← All changes | wt-security.php +159 -124 1.3 → 2.4.14 View file →

		@@ -1,124 +1,159 @@
1		-<?php defined('ABSPATH') or die("Protected By WT!");
2		-
3		-/*
4		-Plugin Name: Webtotem Wordpress Security
5		-Description: Webtotem Wordpress Security is a SaaS which provides powerful tools for securing and monitoring your website in one place in easy and flexible way.
6		-Author: TSARKA
7		-Version: 1.3
8		-*/
9		-define("WTSEC_PAGE_TITLE", 'Dashboard');
10		-define("WTSEC_MENU_TITLE", 'Webtotem Security');
11		-define("WTSEC_PLUGIN_PATH", plugin_dir_path(__FILE__));
12		-define("WTSEC_PLUGIN_NAME", 'wt-security');
13		-define("WTSEC_PLUGIN_PREFIX", 'wtsec_');
14		-define("WTSEC_PAGE_PREFIX", WTSEC_PLUGIN_NAME . '-');
15		-define("WTSEC_FILE_URL", "https://api.wtotem.com");
16		-define("WTSEC_ROOT", WP_PLUGIN_DIR . '/');
17		-define("WTSEC_MODULES_DIR", WTSEC_PLUGIN_PATH . 'uploads/');
18		-if (is_dir(WTSEC_MODULES_DIR) && is_writable(WTSEC_MODULES_DIR)) {
19		- define("WTSEC_INSTALLATION_DIR", WTSEC_MODULES_DIR);
20		- define("WTOTEMSEC_INSTALLATION_DIR", WTSEC_MODULES_DIR);
21		-} else {
22		- define("WTSEC_INSTALLATION_DIR", wp_upload_dir()['basedir'] . '/');
23		- define("WTOTEMSEC_INSTALLATION_DIR", wp_upload_dir()['basedir'] . '/');
24		-}
25		-define("WTSEC_PLUGIN_URL", plugins_url("", __FILE__));
26		-define("WTSEC_SITE_URL", str_replace(['http://', 'https://', 'www.', '//', '://'], '', get_site_url()));
27		-
28		-define("WTSEC_PLUGIN_INFORMATION_VERSION", "1.2");
29		-
30		-add_action('admin_init', 'wtsec_admin_init');
31		-add_action('wp_loaded', 'wtsec_init');
32		-
33		-function wtsec_init()
34		-{
35		- require_once WTSEC_PLUGIN_PATH . 'library/App.php';
36		- require_once WTSEC_PLUGIN_PATH . 'library/Request.php';
37		- if (!is_admin() && in_array(WTSEC_LIBRARY_App::getOption('waf_status'), ["start", "uninstalled"])) {
38		- if ($waf = WTSEC_LIBRARY_App::getOption(("waf_installed_file"))) {
39		- $path_to_waf = WTSEC_INSTALLATION_DIR . '/' . $waf;
40		- if (is_file($path_to_waf) && is_readable($path_to_waf)) {
41		- include $path_to_waf;
42		- }
43		- }
44		- }
45		- if (is_admin()) {
46		- require_once WTSEC_PLUGIN_PATH . 'library/WT.php';
47		- require_once WTSEC_PLUGIN_PATH . 'library/Localization.php';
48		- require_once WTSEC_PLUGIN_PATH . 'library/Idn.php';
49		- require_once WTSEC_PLUGIN_PATH . 'library/Session.php';
50		- require_once WTSEC_PLUGIN_PATH . 'routes.php';
51		- require_once WTSEC_PLUGIN_PATH . 'services.php';
52		- function wtsec_request()
53		- {
54		- return new WTSEC_LIBRARY_Request();
55		- }
56		- function wtsec_app()
57		- {
58		- return new WTSEC_LIBRARY_App();
59		- }
60		- function wtsec_filesystem_init($form_url, $method, $context, $fields = null)
61		- {
62		- global $wp_filesystem;
63		- if (!$creds = request_filesystem_credentials($form_url, $method, false, $context, $fields)) {
64		- return false;
65		- }
66		- if (!WP_Filesystem($creds)) {
67		- request_filesystem_credentials($form_url, $method, true, $context);
68		- return false;
69		- }
70		- return true;
71		- }
72		- function wtsec_locale($lmsg, $args = [])
73		- {
