mainwp / widgets / widget-mainwp-security-issues-widget.php

widget-mainwp-security-issues-widget.php in MainWP Dashboard: Self-hosted WordPress Management for Agencies 6.1.1, at widgets/widget-mainwp-security-issues-widget.php

292 lines 12.6 KB

Raw Download Zip

1	<?php
2	/**
3	* MainWP Security Widget
4	*
5	* Displays detected security issues on Child Sites.
6	*
7	* @package MainWP/Dashboard
8	*/
9
10	namespace MainWP\Dashboard;
11
12	// Exit if accessed directly.
13	if ( ! defined( 'ABSPATH' ) ) {
14	exit;
15	}
16
17	/**
18	* Class MainWP_Security_Issues_Widget
19	*
20	* Detect security issues on CHild Sites & Build Widget.
21	*/
22	class MainWP_Security_Issues_Widget { // phpcs:ignore Generic.Classes.OpeningBraceSameLine.ContentAfterBrace -- NOSONAR.
23
24	/**
25	* Method get_class_name()
26	*
27	* @return string __CLASS__ Class Name
28	*/
29	public static function get_class_name() {
30	return __CLASS__;
31	}
32
33	/**
34	* Method render_widget()
35	*
36	* Fetch Child Site issues from db & build widget.
37	*
38	* @uses \MainWP\Dashboard\MainWP_DB::query()
39	* @uses \MainWP\Dashboard\MainWP_DB::get_sql_website_by_id()
40	* @uses \MainWP\Dashboard\MainWP_DB::get_sql_search_websites_for_current_user()
41	* @uses \MainWP\Dashboard\MainWP_DB::fetch_object()
42	* @uses \MainWP\Dashboard\MainWP_DB::data_seek()
43	* @uses \MainWP\Dashboard\MainWP_System_Utility::get_current_wpid()
44	* @uses \MainWP\Dashboard\MainWP_Utility::ctype_digit()
45	*/
46	public static function render_widget() {
47	$current_wpid = MainWP_System_Utility::get_current_wpid();
48
49	if ( $current_wpid ) {
50	$sql = MainWP_DB::instance()->get_sql_website_by_id( $current_wpid );
51	$websites = MainWP_DB::instance()->query( $sql );
52	} else {
53	$wpsite_fields = array( 'id', 'name', 'url', 'securityIssues' );
54	$websites = MainWP_DB::instance()->query(
55	MainWP_DB::instance()->get_sql_websites_for_current_user_by_params(
56	array(
57	'select_wp_fields' => $wpsite_fields,
58	)
59	)
60	);
61	}
62
63	$total_securityIssues = 0;
64
65	MainWP_DB::data_seek( $websites, 0 );
66	while ( $websites && ( $website = MainWP_DB::fetch_object( $websites ) ) ) {
67	if ( MainWP_Utility::ctype_digit( $website->securityIssues ) ) {
68	$total_securityIssues += $website->securityIssues;
69	}
70	}
71
72	static::render_issues( $websites, $total_securityIssues, $current_wpid );
73	}
74
75	/**
76	*
77	* Method render_html_widget().
78	*
79	* Render html themes widget for current site
80	*
81	* @param mixed $websites Array of websites.
82	* @param mixed $total_securityIssues Total security Issues.
83	* @param int $current_wpid current wpid.
84	*
85	* @uses \MainWP\Dashboard\MainWP_DB::fetch_object()
86	* @uses \MainWP\Dashboard\MainWP_DB::data_seek()
87	*/
88	public static function render_issues( $websites, $total_securityIssues, $current_wpid ) { // phpcs:ignore -- NOSONAR - complex.
89	$is_demo = MainWP_Demo_Handle::is_demo_mode();
90	?>
91	<div class="mainwp-widget-header">
92	<div class="ui grid">
93	<div class="fourteen wide column">
94	<h2 class="ui header handle-drag">
95	<?php
96	/**
97	* Filter: mainwp_security_issues_widget_title
98	*
99	* Filters the Security Issues widget title text.
