FM / lib

/home/vianto5/.trash/cititower.mx/wp-content/plugins/wordfence/lib/

/home/vianto5/.trash/cititower.mx/wp-content/plugins/wordfence/lib

Name	Size	Mode	Actions
dashboard/	-	0755	rm
Diff/	-	0755	rm
rest-api/	-	0755	rm
.htaccess	354	0644	edit dl rm
compat.php	425	0644	edit dl rm
Diff.php	5762	0644	edit dl rm
diffResult.php	2869	0644	edit dl rm
email_genericAlert.php	1422	0644	edit dl rm
email_newIssues.php	9035	0644	edit dl rm
email_unlockRequest.php	2397	0644	edit dl rm
email_unsubscribeRequest.php	1077	0644	edit dl rm
flags.php	6779	0644	edit dl rm
GeoLite2-Country.mmdb	6511625	0644	edit dl rm
IPTraf.php	1190	0644	edit dl rm
IPTrafList.php	3054	0644	edit dl rm
live_activity.php	580	0644	edit dl rm
menu_dashboard.php	28671	0644	edit dl rm
menu_dashboard_options.php	15577	0644	edit dl rm
menu_firewall.php	2167	0644	edit dl rm
menu_firewall_blocking.php	10495	0644	edit dl rm
menu_firewall_blocking_options.php	4737	0644	edit dl rm
menu_firewall_waf.php	20443	0644	edit dl rm
menu_firewall_waf_options.php	11357	0644	edit dl rm
menu_install.php	1767	0644	edit dl rm
menu_options.php	24631	0644	edit dl rm
menu_scanner.php	22047	0644	edit dl rm
menu_scanner_credentials.php	2774	0644	edit dl rm
menu_scanner_options.php	8615	0644	edit dl rm
menu_support.php	18194	0644	edit dl rm
menu_tools.php	1438	0644	edit dl rm
menu_tools_diagnostic.php	50481	0644	edit dl rm
menu_tools_importExport.php	1310	0644	edit dl rm
menu_tools_livetraffic.php	40381	0644	edit dl rm
menu_tools_twoFactor.php	20070	0644	edit dl rm
menu_tools_whois.php	4722	0644	edit dl rm
menu_wordfence_central.php	9889	0644	edit dl rm
noc1.key	1683	0644	edit dl rm
sodium_compat_fast.php	185	0644	edit dl rm
sysinfo.php	1496	0644	edit dl rm
viewFullActivityLog.php	1501	0644	edit dl rm
wf503.php	9860	0644	edit dl rm
wfActivityReport.php	20945	0644	edit dl rm
wfAdminNoticeQueue.php	5323	0644	edit dl rm
wfAlerts.php	7549	0644	edit dl rm
wfAPI.php	9889	0644	edit dl rm
wfArray.php	1816	0644	edit dl rm
wfBrowscap.php	3996	0644	edit dl rm
wfBrowscapCache.php	262994	0644	edit dl rm
wfBulkCountries.php	10002	0644	edit dl rm
wfCache.php	6166	0644	edit dl rm
wfCentralAPI.php	25502	0644	edit dl rm
wfConfig.php	90755	0644	edit dl rm
wfCrawl.php	6722	0644	edit dl rm
