PluginProbe
WebTotem Security / 2.4.2
WebTotem Security v2.4.2
3.0.2 3.0.1 3.0.0 trunk 1.0 1.1 1.2 1.3 1.3.1 1.3.2 1.3.3 2.0 2.1 2.1.1 2.1.2 2.1.3 2.1.4 2.1.5 2.1.6 2.1.7 2.1.8 2.1.9 2.2.1 2.2.2 2.2.3 All 110 releases
← All changes | lib/API.php +767 -1123 3.0.0 → 2.4.2 View file →
@@ -1,11 +1,11 @@
1 1 <?php
2 2
3 3 if (!defined('WEBTOTEM_INIT') || WEBTOTEM_INIT !== true) {
4 - if (!headers_sent()) {
5 - header('HTTP/1.1 403 Forbidden');
6 - }
7 - die("Protected By WebTotem!");
4 + if (!headers_sent()) {
5 + header('HTTP/1.1 403 Forbidden');
6 + }
7 + die("Protected By WebTotem!");
8 8 }
9 9
10 10 /**
11 11 * WebTotem API class.
@@ -15,1273 +15,917 @@
15 15 * @version 1.0
16 16 * @copyright (C) 2022 WebTotem team (http://wtotem.com)
17 17 * @license GNU/GPL: http://www.gnu.org/copyleft/gpl.html
18 18 */
19 -class WebTotemAPI extends WebTotem
20 -{
19 +class WebTotemAPI extends WebTotem {
21 20
22 - /**
23 - * Method for getting an auth token.
24 - *
25 - * @param string $api_key
26 - * Application programming interface key.
27 - *
28 - * @return bool|string
29 - * Returns auth status
30 - */
31 - public static function auth($api_key, $repeat = FALSE)
32 - {
33 - $domain = WEBTOTEM_SITE_DOMAIN;
21 + /**
22 + * Method for getting a auth token.
23 + *
24 + * @param string $api_key
25 + * Application programming interface key.
26 + *
27 + * @return bool|string
28 + * Returns auth status
29 + */
30 + public static function auth($api_key) {
31 + $domain = WEBTOTEM_SITE_DOMAIN;
34 32
35 - if (empty($api_key)) {
36 - return FALSE;
37 - }
33 + $payload = '{"query":"mutation{ guest{ apiKeys{ auth(apiKey:\"' . $api_key . '\", source:\"' . $domain . '\"),{ token{ value, refreshToken, expiresIn } } } } }"}';
34 + $result = self::sendRequest($payload, FALSE, TRUE);
38 35
39 - $data = ['api_key' => $api_key, 'site' => $domain];
40 - $result = self::sendRequest('auth/sign-in/api-key', $data, 'POST', FALSE, TRUE);
41 -
42 - if($result === null){
43 - WebTotemOption::setNotification('warning' , __('Authorization failed. The server may be temporarily unavailable', 'wtotem'));
44 - }
45 -
46 - if (isset($result['access_token'])) {
47 - $auth_token = $result['access_token'];
48 - if(!WebTotemOption::isActivated()){
49 - WebTotemOption::login(['token' => $auth_token, 'api_key' => $api_key]);
50 - WebTotemAgentManager::postdelete();
51 - } else {
52 - WebTotemOption::refreshToken($auth_token);
53 - }
54 -
55 - return 'success';
56 - } elseif (isset($result['message']) and $result['message'] == 'invalid credentials') {
57 - WebTotemOption::logout();
58 - }
59 -
60 - if($repeat == false){
61 - //self::checkEndpoint();
62 - return self::auth($api_key, true);
63 - }
64 -
65 - return FALSE;
36 + if (isset($result['data']['guest']['apiKeys']['auth']['token']['value'])) {
37 + $auth_token = $result['data']['guest']['apiKeys']['auth']['token'];
38 + WebTotemOption::login(['token' => $auth_token, 'api_key' => $api_key]);
39 + return 'success';
40 + } elseif($result['errors'][0]['message'] == 'INVALID_API_KEY') {
41 + WebTotemOption::logout();
66 42 }
67 43
68 - /**
69 - * Method for getting API url.
70 - *
71 - * @return string|bool
72 - * API url
73 - */
74 - public static function getApiUrl()
75 - {
76 - return 'https://app.wtotem.com';
77 - }
44 + return FALSE;
45 + }
78 46
79 47
80 - /**
81 - * Get site info from API server.
82 - *
83 - * @param string $attempt
84 - * Is the request an attempt to get host data.
85 - *
86 - * @return array
87 - * Returns host data.
88 - */
89 - public static function siteInfo($attempt = FALSE)
90 - {
91 - if (self::isMultiSite()) {
92 - $host['id'] = WebTotemOption::getSessionOption('host_id');
93 - $host['name'] = WebTotemOption::getSessionOption('host_name');
48 + /**
49 + * Get site info from API server.
50 + *
51 + * @param string $attempt
52 + * Is the request an attempt to get host data.
53 + *
54 + * @return array
55 + * Returns host data.
56 + */
57 + public static function siteInfo($attempt = FALSE) {
94 58
95 - if ($host['id']) {
96 - return $host;
97 - }
98 - }
59 + if(self::isMultiSite()){
60 + $host['id'] = WebTotemOption::getSessionOption('host_id');
99 61
100 - $host = WebTotemOption::getHost();
62 + if ($host['id']) {
63 + return $host;
64 + }
65 + }
101 66
102 - if ($host['id']) {
103 - return $host;
104 - }
67 + $host = WebTotemOption::getHost();
105 68
106 -// if (self::isMultiSite()) {
107 -// $sites = get_sites();
108 -// foreach ($sites as $site) {
109 -// $domain = untrailingslashit($site->domain . $site->path);
110 -// self::addSite($domain);
111 -// }
112 -//
113 -// if (!$attempt) {
114 -// return self::siteInfo(TRUE);
115 -// }
116 -// } else {
117 -// $domain = WEBTOTEM_SITE_DOMAIN;
118 -// return self::addSite($domain);
119 -// }
120 - $domain = WEBTOTEM_SITE_DOMAIN;
121 - return self::addSite($domain);
122 -
123 -// return [];
69 + if ($host['id']) {
70 + return $host;
124 71 }
125 72
126 - /**
127 - * Method for adding a site to the WebTotem platform.
128 - *
129 - * @param string $domain
130 - * Domain to add.
131 - *
132 - * @return array
133 - * Returns host data.
134 - */
135 - public static function addSite($domain)
136 - {
137 - if (function_exists('idn_to_utf8')) {
138 - $domain = idn_to_utf8($domain);
139 - }
73 + $all_sites = self::getSites(null, 0);
74 + if(self::isMultiSite()) {
75 + $sites = get_sites();
76 + foreach ($sites as $site){
77 + $domain = untrailingslashit($site->domain . $site->path);
78 + self::addSite($domain, $all_sites);
79 + }
140 80
141 - // Checking if the site has been added to the WebTotem.
142 - if(!$host = self::getHostID($domain)){
143 - $host = self::getHostID('www.' . $domain);
144 - }
145 -
146 - if($host['id']){
147 - return [
148 - 'id' => $host['id'],
149 - 'name' => $host['hostname'],
150 - ];
151 - }
152 -
153 - // If the site is not added then try to add.
154 - $data = ['hosts' => [$domain]];
155 - $response = self::sendRequest('hosts', $data, 'POST', TRUE);
156 -
157 - if (isset($response['message'])) {
158 - WebTotemOption::setNotification('error', __('Failed to add the site to the WebTotem platform.', 'wtotem'));
159 - } else {
160 - if ($response['data']['added']) {
161 - // If it added, save site ID.
162 - $host = self::getHostID($domain);
163 - WebTotemOption::setHost($domain, $host['id']);
164 - return [
165 - 'id' => $host['id'],
166 - 'name' => $host['hostname'],
167 - ];
168 - }
169 - }
170 - return [];
81 + if (!$attempt) {
82 + return self::siteInfo(TRUE);
83 + }
171 84 }
85 + else {
86 + $domain = WEBTOTEM_SITE_DOMAIN;
87 + return self::addSite($domain, $all_sites);
88 + }
172 89
173 - /**
174 - * Get all sites from API.
175 - *
176 - * @param string $page_num
177 - * Mark for loading data.
178 - * @param string $limit
179 - * Limit of sites to loading.
180 - *
181 - * @return array
182 - * Returns host data.
183 - */
184 - public static function getSites($page_num = 1, $page_size = 15, $status = 'active')
185 - {
186 - $result = self::sendRequest('hosts', ['page_num' => $page_num, 'page_size' => $page_size, 'status' => $status], 'GET', TRUE);
90 + return [];
91 + }
187 92
188 - if (isset($result['Data'])) {
189 - return $result['Data'];
190 - }
93 + /**
94 + * Method for adding a site to the WebTotem platform.
95 + *
96 + * @param string $domain
97 + * Domain to add.
98 + * @param array $all_sites
99 + * Array with site data on the WebTotem platform.
100 + *
101 + * @return array
102 + * Returns host data.
103 + */
104 + public static function addSite( $domain, $all_sites) {
191 105
192 - return [];
193 - }
106 + if(function_exists('idn_to_utf8')){
107 + $domain = idn_to_utf8($domain);
108 + }
194 109
195 - /**
196 - * Check the site's presence in the list on the API side.
197 - *
198 - * @param string $site
199 - * The domain we want to check.
200 - *
201 - * @return array
202 - * Returns host data.
203 - */
204 - public static function getHostID($site)
205 - {
206 - $result = self::sendRequest('hosts/id', ['hostname' => $site], 'GET', TRUE);
110 + // Checking if the site has been added to the WebTotem.
111 + foreach ($all_sites['edges'] as $site){
112 + $site = $site['node'];
113 + // If it added, save site data to DB.
114 + if($site['hostname'] == $domain or 'www.' . $site['hostname'] == $domain){
115 + WebTotemOption::setHost($site['hostname'], $site['id']);
116 + return [
117 + 'id' => $site['id'],
118 + 'name' => $site['hostname'],
119 + ];
120 + }
121 + }
207 122
208 - if (isset($result['data'])) {
209 - WebTotemOption::setOptions(['config_id' => $result['data']['config_id']]);
210 - return ['id' => $result['data']['host_id'], 'hostname' => $site];
211 - }
123 + // If the site is not added then try to add.
