checksums provided by the WordPress API to see if they are intact. If there are changes you will be able to make a Diff between the files hosted on WordPress.org and your installation to see what has been changed.', 'health-check' );
add_action( 'wp_ajax_health-check-files-integrity-check', array( $this, 'run_files_integrity_check' ) );
add_action( 'wp_ajax_health-check-view-file-diff', array( $this, 'view_file_diff' ) );
parent::__construct();
}
/**
* Gathers checksums from WordPress API and cross checks the core files in the current installation.
*
* @return void
*/
function run_files_integrity_check() {
check_ajax_referer( 'health-check-files-integrity-check' );
$checksums = $this->call_checksum_api();
$files = $this->parse_checksum_results( $checksums );
$this->create_the_response( $files );
}
/**
* Calls the WordPress API on the checksums endpoint
*
* @uses get_bloginfo()
* @uses get_locale()
* @uses ABSPATH
* @uses wp_remote_get()
* @uses get_bloginfo()
* @uses strpos()
* @uses unset()
*
* @return array
*/
function call_checksum_api() {
// Setup variables.
$wpversion = get_bloginfo( 'version' );
$wplocale = get_locale();
// Setup API Call.
$checksums = get_core_checksums( $wpversion, $wplocale );
if ( false === $checksums ) {
return $checksums;
}
set_transient( 'health-check-checksums', $checksums, 2 * HOUR_IN_SECONDS );
// Remove the wp-content/ files from checking
foreach ( $checksums as $file => $checksum ) {
if ( false !== strpos( $file, 'wp-content/' ) ) {
unset( $checksums[ $file ] );
}
}
return $checksums;
}
/**
* Parses the results from the WordPress API call
*
* @uses file_exists()
* @uses md5_file()
* @uses ABSPATH
*
* @param array $checksums
*
* @return array|bool
*/
function parse_checksum_results( $checksums ) {
// Check if the checksums are valid
if ( false === $checksums ) {
return false;
}
$filepath = ABSPATH;
$files = array();
// Parse the results to validate checksums.
foreach ( $checksums as $file => $checksum ) {
// Check the files.
if ( file_exists( $filepath . $file ) && md5_file( $filepath . $file ) !== $checksum ) {
$reason = esc_html__( 'Content changed', 'health-check' ) . ' ' . esc_html__( '(View Diff)', 'health-check' ) . '';
array_push( $files, array( $file, $reason ) );
} elseif ( ! file_exists( $filepath . $file ) ) {
$reason = esc_html__( 'File not found', 'health-check' );
array_push( $files, array( $file, $reason ) );
}
}
// Iterate over the core directories to see if any unexpected files exist, but only if the directory iterator is available.
if ( class_exists( 'RecursiveDirectoryIterator' ) ) {
$directories = array(
untrailingslashit( ABSPATH ), // Root directory.
untrailingslashit( ABSPATH . 'wp-admin' ), // Admin directory.
untrailingslashit( ABSPATH . WPINC ), // Includes directory.
);
// Files that will not exist in the checksum iterator, but are expected and should not cause a warning.
$excluded_files = array(
'wp-config.php',
);
foreach ( $directories as $directory ) {
// For the root path, do not recursively iterate, to avoid false positives from the `wp-content` directory.
if ( untrailingslashit( ABSPATH ) === $directory ) {
$iterator = new DirectoryIterator( $directory );
foreach ( $iterator as $file ) {
if ( $file->isFile() ) {
$path = str_replace( ABSPATH, '', $file->getPathname() );
if ( ! isset( $checksums[ $path ] ) && ! in_array( $path, $excluded_files, true ) ) {
$reason = esc_html__( 'This is an unknown file', 'health-check' );
array_push( $files, array( $path, $reason ) );
}
}
}
} else {
$iterator = new RecursiveIteratorIterator( new RecursiveDirectoryIterator( $directory ) );
foreach ( $iterator as $file ) {
if ( $file->isFile() ) {
$path = str_replace( ABSPATH, '', $file->getPathname() );
if ( ! isset( $checksums[ $path ] ) && ! in_array( $path, $excluded_files, true ) ) {
$reason = esc_html__( 'This is an unknown file', 'health-check' );
array_push( $files, array( $path, $reason ) );
}
}
}
}
}
}
return $files;
}
/**
* Generates the response
*
* @uses wp_send_json_success()
* @uses wp_die()
* @uses ABSPATH
*
* @param null|array $files
*
* @return void
*/
function create_the_response( $files ) {
$filepath = ABSPATH;
$output = '';
if ( empty( $files ) ) {
$output .= ''; $output .= esc_html__( 'All files passed the check. Everything seems to be ok!', 'health-check' ); $output .= '
';
$output .= esc_html__( 'It appears as if some files may have been modified.', 'health-check' );
$output .= '
' . esc_html__( 'One possible reason for this may be that your installation contains translated versions. An easy way to clear this is to reinstall WordPress. Don\'t worry. This will only affect WordPress\' own files, not your themes, plugins or uploaded media.', 'health-check' );
$output .= '
| '; $output .= esc_html__( 'Status', 'health-check' ); $output .= ' | '; $output .= esc_html__( 'File', 'health-check' ); $output .= ' | '; $output .= esc_html__( 'Reason', 'health-check' ); $output .= ' |
|---|---|---|
| '; $output .= esc_html__( 'Status', 'health-check' ); $output .= ' | '; $output .= esc_html__( 'File', 'health-check' ); $output .= ' | '; $output .= esc_html__( 'Reason', 'health-check' ); $output .= ' |
| ' . esc_html__( 'Error', 'health-check' ) . ' | '; $output .= '' . $filepath . $tampered[0] . ' | '; $output .= '' . $tampered[1] . ' | '; $output .= '
| '; $output .= esc_html__( 'Original', 'health-check' ); $output .= ' | '; $output .= esc_html__( 'Modified', 'health-check' ); $output .= ' |
|---|