← All changes | includes/admin/ajax.php +43 -122 2.1.6 → 2.2.11 View file →

		@@ -18,152 +18,73 @@
18	18	*/
19	19	public function __construct( $core ) {
20	20	parent::__construct( $core );
21	21	if ( isset( $_POST['PatchstackNonce'] ) && current_user_can( 'manage_options' ) && wp_verify_nonce( $_POST['PatchstackNonce'], 'patchstack-nonce' ) ) {
22		- // Log tables actions.
23		- add_action( 'wp_ajax_users_log_table', array( $this, 'users_log_table' ) );
24		- add_action( 'wp_ajax_firewall_log_table', array( $this, 'firewall_log_table' ) );
	22	+ // License related actions.
	23	+ add_action( 'wp_ajax_patchstack_activate_license', [ $this, 'activate_license' ] );
25	24
26		- // License related actions.
27		- add_action( 'wp_ajax_activate_license', array( $this, 'activate_license' ) );
	25	+ // Auto license activator.
	26	+ add_action( 'wp_ajax_patchstack_activate_auto', [ $this, 'auto_activate' ] );
	27	+ add_action( 'wp_ajax_patchstack_activation_status', [ $this, 'activation_status' ] );
28	28	}
29	29	}
30	30
31	31	/**
32		- * Firewall logs pagination.
	32	+ * Test and activate a new license.
33	33	*
34		- * @return array
	34	+ * @return void
35	35	*/
36		- public function firewall_log_table() {
37		- if ( ! isset( $_POST['start'], $_POST['length'] ) || !ctype_digit( $_POST['start'] ) || !ctype_digit( $_POST['length'] ) ) {
38		- exit;
	36	+ public function activate_license() {
	37	+ if ( ! isset( $_POST['key'] ) || strpos( $_POST['key'], '-' ) === false) {
	38	+ wp_send_json(
	39	+ [
	40	+ 'result' => 'error',
	41	+ 'error_message' => 'An invalid API key was provided.'
	42	+ ]
	43	+ );
39	44	}
40	45
41		- // Pull all entries, given parameters.
42		- global $wpdb;
43		- $entries = $wpdb->get_results(
44		- $wpdb->prepare(
45		- "SELECT a.id, a.ip, a.flag, a.method, a.log_date, case when a.referer IS NULL or a.referer = '' then a.request_uri else a.referer end as referer, a.fid, b.description
46		- FROM " . $wpdb->prefix . 'patchstack_firewall_log AS a
47		- LEFT JOIN ' . $wpdb->prefix . 'patchstack_logic AS b ON b.id = a.fid
48		- ORDER BY a.id DESC
49		- LIMIT %d, %d
50		- ',
51		- array( wp_filter_nohtml_kses( $_POST['start'] ), wp_filter_nohtml_kses( $_POST['length'] ) )
52		- )
53		- );
	46	+ // Since we have the keys combined into one now, split them up here.
	47	+ $split = explode('-', $_POST['key']);
	48	+ $secretkey = $split[0];
	49	+ $clientid = $split[1];
54	50
55		- // Get total amount of rows.
56		- $count = $wpdb->get_var( 'SELECT COUNT(id) FROM ' . $wpdb->prefix . 'patchstack_firewall_log' );
57		- $firewall_rules = json_decode( get_option( 'patchstack_firewall_rules', '' ), true );
58		-
59		- // Modify data if necessary.
60		- $list = array();
61		- foreach ( $entries as $entry ) {
62		- foreach ( $entry as $key => $value ) {
63		- if ( ! in_array( $key, array( 'referer' ) ) ) {
64		- $entry->$key = sanitize_textarea_field( $value );
65		- }
66		- }
67		-
68		- // Attempt to find the block reason.
69		- $reason = $wpdb->get_var( $wpdb->prepare( 'SELECT cname FROM ' . $wpdb->prefix . 'patchstack_logic WHERE id = %d LIMIT 1', array( $entry->fid ) ) );
70		- if ( $reason ) {
71		- $entry->fid = $reason;
72		- } elseif ( $firewall_rules != '' ) {
73		- foreach ( $firewall_rules as $rule ) {
74		- if ( isset( $rule['title'], $rule['cat'] ) && '55' . $rule['id'] == $entry->fid ) {
75		- $entry->fid = $rule['cat'];
76		- $entry->description = $rule['title'];
77		- }
78		- }
79		- } else {
80		- $entry->fid = 'Unknown';
81		- }
82		-
83		- $list[] = $entry;
	51	+ // Test the new keys.
