Your IP : 216.73.216.44
<?php
namespace WP_Defender\Controller;
use Calotes\Component\Request;
use Calotes\Component\Response;
use WP_Defender\Component\Config\Config_Hub_Helper;
use WP_Defender\Component\Security_Tweaks\Servers\Server;
use Calotes\Helper\Array_Cache;
use WP_Defender\Component\Security_Tweaks\WP_Version;
use WP_Defender\Component\Security_Tweaks\Hide_Error;
use WP_Defender\Component\Security_Tweaks\PHP_Version;
use WP_Defender\Component\Security_Tweaks\Prevent_PHP;
use WP_Defender\Component\Security_Tweaks\Change_Admin;
use WP_Defender\Component\Security_Tweaks\Security_Key;
use WP_Defender\Component\Security_Tweaks\Login_Duration;
use WP_Defender\Component\Security_Tweaks\Disable_XML_RPC;
use WP_Defender\Component\Security_Tweaks\Disable_Trackback;
use WP_Defender\Component\Security_Tweaks\Prevent_Enum_Users;
use WP_Defender\Component\Security_Tweaks\Disable_File_Editor;
use WP_Defender\Component\Security_Tweaks\Protect_Information;
use WP_Defender\Controller;
class Security_Tweaks extends Controller {
public $slug = 'wdf-hardener';
/**
* @var \WP_Defender\Model\Setting\Security_Tweaks
*/
protected $model;
/**
* @var \WP_Defender\Component\Scan
*/
public $scan;
/**
* Components instance array.
*
* @var array
*/
private $component_instances;
/**
* Instance of Security_Key.
*
* @var Security_Key
*/
private $security_key;
/**
* Instance of Prevent_Enum_Users.
*
* @var Prevent_Enum_Users
*/
private $prevent_enum_users;
public const STATUS_ISSUES = 'issues', STATUS_RESOLVE = 'fixed', STATUS_IGNORE = 'ignore', STATUS_RESTORE = 'restore';
public function __construct() {
$this->register_page(
esc_html__( 'Recommendations', 'wpdef' ),
$this->slug,
[
&$this,
'main_view',
],
$this->parent_slug
);
$this->model = wd_di()->get( \WP_Defender\Model\Setting\Security_Tweaks::class );
$this->register_routes();
// Init all the tweaks, should happen one time.
$this->component_instances = $this->init_tweaks();
$this->scan = wd_di()->get( \WP_Defender\Component\Scan::class );
$this->security_key = $this->component_instances['security-key'];
$this->prevent_enum_users = $this->component_instances['prevent-enum-users'];
// Now shield up.
$this->boot();
// Add addition hooks.
add_action( 'defender_enqueue_assets', [ &$this, 'enqueue_assets' ] );
add_action( 'wp_loaded', [ &$this, 'should_output_error' ] );
}
/**
* Dummy function for testing a check.
*/
public function should_output_error() {
if ( ! isset( $_GET['defender_test_error_reporting'] ) ) {
return;
}
// It should be only trigger by admin.
if ( ! $this->check_permission() ) {
return;
}
$var = '$' . uniqid( '', true );
// This should output a warning.
echo ${$var};
exit();
}
/**
* Process.
* @param Request $request
*
* @return Response
* @defender_route
*/
public function process( Request $request ) {
$data = $request->get_data(
[
'slug' => [
'type' => 'string',
'sanitize' => 'sanitize_text_field',
],
'current_server' => [
'type' => 'string',
'sanitize' => 'sanitize_text_field',
],
]
);
$slug = $data['slug'] ?? false;
$tweak = $this->get_tweak( $slug );
if ( ! is_object( $tweak ) ) {
return new Response(
false,
[ 'message' => __( 'Invalid request', 'wpdef' ) ]
);
}
if ( in_array( $slug, [ 'prevent-php-executed', 'protect-information' ], true ) ) {
$current_server = $data['current_server'] ?? false;
if ( ! $current_server ) {
return new Response(
false,
[ 'message' => __( 'Invalid request', 'wpdef' ) ]
);
}
$ret = $tweak->process( $current_server );
} else {
$ret = $tweak->process();
}
if ( true === $ret ) {
Config_Hub_Helper::set_clear_active_flag();
$this->model->mark( self::STATUS_RESOLVE, $slug );
$this->ajax_response( __( 'Security recommendation successfully resolved.', 'wpdef' ) );
}
if ( is_wp_error( $ret ) ) {
$this->ajax_response( $ret->get_error_message(), false );
}
return new Response(
false,
[ 'message' => __( 'Invalid request', 'wpdef' ) ]
);
}
/**
* Revert.
