# wt-security/2.4.13/lib/API.php WebTotem Security, version 2.4.13. 950 lines. - Page: https://pluginprobe.com/plugins/wt-security/2.4.13/code/lib/API.php - Raw: https://pluginprobe.com/plugins/wt-security/2.4.13/raw/lib/API.php - Modified: 2022-08-23T11:56:58+00:00 Line numbers below start at 1. Link to a line or a range by appending a fragment to the page URL, for example `https://pluginprobe.com/plugins/wt-security/2.4.13/code/lib/API.php#L10-L20`. ```php $auth_token, 'api_key' => $api_key]); return 'success'; } elseif($result['errors'][0]['message'] == 'INVALID_API_KEY') { WebTotemOption::logout(); } return FALSE; } /** * Get site info from API server. * * @param string $attempt * Is the request an attempt to get host data. * * @return array * Returns host data. */ public static function siteInfo($attempt = FALSE) { if(self::isMultiSite()){ $host['id'] = WebTotemOption::getSessionOption('host_id'); if ($host['id']) { return $host; } } $host = WebTotemOption::getHost(); if ($host['id']) { return $host; } $all_sites = self::getSites(null, 0); if($all_sites){ if(self::isMultiSite()) { $sites = get_sites(); foreach ($sites as $site){ $domain = untrailingslashit($site->domain . $site->path); self::addSite($domain, $all_sites); } if (!$attempt) { return self::siteInfo(TRUE); } } else { $domain = WEBTOTEM_SITE_DOMAIN; return self::addSite($domain, $all_sites); } } return []; } /** * Method for adding a site to the WebTotem platform. * * @param string $domain * Domain to add. * @param array $all_sites * Array with site data on the WebTotem platform. * * @return array * Returns host data. */ public static function addSite( $domain, $all_sites) { if(function_exists('idn_to_utf8')){ $domain = idn_to_utf8($domain); } // Checking if the site has been added to the WebTotem. if(array_key_exists('edges', $all_sites)){ foreach ($all_sites['edges'] as $site){ $site = $site['node']; $hostname = untrailingslashit($site['hostname']); // If it added, save site data to DB. if($hostname == $domain or $hostname == 'www.' . $domain){ WebTotemOption::setHost($site['hostname'], $site['id']); return [ 'id' => $site['id'], 'name' => $site['hostname'], ]; } } } // If the site is not added then try to add. $payload = '{"variables":{"input":{"title":"' . $domain . '","hostname":"' . $domain . '","configs":{"scheme":"http","port":80,"wa":{},"dec":{},"ps":{}}}},"query":"mutation ($input: CreateSiteInput) { auth { sites { create(input: $input) { id hostname title } } } }"}'; $add_site = self::sendRequest($payload, TRUE); if (isset($add_site['errors'])) { WebTotemOption::setNotification('error', __('Failed to add the site to the WebTotem platform.', 'wtotem')); } else { if($host = $add_site['data']['auth']['sites']['create']) { // If it added, save site ID. WebTotemOption::setHost($host['title'], $host['id']); return [ 'id' => $host['id'], 'name' => $host['title'], ]; } } return []; } /** * Get all sites from API. * * @param string $cursor * Mark for loading data. * @param string $limit * Limit of sites to loading. * * @return array * Returns host data. */ public static function getSites($cursor = null, $limit = 15, $filter = false) { $cursor = ($cursor == null) ? 'null' : '\"' . $cursor . '\"'; if(!$filter) { $filter = ($limit === 0) ? '' : 'pagination:{ first: ' . $limit . ', cursor: ' . $cursor . ' }'; } $payload = '{"query":"query getSites { auth { viewer { sites { ...sites } } } } fragment sites on SiteQueries { list(filter: { ' . $filter . ' }) { pageInfo{ hasNextPage endCursor } edges { node { id hostname title createdAt ssl { status } availability { status } reputation { status } ports { status } deface { status } domain { status } antivirus { status } firewall { status } maliciousScript { stack { name } } } } } }"}'; $result = self::sendRequest($payload, true); if (isset($result['data']['auth']['viewer']['sites']['list']['edges'])) { return $result['data']['auth']['viewer']['sites']['list']; } return []; } /** * Method to get the