← All changes | init.php +4135 -348 2.0.7 → 1.6.6 View file →

		@@ -4,9 +4,9 @@
4	4	echo 'You are not allowed to access this page directly.';
5	5	exit;
6	6	}
7	7
8		-define('LOGINIZER_VERSION', '2.0.7');
	8	+define('LOGINIZER_VERSION', '1.6.6');
9	9	define('LOGINIZER_DIR', dirname(LOGINIZER_FILE));
10	10	define('LOGINIZER_URL', plugins_url('', LOGINIZER_FILE));
11	11	define('LOGINIZER_PRO_URL', 'https://loginizer.com/features#compare');
12	12	define('LOGINIZER_PRICING_URL', 'https://loginizer.com/pricing');
		@@ -24,9 +24,9 @@
24	24
25	25	$sql = array();
26	26
27	27	$sql[] = "DROP TABLE IF EXISTS `".$wpdb->prefix."loginizer_logs`";
28		-
	28	+
29	29	$sql[] = "CREATE TABLE `".$wpdb->prefix."loginizer_logs` (
30	30	`username` varchar(255) NOT NULL DEFAULT '',
31	31	`time` int(10) NOT NULL DEFAULT '0',
32	32	`count` int(10) NOT NULL DEFAULT '0',
		@@ -45,14 +45,9 @@
45	45	add_option('loginizer_last_reset', 0);
46	46	add_option('loginizer_whitelist', array());
47	47	add_option('loginizer_blacklist', array());
48	48	add_option('loginizer_2fa_whitelist', array());
49		-
50		- // TODO:: REMOVE THIS AFTER MARCH 2025
51		- $softwp_upgrade = get_option('loginizer_softwp_upgrade', 0);
52		- if(!defined('SITEPAD') && empty($softwp_upgrade)){
53		- loginizer_check_softaculous();
54		- }
	49	+
55	50	}
56	51
57	52	/**
58	53	* Updates the database structure for Loginizer
		@@ -89,9 +84,9 @@
89	84	// Trick the following if conditions to not run
90	85	$version = (int) str_replace('.', '', LOGINIZER_VERSION);
91	86
92	87	}
93		-
	88	+
94	89	// Is it less than 1.0.1 ?
95	90	if($version < 101){
96	91
97	92	// TODO : GET the existing settings
		@@ -187,38 +182,11 @@
187	182	$wpdb->query("ALTER TABLE ".$wpdb->prefix."loginizer_logs ADD `url` VARCHAR(255) NOT NULL DEFAULT '' AFTER `ip`;");
188	183
189	184	}
190	185
191		- // Setting alignment to left in social login ?
192		- if($version < 201){
193		- $social_settings = get_option('loginizer_social_settings', []);
194		-
195		- if(!empty($social_settings)){
196		- if(!empty($social_settings['login']) && (!empty($social_settings['login']['login_form']) || !empty($social_settings['login']['registration_form']))){
197		- $social_settings['login']['button_alignment'] = 'left';
198		- }
199		-
200		- if(!empty($social_settings['woocommerce']) && (!empty($social_settings['woocommmerce']['login_form']) || !empty($social_settings['woocommerce']['registration_form']))){
201		- $social_settings['woocommerce']['button_alignment'] = 'left';
202		- }
203		-
204		- if(!empty($social_settings['comment']) && !empty($social_settings['comment']['enable_buttons'])){
205		- $social_settings['comment']['button_alignment'] = 'left';
206		- }
207		-
208		- update_option('loginizer_social_settings', $social_settings);
209		- }
210		- }
211		-
212	186	// Save the new Version
213	187	update_option('loginizer_version', LOGINIZER_VERSION);
214	188
215		- // TODO:: REMOVE THIS AFTER MARCH 2025
216		- $softwp_upgrade = get_option('loginizer_softwp_upgrade', 0);
217		- if(!defined('SITEPAD') && empty($softwp_upgrade)){
218		- loginizer_check_softaculous();
219		- }
220		-
221	189	// In Sitepad Math Captcha is enabled by default
222	190	if(defined('SITEPAD') && get_option('loginizer_captcha') === false){
223	191	$option['captcha_no_google'] = 1;
224	192	add_option('loginizer_captcha', $option);
		@@ -235,13 +203,11 @@
235	203	global $loginizer;
236	204
237	205	// Check if the installed version is outdated
238	206	loginizer_update_check();
239		-
	207	+
240	208	// Set the array
241		- if(empty($loginizer)){
242		- $loginizer = array();
243		- }
	209	+ $loginizer = array();
244	210
245	211	$loginizer['prefix'] = !defined('SITEPAD') ? 'Loginizer ' : 'SitePad ';
246	212	$loginizer['app'] = !defined('SITEPAD') ? 'WordPress' : 'SitePad';
247	213	$loginizer['login_basename'] = !defined('SITEPAD') ? 'wp-login.php' : 'login.php';
		@@ -260,28 +226,44 @@
260	226	$loginizer['max_lockouts'] = empty($options['max_lockouts']) ? 5 : $options['max_lockouts'];
261	227	$loginizer['lockouts_extend'] = empty($options['lockouts_extend']) ? 86400 : $options['lockouts_extend']; // 24 hours
262	228	$loginizer['reset_retries'] = empty($options['reset_retries']) ? 86400 : $options['reset_retries']; // 24 hours
263	229	$loginizer['notify_email'] = empty($options['notify_email']) ? 0 : $options['notify_email'];
264		- $loginizer['notify_email_address'] = lz_is_multisite() ? get_site_option('admin_email') : get_option('admin_email');
265		- $loginizer['trusted_ips'] = empty($options['trusted_ips']) ? false : true;
266		- $loginizer['blocked_screen'] = empty($options['blocked_screen']) ? false : true;
267		- $loginizer['social_settings'] = get_option('loginizer_social_settings', []);
268	230
269		- if(!empty($options['notify_email_address'])){
270		- $loginizer['notify_email_address'] = $options['notify_email_address'];
271		- $loginizer['custom_notify_email'] = 1;
	231	+ // Default messages
	232	+ $loginizer['d_msg']['inv_userpass'] = __('Incorrect Username or Password', 'loginizer');
	233	+ $loginizer['d_msg']['ip_blacklisted'] = __('Your IP has been blacklisted', 'loginizer');
	234	+ $loginizer['d_msg']['attempts_left'] = __('attempt(s) left', 'loginizer');
	235	+ $loginizer['d_msg']['lockout_err'] = __('You have exceeded maximum login retries<br /> Please try after', 'loginizer');
	236	+ $loginizer['d_msg']['minutes_err'] = __('minute(s)', 'loginizer');
	237	+ $loginizer['d_msg']['hours_err'] = __('hour(s)', 'loginizer');
	238	+
	239	+ // Message Strings
	240	+ $loginizer['msg'] = get_option('loginizer_msg');
	241	+
	242	+ foreach($loginizer['d_msg'] as $lk => $lv){
	243	+ if(empty($loginizer['msg'][$lk])){
	244	+ $loginizer['msg'][$lk] = $loginizer['d_msg'][$lk];
	245	+ }
272	246	}
273	247
274		- // Login Success Email Notification.
275		- $loginizer['login_mail'] = get_option('loginizer_login_mail', []);
276		- add_action('init', 'loginizer_load_translation_vars', 0);
277		-
278		- $loginizer['login_mail_subject'] = empty($loginizer['login_mail']['subject']) ? '' : $loginizer['login_mail']['subject'];
279		- $loginizer['login_mail_body'] = empty($loginizer['login_mail']['body']) ? '' : $loginizer['login_mail']['body'];
280		-
	248	+ $loginizer['2fa_d_msg']['otp_app'] = __('Please enter the OTP as seen in your App', 'loginizer');
	249	+ $loginizer['2fa_d_msg']['otp_email'] = __('Please enter the OTP emailed to you', 'loginizer');
	250	+ $loginizer['2fa_d_msg']['otp_field'] = __('One Time Password', 'loginizer');
	251	+ $loginizer['2fa_d_msg']['otp_question'] = __('Please answer your security question', 'loginizer');
	252	+ $loginizer['2fa_d_msg']['otp_answer'] = __('Your Answer', 'loginizer');
	253	+
	254	+ // Message Strings
	255	+ $loginizer['2fa_msg'] = get_option('loginizer_2fa_msg');
	256	+
	257	+ foreach($loginizer['2fa_d_msg'] as $lk => $lv){
	258	+ if(empty($loginizer['2fa_msg'][$lk])){
	259	+ $loginizer['2fa_msg'][$lk] = $loginizer['2fa_d_msg'][$lk];
	260	+ }
	261	+ }
	262	+
281	263	// Load the blacklist and whitelist
282		- $loginizer['blacklist'] = get_option('loginizer_blacklist', []);
283		- $loginizer['whitelist'] = get_option('loginizer_whitelist', []);
	264	+ $loginizer['blacklist'] = get_option('loginizer_blacklist');
	265	+ $loginizer['whitelist'] = get_option('loginizer_whitelist');
284	266	$loginizer['2fa_whitelist'] = get_option('loginizer_2fa_whitelist');
285	267
286	268	// It should not be false
287	269	if(empty($loginizer['2fa_whitelist'])){
		@@ -289,14 +271,8 @@
289	271	}
290	272
291	273	// When was the database cleared last time
292	274	$loginizer['last_reset'] = get_option('loginizer_last_reset');
293		-
294		- if(!isset($loginizer['ultimate-member-active'])){
295		- $um_is_active = in_array('ultimate-member/ultimate-member.php', apply_filters('active_plugins', get_option('active_plugins', [])));
296		-
297		- $loginizer['ultimate-member-active'] = !empty($um_is_active) ? true : false;
298		- }
299	275
300	276	//print_r($loginizer);
301	277
302	278	// Clear retries
		@@ -332,45 +308,279 @@
332	308	// Is called before displaying the error message so that we dont show that the username is wrong or the password
333	309	// Update Error message
334	310	add_action('wp_login_errors', 'loginizer_error_handler', 10001, 2);
335	311	add_action('woocommerce_login_failed', 'loginizer_woocommerce_error_handler', 10001);
336		- add_action('wp_login', 'loginizer_login_success', 10, 2);
337		-
338		- if(!empty($loginizer['ultimate-member-active'])){
339		- add_action('wp_login_failed', 'loginizer_ultimatemember_error_handler', 10001);
340		- }
	312	+
	313	+ }
	314	+
	315	+ // ----------------
	316	+ // PRO INIT
	317	+ // ----------------
	318	+
	319	+ // Email to Login
	320	+ $options = get_option('loginizer_epl');
	321	+ $loginizer['pl_d_sub'] = 'Login at $site_name';
	322	+ $loginizer['pl_d_msg'] = 'Hi,
341	323
342		- if(!empty($_COOKIE['lz_social_error']) && !empty($loginizer['social_settings']) && !loginizer_is_blacklisted()){
343		- add_filter('wp_login_errors', 'loginizer_social_login_error_handler', 10000, 2);
344		- }
345		- }
	324	+A login request was submitted for your account $email at :
	325	+$site_name - $site_url
	326	+
	327	+Login at $site_name by visiting this url :
	328	+$login_url
	329	+
	330	+If you have not requested for the Login URL, please ignore this email.
	331	+
	332	+Regards,
	333	+$site_name';
	334	+ $loginizer['email_pass_less'] = empty($options['email_pass_less']) ? 0 : $options['email_pass_less'];
	335	+ $loginizer['passwordless_sub'] = empty($options['passwordless_sub']) ? $loginizer['pl_d_sub'] : $options['passwordless_sub'];
	336	+ $loginizer['passwordless_msg'] = empty($options['passwordless_msg']) ? $loginizer['pl_d_msg'] : $options['passwordless_msg'];
	337	+ $loginizer['passwordless_msg_is_custom'] = empty($options['passwordless_msg']) ? 0 : 1;
	338	+ $loginizer['passwordless_html'] = empty($options['passwordless_html']) ? 0 : $options['passwordless_html'];
346	339
347		- // Social Login Form Actions
348		- if(!empty($loginizer['social_settings']) && !loginizer_is_blacklisted()){
349		- if(!empty($loginizer['social_settings']['login']['login_form'])){
350		- add_action('login_form', 'loginizer_social_btn_login');
351		- }
352		- }
	340	+ // 2FA OTP Email to Login
	341	+ $options = get_option('loginizer_2fa_email_template');
	342	+ $loginizer['2fa_email_d_sub'] = 'OTP : Login at $site_name';
	343	+ $loginizer['2fa_email_d_msg'] = 'Hi,
353	344
354		- if((function_exists('wp_doing_ajax') && wp_doing_ajax()) || (defined( 'DOING_AJAX' ) && DOING_AJAX)){
355		- include_once LOGINIZER_DIR . '/main/ajax.php';
356		- }
	345	+A login request was submitted for your account $email at :
	346	+$site_name - $site_url
357	347
358		- if(is_admin()){
359		- include_once LOGINIZER_DIR . '/main/admin.php';
	348	+Please use the following One Time password (OTP) to login :
	349	+$otp
	350	+
	351	+Note : The OTP expires after 10 minutes.
	352	+
	353	+If you haven\'t requested for the OTP, please ignore this email.