124 + $payload = '{"variables":{"input":{"title":"' . $domain . '","hostname":"' . $domain . '","configs":{"scheme":"http","port":80,"wa":{},"dec":{},"ps":{}}}},"query":"mutation ($input: CreateSiteInput) { auth { sites { create(input: $input) { id hostname title } } } }"}';
125 + $add_site = self::sendRequest($payload, TRUE);
126 + if (isset($add_site['errors'])) {
127 + WebTotemOption::setNotification('error', __('Failed to add the site to the WebTotem platform.', 'wtotem'));
128 + }
129 + else {
130 + if($host = $add_site['data']['auth']['sites']['create']) {
131 + // If it added, save site ID.
132 + WebTotemOption::setHost($host['title'], $host['id']);
133 + return [
134 + 'id' => $host['id'],
135 + 'name' => $host['title'],
136 + ];
137 + }
138 + }
139 + return [];
140 + }
212 141
213 - return ['id' => '', 'hostname' => ''];
214 - }
142 + /**
143 + * Get all sites from API.
144 + *
145 + * @param string $cursor
146 + * Mark for loading data.
147 + * @param string $limit
148 + * Limit of sites to loading.
149 + *
150 + * @return array
151 + * Returns host data.
152 + */
153 + public static function getSites($cursor = null, $limit = 15, $filter = false) {
154 + $cursor = ($cursor == null) ? 'null' : '\"' . $cursor . '\"';
155 + if(!$filter) {
156 + $filter = ($limit === 0) ? '' : 'pagination:{ first: ' . $limit . ', cursor: ' . $cursor . ' }';
157 + }
215 158
159 + $payload = '{"query":"query getSites { auth { viewer { sites { ...sites } } } } fragment sites on SiteQueries { list(filter: { ' . $filter . ' }) { pageInfo{ hasNextPage endCursor } edges { node { id hostname title createdAt ssl { status } availability { status } reputation { status } ports { status } deface { status } domain { status } antivirus { status } firewall { status } maliciousScript { stack { name } } } } } }"}';
160 + $result = self::sendRequest($payload, true);
216 161
217 - /**
218 - * Method to get the agents file names and AM file link.
219 - *
220 - * @param string $host_id
221 - * Host id on WebTotem.
222 - *
223 - * @return array
224 - * Returns agents files data.
225 - */
226 - public static function getAgentsFiles($host_id)
227 - {
162 + if (isset($result['data']['auth']['viewer']['sites']['list']['edges'])) {
163 + return $result['data']['auth']['viewer']['sites']['list'];
164 + }
228 165
229 -// if (WebTotem::isMultiSite()) {
230 -// $all_hosts = WebTotemOption::getOption('all_hosts');
231 -// $all_hosts = $all_hosts ? json_decode($all_hosts, true) : [];
232 -//
233 -// $siteIdsArray = $all_hosts ? array_values($all_hosts) : [];
234 -// $siteIds = $siteIdsArray ? addslashes(WebTotem::convertArrayToString($siteIdsArray)) : '';
235 -//
236 -// $payload = '{"query":"mutation { auth { am { installMultisite(mainSiteId: \"' . $host_id . '\", siteIds: [' . $siteIds . ']){ downloadLink, amFilename, wafFilename, avFilename } } } }"}';
237 -// $response = self::sendRequest($payload, TRUE);
238 -//
239 -// if (isset($response['data']['auth']['am']['installMultisite'])) {
240 -// return $response['data']['auth']['am']['installMultisite'];
241 -// }
242 -// } else {
243 - $response = self::sendRequest('/agents/' . $host_id . '/install', [], 'POST', TRUE);
166 + return [];
167 + }
244 168
245 - if (isset($response['data'])) {
246 - return $response['data'];
247 - }
248 -// }
249 - return [];
250 - }
169 + /**
170 + * Method to get the agents file names and AM file link.
171 + *
172 + * @param string $host_id
173 + * Host id on WebTotem.
174 + *
175 + * @return array
176 + * Returns agents files data.
177 + */
178 + public static function getAgentsFiles($host_id) {
251 179
252 - /**
253 - * Add secondary MultiSite host.
254 - *
255 - * @param $new_sites
256 - * An array with sites to add.
257 - *
258 - * @return void.
259 - */
260 - public static function addMultiSiteNewSites($new_sites)
261 - {
180 + if(WebTotem::isMultiSite()){
181 + $all_hosts = WebTotemOption::getOption('all_hosts');
182 + $siteIdsArray = array_values($all_hosts);
183 + $siteIds = addslashes(WebTotem::convertArrayToString($siteIdsArray));
262 184
263 - }
185 + $payload = '{"query":"mutation { auth { am { installMultisite(mainSiteId: \"' . $host_id . '\", siteIds: [' . $siteIds . ']){ downloadLink, amFilename, wafFilename, avFilename } } } }"}';
186 + $response = self::sendRequest($payload, TRUE);
187 + return $response['data']['auth']['am']['installMultisite'];
188 + }
189 + else {
190 + $payload = '{"query":"mutation { auth { am { install(siteId: \"' . $host_id . '\"){ downloadLink, amFilename, wafFilename, avFilename } } } }"}';
191 + $response = self::sendRequest($payload, TRUE);
192 + return $response['data']['auth']['am']['install'];
193 + }
194 + }
264 195
265 - /**
266 - * Get the date of creation of the site.
267 - *
268 - * @param string $site
269 - * The domain we want to check.
270 - *
271 - * @return string|bool
272 - * Returns host data.
273 - */
274 - public static function getGetSiteAddedDate($site)
275 - {
276 - $payload = '{"query": "query getSites { auth { viewer { sites { list(filter: { search: \"'. $site .'\" }) { edges{ node{ createdAt } } } } } } }" }';
277 - $result = self::sendRequest($payload, true);
196 + /**
197 + * Add secondary MultiSite host.
198 + *
199 + * @param $main_host_id
200 + * Host id of the main site in MultiSite network.
201 + * @param $new_sites
202 + * An array with sites to add.
203 + *
204 + * @return void.
205 + */
206 + public static function addMultiSiteNewSites($new_sites){
207 + $main_host = WebTotemOption::getMainHost();
208 + foreach ($new_sites as $site){
209 + $all_sites = self::getSites(null, 0);
210 + $host = self::addSite($site, $all_sites);
211 + if(key_exists('id', $host)){
212 + $payload = '{"query":"mutation { auth { am { addMultisiteHost(mainSiteId: \"' . $main_host['id'] . '\", siteId: \"' . $host['id'] . '\") } } }"}';
213 + self::sendRequest($payload, TRUE);
214 + }
215 + }
216 + }
278 217
279 - if (isset($result['data']['auth']['viewer']['sites']['list']['edges'][0]['node']['createdAt'])) {
280 - return $result['data']['auth']['viewer']['sites']['list']['edges'][0]['node']['createdAt'];
281 - }
218 + /**
219 + * Remove secondary MultiSite host.
220 + *
221 + * @param $host_id
222 + * Host id on WebTotem.
223 + *
224 + * @return bool
225 + * Returns result removing host.
226 + */
227 + public static function removeMultiSiteHost($host_id){
228 + $payload = '{"query":"mutation { auth { am { removeMultisiteHost(siteId: \"' . $host_id . '\") } } }"}';
229 + $response = self::sendRequest($payload, TRUE);
230 + return $response['data']['auth']['am']['removeSecondaryMultisiteHost'];
231 + }
282 232
283 - return false;
284 - }
233 + /**
234 + * Method to get agents (AM, WAF, AV) statuses.
235 + *
236 + * @param string $host_id
237 + * Host id on WebTotem.
238 + *
239 + * @return array
240 + * Returns agents statuses data.
241 + */
242 + public static function getAgentsStatusesFromAPI($host_id) {
243 + $payload = '{"query":"query ($id: ID!) { auth { viewer { sites { one(id: $id) { agentManager { statuses { am { status } av { status } waf { status } } } } } } } }", "variables":{"id":"' . $host_id . '"}}';
244 + $response = self::sendRequest($payload, TRUE);
285 245
286 - /**
287 - * Remove secondary MultiSite host.
288 - *
289 - * @param $host_id
290 - * Host id on WebTotem.
291 - *
292 - * @return bool
293 - * Returns result removing host.
294 - */
295 - public static function removeMultiSiteHost($host_id)
296 - {
297 -
298 - return false;
246 + if (isset($response['data']['auth']['viewer']['sites']['one']['agentManager']['statuses'])) {
247 + return $response['data']['auth']['viewer']['sites']['one']['agentManager']['statuses'];
299 248 }
300 249
301 - /**
302 - * Method to get agents (AM, WAF, AV) statuses.
303 - *
304 - * @return array
305 - * Returns agents statuses data.
306 - */
307 - public static function getAgentsStatusesFromAPI()
308 - {
309 - $config_id = WebTotemOption::getOption('config_id');
310 - $response = self::sendRequest('/agents/' . $config_id . '/status', [], 'GET', TRUE);
250 + return [];
251 + }
311 252
312 - if (isset($response['data'])) {
313 - return $response['data'];
314 - }
253 + /**
254 + * Method to get user time zone.
255 + *
256 + * @return string|bool
257 + * Returns time zone data.
258 + */
259 + public static function getTimeZone() {
260 + $payload = '{"query":"query { auth { viewer{ timezone } } } "}';
261 + $response = self::sendRequest($payload, TRUE);
315 262
316 - return [];
263 + if (isset($response['data']['auth']['viewer']['timezone'])) {
264 + return $response['data']['auth']['viewer']['timezone'];
317 265 }
266 + return FALSE;
267 + }
318 268
319 - /**
320 - * Method to get user time zone.
321 - *
322 - * @return string|bool
323 - * Returns time zone data.
324 - */
325 - public static function getTimeZone()
326 - {
327 - $payload = '{"query":"query { auth { viewer{ timezone } } } "}';
328 - $response = self::sendRequest($payload, TRUE);
269 + /**
270 + * Method for get all the site security data.
271 + *
272 + * @param string $host_id
273 + * Host id on WebTotem.
274 + * @param int|array $days
275 + * For what period data is needed.
276 + *
277 + * @return array
278 + * Returns all data.
