<?php

[0] Fix | Delete

[1] Fix | Delete

require_once __DIR__ . '/wfWebsite.php';

[2] Fix | Delete

[3] Fix | Delete

class wfLicense {

[4] Fix | Delete

[5] Fix | Delete

const TYPE_FREE = 'free';

[6] Fix | Delete

const TYPE_PREMIUM = 'premium';

[7] Fix | Delete

const TYPE_CARE = 'care';

[8] Fix | Delete

const TYPE_RESPONSE = 'response';

[9] Fix | Delete

[10] Fix | Delete

const KEY_TYPE_FREE = 'free';

[11] Fix | Delete

const KEY_TYPE_PAID_CURRENT = 'paid-current';

[12] Fix | Delete

const KEY_TYPE_PAID_EXPIRED = 'paid-expired';

[13] Fix | Delete

const KEY_TYPE_PAID_DELETED = 'paid-deleted';

[14] Fix | Delete

[15] Fix | Delete

const CONFIG_API_KEY = 'apiKey';

[16] Fix | Delete

const CONFIG_REMAINING_DAYS = 'keyExpDays';

[17] Fix | Delete

const CONFIG_PAID = 'isPaid';

[18] Fix | Delete

const CONFIG_KEY_TYPE = 'keyType';

[19] Fix | Delete

const CONFIG_HAS_KEY_CONFLICT = 'hasKeyConflict';

[20] Fix | Delete

const CONFIG_TYPE = 'licenseType';

[21] Fix | Delete

[22] Fix | Delete

const REGISTRATION_PAYLOAD_VERSION = 1;

[23] Fix | Delete

[24] Fix | Delete

private static $TYPES = array(

[25] Fix | Delete

self::TYPE_FREE,

[26] Fix | Delete

self::TYPE_PREMIUM,

[27] Fix | Delete

self::TYPE_CARE,

[28] Fix | Delete

self::TYPE_RESPONSE

[29] Fix | Delete

);

[30] Fix | Delete

[31] Fix | Delete

private static $reflectionClass = null;

[32] Fix | Delete

private static $current = null;

[33] Fix | Delete

[34] Fix | Delete

private $apiKey;

[35] Fix | Delete

private $paid;

[36] Fix | Delete

private $type;

[37] Fix | Delete

private $remainingDays;

[38] Fix | Delete

private $conflicting;

[39] Fix | Delete

private $deleted;

[40] Fix | Delete

private $keyType;

[41] Fix | Delete

[42] Fix | Delete

/**

[43] Fix | Delete

* @param string $apiKey

[44] Fix | Delete

* @param bool $paid whether or not this is a paid license

[45] Fix | Delete

* @param ?string $type the license type (@see self::$TYPES)

[46] Fix | Delete

* @param int $remainingDays the number of days remaining before the license expires

[47] Fix | Delete

* (may be negative if already expired)

[48] Fix | Delete

* @param bool $conflicting whether or not there is a conflict with this license

[49] Fix | Delete

* @param bool $deleted whether or not the key was deleted

[50] Fix | Delete

*/

[51] Fix | Delete

private function __construct($apiKey = null, $paid = null, $type = null, $remainingDays = null, $conflicting = false, $deleted = false, $keyType = null) {

[52] Fix | Delete

$this->apiKey = $apiKey;

[53] Fix | Delete

$this->paid = $paid;

[54] Fix | Delete

$this->setType($type);

[55] Fix | Delete

$this->remainingDays = $remainingDays;

[56] Fix | Delete

$this->conflicting = $conflicting;

[57] Fix | Delete

$this->deleted = $deleted;

[58] Fix | Delete

$this->keyType = $keyType;

[59] Fix | Delete

}

[60] Fix | Delete

[61] Fix | Delete

public function setApiKey($apiKey) {

[62] Fix | Delete

$this->apiKey = $apiKey;

[63] Fix | Delete

return $this;

[64] Fix | Delete

}

[65] Fix | Delete

[66] Fix | Delete

public function getApiKey() {

[67] Fix | Delete

return $this->apiKey;

[68] Fix | Delete

}

[69] Fix | Delete

[70] Fix | Delete

public function setPaid($paid) {

[71] Fix | Delete

$this->paid = $paid;

[72] Fix | Delete

return $this;

[73] Fix | Delete

}

[74] Fix | Delete

[75] Fix | Delete

public function isPaid() {

[76] Fix | Delete

return $this->paid;

