dead

File manager - Edit - /home/theblueo/questionnaire/wp-content/plugins/wp-hide-security-enhancer/include/functions.class.php

Back
<?php if ( ! defined( 'ABSPATH' ) ) exit; // Exit if accessed directly class WPH_functions { var $wph; function __construct() { global $wph; $this->wph = &$wph; } function get_module_default_setting() { $defaults = array ( 'id' => '', 'visible' => TRUE, 'label' => '', 'description' => '', 'value_description' => '', 'input_type' => 'text', 'default_value' => '', 'sanitize_type' => array('sanitize_title'), 'help' => FALSE, 'advanced_option' => FALSE, 'options_pre' => '', 'options' => array(), 'options_post' => '', //callback function when components run. Default being set for _init_{$field_id} 'callback' => '', //callback function to return the rewrite code, Default being set for _callback_saved_{$field_id} 'callback_saved' => '', //PassThrough any additional arguments 'callback_arguments' => array(), 'processing_order' => 10, ); return $defaults; } function filter_settings($module_settings, $strip_splits = FALSE) { if(!is_array($module_settings) \|\| count($module_settings) < 1) return $module_settings; $defaults = $this->get_module_default_setting(); foreach($module_settings as $key => $module_setting) { if(isset($module_setting['type']) && $module_setting['type'] == 'split') { if($strip_splits === TRUE) unset($module_settings[$key]); continue; } $module_setting = wp_parse_args( $module_setting, $defaults ); switch($module_setting['input_type']) { case 'text' : $defaults_type = array ( 'placeholder' => '', ); $module_setting = wp_parse_args( $module_setting, $defaults_type ); break; } $module_settings[$key] = $module_setting; } $module_settings = array_values($module_settings); return $module_settings; } function do_reset_settings() { $nonce = $_POST['_wpnonce']; if ( ! wp_verify_nonce( $nonce, 'wp-hide-reset-settings' ) ) return FALSE; //only for admins If ( ! current_user_can ( 'manage_options' ) ) return FALSE; $settings = $this->get_settings(); $settings['module_settings'] = $this->reset_settings(); //eset the write string $settings['write_check_string'] = ''; //update the settings $this->update_settings( $settings ); //udpate the cass settings as well $this->wph->settings = $settings; //trigger the settings changed action do_action('wph/settings_changed', null, null); //redirect $new_admin_url = $this->get_module_item_setting('admin_url' , 'admin'); if(!empty($new_admin_url) && $this->is_permalink_enabled()) $new_location = trailingslashit( home_url() ) . $new_admin_url . "/admin.php?page=wp-hide"; else $new_location = trailingslashit( site_url() ) . "wp-admin/admin.php?page=wp-hide"; $new_location .= '&reset_settings=true'; wp_redirect( $new_location ); die(); } function process_interface_save() { $nonce = $_POST['wph-interface-nonce']; if ( ! wp_verify_nonce( $nonce, 'wph/interface_fields' ) ) return FALSE; //only for admins If ( ! current_user_can ( 'manage_options' ) ) return FALSE; $screen_slug = sanitize_text_field( $_GET['page'] ); if(empty($screen_slug)) return FALSE; $tab_slug = isset($_GET['component']) ? sanitize_text_field($_GET['component']) : FALSE; $module = $this->get_module_by_slug($screen_slug); if(!is_object($module)) return FALSE; //if no tag slug check if module use tabs and use the very first one if(empty($tab_slug) && $module->use_tabs === TRUE) { //get the first component foreach($module->components as $module_component) { if( ! $module_component->title) continue; $tab_slug = $module_component->id; break; } } $unique_require_updated_settings = array(); //proces the fields $module_settings = $this->filter_settings( $module->get_module_settings($tab_slug) ); $processed_fields = array(); foreach($module_settings as $module_setting) { if(isset($module_setting['type']) && $module_setting['type'] == 'split') continue; $field_name = $module_setting['id']; $processed_fields[] = $field_name; $value = isset($_POST[$field_name]) ? sanitize_text_field($_POST[$field_name]) : ''; //if empty use the default if(empty($value)) $value = $module_setting['default_value']; //sanitize value foreach($module_setting['sanitize_type'] as $sanitize) { $value = call_user_func_array($sanitize, array($value)); } //held the value if ($module_setting['input_type'] == 'text' && !empty( $value )) { //if require unique, save for postprocessing $unique_require_updated_settings[ $field_name ] = array( 'module_name' => $module_setting['label'], 'value' => $value ); } else $this->wph->settings['module_settings'][ $field_name ] = $value; } //delete previous errors transient delete_transient( 'wph-process_interface_save_errors' ); $errors = FALSE; global $process_interface_save_errors; $process_interface_save_errors = array(); //put the new values into a temporary settings variable $_settings_ = $this->wph->settings['module_settings']; //clean up all values if $tab_slug is theme, to prevent deleted themes to still held values which oterwise can't be used anymore if ( $tab_slug == 'theme' ) { $reset_fileds = array( 'new_theme_path_', 'new_style_file_path_' ); foreach($reset_fileds as $reset_filed ) { foreach ( $_settings_ as $key => $setting ) { if ( strpos ( $key, $reset_filed ) !== FALSE ) $_settings_[ $key ] = ''; } } } foreach($unique_require_updated_settings as $field_name => $data) { $_settings_[ $field_name ] = $data['value']; } //ensure the base slug is not being used by another option // e.g. skin skin/module $_settings_for_regex = array(); foreach ( $_settings_ as $field_name => $option_value ) { if ( ! is_string( $option_value ) ) continue; $parts = explode("/", $option_value); $_settings_for_regex[ $field_name ] = $parts[0]; } $reserved_values = apply_filters('wp-hide/interface/process/reserved_values', array( 'wp' )); //clean the just updated fields within main settings array foreach($unique_require_updated_settings as $field_name => $data) { if( isset($_settings_[ $field_name ]) ) $_settings_[ $field_name ] = ''; //check if the value already exists in other setting if(array_search( $data['value'] , $_settings_) !== FALSE) { $errors = TRUE; $process_interface_save_errors[] = array( 'type' => 'error', 'message' => __('Value', 'wp-hide-security-enhancer') . ' <b>' . $data['value'] .'</b> ' . __('set for', 'wp-hide-security-enhancer') . ' ' . __($data['module_name'], 'wp-hide-security-enhancer') . ' ' . __('already in use for another option.', 'wp-hide-security-enhancer') ); } else { //check for base slug e.g. skin/module $parts = explode ( "/" , $data['value'] ); $_settings_to_search = $_settings_for_regex; unset( $_settings_to_search[ $field_name ] ); //if plugins tab, ignore the other options which might use the same base slug if ( $tab_slug == 'plugins' ) { foreach ( $processed_fields as $processed_field ) unset( $_settings_to_search[ $processed_field ] ); } if( array_search( $parts[0] , $_settings_to_search ) !== FALSE ) { $errors = TRUE; $process_interface_save_errors[] = array( 'type' => 'error', 'message' => __('Value', 'wp-hide-security-enhancer') . ' <b>' . $data['value'] .'</b> ' . __('set for', 'wp-hide-security-enhancer') . ' ' . __($data['module_name'], 'wp-hide-security-enhancer') . ' ' . __('use the same base slug ', 'wp-hide-security-enhancer') . '<b>' . $parts[0] . '</b> ' . __('used for another option.', 'wp-hide-security-enhancer') ); } } //put the value back $_settings_[ $field_name ] = $data['value']; //check for reserved value if( array_search( $data['value'] , $reserved_values) !== FALSE ) { $errors = TRUE; $process_interface_save_errors[] = array( 'type' => 'error', 'message' => __('Value', 'wp-hide-security-enhancer') . ' <b>' . $data['value'] .'