Ubuntu
[
'title' => __( 'Dashboard', 'secupress' ),
'icon' => 'cogs',
'dashicon' => 'admin-home',
'summaries' => [
'small' => __( 'License, Import & Export', 'secupress' ),
'normal' => __( 'nothing', 'secupress' ),
],
'with_form' => false,
'with_reset_box' => false,
'submodules' => [
'module-secupress_display_apikey_options' => ! defined( 'SECUPRESS_HIDE_API_KEY' ) || SECUPRESS_HIDE_API_KEY ? __( 'Licence Information', 'secupress' ) : '',
'module-secupress_display_whitelabel_options' => ! secupress_is_pro() || ( secupress_is_pro() && defined( 'WP_SWL' ) && WP_SWL ) ? ( ! secupress_is_pro() ? '*' : '' ) . __( 'White Label', 'secupress' ) : '',
'module-import_export' => '*' . __( 'Settings Import & Export', 'secupress' ),
]
],
'users-login' => [
'title' => __( 'Users & Login', 'secupress' ),
'icon' => 'user-login',
'dashicon' => 'groups',
'summaries' => [
'small' => __( 'Protect your users', 'secupress' ),
'normal' => __( 'The best and easiest way to make sure that users\' data will be protected, and their accounts not compromised.', 'secupress' ),
],
'submodules' => [
'login-protection_type_limitloginattempts' => __( 'Limit Login Attempts', 'secupress' ),
'login-protection_type_bannonexistsuser' => __( 'Ban Non Existing Users', 'secupress' ),
'login-protection_sessions_control' => '*' . __( 'Session Control', 'secupress' ),
'double-auth_type' => '*' . __( '2FA PasswordLess', 'secupress' ),
'captcha_activate' => __( 'Captcha', 'secupress' ),
'password-policy_password_expiration' => '*' . __( 'Password Lifespan', 'secupress' ),
'password-policy_strong_passwords' => '*' . __( 'Strong Password', 'secupress' ),
'password-policy_ask-old-password' => __( 'Ask Old Password', 'secupress' ),
'blacklist-logins_activated' => __( 'Forbidden Usernames', 'secupress' ),
'blacklist-logins_stop-user-enumeration' => __( 'Stop User Enumeration', 'secupress' ),
'move-login_activated' => __( 'Move Login Page', 'secupress' ),
]
],
'plugins-themes' => [
'title' => __( 'Plugins & Themes', 'secupress' ),
'icon' => 'themes-plugins',
'dashicon' => 'admin-plugins',
'summaries' => [
'small' => __( 'Check your plugins & themes', 'secupress' ),
'normal' => __( 'Detect themes and plugins known as vulnerable to avoid hackings. Also, manage installation and activation rights on them.', 'secupress' ),
],
'submodules' => [
'uploads_activate' => __( 'Disallow .zip uploads', 'secupress' ),
'plugins_installation' => __( 'Plugins Installation', 'secupress' ),
'plugins_activation' => '*' . __( 'Plugins Activation', 'secupress' ),
'plugins_deactivation' => '*' . __( 'Plugins Deactivation', 'secupress' ),
'plugins_deletion' => '*' . __( 'Plugins Deletion', 'secupress' ),
'plugins_detect_bad_plugins' => '*' . __( 'Detect Bad Plugins', 'secupress' ),
'themes_installation' => __( 'Themes Installation', 'secupress' ),
'themes_activation' => '*' . __( 'Themes Switch', 'secupress' ),
'themes_deletion' => '*' . __( 'Themes Deletion', 'secupress' ),
'themes_detect_bad_themes' => '*' . __( 'Detect Bad Themes', 'secupress' ),
]
],
'wordpress-core' => [
'title' => __( 'WordPress Core', 'secupress' ),
'icon' => 'core',
'dashicon' => 'wordpress',
'summaries' => [
'small' => __( 'Core Tweaking', 'secupress' ),
'normal' => __( 'WordPress can be tweaked in so many ways. But are you using the right ones? Let\'s see!', 'secupress' ),
],
'submodules' => [
'auto-update_minor' => __( 'Minor Updates', 'secupress' ),
'auto-update_major' => __( 'Major Updates', 'secupress' ),
'wp-config_disallow_file_edit' => __( 'Disallow File Edit', 'secupress' ),
'wp-config_disallow_unfiltered_uploads' => __( 'Disallow Unfiltered Uploads', 'secupress' ),
]
],
'sensitive-data' => [
'title' => __( 'Sensitive Data', 'secupress' ),
'icon' => 'sensitive-data',
'dashicon' => 'lock',
'summaries' => [
'small' => __( 'Keep your data safe', 'secupress' ),
'normal' => __( 'Preserve your data and avoid losing your content in case of attack.', 'secupress' ),
],
'submodules' => [
'wp-endpoints_xmlrpc_block-all' => __( 'XML-RPC Management', 'secupress' ),
'content-protect_blackhole' => __( 'Blackhole', 'secupress' ),