[77] Fix | Delete

}

[78] Fix | Delete

[79] Fix | Delete

public function setType($type) {

[80] Fix | Delete

$this->type = $type !== null && self::isValidType($type) ? (string) $type : ($this->isPaid() ? self::TYPE_PREMIUM : self::TYPE_FREE);

[81] Fix | Delete

return $this;

[82] Fix | Delete

}

[83] Fix | Delete

[84] Fix | Delete

public function getType() {

[85] Fix | Delete

return $this->type === null ? self::TYPE_FREE : $this->type;

[86] Fix | Delete

}

[87] Fix | Delete

[88] Fix | Delete

public function is($type, $orGreater = false) {

[89] Fix | Delete

return $this->type === $type || ($orGreater && $this->isAtLeast($type));

[90] Fix | Delete

}

[91] Fix | Delete

[92] Fix | Delete

public function setRemainingDays($days) {

[93] Fix | Delete

$this->remainingDays = (int) $days;

[94] Fix | Delete

return $this;

[95] Fix | Delete

}

[96] Fix | Delete

[97] Fix | Delete

public function getRemainingDays() {

[98] Fix | Delete

return $this->remainingDays;

[99] Fix | Delete

}

[100] Fix | Delete

[101] Fix | Delete

public function setConflicting($conflicting = true) {

[102] Fix | Delete

$this->conflicting = $conflicting;

[103] Fix | Delete

return $this;

[104] Fix | Delete

}

[105] Fix | Delete

[106] Fix | Delete

public function hasConflict() {

[107] Fix | Delete

return $this->conflicting;

[108] Fix | Delete

}

[109] Fix | Delete

[110] Fix | Delete

public function setDeleted($deleted = true) {

[111] Fix | Delete

$this->deleted = $deleted;

[112] Fix | Delete

return $this;

[113] Fix | Delete

}

[114] Fix | Delete

[115] Fix | Delete

public function isExpired() {

[116] Fix | Delete

return $this->getKeyType() === self::KEY_TYPE_PAID_EXPIRED;

[117] Fix | Delete

}

[118] Fix | Delete

[119] Fix | Delete

public function isValid() {

[120] Fix | Delete

return !$this->isExpired();

[121] Fix | Delete

}

[122] Fix | Delete

[123] Fix | Delete

public function isPaidAndCurrent() {

[124] Fix | Delete

return $this->getKeyType() === self::KEY_TYPE_PAID_CURRENT;

[125] Fix | Delete

}

[126] Fix | Delete

[127] Fix | Delete

private function resolveKeyType() {

[128] Fix | Delete

if ($this->deleted)

[129] Fix | Delete

return self::KEY_TYPE_PAID_DELETED;

[130] Fix | Delete

if ($this->paid) {

[131] Fix | Delete

if ($this->remainingDays >= 0)

[132] Fix | Delete

return self::KEY_TYPE_PAID_CURRENT;

[133] Fix | Delete

else

[134] Fix | Delete

return self::KEY_TYPE_PAID_EXPIRED;

[135] Fix | Delete

}

[136] Fix | Delete

return self::KEY_TYPE_FREE;

[137] Fix | Delete

}

[138] Fix | Delete

[139] Fix | Delete

public function getKeyType() {

[140] Fix | Delete

if (!$this->keyType)

[141] Fix | Delete

$this->keyType = $this->resolveKeyType();

[142] Fix | Delete

return $this->keyType;

[143] Fix | Delete

}

[144] Fix | Delete

[145] Fix | Delete

private function clearCache() {

[146] Fix | Delete

$this->keyType = null;

[147] Fix | Delete

}

[148] Fix | Delete

[149] Fix | Delete

private function compareTiers($a, $b, $inclusive = true) {

[150] Fix | Delete

if ($a === $b)

[151] Fix | Delete

return $inclusive;

[152] Fix | Delete

foreach (self::$TYPES as $tier) {

[153] Fix | Delete

if ($tier === $a)

[154] Fix | Delete

return true;

[155] Fix | Delete

if ($tier === $b)

[156] Fix | Delete

return false;

[157] Fix | Delete

}

[158] Fix | Delete

return false;

[159] Fix | Delete

}

[160] Fix | Delete

[161] Fix | Delete

/**

[162] Fix | Delete

* Check if the license type is at or above the given tier

[163] Fix | Delete

*/

[164] Fix | Delete

public function isAtLeast($type) {

[165] Fix | Delete

if ($type !== self::TYPE_FREE && !$this->isValid())

[166] Fix | Delete

return false;

