' . esc_html__( 'here', 'defender-security' ) . ''
);
?>
' . esc_html__( 'here', 'defender-security' ) . ''
);
?>
esc_html__( 'Invalid request, you are not allowed to do that action.', 'defender-security' ) )
);
}
$prop = defender_get_data_from_request( 'prop', 'p' );
$notice_type = '' !== trim( $prop ) ? $prop : false;
if ( 'notice-for-cf' === $notice_type ) {
update_site_option( Firewall::IP_DETECTION_CF_DISMISS_SLUG, true );
wp_send_json_success();
} elseif ( 'notice-for-xff' === $notice_type ) {
update_site_option( Firewall::IP_DETECTION_XFF_DISMISS_SLUG, true );
wp_send_json_success();
} else {
wp_send_json_error(
array( 'message' => esc_html__( 'Invalid request, allowed data not provided.', 'defender-security' ) )
);
}
}
/**
* Switch to XFF option.
*
* @return void
*/
public function switch_to_xff(): void {
if (
! current_user_can( 'manage_options' ) ||
! check_ajax_referer( 'defender_ip_detection_notice_dismiss' )
) {
wp_send_json_error(
array( 'message' => esc_html__( 'Invalid request, you are not allowed to do that action.', 'defender-security' ) )
);
}
// Change model's data.
$model_firewall = wd_di()->get( Model\Setting\Firewall::class );
$model_firewall->http_ip_header = 'HTTP_X_FORWARDED_FOR';
$xff_ip = defender_get_data_from_request( 'HTTP_X_FORWARDED_FOR', 's' );
$xff_parts = preg_split( '/\s*,\s*/', $xff_ip );
$xff_parts = is_array( $xff_parts ) ? $xff_parts : array();
$xff_parts = array_map( 'trim', $xff_parts );
$xff_parts = array_filter(
$xff_parts,
static function ( $ip ) {
return false !== filter_var( $ip, FILTER_VALIDATE_IP );
}
);
$separator = "\r\n";
$xff_parts = array_unique( $xff_parts );
$xff_ip = implode( $separator, $xff_parts );
if ( '' === $xff_ip ) {
wp_send_json_error(
array( 'message' => esc_html__( 'Invalid trusted proxy IP(s) detected in X-Forwarded-For header.', 'defender-security' ) )
);
}
if ( '' === $model_firewall->trusted_proxies_ip ) {
$model_firewall->trusted_proxies_ip = $xff_ip;
} else {
// Todo: improve the code using a separate method. This will be useful when the user switches between different proxy headeres (IP detection options).
$model_firewall->trusted_proxies_ip = $model_firewall->trusted_proxies_ip . $separator . $xff_ip;
}
$model_firewall->save();
// Save Dismiss slug.
update_site_option( Firewall::IP_DETECTION_XFF_DISMISS_SLUG, true );
wp_send_json_success();
}
/**
* Load deactivation survey modal.
*/
public function load_deactivation_survey_modal() {
$deactivation_survey_template_file = WP_DEFENDER_DIR .
'src' . DIRECTORY_SEPARATOR .
'view' . DIRECTORY_SEPARATOR .
'modal' . DIRECTORY_SEPARATOR .
'deactivation-survey.php';
if ( ! file_exists( $deactivation_survey_template_file ) ) {
return;
}
// Data to be passed to the template file.
$is_pro = wd_di()->get( WPMUDEV::class )->is_pro();
$docs_link = $this->get_link(
'support_with_utm',
'defender_deactivation_survey_help',
'',
$is_pro ? 'defender-pro' : 'defender'
);
ob_start();
require_once $deactivation_survey_template_file;
// Everything escaped in all template files.
echo ob_get_clean(); // phpcs:ignore WordPress.Security.EscapeOutput.OutputNotEscaped
}
/**
* Track deactivation.
*/
public function track_deactivate() {
if (
! current_user_can( 'manage_options' ) ||
! check_ajax_referer( 'defender_deactivation_survey_modal' )
) {
wp_send_json_error(
array( 'message' => esc_html__( 'Invalid request, you are not allowed to do that action.', 'defender-security' ) )
);
}
$posted_data = defender_get_data_from_request( null, 'p' );
if ( ! is_array( $posted_data['properties'] ) ) {
wp_send_json_error(
array( 'message' => esc_html__( 'Invalid request, allowed data not provided.', 'defender-security' ) )
);
}
$properties = $posted_data['properties'];
if (
! isset(
$properties['Reason'],
$properties['Message'],
$properties['Modal Action'],
$properties['Requested Assistance'],
$properties['Tracking Status']
)
) {
wp_send_json_error(
array( 'message' => esc_html__( 'Missing field(s).', 'defender-security' ) )
);
}
wd_di()->get( Deactivation_Survey::class )->track_deactivation_survey( $properties );
wp_send_json_success();
}
}