Changeset 3466580

Timestamp:

02/21/2026 08:34:09 PM (5 weeks ago)

Author:

inilerm

Message:

Preparing version 8.8.5

Location:

advanced-ip-blocker/trunk

Files:

• advanced-ip-blocker.php (modified) (2 diffs)
• css/advaipbl-styles.css (modified) (1 diff)
• includes/class-advaipbl-cloudflare-manager.php (modified) (5 diffs)
• includes/class-advaipbl-main.php (modified) (2 diffs)
• languages/advanced-ip-blocker.pot (modified) (1 diff)
• readme.txt (modified) (3 diffs)

advanced-ip-blocker/trunk/advanced-ip-blocker.php

@@ -4 +4 @@
 Plugin URI: https://advaipbl.com/
 Description: Your complete WordPress security firewall. Blocks IPs, bots & countries. Includes an intelligent WAF, Threat Scoring, and Two-Factor Authentication.
-Version: 8.8.4
+Version: 8.8.5
 Author: IniLerm
 Author URI: https://advaipbl.com/
@@ -19 +19 @@
 }
 
-define( 'ADVAIPBL_VERSION', '8.8.4' );
+define( 'ADVAIPBL_VERSION', '8.8.5' );
 define( 'ADVAIPBL_PLUGIN_FILE', __FILE__ );
 

advanced-ip-blocker/trunk/css/advaipbl-styles.css

@@ -1 +1 @@
 /**
  * Advanced IP Blocker - Admin Panel Styles
- * Version: 8.8.4
+ * Version: 8.8.5
  */
 

advanced-ip-blocker/trunk/includes/class-advaipbl-cloudflare-manager.php

@@ -36 +36 @@
                 'Content-Type'  => 'application/json',
             ],
-            'timeout'   => 30,
+            'timeout'   => 10,
         ];
 
@@ -226 +226 @@
     }
 
-    /**
-     * Sincroniza todas las IPs bloqueadas localmente con Cloudflare.
-     * Se ejecuta vía Cron.
-     */
     public function sync_blocked_ips() {
         if (empty($this->plugin->options['enable_cloudflare']) || '1' !== $this->plugin->options['enable_cloudflare']) {
@@ -235 +231 @@
         }
 
+        $zone_id = $this->plugin->options['cf_zone_id'] ?? '';
+        if ( empty( $zone_id ) ) {
+            return; // No se puede sincronizar sin Zone ID
+        }
+
         global $wpdb;
         $table_name = $wpdb->prefix . 'advaipbl_blocked_ips';
         
-        // Obtener todas las IPs bloqueadas
+        // 1. Obtener IPs locales
         // phpcs:ignore WordPress.DB.PreparedSQL.InterpolatedNotPrepared, WordPress.DB.DirectDatabaseQuery.DirectQuery, WordPress.DB.DirectDatabaseQuery.NoCaching, PluginCheck.Security.DirectDB.UnescapedDBParameter
-        $blocked_ips = $wpdb->get_col("SELECT ip_range FROM $table_name");
-
-        if (empty($blocked_ips)) {
+        $local_ips = $wpdb->get_col("SELECT ip_range FROM $table_name");
+
+        if (empty($local_ips)) {
+            return;
+        }
+
+        // 2. Obtener IPs actualmente bloqueadas en Cloudflare (Paso de Reconciliación)
+        $cf_ips = [];
+        $page = 1;
+        $has_more = true;
+
+        while ( $has_more ) {
+            $endpoint = "zones/{$zone_id}/firewall/access_rules/rules?per_page=100&page={$page}";
+            $result = $this->make_api_request( 'GET', $endpoint );
+
+            if ( is_wp_error( $result ) ) {
+                // Si falla la petición de lectura, abortamos para no duplicar reglas ciegamente
+                $this->plugin->log_event( 'Cloudflare Sync Aborted: Could not fetch current rules. ' . $result->get_error_message(), 'error' );
+                return;
+            }
+
+            $rules = $result['result'] ?? [];
+            if ( empty( $rules ) ) {
+                $has_more = false;
+                break;
+            }
+
+            foreach ( $rules as $rule ) {
+                // Consideramos reglas que tengan el valor de IP y que estén bloqueadas
+                if ( isset( $rule['configuration']['value'] ) && isset($rule['mode']) && $rule['mode'] === 'block' ) {
+                    $cf_ips[] = $rule['configuration']['value'];
+                }
+            }
+            
+            $total_pages = $result['result_info']['total_pages'] ?? 1;
+            if ( $page >= $total_pages ) {
+                $has_more = false;
+            } else {
+                $page++;
+            }
+        }
+
+        // 3. Calcular Delta: ¿Qué IPs locales NO están todavía en Cloudflare?
+        $ips_to_sync = array_diff($local_ips, $cf_ips);
+
+        // Si todas las IPs ya existen, el proceso termina en milisegundos sin estrangular la API.
+        if (empty($ips_to_sync)) {
+            /* translators: 1: The number of IPs synced, 2: The number of errors encountered. */
+            $this->plugin->log_event(sprintf(__('Cloudflare Sync Complete. Up to date. Synced: %1$d, Errors: 0', 'advanced-ip-blocker'), count($local_ips)), 'info');
             return;
         }
@@ -249 +296 @@
         $errors = 0;
 
