<?php

[0] Fix | Delete

if (!defined('ABSPATH') && !defined('MCDATAPATH')) exit;

[1] Fix | Delete

[2] Fix | Delete

if (!class_exists('BVProtectFWRule_V565')) :

[3] Fix | Delete

class BVProtectFWRule_V565 {

[4] Fix | Delete

public $id;

[5] Fix | Delete

public $logic;

[6] Fix | Delete

public $actions;

[7] Fix | Delete

public $execute_on;

[8] Fix | Delete

public $min_rule_engine_ver;

[9] Fix | Delete

public $max_rule_engine_ver;

[10] Fix | Delete

public $config = array();

[11] Fix | Delete

public $opts = array();

[12] Fix | Delete

[13] Fix | Delete

const EXE_ON_BOOT = 1;

[14] Fix | Delete

const EXE_ON_PRE_UPDATE_OPTION = 2;

[15] Fix | Delete

const EXE_ON_PRE_DELETE_POST = 3;

[16] Fix | Delete

const EXE_ON_WP_INSERT_POST_EMPTY_CONTENT = 4;

[17] Fix | Delete

const EXE_ON_INSERT_USER_META = 5;

[18] Fix | Delete

const EXE_ON_DELETE_OPTION = 6;

[19] Fix | Delete

const EXE_ON_DELETE_USER = 7;

[20] Fix | Delete

const EXE_ON_PASSWORD_RESET = 8;

[21] Fix | Delete

const EXE_ON_SEND_AUTH_COOKIES = 9;

[22] Fix | Delete

const EXE_ON_SET_AUTH_COOKIE = 10;

[23] Fix | Delete

const EXE_ON_INIT = 11;

[24] Fix | Delete

const EXE_ON_USER_REGISTER = 12;

[25] Fix | Delete

const EXE_ON_ADD_USER_META = 13;

[26] Fix | Delete

const EXE_ON_UPDATE_USER_METADATA = 14;

[27] Fix | Delete

const EXE_ON_UPDATE_USER_META = 15;

[28] Fix | Delete

const EXE_ON_ADD_OPTION = 16;

[29] Fix | Delete

const EXE_ON_WP_PRE_INSERT_USER_DATA = 17;

[30] Fix | Delete

[31] Fix | Delete

const SQLIREGEX = '/(?:[^\\w<]|\\/\\*\\![0-9]*|^)(?:

[32] Fix | Delete

@@HOSTNAME|

[33] Fix | Delete

ALTER|ANALYZE|ASENSITIVE|

[34] Fix | Delete

BEFORE|BENCHMARK|BETWEEN|BIGINT|BINARY|BLOB|

[35] Fix | Delete

CALL|CASE|CHANGE|CHAR|CHARACTER|CHAR_LENGTH|COLLATE|COLUMN|CONCAT|CONDITION|CONSTRAINT|CONTINUE|CONVERT|CREATE|CROSS|CURRENT_DATE|CURRENT_TIME|CURRENT_TIMESTAMP|CURRENT_USER|CURSOR|

[36] Fix | Delete

DATABASE|DATABASES|DAY_HOUR|DAY_MICROSECOND|DAY_MINUTE|DAY_SECOND|DECIMAL|DECLARE|DEFAULT|DELAYED|DELETE|DESCRIBE|DETERMINISTIC|DISTINCT|DISTINCTROW|DOUBLE|DROP|DUAL|DUMPFILE|

[37] Fix | Delete

EACH|ELSE|ELSEIF|ELT|ENCLOSED|ESCAPED|EXISTS|EXIT|EXPLAIN|EXTRACTVALUE|

[38] Fix | Delete

FETCH|FLOAT|FLOAT4|FLOAT8|FORCE|FOREIGN|FROM|FULLTEXT|

[39] Fix | Delete

GRANT|GROUP|HAVING|HEX|HIGH_PRIORITY|HOUR_MICROSECOND|HOUR_MINUTE|HOUR_SECOND|

[40] Fix | Delete

IFNULL|IGNORE|INDEX|INFILE|INNER|INOUT|INSENSITIVE|INSERT|INTERVAL|ISNULL|ITERATE|

[41] Fix | Delete

JOIN|KILL|LEADING|LEAVE|LIMIT|LINEAR|LINES|LOAD|LOAD_FILE|LOCALTIME|LOCALTIMESTAMP|LOCK|LONG|LONGBLOB|LONGTEXT|LOOP|LOW_PRIORITY|

