plugin = $plugin;
// Hooks for Cron Jobs
add_action('advaipbl_send_summary_email', [$this, 'send_summary_email']);
add_action('advaipbl_abuseipdb_limit_email', [$this, 'send_abuseipdb_limit_email']);
}
/**
* Processes and sends the daily/weekly security summary email.
*/
public function send_summary_email() {
global $wpdb;
$table_name = $wpdb->prefix . 'advaipbl_notifications_queue';
// phpcs:ignore WordPress.DB.PreparedSQL.InterpolatedNotPrepared
$notifications = $wpdb->get_results("SELECT * FROM $table_name ORDER BY timestamp ASC");
if (empty($notifications)) {
return;
}
$options = $this->plugin->options;
$to = !empty($options['notification_email']) && is_email($options['notification_email']) ? $options['notification_email'] : get_option('admin_email');
$site_name = get_bloginfo('name');
$total_blocks = count($notifications);
/* translators: 1: Site name, 2: Total number of blocked IPs. */
$email_subject = sprintf(__('[%1$s] Security Summary: %2$d New Blocks', 'advanced-ip-blocker'), $site_name, $total_blocks);
/* translators: %d: Total number of blocked IPs. */
$template_title = sprintf( _n( '%d New Block', '%d New Blocks', $total_blocks, 'advanced-ip-blocker' ), $total_blocks );
// 1. Construir el contenido HTML
$blocks_by_type = [];
foreach ($notifications as $notification) {
$blocks_by_type[$notification->block_type][] = $notification;
}
$summary_html = '' . esc_html__( 'Here is your security summary for the last period.', 'advanced-ip-blocker' ) . '
';
$summary_html .= '' . esc_html__( 'Summary by Block Type', 'advanced-ip-blocker' ) . '
';
foreach ( $blocks_by_type as $type => $blocks ) {
$type_capitalized = ucfirst( $type );
$block_count = count( $blocks );
/* translators: 1: Block type (e.g. Honeypot, 404). 2: Number of blocks. */
$summary_html .= '- ' . esc_html( $type_capitalized ) . ': ' . sprintf( esc_html( _n( '%d block', '%d blocks', $block_count, 'advanced-ip-blocker' ) ), $block_count ) . '
';
}
$summary_html .= '
';
$summary_html .= '' . esc_html__( 'Recent Block Details', 'advanced-ip-blocker' ) . '
';
$summary_html .= '' .
'| ' . esc_html__('Time', 'advanced-ip-blocker') . ' | ' .
'' . esc_html__('Blocked IP', 'advanced-ip-blocker') . ' | ' .
'' . esc_html__('Reason', 'advanced-ip-blocker') . ' | ' .
'
';
$details_limit = 20;
$limited_notifications = array_slice($notifications, -$details_limit);
foreach ( $limited_notifications as $notification ) {
$formatted_time = date_i18n(get_option('date_format') . ' ' . get_option('time_format'), strtotime($notification->timestamp));
$summary_html .= '' .
'| ' . esc_html( $formatted_time ) . ' | ' .
'' . esc_html( $notification->ip ) . ' | ' .
'' . esc_html( $notification->reason ) . ' | ' .
'
';
}
$summary_html .= '
';
$button_url = admin_url( 'options-general.php?page=advaipbl_settings_page&tab=blocked_ips' );
$button_style = "background-color: #2271b1; color: #ffffff; padding: 12px 25px; text-decoration: none; border-radius: 4px; display: inline-block; font-weight: bold;";
$summary_html .= '';
// 2. Envolver en la plantilla y enviar
$body = $this->get_html_email_template( $template_title, $summary_html );
add_filter( 'wp_mail_content_type', [ $this, 'set_html_mail_content_type' ] );
$sent = wp_mail( $to, $email_subject, $body );
remove_filter( 'wp_mail_content_type', [ $this, 'set_html_mail_content_type' ] );
if ($sent) {
// phpcs:ignore WordPress.DB.PreparedSQL.InterpolatedNotPrepared
$wpdb->query("TRUNCATE TABLE $table_name");
/* translators: %s: The recipient's email address. */
$this->plugin->log_event( sprintf( __( 'Security summary sent to %s and queue cleared.', 'advanced-ip-blocker' ), $to ), 'info' );
} else {
/* translators: %s: The recipient's email address. */
$this->plugin->log_event( sprintf( __( 'FAILED to send security summary to %s. Queue NOT cleared.', 'advanced-ip-blocker' ), $to ), 'error' );
}
}
/**
* Sends an instant block notification (Email/Push) or queues it.