-        foreach ($blocked_ips as $ip) {
-            // Intentar bloquear. block_ip maneja duplicados silenciosamente.
+        // 4. Sincronizar solo el delta
+        foreach ($ips_to_sync as $ip) {
             $result = $this->block_ip($ip, 'Synced from Advanced IP Blocker');
             
@@ -259 +306 @@
             }
             
-            // Pequeña pausa para no saturar la API si hay muchas
-            usleep(100000); // 0.1s
+            // Pausa sutil (50ms) entre IPs faltantes.  
+            usleep(50000); 
         }
 
         /* translators: 1: The number of IPs synced, 2: The number of errors encountered. */
-        $this->plugin->log_event(sprintf(__('Cloudflare Sync Complete. Synced: %1$d, Errors: %2$d', 'advanced-ip-blocker'), $count, $errors), 'info');
+        $this->plugin->log_event(sprintf(__('Cloudflare Sync Complete. Newly Synced: %1$d, Errors: %2$d', 'advanced-ip-blocker'), $count, $errors), 'info');
     }
 }

advanced-ip-blocker/trunk/includes/class-advaipbl-main.php

@@ -448 +448 @@
             return;
         }
-        if (wp_doing_cron() || is_admin() || (defined('WP_CLI') && WP_CLI)) { return; }
+        
+        // Excluir AJAX, JSON, Cron y procesos internos (ej: Elementor, WP Dashboard)
+        if (wp_doing_ajax() || wp_is_json_request() || is_admin() || wp_doing_cron() || (defined('WP_CLI') && WP_CLI)) { 
+            return; 
+        }
         if ($this->challenge_passed_this_request) { return; }
    
@@ -665 +669 @@
      * Si la firma es maliciosa, sirve un desafío JavaScript.
      */
-        public function check_for_malicious_signature() {
+         public function check_for_malicious_signature() {
         if ($this->is_request_uri_excluded()) { return; }   
         if ($this->request_is_asn_whitelisted) { return; }
+        
+        // Excluir AJAX, JSON, Cron y procesos internos (ej: Elementor, WP Dashboard)
+        if (wp_doing_ajax() || wp_is_json_request() || is_admin() || wp_doing_cron() || (defined('WP_CLI') && WP_CLI)) {
+            return;
+        }
         // Si el usuario acaba de pasar un desafío, le damos un pase de gracia de 15s.
         if (get_transient('advaipbl_grace_pass_' . md5($this->get_client_ip()))) {

advanced-ip-blocker/trunk/languages/advanced-ip-blocker.pot

@@ -4 +4 @@
 msgid ""
 msgstr ""
-"Project-Id-Version: Advanced IP Blocker 8.8.4\n"
+"Project-Id-Version: Advanced IP Blocker 8.8.5\n"
 "Report-Msgid-Bugs-To: https://wordpress.org/support/plugin/advanced-ip-blocker\n"
 "POT-Creation-Date: 2025-07-22 14:47+0200\n"

advanced-ip-blocker/trunk/readme.txt

@@ -6 +6 @@
 Requires at least: 6.7
 Tested up to: 6.9
-Stable tag: 8.8.4
+Stable tag: 8.8.5
 Requires PHP: 8.1
 License: GPLv2 or later
@@ -223 +223 @@
 == Changelog ==
 
+= 8.8.5 =
+*   **CRITICAL FIX (AJAX/Editor Conflict):** Resolved a severe conflict where the "Attack Signature Engine" was incorrectly intercepting background AJAX requests (like `admin-ajax.php`), causing infinite loading loops in page builders (Elementor) and our own Security Dashboard. Standard AJAX and REST API requests are now safely excluded.
+*   **PERFORMANCE (Cloudflare Sync):** Implemented a "Memory Reconciliation" (Delta Sync) module for Cloudflare. The plugin now fetches active rules via a single API call and only pushes missing IPs (the delta) to Cloudflare, eliminating the `cURL error 28: Operation timed out` that occurred when syncing large databases on shared hosting. 
+
 = 8.8.4 =
 *   **CRITICAL FIX:** Resolved the "Spamhaus Drop List" automatic update failure. The cron job is now correctly registered and updating the list daily.
@@ -381 +385 @@
 == Upgrade Notice ==
 
+= 8.8.5 =
+**CRITICAL UPDATE:** Fixes infinite loading conflicts with Elementor and background AJAX requests. Also resolves Cloudflare synchronization timeouts. Update immediately.
+
 = 8.8.4 =
 **CRITICAL UPDATE:** Fixes automatic Spamhaus updates and Bulk Import display issues. Update immediately.