PageRenderTime 40ms CodeModel.GetById 27ms RepoModel.GetById 0ms app.codeStats 1ms

/wp-content/plugins/bulletproof-security/admin/options.php

https://bitbucket.org/crypticrod/sr_wp_code
PHP | 2318 lines | 2024 code | 150 blank | 144 comment | 274 complexity | a2bd079aa25cc7afa3ded71f8a352628 MD5 | raw file
Possible License(s): AGPL-1.0, GPL-2.0, LGPL-2.1, GPL-3.0, LGPL-2.0, AGPL-3.0 
    

  1. <?php

    2. 

  2. // Direct calls to this file are Forbidden when core files are not present

    3. 

  3. if ( !function_exists('add_action') ){

    4. 

  4. 		header('Status: 403 Forbidden');

    5. 

  5. 		header('HTTP/1.1 403 Forbidden');

    6. 

  6. 		exit();

    7. 

  7. }

    8. 

  8.  

    9. 

  9. if ( !current_user_can('manage_options') ){ 

    10. 

  10. 		header('Status: 403 Forbidden');

    11. 

  11. 		header('HTTP/1.1 403 Forbidden');

    12. 

  12. 		exit();

    13. 

  13. }

    14. 

  14. ?>

    15. 

  15. 

    16. 

  16. <div id="message" class="updated" style="border:1px solid #999999; margin-left:70px; margin-top:9px;">

    17. 

  17. <?php

    18. 

  18. // HUD - Heads Up Display - Warnings and Error messages

    19. 

  19. echo bps_check_php_version_error();

    20. 

  20. echo bps_check_permalinks_error();

    21. 

  21. echo bps_check_iis_supports_permalinks();

    22. 

  22. echo bps_hud_check_bpsbackup();

    23. 

  23. echo bps_check_safemode();

    24. 

  24. echo @bps_w3tc_htaccess_check($plugin_var);

    25. 

  25. echo @bps_wpsc_htaccess_check($plugin_var);

    26. 

  26. 

    27. 

  27. // Form - copy and rename htaccess file to root folder

    28. 

  28. // BulletProof Security and Default Mode

    29. 

  29. $bpsecureroot = 'unchecked';

    30. 

  30. $bpdefaultroot = 'unchecked';

    31. 

  31. if (isset($_POST['submit12']) && current_user_can('manage_options')) {

    32. 

  32. 	check_admin_referer( 'bulletproof_security_root_copy' );

    33. 

  33. 	

    34. 

  34. 	$old = ABSPATH . '/wp-content/plugins/bulletproof-security/admin/htaccess/default.htaccess';

    35. 

  35. 	$new = ABSPATH . '/.htaccess';

    36. 

  36. 	$old1 = ABSPATH . '/wp-content/plugins/bulletproof-security/admin/htaccess/secure.htaccess';

    37. 

  37. 	$new1 = ABSPATH . '/.htaccess';

    38. 

  38. 	

    39. 

  39. 	$selected_radio = $_POST['selection12'];

    40. 

  40. 	if ($selected_radio == 'bpsecureroot') {

    41. 

  41. 	$bpsecureroot = 'checked';

    42. 

  42. 		@copy($old1, $new1);

    43. 

  43. 		chmod($new1, 0644);

    44. 

  44. 		if (!copy($old1, $new1)) {

    45. 

  45. 	_e('<font color="red"><strong>Failed to Activate BulletProof Security Root Folder Protection! Your Website is NOT protected with BulletProof Security!</strong></font><br>');

    46. 

  46.    	} else {

    47. 

  47. 	_e('<font color="green"><strong>BulletProof Security Root Folder Protection Activated. Your website Root folder is now protected with BulletProof Security.</strong></font><br><font color="red"><strong>IMPORTANT!</strong></font><strong> BulletProof Mode for the wp-admin folder MUST also be activated when you have BulletProof Mode activated for the Root folder.</strong><br>');

    48. 

  48.     }

    49. 

  49. 	}

    50. 

  50. 	elseif ($selected_radio == 'bpdefaultroot') {

    51. 

  51. 	$bpdefaultroot = 'checked';

    52. 

  52. 		copy($old, $new);

    53. 

  53. 		chmod($new, 0644);

    54. 

  54. 		if (!copy($old, $new)) {

    55. 

  55. 	_e('<font color="red"><strong>Failed to Activate Default .htaccess Mode!</strong></font><br>');

    56. 

  56.    	} else {

    57. 

  57. 	_e('<font color="red"><strong>Warning: Default .htaccess Mode Is Activated In Your Website Root Folder. Your Website Is Not Protected With BulletProof Security.</strong></font>');

    58. 

  58. 	}

    59. 

  59. 	}

    60. 

  60. }

    61. 

  61. 

    62. 

  62. // Form - copy and rename htaccess file to wp-admin folder

    63. 

  63. // BulletProof Security wp-admin

    64. 

  64. $bpsecurewpadmin = 'unchecked';

    65. 

  65. $Removebpsecurewpadmin = 'unchecked';

    66. 

  66. if (isset($_POST['submit13']) && current_user_can('manage_options')) {

    67. 

  67. 	check_admin_referer( 'bulletproof_security_wpadmin_copy' );

    68. 

  68. 	

    69. 

  69. 	$oldadmin1 = ABSPATH . 'wp-content/plugins/bulletproof-security/admin/htaccess/wpadmin-secure.htaccess';

    70. 

  70. 	$newadmin1 = ABSPATH . 'wp-admin/.htaccess';

    71. 

  71. 	$deleteWpadminHtaccess = ABSPATH . 'wp-admin/.htaccess';

    72. 

  72. 	

    73. 

  73. 	$selected_radio = $_POST['selection13'];

    74. 

  74. 	if ($selected_radio == 'bpsecurewpadmin') {

    75. 

  75. 	$bpsecurewpadmin = 'checked';

    76. 

  76. 		copy($oldadmin1, $newadmin1);

    77. 

  77. 		chmod($newadmin1, 0644);

    78. 

  78. 		if (!copy($oldadmin1, $newadmin1)) {

    79. 

  79. 	_e('<font color="red"><strong>Failed to Activate BulletProof Security wp-admin Folder Protection! Your wp-admin folder is NOT protected with BulletProof Security!</strong></font><br>');

    80. 

  80.    	} else {

    81. 

  81. 	_e('<font color="green"><strong>BulletProof Security wp-admin Folder Protection Activated. Your wp-admin folder is now protected with BulletProof Security.</strong></font>');

    82. 

  82. 	}

    83. 

  83. 	}

    84. 

  84. 	elseif ($selected_radio == 'Removebpsecurewpadmin') {

    85. 

  85. 	$Removebpsecurewpadmin = 'checked';

    86. 

  86. 	$fh = fopen($deleteWpadminHtaccess, 'a');

    87. 

  87. 	fwrite($fh, 'delete');

    88. 

  88. 	fclose($fh);

    89. 

  89. 	unlink($deleteWpadminHtaccess);

    90. 

  90. 	if (file_exists($deleteWpadminHtaccess)) {

    91. 

  91. 	_e('<font color="red"><strong>Failed to Delete the wp-admin .htaccess file! The file does not exist. It may have been deleted or renamed already.</strong></font><br>');

    92. 

  92.    	} else {

    93. 

  93. 	_e('<font color="green"><strong>The wp-admin .htaccess file has been Deleted. </strong></font><font color="red"><strong>Your wp-admin folder is no longer .htaccess protected.</strong></font> If you are testing then be sure to reactivate BulletProof Mode for your wp-admin folder when you are done testing. If you are removing BPS from your website then be sure to also Activate Default Mode for your Root folder. The Root and wp-admin BulletProof Modes must be activated together or removed togeher.</strong></font><br>');

    94. 

  94. 	}

    95. 

  95. 	}

    96. 

  96. }

    97. 

  97. 

    98. 

  98. // Form rename Deny All htaccess file to .htaccess for the BPS Master htaccess folder

    99. 

  99. $bps_rename_htaccess_files = 'unchecked';

    100. 

  100. if (isset($_POST['submit8']) && current_user_can('manage_options')) {

    101. 

  101. 	check_admin_referer( 'bulletproof_security_denyall_master' );

    102. 

  102. 	

    103. 

  103. 	$bps_rename_htaccess = ABSPATH . '/wp-content/plugins/bulletproof-security/admin/htaccess/deny-all.htaccess';

    104. 

  104. 	$bps_rename_htaccess_renamed = ABSPATH . '/wp-content/plugins/bulletproof-security/admin/htaccess/.htaccess';

    105. 

  105. 	

    106. 

  106. 	$selected_radio = $_POST['selection8'];

    107. 

  107. 	if ($selected_radio == 'bps_rename_htaccess_files') {

    108. 

  108. 	$bps_rename_htaccess_files = 'checked';

    109. 

  109. 		copy($bps_rename_htaccess, $bps_rename_htaccess_renamed);

    110. 

  110. 		if (!copy($bps_rename_htaccess, $bps_rename_htaccess_renamed)) {

    111. 

  111. 	_e('<font color="red"><strong>Failed to Activate BulletProof Security Deny All Folder Protection! Your BPS Master htaccess folder is NOT Protected with Deny All htaccess folder protection!</strong></font><br>');

    112. 

  112.    	} else {

    113. 

  113. 	_e('BulletProof Security Deny All Folder Protection <font color="green"><strong>Activated.</strong></font> Your BPS Master htaccess folder is Now Protected with Deny All htaccess folder protection.');

    114. 

  114. 	}

    115. 

  115. }

    116. 

  116. }

    117. 

  117. 

    118. 

  118. // Form copy and rename the Deny All htaccess file to the BPS backup folder

    119. 

  119. // /wp-content/bps-backup

    120. 

  120. $bps_rename_htaccess_files_backup = 'unchecked';

    121. 

  121. if (isset($_POST['submit14']) && current_user_can('manage_options')) {

    122. 

  122. 	check_admin_referer( 'bulletproof_security_denyall_bpsbackup' );

    123. 

  123. 	

    124. 

  124. 	$bps_rename_htaccess_backup = ABSPATH . '/wp-content/plugins/bulletproof-security/admin/htaccess/deny-all.htaccess';

    125. 

  125. 	$bps_rename_htaccess_backup_online = ABSPATH . '/wp-content/bps-backup/.htaccess';

    126. 

  126. 	

    127. 

  127. 	$selected_radio = $_POST['selection14'];

    128. 

  128. 	if ($selected_radio == 'bps_rename_htaccess_files_backup') {

    129. 

  129. 	$bps_rename_htaccess_files_backup = 'checked';

    130. 

  130. 		copy($bps_rename_htaccess_backup, $bps_rename_htaccess_backup_online);

    131. 

  131. 		if (!copy($bps_rename_htaccess_backup, $bps_rename_htaccess_backup_online)) {

    132. 

  132. 	_e('<font color="red"><strong>Failed to Activate BulletProof Security Deny All Folder Protection! Your BPS /wp-content/bps-backup folder is NOT Protected with Deny All htaccess folder protection!</strong></font><br>');

    133. 

  133.    	} else {

    134. 

  134. 	_e('BulletProof Security Deny All Folder Protection <font color="green"><strong>Activated.</strong></font> Your BPS /wp-content/bps-backup folder is Now Protected with Deny All htaccess folder protection.');

    135. 

  135. 	}

    136. 

  136. 	}

    137. 

  137. }

    138. 

  138. 

    139. 

  139. // Form - Backup and rename existing and / or currently active htaccess files from 

    140. 

  140. // the root and wpadmin folders to /wp-content/bps-backup

    141. 

  141. $backup_htaccess = 'unchecked';

    142. 

  142. if (isset($_POST['submit9']) && current_user_can('manage_options')) {

    143. 

  143. 	check_admin_referer( 'bulletproof_security_backup_active_htaccess_files' );

    144. 

  144. 	

    145. 

  145. 	$old_backroot = ABSPATH . '/.htaccess';

    146. 

  146. 	$new_backroot = ABSPATH . '/wp-content/bps-backup/root.htaccess';

    147. 

  147. 	$old_backwpadmin = ABSPATH . '/wp-admin/.htaccess';

    148. 

  148. 	$new_backwpadmin = ABSPATH . '/wp-content/bps-backup/wpadmin.htaccess';

    149. 

  149. 	

    150. 

  150. 	$selected_radio = $_POST['selection9'];

    151. 

  151. 	if ($selected_radio == 'backup_htaccess') {

    152. 

  152. 	$backup_htaccess = 'checked';

    153. 

  153. 	if ( !file_exists($old_backroot)) { 

    154. 

  154. 	_e('<font color="red"><strong>You do not currently have an .htaccess file in your Root folder to backup.</strong></font><br>');

    155. 

  155. 	} else {	

    156. 

  156. 	if (file_exists($old_backroot)) { 

    157. 

  157.  		copy($old_backroot, $new_backroot);

    158. 

  158. 		if (!copy($old_backroot, $new_backroot)) {

    159. 

  159. 	_e('<font color="red"><strong>Failed to Backup Your Root .htaccess File! File copy function failed. Check the folder permissions for the /wp-content/bps-backup folder. Folder permissions should be set to 755.</strong></font><br><br>');

    160. 

  160. 	} else {

    161. 

  161. 	_e('<font color="green"><strong>Your currently active Root .htaccess file has been backed up successfully!</strong></font><br>Use the Restore feature to restore your .htaccess files if you run into a problem at any time. If you make additional changes or install a plugin that writes to the htaccess files then back them up again. This will overwrite the currently backed up htaccess files. Please read the <font color="red"><strong>CAUTION:</strong></font> Read Me ToolTip on the Backup & Restore Page for more detailed information.<br><br>');

    162. 

  162. 	

    163. 

  163. 	if ( !file_exists($old_backwpadmin)) { 

    164. 

  164. 	_e('<font color="red"><strong>You do not currently have an .htaccess file in your wp-admin folder to backup.</strong></font><br>');

    165. 

  165. 	} else {

    166. 

  166. 	if (file_exists($old_backwpadmin)) { 	

    167. 

  167. 		copy($old_backwpadmin, $new_backwpadmin);

    168. 

  168. 		if (!copy($old_backwpadmin, $new_backwpadmin)) {

    169. 

  169. 	_e('<font color="red"><strong>Failed to Backup Your wp-admin .htaccess File! File copy function failed. Check the folder permissions for the /wp-content/bps-backup folder. Folder permissions should be set to 755.</strong></font><br>');

    170. 

  170. 	} else {

    171. 

  171. 	_e('<font color="green"><strong>Your currently active wp-admin .htaccess file has been backed up successfully!</strong></font><br>');

    172. 

  172. 	}

    173. 

  173. }}}}}}}

    174. 

  174. 

    175. 

  175. // Form - Restore backed up htaccess files

    176. 

  176. $restore_htaccess = 'unchecked';

    177. 

  177. if (isset($_POST['submit10']) && current_user_can('manage_options')) {

    178. 

  178. 	check_admin_referer( 'bulletproof_security_restore_active_htaccess_files' );

    179. 

  179. 	

    180. 

  180. 	$old_restoreroot = ABSPATH . '/wp-content/bps-backup/root.htaccess';

    181. 

  181. 	$new_restoreroot = ABSPATH . '/.htaccess';

    182. 

  182. 	$old_restorewpadmin = ABSPATH . '/wp-content/bps-backup/wpadmin.htaccess';

    183. 

  183. 	$new_restorewpadmin = ABSPATH . '/wp-admin/.htaccess';

    184. 

  184. 	

    185. 

  185. 	$selected_radio = $_POST['selection10'];

    186. 

  186. 	if ($selected_radio == 'restore_htaccess') {

    187. 

  187. 		$restore_htaccess = 'checked';

    188. 

  188. 	if (file_exists($old_restoreroot)) { 

    189. 

  189.  		copy($old_restoreroot, $new_restoreroot);

    190. 

  190. 		if (!copy($old_restoreroot, $new_restoreroot)) {

    191. 

  191. 	_e('<font color="red"><strong>Failed to Restore Your Root .htaccess File! This is most likely because you DO NOT currently have a Backed up Root .htaccess file.</strong></font><br>');

    192. 

  192.    	} else {

    193. 

  193. 	_e('<font color="green"><strong>Your Root .htaccess file has been Restored successfully!</strong></font><br>');

    194. 

  194. 	if (file_exists($old_restorewpadmin)) { 	

    195. 

  195. 		copy($old_restorewpadmin, $new_restorewpadmin);

    196. 

  196. 		if (!copy($old_restorewpadmin, $new_restorewpadmin)) {

    197. 

  197. 	_e('<font color="red"><strong>Failed to Restore Your wp-admin .htaccess File! This is most likely because you DO NOT currently have a Backed up wp-admin .htaccess file.</strong></font><br>');

    198. 

  198.    	} else {

    199. 

  199. 	_e('<font color="green"><strong>Your wp-admin .htaccess file has been Restored successfully!</strong></font><br>');

    200. 

  200. 	}

    201. 

  201. }}}}}

    202. 

  202. 

    203. 

  203. // Form - Backup the BPS Master Files to /wp-content/bps-backup/master-backups

    204. 

  204. $backup_master_htaccess_files = 'unchecked';

    205. 

  205. if (isset($_POST['submit11']) && current_user_can('manage_options')) {

    206. 

  206. 	check_admin_referer( 'bulletproof_security_backup_master_htaccess_files' );

    207. 

  207. 	

    208. 

  208. $default_master = ABSPATH . '/wp-content/plugins/bulletproof-security/admin/htaccess/default.htaccess';

    209. 

  209. $default_master_backup = ABSPATH . '/wp-content/bps-backup/master-backups/backup_default.htaccess';

    210. 

  210. $secure_master = ABSPATH . '/wp-content/plugins/bulletproof-security/admin/htaccess/secure.htaccess';

    211. 

  211. $secure_master_backup = ABSPATH . '/wp-content/bps-backup/master-backups/backup_secure.htaccess';

    212. 

  212. $wpadmin_master = ABSPATH . '/wp-content/plugins/bulletproof-security/admin/htaccess/wpadmin-secure.htaccess';

    213. 

  213. $wpadmin_master_backup = ABSPATH . '/wp-content/bps-backup/master-backups/backup_wpadmin-secure.htaccess';

    214. 

  214. $maintenance_master = ABSPATH . '/wp-content/plugins/bulletproof-security/admin/htaccess/maintenance.htaccess';

    215. 

  215. $maintenance_master_backup = ABSPATH . '/wp-content/bps-backup/master-backups/backup_maintenance.htaccess';

    216. 

  216. $bp_maintenance_master = ABSPATH . '/wp-content/plugins/bulletproof-security/admin/htaccess/bp-maintenance.php';

    217. 

  217. $bp_maintenance_master_backup = ABSPATH . '/wp-content/bps-backup/master-backups/backup_bp-maintenance.php';

    218. 

  218. $bps_maintenance_values = ABSPATH . '/wp-content/plugins/bulletproof-security/admin/htaccess/bps-maintenance-values.php';

    219. 

  219. $bps_maintenance_values_backup = ABSPATH . '/wp-content/bps-backup/master-backups/backup_bps-maintenance-values.php';

    220. 

  220. 

    221. 

  221. 	$selected_radio = $_POST['selection11'];

    222. 

  222. 	if ($selected_radio == 'backup_master_htaccess_files') {

    223. 

  223. 		$backup_master_htaccess_files = 'checked';

    224. 

  224. 	if (file_exists($default_master)) { 

    225. 

  225.  		copy($default_master, $default_master_backup);

    226. 

  226. 		if (!copy($default_master, $default_master_backup)) {

    227. 

  227. 	_e('<font color="red"><strong>Failed to Backup Your default.htaccess File!</strong></font><br>');

    228. 

  228.    	} else {

    229. 

  229. 	_e('<font color="green"><strong>The default.htaccess file has been backed up successfully!</strong></font><br>');

    230. 

  230. 	}

    231. 

  231. 	if (file_exists($secure_master)) { 	

    232. 

  232. 		copy($secure_master, $secure_master_backup);

    233. 

  233. 		if (!copy($secure_master, $secure_master_backup)) {

    234. 

  234. 	_e('<font color="red"><strong>Failed to Backup Your secure.htaccess File!</strong></font><br>');

    235. 

  235.    	} else {

    236. 

  236. 	_e('<font color="green"><strong>The secure.htaccess file has been backed up successfully!</strong></font><br>');

    237. 

  237. 	}

    238. 

  238. 	if (file_exists($wpadmin_master)) { 	

    239. 

  239. 		copy($wpadmin_master, $wpadmin_master_backup);

    240. 

  240. 		if (!copy($wpadmin_master, $wpadmin_master_backup)) {

    241. 

  241. 	_e('<font color="red"><strong>Failed to Backup Your wpadmin-secure.htaccess File!</strong></font><br>');

    242. 

  242.    	} else {

    243. 

  243. 	_e('<font color="green"><strong>The wpadmin-secure.htaccess file has been backed up successfully!</strong></font><br>');

    244. 

  244. 	}

    245. 

  245. 	if (file_exists($maintenance_master)) { 	

    246. 

  246. 		copy($maintenance_master, $maintenance_master_backup);

    247. 

  247. 		if (!copy($maintenance_master, $maintenance_master_backup)) {

    248. 

  248. 	_e('<font color="red"><strong>Failed to Backup Your maintenance.htaccess File!</strong></font><br>');

    249. 

  249.    	} else {

    250. 

  250. 	_e('<font color="green"><strong>The maintenance.htaccess file has been backed up successfully!</strong></font><br>');

    251. 

  251. 	}

    252. 

  252. 	if (file_exists($bp_maintenance_master)) { 	

    253. 

  253. 		copy($bp_maintenance_master, $bp_maintenance_master_backup);

    254. 

  254. 		if (!copy($bp_maintenance_master, $bp_maintenance_master_backup)) {

    255. 

  255. 	_e('<font color="red"><strong>Failed to Backup Your bp-maintenance.php File!</strong></font><br>');

    256. 

  256.    	} else {

    257. 

  257. 	_e('<font color="green"><strong>The bp-maintenance.php file has been backed up successfully!</strong></font><br>');

    258. 

  258. 	}

    259. 

  259. 	if (file_exists($bps_maintenance_values)) { 	

    260. 

  260. 		copy($bps_maintenance_values, $bps_maintenance_values_backup);

    261. 

  261. 		if (!copy($bps_maintenance_values, $bps_maintenance_values_backup)) {

    262. 

  262. 	_e('<font color="red"><strong>Failed to Backup Your bps-maintenance-values.php File!</strong></font><br>');

    263. 

  263.    	} else {

    264. 

  264. 	_e('<font color="green"><strong>The bps-maintenance-values.php file has been backed up successfully!</strong></font><br>');

    265. 

  265. 	}

    266. 

  266. }}}}}}}}

    267. 

  267. 	

    268. 

  268. // Form - Activate Maintenance Mode copy and rename maintenance htaccess, bp-maintenance.php and bps-maintenance-values.php to root

    269. 

  269. $bpmaintenance = 'unchecked';

    270. 

  270. if (isset($_POST['submit15']) && current_user_can('manage_options')) {

    271. 

  271. 	check_admin_referer( 'bulletproof_security_maintenance_copy' );

    272. 

  272. 

    273. 

  273. $oldmaint = ABSPATH . '/wp-content/plugins/bulletproof-security/admin/htaccess/maintenance.htaccess';

    274. 

  274. $newmaint = ABSPATH . '/.htaccess';

    275. 

  275. $oldmaint1 = ABSPATH . '/wp-content/plugins/bulletproof-security/admin/htaccess/bp-maintenance.php';

    276. 

  276. $newmaint1 = ABSPATH . '/bp-maintenance.php';

    277. 

  277. $oldmaint_values = ABSPATH . '/wp-content/plugins/bulletproof-security/admin/htaccess/bps-maintenance-values.php';

    278. 

  278. $newmaint_values = ABSPATH . '/bps-maintenance-values.php';

    279. 

  279. 

    280. 

  280. 	$selected_radio = $_POST['selection15'];

    281. 

  281. 	if ($selected_radio == 'bpmaintenance') {

    282. 

  282. 	$bpmaintenance = 'checked';

    283. 

  283. 		copy($oldmaint, $newmaint);

    284. 

  284. 		copy($oldmaint1, $newmaint1);

    285. 

  285. 		copy($oldmaint_values, $newmaint_values);

    286. 

  286. 		if (!copy($oldmaint, $newmaint)) {

    287. 

  287. 	_e('<p><font color="red"><strong>Failed to Activate Maintenance Mode! Your Website is NOT in Maintenance Mode!<br>If your Root .htaccess file is locked you must unlock it first before activating Maintenance Mode.</strong></font></p>');

    288. 

  288.    	} else {

    289. 

  289. 	_e('<font color="red"><strong>Warning: </strong></font>Maintenance Mode Is Activated. Your website is now displaying the Website Under Maintenance page to everyone except you. To switch out of Maintenance mode activate BulletProof Security Mode. You can log in and out of your Dashboard / WordPress website in Maintenance Mode as long as your current IP address does not change. If your current IP address changes you will have to FTP to your website and delete the .htaccess file in your website root folder (or download the .htaccess file and add your new IP address and upload it back to your root website folder) to be able to log back into your WordPress Dashboard. Your ISP provides your current Public IP address. If you reboot your computer or disconnect from the Internet there is a good chance that you will get a new Public IP address from your ISP.');

    290. 

  290. 	}

    291. 

  291. 	}

    292. 

  292. }	

    293. 

  293. 

    294. 

  294. // Create maintenance htaccess file

    295. 

  295. if (isset($_POST['bps-auto-write-maint']) && current_user_can('manage_options')) {

    296. 

  296. 	check_admin_referer( 'bulletproof_security_auto_write_maint' );

    297. 

  297. 	

    298. 

  298. $bps_string_replace_maint = array(".");

    299. 

  299. $bps_get_IP_maint = str_replace($bps_string_replace_maint, "\.", $_SERVER['REMOTE_ADDR']) . "$";

    300. 

  300. $bps_get_wp_root_maint = bps_wp_get_root_folder();

    301. 

  301. $bps_auto_write_maint_file = ABSPATH . '/wp-content/plugins/bulletproof-security/admin/htaccess/maintenance.htaccess';

    302. 

  302. $bps_maint_content = "#   BULLETPROOF .46.6 MAINTENANCE  .HTACCESS     \n    

    303. 

  303. RewriteEngine On

    304. 

  304. RewriteBase $bps_get_wp_root_maint\n

    305. 

  305. RewriteCond %{REQUEST_METHOD} ^(HEAD|TRACE|DELETE|TRACK|DEBUG) [NC]

    306. 

  306. RewriteRule ^(.*)$ - [F,L]\n

    307. 

  307. # ALLOW THUMBNAILER SCRIPTS TO DISPLAY IMAGES

    308. 

  308. RewriteCond %{REQUEST_FILENAME} thumb.php [NC,OR]

    309. 

  309. RewriteCond %{REQUEST_FILENAME} thumbs.php [NC,OR]

    310. 

  310. RewriteCond %{REQUEST_FILENAME} timthumb.php [NC,OR]

    311. 

  311. RewriteCond %{REQUEST_FILENAME} phpthumb.php [NC]

    312. 

  312. RewriteRule . - [F,L]\n

    313. 

  313. # BPSQSE BPS QUERY STRING EXPLOITS

    314. 

  314. RewriteCond %{HTTP_USER_AGENT} (libwww-perl|wget|python|nikto|curl|scan|java|winhttp|clshttp|loader) [NC,OR]

    315. 

  315. RewriteCond %{HTTP_USER_AGENT} (<|>|'|%0A|%0D|%27|%3C|%3E|%00) [NC,OR]

    316. 

  316. RewriteCond %{HTTP_USER_AGENT} (;|<|>|'|".'"'."|\)|\(|%0A|%0D|%22|%27|%28|%3C|%3E|%00).*(libwww-perl|wget|python|nikto|curl|scan|java|winhttp|HTTrack|clshttp|archiver|loader|email|harvest|extract|grab|miner) [NC,OR]

    317. 

  317. RewriteCond %{THE_REQUEST} \?\ HTTP/ [NC,OR]

    318. 

  318. RewriteCond %{THE_REQUEST} \/\*\ HTTP/ [NC,OR]

    319. 

  319. RewriteCond %{THE_REQUEST} etc/passwd [NC,OR]

    320. 

  320. RewriteCond %{THE_REQUEST} cgi-bin [NC,OR]

    321. 

  321. RewriteCond %{THE_REQUEST} (\\r|\\n|%0A|%0D) [NC,OR]

    322. 

  322. RewriteCond %{REQUEST_URI} owssvr\.dll [NC,OR]

    323. 

