BulletProof Security - Version 6.3

Version Description

Download this release

Release Info

Developer AITpro
Plugin Icon 128x128 BulletProof Security
Version 6.3
Comparing to
See all releases

Code changes from version 6.2 to 6.3

403.php CHANGED
@@ -96,14 +96,14 @@ if ( !preg_match('/BPSUserAgentPlaceHolder/', $bpsPro_http_user_agent) ) {
96
  $query_string = parse_url($_SERVER['REQUEST_URI'], PHP_URL_QUERY);
97
 
98
  if ( isset($post_limit['bps_security_log_post_none']) && $post_limit['bps_security_log_post_none'] == '1' ) {
99
- $request_body = file_get_contents( 'php://input', NULL, NULL, 0, 5 );
100
 
101
  } else {
102
 
103
  if ( isset($post_limit['bps_security_log_post_none']) && $post_limit['bps_security_log_post_limit'] == '1' ) {
104
- $request_body = file_get_contents( 'php://input', NULL, NULL, 0, 500 );
105
  } else {
106
- $request_body = file_get_contents( 'php://input', NULL, NULL, 0, 250000 ); // roughly 250KB Max Limit
107
  }
108
  }
109
 
96
  $query_string = parse_url($_SERVER['REQUEST_URI'], PHP_URL_QUERY);
97
 
98
  if ( isset($post_limit['bps_security_log_post_none']) && $post_limit['bps_security_log_post_none'] == '1' ) {
99
+ $request_body = file_get_contents( 'php://input', false, NULL, 0, 5 );
100
 
101
  } else {
102
 
103
  if ( isset($post_limit['bps_security_log_post_none']) && $post_limit['bps_security_log_post_limit'] == '1' ) {
104
+ $request_body = file_get_contents( 'php://input', false, NULL, 0, 500 );
105
  } else {
106
+ $request_body = file_get_contents( 'php://input', false, NULL, 0, 250000 ); // roughly 250KB Max Limit
107
  }
108
  }
109
 
404.php CHANGED
@@ -79,14 +79,14 @@ $gmt_offset = get_option( 'gmt_offset' ) * 3600;
79
  $query_string = parse_url($_SERVER['REQUEST_URI'], PHP_URL_QUERY);
80
 
81
  if ( $post_limit['bps_security_log_post_none'] == '1' ) {
82
- $request_body = file_get_contents( 'php://input', NULL, NULL, 0, 5 );
83
 
84
  } else {
85
 
86
  if ( $post_limit['bps_security_log_post_limit'] == '1' ) {
87
- $request_body = file_get_contents( 'php://input', NULL, NULL, 0, 500 );
88
  } else {
89
- $request_body = file_get_contents( 'php://input', NULL, NULL, 0, 250000 ); // roughly 250KB Max Limit
90
  }
91
  }
92
 
79
  $query_string = parse_url($_SERVER['REQUEST_URI'], PHP_URL_QUERY);
80
 
81
  if ( $post_limit['bps_security_log_post_none'] == '1' ) {
82
+ $request_body = file_get_contents( 'php://input', false, NULL, 0, 5 );
83
 
84
  } else {
85
 
86
  if ( $post_limit['bps_security_log_post_limit'] == '1' ) {
87
+ $request_body = file_get_contents( 'php://input', false, NULL, 0, 500 );
88
  } else {
89
+ $request_body = file_get_contents( 'php://input', false, NULL, 0, 250000 ); // roughly 250KB Max Limit
90
  }
91
  }
92
 
405.php CHANGED
@@ -93,14 +93,14 @@ if ( file_exists( dirname(dirname(dirname(dirname(__FILE__)))) . '/wp-load.php'
93
  $query_string = parse_url($_SERVER['REQUEST_URI'], PHP_URL_QUERY);
94
 
95
  if ( $post_limit['bps_security_log_post_none'] == '1' ) {
96
- $request_body = file_get_contents( 'php://input', NULL, NULL, 0, 5 );
97
 
98
  } else {
99
 
100
  if ( $post_limit['bps_security_log_post_limit'] == '1' ) {
101
- $request_body = file_get_contents( 'php://input', NULL, NULL, 0, 500 );
102
  } else {
103
- $request_body = file_get_contents( 'php://input', NULL, NULL, 0, 250000 ); // roughly 250KB Max Limit
104
  }
105
  }
106
 
93
  $query_string = parse_url($_SERVER['REQUEST_URI'], PHP_URL_QUERY);
94
 
95
  if ( $post_limit['bps_security_log_post_none'] == '1' ) {
96
+ $request_body = file_get_contents( 'php://input', false, NULL, 0, 5 );
97
 
98
  } else {
99
 
100
  if ( $post_limit['bps_security_log_post_limit'] == '1' ) {
101
+ $request_body = file_get_contents( 'php://input', false, NULL, 0, 500 );
102
  } else {
103
+ $request_body = file_get_contents( 'php://input', false, NULL, 0, 250000 ); // roughly 250KB Max Limit
104
  }
105
  }
106
 
admin/core/core.php CHANGED
@@ -2220,6 +2220,7 @@ echo '<a href="'.esc_url( 'https://forum.ait-pro.com/forums/topic/bulletproof-se
2220
 
2221
  <div class="pro-links">
2222
  <?php
 
2223
  echo sprintf( __( '<a href="%2$s" target="_blank" title="Link Opens in New Browser Window">Whats New in BPS Pro %1$s</a>' ), '16.6', 'https://www.ait-pro.com/aitpro-blog/5771/bulletproof-security-pro/whats-new-in-bulletproof-security-pro-16-6/' ).'<br>';
2224
  echo sprintf( __( '<a href="%2$s" target="_blank" title="Link Opens in New Browser Window">Whats New in BPS Pro %1$s</a>' ), '16.5', 'https://www.ait-pro.com/aitpro-blog/5768/bulletproof-security-pro/whats-new-in-bulletproof-security-pro-16-5/' ).'<br>';
2225
  echo sprintf( __( '<a href="%2$s" target="_blank" title="Link Opens in New Browser Window">Whats New in BPS Pro %1$s</a>' ), '16.4', 'https://www.ait-pro.com/aitpro-blog/5762/bulletproof-security-pro/whats-new-in-bulletproof-security-pro-16-4/' ).'<br>';
2220
 
2221
  <div class="pro-links">
2222
  <?php
2223
+ echo sprintf( __( '<a href="%2$s" target="_blank" title="Link Opens in New Browser Window">Whats New in BPS Pro %1$s</a>' ), '16.7', 'https://www.ait-pro.com/aitpro-blog/5774/bulletproof-security-pro/whats-new-in-bulletproof-security-pro-16-7/' ).'<br>';
2224
  echo sprintf( __( '<a href="%2$s" target="_blank" title="Link Opens in New Browser Window">Whats New in BPS Pro %1$s</a>' ), '16.6', 'https://www.ait-pro.com/aitpro-blog/5771/bulletproof-security-pro/whats-new-in-bulletproof-security-pro-16-6/' ).'<br>';
2225
  echo sprintf( __( '<a href="%2$s" target="_blank" title="Link Opens in New Browser Window">Whats New in BPS Pro %1$s</a>' ), '16.5', 'https://www.ait-pro.com/aitpro-blog/5768/bulletproof-security-pro/whats-new-in-bulletproof-security-pro-16-5/' ).'<br>';
2226
  echo sprintf( __( '<a href="%2$s" target="_blank" title="Link Opens in New Browser Window">Whats New in BPS Pro %1$s</a>' ), '16.4', 'https://www.ait-pro.com/aitpro-blog/5762/bulletproof-security-pro/whats-new-in-bulletproof-security-pro-16-4/' ).'<br>';
admin/htaccess/secure.htaccess CHANGED
@@ -1,4 +1,4 @@
1
- # BULLETPROOF 6.2 SECURE .HTACCESS
2
 
3
  # PHP/PHP.INI HANDLER/CACHE CODE
4
  # Use BPS Custom Code to add php/php.ini Handler and Cache htaccess code and to save it permanently.
1
+ # BULLETPROOF 6.3 SECURE .HTACCESS
2
 
3
  # PHP/PHP.INI HANDLER/CACHE CODE
4
  # Use BPS Custom Code to add php/php.ini Handler and Cache htaccess code and to save it permanently.
admin/htaccess/wpadmin-secure.htaccess CHANGED
@@ -1,4 +1,4 @@
1
- # BULLETPROOF 6.2 WP-ADMIN SECURE .HTACCESS
2
 
3
  # DO NOT ADD URL REWRITING IN THIS FILE OR WORDPRESS WILL BREAK
4
  # RewriteRule ^(.*)$ - [F] works in /wp-admin without breaking WordPress
1
+ # BULLETPROOF 6.3 WP-ADMIN SECURE .HTACCESS
2
 
3
  # DO NOT ADD URL REWRITING IN THIS FILE OR WORDPRESS WILL BREAK
4
  # RewriteRule ^(.*)$ - [F] works in /wp-admin without breaking WordPress
admin/includes/admin.php CHANGED
@@ -374,8 +374,14 @@ register_setting('bulletproof_security_options_fsp', 'bulletproof_security_optio
374
  $bps_mu_tools_master_file = WP_PLUGIN_DIR . '/bulletproof-security/admin/htaccess/bps-mu-tools.php';
375
  $bps_mu_tools_muplugins_file = WP_CONTENT_DIR . '/mu-plugins/bps-mu-tools.php';
376
 
377
- if ( is_dir( WP_CONTENT_DIR . '/mu-plugins' ) && ! file_exists($bps_mu_tools_muplugins_file) && ! file_exists($BPS_MU_tools_file) ) {
378
- copy($bps_mu_tools_master_file, $bps_mu_tools_muplugins_file);
 
 
 
 
 
 
379
  }
380
 
381
  $bps_autofix_options = 'bulletproof_security_options_wizard_autofix';
374
  $bps_mu_tools_master_file = WP_PLUGIN_DIR . '/bulletproof-security/admin/htaccess/bps-mu-tools.php';
375
  $bps_mu_tools_muplugins_file = WP_CONTENT_DIR . '/mu-plugins/bps-mu-tools.php';
376
 
377
+ $GDMWoptions = get_option('bulletproof_security_options_GDMW');
378
+ $bps_gdmw_hosting = ! isset($GDMWoptions['bps_gdmw_hosting']) ? '' : $GDMWoptions['bps_gdmw_hosting'];
379
+
380
+ if ( $bps_gdmw_hosting == '' || $bps_gdmw_hosting == 'no' ) {
381
+
382
+ if ( is_dir( WP_CONTENT_DIR . '/mu-plugins' ) && ! file_exists($bps_mu_tools_muplugins_file) && ! file_exists($BPS_MU_tools_file) ) {
383
+ copy($bps_mu_tools_master_file, $bps_mu_tools_muplugins_file);
384
+ }
385
  }
386
 
387
  $bps_autofix_options = 'bulletproof_security_options_wizard_autofix';
admin/wizard/pwizard-autofix.php CHANGED
@@ -2209,8 +2209,120 @@ RewriteRule ^(.*)$ - [F]
2209
  $r9 = array();
2210
  }
2211
 
2212
- $pattern_array = array_merge($p1, $p2, $p3, $p4, $p5, $p6, $p7, $p8, $p9);
2213
- $replace_array = array_merge($r1, $r2, $r3, $r4, $r5, $r6, $r7, $r8, $r9);
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
2214
 
2215
  if ( $CC_Options_wpadmin['bps_customcode_bpsqse_wpa'] != '' ) {
2216
  $bps_customcode_bpsqse_replace = preg_replace($pattern_array, $replace_array, $bps_customcode_bpsqse_array);
@@ -2231,7 +2343,7 @@ RewriteRule ^(.*)$ - [F]
2231
  update_option('bulletproof_security_options_customcode_WPA', $wpadmin_CC_Options);
2232
  }
2233
 
2234
- $success_array = array($content_egg_fix, $event_espresso_fix, $owa_plugin_fix, $uberGrid_fix, $jetpack_fix, $restrict_content_pro_fix, $link_whisper_fix, $link_whisper_premium_fix, $convert_pro_fix);
2235
 
