PageRenderTime 52ms CodeModel.GetById 24ms RepoModel.GetById 0ms app.codeStats 0ms

/wp-content/plugins/bulletproof-security/includes/functions.php

https://bitbucket.org/crypticrod/sr_wp_code
PHP | 690 lines | 568 code | 63 blank | 59 comment | 167 complexity | 224fae8cd157cc0d0649c03ec4965fdc MD5 | raw file
Possible License(s): AGPL-1.0, GPL-2.0, LGPL-2.1, GPL-3.0, LGPL-2.0, AGPL-3.0 
    

  1. <?php

    2. 

  2. // Direct calls to this file are Forbidden when core files are not present

    3. 

  3. if (!function_exists ('add_action')) {

    4. 

  4. 		header('Status: 403 Forbidden');

    5. 

  5. 		header('HTTP/1.1 403 Forbidden');

    6. 

  6. 		exit();

    7. 

  7. }

    8. 

  8. 

    9. 

  9. // Get BPS Version - Just for display purposes

    10. 

  10. function bpsWhatVersion() {

    11. 

  11. echo " ~ .46.6";

    12. 

  12. }

    13. 

  13. 

    14. 

  14. // BPS Master htaccess File Editing - file checks and get contents for editor

    15. 

  15. function get_secure_htaccess() {

    16. 

  16. 	$secure_htaccess_file = ABSPATH .'wp-content/plugins/bulletproof-security/admin/htaccess/secure.htaccess';

    17. 

  17. 	if (file_exists($secure_htaccess_file)) {

    18. 

  18. 	$bpsString = file_get_contents($secure_htaccess_file);

    19. 

  19. 	echo $bpsString;

    20. 

  20. 	} else {

    21. 

  21. 	_e('The secure.htaccess file either does not exist or is not named correctly. Check the /wp-content/plugins/bulletproof-security/admin/htaccess/ folder to make sure the secure.htaccess file exists and is named secure.htaccess.');

    22. 

  22. 	}

    23. 

  23. }

    24. 

  24. 

    25. 

  25. function get_default_htaccess() {

    26. 

  26. 	$default_htaccess_file = ABSPATH .'wp-content/plugins/bulletproof-security/admin/htaccess/default.htaccess';

    27. 

  27. 	if (file_exists($default_htaccess_file)) {

    28. 

  28. 	$bpsString = file_get_contents($default_htaccess_file);

    29. 

  29. 	echo $bpsString;

    30. 

  30. 	} else {

    31. 

  31. 	_e('The default.htaccess file either does not exist or is not named correctly. Check the /wp-content/plugins/bulletproof-security/admin/htaccess/ folder to make sure the default.htaccess file exists and is named default.htaccess.');

    32. 

  32. 	}

    33. 

  33. }

    34. 

  34. 

    35. 

  35. function get_maintenance_htaccess() {

    36. 

  36. 	$maintenance_htaccess_file = ABSPATH . 'wp-content/plugins/bulletproof-security/admin/htaccess/maintenance.htaccess';

    37. 

  37. 	if (file_exists($maintenance_htaccess_file)) {

    38. 

  38. 	$bpsString = file_get_contents($maintenance_htaccess_file);

    39. 

  39. 	echo $bpsString;

    40. 

  40. 	} else {

    41. 

  41. 	_e('The maintenance.htaccess file either does not exist or is not named correctly. Check the /wp-content/plugins/bulletproof-security/admin/htaccess/ folder to make sure the maintenance.htaccess file exists and is named maintenance.htaccess.');

    42. 

  42. 	}

    43. 

  43. }

    44. 

  44. 

    45. 

  45. function get_wpadmin_htaccess() {

    46. 

  46. 	$wpadmin_htaccess_file = ABSPATH . 'wp-content/plugins/bulletproof-security/admin/htaccess/wpadmin-secure.htaccess';

    47. 

  47. 	if (file_exists($wpadmin_htaccess_file)) {

    48. 

  48. 	$bpsString = file_get_contents($wpadmin_htaccess_file);

    49. 

  49. 	echo $bpsString;

    50. 

  50. 	} else {

    51. 

  51. 	_e('The wpadmin-secure.htaccess file either does not exist or is not named correctly. Check the /wp-content/plugins/bulletproof-security/admin/htaccess/ folder to make sure the wpadmin-secure.htaccess file exists and is named wpadmin-secure.htaccess.');

    52. 

  52. 	}

    53. 

  53. }

    54. 

  54. 

    55. 

  55. // The current active root htaccess file - file check

    56. 

  56. function get_root_htaccess() {

    57. 

  57. 	$root_htaccess_file = ABSPATH . '.htaccess';

    58. 

  58. 	if (file_exists($root_htaccess_file)) {

    59. 

  59. 	$bpsString = file_get_contents($root_htaccess_file);

    60. 

  60. 	echo $bpsString;

    61. 

  61. 	} else {

    62. 

  62. 	_e('An .htaccess file was not found in your website root folder.');

    63. 

  63. 	}

    64. 

  64. }

    65. 

  65. 

    66. 

  66. // The current active wp-admin htaccess file - file check

    67. 

  67. function get_current_wpadmin_htaccess_file() {

    68. 

  68. 	$current_wpadmin_htaccess_file = ABSPATH . 'wp-admin/.htaccess';

    69. 

  69. 	if (file_exists($current_wpadmin_htaccess_file)) {

    70. 

  70. 	$bpsString = file_get_contents($current_wpadmin_htaccess_file);

    71. 

  71. 	echo $bpsString;

    72. 

  72. 	} else {

    73. 

  73. 	_e('An .htaccess file was not found in your wp-admin folder.');

    74. 

  74. 	}

    75. 

  75. }

    76. 

  76. 

    77. 

  77. // File write checks for editor

    78. 

  78. function secure_htaccess_file_check() {

    79. 

  79. $secure_htaccess_file = ABSPATH . '/wp-content/plugins/bulletproof-security/admin/htaccess/secure.htaccess';

    80. 

  80. 	if (!is_writable($secure_htaccess_file)) {

    81. 

  81.  		_e('<font color="red"><strong>Cannot write to the secure.htaccess file. Minimum file permission required is 600.</strong></font><br>');

    82. 

  82. 	    } else {

    83. 

  83. 	_e('');

    84. 

  84. }

    85. 

  85. }

    86. 

  86. 

    87. 

  87. // File write checks for editor

    88. 

  88. function default_htaccess_file_check() {

    89. 

  89. $default_htaccess_file = ABSPATH . '/wp-content/plugins/bulletproof-security/admin/htaccess/default.htaccess';

    90. 

  90. 	if (!is_writable($default_htaccess_file)) {

    91. 

  91.  		_e('<font color="red"><strong>Cannot write to the default.htaccess file. Minimum file permission required is 600.</strong></font><br>');

    92. 

  92. 	    } else {

    93. 

  93. 	_e('');

    94. 

  94. }

    95. 

