← All changes | wt-security.php +208 -125 2.1 → 2.3.24 View file →

		@@ -1,125 +1,208 @@
1		-<?php defined('ABSPATH') or die("Protected By WT!");
2		-
3		-/*
4		-Plugin Name: WT Security
5		-Description: WT is a SaaS which provides powerful tools for securing and monitoring your website in one place in easy and flexible way.
6		-Author: WT Security
7		-Version: 2.1
8		-*/
9		-
10		-define("WTSEC_PAGE_TITLE", 'Dashboard');
11		-define("WTSEC_MENU_TITLE", 'WT Security');
12		-define("WTSEC_PLUGIN_PATH", plugin_dir_path(__FILE__));
13		-define("WTSEC_PLUGIN_NAME", 'wt-security');
14		-define("WTSEC_PLUGIN_PREFIX", 'wtsec_');
15		-define("WTSEC_PAGE_PREFIX", WTSEC_PLUGIN_NAME . '-');
16		-define("WTSEC_FILE_URL", "https://api.wtotem.com/agent");
17		-define("WTSEC_ROOT", WP_PLUGIN_DIR . '/');
18		-define("WTSEC_MODULES_DIR", WTSEC_PLUGIN_PATH . 'uploads/');
19		-if (is_dir(WTSEC_MODULES_DIR) && is_writable(WTSEC_MODULES_DIR)) {
20		- define("WTSEC_INSTALLATION_DIR", WTSEC_MODULES_DIR);
21		- define("WTOTEMSEC_INSTALLATION_DIR", WTSEC_MODULES_DIR);
22		-} else {
23		- define("WTSEC_INSTALLATION_DIR", wp_upload_dir()['basedir'] . '/');
24		- define("WTOTEMSEC_INSTALLATION_DIR", wp_upload_dir()['basedir'] . '/');
25		-}
26		-define("WTSEC_PLUGIN_URL", plugins_url("", __FILE__));
27		-define("WTSEC_SITE_URL", str_replace(['http://', 'https://', 'www.', '//', '://'], '', get_site_url()));
28		-
29		-define("WTSEC_PLUGIN_INFORMATION_VERSION", "2.1");
30		-
31		-add_action('admin_init', 'wtsec_admin_init');
32		-add_action('wp_loaded', 'wtsec_init');
33		-
34		-function wtsec_init()
35		-{
36		- require_once WTSEC_PLUGIN_PATH . 'library/App.php';
37		- require_once WTSEC_PLUGIN_PATH . 'library/Request.php';
38		- if (!is_admin() && in_array(WTSEC_LIBRARY_App::getOption('waf_status'), ["start", "uninstalled"])) {
39		- if ($waf = WTSEC_LIBRARY_App::getOption(("waf_installed_file"))) {
40		- $path_to_waf = WTSEC_INSTALLATION_DIR . '/' . $waf;
41		- if (is_file($path_to_waf) && is_readable($path_to_waf)) {
42		- include $path_to_waf;
43		- }
44		- }
45		- }
46		- if (is_admin()) {
47		- require_once WTSEC_PLUGIN_PATH . 'library/WT.php';
48		- require_once WTSEC_PLUGIN_PATH . 'library/Localization.php';
49		- require_once WTSEC_PLUGIN_PATH . 'library/Idn.php';
50		- require_once WTSEC_PLUGIN_PATH . 'library/Session.php';
51		- require_once WTSEC_PLUGIN_PATH . 'routes.php';
52		- require_once WTSEC_PLUGIN_PATH . 'services.php';
53		- function wtsec_request()
54		- {
55		- return new WTSEC_LIBRARY_Request();
56		- }
57		- function wtsec_app()
58		- {
59		- return new WTSEC_LIBRARY_App();
60		- }
61		- function wtsec_filesystem_init($form_url, $method, $context, $fields = null)
62		- {
63		- global $wp_filesystem;
64		- if (!$creds = request_filesystem_credentials($form_url, $method, false, $context, $fields)) {
65		- return false;
66		- }
67		- if (!WP_Filesystem($creds)) {
68		- request_filesystem_credentials($form_url, $method, true, $context);
69		- return false;
70		- }
71		- return true;
72		- }
73		- function wtsec_locale($lmsg, $args = [])
74		- {
75		- return WTSEC_LIBRARY_Localization::lmsg($lmsg, $args);
76		- }
77		- function wtsec_getImagePath($image)
78		- {
79		- return plugins_url('/htdocs/images/' . $image, __FILE__);
80		- }
81		- function wtsec_SIS($arr, $key, $form = null)
82		- {