279 + */
280 + public static function getAllData($host_id, $days = 7) {
281 + $language = WebTotem::getLanguage();
282 + $period = WebTotem::getPeriod($days);
329 283
330 - if (isset($response['data']['auth']['viewer']['timezone'])) {
331 - return $response['data']['auth']['viewer']['timezone'];
332 - }
333 - return FALSE;
284 + $payload = '{"query":"query($id: ID!, $dateRange: DateRangeInput!, $language: Language!, $dateRangeWeek: DateRangeInput!, $wafLogFilter: WafLogFilter!) { auth { viewer { sites { one(id: $id) { ports { status ip tcp ignorePorts lastTest { time } } availability { status lastTest { time } responseTime downTime(dateRange: $dateRange) percent(dateRange: $dateRange) } deface { status lastTest { time } words count } domain { status registrar owner email createdDate expiredDate } ports { status lastTest { time } ip tcp country } ssl { status daysLeft expiryDate issueDate } reputation { status lastTest { time } virusList { virus{ type path } antiVirus } } firewall { lastTest { time } logs(wafLogFilter: $wafLogFilter){ edges{ node{ type blocked payload ip location{ country{ nameEn } } time request status country category } } } map(dateRange: $dateRange) { attacks, country } status chart(dateRange: $dateRange) { time attacks blocked } report(dateRange: $dateRange) { time attacks ip } } serverStatus { info { phpVersion phpServerUser phpServerSoftware phpGatewayInterface phpServerProtocol osInfo cpuCount cpuModel CpuFreq cpuFamily lsCpu maxExecTime mathLibraries } ramChart(dateRange: $dateRangeWeek){ total value time } cpuChart(dateRange: $dateRangeWeek){ value time } discUsage{ total free } status } maliciousScript { lastTest { time } status } scoring( language: $language ){ score lastTest{ time } result{ ip country isHigherThan }} agentManager{ createdAt } antivirus { status stats { changed deleted scanned infected error } lastTest { time } isFirstCheck } } } } } }","variables":{"id":"' . $host_id . '","dateRange":{"to":' . $period['to'] . ',"from":' . $period['from'] . '}, "dateRangeWeek":{"to":' . $period['to'] . ',"from":' . $period['from'] . '}, "wafLogFilter": {"dateRange":{"to":' . $period['to'] . ',"from":' . $period['from'] . '},"order":{"direction":"DESC","field":"time"},"pagination":{"first": 10,"cursor":null}}, "language":"' . $language . '"}}';
285 + $response = self::sendRequest($payload, TRUE);
286 +
287 + if (isset($response['data']['auth']['viewer']['sites']['one'])) {
288 + return $response['data']['auth']['viewer']['sites']['one'];
334 289 }
335 290
336 - /**
337 - * Method for get monitoring data.
338 - *
339 - * @param string $host_id
340 - * Host id on WebTotem.
341 - * @param int|array $days
342 - * For what period data is needed.
343 - *
344 - * @return array
345 - * Returns all data.
346 - */
347 - public static function getMonitoringData($host_id, $days = 7)
348 - {
349 - $response = self::sendRequest('/dashboard/monitoring/' . $host_id . '/results', [], 'GET', TRUE);
291 + return [];
292 + }
350 293
351 - if (isset($response['data'])) {
352 - return $response['data'];
353 - }
294 + /**
295 + * Method to get firewall data.
296 + *
297 + * @param string $host_id
298 + * Host id on WebTotem.
299 + * @param int $limit
300 + * Limit on the number of records.
301 + * @param string $cursor
302 + * Mark for loading data.
303 + * @param int|array $days
304 + * For what period data is needed.
305 + *
306 + * @return array
307 + * Returns firewall data.
308 + */
309 + public static function getFirewall($host_id, $limit = 20, $cursor = NULL, $days = 365) {
310 + $period = WebTotem::getPeriod($days);
311 + $cursor = ($cursor == NULL) ? 'null' : '"' . $cursor . '"';
354 312
355 - return [];
356 - }
313 + $payload = '{"query":"query($id: ID!, $wafLogFilter: WafLogFilter!, $dateRange: DateRangeInput!) { auth { viewer { sites { one(id: $id) { firewall { lastTest { time } status map(dateRange: $dateRange) { attacks, country, location { country { nameEn } } } chart(dateRange: $dateRange) { time attacks blocked } ...FirewallLogFragment } agentManager { createdAt } } } } } } fragment FirewallLogFragment on Waf { logs(wafLogFilter: $wafLogFilter) { edges { cursor node { type blocked payload ip location { country { nameEn } } time request status country category } } pageInfo { endCursor hasNextPage } } }", "variables":{"dateRange":{"to":' . $period['to'] . ',"from":' . $period['from'] . '},"id":"' . $host_id . '","wafLogFilter":{"dateRange":{"to":' . $period['to'] . ',"from":' . $period['from'] . '},"order":{"direction":"DESC","field":"time"},"pagination":{"first":' . $limit . ',"cursor":' . $cursor . '}}} }';
314 + $response = self::sendRequest($payload, TRUE);
357 315
316 + if (isset($response['data']['auth']['viewer']['sites']['one'])) {
317 + return $response['data']['auth']['viewer']['sites']['one'];
318 + }
358 319
359 - /**
360 - * Method for get all the site security data.
361 - *
362 - * @param string $host_id
363 - * Host id on WebTotem.
364 - *
365 - * @return array
366 - * Returns all data.
367 - */
368 - public static function getMonitoring($host_id)
369 - {
320 + return [];
321 + }
370 322
371 - $payload = '{"query":"query($id: ID!) { auth { viewer { sites { one(id: $id) { domain { lastScanResult { isTaken hasSite redirectLink isLocal protection ips { ip location } status time } } sslResults{ results{ certStatus certIssuerName certExpiryDate certIssueDate } } ssl { status daysLeft expiryDate issueDate } reputation { status lastTest { time } virusList { virus{ type path } antiVirus } } } } } } }","variables":{"id":"' . $host_id . '"}}';
372 - $response = self::sendRequest($payload, TRUE);
323 + /**
324 + * Method to get firewall chart data.
325 + *
326 + * @param string $host_id
327 + * Host id on WebTotem.
328 + * @param int $days
329 + * For what period data is needed.
330 + *
331 + * @return array
332 + * Returns firewall chart data.
333 + */
334 + public static function getFirewallChart($host_id, $days = 7) {
335 + $period = WebTotem::getPeriod($days);
373 336
374 - if (isset($response['data']['auth']['viewer']['sites']['one'])) {
375 - return $response['data']['auth']['viewer']['sites']['one'];
376 - }
337 + $payload = '{ "query":"query($id: ID!, $dateRange: DateRangeInput!) { auth { viewer { sites { one(id: $id) { firewall { lastTest { time } status map(dateRange: $dateRange) { attacks, country, location { country { nameEn } } } chart(dateRange: $dateRange) { time attacks blocked } } } } } } }", "operationName":null,"variables":{"id":"' . $host_id . '","dateRange":{"to":' . $period['to'] . ',"from":' . $period['from'] . '} } }';
338 + $response = self::sendRequest($payload, TRUE);
377 339
378 - return [];
379 - }
340 + if (isset($response['data']['auth']['viewer']['sites']['one']['firewall'])) {
341 + return $response['data']['auth']['viewer']['sites']['one']['firewall'];
342 + }
380 343
381 - /**
382 - * Method to get firewall data.
383 - *
384 - * @param int $limit
385 - * Limit on the number of records.
386 - * @param string $page
387 - * Page for loading data.
388 - * @param int|array $days
389 - * For what period data is needed.
390 - *
391 - * @return array
392 - * Returns firewall data.
393 - */
394 - public static function getFirewall($limit = 20, $page = 1, $days = 365)
395 - {
396 - $period = WebTotem::getPeriod($days);
344 + return [];
345 + }
397 346
398 - $config_id = WebTotemOption::getOption('config_id');
399 - $response = self::sendRequest('/dashboard/firewall/' . $config_id . '/logs', [
400 - 'page_num' => $page,
401 - 'page_size' => $limit,
402 - 'from' => $period['from'],
403 - 'to' => $period['to']
404 - ], 'GET', TRUE);
347 + /**
348 + * Method to set firewall settings.
349 + *
350 + * @param string $host_id
351 + * Host id on WebTotem.
352 + * @param array $settings
353 + * User-specified settings.
354 + *
355 + * @return array
356 + * Returns information whether the request was successful.
357 + */
358 + public static function setFirewallSettings($host_id, array $settings) {
359 + $payload = '{"variables":{"input": {"siteId": "' . $host_id . '", "gdn": ' . $settings['gdn'] . ', "dosProtection": ' . $settings['dosProtection'] . ', "dosLimit": ' . $settings['dosLimit'] . ', "loginAttemptsProtection": ' . $settings['loginAttemptsProtection'] . ', "loginAttemptsLimit": ' . $settings['loginAttemptsLimit'] . '}},"query":"mutation WafSettings($input: WafSettingsInput!) { auth { sites { waf{ settings(input: $input) { gdn dosProtection loginAttemptsProtection dosLimit loginAttemptsLimit } } } } }"}';
360 + return self::sendRequest($payload, TRUE);
361 + }
405 362
363 + /**
364 + * Method to get antivirus data.
365 + *
366 + * @param array $params
367 + * Parameters for filtering data.
368 + *
369 + * @return array
370 + * Returns antivirus data.
371 + */
372 + public static function getAntivirus(array $params) {
373 + $cursor = ($params['cursor']) ? '"' . $params['cursor'] . '"' : 'null';
374 + $event = ($params['event']) ? '"' . $params['event'] . '"' : '"new"';
375 + $permissions = ($params['permissions']) ? ' "permissionsChanged":true, ' : '';
376 + $period = WebTotem::getPeriod($params['days']);
406 377
407 - if (isset($response['data'])) {
408 - return $response['data'];
409 - }
378 + $payload = '{"operationName":null,"variables":{"id":"' . $params['host_id'] . '","avLogFilter":{' . $permissions . '"event":' . $event . ', "dateRange":{"to":' . $period['to'] . ',"from":' . $period['from'] . '},"order":{"direction":"DESC","field":"time"},"pagination":{"first":' . $params['limit'] . ',"cursor":' . $cursor . '}}},"query":"query ($id: ID!, $avLogFilter: AvLogFilter!) { auth { viewer { sites { one(id: $id) { id ... on Site { configs { ... on AvConfig { isActive id } } } antivirus { quarantine{ id path date } status log(avLogFilter: $avLogFilter) { edges { node { filePath event signatures time permissions permissionsChanged } } pageInfo { endCursor hasNextPage __typename } } lastTest { time } stats { changed deleted scanned infected } } } } } } }"}';
379 + $response = self::sendRequest($payload, TRUE);
410 380
411 - return [];
381 + if (isset($response['data']['auth']['viewer']['sites']['one']['antivirus'])) {
382 + return $response['data']['auth']['viewer']['sites']['one']['antivirus'];
412 383 }
384 + return [];
385 + }
413 386
414 - /**
415 - * Method to get firewall chart data.
416 - *
417 - * @param int $days
418 - * For what period data is needed.
419 - *
420 - * @return array
421 - * Returns firewall chart data.
422 - */
423 - public static function getFirewallStatistics($days = 7)
424 - {
425 - $period = WebTotem::getPeriod($days);
387 + /**
388 + * Method to get antivirus last test.
