JezK

Edit File: Model.php

<?php

/**
 * Matomo - free/libre analytics platform
 *
 * @link    https://matomo.org
 * @license https://www.gnu.org/licenses/gpl-3.0.html GPL v3 or later
 */
namespace Piwik\Plugins\Login;

use Piwik\Common;
use Piwik\Date;
use Piwik\Db;
use Piwik\Option;
use Piwik\Plugins\Login\Security\BruteForceDetection;
class Model
{
    public const NOTIFIED_USER_ABOUT_LOGIN_ATTEMPTS_OPTION_PREFIX = 'BruteForceDetection.suspiciousLoginCountNotified.';
    public const LAST_LOGIN_COUNTRY_OPTION_PREFIX = 'LoginFromDifferentCountry.lastCountry.';
    /**
     * @var
     */
    private $tablePrefixed;
    public function __construct()
    {
        $this->tablePrefixed = Common::prefixTable(BruteForceDetection::TABLE_NAME);
    }
    public function getTotalLoginAttemptsInLastHourForLogin(string $login) : int
    {
        $sql = "SELECT COUNT(*) FROM `{$this->tablePrefixed}` WHERE login = ? AND attempted_at > ?";
        $count = Db::fetchOne($sql, [$login, $this->getDateTimeSubMinutes(60)]);
        return (int) $count;
    }
    public function hasNotifiedUserAboutSuspiciousLogins(string $login) : bool
    {
        $optionName = $this->getSuspiciousLoginsNotifiedOptionName($login);
        $timeSent = Option::get($optionName);
        $timeSent = (int) @json_decode($timeSent, \true);
        if ($timeSent <= 0) {
            // sanity check
            return \false;
        }
        $timeSinceSent = Date::getNowTimestamp() - $timeSent;
        if ($timeSinceSent <= 0 || $timeSinceSent > $this->getAmountOfTimeBetweenSuspiciousLoginNotifications()) {
            return \false;
        }
        return \true;
    }
    public function getDistinctIpsAttemptingLoginsInLastHour(string $login) : int
    {
        $sql = "SELECT COUNT(DISTINCT ip_address) FROM `{$this->tablePrefixed}` WHERE login = ? AND attempted_at > ?";
        $count = Db::fetchOne($sql, [$login, $this->getDateTimeSubMinutes(60)]);
        return (int) $count;
    }
    private function getDateTimeSubMinutes($minutes) : string
    {
        return Date::now()->subPeriod($minutes, 'minute')->getDatetime();
    }
    private function getAmountOfTimeBetweenSuspiciousLoginNotifications() : int
    {
        return 2 * 7 * 24 * 60 * 60;
        // 2 weeks
    }
    private function getSuspiciousLoginsNotifiedOptionName(string $login) : string
    {
        return self::NOTIFIED_USER_ABOUT_LOGIN_ATTEMPTS_OPTION_PREFIX . $login;
    }
    private function getLastLoginCountryOptionName(string $login) : string
    {
        return self::LAST_LOGIN_COUNTRY_OPTION_PREFIX . $login;
    }
    public function markSuspiciousLoginsNotifiedEmailSent(string $login) : void
    {
        $optionName = $this->getSuspiciousLoginsNotifiedOptionName($login);
        Option::set($optionName, Date::getNowTimestamp());
    }
    public function setLastLoginCountry(string $login, string $countryCode) : void
    {
        $optionName = $this->getLastLoginCountryOptionName($login);
        Option::set($optionName, $countryCode);
    }
    public function getLastLoginCountry($login) : ?string
    {
        $optionName = $this->getLastLoginCountryOptionName($login);
        $optionValue = Option::get($optionName);
        // convert false to null so that we don't return mixed types
        return \false !== $optionValue ? $optionValue : null;
    }
}