| Server IP : 15.235.198.142 / Your IP : 216.73.216.190 Web Server : Apache/2.4.58 (Ubuntu) System : Linux ballsack 6.8.0-45-generic #45-Ubuntu SMP PREEMPT_DYNAMIC Fri Aug 30 12:02:04 UTC 2024 x86_64 User : www-data ( 33) PHP Version : 8.3.6 Disable Function : NONE MySQL : OFF | cURL : ON | WGET : ON | Perl : ON | Python : OFF | Sudo : ON | Pkexec : OFF Directory : /var/www/rhodeworks/wp-content/plugins/bulletproof-security/admin/includes/ |
Upload File : |
<?php
// Direct calls to this file are Forbidden when core files are not present
if ( ! function_exists ('add_action') ) {
header('Status: 403 Forbidden');
header('HTTP/1.1 403 Forbidden');
exit();
}
function bulletproof_security_admin_init() {
global $wpdb, $wp_version, $blog_id;
if ( is_multisite() && $blog_id != 1 ) {
$Ltable_name = $wpdb->prefix . "bpspro_login_security";
$charset_collate = $wpdb->get_charset_collate();
if ( $wpdb->get_var( $wpdb->prepare( "SHOW TABLES LIKE %s", $Ltable_name ) ) != $Ltable_name ) {
$sql = "CREATE TABLE $Ltable_name (
id bigint(20) NOT NULL auto_increment,
status varchar(60) NOT NULL default '',
user_id varchar(60) NOT NULL default '',
username varchar(60) NOT NULL default '',
public_name varchar(250) NOT NULL default '',
email varchar(100) NOT NULL default '',
role varchar(15) NOT NULL default '',
human_time datetime NOT NULL default '0000-00-00 00:00:00',
login_time varchar(10) NOT NULL default '',
lockout_time varchar(10) NOT NULL default '',
failed_logins varchar(2) NOT NULL default '',
ip_address varchar(45) NOT NULL default '',
hostname varchar(60) NOT NULL default '',
request_uri varchar(255) NOT NULL default '',
UNIQUE KEY id (id)
) $charset_collate;";
require_once ABSPATH . 'wp-admin/includes/upgrade.php';
dbDelta($sql);
}
} else {
$Stable_name = $wpdb->prefix . "bpspro_seclog_ignore";
$Ltable_name = $wpdb->prefix . "bpspro_login_security";
$DBBtable_name = $wpdb->prefix . "bpspro_db_backup";
$MStable_name = $wpdb->prefix . "bpspro_mscan";
$charset_collate = $wpdb->get_charset_collate();
if ( $wpdb->get_var( $wpdb->prepare( "SHOW TABLES LIKE %s", $MStable_name ) ) != $MStable_name ) {
$sql = "CREATE TABLE $MStable_name (
mscan_id bigint(20) NOT NULL auto_increment,
mscan_status varchar(8) NOT NULL default '',
mscan_type varchar(16) NOT NULL default '',
mscan_path text NOT NULL,
mscan_pattern text NOT NULL,
mscan_skipped varchar(7) NOT NULL default '',
mscan_ignored varchar(6) NOT NULL default '',
mscan_db_table varchar(64) NOT NULL default '',
mscan_db_column varchar(64) NOT NULL default '',
mscan_db_pkid text NOT NULL,
mscan_time datetime NOT NULL default '0000-00-00 00:00:00',
PRIMARY KEY (mscan_id),
UNIQUE KEY id (mscan_id)
) $charset_collate;";
require_once ABSPATH . 'wp-admin/includes/upgrade.php';
dbDelta($sql);
}
if ( $wpdb->get_var( $wpdb->prepare( "SHOW TABLES LIKE %s", $Stable_name ) ) != $Stable_name ) {
$sql = "CREATE TABLE $Stable_name (
id bigint(20) NOT NULL auto_increment,
time datetime NOT NULL default '0000-00-00 00:00:00',
user_agent_bot text NOT NULL,
UNIQUE KEY id (id)
) $charset_collate;";
require_once ABSPATH . 'wp-admin/includes/upgrade.php';
dbDelta($sql);
}
if ( $wpdb->get_var( $wpdb->prepare( "SHOW TABLES LIKE %s", $Ltable_name ) ) != $Ltable_name ) {
$sql = "CREATE TABLE $Ltable_name (
id bigint(20) NOT NULL auto_increment,
status varchar(60) NOT NULL default '',
user_id varchar(60) NOT NULL default '',
username varchar(60) NOT NULL default '',
public_name varchar(250) NOT NULL default '',
email varchar(100) NOT NULL default '',
role varchar(15) NOT NULL default '',
human_time datetime NOT NULL default '0000-00-00 00:00:00',
login_time varchar(10) NOT NULL default '',
lockout_time varchar(10) NOT NULL default '',
failed_logins varchar(2) NOT NULL default '',
ip_address varchar(45) NOT NULL default '',
hostname varchar(60) NOT NULL default '',
request_uri varchar(255) NOT NULL default '',
UNIQUE KEY id (id)
) $charset_collate;";;
require_once ABSPATH . 'wp-admin/includes/upgrade.php';
dbDelta($sql);
}
// last job, next job is updated by the cron - job size is the total size of all tables selected in that job
if ( $wpdb->get_var( $wpdb->prepare( "SHOW TABLES LIKE %s", $DBBtable_name ) ) != $DBBtable_name ) {
$sql = "CREATE TABLE $DBBtable_name (
bps_id bigint(20) NOT NULL auto_increment,
bps_table_name text NOT NULL,
bps_desc text NOT NULL,
bps_job_type varchar(9) NOT NULL default '',
bps_frequency varchar(7) NOT NULL default '',
bps_last_job varchar(30) NOT NULL default '',
bps_next_job varchar(30) NOT NULL default '',
bps_next_job_unix varchar(10) NOT NULL default '',
bps_email_zip varchar(10) NOT NULL default '',
bps_job_created datetime NOT NULL default '0000-00-00 00:00:00',
UNIQUE KEY bps_id (bps_id)
) $charset_collate;";
require_once ABSPATH . 'wp-admin/includes/upgrade.php';
dbDelta($sql);
}
}
// Whitelist BPS DB options: Total: 53
register_setting('bulletproof_security_options', 'bulletproof_security_options', 'bulletproof_security_options_validate');
register_setting('bulletproof_security_options_SLF', 'bulletproof_security_options_SLF', 'bulletproof_security_options_validate_SLF');
register_setting('bulletproof_security_options_gdpr', 'bulletproof_security_options_gdpr', 'bulletproof_security_options_validate_gdpr');
register_setting('bulletproof_security_options_debug', 'bulletproof_security_options_debug', 'bulletproof_security_options_validate_debug');
register_setting('bulletproof_security_options_DBB_log', 'bulletproof_security_options_DBB_log', 'bulletproof_security_options_validate_DBB_log');
register_setting('bulletproof_security_options_autolock', 'bulletproof_security_options_autolock', 'bulletproof_security_options_validate_autolock');
register_setting('bulletproof_security_options_db_backup', 'bulletproof_security_options_db_backup', 'bulletproof_security_options_validate_db_backup');
register_setting('bulletproof_security_options_wpt_nodes', 'bulletproof_security_options_wpt_nodes', 'bulletproof_security_options_validate_wpt_nodes');
register_setting('bulletproof_security_options_customcode', 'bulletproof_security_options_customcode', 'bulletproof_security_options_validate_customcode');
register_setting('bulletproof_security_options_mu_sysinfo', 'bulletproof_security_options_mu_sysinfo', 'bulletproof_security_options_validate_mu_sysinfo');
register_setting('bulletproof_security_options_autoupdate', 'bulletproof_security_options_autoupdate', 'bulletproof_security_options_validate_autoupdate');
register_setting('bulletproof_security_options_wizard_free', 'bulletproof_security_options_wizard_free', 'bulletproof_security_options_validate_wizard_free');
register_setting('bulletproof_security_options_new_feature', 'bulletproof_security_options_new_feature', 'bulletproof_security_options_validate_new_feature');
register_setting('bulletproof_security_options_MScan_status', 'bulletproof_security_options_MScan_status', 'bulletproof_security_options_validate_MScan_status');
register_setting('bulletproof_security_options_mscan_report', 'bulletproof_security_options_mscan_report', 'bulletproof_security_options_validate_mscan_report');
register_setting('bulletproof_security_options_mod_security', 'bulletproof_security_options_mod_security', 'bulletproof_security_options_validate_mod_security');
register_setting('bulletproof_security_options_pop_uninstall', 'bulletproof_security_options_pop_uninstall', 'bulletproof_security_options_validate_pop_uninstall');
register_setting('bulletproof_security_options_customcode_WPA', 'bulletproof_security_options_customcode_WPA', 'bulletproof_security_options_validate_customcode_WPA');
register_setting('bulletproof_security_options_apache_modules', 'bulletproof_security_options_apache_modules', 'bulletproof_security_options_validate_apache_modules');
register_setting('bulletproof_security_options_hidden_plugins', 'bulletproof_security_options_hidden_plugins', 'bulletproof_security_options_validate_hidden_plugins');
register_setting('bulletproof_security_options_mscan_patterns', 'bulletproof_security_options_mscan_patterns', 'bulletproof_security_options_validate_mscan_patterns');
register_setting('bulletproof_security_options_mscan_t_hash_new', 'bulletproof_security_options_mscan_t_hash_new', 'bulletproof_security_options_validate_mscan_t_hash_new');
register_setting('bulletproof_security_options_mscan_nodownload', 'bulletproof_security_options_mscan_nodownload', 'bulletproof_security_options_validate_mscan_nodownload');
register_setting('bulletproof_security_options_mscan_theme_hash', 'bulletproof_security_options_mscan_theme_hash', 'bulletproof_security_options_validate_mscan_theme_hash');
register_setting('bulletproof_security_options_mscan_p_hash_new', 'bulletproof_security_options_mscan_p_hash_new', 'bulletproof_security_options_validate_mscan_p_hash_new');
register_setting('bulletproof_security_options_mscan_plugin_hash', 'bulletproof_security_options_mscan_plugin_hash', 'bulletproof_security_options_validate_mscan_plugin_hash');
register_setting('bulletproof_security_options_sec_log_post_limit', 'bulletproof_security_options_sec_log_post_limit', 'bulletproof_security_options_validate_sec_log_post_limit');
register_setting('bulletproof_security_options_login_security_jtc', 'bulletproof_security_options_login_security_jtc', 'bulletproof_security_options_validate_login_security_jtc');
register_setting('bulletproof_security_options_mscan_hash_status', 'bulletproof_security_options_mscan_hash_status', 'bulletproof_security_options_validate_mscan_hash_status');
register_setting('bulletproof_security_options_mu_wp_autoupdate', 'bulletproof_security_options_mu_wp_autoupdate', 'bulletproof_security_options_validate_mu_wp_autoupdate');
register_setting('bulletproof_security_options_php_memory_limit', 'bulletproof_security_options_php_memory_limit', 'bulletproof_security_options_validate_php_memory_limit');
register_setting('bulletproof_security_options_mscan_zip_upload', 'bulletproof_security_options_mscan_zip_upload', 'bulletproof_security_options_validate_mscan_zip_upload');
register_setting('bulletproof_security_options_wizard_autofix', 'bulletproof_security_options_wizard_autofix', 'bulletproof_security_options_validate_wizard_autofix');
register_setting('bulletproof_security_options_status_display', 'bulletproof_security_options_status_display', 'bulletproof_security_options_validate_status_display');
register_setting('bulletproof_security_options_login_security', 'bulletproof_security_options_login_security', 'bulletproof_security_options_validate_login_security');
register_setting('bulletproof_security_options_htaccess_files', 'bulletproof_security_options_htaccess_files', 'bulletproof_security_options_validate_htaccess_files');
register_setting('bulletproof_security_options_MU_tools_free', 'bulletproof_security_options_MU_tools_free', 'bulletproof_security_options_validate_MU_tools_free');
register_setting('bulletproof_security_options_idle_session', 'bulletproof_security_options_idle_session', 'bulletproof_security_options_validate_idle_session');
register_setting('bulletproof_security_options_htaccess_res', 'bulletproof_security_options_htaccess_res', 'bulletproof_security_options_validate_htaccess_res');
register_setting('bulletproof_security_options_zip_filename', 'bulletproof_security_options_zip_filename', 'bulletproof_security_options_validate_zip_filename');
register_setting('bulletproof_security_options_auth_cookie', 'bulletproof_security_options_auth_cookie', 'bulletproof_security_options_validate_auth_cookie');
register_setting('bulletproof_security_options_maint_mode', 'bulletproof_security_options_maint_mode', 'bulletproof_security_options_validate_maint_mode');
register_setting('bulletproof_security_options_theme_skin', 'bulletproof_security_options_theme_skin', 'bulletproof_security_options_validate_theme_skin');
register_setting('bulletproof_security_options_MScan_log', 'bulletproof_security_options_MScan_log', 'bulletproof_security_options_validate_MScan_log');
register_setting('bulletproof_security_options_scrolltop', 'bulletproof_security_options_scrolltop', 'bulletproof_security_options_validate_scrolltop');
register_setting('bulletproof_security_options_rate_free', 'bulletproof_security_options_rate_free', 'bulletproof_security_options_validate_rate_free');
register_setting('bulletproof_security_options_hpf_cron', 'bulletproof_security_options_hpf_cron', 'bulletproof_security_options_validate_hpf_cron');
register_setting('bulletproof_security_options_spinner', 'bulletproof_security_options_spinner', 'bulletproof_security_options_validate_spinner');
register_setting('bulletproof_security_options_mynotes', 'bulletproof_security_options_mynotes', 'bulletproof_security_options_validate_mynotes');
register_setting('bulletproof_security_options_zip_fix', 'bulletproof_security_options_zip_fix', 'bulletproof_security_options_validate_zip_fix');
register_setting('bulletproof_security_options_vcheck', 'bulletproof_security_options_vcheck', 'bulletproof_security_options_validate_vcheck');
register_setting('bulletproof_security_options_MScan', 'bulletproof_security_options_MScan', 'bulletproof_security_options_validate_MScan');
register_setting('bulletproof_security_options_email', 'bulletproof_security_options_email', 'bulletproof_security_options_validate_email');
register_setting('bulletproof_security_options_GDMW', 'bulletproof_security_options_GDMW', 'bulletproof_security_options_validate_GDMW');
