Ubuntu
false,
'DIEONDBERROR' => false,
'DISALLOW_FILE_EDIT' => 1,
'FS_CHMOD_DIR' => 755,
'FS_CHMOD_FILE' => 644,
'RELOCATE' => false,
'SCRIPT_DEBUG' => false,
'WP_ALLOW_REPAIR' => '!isset',
'WP_DEBUG' => false,
'WP_DEBUG_DISPLAY' => false,
);
/** Init and messages. ====================================================================== */
/**
* Init.
*
* @since 1.0
*/
protected function init() {
/** Translators: %s is a file name. */
$this->title = sprintf( __( 'Check your %s file, especially the PHP constants.', 'secupress' ), 'wp-config.php' );
/** Translators: %s is a file name. */
$this->more = sprintf( __( 'You can use the %s file to improve the security of your website.', 'secupress' ), 'wp-config.php' );
/** Translators: %s is a file name. */
$this->more_fix = sprintf( __( 'Set some PHP constants in your %s file to improve the security of your website.', 'secupress' ), 'wp-config.php' );
}
/**
* Get messages.
*
* @since 1.0
*
* @param (int) $message_id A message ID.
*
* @return (string|array) A message if a message ID is provided. An array containing all messages otherwise.
*/
public static function get_messages( $message_id = null ) {
$messages = array(
// "good"
/** Translators: %s is a file name. */
0 => sprintf( __( 'Your %s file is correct.', 'secupress' ), 'wp-config.php' ),
/** Translators: %s is a constant name. */
1 => sprintf( __( 'A must-use plugin has been added in order to change the default value for %s.', 'secupress' ), 'COOKIEHASH' ),
// "warning"
100 => __( 'This fix is pending, please reload the page to apply it now.', 'secupress' ),
// "bad"
/** Translators: %s is a constant name. */
201 => sprintf( __( 'The PHP constant %s is defined with the default value, it should be modified.', 'secupress' ), 'COOKIEHASH' ),
/** Translators: 1 is a file name, 2 is a constant name. */
202 => sprintf( __( 'In your %1$s file, the PHP constant %2$s should be set.', 'secupress' ), 'wp-config.php', '%s' ),
207 => _n_noop(
/** Translators: 1 is a file name, 2 is a constant name. */
'In your %1$s file, the PHP constant %2$s should not be set.',
'In your %1$s file, the PHP constants %2$s should not be set.',
'secupress'
),
208 => _n_noop(
/** Translators: 1 is a file name, 2 is a constant name. */
'In your %1$s file, the PHP constant %2$s should not be empty.',
'In your %1$s file, the PHP constants %2$s should not be empty.',
'secupress'
),
209 => _n_noop(
/** Translators: 1 is a file name, 2 is a constant name, 3 is a value. */
'In your %1$s file, the PHP constant %2$s should be set to %3$s.',
'In your %1$s file, the PHP constants %2$s should be set to %3$s.',
'secupress'
),
210 => _n_noop(
/** Translators: 1 is a file name, 2 is a constant name, 3 is a value. */
'In your %1$s file, the PHP constant %2$s should be set to %3$s.',
'In your %1$s file, the PHP constants %2$s should be set to %3$s.',
'secupress'
), // 209 and 210 are identical.
211 => _n_noop(
/** Translators: 1 is a file name, 2 is a constant name, 3 is a value. */
'In your %1$s file, the PHP constant %2$s should be set to %3$s or less.',
'In your %1$s file, the PHP constants %2$s should be set to %3$s or less.',
'secupress'
),
212 => _n_noop(
/** Translators: 1 is a file name, 2 is a constant name, 3 is a value. */
'In your %1$s file, the PHP constant %2$s should be set to %3$s or less.',
'In your %1$s file, the PHP constants %2$s should be set to %3$s or less.',
'secupress'
), // 211 and 212 are identical.
// "cantfix"
/** Translators: %s is a list of constant names. */
300 => __( 'Some PHP constants could not be set correctly: %s.', 'secupress' ),
/** Translators: %s is a constant name. */
301 => sprintf( __( 'Impossible to create a must-use plugin but the default value for %s needs to be changed.', 'secupress' ), 'COOKIEHASH' ),
302 => __( 'The wp-config.php file is not writable, the constants could not be changed.', 'secupress' ),
// DEPRECATED, NOT IN USE ANYMORE.
