%PDF-
%PDF-
Mini Shell
Mini Shell
<?php defined( 'ABSPATH' ) or die();
if ( ! class_exists( 'rsssl_site_health' ) ) {
class rsssl_site_health {
private static $_this;
public function __construct() {
if ( isset( self::$_this ) ) {
wp_die( 'you cannot create a second instance.' );
}
add_filter( 'site_status_tests', array( $this, 'health_check' ), 1, 10 );
self::$_this = $this;
}
public static function this() {
return self::$_this;
}
/**
* Add SSL dedicated health check
* @param array $tests
*
* @return array
*/
public function health_check( $tests ) {
unset( $tests['async']['https_status'] );
if ( ! rsssl_get_option( 'dismiss_all_notices' ) ) {
$tests['direct']['rsssl_ssl_health'] = array(
'label' => __( 'SSL Status Test', 'really-simple-ssl' ),
'test' => array( $this, 'ssl_tests' ),
);
$tests['direct']['headers_test'] = array(
'label' => __( 'Security Headers Test', 'really-simple-ssl' ),
'test' => array( $this, 'headers_test' ),
);
unset( $tests['direct']['debug_enabled'] );
if ( rsssl_is_debugging_enabled() && rsssl_debug_log_value_is_default() ) {
$tests['direct']['rsssl_debug_log'] = array(
'test' => array( $this, 'site_health_debug_log_test' ),
);
}
if ( rsssl_get_option( 'enable_vulnerability_scanner' ) ) {
$tests['direct']['rsssl_vulnerabilities'] = array(
'label' => __( 'Vulnerability detection', 'really-simple-ssl' ),
'test' => array( $this, 'vulnerabilities_test' ),
);
}
// Two-Factor Authentication (2FA) test
$tests['direct']['rsssl_2fa_test'] = array(
'label' => __( 'Two-Factor Authentication', 'really-simple-ssl' ),
'test' => array( $this, 'two_factor_auth_test' ),
);
// Limit Login Attempts (LLA) test
$tests['direct']['rsssl_lla_test'] = array(
'label' => __( 'Limit Login Attempts Protection', 'really-simple-ssl' ),
'test' => array( $this, 'limit_login_attempts_test' ),
);
// Firewall Protection test
$tests['direct']['rsssl_firewall_test'] = array(
'label' => __( 'Firewall Protection', 'really-simple-ssl' ),
'test' => array( $this, 'firewall_test' ),
);
}
return $tests;
}
/**
* Test for Two-Factor Authentication (2FA)
* @return array
*/
public function two_factor_auth_test() {
$status = 'recommended';
$description = __( 'We recommend to enable Two-Factor Authentication at least for administrators.', 'really-simple-ssl' );
// Check if RSSSL 2FA, WordFence, Solid Security, AIOS are installed and 2FA is enabled
if ( rsssl_get_option('login_protection_enabled') == '1' || is_plugin_active('wordfence/wordfence.php') || is_plugin_active('two-factor/two-factor.php') || is_plugin_active('all-in-one-wp-security-and-firewall/wp-security.php') || is_plugin_active('better-wp-security/better-wp-security.php') ) {
$status = 'good';
$description = __( 'Your site is protected by Two-Factor Authentication (2FA).', 'really-simple-ssl' );
}
return array(
'label' => __( 'Protect your user logins with Two-Factor Authentication (at least for Administrator accounts)', 'really-simple-ssl' ),
'status' => $status,
'badge' => array(
'label' => __( 'Security', 'really-simple-ssl' ),
'color' => 'blue',
),
'description' => sprintf( '<p>%s</p>', $description ),
'actions' => sprintf(
'<p><a href="%s" target="_blank">%s</a></p>',
esc_url( admin_url( 'admin.php?page=really-simple-security#settings/two-fa' ) ),
__( 'Read more', 'really-simple-ssl' )
),
'test' => 'rsssl_2fa_test',
);
}
/**
* Test for Limit Login Attempts (LLA)
* @return array
*/
public function limit_login_attempts_test() {
$status = 'recommended';