  323. RewriteCond %{HTTP_REFERER} (<|>|'|%0A|%0D|%27|%3C|%3E|%00) [NC,OR]

    324. 

  324. RewriteCond %{HTTP_REFERER} \.opendirviewer\. [NC,OR]

    325. 

  325. RewriteCond %{HTTP_REFERER} users\.skynet\.be.* [NC,OR]

    326. 

  326. RewriteCond %{QUERY_STRING} [a-zA-Z0-9_]=http:// [OR]

    327. 

  327. RewriteCond %{QUERY_STRING} [a-zA-Z0-9_]=(\.\.//?)+ [OR]

    328. 

  328. RewriteCond %{QUERY_STRING} [a-zA-Z0-9_]=/([a-z0-9_.]//?)+ [NC,OR]

    329. 

  329. RewriteCond %{QUERY_STRING} \=PHP[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12} [NC,OR]

    330. 

  330. RewriteCond %{QUERY_STRING} \.\./\.\. [OR]

    331. 

  331. RewriteCond %{QUERY_STRING} ftp\: [NC,OR]

    332. 

  332. RewriteCond %{QUERY_STRING} http\: [NC,OR] 

    333. 

  333. RewriteCond %{QUERY_STRING} https\: [NC,OR]

    334. 

  334. RewriteCond %{QUERY_STRING} \=\|w\| [NC,OR]

    335. 

  335. RewriteCond %{QUERY_STRING} ^(.*)/self/(.*)$ [NC,OR]

    336. 

  336. RewriteCond %{QUERY_STRING} ^(.*)cPath=http://(.*)$ [NC,OR]

    337. 

  337. RewriteCond %{QUERY_STRING} (\<|%3C).*script.*(\>|%3E) [NC,OR]

    338. 

  338. RewriteCond %{QUERY_STRING} (<|%3C)([^s]*s)+cript.*(>|%3E) [NC,OR]

    339. 

  339. RewriteCond %{QUERY_STRING} (\<|%3C).*iframe.*(\>|%3E) [NC,OR]

    340. 

  340. RewriteCond %{QUERY_STRING} (<|%3C)([^i]*i)+frame.*(>|%3E) [NC,OR] 

    341. 

  341. RewriteCond %{QUERY_STRING} base64_encode.*\(.*\) [NC,OR]

    342. 

  342. RewriteCond %{QUERY_STRING} base64_(en|de)code[^(]*\([^)]*\) [NC,OR]

    343. 

  343. RewriteCond %{QUERY_STRING} GLOBALS(=|\[|\%[0-9A-Z]{0,2}) [OR]

    344. 

  344. RewriteCond %{QUERY_STRING} _REQUEST(=|\[|\%[0-9A-Z]{0,2}) [OR]

    345. 

  345. RewriteCond %{QUERY_STRING} ^.*(\[|\]|\(|\)|<|>).* [NC,OR]

    346. 

  346. RewriteCond %{QUERY_STRING} (NULL|OUTFILE|LOAD_FILE) [OR]

    347. 

  347. RewriteCond %{QUERY_STRING} (\./|\../|\.../)+(motd|etc|bin) [NC,OR]

    348. 

  348. RewriteCond %{QUERY_STRING} (localhost|loopback|127\.0\.0\.1) [NC,OR]

    349. 

  349. RewriteCond %{QUERY_STRING} (<|>|'|%0A|%0D|%27|%3C|%3E|%00) [NC,OR]

    350. 

  350. RewriteCond %{QUERY_STRING} concat[^\(]*\( [NC,OR]

    351. 

  351. RewriteCond %{QUERY_STRING} union([^s]*s)+elect [NC,OR]

    352. 

  352. RewriteCond %{QUERY_STRING} union([^a]*a)+ll([^s]*s)+elect [NC,OR]

    353. 

  353. RewriteCond %{QUERY_STRING} (;|<|>|'|".'"'."|\)|%0A|%0D|%22|%27|%3C|%3E|%00).*(/\*|union|select|insert|drop|delete|update|cast|create|char|convert|alter|declare|order|script|set|md5|benchmark|encode) [NC,OR]

    354. 

  354. RewriteCond %{QUERY_STRING} (sp_executesql) [NC]

    355. 

  355. RewriteRule ^(.*)$ - [F,L]\n

    356. 

  356. RewriteCond %{REMOTE_ADDR} !^$bps_get_IP_maint

    357. 

  357. RewriteCond %{REQUEST_URI} !^$bps_get_wp_root_maint"."bp-maintenance\.php$

    358. 

  358. RewriteCond %{REQUEST_URI} !^$bps_get_wp_root_maint"."wp-content/plugins/bulletproof-security/abstract-blue-bg\.png$

    359. 

  359. RewriteRule ^(.*)$ $bps_get_wp_root_maint"."bp-maintenance.php [L]

    360. 

  360. RewriteCond %{REQUEST_FILENAME} !-f

    361. 

  361. RewriteCond %{REQUEST_FILENAME} !-d

    362. 

  362. RewriteRule . $bps_get_wp_root_maint"."index.php [L]";

    363. 

  363. 	if (is_writable($bps_auto_write_maint_file)) {

    364. 

  364. 	if (!$handle = fopen($bps_auto_write_maint_file, 'w+b')) {

    365. 

  365.          _e('<font color="red"><strong>Cannot open file' . "$bps_auto_write_maint_file" . '</strong></font>');

    366. 

  366.          exit;

    367. 

  367.     }

    368. 

  368.     if (fwrite($handle, $bps_maint_content) === FALSE) {

    369. 

  369.         _e('<font color="red"><strong>Cannot write to file' . "$bps_auto_write_maint_file" . '</strong></font>');

    370. 

  370.         exit;

    371. 

  371.     }

    372. 

  372.     _e('<font color="green"><strong>Success! Your Maintenance Mode htaccess file was created successfully! Select the Maintenance Mode radio button and click Activate to put your website in Maintenance Mode.</strong></font>');

    373. 

  373.     fclose($handle);

    374. 

  374. 	} else {

    375. 

  375.     _e('<font color="red"><strong>The file ' . "$bps_auto_write_maint_file" . ' is not writable or does not exist.</strong></font><br><strong>Check that the file is named maintenance.htaccess and that the file exists in the /bulletproof-security/admin/htaccess master folder. If this is not the problem click <a href="http://www.ait-pro.com/aitpro-blog/2566/bulletproof-security-plugin-support/bulletproof-security-error-messages" target="_blank">here</a> for more help info.</strong><br>');

    376. 

  376. 	}

    377. 

  377. }

    378. 

  378. 

    379. 

  379. // default.htaccess and secure.htaccess fwrite content for all WP site types

    380. 

  380. $bps_get_wp_root_default = bps_wp_get_root_folder();

    381. 

  381. $bps_auto_write_default_file = ABSPATH . '/wp-content/plugins/bulletproof-security/admin/htaccess/default.htaccess';

    382. 

  382. 

    383. 

  383. $bpsSuccessMessageDef = '<font color="green"><strong>Success! Your Default Mode Master htaccess file was created successfully!</strong></font><br><font color="red"><strong>CAUTION: Default Mode should only be activated for testing or troubleshooting purposes. Default Mode does not protect your website with any security protection.</strong></font><br><font color="black"><strong>To activate Default Mode select the Default Mode radio button and click Activate to put your website in Default Mode.</strong></font>';

    384. 

  384. 

    385. 

  385. $bpsFailMessageDef = '<font color="red"><strong>The file ' . "$bps_auto_write_default_file" . ' is not writable or does not exist.</strong></font><br><strong>Check that the file is named default.htaccess and that the file exists in the /bulletproof-security/admin/htaccess master folder. If this is not the problem click <a href="http://www.ait-pro.com/aitpro-blog/2566/bulletproof-security-plugin-support/bulletproof-security-error-messages" target="_blank">here</a> for more help info.</strong><br>';

    386. 

  386. 

    387. 

  387. $bpsTopMU = "\nRewriteEngine On

    388. 

  388. RewriteBase $bps_get_wp_root_default

    389. 

  389. RewriteRule ^index\.php$ - [L]\n\n";

    390. 

  390. 

    391. 

  391. $bps_default_content_top = "#   BULLETPROOF .46.D >>>>>>> DEFAULT .HTACCESS     \n

    392. 

  392. # If you edit the line of code above you will see error messages on the BPS status page

    393. 

  393. # WARNING!!! THE default.htaccess FILE DOES NOT PROTECT YOUR WEBSITE AGAINST HACKERS

    394. 

  394. # This is a standard generic htaccess file that does NOT provide any website security

    395. 

  395. # The DEFAULT .HTACCESS file should be used for testing and troubleshooting purposes only\n

    396. 

  396. # BEGIN WordPress";

    397. 

  397. 

    398. 

  398. $bps_default_content_bottom = "\n<IfModule mod_rewrite.c>

    399. 

  399. RewriteEngine On

    400. 

  400. RewriteBase $bps_get_wp_root_default

    401. 

  401. RewriteRule ^index\.php$ - [L]

    402. 

  402. RewriteCond %{REQUEST_FILENAME} !-f

    403. 

  403. RewriteCond %{REQUEST_FILENAME} !-d

    404. 

  404. RewriteRule . $bps_get_wp_root_default"."index.php [L]

    405. 

  405. </IfModule>\n

    406. 

  406. # END WordPress";

    407. 

  407. 

    408. 

  408. $bpsMUEndWP = "# END WordPress";

    409. 

  409. 

    410. 

  410. $bpsMUSDirTop = "# uploaded files

    411. 

  411. RewriteRule ^([_0-9a-zA-Z-]+/)?files/(.+) wp-includes/ms-files.php?file=$2 [L]\n

    412. 

  412. # add a trailing slash to /wp-admin

    413. 

  413. RewriteRule ^([_0-9a-zA-Z-]+/)?wp-admin$ $1wp-admin/ [R=301,L]\n\n";

    414. 

  414. 

    415. 

  415. $bpsMUSDomTop = "# uploaded files

    416. 

  416. RewriteRule ^files/(.+) wp-includes/ms-files.php?file=$1 [L]\n\n";

    417. 

  417. 

    418. 

  418. $bpsMUSDirBottom = "RewriteCond %{REQUEST_FILENAME} -f [OR]

    419. 

  419. RewriteCond %{REQUEST_FILENAME} -d

    420. 

  420. RewriteRule ^ - [L]

    421. 

  421. RewriteRule  ^[_0-9a-zA-Z-]+/(wp-(content|admin|includes).*) $1 [L]

    422. 

  422. RewriteRule  ^[_0-9a-zA-Z-]+/(.*\.php)$ $1 [L]

    423. 

  423. RewriteRule . index.php [L]\n\n";

    424. 

  424. 

    425. 

  425. $bpsMUSDomBottom = "RewriteCond %{REQUEST_FILENAME} -f [OR]

    426. 

  426. RewriteCond %{REQUEST_FILENAME} -d

    427. 

  427. RewriteRule ^ - [L]

    428. 

  428. RewriteRule . index.php [L]\n\n";

    429. 

  429. 

    430. 

  430. // Create Default htaccess file - Single Site

    431. 

  431. if (isset($_POST['bps-auto-write-default']) && current_user_can('manage_options')) {

    432. 

  432. 	check_admin_referer( 'bulletproof_security_auto_write_default' );

    433. 

  433. 

    434. 

  434. 	if (is_writable($bps_auto_write_default_file)) {

    435. 

  435. 	if (!$handle = fopen($bps_auto_write_default_file, 'w+b')) {

    436. 

  436.          _e('<font color="red"><strong>Cannot open file' . "$bps_auto_write_default_file" . '</strong></font>');

    437. 

  437.          exit;

    438. 

  438.     }

    439. 

  439.     if (fwrite($handle, $bps_default_content_top.$bps_default_content_bottom) === FALSE) {

    440. 

  440.     	_e('<font color="red"><strong>Cannot write to file' . "$bps_auto_write_default_file" . '</strong></font>');

    441. 

  441.         exit;

    442. 

  442.     }

    443. 

  443.     _e($bpsSuccessMessageDef);

    444. 

  444.     fclose($handle);

    445. 

  445. 	} else {

    446. 

  446.     _e($bpsFailMessageDef);

    447. 

  447. 	}

    448. 

  448. }

    449. 

  449. 

    450. 

  450. // Create Default htaccess file - MU Subdirectory

    451. 

  451. if (isset($_POST['bps-auto-write-default-MUSDir']) && current_user_can('manage_options')) {

    452. 

  452. 	check_admin_referer( 'bulletproof_security_auto_write_default_MUSDir' );

    453. 

  453. 

    454. 

  454. 	if (is_writable($bps_auto_write_default_file)) {

    455. 

  455. 	if (!$handle = fopen($bps_auto_write_default_file, 'w+b')) {

    456. 

  456.          _e('<font color="red"><strong>Cannot open file' . "$bps_auto_write_default_file" . '</strong></font>');

    457. 

  457.          exit;

    458. 

  458.     }

    459. 

  459.     if (fwrite($handle, $bps_default_content_top.$bpsTopMU.$bpsMUSDirTop.$bpsMUSDirBottom.$bpsMUEndWP) === FALSE) {

    460. 

  460.     	_e('<font color="red"><strong>Cannot write to file' . "$bps_auto_write_default_file" . '</strong></font>');

    461. 

  461.         exit;

    462. 

  462.     }

    463. 

  463.     _e($bpsSuccessMessageDef);

    464. 

  464.     fclose($handle);

    465. 

  465. 	} else {

    466. 

  466.     _e($bpsFailMessageDef);

    467. 

  467. 	}

    468. 

  468. }

    469. 

  469. 

    470. 

  470. // Create Default htaccess file - MU Subdomain

    471. 

  471. if (isset($_POST['bps-auto-write-default-MUSDom']) && current_user_can('manage_options')) {

    472. 

  472. 	check_admin_referer( 'bulletproof_security_auto_write_default_MUSDom' );

    473. 

  473. 

    474. 

  474. 	if (is_writable($bps_auto_write_default_file)) {

    475. 

  475. 	if (!$handle = fopen($bps_auto_write_default_file, 'w+b')) {

    476. 

  476.          _e('<font color="red"><strong>Cannot open file' . "$bps_auto_write_default_file" . '</strong></font>');

    477. 

  477.          exit;

    478. 

  478.     }

    479. 

  479.     if (fwrite($handle, $bps_default_content_top.$bpsTopMU.$bpsMUSDomTop.$bpsMUSDomBottom.$bpsMUEndWP) === FALSE) {

    480. 

  480.     	_e('<font color="red"><strong>Cannot write to file' . "$bps_auto_write_default_file" . '</strong></font>');

    481. 

  481.         exit;

    482. 

  482.     }

    483. 

  483.     _e($bpsSuccessMessageDef);

    484. 

  484.     fclose($handle);

    485. 

  485. 	} else {

    486. 

  486.     _e($bpsFailMessageDef);

    487. 

  487. 	}

    488. 

  488. }

    489. 

  489. 

    490. 

  490. // secure.htaccess fwrite content for all WP site types

    491. 

  491. $bps_get_wp_root_secure = bps_wp_get_root_folder();

    492. 

  492. $bps_auto_write_secure_file = ABSPATH . '/wp-content/plugins/bulletproof-security/admin/htaccess/secure.htaccess';

    493. 

  493. 

    494. 

  494. $bpsSuccessMessageSec = '<font color="green"><strong>Success! Your BulletProof Security Root Master htaccess file was created successfully!</strong></font><br><font color="black"><strong>You can now Activate BulletProof Mode for your Root folder. Select the BulletProof Mode radio button and click Activate to put your website in BulletProof Mode.</strong></font>';

    495. 

  495. 

    496. 

  496. $bpsFailMessageSec = '<font color="red"><strong>The file ' . "$bps_auto_write_secure_file" . ' is not writable or does not exist.</strong></font><br><strong>Check that the file is named secure.htaccess and that the file exists in the /bulletproof-security/admin/htaccess master folder. If this is not the problem click <a href="http://www.ait-pro.com/aitpro-blog/2566/bulletproof-security-plugin-support/bulletproof-security-error-messages" target="_blank">here</a> for more help info.</strong><br>';

    497. 

  497. 

    498. 

  498. $bps_secure_content_top = "#   BULLETPROOF .46.6 >>>>>>> SECURE .HTACCESS     \n

    499. 

  499. # If you edit the  BULLETPROOF .46.6 >>>>>>> SECURE .HTACCESS text above

    500. 

  500. # you will see error messages on the BPS status page

    501. 

  501. # BPS is reading the version number in the htaccess file to validate checks

    502. 

  502. # If you would like to change what is displayed above you

    503. 

  503. # will need to edit the BPS /includes/functions.php file to match your changes

    504. 

  504. # If you update your WordPress Permalinks the code between BEGIN WordPress and

    505. 

  505. # END WordPress is replaced by WP htaccess code.

    506. 

  506. # This removes all of the BPS security code and replaces it with just the default WP htaccess code

    507. 

  507. # To restore this file use BPS Restore or activate BulletProof Mode for your Root folder again.\n

    508. 

  508. # BEGIN WordPress

    509. 

  509. # IMPORTANT!!! DO NOT DELETE!!! - BEGIN Wordpress above or END WordPress - text in this file

    510. 

  510. # They are reference points for WP, BPS and other plugins to write to this htaccess file.

    511. 

  511. # IMPORTANT!!! DO NOT DELETE!!! - BPSQSE BPS QUERY STRING EXPLOITS - text

    512. 

  512. # BPS needs to find the - BPSQSE - text string in this file to validate that your security filters exist\n

    513. 

  513. # TURN OFF YOUR SERVER SIGNATURE

    514. 

  514. ServerSignature Off\n

    515. 

  515. # ADD PHP HANDLER - Add your hosts php Handler below if you are using a php handler

    516. 

  516. # Example GoDaddy PHP 5.2.x php handler is shown commented out directly below 

    517. 

  517. #AddHandler x-httpd-php5 .php\n

    518. 

  518. # CUSTOM PHP.INI FILES - handlers and mod_suphp htaccess code for Web Hosts

    519. 

  519. # If you are using either a BPS Pro custom php.ini file or one that you created yourself

    520. 

  520. # If your host is GoDaddy and you have a custom php.ini file

    521. 

  521. # uncomment the 1 line of code directly below

    522. 

  522. #AddHandler x-httpd-php5 .php 

    523. 

  523. # If your host is BlueHost, HostMonster FastDomain and you have a custom php.ini file

    524. 

  524. # uncomment the 1 line of code directly below 

    525. 

  525. #AddHandler application/x-httpd-php5s .php

    526. 

  526. # If your host is HostGator and you have a custom php.ini file

    527. 

  527. # uncomment the 3 lines of code below and replace xxxxx with your account/username 

    528. 

  528. #<IfModule mod_suphp.c>

    529. 

  529. #suPHP_ConfigPath /home/xxxxx/public_html/php.ini

    530. 

  530. #</IfModule>\n

    531. 

  531. # DO NOT SHOW DIRECTORY LISTING

    532. 

  532. # If you are getting 500 Errors when activating BPS then comment out Options -Indexes 

    533. 

  533. # by adding a # sign in front of it. If there is a typo anywhere in this file you will also see 500 errors.

    534. 

  534. Options -Indexes\n

    535. 

  535. # DIRECTORY INDEX FORCE INDEX.PHP

    536. 

  536. # Use index.php as default directory index file

    537. 

  537. # index.html will be ignored will not load.

    538. 

  538. DirectoryIndex index.php index.html /index.php\n

    539. 

  539. # BPS PRO ERROR LOGGING AND TRACKING - Available in BPS Pro only

    540. 

  540. # BPS Pro has premade 403 Forbidden, 400 Bad Request and 404 Not Found files that are used 

    541. 

  541. # to track and log 403, 400 and 404 errors that occur on your website. When a hacker attempts to

    542. 

  542. # hack your website the hackers IP address, Host name, Request Method, Referering link, the file name or

    543. 

  543. # requested resource, the user agent of the hacker and the query string used in the hack attempt are logged.

    544. 

  544. # BPS Pro Log files are added to the P-Security All Purpose File Manager to view them.

    545. 

  545. # All BPS Pro log files are htaccess protected so that only you can view them. 

    546. 

  546. # The 400.php, 403.php and 404.php files are located in /wp-content/plugins/bulletproof-security/

    547. 

  547. # The 400 and 403 Error logging files are already set up and will automatically start logging errors

    548. 

  548. # after you install BPS Pro and have activated BulletProof Mode for your Root folder.

    549. 

  549. # If you would like to log 404 errors you will need to copy the logging code in the BPS Pro 404.php file

    550. 

  550. # to your Theme's 404.php template file. Simple instructions are included in the BPS Pro 404.php file.

    551. 

  551. # You can open the BPS Pro 404.php file using the WP Plugins Editor or by using the BPS Pro File Manager.

    552. 

  552. # NOTE: By default WordPress automatically looks in your Theme's folder for a 404.php template file.\n

    553. 

  553. #ErrorDocument 400 $bps_get_wp_root_secure"."wp-content/plugins/bulletproof-security/400.php

    554. 

  554. #ErrorDocument 403 $bps_get_wp_root_secure"."wp-content/plugins/bulletproof-security/403.php

    555. 

  555. ErrorDocument 404 $bps_get_wp_root_secure"."404.php\n

    556. 

  556. # DENY ACCESS TO PROTECTED SERVER FILES - .htaccess, .htpasswd and all file names starting with dot

    557. 

  557. RedirectMatch 403 /\..*$\n

    558. 

  558. RewriteEngine On

    559. 

  559. RewriteBase $bps_get_wp_root_secure

    560. 

  560. RewriteRule ^wp-admin/includes/ - [F,L]

    561. 

  561. RewriteRule !^wp-includes/ - [S=3]

    562. 

  562. RewriteRule ^wp-includes/[^/]+\.php$ - [F,L]

    563. 

  563. RewriteRule ^wp-includes/js/tinymce/langs/.+\.php - [F,L]

    564. 

  564. RewriteRule ^wp-includes/theme-compat/ - [F,L]\n

    565. 

  565. RewriteEngine On

    566. 

  566. RewriteBase $bps_get_wp_root_secure

    567. 

  567. RewriteRule ^index\.php$ - [L]\n\n";

    568. 

  568. 

    569. 

  569. $bps_secure_content_mid_top = "# REQUEST METHODS FILTERED

    570. 

  570. # This filter is for blocking junk bots and spam bots from making a HEAD request, but may also block some

    571. 

  571. # HEAD request from bots that you want to allow in certains cases. This is not a security filter and is just

    572. 

  572. # a nuisance filter. This filter will not block any important bots like the google bot. If you want to allow

    573. 

  573. # all bots to make a HEAD request then remove HEAD from the Request Method filter.

    574. 

  574. # The TRACE, DELETE, TRACK and DEBUG request methods should never be allowed against your website.

    575. 

  575. RewriteEngine On

    576. 

  576. RewriteCond %{REQUEST_METHOD} ^(HEAD|TRACE|DELETE|TRACK|DEBUG) [NC]

    577. 

  577. RewriteRule ^(.*)$ - [F,L]\n

    578. 

  578. # PLUGINS AND VARIOUS EXPLOIT FILTER SKIP RULES

    579. 

  579. # IMPORTANT!!! If you add or remove a skip rule you must change S= to the new skip number

    580. 

  580. # Example: If RewriteRule S=5 is deleted than change S=6 to S=5, S=7 to S=6, etc.

    581. 

  581. # Adminer MySQL management tool data populate

    582. 

  582. RewriteCond %{REQUEST_URI} ^$bps_get_wp_root_secure"."wp-content/plugins/adminer/ [NC]

    583. 

  583. RewriteRule . - [S=11]

    584. 

  584. # Comment Spam Pack MU Plugin - CAPTCHA images not displaying 

    585. 

  585. RewriteCond %{REQUEST_URI} ^$bps_get_wp_root_secure"."wp-content/mu-plugins/custom-anti-spam/ [NC]

    586. 

  586. RewriteRule . - [S=10]

    587. 

  587. # Peters Custom Anti-Spam display CAPTCHA Image

    588. 

  588. RewriteCond %{REQUEST_URI} ^$bps_get_wp_root_secure"."wp-content/plugins/peters-custom-anti-spam-image/ [NC] 

    589. 

  589. RewriteRule . - [S=9]

    590. 

  590. # Status Updater plugin fb connect

    591. 

  591. RewriteCond %{REQUEST_URI} ^$bps_get_wp_root_secure"."wp-content/plugins/fb-status-updater/ [NC] 

    592. 

  592. RewriteRule . - [S=8]

    593. 

  593. # Stream Video Player - Adding FLV Videos Blocked

    594. 

  594. RewriteCond %{REQUEST_URI} ^$bps_get_wp_root_secure"."wp-content/plugins/stream-video-player/ [NC]

    595. 

  595. RewriteRule . - [S=7]

    596. 

  596. # XCloner 404 or 403 error when updating settings

    597. 

  597. RewriteCond %{REQUEST_URI} ^$bps_get_wp_root_secure"."wp-content/plugins/xcloner-backup-and-restore/ [NC]

    598. 

  598. RewriteRule . - [S=6]

    599. 

  599. # BuddyPress Logout Redirect

    600. 

  600. RewriteCond %{QUERY_STRING} action=logout&redirect_to=http%3A%2F%2F(.*) [NC]

    601. 

  601. RewriteRule . - [S=5]

    602. 

  602. # redirect_to=

    603. 

  603. RewriteCond %{QUERY_STRING} redirect_to=(.*) [NC]

    604. 

  604. RewriteRule . - [S=4]

    605. 

  605. # Login Plugins Password Reset And Redirect 1

    606. 

  606. RewriteCond %{QUERY_STRING} action=resetpass&key=(.*) [NC]

    607. 

  607. RewriteRule . - [S=3]

    608. 

  608. # Login Plugins Password Reset And Redirect 2

    609. 

  609. RewriteCond %{QUERY_STRING} action=rp&key=(.*) [NC]

    610. 

  610. RewriteRule . - [S=2]\n

    611. 

  611. # ALLOW THUMBNAILER SCRIPTS TO DISPLAY IMAGES

    612. 

  612. # By default BPS is forbidding allowing these thumbnailer scripts filename requests

    613. 

  613. # This will Log lots of hacking attempts on your website in your BPS Pro Error Log

    614. 

  614. # If you are using one of these thumbnailer scripts on your website and you want to allow

    615. 

  615. # your thumbnailer script images to display then change [F,L] to [S=1]

    616. 

  616. # Make sure that you have a security patched version or recent versions of these scripts

    617. 

  617. # before changing [F,L] to [S=1] and allowing these files to be requested on your website

    618. 

  618. # If you delete or remove the RewriteRule below you will need to change the above skip rules

    619. 

  619. # Example: RewriteRule S=2 above will need to be changed to S=1, change S=3 to S=2, etc.

    620. 

  620. RewriteCond %{REQUEST_FILENAME} thumb.php [NC,OR]

    621. 

  621. RewriteCond %{REQUEST_FILENAME} thumbs.php [NC,OR]

    622. 

  622. RewriteCond %{REQUEST_FILENAME} timthumb.php [NC,OR]

    623. 

  623. RewriteCond %{REQUEST_FILENAME} phpthumb.php [NC]

    624. 

  624. RewriteRule . - [F,L]\n

    625. 

  625. # BPSQSE BPS QUERY STRING EXPLOITS

    626. 

  626. # The libwww-perl User Agent is forbidden - Many bad bots use libwww-perl modules, but some good bots use it too.

    627. 

  627. # Good sites such as W3C use it for their W3C-LinkChecker. 

    628. 

  628. # Add or remove user agents temporarily or permanently from the first User Agent filter below.

    629. 

  629. # If you want a list of bad bots / User Agents to block then scroll to the end of this file.

    630. 

  630. RewriteCond %{HTTP_USER_AGENT} (libwww-perl|wget|python|nikto|curl|scan|java|winhttp|clshttp|loader) [NC,OR]

    631. 

  631. RewriteCond %{HTTP_USER_AGENT} (<|>|'|%0A|%0D|%27|%3C|%3E|%00) [NC,OR]

    632. 

  632. RewriteCond %{HTTP_USER_AGENT} (;|<|>|'|".'"'."|\)|\(|%0A|%0D|%22|%27|%28|%3C|%3E|%00).*(libwww-perl|wget|python|nikto|curl|scan|java|winhttp|HTTrack|clshttp|archiver|loader|email|harvest|extract|grab|miner) [NC,OR]

    633. 

  633. RewriteCond %{THE_REQUEST} \?\ HTTP/ [NC,OR]

    634. 