2236
  foreach ( $success_array as $successMessage ) {
2237
 
2209
  $r9 = array();
2210
  }
2211
 
2212
+ ## WP Mail SMTP Plugin: whitelist rules
2213
+ $wp_mail_smtp = 'wp-mail-smtp/wp_mail_smtp.php';
2214
+ $wp_mail_smtp_active = in_array( $wp_mail_smtp, apply_filters('active_plugins', get_option('active_plugins')));
2215
+ $wp_mail_smtp_fix = '';
2216
+
2217
+ if ( $wp_mail_smtp_active == 1 || is_plugin_active_for_network( $wp_mail_smtp ) ) {
2218
+ $wp_mail_smtp_fix = __('WP Mail SMTP Plugin wp-admin BPSQSE AutoWhitelist successful', 'bulletproof-security');
2219
+
2220
+ $p10 = array('/RewriteCond\s%\{QUERY_STRING}\s\[a-zA-Z0-9_\]=\(http\|https\):\/\/\s\[NC,OR\]/', '/RewriteCond\s%\{QUERY_STRING\}\s\[a-zA-Z0-9_\]=\/\(\[a-z0-9_\.\]\/\/\?\)\+\s\[NC,OR\]/', '/RewriteCond\s%\{QUERY_STRING\}\s\(http\|https\)\\\:\s\[NC,OR\]/');
2221
+ $r10 = array("# BPS AutoWhitelist QS5: WP Mail SMTP Plugin", "# BPS AutoWhitelist QS6: WP Mail SMTP Plugin", "# BPS AutoWhitelist QS7: WP Mail SMTP Plugin");
2222
+
2223
+ } else {
2224
+ $p10 = array();
2225
+ $r10 = array();
2226
+ }
2227
+
2228
+ ## Gmail SMTP Plugin: whitelist rules
2229
+ $gmail_smtp = 'gmail-smtp/main.php';
2230
+ $gmail_smtp_active = in_array( $gmail_smtp, apply_filters('active_plugins', get_option('active_plugins')));
2231
+ $gmail_smtp_fix = '';
2232
+
2233
+ if ( $gmail_smtp_active == 1 || is_plugin_active_for_network( $gmail_smtp ) ) {
2234
+ $gmail_smtp_fix = __('Gmail SMTP Plugin wp-admin BPSQSE AutoWhitelist successful', 'bulletproof-security');
2235
+
2236
+ $p11 = array('/RewriteCond\s%\{QUERY_STRING}\s\[a-zA-Z0-9_\]=\(http\|https\):\/\/\s\[NC,OR\]/', '/RewriteCond\s%\{QUERY_STRING\}\s\[a-zA-Z0-9_\]=\/\(\[a-z0-9_\.\]\/\/\?\)\+\s\[NC,OR\]/', '/RewriteCond\s%\{QUERY_STRING\}\s\(http\|https\)\\\:\s\[NC,OR\]/');
2237
+ $r11 = array("# BPS AutoWhitelist QS5: Gmail SMTP Plugin", "# BPS AutoWhitelist QS6: Gmail SMTP Plugin", "# BPS AutoWhitelist QS7: Gmail SMTP Plugin");
2238
+
2239
+ } else {
2240
+ $p11 = array();
2241
+ $r11 = array();
2242
+ }
2243
+
2244
+ ## Bit Integrations Plugin: whitelist rules
2245
+ $bit_integrations = 'bit-integrations/bitwpfi.php';
2246
+ $bit_integrations_active = in_array( $bit_integrations, apply_filters('active_plugins', get_option('active_plugins')));
2247
+ $bit_integrations_fix = '';
2248
+
2249
+ if ( $bit_integrations_active == 1 || is_plugin_active_for_network( $bit_integrations ) ) {
2250
+ $bit_integrations_fix = __('Bit Integrations Plugin wp-admin BPSQSE AutoWhitelist successful', 'bulletproof-security');
2251
+
2252
+ $p12 = array('/RewriteCond\s%\{QUERY_STRING}\s\[a-zA-Z0-9_\]=\(http\|https\):\/\/\s\[NC,OR\]/', '/RewriteCond\s%\{QUERY_STRING\}\s\[a-zA-Z0-9_\]=\/\(\[a-z0-9_\.\]\/\/\?\)\+\s\[NC,OR\]/', '/RewriteCond\s%\{QUERY_STRING\}\s\(http\|https\)\\\:\s\[NC,OR\]/');
2253
+ $r12 = array("# BPS AutoWhitelist QS5: Bit Integrations Plugin", "# BPS AutoWhitelist QS6: Bit Integrations Plugin", "# BPS AutoWhitelist QS7: Bit Integrations Plugin");
2254
+
2255
+ } else {
2256
+ $p12 = array();
2257
+ $r12 = array();
2258
+ }
2259
+
2260
+ ## Piotnetforms Plugin: whitelist rules
2261
+ $piotnetforms = 'piotnetforms/piotnetforms.php';
2262
+ $piotnetforms_active = in_array( $piotnetforms, apply_filters('active_plugins', get_option('active_plugins')));
2263
+ $piotnetforms_fix = '';
2264
+
2265
+ if ( $piotnetforms_active == 1 || is_plugin_active_for_network( $piotnetforms ) ) {
2266
+ $piotnetforms_fix = __('Piotnetforms Plugin wp-admin BPSQSE AutoWhitelist successful', 'bulletproof-security');
2267
+
2268
+ $p13 = array('/RewriteCond\s%\{QUERY_STRING}\s\[a-zA-Z0-9_\]=\(http\|https\):\/\/\s\[NC,OR\]/', '/RewriteCond\s%\{QUERY_STRING\}\s\[a-zA-Z0-9_\]=\/\(\[a-z0-9_\.\]\/\/\?\)\+\s\[NC,OR\]/', '/RewriteCond\s%\{QUERY_STRING\}\s\(http\|https\)\\\:\s\[NC,OR\]/');
2269
+ $r13 = array("# BPS AutoWhitelist QS5: Piotnetforms Plugin", "# BPS AutoWhitelist QS6: Piotnetforms Plugin", "# BPS AutoWhitelist QS7: Piotnetforms Plugin");
2270
+
2271
+ } else {
2272
+ $p13 = array();
2273
+ $r13 = array();
2274
+ }
2275
+
2276
+ ## Post SMTP Mailer Plugin: whitelist rules
2277
+ $post_smtp_mailer = 'post-smtp/postman-smtp.php';
2278
+ $post_smtp_mailer_active = in_array( $post_smtp_mailer, apply_filters('active_plugins', get_option('active_plugins')));
2279
+ $post_smtp_mailer_fix = '';
2280
+
2281
+ if ( $post_smtp_mailer_active == 1 || is_plugin_active_for_network( $post_smtp_mailer ) ) {
2282
+ $post_smtp_mailer_fix = __('Post SMTP Mailer Plugin wp-admin BPSQSE AutoWhitelist successful', 'bulletproof-security');
2283
+
2284
+ $p14 = array('/RewriteCond\s%\{QUERY_STRING}\s\[a-zA-Z0-9_\]=\(http\|https\):\/\/\s\[NC,OR\]/', '/RewriteCond\s%\{QUERY_STRING\}\s\[a-zA-Z0-9_\]=\/\(\[a-z0-9_\.\]\/\/\?\)\+\s\[NC,OR\]/', '/RewriteCond\s%\{QUERY_STRING\}\s\(http\|https\)\\\:\s\[NC,OR\]/');
2285
+ $r14 = array("# BPS AutoWhitelist QS5: Post SMTP Mailer Plugin", "# BPS AutoWhitelist QS6: Post SMTP Mailer Plugin", "# BPS AutoWhitelist QS7: Post SMTP Mailer Plugin");
2286
+
2287
+ } else {
2288
+ $p14 = array();
2289
+ $r14 = array();
2290
+ }
2291
+
2292
+ ## Product Feed Manager for WooCommerce Plugin: whitelist rules
2293
+ $product_feed_manager = 'best-woocommerce-feed/rex-product-feed.php';
2294
+ $product_feed_manager_active = in_array( $product_feed_manager, apply_filters('active_plugins', get_option('active_plugins')));
2295
+ $product_feed_manager_fix = '';
2296
+
2297
+ if ( $product_feed_manager_active == 1 || is_plugin_active_for_network( $product_feed_manager ) ) {
2298
+ $product_feed_manager_fix = __('Product Feed Manager for WooCommerce Plugin wp-admin BPSQSE AutoWhitelist successful', 'bulletproof-security');
2299
+
2300
+ $p15 = array('/RewriteCond\s%\{QUERY_STRING}\s\[a-zA-Z0-9_\]=\(http\|https\):\/\/\s\[NC,OR\]/', '/RewriteCond\s%\{QUERY_STRING\}\s\[a-zA-Z0-9_\]=\/\(\[a-z0-9_\.\]\/\/\?\)\+\s\[NC,OR\]/', '/RewriteCond\s%\{QUERY_STRING\}\s\(http\|https\)\\\:\s\[NC,OR\]/');
2301
+ $r15 = array("# BPS AutoWhitelist QS5: Product Feed Manager for WooCommerce Plugin", "# BPS AutoWhitelist QS6: Product Feed Manager for WooCommerce Plugin", "# BPS AutoWhitelist QS7: Product Feed Manager for WooCommerce Plugin");
2302
+
2303
+ } else {
2304
+ $p15 = array();
2305
+ $r15 = array();
2306
+ }
2307
+
2308
+ ## Product Feed Manager for WooCommerce Pro Plugin: whitelist rules
2309
+ $product_feed_manager_pro = 'best-woocommerce-feed-pro/rex-product-feed-pro.php';
2310
+ $product_feed_manager_pro_active = in_array( $product_feed_manager_pro, apply_filters('active_plugins', get_option('active_plugins')));
2311
+ $product_feed_manager_pro_fix = '';
2312
+
2313
+ if ( $product_feed_manager_pro_active == 1 || is_plugin_active_for_network( $product_feed_manager_pro ) ) {
2314
+ $product_feed_manager_pro_fix = __('Product Feed Manager for WooCommerce Plugin wp-admin BPSQSE AutoWhitelist successful', 'bulletproof-security');
2315
+
2316
+ $p16 = array('/RewriteCond\s%\{QUERY_STRING}\s\[a-zA-Z0-9_\]=\(http\|https\):\/\/\s\[NC,OR\]/', '/RewriteCond\s%\{QUERY_STRING\}\s\[a-zA-Z0-9_\]=\/\(\[a-z0-9_\.\]\/\/\?\)\+\s\[NC,OR\]/', '/RewriteCond\s%\{QUERY_STRING\}\s\(http\|https\)\\\:\s\[NC,OR\]/');
2317
+ $r16 = array("# BPS AutoWhitelist QS5: Product Feed Manager for WooCommerce Pro Plugin", "# BPS AutoWhitelist QS6: Product Feed Manager for WooCommerce Pro Plugin", "# BPS AutoWhitelist QS7: Product Feed Manager for WooCommerce Pro Plugin");
2318
+
2319
+ } else {
2320
+ $p16 = array();
2321
+ $r16 = array();
2322
+ }
2323
+
2324
+ $pattern_array = array_merge($p1, $p2, $p3, $p4, $p5, $p6, $p7, $p8, $p9, $p10, $p11, $p12, $p13, $p14, $p15, $p16);
2325
+ $replace_array = array_merge($r1, $r2, $r3, $r4, $r5, $r6, $r7, $r8, $r9, $r10, $r11, $r12, $r13, $r14, $r15, $r16);
2326
 
2327
  if ( $CC_Options_wpadmin['bps_customcode_bpsqse_wpa'] != '' ) {
2328
  $bps_customcode_bpsqse_replace = preg_replace($pattern_array, $replace_array, $bps_customcode_bpsqse_array);
2343
  update_option('bulletproof_security_options_customcode_WPA', $wpadmin_CC_Options);
2344
  }
2345
 
2346
+ $success_array = array($content_egg_fix, $event_espresso_fix, $owa_plugin_fix, $uberGrid_fix, $jetpack_fix, $restrict_content_pro_fix, $link_whisper_fix, $link_whisper_premium_fix, $convert_pro_fix, $wp_mail_smtp_fix, $gmail_smtp_fix, $bit_integrations_fix, $piotnetforms_fix, $post_smtp_mailer_fix, $product_feed_manager_fix, $product_feed_manager_pro_fix);
2347
 
2348
  foreach ( $success_array as $successMessage ) {
2349
 
admin/wizard/wizard-functions.php CHANGED
@@ -673,7 +673,7 @@ function bpsSetupWizardCreateWpadminHtaccess() {
673
 
674
  $bpsSuccessMessageSec = '<font color="green"><strong>'.__('The wpadmin-secure.htaccess wp-admin Master htaccess file was created successfully.', 'bulletproof-security').'<br>'.__('wp-admin Folder BulletProof Mode activated successfully.', 'bulletproof-security').'</strong></font><br>';
675
 
676
- $bpsFailMessageSec = '<font color="#fb0101"><strong>'.__('Error: The wpadmin-secure.htaccess wp-admin Master htaccess file and wp-admin .htaccess file cannot be created. wp-admin Folder BulletProof Mode has NOT been activated.', 'bulletproof-security').'</strong></font><br><strong>'.__('If your Server configuration is DSO you must first make some one-time manual changes to your website before running the Setup Wizard. Please click this Forum Link for instructions: ', 'bulletproof-security').' <a href="https://forum.ait-pro.com/forums/topic/dso-setup-steps/" target="_blank" title="Link opens in a new Browser window">'.__('DSO Setup Steps', 'bulletproof-security').'</a></strong><br>';
677
 
678
  $BPS_wpadmin_Options = get_option('bulletproof_security_options_htaccess_res');
679
  $GDMW_options = get_option('bulletproof_security_options_GDMW');
673
 
674
  $bpsSuccessMessageSec = '<font color="green"><strong>'.__('The wpadmin-secure.htaccess wp-admin Master htaccess file was created successfully.', 'bulletproof-security').'<br>'.__('wp-admin Folder BulletProof Mode activated successfully.', 'bulletproof-security').'</strong></font><br>';
675
 
676
+ $bpsFailMessageSec = '<font color="#fb0101"><strong>'.__('Error: The wpadmin-secure.htaccess wp-admin Master htaccess file and wp-admin .htaccess file cannot be created. wp-admin Folder BulletProof Mode has NOT been activated.', 'bulletproof-security').'</strong></font><br><strong>'.__('If you have Managed WordPress Hosting then go to the Setup Wizard Options page > Go Daddy Managed WordPress Hosting (GDMW) > change the option setting to Yes and run the Setup Wizard again. If your Server configuration is DSO you must first make some one-time manual changes to your website before running the Setup Wizard. Please click this Forum Link for instructions: ', 'bulletproof-security').' <a href="https://forum.ait-pro.com/forums/topic/dso-setup-steps/" target="_blank" title="Link opens in a new Browser window">'.__('DSO Setup Steps', 'bulletproof-security').'</a></strong><br>';
677
 
678
  $BPS_wpadmin_Options = get_option('bulletproof_security_options_htaccess_res');
679
  $GDMW_options = get_option('bulletproof_security_options_GDMW');
admin/wizard/wizard.php CHANGED
@@ -708,8 +708,8 @@ $HFiles_options = get_option('bulletproof_security_options_htaccess_files');
708
 
709
  $bps_email_options = get_option('bulletproof_security_options_email');
710
 
711
- $bps_email_options1 = ! isset($bps_email_options['bps_send_email_to']) ? $admin_email : $bps_email_options['bps_send_email_to'];
712
- $bps_email_options2 = ! isset($bps_email_options['bps_send_email_from']) ? $admin_email : $bps_email_options['bps_send_email_from'];
713
  $bps_email_options3 = ! isset($bps_email_options['bps_send_email_cc']) ? '' : $bps_email_options['bps_send_email_cc'];
714
  $bps_email_options4 = ! isset($bps_email_options['bps_send_email_bcc']) ? '' : $bps_email_options['bps_send_email_bcc'];
715
  $bps_email_options5 = ! isset($bps_email_options['bps_login_security_email']) ? 'lockoutOnly' : $bps_email_options['bps_login_security_email'];
708
 
709
  $bps_email_options = get_option('bulletproof_security_options_email');
710
 
711
+ $bps_email_options1 = ! empty($bps_email_options['bps_send_email_to']) ? $bps_email_options['bps_send_email_to'] : $admin_email;
712
+ $bps_email_options2 = ! empty($bps_email_options['bps_send_email_from']) ? $bps_email_options['bps_send_email_from'] : $admin_email;
713
  $bps_email_options3 = ! isset($bps_email_options['bps_send_email_cc']) ? '' : $bps_email_options['bps_send_email_cc'];
714
  $bps_email_options4 = ! isset($bps_email_options['bps_send_email_bcc']) ? '' : $bps_email_options['bps_send_email_bcc'];
715
  $bps_email_options5 = ! isset($bps_email_options['bps_login_security_email']) ? 'lockoutOnly' : $bps_email_options['bps_login_security_email'];
bulletproof-security.php CHANGED
@@ -5,7 +5,7 @@ Plugin URI: https://forum.ait-pro.com/read-me-first/
5
  Text Domain: bulletproof-security
6
  Domain Path: /languages/
7
  Description: <strong>Feature Highlights:</strong> Setup Wizard &bull; MScan Malware Scanner &bull; .htaccess Website Security Protection (Firewalls) &bull; Security Logging|HTTP Error Logging &bull; DB Backup &bull; DB Table Prefix Changer &bull; Login Security & Monitoring &bull; JTC-Lite Login Form Bot Lockout Protection &bull; Idle Session Logout (ISL) &bull; Auth Cookie Expiration (ACE) &bull; System Info: Extensive System, Server and Security Status Information &bull; FrontEnd|BackEnd Maintenance Mode &bull; WP Automatic Update Options (BPS MU Tools must-use plugin) &bull; Force Strong Passwords &bull; Email Alerts When New Plugins And Themes Are Available.
8
- Version: 6.2
9
  Author: AITpro Website Security
10
  Author URI: https://forum.ait-pro.com/read-me-first/
11
  */
@@ -33,9 +33,9 @@ Author URI: https://forum.ait-pro.com/read-me-first/
33
  // and cannot access the global variables within functions in BPS. Luckily this does not break BPS or WordPress in any way and PHP.net states this is technically not an error.
34
  global $bps_last_version, $bps_version, $bps_footer, $aitpro_bullet, $bps_topDiv, $bps_bottomDiv, $bpsPro_remote_addr, $bpsPro_http_client_ip, $bpsPro_http_forwarded, $bpsPro_http_x_forwarded_for, $bpsPro_http_x_cluster_client_ip, $bps_wpcontent_dir, $bps_plugin_dir, $plugin_hashes, $theme_hashes;
35
 
36
- define( 'BULLETPROOF_VERSION', '6.2' );
37
- $bps_last_version = '6.1';
38
- $bps_version = '6.2';
39
  $bps_footer = '<div id="AITpro-link">' . __('BulletProof Security ', 'bulletproof-security') . esc_html($bps_version) . __(' Plugin by ', 'bulletproof-security') . '<a href="'.esc_url('https://www.ait-pro.com/').'" target="_blank" title="AITpro Website Security">' . __( 'AITpro Website Security', 'bulletproof-security') . '</a></div>';
40
  $aitpro_bullet = '<img src="'.plugins_url('/bulletproof-security/admin/images/aitpro-bullet.png').'" style="padding:0px 3px 0px 3px;" />';
41
  // Top div & bottom div
5
  Text Domain: bulletproof-security
6
  Domain Path: /languages/
7
  Description: <strong>Feature Highlights:</strong> Setup Wizard &bull; MScan Malware Scanner &bull; .htaccess Website Security Protection (Firewalls) &bull; Security Logging|HTTP Error Logging &bull; DB Backup &bull; DB Table Prefix Changer &bull; Login Security & Monitoring &bull; JTC-Lite Login Form Bot Lockout Protection &bull; Idle Session Logout (ISL) &bull; Auth Cookie Expiration (ACE) &bull; System Info: Extensive System, Server and Security Status Information &bull; FrontEnd|BackEnd Maintenance Mode &bull; WP Automatic Update Options (BPS MU Tools must-use plugin) &bull; Force Strong Passwords &bull; Email Alerts When New Plugins And Themes Are Available.
8
+ Version: 6.3
9
  Author: AITpro Website Security
10
  Author URI: https://forum.ait-pro.com/read-me-first/
11
  */
33
  // and cannot access the global variables within functions in BPS. Luckily this does not break BPS or WordPress in any way and PHP.net states this is technically not an error.
34
  global $bps_last_version, $bps_version, $bps_footer, $aitpro_bullet, $bps_topDiv, $bps_bottomDiv, $bpsPro_remote_addr, $bpsPro_http_client_ip, $bpsPro_http_forwarded, $bpsPro_http_x_forwarded_for, $bpsPro_http_x_cluster_client_ip, $bps_wpcontent_dir, $bps_plugin_dir, $plugin_hashes, $theme_hashes;
35
 
36
+ define( 'BULLETPROOF_VERSION', '6.3' );
37
+ $bps_last_version = '6.2';
38
+ $bps_version = '6.3';
39
  $bps_footer = '<div id="AITpro-link">' . __('BulletProof Security ', 'bulletproof-security') . esc_html($bps_version) . __(' Plugin by ', 'bulletproof-security') . '<a href="'.esc_url('https://www.ait-pro.com/').'" target="_blank" title="AITpro Website Security">' . __( 'AITpro Website Security', 'bulletproof-security') . '</a></div>';
40
  $aitpro_bullet = '<img src="'.plugins_url('/bulletproof-security/admin/images/aitpro-bullet.png').'" style="padding:0px 3px 0px 3px;" />';
41
  // Top div & bottom div
includes/general-functions.php CHANGED
@@ -1918,8 +1918,8 @@ function bpsPro_new_version_db_options_files_autoupdate() {
1918
  $email_log = get_option('bulletproof_security_options_email');
1919
  $admin_email = get_option('admin_email');
1920
 
1921
- $email_log1 = ! isset($email_log['bps_send_email_to']) ? $admin_email : $email_log['bps_send_email_to'];
1922
- $email_log2 = ! isset($email_log['bps_send_email_from']) ? $admin_email : $email_log['bps_send_email_from'];
1923
  $email_log3 = ! isset($email_log['bps_send_email_cc']) ? '' : $email_log['bps_send_email_cc'];
1924
  $email_log4 = ! isset($email_log['bps_send_email_bcc']) ? '' : $email_log['bps_send_email_bcc'];
1925
  $email_log5 = ! isset($email_log['bps_login_security_email']) ? 'lockoutOnly' : $email_log['bps_login_security_email'];
1918
  $email_log = get_option('bulletproof_security_options_email');
1919
  $admin_email = get_option('admin_email');
1920
 
