getTraceAsString()); $trace = array_reverse($trace); array_shift($trace); array_pop($trace); $length = count($trace); $result = array(); for($i = 0; $i < $length; $i++){ $result[] = ($i + 1).')'.substr($trace[$i], strpos($trace[$i], ' ')); } return "Traceback:\n ".implode("\n ", $result); } // Delete all credentials when deleting user function wwa_delete_user($user_id){ $res_id = wwa_generate_random_string(5); $user_data = get_userdata($user_id); $all_user_meta = wwa_get_option('user_id'); $user_key = ''; // Delete user meta foreach($all_user_meta as $user => $id){ if($user === $user_data->user_login){ $user_key = $id; wwa_add_log($res_id, "Delete user_key => \"".$id."\""); unset($all_user_meta[$user]); } } // Delete credentials $all_credentials_meta = json_decode(wwa_get_option('user_credentials_meta'), true); $all_credentials = json_decode(wwa_get_option('user_credentials'), true); foreach($all_credentials_meta as $credential => $meta){ if($user_key === $meta['user']){ wwa_add_log($res_id, "Delete credential => \"".$credential."\""); unset($all_credentials_meta[$credential]); unset($all_credentials[$credential]); } } wwa_update_option('user_id', $all_user_meta); wwa_update_option('user_credentials_meta', wp_json_encode($all_credentials_meta)); wwa_update_option('user_credentials', wp_json_encode($all_credentials)); wwa_add_log($res_id, "Deleted user => \"".$user_data->user_login."\""); } add_action('delete_user', 'wwa_delete_user'); // Add CSS and JS in login page function wwa_login_js(){ $wwa_not_allowed = false; if(!function_exists('mb_substr') || !function_exists('gmp_intval') || !wwa_check_ssl() && (wp_parse_url(site_url(), PHP_URL_HOST) !== 'localhost' && wp_parse_url(site_url(), PHP_URL_HOST) !== '127.0.0.1')){ $wwa_not_allowed = true; } wp_enqueue_script('wwa_login', plugins_url('js/login.js', __FILE__), array(), get_option('wwa_version')['version'], true); $first_choice = wwa_get_option('first_choice'); wp_localize_script('wwa_login', 'php_vars', array( 'ajax_url' => admin_url('admin-ajax.php'), 'admin_url' => admin_url(), 'usernameless' => (wwa_get_option('usernameless_login') === false ? 'false' : wwa_get_option('usernameless_login')), 'remember_me' => (wwa_get_option('remember_me') === false ? 'false' : wwa_get_option('remember_me')), 'email_login' => (wwa_get_option('email_login') === false ? 'false' : wwa_get_option('email_login')), 'allow_authenticator_type' => (wwa_get_option('allow_authenticator_type') === false ? "none" : wwa_get_option('allow_authenticator_type')), 'webauthn_only' => ($first_choice === 'webauthn' && !$wwa_not_allowed) ? 'true' : 'false', 'password_reset' => ((wwa_get_option('password_reset') === false || wwa_get_option('password_reset') === 'off') ? 'false' : 'true'), 'separator' => apply_filters('login_link_separator', ' | '), 'i18n_1' => __('Auth', 'wp-webauthn'), 'i18n_2' => __('Authenticate with WebAuthn', 'wp-webauthn'), 'i18n_3' => __('Hold on...', 'wp-webauthn'), 'i18n_4' => __('Please proceed...', 'wp-webauthn'), 'i18n_5' => __('Authenticating...', 'wp-webauthn'), 'i18n_6' => ' '.__('Authenticated', 'wp-webauthn').'', 'i18n_7' => ' '.__('Auth failed', 'wp-webauthn').'', 'i18n_8' => __('It looks like your browser doesn\'t support WebAuthn, which means you may unable to login.', 'wp-webauthn'), 'i18n_9' => __('Username', 'wp-webauthn'), 'i18n_10' => __('Username or Email Address'), 'i18n_11' => __('Error: The username field is empty.', 'wp-webauthn'), 'i18n_12' => ''.__('Try to enter the username', 'wp-webauthn').'' )); if($first_choice === 'true' || $first_choice === 'webauthn'){ wp_enqueue_script('wwa_default', plugins_url('js/default_wa.js', __FILE__), array(), get_option('wwa_version')['version'], true); } wp_enqueue_style('wwa_login_css', plugins_url('css/login.css', __FILE__), array(), get_option('wwa_version')['version']); } add_action('login_enqueue_scripts', 'wwa_login_js', 999); // Disable password login function wwa_disable_password($user){ if(!function_exists('mb_substr') || !function_exists('gmp_intval') || !wwa_check_ssl() && (wp_parse_url(site_url(), PHP_URL_HOST) !== 'localhost' && wp_parse_url(site_url(), PHP_URL_HOST) !== '127.0.0.1')){ return $user; } if(wwa_get_option('first_choice') === 'webauthn'){ return new WP_Error('wwa_password_disabled', __('Logging in with password has been disabled by the site manager.', 'wp-webauthn')); } if(is_wp_error($user)){ return $user; } if(get_the_author_meta('webauthn_only', $user->ID) === 'true'){ return new WP_Error('wwa_password_disabled_for_account', __('Logging in with password has been disabled for this account.', 'wp-webauthn')); } return $user; } add_filter('wp_authenticate_user', 'wwa_disable_password', 10, 1); function wwa_handle_user_register($user_id){ if(wwa_get_option('password_reset') === 'admin' || wwa_get_option('password_reset') === 'all'){ update_user_option($user_id, 'default_password_nag', false); } if(wwa_get_option('after_user_registration') === 'login'){ wp_set_current_user($user_id); wp_set_auth_cookie($user_id); wp_redirect(admin_url('profile.php?wwa_registered=true#wwa-webauthn-start')); exit; } } add_action('register_new_user', 'wwa_handle_user_register'); // Disable Password Reset URL & Redirect function wwa_disable_lost_password(){ if((wwa_get_option('password_reset') === 'admin' || wwa_get_option('password_reset') === 'all') && isset($_GET['action'])){ if(in_array($_GET['action'], array('lostpassword', 'retrievepassword', 'resetpass', 'rp'))){ wp_redirect(wp_login_url(), 302); exit; } } } function wwa_handle_lost_password_html_link($link){ if(wwa_get_option('password_reset') === 'admin' || wwa_get_option('password_reset') === 'all'){ return ''; } return $link; } function wwa_handle_password(){ if(wwa_get_option('password_reset') === 'admin' || wwa_get_option('password_reset') === 'all'){ if(wwa_get_option('password_reset') === 'admin'){ if(current_user_can('edit_users')){ return true; } } return false; } return true; } if(wwa_get_option('password_reset') === 'admin' || wwa_get_option('password_reset') === 'all'){ add_action('login_init', 'wwa_disable_lost_password'); add_filter('lost_password_html_link', 'wwa_handle_lost_password_html_link'); add_filter('show_password_fields', 'wwa_handle_password'); add_filter('allow_password_reset', 'wwa_handle_password'); } // Show a notice in admin pages function wwa_no_authenticator_warning(){ $user_info = wp_get_current_user(); $first_choice = wwa_get_option('first_choice'); $check_self = true; if($first_choice !== 'webauthn' && get_the_author_meta('webauthn_only', $user_info->ID ) !== 'true'){ $check_self = false; } if($check_self){ // Check current user $user_id = ''; $show_notice_flag = false; if(!isset(wwa_get_option('user_id')[$user_info->user_login])){ $show_notice_flag = true; }else{ $user_id = wwa_get_option('user_id')[$user_info->user_login]; } if(!$show_notice_flag){ $show_notice_flag = true; $data = json_decode(wwa_get_option('user_credentials_meta'), true); foreach($data as $value){ if($user_id === $value['user']){ $show_notice_flag = false; break; } } } if($show_notice_flag){?>