*/
public function notify_block($ip, $type, $reason, $reason_label = '', $extra_data = []) {
$options = $this->plugin->options;
if (empty($reason_label)) {
$reason_label = ucwords(str_replace('_', ' ', $type));
}
// Get Location
$location_data = $this->plugin->geolocation_manager->fetch_location($ip);
// --- PUSH NOTIFICATION LOGIC ---
if (!empty($options['enable_push_notifications'])) {
$is_critical_block = !in_array($type, ['404', '403', 'login'], true);
$send_this_push = empty($options['push_critical_only']) || ($options['push_critical_only'] === '1' && $is_critical_block);
if ($send_this_push) {
$site_name = get_bloginfo('name');
$message_lines = [ sprintf('*:shield: [%s] Security Alert*', $site_name) ];
$message_lines[] = sprintf('> • *Blocked Entry:* `%s`', $ip);
if ($location_data && empty($location_data['error'])) {
$location_str = ($location_data['city'] ?? '') . ', ' . ($location_data['country'] ?? '');
$message_lines[] = sprintf('> • *Location:* %s (%s)', trim($location_str, ', '), $location_data['country_code'] ?? 'N/A');
}
$message_lines[] = sprintf('> • *Reason:* %s', $reason_label);
$message_lines[] = sprintf('> • *Details:* %s', $reason);
$duration_minutes = 0;
if (isset($extra_data['duration_seconds'])) {
$duration_minutes = $extra_data['duration_seconds'] > 0 ? round($extra_data['duration_seconds'] / 60) : 0;
} else if ($type === 'aib_network') {
$duration_minutes = (int) ($options['duration_aib_network'] ?? 1440);
} else if ($type === 'manual') {
// Manual blocks with potential legacy expiry are treated as permanent
$duration_minutes = 0;
} else {
// Default for other types
$duration_minutes = (int) ($options['duration_' . $type] ?? 1440);
}
// Logic update: If minutes > 525600 (1 year), treat as Permanent
/* translators: %d: Duration minutes. */
$duration_text = ($duration_minutes <= 0 || $duration_minutes > 525600) ? __('Permanent', 'advanced-ip-blocker') : sprintf(__('%d min', 'advanced-ip-blocker'), $duration_minutes);
$message_lines[] = sprintf('> • *Duration:* %s', $duration_text);
$request_uri = $extra_data['uri'] ?? $this->plugin->get_current_request_uri();
if (!empty($request_uri)) { $message_lines[] = sprintf('> • *URI:* `%s`', $request_uri); }
// Note: user_agent could be passed in extra_data or fetched from main.
$ua = $extra_data['user_agent'] ?? $this->plugin->get_user_agent();
if ($ua) { $message_lines[] = sprintf('> • *User Agent:* `%s`', $ua); }
$this->execute_webhook_send(implode("\n", $message_lines));
}
}
// --- EMAIL LOGIC ---
$frequency = $options['notification_frequency'] ?? 'disabled';
if ( empty($options['enable_email_notifications']) || '1' !== $options['enable_email_notifications'] || 'disabled' === $frequency) {
return;
}
if ($frequency === 'instant') {
$to = !empty($options['notification_email']) && is_email($options['notification_email']) ? $options['notification_email'] : get_option('admin_email');
$site_name = get_bloginfo('name');
/* translators: %s: Site name. */
$email_subject = sprintf(__('[%s] Security Alert: Entry Automatically Blocked', 'advanced-ip-blocker'), $site_name);
$template_title = __('Security Alert: Entry Blocked', 'advanced-ip-blocker');
$duration_minutes = 0;
if ( isset($extra_data['duration_seconds']) ) {
$duration_minutes = $extra_data['duration_seconds'] > 0 ? round($extra_data['duration_seconds'] / 60) : 0;
} else if ($type !== 'manual') {
$duration_minutes = (int) ($options['duration_' . $type] ?? 1440);
}
// Logic update: If minutes > 525600 (1 year), treat as Permanent
/* translators: %d: Duration minutes. */
$duration_text = ($duration_minutes <= 0 || $duration_minutes > 525600) ? __('Permanent', 'advanced-ip-blocker') : sprintf(__('%d minutes', 'advanced-ip-blocker'), $duration_minutes);
$button_url = admin_url( 'admin.php?page=advaipbl_settings_page-ip-management&sub-tab=blocked_ips' );
$content_html = '' . esc_html__( "An entry has been automatically blocked on your website.", 'advanced-ip-blocker' ) . '
' .