100	*
101	* @since 4.1
102	*/
103	echo esc_html( apply_filters( 'mainwp_security_issues_widget_title', esc_html__( 'Site Hardening', 'mainwp' ) ) );
104	?>
105	<div class="sub header"><?php esc_html_e( 'Identify weak spots to boost site hardening.', 'mainwp' ); ?></div>
106	</h2>
107	</div>
108
109	<div class="two wide column right aligned">
110	<div id="widget-security-issues-dropdown-selector" class="ui dropdown top right tiny pointing not-auto-init mainwp-dropdown-tab">
111	<i class="vertical ellipsis icon"></i>
112	<div class="menu">
113	<a href="javascript:void(0)" class="item" data-value="show"><?php esc_html_e( 'Show All', 'mainwp' ); ?></a>
114	<a href="javascript:void(0)" class="item" data-value="issues"><?php esc_html_e( 'Show Issues', 'mainwp' ); ?></a>
115	<a href="javascript:void(0)" class="item" data-value="hide"><?php esc_html_e( 'Hide All', 'mainwp' ); ?></a>
116	</div>
117	</div>
118	</div>
119	</div>
120	<div class="ui cards">
121	<div class="ui fluid small card">
122	<div class="content">
123	<div class="header">
124	<span class="ui large text"><i class="shield alternate icon"></i> <?php echo intval( $total_securityIssues ); ?></span>
125	</div>
126	<div class="description">
127	<strong><?php echo esc_html( _n( 'Recommendation', 'Recommendations', $total_securityIssues, 'mainwp' ) ); ?></strong>
128	</div>
129	</div>
130	</div>
131	</div>
132	<script type="text/javascript">
133
134	jQuery( document ).ready( function () {
135	let curTab = mainwp_ui_state_load('security-widget-issues');
136	curTab = ['hide', 'issues', 'show' ].includes(curTab) ? curTab : 'show';
137	_showhide_issues(curTab);
138	let $issuesSelect = jQuery( '#widget-security-issues-dropdown-selector' ).dropdown( {
139	onChange: function( value ) {
140	mainwp_ui_state_save('security-widget-issues', value);
141	_showhide_issues(value);
142	}
143	} ).dropdown("set selected", curTab);
144	} );
145
146	const _showhide_issues = function(value){
147	if('hide' === value ){
148	jQuery('#mainwp-security-issues-widget-list').hide();
149	} else {
150	jQuery('#mainwp-security-issues-widget-list').fadeIn(1000);
151	}
152	if('issues' === value){
153	jQuery('#mainwp-security-issues-widget-list').fadeIn(1000);
154	jQuery('#mainwp-security-issues-widget-list > .item').show();
155	jQuery('#mainwp-security-issues-widget-list > .item[count-issues=0]').hide();
156	} else if('show' === value){
157	jQuery('#mainwp-security-issues-widget-list').fadeIn(1000);
158	jQuery('#mainwp-security-issues-widget-list > .item').fadeIn(1000);
159	} else {
160	jQuery('#mainwp-security-issues-widget-list').hide();
161	}
162	}
163	</script>
164	<?php
165	/**
166	* Action: mainwp_security_issues_widget_top
167	*
168	* Fires at the bottom of the Security Issues widget.
169	*
170	* @since 4.1
171	*/
172	do_action( 'mainwp_security_issues_widget_top' );
173	?>
174
175	</div>
176	<?php
177	/**
178	* Action: mainwp_security_issues_widget_top
179	*
180	* Fires at the bottom of the Security Issues widget.