  95. }

    96. 

  96. // File write checks for editor

    97. 

  97. function maintenance_htaccess_file_check() {

    98. 

  98. $maintenance_htaccess_file = ABSPATH . '/wp-content/plugins/bulletproof-security/admin/htaccess/maintenance.htaccess';

    99. 

  99. 	if (!is_writable($maintenance_htaccess_file)) {

    100. 

  100.  		_e('<font color="red"><strong>Cannot write to the maintenance.htaccess file. Minimum file permission required is 600.</strong></font><br>');

    101. 

  101. 	    } else {

    102. 

  102. 	_e('');

    103. 

  103. }

    104. 

  104. }

    105. 

  105. // File write checks for editor

    106. 

  106. function wpadmin_htaccess_file_check() {

    107. 

  107. $wpadmin_htaccess_file = ABSPATH . '/wp-content/plugins/bulletproof-security/admin/htaccess/wpadmin-secure.htaccess';

    108. 

  108. 	if (!is_writable($wpadmin_htaccess_file)) {

    109. 

  109.  		_e('<font color="red"><strong>Cannot write to the wpadmin-secure.htaccess file. Minimum file permission required is 600.</strong></font><br>');

    110. 

  110. 	    } else {

    111. 

  111. 	_e('');

    112. 

  112. }

    113. 

  113. }

    114. 

  114. // File write checks for editor

    115. 

  115. function root_htaccess_file_check() {

    116. 

  116. $root_htaccess_file = ABSPATH . '/.htaccess';

    117. 

  117. 	if (!is_writable($root_htaccess_file)) {

    118. 

  118.  		_e('<font color="red"><strong>Cannot write to the root .htaccess file. Minimum file permission required is 600.</strong></font><br>');

    119. 

  119. 	    } else {

    120. 

  120. 	_e('');

    121. 

  121. }

    122. 

  122. }

    123. 

  123. // File write checks for editor

    124. 

  124. function current_wpadmin_htaccess_file_check() {

    125. 

  125. $current_wpadmin_htaccess_file = ABSPATH . '/wp-admin/.htaccess';

    126. 

  126. 	if (!is_writable($current_wpadmin_htaccess_file)) {

    127. 

  127.  		_e('<font color="red"><strong>Cannot write to the wp-admin .htaccess file. Minimum file permission required is 600.</strong></font><br>');

    128. 

  128. 	    } else {

    129. 

  129. 	_e('');

    130. 

  130. }

    131. 

  131. }

    132. 

  132. 

    133. 

  133. // Get contents of Root .htaccess file from 3-45 - if "6" found in string position 17 - offset 16 - good - else bad

    134. 

  134. // Check for string BPSQSE

    135. 

  135. function root_htaccess_status() {

    136. 

  136. 	$filename = ABSPATH . '.htaccess';

    137. 

  137. 	$section = @file_get_contents($filename, NULL, NULL, 3, 45);

    138. 

  138. 	$check_stringBPSQSE = @file_get_contents($filename);

    139. 

  139. 	$check_string = @strpos($section, "6", 16);

    140. 

  140. 	if ( !file_exists($filename)) {

    141. 

  141. 	_e('<font color="red">An .htaccess file was NOT found in your root folder</font><br><br>');

    142. 

  142. 	_e('<font color="red">wp-config.php is NOT .htaccess protected by BPS</font><br><br>');

    143. 

  143. 	} else {

    144. 

  144. 	if (file_exists($filename)) {

    145. 

  145. 	_e('<font color="green"><strong>The .htaccess file that is activated in your root folder is:</strong></font><br>');

    146. 

  146. 		print($section);

    147. 

  147. 		if ($check_string == "17" && strpos($check_stringBPSQSE, "BPSQSE")) {

    148. 

  148. 		_e('<font color="green"><strong><br><br>&radic; wp-config.php is .htaccess protected by BPS<br>&radic; php.ini and php5.ini are .htaccess protected by BPS</strong></font><br><br>');

    149. 

  149. 	} else {

    150. 

  150. 	_e('<font color="red"><br><br><strong>Either a BPS .htaccess file was NOT found in your root folder or you have not activated BulletProof Mode for your Root folder yet, Default Mode is activated, Maintenance Mode is activated or the version of the BPS Pro htaccess file that you are using is not .46.6 or the BPS QUERY STRING EXPLOITS code does not exist in your root .htaccess file. Please read the Read Me hover Tooltip above.</strong></font><br><br>');

    151. 

  151. 	_e('<font color="red"><strong>wp-config.php is NOT .htaccess protected by BPS</strong></font><br><br>');

    152. 

  152. }}}}

    153. 

  153. 

    154. 

  154. // Get contents of wp-admin .htaccess file from 3-45 - if "6" found in string position 17 - offset 16 - good - else bad

    155. 

  155. function wpadmin_htaccess_status() {

    156. 

  156. 	$filename = ABSPATH . 'wp-admin/.htaccess';

    157. 

  157. 	$section = @file_get_contents($filename, NULL, NULL, 3, 45);

    158. 

  158. 	$check_stringBPSQSE = @file_get_contents($filename);

    159. 

  159. 	$check_string = @strpos($section, "6", 16);

    160. 

  160. 	if ( !file_exists($filename)) {

    161. 

  161. 	_e('<font color="red"><strong>An .htaccess file was NOT found in your wp-admin folder.<br>BulletProof Mode for the wp-admin folder MUST also be activated when you have BulletProof Mode activated for the Root folder.</strong></font><br>');

    162. 

  162. 	} else {

    163. 

  163. 		if ($check_string == "17" && strpos($check_stringBPSQSE, "BPSQSE")) {

    164. 

  164. 	_e('<font color="green"><strong>The .htaccess file that is activated in your wp-admin folder is:</strong></font><br>');

    165. 

  165. 		print($section);

    166. 

  166. 	} else {

    167. 

  167. 	_e('<font color="red"><strong><br><br>A valid BPS .htaccess file was NOT found in your wp-admin folder. Either you have not activated BulletProof Mode for your wp-admin folder yet or the version of the wp-admin htaccess file that you are using is not .46.6. BulletProof Mode for the wp-admin folder MUST also be activated when you have BulletProof Mode activated for the Root folder. Please read the Read Me hover Tooltip above.</strong></font><br>');

    168. 

  168. 	}

    169. 

  169. 	}

    170. 

  170. }

    171. 

  171. 	

    172. 

  172. // Check if BPS Deny ALL htaccess file is activated for the BPS Master htaccess folder

    173. 

  173. function denyall_htaccess_status_master() {

    174. 

  174. $filename = ABSPATH . '/wp-content/plugins/bulletproof-security/admin/htaccess/.htaccess';

    175. 

  175. 	if (file_exists($filename)) {

    176. 

  176.     _e('<font color="green"><strong>&radic; Deny All protection activated for BPS Master /htaccess folder</strong></font><br>');

    177. 

  177. 	} else {

    178. 