* @param Request $request
*
* @return Response
* @defender_route
*/
public function revert( Request $request ) {
$data = $request->get_data(
[
'slug' => [
'type' => 'string',
'sanitize' => 'sanitize_text_field',
],
'current_server' => [
'type' => 'string',
'sanitize' => 'sanitize_text_field',
],
]
);
$slug = $data['slug'] ?? false;
$tweak = $this->get_tweak( $slug );
$invalid = [ 'message' => __( 'Invalid request', 'wpdef' ) ];
if ( ! is_object( $tweak ) ) {
return new Response(
false,
$invalid
);
}
if ( in_array( $slug, [ 'prevent-php-executed', 'protect-information' ], true ) ) {
$current_server = $data['current_server'] ?? false;
if ( ! $current_server ) {
return new Response(
false,
$invalid
);
}
$ret = $tweak->revert( $current_server );
} else {
$ret = $tweak->revert();
}
if ( is_wp_error( $ret ) ) {
$this->ajax_response( $ret->get_error_message(), false );
}
if ( true === $ret ) {
Config_Hub_Helper::set_clear_active_flag();
$this->model->mark( self::STATUS_ISSUES, $slug );
$this->ajax_response( __( 'Security recommendation successfully reverted.', 'wpdef' ) );
}
return new Response(
false,
$invalid
);
}
/**
* Ignore.
* @param Request $request
*
* @return Response
* @defender_route
*/
public function ignore( Request $request ) {
$data = $request->get_data(
[
'slug' => [
'type' => 'string',
'sanitize' => 'sanitize_text_field',
],
]
);
$slug = $data['slug'] ?? false;
$tweak = $this->get_tweak( $slug );
if ( ! is_object( $tweak ) ) {
return new Response(
false,
[ 'message' => __( 'Invalid request', 'wpdef' ) ]
);
}
$this->model->mark( self::STATUS_IGNORE, $slug );
$this->security_key->cron_unschedule();
$this->ajax_response( __( 'Security recommendation successfully ignored.', 'wpdef' ) );
}
/**
* Restore.
*
* @param Request $request
* @defender_route
*/
public function restore( Request $request ) {
$data = $request->get_data(
[
'slug' => [
'type' => 'string',
'sanitize' => 'sanitize_text_field',
],
]
);
$slug = $data['slug'] ?? false;
$tweak = $this->get_tweak( $slug );
if ( ! is_object( $tweak ) ) {
return new Response(
false,
[ 'message' => __( 'Invalid request', 'wpdef' ) ]
);
}
$this->model->mark( self::STATUS_RESTORE, $slug );
if ( $this->security_key->get_is_autogenerate_keys() ) {
// Mandatory: cron_schedule method bypass scheduling if already a schedule for this job.
$this->security_key->cron_unschedule();
$this->security_key->cron_schedule();
}
$this->ajax_response( __( 'Security recommendation successfully restored.', 'wpdef' ) );
}
/**
* Recheck.
* @param Request $request
*
* @return Response
* @defender_route
*/
public function recheck( Request $request ): Response {
$data = $request->get_data(
[
'slug' => [
'type' => 'string',
'sanitize' => 'sanitize_text_field',
],
]
);
$slug = $data['slug'] ?? false;
$tweak = $this->get_tweak( $slug );
if ( ! is_object( $tweak ) ) {
return new Response(
false,
[ 'message' => __( 'Invalid request', 'wpdef' ) ]
);
}
$ret = $tweak->check();
if ( true === $ret ) {
$this->ajax_response( __( 'Security recommendation successfully re-checked.', 'wpdef' ), true, 1 );
}
if ( is_wp_error( $ret ) ) {
return new Response(
false,
[ 'message' => $ret->get_error_message() ]
);
}
return new Response(
false,
[ 'message' => __( 'Invalid request', 'wpdef' ) ]
);
}
/**
* Update security reminder.