  634. RewriteCond %{THE_REQUEST} \/\*\ HTTP/ [NC,OR]

    635. 

  635. RewriteCond %{THE_REQUEST} etc/passwd [NC,OR]

    636. 

  636. RewriteCond %{THE_REQUEST} cgi-bin [NC,OR]

    637. 

  637. RewriteCond %{THE_REQUEST} (\\r|\\n|%0A|%0D) [NC,OR]

    638. 

  638. RewriteCond %{REQUEST_URI} owssvr\.dll [NC,OR]

    639. 

  639. RewriteCond %{HTTP_REFERER} (<|>|'|%0A|%0D|%27|%3C|%3E|%00) [NC,OR]

    640. 

  640. RewriteCond %{HTTP_REFERER} \.opendirviewer\. [NC,OR]

    641. 

  641. RewriteCond %{HTTP_REFERER} users\.skynet\.be.* [NC,OR]

    642. 

  642. RewriteCond %{QUERY_STRING} [a-zA-Z0-9_]=http:// [OR]

    643. 

  643. RewriteCond %{QUERY_STRING} [a-zA-Z0-9_]=(\.\.//?)+ [OR]

    644. 

  644. RewriteCond %{QUERY_STRING} [a-zA-Z0-9_]=/([a-z0-9_.]//?)+ [NC,OR]

    645. 

  645. RewriteCond %{QUERY_STRING} \=PHP[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12} [NC,OR]

    646. 

  646. RewriteCond %{QUERY_STRING} \.\./\.\. [OR]

    647. 

  647. RewriteCond %{QUERY_STRING} ftp\: [NC,OR]

    648. 

  648. RewriteCond %{QUERY_STRING} http\: [NC,OR] 

    649. 

  649. RewriteCond %{QUERY_STRING} https\: [NC,OR]

    650. 

  650. RewriteCond %{QUERY_STRING} \=\|w\| [NC,OR]

    651. 

  651. RewriteCond %{QUERY_STRING} ^(.*)/self/(.*)$ [NC,OR]

    652. 

  652. RewriteCond %{QUERY_STRING} ^(.*)cPath=http://(.*)$ [NC,OR]

    653. 

  653. RewriteCond %{QUERY_STRING} (\<|%3C).*script.*(\>|%3E) [NC,OR]

    654. 

  654. RewriteCond %{QUERY_STRING} (<|%3C)([^s]*s)+cript.*(>|%3E) [NC,OR]

    655. 

  655. RewriteCond %{QUERY_STRING} (\<|%3C).*iframe.*(\>|%3E) [NC,OR]

    656. 

  656. RewriteCond %{QUERY_STRING} (<|%3C)([^i]*i)+frame.*(>|%3E) [NC,OR] 

    657. 

  657. RewriteCond %{QUERY_STRING} base64_encode.*\(.*\) [NC,OR]

    658. 

  658. RewriteCond %{QUERY_STRING} base64_(en|de)code[^(]*\([^)]*\) [NC,OR]

    659. 

  659. RewriteCond %{QUERY_STRING} GLOBALS(=|\[|\%[0-9A-Z]{0,2}) [OR]

    660. 

  660. RewriteCond %{QUERY_STRING} _REQUEST(=|\[|\%[0-9A-Z]{0,2}) [OR]

    661. 

  661. RewriteCond %{QUERY_STRING} ^.*(\[|\]|\(|\)|<|>).* [NC,OR]

    662. 

  662. RewriteCond %{QUERY_STRING} (NULL|OUTFILE|LOAD_FILE) [OR]

    663. 

  663. RewriteCond %{QUERY_STRING} (\./|\../|\.../)+(motd|etc|bin) [NC,OR]

    664. 

  664. RewriteCond %{QUERY_STRING} (localhost|loopback|127\.0\.0\.1) [NC,OR]

    665. 

  665. RewriteCond %{QUERY_STRING} (<|>|'|%0A|%0D|%27|%3C|%3E|%00) [NC,OR]

    666. 

  666. RewriteCond %{QUERY_STRING} concat[^\(]*\( [NC,OR]

    667. 

  667. RewriteCond %{QUERY_STRING} union([^s]*s)+elect [NC,OR]

    668. 

  668. RewriteCond %{QUERY_STRING} union([^a]*a)+ll([^s]*s)+elect [NC,OR]

    669. 

  669. RewriteCond %{QUERY_STRING} (;|<|>|'|".'"'."|\)|%0A|%0D|%22|%27|%3C|%3E|%00).*(/\*|union|select|insert|drop|delete|update|cast|create|char|convert|alter|declare|order|script|set|md5|benchmark|encode) [NC,OR]

    670. 

  670. RewriteCond %{QUERY_STRING} (sp_executesql) [NC]

    671. 

  671. RewriteRule ^(.*)$ - [F,L]\n";

    672. 

  672. 

    673. 

  673. $bps_secure_content_mid_bottom = "RewriteCond %{REQUEST_FILENAME} !-f

    674. 

  674. RewriteCond %{REQUEST_FILENAME} !-d

    675. 

  675. RewriteRule . $bps_get_wp_root_secure"."index.php [L]\n\n";

    676. 

  676. 

    677. 

  677. $bps_secure_content_bottom = "# DENY BROWSER ACCESS TO THESE FILES 

    678. 

  678. # wp-config.php, bb-config.php, php.ini, php5.ini, readme.html

    679. 

  679. # Replace Allow from 88.77.66.55 with your current IP address and remove the  

    680. 

  680. # pound sign # from in front of the Allow from line of code below to access these

    681. 

  681. # files directly from your browser.\n

    682. 

  682. <FilesMatch ".'"'."^(wp-config\.php|php\.ini|php5\.ini|readme\.html|bb-config\.php)".'"'.">

    683. 

  683. Order allow,deny

    684. 

  684. Deny from all

    685. 

  685. #Allow from 88.77.66.55

    686. 

  686. </FilesMatch>\n

    687. 

  687. # IMPORTANT!!! DO NOT DELETE!!! the END WordPress text below

    688. 

  688. # END WordPress\n

    689. 

  689. # BLOCK HOTLINKING TO IMAGES

    690. 

  690. # To Test that your Hotlinking protection is working visit http://altlab.com/htaccess_tutorial.html

    691. 

  691. #RewriteEngine On

    692. 

  692. #RewriteCond %{HTTP_REFERER} !^https?://(www\.)?add-your-domain-here\.com [NC]

    693. 

  693. #RewriteCond %{HTTP_REFERER} !^$

    694. 

  694. #RewriteRule .*\.(jpeg|jpg|gif|bmp|png)$ - [F]\n

    695. 

  695. # BLOCK MORE BAD BOTS RIPPERS AND OFFLINE BROWSERS

    696. 

  696. # If you would like to block more bad bots you can get a blacklist from

    697. 

  697. # http://perishablepress.com/press/2007/06/28/ultimate-htaccess-blacklist/

    698. 

  698. # You should monitor your site very closely for at least a week if you add a bad bots list

    699. 

  699. # to see if any website traffic problems or other problems occur.

    700. 

  700. # Copy and paste your bad bots user agent code list directly below.";

    701. 

  701. 

    702. 

  702. // Create Secure htaccess master Root file - Single Site

    703. 

  703. if (isset($_POST['bps-auto-write-secure-root']) && current_user_can('manage_options')) {

    704. 

  704. 	check_admin_referer( 'bulletproof_security_auto_write_secure_root' );

    705. 

  705. 

    706. 

  706. 	if (is_writable($bps_auto_write_secure_file)) {

    707. 

  707. 	if (!$handle = fopen($bps_auto_write_secure_file, 'w+b')) {

    708. 

  708.          _e('<font color="red"><strong>Cannot open file' . "$bps_auto_write_secure_file" . '</strong></font>');

    709. 

  709.          exit;

    710. 

  710.     }

    711. 

  711.     if (fwrite($handle, $bps_secure_content_top.$bps_secure_content_mid_top.$bps_secure_content_mid_bottom.$bps_secure_content_bottom) === FALSE) {

    712. 

  712.         _e('<font color="red"><strong>Cannot write to file' . "$bps_auto_write_secure_file" . '</strong></font>');

    713. 

  713.         exit;

    714. 

  714.     }

    715. 

  715.     _e($bpsSuccessMessageSec);

    716. 

  716.     fclose($handle);

    717. 

  717. 	} else {

    718. 

  718.     _e($bpsFailMessageSec);

    719. 

  719. 	}

    720. 

  720. }

    721. 

  721. 

    722. 

  722. // Create Secure htaccess master Root file - MU Subdirectory

    723. 

  723. if (isset($_POST['bps-auto-write-secure-root-MUSDir']) && current_user_can('manage_options')) {

    724. 

  724. 	check_admin_referer( 'bulletproof_security_auto_write_secure_root_MUSDir' );

    725. 

  725. 

    726. 

  726. 	if (is_writable($bps_auto_write_secure_file)) {

    727. 

  727. 	if (!$handle = fopen($bps_auto_write_secure_file, 'w+b')) {

    728. 

  728.          _e('<font color="red"><strong>Cannot open file' . "$bps_auto_write_secure_file" . '</strong></font>');

    729. 

  729.          exit;

    730. 

  730.     }

    731. 

  731.     if (fwrite($handle, $bps_secure_content_top.$bpsMUSDirTop.$bps_secure_content_mid_top.$bpsMUSDirBottom.$bps_secure_content_bottom) === FALSE) {

    732. 

  732.         _e('<font color="red"><strong>Cannot write to file' . "$bps_auto_write_secure_file" . '</strong></font>');

    733. 

  733.         exit;

    734. 

  734.     }

    735. 

  735.     _e($bpsSuccessMessageSec);

    736. 

  736.     fclose($handle);

    737. 

  737. 	} else {

    738. 

  738.     _e($bpsFailMessageSec);

    739. 

  739. 	}

    740. 

  740. }

    741. 

  741. 

    742. 

  742. // Create Secure htaccess master Root file - MU Subdomain

    743. 

  743. if (isset($_POST['bps-auto-write-secure-root-MUSDom']) && current_user_can('manage_options')) {

    744. 

  744. 	check_admin_referer( 'bulletproof_security_auto_write_secure_MUSDom' );

    745. 

  745. 

    746. 

  746. 	if (is_writable($bps_auto_write_secure_file)) {

    747. 

  747. 	if (!$handle = fopen($bps_auto_write_secure_file, 'w+b')) {

    748. 

  748.          _e('<font color="red"><strong>Cannot open file' . "$bps_auto_write_secure_file" . '</strong></font>');

    749. 

  749.          exit;

    750. 

  750.     }

    751. 

  751.     if (fwrite($handle, $bps_secure_content_top.$bpsMUSDomTop.$bps_secure_content_mid_top.$bpsMUSDomBottom.$bps_secure_content_bottom) === FALSE) {

    752. 

  752.         _e('<font color="red"><strong>Cannot write to file' . "$bps_auto_write_secure_file" . '</strong></font>');

    753. 

  753.         exit;

    754. 

  754.     }

    755. 

  755.     _e($bpsSuccessMessageSec);

    756. 

  756.     fclose($handle);

    757. 

  757. 	} else {

    758. 

  758.     _e($bpsFailMessageSec);

    759. 

  759. 	}

    760. 

  760. }

    761. 

  761. 

    762. 

  762. // Create the Maintenance Mode Settings Values Form File - values from DB

    763. 

  763. if (isset($_POST['bps-maintenance-create-values_submit']) && current_user_can('manage_options')) {

    764. 

  764. 	check_admin_referer( 'bulletproof_security_create_values_form' );

    765. 

  765. 	

    766. 

  766. 	$options = get_option('bulletproof_security_options_maint');

    767. 

  767. 	$bps_retry_after_write = $options['bps-retry-after'];

    768. 

  768. 	$bps_site_title_write = $options['bps-site-title'];

    769. 

  769. 	$bps_message1_write = $options['bps-message-1'];

    770. 

  770. 	$bps_message2_write = $options['bps-message-2'];

    771. 

  771. 	$bps_body_background_image_write = $options['bps-background-image'];

    772. 

  772. 	$bps_auto_write_maint_file_form = ABSPATH . 'wp-content/plugins/bulletproof-security/admin/htaccess/bps-maintenance-values.php';

    773. 

  773. $bps_maint_content_form = "<?php".'

    774. 

  774. $bps_retry_after'." = '$bps_retry_after_write';\n"

    775. 

  775. .'$bps_site_title'." = '$bps_site_title_write';\n"

    776. 

  776. .'$bps_message1'." = '$bps_message1_write';\n"

    777. 

  777. .'$bps_message2'." = '$bps_message2_write';\n"

    778. 

  778. .'$bps_body_background_image'." = '$bps_body_background_image_write';

    779. 

  779. ?>";

    780. 

  780. 	if (is_writable($bps_auto_write_maint_file_form)) {

    781. 

  781. 	if (!$handle = fopen($bps_auto_write_maint_file_form, 'w+b')) {

    782. 

  782.          _e('<font color="red"><strong>Cannot open file' . "$bps_auto_write_maint_file_form" . '</strong></font>');

    783. 

  783.          exit;

    784. 

  784.     }

    785. 

  785.     if (fwrite($handle, $bps_maint_content_form) === FALSE) {

    786. 

  786.         _e('<font color="red"><strong>Cannot write to file' . "$bps_auto_write_maint_file_form" . '</strong></font>');

    787. 

  787.         exit;

    788. 

  788.     }

    789. 

  789.     _e('<font color="green"><strong>Success! Your Maintenance Mode Form has been created successfully! Click the Preview button to preview your Website Under Maintenance page.</strong></font>');

    790. 

  790.     fclose($handle);

    791. 

  791. 	} else {

    792. 

  792.     _e('<font color="red"><strong>The file ' . "$bps_auto_write_maint_file_form" . ' is not writable or does not exist.</strong></font><br><strong>Check that the bps-maintenance-values.php file exists in the /bulletproof-security/admin/htaccess master folder. If this is not the problem click <a href="http://www.ait-pro.com/aitpro-blog/2566/bulletproof-security-plugin-support/bulletproof-security-error-messages" target="_blank">here</a> for more help info.</strong><br>');

    793. 

  793. 	}

    794. 

  794. }

    795. 

  795. 

    796. 

  796. // Simple Secure Old School PHP file upload

    797. 

  797. if (isset($_POST['submit-bps-upload']) && current_user_can('manage_options')) {

    798. 

  798. 	check_admin_referer( 'bulletproof_security_upload' );

    799. 

  799. 	

    800. 

  800. 	$tmp_file = $_FILES['bps_file_upload']['tmp_name'];

    801. 

  801. 	$folder_path = ABSPATH . '/wp-content/plugins/bulletproof-security/admin/htaccess/';

    802. 

  802. 	$bps_uploaded_file =  str_replace('//','/',$folder_path) . $_FILES['bps_file_upload']['name'];

    803. 

  803. 	if (!empty($_FILES)) {

    804. 

  804. 	move_uploaded_file($tmp_file,$bps_uploaded_file);

    805. 

  805. 		_e('<font color="black"><strong>File Upload Path and File Name: </strong></font><br>');

    806. 

  806. 		echo "$bps_uploaded_file";

    807. 

  807. 	} else {

    808. 

  808. 		_e('<font color="red"><strong>File upload error. File was not successfully uploaded.</strong></font><br>');

    809. 

  809. 	}

    810. 

  810. }

    811. 

  811. 

    812. 

  812. // Enable File Downloading for Master Files - writes a new denyall htaccess file with the current IP address

    813. 

  813. if (isset($_POST['bps-enable-download']) && current_user_can('manage_options')) {

    814. 

  814. 	check_admin_referer( 'bulletproof_security_enable_download' );

    815. 

  815. 	

    816. 

  816. 	$bps_get_IP = $_SERVER['REMOTE_ADDR'];

    817. 

  817. 	$denyall_htaccess_file = ABSPATH . '/wp-content/plugins/bulletproof-security/admin/htaccess/.htaccess';

    818. 

  818. 	$bps_denyall_content = "order deny,allow\ndeny from all\nallow from $bps_get_IP";

    819. 

  819. 	

    820. 

  820. 	if (is_writable($denyall_htaccess_file)) {

    821. 

  821. 	if (!$handle = fopen($denyall_htaccess_file, 'w+b')) {

    822. 

  822.          _e('<font color="red"><strong>Cannot open file' . "$denyall_htaccess_file" . '</strong></font>');

    823. 

  823.          exit;

    824. 

  824.     }

    825. 

  825.     if (fwrite($handle, $bps_denyall_content) === FALSE) {

    826. 

  826.         _e('<font color="red"><strong>Cannot write to file' . "$denyall_htaccess_file" . '</strong></font>');

    827. 

  827.         exit;

    828. 

  828.     }

    829. 

  829.     _e('<font color="green"><strong>Success! File open, preview and downloading for your BPS Master Files is enabled for your IP address only ===' . "$bps_get_IP." .'</strong></font>');

    830. 

  830.     fclose($handle);

    831. 

  831. 	} else {

    832. 

  832.     _e('<font color="red"><strong>The file ' . "$denyall_htaccess_file" . ' is not writable or does not exist yet.</strong></font><br><strong>Check the BPS Status page to see if Deny All protection has been activated. Activate Deny All htaccess Folder Protection For The BPS Master htaccess Folder on the BPS Security Modes page. If this is not the problem click <a href="http://www.ait-pro.com/aitpro-blog/2566/bulletproof-security-plugin-support/bulletproof-security-error-messages" target="_blank">here</a> for more help info.</strong><br>');

    833. 

  833. 	}

    834. 

  834. }

    835. 

  835. 

    836. 

  836. // Enable File Downloading for BPS Backup Folder - writes a new denyall htaccess file with the current IP address

    837. 

  837. if (isset($_POST['bps-enable-download-backup']) && current_user_can('manage_options')) {

    838. 

  838. 	check_admin_referer( 'bulletproof_security_enable_download-backup' );

    839. 

  839. 	

    840. 

  840. 	$bps_get_IP2 = $_SERVER['REMOTE_ADDR'];

    841. 

  841. 	$denyall_htaccess_file_backup = ABSPATH . '/wp-content/bps-backup/.htaccess';

    842. 

  842. 	$bps_denyall_content_backup = "order deny,allow\ndeny from all\nallow from $bps_get_IP2";

    843. 

  843. 	

    844. 

  844. 	if (is_writable($denyall_htaccess_file_backup)) {

    845. 

  845. 	if (!$handle = fopen($denyall_htaccess_file_backup, 'w+b')) {

    846. 

  846.          _e('<font color="red"><strong>Cannot open file' . "$denyall_htaccess_file_backup" . '</strong></font>');

    847. 

  847.          exit;

    848. 

  848.     }

    849. 

  849.     if (fwrite($handle, $bps_denyall_content_backup) === FALSE) {

    850. 

  850.         _e('<font color="red"><strong>Cannot write to file' . "$denyall_htaccess_file_backup" . '</strong></font>');

    851. 

  851.         exit;

    852. 

  852.     }

    853. 

  853.     _e('<font color="green"><strong>Success! File open, preview and downloading for your Backed Up htaccess Files is enabled for your IP address only ===' . "$bps_get_IP2." .'</strong></font>');

    854. 

  854.     fclose($handle);

    855. 

  855. 	} else {

    856. 

  856.     _e('<font color="red"><strong>The file ' . "$denyall_htaccess_file_backup" . ' is not writable or does not exist yet.</strong></font><br><strong>Check the BPS Status page to see if Deny All protection has been activated. Activate Deny All htaccess Folder Protection For The BPS Backup Folder on the BPS Security Modes page. If this is not the problem click <a href="http://www.ait-pro.com/aitpro-blog/2566/bulletproof-security-plugin-support/bulletproof-security-error-messages" target="_blank">here</a> for more help info.</strong><br>');

    857. 

  857. 	}

    858. 

  858. }

    859. 

  859. 

    860. 

  860. // General all purpose "Settings Saved." message for forms

    861. 

  861. if (current_user_can('manage_options')) {

    862. 

  862. if (@$_GET['settings-updated'] == true) {

    863. 

  863. _e('<font color="green"><strong><p>Settings Saved.</p></strong></font>');

    864. 

  864. }

    865. 

  865. }

    866. 

  866. ?>

    867. 

  867. </div>

    868. 

  868. 

    869. 

  869. <div id="bpspaypal">

    870. 

  870. <a href="http://www.ait-pro.com/po/" target="_blank" title="Link opens in new browser window">Why Upgrade to BulletProof Security Pro?</a>

    871. 

  871. </div>

    872. 

  872. 

    873. 

  873. <div class="wrap">

    874. 

  874. <?php $bulletproof_ver = '.46.6'; ?>

    875. 

  875. <h2 style="margin-left:70px;"><?php _e('BulletProof Security ~ htaccess Core'); ?></h2>

    876. 

  876. 

    877. 

  877. <!-- jQuery UI Tab Menu -->

    878. 

  878. <div id="bps-container">

    879. 

  879. 	<div id="bps-tabs" class="bps-menu">

    880. 

  880.     <div id="bpsHead" style="position:relative; top:0px; left:0px;"><img src="<?php echo get_site_url(); ?>/wp-content/plugins/bulletproof-security/admin/images/bps-security-shield.png" style="float:left; padding:0px 8px 0px 0px; margin:-68px 0px 0px 0px;" /></div>

    881. 

  881. 		<ul>

    882. 

  882. 			<li><a href="#bps-tabs-1">Security Modes</a></li>

    883. 

  883.             <li><a href="#bps-tabs-2">Security Status</a></li>

    884. 

  884. 			<li><a href="#bps-tabs-3">System Info</a></li>

    885. 

  885. 			<li><a href="#bps-tabs-4">Backup &amp; Restore</a></li>

    886. 

  886.             <li><a href="#bps-tabs-5">Edit/Upload/Download</a></li>

    887. 

  887. 			<li><a href="#bps-tabs-6">Maintenance Mode</a></li>

    888. 

  888. 			<li><a href="#bps-tabs-7">Help &amp; FAQ</a></li>

    889. 

  889. 			<li><a href="#bps-tabs-8">Whats New</a></li>

    890. 

  890.             <li><a href="#bps-tabs-9">My Notes</a></li>

    891. 

  891.             <li><a href="#bps-tabs-10">BPS Pro Features</a></li>

    892. 

  892. 		</ul>

    893. 

  893.             

    894. 

  894. <div id="bps-tabs-1" class="bps-tab-page">

    895. 

  895. <h2><?php _e('BulletProof Security Modes'); ?></h2>

    896. 

  896. 

    897. 

  897. <div id="bpsMonitoringAlerting" style="border-top:1px solid #999999;">

    898. 

  898. 

    899. 

  899. <h3><?php _e('AutoMagic - Create Your htaccess Master Files'); ?> <a href="#" onmouseover="Tip('<strong>Backup your existing htaccess files if you have any first by clicking on the Backup & Restore menu tab - click on the Backup htaccess files radio button to select it and click on the Backup Files button to back up your existing htaccess files.</strong><br><br><strong>AutoMagic - BPS will create Your Master .htaccess Files For You Automatically</strong><br>BPS detects what type of WordPress installation you have and will tell you which AutoMagic buttons to use for your website.<br><br> -- Click the <strong>Create default.htaccess File</strong> button and click the <strong>Create secure.htaccess File</strong> button<br> -- Click on the Edit/Upload/Download menu tab, click on the secure.htaccess menu tab to view you new master .htaccess file, make any changes, edit it or add any additional .htaccess code to it before you activate it.<br> -- Activate BulletProof Mode for your Root folder<br> -- Activate BulletProof Mode for your wp-admin folder<br> -- Activate BulletProof Mode for the BPS Master htaccess folder and the BPS Backup folder<br><br><strong>IMPORTANT!!! YOU MUST HAVE BOTH THE ROOT BULLETPROOF MODE AND THE WP-ADMIN BULLETPROOF MODE ACTIVATED</strong><br>If you do not activate both BulletProof Mode for your root folder and BulletProof Mode for your wp-admin folder then BPS and WP will not work correctly.<br><br><strong>Explanation Of The Steps Above:</strong><br>If you see error messages when performing a first time backup do not worry about it. BPS will backup whatever files should be or are available to backup for your website.<br>Clicking the <strong>Create default.htaccess File</strong> button and the <strong>Create secure.htaccess File</strong> button will create these two master htaccess files for you. The correct RewriteBase and RewriteRule for your website will be automatically added to these files. The default.htaccess file is the master .htaccess file that is copied to your root folder when you activate Default Mode. Default Mode should only be activated for testing and troubleshooting purposes - it does not provide any website security. The secure.htaccess file is the master .htaccess file that is copied to your root folder when you activate BulletProof Mode for your Root folder. The plugin conflict fixes in the secure.htaccess master file will also have your correct WordPress installation folder name automatically added to it. The htaccess file for your wp-admin folder does not require any editing nor do the Deny All htaccess files. This means that once you have created the default.htaccess file and the secure.htaccess file you can go ahead and activate all BulletProof Modes.<br><br><strong>Manual Control of htaccess Files Instead of Using AutoMagic</strong><br>If you want manual control and want to edit your htacess files using the built-in BPS File Editor instead of having them automatically created for you then there is no need to click on the AutoMagic create files buttons.<br><br><strong>AutoMagic Instruction for WordPress Network (Multisite) Sites</strong><br>BPS will automatically detect whether you have a subdomain or subdirectory Network (Multisite) installation and tell you which AutoMagic buttons to use. BPS menus will only be displayed to Super Admins. BPS only needs to be activated and set up on your Primary site to automatically add protection to all your subsites so DO NOT Network Activate BPS. BPS will not work correctly if you choose Network Activate. There is also no need to activate and set up BPS on any of your other sites. Once BPS is set up on your Primary site it protects all of your sites.<br><br><strong>BPS Pro Video Tutorial links can be found in the Help & FAQ pages.</strong>', WIDTH, 800, PADDING, 8, ABOVE, true, FADEIN, 400, FADEOUT, 300)" onmouseout="UnTip()">Read Me</a></h3>

    900. 

  900. 

    901. 

  901. <?php if (!current_user_can('manage_options')) { echo 'Permission Denied'; } else { ?>

    902. 

  902. <table width="100%" border="0">

    903. 

  903.   <tr>

    904. 

  904.     <td width="33%"><?php echo bps_multsite_check_smode_single(); ?></td>

    905. 

  905.     <td width="33%"><?php echo bps_multsite_check_smode_MUSDir(); ?></td>

    906. 

  906.     <td width="34%"><?php echo bps_multsite_check_smode_MUSDom(); ?></td>

    907. 

  907.   </tr>

    908. 

  908.   <tr>

    909. 

  909.     <td>

    910. 

  910.     <form name="bps-auto-write-default" action="admin.php?page=bulletproof-security/admin/options.php" method="post">

    911. 

  911. <?php wp_nonce_field('bulletproof_security_auto_write_default'); ?>

    912. 

  912. <input type="hidden" name="filename" value="bps-auto-write-default_write" />

    913. 

  913. <p class="submit">

    914. 

  914. <input type="submit" name="bps-auto-write-default" value="<?php _e('Create default.htaccess File'); ?>" class="button" onClick="return confirm('<?php _e('Clicking OK will create a new customized default.htaccess Master file for your website.\n\nThis is only creating a Master file and NOT activating it. To activate Master files go to the Activate Security Modes section below.\n\nNOTE: Default Mode should ONLY be activated for Testing and Troubleshooting.\n\nClick OK to Create your new default.htaccess Master file or click Cancel.'); ?>')" />

    915. 

  915. </p>

    916. 

  916. </form>

    917. 

  917. 

    918. 

  918. <form name="bps-auto-write-secure-root" action="admin.php?page=bulletproof-security/admin/options.php" method="post">

    919. 

  919. <?php wp_nonce_field('bulletproof_security_auto_write_secure_root'); ?>

    920. 

  920. <input type="hidden" name="filename" value="bps-auto-write-secure_write" />

    921. 

  921. <p class="submit">

    922. 

  922. <input type="submit" name="bps-auto-write-secure-root" value="<?php _e('Create secure.htaccess File'); ?>" class="button" onClick="return confirm('<?php _e('Clicking OK will create a new customized secure.htaccess Master file for your website.\n\nThis is only creating a Master file and NOT activating it. To activate Master files go to the Activate Security Modes section below.\n\nClick OK to Create your new secure.htaccess Master file or click Cancel.'); ?>')" />

    923. 

  923. </p>

    924. 

  924. </form>

    925. 

  925. </td>

    926. 

  926.     <td>

    927. 

  927. <form name="bps-auto-write-default-MUSDir" action="admin.php?page=bulletproof-security/admin/options.php" method="post">

    928. 

