WordPress.org
Get WordPress

Plugin Directory

Changeset 1455997


Ignore:
Timestamp:
07/17/2016 04:07:22 PM (10 years ago)
Author:
fdoromo
Message:

tags/3.3.8

Location:
total-security
Files:
74 added
5 edited

Legend:

Unmodified
Added
Removed

  • total-security/trunk/modules/class-p2.php

    r1413172 r1455997  
    1717'user_exists'              => array(),
    1818'id1_user_check'           => array(),
    19 'force_ssl_admin'          => array(),
     19'bruteforce_login'         => array(),
    2020'secure_hidden_login'      => array() ); //end
    2121
    2222function __construct() {
    2323add_action('wp_ajax_sn_run_tests', array($this, 'run_tests'));
     24
     25$fail2 = get_site_option( 'fdx_p2_red2' );// p2
     26$fail3 = get_site_option( 'fdx_p2_red3' );// p2
    2427
    2528$fail4 = get_site_option( 'fdx_p2_red4' );
    … …  
    3336$fail12 = get_site_option( 'fdx_p2_red12' );
    3437$fail13 = get_site_option( 'fdx_p2_red13' );
    35 $fail14 = get_site_option( 'fdx_p2_red14' );
    36 $fail_p2_t = $fail2+$fail3+$fail4+$fail5+$fail6+$fail7+$fail8+$fail9+$fail10+$fail11+$fail12+$fail13+$fail14;
     38$fail_p2_t = $fail2+$fail3+$fail4+$fail5+$fail6+$fail7+$fail8+$fail9+$fail10+$fail11+$fail12+$fail13;  //12
    3739update_option('fdx_p2_red_total', $fail_p2_t );
    3840
    … …  
    413415
    414416
     417
    415418/* -------16
    416  *
    417  */
    418    function force_ssl_admin() {
    419    $url = add_query_arg( array( 'popup' => 'pp_page', 'target' => 'force_ssl_admin' ), menu_page_url( $this->hook . '-'.$this->_p2, false ) );
    420    $msgTIT = __('Check if SSL Logins and SSL Admin Access is enabled.', $this->hook);
    421     if (defined('FORCE_SSL_ADMIN') && FORCE_SSL_ADMIN) {
    422       $return['status'] = '<span class="pb_label pb_label-success">&#10003;</span>';
    423       $return['msg'] = '<tr><td><span class="fdx-actions">'.$msgTIT .'</span></td><td>&nbsp;</td>';
    424       update_option('fdx_p2_red14', '0' );
    425     } else {
    426       $return['status'] = '<span class="pb_label pb_label-important">X</span>';
    427       $return['msg'] = '<tr class="alternate"><td><span class="fdx-actions">'.$msgTIT .'</span></td><td><a href="'.$url.'" class="fdx-dialog" title="'.__('Fix', $this->hook ).'"><strong>'.__('Disabled', $this->hook).'</strong></a></td>';
    428       update_option('fdx_p2_red14', '1' );
    429     }
    430     return $return;
    431    }
    432 
    433 
    434 
     419 * bruteforce user login
     420 */
     421//-1
     422 Public static function try_login($username, $password) {
     423    $user = apply_filters('authenticate', null, $username, $password);
     424    if (isset($user->ID) && !empty($user->ID)) {
     425      return true;
     426    } else {
     427      return false;
     428    }
     429  }
     430//-2
     431function bruteforce_login() {
     432   $msgTIT = sprintf( __('Check admin password strength with a <em>%s</em> most commonly used' , $this->hook) , '1050' );
     433   $passwords = file(plugins_url( 'libs/brute-force-dictionary.txt', dirname(__FILE__)), FILE_IGNORE_NEW_LINES);
     434   $bad_usernames = array();
     435    $users = get_users(array('role' => 'administrator'));
     436    foreach ($users as $user) {
     437      foreach ($passwords as $password) {
     438        if (self::try_login($user->user_login, $password)) {
     439          $bad_usernames[] = $user->user_login;
     440          break;
     441        }
     442      }
     443    }
     444    if (empty($bad_usernames)){
     445      $return['status'] = '<span class="pb_label pb_label-success">&#10003;</span>';
     446      $return['msg'] = '<tr><td><span class="fdx-actions">'.$msgTIT .'</span></td><td>&nbsp;</td>';
     447      update_option('fdx_p2_red13', '0' );
     448    } else {
     449      $return['status'] = '<span class="pb_label pb_label-important">X</span>';
     450      $return['msg'] = '<tr class="alternate"><td><span class="fdx-actions">'.$msgTIT . '</span></td><td><a href="'. admin_url('profile.php'). '" title="'.__('Fix', $this->hook ).'"><strong>'.__('Weak Password', $this->hook).'</strong></a>&nbsp; <span class="fdx-info"><a class="pluginbuddy_tip" href="javascript:void(0)" title="'.__('Following users have extremely weak passwords: ', $this->hook).implode(' ,', $bad_usernames).'"></a></span></td>';
     451      update_option('fdx_p2_red13', '1' );
     452    }
     453    return $return;
     454  }
     455//------------------------------------------------------------------------
    435456
    436457/* -------17

