| Dir : /home/trave494/tiktechtok.org/wp-content/plugins/really-simple-ssl/ |
| Server: Linux ngx353.inmotionhosting.com 4.18.0-553.22.1.lve.1.el8.x86_64 #1 SMP Tue Oct 8 15:52:54 UTC 2024 x86_64 IP: 209.182.202.254 |
| Dir : /home/trave494/tiktechtok.org/wp-content/plugins/really-simple-ssl/class-multisite.php |
<?php defined('ABSPATH') or die();
if (!class_exists('rsssl_multisite')) {
class rsssl_multisite
{
private static $_this;
function __construct()
{
if (isset(self::$_this))
wp_die();
self::$_this = $this;
register_activation_hook( __DIR__ . "/" . rsssl_plugin, array($this, 'activate'));
add_action('network_admin_menu', array($this, 'add_plus_ones') );
/*filters to make sure WordPress returns the correct protocol */
add_filter("admin_url", array($this, "check_admin_protocol"), 20, 3);
add_filter('home_url', array($this, 'check_site_protocol'), 20, 4);
add_filter('site_url', array($this, 'check_site_protocol'), 20, 4);
add_action('network_admin_menu', array(&$this, 'add_multisite_menu'));
add_action('plugins_loaded', array($this, 'maybe_redirect_old_settings_url'), 10);
if ( is_network_admin() ) {
add_action('network_admin_notices', array($this, 'show_notices'), 10);
}
$plugin = rsssl_plugin;
add_filter( "network_admin_plugin_action_links_$plugin", array($this, 'plugin_settings_link') );
//If WP version is 5.1 or higher, use wp_insert_site hook for multisite SSL activation in new blogs
if( version_compare(get_bloginfo('version'),'5.1', '>=') ) {
add_action('wp_initialize_site', array($this, 'maybe_activate_ssl_in_new_blog'), 20, 1);
} else {
add_action('wpmu_new_blog', array($this, 'maybe_activate_ssl_in_new_blog_deprecated'), 10, 6);
}
add_filter('rsssl_notices', array($this, 'add_multisite_notices'));
}
static function this()
{
return self::$_this;
}
/**
* Redirect to the new settings page
*
* @return void
*/
public function maybe_redirect_old_settings_url(){
if ( !rsssl_user_can_manage() || !is_network_admin() ) {
return;
}
if ( isset($_GET['page']) && $_GET['page'] === 'rlrsssl_really_simple_ssl' ){
wp_redirect(add_query_arg(['page' => 'really-simple-security'], network_admin_url('settings.php') ) );
exit;
}
}
/**
*
* @since 3.1.6
*
* Add an update count to the WordPress admin Settings menu item
* Doesn't work when the Admin Menu Editor plugin is active
*
*/
public function add_plus_ones()
{
if (!rsssl_user_can_manage()) {
return;
}
$count = RSSSL()->admin->count_plusones();
if ( $count > 0 ) {
global $menu;
foreach( $menu as $index => $menu_item ){
if (!isset($menu_item[2]) || !isset($menu_item[0])) continue;
if ( $menu_item[2]==='settings.php' ){
$pattern = '/<span.*>([1-9])<\/span><\/span>/i';
if (preg_match($pattern, $menu_item[0], $matches)){
if (isset($matches[1])) $count = (int) $count + (int) $matches[1];
}
$menu[$index][0] = __('Settings') . "<span class='update-plugins rsssl-update-count'><span class='update-count'>$count</span></span>";
}
}
}
}
/**
* Add notices to the dashboard
* @param array $notices
*
* @return array
*/
public function add_multisite_notices( array $notices): array {
$unset_array = array(
'mixed_content_fixer_detected',
'elementor',
'divi',
);
foreach ( $unset_array as $unset_item ) {
unset( $notices[$unset_item] );
}
$notices['ssl_enabled'] = array(
'callback' => 'rsssl_ssl_enabled',
'score' => 30,
'output' => array(
'true' => array(
'msg' =>__('SSL is enabled networkwide.', 'really-simple-ssl'),
'icon' => 'success'
),
'false' => array(
'msg' => __('SSL is not enabled on your network', 'really-simple-ssl'),
'icon' => 'open',
'plusone' => true,
),
),
);
$notices['multisite_server_variable_warning'] = array(
'condition' => array('rsssl_ssl_enabled'),
'callback' => 'RSSSL()->multisite->multisite_server_variable_warning',
'score' => 30,
'output' => array(
'no-server-variable' => array(
'msg' => __('You run a Multisite installation with subfolders, which prevents this plugin from fixing your missing server variable in the wp-config.php.', 'really-simple-ssl') . " "
.__('Because the $_SERVER["HTTPS"] variable is not set, your website may experience redirect loops.', 'really-simple-ssl') . " "
.__('Activate networkwide to fix this.', 'really-simple-ssl'),
'icon' => 'warning',
'plusone' => true,
),
),
);
$notices['activation_not_completed'] = array(
'callback' => 'RSSSL()->multisite->ssl_activation_started_but_not_completed',
'score' => 30,
'output' => array(
'true' => array(
'title' => __("SSL activation in progress", "really-simple-ssl"),
'msg' => __('A networkwide SSL activation process has been started, but has not been completed. Please go to the SSL settings page to complete the process.', 'really-simple-ssl').' '.