register_setting('bulletproof_security_options_fsp', 'bulletproof_security_options_fsp', 'bulletproof_security_options_validate_fsp');
// Create BPS Backup Folder
if ( ! is_dir( WP_CONTENT_DIR . '/bps-backup' ) ) {
mkdir( WP_CONTENT_DIR . '/bps-backup', 0755, true );
chmod( WP_CONTENT_DIR . '/bps-backup/', 0755 );
}
// Create master backups folder
if ( ! is_dir( WP_CONTENT_DIR . '/bps-backup/master-backups' ) ) {
mkdir( WP_CONTENT_DIR . '/bps-backup/master-backups', 0755, true );
chmod( WP_CONTENT_DIR . '/bps-backup/master-backups/', 0755 );
}
// Create logs folder
if( ! is_dir( WP_CONTENT_DIR . '/bps-backup/logs' ) ) {
mkdir( WP_CONTENT_DIR . '/bps-backup/logs', 0755, true );
chmod( WP_CONTENT_DIR . '/bps-backup/logs/', 0755 );
}
// Create the wp-hashes folder
if ( ! is_dir( WP_CONTENT_DIR . '/bps-backup/wp-hashes' ) ) {
mkdir( WP_CONTENT_DIR . '/bps-backup/wp-hashes', 0755, true );
chmod( WP_CONTENT_DIR . '/bps-backup/wp-hashes/', 0755 );
}
// Create the mscan folder for mscan pattern matching file/code
if ( ! is_dir( WP_CONTENT_DIR . '/bps-backup/mscan' ) ) {
mkdir( WP_CONTENT_DIR . '/bps-backup/mscan', 0755, true );
chmod( WP_CONTENT_DIR . '/bps-backup/mscan/', 0755 );
}
// Copy the blank wp-hashes.php file to the /wp-hashes/ folder
$wp_hashes_file_master = WP_PLUGIN_DIR . '/bulletproof-security/admin/htaccess/wp-hashes.php';
$wp_hashes_file = WP_CONTENT_DIR . '/bps-backup/wp-hashes/wp-hashes.php';
if ( ! file_exists($wp_hashes_file) ) {
copy($wp_hashes_file_master, $wp_hashes_file);
}
if ( ! is_dir( WP_CONTENT_DIR . '/bps-backup/plugin-hashes' ) ) {
mkdir( WP_CONTENT_DIR . '/bps-backup/plugin-hashes', 0755, true );
chmod( WP_CONTENT_DIR . '/bps-backup/plugin-hashes/', 0755 );
}
$plugin_hash_file = WP_CONTENT_DIR . '/bps-backup/plugin-hashes/plugin-hashes.php';
$blank_hash_file = WP_PLUGIN_DIR . '/bulletproof-security/admin/htaccess/wp-hashes.php';
if ( ! file_exists($plugin_hash_file) ) {
copy($blank_hash_file, $plugin_hash_file);
}
if ( ! is_dir( WP_CONTENT_DIR . '/bps-backup/theme-hashes' ) ) {
mkdir( WP_CONTENT_DIR . '/bps-backup/theme-hashes', 0755, true );
chmod( WP_CONTENT_DIR . '/bps-backup/theme-hashes/', 0755 );
}
$theme_hash_file = WP_CONTENT_DIR . '/bps-backup/theme-hashes/theme-hashes.php';
$blank_hash_file = WP_PLUGIN_DIR . '/bulletproof-security/admin/htaccess/wp-hashes.php';
if ( ! file_exists($theme_hash_file) ) {
copy($blank_hash_file, $theme_hash_file);
}
// Create the MScan log file in /logs
$bpsProMScanLog = WP_PLUGIN_DIR . '/bulletproof-security/admin/htaccess/mscan_log.txt';
$bpsProMScanLogARQ = WP_CONTENT_DIR . '/bps-backup/logs/mscan_log.txt';
if ( ! file_exists($bpsProMScanLogARQ) ) {
copy($bpsProMScanLog, $bpsProMScanLogARQ);
}
// Previously the mscan-pattern-match.php file was copied to the /mscan/ folder and then deleted from the /htaccess/ folder
// 4.6: Create new MScan pattern match DB options and then delete the mscan-pattern-match.php file from the /htaccess/ folder
// and the old mscan-pattern-match.php file in the /bps-backup/mscan/ folder.
$mscan_pattern_match_master = WP_PLUGIN_DIR . '/bulletproof-security/admin/htaccess/mscan-pattern-match.php';
$mscan_pattern_match_file = WP_CONTENT_DIR . '/bps-backup/mscan/mscan-pattern-match.php';
if ( file_exists($mscan_pattern_match_master) ) {
require_once WP_PLUGIN_DIR . '/bulletproof-security/admin/htaccess/mscan-pattern-match.php';
$mscan_pattern_match_files = array(
'mscan_pattern_match_files' =>
array(
'js_patterns' => $js_pattern,
'htaccess_patterns' => $htaccess_pattern,
'php_patterns' => $php_pattern,
'image_patterns' => $image_pattern
)
);
$mscan_pattern_match_db = array(
'mscan_pattern_match_db' =>
array(
'search1' => $search1,
'search2' => $search2,
'search3' => $search3,
'search4' => $search4,
'search5' => $search5,
'search6' => $search6,
'search7' => $search7,
'search8' => $search8,
'search9' => $search9,
'eval_match' => $eval_match,
'b64_decode_match' => $base64_decode_match,
'eval_text' => $eval_text,
'b64_decode_text' => $base64_decode_text
)
);
$mscan_pattern_match_options = array(
'mscan_pattern_match_files' => $mscan_pattern_match_files,
'mscan_pattern_match_db' => $mscan_pattern_match_db
);
foreach( $mscan_pattern_match_options as $key => $value ) {
update_option('bulletproof_security_options_mscan_patterns', $mscan_pattern_match_options);
}
unlink($mscan_pattern_match_master);
}
if ( file_exists($mscan_pattern_match_file) ) {
unlink($mscan_pattern_match_file);
}
if ( file_exists($mscan_pattern_match_file) ) {
unlink($mscan_pattern_match_file);
}
// Copy and rename the blank.txt file to /master-backups - used for MScan Stop Scan
$BPSblank = WP_PLUGIN_DIR . '/bulletproof-security/admin/htaccess/blank.txt';
$MScanStop = WP_CONTENT_DIR . '/bps-backup/master-backups/mscan-stop.txt';
if ( ! file_exists($MScanStop) ) {
copy($BPSblank, $MScanStop);
}
// Create backups folder with randomly generated folder name & save the backups folder name to the DB
bpsPro_create_db_backup_folder();
// Create the Security/HTTP error log in /logs
$bpsProLog = WP_PLUGIN_DIR . '/bulletproof-security/admin/htaccess/http_error_log.txt';
$bpsProLogARQ = WP_CONTENT_DIR . '/bps-backup/logs/http_error_log.txt';
if ( ! file_exists($bpsProLogARQ) ) {
copy($bpsProLog, $bpsProLogARQ);
}
// Create the DB Backup log in /logs
$bpsProDBBLog = WP_PLUGIN_DIR . '/bulletproof-security/admin/htaccess/db_backup_log.txt';
$bpsProDBBLogARQ = WP_CONTENT_DIR . '/bps-backup/logs/db_backup_log.txt';
if ( ! file_exists($bpsProDBBLogARQ) ) {
copy($bpsProDBBLog, $bpsProDBBLogARQ);
}
// Create the /mu-plugins/ Folder
if ( ! is_dir( WP_CONTENT_DIR . '/mu-plugins' ) ) {
mkdir( WP_CONTENT_DIR . '/mu-plugins', 0755, true );
chmod( WP_CONTENT_DIR . '/mu-plugins/', 0755 );
}
// Make sure the old bps-plugin-autoupdate.php is deleted first if it exists.
$autoupdate_master_file = WP_PLUGIN_DIR . '/bulletproof-security/admin/htaccess/bps-plugin-autoupdate.php';
$autoupdate_muplugins_file = WP_CONTENT_DIR . '/mu-plugins/bps-plugin-autoupdate.php';
$BPS_MU_tools_file = WP_CONTENT_DIR . '/mu-plugins/bps-pro-mu-tools.php';
// 2.3: Delete the BPS Pro MU Tools file. If someone installs BPS free after Pro was installed the Pro MU Tools file needs to be deleted.
if ( file_exists($BPS_MU_tools_file) ) {
unlink($BPS_MU_tools_file);
}
if ( file_exists($autoupdate_master_file) ) {
unlink($autoupdate_master_file);
}
if ( file_exists($autoupdate_muplugins_file) ) {
unlink($autoupdate_muplugins_file);
}
// Copy the bps-mu-tools.php file to /mu-plugins/.
$bps_mu_tools_master_file = WP_PLUGIN_DIR . '/bulletproof-security/admin/htaccess/bps-mu-tools.php';
$bps_mu_tools_muplugins_file = WP_CONTENT_DIR . '/mu-plugins/bps-mu-tools.php';
$GDMWoptions = get_option('bulletproof_security_options_GDMW');
$bps_gdmw_hosting = ! isset($GDMWoptions['bps_gdmw_hosting']) ? '' : $GDMWoptions['bps_gdmw_hosting'];
if ( $bps_gdmw_hosting == '' || $bps_gdmw_hosting == 'no' ) {
if ( is_dir( WP_CONTENT_DIR . '/mu-plugins' ) && ! file_exists($bps_mu_tools_muplugins_file) && ! file_exists($BPS_MU_tools_file) ) {
copy($bps_mu_tools_master_file, $bps_mu_tools_muplugins_file);
}
}
$bps_autofix_options = 'bulletproof_security_options_wizard_autofix';
$AutoFix_Option_settings = array( 'bps_wizard_autofix' => 'On' );
if ( ! get_option( $bps_autofix_options ) ) {
foreach( $AutoFix_Option_settings as $key => $value ) {
update_option('bulletproof_security_options_wizard_autofix', $AutoFix_Option_settings);
}
}
}
// BPS Menu
function bulletproof_security_admin_menu() {
global $blog_id;
if ( current_user_can('manage_options') ) {
// Network/Multisite display partial BPS menus
if ( is_multisite() && $blog_id != 1 ) {
add_menu_page(__('htaccess File Options', 'bulletproof-security'), __('BPS Security', 'bulletproof-security'), 'manage_options', 'bulletproof-security/admin/login/login.php', '', plugins_url('bulletproof-security/admin/images/bps-icon-small.png'));
add_submenu_page('bulletproof-security/admin/login/login.php', __('Login Security Options', 'bulletproof-security'), __('Login Security', 'bulletproof-security'), 'manage_options', 'bulletproof-security/admin/login/login.php' );
add_submenu_page('bulletproof-security/admin/login/login.php', __('Login Security Options', 'bulletproof-security'), __('JTC-Lite', 'bulletproof-security'), 'manage_options', 'admin.php?page=bulletproof-security/admin/login/login.php#bps-tabs-2' );
// Do not display the Maintenance Mode menu for GDMW hosted sites
$BPS_wpadmin_Options = get_option('bulletproof_security_options_htaccess_res');
$GDMW_options = get_option('bulletproof_security_options_GDMW');
if ( isset($BPS_wpadmin_Options['bps_wpadmin_restriction']) && $BPS_wpadmin_Options['bps_wpadmin_restriction'] != 'disabled' || isset($GDMW_options['bps_gdmw_hosting']) && $GDMW_options['bps_gdmw_hosting'] != 'yes' ) {
add_submenu_page('bulletproof-security/admin/login/login.php', __('Maintenance Mode', 'bulletproof-security'), __('Maintenance Mode', 'bulletproof-security'), 'manage_options', 'bulletproof-security/admin/maintenance/maintenance.php' );
}
// 3.2: Setup Wizard Option: Multisite Hide|Display System Info Page for Subsites
$Mu_Sysinfo_page_options = get_option('bulletproof_security_options_mu_sysinfo');
if ( isset($Mu_Sysinfo_page_options['bps_sysinfo_hide_display']) && $Mu_Sysinfo_page_options['bps_sysinfo_hide_display'] != 'hide' ) {
add_submenu_page('bulletproof-security/admin/login/login.php', __('System Info', 'bulletproof-security'), __('System Info', 'bulletproof-security'), 'manage_options', 'bulletproof-security/admin/system-info/system-info.php' );
}
add_submenu_page('bulletproof-security/admin/login/login.php', __('UI|UX Options', 'bulletproof-security'), __('UI|UX Options', 'bulletproof-security'), 'manage_options', 'bulletproof-security/admin/theme-skin/theme-skin.php' );
} else {
add_menu_page(__('htaccess File Options', 'bulletproof-security'), __('BPS Security', 'bulletproof-security'), 'manage_options', 'bulletproof-security/admin/core/core.php', '', plugins_url('bulletproof-security/admin/images/bps-icon-small.png'));
add_submenu_page('bulletproof-security/admin/core/core.php', __('htaccess File Options', 'bulletproof-security'), __('htaccess File Options', 'bulletproof-security'), 'manage_options', 'bulletproof-security/admin/core/core.php' );
add_submenu_page('bulletproof-security/admin/core/core.php', __('MScan Malware Scanner', 'bulletproof-security'), __('MScan', 'bulletproof-security'), 'manage_options', 'bulletproof-security/admin/mscan/mscan.php' );
add_submenu_page('bulletproof-security/admin/core/core.php', __('Login Security Options', 'bulletproof-security'), __('Login Security', 'bulletproof-security'), 'manage_options', 'bulletproof-security/admin/login/login.php' );
add_submenu_page('bulletproof-security/admin/core/core.php', __('Login Security Options', 'bulletproof-security'), __('JTC-Lite', 'bulletproof-security'), 'manage_options', 'admin.php?page=bulletproof-security/admin/login/login.php#bps-tabs-2' );
add_submenu_page('bulletproof-security/admin/core/core.php', __('Login Security Options', 'bulletproof-security'), __('Idle Session Logout<br>Cookie Expiration', 'bulletproof-security'), 'manage_options', 'admin.php?page=bulletproof-security/admin/login/login.php#bps-tabs-3' );
add_submenu_page('bulletproof-security/admin/core/core.php', __('DB Backup & Security', 'bulletproof-security'), __('DB Backup', 'bulletproof-security'), 'manage_options', 'bulletproof-security/admin/db-backup-security/db-backup-security.php' );
add_submenu_page('bulletproof-security/admin/core/core.php', __('Security Log', 'bulletproof-security'), __('Security Log', 'bulletproof-security'), 'manage_options', 'bulletproof-security/admin/security-log/security-log.php' );
// Do not display the Maintenance Mode menu for GDMW hosted sites
$BPS_wpadmin_Options = get_option('bulletproof_security_options_htaccess_res');
$GDMW_options = get_option('bulletproof_security_options_GDMW');
if ( isset( $BPS_wpadmin_Options['bps_wpadmin_restriction'] ) && $BPS_wpadmin_Options['bps_wpadmin_restriction'] != 'disabled' || isset( $GDMW_options['bps_gdmw_hosting'] ) && $GDMW_options['bps_gdmw_hosting'] != 'yes' ) {
add_submenu_page('bulletproof-security/admin/core/core.php', __('Maintenance Mode', 'bulletproof-security'), __('Maintenance Mode', 'bulletproof-security'), 'manage_options', 'bulletproof-security/admin/maintenance/maintenance.php' );
}
add_submenu_page('bulletproof-security/admin/core/core.php', __('System Info', 'bulletproof-security'), __('System Info', 'bulletproof-security'), 'manage_options', 'bulletproof-security/admin/system-info/system-info.php' );
add_submenu_page('bulletproof-security/admin/core/core.php', __('Alerts|Logs|Email Options', 'bulletproof-security'), __('Alerts|Logs|Email Options', 'bulletproof-security'), 'manage_options', 'bulletproof-security/admin/email-log-settings/email-log-settings.php' );
add_submenu_page('bulletproof-security/admin/core/core.php', __('UI|UX Options', 'bulletproof-security'), __('UI|UX Options', 'bulletproof-security'), 'manage_options', 'bulletproof-security/admin/theme-skin/theme-skin.php' );
add_submenu_page('bulletproof-security/admin/core/core.php', __('Setup Wizard', 'bulletproof-security'), __('Setup Wizard', 'bulletproof-security'), 'manage_options', 'bulletproof-security/admin/wizard/wizard.php' );
// MScan Scan Status Page: hidden submenu. Necessary to avoid the "you don't have permission to view this page" error message.