  • total-security/trunk/modules/inc-p2.php

    r1413172 r1455997  
    22$tests = get_option($this->p2_options_key);
    33$tests2 = array();
     4
     5$p2_url1 = add_query_arg( array( 'popup' => 'pp_page', 'target' => 'php' ), menu_page_url( $this->hook . '-'.$this->_p2 , false ) );
     6$p2_url2 = add_query_arg( array( 'popup' => 'pp_page', 'target' => 'php2' ), menu_page_url( $this->hook . '-'.$this->_p2 , false ) );
     7$p2_url3 = add_query_arg( array( 'popup' => 'pp_page', 'target' => 'chmod' ), menu_page_url( $this->hook . '-'.$this->_p2 , false ) );
     8/* ----------------------------------
     9 * MYSQL VERSION
     10 */
     11global $wpdb;
     12        $parent_class_test = array(
     13                        'title'         =>      'MySQL Version',
     14                        'suggestion'    =>      $this->mySQL_lastver,
     15                        'value'         =>      $wpdb->db_version(),
     16                        'tip'           =>      '<span class="fdx-info"><a class="pluginbuddy_tip" href="javascript:void(0)" title="'.__('Version of your database server (mysql) as reported to this script by WordPress.', $this->hook ).'"></a></span>',
     17                    );
     18        if ( version_compare( $wpdb->db_version(), $this->mySQL_lastver, '<' ) ) {
     19            $parent_class_test['status'] = 'INFO';
     20        } else {
     21            $parent_class_test['status'] = 'OK';
     22        }
     23        array_push( $tests2, $parent_class_test );
     24
     25/* ----------------------------------
     26 * PHP VERSION
     27 */
     28    $parent_class_test = array(
     29                    'title'         =>      'PHP Version',
     30                    'suggestion'    =>      $this->php_lastver,
     31                    'value'         =>      phpversion(),
     32                    'tip'           =>      '<span class="fdx-info"><a class="pluginbuddy_tip" href="javascript:void(0)" title="'.__('Version of PHP currently running on this site.', $this->hook ).'"></a></span>',
     33                );
     34    if ( version_compare( PHP_VERSION, $this->php_lastver, '<' ) ) {
     35        $parent_class_test['status'] = 'INFO';
     36    } else {
     37        $parent_class_test['status'] = 'OK';
     38    }
     39    array_push( $tests2, $parent_class_test );
     40
     41/* ----------------------------------
     42 * PHP max_execution_tim
     43 */
     44$parent_class_test = array(
     45                    'title'         =>      'PHP <em>max_execution_time</em>',
     46                    'suggestion'    =>      '60s',
     47                    'value'         =>      ini_get( 'max_execution_time' ).'s',
     48                    'tip'           =>      '<span class="fdx-info"><a class="pluginbuddy_tip" href="javascript:void(0)" title="'.__('Maximum amount of time that PHP allows scripts to run. After this limit is reached the script is killed. The more time available the better. 30 seconds is most common though 60 seconds is ideal.', $this->hook ).'"></a></span>',
     49                );
     50    if ( ini_get( 'max_execution_time' )  < 60 ) {
     51        $parent_class_test['status'] = 'INFO';
     52    } else {
     53        $parent_class_test['status'] = 'OK';
     54    }
     55    array_push( $tests2, $parent_class_test );
     56
     57/* ----------------------------------
     58 * MEMORY LIMIT
     59 */
     60    if ( !ini_get( 'memory_limit' ) ) {
     61        $parent_class_val = 'unknown';
     62    } else {
     63        $parent_class_val = ini_get( 'memory_limit' );
     64    }
     65    $parent_class_test = array(
     66                    'title'         =>      'PHP Memory Limit',