389 + *
390 + * @param string $host_id
391 + * Host id on WebTotem.
392 + *
393 + * @return array
394 + * Returns antivirus last test data.
395 + */
396 + public static function getAntivirusLastTest($host_id) {
426 397
427 - $config_id = WebTotemOption::getOption('config_id');
428 - $response = self::sendRequest('/dashboard/firewall/' . $config_id . '/statistics', [
429 - 'from' => $period['from'],
430 - 'to' => $period['to']
431 - ], 'GET', TRUE);
398 + $payload = '{"variables":{"id":"' . $host_id . '"},"query":"query ($id: ID!) { auth { viewer { sites { one(id: $id) { antivirus { status lastTest { time } } } } } } }"}';
399 + $response = self::sendRequest($payload, TRUE);
432 400
433 -
434 - if (isset($response['data'])) {
435 - return $response['data'];
436 - }
437 -
438 - return [];
401 + if (isset($response['data']['auth']['viewer']['sites']['one']['antivirus'])) {
402 + return $response['data']['auth']['viewer']['sites']['one']['antivirus'];
439 403 }
404 + return [];
405 + }
440 406
441 - /**
442 - * Method to get firewall settings.
443 - *
444 - * @return array
445 - * Returns information whether the request was successful.
446 - */
447 - public static function getFirewallSettings()
448 - {
449 - $config_id = WebTotemOption::getOption('config_id');
450 - $response = self::sendRequest('/dashboard/firewall/' . $config_id . '/configs', [], 'GET', TRUE);
451 - if (isset($response['data'])) {
452 - return $response['data'];
453 - }
407 + /**
408 + * Method to force check services.
409 + *
410 + * @param string $host_id
411 + * Host id on WebTotem.
412 + * @param string $service
413 + * Service that needs to be checked.
414 + *
415 + * @return array
416 + * Returns information whether the request was successful.
417 + */
418 + public static function forceCheck($host_id, $service) {
419 + $payload = '{"variables":{"id":"' . $host_id . '","service":"' . $service . '"},"query":"mutation ($id: ID!, $service: ForceCheckService!) { auth { sites { forceCheck(siteId: $id, service: $service) } } }"} ';
420 + return self::sendRequest($payload, TRUE);
421 + }
454 422
455 - return [];
456 - }
423 + /**
424 + * Method to export antivirus report.
425 + *
426 + * @param string $host_id
427 + * Host id on WebTotem.
428 + * @param int|array $days
429 + * For what period data is needed.
430 + *
431 + * @return array
432 + * Returns information whether the request was successful.
433 + */
434 + public static function avExport($host_id, $days = 30) {
435 + $period = WebTotem::getPeriod($days);
436 + $payload = '{"variables":{ "input":{"siteId":"' . $host_id . '", "dateRange":{"to":' . $period['to'] . ',"from":' . $period['from'] . '} }},"query":"mutation ($input: AvLogExportInput!) { auth { sites { av { export(input: $input) } } } }"} ';
437 + return self::sendRequest($payload, TRUE);
438 + }
457 439
458 - /**
459 - * Method to set firewall settings.
460 - *
461 - * @param array $settings
462 - * User-specified settings.
463 - *
464 - * @return array
465 - * Returns information whether the request was successful.
466 - */
467 - public static function setFirewallSettings(array $settings)
468 - {
469 - $config_id = WebTotemOption::getOption('config_id');
470 - return self::sendRequest('/dashboard/firewall/' . $config_id . '/configs', $settings, 'PATCH', TRUE);
471 - }
440 + /**
441 + * Method to get quarantine data.
442 + *
443 + * @param string $host_id
444 + * Host id on WebTotem.
445 + *
446 + * @return array
447 + * Returns quarantine data.
448 + */
449 + public static function getQuarantineList($host_id) {
450 + $payload = '{"query":"query{ auth{ viewer{ sites{ one(id:\"' . $host_id . '\"){ antivirus{ quarantine{ id path date } } } } } } } "}';
451 + $response = self::sendRequest($payload, TRUE);
472 452
473 -
474 - /**
475 - * Method to get antivirus history data.
476 - *
477 - * @param int $page_num
478 - * Page number.
479 - * @param int $page_size
480 - * Number of entries per page.
481 - *
482 - * @return array
483 - * Returns antivirus history data.
484 - */
485 - public static function getAntivirusHistory($page_num = 1, $page_size = 10)
486 - {
487 - $config_id = WebTotemOption::getOption('config_id');
488 - $response = self::sendRequest('/dashboard/antivirus/' . $config_id . '/history', [
489 - 'page_num' => $page_num,
490 - 'page_size' => $page_size
491 - ], 'GET', TRUE);
492 -
493 - if (isset($response['data'])) {
494 - return $response['data'];
495 - }
496 - return [];
453 + if (isset($response['data']['auth']['viewer']['sites']['one']['antivirus']['quarantine'])) {
454 + return $response['data']['auth']['viewer']['sites']['one']['antivirus']['quarantine'];
497 455 }
456 + return [];
457 + }
498 458
499 - /**
500 - * Method to get antivirus history details data.
501 - *
502 - * @param int $scan_id
503 - * Scan ID.
504 - * @param int $page_num
505 - * Page number.
506 - * @param int $page_size
507 - * Number of entries per page.
508 - *
509 - * @return array
510 - * Returns antivirus history data.
511 - */
512 - public static function getAntivirusHistoryDetails($scan_id, $page_num = 1, $page_size = 10)
513 - {
514 - $config_id = WebTotemOption::getOption('config_id');
515 - $response = self::sendRequest('/dashboard/antivirus/' . $config_id . '/history/' . $scan_id . '/details', [
516 - 'page_num' => $page_num,
517 - 'page_size' => $page_size
518 - ], 'GET', TRUE);
459 + /**
460 + * Method to move file to quarantine.
461 + *
462 + * @param string $host_id
463 + * Host id on WebTotem.
464 + * @param string $path
465 + * Path to the file.
466 + *
467 + * @return array
468 + * Returns information whether the request was successful.
469 + */
470 + public static function moveToQuarantine($host_id, $path) {
471 + $payload = '{"query":"mutation{ auth{ sites{ av{ moveToQuarantine(input:{ siteId:\"' . $host_id . '\", path:\"' . $path . '\" }) } } } } "}';
472 + return self::sendRequest($payload, TRUE);
473 + }
519 474
475 + /**
476 + * Method to move file from quarantine.
477 + *
478 + * @param string $id
479 + * Id assigned to the file.
480 + *
481 + * @return array
482 + * Returns information whether the request was successful.
483 + */
484 + public static function moveFromQuarantine($id) {
485 + $payload = '{"query":"mutation{ auth{ sites{ av{ moveFromQuarantine(id: \"' . $id . '\") } } } } "}';
486 + return self::sendRequest($payload, TRUE);
487 + }
520 488
521 - if (isset($response['data'])) {
522 - return $response['data'];
523 - }
524 - return [];
525 - }
489 + /**
490 + * Method to get server status data.
491 + *
492 + * @param string $host_id
493 + * Host id on WebTotem.
494 + * @param int|array $days
495 + * For what period data is needed.
496 + *
497 + * @return array
498 + * Returns server status data.
499 + */
500 + public static function getServerStatusData($host_id, $days = 7) {
501 + $period = WebTotem::getPeriod($days);
502 + $payload = '{ "query":"query($id: ID!, $dateRange: DateRangeInput!) { auth { viewer { sites { one(id: $id) { serverStatus { ramChart(dateRange: $dateRange){ total value time } cpuChart(dateRange: $dateRange){ value time } } } } } } }", "variables":{"id":"' . $host_id . '","dateRange":{"to":' . $period['to'] . ',"from":' . $period['from'] . '} } }';
526 503
527 - /**
528 - * Method to get quarantine data.
529 - *
530 - * @param int $page_num
531 - * Page number.
532 - * @param int $page_size
533 - * Number of entries per page.
534 - *
535 - * @return array
536 - * Returns quarantine data.
537 - */
538 - public static function getAntivirusCurrentDetails($page_num = 1, $page_size = 5)
539 - {
540 - $config_id = WebTotemOption::getOption('config_id');
541 - $response = self::sendRequest('/dashboard/antivirus/' . $config_id . '/current/details', [
542 - 'page_num' => $page_num,
543 - 'page_size' => $page_size
544 - ], 'GET', TRUE);
504 + $response = self::sendRequest($payload, TRUE);
545 505
546 - if (isset($response['data'])) {
547 - return $response['data'];
548 - }
549 - return [];
506 + if (isset($response['data']['auth']['viewer']['sites']['one']['serverStatus'])) {
507 + return $response['data']['auth']['viewer']['sites']['one']['serverStatus'];
550 508 }
551 509
510 + return [];
511 + }
552 512
553 - /**
554 - * Method to force check Antivirus.
555 - *
556 - * @return mixed
557 - * Returns information whether the request was successful.
558 - */
559 - public static function forceCheckAV()
560 - {
561 - $config_id = WebTotemOption::getOption('config_id');
562 - return self::sendRequest('/dashboard/antivirus/' . $config_id . '/check', [], 'POST', TRUE);
563 - }
513 + /**
514 + * Method to remove port from ignore list.
515 + *
516 + * @param string $host_id
517 + * Host id on WebTotem.
518 + * @param string $port
519 + * User specified port.
520 + *
521 + * @return array
522 + * Returns information whether the request was successful.
523 + */
524 + public static function removeIgnorePort($host_id, $port) {
525 + $payload = '{"variables":{ "input": { "siteId": "' . $host_id . '", "port":' . $port . '} },"query":"mutation($input: IgnorePortInput!) { auth { sites { ps { removeIgnorePort(input: $input) } } } }"} ';
526 + return self::sendRequest($payload, TRUE);
527 + }
564 528
529 + /**
530 + * Method to add port to ignore list.
531 + *
532 + * @param string $host_id
533 + * Host id on WebTotem.
534 + * @param string $port
535 + * User specified port.
536 + *
537 + * @return array
538 + * Returns information whether the request was successful.
539 + */
540 + public static function addIgnorePort($host_id, $port) {
541 + $payload = '{"variables":{ "input": { "siteId": "' . $host_id . '", "port":' . (int) $port . '} },"query":"mutation($input: IgnorePortInput!) { auth { sites { ps { addIgnorePort(input: $input) } } } }"} ';
542 + return self::sendRequest($payload, TRUE);
543 + }
565 544
566 - /**
567 - * Method to force check services.
568 - *
569 - * @param string $host_id
570 - * Host id on WebTotem.
571 - * @param string $module_name
572 - * Service that needs to be checked.
