芝麻web文件管理V1.00

编辑当前文件:/home/freeclou/optimyar/wp-content/plugins/ithemes-security-pro/core/modules/two-factor/setup.php

<?php

use iThemesSecurity\User_Groups\User_Group;
use iThemesSecurity\User_Groups;

class ITSEC_Two_Factor_Setup {

public function __construct() {
		add_action( 'itsec_modules_do_plugin_uninstall', array( $this, 'execute_uninstall' ) );
		add_action( 'itsec_modules_do_plugin_upgrade', array( $this, 'execute_upgrade' ), 0 );
	}

/**
	 * Execute module uninstall
	 *
	 * @return void
	 */
	public function execute_uninstall() {
		delete_site_option( 'itsec_two_factor' );

delete_metadata( 'user', null, 'itsec_two_factor_enabled', null, true );
		delete_metadata( 'user', null, 'itsec_two_factor_description', null, true );
		delete_metadata( 'user', null, 'itsec_two_factor_key', null, true );
		delete_metadata( 'user', null, 'itsec_two_factor_use_app', null, true );
		delete_metadata( 'user', null, 'itsec_two_factor_app_pass', null, true );
		delete_metadata( 'user', null, 'itsec_two_factor_last_login', null, true );
		delete_metadata( 'user', null, 'itsec_two_factor_override', null, true );
		delete_metadata( 'user', null, 'itsec_two_factor_override_expires', null, true );
	}

/**
	 * Execute module upgrade
	 *
	 * @param int $old
	 *
	 * @return void
	 */
	public function execute_upgrade( $old ) {
		// Upgrade to new provider module system
		if ( $old < 4038 ) {

global $wpdb;
			$settings = get_site_option( 'itsec_two_factor' );
			// If two-factor wasn't enabled or already has providers for some reason, don't worry about upgrading it
			if ( ! isset( $settings['enabled'] ) || ! $settings['enabled'] || ! empty( $settings['enabled-providers'] ) ) {
				return;
			}
			$settings = array(
				'enabled'           => true,
				'enabled-providers' => array(
					'Two_Factor_Totp',
					'Two_Factor_Backup_Codes'
				)
			);
			// Instantiate enabled providers so we can handle all the updating
			$helper = ITSEC_Two_Factor_Helper::get_instance();
			$helper->get_enabled_provider_instances();

/**
			 * Migrate all app passes to new system
			 */
			$meta_results = $wpdb->get_results( "SELECT * FROM `{$wpdb->usermeta}` WHERE `meta_key` = 'itsec_two_factor_app_pass'" );

foreach ( $meta_results as $user_meta ) {
				// New Style Passwords, in case any exist from other compatible plugins
				$passwords = WP_Application_Passwords::get_user_application_passwords( $user_meta->user_id );
				if ( ! $passwords ) {
					$passwords = array();
				}

$app_passwords = maybe_unserialize( $user_meta->meta_value );
				if ( is_array( $app_passwords ) ) {
					foreach ( $app_passwords as $name => $app_password ) {
						$passwords[] = array(
							'uuid'      => wp_generate_uuid4(),
							'name'      => $name,
							'password'  => $app_password,
							'created'   => time(),
							'last_used' => null,
							'last_ip'   => null,
						);
					}
				}

// Store them all
				update_user_meta( $user_meta->user_id, WP_Application_Passwords::USERMETA_KEY_APPLICATION_PASSWORDS, $passwords );
				delete_user_meta( $user_meta->user_id, 'itsec_two_factor_app_pass' );
			}

/**
			 * Enable the TOTP provider for any user that is already using two-factor
			 */
			$meta_results = $wpdb->get_results( "SELECT * FROM `{$wpdb->usermeta}` WHERE `meta_key` = 'itsec_two_factor_enabled'" );
			foreach ( $meta_results as $user_meta ) {
				// Out with the old
				delete_user_meta( $user_meta->user_id, 'itsec_two_factor_enabled' );
				// Enable TOTP
				update_user_meta( $user_meta->user_id, '_two_factor_enabled_providers', array( 'Two_Factor_Totp' ) );
				// Make TOTP default
				update_user_meta( $user_meta->user_id, '_two_factor_provider', 'Two_Factor_Totp' );
			}

// Change meta key from old 'itsec_two_factor_key' to new '_two_factor_totp_key'
			$wpdb->update( $wpdb->usermeta, array( 'meta_key' => '_two_factor_totp_key' ), array( 'meta_key' => 'itsec_two_factor_key' ) );
		}

if ( $old < 4041 ) {
			if ( ! isset( $settings ) ) {
				$settings = get_site_option( 'itsec_two_factor' );
			}

// If there are no current options, go with the new defaults by not saving anything
			if ( is_array( $settings ) ) {
				// Make sure the new module is properly activated or deactivated
				if ( empty( $settings['enabled-providers'] ) ) {
					ITSEC_Modules::deactivate( 'two-factor' );
				} else {
					ITSEC_Modules::activate( 'two-factor' );
				}