add_submenu_page( '', __('MScan Scan Status', 'bulletproof-security'), __('MScan Scan Status', 'bulletproof-security'), 'manage_options', 'bulletproof-security/admin/mscan/mscan-scan-status.php' );
// Do not display a submenu|link: jQuery UI Dialog Pop up Form Uninstaller Options for BPS free
add_submenu_page( '', __('BPS Plugin Uninstall Options', 'bulletproof-security'), __('BPS Plugin Uninstall Options', 'bulletproof-security'), 'manage_options', 'bulletproof-security/admin/includes/uninstall.php' );
}
}
}
// Network|Multisite Network Admin Dashboard Menu for jQuery UI Dialog Pop up Form Uninstaller Options
function bulletproof_security_network_admin_menu() {
add_submenu_page( null, __('BPS Plugin Uninstall Options', 'bulletproof-security'), __('BPS Plugin Uninstall Options', 'bulletproof-security'), 'manage_options', 'bulletproof-security/admin/includes/uninstall.php' );
}
add_filter( 'admin_body_class', 'mscan_collapse_wp_nav_menu', 10, 1 );
// 5.8: Collapse the WP Nav menu on the mscan-scan-status.php page only.
function mscan_collapse_wp_nav_menu($classes) {
if ( is_admin() && preg_match( '/page=bulletproof-security.*mscan-scan-status.php/', esc_html($_SERVER['REQUEST_URI']) ) ) {
$classes .= ' folded';
return $classes;
} else {
return $classes;
}
}
$bpsPro_SLF_options = get_option('bulletproof_security_options_SLF');
if ( isset($bpsPro_SLF_options['bps_slf_filter']) && $bpsPro_SLF_options['bps_slf_filter'] == 'On' ) {
if ( is_admin() && preg_match( '/page=bulletproof-security/', esc_html($_SERVER['REQUEST_URI']), $matches ) ) {
add_filter( 'style_loader_tag', 'bpsPro_style_loader_filter' );
add_filter( 'script_loader_tag', 'bpsPro_script_loader_filter' );
}
}
// Prevents other plugin and theme Styles from loading in BPS plugin pages
// Notes: $tag is a string and not an array. This is a quick and dirty way to strip out all rogue styles/scripts + optimum performance.
// .53.8: Added Debug option
// 3.5: Modified SLF filter code.
// 4.2: Whitelist the Query Monitor plugin js and CSS scripts in BPS plugin pages. script & style name: query-monitor.
function bpsPro_style_loader_filter($tag) {
if ( preg_match( '/page=bulletproof-security/', esc_html($_SERVER['REQUEST_URI']), $matches) ) {
$topDiv = '<div id="message" class="updated" style="background-color:#dfecf2;border:1px solid #999;-moz-border-radius-topleft:3px;-webkit-border-top-left-radius:3px;-khtml-border-top-left-radius:3px;border-top-left-radius:3px;-moz-border-radius-topright:3px;-webkit-border-top-right-radius:3px;-khtml-border-top-right-radius:3px;border-top-right-radius:3px;-webkit-box-shadow: 3px 3px 5px -1px rgba(153,153,153,0.7);-moz-box-shadow: 3px 3px 5px -1px rgba(153,153,153,0.7);box-shadow: 3px 3px 5px -1px rgba(153,153,153,0.7);"><p>';
$Debug_options = get_option('bulletproof_security_options_debug');
$matches = '';
if ( ! strpos( $tag, 'bulletproof-security' ) && ! strpos( $tag, 'wp-admin' ) && ! strpos( $tag, 'wp-includes' ) && ! strpos( $tag, 'query-monitor' ) )
unset($tag);
$tag = ! isset($tag) ? '' : $tag;
if ( $Debug_options['bps_debug'] == 'On' ) {
if ( preg_match( '/\/(plugins|themes)\/.*\.css/', $tag, $matches ) ) {
echo $topDiv;
echo '<font color="blue"><strong>'.__('BPS UI|UX Debug: SLF: CSS Script Loaded', 'bulletproof-security').'</strong></font><br>';
print_r($matches[0]);
echo '</p></div>';
}
}
return $tag;
}
}
// Prevents other plugin and theme Scripts from loading in BPS plugin pages
// Notes: $tag is a string and not an array. This is a quick and dirty way to strip out all rogue styles/scripts + optimum performance.
// .53.8: Added Debug option
// 3.5: Modified SLF filter code.
// 4.2: Whitelist the Query Monitor plugin js and CSS scripts in BPS plugin pages. script & style name: query-monitor.
function bpsPro_script_loader_filter($tag) {
if ( preg_match( '/page=bulletproof-security/', esc_html($_SERVER['REQUEST_URI']), $matches) ) {
$topDiv = '<div id="message" class="updated" style="background-color:#dfecf2;border:1px solid #999;-moz-border-radius-topleft:3px;-webkit-border-top-left-radius:3px;-khtml-border-top-left-radius:3px;border-top-left-radius:3px;-moz-border-radius-topright:3px;-webkit-border-top-right-radius:3px;-khtml-border-top-right-radius:3px;border-top-right-radius:3px;-webkit-box-shadow: 3px 3px 5px -1px rgba(153,153,153,0.7);-moz-box-shadow: 3px 3px 5px -1px rgba(153,153,153,0.7);box-shadow: 3px 3px 5px -1px rgba(153,153,153,0.7);"><p>';
$Debug_options = get_option('bulletproof_security_options_debug');
$matches = '';
if ( ! strpos( $tag, 'bulletproof-security' ) && ! strpos( $tag, 'wp-admin' ) && ! strpos( $tag, 'wp-includes' ) && ! strpos( $tag, 'query-monitor' ) )
unset($tag);
$tag = ! isset($tag) ? '' : $tag;
if ( $Debug_options['bps_debug'] == 'On' ) {
if ( preg_match( '/\/(plugins|themes)\/.*\.js/', $tag, $matches ) ) {
echo $topDiv;
echo '<font color="blue"><strong>'.__('BPS UI|UX Debug: SLF: js Script Loaded', 'bulletproof-security').'</strong></font><br>';
print_r($matches[0]);
echo '</p></div>';
}
}
return $tag;
}
}
add_action( 'admin_enqueue_scripts', 'bpsPro_register_enqueue_scripts_styles' );
// Register scripts and styles, Enqueue scripts and styles, Dequeue any plugin or theme scripts and styles loading in BPS plugin pages
// .53.8: BugFix: script handles & dependencies code was fubar. Added: ver Query Strings * load scripts in footer * Debug option
// 2.3: Remove all version compare conditions for >= 3.8. Minimum WP version required is now WP 3.8.
// 2.4: register and enqueue new BPS MScan AJAX script
// 3.6: Encryption/Decryption added to evade/bypass the Mod Security CRS ruleset, which breaks numerous Forms throughout BPS.
// 4.2: Whitelist the Query Monitor plugin js and CSS scripts in BPS plugin pages. script & style name: query-monitor.
function bpsPro_register_enqueue_scripts_styles() {
global $wp_scripts, $wp_styles, $bulletproof_security, $wp_version, $bps_version;
// Register and Load the BPS MScan AJAX script sitewide
wp_register_script( 'bps-mscan-ajax', plugins_url( '/bulletproof-security/admin/js/bps-mscan-ajax.js' ), array( 'jquery' ), $bps_version, true );
wp_enqueue_script( 'bps-mscan-ajax' );
wp_localize_script( 'bps-mscan-ajax', 'bps_mscan_ajax', array( 'ajaxurl' => admin_url( 'admin-ajax.php' ) ) );
// Register & Load BPS scripts and styles on BPS plugin pages ONLY
if ( preg_match( '/page=bulletproof-security/', esc_html($_SERVER['REQUEST_URI']), $matches ) ) {
$UIoptions = get_option('bulletproof_security_options_theme_skin');
$Debug_options = get_option('bulletproof_security_options_debug');
// Register BPS Scripts
wp_register_script('bps-tabs', plugins_url( '/bulletproof-security/admin/js/bps-ui-tabs.js' ), array( 'jquery', 'jquery-ui-tabs' ), $bps_version, true );
wp_register_script('bps-dialog', plugins_url( '/bulletproof-security/admin/js/bps-ui-dialog.js' ), array( 'jquery', 'jquery-ui-dialog', 'jquery-effects-core', 'jquery-effects-blind', 'jquery-effects-explode' ), $bps_version, true );
wp_register_script('bps-accordion', plugins_url( '/bulletproof-security/admin/js/bps-ui-accordion.js' ), array( 'jquery', 'jquery-ui-accordion' ), $bps_version, true );
## 3.6: Encryption js scripts added
wp_register_script('bps-encryption', plugins_url( '/bulletproof-security/admin/js/bps-encryption.js' ), array(), $bps_version, true );
wp_register_script('bps-crypto-js', plugins_url( '/bulletproof-security/admin/js/crypto-js/crypto-js.js' ), array(), $bps_version, true );
// Register BPS Styles - The grey and black Theme Skins have been retired.
switch ( isset($UIoptions['bps_ui_theme_skin']) && $UIoptions['bps_ui_theme_skin'] ) {
case 'blue':
wp_register_style('bps-css-38', plugins_url('/bulletproof-security/admin/css/bps-blue-ui-theme.css'), array(), $bps_version, 'all' );
break;
case 'grey':
wp_register_style('bps-css-38', plugins_url('/bulletproof-security/admin/css/bps-blue-ui-theme.css'), array(), $bps_version, 'all' );
break;
case 'black':
wp_register_style('bps-css-38', plugins_url('/bulletproof-security/admin/css/bps-blue-ui-theme.css'), array(), $bps_version, 'all' );
break;
default:
wp_register_style('bps-css-38', plugins_url('/bulletproof-security/admin/css/bps-blue-ui-theme.css'), array(), $bps_version, 'all' );
}
// Enqueue BPS scripts & script dependencies
wp_enqueue_script( 'bps-tabs' );
wp_enqueue_script( 'bps-dialog' );
wp_enqueue_script( 'bps-accordion' );
wp_enqueue_script( 'bps-encryption' );
wp_enqueue_script( 'bps-crypto-js' );
// Enqueue BPS stylesheets
switch ( isset($UIoptions['bps_ui_theme_skin']) && $UIoptions['bps_ui_theme_skin'] ) {
case 'blue':
wp_enqueue_style('bps-css-38' );
break;
case 'grey':
wp_enqueue_style('bps-css-38' );
break;
case 'black':
wp_enqueue_style('bps-css-38' );
break;
default:
wp_enqueue_style('bps-css-38' );
}
// Dequeue any other plugin or theme scripts that should not be loading on BPS plugin pages
$script_handles = array( 'bps-arq-ajax', 'bps-mscan-ajax', 'bps-tabs', 'bps-dialog', 'bps-accordion', 'bps-encryption', 'bps-crypto-js', 'admin-bar', 'jquery', 'jquery-ui-core', 'jquery-ui-tabs', 'jquery-ui-dialog', 'jquery-ui-widget', 'jquery-ui-mouse', 'jquery-ui-resizable', 'jquery-ui-draggable', 'jquery-ui-button', 'jquery-ui-position', 'jquery-ui-accordion', 'jquery-effects-core', 'jquery-effects-blind', 'jquery-effects-explode', 'common', 'utils', 'svg-painter', 'wp-auth-check', 'heartbeat', 'debug-bar', 'wp-polyfill', 'wp-i18n', 'hoverintent-js', 'wp-hooks', 'query-monitor' );
$style_handles = array( 'bps-css', 'bps-css-38', 'admin-bar', 'colors', 'ie', 'wp-auth-check', 'debug-bar', 'query-monitor' );
if ( isset($Debug_options['bps_debug']) && $Debug_options['bps_debug'] == 'On' ) {
echo '<div id="message" class="updated" style="background-color:#dfecf2;border:1px solid #999;-moz-border-radius-topleft:3px;-webkit-border-top-left-radius:3px;-khtml-border-top-left-radius:3px;border-top-left-radius:3px;-moz-border-radius-topright:3px;-webkit-border-top-right-radius:3px;-khtml-border-top-right-radius:3px;border-top-right-radius:3px;-webkit-box-shadow: 3px 3px 5px -1px rgba(153,153,153,0.7);-moz-box-shadow: 3px 3px 5px -1px rgba(153,153,153,0.7);box-shadow: 3px 3px 5px -1px rgba(153,153,153,0.7);"><p>';
echo '<font color="blue"><strong>'.__('BPS UI|UX Debug: Scripts|Styles Dequeued', 'bulletproof-security').'</strong></font><br>';
}
$NSCD = 0;
foreach( $wp_scripts->queue as $handle ) {
if ( ! in_array( $handle, $script_handles ) ) {
wp_dequeue_script( $handle );
if ( isset($Debug_options['bps_debug']) && $Debug_options['bps_debug'] == 'On' ) {
$NSCD = 1;
echo '<strong>'.__('Script Dequeued: ', 'bulletproof-security') . '</strong>' . $handle . '<br>';
}
}
}
if ( isset($Debug_options['bps_debug']) && $Debug_options['bps_debug'] == 'On' && 0 == $NSCD ) {
echo '<strong>'.__('No additional plugin or theme Scripts were found that needed to be Dequeued.', 'bulletproof-security') . '</strong><br>';
}
$NSTD = 0;
foreach( $wp_styles->queue as $handle ) {
if ( ! in_array( $handle, $style_handles ) ) {
wp_dequeue_style( $handle );
if ( isset($Debug_options['bps_debug']) && $Debug_options['bps_debug'] == 'On' ) {
$NSTD = 1;
echo '<strong>'.__('Style Dequeued: ', 'bulletproof-security') . '</strong>' . $handle . '<br>';
}
}
}
if ( isset($Debug_options['bps_debug']) && $Debug_options['bps_debug'] == 'On' && 0 == $NSTD ) {
echo '<strong>'.__('No additional plugin or theme Styles were found that needed to be Dequeued.', 'bulletproof-security') . '</strong><br>';
}
if ( isset($Debug_options['bps_debug']) && $Debug_options['bps_debug'] == 'On' ) {
echo '</p></div>';
}
}
}
add_action( 'wp_before_admin_bar_render', 'bpsPro_remove_non_wp_nodes_from_toolbar' );
// Removes any/all additional WP Toolbar nodes / menu items added by other plugins and themes
// in BPS plugin pages ONLY. Does NOT remove any of the default WP Toolbar nodes.
