patchstack / includes / multisite.php

multisite.php in Patchstack – WordPress & Plugins Security 2.2.4, at includes/multisite.php

187 lines 7.3 KB

Raw Download Zip

1	<?php
2
3	// Do not allow the file to be called directly.
4	if ( ! defined( 'ABSPATH' ) ) {
5	exit;
6	}
7
8	/**
9	* This class is used to handle anything multisite related.
10	*/
11	class P_Multisite extends P_Core {
12
13	/**
14	* Stores any errors.
15	*
16	* @var string
17	*/
18	public $error = '';
19
20	/**
21	* Add the actions required for the multisite functionality.
22	*
23	* @param Patchstack $core
24	* @return void
25	*/
26	public function __construct( $core ) {
27	parent::__construct( $core );
28	if ( ! is_super_admin() ) {
29	return;
30	}
31
32	// When settings are saved.
33	if ( isset( $_POST['option_page'], $_POST['PatchstackNonce'] ) && wp_verify_nonce( $_POST['PatchstackNonce'], 'patchstack-option-page' ) ) {
34	$this->save_settings();
35	}
36
37	// When sites are activated.
38	if ( isset( $_POST['patchstack_do'], $_POST['PatchstackNonce'], $_POST['sites'] ) && $_POST['patchstack_do'] == 'do_licenses' && wp_verify_nonce( $_POST['PatchstackNonce'], 'patchstack-multisite-activation' ) ) {
39	$this->activate_licenses();
40	}
41
42	// When we need to re-run the migration of a specific site.
43	if ( isset( $_GET['site'], $_GET['PatchstackNonce'] ) && wp_verify_nonce( $_GET['PatchstackNonce'], 'patchstack-migration' ) ) {
44	$this->run_migration();
45	}
46	}
47
48	/**
49	* When a user selects sites that need to be activated.
50	*
51	* @return string
52	*/
53	private function activate_licenses() {
54	if ( empty( $_POST['sites'] ) ) {
55	$this->error = '<span style="color: #ff6262;">Please select at least 1 site to be activated.</span><br /><br />';
56	return;
57	}
58
59	// Determine which sites are already activated and skip those.
60	$activate = [];
61	$sites = get_sites();
62	foreach ( $sites as $site ) {
63	if ( in_array( $site->siteurl, $_POST['sites'] ) && get_blog_option( $site->id, 'patchstack_clientid' ) == '' ) {
64	array_push( $activate, $site->siteurl );
65	}
66	}
67
68	// Make sure there is a site that can be activated.
69	if ( count( $activate ) == 0 ) {
70	$this->error = '<span style="color: #ff6262;">None of the selected sites need activation.</span><br /><br />';
71	return;
72	}
73
74	// Add the site to the app and retrieve the license for each site.
75	$licenses = $this->plugin->api->get_site_licenses( [ 'sites' => $activate ] );
76
77	// Did an error happen during the multisite license activation?
78	if ( isset( $licenses['error'] ) ) {
79	$this->error = '<span style="color: #ff6262;">' . $licenses['error'] . '</span><br /><br />';
80	return;
81	}
82
83	// Activate licenses on given sites
84	$sites = get_sites();
85	foreach ( $sites as $site ) {
86	if ( isset( $licenses[ $site->siteurl ] ) ) {
87	$this->plugin->activation->activate_multisite_license( $site, $licenses[ $site->siteurl ] );
88	}
89	}
90	}
91
92	/**
93	* When the individual or global settings are saved.
94	*
95	* @return void
96	*/
97	private function save_settings() {
98	switch ( $_POST['option_page'] ) {
99	// Save hardening options
100	case 'patchstack_hardening_settings_group':
101	$options = [ 'patchstack_auto_update', 'patchstack_json_is_disabled', 'patchstack_register_email_blacklist', 'patchstack_move_logs', 'patchstack_basicscanblock', 'patchstack_userenum', 'patchstack_hidewpversion', 'patchstack_activity_log_is_enabled', 'patchstack_activity_log_failed_logins', 'patchstack_xmlrpc_is_disabled', 'patchstack_captcha_on_comments', 'patchstack_captcha_login_form', 'patchstack_captcha_registration_form', 'patchstack_captcha_reset_pwd_form', 'patchstack_captcha_type', 'patchstack_captcha_public_key', 'patchstack_captcha_public_key_v3', 'patchstack_captcha_public_key_v3_new', 'patchstack_captcha_private_key', 'patchstack_captcha_private_key_v3', 'patchstack_captcha_private_key_v3_new', 'patchstack_application_passwords_disabled' ];
