wpremote / plugin.php

plugin.php in The WP Remote WordPress Plugin 5.09, at plugin.php

196 lines 6.9 KB

Raw Download Zip

1	<?php
2	/*
3	Plugin Name: WP Remote
4	Plugin URI: https://wpremote.com
5	Description: Manage your WordPress site with <a href="https://wpremote.com/">WP Remote</a>.
6	Author: WP Remote
7	Author URI: https://wpremote.com
8	Version: 5.09
9	Network: True
10	*/
11
12	/* Copyright 2017 WP Remote (email : support@wpremote.com)
13
14	This program is free software; you can redistribute it and/or modify
15	it under the terms of the GNU General Public License, version 2, as
16	published by the Free Software Foundation.
17
18	This program is distributed in the hope that it will be useful,
19	but WITHOUT ANY WARRANTY; without even the implied warranty of
20	MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
21	GNU General Public License for more details.
22
23	You should have received a copy of the GNU General Public License
24	along with this program; if not, write to the Free Software
25	Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA
26	*/
27
28	/* Global response array */
29
30	if (!defined('ABSPATH')) exit;
31	##OLDWPR##
32
33	require_once dirname( __FILE__ ) . '/wp_settings.php';
34	require_once dirname( __FILE__ ) . '/wp_site_info.php';
35	require_once dirname( __FILE__ ) . '/wp_db.php';
36	require_once dirname( __FILE__ ) . '/wp_api.php';
37	require_once dirname( __FILE__ ) . '/wp_actions.php';
38	require_once dirname( __FILE__ ) . '/info.php';
39	require_once dirname( __FILE__ ) . '/account.php';
40	require_once dirname( __FILE__ ) . '/helper.php';
41	##WPCACHEMODULE##
42
43
44	$bvsettings = new WPRWPSettings();
45	$bvsiteinfo = new WPRWPSiteInfo();
46	$bvdb = new WPRWPDb();
47
48
49	$bvapi = new WPRWPAPI($bvsettings);
50	$bvinfo = new WPRInfo($bvsettings);
51	$wp_action = new WPRWPAction($bvsettings, $bvsiteinfo, $bvapi);
52
53	register_uninstall_hook(__FILE__, array('WPRWPAction', 'uninstall'));
54	register_activation_hook(__FILE__, array($wp_action, 'activate'));
55	register_deactivation_hook(__FILE__, array($wp_action, 'deactivate'));
56
57	add_action('wp_footer', array($wp_action, 'footerHandler'), 100);
58	add_action('clear_bv_services_config', array($wp_action, 'clear_bv_services_config'));
59	##SOADDUNINSTALLACTION##
60
61	##DISABLE_OTHER_OPTIMIZATION_PLUGINS##
62
63	##WPCLIMODULE##
64	if (is_admin()) {
65	require_once dirname( __FILE__ ) . '/wp_admin.php';
66	$wpadmin = new WPRWPAdmin($bvsettings, $bvsiteinfo);
67	add_action('admin_init', array($wpadmin, 'initHandler'));
68	add_filter('all_plugins', array($wpadmin, 'initBranding'));
69	add_filter('plugin_row_meta', array($wpadmin, 'hidePluginDetails'), 10, 2);
70	add_filter('debug_information', array($wpadmin, 'handlePluginHealthInfo'), 10, 1);
71	if ($bvsiteinfo->isMultisite()) {
72	add_action('network_admin_menu', array($wpadmin, 'menu'));
73	} else {
74	add_action('admin_menu', array($wpadmin, 'menu'));
75	}
76	add_filter('plugin_action_links', array($wpadmin, 'settingsLink'), 10, 2);
77	add_action('admin_head', array($wpadmin, 'removeAdminNotices'), 3);
78	add_action('admin_notices', array($wpadmin, 'activateWarning'));
79	add_action('admin_enqueue_scripts', array($wpadmin, 'wprsecAdminMenu'));
80	##ALPURGECACHEFUNCTION##
81	##ALADMINMENU##
82	}
83
84	if ((array_key_exists('bvreqmerge', $_POST)) \|\| (array_key_exists('bvreqmerge', $_GET))) {
85	$_REQUEST = array_merge($_GET, $_POST);
86	}
87
88	if ($bvinfo->hasValidDBVersion()) {
89	if ($bvinfo->isServiceActive('activity_log')) {
90	require_once dirname( __FILE__ ) . '/wp_actlog.php';
91	$bvconfig = $bvinfo->config;
92	$actlog = new BVWPActLog($bvdb, $bvsettings, $bvinfo, $bvconfig['activity_log']);
93	$actlog->init();
94	}
95
96	}
97
