laipower/wp-content/plugins/wpscan/app/Dashboard.php

85 lines
1.7 KiB
PHP

<?php
namespace WPScan;
// Exit if accessed directly.
defined( 'ABSPATH' ) || exit;
/**
* Dashboard.
*
* Used for the dashboard widgets.
*
* @since 1.0.0
*/
class Dashboard {
/**
* Class constructor.
*
* @since 1.0.0
* @param object $parent parent.
* @access public
* @return void
*/
public function __construct( $parent ) {
$this->parent = $parent;
add_action( 'wp_dashboard_setup', array( $this, 'add_dashboard_widgets' ) );
}
/**
* Add the widget
*
* @since 1.0.0
* @access public
* @return void
*/
public function add_dashboard_widgets() {
if ( ! current_user_can( $this->parent->WPSCAN_ROLE ) ) {
return;
}
wp_add_dashboard_widget(
$this->parent->WPSCAN_DASHBOARD,
__( 'WPScan Status', 'wpscan' ),
array( $this, 'dashboard_widget_content' )
);
}
/**
* Render the widget
*
* @since 1.0.0
* @access public
* @return string
*/
public function dashboard_widget_content() {
$report = $this->parent->get_report();
if ( ! $this->parent->classes['settings']->api_token_set() ) {
echo esc_html( '<div>' . __( 'To use WPScan you have to setup your WPScan API Token.', 'wpscan' ) . '</div>' );
return;
}
if ( empty( $report ) ) {
echo esc_html( __( 'No Report available', 'wpscan' ) );
return;
}
$vulns = $this->parent->classes['report']->get_all_vulnerabilities();
if ( empty( $vulns ) ) {
echo esc_html( __( 'No vulnerabilities found', 'wpscan' ) );
}
echo '<div>';
foreach ( $vulns as $vuln ) {
$vuln = wp_kses( $vuln, array( 'a' => array( 'href' => array() ) ) ); // Only allow a href HTML tags.
echo "<div><span class='dashicons dashicons-warning is-red'></span>&nbsp; " . $vuln . "</div><br/>";
}
echo '</div>';
}
}