	354	+
	355	+Regards,
	356	+$site_name';
	357	+
	358	+ $loginizer['2fa_email_sub'] = empty($options['2fa_email_sub']) ? $loginizer['2fa_email_d_sub'] : $options['2fa_email_sub'];
	359	+ $loginizer['2fa_email_msg'] = empty($options['2fa_email_msg']) ? $loginizer['2fa_email_d_msg'] : $options['2fa_email_msg'];
	360	+
	361	+ // For SitePad its always on
	362	+ if(defined('SITEPAD')){
	363	+ $loginizer['email_pass_less'] = 1;
360	364	}
361	365
	366	+ // Captcha
	367	+ $options = get_option('loginizer_captcha');
	368	+ $loginizer['captcha_type'] = empty($options['captcha_type']) ? '' : $options['captcha_type'];
	369	+ $loginizer['captcha_key'] = empty($options['captcha_key']) ? '' : $options['captcha_key'];
	370	+ $loginizer['captcha_secret'] = empty($options['captcha_secret']) ? '' : $options['captcha_secret'];
	371	+ $loginizer['captcha_theme'] = empty($options['captcha_theme']) ? 'light' : $options['captcha_theme'];
	372	+ $loginizer['captcha_size'] = empty($options['captcha_size']) ? 'normal' : $options['captcha_size'];
	373	+ $loginizer['captcha_lang'] = empty($options['captcha_lang']) ? '' : $options['captcha_lang'];
	374	+ $loginizer['captcha_user_hide'] = !isset($options['captcha_user_hide']) ? 0 : $options['captcha_user_hide'];
	375	+ $loginizer['captcha_no_css_login'] = !isset($options['captcha_no_css_login']) ? 0 : $options['captcha_no_css_login'];
	376	+ $loginizer['captcha_no_js'] = 1;
	377	+ $loginizer['captcha_login'] = !isset($options['captcha_login']) ? 1 : $options['captcha_login'];
	378	+ $loginizer['captcha_lostpass'] = !isset($options['captcha_lostpass']) ? 1 : $options['captcha_lostpass'];
	379	+ $loginizer['captcha_resetpass'] = !isset($options['captcha_resetpass']) ? 1 : $options['captcha_resetpass'];
	380	+ $loginizer['captcha_register'] = !isset($options['captcha_register']) ? 1 : $options['captcha_register'];
	381	+ $loginizer['captcha_comment'] = !isset($options['captcha_comment']) ? 1 : $options['captcha_comment'];
	382	+ $loginizer['captcha_wc_checkout'] = !isset($options['captcha_wc_checkout']) ? 1 : $options['captcha_wc_checkout'];
	383	+
	384	+ $loginizer['captcha_no_google'] = !isset($options['captcha_no_google']) ? 0 : $options['captcha_no_google'];
	385	+ $loginizer['captcha_text'] = empty($options['captcha_text']) ? __('Math Captcha', 'loginizer') : $options['captcha_text'];
	386	+ $loginizer['captcha_time'] = empty($options['captcha_time']) ? 300 : $options['captcha_time'];
	387	+ $loginizer['captcha_words'] = !isset($options['captcha_words']) ? 0 : $options['captcha_words'];
	388	+ $loginizer['captcha_add'] = !isset($options['captcha_add']) ? 1 : $options['captcha_add'];
	389	+ $loginizer['captcha_subtract'] = !isset($options['captcha_subtract']) ? 1 : $options['captcha_subtract'];
	390	+ $loginizer['captcha_multiply'] = !isset($options['captcha_multiply']) ? 0 : $options['captcha_multiply'];
	391	+ $loginizer['captcha_divide'] = !isset($options['captcha_divide']) ? 0 : $options['captcha_divide'];
	392	+
	393	+ // 2fa/question
	394	+ $options = get_option('loginizer_2fa');
	395	+ $loginizer['2fa_app'] = !isset($options['2fa_app']) ? 0 : $options['2fa_app'];
	396	+ $loginizer['2fa_email'] = !isset($options['2fa_email']) ? 0 : $options['2fa_email'];
	397	+ $loginizer['2fa_email_force'] = !isset($options['2fa_email_force']) ? 0 : $options['2fa_email_force'];
	398	+ $loginizer['2fa_sms'] = !isset($options['2fa_sms']) ? 0 : $options['2fa_sms'];
	399	+ $loginizer['question'] = !isset($options['question']) ? 0 : $options['question'];
	400	+ $loginizer['2fa_default'] = empty($options['2fa_default']) ? 'question' : $options['2fa_default'];
	401	+ $loginizer['2fa_roles'] = empty($options['2fa_roles']) ? array() : $options['2fa_roles'];
	402	+
	403	+ // Security Settings
	404	+ $options = get_option('loginizer_security');
	405	+ $loginizer['login_slug'] = empty($options['login_slug']) ? '' : $options['login_slug'];
	406	+ $loginizer['rename_login_secret'] = empty($options['rename_login_secret']) ? '' : $options['rename_login_secret'];
	407	+ $loginizer['xmlrpc_slug'] = empty($options['xmlrpc_slug']) ? '' : $options['xmlrpc_slug'];
	408	+ $loginizer['xmlrpc_disable'] = empty($options['xmlrpc_disable']) ? '' : $options['xmlrpc_disable'];// Disable XML-RPC
	409	+ $loginizer['pingbacks_disable'] = empty($options['pingbacks_disable']) ? '' : $options['pingbacks_disable'];// Disable Pingbacks
	410	+
	411	+ // Admin Slug Settings
	412	+ $options = get_option('loginizer_wp_admin');
	413	+ $loginizer['admin_slug'] = empty($options['admin_slug']) ? '' : $options['admin_slug'];
	414	+ $loginizer['restrict_wp_admin'] = empty($options['restrict_wp_admin']) ? '' : $options['restrict_wp_admin'];
	415	+ $loginizer['wp_admin_msg'] = empty($options['wp_admin_msg']) ? '' : $options['wp_admin_msg'];
	416	+
	417	+ // Checksum Settings
	418	+ $options = get_option('loginizer_checksums');
	419	+ $loginizer['disable_checksum'] = empty($options['disable_checksum']) ? '' : $options['disable_checksum'];
	420	+ $loginizer['checksum_time'] = empty($options['checksum_time']) ? '' : $options['checksum_time'];
	421	+ $loginizer['checksum_frequency'] = empty($options['checksum_frequency']) ? 7 : $options['checksum_frequency'];
	422	+ $loginizer['no_checksum_email'] = empty($options['no_checksum_email']) ? '' : $options['no_checksum_email'];
	423	+ $loginizer['checksums_last_run'] = get_option('loginizer_checksums_last_run');
	424	+
	425	+ // Auto Blacklist Usernames
	426	+ $loginizer['username_blacklist'] = get_option('loginizer_username_blacklist');
	427	+
	428	+ $loginizer['domains_blacklist'] = get_option('loginizer_domains_blacklist');
	429	+
	430	+ $loginizer['wp_admin_d_msg'] = __('LZ : Not allowed via WP-ADMIN. Please access over the new Admin URL', 'loginizer');
	431	+
362	432	// ----------------
363	433	// PRO INIT END
364	434	// ----------------
365	435
366		- // Secuity checks for social login.
367		- if(!empty($_GET['lz_social_provider']) && loginizer_can_login() && empty($_GET['lz_api'])){
368		- add_action('init', 'loginizer_social_login_load');
369		- return;
	436	+ // Is the premium features there ?
	437	+ if(file_exists(LOGINIZER_DIR.'/premium.php')){
	438	+
	439	+ // Include the file
	440	+ include_once(LOGINIZER_DIR.'/premium.php');
	441	+
	442	+ loginizer_security_init();
	443	+
	444	+ // Its the free version
	445	+ }else{
	446	+
	447	+ // The promo time
	448	+ $loginizer['promo_time'] = get_option('loginizer_promo_time');
	449	+ if(empty($loginizer['promo_time'])){
	450	+ $loginizer['promo_time'] = time();
	451	+ update_option('loginizer_promo_time', $loginizer['promo_time']);
	452	+ }
	453	+
	454	+ // Are we to show the loginizer promo
	455	+ if(!empty($loginizer['promo_time']) && $loginizer['promo_time'] > 0 && $loginizer['promo_time'] < (time() - (30*24*3600))){
	456	+
	457	+ add_action('admin_notices', 'loginizer_promo');
	458	+
	459	+ }
	460	+
	461	+ // Are we to disable the promo
	462	+ if(isset($_GET['loginizer_promo']) && (int)$_GET['loginizer_promo'] == 0){
	463	+ update_option('loginizer_promo_time', (0 - time()) );
	464	+ die('DONE');
	465	+ }
	466	+
370	467	}
	468	+
371	469	}
372	470
	471	+// Show the promo
	472	+function loginizer_promo(){
	473	+
	474	+ echo '
	475	+<style>
	476	+.lz_button {
	477	+background-color: #4CAF50; /* Green */
	478	+border: none;
	479	+color: white;
	480	+padding: 8px 16px;
	481	+text-align: center;
	482	+text-decoration: none;
	483	+display: inline-block;
	484	+font-size: 16px;
	485	+margin: 4px 2px;
	486	+-webkit-transition-duration: 0.4s; /* Safari */
	487	+transition-duration: 0.4s;
	488	+cursor: pointer;
	489	+}
	490	+
	491	+.lz_button:focus{
	492	+border: none;
	493	+color: white;
	494	+}
	495	+
	496	+.lz_button1 {
	497	+color: white;
	498	+background-color: #4CAF50;
	499	+border:3px solid #4CAF50;
	500	+}
	501	+
	502	+.lz_button1:hover {
	503	+box-shadow: 0 6px 8px 0 rgba(0,0,0,0.24), 0 9px 25px 0 rgba(0,0,0,0.19);
	504	+color: white;
	505	+border:3px solid #4CAF50;
	506	+}
	507	+
	508	+.lz_button2 {
	509	+color: white;
	510	+background-color: #0085ba;
	511	+}
	512	+
	513	+.lz_button2:hover {
	514	+box-shadow: 0 6px 8px 0 rgba(0,0,0,0.24), 0 9px 25px 0 rgba(0,0,0,0.19);
	515	+color: white;
	516	+}
	517	+
	518	+.lz_button3 {
	519	+color: white;
	520	+background-color: #365899;
	521	+}
	522	+
	523	+.lz_button3:hover {
	524	+box-shadow: 0 6px 8px 0 rgba(0,0,0,0.24), 0 9px 25px 0 rgba(0,0,0,0.19);
	525	+color: white;
	526	+}
	527	+
	528	+.lz_button4 {
	529	+color: white;
	530	+background-color: rgb(66, 184, 221);
	531	+}
	532	+
	533	+.lz_button4:hover {
	534	+box-shadow: 0 6px 8px 0 rgba(0,0,0,0.24), 0 9px 25px 0 rgba(0,0,0,0.19);
	535	+color: white;
	536	+}
	537	+
	538	+.loginizer_promo-close{
	539	+float:right;
	540	+text-decoration:none;
	541	+margin: 5px 10px 0px 0px;
	542	+}
	543	+
	544	+.loginizer_promo-close:hover{
	545	+color: red;
	546	+}
	547	+</style>
	548	+
	549	+<script>
	550	+jQuery(document).ready( function() {
	551	+ (function($) {
	552	+ $("#loginizer_promo .loginizer_promo-close").click(function(){
	553	+ var data;
	554	+
	555	+ // Hide it
	556	+ $("#loginizer_promo").hide();
	557	+
	558	+ // Save this preference
	559	+ $.post("'.admin_url('?loginizer_promo=0').'", data, function(response) {
	560	+ //alert(response);
	561	+ });
	562	+ });
	563	+ })(jQuery);
	564	+});
	565	+</script>
	566	+
	567	+<div class="notice notice-success" id="loginizer_promo" style="min-height:120px">
	568	+ <a class="loginizer_promo-close" href="javascript:" aria-label="Dismiss this Notice">
	569	+ <span class="dashicons dashicons-dismiss"></span> Dismiss
	570	+ </a>
	571	+ <img src="'.LOGINIZER_URL.'/loginizer-200.png" style="float:left; margin:10px 20px 10px 10px" width="100" />
	572	+ <p style="font-size:16px">We are glad you like Loginizer and have been using it since the past few days. It is time to take the next step </p>
	573	+ <p>
	574	+ <a class="lz_button lz_button1" target="_blank" href="https://loginizer.com/features">Upgrade to Pro</a>
	575	+ <a class="lz_button lz_button2" target="_blank" href="https://wordpress.org/support/view/plugin-reviews/loginizer">Rate it 5★\'s</a>
	576	+ <a class="lz_button lz_button3" target="_blank" href="https://www.facebook.com/Loginizer-815504798591884/">Like Us on Facebook</a>
	577	+ <a class="lz_button lz_button4" target="_blank" href="https://twitter.com/home?status='.rawurlencode('I use @loginizer to secure my #WordPress site - https://loginizer.com').'">Tweet about Loginizer</a>
	578	+ </p>
	579	+</div>';
	580	+
	581	+}
	582	+
373	583	// Should return NULL if everything is fine
374	584	function loginizer_wp_authenticate($user, $username, $password){
375	585
376	586	global $loginizer, $lz_error, $lz_cannot_login, $lz_user_pass;
		@@ -382,22 +592,8 @@
382	592	// Are you whitelisted ?
383	593	if(loginizer_is_whitelisted()){
384	594	$loginizer['ip_is_whitelisted'] = 1;
385	595	return $user;
386		-
387		- } else if (!empty($loginizer['trusted_ips'])){
388		- $lz_cannot_login = 1;
389		-
390		- // This is used by WP Activity Log
391		- apply_filters( 'wp_login_blocked', $username );
392		-
393		- // Shows a blocked screen
394		- if(!empty($loginizer['blocked_screen'])){
395		- $lz_error['trusted_ip'] = __('You are restricted from logging in as your IP is not whitelisted.', 'loginizer');
396		- loginizer_blocked_page($lz_error);
397		- }
398		-
399		- return new WP_Error('ip_blacklisted', __('You are restricted from logging in as your IP is not whitelisted.', 'loginizer'));
400	596	}
401	597
402	598	// Are you blacklisted ?
403	599	if(loginizer_is_blacklisted()){
		@@ -405,13 +601,8 @@
405	601
406	602	// This is used by WP Activity Log
407	603	apply_filters( 'wp_login_blocked', $username );
408	604
409		- // Shows a blocked screen
410		- if(!empty($loginizer['blocked_screen'])){
411		- loginizer_blocked_page($lz_error);
412		- }
413		-
414	605	return new WP_Error('ip_blacklisted', implode('', $lz_error), 'loginizer');
415	606	}
416	607
417	608	// Is the username blacklisted ?
		@@ -420,9 +611,9 @@
420	611	$lz_cannot_login = 1;
421	612
422	613	// This is used by WP Activity Log
423	614	apply_filters( 'wp_login_blocked', $username );
424		-
	615	+
425	616	return new WP_Error('user_blacklisted', implode('', $lz_error), 'loginizer');
426	617	}
427	618	}
428	619
		@@ -430,19 +621,14 @@
430	621	return $user;
431	622	}
432	623
433	624	$lz_cannot_login = 1;
434		-
	625	+
435	626	// This is used by WP Activity Log
436	627	apply_filters( 'wp_login_blocked', $username );
437	628
438		- // Shows a blocked screen
439		- if(!empty($loginizer['blocked_screen'])){
440		- loginizer_blocked_page($lz_error);
441		- }
	629	+ return new WP_Error('ip_blocked', implode('', $lz_error), 'loginizer');
442	630
443		- return new WP_Error('ip_blocked', implode('', $lz_error), 'loginizer');
444		-
445	631	}
446	632
447	633	function loginizer_can_login(){
448	634
		@@ -452,9 +638,9 @@
452	638	$sel_query = $wpdb->prepare("SELECT * FROM `".$wpdb->prefix."loginizer_logs` WHERE `ip` = %s", $loginizer['current_ip']);
453	639	$result = lz_selectquery($sel_query);
454	640
455	641	if(!empty($result['count']) && ($result['count'] % $loginizer['max_retries']) == 0){
456		-
	642	+
457	643	// Has he reached max lockouts ?