'' .
'| ' . esc_html__( 'Blocked Entry', 'advanced-ip-blocker' ) . ' | ' . esc_html( $ip ) . ' |
' .
'| ' . esc_html__( 'Date and Time', 'advanced-ip-blocker' ) . ' | ' . esc_html( date_i18n(get_option('date_format') . ' ' . get_option('time_format')) ) . ' |
' .
'| ' . esc_html__( 'Reason', 'advanced-ip-blocker' ) . ' | ' . esc_html( $reason ) . ' |
' .
'| ' . esc_html__( 'Block Duration', 'advanced-ip-blocker' ) . ' | ' . esc_html( $duration_text ) . ' |
' .
'
' .
'' . esc_html__( 'No action is required on your part. This is just a notification.', 'advanced-ip-blocker' ) . '
'.
'';
$body = $this->get_html_email_template( $template_title, $content_html );
add_filter( 'wp_mail_content_type', [ $this, 'set_html_mail_content_type' ] );
wp_mail( $to, $email_subject, $body );
remove_filter( 'wp_mail_content_type', [ $this, 'set_html_mail_content_type' ] );
} else {
global $wpdb;
$table_name = $wpdb->prefix . 'advaipbl_notifications_queue';
@$wpdb->insert($table_name, [ 'timestamp' => current_time('mysql', 1), 'ip' => $ip, 'block_type' => $type, 'reason' => $reason ]);
}
}
/**
* Sends Lockdown Notification (Email + Push).
*/
public function send_lockdown_notification($endpoint_key, $duration_minutes, $threshold) {
$options = $this->plugin->options;
$site_name = get_bloginfo('name');
$endpoint_name = strtoupper($endpoint_key);
// --- Push Notification ---
if (!empty($options['enable_push_notifications'])) {
$message_lines = [
sprintf('*:lock: [%s] Endpoint Lockdown Activated*', $site_name),
'> An automated defense system has been activated due to a sustained attack.',
/* translators: $s: Endpoint name. */
sprintf('> • *Protected Endpoint:* `%s`', $endpoint_name),
/* translators: $d: Threshold number. */
sprintf('> • *Reason:* More than %d suspicious blocks detected recently.', $threshold),
/* translators: $d: Minutes. */
sprintf('> • *Action:* All new traffic to this endpoint will be challenged for the next %d minutes.', $duration_minutes),
];
$this->execute_webhook_send(implode("\n", $message_lines));
}
// --- Email Notification ---
if (!empty($options['enable_email_notifications']) && isset($options['notification_frequency']) && $options['notification_frequency'] === 'instant') {
$to = !empty($options['notification_email']) ? $options['notification_email'] : get_option('admin_email');
/* translators: 1: Site name, 2: Endpoint name */
$email_subject = sprintf(__('[%1$s] Security Alert: Endpoint Lockdown Activated for %2$s', 'advanced-ip-blocker'), $site_name, $endpoint_name);
$template_title = __('Endpoint Lockdown Activated', 'advanced-ip-blocker');
$button_url = admin_url('admin.php?page=advaipbl_settings_page&tab=logs&sub-tab=security_log');
$content_html =
'' . esc_html__("An automated defense mechanism, Endpoint Lockdown, has been activated on your website due to a sustained attack.", 'advanced-ip-blocker') . '
' .
'' .
'| ' . esc_html__('Protected Endpoint', 'advanced-ip-blocker') . ' | ' . esc_html($endpoint_name) . ' |
' .
'| ' . esc_html__('Reason for Activation', 'advanced-ip-blocker') . ' | ' . sprintf(/* translators: %d: The number of IPs. */esc_html__('More than %d suspicious IP blocks were detected in a short period.', 'advanced-ip-blocker'), $threshold) . ' |
' .
