| Server IP : 54.36.91.62 / Your IP : 216.73.216.38 Web Server : Apache System : Linux webm008.cluster127.gra.hosting.ovh.net 6.18.42-ovh-vps-grsec-zfs+ #1 SMP PREEMPT_DYNAMIC Wed Aug 5 15:59:48 CEST 2026 x86_64 User : awaywithxm ( 25098) PHP Version : 7.0.33 Disable Function : _dyuweyrj4,_dyuweyrj4r,dl MySQL : OFF | cURL : ON | WGET : ON | Perl : ON | Python : ON | Sudo : OFF | Pkexec : OFF Directory : /home/awaywithxm/www/wp-content/plugins/secupress/inc/functions/ |
Upload File : |
<?php
defined( 'ABSPATH' ) or die( 'Cheatin’ uh?' );
/**
* First half of escaping for LIKE special characters % and _ before preparing for MySQL.
*
* Use this only before wpdb::prepare() or esc_sql(). Reversing the order is very bad for security.
*
* Example Prepared Statement:
* $wild = '%';
* $find = 'only 43% of planets';
* $like = $wild . $wpdb->esc_like( $find ) . $wild;
* $sql = $wpdb->prepare( "SELECT * FROM $wpdb->posts WHERE post_content LIKE %s", $like );
*
* Example Escape Chain:
* $sql = esc_sql( $wpdb->esc_like( $input ) );
*
* @since 1.0
* @since WP 4.0.0
*
* @param (string) $text The raw text to be escaped. The input typed by the user should have no extra or deleted slashes.
* @return (string) Text in the form of a LIKE phrase. The output is not SQL safe. Call $wpdb::prepare() or real_escape next.
*/
function secupress_esc_like( $text ) {
global $wpdb;
if ( method_exists( $wpdb, 'esc_like' ) ) {
return $wpdb->esc_like( $text );
}
return addcslashes( $text, '_%\\' );
}
/**
* Return the "unaliased" version of an email address.
*
* @since 1.0
*
* @param (string) $email An email address.
*
* @return (string)
*/
function secupress_remove_email_alias( $email ) {
$provider = strstr( $email, '@' );
$email = strstr( $email, '@', true );
$email = explode( '+', $email );
$email = reset( $email );
$email = str_replace( '.', '', $email );
return $email . $provider;
}
/**
* Return the email "example@example.com" like "e%x%a%m%p%l%e%@example.com"
*
* @since 1.0
*
* @param (string) $email An email address.
*
* @return (string)
*/
function secupress_prepare_email_for_like_search( $email ) {
$email = secupress_remove_email_alias( $email );
$provider = strstr( $email, '@' );
$email = secupress_esc_like( strstr( $email, '@', true ) );
$email = str_split( $email );
$email = implode( '%', $email );
return $email . '%' . $provider;
}
/**
* Generate a folder name using a hash in it.
*
* @since 1.0
*
* @param (string) $context Your context, don't use empty string.
* @param (string) $path The root base for this folder, optional.
*
* @return (string)
*/
function secupress_get_hashed_folder_name( $context = 'folder_name', $path = '/' ) {
return $path . 'secupress-' . secupress_generate_hash( $context, 8, 8 ) . '/';
}
/**
* Generate a hash.
*
* @since 1.0
*
* @param (string) $context Your context, don't use empty string.
* @param (int) $start Start of the `substr()`.
* @param (int) $length Length of the hash.
*
* @return (string)
*/
function secupress_generate_hash( $context, $start = 2, $length = 6 ) {
static $hash = array();
$key = "$context|$start|$length";
if ( ! isset( $hash[ $key ] ) ) {
$hash[ $key ] = substr( md5( secupress_get_option( 'hash_key' ) . $context ), $start, $length );
}
return $hash[ $key ];
}
/**
* Generate a random key.
*
* @since 1.0
*
* @param (int) $length Length of the key.
*
* @return (string)
*/
function secupress_generate_key( $length = 16 ) {
$chars = 'ABCDEFGHIJKLMNOPQRSTUVWXYZ234567';
$key = '';
for ( $i = 0; $i < $length; $i++ ) {
$key .= $chars[ wp_rand( 0, 31 ) ];
}
return $key;
}
/**
* Validate a range.
*
* @since 1.0
*
* @param (int) $value The value to test.
* @param (int) $min Minimum value.
* @param (int) $max Maximum value.
* @param (mixed) $default What to return if outside of the range. Default: false.
*
* @return (mixed) The value on success. `$default` on failure.
*/
function secupress_validate_range( $value, $min, $max, $default = false ) {
$test = filter_var( $value, FILTER_VALIDATE_INT, array( 'options' => array( 'min_range' => $min, 'max_range' => $max ) ) );
if ( false === $test ) {
return $default;
}
return $value;
}
/**
* Limit a number to a high and low value.
* A bit like `secupress_validate_range()` but:
* - cast the value as integer.
* - return the min/max value instead of false/default.
*
* @since 1.0
*
* @param (numeric) $value The value to limit.
* @param (int) $min The minimum value.
* @param (int) $max The maximum value.
*
* @return (int)
*/
function secupress_minmax_range( $value, $min, $max ) {
$value = (int) $value;
$value = max( $min, $value );
$value = min( $value, $max );
return $value;
}
/**
* Sanitize a `$separator` separated list by removing doubled-separators.
*
* @since 1.0
*
* @param (string) $list The list.
* @param (string) $separator The separator.
*
* @return (string) The list.
*/
function secupress_sanitize_list( $list, $separator = ', ' ) {
if ( empty( $list ) ) {
return '';
}
$trimed_sep = trim( $separator );
$double_sep = $trimed_sep . $trimed_sep;
$list = preg_replace( '/\s*' . $trimed_sep . '\s*/', $trimed_sep, $list );
$list = trim( $list, $trimed_sep . ' ' );
while ( false !== strpos( $list, $double_sep ) ) {
$list = str_replace( $double_sep, $trimed_sep, $list );
}
return str_replace( $trimed_sep, $separator, $list );
}
/**
* Apply `array_unique()` and `natcasesort()` on a list.
*
* @since 1.0
*
* @param (string|array) $list The list.
* @param (string|bool) $separator The separator. If not false, the function will explode and implode the list.
*
* @return (string|array) The list.
*/
function secupress_unique_sorted_list( $list, $separator = false ) {
if ( array() === $list || '' === $list ) {
return $list;
}
if ( false !== $separator ) {
$list = explode( $separator, $list );
}
$list = array_flip( array_flip( $list ) );
natcasesort( $list );
if ( false !== $separator ) {
$list = implode( $separator, $list );
}
return $list;
}