  928. <?php wp_nonce_field('bulletproof_security_auto_write_default_MUSDir'); ?>

    929. 

  929. <input type="hidden" name="filename" value="bps-auto-write-default_write-MUSDir" />

    930. 

  930. <p class="submit">

    931. 

  931. <input type="submit" name="bps-auto-write-default-MUSDir" value="<?php _e('Create default.htaccess File'); ?>" class="button" onClick="return confirm('<?php _e('Clicking OK will create a new customized default.htaccess Master file for your Network / Multisite subdirectory website.\n\nThis is only creating a Master file and NOT activating it. To activate Master files go to the Activate Security Modes section below.\n\nNOTE: Default Mode should ONLY be activated for Testing and Troubleshooting.\n\nClick OK to Create your new default.htaccess Master file or click Cancel.'); ?>')" />

    932. 

  932. </p>

    933. 

  933. </form>

    934. 

  934. 

    935. 

  935. <form name="bps-auto-write-secure-root-MUSDir" action="admin.php?page=bulletproof-security/admin/options.php" method="post">

    936. 

  936. <?php wp_nonce_field('bulletproof_security_auto_write_secure_root_MUSDir'); ?>

    937. 

  937. <input type="hidden" name="filename" value="bps-auto-write-secure_write_MUSDir" />

    938. 

  938. <p class="submit">

    939. 

  939. <input type="submit" name="bps-auto-write-secure-root-MUSDir" value="<?php _e('Create secure.htaccess File'); ?>" class="button" onClick="return confirm('<?php _e('Clicking OK will create a new customized secure.htaccess Master file for your Network / Multisite subdirectory website.\n\nThis is only creating a Master file and NOT activating it. To activate Master files go to the Activate Security Modes section below.\n\nClick OK to Create your new secure.htaccess Master file or click Cancel.'); ?>')" />

    940. 

  940. </p>

    941. 

  941. </form>

    942. 

  942. </td>

    943. 

  943.     <td>

    944. 

  944. <form name="bps-auto-write-default-MUSDom" action="admin.php?page=bulletproof-security/admin/options.php" method="post">

    945. 

  945. <?php wp_nonce_field('bulletproof_security_auto_write_default_MUSDom'); ?>

    946. 

  946. <input type="hidden" name="filename" value="bps-auto-write-default_write_MUSDom" />

    947. 

  947. <p class="submit">

    948. 

  948. <input type="submit" name="bps-auto-write-default-MUSDom" value="<?php _e('Create default.htaccess File'); ?>" class="button" onClick="return confirm('<?php _e('Clicking OK will create a new customized default.htaccess Master file for your Network / Multisite subdomain website.\n\nThis is only creating a Master file and NOT activating it. To activate Master files go to the Activate Security Modes section below.\n\nNOTE: Default Mode should ONLY be activated for Testing and Troubleshooting.\n\nClick OK to Create your new default.htaccess Master file or click Cancel.'); ?>')" />

    949. 

  949. </p>

    950. 

  950. </form>

    951. 

  951. 

    952. 

  952. <form name="bps-auto-write-secure-root-MUSDom" action="admin.php?page=bulletproof-security/admin/options.php" method="post">

    953. 

  953. <?php wp_nonce_field('bulletproof_security_auto_write_secure_MUSDom'); ?>

    954. 

  954. <input type="hidden" name="filename" value="bps-auto-write-secure_write_MUSDom" />

    955. 

  955. <p class="submit">

    956. 

  956. <input type="submit" name="bps-auto-write-secure-root-MUSDom" value="<?php _e('Create secure.htaccess File'); ?>" class="button" onClick="return confirm('<?php _e('Clicking OK will create a new customized secure.htaccess Master file for your Network / Multisite subdomain website.\n\nThis is only creating a Master file and NOT activating it. To activate Master files go to the Activate Security Modes section below.\n\nClick OK to Create your new secure.htaccess Master file or click Cancel.'); ?>')" />

    957. 

  957. </p>

    958. 

  958. </form>

    959. 

  959. </td>

    960. 

  960.   </tr>

    961. 

  961. </table>

    962. 

  962. <?php } ?>

    963. 

  963. </div>

    964. 

  964. <?php if (!current_user_can('manage_options')) { echo 'Permission Denied'; } else { ?>

    965. 

  965. <table width="100%" border="0" cellspacing="0" cellpadding="0" class="bps-help_faq_table">

    966. 

  966.   <tr>

    967. 

  967.     <td class="bps-table_title">&nbsp;</td>

    968. 

  968.   </tr>

    969. 

  969.   <tr>

    970. 

  970.     <td class="bps-table_cell_help">

    971. 

  971.     <h2><?php _e('Activate Security Modes'); ?></h2>

    972. 

  972.     <h3><?php _e('Activate Website Root Folder .htaccess Security Mode'); ?> <a href="#" onmouseover="Tip('<strong>Installing the BulletProof Security plugin does not activate any security modes.<br>If you activate BulletProof Mode for your Root folder you must also activate BulletProof Mode for your wp-admin folder.</strong><br>Perform a backup first before activating any BulletProof Security modes (backs up both currently active root and wp-admin htaccess files at the same time).<br><br><strong>What Is Going On here?</strong><br>When you use the AutoMagic buttons you are creating master .htaccess files for your website. Activating Default Mode or BulletProof Mode copies, renames and moves those master .htaccess files default.htaccess or secure.htaccess, depending on what radio button option you choose, from /plugins/bulletproof-security/admin/htaccess/ to your root folder. Default Mode does not have any security protection - it is just a standard generic WordPress .htaccess file that you should only use for testing purposes.<br><br><strong>If you are installing BPS for the first time - Help and FAQ links are available on the BPS Help and FAQ page</strong><br><br><strong>Info for people who are upgrading BPS</strong><br>Before upgrading or any time you add some additional custom code to your .htaccess files you can save that custom .htaccess code on the My Notes page. This code is saved permanently to your WP database until you edit or delete it. When you upgrade BPS your currently active root and wp-admin .htaccess files are not affected. BPS master .htaccess files are replaced when you upgrade BPS so if you have made changes to your BPS master files that you want to keep make sure they are backed up using Backup and Restore first before upgrading. You can also download copies of the BPS master files to your computer using the BPS File Downloader if you want. When you backup your BPS files this is an online backup so the files will be available to you to restore from if you run into any problems at any point. You should always be using the newest BPS master htaccess files for the latest security protection updates and plugin conflict fixes. Before activating new BPS master files you can use the BPS File Editor to copy and paste any existing htaccess code that you want to keep from your current active htaccess files to the new BPS master htaccess files and save your changes before activating your new BPS htaccess files. You can copy from one .htaccess file editing window to any other window and then save your changes. Or you can copy any new htaccess code from the new BPS master files to your existing currently active htaccess files. If you do this be sure to edit the BPS version number at the top of your currently active htaccess files or you will see BPS error messages. And the My Notes page allows you to save any code you want to save permanently for later use or reminders.<br><br><strong>Troubleshooting Error Messages</strong><br>Check the Edit/Upload/Download page to view your .htaccess files. Click on Your Current Root htaccess File menu tab to view your actual root .htaccess file. The top of the file tells you which BPS .htaccess file is activated and the BPS version. Check that BPS QUERY STRING EXPLOITS code does exist in your root .htaccess file. When you update your WordPress Permalinks the BPSQSE BPS QUERY STRING EXPLOITS code is overwritten with the WordPress standard default .htaccess code. You will either need to use Backup and Restore to restore you backed up .htaccess files or activate BulletProof Mode again for your Root Folder. To check your wp-admin .htaccess file click on the Your Current wp-admin htaccess File menu tab.<br><br><strong>Testing or Removing / Uninstalling BPS</strong><br>If you are testing BPS to determine if there is a plugin conflict or other conflict then Activate Default Mode and select the Delete wp-admin htaccess File radio button and click the Activate button or you can now just go to the WordPress Permalinks page and update / resave your permalinks. This overwrites all BPS security code with the standard default WP .htaccess code. This puts your site in a standard WordPress state with a default or generic Root .htaccess file and no .htaccess file in your wp-admin folder if you selected Delete wp-admin htaccess file. After testing or troubleshooting is completed reactivate BulletProof Modes for both the Root and wp-admin folders. If you are removing / uninstalling BPS then follow the same steps and then select Deactivate from the Wordpress Plugins page and then click Delete to uninstall the BPS plugin.<br><br><strong>BPS Pro Video Tutorial links can be found in the Help & FAQ pages.</strong>', WIDTH, 800, PADDING, 8, ABOVE, true, FADEIN, 400, FADEOUT, 300)" onmouseout="UnTip()">Read Me</a></h3>

    973. 

  973. 

    974. 

  974. <form name="BulletProof-Root" action="admin.php?page=bulletproof-security/admin/options.php" method="post">

    975. 

  975. <?php wp_nonce_field('bulletproof_security_root_copy'); ?>

    976. 

  976. <table class="form-table">

    977. 

  977.    <tr>

    978. 

  978. 	<th><label><input name="selection12" type="radio" value="bpsecureroot" class="tog" <?php checked('', $bpsecureroot); ?> /> <?php _e('BulletProof Mode'); ?></label></th>

    979. 

  979. 	<td class="url-path"><?php echo get_site_url(); ?>/.htaccess<br /><?php _e('<font color="green">Copies the file secure.htaccess to your root folder and renames the file name to just .htaccess</font>'); ?></td>

    980. 

  980.    </tr>

    981. 

  981.    <tr>   

    982. 

  982.    <th><label><input name="selection12" type="radio" value="bpdefaultroot" class="tog" <?php checked('', $bpdefaultroot); ?> /><?php _e('<font color="red">Default Mode<br>WP Default htaccess File</font>'); ?></label></th>

    983. 

  983. 	<td class="url-path"><?php echo get_site_url(); ?>/.htaccess<br /><?php _e('<font color="red"> CAUTION: </font>Your site will not be protected if you activate Default Mode. ONLY activate Default Mode for Testing and Troubleshooting.'); ?></td>

    984. 

  984.    </tr>

    985. 

  985. </table>

    986. 

  986. <p class="submit">

    987. 

  987. <input type="submit" name="submit12" class="button" value="<?php esc_attr_e('Activate') ?>" />

    988. 

  988. </p></form>

    989. 

  989. 

    990. 

  990. <h3><?php _e('Activate Website wp-admin Folder .htaccess Security Mode'); ?> <a href="#" onmouseover="Tip('<strong>Installing the BulletProof Security plugin does not activate any security modes.<br>If you activate BulletProof Mode for your wp-admin folder you must also activate BulletProof Mode for your Root folder.</strong><br>Activating BulletProof Mode copies, renames and moves the master .htaccess file wpadmin-secure.htaccess from /plugins/bulletproof-security/admin/htaccess/ to your /wp-admin folder. If you customize or modify the master .htaccess files then be sure to make an online backup and also download backups of these master .htaccess files to your computer using the BPS File Downloader.<br><br>For more information click this Read Me button link to view the <strong>BulletProof Security Guide.</strong><br><br><strong>Testing or Removing / Uninstalling BPS</strong><br>If you are testing BPS to determine if there is a plugin conflict or other conflict then Activate Default Mode and select the Delete wp-admin htaccess File radio button and click the Activate button. This puts your site in a standard WordPress state with a default or generic Root .htaccess file and no .htaccess file in your wp-admin folder. After testing or troubleshooting is completed reactivate BulletProof Modes for both the Root and wp-admin folders. If you are removing / uninstalling BPS then follow the same steps and then select Deactivate from the Wordpress Plugins page and then click Delete to uninstall the BPS plugin.<br><br><strong>BPS Pro Video Tutorial links can be found in the Help & FAQ pages.</strong>', WIDTH, 400, PADDING, 8, ABOVE, true, FADEIN, 400, FADEOUT, 300)" onmouseout="UnTip()">Read Me</a></h3>

    991. 

  991. 

    992. 

  992. <form name="BulletProof-WPadmin" action="admin.php?page=bulletproof-security/admin/options.php" method="post">

    993. 

  993. <?php wp_nonce_field('bulletproof_security_wpadmin_copy'); ?>

    994. 

  994. <table class="form-table">

    995. 

  995.    <tr>

    996. 

  996. 	<th><label><input name="selection13" type="radio" value="bpsecurewpadmin" class="tog" <?php checked('', $bpsecurewpadmin); ?> /> <?php _e('BulletProof Mode'); ?></label></th>

    997. 

  997. 	<td class="url-path"><?php echo get_site_url(); ?>/wp-admin/.htaccess<br /><?php _e('<font color="green"> Copies the file wpadmin-secure.htaccess to your /wp-admin folder and renames the file name to just .htaccess</font>'); ?></td>

    998. 

  998.    </tr>

    999. 

  999.    <tr>

    1000. 

  1000. 	<th><label><input name="selection13" type="radio" value="Removebpsecurewpadmin" class="tog" <?php checked('', $Removebpsecurewpadmin); ?> /> <?php _e('<font color="red">Delete wp-admin<br>htaccess File</font>'); ?></label></th>

    1001. 

  1001. 	<td class="url-path"><?php echo get_site_url(); ?>/wp-admin/.htaccess<br /><?php _e('<font color="red"> CAUTION: </font>Deletes the .htaccess file in your /wp-admin folder. ONLY delete For testing or BPS removal.'); ?></td>

    1002. 

  1002.    </tr>

    1003. 

  1003. </table>

    1004. 

  1004. <p class="submit"><input type="submit" name="submit13" class="button" value="<?php esc_attr_e('Activate') ?>" />

    1005. 

  1005. </p></form>

    1006. 

  1006. 

    1007. 

  1007. <h3><?php _e('Activate Deny All htaccess Folder Protection For The BPS Master htaccess Folder'); ?> <a href="#" onmouseover="Tip('<strong>Your BPS Master htaccess folder should already be automatically protected by BPS Pro, but if it is not then activate BulletProof Mode for your BPS Master htaccess folder</strong><br><br>Activating BulletProof Mode for Deny All htaccess Folder Protection copies and renames the deny-all.htaccess file located in the /plugins/bulletproof-security/admin/htaccess/ folder and renames it to just .htaccess. The Deny All htaccess file blocks everyone, except for you, from accessing and viewing the BPS Master htaccess files.<br><br><strong>BPS Pro Video Tutorial links can be found in the Help & FAQ pages.</strong>', WIDTH, 400, PADDING, 8, ABOVE, true, FADEIN, 400, FADEOUT, 300)" onmouseout="UnTip()">Read Me</a></h3>

    1008. 

  1008. 

    1009. 

  1009. <form name="BulletProof-deny-all-htaccess" action="admin.php?page=bulletproof-security/admin/options.php" method="post">

    1010. 

  1010. <?php wp_nonce_field('bulletproof_security_denyall_master'); ?>

    1011. 

  1011. <table class="form-table">

    1012. 

  1012.    <tr>

    1013. 

  1013. 	<th><label><input name="selection8" type="radio" value="bps_rename_htaccess_files" class="tog" <?php checked('', $bps_rename_htaccess_files); ?> /> <?php _e('BulletProof Mode'); ?></label></th>

    1014. 

  1014. 	<td class="url-path"><?php echo get_site_url(); ?>/wp-content/plugins/bulletproof-security/admin/htaccess/<br /><?php _e('<font color="green"> Copies the file deny-all.htaccess to the BPS Master htaccess folder and renames the file name to just .htaccess</font>'); ?></td>

    1015. 

  1015.    </tr>

    1016. 

  1016. </table>

    1017. 

  1017. <p class="submit"><input type="submit" name="submit8" class="button" value="<?php esc_attr_e('Activate') ?>" />

    1018. 

  1018. </p></form>

    1019. 

  1019. 

    1020. 

  1020. <h3><?php _e('Activate Deny All htaccess Folder Protection For The BPS Backup Folder'); ?> <a href="#" onmouseover="Tip('<strong>Your BPS Backup Folder is NOT already automatically protected by BPS Pro and requires that you activate BulletProof Mode to htaccess protect it</strong><br><br>Activating BulletProof Mode for Deny All BPS Backup Folder Protection copies and renames the deny-all.htaccess file located in the /bulletproof-security/admin/htaccess/ folder to the BPS Backup folder /wp-content/bps-backup and renames it to just .htaccess. The Deny All htaccess file blocks everyone, except for you, from accessing and viewing your backed up htaccess files.<br><br><strong>BPS Pro Video Tutorial links can be found in the Help & FAQ pages.</strong>', WIDTH, 400, PADDING, 8, ABOVE, true, FADEIN, 400, FADEOUT, 300)" onmouseout="UnTip()">Read Me</a></h3>

    1021. 

  1021. 

    1022. 

  1022. <form name="BulletProof-deny-all-backup" action="admin.php?page=bulletproof-security/admin/options.php" method="post">

    1023. 

  1023. <?php wp_nonce_field('bulletproof_security_denyall_bpsbackup'); ?>

    1024. 

  1024. <table class="form-table">

    1025. 

  1025.    <tr>

    1026. 

  1026. 	<th><label><input name="selection14" type="radio" value="bps_rename_htaccess_files_backup" class="tog" <?php checked('', $bps_rename_htaccess_files_backup); ?> /> <?php _e('BulletProof Mode'); ?></label></th>

    1027. 

  1027. 	<td class="url-path"><?php echo get_site_url(); ?>/wp-content/bps-backup/<br /><?php _e('<font color="green"> Copies and the file deny-all.htaccess to the BPS Backup folder and renames the file name to just .htaccess</font>'); ?></td>

    1028. 

  1028.    </tr>

    1029. 

  1029. </table>

    1030. 

  1030. <p class="submit"><input type="submit" name="submit14" class="button" value="<?php esc_attr_e('Activate') ?>" />

    1031. 

  1031. </p></form>

    1032. 

  1032. </td>

    1033. 

  1033.   </tr>

    1034. 

  1034.   <tr>

    1035. 

  1035.     <td class="bps-table_cell_bottom">&nbsp;</td>

    1036. 

  1036.   </tr>

    1037. 

  1037. </table>

    1038. 

  1038. <?php } ?>

    1039. 

  1039. 

    1040. 

  1040. </div>

    1041. 

  1041.             

    1042. 

  1042. <div id="bps-tabs-2" class="bps-tab-page">

    1043. 

  1043. <h2><?php _e('BulletProof Security Status'); ?></h2>

    1044. 

  1044. 

    1045. 

  1045. 

    1046. 

  1046. <?php if (!current_user_can('manage_options')) { echo 'Permission Denied'; } else { ?>

    1047. 

  1047. <table width="100%" border="0" cellspacing="0" cellpadding="0" class="bps-status_table">

    1048. 

  1048.   <tr>

    1049. 

  1049.     <td width="49%" class="bps-table_title"><?php _e('Activated BulletProof Security .htaccess Files'); ?> <a href="#" onmouseover="Tip('<strong>Installing the BulletProof Security plugin does not activate any security modes.<br>If you activate BulletProof Mode for your Root folder you must also activate BulletProof Mode for your wp-admin folder.</strong><br>Perform a backup first before activating any BulletProof Security modes (backs up both currently active root and wp-admin htaccess files at the same time).<br><br><strong>If you are installing BPS for the first time - Help and FAQ links are available on the BPS Help and FAQ page</strong><br><br><strong>Info for people who are upgrading BPS</strong><br>Before upgrading or any time you add some additional custom code to your .htaccess files you can save that custom .htaccess code on the My Notes page. This code is saved permanently to your WP database until you edit or delete it. When you upgrade BPS your currently active root and wp-admin .htaccess files are not affected. BPS master .htaccess files are replaced when you upgrade BPS so if you have made changes to your BPS master files that you want to keep make sure they are backed up using Backup and Restore first before upgrading. You can also download copies of the BPS master files to your computer using the BPS File Downloader if you want. When you backup your BPS files this is an online backup so the files will be available to you to restore from if you run into any problems at any point. You should always be using the newest BPS master htaccess files for the latest security protection updates and plugin conflict fixes. Before activating new BPS master files you can use the BPS File Editor to copy and paste any existing htaccess code that you want to keep from your current active htaccess files to the new BPS master htaccess files and save your changes before activating your new BPS htaccess files. You can copy from one .htaccess file editing window to any other window and then save your changes. Or you can copy any new htaccess code from the new BPS master files to your existing currently active htaccess files. If you do this be sure to edit the BPS version number at the top of your currently active htaccess files or you will see BPS error messages. And the My Notes page allows you to save any code you want to save permanently for later use or reminders.<br><br><strong>Troubleshooting Error Messages</strong><br>Check the Edit/Upload/Download page to view your .htaccess files. Click on Your Current Root htaccess File menu tab to view your actual root .htaccess file. The top of the file tells you which BPS .htaccess file is activated and the BPS version. Check that BPS QUERY STRING EXPLOITS code does exist in your root .htaccess file. When you update your WordPress Permalinks the BPSQSE BPS QUERY STRING EXPLOITS code is overwritten with the WordPress standard default .htaccess code. You will either need to use Backup and Restore to restore you backed up .htaccess files or activate BulletProof Mode again for your Root Folder. To check your wp-admin .htaccess file click on the Your Current wp-admin htaccess File menu tab.<br><br><strong>Additional Info - Activated BulletProof Security Status window</strong><br>The Text Strings you see listed in the Activated BulletProof Security Status window if you have an active BulletProof .htaccess file (or an existing .htaccess file) is reading and displaying the actual contents of any existing .htaccess files here. <strong>This is not just a displayed message - this is the actual first 46 string characters (text) of the contents of your .htaccess files.</strong>The BPSQSE BPS QUERY STRING EXPLOITS code check is done by searching the root .htaccess file to verify that the string/text/word BPSQSE is in the file.<br><br>To change or modify the Text String that you see displayed here you would use the BPS built in Text Editor to change the actual text content of the BulletProof Security master .htaccess files. If the change the BULLETPROOF SECURITY title shown here then you must also change the coding contained in the /wp-content/plugins/bulletproof-security/includes/functions.php file to match your changes or you will get some error messages. The rest of the text content in the .htaccess files can be modified just like a normal post. Just this top line ot text in the .htaccess files contains version information that BPS checks to do verifications and other file checking. For detailed instructions on modifying what text is displayed here click this Read Me button link.<br><br><strong>BPS Pro Video Tutorial links can be found in the Help & FAQ pages.</strong>', WIDTH, 800, PADDING, 8, ABOVE, true, FADEIN, 500, FADEOUT, 300)" onmouseout="UnTip()">Read Me</a></td>

    1050. 

  1050.     <td width="2%">&nbsp;</td>

    1051. 

  1051.     <td width="49%" class="bps-table_title"><?php _e('Additional Website Security Measures'); ?></td>

    1052. 

  1052.   </tr>

    1053. 

  1053.   <tr>

    1054. 

  1054.     <td class="bps-table_cell">&nbsp;</td>

    1055. 

  1055.     <td>&nbsp;</td>

    1056. 

  1056.     <td class="bps-table_cell">&nbsp;</td>

    1057. 

  1057.   </tr>

    1058. 

  1058.   <tr>

    1059. 

  1059.     <td class="bps-table_cell">

    1060. 

  1060. <?php 

    1061. 

  1061. 	echo root_htaccess_status();

    1062. 

  1062. 	echo denyall_htaccess_status_master();

    1063. 

  1063. 	echo denyall_htaccess_status_backup();

    1064. 

  1064. 	echo wpadmin_htaccess_status();

    1065. 

  1065. ?>

    1066. 

  1066.     <td>&nbsp;</td>

    1067. 

  1067.     <td class="bps-table_cell">

    1068. 

  1068. <?php 

    1069. 

  1069. 	echo bps_wpdb_errors_off();

    1070. 

  1070. 	echo bps_wp_remove_version();

    1071. 

  1071. 	echo check_admin_username();

    1072. 

  1072. 	echo bps_filesmatch_check_readmehtml();

    1073. 

  1073. 	echo bps_filesmatch_check_installphp();

    1074. 

  1074. 	//echo bpsPro_sysinfo_message();

    1075. 

  1075. ?>

    1076. 

  1076.   </tr>

    1077. 

  1077.   <tr>

    1078. 

  1078.     <td class="bps-table_cell">&nbsp;</td>

    1079. 

  1079.     <td>&nbsp;</td>

    1080. 

  1080.     <td class="bps-table_cell">&nbsp;</td>

    1081. 

  1081.   </tr>

    1082. 

  1082. </table>

    1083. 

  1083. <?php } ?>

    1084. 

  1084. <?php if (!current_user_can('manage_options')) { echo 'Permission Denied'; } else { ?>

    1085. 

  1085. <table width="100%" border="0" cellspacing="0" cellpadding="0" class="bps-perms_table">

    1086. 

  1086.   <tr>

    1087. 

  1087.     <td colspan="4" class="bps-table_title"><?php _e('File and Folder Permissions - CGI or DSO'); ?> <a href="#" onmouseover="Tip('<strong>CGI And DSO File And Folder Permission Recommendations</strong><br>If your Server API (SAPI) is CGI you will see a table displayed with recommendations for file and folder permissions for CGI. If your SAPI is DSO / Apache mod_php you will see a table listing file and folder permission recommendations for DSO. If you Host is using CGI, but they do not allow you to set your folder permissions more restricive to 705 and file permissions more restrictive to 604 then most likely when you change your folder and file permissions they will automatically be changed back to 755 and 644 by your Host. CGI 705 folder permissions have been thoroughly tested with WordPress and no problems have been discovered with WP or with WP Plugins. Changing your folder permissions to 705 helps in protecting against Mass Host Code Injections. CGI 604 file permissions have been thoroughly tested with WordPress and no problems have been discovered with WP or with WP Plugins. Changing your file permissions to 604 helps in protecting your files from Mass Host Code Injections. CGI Mission Critical files should be set to 400 and 404 respectively.<br><br><strong>If you have BPS Pro installed then use F-Lock to Lock or Unlock your Mission Critical files. BPS Pro S-Monitor will automatically display warning messages if your files are unlocked.</strong><br><br><strong>The wp-content/bps-backup/ folder permission recommendation is 755 for CGI or DSO for compatibility reasons. The /bps-backup folder has a deny all .htaccess file in it so that it cannot be accessed by anyone other than you so the folder permissions for this folder are irrelevant.</strong><br><br>Your current file and folder permissions are shown below with suggested file and folder permission settings that you should use for the best website security and functionality.<br><br>I recommend using FileZilla to change your file and folder permissions. FileZilla is a free FTP software that makes changing your file and folder permissions very simple and easy as well as many other very nice FTP features. With FileZilla you can right mouse click on your files or folders and set the permissions with a Numeric value like 755, 644, etc. Takes the confusion out of which attributes to check or uncheck.<br><br><strong>BPS Pro Video Tutorial links can be found in the Help & FAQ pages.</strong>', WIDTH, 600, PADDING, 8, ABOVE, true, FADEIN, 400, FADEOUT, 300)" onmouseout="UnTip()">Read Me</a></td>

    1088. 

  1088.     <td width="2%">&nbsp;</td>

    1089. 

  1089.     <td width="49%" class="bps-table_title"><?php _e('General BulletProof Security File Checks'); ?> <a href="#" onmouseover="Tip('This is a quick visual check to verify that you have active .htaccess files in your root and /wp-admin folders and that all the required BPS files are in your BulletProof Security plugin folder. The BulletProof Security .htaccess master files (default.htaccess, secure.htaccess, wpadmin-secure.htaccess, maintenance.htaccess and bp-maintenance.php) are located in this folder /wp-content/plugins/bulletproof-security/admin/htaccess/<br><br>For new installations and upgrades of BulletProof Security you will see red warning messages. This is completely normal. These warnings are there to remind you to perform backups if they have not been performed yet. Also you may see warning messages if files do not exist yet.<br><br>You can also download backups of any existing .htaccess files using the BPS File Downloader.<br><br><strong>BPS Pro Video Tutorial links can be found in the Help & FAQ pages.</strong>', WIDTH, 400, PADDING, 8, ABOVE, true, FADEIN, 400, FADEOUT, 300)" onmouseout="UnTip()">Read Me</a></td>

    1090. 

  1090.   </tr>

    1091. 

  1091.   <tr>

    1092. 

  1092.     <td width="16%" class="bps-table_cell_perms_head_left"><?php _e('File Name -<br>Folder Name'); ?></td>

    1093. 

  1093.     <td width="13%" class="bps-table_cell_perms_head_middle"><?php _e('File Path -<br>Folder Path'); ?></td>

    1094. 

  1094.     <td width="10%" class="bps-table_cell_perms_head_middle"><?php _e('Recommended<br>Permissions'); ?></td>

    1095. 

