AlkantarClanX12
Your IP : 216.73.217.24 <?php
/*
Copyright (C) 2015-26 CERBER TECH INC., https://wpcerber.com
Licensed under the GNU GPL
This program is free software; you can redistribute it and/or modify
it under the terms of the GNU General Public License as published by
the Free Software Foundation; either version 3 of the License, or
(at your option) any later version.
This program is distributed in the hope that it will be useful,
but WITHOUT ANY WARRANTY; without even the implied warranty of
MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
GNU General Public License for more details.
You should have received a copy of the GNU General Public License
along with this program; if not, write to the Free Software
Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA
*/
/*
*========================================================================*
| |
| ATTENTION! Do not change or edit this file! |
| |
*========================================================================*
*/
add_action( 'personal_options', function ( $profileuser ) {
ob_start();
if ( lab_lab() ) :
$cus = cerber_get_set( CRB_USER_SET, $profileuser->ID );
$user_tfmode = ( empty( $cus['tfm'] ) ) ? 0 : absint( $cus['tfm'] );
$tr_css = ( $user_tfmode == 2 ) ? 'style="display:none;"' : '';
?>
<tr>
<th scope="row">
<label for="cerber_user_2fa"><?php _e( 'Two-Factor Authentication', 'wp-cerber' ); ?>
</label>
</th>
<td>
<?php
echo cerber_select( 'cerber_user_2fa', array(
0 => __( 'Determined by user role policies', 'wp-cerber' ),
1 => __( 'Always enabled', 'wp-cerber' ),
2 => __( 'Disabled', 'wp-cerber' ),
), $user_tfmode, '', 'cerber_user_2fa' );
?>
</td>
</tr>
<tr <?php echo $tr_css; ?> >
<th>
<label for="cerber_2fa_remember"><?php _e( 'Allow user to remember devices for', 'wp-cerber' ); ?>
</label>
</th>
<td data-input_parent="cerber_user_2fa" data-input_parent_value="[0,1]" >
<input type="number" name="cerber_2fa_remember" id="cerber_2fa_remember" value="<?php echo esc_attr( $cus['tfremember'] ?? '' ); ?>"> <?php _e( 'days', 'wp-cerber' ); ?>
</td>
</tr>
<tr <?php echo $tr_css; ?> >
<th scope="row">
<label for="cerber_2fa_eminfo"><?php _e( 'Show sign-in attempt details in 2FA emails', 'wp-cerber' ); ?>
</label>
</th>
<td data-input_parent="cerber_user_2fa" data-input_parent_value="[0,1]" >
<?php
$selected = isset( $cus['tfemailinfo'] ) ? absint( $cus['tfemailinfo'] ) : CRB_NEXT_LVL;
echo cerber_select( 'cerber_2fa_eminfo', array(
CRB_NEXT_LVL => __( 'Determined by user role policies', 'wp-cerber' ),
0 => __( 'Disabled', 'wp-cerber' ),
1 => __( 'Minimal', 'wp-cerber' ),
2 => __( 'Full', 'wp-cerber' ),
), $selected );
?>
</td>
</tr>
<tr <?php echo $tr_css; ?> >
<th>
<label for="cerber_2fa_email"><?php _e( 'Two-Factor Authentication Email', 'wp-cerber' ); ?>
</label>
</th>
<td data-input_parent="cerber_user_2fa" data-input_parent_value="[0,1]" >
<input type="email" name="cerber_2fa_email" id="cerber_2fa_email" value="<?php echo esc_attr( $cus['tfemail'] ?? '' ); ?>" placeholder="Optional email for receiving 2FA codes" class="regular-text">
</td>
</tr>
<?php
endif;
if ( $pin = CRB_2FA::get_user_pin_info( $profileuser->ID ) ) :
?>
<tr>
<th scope="row"><?php _e( '2FA PIN Code', 'wp-cerber' ); ?></th>
<td>
<?php
echo $pin;
?>
</td>
</tr>
<?php
endif;
if ( ! defined( 'IS_PROFILE_PAGE' ) || ! IS_PROFILE_PAGE ):
$b = crb_is_user_blocked( $profileuser->ID );
$b_msg = $b['blocked_msg'] ?? '';
$b_note = $b['blocked_note'] ?? '';
$dsp = ( ! $b ) ? 'display:none;' : '';
?>
<tr>
<th scope="row"><?php _e( 'Block User', 'wp-cerber' ); ?></th>
<td>
<fieldset>
<legend class="screen-reader-text">
<span><?php _e( 'User is not permitted to log into the website', 'wp-cerber' ) ?></span>
</legend>
<label for="crb_user_blocked">
<input name="crb_user_blocked" type="checkbox" id="crb_user_blocked"
value="1" <?php
checked( ( $b ) ? true : false ); ?> />
<?php _e( 'User is not permitted to log into the website', 'wp-cerber' );
if ( $b && $by_who = crb_user_blocked_by( $b ) ) {
echo ' - <i>' . $by_who . '</i>';
}
?>
</label>
</fieldset>
</td>
</tr>
<tr class="crb_blocked_txt" style="<?php echo $dsp; ?>">
<th scope="row"><?php _e( 'User Message', 'wp-cerber' ); ?></th>
<td>
<textarea placeholder="<?php _e( 'An optional message for this user', 'wp-cerber' ); ?>"
id="crb_blocked_msg" name="crb_blocked_msg"><?php echo crb_escape_html( $b_msg ); ?></textarea>
</td>
</tr>
<tr class="crb_blocked_txt" style="<?php echo $dsp; ?>">
<th scope="row"><?php _e( 'Admin Note', 'wp-cerber' ); ?></th>
<td>
