;j,I d dl Z d dlZd dlZd dlZd dlZd dlZd dlmZ d dlm Z m
Z
m Z m Z m
Z
d dlmZ d dlmZ d dlmZmZ dZdZd e eef d
e e fd Zd e eef d
e e fd Z G d
de Z G d de Z dede d
e ee f fdZ ded
e fdZ de eef d
e fdZ ded
e fdZ!de eef d
e fdZ"de eef d
e fdZ#d5d ed e e
e d
e
e fd Z$d Z%d efd!Z&d" Z'd# Z(d ed$efd%Z)d&ed'ed
e e fd(Z*d&ed
e e fd)Z+d6d+Z,d, Z-d7d.e d/efd0Z.d5d/efd1Z/d5d/efd2Z0d3 Z1d4 Z2dS )8 N)Path)UnionIterableOptionalTupleList)Enum)ClPwd)get_rhn_systemid_value is_ubuntuz0/opt/cpvendor/config/cl-manager-ui-settings.jsoni pathreturnc t j | t j t j z t j z t j z }n# t $ r Y dS w xY w t j t j | j
s t j | dS t j |t t j | S # t $ r Y t j | dS w xY w# t j | w xY w)aT
Read at most _MAX_DROP_IN_BYTES from an untrusted per-user path, refusing
symlinks (O_NOFOLLOW) and non-regular files (FIFO/device fstat guard).
O_NONBLOCK keeps the open of a planted FIFO/device from blocking.
Returns the bytes read, or None if the path is a symlink, not a regular
file, or cannot be opened/read.
N)osopenO_RDONLY
O_NOFOLLOW
O_NONBLOCK O_CLOEXECOSErrorstatS_ISREGfstatst_modecloseread_MAX_DROP_IN_BYTES)r
fds /builddir/build/BUILDROOT/alt-python27-cllib-3.4.44-1.el8.cloudlinux.x86_64/opt/cloudlinux/venv/lib/python3.11/site-packages/clcommon/clwpos_lib.py_safe_read_bytesr s
WT2; 6 F U
V
V tt|BHRLL 011
wr-..
s< AA
AA+C C
C-C0 ,C--C0 0Dc V t | }|dS | dd S )z
Same guarantees as _safe_read_bytes, decoded as utf-8 (errors ignored to
match the callers' historic open(..., errors='ignore')). Returns None on
refusal so callers fall through to their not-found path.
Nutf-8ignore)errors)r decode)r
datas r _safe_read_textr' 5 s1 D ! !D |t ;;wx; 0 00 c e Zd ZdZdZdZdS )
PluginTypez2
Plugin types that are currently detected
z object-cachezadvanced-cacheN)__name__
__module__ __qualname____doc__ OBJECT_CACHEADVANCED_CACHE r( r r* r* A s$ "L%NNNr( r* c e Zd ZdZdZdZdZdS ) WpPluginszj
Static WP plugin names, that are not detected
dynamically from drop-in files, dir names, etc
Unknownz WP Rocket AccelerateWPN)r+ r, r- r. UNKNOWN WP_ROCKET
ACCELERATE_WPr1 r( r r3 r3 I s) GI"MMMr( r3 lineis_multiline_commentc
|r[d| vrdS | d }t | d| d \ }}t | |dz d d \ }}||z |fS d| v r!| d }| d| dfS d| v r!| d }| d| dfS d | v rU| d }t | d| d \ }}t | |dz d d \ }}||z |fS | dfS )
z
Yep, this bicycle is needed to handle different comment types in .php file
https://www.php.net/manual/en/language.basic-syntax.comments.php
and ensure that needed line is not under comment
z*/) TNT Fz//#z/*)find
clean_comment)r9 r: pospart1_part2s r r@ r@ S s; 7 t 8))D//C$T$3$Z66HE1*7S1WXX*N*N 'E'5="66 6 t||iiooDSDz5
d{{iinnDSDz5 t||iioo dsdU33q&3DqND&I&I##u} 222 ;r( filec ~ t j | }t j | S N)r r
realpathisfile)rE
realpath_files r
_is_real_filerK s s+ G$$T**M
7>>- ( ((r( abs_pathc X t j | d }t j | rt | rdS n# t
$ r Y nw xY wt j | t j }t j |d }t j |d }t j | ot | }t j | o| ot | S )a&
WordPress looks for wp-config.php file in the
(1) WordPress root and (2) one directory above the root.
Check that there is no wp-settings.php file in the second case.
