bzk d dl Z d dlZd dlZd dlmZ d dlmZ d dlmZm Z m
Z
m Z d dl m
Z
d dlmZ d dlmZmZmZ d dlmZ d d lmZmZmZ d d
lmZm Z d d l m Z d d l m Z d d
l!m"Z" d dlm#Z# d dl$m%Z% d dl&m'Z'm(Z(m)Z) d dl*m+Z+m,Z, d dl!m-Z-m.Z.m/Z/ d dl0m1Z1 d dl2m3Z3 ej4 e5 Z6 edej7 Z8 edej7 Z9 ed Z: ed Z;e:dz Zd e?fd Z@ G d d ee ZAdS ) N)Path) Coroutine)ANTIVIRUS_MODEConfigValidationError SystemConfig
UserConfig) HookEvent) MessageType) MessageSink
MessageSourceexpect)
hosting_panel)
load_stateregister_lock_file
save_state)Scoperecurring_check)
check_lock)DAY)plugin) WordpressWPSite)get_sites_by_pathget_sites_for_userget_installed_sites)is_secret_expired
rotate_secret)ChangelogProcessorIncidentCollectorIncidentSender) update_disabled_rules_on_sites) delete_old_wordpress_incidentsz wp-gen-authzwp-site-processz-/etc/sysconfig/imunify360/imunify360.config.dzF/opt/imunify360/venv/share/imunify360/11_on_first_install_wp_av.configz 11_on_first_install_wp_av.configz .11_on_first_install_wp_av.flagstarted_timestampreturnc ddl m} | | S # t $ r t d g cY S w xY w)z
Get malware hits cleaned since the given timestamp with lazy import fallback.
Returns empty list if imav.malwarelib is not available.
r )
MalwareHitz;imav.malwarelib not available, returning empty cleaned hits)imav.malwarelib.modelr'
cleaned_since ImportErrorloggerdebug)r$ r' s V/opt/imunify360/venv/lib/python3.11/site-packages/defence360agent/plugins/wordpress.py_get_cleaned_malware_hitsr. F sm 444444''(9::: I
s &AAc e Zd Zej Zd Zd Zd Zd Z d Z
d Z d Z d Z
d ej fd
Zd d efd
Zd Z eedee d Z eedde d Zd Zd Z d Z d Z d Z e e!j" d Z# e e!j$ d Z% e e!j$ d Z& e e!j$ d Z' e e(j) d Z* e e(j+ d Z,d S )!ImunifySecurityPluginc f d | _ d | _ t d }| d | _ | d }||n t
j | _ t j | _
t j | _ i | _
t j | _ t j | _ d | _ d | _ d | _ t+ | _ t/ | _ t3 | _ t7 | _ d | _ d S )Nr0 installedenabled) _loop_sinkr getinstallation_completedr SECURITY_PLUGIN_ENABLEDlast_config_valuer _get_global_waf_enabled_last_waf_enabled_get_waf_default_last_waf_default_last_user_waf_enabled _get_global_ai_bot_protection_last_ai_bot_protection$_get_global_ai_bot_protection_preset _last_ai_bot_protection_presetinstallation_task
deleting_taskinstall_and_update_tasksetfreshly_installed_sitesr incident_collectorr! incident_senderr changelog_processor_site_processing_task)selfstatepersisted_enableds r- __init__z ImunifySecurityPlugin.__init__Z s
233&+ii &<&<# "IIi 0 0 !,
2
"(!?!A!A !'!8!:!: >@# (.'K'M'M$ 7 9 9
+ 7; 26<@$47EE$ #4"5"5 - / / #5#7#7 :>""" c
K d S N )rL loops r- create_sinkz!ImunifySecurityPlugin.create_sink{ s rP c K || _ || _ | j | | _ | j | | _ t r| d {V nt
d | d {V d S )NT)
missing_ok) r4 r5 create_taskrefresh_auth_files_update_auth_taskprocess_wordpress_sitesrK r _apply_first_install_configFIRST_INSTALL_FLAGunlink _recover_installation_on_startup)rL rT sinks r-
create_sourcez#ImunifySecurityPlugin.create_source~ s
!%!7!7 # # % %"
"
&*Z%;%; ( ( * *&
&
" 72244 4 4 4 4 4 4 4 4 % % % 6 6 63355555555555rP c , K | j s t j sdS t d d| _ | t j | j d{V | j
!| j
| j dS dS )a
Self-heal when the installation state was lost.
If the feature is enabled but installation_completed is falsy (state
file missing, earlier install interrupted, etc.), manage_plugin_installation
can never recover: its True == True guard always returns early.
Trigger install_everywhere once per restart to repopulate the
wordpress_site table and flip the flag.
NzXInstallation state is missing while feature is enabled; triggering startup self-recoveryTr` )
r7 r r8 r+ infor9 process_installationr install_everywherer5 rC add_done_callback_mark_installation_donerL s r- r_ z6ImunifySecurityPlugin._recover_installation_on_startup s
' 4
F
/
"& '' %4: 6 6 6
! - " 4 4,
. -rP c f K t sd S t j d {V dk rKt
t }t
d t
d S )N i ) r] existsr HostingPanel users_countFIRST_INSTALL_CONFIG_PATH
write_textFIRST_INSTALL_CONFIG_FILE read_textchmodr^ )rL _s r- r\ z1ImunifySecurityPlugin._apply_first_install_config s !((** F +--99;; ; ; ; ; ; ;q @ @)44)3355 A
& + +E 2 2 2!!#####rP c K | j | j d {V | j r(| j | j d {V d S d S rR )rZ cancelrK ri s r- shutdownz ImunifySecurityPlugin.shutdown s %%'''$$$$$$$$ % - & - - / / /, , , , , , , , , , - -rP c t | | s t d| dS t | | }|d uo)| o| S )NzUnknown task '%s'F)hasattrr+ errorgetattrdone cancelled)rL task_attr_nametasks r- _task_in_progressz'ImunifySecurityPlugin._task_in_progress si t^,, LL,n = = =5t^,,4 L OLDNNFeature was disabled during installation, skipping flag updateT)r} r+ rd exceptionrz r9 r7 r )rL r excs r- rh z-ImunifySecurityPlugin._mark_installation_done s >> KK9 : : : Fnn ? LL7 = = = F% KK'
F&*# %%'''''rP Fcoroc K | d r\|r| d S | j r=| j | j d {V n# t j $ r Y nw xY w| d r0t d | d S t j | | _ d S )NrD rC z Installation is already running)
r closerD rv asyncioCancelledErrorr+ warningrX rC )rL r
for_new_sitess r- re z*ImunifySecurityPlugin.process_installation s ! !/ 2 2
!
"))+++ ,,,,,,,,, - D ! !"5 6 6 NN< = = = JJLLL F!(!4T!:!: s
A A10A1c P K | d rD| j r=| j | j d {V n# t j $ r Y nw xY w| d r t
d d S t j | | _ d S )NrC rD zDeleting is already running) r rC rv r r r+ r rX rD )rL r s r- process_deletingz&ImunifySecurityPlugin.process_deleting s ! !"5 6 6 %
&--/// 000000000 - D ! !/ 2 2 NN8 9 9 9 F $ 0 6 6s
A AAT)check_period_firstcheck_lock_period lock_filec K t rt d {V t j | j d {V d S Nrc )r r r update_auth_everywherer5 ri s r- rY z(ImunifySecurityPlugin.refresh_auth_files s` " // ! ! ! ! ! ! !+<<<<<<<<<<<