agents file names and AM file link. * * @param string $host_id * Host id on WebTotem. * * @return array * Returns agents files data. */ public static function getAgentsFiles($host_id) { if(WebTotem::isMultiSite()){ $all_hosts = WebTotemOption::getOption('all_hosts') ?: []; $siteIdsArray = $all_hosts ? array_values($all_hosts) : []; $siteIds = $siteIdsArray ? addslashes(WebTotem::convertArrayToString($siteIdsArray)) : ''; $payload = '{"query":"mutation { auth { am { installMultisite(mainSiteId: \"' . $host_id . '\", siteIds: [' . $siteIds . ']){ downloadLink, amFilename, wafFilename, avFilename } } } }"}'; $response = self::sendRequest($payload, TRUE); return $response['data']['auth']['am']['installMultisite']; } else { $payload = '{"query":"mutation { auth { am { install(siteId: \"' . $host_id . '\"){ downloadLink, amFilename, wafFilename, avFilename } } } }"}'; $response = self::sendRequest($payload, TRUE); return $response['data']['auth']['am']['install']; } } /** * Add secondary MultiSite host. * * @param $new_sites * An array with sites to add. * * @return void. */ public static function addMultiSiteNewSites($new_sites){ // Host id of the main site in MultiSite network. $main_host = WebTotemOption::getMainHost(); foreach ($new_sites as $site){ $all_sites = self::getSites(null, 0); $host = self::addSite($site, $all_sites); if(key_exists('id', $host)){ $payload = '{"query":"mutation { auth { am { addMultisiteHost(mainSiteId: \"' . $main_host['id'] . '\", siteId: \"' . $host['id'] . '\") } } }"}'; $result = self::sendRequest($payload, TRUE); if(!$result['errors'][0]['message']){ WebTotemOption::setNotification( 'info', __('A new website has been added: ', 'wtotem') . $site); } } } } /** * Remove secondary MultiSite host. * * @param $host_id * Host id on WebTotem. * * @return bool * Returns result removing host. */ public static function removeMultiSiteHost($host_id){ $payload = '{"query":"mutation { auth { am { removeMultisiteHost(siteId: \"' . $host_id . '\") } } }"}'; $response = self::sendRequest($payload, TRUE); return $response['data']['auth']['am']['removeSecondaryMultisiteHost']; } /** * Method to get agents (AM, WAF, AV) statuses. * * @param string $host_id * Host id on WebTotem. * * @return array * Returns agents statuses data. */ public static function getAgentsStatusesFromAPI($host_id) { $payload = '{"query":"query ($id: ID!) { auth { viewer { sites { one(id: $id) { agentManager { statuses { am { status } av { status } waf { status } } } } } } } }", "variables":{"id":"' . $host_id . '"}}'; $response = self::sendRequest($payload, TRUE); if (isset($response['data']['auth']['viewer']['sites']['one']['agentManager']['statuses'])) { return $response['data']['auth']['viewer']['sites']['one']['agentManager']['statuses']; } return []; } /** * Method to get user time zone. * * @return string|bool * Returns time zone data. */ public static function getTimeZone() { $payload = '{"query":"query { auth { viewer{ timezone } } } "}'; $response = self::sendRequest($payload, TRUE); if (isset($response['data']['auth']['viewer']['timezone'])) { return $response['data']['auth']['viewer']['timezone']; } return FALSE; } /** * Method for get all the site security data. * * @param string $host_id * Host id on WebTotem. * @param int|array $days * For what period data is needed. * * @return array * Returns all data. */ public static function getAllData($host_id, $days = 7) { $language = WebTotem::getLanguage(); $period = WebTotem::getPeriod($days); $payload = '{"query":"query($id: ID!, $dateRange: DateRangeInput!, $language: Language!, $dateRangeWeek: DateRangeInput!, $wafLogFilter: WafLogFilter!) { auth { viewer { sites { one(id: $id) { ports { status ip tcp ignorePorts lastTest { time } } availability { status lastTest { time } responseTime downTime(dateRange: $dateRange) percent(dateRange: $dateRange) } deface { status lastTest { time } words count } domain { status registrar owner email createdDate expiredDate } ports { status lastTest { time } ip tcp country } ssl { status daysLeft expiryDate issueDate } reputation { status lastTest { time } virusList { virus{ type path } antiVirus } } firewall { lastTest { time } logs(wafLogFilter: $wafLogFilter){ edges{ node{ type blocked payload ip location{ country{ nameEn } } time request status country category } } } map(dateRange: $dateRange) { attacks, country } status chart(dateRange: $dateRange) { time attacks blocked } report(dateRange: $dateRange) { time attacks ip } } serverStatus { info { phpVersion phpServerUser phpServerSoftware phpGatewayInterface phpServerProtocol osInfo cpuCount cpuModel CpuFreq cpuFamily lsCpu maxExecTime mathLibraries } ramChart(dateRange: $dateRangeWeek){ total value time } cpuChart(dateRange: $dateRangeWeek){ value time } discUsage{ total free } status } maliciousScript { lastTest { time } status } scoring( language: $language ){ score lastTest{ time } result{ ip country isHigherThan }} agentManager{ createdAt } antivirus { status stats { changed deleted scanned infected error } lastTest { time } isFirstCheck } } } } } }","variables":{"id":"' . $host_id . '","dateRange":{"to":' . $period['to'] . ',"from":' . $period['from'] . '}, "dateRangeWeek":{"to":' . $period['to'] . ',"from":' . $period['from'] . '}, "wafLogFilter": {"dateRange":{"to":' . $period['to'] . ',"from":' . $period['from'] . '},"order":{"direction":"DESC","field":"time"},"pagination":{"first": 10,"cursor":null}}, "language":"' . $language . '"}}'; $response = self::sendRequest($payload, TRUE); if (isset($response['data']['auth']['viewer']['sites']['one'])) { return $response['data']['auth']['viewer']['sites']['one']; } return []; } /** * Method to get firewall data. * * @param string $host_id * Host id on WebTotem. * @param int $limit * Limit on the number of records. * @param string $cursor * Mark for loading data. * @param int|array $days * For what period data is needed. * * @return array * Returns firewall data. */ public static function getFirewall($host_id, $limit = 20, $cursor = NULL, $days = 365) { $period = WebTotem::getPeriod($days); $cursor = ($cursor == NULL) ? 'null' : '"' . $cursor . '"'; $payload = '{"query":"query($id: ID!, $wafLogFilter: WafLogFilter!, $dateRange: DateRangeInput!) { auth { viewer { sites { one(id: $id) { firewall { lastTest { time } status map(dateRange: $dateRange) { attacks, country, location { country { nameEn } } } chart(dateRange: $dateRange) { time attacks blocked } ...FirewallLogFragment } agentManager { createdAt } } } } } } fragment FirewallLogFragment on Waf { logs(wafLogFilter: $wafLogFilter) { edges { cursor node { type blocked payload ip location { country { nameEn } } time request status country category } } pageInfo { endCursor hasNextPage } } }", "variables":{"dateRange":{"to":' . $period['to'] . ',"from":' . $period['from'] . '},"id":"' . $host_id . '","wafLogFilter":{"dateRange":{"to":' . $period['to'] . ',"from":' . $period['from'] . '},"order":{"direction":"DESC","field":"time"},"pagination":{"first":' . $limit . ',"cursor":' . $cursor . '}}} }'; $response = self::sendRequest($payload, TRUE); if (isset($response['data']['auth']['viewer']['sites']['one'])) { return $response['data']['auth']['viewer']['sites']['one']; } return []; } /** * Method to get firewall chart data. * * @param string $host_id * Host id on WebTotem. * @param int $days * For what period data is needed. * * @return array * Returns firewall chart data. */ public static function getFirewallChart($host_id, $days = 7) { $period = WebTotem::getPeriod($days); $payload = '{ "query":"query($id: ID!, $dateRange: DateRangeInput!) { auth { viewer { sites { one(id: $id) { firewall { lastTest { time } status map(dateRange: $dateRange) { attacks, country, location { country { nameEn } } } chart(dateRange: $dateRange) { time attacks blocked } } } } } } }", "operationName":null,"variables":{"id":"' . $host_id . '","dateRange":{"to":' . $period['to'] . ',"from":' . $period['from'] . '} } }'; $response = self::sendRequest($payload, TRUE); if (isset($response['data']['auth']['viewer']['sites']['one']['firewall'])) { return $response['data']['auth']['viewer']['sites']['one']['firewall']; } return []; } /** * Method to set firewall settings. * * @param string $host_id * Host id on WebTotem. * @param array $settings * User-specified settings. * * @return array * Returns information whether the request was successful. */ public static function setFirewallSettings($host_id, array $settings) { $payload = '{"variables":{"input": {"siteId": "' . $host_id . '", "gdn": ' . $settings['gdn'] . ', "dosProtection": ' . $settings['dosProtection'] . ', "dosLimit": ' . $settings['dosLimit'] . ', "loginAttemptsProtection": ' . $settings['loginAttemptsProtection'] . ', "loginAttemptsLimit": ' . $settings['loginAttemptsLimit'] . '}},"query":"mutation WafSettings($input: WafSettingsInput!) { auth { sites { waf{ settings(input: $input) { gdn dosProtection loginAttemptsProtection dosLimit loginAttemptsLimit } } } } }"}'; return self::sendRequest($payload, TRUE); } /** * Method to get antivirus data. * * @param array $params * Parameters for filtering data. * * @return array * Returns antivirus data. */ public static function getAntivirus(array $params) { $cursor = ($params['cursor']) ? '"' . $params['cursor'] . '"' : 'null'; $event = ($params['event']) ? '"' . $params['event'] . '"' : '"new"'; $permissions = ($params['permissions']) ? ' "permissionsChanged":true, ' : ''; $period = WebTotem::getPeriod($params['days']); $payload = '{"operationName":null,"variables":{"id":"' . $params['host_id'] . '","avLogFilter":{' . $permissions . '"event":' . $event . ', "dateRange":{"to":' . $period['to'] . ',"from":' . $period['from'] . '},"order":{"direction":"DESC","field":"time"},"pagination":{"first":' . $params['limit'] . ',"cursor":' . $cursor . '}}},"query":"query ($id: ID!, $avLogFilter: AvLogFilter!) { auth { viewer { sites { one(id: $id) { id ... on Site { configs { ... on AvConfig { isActive id } } } antivirus { quarantine{ id path date } status log(avLogFilter: $avLogFilter) { edges { node { filePath event signatures time permissions permissionsChanged } } pageInfo { endCursor hasNextPage __typename } } lastTest { time } stats { changed deleted scanned infected } } } } } } }"}'; $response = self::sendRequest($payload, TRUE); if (isset($response['data']['auth']['viewer']['sites']['one']['antivirus'])) { return $response['data']['auth']['viewer']['sites']['one']['antivirus']; } return []; } /** * Method to get antivirus last test. * * @param string $host_id * Host id on WebTotem. * * @return array * Returns antivirus last test data. */ public static function getAntivirusLastTest($host_id) { $payload = '{"variables":{"id":"' . $host_id . '"},"query":"query ($id: ID!) { auth { viewer { sites { one(id: $id) { antivirus { status lastTest { time } } } } } } }"}'; $response = self::sendRequest($payload, TRUE); if (isset($response['data']['auth']['viewer']['sites']['one']['antivirus'])) { return $response['data']['auth']['viewer']['sites']['one']['antivirus']; } return []; } /** * Method to force check services. * * @param string $host_id * Host id on WebTotem. * @param string $service * Service that needs to be checked. * * @return array * Returns information whether the request was successful. */ public static function forceCheck($host_id, $service) { $payload = '{"variables":{"id":"' . $host_id . '","service":"' . $service . '"},"query":"mutation ($id: ID!, $service: ForceCheckService!) { auth { sites { forceCheck(siteId: $id, service: $service) } } }"} '; return self::sendRequest($payload, TRUE); } /** * Method to export antivirus report. * * @param string $host_id * Host id on WebTotem. * @param int|array $days * For what period data is needed. * * @return array * Returns information whether the request was successful. */ public static function avExport($host_id, $days = 30) { $period = WebTotem::getPeriod($days); $payload = '{"variables":{ "input":{"siteId":"' . $host_id . '", "dateRange":{"to":' . $period['to'] . ',"from":' . $period['from'] . '} }},"query":"mutation ($input: AvLogExportInput!) { auth { sites { av { export(input: $input) } } } }"} '; return self::sendRequest($payload, TRUE); } /** * Method to get quarantine data. * * @param string $host_id * Host id on WebTotem. * * @return array * Returns quarantine data. */ public static function getQuarantineList($host_id) { $payload = '{"query":"query{ auth{ viewer{ sites{ one(id:\"' . $host_id . '\"){ antivirus{ quarantine{ id path date } } } } } } } "}'; $response = self::sendRequest($payload, TRUE); if (isset($response['data']['auth']['viewer']['sites']['one']['antivirus']['quarantine'])) { return $response['data']['auth']['viewer']['sites']['one']['antivirus']['quarantine']; } return []; } /** * Method to move file to quarantine. * * @param string $host_id * Host id on WebTotem. * @param string $path * Path to the file. * * @return array * Returns information whether the request was successful. */ public static function moveToQuarantine($host_id, $path) { $payload = '{"query":"mutation{ auth{ sites{ av{ moveToQuarantine(input:{ siteId:\"' . $host_id . '\", path:\"' . $path . '\" }) } } } } "}'; return self::sendRequest($payload, TRUE); } /** * Method to move file from quarantine. * * @param string $id * Id assigned to the file. * * @return array * Returns information whether the request was successful. */ public static function moveFromQuarantine($id) { $payload = '{"query":"mutation{ auth{ sites{ av{ moveFromQuarantine(id: \"' . $id . '\") } } } } "}'; return self::sendRequest($payload, TRUE); } /** * Method to get server status data. * * @param string $host_id * Host id on WebTotem. * @param int|array $days * For what period data is needed. * * @return array * Returns server status data. */ public static function getServerStatusData($host_id, $days = 7) { $period = WebTotem::getPeriod($days); $payload = '{ "query":"query($id: ID!, $dateRange: DateRangeInput!) { auth { viewer { sites { one(id: $id) { serverStatus { ramChart(dateRange: $dateRange){ total value time } cpuChart(dateRange: $dateRange){ value time } } } } } } }", "variables":{"id":"' . $host_id . '","dateRange":{"to":' . $period['to'] . ',"from":' . $period['from'] . '} } }'; $response = self::sendRequest($payload, TRUE); if (isset($response['data']['auth']['viewer']['sites']['one']['serverStatus'])) { return $response['data']['auth']['viewer']['sites']['one']['serverStatus']; } return []; } /** * Method to remove port from ignore list. * * @param string $host_id * Host id on WebTotem. * @param string $port * User specified port. * * @return array * Returns information whether the request was successful. */ public static function removeIgnorePort($host_id, $port) { $payload = '{"variables":{ "input": { "siteId": "' . $host_id . '", "port":' . $port . '} },"query":"mutation($input: IgnorePortInput!) { auth { sites { ps { removeIgnorePort(input: $input) } } } }"} '; return self::sendRequest($payload, TRUE); } /** * Method to add port to ignore list. * * @param string $host_id * Host id on WebTotem. * @param string $port * User specified port. * * @return array * Returns information whether the request was successful. */ public static function addIgnorePort($host_id, $port) { $payload = '{"variables":{ "input": { "siteId": "' . $host_id . '", "port":' . (int) $port . '} },"query":"mutation($input: IgnorePortInput!) { auth { sites { ps { addIgnorePort(input: $input) } } } }"} '; return self::sendRequest($payload, TRUE); } /** * Method to get all ports list. * * @param string $host_id * Host id on WebTotem. * * @return array * Returns ports data. */ public static function getAllPortsList($host_id) { $payload = '{"query":"query($id: ID!) { auth { viewer { sites { one(id: $id) { ports { status ip tcp ignorePorts lastTest { time } } } } } } } ","variables":{"id":"' . $host_id . '"}}'; $response = self::sendRequest($payload, TRUE); if (isset($response['data']['auth']['viewer']['sites']['one']['ports'])) { return $response['data']['auth']['viewer']['sites']['one']['ports']; } return []; } /** * Method to get all reports. * * @param string $host_id * Host id on WebTotem. * @param int $limit * Limit on the number of records. * @param string $cursor * Mark for loading data. * * @return array * Returns reports data. */ public static function getAllReports($host_id, $limit = 10, $cursor = NULL) { $cursor = ($cursor == NULL) ? 