loginizer / init.php

init.php in Loginizer 1.2.0, at init.php

1,514 lines 45.5 KB

Raw Download Zip

1	<?php
2
3	if(!function_exists('add_action')){
4	echo 'You are not allowed to access this page directly.';
5	exit;
6	}
7
8	define('LOGINIZER_VERSION', '1.2.0');
9	define('LOGINIZER_DIR', WP_PLUGIN_DIR.'/'.basename(dirname(LOGINIZER_FILE)));
10	define('LOGINIZER_URL', plugins_url('', LOGINIZER_FILE));
11	define('LOGINIZER_PRO_URL', 'https://loginizer.com/features#compare');
12
13	include_once(LOGINIZER_DIR.'/functions.php');
14
15	// Ok so we are now ready to go
16	register_activation_hook(LOGINIZER_FILE, 'loginizer_activation');
17
18	// Is called when the ADMIN enables the plugin
19	function loginizer_activation(){
20
21	global $wpdb;
22
23	$sql = array();
24
25	$sql[] = "CREATE TABLE `".$wpdb->prefix."loginizer_logs` (
26	`username` varchar(255) NOT NULL DEFAULT '',
27	`time` int(10) NOT NULL DEFAULT '0',
28	`count` int(10) NOT NULL DEFAULT '0',
29	`lockout` int(10) NOT NULL DEFAULT '0',
30	`ip` varchar(255) NOT NULL DEFAULT '',
31	UNIQUE KEY `ip` (`ip`)
32	) ENGINE=MyISAM DEFAULT CHARSET=utf8;";
33
34	foreach($sql as $sk => $sv){
35	$wpdb->query($sv);
36	}
37
38	add_option('loginizer_version', LOGINIZER_VERSION);
39	add_option('loginizer_options', array());
40	add_option('loginizer_last_reset', 0);
41	add_option('loginizer_whitelist', array());
42	add_option('loginizer_blacklist', array());
43
44	}
45
46	// Checks if we are to update ?
47	function loginizer_update_check(){
48
49	global $wpdb;
50
51	$sql = array();
52	$current_version = get_option('loginizer_version');
53
54	// It must be the 1.0 pre stuff
55	if(empty($current_version)){
56	$current_version = get_option('lz_version');
57	}
58
59	$version = (int) str_replace('.', '', $current_version);
60
61	// No update required
62	if($current_version == LOGINIZER_VERSION){
63	return true;
64	}
65
66	// Is it first run ?
67	if(empty($current_version)){
68
69	// Reinstall
70	loginizer_activation();
71
72	// Trick the following if conditions to not run
73	$version = (int) str_replace('.', '', LOGINIZER_VERSION);
74
75	}
76
77	// Is it less than 1.0.1 ?
78	if($version < 101){
79
80	// TODO : GET the existing settings
81
82	// Get the existing settings
83	$lz_failed_logs = lz_selectquery("SELECT * FROM `".$wpdb->prefix."lz_failed_logs`;", 1);
84	$lz_options = lz_selectquery("SELECT * FROM `".$wpdb->prefix."lz_options`;", 1);
85	$lz_iprange = lz_selectquery("SELECT * FROM `".$wpdb->prefix."lz_iprange`;", 1);
86
87	// Delete the three tables
88	$sql = array();
89	$sql[] = "DROP TABLE IF EXISTS ".$wpdb->prefix."lz_failed_logs;";
90	$sql[] = "DROP TABLE IF EXISTS ".$wpdb->prefix."lz_options;";
91	$sql[] = "DROP TABLE IF EXISTS ".$wpdb->prefix."lz_iprange;";
92
93	foreach($sql as $sk => $sv){
94	$wpdb->query($sv);
95	}
96
97	// Delete option
98	delete_option('lz_version');
99
100	// Reinstall
101	loginizer_activation();
102
103	// TODO : Save the existing settings
104
105	// Update the existing failed logs to new table
106	if(is_array($lz_failed_logs)){
107	foreach($lz_failed_logs as $fk => $fv){
108	$wpdb->query("INSERT INTO ".$wpdb->prefix."loginizer_logs SET `username` = '".$fv['username']."', `time` = '".$fv['time']."', `count` = '".$fv['count']."', `lockout` = '".$fv['lockout']."', `ip` = '".$fv['ip']."';");
109	}
110	}
111
112	// Update the existing options to new structure
113	if(is_array($lz_options)){
114	foreach($lz_options as $ok => $ov){
115
116	if($ov['option_name'] == 'lz_last_reset'){
117	update_option('loginizer_last_reset', $ov['option_value']);
118	continue;
119	}
120
121	$old_option[str_replace('lz_', '', $ov['option_name'])] = $ov['option_value'];
122	}
123	// Save the options
124	update_option('loginizer_options', $old_option);
125	}
126
127	// Update the existing iprange to new structure
128	if(is_array($lz_iprange)){
129
130	$old_blacklist = array();
131	$old_whitelist = array();
132	$bid = 1;
133	$wid = 1;
134	foreach($lz_iprange as $ik => $iv){
135
136	if(!empty($iv['blacklist'])){
137	$old_blacklist[$bid] = array();
138	$old_blacklist[$bid]['start'] = long2ip($iv['start']);
139	$old_blacklist[$bid]['end'] = long2ip($iv['end']);
140	$old_blacklist[$bid]['time'] = strtotime($iv['date']);
141	$bid = $bid + 1;
142	}
143
144	if(!empty($iv['whitelist'])){
145	$old_whitelist[$wid] = array();
146	$old_whitelist[$wid]['start'] = long2ip($iv['start']);
147	$old_whitelist[$wid]['end'] = long2ip($iv['end']);
148	$old_whitelist[$wid]['time'] = strtotime($iv['date']);
149	$wid = $wid + 1;
150	}
151	}
152
153	if(!empty($old_blacklist)) update_option('loginizer_blacklist', $old_blacklist);
154	if(!empty($old_whitelist)) update_option('loginizer_whitelist', $old_whitelist);
155	}
156
157	}
158
159	// Save the new Version
160	update_option('loginizer_version', LOGINIZER_VERSION);
161
162	}
163
164	// Add the action to load the plugin
165	add_action('plugins_loaded', 'loginizer_load_plugin');
166
167	// The function that will be called when the plugin is loaded
168	function loginizer_load_plugin(){
169
170	global $loginizer;
171
172	// Check if the installed version is outdated
173	loginizer_update_check();
174
175	$options = get_option('loginizer_options');
176
177	$loginizer = array();
178	$loginizer['max_retries'] = empty($options['max_retries']) ? 3 : $options['max_retries'];
179	$loginizer['lockout_time'] = empty($options['lockout_time']) ? 900 : $options['lockout_time']; // 15 minutes
180	$loginizer['max_lockouts'] = empty($options['max_lockouts']) ? 5 : $options['max_lockouts'];
181	$loginizer['lockouts_extend'] = empty($options['lockouts_extend']) ? 86400 : $options['lockouts_extend']; // 24 hours
182	$loginizer['reset_retries'] = empty($options['reset_retries']) ? 86400 : $options['reset_retries']; // 24 hours
183	$loginizer['notify_email'] = empty($options['notify_email']) ? 0 : $options['notify_email'];
184
185	// Load the blacklist and whitelist
186	$loginizer['blacklist'] = get_option('loginizer_blacklist');
187	$loginizer['whitelist'] = get_option('loginizer_whitelist');
188
189	// When was the database cleared last time
190	$loginizer['last_reset'] = get_option('loginizer_last_reset');
191
192	//print_r($loginizer);
193
194	// Clear retries
195	if((time() - $loginizer['last_reset']) >= $loginizer['reset_retries']){
196	loginizer_reset_retries();
197	}
198
199	$ins_time = get_option('loginizer_ins_time');
200	if(empty($ins_time)){
201	$ins_time = time();
202	update_option('loginizer_ins_time', $ins_time);
203	}
204	$loginizer['ins_time'] = $ins_time;
205
206	// Set the current IP
207	$loginizer['current_ip'] = lz_getip();
208
209	/* Filters and actions */
210
211	// Use this to verify before WP tries to login
212	// Is always called and is the first function to be called
213	//add_action('wp_authenticate', 'loginizer_wp_authenticate', 10, 2);// Not called by XML-RPC
214	add_filter('authenticate', 'loginizer_wp_authenticate', 10001, 3);// This one is called by xmlrpc as well as GUI
215
216	// Is called when a login attempt fails
217	// Hence Update our records that the login failed
218	add_action('wp_login_failed', 'loginizer_login_failed');
219
220	// Is called before displaying the error message so that we dont show that the username is wrong or the password
221	// Update Error message
222	add_action('wp_login_errors', 'loginizer_error_handler', 10001, 2);
223
224	// Is the premium features there ?