// Note: This file is loaded in the WP Dashboard. This function is ONLY processed in BPS plugin pages.
// .53.8: Added Debug option
function bpsPro_remove_non_wp_nodes_from_toolbar() {
global $wp_admin_bar;
// 5.8: Remove all nodes from the WP toolbar on the mscan scan status page only
if ( is_admin() && preg_match( '/page=bulletproof-security.*mscan-scan-status.php/', esc_html($_SERVER['REQUEST_URI']) ) ) {
$all_toolbar_nodes = $wp_admin_bar->get_nodes();
foreach ( $all_toolbar_nodes as $node ) {
$wp_admin_bar->remove_node( $node->id );
}
}
if ( preg_match( '/page=bulletproof-security/', esc_html($_SERVER['REQUEST_URI']), $matches ) ) {
$UIWPToptions = get_option('bulletproof_security_options_wpt_nodes');
if ( isset($UIWPToptions['bps_wpt_nodes']) && $UIWPToptions['bps_wpt_nodes'] != 'allnodes' ) {
$all_toolbar_nodes = $wp_admin_bar->get_nodes();
$Debug_options = get_option('bulletproof_security_options_debug');
$WPTB = 0;
$topDiv = '<div id="message" class="updated" style="background-color:#dfecf2;border:1px solid #999;-moz-border-radius-topleft:3px;-webkit-border-top-left-radius:3px;-khtml-border-top-left-radius:3px;border-top-left-radius:3px;-moz-border-radius-topright:3px;-webkit-border-top-right-radius:3px;-khtml-border-top-right-radius:3px;border-top-right-radius:3px;-webkit-box-shadow: 3px 3px 5px -1px rgba(153,153,153,0.7);-moz-box-shadow: 3px 3px 5px -1px rgba(153,153,153,0.7);box-shadow: 3px 3px 5px -1px rgba(153,153,153,0.7);"><p>';
if ( $all_toolbar_nodes ) {
if ( ! is_multisite() ) {
$wp_default_nodes = array( 'user-actions', 'user-info', 'edit-profile', 'logout', 'menu-toggle', 'my-account', 'wp-logo', 'about', 'wporg', 'documentation', 'support-forums', 'feedback', 'site-name', 'view-site', 'updates', 'comments', 'new-content', 'new-post', 'new-media', 'new-page', 'new-user', 'top-secondary', 'wp-logo-external' );
if ( isset($Debug_options['bps_debug']) && $Debug_options['bps_debug'] == 'On' ) {
echo $topDiv;
echo '<font color="blue"><strong>'.__('BPS UI|UX Debug: WP Toolbar nodes|menu items Removed', 'bulletproof-security').'</strong></font><br>';
}
foreach ( $all_toolbar_nodes as $node ) {
// For Testing: echo '<br>'; print_r($node->id);
if ( ! in_array( $node->id, $wp_default_nodes ) ) {
$wp_admin_bar->remove_node( $node->id );
if ( isset($Debug_options['bps_debug']) && $Debug_options['bps_debug'] == 'On' ) {
$WPTB = 1;
echo '<strong>'.__('WP Toolbar node|menu item Removed: ', 'bulletproof-security') . '</strong>';
print_r($node->id);
echo '<br>';
}
}
}
if ( isset($Debug_options['bps_debug']) && $Debug_options['bps_debug'] == 'On' && 0 == $WPTB ) {
echo '<strong>'.__('No WP Toolbar nodes|menu items were Removed in BPS plugin pages', 'bulletproof-security') . '</strong><br>';
}
if ( isset($Debug_options['bps_debug']) && $Debug_options['bps_debug'] == 'On' ) {
echo '</p></div>';
}
} else {
$wp_default_nodes = array( 'user-actions', 'user-info', 'edit-profile', 'logout', 'menu-toggle', 'my-account', 'wp-logo', 'about', 'wporg', 'documentation', 'support-forums', 'feedback', 'site-name', 'view-site', 'updates', 'comments', 'new-content', 'new-post', 'new-media', 'new-page', 'new-user', 'top-secondary', 'wp-logo-external', 'my-sites', 'my-sites-super-admin', 'network-admin', 'network-admin-d', 'network-admin-s', 'network-admin-u', 'network-admin-t', 'network-admin-p', 'my-sites-list', 'edit-site' );
if ( isset($Debug_options['bps_debug']) && $Debug_options['bps_debug'] == 'On' ) {
echo $topDiv;
echo '<font color="blue"><strong>'.__('BPS UI|UX Debug: WP Toolbar nodes|menu items Removed', 'bulletproof-security').'</strong></font><br>';
}
foreach ( $all_toolbar_nodes as $node ) {
// For Testing: echo '<br>'; print_r($node->id);
if ( ! in_array( $node->id, $wp_default_nodes ) && ! preg_match( '/blog-[0-9]/', $node->id, $matches ) ) {
$wp_admin_bar->remove_node( $node->id );
if ( isset($Debug_options['bps_debug']) && $Debug_options['bps_debug'] == 'On' ) {
$WPTB = 1;
echo '<strong>'.__('WP Toolbar node|menu item Removed: ', 'bulletproof-security') . '</strong>';
print_r($node->id);
echo '<br>';
}
}
}
if ( isset($Debug_options['bps_debug']) && $Debug_options['bps_debug'] == 'On' && 0 == $WPTB ) {
echo '<strong>'.__('No WP Toolbar nodes|menu items were Removed in BPS plugin pages', 'bulletproof-security') . '</strong><br>';
}
if ( isset($Debug_options['bps_debug']) && $Debug_options['bps_debug'] == 'On' ) {
echo '</p></div>';
}
}
}
}
}
}
// Create Backup folder with randomly generated folder name and update DB with folder name
function bpsPro_create_db_backup_folder() {
$options = get_option('bulletproof_security_options_db_backup');
if ( isset($options['bps_db_backup_folder']) && $options['bps_db_backup_folder'] != '' && is_dir( $options['bps_db_backup_folder'] ) || isset($_POST['Submit-DBB-Reset']) && $_POST['Submit-DBB-Reset'] == true ) {
return;
}
$source = WP_CONTENT_DIR . '/bps-backup';
if ( is_dir($source) ) {
$iterator = new DirectoryIterator($source);
foreach ( $iterator as $folder ) {
if ( $folder->isDir() && ! $folder->isDot() && preg_match( '/backups_[a-zA-Z0-9]/', $folder ) ) {
return;
}
}
$str = '1234567890abcdefghijklmnopqrstuvxyz';
$folder_obs = substr( str_shuffle($str), 0, 15 );
mkdir( WP_CONTENT_DIR . '/bps-backup/backups_' . $folder_obs, 0755, true );
chmod( WP_CONTENT_DIR . '/bps-backup/backups_' . $folder_obs . '/', 0755 );
$dbb_options = 'bulletproof_security_options_db_backup';
$bps_db_backup_folder = addslashes( WP_CONTENT_DIR . '/bps-backup/backups_' . $folder_obs );
$bps_db_backup_download_link = ( WP_CONTENT_DIR . '/bps-backup/backups_' . $folder_obs );
$bps_db_backup_download_link = content_url( '/bps-backup/backups_' ) . $folder_obs . '/';
$DBB_Options = array(
'bps_db_backup' => 'On',
'bps_db_backup_description' => '',
'bps_db_backup_folder' => $bps_db_backup_folder,
'bps_db_backup_download_link' => $bps_db_backup_download_link,
'bps_db_backup_job_type' => '',
'bps_db_backup_frequency' => '',
'bps_db_backup_start_time_hour' => '',
'bps_db_backup_start_time_weekday' => '',
'bps_db_backup_start_time_month_date' => '',
'bps_db_backup_email_zip' => '',
'bps_db_backup_delete' => '',
'bps_db_backup_status_display' => 'No DB Backups'
);
if ( ! get_option( $dbb_options ) ) {
foreach( $DBB_Options as $key => $value ) {
update_option('bulletproof_security_options_db_backup', $DBB_Options);
}
} else {
foreach( $DBB_Options as $key => $value ) {
update_option('bulletproof_security_options_db_backup', $DBB_Options);
}
}
}
}
function bulletproof_security_install() {
global $bulletproof_security, $bps_version;
$previous_install = get_option('bulletproof_security_options');
if ( $previous_install ) {
if ( version_compare($previous_install['version'], $bps_version, '<') )
delete_transient( 'bulletproof-security_info' );
}
}
// On BPS Plugin Deactivation: remove/unschedule all scheduled Cron jobs: 4 total
function bulletproof_security_deactivation() {
wp_clear_scheduled_hook('bpsPro_DBB_check');
wp_clear_scheduled_hook('bpsPro_email_log_files');
wp_clear_scheduled_hook('bpsPro_HPF_check');
wp_clear_scheduled_hook('bpsPro_MScan_check');
wp_clear_scheduled_hook('bpsPro_plugin_updates_cron');
wp_clear_scheduled_hook('bpsPro_theme_updates_cron');
}
// BPS Pro Uninstall Multisite: Get domain
function bpsPro_network_domain_check_uninstall() {
global $wpdb;
if ( $wpdb->get_var( "SHOW TABLES LIKE '$wpdb->site'" ) )
return $wpdb->get_var( "SELECT domain FROM $wpdb->site ORDER BY id ASC LIMIT 1" );
return false;
}
// BPS Pro Uninstall Multisite: Get basedomain
function bpsPro_get_clean_basedomain_uninstall() {
if ( $existing_domain = bpsPro_network_domain_check_uninstall() )
return $existing_domain;
$domain = preg_replace( '|https?://|', '', get_option( 'siteurl' ) );
if ( $slash = strpos( $domain, '/' ) )
$domain = substr( $domain, 0, $slash );
return $domain;
}
// BPS Pro Uninstall Multisite: Get root folder
function bps_wp_get_root_folder_uninstall() {
if ( is_admin() && current_user_can('manage_options') ) {
$site_root = parse_url(get_option('siteurl'));
if ( isset( $site_root['path'] ) )
$site_root = trailingslashit($site_root['path']);
else
$site_root = '/';
return $site_root;
}
}
// BPS Pro Uninstall Multisite: Create the default WP htaccess file for Multisite
function bpsPro_default_wp_htaccess_file_multisite() {
global $bpspro_version;
if ( is_multisite() ) {
$bps_get_wp_root_default = bps_wp_get_root_folder_uninstall();
$hostname = bpsPro_get_clean_basedomain_uninstall();
$slashed_home = trailingslashit( get_option( 'home' ) );
$base = parse_url( $slashed_home, PHP_URL_PATH );
$document_root_fix = str_replace( '\\', '/', realpath( $_SERVER['DOCUMENT_ROOT'] ) );
$abspath_fix = str_replace( '\\', '/', ABSPATH );
$home_path = 0 === strpos( $abspath_fix, $document_root_fix ) ? $document_root_fix . $base : get_home_path();
$wp_siteurl_subdir = preg_replace( '#^' . preg_quote( $home_path, '#' ) . '#', '', $abspath_fix );
$rewrite_base = ! empty( $wp_siteurl_subdir ) ? ltrim( trailingslashit( $wp_siteurl_subdir ), '/' ) : '';
$subdomain_install = is_subdomain_install();
$subdir_match = $subdomain_install ? '' : '([_0-9a-zA-Z-]+/)?';
$subdir_replacement_01 = $subdomain_install ? '' : '$1';
$subdir_replacement_12 = $subdomain_install ? '$1' : '$2';
$ms_files_rewriting = '';
