?HAMA

Navigation

Breadcrumbs

/ / home / nshryvcy / blissfulnepal.com / wp-content / plugins / malcare-security

Create

Create File | Create Folder | Upload Files | Run Command

Edit File Size: 10.68 KB

/home/nshryvcy/blissfulnepal.com/wp-content/plugins/malcare-security/helper.php

Text Base64

<?php
if (!defined('ABSPATH') && !defined('MCDATAPATH') && !defined('PHP_ERR_MONIT_PATH')) exit;

if (!class_exists('MCHelper')) :
	class MCHelper {
		public static function safePregMatch($pattern, $subject, &$matches = null, $flags = 0, $offset = 0) {
			if (!is_string($pattern) || !is_string($subject)) {
				return false;
			}
			return preg_match($pattern, $subject, $matches, $flags, $offset);
		}

# XNOTE - The below function assumes valid input
		# $array should be an array and $keys should be an array of string, or integer data
		public static function filterArray($array, $keys) {
			$filteredArray = array();
			foreach ($keys as $key) {
				if (array_key_exists($key, $array)) {
					$filteredArray[$key] = $array[$key];
				}
			}
			return $filteredArray;
		}

# XNOTE - The below function assumes valid input
		# $array should be an array and $keys should be an array of string, or integer data
		public static function digArray($array, $keys) {
			if (empty($keys)) {
				return null;
			}
			$curr_array = $array;
			foreach ($keys as $key) {
				if (is_array($curr_array) && array_key_exists($key, $curr_array)) {
					$curr_array = $curr_array[$key];
				} else {
					return null;
				}
			}
			return $curr_array;
		}

public static function arrayKeyFirst($array) {
			if (!function_exists('array_key_first')) {
				foreach ($array as $key => $value) {
					return $key;
				}
				return null;
			}

return array_key_first($array);
		}

public static function safePregReplace($replace_regex, $replace_string, $element, $limit = -1) {
			if (!is_string($replace_regex) || !is_string($replace_string) || !is_string($element) || !is_int($limit)) {
				return $element;
			}

$updated_element = preg_replace($replace_regex, $replace_string, $element, $limit);

if ($updated_element === null && preg_last_error() !== PREG_NO_ERROR) {
				return $element;
			}

return $updated_element;
		}

public static function safeStrReplace($search, $replace, $subject) {
			if (!is_string($search) || !is_string($replace) || !is_string($subject)) {
				return $subject;
			}
			$updated_subject = str_replace($search, $replace, $subject);
			if ($updated_subject === null) {
				return $subject;
			}
			return $updated_subject;
		}

public static function preInitWPHook($hook_name, $function_name, $priority, $accepted_args) {
			global $wp_filter;

// Check if $wp_filter is not initialized or not an array
			if (!isset($wp_filter) || !is_array($wp_filter)) {
				$wp_filter = array();
			}

// Check if the hook exists in $wp_filter
			if (!isset($wp_filter[$hook_name])) {
				$wp_filter[$hook_name] = array();
			}

// Check if the priority exists for the hook
			if (!isset($wp_filter[$hook_name][$priority])) {
				$wp_filter[$hook_name][$priority] = array();
			}

// Add the filter function information to the $wp_filter array
			$wp_filter[$hook_name][$priority][] = array(
				'function' => $function_name,
				'accepted_args' => $accepted_args,
			);
		}

public static function removePatternFromWpConfig($pattern) {
			if (!defined('ABSPATH')) {
				return;
			}

$wp_conf_paths = array(
				rtrim(ABSPATH, DIRECTORY_SEPARATOR) . "/wp-config.php",
				rtrim(ABSPATH, DIRECTORY_SEPARATOR) . "../wp-config.php"
			);

if (file_exists($wp_conf_paths[0])) {
				$fname = $wp_conf_paths[0];
			} elseif (file_exists($wp_conf_paths[1])) {
				$fname = $wp_conf_paths[1];
			} else {
				return;
			}

self::fileRemovePattern($fname, $pattern);
		}

public static function fileRemovePattern($fname, $pattern, $is_regex = false) {
			if (!is_string($fname) || !is_string($pattern)) {
				return;
			}

if (!MCWPFileSystem::getInstance()->exists($fname)) {
				return;
			}

$content = MCWPFileSystem::getInstance()->getContents($fname);
			if ($content !== false) {
				if ($is_regex !== false) {
					$modified_content = preg_replace($pattern, "", $content);
				} else {
					$modified_content = str_replace($pattern, "", $content);
				}

if (empty($modified_content)) {
					return;
				}

if ($content !== $modified_content) {
					MCWPFileSystem::getInstance()->putContents($fname, $modified_content,
							MCWPFileSystem::getInstance()->getchmodOctal($fname));
				}
			}
		}

public static function opensslEncrypt($plain_text, $cipher_algo, $encryption_key, $iv = null) {
			if (!function_exists('openssl_encrypt') || !function_exists('openssl_get_cipher_methods') ||
					!function_exists('openssl_random_pseudo_bytes') || !function_exists('openssl_cipher_iv_length')) {
				return array(false, "OpenSSL extension not found.");
			}