181	*
182	* @since 4.1
183	*/
184	do_action( 'mainwp_security_issues_widget_top' );
185	?>
186
187
188	<div class="mainwp-scrolly-overflow">
189
190	<div class="ui middle aligned divided list" id="mainwp-security-issues-widget-list" style="display:none">
191	<?php
192	$count_security_issues = '';
193	MainWP_DB::data_seek( $websites, 0 );
194	while ( $websites && ( $website = MainWP_DB::fetch_object( $websites ) ) ) {
195	if ( '[]' === $website->securityIssues ) {
196	$count_security_issues = '';
197	} else {
198	$count_security_issues = intval( $website->securityIssues );
199	}
200	?>
201	<div class="item" count-issues="<?php echo (int) $count_security_issues; ?>" <?php echo '' !== $count_security_issues && $count_security_issues > 0 ? 'status="queue"' : ''; ?> siteid="<?php echo intval( $website->id ); ?>">
202	<div class="right floated">
203	<div class="ui right pointing dropdown">
204	<i class="ellipsis vertical icon"></i>
205	<div class="menu">
206	<a href="admin.php?page=managesites&scanid=<?php echo esc_attr( $website->id ); ?>" class="item"><?php esc_html_e( 'Details', 'mainwp' ); ?></a>
207	</div>
208	</div>
209	</div>
210	<?php if ( $is_demo ) : ?>
211	<a href="<?php echo esc_html( $website->url ) . 'wp-admin.html'; ?>" target="_blank"><i class="sign in alternate icon"></i></a>
212	<?php else : ?>
213	<a href="<?php MainWP_Site_Open::get_open_site_admin_link( $website->id, true ); ?>" target="_blank"><i class="sign in alternate icon"></i></a>
214	<?php endif; ?>
215	<a href="
216	<?php
217	/**
218	* Filter: mainwp_security_issues_list_item_title_url
219	*
220	* Filters the Security Issues widget list item title URL.
221	*
222	* @since 4.1
223	*/
224	echo esc_url( apply_filters( 'mainwp_security_issues_list_item_title_url', 'admin.php?page=managesites&dashboard=' . $website->id, $website ) );
225	?>
226	">
227	<?php
228	/**
229	* Filter: mainwp_security_issues_list_item_title
230	*
231	* Filters the Security Issues widget list item title text.
232	*
233	* @since 4.1
234	*/
235	echo esc_attr( stripslashes( apply_filters( 'mainwp_security_issues_list_item_title', $website->name, $website ) ) );
236	?>
237	</a>
238	<?php if ( 0 === $count_security_issues ) : ?>
239	<div><span class="ui small text"><?php esc_html_e( 'No issues detected', 'mainwp' ); ?></span></div>
240	<?php elseif ( '' === $count_security_issues ) : ?>
241	<div><span class="ui small text"><?php esc_html_e( 'No data available', 'mainwp' ); ?></span></div>
242	<?php else : ?>
243	<div><span class="ui small text"><?php echo esc_html( $count_security_issues ); ?> <?php echo esc_html( _n( 'issue detected', 'issues detected', $count_security_issues, 'mainwp' ) ); ?></span></div>
244	<?php endif; ?>
245
246	<?php
247	/**
248	* Action: mainwp_security_issues_list_item_column
249	*
250	* Fires before the last (actions) colum in the security issues list.
251	*
252	* Preferred HTML structure:
253	*
254	* <div class="column middle aligned">
255	* Your content here!
256	* </div>
257	*
258	* @param object $website Object containing the child site info.
259	*
260	* @since 4.1
261	*/
262	do_action( 'mainwp_security_issues_list_item_column', $website );
263	?>
264
265	</div>
266	<?php } ?>
267	</div>
268	</div>
269	<?php
270	/**
271	* Action: mainwp_security_issues_widget_bottom
272	*
273	* Fires at the bottom of the Security Issues widget.
274	*
275	* @since 4.1
276	*/
277	do_action( 'mainwp_security_issues_widget_bottom' );
278	?>
279	<div class="ui two column grid mainwp-widget-footer">
280	<div class="left aligned middle aligned column">
281	</div>
282	<div class="right aligned middle aligned column">
283
284	</div>
285	</div>
286	<div class="ui active dimmer" style="display:none" id="mainwp-secuirty-issues-loader">
287	<div class="ui double text loader"></div>
288	</div>
289	<?php
290	}
291	}
292