updraftplus
Last commit date
central
3 weeks ago
css
3 weeks ago
images
1 month ago
includes
3 weeks ago
js
3 weeks ago
languages
3 weeks ago
methods
3 weeks ago
templates
1 month ago
vendor
3 weeks ago
SECURITY.md
1 year ago
admin.php
3 weeks ago
backup.php
3 weeks ago
changelog-old.txt
2 years ago
class-updraftplus.php
3 weeks ago
example-decrypt.php
1 month ago
index.html
4 years ago
options.php
3 weeks ago
readme.txt
3 weeks ago
restorer.php
3 weeks ago
updraftplus.php
3 weeks ago
updraftplus.php
311 lines
| 1 | <?php |
| 2 | // @codingStandardsIgnoreStart |
| 3 | |
| 4 | /* |
| 5 | Plugin Name: UpdraftPlus - Backup/Restore |
| 6 | Plugin URI: https://updraftplus.com |
| 7 | Description: Backup and restore: take backups locally, or backup to Amazon S3, Dropbox, Google Drive, Rackspace, (S)FTP, WebDAV & email, on automatic schedules. |
| 8 | Author: TeamUpdraft, DavidAnderson |
| 9 | Version: 1.26.4 |
| 10 | Donate link: https://david.dw-perspective.org.uk/donate |
| 11 | License: GPLv3 or later |
| 12 | Text Domain: updraftplus |
| 13 | Domain Path: /languages |
| 14 | Author URI: https://updraftplus.com |
| 15 | */ |
| 16 | // @codingStandardsIgnoreEnd |
| 17 | |
| 18 | /* |
| 19 | Portions copyright 2011-25 David Anderson |
| 20 | Portions copyright 2010 Paul Kehrer |
| 21 | Other portions copyright as indicated by authors in the relevant files |
| 22 | |
| 23 | This program is free software; you can redistribute it and/or modify |
| 24 | it under the terms of the GNU General Public License as published by |
| 25 | the Free Software Foundation; either version 3 of the License, or |
| 26 | (at your option) any later version. |
| 27 | |
| 28 | This program is distributed in the hope that it will be useful, |
| 29 | but WITHOUT ANY WARRANTY; without even the implied warranty of |
| 30 | MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the |
| 31 | GNU General Public License for more details. |
| 32 | |
| 33 | You should have received a copy of the GNU General Public License |
| 34 | along with this program; if not, write to the Free Software |
| 35 | Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA |
| 36 | */ |
| 37 | |
| 38 | if (!defined('ABSPATH')) die('No direct access allowed'); |
| 39 | |
| 40 | if ((isset($updraftplus) && is_object($updraftplus) && is_a($updraftplus, 'UpdraftPlus')) || function_exists('updraftplus_modify_cron_schedules')) return; // phpcs:ignore VariableAnalysis.CodeAnalysis.VariableAnalysis.UndefinedVariable -- There is a possibility that the $updraftplus variable is already defined from previous process. |
| 41 | |
| 42 | define('UPDRAFTPLUS_DIR', dirname(__FILE__)); |
| 43 | define('UPDRAFTPLUS_URL', plugins_url('', __FILE__)); |
| 44 | define('UPDRAFTPLUS_PLUGIN_SLUG', plugin_basename(__FILE__)); |
| 45 | define('UPDRAFT_DEFAULT_OTHERS_EXCLUDE', 'upgrade,cache,updraft,backup*,*backups,mysql.sql,debug.log'); |
| 46 | define('UPDRAFT_DEFAULT_UPLOADS_EXCLUDE', 'backup*,*backups,backwpup*,wp-clone,snapshots,wp-staging'); |
| 47 | |
| 48 | // The following can go in your wp-config.php |
| 49 | // Tables whose data can be skipped without significant loss, if (and only if) the attempt to back them up fails (e.g. bwps_log, from WordPress Better Security, is log data; but individual entries can be huge and cause out-of-memory fatal errors on low-resource environments). Comma-separate the table names (without the WordPress table prefix). |