225	if(file_exists(LOGINIZER_DIR.'/premium.php')){
226
227	// Include the file
228	include_once(LOGINIZER_DIR.'/premium.php');
229
230	loginizer_security_init();
231
232	}
233
234	}
235
236	// Should return NULL if everything is fine
237	function loginizer_wp_authenticate($user, $username, $password){
238
239	global $loginizer, $lz_error, $lz_cannot_login, $lz_user_pass;
240
241	if(!empty($username) && !empty($password)){
242	$lz_user_pass = 1;
243	}
244
245	// Are you whitelisted ?
246	if(loginizer_is_whitelisted()){
247	$loginizer['ip_is_whitelisted'] = 1;
248	return $user;
249	}
250
251	// Are you blacklisted ?
252	if(loginizer_is_blacklisted()){
253	$lz_cannot_login = 1;
254	return new WP_Error('ip_blacklisted', implode('', $lz_error), 'loginizer');
255	}
256
257	if(loginizer_can_login()){
258	return $user;
259	}
260
261	$lz_cannot_login = 1;
262
263	return new WP_Error('ip_blocked', implode('', $lz_error), 'loginizer');
264
265	}
266
267	function loginizer_can_login(){
268
269	global $wpdb, $loginizer, $lz_error;
270
271	// Get the logs
272	$result = lz_selectquery("SELECT * FROM `".$wpdb->prefix."loginizer_logs` WHERE `ip` = '".$loginizer['current_ip']."';");
273
274	if(!empty($result['count']) && ($result['count'] % $loginizer['max_retries']) == 0){
275
276	// Has he reached max lockouts ?
277	if($result['lockout'] >= $loginizer['max_lockouts']){
278	$loginizer['lockout_time'] = $loginizer['lockouts_extend'];
279	}
280
281	// Is he in the lockout time ?
282	if($result['time'] >= (time() - $loginizer['lockout_time'])){
283	$banlift = ceil((($result['time'] + $loginizer['lockout_time']) - time()) / 60);
284
285	//echo 'Current Time '.date('m/d/Y H:i:s', time()).'<br />';
286	//echo 'Last attempt '.date('m/d/Y H:i:s', $result['time']).'<br />';
287	//echo 'Unlock Time '.date('m/d/Y H:i:s', $result['time'] + $loginizer['lockout_time']).'<br />';
288
289	$_time = $banlift.' minute(s)';
290
291	if($banlift > 60){
292	$banlift = ceil($banlift / 60);
293	$_time = $banlift.' hour(s)';
294	}
295
296	$lz_error['ip_blocked'] = 'You have exceeded maximum login retries<br /> Please try after '.$_time;
297
298	return false;
299	}
300	}
301
302	return true;
303	}
304
305	function loginizer_is_blacklisted(){
306
307	global $wpdb, $loginizer, $lz_error;
308
309	$blacklist = $loginizer['blacklist'];
310
311	foreach($blacklist as $k => $v){
312
313	// Is the IP in the blacklist ?
314	if(ip2long($v['start']) <= ip2long($loginizer['current_ip']) && ip2long($loginizer['current_ip']) <= ip2long($v['end'])){
315	$result = 1;
316	break;
317	}
318
319	// Is it in a wider range ?
320	if(ip2long($v['start']) >= 0 && ip2long($v['end']) < 0){
321
322	// Since the end of the RANGE (i.e. current IP range) is beyond the +ve value of ip2long,
323	// if the current IP is <= than the start of the range, it is within the range
324	// OR
325	// if the current IP is <= than the end of the range, it is within the range
326	if(ip2long($v['start']) <= ip2long($loginizer['current_ip'])
327	\|\| ip2long($loginizer['current_ip']) <= ip2long($v['end'])){
328	$result = 1;
329	break;
330	}
331
332	}
333
334	}
335
336	// You are blacklisted
337	if(!empty($result)){
338	$lz_error['ip_blacklisted'] = 'Your IP has been blacklisted';
339	return true;
340	}
341
342	return false;
343
344	}
345
346	function loginizer_is_whitelisted(){
347
348	global $wpdb, $loginizer, $lz_error;
349
350	$whitelist = $loginizer['whitelist'];
351
352	foreach($whitelist as $k => $v){
353
354	// Is the IP in the blacklist ?
355	if(ip2long($v['start']) <= ip2long($loginizer['current_ip']) && ip2long($loginizer['current_ip']) <= ip2long($v['end'])){
356	$result = 1;
357	break;
358	}
359
360	// Is it in a wider range ?
361	if(ip2long($v['start']) >= 0 && ip2long($v['end']) < 0){
362
363	// Since the end of the RANGE (i.e. current IP range) is beyond the +ve value of ip2long,
364	// if the current IP is <= than the start of the range, it is within the range
365	// OR
366	// if the current IP is <= than the end of the range, it is within the range
367	if(ip2long($v['start']) <= ip2long($loginizer['current_ip'])
368	\|\| ip2long($loginizer['current_ip']) <= ip2long($v['end'])){
369	$result = 1;
370	break;
371	}
372
373	}
374
375	}
376
377	// You are whitelisted
378	if(!empty($result)){
379	return true;
380	}
381
382	return false;
383
384	}
385
386
387	// When the login fails, then this is called
388	// We need to update the database
389	function loginizer_login_failed($username){
390
391	global $wpdb, $loginizer, $lz_cannot_login;
392
393	if(empty($lz_cannot_login) && empty($loginizer['ip_is_whitelisted']) && empty($loginizer['no_loginizer_logs'])){
394
395	$result = lz_selectquery("SELECT * FROM `".$wpdb->prefix."loginizer_logs` WHERE `ip` = '".$loginizer['current_ip']."';");
396
397	if(!empty($result)){
398	$lockout = floor((($result['count']+1) / $loginizer['max_retries']));
399	$sresult = $wpdb->query("UPDATE `".$wpdb->prefix."loginizer_logs` SET `username` = '".$username."', `time` = '".time()."', `count` = `count`+1, `lockout` = '".$lockout."' WHERE `ip` = '".$loginizer['current_ip']."';");
400
401	// Do we need to email admin ?