* @param Request $request
*
* @return Response
* @defender_route
*/
public function update_security_reminder( Request $request ): Response {
$data = $request->get_data();
$remind_date = $data['remind_date'] ?? false;
$is_autogen_flag = isset( $data['is_autogenerate_keys'] ) ?
filter_var( $data['is_autogenerate_keys'], FILTER_VALIDATE_BOOLEAN ) :
false;
if ( ! $remind_date ) {
return new Response(
false,
[ 'message' => __( 'Invalid Reminder frequency', 'wpdef' ) ]
);
}
$values = [
'reminder_duration' => $remind_date,
'reminder_date' => strtotime( '+' . $remind_date, current_time( 'timestamp' ) ),// phpcs:ignore
'is_autogenerate_keys' => $is_autogen_flag,
];
if ( update_site_option( 'defender_security_tweaks_' . $this->security_key->slug, $values ) ) {
if ( true === $is_autogen_flag ) {
// Mandatory: cron_schedule method bypass scheduling if already a schedule for this job.
$this->security_key->cron_unschedule();
$this->security_key->cron_schedule();
}
return new Response(
true,
[ 'message' => __( 'Security recommendation successfully updated.', 'wpdef' ) ]
);
} else {
return new Response(
false,
[ 'message' => __( 'Error while updating.', 'wpdef' ) ]
);
}
}
/**
* @param string $message
* @param bool $is_success
* @param bool|int $interval
*
* @return Response
*/
private function ajax_response( $message, $is_success = true, $interval = false ): Response {
global $wp_version;
$settings = new \WP_Defender\Model\Setting\Security_Tweaks();
$data = [
'message' => $message,
'summary' => [
'issues_count' => count( $settings->issues ),
'fixed_count' => count( $settings->fixed ),
'ignore_count' => count( $settings->ignore ),
'php_version' => PHP_VERSION,
'wp_version' => $wp_version,
],
'issues' => $this->init_tweaks( self::STATUS_ISSUES, 'array' ),
'fixed' => $this->init_tweaks( self::STATUS_RESOLVE, 'array' ),
'ignored' => $this->init_tweaks( self::STATUS_IGNORE, 'array' ),
'issues_slugs' => $settings->issues,
];
if ( $interval ) {
$data['interval'] = $interval;
}
return new Response( $is_success, $data );
}
/**
* Output necessary data on frontend.
*/
public function enqueue_assets() {
if ( ! $this->is_page_active() ) {
return;
}
wp_localize_script( 'def-securitytweaks', 'security_tweaks', $this->data_frontend() );
wp_enqueue_script( 'def-securitytweaks' );
$this->enqueue_main_assets();
}
/**
* @return array
*/
public function data_frontend(): array {
$this->refresh_tweaks_status();
global $wp_version;
$not_allowed_bulk = [
'php-version',
'replace-admin-username',
];
if ( 'nginx' === Server::get_current_server() ) {
$not_allowed_bulk[] = 'protect-information';
$not_allowed_bulk[] = 'prevent-php-executed';
}
$data = [
'summary' => [
'fixed_count' => count( $this->model->fixed ),
'ignore_count' => count( $this->model->ignore ),
'issues_count' => count( $this->model->issues ),
'php_version' => PHP_VERSION,
'wp_version' => $wp_version,
],
'issues' => $this->init_tweaks( self::STATUS_ISSUES, 'array' ),
'fixed' => $this->init_tweaks( self::STATUS_RESOLVE, 'array' ),
'ignored' => $this->init_tweaks( self::STATUS_IGNORE, 'array' ),
'not_allowed_bulk' => $not_allowed_bulk,
'indicator_issue_count' => $this->scan->indicator_issue_count(),
'is_autogenerate_keys' => $this->security_key->get_is_autogenerate_keys(),
'reminder_frequencies' => $this->security_key->reminder_frequencies(),
'enabled_user_enums' => $this->prevent_enum_users->get_enabled_user_enums(),
];
return array_merge( $data, $this->dump_routes_and_nonces() );
}
public function main_view() {
$this->render( 'main' );
}
/**
* @param Request $request
*
* @defender_route
*/
public function bulk_action( Request $request ) {
$data = $request->get_data(
[
'slugs' => [
'type' => 'array',
'sanitize' => 'sanitize_text_field',
],
'intention' => [
'type' => 'string',
'sanitize' => 'sanitize_text_field',
],
]
);
$slugs = $data['slugs'] ?? [];
$intention = $data['intention'] ?? false;
// Get processed and unprocessed tweaks.
