Your IP : 216.73.216.44
<?php
namespace WP_Defender\Component;
use WP_Defender\Component;
/**
* Doing the logic for mask login module.
*
* Class Mask_Login
*
* @package WP_Defender\Component
*/
class Mask_Login extends Component {
/**
* Check if the current user is land on login page, then we can start the block.
* @param string $requested_path
*
* @return bool
*/
public function is_on_login_page( $requested_path ) {
// Decoded url path, e.g. for case 'wp-%61dmin'.
$requested_path = rawurldecode( strtolower( $requested_path ) );
$login_slugs = apply_filters(
'wd_login_strict_slugs',
array(
'wp-admin',
'wp-login',
'wp-login.php',
)
);
foreach ( $login_slugs as $slug ) {
if ( false !== stristr( $requested_path, "$slug" ) ) {
return true;
}
}
$login_slugs = apply_filters(
'wd_login_slugs',
array(
'login',
'dashboard',
'admin',
// Because WP redirects from 'login/' to the login page.
'login/',
)
);
// Check the request path contains default login text.
if ( in_array( $requested_path, $login_slugs, true ) ) {
return true;
}
return false;
}
/**
* Check if the request is land on masked URL.
*
* @param $masked_url string
*
* @return boolean
*/
public function is_land_on_masked_url( $masked_url ) {
return ltrim( rtrim( $this->get_request_path(), '/' ), '/' ) === ltrim( rtrim( $masked_url, '/' ), '/' );
}
/**
* Get the current request URI.
*
* @param null|string $site_url This only need in unit test.
*
* @return string
*/
public function get_request_path( $site_url = null ) {
if ( null === $site_url ) {
$site_url = $this->get_site_url();
}
$request_uri = $_SERVER['REQUEST_URI'];
// If parsed URL is null. PHP v8.1 displays it as deprecated.
$path = empty( wp_parse_url( $site_url, PHP_URL_PATH ) )
? ''
: wp_parse_url( $site_url, PHP_URL_PATH );
if ( strlen( $path ) && 0 === strpos( $request_uri, $path ) ) {
$request_uri = substr( $request_uri, strlen( $path ) );
}
$request_uri = '/' . ltrim( $request_uri, '/' );
return wp_parse_url( $request_uri, PHP_URL_PATH );
}
/**
* Copy cat from the function get_site_url without the filter.
*
* @param null $blog_id
* @param string $path
* @param null $scheme
*
* @return string
*/
private function get_site_url( $blog_id = null, $path = '', $scheme = null ) {
if ( empty( $blog_id ) || ! is_multisite() ) {
$url = get_option( 'siteurl' );
} else {
switch_to_blog( $blog_id );
$url = get_option( 'siteurl' );
restore_current_blog();
}
$url = set_url_scheme( $url, $scheme );
if ( $path && is_string( $path ) ) {
$url .= '/' . ltrim( $path, '/' );
}
return $url;
}
/**
* Todo: need if express_tickets are not saved?
* @param string $ticket
*
* @return bool
*/
public function redeem_ticket( $ticket ) {
$settings = new \WP_Defender\Model\Setting\Mask_Login();
$detail = $settings->express_tickets[ $ticket ] ?? false;
if ( false === $detail ) {
return false;
}
// Ticket expired.
if ( $detail['expiry'] < time() ) {
unset( $settings->express_tickets[ $ticket ] );
$settings->save();
return false;
}
$detail['used'] += 1;
$settings->express_tickets[ $ticket ] = $detail;
$settings->save();
return true;
}
/**
* Check if the HTTP_USER_AGENT is a bot.
*
* @return bool
*/
public function is_bot_request(): bool {
$is_bot_req = false;
/**
* Filters the bot list for Mask Login.
*
* @since 3.12.0
*
* @param array $bot_list A list of bots.
*/
$bot_list = apply_filters( 'wd_mask_login_bot_list', [
'bot',
'crawl',
'curl',
'dataprovider',
'search',
'get',
'spider',
'find',
'java',
'majesticsEO',
'google',
'yahoo',
'teoma',
'contaxe',
'yandex',
'libwww-perl',
'facebookexternalhit',
]);
$pattern = '/' . implode('|', $bot_list) . '/i';
if (
! empty( $_SERVER['HTTP_USER_AGENT'] ) &&
preg_match( $pattern, $_SERVER['HTTP_USER_AGENT'] )
) {
$is_bot_req = true;
}
/**
* Filters the result of bot request check.
*
* @since 3.12.0
*
* @param bool $is_bot_req Is it a bot request or not?
*/
return (bool) apply_filters( 'wd_mask_login_is_bot_request', $is_bot_req );
}
/**
* Check if locale should be set.
*
* @param string $mask_url The Mask URL slug.
*
* @since 3.12.0
* @return bool
*/
public function is_set_locale( string $mask_url ): bool {
return $this->is_land_on_masked_url( $mask_url ) && ! empty( $_GET['wp_lang'] );
}
/**
* Set locale on Mask Login page.
*
* @since 3.12.0
* @return void
*/
public function set_locale(): void {
$wp_lang = isset( $_GET['wp_lang'] ) ? sanitize_text_field( wp_unslash( $_GET['wp_lang'] ) ) : '';
if ( ! empty( $wp_lang ) ) {
switch_to_locale( $wp_lang );
}
}
}