defender-security / src / component / security-tweaks / class-prevent-php.php

class-prevent-php.php in Defender Security – Malware Scanner, Login Security & Firewall 6.3.0, at src/component/security-tweaks/class-prevent-php.php

110 lines 3.0 KB

Raw Download Zip

1	<?php
2	/**
3	* Prevents PHP execution in directories that should not execute PHP.
4	*
5	* @package WP_Defender\Component\Security_Tweaks
6	*/
7
8	namespace WP_Defender\Component\Security_Tweaks;
9
10	use WP_Error;
11	use WP_Defender\Component\Security_Tweaks\Servers\Server;
12
13	/**
14	* Prevents PHP execution in directories that should not execute PHP.
15	*/
16	class Prevent_PHP extends Abstract_Security_Tweaks {
17
18	/**
19	* Identifier for the security tweak.
20	*
21	* @var string
22	*/
23	public string $slug = 'prevent-php-executed';
24
25	/**
26	* Check whether the issue has been resolved or not.
27	*
28	* @return bool
29	*/
30	public function check() {
31	return Server::create( Server::get_current_server() )->from( $this->slug )->check();
32	}
33
34	/**
35	* Here is the code for processing, if the return is true, we add it to resolve list, WP_Error if any error.
36	*
37	* @param string $current_server The server on which to apply the configuration.
38	*
39	* @return bool\|WP_Error
40	*/
41	public function process( $current_server ) {
42	return Server::create( $current_server )->from( $this->slug )->process();
43	}
44
45	/**
46	* This is for un-do stuff that has be done in @process.
47	*
48	* @param string\|null $current_server The server on which to apply the configuration.
49	*
50	* @return bool\|WP_Error
51	*/
52	public function revert( $current_server = null ) {
53	if ( is_null( $current_server ) ) {
54	$current_server = Server::get_current_server();
55	}
56
57	return Server::create( $current_server )->from( $this->slug )->revert();
58	}
59
60	/**
61	* Shield up.
62	*
63	* @return bool
64	*/
65	public function shield_up() {
66	return true;
67	}
68
69	/**
70	* Retrieve the tweak's label.
71	*
72	* @return string
73	*/
74	public function get_label(): string {
75	return wp_strip_all_tags( __( 'Prevent PHP execution', 'defender-security' ) );
76	}
77
78	/**
79	* Get the error reason.
80	*
81	* @return string
82	*/
83	public function get_error_reason(): string {
84	return '';
85	}
86
87	/**
88	* Return a summary data of this tweak.
89	*
90	* @return array
91	*/
92	public function to_array(): array {
93	return array(
94	'slug' => $this->slug,
95	'title' => $this->get_label(),
96
97	'successReason' => wp_strip_all_tags( __( "You've disabled PHP execution, good stuff.", 'defender-security' ) ),
98	'misc' => array(
99	'active_server' => Server::get_current_server(),
100	'apache_rules' => Server::create( 'apache' )->from( $this->slug )->get_rules_for_instruction(),
101	'litespeed_rules' => Server::create( 'litespeed' )->from( $this->slug )->get_litespeed_rules_for_instruction(),
102	'nginx_rules' => Server::create( 'nginx' )->from( $this->slug )->get_rules(),
103	'wp_content_dir' => WP_CONTENT_DIR,
104	),
105	'bulk_description' => wp_strip_all_tags( __( 'A plugin or theme vulnerability can allow harmful PHP files to run in your site directories. Prevent PHP execution where it isn’t needed to help block malicious files and reduce risk.', 'defender-security' ) ),
106	'bulk_title' => wp_strip_all_tags( __( 'PHP Execution', 'defender-security' ) ),
107	);
108	}
109	}
110