'<a href="'.add_query_arg(['page'=>'really-simple-security'], network_admin_url('settings.php') ).'">'.__('View settings page','really-simple-ssl').'</a>',
'icon' => 'warning',
'plusone' => true,
'admin_notice' => true,
),
),
);
$notices['subdomains_no_wildcard'] = array(
'condition' => array('rsssl_ssl_enabled'),
'callback' => 'RSSSL()->multisite->subdomains_no_wildcard',
'score' => 30,
'output' => array(
'subdomains-no-wildcard' => array(
'msg' => __("You run a Multisite installation with subdomains, but your site doesn't have a wildcard certificate.", 'really-simple-ssl') . " "
. __("This leads to issues when activating SSL networkwide since subdomains will be forced over SSL as well while they don't have a valid certificate.", 'really-simple-ssl') . " "
. __("Activate SSL per site or install a wildcard certificate to fix this.", 'really-simple-ssl'),
'icon' => 'warning',
'dismissible' => true,
'plusone' => true,
),
),
);
return $notices;
}
/**
* Check if site has a server var issue.
* @return string
*/
public function multisite_server_variable_warning(){
if (!function_exists('is_plugin_active_for_network'))
require_once(ABSPATH . '/wp-admin/includes/plugin.php');
if ( is_multisite() && !is_plugin_active_for_network(rsssl_plugin) && $this->is_multisite_subfolder_install() ) {
//with no server variables, the website could get into a redirect loop.
if (RSSSL()->admin->no_server_variable) {
return 'no-server-variable';
}
}
return 'success';
}
/**
* Check if we have a subdomains setup, but no wildcard
* @return string
*/
public function subdomains_no_wildcard(){
if ( get_site_option('rsssl_network_activation_status' !== 'completed') && !$this->is_multisite_subfolder_install() && !RSSSL()->certificate->is_wildcard() ) {
return 'subdomains-no-wildcard';
}
return 'success';
}
/**
* Add settings link on plugins overview page
*
* @param array $links
*
* @return array
* @since 2.0
* @access public
*/
public function plugin_settings_link(array $links): array {
if ( !rsssl_user_can_manage() ) {
return $links;
}
$url = add_query_arg(array('page' => 'really-simple-security'), network_admin_url('settings.php') );
$settings_link = '<a href="' . $url . '">' . __("Settings", "really-simple-ssl") . '</a>';
array_unshift($links, $settings_link);
$support = apply_filters('rsssl_support_link', '<a target="_blank" rel="noopener noreferrer" href="https://wordpress.org/support/plugin/really-simple-ssl/">' . __('Support', 'really-simple-ssl') . '</a>');
array_unshift($links, $support);
if ( ! defined( 'rsssl_pro_version' ) ) {
$upgrade_link = '<a style="color:#2271b1;font-weight:bold" target="_blank" rel="noopener noreferrer" href="https://really-simple-ssl.com/pro/?mtm_campaign=settings&mtm_kwd=multisite&mtm_source=free&mtm_content=upgrade">' . __( 'Improve security - Upgrade', 'really-simple-ssl' ) . '</a>';
array_unshift( $links, $upgrade_link );
}
return $links;
}
/**
* When a new site is added, maybe activate SSL as well.
*
* @param int $blog_id
* @param bool $user_id
* @param bool $domain
* @param bool $path
* @param bool $site_id
* @param bool $meta
*/
public function maybe_activate_ssl_in_new_blog_deprecated( int $blog_id, $user_id=false, $domain=false, $path=false, $site_id=false, $meta=false)
{
if ( get_site_option('rsssl_network_activation_status' === 'completed') ) {
$site = get_blog_details($blog_id);
switch_to_blog($site->blog_id);
RSSSL()->admin->activate_ssl(false);
restore_current_blog();
}
}
/**
* Activate SSl in new block
* @since 3.1.6
* @param $site
* @return void
*/
public function maybe_activate_ssl_in_new_blog($site)
{
if ( get_site_option('rsssl_network_activation_status' === 'completed') ) {
switch_to_blog($site->blog_id);
RSSSL()->admin->activate_ssl(false);
restore_current_blog();
}
}
/**
Add network menu for SSL
Only when plugin is network activated.