This check helps when there is a nested installation, e.g
/ is WordPress and /wp_path/ is WordPress.
wp-config.phpTzwp-settings.php)r r
joinexistsrK r pardir)rL
wp_config_phpabs_path_level_upwp_config_php_level_upwp_settings_phpwp_settings_php_existss r _check_wp_config_phprW x s
X??
7>>- ( ( ]=-I-I 4
Xry99 W\\*;_ M Mgll#46GHHO W^^O < < _ A_A_
7>>0 1 1 1% % 1 / 0 01s AA
A A dirc ~ t j | }t j | S rG )r r
rH isdir)rX realpath_dirs r _is_real_dirr\ s+ 7##C((L
7== & &&r( c t j | d }dt j | v ot | S )z.
Check wp-includes exists and is dir.
z wp-includes)r r
rO listdirr\ )rL wp_includess r _check_wp_includesr` s; ',,x 77K BJx 0 0 0 N\+5N5NNr( c t j | sdS n# t $ r Y dS w xY wt | j d rdS t | ot | S # t $ r Y nw xY wdS )z
Checks whether passed directory is a wordpress directory
by checking presence of wp-includes folder and wp-config.php file.
Fz .wp-toolkit) r r
rP r r name
startswithrW r` )rL s r
is_wp_pathrd s
w~~h'' 5 uu H~~%%m44 u
#H--N2DX2N2NN
5s $
22 A= =
B
B
doc_rootexcludesc # < K t j | sdS t | rdV t | D ]C}| s|rt | |v r+t | r |j V DdS )z
Returns folder with wordpress
Empty string is wp is in docroot dir
:param doc_root:
root path to start search from
:param excludes:
list of paths that must be excluded from search, e.g. subdomains
Nr< ) r r
rP rd r iterdiris_dirstrrb )re rf r
s r
find_wp_pathsrk s 7>>( # # ( X&&(( {{}} D X-- d )OOO r( c t j d| d| d }t | }|dS d}| D ]-}t || \ }}| | r dS .dS )z8
Looks for defined php variable with true value
z^\s*define\s*\(\s*((\'z\')|(\"z\"))\s*,\s*true\s*\)\s*;NFT)recompiler'
splitlinesr@ match)varr
rcontentr: r9 cleaned_lines r _is_php_define_var_foundru s
VSVVVVVWWA d##Gu ""$$ -:4AU-V-V* * 77< 44 5r( wordpress_pathc | d }t j | sdS t d| S )z
Detects whether plugin is really enabled,
cause not all plugins are enabled 'on load'
# https://kevdees.com/what-are-wordpress-drop-in-plugins/
rN FWP_CACHE)joinpathr r
rP ru )rv wp_configs r is_advanced_cache_enabledr{ sB ''88I
7>>) $ $ u #J : ::r( c f t | !t d| rt j j S dS )z
They are advising to check whether WP_ROCKET_ADVANCED_CACHE is defined
to ensure plugin is working
https://docs.wp-rocket.me/article/134-advanced-cache-error-message
NWP_ROCKET_ADVANCED_CACHE)accelerate_wp_pluginru r3 r7 value) drop_in_paths r wp_rocket_pluginr s6 L))1 $%? N N 2"(( 4r( c R t | }|d|v rt j j S dS )zB
Checking if the plugin folder name exists in the drop-in
Nz/clsop)r' r3 r8 r )r rs s r r~ r~ s2 l++Gx7 2 2&,, 4r( plugin_typec | d }| | d }t j | sdS |t j j k rt | sdS | d }t || p=t | p.t | p t | pt j
j }|S )a
Looking for object-cache.php or advanced-cache.php in wordpress folder
If found - tries to find 'plugin-owner' of <-cache>.php by
content comparison
If cannot be found -> tries to read <-cache>.php headers looking for Plugin name:
z
wp-contentz.phpNplugins)ry r r
rP r* r0 r r{ $get_wp_cache_plugin_by_scanning_dirs get_wp_cache_plugin_by_headerr~ r r3 r6 )rv r wp_content_diractivated_cache plugins_dir plugin_names r get_wp_cache_pluginr s $,,\::N$--.B.B.BCCO
7>>/ * * tj/555>WXf>g>g5t )))44K6 TT -2?CC-)/::- &o66- &, r( activated_pluginr c d | sdS | sdS t | }|dS | D ][}t j | D ]D\ }}}| j |v r5t | | j z }t | |k r |j c c S E\dS )zT
Scanning plugins/* dir and looking for similar