'null' : '"' . $cursor . '"'; $payload = '{"variables":{"filter": { "order": { "direction": "DESC", "field": "created_at"}, "siteId":"' . $host_id . '", "pagination":{"first":' . $limit . ', "cursor":' . $cursor . '} } },"query":"query ReportsQuery($filter: ReportListFilter!) { auth { viewer { reports { list(filter: $filter) { edges { node { id site { hostname } createdAt wa dc ps rc sc av waf } cursor } pageInfo { endCursor hasNextPage } } } } } }"}'; $response = self::sendRequest($payload, TRUE); if (isset($response['data']['auth']['viewer']['reports']['list']['edges'])) { return $response['data']['auth']['viewer']['reports']['list']; } return []; } /** * Method to generate report. * * @param string $host_id * Host id on WebTotem. * @param int|array $days * For what period data is needed. * @param array $services * User-specified module settings. * * @return string|bool * Returns report download link. */ public static function generateReport($host_id, $days, array $services) { $period = WebTotem::getPeriod($days); $language = WebTotem::getLanguage(); $payload = '{"query":"query ($input: GenerateReportInput) { auth { viewer { reports { generate(input: $input) } } } }", "variables":{ "input": { "siteId": "' . $host_id . '", "from": ' . $period['from'] . ', "to": ' . $period['to'] . ', "wa": ' . $services['wa'] . ', "dc": ' . $services['dc'] . ', "ps": ' . $services['ps'] . ', "rc": ' . $services['rc'] . ', "sc": ' . $services['sc'] . ', "av": ' . $services['av'] . ', "waf": ' . $services['waf'] . ', "language": "' . $language . '" } } }'; $response = self::sendRequest($payload, TRUE); if (isset($response['data']['auth']['viewer']['reports']['generate'])) { return $response['data']['auth']['viewer']['reports']['generate']; } return FALSE; } /** * Method to download report. * * @param string $id * Assigned to the report. * * @return string|bool * Returns report download link. */ public static function downloadReport($id) { $payload = '{"query": "query { auth { viewer { reports { download(id: \"' . $id . '\") } } } }"}'; $response = self::sendRequest($payload, TRUE); if (isset($response['data']['auth']['viewer']['reports']['download'])) { return $response['data']['auth']['viewer']['reports']['download']; } return FALSE; } /** * Method to get configs data. * * @param string $host_id * Host id on WebTotem. * * @return array|bool * Returns configs data. */ public static function getConfigs($host_id) { $payload = '{"query":"query{ auth{ viewer{ sites{ one(id:\"' . $host_id . '\"){ configs{ ... on WaConfig { id service isActive notifications } ... on WafConfig { id service isActive notifications } ... on AvConfig { id service isActive notifications } ... on DcConfig { id service isActive notifications } ... on DecConfig { id service isActive } ... on RcConfig { id service isActive notifications} ... on CmsConfig { id service isActive } ... on PsConfig { id service isActive notifications } ... on SsConfig { id service isActive } ... on ScConfig { id service isActive } } } } } } } "}'; $response = self::sendRequest($payload, TRUE); if (isset($response['data']['auth']['viewer']['sites']['one']['configs'])) { return $response['data']['auth']['viewer']['sites']['one']['configs']; } return FALSE; } /** * Method to toggle modules config. * * @param string $service_id * Service id that we enable or disable. * * @return string|bool * Returns information whether the request was successful. */ public static function