</b> ' . __('set for', 'wp-hide-security-enhancer') . ' ' . __($data['module_name'], 'wp-hide-security-enhancer') . ' ' . __('is a system reserved.', 'wp-hide-security-enhancer') ); } } $errors = apply_filters('wp-hide/interface/process', $errors, $_settings_, $module_settings); if( $errors === FALSE) { //put to main setting holder $this->wph->settings['module_settings'] = $_settings_; //generate a new write_check_string $write_check_string = time() . '_' . mt_rand(100, 99999); $this->wph->settings['write_check_string'] = $write_check_string; //update the settings $this->update_settings($this->wph->settings); //trigger the settings changed action do_action('wph/settings_changed', $screen_slug, $tab_slug); } //store the error for display purpose if ( count ( $process_interface_save_errors ) > 0 ) set_transient( 'wph-process_interface_save_errors', $process_interface_save_errors, HOUR_IN_SECONDS ); //redirect $new_admin_url = $this->get_module_item_setting('admin_url' , 'admin'); //check if the rewrite applied if ( ! empty ( $new_admin_url ) && ! $this->rewrite_rules_applied() ) $new_admin_url = ''; if(!empty($new_admin_url) && $this->is_permalink_enabled()) $new_location = trailingslashit( home_url() ) . $new_admin_url . "/admin.php?page=" . $screen_slug; else $new_location = trailingslashit( site_url() ) . "wp-admin/admin.php?page=" . $screen_slug; if($tab_slug !== FALSE) $new_location .= '&component=' . $tab_slug; $new_location .= '&settings_updated=true'; wp_redirect($new_location); die(); } /** * Attempt to copy the mu loader within mu-plugins folder * / static function copy_mu_loader( $force_overwrite = FALSE ) { //check if mu-plugins folder exists if(! is_dir( WPMU_PLUGIN_DIR )) { if (! wp_mkdir_p( WPMU_PLUGIN_DIR ) ) return FALSE; } //check if file actually exists already if( ! $force_overwrite ) { if( file_exists(WPMU_PLUGIN_DIR . '/wp-hide-loader.php' )) return TRUE; } //attempt to copy the file return @copy( WP_PLUGIN_DIR . '/wp-hide-security-enhancer/mu-loader/wp-hide-loader.php', WPMU_PLUGIN_DIR . '/wp-hide-loader.php' ); } /* * Attempt to remove the mu loader * / static function unlink_mu_loader() { //check if file actually exists already if( !file_exists(WPMU_PLUGIN_DIR . '/wp-hide-loader.php' )) return; //attempt to copy the file @unlink ( WPMU_PLUGIN_DIR . '/wp-hide-loader.php' ); } function settings_changed_check_for_cache_plugins() { $active_plugins = (array) get_option( 'active_plugins', array() ); //cache plugin nottice if(array_search('w3-total-cache/w3-total-cache.php', $active_plugins) !== FALSE) { //check if just flushed if(!isset($_GET['w3tc_note'])) echo "<div class='error'><p>". __('W3 Total Cache Plugin is active, make sure you clear the cache for new changes to apply', 'wp-hide-security-enhancer') ."</p></div>"; } if(array_search('wp-super-cache/wp-cache.php', $active_plugins) !== FALSE) { echo "<div class='error'><p>". __('WP Super Cache Plugin is active, make sure you clear the cache for new changes to apply', 'wp-hide-security-enhancer') ."</p></div>"; } if(array_search('wp-fastest-cache/wpFastestCache.php', $active_plugins) !== FALSE) { echo "<div class='error'><p>". __('WP Fastest Cache Plugin is active, make sure you clear the cache for new changes to apply', 'wp-hide-security-enhancer') ."</p></div>"; } } /* * Return the module class by it's slug * * @param mixed $module_slug / function get_module_by_slug($module_slug) { global $wph; $found_module = FALSE; foreach($wph->modules as $module) { $interface_menu_data = $module->get_module_slug(); if($interface_menu_data == $module_slug) { $found_module = $module; break; } } return $found_module; } /* * Used on early access when WP_Rewrite is not available * / function is_permalink_enabled() { $permalink_structure = get_option('permalink_structure'); if ( empty($permalink_structure) ) return FALSE; return TRUE; } /* * return the server home path * / function get_home_path() { $home = set_url_scheme( get_option( 'home' ), 'http' ); $siteurl = set_url_scheme( get_option( 'siteurl' ), 'http' ); if ( ! empty( $home ) && 0 !== strcasecmp( $home, $siteurl ) ) { $home_path = str_replace( '\\', '/', $_SERVER['DOCUMENT_ROOT'] ); $home_path = rtrim( $home_path , '/'); $home_path .= $this->wph->default_variables['site_relative_path']; / $wp_path_rel_to_home = str_ireplace( $home, '', $siteurl ); $pos = strripos( str_replace( '\\', '/', $_SERVER['SCRIPT_FILENAME'] ), trailingslashit( $wp_path_rel_to_home ) ); if($pos !== FALSE) { $home_path = substr( $_SERVER['SCRIPT_FILENAME'], 0, $pos ); $home_path = trim( $home_path , '/\\') . DIRECTORY_SEPARATOR;; } else { $wp_path_rel_to_home = DIRECTORY_SEPARATOR . trim($wp_path_rel_to_home, '/\\') . DIRECTORY_SEPARATOR; $real_apth = realpath(ABSPATH) . DIRECTORY_SEPARATOR ; $pos = strpos( $real_apth, $wp_path_rel_to_home); $home_path = substr( $real_apth, 0, $pos ); $home_path = trim( $home_path , '/\\') . DIRECTORY_SEPARATOR; } / } else { $home_path = ABSPATH; } $home_path = trim($home_path, '\\/ '); //not for windows if ( DIRECTORY_SEPARATOR != '\\') $home_path = DIRECTORY_SEPARATOR . $home_path; return $home_path; } /* * Set server type * / function set_server_type() { //Allow to set server type through filter if ( ! empty ( apply_filters( 'wph/core/set_server_type' , '' ) ) ) return; $SERVER_SOFTWARE = $_SERVER['SERVER_SOFTWARE']; If ( empty ( $SERVER_SOFTWARE ) ) { //unable to identify server type return FALSE; } //check for WPEngine if ( getenv('IS_WPE') == "1" \|\| getenv('IS_WPE_SNAPSHOT') == "1" ) { $this->wph->server_nginx_config = TRUE; return; } //check for Flywheel hosting if ( stripos( $SERVER_SOFTWARE, 'Flywheel') !== FALSE ) { $this->wph->server_nginx_config = TRUE; return; } if ( $this->is_apache() === TRUE ) $this->wph->server_htaccess_config = TRUE; if ( $this->is_IIS() === TRUE ) $this->wph->server_web_config = TRUE; if ( $this->is_nginx() === TRUE ) $this->wph->server_nginx_config = TRUE; } /* * return whatever server using the .htaccess config file * / function server_use_htaccess_config_file() { $home_path = $this->get_home_path(); $htaccess_file = $home_path . DIRECTORY_SEPARATOR . '.htaccess'; if ((!file_exists($htaccess_file) && $this->using_mod_rewrite_permalinks()) \|\| is_writable($htaccess_file)) { if ( $this->got_mod_rewrite() ) return TRUE; } return FALSE; } function using_mod_rewrite_permalinks() { return $this->is_permalink_enabled() && ! $this->using_index_permalinks(); } function using_index_permalinks() { $permalink_structure = get_option('permalink_structure'); if(empty($permalink_structure)) return; $index = 'index.php'; // If the index is not in the permalink, we're using mod_rewrite. return preg_match( '#^/' . $index . '#', $permalink_structure ); } function got_mod_rewrite() { if ($this->apache_mod_loaded('mod_rewrite', true)) return TRUE; return FALSE; } /** * Does the specified module exist in the Apache config? * * @since 2.5.0 * * @global bool $is_apache * * @param string $mod The module, e.g. mod_rewrite. * @param bool $default Optional. The default return value if the module is not found. Default false. * @return bool Whether the specified module is loaded. / function apache_mod_loaded($mod, $default = false) { if ( !$this->is_apache() ) return false; if ( function_exists( 'apache_get_modules' ) ) { $mods = apache_get_modules(); if ( in_array($mod, $mods) ) return true; } elseif (getenv('HTTP_MOD_REWRITE') !== FALSE) { $mod_found = getenv('HTTP_MOD_REWRITE') == 'On' ? true : false ; return $mod_found; } elseif ( function_exists( 'phpinfo' ) && false === strpos( ini_get( 'disable_functions' ), 'phpinfo' ) ) { ob_start(); phpinfo(8); $phpinfo = ob_get_clean(); if ( false !== strpos($phpinfo, $mod) ) return true; } return $default; } /* * return whatever the htaccess config file is writable * / function is_writable_htaccess_config_file() { $home_path = $this->get_home_path(); $htaccess_file = $home_path . DIRECTORY_SEPARATOR . '.htaccess'; if ((!file_exists($htaccess_file) && $this->is_permalink_enabled()) \|\| is_writable($htaccess_file)) return TRUE; return FALSE; } /* * return whatever server using the .htaccess config file * / function server_use_web_config_file() { $is_iis7 = $this->is_IIS7(); $supports_permalinks = false; if ( $is_iis7 ) { $supports_permalinks = class_exists( 'DOMDocument', false ) && isset($_SERVER['IIS_UrlRewriteModule']) && ( PHP_SAPI == 'cgi-fcgi' ); } $supports_permalinks = apply_filters( 'iis7_supports_permalinks', $supports_permalinks ); return $supports_permalinks; } /* * return whatever the web.config config file is writable * / function is_writable_web_config_file() { $home_path = $this->get_home_path(); $web_config_file = $home_path . 'web.config'; if ( ( ! file_exists($web_config_file) && $this->is_permalink_enabled() ) \|\| win_is_writable($web_config_file) ) return TRUE; return FALSE; } /* * Return if the server run Apache * / function is_apache() { $is_apache = FALSE; $is_apache = (stripos($_SERVER['SERVER_SOFTWARE'], 'Apache') !