ꦫꦣꦺꦤ꧀ꦄꦤ꧀ꦠꦱꦺꦤ

PATH: home / bnathsfovv / marcopaolini.info / wp-content / plugins / loginizer-security / main

<?php

if(!defined('ABSPATH')){
	die('HACKING ATTEMPT');
}

// ==== Actions ====
add_action('wp_ajax_loginizer_pro_version_notice', 'loginizer_pro_version_notice');
add_action('wp_ajax_loginizer_wp_admin', 'loginizer_wp_admin_ajax'); // WP-Admin Test handler
add_action('wp_ajax_loginizer_update_csrf_mod', 'loginizer_update_csrf_mod'); // Handler for updating htaccess for rename admin and CSRF
add_action('wp_ajax_loginizer_pro_dismiss_expired_licenses', 'loginizer_pro_dismiss_expired_licenses');
add_action('wp_ajax_loginizer_pro_quick_social', 'loginizer_pro_quick_social');
add_action('wp_ajax_loginizer_pro_disable_social', 'loginizer_pro_disable_social');
add_action('wp_ajax_loginizer_pro_social_auth_notice', 'loginizer_pro_social_auth_notice');
add_action('wp_ajax_loginizer_pro_enable_auto_prepend', 'loginizer_pro_enable_auto_prepend');
add_action('wp_ajax_loginizer_pro_cb_download_db', 'loginizer_pro_cb_download_db_ajax');

if(!defined('SITEPAD') && loginizer_is_2fa_enabled() && !defined('XMLRPC_REQUEST')){
	// Ajax handler
	add_action('wp_ajax_loginizer_ajax', 'loginizer_user_page_ajax');
}

// ==== FUNCTIONS ====
function loginizer_pro_version_notice(){
	check_admin_referer('loginizer_version_notice', 'security');

if(!current_user_can('activate_plugins')){
		wp_send_json_error(__('You do not have required access to do this action', 'loginizer'));
	}
	
	$type = '';
	if(!empty($_REQUEST['type'])){
		$type = sanitize_text_field(wp_unslash($_REQUEST['type']));
	}

if(empty($type)){
		wp_send_json_error(__('Unknow version difference type', 'loginizer'));
	}
	
	update_option('loginizer_version_'. $type .'_nag', time() + WEEK_IN_SECONDS);
	wp_send_json_success();
}

// AJAX callback function used to generate new secret
function loginizer_user_page_ajax(){
	
	global $user_id;

// Some AJAX security
	check_ajax_referer('loginizer_ajax', 'nonce');
	
	header('Content-Type: application/json');
	
	// Data
	$result = loginizer_2fa_app();
	
	// Echo JSON and die
	echo json_encode($result);
	die(); 
	
}

// AJAX callback function used to TEST the new SLUG
function loginizer_wp_admin_ajax(){
	
	global $user_id;

// Some AJAX security
	check_ajax_referer('loginizer_admin_ajax', 'nonce');
	 
	if(!current_user_can('manage_options')){
		wp_die(__('Sorry, but you do not have permissions to change settings.', 'loginizer'));
	}
	
	header('Content-Type: application/json');
	
	// Data
	$result['result'] = '1';
	
	// Echo JSON and die
	echo json_encode($result);
	die(); 
	
}

// Updates the .htaccess for the CSRF session
function loginizer_update_csrf_mod(){

global $loginizer;
	
	check_ajax_referer('loginizer_admin_ajax', 'nonce');
	
	if(!current_user_can('manage_options')){
		wp_die(__('Sorry, but you do not have permissions to change settings.', 'loginizer'));
	}
	
	$home_root = parse_url(home_url());

if(isset($home_root['path'])){
		$home_root = trailingslashit($home_root['path']);
	} else {
		$home_root = '/';
	}
	
	$admin_slug = 'wp-admin';
	
	if(!empty($loginizer['admin_slug'])){
		$admin_slug = $loginizer['admin_slug'];
	}
	
	if(!empty(lz_optpost('admin_name'))){
		$admin_slug = lz_optpost('admin_name');
	}
	
	// Setting the rule
	$rule = '# BEGIN Loginizer' . "\n";
	$rule .= '<IfModule mod_rewrite.c>' . "\n";
	$rule .= 'RewriteEngine On' . "\n";
	$rule .= 'RewriteBase ' . $home_root . "\n\n";
	$rule .= 'RewriteRule ^(' . preg_quote($admin_slug, '/') . '(-lzs.{20})?)$ $1/ [R=301,L]' . "\n";
	$rule .= 'RewriteRule ^' . $admin_slug . '(-lzs.{20})?(/?)(.*) wp-admin/$3 [L]' . "\n";
	$rule .= '</IfModule>' . "\n";
	$rule .= '# END Loginizer';