$description = __( 'Enable Limit Login Attempts to protect the login form against brute-force attacks.', 'really-simple-ssl' );
// Check if RSSSL LLA or Limit Login Attempts Reloaded is installed and active
if ( rsssl_get_option('enable_limited_login_attempts') == '1' || is_plugin_active('wordfence/wordfence.php') || is_plugin_active('limit-login-attempts-reloaded/limit-login-attempts-reloaded.php') ) {
$status = 'good';
$description = __( 'Your site is protected by Limit Login Attempts.', 'really-simple-ssl' );
}
return array(
'label' => __( 'Protect your login form with Limit Login Attempts', 'really-simple-ssl' ),
'status' => $status,
'badge' => array(
'label' => __( 'Security', 'really-simple-ssl' ),
'color' => 'blue',
),
'description' => sprintf( '<p>%s</p>', $description ),
'actions' => sprintf(
'<p><a href="%s" target="_blank">%s</a></p>',
esc_url( admin_url( 'admin.php?page=really-simple-security#settings/limit_login_attempts' ) ),
__( 'Read more', 'really-simple-ssl' )
),
'test' => 'rsssl_lla_test',
);
}
/**
* Test for Firewall Protection
* @return array
*/
public function firewall_test() {
$status = 'recommended';
$description = __( 'Secure your site with the performant Firewall.', 'really-simple-ssl' );
// Check if WordFence, AIOS, or Solid Security is installed
if ( rsssl_get_option('enable_firewall') || is_plugin_active('wordfence/wordfence.php') || is_plugin_active('all-in-one-wp-security-and-firewall/wp-security.php') || is_plugin_active('better-wp-security/better-wp-security.php') ) {
$status = 'good';
$description = __( 'Your site is protected by a firewall.', 'really-simple-ssl' );
}
return array(
'label' => __( 'Secure your site with a Firewall', 'really-simple-ssl' ),
'status' => $status,
'badge' => array(
'label' => __( 'Security', 'really-simple-ssl' ),
'color' => 'blue',
),
'description' => sprintf( '<p>%s</p>', $description ),
'actions' => sprintf(
'<p><a href="%s" target="_blank">%s</a></p>',
esc_url( admin_url( 'admin.php?page=really-simple-security#settings/firewall' ) ),
__( 'Read more', 'really-simple-ssl' )
),
'test' => 'rsssl_firewall_test',
);
}
/**
* Generate the WP_DEBUG notice
*
*/
public function site_health_debug_log_test() {
$result = array(
'label' => __( 'Your site is set to log errors to a potentially public file' ), // phpcs:ignore WordPress.WP.I18n.MissingArgDomain
'status' => 'recommended',
'badge' => array(
'label' => __( 'Security' ), // phpcs:ignore WordPress.WP.I18n.MissingArgDomain
'color' => 'blue',
),
'description' => sprintf(
'<p>%s</p>',
__( 'The value, WP_DEBUG_LOG, has been added to this website’s configuration file. This means any errors on the site will be written to a file which is potentially available to all users.', 'really-simple-ssl' )
),
'actions' => sprintf(
'<p><a href="%s" target="_blank" rel="noopener noreferrer">%s <span class="screen-reader-text">%s</span><span aria-hidden="true" class="dashicons dashicons-external"></span></a></p>',
/* translators: Documentation explaining debugging in WordPress. */
esc_url( rsssl_admin_url([], '#settings/hardening') ),
__( 'Remove from public location with Really Simple Security', 'really-simple-ssl' ),
/* translators: Accessibility text. */
__( '(opens in a new tab)' )// phpcs:ignore WordPress.WP.I18n.MissingArgDomain
),
'test' => 'rsssl_debug_log',
);
return $result;
}
/**
* Test to check if the recommended security headers are present
* @return array
*/
public function headers_test() {
$result = array(
'label' => __( 'Essential security headers installed', 'really-simple-ssl' ),