<textarea placeholder="<?php _e( 'It is visible only to website administrators', 'wp-cerber' ); ?>"
id="crb_blocked_note" name="crb_blocked_note"><?php echo crb_escape_html( $b_note ); ?></textarea>
</td>
</tr>
<?php
endif;
// Flush content if any
$content = ob_get_clean();
if ( $content ) :
echo '</table>'; // To get a separate section for WP Cerber, we close the WP table
// New section for WP Cerber settings
echo '<h2>' . __( 'Login Security', 'wp-cerber' ) . '</h2>';
/* translators: Here %s is the name of the software. */
echo '<p>' . sprintf( __( 'These features are provided by %s', 'wp-cerber' ), '<a target="_blank" href="' . cerber_admin_link() . '">WP Cerber Security</a>' ) . '</p>
<table id="crb-wp-user-edit" class="form-table" role="presentation">';
echo $content;
endif;
}, PHP_INT_MAX );
add_action( 'edit_user_profile_update', function ( $user_id ) {
crb_update_user_2fa( $user_id );
if ( $user_id == get_current_user_id() ) {
return;
}
$b = absint( cerber_get_post( 'crb_user_blocked' ) );
if ( ! $b ) {
cerber_unblock_user( $user_id );
}
else {
cerber_block_user( $user_id, strip_tags( stripslashes( $_POST['crb_blocked_msg'] ) ), strip_tags( stripslashes( $_POST['crb_blocked_note'] ) ) );
}
} );
add_action( 'personal_options_update', 'crb_update_user_2fa' );
function crb_update_user_2fa( $user_id ) {
$cus = cerber_get_set( CRB_USER_SET, $user_id );
if ( ! $cus
|| ! is_array( $cus ) ) {
$cus = array();
}
if ( ! isset( $_POST['cerber_user_2fa'] )
|| ! lab_lab() ) {
return;
}
$cus['tfm'] = absint( $_POST['cerber_user_2fa'] );
if ( $cus['tfm'] == 2 ) {
CRB_2FA::delete_2fa( $user_id, true );
}
$rem = cerber_get_post( 'cerber_2fa_remember' );
$cus['tfremember'] = is_numeric( $rem ) ? $rem : '';
$cus['tfemailinfo'] = absint( $_POST['cerber_2fa_eminfo'] );
$email = trim( cerber_get_post( 'cerber_2fa_email' ) );
if ( $email && ! is_email( $email ) ) {
$email = '';
add_action( 'user_profile_update_errors', function ( $errors ) {
$errors->add( 'invalid-email', 'You have specified an invalid email address for Two-Factor Authentication' );
} );
}
$cus['tfemail'] = $email;
cerber_update_set( CRB_USER_SET, $cus, $user_id );
}
add_filter( 'user_row_actions', 'crb_collect_uids', 10, 2 );
add_filter( 'ms_user_row_actions', 'crb_collect_uids', 10, 2 );
function crb_collect_uids( $actions, $user_object ) {
crb_users_on_the_page( $user_object );
return $actions;
}
function crb_users_on_the_page( $user_object = null ) {
static $list = array();
if ( $user_object ) {
$list[ $user_object->ID ] = $user_object->user_login;
}
else {
return $list;
}
}
add_filter( 'views_users', function ( $views ) {
global $wpdb;
$c = cerber_db_get_var( 'SELECT COUNT(meta_key) FROM ' . $wpdb->usermeta . ' WHERE meta_key = "' . CERBER_BUKEY . '"' );
$t = __( 'Blocked Users', 'wp-cerber' );
if ( $c ) {
$t = '<a href="users.php?crb_filter_users=blocked">' . $t . '</a>';
}
$views['cerber_blocked'] = $t . ' (' . $c . ')';
return $views;
} );
add_filter( 'users_list_table_query_args', function ( $args ) {
if ( isset( $_REQUEST['crb_filter_users'] ) ) {
$args['meta_key'] = CERBER_BUKEY;
$args['meta_compare'] = 'EXISTS';
}
return $args;
} );
/**
* Returns formatted first and last names (or display name)
* Adds user login for clarity
*
* @param WP_User|int $user
*
* @return string
*/
function crb_format_user_name( $user ) {
if ( is_integer( $user ) ) {
$user = crb_get_userdata( $user );
}
if ( ! $user ) {
return 'Unknown user';
}
if ( $user->first_name ) {
$ret = $user->first_name . ' ' . $user->last_name;
}
else {
$ret = $user->display_name;
}
return $ret . ' (' . $user->user_login . ')';
}
// Bulk actions
add_filter( "bulk_actions-users", function ( $actions ) {
$actions['cerber_block_users'] = __( 'Block', 'wp-cerber' );
return $actions;
} );
add_filter( "handle_bulk_actions-users", function ( $url ) {
if ( cerber_get_bulk_action() == 'cerber_block_users' ) {
if ( $users = cerber_get_get( 'users', '\d+' ) ) {
foreach ( $users as $user_id ) {
cerber_block_user( absint( $user_id ) );
}
}
else {
// 'No users selected';
}
$preserve = array( 's', 'paged', 'role', 'crb_filter_users' );
$remove = array_diff(
array_keys( crb_get_query_params() ),
$preserve );
$url = remove_query_arg( $remove, $url );
}
return $url;
} );
/**
* Blocks the given user. Blocked users are not allowed to log into the website
*
* @param int $user_id User ID
* @param string $msg Optional message to be shown when a user is trying to log in.
* @param string $note Optional note for the website admin
*
* @return bool True on success, false on failure.