$htaccess_file = ABSPATH . '/.htaccess';
	
	if(!file_exists($htaccess_file)){
		wp_send_json_error(0);
	}
	
	$contents = file_get_contents($htaccess_file);
	
	if(strpos($contents, '# BEGIN Loginizer') !== FALSE){
		$contents = preg_replace('/# BEGIN Loginizer.*# END Loginizer/ms', '', $contents);
	}

if(!file_put_contents($htaccess_file, trim($rule . "\n" . $contents))){
		wp_send_json_error(0);
	}
	
	wp_send_json(array('success' => true));

}

function loginizer_pro_dismiss_expired_licenses(){
	check_admin_referer('loginizer_expiry_notice', 'security');

if(!current_user_can('activate_plugins')){
		wp_send_json_error(__('You do not have required access to do this action', 'loginizer'));
	}

update_option('softaculous_expired_licenses', time());
	wp_send_json_success();
}

function loginizer_pro_social_auth_notice(){
	check_ajax_referer('loginizer_social_auth', 'security');
	
	if(!current_user_can('activate_plugins')){
		wp_send_json_error(__('You do not have required access to do this action', 'loginizer'));
	}

update_option('loginizer_keyless_social_auth_notice', -time());
	wp_send_json_success();
}

function loginizer_pro_disable_social(){
	check_ajax_referer('loginizer_quick_social', 'security');
	
	if(!current_user_can('activate_plugins')){
		wp_send_json_error(__('You do not have required access to do this action', 'loginizer'));
	}

// Disabling the view options.
	$social_settings = get_option('loginizer_social_settings', []);
	if(!empty($social_settings)){
		foreach($social_settings as $key => $setting){
			if(!empty($setting['enable_buttons'])){
				$social_settings[$key]['enable_buttons'] = false;
			}
			
			if(!empty($setting['login_form'])){
				$social_settings[$key]['login_form'] = false;
			}
			
			if(!empty($setting['registration_form'])){
				$social_settings[$key]['registration_form'] = false;
			}
		}
		
		update_option('loginizer_social_settings', $social_settings);
	}
	
	// Disabling the Providers if any is enabled.
	$provider_settings = get_option('loginizer_provider_settings', []);
	if(!empty($provider_settings)){
		foreach($provider_settings as $provider => $p_settings){
			if(!empty($p_settings['enabled'])){
				$provider_settings[$provider]['enabled'] = false;
			}
		}

update_option('loginizer_provider_settings', $provider_settings);
	}
	
	
	wp_send_json_success();
}

function loginizer_pro_enable_auto_prepend(){

check_ajax_referer('loginizer_pro_nonce', 'security');

if(!current_user_can('manage_options')){
		wp_send_json_error(__('Unauthorized user', 'loginizer'));
		return;
	}

$waf_file = LOGINIZER_PRO_DIR . 'main/settings/waf.php';
	if(!file_exists($waf_file)){
		wp_send_json_error(__('Required /settings/waf.php file not found', 'loginizer'));
		return;
	}
	
	include_once($waf_file);

if(empty($_POST['task'])){
		wp_send_json_error(__('Unknow action, please refresh and try again.', 'loginizer'));
		return;
	}

// Whether to include or override the file
	$include_existing_file = (!empty($_POST['file_action']) && $_POST['file_action'] == 'include') ? true : false;

if($_POST['task'] == 'add_script'){

// Add the firewall marker and include the existing auto prepended file
		if(loginizer_pro_cb_setup_auto_prepend(true, $include_existing_file)){
			wp_send_json_success();
			return;
		}
	}else{
		
		// Remove the firewall marker from htaccess or the user.ini
		if(loginizer_pro_cb_setup_auto_prepend(false)){
			wp_send_json_success();
			return;
		}
	}

wp_send_json_error(__('Error updating .htaccess file', 'loginizer'));
}

// Download Country DB, the action is only visible when user sees a error
function loginizer_pro_cb_download_db_ajax(){
	check_ajax_referer('loginizer_pro_nonce', 'security');

if(!current_user_can('manage_options')){
		wp_send_json_error(__('Unauthorized user', 'loginizer'));
		return;
	}
	
	if(!function_exists('loginizer_pro_cb_download_db')){
		include_once LOGINIZER_PRO_DIR .'/main/settings/waf.php';
	}

loginizer_pro_cb_download_db();
	
	$error = get_transient('loginizer_cdb_error_log');
	
	if(!empty($error)){
		wp_send_json_error($error);
	}

wp_send_json_success();
}

[-] enforce2fa.php [edit]
[+] integrations
[+] waf
[-] captcha.php [edit]
[-] admin.php [edit]
[-] ajax.php [edit]
[-] upgrader.php [edit]
[+] ..
[-] social-api-login.php [edit]
[+] settings