wp-security/index.php at main · Codeko/wp-security · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
<?php
/**
 * Plugin Name: POLA-CDK - WP Security
 * Description: Improves security of WordPress
 * Version: 1.0.3
 * Author: Pola Network
 * Author URI: https://github.com/Codeko/wp-security
 */

use PolaCDK\PolaCDK_Control;

if (!defined('ABSPATH')) {
    exit;
}

add_action( 'init', 'wp_security_github_plugin_updater' );

function wp_security_github_plugin_updater() {
    if (class_exists('\PolaCDK\PolaCDK_Control') ) {
        $config = array(
            'slug' => plugin_basename(__FILE__), // this is the slug of your plugin
            'proper_folder_name' => 'wp-security', // this is the name of the folder your plugin lives in
            'api_url' => 'https://api.github.com/repos/Codeko/wp-security', // the GitHub API url of your GitHub repo
            'raw_url' => 'https://raw.github.com/Codeko/wp-security/main', // the GitHub raw url of your GitHub repo
            'github_url' => 'https://github.com/Codeko/wp-security', // the GitHub url of your GitHub repo
            'zip_url' => 'https://github.com/Codeko/wp-security/zipball/main', // the zip url of the GitHub repo
            'sslverify' => true, // whether WP should check the validity of the SSL cert when getting an update, see https://github.com/jkudish/WordPress-GitHub-Plugin-Updater/issues/2 and https://github.com/jkudish/WordPress-GitHub-Plugin-Updater/issues/4 for details
            'requires' => '6.4.1', // which version of WordPress does your plugin require?
            'tested' => '6.4.1', // which version of WordPress is your plugin tested up to?
            'readme' => 'README.md', // which file to use as the readme for the version number
        );
        PolaCDK_Control::plugin_updater($config);
    }
}

function wp_security_custom_author_url(){
    return home_url('/');
}
add_filter('author_link', 'wp_security_custom_author_url');

function wp_security_disable_feed(){
    global $wp_query;
    $wp_query->set_404();
    status_header(404);
    nocache_headers();
    exit;
}

function wp_security_remove_feed_after_load(){
    add_action('do_feed', 'wp_security_disable_feed', 1);
    add_action('do_feed_rdf', 'wp_security_disable_feed', 1);
    add_action('do_feed_rss', 'wp_security_disable_feed', 1);
    add_action('do_feed_rss2', 'wp_security_disable_feed', 1);
    add_action('do_feed_atom', 'wp_security_disable_feed', 1);
    add_action('do_feed_rss2_comments', 'wp_security_disable_feed', 1);
    add_action('do_feed_atom_comments', 'wp_security_disable_feed', 1);
    remove_action('wp_head', 'feed_links_extra', 3);
    remove_action('wp_head', 'feed_links', 2);
}

add_action('plugins_loaded', 'wp_security_remove_feed_after_load');

add_filter( 'xmlrpc_methods', 'wp_security_sar_block_xmlrpc_attacks' );

/**
 * Unset XML-RPC Methods.
 *
 * @param array $methods Array of current XML-RPC methods.
 */
function wp_security_sar_block_xmlrpc_attacks( $methods ) {
    unset( $methods['pingback.ping'] );
    unset( $methods['pingback.extensions.getPingbacks'] );
    return $methods;
}

/**
 * Check WP version.
 */
if ( version_compare( get_bloginfo( 'version' ), '4.4', '>=' ) ) {

    add_action( 'wp', 'wp_security_sar_remove_x_pingback_header_44', 9999 );

    /**
     * Remove X-Pingback from Header for WP 4.4+.
     */
    function wp_security_sar_remove_x_pingback_header_44() {
        header_remove( 'X-Pingback' );
    }
} elseif ( version_compare( get_bloginfo( 'version' ), '4.4', '<' ) ) {

    add_filter( 'wp_headers', 'wp_security_sar_remove_x_pingback_header' );

    /**
     * Remove X-Pingback from Header for older WP versions.
     *
     * @param array $headers Array with current headers.
     */
    function wp_security_sar_remove_x_pingback_header( $headers ) {
        unset( $headers['X-Pingback'] );
        return $headers;
    }
}