set_debug_data( false ); } /** * This is for un-do stuff that has be done in @process. * * @return bool|WP_Error */ public function revert() { return $this->set_debug_data( true ); } /** * Shield up. * * @return bool */ public function shield_up(): bool { return true; } /** * Set debug data in wp-config.php. * * @param bool $value of constant. * * @return bool|WP_Error */ private function set_debug_data( bool $value ) { $sec_tweak_component = new Security_Tweak_Component(); $obj_file = 'flywheel' === Server::get_current_server() ? $sec_tweak_component->advanced_check_file() : $sec_tweak_component->file(); if ( false === $obj_file ) { return new WP_Error( 'defender_file_not_writable', esc_html__( 'The file wp-config.php is not writable', 'defender-security' ) ); } elseif ( is_numeric( $obj_file ) ) { return new WP_Error( 'defender_file_not_writable', $sec_tweak_component->show_hosting_notice( 'debug mode' ) ); } $value = $value ? 'true' : 'false'; $pattern = "/^define\(\s*['|\"]WP_DEBUG['|\"],(.*)\)/"; $debug_type = 'WP_DEBUG'; $hook_line_pattern = $sec_tweak_component->get_hook_line_pattern(); $debug_line = "define( '{$debug_type}', {$value} ); // Added by Defender"; $lines = array(); $line_found = false; $hook_line_no = null; foreach ( $obj_file as $line ) { if ( ! $line_found && preg_match( $pattern, $line ) ) { // If this is revert request and the changes is not made by us throw error. if ( 'true' === $value && ! preg_match( "/^define\(\s*['|\"]{$debug_type}['|\"],(.*)\);\s*\/\/\s*Added\s*by\s*Defender.?.*/i", $line ) ) { return new WP_Error( 'defender_file_not_writable', $sec_tweak_component->show_hosting_notice_with_code( $debug_type, $debug_line ) ); } $lines[] = $debug_line; $line_found = true; continue; } // If there is no match, keep reference of `hook_line_no` so that we can insert data there as needed. if ( ! $line_found && preg_match( $hook_line_pattern, $line ) ) { $hook_line_no = $obj_file->key(); $lines[ $hook_line_no + 1 ] = trim( $line ); continue; } $lines[] = trim( $line ); } // There is no match, so set WP_DEBUG data just before the hook line ei: `$table_prefix`. if ( ! $line_found && ! is_null( $hook_line_no ) ) { $line_found = true; $lines[ $hook_line_no ] = $debug_line; ksort( $lines ); } return $line_found ? $sec_tweak_component->write( $lines ) : new WP_Error( 'defender_line_not_found', esc_html__( 'Error writing to file.', 'defender-security' ), 404 ); } /** * Retrieve the tweak's label. * * @return string */ public function get_label(): string { return esc_html__( 'Turn off error debugging', 'defender-security' ); } /** * Get the error reason. * * @return string */ public function get_error_reason(): string { return wp_kses( __( 'Error debugging is turned on and may expose details hackers can use.', 'defender-security' ), array( 'strong' => array(), ) ); } /** * Return a summary data of this tweak. * * @return array */ public function to_array(): array { return array( 'slug' => $this->slug, 'title' => $this->get_label(), 'errorReason' => $this->get_error_reason(), 'successReason' => wp_strip_all_tags( __( 'Error reporting is turned off.', 'defender-security' ) ), 'misc' => array( 'show_revert_button' => true, 'show_action_button' => true, ), 'bulk_description' => wp_strip_all_tags( __( 'Turn off error debugging on live sites to help protect sensitive code details. When debugging is no longer needed, turn off error debugging to reduce the risk of exposing information attackers can use.', 'defender-security' ) ), 'bulk_title' => wp_strip_all_tags( __( 'Error Reporting', 'defender-security' ) ), ); } }