[$processed, $unprocessed] = $this->security_tweaks_auto_action( $slugs, $intention );
$message = sprintf(
/* translators: 1: Either ignored or resolved, 2: Count security recommendations */
__( 'You have bulk %1$s %2$s security recommendations.', 'wpdef' ),
'ignore' === $intention ? 'ignored' : 'resolved',
$processed
);
if ( isset( $unprocessed ) && $unprocessed > 0 ) {
// If we have this case this mean the intention is resolved.
$message = sprintf(
/* translators: %d: Count security tweaks */
__(
'You have bulk actioned %d security recommendations. You still have a few unresolved security recommendations, which cannot be bulk actioned automatically, so please address them below.',
'wpdef'
),
$processed
);
Config_Hub_Helper::set_clear_active_flag();
}
$this->ajax_response( $message );
}
/**
* Mass processing.
*
* @param array $slugs
* @param string $intention
*
* @return array
*/
public function security_tweaks_auto_action( $slugs, $intention ): array {
$processed = 0;
$unprocessed = 0;
foreach ( $slugs as $slug ) {
$tweak = $this->get_tweak( $slug );
if ( 'ignore' === $intention ) {
$this->model->mark( self::STATUS_IGNORE, $slug );
} elseif ( 'resolve' === $intention ) {
$wont_do = [
'replace-admin-username',
'prevent-php-executed',
'wp-version',
'php-version',
'protect-information',
];
if ( in_array( $slug, $wont_do, true ) ) {
$unprocessed += 1;
continue;
}
if ( $tweak->has_method( 'bulk_process' ) ) {
$ret = $tweak->bulk_process();
} else {
$ret = $tweak->process();
}
if ( is_wp_error( $ret ) ) {
$data = $tweak->to_array();
$this->ajax_response(
sprintf(
/* translators: 1: Security tweak title, 2: Error message */
__(
'There is an error while processing recommendation %1$s, error message: %2$s',
'wpdef'
),
$data['title'],
$ret->get_error_message()
),
false
);
}
$this->model->mark( self::STATUS_RESOLVE, $slug );
}
$processed ++;
}
return [ $processed, $unprocessed ];
}
/**
* Refresh the tweak status and save their state.
*
* @return void
*/
public function refresh_tweaks_status() {
$tweaks = $this->init_tweaks();
$settings = new \WP_Defender\Model\Setting\Security_Tweaks();
$fixed = [];
$issues = [];
foreach ( $tweaks as $slug => $class ) {
if ( $settings->is_tweak_ignore( $slug ) ) {
continue;
}
$is_resolved = $class->check();
if ( $is_resolved ) {
$fixed[] = $slug;
} else {
$issues[] = $slug;
}
}
$settings->fixed = $fixed;
$settings->issues = $issues;
$settings->save();
}
/**
* This function for shield every active tweaks up, we will use the cached result.
* No check function trigger in this init runtime.
*/
private function boot() {
$tweaks = $this->init_tweaks( self::STATUS_RESOLVE );
foreach ( $tweaks as $tweak ) {
$tweak->shield_up();
}
}
/**
* Instance all the tweaks, happen one time in init runtime.
*
* @param null $type
* @param string $format Object for internal use, array for frontend use.
*
* @return array
*/
public function init_tweaks( $type = null, $format = 'object' ): array {
$classes = [
Disable_XML_RPC::class,
WP_Version::class,
Hide_Error::class,
PHP_Version::class,
Change_Admin::class,
Security_Key::class,
Login_Duration::class,
Disable_Trackback::class,
Prevent_Enum_Users::class,
Disable_File_Editor::class,
];
if ( 'cli' !== php_sapi_name() ) {
// We don't load this in cli, as clearly no server is running.
$classes = array_merge(
$classes,
[
Protect_Information::class,
Prevent_PHP::class,
]
);
}
$tweaks = Array_Cache::get( 'tweaks', 'tweaks' );
if ( ! is_array( $tweaks ) ) {
foreach ( $classes as $class ) {
$obj = new $class;
$tweaks[ $obj->slug ] = $obj;
}
Array_Cache::set( 'tweaks', $tweaks, 'tweaks' );
}
$tmp = [];
if ( is_null( $type ) ) {
$tmp = $tweaks;
} else {
$settings = new \WP_Defender\Model\Setting\Security_Tweaks();
$compare = $settings->$type;
foreach ( $compare as $slug ) {
if ( isset( $tweaks[ $slug ] ) ) {
$tmp[ $slug ] = $tweaks[ $slug ];
}
}
}
if ( 'array' === $format ) {
// We need to parse this as array.
foreach ( $tmp as $slug => $obj ) {
$arr = $obj->to_array();
$arr['status'] = $type;
$tmp[ $slug ] = $arr;
}
}
return $tmp;
}
/**
* @param $slug
*
* @return mixed|null
*/
private function get_tweak( $slug ) {
$tweaks = Array_Cache::get( 'tweaks', 'tweaks' );
return $tweaks[ $slug ] ?? null;
}
/**
* A summary data for dashboard.