## IMPORTANT!!! Do not indent this code below. Whitespace will be created in the htaccess files.
## At a later time, strip out any whitespace.
if ( is_multisite() && get_site_option( 'ms_files_rewriting' ) ) {
$ms_files_rewriting = "\n# uploaded files\nRewriteRule ^";
$ms_files_rewriting .= $subdir_match . "files/(.+) {$rewrite_base}wp-includes/ms-files.php?file={$subdir_replacement_12} [L]" . "\n";
}
$bps_default_content_top = "# BEGIN WordPress
# The directives (lines) between \"BEGIN WordPress\" and \"END WordPress\" are
# dynamically generated, and should only be modified via WordPress filters.
# Any changes to the directives between these markers will be overwritten.\n";
$bpsMUSDirTop = "<IfModule mod_rewrite.c>
RewriteEngine On
RewriteRule .* - [E=HTTP_AUTHORIZATION:%{HTTP:Authorization}]
RewriteBase $bps_get_wp_root_default
RewriteRule ^index\.php$ - [L]\n
{$ms_files_rewriting}
# add a trailing slash to /wp-admin
RewriteRule ^{$subdir_match}wp-admin$ {$subdir_replacement_01}wp-admin/ [R=301,L]\n\n";
$bpsMUSDirBottom = "RewriteCond %{REQUEST_FILENAME} -f [OR]
RewriteCond %{REQUEST_FILENAME} -d
RewriteRule ^ - [L]
RewriteRule ^{$subdir_match}(wp-(content|admin|includes).*) {$rewrite_base}{$subdir_replacement_12} [L]
RewriteRule ^{$subdir_match}(.*\.php)$ {$rewrite_base}$subdir_replacement_12 [L]
RewriteRule . index.php [L]
</IfModule>\n
# END WordPress\n";
$bps_auto_write_default_file = WP_PLUGIN_DIR . '/bulletproof-security/admin/htaccess/default.htaccess';
$bps_root_htaccess_file = ABSPATH . '.htaccess';
if ( file_exists( $bps_auto_write_default_file ) ) {
copy($bps_auto_write_default_file, $bps_root_htaccess_file);
$stringReplace = file_get_contents($bps_root_htaccess_file);
$stringReplace = $bps_default_content_top.$bpsMUSDirTop.$bpsMUSDirBottom;
if ( file_put_contents( $bps_root_htaccess_file, $stringReplace ) ) {
}
}
}
}
// Delete the /bps-backup/ files and folder
// Note: SKIP_DOTS or isDot is unnecessary for this specific usage
function bpsPro_pop_uninstall_bps_backup_folder($source) {
if ( ! is_array( spl_classes() ) ) {
exit();
}
$source = WP_CONTENT_DIR . DIRECTORY_SEPARATOR . 'bps-backup';
if ( is_dir($source) ) {
$iterator = new RecursiveIteratorIterator(new RecursiveDirectoryIterator($source), RecursiveIteratorIterator::CHILD_FIRST);
foreach ( $iterator as $file ) {
if ( $file->isDir() ) {
rmdir( $file->getRealPath() );
} else {
if ( $file->isFile() ) {
unlink( $file->getRealPath() );
}
}
}
rmdir($source);
}
}
// Uninstallation: Conditional Uninstall based on bps_pop_uninstall value: 2 == Complete BPS Plugin Uninstall or 1 == BPS Pro Upgrade Uninstall
function bulletproof_security_uninstall() {
$POPoptions = get_option('bulletproof_security_options_pop_uninstall');
require_once ABSPATH . 'wp-admin/includes/plugin.php';
if ( $POPoptions['bps_pop_uninstall'] == 2 ) {
global $wpdb, $current_user;
bpsPro_pop_uninstall_bps_backup_folder($source);
$user_id = $current_user->ID;
$Stable_name = $wpdb->prefix . "bpspro_seclog_ignore";
$Ltable_name = $wpdb->prefix . "bpspro_login_security";
$DBBtable_name = $wpdb->prefix . "bpspro_db_backup";
$MStable_name = $wpdb->prefix . "bpspro_mscan";
$RootHtaccess = ABSPATH . '.htaccess';
$RootHtaccessBackup = WP_CONTENT_DIR . '/bps-backup/master-backups/root.htaccess';
$wpadminHtaccess = ABSPATH . 'wp-admin/.htaccess';
$wpadminHtaccessBackup = WP_CONTENT_DIR . '/bps-backup/master-backups/wpadmin.htaccess';
if ( file_exists($RootHtaccess) ) {
copy($RootHtaccess, $RootHtaccessBackup);
}
if ( file_exists($wpadminHtaccess) ) {
copy($wpadminHtaccess, $wpadminHtaccessBackup);
}
delete_transient( 'bulletproof-security_info' );
delete_option('bulletproof_security_options');
delete_option('bulletproof_security_options_customcode');
delete_option('bulletproof_security_options_customcode_WPA');
delete_option('bulletproof_security_options_maint');
delete_option('bulletproof_security_options_maint_mode');
delete_option('bulletproof_security_options_mynotes');
delete_option('bulletproof_security_options_email');
delete_option('bulletproof_security_options_autolock');
delete_option('bulletproof_security_options_login_security');
delete_option('bulletproof_security_options_theme_skin');
delete_option('bulletproof_security_options_db_backup');
delete_option('bulletproof_security_options_DBB_log');
delete_option('bulletproof_security_options_htaccess_res');
delete_option('bulletproof_security_options_net_correction');
delete_option('bulletproof_security_options_spinner');
delete_option('bulletproof_security_options_wpt_nodes');
delete_option('bulletproof_security_options_status_display');
delete_option('bulletproof_security_options_pop_uninstall');
delete_option('bulletproof_security_options_GDMW');
delete_option('bulletproof_security_options_wizard_free');
delete_option('bulletproof_security_options_idle_session');
delete_option('bulletproof_security_options_auth_cookie');
delete_option('bulletproof_security_options_SLF');
delete_option('bulletproof_security_options_scrolltop');
delete_option('bulletproof_security_options_apache_modules');
delete_option('bulletproof_security_options_sec_log_post_limit');
delete_option('bulletproof_security_options_debug');
delete_option('bulletproof_security_options_hidden_plugins');
delete_option('bulletproof_security_options_hpf_cron');
delete_option('bulletproof_security_options_zip_fix');
delete_option('bulletproof_security_options_autoupdate');
delete_option('bulletproof_security_options_setup_wizard_woo');
delete_option('bulletproof_security_options_MU_tools_free');
delete_option('bulletproof_security_options_htaccess_files');
delete_option('bulletproof_security_options_wizard_autofix');
delete_option('bulletproof_security_options_MScan_log');
delete_option('bulletproof_security_options_MScan_status');
delete_option('bulletproof_security_options_MScan');
delete_option('bulletproof_security_options_login_security_jtc');
delete_option('bulletproof_security_options_rate_free');
delete_option('bulletproof_security_options_mod_security');
delete_option('bulletproof_security_options_vcheck');
delete_option('bulletproof_security_options_gdpr');
delete_option('bulletproof_security_options_mu_sysinfo');
delete_option('bulletproof_security_options_mu_wp_autoupdate');
delete_option('bulletproof_security_options_MU_tools');
delete_option('bulletproof_security_options_php_memory_limit');
delete_option('bulletproof_security_options_fsp');
delete_option('bulletproof_security_options_mscan_patterns');
delete_option('bulletproof_security_options_mscan_plugin_hash');
delete_option('bulletproof_security_options_mscan_p_hash_new');
delete_option('bulletproof_security_options_mscan_theme_hash');
delete_option('bulletproof_security_options_mscan_t_hash_new');
delete_option('bulletproof_security_options_mscan_nodownload');
delete_option('bulletproof_security_options_new_feature');
delete_option('bulletproof_security_options_mscan_zip_upload');
delete_option('bulletproof_security_options_mscan_report');
delete_option('bulletproof_security_options_zip_filename');
delete_option('bulletproof_security_options_mscan_hash_status');
// will be adding this new upgrade notice option later
// delete_option('bulletproof_security_options_upgrade_notice');
$wpdb->query("DROP TABLE IF EXISTS $Stable_name");
$wpdb->query("DROP TABLE IF EXISTS $Ltable_name");
$wpdb->query("DROP TABLE IF EXISTS $DBBtable_name");
$wpdb->query("DROP TABLE IF EXISTS $MStable_name");
delete_user_meta($user_id, 'bps_ignore_iis_notice');
delete_user_meta($user_id, 'bps_ignore_sucuri_notice');
delete_user_meta($user_id, 'bps_ignore_BLC_notice');
delete_user_meta($user_id, 'bps_ignore_PhpiniHandler_notice');
delete_user_meta($user_id, 'bps_ignore_Permalinks_notice');
delete_user_meta($user_id, 'bps_brute_force_login_protection_notice');
delete_user_meta($user_id, 'bps_speed_boost_cache_notice');
delete_user_meta($user_id, 'bps_xmlrpc_ddos_notice');
delete_user_meta($user_id, 'bps_author_enumeration_notice');
delete_user_meta($user_id, 'bps_ignore_wpfirewall2_notice');
delete_user_meta($user_id, 'bps_hud_NetworkActivationAlert_notice');
delete_user_meta($user_id, 'bps_referer_spam_notice');
delete_user_meta($user_id, 'bps_sniff_driveby_notice');
delete_user_meta($user_id, 'bps_iframe_clickjack_notice');
delete_user_meta($user_id, 'bps_bonus_code_dismiss_all_notice');
delete_user_meta($user_id, 'bps_post_request_attack_notice');
delete_user_meta($user_id, 'bps_ignore_jetpack_notice');
delete_user_meta($user_id, 'bps_ignore_woocommerce_notice');
delete_user_meta($user_id, 'bps_ignore_woocommerce_lsm_jtc_notice');
delete_user_meta($user_id, 'bps_ignore_autoupdate_notice');
delete_user_meta($user_id, 'bpsPro_ignore_EPC_plugin_notice');
delete_user_meta($user_id, 'bps_ignore_mscan_notice');
delete_user_meta($user_id, 'bps_ignore_jtc_lite_notice');
delete_user_meta($user_id, 'bps_ignore_rate_notice');
delete_user_meta($user_id, 'bpsPro_ignore_mod_security_notice');
delete_user_meta($user_id, 'bpsPro_ignore_gdpr_compliance_notice');
delete_user_meta($user_id, 'bps_ignore_root_version_check_notice');
delete_user_meta($user_id, 'bpsPro_ignore_mu_wp_automatic_updates_notice');
delete_user_meta($user_id, 'bpsPro_hud_owner_uid_check_notice');
delete_user_meta($user_id, 'bpsPro_ignore_bpspro_sale_notice');
delete_user_meta($user_id, 'bpsPro_hud_new_feature_notice');
unlink($wpadminHtaccess);
if ( unlink($RootHtaccess) || ! file_exists($RootHtaccess) ) {
if ( is_multisite() ) {
bpsPro_default_wp_htaccess_file_multisite();
} else {
flush_rewrite_rules();
}
}
$autoupdate_muplugins_file = WP_CONTENT_DIR . '/mu-plugins/bps-plugin-autoupdate.php';
$bps_mu_tools_muplugins_file = WP_CONTENT_DIR . '/mu-plugins/bps-mu-tools.php';
if ( file_exists($autoupdate_muplugins_file) ) {
unlink($autoupdate_muplugins_file);
}
if ( file_exists($bps_mu_tools_muplugins_file) ) {
unlink($bps_mu_tools_muplugins_file);
}
} else {
delete_option('bulletproof_security_options');
delete_option('bulletproof_security_options_wizard_free');
delete_transient('bulletproof-security_info');
delete_option('bulletproof_security_options_MU_tools_free');
delete_option('bulletproof_security_options_rate_free');
delete_user_meta($user_id, 'bps_ignore_autoupdate_notice');
delete_user_meta($user_id, 'bpsPro_ignore_bpspro_sale_notice');
$autoupdate_muplugins_file = WP_CONTENT_DIR . '/mu-plugins/bps-plugin-autoupdate.php';
$bps_mu_tools_muplugins_file = WP_CONTENT_DIR . '/mu-plugins/bps-mu-tools.php';
if ( file_exists($autoupdate_muplugins_file) ) {
unlink($autoupdate_muplugins_file);
}
if ( file_exists($bps_mu_tools_muplugins_file) ) {
unlink($bps_mu_tools_muplugins_file);
}
}
}
// was being used, no longer being used for anything
function bulletproof_security_options_validate($input) {
$options = get_option('bulletproof_security_options');
$options['bps_blank'] = wp_filter_nohtml_kses($input['bps_blank']);
return $options;
}
// Maintenance Mode
function bulletproof_security_options_validate_maint_mode($input) {
$options = get_option('bulletproof_security_options_maint_mode');
$options['bps_maint_on_off'] = wp_filter_nohtml_kses($input['bps_maint_on_off']);
$options['bps_maint_countdown_timer'] = wp_filter_nohtml_kses($input['bps_maint_countdown_timer']);
$options['bps_maint_countdown_timer_color'] = wp_filter_nohtml_kses($input['bps_maint_countdown_timer_color']);
$options['bps_maint_time'] = wp_filter_nohtml_kses($input['bps_maint_time']);
$options['bps_maint_retry_after'] = wp_filter_nohtml_kses($input['bps_maint_retry_after']);
$options['bps_maint_frontend'] = wp_filter_nohtml_kses($input['bps_maint_frontend']);
$options['bps_maint_backend'] = wp_filter_nohtml_kses($input['bps_maint_backend']);
$options['bps_maint_ip_allowed'] = wp_filter_nohtml_kses($input['bps_maint_ip_allowed']);
$options['bps_maint_text'] = esc_html($input['bps_maint_text']);
$options['bps_maint_background_images'] = wp_filter_nohtml_kses($input['bps_maint_background_images']);
$options['bps_maint_center_images'] = wp_filter_nohtml_kses($input['bps_maint_center_images']);
$options['bps_maint_background_color'] = wp_filter_nohtml_kses($input['bps_maint_background_color']);
$options['bps_maint_show_visitor_ip'] = wp_filter_nohtml_kses($input['bps_maint_show_visitor_ip']);
$options['bps_maint_show_login_link'] = wp_filter_nohtml_kses($input['bps_maint_show_login_link']);
$options['bps_maint_dashboard_reminder'] = wp_filter_nohtml_kses($input['bps_maint_dashboard_reminder']);
$options['bps_maint_log_visitors'] = wp_filter_nohtml_kses($input['bps_maint_log_visitors']);
$options['bps_maint_countdown_email'] = wp_filter_nohtml_kses($input['bps_maint_countdown_email']);
$options['bps_maint_email_to'] = trim(wp_filter_nohtml_kses($input['bps_maint_email_to']));
$options['bps_maint_email_from'] = trim(wp_filter_nohtml_kses($input['bps_maint_email_from']));
$options['bps_maint_email_cc'] = trim(wp_filter_nohtml_kses($input['bps_maint_email_cc']));
$options['bps_maint_email_bcc'] = trim(wp_filter_nohtml_kses($input['bps_maint_email_bcc']));
$options['bps_maint_mu_entire_site'] = wp_filter_nohtml_kses($input['bps_maint_mu_entire_site']);
$options['bps_maint_mu_subsites_only'] = wp_filter_nohtml_kses($input['bps_maint_mu_subsites_only']);
return $options;
}
// Root .htaccess file AutoLock
function bulletproof_security_options_validate_autolock($input) {
$options = get_option('bulletproof_security_options_autolock');
