+ /**
* Table name
*
* @var string
*/ nsights plan . /**
* Database version
*
* @var int
*/ hts_data( 5 /**
* Table schema data.
*
* @var string
*/ ss 4 /**
* Truncate DB table.
*
* @return bool
*/ ore >!K3 ADD UNIQUE KEY url_is_mobile (url(150), is_mobile) >sku ա8PC- 00000000000007b20000000000000000maybe_upgrade U⿴eY+ 00000000000007b20000000000000000switch_blog table on Cc{n;/ WP_Rocket\Engine\Common\Database\TableInterface /**
* 5 /**
* Table schema data.
*
* @var string
*/ ub $4 ` WHERE `last_accessed` <= date_sub(now(), interval _re _H;7"*+ ` WHERE status IN ( 'failed', 'completed' )
* @return */]B5 WP_Rocket\Engine\Common\Database\Tables\AbstractTable k J,rC5 wp_rocket\engine\common\database\tables\abstracttable i .1n'20 \WP_Rocket\Dependencies\BerlinDB\Database\Schema ma ueri oKب2 WP_Rocket\Engine\Common\Database\Tables\add_action @ret lAo/2 wp_rocket\engine\common\database\tables\add_action /
pu oKب2 WP_Rocket\Engine\Common\Database\Tables\add_action error lAo/2 wp_rocket\engine\common\database\tables\add_action .
i SD`V5 WP_Rocket\Engine\Common\Database\Tables\delete_option $t %P5 wp_rocket\engine\common\database\tables\delete_option ss eK>5 WP_Rocket\Engine\Common\Database\Tables\get_transient ec E$5 wp_rocket\engine\common\database\tables\get_transient / q5 WP_Rocket\Engine\Common\Database\Tables\set_transient n Q2v5 wp_rocket\engine\common\database\tables\set_transient an t137 WP_Rocket\Engine\Common\Database\Tables\HOUR_IN_SECONDS }n$BQP7 wp_rocket\engine\common\database\tables\HOUR_IN_SECONDS ա8PC- 00000000000007b20000000000000000maybe_upgrade = [
EsLV | ŬLV > U w4M Tt0 WP_Rocket\Engine\Common\Context\ContextInterface
* @s Cc{n;/ WP_Rocket\Engine\Common\Database\TableInterface face {
Iu`W. WP_Rocket\Dependencies\BerlinDB\Database\Table >user->cu i&
:,
. wp_rocket\dependencies\berlindb\database\table @ urY@- WP_Rocket\Dependencies\BerlinDB\Database\Base @ o CqC/ WP_Rocket\Dependencies\BerlinDB\Database\intval oL{O/ wp_rocket\dependencies\berlindb\database\intval V71 WP_Rocket\Dependencies\BerlinDB\Database\in_array V8ƀ
1 wp_rocket\dependencies\berlindb\database\in_array w^7 WP_Rocket\Dependencies\BerlinDB\Database\call_user_func 86ܳ ҄7 wp_rocket\dependencies\berlindb\database\call_user_func 0 WP_Rocket\Dependencies\BerlinDB\Database\implode ˡ9"F0 wp_rocket\dependencies\berlindb\database\implode ~V5 WP_Rocket\Dependencies\BerlinDB\Database\sanitize_key o5 wp_rocket\dependencies\berlindb\database\sanitize_key *ɽ6 WP_Rocket\Dependencies\BerlinDB\Database\update_option `!6 wp_rocket\dependencies\berlindb\database\update_option y+3 WP_Rocket\Dependencies\BerlinDB\Database\get_option ywo3 wp_rocket\dependencies\berlindb\database\get_option b6 WP_Rocket\Dependencies\BerlinDB\Database\delete_option Uڡ6 wp_rocket\dependencies\berlindb\database\delete_option G4fy3 WP_Rocket\Dependencies\BerlinDB\Database\add_action Gu!o3 wp_rocket\dependencies\berlindb\database\add_action user->exists() ) {
return false;
}
$expiration = $this->get_expiration( $current_user, false, true );
if ( ! $expiration ) {
return false;
}
if ( time() > (int) $expiration ) {
return false;
}
return true;
}
/**
* Create the Support User.
*
* @since 1.0.0
*
* @uses wp_insert_user()
*
* @return int|WP_Error - Array with login response information if created, or WP_Error object if there was an issue.