102	$this->save_options( $options );
103	break;
104
105	// Save firewall settings
106	case 'patchstack_firewall_settings_group':
107	$options = [ 'patchstack_geo_block_countries', 'patchstack_geo_block_enabled', 'patchstack_geo_block_inverse', 'patchstack_ip_block_list', 'patchstack_basic_firewall', 'patchstack_autoblock_blocktime', 'patchstack_autoblock_attempts', 'patchstack_autoblock_minutes', 'patchstack_basic_firewall_roles', 'patchstack_disable_htaccess', 'patchstack_add_security_headers', 'patchstack_prevent_default_file_access', 'patchstack_block_debug_log_access', 'patchstack_index_views', 'patchstack_proxy_comment_posting', 'patchstack_image_hotlinking', 'patchstack_firewall_custom_rules', 'patchstack_firewall_custom_rules_loc', 'patchstack_blackhole_log', 'patchstack_whitelist' ];
108	$this->save_options( $options );
109	break;
110
111	// Save login settings
112	case 'patchstack_login_settings_group':
113	$options = [ 'patchstack_mv_wp_login', 'patchstack_rename_wp_login', 'patchstack_block_bruteforce_ips', 'patchstack_anti_bruteforce_blocktime', 'patchstack_anti_bruteforce_attempts', 'patchstack_anti_bruteforce_minutes', 'patchstack_login_time_block', 'patchstack_login_time_start', 'patchstack_login_time_end', 'patchstack_login_2fa', 'patchstack_login_whitelist' ];
114	$this->save_options( $options );
115	break;
116
117	// Save cookie notice settings
118	case 'patchstack_cookienotice_settings_group':
119	$options = [ 'patchstack_enable_cookie_notice_message', 'patchstack_cookie_notice_message', 'patchstack_cookie_notice_accept_text', 'patchstack_cookie_notice_backgroundcolor', 'patchstack_cookie_notice_textcolor', 'patchstack_cookie_notice_privacypolicy_enable', 'patchstack_cookie_notice_privacypolicy_text', 'patchstack_cookie_notice_privacypolicy_link', 'patchstack_cookie_notice_cookie_expiration', 'patchstack_cookie_notice_opacity', 'patchstack_cookie_notice_credits' ];
120	$this->save_options( $options );
121	break;
122	}
123	}
124
125	/**
126	* This will be called when the network admin clicks on the "Sites" button.
127	* It will show all sites.
128	*
129	* @return void
130	*/
131	public function sites_section_callback() {
132	require_once dirname( __FILE__ ) . '/views/pages/multisite-table.php';
133	}
134
135	/**
136	* Save an array of options on a specific site.
137	*
138	* @param array $options
139	* @return void
140	*/
141	private function save_options( $options ) {
142	if ( isset( $_GET['page'] ) && $_GET['page'] == 'patchstack-multisite-settings' ) {
143	foreach ( $options as $option ) {
144	$value = isset( $_POST[ $option ] ) ? $_POST[ $option ] : 0;
145	$value = map_deep( $value, 'wp_filter_nohtml_kses' );
146	update_site_option( $option, $value );
147	}
148	} else {
149	foreach ( $options as $option ) {
150	$value = isset( $_POST[ $option ] ) ? $_POST[ $option ] : 0;
151	$value = map_deep( $value, 'wp_filter_nohtml_kses' );
152	update_option( $option, $value );
153	}
154	}
155	}
156
157	/**
158	* Re-run the migration for a specific multisite site.
159	*
160	* @return void
161	*/
162	private function run_migration( ) {
163	// Must be a number.
164	if ( !ctype_digit( $_GET['site'] ) ) {
165	exit;
166	}
167
168	// Site must be valid and exists.
169	$site = get_site( $_GET['site'] );
170	if ( is_null( $site ) ) {
171	exit;
172	}
173
174	// Perform base migration.
175	$this->plugin->activation->migrate( null, $site->id );
176
177	// Perform specific version migrations.
178	$versions = array('3.0.1', '3.0.2');
179	foreach ( $versions as $version ) {
180	$this->plugin->activation->migrate( $version, $site->id );
181	}
182
183	wp_safe_redirect( add_query_arg( [ 'success' => '1', 'site' => $site->id ], remove_query_arg( [ 'PatchstackNonce', 'site' ] ) ) );
184	exit;
185	}
186	}
187