458	644	if($result['lockout'] >= $loginizer['max_lockouts']){
459	645	$loginizer['lockout_time'] = $loginizer['lockouts_extend'];
460	646	}
		@@ -475,11 +661,8 @@
475	661	}
476	662
477	663	$lz_error['ip_blocked'] = $loginizer['msg']['lockout_err'].' '.$_time;
478	664
479		- if(!empty($loginizer['ultimate-member-active']) && class_exists('UM')){
480		- \UM()->form()->add_error('blocked_msg', $lz_error['ip_blocked']);
481		- }
482	665	return false;
483	666	}
484	667	}
485	668
		@@ -489,36 +672,68 @@
489	672	function loginizer_is_blacklisted(){
490	673
491	674	global $wpdb, $loginizer, $lz_error;
492	675
493		- $blacklist = isset($loginizer['blacklist']) ? $loginizer['blacklist'] : [];
	676	+ $blacklist = $loginizer['blacklist'];
	677	+
	678	+ foreach($blacklist as $k => $v){
	679	+
	680	+ // Is the IP in the blacklist ?
	681	+ if(inet_ptoi($v['start']) <= inet_ptoi($loginizer['current_ip']) && inet_ptoi($loginizer['current_ip']) <= inet_ptoi($v['end'])){
	682	+ $result = 1;
	683	+ break;
	684	+ }
	685	+
	686	+ // Is it in a wider range ?
	687	+ if(inet_ptoi($v['start']) >= 0 && inet_ptoi($v['end']) < 0){
	688	+
	689	+ // Since the end of the RANGE (i.e. current IP range) is beyond the +ve value of inet_ptoi,
	690	+ // if the current IP is <= than the start of the range, it is within the range
	691	+ // OR
	692	+ // if the current IP is <= than the end of the range, it is within the range
	693	+ if(inet_ptoi($v['start']) <= inet_ptoi($loginizer['current_ip'])
	694	+ || inet_ptoi($loginizer['current_ip']) <= inet_ptoi($v['end'])){
	695	+ $result = 1;
	696	+ break;
	697	+ }
	698	+
	699	+ }
	700	+
	701	+ }
	702	+
	703	+ // You are blacklisted
	704	+ if(!empty($result)){
	705	+ $lz_error['ip_blacklisted'] = $loginizer['msg']['ip_blacklisted'];
	706	+ return true;
	707	+ }
494	708
495		- if(empty($blacklist)){
496		- return false;
497		- }
	709	+ return false;
498	710
499		- $current_ip_inet = inet_ptoi($loginizer['current_ip']);
	711	+}
500	712
501		- foreach($blacklist as $k => $v){
502		-
503		- $start_inet = inet_ptoi($v['start']);
504		- $end_inet = inet_ptoi($v['end']);
505		-
	713	+function loginizer_is_whitelisted(){
	714	+
	715	+ global $wpdb, $loginizer, $lz_error;
	716	+
	717	+ $whitelist = $loginizer['whitelist'];
	718	+
	719	+ foreach($whitelist as $k => $v){
	720	+
506	721	// Is the IP in the blacklist ?
507		- if($start_inet <= $current_ip_inet && $current_ip_inet <= $end_inet){
	722	+ if(inet_ptoi($v['start']) <= inet_ptoi($loginizer['current_ip']) && inet_ptoi($loginizer['current_ip']) <= inet_ptoi($v['end'])){
508	723	$result = 1;
509	724	break;
510	725	}
511		-
	726	+
512	727	// Is it in a wider range ?
513		- if($start_inet >= 0 && $end_inet < 0){
	728	+ if(inet_ptoi($v['start']) >= 0 && inet_ptoi($v['end']) < 0){
514	729
515	730	// Since the end of the RANGE (i.e. current IP range) is beyond the +ve value of inet_ptoi,
516	731	// if the current IP is <= than the start of the range, it is within the range
517	732	// OR
518	733	// if the current IP is <= than the end of the range, it is within the range
519		- if($start_inet <= $current_ip_inet
520		- || $current_ip_inet <= $end_inet){
	734	+ if(inet_ptoi($v['start']) <= inet_ptoi($loginizer['current_ip'])
	735	+ || inet_ptoi($loginizer['current_ip']) <= inet_ptoi($v['end'])){
521	736	$result = 1;
522	737	break;
523	738	}
524	739
		@@ -524,12 +739,11 @@
524	739
525	740	}
526	741
527	742	}
528		-
529		- // You are blacklisted
	743	+
	744	+ // You are whitelisted
530	745	if(!empty($result)){
531		- $lz_error['ip_blacklisted'] = $loginizer['msg']['ip_blacklisted'];
532	746	return true;
533	747	}
534	748
535	749	return false;
		@@ -535,8 +749,9 @@
535	749	return false;
536	750
537	751	}
538	752
	753	+
539	754	// When the login fails, then this is called
540	755	// We need to update the database
541	756	function loginizer_login_failed($username, $is_2fa = ''){
542	757
		@@ -554,16 +769,9 @@
554	769	}
555	770
556	771	if(empty($lz_cannot_login) && empty($loginizer['ip_is_whitelisted']) && empty($loginizer['no_loginizer_logs'])){
557	772
558		- // The params which comes when social login returns an error, have some characters, which WordPress could not save.
559		- $server_uri = $_SERVER['REQUEST_URI'];
560		- if(!empty($_SERVER['REQUEST_URI']) && strpos($_SERVER['REQUEST_URI'], 'lz_social_provider') !== FALSE){
561		- $request_uri = explode('=', $_SERVER['REQUEST_URI']);
562		- $server_uri = $request_uri[0];
563		- }
564		-
565		- $url = @addslashes((!empty($_SERVER['HTTPS']) ? 'https://' : 'http://').$_SERVER['HTTP_HOST'].$server_uri);
	773	+ $url = @addslashes((!empty($_SERVER['HTTPS']) ? 'https://' : 'http://').$_SERVER['HTTP_HOST'].$_SERVER['REQUEST_URI']);
566	774	$url = esc_url($url);
567	775
568	776	$sel_query = $wpdb->prepare("SELECT * FROM `".$wpdb->prefix."loginizer_logs` WHERE `ip` = %s", $loginizer['current_ip']);
569	777	$result = lz_selectquery($sel_query);
		@@ -586,18 +794,11 @@
586	794
587	795	// Do we need to email admin ?
588	796	if(!empty($loginizer['notify_email']) && $lockout >= $loginizer['notify_email']){
589	797
590		- $lockout_time = $loginizer['lockout_time'];
591		-
592		- if($lockout >= $loginizer['max_lockouts']){
593		- // extended lockout is in hours so we have to convert to minute
594		- $lockout_time = $loginizer['lockouts_extend'];
595		- }
596		-
597	798	$sitename = lz_is_multisite() ? get_site_option('site_name') : get_option('blogname');
598	799	$mail = array();
599		- $mail['to'] = $loginizer['notify_email_address'];
	800	+ $mail['to'] = lz_is_multisite() ? get_site_option('admin_email') : get_option('admin_email');
600	801	$mail['subject'] = 'Failed '.$fail_type.' Attempts from IP '.$loginizer['current_ip'].' ('.$sitename.')';
601	802	$mail['message'] = 'Hi,
602	803
603	804	'.($result['count']+1).' failed '.strtolower($fail_type).' attempts and '.$lockout.' lockout(s) from IP '.$loginizer['current_ip'].' on your site :
		@@ -604,9 +805,9 @@
604	805	'.home_url().'
605	806
606	807	Last '.$fail_type.' Attempt : '.date('d/M/Y H:i:s P', time()).'
607	808	Last User Attempt : '.$username.'
608		-IP has been blocked until : '.date('d/M/Y H:i:s P', time() + $lockout_time).'
	809	+IP has been blocked until : '.date('d/M/Y H:i:s P', time() + $loginizer['lockout_time']).'
609	810
610	811	Regards,
611	812	Loginizer';
612	813
		@@ -629,9 +830,8 @@
629	830	}
630	831
631	832	// We need to add one as this is a failed attempt as well
632	833	$result['count'] = $result['count'] + 1;
633		- loginizer_update_attempt_stats(0);
634	834	$loginizer['retries_left'] = ($loginizer['max_retries'] - ($result['count'] % $loginizer['max_retries']));
635	835	$loginizer['retries_left'] = $loginizer['retries_left'] == $loginizer['max_retries'] ? 0 : $loginizer['retries_left'];
636	836
637	837	}
		@@ -636,324 +836,3921 @@
636	836
637	837	}
638	838	}
639	839
640		-function loginizer_login_success($user_login, $user) {
	840	+// Handles the error of the password not being there
	841	+function loginizer_error_handler($errors, $redirect_to){
	842	+
	843	+ global $wpdb, $loginizer, $lz_user_pass, $lz_cannot_login;
	844	+
	845	+ //echo 'loginizer_error_handler :';print_r($errors->errors);echo '<br>';
	846	+
	847	+ // Remove the empty password error
	848	+ if(is_wp_error($errors)){
	849	+
	850	+ $codes = $errors->get_error_codes();
	851	+
	852	+ foreach($codes as $k => $v){
	853	+ if($v == 'invalid_username' || $v == 'incorrect_password'){
	854	+ $show_error = 1;
	855	+ }
	856	+ }
	857	+
	858	+ $errors->remove('invalid_username');
	859	+ $errors->remove('incorrect_password');
	860	+
	861	+ }
	862	+
	863	+ // Add the error
	864	+ if(!empty($lz_user_pass) && !empty($show_error) && empty($lz_cannot_login)){
	865	+ $errors->add('invalid_userpass', '<b>ERROR:</b> ' . $loginizer['msg']['inv_userpass']);
	866	+ }
	867	+
	868	+ // Add the number of retires left as well
	869	+ if(count($errors->get_error_codes()) > 0 && isset($loginizer['retries_left'])){
	870	+ $errors->add('retries_left', loginizer_retries_left());
	871	+ }
	872	+
	873	+ return $errors;
	874	+
	875	+}
	876	+
	877	+
	878	+
	879	+// Handles the error of the password not being there
	880	+function loginizer_woocommerce_error_handler(){
	881	+
	882	+ global $wpdb, $loginizer, $lz_user_pass, $lz_cannot_login;
	883	+
	884	+ if(function_exists('wc_add_notice')){
	885	+ wc_add_notice( loginizer_retries_left(), 'error' );
	886	+ }
	887	+
	888	+}
	889	+
	890	+// Returns a string with the number of retries left
	891	+function loginizer_retries_left(){
	892	+
	893	+ global $wpdb, $loginizer, $lz_user_pass, $lz_cannot_login;
	894	+
	895	+ // If we are to show the number of retries left
	896	+ if(isset($loginizer['retries_left'])){
	897	+ return '<b>'.$loginizer['retries_left'].'</b> '.$loginizer['msg']['attempts_left'];
	898	+ }
	899	+
	900	+}
	901	+
	902	+function loginizer_reset_retries(){
	903	+
	904	+ global $wpdb, $loginizer;
	905	+
	906	+ $deltime = time() - $loginizer['reset_retries'];
	907	+
	908	+ $del_query = $wpdb->prepare("DELETE FROM `".$wpdb->prefix."loginizer_logs` WHERE `time` <= %d", $deltime);
	909	+ $result = $wpdb->query($del_query);
	910	+
	911	+ update_option('loginizer_last_reset', time());
	912	+
	913	+}
	914	+
	915	+add_filter("plugin_action_links_$plugin_loginizer", 'loginizer_plugin_action_links');
	916	+
	917	+// Add settings link on plugin page
	918	+function loginizer_plugin_action_links($links) {
	919	+
	920	+ if(!defined('LOGINIZER_PREMIUM')){
	921	+ $links[] = '<a href="'.LOGINIZER_PRO_URL.'" style="color:#3db634;" target="_blank">'._x('Upgrade', 'Plugin action link label.', 'loginizer').'</a>';
	922	+ }
	923	+
	924	+ $settings_link = '<a href="admin.php?page=loginizer">Settings</a>';
	925	+ array_unshift($links, $settings_link);
	926	+
	927	+ return $links;
	928	+}
	929	+
	930	+add_action('admin_menu', 'loginizer_admin_menu');
	931	+
	932	+// Shows the admin menu of Loginizer
	933	+function loginizer_admin_menu() {
	934	+
641	935	global $wp_version, $loginizer;
	936	+
	937	+ if(!defined('SITEPAD')){
	938	+
	939	+ // Add the menu page
	940	+ add_menu_page(__('Loginizer Dashboard', 'loginizer'), __('Loginizer Security', 'loginizer'), 'activate_plugins', 'loginizer', 'loginizer_page_dashboard');
	941	+
	942	+ // Dashboard
	943	+ add_submenu_page('loginizer', __('Loginizer Dashboard', 'loginizer'), __('Dashboard', 'loginizer'), 'activate_plugins', 'loginizer', 'loginizer_page_dashboard');
	944	+
	945	+ }else{
	946	+
	947	+ // Add the menu page
	948	+ add_menu_page(__('Security', 'loginizer'), __('Security', 'loginizer'), 'activate_plugins', 'loginizer', 'loginizer_page_security', 'dashicons-shield', 85);
	949	+
	950	+ // Rename Login
	951	+ add_submenu_page('loginizer', __('Security Settings', 'loginizer'), __('Rename Login', 'loginizer'), 'activate_plugins', 'loginizer', 'loginizer_page_security');
	952	+
	953	+ }
	954	+
	955	+ // Brute Force
	956	+ add_submenu_page('loginizer', __('Brute Force Settings', 'loginizer'), __('Brute Force', 'loginizer'), 'activate_plugins', 'loginizer_brute_force', 'loginizer_page_brute_force');
	957	+
	958	+ // PasswordLess
	959	+ add_submenu_page('loginizer', __($loginizer['prefix'].'PasswordLess Settings', 'loginizer'), __('PasswordLess', 'loginizer'), 'activate_plugins', 'loginizer_passwordless', 'loginizer_page_passwordless');
	960	+
	961	+ // Security Settings
	962	+ if(!defined('SITEPAD')){
	963	+
	964	+ // Two Factor Auth
	965	+ add_submenu_page('loginizer', __($loginizer['prefix'].' Two Factor Authentication', 'loginizer'), __('Two Factor Auth', 'loginizer'), 'activate_plugins', 'loginizer_2fa', 'loginizer_page_2fa');
	966	+
	967	+ }
	968	+
	969	+ // reCaptcha
