Your IP : 216.73.216.44
<?php
namespace WP_Defender\Component\Audit;
use Calotes\Helper\Array_Cache;
use WP_Defender\Component;
use WP_Defender\Model\Setting\Audit_Logging;
use WP_Defender\Module\Audit\Component\Audit_API;
use WP_Defender\Module\Audit\Model\Settings;
use WP_Defender\Traits\IP;
use WP_Defender\Traits\User;
/**
* Class Audit_Event
* @package WP_Defender\Component\Audit
*/
abstract class Audit_Event extends Component {
use User, IP;
public const ACTION_DELETED = 'deleted', ACTION_TRASHED = 'trashed', ACTION_RESTORED = 'restored', ACTION_UPDATED = 'updated';
/**
* Return an array of hooks.
*
* @return mixed
*/
public abstract function get_hooks();
/**
* @param array $args Custom args.
* @param array $params Whole parameters of current hook.
*/
private static function get_custom_args( $args, &$params, &$leftover ) {
foreach ( $args as $key => $arg ) {
if ( is_string( $arg ) && preg_match( '/{{.*}}/', $arg ) ) {
$search = str_replace( [ '{{', '}}' ], '', $arg );
$found = self::recursive_look_array( $params, $search );
if ( false !== $found ) {
$params[ $key ] = $found;
}
} else {
$params[ $key ] = $arg;
}
}
}
/**
* @param $args
* @param $params
* @param $leftover
*/
private static function get_program_args( $args, &$params, &$leftover ) {
foreach ( $args as $key => $arg ) {
// Loop through each.
$func_args = [];
if ( isset( $arg['params'] ) && is_array( $arg['params'] ) ) {
foreach ( $arg['params'] as $value ) {
if ( is_string( $value ) && preg_match( '/{{.*}}/', $value ) ) {
$search = str_replace( [ '{{', '}}' ], '', $value );
$found = self::recursive_look_array( $params, $search );
if ( false !== $found ) {
$func_args[] = $found;
}
} else {
$func_args[] = $value;
}
}
}
// Call the function.
if ( ! is_array( $arg['callable'] ) ) {
$ret = call_user_func_array( $arg['callable'], $func_args );
} else {
$reflection_method = new \ReflectionMethod( $arg['callable'][0], $arg['callable'][1] );
$ret = $reflection_method->invokeArgs( new $arg['callable'][0], $func_args );
}
if ( isset( $arg['result_property'] ) ) {
$ret = self::recursive_look( $ret, explode( '->', $arg['result_property'] ) );
}
$params[ $key ] = $ret;
}
}
/**
* @param $obj
* @param $links
*
* @return bool|mixed
*/
private static function recursive_look( $obj, $links ) {
$look = null;
while ( is_array( $links ) || $links instanceof \Countable ? count( $links ) : 0 ) {
$link = array_shift( $links );
if ( is_array( $obj ) ) {
$obj = @$obj[ $link ];// phpcs:ignore
} elseif ( is_object( $obj ) ) {
$obj = $obj->$link;
} else {
$look = false;
break;
}
}
if ( false === $look ) {
return false;
}
return $obj;
}
/**
* @param $data
* @param $links
*
* @return bool|mixed
*/
private static function recursive_look_array( $data, $links ) {
$links = explode( '->', $links );
$obj = $data[ $links[0] ];
unset( $links[0] );
$obj = self::recursive_look( $obj, $links );
return $obj;
}
/**
* In many case, text can be condition, example an array contain text 1, text 2, text 3, if 2 matched, we get the first.
*
* @param $text
* @param $params
*
* @return mixed
*/
private function get_text( $text, $params ) {
if ( ! is_array( $text ) ) {
return $text;
}
$matched = [];
foreach ( $text as $row ) {
$t = $row[0];
// This will be inside parameters.
$value_placeholder = str_replace( [ '{{', '}}' ], '', $row[1] );
// No need to validate here, all should be passed by hardcode.
$value = self::recursive_look_array( $params, $value_placeholder );
$compare = $row[2];
if ( is_string( $compare ) && preg_match( '/{{.*}}/', $compare ) ) {
$search = str_replace( [ '{{', '}}' ], '', $compare );
$compare = self::recursive_look_array( $params, $search );
}
$comparison = $row[3] ?? '==';
if ( is_array( $value ) && is_array( $compare ) ) {
// Compare 2 arrays.
$map = [
'==' => count( self::array_recursive_diff( $value, $compare ) ) === 0,
'!=' => count( self::array_recursive_diff( $value, $compare ) ) !== 0,
];
} elseif ( is_array( $compare ) ) {
// In or not in array.