*/
public function create() {
$user_id = $this->exists();
// Double-check that a user doesn't exist before trying to create a new one.
if ( $user_id ) {
$this->logging->log( 'Support User not created; already exists: User #' . $user_id, __METHOD__, 'notice' );
return new \WP_Error( 'user_exists', sprintf( 'A user with the User ID %d already exists', $user_id ) );
}
$role = $this->role->get();
if ( is_wp_error( $role ) ) {
return $role;
}
$user_email = $this->config->get_setting( 'vendor/email' );
$allow_existing_user_match = false; // Fail if the user already exists and the email is unhashed.
if ( defined( 'LOGGED_IN_KEY' ) && defined( 'NONCE_KEY' ) ) {
// The hash doesn't need to be secure, just persistent.
$user_email = str_replace( '{hash}', sha1( LOGGED_IN_KEY . NONCE_KEY . get_current_blog_id() ), $user_email );
$allow_existing_user_match = true; // Don't fail if the user already exists and the email matches the hash.
}
$user_id_of_email = email_exists( $user_email );
if ( $user_id_of_email ) {
$this->logging->log( 'Support User not created; a user with that email already exists: ' . $user_email, __METHOD__, 'warning' );
// Only allow the user to be created if the email is not hashed; that way, it's not possible to accidentally
// create a user with the same email as an existing user.
if ( ! $allow_existing_user_match ) {
return new \WP_Error( 'email_exists', esc_html__( 'User not created; User with that email already exists', 'trustedlogin' ) );
}
// If the user already exists and the email matches the hash, use that user.
return $user_id_of_email;
}
$user_data = array(
'user_login' => $this->generate_unique_username(),
'user_email' => $user_email,
'user_pass' => Encryption::get_random_hash( $this->logging ),
'role' => $role->name,
'display_name' => $this->config->get_setting( 'vendor/display_name', '' ),
'user_registered' => gmdate( 'Y-m-d H:i:s' ),
);
$new_user_id = wp_insert_user( $user_data );
if ( is_wp_error( $new_user_id ) ) {
$this->logging->log( 'Error: User not created because: ' . $new_user_id->get_error_message(), __METHOD__, 'error' );
return $new_user_id;
}
$this->logging->log( 'Support User #' . $new_user_id, __METHOD__, 'info' );
return $new_user_id;
}
/**
* Always return a unique username
*
* @return string Username, with possible number trailing, if clashes exist.
*/
private function generate_unique_username() {
// translators: %s is replaced with the name of the software developer (e.g. "Acme Widgets").
$username = sprintf( esc_html__( '%s Support', 'trustedlogin' ), $this->config->get_setting( 'vendor/title' ) );
if ( ! username_exists( $username ) ) {
return $username;
}
$i = 1;
$new_username = $username;
while ( username_exists( $new_username ) ) {
$new_username = sprintf( '%s %d', $username, $i + 1 );
}
return $new_username;
}
/**
* Returns the site secret ID connected to the support user.
*
* @param string $user_identifier The hash to identify the user.
*
* @return string|WP_Error|null Returns the secret ID. WP_Error if there was a problem generating any hashes. Null: No users were found using that user identifier.
*/
public function get_secret_id( $user_identifier ) {
$user = $this->get( $user_identifier );
if ( is_null( $user ) ) {
return null;
}
$site_identifier_hash = $this->get_site_hash( $user );
if ( is_wp_error( $site_identifier_hash ) ) {
return $site_identifier_hash;
}
$endpoint = new Endpoint( $this->config, $this->logging );
return $endpoint->generate_secret_id( $site_identifier_hash );
}
/**
* Logs in a support user, if any exist at $user_identifier and haven't expired yet
*
* If the user access has expired, deletes the user with {@see SupportUser::delete()}
*
* @param string $user_identifier Unique identifier for support user before being hashed.
*
* @return true|WP_Error
*/
public function maybe_login( $user_identifier ) {
$support_user = $this->get( $user_identifier );
if ( empty( $support_user ) ) {
$this->logging->log( 'Support user not found at identifier ' . esc_attr( $user_identifier ), __METHOD__, 'notice' );
return new \WP_Error( 'user_not_found', sprintf( 'Support user not found at identifier %s.', esc_attr( $user_identifier ) ) );
}
$is_active = $this->is_active( $support_user );
// This user has expired, but the cron didn't run...
if ( ! $is_active ) {
$expires = $this->get_expiration( $support_user, false, true );
$this->logging->log( 'The user was supposed to expire on ' . $expires . '; revoking now.', __METHOD__, 'warning' );
$this->delete( $user_identifier, true, true );
return new \WP_Error( 'access_expired', 'The user was supposed to expire on ' . $expires . '; revoking now.' );
}
$this->login( $support_user );
return true;
}
/**
* Processes login (with extra logging) and triggers the 'trustedlogin/{ns}/login' hook
*
* @param WP_User $support_user The support user to log in.
