Edit File by line

<?php

[0] Fix | Delete

[1] Fix | Delete

class wfCentralAPIRequest {

[2] Fix | Delete

/**

[3] Fix | Delete

* @var string

[4] Fix | Delete

[5] Fix | Delete

private $endpoint;

[6] Fix | Delete

/**

[7] Fix | Delete

* @var string

[8] Fix | Delete

[9] Fix | Delete

private $method;

[10] Fix | Delete

/**

[11] Fix | Delete

* @var null

[12] Fix | Delete

[13] Fix | Delete

private $token;

[14] Fix | Delete

/**

[15] Fix | Delete

* @var array

[16] Fix | Delete

[17] Fix | Delete

private $body;

[18] Fix | Delete

/**

[19] Fix | Delete

* @var array

[20] Fix | Delete

[21] Fix | Delete

private $args;

[22] Fix | Delete

[23] Fix | Delete

[24] Fix | Delete

/**

[25] Fix | Delete

* @param string $endpoint

[26] Fix | Delete

* @param string $method

[27] Fix | Delete

* @param string|null $token

[28] Fix | Delete

* @param array $body

[29] Fix | Delete

* @param array $args

[30] Fix | Delete

[31] Fix | Delete

public function __construct($endpoint, $method = 'GET', $token = null, $body = array(), $args = array()) {

[32] Fix | Delete

$this->endpoint = $endpoint;

[33] Fix | Delete

$this->method = $method;

[34] Fix | Delete

$this->token = $token;

[35] Fix | Delete

$this->body = $body;

[36] Fix | Delete

$this->args = $args;

[37] Fix | Delete

}

[38] Fix | Delete

[39] Fix | Delete

/**

[40] Fix | Delete

* Handles an internal error when making a Central API request (e.g., a second sodium_compat library with an

[41] Fix | Delete

* incompatible interface loading instead or in addition to ours).

[42] Fix | Delete

[43] Fix | Delete

* @param Exception|Throwable $e

[44] Fix | Delete

[45] Fix | Delete

public static function handleInternalCentralAPIError($e) {

[46] Fix | Delete

error_log('Wordfence encountered an internal Central API error: ' . $e->getMessage());

[47] Fix | Delete

error_log('Wordfence stack trace: ' . $e->getTraceAsString());

[48] Fix | Delete

}

[49] Fix | Delete

[50] Fix | Delete

public function execute() {

[51] Fix | Delete

$args = array(

[52] Fix | Delete

'timeout' => 10,

[53] Fix | Delete

);

[54] Fix | Delete

$args = wp_parse_args($this->getArgs(), $args);

[55] Fix | Delete

$args['method'] = $this->getMethod();

[56] Fix | Delete

if (empty($args['headers'])) {

[57] Fix | Delete

$args['headers'] = array();

[58] Fix | Delete

}

[59] Fix | Delete

[60] Fix | Delete

$token = $this->getToken();

[61] Fix | Delete

if ($token) {

[62] Fix | Delete

$args['headers']['Authorization'] = 'Bearer ' . $token;

[63] Fix | Delete

}

[64] Fix | Delete

if ($this->getBody()) {

[65] Fix | Delete

$args['headers']['Content-Type'] = 'application/json';

[66] Fix | Delete

$args['body'] = json_encode($this->getBody());

[67] Fix | Delete

}

[68] Fix | Delete

[69] Fix | Delete

$http = _wp_http_get_object();

[70] Fix | Delete

$response = $http->request(WORDFENCE_CENTRAL_API_URL_SEC . $this->getEndpoint(), $args);

[71] Fix | Delete

[72] Fix | Delete

if (!is_wp_error($response)) {

[73] Fix | Delete

$body = wp_remote_retrieve_body($response);

[74] Fix | Delete

$statusCode = wp_remote_retrieve_response_code($response);

[75] Fix | Delete

[76] Fix | Delete

// Check if site has been disconnected on Central's end, but the plugin is still trying to connect.

[77] Fix | Delete

if ($statusCode === 404 && strpos($body, 'Site has been disconnected') !== false) {

[78] Fix | Delete

// Increment attempt count.

