: str_replace(): Passing null to parameter #2 ($replace) of type array|string is deprecated in
var __ = window.wfi18n.__;
var sprintf = window.wfi18n.sprintf;
LiveTrafficViewModel = function(listings, filters) {
self.listings = ko.observableArray(listings);
self.listings.subscribe(function(items) {
for (var i = 0; i < items.length; i++) {
listingIDTable[items[i].id()] = 1;
self.hasListing = function(id) {
return id in listingIDTable;
self.filters = ko.observableArray(filters);
var urlGroupBy = new GroupByModel('url', __('URL'));
new GroupByModel('type', __('Type')),
new GroupByModel('user_login', __('Username')),
new GroupByModel('statusCode', __('HTTP Response Code')),
new GroupByModel('action', __('Firewall Response'), 'enum', ['ok', 'throttled', 'lockedOut', 'blocked', 'blocked:waf']),
new GroupByModel('ip', __('IP')),
self.presetFiltersOptions = ko.observableArray([
new PresetFilterModel(__('All Hits'), "all", []),
new PresetFilterModel(__('Humans'), "humans", [new ListingsFilterModel(self, 'type', 'human')]),
new PresetFilterModel(__('Registered Users'), "users", [new ListingsFilterModel(self, 'userID', '0', '!=')]),
new PresetFilterModel(__('Crawlers'), "crawlers", [new ListingsFilterModel(self, 'type', 'bot')]),
new PresetFilterModel(__('Google Crawlers'), "google", [new ListingsFilterModel(self, 'isGoogle', '1')]),
new PresetFilterModel(__('Pages Not Found'), "404s", [new ListingsFilterModel(self, 'statusCode', '404')]),
new PresetFilterModel(__('Logins and Logouts'), "logins", [
new ListingsFilterModel(self, 'action', 'login', 'contains'),
new ListingsFilterModel(self, 'action', 'logout', 'contains')
//new PresetFilterModel('Top Consumers', "top_consumers", [new ListingsFilterModel(self, 'statusCode', '200')], urlGroupBy),
//new PresetFilterModel('Top 404s', "top_404s", [new ListingsFilterModel(self, 'statusCode', '404')], urlGroupBy),
new PresetFilterModel(__('Locked Out'), "lockedOut", [new ListingsFilterModel(self, 'action', 'lockedOut')]),
new PresetFilterModel(__('Blocked'), "blocked", [new ListingsFilterModel(self, 'action', 'blocked', 'contains')]),
new PresetFilterModel(__('Blocked By Firewall'), "blocked:waf", [new ListingsFilterModel(self, 'action', 'blocked:waf')])
self.showAdvancedFilters = ko.observable(false);
self.showAdvancedFilters.subscribe(function(val) {
if (val && self.filters().length == 0) {
self.presetFiltersOptionsText = function(item) {
self.selectedPresetFilter = ko.observable();
self.selectedPresetFilter.subscribe(function(item) {
var clonedFilters = ko.toJS(item.filters());
for (var i = 0; i < clonedFilters.length; i++) {
newFilters.push(new ListingsFilterModel(self, clonedFilters[i].param, clonedFilters[i].value, clonedFilters[i].operator));
self.filters(newFilters);
self.groupBy(item.groupBy());
self.filters.subscribe(function() {
self.checkQueryAndReloadListings();
self.addFilter = function() {
self.filters.push(new ListingsFilterModel(self));
self.removeFilter = function(item) {
self.filters.remove(item);
var currentFilterQuery = '';
var getURLEncodedFilters = function() {
ko.utils.arrayForEach(self.filters(), function(filter) {
if (filter.getValue() !== false) {
dataString += filter.urlEncoded() + '&';
var groupBy = self.groupBy();
dataString += 'groupby=' + encodeURIComponent(groupBy.param()) + '&';
var startDate = self.startDate();
dataString += 'startDate=' + encodeURIComponent(startDate) + '&';
var endDate = self.endDate();
dataString += 'endDate=' + encodeURIComponent(endDate) + '&';
if (dataString.length > 1) {
return dataString.substring(0, dataString.length - 1);
self.filterGroupByOptions = ko.observableArray(groupBys);
self.filterGroupByOptionsText = function(item) {
return item.text() || item.param();
self.groupBy = ko.observable();
self.groupBy.subscribe(function() {
self.checkQueryAndReloadListings();
self.startDate = ko.observable();
self.startDate.subscribe(function() {
// console.log('start date change ' + self.startDate());
self.checkQueryAndReloadListings();
self.endDate = ko.observable();
self.endDate.subscribe(function() {
// console.log('end date change ' + self.endDate());
self.checkQueryAndReloadListings();
* Pulls down fresh traffic data and resets the list.