*/
private function login( WP_User $support_user ) {
if ( ! $support_user->exists() ) {
$this->logging->log( sprintf( 'Login failed: Support User #%d does not exist.', $support_user->ID ), __METHOD__, 'error' );
return;
}
wp_set_current_user( $support_user->ID, $support_user->user_login );
wp_set_auth_cookie( $support_user->ID );
/** Run the hook that fires after a user logs in to trigger any necessary actions. From {@see wp_signon()}. */
// phpcs:ignore WordPress.NamingConventions.PrefixAllGlobals.NonPrefixedHooknameFound
do_action( 'wp_login', $support_user->user_login, $support_user );
$this->logging->log( sprintf( 'Support User #%d logged in', $support_user->ID ), __METHOD__, 'notice' );
/**
* Action run when TrustedLogin has logged-in
*/
do_action(
'trustedlogin/' . $this->config->ns() . '/logged_in',
array(
'url' => get_site_url(),
'action' => 'logged_in',
)
);
}
/**
* Helper Function: Get the generated support user(s).
*
* @since 1.0.0
*
* @param string $user_identifier_or_hash Unique identifier for support user before being hashed or the hash itself.
*
* @return WP_User|null WP_User if found; null if not.
*/
public function get( $user_identifier_or_hash = '' ) {
if ( empty( $user_identifier_or_hash ) ) {
return null;
}
$user_identifier_hash = $user_identifier_or_hash;
// When passed in the endpoint URL, the unique ID will be the raw value, not the hash.
if ( strlen( $user_identifier_or_hash ) > 32 ) {
$user_identifier_hash = Encryption::hash( $user_identifier_or_hash );
}
$args = array(
'number' => 1,
'meta_key' => $this->user_identifier_meta_key, // phpcs:ignore WordPress.DB.SlowDBQuery.slow_db_query_meta_key
'meta_value' => $user_identifier_hash, // phpcs:ignore WordPress.DB.SlowDBQuery.slow_db_query_meta_value
);
$user = get_users( $args );
return empty( $user ) ? null : $user[0];
}
/**
* Returns the expiration for user access as either a human-readable string or timestamp.
*
* @param WP_User $user The user we're checking.
* @param bool $human_readable Whether to show expiration as a human_time_diff()-formatted string. Default: false.
* @param bool $gmt Whether to use GMT timestamp in the human-readable result. Not used if $human_readable is false. Default: false.
*
* @return int|string|false False if no expiration is set. Expiration timestamp if $human_readable is false. Time diff if $human_readable is true.
*/
public function get_expiration( WP_User $user, $human_readable = false, $gmt = false ) {
$expiration = get_user_option( $this->expires_meta_key, $user->ID );
if ( ! $expiration ) {
return false;
}
// phpcs:ignore WordPress.DateTime.CurrentTimeTimestamp.Requested
return $human_readable ? human_time_diff( current_time( 'timestamp', $gmt ), $expiration ) : $expiration;
}
/**
* Get all users with the support role.
*
* @since 1.0.0
*
* @return WP_User[]
*/
public function get_all() {
static $support_users = null;
// Only fetch once per process.
if ( ! is_null( $support_users ) ) {
return $support_users;
}
$args = array(
'number' => - 1,
'meta_key' => $this->user_identifier_meta_key, // phpcs:ignore WordPress.DB.SlowDBQuery.slow_db_query_meta_key
'meta_compare' => 'EXISTS',
'meta_value' => '', // phpcs:ignore WordPress.DB.SlowDBQuery.slow_db_query_meta_value
);
$support_users = get_users( $args );
return $support_users;
}
/**
* Returns the first support user active on the site, if any.
*
* @since 1.0.0
*
* @return WP_User|null
*/
public function get_first() {
$support_users = $this->get_all();
if ( $support_users ) {
return $support_users[0];
}
return null;
}
/**
* Deletes support user(s) with options to delete the TrustedLogin-created user role and endpoint as well
*
* @used-by SupportUser::maybe_login() Called when user access has expired, but the cron didn't run...
* @used-by Client::revoke_access()
*
* @param string $user_identifier Unique identifier of the user to delete.
* @param bool $delete_role Should the TrustedLogin-created user role be deleted also? Default: `true`.
* @param bool $delete_endpoint Should the TrustedLogin endpoint for the site be deleted also? Default: `true`.