	970	+ add_submenu_page('loginizer', __($loginizer['prefix'].'reCAPTCHA Settings', 'loginizer'), __('reCAPTCHA', 'loginizer'), 'activate_plugins', 'loginizer_recaptcha', 'loginizer_page_recaptcha');
	971	+
	972	+ // Security Settings
	973	+ if(!defined('SITEPAD')){
	974	+
	975	+ // Security Settings
	976	+ add_submenu_page('loginizer', __($loginizer['prefix'].'Security Settings', 'loginizer'), __('Security Settings', 'loginizer'), 'activate_plugins', 'loginizer_security', 'loginizer_page_security');
	977	+
	978	+ // File Checksums
	979	+ add_submenu_page('loginizer', __('Loginizer File Checksums', 'loginizer'), __('File Checksums', 'loginizer'), 'activate_plugins', 'loginizer_checksums', 'loginizer_page_checksums');
	980	+
	981	+ }
	982	+
	983	+ if(!defined('LOGINIZER_PREMIUM') && !empty($loginizer['ins_time']) && $loginizer['ins_time'] < (time() - (30*24*3600))){
	984	+
	985	+ // Go Pro link
	986	+ add_submenu_page('loginizer', __('Loginizer Go Pro', 'loginizer'), __('Go Pro', 'loginizer'), 'activate_plugins', LOGINIZER_PRO_URL);
	987	+
	988	+ }
	989	+
	990	+}
642	991
643		- loginizer_update_attempt_stats(1);
	992	+// The Loginizer Admin Options Page
	993	+function loginizer_page_header($title = 'Loginizer'){
644	994
645		- if(empty($loginizer['login_mail'])){
646		- return;
	995	+ global $loginizer;
	996	+
	997	+?>
	998	+<style>
	999	+.lz-right-ul{
	1000	+ padding-left: 10px !important;
	1001	+}
	1002	+
	1003	+.lz-right-ul li{
	1004	+ list-style: circle !important;
	1005	+}
	1006	+</style>
	1007	+<?php
	1008	+
	1009	+ echo '<div style="margin: 10px 20px 0 2px;">
	1010	+<div class="metabox-holder columns-2">
	1011	+<div class="postbox-container">
	1012	+<div id="top-sortables" class="meta-box-sortables ui-sortable">
	1013	+
	1014	+ <table cellpadding="2" cellspacing="1" width="100%" class="fixed" border="0">
	1015	+ <tr>
	1016	+ <td valign="top"><h3>'.$loginizer['prefix'].$title.'</h3></td>';
	1017	+
	1018	+ if(!defined('SITEPAD')){
	1019	+
	1020	+ echo '<td align="right"><a target="_blank" class="button button-primary" href="https://wordpress.org/support/view/plugin-reviews/loginizer">'.__('Review Loginizer', 'loginizer').'</a></td>
	1021	+ <td align="right" width="40"><a target="_blank" href="https://twitter.com/loginizer"><img src="'.LOGINIZER_URL.'/twitter.png" /></a></td>
	1022	+ <td align="right" width="40"><a target="_blank" href="https://www.facebook.com/Loginizer-815504798591884"><img src="'.LOGINIZER_URL.'/facebook.png" /></a></td>';
	1023	+
647	1024	}
	1025	+
	1026	+ echo '
	1027	+ </tr>
	1028	+ </table>
	1029	+ <hr />
	1030	+
	1031	+ <!--Main Table-->
	1032	+ <table cellpadding="8" cellspacing="1" width="100%" class="fixed">
	1033	+ <tr>
	1034	+ <td valign="top">';
648	1035
649		- if(empty($loginizer['login_mail']['enable'])){
650		- return;
	1036	+}
	1037	+
	1038	+// The Loginizer Theme footer
	1039	+function loginizer_page_footer(){
	1040	+
	1041	+ if(!loginizer_is_premium()){
	1042	+ echo '<script>
	1043	+ jQuery("[loginizer-premium-only]").each(function(index) {
	1044	+ jQuery(this).find( "input, textarea, select" ).attr("disabled", true);
	1045	+ });
	1046	+ </script>';
651	1047	}
	1048	+
	1049	+ echo '</td>
	1050	+ <td width="200" valign="top" id="loginizer-right-bar">';
	1051	+
	1052	+ if(!defined('SITEPAD')){
	1053	+
	1054	+ if(!defined('LOGINIZER_PREMIUM')){
	1055	+
	1056	+ echo '
	1057	+ <div class="postbox" style="min-width:0px !important;">
	1058	+ <div class="postbox-header">
	1059	+ <h2 class="hndle ui-sortable-handle">
	1060	+ <span>Premium Version</span>
	1061	+ </h2>
	1062	+ </div>
	1063	+
	1064	+ <div class="inside">
	1065	+ <i>Upgrade to the premium version and get the following features </i>:<br>
	1066	+ <ul class="lz-right-ul">
	1067	+ <li>PasswordLess Login</li>
	1068	+ <li>Two Factor Auth - Email</li>
	1069	+ <li>Two Factor Auth - App</li>
	1070	+ <li>Login Challenge Question</li>
	1071	+ <li>reCAPTCHA</li>
	1072	+ <li>Rename Login Page</li>
	1073	+ <li>Disable XML-RPC</li>
	1074	+ <li>And many more ...</li>
	1075	+ </ul>
	1076	+ <center><a class="button button-primary" target="_blank" href="'.LOGINIZER_PRICING_URL.'">Upgrade</a></center>
	1077	+ </div>
	1078	+ </div>';
	1079	+
	1080	+ }else{
	1081	+
	1082	+ echo '
	1083	+ <div class="postbox" style="min-width:0px !important;">
	1084	+ <div class="postbox-header">
	1085	+ <h2 class="hndle ui-sortable-handle">
	1086	+ <span>Recommendations</span>
	1087	+ </h2>
	1088	+ </div>
	1089	+ <div class="inside">
	1090	+ <i>We recommed that you enable atleast one of the following security features</i>:<br>
	1091	+ <ul class="lz-right-ul">
	1092	+ <li>Rename Login Page</li>
	1093	+ <li>Login Challenge Question</li>
	1094	+ <li>reCAPTCHA</li>
	1095	+ <li>Two Factor Auth - Email</li>
	1096	+ <li>Two Factor Auth - App</li>
	1097	+ <li>Change \'admin\' Username</li>
	1098	+ </ul>
	1099	+ </div>
	1100	+ </div>';
	1101	+ }
	1102	+
	1103	+ echo '
	1104	+ <div class="postbox" style="min-width:0px !important;">
	1105	+ <div class="postbox-header">
	1106	+ <h2 class="hndle ui-sortable-handle">
	1107	+ <span><a target="_blank" href="https://pagelayer.com/?from=loginizer-plugin"><img src="'.LOGINIZER_URL.'/images/pagelayer_product.png" width="100%" /></a></span>
	1108	+ </h2>
	1109	+ </div>
	1110	+ <div class="inside">
	1111	+ <i>Easily manage and make professional pages and content with our Pagelayer builder </i>:<br>
	1112	+ <ul class="lz-right-ul">
	1113	+ <li>30+ Free Widgets</li>
	1114	+ <li>60+ Premium Widgets</li>
	1115	+ <li>400+ Premium Sections</li>
	1116	+ <li>Theme Builder</li>
	1117	+ <li>WooCommerce Builder</li>
	1118	+ <li>Theme Creator and Exporter</li>
	1119	+ <li>Form Builder</li>
	1120	+ <li>Popup Builder</li>
	1121	+ <li>And many more ...</li>
	1122	+ </ul>
	1123	+ <center><a class="button button-primary" target="_blank" href="https://wordpress.org/plugins/pagelayer/">Visit Pagelayer</a></center>
	1124	+ </div>
	1125	+ </div>';
	1126	+
	1127	+ echo '
	1128	+ <div class="postbox" style="min-width:0px !important;">
	1129	+ <div class="postbox-header">
	1130	+ <h2 class="hndle ui-sortable-handle">
	1131	+ <span><a target="_blank" href="https://wpcentral.co/?from=loginizer-plugin"><img src="'.LOGINIZER_URL.'/images/wpcentral_product.png" width="100%" /></a></span>
	1132	+ </h2>
	1133	+ </div>
	1134	+ <div class="inside">
	1135	+ <i>Manage all your WordPress sites from <b>1 dashboard</b> </i>:<br>
	1136	+ <ul class="lz-right-ul">
	1137	+ <li>1-click Admin Access</li>
	1138	+ <li>Update WordPress</li>
	1139	+ <li>Update Themes</li>
	1140	+ <li>Update Plugins</li>
	1141	+ <li>Backup your WordPress Site</li>
	1142	+ <li>Plugins & Theme Management</li>
	1143	+ <li>Post Management</li>
	1144	+ <li>And many more ...</li>
	1145	+ </ul>
	1146	+ <center><a class="button button-primary" target="_blank" href="https://wpcentral.co/?from=loginizer-plugin">Visit wpCentral</a></center>
	1147	+ </div>
	1148	+ </div>';
	1149	+
	1150	+ }
	1151	+
	1152	+ echo '</td>
	1153	+ </tr>
	1154	+ </table>';
	1155	+
	1156	+ if(!defined('SITEPAD')){
	1157	+
	1158	+ echo '<br />
	1159	+ <div style="width:45%;background:#FFF;padding:15px; margin:auto">
	1160	+ <b>Let your friends know that you have secured your website :</b>
	1161	+ <form method="get" action="https://twitter.com/intent/tweet" id="tweet" onsubmit="return dotweet(this);">
	1162	+ <textarea name="text" cols="45" row="3" style="resize:none;">I just secured my @WordPress site against #bruteforce using @loginizer</textarea>
	1163	+ &nbsp; &nbsp; <input type="submit" value="Tweet!" class="button button-primary" onsubmit="return false;" id="twitter-btn" style="margin-top:20px;"/>
	1164	+ </form>
	1165	+
	1166	+ </div>
	1167	+ <br />
	1168	+
	1169	+ <script>
	1170	+ function dotweet(ele){
	1171	+ window.open(jQuery("#"+ele.id).attr("action")+"?"+jQuery("#"+ele.id).serialize(), "_blank", "scrollbars=no, menubar=no, height=400, width=500, resizable=yes, toolbar=no, status=no");
	1172	+ return false;
	1173	+ }
	1174	+ </script>
	1175	+
	1176	+ <hr />
	1177	+ <a href="http://loginizer.com" target="_blank">Loginizer</a> v'.LOGINIZER_VERSION.'. You can report any bugs <a href="http://wordpress.org/support/plugin/loginizer" target="_blank">here</a>.';
	1178	+
	1179	+ }
	1180	+
	1181	+ echo '
	1182	+</div>
	1183	+</div>
	1184	+</div>
	1185	+</div>';
652	1186
653		- if(!empty($loginizer['login_mail']['disable_whitelist'])){
654		- // Check its whitelist ip
655		- if(loginizer_is_whitelisted()){
656		- return;
	1187	+}
	1188	+
	1189	+// The Loginizer Admin Options Page
	1190	+function loginizer_page_dashboard(){
	1191	+
	1192	+ global $loginizer, $lz_error, $lz_env;
	1193	+
	1194	+ if(!current_user_can('manage_options')){
	1195	+ wp_die('Sorry, but you do not have permissions to change settings.');
	1196	+ }
	1197	+
	1198	+ // Dismiss the announcement
	1199	+ if(isset($_GET['dismiss_announcement'])){
	1200	+ update_option('loginizer_no_announcement', 1);
	1201	+ }
	1202	+
	1203	+ /* Make sure post was from this page */
	1204	+ if(count($_POST) > 0){
	1205	+ check_admin_referer('loginizer-options');
	1206	+ }
	1207	+
	1208	+ do_action('loginizer_pre_page_dashboard');
	1209	+
	1210	+ // Is there a IP Method ?
	1211	+ if(isset($_POST['save_lz_ip_method'])){
	1212	+
	1213	+ $ip_method = (int) lz_optpost('lz_ip_method');
	1214	+ $custom_ip_method = lz_optpost('lz_custom_ip_method');
	1215	+
	1216	+ if($ip_method >= 0 && $ip_method <= 3){
	1217	+ update_option('loginizer_ip_method', $ip_method);
657	1218	}
	1219	+
	1220	+ // Custom Method name ?
	1221	+ if($ip_method == 3){
	1222	+ update_option('loginizer_custom_ip_method', $custom_ip_method);
	1223	+ }
	1224	+
658	1225	}
	1226	+
	1227	+ loginizer_page_dashboard_T();
	1228	+
	1229	+}
659	1230
660		- if(empty($user_login) && empty($user)){
661		- error_log('Loginizer: No user information to send email');
662		- return;
	1231	+// The Loginizer Admin Options Page - THEME
	1232	+function loginizer_page_dashboard_T(){
	1233	+
	1234	+ global $loginizer, $lz_error, $lz_env;
	1235	+
	1236	+ loginizer_page_header('Dashboard');
	1237	+?>
	1238	+<style>
	1239	+.welcome-panel{
	1240	+ margin: 0px;
	1241	+ padding: 10px;
	1242	+}
	1243	+
	1244	+input[type="text"], textarea, select {
	1245	+ width: 70%;
	1246	+}
	1247	+
	1248	+.form-table label{
	1249	+ font-weight:bold;
	1250	+}
	1251	+
	1252	+.exp{
	1253	+ font-size:12px;
	1254	+}
	1255	+</style>
	1256	+
	1257	+ <?php
	1258	+
	1259	+ loginizer_newsletter_subscribe();
	1260	+
	1261	+ $hide_announcement = get_option('loginizer_no_announcement');
	1262	+ if(empty($hide_announcement)){
	1263	+ echo '<div id="message" class="welcome-panel">'. __('<a href="https://loginizer.com/blog/loginizer-has-been-acquired-by-softaculous/" target="_blank" style="text-decoration:none;">We are excited to announce that we have joined forces with Softaculous and have been acquired by them 😊. Read full announcement here.</a>', 'loginizer'). '<a class="welcome-panel-close" style="top:3px;right:2px;" href="'.menu_page_url('loginizer', false).'&dismiss_announcement=1" aria-label="Dismiss announcement"></a></div><br />';
663	1264	}
	1265	+
	1266	+ echo '<div class="welcome-panel">Thank you for choosing Loginizer! Many more features coming soon... &nbsp; Review Loginizer at WordPress &nbsp; &nbsp; <a href="https://wordpress.org/support/view/plugin-reviews/loginizer" class="button button-primary" target="_blank">Add Review</a></div><br />';
664	1267
665		- if(empty($user)){
666		- $user = get_user_by('login', $user_login);
	1268	+ // Saved ?
	1269	+ if(!empty($GLOBALS['lz_saved'])){
	1270	+ echo '<div id="message" class="updated"><p>'. __('The settings were saved successfully', 'loginizer'). '</p></div><br />';
667	1271	}
	1272	+
	1273	+ // Any errors ?