[79] Fix | Delete

$centralDisconnectCount = get_site_transient('wordfenceCentralDisconnectCount');

[80] Fix | Delete

set_site_transient('wordfenceCentralDisconnectCount', ++$centralDisconnectCount, 86400);

[81] Fix | Delete

[82] Fix | Delete

// Once threshold is hit, disconnect Central.

[83] Fix | Delete

if ($centralDisconnectCount > 3) {

[84] Fix | Delete

wfRESTConfigController::disconnectConfig();

[85] Fix | Delete

}

[86] Fix | Delete

}

[87] Fix | Delete

}

[88] Fix | Delete

[89] Fix | Delete

return new wfCentralAPIResponse($response);

[90] Fix | Delete

}

[91] Fix | Delete

[92] Fix | Delete

/**

[93] Fix | Delete

* @return string

[94] Fix | Delete

[95] Fix | Delete

public function getEndpoint() {

[96] Fix | Delete

return $this->endpoint;

[97] Fix | Delete

}

[98] Fix | Delete

[99] Fix | Delete

/**

[100] Fix | Delete

* @param string $endpoint

[101] Fix | Delete

[102] Fix | Delete

public function setEndpoint($endpoint) {

[103] Fix | Delete

$this->endpoint = $endpoint;

[104] Fix | Delete

}

[105] Fix | Delete

[106] Fix | Delete

/**

[107] Fix | Delete

* @return string

[108] Fix | Delete

[109] Fix | Delete

public function getMethod() {

[110] Fix | Delete

return $this->method;

[111] Fix | Delete

}

[112] Fix | Delete

[113] Fix | Delete

/**

[114] Fix | Delete

* @param string $method

[115] Fix | Delete

[116] Fix | Delete

public function setMethod($method) {

[117] Fix | Delete

$this->method = $method;

[118] Fix | Delete

}

[119] Fix | Delete

[120] Fix | Delete

/**

[121] Fix | Delete

* @return null

[122] Fix | Delete

[123] Fix | Delete

public function getToken() {

[124] Fix | Delete

return $this->token;

[125] Fix | Delete

}

[126] Fix | Delete

[127] Fix | Delete

/**

[128] Fix | Delete

* @param null $token

[129] Fix | Delete

[130] Fix | Delete

public function setToken($token) {

[131] Fix | Delete

$this->token = $token;

[132] Fix | Delete

}

[133] Fix | Delete

[134] Fix | Delete

/**

[135] Fix | Delete

* @return array

[136] Fix | Delete

[137] Fix | Delete

public function getBody() {

[138] Fix | Delete

return $this->body;

[139] Fix | Delete

}

[140] Fix | Delete

[141] Fix | Delete

/**

[142] Fix | Delete

* @param array $body

[143] Fix | Delete

[144] Fix | Delete

public function setBody($body) {

[145] Fix | Delete

$this->body = $body;

[146] Fix | Delete

}

[147] Fix | Delete

[148] Fix | Delete

/**

[149] Fix | Delete

* @return array

[150] Fix | Delete

[151] Fix | Delete

public function getArgs() {

[152] Fix | Delete

return $this->args;

[153] Fix | Delete

}

[154] Fix | Delete

[155] Fix | Delete

/**

[156] Fix | Delete

* @param array $args

[157] Fix | Delete

[158] Fix | Delete

public function setArgs($args) {

[159] Fix | Delete

$this->args = $args;

[160] Fix | Delete

}

[161] Fix | Delete

}

[162] Fix | Delete

[163] Fix | Delete

class wfCentralAPIResponse {

[164] Fix | Delete

[165] Fix | Delete

public static function parseErrorJSON($json) {

[166] Fix | Delete

$data = json_decode($json, true);

[167] Fix | Delete

if (is_array($data) && array_key_exists('message', $data)) {

[168] Fix | Delete

return $data['message'];

[169] Fix | Delete

}

[170] Fix | Delete

return $json;

[171] Fix | Delete

}

[172] Fix | Delete

[173] Fix | Delete

/**

[174] Fix | Delete

* @var array|null

[175] Fix | Delete

[176] Fix | Delete

private $response;

[177] Fix | Delete

[178] Fix | Delete

/**

[179] Fix | Delete

* @param array $response

[180] Fix | Delete

[181] Fix | Delete

public function __construct($response = null) {

[182] Fix | Delete

$this->response = $response;