  178.     _e('<font color="red"><strong>Deny All protection NOT activated for BPS Master /htaccess folder</strong></font><br>');

    179. 

  179. 	}

    180. 

  180. }

    181. 

  181. // Check if BPS Deny ALL htaccess file is activated for the /wp-content/bps-backup folder

    182. 

  182. function denyall_htaccess_status_backup() {

    183. 

  183. $filename = ABSPATH . '/wp-content/bps-backup/.htaccess';

    184. 

  184. 	if (file_exists($filename)) {

    185. 

  185.     _e('<font color="green"><strong>&radic; Deny All protection activated for /wp-content/bps-backup folder</strong></font><br><br>');

    186. 

  186. 	} else {

    187. 

  187.     _e('<font color="red"><strong>Deny All protection NOT activated for /wp-content/bps-backup folder</strong></font><br><br>');

    188. 

  188. 	}

    189. 

  189. }

    190. 

  190. 

    191. 

  191. // File and Folder Permission Checking - substr error is suppressed @ else fileperms error if file does not exist

    192. 

  192. function bps_check_perms($name,$path,$perm) {

    193. 

  193. 	clearstatcache();

    194. 

  194. 	$current_perms = @substr(sprintf(".%o.", fileperms($path)), -4);

    195. 

  195. 	echo '<table style="width:100%;background-color:#fff;">';

    196. 

  196. 	echo '<tr>';

    197. 

  197.     echo '<td style="background-color:#fff;padding:2px;width:150px;">' . $name . '</td>';

    198. 

  198.     echo '<td style="background-color:#fff;padding:2px;width:170px;">' . $path . '</td>';

    199. 

  199.     echo '<td style="background-color:#fff;padding:2px;width:85px;">' . $perm . '</td>';

    200. 

  200.     echo '<td style="background-color:#fff;padding:2px;">' . $current_perms . '</td>';

    201. 

  201.     echo '</tr>';

    202. 

  202. 	echo '</table>';

    203. 

  203. }

    204. 

  204. 	

    205. 

  205. // General BulletProof Security File Status Checking

    206. 

  206. function general_bps_file_checks() {

    207. 

  207. 	$dir='../';

    208. 

  208. 	$filename = '.htaccess';

    209. 

  209. 	if (file_exists($dir.$filename)) {

    210. 

  210.     _e('<font color="green">&radic; An .htaccess file was found in your root folder</font><br>');

    211. 

  211. 	} else {

    212. 

  212.     _e('<font color="red">NO .htaccess file was found in your root folder</font><br>');

    213. 

  213. 	}

    214. 

  214. 

    215. 

  215. 	$filename = '.htaccess';

    216. 

  216. 	if (file_exists($filename)) {

    217. 

  217.     _e('<font color="green">&radic; An .htaccess file was found in your /wp-admin folder</font><br>');

    218. 

  218. 	} else {

    219. 

  219.     _e('<font color="red">NO .htaccess file was found in your /wp-admin folder</font><br>');

    220. 

  220. 	}

    221. 

  221. 

    222. 

  222. 	$filename = '/wp-content/plugins/bulletproof-security/admin/htaccess/default.htaccess';

    223. 

  223. 	if (file_exists(ABSPATH . $filename)) {

    224. 

  224.     _e('<font color="green">&radic; A default.htaccess file was found in the /htaccess folder</font><br>');

    225. 

  225. 	} else {

    226. 

  226.     _e('<font color="red">NO default.htaccess file found in the /htaccess folder</font><br>');

    227. 

  227. 	}

    228. 

  228. 

    229. 

  229. 	$filename = '/wp-content/plugins/bulletproof-security/admin/htaccess/secure.htaccess';

    230. 

  230. 	if (file_exists(ABSPATH . $filename)) {

    231. 

  231.     _e('<font color="green">&radic; A secure.htaccess file was found in the /htaccess folder</font><br>');

    232. 

  232. 	} else {

    233. 

  233.     _e('<font color="red">NO secure.htaccess file found in the /htaccess folder</font><br>');

    234. 

  234. 	}

    235. 

  235. 

    236. 

  236. 	$filename = '/wp-content/plugins/bulletproof-security/admin/htaccess/maintenance.htaccess';

    237. 

  237. 	if (file_exists(ABSPATH . $filename)) {

    238. 

  238.     _e('<font color="green">&radic; A maintenance.htaccess file was found in the /htaccess folder</font><br>');

    239. 

  239. 	} else {

    240. 

  240.     _e('<font color="red">NO maintenance.htaccess file found in the /htaccess folder</font><br>');

    241. 

  241. 	}

    242. 

  242. 

    243. 

  243. 	$filename = '/wp-content/plugins/bulletproof-security/admin/htaccess/bp-maintenance.php';

    244. 

  244. 	if (file_exists(ABSPATH . $filename)) {

    245. 

  245.     _e('<font color="green">&radic; A bp-maintenance.php file was found in the /htaccess folder</font><br>');

    246. 

  246. 	} else {

    247. 

  247.     _e('<font color="red">NO bp-maintenance.php file found in the /htaccess folder</font><br>');

    248. 

  248. 	}

    249. 

  249. 	

    250. 

  250. 	$filename = '/wp-content/plugins/bulletproof-security/admin/htaccess/bps-maintenance-values.php';

    251. 

  251. 	if (file_exists(ABSPATH . $filename)) {

    252. 

  252.     _e('<font color="green">&radic; A bps-maintenance-values.php file was found in the /htaccess folder</font><br>');

    253. 

  253. 	} else {

    254. 

  254.     _e('<font color="red">NO bps-maintenance-values.php file found in the /htaccess folder</font><br>');

    255. 

  255. 	}

    256. 

  256. 	

    257. 

  257. 	$filename = '/wp-content/plugins/bulletproof-security/admin/htaccess/wpadmin-secure.htaccess';

    258. 

  258. 	if (file_exists(ABSPATH . $filename)) {

    259. 

  259.     _e('<font color="green">&radic; A wpadmin-secure.htaccess file was found in the /htaccess folder</font><br>');

    260. 

  260. 	} else {

    261. 

  261.     _e('<font color="red">NO wpadmin-secure.htaccess file found in the /htaccess folder</font><br>');

    262. 

  262. 	}

    263. 

  263. 	

    264. 

  264. 	$filename = '/wp-content/bps-backup/root.htaccess';

    265. 

  265. 	if (file_exists(ABSPATH . $filename)) {

    266. 

  266.     _e('<font color="green">&radic; Your Current Root .htaccess File is backed up</font><br>');

    267. 

  267. 	} else {

    268. 

  268.     _e('<font color="red">Your Current Root .htaccess file is NOT backed up yet</font><br>');

    269. 

  269. 	}

    270. 

  270. 	

    271. 

  271. 	$filename = '/wp-content/bps-backup/wpadmin.htaccess';

    272. 

  272. 	if (file_exists(ABSPATH . $filename)) {

    273. 

