wp-sudo/wp-sudo.php at main · dknauss/wp-sudo · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
<?php
/**
 * Plugin Name:       Sudo
 * Plugin URI:        https://github.com/dknauss/wp-sudo
 * Description:       Action-gated reauthentication for WordPress. Dangerous operations require password confirmation before they proceed — regardless of user role.
 * Version:           2.13.0
 * Requires at least: 6.2
 * Requires PHP:      8.0
 * Author:            Dan Knauss
 * Author URI:        https://profiles.wordpress.org/danknauss/
 * License:           GPL-2.0-or-later
 * License URI:       https://www.gnu.org/licenses/gpl-2.0.html
 * Text Domain:       wp-sudo
 * Domain Path:       /languages
 *
 * @package WP_Sudo
 */

// Abort if this file is called directly.
if ( ! defined( 'ABSPATH' ) ) {
	exit;
}

// Plugin version.
define( 'WP_SUDO_VERSION', '2.13.0' );

// Plugin directory path.
define( 'WP_SUDO_PLUGIN_DIR', plugin_dir_path( __FILE__ ) );

// Plugin directory URL.
define( 'WP_SUDO_PLUGIN_URL', plugin_dir_url( __FILE__ ) );

// Plugin basename.
define( 'WP_SUDO_PLUGIN_BASENAME', plugin_basename( __FILE__ ) );

/**
 * Autoload plugin classes.
 */
spl_autoload_register(
	function ( string $class_name ) {
		$prefix   = 'WP_Sudo\\';
		$base_dir = WP_SUDO_PLUGIN_DIR . 'includes/';

		$len = strlen( $prefix );
		if ( strncmp( $prefix, $class_name, $len ) !== 0 ) {
				return;
		}

		$relative_class = substr( $class_name, $len );
		$file           = $base_dir . 'class-' . strtolower( str_replace( array( '\\', '_' ), array( '/', '-' ), $relative_class ) ) . '.php';

		if ( file_exists( $file ) ) {
			require $file; // phpcs:ignore WordPressVIPMinimum.Files.IncludingFile.UsingVariable
		}
	}
);

/**
 * Get the main plugin instance.
 *
 * @return WP_Sudo\Plugin Main plugin instance.
 */
function wp_sudo(): WP_Sudo\Plugin {
	static $instance = null;

	if ( null === $instance ) {
		$instance = new WP_Sudo\Plugin();
	}

	return $instance;
}

/**
 * Public helper: check whether a user currently has an active sudo session.
 *
 * @since 2.12.0
 *
 * @param int|null $user_id Optional user ID. Defaults to current user.
 * @return bool
 */
function wp_sudo_check( ?int $user_id = null ): bool {
	return \WP_Sudo\Public_API::check( $user_id );
}

/**
 * Public helper: require an active sudo session.
 *
 * See `WP_Sudo\Public_API::require()` for accepted args.
 *
 * @since 2.12.0
 *
 * @param array<string, mixed> $args Optional API args.
 * @return bool
 */
function wp_sudo_require( array $args = array() ): bool {
	return \WP_Sudo\Public_API::require( $args );
}

// Boot the plugin.
add_action(
	'plugins_loaded',
	static function () {
		wp_sudo()->init();
	},
	10,
	0
);

// Register activation hook.
register_activation_hook(
	__FILE__,
	static function ( bool $network_wide = false ) {
		if ( is_multisite() && $network_wide ) {
			wp_sudo()->activate_network();
		} else {
			wp_sudo()->activate();
		}
	}
);

// Register deactivation hook.
register_deactivation_hook(
	__FILE__,
	static function () {
		wp_sudo()->deactivate();
	}
);