*/
function cerber_block_user( int $user_id, string $msg = '', string $note = '' ) {
if ( ! cerber_can_block_user( $user_id ) ) {
return false;
}
if ( $user_id == get_current_user_id() ) {
return false;
}
if ( ( $m = get_user_meta( $user_id, CERBER_BUKEY, true ) )
&& ! empty( $m['blocked'] )
&& $m[ 'u' . $user_id ] == $user_id
&& $m['blocked_msg'] == $msg
&& $m['blocked_note'] == $note ) {
return false;
}
if ( ! $m || ! is_array( $m ) ) {
$m = array();
}
if ( empty( $m['blocked'] ) ) {
$m['blocked_time'] = time();
$m['blocked'] = 1;
$m[ 'u' . $user_id ] = $user_id;
$m['blocked_by'] = get_current_user_id();
$m['blocked_ip'] = cerber_get_remote_ip();
}
$m['blocked_msg'] = $msg;
$m['blocked_note'] = $note;
crb_destroy_user_sessions( $user_id );
return (bool) update_user_meta( $user_id, CERBER_BUKEY, $m );
}
/**
* Unblocks the given user.
*
* @return bool True on success, false on failure.
*
* @since 9.6.4.9
*/
function cerber_unblock_user( int $user_id ) {
if ( ! cerber_can_block_user( $user_id ) ) {
return false;
}
return delete_user_meta( $user_id, CERBER_BUKEY );
}
/**
* Checks if the current user can block the given user
*
* @return bool True if the current user can block the given user
*
* @since 9.6.4.9
*/
function cerber_can_block_user( int $user_id ) {
if ( ! is_super_admin()
&& ! current_user_can( 'edit_users', $user_id )
&& ! current_user_can( 'delete_users', $user_id ) ) {
return false;
}
return true;
}
/**
* Outputs the role policy settings form for all registered WordPress roles.
*
* The function builds one vertical tab per role, using sanitized role slugs as tab
* IDs and current role policy values for the tab content. It echoes the complete
* form with nonce, submit button, and the update_role_policies action marker.
* Submitted values are processed elsewhere; this function only renders the admin UI.
*
* @return void
*/
function crb_admin_render_role_policies() {
$roles = wp_roles();
$tabs_config = array();
foreach ( $roles->role_names as $role_id => $name ) {
$tabs_config[ crb_sanitize_id( $role_id ) ] = array(
'title' => $name,
//'section_desc' => $info,
'content' => crb_admin_render_role_form( $role_id, cerber_get_role_policies( $role_id ) ),
);
}
crb_admin_render_vtabs( $tabs_config, __( 'Save All Changes', 'wp-cerber' ), array( 'cerber_admin_do' => 'update_role_policies' ) );
}
/**
* Render the role policy settings table for a single WordPress role.
*
* The role ID is used in input names and DOM IDs, so callers must pass a trusted
* role slug. Role policies should be the map returned by cerber_get_role_policies()
* or an equivalent array keyed by field ID. Missing values render as empty inputs.
* The function only returns markup; it does not echo, save settings, or validate
* submitted data.
*
* @param string $role_id WordPress role slug used as the submitted settings group.
* @param array<string,mixed> $role_policies Current policy values keyed by role field ID.
*
* @return string HTML table containing all configured role policy fields.
*/
function crb_admin_render_role_form( $role_id, $role_policies ) {
$html = '<table class="form-table">';
foreach ( crb_get_role_settings_config() as $config ) {
foreach ( $config['fields'] as $field_id => $field ) {
$pro = ( isset( CRB_PRO_POLICIES[ $field_id ] ) && ! lab_lab() );
$hide = ( $pro && CRB_PRO_POLICIES[ $field_id ][0] == 2 ) ? 'display:none;' : '';
$title = crb_array_get( $field, 'title', '' );
if ( empty( $field['disabled'] ) ) {
$field['disabled'] = ( crb_array_get( $field, 'disable_role' ) == $role_id );
}
if ( $field_id == '2famode' && $role_id == 'administrator' ) {
$field['disabled'] = ! cerber_2fa_checker();
}
$enabler = '';
if ( isset( $field['enabler'] ) ) {
$enabler .= ' data-input_enabler="' . CRB_INPUT_ID_PREFIX . $role_id . '[' . $field['enabler'][0] . ']" ';
if ( isset( $field['enabler'][1] ) ) {
$enabler .= ' data-input_enabler_value="' . $field['enabler'][1] . '" ';
}
}
$s = ( $pro ) ? ' color: #888; ' : '';
$tr_class = '';
if ( isset( $field['enabler'] ) ) {
$tr_class = crb_check_enabler(
$field,
crb_array_get( $role_policies, $field['enabler'][0], '' )
);
}
if ( ! empty( $field['disabled'] ) ) {
$tr_class .= ' crb-disabled-colors';
}
if ( $field['type'] != 'html' ) {
$name = $role_id . '[' . $field_id . ']';
//$value = ( ! $pro ) ? crb_array_get( $role_policies, $field_id, '' ) : '';
$value = crb_array_get( $role_policies, $field_id, '' );
$field['pro'] = isset( CRB_PRO_POLICIES[ $field_id ] );
$field_html = crb_admin_render_form_field( $field, $name, $value );
//$html .= ( $pro && $field_id == '2faremember' ) ? '<tr style="' . $hide . '" class="' . $tr_class . '"><td colspan="2" style="padding-left: 0; ' . $s . '">'.crb_admin_cool_features().'<i ' . $enabler . '></i></td></tr>' : '';
$html .= '<tr style="' . $hide . '" class="' . $tr_class . '"><th scope="row" style="' . $s . '">' . $title . '</th><td><div id="' . CRB_WRAPPER_ID_PREFIX . 'role-' . $role_id . '-' . $field_id . '">' . $field_html . '<i ' . $enabler . '></i></div></td></tr>';
}
else {
$t = ( $pro && $field_id == '2fasmart' ) ? crb_admin_cool_features() : '';
//$t = '';
$html .= '<tr class="' . $tr_class . '"><td colspan="2" style="padding-left: 0; ' . $s . '">' . $t . $title . '<i ' . $enabler . '></i></td></tr>';
}
}
}
$html .= '</table>';
return $html;
}
/**
* Render one role policy form control from a field configuration.