  273.     _e('<font color="green">&radic; Your Current wp-admin .htaccess File is backed up</font><br>');

    274. 

  274. 	} else {

    275. 

  275.     _e('<font color="red">Your Current wp-admin .htaccess File is NOT backed up yet</font><br>');

    276. 

  276. 	}

    277. 

  277. 	

    278. 

  278. 	$filename = '/wp-content/bps-backup/master-backups/backup_default.htaccess';

    279. 

  279. 	if (file_exists(ABSPATH . $filename)) {

    280. 

  280.     _e('<font color="green">&radic; Your BPS Master default.htaccess file is backed up</font><br>');

    281. 

  281. 	} else {

    282. 

  282.     _e('<font color="red">Your BPS Master default.htaccess file is NOT backed up yet</font><br>');

    283. 

  283. 	}

    284. 

  284. 	

    285. 

  285. 	$filename = '/wp-content/bps-backup/master-backups/backup_secure.htaccess';

    286. 

  286. 	if (file_exists(ABSPATH . $filename)) {

    287. 

  287.     _e('<font color="green">&radic; Your BPS Master secure.htaccess file is backed up</font><br>');

    288. 

  288. 	} else {

    289. 

  289.     _e('<font color="red">Your BPS Master secure.htaccess file is NOT backed up yet</font><br>');

    290. 

  290. 	}

    291. 

  291. 	

    292. 

  292. 	$filename = '/wp-content/bps-backup/master-backups/backup_wpadmin-secure.htaccess';

    293. 

  293. 	if (file_exists(ABSPATH . $filename)) {

    294. 

  294.     _e('<font color="green">&radic; Your BPS Master wpadmin-secure.htaccess file is backed up</font><br>');

    295. 

  295. 	} else {

    296. 

  296.     _e('<font color="red">Your BPS Master wpadmin-secure.htaccess file is NOT backed up yet</font><br>');

    297. 

  297. 	}

    298. 

  298. 

    299. 

  299. 	$filename = '/wp-content/bps-backup/master-backups/backup_maintenance.htaccess';

    300. 

  300. 	if (file_exists(ABSPATH . $filename)) {

    301. 

  301.     _e('<font color="green">&radic; Your BPS Master maintenance.htaccess file is backed up</font><br>');

    302. 

  302. 	} else {

    303. 

  303.     _e('<font color="red">Your BPS Master maintenance.htaccess file is NOT backed up yet</font><br>');

    304. 

  304. 	}

    305. 

  305. 

    306. 

  306. 	$filename = '/wp-content/bps-backup/master-backups/backup_bp-maintenance.php';

    307. 

  307. 	if (file_exists(ABSPATH . $filename)) {

    308. 

  308.     _e('<font color="green">&radic; Your BPS Master bp-maintenance.php file is backed up</font><br>');

    309. 

  309. 	} else {

    310. 

  310.     _e('<font color="red">Your BPS Master bp-maintenance.php file is NOT backed up yet</font><br>');

    311. 

  311. 	}

    312. 

  312. 	

    313. 

  313. 	$filename = '/wp-content/bps-backup/master-backups/backup_bps-maintenance-values.php';

    314. 

  314. 	if (file_exists(ABSPATH . $filename)) {

    315. 

  315.     _e('<font color="green">&radic; Your BPS Master bps-maintenance-values.php file is backed up</font><br>');

    316. 

  316. 	} else {

    317. 

  317.     _e('<font color="red">Your BPS Master bps-maintenance-values.php file is NOT backed up yet</font><br>');

    318. 

  318. 	}

    319. 

  319. }

    320. 

  320. 

    321. 

  321. // Backup and Restore page - Backed up Root and wp-admin .htaccess file checks

    322. 

  322. function backup_restore_checks() {

    323. 

  323. 	$bp_root_back = ABSPATH . '/wp-content/bps-backup/root.htaccess'; 

    324. 

  324. 	if (file_exists($bp_root_back)) { 

    325. 

  325. 	_e('<font color="green"><strong>&radic; Your Root .htaccess file is backed up.</strong></font><br>'); 

    326. 

  326. 	} else { 

    327. 

  327. 	_e('<font color="red"><strong>Your Root .htaccess file is NOT backed up either because you have not done a Backup yet, an .htaccess file did NOT already exist in your root folder or because of a file copy error. Read the "Current Backed Up .htaccess Files Status Read Me" hover ToolTip for more specific information.</strong></font><br><br>');

    328. 

  328. 	} 

    329. 

  329. 

    330. 

  330. 	$bp_wpadmin_back = ABSPATH . '/wp-content/bps-backup/wpadmin.htaccess'; 

    331. 

  331. 	if (file_exists($bp_wpadmin_back)) { 

    332. 

  332. 	_e('<font color="green"><strong>&radic; Your wp-admin .htaccess file is backed up.</strong></font><br>'); 

    333. 

  333. 	} else { 

    334. 

  334. 	_e('<font color="red"><strong>Your wp-admin .htaccess file is NOT backed up either because you have not done a Backup yet, an .htaccess file did NOT already exist in your /wp-admin folder or because of a file copy error. Read the "Current Backed Up .htaccess Files Status Read Me" hover ToolTip for more specific information.</strong></font><br>'); 

    335. 

  335. 	} 

    336. 

  336. }

    337. 

  337. 

    338. 

  338. // Backup and Restore page - General check if existing .htaccess files already exist 

    339. 

  339. function general_bps_file_checks_backup_restore() {

    340. 

  340. 	$dir='../';

    341. 

  341. 	$filename = '.htaccess';

    342. 

  342. 	if (file_exists($dir.$filename)) {

    343. 

  343.     _e('<font color="green">&radic; An .htaccess file was found in your root folder</font><br>');

    344. 

  344. 	} else {

    345. 

  345.     _e('<font color="red">NO .htaccess file was found in your root folder</font><br>');

    346. 

  346. 	}

    347. 

  347. 

    348. 

  348. 	$filename = '.htaccess';

    349. 

  349. 	if (file_exists($filename)) {

    350. 

  350.     _e('<font color="green">&radic; An .htaccess file was found in your /wp-admin folder</font><br>');

    351. 

  351. 	} else {

    352. 

  352.     _e('<font color="red">NO .htaccess file was found in your /wp-admin folder</font><br>');

    353. 

  353. 	}

    354. 

  354. }

    355. 

  355. 

    356. 

  356. // Backup and Restore page - BPS Master .htaccess backup file checks

    357. 

  357. function bps_master_file_backups() {

    358. 

  358. 	$bps_default_master = ABSPATH . '/wp-content/bps-backup/master-backups/backup_default.htaccess'; 

    359. 

  359. 	if (file_exists($bps_default_master)) {

    360. 

  360.     _e('<font color="green"><strong>&radic; The default.htaccess Master file is backed up.</strong></font><br>');

    361. 

  361. 	} else {

    362. 

  362.     _e('<font color="red"><strong>Your default.htaccess Master file has NOT been backed up yet!</strong></font><br>');

    363. 