  1095.     <td width="10%" class="bps-table_cell_perms_head_right"><?php _e('Current<br>Permissions'); ?></td>

    1096. 

  1096.     <td>&nbsp;</td>

    1097. 

  1097.     <td rowspan="4" class="bps-table_cell_file_checks">

    1098. 

  1098. <?php echo general_bps_file_checks(); ?>

    1099. 

  1099.    <table width="100%" border="0" cellspacing="0" cellpadding="0" class="bps-file_checks_bottom_table" style="margin-top:32px;">

    1100. 

  1100.       <tr>

    1101. 

  1101.         <td class="bps-file_checks_bottom_bps-table_cell">&nbsp;</td>

    1102. 

  1102.       </tr>

    1103. 

  1103.     </table>

    1104. 

  1104.     </td>

    1105. 

  1105.   </tr>

    1106. 

  1106.   <tr>

    1107. 

  1107.     <td height="100%" colspan="4" class="bps-table_cell_perms_blank">

    1108. 

  1108. 	<?php 

    1109. 

  1109. 	$sapi_type = php_sapi_name();

    1110. 

  1110. 	if (substr($sapi_type, 0, 3) == 'cgi') { 

    1111. 

  1111. 	_e('<div style=\'padding:5px 0px 5px 5px;border-bottom:1px solid black;\'><strong>CGI File and Folder Permissions / Recommendations</strong></div>');

    1112. 

  1112. 	bps_check_perms(".htaccess","../.htaccess","404");

    1113. 

  1113. 	bps_check_perms("wp-config.php","../wp-config.php","400");

    1114. 

  1114. 	bps_check_perms("index.php","../index.php","400");

    1115. 

  1115. 	bps_check_perms("wp-blog-header.php","../wp-blog-header.php","400");

    1116. 

  1116. 	bps_check_perms("root folder","../","705");

    1117. 

  1117. 	bps_check_perms("wp-admin/","../wp-admin","705");

    1118. 

  1118. 	bps_check_perms("wp-includes/","../wp-includes","705");

    1119. 

  1119. 	bps_check_perms("wp-content/","../wp-content","705");

    1120. 

  1120. 	bps_check_perms("wp-content/bps-backup/","../wp-content/bps-backup","755");

    1121. 

  1121. 	_e('<div style=\'padding-bottom:15px;\'></div>');

    1122. 

  1122. 	} else {

    1123. 

  1123. 	_e('<div style=\'padding:5px 0px 5px 5px;border-bottom:1px solid black;\'><strong>DSO File and Folder Permissions / Recommendations</strong></div>');

    1124. 

  1124. 	bps_check_perms(".htaccess","../.htaccess","644");

    1125. 

  1125. 	bps_check_perms("wp-config.php","../wp-config.php","644");

    1126. 

  1126. 	bps_check_perms("index.php","../index.php","644");

    1127. 

  1127. 	bps_check_perms("wp-blog-header.php","../wp-blog-header.php","644");

    1128. 

  1128. 	bps_check_perms("root folder","../","755");

    1129. 

  1129. 	bps_check_perms("wp-admin/","../wp-admin","755");

    1130. 

  1130. 	bps_check_perms("wp-includes/","../wp-includes","755");

    1131. 

  1131. 	bps_check_perms("wp-content/","../wp-content","755");

    1132. 

  1132. 	bps_check_perms("wp-content/bps-backup/","../wp-content/bps-backup","755");

    1133. 

  1133. 	_e('<div style=\'padding-bottom:15px;\'></div>');

    1134. 

  1134. 	}

    1135. 

  1135. ?>

    1136. 

  1136. </td>

    1137. 

  1137.     <td>&nbsp;</td>

    1138. 

  1138.     </tr>

    1139. 

  1139.  <tr>

    1140. 

  1140.     <td colspan="4">

    1141. 

  1141.     <table width="100%" border="0" cellspacing="0" cellpadding="0" class="bps-file_checks_bottom_table_special">

    1142. 

  1142.       <tr>

    1143. 

  1143.         <td class="bps-file_checks_bottom_bps-table_cell">&nbsp;</td>

    1144. 

  1144.       </tr>

    1145. 

  1145.     </table>

    1146. 

  1146.     </td>

    1147. 

  1147.     <td>&nbsp;</td>

    1148. 

  1148.     </tr>

    1149. 

  1149. </table>

    1150. 

  1150. <br />

    1151. 

  1151. <?php } ?>

    1152. 

  1152. 

    1153. 

  1153. </div>

    1154. 

  1154.             

    1155. 

  1155. <div id="bps-tabs-3">

    1156. 

  1156. <h2><?php _e('System Information'); ?></h2>

    1157. 

  1157. 

    1158. 

  1158. <?php if (!current_user_can('manage_options')) { echo 'Permission Denied'; } else { ?>

    1159. 

  1159. 

    1160. 

  1160. <table width="100%" border="0" cellspacing="0" cellpadding="0" class="bps-system_info_table">

    1161. 

  1161.   <tr>

    1162. 

  1162.     <td width="49%" class="bps-table_title"><?php _e('Website / Server / IP Info'); ?></td>

    1163. 

  1163.     <td width="2%">&nbsp;</td>

    1164. 

  1164.     <td width="49%" class="bps-table_title"><?php _e('SQL Database / Permalink Structure / WP Installation Folder'); ?></td>

    1165. 

  1165.   </tr>

    1166. 

  1166.   <tr>

    1167. 

  1167.     <td class="bps-table_cell">&nbsp;</td>

    1168. 

  1168.     <td>&nbsp;</td>

    1169. 

  1169.     <td class="bps-table_cell">&nbsp;</td>

    1170. 

  1170.   </tr>

    1171. 

  1171.   <tr>

    1172. 

  1172.     <td class="bps-table_cell"><?php _e('Website Root Folder'); ?>: <strong><?php echo get_site_url(); ?></strong></td>

    1173. 

  1173.     <td>&nbsp;</td>

    1174. 

  1174.     <td rowspan="12" class="bps-table_cell">

    1175. 

  1175. 	<?php _e('MySQL Database Version'); ?>: <?php $sqlversion = $wpdb->get_var("SELECT VERSION() AS version"); ?><strong><?php echo $sqlversion; ?></strong><br />

    1176. 

  1176.       <?php _e('MySQL Client Version'); ?>

    1177. 

  1177.       : <strong><?php echo mysql_get_client_info(); ?></strong><br />

    1178. 

  1178.       <?php _e('Database Host'); ?>

    1179. 

  1179.       : <strong><?php echo DB_HOST; ?></strong>&nbsp;</strong><br />

    1180. 

  1180.       <?php _e('Database Name'); ?>

    1181. 

  1181.       : <strong><?php echo DB_NAME; ?></strong>&nbsp;</strong><br />

    1182. 

  1182.       <?php _e('Database User'); ?>

    1183. 

  1183.       : <strong><?php echo DB_USER; ?></strong><br />

    1184. 

  1184.       <?php _e('SQL Mode'); ?>

    1185. 

  1185.       : 

    1186. 

  1186.       <?php $mysqlinfo = $wpdb->get_results("SHOW VARIABLES LIKE 'sql_mode'");

    1187. 

  1187. 	if (is_array($mysqlinfo)) $sql_mode = $mysqlinfo[0]->Value;

    1188. 

  1188.     if (empty($sql_mode)) $sql_mode = __('Not Set');

    1189. 

  1189. 	else $sql_mode = __('Off'); ?>      <strong><?php echo $sql_mode; ?></strong><br /><br />

    1190. 

  1190.       <?php _e('WordPress Installation Folder'); ?>

    1191. 

  1191.       : <strong><?php echo bps_wp_get_root_folder(); ?></strong><br />

    1192. 

  1192.       <?php _e('WordPress Installation Type'); ?>

    1193. 

  1193.       : <strong><?php echo bps_wp_get_root_folder_display_type(); ?></strong><br />

    1194. 

  1194.       <?php _e('WP Permalink Structure'); ?>

    1195. 

  1195.       : <strong><?php $permalink_structure = get_option('permalink_structure'); echo $permalink_structure; ?></strong><br />

    1196. 

  1196. 	  <?php echo bps_check_permalinks(); ?><br />

    1197. 

  1197.       <?php echo bps_check_php_version (); ?>

    1198. 

  1198.       </td>

    1199. 

  1199.   </tr>

    1200. 

  1200.   <tr>

    1201. 

  1201.     <td class="bps-table_cell"><?php _e('Document Root Path'); ?>: <strong><?php echo $_SERVER['DOCUMENT_ROOT']; ?></strong></td>

    1202. 

  1202.     <td>&nbsp;</td>

    1203. 

  1203.     </tr>

    1204. 

  1204.   <tr>

    1205. 

  1205.     <td class="bps-table_cell"><?php _e('WP ABSPATH'); ?>: <strong><?php echo ABSPATH; ?></strong></td>

    1206. 

  1206.     <td>&nbsp;</td>

    1207. 

  1207.     </tr>

    1208. 

  1208.   <tr>

    1209. 

  1209.     <td class="bps-table_cell"><?php _e('Parent Directory'); ?>: <strong><?php echo dirname(ABSPATH); ?></strong></td>

    1210. 

  1210.     <td>&nbsp;</td>

    1211. 

  1211.     </tr>

    1212. 

  1212.   <tr>

    1213. 

  1213.     <td class="bps-table_cell"><?php _e('Server / Website IP Address'); ?>: <strong><?php echo $_SERVER['SERVER_ADDR']; ?></strong></td>

    1214. 

  1214.     <td>&nbsp;</td>

    1215. 

  1215.     </tr>

    1216. 

  1216.   <tr>

    1217. 

  1217.     <td class="bps-table_cell"><?php _e('Host by Address'); ?>: <strong><?php echo gethostbyaddr($_SERVER['SERVER_ADDR']); ?></strong></td>

    1218. 

  1218.     <td>&nbsp;</td>

    1219. 

  1219.     </tr>

    1220. 

  1220.   <tr>

    1221. 

  1221.     <td class="bps-table_cell"><?php _e('Public IP / Your Computer IP Address'); ?>: <strong><?php echo $_SERVER['REMOTE_ADDR']; ?></strong></td>

    1222. 

  1222.     <td>&nbsp;</td>

    1223. 

  1223.     </tr>

    1224. 

  1224.   <tr>

    1225. 

  1225.     <td class="bps-table_cell"><?php _e('Server Type'); ?>: <strong><?php echo $_SERVER['SERVER_SOFTWARE']; ?></strong></td>

    1226. 

  1226.     <td>&nbsp;</td>

    1227. 

  1227.     </tr>

    1228. 

  1228.   <tr>

    1229. 

  1229.     <td class="bps-table_cell"><?php _e('Operating System'); ?>: <strong><?php echo PHP_OS; ?></strong></td>

    1230. 

  1230.     <td>&nbsp;</td>

    1231. 

  1231.     </tr>

    1232. 

  1232.   <tr>

    1233. 

  1233.     <td class="bps-table_cell"><?php _e('Server API'); ?>: <strong><?php $sapi_type = php_sapi_name();

    1234. 

  1234. 	if (substr($sapi_type, 0, 3) == 'cgi') {

    1235. 

  1235.     _e($sapi_type.' - Your Host Server is using CGI.');

    1236. 

  1236. 	} else {

    1237. 

  1237.     _e($sapi_type.' - Your Host Server is using DSO or another SAPI type.');

    1238. 

  1238. 	} ?></strong>

    1239. 

  1239.     </td>

    1240. 

  1240.     <td>&nbsp;</td>

    1241. 

  1241.     </tr>  

    1242. 

  1242.   <tr>

    1243. 

  1243.     <td class="bps-table_cell"><?php echo bps_multsite_check(); ?></td>

    1244. 

  1244.     <td>&nbsp;</td>

    1245. 

  1245.     </tr>

    1246. 

  1246.   <tr>

    1247. 

  1247.     <td class="bps-table_cell"><?php _e('Browser Compression Supported'); ?>: <strong><?php echo $_SERVER['HTTP_ACCEPT_ENCODING']; ?></strong></td>

    1248. 

  1248.     <td>&nbsp;</td>

    1249. 

  1249.     </tr>

    1250. 

  1250.   <tr>

    1251. 

  1251.     <td class="bps-table_cell">&nbsp;</td>

    1252. 

  1252.     <td>&nbsp;</td>

    1253. 

  1253.     <td class="bps-table_cell">&nbsp;</td>

    1254. 

  1254.     </tr>

    1255. 

  1255.   <tr>

    1256. 

  1256.     <td class="bps-table_title"><?php _e('PHP Server / PHP.ini Info'); ?></td>

    1257. 

  1257.     <td>&nbsp;</td>

    1258. 

  1258.     <td class="bps-table_title"><?php _e('BPS Pro Security Modules Info'); ?></td>

    1259. 

  1259.   </tr>

    1260. 

  1260.   <tr>

    1261. 

  1261.     <td class="bps-table_cell">&nbsp;</td>

    1262. 

  1262.     <td>&nbsp;</td>

    1263. 

  1263.     <td class="bps-table_cell">&nbsp;</td>

    1264. 

  1264.   </tr>

    1265. 

  1265.   <tr>

    1266. 

  1266.     <td class="bps-table_cell"><?php _e('PHP Version'); ?>: <strong><?php echo PHP_VERSION; ?></strong></td>

    1267. 

  1267.     <td>&nbsp;</td>

    1268. 

  1268.     <td rowspan="18" class="bps-table_cell">

    1269. 

  1269. 	<?php // BPS Pro ONLY ?>

    1270. 

  1270. 	<?php //echo bpsPro_sysinfo_mod_checks_smon(); ?><br />

    1271. 

  1271. 	<?php //echo bpsPro_sysinfo_mod_checks_hud(); ?><br />

    1272. 

  1272. 	<?php //echo bpsPro_sysinfo_mod_checks_phpini(); ?><br />

    1273. 

  1273. 	<?php //echo bpsPro_sysinfo_mod_checks_elog(); ?><br />

    1274. 

  1274.     </td>

    1275. 

  1275.   </tr>

    1276. 

  1276.   <tr>

    1277. 

  1277.     <td class="bps-table_cell"><?php _e('PHP Memory Usage'); ?>: <strong><?php echo round(memory_get_usage() / 1024 / 1024, 2) . __(' MB'); ?></strong></td>

    1278. 

  1278.     <td>&nbsp;</td>

    1279. 

  1279.     </tr>

    1280. 

  1280.   <tr>

    1281. 

  1281.     <td class="bps-table_cell"><?php _e('PHP Memory Limit'); ?>: <?php if(ini_get('memory_limit')) $memory_limit = ini_get('memory_limit');

    1282. 

  1282.         else $memory_limit = __('N/A'); ?><strong><?php echo $memory_limit; ?></strong></td>

    1283. 

  1283.     <td>&nbsp;</td>

    1284. 

  1284.     </tr>

    1285. 

  1285.   <tr>

    1286. 

  1286.     <td class="bps-table_cell"><?php _e('PHP Max Upload Size'); ?>: <?php if(ini_get('upload_max_filesize')) $upload_max = ini_get('upload_max_filesize');

    1287. 

  1287.         else $upload_max = __('N/A'); ?><strong><?php echo $upload_max; ?></strong></td>

    1288. 

  1288.     <td>&nbsp;</td>

    1289. 

  1289.     </tr>

    1290. 

  1290.   <tr>

    1291. 

  1291.     <td class="bps-table_cell"><?php _e('PHP Max Post Size'); ?>: <?php if(ini_get('post_max_size')) $post_max = ini_get('post_max_size');

    1292. 

  1292.         else $post_max = __('N/A'); ?><strong><?php echo $post_max; ?></strong></td>

    1293. 

  1293.     <td>&nbsp;</td>

    1294. 

  1294.     </tr>

    1295. 

  1295.   <tr>

    1296. 

  1296.     <td class="bps-table_cell"><?php _e('PHP Safe Mode'); ?>: <?php if(ini_get('safe_mode')) $safe_mode = __('On');

    1297. 

  1297.         else $safe_mode = __('Off'); ?><strong><?php echo $safe_mode; ?></strong></td>

    1298. 

  1298.     <td>&nbsp;</td>

    1299. 

  1299.     </tr>

    1300. 

  1300.   <tr>

    1301. 

  1301.     <td class="bps-table_cell"><?php _e('PHP Allow URL fopen'); ?>: <?php if(ini_get('allow_url_fopen')) $allow_url_fopen = __('On');

    1302. 

  1302.         else $allow_url_fopen = __('Off'); ?><strong><?php echo $allow_url_fopen; ?></strong></td>

    1303. 

  1303.     <td>&nbsp;</td>

    1304. 

  1304.     </tr>

    1305. 

  1305.    <tr>

    1306. 

  1306.     <td class="bps-table_cell"><?php _e('PHP Allow URL Include'); ?>: <?php if(ini_get('allow_url_include')) $allow_url_include = __('On');

    1307. 

  1307.         else $allow_url_include = __('Off'); ?><strong><?php echo $allow_url_include; ?></strong></td>

    1308. 

  1308.     <td>&nbsp;</td>

    1309. 

  1309.     </tr>

    1310. 

  1310.   <tr>

    1311. 

  1311.     <td class="bps-table_cell"><?php _e('PHP Display Errors'); ?>: <?php if(ini_get('display_errors')) $display_errors = __('On');

    1312. 

  1312.         else $display_errors = __('Off'); ?><strong><?php echo $display_errors; ?></strong></td>

    1313. 

  1313.     <td>&nbsp;</td>

    1314. 

  1314.     </tr>

    1315. 

  1315.   <tr>

    1316. 

  1316.     <td class="bps-table_cell"><?php _e('PHP Display Startup Errors'); ?>: <?php if(ini_get('display_startup_errors')) $display_startup_errors = __('On');

    1317. 

  1317.         else $display_startup_errors = __('Off'); ?><strong><?php echo $display_startup_errors; ?></strong></td>

    1318. 

  1318.     <td>&nbsp;</td>

    1319. 

  1319.     </tr>

    1320. 

  1320.    <tr>

    1321. 

  1321.     <td class="bps-table_cell"><?php _e('PHP Expose PHP'); ?>: <?php if(ini_get('expose_php')) $expose_php = __('On');

    1322. 

  1322.         else $expose_php = __('Off'); ?><strong><?php echo $expose_php; ?></strong></td>

    1323. 

  1323.     <td>&nbsp;</td>

    1324. 

  1324.     </tr>

    1325. 

  1325.   <tr>

    1326. 

  1326.     <td class="bps-table_cell"><?php _e('PHP Register Globals'); ?>: <?php if(ini_get('register_globals')) $register_globals = __('On');

    1327. 

  1327.         else $register_globals = __('Off'); ?><strong><?php echo $register_globals; ?></strong></td>

    1328. 

  1328.     <td>&nbsp;</td>

    1329. 

  1329.     </tr>

    1330. 

  1330.   <tr>

    1331. 

  1331.     <td class="bps-table_cell"><?php _e('PHP Max Script Execution Time'); ?>: <?php if(ini_get('max_execution_time')) $max_execute = ini_get('max_execution_time');

    1332. 

  1332.         else $max_execute = __('N/A'); ?><strong><?php echo $max_execute; ?> Seconds</strong></td>

    1333. 

  1333.     <td>&nbsp;</td>

    1334. 

  1334.     </tr>

    1335. 

  1335.   <tr>

    1336. 

  1336.     <td class="bps-table_cell"><?php _e('PHP Magic Quotes GPC'); ?>: <?php if(ini_get('magic_quotes_gpc')) $magic_quotes_gpc = __('On');

    1337. 

  1337.         else $magic_quotes_gpc = __('Off'); ?><strong><?php echo $magic_quotes_gpc; ?></strong></td>

    1338. 

  1338.     <td>&nbsp;</td>

    1339. 

  1339.     </tr>

    1340. 

  1340.   <tr>

    1341. 

  1341.     <td class="bps-table_cell"><?php _e('PHP open_basedir'); ?>: <?php if(ini_get('open_basedir')) $open_basedir = __('On');

    1342. 

  1342.         else $open_basedir = __('Off'); ?><strong><?php echo $open_basedir; ?></strong></td>

    1343. 

  1343.     <td>&nbsp;</td>

    1344. 

  1344.     </tr>

    1345. 

  1345.   <tr>

    1346. 

  1346.     <td class="bps-table_cell"><?php _e('PHP XML Support'); ?>: <?php if (is_callable('xml_parser_create')) $xml = __('Yes');

    1347. 

  1347.         else $xml = __('No'); ?><strong><?php echo $xml; ?></strong></td>

    1348. 

  1348.     <td>&nbsp;</td>

    1349. 

  1349.     </tr>

    1350. 

  1350.   <tr>

    1351. 

  1351.     <td class="bps-table_cell"><?php _e('PHP IPTC Support'); ?>: <?php if (is_callable('iptcparse')) $iptc = __('Yes');

    1352. 

  1352.         else $iptc = __('No'); ?><strong><?php echo $iptc; ?></strong></td>

    1353. 

  1353.     <td>&nbsp;</td>

    1354. 

  1354.     </tr>

    1355. 

  1355.   <tr>

    1356. 

  1356.     <td class="bps-table_cell"><?php _e('PHP Exif Support'); ?>: <?php if (is_callable('exif_read_data')) $exif = __('Yes'). " ( V" . substr(phpversion('exif'),0,4) . ")" ;

    1357. 

  1357.         else $exif = __('No'); ?><strong><?php echo $exif; ?></strong></td>

    1358. 

  1358.     <td>&nbsp;</td>

    1359. 

  1359.     </tr>

    1360. 

  1360.   <tr>

    1361. 

  1361.     <td class="bps-table_cell">&nbsp;</td>

    1362. 

  1362.     <td>&nbsp;</td>

    1363. 

  1363.     <td class="bps-table_cell">&nbsp;</td>

    1364. 

  1364.   </tr>

    1365. 

  1365.   <tr>

    1366. 

  1366.     <td class="bps-table_cell_bottom">&nbsp;</td>

    1367. 

  1367.     <td>&nbsp;</td>

    1368. 

  1368.     <td class="bps-table_cell_bottom">&nbsp;</td>

    1369. 

  1369.   </tr>

    1370. 

  1370. </table>

    1371. 

  1371. <br />

    1372. 

  1372. <?php } ?>

    1373. 

  1373. </div>

    1374. 

  1374.             

    1375. 

  1375. <div id="bps-tabs-4" class="bps-tab-page">

    1376. 

  1376. <h2><?php _e('BulletProof Security Backup &amp; Restore'); ?></h2>

    1377. 

  1377. 

    1378. 

  1378. <?php if (!current_user_can('manage_options')) { echo 'Permission Denied'; } else { ?>

    1379. 

  1379. <table width="100%" border="0" cellspacing="0" cellpadding="0" class="bps-help_faq_table">

    1380. 

  1380.   <tr>

    1381. 

  1381.     <td class="bps-table_title">&nbsp;</td>

    1382. 

  1382.   </tr>

    1383. 

  1383.   <tr>

    1384. 

  1384.     <td class="bps-table_cell_help">

    1385. 

  1385. <h3><?php _e('Backup Your Currently Active .htaccess Files'); ?></h3>

    1386. 

  1386. <h3><?php _e('<font color="red"><strong>CAUTION: </strong></font>'); ?><a href="#" onmouseover="Tip('Back up your existing .htaccess files first before activating any BulletProof Security Modes in case of a problem when you first install and activate any BulletProof Security Modes. Once you have backed up your original existing .htaccess files you will see the status listed in the <strong>Current Backed Up .htaccess Files Status</strong> window below. <br><br><strong>Backup files are stored in this folder /wp-content/bps-backup.</strong><br><br>In cases where you install a plugin that writes to your htaccess files you will want to perform another backup of your htaccess files. Each time you perform a backup you are overwriting older backed up htaccess files. Backed up files are stored in the /wp-content/bps-folder.<br><br>You could also use the BPS File Downloader to download any existing .htaccess files, customized .htaccess files or other BPS files that you have personally customized or modified just for an additional local backup.<br><br><strong>The BPS Master .htaccess files are stored in your /plugins/bulletproof-security/admin/htaccess folder and can also be backed up to the /wp-content/bps-backup/master-backups folder.</strong><br>Backed up files are stored online so they will be available to you after upgrading to a newer version of BPS if you run into a problem. There is no Restore feature for the BPS Master files because you should be using the latest versions of the BPS master .htaccess files after you upgrade BPS. You can manually download the files from this folder /wp-content/bps-backup/master-backups using FTP or your web host file downloader.<br><br>When you upgrade BPS your current root and wp-admin htaccess files are not affected. BPS master htaccess files are replaced when you upgrade BPS so if you have made changes to your BPS master files that you want to keep make sure they are backed up first before upgrading. You can also download copies of the BPS master files to your computer using the BPS File Downloader if you want. When you backup your BPS files it is an online backup so the files will be available to you to restore from if you run into any problems at any point. You should always be using the newest BPS master htaccess files for the latest security protection updates and plugin conflict fixes. Before activating new BPS master files you can use the BPS File Editor to copy and paste any existing htaccess code that you want to keep from your current active htaccess files to the new BPS master htaccess files and save your changes before activating the new BPS htaccess files. Or you can copy any new htaccess code from the new BPS master files to your existing currently active htaccess files. If you do this be sure to edit the BPS  version number in your currently active htaccess files or you will get error messages.<br><br><strong>If something goes wrong in the .htaccess file editing process or at any point you can restore your good .htaccess files with one click as long as you already backed them up.</strong><br><br><strong>BPS Pro Video Tutorial links can be found in the Help & FAQ pages.</strong>', WIDTH, 550, PADDING, 8, ABOVE, true, FADEIN, 400, FADEOUT, 300)" onmouseout="UnTip()"><strong>Read Me</strong></a></h3>

    1387. 

  1387. 

    1388. 

  1388. <form name="BulletProof-Backup" action="admin.php?page=bulletproof-security/admin/options.php#bps-tabs-4" method="post">

    1389. 

  1389. <?php wp_nonce_field('bulletproof_security_backup_active_htaccess_files'); ?>

    1390. 

  1390. <table class="form-table">

    1391. 

  1391.    <tr>

    1392. 

  1392. 	<th><label><input name="selection9" type="radio" value="backup_htaccess" class="tog" <?php echo checked('', $backup_htaccess); ?> />

    1393. 

  1393. <?php _e('Backup .htaccess Files'); ?></label></th>

    1394. 

  1394. 	<td><?php _e('<font color="green"><strong>Backs up your currently active .htaccess files in your root and /wp-admin folders.</strong></font><br><strong>Backup your htaccess files for first time installations of BPS or whenever new modifications have been made to your htaccess files. Read the <font color="red"><strong>CAUTION: </strong></font>Read Me ToolTip.</strong>'); ?></td>

    1395. 

  1395. 	<td>

    1396. 

  1396.     </td>

    1397. 

  1397.    </tr>

    1398. 

  1398. </table>

    1399. 

  1399. <p class="submit">

    1400. 

  1400. <input type="submit" name="submit9" class="button" value="<?php esc_attr_e('Backup Files') ?>" />

    1401. 

  1401. </p></form>

    1402. 

  1402. 

    1403. 

  1403. <h3><?php _e('Restore Your .htaccess Files From Backup'); ?><a href="#" onmouseover="Tip('Restores your backed up .htaccess files that you backed up. Your backed up .htaccess files were renamed to root.htaccess and wpadmin.htaccess and copied to the /wp-content/bps-backup folder. Restoring your backed up .htaccess files will rename them back to .htaccess and copy them back to your root and /wp-admin folders respectively.<br><br><strong>If you did not have any original .htaccess files to begin with and / or you did not back up any files then you will not have any backed up .htaccess files.</strong><br><br><strong>BPS Pro Video Tutorial links can be found in the Help & FAQ pages.</strong>', WIDTH, 550, PADDING, 8, ABOVE, true, FADEIN, 400, FADEOUT, 300)" onmouseout="UnTip()"><strong>Read Me</strong></a></h3>

    1404. 

  1404. 

    1405. 

  1405. <form name="BulletProof-Restore" action="admin.php?page=bulletproof-security/admin/options.php#bps-tabs-4" method="post">

    1406. 

  1406. <?php wp_nonce_field('bulletproof_security_restore_active_htaccess_files'); ?>

    1407. 

  1407. <table class="form-table">

    1408. 

  1408.    <tr>

    1409. 

  1409. 	<th><label><input name="selection10" type="radio" value="restore_htaccess" class="tog" <?php checked('', $restore_htaccess); ?> />

    1410. 