[167] Fix | Delete

return $this->compareTiers($type, $this->getType());

[168] Fix | Delete

}

[169] Fix | Delete

[170] Fix | Delete

public function isBelow($type) {

[171] Fix | Delete

if ($type !== self::TYPE_FREE && !$this->isValid())

[172] Fix | Delete

return true;

[173] Fix | Delete

return $this->compareTiers($this->getType(), $type, false);

[174] Fix | Delete

}

[175] Fix | Delete

[176] Fix | Delete

public function isPremium($orGreater = false) {

[177] Fix | Delete

return $this->is(self::TYPE_PREMIUM, $orGreater);

[178] Fix | Delete

}

[179] Fix | Delete

[180] Fix | Delete

public function isAtLeastPremium() {

[181] Fix | Delete

return $this->isPremium(true);

[182] Fix | Delete

}

[183] Fix | Delete

[184] Fix | Delete

public function isBelowPremium() {

[185] Fix | Delete

return $this->isBelow(self::TYPE_PREMIUM);

[186] Fix | Delete

}

[187] Fix | Delete

[188] Fix | Delete

public function isCare($orGreater = false) {

[189] Fix | Delete

return $this->is(self::TYPE_CARE, $orGreater);

[190] Fix | Delete

}

[191] Fix | Delete

[192] Fix | Delete

public function isAtLeastCare() {

[193] Fix | Delete

return $this->isCare(true);

[194] Fix | Delete

}

[195] Fix | Delete

[196] Fix | Delete

public function isBelowCare() {

[197] Fix | Delete

return $this->isBelow(self::TYPE_CARE);

[198] Fix | Delete

}

[199] Fix | Delete

[200] Fix | Delete

public function isResponse($orGreater = false) {

[201] Fix | Delete

return $this->is(self::TYPE_RESPONSE, $orGreater);

[202] Fix | Delete

}

[203] Fix | Delete

[204] Fix | Delete

public function isAtLeastResponse() {

[205] Fix | Delete

return $this->isResponse(true);

[206] Fix | Delete

}

[207] Fix | Delete

[208] Fix | Delete

public function isBelowResponse() {

[209] Fix | Delete

return $this->isBelow(self::TYPE_RESPONSE);

[210] Fix | Delete

}

[211] Fix | Delete

[212] Fix | Delete

public function getShieldLogo() {

[213] Fix | Delete

$type = $this->getType();

[214] Fix | Delete

return wfUtils::getBaseURL() . "images/logos/shield-{$type}.svg";

[215] Fix | Delete

}

[216] Fix | Delete

[217] Fix | Delete

public function getStylesheet($global = false) {

[218] Fix | Delete

$type = $this->getType();

[219] Fix | Delete

$suffix = $global ? '-global' : '';

[220] Fix | Delete

return wfUtils::getBaseURL() . wfUtils::versionedAsset("css/license/{$type}{$suffix}.css", '', WORDFENCE_VERSION);

[221] Fix | Delete

}

[222] Fix | Delete

[223] Fix | Delete

public function getGlobalStylesheet() {

[224] Fix | Delete

return $this->getStylesheet(true);

[225] Fix | Delete

}

[226] Fix | Delete

[227] Fix | Delete

public function getTypeLabel($requireCurrent = true, $includePrefix = null) {

[228] Fix | Delete

$paidKeyTypes = array(self::KEY_TYPE_PAID_CURRENT);

[229] Fix | Delete

if (!$requireCurrent) {

[230] Fix | Delete

$paidKeyTypes[] = self::KEY_TYPE_PAID_EXPIRED;

[231] Fix | Delete

$paidKeyTypes[] = self::KEY_TYPE_PAID_DELETED;

[232] Fix | Delete

}

[233] Fix | Delete

if (in_array($this->getKeyType(), $paidKeyTypes)) {

[234] Fix | Delete

switch ($this->type) {

[235] Fix | Delete

case self::TYPE_CARE:

[236] Fix | Delete

return $includePrefix || $includePrefix === null ? __('Wordfence Care', 'wordfence') : __('Care', 'wordfence');

[237] Fix | Delete

case self::TYPE_RESPONSE:

[238] Fix | Delete

return $includePrefix || $includePrefix === null ? __('Wordfence Response', 'wordfence') : __('Response', 'wordfence');

[239] Fix | Delete

case self::TYPE_PREMIUM:

[240] Fix | Delete

default:

[241] Fix | Delete

return $includePrefix ? __('Wordfence Premium', 'wordfence') : __('Premium', 'wordfence');