[183] Fix | Delete

}

[184] Fix | Delete

[185] Fix | Delete

public function getStatusCode() {

[186] Fix | Delete

return wp_remote_retrieve_response_code($this->getResponse());

[187] Fix | Delete

}

[188] Fix | Delete

[189] Fix | Delete

public function getBody() {

[190] Fix | Delete

return wp_remote_retrieve_body($this->getResponse());

[191] Fix | Delete

}

[192] Fix | Delete

[193] Fix | Delete

public function getJSONBody() {

[194] Fix | Delete

return json_decode($this->getBody(), true);

[195] Fix | Delete

}

[196] Fix | Delete

[197] Fix | Delete

public function isError() {

[198] Fix | Delete

if (is_wp_error($this->getResponse())) {

[199] Fix | Delete

return true;

[200] Fix | Delete

}

[201] Fix | Delete

$statusCode = $this->getStatusCode();

[202] Fix | Delete

return !($statusCode >= 200 && $statusCode < 300);

[203] Fix | Delete

}

[204] Fix | Delete

[205] Fix | Delete

public function returnErrorArray() {

[206] Fix | Delete

return array(

[207] Fix | Delete

'err' => 1,

[208] Fix | Delete

'errorMsg' => sprintf(

[209] Fix | Delete

/* translators: 1. HTTP status code. 2. Error message. */

[210] Fix | Delete

__('HTTP %1$d received from Wordfence Central: %2$s', 'wordfence'),

[211] Fix | Delete

$this->getStatusCode(), $this->parseErrorJSON($this->getBody())),

[212] Fix | Delete

);

[213] Fix | Delete

}

[214] Fix | Delete

[215] Fix | Delete

/**

[216] Fix | Delete

* @return array|null

[217] Fix | Delete

[218] Fix | Delete

public function getResponse() {

[219] Fix | Delete

return $this->response;

[220] Fix | Delete

}

[221] Fix | Delete

[222] Fix | Delete

/**

[223] Fix | Delete

* @param array|null $response

[224] Fix | Delete

[225] Fix | Delete

public function setResponse($response) {

[226] Fix | Delete

$this->response = $response;

[227] Fix | Delete

}

[228] Fix | Delete

}

[229] Fix | Delete

[230] Fix | Delete

[231] Fix | Delete

class wfCentralAuthenticatedAPIRequest extends wfCentralAPIRequest {

[232] Fix | Delete

[233] Fix | Delete

private $retries = 3;

[234] Fix | Delete

[235] Fix | Delete

/**

[236] Fix | Delete

* @param string $endpoint

[237] Fix | Delete

* @param string $method

[238] Fix | Delete

* @param array $body

[239] Fix | Delete

* @param array $args

[240] Fix | Delete

[241] Fix | Delete

public function __construct($endpoint, $method = 'GET', $body = array(), $args = array()) {

[242] Fix | Delete

parent::__construct($endpoint, $method, null, $body, $args);

[243] Fix | Delete

}

[244] Fix | Delete

[245] Fix | Delete

/**

[246] Fix | Delete

* @return mixed|null

[247] Fix | Delete

* @throws wfCentralAPIException

[248] Fix | Delete

[249] Fix | Delete

public function getToken() {

[250] Fix | Delete

$token = parent::getToken();

[251] Fix | Delete

if ($token) {

[252] Fix | Delete

return $token;

[253] Fix | Delete

}

[254] Fix | Delete

[255] Fix | Delete

$token = get_transient('wordfenceCentralJWT' . wfConfig::get('wordfenceCentralSiteID'));

[256] Fix | Delete

if ($token) {

[257] Fix | Delete

return $token;

[258] Fix | Delete

}

[259] Fix | Delete

[260] Fix | Delete

for ($i = 0; $i < $this->retries; $i++) {

[261] Fix | Delete

try {

[262] Fix | Delete

$token = $this->fetchToken();

[263] Fix | Delete

break;

[264] Fix | Delete

} catch (wfCentralConfigurationException $e) {

[265] Fix | Delete

wfConfig::set('wordfenceCentralConfigurationIssue', true);

[266] Fix | Delete

throw new wfCentralAPIException(__('Fetching token for Wordfence Central authentication due to configuration issue.', 'wordfence'));

[267] Fix | Delete

} catch (wfCentralAPIException $e) {

[268] Fix | Delete

continue;