'content-protect_hotlink' => '*' . __( 'Anti Hotlink', 'secupress' ),
'content-protect_directory-listing' => __( 'Directory Listing', 'secupress' ),
'content-protect_php-disclosure' => __( 'PHP Disclosure', 'secupress' ),
'content-protect_php-version' => __( 'PHP Version Disclosure', 'secupress' ),
'content-protect_wp-version' => __( 'PHP WP Disclosure', 'secupress' ),
'content-protect_bad-url-access' => __( 'Bad URL Access', 'secupress' ),
'content-protect_readmes' => __( 'Protect Readme Files', 'secupress' ),
'page-protect_profile' => '*' . __( 'Protect Profile Page', 'secupress' ),
'page-protect_settings' => '*' . sprintf( __( 'Protect %s Pages', 'secupress' ), SECUPRESS_PLUGIN_NAME ),
]
],
'firewall' => [
'title' => __( 'Firewall', 'secupress' ),
'icon' => 'firewall',
'dashicon' => 'shield',
'summaries' => [
'small' => __( 'Block bad requests', 'secupress' ),
'normal' => __( 'Malicious requests are common, unfortunatly. All malicious incoming requests will be checked and quietly blocked.', 'secupress' ),
],
'submodules' => [
'bbq-headers_user-agents-header' => __( 'Block Bad User Agents', 'secupress' ),
'bbq-headers_request-methods-header' => __( 'Block Bad Request Methods', 'secupress' ),
'bbq-headers_fake-google-bots' => __( 'Block Fake SEO Bots', 'secupress' ),
'bbq-url-content_bad-contents' => __( 'Block Bad Content', 'secupress' ),
'bbq-url-content_bad-sqli-scan' => __( 'Block SQLi Scan Attempts', 'secupress' ),
'bbq-url-content_ban-404-php' => __( 'Block 404 requests on PHP files', 'secupress' ),
'bruteforce_activated' => '*' . __( 'Front Anti Brute-Force', 'secupress' ),
'geoip-system_type_-1' => '*' . __( 'GeoIP Management', 'secupress' ),
]
],
'antispam' => [
'title' => __( 'Anti Spam', 'secupress' ),
'icon' => 'antispam',
'dashicon' => 'email-alt',
'summaries' => [
'small' => __( 'Get rid of bad bots', 'secupress' ),
'normal' => __( 'Traffic done by bot represents about 60% of the internet. Spams are done by these bots. Don\'t let them do that!', 'secupress' ),
],
'submodules' => [
'antispam_antispam_fightspam' => __( 'Anti Spam Rules', 'secupress' ),
'antispam_mark-as_spam' => __( 'Mark Spam As', 'secupress' ),
'antispam_block-shortcodes' => __( 'Block Shortcodes', 'secupress' ),
'antispam_better-blacklist-comment' => __( 'Better Comments Blacklist', 'secupress' ),
'antispam_forbid-pings-trackbacks' => __( 'Forbid Pingbacks & Trackbacks', 'secupress' ),
]
],
'logs' => [
'title' => _x( 'Logs', 'post type general name', 'secupress' ),
'icon' => 'logs',
'dashicon' => 'welcome-write-blog',
'summaries' => [
'small' => __( 'Monitor everything', 'secupress' ),
'normal' => __( 'Keep an eye on what happened on your website at any time. Also, control banned IPs from our modules here.', 'secupress' ),
],
'with_form' => false,
'with_reset_box' => false,
'submodules' => [
'secupress-banned-ips-list' => __( 'Banned IPs', 'secupress' ),
'banned-ips_whitelist' => __( 'IP Whitelist', 'secupress' ),
'logs_action-logs-activated' => __( 'Action Logs Activation', 'secupress' ),
'logs_404-logs-activated' => __( '404 Logs Activation', 'secupress' ),
]
],
'file-system' => [
'title' => __( 'Malware Scan', 'secupress' ),
'icon' => 'file-system',
'dashicon' => 'portfolio',
'summaries' => [
'small' => __( 'Permissions & Antivirus', 'secupress' ),
'normal' => __( 'Check file permissions, run monitoring and antivirus on your installation to verify file integrity.', 'secupress' ),
],
'with_form' => false,
'with_reset_box' => false,
'mark_as_pro' => $should_be_pro,
'submodules' => [
'secupress-settings-module_file-system--file-scanner' => __( 'File Scanner', 'secupress' ),
'bad-file-extensions_activated' => __( 'Bad File Extensions', 'secupress' ),
]
],
'backups' => [
'title' => __( 'Backups', 'secupress' ),
'icon' => 'backups',
'dashicon' => 'media-archive',
'summaries' => [
'small' => __( 'Never lose anything', 'secupress' ),
'normal' => __( 'Reduce the risks of losing your content in an attack by backing up your database and files.', 'secupress' ),
],
'with_form' => false,
'with_reset_box' => false,
'mark_as_pro' => $should_be_pro,
'submodules' => [