*
* The field config must include type and disabled. Select fields must also include
* set. Supported types are checkbox, select, textarea, and text-like input types.
* Values are escaped before rendering and disabled fields render with an empty
* value. If no ID is supplied, the input ID is built from the submitted field name.
* A placeholder_cb callback may be executed to obtain a placeholder.
*
* @param array<string,mixed> $field_config Role field configuration from crb_admin_role_config().
* @param string $input_name Submitted input name, usually role_id[field_id].
* @param mixed $field_value Current field value to render.
* @param string $input_id Optional DOM ID. Defaults to CRB_INPUT_ID_PREFIX plus the name.
*
* @return string HTML markup for the configured form control and optional label.
*/
function crb_admin_render_form_field( $field_config, $input_name, $field_value, $input_id = '' ) {
$field_value = crb_attr_escape( $field_value );
$label = crb_array_get( $field_config, 'label' );
if ( ! $input_id ) {
$input_id = CRB_INPUT_ID_PREFIX . $input_name;
}
$atts = '';
if ( $field_config['disabled'] ) {
// || ( ! empty( $field_config['pro'] ) && ! lab_lab() ) ) {
$atts = ' disabled ';
}
if ( $field_config['disabled'] ) {
$field_value = '';
}
if ( ! $plh = crb_array_get( $field_config, 'placeholder' ) ) {
if ( $cb = crb_array_get( $field_config, 'placeholder_cb' ) ) {
$plh = call_user_func( $cb );
}
}
$atts .= ' placeholder="' . $plh . '"';
$style = '';
if ( isset( $field_config['width'] ) ) {
$style .= ' width:' . $field_config['width'];
}
switch ( $field_config['type'] ) {
case 'checkbox':
$html = crb_render_checkbox( $input_name, $field_value, $label, $input_id, $atts );
break;
case 'select':
$html = cerber_select(
$input_name,
$field_config['set'],
$field_value,
'',
$input_id,
'',
'',
null,
$atts
);
break;
case 'textarea':
$html = '<textarea class="large-text crb-monospace" id="' . $input_id
. '" name="' . $input_name . '" ' . $atts . '>'
. $field_value . '</textarea>';
if ( $label ) {
$html .= '<br/><label class="crb-below" for="' . $input_id . '">' . $label . '</label>';
}
break;
case 'text':
default:
$type = crb_array_get( $field_config, 'type', 'text' );
$html = '<input style="' . $style . '" type="' . $type . '" id="' . $input_id
. '" name="' . $input_name . '" value="' . $field_value . '" '
. $atts . ' class="crb-input-' . $type . '"/>';
if ( $label ) {
$html .= ' <label for="' . $input_id . '">' . $label . '</label>';
}
break;
}
return $html;
}
/**
* Returns role policy field definitions or one role policy field definition.
*
* Pass an empty field ID to get all cached sections keyed by section ID. Pass a
* configured field ID to get that field config enriched with section_name and
* section_id for settings links. Unknown field IDs return false. The returned
* config is for rendering and lookup only; this function does not read or write
* saved role policy values.
*
* @param string $field_id Role policy field ID, or an empty value to return all sections.
*
* @return array<string,array<string,mixed>>|array<string,mixed>|false
*/
function crb_get_role_settings_config( $field_id = null ) {
static $role_sections;
if ( ! $role_sections ) {
$role_sections = array(
'role_access' => array(
'name' => '',
'section_desc' => '',
'fields' => array(
'nodashboard' => array(
'title' => __( 'Block access to WordPress Dashboard', 'wp-cerber' ),
'type' => 'checkbox',
'disable_role' => 'administrator',
),
'notoolbar' => array(
'title' => __( 'Hide Toolbar when viewing site', 'wp-cerber' ),
'type' => 'checkbox',
),
)
),
'role_redirect' => array(
'name' => __( 'Redirection rules', 'wp-cerber' ),
'section_desc' => '',
'fields' => array(
'rdr_login' => array(
'title' => __( 'Redirect user after login', 'wp-cerber' ),
'placeholder' => __( 'Specify a relative or absolute URL', 'wp-cerber' ),
'type' => 'text',
'width' => '100%',
),
'rdr_logout' => array(
'title' => __( 'Redirect user after logout', 'wp-cerber' ),
'placeholder' => __( 'Specify a relative or absolute URL', 'wp-cerber' ),
'type' => 'text',
'width' => '100%',
),
)
),
'role_misc' => array(
'name' => '',
'section_desc' => '',
'fields' => array(
'auth_expire' => array(
'title' => __( 'User session expiration time', 'wp-cerber' ),
'label' => __( 'minutes', 'wp-cerber' ),
//'placeholder' => __( 'minutes', 'wp-cerber' ),
'placeholder_cb' => function () {
if ( $val = crb_get_settings( 'auth_expire' ) ) {
return (int) $val;
}
return '';
},
'type' => 'number',
),
'sess_limit' => array(
'title' => __( 'Number of allowed concurrent user sessions', 'wp-cerber' ),
'type' => 'number',
'placeholder' => __( 'unlimited', 'wp-cerber' ),
'pro' => 2
),
'sess_limit_policy' => array(
'title' => __( 'When the limit on concurrent user sessions is reached', 'wp-cerber' ),
'type' => 'select',
'set' => array(
0 => __( 'Terminate the oldest user session on a new login', 'wp-cerber' ),
1 => __( 'Deny further login attempts', 'wp-cerber' ),
),
'pro' => 2
),
'sess_limit_msg' => array(
//'title' => __( 'User message', 'wp-cerber' ),
'label' => __( 'Display this message if an attempt to log in is denied because the limit on concurrent user sessions has been reached', 'wp-cerber' ),
'type' => 'textarea',
'placeholder' => __( 'You are not allowed to log in. Ask your administrator for assistance.', 'wp-cerber' ),
'enabler' => array( 'sess_limit_policy', 1 ),
'pro' => 2
),
'app_pwd' => array(
'title' => __( 'Application Passwords', 'wp-cerber' ),
'type' => 'select',
'set' => array(
0 => __( 'Use global policies', 'wp-cerber' ),
1 => __( 'Enabled, access to API using standard user passwords is allowed', 'wp-cerber' ),
2 => __( 'Enabled, no access to API using standard user passwords', 'wp-cerber' ),
3 => __( 'Disabled', 'wp-cerber' ),
),
'pro' => 2
),
)
),
'role_twofactor' => array(
'name' => __( 'Two-Factor Authentication', 'wp-cerber' ),
'section_desc' => '',
'fields' => array(
'2famode' => array(
'title' => __( 'Two-factor authentication', 'wp-cerber' ),
'type' => 'select',
'set' => array(
0 => __( 'Disabled', 'wp-cerber' ),
1 => __( 'Always enabled', 'wp-cerber' ),
2 => __( 'Advanced mode', 'wp-cerber' )
),
),
'2faremember' => array(
'title' => __( 'Allow users to remember their devices for', 'wp-cerber' ),
'type' => 'number',
'label' => __( 'days', 'wp-cerber' ),
'enabler' => array( '2famode', '[1,2]' ),
'pro' => 1 // Does it work?