  1410. <?php _e('Restore .htaccess Files'); ?></label></th>

    1411. 

  1411. 	<td><?php _e('<font color="green"><strong>Restores your backed up .htaccess files to your root and /wp-admin folders.</strong></font><br><strong>Restore your backed up .htaccess files if you have any problems or for use between BPS ugrades.</strong>'); ?></td>

    1412. 

  1412. 	<td>

    1413. 

  1413.     </td>

    1414. 

  1414.    </tr>

    1415. 

  1415. </table>

    1416. 

  1416. <p class="submit">

    1417. 

  1417. <input type="submit" name="submit10" class="button" value="<?php esc_attr_e('Restore Files') ?>" />

    1418. 

  1418. </p></form>

    1419. 

  1419. 

    1420. 

  1420. <h3><?php _e('Backup Your BPS Master .htaccess Files'); ?><a href="#" onmouseover="Tip('The BPS Master .htaccess files are stored in your /plugins/bulletproof-security/admin/htaccess folder and can also be backed up using this Master Backup feature. The backed up BPS Master .htaccess files are copied to this folder /wp-content/bps-backup/master-backups folder. This way they will be available to you online after upgrading to a newer version of BPS. There is no Restore feature for the BPS Master files because you should be using the latest versions of the BPS master .htaccess files after you upgrade BPS. You can manually download the files from this folder /wp-content/bps-backup/master-backups using FTP or your web host file downloader.<br><br><strong>BPS Pro Video Tutorial links can be found in the Help & FAQ pages.</strong>', WIDTH, 400, PADDING, 8, ABOVE, true, FADEIN, 400, FADEOUT, 300)" onmouseout="UnTip()"><strong>Read Me</strong></a></h3>

    1421. 

  1421. 

    1422. 

  1422. <form name="BPS-Master-Htaccess-Backup" action="admin.php?page=bulletproof-security/admin/options.php#bps-tabs-4" method="post">

    1423. 

  1423. <?php wp_nonce_field('bulletproof_security_backup_master_htaccess_files'); ?>

    1424. 

  1424. <table class="form-table">

    1425. 

  1425.    <tr>

    1426. 

  1426. 	<th><label><input name="selection11" type="radio" value="backup_master_htaccess_files" class="tog" <?php checked('', $backup_master_htaccess_files); ?> />

    1427. 

  1427. <?php _e('Backup BPS Master .htaccess Files'); ?></label></th>

    1428. 

  1428. 	<td><?php _e('<font color="green"><strong>Backs up your BPS Master .htaccess files to the /wp-content/bps-backup/master-backups folder.</strong></font><br><strong>There is no Restore feature for the BPS Master .htaccess files because you should be using the latest most current BPS Master .htaccess security coding and plugin fixes included in the most current version of the BPS master .htacess files.</strong>'); ?></td>

    1429. 

  1429. 	<td>

    1430. 

  1430.     </td>

    1431. 

  1431.    </tr>

    1432. 

  1432. </table>

    1433. 

  1433. <p class="submit">

    1434. 

  1434. <input type="submit" name="submit11" class="button" value="<?php esc_attr_e('Backup Master Files') ?>" />

    1435. 

  1435. </p></form>

    1436. 

  1436. </td>

    1437. 

  1437.   </tr>

    1438. 

  1438.   <tr>

    1439. 

  1439.     <td class="bps-table_cell_bottom">&nbsp;</td>

    1440. 

  1440.   </tr>

    1441. 

  1441. </table>

    1442. 

  1442. <?php } ?>

    1443. 

  1443. 

    1444. 

  1444. <table width="100%" border="0" cellspacing="0" cellpadding="0" class="bps-backup_restore_table">

    1445. 

  1445.   <tr>

    1446. 

  1446.     <td class="bps-table_title"><?php _e('Current Backed Up .htaccess Files Status'); ?> <a href="#" onmouseover="Tip('General file checks to check which files have been backed up or not.<br><br><strong>BPS Pro Video Tutorial links can be found in the Help & FAQ pages.</strong>', WIDTH, 400, PADDING, 8, ABOVE, true, FADEIN, 400, FADEOUT, 300)" onmouseout="UnTip()">Read Me</a></td>

    1447. 

  1447.   </tr>

    1448. 

  1448.   <tr>

    1449. 

  1449.     <td class="bps-table_cell">&nbsp;</td>

    1450. 

  1450.   </tr>

    1451. 

  1451.   <tr>

    1452. 

  1452.     <td class="bps-table_cell"><strong><?php general_bps_file_checks_backup_restore(); ?></strong></td>

    1453. 

  1453.   </tr>

    1454. 

  1454.   <tr>

    1455. 

  1455.     <td class="bps-table_cell">&nbsp;</td>

    1456. 

  1456.   </tr>

    1457. 

  1457.   <tr>

    1458. 

  1458.     <td class="bps-table_cell"><?php echo backup_restore_checks(); ?></td>

    1459. 

  1459.   </tr>

    1460. 

  1460.   <tr>

    1461. 

  1461.     <td class="bps-table_cell">&nbsp;</td>

    1462. 

  1462.   </tr>

    1463. 

  1463.   <tr>

    1464. 

  1464.     <td class="bps-table_cell"><?php echo bps_master_file_backups(); ?></td>

    1465. 

  1465.   </tr>

    1466. 

  1466.   <tr>

    1467. 

  1467.     <td class="bps-table_cell">&nbsp;</td>

    1468. 

  1468.   </tr>

    1469. 

  1469.   <tr>

    1470. 

  1470.     <td class="bps-table_cell_bottom">&nbsp;</td>

    1471. 

  1471.   </tr>

    1472. 

  1472. </table>

    1473. 

  1473. <br />

    1474. 

  1474. </div>

    1475. 

  1475.         

    1476. 

  1476. <div id="bps-tabs-5" class="bps-tab-page">

    1477. 

  1477. <table width="100%" border="0">

    1478. 

  1478.   <tr>

    1479. 

  1479.     <td width="33%"><h2><?php _e('BulletProof Security File Editing'); ?></h2></td>

    1480. 

  1480.     <td width="21%"><h3><a href="#" onmouseover="Tip('<strong>Lock / Unlock .htaccess Files</strong><br>If your Server API is using CGI then you will see Lock and Unlock buttons to lock your Root .htaccess file with 404 Permissions and unlock your root .htaccess file with 644 Permissions. If your Server API is using CLI - DSO / Apache / mod_php then you will not see lock and unlock buttons. 644 Permissions are required to write to / edit the root .htaccess file. Once you are done editing your root .htaccess file use the lock button to lock it with 404 Permissions. 644 Permissions for DSO are considered secure for DSO because of the different way that file security is handled with DSO.<br><br>A help link is provided in the Help & FAQ page <strong>File Editing Within The Dashboard Help Info.</strong> File Editing is also demonstrated and explained in the B-Core htaccess Video Tutorial.<strong>BPS Pro Video Tutorial links can be found in the Help & FAQ pages.</strong>', WIDTH, 600, PADDING, 8, ABOVE, true, FADEIN, 400, FADEOUT, 300)" onmouseout="UnTip()">Read Me</a></h3></td>

    1481. 

  1481.     <td width="19%" align="right">

    1482. 

  1482.     <h3 style="margin-right:0px;"><a href="#" onmouseover="Tip('<strong>File Uploading</strong><br>The file upload location is preset to the /wp-content/plugins/bulletproof-security/admin/htaccess folder and the intended use is just for uploading the BPS Master files: secure.htaccess, default.htaccess, wpadmin-secure.htaccess, maintenance.htaccess, bp-maintenance.php, bps-maintenance-values.php, http_error_log.txt (BPS Pro only) or other files from your computer to the BPS Master htaccess folder.<br><br><strong>File Downloading</strong><br><strong>File Downloading is automatically not allowed. Folder permissions must be set to a minimum of 705 for the /htaccess and /bps-backup folders in order to open and download files.</strong><br>Click the Enable Master File Downloading button to enable file downloading. This will write your current IP address to the deny all htaccess file and allow ONLY you access to the /plugins/bulletproof-security/admin/htaccess folder to open and download files. To open and download your Backed up files click the Enable Backed Up File Downloading button. After clicking the Enable File Downloading buttons you can click the download buttons below to open or download files. If your IP address changes which it will do frequently then click the Enable File Downloading buttons again to write a new IP address to the deny all htaccess files.<br><br><strong>BPS Pro Video Tutorial links can be found in the Help & FAQ pages.</strong>', WIDTH, 600, PADDING, 8, ABOVE, true, FADEIN, 400, FADEOUT, 300)" onmouseout="UnTip()">Read Me</a></h3>

    1483. 

  1483.     </td>

    1484. 

  1484.     <td width="27%" align="center"><h2><?php _e('Uploads - Downloads'); ?></h2></td>

    1485. 

  1485.   </tr>

    1486. 

  1486. </table>

    1487. 

  1487. 

    1488. 

  1488. <?php if (!current_user_can('manage_options')) { echo 'Permission Denied'; } else { ?>

    1489. 

  1489. <table width="100%" border="0">

    1490. 

  1490.   <tr>

    1491. 

  1491.     <td colspan="2">

    1492. 

  1492.     <div id="bps_file_editor" class="bps_file_editor_update">

    1493. 

  1493. <?php

    1494. 

  1494. echo secure_htaccess_file_check();

    1495. 

  1495. echo default_htaccess_file_check();

    1496. 

  1496. echo maintenance_htaccess_file_check();

    1497. 

  1497. echo wpadmin_htaccess_file_check();

    1498. 

  1498. 

    1499. 

  1499. /*

    1500. 

  1500. $options = get_option('bulletproof_security_options_flock');

    1501. 

  1501. if ($options['bps_lock_root_htaccess'] == 'yes') { 

    1502. 

  1502. _e('The ');

    1503. 

  1503. }

    1504. 

  1504.  */   

    1505. 

  1505. // Perform File Open and Write test first by appending a literal blank space

    1506. 

  1506. // or nothing at all to end of the htaccess files.

    1507. 

  1507. // If append write test is successful file is writable on submit

    1508. 

  1508. if (current_user_can('manage_options')) {

    1509. 

  1509. $secure_htaccess_file = ABSPATH . 'wp-content/plugins/bulletproof-security/admin/htaccess/secure.htaccess';

    1510. 

  1510. $write_test = "";

    1511. 

  1511. 	if (is_writable($secure_htaccess_file)) {

    1512. 

  1512.     if (!$handle = fopen($secure_htaccess_file, 'a+b')) {

    1513. 

  1513. 	_e('<font color="red"><strong>Cannot open file' . "$secure_htaccess_file" . '</strong></font><br>');

    1514. 

  1514.     exit;

    1515. 

  1515.     }

    1516. 

  1516.     if (fwrite($handle, $write_test) === FALSE) {

    1517. 

  1517. 	_e('<font color="red"><strong>Cannot write to file' . "$secure_htaccess_file" . '</strong></font><br>');

    1518. 

  1518.     exit;

    1519. 

  1519.     }

    1520. 

  1520. 	_e('<strong>File Open and Write test successful! The secure.htaccess file is writable.</strong><br>');

    1521. 

  1521. 	} else {

    1522. 

  1522. 	if (file_exists($secure_htaccess_file)) {

    1523. 

  1523. 	_e('<font color="blue"><strong>Cannot write to file: ' . "$secure_htaccess_file" . '</strong></font><br>');

    1524. 

  1524. 	}

    1525. 

  1525. 	}

    1526. 

  1526. 	}

    1527. 

  1527. 	

    1528. 

  1528. 	if (isset($_POST['submit1']) && current_user_can('manage_options')) {

    1529. 

  1529. 	check_admin_referer( 'bulletproof_security_save_settings_1' );

    1530. 

  1530. 	$newcontent1 = stripslashes($_POST['newcontent1']);

    1531. 

  1531. 	if ( is_writable($secure_htaccess_file) ) {

    1532. 

  1532. 		$handle = fopen($secure_htaccess_file, 'w+b');

    1533. 

  1533. 		fwrite($handle, $newcontent1);

    1534. 

  1534. 	_e('<font color="green"><strong>Success! The secure.htaccess file has been updated.</strong></font><br>');

    1535. 

  1535.     fclose($handle);

    1536. 

  1536. 	}

    1537. 

  1537. }

    1538. 

  1538. 

    1539. 

  1539. if (current_user_can('manage_options')) {

    1540. 

  1540. $default_htaccess_file = ABSPATH . 'wp-content/plugins/bulletproof-security/admin/htaccess/default.htaccess';

    1541. 

  1541. $write_test = "";

    1542. 

  1542. 	if (is_writable($default_htaccess_file)) {

    1543. 

  1543.     if (!$handle = fopen($default_htaccess_file, 'a+b')) {

    1544. 

  1544. 	_e('<font color="red"><strong>Cannot open file' . "$default_htaccess_file" . '</strong></font><br>');

    1545. 

  1545.     exit;

    1546. 

  1546.     }

    1547. 

  1547.     if (fwrite($handle, $write_test) === FALSE) {

    1548. 

  1548. 	_e('<font color="red"><strong>Cannot write to file' . "$default_htaccess_file" . '</strong></font><br>');

    1549. 

  1549.     exit;

    1550. 

  1550.     }

    1551. 

  1551. 	_e('<strong>File Open and Write test successful! The default.htaccess file is writable.</strong><br>');

    1552. 

  1552. 	} else {

    1553. 

  1553. 	if (file_exists($default_htaccess_file)) {

    1554. 

  1554. 	_e('<font color="blue"><strong>Cannot write to file: ' . "$default_htaccess_file" . '</strong></font><br>');

    1555. 

  1555. 	}

    1556. 

  1556. 	}

    1557. 

  1557. 	}

    1558. 

  1558. 	

    1559. 

  1559. 	if (isset($_POST['submit2']) && current_user_can('manage_options')) {

    1560. 

  1560. 	check_admin_referer( 'bulletproof_security_save_settings_2' );

    1561. 

  1561. 	$newcontent2 = stripslashes($_POST['newcontent2']);

    1562. 

  1562. 	if ( is_writable($default_htaccess_file) ) {

    1563. 

  1563. 		$handle = fopen($default_htaccess_file, 'w+b');

    1564. 

  1564. 		fwrite($handle, $newcontent2);

    1565. 

  1565. 	_e('<font color="green"><strong>Success! The default.htaccess file has been updated.</strong></font><br>');	

    1566. 

  1566.     fclose($handle);

    1567. 

  1567. 	}

    1568. 

  1568. }

    1569. 

  1569. 

    1570. 

  1570. if (current_user_can('manage_options')) {

    1571. 

  1571. $maintenance_htaccess_file = ABSPATH . 'wp-content/plugins/bulletproof-security/admin/htaccess/maintenance.htaccess';

    1572. 

  1572. $write_test = "";

    1573. 

  1573. 	if (is_writable($maintenance_htaccess_file)) {

    1574. 

  1574.     if (!$handle = fopen($maintenance_htaccess_file, 'a+b')) {

    1575. 

  1575. 	_e('<font color="red"><strong>Cannot open file' . "$maintenance_htaccess_file" . '</strong></font><br>');

    1576. 

  1576.     exit;

    1577. 

  1577.     }

    1578. 

  1578.     if (fwrite($handle, $write_test) === FALSE) {

    1579. 

  1579. 	_e('<font color="red"><strong>Cannot write to file' . "$maintenance_htaccess_file" . '</strong></font><br>');

    1580. 

  1580.     exit;

    1581. 

  1581.     }

    1582. 

  1582. 	_e('<strong>File Open and Write test successful! The maintenance.htaccess file is writable.</strong><br>');

    1583. 

  1583. 	} else {

    1584. 

  1584. 	if (file_exists($maintenance_htaccess_file)) {

    1585. 

  1585. 	_e('<font color="blue"><strong>Cannot write to file: ' . "$maintenance_htaccess_file" . '</strong></font><br>');

    1586. 

  1586. 	}

    1587. 

  1587. 	}

    1588. 

  1588. 	}

    1589. 

  1589. 	

    1590. 

  1590. 	if (isset($_POST['submit3']) && current_user_can('manage_options')) {

    1591. 

  1591. 	check_admin_referer( 'bulletproof_security_save_settings_3' );

    1592. 

  1592. 	$newcontent3 = stripslashes($_POST['newcontent3']);

    1593. 

  1593. 	if ( is_writable($maintenance_htaccess_file) ) {

    1594. 

  1594. 		$handle = fopen($maintenance_htaccess_file, 'w+b');

    1595. 

  1595. 		fwrite($handle, $newcontent3);

    1596. 

  1596. 	_e('<font color="green"><strong>Success! The maintenance.htaccess file has been updated.</strong></font><br>');	

    1597. 

  1597.     fclose($handle);

    1598. 

  1598. 	}

    1599. 

  1599. }

    1600. 

  1600. 

    1601. 

  1601. if (current_user_can('manage_options')) {

    1602. 

  1602. $wpadmin_htaccess_file = ABSPATH . 'wp-content/plugins/bulletproof-security/admin/htaccess/wpadmin-secure.htaccess';

    1603. 

  1603. $write_test = "";

    1604. 

  1604. 	if (is_writable($wpadmin_htaccess_file)) {

    1605. 

  1605.     if (!$handle = fopen($wpadmin_htaccess_file, 'a+b')) {

    1606. 

  1606. 	_e('<font color="red"><strong>Cannot open file' . "$wpadmin_htaccess_file" . '</strong></font><br>');

    1607. 

  1607.     exit;

    1608. 

  1608.     }

    1609. 

  1609.     if (fwrite($handle, $write_test) === FALSE) {

    1610. 

  1610. 	_e('<font color="red"><strong>Cannot write to file' . "$wpadmin_htaccess_file" . '</strong></font><br>');

    1611. 

  1611.     exit;

    1612. 

  1612.     }

    1613. 

  1613. 	_e('<strong>File Open and Write test successful! The wpadmin-secure.htaccess file is writable.</strong><br>');

    1614. 

  1614. 	} else {

    1615. 

  1615. 	if (file_exists($wpadmin_htaccess_file)) {

    1616. 

  1616. 	_e('<font color="blue"><strong>Cannot write to file: ' . "$wpadmin_htaccess_file" . '</strong></font><br>');

    1617. 

  1617. 	}

    1618. 

  1618. 	}

    1619. 

  1619. 	}

    1620. 

  1620. 	

    1621. 

  1621. 	if (isset($_POST['submit4']) && current_user_can('manage_options')) {

    1622. 

  1622. 	check_admin_referer( 'bulletproof_security_save_settings_4' );

    1623. 

  1623. 	$newcontent4 = stripslashes($_POST['newcontent4']);

    1624. 

  1624. 	if ( is_writable($wpadmin_htaccess_file) ) {

    1625. 

  1625. 		$handle = fopen($wpadmin_htaccess_file, 'w+b');

    1626. 

  1626. 		fwrite($handle, $newcontent4);

    1627. 

  1627. 	_e('<font color="green"><strong>Success! The wpadmin-secure.htaccess file has been updated.</strong></font><br>');	

    1628. 

  1628.     fclose($handle);

    1629. 

  1629. 	}

    1630. 

  1630. }

    1631. 

  1631. 

    1632. 

  1632. if (current_user_can('manage_options')) {

    1633. 

  1633. $root_htaccess_file = ABSPATH . '.htaccess';

    1634. 

  1634. $write_test = "";

    1635. 

  1635. 	if (is_writable($root_htaccess_file)) {

    1636. 

  1636.     if (!$handle = fopen($root_htaccess_file, 'a+b')) {

    1637. 

  1637. 	_e('<font color="black"><strong>Cannot open file' . "$root_htaccess_file" . '</strong></font><br>');

    1638. 

  1638.     exit;

    1639. 

  1639.     }

    1640. 

  1640.     if (fwrite($handle, $write_test) === FALSE) {

    1641. 

  1641. 	_e('<font color="black"><strong>Cannot write to file' . "$root_htaccess_file" . '</strong></font><br>');

    1642. 

  1642.     exit;

    1643. 

  1643.     }

    1644. 

  1644. 	_e('<strong>File Open and Write test successful! Your currently active root .htaccess file is writable.</strong><br>');

    1645. 

  1645. 	} else {

    1646. 

  1646. 	if (file_exists($root_htaccess_file)) {

    1647. 

  1647. 	_e('<font color="blue"><strong>Your root .htaccess file is Locked with Read Only Permissions.<br>Use the Lock and Unlock buttons below to Lock or Unlock your root .htaccess file for editing.</strong></font><br>');

    1648. 

  1648. 	} else {

    1649. 

  1649. 	_e('<font color="black"><strong>Cannot write to file: ' . "$root_htaccess_file" . '</strong></font><br>');

    1650. 

  1650. 	}

    1651. 

  1651. 	}

    1652. 

  1652. 	}

    1653. 

  1653. 	

    1654. 

  1654. 	if (isset($_POST['submit5']) && current_user_can('manage_options')) {

    1655. 

  1655. 	check_admin_referer( 'bulletproof_security_save_settings_5' );

    1656. 

  1656. 	$newcontent5 = stripslashes($_POST['newcontent5']);

    1657. 

  1657. 	if ( !is_writable($root_htaccess_file) ) {

    1658. 

  1658. 	_e('<font color="red"><strong>Error: Unable to write to the Root .htaccess file. If your Root .htaccess file is locked you must unlock first.</strong></font><br>');

    1659. 

  1659. 	}	

    1660. 

  1660. 	if ( is_writable($root_htaccess_file) ) {

    1661. 

  1661. 		$handle = fopen($root_htaccess_file, 'w+b');

    1662. 

  1662. 		fwrite($handle, $newcontent5);

    1663. 

  1663. 	_e('<font color="green"><strong>Success! Your currently active root .htaccess file has been updated.</strong></font><br>');	

    1664. 

  1664.     fclose($handle);

    1665. 

  1665. 	}

    1666. 

  1666. }

    1667. 

  1667. 

    1668. 

  1668. if (current_user_can('manage_options')) {

    1669. 

  1669. $current_wpadmin_htaccess_file = ABSPATH . 'wp-admin/.htaccess';

    1670. 

  1670. $write_test = "";

    1671. 

  1671. 	if (is_writable($current_wpadmin_htaccess_file)) {

    1672. 

  1672.     if (!$handle = fopen($current_wpadmin_htaccess_file, 'a+b')) {

    1673. 

  1673. 	_e('<font color="red"><strong>Cannot open file' . "$current_wpadmin_htaccess_file" . '</strong></font><br>');

    1674. 

  1674.     exit;

    1675. 

  1675.     }

    1676. 

  1676.     if (fwrite($handle, $write_test) === FALSE) {

    1677. 

  1677. 	_e('<font color="red"><strong>Cannot write to file' . "$current_wpadmin_htaccess_file" . '</strong></font><br>');

    1678. 

  1678.     exit;

    1679. 

  1679.     }

    1680. 

  1680. 	_e('<strong>File Open and Write test successful! Your currently active wp-admin .htaccess file is writable.</strong><br>');

    1681. 

  1681. 	} else {

    1682. 

  1682. 	if (file_exists($current_wpadmin_htaccess_file)) {

    1683. 

  1683. 	_e('<font color="blue"><strong>Cannot write to file: ' . "$current_wpadmin_htaccess_file" . '</strong></font><br>');

    1684. 

  1684. 	}

    1685. 

  1685. 	}

    1686. 

  1686. 	}

    1687. 

  1687. 	

    1688. 

  1688. 	if (isset($_POST['submit6']) && current_user_can('manage_options')) {

    1689. 

  1689. 	check_admin_referer( 'bulletproof_security_save_settings_6' );

    1690. 

  1690. 	$newcontent6 = stripslashes($_POST['newcontent6']);

    1691. 

  1691. 	if ( is_writable($current_wpadmin_htaccess_file) ) {

    1692. 

  1692. 		$handle = fopen($current_wpadmin_htaccess_file, 'w+b');

    1693. 

  1693. 		fwrite($handle, $newcontent6);

    1694. 

  1694. 	_e('<font color="green"><strong>Success! Your currently active wp-admin .htaccess file has been updated.</strong></font><br>');	

    1695. 

  1695.     fclose($handle);

    1696. 

  1696. 	}

    1697. 

  1697. }

    1698. 

  1698. 

    1699. 

  1699. // BPS Pro Only - Lock and Unlock Root .htaccess file 

    1700. 

  1700. if (isset($_POST['submit-ProFlockLock']) && current_user_can('manage_options')) {

    1701. 

  1701. 	check_admin_referer( 'bulletproof_security_flock_lock' );

    1702. 

  1702. 	$bpsRootHtaccessOL = ABSPATH . '.htaccess';

    1703. 

  1703. 	

    1704. 

  1704. 	if (file_exists($bpsRootHtaccessOL)) {

    1705. 

  1705. 	chmod($bpsRootHtaccessOL, 0404);

    1706. 

  1706. 	_e('<font color="blue"><strong><br>Your Root .htaccess file has been Locked.</strong></font><br>');

    1707. 

  1707. 	} else {

    1708. 

  1708. 	_e('<font color="red"><strong><br>Unable to Lock your Root .htaccess file.</strong></font><br>');

    1709. 

  1709. 	}

    1710. 

  1710. }

    1711. 

  1711. 	

    1712. 

  1712. if (isset($_POST['submit-ProFlockUnLock']) && current_user_can('manage_options')) {

    1713. 

  1713. 	check_admin_referer( 'bulletproof_security_flock_unlock' );

    1714. 

  1714. 	$bpsRootHtaccessOL = ABSPATH . '.htaccess';

    1715. 

  1715. 		

    1716. 

  1716. 	if (file_exists($bpsRootHtaccessOL)) {

    1717. 

  1717. 	chmod($bpsRootHtaccessOL, 0644);

    1718. 

  1718. 	_e('<font color="blue"><strong><br>Your Root .htaccess file has been Unlocked.</strong></font><br>');

    1719. 

  1719. 	} else {

    1720. 

  1720. 	_e('<font color="red"><strong><br>Unable to Unlock your Root .htaccess file.</strong></font><br>');

    1721. 

  1721. 	}

    1722. 

  1722. }

    1723. 

  1723. ?>

    1724. 

  1724. 

    1725. 

  1725. </div>

    1726. 

  1726. 

    1727. 

  1727. </td>

    1728. 

  1728.     <td width="33%" align="center" valign="top">

    1729. 

  1729. 	<?php _e("<div class=\"bps-file_upload_title\"><strong>File Uploads<br></strong></div>"); ?>

    1730. 

  1730. <form name="BPS-upload" action="admin.php?page=bulletproof-security/admin/options.php#bps-tabs-5" method="post" enctype="multipart/form-data"><?php wp_nonce_field('bulletproof_security_upload'); ?>

    1731. 

  1731. <p class="submit">

    1732. 

  1732. <input id="bps_file_upload" name="bps_file_upload" type="file" />

    1733. 

  1733. </p>

    1734. 

  1734. <p class="submit" style="margin:-5px 0px 0px -12px;">

    1735. 

  1735. <input type="submit" name="submit-bps-upload" class="button" value="<?php esc_attr_e('Upload File') ?>" />

    1736. 

  1736. </p>

    1737. 

  1737. </form></td>

    1738. 

  1738.   </tr>

    1739. 

  1739.   <tr>

    1740. 

  1740.     <td width="22%">

    1741. 

  1741. <?php // Detect the SAPI - display form submit button only if sapi is cgi

    1742. 

  1742. 	$sapi_type = php_sapi_name();

    1743. 

  1743. 	if (substr($sapi_type, 0, 3) == 'cgi') { ?>    

    1744. 

  1744.     

    1745. 

  1745.     <form name="bpsFlockLockForm" action="admin.php?page=bulletproof-security/admin/options.php#bps-tabs-5" method="post">

    1746. 

  1746. <?php wp_nonce_field('bulletproof_security_flock_lock'); ?>

    1747. 

  1747. <p class="submit">

    1748. 

  1748. 	<input type="submit" name="submit-ProFlockLock" value="<?php _e('Lock .htaccess File'); ?>" class="button" onClick="return confirm('<?php _e('Click OK to Lock your Root .htaccess file or click Cancel.\n\nNote: The File Open and Write Test window will still display the last status of the file as Unlocked until the next time you refresh your browser.'); ?>')" /></p>

    1749. 

  1749. </form>

    1750. 

  1750. <?php } else { echo ''; } ?>

    1751. 

  1751. </td>

    1752. 

  1752.     <td width="45%">

    1753. 

  1753. <?php // Detect the SAPI - display form submit button only if sapi is cgi

    1754. 

  1754. 	$sapi_type = php_sapi_name();

    1755. 