573 - *
574 - * @return array
575 - * Returns information whether the request was successful.
576 - */
577 - public static function forceCheck($host_id, $module_name)
578 - {
579 - return self::sendRequest('/dashboard/hosts/' . $host_id . '/check', ['module_name' => $module_name], 'POST', TRUE);
580 - }
545 + /**
546 + * Method to get all ports list.
547 + *
548 + * @param string $host_id
549 + * Host id on WebTotem.
550 + *
551 + * @return array
552 + * Returns ports data.
553 + */
554 + public static function getAllPortsList($host_id) {
555 + $payload = '{"query":"query($id: ID!) { auth { viewer { sites { one(id: $id) { ports { status ip tcp ignorePorts lastTest { time } } } } } } } ","variables":{"id":"' . $host_id . '"}}';
581 556
582 - /**
583 - * Method to get quarantine data.
584 - *
585 - * @param int $page_num
586 - * Page number.
587 - * @param int $page_size
588 - * Number of entries per page.
589 - *
590 - * @return array
591 - * Returns quarantine data.
592 - */
593 - public static function getQuarantineList($page_num = 1, $page_size = 5)
594 - {
595 - $config_id = WebTotemOption::getOption('config_id');
596 - $response = self::sendRequest('/dashboard/antivirus/' . $config_id . '/quarantine', [
597 - 'page_num' => $page_num,
598 - 'page_size' => $page_size
599 - ], 'GET', TRUE);
557 + $response = self::sendRequest($payload, TRUE);
600 558
601 - if (isset($response['data'])) {
602 - return $response['data'];
603 - }
604 - return [];
559 + if (isset($response['data']['auth']['viewer']['sites']['one']['ports'])) {
560 + return $response['data']['auth']['viewer']['sites']['one']['ports'];
605 561 }
606 562
607 - /**
608 - * Method to move file to quarantine.
609 - *
610 - * @param string $path
611 - * Path to the file.
612 - *
613 - * @return array
614 - * Returns information whether the request was successful.
615 - */
616 - public static function moveToQuarantine($path)
617 - {
618 - $config_id = WebTotemOption::getOption('config_id');
563 + return [];
564 + }
619 565
620 - return self::sendRequest('/dashboard/antivirus/' . $config_id . '/quarantine/' . $path . '/to-quarantine',
621 - [], 'POST', TRUE);
622 - }
566 + /**
567 + * Method to get all reports.
568 + *
569 + * @param string $host_id
570 + * Host id on WebTotem.
571 + * @param int $limit
572 + * Limit on the number of records.
573 + * @param string $cursor
574 + * Mark for loading data.
575 + *
576 + * @return array
577 + * Returns reports data.
578 + */
579 + public static function getAllReports($host_id, $limit = 10, $cursor = NULL) {
580 + $cursor = ($cursor == NULL) ? 'null' : '"' . $cursor . '"';
581 + $payload = '{"variables":{"filter": { "order": { "direction": "DESC", "field": "created_at"}, "siteId":"' . $host_id . '", "pagination":{"first":' . $limit . ', "cursor":' . $cursor . '} } },"query":"query ReportsQuery($filter: ReportListFilter!) { auth { viewer { reports { list(filter: $filter) { edges { node { id site { hostname } createdAt wa dc ps rc sc av waf } cursor } pageInfo { endCursor hasNextPage } } } } } }"}';
582 + $response = self::sendRequest($payload, TRUE);
623 583
624 - /**
625 - * Method to move file from quarantine.
626 - *
627 - * @param string $path
628 - * Path to the file.
629 - *
630 - * @return array
631 - * Returns information whether the request was successful.
632 - */
633 - public static function moveFromQuarantine($path)
634 - {
635 - $config_id = WebTotemOption::getOption('config_id');
636 - return self::sendRequest('/dashboard/antivirus/' . $config_id . '/quarantine/' . $path . '/from-quarantine',
637 - [], 'POST', TRUE);
584 + if (isset($response['data']['auth']['viewer']['reports']['list']['edges'])) {
585 + return $response['data']['auth']['viewer']['reports']['list'];
638 586 }
639 587
640 - /**
641 - * Method to get server status data.
642 - *
643 - * @param string $host_id
644 - * Host id on WebTotem.
645 - * @param int|array $days
646 - * For what period data is needed.
647 - *
648 - * @return array
649 - * Returns server status data.
650 - */
651 - public static function getServerStatusData($host_id, $days = 7)
652 - {
653 - $period = WebTotem::getPeriod($days);
654 - $payload = '{ "query":"query($id: ID!, $dateRange: DateRangeInput!) { auth { viewer { sites { one(id: $id) { serverStatus { info { phpVersion phpServerUser phpServerSoftware phpGatewayInterface phpServerProtocol osInfo cpuCount cpuModel CpuFreq cpuFamily lsCpu maxExecTime mathLibraries } ramChart(dateRange: $dateRange){ total value time } cpuChart(dateRange: $dateRange){ value time } } } } } } }", "variables":{"id":"' . $host_id . '","dateRange":{"to":' . $period['to'] . ',"from":' . $period['from'] . '} } }';
588 + return [];
589 + }
655 590
656 - $response = self::sendRequest($payload, TRUE);
591 + /**
592 + * Method to generate report.
593 + *
594 + * @param string $host_id
595 + * Host id on WebTotem.
596 + * @param int|array $days
597 + * For what period data is needed.
598 + * @param array $services
599 + * User-specified module settings.
600 + *
601 + * @return string|bool
602 + * Returns report download link.
603 + */
604 + public static function generateReport($host_id, $days, array $services) {
605 + $period = WebTotem::getPeriod($days);
606 + $language = WebTotem::getLanguage();
657 607
658 - if (isset($response['data']['auth']['viewer']['sites']['one']['serverStatus'])) {
659 - return $response['data']['auth']['viewer']['sites']['one']['serverStatus'];
660 - }
608 + $payload = '{"query":"query ($input: GenerateReportInput) { auth { viewer { reports { generate(input: $input) } } } }", "variables":{ "input": { "siteId": "' . $host_id . '", "from": ' . $period['from'] . ', "to": ' . $period['to'] . ', "wa": ' . $services['wa'] . ', "dc": ' . $services['dc'] . ', "ps": ' . $services['ps'] . ', "rc": ' . $services['rc'] . ', "sc": ' . $services['sc'] . ', "av": ' . $services['av'] . ', "waf": ' . $services['waf'] . ', "language": "' . $language . '" } } }';
609 + $response = self::sendRequest($payload, TRUE);
661 610
662 - return [];
611 + if (isset($response['data']['auth']['viewer']['reports']['generate'])) {
612 + return $response['data']['auth']['viewer']['reports']['generate'];
663 613 }
664 614
665 - /**
666 - * Method to remove port from ignore list.
667 - *
668 - * @param string $host_id
669 - * Host id on WebTotem.
670 - * @param string $port
671 - * User specified port.
672 - *
673 - * @return array
674 - * Returns information whether the request was successful.
675 - */
676 - public static function removeIgnorePort($host_id, $port)
677 - {
678 - $payload = '{"variables":{ "input": { "siteId": "' . $host_id . '", "port":' . $port . '} },"query":"mutation($input: IgnorePortInput!) { auth { sites { ps { removeIgnorePort(input: $input) } } } }"} ';
679 - return self::sendRequest($payload, TRUE);
680 - }
615 + return FALSE;
616 + }
681 617
682 - /**
683 - * Method to add port to ignore list.
684 - *
685 - * @param string $host_id
686 - * Host id on WebTotem.
687 - * @param string $port
688 - * User specified port.
689 - *
690 - * @return array
691 - * Returns information whether the request was successful.
692 - */
693 - public static function addIgnorePort($host_id, $port)
694 - {
695 - $payload = '{"variables":{ "input": { "siteId": "' . $host_id . '", "port":' . (int)$port . '} },"query":"mutation($input: IgnorePortInput!) { auth { sites { ps { addIgnorePort(input: $input) } } } }"} ';
696 - return self::sendRequest($payload, TRUE);
697 - }
618 + /**
619 + * Method to download report.
620 + *
621 + * @param string $id
622 + * Assigned to the report.
623 + *
624 + * @return string|bool
625 + * Returns report download link.
626 + */
627 + public static function downloadReport($id) {
628 + $payload = '{"query": "query { auth { viewer { reports { download(id: \"' . $id . '\") } } } }"}';
629 + $response = self::sendRequest($payload, TRUE);
698 630
699 - /**
700 - * Method to get all ports list.
701 - *
702 - * @param string $host_id
703 - * Host id on WebTotem.
704 - *
705 - * @return array
706 - * Returns ports data.
707 - */
708 - public static function getAllPortsList($host_id)
709 - {
710 - $payload = '{"query":"query($id: ID!) { auth { viewer { sites { one(id: $id) { ports { status lastTest { time } ignorePorts TCPResults{ port technology version cveList{id summary } } UDPResults { port technology version cveList{id summary } } } } } } } } ","variables":{"id":"' . $host_id . '"}}';
711 -
712 - $response = self::sendRequest($payload, TRUE);
713 -
714 - if (isset($response['data']['auth']['viewer']['sites']['one']['ports'])) {
715 - return $response['data']['auth']['viewer']['sites']['one']['ports'];
716 - }
717 -
718 - return [];
631 + if (isset($response['data']['auth']['viewer']['reports']['download'])) {
632 + return $response['data']['auth']['viewer']['reports']['download'];
719 633 }
720 634
721 - /**
722 - * Method to get all ports list.
723 - *
724 - * @param string $host_id
725 - * Host id on WebTotem.
726 - *
727 - * @return array
728 - * Returns ports data.
729 - */
730 - public static function getOpenPaths($host_id)
731 - {
732 - $payload = '{"query":"query($id: ID!) { auth { viewer { sites { one(id: $id) { openPathSearch { time paths { httpCode severity path } } } } } } } ","variables":{"id":"' . $host_id . '"}}';
635 + return FALSE;
636 + }
733 637
734 - $response = self::sendRequest($payload, TRUE);
638 + /**
639 + * Method to get configs data.
640 + *
641 + * @param string $host_id
642 + * Host id on WebTotem.
643 + *
644 + * @return array|bool
645 + * Returns configs data.