[42] Fix | Delete

MASTER_SSL_VERIFY_SERVER_CERT|MATCH|MAXVALUE|MEDIUMBLOB|MEDIUMINT|MEDIUMTEXT|MID|MIDDLEINT|MINUTE_MICROSECOND|MINUTE_SECOND|MODIFIES|

[43] Fix | Delete

NATURAL|NO_WRITE_TO_BINLOG|NULL|NUMERIC|OPTION|ORD|ORDER|OUTER|OUTFILE|

[44] Fix | Delete

PRECISION|PRIMARY|PRIVILEGES|PROCEDURE|PROCESSLIST|PURGE|

[45] Fix | Delete

RANGE|READ_WRITE|REGEXP|RELEASE|REPEAT|REQUIRE|RESIGNAL|RESTRICT|RETURN|REVOKE|RLIKE|ROLLBACK|

[46] Fix | Delete

SCHEMA|SCHEMAS|SECOND_MICROSECOND|SELECT|SENSITIVE|SEPARATOR|SHOW|SIGNAL|SLEEP|SMALLINT|SPATIAL|SPECIFIC|SQLEXCEPTION|SQLSTATE|SQLWARNING|SQL_BIG_RESULT|SQL_CALC_FOUND_ROWS|SQL_SMALL_RESULT|STARTING|STRAIGHT_JOIN|SUBSTR|

[47] Fix | Delete

TABLE|TERMINATED|TINYBLOB|TINYINT|TINYTEXT|TRAILING|TRANSACTION|TRIGGER|

[48] Fix | Delete

UNDO|UNHEX|UNION|UNLOCK|UNSIGNED|UPDATE|UPDATEXML|USAGE|USING|UTC_DATE|UTC_TIME|UTC_TIMESTAMP|

[49] Fix | Delete

VALUES|VARBINARY|VARCHAR|VARCHARACTER|VARYING|WHEN|WHERE|WHILE|WRITE|YEAR_MONTH|ZEROFILL)(?=[^\\w]|$)/ix';

[50] Fix | Delete

const XSSREGEX = '/(?:

[51] Fix | Delete

#tags

[52] Fix | Delete

(?:\\<|\\+ADw\\-|\\xC2\\xBC)(script|iframe|svg|object|embed|applet|link|style|meta|\\/\\/|\\?xml\\-stylesheet)(?:[^\\w]|\\xC2\\xBE)|