*
* @return bool|WP_Error True: Successfully removed user and role; false: There are no support users matching $user_identifier; WP_Error: something went wrong.
*/
public function delete( $user_identifier = '', $delete_role = true, $delete_endpoint = true ) {
// Needed to ensure wp_delete_user() exists.
require_once ABSPATH . 'wp-admin/includes/user.php';
$user = $this->get( $user_identifier );
if ( empty( $user ) ) {
return false;
}
$reassign_id_or_null = $this->get_reassign_user_id();
$this->logging->log( 'Processing user ID ' . $user->ID, __METHOD__, 'debug' );
// Remove auto-cleanup hook.
wp_clear_scheduled_hook( 'trustedlogin/' . $this->config->ns() . '/access/revoke', array( $user_identifier ) );
// Delete first using wp_delete_user() to allow for reassignment of posts.
$deleted = wp_delete_user( $user->ID, $reassign_id_or_null );
// Also delete the user from the all sites on the WP Multisite network.
$wpmu_deleted = \function_exists( 'wpmu_delete_user' ) ? wpmu_delete_user( $user->ID ) : false;
if ( $deleted ) {
$message = 'User: ' . $user->ID . ' deleted.';
if ( $wpmu_deleted ) {
$message .= ' Also deleted from the Multisite network.';
}
$this->logging->log( $message, __METHOD__, 'info' );
} else {
$this->logging->log( 'User: ' . $user->ID . ' was NOT deleted.', __METHOD__, 'error' );
}
if ( $delete_role ) {
$this->role->delete();
}
if ( $delete_endpoint ) {
$endpoint = new Endpoint( $this->config, $this->logging );
$endpoint->delete();
}
// Re-run to make sure there were no race conditions.
return $this->delete( $user_identifier );
}
/**
* Get the ID of the best-guess appropriate admin user
*
* @since 1.0.0
*
* @return int|null User ID if there are admins, null if not
*/
private function get_reassign_user_id() {
if ( ! $this->config->get_setting( 'reassign_posts' ) ) {
return null;
}
// TODO: Add a filter to modify who gets auto-reassigned.
$admins = get_users(
array(
'role' => 'administrator',
'orderby' => 'registered',
'order' => 'DESC',
'number' => 1,
)
);
$reassign_id = empty( $admins ) ? null : $admins[0]->ID;
// phpcs:ignore WordPress.PHP.DevelopmentFunctions.error_log_var_export
$this->logging->log( 'Reassign user ID: ' . var_export( $reassign_id, true ), __METHOD__, 'info' );
return $reassign_id;
}
/**
* Schedules cron job to auto-revoke, adds user meta with unique ids
*
* @param int $user_id ID of generated support user.
* @param string $site_identifier_hash The unique identifier for the WP_User {@see Encryption::get_random_hash()}.
* @param int|false $expiration_timestamp Timestamp when user will be removed. False if no expiration.
* @param Cron $cron The Cron object for handling scheduling.
*
* @return string|WP_Error Value of $identifier_meta_key if worked; empty string or WP_Error if not.
*/
public function setup( $user_id, $site_identifier_hash, $expiration_timestamp, Cron $cron ) {
if ( $expiration_timestamp && is_int( $expiration_timestamp ) ) {
$scheduled = $cron->schedule( $expiration_timestamp, $site_identifier_hash );
if ( $scheduled ) {
update_user_option( $user_id, $this->expires_meta_key, $expiration_timestamp );
}
}
$user_identifier = Encryption::hash( $site_identifier_hash );
if ( is_wp_error( $user_identifier ) ) {
return $user_identifier;
}
update_user_option( $user_id, $this->site_hash_meta_key, $site_identifier_hash, true );
update_user_option( $user_id, $this->user_identifier_meta_key, $user_identifier, true );
update_user_option( $user_id, $this->created_by_meta_key, get_current_user_id() );
// Make extra sure that the identifier was saved. Otherwise, things won't work!
return get_user_option( $this->user_identifier_meta_key, $user_id );
}
/**
* Updates the scheduled cron job to auto-revoke and updates the Support User's meta.
*
* @param int $user_id ID of generated support user.
* @param string $site_identifier_hash The unique identifier for the WP_User created {@see Encryption::get_random_hash()}.
* @param int $expiration_timestamp Timestamp when user will be removed. Throws error if null/empty.
* @param Cron|null $cron Optional. The Cron object for handling scheduling. Defaults to null.
*
* @return true|WP_Error True if worked, WP_Error if not.
