← All changes | wt-security.php +139 -124 1.2 → 2.4.2 View file →

		@@ -1,124 +1,139 @@
1		-<?php defined('ABSPATH') or die("Protected By WT!");
2		-
3		-/*
4		-Plugin Name: WT Security
5		-Description: WT is a SaaS which provides powerful tools for securing and monitoring your website in one place in easy and flexible way.
6		-Author: WT Security
7		-Version: 1.2.1
8		-*/
9		-define("WTSEC_PAGE_TITLE", 'Dashboard');
10		-define("WTSEC_MENU_TITLE", 'WT Security');
11		-define("WTSEC_PLUGIN_PATH", plugin_dir_path(__FILE__));
12		-define("WTSEC_PLUGIN_NAME", 'wt-security');
13		-define("WTSEC_PLUGIN_PREFIX", 'wtsec_');
14		-define("WTSEC_PAGE_PREFIX", WTSEC_PLUGIN_NAME . '-');
15		-define("WTSEC_FILE_URL", "https://api.wtotem.com");
16		-define("WTSEC_ROOT", WP_PLUGIN_DIR . '/');
17		-define("WTSEC_MODULES_DIR", WTSEC_PLUGIN_PATH . 'uploads/');
18		-if (is_dir(WTSEC_MODULES_DIR) && is_writable(WTSEC_MODULES_DIR)) {
19		- define("WTSEC_INSTALLATION_DIR", WTSEC_MODULES_DIR);
20		- define("WTOTEMSEC_INSTALLATION_DIR", WTSEC_MODULES_DIR);
21		-} else {
22		- define("WTSEC_INSTALLATION_DIR", wp_upload_dir()['basedir'] . '/');
23		- define("WTOTEMSEC_INSTALLATION_DIR", wp_upload_dir()['basedir'] . '/');
24		-}
25		-define("WTSEC_PLUGIN_URL", plugins_url("", __FILE__));
26		-define("WTSEC_SITE_URL", str_replace(['http://', 'https://', 'www.', '//', '://'], '', get_site_url()));
27		-
28		-define("WTSEC_PLUGIN_INFORMATION_VERSION", "1.2");
29		-
30		-add_action('admin_init', 'wtsec_admin_init');
31		-add_action('wp_loaded', 'wtsec_init');
32		-
33		-function wtsec_init()
34		-{
35		- require_once WTSEC_PLUGIN_PATH . 'library/App.php';
36		- require_once WTSEC_PLUGIN_PATH . 'library/Request.php';
37		- if (!is_admin() && in_array(WTSEC_LIBRARY_App::getOption('waf_status'), ["start", "uninstalled"])) {
38		- if ($waf = WTSEC_LIBRARY_App::getOption(("waf_installed_file"))) {
39		- $path_to_waf = WTSEC_INSTALLATION_DIR . '/' . $waf;
40		- if (is_file($path_to_waf) && is_readable($path_to_waf)) {
41		- include $path_to_waf;
42		- }
43		- }
44		- }
45		- if (is_admin()) {
46		- require_once WTSEC_PLUGIN_PATH . 'library/WT.php';
47		- require_once WTSEC_PLUGIN_PATH . 'library/Localization.php';
48		- require_once WTSEC_PLUGIN_PATH . 'library/Idn.php';
49		- require_once WTSEC_PLUGIN_PATH . 'library/Session.php';
50		- require_once WTSEC_PLUGIN_PATH . 'routes.php';
51		- require_once WTSEC_PLUGIN_PATH . 'services.php';
52		- function wtsec_request()
53		- {
54		- return new WTSEC_LIBRARY_Request();
55		- }
56		- function wtsec_app()
57		- {
58		- return new WTSEC_LIBRARY_App();
59		- }
60		- function wtsec_filesystem_init($form_url, $method, $context, $fields = null)
61		- {
62		- global $wp_filesystem;
63		- if (!$creds = request_filesystem_credentials($form_url, $method, false, $context, $fields)) {
64		- return false;
65		- }
66		- if (!WP_Filesystem($creds)) {
67		- request_filesystem_credentials($form_url, $method, true, $context);
68		- return false;
69		- }