== false \|\| stripos($_SERVER['SERVER_SOFTWARE'], 'LiteSpeed') !== false); return $is_apache; } /* * Return if the server run on nginx * / function is_nginx() { $is_nginx = FALSE; $is_nginx = (stripos($_SERVER['SERVER_SOFTWARE'], 'nginx') !== false); return $is_nginx; } /* * Return if the server run on IIS * / function is_IIS() { $is_IIS = FALSE; $is_IIS = !$this->is_apache() && (stripos($_SERVER['SERVER_SOFTWARE'], 'Microsoft-IIS') !== false \|\| stripos($_SERVER['SERVER_SOFTWARE'], 'ExpressionDevServer') !== false); return $is_IIS; } /* * Return if the server run on IIS version 7 and up * / function is_IIS7() { $is_iis7 = FALSE; $is_iis7 = $this->is_IIS() && intval( substr( $_SERVER['SERVER_SOFTWARE'], stripos( $_SERVER['SERVER_SOFTWARE'], 'Microsoft-IIS/' ) + 14 ) ) >= 7; return $is_iis7; } function get_write_check_string() { $home_path = $this->get_home_path(); global $wp_rewrite; $result = FALSE; //check for .htaccess if ( $this->wph->server_htaccess_config === TRUE ) { $file_path = $home_path . DIRECTORY_SEPARATOR . '.htaccess'; if(file_exists( $file_path )) { if ( $markerdata = explode( "\n", implode( '', file( $file_path ) ) )); { foreach ( $markerdata as $markerline ) { if (strpos($markerline, '#WriteCheckString:') !== false) { $result = trim(str_replace( '#WriteCheckString:', '', $markerline)); break; } } } } } //check for web.config if ( $this->wph->server_web_config === TRUE ) { $file_path = $home_path . DIRECTORY_SEPARATOR . 'web.config'; if(file_exists( $file_path )) { if ( $markerdata = explode( "\n", implode( '', file( $file_path ) ) )); { foreach ( $markerdata as $markerline ) { preg_match("'<rule name=\"wph-.?<!-- WriteCheckString:([0-9_]+) --></rule>'si", $markerline, $matches); if(isset($matches[1])) { $result = $matches[1]; } if (!isset($matches[1]) && strpos($markerline, '<!-- WriteCheckString:') !== false) { $result = trim(str_ireplace( '<!-- WriteCheckString:', '', $markerline)); $result = trim(str_replace( '-->', '', $result)); $result = trim($result); break; } } } } } return $result; } function rewrite_rules_applied() { $status = TRUE; if(isset($this->wph->settings['write_check_string']) && !empty($this->wph->settings['write_check_string'])) { $_write_check_string = $this->get_write_check_string(); if(empty($_write_check_string) \|\| $_write_check_string != $this->wph->settings['write_check_string']) $status = FALSE; } return $status; } /** * Return rewrite base * / function get_rewrite_base( $saved_field_data, $left_slash = TRUE, $right_slash = TRUE ) { global $blog_id; $saved_field_data = $this->untrailingslashit_all($saved_field_data); $path = !empty($this->wph->default_variables['wordpress_directory']) ? trailingslashit( $this->wph->default_variables['wordpress_directory'] ) : ''; $rewrite_base = !empty($path) ? trailingslashit( $path ) . $saved_field_data : ( !empty($saved_field_data) ? '/' .$saved_field_data : '' ); if( !empty($rewrite_base)) { $rewrite_base = $this->untrailingslashit_all( $rewrite_base ); if( $left_slash === TRUE ) $rewrite_base = '/' . $rewrite_base; if( $right_slash === TRUE ) $rewrite_base = $rewrite_base . '/'; } return $rewrite_base; } /* * Return rewrite to base * / function get_rewrite_to_base( $field_data, $left_slash = TRUE, $right_slash = TRUE, $append_path = '') { $field_data = $this->untrailingslashit_all( $field_data ); $path = ''; switch($append_path) { case 'site_path' : $path = !empty($this->wph->default_variables['site_relative_path']) ? trailingslashit( $this->wph->default_variables['site_relative_path'] ) : ''; break; case 'wp_path' : $path .= !empty($this->wph->default_variables['wordpress_directory']) ? trailingslashit( $this->wph->default_variables['wordpress_directory'] ) : ''; break; case 'full_path' : $path = !empty($this->wph->default_variables['site_relative_path']) ? trailingslashit( $this->wph->default_variables['site_relative_path'] ) : ''; $path .= !empty($this->wph->default_variables['wordpress_directory']) ? trailingslashit( $this->wph->default_variables['wordpress_directory'] ) : ''; break; } $rewrite_to_base = !empty($path) ? trailingslashit( $path ) . $field_data : ( !empty( $field_data ) ? '/' . $field_data : '' ); if( !empty($rewrite_to_base)) { $rewrite_to_base = $this->untrailingslashit_all( $rewrite_to_base ); if( $left_slash === TRUE ) $rewrite_to_base = '/' . $rewrite_to_base; if( $right_slash === TRUE ) $rewrite_to_base = $rewrite_to_base . '/'; } return $rewrite_to_base; } function insert_with_markers_on_top( $filename, $marker, $insertion) { if ( ! file_exists( $filename ) ) { if ( ! is_writable( dirname( $filename ) ) ) { return false; } if ( ! touch( $filename ) ) { return false; } } elseif ( ! is_writeable( $filename ) ) { return false; } if ( ! is_array( $insertion ) ) { $insertion = explode( "\n", $insertion ); } $start_marker = "# BEGIN {$marker}"; $end_marker = "# END {$marker}"; $fp = fopen( $filename, 'r+' ); if ( ! $fp ) { return false; } // Attempt to get a lock. If the filesystem supports locking, this will block until the lock is acquired. flock( $fp, LOCK_EX ); $lines = array(); while ( ! feof( $fp ) ) { $lines[] = rtrim( fgets( $fp ), "\r\n" ); } // Split out the existing file into the preceding lines, and those that appear after the marker $pre_lines = $post_lines = $existing_lines = array(); $found_marker = $found_end_marker = false; foreach ( $lines as $line ) { if ( ! $found_marker && false !== strpos( $line, $start_marker ) ) { $found_marker = true; continue; } elseif ( ! $found_end_marker && false !== strpos( $line, $end_marker ) ) { $found_end_marker = true; continue; } if ( ! $found_marker ) { $pre_lines[] = $line; } elseif ( $found_marker && $found_end_marker ) { $post_lines[] = $line; } else { $existing_lines[] = $line; } } // Check to see if there was a change if ( $existing_lines === $insertion ) { flock( $fp, LOCK_UN ); fclose( $fp ); return true; } // Generate the new file data if($found_marker && $found_end_marker) { $new_file_data = implode( "\n", array_merge( $pre_lines, array( $start_marker ), $insertion, array( $end_marker ), $post_lines ) ); } else { $new_file_data = implode( "\n", array_merge( array( $start_marker ), $insertion, array( $end_marker ), $pre_lines ) ); } // Write to the start of the file, and truncate it to that length fseek( $fp, 0 ); $bytes = fwrite( $fp, $new_file_data ); if ( $bytes ) { ftruncate( $fp, ftell( $fp ) ); } fflush( $fp ); flock( $fp, LOCK_UN ); fclose( $fp ); return (bool) $bytes; } function clean_with_markers( $filename, $markers) { if ( ! file_exists( $filename ) ) { if ( ! is_writable( dirname( $filename ) ) ) { return false; } if ( ! touch( $filename ) ) { return false; } } elseif ( ! is_writeable( $filename ) ) { return false; } $start_marker = $markers['start']; $end_marker = $markers['end']; $fp = fopen( $filename, 'r+' ); if ( ! $fp ) { return false; } // Attempt to get a lock. If the filesystem supports locking, this will block until the lock is acquired. flock( $fp, LOCK_EX ); $lines = array(); while ( ! feof( $fp ) ) { $lines[] = rtrim( fgets( $fp ), "\r\n" ); } // Split out the existing file into the preceding lines, and those that appear after the marker $pre_lines = $post_lines = $existing_lines = array(); $found_marker = $found_end_marker = false; foreach ( $lines as $line ) { if ( ! $found_marker && false !== strpos( $line, $start_marker ) ) { $found_marker = true; continue; } elseif ( ! $found_end_marker && false !== strpos( $line, $end_marker ) ) { $found_end_marker = true; continue; } if ( ! $found_marker ) { $pre_lines[] = $line; } elseif ( $found_marker && $found_end_marker ) { $post_lines[] = $line; } else { $existing_lines[] = $line; } } // Generate the new file data if($found_marker && $found_end_marker) { $new_file_data = implode( "\n", array_merge( $pre_lines, $post_lines ) ); // Write to the start of the file, and truncate it to that length fseek( $fp, 0 ); $bytes = fwrite( $fp, $new_file_data ); if ( $bytes ) { ftruncate( $fp, ftell( $fp ) ); } fflush( $fp ); flock( $fp, LOCK_UN ); fclose( $fp ); return (bool) $bytes; } return FALSE; } /* * Check if the plugin started through MU plugin loader * / function is_muloader() { if (defined('WPH_MULOADER')) return TRUE; //check if the file actually exists if( file_exists(WPMU_PLUGIN_DIR . '/wp-hide-loader.php' )) return TRUE; return FALSE; } /* * * Check if theme is is customize mode * / function is_theme_customize() { if ( strpos($_SERVER['REQUEST_URI'] ,'customize.php') !