if (empty($plain_text) || !is_string($plain_text) ||
					empty($encryption_key) || !is_string($encryption_key)) {
				return array(false, "Plain text or encryption key is not a valid string.");
			}

if (!in_array($cipher_algo, openssl_get_cipher_methods(), true)) {
				return array(false, "Invalid cipher algorithm - " . $cipher_algo);
			}

if ($iv === null) {
				$iv_length = openssl_cipher_iv_length($cipher_algo);
				if ($iv_length === false) {
					return array(false, "IV length not found.");
				}
				$iv = openssl_random_pseudo_bytes($iv_length);
				if ($iv === false) {
					return array(false, "IV generation failed.");
				}
			}

if (strlen($iv) !== $iv_length) {
				return array(false, "Invalid IV length. Expected length is " . $iv_length . " bytes.");
			}

$encrypted_data = openssl_encrypt($plain_text, $cipher_algo, $encryption_key, OPENSSL_RAW_DATA, $iv);
			if ($encrypted_data === false) {
				return array(false, "Encryption failed.");
			}

return array(true, ($iv . $encrypted_data));
		}

public static function opensslDecrypt($data, $cipher_algo, $encryption_key) {
			if (!function_exists('openssl_decrypt') || !function_exists('openssl_get_cipher_methods') ||
					!function_exists('openssl_cipher_iv_length')) {
				return array(false, "OpenSSL extension not found.");
			}

if (empty($data) || !is_string($data) || empty($encryption_key) || !is_string($encryption_key)) {
				return array(false, "Encrypted secret or encryption key is not a valid string.");
			}

if (!in_array($cipher_algo, openssl_get_cipher_methods(), true)) {
				return array(false, "Invalid cipher algorithm - " . $cipher_algo);
			}

$iv_length = openssl_cipher_iv_length($cipher_algo);
			if ($iv_length === false) {
				return array(false, "IV length not found.");
			}

if (strlen($data) <= $iv_length) {
				return array(false, "Data length is insufficient to contain IV.");
			}

$iv = substr($data, 0, $iv_length);
			$encrypted_data = substr($data, $iv_length);

if ($iv === false || $encrypted_data === false) {
				return array(false, "IV or encrypted data not found.");
			}

$decrypted_data = openssl_decrypt($encrypted_data, $cipher_algo, $encryption_key, OPENSSL_RAW_DATA, $iv);

if ($decrypted_data === false) {
				return array(false, "Decryption failed.");
			}

return array(true, $decrypted_data);
		}

public static function get_direct_filesystem() {
			require_once ABSPATH . 'wp-admin/includes/class-wp-filesystem-base.php';
			require_once ABSPATH . 'wp-admin/includes/class-wp-filesystem-direct.php';
			return new WP_Filesystem_Direct(new StdClass());
		}

/**
		 * Maybe unslash a value if WordPress is loaded
		 *
		 * @param string $value The value to potentially unslash
		 * @return string The unslashed value if WP is loaded, original value otherwise
		 */
		public static function maybeUnslashValue($value) {
			if (function_exists('wp_unslash')) {
				return wp_unslash($value);
			}
			return $value;
		}

/**
		 * Get and sanitize a string parameter from superglobal
		 *
		 * @param string $superglobal The superglobal type ('GET', 'POST', etc.)
		 * @param string $key The parameter key to retrieve
		 * @param string $context The sanitization context ('text', 'email', 'url')
		 * @return string|null Sanitized string value or null if invalid or unknown context
		 */
		public static function getStringParamSanitized($superglobal, $key, $context) {
			$raw_value = self::getRawParam($superglobal, $key);

if (!is_string($raw_value)) {
				return null;
			}

switch ($context) {
			case 'text':
				if (!function_exists('sanitize_text_field')) {
					return null;
				}
				return sanitize_text_field($raw_value);
			case 'email':
				if (!function_exists('sanitize_email')) {
					return null;
				}
				return sanitize_email($raw_value);
			case 'url':
				if (!function_exists('esc_url_raw')) {
					return null;
				}
				return esc_url_raw($raw_value);
			default:
				return null;
			}
		}

/**
		 * Get and escape a string parameter from superglobal
		 *
		 * @param string $superglobal The superglobal type ('GET', 'POST', etc.)
		 * @param string $key The parameter key to retrieve
		 * @param string $context The escaping context ('attr', 'html', 'url')
		 * @return string|null Escaped string value or null if invalid or unknown context
		 */
		public static function getStringParamEscaped($superglobal, $key, $context) {
			$raw_value = self::getRawParam($superglobal, $key);

if (!is_string($raw_value)) {
				return null;
			}

switch ($context) {
			case 'attr':
				if (!function_exists('esc_attr')) {
					return null;
				}
				return esc_attr($raw_value);
			case 'html':
				if (!function_exists('esc_html')) {
					return null;
				}
				return esc_html($raw_value);
			case 'url':
				if (!function_exists('esc_url')) {
					return null;
				}
				return esc_url($raw_value);
			default:
				return null;
			}
		}