70		- return true;
71		- }
72		- function wtsec_locale($lmsg, $args = [])
73		- {
74		- return WTSEC_LIBRARY_Localization::lmsg($lmsg, $args);
75		- }
76		- function wtsec_getImagePath($image)
77		- {
78		- return plugins_url('/htdocs/images/' . $image, __FILE__);
79		- }
80		- function wtsec_SIS($arr, $key, $form = null)
81		- {
82		- $key = explode(".", $key);
83		- foreach ($key as $_key) {
84		- if (!isset($arr[$_key])) {
85		- $arr = "";
86		- break;
87		- }
88		- $arr = $arr[$_key];
89		- }
90		- return !empty($form) ? str_replace("$" . $key, $arr, $form) : $arr;
91		- }
92		- }
93		-}
94		-
95		-function wtsec_admin_init()
96		-{
97		- if (is_admin() && stripos(wtsec_request()->page, WTSEC_PLUGIN_NAME) !== false) {
98		- wp_register_style("css", plugins_url('/htdocs/css/src.c37ba8ac.css', __FILE__));
99		- wp_enqueue_style('css');
100		- wp_enqueue_script('chart', plugins_url('/htdocs/js/Chart.min.js', __FILE__), [], false, true);
101		- wp_enqueue_script('chart');
102		- wp_enqueue_script('app', plugins_url('/htdocs/js/src.e31bb0bc.js', __FILE__), [], false, true);
103		- wp_enqueue_script('app');
104		- $page = wtsec_request()->page;
105		- if ($page === wtsec_getRoute("login")) {
106		- if (WTSEC_LIBRARY_App::authorized()) {
107		- wp_safe_redirect(wtsec_getUrl('dashboard'));
108		- }
109		- } elseif ($page === wtsec_getRoute("logout")) {
110		- WTSEC_LIBRARY_App::logout();
111		- if (!WTSEC_LIBRARY_App::authorized()) {
112		- wp_safe_redirect(wtsec_getUrl('login'));
113		- }
114		- } elseif ($page === wtsec_getRoute("activate")) {
115		- if (WTSEC_LIBRARY_App::authorized()) {
116		- wp_safe_redirect(wtsec_getUrl('sites'));
117		- }
118		- } else {
119		- if (!WTSEC_LIBRARY_App::authorized()) {
120		- wp_safe_redirect(wtsec_getUrl('login'));
121		- }
122		- }
123		- }
124		-}
	1	+<?php
	2	+
	3	+/**
	4	+ * Plugin Name: WebTotem Security
	5	+ * Description: The <a href="https://wtotem.com/" target="_blank">WebTotem</a> Security plugin monitors websites and prevents website attacks with the help of special internal and external utilities.
	6	+ * Author URI: https://wtotem.com/
	7	+ * Author: WebTotem
	8	+ * Text Domain: wtotem
	9	+ * Domain Path: /lang
	10	+ * Version: 2.4.2
	11	+ *
	12	+ * PHP version 7
	13	+ *
	14	+ * @copyright 2021-2022 WebTotem
	15	+ * @license https://www.gnu.org/licenses/gpl-2.0.txt GPL2
	16	+ * @link https://wordpress.org/plugins/wt-security
	17	+ */
	18	+
	19	+/**
	20	+ * Main file to control the plugin.
	21	+ */
	22	+define('WEBTOTEM_INIT', true);
	23	+
	24	+/**
	25	+ * Plugin dependencies.
	26	+ *
	27	+ * list of required WordPress functions for the plugin to work.
	28	+ */
	29	+$wtotem_dependencies = array(
	30	+ 'wp',
	31	+ 'wp_die',
	32	+ 'add_action',
	33	+ 'remove_action',
	34	+ 'wp_remote_get',
	35	+ 'wp_remote_post',
	36	+);
	37	+
	38	+// Stopping execution if dependencies are not met.
	39	+foreach ($wtotem_dependencies as $dependency) {
	40	+ if (!function_exists($dependency)) {
	41	+ // Report invalid access.
