Na}{

File Content: class-wp-files-sensor.php

<?php
/**
 * Sensor: Files
 *
 * Files sensor class file.
 *
 * @since     4.6.0
 * @package   wsal
 * @subpackage sensors
 */

declare(strict_types=1);

namespace WSAL\WP_Sensors;

use WSAL\Controllers\Alert_Manager;

// Exit if accessed directly.
if ( ! defined( 'ABSPATH' ) ) {
	exit;
}

if ( ! class_exists( '\WSAL\WP_Sensors\WP_Files_Sensor' ) ) {
	/**
	 * Files sensor.
	 *
	 * 2010 User uploaded file in Uploads directory
	 * 2011 User deleted file from Uploads directory
	 * 2046 User changed a file using the theme editor
	 * 2051 User changed a file using the plugin editor
	 *
	 * @package    wsal
	 * @subpackage sensors
	 *
	 * @since 4.6.0
	 */
	class WP_Files_Sensor {

/**
		 * File uploaded.
		 *
		 * @var boolean
		 *
		 * @since 4.5.0
		 */
		protected static $is_file_uploaded = false;

/**
		 * Inits the main hooks
		 *
		 * @return void
		 *
		 * @since 4.5.0
		 */
		public static function init() {
			add_action( 'add_attachment', array( __CLASS__, 'event_file_uploaded' ) );
			add_action( 'delete_attachment', array( __CLASS__, 'event_file_uploaded_deleted' ) );
			add_action( 'admin_init', array( __CLASS__, 'event_admin_init' ) );
		}

/**
		 * File uploaded.
		 *
		 * @param integer $attachment_id - Attachment ID.
		 *
		 * @since 4.5.0
		 */
		public static function event_file_uploaded( $attachment_id ) {
			// Filter $_POST array for security.
			$post_array = filter_input_array( INPUT_POST );

$action = isset( $post_array['action'] ) ? \sanitize_text_field( \wp_unslash( $post_array['action'] ) ) : '';
			if ( 'upload-theme' !== $action && 'upload-plugin' !== $action ) {
				$file = get_attached_file( $attachment_id );
				Alert_Manager::trigger_event(
					2010,
					array(
						'AttachmentID'  => $attachment_id,
						'FileName'      => basename( $file ),
						'FilePath'      => dirname( $file ),
						'AttachmentUrl' => wp_get_attachment_url( $attachment_id ),
					)
				);
			}

self::$is_file_uploaded = true;
		}

/**
		 * Deleted file from uploads directory.
		 *
		 * @param integer $attachment_id - Attachment ID.
		 *
		 * @since 4.5.0
		 */
		public static function event_file_uploaded_deleted( $attachment_id ) {
			if ( self::$is_file_uploaded ) {
				return;
			}
			$file = get_attached_file( $attachment_id );

if ( false !== strpos( $file, 'wp-security-audit-log' ) ) {
				/**
				 * This fires when our plugin is get updated - unfortunately that most probably makes calls to the old version of the plugin and that new plugin we have no idea what changes it could have, on the other hand that call is made from the old version / memory, so most probably there are code changes which could lead to PHP errors. Lets silence this if it comes to our plugin
				 */
				return;
			}

Alert_Manager::trigger_event(
				2011,
				array(
					'AttachmentID' => $attachment_id,
					'FileName'     => basename( $file ),
					'FilePath'     => dirname( $file ),
				)
			);
		}

/**
		 * File Changes Event.
		 *
		 * Detect file changes in plugins/themes using plugin/theme editor.
		 *
		 * @since 4.5.0
		 */
		public static function event_admin_init() {
			$nonce   = isset( $_POST['nonce'] ) ? sanitize_text_field( wp_unslash( $_POST['nonce'] ) ) : false;
			$file    = isset( $_POST['file'] ) ? sanitize_text_field( wp_unslash( $_POST['file'] ) ) : false;
			$action  = isset( $_POST['action'] ) ? sanitize_text_field( wp_unslash( $_POST['action'] ) ) : false;
			$referer = isset( $_POST['_wp_http_referer'] ) ? sanitize_text_field( wp_unslash( $_POST['_wp_http_referer'] ) ) : false;
			$referer = remove_query_arg( array( 'file', 'theme', 'plugin' ), $referer );
			$referer = basename( $referer, '.php' );

if ( 'edit-theme-plugin-file' === $action ) {
				if ( 'plugin-editor' === $referer && wp_verify_nonce( $nonce, 'edit-plugin_' . $file ) ) {
					$plugin = isset( $_POST['plugin'] ) ? sanitize_text_field( wp_unslash( $_POST['plugin'] ) ) : false;
					Alert_Manager::trigger_event(
						2051,
						array(
							'File'   => $file,
							'Plugin' => $plugin,
						)
					);
				} elseif ( 'theme-editor' === $referer ) {
					$stylesheet = isset( $_POST['theme'] ) ? sanitize_text_field( wp_unslash( $_POST['theme'] ) ) : false;

if ( ! wp_verify_nonce( $nonce, 'edit-theme_' . $stylesheet . '_' . $file ) ) {
						return;
					}

Alert_Manager::trigger_event(
						2046,
						array(
							'File'  => $file,
							'Theme' => trailingslashit( get_theme_root() ) . $stylesheet,
						)
					);
				}
			}
		}
	}
}

Name	Size	Permission
Alerts	---	0755
Helpers	---	0755
.DS_Store	6148 bytes	0644
class-acf-meta-sensor.php	5398 bytes	0644
class-acf-sensor.php	18555 bytes	0644
class-bbpress-sensor.php	27193 bytes	0644
class-bbpress-system-sensor.php	3777 bytes	0644
class-bbpress-user-sensor.php	11135 bytes	0644
class-gravity-forms-sensor.php	49475 bytes	0644
class-main-wp-sensor.php	14131 bytes	0644
class-mainwp-server-sensor.php	26058 bytes	0644
class-memberpress-sensor.php	52670 bytes	0644
class-multisite-sign-up-sensor.php	3722 bytes	0644
class-rank-math-sensor.php	11911 bytes	0644
class-redirection-sensor.php	14254 bytes	0644
class-tablepress-sensor.php	17655 bytes	0644
class-termly-sensor.php	9341 bytes	0644
class-woocommerce-public-sensor.php	24098 bytes	0644
class-woocommerce-sensor-helper-second.php	103733 bytes	0644
class-woocommerce-sensor-helper-third.php	4406 bytes	0644
class-woocommerce-sensor-helper.php	98594 bytes	0644
class-woocommerce-sensor.php	48936 bytes	0644
class-wp-2fa-sensor.php	11628 bytes	0644
class-wp-comments-sensor.php	7104 bytes	0644
class-wp-content-sensor.php	58785 bytes	0644
class-wp-database-sensor.php	17912 bytes	0644
class-wp-files-sensor.php	4531 bytes	0644
class-wp-log-in-out-sensor.php	20101 bytes	0644
class-wp-menus-sensor.php	24986 bytes	0644
class-wp-metadata-sensor.php	23063 bytes	0644
class-wp-multisite-sensor.php	13562 bytes	0644
class-wp-plugins-themes-sensor.php	37203 bytes	0644
class-wp-register-sensor.php	3808 bytes	0644
class-wp-request-sensor.php	3390 bytes	0644
class-wp-system-sensor.php	45784 bytes	0644
class-wp-user-profile-sensor.php	21796 bytes	0644
class-wp-widgets-sensor.php	10878 bytes	0644
class-wpforms-sensor.php	52009 bytes	0644
class-yoast-seo-sensor.php	71603 bytes	0644
index.php	58 bytes	0644