vip-security-boost/vip-security-boost.php at production · Automattic/vip-security-boost · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
<?php
/**
 * Plugin Name: WordPress Security Controls
 * Plugin URI: https://github.com/Automattic/vip-security-boost-integration
 * Description: A comprehensive security suite that protects WordPress VIP sites against common vulnerabilities and implements industry-standard security hardening measures.
 * Author: WordPress VIP
 * Text Domain: vip-security-boost
 * Version: 0.1.0
 * Requires at least: 6.4
 * Requires PHP: 8.1
 * License: GPL version 2 or later - http://www.gnu.org/licenses/old-licenses/gpl-2.0.html
 *
 * @package vip-security-boost
 */

declare(strict_types = 1);

require_once __DIR__ . '/utils/configs.php';
require_once __DIR__ . '/utils/class-configs.php';
require_once __DIR__ . '/utils/class-capability-utils.php';
require_once __DIR__ . '/utils/class-users-query-utils.php';
require_once __DIR__ . '/email/class-email.php';
require_once __DIR__ . '/utils/class-email-utils.php';
require_once __DIR__ . '/utils/class-constants.php';
require_once __DIR__ . '/utils/class-logger.php';
require_once __DIR__ . '/utils/class-tracking.php';
require_once __DIR__ . '/utils/class-role-sanitizer.php';

use function Automattic\VIP\Security\Utils\load_integration_configs_from_headers;
use function Automattic\VIP\Security\Utils\load_integration_configs_from_url;

/**
 * Local environment specific configurations.
 */
$is_local_env = ! defined( 'VIP_GO_APP_ENVIRONMENT' ) || 'local' === constant( 'VIP_GO_APP_ENVIRONMENT' );

if ( $is_local_env ) {
	require_once __DIR__ . '/utils/dev-env.php';

	if ( ! defined( 'VIP_GO_APP_ID' ) || ! constant( 'VIP_GO_APP_ID' ) ) {
		define( 'VIP_GO_APP_ID', 101 );
	}

	// Check headers for integration test configs
	if ( isset( $_SERVER['HTTP_X_INTEGRATION_TEST'] ) ) {
		// Load the integration configurations from the headers
		load_integration_configs_from_headers();
	} else {
		// Load the integration configurations from the CONFIG API
		load_integration_configs_from_url();
	}
}

if ( class_exists( 'Automattic\\VIP\\Prometheus\\Plugin' ) ) {
	require __DIR__ . '/utils/metrics.php';
}
// Initialize tracking hooks
\Automattic\VIP\Security\Utils\Tracking::setup_action_hooks();


// Load the modules
require_once __DIR__ . '/class-loader.php';