<?php
defined('ABSPATH') or die();
if (!class_exists("cmplz_wsc_scanner")) {
class cmplz_wsc_scanner
{
private static $_this;
const WSC_SCANNER_ENDPOINT = 'https://scan.complianz.io';
const WSC_SCANNER_WEBHOOK_PATH = 'complianz/v1/wsc-scan';
const WSC_SCANNER_DETECTIONS_WEBHOOK_PATH = 'complianz/v1/wsc-checks';
/**
* Class constructor for the WSC scanner class.
*
* Initializes the WSC scanner class and sets it as a singleton class.
*/
function __construct()
{
if (isset(self::$_this)) {
wp_die(sprintf('%s is a singleton class and you cannot create a second instance.',
get_class($this)));
}
self::$_this = $this;
$this->init_hooks();
}
/**
* Retrieve the instance of the class.
*
* @return object The instance of the class.
*/
static function this(): object
{
return self::$_this;
}
/**
* Initialize the hooks for the WSC scanner class.
*
* This function initializes the hooks for the WSC scanner class by adding an action
* to the `cmplz_remote_cookie_scan` hook.
*
* @return void
*/
private function init_hooks(): void
{
add_action('cmplz_remote_cookie_scan', array($this, 'wsc_scan_process'));
add_action('admin_init', array($this, 'wsc_scan_init'));
add_action( 'cmplz_wsc_checks_retrieve_results', array( $this, 'wsc_checks_retrieve' ) );
}
/**
* Check if the WSC scan is enabled.
*
* This function verifies several conditions to determine if the WSC scan is enabled:
* - If the site URL is 'localhost', the scan is disabled.
* - If the server address is 'localhost', the scan is disabled.
* - If the WSC scan circuit breaker is open, the scan is disabled.
* - If the hybrid scan is disabled, the scan is disabled.
* - If there is no token, the scan is disabled.
* If all conditions are met, the scan is enabled.
*
* @return bool True if the WSC scan is enabled, false otherwise.
*/
public function wsc_scan_enabled(): bool
{
// if localhost, return false
$site_url = site_url();
$host = wp_parse_url( $site_url, PHP_URL_HOST );
if ($host === 'localhost') {
return false;
}
// if server addr is localhost, return false
if (!empty($_SERVER['SERVER_ADDR']) && $_SERVER['SERVER_ADDR'] === '127.0.0.1') {
return false;
}
// if the wsc scan is enabled by the user through the APIs settings
if (get_option('cmplz_wsc_status') !== 'enabled') {
return false;
}
// circuit breaker
if (!$this->wsc_check_cb()) {
return false;
}
// if no token, return false
if (!cmplz_wsc_auth::get_token()) {
return false;
}
return true;
}
/**
* Check if the WSC scan circuit breaker is open.
*
* This function checks the status of the WSC scan circuit breaker by retrieving the value from the transient cache.
* If the value is empty, it retrieves the status from the WSC API and stores it in the transient cache for 5 minutes.
*
* @return bool True if the WSC scan circuit breaker is open, false otherwise.
*/
public function wsc_check_cb(): bool
{
$cb = cmplz_get_transient('wsc_scanner_cb_enabled'); // check the status of the cb
if (empty($cb)) {
$cb = cmplz_wsc_auth::wsc_api_open('scanner');
cmplz_set_transient('wsc_scanner_cb_enabled', $cb, 300); // store the status for 5 minutes
}
return $cb;
}
/**
* Start the WSC scan.
*
* This function initiates the WSC scan process by sending a request to the WSC API.
* It retrieves the scan URL, depth, visit, source, and token from the options and sends them in the request body.
* If the request is successful, it stores the scan ID, created at, and status in the wp options.
*
* @return void
*/
private function wsc_scan_start(): void
{
// retrieve the token
$token = cmplz_wsc_auth::get_token(true); // get a new token
if (!$token) {
cmplz_wsc_logger::log_errors('wsc_scan_start', 'COMPLIANZ: no token');
return;
}
$url = esc_url_raw($this->wsc_scan_get_site_url());
$source = $this->wsc_get_scanner_source();
if (!$source) {
return;
}
$body = array(
'url' => $url,
'acceptBanner' => 'true',
'getTrackers' => 'true',
'source' => $source,
'detectTechnologies' => 'false',
'detectTcf' => 'false',
'detectLanguages' => 'false',
'detectGoogleConsentMode' => 'false',
'detectLegalDocuments' => 'false',
);
// use the webhook only with ssl
$webhook_endpoint = esc_url_raw( get_rest_url( null, self::WSC_SCANNER_WEBHOOK_PATH ) );
if ( $this->wsc_use_webhook( $webhook_endpoint ) !== '' ) {
$body['webhook'] = $webhook_endpoint;
}
$request = $this->wsc_scan_request( $token, $body );
if (is_wp_error( $request )) {
cmplz_wsc_logger::log_errors('wsc_scan_start', 'COMPLIANZ: scan request failed, error: ' . $request->get_error_message());
return;
}
$response = json_decode(wp_remote_retrieve_body($request));
if (!isset($response->id)) {
cmplz_wsc_logger::log_errors('wsc_scan_start', 'COMPLIANZ: no id in response');
return;
}
// use these options for the webhooks
update_option('cmplz_wsc_scan_id', $response->id, false);
update_option('cmplz_wsc_scan_createdAt', $response->createdAt, false);
update_option('cmplz_wsc_scan_status', 'progress', false);
}
/**
* Validate and return the webhook endpoint if it uses HTTPS.
*
* This function parses the provided webhook endpoint URL and checks if the scheme is HTTPS.
* If the scheme is HTTPS, it returns the original webhook endpoint URL. Otherwise, it returns an empty string.
*
* @param string $webhook_endpoint The webhook endpoint URL to validate.
* @return string The validated webhook endpoint URL if it uses HTTPS, or an empty string otherwise.
*/
private function wsc_use_webhook( string $webhook_endpoint ): string {
$parsed_webhook_endpoint = wp_parse_url( $webhook_endpoint );
if ( isset( $parsed_webhook_endpoint['scheme'] ) && 'https' === $parsed_webhook_endpoint['scheme'] ) {
return $webhook_endpoint;
}
return '';
}
/**
* Send a WSC scan request to the WSC API.
*
* This function sends a POST request to the WSC API to initiate a scan.
* It includes the necessary headers and body in the request.
*
* @param mixed $token The authorization token for the WSC API.
* @param array $body The body of the request, containing the scan parameters.
* @return array|WP_Error The response from the WSC API or a WP_Error on failure.
*/
private function wsc_scan_request( $token, array $body ) {
$args = array(
'headers' => array(
'Content-Type' => 'application/json',
),
'timeout' => 15,
'sslverify' => true,
'body' => wp_json_encode( $body ),
);
if ( $token ) {
$args['headers']['Authorization'] = 'oauth-' . $token;
}
return wp_remote_post(
self::WSC_SCANNER_ENDPOINT . '/api/v1/scan',
$args
);
}
/**
* Process the WSC scan.
*
* Initiates the WSC scan process by checking if the scan is enabled.
* If enabled, it retrieves the scan status and processes the scan accordingly.
* The process includes starting the scan, checking the scan status, and retrieving cookies.
* Updates the scan status and progress based on the scan results.
* Repeats the process until the scan is completed or the maximum number of iterations is reached.
* The process is triggered by the `cmplz_remote_cookie_scan` action and stops if the scan is not enabled,
* the maximum iterations are reached, or the scan status is 'failed'.