83		- $key = explode(".", $key);
84		- foreach ($key as $_key) {
85		- if (!isset($arr[$_key])) {
86		- $arr = "";
87		- break;
88		- }
89		- $arr = $arr[$_key];
90		- }
91		- return !empty($form) ? str_replace("$" . $key, $arr, $form) : $arr;
92		- }
93		- }
94		-}
95		-
96		-function wtsec_admin_init()
97		-{
98		- if (is_admin() && stripos(wtsec_request()->page, WTSEC_PLUGIN_NAME) !== false) {
99		- wp_register_style("css", plugins_url('/htdocs/css/src.c37ba8ac.css', __FILE__));
100		- wp_enqueue_style('css');
101		- wp_enqueue_script('chart', plugins_url('/htdocs/js/Chart.min.js', __FILE__), [], false, true);
102		- wp_enqueue_script('chart');
103		- wp_enqueue_script('app', plugins_url('/htdocs/js/src.e31bb0bc.js', __FILE__), [], false, true);
104		- wp_enqueue_script('app');
105		- $page = wtsec_request()->page;
106		- if ($page === wtsec_getRoute("login")) {
107		- if (WTSEC_LIBRARY_App::authorized()) {
108		- wp_safe_redirect(wtsec_getUrl('dashboard'));
109		- }
110		- } elseif ($page === wtsec_getRoute("logout")) {
111		- WTSEC_LIBRARY_App::logout();
112		- if (!WTSEC_LIBRARY_App::authorized()) {
113		- wp_safe_redirect(wtsec_getUrl('login'));
114		- }
115		- } elseif ($page === wtsec_getRoute("activate")) {
116		- if (WTSEC_LIBRARY_App::authorized()) {
117		- wp_safe_redirect(wtsec_getUrl('sites'));
118		- }
119		- } else {
120		- if (!WTSEC_LIBRARY_App::authorized()) {
121		- wp_safe_redirect(wtsec_getUrl('login'));
122		- }
123		- }
124		- }
125		-}
	1	+<?php defined('ABSPATH') or die("Protected By WT!");
	2	+
	3	+/*
	4	+Plugin Name: WT Security
	5	+Description: WT is a SaaS which provides powerful tools for securing and monitoring your website in one place in easy and flexible way.
	6	+Author: WT Security
	7	+Version: 2.3.24
	8	+*/
	9	+
	10	+define("WTSEC_PAGE_TITLE", 'Dashboard');
	11	+define("WTSEC_MENU_TITLE", 'WT Security');
	12	+define("WTSEC_PLUGIN_PATH", plugin_dir_path(__FILE__));
	13	+define("WTSEC_PLUGIN_NAME", 'wt-security');
	14	+define("WTSEC_PLUGIN_PREFIX", 'wtsec_');
	15	+define("WTSEC_PAGE_PREFIX", WTSEC_PLUGIN_NAME . '-');
	16	+define("WTSEC_FILE_URL", "https://api.wtotem.com/agent");
	17	+define("WTSEC_MODULES_DIR", WTSEC_PLUGIN_PATH . 'uploads/');
	18	+if (is_dir(WTSEC_MODULES_DIR) && is_writable(WTSEC_MODULES_DIR)) {
	19	+ define("WTSEC_INSTALLATION_DIR", WTSEC_MODULES_DIR);
	20	+ define("WTOTEMSEC_INSTALLATION_DIR", WTSEC_MODULES_DIR);
	21	+} else {
	22	+ define("WTSEC_INSTALLATION_DIR", wp_upload_dir()['basedir'] . '/');
	23	+ define("WTOTEMSEC_INSTALLATION_DIR", wp_upload_dir()['basedir'] . '/');
	24	+}
	25	+define("WTSEC_PLUGIN_URL", plugins_url("", __FILE__));
	26	+define("WTSEC_PLUGIN_BASENAME", plugin_basename( __FILE__));
	27	+define("WTSEC_SITE_URL", str_replace(['http://', 'https://', '//', '://', 'www.'], '', get_site_url()));
	28	+
	29	+define("WTSEC_PLUGIN_INFORMATION_VERSION", "2.3");
	30	+
	31	+$curLang = substr(get_bloginfo('language'), 0,2);
	32	+$language = (in_array($curLang,['ru','en','pl'])) ? $curLang : 'en' ;
	33	+define("WTSEC_LANGUAGE", $language);
	34	+
	35	+
	36	+add_action( 'deactivated_plugin', 'wtsec_DeactivatedPlugin', 1 );
	37	+
	38	+// Clear database, delete am(agents) after plugin deactivate
	39	+function wtsec_DeactivatedPlugin($plugin){
	40	+
	41	+ if($plugin == WTSEC_PLUGIN_BASENAME) {
	42	+
	43	+ define("WTSEC_DEACTIVATED", true);
