Edit File by line

<?php

[0] Fix | Delete

[1] Fix | Delete

require_once(dirname(__FILE__) . '/wfRESTBaseController.php');

[2] Fix | Delete

[3] Fix | Delete

class wfRESTScanController extends wfRESTBaseController {

[4] Fix | Delete

[5] Fix | Delete

/**

[6] Fix | Delete

* @todo Setup routes to modify scan results.

[7] Fix | Delete

[8] Fix | Delete

public function registerRoutes() {

[9] Fix | Delete

register_rest_route('wordfence/v1', '/scan/issues', array(

[10] Fix | Delete

'methods' => WP_REST_Server::READABLE,

[11] Fix | Delete

'callback' => array($this, 'getIssuesList'),

[12] Fix | Delete

'permission_callback' => array($this, 'verifyToken'),

[13] Fix | Delete

'group' => array(

[14] Fix | Delete

'description' => __('Scan result group or all results.', 'wordfence'),

[15] Fix | Delete

'type' => 'string',

[16] Fix | Delete

'required' => false,

[17] Fix | Delete

[18] Fix | Delete

'offset' => array(

[19] Fix | Delete

'description' => __('Offset of scan results to return.', 'wordfence'),

[20] Fix | Delete

'type' => 'int',

[21] Fix | Delete

'required' => false,

[22] Fix | Delete

[23] Fix | Delete

'limit' => array(

[24] Fix | Delete

'description' => __('Number of scan results to return.', 'wordfence'),

[25] Fix | Delete

'type' => 'int',

[26] Fix | Delete

'required' => false,

[27] Fix | Delete

[28] Fix | Delete

));

[29] Fix | Delete

register_rest_route('wordfence/v1', '/scan', array(

[30] Fix | Delete

'methods' => WP_REST_Server::CREATABLE,

[31] Fix | Delete

'callback' => array($this, 'startScan'),

[32] Fix | Delete

'permission_callback' => array($this, 'verifyToken'),

[33] Fix | Delete

));

[34] Fix | Delete

register_rest_route('wordfence/v1', '/scan', array(

[35] Fix | Delete

'methods' => WP_REST_Server::DELETABLE,

[36] Fix | Delete

'callback' => array($this, 'stopScan'),

[37] Fix | Delete

'permission_callback' => array($this, 'verifyToken'),

[38] Fix | Delete

));

[39] Fix | Delete

register_rest_route('wordfence/v1', '/scan/issue', array(

[40] Fix | Delete

'methods' => WP_REST_Server::EDITABLE,

[41] Fix | Delete

'callback' => array($this, 'updateIssue'),

[42] Fix | Delete

'permission_callback' => array($this, 'verifyToken'),

[43] Fix | Delete

));

[44] Fix | Delete

}

[45] Fix | Delete

[46] Fix | Delete

/**

[47] Fix | Delete

* @param WP_REST_Request $request

[48] Fix | Delete

* @return mixed|WP_REST_Response

[49] Fix | Delete

[50] Fix | Delete

public function getIssuesList($request) {

[51] Fix | Delete

$group = $request['group'] ? $request['group'] : 'all';

[52] Fix | Delete

$offset = absint($request['offset']);

[53] Fix | Delete

$limit = absint($request['limit']);

[54] Fix | Delete

if ($limit === 0) {

[55] Fix | Delete

$limit = 100;

[56] Fix | Delete

}

[57] Fix | Delete

switch ($group) {

[58] Fix | Delete

case 'pending':

[59] Fix | Delete

$count = wfIssues::shared()->getPendingIssueCount();

[60] Fix | Delete

$issues = wfIssues::shared()->getPendingIssues($offset, $limit);

[61] Fix | Delete

break;

[62] Fix | Delete

[63] Fix | Delete

default: // Return all issues.

[64] Fix | Delete

$count = wfIssues::shared()->getIssueCount();

[65] Fix | Delete

$issues = wfIssues::shared()->getIssues($offset, $limit);

[66] Fix | Delete

break;

[67] Fix | Delete

}

[68] Fix | Delete

[69] Fix | Delete

$response = rest_ensure_response(array(

[70] Fix | Delete

'count' => $count,

[71] Fix | Delete

'last-scan-time' => wfConfig::get('scanTime'),

[72] Fix | Delete

'issues' => $issues,

[73] Fix | Delete

));

[74] Fix | Delete

return $response;

[75] Fix | Delete

}

[76] Fix | Delete

[77] Fix | Delete

/**

[78] Fix | Delete

* @param WP_REST_Request $request

[79] Fix | Delete

* @return mixed|WP_REST_Response

[80] Fix | Delete

[81] Fix | Delete

public function startScan($request) {

[82] Fix | Delete

wordfence::status(1, 'info', sprintf(/* translators: Localized date. */ __('Wordfence scan starting at %s from Wordfence Central', 'wordfence'),

