' . __( 'Fill in the options below if you want to be notified by mail about new vulnerabilities. To add multiple e-mail addresses comma separate them.', 'wpscan' ) . '
';
}
/**
* Email field
*
* @since 1.0.0
* @access public
* @return string
*/
public function field_email()
{
echo sprintf(
'';
echo '' . __( 'Disabled', 'wpscan' ) . ' ';
echo '' . __( 'Daily', 'wpscan' ) . ' ';
echo '' . __( 'Every Monday', 'wpscan' ) . ' ';
echo '' . __( 'Every Tuesday', 'wpscan' ) . ' ';
echo '' . __( 'Every Wednesday', 'wpscan' ) . ' ';
echo '' . __( 'Every Thursday', 'wpscan' ) . ' ';
echo '' . __( 'Every Friday', 'wpscan' ) . ' ';
echo '' . __( 'Every Saturday', 'wpscan' ) . ' ';
echo '' . __( 'Every Sunday', 'wpscan' ) . ' ';
echo '' . __( 'Every Month', 'wpscan' ) . ' ';
echo '';
}
/**
* Sanitize email
*
* @since 1.0.0
* @access public
* @return string
*/
public function sanitize_email( $value ) {
if ( ! empty( $value ) ) {
$emails = explode( ',', $value );
foreach ( $emails as $email ) {
if ( ! is_email( trim( $email ) ) ) {
add_settings_error( $this->parent->OPT_EMAIL, 'invalid-email', __( 'You have entered an invalid e-mail address.', 'wpscan' ) );
$value = '';
}
}
}
return $value;
}
/**
* Sanitize interval
*
* @since 1.0.0
* @access public
* @return string
*/
public function sanitize_interval( $value ) {
$allowed_values = array( 'o', 'd', 1, 2, 3, 4, 5, 6, 7, 'm' );
if ( ! in_array( $value, $allowed_values ) ) {
// return default value.
return 'd';
}
return $value;
}
/**
* Send the notification
*
* @since 1.0.0
* @access public
* @return void
*/
public function notify() {
if ( ! function_exists( 'get_plugins' ) ) {
require_once ABSPATH . 'wp-admin/includes/plugin.php';
}
$email = get_option( $this->parent->OPT_EMAIL );
$interval = get_option( $this->parent->OPT_INTERVAL, 'd' );
// Check email or if notifications are disabled.
if ( empty( $email ) || 'o' === $interval ) {
return;
}
// Check weekly interval.
if ( is_numeric( $interval ) && date( 'N' ) !== $interval ) {
return;
}
// Check monthly interval.
if ( $interval === 'm' && date( 'j' ) !== 1 ) {
return;
}
// Send email.
$has_vulnerabilities = false;
$msg = '' . __( 'Hello,', 'wpscan' ) . '
';
$msg .= '' . sprintf(__( 'The %s found some vulnerabilities in %s, listed below.', 'wpscan' ), 'WPScan WordPress security plugin ' , '' . get_bloginfo( 'name' ) . ' ' ) . '
';
// WordPress
$list = $this->email_vulnerabilities( 'wordpress' , get_bloginfo( 'version' ));
if ( ! empty( $list ) ) {
$has_vulnerabilities = true;
$msg .= 'WordPress
';
}
// Plugins.
foreach ( get_plugins() as $name => $details ) {
$slug = $this->parent->get_plugin_slug( $name, $details );
$list = $this->email_vulnerabilities( 'plugins', $slug );
if ( ! empty( $list ) ) {
$has_vulnerabilities = true;
$msg .= '' . __( 'Plugin', 'wpscan' ) . ' ' . esc_html( $details['Name'] ) . '
';
}
}
// Themes.
foreach ( wp_get_themes() as $name => $details ) {
$slug = $this->parent->get_theme_slug( $name, $details );
$list = $this->email_vulnerabilities( 'themes', $slug );
if ( ! empty( $list ) ) {
$has_vulnerabilities = true;
$msg .= '' . __( 'Theme', 'wpscan' ) . ' ' . esc_html( $details['Name'] ) . '
';
}
}
// Security checks.
foreach ( $this->parent->classes['checks/system']->checks as $id => $data ) {
$list = $this->email_vulnerabilities( 'security-checks', $id );
if ( ! empty( $list ) ) {
$has_vulnerabilities = true;
$msg .= '' . __( 'Security check', 'wpscan' ) . ' ' . esc_html( $data['instance']->title() ) . '
';
}
}
$msg .= '' . sprintf(__( 'Found our WPScan security plugin helpful? Please %s', 'wpscan' ), 'leave a review.
');
$msg .= '' . __( 'Thank you,', 'wpscan' ) . '
';
$msg .= '';
if ( $has_vulnerabilities ) {
$subject = sprintf(
__( '[WPScan Alert] Some vulnerabilities were found in %s!', 'wpscan' ),
get_bloginfo( 'name' )
);
$headers = array( 'Content-Type: text/html; charset=UTF-8' );
wp_mail( $email, $subject, $msg, $headers );
}
}
/**
* List of vulnerabilities to send by mail
*
* @since 1.0.0
* @access public
* @return array
*/
public function email_vulnerabilities( $type, $name ) {
$report = $this->parent->get_report()[ $type ];
$ignored = $this->parent->get_ignored_vulnerabilities();
if ( array_key_exists( $name, $report ) ) {
$report = $report[ $name ];
}
if ( ! isset( $report['vulnerabilities'] ) ) {
return null;
}
$list = [];
foreach ( $report['vulnerabilities'] as $item ) {
$id = 'security-checks' === $type ? $item['id'] : $item->id;
$title = 'security-checks' === $type ? $item['title'] : $this->parent->get_sanitized_vulnerability_title( $item );
if ( in_array( $id, $ignored ) ) {
continue;
}
if ( 'security-checks' !== $type ) {
$html = '';
$html .= esc_html( $title );
$html .= ' ';
} else {
$html = esc_html( $title );
}
$list[] = $html;
}
return $list;
}
}