	44	+ require_once WTSEC_PLUGIN_PATH . 'library/App.php';
	45	+ $app = new WTSEC_LIBRARY_App;
	46	+ if(wtsec_DeleteAm()){
	47	+ $app::clearDB();
	48	+ }
	49	+
	50	+ }
	51	+}
	52	+
	53	+add_action( 'upgrader_process_complete', 'wtsec_generate_file', 10, 2 );
	54	+
	55	+// Create file generate.php after plugin update
	56	+function wtsec_generate_file( $upgrader_object, $options ) {
	57	+
	58	+ if( $options['action'] == 'update' && $options['type'] == 'plugin' && isset( $options['plugins'] ) ) {
	59	+ foreach( $options['plugins'] as $plugin ) {
	60	+ if( $plugin == WTSEC_PLUGIN_BASENAME ) {
	61	+ require_once WTSEC_PLUGIN_PATH . 'library/App.php';
	62	+ $fileName = WTSEC_LIBRARY_App::getOption('am_installed_file');
	63	+
	64	+ wtsec_addCheckFile($fileName);
	65	+ }
	66	+ }
	67	+ }
	68	+}
	69	+
	70	+add_action('admin_init', 'wtsec_admin_init');
	71	+add_action('wp_loaded', 'wtsec_init');
	72	+
	73	+add_filter( 'authenticate', 'wtsec_login_check', 30, 3 );
	74	+
	75	+function wtsec_init()
	76	+{
	77	+ require_once WTSEC_PLUGIN_PATH . 'library/App.php';
	78	+ require_once WTSEC_PLUGIN_PATH . 'library/Request.php';
	79	+
	80	+ // WAF include (Если не админка и статус waf = "start", "uninstalled")
	81	+ // && in_array(WTSEC_LIBRARY_App::getOption('waf_status'), ["start", "uninstalled"])
	82	+ if (!is_admin()) {
	83	+ if ($waf = WTSEC_LIBRARY_App::getOption(("waf_installed_file"))) {
	84	+ $path_to_waf = $_SERVER['DOCUMENT_ROOT'] . '/_include_' . $waf;
	85	+ if (is_file($path_to_waf) && is_readable($path_to_waf)) {
	86	+ include_once $path_to_waf;
	87	+ }
	88	+ }
	89	+ }
	90	+
	91	+ if (is_admin()) {
	92	+ require_once WTSEC_PLUGIN_PATH . 'library/WT.php';
	93	+ require_once WTSEC_PLUGIN_PATH . 'library/Localization.php';
	94	+ require_once WTSEC_PLUGIN_PATH . 'library/Idn.php';
	95	+ require_once WTSEC_PLUGIN_PATH . 'library/Session.php';
	96	+ require_once WTSEC_PLUGIN_PATH . 'routes.php';
	97	+ require_once WTSEC_PLUGIN_PATH . 'services.php';
	98	+ require_once WTSEC_PLUGIN_PATH . 'helpers.php';
	99	+
	100	+ function wtsec_request()
	101	+ {
	102	+ return new WTSEC_LIBRARY_Request();
	103	+ }
	104	+ function wtsec_app()
	105	+ {
	106	+ return new WTSEC_LIBRARY_App();
	107	+ }
	108	+ function wtsec_filesystem_init($form_url, $method, $context, $fields = null)
	109	+ {
	110	+ global $wp_filesystem;
	111	+ if (!$creds = request_filesystem_credentials($form_url, $method, false, $context, $fields)) {
	112	+ return false;
	113	+ }
	114	+ if (!WP_Filesystem($creds)) {
	115	+ request_filesystem_credentials($form_url, $method, true, $context);
	116	+ return false;
	117	+ }
	118	+ return true;
	119	+ }
	120	+ function wtsec_locale($lmsg, $args = [])
	121	+ {
	122	+ return WTSEC_LIBRARY_Localization::lmsg($lmsg, $args);
	123	+ }
	124	+ function wtsec_getImagePath($image)
	125	+ {
	126	+ return plugins_url('/htdocs/img/' . $image, __FILE__);
	127	+ }
	128	+ function wtsec_SIS($arr, $key, $form = null)
	129	+ {
	130	+ $key = explode(".", $key);
	131	+ foreach ($key as $_key) {
	132	+ if (!isset($arr[$_key])) {
	133	+ $arr = "";
	134	+ break;
	135	+ }
	136	+ $arr = $arr[$_key];
	137	+ }
	138	+ return !empty($form) ? str_replace("$" . $key, $arr, $form) : $arr;
	139	+ }
	140	+ }
	141	+}
	142	+
	143	+function wtsec_admin_init()
	144	+{
	145	+ $rand = '?rand='.rand();