self.checkQueryAndReloadListings = function(options) {
if (currentFilterQuery !== getURLEncodedFilters()) {
self.reloadListings(options);
self.reloadListings = function(options) {
pullDownListings(options, function(listings) {
var groupByKO = self.groupBy();
groupBy = groupByKO.param();
WFAD.mode = 'liveTraffic_paused';
WFAD.mode = 'liveTraffic';
for (var i = 0; i < listings.length; i++) {
newListings.push(new ListingModel(listings[i], groupBy));
self.listings(newListings);
* Used in the infinite scroll
self.loadNextListings = function(callback) {
var lastTimestamp = self.filters[0];
offset: self.listings().length
self.appendListings.apply(this, arguments);
typeof callback === 'function' && callback.apply(this, arguments);
self.getCurrentQueryString = function(options) {
for (var prop in queryOptions) {
if (queryOptions.hasOwnProperty(prop) && options && prop in options) {
queryOptions[prop] = options[prop];
currentFilterQuery = getURLEncodedFilters();
var data = currentFilterQuery;
for (prop in queryOptions) {
if (queryOptions.hasOwnProperty(prop)) {
var val = queryOptions[prop];
if (val === null || val === undefined) {
data += '&' + encodeURIComponent(prop) + '=' + encodeURIComponent(val);
var pullDownListings = function(options, callback) {
var data = self.getCurrentQueryString(options);
WFAD.ajax('wordfence_loadLiveTraffic', data, function(response) {
if (!response || !response.success) {
callback && callback(response.data, response);
self.prependListings = function(listings, response) {
for (var i = listings.length - 1; i >= 0; i--) {
if (self.hasListing(listings[i].id)) {
var listing = new ListingModel(listings[i]);
listing.highlighted(true);
self.listings.unshift(listing);
//self.listings.sort(function(a, b) {
// if (a.ctime() < b.ctime()) {
// } else if (a.ctime() > b.ctime()) {
self.appendListings = function(listings, response) {
for (var i = 0; i < listings.length; i++) {
if (self.hasListing(listings[i].id)) {
var listing = new ListingModel(listings[i]);
listing.highlighted(highlight-- > 0);
self.listings.push(listing);
//self.listings.sort(function(a, b) {
// if (a.ctime() < b.ctime()) {
// } else if (a.ctime() > b.ctime()) {
self.whitelistWAFParamKey = function(path, paramKey, failedRules) {
WFAD.ajax('wordfence_whitelistWAFParamKey', {
self.trimIP = function(ip) {
if (ip && ip.length > 16) {
return ip.substring(0, 16) + "\u2026";
$(window).on('wf-live-traffic-ip-blocked', function(e, ip) {
ko.utils.arrayForEach(self.listings(), function(listing) {
if (listing.IP() === ip) {
}).on('wf-live-traffic-ip-unblocked', function(e, ip) {
ko.utils.arrayForEach(self.listings(), function(listing) {
if (listing.IP() === ip) {
// For debuggering-a-ding
self.sql = ko.observable('');
LiveTrafficViewModel.truncateText = function(text, maxLength) {
maxLength = maxLength || 100;
if (text && text.length > maxLength) {
return text.substring(0, Math.round(maxLength)) + "\u2026";
// return text.substring(0, Math.round(maxLength / 2)) + " ... " + text.substring(text.length - Math.round(maxLength / 2));
var ListingModel = function(data, groupBy) {
self.id = ko.observable(0);
self.ctime = ko.observable(0);
self.IP = ko.observable('');
self.jsRun = ko.observable(0);
self.statusCode = ko.observable(200);
self.isGoogle = ko.observable(0);
self.userID = ko.observable(0);
self.URL = ko.observable('');
self.referer = ko.observable('');
self.UA = ko.observable('');
self.loc = ko.observable();
self.type = ko.observable('');
self.blocked = ko.observable(false);
self.rangeBlocked = ko.observable(false);
self.ipRangeID = ko.observable(-1);
self.extReferer = ko.observable();
self.browser = ko.observable();
self.user = ko.observable();
self.hitCount = ko.observable();
self.username = ko.observable('');
self.action = ko.observable('');
self.actionDescription = ko.observable(false);
self.actionData = ko.observable();
self.highlighted = ko.observable(false);
self.showDetails = ko.observable(false);
self.toggleDetails = function() {
self.showDetails(!self.showDetails());
//self.highlighted.subscribe(function(val) {
// _classes += ' highlighted';
// self.cssClasses(_classes);
// _classes.replace(/ highlighted(\s*|$)/, ' ');
// self.cssClasses(_classes);
if (data.hasOwnProperty(prop)) {
if (prop === 'blocked' || prop === 'rangeBlocked') {
data[prop] = !!data[prop];
self[prop] !== undefined && self[prop](data[prop]);
if (data['lastHit'] !== undefined) {
self['ctime'](data['lastHit']);
self.timestamp = ko.pureComputed(function() {
var date = new Date(self.ctime() * 1000);
return date.toLocaleDateString() + ' ' + date.toLocaleTimeString();
// Use the same format as these update.
