| Server IP : 104.21.32.1 / Your IP : 216.73.216.145 Web Server : LiteSpeed System : Linux premium151.web-hosting.com 4.18.0-553.44.1.lve.el8.x86_64 #1 SMP Thu Mar 13 14:29:12 UTC 2025 x86_64 User : tempvsty ( 647) PHP Version : 8.0.30 Disable Function : NONE MySQL : OFF | cURL : ON | WGET : ON | Perl : ON | Python : ON | Sudo : OFF | Pkexec : OFF Directory : /proc/thread-self/cwd/wp-content/plugins/malcare-security/ |
Upload File : |
<?php
if (!defined('ABSPATH')) exit;
if (!class_exists('MCWPAdmin')) :
class MCWPAdmin {
public $settings;
public $siteinfo;
public $account;
public $bvapi;
public $bvinfo;
function __construct($settings, $siteinfo, $bvapi = null) {
$this->settings = $settings;
$this->siteinfo = $siteinfo;
$this->bvapi = new MCWPAPI($settings);
$this->bvinfo = new MCInfo($this->settings);
}
public function mainUrl($_params = '') {
if (function_exists('network_admin_url')) {
return network_admin_url('admin.php?page='.$this->bvinfo->plugname.$_params);
} else {
return admin_url('admin.php?page='.$this->bvinfo->plugname.$_params);
}
}
public function removeAdminNotices() {
if (MCHelper::getRawParam('REQUEST', 'page') === $this->bvinfo->plugname) {
remove_all_actions('admin_notices');
remove_all_actions('all_admin_notices');
}
}
public function initHandler() {
if (!current_user_can('activate_plugins'))
return;
$bvnonce = MCHelper::getRawParam('REQUEST', 'bvnonce');
$blogvaultkey = MCHelper::getRawParam('REQUEST', 'blogvaultkey');
$blogvaultkey = $blogvaultkey ? MCAccount::sanitizeKey($blogvaultkey) : "";
if ($bvnonce && wp_verify_nonce($bvnonce, "bvnonce") &&
$blogvaultkey && strlen($blogvaultkey) == 64 &&
(MCHelper::getRawParam('REQUEST', 'page') === $this->bvinfo->plugname)) {
$keys = str_split($blogvaultkey, 32);
MCAccount::addAccount($this->settings, $keys[0], $keys[1]);
$pubkey = $keys[0];
if (array_key_exists($_REQUEST, 'redirect')) {
$this->account = MCAccount::find($this->settings, $pubkey);
wp_redirect($this->account->authenticatedUrl('/malcare/access/welcome'));
exit();
}
}
if ($this->bvinfo->isActivateRedirectSet()) {
$this->settings->updateOption($this->bvinfo->plug_redirect, 'no');
##ACTIVATEREDIRECTCODE##
if (!wp_doing_ajax()) {
wp_redirect($this->mainUrl());
}
}
}
public function handleDismissWSKBanner() {
$user_id = get_current_user_id();
$wpnonce = MCHelper::getRawParam('POST', '_wpnonce');
$dismiss_wsk_banner = MCHelper::getRawParam('POST', 'dismiss_wsk_banner');
if (MCHelper::getRawParam('SERVER', 'REQUEST_METHOD') === 'POST' &&
isset($dismiss_wsk_banner) &&
isset($wpnonce) && wp_verify_nonce($wpnonce, 'dismiss_wsk_banner')) {
update_user_meta($user_id, 'wsk_banner_dismissed', true);
}
}
public function canShowWSKBanner() {
if (!MCAccount::isConfigured($this->settings)) {
global $bvWebspacekitBannerShown;
if (!$bvWebspacekitBannerShown) {
$bvWebspacekitBannerShown = true;
return true;
}
}
return false;
}
public function initializeWSKBanner() {
if ($this->siteinfo->isWSKHosted()) {
$this->handleDismissWSKBanner();
$bannerDismissed = get_user_meta(get_current_user_id(), 'wsk_banner_dismissed', true);
if (!$bannerDismissed || (MCHelper::getRawParam('REQUEST', 'page') === $this->bvinfo->plugname)) {
if ($this->canShowWSKBanner()) {
add_action('admin_enqueue_scripts', function () {
wp_enqueue_style('wsk-fonts',
'https://fonts.googleapis.com/css2?family=Karla&family=Montserrat:wght@400;500;600;700&display=block',
array(), $this->bvinfo->version);
wp_enqueue_style('wsk-stylesheet', plugins_url('css/webspacekit_banner.min.css', __FILE__), array(), $this->bvinfo->version);
});
add_action('in_admin_header', function () {
add_action('all_admin_notices', [$this, 'loadWSKBanner']);
}, 9999);
}
}
}
}
public function loadWSKBanner() {
require_once dirname( __FILE__ ) . "/admin/components/webspacekit_banner.php";
}
public function mcsecAdminMenu($hook) {
if ($hook === 'toplevel_page_malcare' || MCHelper::safePregMatch("/bv_add_account$/", $hook) ||
MCHelper::safePregMatch("/bv_account_details$/", $hook)) {
wp_enqueue_style('bootstrap', plugins_url('css/bootstrap.min.css', __FILE__), array(), $this->bvinfo->version);
wp_enqueue_style('bvplugin', plugins_url('css/bvplugin.min.css', __FILE__), array(), $this->bvinfo->version);
