0 );
protected static $stat = array();
protected static $date_i18n_filters = array();
/**
* Initializes variables and actions
*/
public static function init() {
// Load all the settings
if ( is_network_admin() && ( empty($_GET[ 'page' ] ) || strpos( $_GET[ 'page' ], 'slimview' ) === false ) ) {
self::$settings = get_site_option( 'slimstat_options', array() );
}
else {
self::$settings = get_option( 'slimstat_options', array() );
}
if ( empty( self::$settings ) ) {
// Save the default values in the database
self::update_option( 'slimstat_options', self::init_options() );
}
else {
self::$settings = array_merge( self::init_options(), self::$settings );
}
// Allow third party tools to edit the options
self::$settings = apply_filters( 'slimstat_init_options', self::$settings );
// Allow third-party tools to use a custom database for Slimstat
self::$wpdb = apply_filters( 'slimstat_custom_wpdb', $GLOBALS[ 'wpdb' ] );
// Define the folder where to store the geolocation database (shared among sites in a network, by default)
if ( defined( 'UPLOADS' ) ) {
self::$upload_dir = ABSPATH . UPLOADS;
}
else {
self::$upload_dir = wp_upload_dir();
self::$upload_dir = self::$upload_dir[ 'basedir' ];
if ( is_multisite() && ! ( is_main_network() && is_main_site() && defined( 'MULTISITE' ) ) ) {
self::$upload_dir = str_replace( '/sites/' . get_current_blog_id(), '', self::$upload_dir );
}
self::$upload_dir .= '/wp-slimstat';
self::$upload_dir = apply_filters( 'slimstat_maxmind_path', self::$upload_dir );
}
// Allow add-ons to turn off the tracker based on other conditions
$is_tracking_filter = apply_filters( 'slimstat_filter_pre_tracking', strpos( self::get_request_uri(), 'wp-admin/admin-ajax.php' ) === false );
$is_tracking_filter_js = apply_filters( 'slimstat_filter_pre_tracking_js', true );
// Enable the tracker (both server- and client-side)
if ( ( !is_admin() || self::$settings[ 'track_admin_pages' ] == 'on' ) && self::$settings[ 'is_tracking' ] == 'on' && $is_tracking_filter ) {
// Is server-side tracking active?
if ( self::$settings[ 'javascript_mode' ] != 'on' ) {
add_action( is_admin() ? 'admin_init' : 'wp', array( __CLASS__, 'slimtrack' ), 5 );
if ( self::$settings[ 'ignore_wp_users' ] != 'on' ) {
add_action( 'login_init', array( __CLASS__, 'slimtrack' ), 10 );
}
}
// Slimstat tracks screen resolutions, outbound links and other client-side information using a client-side tracker
add_action( is_admin() ? 'admin_enqueue_scripts' : 'wp_enqueue_scripts' , array( __CLASS__, 'enqueue_tracker' ), 15 );
if ( self::$settings[ 'ignore_wp_users' ] != 'on' ) {
add_action( 'login_enqueue_scripts', array( __CLASS__, 'enqueue_tracker' ), 10 );
}
}
// Hook a DB clean-up routine to the daily cronjob
add_action( 'wp_slimstat_purge', array( __CLASS__, 'wp_slimstat_purge' ) );
// Allow external domains on CORS requests
add_filter( 'allowed_http_origins', array( __CLASS__, 'open_cors_admin_ajax' ) );
// GDPR: Opt-out Ajax Handler
add_action( 'wp_ajax_slimstat_optout_html', array( __CLASS__, 'get_optout_html' ) );
add_action( 'wp_ajax_nopriv_slimstat_optout_html', array( __CLASS__, 'get_optout_html' ) );
// If this request was a redirect, we should update the content type accordingly
add_filter( 'wp_redirect_status', array( __CLASS__, 'update_content_type' ), 10, 2 );
// Shortcodes
add_shortcode( 'slimstat', array( __CLASS__, 'slimstat_shortcode' ), 15 );
// Include our browser detector library
include_once( plugin_dir_path( __FILE__ ) . 'vendor/browscap.php' );
add_action( 'init', array( 'slim_browser', 'init' ) );
// If add-ons are installed, check for updates
add_action( 'wp_loaded', array( __CLASS__, 'update_checker' ) );
// REST API Support
add_action( 'rest_api_init', array( __CLASS__, 'register_rest_route' ) );
// Load the admin library
if ( is_user_logged_in() ) {
include_once ( plugin_dir_path( __FILE__ ) . 'admin/index.php' );
add_action( 'init', array( 'wp_slimstat_admin', 'init' ), 60 );
}
}
// end init
/**
* Reads and processes the data received by the XHR tracker
*/
public static function slimtrack_ajax() {
// If the website is using a caching plugin, the tracking code might still be there, even if the user turned off tracking
if ( self::$settings[ 'is_tracking' ] != 'on' ) {
exit( self::_log_error( 204 ) );
}
$id = 0;
self::$data_js = apply_filters( 'slimstat_filter_pageview_data_js', self::$raw_post_array );
$site_host = parse_url( get_site_url(), PHP_URL_HOST );
self::$stat[ 'referer' ] = '';
if ( !empty( self::$data_js[ 'ref' ] ) ) {
self::$stat[ 'referer' ] = self::_base64_url_decode( self::$data_js[ 'ref' ] );
$parsed_ref = parse_url( self::$stat[ 'referer' ], PHP_URL_HOST );
if ( $parsed_ref === false ) {
exit( self::_log_error( 201 ) );
}
}
// Do we have an id for this request? If we do, we are either updating an existing pageview, or recording an event on the page
if ( !empty( self::$data_js[ 'id' ] ) ) {
// Make sure that the control code is valid
self::$data_js[ 'id' ] = self::_get_value_without_checksum( self::$data_js[ 'id' ] );
if ( self::$data_js[ 'id' ] === false ) {
exit( self::_log_error( 101 ) );
}
self::$stat[ 'id' ] = intval( self::$data_js[ 'id' ] );
if ( self::$stat[ 'id' ] < 0 ) {
do_action( 'slimstat_track_exit_' . abs( $intval_id ) );
exit( self::_get_value_with_checksum( self::$stat[ 'id' ] ) );
}
// If self::$data_js[ 'pos' ] is empty, update an existing pageview with client-based information (resolution, server latency, etc)
if ( empty( self::$data_js[ 'pos' ] ) ) {
self::_set_visit_id( true );
// Retrieves all the client-side info (screen resolution, server latency, etc) and sets the corresponding entries in self::$stat
self::$stat = self::_get_client_info( self::$data_js, self::$stat );
// Visitor is still on this page, record the timestamp in the corresponding field if this WAS NOT a request to update a "server-side" pageview with client-side info
if ( empty( self::$stat[ 'resolution' ] ) ) {
self::$stat[ 'dt_out' ] = self::date_i18n( 'U' );
}
// Is this a new visitor, based on his fingerprint?