'backups-storage_location_local' => __( 'Backup Storage', 'secupress' ),
'secupress-settings-module_backups--backup-history' => __( 'Backup History', 'secupress' ),
'secupress-settings-module_backups--backup-db' => __( 'Database Backup', 'secupress' ),
'secupress-settings-module_backups--backup-file' => __( 'Files Backup', 'secupress' ),
]
],
'alerts' => [
'title' => __( 'Alerts', 'secupress' ),
'icon' => 'services',
'dashicon' => 'megaphone',
'summaries' => [
'small' => __( 'React quickly in case of attack', 'secupress' ),
'normal' => __( 'Being alerted of some important events will help you to react quickly in case of possible attacks.', 'secupress' ),
],
'mark_as_pro' => $should_be_pro,
'submodules' => [
'module-notifications' => __( 'Email Notifications', 'secupress' ),
'event-alerts_activated' => __( 'Events Alerts', 'secupress' ),
'daily-reporting_activated' => __( 'Daily Reports', 'secupress' ),
]
],
'schedules' => [
'title' => __( 'Schedules', 'secupress' ),
'icon' => 'schedule',
'dashicon' => 'calendar-alt',
'summaries' => [
'small' => __( 'Automate all your tasks', 'secupress' ),
'normal' => sprintf( __( 'Let %s scan your website when you are away by using recurent scans.', 'secupress' ), SECUPRESS_PLUGIN_NAME ),
],
'mark_as_pro' => $should_be_pro,
'with_reset_box' => false,
'submodules' => [
'module-backups' => __( 'Backups', 'secupress' ),
'module-scanners' => __( 'Scanners', 'secupress' ),
'module-files-monitoring' => __( 'File Monitoring', 'secupress' ),
]
],
];
return $modules;
}
/**
* Activate a sub-module.
*
* @since 1.0
* @since 1.3 Moved to global scope.
* @author Grégory Viguier
*
* @param (string) $module The module.
* @param (string) $submodule The sub-module.
* @param (array) $incompatible_submodules An array of sub-modules to deactivate.
*
* @return (bool) True on success. False on failure or if the submodule was already active.
*/
function secupress_activate_submodule( $module, $submodule, $incompatible_submodules = array() ) {
$file_path = secupress_get_submodule_file_path( $module, $submodule );
if ( ! $file_path ) {
return false;
}
$is_active = secupress_is_submodule_active( $module, $submodule );
$submodule = sanitize_key( $submodule );
if ( ! $is_active ) {
// Activate the sub-module.
if ( ! empty( $incompatible_submodules ) ) {
// Deactivate incompatible sub-modules.
secupress_deactivate_submodule( $module, $incompatible_submodules );
}
update_site_option( 'secupress_active_submodule_' . $submodule, $module );
require_once( $file_path );
secupress_add_module_notice( $module, $submodule, 'activation' );
}
/**
* Fires once a sub-module is activated, even if it was already active.
*
* @since 1.0
*
* @param (bool) $is_active True if the sub-module was already active.
*/
do_action( 'secupress.modules.activate_submodule_' . $submodule, $is_active );
/**
* Fires once any sub-module is activated, even if it was already active.
*
* @since 1.0
*
* @param (string) $submodule The sub-module slug.
* @param (bool) $is_active True if the sub-module was already active.
*/
do_action( 'secupress.modules.activate_submodule', $submodule, $is_active );
if ( ! $is_active ) {
secupress_delete_site_transient( SECUPRESS_ACTIVE_SUBMODULES );
}
return ! $is_active;
}
/**
* Deactivate a sub-module.
*
* @since 1.0
* @since 1.3 Moved to global scope.
* @author Grégory Viguier
*
* @param (string) $module The module.
* @param (string|array) $submodules The sub-module. Can be an array, deactivate multiple sub-modules.
* @param (array) $args An array of arguments to pass to the hooks.
*/
function secupress_deactivate_submodule( $module, $submodules, $args = array() ) {
$submodules = (array) $submodules;
if ( ! $submodules ) {
return;
}
$delete_cache = false;
foreach ( $submodules as $submodule ) {
$is_inactive = ! secupress_is_submodule_active( $module, $submodule );
$submodule = sanitize_key( $submodule );
if ( ! $is_inactive ) {
// Deactivate the sub-module.
delete_site_option( 'secupress_active_submodule_' . $submodule );
$delete_cache = true;
secupress_add_module_notice( $module, $submodule, 'deactivation' );
}
/**
* Fires once a sub-module is deactivated.