[53] Fix | Delete

#protocols

[54] Fix | Delete

(?:^|[^\\w])(?:(?:\\s*(?:&\\#(?:x0*6a|0*106)|j)\\s*(?:&\\#(?:x0*61|0*97)|a)\\s*(?:&\\#(?:x0*76|0*118)|v)\\s*(?:&\\#(?:x0*61|0*97)|a)|\\s*(?:&\\#(?:x0*76|0*118)|v)\\s*(?:&\\#(?:x0*62|0*98)|b)|\\s*(?:&\\#(?:x0*65|0*101)|e)\\s*(?:&\\#(?:x0*63|0*99)|c)\\s*(?:&\\#(?:x0*6d|0*109)|m)\\s*(?:&\\#(?:x0*61|0*97)|a)|\\s*(?:&\\#(?:x0*6c|0*108)|l)\\s*(?:&\\#(?:x0*69|0*105)|i)\\s*(?:&\\#(?:x0*76|0*118)|v)\\s*(?:&\\#(?:x0*65|0*101)|e))\\s*(?:&\\#(?:x0*73|0*115)|s)\\s*(?:&\\#(?:x0*63|0*99)|c)\\s*(?:&\\#(?:x0*72|0*114)|r)\\s*(?:&\\#(?:x0*69|0*105)|i)\\s*(?:&\\#(?:x0*70|0*112)|p)\\s*(?:&\\#(?:x0*74|0*116)|t)|\\s*(?:&\\#(?:x0*6d|0*109)|m)\\s*(?:&\\#(?:x0*68|0*104)|h)\\s*(?:&\\#(?:x0*74|0*116)|t)\\s*(?:&\\#(?:x0*6d|0*109)|m)\\s*(?:&\\#(?:x0*6c|0*108)|l)|\\s*(?:&\\#(?:x0*6d|0*109)|m)\\s*(?:&\\#(?:x0*6f|0*111)|o)\\s*(?:&\\#(?:x0*63|0*99)|c)\\s*(?:&\\#(?:x0*68|0*104)|h)\\s*(?:&\\#(?:x0*61|0*97)|a)|\\s*(?:&\\#(?:x0*64|0*100)|d)\\s*(?:&\\#(?:x0*61|0*97)|a)\\s*(?:&\\#(?:x0*74|0*116)|t)\\s*(?:&\\#(?:x0*61|0*97)|a)(?!(?:&\\#(?:x0*3a|0*58)|\\:)(?:&\\#(?:x0*69|0*105)|i)(?:&\\#(?:x0*6d|0*109)|m)(?:&\\#(?:x0*61|0*97)|a)(?:&\\#(?:x0*67|0*103)|g)(?:&\\#(?:x0*65|0*101)|e)(?:&\\#(?:x0*2f|0*47)|\\/)(?:(?:&\\#(?:x0*70|0*112)|p)(?:&\\#(?:x0*6e|0*110)|n)(?:&\\#(?:x0*67|0*103)|g)|(?:&\\#(?:x0*62|0*98)|b)(?:&\\#(?:x0*6d|0*109)|m)(?:&\\#(?:x0*70|0*112)|p)|(?:&\\#(?:x0*67|0*103)|g)(?:&\\#(?:x0*69|0*105)|i)(?:&\\#(?:x0*66|0*102)|f)|(?:&\\#(?:x0*70|0*112)|p)?(?:&\\#(?:x0*6a|0*106)|j)(?:&\\#(?:x0*70|0*112)|p)(?:&\\#(?:x0*65|0*101)|e)(?:&\\#(?:x0*67|0*103)|g)|(?:&\\#(?:x0*74|0*116)|t)(?:&\\#(?:x0*69|0*105)|i)(?:&\\#(?:x0*66|0*102)|f)(?:&\\#(?:x0*66|0*102)|f)|(?:&\\#(?:x0*73|0*115)|s)(?:&\\#(?:x0*76|0*118)|v)(?:&\\#(?:x0*67|0*103)|g)(?:&\\#(?:x0*2b|0*43)|\\+)(?:&\\#(?:x0*78|0*120)|x)(?:&\\#(?:x0*6d|0*109)|m)(?:&\\#(?:x0*6c|0*108)|l))(?:(?:&\\#(?:x0*3b|0*59)|;)(?:&\\#(?:x0*63|0*99)|c)(?:&\\#(?:x0*68|0*104)|h)(?:&\\#(?:x0*61|0*97)|a)(?:&\\#(?:x0*72|0*114)|r)(?:&\\#(?:x0*73|0*115)|s)(?:&\\#(?:x0*65|0*101)|e)(?:&\\#(?:x0*74|0*116)|t)(?:&\\#(?:x0*3d|0*61)|=)[\\-a-z0-9]+)?(?:(?:&\\#(?:x0*3b|0*59)|;)(?:&\\#(?:x0*62|0*98)|b)(?:&\\#(?:x0*61|0*97)|a)(?:&\\#(?:x0*73|0*115)|s)(?:&\\#(?:x0*65|0*101)|e)(?:&\\#(?:x0*36|0*54)|6)(?:&\\#(?:x0*34|0*52)|4))?(?:&\\#(?:x0*2c|0*44)|,)))\\s*(?:&\\#(?:x0*3a|0*58)|&colon|\\:)|

[55] Fix | Delete

#css expression

[56] Fix | Delete

(?:^|[^\\w])(?:(?:\\\\0*65|\\\\0*45|e)(?:\\/\\*.*?\\*\\/)*(?:\\\\0*78|\\\\0*58|x)(?:\\/\\*.*?\\*\\/)*(?:\\\\0*70|\\\\0*50|p)(?:\\/\\*.*?\\*\\/)*(?:\\\\0*72|\\\\0*52|r)(?:\\/\\*.*?\\*\\/)*(?:\\\\0*65|\\\\0*45|e)(?:\\/\\*.*?\\*\\/)*(?:\\\\0*73|\\\\0*53|s)(?:\\/\\*.*?\\*\\/)*(?:\\\\0*73|\\\\0*53|s)(?:\\/\\*.*?\\*\\/)*(?:\\\\0*69|\\\\0*49|i)(?:\\/\\*.*?\\*\\/)*(?:\\\\0*6f|\\\\0*4f|o)(?:\\/\\*.*?\\*\\/)*(?:\\\\0*6e|\\\\0*4e|n))[^\\w]*?(?:\\\\0*28|\\()|

