captcha.php
1 year ago
common.php
1 year ago
dashboard.php
2 months ago
disable-access-system-file.php
7 months ago
disable-author-query.php
1 year ago
disable-login.php
1 year ago
disable-restapi.php
1 month ago
disable-xmlrpc.php
1 year ago
login-log-table.php
3 months ago
login-log.php
1 year ago
login-notification.php
1 month ago
rename-login-page.php
1 month ago
restrict-admin-page.php
1 month ago
server-error-notification.php
2 months ago
server-error-table.php
1 year ago
two-factor-authentication-registration.php
1 month ago
two-factor-authentication.php
2 months ago
unify-messages.php
1 year ago
update-notice.php
2 months ago
waf-table.php
1 year ago
waf.php
2 months ago
disable-author-query.php
97 lines
| 1 | <?php |
| 2 | |
| 3 | if ( ! defined( 'ABSPATH' ) ) { |
| 4 | exit; |
| 5 | } |
| 6 | |
| 7 | class CloudSecureWP_Admin_Disable_Author_Query extends CloudSecureWP_Admin_Common { |
| 8 | private $disable_author_query; |
| 9 | |
| 10 | function __construct( array $info, CloudSecureWP_Disable_Author_Query $disable_author_query ) { |
| 11 | parent::__construct( $info ); |
| 12 | $this->disable_author_query = $disable_author_query; |
| 13 | $this->prepare_view_data(); |
| 14 | $this->render(); |
| 15 | } |
| 16 | |
| 17 | /** |
| 18 | * 画面表示用のデータを準備 |
| 19 | */ |
| 20 | public function prepare_view_data(): void { |
| 21 | $this->datas = $this->disable_author_query->get_settings(); |
| 22 | |
| 23 | if ( ! empty( $_POST ) && check_admin_referer( $this->disable_author_query->get_feature_key() . '_csrf' ) ) { |
| 24 | |
| 25 | foreach ( $this->datas as $key => $val ) { |
| 26 | |
| 27 | switch ( $key ) { |
| 28 | case 'disable_author_query': |
| 29 | $tmp = sanitize_text_field( $_POST[ $key ] ?? '' ); |
| 30 | if ( ! $this->is_selected( $tmp, self::TF_VALIES ) ) { |
| 31 | $this->errors[] = '有効・無効の値が不正です'; |
| 32 | } |
| 33 | |
| 34 | if ( ! $this->check_environment() ) { |
| 35 | $tmp = 'f'; |
| 36 | } |
| 37 | |
| 38 | $this->datas[ $key ] = $tmp; |
| 39 | break; |
| 40 | } |
| 41 | } |
| 42 | |
| 43 | if ( empty( $this->errors ) ) { |
| 44 | if ( 't' === $this->datas['disable_author_query'] ) { |
| 45 | $this->messages[] = 'ユーザー名漏えい防止機能が有効になりました。'; |
| 46 | } else { |
| 47 | $this->messages[] = 'ユーザー名漏えい防止機能が無効になりました。'; |
| 48 | } |
| 49 | |
| 50 | $this->disable_author_query->save_settings( $this->datas ); |
| 51 | } |
| 52 | } |
| 53 | |
| 54 | $this->datas = $this->get_checked( $this->datas, array( 'disable_author_query' ) ); |
| 55 | } |
| 56 | |
| 57 | /** |
| 58 | * デスクリプション |
| 59 | */ |
| 60 | protected function admin_description(): void { |
| 61 | ?> |
| 62 | <nav> |
| 63 | <ul class="breadcrumb"> |
| 64 | <li class="breadcrumb__list"><a href="?page=cloudsecurewp">ダッシュボード</a></li> |
| 65 | <li class="breadcrumb__list">ユーザー名漏えい防止</li> |
| 66 | </ul> |
| 67 | </nav> |
| 68 | <div class="title-block mb-12"> |
| 69 | <p class="title-block-small-text">この機能のマニュアルは<a class="title-block-link" target="_blank" href="https://wpplugin.cloudsecure.ne.jp/cloudsecure_wp_security/disable_author_query.php">こちら</a></p> |
| 70 | <h1 class="title-block-title">ユーザー名漏えい防止</h1> |
| 71 | </div> |
| 72 | <div class="title-bottom-text"> |
| 73 | 「?author=数字」でのアクセスによるユーザー名の漏えいを防止します。 |
| 74 | </div> |
| 75 | <?php |
| 76 | } |
| 77 | |
| 78 | |
| 79 | /** |
| 80 | * ページコンテンツ |
| 81 | */ |
| 82 | protected function page(): void { |
| 83 | ?> |
| 84 | <form method="post"> |
| 85 | <div class="enabled-or-disabled"> |
| 86 | <input class="enabled-or-disabled__btn" id="enabled" type="radio" name="disable_author_query" value="t" <?php echo esc_html( $this->datas['disable_author_query_t'] ?? '' ); ?> /><label for="enabled">有効</label> |
| 87 | <input class="enabled-or-disabled__btn" id="disabled" type="radio" name="disable_author_query" value="f" <?php echo esc_html( $this->datas['disable_author_query_f'] ?? '' ); ?> /><label for="disabled">無効</label> |
| 88 | </div> |
| 89 | <div id="submit-btn-area"> |
| 90 | <?php $this->nonce_wp( $this->disable_author_query->get_feature_key() ); ?> |
| 91 | <?php $this->submit_button_wp(); ?> |
| 92 | </div> |
| 93 | </form> |
| 94 | <?php |
| 95 | } |
| 96 | } |
| 97 |