Register', 'wp-webauthn'), $first_choice === 'webauthn' ? __('the site', 'wp-webauthn') : __('your account', 'wp-webauthn'), admin_url('profile.php'));?>

ID){ $user_id_wp = intval($_GET['user_id']); if($user_id_wp <= 0){ return; } if(!current_user_can('edit_user', $user_id_wp)){ return; } $user_info = get_user_by('id', $user_id_wp); if($user_info === false){ return; } if($first_choice !== 'webauthn' && get_the_author_meta('webauthn_only', $user_info->ID) !== 'true'){ return; } $user_id = ''; $show_notice_flag = false; if(!isset(wwa_get_option('user_id')[$user_info->user_login])){ $show_notice_flag = true; }else{ $user_id = wwa_get_option('user_id')[$user_info->user_login]; } if(!$show_notice_flag){ $show_notice_flag = true; $data = json_decode(wwa_get_option('user_credentials_meta'), true); foreach($data as $value){ if($user_id === $value['user']){ $show_notice_flag = false; break; } } } if($show_notice_flag){ ?>

this account haven\'t register any WebAuthn authenticator yet. This user may unable to login.', 'wp-webauthn'), $first_choice === 'webauthn' ? __('the site', 'wp-webauthn') : __('this account', 'wp-webauthn'));?>

'.__('Settings', 'wp-webauthn').''; } return $links_array; } add_filter('plugin_action_links', 'wwa_settings_link', 10, 2); function wwa_meta_link($links_array, $plugin_file_name){ if($plugin_file_name === 'wp-webauthn/wp-webauthn.php'){ $links_array[] = ''.__('GitHub', 'wp-webauthn').''; $links_array[] = ''.__('Documentation', 'wp-webauthn').''; } return $links_array; } add_filter('plugin_row_meta', 'wwa_meta_link', 10, 2); // Check if we are under HTTPS function wwa_check_ssl() { if (isset($_SERVER['HTTPS']) && $_SERVER['HTTPS'] !== 'off' && $_SERVER['HTTPS'] !== '') { return true; } if (!empty($_SERVER['HTTP_X_FORWARDED_PROTO']) && $_SERVER['HTTP_X_FORWARDED_PROTO'] === 'https' || !empty($_SERVER['HTTP_X_FORWARDED_SSL']) && $_SERVER['HTTP_X_FORWARDED_SSL'] === 'on') { return true; } if (isset($_SERVER['SERVER_PROTOCOL']) && $_SERVER['SERVER_PROTOCOL'] === 'HTTP/3.0') { return true; } if (isset($_SERVER['REQUEST_SCHEME']) && ($_SERVER['REQUEST_SCHEME'] === 'quic' || $_SERVER['REQUEST_SCHEME'] === 'https')) { return true; } return false; } // Check user privileges function wwa_validate_privileges() { $user = wp_get_current_user(); $allowed_roles = array('administrator'); if(array_intersect($allowed_roles, $user->roles)){ return true; } return false; } // Get user by username or email function wwa_get_user($username) { if(wwa_get_option('email_login') !== 'true'){ return get_user_by('login', $username); }else{ if(is_email($username)){ return get_user_by('email', $username); } return get_user_by('login', $username); } }