	1274	+ if(!empty($lz_error)){
	1275	+ lz_report_error($lz_error);echo '<br />';
	1276	+ }
	1277	+
	1278	+ ?>
	1279	+
	1280	+ <div class="postbox">
	1281	+
	1282	+ <div class="postbox-header">
	1283	+ <h2 class="hndle ui-sortable-handle">
	1284	+ <span><?php echo __('Getting Started', 'loginizer'); ?></span>
	1285	+ </h2>
	1286	+ </div>
	1287	+
	1288	+ <div class="inside">
	1289	+
	1290	+ <form action="" method="post" enctype="multipart/form-data">
	1291	+ <?php wp_nonce_field('loginizer-options'); ?>
	1292	+ <table class="form-table">
	1293	+ <tr>
	1294	+ <td scope="row" valign="top" colspan="2" style="line-height:150%">
	1295	+ <i>Welcome to Loginizer Security. By default the <b>Brute Force Protection</b> is immediately enabled. You should start by going over the default settings and tweaking them as per your needs.</i>
	1296	+ <?php
	1297	+ if(defined('LOGINIZER_PREMIUM')){
	1298	+ echo '<br><i>In the Premium version of Loginizer you have many more features. We recommend you enable features like <b>reCAPTCHA, Two Factor Auth or Email based PasswordLess</b> login. These features will improve your websites security.</i>';
	1299	+ }else{
	1300	+ echo '<br><i><a href="'.LOGINIZER_PRICING_URL.'" target="_blank" style="text-decoration:none;color:red;">Upgrade to Pro</a> for more features like <b>reCAPTCHA, Two Factor Auth, Rename wp-admin and wp-login.php pages, Email based PasswordLess</b> login and more. These features will improve your website\'s security.</i>';
	1301	+ }
	1302	+ ?>
	1303	+ </td>
	1304	+ </tr>
	1305	+ </table>
	1306	+ </form>
	1307	+
	1308	+ </div>
	1309	+ </div>
	1310	+
	1311	+ <div class="postbox">
	1312	+
	1313	+ <div class="postbox-header">
	1314	+ <h2 class="hndle ui-sortable-handle">
	1315	+ <span><?php echo __('System Information', 'loginizer'); ?></span>
	1316	+ </h2>
	1317	+ </div>
	1318	+ <div class="inside">
	1319	+
	1320	+ <form action="" method="post" enctype="multipart/form-data">
	1321	+ <?php wp_nonce_field('loginizer-options'); ?>
	1322	+ <table class="wp-list-table fixed striped users" cellspacing="1" border="0" width="95%" cellpadding="10" align="center">
	1323	+ <?php
	1324	+ echo '
	1325	+ <tr>
	1326	+ <th align="left" width="25%">'.__('Loginizer Version', 'loginizer').'</th>
	1327	+ <td>'.LOGINIZER_VERSION.(defined('LOGINIZER_PREMIUM') ? ' (<font color="green">Security PRO Version</font>)' : '').'</td>
	1328	+ </tr>';
	1329	+
	1330	+ do_action('loginizer_system_information');
	1331	+
	1332	+ echo '<tr>
	1333	+ <th align="left">'.__('URL', 'loginizer').'</th>
	1334	+ <td>'.get_site_url().'</td>
	1335	+ </tr>
	1336	+ <tr>
	1337	+ <th align="left">'.__('Path', 'loginizer').'</th>
	1338	+ <td>'.ABSPATH.'</td>
	1339	+ </tr>
	1340	+ <tr>
	1341	+ <th align="left">'.__('Server\'s IP Address', 'loginizer').'</th>
	1342	+ <td>'.@$_SERVER['SERVER_ADDR'].'</td>
	1343	+ </tr>
	1344	+ <tr>
	1345	+ <th align="left">'.__('Your IP Address', 'loginizer').'</th>
	1346	+ <td>'.lz_getip().'
	1347	+ <div style="float:right">
	1348	+ Method :
	1349	+ <select name="lz_ip_method" id="lz_ip_method" style="font-size:11px; width:150px" onchange="lz_ip_method_handle()">
	1350	+ <option value="0" '.lz_POSTselect('lz_ip_method', 0, (@$loginizer['ip_method'] == 0)).'>REMOTE_ADDR</option>
	1351	+ <option value="1" '.lz_POSTselect('lz_ip_method', 1, (@$loginizer['ip_method'] == 1)).'>HTTP_X_FORWARDED_FOR</option>
	1352	+ <option value="2" '.lz_POSTselect('lz_ip_method', 2, (@$loginizer['ip_method'] == 2)).'>HTTP_CLIENT_IP</option>
	1353	+ <option value="3" '.lz_POSTselect('lz_ip_method', 3, (@$loginizer['ip_method'] == 3)).'>CUSTOM</option>
	1354	+ </select>
	1355	+ <input name="lz_custom_ip_method" id="lz_custom_ip_method" type="text" value="'.lz_optpost('lz_custom_ip_method', @$loginizer['custom_ip_method']).'" style="font-size:11px; width:100px; display:none" />
	1356	+ <input name="save_lz_ip_method" class="button button-primary" value="Save" type="submit" />
	1357	+ </div>
	1358	+ </td>
	1359	+ </tr>
	1360	+ <tr>
	1361	+ <th align="left">'.__('wp-config.php is writable', 'loginizer').'</th>
	1362	+ <td>'.(is_writable(ABSPATH.'/wp-config.php') ? '<span style="color:red">Yes</span>' : '<span style="color:green">No</span>').'</td>
	1363	+ </tr>';
	1364	+
	1365	+ if(file_exists(ABSPATH.'/.htaccess')){
	1366	+ echo '
	1367	+ <tr>
	1368	+ <th align="left">'.__('.htaccess is writable', 'loginizer').'</th>
	1369	+ <td>'.(is_writable(ABSPATH.'/.htaccess') ? '<span style="color:red">Yes</span>' : '<span style="color:green">No</span>').'</td>
	1370	+ </tr>';
	1371	+
	1372	+ }
	1373	+
	1374	+ ?>
	1375	+ </table>
	1376	+ </form>
	1377	+
	1378	+ </div>
	1379	+ </div>
668	1380
669		- if(empty($user)){
670		- error_log('Loginizer: Unable to get the user');
671		- return;
	1381	+<script type="text/javascript">
	1382	+
	1383	+function lz_ip_method_handle(){
	1384	+ var ele = jQuery('#lz_ip_method');
	1385	+ if(ele.val() == 3){
	1386	+ jQuery('#lz_custom_ip_method').show();
	1387	+ }else{
	1388	+ jQuery('#lz_custom_ip_method').hide();
672	1389	}
	1390	+};
673	1391
674		- if(empty($loginizer['login_mail']['roles']) || !is_array($loginizer['login_mail']['roles'])){
675		- return;
	1392	+lz_ip_method_handle();
	1393	+
	1394	+</script>
	1395	+
	1396	+ <div id="" class="postbox">
	1397	+
	1398	+ <div class="postbox-header">
	1399	+ <h2 class="hndle ui-sortable-handle">
	1400	+ <span><?php echo __('File Permissions', 'loginizer'); ?></span>
	1401	+ </h2>
	1402	+ </div>
	1403	+
	1404	+ <div class="inside">
	1405	+
	1406	+ <form action="" method="post" enctype="multipart/form-data">
	1407	+ <?php wp_nonce_field('loginizer-options'); ?>
	1408	+ <table class="wp-list-table fixed striped users" border="0" width="95%" cellpadding="10" align="center">
	1409	+ <?php
	1410	+
	1411	+ echo '
	1412	+ <tr>
	1413	+ <th style="background:#EFEFEF;">'.__('Relative Path', 'loginizer').'</th>
	1414	+ <th style="width:10%; background:#EFEFEF;">'.__('Suggested', 'loginizer').'</th>
	1415	+ <th style="width:10%; background:#EFEFEF;">'.__('Actual', 'loginizer').'</th>
	1416	+ </tr>';
	1417	+
	1418	+ $wp_content = basename(dirname(dirname(dirname(__FILE__))));
	1419	+
	1420	+ $files_to_check = array('/' => array('0755', '0750'),
	1421	+ '/wp-admin' => array('0755'),
	1422	+ '/wp-includes' => array('0755'),
	1423	+ '/wp-config.php' => array('0444'),
	1424	+ '/'.$wp_content => array('0755'),
	1425	+ '/'.$wp_content.'/themes' => array('0755'),
	1426	+ '/'.$wp_content.'/plugins' => array('0755'),
	1427	+ '.htaccess' => array('0444'));
	1428	+
	1429	+ $root = ABSPATH;
	1430	+
	1431	+ foreach($files_to_check as $k => $v){
	1432	+
	1433	+ $path = $root.'/'.$k;
	1434	+ $stat = @stat($path);
	1435	+ $suggested = $v;
	1436	+ $actual = substr(sprintf('%o', $stat['mode']), -4);
	1437	+
	1438	+ echo '
	1439	+ <tr>
	1440	+ <td>'.$k.'</td>
	1441	+ <td>'.current($suggested).'</td>
	1442	+ <td><span '.(!in_array($actual, $suggested) ? 'style="color: red;"' : '').'>'.$actual.'</span></td>
	1443	+ </tr>';
	1444	+
	1445	+ }
	1446	+
	1447	+ ?>
	1448	+ </table>
	1449	+ </form>
	1450	+
	1451	+ </div>
	1452	+ </div>
	1453	+
	1454	+<?php
	1455	+
	1456	+ loginizer_page_footer();
	1457	+
	1458	+}
	1459	+
	1460	+// The Loginizer Admin Options Page
	1461	+function loginizer_page_brute_force(){
	1462	+
	1463	+ global $wpdb, $wp_roles, $loginizer;
	1464	+
	1465	+ if(!current_user_can('manage_options')){
	1466	+ wp_die('Sorry, but you do not have permissions to change settings.');
676	1467	}
677	1468
678		- // Check if the user role is enabled for email notification.
679		- if(!array_intersect($user->roles, $loginizer['login_mail']['roles'])){
680		- return;
	1469	+ /* Make sure post was from this page */
	1470	+ if(count($_POST) > 0){
	1471	+ check_admin_referer('loginizer-options');
681	1472	}
	1473	+
	1474	+ // BEGIN THEME
	1475	+ loginizer_page_header('Brute Force Settings');
	1476	+
	1477	+ // Load the blacklist and whitelist
	1478	+ $loginizer['blacklist'] = get_option('loginizer_blacklist');
	1479	+ $loginizer['whitelist'] = get_option('loginizer_whitelist');
	1480	+
	1481	+ // Disable Brute Force
	1482	+ if(isset($_POST['disable_brute_lz'])){
	1483	+
	1484	+ // Save the options
	1485	+ update_option('loginizer_disable_brute', 1);
	1486	+
	1487	+ $loginizer['disable_brute'] = 1;
	1488	+
	1489	+ echo '<div id="message" class="updated"><p>'
	1490	+ . __('The Brute Force Protection feature is now disabled', 'loginizer')
	1491	+ . '</p></div><br />';
	1492	+
	1493	+ }
	1494	+
	1495	+ // Enable brute force
	1496	+ if(isset($_POST['enable_brute_lz'])){
	1497	+
	1498	+ // Save the options
	1499	+ update_option('loginizer_disable_brute', 0);
	1500	+
	1501	+ $loginizer['disable_brute'] = 0;
	1502	+
	1503	+ echo '<div id="message" class="updated"><p>'
	1504	+ . __('The Brute Force Protection feature is now enabled', 'loginizer')
	1505	+ . '</p></div><br />';
	1506	+
	1507	+ }
	1508	+
	1509	+ // The Brute Force Settings
	1510	+ if(isset($_POST['save_lz'])){
	1511	+
	1512	+ $max_retries = (int) lz_optpost('max_retries');
	1513	+ $lockout_time = (int) lz_optpost('lockout_time');
	1514	+ $max_lockouts = (int) lz_optpost('max_lockouts');
	1515	+ $lockouts_extend = (int) lz_optpost('lockouts_extend');
	1516	+ $reset_retries = (int) lz_optpost('reset_retries');
	1517	+ $notify_email = (int) lz_optpost('notify_email');
	1518	+
	1519	+ $lockout_time = $lockout_time * 60;
	1520	+ $lockouts_extend = $lockouts_extend * 60 * 60;
	1521	+ $reset_retries = $reset_retries * 60 * 60;
	1522	+
	1523	+ if(empty($error)){
	1524	+
	1525	+ $option['max_retries'] = $max_retries;
	1526	+ $option['lockout_time'] = $lockout_time;
	1527	+ $option['max_lockouts'] = $max_lockouts;
	1528	+ $option['lockouts_extend'] = $lockouts_extend;
	1529	+ $option['reset_retries'] = $reset_retries;
	1530	+ $option['notify_email'] = $notify_email;
	1531	+
	1532	+ // Save the options
	1533	+ update_option('loginizer_options', $option);
	1534	+
	1535	+ $saved = true;
	1536	+
	1537	+ }else{
	1538	+ lz_report_error($error);
	1539	+ }
	1540	+
	1541	+ if(!empty($notice)){
	1542	+ lz_report_notice($notice);
	1543	+ }
	1544	+
	1545	+ if(!empty($saved)){
	1546	+ echo '<div id="message" class="updated"><p>'
	1547	+ . __('The settings were saved successfully', 'loginizer')
	1548	+ . '</p></div><br />';
	1549	+ }
	1550	+
	1551	+ }
	1552	+
	1553	+ // Delete a Blackist IP range
	1554	+ if(isset($_POST['bdelid'])){
	1555	+
	1556	+ $delid = (int) lz_optreq('bdelid');
	1557	+
	1558	+ // Unset and save
	1559	+ $blacklist = $loginizer['blacklist'];
	1560	+ unset($blacklist[$delid]);
	1561	+ update_option('loginizer_blacklist', $blacklist);
	1562	+
	1563	+ echo '<div id="message" class="updated fade"><p>'
	1564	+ . __('The Blacklist IP range has been deleted successfully', 'loginizer')
	1565	+ . '</p></div><br />';
	1566	+
	1567	+ }
	1568	+
	1569	+ // Delete all Blackist IP ranges
	1570	+ if(isset($_POST['del_all_blacklist'])){
	1571	+
	1572	+ // Unset and save
	1573	+ update_option('loginizer_blacklist', array());
	1574	+
	1575	+ echo '<div id="message" class="updated fade"><p>'
	1576	+ . __('The Blacklist IP range(s) have been cleared successfully', 'loginizer')
	1577	+ . '</p></div><br />';
	1578	+
	1579	+ }
	1580	+
	1581	+ // Delete a Whitelist IP range
	1582	+ if(isset($_POST['delid'])){
	1583	+
	1584	+ $delid = (int) lz_optreq('delid');
	1585	+
	1586	+ // Unset and save
	1587	+ $whitelist = $loginizer['whitelist'];
	1588	+ unset($whitelist[$delid]);
	1589	+ update_option('loginizer_whitelist', $whitelist);
	1590	+
	1591	+ echo '<div id="message" class="updated fade"><p>'
	1592	+ . __('The Whitelist IP range has been deleted successfully', 'loginizer')
	1593	+ . '</p></div><br />';
	1594	+
	1595	+ }
	1596	+
	1597	+ // Delete all Blackist IP ranges
	1598	+ if(isset($_POST['del_all_whitelist'])){
	1599	+
	1600	+ // Unset and save
	1601	+ update_option('loginizer_whitelist', array());
	1602	+
	1603	+ echo '<div id="message" class="updated fade"><p>'
	1604	+ . __('The Whitelist IP range(s) have been cleared successfully', 'loginizer')
	1605	+ . '</p></div><br />';
	1606	+
	1607	+ }
	1608	+
	1609	+ // Reset All Logs
	1610	+ if(isset($_POST['lz_reset_all_ip'])){
	1611	+
	1612	+ $result = $wpdb->query("DELETE FROM `".$wpdb->prefix."loginizer_logs` WHERE `time` > 0");
	1613	+
	1614	+ echo '<div id="message" class="updated fade"><p>'
	1615	+ . __('All the IP Logs have been cleared', 'loginizer')
	1616	+ . '</p></div><br />';
	1617	+ }
	1618	+
	1619	+ // Reset Logs
	1620	+ if(isset($_POST['lz_reset_ips']) && is_array($_POST['lz_reset_ips'])){
682	1621
683		- // current_datetime & wp_timezone_string were introduced in WordPress 5.3
684		- if(!empty($wp_version) && version_compare($wp_version, '5.3', '>') && function_exists('current_datetime')){
685		- $time_zone = wp_timezone_string();
	1622	+ $ips = $_POST['lz_reset_ips'];