*
* @return void
*/
public function wsc_scan_process(): void
{
if (!$this->wsc_scan_enabled()) {
cmplz_wsc_logger::log_errors('wsc_scan_process', 'COMPLIANZ: wsc scan is not enabled');
return;
}
$status = 'not-started';
$max_iterations = 25;
$cookies = [];
$iteration = (int)get_option('cmplz_wsc_scan_iteration');
$iteration++;
// reached the max iterations the scan is completed
if ($iteration > $max_iterations) {
update_option('cmplz_wsc_scan_status', 'completed', false);
update_option('cmplz_wsc_scan_progress', 100);
return;
}
update_option("cmplz_wsc_scan_iteration", $iteration, false);
// if the scan is not yet started
if (!get_option('cmplz_wsc_scan_id')) {
$this->wsc_scan_start(); // start the scan and store the scan id and scan status
update_option('cmplz_wsc_scan_progress', 25); // set the progress to 25%
}
// once we have the scan id, we can check the status
if (get_option('cmplz_wsc_scan_id') !== false) {
$sleep = 6;
sleep($sleep);
update_option('cmplz_wsc_scan_progress', 25 + $iteration * 5);
$scan_id = get_option( 'cmplz_wsc_scan_id' );
$status = $this->wsc_scan_get_status( $scan_id, $iteration, $max_iterations ); // check the status of the scan.
}
if ($status === 'completed') { // if the status is completed.
// if is already completed by webhook and progress is 100.
$cookies = get_transient( 'cmplz_wsc_last_cookies' );
update_option( 'cmplz_wsc_scan_progress', 100 );
// run the checks once the scan is completed.
$this->wsc_scan_run_checks();
}
// if failed, stop scan and mark as completed for now
if ($status === 'failed') {
update_option('cmplz_wsc_scan_status', 'completed', false);
update_option('cmplz_wsc_scan_progress', 100, false);
}
//check if we have results
if ( is_array( $cookies ) && count( $cookies ) > 0 ) {
// store the cookies.
$this->wsc_scan_store_cookies( $cookies );
}
}
/**
* Store cookies retrieved from the WSC scan.
*
* This function processes an array of cookies, filters out non-cookie and non-webStorage types,
* and stores the remaining cookies using the CMPLZ_COOKIE class.
*
* @param array $cookies An array of cookie objects retrieved from the WSC scan.
*/
public function wsc_scan_store_cookies(array $cookies): void
{
foreach ($cookies as $key => $c) {
// Skip if the type is not 'webStorage' or 'cookie'
if ($c->type !== 'webStorage' && $c->type !== 'cookie') {
continue;
}
$cookie = new CMPLZ_COOKIE();
// Set the cookie type to 'localstorage' if it's 'webStorage', otherwise 'cookie'
$cookie->type = $c->type === 'webStorage' ? 'localstorage' : 'cookie';
// Set the domain to 'self' if it's 'webStorage', otherwise use the cookie's domain
$cookie->domain = $c->type === 'cookie' ? $c->domain : 'self';
// Add the cookie name and supported languages to the cookie object
$cookie->add($c->name, COMPLIANZ::$banner_loader->get_supported_languages());
// Save the cookie object
$cookie->save(true);
}
}
/**
* Reset the WSC scan options.
*
* This function deletes the options related to the WSC scan, effectively resetting the scan state.
* It removes the scan ID, scan status, scan progress, and scan iteration count from the WordPress options.
*
* @return void
*/
public static function wsc_scan_reset(): void
{
delete_option('cmplz_wsc_scan_id');
delete_option('cmplz_wsc_scan_status');
delete_option('cmplz_wsc_scan_progress');
delete_option('cmplz_wsc_scan_iteration');
delete_option('cmplz_wsc_scan_createdAt');
}
/**
* Check if the WSC scan is completed.
*
* This function checks if the WSC scan is enabled and then verifies if the scan progress
* has reached 100%, indicating that the scan is completed.
*
* @return bool True if the WSC scan is completed, false otherwise.
*/
public function wsc_scan_completed(): bool
{
if (!$this->wsc_scan_enabled()) { // force true
cmplz_wsc_logger::log_errors('wsc_scan_completed', 'COMPLIANZ: wsc scan not enabled');
return true;
}
return get_option('cmplz_wsc_scan_progress') === 100;
}
/**
* Get the progress of the WSC scan.
*
* This function checks if the WSC scan is enabled. If it is not enabled, it returns 100,
* indicating that the scan is complete. Otherwise, it retrieves the current scan progress
* from the WordPress options.
*
* @return int The current progress of the WSC scan, or 100 if the scan is not enabled.
*/
public function wsc_scan_progress(): int
{
if (!$this->wsc_scan_enabled()) {
return 100;
}
return (int)get_option('cmplz_wsc_scan_progress');
}
/**
* Get the URL for the WSC scan.
*
* This function returns the URL to be used for the WSC scan. If the `SCRIPT_DEBUG` constant is defined,
* it returns the Complianz URL. Otherwise, it returns the site URL.
* @return string The URL to be used for the WSC scan.
*/
private function wsc_scan_get_site_url(): string {
return site_url();
}
/**
* Retrieve the status of the WSC scan.
*
* This function retrieves the status of the WSC scan by making a request to the WSC API.
* It returns the status if the request is successful, or the default status otherwise.
*
* @param string $scan_id The id of the scan.
* @param int $iteration The current iteration of the status retrieval process.
* @param int $max_iterations The maximum number of iterations to retrieve the status.
* @return string The status of the WSC scan.
*/
private function wsc_scan_get_status(string $scan_id, int $iteration, int $max_iterations): string
{
$default_status = get_option('cmplz_wsc_scan_status', 'not-started');
if ($default_status === 'completed') {
return 'completed';
}
$response = $this->wsc_scan_retrieve_scan( $scan_id );
// Early exit if response is an error or if recurring and iteration is >= 2
if (is_wp_error($response) || $iteration >= $max_iterations) {
cmplz_wsc_logger::log_errors('wsc_scan_get_status', 'COMPLIANZ: error retrieving scan status');
return $default_status;
}
// Decode the response body
$data = json_decode(wp_remote_retrieve_body($response));
// Check if there was an error in the scan process
if (isset($data->is_processed) && $data->is_processed === 'error' && isset($data->skipped_urls) && is_array($data->skipped_urls)) {
foreach ($data->skipped_urls as $skipped) {
if ($skipped->reason === 'PageNotLoadedError' && $skipped->url === $this->wsc_scan_get_site_url()) {
cmplz_wsc_logger::log_errors('wsc_scan_get_status', 'COMPLIANZ: error in scan process');
return 'failed';
}
}
}
// If an error occurred in the response, restart the scan and retry.
if (isset($data->error)) {
$this->wsc_scan_start();
return $this->wsc_scan_get_status($scan_id, $iteration + 1, $max_iterations); // Retry with incremented iteration
}
if (isset($data->status) && $data->status === 'progress') {
// if is in progress but we already have the trackers results.
if (isset($data->result->trackers) && count($data->result->trackers) > 0) {
$this->wsc_complete_cookie_scan($data);
return 'completed';
}
update_option('cmplz_wsc_scan_status', $data->status, false);
return $data->status;
}
// If a status is provided and is completed, update it and return.
if (isset($data->status) && $data->status === 'completed') {
$this->wsc_complete_cookie_scan( $data );
return $data->status;
}
return $default_status;
}
/**
* Complete the WSC scan.
* This function completes the WSC scan by storing the cookies found during the scan in a transient.
* It stores the cookies in a transient for 24 hours and updates the scan status to 'completed'.
*
* @param object $scan The scan object containing the scan results.
* @param bool $webhook True if the scan is completed by a webhook, false otherwise.