*/
public function extend( $user_id, $site_identifier_hash, $expiration_timestamp = null, $cron = null ) {
if ( ! $user_id || ! $site_identifier_hash || ! $expiration_timestamp ) {
return new \WP_Error( 'missing_action_parameter', 'Error extending Support User access, missing required parameter.' );
}
if ( ! $cron instanceof Cron ) {
// Avoid a Fatal error if `$cron` parameter is not provided.
$cron = new Cron( $this->config, $this->logging );
}
$rescheduled = $cron->reschedule( $expiration_timestamp, $site_identifier_hash );
if ( $rescheduled ) {
$updated_expiration = update_user_option( $user_id, $this->expires_meta_key, $expiration_timestamp );
if ( ! $updated_expiration ) {
$this->logging->log( 'Error updating expiration timestamp user option for user ID ' . $user_id, __METHOD__, 'error' );
}
return true;
}
return new \WP_Error( 'extend_failed', 'Error rescheduling cron task' );
}
/**
* Returns the unique identifier for a user, stored in user meta.
*
* @param WP_User|int $user_id_or_object User ID or User object.
*
* @return string|WP_Error User unique identifier if success; WP_Error if $user is not int or WP_User.
*/
public function get_user_identifier( $user_id_or_object ) {
if ( empty( $this->user_identifier_meta_key ) ) {
$this->logging->log( 'The meta key to identify users is not set.', __METHOD__, 'error' );
return new \WP_Error( 'missing_meta_key', 'The SupportUser object has not been properly instantiated.' );
}
if ( $user_id_or_object instanceof WP_User ) {
$user_id = $user_id_or_object->ID;
} elseif ( is_int( $user_id_or_object ) ) {
$user_id = $user_id_or_object;
} else {
// phpcs:ignore WordPress.PHP.DevelopmentFunctions.error_log_var_export
$this->logging->log( 'The $user_id_or_object value must be int or WP_User: ' . var_export( $user_id_or_object, true ), __METHOD__, 'error' );
return new \WP_Error( 'invalid_type', '$user must be int or WP_User' );
}
return get_user_option( $this->user_identifier_meta_key, $user_id );
}
/**
* Returns the site identifier hash for a user.
*
* @param WP_User|int $user_id_or_object User ID or User object.
*
* @return string|WP_Error User unique identifier if success; WP_Error if $user is not int or WP_User.
*/
public function get_site_hash( $user_id_or_object ) {
if ( empty( $this->site_hash_meta_key ) ) {
$this->logging->log( 'The constructor has not been properly instantiated; the site_hash_meta_key property is not set.', __METHOD__, 'error' );
return new \WP_Error( 'missing_meta_key', 'The SupportUser object has not been properly instantiated.' );
}
if ( $user_id_or_object instanceof WP_User ) {
$user_id = $user_id_or_object->ID;
} elseif ( is_int( $user_id_or_object ) ) {
$user_id = $user_id_or_object;
} else {
// phpcs:ignore WordPress.PHP.DevelopmentFunctions.error_log_var_export
$this->logging->log( 'The $user_id_or_object value must be int or WP_User: ' . var_export( $user_id_or_object, true ), __METHOD__, 'error' );
return new \WP_Error( 'invalid_type', '$user must be int or WP_User' );
}
return get_user_option( $this->site_hash_meta_key, $user_id );
}
/**
* Returns admin URL to revoke support user
*
* @uses SupportUser::get_user_identifier()
*
* @since 1.1 Removed second parameter $current_url.
*
* @param WP_User|int|string $user User object, user ID, or "all". If "all", will revoke all users.
*
* @return string|false Unsanitized nonce URL to revoke support user. If not able to retrieve user identifier, returns false.
*/
public function get_revoke_url( $user ) {
// If "all", will revoke all support users.
if ( 'all' === $user ) {
$user_identifier = 'all';
} else {
$user_identifier = $this->get_user_identifier( $user );
}
if ( ! $user_identifier || is_wp_error( $user_identifier ) ) {
return false;
}
$revoke_url = add_query_arg(
array(
Endpoint::REVOKE_SUPPORT_QUERY_PARAM => $this->config->ns(),
self::ID_QUERY_PARAM => $user_identifier,
'_wpnonce' => wp_create_nonce( Endpoint::REVOKE_SUPPORT_QUERY_PARAM ),
),
admin_url()
);
$this->logging->log( "revoke_url: $revoke_url", __METHOD__, 'debug' );
return $revoke_url;
}
}
Page not found | Tierhilfe