$defaults            = ITSEC_Modules::get_defaults( 'two-factor' );
				$normalized_settings = $defaults;

foreach ( $defaults as $name => $value ) {
					if ( isset( $settings[ $name ] ) ) {
						$normalized_settings[ $name ] = $settings[ $name ];
					}
				}

$settings = $normalized_settings;
			}
		}

if ( $old < 4056 ) {
			delete_site_option( 'itsec_two_factor' );

if ( ! isset( $settings ) ) {
				$settings = ITSEC_Modules::get_settings( 'two-factor' );
			}

$defaults = ITSEC_Modules::get_defaults( 'two-factor' );

if ( isset( $settings['enabled-providers'] ) && $settings['enabled-providers'] !== $defaults['custom_available_methods'] ) {
				$settings['available_methods']        = 'custom';
				$settings['custom_available_methods'] = $settings['enabled-providers'];
			} else {
				$settings['available_methods']        = $defaults['available_methods'];
				$settings['custom_available_methods'] = $defaults['custom_available_methods'];
			}

unset( $settings['enabled-providers'] );
		}

if ( isset( $settings ) ) {
			ITSEC_Modules::set_settings( 'two-factor', $settings );
		}

if ( $old < 4117 ) {
			$settings = $settings ?? ITSEC_Modules::get_settings( 'two-factor' );
			$upgrader = ITSEC_Modules::get_container()->get( User_Groups\Upgrader::class );

switch ( $settings['protect_user_type'] ?? null ) {
				case 'all_users':
					$protect_user_group = $upgrader->get_groups_for_all_users();
					break;
				case 'privileged_users':
					$protect_user_group = [
						$upgrader->get_default_group_id( 'administrator' ),
						$upgrader->get_default_group_id( 'editor' ),
						$upgrader->get_default_group_id( 'author' ),
						$upgrader->get_default_group_id( 'contributor' ),
					];
					break;
				case 'custom':
					if ( ! ( $settings['protect_user_type_roles'] ?? null ) ) {
						$protect_user_group = [];
						break;
					}

$protect_user_group = [
						$upgrader->find_or_create( __( 'Two-Factor Enforced', 'it-l10n-ithemes-security-pro' ), static function ( User_Group $user_group ) use ( $settings ) {
							$user_group->set_roles( ITSEC_Lib::sanitize_roles( $settings['protect_user_type_roles'] ) );
						} )->get_id()
					];
					break;
				case 'disabled':
				default:
					$protect_user_group = [];
					break;
			}

ITSEC_Modules::set_setting( 'two-factor', 'protect_user_group', $protect_user_group );

switch ( $settings['application_passwords_type'] ?? null ) {
				case 'enabled':
					$application_passwords_type = $upgrader->get_groups_for_all_users();
					break;
				case 'custom':
					$application_passwords_type = array_map( static function ( $canonical ) use ( $upgrader ) {
						return $upgrader->get_default_group_id( $canonical, true );
					}, $settings['application_passwords_roles'] ?? [] );
					break;
				case 'disabled':
				default:
					$application_passwords_type = [];
					break;
			}

ITSEC_Modules::set_setting( 'two-factor', 'application_passwords_group', $application_passwords_type );

switch ( $settings['exclude_type'] ?? null ) {
				case 'custom':
					if ( ! ( $settings['exclude_roles'] ?? null ) ) {
						$exclude_group = [];
						break;
					}

$exclude_group = [
						$upgrader->find_or_create( __( 'Disable Forced Two-Factor Authentication', 'it-l10n-ithemes-security-pro' ), static function ( User_Group $user_group ) use ( $settings ) {
							$user_group->set_roles( ITSEC_Lib::sanitize_roles( $settings['exclude_roles'] ) );
						} )->get_id()
					];
					break;
				case 'disabled':
				default:
					$exclude_group = [];
					break;
			}

ITSEC_Modules::set_setting( 'two-factor', 'exclude_group', $exclude_group );

switch ( $settings['allow_remember'] ?? null ) {
				case 'all':
					$remember_group = $upgrader->get_groups_for_all_users();
					break;
				case 'custom':
					if ( ! ( $settings['allow_remember_roles'] ?? null ) ) {
						$remember_group = [];
						break;
					}

$remember_group = [
						$upgrader->find_or_create( __( 'Allow Remembering Two-Factor', 'it-l10n-ithemes-security-pro' ), static function ( User_Group $user_group ) use ( $settings ) {
							$user_group->set_roles( ITSEC_Lib::sanitize_roles( $settings['allow_remember_roles'] ) );
						} )->get_id()
					];
					break;
				case 'non-privileged':
					$remember_group = [
						$upgrader->get_default_group_id( 'subscriber' ),
					];
					break;
				case 'none':
				default:
					$remember_group = [];
					break;
			}

ITSEC_Modules::set_setting( 'two-factor', 'remember_group', $remember_group );
		}
	}
}

new ITSEC_Two_Factor_Setup();