* @return void
*/
public function wsc_complete_cookie_scan( object $scan, bool $webhook = false ): void {
if ( $webhook ) {
$cookies = isset($scan->data->result->trackers) ? $scan->data->result->trackers : [];
} else {
$cookies = isset($scan->result->trackers) ? $scan->result->trackers : [];
}
// Store the cookies on a transient.
set_transient( 'cmplz_wsc_last_cookies', $cookies, 60 * 60 * 24 );
update_option( 'cmplz_wsc_scan_status', 'completed', false );
if ( $webhook ) {
update_option( 'cmplz_wsc_scan_progress', 100 );
}
}
/**
* Retrieve the WSC scan.
*
* This function retrieves the WSC scan data by making a request to the WSC API.
* It returns the response if the request is successful, or an empty array otherwise.
*
* @param string $scan_id The id of the scan.
* @return array|WP_Error The response from the WSC API.
*/
private function wsc_scan_retrieve_scan( string $scan_id ) {
$id = sanitize_text_field( $scan_id );
$endpoint = self::WSC_SCANNER_ENDPOINT . '/api/v1/scans/' . $id;
$token = cmplz_wsc_auth::get_token();
$args = array(
'headers' => array(
'Content-Type' => 'application/json',
),
'timeout' => 15,
'sslverify' => true,
);
if ( $token ) {
$args['headers']['Authorization'] = 'oauth-' . $token;
}
return wp_remote_get( $endpoint, $args );
}
/**
* Initialize the WSC scan.
*
* This function resets the old scanner to start the WSC scan if the WSC scan status is already enabled.
*
* @return void
*/
public function wsc_scan_init(): void
{
if (get_option('cmplz_wsc_status') !== 'enabled') {
return;
}
if (get_option('cmplz_wsc_scan_first_run', false)) {
return;
}
$processed_pages_list = get_transient('cmplz_processed_pages_list');
if (!is_array($processed_pages_list) || !in_array("remote", $processed_pages_list)) {
return;
}
$processed_pages_list = array_diff($processed_pages_list, ["remote"]);
set_transient('cmplz_processed_pages_list', $processed_pages_list, MONTH_IN_SECONDS);
update_option('cmplz_wsc_scan_first_run', true, false);
}
/**
* Get the source of the scanner.
*
* This function retrieves the source of the scanner based on the defined constants.
*
* @return string The source of the scanner.
*/
private function wsc_get_scanner_source(): string {
$version = $this->get_cmplz_version();
if (!$version) {
return '';
}
$is_auth = cmplz_wsc_auth::wsc_is_authenticated() ? 'auth' : 'no-auth';
$source_map = array(
'cmplz_free' => array(
'auth' => 'complianz_free_scan',
'no-auth' => 'complianz_u_free_scan',
),
'cmplz_premium' => array(
'auth' => 'complianz_premium_scan',
'no-auth' => 'complianz_u_premium_scan',
),
'cmplz_multisite' => array(
'auth' => 'complianz_multisite_scan',
'no-auth' => 'complianz_u_multisite_scan',
),
);
return $source_map[ $version ][ $is_auth ] ?? '';
}
/**
* Get the Complianz version.
*
* This function checks for the defined constants to determine the Complianz version.
* It returns 'cmplz_free', 'cmplz_premium', or 'cmplz_multisite' based on the defined constants.
* If none of the constants are defined, it returns null.
*
* @return string|null The Complianz version or null if no version is defined.
*/
public function get_cmplz_version(): ?string {
if ( defined( 'cmplz_free' ) ) {
return 'cmplz_free';
} elseif ( defined( 'cmplz_premium' ) ) {
return 'cmplz_premium';
} elseif ( defined( 'cmplz_premium_multisite' ) ) {
return 'cmplz_multisite';
}
return null;
}
/**
* Run checks for the WSC scan.
*
* This function performs periodic checks for the WSC scan. It retrieves the last check time and compares it
* with the current time to ensure that checks are not performed more frequently than every 30 days.
* If the checks are due, it updates the last check time, retrieves a new token, and sends a scan request
* to the WSC API with the necessary payload.
* If the request is successful, it schedules a polling request to retrieve the scan results.
* If the request fails, it logs the error and retries the scan request up to three times.
* If the maximum number of retries is reached, it logs the error and aborts the scan request.
*
* @param int $retry The number of retries for the scan request.
* @return void
*/
private function wsc_scan_run_checks( int $retry = 0 ): void {
$max_retries = 3;
$last_check = get_option( 'cmplz_wsc_checks_scan_createdAt', false ); // timestamp or false.
// Do not run the checks more frequently than every 30 days.
if ( $last_check && time() - $last_check < ( 30 * DAY_IN_SECONDS ) ) {
return;
}
if ( get_transient( 'cmplz_wsc_checks_scan_error' ) ) {
return;
}
if ( $retry >= $max_retries ) {
set_transient( 'cmplz_wsc_checks_scan_error', true, 60 * 60 * 24 ); // stop the checks for 24 hours in case of error.
cmplz_wsc_logger::log_errors( 'wsc_scan_run_checks', 'COMPLIANZ: max retries reached, scan request aborted' );
return;
}
// Check for the token and source.
$token = cmplz_wsc_auth::get_token( true ); // Get a new token.
$source = $this->wsc_get_scanner_source();
if ( ! $source ) {
cmplz_wsc_logger::log_errors( 'wsc_scan_run_checks', 'COMPLIANZ: no token/source' );
return;
}
// Get the last check to now.
update_option( 'cmplz_wsc_checks_scan_createdAt', time(), false );
$url = esc_url_raw( $this->wsc_scan_get_site_url() );
// define the payloads.
$body = array(
'url' => $url,
'acceptBanner' => 'true',
'getTrackers' => 'false',
'source' => $source,
'detectTechnologies' => 'true',
'detectLanguages' => 'true',
'detectGoogleConsentMode' => 'true',
'detectLegalDocuments' => 'true',
);
$webhook_endpoint = esc_url_raw( get_rest_url( null, self::WSC_SCANNER_DETECTIONS_WEBHOOK_PATH ) );
$is_webhook = $this->wsc_use_webhook( $webhook_endpoint ) !== '';
if ( $is_webhook ) {
$body['webhook'] = $webhook_endpoint;
}
$request = $this->wsc_scan_request( $token, $body );
if ( is_wp_error( $request ) ) {
delete_option( 'cmplz_wsc_checks_scan_createdAt' ); // reset the last_check timestamp.
$this->wsc_scan_run_checks( $retry + 1 ); // restart the checks.
cmplz_wsc_logger::log_errors( 'wsc_scan_run_checks', 'COMPLIANZ: scan #' . $retry . ' request failed, error: ' . $request->get_error_message() );
return;
}
$response = json_decode( wp_remote_retrieve_body( $request ) );
if ( ! isset( $response->id ) ) {
delete_option( 'cmplz_wsc_checks_scan_createdAt' ); // reset the last_check timestamp.
$this->wsc_scan_run_checks( $retry + 1 ); // restart the checks.
cmplz_wsc_logger::log_errors( 'wsc_scan_run_checks', 'COMPLIANZ: no id in response' );
return;
}
// Schedule polling.
// Schedule a request after 5mn to retrieve the scan results and then process it using wsc_scan_process_checks().
if ( ! $is_webhook && ! wp_next_scheduled( 'cmplz_wsc_checks_retrieve_results' ) ) {
update_option( 'cmplz_wsc_checks_scan_polling', true, false );
wp_schedule_single_event( time() + ( 60 * 5 ), 'cmplz_wsc_checks_retrieve_results', array( $retry ) );
}
// store the wsc checks scan id.
update_option( 'cmplz_wsc_checks_scan_id', $response->id, false );
update_option( 'cmplz_wsc_checks_scan_createdAt', $response->createdAt, false ); // update the last check value to the createdAt value.