[269] Fix | Delete

}

[270] Fix | Delete

}

[271] Fix | Delete

if (empty($token)) {

[272] Fix | Delete

if (isset($e)) {

[273] Fix | Delete

throw $e;

[274] Fix | Delete

} else {

[275] Fix | Delete

throw new wfCentralAPIException(__('Unable to authenticate with Wordfence Central.', 'wordfence'));

[276] Fix | Delete

}

[277] Fix | Delete

}

[278] Fix | Delete

$tokenContents = wfJWT::extractTokenContents($token);

[279] Fix | Delete

[280] Fix | Delete

if (!empty($tokenContents['body']['exp'])) {

[281] Fix | Delete

set_transient('wordfenceCentralJWT' . wfConfig::get('wordfenceCentralSiteID'), $token, $tokenContents['body']['exp'] - time());

[282] Fix | Delete

}

[283] Fix | Delete

wfConfig::set('wordfenceCentralConfigurationIssue', false);

[284] Fix | Delete

return $token;

[285] Fix | Delete

}

[286] Fix | Delete

[287] Fix | Delete

public function fetchToken() {

[288] Fix | Delete

require_once(WORDFENCE_PATH . '/lib/sodium_compat_fast.php');

[289] Fix | Delete

[290] Fix | Delete

$defaultArgs = array(

[291] Fix | Delete

'timeout' => 6,

[292] Fix | Delete

);

[293] Fix | Delete

$siteID = wfConfig::get('wordfenceCentralSiteID');

[294] Fix | Delete

if (!$siteID) {

[295] Fix | Delete

throw new wfCentralAPIException(__('Wordfence Central site ID has not been created yet.', 'wordfence'));

[296] Fix | Delete

}

[297] Fix | Delete

$secretKey = wfConfig::get('wordfenceCentralSecretKey');

[298] Fix | Delete

if (!$secretKey) {

[299] Fix | Delete

throw new wfCentralAPIException(__('Wordfence Central secret key has not been created yet.', 'wordfence'));

[300] Fix | Delete

}

[301] Fix | Delete

[302] Fix | Delete

// Pull down nonce.

[303] Fix | Delete

$request = new wfCentralAPIRequest(sprintf('/site/%s/login', $siteID), 'GET', null, array(), $defaultArgs);

[304] Fix | Delete

$nonceResponse = $request->execute();

[305] Fix | Delete

if ($nonceResponse->isError()) {

[306] Fix | Delete

$errorArray = $nonceResponse->returnErrorArray();

[307] Fix | Delete

throw new wfCentralAPIException($errorArray['errorMsg']);

[308] Fix | Delete

}

[309] Fix | Delete

$body = $nonceResponse->getJSONBody();

[310] Fix | Delete

if (!is_array($body) || !isset($body['nonce'])) {

[311] Fix | Delete

throw new wfCentralAPIException(__('Invalid response received from Wordfence Central when fetching nonce.', 'wordfence'));

[312] Fix | Delete

}

[313] Fix | Delete

$nonce = $body['nonce'];

[314] Fix | Delete

[315] Fix | Delete

// Sign nonce to pull down JWT.

[316] Fix | Delete

$data = $nonce . '|' . $siteID;

[317] Fix | Delete

try {

[318] Fix | Delete

$signature = ParagonIE_Sodium_Compat::crypto_sign_detached($data, $secretKey);

[319] Fix | Delete

}

[320] Fix | Delete

catch (SodiumException $e) {

[321] Fix | Delete

throw new wfCentralConfigurationException('Signing failed, likely due to malformed secret key', $e);

[322] Fix | Delete

}

[323] Fix | Delete

$request = new wfCentralAPIRequest(sprintf('/site/%s/login', $siteID), 'POST', null, array(

[324] Fix | Delete

'data' => $data,

[325] Fix | Delete

'signature' => ParagonIE_Sodium_Compat::bin2hex($signature),

[326] Fix | Delete

), $defaultArgs);

[327] Fix | Delete

$authResponse = $request->execute();

[328] Fix | Delete

if ($authResponse->isError()) {

[329] Fix | Delete

$errorArray = $authResponse->returnErrorArray();

[330] Fix | Delete

throw new wfCentralAPIException($errorArray['errorMsg']);

[331] Fix | Delete

}

[332] Fix | Delete

$body = $authResponse->getJSONBody();

[333] Fix | Delete

if (!is_array($body)) {

[334] Fix | Delete

throw new wfCentralAPIException(__('Invalid response received from Wordfence Central when fetching token.', 'wordfence'));

[335] Fix | Delete

}

[336] Fix | Delete

if (!isset($body['jwt'])) { // Possible authentication error.