402	if(!empty($loginizer['notify_email']) && $lockout >= $loginizer['notify_email']){
403
404	$sitename = lz_is_multisite() ? get_site_option('site_name') : get_option('blogname');
405	$mail = array();
406	$mail['to'] = lz_is_multisite() ? get_site_option('admin_email') : get_option('admin_email');
407	$mail['subject'] = 'Failed Login Attempts from IP '.$loginizer['current_ip'].' ('.$sitename.')';
408	$mail['message'] = 'Hi,
409
410	'.($result['count']+1).' failed login attempts and '.$lockout.' lockout(s) from IP '.$loginizer['current_ip'].'
411
412	Last Login Attempt : '.date('d/m/Y H:i:s', time()).'
413	Last User Attempt : '.$username.'
414	IP has been blocked until : '.date('d/m/Y H:i:s', time() + $loginizer['lockout_time']).'
415
416	Regards,
417	Loginizer';
418
419	@wp_mail($mail['to'], $mail['subject'], $mail['message']);
420	}
421	}else{
422	$insert = $wpdb->query("INSERT INTO `".$wpdb->prefix."loginizer_logs` SET `username` = '".$username."', `time` = '".time()."', `count` = '1', `ip` = '".$loginizer['current_ip']."', `lockout` = '0';");
423	}
424
425	// We need to add one as this is a failed attempt as well
426	$result['count'] = $result['count'] + 1;
427	$loginizer['retries_left'] = ($loginizer['max_retries'] - ($result['count'] % $loginizer['max_retries']));
428	$loginizer['retries_left'] = $loginizer['retries_left'] == $loginizer['max_retries'] ? 0 : $loginizer['retries_left'];
429
430	}
431	}
432
433	// Handles the error of the password not being there
434	function loginizer_error_handler($errors, $redirect_to){
435
436	global $wpdb, $loginizer, $lz_user_pass, $lz_cannot_login;
437
438	//echo 'loginizer_error_handler :';print_r($errors->errors);echo '<br>';
439
440	// Remove the empty password error
441	if(is_wp_error($errors)){
442
443	$codes = $errors->get_error_codes();
444
445	foreach($codes as $k => $v){
446	if($v == 'invalid_username' \|\| $v == 'incorrect_password'){
447	$show_error = 1;
448	}
449	}
450
451	$errors->remove('invalid_username');
452	$errors->remove('incorrect_password');
453
454	}
455
456	// Add the error
457	if(!empty($lz_user_pass) && !empty($show_error) && empty($lz_cannot_login)){
458	$errors->add('invalid_userpass', '<b>ERROR:</b> Incorrect Username or Password');
459	}
460
461	// Add the number of retires left as well
462	if(count($errors->get_error_codes()) > 0 && isset($loginizer['retries_left'])){
463	$errors->add('retries_left', loginizer_retries_left());
464	}
465
466	return $errors;
467
468	}
469
470	// Returns a string with the number of retries left
471	function loginizer_retries_left(){
472
473	global $wpdb, $loginizer, $lz_user_pass, $lz_cannot_login;
474
475	// If we are to show the number of retries left
476	if(isset($loginizer['retries_left'])){
477	return '<b>'.$loginizer['retries_left'].'</b> attempt(s) left';
478	}
479
480	}
481
482	function loginizer_reset_retries(){
483
484	global $wpdb, $loginizer;
485
486	$deltime = time() - $loginizer['reset_retries'];
487	$result = $wpdb->query("DELETE FROM `".$wpdb->prefix."loginizer_logs` WHERE `time` <= '".$deltime."';");
488
489	update_option('loginizer_last_reset', time());
490
491	}
492
493	add_filter("plugin_action_links_$plugin_loginizer", 'loginizer_plugin_action_links');
494
495	// Add settings link on plugin page
496	function loginizer_plugin_action_links($links) {
497
498	if(!defined('LOGINIZER_PREMIUM')){
499	$links[] = '<a href="'.LOGINIZER_PRO_URL.'" style="color:#3db634;" target="_blank">'._x('Upgrade', 'Plugin action link label.', 'loginizer').'</a>';
500	}
501
502	$settings_link = '<a href="admin.php?page=loginizer">Settings</a>';
503	array_unshift($links, $settings_link);
504
505	return $links;
506	}
507
508	add_action('admin_menu', 'loginizer_admin_menu');
509
510	// Shows the admin menu of Loginizer
511	function loginizer_admin_menu() {
512
513	global $wp_version, $loginizer;
514
515	// Add the menu page
516	add_menu_page(__('Loginizer Dashboard'), __('Loginizer Security'), 'activate_plugins', 'loginizer', 'loginizer_page_dashboard');
517
518	// Dashboard
519	add_submenu_page('loginizer', __('Loginizer Dashboard'), __('Dashboard'), 'activate_plugins', 'loginizer', 'loginizer_page_dashboard');
520
521	// Brute Force
522	add_submenu_page('loginizer', __('Loginizer Brute Force Settings'), __('Brute Force'), 'activate_plugins', 'loginizer_brute_force', 'loginizer_page_brute_force');
523
524	if(defined('LOGINIZER_PREMIUM')){
525
526	// PasswordLess
527	add_submenu_page('loginizer', __('Loginizer PasswordLess Settings'), __('PasswordLess'), 'activate_plugins', 'loginizer_passwordless', 'loginizer_page_passwordless');
528
529	// Two Factor Auth
530	add_submenu_page('loginizer', __('Loginizer Two Factor Authentication'), __('Two Factor Auth'), 'activate_plugins', 'loginizer_2fa', 'loginizer_page_2fa');
531
532	// reCaptcha
533	add_submenu_page('loginizer', __('Loginizer reCAPTCHA Settings'), __('reCAPTCHA'), 'activate_plugins', 'loginizer_recaptcha', 'loginizer_page_recaptcha');
534
535	// Security Settings
536	add_submenu_page('loginizer', __('Loginizer Security Settings'), __('Security Settings'), 'activate_plugins', 'loginizer_security', 'loginizer_page_security');
537
538	}elseif(!defined('LOGINIZER_PREMIUM') && !empty($loginizer['ins_time']) && $loginizer['ins_time'] < (time() - (30243600))){
539
540	// Go Pro link
541	add_submenu_page('loginizer', __('Loginizer Go Pro'), __('Go Pro'), 'activate_plugins', LOGINIZER_PRO_URL);
542
543	}
544
545	}
546
547	// The Loginizer Admin Options Page
548	function loginizer_page_header($title = 'Loginizer'){
549	/*wp_enqueue_script('common');
550	wp_enqueue_script('wp-lists');
551	wp_enqueue_script('postbox');
552	wp_nonce_field('closedpostboxes', 'closedpostboxesnonce', false);
553
554	echo '
555	<script>
556	jQuery(document).ready( function() {
557	//add_postbox_toggles("loginizer");
558	});
559	</script>';*/
560
561	?>
562	<style>
563	.lz-right-ul{
564	padding-left: 10px !important;
565	}
566
567	.lz-right-ul li{
568	list-style: circle !important;
569	}
570	</style>
571	<?php
572
573	echo '<div style="margin: 10px 20px 0 2px;">
574	<div class="metabox-holder columns-2">
575	<div class="postbox-container">
576	<div id="top-sortables" class="meta-box-sortables ui-sortable">
577
578	<table cellpadding="2" cellspacing="1" width="100%" class="fixed" border="0">
579	<tr>
580	<td valign="top"><h3>'.$title.'</h3></td>
581	<td align="right"><a target="_blank" class="button button-primary" href="https://wordpress.org/support/view/plugin-reviews/loginizer">Review Loginizer</a></td>
582	</tr>
583	</table>
584	<hr />
585
586	<!--Main Table-->
587	<table cellpadding="8" cellspacing="1" width="100%" class="fixed">
588	<tr>
589	<td valign="top">';
590
591	}
592
593	// The Loginizer Theme footer
594	function loginizer_page_footer(){