*
* @since 1.0
*
* @param (array) $args Some arguments.
* @param (bool) $is_inactive True if the sub-module was already inactive.
*/
do_action( 'secupress.modules.deactivate_submodule_' . $submodule, $args, $is_inactive );
/**
* Fires once any sub-module is deactivated.
*
* @since 1.0
*
* @param (string) $submodule The sub-module slug.
* @param (array) $args Some arguments.
* @param (bool) $is_inactive True if the sub-module was already inactive.
*/
do_action( 'secupress.modules.deactivate_submodule', $submodule, $args, $is_inactive );
}
if ( $delete_cache ) {
secupress_delete_site_transient( SECUPRESS_ACTIVE_SUBMODULES );
}
}
/**
* Activate a sub-module silently. This will remove a previous activation notice and trigger no activation hook.
*
* @since 1.0
* @since 1.3 Moved to global scope.
* @author Grégory Viguier
*
* @param (string) $module The module.
* @param (string) $submodule The sub-module.
*/
function secupress_activate_submodule_silently( $module, $submodule ) {
$file_path = secupress_get_submodule_file_path( $module, $submodule );
if ( ! $file_path ) {
return;
}
// Remove deactivation notice.
secupress_remove_module_notice( $module, $submodule, 'deactivation' );
if ( secupress_is_submodule_active( $module, $submodule ) ) {
return;
}
$submodule = sanitize_key( $submodule );
// Activate the submodule.
update_site_option( 'secupress_active_submodule_' . $submodule, $module );
require_once( $file_path );
secupress_delete_site_transient( SECUPRESS_ACTIVE_SUBMODULES );
}
/**
* Deactivate a sub-module silently. This will remove all previous activation notices and trigger no deactivation hook.
*
* @since 1.0
* @since 1.3 Moved to global scope.
* @author Grégory Viguier
*
* @param (string) $module The module.
* @param (string|array) $submodules The sub-module. Can be an array, deactivate multiple sub-modules.
* @param (array) $args An array of arguments to pass to the hooks.
*/
function secupress_deactivate_submodule_silently( $module, $submodules, $args = array() ) {
$submodules = (array) $submodules;
if ( ! $submodules ) {
return;
}
$delete_cache = false;
foreach ( $submodules as $submodule ) {
// Remove activation notice.
secupress_remove_module_notice( $module, $submodule, 'activation' );
if ( ! secupress_is_submodule_active( $module, $submodule ) ) {
continue;
}
// Deactivate the submodule.
delete_site_option( 'secupress_active_submodule_' . $submodule );
$delete_cache = true;
}
if ( $delete_cache ) {
secupress_delete_site_transient( SECUPRESS_ACTIVE_SUBMODULES );
}
}
/**
* Add a sub-module (de)activation notice.
*
* @since 1.0
* @since 1.3 Moved to global scope.
* @author Grégory Viguier
*
* @param (string) $module The module.
* @param (string) $submodule The sub-module.
* @param (string) $action "activation" or "deactivation".
*/
function secupress_add_module_notice( $module, $submodule, $action ) {
$submodule_name = secupress_get_module_data( $module, $submodule );
if ( empty( $submodule_name['Name'] ) ) {
return;
}
$submodule_name = $submodule_name['Name'];
$transient_name = 'secupress_module_' . $action . '_' . get_current_user_id();
$transient_value = secupress_get_site_transient( $transient_name );
$transient_value = is_array( $transient_value ) ? $transient_value : array();
$transient_value[] = $submodule_name;
secupress_set_site_transient( $transient_name, $transient_value );
/**
* Fires once a sub-module (de)activation notice is created.
* The dynamic part of this hook name is "activation" or "deactivation".
*
* @since 1.0
*
* @param (string) $module The module.
* @param (string) $submodule The sub-module slug.
*/
do_action( 'secupress.modules.notice_' . $action, $module, $submodule );
}
/**
* Remove a sub-module (de)activation notice.
*
* @since 1.0
* @since 1.3 Moved to global scope.
* @author Grégory Viguier
*
* @param (string) $module The module.
* @param (string) $submodule The sub-module.
* @param (string) $action "activation" or "deactivation".