$map = [
'in' => in_array( $value, $compare ),
'not_in' => in_array( $value, $compare ) === false,
];
} else {
$map = [
'==' => $value == $compare,
'!=' => $value != $compare,
'>' => $value > $compare,
'>=' => $value >= $compare,
'<' => $value < $compare,
'<=' => $value <= $compare,
];
}
if ( $map[ $comparison ] ) {
$matched[] = $t;
}
}
return array_shift( $matched );
}
/**
* @param array $array1
* @param array $array2
*
* @return array
*/
protected static function array_recursive_diff( $array1, $array2 ): array {
$result = [];
foreach ( $array1 as $key => $value ) {
if ( array_key_exists( $key, $array2 ) ) {
if ( is_array( $value ) ) {
$recursive_diff = self::array_recursive_diff( $value, $array2[ $key ] );
if ( count( $recursive_diff ) ) {
$result[ $key ] = $recursive_diff;
}
} else {
if ( $value != $array2[ $key ] ) {
$result[ $key ] = $value;
}
}
} else {
$result[ $key ] = $value;
}
}
return $result;
}
/**
* @return bool
*/
private static function check_condition( $conditions, $params ): bool {
$good = true;
foreach ( $conditions as $condition ) {
$links = $condition[0];
$value = self::recursive_look_array( $params, str_replace( [ '{{', '}}' ], '', $links ) );
$compare = $condition[1];
if ( is_string( $compare ) && preg_match( '/{{.*}}/', $compare ) ) {
$search = str_replace( [ '{{', '}}' ], '', $compare );
$compare = self::recursive_look_array( $params, $search );
}
if ( is_array( $compare ) && in_array( $value, $compare ) ) {
$good = false;
} elseif ( $value == $compare ) {
$good = false;
}
}
return $good;
}
public function build_log_data() {
$args = func_get_args();
$hook_name = $args[0];
$params = $args[1];
$user_id = get_current_user_id();
$hook_data = $args[2];
// Have to build iup params first.
if ( ( is_array( $hook_data['args'] ) || $hook_data['args'] instanceof \Countable ? count( $hook_data['args'] ) : 0 ) !== ( is_array( $params ) || $params instanceof \Countable ? count( $params ) : 0 ) ) {
// Return false for now.
return false;
} else {
if ( empty( $hook_data['args'] ) && empty( $params ) ) {
$params = [];
} else {
$params = array_combine( $hook_data['args'], $params );
}
}
if ( isset( $hook_data['callback'] ) && ! empty( $hook_data['callback'] ) ) {
// Custom callback provided, call it.
$reflection_method = new \ReflectionMethod( $hook_data['callback'][0], $hook_data['callback'][1] );
$ret = $reflection_method->invokeArgs(
new $hook_data['callback'][0],
[
$hook_name,
$params,
]
);
if ( is_array( $ret ) && 2 === count( $ret ) ) {
[$text, $context] = $ret;
} elseif ( is_array( $ret ) && 3 === count( $ret ) ) {
[$text, $context, $action] = $ret;
} else {
$text = false;
}
} else {
/**
* First we need to query all parameters,
* we have to loop around custom args, program args to queries and maintain the params list,
* then we will check the left over, till all done,
* then we will build up the text.
*/
$leftover = [];
if ( isset( $hook_data['custom_args'] ) ) {
self::get_custom_args( $hook_data['custom_args'], $params, $leftover );
}
if ( isset( $hook_data['program_args'] ) ) {
self::get_program_args( $hook_data['program_args'], $params, $leftover );
}
// Finally, default params.
$params = array_merge( $this->get_default_params(), $params );
// Still need to check if this condition okay.
if ( isset( $hook_data['false_when'] ) && self::check_condition(
$hook_data['false_when'],
$params
) === false ) {
return false;
}
// Now we got all params as key=>value, just build the text.
$text = self::get_text( $hook_data['text'], $params );
if ( empty( $text ) ) {
return false;
}
foreach ( $params as $key => $val ) {
$replacer = $val;
if ( is_array( $replacer ) || is_object( $replacer ) ) {
continue;
}
$text = str_replace( '{{' . $key . '}}', $replacer, $text );
}
$context = '';
if ( isset( $hook_data['context'] ) ) {
if ( is_array( $hook_data['context'] ) && is_callable( $hook_data['context'] ) ) {
$reflection_method = new \ReflectionMethod( $hook_data['context'][0], $hook_data['context'][1] );
$context = $reflection_method->invokeArgs(
new $hook_data['context'][0],
[
$hook_name,
$params,
]
);
} elseif ( preg_match( '/{{.*}}/', $hook_data['context'] ) ) {
$context = self::recursive_look_array(
$params,
str_replace(
[
'{{',
'}}',
],
'',
$hook_data['context']
)
);
} else {
$context = $hook_data['context'];
}
}
}
$anonymous_override_list = [
'wp_login',
'wp_logout',
'retrieve_password',
'after_password_reset',
];
if ( 0 === $user_id && in_array( $hook_name, $anonymous_override_list, true ) ) {
// In this state, user id still 0, we have to get the id via hooks param.
if ( isset( $params['user'] ) ) {
$user = $params['user'];
$user_id = $user->ID;
} elseif ( isset( $params['user_id'] ) ) {
$user_id = $params['user_id'];
} else {
// Incorrect data. Return.
return false;
}
}
// We don't get text. Return.
if ( false == $text ) {
return false;
}
$settings = new Audit_Logging();
// Build data.
$post = [
'timestamp' => time(),
'event_type' => $hook_data['event_type'],
'action_type' => $action ?? $hook_data['action_type'],
'site_url' => network_site_url(),
'user_id' => $user_id,
'context' => $context,
'ip' => $this->get_user_ip(),
'msg' => strip_tags( $text ),
'blog_id' => get_current_blog_id(),
'ttl' => strtotime( '+ ' . $settings->storage_days ),
];
Array_Cache::append( 'logs', $post, 'audit' );
}
/**
* @return array
*/
private function get_default_params(): array {
return [
'wp_user' => $this->get_source_of_action(),
'wp_user_id' => get_current_user_id(),
'blog_name' => is_multisite() ? '[' . get_bloginfo( 'name' ) . ']' : '',
];
}
}