595
596	echo '</td>
597	<td width="200" valign="top" id="loginizer-right-bar">';
598
599	if(!defined('LOGINIZER_PREMIUM')){
600
601	echo '
602	<div class="postbox" style="min-width:0px !important;">
603	<h2 class="hndle ui-sortable-handle">
604	<span>Premium Version</span>
605	</h2>
606	<div class="inside">
607	<i>Upgrade to the premium version and get the following features </i>:<br>
608	<ul class="lz-right-ul">
609	<li>PasswordLess Login</li>
610	<li>Two Factor Auth - Email</li>
611	<li>Two Factor Auth - App</li>
612	<li>Login Challenge Question</li>
613	<li>reCAPTCHA</li>
614	<li>Rename Login Page</li>
615	<li>Disable XML-RPC</li>
616	<li>And many more ...</li>
617	</ul>
618	<center><a class="button button-primary" href="https://loginizer.com/members/cart.php">Upgrade</a></center>
619	</div>
620	</div>';
621
622	}else{
623
624	echo '
625	<div class="postbox" style="min-width:0px !important;">
626	<h2 class="hndle ui-sortable-handle">
627	<span>Recommedations</span>
628	</h2>
629	<div class="inside">
630	<i>We recommed that you enable atleast one of the following security features</i>:<br>
631	<ul class="lz-right-ul">
632	<li>Rename Login Page</li>
633	<li>Login Challenge Question</li>
634	<li>reCAPTCHA</li>
635	<li>Two Factor Auth - Email</li>
636	<li>Two Factor Auth - App</li>
637	</ul>
638	</div>
639	</div>';
640	}
641
642	echo '</td>
643	</tr>
644	</table>
645	<br />
646	<div style="width:45%;background:#FFF;padding:15px; margin:auto">
647	<b>Let your friends know that you have secured your website :</b>
648	<form method="get" action="http://twitter.com/intent/tweet" id="tweet" onsubmit="return dotweet(this);">
649	<textarea name="text" cols="45" row="3" style="resize:none;">I just secured my @WordPress site against #bruteforce using @loginizer</textarea>
650	<input type="submit" value="Tweet!" class="button button-primary" onsubmit="return false;" id="twitter-btn" style="margin-top:20px;"/>
651	</form>
652
653	</div>
654	<br />
655
656	<script>
657	function dotweet(ele){
658	window.open(jQuery("#"+ele.id).attr("action")+"?"+jQuery("#"+ele.id).serialize(), "_blank", "scrollbars=no, menubar=no, height=400, width=500, resizable=yes, toolbar=no, status=no");
659	return false;
660	}
661	</script>
662
663	<hr />
664	<a href="http://loginizer.com" target="_blank">Loginizer</a> v'.LOGINIZER_VERSION.'. You can report any bugs <a href="http://wordpress.org/support/plugin/loginizer" target="_blank">here</a>.
665
666	</div>
667	</div>
668	</div>
669	</div>';
670
671	}
672
673	// The Loginizer Admin Options Page
674	function loginizer_page_dashboard(){
675
676	global $loginizer, $lz_error, $lz_env;
677
678	// Is there a license key ?
679	if(isset($_POST['save_lz'])){
680
681	$license = lz_optpost('lz_license');
682
683	// Check if its a valid license
684	if(empty($license)){
685	$lz_error['lic_invalid'] = __('The license key was not submitted', 'loginizer');
686	return loginizer_page_dashboard_T();
687	}
688
689	$resp = wp_remote_get(LOGINIZER_API.'license.php?license='.$license);
690
691	if(is_array($resp)){
692	$json = json_decode($resp['body'], true);
693	//print_r($json);
694	}
695
696	// Save the License
697	if(empty($json)){
698
699	$lz_error['lic_invalid'] = __('The license key is invalid', 'loginizer');
700	return loginizer_page_dashboard_T();
701
702	}else{
703
704	update_option('loginizer_license', $json);
705
706	// Mark as saved
707	$GLOBALS['lz_saved'] = true;
708	}
709
710	}
711
712	loginizer_page_dashboard_T();
713
714	}
715
716	// The Loginizer Admin Options Page - THEME
717	function loginizer_page_dashboard_T(){
718
719	global $loginizer, $lz_error, $lz_env;
720
721	loginizer_page_header('Loginizer Dashboard');
722	?>
723	<style>
724	.welcome-panel{
725	margin: 0px;
726	padding: 10px;
727	}
728
729	input[type="text"], textarea, select {
730	width: 70%;
731	}
732
733	.form-table label{
734	font-weight:bold;
735	}
736
737	.exp{
738	font-size:12px;
739	}
740	</style>
741
742	<?php
743	echo '<script src="http://api.loginizer.com/'.(defined('LOGINIZER_PREMIUM') ? 'news_security.js' : 'news.js').'"></script><br>';
744
745	// Saved ?
746	if(!empty($GLOBALS['lz_saved'])){
747	echo '<div id="message" class="updated"><p>'. __('The settings were saved successfully', 'loginizer'). '</p></div><br />';
748	}
749
750	// Any errors ?
751	if(!empty($lz_error)){
752	lz_report_error($lz_error);echo '<br />';
753	}
754
755	?>
756
757	<div class="postbox">
758
759	<button class="handlediv button-link" aria-expanded="true" type="button">
760	<span class="screen-reader-text">Toggle panel: Getting Started</span>
761	<span class="toggle-indicator" aria-hidden="true"></span>
762	</button>
763
764	<h2 class="hndle ui-sortable-handle">
765	<span><?php echo __('Getting Started', 'loginizer'); ?></span>
766	</h2>
767
768	<div class="inside">
769
770	<form action="" method="post" enctype="multipart/form-data">
771	<?php wp_nonce_field('loginizer-options'); ?>
772	<table class="form-table">
773	<tr>
774	<td scope="row" valign="top" colspan="2" style="line-height:150%">
775	<i>Welcome to Loginizer Security. By default the <b>Brute Force Protection</b> is immediately enabled. You should start by going over the default settings and tweaking them as per your needs.</i>
776	<?php
777	if(defined('LOGINIZER_PREMIUM')){
778	echo '<br><i>In the Premium version of Loginizer you have many more features. We recommend you enable features like <b>reCAPTCHA, Two Factor Auth or Email based PasswordLess</b> login. These features will improve your websites security.</i>';
779	}
780	?>
781	</td>
782	</tr>
783	</table>
784	</form>
785
786	</div>
787	</div>
788
789	<div class="postbox">
790
791	<button class="handlediv button-link" aria-expanded="true" type="button">
792	<span class="screen-reader-text">Toggle panel: System Information</span>
793	<span class="toggle-indicator" aria-hidden="true"></span>
794	</button>
795
796	<h2 class="hndle ui-sortable-handle">
797	<span><?php echo __('System Information', 'loginizer'); ?></span>
798	</h2>
799
800	<div class="inside">
801
802	<form action="" method="post" enctype="multipart/form-data">
803	<?php wp_nonce_field('loginizer-options'); ?>
804	<table class="wp-list-table fixed striped users" cellspacing="1" border="0" width="95%" cellpadding="10" align="center">
805	<?php
806	echo '
807	<tr>
808	<th align="left" width="25%">'.__('Loginizer Version', 'loginizer').'</th>
809	<td>'.LOGINIZER_VERSION.(defined('LOGINIZER_PREMIUM') ? ' (Security PRO Version)' : '').'</td>
810	</tr>';
811
812	if(defined('LOGINIZER_PREMIUM')){
813	echo '
814	<tr>
815	<th align="left" valign="top">'.__('Loginizer License', 'loginizer').'</th>
816	<td align="left">
817	'.(empty($loginizer['license']) ? '<span style="color:red">Unlicensed</span>    ' : '').'