646 + */
647 + public static function getConfigs($host_id) {
648 + $payload = '{"query":"query{ auth{ viewer{ sites{ one(id:\"' . $host_id . '\"){ configs{ ... on WaConfig { id service isActive notifications } ... on WafConfig { id service isActive notifications } ... on AvConfig { id service isActive notifications } ... on DcConfig { id service isActive notifications } ... on DecConfig { id service isActive } ... on RcConfig { id service isActive notifications} ... on CmsConfig { id service isActive } ... on PsConfig { id service isActive notifications } ... on SsConfig { id service isActive } ... on ScConfig { id service isActive } } } } } } } "}';
649 + $response = self::sendRequest($payload, TRUE);
735 650
736 - if (isset($response['data']['auth']['viewer']['sites']['one']['openPathSearch'])) {
737 - return $response['data']['auth']['viewer']['sites']['one']['openPathSearch'];
738 - }
739 -
740 - return [];
651 + if (isset($response['data']['auth']['viewer']['sites']['one']['configs'])) {
652 + return $response['data']['auth']['viewer']['sites']['one']['configs'];
741 653 }
742 654
743 - /**
744 - * Method to get all reports.
745 - *
746 - * @param string $host_id
747 - * Host id on WebTotem.
748 - * @param int $limit
749 - * Limit on the number of records.
750 - * @param string $cursor
751 - * Mark for loading data.
752 - *
753 - * @return array
754 - * Returns reports data.
755 - */
756 - public static function getAllReports($host_id, $limit = 10, $cursor = NULL)
757 - {
758 - $cursor = ($cursor == NULL) ? 'null' : '"' . $cursor . '"';
759 - $payload = '{"variables":{"filter": { "order": { "direction": "DESC", "field": "created_at"}, "siteId":"' . $host_id . '", "pagination":{"first":' . $limit . ', "cursor":' . $cursor . '} } },"query":"query ReportsQuery($filter: ReportListFilter!) { auth { viewer { reports { list(filter: $filter) { edges { node { id site { hostname } createdAt wa dc ps rc sc av waf } cursor } pageInfo { endCursor hasNextPage } } } } } }"}';
760 - $response = self::sendRequest($payload, TRUE);
655 + return FALSE;
656 + }
761 657
762 - if (isset($response['data']['auth']['viewer']['reports']['list']['edges'])) {
763 - return $response['data']['auth']['viewer']['reports']['list'];
764 - }
658 + /**
659 + * Method to toggle modules config.
660 + *
661 + * @param string $service_id
662 + * Service id that we enable or disable.
663 + *
664 + * @return string|bool
665 + * Returns information whether the request was successful.
666 + */
667 + public static function toggleConfigs($service_id) {
668 + $payload = '{"query":"mutation{ auth{ configs{ toggle(id: \"' . $service_id . '\"){ ... on WaConfig { service isActive } ... on AvConfig { service isActive } ... on DcConfig { service isActive } ... on DecConfig { service isActive } ... on RcConfig { service isActive } ... on CmsConfig { service isActive } ... on PsConfig { service isActive } ... on WafConfig { service isActive } } } } } "}';
669 + $response = self::sendRequest($payload, TRUE);
765 670
766 - return [];
671 + if (isset($response['data']['auth']['configs']['toggle'])) {
672 + return $response['data']['auth']['configs']['toggle'];
767 673 }
768 674
769 - /**
770 - * Method to generate report.
771 - *
772 - * @param string $host_id
773 - * Host id on WebTotem.
774 - * @param int|array $days
775 - * For what period data is needed.
776 - * @param array $services
777 - * User-specified module settings.
778 - *
779 - * @return string|bool
780 - * Returns report download link.
781 - */
782 - public static function generateReport(string $host_id, $days, array $services)
783 - {
784 - $period = WebTotem::getPeriod($days);
785 - $language = WebTotem::getLanguage();
675 + return FALSE;
676 + }
786 677
787 - $payload = '{"query":"query ($input: GenerateReportInput) { auth { viewer { reports { generate(input: $input) } } } }", "variables":{ "input": { "siteId": "' . $host_id . '", "from": ' . $period['from'] . ', "to": ' . $period['to'] . ', "wa": ' . $services['wa'] . ', "dc": ' . $services['dc'] . ', "ps": ' . $services['ps'] . ', "rc": ' . $services['rc'] . ', "sc": ' . $services['sc'] . ', "av": ' . $services['av'] . ', "waf": ' . $services['waf'] . ', "language": "' . $language . '" } } }';
788 - $response = self::sendRequest($payload, TRUE);
678 + /**
679 + * Method to toggle modules notification.
680 + *
681 + * @param string $host_id
682 + * Host id on WebTotem.
683 + * @param string $service
684 + * Service id in which we enable or disable notifications.
685 + *
686 + * @return string|bool
687 + * Returns information whether the request was successful.
688 + */
689 + public static function toggleNotifications($host_id, $service) {
690 + $payload = '{"query":"mutation{ auth{ sites{ toggleNotifications(siteId: \"' . $host_id . '\", service: ' . $service . ') } } }"}';
691 + $response = self::sendRequest($payload, TRUE);
789 692
790 - if (isset($response['data']['auth']['viewer']['reports']['generate'])) {
791 - return $response['data']['auth']['viewer']['reports']['generate'];
792 - }
793 -
794 - return FALSE;
693 + if (isset($response['data']['auth']['sites']['toggleNotifications'])) {
694 + return $response;//['data']['auth']['sites']['toggleNotifications'];
795 695 }
796 696
797 - /**
798 - * Method to download report.
799 - *
800 - * @param string $id
801 - * Assigned to the report.
802 - *
803 - * @return string|bool
804 - * Returns report download link.
805 - */
806 - public static function downloadReport($id)
807 - {
808 - $payload = '{"query": "query { auth { viewer { reports { download(id: \"' . $id . '\") } } } }"}';
809 - $response = self::sendRequest($payload, TRUE);
697 + return FALSE;
698 + }
810 699
811 - if (isset($response['data']['auth']['viewer']['reports']['download'])) {
812 - return $response['data']['auth']['viewer']['reports']['download'];
813 - }
700 + /**
701 + * Method to get allow/deny ip list.
702 + *
703 + * @param string $host_id
704 + * Host id on WebTotem.
705 + *
706 + * @return array|bool
707 + * Returns ip allow/deny lists.
708 + */
709 + public static function getIpLists($host_id) {
710 + $payload = '{"variables":{ "id": "' . $host_id . '" },"query":"query($id: ID!) { auth { viewer { sites{ one(id: $id){ firewall{ blackList{ id ip createdAt } whiteList{ id ip createdAt } settings{ gdn dosProtection dosLimit loginAttemptsProtection loginAttemptsLimit } } } } } } }"} ';
711 + $response = self::sendRequest($payload, TRUE);
814 712
815 - return FALSE;
713 + if (isset($response['data']['auth']['viewer']['sites']['one']['firewall'])) {
714 + return $response['data']['auth']['viewer']['sites']['one']['firewall'];
816 715 }
817 716
818 - /**
819 - * Method to get configs data.
820 - *
821 - * @param string $host_id
822 - * Host id on WebTotem.
823 - *
824 - * @return array|bool
825 - * Returns configs data.
826 - */
827 - public static function getConfigs($host_id)
828 - {
829 - $payload = '{"query":"query{ auth{ viewer{ sites{ one(id:\"' . $host_id . '\"){ configs{ ... on WaConfig { id service isActive notifications } ... on WafConfig { id service isActive notifications } ... on AvConfig { id service isActive notifications } ... on DcConfig { id service isActive notifications } ... on DecConfig { id service isActive } ... on RcConfig { id service isActive notifications} ... on CmsConfig { id service isActive } ... on PsConfig { id service isActive notifications } ... on SsConfig { id service isActive } ... on ScConfig { id service isActive } } } } } } } "}';
830 - $response = self::sendRequest($payload, TRUE);
717 + return [];
718 + }
831 719
832 - if (isset($response['data']['auth']['viewer']['sites']['one']['configs'])) {
833 - return $response['data']['auth']['viewer']['sites']['one']['configs'];
834 - }
720 + /**
721 + * Method to add ip to allow/deny list.
722 + *
723 + * @param string $host_id
724 + * Host id on WebTotem.
725 + * @param string $ips
726 + * Ip address list.
727 + * @param string $list
728 + * Allow or deny list.
729 + *
730 + * @return bool
731 + * Returns information whether the request was successful.
732 + */
733 + public static function addIpToList($host_id, $ips, $list) {
835 734
836 - return FALSE;
837 - }
735 + if ($ips) {
736 + $ips = WebTotem::convertIpListForApi($ips);
737 + $payload = '{"variables":{ "input": { "siteId": "' . $host_id . '", "ips": ' . $ips . ', "color": "' . $list . '" } }, "query":"mutation($input: WafListInput!) { auth { sites { waf { addToList(input: $input){ status invalidIPs} } } } }"} ';
738 + $response = self::sendRequest($payload, TRUE);
838 739
839 - /**
840 - * Method to toggle modules config.
841 - *
842 - * @param string $service_id
843 - * Service id that we enable or disable.
844 - *
845 - * @return string|bool
846 - * Returns information whether the request was successful.
847 - */
848 - public static function toggleConfigs($service_id)
849 - {
850 - $payload = '{"query":"mutation{ auth{ configs{ toggle(id: \"' . $service_id . '\"){ ... on WaConfig { service isActive } ... on AvConfig { service isActive } ... on DcConfig { service isActive } ... on DecConfig { service isActive } ... on RcConfig { service isActive } ... on CmsConfig { service isActive } ... on PsConfig { service isActive } ... on WafConfig { service isActive } } } } } "}';
851 - $response = self::sendRequest($payload, TRUE);
852 -
853 - if (isset($response['data']['auth']['configs']['toggle'])) {
854 - return $response['data']['auth']['configs']['toggle'];
855 - }
856 -
857 - return FALSE;
740 + if (isset($response['data']['auth']['sites']['waf']['addToList'])) {
741 + return $response['data']['auth']['sites']['waf']['addToList'];
742 + }
858 743 }
859 744
860 - /**
861 - * Method to toggle modules notification.
862 - *
863 - * @param string $host_id
864 - * Host id on WebTotem.
865 - * @param string $service
866 - * Service id in which we enable or disable notifications.
867 - *
868 - * @return string|bool
869 - * Returns information whether the request was successful.
870 - */
871 - public static function toggleNotifications($host_id, $service)
872 - {
873 - $payload = '{"query":"mutation{ auth{ sites{ toggleNotifications(siteId: \"' . $host_id . '\", service: ' . $service . ') } } }"}';
874 - $response = self::sendRequest($payload, TRUE);
745 + return FALSE;
746 + }
875 747
876 - if (isset($response['data']['auth']['sites']['toggleNotifications'])) {
877 - return $response;//['data']['auth']['sites']['toggleNotifications'];
878 - }
748 + /**
749 + * Method to remove ip from allow/deny list by id.
750 + *
751 + * @param string $id
752 + * Id assignment to ip address.