'status' => 'good',
'badge' => array(
'label' => __( 'Security' ), // phpcs:ignore WordPress.WP.I18n.MissingArgDomain
'color' => 'blue',
),
'description' => sprintf(
'<p>%s</p>',
__( 'The essential security headers are detected on your site.', 'really-simple-ssl' )
),
'actions' => '',
'test' => 'headers_test',
);
//returns empty for sites without .htaccess, or if all headers are already in use
$recommended_headers = RSSSL()->admin->get_recommended_security_headers();
if ( ! empty( $recommended_headers ) ) {
$style = '<style>.rsssl-sec-headers-list li {list-style-type:disc;margin-left:20px;}</style>';
$list = '<ul class="rsssl-sec-headers-list"><li>' . implode( '</li><li>', $recommended_headers ) . '</li></ul>';
$result['status'] = 'recommended';
$result['label'] = __( 'Not all essential security headers are installed', 'really-simple-ssl' );
$result['description'] = sprintf( '<p>%s</p>', __( 'Your website does not send all essential security headers.', 'really-simple-ssl' ) . $style . $list );
$result['actions'] = sprintf(
'<p><a href="%s" target="_blank" rel="noopener noreferrer">%s</a></p>',
rsssl_link('site-health-recommended-security-headers/'),
__( 'Read more', 'really-simple-ssl' )
);
}
return $result;
}
/**
* Some basic SSL health checks
* @return array
*/
public function ssl_tests() {
$url = rsssl_admin_url();
$result = array(
'label' => __( '301 SSL redirect enabled', 'really-simple-ssl' ),
'status' => 'good',
'badge' => array(
'label' => __( 'Security' ), // phpcs:ignore WordPress.WP.I18n.MissingArgDomain
'color' => 'blue',
),
'description' => sprintf(
'<p>%s</p>',
__( 'You have set a 301 redirect to SSL. This is important for SEO purposes', 'really-simple-ssl' )
),
'actions' => '',
'test' => 'rsssl_ssl_health',
);
if ( ! rsssl_get_option( 'ssl_enabled' ) ) {
if ( rsssl_get_option( 'site_has_ssl' ) ) {
$result['status'] = 'recommended';
$result['label'] = __( 'SSL is not enabled.', 'really-simple-ssl' );
$result['description'] = sprintf(
'<p>%s</p>',
__(
'Really Simple Security detected an SSL certificate, but has not been configured to enforce SSL.',
'really-simple-ssl'
)
);
$result['actions'] .= sprintf(
'<p><a href="%s">%s</a></p>',
$url,
__( 'Activate SSL', 'really-simple-ssl' )
);
} else {
$result['status'] = 'recommended';
$result['label'] = __( 'No SSL detected', 'really-simple-ssl' );
$result['description'] = sprintf(
'<p>%s</p>',
__( 'Really Simple Security is installed, but no valid SSL certificate is detected.', 'really-simple-ssl' )
);
}
} else {
if ( ! RSSSL()->admin->has_301_redirect() ) {
$result['status'] = 'recommended';
$result['label'] = __( 'No 301 redirect to SSL enabled.', 'really-simple-ssl' );
$result['description'] = sprintf(
'<p>%s</p>',
__( 'To ensure all traffic passes through SSL, please enable a 301 redirect.', 'really-simple-ssl' )
);
$result['actions'] .= sprintf(
'<p><a href="%s">%s</a></p>',
$url,
__( 'Enable 301 redirect', 'really-simple-ssl' )
);
} elseif ( RSSSL()->server->uses_htaccess() && rsssl_get_option( 'redirect' ) !== 'htaccess' ) {
$result['status'] = 'recommended';
$result['label'] = __( '301 .htaccess redirect is not enabled.', 'really-simple-ssl' );
$result['description'] = sprintf(
'<p>%s</p>',
__( 'The 301 .htaccess redirect is the fastest and most reliable redirect option.', 'really-simple-ssl' )
);
$result['actions'] .= sprintf(
'<p><a href="%s">%s</a></p>',
$url,
__( 'Enable 301 .htaccess redirect', 'really-simple-ssl' )
);
}
}
return $result;
}
}
}
Zerion Mini Shell 1.0