  1755. 	if (substr($sapi_type, 0, 3) == 'cgi') { ?>        

    1756. 

  1756.     

    1757. 

  1757.     <form name="bpsFlockUnLockForm" action="admin.php?page=bulletproof-security/admin/options.php#bps-tabs-5" method="post">

    1758. 

  1758. <?php wp_nonce_field('bulletproof_security_flock_unlock'); ?>

    1759. 

  1759. <p class="submit">

    1760. 

  1760. 	<input type="submit" name="submit-ProFlockUnLock" value="<?php _e('Unlock .htaccess File'); ?>" class="button" onClick="return confirm('<?php _e('Click OK to Unlock your Root .htaccess file or click Cancel.\n\nNote: The File Open and Write Test window will still display the last status of the file as Locked until the next time you refresh your browser.'); ?>')" /></p>

    1761. 

  1761. </form>

    1762. 

  1762. <?php } else { echo ''; } ?>

    1763. 

  1763. </td>

    1764. 

  1764.     <td>&nbsp;</td>

    1765. 

  1765.   </tr>

    1766. 

  1766.   <tr>

    1767. 

  1767.     <td colspan="2">

    1768. 

  1768.     

    1769. 

  1769.     <!-- jQuery UI File Editor Tab Menu -->

    1770. 

  1770. <div id="bps-edittabs" class="bps-edittabs-class">

    1771. 

  1771. 		<ul>

    1772. 

  1772. 			<li><a href="#bps-edittabs-1">secure.htaccess</a></li>

    1773. 

  1773. 			<li><a href="#bps-edittabs-2">default.htaccess</a></li>

    1774. 

  1774. 			<li><a href="#bps-edittabs-3">maintenance.htaccess</a></li>

    1775. 

  1775. 			<li><a href="#bps-edittabs-4">wpadmin-secure.htaccess</a></li>

    1776. 

  1776.             <li><a href="#bps-edittabs-5">Your Current Root htaccess File</a></li>

    1777. 

  1777.             <li><a href="#bps-edittabs-6">Your Current wp-admin htaccess File</a></li>

    1778. 

  1778.         </ul>

    1779. 

  1779.        

    1780. 

  1780. <?php 

    1781. 

  1781. $scrollto1 = isset($_REQUEST['scrollto1']) ? (int) $_REQUEST['scrollto1'] : 0; 

    1782. 

  1782. $scrollto2 = isset($_REQUEST['scrollto2']) ? (int) $_REQUEST['scrollto2'] : 0;

    1783. 

  1783. $scrollto3 = isset($_REQUEST['scrollto3']) ? (int) $_REQUEST['scrollto3'] : 0;

    1784. 

  1784. $scrollto4 = isset($_REQUEST['scrollto4']) ? (int) $_REQUEST['scrollto4'] : 0;

    1785. 

  1785. $scrollto5 = isset($_REQUEST['scrollto5']) ? (int) $_REQUEST['scrollto5'] : 0;

    1786. 

  1786. $scrollto6 = isset($_REQUEST['scrollto6']) ? (int) $_REQUEST['scrollto6'] : 0;

    1787. 

  1787. ?>

    1788. 

  1788. 

    1789. 

  1789. <div id="bps-edittabs-1" class="bps-edittabs-page-class">

    1790. 

  1790. <form name="template1" id="template1" action="admin.php?page=bulletproof-security/admin/options.php#bps-tabs-5" method="post">

    1791. 

  1791. <?php wp_nonce_field('bulletproof_security_save_settings_1'); ?>

    1792. 

  1792.     <div>

    1793. 

  1793.     <textarea cols="115" rows="27" name="newcontent1" id="newcontent1" tabindex="1"><?php echo get_secure_htaccess(); ?></textarea>

    1794. 

  1794. 	<input type="hidden" name="action" value="update" />

    1795. 

  1795.     <input type="hidden" name="filename" value="<?php echo esc_attr($secure_htaccess_file) ?>" />

    1796. 

  1796. 	<input type="hidden" name="scrollto1" id="scrollto1" value="<?php echo $scrollto1; ?>" />

    1797. 

  1797.     <p class="submit">

    1798. 

  1798. 	<input type="submit" name="submit1" class="button" value="<?php esc_attr_e('Update File') ?>" /></p>

    1799. 

  1799. </div>

    1800. 

  1800. </form>

    1801. 

  1801. <script type="text/javascript">

    1802. 

  1802. /* <![CDATA[ */

    1803. 

  1803. jQuery(document).ready(function($){

    1804. 

  1804. 	$('#template1').submit(function(){ $('#scrollto1').val( $('#newcontent1').scrollTop() ); });

    1805. 

  1805. 	$('#newcontent1').scrollTop( $('#scrollto1').val() ); 

    1806. 

  1806. });

    1807. 

  1807. /* ]]> */

    1808. 

  1808. </script>     

    1809. 

  1809. </div>

    1810. 

  1810. 

    1811. 

  1811. <div id="bps-edittabs-2" class="bps-edittabs-page-class">

    1812. 

  1812. <form name="template2" id="template2" action="admin.php?page=bulletproof-security/admin/options.php#bps-tabs-5" method="post">

    1813. 

  1813. <?php wp_nonce_field('bulletproof_security_save_settings_2'); ?>

    1814. 

  1814. 	<div>

    1815. 

  1815.     <textarea cols="115" rows="27" name="newcontent2" id="newcontent2" tabindex="2"><?php echo get_default_htaccess(); ?></textarea>

    1816. 

  1816. 	<input type="hidden" name="action" value="update" />

    1817. 

  1817.     <input type="hidden" name="filename" value="<?php echo esc_attr($default_htaccess_file) ?>" />

    1818. 

  1818. 	<input type="hidden" name="scrollto2" id="scrollto2" value="<?php echo $scrollto2; ?>" />

    1819. 

  1819.     <p class="submit">

    1820. 

  1820. 	<input type="submit" name="submit2" class="button" value="<?php esc_attr_e('Update File') ?>" /></p>

    1821. 

  1821. </div>

    1822. 

  1822. </form>

    1823. 

  1823. <script type="text/javascript">

    1824. 

  1824. /* <![CDATA[ */

    1825. 

  1825. jQuery(document).ready(function($){

    1826. 

  1826. 	$('#template2').submit(function(){ $('#scrollto2').val( $('#newcontent2').scrollTop() ); });

    1827. 

  1827. 	$('#newcontent2').scrollTop( $('#scrollto2').val() );

    1828. 

  1828. });

    1829. 

  1829. /* ]]> */

    1830. 

  1830. </script>     

    1831. 

  1831. </div>

    1832. 

  1832. 

    1833. 

  1833. <div id="bps-edittabs-3" class="bps-edittabs-page-class">

    1834. 

  1834. <form name="template3" id="template3" action="admin.php?page=bulletproof-security/admin/options.php#bps-tabs-5" method="post">

    1835. 

  1835. <?php wp_nonce_field('bulletproof_security_save_settings_3'); ?>

    1836. 

  1836. 	<div>

    1837. 

  1837.     <textarea cols="115" rows="27" name="newcontent3" id="newcontent3" tabindex="3"><?php echo get_maintenance_htaccess(); ?></textarea>

    1838. 

  1838. 	<input type="hidden" name="action" value="update" />

    1839. 

  1839.     <input type="hidden" name="filename" value="<?php echo esc_attr($maintenance_htaccess_file) ?>" />

    1840. 

  1840. 	<input type="hidden" name="scrollto3" id="scrollto3" value="<?php echo $scrollto3; ?>" />

    1841. 

  1841.     <p class="submit">

    1842. 

  1842. 	<input type="submit" name="submit3" class="button" value="<?php esc_attr_e('Update File') ?>" /></p>

    1843. 

  1843. </div>

    1844. 

  1844. </form>

    1845. 

  1845. <script type="text/javascript">

    1846. 

  1846. /* <![CDATA[ */

    1847. 

  1847. jQuery(document).ready(function($){

    1848. 

  1848. 	$('#template3').submit(function(){ $('#scrollto3').val( $('#newcontent3').scrollTop() ); });

    1849. 

  1849. 	$('#newcontent3').scrollTop( $('#scrollto3').val() );

    1850. 

  1850. });

    1851. 

  1851. /* ]]> */

    1852. 

  1852. </script>     

    1853. 

  1853. </div>

    1854. 

  1854. 

    1855. 

  1855. <div id="bps-edittabs-4" class="bps-edittabs-page-class">

    1856. 

  1856. <form name="template4" id="template4" action="admin.php?page=bulletproof-security/admin/options.php#bps-tabs-5" method="post">

    1857. 

  1857. <?php wp_nonce_field('bulletproof_security_save_settings_4'); ?>

    1858. 

  1858. 	<div>

    1859. 

  1859.     <textarea cols="115" rows="27" name="newcontent4" id="newcontent4" tabindex="4"><?php echo get_wpadmin_htaccess(); ?></textarea>

    1860. 

  1860. 	<input type="hidden" name="action" value="update" />

    1861. 

  1861.     <input type="hidden" name="filename" value="<?php echo esc_attr($wpadmin_htaccess_file) ?>" />

    1862. 

  1862. 	<input type="hidden" name="scrollto4" id="scrollto4" value="<?php echo $scrollto4; ?>" />

    1863. 

  1863.     <p class="submit">

    1864. 

  1864. 	<input type="submit" name="submit4" class="button" value="<?php esc_attr_e('Update File') ?>" /></p>

    1865. 

  1865. </div>

    1866. 

  1866. </form>

    1867. 

  1867. <script type="text/javascript">

    1868. 

  1868. /* <![CDATA[ */

    1869. 

  1869. jQuery(document).ready(function($){

    1870. 

  1870. 	$('#template4').submit(function(){ $('#scrollto4').val( $('#newcontent4').scrollTop() ); });

    1871. 

  1871. 	$('#newcontent4').scrollTop( $('#scrollto4').val() );

    1872. 

  1872. });

    1873. 

  1873. /* ]]> */

    1874. 

  1874. </script>     

    1875. 

  1875. </div>

    1876. 

  1876. 

    1877. 

  1877. <div id="bps-edittabs-5" class="bps-edittabs-page-class">

    1878. 

  1878. <form name="template5" id="template5" action="admin.php?page=bulletproof-security/admin/options.php#bps-tabs-5" method="post">

    1879. 

  1879. <?php wp_nonce_field('bulletproof_security_save_settings_5'); ?>

    1880. 

  1880. 	<div>

    1881. 

  1881.     <textarea cols="115" rows="27" name="newcontent5" id="newcontent5" tabindex="5"><?php echo get_root_htaccess(); ?></textarea>

    1882. 

  1882. 	<input type="hidden" name="action" value="update" />

    1883. 

  1883.     <input type="hidden" name="filename" value="<?php echo esc_attr($root_htaccess_file) ?>" />

    1884. 

  1884. 	<input type="hidden" name="scrollto5" id="scrollto5" value="<?php echo $scrollto5; ?>" />

    1885. 

  1885.     <p class="submit">

    1886. 

  1886. 	<input type="submit" name="submit5" class="button" value="<?php esc_attr_e('Update File') ?>" /></p>

    1887. 

  1887. </div>

    1888. 

  1888. </form>

    1889. 

  1889. <script type="text/javascript">

    1890. 

  1890. /* <![CDATA[ */

    1891. 

  1891. jQuery(document).ready(function($){

    1892. 

  1892. 	$('#template5').submit(function(){ $('#scrollto5').val( $('#newcontent5').scrollTop() ); });

    1893. 

  1893. 	$('#newcontent5').scrollTop( $('#scrollto5').val() );

    1894. 

  1894. });

    1895. 

  1895. /* ]]> */

    1896. 

  1896. </script>     

    1897. 

  1897. </div>

    1898. 

  1898. 

    1899. 

  1899. <div id="bps-edittabs-6" class="bps-edittabs-page-class">

    1900. 

  1900. <form name="template6" id="template6" action="admin.php?page=bulletproof-security/admin/options.php#bps-tabs-5" method="post">

    1901. 

  1901. <?php wp_nonce_field('bulletproof_security_save_settings_6'); ?>

    1902. 

  1902. 	<div>

    1903. 

  1903.     <textarea cols="115" rows="27" name="newcontent6" id="newcontent6" tabindex="6"><?php echo get_current_wpadmin_htaccess_file(); ?></textarea>

    1904. 

  1904. 	<input type="hidden" name="action" value="update" />

    1905. 

  1905.     <input type="hidden" name="filename" value="<?php echo esc_attr($current_wpadmin_htaccess_file) ?>" />

    1906. 

  1906. 	<input type="hidden" name="scrollto6" id="scrollto6" value="<?php echo $scrollto6; ?>" />

    1907. 

  1907.     <p class="submit">

    1908. 

  1908. 	<input type="submit" name="submit6" class="button" value="<?php esc_attr_e('Update File') ?>" /></p>

    1909. 

  1909. </div>

    1910. 

  1910. </form>

    1911. 

  1911. <script type="text/javascript">

    1912. 

  1912. /* <![CDATA[ */

    1913. 

  1913. jQuery(document).ready(function($){

    1914. 

  1914. 	$('#template6').submit(function(){ $('#scrollto6').val( $('#newcontent6').scrollTop() ); });

    1915. 

  1915. 	$('#newcontent6').scrollTop( $('#scrollto6').val() );

    1916. 

  1916. });

    1917. 

  1917. /* ]]> */

    1918. 

  1918. </script>     

    1919. 

  1919. </div>

    1920. 

  1920. </div></td>

    1921. 

  1921.     <td align="center" valign="top">

    1922. 

  1922. <?php _e("<div class=\"bps-file_download_title\"><strong>File Downloads</strong></div>"); ?>

    1923. 

  1923. 

    1924. 

  1924. <form name="bps-enable-download" action="admin.php?page=bulletproof-security/admin/options.php#bps-tabs-5" method="post">

    1925. 

  1925. <?php wp_nonce_field('bulletproof_security_enable_download'); ?>

    1926. 

  1926. <input type="hidden" name="filename" value="bps-enable-download-edit" />

    1927. 

  1927. <p class="submit">

    1928. 

  1928. <input type="submit" name="bps-enable-download" class="button" value="<?php esc_attr_e('Enable Master File Downloading') ?>" /></p>

    1929. 

  1929. </form>

    1930. 

  1930. 

    1931. 

  1931. <div id="bps-enable_bu_file_dl_button">

    1932. 

  1932. <form name="bps-enable-download-backup" action="admin.php?page=bulletproof-security/admin/options.php#bps-tabs-5" method="post">

    1933. 

  1933. <?php wp_nonce_field('bulletproof_security_enable_download-backup'); ?>

    1934. 

  1934. <input type="hidden" name="filename" value="bps-enable-download-edit-backup" />

    1935. 

  1935. <p class="submit">

    1936. 

  1936. <input type="submit" name="bps-enable-download-backup" class="button" value="<?php esc_attr_e('Enable Backed Up File Downloading') ?>" /></p>

    1937. 

  1937. </form>

    1938. 

  1938. </div>

    1939. 

  1939. <div id="bps-download_buttons_table">

    1940. 

  1940. <?php _e("<p class=\"bps-download_titles\">BPS Master Files</p>");

    1941. 

  1941. 	

    1942. 

  1942. if (isset($_POST['bps-master-secure-download']) && current_user_can('manage_options')) {

    1943. 

  1943. 	check_admin_referer( 'bulletproof_security_download_secure' );

    1944. 

  1944. 	header('Content-Description: File Transfer');

    1945. 

  1945. 	header('Content-type: application/force-download');

    1946. 

  1946. 	header('Content-Disposition: attachment; filename="secure.htaccess"');

    1947. 

  1947. 	}

    1948. 

  1948. if (isset($_POST['bps-master-default-download']) && current_user_can('manage_options')) {

    1949. 

  1949. 	check_admin_referer( 'bulletproof_security_download_default' );	

    1950. 

  1950. 	header("Content-Description: File Transfer");

    1951. 

  1951. 	header("Content-type: application/force-download");

    1952. 

  1952. 	header("Content-Disposition: attachment; filename=default.htaccess");

    1953. 

  1953. 	}	

    1954. 

  1954. if (isset($_POST['bps-master-maintenance-download']) && current_user_can('manage_options')) {

    1955. 

  1955. 	check_admin_referer( 'bulletproof_security_download_maintenance' );	

    1956. 

  1956. 	header("Content-Description: File Transfer");

    1957. 

  1957. 	header("Content-type: application/force-download");

    1958. 

  1958. 	header("Content-Disposition: attachment; filename=maintenance.htaccess");

    1959. 

  1959. 	}

    1960. 

  1960. if (isset($_POST['bps-master-wpadmin-secure-download']) && current_user_can('manage_options')) {

    1961. 

  1961. 	check_admin_referer( 'bulletproof_security_download_wpadmin-secure' );	

    1962. 

  1962. 	header("Content-Description: File Transfer");

    1963. 

  1963. 	header("Content-type: application/force-download");

    1964. 

  1964. 	header("Content-Disposition: attachment; filename=wpadmin-secure.htaccess");

    1965. 

  1965. 	}

    1966. 

  1966. if (isset($_POST['bps-master-root-backup-htaccess-download']) && current_user_can('manage_options')) {

    1967. 

  1967. 	check_admin_referer( 'bulletproof_security_download_root-backup-htaccess' );	

    1968. 

  1968. 	header("Content-Description: File Transfer");

    1969. 

  1969. 	header("Content-type: application/force-download");

    1970. 

  1970. 	header("Content-Disposition: attachment; filename=root.htaccess_backup");

    1971. 

  1971. 	}	

    1972. 

  1972. if (isset($_POST['bps-master-wpadmin-backup-htaccess-download']) && current_user_can('manage_options')) {

    1973. 

  1973. 	check_admin_referer( 'bulletproof_security_download_wpadmin-backup-htaccess' );	

    1974. 

  1974. 	header("Content-Description: File Transfer");

    1975. 

  1975. 	header("Content-type: application/force-download");

    1976. 

  1976. 	header("Content-Disposition: attachment; filename=wpadmin.htaccess_backup");

    1977. 

  1977. 	}	

    1978. 

  1978. ?> 

    1979. 

  1979. 

    1980. 

  1980. <form name="bps-master-secure-download" action="<?php echo get_site_url() .'/wp-content/plugins/bulletproof-security/admin/htaccess/secure.htaccess'; ?>" method="post">

    1981. 

  1981. <?php wp_nonce_field('bulletproof_security_download_secure'); ?>

    1982. 

  1982. <input type="submit" name="bps-master-secure-download" class="button" value="<?php esc_attr_e('secure.htaccess') ?>" onClick="return confirm('<?php _e('Click OK to Download the file now or click Cancel to cancel the download.'); ?>')" /></p>

    1983. 

  1983. </form>

    1984. 

  1984. 

    1985. 

  1985. <form name="bps-master-default-download" action="<?php echo get_site_url() .'/wp-content/plugins/bulletproof-security/admin/htaccess/default.htaccess'; ?>" method="post">

    1986. 

  1986. <?php wp_nonce_field('bulletproof_security_download_default'); ?>

    1987. 

  1987. <input type="hidden" name="filename" value="bps-default-download" />

    1988. 

  1988. <input type="submit" name="bps-master-default-download" class="button" value="<?php esc_attr_e('default.htaccess') ?>" /></p>

    1989. 

  1989. </form>

    1990. 

  1990. 

    1991. 

  1991. <form name="bps-master-maintenance-download" action="<?php echo get_site_url() .'/wp-content/plugins/bulletproof-security/admin/htaccess/maintenance.htaccess'; ?>" method="post">

    1992. 

  1992. <?php wp_nonce_field('bulletproof_security_download_maintenance'); ?>

    1993. 

  1993. <input type="hidden" name="filename" value="bps-maintenance-download" />

    1994. 

  1994. <input type="submit" name="bps-master-maintenance-download" class="button" value="<?php esc_attr_e('maintenance.htaccess') ?>" /></p>

    1995. 

  1995. </form>

    1996. 

  1996. 

    1997. 

  1997. <form name="bps-master-wpadmin-secure-download" action="<?php echo get_site_url() .'/wp-content/plugins/bulletproof-security/admin/htaccess/wpadmin-secure.htaccess'; ?>" method="post">

    1998. 

  1998. <?php wp_nonce_field('bulletproof_security_download_wpadmin-secure'); ?>

    1999. 

  1999. <input type="hidden" name="filename" value="bps-wpadmin-secure-download" />

    2000. 

  2000. <input type="submit" name="bps-master-wpadmin-secure-download" class="button" value="<?php esc_attr_e('wpadmin-secure.htaccess') ?>" /></p>

    2001. 

  2001. </form>

    2002. 

  2002. 

    2003. 

  2003. 	<?php _e("<p class=\"bps-download_titles\">Backed Up htaccess Files</p>"); ?>

    2004. 

  2004.     

    2005. 

  2005. <form name="bps-master-root-backup-htaccess-download" action="<?php echo get_site_url() . '/wp-content/bps-backup/root.htaccess'; ?>" method="post">

    2006. 

  2006. <?php wp_nonce_field('bulletproof_security_download_root-backup-htaccess'); ?>

    2007. 

  2007. <input type="hidden" name="filename" value="bps-root-backup-htaccess-download" />

    2008. 

  2008. <input type="submit" name="bps-master-root-backup-htaccess-download" class="button" value="<?php esc_attr_e('root.htaccess Backup File') ?>" /></p>

    2009. 

  2009. </form>

    2010. 

  2010. 

    2011. 

  2011. <form name="bps-master-wpadmin-backup-htaccess-download" action="<?php echo get_site_url() . '/wp-content/bps-backup/wpadmin.htaccess'; ?>" method="post">

    2012. 

  2012. <?php wp_nonce_field('bulletproof_security_download_wpadmin-backup-htaccess'); ?>

    2013. 

  2013. <input type="hidden" name="filename" value="bps-wpadmin-backup-htaccess-download" />

    2014. 

  2014. <input type="submit" name="bps-master-wpadmin-backup-htaccess-download" class="button" value="<?php esc_attr_e('wpadmin.htaccess Backup File') ?>" /></p>

    2015. 

  2015. </form>

    2016. 

  2016. </div>    </td>

    2017. 

  2017.   </tr>

    2018. 

  2018. </table>

    2019. 

  2019. <?php } ?>

    2020. 

  2020. </div>

    2021. 

  2021. 

    2022. 

  2022. <div id="bps-tabs-6" class="bps-tab-page">

    2023. 

  2023. <h2><?php _e('BulletProof Security Maintenance Mode'); ?></h2>

    2024. 

  2024. 

    2025. 

  2025. <?php if (!current_user_can('manage_options')) { echo 'Permission Denied'; } else { ?>

    2026. 

  2026. <table width="100%" border="0" cellspacing="0" cellpadding="0" class="bps-help_faq_table">

    2027. 

  2027.   <tr>

    2028. 

  2028.     <td class="bps-table_title">&nbsp;</td>

    2029. 

  2029.   </tr>

    2030. 

  2030.   <tr>

    2031. 

  2031.     <td class="bps-table_cell_help">

    2032. 

  2032.     <div id="bps-maintenance_form_table">

    2033. 

  2033. <h3><?php _e('Website Maintenance Mode Settings'); ?></h3>

    2034. 

  2034. <h3><?php _e('<font color="red"><strong>CAUTION: </strong></font>'); ?> <a href="#" onmouseover="Tip('<strong>Your Maintenance Mode Form data is saved to the WordPress Database and will remain permanently until you delete it. When you upgrade BPS your form data will still be saved in your database.</strong><br><br><strong>Maintenance Mode Activation Steps</strong><br><br><strong>Filling In The Maintenance Mode Settings Form</strong><br><strong>1. Fill out the Website Maintenance Mode Form</strong><br> -- For the Retry-After text field I recommend using 259200. 259200 is 72 hours in seconds. 3600 = 1hr 43200 = 12hrs 86400 = 24hrs<br> -- You can copy and paste the example Background Image URL into the Background Image text field if you want to use the background image file that comes with BPS. If you have another background image file that you want to use then just name it with the same name as the example image file and copy it to the /bulletproof-security folder. If you do not want a background image then leave this text field blank. The background color will be white. If you want to customize the Website Under Maintenance template then download this file located in this folder /bulletproof-security/admin/htaccess/bp-maintenance.php.<br> -- The javascript countdown timer has been removed. It was a silly and useless feature.<br><strong>2. Click the Save Form Settings button to save your form data to your database.</strong><br><strong>3. Click the Create Form button to create your Website Under Maintenance form.</strong><br><strong>4. Click the Preview Form button to preview your Website Under Maintenance page.</strong><br> -- If you see a 404 or 403 Forbidden message in the popup preview window refresh the popup preview window or just close the popup window and click the Preview button again.<br> -- You can use the Preview button at any time to preview how your site will be displayed to everyone else except you when your website is in Maintenance Mode.<br><br><strong>Create Your Maintenance Mode .htaccess File</strong><br>After you have finished previewing your Website Under Maintenance page, click the Create htaccess File button. This creates your Maintenance Mode .htaccess file for your website. Your current Public IP address and correct RewriteBase and RewriteRule are included when this new Maintenance Mode .htaccess file is created.<br><br><strong>Activate Website Under Maintenance Mode</strong><br>Select the Maintenance Mode radio button and click the Activate Maintenance Mode button. Your website is now in Maintenance Mode. Everyone else will see your Website Under Maintenance page while you can still view and work on your site as you normally would.<br><br><strong>BPS Pro Video Tutorial links can be found in the Help & FAQ pages.</strong>', WIDTH, 600, PADDING, 8, ABOVE, true, FADEIN, 400, FADEOUT, 300)" onmouseout="UnTip()">Read Me</a></h3>

    2035. 

  2035. 

    2036. 

  2036. <form name="bps-maintenance-values" action="options.php" method="post">

    2037. 

  2037. <?php settings_fields('bulletproof_security_options_maint'); ?>

    2038. 

  2038. 			<?php $options = get_option('bulletproof_security_options_maint'); ?>

    2039. 

  2039. <table class="form-table">

    2040. 

  2040. <tr valign="top">

    2041. 

  2041. <th scope="row"><label for="bps-site-title"><?php _e('Site Title:') ?></label></th>

    2042. 

  2042. <td><input name="bulletproof_security_options_maint[bps-site-title]" type="text" value="<?php echo $options['bps-site-title']; ?>" class="regular-text" /><span class="description"><?php _e('Add Your Page Title') ?></span></td>

    2043. 

  2043. </tr>

    2044. 

  2044. <tr valign="top">

    2045. 

  2045. <th scope="row"><label for="bps-message-1"><?php _e('Message 1:') ?></label></th>

    2046. 

  2046. <td><input name="bulletproof_security_options_maint[bps-message-1]" type="text" value="<?php echo $options['bps-message-1']; ?>" class="regular-text" /><span class="description"><?php _e('Add Your Message') ?></span></td>

    2047. 

  2047. </tr>

    2048. 

  2048. <tr valign="top">

    2049. 

  2049. <th scope="row"><label for="bps-message-2"><?php _e('Message 2:') ?></label></th>

    2050. 

  2050. <td><input name="bulletproof_security_options_maint[bps-message-2]" type="text" value="<?php echo $options['bps-message-2']; ?>" class="regular-text" /><span class="description"><?php _e('Add Another Message or Not') ?></span></td>

    2051. 

  2051. </tr>

    2052. 

  2052. <tr valign="top">

    2053. 

  2053. <th scope="row"><label for="bps-retry-after"><?php _e('Retry-After:') ?></label></th>

    2054. 

  2054. <td><input name="bulletproof_security_options_maint[bps-retry-after]" type="text" value="<?php echo $options['bps-retry-after']; ?>" class="regular-text" /><span class="description"><?php _e('259200') ?></span></td>

    2055. 

  2055. </tr>

    2056. 

  2056. <tr valign="top">

    2057. 

  2057. <th scope="row"><label for="bps-background-image"><?php _e('Background Image') ?></label></th>

    2058. 

  2058. <td><input name="bulletproof_security_options_maint[bps-background-image]" type="text" value="<?php echo $options['bps-background-image']; ?>" class="regular-text" /><span class="description"><?php echo get_site_url(); ?>/wp-content/plugins/bulletproof-security/abstract-blue-bg.png</span></td>

    2059. 

  2059. </tr>

    2060. 

  2060. </table>

    2061. 

  2061. <p class="submit">

    2062. 

  2062. <input type="submit" name="bps-maintenance-values_submit" class="button" value="<?php esc_attr_e('Save Form Settings') ?>" />

    2063. 

  2063. </p>

    2064. 

  2064. </form>

    2065. 

  2065. 

    2066. 

  2066. 