*
* @return array
*/
public function to_array(): array {
$this->refresh_tweaks_status();
$settings = new \WP_Defender\Model\Setting\Security_Tweaks();
return [
'rules' => array_slice( $this->init_tweaks( self::STATUS_ISSUES, 'array' ), 0, 5 ),
'count' => [
'issues' => count( $settings->issues ),
'resolved' => count( $settings->fixed ),
'total' => count( $this->init_tweaks() ),
],
];
}
public function remove_settings() {
// Revert it first.
$tweaks = $this->init_tweaks( self::STATUS_RESOLVE );
// Assign this so internal can use the current server.
$_POST['current_server'] = Server::get_current_server();
foreach ( $tweaks as $tweak ) {
$tweak->revert();
if ( method_exists( $tweak, 'delete_all_option' ) ) {
$tweak->delete_all_option();
}
}
( new \WP_Defender\Model\Setting\Security_Tweaks() )->delete();
delete_site_transient( 'defender_current_server' );
delete_site_transient( 'defender_apache_version' );
wp_clear_scheduled_hook( 'wpdef_sec_key_gen' );
}
public function remove_data() {}
/**
* @param array $data
* @param string $request_reason
*
* @return bool|string
* @since 2.8.1 Add $request_reason param. If there's a request from Hub the plugin doesn't send the error message.
*/
public function automate( $data, $request_reason ) {
$this->refresh_tweaks_status();
$need_reauth = false;
// Resolve tweaks.
if ( ! empty( $data['fixed'] ) ) {
// There are some tweak that need manual apply, as files based, or change admin.
$manual_done = [
'replace-admin-username',
'prevent-php-executed',
'wp-version',
'php-version',
'protect-information',
];
$diff_keys = array_diff( $data['fixed'], $this->model->fixed, $manual_done );
if ( ! empty( $diff_keys ) ) {
foreach ( $diff_keys as $slug ) {
$tweak = $this->get_tweak( $slug );
if ( $tweak->has_method( 'bulk_process' ) ) {
$ret = $tweak->bulk_process();
} else {
$ret = $tweak->process();
}
if ( is_wp_error( $ret ) ) {
if ( 'hub' === $request_reason ) {
continue;
}
$data = $tweak->to_array();
return sprintf(
/* translators: 1: Security tweak title, 2: Error message */
__( 'There is an error while processing recommendation %1$s, error message: %2$s', 'wpdef' ),
$data['title'],
$ret->get_error_message()
);
}
$this->model->mark( self::STATUS_RESOLVE, $slug );
}
if ( in_array( ( new Security_Key )->slug, $diff_keys, true ) ) {
$need_reauth = true;
}
}
}
// Revert tweaks.
if ( ! empty( $data['issues'] ) ) {
$diff_keys = array_diff( $data['issues'], $this->model->issues );
if ( ! empty( $diff_keys ) ) {
// Issues.
foreach ( $diff_keys as $slug ) {
$tweak = $this->get_tweak( $slug );
$ret = $tweak->revert();
if ( is_wp_error( $ret ) ) {
if ( 'hub' === $request_reason ) {
continue;
}
$data = $tweak->to_array();
return sprintf(
/* translators: 1: Security tweak title, 2: Error message */
__( 'There is an error while processing recommendation %1$s, error message: %2$s', 'wpdef' ),
$data['title'],
$ret->get_error_message()
);
}
$this->model->mark( self::STATUS_ISSUES, $slug );
}
}
}
// Ignore tweaks.