818	<input type="text" name="lz_license" value="'.(empty($loginizer['license']) ? '' : $loginizer['license']['license']).'" size="30" placeholder="e.g. WXCSE-SFJJX-XXXXX-AAAAA-BBBBB" style="width:300px;" />
819	<input name="save_lz" class="button button-primary" value="Update License" type="submit" />';
820
821	if(!empty($loginizer['license'])){
822
823	$expires = $loginizer['license']['expires'];
824	$expires = substr($expires, 0, 4).'/'.substr($expires, 4, 2).'/'.substr($expires, 6);
825
826	echo '<div style="margin-top:10px;">License Active : '.(empty($loginizer['license']['active']) ? '<span style="color:red">No</span>' : 'Yes').'
827	License Expires : '.($loginizer['license']['expires'] <= date('Ymd') ? '<span style="color:red">'.$expires.'</span>' : $expires).'
828	</div>';
829	}
830
831
832	echo
833	'</td>
834	</tr>';
835	}
836
837	echo '<tr>
838	<th align="left">'.__('URL', 'loginizer').'</th>
839	<td>'.get_site_url().'</td>
840	</tr>
841	<tr>
842	<th align="left">'.__('Path', 'loginizer').'</th>
843	<td>'.ABSPATH.'</td>
844	</tr>
845	<tr>
846	<th align="left">'.__('Server\'s IP Address', 'loginizer').'</th>
847	<td>'.$_SERVER['SERVER_ADDR'].'</td>
848	</tr>
849	<tr>
850	<th align="left">'.__('Your IP Address', 'loginizer').'</th>
851	<td>'.$_SERVER['REMOTE_ADDR'].'</td>
852	</tr>
853	<tr>
854	<th align="left">'.__('wp-config.php is writable', 'loginizer').'</th>
855	<td>'.(is_writable(ABSPATH.'/wp-config.php') ? '<span style="color:red">Yes</span>' : '<span style="color:green">No</span>').'</td>
856	</tr>';
857
858	if(file_exists(ABSPATH.'/.htaccess')){
859	echo '
860	<tr>
861	<th align="left">'.__('.htaccess is writable', 'loginizer').'</th>
862	<td>'.(is_writable(ABSPATH.'/.htaccess') ? '<span style="color:red">Yes</span>' : '<span style="color:green">No</span>').'</td>
863	</tr>';
864
865	}
866
867	?>
868	</table>
869	</form>
870
871	</div>
872	</div>
873
874	<div id="" class="postbox">
875
876	<button class="handlediv button-link" aria-expanded="true" type="button">
877	<span class="screen-reader-text">Toggle panel: File Permissions</span>
878	<span class="toggle-indicator" aria-hidden="true"></span>
879	</button>
880
881	<h2 class="hndle ui-sortable-handle">
882	<span><?php echo __('File Permissions', 'loginizer'); ?></span>
883	</h2>
884
885	<div class="inside">
886
887	<form action="" method="post" enctype="multipart/form-data">
888	<?php wp_nonce_field('loginizer-options'); ?>
889	<table class="wp-list-table fixed striped users" border="0" width="95%" cellpadding="10" align="center">
890	<?php
891
892	echo '
893	<tr>
894	<th style="background:#EFEFEF;">'.__('Relative Path', 'loginizer').'</th>
895	<th style="width:10%; background:#EFEFEF;">'.__('Suggested', 'loginizer').'</th>
896	<th style="width:10%; background:#EFEFEF;">'.__('Actual', 'loginizer').'</th>
897	</tr>';
898
899	$wp_content = basename(dirname(dirname(dirname(__FILE__))));
900
901	$files_to_check = array('/' => '0755',
902	'/wp-admin' => '0755',
903	'/wp-includes' => '0755',
904	'/wp-config.php' => '0444',
905	'/'.$wp_content => '0755',
906	'/'.$wp_content.'/themes' => '0755',
907	'/'.$wp_content.'/plugins' => '0755',
908	'.htaccess' => '0444');
909
910	$root = ABSPATH;
911
912	foreach($files_to_check as $k => $v){
913
914	$path = $root.'/'.$k;
915	$stat = @stat($path);
916	$suggested = $v;
917	$actual = substr(sprintf('%o', $stat['mode']), -4);
918
919	echo '
920	<tr>
921	<td>'.$k.'</td>
922	<td>'.$suggested.'</td>
923	<td><span '.($suggested != $actual ? 'style="color: red;"' : '').'>'.$actual.'</span></td>
924	</tr>';
925
926	}
927
928	?>
929	</table>
930	</form>
931
932	</div>
933	</div>
934
935	<?php
936
937	loginizer_page_footer();
938
939	}
940
941	// The Loginizer Admin Options Page
942	function loginizer_page_brute_force(){
943
944	global $wpdb, $wp_roles, $loginizer;
945
946	if(!current_user_can('manage_options')){
947	wp_die('Sorry, but you do not have permissions to change settings.');
948	}
949
950	/* Make sure post was from this page */
951	if(count($_POST) > 0){
952	check_admin_referer('loginizer-options');
953	}
954
955	// BEGIN THEME
956	loginizer_page_header('Loginizer - Brute Force Settings');
957
958	// Load the blacklist and whitelist
959	$loginizer['blacklist'] = get_option('loginizer_blacklist');
960	$loginizer['whitelist'] = get_option('loginizer_whitelist');
961
962	if(isset($_POST['save_lz'])){
963
964	$max_retries = (int) lz_optpost('max_retries');
965	$lockout_time = (int) lz_optpost('lockout_time');
966	$max_lockouts = (int) lz_optpost('max_lockouts');
967	$lockouts_extend = (int) lz_optpost('lockouts_extend');
968	$reset_retries = (int) lz_optpost('reset_retries');
969	$notify_email = (int) lz_optpost('notify_email');
970
971	$lockout_time = $lockout_time * 60;
972	$lockouts_extend = $lockouts_extend * 60 * 60;
973	$reset_retries = $reset_retries * 60 * 60;
974
975	if(empty($error)){
976
977	$option['max_retries'] = $max_retries;
978	$option['lockout_time'] = $lockout_time;
979	$option['max_lockouts'] = $max_lockouts;
980	$option['lockouts_extend'] = $lockouts_extend;
981	$option['reset_retries'] = $reset_retries;
982	$option['notify_email'] = $notify_email;
983
984	// Save the options
985	update_option('loginizer_options', $option);
986
987	$saved = true;
988
989	}else{
990	lz_report_error($error);
991	}
992
993	if(!empty($notice)){
994	lz_report_notice($notice);
995	}
996
997	if(!empty($saved)){
998	echo '<div id="message" class="updated"><p>'
999	. __('The settings were saved successfully', 'loginizer')
1000	. '</p></div><br />';
1001	}
1002
1003	}
1004
1005	// Delete a Blackist IP range
1006	if(isset($_GET['bdelid'])){
1007
1008	$delid = (int) lz_optreq('bdelid');
1009
1010	// Unset and save
1011	$blacklist = $loginizer['blacklist'];
1012	unset($blacklist[$delid]);