*/
public function add_multisite_menu()
{
if ( !is_multisite() || !rsssl_is_networkwide_active() ) {
return;
}
if ( !rsssl_user_can_manage() ) {
return;
}
$count = RSSSL()->admin->count_plusones();
$update_count = $count > 0 ? "<span class='update-plugins rsssl-update-count'><span class='update-count'>$count</span></span>" : "";
$page_hook_suffix = add_submenu_page(
'settings.php',
__("SSL & Security","really-simple-ssl"),
__("SSL & Security","really-simple-ssl").' '.$update_count,
'manage_security',
"really-simple-security",
'rsssl_settings_page'
);
add_action( "admin_print_scripts-{$page_hook_suffix}", 'rsssl_plugin_admin_scripts' );
}
/**
* Check if an SSL process is active
* @return bool
*/
public function ssl_process_active(){
if ( get_site_option('rsssl_ssl_activation_active') ){
return true;
}
return false;
}
/**
* Run SSL upgrade process
*
* @return void
*/
public function run_ssl_process(){
if ( get_site_option('rsssl_ssl_activation_active') ){
$this->activate_ssl_networkwide();
}
update_site_option('rsssl_run', false);
}
/**
* @param WP_REST_Request $request
*
* @return array
*/
public function process_ssl_activation_step(){
if ( !$this->ssl_process_active() ) {
$this->start_ssl_activation();
}
$this->run_ssl_process();
$progress = $this->get_process_completed_percentage();
return [
'progress' => $progress,
'success' => true
];
}
/**
* Get SSL process completed percentage
* @return int
*/
public function get_process_completed_percentage(){
if ( get_site_option('rsssl_network_activation_status') === 'completed' ) {
return 100;
}
$complete_count = get_site_option('rsssl_siteprocessing_progress');
$blog_count = $this->get_total_blog_count();
$blog_count = $blog_count !== 0 ? $blog_count : 1; //prevent division by zero
$percentage = round(( $complete_count/$blog_count )*100,0);
if ( $percentage > 99 ) {
$percentage = 100;
}
return (int) $percentage;
}
/**
* Check if website has started activation, but didn't completed
* @return bool
*/
public function ssl_activation_started_but_not_completed(){
if ( !get_option('rsssl_network_activation_status') ) {
return false;
}
return get_option('rsssl_network_activation_status')!=='completed';
}
/**
* Start SSL activation
*
* @return void
*/
public function start_ssl_activation(){
if (!rsssl_user_can_manage()) {
return;
}
update_site_option('rsssl_siteprocessing_progress', 0);
update_site_option('rsssl_ssl_activation_active', true);
}
/**
* End SSL activation
*
* @return void
*/
public function end_ssl_activation(){
if (!rsssl_user_can_manage()) {
return;
}
update_site_option('rsssl_ssl_activation_active', false);
}
/**
* Activate SSL network wide
*/
public function activate_ssl_networkwide()
{
if (!rsssl_user_can_manage()) {
return;
}
//run chunked
$nr_of_sites = 200;
$current_offset = get_site_option('rsssl_siteprocessing_progress');
//set batch of sites
$args = array(
'number' => $nr_of_sites,
'offset' => $current_offset,
'meta_query' => [
'relation' => 'or',
[
'key' => 'rsssl_ssl_activated',
'compare' => 'NOT EXISTS'
],
[
'key' => 'rsssl_ssl_activated',
'value' => false,
'compare' => '=',
],
]
);
$sites = get_sites($args);
//if no sites are found, we assume we're done.
if ( count($sites)==0 ) {
$this->end_ssl_activation();
update_site_option('rsssl_network_activation_status', 'completed');
} else {
foreach ($sites as $site) {
switch_to_blog($site->blog_id);
update_site_meta($site->blog_id, 'rsssl_ssl_activated', true );
RSSSL()->admin->activate_ssl(false);
restore_current_blog(); //switches back to previous blog, not current, so we have to do it each loop
update_site_option('rsssl_siteprocessing_progress', $current_offset+$nr_of_sites);
}
}
}
/**
* Deactivate SSL on all subsites
*
* @return void
*/
public function deactivate()
{
if (!rsssl_user_can_manage()) {
return;
}
$ssl_was_enabled = rsssl_get_option('ssl_enabled');
delete_site_option('rsssl_network_activation_status');
update_option('ssl_enabled', false);
//main site first
$site_id = get_main_site_id();
switch_to_blog($site_id);
RSSSL()->admin->deactivate_site($ssl_was_enabled);
restore_current_blog();
//because the deactivation should be a one click procedure, chunking this would cause difficulties
$args = array(
'number' => $this->get_total_blog_count(),
'offset' => 0,
);
$sites = get_sites($args);
foreach ($sites as $site) {
switch_to_blog($site->blog_id);
update_site_meta($site->blog_id, 'rsssl_ssl_activated', false );
//we already did the main site
if ( !is_main_site() ) {
RSSSL()->admin->deactivate_site($ssl_was_enabled);
}
restore_current_blog();
}
}
/**
* filters the get_admin_url function to correct the false https urls wordpress returns for non SSL websites.
