asda2432es

✏️ Editing: class-secupress-scan-core-update.php

<?php
defined( 'ABSPATH' ) or die( 'Something went wrong.' );

/**
 * Core Update scan class.
 *
 * @package SecuPress
 * @subpackage SecuPress_Scan
 * @since 1.0
 */
class SecuPress_Scan_Core_Update extends SecuPress_Scan implements SecuPress_Scan_Interface {

/** Constants. ============================================================================== */

/**
	 * Class version.
	 *
	 * @var (string)
	 */
	const VERSION = '1.2';

/** Properties. ============================================================================= */

/**
	 * The reference to the *Singleton* instance of this class.
	 *
	 * @var (object)
	 */
	protected static $_instance;

/**
	 * Tells if the fix must occur after all other scans and fixes, while no other scan/fix is running.
	 *
	 * @var (bool)
	 */
	protected $delayed_fix = true;

/** Init and messages. ====================================================================== */

/**
	 * Init.
	 *
	 * @since 1.0
	 */
	protected function init() {
		$this->title    = __( 'Check if your WordPress core is up to date.', 'secupress' );
		$this->more     = __( 'It’s very important to keep your WordPress installation up to date. If you cannot update for any reason, contact your hosting provider as soon as possible.', 'secupress' );
		$this->more_fix = __( 'Update your WordPress installation right away.', 'secupress' );
	}

/**
	 * Get messages.
	 *
	 * @since 1.0
	 *
	 * @param (int) $message_id A message ID.
	 *
	 * @return (string|array) A message if a message ID is provided. An array containing all messages otherwise.
	 */
	public static function get_messages( $message_id = null ) {
		$messages = array(
			// "good"
			0   => __( 'WordPress core is up to date.', 'secupress' ),
			1   => __( 'WordPress has been updated to version <strong>%s</strong>.', 'secupress' ),
			2   => '%s', // Already translated.
			// "bad".
			200 => __( 'WordPress core is <strong>not up to date</strong>.', 'secupress' ),
			// "cantfix"
			300 => '%s', // Already translated.
			301 => __( 'You have the latest version of WordPress.', 'secupress' ),
		);

if ( isset( $message_id ) ) {
			return isset( $messages[ $message_id ] ) ? $messages[ $message_id ] : __( 'Unknown message', 'secupress' );
		}

return $messages;
	}

/** Getters. ================================================================================ */

/**
	 * Get the documentation URL.
	 *
	 * @since 1.2.3
	 *
	 * @return (string)
	 */
	public static function get_docs_url() {
		return __( 'https://docs.secupress.me/article/95-wordpress-core-update-scan', 'secupress' );
	}

/** Scan. =================================================================================== */

/**
	 * Scan for flaw(s).
	 *
	 * @since 1.0
	 *
	 * @return (array) The scan results.
	 */
	public function scan() {

$activated = $this->filter_scanner( __CLASS__ );
		if ( true === $activated ) {
			$this->add_message( 0 );
			return parent::scan();
		}

ob_start();

if ( ! function_exists( 'get_preferred_from_update_core' ) ) {
			require_once( ABSPATH . 'wp-admin/includes/update.php' );
		}

wp_version_check();
		$core_update = get_preferred_from_update_core();
		$core_update = isset( $core_update->response ) && 'upgrade' === $core_update->response;

ob_flush();

if ( $core_update ) {
			// "bad"
			$this->add_message( 200 );
		}

// "good"
		$this->maybe_set_status( 0 );

return parent::scan();
	}

/** Fix. ==================================================================================== */

/**
	 * Try to fix the flaw(s).
	 *
	 * @since 1.4.5
	 *
	 * @return (array) The fix results.
	 */
	public function need_manual_fix() {
		return [ 'fix' => 'fix' ];
	}

/**
	 * Get an array containing ALL the forms that would fix the scan if it requires user action.
	 *
	 * @since 1.4.5
	 *
	 * @return (array) An array of HTML templates (form contents most of the time).
	 */
	protected function get_fix_action_template_parts() {
		return [ 'fix' => '&nbsp;' ];
	}

/**
	 * Try to fix the flaw(s) after requiring user action.
	 *
	 * @since 1.4.5
	 *
	 * @return (array) The fix results.
	 */
	public function manual_fix() {
		if ( $this->has_fix_action_part( 'fix' ) ) {
			$this->fix();
		}
		// "good"
		$this->add_fix_message( 1 );
		return parent::manual_fix();
	}

/**
	 * Try to fix the flaw(s).
	 *
	 * @since 1.0
	 *
	 * @return (array) The fix results.
	 */
	public function fix() {
		ob_start();
		@set_time_limit( 0 );

$core    = get_preferred_from_update_core();
		$version = isset( $core->version ) ? $core->version : false;
		$locale  = isset( $core->locale )  ? $core->locale  : 'en_US';
		$result  = false;

if ( $version ) {
			include_once( ABSPATH . 'wp-admin/includes/class-wp-upgrader.php' );

$url       = 'update-core.php?action=do-core-upgrade';
			$nonce     = 'upgrade-core';
			$url_nonce = wp_nonce_url( $url, $nonce );
			$update    = find_core_update( $version, $locale );

if ( $update ) {
				$allow_relaxed_file_ownership = isset( $update->new_files ) && ! $update->new_files;
				$credentials = request_filesystem_credentials( $url_nonce, '', false, ABSPATH, array( 'version', 'locale' ), $allow_relaxed_file_ownership );

if ( WP_Filesystem( $credentials, ABSPATH, $allow_relaxed_file_ownership ) ) {

// Remove the WP upgrade process for translation since it will output data, use our own based on core but using a silent upgrade.
					remove_action( 'upgrader_process_complete', array( 'Language_Pack_Upgrader', 'async_upgrade' ), 20 );
					add_action( 'upgrader_process_complete', 'secupress_async_upgrades', 20 );

$skin     = new Automatic_Upgrader_Skin( compact( 'nonce', 'url' ) );
					$upgrader = new Core_Upgrader( $skin );
					$result   = $upgrader->upgrade( $update, array(
						'allow_relaxed_file_ownership' => $allow_relaxed_file_ownership,
					) );
				}
			}
		}

ob_end_clean();

if ( is_string( $result ) ) {

$this->add_fix_message( 1, array( $result ) );

} elseif ( false === $result ) {

$this->add_fix_message( 301 );

} else {
			$errors = reset( $result->errors );
			$code   = isset( $errors['up_to_date'] ) ? 2 : 300;
			$this->add_fix_message( $code, array( reset( $errors ) ) );
		}

return parent::fix();
	}
}

Ubuntu

Sid Gifari From Gifari Industries - BD Cyber Security Team