$options['bps_root_htaccess_autolock'] = wp_filter_nohtml_kses($input['bps_root_htaccess_autolock']);
return $options;
}
// BPS Custom Code - Root .htaccess
function bulletproof_security_options_validate_customcode($input) {
$options = get_option('bulletproof_security_options_customcode');
// TOP PHP/PHP.INI HANDLER/CACHE CODE
$options['bps_customcode_one'] = esc_html($input['bps_customcode_one']);
$options['bps_customcode_server_signature'] = esc_html($input['bps_customcode_server_signature']);
$options['bps_customcode_directory_index'] = esc_html($input['bps_customcode_directory_index']);
// BRUTE FORCE LOGIN PAGE PROTECTION
$options['bps_customcode_server_protocol'] = esc_html($input['bps_customcode_server_protocol']);
$options['bps_customcode_error_logging'] = esc_html($input['bps_customcode_error_logging']);
$options['bps_customcode_deny_dot_folders'] = esc_html($input['bps_customcode_deny_dot_folders']);
$options['bps_customcode_admin_includes'] = esc_html($input['bps_customcode_admin_includes']);
$options['bps_customcode_wp_rewrite_start'] = esc_html($input['bps_customcode_wp_rewrite_start']);
$options['bps_customcode_request_methods'] = esc_html($input['bps_customcode_request_methods']);
// PLUGIN/THEME SKIP/BYPASS RULES
$options['bps_customcode_two'] = esc_html($input['bps_customcode_two']);
$options['bps_customcode_timthumb_misc'] = esc_html($input['bps_customcode_timthumb_misc']);
$options['bps_customcode_bpsqse'] = esc_html($input['bps_customcode_bpsqse']);
if ( is_multisite() ) {
$options['bps_customcode_wp_rewrite_end'] = esc_html($input['bps_customcode_wp_rewrite_end']);
}
$options['bps_customcode_deny_files'] = esc_html($input['bps_customcode_deny_files']);
// BOTTOM HOTLINKING/FORBID COMMENT SPAMMERS/BLOCK BOTS/BLOCK IP/REDIRECT CODE
$options['bps_customcode_three'] = esc_html($input['bps_customcode_three']);
return $options;
}
// BPS Custom Code - WP-admin .htaccess
function bulletproof_security_options_validate_customcode_WPA($input) {
$options = get_option('bulletproof_security_options_customcode_WPA');
$options['bps_customcode_deny_files_wpa'] = esc_html($input['bps_customcode_deny_files_wpa']);
$options['bps_customcode_one_wpa'] = esc_html($input['bps_customcode_one_wpa']);
$options['bps_customcode_two_wpa'] = esc_html($input['bps_customcode_two_wpa']);
$options['bps_customcode_bpsqse_wpa'] = esc_html($input['bps_customcode_bpsqse_wpa']);
return $options;
}
// BPS "My Notes" settings
function bulletproof_security_options_validate_mynotes($input) {
$options = get_option('bulletproof_security_options_mynotes');
$options['bps_my_notes'] = esc_html($input['bps_my_notes']);
return $options;
}
// Login Security & Monitoring
function bulletproof_security_options_validate_login_security($input) {
$options = get_option('bulletproof_security_options_login_security');
$options['bps_max_logins'] = trim(wp_filter_nohtml_kses($input['bps_max_logins']));
$options['bps_lockout_duration'] = trim(wp_filter_nohtml_kses($input['bps_lockout_duration']));
$options['bps_manual_lockout_duration'] = trim(wp_filter_nohtml_kses($input['bps_manual_lockout_duration']));
$options['bps_max_db_rows_display'] = trim(wp_filter_nohtml_kses($input['bps_max_db_rows_display']));
$options['bps_login_security_OnOff'] = wp_filter_nohtml_kses($input['bps_login_security_OnOff']);
$options['bps_login_security_logging'] = wp_filter_nohtml_kses($input['bps_login_security_logging']);
$options['bps_login_security_errors'] = wp_filter_nohtml_kses($input['bps_login_security_errors']);
$options['bps_login_security_remaining'] = wp_filter_nohtml_kses($input['bps_login_security_remaining']);
$options['bps_login_security_pw_reset'] = wp_filter_nohtml_kses($input['bps_login_security_pw_reset']);
$options['bps_login_security_sort'] = wp_filter_nohtml_kses($input['bps_login_security_sort']);
@$options['bps_enable_lsm_woocommerce'] = wp_filter_nohtml_kses($input['bps_enable_lsm_woocommerce']);
return $options;
}
// Idle Session Logout (ISL): Do not automatically set ISL up. This should be left up to users to choose whether to use this or not.
function bulletproof_security_options_validate_idle_session($input) {
$options = get_option('bulletproof_security_options_idle_session');
$options['bps_isl'] = wp_filter_nohtml_kses($input['bps_isl']);
$options['bps_isl_timeout'] = trim(wp_filter_nohtml_kses($input['bps_isl_timeout']));
$options['bps_isl_logout_url'] = trim(wp_filter_nohtml_kses($input['bps_isl_logout_url']));
$options['bps_isl_login_url'] = trim(wp_filter_nohtml_kses($input['bps_isl_login_url']));
$options['bps_isl_custom_message'] = wp_filter_nohtml_kses($input['bps_isl_custom_message']);
$options['bps_isl_custom_css_1'] = wp_filter_nohtml_kses($input['bps_isl_custom_css_1']);
$options['bps_isl_custom_css_2'] = wp_filter_nohtml_kses($input['bps_isl_custom_css_2']);
$options['bps_isl_custom_css_3'] = wp_filter_nohtml_kses($input['bps_isl_custom_css_3']);
$options['bps_isl_custom_css_4'] = wp_filter_nohtml_kses($input['bps_isl_custom_css_4']);
$options['bps_isl_user_account_exceptions'] = wp_filter_nohtml_kses($input['bps_isl_user_account_exceptions']);
$options['bps_isl_administrator'] = wp_filter_nohtml_kses($input['bps_isl_administrator']);
$options['bps_isl_editor'] = wp_filter_nohtml_kses($input['bps_isl_editor']);
$options['bps_isl_author'] = wp_filter_nohtml_kses($input['bps_isl_author']);
$options['bps_isl_contributor'] = wp_filter_nohtml_kses($input['bps_isl_contributor']);
$options['bps_isl_subscriber'] = wp_filter_nohtml_kses($input['bps_isl_subscriber']);
$options['bps_isl_tinymce'] = wp_filter_nohtml_kses($input['bps_isl_tinymce']);
$options['bps_isl_uri_exclusions'] = wp_filter_nohtml_kses($input['bps_isl_uri_exclusions']);
// Note: You cannot use: wp_filter_nohtml_kses for multidimensional arrays - it will strip out the inner array code.
@$options['bps_isl_custom_roles'] = $input['bps_isl_custom_roles'];
return $options;
}
// Authentication Cookie Expiration (ACE): Do not automatically set ACE up. This should be left up to users to choose whether to use this or not.
function bulletproof_security_options_validate_auth_cookie($input) {
$options = get_option('bulletproof_security_options_auth_cookie');
$options['bps_ace'] = wp_filter_nohtml_kses($input['bps_ace']);
$options['bps_ace_expiration'] = trim(wp_filter_nohtml_kses($input['bps_ace_expiration']));
$options['bps_ace_rememberme_expiration'] = trim(wp_filter_nohtml_kses($input['bps_ace_rememberme_expiration']));
$options['bps_ace_user_account_exceptions'] = wp_filter_nohtml_kses($input['bps_ace_user_account_exceptions']);
$options['bps_ace_administrator'] = wp_filter_nohtml_kses($input['bps_ace_administrator']);
$options['bps_ace_editor'] = wp_filter_nohtml_kses($input['bps_ace_editor']);
$options['bps_ace_author'] = wp_filter_nohtml_kses($input['bps_ace_author']);
$options['bps_ace_contributor'] = wp_filter_nohtml_kses($input['bps_ace_contributor']);
$options['bps_ace_subscriber'] = wp_filter_nohtml_kses($input['bps_ace_subscriber']);
$options['bps_ace_rememberme_disable'] = wp_filter_nohtml_kses($input['bps_ace_rememberme_disable']);
// Note: You cannot use: wp_filter_nohtml_kses for multidimensional arrays - it will strip out the inner array code.
@$options['bps_ace_custom_roles'] = $input['bps_ace_custom_roles'];
return $options;
}
// BPS Free Email Alerts
function bulletproof_security_options_validate_email($input) {
$options = get_option('bulletproof_security_options_email');
$options['bps_send_email_to'] = trim(wp_filter_nohtml_kses($input['bps_send_email_to']));
$options['bps_send_email_from'] = trim(wp_filter_nohtml_kses($input['bps_send_email_from']));
$options['bps_send_email_cc'] = trim(wp_filter_nohtml_kses($input['bps_send_email_cc']));
$options['bps_send_email_bcc'] = trim(wp_filter_nohtml_kses($input['bps_send_email_bcc']));
$options['bps_login_security_email'] = wp_filter_nohtml_kses($input['bps_login_security_email']);
//$options['bps_upgrade_email'] = wp_filter_nohtml_kses($input['bps_upgrade_email']);
$options['bps_security_log_size'] = wp_filter_nohtml_kses($input['bps_security_log_size']);
$options['bps_security_log_emailL'] = wp_filter_nohtml_kses($input['bps_security_log_emailL']);
$options['bps_dbb_log_email'] = wp_filter_nohtml_kses($input['bps_dbb_log_email']);
$options['bps_dbb_log_size'] = wp_filter_nohtml_kses($input['bps_dbb_log_size']);
$options['bps_mscan_log_size'] = wp_filter_nohtml_kses($input['bps_mscan_log_size']);
$options['bps_mscan_log_email'] = wp_filter_nohtml_kses($input['bps_mscan_log_email']);
$options['bps_plugin_updates_frequency'] = wp_filter_nohtml_kses($input['bps_plugin_updates_frequency']);
$options['bps_plugin_updates_email'] = wp_filter_nohtml_kses($input['bps_plugin_updates_email']);
$options['bps_theme_updates_frequency'] = wp_filter_nohtml_kses($input['bps_theme_updates_frequency']);
$options['bps_theme_updates_email'] = wp_filter_nohtml_kses($input['bps_theme_updates_email']);
$options['bps_hpf_email'] = wp_filter_nohtml_kses($input['bps_hpf_email']);
return $options;
}
// UI Theme Skin
function bulletproof_security_options_validate_theme_skin($input) {
$options = get_option('bulletproof_security_options_theme_skin');
$options['bps_ui_theme_skin'] = wp_filter_nohtml_kses($input['bps_ui_theme_skin']);
return $options;
}
// DB Backup
function bulletproof_security_options_validate_db_backup($input) {
$options = get_option('bulletproof_security_options_db_backup');
$options['bps_db_backup'] = wp_filter_nohtml_kses($input['bps_db_backup']);
$options['bps_db_backup_description'] = trim(wp_filter_nohtml_kses($input['bps_db_backup_description']));
$options['bps_db_backup_folder'] = trim(wp_filter_nohtml_kses($input['bps_db_backup_folder']));
$options['bps_db_backup_download_link'] = trim(wp_filter_nohtml_kses($input['bps_db_backup_download_link']));
$options['bps_db_backup_job_type'] = wp_filter_nohtml_kses($input['bps_db_backup_job_type']);
$options['bps_db_backup_frequency'] = wp_filter_nohtml_kses($input['bps_db_backup_frequency']);
$options['bps_db_backup_start_time_hour'] = wp_filter_nohtml_kses($input['bps_db_backup_start_time_hour']);
$options['bps_db_backup_start_time_weekday'] = wp_filter_nohtml_kses($input['bps_db_backup_start_time_weekday']);
$options['bps_db_backup_start_time_month_date'] = wp_filter_nohtml_kses($input['bps_db_backup_start_time_month_date']);
$options['bps_db_backup_email_zip'] = wp_filter_nohtml_kses($input['bps_db_backup_email_zip']);
$options['bps_db_backup_delete'] = wp_filter_nohtml_kses($input['bps_db_backup_delete']);
$options['bps_db_backup_status_display'] = wp_filter_nohtml_kses($input['bps_db_backup_status_display']); // hidden form option
return $options;
}
// DB Backup Log Last Modified Time DB
function bulletproof_security_options_validate_DBB_log($input) {
$options = get_option('bulletproof_security_options_DBB_log');
$options['bps_dbb_log_date_mod'] = wp_filter_nohtml_kses($input['bps_dbb_log_date_mod']);
return $options;
}
// Hosting that does not allow wp-admin .htaccess files - Go Daddy Managed WordPress hosting
function bulletproof_security_options_validate_htaccess_res($input) {
$options = get_option('bulletproof_security_options_htaccess_res');
$options['bps_wpadmin_restriction'] = wp_filter_nohtml_kses($input['bps_wpadmin_restriction']);
return $options;
}
// Go Daddy Managed WordPress hosting
function bulletproof_security_options_validate_GDMW($input) {
$options = get_option('bulletproof_security_options_GDMW');
$options['bps_gdmw_hosting'] = wp_filter_nohtml_kses($input['bps_gdmw_hosting']);
return $options;
}
// Loading/Processing Spinner On/Off
function bulletproof_security_options_validate_spinner($input) {
$options = get_option('bulletproof_security_options_spinner');
$options['bps_spinner'] = wp_filter_nohtml_kses($input['bps_spinner']);
return $options;
}
// jQuery ScrollTop Animation On/Off
function bulletproof_security_options_validate_scrolltop($input) {
$options = get_option('bulletproof_security_options_scrolltop');
$options['bps_scrolltop'] = wp_filter_nohtml_kses($input['bps_scrolltop']);
return $options;
}
// WP Toolbar remove or allow all nodes
function bulletproof_security_options_validate_wpt_nodes($input) {
$options = get_option('bulletproof_security_options_wpt_nodes');
$options['bps_wpt_nodes'] = wp_filter_nohtml_kses($input['bps_wpt_nodes']);
return $options;
}
// Inpage Status display - displays on BPS plugin pages only
function bulletproof_security_options_validate_status_display($input) {
$options = get_option('bulletproof_security_options_status_display');
$options['bps_status_display'] = wp_filter_nohtml_kses($input['bps_status_display']);
return $options;
}
// jQuery UI Dialog Uninstall Form Options
function bulletproof_security_options_validate_pop_uninstall($input) {
$options = get_option('bulletproof_security_options_pop_uninstall');
$options['bps_pop_uninstall'] = wp_filter_nohtml_kses($input['bps_pop_uninstall']);
return $options;
}
// Setup Wizard
function bulletproof_security_options_validate_wizard_free($input) {
$options = get_option('bulletproof_security_options_wizard_free');
$options['bps_wizard_free'] = wp_filter_nohtml_kses($input['bps_wizard_free']);
return $options;
}
// Setup Wizard AutoFix On/Off: Automatically creates fixes/setups or whitelist rules for any known issues with other plugins.