	52	+ update_option( 'patchstack_api_token', '' );
	53	+ $results = $this->plugin->activation->alter_license( wp_filter_nohtml_kses( $clientid ), wp_filter_nohtml_kses( $secretkey ), 'activate' );
	54	+ if ( $results ) {
	55	+ $response = $this->plugin->api->update_license_status();
	56	+ $results['response'] = $response;
	57	+ wp_send_json( $results );
84	58	}
85		-
86		- // Return output.
87		- wp_send_json(
88		- array(
89		- 'data' => $list,
90		- 'recordsFiltered' => $count,
91		- 'recordsTotal' => $count
92		- )
93		- );
94	59	}
95	60
96	61	/**
97		- * Activity logs pagination.
98		- *
	62	+ * Attempt to auto activate the license after a plugin activation, if no current license exists.
	63	+ *
99	64	* @return void
100	65	*/
101		- public function users_log_table() {
102		- if ( ! isset( $_POST['start'], $_POST['length'] ) || !ctype_digit( $_POST['start'] ) || !ctype_digit( $_POST['length'] ) ) {
103		- exit;
104		- }
	66	+ public function auto_activate() {
	67	+ $secretToken = get_option( 'patchstack_activation_secret', '' );
105	68
106		- // Determine if searching?
107		- global $wpdb;
108		- $searching = false;
109		- $likes = array();
110		- if ( isset( $_POST['search'], $_POST['search']['value'] ) && $_POST['search']['value'] != '' ) {
111		- $val = wp_filter_nohtml_kses( $_POST['search']['value'] );
112		- $searching = true;
113		- $columns = array( 'author', 'ip', 'object', 'object_name', 'action' );
114		- $search = 'WHERE 1=2 ';
115		- foreach ( $columns as $column ) {
116		- array_push( $likes, '%' . $wpdb->esc_like( $val ) . '%' );
117		- $search .= 'OR ' . $column . ' LIKE %s';
118		- }
	69	+ // Only continue if we have a secret token.
	70	+ $autoActivated = false;
	71	+ if ( ! empty( $secretToken ) ) {
	72	+ $autoActivated = $this->plugin->api->send_secret_token( $secretToken );
119	73	}
120	74
121		- $logs = $wpdb->get_results(
122		- $wpdb->prepare(
123		- 'SELECT *
124		- FROM ' . $wpdb->prefix . 'patchstack_event_log ' . ( $searching ? $search : '' ) . '
125		- ORDER BY id DESC
126		- LIMIT %d, %d
127		- ',
128		- array_merge( $likes, array( wp_filter_nohtml_kses( $_POST['start'] ), wp_filter_nohtml_kses( $_POST['length'] ) ) )
129		- )
130		- );
131		-
132		- $count = $wpdb->get_var( $wpdb->prepare( 'SELECT COUNT(id) FROM ' . $wpdb->prefix . 'patchstack_event_log ' . ( $searching ? $search : '' ), $likes ) );
133		-
134		- // Modify data if necessary.
135		- $list = array();
136		- foreach ( $logs as $log ) {
137		- $list[] = $log;
138		- }
139		-
140		- // Return output.
141		- wp_send_json(
142		- array(
143		- 'data' => $list,
144		- 'recordsFiltered' => $count,
145		- 'recordsTotal' => $count
146		- )
147		- );
	75	+ wp_send_json( [
	76	+ 'result' => $autoActivated || get_option( 'patchstack_clientid', false ) != false ? 'success' : 'error'
	77	+ ] );
148	78	}
149	79
150	80	/**
151		- * Test and activate a new license.
152		- *
	81	+ * Get the current license activation status.
	82	+ *
153	83	* @return void
154	84	*/
155		- public function activate_license() {
156		- if ( ! isset( $_POST['clientid'], $_POST['secretkey'] ) || !ctype_digit( $_POST['clientid'] ) ) {
157		- return;
158		- }
159		-
160		- // Test the new keys.
161		- update_option( 'patchstack_api_token', '' );
162		- $results = $this->plugin->activation->alter_license( wp_filter_nohtml_kses( $_POST['clientid'] ), wp_filter_nohtml_kses( $_POST['secretkey'] ), 'activate' );
163		- if ( $results ) {
164		- $response = $this->plugin->api->update_license_status();
165		- $results['response'] = $response;
166		- wp_send_json( $results );
167		- }
	85	+ public function activation_status() {
	86	+ wp_send_json( [
	87	+ 'activated' => get_option( 'patchstack_clientid', false ) != false
	88	+ ] );
168	89	}
169	90	}