85 lines
		
	
	
		
			1.7 KiB
		
	
	
	
		
			PHP
		
	
	
	
	
	
			
		
		
	
	
			85 lines
		
	
	
		
			1.7 KiB
		
	
	
	
		
			PHP
		
	
	
	
	
	
| <?php
 | |
| 
 | |
| namespace WPScan;
 | |
| 
 | |
| // Exit if accessed directly.
 | |
| defined( 'ABSPATH' ) || exit;
 | |
| 
 | |
| /**
 | |
|  * Dashboard.
 | |
|  *
 | |
|  * Used for the dashboard widgets.
 | |
|  *
 | |
|  * @since 1.0.0
 | |
|  */
 | |
| class Dashboard {
 | |
| 	/**
 | |
| 	 * Class constructor.
 | |
| 	 *
 | |
| 	 * @since 1.0.0
 | |
| 	 * @param object $parent parent.
 | |
| 	 * @access public
 | |
| 	 * @return void
 | |
| 	 */
 | |
| 	public function __construct( $parent ) {
 | |
| 		$this->parent = $parent;
 | |
| 
 | |
| 		add_action( 'wp_dashboard_setup', array( $this, 'add_dashboard_widgets' ) );
 | |
| 	}
 | |
| 
 | |
| 	/**
 | |
| 	 * Add the widget
 | |
| 	 *
 | |
| 	 * @since 1.0.0
 | |
| 	 * @access public
 | |
| 	 * @return void
 | |
| 	 */
 | |
| 	public function add_dashboard_widgets() {
 | |
| 		if ( ! current_user_can( $this->parent->WPSCAN_ROLE ) ) {
 | |
| 			return;
 | |
| 		}
 | |
| 
 | |
| 		wp_add_dashboard_widget(
 | |
| 			$this->parent->WPSCAN_DASHBOARD,
 | |
| 			__( 'WPScan Status', 'wpscan' ),
 | |
| 			array( $this, 'dashboard_widget_content' )
 | |
| 		);
 | |
| 	}
 | |
| 
 | |
| 	/**
 | |
| 	 * Render the widget
 | |
| 	 *
 | |
| 	 * @since 1.0.0
 | |
| 	 * @access public
 | |
| 	 * @return string
 | |
| 	 */
 | |
| 	public function dashboard_widget_content() {
 | |
| 		$report = $this->parent->get_report();
 | |
| 
 | |
| 		if ( ! $this->parent->classes['settings']->api_token_set() ) {
 | |
| 			echo esc_html( '<div>' . __( 'To use WPScan you have to setup your WPScan API Token.', 'wpscan' ) . '</div>' );
 | |
| 			return;
 | |
| 		}
 | |
| 
 | |
| 		if ( empty( $report ) ) {
 | |
| 			echo esc_html( __( 'No Report available', 'wpscan' ) );
 | |
| 			return;
 | |
| 		}
 | |
| 
 | |
| 		$vulns = $this->parent->classes['report']->get_all_vulnerabilities();
 | |
| 
 | |
| 		if ( empty( $vulns ) ) {
 | |
| 			echo esc_html( __( 'No vulnerabilities found', 'wpscan' ) );
 | |
| 		}
 | |
| 
 | |
| 		echo '<div>';
 | |
| 
 | |
| 		foreach ( $vulns as $vuln ) {
 | |
| 			$vuln = wp_kses( $vuln, array( 'a' => array( 'href' => array() ) ) ); // Only allow a href HTML tags.
 | |
| 			echo "<div><span class='dashicons dashicons-warning is-red'></span>  " . $vuln . "</div><br/>";
 | |
| 		}
 | |
| 
 | |
| 		echo '</div>';
 | |
| 	}
 | |
| }
 |