| 50 | if (!defined('UPDRAFTPLUS_DATA_OPTIONAL_TABLES')) define('UPDRAFTPLUS_DATA_OPTIONAL_TABLES', 'bwps_log,statpress,slim_stats,redirection_logs,Counterize,Counterize_Referers,Counterize_UserAgents,wbz404_logs,wbz404_redirects,tts_trafficstats,tts_referrer_stats,wponlinebackup_generations,svisitor_stat,simple_feed_stats,itsec_log,relevanssi_log,blc_instances,wysija_email_user_stat,woocommerce_sessions,et_bloom_stats,redirection_404,lbakut_activity_log,stream_meta,wfFileMods,wffilemods,wfBlockedIPLog,wfblockediplog,page_visit_history,strack_st'); |
| 51 | if (!defined('UPDRAFTPLUS_ZIP_EXECUTABLE')) define('UPDRAFTPLUS_ZIP_EXECUTABLE', "/usr/bin/zip,/bin/zip,/usr/local/bin/zip,/usr/sfw/bin/zip,/usr/xdg4/bin/zip,/opt/bin/zip"); |
| 52 | if (!defined('UPDRAFTPLUS_MYSQLDUMP_EXECUTABLE')) define('UPDRAFTPLUS_MYSQLDUMP_EXECUTABLE', updraftplus_build_mysqldump_list()); |
| 53 | // If any individual file size is greater than this, then a warning is given |
| 54 | if (!defined('UPDRAFTPLUS_WARN_FILE_SIZE')) define('UPDRAFTPLUS_WARN_FILE_SIZE', 1024*1024*250); |
| 55 | // On a test on a Pentium laptop, 100,000 rows needed ~ 1 minute to write out - so 150,000 is around the CPanel default of 90 seconds execution time. |
| 56 | if (!defined('UPDRAFTPLUS_WARN_DB_ROWS')) define('UPDRAFTPLUS_WARN_DB_ROWS', 150000); |
| 57 | |
| 58 | // The smallest value (in megabytes) that the "split zip files at" setting is allowed to be set to |
| 59 | if (!defined('UPDRAFTPLUS_SPLIT_MIN')) define('UPDRAFTPLUS_SPLIT_MIN', 25); |
| 60 | |
| 61 | // The maximum number of files to batch at one time when writing to the backup archive. You'd only be likely to want to raise (not lower) this. |
| 62 | if (!defined('UPDRAFTPLUS_MAXBATCHFILES')) define('UPDRAFTPLUS_MAXBATCHFILES', 1000); |
| 63 | |
| 64 | // If any individual email attachment is greater than this, then a warning is given (and then removed if the email actually succeeds) |
| 65 | if (!defined('UPDRAFTPLUS_WARN_EMAIL_SIZE')) define('UPDRAFTPLUS_WARN_EMAIL_SIZE', 20*1048576); |
| 66 | |
| 67 | // Filetypes that should be stored inside the zip without any attempt at further compression. By default, we mark several extensions that refer to filetypes that are already compressed as not needing further compression - which saves time/resources. This option only applies to zip engines that support varying the compression method. Specify in lower-case, and upper-case variants (and for some zip engines, all variants) will automatically be included. |
| 68 | if (!defined('UPDRAFTPLUS_ZIP_NOCOMPRESS')) define('UPDRAFTPLUS_ZIP_NOCOMPRESS', '.jpg,.jpeg,.png,.gif,.zip,.gz,.bz2,.xz,.rar,.mp3,.mp4,.mpeg,.avi,.mov'); |
| 69 | |
| 70 | // This is passed to set_time_limit() at various points, to try to maximise run-time. (UD resumes if it gets killed, but more in one stretch always helps). The effect of this varies according to the hosting setup - it can't necessarily always be controlled. |
| 71 | if (!defined('UPDRAFTPLUS_SET_TIME_LIMIT')) define('UPDRAFTPLUS_SET_TIME_LIMIT', 900); |
| 72 | |
| 73 | // Options to pass to the zip binary (if that method happens to be used). By default, we mark the extensions specified in UPDRAFTPLUS_ZIP_NOCOMPRESS for non-compression via the -n flag |
| 74 | if (!defined('UPDRAFTPLUS_BINZIP_OPTS')) { |
| 75 | $zip_nocompress = array_map('trim', explode(',', UPDRAFTPLUS_ZIP_NOCOMPRESS)); |
| 76 | $zip_binzip_opts = ''; |
| 77 | foreach ($zip_nocompress as $ext) { |
| 78 | if (empty($zip_binzip_opts)) { |
| 79 | $zip_binzip_opts = "-n $ext:".strtoupper($ext); |
| 80 | } else { |