),
'2faemailinfo' => array(
'title' => __( 'Show sign-in attempt details in 2FA emails', 'wp-cerber' ),
'type' => 'select',
'set' => array(
0 => __( 'Disabled', 'wp-cerber' ),
1 => __( 'Minimal', 'wp-cerber' ),
2 => __( 'Full', 'wp-cerber' ),
),
'enabler' => array( '2famode', '[1,2]' ),
'pro' => 1 // Does it work?
),
'2fasmart' => array(
'title' => __( 'Enforce two-factor authentication if any of the following conditions is true', 'wp-cerber' ),
'type' => 'html',
'enabler' => array( '2famode', 2 ),
'pro' => 1
),
'2fanewcountry' => array(
'title' => __( 'Login from a different country', 'wp-cerber' ),
'type' => 'checkbox',
'enabler' => array( '2famode', 2 ),
'pro' => 1
),
'2fanewnet4' => array(
'title' => __( 'Login from a different network Class C', 'wp-cerber' ),
'type' => 'checkbox',
'enabler' => array( '2famode', 2 ),
'pro' => 1
),
'2fanewip' => array(
'title' => __( 'Login from a different IP address', 'wp-cerber' ),
'type' => 'checkbox',
'enabler' => array( '2famode', 2 ),
'pro' => 1
),
'2fanewua' => array(
'title' => __( 'Login from a different browser or device', 'wp-cerber' ),
'type' => 'checkbox',
'enabler' => array( '2famode', 2 ),
'pro' => 1
),
'2fasessions' => array(
'title' => __( 'If the number of concurrent user sessions is greater', 'wp-cerber' ),
'type' => 'number',
'enabler' => array( '2famode', 2 ),
'pro' => 1
),
'note2' => array(
'title' => __( 'Enforce two-factor authentication with fixed intervals', 'wp-cerber' ),
'type' => 'html',
'enabler' => array( '2famode', 2 ),
'pro' => 1
),
'2fadays' => array(
'title' => __( 'Regular time intervals', 'wp-cerber' ),
'type' => 'number',
'label' => __( 'days', 'wp-cerber' ),
'enabler' => array( '2famode', 2 ),
'pro' => 1
),
'2falogins' => array(
'title' => __( 'Fixed number of logins', 'wp-cerber' ),
'type' => 'number',
'label' => __( 'number of logins', 'wp-cerber' ),
'enabler' => array( '2famode', 2 ),
'pro' => 1
),
)
),
);
}
if ( ! $field_id ) {
return $role_sections;
}
$field = false;
foreach ( $role_sections as $section_id => $role_section ) {
if ( $field = $role_section['fields'][ $field_id ] ?? false ) {
$field['section_name'] = $role_section['name'] ?? '';
$field['section_id'] = $section_id;
}
}
return $field;
}
function crb_settings_update_role_policies( $post ) {
$roles = wp_roles();
$policies = array();
foreach ( $roles->role_names as $role_id => $name ) {
$policies[ $role_id ] = $post[ $role_id ];
}
array_walk_recursive( $policies, function ( &$element, $key ) {
$element = trim( $element );
if ( $key == 'rdr_logout' ) {
if ( false !== strrpos( $element, 'wp-admin' ) ) {
$element = '';
}
}
if ( $element && in_array( $key, array( 'rdr_login', 'rdr_logout' ) ) ) {
if ( substr( $element, 0, 4 ) != 'http'
&& $element[0] != '/' ) {
$element = '/' . $element;
}
}
crb_sanitize_deep( $element );
} );
if ( cerber_settings_update( array( CRB_ROLE_STS => $policies ) ) ) {
cerber_admin_message( __( 'Role policies have been updated', 'wp-cerber' ) );
}
}
function crb_destroy_user_sessions( $user_id ) {
if ( ! $user_id || get_current_user_id() == $user_id ) {
return;
}
$manager = WP_Session_Tokens::get_instance( $user_id );
$manager->destroy_all();
}
function crb_admin_is_current_session( $session_id ) {
static $st = null;
if ( $st === null ) {
$st = crb_get_session_token();
}
return ( $session_id === cerber_hash_token( $st ) );
}
function crb_admin_get_user_cell( $user_id = null, $base_url = '', $text = '', $label = '' ) {
static $wp_roles, $user_cache = array();
if ( ! $user_id ) {
return '';
}
$key = $user_id . '-' . sha1( (string) $text . ' ' . (string) $label );
if ( isset( $user_cache[ $key ] ) ) {
return $user_cache[ $key ];
}
if ( ! $user = crb_get_userdata( $user_id ) ) {
if ( ! $user_data = cerber_get_set( 'user_deleted', $user_id ) ) {
$user_cache[ $key ] = 'UID ' . $user_id;
return '';
}
}
else {
$user_data = array( 'roles' => $user->roles, 'display_name' => $user->display_name );
}
if ( ! isset( $wp_roles ) ) {
$wp_roles = wp_roles()->roles;
}
$roles = '';
if ( ! is_multisite() && $user_data['roles'] ) {
$r = array();
foreach ( $user_data['roles'] as $role ) {
$r[] = $wp_roles[ $role ]['name'];
}
