文件操作 - Ajax.php

文件: /home/www/public/wp-content/plugins/ionos-security/inc/Controllers/WPScan/Ajax.php

编辑文件内容

<?php

namespace Ionos\Security\Controllers\WPScan;

use Ionos\Security\Controllers\WPScan\Services;

/**
 * Ajax class handling theme- and plugin-scan before-install.
 */
class Ajax {

/**
	 * Handles custom ajax actions "scan-theme" and "scan-plugins"
	 */
	public static function ajax_scan() {
		$ionos_plugin_allowlist = [
			'ionos-assistant',
			'ionos-journey',
			'ionos-loop',
			'ionos-marketplace',
			'ionos-navigation',
			'ionos-security',
			'ionos-sso',
			'ionos-performance',
			'ionos-email',
			'ionos-subdomain',
			'woocommerce-german-market-light',
		];

foreach ( [ '_ajax_nonce', 'action', 'slug' ] as $q ) {
			if ( ! isset( $_GET[ $q ] ) ) {
				\wp_send_json_error( new \WP_Error( $q . '_missing', $q . ' parameter missing' ) );
			}
		}
		if ( ! \wp_verify_nonce( $_GET['_ajax_nonce'], 'updates' ) ) {
			\wp_send_json_error( new \WP_Error( 'invalid_nonce', 'Nonce invalid' ) );
		}
		if ( ! in_array( $_GET['action'], [ 'scan-theme', 'scan-plugin' ] ) ) {
			\wp_send_json_error( new \WP_Error( 'invalid_action', 'action parameter should be "scan-theme" or "scan-plugin"' ) );
		}
		$type = preg_replace( '/scan-/', '', $_GET['action'] );
		$slug = $_GET['slug'];
		if ( $type === 'plugin' && in_array( $slug, $ionos_plugin_allowlist ) ) {
			\wp_send_json_success( [ 'severity' => 'none' ] );
		}
		$vulnerabilities = Services::get_vulnerabilities_by_slug( $type, $slug );
		if ( $vulnerabilities === false ) {
			$severity = 'unknown';
		} else {
			$severity = Services::get_max_severity_from_vulnerabilites( $vulnerabilities );
		}
		\wp_send_json_success( [ 'severity' => $severity ] );
	}
}

文件操作 - Ajax.php

文件: /home/www/public/wp-content/plugins/ionos-security/inc/Controllers/WPScan/Ajax.php

编辑文件内容

修改文件时间

删除文件