     67                    'suggestion'    =>      '256M',
     68                    'value'         =>      $parent_class_val,
     69                    'tip'           =>      '<span class="fdx-info"><a class="pluginbuddy_tip" href="javascript:void(0)" title="'.__('The amount of memory this site is allowed to consume. (256M+ best)', $this->hook ).'"></a></span>',
     70                );
     71    if ( preg_match( '/(\d+)(\w*)/', $parent_class_val, $matches ) ) {
     72        $parent_class_val = $matches[1];
     73        $unit = $matches[2];
     74        // Up memory limit if currently lower than 256M.
     75        if ( 'g' !== strtolower( $unit ) ) {
     76            if ( ( $parent_class_val < 256 ) || ( 'm' !== strtolower( $unit ) ) ) {
     77                $parent_class_test['status'] = 'INFO';
     78            } else {
     79                $parent_class_test['status'] = 'OK';
     80            }
     81        }
     82    } else {
     83        $parent_class_test['status'] = 'ERROR';
     84    }
     85    array_push( $tests2, $parent_class_test );
     86
     87if ($tests['last_run']) {
     88/* ----------------------------------
     89 * php allow_url_include
     90 */
     91    $parent_class_test = array(
     92                        'title'         =>      'PHP <em>allow_url_include</em>',
     93                        'suggestion'    =>      __('Turned Off', $this->hook),
     94                        'tip'           =>      '',
     95                    );
     96        if ( ini_get('allow_url_include') == 1) {
     97            $parent_class_test['status'] = 'WARNING';
     98            $parent_class_test['value'] = '<a href="'.$p2_url2.'" class="fdx-dialog" title="'.__('Fix', $this->hook ).'"><strong>'.__('Turned On', $this->hook).'</strong></a>';
     99            update_option('fdx_p2_yel5', '1' );
     100        } else {
     101            $parent_class_test['status'] = 'OK';
     102            $parent_class_test['value'] = __('Turned Off', $this->hook);
     103             update_option('fdx_p2_yel5', '0' );
     104        }
     105        array_push( $tests2, $parent_class_test );
     106
     107/* ----------------------------------
     108 * php allow_url_fopen
     109 */
     110    $parent_class_test = array(
     111                        'title'         =>      'PHP <em>allow_url_fopen</em>',
     112                        'suggestion'    =>      __('Turned Off', $this->hook),
     113                        'tip'           =>      '',
     114                    );
     115        if ( ini_get('allow_url_fopen') == 1) {
     116            $parent_class_test['status'] = 'WARNING';
     117            $parent_class_test['value'] = '<a href="'.$p2_url2.'" class="fdx-dialog" title="'.__('Fix', $this->hook ).'"><strong>'.__('Turned On', $this->hook).'</strong></a>';
     118            update_option('fdx_p2_yel4', '1' );
     119        } else {
     120            $parent_class_test['status'] = 'OK';
     121            $parent_class_test['value'] = __('Turned Off', $this->hook);
     122            update_option('fdx_p2_yel4', '0' );
     123        }
     124        array_push( $tests2, $parent_class_test );
     125
     126/* Dangerous PHP Functions
     127 * exec,passthru,shell_exec,proc_open,system
     128 */
     129    $disabled_functions = ini_get( 'disable_functions' );
     130    if ( $disabled_functions == '' ) {
     131        $disabled_functions = __('none', $this->hook );
     132    }
     133    $parent_class_test = array(
     134                    'title'         =>      __('Dangerous PHP Functions', $this->hook ),