753 + *
754 + * @return bool
755 + * Returns information whether the request was successful.
756 + */
757 + public static function removeIpFromList($id) {
758 + $payload = '{"variables":{ "id": "' . $id . '" },"query":"mutation($id: ID!) { auth { sites { waf { removeFromList(id: $id) } } } }"} ';
759 + $response = self::sendRequest($payload, TRUE);
879 760
880 - return FALSE;
761 + if (isset($response['data']['auth']['sites']['waf']['removeFromList'])) {
762 + return $response['data']['auth']['sites']['waf']['removeFromList'];
881 763 }
882 764
883 - /**
884 - * Method to get allow/deny ip list.
885 - *
886 - * @param string $type
887 - * Type of ip list
888 - *
889 - * @return array|bool
890 - * Returns ip allow/deny lists.
891 - */
892 - public static function getIpLists($type = 'blacklist')
893 - {
894 - $config_id = WebTotemOption::getOption('config_id');
895 - $response = self::sendRequest('/dashboard/firewall/' . $config_id . '/configs/iplist', [
896 - 'type' => $type,
897 - ], 'GET', TRUE);
765 + return FALSE;
766 + }
898 767
899 - if (isset($response['data'])) {
900 - return $response['data'];
901 - }
768 + /**
769 + * Method to get allow url list.
770 + *
771 + * @param string $host_id
772 + * Host id on WebTotem.
773 + *
774 + * @return array
775 + * Returns url allow lists.
776 + */
777 + public static function getAllowUrlList($host_id) {
778 + $payload = '{"query":"query { auth { viewer { sites { one(id: \"' . $host_id . '\"){ firewall{ urlWhiteList{ id url createdAt } } } } } } }"} ';
779 + $response = self::sendRequest($payload, TRUE);
902 780
903 - return [];
781 + if (isset($response['data']['auth']['viewer']['sites']['one']['firewall']['urlWhiteList'])) {
782 + return $response['data']['auth']['viewer']['sites']['one']['firewall']['urlWhiteList'];
904 783 }
905 784
906 - /**
907 - * Method to add ip to allow/deny list.
908 - *
909 - * @param string $ip
910 - * Ip address.
911 - * @param string $type
912 - * Allow or deny type.
913 - *
914 - * @return bool
915 - * Returns information whether the request was successful.
916 - */
917 - public static function addIpToList($ips, $type)
918 - {
919 - $config_id = WebTotemOption::getOption('config_id');
920 - self::sendRequest('/dashboard/firewall/' . $config_id . '/configs/iplist?type=' . $type, [
921 - 'ip' => array_filter($ips),
922 - ], 'POST', TRUE);
785 + return [];
786 + }
923 787
924 - return true;
925 - }
788 + /**
789 + * Method to add url to allow list.
790 + *
791 + * @param string $host_id
792 + * Host id on WebTotem.
793 + * @param string $url
794 + * User-specified url.
795 + *
796 + * @return bool|string
797 + * Returns information whether the request was successful.
798 + */
799 + public static function addUrlToAllowList($host_id, $url) {
800 + $payload = '{"variables":{ "input": { "siteId": "' . $host_id . '", "url": "' . $url . '" } }, "query":"mutation($input: WafUrlWhiteListInput!) { auth { sites { waf { addToUrlWhiteList(input: $input) } } } }"} ';
801 + $response = self::sendRequest($payload, TRUE);
926 802
927 - /**
928 - * Method to remove ip from allow/deny list by id.
929 - *
930 - * @param string $ip
931 - * Ip address.
932 - * @param string $type
933 - * Allow or deny type.
934 - *
935 - * @return bool
936 - * Returns information whether the request was successful.
937 - */
938 - public static function removeIpFromList($ip, $type)
939 - {
940 - $config_id = WebTotemOption::getOption('config_id');
941 - self::sendRequest('/dashboard/firewall/' . $config_id . '/configs/iplist?type=' . $type, [
942 - 'ip' => $ip,
943 - ], 'DELETE', TRUE);
944 -
945 - return true;
803 + if (isset($response['data']['auth']['sites']['waf']['addToUrlWhiteList'])) {
804 + return $response['data']['auth']['sites']['waf']['addToUrlWhiteList'];
946 805 }
947 806
948 - /**
949 - * Method to get allow url list.
950 - *
951 - * @param string $host_id
952 - * Host id on WebTotem.
953 - *
954 - * @return array
955 - * Returns url allow lists.
956 - */
957 - public static function getAllowUrlList($host_id)
958 - {
959 - $payload = '{"query":"query { auth { viewer { sites { one(id: \"' . $host_id . '\"){ firewall{ urlWhiteList{ id url createdAt } } } } } } }"} ';
960 - $response = self::sendRequest($payload, TRUE);
807 + return FALSE;
808 + }
961 809
962 - if (isset($response['data']['auth']['viewer']['sites']['one']['firewall']['urlWhiteList'])) {
963 - return $response['data']['auth']['viewer']['sites']['one']['firewall']['urlWhiteList'];
964 - }
810 + /**
811 + * Method to remove url from allow list.
812 + *
813 + * @param string $id
814 + * Id assignment to url address.
815 + *
816 + * @return bool|string
817 + * Returns information whether the request was successful.
818 + */
819 + public static function removeUrlFromAllowList($id) {
820 + $payload = '{"variables":{ "id": "' . $id . '" }, "query":"mutation($id: ID!) { auth { sites { waf { removeFromUrlWhiteList(id: $id) } } } }"} ';
821 + $response = self::sendRequest($payload, TRUE);
965 822
966 - return [];
823 + if (isset($response['data']['auth']['sites']['waf']['removeFromUrlWhiteList'])) {
824 + return $response['data']['auth']['sites']['waf']['removeFromUrlWhiteList'];
967 825 }
968 826
969 - /**
970 - * Method to add url to allow list.
971 - *
972 - * @param string $host_id
973 - * Host id on WebTotem.
974 - * @param string $url
975 - * User-specified url.
976 - *
977 - * @return bool|string
978 - * Returns information whether the request was successful.
979 - */
980 - public static function addUrlToAllowList($host_id, $url)
981 - {
982 - $payload = '{"variables":{ "input": { "siteId": "' . $host_id . '", "url": "' . $url . '" } }, "query":"mutation($input: WafUrlWhiteListInput!) { auth { sites { waf { addToUrlWhiteList(input: $input) } } } }"} ';
983 - $response = self::sendRequest($payload, TRUE);
827 + return FALSE;
828 + }
984 829
985 - if (isset($response['data']['auth']['sites']['waf']['addToUrlWhiteList'])) {
986 - return $response['data']['auth']['sites']['waf']['addToUrlWhiteList'];
987 - }
830 + /**
831 + * Method to get user's email.
832 + *
833 + * @return string
834 + * Returns user's email.
835 + */
836 + public static function getEmail(){
837 + $payload = '{"query":"query { auth { viewer { email __typename } __typename } }"}';
838 + $response = self::sendRequest($payload, true);
988 839
989 - return FALSE;
990 - }
840 + return $response['data']['auth']['viewer']['email'];
841 + }
991 842
992 - /**
993 - * Method to remove url from allow list.
994 - *
995 - * @param string $id
996 - * Id assignment to url address.
997 - *
998 - * @return bool|string
999 - * Returns information whether the request was successful.
1000 - */
1001 - public static function removeUrlFromAllowList($id)
1002 - {
1003 - $payload = '{"variables":{ "id": "' . $id . '" }, "query":"mutation($id: ID!) { auth { sites { waf { removeFromUrlWhiteList(id: $id) } } } }"} ';
1004 - $response = self::sendRequest($payload, TRUE);
843 + /**
844 + * Function sends GraphQL request to API server.
845 + *
846 + * @param string $payload
847 + * Payload to be sent to API server.
848 + * @param bool $token
849 + * Whether a token is needed when sending a request.
850 + * @param bool $repeat
851 + * Required to avoid recursion.
852 + *
853 + * @return array
854 + * Returns response from WebTotem API.
855 + */
856 + protected static function sendRequest($payload, $token = FALSE, $repeat = FALSE) {
1005 857
1006 - if (isset($response['data']['auth']['sites']['waf']['removeFromUrlWhiteList'])) {
1007 - return $response['data']['auth']['sites']['waf']['removeFromUrlWhiteList'];
1008 - }
858 + $api_key = WebTotemOption::getOption('api_key');
1009 859
1010 - return FALSE;
1011 - }
860 + // Checking whether a token is needed.
861 + if ($token) {
862 + $auth_token = WebTotemOption::getOption('auth_token');
863 + $auth_token_expired = WebTotemOption::getOption('auth_token_expired');
1012 864
1013 - /**
1014 - * Method to get blocked countries list.
1015 - *
1016 - * @param string $host_id
1017 - * Host id on WebTotem.
1018 - *
1019 - * @return array
1020 - * Returns blocked countries list.
1021 - */
1022 - public static function getBlockedCountries($host_id)
1023 - {
1024 - $period = WebTotem::getPeriod(7);
1025 - $payload = '{"variables":{"dateRange":{"to":' . $period['to'] . ',"from":' . $period['from'] . '}} , "query":"query($dateRange: DateRangeInput!){ auth { viewer { sites { one(id: \"' . $host_id . '\"){ firewall{ blockedCountries map(dateRange: $dateRange) { attacks, country, location { country { nameEn } } } } } } } } }"}';
1026 - $response = self::sendRequest($payload, TRUE);
1027 -
1028 - if (isset($response['data']['auth']['viewer']['sites']['one']['firewall'])) {
1029 - return $response['data']['auth']['viewer']['sites']['one']['firewall'];
865 + // Checking whether the token has expired.
866 + if ($auth_token_expired <= time() && !$repeat) {
867 + $result = self::auth($api_key);
868 + if ($result === 'success') {
869 + return self::sendRequest($payload, $token, TRUE);
1030 870 }
1031 -
1032 - return [];
1033 - }
1034 -
1035 - /**
1036 - * Method for synchronizing data on the list of blocked countries.
1037 - *
1038 - * @param string $host_id
1039 - * Host id on WebTotem.
1040 - * @param array $countries
1041 - * Array of countries to block.
1042 - *
1043 - * @return bool|string
1044 - * Returns information whether the request was successful.
