defender-security / src / behavior / scan-item / class-core-integrity.php

class-core-integrity.php in Defender Security – Malware Scanner, Login Security & Firewall 5.6.1, at src/behavior/scan-item/class-core-integrity.php

235 lines 6.8 KB

Raw Download Zip

1	<?php
2	/**
3	* Handles core integrity scan.
4	*
5	* @package WP_Defender\Behavior\Scan_Item
6	*/
7
8	namespace WP_Defender\Behavior\Scan_Item;
9
10	use WP_Error;
11	use Calotes\Base\File;
12	use WP_Defender\Traits\IO;
13	use WP_Defender\Model\Scan;
14	use Calotes\Component\Behavior;
15	use WP_Defender\Traits\Formats;
16	use WP_Defender\Model\Scan_Item;
17	use WP_Defender\Traits\File_Operations;
18	use WP_Defender\Controller\Scan as Scan_Controller;
19	use WP_Filesystem_Base;
20
21	/**
22	* This class represents a behavior related to core integrity in the WP_Defender plugin.
23	*/
24	class Core_Integrity extends Behavior {
25
26	use Formats;
27	use IO;
28	use File_Operations;
29
30	/**
31	* Return general data so we can output on frontend.
32	*
33	* @return array
34	*/
35	public function to_array(): array {
36	$data = $this->owner->raw_data;
37	$file = $data['file'];
38
39	list( $file_created_at, $file_size, $deleted ) = $this->get_file_meta( $file );
40
41	return array(
42	'id' => $this->owner->id,
43	'type' => Scan_Item::TYPE_INTEGRITY,
44	'file_name' => pathinfo( $file, PATHINFO_BASENAME ),
45	'full_path' => $file,
46	'date_added' => $file_created_at,
47	'size' => $file_size,
48	'scenario' => $data['type'],
49	'deleted' => $deleted,
50	'short_desc' => $this->get_short_description(),
51	);
52	}
53
54	/**
55	* We will get the origin code by looking into svn repo.
56	*
57	* @return false\|string\|WP_Error
58	*/
59	private function get_origin_code() {
60	global $wp_filesystem;
61	// Initialize the WP filesystem, no more using 'file-put-contents' function.
62	if ( ! $wp_filesystem instanceof WP_Filesystem_Base ) {
63	require_once ABSPATH . '/wp-admin/includes/file.php';
64	WP_Filesystem();
65	}
66	global $wp_version;
67	$data = $this->owner->raw_data;
68	$file = wp_normalize_path( $data['file'] );
69	$relative_path = str_replace( wp_normalize_path( ABSPATH ), '', $file );
70	$source_file_url = "http://core.svn.wordpress.org/tags/$wp_version/" . $relative_path;
71	$ds = DIRECTORY_SEPARATOR;
72	if ( ! function_exists( 'download_url' ) ) {
73	require_once ABSPATH . 'wp-admin' . $ds . 'includes' . $ds . 'file.php';
74	}
75	$tmp = download_url( $source_file_url );
76	if ( is_wp_error( $tmp ) ) {
77	return $tmp;
78	}
79	$content = $wp_filesystem->get_contents( $tmp );
80	wp_delete_file( $tmp );
81
82	return $content;
83	}
84
85	/**
86	* Restore the file with its origin content.
87	*
88	* @return void\|array\|WP_Error
89	*/
90	public function resolve() {
91	global $wp_filesystem;
92	// Initialize the WP filesystem, no more using 'file-put-contents' function.
93	if ( empty( $wp_filesystem ) ) {
94	include_once ABSPATH . '/wp-admin/includes/file.php';
95	WP_Filesystem();
96	}
97	$data = $this->owner->raw_data;
98	if ( 'modified' !== $data['type'] ) {
99	// Should not be here unless case changed.
100	return;
101	}
102
103	$origin = $this->get_origin_code();
104	if ( false === $origin \|\| is_wp_error( $origin ) ) {
105	return;
106	}
107
108	$path = $data['file'];
109	$ret = $wp_filesystem->put_contents( $path, $origin );
110	if ( $ret ) {
111	$scan = Scan::get_last();
112	$scan->remove_issue( $this->owner->id );
113	$this->log( sprintf( '%s is deleted', $path ), Scan_Controller::SCAN_LOG );
114
115	do_action( 'wpdef_fixed_scan_issue', 'core_integrity', 'resolve' );
116
117	return array( 'message' => esc_html__( 'This item has been resolved.', 'defender-security' ) );
118	} else {
119	return new WP_Error(
120	'defender_permissions_denied',
121	esc_html__(