     135                    'suggestion'    =>      __('Disable All', $this->hook ),
     136                    'tip'           =>      '',
     137                );
     138  //   $disabled_functions_array = explode( ',', $disabled_functions );
     139       $disabled_functions_array = array_map('trim', explode(',', $disabled_functions)); //ignore space
     140       $parent_class_test['status'] = 'WARNING';
     141       $parent_class_test['value'] = '<a href="'.$p2_url1.'" class="fdx-dialog" title="'.__('Fix', $this->hook ).'"><strong>'.__('Disabled', $this->hook ).'</strong></a>:&nbsp; <span class="fdx-info"><a class="pluginbuddy_tip" href="javascript:void(0)" title="'.$disabled_functions.'"></a></span>';
     142       update_option('fdx_p2_yel7', '1' );
     143        if (
     144        ( true === in_array( 'exec', $disabled_functions_array ) )
     145        &&
     146        ( true === in_array( 'system', $disabled_functions_array ) )
     147        &&
     148        ( true === in_array( 'passthru', $disabled_functions_array ) )
     149        &&
     150        ( true === in_array( 'shell_exec', $disabled_functions_array ) )
     151        &&
     152        ( true === in_array( 'proc_open', $disabled_functions_array ) )
     153        ) {
     154        $parent_class_test['status'] = 'OK';
     155        $parent_class_test['value'] = __('Disabled', $this->hook ).':&nbsp; <span class="fdx-info"><a class="pluginbuddy_tip" title="'.$disabled_functions.'"></a></span>';
     156
     157        update_option('fdx_p2_yel7', '0' );
     158    }
     159    array_push( $tests2, $parent_class_test );
     160
     161} //if no run
     162
     163/* -------3
     164 * File Permissions - chmod
     165 */
     166define( 'FDX_P1_URL1', $p2_url3 );
     167define( 'FDX_P1_TIT1', __('Fix', $this->hook ) );
     168function fdx_check_perms($name,$path,$perm, $class) {
     169   clearstatcache();
     170   $current_perms = @substr(sprintf("%o", fileperms($path)), -3);
     171   if ( $perm == $current_perms ) {
     172            echo '<tr>';
     173            echo '<td>' . $name .'</td>';
     174            echo '<td>'.$perm.'</td>';
     175            echo '<td><code>'. $current_perms .'</code></td>';
     176            echo '<td><span class="pb_label pb_label-success">&#10003;</span></td>';
     177            update_option('fdx_p2_red2', '0' ); //2
     178            update_option('fdx_p2_red3', '0' );
     179    } elseif ($current_perms == '0') {
     180            echo '<tr class="alternate">';
     181            echo '<td>' . $name .'</td>';
     182            echo '<td>'.$perm.'</td>';
     183            echo '<td><code>---</code></td>';
     184            echo '<td><span class="pb_label pb_label-desat">&Oslash;</span></td>';
     185            echo '</tr>';
     186    } else {
     187           echo '<tr class="alternate">';
     188           echo '<td>' . $name .'</td>';
     189           echo '<td>'.$perm.'</td>';
     190           echo '<td><a href="'.FDX_P1_URL1.'" class="fdx-dialog" title="'.FDX_P1_TIT1.'"><strong><code>'. $current_perms.'</a></code></strong></td>';
     191
     192         if ($name == "<span id='mime2'>.htaccess</span>") {
     193           echo '<td><span class="pb_label pb_label-'.$class.'">X</span></td>';
     194           update_option('fdx_p2_red2', '1' );
     195
     196         } elseif ($name == "<span id='mime3'>wp-config.php</span>") {
     197              echo '<td><span class="pb_label pb_label-'.$class.'">X</span></td>';
     198           update_option('fdx_p2_red3', '1' );
     199
     200         } else {
     201             echo '<td><span class="pb_label pb_label-'.$class.'">&#10003;</span></td>';
     202