if ( !empty( self::$stat[ 'fingerprint' ] ) && self::_is_new_visitor( self::$stat[ 'fingerprint' ] ) ) {
self::$stat[ 'notes' ] = array( 'new:yes' );
}
$id = self::_update_row( self::$stat );
}
// ... otherwise, is this an event: a click on a link (maybe a 'download'?) or other user action
else {
// Record the event
$event_info = array(
'position' => strip_tags( trim( self::$data_js[ 'pos' ] ) ),
'id' => self::$stat[ 'id' ],
'dt' => self::date_i18n( 'U' )
);
if ( !empty( self::$data_js[ 'no' ] ) ) {
$event_info[ 'notes' ] = self::_base64_url_decode( self::$data_js[ 'no' ] );
}
self::_insert_row( $event_info, $GLOBALS[ 'wpdb' ]->prefix . 'slim_events' );
if ( !empty( self::$data_js[ 'res' ] ) ) {
$resource = self::_base64_url_decode( self::$data_js[ 'res' ] );
$parsed_resource = parse_url( $resource );
if ( $parsed_resource === false ) {
exit( self::_log_error( 203 ) );
}
// Is this a download? If it is, add a new record to the database
if ( !empty( $parsed_resource[ 'path' ] ) && in_array( pathinfo( $parsed_resource[ 'path' ], PATHINFO_EXTENSION ), self::string_to_array( self::$settings[ 'extensions_to_track' ] ) ) ) {
self::$stat[ 'resource' ] = $parsed_resource[ 'path' ] . ( !empty( $parsed_resource[ 'query' ] ) ? '?' . $parsed_resource[ 'query' ] : '' );
self::$stat[ 'content_type' ] = 'download';
if ( !empty( self::$data_js[ 'fh' ] ) ) {
self::$stat[ 'fingerprint' ] = sanitize_text_field( self::$data_js[ 'fh' ] );
}
$id = self::slimtrack();
}
// .. or outbound link? If so, update the pageview with the new info
else if ( $parsed_resource[ 'host' ] != $site_host ) {
self::$stat[ 'outbound_resource' ] = $resource;
// Visitor is still on this page, record the timestamp in the corresponding field
self::$stat[ 'dt_out' ] = self::date_i18n( 'U' );
$id = self::_update_row( self::$stat );
}
}
else {
// Visitor is still on this page, record the timestamp in the corresponding field
self::$stat[ 'dt_out' ] = self::date_i18n( 'U' );
$id = self::_update_row( self::$stat );
}
}
}
// If self::$data_js[ 'id' ] is empty, we are tracking a new pageview
else {
self::$stat[ 'resource' ] = '';
if ( !empty( self::$data_js[ 'res' ] ) ) {
self::$stat[ 'resource' ] = self::_base64_url_decode( self::$data_js[ 'res' ] );
if ( parse_url( self::$stat[ 'resource' ] ) === false ) {
exit( self::_log_error( 203 ) );
}
}
// Retrieves all the client-side info (screen resolution, server latency, etc) and sets the corresponding entries in self::$stat
self::$stat = self::_get_client_info( self::$data_js, self::$stat );
if ( !empty( self::$data_js[ 'ci' ] ) ) {
self::$data_js[ 'ci' ] = self::_get_value_without_checksum( self::$data_js[ 'ci' ] );
if ( self::$data_js[ 'ci' ] === false ) {
exit( self::_log_error( 102 ) );
}
$content_info = @unserialize( self::_base64_url_decode( self::$data_js[ 'ci' ] ) );
if ( empty( $content_info ) || !is_array( $content_info ) ) {
exit( self::_log_error( 103 ) );
}
foreach ( array( 'content_type', 'category', 'content_id', 'author' ) as $a_key ) {
if ( !empty( $content_info[ $a_key ] ) ) {
self::$stat[ $a_key ] = sanitize_title( $content_info[ $a_key ] );
}
}
}
// ... otherwise we'll track this as an external page
else {
self::$stat[ 'content_type' ] = 'external';
}
// Is this a new visitor, based on his fingerprint?