	146	+ if (is_admin() && stripos(wtsec_request()->page, WTSEC_PLUGIN_NAME) !== false) {
	147	+ wp_enqueue_script('subscriber', plugins_url('/htdocs/js/wtsec_subscriber.js'.$rand, __FILE__), [], false, true);
	148	+ wp_enqueue_script('d3-v4', plugins_url('/htdocs/js/wtsec_d3.v4.js', __FILE__), array( 'jquery' ), false, true);
	149	+ wp_enqueue_script('jsdelivr', plugins_url('/htdocs/js/wtsec_jsdelivr_chart.js', __FILE__), array( 'jquery' ), false, true);
	150	+ wp_enqueue_script('chart', plugins_url('/htdocs/js/wtsec_Chart.js'.$rand, __FILE__), [], false, true);
	151	+ wp_enqueue_script('circle-progress', plugins_url('/htdocs/js/wtsec_circle-progress.js', __FILE__), [], false, true);
	152	+ wp_enqueue_script('range-plugin', plugins_url('/htdocs/js/wtsec_rangePlugin.js', __FILE__), array( 'jquery' ), false, true);
	153	+ wp_enqueue_script('flatpickr', plugins_url('/htdocs/js/wtsec_flatpickr.js', __FILE__), array( 'jquery' ), false, true);
	154	+ wp_enqueue_script('filter-calendar', plugins_url('/htdocs/js/wtsec_filterCalendar.js', __FILE__), array( 'jquery' ), false, true);
	155	+ wp_enqueue_script('line-progress', plugins_url('/htdocs/js/wtsec_line-progress.js', __FILE__), [], false, true);
	156	+ wp_enqueue_script('main', plugins_url('/htdocs/js/wtsec_main.js'.$rand, __FILE__), [], false, true);
	157	+ wp_enqueue_script('ajax', plugins_url( '/htdocs/js/wtsec_ajax.js'.$rand, __FILE__ ), array( 'jquery' ),false, true );
	158	+ wp_enqueue_script('subscriber');
	159	+ wp_enqueue_script('print');
	160	+ wp_enqueue_script('d3-v4');
	161	+ wp_enqueue_script('jsdelivr');
	162	+ wp_enqueue_script('chart');
	163	+ wp_enqueue_script('circle-progress');
	164	+ wp_enqueue_script('line-progress');
	165	+ wp_enqueue_script('range-plugin');
	166	+ wp_enqueue_script('flatpickr');
	167	+ wp_enqueue_script('filter-calendar');
	168	+ wp_enqueue_script('main');
	169	+ wp_enqueue_script('ajax');
	170	+
	171	+ wp_register_style('flatpickr-css', 'https://cdn.jsdelivr.net/npm/flatpickr/dist/flatpickr.min.css');
	172	+ wp_register_style('font', 'https://fonts.googleapis.com/css2?family=Inter:wght@400;500;700&display=swap');
	173	+ wp_register_style('main', plugins_url('/htdocs/css/wtsec_main.css'.$rand, __FILE__));
	174	+ wp_enqueue_style('flatpickr-css');
	175	+ wp_enqueue_style('font');
	176	+ wp_enqueue_style('print-css');
	177	+ wp_enqueue_style('main');
	178	+
	179	+ $page = wtsec_request()->page;
	180	+ if ($page === wtsec_getRoute("login")) {
	181	+ if (WTSEC_LIBRARY_App::authorized()) {
	182	+ wp_safe_redirect(wtsec_getUrl('dashboard'));
	183	+ }
	184	+ } elseif ($page === wtsec_getRoute("logout")) {
	185	+ WTSEC_LIBRARY_App::logout();
	186	+ if (!WTSEC_LIBRARY_App::authorized()) {
	187	+ wp_safe_redirect(wtsec_getUrl('login'));
	188	+ }
	189	+ } elseif ($page === wtsec_getRoute("activate")) {
	190	+ if (WTSEC_LIBRARY_App::authorized()) {
	191	+ wp_safe_redirect(wtsec_getUrl('sites'));
	192	+ }
	193	+ } else {
	194	+ if (!WTSEC_LIBRARY_App::authorized()) {
	195	+ wp_safe_redirect(wtsec_getUrl('login'));
	196	+ }
	197	+ }
	198	+ }
	199	+}
	200	+
	201	+function wtsec_login_check($user, $username, $password) {
	202	+ require_once WTSEC_PLUGIN_PATH . 'library/App.php';
	203	+ $app = new WTSEC_LIBRARY_App;
	204	+ if($app::getOption('authorized')){
	205	+ return $app->wtsec_login_check($user, $username, $password);
	206	+ }
	207	+ return $user;
	208	+}