/public/wp-content/plugins/better-wp-security/core/content/perms.php

https://gitlab.com/kath.de/cibedo_cibedo.de · PHP · 260 lines · 161 code · 92 blank · 7 comment · 46 complexity · de8a65411ec2c4c93a7a0db6b810b59b MD5 · raw file 

    

  1. <?php
    2. 

  2. /**
    3. 

  3.  * WordPress Permissions check code from Serverbuddy by PluginBuddy written by Dustin Bolton of iThemes
    4. 

  4.  */
    5. 

  5. global $itsec_globals;
    6. 

  6. 

  7. $tests = array();
    8. 

  8. 

  9. //BEGIN FOLDERS
    10. 

  10. $this_test = array(
    11. 

  11. 	'title'      => '/',
    12. 

  12. 	'suggestion' => '= 755',
    13. 

  13. 	'value'      => substr( sprintf( '%o', fileperms( ABSPATH . '/' ) ), - 4 ),
    14. 

  14. );
    15. 

  15. 

  16. if ( ! fileperms( ABSPATH . '/' ) || 755 != substr( sprintf( '%o', fileperms( ABSPATH . '/' ) ), - 4 ) ) {
    17. 

  17. 

  18. 	$this_test['status'] = 'WARNING';
    19. 

  19. 

  20. } else {
    21. 

  21. 

  22. 	$this_test['status'] = 'OK';
    23. 

  23. 

  24. }
    25. 

  25. 

  26. array_push( $tests, $this_test );
    27. 

  27. 

  28. $this_test = array(
    29. 

  29. 	'title'      => '/wp-includes/',
    30. 

  30. 	'suggestion' => '= 755',
    31. 

  31. 	'value'      => substr( sprintf( '%o', fileperms( ABSPATH . '/wp-includes/' ) ), - 4 ),
    32. 

  32. );
    33. 

  33. 

  34. if ( ! fileperms( ABSPATH . '/wp-includes/' ) || 755 != substr( sprintf( '%o', fileperms( ABSPATH . '/wp-includes/' ) ), - 4 ) ) {
    35. 

  35. 

  36. 	$this_test['status'] = 'WARNING';
    37. 

  37. 

  38. } else {
    39. 

  39. 

  40. 	$this_test['status'] = 'OK';
    41. 

  41. 

  42. }
    43. 

  43. 

  44. array_push( $tests, $this_test );
    45. 

  45. 

  46. 

  47. $this_test = array(
    48. 

  48. 	'title'      => '/wp-admin/',
    49. 

  49. 	'suggestion' => '= 755',
    50. 

  50. 	'value'      => substr( sprintf( '%o', fileperms( ABSPATH . '/wp-admin/' ) ), - 4 ),
    51. 

  51. );
    52. 

  52. 

  53. if ( ! fileperms( ABSPATH . '/wp-admin/' ) || 755 != substr( sprintf( '%o', fileperms( ABSPATH . '/wp-admin/' ) ), - 4 ) ) {
    54. 

  54. 

  55. 	$this_test['status'] = 'WARNING';
    56. 

  56. 

  57. } else {
    58. 

  58. 

  59. 	$this_test['status'] = 'OK';
    60. 

  60. 

  61. }
    62. 

  62. 

  63. array_push( $tests, $this_test );
    64. 

  64. 

  65. 

  66. $this_test = array(
    67. 

  67. 	'title'      => '/wp-admin/js/',
    68. 

  68. 	'suggestion' => '= 755',
    69. 

  69. 	'value'      => substr( sprintf( '%o', fileperms( ABSPATH . '/wp-admin/js/' ) ), - 4 ),
    70. 

  70. );
    71. 

  71. 

  72. if ( ! fileperms( ABSPATH . '/wp-admin/js/' ) || 755 != substr( sprintf( '%o', fileperms( ABSPATH . '/wp-admin/js/' ) ), - 4 ) ) {
    73. 

  73. 

  74. 	$this_test['status'] = 'WARNING';
    75. 

  75. 

  76. } else {
    77. 

  77. 

  78. 	$this_test['status'] = 'OK';
    79. 

  79. 

  80. }
    81. 

  81. 

  82. array_push( $tests, $this_test );
    83. 

  83. 

  84. 

  85. $this_test = array(
    86. 

  86. 	'title'      => get_theme_root(),
    87. 

  87. 	'suggestion' => '= 755',
    88. 

  88. 	'value'      => substr( sprintf( '%o', fileperms( get_theme_root() ) ), - 4 ),
    89. 

