Skip to content

Commit

Permalink
📦 NEW: WSAL 3.3.1.1
Browse files Browse the repository at this point in the history
  • Loading branch information
@asharirfan
asharirfan committed Feb 7, 2019
2 parents 090bbb4 + c23d07e commit e55f92a
Show file tree
Hide file tree
Showing 17 changed files with 668 additions and 296 deletions.
335 changes: 193 additions & 142 deletions classes/AuditLogListView.php
View file

Large diffs are not rendered by default.

116 changes: 68 additions & 48 deletions classes/Sensors/Database.php
View file
Original file line number Diff line number Diff line change
Expand Up @@ -45,8 +45,9 @@ public function HookEvents() {
* @param WP_Query $query - Query object.
*/
public function EventDropQuery( $query ) {
global $wpdb;
$table_names = array();
$str = explode( ' ', $query );
$str = explode( ' ', $query );

if ( preg_match( '|DROP TABLE ([^ ]*)|', $query ) ) {
if ( ! empty( $str[4] ) ) {
Expand All @@ -55,15 +56,25 @@ public function EventDropQuery( $query ) {
array_push( $table_names, $str[2] );
}

// Filter $_SERVER array for security.
$server_array = filter_input_array( INPUT_SERVER );

$actype = ( isset( $server_array['SCRIPT_NAME'] ) ) ? basename( $server_array['SCRIPT_NAME'], '.php' ) : false;
$actype = isset( $_SERVER['SCRIPT_NAME'] ) ? basename( sanitize_text_field( wp_unslash( $_SERVER['SCRIPT_NAME'] ) ), '.php' ) : false;
$alert_options = $this->GetActionType( $actype );
$type_query = 'delete';
} elseif ( preg_match( '|CREATE TABLE IF NOT EXISTS ([^ ]*)|', $query ) ) {
if ( $str[5] !== $wpdb->get_var( "SHOW TABLES LIKE '" . $str[5] . "'" ) ) {
/**
* Some plugins keep trying to create tables even
* when they already exist- would result in too
* many alerts.
*/
array_push( $table_names, $str[5] );
$actype = isset( $_SERVER['SCRIPT_NAME'] ) ? basename( sanitize_text_field( wp_unslash( $_SERVER['SCRIPT_NAME'] ) ), '.php' ) : false;
$alert_options = $this->GetActionType( $actype );
$type_query = 'create';
}
}

if ( ! empty( $table_names ) ) {
$event_code = $this->GetEventQueryType( $actype, 'delete' );
$event_code = $this->GetEventQueryType( $actype, $type_query );
$alert_options['TableNames'] = implode( ',', $table_names );
$this->plugin->alerts->Trigger( $event_code, $alert_options );
}
Expand Down Expand Up @@ -106,21 +117,17 @@ public function EventDBDeltaQuery( $queries ) {
}

if ( ! empty( $type_queries['create'] ) || ! empty( $type_queries['update'] ) || ! empty( $type_queries['delete'] ) ) {
// Filter $_SERVER array for security.
$server_array = filter_input_array( INPUT_SERVER );

$actype = ( isset( $server_array['SCRIPT_NAME'] ) ) ? basename( $server_array['SCRIPT_NAME'], '.php' ) : false;
$actype = isset( $_SERVER['SCRIPT_NAME'] ) ? basename( sanitize_text_field( wp_unslash( $_SERVER['SCRIPT_NAME'] ) ), '.php' ) : false;
$alert_options = $this->GetActionType( $actype );

foreach ( $type_queries as $query_type => $table_names ) {
if ( ! empty( $table_names ) ) {
$event_code = $this->GetEventQueryType( $actype, $query_type );
$event_code = $this->GetEventQueryType( $actype, $query_type );
$alert_options['TableNames'] = implode( ',', $table_names );
$this->plugin->alerts->Trigger( $event_code, $alert_options );
}
}
}

return $queries;
}

Expand All @@ -133,29 +140,29 @@ public function EventDBDeltaQuery( $queries ) {
protected function GetEventQueryType( $type_action, $type_query ) {
switch ( $type_action ) {
case 'plugins':
if ( 'create' == $type_query ) {
if ( 'create' === $type_query ) {
return 5010;
} elseif ( 'update' == $type_query ) {
} elseif ( 'update' === $type_query ) {
return 5011;
} elseif ( 'delete' == $type_query ) {
} elseif ( 'delete' === $type_query ) {
return 5012;
}
// In case of plugins.
case 'themes':
if ( 'create' == $type_query ) {
if ( 'create' === $type_query ) {
return 5013;
} elseif ( 'update' == $type_query ) {
} elseif ( 'update' === $type_query ) {
return 5014;
} elseif ( 'delete' == $type_query ) {
} elseif ( 'delete' === $type_query ) {
return 5015;
}
// In case of themes.
default:
if ( 'create' == $type_query ) {
if ( 'create' === $type_query ) {
return 5016;
} elseif ( 'update' == $type_query ) {
} elseif ( 'update' === $type_query ) {
return 5017;
} elseif ( 'delete' == $type_query ) {
} elseif ( 'delete' === $type_query ) {
return 5018;
}
}
Expand All @@ -167,45 +174,58 @@ protected function GetEventQueryType( $type_action, $type_query ) {
* @param string $actype - Plugins, themes or unknown.
*/
protected function GetActionType( $actype ) {
// Filter $_GET array for security.
$get_array = filter_input_array( INPUT_GET );

$is_themes = 'themes' == $actype;
$is_plugins = 'plugins' == $actype;
// Check the component type (theme or plugin).
$is_themes = 'themes' === $actype;
$is_plugins = 'plugins' === $actype;