  363. 	}

    364. 

  364. 

    365. 

  365. 	$bps_secure_master = ABSPATH . '/wp-content/bps-backup/master-backups/backup_secure.htaccess'; 

    366. 

  366. 	if (file_exists($bps_secure_master)) {

    367. 

  367.     _e('<font color="green"><strong>&radic; The secure.htaccess Master file is backed up.</strong></font><br>');

    368. 

  368. 	} else {

    369. 

  369.     _e('<font color="red"><strong>Your secure.htaccess Master file has NOT been backed up yet!</strong></font><br>');

    370. 

  370. 	}

    371. 

  371. 	

    372. 

  372. 	$bps_wpadmin_master = ABSPATH . '/wp-content/bps-backup/master-backups/backup_wpadmin-secure.htaccess'; 

    373. 

  373. 	if (file_exists($bps_wpadmin_master)) {

    374. 

  374.     _e('<font color="green"><strong>&radic; The wpadmin-secure.htaccess Master file is backed up.</strong></font><br>');

    375. 

  375. 	} else {

    376. 

  376.     _e('<font color="red"><strong>Your wpadmin-secure.htaccess Master file has NOT been backed up yet!</strong></font><br>');

    377. 

  377. 	}

    378. 

  378. 	

    379. 

  379. 	$bps_maintenance_master = ABSPATH . '/wp-content/bps-backup/master-backups/backup_maintenance.htaccess'; 

    380. 

  380. 	if (file_exists($bps_maintenance_master)) {

    381. 

  381.     _e('<font color="green"><strong>&radic; The maintenance.htaccess Master file is backed up.<strong</font><br>');

    382. 

  382. 	} else {

    383. 

  383.     _e('<font color="red"><strong>Your maintenance.htaccess Master file has NOT been backed up yet!</strong></font><br>');

    384. 

  384. 	}

    385. 

  385. 	

    386. 

  386. 	$bps_bp_maintenance_master = ABSPATH . '/wp-content/bps-backup/master-backups/backup_bp-maintenance.php'; 

    387. 

  387. 	if (file_exists($bps_bp_maintenance_master)) {

    388. 

  388.     _e('<font color="green"><strong>&radic; The bp-maintenance.php Master file is backed up.</strong></font><br>');

    389. 

  389. 	} else {

    390. 

  390.     _e('<font color="red"><strong>Your bp-maintenance.php Master file has NOT been backed up yet!</strong></font><br>');

    391. 

  391. 	}

    392. 

  392. 	

    393. 

  393. 	$bps_bp_maintenance_values = ABSPATH . '/wp-content/bps-backup/master-backups/backup_bps-maintenance-values.php'; 

    394. 

  394. 	if (file_exists($bps_bp_maintenance_values)) {

    395. 

  395.     _e('<font color="green"><strong>&radic; The bps-maintenance-values.php Master file is backed up.</strong></font><br>');

    396. 

  396. 	} else {

    397. 

  397.     _e('<font color="red"><strong>Your bps-maintenance-values.php Master file has NOT been backed up yet!</strong></font><br>');

    398. 

  398. 	}

    399. 

  399. }

    400. 

  400. 

    401. 

  401. // Check if Permalinks are enabled

    402. 

  402. $permalink_structure = get_option('permalink_structure');

    403. 

  403. function bps_check_permalinks() {

    404. 

  404. 	if ( get_option('permalink_structure') != '' ) { 

    405. 

  405. 	_e('Permalinks Enabled: <font color="green"><strong>&radic; Permalinks are Enabled</strong></font>'); 

    406. 

  406. 	} else {

    407. 

  407. 	_e('Permalinks Enabled: <font color="red"><strong>WARNING! Permalinks are NOT Enabled<br>Permalinks MUST be enabled for BPS to function correctly</strong></font>'); 

    408. 

  408. 	}

    409. 

  409. }

    410. 

  410. 

    411. 

  411. // Check PHP version

    412. 

  412. function bps_check_php_version() {

    413. 

  413. 	if (version_compare(PHP_VERSION, '5.0.0', '>=')) {

    414. 

  414.     _e('PHP Version Check: <font color="green"><strong>&radic; Running PHP5</strong></font><br>');

    415. 

  415. }

    416. 

  416. 	if (version_compare(PHP_VERSION, '5.0.0', '<')) {

    417. 

  417.     _e('<font color="red"><strong>WARNING! BPS requires PHP5 to function correctly. Your PHP version is: ' . PHP_VERSION . '</strong></font><br>');

    418. 

  418. 	}

    419. 

  419. }

    420. 

  420. 

    421. 

  421. // Heads Up Display - Check PHP version - top error message new activations / installations

    422. 

  422. function bps_check_php_version_error() {

    423. 

  423. 	if (version_compare(PHP_VERSION, '5.0.0', '>=')) {

    424. 

  424.     _e('');

    425. 

  425. 	}

    426. 

  426. 	if (version_compare(PHP_VERSION, '5.0.0', '<')) {

    427. 

  427.     _e('<font color="red"><strong>WARNING! BPS requires at least PHP5 to function correctly. Your PHP version is: ' . PHP_VERSION . '</font></strong><br><strong><a href="http://www.ait-pro.com/aitpro-blog/1166/bulletproof-security-plugin-support/bulletproof-security-plugin-guide-bps-version-45/#bulletproof-security-issues-problems" target="_blank">BPS Guide - PHP5 Solution</a></strong><br><strong>The BPS Guide will open in a new browser window. You will not be directed away from your WordPress Dashboard.</strong><br>');

    428. 

  428. 	}

    429. 

  429. }

    430. 

  430. 

    431. 

  431. // Heads Up Display - Check if Permalinks are enabled - top error message new activations / installations

    432. 

  432. $permalink_structure = get_option('permalink_structure');

    433. 

  433. function bps_check_permalinks_error() {

    434. 

  434. 	if ( get_option('permalink_structure') != '' ) { 

    435. 

  435. 	_e(''); 

    436. 

  436. 	} else {

    437. 

  437. 	_e('<br><font color="red"><strong>WARNING! Permalinks are NOT Enabled. Permalinks MUST be enabled for BPS to function correctly</strong></font><br><strong><a href="http://www.ait-pro.com/aitpro-blog/2304/wordpress-tips-tricks-fixes/permalinks-wordpress-custom-permalinks-wordpress-best-wordpress-permalinks-structure/" target="_blank">BPS Guide - Enabling Permalinks</a></strong><br><strong>The BPS Guide will open in a new browser window. You will not be directed away from your WordPress Dashboard.</strong><br>'); 

    438. 

  438. 	}

    439. 

  439. }

    440. 

  440. 

    441. 

  441. // Heads Up Display - Check if this is a Windows IIS server and if IIS7 supports permalink rewriting

    442. 

  442. function bps_check_iis_supports_permalinks() {

    443. 