[337] Fix | Delete

throw new wfCentralAPIException(__('Unable to authenticate with Wordfence Central.', 'wordfence'));

[338] Fix | Delete

}

[339] Fix | Delete

return $body['jwt'];

[340] Fix | Delete

}

[341] Fix | Delete

}

[342] Fix | Delete

[343] Fix | Delete

class wfCentralAPIException extends Exception {

[344] Fix | Delete

[345] Fix | Delete

}

[346] Fix | Delete

[347] Fix | Delete

class wfCentralConfigurationException extends RuntimeException {

[348] Fix | Delete

[349] Fix | Delete

public function __construct($message, $previous = null) {

[350] Fix | Delete

parent::__construct($message, 0, $previous);

[351] Fix | Delete

}

[352] Fix | Delete

[353] Fix | Delete

}

[354] Fix | Delete

[355] Fix | Delete

class wfCentral {

[356] Fix | Delete

[357] Fix | Delete

/**

[358] Fix | Delete

* @return bool

[359] Fix | Delete

[360] Fix | Delete

public static function isSupported() {

[361] Fix | Delete

return function_exists('register_rest_route') && version_compare(phpversion(), '5.3', '>=');

[362] Fix | Delete

}

[363] Fix | Delete

[364] Fix | Delete

/**

[365] Fix | Delete

* @return bool

[366] Fix | Delete

[367] Fix | Delete

public static function isConnected() {

[368] Fix | Delete

return self::isSupported() && ((bool) self::_isConnected());

[369] Fix | Delete

}

[370] Fix | Delete

[371] Fix | Delete

/**

[372] Fix | Delete

* @return bool

[373] Fix | Delete

[374] Fix | Delete

public static function isPartialConnection() {

[375] Fix | Delete

return !self::_isConnected() && wfConfig::get('wordfenceCentralSiteID');

[376] Fix | Delete

}

[377] Fix | Delete

[378] Fix | Delete

public static function _isConnected($forceUpdate = false) {

[379] Fix | Delete

static $isConnected;

[380] Fix | Delete

if (!isset($isConnected) || $forceUpdate) {

[381] Fix | Delete

$isConnected = wfConfig::get('wordfenceCentralConnected', false);

[382] Fix | Delete

}

[383] Fix | Delete

return $isConnected;

[384] Fix | Delete

}

[385] Fix | Delete

[386] Fix | Delete

/**

[387] Fix | Delete

* @param array $issue

[388] Fix | Delete

* @return bool|wfCentralAPIResponse

[389] Fix | Delete

[390] Fix | Delete

public static function sendIssue($issue) {

[391] Fix | Delete

return self::sendIssues(array($issue));

[392] Fix | Delete

}

[393] Fix | Delete

[394] Fix | Delete

/**

[395] Fix | Delete

* @param $issues

[396] Fix | Delete

* @return bool|wfCentralAPIResponse

[397] Fix | Delete

[398] Fix | Delete

public static function sendIssues($issues) {

[399] Fix | Delete

$data = array();

[400] Fix | Delete

foreach ($issues as $issue) {

[401] Fix | Delete

$issueData = array(

[402] Fix | Delete

'type' => 'issue',

[403] Fix | Delete

'attributes' => $issue,

[404] Fix | Delete

);

[405] Fix | Delete

if (array_key_exists('id', $issueData)) {

[406] Fix | Delete

$issueData['id'] = $issue['id'];

[407] Fix | Delete

}

[408] Fix | Delete

$data[] = $issueData;

[409] Fix | Delete

}

[410] Fix | Delete

[411] Fix | Delete

$siteID = wfConfig::get('wordfenceCentralSiteID');

[412] Fix | Delete

$request = new wfCentralAuthenticatedAPIRequest('/site/' . $siteID . '/issues', 'POST', array(

[413] Fix | Delete

'data' => $data,

[414] Fix | Delete

));