*/
function secupress_remove_module_notice( $module, $submodule, $action ) {
$transient_name = 'secupress_module_' . $action . '_' . get_current_user_id();
$transient_value = secupress_get_site_transient( $transient_name );
if ( ! $transient_value || ! is_array( $transient_value ) ) {
return;
}
$submodule_name = secupress_get_module_data( $module, $submodule );
if ( empty( $submodule_name['Name'] ) ) {
return;
}
$transient_value = array_flip( $transient_value );
$submodule_name = $submodule_name['Name'];
if ( ! isset( $transient_value[ $submodule_name ] ) ) {
return;
}
unset( $transient_value[ $submodule_name ] );
if ( $transient_value ) {
$transient_value = array_flip( $transient_value );
secupress_set_site_transient( $transient_name, $transient_value );
} else {
secupress_delete_site_transient( $transient_name );
}
}
/**
* Get a sub-module data (name, parent module, version, description, author).
*
* @since 1.0
* @since 1.3 Moved to global scope.
* @author Grégory Viguier
*
* @param (string) $module The module.
* @param (string) $submodule The sub-module.
*
* @return (array)
*/
function secupress_get_module_data( $module, $submodule ) {
$default_headers = array(
'Name' => 'Module Name',
'Module' => 'Main Module',
'Version' => 'Version',
'Description' => 'Description',
'Author' => 'Author',
);
$file_path = secupress_get_submodule_file_path( $module, $submodule );
if ( $file_path ) {
return get_file_data( $file_path, $default_headers, 'module' );
}
return array();
}
/**
* Remove (rewrite) rules from the `.htaccess`/`web.config` file.
* An error notice is displayed on nginx systems or if the file is not writable.
* This is usually used on the module deactivation.
*
* @since 1.0
* @since 1.3 Moved to global scope.
* @author Grégory Viguier
*
* @param (string) $marker Marker used in "BEGIN SecuPress ***".
* @param (string) $module_name The module name.
*
* @return (bool) True if the file has been edited.
*/
function secupress_remove_module_rules_or_notice( $marker, $module_name ) {
global $is_apache, $is_nginx, $is_iis7;
// Apache.
if ( $is_apache && ! secupress_write_htaccess( $marker ) ) {
$message = sprintf( __( '%s:', 'secupress' ), $module_name ) . ' ';
$message .= sprintf(
/** Translators: 1 is a file name, 2 and 3 are small parts of code. */
__( 'Your %1$s file is not writable, you have to edit it manually. Please remove the rules between %2$s and %3$s from the %1$s file.', 'secupress' ),
'.htaccess',
"# BEGIN SecuPress $marker",
'# END SecuPress'
);
secupress_add_settings_error( 'general', 'apache_manual_edit', $message, 'error' );
return false;
}
// IIS7.
if ( $is_iis7 && ! secupress_insert_iis7_nodes( $marker ) ) {
$message = sprintf( __( '%s:', 'secupress' ), $module_name ) . ' ';
$message .= sprintf(
/** Translators: 1 is a file name, 2 is a small part of code. */
__( 'Your %1$s file is not writable, you have to edit it manually. Please remove the rules with %2$s from the %1$s file.', 'secupress' ),
'web.config',
"SecuPress $marker"
);
secupress_add_settings_error( 'general', 'iis7_manual_edit', $message, 'error' );
return false;
}
// Nginx.
if ( $is_nginx ) {
$message = sprintf( __( '%s:', 'secupress' ), $module_name ) . ' ';
$message .= sprintf(
/** Translators: 1 and 2 are small parts of code, 3 is a file name. */
__( 'Your server runs Nginx. You have to edit the configuration file manually. Please remove all rules between %1$s and %2$s from the %3$s file.', 'secupress' ),
"# BEGIN SecuPress $marker",
'# END SecuPress',
'nginx.conf'
);
if ( apply_filters( 'secupress.nginx.notice', true ) ) {
secupress_add_settings_error( 'general', 'nginx_manual_edit', $message, 'error' );
}
return false;
}
return true;
}
/**
* Add (rewrite) rules to the `.htaccess`/`web.config` file.
* An error notice is displayed on nginx or not supported systems, or if the file is not writable.
* This is usually used on the module activation.
*
* @since 1.0
* @since 1.3 Moved to global scope.
* @author Grégory Viguier
*
* @param (array) $args An array of arguments.
*
* @return (bool) True if the file has been edited.
*/
function secupress_add_module_rules_or_notice( $args ) {
global $is_apache, $is_nginx, $is_iis7;
$args = array_merge( array(
'rules' => '',
'marker' => '',
'iis_args' => array(),
'title' => '', // Submodule name.
), $args );
$rules = $args['rules'];
$marker = $args['marker'];
$iis_args = $args['iis_args'];
$title = $args['title'];
// Apache.
if ( $is_apache ) {
// Write in `.htaccess` file.
if ( ! secupress_write_htaccess( $marker, $rules ) ) {
// File not writable.
