wt-security / lib / Option.php

Option.php in WebTotem Security 2.4.16, at lib/Option.php

639 lines 14.4 KB

Raw Download Zip

1	<?php
2
3	if (!defined('WEBTOTEM_INIT') \|\| WEBTOTEM_INIT !== true) {
4	if (!headers_sent()) {
5	header('HTTP/1.1 403 Forbidden');
6	}
7	exit(1);
8	}
9
10	/**
11	* WebTotem Option class.
12	*/
13	class WebTotemOption {
14
15	/**
16	* Get config option.
17	*
18	* @param string $option
19	* Option name.
20	*
21	* @return mixed
22	* Returns saved data by option name.
23	*/
24	public static function getOption($option) {
25	$data = WebTotemDB::getData([ 'name' => $option ],'settings');
26	return (array_key_exists('value', $data)) ? $data['value'] : '';
27	}
28
29	/**
30	* Save multiple configuration options.
31	*
32	* @param array $options
33	* Array of data, key is name of option.
34	*
35	* @return bool
36	* Returns TRUE after setting the options.
37	*/
38	public static function setOptions(array $options) {
39
40	foreach ($options as $option => $value) {
41	$value = is_array($value) ? json_encode($value) : $value;
42	WebTotemDB::setData(['name' => $option, 'value' => $value,], 'settings', ['name' => $option]);
43	}
44
45	return TRUE;
46	}
47
48	/**
49	* Clear multiple configuration options.
50	*
51	* @param array $options
52	* Array of data, key is name of option.
53	*
54	* @return bool
55	* Returns TRUE after clearing the options.
56	*/
57	public static function clearOptions(array $options) {
58
59	foreach ($options as $option) {
60	WebTotemDB::deleteData([ 'name' => $option ], 'settings');
61	}
62
63	return TRUE;
64	}
65
66	/**
67	* Save multiple some options to session.
68	*
69	* @param array $options
70	* Array of data, key is name of option.
71	*
72	* @return bool
73	* Returns TRUE after setting the session options.
74	*/
75	public static function setSessionOptions(array $options) {
76
77	$sessions = json_decode(self::getOption('sessions'), true) ?: [];
78	$user_id = get_current_user_id();
79
80	foreach ($options as $option => $value){
81	$sessions[$user_id][$option] = $value;
82	}
83
84	self::setOptions(['sessions' => $sessions]);
85
86	return TRUE;
87	}
88
89	/**
90	* Get option from session.
91	*
92	* @param string $option
93	* Option name.
94	*
95	* @return mixed
96	* Returns saved data by option name.
97	*/
98	public static function getSessionOption($option) {
99
100	$sessions = json_decode(self::getOption('sessions'), true) ?: [];
101	$user_id = get_current_user_id();
102
103	if(array_key_exists($user_id, $sessions) and array_key_exists($option, $sessions[$user_id])){
104	return $sessions[$user_id][$option];
105	} else {
106	return [];
107	}
108
109	}
110
111	/**
112	* Save multiple some plugin settings.
113	*
114	* @param array $options
115	* Array of data, key is name of option.
116	*
117	* @return bool
118	* Returns TRUE after save settings.
119	*/
120	public static function setPluginSettings(array $options) {
121
122	$settings = json_decode(self::getOption('settings'), true) ?: [];
123
124	foreach ($options as $option => $value){
125	$settings[$option] = $value;
126	}
127
128	self::setOptions(['settings' => $settings]);
129
130	return TRUE;
131	}
132
133	/**
134	* Get plugin settings.
135	*
136	* @param string $option
137	* Option name.
138	*
139	* @return mixed
140	* Returns saved data by option name.
141	*/
142	public static function getPluginSettings($option = null) {
143
144	$settings = json_decode(self::getOption('settings'), true) ?: [];
145
146	if($option){
147	if(array_key_exists($option, $settings)){
148	return $settings[$option];
149	} else {
150	return [];
151	}
152	} else{
153	return $settings;
154	}
155	}
156
157
158	/**
159	* Check has reCaptcha enabled.
160	*
161	* @return bool
162	* Returns TRUE if reCaptcha enabled.
163	*/
164	public static function reCaptchaEnabled() {
165	return self::getPluginSettings('recaptcha') ?: false;
166	}
167
168
169	/**
170	* Save authentication token and token expiration dates in settings.
171	*
172	* @param array $params
173	* Parameters for authorization.
174	*
175	* @return string
176	* Returns TRUE after setting the options.