}
/**
* Forcefully run the WSC scan checks.
*
* This method forcefully initiates the WSC scan checks by calling the `wsc_scan_run_checks` method
* with the retry count set to 0 and the forced flag set to true.
*
* @return void
*/
public function wsc_scan_forced() {
$this->wsc_scan_run_checks();
}
/**
* Retrieve the WSC checks.
*
* This function retrieves the WSC checks by making a request to the WSC API.
* It handles polling, retry logic, and processes the scan results.
*
* @param int $retry The number of retries for the scan request.
* @return void
*/
private function wsc_checks_retrieve( int $retry ) {
$max_retries = 3;
$is_polling = get_option( 'cmplz_wsc_checks_scan_polling' );
$scan_id = get_option( 'cmplz_wsc_checks_scan_id' );
if ( ! $is_polling || ! $scan_id ) { // if polling mode and scan id are false, return.
return;
}
if ( $retry >= $max_retries ) { // if the max retries are reached, log the error and schedule the request.
cmplz_wsc_logger::log_errors( 'wsc_checks_retrieve', 'COMPLIANZ: max retries reached, scan request aborted' );
if ( wp_next_scheduled( 'cmplz_wsc_checks_retrieve_results' ) ) { // check for old scheduled event and clear it.
wp_clear_scheduled_hook( 'cmplz_wsc_checks_retrieve_results' );
}
wp_schedule_single_event( time() + ( 60 * 15 ), 'cmplz_wsc_checks_retrieve_results' ); // schedule a new event after 15mn.
return;
}
$response = $this->wsc_scan_retrieve_scan( $scan_id ); // retrieve the scan by scan_id.
// if the response is an error or the scan status is not yet completed > log the error and schedule another request.
if ( is_wp_error( $response ) ) {
cmplz_wsc_logger::log_errors( 'wsc_checks_retrieve', 'COMPLIANZ: error retrieving scan status' );
$this->wsc_checks_retrieve( $retry + 1 );
return;
}
if ( isset( $data->status ) && 'completed' === $data->status ) {
$this->wsc_scan_process_checks( $data );
delete_option( 'cmplz_wsc_checks_scan_polling' );
} else {
$this->wsc_checks_retrieve( $retry + 1 );
}
}
/**
* Process the WSC scan checks.
*
* This function processes the results of the WSC scan checks. It logs the function call,
* checks if notifications are enabled, validates the notification email address, and stores
* the scan results temporarily. It then starts the detection process, checking for various
* conditions and adding corresponding blocks to the detections array. Finally, it generates
* and sends a notification email based on the detections.
*
* @param object $result The result object from the WSC scan.
* @return void
*/
public function wsc_scan_process_checks( object $result ): void {
// Store temporarily the results.
set_transient( 'cmplz_wsc_last_checks', $result, 60 * 60 * 24 );
// Start the detection process.
$result = $result->data->result;
$meta = $result->meta;
$additional_technologies = $result->additional_technologies;
$perfect_matches = $result->perfect_matches;
// define the detections array.
$detections = array();
/**
* Check for the detections.
*/
// Block #1 | Consent Mode V2 (error) | Notice if you have google services but no GCM.
$is_gcm_detected = isset( $meta->googleConsentMode->found ) ? $meta->googleConsentMode->found : false;
$services_detected = array();
$gcm_services = array( 'Google Analytics (Universal Analytics)', 'Google Analytics', 'Google Analytics 4', 'Google Tag Manager', 'Google Ads Remarketing', 'Google Conversion linker' );
$is_cmplz_gcm_enabled = cmplz_consent_mode(); // on free return false as default.
// look for additional technologies matching the services.
foreach ( $additional_technologies as $technology ) {
if ( in_array( $technology->name, $gcm_services, true ) ) {
$services_detected[] = $technology->name;
}
}
foreach ( $perfect_matches as $technology ) {
if ( in_array( $technology->name, $gcm_services, true ) ) {
$services_detected[] = $technology->name;
}
}
if ( ! $is_cmplz_gcm_enabled && ! $is_gcm_detected && ! empty( $services_detected ) ) {
// update the detections array adding the block.
$detections[] = array(
'block' => 'block_01',
'args' => array(
'technology' => reset( $services_detected ), // return just the first element.
),
);
}
// Block #2 | TCF (error) | Notice if you have Google Advertising Product but no TCF.
$is_tcf_installed = isset( $meta->tcf->installed ) ? $meta->tcf->installed : false;
$cmp_services = array( 'Google AdSense', 'Ezoic', 'Nexx360', 'Mediavine', 'Media.net', 'Raptive' );
$cmp_services_detected = array();
foreach ( $additional_technologies as $technology ) {
if ( in_array( $technology->name, $cmp_services, true ) ) {
$cmp_services_detected[] = $technology->name;
}
}
if ( ! $is_tcf_installed && ! empty( $cmp_services_detected ) ) {
$detections[] = array(
'block' => 'block_02',
'args' => array(),
);
}
// Block #3 | Multiple regions | Notice if you have multiple regions detected.
$languages = $meta->languages;
$cleaned_languages = array();
$seen_prefixes = array();
if ( isset( $languages ) ) {
foreach ($languages as $language) {
$prefix = explode('-', $language)[0];
if (!in_array($prefix, $seen_prefixes, true)) {
$cleaned_languages[] = $language;
$seen_prefixes[] = $prefix;
}
}
if (count($cleaned_languages) > 1) {
$detections[] = array(
'block' => 'block_03',
'args' => array(),
);
}
}
// #4/5 check
if ( empty( $meta->detected_pp ) ) {
// Block #5 | Privacy statement | Notice if no privacy statement is detected.
$detections[] = array(
'block' => 'block_05',
'args' => array(),
);
} else {
// Block #4 | Record of consents.
$detections[] = array(
'block' => 'block_04',
'args' => array(),
);
}
// #6 check
// Block #6 | Woocommerce || Check if Woocommerce is installed.
include_once( ABSPATH . 'wp-admin/includes/plugin.php' );
$installed_plugins = get_plugins();
$is_woocommerce_installed = isset( $installed_plugins['woocommerce/woocommerce.php'] );
// if woocommerce is installed, send the block.
if ( $is_woocommerce_installed ) {
$detections[] = array(
'block' => 'block_06',
'args' => array(),
);
}
// #7 check
// Block #7 | Cmp | Check if a CMP is detected.
if ( isset( $meta->detected_competitor ) && 'Google' === $meta->detected_competitor ) {
$detections[] = array(
'block' => 'block_07',
'args' => array(),
);
}
if ( 0 === count( $detections ) ) {
return;
}
// Store the detections result.
set_transient( 'cmplz_wsc_checks_last_detections', $detections, 0 );
// Reset the previously dismissed warnings.
$this->reset_wsc_dismissed_warnings( $detections );
// Create and send the notification.
$disable_automatic_cookiescan = (bool) cmplz_get_option( 'disable_automatic_cookiescan' );
if ( $disable_automatic_cookiescan ) {
return;
}
// If the email address is not valid, return.
$notification_email_address = empty(cmplz_get_option('cmplz_wsc_email')) ? get_bloginfo('admin_email') : cmplz_get_option('cmplz_wsc_email');
if ( ! filter_var( $notification_email_address, FILTER_VALIDATE_EMAIL ) ) {
return;
}
$website = wp_parse_url( site_url(), PHP_URL_HOST );
// translators: %s: website name.