1921
+ $email_log1 = ! empty($email_log['bps_send_email_to']) ? $email_log['bps_send_email_to'] : $admin_email;
1922
+ $email_log2 = ! empty($email_log['bps_send_email_from']) ? $email_log['bps_send_email_from'] : $admin_email;
1923
  $email_log3 = ! isset($email_log['bps_send_email_cc']) ? '' : $email_log['bps_send_email_cc'];
1924
  $email_log4 = ! isset($email_log['bps_send_email_bcc']) ? '' : $email_log['bps_send_email_bcc'];
1925
  $email_log5 = ! isset($email_log['bps_login_security_email']) ? 'lockoutOnly' : $email_log['bps_login_security_email'];
includes/hidden-plugin-folders-cron.php CHANGED
@@ -10,7 +10,7 @@ if ( ! function_exists ('add_action') ) {
10
  /* Hidden Plugin Folders|Files (HPF) Cron schedules, intervals, function */
11
  /*********************************************************************** */
12
 
13
- add_filter('cron_schedules', 'bpsPro_add_cron_intervals');
14
 
15
  // Add Cron Schedule Intervals - 1, 2, 3, 4, 5, 10, 15, 30, 60 minutes
16
  // Intervals only need to be setup once - other cron jobs can hook into and use these intervals
@@ -68,7 +68,7 @@ function bpsPro_add_cron_intervals($schedules) {
68
  return $schedules;
69
  }
70
 
71
- add_action('bpsPro_HPF_check', 'bpsPro_hidden_plugins_check');
72
 
73
  function bpsPro_schedule_HPF_checks() {
74
 
@@ -88,12 +88,12 @@ function bpsPro_schedule_HPF_checks() {
88
  if ( $bpsCronCheck == 'minutes_5' || $bpsCronCheck == 'minutes_10' || $bpsCronCheck == 'minutes_15' || $bpsCronCheck == 'minutes_30' || $bpsCronCheck == 'minutes_60' || $bpsCronCheck == 'daily' ) {
89
  wp_clear_scheduled_hook('bpsPro_HPF_check');
90
  }
91
-
92
  if ( ! wp_next_scheduled( 'bpsPro_HPF_check' ) ) {
93
  wp_schedule_event( time(), 'minutes_1', 'bpsPro_HPF_check');
94
  }
95
  }
96
-
97
  if ( $options['bps_hidden_plugins_cron_frequency'] == '5' ) {
98
  if ( $bpsCronCheck == 'minutes_1' || $bpsCronCheck == 'minutes_10' || $bpsCronCheck == 'minutes_15' || $bpsCronCheck == 'minutes_30' || $bpsCronCheck == 'minutes_60' || $bpsCronCheck == 'daily' ) {
99
  wp_clear_scheduled_hook('bpsPro_HPF_check');
@@ -153,8 +153,8 @@ function bpsPro_schedule_HPF_checks() {
153
  wp_schedule_event( time(), 'daily', 'bpsPro_HPF_check' );
154
  }
155
  }
156
-
157
- } elseif ( isset($options['bps_hidden_plugins_cron']) && $options['bps_hidden_plugins_cron'] == 'Off' ) {
158
  wp_clear_scheduled_hook('bpsPro_HPF_check');
159
  }
160
  }
@@ -162,10 +162,12 @@ function bpsPro_schedule_HPF_checks() {
162
  add_action('init', 'bpsPro_schedule_HPF_checks');
163
 
164
  function bpsPro_hidden_plugins_check() {
 
 
165
 
166
  $HPF_options = get_option('bulletproof_security_options_hpf_cron');
167
 
168
- if ( isset($HPF_options['bps_hidden_plugins_cron']) && $HPF_options['bps_hidden_plugins_cron'] == 'Off' || ! get_option('bulletproof_security_options_hpf_cron' || is_multisite() && $blog_id != 1 ) ) {
169
  exit();
170
  }
171
 
@@ -175,7 +177,7 @@ function bpsPro_hidden_plugins_check() {
175
  $HPF_options = get_option('bulletproof_security_options_hpf_cron');
176
  // Note: This simply handles displaying a Dashboard alert or not based on the alert value == display_alert.
177
  if ( isset($HPF_options['bps_hidden_plugins_cron_alert']) && $HPF_options['bps_hidden_plugins_cron_alert'] == 'display_alert' ) {
178
-
179
  if ( is_multisite() && $blog_id != 1 ) {
180
  // do nothing
181
  } else {
@@ -246,83 +248,85 @@ function bpsPro_hidden_plugins_check_alert() {
246
  // Replace wp-content/ = plugins
247
  $plugins_dir_name = str_replace( $bps_wpcontent_dir . '/', "", $bps_plugin_dir );
248
  $pre_background_image_url = site_url( '/wp-content/plugins/bulletproof-security/admin/images/pre_bg.png' );
249
-
250
  foreach ( $iterator as $files ) {
251
 
252
- if ( $files->isFile() ) {
253
-
254
- // only search files in the root /plugins/ folder
255
- if ( ! preg_match( '/\/'.$plugins_dir_name.'(\\\|\/).*(\\\|\/)/', $files ) ) {
256
 
257
- if ( file_exists($hello_dolly) ) {
258
- $check_string_hd = file_get_contents($hello_dolly);
259
 
260
- if ( preg_match( '/\/'.$plugins_dir_name.'(\\\|\/)hello\.php/', $files ) && ! strpos( $check_string_hd, "Plugin Name: Hello Dolly" ) && ! in_array( $files->getFilename(), $hidden_plugins_array ) ) {
 
261
 
262
- if ( $hpf_alert_submit != true ) {
263
- $alert1 = 'alert';
264
- echo $bps_topDiv;
265
- $text = '<strong><font color="#fb0101">'.__('BPS Hidden Plugin Folder|Files (HPF) Alert', 'bulletproof-security').'</font><br>'.__('A non-standard WP hello.php file (Hello Dolly Plugin) was found in your /plugins/ folder and it is hidden/not displayed on the WordPress Plugins page. Most likely the hello.php file is a hacker file or contains hacker code. If you have modified the hello.php file and/or it is safe to ignore this file you can ignore this file check by adding the HPF Ignore Rule shown below in the ', 'bulletproof-security').'<a href="'.admin_url( 'admin.php?page=bulletproof-security/admin/core/core.php#UAEG-Menu-Link' ).'">'.__('Ignore Hidden Plugin Folders & Files', 'bulletproof-security').'</a>'.__(' textarea box option to make this Alert go away.', 'bulletproof-security').'</strong><br><strong>'.__('File Path: ', 'bulletproof-security').'</strong>'.$files->getPathname().'<br><strong>'.__('HPF Ignore Rule: ', 'bulletproof-security').'</strong>'.basename($files->getPathname()).'<br><strong>'.__('Last Modified Time: ', 'bulletproof-security').'</strong>'.date_i18n( get_option('date_format'), $files->getMTime() + $gmt_offset) . ' @ ' . date_i18n(get_option('time_format'), $files->getMTime() + $gmt_offset).'<br><strong>'.__('Last Change Time: ', 'bulletproof-security').'</strong>'.date_i18n( get_option('date_format'), $files->getCTime() + $gmt_offset) . ' @ ' . date_i18n(get_option('time_format'), $files->getCTime() + $gmt_offset).'<br><strong>'.__('Last Access Time: ', 'bulletproof-security').'</strong>'.date_i18n( get_option('date_format'), $files->getATime() + $gmt_offset) . ' @ ' . date_i18n(get_option('time_format'), $files->getATime() + $gmt_offset).'<br><strong>'.__('File Contents: ', 'bulletproof-security').'</strong><pre id="shown" style="overflow:auto;white-space:pre-wrap;height:100px;width:60%;margin:0px;padding:5px;background:#fff url('.$pre_background_image_url.') top left repeat;border:1px solid #999;color:#000;display:block;font-family:"Courier New", Courier, monospace;font-size:11px;line-height:14px;">'.esc_html($check_string_hd).'</pre>';
266
- echo $text;
267
- echo $bps_bottomDiv;
 
 
 
268
  }
269
  }
270
- }
271
-
272
- if ( file_exists($plugins_index) ) {
273
- $check_string_index = file_get_contents($plugins_index);
274
-
275
- if ( preg_match( '/\/'.$plugins_dir_name.'(\\\|\/)index\.php/', $files ) && preg_match( '/[\=\%\{\}\(\)\,\;@\'\"\&\+\!]/', $check_string_index ) && ! in_array( $files->getFilename(), $hidden_plugins_array ) ) {
276
 
277
- if ( $hpf_alert_submit != true ) {
278
- $alert2 = 'alert';
279
- echo $bps_topDiv;
280
- $text = '<strong><font color="#fb0101">'.__('BPS Hidden Plugin Folder|Files (HPF) Alert', 'bulletproof-security').'</font><br>'.__('A non-standard WP index.php file found in your /plugins/ folder appears to have been altered/tampered with. Most likely the index.php file is a hacker file or contains hacker code. If you have modified the index.php file and/or it is safe to ignore this file you can ignore this file check by adding the HPF Ignore Rule shown below in the ', 'bulletproof-security').'<a href="'.admin_url( 'admin.php?page=bulletproof-security/admin/core/core.php#UAEG-Menu-Link' ).'">'.__('Ignore Hidden Plugin Folders & Files', 'bulletproof-security').'</a>'.__(' textarea box option to make this Alert go away.', 'bulletproof-security').'</strong><br><strong>'.__('File Path: ', 'bulletproof-security').'</strong>'.$files->getPathname().'<br><strong>'.__('HPF Ignore Rule: ', 'bulletproof-security').'</strong>'.basename($files->getPathname()).'<br><strong>'.__('Last Modified Time: ', 'bulletproof-security').'</strong>'.date_i18n( get_option('date_format'), $files->getMTime() + $gmt_offset) . ' @ ' . date_i18n(get_option('time_format'), $files->getMTime() + $gmt_offset).'<br><strong>'.__('Last Change Time: ', 'bulletproof-security').'</strong>'.date_i18n( get_option('date_format'), $files->getCTime() + $gmt_offset) . ' @ ' . date_i18n(get_option('time_format'), $files->getCTime() + $gmt_offset).'<br><strong>'.__('Last Access Time: ', 'bulletproof-security').'</strong>'.date_i18n( get_option('date_format'), $files->getATime() + $gmt_offset) . ' @ ' . date_i18n(get_option('time_format'), $files->getATime() + $gmt_offset).'<br><strong>'.__('File Contents: ', 'bulletproof-security').'</strong><pre id="shown" style="overflow:auto;white-space:pre-wrap;height:100px;width:60%;margin:0px;padding:5px;background:#fff url('.$pre_background_image_url.') top left repeat;border:1px solid #999;color:#000;display:block;font-family:"Courier New", Courier, monospace;font-size:11px;line-height:14px;">'.esc_html($check_string_index).'</pre>';
281
- echo $text;
282
- echo $bps_bottomDiv;
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
283
  }
284
  }
285
- }
286
-
287
- if ( file_exists($plugins_htaccess) ) {
288
- $check_string_ht = file_get_contents($plugins_htaccess);
289
 
290
- if ( preg_match( '/\/'.$plugins_dir_name.'(\\\|\/)\.htaccess/', $files ) && ! strpos( $check_string_ht, "BULLETPROOF" ) && ! in_array( $files->getFilename(), $hidden_plugins_array ) ) {
 
291
 
 
 
292
  if ( $hpf_alert_submit != true ) {
293
- $alert3 = 'alert';
294
  echo $bps_topDiv;
295
- $text = '<strong><font color="#fb0101">'.__('BPS Hidden Plugin Folder|Files (HPF) Alert', 'bulletproof-security').'</font><br>'.__('An htaccess file was found in your /plugins/ folder and it does not appear to be a BPS htaccess file. Most likely the htaccess file is a hacker file or contains hacker code. If you have modified the htaccess file and/or it is safe to ignore this file you can ignore this file check by adding the HPF Ignore Rule shown below in the ', 'bulletproof-security').'<a href="'.admin_url( 'admin.php?page=bulletproof-security/admin/core/core.php#UAEG-Menu-Link' ).'">'.__('Ignore Hidden Plugin Folders & Files', 'bulletproof-security').'</a>'.__(' textarea box option to make this Alert go away.', 'bulletproof-security').'</strong><br><strong>'.__('File Path: ', 'bulletproof-security').'</strong>'.$files->getPathname().'<br><strong>'.__('HPF Ignore Rule: ', 'bulletproof-security').'</strong>'.basename($files->getPathname()).'<br><strong>'.__('Last Modified Time: ', 'bulletproof-security').'</strong>'.date_i18n( get_option('date_format'), $files->getMTime() + $gmt_offset) . ' @ ' . date_i18n(get_option('time_format'), $files->getMTime() + $gmt_offset).'<br><strong>'.__('Last Change Time: ', 'bulletproof-security').'</strong>'.date_i18n( get_option('date_format'), $files->getCTime() + $gmt_offset) . ' @ ' . date_i18n(get_option('time_format'), $files->getCTime() + $gmt_offset).'<br><strong>'.__('Last Access Time: ', 'bulletproof-security').'</strong>'.date_i18n( get_option('date_format'), $files->getATime() + $gmt_offset) . ' @ ' . date_i18n(get_option('time_format'), $files->getATime() + $gmt_offset).'<br><strong>'.__('File Contents: ', 'bulletproof-security').'</strong><pre id="shown" style="overflow:auto;white-space:pre-wrap;height:100px;width:60%;margin:0px;padding:5px;background:#fff url('.$pre_background_image_url.') top left repeat;border:1px solid #999;color:#000;display:block;font-family:"Courier New", Courier, monospace;font-size:11px;line-height:14px;">'.esc_html($check_string_ht).'</pre>';
296
  echo $text;
297
  echo $bps_bottomDiv;
298
  }
299
  }
300
  }
 
 
 
 
 
 
301
 
302
- // list any other files found in the /plugins/ folder except for ignored file names.
303
- if ( ! preg_match( '/\/'.$plugins_dir_name.'(\\\|\/)hello\.php/', $files ) && ! preg_match( '/\/'.$plugins_dir_name.'(\\\|\/)index\.php/', $files ) && ! preg_match( '/\/'.$plugins_dir_name.'(\\\|\/)\.htaccess/', $files ) && ! in_array( $files->getFilename(), $hidden_plugins_array ) ) {
304
-
305
- $file_contents = file_get_contents($files->getPathname());
306
-
307
- if ( $hpf_alert_submit != true ) {
308
- $alert4 = 'alert';
309
- echo $bps_topDiv;
310
- $text = '<strong><font color="#fb0101">'.__('BPS Hidden Plugin Folder|Files (HPF) Alert', 'bulletproof-security').'</font><br>'.__('An unrecognized/non-standard WP file was found in your /plugins/ folder. This file may be a hacker file or contain hacker code. If you recognize this file and/or it is safe to ignore this file you can ignore this file check by adding the HPF Ignore Rule shown below in the ', 'bulletproof-security').'<a href="'.admin_url( 'admin.php?page=bulletproof-security/admin/core/core.php#UAEG-Menu-Link' ).'">'.__('Ignore Hidden Plugin Folders & Files', 'bulletproof-security').'</a>'.__(' textarea box option to make this Alert go away.', 'bulletproof-security').'</strong><br><strong>'.__('File Path: ', 'bulletproof-security').'</strong>'.$files->getPathname().'<br><strong>'.__('HPF Ignore Rule: ', 'bulletproof-security').'</strong>'.basename($files->getPathname()).'<br><strong>'.__('Last Modified Time: ', 'bulletproof-security').'</strong>'.date_i18n( get_option('date_format'), $files->getMTime() + $gmt_offset) . ' @ ' . date_i18n(get_option('time_format'), $files->getMTime() + $gmt_offset).'<br><strong>'.__('Last Change Time: ', 'bulletproof-security').'</strong>'.date_i18n( get_option('date_format'), $files->getCTime() + $gmt_offset) . ' @ ' . date_i18n(get_option('time_format'), $files->getCTime() + $gmt_offset).'<br><strong>'.__('Last Access Time: ', 'bulletproof-security').'</strong>'.date_i18n( get_option('date_format'), $files->getATime() + $gmt_offset) . ' @ ' . date_i18n(get_option('time_format'), $files->getATime() + $gmt_offset).'<br><strong>'.__('File Contents: ', 'bulletproof-security').'</strong><pre id="shown" style="overflow:auto;white-space:pre-wrap;height:100px;width:60%;margin:0px;padding:5px;background:#fff url('.$pre_background_image_url.') top left repeat;border:1px solid #999;color:#000;display:block;font-family:"Courier New", Courier, monospace;font-size:11px;line-height:14px;">'.esc_html($file_contents).'</pre>';
311
- echo $text;
312
- echo $bps_bottomDiv;
313
- }
314
  }
315
  }
316
- } // end if ( $files->isFile() ) {
317
-
318
- if ( $files->isDir() ) {
319
-
320
- // only return root folders in the root /plugins/ folder and not child subfolders & dir dots
321
- if ( ! preg_match( '/\/'.$plugins_dir_name.'(\\\|\/).*(\\\|\/)/', $files ) && ! preg_match( '/\/'.$plugins_dir_name.'(\\\|\/)(\.|\.\.)/', $files ) ) {
322
-
323
- $dir_plugins_array[] = str_replace( array( '\\', '//' ), "/", $files );
324
- }
325
- }
326
  } // end foreach ( $iterator as $files ) {
327
 
