Ubuntu
readme.html file.
* Main Module: discloses
* Author: SecuPress
* Version: 1.0
*/
defined( 'SECUPRESS_VERSION' ) or die( 'Something went wrong.' );
/** --------------------------------------------------------------------------------------------- */
/** ACTIVATION / DEACTIVATION =================================================================== */
/** --------------------------------------------------------------------------------------------- */
add_action( 'secupress.modules.activation', 'secupress_wp_version_activation' );
/**
* On module activation, maybe write the rules.
*
* @since 1.0
*/
function secupress_wp_version_activation() {
global $is_apache, $is_nginx, $is_iis7;
// Apache.
if ( $is_apache ) {
$rules = secupress_wp_version_apache_rules();
}
// IIS7.
elseif ( $is_iis7 ) {
$rules = secupress_wp_version_iis7_rules();
}
// Nginx.
elseif ( $is_nginx ) {
$rules = secupress_wp_version_nginx_rules();
}
// Not supported.
else {
$rules = '';
}
secupress_add_module_rules_or_notice( array(
'rules' => $rules,
'marker' => 'wp_version',
'title' => __( 'WordPress Version Disclosure', 'secupress' ),
) );
}
add_action( 'secupress.modules.activate_submodule_' . basename( __FILE__, '.php' ), 'secupress_wp_version_activation' );
function secupress_wp_version_activation_file() {
secupress_wp_version_activation();
secupress_scanit_async( 'Discloses', 3 );
}
add_action( 'secupress.modules.deactivate_submodule_' . basename( __FILE__, '.php' ), 'secupress_wp_version_deactivate' );
/**
* On module deactivation, maybe remove rewrite rules from the `.htaccess`/`web.config` file.
*
* @since 1.0
*/
function secupress_wp_version_deactivate() {
secupress_remove_module_rules_or_notice( 'wp_version', __( 'WordPress Version Disclosure', 'secupress' ) );
secupress_scanit_async( 'Discloses', 3 );
}
add_filter( 'secupress.plugins.activation.write_rules', 'secupress_wp_version_plugin_activate', 10, 2 );
/**
* On SecuPress activation, add the rules to the list of the rules to write.
*
* @since 1.0
*
* @param (array) $rules Other rules to write.
*
* @return (array) Rules to write.
*/
function secupress_wp_version_plugin_activate( $rules ) {
global $is_apache, $is_nginx, $is_iis7;
$marker = 'wp_version';
if ( $is_apache ) {
$rules[ $marker ] = secupress_wp_version_apache_rules();
} elseif ( $is_iis7 ) {
$rules[ $marker ] = array( 'nodes_string' => secupress_wp_version_iis7_rules() );
} elseif ( $is_nginx ) {
$rules[ $marker ] = secupress_wp_version_nginx_rules();
}
return $rules;
}
/** --------------------------------------------------------------------------------------------- */
/** README.HTML ================================================================================= */
/** --------------------------------------------------------------------------------------------- */
/**
* Get rules for apache.
*
* @since 1.0
*
* @return (string)
*/
function secupress_wp_version_apache_rules() {
$bases = secupress_get_rewrite_bases();
$base = $bases['base'];
$pattern = '^' . $bases['site_from'] . 'readme\.html$';
$rules = "\n";
$rules .= " RewriteEngine On\n";
$rules .= " RewriteBase $base\n";
$rules .= " RewriteRule $pattern - [R=404,L,NC]\n";
$rules .= "\n";
return $rules;
}
/**
* Get rules for iis7.
*
* @since 1.0
*
* @return (string)
*/
function secupress_wp_version_iis7_rules() {
$marker = 'wp_version';
$spaces = str_repeat( ' ', 8 );
$bases = secupress_get_rewrite_bases();
$pattern = '^' . $bases['site_from'] . 'readme\.html$';
$rules = "\n";
$rules .= "$spaces \n";
$rules .= "$spaces \n";
$rules .= "$spaces";
return $rules;
}
/**
* Get rules for nginx.
*
* @since 1.0
*
* @return (string)
*/
function secupress_wp_version_nginx_rules() {
$marker = 'wp_version';
$bases = secupress_get_rewrite_bases();
$pattern = $bases['site_from'] . 'readme.html';
// - http://nginx.org/en/docs/http/ngx_http_core_module.html#location
$rules = "
server {
# BEGIN SecuPress $marker
location $pattern {
return 404;
}
# END SecuPress
}";
return trim( $rules );
}
/** --------------------------------------------------------------------------------------------- */
/** GENERATOR META TAG ========================================================================== */
/** --------------------------------------------------------------------------------------------- */
/**
* Remove the generator meta tag.
*
* @since 1.0
*/
foreach ( array( 'wp_head', 'rss2_head', 'commentsrss2_head', 'rss_head', 'rdf_header', 'atom_head', 'comments_atom_head', 'opml_head', 'app_head' ) as $generator_action ) {
remove_action( $generator_action, 'the_generator' );
}
/**
* Just to be sure, bloat its value: some plugin/theme may add the tag back.
*
* @since 1.0
*/
add_filter( 'the_generator', '__return_empty_string', PHP_INT_MAX );
/** --------------------------------------------------------------------------------------------- */
/** SCRIPTS AND STYLES ========================================================================== */
/** --------------------------------------------------------------------------------------------- */
add_filter( 'script_loader_src', 'secupress_replace_wp_version_in_src', PHP_INT_MAX );
add_filter( 'style_loader_src', 'secupress_replace_wp_version_in_src', PHP_INT_MAX );
/**
* Replace the WordPress version with a fake version in script and style src.
*
* @param (string) $src A content containing the string `ver={$wp_version}`.
*
* @return (string)
*/
function secupress_replace_wp_version_in_src( $src ) {
$ver = get_bloginfo( 'version' );
$hash = secupress_generate_hash( $ver );
return str_replace( 'ver=' . $ver, 'ver=' . $hash, $src );
}
add_filter( 'update_footer', 'secupress_replace_wp_version_in_footer', 11 );
/**
* Remove the WP version number in footer
*
* @since 2.0
* @author Julio Potier
*
* @param (string) $footer
* @return (string) $footer
**/
function secupress_replace_wp_version_in_footer( $footer ) {
if ( ! current_user_can( 'update_core' ) ) {
$footer = str_replace( sprintf( __( 'Version %s' ), get_bloginfo( 'version', 'display' ) ), __( 'Powered by WordPress', 'secupress' ), $footer );
}
return $footer;
}