This project does not seem to handle request data directly as such no vulnerable execution paths were found.
include
, or for example
via PHP's auto-loading mechanism.
1 | <?php |
||
2 | |||
3 | /* |
||
4 | * Copyright (c) 2017 Salah Alkhwlani <[email protected]> |
||
5 | * |
||
6 | * For the full copyright and license information, please view |
||
7 | * the LICENSE file that was distributed with this source code. |
||
8 | */ |
||
9 | |||
10 | namespace Yemenifree\WpSecurity; |
||
11 | |||
12 | use Illuminate\Support\Collection; |
||
13 | use Yemenifree\WpSecurity\Helpers\WPGitHubUpdater; |
||
14 | use Yemenifree\WpSecurity\Interfaces\Activable; |
||
15 | use Yemenifree\WpSecurity\Interfaces\Initializable; |
||
16 | use Yemenifree\WpSecurity\Interfaces\Installable; |
||
17 | use Yemenifree\WpSecurity\Interfaces\Loadable; |
||
18 | use Yemenifree\WpSecurity\Modules\ConfigSecurity; |
||
19 | use Yemenifree\WpSecurity\Modules\CoreSecurity; |
||
20 | use Yemenifree\WpSecurity\Modules\HtaccessSecurity; |
||
21 | use Yemenifree\WpSecurity\Modules\PluginSecurity; |
||
22 | use Yemenifree\WpSecurity\Modules\ResetSecurity; |
||
23 | use Yemenifree\WpSecurity\Modules\UploadZipSecurity; |
||
24 | use Yemenifree\WpSecurity\Modules\XmlrpcDisabled; |
||
25 | |||
26 | class Plugin |
||
27 | { |
||
28 | /** |
||
29 | * list of active modules. |
||
30 | * |
||
31 | * @var array|Collection |
||
32 | */ |
||
33 | protected $modules; |
||
34 | |||
35 | /** |
||
36 | * plugin dir. |
||
37 | * |
||
38 | * @var string |
||
39 | */ |
||
40 | protected $plugin_dir; |
||
41 | |||
42 | /** |
||
43 | * base name of plugin. |
||
44 | * |
||
45 | * @var string |
||
46 | */ |
||
47 | private $basename; |
||
48 | |||
49 | public function __construct($basename) |
||
50 | { |
||
51 | $this->basename = $basename; |
||
52 | $this->plugin_dir = \dirname($this->basename); |
||
53 | $this->modules = [ |
||
54 | HtaccessSecurity::class => [], |
||
55 | ConfigSecurity::class => [], |
||
56 | XmlrpcDisabled::class => [], |
||
57 | CoreSecurity::class => [], |
||
58 | ResetSecurity::class => [], |
||
59 | UploadZipSecurity::class => [], |
||
60 | PluginSecurity::class => [$this->basename], |
||
61 | ]; |
||
62 | |||
63 | $this->initModules(); |
||
64 | } |
||
65 | |||
66 | /** |
||
67 | * create object from each modules. |
||
68 | * |
||
69 | * @return Collection |
||
70 | */ |
||
71 | protected function initModules() |
||
72 | { |
||
73 | return $this->modules = $this->getModules()->map(function ($args, $module) { |
||
74 | return new $module(...$args); |
||
75 | }); |
||
76 | } |
||
77 | |||
78 | /** |
||
79 | * get list active modules. |
||
80 | * |
||
81 | * @return Collection |
||
82 | */ |
||
83 | public function getModules() |
||
84 | { |
||
85 | return $this->modules instanceof Collection ? $this->modules : collect($this->modules); |
||
86 | } |
||
87 | |||
88 | /** |
||
89 | * Load the plugin by hooking into WordPress actions and filters. |
||
90 | * Method should be invoked immediately on plugin load. |
||
91 | */ |
||
92 | public function load() |
||
93 | { |
||
94 | // Load all modules that require immediate loading. |
||
95 | $this->getModules()->reject(function ($module) { |
||
96 | return !$module instanceof Loadable; |
||
97 | })->each(function ($module) { |
||
98 | $module->load(); |
||
99 | }); |
||
100 | |||
101 | // Register initialization method. |
||
102 | /** @scrutinizer ignore-call */ |
||
103 | add_action('init', [$this, 'init'], 10, 0); |
||
104 | } |
||
105 | |||
106 | /** |