wfCredentialsController.php	5284	0644	edit dl rm
wfCrypt.php	4146	0644	edit dl rm
wfCurlInterceptor.php	1047	0644	edit dl rm
wfDashboard.php	8399	0644	edit dl rm
wfDateLocalization.php	360582	0644	edit dl rm
wfDB.php	11764	0644	edit dl rm
wfDeactivationOption.php	2184	0644	edit dl rm
wfDiagnostic.php	67805	0644	edit dl rm
wfDict.php	738	0644	edit dl rm
wfDirectoryIterator.php	1937	0644	edit dl rm
wfFileUtils.php	2784	0644	edit dl rm
wfHelperBin.php	2015	0644	edit dl rm
wfHelperString.php	2180	0644	edit dl rm
wfImportExportController.php	3306	0644	edit dl rm
wfInaccessibleDirectoryException.php	303	0644	edit dl rm
wfInvalidPathException.php	266	0644	edit dl rm
wfIpLocation.php	1768	0644	edit dl rm
wfIpLocator.php	2810	0644	edit dl rm
wfIPWhitelist.php	1596	0644	edit dl rm
wfIssues.php	27917	0644	edit dl rm
wfJWT.php	5455	0644	edit dl rm
wfLicense.php	10682	0644	edit dl rm
wfLockedOut.php	9959	0644	edit dl rm
wfLog.php	58396	0644	edit dl rm
WFLSPHP52Compatability.php	1303	0644	edit dl rm
wfMD5BloomFilter.php	5327	0644	edit dl rm
wfModuleController.php	754	0644	edit dl rm
wfNotification.php	6564	0644	edit dl rm
wfOnboardingController.php	8421	0644	edit dl rm
wfPersistenceController.php	798	0644	edit dl rm
wfRESTAPI.php	377	0644	edit dl rm
wfScan.php	16300	0644	edit dl rm
wfScanEngine.php	136195	0644	edit dl rm
wfScanEntrypoint.php	1070	0644	edit dl rm
wfScanFile.php	1037	0644	edit dl rm
wfScanFileLink.php	403	0644	edit dl rm
wfScanFileListItem.php	408	0644	edit dl rm
wfScanFileProperties.php	1095	0644	edit dl rm
wfScanMonitor.php	4152	0644	edit dl rm
wfScanPath.php	1817	0644	edit dl rm
wfSchema.php	10744	0644	edit dl rm
wfStyle.php	285	0644	edit dl rm
wfSupportController.php	24552	0644	edit dl rm
wfUnlockMsg.php	1163	0644	edit dl rm
wfUpdateCheck.php	27888	0644	edit dl rm
wfUtils.php	112786	0644	edit dl rm
wfVersionCheckController.php	19729	0644	edit dl rm
wfVersionSupport.php	447	0644	edit dl rm
wfView.php	2269	0644	edit dl rm
wfViewResult.php	1450	0644	edit dl rm
wfWebsite.php	1792	0644	edit dl rm
wordfenceClass.php	451606	0644	edit dl rm
wordfenceConstants.php	3216	0644	edit dl rm
wordfenceHash.php	43726	0644	edit dl rm
wordfenceScanner.php	31200	0644	edit dl rm
wordfenceURLHoover.php	18804	0644	edit dl rm