$rules = esc_html( $rules );
$message = sprintf( __( '%s:', 'secupress' ), $title ) . ' ';
$message .= sprintf(
/** Translators: 1 is a file name, 2 is some code. */
__( 'Your %1$s file is not writable. Please add the following lines at the beginning of the file: %2$s', 'secupress' ),
'.htaccess',
"# BEGIN SecuPress $marker\n$rules# END SecuPress
"
);
secupress_add_settings_error( 'general', 'apache_manual_edit', $message, 'error' );
return false;
}
return true;
}
// IIS7.
if ( $is_iis7 ) {
$iis_args['nodes_string'] = $rules;
// Write in `web.config` file.
if ( ! secupress_insert_iis7_nodes( $marker, $iis_args ) ) {
// File not writable.
$path = ! empty( $iis_args['path'] ) ? $iis_args['path'] : '';
$path_end = ! $path && strpos( ltrim( $rules ), 'web.config',
'' . $iis_args['node_types'] . '',
'' . $path . '',
"{$spaces}{$rules}"
);
} else {
$message .= sprintf(
/** Translators: 1 is a file name, 2 is a folder path (kind of), 3 is some code. */
__( 'Your %1$s file is not writable. Please add the following lines inside the tags hierarchy %2$s (create it if does not exist): %3$s', 'secupress' ),
'web.config',
'' . $path . '',
"{$spaces}{$rules}"
);
}
secupress_add_settings_error( 'general', 'iis7_manual_edit', $message, 'error' );
return false;
}
return true;
}
// Nginx.
if ( $is_nginx ) {
// We can't edit the file, so we'll tell the user how to do.
$message = sprintf( __( '%s:', 'secupress' ), $title ) . ' ';
$message .= sprintf(
/** Translators: 1 is a file name, 2 is some code */
__( 'Your server runs Nginx. You have to edit the configuration file manually. Please add the following code to your %1$s file: %2$s', 'secupress' ),
'nginx.conf',
"$rules
"
);
if ( apply_filters( 'secupress.nginx.notice', true ) ) {
secupress_add_settings_error( 'general', 'nginx_manual_edit', $message, 'error' );
}
return false;
}
// Server not supported.
$message = sprintf( __( '%s:', 'secupress' ), $title ) . ' ';
$message .= __( 'It seems your server does not use Apache, Nginx, nor IIS7. This module won\'t work.', 'secupress' );
secupress_add_settings_error( 'general', 'unknown_os', $message, 'error' );
return false;
}
/**
* Get the counts of Free & Pro modules, or Free or Pro individually.
*
* @since 1.0.5
* @author Geoffrey Crofte
*
* @param (string) $type Null by default, "free" or "pro" string expected.
*
* @return (array|int) Array of both types of module count, or an individual count
*/
function secupress_get_options_counts( $type = null ) {
$modules = secupress_get_modules();
$counts = array( 'free' => 0, 'pro' => 0 );
foreach ( $modules as $mod ) {
$counts['free'] = ! empty( $mod['counts']['free_options'] ) ? $counts['free'] + $mod['counts']['free_options'] : $counts['free'];
$counts['pro'] = ! empty( $mod['counts']['pro_options'] ) ? $counts['pro'] + $mod['counts']['pro_options'] : $counts['pro'];
}
return ! empty( $counts[ $type ] ) ? $counts[ $type ] : $counts;
}
/**
* Get a list of all active sub-modules.
*
* @since 1.0
* @author Grégory Viguier
*
* @return (array) An array of arrays with the modules as keys and lists of sub-modules as values.
*/
function secupress_get_active_submodules() {
global $wpdb;
// Try to get the cache.
$active_submodules = secupress_get_site_transient( SECUPRESS_ACTIVE_SUBMODULES );
if ( is_array( $active_submodules ) ) {
return $active_submodules;
}
if ( is_multisite() ) {
$results = $wpdb->get_results( "SELECT meta_value AS module, REPLACE( meta_key, 'secupress_active_submodule_', '' ) AS submodule FROM $wpdb->sitemeta WHERE meta_key LIKE 'secupress\_active\_submodule\_%' ORDER BY meta_value, meta_key" );
} else {
$results = $wpdb->get_results( "SELECT option_value AS module, REPLACE( option_name, 'secupress_active_submodule_', '' ) AS submodule FROM $wpdb->options WHERE option_name LIKE 'secupress\_active\_submodule\_%' ORDER BY option_value, option_name" );
}
if ( ! $results ) {
secupress_set_site_transient( SECUPRESS_ACTIVE_SUBMODULES, array() );
return array();
}
$active_submodules = array();
foreach ( $results as $result ) {
if ( ! isset( $active_submodules[ $result->module ] ) ) {
$active_submodules[ $result->module ] = array();
}
$active_submodules[ $result->module ][] = sanitize_key( $result->submodule );
}
secupress_set_site_transient( SECUPRESS_ACTIVE_SUBMODULES, $active_submodules );
return $active_submodules;
}
/**
* Check whether a sub-module is active.