||
107 | * Perform initialization tasks. |
||
108 | * Method should be run (early) in init hook. |
||
109 | */ |
||
110 | public function init() |
||
111 | { |
||
112 | // Initialize all modules that require initialization. |
||
113 | $this->getModules()->reject(function ($module) { |
||
114 | return !$module instanceof Initializable; |
||
115 | })->each(function ($module) { |
||
116 | $module->init(); |
||
117 | }); |
||
118 | |||
119 | // Initialize updater |
||
120 | $this->updater(); |
||
121 | } |
||
122 | |||
123 | /** |
||
124 | * update plugin from github. |
||
125 | */ |
||
126 | public function updater() |
||
127 | { |
||
128 | // note the use of is_admin() to double check that this is happening in the admin |
||
129 | /** @scrutinizer ignore-call */ |
||
130 | if (!is_admin()) { |
||
0 ignored issues
–
show
Bug
introduced
by
![]() |
|||
131 | return; |
||
132 | } |
||
133 | |||
134 | $config = [ |
||
135 | 'slug' => $this->basename, |
||
136 | 'proper_folder_name' => $this->plugin_dir, |
||
137 | 'api_url' => 'https://api.github.com/repos/yemenifree/wp-security', |
||
138 | 'raw_url' => 'https://raw.github.com/yemenifree/wp-security/master', |
||
139 | 'github_url' => 'https://github.com/yemenifree/wp-security', |
||
140 | 'zip_url' => 'https://github.com/yemenifree/wp-security/archive/{version}.zip', |
||
141 | 'sslverify' => false, |
||
142 | 'requires' => '4.7', |
||
143 | 'tested' => '4.7', |
||
144 | 'readme' => 'README.md', |
||
145 | ]; |
||
146 | new WPGitHubUpdater($config); |
||
147 | } |
||
148 | |||
149 | /** |
||
150 | * Perform activation and installation tasks. |
||
151 | * Method should be run on plugin activation. |
||
152 | * |
||
153 | * @link https://developer.wordpress.org/plugins/the-basics/activation-deactivation-hooks/ |
||
154 | */ |
||
155 | public function activate() |
||
156 | { |
||
157 | // Install every module that requires it. |
||
158 | $this->getModules()->reject(function ($module) { |
||
159 | return !$module instanceof Installable; |
||
160 | })->each(function ($module) { |
||
161 | $module->install(); |
||
162 | }); |
||
163 | |||
164 | // Activate every module that requires it. |
||
165 | $this->getModules()->reject(function ($module) { |
||
166 | return !$module instanceof Activable; |
||
167 | })->each(function ($module) { |
||
168 | $module->activate(); |
||
169 | }); |
||
170 | } |
||
171 | |||
172 | /** |
||
173 | * Perform deactivation tasks. |
||
174 | * Method should be run on plugin deactivation. |
||
175 | * |
||
176 | * @link https://developer.wordpress.org/plugins/the-basics/activation-deactivation-hooks/ |
||
177 | */ |
||
178 | public function deactivate() |
||
179 | { |
||
180 | // Activate every module that requires it. |
||
181 | $this->getModules()->reject(function ($module) { |
||
182 | return !$module instanceof Activable; |
||
183 | })->each(function ($module) { |
||
184 | $module->deactivate(); |
||
185 | }); |
||
186 | } |
||
187 | |||
188 | /** |
||
189 | * Perform uninstallation tasks. |
||
190 | * Method should be run on plugin uninstall. |
||
191 | * |
||
192 | * @link https://developer.wordpress.org/plugins/the-basics/uninstall-methods/ |
||
193 | */ |
||
194 | public function uninstall() |
||
195 | { |
||
196 | // Uninstall every module that requires it. |
||
197 | $this->getModules()->reject(function ($module) { |
||
198 | return !$module instanceof Installable; |
||
199 | })->each(function ($module) { |
||
200 | $module->uninstall(); |
||
201 | }); |
||
202 | } |
||
203 | } |
||
204 |