[83] Fix | Delete

date('l jS \of F Y h:i:s A', current_time('timestamp'))));

[84] Fix | Delete

[85] Fix | Delete

try {

[86] Fix | Delete

wfScanEngine::startScan();

[87] Fix | Delete

[88] Fix | Delete

} catch (wfScanEngineTestCallbackFailedException $e) {

[89] Fix | Delete

wfConfig::set('lastScanCompleted', $e->getMessage());

[90] Fix | Delete

wfConfig::set('lastScanFailureType', wfIssues::SCAN_FAILED_CALLBACK_TEST_FAILED);

[91] Fix | Delete

wfUtils::clearScanLock();

[92] Fix | Delete

$response = rest_ensure_response(array(

[93] Fix | Delete

'success' => false,

[94] Fix | Delete

'error-code' => $e->getCode(),

[95] Fix | Delete

'error' => $e->getMessage(),

[96] Fix | Delete

));

[97] Fix | Delete

return $response;

[98] Fix | Delete

[99] Fix | Delete

} catch (Exception $e) {

[100] Fix | Delete

if ($e->getCode() != wfScanEngine::SCAN_MANUALLY_KILLED) {

[101] Fix | Delete

wfConfig::set('lastScanCompleted', $e->getMessage());

[102] Fix | Delete

wfConfig::set('lastScanFailureType', wfIssues::SCAN_FAILED_GENERAL);

[103] Fix | Delete

[104] Fix | Delete

$response = rest_ensure_response(array(

[105] Fix | Delete

'success' => false,

[106] Fix | Delete

'error-code' => $e->getCode(),

[107] Fix | Delete

'error' => $e->getMessage(),

[108] Fix | Delete

));

[109] Fix | Delete

return $response;

[110] Fix | Delete

}

[111] Fix | Delete

}

[112] Fix | Delete

[113] Fix | Delete

$response = rest_ensure_response(array(

[114] Fix | Delete

'success' => true,

[115] Fix | Delete

));

[116] Fix | Delete

return $response;

[117] Fix | Delete

[118] Fix | Delete

}

[119] Fix | Delete

[120] Fix | Delete

/**

[121] Fix | Delete

* @param WP_REST_Request $request

[122] Fix | Delete

* @return mixed|WP_REST_Response

[123] Fix | Delete

[124] Fix | Delete

public function stopScan($request) {

[125] Fix | Delete

wordfence::status(1, 'info', __('Scan stop request received from Wordfence Central.', 'wordfence'));

[126] Fix | Delete

wordfence::status(10, 'info', __('SUM_KILLED:A request was received to stop the previous scan from Wordfence Central.', 'wordfence'));

[127] Fix | Delete

wfUtils::clearScanLock(); //Clear the lock now because there may not be a scan running to pick up the kill request and clear the lock

[128] Fix | Delete

wfScanEngine::requestKill();

[129] Fix | Delete

wfConfig::remove('scanStartAttempt');

[130] Fix | Delete

wfConfig::set('lastScanFailureType', false);

[131] Fix | Delete

$response = rest_ensure_response(array(

[132] Fix | Delete

'success' => true,

[133] Fix | Delete

));

[134] Fix | Delete

return $response;

[135] Fix | Delete

}

[136] Fix | Delete

[137] Fix | Delete

/**

[138] Fix | Delete

* @param WP_REST_Request $request

[139] Fix | Delete

* @return mixed|WP_REST_Response

[140] Fix | Delete

[141] Fix | Delete

public function updateIssue($request) {

[142] Fix | Delete

$issue = $request['issue'];

[143] Fix | Delete

$id = is_array($issue) && array_key_exists('id', $issue) ? $issue['id'] : null;

[144] Fix | Delete

$status = is_array($issue) && array_key_exists('status', $issue) ? $issue['status'] : null;

[145] Fix | Delete

[146] Fix | Delete

if ($id) {

[147] Fix | Delete

$wfdb = new wfDB();

[148] Fix | Delete

$wfdb->queryWrite("update " . wfDB::networkTable('wfIssues') . " set status='%s' where id=%d", $status, $id);

[149] Fix | Delete

$response = rest_ensure_response(array(

[150] Fix | Delete

'success' => true,

[151] Fix | Delete

));

[152] Fix | Delete

return $response;

[153] Fix | Delete

}

[154] Fix | Delete

$response = rest_ensure_response(array(

[155] Fix | Delete

'success' => false,

[156] Fix | Delete

'error' => 'Issue not found.',

[157] Fix | Delete

));

[158] Fix | Delete

return $response;

[159] Fix | Delete

[160] Fix | Delete

}

[161] Fix | Delete

}

[162] Fix | Delete