/** Translators: 1 is a file name, 2 is a constant name. */
203 => sprintf( __( 'In your %1$s file, the PHP constant %2$s should not be set.', 'secupress' ), 'wp-config.php', '%s' ),
/** Translators: 1 is a file name, 2 is a constant name. */
204 => sprintf( __( 'In your %1$s file, the PHP constant %2$s should not be empty.', 'secupress' ), 'wp-config.php', '%s' ),
/** Translators: 1 is a file name, 2 is a constant name, 3 is a value. */
205 => sprintf( __( 'In your %1$s file, the PHP constant %2$s should be set to %3$s.', 'secupress' ), 'wp-config.php', '%1$s', '%2$s' ),
/** Translators: 1 is a file name, 2 is a constant name, 3 is a value. */
206 => sprintf( __( 'In your %1$s file, the PHP constant %2$s should be set to %3$s or less.', 'secupress' ), 'wp-config.php', '%1$s', '%2$s' ),
);
if ( isset( $message_id ) ) {
return isset( $messages[ $message_id ] ) ? $messages[ $message_id ] : __( 'Unknown message', 'secupress' );
}
return $messages;
}
/** Getters. ================================================================================ */
/**
* Get the documentation URL.
*
* @since 1.2.3
*
* @return (string)
*/
public static function get_docs_url() {
return __( 'http://docs.secupress.me/article/93-wp-config-php-file-constants-scan', 'secupress' );
}
/** Scan. =================================================================================== */
/**
* Scan for flaw(s).
*
* @since 1.0
*
* @return (array) The scan results.
*/
public function scan() {
$activated = secupress_filter_scanner( __CLASS__ );
if ( true === $activated ) {
$this->add_message( 0 );
return parent::scan();
}
// COOKIEHASH.
$check = defined( 'COOKIEHASH' ) && COOKIEHASH === md5( get_site_option( 'siteurl' ) );
if ( $check ) {
// "bad"
$this->add_message( 201 );
}
// NOBLOGREDIRECT.
/** This filter is documented in wp-includes/ms-functions.php */
if ( is_multisite() && is_subdomain_install() && ! has_action( 'ms_site_not_found' ) && ( ! defined( 'NOBLOGREDIRECT' ) || ! NOBLOGREDIRECT || ! apply_filters( 'blog_redirect_404', NOBLOGREDIRECT ) ) ) {
// "bad"
$this->add_message( 202, array( 'NOBLOGREDIRECT' ) );
}
// Other constants.
$results = array();
foreach ( $this->constants as $constant => $compare ) {
$check = defined( $constant ) ? constant( $constant ) : null;
switch ( $compare ) {
case '!isset':
if ( isset( $check ) ) {
$results[207] = isset( $results[207] ) ? $results[207] : array();
$results[207][] = '' . $constant . '';
}
break;
case '!empty':
if ( empty( $check ) ) {
$results[208] = isset( $results[208] ) ? $results[208] : array();
$results[208][] = '' . $constant . '';
}
break;
case 1:
if ( ! $check ) {
$results[209] = isset( $results[209] ) ? $results[209] : array();
$results[209]['true'] = isset( $results[209]['true'] ) ? $results[209]['true'] : array();
$results[209]['true'][] = '' . $constant . '';
}
break;
case false:
if ( $check ) {
$results[210] = isset( $results[210] ) ? $results[210] : array();
$results[210]['false'] = isset( $results[210]['false'] ) ? $results[210]['false'] : array();
$results[210]['false'][] = '' . $constant . '';
}
break;
default:
$check = decoct( $check ) <= $compare;
$mes_id = 755 === $compare ? 211 : 212;
if ( ! $check ) {
$results[ $mes_id ] = isset( $results[ $mes_id ] ) ? $results[ $mes_id ] : array();
$results[ $mes_id ][ '0' . $compare ] = isset( $results[ $mes_id ][ '0' . $compare ] ) ? $results[ $mes_id ][ '0' . $compare ] : array();
$results[ $mes_id ][ '0' . $compare ][] = '' . $constant . '';
}
break;
}
}
if ( $results ) {
foreach ( $results as $message_id => $maybe_constants ) {
$first = reset( $maybe_constants );
if ( is_array( $first ) ) {
foreach ( $maybe_constants as $compare => $constants ) {
// "bad"
$this->add_message( $message_id, array( count( $constants ), 'wp-config.php', $constants, '' . $compare . '' ) );
}
} else {
// "bad"
$this->add_message( $message_id, array( count( $maybe_constants ), 'wp-config.php', $maybe_constants ) );
}
}
}
// "good"
$this->maybe_set_status( 0 );
return parent::scan();
}
/** Fix. ==================================================================================== */
/**
* Try to fix the flaw(s).
*
* @since 1.4.5
*
* @return (array) The fix results.
*/
public function need_manual_fix() {
return [ 'fix' => 'fix' ];
}
/**
* Get an array containing ALL the forms that would fix the scan if it requires user action.
*
* @since 1.4.5
*
* @return (array) An array of HTML templates (form contents most of the time).
*/
protected function get_fix_action_template_parts() {
return [ 'fix' => ' ' ];
}
/**
* Try to fix the flaw(s) after requiring user action.
*
* @since 1.4.5
*
* @return (array) The fix results.