     203         }
     204           echo '</tr>';
     205    }
     206}
    4207
    5208/* wrap
    … …  
    59262
    60263//--------------------
     264             echo '<table class="widefat"><thead><tr class="thead">';
     265             echo '<th>', __('Server Configuration', $this->hook ), '</th>',
     266                     '<th style="width: 120px;"><small>', __('Recommendation', $this->hook ), '</small></th>',
     267                     '<th style="width: 120px;"><small>', __('Result', $this->hook), '</small></th>',
     268                     '<th style="width: 30px;"></th>';
     269
     270            echo '</tr></thead><tbody>';
     271            foreach( $tests2 as $parent_class_test ) {
     272            echo '<tr>';
     273            echo '  <td>' . $parent_class_test['title'] . '</td>';
     274            echo '  <td>' . $parent_class_test['tip'] . $parent_class_test['suggestion'] . '</td>';
     275            echo '  <td>' . $parent_class_test['value'] . '</td>';
     276            //echo '    <td>' . $parent_class_test['status'] . '</td>';
     277            echo '  <td>';
     278            if ( $parent_class_test['status'] == 'OK' ) {
     279                echo '<span class="pb_label pb_label-success">&#10003;</span>';
     280            } elseif ( $parent_class_test['status'] == 'FAIL' ) {
     281            echo '<span class="pb_label pb_label-important">X</span>';
     282            } elseif ( $parent_class_test['status'] == 'WARNING') {
     283                echo '<span class="pb_label pb_label-warning">!</span>';
     284            } elseif ( $parent_class_test['status'] == 'INFO') {
     285                echo '<span class="pb_label pb_label-info">&#10003;</span>';
     286            } elseif ( $parent_class_test['status'] == 'ERROR') {
     287                echo '<span class="pb_label pb_label-desat">&Oslash;</span>';
     288            }
     289            echo '</td></tr>';
     290            }
     291           echo '</tbody></table>';
     292    echo '<table class="widefat">';
     293    echo '<thead><tr>';
     294    echo '<th>'.__('File Permissions - ', $this->hook).'chmod </th>';
     295    echo '<th style="width: 120px;"><small>'.__('Recommendation', $this->hook ).'</small></th>';
     296    echo '<th style="width: 120px;"><small>'.__('Result', $this->hook).'</small></th>';
     297    echo '<th  style="width: 30px;"></th>';
     298    echo '</tr></thead><tbody>';
     299    $siteurl = get_bloginfo('url');
     300    $wpurl = get_bloginfo('wpurl');
     301    fdx_check_perms("<span id='mime0'>/</span>","../","755", "info");
     302    fdx_check_perms("<span id='mime1'>wp-admin</span>","../wp-admin","755", "info");
     303    fdx_check_perms("<span id='mime1'>wp-content</span>","../wp-content","755", "info");
     304    fdx_check_perms("<span id='mime1'>wp-includes</span>","../wp-includes","755", "info");
     305    if ($siteurl == $wpurl) {
     306    fdx_check_perms("<span id='mime2'>.htaccess</span>",ABSPATH."/.htaccess","444", "important");
     307    fdx_check_perms("<span id='mime3'>index.php</span>",ABSPATH."/index.php","640", "info");
     308    } else {
     309     fdx_check_perms("<span id='mime2'>.htaccess</span>",dirname(ABSPATH)."/.htaccess","444", "important");
     310     fdx_check_perms("<span id='mime3'>index.php</span>",dirname(ABSPATH)."/index.php","640", "info");
     311    }
     312    fdx_check_perms("<span id='mime3'>wp-config.php</span>","../wp-config.php","400", "important");
     313    fdx_check_perms("<span id='mime3'>wp-blog-header.php</span>","../wp-blog-header.php","640", "info");
     314    echo '</tbody></table>';
     315
    61316
    62317