	42	+ header('HTTP/1.1 403 Forbidden');
	43	+ die("Protected By WebTotem!");
	44	+ }
	45	+}
	46	+
	47	+// Stopping execution if the ABSPATH constant is not available
	48	+if (!defined('ABSPATH')) {
	49	+ // Report invalid access.
	50	+ header('HTTP/1.1 403 Forbidden');
	51	+ die("Protected By WebTotem!");
	52	+}
	53	+
	54	+/**
	55	+ * Current version of the plugin's code.
	56	+ */
	57	+define('WEBTOTEM_VERSION', '2.4.2');
	58	+
	59	+/**
	60	+ * The name of the folder where the plugin's files will be located.
	61	+ */
	62	+define("WEBTOTEM_PLUGIN_FOLDER", basename(dirname(__FILE__)));
	63	+
	64	+/**
	65	+ * The fullpath where the plugin's files will be located.
	66	+ */
	67	+define('WEBTOTEM_PLUGIN_PATH', WP_PLUGIN_DIR . '/' . WEBTOTEM_PLUGIN_FOLDER);
	68	+
	69	+/**
	70	+ * The local URL where the plugin's files and assets are served.
	71	+ */
	72	+define('WEBTOTEM_URL', rtrim(plugin_dir_url(__FILE__), '/'));
	73	+
	74	+/**
	75	+ * The domain name of the current site, without protocol and www.
	76	+ */
	77	+define("WEBTOTEM_SITE_DOMAIN", str_replace(['http://', 'https://', '//', '://', 'www.'], '', get_site_url()));
	78	+
	79	+/**
	80	+ * Remote URL where the public WebTotem API service is running.
	81	+ */
	82	+if (!defined('WEBTOTEM_API_URL')) {
	83	+ define('WEBTOTEM_API_URL', 'https://api.wtotem.com/graphql');
	84	+}
	85	+
	86	+/**
	87	+ * Unique name of the plugin through out all the code.
	88	+ */
	89	+define("WEBTOTEM", 'wtotem');
	90	+
	91	+/* Load plugin translations */
	92	+function wtotem_load_plugin_textdomain()
	93	+{
	94	+ load_plugin_textdomain('wtotem', false, basename(dirname(__FILE__)) . '/lang/');
	95	+}
	96	+add_action('plugins_loaded', 'wtotem_load_plugin_textdomain');
	97	+
	98	+$composer_autoload = __DIR__ . '/vendor/autoload.php';
	99	+if ( file_exists( $composer_autoload ) ) {
	100	+ require_once $composer_autoload;
	101	+}
	102	+
	103	+/* Load all classes before anything else. */
	104	+require_once 'lib/Helper.php';
	105	+require_once 'lib/API.php';
	106	+require_once 'lib/Interface.php';
	107	+require_once 'lib/AgentManager.php';
	108	+require_once 'lib/Option.php';
	109	+require_once 'lib/Request.php';
	110	+require_once 'lib/Template.php';
	111	+require_once 'lib/Country.php';
	112	+require_once 'lib/Ajax.php';
	113	+
	114	+/* Load page and ajax handlers */
	115	+require_once 'src/PageHandler.php';
	116	+
	117	+/* Load common variables and triggers */
	118	+require_once 'src/Common.php';
	119	+
	120	+/**
	121	+ * Uninstalled the plugin
	122	+ *
	123	+ * @return void
	124	+ */
	125	+function wtotemUninstall() {
	126	+
	127	+ /* Delete settings from the database */
	128	+ $options = WebTotemOption::getAllOptions();
	129	+ WebTotemOption::clearOptions($options);
	130	+ if(WebTotem::isMultiSite()){
	131	+ WebTotemOption::clearAllHosts();
	132	+ }
	133	+
	134	+ /* Delete all agents files and directories */
	135	+ WebTotemAgentManager::removeAgents();
	136	+
	137	+}
	138	+
	139	+register_uninstall_hook(__FILE__, 'wtotemUninstall');