[57] Fix | Delete

#css properties

[58] Fix | Delete

(?:^|[^\\w])(?:(?:(?:\\\\0*62|\\\\0*42|b)(?:\\/\\*.*?\\*\\/)*(?:\\\\0*65|\\\\0*45|e)(?:\\/\\*.*?\\*\\/)*(?:\\\\0*68|\\\\0*48|h)(?:\\/\\*.*?\\*\\/)*(?:\\\\0*61|\\\\0*41|a)(?:\\/\\*.*?\\*\\/)*(?:\\\\0*76|\\\\0*56|v)(?:\\/\\*.*?\\*\\/)*(?:\\\\0*69|\\\\0*49|i)(?:\\/\\*.*?\\*\\/)*(?:\\\\0*6f|\\\\0*4f|o)(?:\\/\\*.*?\\*\\/)*(?:\\\\0*72|\\\\0*52|r)(?:\\/\\*.*?\\*\\/)*)|(?:(?:\\\\0*2d|\\\\0*2d|-)(?:\\/\\*.*?\\*\\/)*(?:\\\\0*6d|\\\\0*4d|m)(?:\\/\\*.*?\\*\\/)*(?:\\\\0*6f|\\\\0*4f|o)(?:\\/\\*.*?\\*\\/)*(?:\\\\0*7a|\\\\0*5a|z)(?:\\/\\*.*?\\*\\/)*(?:\\\\0*2d|\\\\0*2d|-)(?:\\/\\*.*?\\*\\/)*(?:\\\\0*62|\\\\0*42|b)(?:\\/\\*.*?\\*\\/)*(?:\\\\0*69|\\\\0*49|i)(?:\\/\\*.*?\\*\\/)*(?:\\\\0*6e|\\\\0*4e|n)(?:\\/\\*.*?\\*\\/)*(?:\\\\0*64|\\\\0*44|d)(?:\\/\\*.*?\\*\\/)*(?:\\\\0*69|\\\\0*49|i)(?:\\/\\*.*?\\*\\/)*(?:\\\\0*6e|\\\\0*4e|n)(?:\\/\\*.*?\\*\\/)*(?:\\\\0*67|\\\\0*47|g)(?:\\/\\*.*?\\*\\/)*))[^\\w]*(?:\\\\0*3a|\\\\0*3a|:)[^\\w]*(?:\\\\0*75|\\\\0*55|u)(?:\\\\0*72|\\\\0*52|r)(?:\\\\0*6c|\\\\0*4c|l)|

[59] Fix | Delete

#properties

[60] Fix | Delete

(?:^|[^\\w])(?:on(?:abort|activate|afterprint|afterupdate|autocomplete|autocompleteerror|beforeactivate|beforecopy|beforecut|beforedeactivate|beforeeditfocus|beforepaste|beforeprint|beforeunload|beforeupdate|blur|bounce|cancel|canplay|canplaythrough|cellchange|change|click|close|contextmenu|controlselect|copy|cuechange|cut|dataavailable|datasetchanged|datasetcomplete|dblclick|deactivate|drag|dragend|dragenter|dragleave|dragover|dragstart|drop|durationchange|emptied|encrypted|ended|error|errorupdate|filterchange|finish|focus|focusin|focusout|formchange|forminput|hashchange|help|input|invalid|keydown|keypress|keyup|languagechange|layoutcomplete|load|loadeddata|loadedmetadata|loadstart|losecapture|message|mousedown|mouseenter|mouseleave|mousemove|mouseout|mouseover|mouseup|mousewheel|move|moveend|movestart|mozfullscreenchange|mozfullscreenerror|mozpointerlockchange|mozpointerlockerror|offline|online|page|pagehide|pageshow|paste|pause|play|playing|popstate|progress|propertychange|ratechange|readystatechange|reset|resize|resizeend|resizestart|rowenter|rowexit|rowsdelete|rowsinserted|scroll|search|seeked|seeking|select|selectstart|show|stalled|start|storage|submit|suspend|timer|timeupdate|toggle|unload|volumechange|waiting|webkitfullscreenchange|webkitfullscreenerror|wheel)|formaction|data\\-bind|ev:event)[^\\w]