  • total-security/trunk/modules/inc-popup.php

    r1413172 r1455997  
    108108echo '<p>' .__('Fixing is easy; create a new user with the same privileges. Then delete the old one with <em> "ID=1" </em> and tell WP to transfer all of his content to the new user.', $this->hook) . '</p>';
    109109
    110 // force_ssl_admin
    111 } elseif ($target == 'force_ssl_admin'){
    112 echo __('Check if SSL Logins and SSL Admin Access is enabled.', $this->hook);
    113 echo '</strong></th></tr></thead><tbody><tr><td>';
    114 echo '<p>' .__('To easily enable (and enforce) WordPress administration over SSL, there are two constants that you can define in your site\'s <code>wp-config.php</code> file. <strong>You must also already have SSL configured on the server and a (virtual) host configured for the secure server before your site will work properly with these constants set to true.</strong>', $this->hook) . '</p>';
    115 echo '</strong></th></tr></thead><tbody><tr class="alternate"><td>';
    116 echo '<p>' .sprintf(__('Please read: <a href="%s"><strong>Administration Over SSL</strong></a>', $this->hook), 'http://codex.wordpress.org/Administration_Over_SSL' ) . '</p>';
     110//php info
     111} elseif ($target == 'php'){
     112echo __('Dangerous PHP Functions', $this->hook);
     113echo '</strong></th></tr></thead><tbody><tr><td>';
     114echo '<p>' .__('When the PHP code is used in an improper way or any insecure php code, potentially it can messed up with a web hosting server and can simply be hacked by hackers. Insecure PHP code can literally harm your server data at the level you cannot even imagine it.', $this->hook) . '</p>';
     115echo '<p>' .__('Using the insecure PHP code, as a security hole hackers could enable some very dangerous and powerful PHP functions and can take control over your web hosting server. There are many such php function which should be disabled in the PHP configuration file. Let\'s check out the functions that should be disabled in the php configuration file right away on your web server.', $this->hook) . '</p>';
     116
     117echo '</tr><tr class="alternate"><td>' .__('<em>disable_functions</em> is a directive used to disable the insecure php functions. Once you find the <em>disable_functions</em> directive in the configuration file <code>php.ini</code> and add the following string to the line starting with:', $this->hook) .'</p>';
     118echo '<pre class="fdx_snippet">
     119disable_functions = system,exec,passthru,shell_exec,proc_open
     120</pre>';
     121echo '<br/><p><strong>'.__('A more paranoid list of dangerous functions', $this->hook) . ':</strong></p>';
     122echo '<p><em><strong>disable_functions</strong></em> <code>=</code> apache_child_terminate, apache_setenv, define_syslog_variables, escapeshellarg, escapeshellcmd, eval, exec, fp, fput, ftp_connect, ftp_exec, ftp_get, ftp_login, ftp_nb_fput, ftp_put, ftp_raw, ftp_rawlist, highlight_file, ini_alter, ini_get_all, ini_restore, inject_code, mysql_pconnect, openlog, passthru, php_uname, phpAds_remoteInfo, phpAds_XmlRpc, phpAds_xmlrpcDecode, phpAds_xmlrpcEncode, popen, posix_getpwuid, posix_kill, posix_mkfifo, posix_setpgid, posix_setsid, posix_setuid, posix_setuid, posix_uname, proc_close, proc_get_status, proc_nice, proc_open, proc_terminate, shell_exec, syslog, system, xmlrpc_entity_decode</p>';
     123
     124} elseif ($target == 'php2'){
     125echo 'PHP: <em>"allow_url_fopen"</em> - <em>"allow_url_include"</em>';
     126echo '</strong></th></tr></thead><tbody><tr><td>';
     127echo '<p>' .__('The PHP settings <em>allow_url_fopen</em> and <em>allow_url_include</em> allow the abuse of insecurely coded code within your WordPress setup and have been the cause for many hacked websites in the past.', $this->hook) . '</p>';
     128echo '<p>' .__('Having this PHP directive will leave your site exposed to cross-site attacks (XSS). There\'s absolutely no valid reason to enable this directive and using any PHP code that requires it is very risky.', $this->hook) . '</p>';
     129
     130echo '</tr><tr class="alternate"><td>' .__('Once you find the directive in the configuration file <code>php.ini</code>, disable both settings.', $this->hook) .'</p>';
     131echo '<pre class="fdx_snippet">
     132allow_url_include = off
     133allow_url_fopen = off
     134</pre>';
     135
     136} elseif ($target == 'chmod'){
     137echo __('File Permissions - chmod', $this->hook);
     138echo '</strong></th></tr></thead><tbody><tr><td>';
     139echo '<p>' .__('Some neat features of WordPress come from allowing various files to be writable by the web server. However, allowing write access to your files is potentially dangerous, particularly in a shared hosting environment.', $this->hook) . '</p>';
     140echo '<p>' .__('It is best to lock down your file permissions as much as possible and to loosen those restrictions on the occasions that you need to allow write access, or to create specific folders with less restrictions for the purpose of doing things like uploading files.', $this->hook) . '</p>';
     141echo '</tr><tr class="alternate"><td>';
     142echo '<p>' .sprintf(__('Information on file permissions in WordPress and different ways of how to change permissions can be found <a href="%s"><strong>here!</strong></a>', $this->hook), 'http://codex.wordpress.org/Changing_File_Permissions' ) . '</p>';
     143
    117144
    118145//table-info