Edit: /home/vianto5/.trash/cititower.mx/wp-content/plugins/wordfence/lib/wfCrawl.php (6722B)

<?php
require_once(dirname(__FILE__) . '/wfUtils.php');
class wfCrawl {
	const GOOGLE_BOT_VERIFIED = 'verified';
	const GOOGLE_BOT_FAKE = 'fakeBot';
	const GOOGLE_BOT_UNDETERMINED = 'undetermined';
	
	public static function isCrawler($UA){
		$browscap = new wfBrowscap();
		$b = $browscap->getBrowser($UA);
		if (!$b || $b['Parent'] == 'DefaultProperties') {
			$IP = wfUtils::getIP(); 
			return !wfLog::isHumanRequest($IP, $UA);
		}
		else if (isset($b['Crawler']) && $b['Crawler']) {
			return true;
		}
		
		return false;
	}
	public static function verifyCrawlerPTR($hostPattern, $IP){
		$table = wfDB::networkTable('wfCrawlers');
		$db = new wfDB();
		$IPn = wfUtils::inet_pton($IP);
		$ipHex = wfDB::binaryValueToSQLHex(wfUtils::inet_pton($IPn));
		$status = $db->querySingle("select status from $table where IP={$ipHex} and patternSig=UNHEX(MD5('%s')) and lastUpdate > unix_timestamp() - %d", $hostPattern, WORDFENCE_CRAWLER_VERIFY_CACHE_TIME);
		if($status){
			if($status == 'verified'){
				return true;
			} else {
				return false;
			}
		}
		$host = wfUtils::reverseLookup($IP);
		if(! $host){ 
			$db->queryWrite("insert into $table (IP, patternSig, status, lastUpdate, PTR) values ({$ipHex}, UNHEX(MD5('%s')), '%s', unix_timestamp(), '%s') ON DUPLICATE KEY UPDATE status='%s', lastUpdate=unix_timestamp(), PTR='%s'", $hostPattern, 'noPTR', '', 'noPTR', '');
			return false; 
		}
		if(preg_match($hostPattern, $host)){
			$resultIPs = wfUtils::resolveDomainName($host);
			$addrsMatch = false;
			foreach($resultIPs as $resultIP){
				if($resultIP == $IP){
					$addrsMatch = true;
					break;
				}
			}
			if($addrsMatch){
				$db->queryWrite("insert into $table (IP, patternSig, status, lastUpdate, PTR) values ({$ipHex}, UNHEX(MD5('%s')), '%s', unix_timestamp(), '%s') ON DUPLICATE KEY UPDATE status='%s', lastUpdate=unix_timestamp(), PTR='%s'", $hostPattern, 'verified', $host, 'verified', $host);
				return true;
			} else {
				$db->queryWrite("insert into $table (IP, patternSig, status, lastUpdate, PTR) values ({$ipHex}, UNHEX(MD5('%s')), '%s', unix_timestamp(), '%s') ON DUPLICATE KEY UPDATE status='%s', lastUpdate=unix_timestamp(), PTR='%s'", $hostPattern, 'fwdFail', $host, 'fwdFail', $host);
				return false;
			}
		} else {
			$db->queryWrite("insert into $table (IP, patternSig, status, lastUpdate, PTR) values ({$ipHex}, UNHEX(MD5('%s')), '%s', unix_timestamp(), '%s') ON DUPLICATE KEY UPDATE status='%s', lastUpdate=unix_timestamp(), PTR='%s'", $hostPattern, 'badPTR', $host, 'badPTR', $host);
			return false;
		}
	}
	public static function isGooglebot($userAgent = null){
		if ($userAgent === null) {
			$userAgent = isset($_SERVER['HTTP_USER_AGENT']) ? $_SERVER['HTTP_USER_AGENT'] : '';
		}
		return (bool) preg_match('/Googlebot\/\d\.\d/', $userAgent);
	}
	public static function isGoogleCrawler($userAgent = null){
		if ($userAgent === null) {
			$userAgent = isset($_SERVER['HTTP_USER_AGENT']) ? $_SERVER['HTTP_USER_AGENT'] : '';
		}
		foreach (self::$googPat as $pat) {
			if (preg_match($pat . 'i', $userAgent)) {
				return true;
			}
		}
		return false;
	}
	private static $googPat = array(
'@^Mozilla/5\\.0 \$.*Google Keyword Tool.*\$$@',
'@^Mozilla/5\\.0 \$.*Feedfetcher\\-Google.*\$$@',
'@^Feedfetcher\\-Google\\-iGoogleGadgets.*$@',
'@^searchbot admin\\@google\\.com$@',
'@^Google\\-Site\\-Verification.*$@',
'@^Google OpenSocial agent.*$@',
'@^.*Googlebot\\-Mobile/2\\..*$@',
'@^AdsBot\\-Google\\-Mobile.*$@',
'@^google \$.*Enterprise.*\$$@',
'@^Mediapartners\\-Google.*$@',
'@^GoogleFriendConnect.*$@',
'@^googlebot\\-urlconsole$@',
'@^.*Google Web Preview.*$@',
'@^Feedfetcher\\-Google.*$@',
'@^AppEngine\\-Google.*$@',
'@^Googlebot\\-Video.*$@',
'@^Googlebot\\-Image.*$@',
'@^Google\\-Sitemaps.*$@',
'@^Googlebot/Test.*$@',
'@^Googlebot\\-News.*$@',
'@^.*Googlebot/2\\.1.*$@',
'@^AdsBot\\-Google.*$@',
'@^Google$@'
	);