| 81 | $zip_binzip_opts .= ':'.$ext.':'.strtoupper($ext); |
| 82 | } |
| 83 | } |
| 84 | define('UPDRAFTPLUS_BINZIP_OPTS', $zip_binzip_opts); |
| 85 | } |
| 86 | |
| 87 | /** |
| 88 | * A wrapper for (require|include)(_once)? that will first check for existence, and direct the user what to do (since the traditional PHP error messages aren't clear enough for all users) |
| 89 | * |
| 90 | * @param String $path the file path to check |
| 91 | * @param String $method the method to load the file |
| 92 | */ |
| 93 | function updraft_try_include_file($path, $method = 'include') { |
| 94 | |
| 95 | $file_to_include = UPDRAFTPLUS_DIR.'/'.$path; |
| 96 | |
| 97 | if (!file_exists($file_to_include)) { |
| 98 | // phpcs:disable WordPress.Security.EscapeOutput.OutputNotEscaped,WordPress.PHP.DevelopmentFunctions.error_log_trigger_error -- Error message to be printed when it is caught. |
| 99 | trigger_error( |
| 100 | sprintf( |
| 101 | /* translators: %s: File along with full path. */ |
| 102 | __('The expected file %s is missing from your UpdraftPlus installation.', 'updraftplus').' '. |
| 103 | __('Most likely, WordPress did not correctly unpack the plugin when installing it.', 'updraftplus').' '.__('You should de-install and then re-install the plugin (your settings and data will be retained).', 'updraftplus'), |
| 104 | $file_to_include |
| 105 | ), |
| 106 | E_USER_WARNING |
| 107 | ); |
| 108 | // phpcs:enable WordPress.Security.EscapeOutput.OutputNotEscaped,WordPress.PHP.DevelopmentFunctions.error_log_trigger_error |
| 109 | } |
| 110 | |
| 111 | if ('include' === $method) { |
| 112 | include($file_to_include); |
| 113 | } elseif ('include_once' === $method) { |
| 114 | include_once($file_to_include); |
| 115 | } elseif ('require' === $method) { |
| 116 | require($file_to_include); // phpcs:ignore PEAR.Files.IncludingFile.UseInclude -- File required intentionally. |
| 117 | } else { |
| 118 | require_once($file_to_include); |
| 119 | } |
| 120 | |
| 121 | } |
| 122 | |
| 123 | // Load add-ons and files that may or may not be present, depending on where the plugin was distributed |
| 124 | if (is_file(UPDRAFTPLUS_DIR.'/autoload.php')) updraft_try_include_file('autoload.php', 'require_once'); |
| 125 | |
| 126 | /** |
| 127 | * Get cron schedules list of our own |
| 128 | * DEVELOPER NOTES: Intervals should be presented in chronological order of time because we also use this list for ordering purpose especially when merging WP default intervals to ours |
| 129 | * |
| 130 | * @return Boolean The list of our own schedules |
| 131 | */ |
| 132 | function updraftplus_list_cron_schedules() { |
| 133 | global $wp_current_filter; |
| 134 | // To prevent "_load_textdomain_just_in_time was called incorrectly" warning |
| 135 | if (((function_exists('doing_action') && !doing_action('after_setup_theme')) || !in_array('after_setup_theme', $wp_current_filter, true)) && !did_action('after_setup_theme')) { |
| 136 | $every_particular_hour_label = 'Every %s hours'; |
| 137 | $every_hour = 'Every hour'; |
| 138 | } else { |
| 139 | /* translators: %s: Number of Hours. */ |
| 140 | $every_particular_hour_label = __('Every %s hours', 'updraftplus'); |
| 141 | $every_hour = __('Every hour', 'updraftplus'); |
| 142 | } |
| 143 | |
| 144 | return array( |
| 145 | 'everyhour' => array( |
| 146 | 'interval' => 3600, |
| 147 | 'display' => apply_filters('updraftplus_cron_schedule_description', $every_hour, 'everyhour'), |
| 148 | ), |
| 149 | 'every2hours' => array( |