*/
public function manual_fix() {
if ( $this->has_fix_action_part( 'fix' ) ) {
$this->fix();
}
// "good"
$this->add_fix_message( 1 );
return parent::manual_fix();
}
/**
* Try to fix the flaw(s).
*
* @since 1.0
*
* @return (array) The fix results.
*/
public function fix() {
global $current_user;
if ( secupress_delete_site_transient( 'secupress-cookiehash-muplugin-failed' ) ) {
// MU Plugin creation failed.
$this->add_fix_message( 301 );
return parent::fix();
}
if ( secupress_delete_site_transient( 'secupress-cookiehash-muplugin-succeeded' ) ) {
// MU Plugin creation succeeded.
$this->add_fix_message( 1 );
return parent::fix();
}
// COOKIEHASH.
$check = defined( 'COOKIEHASH' ) && COOKIEHASH === md5( get_site_option( 'siteurl' ) );
if ( $check ) {
// "bad"
secupress_set_site_transient( 'secupress-add-cookiehash-muplugin', array( 'ID' => $current_user->ID, 'username' => $current_user->user_login ) );
$this->add_fix_message( 100 );
}
// Other constants.
$wpconfig_filepath = secupress_is_wpconfig_writable();
if ( ! $wpconfig_filepath ) {
// "bad"
$this->add_fix_message( 302 );
return parent::fix();
}
$new_content = '';
$results = array();
$not_fixed = array();
foreach ( $this->constants as $constant => $compare ) {
$check = defined( $constant ) ? constant( $constant ) : null;
$replaced = false;
switch ( $compare ) {
case '!isset':
if ( isset( $check ) ) {
$not_fixed[] = sprintf( '%s', $constant );
}
break;
case '!empty':
if ( is_null( $check ) ) {
$errorlogfile = dirname( ini_get( 'error_log' ) ) . '/wp_errorlogfile.log';
$new_content .= "define( '{$constant}', '{$errorlogfile}' ); // Added by SecuPress.\n";
}
break;
case 1:
if ( ! $check ) {
if ( $activated = $this->maybe_fix_by_plugin( $constant ) ) {
if ( is_wp_error( $activated ) ) {
$not_fixed[] = sprintf( '%s', $constant );
}
break;
}
if ( defined( $constant ) ) {
$replaced = secupress_comment_constant( $constant, $wpconfig_filepath );
}
if ( ! defined( $constant ) || $replaced ) {
$new_content .= "define( '{$constant}', true ); // Added by SecuPress.\n";
} else {
$not_fixed[] = sprintf( '%s', $constant );
}
}
break;
case false:
if ( $check ) {
if ( $activated = $this->maybe_fix_by_plugin( $constant ) ) {
if ( is_wp_error( $activated ) ) {
$not_fixed[] = sprintf( '%s', $constant );
}
break;
}
if ( defined( $constant ) ) {
$replaced = secupress_comment_constant( $constant, $wpconfig_filepath );
}
if ( ! defined( $constant ) || $replaced || 'WP_DEBUG_DISPLAY' === $constant ) {
$new_content .= "define( '{$constant}', false ); // Added by SecuPress.\n";
} else {
$not_fixed[] = sprintf( '%s', $constant );
}
}
break;
default:
$check = decoct( $check ) <= $compare;
break;
}
}
if ( $new_content ) {
secupress_put_contents( $wpconfig_filepath, $new_content, array( 'marker' => 'Correct Constants Values', 'put' => 'append', 'text' => ' true ) );
}
if ( $not_fixed ) {
$this->add_fix_message( 300, array( $not_fixed ) );
}
$this->maybe_set_fix_status( 0 );
return parent::fix();
}
/** Tools. ================================================================================== */
/**
* Tell if the fix for the given constant is a plugin (and activate it).
*
* @since 1.1.4
*
* @param (string) $constant A constant name.
*
* @return (bool|object) False if no plugin, true if the plugin was successfully activated, a `WP_Error` object if the plugin returned an error.
*/
public function maybe_fix_by_plugin( $constant ) {
global $wp_settings_errors;
$has_plugin = array(
'ALLOW_UNFILTERED_UPLOADS' => 'unfiltered-uploads',
'DISALLOW_FILE_EDIT' => 'file-edit',
);
if ( empty( $has_plugin[ $constant ] ) ) {
return false;
}
secupress_activate_submodule( 'wordpress-core', 'wp-config-constant-' . $has_plugin[ $constant ] );
$last_error = is_array( $wp_settings_errors ) && $wp_settings_errors ? end( $wp_settings_errors ) : false;
$error_codes = array( 'wp_config_not_writable' => 1, 'constant_not_removed' => 1, 'constant_not_added' => 1 );
if ( $last_error && 'general' === $last_error['setting'] && isset( $error_codes[ $last_error['code'] ] ) ) {
array_pop( $wp_settings_errors );
return new WP_Error( $last_error['code'], $last_error['message'] );
}
return true;
}
}