'| ' . esc_html__('Protective Action', 'advanced-ip-blocker') . ' | ' . sprintf(/* translators: %d: The number minutes. */esc_html__('For the next %d minutes, all new, non-whitelisted traffic to this endpoint will be challenged with a JavaScript verifier to filter out bots.', 'advanced-ip-blocker'), $duration_minutes) . ' |
' .
'
' .
'' . esc_html__('This is an automated response to protect your site. No immediate action is required on your part.', 'advanced-ip-blocker') . '
'.
'';
$body = $this->get_html_email_template($template_title, $content_html);
add_filter('wp_mail_content_type', [$this, 'set_html_mail_content_type']);
wp_mail($to, $email_subject, $body);
remove_filter('wp_mail_content_type', [$this, 'set_html_mail_content_type']);
}
}
/**
* Sends AbuseIPDB Limit Notification.
*/
public function send_abuseipdb_limit_email() {
$options = $this->plugin->options;
// Solo enviar si las notificaciones por email están activadas
if (empty($options['enable_email_notifications']) || '1' !== $options['enable_email_notifications']) {
return;
}
$to = !empty($options['notification_email']) ? $options['notification_email'] : get_option('admin_email');
$site_name = get_bloginfo('name');
/* translators: %s: Site name. */
$email_subject = sprintf(__('[%s] Security Alert: AbuseIPDB API Limit Reached', 'advanced-ip-blocker'), $site_name);
$template_title = __('AbuseIPDB API Limit Reached', 'advanced-ip-blocker');
$settings_url = admin_url('admin.php?page=advaipbl_settings_page&tab=settings&sub-tab=threat_intelligence');
$content_html =
'' . esc_html__("This is an automated notification to inform you that your website has reached the daily request limit for the AbuseIPDB API.", 'advanced-ip-blocker') . '
' .
'' . esc_html__("As a result, the real-time IP reputation checking has been temporarily paused. The system will automatically resume checks when the quota resets (typically at 00:00 UTC).", 'advanced-ip-blocker') . '
' .
'' . esc_html__('What this means:', 'advanced-ip-blocker') . '
' .
'' .
'- ' . esc_html__('Your site remains protected by all other security layers (WAF, Advanced Rules, etc.).', 'advanced-ip-blocker') . '
' .
'- ' . esc_html__('This is often an indicator of high bot traffic or a distributed attack.', 'advanced-ip-blocker') . '
' .
'
' .
'' . esc_html__('Recommended Actions:', 'advanced-ip-blocker') . '
' .
'' .
'- ' . /* translators: %s: Link to documentation. Do not translate the URLs. */sprintf(wp_kses(__('Consider verifying your domain with AbuseIPDB to increase your free daily limit from 1,000 to 3,000 checks. Learn how.', 'advanced-ip-blocker'), ['a' => ['href' => [], 'target' => []]]), 'https://advaipbl.com/docs/abuseipdb-integration-guide/') . '
' .
'- ' . /* translators: %s: Link to pricing page. Do not translate the URLs. */sprintf(wp_kses(__('For high-traffic sites, consider upgrading to a paid AbuseIPDB plan for a higher limit.', 'advanced-ip-blocker'), ['a' => ['href' => [], 'target' => []]]), 'https://www.abuseipdb.com/pricing') . '
' .
'
' .
'';
$body = $this->get_html_email_template($template_title, $content_html);
add_filter('wp_mail_content_type', [$this, 'set_html_mail_content_type']);
wp_mail($to, $email_subject, $body);
remove_filter('wp_mail_content_type', [$this, 'set_html_mail_content_type']);
// --- Push Notification ---
if (!empty($options['enable_push_notifications'])) {
$doc_link = 'https://advaipbl.com/docs/abuseipdb-integration-guide/';
$pricing_link = 'https://www.abuseipdb.com/pricing';
$message_lines = [
sprintf('*:warning: [%s] %s*', $site_name, __('Security Alert: AbuseIPDB API Limit Reached', 'advanced-ip-blocker')),
'> ' . __('Your website has reached its daily request limit for the AbuseIPDB API.', 'advanced-ip-blocker'),
'> ' . __('Real-time IP reputation checking will be temporarily paused.', 'advanced-ip-blocker'),
sprintf(
/* translators: 1: Link to documentation, 2: Link to pricing page. Do not translate the URLs. */
'> • *Action Required:* Consider <%1$s|verifying your domain> to triple your free quota or <%2$s|upgrading your plan>.',
$doc_link,
$pricing_link
),
];
$this->execute_webhook_send(implode("\n", $message_lines));
}
}
/**
* Executes webhook send.