328
  $result = array_diff( $dir_plugins_array, $wp_plugins_array );
@@ -382,7 +386,8 @@ function bpsPro_hidden_plugins_check_alert() {
382
 
383
  // Hidden Plugin Folders|Files (HPF) Email Alert
384
  function bps_smonitor_hpf_email() {
385
- global $wpdb, $blog_id;
 
386
 
387
  if ( is_multisite() && $blog_id != 1 ) {
388
  // do nothing
@@ -409,5 +414,4 @@ global $wpdb, $blog_id;
409
  wp_mail( $bps_email_to, $subject, $message, $headers );
410
  }
411
  }
412
-
413
  ?>
10
  /* Hidden Plugin Folders|Files (HPF) Cron schedules, intervals, function */
11
  /*********************************************************************** */
12
 
13
+ add_action('bpsPro_HPF_check', 'bpsPro_hidden_plugins_check');
14
 
15
  // Add Cron Schedule Intervals - 1, 2, 3, 4, 5, 10, 15, 30, 60 minutes
16
  // Intervals only need to be setup once - other cron jobs can hook into and use these intervals
68
  return $schedules;
69
  }
70
 
71
+ add_filter('cron_schedules', 'bpsPro_add_cron_intervals');
72
 
73
  function bpsPro_schedule_HPF_checks() {
74
 
88
  if ( $bpsCronCheck == 'minutes_5' || $bpsCronCheck == 'minutes_10' || $bpsCronCheck == 'minutes_15' || $bpsCronCheck == 'minutes_30' || $bpsCronCheck == 'minutes_60' || $bpsCronCheck == 'daily' ) {
89
  wp_clear_scheduled_hook('bpsPro_HPF_check');
90
  }
91
+
92
  if ( ! wp_next_scheduled( 'bpsPro_HPF_check' ) ) {
93
  wp_schedule_event( time(), 'minutes_1', 'bpsPro_HPF_check');
94
  }
95
  }
96
+
97
  if ( $options['bps_hidden_plugins_cron_frequency'] == '5' ) {
98
  if ( $bpsCronCheck == 'minutes_1' || $bpsCronCheck == 'minutes_10' || $bpsCronCheck == 'minutes_15' || $bpsCronCheck == 'minutes_30' || $bpsCronCheck == 'minutes_60' || $bpsCronCheck == 'daily' ) {
99
  wp_clear_scheduled_hook('bpsPro_HPF_check');
153
  wp_schedule_event( time(), 'daily', 'bpsPro_HPF_check' );
154
  }
155
  }
156
+
157
+ } elseif ( $options['bps_hidden_plugins_cron'] == 'Off' ) {
158
  wp_clear_scheduled_hook('bpsPro_HPF_check');
159
  }
160
  }
162
  add_action('init', 'bpsPro_schedule_HPF_checks');
163
 
164
  function bpsPro_hidden_plugins_check() {
165
+
166
+ global $blog_id;
167
 
168
  $HPF_options = get_option('bulletproof_security_options_hpf_cron');
169
 
170
+ if ( isset($HPF_options['bps_hidden_plugins_cron']) && $HPF_options['bps_hidden_plugins_cron'] == 'Off' || ! get_option('bulletproof_security_options_hpf_cron') || is_multisite() && $blog_id != 1 ) {
171
  exit();
172
  }
173
 
177
  $HPF_options = get_option('bulletproof_security_options_hpf_cron');
178
  // Note: This simply handles displaying a Dashboard alert or not based on the alert value == display_alert.
179
  if ( isset($HPF_options['bps_hidden_plugins_cron_alert']) && $HPF_options['bps_hidden_plugins_cron_alert'] == 'display_alert' ) {
180
+
181
  if ( is_multisite() && $blog_id != 1 ) {
182
  // do nothing
183
  } else {
248
  // Replace wp-content/ = plugins
249
  $plugins_dir_name = str_replace( $bps_wpcontent_dir . '/', "", $bps_plugin_dir );
250
  $pre_background_image_url = site_url( '/wp-content/plugins/bulletproof-security/admin/images/pre_bg.png' );
251
+
252
  foreach ( $iterator as $files ) {
253
 
254
+ try {
255
+ if ( $files->isFile() && $files->isReadable() ) {
 
 
256
 
257
+ // only search files in the root /plugins/ folder
258
+ if ( ! preg_match( '/\/'.$plugins_dir_name.'(\\\|\/).*(\\\|\/)/', $files ) ) {
259
 
260
+ if ( file_exists($hello_dolly) ) {
261
+ $check_string_hd = file_get_contents($hello_dolly);
262
 
263
+ if ( preg_match( '/\/'.$plugins_dir_name.'(\\\|\/)hello\.php/', $files ) && ! strpos( $check_string_hd, "Plugin Name: Hello Dolly" ) && ! in_array( $files->getFilename(), $hidden_plugins_array ) ) {
264
+
265
+ if ( $hpf_alert_submit != true ) {
266
+ $alert1 = 'alert';
267
+ echo $bps_topDiv;
268
+ $text = '<strong><font color="#fb0101">'.__('BPS Hidden Plugin Folder|Files (HPF) Alert', 'bulletproof-security').'</font><br>'.__('A non-standard WP hello.php file (Hello Dolly Plugin) was found in your /plugins/ folder and it is hidden/not displayed on the WordPress Plugins page. Most likely the hello.php file is a hacker file or contains hacker code. If you have modified the hello.php file and/or it is safe to ignore this file you can ignore this file check by adding the HPF Ignore Rule shown below in the ', 'bulletproof-security').'<a href="'.admin_url( 'admin.php?page=bulletproof-security/admin/core/core.php#UAEG-Menu-Link' ).'">'.__('Ignore Hidden Plugin Folders & Files', 'bulletproof-security').'</a>'.__(' textarea box option to make this Alert go away.', 'bulletproof-security').'</strong><br><strong>'.__('File Path: ', 'bulletproof-security').'</strong>'.$files->getPathname().'<br><strong>'.__('HPF Ignore Rule: ', 'bulletproof-security').'</strong>'.basename($files->getPathname()).'<br><strong>'.__('Last Modified Time: ', 'bulletproof-security').'</strong>'.date_i18n( get_option('date_format'), $files->getMTime() + $gmt_offset) . ' @ ' . date_i18n(get_option('time_format'), $files->getMTime() + $gmt_offset).'<br><strong>'.__('Last Change Time: ', 'bulletproof-security').'</strong>'.date_i18n( get_option('date_format'), $files->getCTime() + $gmt_offset) . ' @ ' . date_i18n(get_option('time_format'), $files->getCTime() + $gmt_offset).'<br><strong>'.__('Last Access Time: ', 'bulletproof-security').'</strong>'.date_i18n( get_option('date_format'), $files->getATime() + $gmt_offset) . ' @ ' . date_i18n(get_option('time_format'), $files->getATime() + $gmt_offset).'<br><strong>'.__('File Contents: ', 'bulletproof-security').'</strong><pre id="shown" style="overflow:auto;white-space:pre-wrap;height:100px;width:60%;margin:0px;padding:5px;background:#fff url('.$pre_background_image_url.') top left repeat;border:1px solid #999;color:#000;display:block;font-family:"Courier New", Courier, monospace;font-size:11px;line-height:14px;">'.esc_html($check_string_hd).'</pre>';
269
+ echo $text;
270
+ echo $bps_bottomDiv;
271
+ }
272
  }
273
  }
274
+
275
+ if ( file_exists($plugins_index) ) {
276
+ $check_string_index = file_get_contents($plugins_index);
 
 
 
277
 
278
+ if ( preg_match( '/\/'.$plugins_dir_name.'(\\\|\/)index\.php/', $files ) && preg_match( '/[\=\%\{\}\(\)\,\;@\'\"\&\+\!]/', $check_string_index ) && ! in_array( $files->getFilename(), $hidden_plugins_array ) ) {
279
+
280
+ if ( $hpf_alert_submit != true ) {
281
+ $alert2 = 'alert';
282
+ echo $bps_topDiv;
283
+ $text = '<strong><font color="#fb0101">'.__('BPS Hidden Plugin Folder|Files (HPF) Alert', 'bulletproof-security').'</font><br>'.__('A non-standard WP index.php file found in your /plugins/ folder appears to have been altered/tampered with. Most likely the index.php file is a hacker file or contains hacker code. If you have modified the index.php file and/or it is safe to ignore this file you can ignore this file check by adding the HPF Ignore Rule shown below in the ', 'bulletproof-security').'<a href="'.admin_url( 'admin.php?page=bulletproof-security/admin/core/core.php#UAEG-Menu-Link' ).'">'.__('Ignore Hidden Plugin Folders & Files', 'bulletproof-security').'</a>'.__(' textarea box option to make this Alert go away.', 'bulletproof-security').'</strong><br><strong>'.__('File Path: ', 'bulletproof-security').'</strong>'.$files->getPathname().'<br><strong>'.__('HPF Ignore Rule: ', 'bulletproof-security').'</strong>'.basename($files->getPathname()).'<br><strong>'.__('Last Modified Time: ', 'bulletproof-security').'</strong>'.date_i18n( get_option('date_format'), $files->getMTime() + $gmt_offset) . ' @ ' . date_i18n(get_option('time_format'), $files->getMTime() + $gmt_offset).'<br><strong>'.__('Last Change Time: ', 'bulletproof-security').'</strong>'.date_i18n( get_option('date_format'), $files->getCTime() + $gmt_offset) . ' @ ' . date_i18n(get_option('time_format'), $files->getCTime() + $gmt_offset).'<br><strong>'.__('Last Access Time: ', 'bulletproof-security').'</strong>'.date_i18n( get_option('date_format'), $files->getATime() + $gmt_offset) . ' @ ' . date_i18n(get_option('time_format'), $files->getATime() + $gmt_offset).'<br><strong>'.__('File Contents: ', 'bulletproof-security').'</strong><pre id="shown" style="overflow:auto;white-space:pre-wrap;height:100px;width:60%;margin:0px;padding:5px;background:#fff url('.$pre_background_image_url.') top left repeat;border:1px solid #999;color:#000;display:block;font-family:"Courier New", Courier, monospace;font-size:11px;line-height:14px;">'.esc_html($check_string_index).'</pre>';
284
+ echo $text;
285
+ echo $bps_bottomDiv;
286
+ }
287
+ }
288
+ }
289
+
290
+ if ( file_exists($plugins_htaccess) ) {
291
+ $check_string_ht = file_get_contents($plugins_htaccess);
292
+
293
+ if ( preg_match( '/\/'.$plugins_dir_name.'(\\\|\/)\.htaccess/', $files ) && ! strpos( $check_string_ht, "BULLETPROOF" ) && ! in_array( $files->getFilename(), $hidden_plugins_array ) ) {
294
+
295
+ if ( $hpf_alert_submit != true ) {
296
+ $alert3 = 'alert';
297
+ echo $bps_topDiv;
298
+ $text = '<strong><font color="#fb0101">'.__('BPS Hidden Plugin Folder|Files (HPF) Alert', 'bulletproof-security').'</font><br>'.__('An htaccess file was found in your /plugins/ folder and it does not appear to be a BPS htaccess file. Most likely the htaccess file is a hacker file or contains hacker code. If you have modified the htaccess file and/or it is safe to ignore this file you can ignore this file check by adding the HPF Ignore Rule shown below in the ', 'bulletproof-security').'<a href="'.admin_url( 'admin.php?page=bulletproof-security/admin/core/core.php#UAEG-Menu-Link' ).'">'.__('Ignore Hidden Plugin Folders & Files', 'bulletproof-security').'</a>'.__(' textarea box option to make this Alert go away.', 'bulletproof-security').'</strong><br><strong>'.__('File Path: ', 'bulletproof-security').'</strong>'.$files->getPathname().'<br><strong>'.__('HPF Ignore Rule: ', 'bulletproof-security').'</strong>'.basename($files->getPathname()).'<br><strong>'.__('Last Modified Time: ', 'bulletproof-security').'</strong>'.date_i18n( get_option('date_format'), $files->getMTime() + $gmt_offset) . ' @ ' . date_i18n(get_option('time_format'), $files->getMTime() + $gmt_offset).'<br><strong>'.__('Last Change Time: ', 'bulletproof-security').'</strong>'.date_i18n( get_option('date_format'), $files->getCTime() + $gmt_offset) . ' @ ' . date_i18n(get_option('time_format'), $files->getCTime() + $gmt_offset).'<br><strong>'.__('Last Access Time: ', 'bulletproof-security').'</strong>'.date_i18n( get_option('date_format'), $files->getATime() + $gmt_offset) . ' @ ' . date_i18n(get_option('time_format'), $files->getATime() + $gmt_offset).'<br><strong>'.__('File Contents: ', 'bulletproof-security').'</strong><pre id="shown" style="overflow:auto;white-space:pre-wrap;height:100px;width:60%;margin:0px;padding:5px;background:#fff url('.$pre_background_image_url.') top left repeat;border:1px solid #999;color:#000;display:block;font-family:"Courier New", Courier, monospace;font-size:11px;line-height:14px;">'.esc_html($check_string_ht).'</pre>';
299
+ echo $text;
300
+ echo $bps_bottomDiv;
301
+ }
302
  }
303
  }
 
 
 
 
304
 
305
+ // list any other files found in the /plugins/ folder except for ignored file names.
306
+ if ( ! preg_match( '/\/'.$plugins_dir_name.'(\\\|\/)hello\.php/', $files ) && ! preg_match( '/\/'.$plugins_dir_name.'(\\\|\/)index\.php/', $files ) && ! preg_match( '/\/'.$plugins_dir_name.'(\\\|\/)\.htaccess/', $files ) && ! in_array( $files->getFilename(), $hidden_plugins_array ) ) {
307
 
308
+ $file_contents = file_get_contents($files->getPathname());
309
+
310
  if ( $hpf_alert_submit != true ) {
311
+ $alert4 = 'alert';
312
  echo $bps_topDiv;
313
+ $text = '<strong><font color="#fb0101">'.__('BPS Hidden Plugin Folder|Files (HPF) Alert', 'bulletproof-security').'</font><br>'.__('An unrecognized/non-standard WP file was found in your /plugins/ folder. This file may be a hacker file or contain hacker code. If you recognize this file and/or it is safe to ignore this file you can ignore this file check by adding the HPF Ignore Rule shown below in the ', 'bulletproof-security').'<a href="'.admin_url( 'admin.php?page=bulletproof-security/admin/core/core.php#UAEG-Menu-Link' ).'">'.__('Ignore Hidden Plugin Folders & Files', 'bulletproof-security').'</a>'.__(' textarea box option to make this Alert go away.', 'bulletproof-security').'</strong><br><strong>'.__('File Path: ', 'bulletproof-security').'</strong>'.$files->getPathname().'<br><strong>'.__('HPF Ignore Rule: ', 'bulletproof-security').'</strong>'.basename($files->getPathname()).'<br><strong>'.__('Last Modified Time: ', 'bulletproof-security').'</strong>'.date_i18n( get_option('date_format'), $files->getMTime() + $gmt_offset) . ' @ ' . date_i18n(get_option('time_format'), $files->getMTime() + $gmt_offset).'<br><strong>'.__('Last Change Time: ', 'bulletproof-security').'</strong>'.date_i18n( get_option('date_format'), $files->getCTime() + $gmt_offset) . ' @ ' . date_i18n(get_option('time_format'), $files->getCTime() + $gmt_offset).'<br><strong>'.__('Last Access Time: ', 'bulletproof-security').'</strong>'.date_i18n( get_option('date_format'), $files->getATime() + $gmt_offset) . ' @ ' . date_i18n(get_option('time_format'), $files->getATime() + $gmt_offset).'<br><strong>'.__('File Contents: ', 'bulletproof-security').'</strong><pre id="shown" style="overflow:auto;white-space:pre-wrap;height:100px;width:60%;margin:0px;padding:5px;background:#fff url('.$pre_background_image_url.') top left repeat;border:1px solid #999;color:#000;display:block;font-family:"Courier New", Courier, monospace;font-size:11px;line-height:14px;">'.esc_html($file_contents).'</pre>';
314
  echo $text;
315
  echo $bps_bottomDiv;
316
  }
317
  }
318
  }
319
+ } // end if ( $files->isFile() ) {
320
+
321
+ if ( $files->isDir() && $files->isReadable() ) {
322
+
323
+ // only return root folders in the root /plugins/ folder and not child subfolders & dir dots
324
+ if ( ! preg_match( '/\/'.$plugins_dir_name.'(\\\|\/).*(\\\|\/)/', $files ) && ! preg_match( '/\/'.$plugins_dir_name.'(\\\|\/)(\.|\.\.)/', $files ) ) {
325
 
326
+ $dir_plugins_array[] = str_replace( array( '\\', '//' ), "/", $files );
 
 
 
 
 
 
 
 
 
 
 
327
  }
328
  }
329
+ } catch (RuntimeException $e) {}
 
 
 
 
 
 
 
 
 
330
  } // end foreach ( $iterator as $files ) {
331
 
332
  $result = array_diff( $dir_plugins_array, $wp_plugins_array );
386
 
387
  // Hidden Plugin Folders|Files (HPF) Email Alert
388
  function bps_smonitor_hpf_email() {
389
+
390
+ global $wpdb, $blog_id;
391
 
392
  if ( is_multisite() && $blog_id != 1 ) {
393
  // do nothing
414
  wp_mail( $bps_email_to, $subject, $message, $headers );
415
  }
416
  }
 