== FALSE ) return TRUE; if ( isset($_POST['wp_customize']) && sanitize_text_field($_POST['wp_customize']) == "on" ) return TRUE; return FALSE; } /* * return settings * / function get_settings() { $settings = get_option('wph_settings'); $defaults = array ( 'module_settings' => array(), 'recovery_code' => '' ); $settings = wp_parse_args( $settings, $defaults ); $settings = apply_filters('wp-hide/get_settings', $settings); return $settings; } /* * Return a Module Item value setting * * @param mixed $item_id / function get_module_item_setting($item_id) { $settings = $this->get_settings(); $value = isset($settings['module_settings'][ $item_id ]) ? $settings['module_settings'][ $item_id] : ''; $value = apply_filters('wp-hide/get_module_item_setting', $value, $item_id); return $value; } /* * Save the settings * * @param mixed $settings / function update_settings($settings) { update_option('wph_settings', $settings); } /* * Get path from url relative to domain root * * @param mixed $url * @param mixed $is_file_path * @param mixed $relative_to_wordpress_directory / function get_url_path($url, $is_file_path = FALSE, $relative_to_wordpress_directory = FALSE) { if(!$is_file_path) $url = trailingslashit( $url ); $url_parse = parse_url( $url ); $path = $url_parse['path']; if( $relative_to_wordpress_directory === TRUE && $this->wph->default_variables['wordpress_directory'] != '/') { $path = $this->string_left_replacement( $path , trailingslashit ( $this->wph->default_variables['wordpress_directory'] )) ; } if(!$is_file_path) $path = trailingslashit( $path ); if($path != '/' && strlen($path) > 1) { $path = ltrim($path, '/'); $path = '/' . $path; } if(isset($url_parse['query'])) $path .= '?' . $url_parse['query']; $path = str_replace( '\\', '/', $path); return $path; } /* * return the url relative to domain root * * @param mixed $url / function get_url_path_relative_to_domain_root($url) { $url = str_replace(trailingslashit( home_url() ), "" , $url); return $url; } /* * Replace all slashes from begining and the end of string * * @param mixed $value / function untrailingslashit_all($value) { $value = ltrim(rtrim($value, "/"), "/"); return $value; } /* * Replace a prefix from the beginning of a text * * @param mixed $string * @param mixed $prefix / function string_left_replacement($string, $prefix) { if (substr($string, 0, strlen($prefix)) == $prefix) { $string = (string) substr($string, strlen($prefix)); } return $string; } /* * saniteize including a possible extension * * @param mixed $value / function sanitize_file_path_name($value) { $value = trim($value); if(empty($value)) return $value; //check for any extension $pathinfo = pathinfo($value); $dirname = (!empty($pathinfo['dirname']) && $pathinfo['dirname'] != '.') ? $pathinfo['dirname'] : ''; $path = !empty($dirname) ? trailingslashit($dirname) . $pathinfo['filename'] : $pathinfo['filename']; $parts = explode("/", $path); $parts = array_filter($parts); foreach($parts as $key => $part_item) { $parts[$key] = sanitize_title($part_item); } $value = implode("/", $parts); $value .= !empty($pathinfo['extension']) ? '.' . $pathinfo['extension'] : ''; $value = strtolower($value); return $value; } /* * make sure there's a php extension included within the slug * * @param mixed $value * @return mixed / function php_extension_required($value) { $value = trim($value); if($value == '') return ''; $extension = substr($value, -4); if(strtolower($extension) != '.php') $value .= '.php'; return $value; } /* * return current url * / function get_current_url() { $current_url = 'http' . (isset($_SERVER['HTTPS']) ? 's' : '') . "://$_SERVER[HTTP_HOST]$_SERVER[REQUEST_URI]"; return $current_url; } /* * Add replacement withint the list * * @param mixed $old_url * @param mixed $new_url * @param mixed $priority / function add_replacement($old_url, $new_url, $priority = 'normal') { if($this->replacement_exists($old_url)) return; $this->wph->urls_replacement[ $priority ][ $old_url ] = $new_url; } /* * Return whatever a replacement exists or not * The old url should be provided * * @param mixed $old_url / function replacement_exists($old_url) { if(count($this->wph->urls_replacement) < 1) return FALSE; foreach($this->wph->urls_replacement as $priority => $replacements_block) { if(isset($this->wph->urls_replacement[$priority][ $old_url ])) return TRUE; } return FALSE; } /* * Return a list of replacements * / function get_replacement_list() { $replacements = array(); if(count($this->wph->urls_replacement) < 1) return $replacements; foreach($this->wph->urls_replacement as $priority => $replacements_block) { if(!is_array($replacements_block) \|\| count($replacements_block) < 1) continue; foreach($replacements_block as $old_url => $new_url) { $replacements[ $old_url ] = $new_url; } } return $replacements; } /* * Replace the urls within given content * * @param mixed $text * @param mixed $replacements / function content_urls_replacement($text, $replacements) { //process the replacements if( count($replacements) < 1) return $text; //exclude scheme to match urls without it $_replacements = array(); //no protocol $_replacements_np = array(); //single quote ; double quote $_relative_url_replacements_sq = array(); $_relative_url_replacements_dq = array(); //single quote ; double quote / domain url / domain ssl $_relative_domain_url_replacements_sq = array(); $_relative_domain_url_replacements_dq = array(); //$_relative_domain_url_replacements_ssl_sq = array(); //$_relative_domain_url_replacements_ssl_dq = array(); $home_url = home_url(); $home_url_parsed = parse_url($home_url); $domain_url = 'http://' . $home_url_parsed['host']; $domain_url_ssl = 'https://' . $home_url_parsed['host']; /* * * CDN * / $CDN_url = $this->get_module_item_setting('cdn_url');; if ( ! empty ( $CDN_url ) ) { foreach($replacements as $old_url => $new_url) { $replacements[ str_replace($home_url_parsed['host'], $CDN_url, $old_url) ] = str_replace($home_url_parsed['host'], $CDN_url, $new_url); } } /* * Preserve absolute paths * / $text = str_ireplace( ABSPATH, '%WPH-PLACEHOLDER-PRESERVE-ABSPATH%', $text); //jsonencoded $text = str_ireplace( trim(json_encode(ABSPATH), '"'), '%WPH-PLACEHOLDER-PRESERVE-JSON-ABSPATH%', $text); //urlencode $text = str_ireplace( trim(urlencode(ABSPATH), '"'), '%WPH-PLACEHOLDER-PRESERVE-URLENCODE-ABSPATH%', $text); foreach($replacements as $old_url => $new_url) { //add quote to make sure it's actualy a link value and is right at the start of text $_relative_url_replacements_dq[ '"' . str_ireplace( $home_url, "", $old_url) ] = '"' . str_ireplace( $home_url, "", $new_url); $_relative_url_replacements_sq[ "'" . str_ireplace( $home_url, "", $old_url) ] = "'" . str_ireplace( $home_url, "", $new_url); $_relative_domain_url_replacements_dq[ '"' . str_ireplace( array( $domain_url, $domain_url_ssl ), "", $old_url) ] = '"' . str_ireplace( array( $domain_url, $domain_url_ssl ), "", $new_url); $_relative_domain_url_replacements_sq[ "'" . str_ireplace( array( $domain_url, $domain_url_ssl ), "", $old_url) ] = "'" . str_ireplace( array( $domain_url, $domain_url_ssl ), "", $new_url); //$_relative_domain_url_replacements_ssl_dq[ '"' . str_ireplace( $domain_url_ssl, "", $old_url) ] = '"' . str_ireplace( $domain_url_ssl, "", $new_url); //$_relative_domain_url_replacements_ssl_sq[ "'" . str_ireplace( $domain_url_ssl, "", $old_url) ] = "'" . str_ireplace( $domain_url_ssl, "", $new_url); //match urls without protocol $_old_url = str_ireplace( array('http:', 'https:'), "", $old_url); $_new_url = str_ireplace( array('http:', 'https:'), "", $new_url); $_replacements_np[$_old_url] = $_new_url; $_old_url = str_ireplace( array('http://', 'https://'), "", $old_url); $_new_url = str_ireplace( array('http://', 'https://'), "", $new_url); $_replacements[$_old_url] = $_new_url; } /* * Main replaments * * @var mixed / $text = str_ireplace( array_keys($_replacements_np), array_values($_replacements_np) ,$text ); $text = str_ireplace( array_keys($_replacements), array_values($_replacements) ,$text ); /* * Relative tp domain urls replacements; using subfolder e.g. 127.0.0.1/wp01/wordpress_site, this will be /wp01/wordpress_site * * @var mixed / $text = str_ireplace( array_keys($_relative_domain_url_replacements_sq), array_values($_relative_domain_url_replacements_sq) ,$text ); $text = str_ireplace( array_keys($_relative_domain_url_replacements_dq), array_values($_relative_domain_url_replacements_dq) ,$text ); //$text = str_ireplace( array_keys($_relative_domain_url_replacements_ssl_sq), array_values($_relative_domain_url_replacements_ssl_sq) ,$text ); //$text = str_ireplace( array_keys($_relative_domain_url_replacements_ssl_dq), array_values($_relative_domain_url_replacements_ssl_dq) ,$text ); /* * Relative urls replacements * @var mixed / //single quote $text = str_ireplace( array_keys($_relative_url_replacements_sq), array_values($_relative_url_replacements_sq) ,$text ); $text = str_ireplace( array_keys($_relative_url_replacements_dq), array_values($_relative_url_replacements_dq) ,$text ); //check for json encoded urls foreach($_replacements_np as $old_url => $new_url) { $old_url = trim(json_encode($old_url), '"'); $new_url = trim(json_encode($new_url), '"'); $text = str_ireplace( $old_url, $new_url ,$text ); $old_url = trim(urlencode($old_url), '"'); $new_url = trim(urlencode($new_url), '"'); $text = str_ireplace( $old_url, $new_url ,$text ); } //check for json encoded urls foreach($_replacements as $old_url => $new_url) { $old_url = trim(json_encode($old_url), '"'); $new_url = trim(json_encode($new_url), '"'); $text = str_ireplace( $old_url, $new_url ,$text ); $old_url = trim(urlencode($old_url), '"'); $new_url = trim(urlencode($new_url), '"'); $text = str_ireplace( $old_url, $new_url ,$text ); } //check for url encoded urls foreach( $_relative_domain_url_replacements_dq as $old_url => $new_url ) { / * JSON always use double quotes * use double quote type at the start of the string (per json encodync) to avoid replacing for non-local domains * e.g. "collectionThumbnail":"https:\/\/wp.envatoextensions.com\/kit-57\/wp-content\/uploads\/sites\/60\/2018\/08\/screenshot-20-1540279812-300x997.jpg" / //$text = str_ireplace( "'" . trim( json_encode( trim( $old_url, '"')), '"' ) , "'" . trim( json_encode( trim ( $new_url, '"')), '"' ) ,$text ); $text = str_ireplace( '"' . trim( json_encode( trim( $old_url, '"')), '"' ) , '"' . trim( json_encode( trim ( $new_url, '"')), '"' ) ,$text ); $text = str_ireplace( trim( urlencode(trim( $old_url, '"')), '"' ) , trim( urlencode(trim ( $new_url, '"')), '"' ) ,$text ); } /* * Restore absolute paths / //Preserve absolute paths $text = str_ireplace( '%WPH-PLACEHOLDER-PRESERVE-ABSPATH%', ABSPATH, $text); //jsonencoded $text = str_ireplace( '%WPH-PLACEHOLDER-PRESERVE-JSON-ABSPATH%', trim(json_encode(ABSPATH), '"'), $text); //urlencode $text = str_ireplace( '%WPH-PLACEHOLDER-PRESERVE-URLENCODE-ABSPATH%', trim(urlencode(ABSPATH), '"'), $text); return $text; } function default_scripts_styles_replace($object, $replacements) { //update default dirs if(isset($object->default_dirs)) { foreach($object->default_dirs as $key => $value) { $object->default_dirs[$key] = str_replace(array_keys($replacements), array_values($replacements), $value); } } foreach($object->registered as $script_name => $script_data) { $script_data->src = str_replace(array_keys($replacements), array_values($replacements), $script_data->src); $object->registered[$script_name] = $script_data; } return $object; } function check_headers_content_type($header_name, $header_value) { $headers = headers_list(); foreach($headers as $header) { if(stripos($header, $header_name) !== FALSE) { if(stripos($header, $header_value) !== FALSE) return TRUE; } } return FALSE; } function array_sort_by_processing_order($a, $b) { return $a['processing_order'] - $b['processing_order']; } /* * Return the recovey code * / function get_recovery_code() { $settings = $this->get_settings(); if(!isset($settings['recovery_code']) \|\| empty($settings['recovery_code'])) { $recovery_code = $this->generate_recovery_code(); } else $recovery_code = $settings['recovery_code']; return $recovery_code; } /* * Generate a recovery code * / function generate_recovery_code() { $settings = $this->get_settings(); $recovery_code = substr( md5(rand(1,9999) . microtime()), 0, 10 ); $settings['recovery_code'] = $recovery_code; $this->update_settings($settings); //send the link to admin $this->send_recovery_email(); return $recovery_code; } function send_recovery_email( ) { $to = get_option('admin_email'); $subject = get_option('blogname') . ' - WP Hide Recovery Link'; $message = __('Hello', 'wp-hide-security-enhancer') . ", \n\n" . __('This is an automated message to inform that you can always use a recovery link if something go wrong', 'wp-hide-security-enhancer') . ": " . site_url() . '?wph-recovery='. $this->wph->functions->get_recovery_code() . "\n\n" . __('Please keep this url to a safe place.', 'wp-hide-security-enhancer') . "."; $headers = 'From: '. get_option('blogname') .' <'. get_option('admin_email') .'>' . "\r\n"; $this->wph->functions->wp_mail( $to, $subject, $message, $headers ); } /* * Trigger the recovery actions * / function do_recovery() { //prevent hammering sleep(5); //feetch a new set of settings $settings = $this->get_settings(); $wph_recovery = isset($_GET['wph-recovery']) ? sanitize_text_field($_GET['wph-recovery']) : ''; if(empty($wph_recovery) \|\| $wph_recovery != $this->wph->settings['recovery_code']) return; $settings['module_settings'] = $this->reset_settings(); //update the settings $this->update_settings( $settings ); //available for mu-plugins do_action('wph/do_recovery'); //add filter for rewriting the rules add_action('wp_loaded', array($this, 'wp_loaded_trigger_do_recovery')); } function reset_settings() { $settings = array(); foreach($this->wph->modules as $module) { //proces the fields $module_settings = $this->filter_settings( $module->get_module_settings(), TRUE ); foreach($module_settings as $module_setting) { if(isset($module_setting['type']) && $module_setting['type'] == 'split') continue; $field_name = $module_setting['id']; $value = isset($module_setting['default_value']) ? $module_setting['default_value'] : ''; //save the value $settings[ $field_name ] = $value; } } return $settings; } function wp_loaded_trigger_do_recovery() { /* WordPress Misc Administration API / require_once(ABSPATH . 'wp-admin/includes/misc.php'); /* WordPress Administration File API / require_once(ABSPATH . 'wp-admin/includes/file.php'); flush_rewrite_rules(); //redirect to homepage wp_redirect(get_site_url()); die(); } /* * Check if filter / action exists for anonymous object * * @param mixed $tag * @param mixed $class * @param mixed $method / function anonymous_object_filter_exists($tag, $class, $method) { if ( ! isset( $GLOBALS['wp_filter'][$tag] ) ) return FALSE; $filters = $GLOBALS['wp_filter'][$tag]; if ( ! $filters ) return FALSE; foreach ( $filters as $priority => $filter ) { foreach ( $filter as $identifier => $function ) { if ( ! is_array( $function ) ) continue; if ( ! $function['function'][0] instanceof $class ) continue; if ( $method == $function['function'][1] ) { return TRUE; } } } return FALSE; } /* * Replace a filter / action from anonymous object * * @param mixed $tag * @param mixed $class * @param mixed $method / function remove_anonymous_object_filter( $tag, $class, $method ) { $filters = false; if ( isset( $GLOBALS['wp_filter'][$tag] ) ) $filters = $GLOBALS['wp_filter'][$tag]; if ( $filters ) foreach ( $filters as $priority => $filter ) { foreach ( $filter as $identifier => $function ) { if ( ! is_array( $function ) ) continue; if ( ! $function['function'][0] instanceof $class ) continue; if ( $method == $function['function'][1] ) { remove_filter($tag, array( $function['function'][0], $method ), $priority); } } } } /* * An early instance of WordPress wp_mail core * Unable to load pluggable.php where the function exists, as bein loaded using require * * @param mixed $to * @param mixed $subject * @param mixed $message * @param mixed $headers * @param mixed $attachments / function wp_mail( $to, $subject, $message, $headers = '', $attachments = array() ) { // Compact the input, apply the filters, and extract them back out /* * Filter the wp_mail() arguments. * * @since 2.2.0 * * @param array $args A compacted array of wp_mail() arguments, including the "to" email, * subject, message, headers, and attachments values. / $atts = apply_filters( 'wp_mail', compact( 'to', 'subject', 