# wt-security/2.4.31/lib/API.php WebTotem Security, version 2.4.31. 1,260 lines. - Page: https://pluginprobe.com/plugins/wt-security/2.4.31/code/lib/API.php - Raw: https://pluginprobe.com/plugins/wt-security/2.4.31/raw/lib/API.php - Modified: 2024-07-25T16:42:24+00:00 Line numbers below start at 1. Link to a line or a range by appending a fragment to the page URL, for example `https://pluginprobe.com/plugins/wt-security/2.4.31/code/lib/API.php#L10-L20`. ```php $api_url]); } else { WebTotemOption::setNotification('error', __('Invalid API key', 'wtotem')); return FALSE; } $api_key = substr($api_key, 2); } if (empty($api_key)) { return FALSE; } $payload = '{"query":"mutation{ guest{ apiKeys{ auth(apiKey:\"' . $api_key . '\", source:\"' . $domain . '\"),{ token{ value, refreshToken, expiresIn } } } } }"}'; $result = self::sendRequest($payload, FALSE, TRUE); if (isset($result['data']['guest']['apiKeys']['auth']['token']['value'])) { $auth_token = $result['data']['guest']['apiKeys']['auth']['token']; if(!WebTotemOption::isActivated()){ WebTotemOption::login(['token' => $auth_token, 'api_key' => $api_key]); WebTotemAgentManager::postdelete(); } else { WebTotemOption::setOptions(['auth_token' => $auth_token['value'], 'auth_token_expired' => time() + $auth_token['expiresIn'] - 60]); } return 'success'; } elseif (isset($result['errors'][0]['message']) and $result['errors'][0]['message'] == 'INVALID_API_KEY') { WebTotemOption::logout(); } return FALSE; } /** * Method for getting API url. * * @param string $prefix * * @return string|bool * API url */ public static function getApiUrl($prefix) { $urls = [ 'P' => '.wtotem.com', 'C' => '.webtotem.kz', ]; if (array_key_exists($prefix, $urls)) { return 'https://api' . $urls[$prefix] . '/graphql'; } return false; } /** * Get site info from API server. * * @param string $attempt * Is the request an attempt to get host data. * * @return array * Returns host data. */ public static function siteInfo($attempt = FALSE) { if (self::isMultiSite()) { $host['id'] = WebTotemOption::getSessionOption('host_id'); if ($host['id']) { return $host; } } $host = WebTotemOption::getHost(); if ($host['id']) { return $host; } if (self::isMultiSite()) { $sites = get_sites(); foreach ($sites as $site) { $domain = untrailingslashit($site->domain . $site->path); self::addSite($domain); } if (!$attempt) { return self::siteInfo(TRUE); } } else { $domain = WEBTOTEM_SITE_DOMAIN; return self::addSite($domain); } return []; } /** * Method for adding a site to the WebTotem platform. * * @param string $domain * Domain to add. * * @return array * Returns host data. */ public static function addSite($domain) { if (function_exists('idn_to_utf8')) { $domain = idn_to_utf8($domain); } $matches = self::checkForMatches($domain); // Checking if the site has been added to the WebTotem. if (array_key_exists('edges', $matches)) { foreach ($matches['edges'] as $site) { $site = $site['node']; $hostname = untrailingslashit($site['hostname']); // If it added, save site data to DB. if ($hostname == $domain or $hostname == 'www.' . $domain) { WebTotemOption::setHost($site['hostname'], $site['id']); return [ 'id' => $site['id'], 'name' => $site['hostname'], ]; } } } $scheme = is_ssl() ? 'https' : 'http'; // If the site is not added then try to add. $payload = '{"variables":{"input":{"title":"' . $domain . '","hostname":"' . $domain . '","configs":{"scheme":"' . $scheme . '","port":' . $_SERVER['SERVER_PORT'] . ',"wa":{},"dec":{},"ps":{}}}},"query":"mutation ($input: CreateSiteInput) { auth { sites { create(input: $input) { id hostname title } } } }"}'; $add_site = self::sendRequest($payload, TRUE); if (isset($add_site['errors'])) { WebTotemOption::setNotification('error', __('Failed to add the site to the WebTotem platform.', 'wtotem')); } else { if ($host = $add_site['data']['auth']['sites']['create']) { // If it added, save site ID. WebTotemOption::setHost($host['title'], $host['id']); return [ 'id' => $host['id'], 'name' => $host['title'], ]; } } return []; } /** * Get all sites from API. * * @param string $cursor * Mark for loading data. * @param string $limit * Limit of sites to loading. * * @return array * Returns host data. */ public static function getSites($cursor = null, $limit = 15, $filter = false) { $cursor = ($cursor == null) ? 'null' : '\"' . $cursor . '\"'; if (!$filter) { $filter = ($limit === 0) ? '' : 'pagination:{ first: ' . $limit . ', cursor: ' . $cursor . ' }'; } $payload = '{"query":"query getSites { auth { viewer { sites { ...sites } } } } fragment sites on SiteQueries { list(filter: { ' . $filter . ' }) { pageInfo{ hasNextPage endCursor } edges { node { id hostname title createdAt ssl { status } availability { status } reputation { status } ports { status } deface { status } antivirus { status } firewall { status } maliciousScript { stack { name } } } } } }"}'; $result = self::sendRequest($payload, true); if (isset($result['data']['auth']['viewer']['sites']['list']['edges'])) { return $result['data']['auth']['viewer']['sites']['list']; } return []; } /** * Check the site's presence in the list on the API side. * * @param string $site * The domain we want to check. * * @return array * Returns host data. */ public static function checkForMatches($site) { $payload = '{"query": "query getSites { auth { viewer { sites { list(filter: { search: \"'. $site .'