function bulletproof_security_options_validate_wizard_autofix($input) {
$options = get_option('bulletproof_security_options_wizard_autofix');
$options['bps_wizard_autofix'] = wp_filter_nohtml_kses($input['bps_wizard_autofix']);
return $options;
}
// Style/Script Loader Filter (SLF)
function bulletproof_security_options_validate_SLF($input) {
$options = get_option('bulletproof_security_options_SLF');
$options['bps_slf_filter'] = wp_filter_nohtml_kses($input['bps_slf_filter']);
$options['bps_slf_filter_new'] = wp_filter_nohtml_kses($input['bps_slf_filter_new']);
return $options;
}
// Apache Modules IfModule condition: create IfModule conditions or just Order, Deny, Allow htaccess code
function bulletproof_security_options_validate_apache_modules($input) {
$options = get_option('bulletproof_security_options_apache_modules');
$options['bps_apache_mod_ifmodule'] = wp_filter_nohtml_kses($input['bps_apache_mod_ifmodule']);
$options['bps_apache_mod_time'] = wp_filter_nohtml_kses($input['bps_apache_mod_time']);
return $options;
}
// Security Log Limit POST Request Body Data
function bulletproof_security_options_validate_sec_log_post_limit($input) {
$options = get_option('bulletproof_security_options_sec_log_post_limit');
$options['bps_security_log_post_limit'] = wp_filter_nohtml_kses($input['bps_security_log_post_limit']);
$options['bps_security_log_post_none'] = wp_filter_nohtml_kses($input['bps_security_log_post_none']);
$options['bps_security_log_post_max'] = wp_filter_nohtml_kses($input['bps_security_log_post_max']);
return $options;
}
// Setup Wizard: Enable|Disable htaccess Files
// Based on Apache Module test results or manual setting: Servers that do no have either mod_access_compat and mod_authz_core or mod_rewrite Loaded
function bulletproof_security_options_validate_htaccess_files($input) {
$options = get_option('bulletproof_security_options_htaccess_files');
$options['bps_htaccess_files'] = wp_filter_nohtml_kses($input['bps_htaccess_files']);
return $options;
}
// UI|UX Debug: Displays scripts and styles dequeued|SLF scripts and styles nulled|WP Toolbar nodes|menu items that were Removed
function bulletproof_security_options_validate_debug($input) {
$options = get_option('bulletproof_security_options_debug');
$options['bps_debug'] = wp_filter_nohtml_kses($input['bps_debug']);
return $options;
}
// Pending Deletion: CAUTION: be sure to search all files for these options especially general-functions.php
// 2.0: Removal: UI|UX Option: BPS Plugin AutoUpdate has been removed. BPS plugin Automatic Updates enable or disable is now handled directly in the BPS MU Tools must-use plugin.
// 4.2: The BPS plugin AutoUpdate code has been removed from the MU Tools plugin. WP now handles Plugin auto-updates.
// UI|UX AutoUpdate the BPS Plugin
function bulletproof_security_options_validate_autoupdate($input) {
$options = get_option('bulletproof_security_options_autoupdate');
$options['bps_autoupdate'] = wp_filter_nohtml_kses($input['bps_autoupdate']);
return $options;
}
// Hidden|Empty Plugin Folders|Files Cron: core.php, wizard.php
function bulletproof_security_options_validate_hpf_cron($input) {
$options = get_option('bulletproof_security_options_hpf_cron');
$options['bps_hidden_plugins_cron'] = wp_filter_nohtml_kses($input['bps_hidden_plugins_cron']);
$options['bps_hidden_plugins_cron_frequency'] = wp_filter_nohtml_kses($input['bps_hidden_plugins_cron_frequency']);
$options['bps_hidden_plugins_cron_email'] = wp_filter_nohtml_kses($input['bps_hidden_plugins_cron_email']);
$options['bps_hidden_plugins_cron_alert'] = wp_filter_nohtml_kses($input['bps_hidden_plugins_cron_alert']);
return $options;
}
// Hidden|Empty Plugin Folders|Files: Check /plugins/ folder Hidden or Empty Plugin Folders & non-standard WP Files Check
// Textarea box to check against ignored folders and/or files.
function bulletproof_security_options_validate_hidden_plugins($input) {
$options = get_option('bulletproof_security_options_hidden_plugins');
$options['bps_hidden_plugins_check'] = wp_filter_nohtml_kses($input['bps_hidden_plugins_check']);
return $options;
}
// Setup Wizard Options: Zip File Download Fix (Incapsula, Proxy, Other Cause)
function bulletproof_security_options_validate_zip_fix($input) {
$options = get_option('bulletproof_security_options_zip_fix');
$options['bps_zip_download_fix'] = wp_filter_nohtml_kses($input['bps_zip_download_fix']);
return $options;
}
// Pending Deletion: CAUTION: be sure to search all files for these options especially general-functions.php
// MU Tools: must-use file: bps-mu-tools.php
// timestamp to limit log writing and email alerts when the BPS plugin folder is renamed or deleted.
function bulletproof_security_options_validate_MU_tools_free($input) {
$options = get_option('bulletproof_security_options_MU_tools_free');
$options['bps_mu_tools_timestamp'] = wp_filter_nohtml_kses($input['bps_mu_tools_timestamp']);
$options['bps_mu_tools_enable_disable_autoupdate'] = wp_filter_nohtml_kses($input['bps_mu_tools_enable_disable_autoupdate']);
$options['bps_mu_tools_enable_disable_deactivation'] = wp_filter_nohtml_kses($input['bps_mu_tools_enable_disable_deactivation']);
return $options;
}
// MScan Log Last Modified Time DB
function bulletproof_security_options_validate_MScan_log($input) {
$options = get_option('bulletproof_security_options_MScan_log');
$options['bps_mscan_log_date_mod'] = wp_filter_nohtml_kses($input['bps_mscan_log_date_mod']);
return $options;
}
// MScan Scan: time, file counts & other stats
// Note: Infected, Suspicious, skipped & ignored files can be outputted via a DB Query, but save these values statically as well
function bulletproof_security_options_validate_MScan_status($input) {
$options = get_option('bulletproof_security_options_MScan_status');
$options['bps_mscan_time_start'] = wp_filter_nohtml_kses($input['bps_mscan_time_start']);
$options['bps_mscan_time_stop'] = wp_filter_nohtml_kses($input['bps_mscan_time_stop']);
$options['bps_mscan_time_end'] = wp_filter_nohtml_kses($input['bps_mscan_time_end']);
$options['bps_mscan_time_remaining'] = wp_filter_nohtml_kses($input['bps_mscan_time_remaining']);
$options['bps_mscan_status'] = wp_filter_nohtml_kses($input['bps_mscan_status']);
$options['bps_mscan_last_scan_timestamp'] = wp_filter_nohtml_kses($input['bps_mscan_last_scan_timestamp']);
$options['bps_mscan_total_time'] = wp_filter_nohtml_kses($input['bps_mscan_total_time']);
$options['bps_mscan_total_website_files'] = wp_filter_nohtml_kses($input['bps_mscan_total_website_files']);
$options['bps_mscan_total_wp_core_files'] = wp_filter_nohtml_kses($input['bps_mscan_total_wp_core_files']);
$options['bps_mscan_total_non_image_files'] = wp_filter_nohtml_kses($input['bps_mscan_total_non_image_files']);
$options['bps_mscan_total_image_files'] = wp_filter_nohtml_kses($input['bps_mscan_total_image_files']);
$options['bps_mscan_total_all_scannable_files'] = wp_filter_nohtml_kses($input['bps_mscan_total_all_scannable_files']);
$options['bps_mscan_total_skipped_files'] = wp_filter_nohtml_kses($input['bps_mscan_total_skipped_files']);
$options['bps_mscan_total_suspect_files'] = wp_filter_nohtml_kses($input['bps_mscan_total_suspect_files']);
@$options['bps_mscan_suspect_skipped_files'] = wp_filter_nohtml_kses($input['bps_mscan_suspect_skipped_files']);
@$options['bps_mscan_total_suspect_db'] = wp_filter_nohtml_kses($input['bps_mscan_total_suspect_db']);
$options['bps_mscan_total_ignored_files'] = wp_filter_nohtml_kses($input['bps_mscan_total_ignored_files']);
// 4.7: 2 new options added
$options['bps_mscan_total_plugin_files'] = wp_filter_nohtml_kses($input['bps_mscan_total_plugin_files']);
$options['bps_mscan_total_theme_files'] = wp_filter_nohtml_kses($input['bps_mscan_total_theme_files']);
return $options;
}
// MScan Hash Maker: WP Core, Plugins + Themes used to display in the Hash Maker popup window
// and for other conditions
function bulletproof_security_options_validate_mscan_hash_status($input) {
$options = get_option('bulletproof_security_options_mscan_hash_status');
$options['mscan_wp_core_hash_status'] = wp_filter_nohtml_kses($input['mscan_wp_core_hash_status']);
$options['mscan_wp_core_hash_count'] = wp_filter_nohtml_kses($input['mscan_wp_core_hash_count']);
$options['mscan_plugin_hash_status'] = wp_filter_nohtml_kses($input['mscan_plugin_hash_status']);
$options['mscan_plugin_hash_count'] = wp_filter_nohtml_kses($input['mscan_plugin_hash_count']);
$options['mscan_theme_hash_status'] = wp_filter_nohtml_kses($input['mscan_theme_hash_status']);
$options['mscan_theme_hash_count'] = wp_filter_nohtml_kses($input['mscan_theme_hash_count']);
return $options;
}
// MScan Scan Options: folders to scan, cron schedules, etc.
function bulletproof_security_options_validate_MScan($input) {
$options = get_option('bulletproof_security_options_MScan');
// Note: You cannot use: wp_filter_nohtml_kses for multidimensional arrays - it will strip out the inner array code.
$options['bps_mscan_dirs'] = $input['bps_mscan_dirs'];
$options['mscan_max_file_size'] = wp_filter_nohtml_kses($input['mscan_max_file_size']);
$options['mscan_max_time_limit'] = wp_filter_nohtml_kses($input['mscan_max_time_limit']);
$options['mscan_scan_database'] = wp_filter_nohtml_kses($input['mscan_scan_database']);
$options['mscan_scan_images'] = wp_filter_nohtml_kses($input['mscan_scan_images']);
$options['mscan_scan_skipped_files'] = wp_filter_nohtml_kses($input['mscan_scan_skipped_files']);
$options['mscan_scan_delete_tmp_files'] = wp_filter_nohtml_kses($input['mscan_scan_delete_tmp_files']);
$options['mscan_scan_frequency'] = wp_filter_nohtml_kses($input['mscan_scan_frequency']);
// keep this option last since I am using newlines
@$options['mscan_exclude_dirs'] = wp_filter_nohtml_kses($input['mscan_exclude_dirs']);
@$options['mscan_exclude_tmp_files'] = wp_filter_nohtml_kses($input['mscan_exclude_tmp_files']);
$options['mscan_file_size_limit_hidden'] = wp_filter_nohtml_kses($input['mscan_file_size_limit_hidden']);
return $options;
}
// MScan Scan file and db pattern matching options: 2-D arrays:
function bulletproof_security_options_validate_mscan_patterns($input) {
$options = get_option('bulletproof_security_options_mscan_patterns');
$options['mscan_pattern_match_files'] = $input['mscan_pattern_match_files'];
$options['mscan_pattern_match_db'] = $input['mscan_pattern_match_db'];
return $options;
}
// MScan Scan plugin hashes options: 2-D arrays:
// Note: You cannot use: wp_filter_nohtml_kses for multidimensional arrays - it will strip out the inner array code.
function bulletproof_security_options_validate_mscan_plugin_hash($input) {
$options = get_option('bulletproof_security_options_mscan_plugin_hash');
$options['bps_mscan_plugin_hash_version_check'] = $input['bps_mscan_plugin_hash_version_check'];
$options['bps_mscan_plugin_hash_paths'] = $input['bps_mscan_plugin_hash_paths'];
$options['bps_mscan_plugin_hash_zip_file'] = $input['bps_mscan_plugin_hash_zip_file'];
return $options;
}
// MScan Scan plugin hashes options: 2-D arrays:
// Notes: You cannot use: wp_filter_nohtml_kses for multidimensional arrays - it will strip out the inner array code.
