CronTasks.php
88 lines
| 1 | <?php // phpcs:ignore |
| 2 | |
| 3 | namespace WP2FA\Cron; |
| 4 | |
| 5 | use \WP2FA\WP2FA as WP2FA; |
| 6 | use \WP2FA\Authenticator\Authentication as Authentication; |
| 7 | |
| 8 | /** |
| 9 | * Class for handling our crons. |
| 10 | */ |
| 11 | class CronTasks { |
| 12 | |
| 13 | /** |
| 14 | * Constructor. |
| 15 | */ |
| 16 | public function __construct() { |
| 17 | add_action( 'wp_2fa_check_grace_period_status', array( $this, 'wp_2fa_check_users_grace_period_status' ) ); |
| 18 | add_action( 'init', array( $this, 'register_check_users_grace_period_status_event' ) ); |
| 19 | } |
| 20 | |
| 21 | // This function will run once the 'wp_2fa_check_users_grace_period_status' is called |
| 22 | public function wp_2fa_check_users_grace_period_status() { |
| 23 | $users = array(); |
| 24 | |
| 25 | if ( 'do-not-enforce' !== WP2FA::get_wp2fa_setting( 'enforcment-policy' ) && ! empty( WP2FA::get_wp2fa_setting( 'enable_grace_cron' ) ) ) { |
| 26 | if ( WP2FA::is_this_multisite() ) { |
| 27 | $users_args = array( 'blog_id' => 0 ); |
| 28 | } else { |
| 29 | $users_args = array(); |
| 30 | } |
| 31 | foreach ( get_users( $users_args ) as $user ) { |
| 32 | $grace_period_expiry_time = get_user_meta( $user->ID, 'wp_2fa_grace_period_expiry', true ); |
| 33 | $grace_period_expired = get_user_meta( $user->ID, 'wp_2fa_user_grace_period_expired', true ); |
| 34 | $locked_notification = get_user_meta( $user->ID, 'wp_2fa_locked_account_notification', true ); |
| 35 | $is_needed = Authentication::is_user_eligible_for_2fa( $user->ID ); |
| 36 | $is_user_excluded = WP2FA::is_user_excluded( $user->ID ); |
| 37 | $time_now = time(); |
| 38 | if ( $grace_period_expiry_time < $time_now && $is_needed && ! $is_user_excluded ) { |
| 39 | $grace_expired = update_user_meta( $user->ID, 'wp_2fa_user_grace_period_expired', true ); |
| 40 | |
| 41 | // Send the email to alert the user, only if we have not done so before. |
| 42 | if ( ! $locked_notification ) { |
| 43 | $this->send_expired_grace_email( $user->ID ); |
| 44 | $locked_account_notification = update_user_meta( $user->ID, 'wp_2fa_locked_account_notification', true ); |
| 45 | } |
| 46 | |
| 47 | // Check if we also want to destory the user session now that the grace period has expired. |
| 48 | if ( ! empty( WP2FA::get_wp2fa_setting( 'enable_destroy_session' ) ) ) { |
| 49 | // Grab user session and kill it, preferably with fire. |
| 50 | $manager = \WP_Session_Tokens::get_instance( $user->ID ); |
| 51 | $manager->destroy_all(); |
| 52 | } |
| 53 | } |
| 54 | } |
| 55 | } |
| 56 | } |
| 57 | |
| 58 | // Function which will register the event |
| 59 | function register_check_users_grace_period_status_event() { |
| 60 | // Make sure this event hasn't been scheduled |
| 61 | if ( ! wp_next_scheduled( 'wp_2fa_check_grace_period_status' ) && ! empty( WP2FA::get_wp2fa_setting( 'enable_grace_cron' ) ) ) { |
| 62 | // Schedule the event |
| 63 | wp_schedule_event( time(), 'hourly', 'wp_2fa_check_grace_period_status' ); |
| 64 | } |
| 65 | } |
| 66 | |
| 67 | /** |
| 68 | * Send email to setup authentication |
| 69 | */ |
| 70 | public static function send_expired_grace_email( $user_id ) { |
| 71 | // Grab user data |
| 72 | $user = get_userdata( $user_id ); |
| 73 | // Grab user email |
| 74 | $email = $user->user_email; |
| 75 | |
| 76 | $subject = wp_strip_all_tags( WP2FA::replace_email_strings( WP2FA::get_wp2fa_email_templates( 'user_account_locked_email_subject' ), $user_id ) ); |
| 77 | $message = wpautop( WP2FA::replace_email_strings( WP2FA::get_wp2fa_email_templates( 'user_account_locked_email_body' ), $user_id ) ); |
| 78 | |
| 79 | $headers = 'Content-type: text/html;charset=utf-8' . "\r\n"; |
| 80 | |
| 81 | if ( 'use-custom-email' === WP2FA::get_wp2fa_email_templates( 'email_from_setting' ) ) { |
| 82 | $headers .= "From: ". WP2FA::get_wp2fa_email_templates( 'custom_from_display_name' ) ." <". WP2FA::get_wp2fa_email_templates( 'custom_from_email_address' ) .">" . "\r\n"; |
| 83 | } |
| 84 | |
| 85 | $mail = wp_mail( $user->user_email, $subject, $message, $headers ); |
| 86 | } |
| 87 | } |
| 88 |