if ( !empty( self::$stat[ 'fingerprint' ] ) && self::_is_new_visitor( self::$stat[ 'fingerprint' ] ) ) {
self::$stat[ 'notes' ] = array( 'new:yes' );
}
// Track the rest of the information related to this pageview
$id = self::slimtrack();
}
// Was this pageview tracked?
if ( empty( $id ) ) {
exit( 0 );
}
// Send the ID back to Javascript to track future interactions
do_action( 'slimstat_track_success' );
exit( self::_get_value_with_checksum( $id ) );
}
// end slimtrack_ajax
/**
* THE Slimstat tracker
*/
public static function slimtrack() {
self::$stat[ 'dt' ] = self::date_i18n( 'U' );
if ( empty( self::$stat[ 'notes' ] ) ) {
self::$stat[ 'notes' ] = array();
}
// Allow third-party tools to initialize the stat array
self::$stat = apply_filters( 'slimstat_filter_pageview_stat_init', self::$stat );
// Third-party tools can decide that this pageview should not be tracked, by setting its datestamp to zero
if ( empty( self::$stat ) || empty( self::$stat[ 'dt' ] ) ) {
return false;
}
// Reset the pageview ID, if it's set for some obscure reason
unset( self::$stat[ 'id' ] );
// Opt-out of tracking via cookie
if ( self::$settings[ 'display_opt_out' ] == 'on' ) {
$cookie_names = array( 'slimstat_optout_tracking' => 'true' );
if ( !empty( self::$settings[ 'opt_out_cookie_names' ] ) ) {
$cookie_names = array();
foreach ( self::string_to_array( self::$settings[ 'opt_out_cookie_names' ] ) as $a_cookie_pair ) {
list( $name, $value ) = explode( '=', $a_cookie_pair );
if ( !empty( $name ) && !empty( $value ) ) {
$cookie_names[ $name ] = $value;
}
}
}
foreach ( $cookie_names as $a_name => $a_value ) {
if ( isset( $_COOKIE[ $a_name ] ) && strpos( $_COOKIE[ $a_name ], $a_value ) !== false ) {
return false;
}
}
}
// Opt-in tracking via cookie (only those who have a cookie will be tracked)
if ( !empty( self::$settings[ 'opt_in_cookie_names' ] ) ) {
$cookie_names = array();
$opt_in_cookie_names = self::string_to_array( self::$settings[ 'opt_in_cookie_names' ] );
foreach ( $opt_in_cookie_names as $a_cookie_pair ) {
list( $name, $value ) = explode( '=', $a_cookie_pair );
if ( !empty( $name ) && !empty( $value ) ) {
$cookie_names[ $name ] = $value;
}
}
$cookie_found = false;
foreach ( $cookie_names as $a_name => $a_value ) {
if ( isset( $_COOKIE[ $a_name ] ) && $_COOKIE[ $a_name ] == $a_value ) {
$cookie_found = true;
}
}
if ( !$cookie_found ) {
return false;
}
}
// IP address
list ( self::$stat[ 'ip' ], self::$stat[ 'other_ip' ] ) = self::_get_remote_ip();
if ( empty( self::$stat[ 'ip' ] ) || self::$stat[ 'ip' ] == '0.0.0.0' ) {
$error = self::_log_error( 202 );
return false;
}
// Should we ignore this IP address?
foreach ( self::string_to_array( self::$settings[ 'ignore_ip' ] ) as $a_ip_range ) {
$ip_to_ignore = $a_ip_range;
if ( strpos( $ip_to_ignore, '/' ) !== false ) {
list( $ip_to_ignore, $cidr_mask ) = explode( '/', trim( $ip_to_ignore ) );
}
else{
$cidr_mask = self::_get_mask_length( $ip_to_ignore );
}
$long_masked_ip_to_ignore = substr( self::_dtr_pton( $ip_to_ignore ), 0, $cidr_mask );
$long_masked_user_ip = substr( self::_dtr_pton( self::$stat[ 'ip' ] ), 0, $cidr_mask );
$long_masked_user_other_ip = substr( self::_dtr_pton( self::$stat[ 'other_ip' ] ), 0 , $cidr_mask );
if ( $long_masked_user_ip === $long_masked_ip_to_ignore || $long_masked_user_other_ip === $long_masked_ip_to_ignore ) {
return false;
}
}
// Do we need to anonymize this IP address?
if ( self::$settings[ 'anonymize_ip' ] == 'on' ) {
// IPv4 or IPv6
$needle = '.';
$replace = '.0';
if ( self::_get_mask_length( self::$stat[ 'ip' ] ) == 128 ) {
$needle = ':';
$replace = ':0000';
}
self::$stat[ 'ip' ] = substr( self::$stat[ 'ip' ], 0, strrpos( self::$stat[ 'ip' ], $needle ) ) . $replace;
if ( !empty( self::$stat[ 'other_ip' ] ) ) {
self::$stat[ 'other_ip' ] = substr( self::$stat[ 'other_ip' ], 0, strrpos( self::$stat[ 'other_ip' ], $needle ) ) . $replace;
}
}
// Resource URL
if ( !isset( self::$stat[ 'resource' ] ) ) {
self::$stat[ 'resource' ] = self::get_request_uri();
}
// Is this a 'seriously malformed' URL?