self.timeAgo = ko.pureComputed(function() {
var serverTime = WFAD.serverMicrotime;
return $(WFAD.showTimestamp(this.ctime(), serverTime)).text();
self.displayURL = ko.pureComputed(function() {
return LiveTrafficViewModel.truncateText(self.URL(), 105);
self.displayURLShort = ko.pureComputed(function() {
var a = document.createElement('a');
if (a.host !== location.host) {
return LiveTrafficViewModel.truncateText(self.URL(), 30);
var url = a.pathname + (typeof a.search === 'string' ? a.search : '');
return LiveTrafficViewModel.truncateText(url, 30);
self.firewallAction = ko.pureComputed(function() {
//Grouped by firewall action listing
if (groupBy == 'action') {
return __('Locked out from logging in');
case 'blocked:waf-always':
return __('Blocked by the Wordfence Application Firewall and plugin settings');
case 'blocked:wordfence':
return __('Blocked by Wordfence plugin settings');
case 'blocked:wfsnrepeat':
return __('Blocked by the Wordfence Security Network');
return __('Blocked by the Wordfence Web Application Firewall');
return __('Redirected by Country Blocking bypass URL');
return __('Blocked by Wordfence');
return __('locked out from logging in');
case 'blocked:waf-always':
case 'blocked:wordfence':
case 'blocked:wfsnrepeat':
desc = self.actionDescription();
if (desc && desc.toLowerCase().indexOf('block') === 0) {
return 'b' + desc.substring(1);
return sprintf(__('blocked for %s'), desc);
return __('blocked by the Wordfence Security Network');
var data = self.actionData();
if (typeof data === 'object') {
var paramKey = data.paramKey ? WFAD.base64_decode(data.paramKey) : null;
var paramValue = data.paramKey ? WFAD.base64_decode(data.paramValue) : null;
// var category = data.category;
var matches = paramKey !== null && paramKey.match(/([a-z0-9_]+\.[a-z0-9_]+)(?:\[(.+?)\](.*))?/i);
desc = self.actionDescription();
case 'request.queryString':
desc = sprintf(__('%s in query string: %s'), self.actionDescription(), matches[2] + '=' + LiveTrafficViewModel.truncateText(encodeURIComponent(paramValue)));
desc = sprintf(__('%s in POST body: %s'), self.actionDescription(), matches[2] + '=' + LiveTrafficViewModel.truncateText(encodeURIComponent(paramValue)));
desc = sprintf(__('%s in cookie: %s'), self.actionDescription(), matches[2] + '=' + LiveTrafficViewModel.truncateText(encodeURIComponent(paramValue)));
case 'request.fileNames':
desc = sprintf(__('%s in file: %s'), self.actionDescription(), matches[2] + '=' + LiveTrafficViewModel.truncateText(encodeURIComponent(paramValue)));
return sprintf(__('blocked by firewall for %s'), desc);
if (data.failedRules == 'blocked') {
return __('blocked by real-time IP blocklist');
return __('blocked by firewall');
return sprintf(__('blocked by firewall for %s'), self.actionDescription());
desc = self.actionDescription();
self.cssClasses = ko.pureComputed(function() {
var classes = 'wf-live-traffic-hit-type';
if (self.statusCode() == 403 || self.statusCode() == 503) {
classes += ' wfActionBlocked';
if (self.statusCode() == 404) {
if (self.actionData() && self.actionData().learningMode) {
classes += ' wfWAFLearningMode';
if (self.action() == 'loginFailValidUsername' || self.action() == 'loginFailInvalidUsername') {
classes += ' wfFailedLogin';
// if (self.highlighted()) {
// classes += ' highlighted';
self.typeIconClass = ko.pureComputed(function() {
var classes = 'wf-live-traffic-type-icon';
if (self.statusCode() == 403 || self.statusCode() == 503) {
classes += ' wf-icon-blocked wf-ion-android-cancel';
} else if (self.statusCode() == 404 || self.action() == 'loginFailValidUsername' || self.action() == 'loginFailInvalidUsername') {
classes += ' wf-icon-warning wf-ion-alert-circled';
} else if (self.jsRun() == 1) {
classes += ' wf-icon-human wf-ion-ios-person';