}
}
public function menu() {
add_submenu_page('', 'Malcare', 'Malcare', 'manage_options', 'bv_add_account',
array($this, 'showAddAccountPage'));
add_submenu_page('', 'Malcare', 'Malcare', 'manage_options', 'bv_account_details',
array($this, 'showAccountDetailsPage'));
$brand = $this->bvinfo->getPluginWhitelabelInfo();
if (!is_array($brand) || (!array_key_exists('hide', $brand) && !array_key_exists('hide_from_menu', $brand))) {
$bname = $this->bvinfo->getBrandName();
$icon = $this->bvinfo->getBrandIcon();
$pub_key = MCAccount::getApiPublicKey($this->settings);
if ($pub_key && isset($pub_key)) {
$this->account = MCAccount::find($this->settings, $pub_key);
}
add_menu_page($bname, $bname, 'manage_options', $this->bvinfo->plugname,
array($this, 'adminPage'), plugins_url($icon, __FILE__ ));
}
}
public function hidePluginUpdate($plugins) {
if (!$this->bvinfo->canWhiteLabel()) {
return $plugins;
}
$whitelabel_infos = $this->bvinfo->getPluginsWhitelabelInfos();
foreach ($whitelabel_infos as $slug => $brand) {
if ($this->bvinfo->canWhiteLabel($slug) && isset($plugins->response[$slug]) && is_array($brand)) {
if (array_key_exists('hide_from_menu', $brand) || array_key_exists('hide', $brand)) {
unset($plugins->response[$slug]);
}
}
}
return $plugins;
}
public function hidePluginDetails($plugin_metas, $slug) {
if (!is_array($plugin_metas) || !$this->bvinfo->canWhiteLabel($slug)) {
return $plugin_metas;
}
$whitelabel_info = $this->bvinfo->getPluginWhitelabelInfo($slug);
if (array_key_exists('hide_plugin_details', $whitelabel_info)) {
foreach ($plugin_metas as $pluginKey => $pluginValue) {
// phpcs:ignore WordPress.WP.I18n.MissingArgDomain
if (strpos($pluginValue, sprintf('>%s<', __('View details')))) {
unset($plugin_metas[$pluginKey]);
break;
}
}
}
return $plugin_metas;
}
public function handlePluginHealthInfo($plugins) {
if (!isset($plugins["wp-plugins-active"]) ||
!isset($plugins["wp-plugins-active"]["fields"]) || !$this->bvinfo->canWhiteLabel()) {
return $plugins;
}
$whitelabel_infos_by_title = $this->bvinfo->getPluginsWhitelabelInfoByTitle();
foreach ($whitelabel_infos_by_title as $title => $brand) {
if (is_array($brand) && array_key_exists('slug', $brand) && $this->bvinfo->canWhiteLabel($brand["slug"])) {
if (array_key_exists('hide', $brand)) {
unset($plugins["wp-plugins-active"]["fields"][$title]);
} else {
$plugin = $plugins["wp-plugins-active"]["fields"][$title];
$author = $brand['default_author'];
if (array_key_exists('name', $brand)) {
$plugin["label"] = $brand['name'];
}
if (array_key_exists('author', $brand)) {
$plugin["value"] = str_replace($author, $brand['author'], $plugin["value"]);
}
if (array_key_exists('description', $brand)) {
$plugin["debug"] = str_replace($author, $brand['author'], $plugin["debug"]);
}
$plugins["wp-plugins-active"]["fields"][$title] = $plugin;
}
}
}
return $plugins;
}
public function settingsLink($links, $file) {
#XNOTE: Fix this
if ( $file == plugin_basename( dirname(__FILE__).'/malcare.php' ) ) {
$brand = $this->bvinfo->getPluginWhitelabelInfo();
if (!is_array($brand) || !array_key_exists('hide_from_menu', $brand)) {
// phpcs:ignore WordPress.WP.I18n.MissingArgDomain
$settings_link = '<a href="'.$this->mainUrl().'">'.__('Settings').'</a>';
array_unshift($links, $settings_link);
$account_details = '<a href="'.$this->mainUrl('&account_details=true').'">'.'Account Details'.'</a>';
array_unshift($links, $account_details);
}
}
return $links;
}
public function getPluginLogo() {
$brand = $this->bvinfo->getPluginWhitelabelInfo();
if (array_key_exists('logo', $brand)) {
return $brand['logo'];
}
return $this->bvinfo->logo;
}
public function getWebPage() {
$brand = $this->bvinfo->getPluginWhitelabelInfo();
if (array_key_exists('webpage', $brand)) {
return $brand['webpage'];
}
return $this->bvinfo->webpage;
}
public function siteInfoTags() {
require_once dirname( __FILE__ ) . '/recover.php';
$bvnonce = wp_create_nonce("bvnonce");
$public = MCAccount::getApiPublicKey($this->settings);
$secret = MCRecover::defaultSecret($this->settings);
$server_ip = MCHelper::getStringParamEscaped('SERVER', 'SERVER_ADDR', 'attr');
$tags = "<input type='hidden' name='url' value='".esc_attr($this->siteinfo->wpurl())."'/>\n".