$title = sprintf( __( '[Complianz] Compliance report for %s', 'complianz-gdpr' ), $website );
$notification = $this->wsc_checks_create_mail_notification( $detections, $title );
$send_notification = $this->wsc_send_notification( $notification, $title, $notification_email_address );
// Send the email.
if ( $send_notification ) {
update_option( 'cmplz_wsc_checks_last_mail_sent', time(), false );
} else {
update_option( 'cmplz_wsc_checks_last_mail_sent_error', time(), false );
}
// Remove the scan_id when the flow is completed, to prevent the wsc api from being called again.
delete_option( 'cmplz_wsc_checks_scan_id' );
}
/**
* Send a notification email.
*
* This function sends a notification email using the provided notification content, title, and recipient email address.
* It sets the email headers, including the sender and content type, and uses the `cmplz_mailer` class to send the email.
*
* @param string $notification The content of the notification email.
* @param string $title The title of the notification email.
* @param string $notification_email_address The recipient email address for the notification.
* @return bool True if the email was sent successfully, false otherwise.
*/
private function wsc_send_notification( string $notification, string $title, string $notification_email_address ): bool {
// define mailer.
$headers = "Content-Type: text/html; charset=UTF-8";
$mailer = new cmplz_mailer();
$mailer->to = $notification_email_address;
$mailer->subject = $title;
$mailer->body = $notification;
$mailer->headers = $headers;
return $mailer->send_basic_mail();
}
/**
* Create a notification message.
*
* This function generates a notification message based on the provided detections.
* It retrieves the notification blocks, maps the detections to the blocks, and formats the message.
*
* @param array $detections An array of detections to process.
* @param string $title The title of the notification message.
* @return string The generated notification message.
*/
private function wsc_checks_create_mail_notification( array $detections, string $title ): string {
// retrieve the blocks.
$blocks = $this->wsc_checks_notification_blocks();
// map detections to blocks.
$notifications = $this->wsc_checks_notification_generate_mail_blocks( $detections, $blocks );
// if no notifications, return.
if ( count( $notifications ) === 0 ) {
return '';
}
$website = wp_parse_url( site_url(), PHP_URL_HOST );
$site_url = site_url();
// creating message.
$message = '<!DOCTYPE html>';
$message .= '<html>';
$message .= '<head>';
$message .= '<meta charset="UTF-8">';
$message .= '<title>' . esc_html( $title ) . '</title>';
$message .= '</head>';
$message .= '<body>';
$message .= '<p>' . sprintf( // translators: %1$s: site url, %2$s: website name.
__( 'This compliance report was sent from your site <a href="%1$s" target="_blank">%2$s</a> by Complianz', 'complianz-gdpr' ),
esc_url( $site_url ),
esc_html( $website )
) . '</p>';
$message .= '<p>' . __( 'You can find the most important takeaways below:', 'complianz-gdpr' ) . '</p>';
// Add formatted blocks.
foreach ( $notifications as $notification ) {
$message .= '<strong>' . esc_html( $notification['label'] ) . '</strong>';
$message .= '<p>' . $notification['description'] . '</p>';
}
$message .= '<hr>';
$message .= '<p>';
$message .= sprintf( // translators: %1$s: website name.
__( 'Are you no longer the website administrator? <a href="%1$s" target="_blank">Click here</a> to dismiss notifications.', 'complianz-gdpr' ),
esc_url( 'https://complianz.io/instructions/about-email-notifications/' )
);
$message .= '</p>';
$message .= '</body>';
$message .= '</html>';
return $message;
}
/**
* Generate mail blocks for notifications.
*
* This function generates an array of notification mail blocks based on the provided detections,
* blocks, and Complianz version. It filters the blocks based on the plugin version, generates
* descriptions for each block, and sorts the notifications by priority.
*
* @param array $detections An array of detections to process.
* @param array $blocks An array of notification blocks.
* @return array An array of generated notification mail blocks.
*/
private function wsc_checks_notification_generate_mail_blocks( array $detections, array $blocks ): array {
$cmplz_version = $this->get_cmplz_version();
$notifications = array();
foreach ( $detections as $detection ) {
// Skip if the block is not enabled for the current cmplz version.
if ( ! isset( $blocks[ $detection['block'] ][ $cmplz_version ] ) ) {
continue;
}
$block = $blocks[ $detection['block'] ][ $cmplz_version ]; // get the block.
$priority = $block['priority']; // Get the priority.
$notifications[] = array( // Create an array with the priority as key so can be sorted.
'block' => $detection['block'],
'label' => $block['label'],
'description' => $this->wsc_checks_notification_generate_block_description( $block, $detection, false ),
'type' => $block['type'],
'priority' => $priority,
);
}
// sort the notifications by priority.
usort(
$notifications,
function ( $a, $b ) {
return $b['priority'] <=> $a['priority'];
}
);
// if the $notifications array is empty, return.
if ( empty( $notifications ) ) {
return array();
}
// if detections are more than 3, just return the first 3.
return count( $notifications ) > 3 ? array_slice( $notifications, 0, 3, true ) : $notifications;
}
/**
* Generate a notification description.
*
* This function generates a description for a notification by replacing placeholders
* in the block's description with specific values from the block and detection arguments.
*
* @param array $block The block array containing the description and other details.
* @param array $detection The detection array containing arguments to replace in the description.
* @param bool $is_warning True if the notification is a warning, false otherwise.
* @return string The generated description with placeholders replaced by actual values.
*/
public function wsc_checks_notification_generate_block_description( array $block, array $detection, bool $is_warning ): string {
$description = $block['description'];
// Replace placeholders from block description.
if ( isset( $block['admin_url'] ) ) {
$description = str_replace( '{admin_url}', esc_url( $block['admin_url'] ), $description );
if ( $is_warning ) {
$description = str_replace( 'target="_blank"', 'target="_self"', $description );
}
}
if ( isset( $block['read_more'] ) && ! $is_warning ) {
$read_more_link = sprintf(
'<a target="_blank" href="%s"><strong>%s</strong></a>',
esc_url( $block['read_more'] ),
__( 'Read more', 'complianz-gdpr' )
);
$description .= ' ' . $read_more_link;
}
// Replace other placeholders from detection args if provided.
if ( ! empty( $detection['args'] ) && is_array( $detection['args'] ) ) {
foreach ( $detection['args'] as $key => $value ) {
$placeholder = '{' . $key . '}';
if ( strpos( $description, $placeholder ) !== false ) {
$description = str_replace( $placeholder, $value, $description );
}
}
}
return $description;
}
/**
* Retrieve the notification blocks.
*
* This function returns an array of notification blocks, each containing details such as
* label, description, type, admin URL, read more URL, plugin version, and priority.
*
*
* Block structure:
* - cmplz_free: array | The block for the free version
* - cmplz_premium: array | The block for the premium version
* - cmplz_multisite: array | The block for the multisite version
*
* Sub-block structure:
* - default: bool | If no blocks are set, this block will be used
* - label: string | The label/title of the block
* - description: string | The description of the block, with placeholders for dynamic values
* - type: string | The type of the block (error, warning, info)
* - admin_url: string | The admin URL to link to, used if the description contains an admin URL placeholder '{admin_url}'
* - read_more: string | The read more URL to link to, if setted will be added to the description
* - plugin_version: array | The plugin versions for which the block is enabled
* - priority: int | The priority of the block
*
* @return array The array of notification blocks.