  443. global $wp_rewrite, $is_IIS, $is_iis7;

    444. 

  444. 	if ( $is_IIS && !iis7_supports_permalinks() ) {

    445. 

  445. 	_e('<br><font color="red"><strong>WARNING! BPS has detected that your Server is a Windows IIS Server that does not support .htaccess rewriting. Do NOT activate BulletProof Security Modes unless you are absolutely sure you know what you are doing. Your Server Type is: ' . $_SERVER['SERVER_SOFTWARE'] . '</strong></font><br><strong><a href="http://codex.wordpress.org/Using_Permalinks" target="_blank">WordPress Codex - Using Permalinks - see IIS section</a></strong><br><strong>This link will open in a new browser window. You will not be directed away from your WordPress Dashboard.</strong><br>To remove this message permanently click <strong><a href="http://www.ait-pro.com/aitpro-blog/2566/bulletproof-security-plugin-support/bulletproof-security-error-messages" target="_blank">here.</a></strong><br>');

    446. 

  446. 	} else {

    447. 

  447. 	_e('');

    448. 

  448. 	}

    449. 

  449. }

    450. 

  450. 

    451. 

  451. // Heads Up Display - mkdir and chmod errors are suppressed on activation - check if /bps-backup folder exists

    452. 

  452. function bps_hud_check_bpsbackup() {

    453. 

  453. 	if( !is_dir (WP_CONTENT_DIR . '/bps-backup')) {

    454. 

  454. 	_e('<br><font color="red"><strong>WARNING! BPS was unable to automatically create the /wp-content/bps-backup folder.</strong></font><br><strong>You will need to create the /wp-content/bps-backup folder manually via FTP.  The folder permissions for the bps-backup folder need to be set to 755 in order to successfully perform permanent online backups.</strong><br>To remove this message permanently click <strong><a href="http://www.ait-pro.com/aitpro-blog/2566/bulletproof-security-plugin-support/bulletproof-security-error-messages" target="_blank">here.</a></strong><br>');

    455. 

  455. 	} else {

    456. 

  456. 	_e('');

    457. 

  457. 	}

    458. 

  458. 	if( !is_dir (WP_CONTENT_DIR . '/bps-backup/master-backups')) {

    459. 

  459. 	_e('<br><font color="red"><strong>WARNING! BPS was unable to automatically create the /wp-content/bps-backup/master-backups folder.</strong></font><br><strong>You will need to create the /wp-content/bps-backup/master-backups folder manually via FTP.  The folder permissions for the master-backups folder need to be set to 755 in order to successfully perform permanent online backups.</strong><br>To remove this message permanently click <strong><a href="http://www.ait-pro.com/aitpro-blog/2566/bulletproof-security-plugin-support/bulletproof-security-error-messages" target="_blank">here.</a></strong><br>');

    460. 

  460. 	} else {

    461. 

  461. 	_e('');

    462. 

  462. 	}

    463. 

  463. }

    464. 

  464. 

    465. 

  465. // Heads Up Display - Check if PHP Safe Mode is On - 1 is On - 0 is Off

    466. 

  466. function bps_check_safemode() {

    467. 

  467. 	if (ini_get('safe_mode') == '1') {

    468. 

  468. 	_e('<br><font color="red"><strong>WARNING! BPS has detected that Safe Mode is set to On in your php.ini file.</strong></font><br><strong>If you see errors that BPS was unable to automatically create the backup folders this is probably the reason why.</strong><br>To remove this message permanently click <strong><a href="http://www.ait-pro.com/aitpro-blog/2566/bulletproof-security-plugin-support/bulletproof-security-error-messages" target="_blank">here.</a></strong><br>');

    469. 

  469. 	} else {

    470. 

  470. 	_e('');

    471. 

  471. 	}

    472. 

  472. 	}

    473. 

  473. 

    474. 

  474. // Heads Up Display - Check if W3TC is active or not and check root htaccess file for W3TC htaccess code 

    475. 

  475. function bps_w3tc_htaccess_check($plugin_var) {

    476. 

  476. 	$filename = ABSPATH . '.htaccess';

    477. 

  477. 	$string = file_get_contents($filename);

    478. 

  478. 	$plugin_var = 'w3-total-cache';

    479. 

  479.     $return_var = in_array( $plugin_var. '/' .$plugin_var. '.php', apply_filters( 'active_plugins', get_option( 'active_plugins' ) ) );

    480. 

  480.     if ($return_var == 1) { // return $return_var; ---- 1 equals active

    481. 

  481. 	if (!strpos($string, "W3TC")) {

    482. 

  482. 	_e('<font color="red"><strong>W3 Total Cache is activated, but W3TC .htaccess code was NOT found in your root .htaccess file.</strong></font><br><strong>W3TC needs to be redeployed by clicking either the auto-install or deploy buttons. Click to <a href="admin.php?page=w3tc_general" >Redeploy W3TC.</a></strong><br><br>');

    483. 

  483. 	} 

    484. 

  484. 	}

    485. 

  485. 	elseif ($return_var != 1) {

    486. 

  486. 	if (strpos($string, "W3TC")) {

    487. 

  487. 	_e('<font color="red"><strong>W3 Total Cache is deactivated and W3TC .htaccess code was found in your root .htaccess file.</strong></font><br><strong>If this is just temporary then this warning message will go away when you reactivate W3TC. If you are planning on uninstalling W3TC the W3TC .htaccess code will be automatically removed from your root .htaccess file when you uninstall W3TC. If you manually edit your root htaccess file then refresh your browser to perform a new HUD htaccess file check.</strong><br><br>');

    488. 

  488. 	}

    489. 

  489. 	} 

    490. 

  490. }

    491. 

  491. 

    492. 

  492. // Heads Up Display - Check if WPSC is active or not and check root htaccess file for WPSC htaccess code 

    493. 

  493. function bps_wpsc_htaccess_check($plugin_var) {

    494. 

  494. 	$filename = ABSPATH . '.htaccess';

    495. 

  495. 	$string = file_get_contents($filename);

    496. 

  496. 	$plugin_var = 'wp-super-cache';

    497. 

  497.     $return_var = in_array( $plugin_var. '/' .'wp-cache.php', apply_filters( 'active_plugins', get_option( 'active_plugins' ) ) );

    498. 

  498.     if ($return_var == 1) { // return $return_var; ---- 1 equals active

    499. 

  499. 	if (!strpos($string, "WPSuperCache")) { 

    500. 

  500. 	_e('<font color="red"><strong>WP Super Cache is activated, but either you are not using WPSC mod_rewrite to serve cache files or the WPSC .htaccess code was NOT found in your root .htaccess file.</strong></font><br><strong>If you are not using WPSC mod_rewrite then just add this commented out line of code in anywhere in your root htaccess file - # WPSuperCache. If you are using WPSC mod_rewrite and the WPSC htaccess code is not in your root htaccess file then click this <a href="options-general.php?page=wpsupercache&tab=settings" >Update WPSC link</a> to go to the WPSC Settings page and click the Update Mod_Rewrite Rules button. It appears that the BPS filters are working correctly with the WPSC htaccess code being written to the bottom of the root htaccess file, but I recommend that you manually cut and paste the WPSC htaccess code and the section of Wordpress htaccess code that starts with # BEGIN WordPress and ends with # END WordPress to the top area of your root htaccess file right after Options -Indexes in your root htaccess file. Refresh your browser to perform a new HUD htaccess file check.</strong><br><br>');

    501. 