1013	update_option('loginizer_blacklist', $blacklist);
1014
1015	echo '<div id="message" class="updated fade"><p>'
1016	. __('The Blacklist IP range has been deleted successfully', 'loginizer')
1017	. '</p></div><br />';
1018
1019	}
1020
1021	// Delete a Whitelist IP range
1022	if(isset($_GET['delid'])){
1023
1024	$delid = (int) lz_optreq('delid');
1025
1026	// Unset and save
1027	$whitelist = $loginizer['whitelist'];
1028	unset($whitelist[$delid]);
1029	update_option('loginizer_whitelist', $whitelist);
1030
1031	echo '<div id="message" class="updated fade"><p>'
1032	. __('The Whitelist IP range has been deleted successfully', 'loginizer')
1033	. '</p></div><br />';
1034
1035	}
1036
1037	if(isset($_POST['blacklist_iprange'])){
1038
1039	$start_ip = lz_optpost('start_ip');
1040	$end_ip = lz_optpost('end_ip');
1041
1042	if(empty($start_ip)){
1043	$error[] = 'Please enter the Start IP';
1044	}
1045
1046	// If no end IP we consider only 1 IP
1047	if(empty($end_ip)){
1048	$end_ip = $start_ip;
1049	}
1050
1051	if(!lz_valid_ip($start_ip)){
1052	$error[] = 'Please provide a valid start IP';
1053	}
1054
1055	if(!lz_valid_ip($end_ip)){
1056	$error[] = 'Please provide a valid end IP';
1057	}
1058
1059	// Regular ranges will work
1060	if(ip2long($start_ip) > ip2long($end_ip)){
1061
1062	// BUT, if 0.0.0.1 - 255.255.255.255 is given, it will not work
1063	if(ip2long($start_ip) >= 0 && ip2long($end_ip) < 0){
1064	// This is right
1065	}else{
1066	$error[] = 'The End IP cannot be smaller than the Start IP';
1067	}
1068
1069	}
1070
1071	if(empty($error)){
1072
1073	$blacklist = $loginizer['blacklist'];
1074
1075	foreach($blacklist as $k => $v){
1076
1077	// This is to check if there is any other range exists with the same Start or End IP
1078	if(( ip2long($start_ip) <= ip2long($v['start']) && ip2long($v['start']) <= ip2long($end_ip) )
1079	\|\| ( ip2long($start_ip) <= ip2long($v['end']) && ip2long($v['end']) <= ip2long($end_ip) )
1080	){
1081	$error[] = 'The Start IP or End IP submitted conflicts with an existing IP range !';
1082	break;
1083	}
1084
1085	// This is to check if there is any other range exists with the same Start IP
1086	if(ip2long($v['start']) <= ip2long($start_ip) && ip2long($start_ip) <= ip2long($v['end'])){
1087	$error[] = 'The Start IP is present in an existing range !';
1088	break;
1089	}
1090
1091	// This is to check if there is any other range exists with the same End IP
1092	if(ip2long($v['start']) <= ip2long($end_ip) && ip2long($end_ip) <= ip2long($v['end'])){
1093	$error[] = 'The End IP is present in an existing range!';
1094	break;
1095	}
1096
1097	}
1098
1099	$newid = ( empty($blacklist) ? 0 : max(array_keys($blacklist)) ) + 1;
1100
1101	if(empty($error)){
1102
1103	$blacklist[$newid] = array();
1104	$blacklist[$newid]['start'] = $start_ip;
1105	$blacklist[$newid]['end'] = $end_ip;
1106	$blacklist[$newid]['time'] = time();
1107
1108	update_option('loginizer_blacklist', $blacklist);
1109
1110	echo '<div id="message" class="updated fade"><p>'
1111	. __('Blacklist IP range added successfully', 'loginizer')
1112	. '</p></div><br />';
1113
1114	}
1115
1116	}
1117
1118	if(!empty($error)){
1119	lz_report_error($error);echo '<br />';
1120	}
1121
1122	}
1123
1124	if(isset($_POST['whitelist_iprange'])){
1125
1126	$start_ip = lz_optpost('start_ip_w');
1127	$end_ip = lz_optpost('end_ip_w');
1128
1129	if(empty($start_ip)){
1130	$error[] = 'Please enter the Start IP';
1131	}
1132
1133	// If no end IP we consider only 1 IP
1134	if(empty($end_ip)){
1135	$end_ip = $start_ip;
1136	}
1137
1138	if(!lz_valid_ip($start_ip)){
1139	$error[] = 'Please provide a valid start IP';
1140	}
1141
1142	if(!lz_valid_ip($end_ip)){
1143	$error[] = 'Please provide a valid end IP';
1144	}
1145
1146	if(ip2long($start_ip) > ip2long($end_ip)){
1147
1148	// BUT, if 0.0.0.1 - 255.255.255.255 is given, it will not work
1149	if(ip2long($start_ip) >= 0 && ip2long($end_ip) < 0){
1150	// This is right
1151	}else{
1152	$error[] = 'The End IP cannot be smaller than the Start IP';
1153	}
1154
1155	}
1156
1157	if(empty($error)){
1158
1159	$whitelist = $loginizer['whitelist'];
1160
1161	foreach($whitelist as $k => $v){
1162
1163	// This is to check if there is any other range exists with the same Start or End IP
1164	if(( ip2long($start_ip) <= ip2long($v['start']) && ip2long($v['start']) <= ip2long($end_ip) )
1165	\|\| ( ip2long($start_ip) <= ip2long($v['end']) && ip2long($v['end']) <= ip2long($end_ip) )
1166	){
1167	$error[] = 'The Start IP or End IP submitted conflicts with an existing IP range !';
1168	break;
1169	}
1170
1171	// This is to check if there is any other range exists with the same Start IP
1172	if(ip2long($v['start']) <= ip2long($start_ip) && ip2long($start_ip) <= ip2long($v['end'])){
1173	$error[] = 'The Start IP is present in an existing range !';
1174	break;
1175	}
1176
1177	// This is to check if there is any other range exists with the same End IP
1178	if(ip2long($v['start']) <= ip2long($end_ip) && ip2long($end_ip) <= ip2long($v['end'])){
1179	$error[] = 'The End IP is present in an existing range!';
1180	break;
1181	}
1182
1183	}
1184
1185	$newid = ( empty($whitelist) ? 0 : max(array_keys($whitelist)) ) + 1;
1186
1187	if(empty($error)){
1188
1189	$whitelist[$newid] = array();
1190	$whitelist[$newid]['start'] = $start_ip;
1191	$whitelist[$newid]['end'] = $end_ip;
1192	$whitelist[$newid]['time'] = time();
1193
1194	update_option('loginizer_whitelist', $whitelist);
1195
1196	echo '<div id="message" class="updated fade"><p>'
1197	. __('Whitelist IP range added successfully', 'loginizer')
1198	. '</p></div><br />';
1199
1200	}
1201
1202	}
1203
1204	if(!empty($error)){
1205	lz_report_error($error);echo '<br />';
1206	}
1207	}
1208
1209	// Get the logs
1210	$result = array();
1211	$result = lz_selectquery("SELECT * FROM `".$wpdb->prefix."loginizer_logs` ORDER BY `time` DESC LIMIT 0, 15;", 1);
1212	//print_r($result);
1213
1214	// Reload the settings
1215	$loginizer['blacklist'] = get_option('loginizer_blacklist');
1216	$loginizer['whitelist'] = get_option('loginizer_whitelist');
1217
1218	?>
1219
1220	<div id="" class="postbox">
1221
1222	<button class="handlediv button-link" aria-expanded="true" type="button">
1223	<span class="screen-reader-text">Toggle panel: Failed Login Attempts Logs</span>
1224	<span class="toggle-indicator" aria-hidden="true"></span>
1225	</button>
1226
1227	<h2 class="hndle ui-sortable-handle">
1228	<?php echo __('<span>Failed Login Attempts Logs</span>   (Past '.($loginizer['reset_retries']/60/60).' hours)','loginizer'); ?>
1229	</h2>
1230
1231	<div class="inside">
1232	<table class="wp-list-table widefat fixed users" border="0">
1233	<tr>
1234	<th scope="row" valign="top" style="background:#EFEFEF;"><?php echo __('IP','loginizer'); ?></th>
1235	<th scope="row" valign="top" style="background:#EFEFEF;"><?php echo __('Last Failed Attempt (DD/MM/YYYY)','loginizer'); ?></th>
1236	<th scope="row" valign="top" style="background:#EFEFEF;"><?php echo __('Failed Attempts Count','loginizer'); ?></th>
1237	<th scope="row" valign="top" style="background:#EFEFEF;" width="150"><?php echo __('Lockouts Count','loginizer'); ?></th>
1238	</tr>
1239	<?php
1240	if(empty($result)){
1241	echo '
1242	<tr>
1243	<td colspan="4">
1244	No Logs. You will see logs about failed login attempts here.
1245	</td>
1246	</tr>';
1247	}else{
1248	foreach($result as $ik => $iv){
1249	$status_button = (!empty($iv['status']) ? 'disable' : 'enable');
1250	echo '
1251	<tr>
1252	<td>
1253	'.$iv['ip'].'
1254	</td>
1255	<td>
1256	'.date('d/m/Y H:i:s', $iv['time']).'
1257	</td>
1258	<td>
1259	'.$iv['count'].'
1260	</td>
1261	<td>
1262	'.$iv['lockout'].'
1263	</td>
1264	</tr>';
1265	}
1266	}
1267	?>
1268	</table>
1269	</div>
1270	</div>
1271	<br />
1272
1273	<div id="" class="postbox">
1274
1275	<button class="handlediv button-link" aria-expanded="true" type="button">
1276	<span class="screen-reader-text">Toggle panel: Brute Force Settings</span>
1277	<span class="toggle-indicator" aria-hidden="true"></span>
1278	</button>
1279
1280	<h2 class="hndle ui-sortable-handle">
1281	<span><?php echo __('Brute Force Settings', 'loginizer'); ?></span>
1282	</h2>
1283
1284	<div class="inside">
1285
1286	<form action="" method="post" enctype="multipart/form-data">
1287	<?php wp_nonce_field('loginizer-options'); ?>
1288	<table class="form-table">
1289	<tr>
1290	<th scope="row" valign="top"><label for="max_retries"><?php echo __('Max Retries','loginizer'); ?></label></th>
1291	<td>
1292	<input type="text" size="3" value="<?php echo lz_optpost('max_retries', $loginizer['max_retries']); ?>" name="max_retries" id="max_retries" /> <?php echo __('Maximum failed attempts allowed before lockout','loginizer'); ?> <br />
1293	</td>
1294	</tr>
1295	<tr>
1296	<th scope="row" valign="top"><label for="lockout_time"><?php echo __('Lockout Time','loginizer'); ?></label></th>
1297	<td>
1298	<input type="text" size="3" value="<?php echo (!empty($lockout_time) ? $lockout_time : $loginizer['lockout_time']) / 60; ?>" name="lockout_time" id="lockout_time" /> <?php echo __('minutes','loginizer'); ?> <br />
1299	</td>
1300	</tr>
1301	<tr>
1302	<th scope="row" valign="top"><label for="max_lockouts"><?php echo __('Max Lockouts','loginizer'); ?></label></th>
1303	<td>
1304	<input type="text" size="3" value="<?php echo lz_optpost('max_lockouts', $loginizer['max_lockouts']); ?>" name="max_lockouts" id="max_lockouts" /> <?php echo __('','loginizer'); ?> <br />
1305	</td>
1306	</tr>
1307	<tr>
1308	<th scope="row" valign="top"><label for="lockouts_extend"><?php echo __('Extend Lockout','loginizer'); ?></label></th>
1309	<td>
1310	<input type="text" size="3" value="<?php echo (!empty($lockouts_extend) ? $lockouts_extend : $loginizer['lockouts_extend']) / 60 / 60; ?>" name="lockouts_extend" id="lockouts_extend" /> <?php echo __('hours. Extend Lockout time after Max Lockouts','loginizer'); ?> <br />
1311	</td>
1312	</tr>
1313	<tr>
1314	<th scope="row" valign="top"><label for="reset_retries"><?php echo __('Reset Retries','loginizer'); ?></label></th>
1315	<td>
1316	<input type="text" size="3" value="<?php echo (!empty($reset_retries) ? $reset_retries : $loginizer['reset_retries']) / 60 / 60; ?>" name="reset_retries" id="reset_retries" /> <?php echo __('hours','loginizer'); ?> <br />
1317	</td>
1318	</tr>
1319	<tr>
1320	<th scope="row" valign="top"><label for="notify_email"><?php echo __('Email Notification','loginizer'); ?></label></th>
1321	<td>
1322	<?php echo __('after ','loginizer'); ?>
1323	<input type="text" size="3" value="<?php echo (!empty($notify_email) ? $notify_email : $loginizer['notify_email']); ?>" name="notify_email" id="notify_email" /> <?php echo __('lockouts <br />0 to disable email notifications','loginizer'); ?>
1324	</td>
1325	</tr>
1326	</table><br />
1327	<input name="save_lz" class="button button-primary action" value="<?php echo __('Save Settings','loginizer'); ?>" type="submit" />
1328	</form>
1329
1330	</div>
1331	</div>
1332	<br />
1333
1334	<div id="" class="postbox">
1335
1336	<button class="handlediv button-link" aria-expanded="true" type="button">
1337	<span class="screen-reader-text">Toggle panel: Blacklist IP</span>
1338	<span class="toggle-indicator" aria-hidden="true"></span>
1339	</button>
1340
1341	<h2 class="hndle ui-sortable-handle">
1342	<span><?php echo __('Blacklist IP','loginizer'); ?></span>
1343	</h2>
1344
1345	<div class="inside">
1346
1347	<?php echo __('Enter the IP you want to blacklist from login','loginizer'); ?>
1348
1349	<form action="" method="post">
1350	<?php wp_nonce_field('loginizer-options'); ?>
1351	<table class="form-table">
1352	<tr>
1353	<th scope="row" valign="top"><label for="start_ip"><?php echo __('Start IP','loginizer'); ?></label></th>
1354	<td>
1355	<input type="text" size="25" value="<?php echo(lz_optpost('start_ip')); ?>" name="start_ip" id="start_ip"/> <?php echo __('Start IP of the range','loginizer'); ?> <br />
1356	</td>
1357	</tr>
1358	<tr>
1359	<th scope="row" valign="top"><label for="end_ip"><?php echo __('End IP (Optional)','loginizer'); ?></label></th>
1360	<td>
1361	<input type="text" size="25" value="<?php echo(lz_optpost('end_ip')); ?>" name="end_ip" id="end_ip"/> <?php echo __('End IP of the range. <br />If you want to blacklist single IP leave this field blank.','loginizer'); ?> <br />
1362	</td>
1363	</tr>
1364	</table><br />
1365	<input name="blacklist_iprange" class="button button-primary action" value="<?php echo __('Add Blacklist IP Range','loginizer'); ?>" type="submit" />
1366	</form>
1367	</div>
1368
1369	<table class="wp-list-table fixed striped users" border="0" width="95%" cellpadding="10" align="center">
1370	<tr>
1371	<th scope="row" valign="top" style="background:#EFEFEF;"><?php echo __('Start IP','loginizer'); ?></th>
1372	<th scope="row" valign="top" style="background:#EFEFEF;"><?php echo __('End IP','loginizer'); ?></th>
1373	<th scope="row" valign="top" style="background:#EFEFEF;"><?php echo __('Date (DD/MM/YYYY)','loginizer'); ?></th>
1374	<th scope="row" valign="top" style="background:#EFEFEF;" width="100"><?php echo __('Options','loginizer'); ?></th>
1375	</tr>
1376	<?php
1377	if(empty($loginizer['blacklist'])){
1378	echo '
1379	<tr>
1380	<td colspan="4">
1381	No Blacklist IPs. You will see blacklisted IP ranges here.
1382	</td>
1383	</tr>';
1384	}else{
1385	foreach($loginizer['blacklist'] as $ik => $iv){
1386	echo '
1387	<tr>
1388	<td>
1389	'.$iv['start'].'
1390	</td>
1391	<td>
1392	'.$iv['end'].'
1393	</td>
1394	<td>
1395	'.date('d/m/Y', $iv['time']).'
1396	</td>
1397	<td>
1398	<a class="submitdelete" href="admin.php?page=loginizer_brute_force&bdelid='.$ik.'" onclick="return confirm(\'Are you sure you want to delete this IP range ?\')">Delete</a>
1399	</td>
1400	</tr>';
1401	}
1402	}
1403	?>
1404	</table>
1405	<br />
1406
1407	</div>
1408
1409	<br />
1410
1411	<div id="" class="postbox">
1412
1413	<button class="handlediv button-link" aria-expanded="true" type="button">
1414	<span class="screen-reader-text">Toggle panel: Whitelist IP</span>
1415	<span class="toggle-indicator" aria-hidden="true"></span>
1416	</button>
1417
1418	<h2 class="hndle ui-sortable-handle">
1419	<span><?php echo __('Whitelist IP', 'loginizer'); ?></span>
1420	</h2>
1421
1422	<div class="inside">
1423
1424	<?php echo __('Enter the IP you want to whitelist for login','loginizer'); ?>
1425	<form action="" method="post">
1426	<?php wp_nonce_field('loginizer-options'); ?>
1427	<table class="form-table">
1428	<tr>
1429	<th scope="row" valign="top"><label for="start_ip_w"><?php echo __('Start IP','loginizer'); ?></label></th>
1430	<td>
1431	<input type="text" size="25" value="<?php echo(lz_optpost('start_ip_w')); ?>" name="start_ip_w" id="start_ip_w"/> <?php echo __('Start IP of the range','loginizer'); ?> <br />
1432	</td>
1433	</tr>
1434	<tr>
1435	<th scope="row" valign="top"><label for="end_ip_w"><?php echo __('End IP (Optional)','loginizer'); ?></label></th>
1436	<td>
1437	<input type="text" size="25" value="<?php echo(lz_optpost('end_ip_w')); ?>" name="end_ip_w" id="end_ip_w"/> <?php echo __('End IP of the range. <br />If you want to whitelist single IP leave this field blank.','loginizer'); ?> <br />
1438	</td>
1439	</tr>
1440	</table><br />
1441	<input name="whitelist_iprange" class="button button-primary action" value="<?php echo __('Add Whitelist IP Range','loginizer'); ?>" type="submit" />
1442	</form>
1443	</div>
1444
1445	<table class="wp-list-table fixed striped users" border="0" width="95%" cellpadding="10" align="center">
1446	<tr>
1447	<th scope="row" valign="top" style="background:#EFEFEF;"><?php echo __('Start IP','loginizer'); ?></th>
1448	<th scope="row" valign="top" style="background:#EFEFEF;"><?php echo __('End IP','loginizer'); ?></th>
1449	<th scope="row" valign="top" style="background:#EFEFEF;"><?php echo __('Date (DD/MM/YYYY)','loginizer'); ?></th>
1450	<th scope="row" valign="top" style="background:#EFEFEF;" width="100"><?php echo __('Options','loginizer'); ?></th>
1451	</tr>
1452	<?php
1453	if(empty($loginizer['whitelist'])){
1454	echo '
1455	<tr>
1456	<td colspan="4">
1457	No Whitelist IPs. You will see whitelisted IP ranges here.
1458	</td>
1459	</tr>';
1460	}else{
1461	foreach($loginizer['whitelist'] as $ik => $iv){
1462	echo '
1463	<tr>
1464	<td>
1465	'.$iv['start'].'
1466	</td>
1467	<td>
1468	'.$iv['end'].'
1469	</td>
1470	<td>
1471	'.date('d/m/Y', $iv['time']).'
1472	</td>
1473	<td>
1474	<a class="submitdelete" href="admin.php?page=loginizer_brute_force&delid='.$ik.'" onclick="return confirm(\'Are you sure you want to delete this IP range ?\')">Delete</a>
1475	</td>
1476	</tr>';
1477	}
1478	}
1479	?>
1480	</table>
1481	<br />
1482
1483	</div>
1484
1485	<?php
1486
1487	loginizer_page_footer();
1488
1489	}
1490
1491
1492	// Sorry to see you going
1493	register_uninstall_hook(LOGINIZER_FILE, 'loginizer_deactivation');
1494
1495	function loginizer_deactivation(){
1496
1497	global $wpdb;
1498
1499	$sql = array();
1500	$sql[] = "DROP TABLE ".$wpdb->prefix."loginizer_logs;";
1501
1502	foreach($sql as $sk => $sv){
1503	$wpdb->query($sv);
1504	}
1505
1506	delete_option('loginizer_version');
1507	delete_option('loginizer_options');
1508	delete_option('loginizer_last_reset');
1509	delete_option('loginizer_whitelist');
1510	delete_option('loginizer_blacklist');
1511
1512	}
1513
1514