417
  ?>
includes/hud-autofix-whitelist.php CHANGED
@@ -788,6 +788,20 @@ function bpsPro_HUD_autofix_whitelist_check() {
788
  $link_whisper_premium_active = in_array( $link_whisper_premium, apply_filters('active_plugins', get_option('active_plugins')));
789
  $convert_pro = 'convertpro/convertpro.php';
790
  $convert_pro_active = in_array( $convert_pro, apply_filters('active_plugins', get_option('active_plugins')));
 
 
 
 
 
 
 
 
 
 
 
 
 
 
791
 
792
  ## wp-admin BPSQSE RegEx patterns
793
  $marker_wpadmin1 = '/BPS\sAutoWhitelist\sQS1/'; // Primary SQL Injection rule
@@ -855,6 +869,55 @@ function bpsPro_HUD_autofix_whitelist_check() {
855
  $debug_wpadmin_BPSQSE .= __('CC wp-admin Text Box 4: Convert Pro Plugin', 'bulletproof-security').'<br>';
856
  }
857
  }
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
858
 
859
  ## Display Setup Wizard AutoFix WP Dashboard message
860
  if ( $autofix_message == 1 ) {
788
  $link_whisper_premium_active = in_array( $link_whisper_premium, apply_filters('active_plugins', get_option('active_plugins')));
789
  $convert_pro = 'convertpro/convertpro.php';
790
  $convert_pro_active = in_array( $convert_pro, apply_filters('active_plugins', get_option('active_plugins')));
791
+ $wp_mail_smtp = 'wp-mail-smtp/wp_mail_smtp.php';
792
+ $wp_mail_smtp_active = in_array( $wp_mail_smtp, apply_filters('active_plugins', get_option('active_plugins')));
793
+ $gmail_smtp = 'gmail-smtp/main.php';
794
+ $gmail_smtp_active = in_array( $gmail_smtp, apply_filters('active_plugins', get_option('active_plugins')));
795
+ $bit_integrations = 'bit-integrations/bitwpfi.php';
796
+ $bit_integrations_active = in_array( $bit_integrations, apply_filters('active_plugins', get_option('active_plugins')));
797
+ $piotnetforms = 'piotnetforms/piotnetforms.php';
798
+ $piotnetforms_active = in_array( $piotnetforms, apply_filters('active_plugins', get_option('active_plugins')));
799
+ $post_smtp_mailer = 'post-smtp/postman-smtp.php';
800
+ $post_smtp_mailer_active = in_array( $post_smtp_mailer, apply_filters('active_plugins', get_option('active_plugins')));
801
+ $product_feed_manager = 'best-woocommerce-feed/rex-product-feed.php';
802
+ $product_feed_manager_active = in_array( $product_feed_manager, apply_filters('active_plugins', get_option('active_plugins')));
803
+ $product_feed_manager_pro = 'best-woocommerce-feed-pro/rex-product-feed-pro.php';
804
+ $product_feed_manager_pro_active = in_array( $product_feed_manager_pro, apply_filters('active_plugins', get_option('active_plugins')));
805
 
806
  ## wp-admin BPSQSE RegEx patterns
807
  $marker_wpadmin1 = '/BPS\sAutoWhitelist\sQS1/'; // Primary SQL Injection rule
869
  $debug_wpadmin_BPSQSE .= __('CC wp-admin Text Box 4: Convert Pro Plugin', 'bulletproof-security').'<br>';
870
  }
871
  }
872
+ if ( $wp_mail_smtp_active == 1 || is_plugin_active_for_network( $wp_mail_smtp ) ) {
873
+ if ( ! preg_match( $marker_wpadmin5, $bps_customcode_bpsqse_wpa ) || ! preg_match( $marker_wpadmin6, $bps_customcode_bpsqse_wpa )
874
+ || ! preg_match( $marker_wpadmin7, $bps_customcode_bpsqse_wpa ) ) {
875
+ $autofix_message = 1;
876
+ $debug_wpadmin_BPSQSE .= __('CC wp-admin Text Box 4: WP Mail SMTP Plugin', 'bulletproof-security').'<br>';
877
+ }
878
+ }
879
+ if ( $gmail_smtp_active == 1 || is_plugin_active_for_network( $gmail_smtp ) ) {
880
+ if ( ! preg_match( $marker_wpadmin5, $bps_customcode_bpsqse_wpa ) || ! preg_match( $marker_wpadmin6, $bps_customcode_bpsqse_wpa )
881
+ || ! preg_match( $marker_wpadmin7, $bps_customcode_bpsqse_wpa ) ) {
882
+ $autofix_message = 1;
883
+ $debug_wpadmin_BPSQSE .= __('CC wp-admin Text Box 4: Gmail SMTP Plugin', 'bulletproof-security').'<br>';
884
+ }
885
+ }
886
+ if ( $bit_integrations_active == 1 || is_plugin_active_for_network( $bit_integrations ) ) {
887
+ if ( ! preg_match( $marker_wpadmin5, $bps_customcode_bpsqse_wpa ) || ! preg_match( $marker_wpadmin6, $bps_customcode_bpsqse_wpa )
888
+ || ! preg_match( $marker_wpadmin7, $bps_customcode_bpsqse_wpa ) ) {
889
+ $autofix_message = 1;
890
+ $debug_wpadmin_BPSQSE .= __('CC wp-admin Text Box 4: Bit Integrations Plugin', 'bulletproof-security').'<br>';
891
+ }
892
+ }
893
+ if ( $piotnetforms_active == 1 || is_plugin_active_for_network( $piotnetforms ) ) {
894
+ if ( ! preg_match( $marker_wpadmin5, $bps_customcode_bpsqse_wpa ) || ! preg_match( $marker_wpadmin6, $bps_customcode_bpsqse_wpa )
895
+ || ! preg_match( $marker_wpadmin7, $bps_customcode_bpsqse_wpa ) ) {
896
+ $autofix_message = 1;
897
+ $debug_wpadmin_BPSQSE .= __('CC wp-admin Text Box 4: Piotnetforms Plugin', 'bulletproof-security').'<br>';
898
+ }
899
+ }
900
+ if ( $post_smtp_mailer_active == 1 || is_plugin_active_for_network( $post_smtp_mailer ) ) {
901
+ if ( ! preg_match( $marker_wpadmin5, $bps_customcode_bpsqse_wpa ) || ! preg_match( $marker_wpadmin6, $bps_customcode_bpsqse_wpa )
902
+ || ! preg_match( $marker_wpadmin7, $bps_customcode_bpsqse_wpa ) ) {
903
+ $autofix_message = 1;
904
+ $debug_wpadmin_BPSQSE .= __('CC wp-admin Text Box 4: Post SMTP Mailer Plugin', 'bulletproof-security').'<br>';
905
+ }
906
+ }
907
+ if ( $product_feed_manager_active == 1 || is_plugin_active_for_network( $product_feed_manager ) ) {
908
+ if ( ! preg_match( $marker_wpadmin5, $bps_customcode_bpsqse_wpa ) || ! preg_match( $marker_wpadmin6, $bps_customcode_bpsqse_wpa )
909
+ || ! preg_match( $marker_wpadmin7, $bps_customcode_bpsqse_wpa ) ) {
910
+ $autofix_message = 1;
911
+ $debug_wpadmin_BPSQSE .= __('CC wp-admin Text Box 4: Product Feed Manager for WooCommerce Plugin', 'bulletproof-security').'<br>';
912
+ }
913
+ }
914
+ if ( $product_feed_manager_pro_active == 1 || is_plugin_active_for_network( $product_feed_manager_pro ) ) {
915
+ if ( ! preg_match( $marker_wpadmin5, $bps_customcode_bpsqse_wpa ) || ! preg_match( $marker_wpadmin6, $bps_customcode_bpsqse_wpa )
916
+ || ! preg_match( $marker_wpadmin7, $bps_customcode_bpsqse_wpa ) ) {
917
+ $autofix_message = 1;
918
+ $debug_wpadmin_BPSQSE .= __('CC wp-admin Text Box 4: Product Feed Manager for WooCommerce Pro Plugin', 'bulletproof-security').'<br>';
919
+ }
920
+ }
921
 
922
  ## Display Setup Wizard AutoFix WP Dashboard message
923
  if ( $autofix_message == 1 ) {
includes/hud-dismiss-functions.php CHANGED
@@ -985,10 +985,10 @@ function bpsPro_hud_bpspro_sale() {
985
  return;
986
  }
987
 
988
- $may_16_2022 = '1652717434';
989
  $gmt_offset = get_option( 'gmt_offset' ) * 3600;
990
 
991
- if ( time() < $may_16_2022 ) {
992
 
993
  global $current_user;
994
  $user_id = $current_user->ID;
@@ -1003,7 +1003,7 @@ function bpsPro_hud_bpspro_sale() {
1003
  $bps_base = str_replace( admin_url(), '', esc_html($_SERVER['REQUEST_URI']) ) . '&';
1004
  }
1005
 
1006
- $text = '<div class="update-nag" style="background-color:#dfecf2;border:1px solid #999;font-size:1em;font-weight:600;padding:2px 5px;margin-top:2px;-moz-border-radius-topleft:3px;-webkit-border-top-left-radius:3px;-khtml-border-top-left-radius:3px;border-top-left-radius:3px;-moz-border-radius-topright:3px;-webkit-border-top-right-radius:3px;-khtml-border-top-right-radius:3px;border-top-right-radius:3px;-webkit-box-shadow: 3px 3px 5px -1px rgba(153,153,153,0.7);-moz-box-shadow: 3px 3px 5px -1px rgba(153,153,153,0.7);box-shadow: 3px 3px 5px -1px rgba(153,153,153,0.7);"><font color="blue">'.__('BPS Pro 25% Off Sale May 9 - May 16', 'bulletproof-security').'</font><br>'.__('One-time Purchase Price: $52.50. No Recurring Yearly Costs Or Subscriptions. Unlimited installations. Free Upgrades For Life. Free Technical Support For Life.', 'bulletproof-security').'<br><a href="https://affiliates.ait-pro.com/po/" target="_blank" title="Buy BPS Pro">'.__('Buy BPS Pro', 'bulletproof-security').'</a><div style="min-height:5px"></div>'.__('To Dismiss this Notice click the Dismiss Notice button below. To Reset Dismiss Notices click the Reset|Recheck Dismiss Notices button on the Alerts|Logs|Email Options page.', 'bulletproof-security').'<br><div style="float:left;margin:3px 0px 3px 0px;padding:2px 6px 2px 6px;background-color:#e8e8e8;border:1px solid gray;"><a href="'.$bps_base.'bpsPro_bpspro_sale_nag_ignore=0'.'" style="text-decoration:none;font-weight:bold;">'.__('Dismiss Notice', 'bulletproof-security').'</a></div></div>';
1007
  echo $text;
1008
  }
1009
  }
985
  return;
986
  }
987
 
988
+ $june_13_2022 = '1655139439';
989
  $gmt_offset = get_option( 'gmt_offset' ) * 3600;
990
 
991
+ if ( time() < $june_13_2022 ) {
992
 
993
  global $current_user;
994
  $user_id = $current_user->ID;
1003
  $bps_base = str_replace( admin_url(), '', esc_html($_SERVER['REQUEST_URI']) ) . '&';
1004
  }
1005
 
1006
+ $text = '<div class="update-nag" style="background-color:#dfecf2;border:1px solid #999;font-size:1em;font-weight:600;padding:2px 5px;margin-top:2px;-moz-border-radius-topleft:3px;-webkit-border-top-left-radius:3px;-khtml-border-top-left-radius:3px;border-top-left-radius:3px;-moz-border-radius-topright:3px;-webkit-border-top-right-radius:3px;-khtml-border-top-right-radius:3px;border-top-right-radius:3px;-webkit-box-shadow: 3px 3px 5px -1px rgba(153,153,153,0.7);-moz-box-shadow: 3px 3px 5px -1px rgba(153,153,153,0.7);box-shadow: 3px 3px 5px -1px rgba(153,153,153,0.7);"><font color="blue">'.__('BPS Pro 25% Off Sale June 6 - June 13', 'bulletproof-security').'</font><br>'.__('One-time Purchase Price: $52.50. No Recurring Yearly Costs Or Subscriptions. Unlimited installations. Free Upgrades For Life. Free Technical Support For Life.', 'bulletproof-security').'<br><a href="https://affiliates.ait-pro.com/po/" target="_blank" title="Buy BPS Pro">'.__('Buy BPS Pro', 'bulletproof-security').'</a><div style="min-height:5px"></div>'.__('To Dismiss this Notice click the Dismiss Notice button below. To Reset Dismiss Notices click the Reset|Recheck Dismiss Notices button on the Alerts|Logs|Email Options page.', 'bulletproof-security').'<br><div style="float:left;margin:3px 0px 3px 0px;padding:2px 6px 2px 6px;background-color:#e8e8e8;border:1px solid gray;"><a href="'.$bps_base.'bpsPro_bpspro_sale_nag_ignore=0'.'" style="text-decoration:none;font-weight:bold;">'.__('Dismiss Notice', 'bulletproof-security').'</a></div></div>';
1007
  echo $text;
1008
  }
1009
  }
includes/mscan-ajax-functions.php CHANGED
@@ -1627,11 +1627,14 @@ global $wp_version, $wpdb, $plugin_hashes, $theme_hashes;
1627
  $sapi_type = php_sapi_name();
1628
  $tmp_file_path_array = array();
1629
  $tmp_file_code_match = 0;
1630
-
 
 
1631
  if ( substr($sapi_type, 0, 6) == 'apache' && preg_match( '#\\\\#', ABSPATH, $matches ) ) {
1632
  $upload_tmp_dir = ini_get('upload_tmp_dir');
1633
-
1634
- if ( is_dir( $upload_tmp_dir ) && wp_is_writable( $upload_tmp_dir ) ) {
 
1635
 
1636
  $local_tmp_files = scandir($upload_tmp_dir);
1637
 
@@ -1648,8 +1651,9 @@ global $wp_version, $wpdb, $plugin_hashes, $theme_hashes;
1648
 
1649
  if ( function_exists('sys_get_temp_dir') ) {
1650
  $sys_get_temp_dir = sys_get_temp_dir();
1651
-
1652
- if ( is_dir( $sys_get_temp_dir ) && wp_is_writable( $sys_get_temp_dir ) ) {
 
1653
 
1654
  $tmp_files = scandir($sys_get_temp_dir);
1655
 
1627
  $sapi_type = php_sapi_name();
1628
  $tmp_file_path_array = array();
1629
  $tmp_file_code_match = 0;
1630
+ $plugins_folder = WP_PLUGIN_DIR;
1631
+ $file_owner_plugins_dir = fileowner( $plugins_folder );
1632
+
1633
  if ( substr($sapi_type, 0, 6) == 'apache' && preg_match( '#\\\\#', ABSPATH, $matches ) ) {
1634
  $upload_tmp_dir = ini_get('upload_tmp_dir');
1635
+ $file_owner_tmp_dir = fileowner( $upload_tmp_dir );
1636
+
1637
+ if ( is_dir( $upload_tmp_dir ) && is_readable( $upload_tmp_dir ) && $file_owner_plugins_dir == $file_owner_tmp_dir ) {
1638
 
1639
  $local_tmp_files = scandir($upload_tmp_dir);
1640
 
1651
 
1652
  if ( function_exists('sys_get_temp_dir') ) {
1653
  $sys_get_temp_dir = sys_get_temp_dir();
1654
+ $file_owner_tmp_dir = fileowner( $sys_get_temp_dir );
1655
+
1656
+ if ( is_dir( $sys_get_temp_dir ) && is_readable( $sys_get_temp_dir ) && $file_owner_plugins_dir == $file_owner_tmp_dir ) {
1657
 
1658
  $tmp_files = scandir($sys_get_temp_dir);
1659
 
languages/bulletproof-security.pot CHANGED
@@ -3,7 +3,7 @@ msgid ""
3
  msgstr ""
4
  "Project-Id-Version: bulletproof-security\n"
5
  "Report-Msgid-Bugs-To: \n"
6
- "POT-Creation-Date: 2022-05-09 12:06-0700\n"
7
  "PO-Revision-Date: 2015-06-20 19:13-0800\n"
8
  "Last-Translator: Ed Alexander <edward@ait-pro.com>\n"
9
  "Language-Team: AITpro <info@ait-pro.com>\n"
@@ -580,7 +580,7 @@ msgstr ""
580
  #: admin/wizard/wizard-backup.php:247 admin/wizard/wizard-backup.php:289
581
  #: admin/wizard/wizard.php:1057 admin/wizard/wizard.php:1156
582
  #: admin/wizard/wizard.php:1159 admin/wizard/wizard.php:1926
583
- #: includes/hud-autofix-whitelist.php:861
584
  msgid "Setup Wizard Options"
585
  msgstr ""
586
 
@@ -1780,8 +1780,8 @@ msgstr ""
1780
  msgid "Root Folder BulletProof Mode protection activated successfully."
1781
  msgstr ""
1782
 
1783
- #: admin/core/core.php:139 admin/includes/admin.php:402
1784
- #: admin/includes/admin.php:425 admin/includes/admin.php:426
1785
  msgid "htaccess File Options"
1786
  msgstr ""
1787
 