177	*/
178	public static function login(array $params) {
179	$token_expired = time() + $params['token']['expiresIn'] - 60;
180
181	self::setOptions([
182	'activated' => TRUE,
183	'auth_token_expired' => $token_expired,
184	'auth_token' => $params['token']['value'],
185	'api_key' => $params['api_key'],
186	'multisite_options' => WebTotem::isMultiSite()
187	]);
188
189	return TRUE;
190	}
191
192	/**
193	* Checks whether the user has activated the plugin using the API key.
194	*
195	* @return bool
196	* Returns the module activation status.
197	*/
198	public static function isActivated() {
199	return (boolean) self::getOption('activated');
200	}
201
202	/**
203	* Remove module settings.
204	*
205	* @return string
206	* Returns TRUE after clearing the options.
207	*/
208	public static function logout() {
209
210	self::clearOptions([
211	'activated',
212	'auth_token_expired',
213	'auth_token',
214	'api_key',
215	'api_url',
216	'host_id',
217	'host_name',
218	]);
219	return TRUE;
220	}
221
222	/**
223	* Set notification.
224	*
225	* @param string $type
226	* Notification Type.
227	* @param string $notice
228	* Notification Text.
229	*/
230	public static function setNotification($type, $notice) {
231	$notifications = self::getSessionOption('notifications') ?: [];
232
233	if (array_key_exists($type, $notifications)) {
234	if (!in_array($notice, $notifications[$type])) {
235	$notifications[$type][] = $notice;
236	self::setSessionOptions(['notifications' => $notifications]);
237	}
238	}
239	else {
240	$notifications[$type][] = $notice;
241	self::setSessionOptions(['notifications' => $notifications]);
242	}
243
244	}
245
246	/**
247	* Get notifications.
248	*
249	* @return array
250	* Notifications array.
251	*/
252	public static function getNotificationsData() {
253	$types = ['error', 'info', 'warning', 'success'];
254
255	$notifications = self::getSessionOption('notifications') ?: [];
256	$result = [];
257
258	foreach ($types as $type) {
259	if (array_key_exists($type, $notifications)) {
260	foreach ($notifications[$type] as $notification) {
261	$result[] = ['type' => $type, 'notice' => $notification];
262	}
263	}
264	}
265
266	// Remove notifications.
267	self::setSessionOptions(['notifications' => []]);
268
269	return $result;
270	}
271
272	/**
273	* Set host data.
274	*
275	* @return void
276	*/
277	public static function setHost($host_name, $host_id) {
278
279	if(WebTotem::isMultiSite()){
280	$blog_id = self::getBlogId($host_name);
281
282	add_blog_option($blog_id, 'wtotem_host_id', $host_id);
283	add_blog_option($blog_id, 'wtotem_host_name', $host_name);
284
285	if(!is_main_site($blog_id)){
286	$all_hosts = self::getOption('all_hosts') ?: [];
287	$all_hosts[$host_name] = $host_id;
288
289	self::setOptions([
290	'all_hosts' => $all_hosts,
291	]);
292	}
293
294	}
295	else {
296	self::setOptions([
297	'host_id' => $host_id,
298	'host_name' => $host_name,
299	]);
300	}
301	}
302
303	/**
304	* Get host data.
305	*
306	* @param string $hid
307	* Host id.
308	*
309	* @return array
310	* Host data.
311	*/
312	public static function getHost($hid = false) {
313
314	if ( $hid ) {
315	$all_hosts = self::getAllHosts() ?: [];
316	if ( $all_hosts and in_array( $hid, $all_hosts ) ) {
317	return [
318	'id' => $hid,
319	'name' => array_search( $hid, $all_hosts ),
320	];
321	}
322	}
323
324	return self::getMainHost();
325	}
326
327	/**
328	* Get host data.
329	*
330	* @return array
331	* Host data.
332	*/
333	public static function getAllHosts() {
334	$all_hosts = json_decode(self::getOption('all_hosts'), true) ?: [];
335
336	$main_host = self::getMainHost();
337	$all_hosts = ($main_host['id']) ? [$main_host['name'] => $main_host['id']] + $all_hosts : $all_hosts;
338
339	return $all_hosts;
340	}
341
342	/**
343	* Get main host data.
344	*
345	* @return array
346	* Main host data.