    2067. 

  2067. <form name="bps-maintenance-create-values" action="admin.php?page=bulletproof-security/admin/options.php#bps-tabs-6" method="post">

    2068. 

  2068. <?php wp_nonce_field('bulletproof_security_create_values_form'); ?>

    2069. 

  2069. <input type="hidden" name="mmfilename" value="bps-maintenance-create-valuesH" />

    2070. 

  2070. <p class="submit">

    2071. 

  2071. <input type="submit" name="bps-maintenance-create-values_submit" class="button" value="<?php esc_attr_e('Create Form') ?>" /></p>

    2072. 

  2072. </form>

    2073. 

  2073. 

    2074. 

  2074. <!-- this is the Enable Download form reused for maintenance mode Preview -->

    2075. 

  2075. <form name="bps-enable-download" method="POST" action="admin.php?page=bulletproof-security/admin/options.php#bps-tabs-6" target="" onSubmit="window.open('<?php echo get_site_url(); ?>/wp-content/plugins/bulletproof-security/admin/htaccess/bp-maintenance.php','','scrollbars=yes,menubar=yes,width=800,height=600,resizable=yes,status=yes,toolbar=yes')">

    2076. 

  2076. <?php wp_nonce_field('bulletproof_security_enable_download'); ?>

    2077. 

  2077. <input type="hidden" name="filename" value="bps-enable-download-edit" />

    2078. 

  2078. <p class="submit">

    2079. 

  2079. <input type="submit" name="bps-enable-download" class="button" value="<?php esc_attr_e('Preview Form') ?>" /></p>

    2080. 

  2080. </form>

    2081. 

  2081. </div>

    2082. 

  2082. 

    2083. 

  2083. <h3><?php _e('Activate Website Under Maintenance Mode'); ?></h3>

    2084. 

  2084. <h3><?php _e('<font color="red"><strong>CAUTION: </strong></font>'); ?> <a href="#" onmouseover="Tip('<strong>You must click the Create htaccess File button FIRST to create your Maintenance Mode htaccess file before activating Maintenance Mode if you want to be able to continue working on your website while everyone else sees the Website Under Maintenance page</strong><br>After you have created your Maintenance Mode .htaccess file - Select the Maintenance Mode radio button and click Activate.<br><br><strong>To switch out of or exit Maintenance Mode just activate BulletProof Security Mode for your Root folder on the Security Modes page.</strong> You can see what everyone is seeing except for you by clicking on the Preview Form button at any time.<br><br>When you activate Maintenance Mode your website will be put in HTTP 503 Service Temporarily Unavailable status and display a Website Under Maintenance page to everyone except you. Your current Public IP address was automatically added to the Maintenance Mode file as well as the correct .htaccess RewriteRule and RewriteBase for your website when you clicked the Create File button.<br><br>To manually add additional IP addresses that are allowed to view your website normally use the BPS File Editor to add them. To view your current Public IP address click on the System Info tab menu.<br><br><strong>Your current Public IP address is also displayed on the Website Under Maintenance page itself.</strong><br><br>Your SERPs (website or web page ranking) will not be affected by putting your website in Maintenance Mode for several days for existing websites. To manually add additional IP addresses that can view your website you would add them using the BPS File Editor.<br><br>If you are unable to log back into your WordPress Dashboard and are also seeing the Website Under Maintenance page then you will need to FTP to your website and either delete the .htaccess file in your website root folder or download the .htaccess file - add your correct current Public IP address and upload it back to your website.<br><br><strong>BPS Pro Video Tutorial links can be found in the Help & FAQ pages.</strong>', WIDTH, 600, PADDING, 8, ABOVE, true, FADEIN, 400, FADEOUT, 300)" onmouseout="UnTip()">Read Me</a></h3>

    2085. 

  2085. 

    2086. 

  2086. <form name="bps-auto-write-maint" action="admin.php?page=bulletproof-security/admin/options.php#bps-tabs-6" method="post">

    2087. 

  2087. <?php wp_nonce_field('bulletproof_security_auto_write_maint'); ?>

    2088. 

  2088. <input type="hidden" name="filename" value="bps-auto-write-maint_write" />

    2089. 

  2089. <p class="submit">

    2090. 

  2090. <input type="submit" name="bps-auto-write-maint" class="button" value="<?php esc_attr_e('Create htaccess File') ?>" /></p>

    2091. 

  2091. </form>

    2092. 

  2092. 

    2093. 

  2093. <form name="BulletProof-Maintenance" action="admin.php?page=bulletproof-security/admin/options.php#bps-tabs-6" method="post">

    2094. 

  2094. <?php wp_nonce_field('bulletproof_security_maintenance_copy'); ?>

    2095. 

  2095. <table class="form-table">

    2096. 

  2096.    <tr>

    2097. 

  2097. 	<th><label><input name="selection15" type="radio" value="bpmaintenance" class="tog" <?php checked('', $bpmaintenance); ?> />

    2098. 

  2098. 	<?php _e('Maintenance Mode'); ?></label></th>

    2099. 

  2099. 	<td class="url-path"><?php _e('<font color="green">Click the Create htaccess File button first to create your Maintenance Mode .htaccess file. To switch out of or exit Maintenance Mode just activate BulletProof Security Mode for your Root Folder.</font><strong> Read the <font color="red">CAUTION:</font> Read Me ToolTip for more detailed information.</strong>'); ?></td>

    2100. 

  2100.    </tr>

    2101. 

  2101. </table>

    2102. 

  2102. <p class="submit">

    2103. 

  2103. <input type="submit" name="submit15" class="button" value="<?php esc_attr_e('Activate Maintenance Mode') ?>" />

    2104. 

  2104. </p>

    2105. 

  2105. </form>

    2106. 

  2106. </td>

    2107. 

  2107.   </tr>

    2108. 

  2108.   <tr>

    2109. 

  2109.     <td class="bps-table_cell_bottom">&nbsp;</td>

    2110. 

  2110.   </tr>

    2111. 

  2111. </table>

    2112. 

  2112. <?php } ?>

    2113. 

  2113. </div>

    2114. 

  2114. 

    2115. 

  2115. <div id="bps-tabs-7">

    2116. 

  2116. <h2><?php _e('BulletProof Security Help &amp; FAQ'); ?></h2>

    2117. 

  2117. <table width="100%" border="0" cellspacing="0" cellpadding="0" class="bps-help_faq_table">

    2118. 

  2118.    <tr>

    2119. 

  2119.     <td colspan="2" class="bps-table_title">&nbsp;</td>

    2120. 

  2120.   </tr>

    2121. 

  2121.   <tr>

    2122. 

  2122.     <td class="bps-table_cell_help"><a href="http://www.ait-pro.com/aitpro-blog/category/bulletproof-security-contributors/" target="_blank"><?php _e('Contributors Page'); ?></a></td>

    2123. 

  2123.     <td class="bps-table_cell_help"><a href="http://www.ait-pro.com/aitpro-blog/1166/bulletproof-security-plugin-support/bulletproof-security-plugin-guide-bps-version-45/#root-or-subfolder-wordpress-installation" target="_blank"><?php _e('Website Domain Root Help Info'); ?></a></td>

    2124. 

  2124.   </tr>

    2125. 

  2125.   <tr>

    2126. 

  2126.     <td class="bps-table_cell_help"><a href="http://www.ait-pro.com/aitpro-blog/331/bulletproof-security-plugin-support/bulletproof-security-donations-page/" target="_blank"><?php _e('BPS Donations'); ?></a></td>

    2127. 

  2127.     <td class="bps-table_cell_help"><a href="http://www.ait-pro.com/aitpro-blog/1166/bulletproof-security-plugin-support/bulletproof-security-plugin-guide-bps-version-45/#bps-backup-restore" target="_blank"><?php _e('Backup & Restore Help Info'); ?></a></td>

    2128. 

  2128.   </tr>

    2129. 

  2129.   <tr>

    2130. 

  2130.     <td class="bps-table_cell_help"><a href="http://www.ait-pro.com/aitpro-blog/1166/bulletproof-security-plugin-support/bulletproof-security-plugin-guide-bps-version-45/" target="_blank"><?php _e('BPS .46.4 Guide'); ?></a></td>

    2131. 

  2131.     <td class="bps-table_cell_help"><a href="http://www.ait-pro.com/aitpro-blog/2585/bulletproof-security-plugin-support/wordpress-website-maintenance-wordpress-maintenance-mode" target="_blank"><?php _e('Maintenance Mode Help Info'); ?></a></td>

    2132. 

  2132.   </tr>

    2133. 

  2133.   <tr>

    2134. 

  2134.     <td class="bps-table_cell_help"><a href="http://www.ait-pro.com/aitpro-blog/1166/bulletproof-security-plugin-support/bulletproof-security-plugin-guide-bps-version-45/#bps-45-new-features" target="_blank"><?php _e('BPS .46.4 Features'); ?></a></td>

    2135. 

  2135.     <td class="bps-table_cell_help"><a href="http://www.ait-pro.com/aitpro-blog/1166/bulletproof-security-plugin-support/bulletproof-security-plugin-guide-bps-version-45/#bps-advanced-coding-modfications" target="_blank"><?php _e('BPS .46.4 Coding Modifications Help Info'); ?></a></td>

    2136. 

  2136.   </tr>

    2137. 

  2137.   <tr>

    2138. 

  2138.     <td class="bps-table_cell_help"><a href="http://www.ait-pro.com/aitpro-blog/319/bulletproof-security-plugin-support/bulletproof-security-comments-questions-problems-wishlist/" target="_blank"><?php _e('Post Questions and Comments for Assistance'); ?></a></td>

    2139. 

  2139.     <td class="bps-table_cell_help"><a href="http://www.ait-pro.com/aitpro-blog/1166/bulletproof-security-plugin-support/bulletproof-security-plugin-guide-bps-version-45/#modifying-htaccess-files" target="_blank"><?php _e('Modifying BPS .htaccess Files for WordPress Subfolders'); ?></a></td>

    2140. 

  2140.   </tr>

    2141. 

  2141.   <tr>

    2142. 

  2142.     <td class="bps-table_cell_help"><a href="http://www.ait-pro.com/aitpro-blog/1183/bulletproof-security-plugin-support/bulletproof-security-plugin-bps-version-45-screenshots/" target="_blank"><?php _e('BPS .46.4 Screenshots'); ?></a></td>

    2143. 

  2143.     <td class="bps-table_cell_help"><a href="http://www.ait-pro.com/aitpro-blog/2185/bulletproof-security-plugin-support/bulletproof-security-file-editing-editing-files-within-the-wordpress-dashboard/" target="_blank"><?php _e('File Editing Within The Dashboard Help Info'); ?></a></td>

    2144. 

  2144.   </tr>

    2145. 

  2145.   <tr>

    2146. 

  2146.     <td width="50%" class="bps-table_cell_help"><a href="http://www.ait-pro.com/aitpro-blog/2330/bulletproof-security-plugin-support/bps-future-features-that-will-be-included-in-future-releases-of-bps" target="_blank"><?php _e('BPS Future and Whats New From Previous Versions'); ?></a></td>

    2147. 

  2147.     <td width="50%" class="bps-table_cell_help"><a href="http://www.ait-pro.com/aitpro-blog/2190/bulletproof-security-plugin-support/bulletproof-security-file-uploading-and-file-downloading-uploading-and-downloading-files-within-the-wordpress-dashboard/" target="_blank"><?php _e('File Uploading &amp; Downloading Within The Dashboard Help Info'); ?></a></td>

    2148. 

  2148.   </tr>

    2149. 

  2149.   <tr>

    2150. 

  2150.     <td class="bps-table_cell_help"><a href="http://www.ait-pro.com/aitpro-blog/2252/bulletproof-security-plugin-support/checking-plugin-compatibility-with-bps-plugin-testing-to-do-list/" target="_blank"><?php _e('Plugin Compatibility Testing - Recent New Permanent Fixes'); ?></a></td>

    2151. 

  2151.     <td class="bps-table_cell_help"><a href="http://www.ait-pro.com/aitpro-blog/2304/wordpress-tips-tricks-fixes/permalinks-wordpress-custom-permalinks-wordpress-best-wordpress-permalinks-structure/" target="_blank"><?php _e('WP Permalinks - Custom Permalink Structure Help Info'); ?></a></td>

    2152. 

  2152.   </tr>

    2153. 

  2153.   <tr>

    2154. 

  2154.     <td class="bps-table_cell_help"><a href="http://www.ait-pro.com/aitpro-blog/2566/bulletproof-security-plugin-support/bulletproof-security-error-messages" target="_blank"><?php _e('BulletProof Security Error, Warning and HUD Messages'); ?></a></td>

    2155. 

  2155.     <td class="bps-table_cell_help"><a href="http://www.ait-pro.com/aitpro-blog/2239/bulletproof-security-plugin-support/adding-a-custom-403-forbidden-page-htaccess-403-errordocument-directive-examples/" target="_blank"><?php _e('Adding a Custom 403 Forbidden Page For Your Website'); ?></a></td>

    2156. 

  2156.   </tr>

    2157. 

  2157.   <tr>

    2158. 

  2158.     <td class="bps-table_cell_help">&nbsp;</td>

    2159. 

  2159.     <td class="bps-table_cell_help">&nbsp;</td>

    2160. 

  2160.   </tr>

    2161. 

  2161.   <tr>

    2162. 

  2162.     <td colspan="2" class="bps-table_cell_bottom">&nbsp;</td>

    2163. 

  2163.   </tr>

    2164. 

  2164. </table>

    2165. 

  2165. </div>

    2166. 

  2166. 

    2167. 

  2167. <div id="bps-tabs-8">

    2168. 

  2168. <h2><?php _e('Whats New in'); ?><?php echo bpsWhatVersion(); ?></h2>

    2169. 

  2169. <h3><?php _e('The Whats New page will list new changes that were made in each new version release of BulletProof Security'); ?></h3>

    2170. 

  2170. <table width="100%" border="0" cellspacing="0" cellpadding="0" class="bps-whats_new_table">

    2171. 

  2171.   <tr>

    2172. 

  2172.    <td width="1%" class="bps-table_title_no_border">&nbsp;</td>

    2173. 

  2173.    <td width="99%" class="bps-table_title_no_border">&nbsp;</td>

    2174. 

  2174.   </tr>

    2175. 

  2175.    <tr>

    2176. 

  2176.     <td class="bps-table_cell_no_border">&nbsp;</td>

    2177. 

  2177.     <td class="bps-table_cell_no_border">&nbsp;</td>

    2178. 

  2178.   </tr>

    2179. 

  2179.  <tr>

    2180. 

  2180.     <td class="bps-table_cell_no_border">&bull;</td>

    2181. 

  2181.     <td class="bps-table_cell_no_border"><strong><?php _e('<font color="red">Heads Up Security Warning!!!</font>'); ?></strong><br /><?php _e('BPS .46.6 is forbidding thumbnailer scripts by default. To allow thumbnailer scripts on your website see the root .htaccess file for instructions on allowing thumbnailer scripts on your website. If your Theme or any of your Plugins are using a Thumbnailer script such as TimThumb, phpThumb, Thumb or variations of these thumbnailer scripts then you should check (ask the author, creator or Google it) and make sure that you have a recently patched version of the thumbnailer script that you are using. A Zero Day Vulnerability exists in older versions of these thumbnailer scripts and your website might be vulnerable. Thumbnailer scripts are automatically seen by BPS as a threat, exploit or vulnerability because of the general nature of these scripts.'); ?></td>

    2182. 

  2182.   </tr>

    2183. 

  2183.    <tr>

    2184. 

  2184.     <td class="bps-table_cell_no_border">&nbsp;</td>

    2185. 

  2185.     <td class="bps-table_cell_no_border">&nbsp;</td>

    2186. 

  2186.   </tr> 

    2187. 

  2187.   <tr>

    2188. 

  2188.     <td class="bps-table_cell_no_border">&bull;</td>

    2189. 

  2189.     <td class="bps-table_cell_no_border"><strong><?php _e('Cookie filter removed from BPS QUERY STRING EXPLOITS'); ?></strong><br /><?php _e('The Cookie String Exploit filter is problematic with plugins that are using PHP SESSION. This filter has been removed.'); ?></td>

    2190. 

  2190.   </tr>

    2191. 

  2191.    <tr>

    2192. 

  2192.     <td class="bps-table_cell_no_border">&nbsp;</td>

    2193. 

  2193.     <td class="bps-table_cell_no_border">&nbsp;</td>

    2194. 

  2194.   </tr>

    2195. 

  2195.   <tr>

    2196. 

  2196.     <td class="bps-table_cell_no_border">&bull;</td>

    2197. 

  2197.     <td class="bps-table_cell_no_border"><strong><?php _e('Explicit "exec" and "execute" filter removed from BPS QUERY STRING EXPLOITS'); ?></strong><br /><?php _e('The filtered words "exec" and "execute" have been removed as they are not necessary.'); ?></td>

    2198. 

  2198.   </tr>

    2199. 

  2199.    <tr>

    2200. 

  2200.     <td class="bps-table_cell_no_border">&nbsp;</td>

    2201. 

  2201.     <td class="bps-table_cell_no_border">&nbsp;</td>

    2202. 

  2202.   </tr>

    2203. 

  2203.   <tr>

    2204. 

  2204.     <td class="bps-table_cell_no_border">&bull;</td>

    2205. 

  2205.     <td class="bps-table_cell_no_border"><strong><?php _e('non-GPL Javascript Countdown Timer removed'); ?></strong><br /><?php _e('The Javascript Countdown Timer has been removed due to not being GPL compliant. This was a silly useless feature so no big loss.'); ?></td>

    2206. 

  2206.   </tr>

    2207. 

  2207.    <tr>

    2208. 

  2208.     <td class="bps-table_cell_no_border">&nbsp;</td>

    2209. 

  2209.     <td class="bps-table_cell_no_border">&nbsp;</td>

    2210. 

  2210.   </tr>

    2211. 

  2211.   <tr>

    2212. 

  2212.     <td class="bps-table_cell_no_border">&bull;</td>

    2213. 

  2213.     <td class="bps-table_cell_no_border"><strong><?php _e('BPS Pro 5.1 Officially Released'); ?></strong><br /><?php _e('At this point in the evolution of BPS Pro it is safe to say that BPS Pro 5.1 is by far the most comprehensive, effective and complete Website Security Solution for WordPress websites. The BPS Pro 5.1 .htaccess files contain a massive amount of new Security Exploits Filters to block browser based hacking attempts, the php.ini files contain optimum Security and Performance settings for maximum security and performance boosts for WordPress websites, file locking on the fly for WordPress Mission Critical files to protect against Mass Code Injection attacks on Web Hosts, PHP Error logging, automatic HTTP 400, 403 and 404 Error Logging to log and track hacking attempts against your website, built-in Monitoring and Alerting, extensive System Info and lots more.  We are not stopping here – Lots More To Come!'); ?></td>

    2214. 

  2214.   </tr>

    2215. 

  2215.   <tr>

    2216. 

  2216.     <td class="bps-table_cell_no_border">&nbsp;</td>

    2217. 

  2217.     <td class="bps-table_cell_no_border">&nbsp;</td>

    2218. 

  2218.   </tr>

    2219. 

  2219.   <tr>

    2220. 

  2220.     <td class="bps-table_cell_bottom_no_border">&nbsp;</td>

    2221. 

  2221.     <td class="bps-table_cell_bottom_no_border">&nbsp;</td>

    2222. 

  2222.   </tr>

    2223. 

  2223. </table>

    2224. 

  2224. </div>

    2225. 

  2225. 

    2226. 

  2226. <div id="bps-tabs-9" class="bps-tab-page">

    2227. 

  2227. <h2><?php _e('My Notes'); ?></h2>

    2228. 

  2228. <div id="bpsMyNotesborder" style="border-top:1px solid #999999;">

    2229. 

  2229. <h3><?php _e('Save any personal notes or htaccess code to your WordPress Database'); ?></h3>

    2230. 

  2230. </div>

    2231. 

  2231. <?php if (!current_user_can('manage_options')) { echo 'Permission Denied'; } else { ?>

    2232. 

  2232. <table width="100%" border="0" cellspacing="0" cellpadding="0" class="bps-help_faq_table">

    2233. 

  2233.   <tr>

    2234. 

  2234.     <td class="bps-table_title">&nbsp;</td>

    2235. 

  2235.   </tr>

    2236. 

  2236.   <tr>

    2237. 

  2237.     <td class="bps-table_cell_help">

    2238. 

  2238. 	<?php $scrolltoNotes = isset($_REQUEST['scrolltoNotes']) ? (int) $_REQUEST['scrolltoNotes'] : 0; ?>

    2239. 

  2239. 

    2240. 

  2240. <form name="myNotes" action="options.php" method="post">

    2241. 

  2241. 	<?php settings_fields('bulletproof_security_options_mynotes'); ?>

    2242. 

  2242. 	<?php $options = get_option('bulletproof_security_options_mynotes'); ?>

    2243. 

  2243. <div>

    2244. 

  2244.     <textarea cols="130" rows="27" name="bulletproof_security_options_mynotes[bps_my_notes]" tabindex="1"><?php echo $options['bps_my_notes']; ?></textarea>

    2245. 

  2245.     <input type="hidden" name="scrolltoNotes" value="<?php echo $scrolltoNotes; ?>" />

    2246. 

  2246.     <p class="submit">

    2247. 

  2247. 	<input type="submit" name="myNotes_submit" class="button" value="<?php esc_attr_e('Save My Notes') ?>" /></p>

    2248. 

  2248. </div>

    2249. 

  2249. </form>

    2250. 

  2250. <script type="text/javascript">

    2251. 

  2251. /* <![CDATA[ */

    2252. 

  2252. jQuery(document).ready(function($){

    2253. 

  2253. 	$('#myNotes').submit(function(){ $('#scrolltoNotes').val( $('#bulletproof_security_options_mynotes[bps_my_notes]').scrollTop() ); });

    2254. 

  2254. 	$('#bulletproof_security_options_mynotes[bps_my_notes]').scrollTop( $('#scrolltoNotes').val() ); 

    2255. 

  2255. });

    2256. 

  2256. /* ]]> */

    2257. 

  2257. </script>

    2258. 

  2258. </td>

    2259. 

  2259.   </tr>

    2260. 

  2260.   <tr>

    2261. 

  2261.     <td class="bps-table_cell_bottom">&nbsp;</td>

    2262. 

  2262.   </tr>

    2263. 

  2263. </table>

    2264. 

  2264. <?php } ?>

    2265. 

  2265. 

    2266. 

  2266. </div>

    2267. 

  2267. 

    2268. 

  2268. <div id="bps-tabs-10">

    2269. 

  2269. <h2><?php _e('BulletProof Security Pro Feature Highlights'); ?></h2>

    2270. 

  2270. 

    2271. 

  2271. <table width="100%" border="0" cellspacing="0" cellpadding="0" class="bps-help_faq_table">

    2272. 

  2272.   <tr>

    2273. 

  2273.     <td colspan="2" class="bps-table_title">&nbsp;</td>

    2274. 

  2274.   </tr>

    2275. 

  2275.   <tr>

    2276. 

  2276.     <td width="62%" class="bps-table_cell_help"><a href="http://www.ait-pro.com/aitpro-blog/2835/bulletproof-security-pro/bulletproof-security-pro-features/" target="_blank" title="Link Opens in New Browser Window"><?php _e('BPS Pro Features'); ?></a></td>

    2277. 

  2277.     <td width="38%" class="bps-table_cell_help"><a href="http://www.ait-pro.com/aitpro-blog/2841/bulletproof-security-pro/bulletproof-security-pro-overview-video-tutorial/" target="_blank" title="Link Opens in New Browser Window"><?php _e('BPS Pro Overview Video Tutorial'); ?></a></td>

    2278. 

  2278.   </tr>

    2279. 

  2279.  <tr>

    2280. 

  2280.     <td class="bps-table_cell_help"><strong><?php _e('Custom php.ini File Creator, php.ini File Manager, php.ini Editor, Protected PHP Error Log, Secure phpinfo Viewer'); ?></strong></td>

    2281. 

  2281.     <td class="bps-table_cell_help"><a href="http://www.ait-pro.com/aitpro-blog/2849/bulletproof-security-pro/bulletproof-security-pro-b-core-htaccess-video-tutorial/" target="_blank" title="Link Opens in New Browser Window"><?php _e('B-Core htaccess Video Tutorial'); ?></a></td>

    2282. 

  2282.   </tr>

    2283. 

  2283.   <tr>

    2284. 

  2284.     <td class="bps-table_cell_help"><strong><?php _e('Monitoring &amp; Alerting Options: WP Dashboard, BPS Pro pages only, Turned off, PHP Error Email Alerts'); ?></strong></td>

    2285. 

  2285.     <td class="bps-table_cell_help"><a href="http://www.ait-pro.com/aitpro-blog/2851/bulletproof-security-pro/bulletproof-security-pro-p-security-php-ini-video-tutorial/" target="_blank" title="Link Opens in New Browser Window"><?php _e('P-Security Video Tutorial'); ?></a></td>

    2286. 

  2286.   </tr>

    2287. 

  2287.     <tr>

    2288. 

  2288.     <td class="bps-table_cell_help"><strong><?php _e('Base64 Decoder/Encoder, Mcrypt Decrypt/Encrypt, Crypt Encryption'); ?></strong></td>

    2289. 

  2289.     <td class="bps-table_cell_help"><a href="http://www.ait-pro.com/aitpro-blog/2847/bulletproof-security-pro/bulletproof-security-pro-s-monitor-video-tutorial/" target="_blank" title="Link Opens in New Browser Window"><?php _e('S-Monitor Video Tutorial'); ?></a></td>

    2290. 

  2290.   </tr>

    2291. 

  2291.   <tr>

    2292. 

  2292.     <td class="bps-table_cell_help"><strong><?php _e('File String Finder, Replacer, Remover: Search all files for text, code, etc.'); ?></strong></td>

    2293. 

  2293.     <td class="bps-table_cell_help"><a href="http://www.ait-pro.com/aitpro-blog/2855/bulletproof-security-pro/bulletproof-security-pro-pro-tools-video-tutorial/" target="_blank" title="Link Opens in New Browser Window"><?php _e('Pro-Tools Video Tutorial'); ?></a></td>

    2294. 

  2294.   </tr>

    2295. 

  2295.   <tr>

    2296. 

  2296.     <td class="bps-table_cell_help"><strong><?php _e('Database String Finder: Search entire Database for text, code, etc.'); ?></strong></td>

    2297. 

  2297.     <td class="bps-table_cell_help"><a href="http://www.ait-pro.com/aitpro-blog/2837/bulletproof-security-pro/bulletproof-security-pro-screenshots/" target="_blank" title="Link Opens in New Browser Window"><?php _e('BPS Pro Screenshots'); ?></a> </td>

    2298. 

  2298.   </tr>

    2299. 

  2299.   <tr>

    2300. 

  2300.     <td class="bps-table_cell_help"><strong><?php _e('HTTP Error Logging / 400, 403 and 404 Error Logging - Log hacking attempts against your website. When a hacker attempts to hack your website the hackers IP address, Host name, Request Method, Referering link, the file name or requested resource, the user agent of the hacker and the query string used in the hack attempt are logged. And if you feel like collecting hackers scripts then just follow the hackers links back to their personal sites or their Botnet sites.'); ?></strong></td>

    2301. 

  2301.     <td class="bps-table_cell_help">&nbsp;</td>

    2302. 

  2302.   </tr>

    2303. 

  2303.   <tr>

    2304. 

  2304.     <td class="bps-table_cell_help">&nbsp;</td>

    2305. 

  2305.     <td class="bps-table_cell_help">&nbsp;</td>

    2306. 

  2306.   </tr>

    2307. 

  2307.    <tr>

    2308. 

  2308.     <td colspan="2" class="bps-table_cell_bottom">&nbsp;</td>

    2309. 

  2309.   </tr>

    2310. 

  2310. </table>

    2311. 

  2311. </div>

    2312. 

  2312.         

    2313. 

  2313. <div id="AITpro-link">BulletProof Security Plugin by <a href="http://www.ait-pro.com/" target="_blank" title="AITpro Website Design">AITpro Website Design</a>

    2314. 

  2314. </div>

    2315. 

  2315. </div>

    2316. 

  2316. <!-- this script needs to be on the options.php page - will not register or enqueue correctly due to tt_aElt.0.style issue -->

    2317. 

  2317. <script type="text/javascript" src="<?php echo WP_PLUGIN_URL; ?>/bulletproof-security/admin/js/wz_tooltip.js"></script>

    2318. 

  2318. </div>
    2319.