OwlCyberSecurity - MANAGER

Edit File: Update_Prevention.php

<?php
namespace Tribe\PUE;

use WP_Error;
use Tribe__Dependency as Dependency;

/**
 * Class Update_Prevention engine for a plugin with invalid/empty keys with
 * unmet dependencies on Core or Event Tickets.
 *
 * @package Tribe\PUE;
 */
class Update_Prevention {

/**
	 * Fetches the dependencies based on a regular expression search of the Plugin_Register.php
	 * file that we use to prevent problems with mismatched version on our plugins.
	 *
	 * @since  4.9.12
	 *
	 * @param  string $content Contents of the file in question.
	 *
	 * @return array  Named array with [ class_name => version ] or empty if it didnt find it.
	 */
	public function get_dependencies( $content ) {
		$regex = "/'(?<plugin>[^']*)'(?:[^']*)'(?<version>[^']*)',/";

if ( ! preg_match_all( $regex, $content, $matches ) ) {
			return [];
		}

$dependencies = array_combine( $matches['plugin'], $matches['version'] );

return $dependencies;
	}

/**
	 * Checks for the list of constants associate with plugin to make sure we are dealing
	 * with a plugin owned by Modern Tribe.
	 *
	 * @since  4.9.12
	 *
	 * @param  string $plugin Plugin file partial path, folder and main php file.
	 *
	 * @return bool
	 */
	public function is_tribe_plugin( $plugin ) {
		$path_constants_list = [
			// The Events Calendar
			'TRIBE_EVENTS_FILE',

// Events Pro
			'EVENTS_CALENDAR_PRO_FILE',

// Filter bar
			'TRIBE_EVENTS_FILTERBAR_FILE',

// Eventbrite Tickets
			'EVENTBRITE_PLUGIN_FILE',
		];

foreach ( $path_constants_list as $constant_name ) {
			if ( ! defined( $constant_name ) ) {
				continue;
			}

if ( false === strpos( constant( $constant_name ), $plugin ) ) {
				continue;
			}

return true;
		}

return false;
	}

/**
	 * Filters the source file location for the upgrade package for the PUE Update_Prevention engine.
	 *
	 * @since  4.9.12
	 *
	 * @param string      $source        File source location.
	 * @param string      $remote_source Remote file source location.
	 * @param WP_Upgrader $upgrader      WP_Upgrader instance.
	 * @param array       $extra         Extra arguments passed to hooked filters.
	 */
	public function filter_upgrader_source_selection( $source, $remote_source, $upgrader, $extras ) {
		if ( ! isset( $extras['plugin'] ) ) {
			return $source;
		}

$plugin = $extras['plugin'];

// Bail if we are not dealing with a plugin we own.
		if ( ! $this->is_tribe_plugin( $plugin ) ) {
			return $source;
		}

$register_path = $source . '/src/Tribe/Plugin_Register.php';

// Bail when the Plugin Register file doesnt exist.
		if ( ! file_exists( $register_path ) ) {
			return $source;
		}

$register_contents = file_get_contents( $register_path );

$dependencies = $this->get_dependencies( $register_contents );
		$incompatible_plugins = [];

foreach ( $dependencies as $class_name => $required_version ) {
			// Skip inactive plugin checks.
			if ( ! class_exists( $class_name ) ) {
				continue;
			}

$constant_name = $class_name . '::VERSION';

// Skip if we cant find the version constant.
			if ( ! defined( $constant_name ) ) {
				continue;
			}

$current_version = constant( $constant_name );

// Skip when the version is equal or higher than the required.
			if ( version_compare( $current_version, $required_version, '>=' ) ) {
				continue;
			}

$pue = tribe( Dependency::class )->get_pue_from_class( $class_name );
			$has_pue_notice = $pue ? tribe( 'pue.notices' )->has_notice( $pue->pue_install_key ) : false;

// Only throw warning for customers with notices of invalid/expired licenses.
			if ( ! $has_pue_notice ) {
				continue;
			}

// Flag that we should prevent the Update
			$incompatible_plugins[ $class_name ] = $required_version;
		}

// Bail when there are no incompatible plugins.
		if ( empty( $incompatible_plugins ) ) {
			return $source;
		}

/**
		 * Filter the if we should prevent the update.
		 *
		 * @since  4.9.12
		 *
		 * @param bool        $should_revent        Flag false to skip the prevention.
		 * @param array       $incompatible_plugins Which plugins were incompatible with new version of the plugin.
		 * @param string      $source               File source location.
		 * @param string      $remote_source        Remote file source location.
		 * @param WP_Upgrader $upgrader             WP_Upgrader instance.
		 * @param array       $extra                Extra arguments passed to hooked filters.
		 */
		$should_prevent_update = apply_filters(
			'tribe_pue_should_prevent_update_without_license',
			true,
			$incompatible_plugins,
			$source,
			$remote_source,
			$upgrader,
			$extras
		);

// Bail if the filter above returns anything but true.
		if ( true !== $should_prevent_update ) {
			return $source;
		}

$full_plugin_path = $remote_source . '/' . $plugin;
		$plugin_data = get_plugin_data( $full_plugin_path );

$plugins_classes = array_keys( $incompatible_plugins );
		$plugins_list_html = tribe( 'pue.notices' )->get_formatted_plugin_names_from_classes( $plugins_classes );

$link_read_more = '<a href="http://m.tri.be/1aev" target="_blank">' . esc_html__( 'Read more', 'tribe-common' ) . '.</a>';

$message = sprintf(
			esc_html__( 'Your update failed due to an incompatibility between the version (%1$s) of the %2$s you tried to update to and the version of %3$s that you are using. %4$s', 'tribe-common' ),
			esc_html( $plugin_data['Version'] ),
			esc_html( $plugin_data['Name'] ),
			$plugins_list_html,
			$link_read_more
		);

$error = new WP_Error(
			'tribe-updater-failed-prevention',
			$message,
			[]
		);

return $error;
	}
}