← All changes | plugin.php +15 -41 6.65 → 5.92 View file →

		@@ -4,9 +4,9 @@
4	4	Plugin URI: https://wpremote.com
5	5	Description: Manage your WordPress site with <a href="https://wpremote.com/">WP Remote</a>.
6	6	Author: WP Remote
7	7	Author URI: https://wpremote.com
8		-Version: 6.65
	8	+Version: 5.92
9	9	Network: True
10	10	License: GPLv2 or later
11	11	License URI: [http://www.gnu.org/licenses/gpl-2.0.html](http://www.gnu.org/licenses/gpl-2.0.html)
12	12	*/
		@@ -69,9 +69,8 @@
69	69
70	70	##DISABLE_OTHER_OPTIMIZATION_PLUGINS##
71	71
72	72	##WPCLIMODULE##
73		-
74	73	if (is_admin()) {
75	74	require_once dirname( __FILE__ ) . '/wp_admin.php';
76	75	$wpadmin = new WPRWPAdmin($bvsettings, $bvsiteinfo);
77	76	add_action('admin_init', array($wpadmin, 'initHandler'));
		@@ -84,13 +83,13 @@
84	83	add_action('admin_menu', array($wpadmin, 'menu'));
85	84	}
86	85	add_filter('plugin_action_links', array($wpadmin, 'settingsLink'), 10, 2);
87	86	add_action('admin_head', array($wpadmin, 'removeAdminNotices'), 3);
88		-
89		- ##MG_AJAX_ACTIONS##
90	87	##POPUP_ON_DEACTIVATION##
91	88	add_action('admin_notices', array($wpadmin, 'activateWarning'));
92	89	add_action('admin_enqueue_scripts', array($wpadmin, 'wprsecAdminMenu'));
	90	+ ##ALPURGECACHEFUNCTION##
	91	+ ##ALADMINMENU##
93	92	}
94	93
95	94	if ((array_key_exists('bvreqmerge', $_POST)) || (array_key_exists('bvreqmerge', $_GET))) { // phpcs:ignore WordPress.Security.NonceVerification.Missing, WordPress.Security.NonceVerification.Recommended
96	95	$_REQUEST = array_merge($_GET, $_POST); // phpcs:ignore WordPress.Security.NonceVerification.Missing, WordPress.Security.NonceVerification.Recommended
		@@ -125,17 +124,15 @@
125	124	$pubkey = isset($pubkey) ? WPRAccount::sanitizeKey($pubkey) : '';
126	125	$rcvracc = WPRHelper::getRawParam('REQUEST', 'rcvracc');
127	126
128	127	if (isset($rcvracc)) {
129		- $bvctag = WPRHelper::getRawParam('REQUEST', 'bvctag');
130		- $bvctag = isset($bvctag) ? WPRAccount::sanitizeKey($bvctag) : null;
131		- $account = WPRRecover::find($bvsettings, $pubkey, $bvctag);
	128	+ $account = WPRRecover::find($bvsettings, $pubkey);
132	129	} else {
133	130	$account = WPRAccount::find($bvsettings, $pubkey);
134	131	}
135	132
136		- $request = new WPRCallbackRequest($account, $_REQUEST, $bvsettings); // phpcs:ignore WordPress.Security.NonceVerification.Recommended
137		- $response = new WPRCallbackResponse($request->bvb64cksize);
	133	+ $request = new BVCallbackRequest($account, $_REQUEST, $bvsettings); // phpcs:ignore WordPress.Security.NonceVerification.Recommended
	134	+ $response = new BVCallbackResponse($request->bvb64cksize);
138	135
139	136	if ($request->authenticate() === 1) {
140	137	$bv_frm_tstng = WPRHelper::getRawParam('REQUEST', 'bv_frm_tstng');
141	138	if (isset($bv_frm_tstng)) {
		@@ -153,12 +150,10 @@
153	150	if ($params === false) {
154	151	$response->terminate($request->corruptedParamsResp());
155	152	}
156	153	$request->params = $params;
157		- $callback_handler = new WPRCallbackHandler($bvdb, $bvsettings, $bvsiteinfo, $request, $account, $response);
158		- if ($request->is_aftershutdown) {
159		- $callback_handler->deferExecutionUntilShutdown();
160		- } else if ($request->is_afterload) {
	154	+ $callback_handler = new BVCallbackHandler($bvdb, $bvsettings, $bvsiteinfo, $request, $account, $response);
	155	+ if ($request->is_afterload) {
161	156	add_action('wp_loaded', array($callback_handler, 'execute'));
162	157	} else if ($request->is_admin_ajax) {
163	158	add_action('wp_ajax_bvadm', array($callback_handler, 'bvAdmExecuteWithUser'));
164	159	add_action('wp_ajax_nopriv_bvadm', array($callback_handler, 'bvAdmExecuteWithoutUser'));
		@@ -173,16 +168,16 @@
173	168	if ($bvinfo->hasValidDBVersion()) {
174	169	if ($bvinfo->isProtectModuleEnabled()) {
175	170	require_once dirname( __FILE__ ) . '/protect/protect.php';
176	171	//For backward compatibility.