$roles = '<span class="crb_act_role">' . implode( ', ', $r ) . '</span>';
}
$lbl = ( $label ) ? '<span class="crb-label crb-label-green">' . $label . '</span>' : '';
if ( $base_url ) {
$ret = '<a href="' . $base_url . '&filter_user=' . $user_id . '"><b>' . $user_data['display_name'] . '</b></a>' . $lbl . '<div>' . $roles . '</div>';
}
else {
$ret = '<b>' . $user_data['display_name'] . '</b>' . $lbl . '<div>' . $roles . '</div>';
}
$ret = '<div class="crb-us-name">' . $ret . '</div>';
if ( $avatar = get_avatar( $user_id, 32 ) ) {
$avatar = '<td>' . $avatar . '</td>';
}
else {
$avatar = '';
}
$user_cache[ $key ] = '<table class="crb-avatar"><tr>' . $avatar . '<td>' . $ret . $text . '</td></tr></table>';
return $user_cache[ $key ];
}
function crb_show_sessions_page() {
// Helper for WP_List_Table URLs and navigation links
if ( nexus_is_valid_request() ) {
// Add parameters
$add = array( 'paged', 'order', 'orderby' );
foreach ( $add as $param ) {
//if ( $val = crb_array_get( crb_get_query_params(), $param ) ) {
if ( $val = crb_get_query_params( $param ) ) {
$_REQUEST[ $param ] = $val;
$_GET[ $param ] = $val;
}
}
// Correct URL
add_filter( 'set_url_scheme', function ( $url, $scheme, $orig_scheme ) {
return cerber_admin_link( 'sessions' );
}, 10, 3 );
}
echo '<form id="crb-user-sessions" method="get" action="">';
cerber_nonce_field( 'control', true );
echo '<input type="hidden" name="page" value="' . crb_admin_get_page() . '">';
echo '<input type="hidden" name="tab" value="' . crb_admin_get_tab() . '">';
echo '<input type="hidden" name="cerber_admin_do" value="crb_manage_sessions">';
$sessions_list = new CRB_Sessions_Table();
$sessions_list->prepare_items();
$sessions_list->display();
echo '</form>';
}
// Personal data exporters ----------------------------------------
function crb_pdata_exporter_act( $email_address, $page = 1 ) {
$per_page = 1000; // Rows per step (SQL query)
$limit = ( $per_page * ( absint( $page ) - 1 ) ) . ',' . $per_page;
$data = array();
if ( ( ! $user = get_user_by( 'email', $email_address ) )
|| ! $user->ID
|| ! $rows = CRB_Activity::get_log( [], array( 'id' => $user->ID ), [], $limit ) ) {
$done = true;
if ( $page == 1 ) { // Nothing was logged at all
$data[] = array( 'name' => 'Events', 'value' => 'None logged' );
}
}
else {
$done = false; // There are rows to be exported
$labels = cerber_get_labels( 'activity' );
foreach ( $rows as $row ) {
//$value = 'IP: ' . $row->ip . ' | ' . $labels[ $row->activity ];
$value = array( 'IP_ADDRESS' => $row->ip, 'EVENT' => $labels[ $row->activity ] );
if ( $row->user_login ) {
$value['USERNAME'] = $row->user_login;
}
$value = json_encode( $value, JSON_UNESCAPED_UNICODE );
// Format is defined by WordPress
$data[] = array( 'name' => cerber_date( $row->stamp, false ), // First column
'value' => $value // Second column
);
}
}
return crb_pdata_formater( $data, 'cerber-activity', 'Activity Log', $done );
}
function crb_pdata_exporter_trf( $email_address, $page = 1 ) {
$per_page = 500; // Rows per step (SQL query)
$limit = ( $per_page * ( absint( $page ) - 1 ) ) . ',' . $per_page;
$data = array();
if ( ( ! $user = get_user_by( 'email', $email_address ) )
|| ! $user->ID
|| ! $rows = cerber_db_get_results( 'SELECT ip, uri, stamp, request_fields, request_details FROM ' . CERBER_TRAF_TABLE . ' WHERE user_id = ' . $user->ID . ' LIMIT ' . $limit, MYSQL_FETCH_OBJECT ) ) {
$done = true;
if ( $page == 1 ) { // Nothing was logged at all
$data[] = array( 'name' => 'Events', 'value' => 'None logged' );
}
}
else {
$done = false; // There are rows to be exported
$what = crb_get_settings( 'pdata_trf' );
foreach ( $rows as $row ) {
$value = array( 'IP_ADDRESS' => $row->ip );
if ( isset( $what[1] ) ) {
$value['URL'] = $row->uri;
}
if ( isset( $what[2] ) ) {
$fields = crb_auto_decode( $row->request_fields );
if ( ! empty( $fields[1] ) ) {
$value['FORM_FIEDLS'] = $fields[1];
}
}
if ( isset( $what[3] ) ) {
$dets = crb_auto_decode( $row->request_details );
if ( ! empty( $dets[8] ) ) {
$value['COOKIES'] = $dets[8];
}
}
$value = json_encode( $value, JSON_UNESCAPED_UNICODE );
// Format is defined by WordPress
$data[] = array( 'name' => cerber_date( $row->stamp, false ), // First column
