ARGUS WordPress Defence 1.0.0 — first production release

Automatic WordPress security: local firewall, malware and file-integrity scanning, vulnerability protection, quarantine, scheduled backups, an optional page cache, and automatic global threat intelligence. See README.md for installation, update, and uninstall instructions.
2026-08-09 13:40:16 +00:00
commit df0f2fccb8
73 changed files with 12302 additions and 0 deletions
@@ -0,0 +1,120 @@
+<?php
+
+if ( ! defined( 'ABSPATH' ) ) {
+	exit;
+}
+
+class Argus_Settings {
+
+	const OPTION = 'argus_wpd_settings';
+
+	const MODE_MONITOR = 'monitor';
+	const MODE_BLOCK    = 'block';
+	const MODE_STRICT   = 'strict';
+
+	protected static $defaults = array(
+
+		'mode'                       => self::MODE_MONITOR,
+		'waf_enabled'                => true,
+		'login_protection_enabled'   => true,
+		'xmlrpc_block_pingback'      => true,
+		'rest_api_protection_enabled'=> true,
+		'integrity_scan_enabled'     => true,
+		'malware_scan_enabled'       => true,
+		'upload_scan_enabled'        => true,
+		'vuln_intel_enabled'         => true,
+		'geoip_rir_enabled'          => true,
+		'static_cache_enabled'       => false,
+		'static_cache_ttl_secs'      => 3600,
+		'cache_stale_grace_secs'     => 600,
+		'cache_custom_exclude_paths' => array(),
+		'cache_gzip_enabled'         => true,
+		'cache_gzip_level'           => 6,
+		'cache_brotli_enabled'       => true,
+		'cache_brotli_level'         => 5,
+		'cache_min_compress_bytes'   => 1024,
+		'cache_discovery_enabled'    => true,
+		'cache_warming_enabled'      => false,
+		'cache_warm_concurrency'     => 4,
+		'cache_warm_batch_size'      => 20,
+		'cache_warm_min_interval_secs' => 1,
+		'challenge_enabled'          => true,
+		'login_attempt_threshold'    => 5,
+		'login_attempt_window_secs'  => 600,
+		'login_lockout_secs'         => 900,
+		'exceptions'                 => array(), 
+		'cloud_connected'            => false,
+
+		'anis_enabled'               => true,
+		'anis_base_url'              => 'https://anis.weboria.eu',
+		'anis_license_key'           => '',
+
+		'backup_schedule_mode'       => 'automatic',
+		'backup_interval_hours'      => 24,
+		'backup_retention_count'     => 5,
+	);
+
+	public static function all() {
+		$stored = get_option( self::OPTION, array() );
+		return wp_parse_args( $stored, self::$defaults );
+	}
+
+	public static function get( $key, $fallback = null ) {
+		$all = self::all();
+		return array_key_exists( $key, $all ) ? $all[ $key ] : $fallback;
+	}
+
+	public static function update( array $partial ) {
+		$all = array_merge( self::all(), $partial );
+
+		update_option( self::OPTION, $all, true );
+		return $all;
+	}
+
+	public static function mode() {
+		return self::get( 'mode', self::MODE_MONITOR );
+	}
+
+	public static function is_monitor_only() {
+		return self::mode() === self::MODE_MONITOR;
+	}
+
+	public static function is_strict() {
+		return self::mode() === self::MODE_STRICT;
+	}
+
+	public static function has_exception( $type, $value ) {
+		foreach ( self::get( 'exceptions', array() ) as $exception ) {
+			if ( ( $exception['type'] ?? '' ) === $type && ( $exception['value'] ?? '' ) === $value ) {
+				return true;
+			}
+		}
+		return false;
+	}
+
+	public static function add_exception( $type, $value, $note = '' ) {
+		if ( self::has_exception( $type, $value ) ) {
+			return self::all();
+		}
+		$exceptions   = self::get( 'exceptions', array() );
+		$exceptions[] = array(
+			'type'       => $type,
+			'value'      => $value,
+			'note'       => $note,
+			'added_at'   => current_time( 'mysql', true ),
+		);
+		return self::update( array( 'exceptions' => $exceptions ) );
+	}
+
+	public static function remove_exception( $type, $value ) {
+		$exceptions = array_values(
+			array_filter(
+				self::get( 'exceptions', array() ),
+				function ( $e ) use ( $type, $value ) {
+					return ! ( ( $e['type'] ?? '' ) === $type && ( $e['value'] ?? '' ) === $value );
+				}
+			)
+		);
+		return self::update( array( 'exceptions' => $exceptions ) );
+	}
+}