\" }) { edges{ node{ hostname id } } } } } } }" }'; $result = self::sendRequest($payload, true); if (isset($result['data']['auth']['viewer']['sites']['list']['edges'])) { return $result['data']['auth']['viewer']['sites']['list']; } return []; } /** * Method to get the agents file names and AM file link. * * @param string $host_id * Host id on WebTotem. * * @return array * Returns agents files data. */ public static function getAgentsFiles($host_id) { if (WebTotem::isMultiSite()) { $all_hosts = WebTotemOption::getOption('all_hosts'); $all_hosts = $all_hosts ? json_decode($all_hosts, true) : []; $siteIdsArray = $all_hosts ? array_values($all_hosts) : []; $siteIds = $siteIdsArray ? addslashes(WebTotem::convertArrayToString($siteIdsArray)) : ''; $payload = '{"query":"mutation { auth { am { installMultisite(mainSiteId: \"' . $host_id . '\", siteIds: [' . $siteIds . ']){ downloadLink, amFilename, wafFilename, avFilename } } } }"}'; $response = self::sendRequest($payload, TRUE); if (isset($response['data']['auth']['am']['installMultisite'])) { return $response['data']['auth']['am']['installMultisite']; } } else { $payload = '{"query":"mutation { auth { am { install(siteId: \"' . $host_id . '\"){ downloadLink, amFilename, wafFilename, avFilename } } } }"}'; $response = self::sendRequest($payload, TRUE); if (isset($response['data']['auth']['am']['install'])) { return $response['data']['auth']['am']['install']; } } return []; } /** * Add secondary MultiSite host. * * @param $new_sites * An array with sites to add. * * @return void. */ public static function addMultiSiteNewSites($new_sites) { // Host id of the main site in MultiSite network. $main_host = WebTotemOption::getMainHost(); foreach ($new_sites as $site) { $all_sites = self::getSites(null, 1000000); $host = self::addSite($site, $all_sites); if (key_exists('id', $host)) { $payload = '{"query":"mutation { auth { am { addMultisiteHost(mainSiteId: \"' . $main_host['id'] . '\", siteId: \"' . $host['id'] . '\") } } }"}'; $result = self::sendRequest($payload, TRUE); if (!$result['errors'][0]['message']) { WebTotemOption::setNotification('info', __('A new website has been added: ', 'wtotem') . $site); } } } } /** * Remove secondary MultiSite host. * * @param $host_id * Host id on WebTotem. * * @return bool * Returns result removing host. */ public static function removeMultiSiteHost($host_id) { $payload = '{"query":"mutation { auth { am { removeMultisiteHost(siteId: \"' . $host_id . '\") } } }"}'; $response = self::sendRequest($payload, TRUE); if (isset($response['data']['auth']['am']['removeSecondaryMultisiteHost'])) { return $response['data']['auth']['am']['removeSecondaryMultisiteHost']; } return false; } /** * Method to get agents (AM, WAF, AV) statuses. * * @param string $host_id * Host id on WebTotem. * * @return array * Returns agents statuses data. */ public static function getAgentsStatusesFromAPI($host_id) { $payload = '{"query":"query ($id: ID!) { auth { viewer { sites { one(id: $id) { agentManager { statuses { am { status } av { status } waf { status } } } } } } } }", "variables":{"id":"' . $host_id . '"}}'; $response = self::sendRequest($payload, TRUE); if (isset($response['data']['auth']['viewer']['sites']['one']['agentManager']['statuses'])) { return $response['data']['auth']['viewer']['sites']['one']['agentManager']['statuses']; } return []; } /** * Method to get user time zone. * * @return string|bool * Returns time zone data. */ public static function getTimeZone() { $payload = '{"query":"query { auth { viewer{ timezone } } } "}'; $response = self::sendRequest($payload, TRUE); if (isset($response['data']['auth']['viewer']['timezone'])) { return $response['data']['auth']['viewer']['timezone']; } return FALSE; } /** * Method for get all the site security data. * * @param string $host_id * Host id on WebTotem. * @param int|array $days * For what period data is needed. * * @return array * Returns all data. */ public static function getAllData($host_id, $days = 7) { $language = WebTotem::getLanguage(); $period = WebTotem::getPeriod($days); $payload = '{"query":"query($id: ID!, $dateRange: DateRangeInput!, $language: Language!, $dateRangeWeek: DateRangeInput!, $wafLogFilter: WafLogFilter!) { auth { viewer { sites { one(id: $id) { openPathSearch { time paths { httpCode severity path } } ports { status lastTest { time } ignorePorts TCPResults{ port technology version cveList{id summary } } UDPResults { port technology version cveList{id summary } } } domain { lastScanResult { isTaken hasSite redirectLink isLocal protection ips { ip location } status time } } sslResults{ results{ certStatus certIssuerName certExpiryDate certIssueDate } } ssl { status daysLeft expiryDate issueDate } reputation { status lastTest { time } virusList { virus{ type path } antiVirus } } firewall { lastTest { time } logs(wafLogFilter: $wafLogFilter){ edges{ node{ type blocked payload ip proxyIp userAgent description source region signatureId location{ country{ nameEn } } time request status country category } } } map(dateRange: $dateRange) { attacks, country } status chart(dateRange: $dateRange) { time attacks blocked } report(dateRange: $dateRange) { time attacks ip } } serverStatus { info { phpVersion phpServerUser phpServerSoftware phpGatewayInterface phpServerProtocol osInfo cpuCount cpuModel CpuFreq cpuFamily lsCpu maxExecTime mathLibraries } ramChart(dateRange: $dateRangeWeek){ total value time } cpuChart(dateRange: $dateRangeWeek){ value time } discUsage{ total free } status } maliciousScript { lastTest { time } status } scoring( language: $language ){ score lastTest{ time } result{ ip country isHigherThan }} agentManager{ createdAt } antivirus { status stats { changed deleted scanned infected error } lastTest { time } isFirstCheck } } } } } }","variables":{"id":"' . $host_id . '","dateRange":{"to":' . $period['to'] . ',"from":' . $period['from'] . '}, "dateRangeWeek":{"to":' . $period['to'] . ',"from":' . $period['from'] . '}, "wafLogFilter": {"dateRange":{"to":' . $period['to'] . ',"from":' . $period['from'] . '},"order":{"direction":"DESC","field":"time"},"pagination":{"first": 10,"cursor":null}}, "language":"' . $language . '"}}'; $response = self::sendRequest($payload, TRUE); if (isset($response['data']['auth']['viewer']['sites']['one'])) { return $response['data']['auth']['viewer']['sites']['one']; } return []; } /** * Method for get all the site security data. * * @param string $host_id * Host id on WebTotem. * * @return array * Returns all data. */ public static function getMonitoring($host_id) { $payload = '{"query":"query($id: ID!) { auth { viewer { sites { one(id: $id) { domain { lastScanResult { isTaken hasSite redirectLink isLocal protection ips { ip location } status time } } sslResults{ results{ certStatus certIssuerName certExpiryDate certIssueDate } } ssl { status daysLeft expiryDate issueDate } reputation { status lastTest { time } virusList { virus{ type path } antiVirus } } } } } } }","variables":{"id":"' . $host_id . '"}}'; $response = self::sendRequest($payload, TRUE); if (isset($response['data']['auth']['viewer']['sites']['one'])) { return $response['data']['auth']['viewer']['sites']['one']; } return []; } /** * Method to get firewall data. * * @param string $host_id * Host id on WebTotem. * @param int $limit * Limit on the number of records. * @param string $cursor * Mark for loading data. * @param int|array $days * For what period data is needed. * * @return array * Returns firewall data. */ public static function getFirewall($host_id, $limit = 20, $cursor = NULL, $days = 365) { $period = WebTotem::getPeriod($days); $cursor = ($cursor == NULL) ? 'null' : '"' . $cursor . '"'; $payload = '{"query":"query($id: ID!, $wafLogFilter: WafLogFilter!, $dateRange: DateRangeInput!) { auth { viewer { sites { one(id: $id) { firewall { lastTest { time } status map(dateRange: $dateRange) { attacks, country, location { country { nameEn } } } chart(dateRange: $dateRange) { time attacks blocked } ...FirewallLogFragment } agentManager { createdAt } } } } } } fragment FirewallLogFragment on Waf { logs(wafLogFilter: $wafLogFilter) { edges { cursor node { type blocked payload ip proxyIp userAgent description source region signatureId location { country { nameEn } } time request status country category } } pageInfo { endCursor hasNextPage } } }", "variables":{"dateRange":{"to":' . $period['to'] . ',"from":' . $period['from'] . '},"id":"' . $host_id . '","wafLogFilter":{"dateRange":{"to":' . $period['to'] . ',"from":' . $period['from'] . '},"order":{"direction":"DESC","field":"time"},"pagination":{"first":' . $limit . ',"cursor":' . $cursor . '}}} }'; $response = self::sendRequest($payload, TRUE); if (isset($response['data']['auth']['viewer']['sites']['one'])) { return $response['data']['auth']['viewer']['sites']['one']; } return []; } /** * Method to get firewall chart data. * * @param string $host_id * Host id on WebTotem. * @param int $days * For what period data is needed. * * @return array * Returns firewall chart data. */ public static function getFirewallChart($host_id, $days = 7) { $period = WebTotem::getPeriod($days); $payload = '{ "query":"query($id: ID!, $dateRange: DateRangeInput!) { auth { viewer { sites { one(id: $id) { firewall { lastTest { time } status map(dateRange: $dateRange) { attacks, country, location { country { nameEn } } } chart(dateRange: $dateRange) { time attacks blocked } } } } } } }", "operationName":null,"variables":{"id":"' . $host_id . '","dateRange":{"to":' . $period['to'] . ',"from":' . $period['from'] . '} } }'; $response = self::sendRequest($payload, TRUE); if (isset($response['data']['auth']['viewer']['sites']['one']['firewall'])) { return $response['data']['auth']['viewer']['sites']['one']['firewall']; } return []; } /** * Method to set firewall settings. * * @param string $host_id * Host id on WebTotem. * @param array $settings * User-specified settings. * * @return array * Returns information whether the request was successful. */ public static function setFirewallSettings($host_id, array $settings) { $payload = '{"variables":{"input": {"siteId": "' . $host_id . '", "gdn": ' . $settings['gdn'] . ', "dosProtection": ' . $settings['dosProtection'] . ', "dosLimit": ' . $settings['dosLimit'] . ', "loginAttemptsProtection": ' . $settings['loginAttemptsProtection'] . ', "loginAttemptsLimit": ' . $settings['loginAttemptsLimit'] . '}},"query":"mutation WafSettings($input: WafSettingsInput!) { auth { sites { waf{ settings(input: $input) { gdn dosProtection loginAttemptsProtection dosLimit loginAttemptsLimit } } } } }"}'; return self::sendRequest($payload, TRUE); } /** * Method to get antivirus data. * * @param array $params * Parameters for filtering data. * * @return array * Returns antivirus data. */ public static function getAntivirus(array $params) { $cursor = ($params['cursor']) ? '"' . $params['cursor'] . '"' : 'null'; $event = ($params['event']) ? '"' . $params['event'] . '"' : '"new"'; $permissions = ($params['permissions']) ? ' "permissionsChanged":true, ' : ''; $period = WebTotem::getPeriod($params['days']); $payload = '{"operationName":null,"variables":{"id":"' . $params['host_id'] . '","avLogFilter":{' . $permissions . '"event":' . $event . ', "dateRange":{"to":' . $period['to'] . ',"from":' . $period['from'] . '},"order":{"direction":"DESC","field":"time"},"pagination":{"first":' . $params['limit'] . ',"cursor":' . $cursor . '}}},"query":"query ($id: ID!, $avLogFilter: AvLogFilter!) { auth { viewer { sites { one(id: $id) { id ... on Site { configs { ... on AvConfig { isActive id } } } antivirus { quarantine{ id path date } status log(avLogFilter: $avLogFilter) { edges { node { filePath event signatures time permissions permissionsChanged } } pageInfo { endCursor hasNextPage } } lastTest { time } stats { changed deleted scanned infected } } } } } } }"}'; $response = self::sendRequest($payload, TRUE); if (isset($response['data']['auth']['viewer']['sites']['one']['antivirus'])) { return $response['data']['auth']['viewer']['sites']['one']['antivirus']; } return []; } /** * Method to get antivirus last test. * * @param string $host_id * Host id on WebTotem. * * @return array * Returns antivirus last test data. */ public static function getAntivirusLastTest($host_id) { $payload = '{"variables":{"id":"' . $host_id . '"},"query":"query ($id: ID!) { auth { viewer { sites { one(id: $id) { antivirus { status lastTest { time } } } } } } }"}'; $response = self::sendRequest($payload, TRUE); if (isset($response['data']['auth']['viewer']['sites']['one']['antivirus'])) { return $response['data']['auth']['viewer']['sites']['one']['antivirus']; } return []; } /** * Method to force check services. * * @param string $host_id * Host id on WebTotem. * @param string $service * Service that needs to be checked. * * @return array * Returns information whether the request was successful. */ public static function forceCheck($host_id, $service) { $payload = '{"variables":{"id":"' . $host_id . '","service":"' . $service . '"},"query":"mutation ($id: ID!, $service: ForceCheckService!) { auth { sites { forceCheck(siteId: $id, service: $service) } } }"} '; return self::sendRequest($payload, TRUE); } /** * Method to export antivirus report. * * @param string $host_id * Host id on WebTotem. * @param int|array $days * For what period data is needed. * * @return array * Returns information whether the request was successful. */ public static function avExport($host_id, $days = 30) { $period = WebTotem::getPeriod($days); $payload = '{"variables":{ "input":{"siteId":"' . $host_id . '", "dateRange":{"to":' . $period['to'] . ',"from":' . $period['from'] . '} }},"query":"mutation ($input: AvLogExportInput!) { auth { sites { av { export(input: $input) } } } }"} '; return self::sendRequest($payload, TRUE); } /** * Method to get quarantine data. * * @param string $host_id * Host id on WebTotem. * * @return array * Returns quarantine data. */ public static function getQuarantineList($host_id) { $payload = '{"query":"query{ auth{ viewer{ sites{ one(id:\"' . $host_id . '\"){ antivirus{ quarantine{ id path date } } } } } } } "}'; $response = self::sendRequest($payload, TRUE); if (isset($response['data']['auth']['viewer']['sites']['one']['antivirus']['quarantine'])) { return $response['data']['auth']['viewer']['sites']['one']['antivirus']['quarantine']; } return []; } /** * Method to move file to quarantine. * * @param string $host_id * Host id on WebTotem. * @param string $path * Path to the file. * * @return array * Returns information whether the request was successful. */ public static function moveToQuarantine($host_id, $path) { $payload = '{"query":"mutation{ auth{ sites{ av{ moveToQuarantine(input:{ siteId:\"' . $host_id . '\", path:\"' . $path . '\" }) } } } } "}'; return self::sendRequest($payload, TRUE); } /** * Method to move file from quarantine. * * @param string $id * Id assigned to the file. * * @return array * Returns information whether the request was successful. */ public static function moveFromQuarantine($id) { $payload = '{"query":"mutation{ auth{ sites{ av{ moveFromQuarantine(id: \"' . $id . '\") } } } } "}'; return self::sendRequest($payload, TRUE); } /** * Method to get server status data. * * @param string $host_id * Host id on WebTotem. * @param int|array $days * For what period data is needed. * * @return array * Returns server status data. */ public static function getServerStatusData($host_id, $days = 7) { $period = WebTotem::getPeriod($days); $payload = '{ "query":"query($id: ID!, $dateRange: DateRangeInput!) { auth { viewer { sites { one(id: $id) { serverStatus { info { phpVersion phpServerUser phpServerSoftware phpGatewayInterface phpServerProtocol osInfo cpuCount cpuModel CpuFreq cpuFamily lsCpu maxExecTime mathLibraries } ramChart(dateRange: $dateRange){ total value time } cpuChart(dateRange: $dateRange){ value time } } } } } } }", "variables":{"id":"' . $host_id . '","dateRange":{"to":' . $period['to'] . ',"from":' . $period['from'] . '} } }'; $response = self::sendRequest($payload, TRUE); if (isset($response['data']['auth']['viewer']['sites']['one']['serverStatus'])) { return $response['data']['auth']['viewer']['sites']['one']['serverStatus']; } return []; } /** * Method to remove port from ignore list. * * @param string $host_id * Host id on WebTotem. * @param string $port * User specified port. * * @return array * Returns information whether the request was successful. */ public static function removeIgnorePort($host_id, $port) { $payload = '{"variables":{ "input": { "siteId": "' . $host_id . '", "port":' . $port . '} },"query":"mutation($input: IgnorePortInput!) { auth { sites { ps { removeIgnorePort(input: $input) } } } }"} '; return self::sendRequest($payload, TRUE); } /** * Method to add port to ignore list. * * @param string $host_id * Host id on WebTotem. * @param string $port * User specified port. * * @return array * Returns information whether the request was successful. */ public static function addIgnorePort($host_id, $port) { $payload = '{"variables":{ "input": { "siteId": "' . $host_id . '", "port":' . (int)$port . '} },"query":"mutation($input: IgnorePortInput!) { auth { sites { ps { addIgnorePort(input: $input) } } } }"} '; return self::sendRequest($payload, TRUE); } /** * Method to get all ports list. * * @param string $host_id * Host id on WebTotem. * * @return array * Returns ports data. */ public static function getAllPortsList($host_id) { $payload = '{"query":"query($id: ID!) { auth { viewer { sites { one(id: $id) { ports { status lastTest { time } ignorePorts TCPResults{ port technology version cveList{id summary } } UDPResults { port technology version cveList{id summary } } } } } } } } ","variables":{"id":"' . $host_id . '"}}'; $response = self::sendRequest($payload, TRUE); if (isset($response['data']['auth']['viewer']['sites']['one']['ports'])) { return $response['data']['auth']['viewer']['sites']['one']['ports']; } return []; } /** * Method to get all ports list. * * @param string $host_id * Host id on WebTotem. * * @return array * Returns ports data. */ public static function getOpenPaths($host_id) { $payload = '{"query":"query($id: ID!) { auth { viewer { sites { one(id: $id) { openPathSearch { time paths { httpCode severity path } } } } } } } ","variables":{"id":"' . $host_id . '"}}'; $response = self::sendRequest($payload, TRUE); if (isset($response['data']['auth']['viewer']['sites']['one']['openPathSearch'])) { return $response['data']['auth']['viewer']['sites']['one']['openPathSearch']; } return []; } /** * Method to get all reports. * * @param string $host_id * Host id on WebTotem. * @param int $limit * Limit on the number of records. * @param string $cursor * Mark for loading data. * * @return array * Returns reports data. */ public static function getAllReports($host_id, $limit = 10, $cursor = NULL) { $cursor = ($cursor == NULL) ? 