[61] Fix | Delete

)/ix';

[62] Fix | Delete

[63] Fix | Delete

public function __construct($attributes) {

[64] Fix | Delete

$this->id = $attributes['id'];

[65] Fix | Delete

$this->logic = $attributes['rule_logic'];

[66] Fix | Delete

$this->actions = $attributes['actions'];

[67] Fix | Delete

$this->execute_on = $attributes['execute_on'];

[68] Fix | Delete

$this->min_rule_engine_ver = $attributes['min_rule_engine_ver'];

[69] Fix | Delete

[70] Fix | Delete

if (array_key_exists('max_rule_engine_ver', $attributes)) {

[71] Fix | Delete

$this->max_rule_engine_ver = $attributes['max_rule_engine_ver'];

[72] Fix | Delete

}

[73] Fix | Delete

[74] Fix | Delete

if (array_key_exists('config', $attributes) && is_array($attributes['config'])) {

[75] Fix | Delete

$this->config = $attributes['config'];

[76] Fix | Delete

}

[77] Fix | Delete

[78] Fix | Delete

if (array_key_exists('opts', $attributes) && is_array($attributes['opts'])) {

[79] Fix | Delete

$this->opts = $attributes['opts'];

[80] Fix | Delete

}

[81] Fix | Delete

}

[82] Fix | Delete

[83] Fix | Delete

public static function init($attributes) {

[84] Fix | Delete

if (!is_array($attributes)) {

[85] Fix | Delete

return false;

[86] Fix | Delete

}

[87] Fix | Delete

[88] Fix | Delete

if (!array_key_exists('min_rule_engine_ver', $attributes) || !is_float($attributes['min_rule_engine_ver']) ||

[89] Fix | Delete

$attributes['min_rule_engine_ver'] > BVProtectFWRuleEngine_V565::VERSION) {

[90] Fix | Delete

[91] Fix | Delete

return false;

[92] Fix | Delete

}

[93] Fix | Delete

[94] Fix | Delete

if (array_key_exists('max_rule_engine_ver', $attributes) && (!is_float($attributes['max_rule_engine_ver']) ||

[95] Fix | Delete

$attributes['max_rule_engine_ver'] < BVProtectFWRuleEngine_V565::VERSION)) {

[96] Fix | Delete

[97] Fix | Delete

return false;

[98] Fix | Delete

}

[99] Fix | Delete

[100] Fix | Delete

if (!array_key_exists('id', $attributes) || (is_int($attributes['id']) && $attributes['id'] <= 0)) {

[101] Fix | Delete

return false;

[102] Fix | Delete

}

[103] Fix | Delete

[104] Fix | Delete

if (!array_key_exists('rule_logic', $attributes) || !is_array($attributes['rule_logic'])) {

[105] Fix | Delete

return false;

[106] Fix | Delete

}

[107] Fix | Delete

[108] Fix | Delete

if (!array_key_exists('actions', $attributes) || !is_array($attributes['actions'])) {

[109] Fix | Delete

return false;

[110] Fix | Delete

}

[111] Fix | Delete

[112] Fix | Delete

if (!array_key_exists('execute_on', $attributes)) {

[113] Fix | Delete

if (array_key_exists('level', $attributes) && $attributes['level'] === 1) {

[114] Fix | Delete

$attributes['execute_on'] = BVProtectFWRule_V565::EXE_ON_BOOT;

[115] Fix | Delete

} else {

[116] Fix | Delete

return false;

[117] Fix | Delete

}

[118] Fix | Delete

}

[119] Fix | Delete

[120] Fix | Delete

return new BVProtectFWRule_V565($attributes);

[121] Fix | Delete

}

[122] Fix | Delete

[123] Fix | Delete

public function isExeOnBoot() {

[124] Fix | Delete

return ($this->execute_on === BVProtectFWRule_V565::EXE_ON_BOOT);