[242] Fix | Delete

}

[243] Fix | Delete

}

[244] Fix | Delete

return $includePrefix ? __('Wordfence Free', 'wordfence') : __('Free', 'wordfence');

[245] Fix | Delete

}

[246] Fix | Delete

[247] Fix | Delete

public function getPrefixedTypeLabel($requireCurrent = true) {

[248] Fix | Delete

return $this->getTypeLabel($requireCurrent, true);

[249] Fix | Delete

}

[250] Fix | Delete

[251] Fix | Delete

private function generateLicenseUrl($path, $query = array(), $campaign = null) {

[252] Fix | Delete

if ($campaign !== null)

[253] Fix | Delete

$campaign = "gnl1{$campaign}";

[254] Fix | Delete

$url = implode(

[255] Fix | Delete

'/',

[256] Fix | Delete

array_filter(array(

[257] Fix | Delete

'https://www.wordfence.com',

[258] Fix | Delete

$campaign,

[259] Fix | Delete

$path

[260] Fix | Delete

))

[261] Fix | Delete

);

[262] Fix | Delete

return $url . (empty($query) ? '' : ('?' . http_build_query($query)));

[263] Fix | Delete

}

[264] Fix | Delete

[265] Fix | Delete

public function getSupportUrl($campaign = null) {

[266] Fix | Delete

return $this->generateLicenseUrl(

[267] Fix | Delete

'get-help',

[268] Fix | Delete

array(

[269] Fix | Delete

'license' => $this->apiKey

[270] Fix | Delete

),

[271] Fix | Delete

$campaign

[272] Fix | Delete

);

[273] Fix | Delete

}

[274] Fix | Delete

[275] Fix | Delete

public function getUpgradeUrl($campaign = null) {

[276] Fix | Delete

if ($this->isAtLeastPremium()) {

[277] Fix | Delete

return $this->generateLicenseUrl(

[278] Fix | Delete

'licenses',

[279] Fix | Delete

array(

[280] Fix | Delete

'upgrade' => $this->apiKey

[281] Fix | Delete

),

[282] Fix | Delete

$campaign

[283] Fix | Delete

);

[284] Fix | Delete

}

[285] Fix | Delete

else {

[286] Fix | Delete

return $this->generateLicenseUrl(

[287] Fix | Delete

'products/pricing/',

[288] Fix | Delete

array(),

[289] Fix | Delete

$campaign

[290] Fix | Delete

);

[291] Fix | Delete

}

[292] Fix | Delete

}

[293] Fix | Delete

[294] Fix | Delete

private function writeConfig($hasError = false) {

[295] Fix | Delete

$this->clearCache();

[296] Fix | Delete

$keyType = $this->getKeyType();

[297] Fix | Delete

wfConfig::set(self::CONFIG_API_KEY, $this->apiKey);

[298] Fix | Delete

wfConfig::set(self::CONFIG_TYPE, $this->type);

[299] Fix | Delete

wfConfig::set(self::CONFIG_REMAINING_DAYS, $this->remainingDays);

[300] Fix | Delete

wfConfig::set(self::CONFIG_PAID, $keyType === self::KEY_TYPE_PAID_CURRENT);

[301] Fix | Delete

wfConfig::setOrRemove(self::CONFIG_HAS_KEY_CONFLICT, $this->conflicting ? 1 : null);

[302] Fix | Delete

if (!$hasError) { //Only save a limited subset of the config if an API error occurred

[303] Fix | Delete

wfConfig::set(self::CONFIG_KEY_TYPE, $keyType);

[304] Fix | Delete

}

[305] Fix | Delete

}

[306] Fix | Delete

[307] Fix | Delete

/**

[308] Fix | Delete

* @param bool $hasError whether or not an error occurred while retrieving the current license data

[309] Fix | Delete

*/

[310] Fix | Delete

public function save($hasError = false) {

[311] Fix | Delete

$this->writeConfig($hasError);

[312] Fix | Delete

}

[313] Fix | Delete

[314] Fix | Delete

public function downgradeToFree($apiKey) {

[315] Fix | Delete

$this->apiKey = $apiKey;

[316] Fix | Delete

$this->type = self::TYPE_FREE;

[317] Fix | Delete

$this->paid = false;

[318] Fix | Delete

$this->keyType = self::KEY_TYPE_FREE;

[319] Fix | Delete

$this->conflicting = false;

[320] Fix | Delete

$this->deleted = false;

[321] Fix | Delete

$this->remainingDays = -1;