'null' : '"' . $cursor . '"'; $payload = '{"variables":{"filter": { "order": { "direction": "DESC", "field": "created_at"}, "siteId":"' . $host_id . '", "pagination":{"first":' . $limit . ', "cursor":' . $cursor . '} } },"query":"query ReportsQuery($filter: ReportListFilter!) { auth { viewer { reports { list(filter: $filter) { edges { node { id site { hostname } createdAt wa dc ps rc sc av waf } cursor } pageInfo { endCursor hasNextPage } } } } } }"}'; $response = self::sendRequest($payload, TRUE); if (isset($response['data']['auth']['viewer']['reports']['list']['edges'])) { return $response['data']['auth']['viewer']['reports']['list']; } return []; } /** * Method to generate report. * * @param string $host_id * Host id on WebTotem. * @param int|array $days * For what period data is needed. * @param array $services * User-specified module settings. * * @return string|bool * Returns report download link. */ public static function generateReport(string $host_id, $days, array $services) { $period = WebTotem::getPeriod($days); $language = WebTotem::getLanguage(); $payload = '{"query":"query ($input: GenerateReportInput) { auth { viewer { reports { generate(input: $input) } } } }", "variables":{ "input": { "siteId": "' . $host_id . '", "from": ' . $period['from'] . ', "to": ' . $period['to'] . ', "wa": ' . $services['wa'] . ', "dc": ' . $services['dc'] . ', "ps": ' . $services['ps'] . ', "rc": ' . $services['rc'] . ', "sc": ' . $services['sc'] . ', "av": ' . $services['av'] . ', "waf": ' . $services['waf'] . ', "language": "' . $language . '" } } }'; $response = self::sendRequest($payload, TRUE); if (isset($response['data']['auth']['viewer']['reports']['generate'])) { return $response['data']['auth']['viewer']['reports']['generate']; } return FALSE; } /** * Method to download report. * * @param string $id * Assigned to the report. * * @return string|bool * Returns report download link. */ public static function downloadReport($id) { $payload = '{"query": "query { auth { viewer { reports { download(id: \"' . $id . '\") } } } }"}'; $response = self::sendRequest($payload, TRUE); if (isset($response['data']['auth']['viewer']['reports']['download'])) { return $response['data']['auth']['viewer']['reports']['download']; } return FALSE; } /** * Method to get configs data. * * @param string $host_id * Host id on WebTotem. * * @return array|bool * Returns configs data. */ public static function getConfigs($host_id) { $payload = '{"query":"query{ auth{ viewer{ sites{ one(id:\"' . $host_id . '\"){ configs{ ... on WaConfig { id service isActive notifications } ... on WafConfig { id service isActive notifications } ... on AvConfig { id service isActive notifications } ... on DcConfig { id service isActive notifications } ... on DecConfig { id service isActive } ... on RcConfig { id service isActive notifications} ... on CmsConfig { id service isActive } ... on PsConfig { id service isActive notifications } ... on SsConfig { id service isActive } ... on ScConfig { id service isActive } } } } } } } "}'; $response = self::sendRequest($payload, TRUE); if (isset($response['data']['auth']['viewer']['sites']['one']['configs'])) { return $response['data']['auth']['viewer']['sites']['one']['configs']; } return FALSE; } /** * Method to toggle modules config. * * @param string $service_id * Service id that we enable or disable. * * @return string|bool * Returns information whether the request was successful. */ public static function toggleConfigs($service_id) { $payload = '{"query":"mutation{ auth{ configs{ toggle(id: \"' . $service_id . '\"){ ... on WaConfig { service isActive } ... on AvConfig { service isActive } ... on DcConfig { service isActive } ... on DecConfig { service isActive } ... on RcConfig { service isActive } ... on CmsConfig { service isActive } ... on PsConfig { service isActive } ... on WafConfig { service isActive } } } } } "}'; $response = self::sendRequest($payload, TRUE); if (isset($response['data']['auth']['configs']['toggle'])) { return $response['data']['auth']['configs']['toggle']; } return FALSE; } /** * Method to toggle modules notification. * * @param string $host_id * Host id on WebTotem. * @param string $service * Service id in which we enable or disable notifications. * * @return string|bool * Returns information whether the request was successful. */ public static function toggleNotifications($host_id, $service) { $payload = '{"query":"mutation{ auth{ sites{ toggleNotifications(siteId: \"' . $host_id . '\", service: ' . $service . ') } } }"}'; $response = self::sendRequest($payload, TRUE); if (isset($response['data']['auth']['sites']['toggleNotifications'])) { return $response;//['data']['auth']['sites']['toggleNotifications']; } return FALSE; } /** * Method to get allow/deny ip list. * * @param string $host_id * Host id on WebTotem. * * @return array|bool * Returns ip allow/deny lists. */ public static function getIpLists($host_id) { $payload = '{"variables":{ "id": "' . $host_id . '" },"query":"query($id: ID!) { auth { viewer { sites{ one(id: $id){ firewall{ blackList{ id ip createdAt } whiteList{ id ip createdAt } settings{ gdn dosProtection dosLimit loginAttemptsProtection loginAttemptsLimit } } } } } } }"} '; $response = self::sendRequest($payload, TRUE); if (isset($response['data']['auth']['viewer']['sites']['one']['firewall'])) { return $response['data']['auth']['viewer']['sites']['one']['firewall']; } return []; } /** * Method to add ip to allow/deny list. * * @param string $host_id * Host id on WebTotem. * @param string $ips * Ip address list. * @param string $list * Allow or deny list. * * @return bool * Returns information whether the request