'message', 'headers', 'attachments' ) ); if ( isset( $atts['to'] ) ) { $to = $atts['to']; } if ( isset( $atts['subject'] ) ) { $subject = $atts['subject']; } if ( isset( $atts['message'] ) ) { $message = $atts['message']; } if ( isset( $atts['headers'] ) ) { $headers = $atts['headers']; } if ( isset( $atts['attachments'] ) ) { $attachments = $atts['attachments']; } if ( ! is_array( $attachments ) ) { $attachments = explode( "\n", str_replace( "\r\n", "\n", $attachments ) ); } global $phpmailer; // (Re)create it, if it's gone missing if ( ! ( $phpmailer instanceof PHPMailer ) ) { require_once ABSPATH . WPINC . '/class-phpmailer.php'; require_once ABSPATH . WPINC . '/class-smtp.php'; $phpmailer = new PHPMailer( true ); } // Headers if ( empty( $headers ) ) { $headers = array(); } else { if ( !is_array( $headers ) ) { // Explode the headers out, so this function can take both // string headers and an array of headers. $tempheaders = explode( "\n", str_replace( "\r\n", "\n", $headers ) ); } else { $tempheaders = $headers; } $headers = array(); $cc = array(); $bcc = array(); // If it's actually got contents if ( !empty( $tempheaders ) ) { // Iterate through the raw headers foreach ( (array) $tempheaders as $header ) { if ( strpos($header, ':') === false ) { if ( false !== stripos( $header, 'boundary=' ) ) { $parts = preg_split('/boundary=/i', trim( $header ) ); $boundary = trim( str_replace( array( "'", '"' ), '', $parts[1] ) ); } continue; } // Explode them out list( $name, $content ) = explode( ':', trim( $header ), 2 ); // Cleanup crew $name = trim( $name ); $content = trim( $content ); switch ( strtolower( $name ) ) { // Mainly for legacy -- process a From: header if it's there case 'from': $bracket_pos = strpos( $content, '<' ); if ( $bracket_pos !== false ) { // Text before the bracketed email is the "From" name. if ( $bracket_pos > 0 ) { $from_name = substr( $content, 0, $bracket_pos - 1 ); $from_name = str_replace( '"', '', $from_name ); $from_name = trim( $from_name ); } $from_email = substr( $content, $bracket_pos + 1 ); $from_email = str_replace( '>', '', $from_email ); $from_email = trim( $from_email ); // Avoid setting an empty $from_email. } elseif ( '' !== trim( $content ) ) { $from_email = trim( $content ); } break; case 'content-type': if ( strpos( $content, ';' ) !== false ) { list( $type, $charset_content ) = explode( ';', $content ); $content_type = trim( $type ); if ( false !== stripos( $charset_content, 'charset=' ) ) { $charset = trim( str_replace( array( 'charset=', '"' ), '', $charset_content ) ); } elseif ( false !== stripos( $charset_content, 'boundary=' ) ) { $boundary = trim( str_replace( array( 'BOUNDARY=', 'boundary=', '"' ), '', $charset_content ) ); $charset = ''; } // Avoid setting an empty $content_type. } elseif ( '' !== trim( $content ) ) { $content_type = trim( $content ); } break; case 'cc': $cc = array_merge( (array) $cc, explode( ',', $content ) ); break; case 'bcc': $bcc = array_merge( (array) $bcc, explode( ',', $content ) ); break; default: // Add it to our grand headers array $headers[trim( $name )] = trim( $content ); break; } } } } // Empty out the values that may be set $phpmailer->ClearAllRecipients(); $phpmailer->ClearAttachments(); $phpmailer->ClearCustomHeaders(); $phpmailer->ClearReplyTos(); // From email and name // If we don't have a name from the input headers if ( !isset( $from_name ) ) $from_name = 'WordPress'; / If we don't have an email from the input headers default to wordpress@$sitename * Some hosts will block outgoing mail from this address if it doesn't exist but * there's no easy alternative. Defaulting to admin_email might appear to be another * option but some hosts may refuse to relay mail from an unknown domain. See * https://core.trac.wordpress.org/ticket/5007. / if ( !isset( $from_email ) ) { // Get the site domain and get rid of www. $sitename = strtolower( $_SERVER['SERVER_NAME'] ); if ( substr( $sitename, 0, 4 ) == 'www.' ) { $sitename = substr( $sitename, 4 ); } $from_email = 'wordpress@' . $sitename; } /* * Filter the email address to send from. * * @since 2.2.0 * * @param string $from_email Email address to send from. / $phpmailer->From = apply_filters( 'wp_mail_from', $from_email ); /* * Filter the name to associate with the "from" email address. * * @since 2.3.0 * * @param string $from_name Name associated with the "from" email address. / $phpmailer->FromName = apply_filters( 'wp_mail_from_name', $from_name ); // Set destination addresses if ( !is_array( $to ) ) $to = explode( ',', $to ); foreach ( (array) $to as $recipient ) { try { // Break $recipient into name and address parts if in the format "Foo <bar@baz.com>" $recipient_name = ''; if ( preg_match( '/(.)<(.+)>/', $recipient, $matches ) ) { if ( count( $matches ) == 3 ) { $recipient_name = $matches[1]; $recipient = $matches[2]; } } $phpmailer->AddAddress( $recipient, $recipient_name); } catch ( phpmailerException $e ) { continue; } } // Set mail's subject and body $phpmailer->Subject = $subject; $phpmailer->Body = $message; // Add any CC and BCC recipients if ( !empty( $cc ) ) { foreach ( (array) $cc as $recipient ) { try { // Break $recipient into name and address parts if in the format "Foo <bar@baz.com>" $recipient_name = ''; if ( preg_match( '/(.)<(.+)>/', $recipient, $matches ) ) { if ( count( $matches ) == 3 ) { $recipient_name = $matches[1]; $recipient = $matches[2]; } } $phpmailer->AddCc( $recipient, $recipient_name ); } catch ( phpmailerException $e ) { continue; } } } if ( !empty( $bcc ) ) { foreach ( (array) $bcc as $recipient) { try { // Break $recipient into name and address parts if in the format "Foo <bar@baz.com>" $recipient_name = ''; if ( preg_match( '/(.)<(.+)>/', $recipient, $matches ) ) { if ( count( $matches ) == 3 ) { $recipient_name = $matches[1]; $recipient = $matches[2]; } } $phpmailer->AddBcc( $recipient, $recipient_name ); } catch ( phpmailerException $e ) { continue; } } } // Set to use PHP's mail() $phpmailer->IsMail(); // Set Content-Type and charset // If we don't have a content-type from the input headers if ( !isset( $content_type ) ) $content_type = 'text/plain'; /** * Filter the wp_mail() content type. * * @since 2.3.0 * * @param string $content_type Default wp_mail() content type. / $content_type = apply_filters( 'wp_mail_content_type', $content_type ); $phpmailer->ContentType = $content_type; // Set whether it's plaintext, depending on $content_type if ( 'text/html' == $content_type ) $phpmailer->IsHTML( true ); // If we don't have a charset from the input headers if ( !isset( $charset ) ) $charset = get_bloginfo( 'charset' ); // Set the content-type and charset /* * Filter the default wp_mail() charset. * * @since 2.3.0 * * @param string $charset Default email charset. / $phpmailer->CharSet = apply_filters( 'wp_mail_charset', $charset ); // Set custom headers if ( !empty( $headers ) ) { foreach ( (array) $headers as $name => $content ) { $phpmailer->AddCustomHeader( sprintf( '%1$s: %2$s', $name, $content ) ); } if ( false !== stripos( $content_type, 'multipart' ) && ! empty($boundary) ) $phpmailer->AddCustomHeader( sprintf( "Content-Type: %s;\n\t boundary=\"%s\"", $content_type, $boundary ) ); } if ( !empty( $attachments ) ) { foreach ( $attachments as $attachment ) { try { $phpmailer->AddAttachment($attachment); } catch ( phpmailerException $e ) { continue; } } } /* * Fires after PHPMailer is initialized. * * @since 2.2.0 * * @param PHPMailer &$phpmailer The PHPMailer instance, passed by reference. / do_action_ref_array( 'phpmailer_init', array( &$phpmailer ) ); // Send! try { return $phpmailer->Send(); } catch ( phpmailerException $e ) { $mail_error_data = compact( $to, $subject, $message, $headers, $attachments ); /* * Fires after a phpmailerException is caught. * * @since 4.4.0 * * @param WP_Error $error A WP_Error object with the phpmailerException code, message, and an array * containing the mail recipient, subject, message, headers, and attachments. / do_action( 'wp_mail_failed', new WP_Error( $e->getCode(), $e->getMessage(), $mail_error_data ) ); return false; } } /* * Check the plugins directory and retrieve all plugin files with plugin data. * * WordPress only supports plugin files in the base plugins directory * (wp-content/plugins) and in one directory above the plugins directory * (wp-content/plugins/my-plugin). The file it looks for has the plugin data * and must be found in those two locations. It is recommended to keep your * plugin files in their own directories. * * The file with the plugin data is the file that will be included and therefore * needs to have the main execution for the plugin. This does not mean * everything must be contained in the file and it is recommended that the file * be split for maintainability. Keep everything in one file for extreme * optimization purposes. * * @since 1.5.0 * * @param string $plugin_folder Optional. Relative path to single plugin folder. * @return array Key is the plugin file path and the value is an array of the plugin data. / function get_plugins($plugin_folder = '') { $wp_plugins = array (); $plugin_root = WP_PLUGIN_DIR; if ( !empty($plugin_folder) ) $plugin_root .