23s2s

✏️ Editing: wp-cli-wrapped

#!/bin/bash
#######################################
# WP_CLI_VERSION=v2.12.0
# Timed-out wrapper around wp-cli
# Arguments:
#   $1 - Path to PHP binary, full filesystem path
#   $2 - Path to Wordpress installation, full filesystem path
#   All the rest arguments ($@) are treated as WP-CLI command
# Outputs:
#   Writes result to stdout
#######################################
PATH_TO_PHP="$1"
PATH_TO_WP="$2"

shift 2;

CODE=0

# WPOS wp-cli
WP_CLI="/opt/clwpos/wp-cli"

# Defaults for PHP
PHP_EXTRA_OPTIONS=(-d memory_limit=-1 -d open_basedir=none)
PHP_DEFAULT_EXTENSIONS="phar"

# Default timeout, formatted as for timeout command (GNU coreutils)
# 2 minutes (120 seconds)
TIMEOUT="2m"

# pick other extensions based on PHP version
PHP_VERSION_PARTS=($(timeout "$TIMEOUT" "$PATH_TO_PHP" -v | head -n1 | sed -n -e 's/^.* $[0-9]\+\.[0-9]\+\.[0-9]\+$.*/\1/p' | tr '.' ' '))
PHP_VERSION_ID=$((PHP_VERSION_PARTS[0] * 10000 + PHP_VERSION_PARTS[1] * 100 + PHP_VERSION_PARTS[2]))

# fail clearly if the version probe timed out or produced no parseable version;
# a zero ID would silently pick the wrong extension order instead of erroring out
if (( PHP_VERSION_ID == 0 )); then
    echo "Error: failed to determine PHP version from '$PATH_TO_PHP' (the -v probe timed out or returned no parseable version)" >&2
    exit 1
fi

# PHP 8.0 and above have json extension enabled by default
if (( PHP_VERSION_ID < 80000 )); then
    PHP_DEFAULT_EXTENSIONS+=" json"
fi

# for PHP 8.2 and above mysqlnd must be loaded before mysqli
if (( PHP_VERSION_ID >= 80200 )); then
    PHP_DEFAULT_EXTENSIONS+=" mysqlnd"
fi

PHP_DEFAULT_EXTENSIONS+=" mysqli"

# explicitly drop PHP disable_functions directive in order to avoid errors like
# 'Error: Cannot do 'launch': The PHP functions `proc_open()` and/or `proc_close()` are disabled'
# during plugin manipulations
PHP_DEFAULT_FUNCTIONS=(-d disable_functions= -d display_errors=0 -d error_log=/dev/null)

# PHP functions for retry with enhanced error reporting
PHP_DEBUG_FUNCTIONS=(-d disable_functions= -d display_errors=1 -d error_log=/dev/null)

# Defaults for WP-CLI
WP_CLI_DEFAULT_OPTS=("--skip-themes") # Must be first [0]

# Passed via ENVVAR
if [ -n "${SKIP_PLUGINS_LOADING}" ]; then
    WP_CLI_DEFAULT_OPTS+=("--skip-plugins")
fi

# Find wp-config.php
WP_CONFIG_PATH="${PATH_TO_WP}/wp-config.php"
if [ ! -e "${WP_CONFIG_PATH}" ]; then
  # It's ok for wp-config.php to be in a subdirectory
  PARENT_PATH=$(dirname "${PATH_TO_WP}")
  WP_CONFIG_PATH="${PARENT_PATH}/wp-config.php"
fi

# Define constants
WP_CLI_DEFAULT_OPTS+=("--exec=define('WP_DEBUG', true);")
WP_CLI_DEFAULT_OPTS+=("--exec=define('WP_DEBUG_DISPLAY', false);")
WP_CLI_DEFAULT_OPTS+=("--exec=define('DISABLE_WP_CRON', true);")

# Construct PHP extensions to include
EXTS=()
for ext in $PHP_DEFAULT_EXTENSIONS
do
  if ! timeout "$TIMEOUT" "$PATH_TO_PHP" -m | grep -i "$ext" 1>/dev/null; then
    EXTS+=(-d "extension=$ext.so")
  fi
done

# change current working directory
# we need this because if php code has relative imports
# it looks for scripts inside current directory first
# e.g. some providers add require('wp-salt.php') to config
# https://stackoverflow.com/questions/75823716/
# the overall approach of relative import is not correct,
# but we still need patch for this
cd "${PATH_TO_WP}"
if [[ "$1" == "help" ]]; then
  exec timeout "$TIMEOUT" \
    "$PATH_TO_PHP" "${EXTS[@]}" "${PHP_EXTRA_OPTIONS[@]}" "${PHP_DEFAULT_FUNCTIONS[@]}" \
    "$WP_CLI" --path="$PATH_TO_WP" "${WP_CLI_DEFAULT_OPTS[@]}" "$@" | cat
else
  WP_CLI_RESULT=$(exec timeout "$TIMEOUT" \
               "$PATH_TO_PHP" "${EXTS[@]}" "${PHP_EXTRA_OPTIONS[@]}" "${PHP_DEFAULT_FUNCTIONS[@]}" \
               "$WP_CLI" --path="$PATH_TO_WP" "${WP_CLI_DEFAULT_OPTS[@]}" "$@")
  WP_CLI_CODE=$?

# Not 0 and not 1 because WP-CLI has commands that return status as the result of the command execution
  # For example plugin is-active, exit status 0 if active, otherwise 1
  # Calling an error at the php level will return 255
  # Let's try to run the command without --skip-themes
  if [ "$WP_CLI_CODE" -ne 0 ] && [ "$WP_CLI_CODE" -ne 1 ]; then
    echo "Retry without --skip-themes and with enhanced error reporting" >&2
    unset WP_CLI_DEFAULT_OPTS[0]

WP_CLI_RESULT=$(exec timeout "$TIMEOUT" \
                 "$PATH_TO_PHP" "${EXTS[@]}" "${PHP_EXTRA_OPTIONS[@]}" "${PHP_DEBUG_FUNCTIONS[@]}" \
                 "$WP_CLI" --path="$PATH_TO_WP" "${WP_CLI_DEFAULT_OPTS[@]}" "$@")
    WP_CLI_CODE=$?
  fi

printf '%s' "$WP_CLI_RESULT"
  CODE=$WP_CLI_CODE
fi

exit $CODE

Sid Gifari From Gifari Industries - BD Cyber Security Team