*/
public function wsc_checks_notification_blocks(): array {
return array(
'block_01' => array(
'cmplz_free' => array(
'default' => false,
'label' => __( 'Consent mode', 'complianz-gdpr' ),
'description' => __( 'We have found {technology} on your site and recommend <a target="_blank" href="{admin_url}">enabling</a> Google Consent Mode V2 to optimize your analytics implementation.', 'complianz-gdpr' ),
'type' => 'urgent',
'admin_url' => $this->wsc_generate_admin_url( 'complianz#wizard/statistics-configuration' ),
'read_more' => 'https://complianz.link/cob01fr',
'priority' => 10,
),
'cmplz_premium' => array(
'default' => false,
'label' => __( 'Consent mode', 'complianz-gdpr' ),
'description' => __( 'We have found {technology} on your site and recommend <a target="_blank" href="{admin_url}">enabling</a> Google Consent Mode V2 to optimize your analytics implementation.', 'complianz-gdpr' ),
'type' => 'urgent',
'admin_url' => $this->wsc_generate_admin_url( 'complianz#wizard/statistics-configuration' ),
'read_more' => 'https://complianz.link/cob01pr',
'priority' => 10,
),
'cmplz_multisite' => array(
'default' => false,
'label' => __( 'Consent mode', 'complianz-gdpr' ),
'description' => __( 'We have found {technology} on your site and recommend <a target="_blank" href="{admin_url}">enabling</a> Google Consent Mode V2 to optimize your analytics implementation.', 'complianz-gdpr' ),
'type' => 'urgent',
'admin_url' => $this->wsc_generate_admin_url( 'complianz#wizard/statistics-configuration' ),
'read_more' => 'https://complianz.link/cob01mu',
'priority' => 10,
),
),
'block_02' => array(
'cmplz_free' => array(
'default' => false,
'label' => __( 'Advertising', 'complianz-gdpr' ),
'description' => __( 'If you’re showing ads on your website it’s likely you need a Google certified CMP to make sure your ads are shown correctly. With Complianz you can <a target="_blank" href="{admin_url}">enable TCF</a> with our Google certified CMP.', 'complianz-gdpr' ),
'type' => 'urgent',
'admin_url' => $this->wsc_generate_admin_url( 'complianz#wizard/services' ),
'read_more' => 'https://complianz.link/adb02fr',
'priority' => 20,
),
'cmplz_premium' => array(
'default' => false,
'label' => __( 'Advertising', 'complianz-gdpr' ),
'description' => __( 'If you’re showing ads on your website it’s likely you need a Google certified CMP to make sure your ads are shown correctly. With Complianz you can <a target="_blank" href="{admin_url}">enable TCF</a> with our Google certified CMP.', 'complianz-gdpr' ),
'type' => 'urgent',
'admin_url' => $this->wsc_generate_admin_url( 'complianz#wizard/services' ),
'read_more' => 'https://complianz.link/adb02pr',
'priority' => 20,
),
'cmplz_multisite' => array(
'default' => false,
'label' => __( 'Advertising', 'complianz-gdpr' ),
'description' => __( 'If you’re showing ads on your website it’s likely you need a Google certified CMP to make sure your ads are shown correctly. With Complianz you can <a target="_blank" href="{admin_url}">enable TCF</a> with our Google certified CMP.', 'complianz-gdpr' ),
'type' => 'urgent',
'admin_url' => $this->wsc_generate_admin_url( 'complianz#wizard/services' ),
'read_more' => 'https://complianz.link/adb02mu',
'priority' => 20,
),
),
'block_03' => array(
'cmplz_free' => array(
'default' => false,
'label' => __( 'Privacy laws', 'complianz-gdpr' ),
'description' => __( 'On websites with multiple languages you need to consider that your visitors might be from various regions, and therefore different privacy laws might apply. Double-check and see if you’re complying with all relevant regions.', 'complianz-gdpr' ),
'type' => 'open',
'read_more' => 'https://complianz.link/prb03fr',
'priority' => 30,
),
'cmplz_premium' => array(
'default' => false,
'label' => __( 'Privacy laws', 'complianz-gdpr' ),
'description' => __( 'On websites with multiple languages you need to consider that your visitors might be from various regions, and therefore different privacy laws might apply. Double-check and see if you’re complying with all relevant regions.', 'complianz-gdpr' ),
'type' => 'open',
'read_more' => 'https://complianz.link/prb03pr',
'priority' => 30,
),
'cmplz_multisite' => array(
'default' => false,
'label' => __( 'Privacy laws', 'complianz-gdpr' ),
'description' => __( 'On websites with multiple languages you need to consider that your visitors might be from various regions, and therefore different privacy laws might apply. Double-check and see if you’re complying with all relevant regions.', 'complianz-gdpr' ),
'type' => 'open',
'read_more' => 'https://complianz.link/prb03mu',
'priority' => 30,
),
),
'block_04' => array(
'cmplz_free' => array(
'default' => false,
'label' => __( 'Collecting data', 'complianz-gdpr' ),
'description' => __( 'We found a privacy statement! Please double-check if your privacy statement has all the needed elements expected from a privacy statement. Make sure you also allow for data request forms and records of consent to support your privacy statement.', 'complianz-gdpr' ),
'type' => 'open',
'read_more' => 'https://complianz.link/cob04fr',
'priority' => 40,
),
'cmplz_premium' => array(
'default' => false,
'label' => __( 'Collecting data', 'complianz-gdpr' ),
'description' => __( 'We found a privacy statement! Please double-check if your privacy statement has all the needed elements expected from a privacy statement. Make sure you also allow for data request forms and records of consent to support your privacy statement.', 'complianz-gdpr' ),
'read_more' => 'https://complianz.link/cob04pr',
'type' => 'open',
'priority' => 40,
),
'cmplz_multisite' => array(
'default' => false,
'label' => __( 'Collecting data', 'complianz-gdpr' ),
'description' => __( 'We found a privacy statement! Please double-check if your privacy statement has all the needed elements expected from a privacy statement. Make sure you also allow for data request forms and records of consent to support your privacy statement.', 'complianz-gdpr' ),
'type' => 'open',
'read_more' => 'https://complianz.link/cob04mu',
'priority' => 40,
),
),
'block_05' => array(
'cmplz_free' => array(
'default' => false,
'label' => __( 'Privacy statement', 'complianz-gdpr' ),
'description' => __( 'We didn’t find a privacy statement. Please <a target="_blank" href="{admin_url}">add a privacy statement</a> that has all the needed elements expected from a privacy statement. Make sure you allow for DSR and Consent Records that respect the data minimization principle as well.', 'complianz-gdpr' ),
'type' => 'open',
'admin_url' => $this->wsc_generate_admin_url( 'complianz#wizard/documents' ),
'read_more' => 'https://complianz.link/prb05fr',
'priority' => 50,
),
'cmplz_premium' => array(
'default' => false,
'label' => __( 'Privacy statement', 'complianz-gdpr' ),
'description' => __( 'We didn’t find a privacy statement. Please <a target="_blank" href="{admin_url}">add a privacy statement</a> that has all the needed elements expected from a privacy statement. Make sure you allow for DSR and Consent Records that respect the data minimization principle as well.', 'complianz-gdpr' ),