  • total-security/trunk/readme.txt

    r1413256 r1455997  
    44Donate link: https://www.paypal.com/cgi-bin/webscr?cmd=_s-xclick&hosted_button_id=8DHY4NXW35T4Y
    55Tags: security, scan ,scanner, hack, exploit, secure, malware, phishing, vulnerability, scours, unsafe, total, 404 log, error 404, stealth login, hidden login, Bookmarklet,Log Viewer, debug.log
    6 Requires at least: 4.5.2
    7 Tested up to: 4.5.2
    8 Stable tag: 3.4
     6Requires at least: 4.5.3
     7Tested up to: 4.5.3
     8Stable tag: 3.3.8
    99License: GPLv2 or later
    1010
    … …  
    1818* Check your site for security vulnerabilities and holes.
    1919* Numerous installation parameters tests
     20* Apache and PHP related tests
     21* File permissions
    2022* WP options tests
    2123* Detailed help and description
    … …  
    124126
    125127== Changelog ==
    126 * 3.4
    127     * NEW - New Test: SSL Logins and SSL Admin Access
    128     * IMPROVED - Performance Improvements
    129     * IMPROVED - Removal of Obsolete Tests
     128* 3.3.8
     129    * IMPROVED - Compatibility with WordPress 4.5.3
    130130
    131131* 3.3.7

  • total-security/trunk/total-security.php

    r1413172 r1455997  
    44 * Plugin URI: http://fabrix.net/total-security/
    55 * Description: Checks your WordPress installation and provides detailed reporting on discovered vulnerabilities, anything suspicious and how to fix them.
    6  * Version: 3.4
     6 * Version: 3.3.8
    77 * Author: Fabrix DoRoMo
    88 * Author URI: http://fabrix.net
    … …  
    1414
    1515class Total_Security {
    16         public $min_wp_ver          = '4.5.2'; //
    17         public $pluginversion       = '3.4';
     16        public $min_wp_ver          = '4.5.3'; //
     17        public $pluginversion       = '3.3.8';
     18
     19        public $php_lastver         = '7.0.5'; // PHP - http://php.net/downloads.php
     20        public $mySQL_lastver       = '5.7.12'; // MYSQL - http://dev.mysql.com/downloads/
     21
    1822        public $pluginname          = 'Total Security';
    1923        public $hook                = 'total-security';
    … …  
    636640
    637641// red
    638 delete_option('fdx_p2_red2'); //vestigios da ultima instalação remover no futuro
    639 delete_option('fdx_p2_red3'); //vestigios da ultima instalação remover no futuro
    640 //---------------------------------------------------------------------------------
     642delete_option('fdx_p2_red2');
     643delete_option('fdx_p2_red3');
    641644delete_option('fdx_p2_red4');
    642645delete_option('fdx_p2_red5');
    … …  
    649652delete_option('fdx_p2_red12');
    650653delete_option('fdx_p2_red13');
    651 delete_option('fdx_p2_red14');
    652654//yel
    653655delete_option('fdx_p2_yel1');
Note: See TracChangeset for help on using the changeset viewer.