[415] Fix | Delete

try {

[416] Fix | Delete

$response = $request->execute();

[417] Fix | Delete

return $response;

[418] Fix | Delete

}

[419] Fix | Delete

catch (wfCentralAPIException $e) {

[420] Fix | Delete

error_log($e);

[421] Fix | Delete

}

[422] Fix | Delete

catch (Exception $e) {

[423] Fix | Delete

wfCentralAPIRequest::handleInternalCentralAPIError($e);

[424] Fix | Delete

}

[425] Fix | Delete

catch (Throwable $t) {

[426] Fix | Delete

wfCentralAPIRequest::handleInternalCentralAPIError($t);

[427] Fix | Delete

}

[428] Fix | Delete

return false;

[429] Fix | Delete

}

[430] Fix | Delete

[431] Fix | Delete

/**

[432] Fix | Delete

* @param int $issueID

[433] Fix | Delete

* @return bool|wfCentralAPIResponse

[434] Fix | Delete

[435] Fix | Delete

public static function deleteIssue($issueID) {

[436] Fix | Delete

return self::deleteIssues(array($issueID));

[437] Fix | Delete

}

[438] Fix | Delete

[439] Fix | Delete

/**

[440] Fix | Delete

* @param $issues

[441] Fix | Delete

* @return bool|wfCentralAPIResponse

[442] Fix | Delete

[443] Fix | Delete

public static function deleteIssues($issues) {

[444] Fix | Delete

$siteID = wfConfig::get('wordfenceCentralSiteID');

[445] Fix | Delete

$request = new wfCentralAuthenticatedAPIRequest('/site/' . $siteID . '/issues', 'DELETE', array(

[446] Fix | Delete

'data' => array(

[447] Fix | Delete

'type' => 'issue-list',

[448] Fix | Delete

'attributes' => array(

[449] Fix | Delete

'ids' => $issues,

[450] Fix | Delete

)

[451] Fix | Delete

[452] Fix | Delete

));

[453] Fix | Delete

try {

[454] Fix | Delete

$response = $request->execute();

[455] Fix | Delete

return $response;

[456] Fix | Delete

}

[457] Fix | Delete

catch (wfCentralAPIException $e) {

[458] Fix | Delete

error_log($e);

[459] Fix | Delete

}

[460] Fix | Delete

catch (Exception $e) {

[461] Fix | Delete

wfCentralAPIRequest::handleInternalCentralAPIError($e);

[462] Fix | Delete

}

[463] Fix | Delete

catch (Throwable $t) {

[464] Fix | Delete

wfCentralAPIRequest::handleInternalCentralAPIError($t);

[465] Fix | Delete

}

[466] Fix | Delete

return false;

[467] Fix | Delete

}

[468] Fix | Delete

[469] Fix | Delete

/**

[470] Fix | Delete

* @return bool|wfCentralAPIResponse

[471] Fix | Delete

[472] Fix | Delete

public static function deleteNewIssues() {

[473] Fix | Delete

$siteID = wfConfig::get('wordfenceCentralSiteID');

[474] Fix | Delete

$request = new wfCentralAuthenticatedAPIRequest('/site/' . $siteID . '/issues', 'DELETE', array(

[475] Fix | Delete

'data' => array(

[476] Fix | Delete

'type' => 'issue-list',

[477] Fix | Delete

'attributes' => array(

[478] Fix | Delete

'status' => 'new',

[479] Fix | Delete

)

[480] Fix | Delete

[481] Fix | Delete

));

[482] Fix | Delete

try {

[483] Fix | Delete

$response = $request->execute();

[484] Fix | Delete

return $response;

[485] Fix | Delete

}

[486] Fix | Delete

catch (wfCentralAPIException $e) {

[487] Fix | Delete

error_log($e);

[488] Fix | Delete

}

[489] Fix | Delete

catch (Exception $e) {

[490] Fix | Delete

wfCentralAPIRequest::handleInternalCentralAPIError($e);

[491] Fix | Delete

}

[492] Fix | Delete

catch (Throwable $t) {

[493] Fix | Delete

wfCentralAPIRequest::handleInternalCentralAPIError($t);

[494] Fix | Delete

}

[495] Fix | Delete

return false;

[496] Fix | Delete

}

[497] Fix | Delete

[498] Fix | Delete

/**

[499] Fix | Delete