"<input type='hidden' name='homeurl' value='".esc_attr($this->siteinfo->homeurl())."'/>\n".
"<input type='hidden' name='siteurl' value='".esc_attr($this->siteinfo->siteurl())."'/>\n".
"<input type='hidden' name='dbsig' value='".esc_attr($this->siteinfo->dbsig(false))."'/>\n".
"<input type='hidden' name='plug' value='".esc_attr($this->bvinfo->plugname)."'/>\n".
"<input type='hidden' name='adminurl' value='".esc_attr($this->mainUrl())."'/>\n".
"<input type='hidden' name='bvversion' value='".esc_attr($this->bvinfo->version)."'/>\n".
"<input type='hidden' name='serverip' value='".$server_ip."'/>\n".
"<input type='hidden' name='abspath' value='".esc_attr(ABSPATH)."'/>\n".
"<input type='hidden' name='secret' value='".esc_attr($secret)."'/>\n".
"<input type='hidden' name='public' value='".esc_attr($public)."'/>\n".
"<input type='hidden' name='bvnonce' value='".esc_attr($bvnonce)."'/>\n";
return $tags;
}
public function activateWarning() {
global $hook_suffix;
if (!MCAccount::isConfigured($this->settings) && $hook_suffix == 'index.php' ) {
?>
<div id="message" class="updated" style="padding: 8px; font-size: 16px; background-color: #dff0d8">
<a class="button-primary" href="<?php echo esc_url($this->mainUrl()); ?>">Activate MalCare</a>
<b>Almost Done:</b> Activate your Malcare account to secure your site.
</div>
<?php
}
}
public function showAddAccountPage() {
require_once dirname( __FILE__ ) . "/admin/add_new_account.php";
}
public function showAccountDetailsPage() {
require_once dirname( __FILE__ ) . "/admin/account_details.php";
}
public function showDashboard() {
require_once dirname( __FILE__ ) . "/admin/dashboard.php";
}
public function adminPage() {
$bvnonce = MCHelper::getRawParam('REQUEST', 'bvnonce');
if ($bvnonce && wp_verify_nonce($bvnonce, 'bvnonce')) {
$info = array();
$this->siteinfo->basic($info);
$pubkey = MCHelper::getRawParam('REQUEST', 'pubkey');
if (!empty($pubkey)) {
$pubkey = MCAccount::sanitizeKey($pubkey);
$this->bvapi->pingbv('/bvapi/disconnect', $info, $pubkey);
MCAccount::remove($this->settings, $pubkey);
}
}
if (isset($_REQUEST['account_details'])) {
$this->showAccountDetailsPage();
} else if (isset($_REQUEST['add_account'])) {
$this->showAddAccountPage();
} else if(MCAccount::isConfigured($this->settings)) {
$this->showDashboard();
} else {
$this->showAddAccountPage();
}
}
public function initWhitelabel($plugins) {
if (!is_array($plugins) || !$this->bvinfo->canWhiteLabel()) {
return $plugins;
}
$whitelabel_infos = $this->bvinfo->getPluginsWhitelabelInfos();
foreach ($whitelabel_infos as $slug => $brand) {
if (!isset($slug) || !$this->bvinfo->canWhiteLabel($slug) || !array_key_exists($slug, $plugins) || !is_array($brand)) {
continue;
}
if (array_key_exists('hide', $brand)) {
unset($plugins[$slug]);
} else {
if (array_key_exists('name', $brand)) {
$plugins[$slug]['Name'] = $brand['name'];
}
if (array_key_exists('title', $brand)) {
$plugins[$slug]['Title'] = $brand['title'];
}
if (array_key_exists('description', $brand)) {
$plugins[$slug]['Description'] = $brand['description'];
}
if (array_key_exists('authoruri', $brand)) {
$plugins[$slug]['AuthorURI'] = $brand['authoruri'];
}
if (array_key_exists('author', $brand)) {
$plugins[$slug]['Author'] = $brand['author'];
}
if (array_key_exists('authorname', $brand)) {
$plugins[$slug]['AuthorName'] = $brand['authorname'];
}
if (array_key_exists('pluginuri', $brand)) {
$plugins[$slug]['PluginURI'] = $brand['pluginuri'];
}
}
}
return $plugins;
}
}
endif;