@@ -2882,95 +2882,95 @@ msgstr ""
2882
  #: admin/core/core.php:2223 admin/core/core.php:2224 admin/core/core.php:2225
2883
  #: admin/core/core.php:2226 admin/core/core.php:2227 admin/core/core.php:2228
2884
  #: admin/core/core.php:2229 admin/core/core.php:2230 admin/core/core.php:2231
2885
- #: admin/core/core.php:2237 admin/core/core.php:2238 admin/core/core.php:2239
2886
  #: admin/core/core.php:2240 admin/core/core.php:2241 admin/core/core.php:2242
2887
  #: admin/core/core.php:2243 admin/core/core.php:2244 admin/core/core.php:2245
2888
- #: admin/core/core.php:2246 admin/core/core.php:2252 admin/core/core.php:2253
2889
  #: admin/core/core.php:2254 admin/core/core.php:2255 admin/core/core.php:2256
2890
- #: admin/core/core.php:2257 admin/core/core.php:2263 admin/core/core.php:2264
2891
- #: admin/core/core.php:2265 admin/core/core.php:2266 admin/core/core.php:2271
2892
  #: admin/core/core.php:2272 admin/core/core.php:2273 admin/core/core.php:2274
2893
- #: admin/core/core.php:2275 admin/core/core.php:2280 admin/core/core.php:2281
2894
  #: admin/core/core.php:2282 admin/core/core.php:2283 admin/core/core.php:2284
2895
  #: admin/core/core.php:2285 admin/core/core.php:2286 admin/core/core.php:2287
2896
- #: admin/core/core.php:2288 admin/core/core.php:2293 admin/core/core.php:2294
2897
  #: admin/core/core.php:2295 admin/core/core.php:2296 admin/core/core.php:2297
2898
  #: admin/core/core.php:2298 admin/core/core.php:2299 admin/core/core.php:2300
2899
  #: admin/core/core.php:2301 admin/core/core.php:2302 admin/core/core.php:2303
2900
- #: admin/core/core.php:2304 admin/core/core.php:2305 admin/core/core.php:2311
2901
  #: admin/core/core.php:2312 admin/core/core.php:2313 admin/core/core.php:2314
2902
  #: admin/core/core.php:2315 admin/core/core.php:2316 admin/core/core.php:2317
2903
  #: admin/core/core.php:2318 admin/core/core.php:2319 admin/core/core.php:2320
2904
  #: admin/core/core.php:2321 admin/core/core.php:2322 admin/core/core.php:2323
2905
- #: admin/core/core.php:2324 admin/core/core.php:2330 admin/core/core.php:2331
2906
  #: admin/core/core.php:2332 admin/core/core.php:2333 admin/core/core.php:2334
2907
  #: admin/core/core.php:2335 admin/core/core.php:2336 admin/core/core.php:2337
2908
  #: admin/core/core.php:2338 admin/core/core.php:2339 admin/core/core.php:2340
2909
- #: admin/core/core.php:2341 admin/core/core.php:2342 admin/core/core.php:2348
2910
  #: admin/core/core.php:2349 admin/core/core.php:2350 admin/core/core.php:2351
2911
  #: admin/core/core.php:2352 admin/core/core.php:2353 admin/core/core.php:2354
2912
  #: admin/core/core.php:2355 admin/core/core.php:2356 admin/core/core.php:2357
2913
- #: admin/core/core.php:2363 admin/core/core.php:2364 admin/core/core.php:2365
2914
  #: admin/core/core.php:2366 admin/core/core.php:2367 admin/core/core.php:2368
2915
  #: admin/core/core.php:2369 admin/core/core.php:2370 admin/core/core.php:2371
2916
- #: admin/core/core.php:2372
2917
  #, php-format
2918
  msgid ""
2919
  "<a href=\"%2$s\" target=\"_blank\" title=\"Link Opens in New Browser Window"
2920
  "\">Whats New in BPS Pro %1$s</a>"
2921
  msgstr ""
2922
 
2923
- #: admin/core/core.php:2234
2924
  #, php-format
2925
  msgid "10 Year Milestone: 8-1-2021 | %1$s"
2926
  msgstr ""
2927
 
2928
- #: admin/core/core.php:2249
2929
  #, php-format
2930
  msgid "9 Year Milestone: 8-1-2020 | %1$s"
2931
  msgstr ""
2932
 
2933
- #: admin/core/core.php:2260
2934
  #, php-format
2935
  msgid "8 Year Milestone: 8-1-2019 | %1$s"
2936
  msgstr ""
2937
 
2938
- #: admin/core/core.php:2268
2939
  #, php-format
2940
  msgid "7 Year Milestone: 8-1-2018 | %1$s"
2941
  msgstr ""
2942
 
2943
- #: admin/core/core.php:2277
2944
  #, php-format
2945
  msgid "6 Year Milestone: 8-1-2017 | %1$s"
2946
  msgstr ""
2947
 
2948
- #: admin/core/core.php:2290
2949
  #, php-format
2950
  msgid "5 Year Milestone: 8-1-2016 | %1$s"
2951
  msgstr ""
2952
 
2953
- #: admin/core/core.php:2308
2954
  #, php-format
2955
  msgid "4 Year Milestone: 8-1-2015 | %1$s"
2956
  msgstr ""
2957
 
2958
- #: admin/core/core.php:2327
2959
  #, php-format
2960
  msgid "3 Year Milestone: 8-1-2014 | %1$s"
2961
  msgstr ""
2962
 
2963
- #: admin/core/core.php:2345
2964
  #, php-format
2965
  msgid "2 Year Milestone: 8-1-2013 | %1$s"
2966
  msgstr ""
2967
 
2968
- #: admin/core/core.php:2360
2969
  #, php-format
2970
  msgid "1 Year Milestone: 8-1-2012 | %1$s"
2971
  msgstr ""
2972
 
2973
- #: admin/core/core.php:2375
2974
  msgid "BPS Pro 1.0 - 4.0 | 1-1-2011 - 8-1-2011 | Private Use|Development"
2975
  msgstr ""
2976
 
@@ -3629,7 +3629,7 @@ msgstr ""
3629
  #: admin/db-backup-security/db-backup-security.php:266
3630
  #: admin/db-backup-security/db-backup-security.php:281
3631
  #: admin/db-backup-security/db-backup-security.php:284
3632
- #: admin/includes/admin.php:431
3633
  msgid "DB Backup"
3634
  msgstr ""
3635
 
@@ -4449,7 +4449,7 @@ msgstr ""
4449
  #: admin/email-log-settings/email-log-settings.php:256
4450
  #: admin/email-log-settings/email-log-settings.php:269
4451
  #: admin/email-log-settings/email-log-settings.php:272
4452
- #: admin/includes/admin.php:443
4453
  msgid "Alerts|Logs|Email Options"
4454
  msgstr ""
4455
 
@@ -4910,122 +4910,122 @@ msgstr ""
4910
  msgid "WordPress Automatic Update Help Forum Topic"
4911
  msgstr ""
4912
 
4913
- #: admin/includes/admin.php:402 admin/includes/admin.php:425
4914
  msgid "BPS Security"
4915
  msgstr ""
4916
 
4917
- #: admin/includes/admin.php:403 admin/includes/admin.php:404
4918
- #: admin/includes/admin.php:428 admin/includes/admin.php:429
4919
- #: admin/includes/admin.php:430 admin/login/login.php:135
4920
  msgid "Login Security Options"
4921
  msgstr ""
4922
 
4923
- #: admin/includes/admin.php:403 admin/includes/admin.php:428
4924
  msgid "Login Security"
4925
  msgstr ""
4926
 
4927
- #: admin/includes/admin.php:404 admin/includes/admin.php:429
4928
  #: admin/login/login.php:167 admin/login/login.php:820
4929
  #: admin/login/login.php:823
4930
  msgid "JTC-Lite"
4931
  msgstr ""
4932
 
4933
- #: admin/includes/admin.php:411 admin/includes/admin.php:439
4934
  #: admin/maintenance/maintenance.php:35 admin/maintenance/maintenance.php:37
4935
  #: admin/maintenance/maintenance.php:175 admin/maintenance/maintenance.php:197
4936
  #: admin/maintenance/maintenance.php:200
4937
  msgid "Maintenance Mode"
4938
  msgstr ""
4939
 
4940
- #: admin/includes/admin.php:418 admin/includes/admin.php:442
4941
  #: admin/system-info/system-info.php:31 admin/system-info/system-info.php:62
4942
  msgid "System Info"
4943
  msgstr ""
4944
 
4945
- #: admin/includes/admin.php:421 admin/includes/admin.php:444
4946
  #: admin/theme-skin/theme-skin.php:30 admin/theme-skin/theme-skin.php:59
4947
  #: admin/theme-skin/theme-skin.php:73 admin/theme-skin/theme-skin.php:76
4948
  msgid "UI|UX Options"
4949
  msgstr ""
4950
 
4951
- #: admin/includes/admin.php:427 admin/mscan/mscan.php:210
4952
  msgid "MScan Malware Scanner"
4953
  msgstr ""
4954
 
4955
- #: admin/includes/admin.php:427 admin/mscan/mscan.php:235
4956
  msgid "MScan"
4957
  msgstr ""
4958
 
4959
- #: admin/includes/admin.php:430
4960
  msgid "Idle Session Logout<br>Cookie Expiration"
4961
  msgstr ""
4962
 
4963
- #: admin/includes/admin.php:431
4964
  msgid "DB Backup & Security"
4965
  msgstr ""
4966
 
4967
- #: admin/includes/admin.php:432 admin/security-log/security-log.php:31
4968
  #: admin/security-log/security-log.php:202
4969
  #: admin/security-log/security-log.php:215
4970
  #: admin/security-log/security-log.php:218
4971
  msgid "Security Log"
4972
  msgstr ""
4973
 
4974
- #: admin/includes/admin.php:445 admin/wizard/wizard.php:1003
4975
  #: admin/wizard/wizard.php:1056 admin/wizard/wizard.php:1085
4976
  #: admin/wizard/wizard.php:1088 bulletproof-security.php:158
4977
  #: bulletproof-security.php:161
4978
  msgid "Setup Wizard"
4979
  msgstr ""
4980
 
4981
- #: admin/includes/admin.php:447
4982
  msgid "MScan Scan Status"
4983
  msgstr ""
4984
 
4985
- #: admin/includes/admin.php:450 admin/includes/admin.php:458
4986
  #: admin/includes/uninstall.php:39
4987
  msgid "BPS Plugin Uninstall Options"
4988
  msgstr ""
4989
 
4990
- #: admin/includes/admin.php:510
4991
  msgid "BPS UI|UX Debug: SLF: CSS Script Loaded"
4992
  msgstr ""
4993
 
4994
- #: admin/includes/admin.php:543
4995
  msgid "BPS UI|UX Debug: SLF: js Script Loaded"
4996
  msgstr ""
4997
 
4998
- #: admin/includes/admin.php:626
4999
  msgid "BPS UI|UX Debug: Scripts|Styles Dequeued"
5000
  msgstr ""
5001
 
5002
- #: admin/includes/admin.php:638
5003
  msgid "Script Dequeued: "
5004
  msgstr ""
5005
 
5006
- #: admin/includes/admin.php:644
5007
  msgid ""
5008
  "No additional plugin or theme Scripts were found that needed to be Dequeued."
5009
  msgstr ""
5010
 
5011
- #: admin/includes/admin.php:656
5012
  msgid "Style Dequeued: "
5013
  msgstr ""
5014
 
5015
- #: admin/includes/admin.php:662
5016
  msgid ""
5017
  "No additional plugin or theme Styles were found that needed to be Dequeued."
5018
  msgstr ""
5019
 
5020
- #: admin/includes/admin.php:711 admin/includes/admin.php:744
5021
  msgid "BPS UI|UX Debug: WP Toolbar nodes|menu items Removed"
5022
  msgstr ""
5023
 
5024
- #: admin/includes/admin.php:723 admin/includes/admin.php:756
5025
  msgid "WP Toolbar node|menu item Removed: "
5026
  msgstr ""
5027
 
5028
- #: admin/includes/admin.php:731 admin/includes/admin.php:764
5029
  msgid "No WP Toolbar nodes|menu items were Removed in BPS plugin pages"
5030
  msgstr ""
5031
 
@@ -11453,6 +11453,32 @@ msgstr ""
11453
  msgid "Convert Pro Plugin wp-admin BPSQSE AutoWhitelist successful"
11454
  msgstr ""
11455
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
11456
  #: admin/wizard/wizard-backup.php:247 admin/wizard/wizard-backup.php:289
11457
  msgid ""
11458
  "Custom additional htaccess code was found in your root htaccess file. Your "
@@ -11522,8 +11548,7 @@ msgid ""
11522
  "cannot be created. Root Folder BulletProof Mode has NOT been activated."
11523
  msgstr ""
11524
 
11525
- #: admin/wizard/wizard-functions.php:117 admin/wizard/wizard-functions.php:676
11526
- #: admin/wizard/wizard-functions.php:776
11527
  msgid ""
11528
  "If your Server configuration is DSO you must first make some one-time manual "
11529
  "changes to your website before running the Setup Wizard. Please click this "
@@ -11607,6 +11632,15 @@ msgid ""
11607
  "NOT been activated."
11608
  msgstr ""
11609
 
 
 
 
 
 
 
 
 
 
11610
  #: admin/wizard/wizard-functions.php:682
11611
  msgid ""
11612
  "Go Daddy Managed WordPress Hosting option is set to Yes or Enable|Disable wp-"
@@ -13109,15 +13143,15 @@ msgstr ""
13109
  msgid "Once Daily"
13110
  msgstr ""
13111
 
13112
- #: includes/hidden-plugin-folders-cron.php:265
13113
- #: includes/hidden-plugin-folders-cron.php:280
13114
- #: includes/hidden-plugin-folders-cron.php:295
13115
- #: includes/hidden-plugin-folders-cron.php:310
13116
- #: includes/hidden-plugin-folders-cron.php:339
13117
  msgid "BPS Hidden Plugin Folder|Files (HPF) Alert"
13118
  msgstr ""
13119
 
13120
- #: includes/hidden-plugin-folders-cron.php:265
13121
  msgid ""
13122
  "A non-standard WP hello.php file (Hello Dolly Plugin) was found in your /"
13123
  "plugins/ folder and it is hidden/not displayed on the WordPress Plugins "
@@ -13127,69 +13161,69 @@ msgid ""
13127
  "below in the "
13128
  msgstr ""
13129
 
13130
- #: includes/hidden-plugin-folders-cron.php:265
13131
- #: includes/hidden-plugin-folders-cron.php:280
13132
- #: includes/hidden-plugin-folders-cron.php:295
13133
- #: includes/hidden-plugin-folders-cron.php:310
13134
- #: includes/hidden-plugin-folders-cron.php:339
13135
  msgid "Ignore Hidden Plugin Folders & Files"
13136
  msgstr ""
13137
 
13138
- #: includes/hidden-plugin-folders-cron.php:265
13139
- #: includes/hidden-plugin-folders-cron.php:280
13140
- #: includes/hidden-plugin-folders-cron.php:295
13141
- #: includes/hidden-plugin-folders-cron.php:310
13142
- #: includes/hidden-plugin-folders-cron.php:339
13143
  msgid " textarea box option to make this Alert go away."
13144
  msgstr ""
13145
 
13146
- #: includes/hidden-plugin-folders-cron.php:265
13147
- #: includes/hidden-plugin-folders-cron.php:280
13148
- #: includes/hidden-plugin-folders-cron.php:295
13149
- #: includes/hidden-plugin-folders-cron.php:310
13150
  msgid "File Path: "
13151
  msgstr ""
13152
 
13153
- #: includes/hidden-plugin-folders-cron.php:265
13154
- #: includes/hidden-plugin-folders-cron.php:280
13155
- #: includes/hidden-plugin-folders-cron.php:295
13156
- #: includes/hidden-plugin-folders-cron.php:310
13157
- #: includes/hidden-plugin-folders-cron.php:339
13158
  msgid "HPF Ignore Rule: "
13159
  msgstr ""
13160
 
13161
- #: includes/hidden-plugin-folders-cron.php:265
13162
- #: includes/hidden-plugin-folders-cron.php:280
13163
- #: includes/hidden-plugin-folders-cron.php:295
13164
- #: includes/hidden-plugin-folders-cron.php:310
13165
- #: includes/hidden-plugin-folders-cron.php:339
13166
  msgid "Last Modified Time: "
13167
  msgstr ""
13168
 
13169
- #: includes/hidden-plugin-folders-cron.php:265
13170
- #: includes/hidden-plugin-folders-cron.php:280
13171
- #: includes/hidden-plugin-folders-cron.php:295
13172
- #: includes/hidden-plugin-folders-cron.php:310
13173
- #: includes/hidden-plugin-folders-cron.php:339
13174
  msgid "Last Change Time: "
13175
  msgstr ""
13176
 
13177
- #: includes/hidden-plugin-folders-cron.php:265
13178
- #: includes/hidden-plugin-folders-cron.php:280
13179
- #: includes/hidden-plugin-folders-cron.php:295
13180
- #: includes/hidden-plugin-folders-cron.php:310
13181
- #: includes/hidden-plugin-folders-cron.php:339
13182
  msgid "Last Access Time: "
13183
  msgstr ""
13184
 
13185
- #: includes/hidden-plugin-folders-cron.php:265
13186
- #: includes/hidden-plugin-folders-cron.php:280
13187
- #: includes/hidden-plugin-folders-cron.php:295
13188
- #: includes/hidden-plugin-folders-cron.php:310
13189
  msgid "File Contents: "
13190
  msgstr ""
13191
 
