# BSM ALLAH
#!/bin/bash

dom="$1"
usr="$2"
wphide="x0x_x30"

nice -n -20 chattr -Raui /home/$usr/$dom
nice -n -20 mv "/home/$usr/${dom}" "/home/$usr/${dom}_old" && mkdir "/home/$usr/$dom" && chown $usr.nobody "/home/$usr/$dom"
# Get database name, user, & password
old_dbnm=`awk -F "'" '/DB_NAME/{print $4}' /home/$usr/$dom_old/wp-config.php`
old_dbprfx=`egrep -i table_prefix /home/$usr/$dom_old/wp-config.php|cut -f 2 -d "="|tr -d ";'"|sed "s/^[ \t]*//"`

dbs_create() {
gndb=`head -c 100 /dev/urandom | tr -dc a-z | head -c4`
msqldb="$usr"_"$gndb"
echo -e "\n"
echo "database name is : $msqldb "
gndusr=`head -c 100 /dev/urandom | tr -dc a-z | head -c4`
msqlusr="$usr"_"$gndusr"
echo "database user name : $msqlusr"
msqlupass=`pwgen 10 1`
echo "database user name password : ${msqlupass}"
echo -e "\n"

mysql<<STOP
create database ${msqldb};
GRANT ALL PRIVILEGES ON ${msqldb}.* TO '${msqlusr}'@'localhost' IDENTIFIED BY '${msqlupass}';
GRANT ALL PRIVILEGES ON ${msqldb}.* TO '${usr}'@'localhost'; # for db to show in phpmyadmin
FLUSH PRIVILEGES;
quit
STOP
}

dbs_create



dom_main() {
cd /home/$usr/$dom/ && wp core download --allow-root && wp core config --dbname="${msqldb}" --dbuser="${msqlusr}" --dbpass="${msqlupass}" --dbhost=localhost --allow-root && pwgen 15 1 > /home/$usr/admin_password.txt && wp core install --url="https://${dom}" --title="${dom}" --admin_user=admin --admin_email=admin@${dom} --prompt=admin_password < /home/$usr/admin_password.txt --allow-root && wp language core install ar --activate --allow-root


cat >"/home/$usr/$dom/.htaccess"<<HTE
# BEGIN WordPress
<IfModule mod_rewrite.c>
RewriteEngine On
RewriteBase /
RewriteRule ^index\.php$ - [L]
RewriteCond %{REQUEST_FILENAME} !-f
RewriteCond %{REQUEST_FILENAME} !-d
RewriteRule . /index.php [L]
</IfModule>
# END WordPress

# BEGIN Custom
<FilesMatch "^.*(error_log|xmlrpc.php|wp-config.php|wp-cron.php|php.ini|\.[hH][tT][aApP].*)$">
Require all denied
</FilesMatch>

RewriteCond %{QUERY_STRING} (author=\d+) [NC]
RewriteRule .* - [F]

<IfModule mod_rewrite.c>
RewriteEngine On
RewriteBase /
RewriteRule ^wp-admin/includes/ - [F,L]
RewriteRule !^wp-includes/ - [S=3]
RewriteRule ^wp-includes/[^/]+\.php$ - [F,L]
RewriteRule ^wp-includes/js/tinymce/langs/.+\.php - [F,L]
RewriteRule ^wp-includes/theme-compat/ - [F,L]
</IfModule>
# END Custom
HTE

echo "Wordpress WP Admin URL :"
echo "https://${dom}/wp-admin/"
echo "Username : admin"
echo "Password : `head -n 1 admin_password.txt`"
rm -f /home/$usr/$dom/admin_password.txt && chown -R $usr.$usr /home/$usr/$dom && chown $usr.nobody /home/$usr/$dom
chattr +aui "/home/$usr/$dom/.htaccess"
} # function dom_main End

dom_main

new_dbnm=`awk -F "'" '/DB_NAME/{print $4}' /home/$usr/$dom/wp-config.php`
new_dbusr=`awk -F "'" '/DB_USER/{print $4}' /home/$usr/$dom/wp-config.php`
new_dbuspwd=`awk -F "'" '/DB_PASSWORD/{print $4}' /home/$usr/$dom/wp-config.php`
/bin/drop_db_tables ${new_dbusr} ${new_dbuspwd} ${new_dbnm} && mysqldump ${old_dbnm} > "${new_dbnm}.sql" && mysql ${new_dbnm} < "${new_dbnm}.sql" && rm -f "${new_dbnm}.sql"
rm -rf /home/$usr/$dom/wp-content && nice -n -20 cp -Rp /home/$usr/$dom_old/wp-content /home/$usr/$dom/wp-content && chmod -R 000 /home/$usr/$dom_old


cd /home/$usr/$dom/ && wp plugin install wps-hide-login --activate --allow-root ; wp plugin install gotmls --activate --allow-root ; wp plugin install disable-xml-rpc-api --activate --allow-root ; chown -R $usr.$usr /home/$usr/$dom/wp-content/plugins
mysql -e "use $new_dbnm; UPDATE wp_options SET option_value = '$wphide' WHERE option_name = 'whl_page';" && echo -e "New WP Admin dashboard will be available at the following :\nhttps://${dom}/$wphide/"

adm_list=`wp user list --path=/home/$usr/$dom/ --allow-root 2>/dev/null | awk '/administrator/' |awk '{print $2"|"$4}'`
echo -e "The following are available admin users :\n$adm_list"
wp user create ahmed anyone@anywhere.com --role=administrator --user_pass='C_P#$%^_vFhY#@_9O' --allow-root --path=/home/$usr/$dom && echo -e "Additional admin user created :\nUsername : ahmed\nPassword : 'C_P#$%^_vFhY#@_9O'"

echo "define('DISABLE_WP_CRON', true);" >> /home/$usr/$dom/wp-config.php
echo "define( 'DISALLOW_FILE_EDIT', true );" >> /home/$usr/$dom/wp-config.php
rm -f /home/$usr/$dom/license.txt ; rm -f /home/$usr/$dom/readme.html ; rm -f /home/$usr/$dom/wp-config-sample.php