AuditCheckTrait.php
1 year ago
CoreUserRoleOptionIntegrityCheck.php
1 year ago
EditableFileSystemCheck.php
7 months ago
ElevatedCoreRoleCheck.php
7 months ago
EmptyUnusedRoleCheck.php
7 months ago
HighPrivilegeContentModeratorCheck.php
7 months ago
HighPrivilegeOrElevatedUserCheck.php
7 months ago
HighPrivilegeRoleCheck.php
7 months ago
HighPrivilegeUserCountCheck.php
7 months ago
RestfulAutoDiscoverEndpointCheck.php
7 months ago
RoleCapabilityNamingConventionCheck.php
7 months ago
RoleIntegrityCheck.php
7 months ago
RoleTransparencyCheck.php
7 months ago
XmlRpcEndpointCheck.php
7 months ago
AuditCheckTrait.php
173 lines
| 1 | <?php |
| 2 | |
| 3 | /** |
| 4 | * ====================================================================== |
| 5 | * LICENSE: This file is subject to the terms and conditions defined in * |
| 6 | * file 'license.txt', which is part of this source code package. * |
| 7 | * ====================================================================== |
| 8 | */ |
| 9 | |
| 10 | /** |
| 11 | * Audit check trait with common methods |
| 12 | * |
| 13 | * @package AAM |
| 14 | * @version 7.0.0 |
| 15 | */ |
| 16 | trait AAM_Audit_AuditCheckTrait |
| 17 | { |
| 18 | |
| 19 | /** |
| 20 | * Convert issue to message |
| 21 | * |
| 22 | * @param array $issue |
| 23 | * |
| 24 | * @return string|null |
| 25 | * @access public |
| 26 | * @static |
| 27 | * |
| 28 | * @version 7.0.0 |
| 29 | */ |
| 30 | public static function issue_to_message($issue) |
| 31 | { |
| 32 | $result = null; |
| 33 | $map = self::_get_message_templates(); |
| 34 | |
| 35 | if ($issue['code'] === 'APPLICATION_ERROR') { |
| 36 | $result = sprintf( |
| 37 | __('Unexpected application error: %s', 'advanced-access-manager'), |
| 38 | $issue['metadata']['message'] |
| 39 | ); |
| 40 | } elseif (array_key_exists($issue['code'], $map)) { |
| 41 | if (!empty($issue['metadata'])) { |
| 42 | $result = sprintf( |
| 43 | $map[$issue['code']], |
| 44 | ...array_values(array_map(function($v) { |
| 45 | return is_array($v) ? implode(', ', $v) : $v; |
| 46 | }, $issue['metadata'])) |
| 47 | ); |
| 48 | } else { |
| 49 | $result = $map[$issue['code']]; |
| 50 | } |
| 51 | } |
| 52 | |
| 53 | return $result; |
| 54 | } |
| 55 | |
| 56 | /** |
| 57 | * Convert audit step results into shareable dataset |
| 58 | * |
| 59 | * @param array $results |
| 60 | * |
| 61 | * @return array |
| 62 | * @access public |
| 63 | * @static |
| 64 | * |
| 65 | * @version 7.0.0 |
| 66 | */ |
| 67 | public static function issues_to_shareable($results) |
| 68 | { |
| 69 | return $results['issues']; |
| 70 | } |
| 71 | |
| 72 | /** |
| 73 | * Determine the final check status |
| 74 | * |
| 75 | * @param array $response |
| 76 | * |
| 77 | * @return string |
| 78 | * |
| 79 | * @access private |
| 80 | * @static |
| 81 | * |
| 82 | * @version 7.0.0 |
| 83 | */ |
| 84 | private static function _determine_check_status(&$result) |
| 85 | { |
| 86 | if ($result['is_completed']) { |
| 87 | if (array_key_exists('issues', $result)) { |
| 88 | $errors = self::_filter_by_issue_type($result['issues'], 'error'); |
| 89 | $critical = self::_filter_by_issue_type($result['issues'], 'critical'); |
| 90 | $warnings = self::_filter_by_issue_type($result['issues'], 'warning'); |
| 91 | $notices = self::_filter_by_issue_type($result['issues'], 'notice'); |
| 92 | |
| 93 | if (!empty($errors)) { |
| 94 | $result['check_status'] = 'error'; |
| 95 | } elseif (!empty($critical)) { |
| 96 | $result['check_status'] = 'critical'; |
| 97 | } elseif (!empty($warnings)) { |
| 98 | $result['check_status'] = 'warning'; |
| 99 | } elseif (!empty($notices)) { |
| 100 | $result['check_status'] = 'notice'; |
| 101 | } |
| 102 | } else { |
| 103 | $result['check_status'] = 'ok'; |
| 104 | } |
| 105 | } |
| 106 | } |
| 107 | |
| 108 | /** |
| 109 | * Filter failures by type |
| 110 | * |
| 111 | * @param array $failures |
| 112 | * @param string $issue_type |
| 113 | * |
| 114 | * @return array |
| 115 | * |
| 116 | * @access private |
| 117 | * @static |
| 118 | * |
| 119 | * @version 7.0.0 |
| 120 | */ |
| 121 | private static function _filter_by_issue_type($failures, $issue_type) |
| 122 | { |
| 123 | return array_filter($failures, function($f) use ($issue_type) { |
| 124 | return $f['type'] === $issue_type; |
| 125 | }); |
| 126 | } |
| 127 | |
| 128 | /** |
| 129 | * Format detected issue |
| 130 | * |
| 131 | * @param string $code |
| 132 | * @param array $metadata [Optional] |
| 133 | * @param string $type [Optional] |
| 134 | * |
| 135 | * @return array |
| 136 | * |
| 137 | * @access private |
| 138 | * @static |
| 139 | * |
| 140 | * @version 7.0.0 |
| 141 | */ |
| 142 | private static function _format_issue($code, $metadata = [], $type = 'notice') |
| 143 | { |
| 144 | $result = [ |
| 145 | 'type' => $type, |
| 146 | 'code' => $code |
| 147 | ]; |
| 148 | |
| 149 | if (!empty($metadata)) { |
| 150 | $result['metadata'] = $metadata; |
| 151 | } |
| 152 | |
| 153 | return $result; |
| 154 | } |
| 155 | |
| 156 | /** |
| 157 | * Read user_roles option from DB |
| 158 | * |
| 159 | * @return array |
| 160 | * @access private |
| 161 | * |
| 162 | * @version 7.0.0 |
| 163 | */ |
| 164 | private static function _read_role_key_option() |
| 165 | { |
| 166 | global $wpdb; |
| 167 | |
| 168 | return AAM::api()->db->read( |
| 169 | $wpdb->get_blog_prefix(get_current_blog_id()) . 'user_roles' |
| 170 | ); |
| 171 | } |
| 172 | |
| 173 | } |