*
* @since 1.0
*
* @param (string) $module A module.
* @param (string) $submodule A sub-module.
* @author Grégory Viguier
*
* @return (bool)
*/
function secupress_is_submodule_active( $module, $submodule ) {
$submodule = sanitize_key( $submodule );
if ( defined( 'DOING_AJAX' ) && DOING_AJAX ) {
$is_active = get_site_option( 'secupress_active_submodule_' . $submodule );
$is_active = $is_active && $module === $is_active;
if ( $is_active && ! secupress_is_pro() && secupress_submodule_is_pro( $module, $submodule ) ) {
return false;
}
return $is_active;
}
$active_submodules = secupress_get_active_submodules();
if ( empty( $active_submodules[ $module ] ) || ! is_array( $active_submodules[ $module ] ) ) {
return false;
}
$active_submodules[ $module ] = array_flip( $active_submodules[ $module ] );
$is_active = isset( $active_submodules[ $module ][ $submodule ] );
if ( $is_active && ! secupress_is_pro() && secupress_submodule_is_pro( $module, $submodule ) ) {
return false;
}
return $is_active;
}
/**
* Get a list of all active Pro sub-modules.
*
* @since 1.1.4
* @author Grégory Viguier
*
* @return (array) An array of arrays with the modules as keys and lists of sub-modules as values.
*/
function secupress_get_active_pro_submodules() {
static $active_submodules_cache;
static $active_pro_submodules;
$active_submodules_current = secupress_get_active_submodules();
if ( $active_submodules_cache !== $active_submodules_current ) {
$active_submodules_cache = $active_submodules_current;
unset( $active_pro_submodules );
}
if ( isset( $active_pro_submodules ) ) {
return $active_pro_submodules;
}
$active_pro_submodules = array();
if ( $active_submodules_current ) {
foreach ( $active_submodules_current as $module => $submodules ) {
foreach ( $submodules as $i => $submodule ) {
if ( secupress_submodule_is_pro( $module, $submodule ) ) {
if ( empty( $active_pro_submodules[ $module ] ) ) {
$active_pro_submodules[ $module ] = array();
}
$active_pro_submodules[ $module ][] = $submodule;
}
}
}
}
return $active_pro_submodules;
}
/**
* Tell if a sub-module is Pro.
*
* @since 1.1.4
* @author Grégory Viguier
*
* @param (string) $module The module.
* @param (string) $submodule The sub-module.
*
* @return (bool) True if Pro. False otherwize.
*/
function secupress_submodule_is_pro( $module, $submodule ) {
static $paths = array();
$key = $module . '|' . $submodule;
if ( ! isset( $paths[ $key ] ) ) {
$file_path = sanitize_key( $module ) . '/plugins/' . sanitize_key( $submodule ) . '.php';
if ( defined( 'SECUPRESS_PRO_MODULES_PATH' ) ) {
$paths[ $key ] = file_exists( SECUPRESS_PRO_MODULES_PATH . $file_path );
} else {
$paths[ $key ] = ! file_exists( SECUPRESS_MODULES_PATH . $file_path );
}
}
return $paths[ $key ];
}
/**
* Get a sub-module file path.
*
* @since 1.0
* @author Grégory Viguier
*
* @param (string) $module The module.
* @param (string) $submodule The sub-module.
*
* @return (string|bool) The file path on success. False on failure.
*/
function secupress_get_submodule_file_path( $module, $submodule ) {
$file_path = sanitize_key( $module ) . '/plugins/' . sanitize_key( $submodule ) . '.php';
if ( defined( 'SECUPRESS_PRO_MODULES_PATH' ) && file_exists( SECUPRESS_PRO_MODULES_PATH . $file_path ) ) {
return SECUPRESS_PRO_MODULES_PATH . $file_path;
}
if ( file_exists( SECUPRESS_MODULES_PATH . $file_path ) ) {
return SECUPRESS_MODULES_PATH . $file_path;
}
return false;
}
/**
* Get user-agents forbidden by default.
*
* @since 1.0
*
* @return (string) A comma-separated list.