*
* @since 2.3.10
*
*/
public function check_admin_protocol($url, $path, $blog_id)
{
if ( !$blog_id ) $blog_id = get_current_blog_id();
//if the force_ssl_admin is defined, the admin_url should not be forced back to http: all admin panels should be https.
if (defined('FORCE_SSL_ADMIN')) return $url;
//do not force to http if the request is made for an url of the current blog.
//if a site is loaded over https, it should return https links, unless the url is requested for another blog.
//In that case, we only return a https link if the site_url is https, and http otherwise.
if (get_current_blog_id() == $blog_id) return $url;
//now check if the blog is http or https, and change the url accordingly
if (!function_exists('is_plugin_active_for_network'))
require_once(ABSPATH . '/wp-admin/includes/plugin.php');
if ( !is_plugin_active_for_network(rsssl_plugin) ) {
$home_url = get_blog_option($blog_id, 'home');
if (strpos($home_url, "https://") === false) {
$url = str_replace("https://", "http://", $url);
}
}
return $url;
}
/**
* filters the home_url and/or site_url function to correct the false https urls wordpress returns for non SSL websites.
*
* @since 2.3.17
*
*/
public function check_site_protocol($url, $path, $orig_scheme, $blog_id)
{
if ( !$blog_id ) {
$blog_id = get_current_blog_id();
}
if (get_current_blog_id() == $blog_id) return $url;
if (!function_exists('is_plugin_active_for_network'))
require_once(ABSPATH . '/wp-admin/includes/plugin.php');
if ( !is_plugin_active_for_network(rsssl_plugin) ) {
$home_url = get_blog_option($blog_id, 'home');
if (strpos($home_url, "https://") === false) {
$url = str_replace("https://", "http://", $url);
}
}
return $url;
}
/**
* Checks if we are on a subfolder install. (domain.com/site1 )
*
* @since 2.2
*
* @access public
*
**/
public function is_multisite_subfolder_install()
{
if ( !is_multisite() ) {
return false;
}
//we check this manually, as the SUBDOMAIN_INSTALL constant of wordpress might return false for domain mapping configs
$is_subfolder = false;
$args = array(
'number' => 5,
'offset' => 0,
);
$sites = get_sites($args);
foreach ($sites as $site) {
switch_to_blog($site->blog_id);
if ($this->is_subfolder(home_url())) {
$is_subfolder = true;
}
restore_current_blog(); //switches back to previous blog, not current, so we have to do it each loop
if ($is_subfolder) return true;
}
return false;
}
/**
* Test if a domain has a subfolder structure
*
* @param string $domain
*
* @access public
*
* @return bool
* @since 2.2
*
*/
public function is_subfolder(string $domain): bool {
//remove slashes of the http(s)
$domain = preg_replace("/(http:\/\/|https:\/\/)/", "", $domain);
return strpos( $domain, "/" ) !== false;
}
/**
* Show notices
*
* @since 2.0
*
* @access public
*
*/
public function show_notices()
{
if ( !rsssl_user_can_manage() ) {
return;
}
//prevent showing the review on edit screen, as gutenberg removes the class which makes it editable.
$screen = get_current_screen();
if ( $screen && $screen->base === 'post' ) {
return;
}
if ( !$this->is_settings_page() ) {
$notices = RSSSL()->admin->get_notices_list( array('admin_notices'=>true) );
foreach ( $notices as $id => $notice ){
$notice = $notice['output'];
$class = ( $notice['status'] !== 'completed' ) ? 'error' : 'updated';
$more_info = $notice['url'] ?? false;
$dismiss_id = isset($notice['dismissible']) && $notice['dismissible'] ? $id : false;
echo RSSSL()->admin->notice_html( $class.' '.$id, $notice['msg'], $more_info, $dismiss_id);
}
}
}
/**
* Check if we are on the settings page
* @return bool
*/
public function is_settings_page()
{
if (!rsssl_user_can_manage()) {
return false;
}
return (isset($_GET['page']) && $_GET['page'] === 'really-simple-security');
}
/**
* Get blog count for all networks
*
* @return int
*/
public function get_total_blog_count()
{
//Get the total blog count from all multisite networks
$networks = get_networks();
$total_blog_count = 0;
foreach($networks as $network){
$network_id = ($network->__get('id'));
$blog_count = get_blog_count($network_id);
$total_blog_count += $blog_count;
}
return $total_blog_count;
}
} //class closure
}