if ( ! empty( $data['ignore'] ) ) {
$diff_keys = array_diff( $data['ignore'], $this->model->ignore );
if ( ! empty( $diff_keys ) ) {
foreach ( $diff_keys as $slug ) {
$this->model->mark( self::STATUS_IGNORE, $slug );
}
}
}
return $need_reauth;
}
/**
* @param array $data
*/
public function import_data( $data ) {
$enabled_user_enums = [];
if ( isset( $data['enabled_user_enums'] ) ) {
$enabled_user_enums = (array) $data['enabled_user_enums'];
unset( $data['enabled_user_enums'] );
}
$this->prevent_enum_users->set_enabled_user_enums( $enabled_user_enums );
if ( ! empty( $data['security_key'] ) && is_array( $data['security_key'] ) ) {
$this->security_key->update_all_option( $data['security_key'] );
}
$model = new \WP_Defender\Model\Setting\Security_Tweaks();
$model->import( $data );
if ( $model->validate() ) {
$model->save();
}
}
public function export_strings(): array {
$this->refresh_tweaks_status();
$settings = new \WP_Defender\Model\Setting\Security_Tweaks();
$strings = [];
$count_all = count( $settings->fixed ) + count( $settings->issues ) + count( $settings->ignore );
if ( empty( $settings->issues ) ) {
$strings[] = __( 'All available recommendations activated', 'wpdef' );
} else {
$strings[] = sprintf(
/* translators: 1: Total security tweaks activated, 2: Total security tweaks */
__( '%1$d/%2$d recommendations activated', 'wpdef' ),
count( $settings->fixed ),
$count_all
);
}
$tweak_notification = new \WP_Defender\Model\Notification\Tweak_Reminder();
if ( 'enabled' === $tweak_notification->status ) {
$strings[] = __( 'Email notifications active', 'wpdef' );
}
return $strings;
}
/**
* @param array $config
* @param bool $is_pro
*
* @return array
*/
public function config_strings( $config, $is_pro ): array {
$strings = [];
if ( empty( $config['issues'] ) ) {
$strings[] = __( 'All available recommendations activated', 'wpdef' );
} else {
$strings[] = sprintf(
/* translators: 1: Total security tweaks activated, 2: Total security tweaks */
__( '%1$d/%2$d recommendations activated', 'wpdef' ),
is_array( $config['fixed'] ) || $config['fixed'] instanceof \Countable ? count( $config['fixed'] ) : 0,
( is_array( $config['fixed'] ) || $config['fixed'] instanceof \Countable ? count( $config['fixed'] ) : 0 )
+ ( is_array( $config['issues'] ) || $config['issues'] instanceof \Countable ? count( $config['issues'] ) : 0 )
+ ( is_array( $config['ignore'] ) || $config['ignore'] instanceof \Countable ? count( $config['ignore'] ) : 0 )
);
}
if ( 'enabled' === $config['notification'] ) {
$strings[] = __( 'Email notifications active', 'wpdef' );
}
return $strings;
}
/**
* Update auto generate flag.
*
* @defender_route
*/
public function update_autogenerate_flag( Request $request ): Response {
$data = $request->get_data();
$is_autogen_flag = isset( $data['is_autogenerate_keys'] ) ?
filter_var( $data['is_autogenerate_keys'], FILTER_VALIDATE_BOOLEAN ) :
false;
$is_success = false;
$message = __( 'An error occurred, try again.', 'wpdef' );
if ( $this->security_key->set_is_autogenrate_keys( $is_autogen_flag ) ) {
$is_success = true;
if ( $is_autogen_flag ) {
$this->security_key->cron_schedule();
$message = __( 'Security key/salt autogenerate enabled.', 'wpdef' );
} else {
$this->security_key->cron_unschedule();
$message = __( 'Security key/salt autogenerate disabled.', 'wpdef' );
}
}
return new Response(
$is_success,
[ 'message' => $message ]
);
}
/**
* Get component security key instance.
*
* @return \WP_Defender\Component\Security_Tweaks\Security_Key
*/
public function get_security_key() {
return $this->security_key;
}
/**
* Update enabled user enums list.
*
* @param Request $request
*
* @return Response
* @defender_route
*/
public function update_enabled_user_enums( Request $request ): Response {
$data = (array) $request->get_data();
$enabled_user_enums = $data['enabled_user_enums'];
$is_success = false;
$message = __( 'An error occurred, try again.', 'wpdef' );
if ( $this->prevent_enum_users->set_enabled_user_enums( $enabled_user_enums ) ) {
$is_success = true;
$message = __( 'User enumeration option(s) updated successfully.', 'wpdef' );
}
return new Response(
$is_success,
[ 'message' => $message ]
);
}
}