Exemplo n.º 1
0
 /**
  * Handles the plugin options.
  */
 public function handleOptions()
 {
     global $wpdb;
     $this->options = get_option('wemahu');
     $WemahuForms = new Wemahu_Forms($this->options);
     register_setting('wemahu', 'wemahu', array($WemahuForms, 'sanitizeInput'));
     // General options
     add_settings_section('wemahu_general_settings', 'Genreal Settings', array($WemahuForms, 'displaySectionInfoGeneral'), 'wemahu_settings_page');
     add_settings_field('use_api', 'Allow API usage', array($WemahuForms, 'displayCheckboxInput'), 'wemahu_settings_page', 'wemahu_general_settings', array('name' => 'use_api', 'id' => 'use_api', 'group' => 'wemahu', 'desc' => 'Allows the plugin to contact nekudo.com to send and receive data. This includes signature/whitelist updates e.g.'));
     // Cronjob options
     $ModelRuleset = new ModelRuleset($wpdb);
     $rulesetValues = array();
     $rulesetData = $ModelRuleset->getRulesets();
     foreach ($rulesetData as $ruleset) {
         $rulesetValues[$ruleset['id']] = $ruleset['name'];
     }
     add_settings_section('wemahu_cronjob_settings', 'Cronjob Settings', array($WemahuForms, 'displaySectionInfoCronjob'), 'wemahu_settings_page');
     add_settings_field('cron_ruleset', 'Cronjob ruleset', array($WemahuForms, 'displayDropdownInput'), 'wemahu_settings_page', 'wemahu_cronjob_settings', array('label_for' => 'cron_ruleset', 'name' => 'cron_ruleset', 'values' => $rulesetValues, 'id' => 'cron_ruleset', 'group' => 'wemahu', 'desc' => 'Here you can select the ruleset that will be used by wemahu cronjobs.'));
     add_settings_field('cron_sendmail', 'Send report email', array($WemahuForms, 'displayCheckboxInput'), 'wemahu_settings_page', 'wemahu_cronjob_settings', array('name' => 'cron_sendmail', 'id' => 'cron_sendmail', 'group' => 'wemahu', 'desc' => 'Set if the Wemahu cron script should send a report by email.'));
     add_settings_field('cron_emptyreport', 'Send empty reports', array($WemahuForms, 'displayCheckboxInput'), 'wemahu_settings_page', 'wemahu_cronjob_settings', array('name' => 'cron_emptyreport', 'id' => 'cron_emptyreport', 'group' => 'wemahu', 'desc' => 'Set if you want to receive and email even if the report is empty.'));
     add_settings_field('cron_email', 'Report email address', array($WemahuForms, 'displayTextInput'), 'wemahu_settings_page', 'wemahu_cronjob_settings', array('label_for' => 'cron_email', 'name' => 'cron_email', 'id' => 'cron_email', 'group' => 'wemahu', 'desc' => 'This is the email-address cronjob reports will be send to. Leave empty to use wordpress system email-address.', 'classes' => 'regular-text ltr'));
 }
Exemplo n.º 2
0
 /**
  * Inits wemahu scanner by passing necessary objects like settings and database.
  *
  */
 public function initWemahu()
 {
     $rulesetId = (int) $_POST['ruleset'];
     if (empty($rulesetId)) {
         $this->returnError('No ruleset selected.');
     }
     $ModelRuleset = new ModelRuleset($this->wpdb);
     $rulesetData = $ModelRuleset->getRulesetData($rulesetId);
     if (empty($rulesetData)) {
         $this->returnError('Invalid ruleset.');
     }
     // prepare Wemahu settings:
     $WemahuSettings = new Wemahu\Settings();
     $WemahuSettings->intervalMode = true;
     $WemahuSettings->useApi = (int) $this->options['use_api'] === 1 ? true : false;
     $WemahuSettings->audits['filecheck'] = (int) $rulesetData['filecheck'] === 1 ? true : false;
     $WemahuSettings->auditSettings['filecheck']['regexCheck'] = (int) $rulesetData['regex_check'] === 1 ? true : false;
     $WemahuSettings->auditSettings['filecheck']['hashCheck'] = (int) $rulesetData['hash_check'] === 1 ? true : false;
     $WemahuSettings->auditSettings['filecheck']['scanDir'] = ABSPATH;
     $WemahuSettings->auditSettings['filecheck']['tmpDir'] = WP_PLUGIN_DIR . '/wemahu/tmp';
     $WemahuSettings->auditSettings['filecheck']['pathRegexWhitelistUser'] = WP_PLUGIN_DIR . '/wemahu/tmp/wemahu_regex_whitelist.wmdb';
     if (!empty($rulesetData['scandir'])) {
         $WemahuSettings->auditSettings['filecheck']['scanDir'] = $rulesetData['scandir'];
     }
     $WemahuSettings->auditSettings['filecheck']['scanDir'] = rtrim($WemahuSettings->auditSettings['filecheck']['scanDir'], '/');
     if (!empty($rulesetData['regex_db'])) {
         $WemahuSettings->auditSettings['filecheck']['pathRegexDb'] = WP_PLUGIN_DIR . '/wemahu/admin/libs/wemahu/db/' . $rulesetData['regex_db'] . '.wmdb';
     }
     if (!empty($rulesetData['filetypes'])) {
         $WemahuSettings->auditSettings['filecheck']['extensionFilter'] = $rulesetData['filetypes'];
     }
     if (!empty($rulesetData['filesize_max'])) {
         $WemahuSettings->auditSettings['filecheck']['sizeFilter'] = $rulesetData['filesize_max'];
     }
     if (!empty($rulesetData['max_results_file'])) {
         $WemahuSettings->auditSettings['filecheck']['maxResultsFile'] = $rulesetData['max_results_file'];
     }
     if (!empty($rulesetData['max_results_total'])) {
         $WemahuSettings->auditSettings['filecheck']['maxResultsTotal'] = $rulesetData['max_results_total'];
     }
     if ($WemahuSettings->auditSettings['filecheck']['hashCheck'] === true && !empty($rulesetData['hash_check_blacklist'])) {
         $WemahuSettings->auditSettings['filecheck']['hashCheckBlacklist'] = explode("\n", str_replace("\r", "", $rulesetData['hash_check_blacklist']));
     }
     // Init Wemahu:
     $Wemahu = new Wemahu\Wemahu();
     $Wemahu->setSettings($WemahuSettings);
     $WemahuStorage = new Wemahu\Storage();
     $Wemahu->setStorage($WemahuStorage);
     $WemahuDatabase = new Wemahu\WordpressDatabase($this->wpdb);
     $Wemahu->setDatabase($WemahuDatabase);
     $initResult = $Wemahu->init();
     // Send Response:
     if ($initResult === false) {
         $this->JsonResponse->setError('Wemahu initialization failed.');
     }
     $auditMessages = $Wemahu->getAuditMessages();
     $auditMessagesHtml = implode('<br />', $auditMessages) . '<br />';
     $this->JsonResponse->setType('init_success');
     $this->JsonResponse->setData('init_msg', $auditMessagesHtml);
     echo $this->JsonResponse->getResponseData();
     exit;
 }