'type' => 'open',
'admin_url' => $this->wsc_generate_admin_url( 'complianz#wizard/documents' ),
'read_more' => 'https://complianz.link/prb05pr',
'priority' => 50,
),
'cmplz_multisite' => array(
'default' => false,
'label' => __( 'Privacy statement', 'complianz-gdpr' ),
'description' => __( 'We didn’t find a privacy statement. Please <a target="_blank" href="{admin_url}">add a privacy statement</a> that has all the needed elements expected from a privacy statement. Make sure you allow for DSR and Consent Records that respect the data minimization principle as well.', 'complianz-gdpr' ),
'type' => 'open',
'admin_url' => $this->wsc_generate_admin_url( 'complianz#wizard/documents' ),
'read_more' => 'https://complianz.link/prb05mu',
'priority' => 50,
),
),
'block_06' => array(
'cmplz_free' => array(
'default' => false,
'label' => __( 'WooCommerce', 'complianz-gdpr' ),
'description' => __( 'When selling with WooCommerce, compliance with privacy laws and customer rights is essential. Complianz simplifies this by generating required documents and managing privacy obligations effectively.', 'complianz-gdpr' ),
'type' => 'open',
'read_more' => 'https://complianz.link/wob06fr',
'priority' => 60,
),
'cmplz_premium' => array(
'default' => false,
'label' => __( 'WooCommerce', 'complianz-gdpr' ),
'description' => __( 'When selling with WooCommerce, compliance with privacy laws and customer rights is essential. Complianz simplifies this by generating required documents and managing privacy obligations effectively.', 'complianz-gdpr' ),
'type' => 'open',
'read_more' => 'https://complianz.link/wob06pr',
'priority' => 60,
),
'cmplz_multisite' => array(
'default' => false,
'label' => __( 'WooCommerce', 'complianz-gdpr' ),
'description' => __( 'When selling with WooCommerce, compliance with privacy laws and customer rights is essential. Complianz simplifies this by generating required documents and managing privacy obligations effectively.', 'complianz-gdpr' ),
'type' => 'open',
'read_more' => 'https://complianz.link/wob06mu',
'priority' => 60,
),
),
'block_07' => array(
'cmplz_free' => array(
'default' => false,
'label' => __( 'Funding choices', 'complianz-gdpr' ),
'description' => __( 'Are you using the Google consent banner for advertising and Complianz for everything else? Why not remove one banner by combining everything with our Google Certified CMP that enablesd TCF and Consent Mode for Google products, without the need of multiple consent banners.', 'complianz-gdpr' ),
'type' => 'open',
'read_more' => 'https://complianz.link/fub07fr',
'priority' => 70,
),
'cmplz_premium' => array(
'default' => false,
'label' => __( 'Funding choices', 'complianz-gdpr' ),
'description' => __( 'Are you using the Google consent banner for advertising and Complianz for everything else? Why not remove one banner by combining everything with our Google Certified CMP that enablesd TCF and Consent Mode for Google products, without the need of multiple consent banners.', 'complianz-gdpr' ),
'type' => 'open',
'read_more' => 'https://complianz.link/fub07pr',
'priority' => 70,
),
'cmplz_multisite' => array(
'default' => false,
'label' => __( 'Funding choices', 'complianz-gdpr' ),
'description' => __( 'Are you using the Google consent banner for advertising and Complianz for everything else? Why not remove one banner by combining everything with our Google Certified CMP that enablesd TCF and Consent Mode for Google products, without the need of multiple consent banners.', 'complianz-gdpr' ),
'type' => 'open',
'read_more' => 'https://complianz.link/fub07mu',
'priority' => 70,
),
),
);
}
/**
* Retrieve the last detections from the WSC checks.
*
* This function retrieves the last detections from the WSC checks by fetching the data
* stored in the transient cache with the key 'cmplz_wsc_checks_last_detections'.
*
* @return array The array of detections retrieved from the transient cache.
*/
public function wsc_checks_retrieve_detections(): array {
$detections = get_transient( 'cmplz_wsc_checks_last_detections' );
return is_array( $detections ) ? $detections : array();
}
/**
* Generate the admin URL for Complianz.
*
* This function generates an admin URL for Complianz by adding the specified page
* to the admin URL using the `add_query_arg` function.
*
* @param string $url The Complianz admin URL to be added as a query argument.
* @return string The generated admin URL.
*/
private function wsc_generate_admin_url( string $url ): string {
return add_query_arg( array( 'page' => $url ), admin_url( 'admin.php' ) );
}
/**
* Reset the dismissed warnings for a specific WSC scan block.
*
* This method resets the dismissed warnings for a given WSC scan block by removing the block's
* entry from the 'cmplz_dismissed_warnings' option in the WordPress database.
*
* @param array $detections The block identifier for which the dismissed warnings should be reset.
* @return void
*/
public function reset_wsc_dismissed_warnings( array $detections ): void {
if ( ! $detections ) {
return;
}
$dismissed_warnings = get_option( 'cmplz_dismissed_warnings', false );
if ( ! $dismissed_warnings || ! is_array( $dismissed_warnings ) ) {
return;
}
foreach ( $detections as $detection ) {
$block_id = 'wsc-scan_' . $detection['block'];
// Delete the dismissed warning.
if ( isset( $dismissed_warnings[ $block_id ] ) ) {
unset( $dismissed_warnings[ $block_id ] );
update_option( 'cmplz_dismissed_warnings', $dismissed_warnings );
}
}
}
}
}
كتبت شروق عارف يشهد العالم تطورا غير مسبوق في التكنولوجيا، حيث أصبح الذكاء الاصطناعي قوة مؤثرة تعيد تشكيل حياتنا وتغيّر قواعد العديد من المجالات. ورغم ما يتيحه هذا التقدم من فرص واسعة، إلا أنه يثير تحديات ومخاوف، خاصة في ظل غياب تشريعات واضحة تنظم استخدامه في مجالات حساسة كالجراحة، والسيارات ذاتية القيادة، والمجال القانوني. هذا الواقع يطرح تساؤلات مهمة، أبرزها: من يتحمل المسؤولية عند حدوث خطأ؟ وتواجه مصر اليوم تحديا في سن قوانين تحمي حقوق الناس وتواكب في الوقت نفسه التقدم التكنولوجي
لا قانون للذكاء الاصطناعي حتى الان
صرح المحامي محمد عاطف بأن الذكاء الاصطناعي لا يخضع حتى الآن لإطار قانوني واضح ومحدد.
و لم يتم إصدار قانون شامل ينظم استخداماته حتى الآن.
وأوضح أنه لا يجوز قانونًا للذكاء الاصطناعي تقديم استشارات قانونية، حيث إن هذه المهام يجب أن تكون من اختصاص محامي مرخص أو جهة قانونية معترف بها، لضمان صحة المعلومات .
وفي ما يتعلق بالمسؤولية الطبية، أشار إلى أن الطبيب هو المسؤول الأول عن الخطأ الطبي، باعتباره صاحب القرار والمتخصص في تقديم الرعاية الصحية، وبالتالي فهو الذي يُسأل قانونًا عند وقوع أي تقصير أو إهمال.
أما في حالات حوادث السير، فقد بين أن السائق هو المسؤول قانونيًا عن أي خطأ يقع أثناء القيادة، لأنه هو المتحكم .
وأضاف أن القانون لا يزال غير مستوعب بشكل كامل لمفهوم القيادة الذاتية، وبالتالي لا يحمل الذكاء الاصطناعي أي مسؤولية في هذا السياق حتى الآن.
من جانبه، أوضح المحامي الجنائي محمد علي أن الذكاء الاصطناعي لديه القدرة على تقديم استشارات أو خدمات قانونية.
ولكن لا بد أن نفرق بين دوره ودور المحامي، فالمحامي لا يعتمد فقط على المعلومات، بل على فهمه العميق للقانون وظروف كل قضية، وهو ما لا يستطيع الذكاء الاصطناعي تقديمه، لأنه في النهاية مجرد أداة.