/**
	 * Has correct user agent and PTR record points to .googlebot.com domain.
	 *
	 * @param string|null $ip
	 * @param string|null $ua
	 * @return bool
	 */
	public static function isVerifiedGoogleCrawler($ip = null, $ua = null) {
		static $verified;
		if (!isset($verified)) {
			$verified = array();
		}
		if ($ip === null) {
			$ip = wfUtils::getIP();
		}
		
		if ($ip === null || $ip === false) { //Likely a CLI execution
			return false;
		}
		
		if (array_key_exists($ip, $verified)) {
			return $verified[$ip];
		}
		if (self::isGoogleCrawler($ua)) {
			if (self::verifyCrawlerPTR(wordfence::getLog()->getGooglePattern(), $ip)) {
				$verified[$ip] = true;
				return $verified[$ip];
			}
			$noc1Status = self::verifyGooglebotViaNOC1($ip);
			if ($noc1Status == self::GOOGLE_BOT_VERIFIED) {
				$verified[$ip] = true;
				return $verified[$ip];
			}
			else if ($noc1Status == self::GOOGLE_BOT_FAKE) {
				$verified[$ip] = false;
				return $verified[$ip];
			}
			
			return true; //We were unable to successfully validate Googlebot status so default to being permissive
		}
		$verified[$ip] = false;
		return $verified[$ip];
	}

/**
	 * Attempts to verify whether an IP claiming to be Googlebot is actually Googlebot.
	 * 
	 * @param string|null $ip
	 * @return string
	 */
	public static function verifyGooglebotViaNOC1($ip = null) {
		$table = wfDB::networkTable('wfCrawlers');
		if ($ip === null) {
			$ip = wfUtils::getIP();
		}
		$db = new wfDB();
		$IPn = wfUtils::inet_pton($ip);
		$ipHex = wfDB::binaryValueToSQLHex($IPn);
		$patternSig = 'googlenoc1';
		$status = $db->querySingle("select status from $table
				where IP={$ipHex}
				and patternSig=UNHEX(MD5('%s'))
				and lastUpdate > unix_timestamp() - %d",
				$patternSig,
				WORDFENCE_CRAWLER_VERIFY_CACHE_TIME);
		if ($status === 'verified') {
			return self::GOOGLE_BOT_VERIFIED;
		} else if ($status === 'fakeBot') {
			return self::GOOGLE_BOT_FAKE;
		}

$api = new wfAPI(wfConfig::get('apiKey'), wfUtils::getWPVersion());
		try {
			$data = $api->call('verify_googlebot', array(
				'ip' => $ip,
			));
			if (is_array($data) && !empty($data['verified'])) {
				// Cache results
				$db->queryWrite("INSERT INTO {$table} (IP, patternSig, status, lastUpdate) VALUES ({$ipHex}, UNHEX(MD5('%s')), '%s', unix_timestamp()) ON DUPLICATE KEY UPDATE status = VALUES(status), lastUpdate = VALUES(lastUpdate)", $patternSig, 'verified');
				return self::GOOGLE_BOT_VERIFIED;
			} else {
				$db->queryWrite("INSERT INTO {$table} (IP, patternSig, status, lastUpdate) VALUES ({$ipHex}, UNHEX(MD5('%s')), '%s', unix_timestamp()) ON DUPLICATE KEY UPDATE status = VALUES(status), lastUpdate = VALUES(lastUpdate)", $patternSig, 'fakeBot');
				self::GOOGLE_BOT_FAKE;
			}
		} catch (Exception $e) {
			// Do nothing, bail
		}
		return self::GOOGLE_BOT_UNDETERMINED;
	}
}

cmd: