Root Explorer PHP

[ Root System Explorer ]

Editing: class-wp-recovery-mode-key-service.php

<?php
/**
 * Error Protection API: WP_Recovery_Mode_Key_Service class
 *
 * @package WordPress
 * @since   5.2.0
 */

/**
 * Core class used to generate and validate keys used to enter Recovery Mode.
 *
 * @since 5.2.0
 */
final class WP_Recovery_Mode_Key_Service {

/**
	 * The option name used to store the keys.
	 *
	 * @since 5.2.0
	 * @var string
	 */
	private $option_name = 'recovery_keys';

/**
	 * Creates a recovery mode token.
	 *
	 * @since 5.2.0
	 *
	 * @return string $token A random string to identify its associated key in storage.
	 */
	public function generate_recovery_mode_token() {
		return wp_generate_password( 22, false );
	}

/**
	 * Creates a recovery mode key.
	 *
	 * @since 5.2.0
	 *
	 * @global PasswordHash $wp_hasher
	 *
	 * @param string $token A token generated by {@see generate_recovery_mode_token()}.
	 * @return string $key Recovery mode key.
	 */
	public function generate_and_store_recovery_mode_key( $token ) {

global $wp_hasher;

$key = wp_generate_password( 22, false );

if ( empty( $wp_hasher ) ) {
			require_once ABSPATH . WPINC . '/class-phpass.php';
			$wp_hasher = new PasswordHash( 8, true );
		}

$hashed = $wp_hasher->HashPassword( $key );

$records = $this->get_keys();

$records[ $token ] = array(
			'hashed_key' => $hashed,
			'created_at' => time(),
		);

$this->update_keys( $records );

/**
		 * Fires when a recovery mode key is generated.
		 *
		 * @since 5.2.0
		 *
		 * @param string $token The recovery data token.
		 * @param string $key   The recovery mode key.
		 */
		do_action( 'generate_recovery_mode_key', $token, $key );

return $key;
	}

/**
	 * Verifies if the recovery mode key is correct.
	 *
	 * Recovery mode keys can only be used once; the key will be consumed in the process.
	 *
	 * @since 5.2.0
	 *
	 * @param string $token The token used when generating the given key.
	 * @param string $key   The unhashed key.
	 * @param int    $ttl   Time in seconds for the key to be valid for.
	 * @return true|WP_Error True on success, error object on failure.
	 */
	public function validate_recovery_mode_key( $token, $key, $ttl ) {

$records = $this->get_keys();

if ( ! isset( $records[ $token ] ) ) {
			return new WP_Error( 'token_not_found', __( 'Recovery Mode not initialized.' ) );
		}

$record = $records[ $token ];

$this->remove_key( $token );

if ( ! is_array( $record ) || ! isset( $record['hashed_key'], $record['created_at'] ) ) {
			return new WP_Error( 'invalid_recovery_key_format', __( 'Invalid recovery key format.' ) );
		}

if ( ! wp_check_password( $key, $record['hashed_key'] ) ) {
			return new WP_Error( 'hash_mismatch', __( 'Invalid recovery key.' ) );
		}

if ( time() > $record['created_at'] + $ttl ) {
			return new WP_Error( 'key_expired', __( 'Recovery key expired.' ) );
		}

return true;
	}

/**
	 * Removes expired recovery mode keys.
	 *
	 * @since 5.2.0
	 *
	 * @param int $ttl Time in seconds for the keys to be valid for.
	 */
	public function clean_expired_keys( $ttl ) {

$records = $this->get_keys();

foreach ( $records as $key => $record ) {
			if ( ! isset( $record['created_at'] ) || time() > $record['created_at'] + $ttl ) {
				unset( $records[ $key ] );
			}
		}

$this->update_keys( $records );
	}

/**
	 * Removes a used recovery key.
	 *
	 * @since 5.2.0
	 *
	 * @param string $token The token used when generating a recovery mode key.
	 */
	private function remove_key( $token ) {

$records = $this->get_keys();

if ( ! isset( $records[ $token ] ) ) {
			return;
		}

unset( $records[ $token ] );

$this->update_keys( $records );
	}

/**
	 * Gets the recovery key records.
	 *
	 * @since 5.2.0
	 *
	 * @return array Associative array of $token => $data pairs, where $data has keys 'hashed_key'
	 *               and 'created_at'.
	 */
	private function get_keys() {
		return (array) get_option( $this->option_name, array() );
	}

/**
	 * Updates the recovery key records.
	 *
	 * @since 5.2.0
	 *
	 * @param array $keys Associative array of $token => $data pairs, where $data has keys 'hashed_key'
	 *                    and 'created_at'.
	 * @return bool True on success, false on failure.
	 */
	private function update_keys( array $keys ) {
		return update_option( $this->option_name, $keys );
	}
}

[ CANCEL ]

Name	Type	Actions
.. (Parent Directory)
📁 ID3/	DIR
📁 IXR/	DIR
📁 Requests/	DIR
📁 SimplePie/	DIR
📁 Text/	DIR
📄 admin-bar.php	FILE	[EDIT]
📄 atomlib.php	FILE	[EDIT]
📄 author-template.php	FILE	[EDIT]
📁 blocks/	DIR
📄 blocks.php	FILE	[EDIT]
📄 bookmark-template.php	FILE	[EDIT]
📄 bookmark.php	FILE	[EDIT]
📄 cache.php	FILE	[EDIT]
📄 canonical.php	FILE	[EDIT]
📄 capabilities.php	FILE	[EDIT]
📄 category-template.php	FILE	[EDIT]
📄 category.php	FILE	[EDIT]
📁 certificates/	DIR
📄 class-IXR.php	FILE	[EDIT]
📄 class-feed.php	FILE	[EDIT]
📄 class-http.php	FILE	[EDIT]
📄 class-json.php	FILE	[EDIT]
📄 class-oembed.php	FILE	[EDIT]
📄 class-phpass.php	FILE	[EDIT]
📄 class-phpmailer.php	FILE	[EDIT]
📄 class-pop3.php	FILE	[EDIT]
📄 class-requests.php	FILE	[EDIT]
📄 class-simplepie.php	FILE	[EDIT]
📄 class-smtp.php	FILE	[EDIT]
📄 class-snoopy.php	FILE	[EDIT]
📄 class-walker-category-dropdown.php	FILE	[EDIT]
📄 class-walker-category.php	FILE	[EDIT]
📄 class-walker-comment.php	FILE	[EDIT]
📄 class-walker-nav-menu.php	FILE	[EDIT]
📄 class-walker-page-dropdown.php	FILE	[EDIT]
📄 class-walker-page.php	FILE	[EDIT]
📄 class-wp-admin-bar.php	FILE	[EDIT]
📄 class-wp-ajax-response.php	FILE	[EDIT]
📄 class-wp-block-parser.php	FILE	[EDIT]
📄 class-wp-block-type-registry.php	FILE	[EDIT]
📄 class-wp-block-type.php	FILE	[EDIT]
📄 class-wp-comment-query.php	FILE	[EDIT]
📄 class-wp-comment.php	FILE	[EDIT]
📄 class-wp-customize-control.php	FILE	[EDIT]
📄 class-wp-customize-manager.php	FILE	[EDIT]
📄 class-wp-customize-nav-menus.php	FILE	[EDIT]
📄 class-wp-customize-panel.php	FILE	[EDIT]
📄 class-wp-customize-section.php	FILE	[EDIT]
📄 class-wp-customize-setting.php	FILE	[EDIT]
📄 class-wp-customize-widgets.php	FILE	[EDIT]
📄 class-wp-dependency.php	FILE	[EDIT]
📄 class-wp-editor.php	FILE	[EDIT]
📄 class-wp-embed.php	FILE	[EDIT]
📄 class-wp-error.php	FILE	[EDIT]
📄 class-wp-fatal-error-handler.php	FILE	[EDIT]
📄 class-wp-feed-cache-transient.php	FILE	[EDIT]
📄 class-wp-feed-cache.php	FILE	[EDIT]
📄 class-wp-hook.php	FILE	[EDIT]
📄 class-wp-http-cookie.php	FILE	[EDIT]
📄 class-wp-http-curl.php	FILE	[EDIT]
📄 class-wp-http-encoding.php	FILE	[EDIT]
📄 class-wp-http-ixr-client.php	FILE	[EDIT]
📄 class-wp-http-proxy.php	FILE	[EDIT]
📄 class-wp-http-requests-hooks.php	FILE	[EDIT]
📄 class-wp-http-requests-response.php	FILE	[EDIT]
📄 class-wp-http-response.php	FILE	[EDIT]
📄 class-wp-http-streams.php	FILE	[EDIT]
📄 class-wp-image-editor-gd.php	FILE	[EDIT]
📄 class-wp-image-editor-imagick.php	FILE	[EDIT]
📄 class-wp-image-editor.php	FILE	[EDIT]
📄 class-wp-list-util.php	FILE	[EDIT]
📄 class-wp-locale-switcher.php	FILE	[EDIT]
📄 class-wp-locale.php	FILE	[EDIT]
📄 class-wp-matchesmapregex.php	FILE	[EDIT]
📄 class-wp-meta-query.php	FILE	[EDIT]
📄 class-wp-metadata-lazyloader.php	FILE	[EDIT]
📄 class-wp-network-query.php	FILE	[EDIT]
📄 class-wp-network.php	FILE	[EDIT]
📄 class-wp-oembed-controller.php	FILE	[EDIT]
📄 class-wp-paused-extensions-storage.php	FILE	[EDIT]
📄 class-wp-post-type.php	FILE	[EDIT]
📄 class-wp-post.php	FILE	[EDIT]
📄 class-wp-query.php	FILE	[EDIT]
📄 class-wp-recovery-mode-cookie-service.php	FILE	[EDIT]
📄 class-wp-recovery-mode-email-service.php	FILE	[EDIT]
📄 class-wp-recovery-mode-key-service.php	FILE	[EDIT]
📄 class-wp-recovery-mode-link-service.php	FILE	[EDIT]
📄 class-wp-recovery-mode.php	FILE	[EDIT]
📄 class-wp-rewrite.php	FILE	[EDIT]
📄 class-wp-role.php	FILE	[EDIT]
📄 class-wp-roles.php	FILE	[EDIT]
📄 class-wp-session-tokens.php	FILE	[EDIT]
📄 class-wp-simplepie-file.php	FILE	[EDIT]
📄 class-wp-simplepie-sanitize-kses.php	FILE	[EDIT]
📄 class-wp-site-query.php	FILE	[EDIT]
📄 class-wp-site.php	FILE	[EDIT]
📄 class-wp-tax-query.php	FILE	[EDIT]
📄 class-wp-taxonomy.php	FILE	[EDIT]
📄 class-wp-term-query.php	FILE	[EDIT]
📄 class-wp-term.php	FILE	[EDIT]
📄 class-wp-text-diff-renderer-inline.php	FILE	[EDIT]
📄 class-wp-text-diff-renderer-table.php	FILE	[EDIT]
📄 class-wp-theme.php	FILE	[EDIT]
📄 class-wp-user-meta-session-tokens.php	FILE	[EDIT]
📄 class-wp-user-query.php	FILE	[EDIT]
📄 class-wp-user.php	FILE	[EDIT]
📄 class-wp-walker.php	FILE	[EDIT]
📄 class-wp-widget-factory.php	FILE	[EDIT]
📄 class-wp-widget.php	FILE	[EDIT]
📄 class-wp-xmlrpc-server.php	FILE	[EDIT]
📄 class-wp.php	FILE	[EDIT]
📄 class.wp-dependencies.php	FILE	[EDIT]
📄 class.wp-scripts.php	FILE	[EDIT]
📄 class.wp-styles.php	FILE	[EDIT]
📄 comment-template.php	FILE	[EDIT]
📄 comment.php	FILE	[EDIT]
📄 compat.php	FILE	[EDIT]
📄 cron.php	FILE	[EDIT]
📁 css/	DIR
📁 customize/	DIR
📄 date.php	FILE	[EDIT]
📄 default-constants.php	FILE	[EDIT]
📄 default-filters.php	FILE	[EDIT]
📄 default-widgets.php	FILE	[EDIT]
📄 deprecated.php	FILE	[EDIT]
📄 embed-template.php	FILE	[EDIT]
📄 embed.php	FILE	[EDIT]
📄 error-protection.php	FILE	[EDIT]
📄 error_log	FILE	[EDIT]
📄 feed-atom-comments.php	FILE	[EDIT]
📄 feed-atom.php	FILE	[EDIT]
📄 feed-rdf.php	FILE	[EDIT]
📄 feed-rss.php	FILE	[EDIT]
📄 feed-rss2-comments.php	FILE	[EDIT]
📄 feed-rss2.php	FILE	[EDIT]
📄 feed.php	FILE	[EDIT]
📁 fonts/	DIR
📄 formatting.php	FILE	[EDIT]
📄 functions.php	FILE	[EDIT]
📄 functions.wp-scripts.php	FILE	[EDIT]
📄 functions.wp-styles.php	FILE	[EDIT]
📄 general-template.php	FILE	[EDIT]
📄 http.php	FILE	[EDIT]
📁 images/	DIR
📁 js/	DIR
📄 kses.php	FILE	[EDIT]
📄 l10n.php	FILE	[EDIT]
📄 link-template.php	FILE	[EDIT]
📄 load.php	FILE	[EDIT]
📄 locale.php	FILE	[EDIT]
📄 media-template.php	FILE	[EDIT]
📄 media.php	FILE	[EDIT]
📄 meta.php	FILE	[EDIT]
📄 ms-blogs.php	FILE	[EDIT]
📄 ms-default-constants.php	FILE	[EDIT]
📄 ms-default-filters.php	FILE	[EDIT]
📄 ms-deprecated.php	FILE	[EDIT]
📄 ms-files.php	FILE	[EDIT]
📄 ms-functions.php	FILE	[EDIT]
📄 ms-load.php	FILE	[EDIT]
📄 ms-network.php	FILE	[EDIT]
📄 ms-settings.php	FILE	[EDIT]
📄 ms-site.php	FILE	[EDIT]
📄 nav-menu-template.php	FILE	[EDIT]
📄 nav-menu.php	FILE	[EDIT]
📄 option.php	FILE	[EDIT]
📄 pluggable-deprecated.php	FILE	[EDIT]
📄 pluggable.php	FILE	[EDIT]
📄 plugin.php	FILE	[EDIT]
📁 pomo/	DIR
📄 post-formats.php	FILE	[EDIT]
📄 post-template.php	FILE	[EDIT]
📄 post-thumbnail-template.php	FILE	[EDIT]
📄 post.php	FILE	[EDIT]
📄 query.php	FILE	[EDIT]
📁 random_compat/	DIR
📄 registration-functions.php	FILE	[EDIT]
📄 registration.php	FILE	[EDIT]
📁 rest-api/	DIR
📄 rest-api.php	FILE	[EDIT]
📄 revision.php	FILE	[EDIT]
📄 rewrite.php	FILE	[EDIT]
📄 rss-functions.php	FILE	[EDIT]
📄 rss.php	FILE	[EDIT]
📄 script-loader.php	FILE	[EDIT]
📄 session.php	FILE	[EDIT]
📄 shortcodes.php	FILE	[EDIT]
📁 sodium_compat/	DIR
📄 spl-autoload-compat.php	FILE	[EDIT]
📄 taxonomy.php	FILE	[EDIT]
📄 template-loader.php	FILE	[EDIT]
📄 template.php	FILE	[EDIT]
📁 theme-compat/	DIR
📄 theme.php	FILE	[EDIT]
📄 update.php	FILE	[EDIT]
📄 user.php	FILE	[EDIT]
📄 vars.php	FILE	[EDIT]
📄 version.php	FILE	[EDIT]
📁 widgets/	DIR
📄 widgets.php	FILE	[EDIT]
📄 wlwmanifest.xml	FILE	[EDIT]
📄 wp-db.php	FILE	[EDIT]
📄 wp-diff.php	FILE	[EDIT]