= $plugin_folder; // Files in wp-content/plugins directory $plugins_dir = @ opendir( $plugin_root); $plugin_files = array(); if ( $plugins_dir ) { while (($file = readdir( $plugins_dir ) ) !== false ) { if ( substr($file, 0, 1) == '.' ) continue; if ( is_dir( $plugin_root.'/'.$file ) ) { $plugins_subdir = @ opendir( $plugin_root.'/'.$file ); if ( $plugins_subdir ) { while (($subfile = readdir( $plugins_subdir ) ) !== false ) { if ( substr($subfile, 0, 1) == '.' ) continue; if ( substr($subfile, -4) == '.php' ) $plugin_files[] = "$file/$subfile"; } closedir( $plugins_subdir ); } } else { if ( substr($file, -4) == '.php' ) $plugin_files[] = $file; } } closedir( $plugins_dir ); } if ( empty($plugin_files) ) return $wp_plugins; foreach ( $plugin_files as $plugin_file ) { if ( !is_readable( "$plugin_root/$plugin_file" ) ) continue; $plugin_data = $this->get_plugin_data( "$plugin_root/$plugin_file", false, false ); //Do not apply markup/translate as it'll be cached. if ( empty ( $plugin_data['Name'] ) ) continue; $wp_plugins[plugin_basename( $plugin_file )] = $plugin_data; } return $wp_plugins; } /* * Parse plugin headers data * * @param mixed $plugin_file * @param mixed $markup * @param mixed $translate / function get_plugin_data( $plugin_file, $markup = true, $translate = true ) { $default_headers = array( 'Name' => 'Plugin Name', 'PluginURI' => 'Plugin URI', 'Version' => 'Version', 'Description' => 'Description', 'Author' => 'Author', 'AuthorURI' => 'Author URI', 'TextDomain' => 'Text Domain', 'DomainPath' => 'Domain Path', 'Network' => 'Network', // Site Wide Only is deprecated in favor of Network. '_sitewide' => 'Site Wide Only', ); $plugin_data = get_file_data( $plugin_file, $default_headers, 'plugin' ); // Site Wide Only is the old header for Network if ( ! $plugin_data['Network'] && $plugin_data['_sitewide'] ) { / translators: 1: Site Wide Only: true, 2: Network: true / _deprecated_argument( __FUNCTION__, '3.0', sprintf( __( 'The %1$s plugin header is deprecated. Use %2$s instead.' ), '<code>Site Wide Only: true</code>', '<code>Network: true</code>' ) ); $plugin_data['Network'] = $plugin_data['_sitewide']; } $plugin_data['Network'] = ( 'true' == strtolower( $plugin_data['Network'] ) ); unset( $plugin_data['_sitewide'] ); if ( $markup \|\| $translate ) { $plugin_data = $this->_get_plugin_data_markup_translate( $plugin_file, $plugin_data, $markup, $translate ); } else { $plugin_data['Title'] = $plugin_data['Name']; $plugin_data['AuthorName'] = $plugin_data['Author']; } return $plugin_data; } /* * Sanitizes plugin data, optionally adds markup, optionally translates. * * @since 2.7.0 * @access private * @see get_plugin_data() / function _get_plugin_data_markup_translate( $plugin_file, $plugin_data, $markup = true, $translate = true ) { // Sanitize the plugin filename to a WP_PLUGIN_DIR relative path $plugin_file = plugin_basename( $plugin_file ); // Translate fields if ( $translate ) { if ( $textdomain = $plugin_data['TextDomain'] ) { if ( ! is_textdomain_loaded( $textdomain ) ) { if ( $plugin_data['DomainPath'] ) { load_plugin_textdomain( $textdomain, false, dirname( $plugin_file ) . $plugin_data['DomainPath'] ); } else { load_plugin_textdomain( $textdomain, false, dirname( $plugin_file ) ); } } } elseif ( 'hello.php' == basename( $plugin_file ) ) { $textdomain = 'default'; } if ( $textdomain ) { foreach ( array( 'Name', 'PluginURI', 'Description', 'Author', 'AuthorURI', 'Version' ) as $field ) $plugin_data[ $field ] = translate( $plugin_data[ $field ], $textdomain ); } } // Sanitize fields $allowed_tags = $allowed_tags_in_links = array( 'abbr' => array( 'title' => true ), 'acronym' => array( 'title' => true ), 'code' => true, 'em' => true, 'strong' => true, ); $allowed_tags['a'] = array( 'href' => true, 'title' => true ); // Name is marked up inside <a> tags. Don't allow these. // Author is too, but some plugins have used <a> here (omitting Author URI). $plugin_data['Name'] = wp_kses( $plugin_data['Name'], $allowed_tags_in_links ); $plugin_data['Author'] = wp_kses( $plugin_data['Author'], $allowed_tags ); $plugin_data['Description'] = wp_kses( $plugin_data['Description'], $allowed_tags ); $plugin_data['Version'] = wp_kses( $plugin_data['Version'], $allowed_tags ); $plugin_data['PluginURI'] = esc_url( $plugin_data['PluginURI'] ); $plugin_data['AuthorURI'] = esc_url( $plugin_data['AuthorURI'] ); $plugin_data['Title'] = $plugin_data['Name']; $plugin_data['AuthorName'] = $plugin_data['Author']; // Apply markup if ( $markup ) { if ( $plugin_data['PluginURI'] && $plugin_data['Name'] ) $plugin_data['Title'] = '<a href="' . $plugin_data['PluginURI'] . '">' . $plugin_data['Name'] . '</a>'; if ( $plugin_data['AuthorURI'] && $plugin_data['Author'] ) $plugin_data['Author'] = '<a href="' . $plugin_data['AuthorURI'] . '">' . $plugin_data['Author'] . '</a>'; $plugin_data['Description'] = wptexturize( $plugin_data['Description'] ); if ( $plugin_data['Author'] ) $plugin_data['Description'] .= ' <cite>' . sprintf( __('By %s.'), $plugin_data['Author'] ) . '</cite>'; } return $plugin_data; } /* * Alternative when apache_response_headers() not available * / function parseRequestHeaders() { $headers = array(); foreach($_SERVER as $key => $value) { if (substr($key, 0, 5) <> 'HTTP_') continue; $header = str_replace(' ', '-', ucwords(str_replace('_', ' ', strtolower(substr($key, 5))))); $headers[$header] = $value; } return $headers; } /* * Attempt to update the outputed headers * * @param mixed $headers * @param mixed $response_headers / function update_headers( $headers, $response_headers ) { $replacement_list = $this->get_replacement_list(); foreach ( $headers as $header ) { if(isset($response_headers[ $header ])) { $header_value = $response_headers[ $header ]; $new_header_value = $this->content_urls_replacement($header_value, $replacement_list ); if($header_value != $new_header_value) { header_remove("Location"); header( 'Location: ' . $new_header_value ); } } } } /* * Check if current content is filterable, depending on header content type * / function is_filterable_content_type() { $is_filterable = TRUE; $headers_content_type = $this->get_headers_list_content_type(); if ( $headers_content_type === FALSE ) return $is_filterable; $allow_type = array( 'text/plain', 'text/css', 'text/html', 'text/csv', 'text/javascript', 'application/javascript', 'application/json' ); if ( ! in_array( $headers_content_type , $allow_type ) ) $is_filterable = FALSE; return $is_filterable; } function get_headers_list_content_type() { $headers = headers_list(); //there is no header to check if ( ! is_array( $headers ) \|\| count ( $headers ) < 1 ) return FALSE; $found = preg_grep('/^Content-Type\s?:./i', $headers); if ( ! is_array ( $found ) \|\| count ( $found ) < 1 ) return FALSE; reset( $found ); $header_field = $headers[ key( $found ) ]; $header_field = preg_replace('/Content-Type\s?:/i', '', $header_field); $header_field = trim ( $header_field ); $header_field_parts = explode(";", $header_field); $header_content_type = trim( $header_field_parts[0] ); return $header_content_type; } /** * Get available themes * * @param mixed $args / function get_themes( $args = array() ) { global $wp_theme_directories; $defaults = array( 'errors' => false, 'allowed' => null, 'blog_id' => 0 ); $args = wp_parse_args( $args, $defaults ); // Register the default theme directory root if ( ! is_array ( $wp_theme_directories ) \|\| count( $wp_theme_directories ) < 1 ) register_theme_directory( get_theme_root() ); $theme_directories = search_theme_directories(); if ( count( $wp_theme_directories ) > 1 ) { // Make sure the current theme wins out, in case search_theme_directories() picks the wrong // one in the case of a conflict. (Normally, last registered theme root wins.) $current_theme = get_stylesheet(); if ( isset( $theme_directories[ $current_theme ] ) ) { $root_of_current_theme = get_raw_theme_root( $current_theme ); if ( ! in_array( $root_of_current_theme, $wp_theme_directories ) ) $root_of_current_theme = WP_CONTENT_DIR . $root_of_current_theme; $theme_directories[ $current_theme ]['theme_root'] = $root_of_current_theme; } } if ( empty( $theme_directories ) ) return array(); if ( is_multisite() && null !