Ubuntu
DISALLOW_FILE_EDIT from the wp-config.php file to true.
* Main Module: wordpress_core
* Author: SecuPress
* Version: 1.0
*/
defined( 'SECUPRESS_VERSION' ) or die( 'Cheatin’ uh?' );
/** --------------------------------------------------------------------------------------------- */
/** ACTIVATION / DEACTIVATION =================================================================== */
/** --------------------------------------------------------------------------------------------- */
add_action( 'secupress.modules.activate_submodule_' . basename( __FILE__, '.php' ), 'secupress_disallow_file_edit_activation' );
add_action( 'secupress.plugins.activation', 'secupress_disallow_file_edit_activation' );
/**
* On module activation, remove the define.
*
* @since 1.1.4
* @author Grégory Viguier
*/
function secupress_disallow_file_edit_activation() {
$constant = 'DISALLOW_FILE_EDIT';
$marker = 'file_edit';
$check = defined( $constant ) ? constant( $constant ) : false;
if ( $check ) {
// OK, defined to true.
return;
}
$new_define = "define( '$constant', true );";
$wpconfig_filepath = secupress_is_wpconfig_writable();
if ( ! $wpconfig_filepath ) {
/** Translators: 1 is a file name, 2 is a code. */
$message = sprintf( __( 'The %1$s file is not writable. Please apply %2$s write rights to the file.', 'secupress' ), 'wp-config.php', '0644' );
secupress_add_settings_error( 'general', 'wp_config_not_writable', $message, 'error' );
return;
}
if ( defined( $constant ) ) {
// Remove the constant we could have previously set, and comment old value.
$replaced = secupress_comment_constant( $constant, $wpconfig_filepath, $marker );
if ( ! $replaced ) {
// The constant couldn't be removed or commented: display an error message.
if ( true === $check ) {
$value = 'true';
} elseif ( is_int( $check ) ) {
$value = $check;
} else {
$value = "'$check'";
}
$message = sprintf(
/** Translators: 1 is the plugin name, 2 is a constant name, 3 is a file name, 4 and 5 are a small parts of code. */
__( '%1$s couldn\'t change the value of the constant %2$s in the %3$s file. Please edit the file and replace the line that states: %4$s by: %5$s', 'secupress' ),
SECUPRESS_PLUGIN_NAME,
"$constant",
'wp-config.php',
"define( '$constant', $value );",
"# BEGIN SecuPress $marker\n$new_define\n# END SecuPress
"
);
secupress_add_settings_error( 'general', 'constant_not_removed', $message, 'error' );
return;
}
}
// Add our constant now.
$added = secupress_put_contents( $wpconfig_filepath, $new_define, array( 'marker' => $marker, 'put' => 'append', 'text' => '$constant",
'wp-config.php',
"# BEGIN SecuPress $marker\n$new_define\n# END SecuPress
"
);
secupress_add_settings_error( 'general', 'constant_not_added', $message, 'error' );
}
add_action( 'secupress.modules.deactivate_submodule_' . basename( __FILE__, '.php' ), 'secupress_disallow_file_edit_deactivate' );
add_action( 'secupress.plugins.deactivation', 'secupress_disallow_file_edit_deactivate' );
/**
* On module deactivation, maybe put the constant back.
*
* @since 1.1.4
* @author Grégory Viguier
*/
function secupress_disallow_file_edit_deactivate() {
$constant = 'DISALLOW_FILE_EDIT';
$marker = 'file_edit';
$wpconfig_filepath = secupress_is_wpconfig_writable();
if ( ! $wpconfig_filepath ) {
/** Translators: 1 is a file name, 2 is a code. */
$message = sprintf( __( 'The %1$s file is not writable. Please apply %2$s write rights to the file.', 'secupress' ), 'wp-config.php', '0644' );
secupress_add_settings_error( 'general', 'wp_config_not_writable', $message, 'error' );
return;
}
// Remove the constant we could have previously set, and uncomment the original constant definition.
secupress_uncomment_constant( $constant, $wpconfig_filepath, $marker );
}