	1623	+
	1624	+ foreach($ips as $ip){
	1625	+ if(!lz_valid_ip($ip)){
	1626	+ $error[] = 'The IP - '.esc_html($ip).' is invalid !';
	1627	+ }
	1628	+ }
	1629	+
	1630	+ if(count($ips) < 1){
	1631	+ $error[] = __('There are no IPs submitted', 'loginizer');
	1632	+ }
	1633	+
	1634	+ // Should we start deleting logs
	1635	+ if(empty($error)){
	1636	+
	1637	+ foreach($ips as $ip){
	1638	+ $result = $wpdb->query($wpdb->prepare("DELETE FROM `".$wpdb->prefix."loginizer_logs` WHERE `ip` = %s", $ip));
	1639	+ }
	1640	+
	1641	+ if(empty($error)){
	1642	+
	1643	+ echo '<div id="message" class="updated fade"><p>'
	1644	+ . __('The selected IP Logs have been reset', 'loginizer')
	1645	+ . '</p></div><br />';
	1646	+
	1647	+ }
	1648	+
	1649	+ }
	1650	+
	1651	+ if(!empty($error)){
	1652	+ lz_report_error($error);echo '<br />';
	1653	+ }
	1654	+
	1655	+ }
	1656	+
	1657	+ if(isset($_POST['blacklist_iprange'])){
686	1658
687		- if(!empty($time_zone) && isset($time_zone[1]) && is_numeric($time_zone[1])){
688		- $time_zone = 'UTC'.$time_zone;
	1659	+ $start_ip = lz_optpost('start_ip');
	1660	+ $end_ip = lz_optpost('end_ip');
	1661	+
	1662	+ if(empty($start_ip)){
	1663	+ $error[] = __('Please enter the Start IP', 'loginizer');
689	1664	}
	1665	+
	1666	+ // If no end IP we consider only 1 IP
	1667	+ if(empty($end_ip)){
	1668	+ $end_ip = $start_ip;
	1669	+ }
	1670	+
	1671	+ if(!lz_valid_ip($start_ip)){
	1672	+ $error[] = __('Please provide a valid start IP', 'loginizer');
	1673	+ }
	1674	+
	1675	+ if(!lz_valid_ip($end_ip)){
	1676	+ $error[] = __('Please provide a valid end IP', 'loginizer');
	1677	+ }
	1678	+
	1679	+ // Regular ranges will work
	1680	+ if(inet_ptoi($start_ip) > inet_ptoi($end_ip)){
	1681	+
	1682	+ // BUT, if 0.0.0.1 - 255.255.255.255 is given, it will not work
	1683	+ if(inet_ptoi($start_ip) >= 0 && inet_ptoi($end_ip) < 0){
	1684	+ // This is right
	1685	+ }else{
	1686	+ $error[] = __('The End IP cannot be smaller than the Start IP', 'loginizer');
	1687	+ }
	1688	+
	1689	+ }
	1690	+
	1691	+ if(empty($error)){
	1692	+
	1693	+ $blacklist = $loginizer['blacklist'];
	1694	+
	1695	+ foreach($blacklist as $k => $v){
	1696	+
	1697	+ // This is to check if there is any other range exists with the same Start or End IP
	1698	+ if(( inet_ptoi($start_ip) <= inet_ptoi($v['start']) && inet_ptoi($v['start']) <= inet_ptoi($end_ip) )
	1699	+ || ( inet_ptoi($start_ip) <= inet_ptoi($v['end']) && inet_ptoi($v['end']) <= inet_ptoi($end_ip) )
	1700	+ ){
	1701	+ $error[] = __('The Start IP or End IP submitted conflicts with an existing IP range !', 'loginizer');
	1702	+ break;
	1703	+ }
	1704	+
	1705	+ // This is to check if there is any other range exists with the same Start IP
	1706	+ if(inet_ptoi($v['start']) <= inet_ptoi($start_ip) && inet_ptoi($start_ip) <= inet_ptoi($v['end'])){
	1707	+ $error[] = __('The Start IP is present in an existing range !', 'loginizer');
	1708	+ break;
	1709	+ }
	1710	+
	1711	+ // This is to check if there is any other range exists with the same End IP
	1712	+ if(inet_ptoi($v['start']) <= inet_ptoi($end_ip) && inet_ptoi($end_ip) <= inet_ptoi($v['end'])){
	1713	+ $error[] = __('The End IP is present in an existing range!', 'loginizer');
	1714	+ break;
	1715	+ }
	1716	+
	1717	+ }
	1718	+
	1719	+ $newid = ( empty($blacklist) ? 0 : max(array_keys($blacklist)) ) + 1;
	1720	+
	1721	+ if(empty($error)){
	1722	+
	1723	+ $blacklist[$newid] = array();
	1724	+ $blacklist[$newid]['start'] = $start_ip;
	1725	+ $blacklist[$newid]['end'] = $end_ip;
	1726	+ $blacklist[$newid]['time'] = time();
	1727	+
	1728	+ update_option('loginizer_blacklist', $blacklist);
	1729	+
	1730	+ echo '<div id="message" class="updated fade"><p>'
	1731	+ . __('Blacklist IP range added successfully', 'loginizer')
	1732	+ . '</p></div><br />';
	1733	+
	1734	+ }
	1735	+
	1736	+ }
	1737	+
	1738	+ if(!empty($error)){
	1739	+ lz_report_error($error);echo '<br />';
	1740	+ }
	1741	+
	1742	+ }
	1743	+
	1744	+ if(isset($_POST['whitelist_iprange'])){
690	1745
691		- // Setting up data variables.
692		- $date = current_datetime()->format('Y-m-d H:i:s') .' '. $time_zone;
693		- } else {
694		- $date = date("Y-m-d H:i:s", time()) . ' ' . date_default_timezone_get();
	1746	+ $start_ip = lz_optpost('start_ip_w');
	1747	+ $end_ip = lz_optpost('end_ip_w');
	1748	+
	1749	+ if(empty($start_ip)){
	1750	+ $error[] = __('Please enter the Start IP', 'loginizer');
	1751	+ }
	1752	+
	1753	+ // If no end IP we consider only 1 IP
	1754	+ if(empty($end_ip)){
	1755	+ $end_ip = $start_ip;
	1756	+ }
	1757	+
	1758	+ if(!lz_valid_ip($start_ip)){
	1759	+ $error[] = __('Please provide a valid start IP', 'loginizer');
	1760	+ }
	1761	+
	1762	+ if(!lz_valid_ip($end_ip)){
	1763	+ $error[] = __('Please provide a valid end IP', 'loginizer');
	1764	+ }
	1765	+
	1766	+ if(inet_ptoi($start_ip) > inet_ptoi($end_ip)){
	1767	+
	1768	+ // BUT, if 0.0.0.1 - 255.255.255.255 is given, it will not work
	1769	+ if(inet_ptoi($start_ip) >= 0 && inet_ptoi($end_ip) < 0){
	1770	+ // This is right
	1771	+ }else{
	1772	+ $error[] = __('The End IP cannot be smaller than the Start IP', 'loginizer');
	1773	+ }
	1774	+
	1775	+ }
	1776	+
	1777	+ if(empty($error)){
	1778	+
	1779	+ $whitelist = $loginizer['whitelist'];
	1780	+
	1781	+ foreach($whitelist as $k => $v){
	1782	+
	1783	+ // This is to check if there is any other range exists with the same Start or End IP
	1784	+ if(( inet_ptoi($start_ip) <= inet_ptoi($v['start']) && inet_ptoi($v['start']) <= inet_ptoi($end_ip) )
	1785	+ || ( inet_ptoi($start_ip) <= inet_ptoi($v['end']) && inet_ptoi($v['end']) <= inet_ptoi($end_ip) )
	1786	+ ){
	1787	+ $error[] = __('The Start IP or End IP submitted conflicts with an existing IP range !', 'loginizer');
	1788	+ break;
	1789	+ }
	1790	+
	1791	+ // This is to check if there is any other range exists with the same Start IP
	1792	+ if(inet_ptoi($v['start']) <= inet_ptoi($start_ip) && inet_ptoi($start_ip) <= inet_ptoi($v['end'])){
	1793	+ $error[] = __('The Start IP is present in an existing range !', 'loginizer');
	1794	+ break;
	1795	+ }
	1796	+
	1797	+ // This is to check if there is any other range exists with the same End IP
	1798	+ if(inet_ptoi($v['start']) <= inet_ptoi($end_ip) && inet_ptoi($end_ip) <= inet_ptoi($v['end'])){
	1799	+ $error[] = __('The End IP is present in an existing range!', 'loginizer');
	1800	+ break;
	1801	+ }
	1802	+
	1803	+ }
	1804	+
	1805	+ $newid = ( empty($whitelist) ? 0 : max(array_keys($whitelist)) ) + 1;
	1806	+
	1807	+ if(empty($error)){
	1808	+
	1809	+ $whitelist[$newid] = array();
	1810	+ $whitelist[$newid]['start'] = $start_ip;
	1811	+ $whitelist[$newid]['end'] = $end_ip;
	1812	+ $whitelist[$newid]['time'] = time();
	1813	+
	1814	+ update_option('loginizer_whitelist', $whitelist);
	1815	+
	1816	+ echo '<div id="message" class="updated fade"><p>'
	1817	+ . __('Whitelist IP range added successfully', 'loginizer')
	1818	+ . '</p></div><br />';
	1819	+
	1820	+ }
	1821	+
	1822	+ }
	1823	+
	1824	+ if(!empty($error)){
	1825	+ lz_report_error($error);echo '<br />';
	1826	+ }
695	1827	}
	1828	+
	1829	+ // Save the messages
	1830	+ if(isset($_POST['save_err_msgs_lz'])){
	1831	+
	1832	+ $msgs['inv_userpass'] = lz_optpost('msg_inv_userpass');
	1833	+ $msgs['ip_blacklisted'] = lz_optpost('msg_ip_blacklisted');
	1834	+ $msgs['attempts_left'] = lz_optpost('msg_attempts_left');
	1835	+ $msgs['lockout_err'] = lz_optpost('msg_lockout_err');
	1836	+ $msgs['minutes_err'] = lz_optpost('msg_minutes_err');
	1837	+ $msgs['hours_err'] = lz_optpost('msg_hours_err');
	1838	+
	1839	+ // Update them
	1840	+ update_option('loginizer_msg', $msgs);
	1841	+
	1842	+ echo '<div id="message" class="updated fade"><p>'
	1843	+ . __('Error messages were saved successfully', 'loginizer')
	1844	+ . '</p></div><br />';
	1845	+
	1846	+ }
696	1847
697		- $sitename = lz_is_multisite() ? get_site_option('site_name') : get_option('blogname');
698		- $email = $user->data->user_email;
	1848	+ // Count the Results
	1849	+ $tmp = lz_selectquery("SELECT COUNT(*) AS num FROM `".$wpdb->prefix."loginizer_logs`");
	1850	+ //print_r($tmp);
	1851	+
	1852	+ // Which Page is it
	1853	+ $lz_env['res_len'] = 10;
	1854	+ $lz_env['cur_page'] = lz_get_page('lzpage', $lz_env['res_len']);
	1855	+ $lz_env['num_res'] = $tmp['num'];
	1856	+ $lz_env['max_page'] = ceil($lz_env['num_res'] / $lz_env['res_len']);
	1857	+
	1858	+ // Get the logs
	1859	+ $result = lz_selectquery("SELECT * FROM `".$wpdb->prefix."loginizer_logs`
	1860	+ ORDER BY `time` DESC
	1861	+ LIMIT ".$lz_env['cur_page'].", ".$lz_env['res_len']."", 1);
	1862	+ //print_r($result);
	1863	+
	1864	+ $lz_env['cur_page'] = ($lz_env['cur_page'] / $lz_env['res_len']) + 1;
	1865	+ $lz_env['cur_page'] = $lz_env['cur_page'] < 1 ? 1 : $lz_env['cur_page'];
	1866	+ $lz_env['next_page'] = ($lz_env['cur_page'] + 1) > $lz_env['max_page'] ? $lz_env['max_page'] : ($lz_env['cur_page'] + 1);
	1867	+ $lz_env['prev_page'] = ($lz_env['cur_page'] - 1) < 1 ? 1 : ($lz_env['cur_page'] - 1);
	1868	+
	1869	+ // Reload the settings
	1870	+ $loginizer['blacklist'] = get_option('loginizer_blacklist');
	1871	+ $loginizer['whitelist'] = get_option('loginizer_whitelist');
	1872	+
	1873	+ $saved_msgs = get_option('loginizer_msg');
	1874	+
	1875	+ ?>
699	1876
700		- $vars = array(
701		- 'date' => $date,
702		- 'ip' => esc_html($loginizer['current_ip']),
703		- 'sitename' => $sitename,
704		- 'user_login' => $user_login
705		- );
	1877	+ <div id="" class="postbox">
	1878	+
	1879	+ <div class="postbox-header">
	1880	+ <h2 class="hndle ui-sortable-handle">
	1881	+ <?php echo __('<span>Failed Login Attempts Logs</span> &nbsp; (Past '.($loginizer['reset_retries']/60/60).' hours)','loginizer'); ?>
	1882	+ </h2>
	1883	+ </div>
	1884	+
	1885	+ <script>
	1886	+ function yesdsd(){
	1887	+ window.location = '<?php echo menu_page_url('loginizer_brute_force', false);?>&lzpage='+jQuery("#current-page-selector").val();
	1888	+ return false;
	1889	+ }
	1890	+ </script>
	1891	+
	1892	+ <form method="get" onsubmit="return yesdsd();">
	1893	+ <div class="tablenav">
	1894	+ <p class="tablenav-pages" style="margin: 5px 10px" align="right">
	1895	+ <span class="displaying-num"><?php echo $lz_env['num_res'];?> items</span>
	1896	+ <span class="pagination-links">
	1897	+ <a class="first-page" href="<?php echo menu_page_url('loginizer_brute_force', false).'&lzpage=1';?>"><span class="screen-reader-text">First page</span><span aria-hidden="true">«</span></a>
	1898	+ <a class="prev-page" href="<?php echo menu_page_url('loginizer_brute_force', false).'&lzpage='.$lz_env['prev_page'];?>"><span class="screen-reader-text">Previous page</span><span aria-hidden="true">‹</span></a>
	1899	+ <span class="paging-input">
	1900	+ <label for="current-page-selector" class="screen-reader-text">Current Page</label>
	1901	+ <input class="current-page" id="current-page-selector" name="lzpage" value="<?php echo $lz_env['cur_page'];?>" size="3" aria-describedby="table-paging" type="text"><span class="tablenav-paging-text"> of <span class="total-pages"><?php echo $lz_env['max_page'];?></span></span>
	1902	+ </span>
	1903	+ <a class="next-page" href="<?php echo menu_page_url('loginizer_brute_force', false).'&lzpage='.$lz_env['next_page'];?>"><span class="screen-reader-text">Next page</span><span aria-hidden="true">›</span></a>
	1904	+ <a class="last-page" href="<?php echo menu_page_url('loginizer_brute_force', false).'&lzpage='.$lz_env['max_page'];?>"><span class="screen-reader-text">Last page</span><span aria-hidden="true">»</span></a>
	1905	+ </span>
	1906	+ </p>
	1907	+ </div>
	1908	+ </form>
	1909	+
	1910	+ <form action="" method="post" enctype="multipart/form-data">
	1911	+ <?php wp_nonce_field('loginizer-options'); ?>
	1912	+ <div class="inside">
	1913	+ <table class="wp-list-table widefat fixed users" border="0">
	1914	+ <tr>
	1915	+ <th scope="row" valign="top" style="background:#EFEFEF;" width="20">#</th>
	1916	+ <th scope="row" valign="top" style="background:#EFEFEF;"><?php echo __('IP','loginizer'); ?></th>
	1917	+ <th scope="row" valign="top" style="background:#EFEFEF;"><?php echo __('Attempted Username','loginizer'); ?></th>
	1918	+ <th scope="row" valign="top" style="background:#EFEFEF;"><?php echo __('Last Failed Attempt (DD/MM/YYYY)','loginizer'); ?></th>
	1919	+ <th scope="row" valign="top" style="background:#EFEFEF;"><?php echo __('Failed Attempts Count','loginizer'); ?></th>
	1920	+ <th scope="row" valign="top" style="background:#EFEFEF;"><?php echo __('Lockouts Count','loginizer'); ?></th>
	1921	+ <th scope="row" valign="top" style="background:#EFEFEF;" width="150"><?php echo __('URL Attacked','loginizer'); ?></th>
	1922	+ </tr>
	1923	+ <?php
	1924	+
	1925	+ if(empty($result)){
	1926	+ echo '
	1927	+ <tr>
	1928	+ <td colspan="4">
	1929	+ '.__('No Logs. You will see logs about failed login attempts here.', 'loginizer').'
