Changeset 3799640

Timestamp:

11/13/2026 04:24:11 AM (2 days ago)

Author:

adminkov

Message:

Improved Attack analyzer

Location:

sitewatchman

Files:

• tags/1.0.0/class-swm7-analyzer.php (modified) (3 diffs)
• tags/1.0.0/class-swm7-core.php (modified) (1 diff)
• tags/1.0.0/sitewatchman.php (modified) (1 diff)
• trunk/class-swm7-analyzer.php (modified) (3 diffs)
• trunk/class-swm7-core.php (modified) (1 diff)
• trunk/sitewatchman.php (modified) (1 diff)

sitewatchman/tags/1.0.0/class-swm7-analyzer.php

@@ -4 +4 @@
  *
  * @package     SiteWatchman
- * @subpackage  WafEngine
  * @author      Oleg Klenitsky <klenitskiy.oleg@mail.ru>
  * @copyright   2026 Oleg Klenitsky
@@ -14 +13 @@
 
 if ( ! defined( 'ABSPATH' ) ) {
-        exit;
+        exit();
 }
 
@@ -256 +255 @@
                 }
 
+                // Do not treat SSE (Server-Sent Events) polling requests as a flood attack.
+                // phpcs:ignore WordPress.Security.NonceVerification.Recommended
+                $current_action = isset( $_REQUEST['action'] ) ? sanitize_key( wp_unslash( $_REQUEST['action'] ) ) : '';
+                $request_uri    = isset( $_SERVER['REQUEST_URI'] ) ? esc_url_raw( wp_unslash( $_SERVER['REQUEST_URI'] ) ) : '';
+                $is_sse_request = (
+                        'sse' === $current_action
+                        && ! empty( $request_uri )
+                        && false !== strpos( $request_uri, 'admin-ajax.php' )
+                );
+
+                if ( $is_sse_request ) {
+                        return false;
+                }
+
                 $current_time = time();
                 $safe_ip_key  = md5( $this->target_ip );

sitewatchman/tags/1.0.0/class-swm7-core.php

@@ -852 +852 @@
                 // WordPress core technical visits (Cron) — do not log to the DB.
                 if ( strpos( $page_visit, '/wp-cron.php' ) !== false ) {
+                        return;
+                }
+
+                // Skip internal SSE (Server-Sent Events) / AJAX table refresh requests.
+                if ( strpos( $page_visit, 'action=sse' ) !== false ) {
                         return;
                 }

sitewatchman/tags/1.0.0/sitewatchman.php

@@ -14 +14 @@
  *
  * @package     SiteWatchman
- * @category    class php
+ * @category    Core Modules
  * @author      Oleg Klenitsky
  * @copyright   2026 Oleg Klenitsky

sitewatchman/trunk/class-swm7-analyzer.php

@@ -4 +4 @@
  *
  * @package     SiteWatchman
- * @subpackage  WafEngine
  * @author      Oleg Klenitsky <klenitskiy.oleg@mail.ru>
  * @copyright   2026 Oleg Klenitsky
@@ -14 +13 @@
 
 if ( ! defined( 'ABSPATH' ) ) {
-        exit;
+        exit();
 }
 
@@ -256 +255 @@
                 }
 
+                // Do not treat SSE (Server-Sent Events) polling requests as a flood attack.
+                // phpcs:ignore WordPress.Security.NonceVerification.Recommended
+                $current_action = isset( $_REQUEST['action'] ) ? sanitize_key( wp_unslash( $_REQUEST['action'] ) ) : '';
+                $request_uri    = isset( $_SERVER['REQUEST_URI'] ) ? esc_url_raw( wp_unslash( $_SERVER['REQUEST_URI'] ) ) : '';
+                $is_sse_request = (
+                        'sse' === $current_action
+                        && ! empty( $request_uri )
+                        && false !== strpos( $request_uri, 'admin-ajax.php' )
+                );
+
+                if ( $is_sse_request ) {
+                        return false;
+                }
+
                 $current_time = time();
                 $safe_ip_key  = md5( $this->target_ip );

sitewatchman/trunk/class-swm7-core.php

@@ -852 +852 @@
                 // WordPress core technical visits (Cron) — do not log to the DB.
                 if ( strpos( $page_visit, '/wp-cron.php' ) !== false ) {
+                        return;
+                }
+
+                // Skip internal SSE (Server-Sent Events) / AJAX table refresh requests.
+                if ( strpos( $page_visit, 'action=sse' ) !== false ) {
                         return;
                 }

sitewatchman/trunk/sitewatchman.php

@@ -14 +14 @@
  *
  * @package     SiteWatchman
- * @category    class php
+ * @category    Core Modules
  * @author      Oleg Klenitsky
  * @copyright   2026 Oleg Klenitsky