1045 - */
1046 - public static function syncBlockedCountries($host_id, $countries)
1047 - {
1048 -
1049 - $countries = $countries ? WebTotem::convertArrayToString($countries) : '';
1050 - $payload = '{"variables":{ "input": { "siteId": "' . $host_id . '", "countries": [' . $countries . '] } }, "query":"mutation($input: WafBlockedCountriesInput!) { auth { sites { waf { syncBlockedCountries(input: $input) } } } }"} ';
1051 - $response = self::sendRequest($payload, TRUE);
1052 -
1053 - if (isset($response['data']['auth']['sites']['waf']['syncBlockedCountries'])) {
1054 - return $response['data']['auth']['sites']['waf']['syncBlockedCountries'];
871 + else {
872 + if(isset($result['errors'])){
873 + $message = WebTotem::messageForHuman($result['errors'][0]['message']);
874 + WebTotemOption::setNotification('error', $message);
875 + }
1055 876 }
1056 -
1057 - return FALSE;
877 + }
1058 878 }
1059 879
1060 - /**
1061 - * Method to get user's email.
1062 - *
1063 - * @return string
1064 - * Returns user's email.
1065 - */
1066 - public static function getEmail()
1067 - {
1068 - $payload = '{"query":"query { auth { viewer { email } } }"}';
1069 - $response = self::sendRequest($payload, true);
880 + if (function_exists('wp_remote_post')) {
1070 881
1071 - return $response['data']['auth']['viewer']['email'];
1072 - }
882 + $args = [
883 + 'body' => $payload,
884 + 'timeout' => '60',
885 + 'sslverify' => false,
886 + 'headers' => [
887 + 'Content-Type:application/json',
888 + 'Content-Type' => 'application/json',
889 + 'Accept: application/json',
890 + 'source: WORDPRESS',
891 + ],
892 + ];
1073 893
1074 - /**
1075 - * Method to get user's email.
1076 - *
1077 - * @param string $plugin_list
1078 - * List of plugins and their versions.
1079 - *
1080 - * @return array
1081 - * Returns cve list.
1082 - */
1083 - public static function getCVE($plugin_list)
1084 - {
1085 - $payload = '{"variables":{ "params": [' . $plugin_list . '] }, "query":"query searchByTechnologyAndVersion($params: [SearchByTechnologyAndVersionInput!]) { auth { viewer { cve { searchByTechnologyAndVersion(params: $params) { cves { cve_id id summary published reference } technology version } } } } }"}';
1086 - $response = self::sendRequest($payload, true);
894 + if (isset($auth_token)) {
895 + $auth = "Bearer " . $auth_token;
896 + $args['headers'] = array_merge($args['headers'], ["Authorization" => $auth]);
897 + }
1087 898
1088 - if (isset($response['data']['auth']['viewer']['cve']['searchByTechnologyAndVersion'])) {
1089 - return $response['data']['auth']['viewer']['cve']['searchByTechnologyAndVersion'];
1090 - }
899 + $response = wp_remote_post(WEBTOTEM_API_URL, $args);
900 + $response = wp_remote_retrieve_body($response);
901 + $response = json_decode($response, true);
1091 902
1092 - return [];
1093 903 }
1094 -
1095 - /**
1096 - * Method to get user's feedback.
1097 - *
1098 - * @return array
1099 - */
1100 - public static function getFeedback()
1101 - {
1102 - return self::sendFeedbackRequest("GET");
904 + else {
905 + $error = 'WP_REMOTE_POST_NOT_EXIST';
1103 906 }
1104 907
1105 - /**
1106 - * Method to set user's feedback.
1107 - *
1108 - * @return array
1109 - */
1110 - public static function setFeedback($data)
1111 - {
1112 - return self::sendFeedbackRequest("POST", $data);
1113 - }
1114 -
1115 - /**
1116 - * Function sends data request to endpoint.
1117 - *
1118 - * @param array $data
1119 - * Data array to be sent to endpoint.
1120 - *
1121 - * @return array
1122 - * Returns response from WebTotem endpoint.
1123 - */
1124 - protected static function sendFeedbackRequest($method, $data = [])
1125 - {
1126 - $url = 'https://nps.wtotem.com/user-score';
1127 - $email = WebTotem::getUserEmail();
1128 -
1129 - if (!$email) {
1130 - return [];
908 + // Checking if there are errors in the response.
909 + if (isset($response['errors'][0]['message'])) {
910 + $message = WebTotem::messageForHuman($response['errors'][0]['message']);
911 + if (stripos($response['errors'][0]['message'], "INVALID_TOKEN") !== FALSE && !$repeat) {
912 + $response = self::auth($api_key);
913 + if ($response === 'success') {
914 + return self::sendRequest($payload, $token, TRUE);
1131 915 }
1132 -
1133 - if ($method == "GET") {
1134 -
1135 - $args = [
1136 - 'timeout' => '30',
1137 - 'sslverify' => FALSE,
1138 - ];
1139 -
1140 - $response = wp_remote_get($url . '?email=' . urlencode($email), $args);
1141 -
1142 - } else {
1143 - $data['email'] = $email;
1144 - $data['platform'] = 'WORDPRESS';
1145 - $data = json_encode($data);
1146 -
1147 - $args = [
1148 - 'body' => $data,
1149 - 'timeout' => '30',
1150 - 'sslverify' => FALSE,
1151 - 'headers' => [
1152 - 'Content-Type' => 'application/json',
1153 - ],
1154 - ];
1155 -
1156 - $response = wp_remote_post($url, $args);
916 + }
917 + else {
918 + if ($message !== FALSE) {
919 + WebTotemOption::setNotification('error', $message); // for debug json_encode($payload).' '.
1157 920 }
921 + }
922 + }
1158 923
1159 -
1160 - $http_code = wp_remote_retrieve_response_code($response);
1161 -
1162 - if ($http_code < 200) {
1163 - // WebTotemOption::setNotification('error', __('Could not connect to feedback endpoint.', 'wtotem'));
1164 - return [];
1165 - }
1166 -
1167 - $response_body = wp_remote_retrieve_body($response);
1168 - return json_decode($response_body, true);
924 + if (!empty($error)) {
925 + WebTotemOption::setNotification('error', $error);
1169 926 }
1170 927
1171 - /**
1172 - * Sends a REST API request to the WebTotem API server.
1173 - *
1174 - * @param string $endpoint
1175 - * REST API endpoint (e.g., 'scan', 'status', etc.).
1176 - * @param array $data
1177 - * Associative array of data to send as JSON body or query parameters.
1178 - * @param string $method
1179 - * HTTP method: GET, POST, PUT, DELETE (default is POST).
1180 - * @param bool $useToken
1181 - * Whether to include the auth token.
1182 - * @param bool $retry
1183 - * Used to prevent recursion on token renewal.
1184 - *
1185 - * @return array|null
1186 - * API response as an associative array, or null on failure.
1187 - */
1188 - protected static function sendRequest($endpoint, $data = [], $method = 'POST', $useToken = false, $retry = false)
1189 - {
1190 - $api_key = WebTotemOption::getOption('api_key');
1191 -
1192 - // Get or initialize the API URL.
1193 - $api_url = WebTotemOption::getOption('api_url');
1194 - if (!$api_url) {
1195 - $api_url = self::getApiUrl();
1196 - WebTotemOption::setOptions(['api_url' => $api_url]);
1197 - }
1198 -
1199 - $auth_token = null;
1200 - if ($useToken) {
1201 - $auth_token = WebTotemOption::getOption('auth_token');
1202 - $auth_token_expired = WebTotemOption::getOption('auth_token_expired');
1203 -
1204 - if ($auth_token_expired <= time() && !$retry) {
1205 - $result = self::auth($api_key);
1206 - if ($result === 'success') {
1207 - return self::sendRequest($endpoint, $data, $method, $useToken, true);
1208 - } elseif (isset($result['message'])) {
1209 - $message = WebTotem::messageForHuman($result['message']);
1210 -// WebTotemOption::setNotification('info', '$endpoint: ' . $endpoint);
1211 - WebTotemOption::setNotification('error', $message);
1212 - }
1213 - }
1214 - }
1215 -
1216 - $url = rtrim($api_url, '/') . '/api/v1/' . ltrim($endpoint, '/');
1217 -
1218 - $args = [
1219 - 'timeout' => 60,
1220 - 'sslverify' => false,
1221 - 'headers' => [
1222 - 'Accept' => 'application/json',
1223 - 'Content-Type' => 'application/json',
1224 - 'source' => 'WORDPRESS',
1225 - ],
1226 - ];
1227 -
1228 - if ($auth_token) {
1229 - $args['headers']['Authorization'] = "Bearer $auth_token";
1230 - }
1231 -
1232 - if (strtoupper($method) === 'GET') {
1233 - $url = add_query_arg($data, $url);
1234 - } else {
1235 - $args['body'] = json_encode($data);
1236 - }
1237 -
1238 - $response = wp_remote_request($url, array_merge($args, ['method' => strtoupper($method)]));
1239 -
1240 - $errors = ['status' => false];
1241 - if (is_wp_error($response)) {
1242 - $errors = [
1243 - 'status' => true,
1244 - 'message' => 'SERVER UNAVAILABLE: ' . $response->get_error_message(),
1245 - ];
1246 - }
1247 -
1248 - $body = wp_remote_retrieve_body($response);
1249 - $decoded = json_decode($body, true);
1250 -
1251 - if (isset($decoded['message']) or $errors['status']) {
1252 - $errorMessage = $errors['status'] ? $errors['message'] : $decoded['message'];
1253 -
1254 - if (stripos($errorMessage, "Password expired") !== false) {
1255 - wtotem_error_page(['errors' => 'PASSWORD_EXPIRED']);
1256 - exit();
1257 - } elseif (stripos($errorMessage, "API_KEY_DEACTIVATED") !== false) {
1258 - wtotem_error_page(['errors' => 'TARIFF_EXPIRED']);
1259 - exit();
1260 - }
1261 -
1262 - $message = WebTotem::messageForHuman($errorMessage);
1263 - if ($errorMessage == "invalid credentials" && !$retry) {
1264 -
1265 - if (self::auth($api_key) === 'success') {
1266 -
1267 - return self::sendRequest($endpoint, $data, $method, $useToken, true);
1268 - }
1269 - } elseif (stripos($errorMessage, "USERHOST_NOT_BELONG_TO_USER") !== false) {
1270 - if (WebTotem::isMultiSite()) {
1271 - WebTotemOption::clearAllHosts();
1272 - }
1273 - WebTotemOption::clearOptions(['host_id', 'host_name']);
1274 - } else {
1275 -// WebTotemOption::setNotification('info', '$endpoint: ' . $endpoint);
1276 - WebTotemOption::setNotification('error', $message);
1277 - }
1278 - }
1279 -
1280 -// if (empty($decoded)) {
1281 -// self::checkEndpoint();
1282 -// }
1283 -
1284 - return $decoded;
1285 - }
928 + return $response;
929 + }
1286 930
1287 931 }