74		- return WTSEC_LIBRARY_Localization::lmsg($lmsg, $args);
75		- }
76		- function wtsec_getImagePath($image)
77		- {
78		- return plugins_url('/htdocs/images/' . $image, __FILE__);
79		- }
80		- function wtsec_SIS($arr, $key, $form = null)
81		- {
82		- $key = explode(".", $key);
83		- foreach ($key as $_key) {
84		- if (!isset($arr[$_key])) {
85		- $arr = "";
86		- break;
87		- }
88		- $arr = $arr[$_key];
89		- }
90		- return !empty($form) ? str_replace("$" . $key, $arr, $form) : $arr;
91		- }
92		- }
93		-}
94		-
95		-function wtsec_admin_init()
96		-{
97		- if (is_admin() && stripos(wtsec_request()->page, WTSEC_PLUGIN_NAME) !== false) {
98		- wp_register_style("css", plugins_url('/htdocs/css/src.c37ba8ac.css', __FILE__));
99		- wp_enqueue_style('css');
100		- wp_enqueue_script('chart', plugins_url('/htdocs/js/Chart.min.js', __FILE__), [], false, true);
101		- wp_enqueue_script('chart');
102		- wp_enqueue_script('app', plugins_url('/htdocs/js/src.e31bb0bc.js', __FILE__), [], false, true);
103		- wp_enqueue_script('app');
104		- $page = wtsec_request()->page;
105		- if ($page === wtsec_getRoute("login")) {
106		- if (WTSEC_LIBRARY_App::authorized()) {
107		- wp_safe_redirect(wtsec_getUrl('dashboard'));
108		- }
109		- } elseif ($page === wtsec_getRoute("logout")) {
110		- WTSEC_LIBRARY_App::logout();
111		- if (!WTSEC_LIBRARY_App::authorized()) {
112		- wp_safe_redirect(wtsec_getUrl('login'));
113		- }
114		- } elseif ($page === wtsec_getRoute("activate")) {
115		- if (WTSEC_LIBRARY_App::authorized()) {
116		- wp_safe_redirect(wtsec_getUrl('sites'));
117		- }
118		- } else {
119		- if (!WTSEC_LIBRARY_App::authorized()) {
120		- wp_safe_redirect(wtsec_getUrl('login'));
121		- }
122		- }
123		- }
124		-}
	1	+<?php
	2	+/**
	3	+ * Plugin Name: WebTotem Security
	4	+ * Description: The <a href="https://wtotem.com/" target="_blank">WebTotem</a> Security plugin monitors websites and prevents website attacks with the help of special internal and external utilities.
	5	+ * Author URI: https://wtotem.com/
	6	+ * Author: WebTotem
	7	+ * Text Domain: wtotem
	8	+ * Domain Path: /lang
	9	+ * Version: 2.4.14
	10	+ *
	11	+ * PHP version 7.1
	12	+ *
	13	+ * @copyright 2021-2022 WebTotem
	14	+ * @license https://www.gnu.org/licenses/gpl-2.0.txt GPL2
	15	+ * @link https://wordpress.org/plugins/wt-security
	16	+ */
	17	+
	18	+/**
	19	+ * Main file to control the plugin.
	20	+ */
	21	+define('WEBTOTEM_INIT', true);
	22	+
	23	+/**
	24	+ * Plugin dependencies.
	25	+ *
	26	+ * list of required WordPress functions for the plugin to work.
	27	+ */
	28	+$wtotem_dependencies = array(
	29	+ 'wp',
	30	+ 'wp_die',
	31	+ 'add_action',
	32	+ 'remove_action',
	33	+ 'wp_remote_get',
	34	+ 'wp_remote_post',
	35	+);
	36	+
	37	+// Stopping execution if dependencies are not met.
	38	+foreach ($wtotem_dependencies as $dependency) {
	39	+ if (!function_exists($dependency)) {
	40	+ // Report invalid access.
	41	+ header('HTTP/1.1 403 Forbidden');
	42	+ die("Protected By WebTotem!");
	43	+ }
	44	+}
	45	+
	46	+// Stopping execution if the ABSPATH constant is not available
	47	+if (!defined('ABSPATH')) {
	48	+ // Report invalid access.