was successful. */ public static function addIpToList($host_id, $ips, $list) { if ($ips) { $ips = WebTotem::convertIpListForApi($ips); $payload = '{"variables":{ "input": { "siteId": "' . $host_id . '", "ips": ' . $ips . ', "color": "' . $list . '" } }, "query":"mutation($input: WafListInput!) { auth { sites { waf { addToList(input: $input){ status invalidIPs} } } } }"} '; $response = self::sendRequest($payload, TRUE); if (isset($response['data']['auth']['sites']['waf']['addToList'])) { return $response['data']['auth']['sites']['waf']['addToList']; } } return FALSE; } /** * Method to remove ip from allow/deny list by id. * * @param string $id * Id assignment to ip address. * * @return bool * Returns information whether the request was successful. */ public static function removeIpFromList($id) { $payload = '{"variables":{ "id": "' . $id . '" },"query":"mutation($id: ID!) { auth { sites { waf { removeFromList(id: $id) } } } }"} '; $response = self::sendRequest($payload, TRUE); if (isset($response['data']['auth']['sites']['waf']['removeFromList'])) { return $response['data']['auth']['sites']['waf']['removeFromList']; } return FALSE; } /** * Method to get allow url list. * * @param string $host_id * Host id on WebTotem. * * @return array * Returns url allow lists. */ public static function getAllowUrlList($host_id) { $payload = '{"query":"query { auth { viewer { sites { one(id: \"' . $host_id . '\"){ firewall{ urlWhiteList{ id url createdAt } } } } } } }"} '; $response = self::sendRequest($payload, TRUE); if (isset($response['data']['auth']['viewer']['sites']['one']['firewall']['urlWhiteList'])) { return $response['data']['auth']['viewer']['sites']['one']['firewall']['urlWhiteList']; } return []; } /** * Method to add url to allow list. * * @param string $host_id * Host id on WebTotem. * @param string $url * User-specified url. * * @return bool|string * Returns information whether the request was successful. */ public static function addUrlToAllowList($host_id, $url) { $payload = '{"variables":{ "input": { "siteId": "' . $host_id . '", "url": "' . $url . '" } }, "query":"mutation($input: WafUrlWhiteListInput!) { auth { sites { waf { addToUrlWhiteList(input: $input) } } } }"} '; $response = self::sendRequest($payload, TRUE); if (isset($response['data']['auth']['sites']['waf']['addToUrlWhiteList'])) { return $response['data']['auth']['sites']['waf']['addToUrlWhiteList']; } return FALSE; } /** * Method to remove url from allow list. * * @param string $id * Id assignment to url address. * * @return bool|string * Returns information whether the request was successful. */ public static function removeUrlFromAllowList($id) { $payload = '{"variables":{ "id": "' . $id . '" }, "query":"mutation($id: ID!) { auth { sites { waf { removeFromUrlWhiteList(id: $id) } } } }"} '; $response = self::sendRequest($payload, TRUE); if (isset($response['data']['auth']['sites']['waf']['removeFromUrlWhiteList'])) { return $response['data']['auth']['sites']['waf']['removeFromUrlWhiteList']; } return FALSE; } /** * Method to get blocked countries list. * * @param string $host_id * Host id on WebTotem. * * @return array * Returns blocked countries list. */ public static function getBlockedCountries($host_id) { $period = WebTotem::getPeriod(7); $payload = '{"variables":{"dateRange":{"to":' . $period['to'] . ',"from":' . $period['from'] . '}} , "query":"query($dateRange: DateRangeInput!){ auth { viewer { sites { one(id: \"' . $host_id . '\"){ firewall{ blockedCountries map(dateRange: $dateRange) { attacks, country, location { country { nameEn } } } } } } } } }"}'; $response = self::sendRequest($payload, TRUE); if (isset($response['data']['auth']['viewer']['sites']['one']['firewall'])) { return $response['data']['auth']['viewer']['sites']['one']['firewall']; } return []; } /** * Method for synchronizing data on the list of blocked countries. * * @param string $host_id * Host id on WebTotem. * @param array $countries * Array of countries to block. * * @return bool|string * Returns information whether the request was successful. */ public static function syncBlockedCountries($host_id, $countries) { $countries = $countries ? WebTotem::convertArrayToString($countries) : ''; $payload = '{"variables":{ "input": { "siteId": "' . $host_id . '", "countries": [' . $countries . '] } }, "query":"mutation($input: WafBlockedCountriesInput!) { auth { sites { waf { syncBlockedCountries(input: $input) } } } }"} '; $response = self::sendRequest($payload, TRUE); if (isset($response['data']['auth']['sites']['waf']['syncBlockedCountries'])) { return $response['data']['auth']['sites']['waf']['syncBlockedCountries']; } return FALSE; } /** * Method to get user's email. * * @return string * Returns user's email. */ public static function getEmail() { $payload = '{"query":"query { auth { viewer { email } } }"}'; $response = self::sendRequest($payload, true); return $response['data']['auth']['viewer']['email']; } /** * Method to get user's email. * * @param