*/
public function execute_webhook_send($message) {
$options = $this->plugin->options;
if (empty($options['enable_push_notifications'])) {
return false;
}
$raw_urls = $options['push_webhook_urls'] ?? '';
if (empty(trim($raw_urls))) {
return false;
}
$urls = array_filter(array_map('trim', explode("\n", $raw_urls)));
if (empty($urls)) {
return false;
}
$payload = [
'content' => $message,
'text' => $message,
];
$args = [
'body' => wp_json_encode($payload),
'headers' => [
'Content-Type' => 'application/json',
],
'timeout' => 10,
];
$success = false;
foreach ($urls as $url) {
$response = wp_remote_post($url, $args);
if (is_wp_error($response)) {
$this->plugin->log_event('Failed to send push notification: ' . $response->get_error_message(), 'error', ['webhook_url' => $url]);
} elseif (wp_remote_retrieve_response_code($response) >= 300) {
$this->plugin->log_event('Push notification sent, but received an error response code: ' . wp_remote_retrieve_response_code($response), 'warning', ['webhook_url' => $url]);
} else {
$success = true;
}
}
return $success;
}
/**
* Standard HTML Email Template (Premium Design).
*/
public function get_html_email_template($title, $content) {
$logo_url = plugin_dir_url(dirname(__FILE__)) . 'assets/img/logo-email.png';
ob_start();
?>
<?php echo esc_html($title); ?>
plugin->options['enable_push_notifications'])) {
$message_lines = [
sprintf('*:dna: [%s] New Attack Signature Identified*', $site_name),
'> A new attack pattern has been automatically identified and is now being challenged.',
sprintf('> • *Signature Hash:* `%s`', $short_hash),
sprintf('> • *Reason:* %s', $reason),
sprintf('> • *Sample User-Agent:* `%s`', $user_agent),
];
$this->execute_webhook_send(implode("\n", $message_lines));
}
// --- Notificación por Email ---
if (!empty($this->plugin->options['enable_email_notifications'])) {
$options = $this->plugin->options;
$to = !empty($options['notification_email']) ? $options['notification_email'] : get_option('admin_email');
/* translators: %s: Site name. */
$email_subject = sprintf(__('[%s] Security Alert: New Attack Signature Identified', 'advanced-ip-blocker'), $site_name);
$template_title = __('New Attack Signature Identified', 'advanced-ip-blocker');
$button_url = admin_url('admin.php?page=advaipbl_settings_page&tab=ip_management&sub-tab=blocked_signatures');
$content_html =
'' . esc_html__("The plugin's analysis engine has automatically identified a new distributed attack pattern. Requests matching this signature will now be challenged.", 'advanced-ip-blocker') . '
' .
'' .
'| ' . esc_html__('Signature Hash', 'advanced-ip-blocker') . ' | ' . esc_html($short_hash) . ' |
' .
'| ' . esc_html__('Reason', 'advanced-ip-blocker') . ' | ' . esc_html($reason) . ' |
' .
'| ' . esc_html__('Sample User-Agent', 'advanced-ip-blocker') . ' | ' . esc_html($user_agent) . ' |
' .
'
' .
'' . esc_html__('You can view and manage all active signatures from the dashboard.', 'advanced-ip-blocker') . '
'.
'';
$body = $this->get_html_email_template($template_title, $content_html);
add_filter('wp_mail_content_type', [$this, 'set_html_mail_content_type']);
wp_mail($to, $email_subject, $body);
remove_filter('wp_mail_content_type', [$this, 'set_html_mail_content_type']);
}
}
/**
* Handles sending a test email.
*/
public function send_test_email($to) {
$site_name = get_bloginfo('name');
$settings_url = admin_url('options-general.php?page=advaipbl_settings_page');
/* translators: %s: The name of the website. */
$email_subject = sprintf(__('[%s] Welcome & Quick Setup Guide for Advanced IP Blocker', 'advanced-ip-blocker'), $site_name);
$template_title = __('Welcome & Quick Setup Guide', 'advanced-ip-blocker');
$content_html =
'' . esc_html__('Thank you for using Advanced IP Blocker! This email confirms your email settings are working. Here is a quick guide to get the most out of the plugin:', 'advanced-ip-blocker') . '
' .
'' . esc_html__('Step 1: Verify Whitelisted IPs', 'advanced-ip-blocker') . '
' .
'' .
sprintf(
/* translators: %s: Link URL to the Status & Debug tab. */
wp_kses(__('This is the most important step. Go to the Status & Debug tab to confirm your IP is whitelisted.', 'advanced-ip-blocker'), ['a' => ['href' => []]]),
esc_url(add_query_arg('tab', 'status', $settings_url))
) . '
';
$body = $this->get_html_email_template($template_title, $content_html);
add_filter('wp_mail_content_type', [$this, 'set_html_mail_content_type']);
$sent = wp_mail($to, $email_subject, $body);
remove_filter('wp_mail_content_type', [$this, 'set_html_mail_content_type']);
return $sent;
}
/**
* Handles sending a test push notification.
*/
public function send_test_push() {
$options = $this->plugin->options;
$webhook_urls_str = $options['push_webhook_urls'] ?? '';
$webhook_urls = array_filter(array_map('trim', explode("\n", $webhook_urls_str)));
if (empty($webhook_urls)) {
return false;
}
$site_name = get_bloginfo('name');
$message_lines = [
sprintf('*:rocket: [%s] Test Notification*', $site_name),
'> ' . esc_html__('This is a test notification from Advanced IP Blocker.', 'advanced-ip-blocker'),
'> • *Status:* Working successfully.',
'> • *Time:* ' . current_time('mysql'),
];
$message = implode("\n", $message_lines);
return $this->execute_webhook_send($message);
}
/**
* Sends 2FA Activation/Deactivation Notification.
*
* @param string $action 'activated' or 'deactivated'
* @param WP_User $user The user object
*/
public function send_2fa_notification_email($action, $user) {
$options = $this->plugin->options;
if (empty($options['enable_email_notifications']) || '1' !== $options['enable_email_notifications']) {
return;
}
$to = $user->user_email;
$site_name = get_bloginfo('name');
$subject_action = ($action === 'activated') ? __('Activated', 'advanced-ip-blocker') : __('Deactivated', 'advanced-ip-blocker');
/* translators: 1: Site name, 2: Action (Activated/Deactivated) */
$email_subject = sprintf(__('[%1$s] Security Alert: 2FA %2$s', 'advanced-ip-blocker'), $site_name, $subject_action);
/* translators: %s: Action (Activated/Deactivated) */
$template_title = sprintf(__('Two-Factor Authentication %s', 'advanced-ip-blocker'), $subject_action);
$date = date_i18n(get_option('date_format') . ' ' . get_option('time_format'));
$content_html = '' .
sprintf(
/* translators: 1: User display name, 2: Action (activated/deactivated) */
esc_html__('Hello %1$s, use this email to confirm that Two-Factor Authentication has been %2$s for your account.', 'advanced-ip-blocker'),
esc_html($user->display_name),
'' . esc_html(strtolower($subject_action)) . ''
) . '
';
$content_html .= '' .
'| ' . esc_html__('Account', 'advanced-ip-blocker') . ' | ' . esc_html($user->user_login) . ' |
' .
'| ' . esc_html__('Date', 'advanced-ip-blocker') . ' | ' . esc_html($date) . ' |
' .
'| ' . esc_html__('Status', 'advanced-ip-blocker') . ' | ' . esc_html($subject_action) . ' |
' .
'
';
if ($action === 'deactivated') {
$content_html .= '' . esc_html__('If you did not perform this action, please contact the site administrator immediately and change your password.', 'advanced-ip-blocker') . '
';
}
$body = $this->get_html_email_template($template_title, $content_html);
add_filter('wp_mail_content_type', [$this, 'set_html_mail_content_type']);
wp_mail($to, $email_subject, $body);
remove_filter('wp_mail_content_type', [$this, 'set_html_mail_content_type']);
}
public function set_html_mail_content_type() {
return 'text/html';
}
}