347	*/
348	public static function getMainHost() {
349
350	if(WebTotem::isMultiSite()){
351	return [
352	'id' => get_blog_option(0, 'wtotem_host_id'),
353	'name' => get_blog_option(0, 'wtotem_host_name'),
354	];
355	} else{
356	return [
357	'id' => self::getOption('host_id'),
358	'name' => self::getOption('host_name'),
359	];
360	}
361
362	}
363
364	/**
365	* Delete host data from DB.
366	*
367	* @return void
368	*/
369	public static function clearAllHosts() {
370
371	$data = WebTotemAPI::getSites();
372	foreach ($data['edges'] as $site) {
373	$site = $site['node'];
374	$blog_id = self::getBlogId($site['hostname']);
375	delete_blog_option($blog_id, 'wtotem_host_id');
376	delete_blog_option($blog_id, 'wtotem_host_name');
377	}
378
379	}
380
381	/**
382	* Get an array of new sites.
383	*
384	* @return array
385	* Returns either an empty array or an array with new sites.
386	*/
387	// public static function checkNewSites() {
388	// $hosts = self::getAllHosts();
389	// $sites = get_sites();
390	// $new_sites = [];
391	//
392	// foreach ($sites as $site){
393	// $host_name = untrailingslashit($site->domain . $site->path);
394	// if(!array_key_exists($host_name, $hosts) and !array_key_exists('www.' . $host_name, $hosts)) {
395	// $new_sites[] = $host_name;
396	// }
397	// }
398	// return $new_sites;
399	// }
400
401	/**
402	* Get host id from host name.
403	*
404	* @param $host_name
405	* Host name.
406	*
407	* @return integer
408	* Blog id.
409	*/
410	public static function getBlogId($host_name){
411	$current_network = get_network();
412	$patterns = [ '/' . $current_network->domain . '/', '/\./', '/\//', ];
413
414	$slug = preg_replace( $patterns, '', $host_name );
415	return ($slug) ? get_id_from_blogname($slug) : 0;
416	}
417
418	/**
419	* Get all config options name.
420	*
421	* @return array
422	* Returns saved data by option name.
423	*/
424	public static function getAllOptions() {
425	return [
426	'api_key',
427	'activated',
428	'auth_token_expired',
429	'auth_token',
430	'am_file',
431	'waf_file',
432	'av_file',
433	'am_installed',
434	'av_installed',
435	'waf_installed',
436	'time_zone_check',
437	'time_zone_offset',
438	'all_hosts',
439	'plugin_version',
440	'sessions',
441	'multisite_options',
442
443	'host_id',
444	'host_name',
445	];
446	}
447
448	/**
449	* Checking the old version of options.
450	*
451	* @return boolean
452	* If there are old options, it will return true.
453	*/
454	public static function checkOldOptions() {
455
456	// Creating a database with plugin settings.
457	if(WebTotemDB::install()){
458
459	$api_key = get_option('wtsec_api_key');
460	$am_file = get_option('wtsec_am_installed_file');
461	$waf_file = get_option('wtsec_waf_installed_file');
462
463	if($api_key){
464	self::setOptions([
465	'api_key' => $api_key,
466	'am_file' => $am_file,
467	'waf_file' => $waf_file,
468	'activated' => true,
469	'am_installed' => true,
470	'av_installed' => true,
471	'waf_installed' => true,
472	]);
473
474	$old_options = [
475	'api_key',
476	'api_key_safe',
477	'api_key_activated',
478	'authorized',
479	'authToken',
480	'waf_installed_file',
481	'av_installed_file',
482	'am_installed_file',
483	'am_installed',
484	'logout',
485	'av_installed',
486	'waf_installed',
487	'agents_installed',
488	'api_url',
489	'color_scheme' ,
490	'time_zone',
491	'token_expired',
492	'deactivated',
493	'antivirus_event',
494	'antivirus_permissions_changed',
495	'antivirus_endCursor',
496	'antivirus_hasNextPage',
497	'firewall_endCursor',
498	'firewall_hasNextPage',
499	'reports_endCursor',
500	'reports_hasNextPage'
501	];
502
503	foreach ($old_options as $option) {
504	delete_option('wtsec_' . $option);
505	delete_site_option('wtsec_' .$option);
506	}
507
508	}
509
510	$api_key = get_site_option('wtotem_api_key');
511	$am_file = get_site_option('wtotem_am_installed_file');
512	$waf_file = get_site_option('wtotem_waf_installed_file');
513
514	if($api_key){
515	self::setOptions([
516	'api_key' => $api_key,
517	'am_file' => $am_file,
518	'waf_file' => $waf_file,
519	'activated' => true,
520	'am_installed' => true,
521	'av_installed' => true,
522	'waf_installed' => true,
523	]);
524
525	foreach (self::getAllOptions() as $option) {
526	delete_option('wtotem_' . $option);
527	delete_site_option('wtotem_' .$option);
528	}
529	}
530	}
531
532	return true;
533	}
534
535	/**
536	* Check multisite.