'value' => $value // Second column
);
}
}
return crb_pdata_formater( $data, 'cerber-traffic', 'Traffic Log', $done );
}
function crb_pdata_formater( $data = array(), $exp_id = '', $label = '', $done = true ) {
$export_items[] = array(
'group_id' => $exp_id,
'group_label' => $label,
'item_id' => $exp_id,
'data' => $data,
);
return array(
'data' => $export_items,
'done' => $done,
);
}
if ( crb_get_settings( 'pdata_export' ) ) {
add_filter( 'wp_privacy_personal_data_exporters', 'crb_pdata_register_exporters' );
}
function crb_pdata_register_exporters( $exporters ) {
if ( crb_get_settings( 'pdata_act' ) ) {
$exporters['cerber-security-act'] = array(
'exporter_friendly_name' => 'WP Cerber Activity',
'callback' => 'crb_pdata_exporter_act',
);
}
if ( crb_get_settings( 'pdata_trf' ) ) {
$exporters['cerber-security-trf'] = array(
'exporter_friendly_name' => 'WP Cerber Traffic',
'callback' => 'crb_pdata_exporter_trf',
);
}
return $exporters;
}
// Personal data erasers ----------------------------------------
function crb_pdata_eraser( $email_address, $page = 1 ) {
$removed = false;
$retained = false;
$done = true;
$msg = array();
if ( is_super_admin()
&& ( $user = get_user_by( 'email', $email_address ) )
&& $user->ID ) {
CRB_Activity::delete( array( 'user_id' => $user->ID ) );
cerber_db_query( 'DELETE FROM ' . CERBER_TRAF_TABLE . ' WHERE user_id = ' . $user->ID );
if ( ( $reg = get_user_meta( $user->ID, '_crb_reg_', true ) )
&& ( empty( $reg['user'] ) || $reg['user'] == $user->ID ) ) {
delete_user_meta( $user->ID, '_crb_reg_' );
}
cerber_delete_set( 'user_deleted', $user->ID );
if ( crb_get_settings( 'pdata_sessions' ) ) {
update_user_meta( $user->ID , 'session_tokens', array() );
}
if ( cerber_get_set( CRB_USER_SET, $user->ID ) ) {
if ( cerber_delete_set( CRB_USER_SET, $user->ID ) ) {
$removed = true;
$retained = false;
}
else {
$removed = false;
$retained = true;
}
}
// Check if removing is OK
if ( CRB_Activity::get_log( [], array( 'id' => $user->ID ), [], 1 )
|| cerber_db_get_var( 'SELECT user_id FROM ' . CERBER_TRAF_TABLE . ' WHERE user_id = ' . $user->ID . ' LIMIT 1' ) ) {
$removed = false;
$retained = true;
$done = false;
if ( $page >= 3 ) { // We failed after three attempts
$msg[] = 'WP Cerber is unable to delete rows in its log tables due to a database error. Check the server error log.';
$done = true;
}
}
}
return array(
'items_removed' => $removed,
'items_retained' => $retained,
'messages' => $msg,
'done' => $done,
);
}
if ( crb_get_settings( 'pdata_erase' ) ) {
add_filter( 'wp_privacy_personal_data_erasers', 'crb_pdata_register_eraser' );
}
function crb_pdata_register_eraser( $erasers ) {
$erasers['cerber-security-erase'] = array(
'eraser_friendly_name' => __( 'WP Cerber Personal Data Eraser' ),
'callback' => 'crb_pdata_eraser',
);
return $erasers;
}
/**
* Quick analysis - returns textual info if the user has any issue with logging in (from the WP Cerber point of view).
* Helps to troubleshot user logging in issues.
*
* @param WP_User $user
*
* @return array|false
*
* @since 9.0.2
*
* @keywords assistant
*/
function crb_get_user_auth_status( WP_User $user ) {
$nope = '';
$nope_more = array();
if ( $b = crb_is_user_blocked( $user->ID ) ) {
$nope = crb_user_blocked_by( $b );
$nope_more = crb_escape_html( $b['blocked_note'] );
return array( $nope, [ $nope_more ], true );
}
if ( crb_is_username_prohibited( $user->user_login ) ) {
$nope = __( 'username is prohibited', 'wp-cerber' );
$nope_more = '<a href="' . cerber_admin_link( 'global_policies' ) . '" target="_blank">' . __( "Check users' settings", 'wp-cerber' ) . '</a>';
return array( $nope, [ $nope_more ], true );
}
// Is user's IP is locked out?
if ( $user_ip = crb_is_user_ip_locked_out( $user ) ) {
$nope = __( 'The IP address used in the last failed login attempt is locked out', 'wp-cerber' );
$remove = cerber_admin_link_add( array( 'cerber_admin_do' => 'unlockip', 'ip' => $user_ip ), true );
$nope_more = array( $user_ip, '<a href="' . $remove . '" class="crb-confirm-action">'. __( 'If necessary, click here to unblock the IP address.', 'wp-cerber' ).'</a>' );
return array( $nope, $nope_more, false );
}
// Was the attempt to log in denied by WP Cerber?