  89. );
    90. 

  90. 

  91. if ( ! fileperms( get_theme_root() ) || 755 != substr( sprintf( '%o', fileperms( get_theme_root() ) ), - 4 ) ) {
    92. 

  92. 

  93. 	$this_test['status'] = 'WARNING';
    94. 

  94. 

  95. } else {
    96. 

  96. 

  97. 	$this_test['status'] = 'OK';
    98. 

  98. 

  99. }
    100. 

  100. 

  101. array_push( $tests, $this_test );
    102. 

  102. 

  103. $this_test = array(
    104. 

  104. 	'title'      => str_replace( ABSPATH, '', dirname( plugin_dir_path( $itsec_globals['plugin_file'] ) ) ),
    105. 

  105. 	'suggestion' => '= 755',
    106. 

  106. 	'value'      => substr( sprintf( '%o', fileperms( dirname( plugin_dir_path( $itsec_globals['plugin_file'] ) ) ) ), - 4 ),
    107. 

  107. );
    108. 

  108. 

  109. if ( ! dirname( plugin_dir_path( $itsec_globals['plugin_file'] ) ) || 755 != substr( sprintf( '%o', fileperms( dirname( plugin_dir_path( $itsec_globals['plugin_file'] ) ) ) ), - 4 ) ) {
    110. 

  110. 

  111. 	$this_test['status'] = 'WARNING';
    112. 

  112. 

  113. } else {
    114. 

  114. 

  115. 	$this_test['status'] = 'OK';
    116. 

  116. 

  117. }
    118. 

  118. 

  119. array_push( $tests, $this_test );
    120. 

  120. 

  121. if ( defined( 'WP_CONTENT_DIR' ) ) {
    122. 

  122. 

  123. 	$wp_content_dir = WP_CONTENT_DIR;
    124. 

  124. 

  125. } else {
    126. 

  126. 

  127. 	$wp_content_dir = ABSPATH . '/wp-content/';
    128. 

  128. 

  129. }
    130. 

  130. 

  131. $this_test = array(
    132. 

  132. 	'title'      => str_replace( ABSPATH, '', $wp_content_dir ),
    133. 

  133. 	'suggestion' => '= 755',
    134. 

  134. 	'value'      => substr( sprintf( '%o', fileperms( $wp_content_dir ) ), - 4 ),
    135. 

  135. );
    136. 

  136. 

  137. if ( ! fileperms( $wp_content_dir ) || 755 != substr( sprintf( '%o', fileperms( $wp_content_dir ) ), - 4 ) ) {
    138. 

  138. 

  139. 	$this_test['status'] = 'WARNING';
    140. 

  140. 

  141. } else {
    142. 

  142. 

  143. 	$this_test['status'] = 'OK';
    144. 

  144. 

  145. }
    146. 

  146. 

  147. array_push( $tests, $this_test );
    148. 

  148. 

  149. $wp_upload_dir = wp_upload_dir();
    150. 

  150. 

  151. $this_test = array(
    152. 

  152. 	'title'      => str_replace( ABSPATH, '', $wp_upload_dir['basedir'] ),
    153. 

  153. 	'suggestion' => '= 755',
    154. 

  154. 	'value'      => substr( sprintf( '%o', fileperms( $wp_upload_dir['basedir'] ) ), - 4 ),
    155. 

  155. );
    156. 

  156. 

  157. if ( ! fileperms( $wp_upload_dir['basedir'] ) || 755 != substr( sprintf( '%o', fileperms( $wp_upload_dir['basedir'] ) ), - 4 ) ) {
    158. 

  158. 

  159. 	$this_test['status'] = 'WARNING';
    160. 

  160. 

  161. } else {
    162. 

  162. 

  163. 	$this_test['status'] = 'OK';
    164. 

  164. 

  165. }
    166. 

  166. 

  167. array_push( $tests, $this_test );
    168. 

  168. //END FOLDERS
    169. 

  169. 

  170. //BEGIN FILES
    171. 

  171. $this_test = array(
    172. 

  172. 	'title'      => 'wp-config.php',
    173. 

  173. 	'suggestion' => '= 444',
    174. 

  174. 	'value'      => substr( sprintf( '%o', fileperms( ITSEC_Lib::get_config() ) ), - 4 ),
    175. 

  175. );
    176. 

  176. 

  177. if ( ! fileperms( ITSEC_Lib::get_config() ) || 444 != substr( sprintf( '%o', fileperms( ITSEC_Lib::get_config() ) ), - 4 ) ) {
    178. 