string $plugin_list * List of plugins and their versions. * * @return array * Returns cve list. */ public static function getCVE($plugin_list) { $payload = '{"variables":{ "params": [' . $plugin_list . '] }, "query":"query searchByTechnologyAndVersion($params: [SearchByTechnologyAndVersionInput!]) { auth { viewer { cve { searchByTechnologyAndVersion(params: $params) { cves { cve_id id summary published reference } technology version } } } } }"}'; $response = self::sendRequest($payload, true); if (isset($response['data']['auth']['viewer']['cve']['searchByTechnologyAndVersion'])) { return $response['data']['auth']['viewer']['cve']['searchByTechnologyAndVersion']; } return []; } /** * Method to get user's feedback. * * @return array */ public static function getFeedback() { return self::sendFeedbackRequest("GET"); } /** * Method to set user's feedback. * * @return array */ public static function setFeedback($data) { return self::sendFeedbackRequest("POST", $data); } /** * Function sends data request to endpoint. * * @param array $data * Data array to be sent to endpoint. * * @return array * Returns response from WebTotem endpoint. */ protected static function sendFeedbackRequest($method, $data = []) { $url = 'https://nps.wtotem.com/user-score'; $email = WebTotem::getUserEmail(); if (!$email) { return []; } if ($method == "GET") { $args = [ 'timeout' => '30', 'sslverify' => FALSE, ]; $response = wp_remote_get($url . '?email=' . urlencode($email), $args); } else { $data['email'] = $email; $data['platform'] = 'WORDPRESS'; $data = json_encode($data); $args = [ 'body' => $data, 'timeout' => '30', 'sslverify' => FALSE, 'headers' => [ 'Content-Type' => 'application/json', ], ]; $response = wp_remote_post($url, $args); } $http_code = wp_remote_retrieve_response_code($response); if ($http_code < 200) { WebTotemOption::setNotification('error', __('Could not connect to feedback endpoint.', 'wtotem')); return []; } $response_body = wp_remote_retrieve_body($response); return json_decode($response_body, true); } /** * Function sends GraphQL request to API server. * * @param string $payload * Payload to be sent to API server. * @param bool $token * Whether a token is needed when sending a request. * @param bool $repeat * Required to avoid recursion. * * @return array * Returns response from WebTotem API. */ protected static function sendRequest($payload, $token = FALSE, $repeat = FALSE) { $api_key = WebTotemOption::getOption('api_key'); // Remote URL where the public WebTotem API service is running. $api_url = WebTotemOption::getOption('api_url'); if (!$api_url) { $api_url = self::getApiUrl('P'); WebTotemOption::setOptions(['api_url' => $api_url]); } // Checking whether a token is needed. if ($token) { $auth_token = WebTotemOption::getOption('auth_token'); $auth_token_expired = WebTotemOption::getOption('auth_token_expired'); // Checking whether the token has expired. if ($auth_token_expired <= time() && !$repeat) { $result = self::auth($api_key); if ($result === 'success') { return self::sendRequest($payload, $token, TRUE); } else { if (isset($result['errors'])) { $message = WebTotem::messageForHuman($result['errors'][0]['message']); WebTotemOption::setNotification('error', $message); } } } } if (function_exists('wp_remote_post')) { $args = [ 'body' => $payload, 'timeout' => '60', 'sslverify' => false, 'headers' => [ 'Content-Type:application/json', 'Content-Type' => 'application/json', 'Accept: application/json', 'source: WORDPRESS', ], ]; if (isset($auth_token)) { $auth = "Bearer " . $auth_token; $args['headers'] = array_merge($args['headers'], ["Authorization" => $auth]); } $response = wp_remote_post($api_url, $args); $response = wp_remote_retrieve_body($response); $response = json_decode($response, true); } else { $error = 'WP_REMOTE_POST_NOT_EXIST'; } // Checking if there are errors in the response. if (isset($response['errors'][0]['message'])) { // Show error page if WebTotem cabinet's password is expired. if (stripos($response['errors'][0]['message'], "Password expired") !== FALSE) { wtotem_error_page(['errors' => 'PASSWORD_EXPIRED']); exit(); } if (stripos($response['errors'][0]['message'], "API_KEY_DEACTIVATED") !== FALSE) { wtotem_error_page(['errors' => 'TARIFF_EXPIRED']); exit(); } $message = WebTotem::messageForHuman($response['errors'][0]['message']); if (stripos($response['errors'][0]['message'], "INVALID_TOKEN") !== FALSE && !$repeat) { $response = self::auth($api_key); if ($response === 'success') { return self::sendRequest($payload, $token, TRUE); } } elseif (stripos($response['errors'][0]['message'], "USERHOST_NOT_BELONG_TO_USER") !== FALSE) { if (WebTotem::isMultiSite()) { WebTotemOption::clearAllHosts(); WebTotemOption::clearOptions(['host_id', 'host_name']); } else { WebTotemOption::clearOptions(['host_id', 'host_name']); } } else { WebTotemOption::setNotification('error', $message); } } if (!empty($error)) { WebTotemOption::setNotification('error', $error); } return $response; } } ```