	1930	+ </td>
	1931	+ </tr>';
	1932	+ }else{
	1933	+ foreach($result as $ik => $iv){
	1934	+ $status_button = (!empty($iv['status']) ? 'disable' : 'enable');
	1935	+ echo '
	1936	+ <tr>
	1937	+ <td>
	1938	+ <input type="checkbox" value="'.esc_attr($iv['ip']).'" name="lz_reset_ips[]" />
	1939	+ </td>
	1940	+ <td>
	1941	+ '.esc_html($iv['ip']).'
	1942	+ </td>
	1943	+ <td>
	1944	+ '.esc_html($iv['username']).'
	1945	+ </td>
	1946	+ <td>
	1947	+ '.date('d/M/Y H:i:s P', $iv['time']).'
	1948	+ </td>
	1949	+ <td>
	1950	+ '.esc_html($iv['count']).'
	1951	+ </td>
	1952	+ <td>
	1953	+ '.esc_html($iv['lockout']).'
	1954	+ </td>
	1955	+ <td>
	1956	+ '.esc_html($iv['url']).'
	1957	+ </td>
	1958	+ </tr>';
	1959	+ }
	1960	+ }
	1961	+
	1962	+ ?>
	1963	+ </table>
	1964	+
	1965	+ <br>
	1966	+ <input name="lz_reset_ip" class="button button-primary action" value="<?php echo __('Remove From Logs', 'loginizer'); ?>" type="submit" />
	1967	+ &nbsp; &nbsp;
	1968	+ <input name="lz_reset_all_ip" class="button button-primary action" value="<?php echo __('Clear All Logs', 'loginizer'); ?>" type="submit" />
	1969	+ </div>
	1970	+ </div>
	1971	+ </form>
	1972	+ <br />
	1973	+
	1974	+ <div id="" class="postbox">
	1975	+
	1976	+ <div class="postbox-header">
	1977	+ <h2 class="hndle ui-sortable-handle">
	1978	+ <span><?php echo __('Brute Force Settings', 'loginizer'); ?></span>
	1979	+ </h2>
	1980	+ </div>
	1981	+
	1982	+ <div class="inside">
	1983	+
	1984	+ <form action="" method="post" enctype="multipart/form-data">
	1985	+ <?php wp_nonce_field('loginizer-options'); ?>
	1986	+ <table class="form-table">
	1987	+ <tr>
	1988	+ <th scope="row" valign="top"><label for="max_retries"><?php echo __('Max Retries','loginizer'); ?></label></th>
	1989	+ <td>
	1990	+ <input type="text" size="3" value="<?php echo lz_optpost('max_retries', $loginizer['max_retries']); ?>" name="max_retries" id="max_retries" /> <?php echo __('Maximum failed attempts allowed before lockout','loginizer'); ?> <br />
	1991	+ </td>
	1992	+ </tr>
	1993	+ <tr>
	1994	+ <th scope="row" valign="top"><label for="lockout_time"><?php echo __('Lockout Time','loginizer'); ?></label></th>
	1995	+ <td>
	1996	+ <input type="text" size="3" value="<?php echo (!empty($lockout_time) ? $lockout_time : $loginizer['lockout_time']) / 60; ?>" name="lockout_time" id="lockout_time" /> <?php echo __('minutes','loginizer'); ?> <br />
	1997	+ </td>
	1998	+ </tr>
	1999	+ <tr>
	2000	+ <th scope="row" valign="top"><label for="max_lockouts"><?php echo __('Max Lockouts','loginizer'); ?></label></th>
	2001	+ <td>
	2002	+ <input type="text" size="3" value="<?php echo lz_optpost('max_lockouts', $loginizer['max_lockouts']); ?>" name="max_lockouts" id="max_lockouts" /> <?php echo __('','loginizer'); ?> <br />
	2003	+ </td>
	2004	+ </tr>
	2005	+ <tr>
	2006	+ <th scope="row" valign="top"><label for="lockouts_extend"><?php echo __('Extend Lockout','loginizer'); ?></label></th>
	2007	+ <td>
	2008	+ <input type="text" size="3" value="<?php echo (!empty($lockouts_extend) ? $lockouts_extend : $loginizer['lockouts_extend']) / 60 / 60; ?>" name="lockouts_extend" id="lockouts_extend" /> <?php echo __('hours. Extend Lockout time after Max Lockouts','loginizer'); ?> <br />
	2009	+ </td>
	2010	+ </tr>
	2011	+ <tr>
	2012	+ <th scope="row" valign="top"><label for="reset_retries"><?php echo __('Reset Retries','loginizer'); ?></label></th>
	2013	+ <td>
	2014	+ <input type="text" size="3" value="<?php echo (!empty($reset_retries) ? $reset_retries : $loginizer['reset_retries']) / 60 / 60; ?>" name="reset_retries" id="reset_retries" /> <?php echo __('hours','loginizer'); ?> <br />
	2015	+ </td>
	2016	+ </tr>
	2017	+ <tr>
	2018	+ <th scope="row" valign="top"><label for="notify_email"><?php echo __('Email Notification','loginizer'); ?></label></th>
	2019	+ <td>
	2020	+ <?php echo __('after ','loginizer'); ?>
	2021	+ <input type="text" size="3" value="<?php echo (!empty($notify_email) ? $notify_email : $loginizer['notify_email']); ?>" name="notify_email" id="notify_email" /> <?php echo __('lockouts <br />0 to disable email notifications','loginizer'); ?>
	2022	+ </td>
	2023	+ </tr>
	2024	+ </table><br />
	2025	+ <input name="save_lz" class="button button-primary action" value="<?php echo __('Save Settings','loginizer'); ?>" type="submit" />
	2026	+ <?php
	2027	+
	2028	+ if(empty($loginizer['disable_brute'])){
	2029	+
	2030	+ echo '<input name="disable_brute_lz" class="button action" value="'.__('Disable Brute Force Protection','loginizer').'" type="submit" style="float:right" />';
	2031	+
	2032	+ }else{
	2033	+
	2034	+ echo '<input name="enable_brute_lz" class="button button-primary action" value="'.__('Enable Brute Force Protection','loginizer').'" type="submit" style="float:right" />';
	2035	+
	2036	+ }
	2037	+
	2038	+ ?>
	2039	+ </form>
	2040	+
	2041	+ </div>
	2042	+ </div>
	2043	+ <br />
	2044	+
	2045	+<?php
	2046	+
	2047	+ wp_enqueue_script('jquery-paginate', LOGINIZER_URL.'/jquery-paginate.js', array('jquery'), '1.10.15');
	2048	+
	2049	+?>
706	2050
707		- $message = lz_lang_vars_name($loginizer['login_mail_body'], $vars);
708		- $subject = lz_lang_vars_name($loginizer['login_mail_subject'], $vars);
	2051	+<style>
	2052	+.page-navigation a {
	2053	+margin: 5px 2px;
	2054	+display: inline-block;
	2055	+padding: 5px 8px;
	2056	+color: #0073aa;
	2057	+background: #e5e5e5 none repeat scroll 0 0;
	2058	+border: 1px solid #ccc;
	2059	+text-decoration: none;
	2060	+transition-duration: 0.05s;
	2061	+transition-property: border, background, color;
	2062	+transition-timing-function: ease-in-out;
	2063	+}
	2064	+
	2065	+.page-navigation a[data-selected] {
	2066	+background-color: #00a0d2;
	2067	+color: #fff;
	2068	+}
	2069	+</style>
	2070	+
	2071	+<script>
	2072	+
	2073	+jQuery(document).ready(function(){
	2074	+ jQuery('#lz_bl_table').paginate({ limit: 11, navigationWrapper: jQuery('#lz_bl_nav')});
	2075	+ jQuery('#lz_wl_table').paginate({ limit: 11, navigationWrapper: jQuery('#lz_wl_nav')});
	2076	+});
	2077	+
	2078	+// Delete a Blacklist / Whitelist IP Range
	2079	+function del_confirm(field, todo_id, msg){
	2080	+ var ret = confirm(msg);
709	2081
710		- $headers = [];
	2082	+ if(ret){
	2083	+ jQuery('#lz_bl_wl_todo').attr('name', field);
	2084	+ jQuery('#lz_bl_wl_todo').val(todo_id);
	2085	+ jQuery('#lz_bl_wl_form').submit();
	2086	+ }
711	2087
712		- // Do we need to send the email as HTML ?
713		- if(!empty($loginizer['login_mail']['html_mail'])){
714		- $headers[] = 'Content-Type: text/html; charset=UTF-8';
	2088	+ return false;
	2089	+
	2090	+}
	2091	+
	2092	+// Delete all Blacklist / Whitelist IP Ranges
	2093	+function del_confirm_all(msg){
	2094	+ var ret = confirm(msg);
	2095	+
	2096	+ if(ret){
	2097	+ return true;
	2098	+ }
	2099	+
	2100	+ return false;
	2101	+
	2102	+}
	2103	+
	2104	+</script>
	2105	+
	2106	+ <div id="" class="postbox">
	2107	+
	2108	+ <div class="postbox-header">
	2109	+ <h2 class="hndle ui-sortable-handle">
	2110	+ <span><?php echo __('Blacklist IP','loginizer'); ?></span>
	2111	+ </h2>
	2112	+ </div>
715	2113
716		- if(!empty($loginizer['login_mail']['body'])){
717		- $message = html_entity_decode($message);
	2114	+ <div class="inside">
	2115	+
	2116	+ <?php echo __('Enter the IP you want to blacklist from login','loginizer'); ?>
	2117	+
	2118	+ <form action="" method="post">
	2119	+ <?php wp_nonce_field('loginizer-options'); ?>
	2120	+ <table class="form-table">
	2121	+ <tr>
	2122	+ <th scope="row" valign="top"><label for="start_ip"><?php echo __('Start IP','loginizer'); ?></label></th>
	2123	+ <td>
	2124	+ <input type="text" size="25" value="<?php echo(lz_optpost('start_ip')); ?>" name="start_ip" id="start_ip"/> <?php echo __('Start IP of the range','loginizer'); ?> <br />
	2125	+ </td>
	2126	+ </tr>
	2127	+ <tr>
	2128	+ <th scope="row" valign="top"><label for="end_ip"><?php echo __('End IP (Optional)','loginizer'); ?></label></th>
	2129	+ <td>
	2130	+ <input type="text" size="25" value="<?php echo(lz_optpost('end_ip')); ?>" name="end_ip" id="end_ip"/> <?php echo __('End IP of the range. <br />If you want to blacklist single IP leave this field blank.','loginizer'); ?> <br />
	2131	+ </td>
	2132	+ </tr>
	2133	+ </table><br />
	2134	+ <input name="blacklist_iprange" class="button button-primary action" value="<?php echo __('Add Blacklist IP Range','loginizer'); ?>" type="submit" />
	2135	+ <input style="float:right" name="del_all_blacklist" onclick="return del_confirm_all('<?php echo __('Are you sure you want to delete all Blacklist IP Range(s) ?','loginizer'); ?>')" class="button action" value="<?php echo __('Delete All Blacklist IP Range(s)','loginizer'); ?>" type="submit" />
	2136	+ </form>
	2137	+ </div>
	2138	+
	2139	+ <div id="lz_bl_nav" style="margin: 5px 10px; text-align:right"></div>
	2140	+ <table id="lz_bl_table" class="wp-list-table fixed striped users" border="0" width="95%" cellpadding="10" align="center">
	2141	+ <tr>
	2142	+ <th scope="row" valign="top" style="background:#EFEFEF;"><?php echo __('Start IP','loginizer'); ?></th>
	2143	+ <th scope="row" valign="top" style="background:#EFEFEF;"><?php echo __('End IP','loginizer'); ?></th>
	2144	+ <th scope="row" valign="top" style="background:#EFEFEF;"><?php echo __('Date (DD/MM/YYYY)','loginizer'); ?></th>
	2145	+ <th scope="row" valign="top" style="background:#EFEFEF;" width="100"><?php echo __('Options','loginizer'); ?></th>
	2146	+ </tr>
	2147	+ <?php
	2148	+ if(empty($loginizer['blacklist'])){
	2149	+ echo '
	2150	+ <tr>
	2151	+ <td colspan="4">
	2152	+ '.__('No Blacklist IPs. You will see blacklisted IP ranges here.', 'loginizer').'