$parsed_url = parse_url( self::$stat[ 'resource' ] );
if ( !$parsed_url ) {
$error = self::_log_error( 203 );
return false;
}
// Don't store the domain name in the database
self::$stat[ 'resource' ] = $parsed_url[ 'path' ] . ( !empty( $parsed_url[ 'query' ] ) ? '?' . $parsed_url[ 'query' ] : '' ) . ( !empty( $parsed_url[ 'fragment' ] ) ? '#' . $parsed_url[ 'fragment' ] : '' );
// Is this resource blacklisted?
if ( !empty( self::$settings[ 'ignore_resources' ] ) && self::_is_blacklisted( self::$stat[ 'resource' ], self::$settings[ 'ignore_resources' ] ) ) {
return false;
}
// Referrer URL
if ( !isset( self::$stat[ 'referer' ] ) && !empty( $_SERVER[ 'HTTP_REFERER' ] ) ) {
self::$stat[ 'referer' ] = $_SERVER[ 'HTTP_REFERER' ];
}
if ( !empty( self::$stat[ 'referer' ] ) ) {
// Is this a 'seriously malformed' URL?
$parsed_url = parse_url( self::$stat[ 'referer' ] );
if ( !$parsed_url ) {
$error = self::_log_error( 201 );
return false;
}
if ( !empty( $parsed_url[ 'scheme' ] ) && !in_array( strtolower( $parsed_url[ 'scheme' ] ), array( 'http', 'https', 'android-app' ) ) ) {
self::$stat[ 'notes' ][] = sprintf( __( 'Attempted XSS Injection: %s', 'wp-slimstat' ), self::$stat[ 'referer' ] );
unset( self::$stat[ 'referer' ] );
}
// Is this referer blacklisted?
if ( !empty( self::$settings[ 'ignore_referers' ] ) && self::_is_blacklisted( self::$stat[ 'referer' ], self::$settings[ 'ignore_referers' ] ) ) {
return false;
}
// Search terms
self::$stat[ 'searchterms' ] = self::_get_search_terms( self::$stat[ 'referer' ] );
// Are we storing internal referrers in the database?
$parsed_site_url = parse_url( get_site_url(), PHP_URL_HOST );
if ( !empty( $parsed_url[ 'host' ] ) && $parsed_url[ 'host' ] == $parsed_site_url && self::$settings[ 'track_same_domain_referers' ] != 'on' ) {
unset( self::$stat[ 'referer' ] );
}
}
// Internal WP search?
if ( empty( self::$stat[ 'searchterms' ] ) && !empty( $_POST[ 's' ] ) ) {
self::$stat[ 'searchterms' ] = sanitize_text_field( str_replace( '\\', '', $_REQUEST[ 's' ] ) );
}
// If this function was called by the js tracker (client mode), we've already determined this pageview's content information
if ( !isset( self::$stat[ 'content_type' ] ) ) {
$content_info = self::_get_content_info();
// Is this content type blacklisted?
if ( !empty( self::$settings[ 'ignore_content_types' ] ) && self::_is_blacklisted( $content_info[ 'content_type' ], self::$settings[ 'ignore_content_types' ] ) ) {
return false;
}
if ( is_array( $content_info ) ) {
self::$stat = self::$stat + $content_info;
}
}
// Number of results from query_posts
if ( ( is_archive() || is_search() ) && !empty( $GLOBALS[ 'wp_query' ]->found_posts ) ) {
self::$stat[ 'notes' ][] = 'results:' . intval( $GLOBALS['wp_query']->found_posts );
}
// Do not track report pages in the admin
if ( ( !empty( self::$stat[ 'resource' ] ) && strpos( self::$stat[ 'resource' ], 'wp-admin/admin-ajax.php' ) !== false ) || ( !empty( $_GET[ 'page' ] ) && strpos( $_GET[ 'page' ], 'slimview' ) !== false ) ) {
return false;
}
// Should we ignore this user?
if ( !empty( $GLOBALS[ 'current_user' ]->ID ) ) {
// Don't track logged-in users, if the corresponding option is enabled
if ( self::$settings[ 'ignore_wp_users' ] == 'on' ) {
return false;
}
// Don't track users with given capabilities
foreach ( self::string_to_array( self::$settings[ 'ignore_capabilities' ] ) as $a_capability ) {
if ( self::_is_blacklisted( $a_capability, self::$settings[ 'ignore_capabilities' ] ) ) {
return false;
}
}
// Is this user blacklisted?
if ( !empty( self::$settings[ 'ignore_users' ] ) && self::_is_blacklisted( $GLOBALS[ 'current_user' ]->data->user_login, self::$settings[ 'ignore_users' ] ) ) {
return false;
}
self::$stat[ 'username' ] = $GLOBALS[ 'current_user' ]->data->user_login;
self::$stat[ 'email' ] = $GLOBALS[ 'current_user' ]->data->user_email;
self::$stat[ 'notes' ][] = 'user:' . $GLOBALS[ 'current_user' ]->data->ID;
$not_spam = true;
}
elseif ( isset( $_COOKIE[ 'comment_author_' . COOKIEHASH ] ) ) {
// Is this a spammer?