// The WP delete_option() function only deletes strings due to trim(). So I need a separate DB option for the new arrays
// in order to delete this option so that new arrays for comparison are created/updated each time. Simpler is always better anyways.
function bulletproof_security_options_validate_mscan_p_hash_new($input) {
$options = get_option('bulletproof_security_options_mscan_p_hash_new');
$options['bps_mscan_plugin_hash_version_check_new'] = $input['bps_mscan_plugin_hash_version_check_new'];
$options['bps_mscan_plugin_hash_paths_new'] = $input['bps_mscan_plugin_hash_paths_new'];
$options['bps_mscan_plugin_hash_zip_file_new'] = $input['bps_mscan_plugin_hash_zip_file_new'];
return $options;
}
// MScan Scan Theme hashes options: 2-D arrays:
function bulletproof_security_options_validate_mscan_theme_hash($input) {
$options = get_option('bulletproof_security_options_mscan_theme_hash');
$options['bps_mscan_theme_hash_version_check'] = $input['bps_mscan_theme_hash_version_check'];
$options['bps_mscan_theme_hash_paths'] = $input['bps_mscan_theme_hash_paths'];
$options['bps_mscan_theme_hash_zip_file'] = $input['bps_mscan_theme_hash_zip_file'];
return $options;
}
// MScan Scan Theme hashes options: 2-D arrays:
function bulletproof_security_options_validate_mscan_t_hash_new($input) {
$options = get_option('bulletproof_security_options_mscan_t_hash_new');
$options['bps_mscan_theme_hash_version_check_new'] = $input['bps_mscan_theme_hash_version_check_new'];
$options['bps_mscan_theme_hash_paths_new'] = $input['bps_mscan_theme_hash_paths_new'];
$options['bps_mscan_theme_hash_zip_file_new'] = $input['bps_mscan_theme_hash_zip_file_new'];
return $options;
}
// MScan: Plugins and Themes that are not downloadable from WP. ie premium/paid, custom plugins or no zip file version number.
function bulletproof_security_options_validate_mscan_nodownload($input) {
$options = get_option('bulletproof_security_options_mscan_nodownload');
$options['bps_plugin_nodownload'] = $input['bps_plugin_nodownload'];
$options['bps_theme_nodownload'] = $input['bps_theme_nodownload'];
return $options;
}
// MScan Zip Upload Forms: Plugins and Themes that are not downloadable from WP. ie premium/paid, custom plugins or no zip file version number.
// Used in the MScan Report to check if these plugins and themes have file hashes or not.
function bulletproof_security_options_validate_mscan_zip_upload($input) {
$options = get_option('bulletproof_security_options_mscan_zip_upload');
$options['bps_mscan_plugin_zip_upload'] = $input['bps_mscan_plugin_zip_upload'];
$options['bps_mscan_theme_zip_upload'] = $input['bps_mscan_theme_zip_upload'];
return $options;
}
// MScan Report: Multidimensional arrays for saving each MScan Report
// 20 saved scan reports max. Each report array needs to be a separate option so that it can be deleted easily.
function bulletproof_security_options_validate_mscan_report($input) {
$options = get_option('bulletproof_security_options_mscan_report');
$options['bps_mscan_report_data_1'] = $input['bps_mscan_report_data_1'];
$options['bps_mscan_report_data_2'] = $input['bps_mscan_report_data_2'];
$options['bps_mscan_report_data_3'] = $input['bps_mscan_report_data_3'];
$options['bps_mscan_report_data_4'] = $input['bps_mscan_report_data_4'];
$options['bps_mscan_report_data_5'] = $input['bps_mscan_report_data_5'];
$options['bps_mscan_report_data_6'] = $input['bps_mscan_report_data_6'];
$options['bps_mscan_report_data_7'] = $input['bps_mscan_report_data_7'];
$options['bps_mscan_report_data_8'] = $input['bps_mscan_report_data_8'];
$options['bps_mscan_report_data_9'] = $input['bps_mscan_report_data_9'];
$options['bps_mscan_report_data_10'] = $input['bps_mscan_report_data_10'];
$options['bps_mscan_report_data_11'] = $input['bps_mscan_report_data_11'];
$options['bps_mscan_report_data_12'] = $input['bps_mscan_report_data_12'];
$options['bps_mscan_report_data_13'] = $input['bps_mscan_report_data_13'];
$options['bps_mscan_report_data_14'] = $input['bps_mscan_report_data_14'];
$options['bps_mscan_report_data_15'] = $input['bps_mscan_report_data_15'];
$options['bps_mscan_report_data_16'] = $input['bps_mscan_report_data_16'];
$options['bps_mscan_report_data_17'] = $input['bps_mscan_report_data_17'];
$options['bps_mscan_report_data_18'] = $input['bps_mscan_report_data_18'];
$options['bps_mscan_report_data_19'] = $input['bps_mscan_report_data_19'];
$options['bps_mscan_report_data_20'] = $input['bps_mscan_report_data_20'];
return $options;
}
// New feature Dismiss Notice: Value is set on BPS upgrades and in the Wizard - This is ONLY used rarely for very important new features or options.
// If someone has upgraded BPS the value is: upgrade. If is a new BPS installation value is: new
// The Dismiss Notice is ONLY displayed to people who have upgraded BPS.
// I can add additional options later if needed.
function bulletproof_security_options_validate_new_feature($input) {
$options = get_option('bulletproof_security_options_new_feature');
$options['bps_mscan_rebuild'] = wp_filter_nohtml_kses($input['bps_mscan_rebuild']);
return $options;
}
// JTC-Lite a stripped down version of the BEAST > JTC Anti-Spam|Anti-Hacker
function bulletproof_security_options_validate_login_security_jtc($input) {
$options = get_option('bulletproof_security_options_login_security_jtc');
$options['bps_tooltip_captcha_key'] = trim(wp_filter_nohtml_kses($input['bps_tooltip_captcha_key']));
$options['bps_tooltip_captcha_hover_text'] = wp_filter_nohtml_kses($input['bps_tooltip_captcha_hover_text']);
$options['bps_tooltip_captcha_title'] = wp_filter_nohtml_kses($input['bps_tooltip_captcha_title']);
$options['bps_tooltip_captcha_logging'] = wp_filter_nohtml_kses($input['bps_tooltip_captcha_logging']);
$options['bps_jtc_login_form'] = wp_filter_nohtml_kses($input['bps_jtc_login_form']);
$options['bps_jtc_register_form'] = wp_filter_nohtml_kses($input['bps_jtc_register_form']);
$options['bps_jtc_lostpassword_form'] = wp_filter_nohtml_kses($input['bps_jtc_lostpassword_form']);
$options['bps_jtc_comment_form'] = wp_filter_nohtml_kses($input['bps_jtc_comment_form']);
$options['bps_jtc_mu_register_form'] = wp_filter_nohtml_kses($input['bps_jtc_mu_register_form']);
$options['bps_jtc_buddypress_register_form'] = wp_filter_nohtml_kses($input['bps_jtc_buddypress_register_form']);
$options['bps_jtc_buddypress_sidebar_form'] = wp_filter_nohtml_kses($input['bps_jtc_buddypress_sidebar_form']);
$options['bps_jtc_administrator'] = wp_filter_nohtml_kses($input['bps_jtc_administrator']);
$options['bps_jtc_editor'] = wp_filter_nohtml_kses($input['bps_jtc_editor']);
$options['bps_jtc_author'] = wp_filter_nohtml_kses($input['bps_jtc_author']);
$options['bps_jtc_contributor'] = wp_filter_nohtml_kses($input['bps_jtc_contributor']);
$options['bps_jtc_subscriber'] = wp_filter_nohtml_kses($input['bps_jtc_subscriber']);
$options['bps_jtc_comment_form_error'] = $input['bps_jtc_comment_form_error'];
$options['bps_jtc_comment_form_label'] = $input['bps_jtc_comment_form_label'];
$options['bps_jtc_comment_form_input'] = $input['bps_jtc_comment_form_input'];
//$options['bps_jtc_hide_ghost_text'] = wp_filter_nohtml_kses($input['bps_jtc_hide_ghost_text']);
// Note: You cannot use: wp_filter_nohtml_kses for multidimensional arrays - it will strip out the inner array code.
@$options['bps_jtc_custom_roles'] = $input['bps_jtc_custom_roles'];
$options['bps_enable_jtc_woocommerce'] = wp_filter_nohtml_kses($input['bps_enable_jtc_woocommerce']);
$options['bps_jtc_custom_form_error'] = $input['bps_jtc_custom_form_error'];
// 5 new options for JTC color picker
$options['bps_tooltip_captcha_title_after'] = wp_filter_nohtml_kses($input['bps_tooltip_captcha_title_after']);
$options['bps_tooltip_captcha_title_bold'] = wp_filter_nohtml_kses($input['bps_tooltip_captcha_title_bold']);
$options['bps_tooltip_captcha_title_after_bold'] = wp_filter_nohtml_kses($input['bps_tooltip_captcha_title_after_bold']);
$options['bps_tooltip_captcha_title_hidden'] = wp_filter_nohtml_kses($input['bps_tooltip_captcha_title_hidden']);
$options['bps_tooltip_captcha_title_after_hidden'] = wp_filter_nohtml_kses($input['bps_tooltip_captcha_title_after_hidden']);
return $options;
}
// BPS plugin 30 day review/rating request Dismiss Notice
function bulletproof_security_options_validate_rate_free($input) {
$options = get_option('bulletproof_security_options_rate_free');
$options['bps_free_rate_review'] = wp_filter_nohtml_kses($input['bps_free_rate_review']);
return $options;
}
// Mod Security Check: function: bpsPro_apache_mod_directive_check() used in Mod Security Dismiss Notice
function bulletproof_security_options_validate_mod_security($input) {
$options = get_option('bulletproof_security_options_mod_security');
$options['bps_mod_security_check'] = wp_filter_nohtml_kses($input['bps_mod_security_check']);
//$options['bps_mod_security2_check'] = wp_filter_nohtml_kses($input['bps_mod_security2_check']);
return $options;
}
// VCheck testing
function bulletproof_security_options_validate_vcheck($input) {
$options = get_option('bulletproof_security_options_vcheck');
$options['bps_vcheck'] = $input['bps_vcheck'];
return $options;
}
// Setup Wizard Options: GDPR On|Off Setup Wizard Option
function bulletproof_security_options_validate_gdpr($input) {
$options = get_option('bulletproof_security_options_gdpr');
$options['bps_gdpr_on_off'] = $input['bps_gdpr_on_off'];
return $options;
}
// Setup Wizard Options: Network|Multisite Hide|Display System Info page for Subsites
function bulletproof_security_options_validate_mu_sysinfo($input) {
$options = get_option('bulletproof_security_options_mu_sysinfo');
$options['bps_sysinfo_hide_display'] = $input['bps_sysinfo_hide_display'];
return $options;
}
// MU Tools: must-use file/plugin: bps-mu-tools.php
// Enable|Disable WordPress Automatic Updates. Note: add_filter( 'automatic_updater_disabled', '__return_true' ); Disables all Automatic Updates: Core, Plugins and Themes.
function bulletproof_security_options_validate_mu_wp_autoupdate($input) {
$options = get_option('bulletproof_security_options_mu_wp_autoupdate');
$options['bps_automatic_updater_disabled'] = wp_filter_nohtml_kses($input['bps_automatic_updater_disabled']);
$options['bps_auto_update_core_updates_disabled'] = wp_filter_nohtml_kses($input['bps_auto_update_core_updates_disabled']);
$options['bps_auto_update_core'] = wp_filter_nohtml_kses($input['bps_auto_update_core']);
$options['bps_allow_dev_auto_core_updates'] = wp_filter_nohtml_kses($input['bps_allow_dev_auto_core_updates']);
$options['bps_allow_minor_auto_core_updates'] = wp_filter_nohtml_kses($input['bps_allow_minor_auto_core_updates']);
$options['bps_allow_major_auto_core_updates'] = wp_filter_nohtml_kses($input['bps_allow_major_auto_core_updates']);
return $options;
}
// Setup Wizard: Parse phpinfo() to get the PHP memory_limit Local Value
function bulletproof_security_options_validate_php_memory_limit($input) {
$options = get_option('bulletproof_security_options_php_memory_limit');
$options['bps_php_memory_limit'] = wp_filter_nohtml_kses($input['bps_php_memory_limit']);
return $options;
}
// Force Strong Passwords: Login Security page
function bulletproof_security_options_validate_fsp($input) {
$options = get_option('bulletproof_security_options_fsp');
$options['bps_fsp_on_off'] = wp_filter_nohtml_kses($input['bps_fsp_on_off']);
$options['bps_fsp_char_length'] = wp_filter_nohtml_kses($input['bps_fsp_char_length']);
$options['bps_fsp_lower_case'] = wp_filter_nohtml_kses($input['bps_fsp_lower_case']);
$options['bps_fsp_upper_case'] = wp_filter_nohtml_kses($input['bps_fsp_upper_case']);
$options['bps_fsp_number'] = wp_filter_nohtml_kses($input['bps_fsp_number']);
$options['bps_fsp_special_char'] = wp_filter_nohtml_kses($input['bps_fsp_special_char']);
$options['bps_fsp_message'] = wp_filter_nohtml_kses($input['bps_fsp_message']);
return $options;
}
// Zipped Log Files: Saves the renamed zip file names with timestamp to DB to use in the email send/attachment function.
function bulletproof_security_options_validate_zip_filename($input) {
$options = get_option('bulletproof_security_options_zip_filename');
$options['bps_security_log_zip_file'] = wp_filter_nohtml_kses($input['bps_security_log_zip_file']);
$options['bps_db_backup_log_zip_file'] = wp_filter_nohtml_kses($input['bps_db_backup_log_zip_file']);
$options['bps_mscan_log_zip_file'] = wp_filter_nohtml_kses($input['bps_mscan_log_zip_file']);
$options['bps_db_monitor_log_zip_file'] = wp_filter_nohtml_kses($input['bps_db_monitor_log_zip_file']);
$options['bps_quarantine_log_zip_file'] = wp_filter_nohtml_kses($input['bps_quarantine_log_zip_file']);
$options['bps_php_error_log_zip_file'] = wp_filter_nohtml_kses($input['bps_php_error_log_zip_file']);
return $options;
}
?>