toggleConfigs($service_id) { $payload = '{"query":"mutation{ auth{ configs{ toggle(id: \"' . $service_id . '\"){ ... on WaConfig { service isActive } ... on AvConfig { service isActive } ... on DcConfig { service isActive } ... on DecConfig { service isActive } ... on RcConfig { service isActive } ... on CmsConfig { service isActive } ... on PsConfig { service isActive } ... on WafConfig { service isActive } } } } } "}'; $response = self::sendRequest($payload, TRUE); if (isset($response['data']['auth']['configs']['toggle'])) { return $response['data']['auth']['configs']['toggle']; } return FALSE; } /** * Method to toggle modules notification. * * @param string $host_id * Host id on WebTotem. * @param string $service * Service id in which we enable or disable notifications. * * @return string|bool * Returns information whether the request was successful. */ public static function toggleNotifications($host_id, $service) { $payload = '{"query":"mutation{ auth{ sites{ toggleNotifications(siteId: \"' . $host_id . '\", service: ' . $service . ') } } }"}'; $response = self::sendRequest($payload, TRUE); if (isset($response['data']['auth']['sites']['toggleNotifications'])) { return $response;//['data']['auth']['sites']['toggleNotifications']; } return FALSE; } /** * Method to get allow/deny ip list. * * @param string $host_id * Host id on WebTotem. * * @return array|bool * Returns ip allow/deny lists. */ public static function getIpLists($host_id) { $payload = '{"variables":{ "id": "' . $host_id . '" },"query":"query($id: ID!) { auth { viewer { sites{ one(id: $id){ firewall{ blackList{ id ip createdAt } whiteList{ id ip createdAt } settings{ gdn dosProtection dosLimit loginAttemptsProtection loginAttemptsLimit } } } } } } }"} '; $response = self::sendRequest($payload, TRUE); if (isset($response['data']['auth']['viewer']['sites']['one']['firewall'])) { return $response['data']['auth']['viewer']['sites']['one']['firewall']; } return []; } /** * Method to add ip to allow/deny list. * * @param string $host_id * Host id on WebTotem. * @param string $ips * Ip address list. * @param string $list * Allow or deny list. * * @return bool * Returns information whether the request was successful. */ public static function addIpToList($host_id, $ips, $list) { if ($ips) { $ips = WebTotem::convertIpListForApi($ips); $payload = '{"variables":{ "input": { "siteId": "' . $host_id . '", "ips": ' . $ips . ', "color": "' . $list . '" } }, "query":"mutation($input: WafListInput!) { auth { sites { waf { addToList(input: $input){ status invalidIPs} } } } }"} '; $response = self::sendRequest($payload, TRUE); if (isset($response['data']['auth']['sites']['waf']['addToList'])) { return $response['data']['auth']['sites']['waf']['addToList']; } } return FALSE; } /** * Method to remove ip from allow/deny list by id. * * @param string $id * Id assignment to ip address. * * @return bool * Returns information whether the request was successful. */ public static function removeIpFromList($id) { $payload = '{"variables":{ "id": "' . $id . '" },"query":"mutation($id: ID!) { auth { sites { waf { removeFromList(id: $id) } } } }"} '; $response = self::sendRequest($payload, TRUE); if (isset($response['data']['auth']['sites']['waf']['removeFromList'])) { return $response['data']['auth']['sites']['waf']['removeFromList']; } return FALSE; } /** * Method to get allow url list. * * @param string $host_id * Host id on WebTotem. * * @return array * Returns url allow lists. */ public static function getAllowUrlList($host_id) { $payload = '{"query":"query { auth { viewer { sites { one(id: \"' . $host_id . '\"){ firewall{ urlWhiteList{ id url createdAt } } } } } } }"} '; $response = self::sendRequest($payload, TRUE); if (isset($response['data']['auth']['viewer']['sites']['one']['firewall']['urlWhiteList'])) { return $response['data']['auth']['viewer']['sites']['one']['firewall']['urlWhiteList']; } return []; } /** * Method to add url to allow list. * * @param string $host_id * Host id on WebTotem. * @param string $url * User-specified url. * * @return bool|string * Returns information whether the request was successful. */ public static function addUrlToAllowList($host_id, $url) { $payload = '{"variables":{ "input": { "siteId": "' . $host_id . '", "url": "' . $url . '" } }, "query":"mutation($input: WafUrlWhiteListInput!) { auth { sites { waf { addToUrlWhiteList(input: $input) } } } }"} '; $response = self::sendRequest($payload, TRUE); if (isset($response['data']['auth']['sites']['waf']['addToUrlWhiteList'])) { return $response['data']['auth']['sites']['waf']['addToUrlWhiteList']; } return FALSE; } /** * Method to remove url from allow list. * * @param string $id * Id assignment to url address. * * @return bool|string * Returns information whether the request was successful. */ public static function removeUrlFromAllowList($id) { $payload = '{"variables":{ "id": "' . $id . '" }, "query":"mutation($id: ID!) { auth { sites { waf { removeFromUrlWhiteList(id: $id) } } } }"} '; $response = self::sendRequest($payload, TRUE); if (isset($response['data']['auth']['sites']['waf']['removeFromUrlWhiteList'])) { return $response['data']['auth']['sites']['waf']['removeFromUrlWhiteList']; } return FALSE; } /** * Method to get user's email. * * @return string * Returns user's email. */ public static function getEmail(){ $payload = '{"query":"query { auth { viewer { email __typename } __typename } }"}'; $response = self::sendRequest($payload, true); return $response['data']['auth']['viewer']['email']; } /** * Function sends GraphQL request to API server. * * @param string $payload * Payload to be sent to API server. * @param bool $token * Whether a token is needed when sending a request. * @param bool $repeat * Required to avoid recursion. * * @return array * Returns response from WebTotem API. */ protected static function sendRequest($payload, $token = FALSE, $repeat = FALSE) { $api_key = WebTotemOption::getOption('api_key'); // Checking whether a token is needed. if ($token) { $auth_token = WebTotemOption::getOption('auth_token'); $auth_token_expired = WebTotemOption::getOption('auth_token_expired'); // Checking whether the token has expired. if ($auth_token_expired <= time() && !$repeat) { $result = self::auth($api_key); if ($result === 'success') { return self::sendRequest($payload, $token, TRUE); } else { if(isset($result['errors'])){ $message = WebTotem::messageForHuman($result['errors'][0]['message']); WebTotemOption::setNotification('error', $message); } } } } if (function_exists('wp_remote_post')) { $args = [ 'body' => $payload, 'timeout' => '60', 'sslverify' => false, 'headers' => [ 'Content-Type:application/json', 'Content-Type' => 'application/json', 'Accept: application/json', 'source: WORDPRESS', ], ]; if (isset($auth_token)) { $auth = "Bearer " . $auth_token; $args['headers'] = array_merge($args['headers'], ["Authorization" => $auth]); } $response = wp_remote_post(WEBTOTEM_API_URL, $args); $response = wp_remote_retrieve_body($response); $response = json_decode($response, true); } else { $error = 'WP_REMOTE_POST_NOT_EXIST'; } // Checking if there are errors in the response. if (isset($response['errors'][0]['message'])) { $message = WebTotem::messageForHuman($response['errors'][0]['message']); if (stripos($response['errors'][0]['message'], "INVALID_TOKEN") !== FALSE && !$repeat) { $response = self::auth($api_key); if ($response === 'success') { return self::sendRequest($payload, $token, TRUE); } } elseif(stripos($response['errors'][0]['message'], "USERHOST_NOT_BELONG_TO_USER") !== FALSE){ if(WebTotem::isMultiSite()){ WebTotemOption::clearAllHosts(); WebTotemOption::clearOptions([ 'host_id', 'host_name' ]); } else { WebTotemOption::clearOptions([ 'host_id', 'host_name' ]); } } else { WebTotemOption::setNotification('error', $message); // for debug json_encode($payload).' '. } } if (!empty($error)) { WebTotemOption::setNotification('error', $error); } return $response; } } ```