| 150 | 'interval' => 7200, |
| 151 | 'display' => apply_filters('updraftplus_cron_schedule_description', sprintf($every_particular_hour_label, '2'), 'every2hours'), |
| 152 | ), |
| 153 | 'every4hours' => array( |
| 154 | 'interval' => 14400, |
| 155 | 'display' => apply_filters('updraftplus_cron_schedule_description', sprintf($every_particular_hour_label, '4'), 'every4hours'), |
| 156 | ), |
| 157 | 'every8hours' => array( |
| 158 | 'interval' => 28800, |
| 159 | 'display' => apply_filters('updraftplus_cron_schedule_description', sprintf($every_particular_hour_label, '8'), 'every8hours'), |
| 160 | ), |
| 161 | 'twicedaily' => array( |
| 162 | 'interval' => 43200, |
| 163 | 'display' => apply_filters('updraftplus_cron_schedule_description', sprintf($every_particular_hour_label, '12'), 'twicedaily'), |
| 164 | ), |
| 165 | // phpcs:disable WordPress.WP.I18n.MissingArgDomain -- The string exists within the WordPress core. |
| 166 | 'daily' => array( |
| 167 | 'interval' => 86400, |
| 168 | 'display' => apply_filters('updraftplus_cron_schedule_description', __('Daily'), 'daily'), |
| 169 | ), |
| 170 | 'weekly' => array( |
| 171 | 'interval' => 604800, |
| 172 | 'display' => apply_filters('updraftplus_cron_schedule_description', __('Weekly'), 'weekly'), |
| 173 | ), |
| 174 | 'fortnightly' => array( |
| 175 | 'interval' => 1209600, |
| 176 | 'display' => apply_filters('updraftplus_cron_schedule_description', __('Fortnightly'), 'fortnightly'), |
| 177 | ), |
| 178 | 'monthly' => array( |
| 179 | 'interval' => 2592000, |
| 180 | 'display' => apply_filters('updraftplus_cron_schedule_description', __('Monthly'), 'monthly'), |
| 181 | ), |
| 182 | // phpcs:enable |
| 183 | ); |
| 184 | } |
| 185 | |
| 186 | if (!function_exists('updraftplus_modify_cron_schedules')) : |
| 187 | /** |
| 188 | * wp-cron only has hourly, daily and twicedaily, so we need to add some of our own |
| 189 | * |
| 190 | * @param array $schedules an array of schedule types |
| 191 | * @return array cron schedules which contains schedules of our own |
| 192 | */ |
| 193 | function updraftplus_modify_cron_schedules($schedules) { |
| 194 | return array_merge($schedules, updraftplus_list_cron_schedules()); |
| 195 | } |
| 196 | endif; |
| 197 | // http://codex.wordpress.org/Plugin_API/Filter_Reference/cron_schedules. Raised priority because some plugins wrongly over-write all prior schedule changes (including BackupBuddy!) |
| 198 | add_filter('cron_schedules', 'updraftplus_modify_cron_schedules', 30); |
| 199 | |
| 200 | // The checks here before loading are for performance only - unless one of those conditions is met, then none of the hooks will ever be used |
| 201 | if (!is_admin() && (!defined('DOING_CRON') || !DOING_CRON) && (!defined('XMLRPC_REQUEST') || !XMLRPC_REQUEST) && empty($_SERVER['SHELL']) && empty($_POST['udrpc_message']) && empty($_GET['udcentral_action']) && (defined('UPDRAFTPLUS_THIS_IS_CLONE') && '1' != UPDRAFTPLUS_THIS_IS_CLONE) && empty($_GET['uc_auto_login']) && (empty($_SERVER['REQUEST_METHOD']) || 'OPTIONS' != $_SERVER['REQUEST_METHOD']) && (!defined('WP_CLI') || !WP_CLI)) { // phpcs:ignore WordPress.Security.NonceVerification.Missing,WordPress.Security.NonceVerification.Recommended -- False positive: nonce verification not required here. |
| 202 | // There is no good way to work out if the cron event is likely to be called under the ALTERNATE_WP_CRON system, other than re-running the calculation |
| 203 | // If ALTERNATE_WP_CRON is not active (and a few other things), then we are done |