if ( ! $last_denied = crb_get_last_failed( $user->user_login, $user->user_email, true ) ) {
return false;
}
$last_login = crb_get_last_user_login( $user->ID );
if ( $last_login && $last_denied->stamp < $last_login['ts'] ) {
return false; // Not relevant anymore, user has logged in
}
if ( $reason = cerber_get_labels( 'status', $last_denied->ac_status ) ) {
$nope = __( 'The last attempt to log in was denied due to the following reason', 'wp-cerber' );
$nope_more = array( $reason );
$knowledge_base = array( CRB_STS_11 => 'antispam', 14 => 'acl', 16 => 'geo' );
if ( $go = crb_array_get( $knowledge_base, $last_denied->ac_status ) ) {
$nope_more[] = '<a href="' . cerber_admin_link( (string) $go ) . '" target="_blank">' . __( 'If necessary, check and update settings.', 'wp-cerber' ) . '</a>';
}
}
if ( $nope ) {
return array( $nope, $nope_more, false );
}
return false;
}
/**
* Format user status info as HTML
*
* @param array $status User status info
*
* @return string
*/
function crb_format_user_status( array $status ): string {
$status_message = $status[0];
if ( ! empty( $status[2] ) ) {
/* translators: %s is the specific reason why the user cannot log in. */
$status_message = sprintf( __( 'User is not allowed to log in - %s', 'wp-cerber' ), $status[0] );
}
$more = '';
if ( $status[1] ?? false ) {
$more = '<p>' . implode( '</p><p>', $status[1] ) . '</p>';
}
return '<span>' . $status_message . '</span>' . $more;
}
/**
* Detects if the user's IP is locked out due to multiple failed attempts to log in
*
* @param WP_User $user
*
* @return false|string The IP address from the last failed login attempt if the IP is locked out
*
* @since 9.0.2
*/
function crb_is_user_ip_locked_out( $user ) {
// No blocked IP, no failed attempts
if ( ! cerber_db_get_row( 'SELECT * FROM ' . CRB_LOCKOUT_TABLE . ' LIMIT 1' )
//|| ! $last_failed = cerber_db_get_row( 'SELECT * FROM ' . CERBER_LOG_TABLE . ' WHERE ( user_login = "' . $user->user_login . '" OR user_login = "' . $user->user_email . '" ) AND activity = ' . CRB_EV_LFL . ' ORDER BY stamp DESC LIMIT 1', MYSQL_FETCH_OBJECT ) ) {
|| ! $last_failed = crb_get_last_failed( $user->user_login, $user->user_email ) ) {
return false;
}
// User logged in after several failed attempts - OK
if ( ( $last_login = crb_get_last_user_login( $user->ID ) )
&& ( $last_failed->stamp < $last_login['ts'] ) ) {
return false;
}
// Is user's IP locked?
if ( ( $block = crb_get_lockout( $last_failed->ip ) )
&& $block->reason_id == 701 ) {
return $last_failed->ip;
}
return false;
}
Home - Capital GMC Buick Regina
Skip to content
{{ $t(category) }}
Error
{{vehicle.modelData.year}} {{vehicle.modelData.make}} {{vehicle.modelData.model}}
Starting from {{vehicle.modelData.startingPrice | moneyFormat(lang)}}
Welcome to Capital GMC BUICK – REGINA Thank you for choosing Capital GMC Buick | Regina, your premier certified Buick and GMC dealership proudly serving drivers in Regina and the surrounding communities. Whether you’re searching for a brand-new Buick or GMC vehicle or a meticulously inspected pre-owned model, we have a diverse selection to match your needs and lifestyle.
Beyond our impressive inventory, we offer a seamless and stress-free financing experience through our well-connected finance centre, where our team of experts is dedicated to securing the best loan or lease options for you, quickly, transparently, and hassle-free.
But our commitment to you doesn’t stop at the sale. Our state-of-the-art service centre is staffed with skilled Buick and GMC technicians who use the latest equipment and genuine OEM parts to keep your vehicle running at its best. From routine maintenance to complex repairs, we’ve got you covered.
Experience top-tier customer service, quality vehicles, and expert care, all in one place. Visit Capital GMC Buick | Regina today or call us at 306-205-8072 with any questions. We’re here to help!
Ask a Question
Capital GMC Buick – Regina
Contact Us
Have a question or need assistance? Fill out the form and we will reach out to you as soon as possible.
Notice: JavaScript is required for this content.
CLOSE
Schedule a Visit
Let us know when you are coming and how we can assist you. We can ensure someone will be on hand to help you out at the desired date and time.
Notice: JavaScript is required for this content.
CLOSE
Find a Career
Have a look at our list of available positions and apply online today to join our team!
×
Opportunities to Grow
The auto industry is constantly changing and we want to continue to grow. We offer growth, leadership & mentorship programs to allow our staff to grow with us.
×
Competitive Salary
We have a significant earning potential with incentive-based pay in most roles. We also offer an employee referral bonus with paid bonuses.
×
Health & Dental
We offer a comprehensive benefits package including extended health, dental, and vision care. We also include paramedical, life insurance, paid sick leave, short & long-term disability coverages.
×
Vacation
We value our employees and want everyone to take their vacation time. We offer a minimum of 2 weeks vacation each year.
×
Training & Development
We have many opportunities for paid education and training in-house as well as training from the Manufacturer.
×
$10,000 Cash Giveaway – Terms & Conditions All October long, stop by Capital GMC Buick Cadillac, to enter for your chance to win $10,000 cash. No purchase is required, but entries must be made in-store.
The contest is open to residents of Saskatchewan who are 18+. Dealership employees and their households are not eligible. Entries will be accepted from October 1 to October 31, 2025. A random draw will take place on November 1, 2025.
The prize is one $10,000 award, paid by cheque, and must be accepted as awarded. Winner will be contacted by phone or email and must respond within 7 days or another entry may be drawn. Odds of winning depend on the number of entries received.By entering, you agree that Capital Automotive Group may use your name and photo for winner announcements. The contest is governed by the laws of Saskatchewan.
Notice: JavaScript is required for this content.
CLOSE
Members Only Bonus
