Ubuntu
$rules,
'marker' => 'php_disclosure',
'title' => __( 'PHP Disclosure', 'secupress' ),
) );
}
add_action( 'secupress.modules.deactivate_submodule_' . basename( __FILE__, '.php' ), 'secupress_php_disclosure_deactivate' );
/**
* On module deactivation, maybe remove rewrite rules from the `.htaccess`/`web.config` file.
*
* @since 1.0
*/
function secupress_php_disclosure_deactivate() {
secupress_remove_module_rules_or_notice( 'php_disclosure', __( 'PHP Disclosure', 'secupress' ) );
}
add_filter( 'secupress.plugins.activation.write_rules', 'secupress_php_disclosure_plugin_activate', 10, 2 );
/**
* On SecuPress activation, add the rules to the list of the rules to write.
*
* @since 1.0
*
* @param (array) $rules Other rules to write.
*
* @return (array) Rules to write.
*/
function secupress_php_disclosure_plugin_activate( $rules ) {
global $is_apache, $is_nginx, $is_iis7;
$marker = 'php_disclosure';
if ( $is_apache ) {
$rules[ $marker ] = secupress_php_disclosure_apache_rules();
} elseif ( $is_iis7 ) {
$rules[ $marker ] = array( 'nodes_string' => secupress_php_disclosure_iis7_rules() );
} elseif ( $is_nginx ) {
$rules[ $marker ] = secupress_php_disclosure_nginx_rules();
}
return $rules;
}
/** --------------------------------------------------------------------------------------------- */
/** RULES ======================================================================================= */
/** --------------------------------------------------------------------------------------------- */
/**
* PHP Disclosure: get rules for apache.
*
* @since 1.0
*
* @return (string)
*/
function secupress_php_disclosure_apache_rules() {
$rules = "\n";
$rules .= " RewriteEngine On\n";
$rules .= " RewriteCond %{QUERY_STRING} \=PHP[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12} [NC]\n";
$rules .= " RewriteRule .* - [F]\n";
$rules .= "\n";
return $rules;
}
/**
* PHP Disclosure: get rules for iis7.
*
* @since 1.0
*
* @return (string)
*/
function secupress_php_disclosure_iis7_rules() {
$marker = 'php_disclosure';
$spaces = str_repeat( ' ', 8 );
$rules = "\n";
$rules .= "$spaces \n";
$rules .= "$spaces \n";
$rules .= "$spaces \n";
$rules .= "$spaces \n";
$rules .= "$spaces \n";
$rules .= "$spaces";
return $rules;
}
/**
* PHP Disclosure: get rules for nginx.
*
* @since 1.0
*
* @return (string)
*/
function secupress_php_disclosure_nginx_rules() {
$marker = 'php_disclosure';
$rules = "
server {
# BEGIN SecuPress $marker
location / {
if ( \$query_string ~* \"\=PHP[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}\" ) {
deny all;
}
}
# END SecuPress
}";
return trim( $rules );
}