| 204 | if (!defined('ALTERNATE_WP_CRON') || !ALTERNATE_WP_CRON || !empty($_POST) || defined('DOING_AJAX') || isset($_GET['doing_wp_cron'])) return; // phpcs:ignore WordPress.Security.NonceVerification.Missing,WordPress.Security.NonceVerification.Recommended -- False positive: nonce verification not required here. |
| 205 | |
| 206 | // The check below is the one used by spawn_cron() to decide whether cron events should be run |
| 207 | $gmt_time = microtime(true); |
| 208 | $lock = get_transient('doing_cron'); |
| 209 | if ($lock > $gmt_time + 10 * 60) $lock = 0; |
| 210 | if ((defined('WP_CRON_LOCK_TIMEOUT') && $lock + WP_CRON_LOCK_TIMEOUT > $gmt_time) || (!defined('WP_CRON_LOCK_TIMEOUT') && $lock + 60 > $gmt_time)) return; |
| 211 | if (function_exists('_get_cron_array')) { |
| 212 | $crons = _get_cron_array(); |
| 213 | } else { |
| 214 | $crons = get_option('cron'); |
| 215 | } |
| 216 | if (!is_array($crons)) return; |
| 217 | |
| 218 | $keys = array_keys($crons); |
| 219 | if (isset($keys[0]) && $keys[0] > $gmt_time) return; |
| 220 | // If we got this far, then cron is going to be fired, so we do want to load all our hooks |
| 221 | } |
| 222 | |
| 223 | $updraftplus_have_addons = 0; |
| 224 | if (is_dir(UPDRAFTPLUS_DIR.'/addons') && $dir_handle = opendir(UPDRAFTPLUS_DIR.'/addons')) { |
| 225 | while (false !== ($e = readdir($dir_handle))) { |
| 226 | if (is_file(UPDRAFTPLUS_DIR.'/addons/'.$e) && preg_match('/\.php$/', $e)) { |
| 227 | // We used to have 1024 bytes here - but this meant that if someone's site was hacked and a lot of code added at the top, and if they were running a too-low PHP version, then they might just see the symptom rather than the cause - and raise the support request with us. |
| 228 | $header = file_get_contents(UPDRAFTPLUS_DIR.'/addons/'.$e, false, null, 0, 16384); |
| 229 | $phprequires = preg_match("/RequiresPHP: (\d[\d\.]+)/", $header, $matches) ? $matches[1] : false; |
| 230 | $phpinclude = preg_match("/IncludePHP: (\S+)/", $header, $matches) ? $matches[1] : false; |
| 231 | if (false === $phprequires || version_compare(PHP_VERSION, $phprequires, '>=')) { |
| 232 | $updraftplus_have_addons++; |
| 233 | if ($phpinclude) updraft_try_include_file(''.$phpinclude, 'include_once'); |
| 234 | updraft_try_include_file('addons/'.$e, 'include_once'); |
| 235 | } |
| 236 | unset($header); |
| 237 | } |
| 238 | } |
| 239 | @closedir($dir_handle);// phpcs:ignore Generic.PHP.NoSilencedErrors.Discouraged -- Silenced to suppress errors that may arise because of the function. |
| 240 | } |
| 241 | |
| 242 | if (is_file(UPDRAFTPLUS_DIR.'/udaddons/updraftplus-addons.php')) updraft_try_include_file('udaddons/updraftplus-addons.php', 'require_once'); |
| 243 | |
| 244 | if (!file_exists(UPDRAFTPLUS_DIR.'/class-updraftplus.php') || !file_exists(UPDRAFTPLUS_DIR.'/options.php')) { |
| 245 | /** |
| 246 | * Warn if they've not got the whole plugin - can happen if WP crashes (e.g. out of disk space) when upgrading the plugin |
| 247 | */ |
| 248 | function updraftplus_incomplete_install_warning() { |
| 249 | echo '<div class="updraftmessage error"><p><strong>'.esc_html(__('Error', 'updraftplus')).':</strong> '.esc_html(__('You do not have UpdraftPlus completely installed - please de-install and install it again.', 'updraftplus').' '.__('Most likely, WordPress malfunctioned when copying the plugin files.', 'updraftplus')).' <a href="https://updraftplus.com/faqs/wordpress-crashed-when-updating-updraftplus-what-can-i-do/">'.esc_html__('Go here for more information.', 'updraftplus').'</a></p></div>'; |