	49	+ header('HTTP/1.1 403 Forbidden');
	50	+ die("Protected By WebTotem!");
	51	+}
	52	+
	53	+/**
	54	+ * Current version of the plugin's code.
	55	+ */
	56	+define('WEBTOTEM_VERSION', '2.4.14');
	57	+
	58	+/**
	59	+ * The name of the folder where the plugin's files will be located.
	60	+ */
	61	+define("WEBTOTEM_PLUGIN_FOLDER", basename(dirname(__FILE__)));
	62	+
	63	+/**
	64	+ * The fullpath where the plugin's files will be located.
	65	+ */
	66	+define('WEBTOTEM_PLUGIN_PATH', WP_PLUGIN_DIR . '/' . WEBTOTEM_PLUGIN_FOLDER);
	67	+
	68	+/**
	69	+ * The local URL where the plugin's files and assets are served.
	70	+ */
	71	+define('WEBTOTEM_URL', rtrim(plugin_dir_url(__FILE__), '/'));
	72	+
	73	+/**
	74	+ * The domain name of the current site, without protocol and www.
	75	+ */
	76	+define("WEBTOTEM_SITE_DOMAIN", str_replace(['http://', 'https://', '//', '://', 'www.'], '', get_site_url()));
	77	+
	78	+/**
	79	+ * Unique name of the plugin through out all the code.
	80	+ */
	81	+define("WEBTOTEM", 'wtotem');
	82	+
	83	+/* Load plugin translations */
	84	+function wtotem_load_plugin_textdomain() {
	85	+ load_plugin_textdomain('wtotem', false, basename(dirname(__FILE__)) . '/lang/');
	86	+}
	87	+add_action('plugins_loaded', 'wtotem_load_plugin_textdomain');
	88	+
	89	+
	90	+/* Load all classes before anything else. */
	91	+require_once 'lib/Helper.php';
	92	+require_once 'lib/API.php';
	93	+require_once 'lib/DB.php';
	94	+require_once 'lib/Cache.php';
	95	+require_once 'lib/login/Login.php';
	96	+require_once 'lib/Request.php';
	97	+require_once 'lib/Interface.php';
	98	+require_once 'lib/AgentManager.php';
	99	+require_once 'lib/Option.php';
	100	+require_once 'lib/Template.php';
	101	+require_once 'lib/Country.php';
	102	+require_once 'lib/Ajax.php';
	103	+
	104	+/* Load page and ajax handlers */
	105	+require_once 'src/PageHandler.php';
	106	+
	107	+/* Load common variables and triggers */
	108	+require_once 'src/Common.php';
	109	+
	110	+/**
	111	+ * Uninstalled the plugin
	112	+ *
	113	+ * @return void
	114	+ */
	115	+function wtotemUninstall() {
	116	+
	117	+ if (WebTotemOption::getPluginSettings('hide_wp_version')) {
	118	+ WebTotemOption::restoreReadme();
	119	+ }
	120	+
	121	+ if(WebTotem::isMultiSite()){
	122	+ WebTotemOption::clearAllHosts();
	123	+ }
	124	+
	125	+ /* Delete all agents files and directories */
	126	+ WebTotemAgentManager::removeAgents();
	127	+
	128	+ /* Delete settings from the database */
	129	+ WebTotemDB::uninstall();
	130	+
	131	+}
	132	+
	133	+register_uninstall_hook(__FILE__, 'wtotemUninstall');
	134	+
	135	+/**
	136	+ * Deactivation plugin
	137	+ *
	138	+ * @return void
	139	+ */
	140	+function wtotemDeactivation() {
	141	+ if (WebTotemOption::getPluginSettings('hide_wp_version')) {
	142	+ WebTotemOption::restoreReadme();
	143	+ }
	144	+}
	145	+register_deactivation_hook( __FILE__, 'wtotemDeactivation' );
	146	+
	147	+/**
	148	+ * Deactivation plugin
	149	+ *
	150	+ * @return void
	151	+ */
	152	+function wtotemActivation() {
	153	+ WebTotemDB::install();
	154	+ if (WebTotemOption::getPluginSettings('hide_wp_version')) {
	155	+ WebTotemOption::hideReadme();
	156	+ }
	157	+}
	158	+
	159	+register_activation_hook( __FILE__, 'wtotemActivation' );