wordfence
Last commit date
css
14 years ago
images
14 years ago
js
14 years ago
lib
14 years ago
readme.txt
14 years ago
screenshot-1.png
14 years ago
screenshot-2.png
14 years ago
screenshot-3.png
14 years ago
screenshot-4.png
14 years ago
screenshot-5.png
14 years ago
visitor.php
14 years ago
wfscan.php
14 years ago
wordfence.php
14 years ago
wfscan.php
101 lines
| 1 | <?php |
| 2 | ignore_user_abort(true); |
| 3 | $wordfence_wp_version = false; |
| 4 | if ( !defined('ABSPATH') ) { |
| 5 | /** Set up WordPress environment */ |
| 6 | if($_SERVER['SCRIPT_FILENAME']){ |
| 7 | $wfBaseDir = preg_replace('/[^\/]+\/[^\/]+\/[^\/]+\/wfscan\.php$/', '', $_SERVER['SCRIPT_FILENAME']); |
| 8 | require_once($wfBaseDir . 'wp-load.php'); |
| 9 | global $wp_version; |
| 10 | global $wordfence_wp_version; |
| 11 | require($wfBaseDir . 'wp-includes/version.php'); |
| 12 | $wordfence_wp_version = $wp_version; |
| 13 | } else { |
| 14 | require_once('../../../wp-load.php'); |
| 15 | require_once('../../../wp-includes/version.php'); |
| 16 | } |
| 17 | } |
| 18 | require_once('lib/wordfenceConstants.php'); |
| 19 | require_once('lib/wfScanEngine.php'); |
| 20 | |
| 21 | class wfScan { |
| 22 | public static function wfScanMain(){ |
| 23 | if(! $_SERVER['HTTP_X_WORDFENCE_CRONKEY']){ |
| 24 | self::errorExit("The Wordfence scanner did not receive the x_wordfence_cronkey secure header."); |
| 25 | } |
| 26 | $currentCronKey = wfConfig::get('currentCronKey', false); |
| 27 | if(! $currentCronKey){ |
| 28 | self::errorExit("Wordfence could not find a saved cron key to start the scan."); |
| 29 | } |
| 30 | |
| 31 | $savedKey = explode(',',$currentCronKey); |
| 32 | if(time() - $savedKey[0] > 60){ |
| 33 | self::errorExit("The key used to start a scan has expired."); |
| 34 | } //keys only last 60 seconds and are used within milliseconds of creation |
| 35 | if($savedKey[1] != $_SERVER['HTTP_X_WORDFENCE_CRONKEY']){ |
| 36 | self::errorExit("Wordfence could not start a scan because the cron key does not match the saved key."); |
| 37 | } |
| 38 | wfConfig::set('currentCronKey', ''); |
| 39 | ini_set('max_execution_time', 1800); //30 mins |
| 40 | self::becomeAdmin(); |
| 41 | |
| 42 | $scanRunning = wfConfig::get('wf_scanRunning'); |
| 43 | if($scanRunning && time() - $scanRunning < WORDFENCE_MAX_SCAN_TIME){ |
| 44 | self::errorExit("There is already a scan running."); |
| 45 | } |
| 46 | if( function_exists('memory_get_usage') && ( (int) @ini_get('memory_limit') < WORDFENCE_MEM_LIMIT ) ){ |
| 47 | @ini_set('memory_limit', WORDFENCE_MEM_LIMIT . 'M'); |
| 48 | } |
| 49 | |
| 50 | set_error_handler('wfScan::error_handler', E_ALL); |
| 51 | register_shutdown_function('wfScan::shutdown'); |
| 52 | ob_start('wfScan::obHandler'); |
| 53 | @error_reporting(E_ALL); |
| 54 | @ini_set('display_errors','On'); |
| 55 | |
| 56 | wfConfig::set('wf_scanRunning', time()); |
| 57 | $scan = new wfScanEngine(); |
| 58 | $scan->go(); |
| 59 | wfConfig::set('wf_scanRunning', ''); |
| 60 | } |
| 61 | public static function obHandler($buf){ |
| 62 | if(strlen($buf) > 1000){ |
| 63 | $buf = substr($buf, 0, 255); |
| 64 | } |
| 65 | if(empty($buf) === false && preg_match('/[a-zA-Z0-9]+/', $buf)){ |
| 66 | wordfence::status(1, 'error', $buf); |
| 67 | } |
| 68 | } |
| 69 | public static function error_handler($errno, $errstr, $errfile, $errline){ |
| 70 | wordfence::status(1, 'error', "$errstr ($errno) File: $errfile Line: $errline"); |
| 71 | } |
| 72 | public static function shutdown(){ |
| 73 | wfConfig::set('wf_scanRunning', ''); |
| 74 | } |
| 75 | private static function errorExit($msg){ |
| 76 | echo json_encode(array('errorMsg' => $msg)); |
| 77 | exit(); |
| 78 | } |
| 79 | public static function becomeAdmin(){ |
| 80 | global $wpdb; |
| 81 | $ws = $wpdb->get_results("SELECT ID, user_login FROM $wpdb->users"); |
| 82 | $users = array(); |
| 83 | foreach($ws as $user){ |
| 84 | $userDat = get_userdata($user->ID); |
| 85 | array_push($users, array( |
| 86 | 'id' => $user->ID, |
| 87 | 'user_login' => $user->user_login, |
| 88 | 'level' => $userDat->user_level |
| 89 | )); |
| 90 | } |
| 91 | usort($users, 'wfScan::usort'); |
| 92 | wp_set_current_user($users[0]['id'], $users[0]['user_login']); |
| 93 | } |
| 94 | public static function usort($b, $a){ |
| 95 | if($a['level'] == $b['level']){ return 0; } |
| 96 | return ($a['level'] < $b['level']) ? -1 : 1; |
| 97 | } |
| 98 | } |
| 99 | wfScan::wfScanMain(); |
| 100 | ?> |
| 101 |