$spam_comment = self::$wpdb->get_row( self::$wpdb->prepare( "
SELECT comment_author, comment_author_email, COUNT(*) comment_count
FROM `" . DB_NAME . "`.{$GLOBALS['wpdb']->comments}
WHERE comment_author_IP = %s AND comment_approved = 'spam'
GROUP BY comment_author
LIMIT 0,1", self::$stat[ 'ip' ] ), ARRAY_A );
if ( !empty( $spam_comment[ 'comment_count' ] ) ) {
if ( self::$settings[ 'ignore_spammers' ] == 'on' ){
return false;
}
else {
self::$stat[ 'notes' ][] = 'spam:yes';
self::$stat[ 'username' ] = $spam_comment[ 'comment_author' ];
self::$stat[ 'email' ] = $spam_comment[ 'comment_author_email' ];
}
}
else {
if ( !empty( $_COOKIE[ 'comment_author_' . COOKIEHASH ] ) ) {
self::$stat[ 'username' ] = sanitize_user( $_COOKIE[ 'comment_author_' . COOKIEHASH ] );
}
if ( !empty( $_COOKIE[ 'comment_author_email_' . COOKIEHASH ] ) ) {
self::$stat[ 'email' ] = sanitize_email( $_COOKIE[ 'comment_author_email_' . COOKIEHASH ] );
}
}
}
// Language
self::$stat[ 'language' ] = self::_get_language();
// Is this language blacklisted?
if ( !empty( self::$stat[ 'language' ] ) && !empty( self::$settings[ 'ignore_languages' ] ) && stripos( self::$settings[ 'ignore_languages' ], self::$stat[ 'language' ] ) !== false ) {
return false;
}
// Geolocation
include_once( plugin_dir_path( __FILE__ ) . 'vendor/maxmind.php' );
try {
$geolocation_data = maxmind_geolite2_connector::get_geolocation_info( self::$stat[ 'ip' ] );
}
catch( Exception $e ) {
// Invalid MaxMind data file
$error = self::_log_error( 205 );
return false;
}
if ( !empty( $geolocation_data[ 'country' ][ 'iso_code' ] ) && $geolocation_data[ 'country' ][ 'iso_code' ] != 'xx' ) {
self::$stat[ 'country' ] = strtolower( $geolocation_data[ 'country' ][ 'iso_code' ] );
if ( !empty( $geolocation_data[ 'city' ][ 'names' ][ 'en' ] ) ) {
self::$stat[ 'city' ] = $geolocation_data[ 'city' ][ 'names' ][ 'en' ];
}
if ( !empty( $geolocation_data[ 'subdivisions' ][ 0 ][ 'iso_code' ] ) && !empty( self::$stat[ 'city' ] ) ) {
self::$stat[ 'city' ] .= ' (' . $geolocation_data[ 'subdivisions' ][ 0 ][ 'iso_code' ] . ')';
}
if ( !empty( $geolocation_data[ 'location' ][ 'latitude' ] ) && !empty( $geolocation_data[ 'location' ][ 'longitude' ] ) ) {
self::$stat[ 'location' ] = $geolocation_data[ 'location' ][ 'latitude' ] . ',' . $geolocation_data[ 'location' ][ 'longitude' ];
}
}
// Is this country blacklisted?
if ( !empty( self::$stat[ 'country' ] ) && !empty( self::$settings[ 'ignore_countries' ] ) && stripos( self::$settings[ 'ignore_countries' ], self::$stat[ 'country' ] ) !== false ) {
return false;
}
// Mark or ignore Firefox/Safari prefetching requests (X-Moz: Prefetch and X-purpose: Preview)
if ( ( isset( $_SERVER[ 'HTTP_X_MOZ' ] ) && ( strtolower( $_SERVER[ 'HTTP_X_MOZ' ] ) == 'prefetch' ) ) ||
( isset( $_SERVER[ 'HTTP_X_PURPOSE' ] ) && ( strtolower( $_SERVER[ 'HTTP_X_PURPOSE' ] ) == 'preview' ) ) ) {
if ( self::$settings[ 'ignore_prefetch' ] == 'on' ) {
return false;
}
else{
self::$stat[ 'notes' ][] = 'pre:yes';
}
}
// User Agent
$browser = slim_browser::get_browser();
// Are we ignoring bots?
if ( self::$settings[ 'ignore_bots' ] == 'on' && $browser[ 'browser_type' ] == 1 ) {
return false;
}
// Is this browser blacklisted?
if ( !empty( self::$settings[ 'ignore_browsers' ] ) && self::_is_blacklisted( array( $browser[ 'browser' ], $browser[ 'user_agent' ] ), self::$settings[ 'ignore_browsers' ] ) ) {
return false;
}
// Is this operating system blacklisted?
if ( !empty( self::$settings[ 'ignore_platforms' ] ) && self::_is_blacklisted( $browser[ 'platform' ], self::$settings[ 'ignore_platforms' ] ) ) {
return false;
}
self::$stat = self::$stat + $browser;
// Do we need to assign a visit_id to this user?
$cookie_has_been_set = self::_set_visit_id( false );
// Allow third-party tools to modify all the data we've gathered so far
self::$stat = apply_filters( 'slimstat_filter_pageview_stat', self::$stat );
do_action( 'slimstat_track_pageview', self::$stat );
// Third-party tools can decide that this pageview should not be tracked, by setting its datestamp to zero
if ( empty( self::$stat ) || empty( self::$stat[ 'dt' ] ) ) {
return false;
}
// Implode the notes
if ( !empty( self::$stat[ 'notes' ] ) ) {
self::$stat[ 'notes' ] = '[' . implode( '][', self::$stat[ 'notes' ] ) . ']';
}
// Remove empty values
self::$stat = array_filter( self::$stat );
// Save this information in the database
self::$stat[ 'id' ] = self::_insert_row( self::$stat, $GLOBALS[ 'wpdb' ]->prefix . 'slim_stats' );
// Did something go wrong during the insert?
if ( empty( self::$stat[ 'id' ] ) ) {
// Attempt to init the environment (plugin just activated on a blog in a MU network?)
include_once ( plugin_dir_path( __FILE__ ) . 'admin/index.php' );
wp_slimstat_admin::init_environment( true );
// Now let's try again
self::$stat[ 'id' ] = self::_insert_row( self::$stat, $GLOBALS[ 'wpdb' ]->prefix . 'slim_stats' );
if ( empty( self::$stat[ 'id' ] ) ) {
$error = self::_log_error( 200 );
return false;
}
}
// Does this visitor have a visit_id cookie?
$set_cookie = apply_filters( 'slimstat_set_visit_cookie', ( !empty( self::$settings[ 'set_tracker_cookie' ] ) && self::$settings[ 'set_tracker_cookie' ] == 'on' ) );
if ( $set_cookie ) {
if ( empty( self::$stat[ 'visit_id' ] ) && !empty( self::$stat[ 'id' ] ) ) {
// Set a cookie to track this visit (Google and other non-human engines will just ignore it)
@setcookie(
'slimstat_tracking_code',
self::_get_value_with_checksum( self::$stat[ 'id' ] . 'id' ),
time() + 2678400, // one month
COOKIEPATH
);
}
elseif ( !$cookie_has_been_set && self::$settings[ 'extend_session' ] == 'on' && self::$stat[ 'visit_id' ] > 0 ) {
@setcookie(
'slimstat_tracking_code',
self::_get_value_with_checksum( self::$stat[ 'visit_id' ] ),
time() + self::$settings[ 'session_duration' ],
COOKIEPATH
);
}
}
return self::$stat[ 'id' ];
}
// end slimtrack
/**
* Decodes the permalink
*/
public static function get_request_uri() {
$request_url = '';
if ( isset( $_SERVER[ 'REQUEST_URI' ] ) ) {
return urldecode( $_SERVER[ 'REQUEST_URI' ] );
}
else if ( isset( $_SERVER[ 'SCRIPT_NAME' ] ) ) {
$request_url = $_SERVER[ 'SCRIPT_NAME' ];
}
else if ( isset( $_SERVER[ 'PHP_SELF' ] ) ) {
$request_url = $_SERVER[ 'PHP_SELF' ];
}
if ( isset( $_SERVER[ 'QUERY_STRING' ] ) ) {
$request_url .= '?' . $_SERVER[ 'QUERY_STRING' ];
}
return $request_url;
}
// end get_request_uri
public static function is_local_ip_address( $ip_address = '' ) {
if ( !filter_var( $ip_address, FILTER_VALIDATE_IP, FILTER_FLAG_NO_PRIV_RANGE | FILTER_FLAG_NO_RES_RANGE ) ) {
return true;
}
return false;
}
/**
* Implements the Slimstat Shortcode API
*/
public static function slimstat_shortcode( $_attributes = '', $_content = '' ) {
extract( shortcode_atts( array(
'f' => '', // recent, popular, count, widget
'w' => '', // column to use (for recent, popular and count) or widget to use
's' => ' ', // separator
'o' => 0 // offset for counters
), $_attributes ) );
$output = $where = $as_column = '';
$s = "$s";
// Load the localization files (for languages, operating systems, etc)
load_plugin_textdomain( 'wp-slimstat', false, '/wp-slimstat/languages' );
// Look for required fields
if ( empty( $f ) || empty( $w ) ) {
return '';
}
// Include the Reports Library, but don't initialize the database, since we will do that separately later
include_once( plugin_dir_path( __FILE__ ) . 'admin/view/wp-slimstat-reports.php' );
wp_slimstat_reports::init();
// Init the database library with the appropriate filters
if ( strpos ( $_content, 'WHERE:' ) !== false ) {
$where = html_entity_decode( str_replace( 'WHERE:', '', $_content ), ENT_QUOTES, 'UTF-8' );
}
else{
wp_slimstat_db::init( html_entity_decode( $_content, ENT_QUOTES, 'UTF-8' ) );
}
switch( $f ) {
case 'count':
case 'count-all':
$output = wp_slimstat_db::count_records( $w, $where, strpos( $f, 'all') === false ) + $o;
break;
case 'widget':
if ( empty( wp_slimstat_reports::$reports[ $w ] ) ) {
return __( 'Invalid Report ID', 'wp-slimstat' );
}
wp_register_style( 'wp-slimstat-frontend', plugins_url( '/admin/assets/css/slimstat.css', __FILE__ ) );
wp_enqueue_style( 'wp-slimstat-frontend' );
wp_slimstat_reports::$reports[ $w ][ 'callback_args' ][ 'is_widget' ] = true;
ob_start();
echo wp_slimstat_reports::report_header( $w );
call_user_func( wp_slimstat_reports::$reports[ $w ][ 'callback' ], wp_slimstat_reports::$reports[ $w ][ 'callback_args' ] );
wp_slimstat_reports::report_footer();
$output = ob_get_contents();
ob_end_clean();
break;
case 'recent':
case 'recent-all':
case 'top':
case 'top-all':
$function = 'get_' . str_replace( '-all', '', $f );
if ( $w == '*' ) {
$w = 'id';
}
$w = self::string_to_array( $w );
// Some columns are 'special' and need be removed from the list
$w_clean = array_diff( $w, array( 'count', 'display_name', 'hostname', 'post_link', 'post_link_no_qs', 'dt' ) );
// The special value 'display_name' requires the username to be retrieved
if ( in_array( 'display_name', $w ) ) {
$w_clean[] = 'username';
}
// The special value 'post_list' requires the resource to be retrieved
if ( in_array( 'post_link', $w ) ) {
$w_clean[] = 'resource';
}
// The special value 'post_list_no_qs' requires a substring to be calculated
if ( in_array( 'post_link_no_qs', $w ) ) {
$w_clean = array( 'SUBSTRING_INDEX( resource, "' . ( !get_option( 'permalink_structure' ) ? '&' : '?' ) . '", 1 )' );
$as_column = 'resource';
}
// Retrieve the data
$results = wp_slimstat_db::$function( implode( ', ', $w_clean ), $where, '', strpos( $f, 'all' ) === false, $as_column );
// No data? No problem!
if ( empty( $results ) ) {
return '';
}
// Are nice permalinks enabled?
$permalinks_enabled = get_option( 'permalink_structure' );
// Format results
$output = array();
foreach( $results as $result_idx => $a_result ) {
foreach( $w as $a_column ) {
$output[ $result_idx ][ $a_column ] = "";
switch( $a_column ) {
case 'count':
$output[ $result_idx ][ $a_column ] .= $a_result[ 'counthits' ];
break;
case 'country':
$output[ $result_idx ][ $a_column ] .= wp_slimstat_i18n::get_string( 'c-' . $a_result[ $a_column ] );
break;
case 'display_name':
$user_details = get_user_by( 'login', $a_result[ 'username' ] );
if ( !empty( $user_details ) ) {
$output[ $result_idx ][ $a_column ] .= $user_details->display_name;
}
else {
$output[ $result_idx ][ $a_column ] .= $a_result[ 'username' ];
}
break;
case 'dt':
$output[ $result_idx ][ $a_column ] .= date_i18n( get_option( 'date_format' ) . ' ' . get_option( 'time_format' ), $a_result[ 'dt' ] );
break;
case 'hostname':
$output[ $result_idx ][ $a_column ] .= self::gethostbyaddr( $a_result[ 'ip' ] );
break;
case 'language':
$output[ $result_idx ][ $a_column ] .= wp_slimstat_i18n::get_string( 'l-' . $a_result[ $a_column ] );
break;
case 'platform':
$output[ $result_idx ][ $a_column ] .= wp_slimstat_i18n::get_string( $a_result[ $a_column ] );
break;
case 'post_link':
case 'post_link_no_qs':
$post_id = url_to_postid( $a_result[ 'resource' ] );
if ( $post_id > 0 ) {
$output[ $result_idx ][ $a_column ] .= "" . get_the_title( $post_id ) . '';
}
else {
$output[ $result_idx ][ $a_column ] .= "{$a_result[ 'resource' ]}";
}
break;
default:
$output[ $result_idx ][ $a_column ] .= $a_result[ $a_column ];
break;
}
$output[ $result_idx ][ $a_column ] .= '';
}
$output[ $result_idx ] = '
' . implode( $s, $output[ $result_idx ] ). '
';
}
$output = '
' . implode( '', $output ) . '
';
break;
default:
break;
}
return $output;
}
// end slimstat_shortcode
/**
* Opens given domains during CORS requests to admin-ajax.php
*/
public static function open_cors_admin_ajax( $_allowed_origins = array() ) {
$exploded_domains = self::string_to_array( self::$settings[ 'external_domains' ] );
if ( !empty( $exploded_domains ) && !empty( $exploded_domains[ 0 ] ) ) {
$_allowed_origins = array_merge( $_allowed_origins, $exploded_domains );
}
return $_allowed_origins;
}
// end open_cors_admin_ajax
/**
* Implements a REST API interface to retrieve Slimstat reports and metrics
*/
public static function rest_api_response( $_request = array() ) {
$filters = '';
if ( !empty( $_request[ 'filters' ] ) ) {
$filters = $_request[ 'filters' ];
}
if ( empty( $_request[ 'dimension' ] ) ) {
return new WP_Error( 'rest_invalid', esc_html__( '[REST API] The dimension parameter is required. Please review your request and try again.', 'wp-slimstat' ), array( 'status' => 400 ) );
}
if ( empty( $_request[ 'function' ] ) ) {
return new WP_Error( 'rest_invalid', esc_html__( '[REST API] The function parameter is required. Please review your request and try again.', 'wp-slimstat' ), array( 'status' => 400 ) );
}
include_once( plugin_dir_path( __FILE__ ) . 'admin/view/wp-slimstat-db.php' );
wp_slimstat_db::init( $filters );
$response = array(
'function' => htmlentities( $_request[ 'function' ], ENT_QUOTES, 'UTF-8' ),
'dimension' => htmlentities( $_request[ 'dimension' ], ENT_QUOTES, 'UTF-8' ),
'data' => 0
);
switch( $_request[ 'function' ] ) {
case 'count':
case 'count-all':
$response[ 'data' ] = wp_slimstat_db::count_records( $_request[ 'dimension' ], '', strpos( $_request[ 'function' ], '-all') === false );
break;
case 'recent':
case 'recent-all':
case 'top':
case 'top-all':
$function = 'get_' . str_replace( '-all', '', $_request[ 'function' ] );
// Retrieve the data
$response[ 'data' ] = array_values( wp_slimstat_db::$function( $_request[ 'dimension' ], '', '', strpos( $_request[ 'function' ], '-all' ) === false ) );
break;
default:
// This should never happen, because of the 'enum' condition for this parameter. But never say never...
$response[ 'data' ] = new WP_Error( 'rest_invalid', esc_html__( '[REST API] You sent an invalid request. Accepted function values include: count, count-all, recent, recent-all, top and top-all. Please review your request and try again.', 'wp-slimstat' ), array( 'status' => 400 ) );
break;
}
return rest_ensure_response( $response );
}
// end rest_api_response
/**
* Implements a REST API authentication mechanism via token
*/
public static function rest_api_authorization( $_request = array() ) {
if ( empty( $_request[ 'token' ] ) ) {
return new WP_Error( 'rest_invalid', esc_html__( '[REST API] Please use a valid token in order to access the REST API endpoint at this URL.', 'wp-slimstat' ), array( 'status' => 400 ) );
}
if ( !in_array( $_request[ 'token' ], self::string_to_array( self::$settings['rest_api_tokens'] ) ) ) {
return false;
}
return true;
}
// end rest_api_authorization
/**
* Registers a new REST API route for the Slimstat endpoint
*/
public static function register_rest_route() {
register_rest_route( 'slimstat/v1', '/get', array(
'methods' => WP_REST_Server::READABLE,
'callback' => array( __CLASS__, 'rest_api_response' ),
'permission_callback' => array( __CLASS__, 'rest_api_authorization' ),
'args' => array(
'token' => array(
'description' => __( 'You will need to specify a valid token to be able to query the data. Tokens are defined in Slimstat > Settings > Access Control.', 'wp-slimstat' ),
'type' => 'string'
),
'function' => array(
'description' => __( 'This parameter specifies the type of QUERY you would like to perform. Accepted funciton values include: count, count-all, recent, recent-all, top and top-all.', 'wp-slimstat' ),
'type' => 'string',
'enum' => array( 'count', 'count-all', 'recent', 'recent-all', 'top', 'top-all' )
),
'dimension' => array(
'description' => __( 'This parameter indicates what dimension to return: * (all data), ip, resource, browser, operating system, etc. You can only specify one dimension at a time.', 'wp-slimstat' ),
'type' => 'string',
'enum' => array( '*', 'id', 'ip', 'username', 'email', 'country', 'referer', 'resource', 'searchterms', 'browser', 'platform', 'language', 'resolution', 'content_type', 'content_id', 'tz_offset', 'outbound_resource' )
),
'filters' => array(
'description' => __( 'This parameter is used to filter a given dimension (resources, browsers, operating systems, etc) so that it satisfies certain conditions (i.e.: browser contains Chrome). Please make sure to urlencode this value, and to use the usual filter format: browser contains Chrome&&&referer contains slim (encoded: browser%20contains%20Chrome%26%26%26referer%20contains%20slim)', 'wp-slimstat' ),
'type' => 'string'
)
)
) );
}
// end register_rest_route
/**
* Converts a series of comma separated values into an array
*/
public static function string_to_array( $_option = '' ) {
if ( empty( $_option ) || !is_string( $_option ) ) {
return array();
}
else {
return array_filter( array_map( 'trim', explode( ',', $_option ) ) );
}
}
// end string_to_array
/**
* Toggles WordPress filters on date_i18n function
*/
public static function toggle_date_i18n_filters( $_turn_on = true ) {
if ( $_turn_on && !empty( self::$date_i18n_filters ) && is_array( self::$date_i18n_filters ) ) {
foreach ( self::$date_i18n_filters as $i18n_priority => $i18n_func_list ) {
foreach ( $i18n_func_list as $func_name => $func_args ) {
if ( !empty( $func_args[ 'function' ] ) && is_string( $func_args[ 'function' ] ) ) {
add_filter( 'date_i8n', $func_args[ 'function' ], $i18n_priority, intval( $func_args[ 'accepted_args' ] ) );
}
}
}
}
else if ( !empty( $GLOBALS[ 'wp_filter' ][ 'date_i18n' ][ 'callbacks' ] ) && is_array( $GLOBALS[ 'wp_filter' ][ 'date_i18n' ][ 'callbacks' ] ) ) {
self::$date_i18n_filters = $GLOBALS[ 'wp_filter' ][ 'date_i18n' ][ 'callbacks' ];
remove_all_filters( 'date_i18n' );
}
}
// end toggle_date_i18n_filters
/**
* Calls the date_i18n function without filters
*/
public static function date_i18n( $_format ) {
self::toggle_date_i18n_filters( false );
$date = date_i18n( $_format );
self::toggle_date_i18n_filters( true );
return $date;
}
// end date_i18n
/**
* Sets the default values for all the options
*/
public static function init_options(){
return array(
'version' => self::$version,
'secret' => wp_hash( uniqid( time(), true ) ),
'browscap_last_modified' => 0,
// General
// -----------------------------------------------------------------------
// General - Tracker
'is_tracking' => 'on',
'track_admin_pages' => 'no',
'javascript_mode' => 'on',
// General - WordPress Integration
'add_dashboard_widgets' => 'on',
'use_separate_menu' => 'no',
'add_posts_column' => 'no',
'posts_column_pageviews' => 'on',
'hide_addons' => 'no',
// General - Database
'auto_purge' => 0,
'auto_purge_delete' => 'on',
// Tracker
// -----------------------------------------------------------------------
// Tracker - Data Protection
'anonymize_ip' => 'no',
'set_tracker_cookie' => 'on',
'display_opt_out' => 'no',
'opt_out_cookie_names' => '',
'opt_in_cookie_names' => '',
'opt_out_message' => '
This website stores cookies on your computer. These cookies are used to provide a more personalized experience and to track your whereabouts around our website in compliance with the European General Data Protection Regulation. If you decide to to opt-out of any future tracking, a cookie will be setup in your browser to remember this choice for one year.