  501. 	} 

    502. 

  502. 	}

    503. 

  503. 	elseif ($return_var != 1) {

    504. 

  504. 	if (strpos($string, "WPSuperCache") ) {

    505. 

  505. 	_e('<font color="red"><strong>WP Super Cache is deactivated and WPSC .htaccess code - # BEGIN WPSuperCache # END WPSuperCache - was found in your root .htaccess file.</strong></font><br><strong>If this is just temporary then this warning message will go away when you reactivate WPSC. You will need to set up and reconfigure WPSC again when you reactivate WPSC. If you are planning on uninstalling WPSC the WPSC .htaccess code will be automatically removed from your root .htaccess file when you uninstall WPSC. If you added commented out line of code in anywhere in your root htaccess file - # WPSuperCache - then delete it and refresh your browser. It appears that the BPS filters are working correctly with the WPSC htaccess code being written to the bottom of the root htaccess file, but I recommend that you manually cut and paste the WPSC htaccess code and the section of Wordpress htaccess code that starts with # BEGIN WordPress and ends with # END WordPress to the top area of your root htaccess file right after Options -Indexes in your root htaccess file.</strong><br><br>');

    506. 

  506. 	}

    507. 

  507. 	} 

    508. 

  508. }

    509. 

  509. 

    510. 

  510. // Get WordPress Root Installation Folder - Borrowed from WP Core 

    511. 

  511. function bps_wp_get_root_folder() {

    512. 

  512. $site_root = parse_url(get_option('siteurl'));

    513. 

  513. 	if ( isset( $site_root['path'] ) )

    514. 

  514. 	$site_root = trailingslashit($site_root['path']);

    515. 

  515. 	else

    516. 

  516. 	$site_root = '/';

    517. 

  517. 	return $site_root;

    518. 

  518. }

    519. 

  519. 

    520. 

  520. // Display Root or Subfolder Installation Type

    521. 

  521. function bps_wp_get_root_folder_display_type() {

    522. 

  522. $site_root = parse_url(get_option('siteurl'));

    523. 

  523. 	if ( isset( $site_root['path'] ) )

    524. 

  524. 	$site_root = trailingslashit($site_root['path']);

    525. 

  525. 	else

    526. 

  526. 	$site_root = '/';

    527. 

  527. 	if (preg_match('/[a-zA-Z0-9]/', $site_root)) {

    528. 

  528. 	echo "Subfolder Installation";

    529. 

  529. 	} else {

    530. 

  530. 	echo "Root Folder Installation";

    531. 

  531. 	}

    532. 

  532. }

    533. 

  533. 

    534. 

  534. // Check for Multisite

    535. 

  535. function bps_multsite_check() {  

    536. 

  536. 	if ( is_multisite() ) { 

    537. 

  537. 	_e('Multisite: <strong>Multisite is enabled</strong><br>');

    538. 

  538. 	} else {

    539. 

  539. 	_e('Multisite: <strong>Multisite is not enabled</strong><br>');

    540. 

  540. 	}

    541. 

  541. }

    542. 

  542. 

    543. 

  543. // Security Modes Page - AutoMagic Single site message

    544. 

  544. function bps_multsite_check_smode_single() {  

    545. 

  545. global $wpdb;

    546. 

  546. 	if ( !is_multisite() ) { 

    547. 

  547. 	_e('<font color="green"><strong>Use These AutoMagic Buttons For Your Website<br>For Standard WP Installations</strong></font>');

    548. 

  548. 	} else {

    549. 

  549. 	_e('<strong>Do Not Use These AutoMagic Buttons</strong><br>For Standard WP Single Sites Only');

    550. 

  550. 	}

    551. 

  551. }

    552. 

  552. 

    553. 

  553. // Security Modes Page - AutoMagic Multisite sub-directory message

    554. 

  554. function bps_multsite_check_smode_MUSDir() {  

    555. 

  555. global $wpdb;

    556. 

  556. 	if ( is_multisite() && !is_subdomain_install() ) { 

    557. 

  557. 	_e('<font color="green"><strong>Use These AutoMagic Buttons For Your Website<br>For WP Network / MU sub-directory Installations</strong></font>');

    558. 

  558. 	} else {

    559. 

  559. 	_e('<strong>Do Not Use These AutoMagic Buttons</strong><br>For Network / MU Sub-directory Webites Only');

    560. 

  560. 	}

    561. 

  561. }

    562. 

  562. 

    563. 

  563. // Security Modes Page - AutoMagic Multisite sub-domain message

    564. 

  564. function bps_multsite_check_smode_MUSDom() {  

    565. 

  565. global $wpdb;

    566. 

  566. 	if ( is_multisite() && is_subdomain_install() ) { 

    567. 

  567. 	//if ( is_subdomain_install() ) {

    568. 

  568. 	_e('<font color="green"><strong>Use These AutoMagic Buttons For Your Website<br>For WP Network / MU sub-domain Installations</strong></font>');

    569. 

  569. 	} else {

    570. 

  570. 	_e('<strong>Do Not Use These AutoMagic Buttons</strong><br>For Network / MU Sub-domain Websites Only');

    571. 

  571. 	}

    572. 

  572. }

    573. 

  573. 

    574. 

  574. /*

    575. 

  575. // Security Modes Page - htaccess warning for Multisite

    576. 

  576. function bps_multsite_check_smode() {  

    577. 

  577. 	if ( is_multisite() ) { 

    578. 

  578. 	_e('<strong>WordPress Network (Multisite) Installation Detected</strong><br>Please read the Read Me help hover tooltip for an additional step required to set up WordPress Network sites.<br>');

    579. 

  579. 	} else {

    580. 

  580. 	_e('');

    581. 

  581. 	}

    582. 

  582. }

    583. 

  583. */

    584. 

  584. 

    585. 

  585. // Check if username Admin exists

    586. 

  586. function check_admin_username() {

    587. 

  587. 	global $wpdb;

    588. 

  588. 	$name = $wpdb->get_var("SELECT user_login FROM $wpdb->users WHERE user_login='admin'");

    589. 

  589. 	if ($name=="admin"){

    590. 

  590. 	_e('<font color="red"><strong>Recommended Security Changes: Username "admin" is being used. It is recommended that you change the default administrator username "admin" to a new unique username.</strong></font><br><br>');

    591. 

  591. 	} else {

    592. 

  592. 	_e('<font color="green"><strong>&radic; The Administrator username "admin" is not being used</strong></font><br>');

    593. 