537	*/
538	public static function multisiteCheck() {
539	// Check the transition to/from the multisite.
540	if ( ( WebTotem::isMultiSite() && ! WebTotemOption::getOption( 'multisite_options' ) ) or
541	( ! WebTotem::isMultiSite() && WebTotemOption::getOption( 'multisite_options' ) ) ) {
542
543	self::setOptions([ 'multisite_options' => WebTotem::isMultiSite() ]);
544
545	if(WebTotem::isMultiSite()){
546	WebTotemOption::clearAllHosts();
547	WebTotemOption::clearOptions([ 'host_id', 'host_name' ]);
548	} else {
549	WebTotemOption::clearOptions([ 'host_id', 'host_name' ]);
550	}
551
552	WebTotemAgentManager::removeAgents();
553	}
554	}
555
556	/**
557	* Hide readme file
558	* @param string $readmeFile
559	* @return bool
560	*/
561	public static function hideReadme($readmeFile = null) {
562	if ($readmeFile === null) {
563	$readmeFile = ABSPATH . '/readme.html';
564	}
565
566	if (file_exists($readmeFile)) {
567	$readmePathInfo = pathinfo($readmeFile);
568	require_once(ABSPATH . WPINC . '/pluggable.php');
569	$hiddenReadmeFile = $readmePathInfo['filename'] . '.' . wp_hash('readme') . '.' . $readmePathInfo['extension'];
570	return @rename($readmeFile, $readmePathInfo['dirname'] . '/' . $hiddenReadmeFile);
571	}
572
573	return false;
574	}
575
576	/**
577	* Restore readme file
578	* @param string $readmeFile
579	* @return bool
580	*/
581	public static function restoreReadme($readmeFile = null) {
582	if ($readmeFile === null) {
583	$readmeFile = ABSPATH . '/readme.html';
584	}
585	$readmePathInfo = pathinfo($readmeFile);
586	require_once(ABSPATH . WPINC . '/pluggable.php');
587	$hiddenReadmeFile = $readmePathInfo['dirname'] . '/' . $readmePathInfo['filename'] . '.' . wp_hash('readme') . '.' . $readmePathInfo['extension'];
588	if (file_exists($hiddenReadmeFile)) {
589	return @rename($hiddenReadmeFile, $readmeFile);
590	}
591
592	return false;
593	}
594	/**
595	* Hide WP version
596	* @return void
597	*/
598	public static function hideWPVersion() {
599	global $wp_version;
600	global $wp_styles;
601
602	if (!($wp_styles instanceof WP_Styles)) {
603	$wp_styles = new WP_Styles();
604	}
605	if ($wp_styles->default_version === $wp_version) {
606	$wp_styles->default_version = wp_hash($wp_styles->default_version);
607	}
608
609	foreach ($wp_styles->registered as $key => $val) {
610	if ($wp_styles->registered[$key]->ver === $wp_version) {
611	$wp_styles->registered[$key]->ver = wp_hash($wp_styles->registered[$key]->ver);
612	}
613	}
614
615	global $wp_scripts;
616	if (!($wp_scripts instanceof WP_Scripts)) {
617	$wp_scripts = new WP_Scripts();
618	}
619	if ($wp_scripts->default_version === $wp_version) {
620	$wp_scripts->default_version = wp_hash($wp_scripts->default_version);
621	}
622
623	foreach ($wp_scripts->registered as $key => $val) {
624	if ($wp_scripts->registered[$key]->ver === $wp_version) {
625	$wp_scripts->registered[$key]->ver = wp_hash($wp_scripts->registered[$key]->ver);
626	}
627	}
628	}
629
630	public static function replaceVersion($url) {
631	return preg_replace_callback("/([&;\?]ver)=(.+?)(&\|$)/", "WebTotemOption::replaceVersionCallback", $url);
632	}
633
634	public static function replaceVersionCallback($matches) {
635	global $wp_version;
636	return $matches[1] . '=' . ($wp_version === $matches[2] ? wp_hash($matches[2]) : $matches[2]) . $matches[3];
637	}
638	}
639