[125] Fix | Delete

}

[126] Fix | Delete

[127] Fix | Delete

public function isExeOnPreUpdateOption() {

[128] Fix | Delete

return ($this->execute_on === BVProtectFWRule_V565::EXE_ON_PRE_UPDATE_OPTION);

[129] Fix | Delete

}

[130] Fix | Delete

[131] Fix | Delete

public function isExeOnPreDeletePost() {

[132] Fix | Delete

return ($this->execute_on === BVProtectFWRule_V565::EXE_ON_PRE_DELETE_POST);

[133] Fix | Delete

}

[134] Fix | Delete

[135] Fix | Delete

public function isExeOnWPInsertPostEmptyContent() {

[136] Fix | Delete

return ($this->execute_on === BVProtectFWRule_V565::EXE_ON_WP_INSERT_POST_EMPTY_CONTENT);

[137] Fix | Delete

}

[138] Fix | Delete

[139] Fix | Delete

public function isExeOnInsertUserMeta() {

[140] Fix | Delete

return ($this->execute_on === BVProtectFWRule_V565::EXE_ON_INSERT_USER_META);

[141] Fix | Delete

}

[142] Fix | Delete

[143] Fix | Delete

public function isExeOnDeleteOption() {

[144] Fix | Delete

return ($this->execute_on === BVProtectFWRule_V565::EXE_ON_DELETE_OPTION);

[145] Fix | Delete

}

[146] Fix | Delete

[147] Fix | Delete

public function isExeOnDeleteUser() {

[148] Fix | Delete

return ($this->execute_on === BVProtectFWRule_V565::EXE_ON_DELETE_USER);

[149] Fix | Delete

}

[150] Fix | Delete

[151] Fix | Delete

public function isExeOnPasswordReset() {

[152] Fix | Delete

return ($this->execute_on === BVProtectFWRule_V565::EXE_ON_PASSWORD_RESET);

[153] Fix | Delete

}

[154] Fix | Delete

[155] Fix | Delete

public function isExeOnSendAuthCookies() {

[156] Fix | Delete

return ($this->execute_on === BVProtectFWRule_V565::EXE_ON_SEND_AUTH_COOKIES);

[157] Fix | Delete

}

[158] Fix | Delete

[159] Fix | Delete

public function isExeOnSetAuthCookie() {

[160] Fix | Delete

return ($this->execute_on === BVProtectFWRule_V565::EXE_ON_SET_AUTH_COOKIE);

[161] Fix | Delete

}

[162] Fix | Delete

[163] Fix | Delete

public function isExeOnInit() {

[164] Fix | Delete

return ($this->execute_on === BVProtectFWRule_V565::EXE_ON_INIT);

[165] Fix | Delete

}

[166] Fix | Delete

[167] Fix | Delete

public function isExeOnUserRegister() {

[168] Fix | Delete

return ($this->execute_on === BVProtectFWRule_V565::EXE_ON_USER_REGISTER);

[169] Fix | Delete

}

[170] Fix | Delete

[171] Fix | Delete

public function isExeOnAddUserMeta() {

[172] Fix | Delete

return ($this->execute_on === BVProtectFWRule_V565::EXE_ON_ADD_USER_META);

[173] Fix | Delete

}

[174] Fix | Delete

[175] Fix | Delete

public function isExeOnUpdateUserMetadata() {

[176] Fix | Delete

return ($this->execute_on === BVProtectFWRule_V565::EXE_ON_UPDATE_USER_METADATA);

[177] Fix | Delete

}

[178] Fix | Delete

[179] Fix | Delete

public function isExeOnUpdateUserMeta() {

[180] Fix | Delete

return ($this->execute_on === BVProtectFWRule_V565::EXE_ON_UPDATE_USER_META);

[181] Fix | Delete

}

[182] Fix | Delete

[183] Fix | Delete

public function isExeOnAddOption() {

[184] Fix | Delete

return ($this->execute_on === BVProtectFWRule_V565::EXE_ON_ADD_OPTION);

[185] Fix | Delete

}

[186] Fix | Delete

[187] Fix | Delete

public function isExeOnWpPreInsertUserData() {

[188] Fix | Delete

return ($this->execute_on === BVProtectFWRule_V565::EXE_ON_WP_PRE_INSERT_USER_DATA);

[189] Fix | Delete

}

[190] Fix | Delete

}

[191] Fix | Delete

endif;

[192] Fix | Delete