كما أن الذكاء الاصطناعي يمكنه المساعدة في الوصول إلى مواد قانونية أو شرح بعض المفاهيم، لكنه لا يقدم حلولًا قانونية كاملة، ولا يستطيع التعامل مع تفاصيل كل حالة على حدة كما يفعل المحامي البشري.
وأشار إلى أن مصر لا تمتلك حتى الآن قانونًا خاصًا ينظم الذكاء الاصطناعي.
كما لا يوجد ما يمنع قانونًا استخدام أدوات الذكاء الاصطناعي في تقديم استشارات قانونية، لكن لا يمكن الاعتماد عليها كبديل عن المحامي المرخص، حيث يشترط قانون المحاماة أن تكون المرافعات والتوقيعات القانونية صادرة عن محامي معتمد من النقابة.
وفي المجال الطبي، أوضح أن القانون المصري لا يميز بوضوح بين الخطأ الناتج عن الإنسان والخطأ الناتج عن الذكاء الاصطناعي.
فإذا وقع ضرر نتيجة استخدام أدوات مثل الروبوتات الجراحية أو أنظمة التشخيص، فإن المسؤولية تقع غالبًا على الطبيب.
أما فيما يخص السيارات ذاتية القيادة، فأكد أن مصر لا تملك إطارًا قانونيًا ينظمها حتى الآن.
وفي حال وقوع حادث، قد تتحمل المسؤولية إما الشركة المصنعة أو مالك السيارة، حسب ظروف الحادث.
من جانبه، أكد المحامي المدني رامي أبو رية بأن مصطلح الذكاء الاصطناعي يعد تعبيرا فضفاضا، مما يجعل من السهل القول بأنه لا يوجد قانون محدد ينظم استخدامه.
إلا أن الواقع أكثر دقة فبمجرد تفكيك المصطلح والنظر في كل مجال تُستخدم فيه التكنولوجيا المعتمدة على الذكاء الاصطناعي، نجد أن القوانين الحالية تنظم هذه الاستخدامات بشكل أو بآخر.
وأكد على أهمية تحديد نوع المسؤولية القانونية عند مناقشة الأطر التنظيمية للذكاء الاصطناعي، موضحًا أن الحديث هنا ينصب على المسؤولية المدنية، التي تنقسم بدورها إلى نوعين: المسؤولية العقدية والمسؤولية التقصيرية، التي تُعد الأقرب لتطبيقات الذكاء الاصطناعي في الوقت الراهن.
وأوضح أن المسؤولية التقصيرية تقوم على ثلاثة عناصر: الخطأ، والضرر، وعلاقة السببية، وهو ما تنظمه المادة 163 من القانون المدني المصري.
وأعطى مثالًا على ذلك بالسيارات ذاتية القيادة، مشيرًا إلى أنها تخضع لأحكام المادة 178 من القانون المدني، التي تتعلق بمسؤولية حارس الأشياء، أي الشخص الذي يملك السيطرة الفعلية على الشيء الذي قد يُسبب ضررًا للغير.
وبناءً عليه، فإن مالك أو مشغل السيارة ذاتية القيادة هو المسؤول مدنيًا عن أي ضرر ناتج عنها.
وفيما يتعلق باستخدام الذكاء الاصطناعي في تقديم الاستشارات القانونية، أشار أبو رية إلى أن هذه التقنية يمكنها حاليًا توليد نصوص قانونية تُقدَّم على هيئة استشارات، لكنها لا تستطيع تطبيقها فعليًا.
وقد تتضمن هذه الاستشارات معلومات عامة متداولة، أو تفاصيل دقيقة لا يعرفها سوى المتخصصين، ما قد يشكّل خطرًا على مصلحة من يطلب الاستشارة دون الرجوع إلى مختص بشري.
صرّحت الأستاذة هند توفيق، المحامية المتخصصة بالإستئناف العالي بأن استخدام الذكاء الاصطناعي في مصر يخضع لإطار قانوني واضح، حيث ينظمه قانون حماية البيانات الشخصية الصادر عام 2020، بالإضافة إلى قانون مكافحة جرائم تقنية المعلومات لسنة 2018، ما يضع استخدام هذه التكنولوجيا تحت الرقابة القانونية.
وأوضحت أن الذكاء الاصطناعي يمكن الاستفادة منه في تقديم استشارات وآراء قانونية أو خدمات مساعدة، مؤكدة على استخدامه بشكل فعلي في الأبحاث القانونية وصياغة المذكرات، إلا أن هذه الأدوات لا تحمل طابعًا رسميًا، ويمكن الاعتماد عليها كمصدر تمهيدي أو مساعد، لا أكثر.
وفيما يتعلق بالمسؤولية القانونية في حالة الأخطاء الطبية الناتجة عن استخدام الروبوتات، أكدت أن هناك شقين للمساءلة: جنائي ومدني. ففي الشق الجنائي، يُعد الروبوت بمثابة أداة جراحية، وأي خلل ناتج عنه يؤدي إلى مساءلة الطبيب جنائيًا بتهمة القتل أو الإصابة الخطأ، وفقًا للضرر الواقع. أما في الشق المدني، فالمسؤولية تقع على الطبيب كذلك، باعتبارها مسؤولية تقصيرية، مضيفة أن القانون المدني المصري يتضمن مفهوم “مسؤولية حارس الأشياء”، والتي يمكن تطبيقها على الروبوت باعتباره شيئًا ماديًا، مما يرتب تعويضًا مدنيًا عن الضرر.
وبالنسبة للحوادث الناجمة عن السيارات ذاتية القيادة، أوضحت أن المبدأ نفسه ينطبق؛ حيث يُسأل مالك السيارة مدنيًا، ما لم يثبت أن العطل ناتج عن خلل تقني أو عيب مصنعي، مع تأكيده على اتخاذه الاحتياطات اللازمة. أما من الناحية الجنائية، فلا يوجد حتى الآن نص قانوني واضح يعالج هذه الحالة.
وفي تقييمها للتأثير الاقتصادي للذكاء الاصطناعي، شددت الأستاذة هند على أن هذه التكنولوجيا باتت تمثل خطرًا حقيقيًا على العديد من المهن، خصوصًا تلك التي تعتمد على المهارات الذهنية، مثل مهنة المحاماة والقضاء. لكنها أوضحت أن الوضع في مصر يختلف، إذ لا يمكن الاعتماد كليًا على الذكاء الاصطناعي في تحقيق العدالة، بسبب الطبيعة البشرية لتكوين قناعة القاضي واستنباط القرائن، وهو ما لا تستطيع الخوارزميات محاكاته حتى الآن.
واختتمت حديثها قائلة: “من يعلم؟! ربما نشهد بعد سنوات قليلة طفرة جديدة تجعل الذكاء الاصطناعي قادراً على أداء مهام لم نكن نتخيل أن يفعلها. منذ أربعين عامًا، لو قال لنا أحد أننا سنتحدث اليوم عبر جهاز يسمى الموبايل ونتبادل الرسائل الإلكترونية، لكنا اتهمناه بالجنون”.
لم يعد الذكاء الاصطناعي مجرد فكرة مستقبلية، بل أصبح واقع نعيشه ، ودخل مجالات حساسة تمس حياة الناس بشكل مباشر.
ومع هذا الانتشار السريع، يظل القانون في مصر متأخرًا عن مواكبة هذا التطور، فلا توجد تشريعات واضحة تحدد من المسؤول عند وقوع الخطأ.
ولهذا، فإن وضع إطار قانوني ينظم استخدام الذكاء الاصطناعي أصبح ضرورة لا تحتمل التأجيل، لحماية الحقوق وضمان الاستخدام الآمن والعادل لهذه التكنولوجيا.