[322] Fix | Delete

return $this;

[323] Fix | Delete

}

[324] Fix | Delete

[325] Fix | Delete

public static function isValidType($type) {

[326] Fix | Delete

return in_array($type, self::$TYPES);

[327] Fix | Delete

}

[328] Fix | Delete

[329] Fix | Delete

private static function fromConfig() {

[330] Fix | Delete

$remainingDays = wfConfig::get(self::CONFIG_REMAINING_DAYS, null);

[331] Fix | Delete

if ($remainingDays !== null)

[332] Fix | Delete

$remainingDays = (int) $remainingDays;

[333] Fix | Delete

$keyType = wfConfig::get(self::CONFIG_KEY_TYPE, null);

[334] Fix | Delete

return new self(

[335] Fix | Delete

(string) wfConfig::get(self::CONFIG_API_KEY),

[336] Fix | Delete

(bool) wfConfig::get(self::CONFIG_PAID),

[337] Fix | Delete

(string) wfConfig::get(self::CONFIG_TYPE, self::TYPE_FREE),

[338] Fix | Delete

$remainingDays,

[339] Fix | Delete

(bool) wfConfig::get(self::CONFIG_HAS_KEY_CONFLICT, false),

[340] Fix | Delete

$keyType === self::KEY_TYPE_PAID_DELETED,

[341] Fix | Delete

$keyType

[342] Fix | Delete

);

[343] Fix | Delete

}

[344] Fix | Delete

[345] Fix | Delete

public static function current() {

[346] Fix | Delete

if (self::$current === null) {

[347] Fix | Delete

self::$current = self::fromConfig();

[348] Fix | Delete

}

[349] Fix | Delete

return self::$current;

[350] Fix | Delete

}

[351] Fix | Delete

[352] Fix | Delete

const REGISTRATION_TOKEN_TTL = 86400; //24 hours

[353] Fix | Delete

const REGISTRATION_TOKEN_KEY = 'wfRegistrationToken';

[354] Fix | Delete

const REGISTRATION_TOKEN_LENGTH = 32;

[355] Fix | Delete

[356] Fix | Delete

public static function getRegistrationToken($refreshTtl = false) {

[357] Fix | Delete

$token = get_transient(self::REGISTRATION_TOKEN_KEY);

[358] Fix | Delete

if ($token === false) {

[359] Fix | Delete

$token = openssl_random_pseudo_bytes(self::REGISTRATION_TOKEN_LENGTH);

[360] Fix | Delete

if ($token === false)

[361] Fix | Delete

throw new Exception('Unable to generate registration token');

[362] Fix | Delete

$token = wfUtils::base64url_encode($token);

[363] Fix | Delete

$refreshTtl = true;

[364] Fix | Delete

}

[365] Fix | Delete

if ($refreshTtl)

[366] Fix | Delete

set_transient(self::REGISTRATION_TOKEN_KEY, $token, self::REGISTRATION_TOKEN_TTL);

[367] Fix | Delete

return $token;

[368] Fix | Delete

}

[369] Fix | Delete

[370] Fix | Delete

public static function validateRegistrationToken($token) {

[371] Fix | Delete

$expected = self::getRegistrationToken();

[372] Fix | Delete

//Note that the length of $expected is publicly known since it's in the plugin source, so differening lengths immediately triggering a false return is not a cause for concern

[373] Fix | Delete

return hash_equals($expected, $token);

[374] Fix | Delete

}

[375] Fix | Delete

[376] Fix | Delete

public static function generateRegistrationLink() {

[377] Fix | Delete

$wfWebsite = wfWebsite::getInstance();

[378] Fix | Delete

$stats = wfAPI::generateSiteStats();

[379] Fix | Delete

$token = self::getRegistrationToken(true);

[380] Fix | Delete

$returnUrl = network_admin_url('admin.php?page=WordfenceInstall');

[381] Fix | Delete

$payload = array(

[382] Fix | Delete

self::REGISTRATION_PAYLOAD_VERSION,

[383] Fix | Delete

$stats,

[384] Fix | Delete

$token,

[385] Fix | Delete

$returnUrl,

[386] Fix | Delete

);

[387] Fix | Delete

$payload = implode(';', $payload);

[388] Fix | Delete

$payload = wfUtils::base64url_encode($payload);

[389] Fix | Delete

return $wfWebsite->getUrl("plugin/registration/{$payload}");

[390] Fix | Delete

}

[391] Fix | Delete

[392] Fix | Delete

}

[393] Fix | Delete