13192
- #: includes/hidden-plugin-folders-cron.php:280
13193
  msgid ""
13194
  "A non-standard WP index.php file found in your /plugins/ folder appears to "
13195
  "have been altered/tampered with. Most likely the index.php file is a hacker "
@@ -13198,7 +13232,7 @@ msgid ""
13198
  "HPF Ignore Rule shown below in the "
13199
  msgstr ""
13200
 
13201
- #: includes/hidden-plugin-folders-cron.php:295
13202
  msgid ""
13203
  "An htaccess file was found in your /plugins/ folder and it does not appear "
13204
  "to be a BPS htaccess file. Most likely the htaccess file is a hacker file or "
@@ -13207,7 +13241,7 @@ msgid ""
13207
  "Ignore Rule shown below in the "
13208
  msgstr ""
13209
 
13210
- #: includes/hidden-plugin-folders-cron.php:310
13211
  msgid ""
13212
  "An unrecognized/non-standard WP file was found in your /plugins/ folder. "
13213
  "This file may be a hacker file or contain hacker code. If you recognize this "
@@ -13215,7 +13249,7 @@ msgid ""
13215
  "adding the HPF Ignore Rule shown below in the "
13216
  msgstr ""
13217
 
13218
- #: includes/hidden-plugin-folders-cron.php:339
13219
  msgid ""
13220
  "A plugin folder was found in your /plugins/ folder that is either a hidden "
13221
  "plugin (plugin that is not displayed on the WordPress Plugins page) or an "
@@ -13224,7 +13258,7 @@ msgid ""
13224
  "folder check by adding the HPF Ignore Rule shown below in the "
13225
  msgstr ""
13226
 
13227
- #: includes/hidden-plugin-folders-cron.php:339
13228
  msgid "Plugin Folder Path: "
13229
  msgstr ""
13230
 
@@ -13961,96 +13995,124 @@ msgstr ""
13961
  msgid "CC wp-admin Text Box 3: Bloom Email Opt-in Plugin"
13962
  msgstr ""
13963
 
13964
- #: includes/hud-autofix-whitelist.php:804
13965
  msgid "CC wp-admin Text Box 4: Content Egg (Free and Pro) Plugin"
13966
  msgstr ""
13967
 
13968
- #: includes/hud-autofix-whitelist.php:810
13969
  msgid "CC wp-admin Text Box 4: Event Espresso Plugin"
13970
  msgstr ""
13971
 
13972
- #: includes/hud-autofix-whitelist.php:817
13973
  msgid "CC wp-admin Text Box 4: Open Web Analytics (github) Plugin"
13974
  msgstr ""
13975
 
13976
- #: includes/hud-autofix-whitelist.php:824
13977
  msgid "CC wp-admin Text Box 4: UberGrid (code canyon) Plugin"
13978
  msgstr ""
13979
 
13980
- #: includes/hud-autofix-whitelist.php:831
13981
  msgid "CC wp-admin Text Box 4: Jetpack Plugin - SSO feature"
13982
  msgstr ""
13983
 
13984
- #: includes/hud-autofix-whitelist.php:837
13985
  msgid "CC wp-admin Text Box 4: Restrict Content Pro Plugin"
13986
  msgstr ""
13987
 
13988
- #: includes/hud-autofix-whitelist.php:843
13989
  msgid "CC wp-admin Text Box 4: Link Whisper Plugin"
13990
  msgstr ""
13991
 
13992
- #: includes/hud-autofix-whitelist.php:849
13993
  msgid "CC wp-admin Text Box 4: Link Whisper Premium Plugin"
13994
  msgstr ""
13995
 
13996
- #: includes/hud-autofix-whitelist.php:855
13997
  msgid "CC wp-admin Text Box 4: Convert Pro Plugin"
13998
  msgstr ""
13999
 
14000
- #: includes/hud-autofix-whitelist.php:861
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
14001
  msgid "BPS Setup Wizard AutoFix (AutoWhitelist|AutoSetup|AutoCleanup) Notice"
14002
  msgstr ""
14003
 
14004
- #: includes/hud-autofix-whitelist.php:861
14005
  msgid ""
14006
  "One or more of your plugins or your theme requires a BPS Custom Code "
14007
  "whitelist rule to be automatically created by the Setup Wizard."
14008
  msgstr ""
14009
 
14010
- #: includes/hud-autofix-whitelist.php:861
14011
  #: includes/hud-dismiss-functions.php:712
14012
  msgid "Click this "
14013
  msgstr ""
14014
 
14015
- #: includes/hud-autofix-whitelist.php:861
14016
  msgid "Setup Wizard link"
14017
  msgstr ""
14018
 
14019
- #: includes/hud-autofix-whitelist.php:861
14020
  msgid ""
14021
  " and click the Setup Wizard button to automatically create BPS Custom Code "
14022
  "whitelist rules."
14023
  msgstr ""
14024
 
14025
- #: includes/hud-autofix-whitelist.php:861
14026
  msgid "This BPS AutoFix check can be turned Off on the "
14027
  msgstr ""
14028
 
14029
- #: includes/hud-autofix-whitelist.php:861
14030
  msgid ""
14031
  " page if you do not want BPS to check for any plugin or theme whitelist "
14032
  "rules."
14033
  msgstr ""
14034
 
14035
- #: includes/hud-autofix-whitelist.php:861
14036
  msgid ""
14037
  "If this Notice does not go away after running the Setup Wizard, use the "
14038
  msgstr ""
14039
 
14040
- #: includes/hud-autofix-whitelist.php:861
14041
  msgid "BPS UI|UX|AutoFix Debug tool"
14042
  msgstr ""
14043
 
14044
- #: includes/hud-autofix-whitelist.php:861
14045
  msgid ""
14046
  " Click the UI|UX Options page Question Mark help button for more information."
14047
  msgstr ""
14048
 
14049
- #: includes/hud-autofix-whitelist.php:870
14050
  msgid "BPS AutoFix Debug: Custom Code Text Box Number and Plugin or Theme Name"
14051
  msgstr ""
14052
 
14053
- #: includes/hud-autofix-whitelist.php:873
14054
  msgid "No Plugin or Theme AutoFix Custom Code Whitelist Rules were found"
14055
  msgstr ""
14056
 
@@ -14547,7 +14609,7 @@ msgid "Script|File Owner User ID Mismatch Forum Topic"
14547
  msgstr ""
14548
 
14549
  #: includes/hud-dismiss-functions.php:1006
14550
- msgid "BPS Pro 25% Off Sale May 9 - May 16"
14551
  msgstr ""
14552
 
14553
  #: includes/hud-dismiss-functions.php:1006
3
  msgstr ""
4
  "Project-Id-Version: bulletproof-security\n"
5
  "Report-Msgid-Bugs-To: \n"
6
+ "POT-Creation-Date: 2022-06-06 07:30-0700\n"
7
  "PO-Revision-Date: 2015-06-20 19:13-0800\n"
8
  "Last-Translator: Ed Alexander <edward@ait-pro.com>\n"
9
  "Language-Team: AITpro <info@ait-pro.com>\n"
580
  #: admin/wizard/wizard-backup.php:247 admin/wizard/wizard-backup.php:289
581
  #: admin/wizard/wizard.php:1057 admin/wizard/wizard.php:1156
582
  #: admin/wizard/wizard.php:1159 admin/wizard/wizard.php:1926
583
+ #: includes/hud-autofix-whitelist.php:924
584
  msgid "Setup Wizard Options"
585
  msgstr ""
586
 
1780
  msgid "Root Folder BulletProof Mode protection activated successfully."
1781
  msgstr ""
1782
 
1783
+ #: admin/core/core.php:139 admin/includes/admin.php:408
1784
+ #: admin/includes/admin.php:431 admin/includes/admin.php:432
1785
  msgid "htaccess File Options"
1786
  msgstr ""
1787
 
2882
  #: admin/core/core.php:2223 admin/core/core.php:2224 admin/core/core.php:2225
2883
  #: admin/core/core.php:2226 admin/core/core.php:2227 admin/core/core.php:2228
2884
  #: admin/core/core.php:2229 admin/core/core.php:2230 admin/core/core.php:2231
2885
+ #: admin/core/core.php:2232 admin/core/core.php:2238 admin/core/core.php:2239
2886
  #: admin/core/core.php:2240 admin/core/core.php:2241 admin/core/core.php:2242
2887
  #: admin/core/core.php:2243 admin/core/core.php:2244 admin/core/core.php:2245
2888
+ #: admin/core/core.php:2246 admin/core/core.php:2247 admin/core/core.php:2253
2889
  #: admin/core/core.php:2254 admin/core/core.php:2255 admin/core/core.php:2256
2890
+ #: admin/core/core.php:2257 admin/core/core.php:2258 admin/core/core.php:2264
2891
+ #: admin/core/core.php:2265 admin/core/core.php:2266 admin/core/core.php:2267
2892
  #: admin/core/core.php:2272 admin/core/core.php:2273 admin/core/core.php:2274
2893
+ #: admin/core/core.php:2275 admin/core/core.php:2276 admin/core/core.php:2281
2894
  #: admin/core/core.php:2282 admin/core/core.php:2283 admin/core/core.php:2284
2895
  #: admin/core/core.php:2285 admin/core/core.php:2286 admin/core/core.php:2287
2896
+ #: admin/core/core.php:2288 admin/core/core.php:2289 admin/core/core.php:2294
2897
  #: admin/core/core.php:2295 admin/core/core.php:2296 admin/core/core.php:2297
2898
  #: admin/core/core.php:2298 admin/core/core.php:2299 admin/core/core.php:2300
2899
  #: admin/core/core.php:2301 admin/core/core.php:2302 admin/core/core.php:2303
2900
+ #: admin/core/core.php:2304 admin/core/core.php:2305 admin/core/core.php:2306
2901
  #: admin/core/core.php:2312 admin/core/core.php:2313 admin/core/core.php:2314
2902
  #: admin/core/core.php:2315 admin/core/core.php:2316 admin/core/core.php:2317
2903
  #: admin/core/core.php:2318 admin/core/core.php:2319 admin/core/core.php:2320
2904
  #: admin/core/core.php:2321 admin/core/core.php:2322 admin/core/core.php:2323
2905
+ #: admin/core/core.php:2324 admin/core/core.php:2325 admin/core/core.php:2331
2906
  #: admin/core/core.php:2332 admin/core/core.php:2333 admin/core/core.php:2334
2907
  #: admin/core/core.php:2335 admin/core/core.php:2336 admin/core/core.php:2337
2908
  #: admin/core/core.php:2338 admin/core/core.php:2339 admin/core/core.php:2340
2909
+ #: admin/core/core.php:2341 admin/core/core.php:2342 admin/core/core.php:2343
2910
  #: admin/core/core.php:2349 admin/core/core.php:2350 admin/core/core.php:2351
2911
  #: admin/core/core.php:2352 admin/core/core.php:2353 admin/core/core.php:2354
2912
  #: admin/core/core.php:2355 admin/core/core.php:2356 admin/core/core.php:2357
2913
+ #: admin/core/core.php:2358 admin/core/core.php:2364 admin/core/core.php:2365
2914
  #: admin/core/core.php:2366 admin/core/core.php:2367 admin/core/core.php:2368
2915
  #: admin/core/core.php:2369 admin/core/core.php:2370 admin/core/core.php:2371
2916
+ #: admin/core/core.php:2372 admin/core/core.php:2373
2917
  #, php-format
2918
  msgid ""
2919
  "<a href=\"%2$s\" target=\"_blank\" title=\"Link Opens in New Browser Window"
2920
  "\">Whats New in BPS Pro %1$s</a>"
2921
  msgstr ""
2922
 
2923
+ #: admin/core/core.php:2235
2924
  #, php-format
2925
  msgid "10 Year Milestone: 8-1-2021 | %1$s"
2926
  msgstr ""
2927
 
2928
+ #: admin/core/core.php:2250
2929
  #, php-format
2930
  msgid "9 Year Milestone: 8-1-2020 | %1$s"
2931
  msgstr ""
2932
 
2933
+ #: admin/core/core.php:2261
2934
  #, php-format
2935
  msgid "8 Year Milestone: 8-1-2019 | %1$s"
2936
  msgstr ""
2937
 
2938
+ #: admin/core/core.php:2269
2939
  #, php-format
2940
  msgid "7 Year Milestone: 8-1-2018 | %1$s"
2941
  msgstr ""
2942
 
2943
+ #: admin/core/core.php:2278
2944
  #, php-format
2945
  msgid "6 Year Milestone: 8-1-2017 | %1$s"
2946
  msgstr ""
2947
 
2948
+ #: admin/core/core.php:2291
2949
  #, php-format
2950
  msgid "5 Year Milestone: 8-1-2016 | %1$s"
2951
  msgstr ""
2952
 
2953
+ #: admin/core/core.php:2309
2954
  #, php-format
2955
  msgid "4 Year Milestone: 8-1-2015 | %1$s"
2956
  msgstr ""
2957
 
2958
+ #: admin/core/core.php:2328
2959
  #, php-format
2960
  msgid "3 Year Milestone: 8-1-2014 | %1$s"
2961
  msgstr ""
2962
 
2963
+ #: admin/core/core.php:2346
2964
  #, php-format
2965
  msgid "2 Year Milestone: 8-1-2013 | %1$s"
2966
  msgstr ""
2967
 
2968
+ #: admin/core/core.php:2361
2969
  #, php-format
2970
  msgid "1 Year Milestone: 8-1-2012 | %1$s"
2971
  msgstr ""
2972
 
2973
+ #: admin/core/core.php:2376
2974
  msgid "BPS Pro 1.0 - 4.0 | 1-1-2011 - 8-1-2011 | Private Use|Development"
2975
  msgstr ""
2976
 
3629
  #: admin/db-backup-security/db-backup-security.php:266
3630
  #: admin/db-backup-security/db-backup-security.php:281
3631
  #: admin/db-backup-security/db-backup-security.php:284
3632
+ #: admin/includes/admin.php:437
3633
  msgid "DB Backup"
3634
  msgstr ""
3635
 
4449
  #: admin/email-log-settings/email-log-settings.php:256
4450
  #: admin/email-log-settings/email-log-settings.php:269
4451
  #: admin/email-log-settings/email-log-settings.php:272
4452
+ #: admin/includes/admin.php:449
4453
  msgid "Alerts|Logs|Email Options"
4454
  msgstr ""
4455
 
4910
  msgid "WordPress Automatic Update Help Forum Topic"
4911
  msgstr ""
4912
 
4913
+ #: admin/includes/admin.php:408 admin/includes/admin.php:431
4914
  msgid "BPS Security"
4915
  msgstr ""
4916
 
4917
+ #: admin/includes/admin.php:409 admin/includes/admin.php:410
4918
+ #: admin/includes/admin.php:434 admin/includes/admin.php:435
4919
+ #: admin/includes/admin.php:436 admin/login/login.php:135
4920
  msgid "Login Security Options"
4921
  msgstr ""
4922
 
4923
+ #: admin/includes/admin.php:409 admin/includes/admin.php:434
4924
  msgid "Login Security"
4925
  msgstr ""
4926
 
4927
+ #: admin/includes/admin.php:410 admin/includes/admin.php:435
4928
  #: admin/login/login.php:167 admin/login/login.php:820
4929
  #: admin/login/login.php:823
4930
  msgid "JTC-Lite"
4931
  msgstr ""
4932
 
4933
+ #: admin/includes/admin.php:417 admin/includes/admin.php:445
4934
  #: admin/maintenance/maintenance.php:35 admin/maintenance/maintenance.php:37
4935
  #: admin/maintenance/maintenance.php:175 admin/maintenance/maintenance.php:197
4936
  #: admin/maintenance/maintenance.php:200
4937
  msgid "Maintenance Mode"
4938
  msgstr ""
4939
 
4940
+ #: admin/includes/admin.php:424 admin/includes/admin.php:448
4941
  #: admin/system-info/system-info.php:31 admin/system-info/system-info.php:62
4942
  msgid "System Info"
4943
  msgstr ""
4944
 
4945
+ #: admin/includes/admin.php:427 admin/includes/admin.php:450
4946
  #: admin/theme-skin/theme-skin.php:30 admin/theme-skin/theme-skin.php:59
4947
  #: admin/theme-skin/theme-skin.php:73 admin/theme-skin/theme-skin.php:76
4948
  msgid "UI|UX Options"
4949
  msgstr ""
4950
 
4951
+ #: admin/includes/admin.php:433 admin/mscan/mscan.php:210
4952
  msgid "MScan Malware Scanner"
4953
  msgstr ""
4954
 
4955
+ #: admin/includes/admin.php:433 admin/mscan/mscan.php:235
4956
  msgid "MScan"
4957
  msgstr ""
4958
 
4959
+ #: admin/includes/admin.php:436
4960
  msgid "Idle Session Logout<br>Cookie Expiration"
4961
  msgstr ""
4962
 
4963
+ #: admin/includes/admin.php:437
4964
  msgid "DB Backup & Security"
4965
  msgstr ""
4966
 
4967
+ #: admin/includes/admin.php:438 admin/security-log/security-log.php:31
4968
  #: admin/security-log/security-log.php:202
4969
  #: admin/security-log/security-log.php:215
4970
  #: admin/security-log/security-log.php:218
4971
  msgid "Security Log"
4972
  msgstr ""
4973
 
4974
+ #: admin/includes/admin.php:451 admin/wizard/wizard.php:1003
4975
  #: admin/wizard/wizard.php:1056 admin/wizard/wizard.php:1085
4976
  #: admin/wizard/wizard.php:1088 bulletproof-security.php:158
4977
  #: bulletproof-security.php:161
4978
  msgid "Setup Wizard"
4979
  msgstr ""
4980
 
