 . )
Login Protection
powered by
"
. esc_html($this->brand_name) . " Firewall
" . $templates[$this->category] . "
Reference ID: " . esc_html(WPRInfo::getRequestID()) . "
";
}
private function isProtecting() {
return $this->mode === WPRProtectLP_V644::MODE_PROTECT;
}
private function isActive() {
return $this->mode !== WPRProtectLP_V644::MODE_DISABLED;
}
private function isBlacklistedIP() {
return $this->ipstore->isLPIPBlacklisted($this->ip);
}
private function isWhitelistedIP() {
return $this->ipstore->isLPIPWhitelisted($this->ip);
}
private function isUnBlockedIP() {
$transient_name = WPRProtectLP_V644::UNBLOCK_IP_TRANSIENT_PREFIX . $this->ip;
$attempts = WPRProtect_V644::$settings->getTransient($transient_name);
if ($attempts && $attempts > 0) {
WPRProtect_V644::$settings->setTransient($transient_name, $attempts - 1, 600 * $attempts);
return true;
}
return false;
}
private function isLoginBlocked() {
if ($this->getAllowLoginsTransient() ||
($this->getLoginCount(WPRProtectLP_V644::LOGIN_STATUS_FAILURE, null, $this->all_blocked_gap) < $this->block_all_limit)) {
return false;
}
return true;
}
private function log($status) {
$data = array (
"ip" => $this->ip,
"status" => $status,
"time" => $this->time,
"category" => $this->category,
"username" => $this->username,
"request_id" => WPRInfo::getRequestID(),
"message" => $this->message
);
$this->logger->log($data);
}
private function terminateLogin() {
$this->message = 'Login Blocked';
$this->log(WPRProtectLP_V644::LOGIN_STATUS_BLOCKED);
if ($this->isProtecting()) {
header("Cache-Control: no-cache, no-store, must-revalidate");
header("Pragma: no-cache");
header("Expires: 0");
header('HTTP/1.0 403 Forbidden');
// phpcs:ignore WordPress.Security.EscapeOutput.OutputNotEscaped -- Already Escaped
die($this->terminateTemplate());
exit;
}
}
public function loginInit($user, $username = '', $password = '') {
if ($this->isUnBlockedIP()) {
$this->category = WPRProtectLP_V644::CATEGORY_UNBLOCKED;
} else {
$failed_attempts = $this->getLoginCount(WPRProtectLP_V644::LOGIN_STATUS_FAILURE,
$this->ip, $this->failed_login_gap);
if ($this->isWhitelistedIP()) {
$this->category = WPRProtectLP_V644::CATEGORY_BYPASSED;
} elseif (WPRProtectUtils_V644::isPrivateIP($this->ip)) {
$this->category = WPRProtectLP_V644::CATEGORY_PRIVATEIP;
} elseif ($this->isBlacklistedIP()) {
$this->category = WPRProtectLP_V644::CATEGORY_BLACKLISTED;
$this->terminateLogin();
} elseif ($this->isKnownLogin()) {
$this->category = WPRProtectLP_V644::CATEGORY_BYPASSED;
} elseif ($this->isLoginBlocked()) {
$this->category = WPRProtectLP_V644::CATEGORY_ALL_BLOCKED;
$this->terminateLogin();
} elseif ($failed_attempts >= $this->temp_block_limit) {
$this->category = WPRProtectLP_V644::CATEGORY_TEMP_BLOCK;
$this->terminateLogin();
} elseif ($failed_attempts >= $this->captcha_limit) {
$this->category = WPRProtectLP_V644::CATEGORY_CAPTCHA_BLOCK;
$this->terminateLogin();
}
}
if (!empty($user) && !empty($password) && is_wp_error($user)) {
$this->message = $user->get_error_code();
}
return $user;
}
public function loginFailed($username) {
$this->username = $username;
$this->log(WPRProtectLP_V644::LOGIN_STATUS_FAILURE);
}
public function loginSuccess($username) {
$this->username = $username;
$this->message = 'Login Success';
$this->log(WPRProtectLP_V644::LOGIN_STATUS_SUCCESS);
}
private function isKnownLogin() {
return $this->getLoginCount(WPRProtectLP_V644::LOGIN_STATUS_SUCCESS,
$this->ip, $this->success_login_gap) > 0;
}
private function getLoginCount($status, $ip, $gap) {
$table = WPRProtect_V644::$db->getBVTable(WPRProtectLP_V644::TABLE_NAME);
$query_str = "SELECT COUNT(*) as count from `$table` WHERE status=%d && time > %d";
$query_args = array($status, ($this->time - $gap));
$query = WPRProtect_V644::$db->prepare($query_str, $query_args);
if ($ip) {
$query .= WPRProtect_V644::$db->prepare(" && ip=%s", $ip);
}
$rows = WPRProtect_V644::$db->getResult($query);
if (!$rows) {
return 0;
}
return intval($rows[0]['count']);
}
}
endif;