// phpcs:disable WordPress.Security.NonceVerification.Recommended, WordPress.Security.ValidatedSanitizedInput.MissingUnslash, WordPress.Security.ValidatedSanitizedInput.InputNotSanitized, WordPress.Security.NonceVerification.Missing
		/**
		 * Get raw parameter value from superglobal
		 *
		 * @param string $superglobal The superglobal type ('GET', 'POST', etc.)
		 * @param string $key The parameter key to retrieve
		 * @return mixed Raw parameter value or null if not found
		 */
		public static function getRawParam($superglobal, $key) {
			$value = null;

switch (strtoupper($superglobal)) {
			case 'GET':
				$value = isset($_GET[$key]) ? $_GET[$key] : null;
				break;
			case 'POST':
				$value = isset($_POST[$key]) ? $_POST[$key] : null;
				break;
			case 'COOKIE':
				$value = isset($_COOKIE[$key]) ? $_COOKIE[$key] : null;
				break;
			case 'REQUEST':
				$value = isset($_REQUEST[$key]) ? $_REQUEST[$key] : null;
				break;
			case 'SERVER':
				$value = isset($_SERVER[$key]) ? $_SERVER[$key] : null;
				break;
			}

return $value !== null ? self::maybeUnslashValue($value) : null;
		}
		// phpcs:enable WordPress.Security.NonceVerification.Recommended, WordPress.Security.ValidatedSanitizedInput.MissingUnslash, WordPress.Security.ValidatedSanitizedInput.InputNotSanitized, WordPress.Security.NonceVerification.Missing
	}
endif;

Exit & Reset Text mode: syntax highlighting auto-detects file type.

Directory Contents

Dirs: 10 × Files: 18

Sort:

Enable drag-to-move

Name	Size	Perms	Modified	Actions
admin DIR	-	drwxr-xr-x	2026-06-07 01:29:47	Edit Download recursive recursive
callback DIR	-	drwxr-xr-x	2026-06-07 01:29:47	Edit Download recursive recursive
css DIR	-	drwxr-xr-x	2026-06-07 01:29:47	Edit Download recursive recursive
form_testing DIR	-	drwxr-xr-x	2026-06-07 01:29:47	Edit Download recursive recursive
img DIR	-	drwxr-xr-x	2026-06-07 01:29:47	Edit Download recursive recursive
js DIR	-	drwxr-xr-x	2026-06-07 01:29:47	Edit Download recursive recursive
php_error_monitoring DIR	-	drwxr-xr-x	2026-06-07 01:29:47	Edit Download recursive recursive
protect DIR	-	drwxr-xr-x	2026-06-07 01:29:47	Edit Download recursive recursive
public_keys DIR	-	drwxr-xr-x	2026-06-07 01:29:47	Edit Download recursive recursive
wp_2fa DIR	-	drwxr-xr-x	2026-06-07 01:29:47	Edit Download recursive recursive
account.php	7.14 KB	lrw-r--r--	2026-06-07 01:29:47	Edit Download recursive recursive
helper.php	10.68 KB	lrw-r--r--	2026-06-07 01:29:47	Edit Download recursive recursive
info.php	7.15 KB	lrw-r--r--	2026-06-07 01:29:47	Edit Download recursive recursive
license.txt	19.46 KB	lrw-r--r--	2026-06-07 01:29:47	Edit Download recursive recursive
malcare.php	8.69 KB	lrw-r--r--	2026-06-07 01:29:47	Edit Download recursive recursive
readme.txt	32.35 KB	lrw-r--r--	2026-06-07 01:29:47	Edit Download recursive recursive
recover.php	1.71 KB	lrw-r--r--	2026-06-07 01:29:47	Edit Download recursive recursive
wp_actions.php	2.92 KB	lrw-r--r--	2026-06-07 01:29:47	Edit Download recursive recursive
wp_actlog.php	17.52 KB	lrw-r--r--	2026-06-07 01:29:47	Edit Download recursive recursive
wp_admin.php	13.86 KB	lrw-r--r--	2026-06-07 01:29:47	Edit Download recursive recursive
wp_api.php	1.04 KB	lrw-r--r--	2026-06-07 01:29:47	Edit Download recursive recursive
wp_cli.php	5.60 KB	lrw-r--r--	2026-06-07 01:29:47	Edit Download recursive recursive
wp_db.php	6.10 KB	lrw-r--r--	2026-06-07 01:29:47	Edit Download recursive recursive
wp_dynsync.php	34.64 KB	lrw-r--r--	2026-06-07 01:29:47	Edit Download recursive recursive
wp_file_system.php	2.29 KB	lrw-r--r--	2026-06-07 01:29:47	Edit Download recursive recursive
wp_login_whitelabel.php	1.57 KB	lrw-r--r--	2026-06-07 01:29:47	Edit Download recursive recursive
wp_settings.php	2.06 KB	lrw-r--r--	2026-06-07 01:29:47	Edit Download recursive recursive
wp_site_info.php	2.32 KB	lrw-r--r--	2026-06-07 01:29:47	Edit Download recursive recursive