// Action Plugin Component.
$alert_options = array();
if ( $is_plugins ) {
$plugin_file = '';
if ( isset( $get_array['plugin'] ) ) {
$plugin_file = $get_array['plugin'];
} elseif ( isset( $get_array['checked'] ) ) {
$plugin_file = $get_array['checked'][0];
// @codingStandardsIgnoreStart
if ( isset( $_GET['plugin'] ) ) {
$plugin_file = sanitize_text_field( wp_unslash( $_GET['plugin'] ) );
} elseif ( isset( $_GET['checked'] ) ) {
$plugin_file = sanitize_text_field( wp_unslash( $_GET['checked'][0] ) );
}
// @codingStandardsIgnoreEnd

// Get plugin data.
$plugins = get_plugins();
if ( isset( $plugins[ $plugin_file ] ) ) {
$plugin = $plugins[ $plugin_file ];

// Set alert options.
$alert_options['Plugin'] = (object) array(
'Name' => $plugin['Name'],
'PluginURI' => $plugin['PluginURI'],
'Version' => $plugin['Version'],
);
} else {
$plugin_name = basename( $plugin_file, '.php' );
$plugin_name = str_replace( array( '_', '-', ' ' ), ' ', $plugin_name );
$plugin_name = ucwords( $plugin_name );
$alert_options['Plugin'] = (object) array( 'Name' => $plugin_name );
}
$plugin_name = basename( $plugin_file, '.php' );
$plugin_name = str_replace( array( '_', '-', ' ' ), ' ', $plugin_name );
$plugin_name = ucwords( $plugin_name );
$alert_options['Plugin'] = (object) array(
'Name' => $plugin_name,
);
// Action Theme Component.
} elseif ( $is_themes ) {
// Action Theme Component.
$theme_name = '';
if ( isset( $get_array['theme'] ) ) {
$theme_name = $get_array['theme'];
} elseif ( isset( $get_array['checked'] ) ) {
$theme_name = $get_array['checked'][0];

// @codingStandardsIgnoreStart
if ( isset( $_GET['theme'] ) ) {
$theme_name = sanitize_text_field( wp_unslash( $_GET['theme'] ) );
} elseif ( isset( $_GET['checked'] ) ) {
$theme_name = sanitize_text_field( wp_unslash( $_GET['checked'][0] ) );
}
$theme_name = str_replace( array( '_', '-', ' ' ), ' ', $theme_name );
$theme_name = ucwords( $theme_name );
$alert_options['Theme'] = (object) array(
'Name' => $theme_name,
);
// Action Unknown Component.
// @codingStandardsIgnoreEnd

$theme_name = str_replace( array( '_', '-', ' ' ), ' ', $theme_name );
$theme_name = ucwords( $theme_name );
$alert_options['Theme'] = (object) array( 'Name' => $theme_name );
} else {
// Action Unknown Component.
$alert_options['Component'] = 'Unknown';
}

return $alert_options;
}
}
2 changes: 1 addition & 1 deletion classes/Sensors/PluginsThemes.php
View file
Original file line number Diff line number Diff line change
Expand Up @@ -557,7 +557,7 @@ public function EventPluginPostCreate( $post_id, $post ) {

// Check if Yoast SEO is active.
$is_yoast = is_plugin_active( 'wordpress-seo/wp-seo.php' ) || is_plugin_active( 'wordpress-seo-premium/wp-seo-premium.php' );
if ( $is_yoast && isset( $get_array['classic-editor'] ) ) {
if ( $is_yoast ) {
return;
}

Expand Down
31 changes: 25 additions & 6 deletions classes/Sensors/WooCommerce.php
View file
Original file line number Diff line number Diff line change
Expand Up @@ -2144,13 +2144,29 @@ public function event_order_status_changed( $order_id, $status_from, $status_to,
$order_title = ( null !== $order_post && $order_post instanceof WP_Post ) ? $order_post->post_title : false;
$order_post = get_post( $order_id );
$edit_link = $this->GetEditorLink( $order_post );

$this->plugin->alerts->Trigger( 9036, array(
$event_data = array(
'OrderID' => $order_id,
'OrderTitle' => $this->get_order_title( $order ),
'OrderStatus' => $status_to,
$edit_link['name'] => $edit_link['value'],
) );
);
$this->plugin->alerts->TriggerIf( 9036, $event_data, array( $this, 'must_not_contain_refund' ) );
}

/**
* Checks if event 9041 has triggered or if it will
* trigger.
*
* @since 3.3.1.1
*
* @param WSAL_AlertManager $manager - Alert manager instance.
* @return boolean
*/
public function must_not_contain_refund( WSAL_AlertManager $manager ) {
if ( $manager->WillOrHasTriggered( 9041 ) ) {
return false;
}
return true;
}

/**
Expand All @@ -2170,13 +2186,16 @@ private function check_order_modify_change( $order_id, $oldorder, $neworder ) {
// Get editor link.
$edit_link = $this->GetEditorLink( $oldorder );

// Log event.
$this->plugin->alerts->Trigger( 9040, array(
// Set event data.
$event_data = array(
'OrderID' => $order_id,
'OrderTitle' => $this->get_order_title( $order_id ),
'OrderStatus' => $neworder->post_status,
$edit_link['name'] => $edit_link['value'],
) );
);

// Log event.
$this->plugin->alerts->TriggerIf( 9040, $event_data, array( $this, 'must_not_contain_refund' ) );
}

/**
Expand Down
Loading

0 comments on commit e55f92a

Please sign in to comment.