  178. 

  179. 	$this_test['status'] = 'WARNING';
    180. 

  180. 

  181. } else {
    182. 

  182. 

  183. 	$this_test['status'] = 'OK';
    184. 

  184. 

  185. }
    186. 

  186. 

  187. array_push( $tests, $this_test );
    188. 

  188. 

  189. $this_test = array(
    190. 

  190. 	'title'      => '.htaccess',
    191. 

  191. 	'suggestion' => '= 444',
    192. 

  192. 	'value'      => substr( sprintf( '%o', fileperms( ITSEC_Lib::get_htaccess() ) ), - 4 ),
    193. 

  193. );
    194. 

  194. 

  195. if ( ! fileperms( ITSEC_Lib::get_htaccess() ) || 444 != substr( sprintf( '%o', fileperms( ITSEC_Lib::get_htaccess() ) ), - 4 ) ) {
    196. 

  196. 

  197. 	$this_test['status'] = 'WARNING';
    198. 

  198. 

  199. } else {
    200. 

  200. 

  201. 	$this_test['status'] = 'OK';
    202. 

  202. 

  203. }
    204. 

  204. 

  205. array_push( $tests, $this_test );
    206. 

  206. //END FILES
    207. 

  207. 

  208. ?>
    209. 

  209. 

  210. <table class="widefat">
    211. 

  211. 	<thead>
    212. 

  212. 	<tr class="thead">
    213. 

  213. 		<th><?php _e('Relative Path', 'better-wp-security' ); ?></th>
    214. 

  214. 		<th><?php _e('Suggestion', 'better-wp-security' ); ?></th>
    215. 

  215. 		<th<?php _e('>Value', 'better-wp-security' ); ?></th>
    216. 

  216. 		<th><?php _e('Result', 'better-wp-security' ); ?></th>
    217. 

  217. 		<th style="width: 60px;"><?php _e('Status', 'better-wp-security' ); ?></th>
    218. 

  218. 	</tr>
    219. 

  219. 	</thead>
    220. 

  220. 	<tfoot>
    221. 

  221. 	<tr class="thead">
    222. 

  222. 		<th><?php _e('Relative Path', 'better-wp-security' ); ?></th>
    223. 

  223. 		<th><?php _e('Suggestion', 'better-wp-security' ); ?></th>
    224. 

  224. 		<th><?php _e('Value', 'better-wp-security' ); ?></th>
    225. 

  225. 		<th><?php _e('Result', 'better-wp-security' ); ?></th>
    226. 

  226. 		<th style="width: 60px;"><?php _e('Status', 'better-wp-security' ); ?></th>
    227. 

  227. 	</tr>
    228. 

  228. 	</tfoot>
    229. 

  229. 	<tbody>
    230. 

  230. 

  231. 	<?php
    232. 

  232. 	foreach ( $tests as $this_test ) {
    233. 

  233. 

  234. 		echo '<tr class="entry-row alternate">';
    235. 

  235. 		echo '	<td>' . $this_test['title'] . '</td>';
    236. 

  236. 		echo '	<td>' . $this_test['suggestion'] . '</td>';
    237. 

  237. 		echo '	<td>' . $this_test['value'] . '</td>';
    238. 

  238. 		echo '	<td>' . $this_test['status'] . '</td>';
    239. 

  239. 		echo '	<td>';
    240. 

  240. 

  241. 		if ( 'OK' == $this_test['status'] ) {
    242. 

  242. 

  243. 			echo '<div style="background-color: #22EE5B; border: 1px solid #E2E2E2;">&nbsp;&nbsp;&nbsp;</div>';
    244. 

  244. 

  245. 		} elseif ( 'FAIL' == $this_test['status'] ) {
    246. 

  246. 

  247. 			echo '<div style="background-color: #CF3333; border: 1px solid #E2E2E2;">&nbsp;&nbsp;&nbsp;</div>';
    248. 

  248. 

  249. 		} elseif ( 'WARNING' == $this_test['status'] ) {
    250. 

  250. 

  251. 			echo '<div style="background-color: #FEFF7F; border: 1px solid #E2E2E2;">&nbsp;&nbsp;&nbsp;</div>';
    252. 

  252. 

  253. 		}
    254. 

  254. 

  255. 		echo '	</td>';
    256. 

  256. 		echo '</tr>';
    257. 

  257. 	}
    258. 

  258. 	?>
    259. 

  259. 	</tbody>
    260. 

  260. </table>
    261.