fw_centlog.php — NinjaFirewall (WP Edition) – Advanced Security Plugin and Firewall trunk

ninjafirewall / lib / fw_centlog.php

ninjafirewall / lib Last commit date

fw_centlog.php

81 lines

1	<?php
2	// +---------------------------------------------------------------------+
3	// \| NinjaFirewall (WP Edition) \|
4	// \| \|
5	// \| (c) NinTechNet - https://nintechnet.com/ \|
6	// +---------------------------------------------------------------------+
7	// \| This program is free software: you can redistribute it and/or \|
8	// \| modify it under the terms of the GNU General Public License as \|
9	// \| published by the Free Software Foundation, either version 3 of \|
10	// \| the License, or (at your option) any later version. \|
11	// \| \|
12	// \| This program is distributed in the hope that it will be useful, \|
13	// \| but WITHOUT ANY WARRANTY; without even the implied warranty of \|
14	// \| MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the \|
15	// \| GNU General Public License for more details. \|
16	// +---------------------------------------------------------------------+ sa
17
18	if (! isset( $nfw_['nfw_options']['enabled']) ) {
19	header('HTTP/1.1 404 Not Found');
20	header('Status: 404 Not Found');
21	exit;
22	}
23
24	/* ------------------------------------------------------------------ */
25	function fw_centlog() {
26
27	global $nfw_;
28
29	$pubkey = explode( ':', $nfw_['nfw_options']['clogs_pubkey'], 2 );
30
31	if ( isset( $pubkey[1]) && $pubkey[1] != '*' ) {
32
33	if ( NFW_REMOTE_ADDR != $pubkey[1] ) {
34
35	NinjaFirewall_log::write(
36	'Centralized logging: IP not allowed',
37	NFW_REMOTE_ADDR,
38	NFWLOG_INFO, 0, $nfw_['nfw_options'], $nfw_['log_dir']
39	);
40	fw_centlog_die();
41	}
42	}
43
44	if ( empty( $pubkey[0] ) \|\| ! hash_equals( $pubkey[0], sha1( $_POST['clogs_req'] ) ) ) {
45
46	NinjaFirewall_log::write(
47	'Centralized logging: public key rejected',
48	NFW_REMOTE_ADDR,
49	NFWLOG_INFO, 0, $nfw_['nfw_options'], $nfw_['log_dir']
50	);
51	fw_centlog_die();
52	}
53
54	$cur_month = date('Y-m');
55	$log_file = $nfw_['log_dir']. '/firewall_' . $cur_month . '.php';
56
57	if (! file_exists( $log_file ) ) {
58	exit('1:');
59	}
60
61	$data = file( $log_file, FILE_SKIP_EMPTY_LINES );
62	if ( $data === false ) {
63	exit('2:');
64	}
65
66	echo '0:~*~:' . base64_encode( json_encode( $data ) );
67	exit;
68	}
69
70	/* ------------------------------------------------------------------ */
71
72	function fw_centlog_die() {
73
74	header('HTTP/1.1 406 Not Acceptable');
75	header('Status: 406 Not Acceptable');
76	exit;
77	}
78
79	/* ------------------------------------------------------------------ */
80	// EOF
81