  593. 	}

    594. 

  594. }

    595. 

  595. 

    596. 

  596. // Check for WP readme.html file and if valid BPS .htaccess file is activated

    597. 

  597. // Get contents of Root .htaccess file from 3-45 - if "6" found in string position 17 - offset 16 - good - else bad

    598. 

  598. // Check for WP readme.html file and if valid BPS .htaccess file is activated

    599. 

  599. function bps_filesmatch_check_readmehtml() {

    600. 

  600. 	$htaccess_filename = ABSPATH . '.htaccess';

    601. 

  601. 	$filename = ABSPATH . 'readme.html';

    602. 

  602. 	$section = @file_get_contents($htaccess_filename, NULL, NULL, 3, 45);

    603. 

  603. 	$check_string = @strpos($section, "6", 16);

    604. 

  604. 	$check_stringBPSQSE = file_get_contents($htaccess_filename);

    605. 

  605. 	if (file_exists($htaccess_filename)) {

    606. 

  606. 	if ($check_string == "17") { 

    607. 

  607. 		_e('');

    608. 

  608. 		}

    609. 

  609. 		if ( !file_exists($filename)) {

    610. 

  610. 		_e('<font color="green"><strong>&radic; The WP readme.html file does not exist</strong></font><br>');

    611. 

  611. 		} else {

    612. 

  612. 		if ($check_string == "17" && strpos($check_stringBPSQSE, "BPSQSE")) {

    613. 

  613. 		_e('<font color="green"><strong>&radic; The WP readme.html file is .htaccess protected</strong></font><br>');

    614. 

  614. 		} else {

    615. 

  615. 		_e('<font color="red"><strong>The WP readme.html file is not .htaccess protected</strong></font><br>');

    616. 

  616. 		}

    617. 

  617. }}}

    618. 

  618. 

    619. 

  619. // Check for WP /wp-admin/install.php file and if valid BPS .htaccess file is activated

    620. 

  620. // Get contents of Root .htaccess file from 3-45 - if "6" found in string position 17 - offset 16 - good - else bad

    621. 

  621. function bps_filesmatch_check_installphp() {

    622. 

  622. 	$htaccess_filename = ABSPATH . 'wp-admin/.htaccess';

    623. 

  623. 	$filename = ABSPATH . 'wp-admin/install.php';

    624. 

  624. 	$check_stringBPSQSE = file_get_contents($htaccess_filename);

    625. 

  625. 	$section = @file_get_contents($htaccess_filename, NULL, NULL, 3, 45);

    626. 

  626. 	$check_string = @strpos($section, "6", 16);	

    627. 

  627. 	if (file_exists($htaccess_filename)) {

    628. 

  628. 	if ($check_string == "17") { 

    629. 

  629. 		_e('');

    630. 

  630. 		}

    631. 

  631. 		if ( !file_exists($filename)) {

    632. 

  632. 		_e('<font color="green"><strong>&radic; The WP /wp-admin/install.php file does not exist</strong></font><br>');

    633. 

  633. 		} else {

    634. 

  634. 		if ($check_string == "17" && strpos($check_stringBPSQSE, "BPSQSE")) {

    635. 

  635. 		_e('<font color="green"><strong>&radic; The WP /wp-admin/install.php file is .htaccess protected</strong></font><br>');

    636. 

  636. 		} else {

    637. 

  637. 		_e('<font color="red"><strong>The WP /wp-admin/install.php file is not .htaccess protected</strong></font><br>');

    638. 

  638. 		}

    639. 

  639. }}}

    640. 

  640. 

    641. 

  641. // Check BPS Pro Modules Status

    642. 

  642. function check_bps_pro_mod () {

    643. 

  643. 	global $bulletproof_security;

    644. 

  644. 	$filename_pro = 'wp-content/plugins/bulletproof-security/admin/options-bps-pro-modules.php';

    645. 

  645. 	if (file_exists(ABSPATH . $filename_pro)) {

    646. 

  646. 	$section_pro = file_get_contents(ABSPATH . $filename, NULL, NULL, 5, 10);

    647. 

  647. 	_e('<font color="green"><strong>&radic; BulletProof Security Pro Modules are installed and activated.</strong></font><br>');

    648. 

  648. 	var_dump($section_pro);

    649. 

  649. 	} else {

    650. 

  650. 	_e('<font color="black"><br>*BPS Pro Modules are not installed</font><br>');

    651. 

  651. 	}

    652. 

  652. }

    653. 

  653. 

    654. 

  654. // Get SQL Mode from WPDB

    655. 

  655. function bps_get_sql_mode() {

    656. 

  656. 	global $wpdb;

    657. 

  657. 	$mysqlinfo = $wpdb->get_results("SHOW VARIABLES LIKE 'sql_mode'");

    658. 

  658.         if (is_array($mysqlinfo)) $sql_mode = $mysqlinfo[0]->Value;

    659. 

  659.         if (empty($sql_mode)) $sql_mode = __('Not Set');

    660. 

  660. 		else $sql_mode = __('Off');

    661. 

  661. } 

    662. 

  662. 

    663. 

  663. // Show DB errors should already be set to false in /includes/wp-db.php

    664. 

  664. // Extra function insurance show_errors = false

    665. 

  665. function bps_wpdb_errors_off() {

    666. 

  666. 	global $wpdb;

    667. 

  667. 	$wpdb->show_errors = false;

    668. 

  668. 	if ($wpdb->show_errors != false) {

    669. 

  669. 	_e('<font color="red"><strong>WARNING! WordPress DB Show Errors Is Set To: true! DB errors will be displayed</strong></font><br>');

    670. 

  670. 	} else {

    671. 

  671. 	_e('<font color="green"><strong>&radic; WordPress DB Show Errors Function Is Set To: </strong></font>');

    672. 

  672. 	_e('<font color="black"><strong>false</strong></font><br>');

    673. 

  673. 	_e('<font color="green"><strong>&radic; WordPress Database Errors Are Turned Off</strong></font><br>');

    674. 

  674. 	}	

    675. 

  675. }

    676. 

  676. 

    677. 

  677. // Hide / Remove WordPress Version Meta Generator Tag - echo only for remove_action('wp_head', 'wp_generator');

    678. 

  678. function bps_wp_remove_version() {

    679. 

  679. 	global $wp_version;

    680. 

  680. 	_e('<font color="green"><strong>&radic; WordPress Meta Generator Tag Removed<br>&radic; WordPress Version Is Not Displayed / Not Shown</strong></font><br>');

    681. 

  681. }

    682. 

  682. 

    683. 

  683. // Return Nothing For WP Version Callback

    684. 

  684. function bps_wp_generator_meta_removed() {

    685. 

  685. 	if ( !is_admin()) {

    686. 

  686. 	global $wp_version;

    687. 

  687. 	$wp_version = '';

    688. 

  688. 	}

    689. 

  689. }

    690. 

  690. ?>
    691.