177		- WPRProtect_V665::$settings = new WPRWPSettings();
178		- WPRProtect_V665::$db = new WPRWPDb();
179		- WPRProtect_V665::$info = new WPRInfo(WPRProtect_V665::$settings);
	172	+ WPRProtect_V592::$settings = new WPRWPSettings();
	173	+ WPRProtect_V592::$db = new WPRWPDb();
	174	+ WPRProtect_V592::$info = new WPRInfo(WPRProtect_V592::$settings);
180	175
181		- add_action('wpr_clear_pt_config', array('WPRProtect_V665', 'uninstall'));
	176	+ add_action('wpr_clear_pt_config', array('WPRProtect_V592', 'uninstall'));
182	177
183	178	if ($bvinfo->isActivePlugin()) {
184		- WPRProtect_V665::init(WPRProtect_V665::MODE_WP);
	179	+ WPRProtect_V592::init(WPRProtect_V592::MODE_WP);
185	180	}
186	181	}
187	182
188	183	if ($bvinfo->isDynSyncModuleEnabled()) {
		@@ -193,9 +188,9 @@
193	188	}
194	189
195	190	}
196	191	$bv_site_settings = $bvsettings->getOption('bv_site_settings');
197		- if (is_array($bv_site_settings)) {
	192	+ if (isset($bv_site_settings)) {
198	193	if (isset($bv_site_settings['wp_auto_updates'])) {
199	194	$wp_auto_updates = $bv_site_settings['wp_auto_updates'];
200	195	if (array_key_exists('block_auto_update_core', $wp_auto_updates)) {
201	196	add_filter('auto_update_core', '__return_false' );
		@@ -211,28 +206,8 @@
211	206	if (array_key_exists('block_auto_update_translation', $wp_auto_updates)) {
212	207	add_filter('auto_update_translation', '__return_false' );
213	208	}
214	209	}
215		-
216		- if (isset($bv_site_settings['security_hardening'])) {
217		- $bv_security_hardening = $bv_site_settings['security_hardening'];
218		- if (is_array($bv_security_hardening) &&
219		- isset($bv_security_hardening['version']) &&
220		- $bv_security_hardening['version'] === 1) {
221		- if (isset($bv_security_hardening['disable_file_editor']) &&
222		- $bv_security_hardening['disable_file_editor'] === true &&
223		- !defined('DISALLOW_FILE_EDIT')) {
224		- define('DISALLOW_FILE_EDIT', true);
225		- }
226		-
227		- if (isset($bv_security_hardening['block_file_modifications']) &&
228		- $bv_security_hardening['block_file_modifications'] === true &&
229		- !defined('DISALLOW_FILE_MODS')) {
230		- define('DISALLOW_FILE_MODS', true);
231		- }
232		- }
233		- }
234		-
235	210	}
236	211
237	212	if (is_admin()) {
238	213	add_filter('site_transient_update_plugins', array($wpadmin, 'hidePluginUpdate'));
		@@ -250,6 +225,5 @@
250	225	$wp_login_whitelabel = new WPRWPLoginWhitelabel();
251	226	$wp_login_whitelabel->init();
252	227	}
253	228
254		-add_action('wpr_clear_wp_2fa_config', array($wp_action, 'clear_wp_2fa_config'));
255		-##PLUGIN_LOADED_MODULE##
	229	+add_action('wpr_clear_wp_2fa_config', array($wp_action, 'clear_wp_2fa_config'));