*/
function secupress_firewall_bbq_headers_user_agents_list_default() {
return 'Gecko/2009032609 Firefox, ADSARobot, ah-ha, almaden, aktuelles, Anarchie, amzn_assoc, ASPSeek, ASSORT, ATHENS, Atomz, attach, autoemailspider, BackWeb, Bandit, BatchFTP, bdfetch, big.brother, BlackWidow, bmclient, Boston Project, BravoBrian SpiderEngine MarcoPolo, Bot mailto:craftbot@yahoo.com, Buddy, Bullseye, bumblebee, capture, CherryPicker, ChinaClaw, CICC, clipping, Collector, Copier, Crescent, Crescent Internet ToolPak, Custo, cyberalert, DA$, Deweb, diagem, Digger, Digimarc, DIIbot, DISCo, DISCo Pump, DISCoFinder, Download Demon, Download Wonder, Downloader, Drip, DSurf15a, DTS.Agent, EasyDL, eCatch, ecollector, efp@gmx.net, Email Extractor, EirGrabber, EmailCollector, EmailSiphon, EmailWolf, Express WebPictures, ExtractorPro, EyeNetIE, FavOrg, fastlwspider, Favorites Sweeper, FEZhead, FileHound, FlashGet WebWasher, FlickBot, fluffy, FrontPage, GalaxyBot, Generic, Getleft, GetRight, GetSmart, GetWeb!, GetWebPage, gigabaz, Girafabot, Go!Zilla, Go!Zilla, Go-Ahead-Got-It, GornKer, gotit, Grabber, GrabNet, Grafula, Green Research, grub-client, Harvest, hhjhj@yahoo, hloader, HMView, HomePageSearch, http generic, HTTrack, httpdown, httrack, ia_archiver, IBM_Planetwide, Image Stripper, Image Sucker, imagefetch, IncyWincy, Indy*Library, Indy Library, informant, Ingelin, InterGET, Internet Ninja, InternetLinkagent, Internet Ninja, InternetSeer.com, Iria, Irvine, JBH*agent, JetCar, JOC, JOC Web Spider, JustView, KWebGet, Lachesis, larbin, LeechFTP, LexiBot, lftp, libwww, likse, Link*Sleuth, LINKS ARoMATIZED, LinkWalker, LWP, lwp-trivial, Mag-Net, Magnet, Mac Finder, Mag-Net, Mass Downloader, MCspider, Memo, Microsoft.URL, MIDown tool, Mirror, Missigua Locator, Mister PiX, MMMtoCrawl/UrlDispatcherLLL, ^Mozilla$, Mozilla.*Indy, Mozilla.*NEWT, Mozilla*MSIECrawler, MS FrontPage*, MSFrontPage, MSIECrawler, MSProxy, multithreaddb, nationaldirectory, Navroad, NearSite, NetAnts, NetCarta, NetMechanic, netprospector, NetResearchServer, NetSpider, Net Vampire, NetZIP, NetZip Downloader, NetZippy, NEWT, NICErsPRO, Ninja, NPBot, Octopus, Offline Explorer, Offline Navigator, OpaL, Openfind, OpenTextSiteCrawler, PageGrabber, Papa Foto, PackRat, pavuk, pcBrowser, PersonaPilot, PingALink, Pockey, psbot, PSurf, puf, Pump, PushSite, QRVA, RealDownload, Reaper, Recorder, ReGet, replacer, RepoMonkey, Robozilla, Rover, RPT-HTTPClient, Rsync, Scooter, SearchExpress, searchhippo, searchterms.it, Second Street Research, Seeker, Shai, Siphon, sitecheck, sitecheck.internetseer.com, SiteSnagger, SlySearch, SmartDownload, snagger, Snake, SpaceBison, Spegla, SpiderBot, sproose, SqWorm, Stripper, Sucker, SuperBot, SuperHTTP, Surfbot, SurfWalker, Szukacz, tAkeOut, tarspider, Teleport Pro, Templeton, TrueRobot, TV33_Mercator, UIowaCrawler, UtilMind, URLSpiderPro, URL_Spider_Pro, Vacuum, vagabondo, vayala, visibilitygap, VoidEYE, vspider, Web Downloader, w3mir, Web Data Extractor, Web Image Collector, Web Sucker, Wweb, WebAuto, WebBandit, web.by.mail, Webclipping, webcollage, webcollector, WebCopier, webcraft@bea, webdevil, webdownloader, Webdup, WebEMailExtrac, WebFetch, WebGo IS, WebHook, Webinator, WebLeacher, WEBMASTERS, WebMiner, WebMirror, webmole, WebReaper, WebSauger, Website, Website eXtractor, Website Quester, WebSnake, Webster, WebStripper, websucker, webvac, webwalk, webweasel, WebWhacker, WebZIP, Whacker, whizbang, WhosTalking, Widow, WISEbot, WWWOFFLE, x-Tractor, ^Xaldon WebSpider, WUMPUS, Xenu, XGET, Zeus.*Webster, Zeus';
}