tmdinosaurcenter
/
tainacan
mirror of https://github.com/tainacan/tainacan
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

Add check to system check page for protected uploads folders #241

This commit is contained in:
leogermani 2019-08-02 15:05:14 -03:00
parent b2c779b1c2
commit 42351d4962
2 changed files with 35 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

10
src/admin/system-check/admin-page.php
View File

@ -88,6 +88,16 @@
</td>
</tr>
<tr>
<th scope="row"><?php _e('Protecting private uploads folders', 'tainacan'); ?></th>
<td>
<?php $this->check_protected_upload_folders(); ?>
<p class="description">
<?php _e('When files are attached to private items or collections, they are saved in special folders and the direct URL to them are never visible. However, it is recommended to block access to these folders in the server.', 'tainacan'); ?>
</p>
</td>
</tr>
<tr>
<th scope="row"><?php _e('Cron', 'tainacan'); ?></th>
<td>

25
src/admin/system-check/class-tainacan-system-check.php
View File

@ -506,6 +506,31 @@ class System_Check {
}
}
}
public function check_protected_upload_folders() {
$privateFiles = \Tainacan\Private_Files::get_instance();
$upload_dir = wp_get_upload_dir();
$base_url = $upload_dir['baseurl'];
$url = $base_url . '/' . $privateFiles->get_items_uploads_folder() . '/' . $privateFiles->get_private_folder_prefix() . '0000/0000/test.jpg';
$response = wp_remote_get( $url );
$code = wp_remote_retrieve_response_code( $response );
if ( $code != 403 ) {
$text = __('Your private folders are not protected. Please check our documentation on how to protect them.', 'tainacan');
$class = 'warning';
} else {
$text = __('Your private folders are protected!', 'tainacan');
$class = 'good';
}
printf( '<span class="%1$s"></span> %2$s', esc_attr( $class ), esc_html( $text ) );
}
}