value' => ( defined( 'FORCE_SSL_ADMIN' ) && FORCE_SSL_ADMIN ? 'Yes' : 'No' ),
|
|
),
|
|
'WP_HTTP_BLOCK_EXTERNAL' => array(
|
|
'description' => 'Block external URL requests',
|
|
'value' => ( defined( 'WP_HTTP_BLOCK_EXTERNAL' ) && WP_HTTP_BLOCK_EXTERNAL ? 'Yes' : 'No' ),
|
|
),
|
|
'WP_ACCESSIBLE_HOSTS' => 'Whitelisted hosts',
|
|
'WP_AUTO_UPDATE_CORE' => array(
|
|
'description' => 'Automatic WP Core updates',
|
|
'value' => defined( 'WP_AUTO_UPDATE_CORE' ) ? ( is_bool( WP_AUTO_UPDATE_CORE ) ? ( WP_AUTO_UPDATE_CORE ? 'Everything' : 'None' ) : WP_AUTO_UPDATE_CORE ) : 'Default',
|
|
),
|
|
'WP_PROXY_HOST' => array(
|
|
'description' => 'Hostname for a proxy server',
|
|
'value' => defined( 'WP_PROXY_HOST' ) ? WP_PROXY_HOST : '(not set)',
|
|
),
|
|
'WP_PROXY_PORT' => array(
|
|
'description' => 'Port for a proxy server',
|
|
'value' => defined( 'WP_PROXY_PORT' ) ? WP_PROXY_PORT : '(not set)',
|
|
),
|
|
);
|
|
|
|
foreach ( $wordPressValues as $settingName => $settingData ) :
|
|
$escapedName = esc_html( $settingName );
|
|
$escapedDescription = '';
|
|
$escapedValue = '(not set)';
|
|
if ( is_array( $settingData ) ) {
|
|
$escapedDescription = esc_html( $settingData['description'] );
|
|
if ( isset( $settingData['value'] ) ) {
|
|
$escapedValue = esc_html( $settingData['value'] );
|
|
}
|
|
} else {
|
|
$escapedDescription = esc_html( $settingData );
|
|
if ( defined( $settingName ) ) {
|
|
$escapedValue = esc_html( constant( $settingName ) );
|
|
}
|
|
}
|
|
?>
|
|
<tr>
|
|
<td><strong><?php echo $escapedName; ?></strong></td>
|
|
<td><?php echo $escapedDescription; ?></td>
|
|
<td><?php echo $escapedValue; ?></td>
|
|
</tr>
|
|
<?php endforeach ?>
|
|
</tbody>
|
|
</table>
|
|
</div>
|
|
</div>
|
|
<div class="wf-block<?php echo( wfPersistenceController::shared()->isActive( 'wf-diagnostics-wordpress-plugins' ) ? ' wf-active' : '' ); ?>" data-persistence-key="<?php echo esc_attr( 'wf-diagnostics-wordpress-plugins' ); ?>">
|
|
<div class="wf-block-header">
|
|
<div class="wf-block-header-content">
|
|
<div class="wf-block-title">
|
|
<strong><?php _e( 'WordPress Plugins', 'wordfence' ); ?></strong>
|
|
<span class="wf-text-small"><?php _e( 'Status of installed plugins.', 'wordfence' ); ?></span>
|
|
</div>
|
|
<div class="wf-block-header-action">
|
|
<div class="wf-block-header-action-disclosure"></div>
|
|
</div>
|
|
</div>
|
|
</div>
|
|
<div class="wf-block-content wf-clearfix wf-padding-no-left wf-padding-no-right">
|
|
<table class="wf-striped-table"<?php echo ! empty( $inEmail ) ? ' border=1' : ''; ?>>
|
|
<tbody>
|
|
<?php foreach ( $plugins as $plugin => $pluginData ) : ?>
|
|
<tr>
|
|
<td colspan="<?php echo $cols - 1; ?>">
|
|
<strong><?php echo esc_html( $pluginData['Name'] ); ?></strong>
|
|
<?php if ( ! empty( $pluginData['Version'] ) ) : ?>
|
|
- Version <?php echo esc_html( $pluginData['Version'] ); ?>
|
|
<?php endif ?>
|
|
</td>
|
|
<?php if ( array_key_exists( trailingslashit( WP_PLUGIN_DIR ) . $plugin, $activeNetworkPlugins ) ) : ?>
|
|
<td class="wf-result-success">Network Activated</td>
|
|
<?php elseif ( array_key_exists( $plugin, $activePlugins ) ) : ?>
|
|
<td class="wf-result-success">Active</td>
|
|
<?php else : ?>
|
|
<td class="wf-result-inactive">Inactive</td>
|
|
<?php endif ?>
|
|
</tr>
|
|
<?php endforeach ?>
|
|
</tbody>
|
|
</table>
|
|
</div>
|
|
</div>
|
|
<div class="wf-block<?php echo( wfPersistenceController::shared()->isActive( 'wf-diagnostics-mu-wordpress-plugins' ) ? ' wf-active' : '' ); ?>" data-persistence-key="<?php echo esc_attr( 'wf-diagnostics-mu-wordpress-plugins' ); ?>">
|
|
<div class="wf-block-header">
|
|
<div class="wf-block-header-content">
|
|
<div class="wf-block-title">
|
|
<strong><?php _e( 'Must-Use WordPress Plugins', 'wordfence' ); ?></strong>
|
|
<span class="wf-text-small"><?php _e( 'WordPress "mu-plugins" that are always active, incluing those provided by hosts.', 'wordfence' ); ?></span>
|
|
</div>
|
|
<div class="wf-block-header-action">
|
|
<div class="wf-block-header-action-disclosure"></div>
|
|
</div>
|
|
</div>
|
|
</div>
|
|
<div class="wf-block-content wf-clearfix wf-padding-no-left wf-padding-no-right">
|
|
<table class="wf-striped-table"<?php echo ! empty( $inEmail ) ? ' border=1' : ''; ?>>
|
|
<?php if ( ! empty( $muPlugins ) ) : ?>
|
|
<tbody>
|
|
<?php foreach ( $muPlugins as $plugin => $pluginData ) : ?>
|
|
<tr>
|
|
<td colspan="<?php echo $cols - 1; ?>">
|
|
<strong><?php echo esc_html( $pluginData['Name'] ); ?></strong>
|
|
<?php if ( ! empty( $pluginData['Version'] ) ) : ?>
|
|
- Version <?php echo esc_html( $pluginData['Version'] ); ?>
|
|
<?php endif ?>
|
|
</td>
|
|
<td class="wf-result-success">Active</td>
|
|
</tr>
|
|
<?php endforeach ?>
|
|
</tbody>
|
|
<?php else : ?>
|
|
<tbody>
|
|
<tr>
|
|
<td colspan="<?php echo $cols; ?>">No MU-Plugins</td>
|
|
</tr>
|
|
</tbody>
|
|
<?php endif ?>
|
|
</table>
|
|
</div>
|
|
</div>
|
|
<div class="wf-block<?php echo( wfPersistenceController::shared()->isActive( 'wf-diagnostics-wordpress-themes' ) ? ' wf-active' : '' ); ?>" data-persistence-key="<?php echo esc_attr( 'wf-diagnostics-wordpress-themes' ); ?>">
|
|
<div class="wf-block-header">
|
|
<div class="wf-block-header-content">
|
|
<div class="wf-block-title">
|
|
<strong><?php _e( 'Themes', 'wordfence' ); ?></strong>
|
|
<span class="wf-text-small"><?php _e( 'Status of installed themes.', 'wordfence' ); ?></span>
|
|
</div>
|
|
<div class="wf-block-header-action">
|
|
<div class="wf-block-header-action-disclosure"></div>
|
|
</div>
|
|
</div>
|
|
</div>
|
|
<div class="wf-block-content wf-clearfix wf-padding-no-left wf-padding-no-right">
|
|
<table class="wf-striped-table"<?php echo ! empty( $inEmail ) ? ' border=1' : ''; ?>>
|
|
<?php if ( ! empty( $themes ) ) : ?>
|
|
<tbody>
|
|
<?php foreach ( $themes as $theme => $themeData ) : ?>
|
|
<tr>
|
|
<td colspan="<?php echo $cols - 1; ?>">
|
|
<strong><?php echo esc_html( $themeData['Name'] ); ?></strong>
|
|
Version <?php echo esc_html( $themeData['Version'] ); ?></td>
|
|
<?php if ( $currentTheme instanceof WP_Theme && $theme === $currentTheme->get_stylesheet() ) : ?>
|
|
<td class="wf-result-success">Active</td>
|
|
<?php else : ?>
|
|
<td class="wf-result-inactive">Inactive</td>
|
|
<?php endif ?>
|
|
</tr>
|
|
<?php endforeach ?>
|
|
</tbody>
|
|
<?php else : ?>
|
|
<tbody>
|
|
<tr>
|
|
<td colspan="<?php echo $cols; ?>">No Themes</td>
|
|
</tr>
|
|
</tbody>
|
|
<?php endif ?>
|
|
</table>
|
|
</div>
|
|
</div>
|
|
<div class="wf-block<?php echo( wfPersistenceController::shared()->isActive( 'wf-diagnostics-wordpress-cron-jobs' ) ? ' wf-active' : '' ); ?>" data-persistence-key="<?php echo esc_attr( 'wf-diagnostics-wordpress-cron-jobs' ); ?>">
|
|
<div class="wf-block-header">
|
|
<div class="wf-block-header-content">
|
|
<div class="wf-block-title">
|
|
<strong><?php _e( 'Cron Jobs', 'wordfence' ); ?></strong>
|
|
<span class="wf-text-small"><?php _e( 'List of WordPress cron jobs scheduled by WordPress, plugins, or themes.', 'wordfence' ); ?></span>
|
|
</div>
|
|
<div class="wf-block-header-action">
|
|
<div class="wf-block-header-action-disclosure"></div>
|
|
</div>
|
|
</div>
|
|
</div>
|
|
<div class="wf-block-content wf-clearfix wf-padding-no-left wf-padding-no-right">
|
|
<table class="wf-striped-table"<?php echo ! empty( $inEmail ) ? ' border=1' : ''; ?>>
|
|
<tbody>
|
|
<?php
|
|
$cron = _get_cron_array();
|
|
foreach ( $cron as $timestamp => $values ) {
|
|
if ( is_array( $values ) ) {
|
|
foreach ( $values as $cron_job => $v ) {
|
|
if ( is_numeric( $timestamp ) ) {
|
|
?>
|
|
<tr>
|
|
<td colspan="<?php echo $cols - 1; ?>"><?php echo esc_html( date( 'r', $timestamp ) ); // phpcs:ignore -- local time. ?></td>
|
|
<td><?php echo esc_html( $cron_job ); ?></td>
|
|
</tr>
|
|
<?php
|
|
}
|
|
}
|
|
}
|
|
}
|
|
?>
|
|
</tbody>
|
|
</table>
|
|
</div>
|
|
</div>
|
|
|
|
<?php
|
|
global $wpdb;
|
|
$wfdb = new wfDB();
|
|
// This must be done this way because MySQL with InnoDB tables does a full regeneration of all metadata if we don't. That takes a long time with a large table count.
|
|
$tables = $wfdb->querySelect( 'SELECT SQL_CALC_FOUND_ROWS TABLE_NAME FROM information_schema.TABLES WHERE TABLE_SCHEMA=DATABASE() ORDER BY TABLE_NAME ASC LIMIT 250' );
|
|
$total = $wfdb->querySingle( 'SELECT FOUND_ROWS()' );
|
|
foreach ( $tables as &$t ) {
|
|
$t = "'" . esc_sql( $t['TABLE_NAME'] ) . "'";
|
|
}
|
|
unset( $t );
|
|
$q = $wfdb->querySelect( 'SHOW TABLE STATUS WHERE Name IN (' . implode( ',', $tables ) . ')' );
|
|
if ( $q ) :
|
|
$databaseCols = count( $q[0] );
|
|
?>
|
|
<div class="wf-block<?php echo( wfPersistenceController::shared()->isActive( 'wf-diagnostics-database-tables' ) ? ' wf-active' : '' ); ?>" data-persistence-key="<?php echo esc_attr( 'wf-diagnostics-database-tables' ); ?>">
|
|
<div class="wf-block-header">
|
|
<div class="wf-block-header-content">
|
|
<div class="wf-block-title">
|
|
<strong><?php _e( 'Database Tables', 'wordfence' ); ?></strong>
|
|
<span class="wf-text-small"><?php _e( 'Database table names, sizes, timestamps, and other metadata.', 'wordfence' ); ?></span>
|
|
</div>
|
|
<div class="wf-block-header-action">
|
|
<div class="wf-block-header-action-disclosure"></div>
|
|
</div>
|
|
</div>
|
|
</div>
|
|
<div class="wf-block-content wf-clearfix wf-padding-no-left wf-padding-no-right">
|
|
<div style="max-width: 100%; overflow: auto; padding: 1px;">
|
|
<table class="wf-striped-table"<?php echo ! empty( $inEmail ) ? ' border=1' : ''; ?>>
|
|
<tbody class="thead thead-subhead" style="font-size: 85%">
|
|
<?php $val = wfUtils::array_first( $q ); ?>
|
|
<tr>
|
|
<?php foreach ( $val as $tkey => $tval ) : ?>
|
|
<th><?php echo esc_html( $tkey ); ?></th>
|
|
<?php endforeach; ?>
|
|
</tr>
|
|
</tbody>
|
|
<tbody style="font-size: 85%">
|
|
<?php
|
|
$count = 0;
|
|
foreach ( $q as $val ) {
|
|
?>
|
|
<tr>
|
|
<?php foreach ( $val as $tkey => $tval ) : ?>
|
|
<td><?php echo esc_html( $tval ); ?></td>
|
|
<?php endforeach; ?>
|
|
</tr>
|
|
<?php
|
|
$count++;
|
|
if ( $count >= 250 ) {
|
|
?>
|
|
<tr>
|
|
<td colspan="<?php echo $databaseCols; ?>">and <?php echo $total - $count; ?> more</td>
|
|
</tr>
|
|
<?php
|
|
break;
|
|
}
|
|
}
|
|
?>
|
|
</tbody>
|
|
</table>
|
|
</div>
|
|
</div>
|
|
</div>
|
|
<?php endif; ?>
|
|
<div class="wf-block<?php echo( wfPersistenceController::shared()->isActive( 'wf-diagnostics-log-files' ) ? ' wf-active' : '' ); ?>" data-persistence-key="<?php echo esc_attr( 'wf-diagnostics-log-files' ); ?>">
|
|
<div class="wf-block-header">
|
|
<div class="wf-block-header-content">
|
|
<div class="wf-block-title">
|
|
<strong><?php _e( 'Log Files', 'wordfence' ); ?></strong>
|
|
<span class="wf-text-small"><?php _e( 'PHP error logs generated by your site, if enabled by your host.', 'wordfence' ); ?></span>
|
|
</div>
|
|
<div class="wf-block-header-action">
|
|
<div class="wf-block-header-action-disclosure"></div>
|
|
</div>
|
|
</div>
|
|
</div>
|
|
<div class="wf-block-content wf-clearfix wf-padding-no-left wf-padding-no-right">
|
|
<div style="max-width: 100%; overflow: auto; padding: 1px;">
|
|
<table class="wf-striped-table"<?php echo ! empty( $inEmail ) ? ' border=1' : ''; ?>>
|
|
<tbody class="thead thead-subhead" style="font-size: 85%">
|
|
<tr>
|
|
<th>File</th>
|
|
<th>Download</th>
|
|
</tr>
|
|
</tbody>
|
|
<tbody style="font-size: 85%">
|
|
<?php
|
|
$errorLogs = wfErrorLogHandler::getErrorLogs();
|
|
if ( count( $errorLogs ) < 1 ) :
|
|
?>
|
|
<tr>
|
|
<td colspan="2"><em>No log files found.</em></td>
|
|
</tr>
|
|
<?php
|
|
else :
|
|
foreach ( $errorLogs as $log => $readable ) :
|
|
?>
|
|
<tr>
|
|
<td style="width: 100%"><?php echo esc_html( $log ) . ' (' . wfUtils::formatBytes( filesize( $log ) ) . ')'; ?></td>
|
|
<td style="white-space: nowrap; text-align: right;"><?php echo( $readable ? '<a href="#" data-logfile="' . esc_html( $log ) . '" class="downloadLogFile" target="_blank" rel="noopener noreferrer">Download</a>' : '<em>Requires downloading from the server directly</em>' ); ?></td>
|
|
</tr>
|
|
<?php
|
|
endforeach;
|
|
endif;
|
|
?>
|
|
</tbody>
|
|
</table>
|
|
</div>
|
|
</div>
|
|
</div>
|
|
</form>
|
|
</div>
|
|
<script type="application/javascript">
|
|
jQuery( document ).ready( function ( $ ) {
|
|
$( '.wf-block-header-action-disclosure' ).each( function() {
|
|
$( this ).closest( '.wf-block-header' ).css( 'cursor', 'pointer' );
|
|
$( this ).closest( '.wf-block-header' ).on( 'click', function( e ) {
|
|
// Let links in the header work.
|
|
if ( e.target && e.target.nodeName === 'A' && e.target.href ) {
|
|
return;
|
|
}
|
|
e.preventDefault();
|
|
e.stopPropagation();
|
|
if ( $( this ).closest( '.wf-block' ).hasClass( 'wf-disabled' ) ) {
|
|
return;
|
|
}
|
|
var isActive = $( this ).closest( '.wf-block' ).hasClass( 'wf-active' );
|
|
if ( isActive ) {
|
|
$( this ).closest( '.wf-block' ).find( '.wf-block-content' ).slideUp( {
|
|
always: function() {
|
|
$( this ).closest( '.wf-block' ).removeClass( 'wf-active' );
|
|
}
|
|
} );
|
|
} else {
|
|
$( this ).closest( '.wf-block' ).find( '.wf-block-content' ).slideDown( {
|
|
always: function() {
|
|
$( this ).closest( '.wf-block' ).addClass( 'wf-active' );
|
|
}
|
|
} );
|
|
}
|
|
} );
|
|
} );
|
|
} );
|
|
</script>
|
|
<?php
|
|
$html = ob_get_clean();
|
|
return array(
|
|
'ok' => 1,
|
|
'html' => $html,
|
|
);
|
|
}
|
|
|
|
public static function update_waf_rules() {
|
|
$event = new wfWAFCronFetchRulesEvent( time() - 2 );
|
|
$event->setWaf( wfWAF::getInstance() );
|
|
$event->fire();
|
|
$isPaid = (bool) wfConfig::get( 'isPaid', 0 );
|
|
return array(
|
|
'ok' => 1,
|
|
'isPaid' => $isPaid,
|
|
);
|
|
}
|
|
|
|
public static function update_waf_rules_new() {
|
|
$event = new wfWAFCronFetchRulesEvent( time() - 2 );
|
|
$event->setWaf( wfWAF::getInstance() );
|
|
$success = $event->fire();
|
|
|
|
return self::get_waf_data( $success );
|
|
}
|
|
|
|
public static function save_debugging_config() {
|
|
$settings = $_POST['settings'];
|
|
foreach ( self::$diagnosticParams as $param ) {
|
|
if ( isset( $settings[ $param ] ) ) {
|
|
wfConfig::set( $param, $settings[ $param ] );
|
|
}
|
|
}
|
|
return array( 'ok' => 1 );
|
|
}
|
|
}
|