4981
+ #: admin/includes/admin.php:453
4982
  msgid "MScan Scan Status"
4983
  msgstr ""
4984
 
4985
+ #: admin/includes/admin.php:456 admin/includes/admin.php:464
4986
  #: admin/includes/uninstall.php:39
4987
  msgid "BPS Plugin Uninstall Options"
4988
  msgstr ""
4989
 
4990
+ #: admin/includes/admin.php:516
4991
  msgid "BPS UI|UX Debug: SLF: CSS Script Loaded"
4992
  msgstr ""
4993
 
4994
+ #: admin/includes/admin.php:549
4995
  msgid "BPS UI|UX Debug: SLF: js Script Loaded"
4996
  msgstr ""
4997
 
4998
+ #: admin/includes/admin.php:632
4999
  msgid "BPS UI|UX Debug: Scripts|Styles Dequeued"
5000
  msgstr ""
5001
 
5002
+ #: admin/includes/admin.php:644
5003
  msgid "Script Dequeued: "
5004
  msgstr ""
5005
 
5006
+ #: admin/includes/admin.php:650
5007
  msgid ""
5008
  "No additional plugin or theme Scripts were found that needed to be Dequeued."
5009
  msgstr ""
5010
 
5011
+ #: admin/includes/admin.php:662
5012
  msgid "Style Dequeued: "
5013
  msgstr ""
5014
 
5015
+ #: admin/includes/admin.php:668
5016
  msgid ""
5017
  "No additional plugin or theme Styles were found that needed to be Dequeued."
5018
  msgstr ""
5019
 
5020
+ #: admin/includes/admin.php:717 admin/includes/admin.php:750
5021
  msgid "BPS UI|UX Debug: WP Toolbar nodes|menu items Removed"
5022
  msgstr ""
5023
 
5024
+ #: admin/includes/admin.php:729 admin/includes/admin.php:762
5025
  msgid "WP Toolbar node|menu item Removed: "
5026
  msgstr ""
5027
 
5028
+ #: admin/includes/admin.php:737 admin/includes/admin.php:770
5029
  msgid "No WP Toolbar nodes|menu items were Removed in BPS plugin pages"
5030
  msgstr ""
5031
 
11453
  msgid "Convert Pro Plugin wp-admin BPSQSE AutoWhitelist successful"
11454
  msgstr ""
11455
 
11456
+ #: admin/wizard/pwizard-autofix.php:2218
11457
+ msgid "WP Mail SMTP Plugin wp-admin BPSQSE AutoWhitelist successful"
11458
+ msgstr ""
11459
+
11460
+ #: admin/wizard/pwizard-autofix.php:2234
11461
+ msgid "Gmail SMTP Plugin wp-admin BPSQSE AutoWhitelist successful"
11462
+ msgstr ""
11463
+
11464
+ #: admin/wizard/pwizard-autofix.php:2250
11465
+ msgid "Bit Integrations Plugin wp-admin BPSQSE AutoWhitelist successful"
11466
+ msgstr ""
11467
+
11468
+ #: admin/wizard/pwizard-autofix.php:2266
11469
+ msgid "Piotnetforms Plugin wp-admin BPSQSE AutoWhitelist successful"
11470
+ msgstr ""
11471
+
11472
+ #: admin/wizard/pwizard-autofix.php:2282
11473
+ msgid "Post SMTP Mailer Plugin wp-admin BPSQSE AutoWhitelist successful"
11474
+ msgstr ""
11475
+
11476
+ #: admin/wizard/pwizard-autofix.php:2298 admin/wizard/pwizard-autofix.php:2314
11477
+ msgid ""
11478
+ "Product Feed Manager for WooCommerce Plugin wp-admin BPSQSE AutoWhitelist "
11479
+ "successful"
11480
+ msgstr ""
11481
+
11482
  #: admin/wizard/wizard-backup.php:247 admin/wizard/wizard-backup.php:289
11483
  msgid ""
11484
  "Custom additional htaccess code was found in your root htaccess file. Your "
11548
  "cannot be created. Root Folder BulletProof Mode has NOT been activated."
11549
  msgstr ""
11550
 
11551
+ #: admin/wizard/wizard-functions.php:117 admin/wizard/wizard-functions.php:776
 
11552
  msgid ""
11553
  "If your Server configuration is DSO you must first make some one-time manual "
11554
  "changes to your website before running the Setup Wizard. Please click this "
11632
  "NOT been activated."
11633
  msgstr ""
11634
 
11635
+ #: admin/wizard/wizard-functions.php:676
11636
+ msgid ""
11637
+ "If you have Managed WordPress Hosting then go to the Setup Wizard Options "
11638
+ "page > Go Daddy Managed WordPress Hosting (GDMW) > change the option setting "
11639
+ "to Yes and run the Setup Wizard again. If your Server configuration is DSO "
11640
+ "you must first make some one-time manual changes to your website before "
11641
+ "running the Setup Wizard. Please click this Forum Link for instructions: "
11642
+ msgstr ""
11643
+
11644
  #: admin/wizard/wizard-functions.php:682
11645
  msgid ""
11646
  "Go Daddy Managed WordPress Hosting option is set to Yes or Enable|Disable wp-"
13143
  msgid "Once Daily"
13144
  msgstr ""
13145
 
13146
+ #: includes/hidden-plugin-folders-cron.php:268
13147
+ #: includes/hidden-plugin-folders-cron.php:283
13148
+ #: includes/hidden-plugin-folders-cron.php:298
13149
+ #: includes/hidden-plugin-folders-cron.php:313
13150
+ #: includes/hidden-plugin-folders-cron.php:343
13151
  msgid "BPS Hidden Plugin Folder|Files (HPF) Alert"
13152
  msgstr ""
13153
 
13154
+ #: includes/hidden-plugin-folders-cron.php:268
13155
  msgid ""
13156
  "A non-standard WP hello.php file (Hello Dolly Plugin) was found in your /"
13157
  "plugins/ folder and it is hidden/not displayed on the WordPress Plugins "
13161
  "below in the "
13162
  msgstr ""
13163
 
13164
+ #: includes/hidden-plugin-folders-cron.php:268
13165
+ #: includes/hidden-plugin-folders-cron.php:283
13166
+ #: includes/hidden-plugin-folders-cron.php:298
13167
+ #: includes/hidden-plugin-folders-cron.php:313
13168
+ #: includes/hidden-plugin-folders-cron.php:343
13169
  msgid "Ignore Hidden Plugin Folders & Files"
13170
  msgstr ""
13171
 
13172
+ #: includes/hidden-plugin-folders-cron.php:268
13173
+ #: includes/hidden-plugin-folders-cron.php:283
13174
+ #: includes/hidden-plugin-folders-cron.php:298
13175
+ #: includes/hidden-plugin-folders-cron.php:313
13176
+ #: includes/hidden-plugin-folders-cron.php:343
13177
  msgid " textarea box option to make this Alert go away."
13178
  msgstr ""
13179
 
13180
+ #: includes/hidden-plugin-folders-cron.php:268
13181
+ #: includes/hidden-plugin-folders-cron.php:283
13182
+ #: includes/hidden-plugin-folders-cron.php:298
13183
+ #: includes/hidden-plugin-folders-cron.php:313
13184
  msgid "File Path: "
13185
  msgstr ""
13186
 
13187
+ #: includes/hidden-plugin-folders-cron.php:268
13188
+ #: includes/hidden-plugin-folders-cron.php:283
13189
+ #: includes/hidden-plugin-folders-cron.php:298
13190
+ #: includes/hidden-plugin-folders-cron.php:313
13191
+ #: includes/hidden-plugin-folders-cron.php:343
13192
  msgid "HPF Ignore Rule: "
13193
  msgstr ""
13194
 
13195
+ #: includes/hidden-plugin-folders-cron.php:268
13196
+ #: includes/hidden-plugin-folders-cron.php:283
13197
+ #: includes/hidden-plugin-folders-cron.php:298
13198
+ #: includes/hidden-plugin-folders-cron.php:313
13199
+ #: includes/hidden-plugin-folders-cron.php:343
13200
  msgid "Last Modified Time: "
13201
  msgstr ""
13202
 
13203
+ #: includes/hidden-plugin-folders-cron.php:268
13204
+ #: includes/hidden-plugin-folders-cron.php:283
13205
+ #: includes/hidden-plugin-folders-cron.php:298
13206
+ #: includes/hidden-plugin-folders-cron.php:313
13207
+ #: includes/hidden-plugin-folders-cron.php:343
13208
  msgid "Last Change Time: "
13209
  msgstr ""
13210
 
13211
+ #: includes/hidden-plugin-folders-cron.php:268
13212
+ #: includes/hidden-plugin-folders-cron.php:283
13213
+ #: includes/hidden-plugin-folders-cron.php:298
13214
+ #: includes/hidden-plugin-folders-cron.php:313
13215
+ #: includes/hidden-plugin-folders-cron.php:343
13216
  msgid "Last Access Time: "
13217
  msgstr ""
13218
 
13219
+ #: includes/hidden-plugin-folders-cron.php:268
13220
+ #: includes/hidden-plugin-folders-cron.php:283
13221
+ #: includes/hidden-plugin-folders-cron.php:298
13222
+ #: includes/hidden-plugin-folders-cron.php:313
13223
  msgid "File Contents: "
13224
  msgstr ""
13225
 
13226
+ #: includes/hidden-plugin-folders-cron.php:283
13227
  msgid ""
13228
  "A non-standard WP index.php file found in your /plugins/ folder appears to "
13229
  "have been altered/tampered with. Most likely the index.php file is a hacker "
13232
  "HPF Ignore Rule shown below in the "
13233
  msgstr ""
13234
 
13235
+ #: includes/hidden-plugin-folders-cron.php:298
13236
  msgid ""
13237
  "An htaccess file was found in your /plugins/ folder and it does not appear "
13238
  "to be a BPS htaccess file. Most likely the htaccess file is a hacker file or "
13241
  "Ignore Rule shown below in the "
13242
  msgstr ""
13243
 
13244
+ #: includes/hidden-plugin-folders-cron.php:313
13245
  msgid ""
13246
  "An unrecognized/non-standard WP file was found in your /plugins/ folder. "
13247
  "This file may be a hacker file or contain hacker code. If you recognize this "
13249
  "adding the HPF Ignore Rule shown below in the "
13250
  msgstr ""
13251
 
13252
+ #: includes/hidden-plugin-folders-cron.php:343
13253
  msgid ""
13254
  "A plugin folder was found in your /plugins/ folder that is either a hidden "
13255
  "plugin (plugin that is not displayed on the WordPress Plugins page) or an "
13258
  "folder check by adding the HPF Ignore Rule shown below in the "
13259
  msgstr ""
13260
 
13261
+ #: includes/hidden-plugin-folders-cron.php:343
13262
  msgid "Plugin Folder Path: "
13263
  msgstr ""
13264
 
13995
  msgid "CC wp-admin Text Box 3: Bloom Email Opt-in Plugin"
13996
  msgstr ""
13997
 
13998
+ #: includes/hud-autofix-whitelist.php:818
13999
  msgid "CC wp-admin Text Box 4: Content Egg (Free and Pro) Plugin"
14000
  msgstr ""
14001
 
14002
+ #: includes/hud-autofix-whitelist.php:824
14003
  msgid "CC wp-admin Text Box 4: Event Espresso Plugin"
14004
  msgstr ""
14005
 
14006
+ #: includes/hud-autofix-whitelist.php:831
14007
  msgid "CC wp-admin Text Box 4: Open Web Analytics (github) Plugin"
14008
  msgstr ""
14009
 
14010
+ #: includes/hud-autofix-whitelist.php:838
14011
  msgid "CC wp-admin Text Box 4: UberGrid (code canyon) Plugin"
14012
  msgstr ""
14013
 
14014
+ #: includes/hud-autofix-whitelist.php:845
14015
  msgid "CC wp-admin Text Box 4: Jetpack Plugin - SSO feature"
14016
  msgstr ""
14017
 
14018
+ #: includes/hud-autofix-whitelist.php:851
14019
  msgid "CC wp-admin Text Box 4: Restrict Content Pro Plugin"
14020
  msgstr ""
14021
 
14022
+ #: includes/hud-autofix-whitelist.php:857
14023
  msgid "CC wp-admin Text Box 4: Link Whisper Plugin"
14024
  msgstr ""
14025
 
14026
+ #: includes/hud-autofix-whitelist.php:863
14027
  msgid "CC wp-admin Text Box 4: Link Whisper Premium Plugin"
14028
  msgstr ""
14029
 
14030
+ #: includes/hud-autofix-whitelist.php:869
14031
  msgid "CC wp-admin Text Box 4: Convert Pro Plugin"
14032
  msgstr ""
14033
 
14034
+ #: includes/hud-autofix-whitelist.php:876
14035
+ msgid "CC wp-admin Text Box 4: WP Mail SMTP Plugin"
14036
+ msgstr ""
14037
+
14038
+ #: includes/hud-autofix-whitelist.php:883
14039
+ msgid "CC wp-admin Text Box 4: Gmail SMTP Plugin"
14040
+ msgstr ""
14041
+
14042
+ #: includes/hud-autofix-whitelist.php:890
14043
+ msgid "CC wp-admin Text Box 4: Bit Integrations Plugin"
14044
+ msgstr ""
14045
+
14046
+ #: includes/hud-autofix-whitelist.php:897
14047
+ msgid "CC wp-admin Text Box 4: Piotnetforms Plugin"
14048
+ msgstr ""
14049
+
14050
+ #: includes/hud-autofix-whitelist.php:904
14051
+ msgid "CC wp-admin Text Box 4: Post SMTP Mailer Plugin"
14052
+ msgstr ""
14053
+
14054
+ #: includes/hud-autofix-whitelist.php:911
14055
+ msgid "CC wp-admin Text Box 4: Product Feed Manager for WooCommerce Plugin"
14056
+ msgstr ""
14057
+
14058
+ #: includes/hud-autofix-whitelist.php:918
14059
+ msgid "CC wp-admin Text Box 4: Product Feed Manager for WooCommerce Pro Plugin"
14060
+ msgstr ""
14061
+
14062
+ #: includes/hud-autofix-whitelist.php:924
14063
  msgid "BPS Setup Wizard AutoFix (AutoWhitelist|AutoSetup|AutoCleanup) Notice"
14064
  msgstr ""
14065
 
14066
+ #: includes/hud-autofix-whitelist.php:924
14067
  msgid ""
14068
  "One or more of your plugins or your theme requires a BPS Custom Code "
14069
  "whitelist rule to be automatically created by the Setup Wizard."
14070
  msgstr ""
14071
 
14072
+ #: includes/hud-autofix-whitelist.php:924
14073
  #: includes/hud-dismiss-functions.php:712
14074
  msgid "Click this "
14075
  msgstr ""
14076
 
14077
+ #: includes/hud-autofix-whitelist.php:924
14078
  msgid "Setup Wizard link"
14079
  msgstr ""
14080
 
14081
+ #: includes/hud-autofix-whitelist.php:924
14082
  msgid ""
14083
  " and click the Setup Wizard button to automatically create BPS Custom Code "
14084
  "whitelist rules."
14085
  msgstr ""
14086
 
14087
+ #: includes/hud-autofix-whitelist.php:924
14088
  msgid "This BPS AutoFix check can be turned Off on the "
14089
  msgstr ""
14090
 
14091
+ #: includes/hud-autofix-whitelist.php:924
14092
  msgid ""
14093
  " page if you do not want BPS to check for any plugin or theme whitelist "
14094
  "rules."
14095
  msgstr ""
14096
 
14097
+ #: includes/hud-autofix-whitelist.php:924
14098
  msgid ""
14099
  "If this Notice does not go away after running the Setup Wizard, use the "
14100
  msgstr ""
14101
 
14102
+ #: includes/hud-autofix-whitelist.php:924
14103
  msgid "BPS UI|UX|AutoFix Debug tool"
14104
  msgstr ""
14105
 
14106
+ #: includes/hud-autofix-whitelist.php:924
14107
  msgid ""
14108
  " Click the UI|UX Options page Question Mark help button for more information."
14109
  msgstr ""
14110
 
14111
+ #: includes/hud-autofix-whitelist.php:933
14112
  msgid "BPS AutoFix Debug: Custom Code Text Box Number and Plugin or Theme Name"
14113
  msgstr ""
14114
 
14115
+ #: includes/hud-autofix-whitelist.php:936
14116
  msgid "No Plugin or Theme AutoFix Custom Code Whitelist Rules were found"
14117
  msgstr ""
14118
 
14609
  msgstr ""
14610
 
14611
  #: includes/hud-dismiss-functions.php:1006
14612
+ msgid "BPS Pro 25% Off Sale June 6 - June 13"
14613
  msgstr ""
14614
 
14615
  #: includes/hud-dismiss-functions.php:1006
readme.txt CHANGED
@@ -5,7 +5,7 @@ Tags: security, secure, malware scanner, login security, firewall, security plug
5
  Requires at least: 3.8
6
  Requires PHP: 7.0
7
  Tested up to: 6.0
8
- Stable tag: 6.2
9
  License: GPLv2 or later
10
  License URI: http://www.gnu.org/licenses/gpl-2.0.html
11
 
5
  Requires at least: 3.8
6
  Requires PHP: 7.0
7
  Tested up to: 6.0
8
+ Stable tag: 6.3
9
  License: GPLv2 or later
10
  License URI: http://www.gnu.org/licenses/gpl-2.0.html
11