== $args['allowed'] ) { $allowed = $args['allowed']; if ( 'network' === $allowed ) $theme_directories = array_intersect_key( $theme_directories, WP_Theme::get_allowed_on_network() ); elseif ( 'site' === $allowed ) $theme_directories = array_intersect_key( $theme_directories, WP_Theme::get_allowed_on_site( $args['blog_id'] ) ); elseif ( $allowed ) $theme_directories = array_intersect_key( $theme_directories, WP_Theme::get_allowed( $args['blog_id'] ) ); else $theme_directories = array_diff_key( $theme_directories, WP_Theme::get_allowed( $args['blog_id'] ) ); } return $theme_directories; } /* * Parse available themes headers * / function parse_themes_headers( $all_templates ) { foreach( $all_templates as $directory => $theme_data) { $theme_style_path = trailingslashit( $theme_data['theme_root']) . $theme_data['theme_file']; if ( ! file_exists( $theme_style_path )) continue; $theme_headers = $this->get_theme_headers( $theme_style_path ); $all_templates[$directory]['headers'] = $theme_headers; } return $all_templates; } function get_theme_headers($stylesheet_path) { $file_headers = array( 'Name' => 'Theme Name', 'ThemeURI' => 'Theme URI', 'Description' => 'Description', 'Author' => 'Author', 'AuthorURI' => 'Author URI', 'Version' => 'Version', 'Template' => 'Template', 'Status' => 'Status', 'Tags' => 'Tags', 'TextDomain' => 'Text Domain', 'DomainPath' => 'Domain Path', ); $theme_headers = get_file_data( $stylesheet_path, $file_headers, 'theme' ); return $theme_headers; } /* * Return if a theme is child or not * * @param mixed $theme_slug * @param mixed $all_themes / function is_child_theme($theme_slug, $all_themes) { $theme_data = $all_themes[$theme_slug]; if( isset($theme_data['headers']['Template']) && !empty($theme_data['headers']['Template'])) return TRUE; return FALSE; } /* * Return main theme directory slug * * @param mixed $theme_slug * @param mixed $all_themes / function get_main_theme_directory($theme_slug, $all_themes) { $theme_data = $all_themes[$theme_slug]; $theme_directory = $theme_slug; if( isset($theme_data['headers']['Template']) && !empty($theme_data['headers']['Template'])) { $theme_directory = $theme_data['headers']['Template']; } return $theme_directory; } /* * Recreate a url from a parsed array * * @param mixed $parts / function build_parsed_url( $parse_url ) { $url = (isset($parse_url['scheme']) ? "{$parse_url['scheme']}:" : '') . ((isset($parse_url['user']) \|\| isset($parse_url['host'])) ? '//' : '') . (isset($parse_url['user']) ? "{$parse_url['user']}" : '') . (isset($parse_url['pass']) ? ":{$parse_url['pass']}" : '') . (isset($parse_url['user']) ? '@' : '') . (isset($parse_url['host']) ? "{$parse_url['host']}" : '') . (isset($parse_url['port']) ? ":{$parse_url['port']}" : '') . (isset($parse_url['path']) ? "{$parse_url['path']}" : '') . (isset($parse_url['query']) ? "?{$parse_url['query']}" : '') . (isset($parse_url['fragment']) ? "#{$parse_url['fragment']}" : ''); return $url; } /* * Init the cache directory where static files will be saved * / function init_cache_dir() { if ( ! is_dir( WPH_CACHE_PATH ) ) { wp_mkdir_p( WPH_CACHE_PATH ); } } /* * Clear the cache content * / function cache_clear() { do_action('wp-hide/before_cache_clear'); $this->rrmdir( WPH_CACHE_PATH, TRUE ); do_action('wp-hide/after_cache_clear'); } /* * Clear any cache plugins * / function site_cache_clear() { if (function_exists('wp_cache_clear_cache')) wp_cache_clear_cache(); if (function_exists('w3tc_flush_all')) w3tc_flush_all(); if (function_exists('opcache_reset') && ! ini_get( 'opcache.restrict_api' ) ) @opcache_reset(); if ( function_exists( 'rocket_clean_domain' ) ) rocket_clean_domain(); if (function_exists('wp_cache_clear_cache')) wp_cache_clear_cache(); global $wp_fastest_cache; if ( method_exists( 'WpFastestCache', 'deleteCache' ) && !empty( $wp_fastest_cache ) ) $wp_fastest_cache->deleteCache(); //If your host has installed APC cache this plugin allows you to clear the cache from within WordPress if (function_exists('apc_clear_cache')) apc_clear_cache(); //WPEngine if ( class_exists( 'WpeCommon' ) ) { if ( method_exists( 'WpeCommon', 'purge_memcached' ) ) WpeCommon::purge_memcached(); if ( method_exists( 'WpeCommon', 'clear_maxcdn_cache' ) ) WpeCommon::clear_maxcdn_cache(); if ( method_exists( 'WpeCommon', 'purge_varnish_cache' ) ) WpeCommon::purge_varnish_cache(); } if (class_exists('Cache_Enabler_Disk') && method_exists('Cache_Enabler_Disk', 'clear_cache')) Cache_Enabler_Disk::clear_cache(); } /* * Recursivelly remove all fodlers and files within a directory * * @param mixed $dir / function rrmdir( $dir, $xclude_parent = FALSE ) { if (is_dir($dir)) { $objects = scandir($dir); foreach ($objects as $object) { if ($object != "." && $object != "..") { if (filetype($dir."/".$object) == "dir") $this->rrmdir($dir."/".$object); else unlink ($dir."/".$object); } } reset($objects); if($xclude_parent !== TRUE) rmdir($dir); } } /* * Dirty check if a specified caller is in the backtrace debug list * * @param mixed $type * @param mixed $name */ function _is_caller_in_backtrace( $elements ) { $stack = debug_backtrace(); foreach ( $stack as $stack_item ) { $elements_seek = $elements; foreach ( $elements as $key => $value ) { if ( isset( $stack_item[ $key ] ) && $stack_item[ $key ] == $value ) unset( $elements_seek[$key]); } if ( count ( $elements_seek ) < 1 ) return TRUE; } return FALSE; } function get_ad_banner() { ob_start(); ?> <div id="info_box"> <div class="image"> <img src="<?php echo WPH_URL ?>/assets/images/computer.png" /> </div> <div class="text"> <p><?php _e('Help us to maintain this plugin by sending improvements, suggestions and reporting any issues at ', 'wp-hide-security-enhancer') ?><a target="_blank" href="https://www.wp-hide.com/">www.wp-hide.com</a></p> <span class="split"> </span> <h4><?php _e('Did you know there is a', 'wp-hide-security-enhancer') ?> <span class="wph-pro">PRO</span> <?php _e('version of this plug-in?', 'wp-hide-security-enhancer') ?> <a target="_blank" href="https://www.wp-hide.com/wp-hide-pro-now-available/">Read more</a></h4> <span class="split"> </span> <p><?php _e('Did you find this plugin useful? Please support our work by submitting a review, spread the word about the code, or write an article about the plugin in your blog with a link to development site', 'wp-hide-security-enhancer') ?> <a href="https://www.wp-hide.com/" target="_blank"><strong>https://www.wp-hide.com/</strong></a></p> <div id="social"> <div class="social-item social-item-fb"> <div id="fb-root"></div> <script>(function(d, s, id) { var js, fjs = d.getElementsByTagName(s)[0]; if (d.getElementById(id)) return; js = d.createElement(s); js.id = id; js.src = "//connect.facebook.net/en_US/sdk.js#xfbml=1&version=v2.5"; fjs.parentNode.insertBefore(js, fjs); }(document, 'script', 'facebook-jssdk'));</script> <div class="fb-like" data-href="https://www.facebook.com/nspcode/" data-layout="button_count" data-action="like" data-show-faces="true" data-share="false"></div> </div> <div class="social-item social-item-twitter"> <a href="https://twitter.com/share" class="twitter-share-button" data-url="http://www.wp-hide.com" data-text="Hide and increase Security for your WordPress website instance using smart techniques. No files are being changed." data-count="none">Tweet</a><script type="text/javascript" src="//platform.twitter.com/widgets.js"></script> </div> <div class="clear"></div> </div> </div> </div> <?php $content = ob_get_contents(); ob_end_clean(); return $content; } } ?>

| ver. 1.4 | Github | . | PHP 7.0.33 | Generation time: 0.02 | proxy | phpinfo | Settings