|
Server : Apache System : Linux s1230 5.15.0-139-generic #149~20.04.1 SMP Tue Jul 14 11:21:49 UTC 2026 x86_64 User : p141464 ( 418825) PHP Version : 7.4.33.12 Disable Function : NONE Directory : /html/KMU-CSR-PLANER/wp-content/plugins/matomo/app/plugins/Login/ |
Upload File : |
<?php
/**
* Matomo - free/libre analytics platform
*
* @link https://matomo.org
* @license https://www.gnu.org/licenses/gpl-3.0.html GPL v3 or later
*/
namespace Piwik\Plugins\Login;
use Piwik\Common;
use Piwik\Date;
use Piwik\Db;
use Piwik\Option;
use Piwik\Plugins\Login\Security\BruteForceDetection;
class Model
{
public const NOTIFIED_USER_ABOUT_LOGIN_ATTEMPTS_OPTION_PREFIX = 'BruteForceDetection.suspiciousLoginCountNotified.';
public const LAST_LOGIN_COUNTRY_OPTION_PREFIX = 'LoginFromDifferentCountry.lastCountry.';
/**
* @var
*/
private $tablePrefixed;
public function __construct()
{
$this->tablePrefixed = Common::prefixTable(BruteForceDetection::TABLE_NAME);
}
public function getTotalLoginAttemptsInLastHourForLogin(string $login) : int
{
$sql = "SELECT COUNT(*) FROM `{$this->tablePrefixed}` WHERE login = ? AND attempted_at > ?";
$count = Db::fetchOne($sql, [$login, $this->getDateTimeSubMinutes(60)]);
return (int) $count;
}
public function hasNotifiedUserAboutSuspiciousLogins(string $login) : bool
{
$optionName = $this->getSuspiciousLoginsNotifiedOptionName($login);
$timeSent = Option::get($optionName);
$timeSent = (int) @json_decode($timeSent, \true);
if ($timeSent <= 0) {
// sanity check
return \false;
}
$timeSinceSent = Date::getNowTimestamp() - $timeSent;
if ($timeSinceSent <= 0 || $timeSinceSent > $this->getAmountOfTimeBetweenSuspiciousLoginNotifications()) {
return \false;
}
return \true;
}
public function getDistinctIpsAttemptingLoginsInLastHour(string $login) : int
{
$sql = "SELECT COUNT(DISTINCT ip_address) FROM `{$this->tablePrefixed}` WHERE login = ? AND attempted_at > ?";
$count = Db::fetchOne($sql, [$login, $this->getDateTimeSubMinutes(60)]);
return (int) $count;
}
private function getDateTimeSubMinutes($minutes) : string
{
return Date::now()->subPeriod($minutes, 'minute')->getDatetime();
}
private function getAmountOfTimeBetweenSuspiciousLoginNotifications() : int
{
return 2 * 7 * 24 * 60 * 60;
// 2 weeks
}
private function getSuspiciousLoginsNotifiedOptionName(string $login) : string
{
return self::NOTIFIED_USER_ABOUT_LOGIN_ATTEMPTS_OPTION_PREFIX . $login;
}
private function getLastLoginCountryOptionName(string $login) : string
{
return self::LAST_LOGIN_COUNTRY_OPTION_PREFIX . $login;
}
public function markSuspiciousLoginsNotifiedEmailSent(string $login) : void
{
$optionName = $this->getSuspiciousLoginsNotifiedOptionName($login);
Option::set($optionName, Date::getNowTimestamp());
}
public function setLastLoginCountry(string $login, string $countryCode) : void
{
$optionName = $this->getLastLoginCountryOptionName($login);
Option::set($optionName, $countryCode);
}
public function getLastLoginCountry($login) : ?string
{
$optionName = $this->getLastLoginCountryOptionName($login);
$optionValue = Option::get($optionName);
// convert false to null so that we don't return mixed types
return \false !== $optionValue ? $optionValue : null;
}
}