| 250 | } |
| 251 | add_action('all_admin_notices', 'updraftplus_incomplete_install_warning'); |
| 252 | } else { |
| 253 | |
| 254 | updraft_try_include_file('class-updraftplus.php', 'include_once'); |
| 255 | $updraftplus = new UpdraftPlus(); |
| 256 | $GLOBALS['updraftplus'] = $updraftplus; |
| 257 | $updraftplus->have_addons = $updraftplus_have_addons; |
| 258 | |
| 259 | if (!$updraftplus->memory_check(192)) { |
| 260 | // Experience appears to show that the memory limit is only likely to be hit (unless it is very low) by single files that are larger than available memory (when compressed) |
| 261 | // Add sanity checks - found someone who'd set WP_MAX_MEMORY_LIMIT to 256K ! |
| 262 | if (!$updraftplus->memory_check($updraftplus->memory_check_current(WP_MAX_MEMORY_LIMIT))) { |
| 263 | $new = absint($updraftplus->memory_check_current(WP_MAX_MEMORY_LIMIT)); |
| 264 | if ($new>32 && $new<100000) { |
| 265 | @ini_set('memory_limit', $new.'M');// phpcs:ignore Generic.PHP.NoSilencedErrors.Discouraged,Squiz.PHP.DiscouragedFunctions.Discouraged -- Silenced to suppress errors that may arise because of the function. Safely using discouraged function ini_set(). |
| 266 | } |
| 267 | } |
| 268 | } |
| 269 | |
| 270 | // Blocking updates during restore; placed here so that it still runs e.g. under WP-CLI |
| 271 | $updraftplus->block_updates_during_restore_progress(); |
| 272 | } |
| 273 | |
| 274 | // Ubuntu bug - https://bugs.launchpad.net/ubuntu/+source/php5/+bug/1315888 |
| 275 | if (!function_exists('gzopen') && function_exists('gzopen64')) { |
| 276 | function gzopen($filename, $mode, $use_include_path = 0) { |
| 277 | return gzopen64($filename, $mode, $use_include_path); |
| 278 | } |
| 279 | } |
| 280 | |
| 281 | /** |
| 282 | * For finding mysqldump. Added to include Windows locations. |
| 283 | */ |
| 284 | function updraftplus_build_mysqldump_list() { |
| 285 | if ('win' == strtolower(substr(PHP_OS, 0, 3)) && function_exists('glob')) { |
| 286 | $drives = array('C', 'D', 'E'); |
| 287 | |
| 288 | if (!empty($_SERVER['DOCUMENT_ROOT'])) { |
| 289 | // Get the drive that this is running on |
| 290 | $current_drive = strtoupper(substr($_SERVER['DOCUMENT_ROOT'], 0, 1)); // phpcs:ignore WordPress.Security.ValidatedSanitizedInput.MissingUnslash,WordPress.Security.ValidatedSanitizedInput.InputNotSanitized -- Sanitization not needed as we are extracting only first letter and using it. |
| 291 | if (!in_array($current_drive, $drives)) array_unshift($drives, $current_drive); |
| 292 | } |
| 293 | |
| 294 | $directories = array(); |
| 295 | |
| 296 | foreach ($drives as $drive_letter) { |
| 297 | $dir = glob("$drive_letter:\\{Program Files\\MySQL\\{,MySQL*,etc}{,\\bin,\\?},mysqldump}\\mysqldump*", GLOB_BRACE); |
| 298 | if (is_array($dir)) $directories = array_merge($directories, $dir); |
| 299 | } |
| 300 | |
| 301 | $drive_string = implode(',', $directories); |
| 302 | return $drive_string; |
| 303 | |
| 304 | } else { |
| 305 | return "/usr/bin/mysqldump,/bin/mysqldump,/usr/local/bin/mysqldump,/usr/sfw/bin/mysqldump,/usr/xdg4/bin/mysqldump,/opt/bin/mysqldump"; |
| 306 | } |
| 307 | } |
| 308 | |
| 309 | // Do this even if the missing files detection above fired, as the "missing files" detection above has a greater chance of showing the user useful info |
| 310 | if (!class_exists('UpdraftPlus_Options')) updraft_try_include_file('options.php', 'require_once'); |
| 311 |