122	'Permissions Denied. Defender does not have the needed permissions to edit the file. Please change file permissions to 640 or contact your hosting provider so they could change them for you.',
123	'defender-security'
124	)
125	);
126	}
127	}
128
129	/**
130	* Ignore the suspicious file.
131	*
132	* @return array
133	*/
134	public function ignore(): array {
135	$scan = Scan::get_last();
136	$scan->ignore_issue( $this->owner->id );
137
138	return array( 'message' => esc_html__( 'The suspicious file has been successfully ignored.', 'defender-security' ) );
139	}
140
141	/**
142	* Restore the ignored suspicious file.
143	*
144	* @return array
145	*/
146	public function unignore(): array {
147	$scan = Scan::get_last();
148	$scan->unignore_issue( $this->owner->id );
149
150	return array( 'message' => esc_html__( 'The suspicious file has been successfully restored.', 'defender-security' ) );
151	}
152
153	/**
154	* Delete the file or whole folder.
155	*
156	* @return array\|WP_Error
157	*/
158	public function delete() {
159	$data = $this->owner->raw_data;
160	$scan = Scan::get_last();
161
162	// Check if the file exists and is readable. If not, remove it from the scan result and log the result.
163	$file = $data['file'];
164	if ( ! file_exists( $file ) \|\| ! is_readable( $file ) ) {
165	$scan->remove_issue( $this->owner->id );
166	$this->log(
167	sprintf( '%s is not readable and will be removed from the scan result', $file ),
168	Scan_Controller::SCAN_LOG
169	);
170
171	return array( 'message' => esc_html__( 'This item has been deleted.', 'defender-security' ) );
172	} elseif ( 'unversion' === $data['type'] && $this->delete_infected_file( $file ) ) {
173	return $this->after_delete( $file, $scan, 'core_integrity' );
174	} elseif ( 'dir' === $data['type'] && $this->delete_dir( $file ) ) {
175	return $this->after_delete( $file, $scan, 'core_integrity' );
176	}
177
178	return $this->get_permission_error( $file );
179	}
180
181	/**
182	* Return the source code depending on the type of the issue:
183	* If it is unversion, return full source,
184	* if it is dir, we return a list of files,
185	* if it is modified, we will return the current code & origin.
186	*
187	* @return array
188	*/
189	public function pull_src(): array {
190	global $wp_filesystem;
191	// Initialize the WP filesystem, no more using 'file-put-contents' function.
192	if ( empty( $wp_filesystem ) ) {
193	include_once ABSPATH . '/wp-admin/includes/file.php';
194	WP_Filesystem();
195	}
196	$data = $this->owner->raw_data;
197	if ( ! file_exists( $data['file'] ) && ! is_dir( $data['file'] ) ) {
198	return array(
199	'code' => '',
200	'origin' => '',
201	);
202	}
203	switch ( $data['type'] ) {
204	case 'unversion':
205	return array( 'code' => $wp_filesystem->get_contents( $data['file'] ) );
206	case 'dir':
207	$dir_tree = new File( $data['file'], true, true, array(), array(), false );
208
209	return array( 'code' => implode( PHP_EOL, $dir_tree->get_dir_tree() ) );
210	case 'modified':
211	default:
212	return array(
213	'code' => $wp_filesystem->get_contents( $data['file'] ),
214	'origin' => $this->get_origin_code(),
215	);
216	}
217	}
218
219	/**
220	* Retrieves a short description based on the type of data.
221	*
222	* @return string The short description.
223	*/
224	private function get_short_description(): string {
225	$data = $this->owner->raw_data;
226	if ( 'unversion' === $data['type'] ) {
227	return esc_html__( 'Unknown file in WordPress core', 'defender-security' );
228	} elseif ( 'dir' === $data['type'] ) {
229	return esc_html__( 'This directory does not belong to WordPress core', 'defender-security' );
230	} elseif ( 'modified' === $data['type'] ) {
231	return esc_html__( 'This WordPress core file appears modified', 'defender-security' );
232	}
233	}
234	}
235