98	if ((array_key_exists('bvplugname', $_REQUEST)) && ($_REQUEST['bvplugname'] == "wpremote")) {
99	require_once dirname( __FILE__ ) . '/callback/base.php';
100	require_once dirname( __FILE__ ) . '/callback/response.php';
101	require_once dirname( __FILE__ ) . '/callback/request.php';
102	require_once dirname( __FILE__ ) . '/recover.php';
103
104	$pubkey = WPRAccount::sanitizeKey($_REQUEST['pubkey']);
105
106	if (array_key_exists('rcvracc', $_REQUEST)) {
107	$account = WPRRecover::find($bvsettings, $pubkey);
108	} else {
109	$account = WPRAccount::find($bvsettings, $pubkey);
110	}
111
112	$request = new BVCallbackRequest($account, $_REQUEST);
113	$response = new BVCallbackResponse($request->bvb64cksize);
114
115	if ($account && (1 === $account->authenticate($request))) {
116	define('WPRBASEPATH', plugin_dir_path(__FILE__));
117
118
119	require_once dirname( __FILE__ ) . '/callback/handler.php';
120
121	$params = $request->processParams($_REQUEST);
122	if ($params === false) {
123	$resp = array(
124	"account_info" => $account->info(),
125	"request_info" => $request->info(),
126	"bvinfo" => $bvinfo->info(),
127	"statusmsg" => "BVPRMS_CORRUPTED"
128	);
129	$response->terminate($resp);
130	}
131	$request->params = $params;
132	$callback_handler = new BVCallbackHandler($bvdb, $bvsettings, $bvsiteinfo, $request, $account, $response);
133	if ($request->is_afterload) {
134	add_action('wp_loaded', array($callback_handler, 'execute'));
135	} else if ($request->is_admin_ajax) {
136	add_action('wp_ajax_bvadm', array($callback_handler, 'bvAdmExecuteWithUser'));
137	add_action('wp_ajax_nopriv_bvadm', array($callback_handler, 'bvAdmExecuteWithoutUser'));
138	} else {
139	$callback_handler->execute();
140	}
141	} else {
142	$resp = array(
143	"account_info" => $account ? $account->info() : array("error" => "ACCOUNT_NOT_FOUND"),
144	"request_info" => $request->info(),
145	"bvinfo" => $bvinfo->info(),
146	"statusmsg" => "FAILED_AUTH",
147	"api_pubkey" => substr(WPRAccount::getApiPublicKey($bvsettings), 0, 8),
148	"def_sigmatch" => substr(WPRAccount::getSigMatch($request, WPRRecover::getDefaultSecret($bvsettings)), 0, 8)
149	);
150	$response->terminate($resp);
151	}
152	} else {
153	if ($bvinfo->hasValidDBVersion()) {
154	if ($bvinfo->isProtectModuleEnabled()) {
155	require_once dirname( __FILE__ ) . '/protect/wp/protect.php';
156	$bvprotect = new BVProtect($bvdb, $bvsettings);
157	$bvprotect->init();
158	if ($bvinfo->isActivePlugin() && !(defined( 'WP_CLI' ) && WP_CLI)) {
159	$bvprotect->run();
160	}
161	}
162
163	if ($bvinfo->isDynSyncModuleEnabled()) {
164	require_once dirname( __FILE__ ) . '/wp_dynsync.php';
165	$bvconfig = $bvinfo->config;
166	$dynsync = new BVWPDynSync($bvdb, $bvsettings, $bvconfig['dynsync']);
167	$dynsync->init();
168	}
169
170	}
171	$bv_site_settings = $bvsettings->getOption('bv_site_settings');
172	if (isset($bv_site_settings)) {
173	if (isset($bv_site_settings['wp_auto_updates'])) {
174	$wp_auto_updates = $bv_site_settings['wp_auto_updates'];
175	if (array_key_exists('block_auto_update_core', $wp_auto_updates)) {
176	add_filter('auto_update_core', '__return_false' );
177	}
178	if (array_key_exists('block_auto_update_theme', $wp_auto_updates)) {
179	add_filter('auto_update_theme', '__return_false' );
180	add_filter('themes_auto_update_enabled', '__return_false' );
181	}
182	if (array_key_exists('block_auto_update_plugin', $wp_auto_updates)) {
183	add_filter('auto_update_plugin', '__return_false' );
184	add_filter('plugins_auto_update_enabled', '__return_false' );
185	}
186	if (array_key_exists('block_auto_update_translation', $wp_auto_updates)) {
187	add_filter('auto_update_translation', '__return_false' );
188	}
189	}
190	}
191
192	if (is_admin()) {
193	add_filter('site_transient_update_plugins', array($wpadmin, 'hidePluginUpdate'));
194	}
195
196	}