	2153	+ </td>
	2154	+ </tr>';
	2155	+ }else{
	2156	+ foreach($loginizer['blacklist'] as $ik => $iv){
	2157	+ echo '
	2158	+ <tr>
	2159	+ <td>
	2160	+ '.$iv['start'].'
	2161	+ </td>
	2162	+ <td>
	2163	+ '.$iv['end'].'
	2164	+ </td>
	2165	+ <td>
	2166	+ '.date('d/m/Y', $iv['time']).'
	2167	+ </td>
	2168	+ <td>
	2169	+ <a class="submitdelete" href="javascript:void(0)" onclick="return del_confirm(\'bdelid\', '.$ik.', \'Are you sure you want to delete this IP range ?\')">Delete</a>
	2170	+ </td>
	2171	+ </tr>';
	2172	+ }
	2173	+ }
	2174	+ ?>
	2175	+ </table>
	2176	+ <br />
	2177	+ <form action="" method="post" id="lz_bl_wl_form">
	2178	+ <?php wp_nonce_field('loginizer-options'); ?>
	2179	+ <input type="hidden" value="" name="" id="lz_bl_wl_todo"/>
	2180	+ </form>
	2181	+ </div>
	2182	+
	2183	+ <br />
	2184	+
	2185	+ <div id="" class="postbox">
	2186	+
	2187	+ <div class="postbox-header">
	2188	+ <h2 class="hndle ui-sortable-handle">
	2189	+ <span><?php echo __('Whitelist IP', 'loginizer'); ?></span>
	2190	+ </h2>
	2191	+ </div>
	2192	+
	2193	+ <div class="inside">
	2194	+
	2195	+ <?php echo __('Enter the IP you want to whitelist for login','loginizer'); ?>
	2196	+ <form action="" method="post">
	2197	+ <?php wp_nonce_field('loginizer-options'); ?>
	2198	+ <table class="form-table">
	2199	+ <tr>
	2200	+ <th scope="row" valign="top"><label for="start_ip_w"><?php echo __('Start IP','loginizer'); ?></label></th>
	2201	+ <td>
	2202	+ <input type="text" size="25" value="<?php echo(lz_optpost('start_ip_w')); ?>" name="start_ip_w" id="start_ip_w"/> <?php echo __('Start IP of the range','loginizer'); ?> <br />
	2203	+ </td>
	2204	+ </tr>
	2205	+ <tr>
	2206	+ <th scope="row" valign="top"><label for="end_ip_w"><?php echo __('End IP (Optional)','loginizer'); ?></label></th>
	2207	+ <td>
	2208	+ <input type="text" size="25" value="<?php echo(lz_optpost('end_ip_w')); ?>" name="end_ip_w" id="end_ip_w"/> <?php echo __('End IP of the range. <br />If you want to whitelist single IP leave this field blank.','loginizer'); ?> <br />
	2209	+ </td>
	2210	+ </tr>
	2211	+ </table><br />
	2212	+ <input name="whitelist_iprange" class="button button-primary action" value="<?php echo __('Add Whitelist IP Range','loginizer'); ?>" type="submit" />
	2213	+ <input style="float:right" name="del_all_whitelist" onclick="return del_confirm_all('<?php echo __('Are you sure you want to delete all Whitelist IP Range(s) ?','loginizer'); ?>')" class="button action" value="<?php echo __('Delete All Whitelist IP Range(s)','loginizer'); ?>" type="submit" />
	2214	+ </form>
	2215	+ </div>
	2216	+
	2217	+ <div id="lz_wl_nav" style="margin: 5px 10px; text-align:right"></div>
	2218	+ <table id="lz_wl_table" class="wp-list-table fixed striped users" border="0" width="95%" cellpadding="10" align="center">
	2219	+ <tr>
	2220	+ <th scope="row" valign="top" style="background:#EFEFEF;"><?php echo __('Start IP','loginizer'); ?></th>
	2221	+ <th scope="row" valign="top" style="background:#EFEFEF;"><?php echo __('End IP','loginizer'); ?></th>
	2222	+ <th scope="row" valign="top" style="background:#EFEFEF;"><?php echo __('Date (DD/MM/YYYY)','loginizer'); ?></th>
	2223	+ <th scope="row" valign="top" style="background:#EFEFEF;" width="100"><?php echo __('Options','loginizer'); ?></th>
	2224	+ </tr>
	2225	+ <?php
	2226	+ if(empty($loginizer['whitelist'])){
	2227	+ echo '
	2228	+ <tr>
	2229	+ <td colspan="4">
	2230	+ '.__('No Whitelist IPs. You will see whitelisted IP ranges here.', 'loginizer').'
	2231	+ </td>
	2232	+ </tr>';
	2233	+ }else{
	2234	+ foreach($loginizer['whitelist'] as $ik => $iv){
	2235	+ echo '
	2236	+ <tr>
	2237	+ <td>
	2238	+ '.$iv['start'].'
	2239	+ </td>
	2240	+ <td>
	2241	+ '.$iv['end'].'
	2242	+ </td>
	2243	+ <td>
	2244	+ '.date('d/m/Y', $iv['time']).'
	2245	+ </td>
	2246	+ <td>
	2247	+ <a class="submitdelete" href="javascript:void(0)" onclick="return del_confirm(\'delid\', '.$ik.', \'Are you sure you want to delete this IP range ?\')">Delete</a>
	2248	+ </td>
	2249	+ </tr>';
	2250	+ }
	2251	+ }
	2252	+ ?>
	2253	+ </table>
	2254	+ <br />
	2255	+
	2256	+ </div>
	2257	+
	2258	+ <div id="" class="postbox">
	2259	+
	2260	+ <div class="postbox-header">
	2261	+ <h2 class="hndle ui-sortable-handle">
	2262	+ <span><?php echo __('Error Messages', 'loginizer'); ?></span>
	2263	+ </h2>
	2264	+ </div>
	2265	+
	2266	+ <div class="inside">
	2267	+
	2268	+ <form action="" method="post" enctype="multipart/form-data">
	2269	+ <?php wp_nonce_field('loginizer-options'); ?>
	2270	+ <table class="form-table">
	2271	+ <tr>
	2272	+ <th scope="row" valign="top"><label for="msg_inv_userpass"><?php echo __('Failed Login Attempt','loginizer'); ?></label></th>
	2273	+ <td>
	2274	+ <input type="text" size="25" value="<?php echo esc_attr(@$saved_msgs['inv_userpass']); ?>" name="msg_inv_userpass" id="msg_inv_userpass" />
	2275	+ <?php echo __('Default: <em>&quot;' . $loginizer['d_msg']['inv_userpass']. '&quot;</em>', 'loginizer'); ?><br />
	2276	+ </td>
	2277	+ </tr>
	2278	+ <tr>
	2279	+ <th scope="row" valign="top"><label for="msg_ip_blacklisted"><?php echo __('Blacklisted IP','loginizer'); ?></label></th>
	2280	+ <td>
	2281	+ <input type="text" size="25" value="<?php echo esc_attr(@$saved_msgs['ip_blacklisted']); ?>" name="msg_ip_blacklisted" id="msg_ip_blacklisted" />
	2282	+ <?php echo __('Default: <em>&quot;' . $loginizer['d_msg']['ip_blacklisted']. '&quot;</em>', 'loginizer'); ?><br />
	2283	+ </td>
	2284	+ </tr>
	2285	+ <tr>
	2286	+ <th scope="row" valign="top"><label for="msg_attempts_left"><?php echo __('Attempts Left','loginizer'); ?></label></th>
	2287	+ <td>
	2288	+ <input type="text" size="25" value="<?php echo esc_attr(@$saved_msgs['attempts_left']); ?>" name="msg_attempts_left" id="msg_attempts_left" />
	2289	+ <?php echo __('Default: <em>&quot;' . $loginizer['d_msg']['attempts_left']. '&quot;</em>', 'loginizer'); ?><br />
	2290	+ </td>
	2291	+ </tr>
	2292	+ <tr>
	2293	+ <th scope="row" valign="top"><label for="msg_lockout_err"><?php echo __('Lockout Error','loginizer'); ?></label></th>
	2294	+ <td>
	2295	+ <input type="text" size="25" value="<?php echo esc_attr(@$saved_msgs['lockout_err']); ?>" name="msg_lockout_err" id="msg_lockout_err" />
	2296	+ <?php echo __('Default: <em>&quot;' . strip_tags($loginizer['d_msg']['lockout_err']). '&quot;</em>', 'loginizer'); ?><br />
	2297	+ </td>
	2298	+ </tr>
	2299	+ <tr>
	2300	+ <th scope="row" valign="top"><label for="msg_minutes_err"><?php echo __('Minutes','loginizer'); ?></label></th>
	2301	+ <td>
	2302	+ <input type="text" size="25" value="<?php echo esc_attr(@$saved_msgs['minutes_err']); ?>" name="msg_minutes_err" id="msg_minutes_err" />
	2303	+ <?php echo __('Default: <em>&quot;' . strip_tags($loginizer['d_msg']['minutes_err']). '&quot;</em>', 'loginizer'); ?><br />
	2304	+ </td>
	2305	+ </tr>
	2306	+ <tr>
	2307	+ <th scope="row" valign="top"><label for="msg_hours_err"><?php echo __('Hours','loginizer'); ?></label></th>
	2308	+ <td>
	2309	+ <input type="text" size="25" value="<?php echo esc_attr(@$saved_msgs['hours_err']); ?>" name="msg_hours_err" id="msg_hours_err" />
	2310	+ <?php echo __('Default: <em>&quot;' . strip_tags($loginizer['d_msg']['hours_err']). '&quot;</em>', 'loginizer'); ?><br />
	2311	+ </td>
	2312	+ </tr>
	2313	+ </table><br />
	2314	+ <input name="save_err_msgs_lz" class="button button-primary action" value="<?php echo __('Save Error Messages','loginizer'); ?>" type="submit" />
	2315	+ </form>
	2316	+ </div>
	2317	+ </div>
	2318	+<?php
	2319	+
	2320	+loginizer_page_footer();
	2321	+
	2322	+}
	2323	+
	2324	+//---------------------
	2325	+// Admin Menu Pro Pages
	2326	+//---------------------
	2327	+
	2328	+// Loginizer - reCaptcha Page
	2329	+function loginizer_page_recaptcha(){
	2330	+
	2331	+ global $loginizer, $lz_error, $lz_env;
	2332	+
	2333	+ if(!current_user_can('manage_options')){
	2334	+ wp_die('Sorry, but you do not have permissions to change settings.');
	2335	+ }
	2336	+
	2337	+ if(!loginizer_is_premium() && count($_POST) > 0){
	2338	+ $lz_error['not_in_free'] = __('This feature is not available in the Free version. <a href="'.LOGINIZER_PRICING_URL.'" target="_blank" style="text-decoration:none; color:green;"><b>Upgrade to Pro</b></a>', 'loginizer');
	2339	+ return loginizer_page_recaptcha_T();
	2340	+ }
	2341	+
	2342	+ /* Make sure post was from this page */
	2343	+ if(count($_POST) > 0){
	2344	+ check_admin_referer('loginizer-options');
	2345	+ }
	2346	+
	2347	+ // Themes
	2348	+ $lz_env['theme']['light'] = 'Light';
	2349	+ $lz_env['theme']['dark'] = 'Dark';
	2350	+
	2351	+ // Langs
	2352	+ $lz_env['lang'][''] = 'Auto Detect';
	2353	+ $lz_env['lang']['ar'] = 'Arabic';
	2354	+ $lz_env['lang']['bg'] = 'Bulgarian';
	2355	+ $lz_env['lang']['ca'] = 'Catalan';
	2356	+ $lz_env['lang']['zh-CN'] = 'Chinese (Simplified)';
	2357	+ $lz_env['lang']['zh-TW'] = 'Chinese (Traditional)';
	2358	+ $lz_env['lang']['hr'] = 'Croatian';
	2359	+ $lz_env['lang']['cs'] = 'Czech';
	2360	+ $lz_env['lang']['da'] = 'Danish';
	2361	+ $lz_env['lang']['nl'] = 'Dutch';
	2362	+ $lz_env['lang']['en-GB'] = 'English (UK)';
	2363	+ $lz_env['lang']['en'] = 'English (US)';
	2364	+ $lz_env['lang']['fil'] = 'Filipino';
	2365	+ $lz_env['lang']['fi'] = 'Finnish';
	2366	+ $lz_env['lang']['fr'] = 'French';
	2367	+ $lz_env['lang']['fr-CA'] = 'French (Canadian)';
	2368	+ $lz_env['lang']['de'] = 'German';
	2369	+ $lz_env['lang']['de-AT'] = 'German (Austria)';
	2370	+ $lz_env['lang']['de-CH'] = 'German (Switzerland)';
	2371	+ $lz_env['lang']['el'] = 'Greek';
	2372	+ $lz_env['lang']['iw'] = 'Hebrew';
	2373	+ $lz_env['lang']['hi'] = 'Hindi';
	2374	+ $lz_env['lang']['hu'] = 'Hungarain';
	2375	+ $lz_env['lang']['id'] = 'Indonesian';
	2376	+ $lz_env['lang']['it'] = 'Italian';
	2377	+ $lz_env['lang']['ja'] = 'Japanese';
	2378	+ $lz_env['lang']['ko'] = 'Korean';
	2379	+ $lz_env['lang']['lv'] = 'Latvian';
	2380	+ $lz_env['lang']['lt'] = 'Lithuanian';
	2381	+ $lz_env['lang']['no'] = 'Norwegian';
	2382	+ $lz_env['lang']['fa'] = 'Persian';
	2383	+ $lz_env['lang']['pl'] = 'Polish';
	2384	+ $lz_env['lang']['pt'] = 'Portuguese';
	2385	+ $lz_env['lang']['pt-BR'] = 'Portuguese (Brazil)';
	2386	+ $lz_env['lang']['pt-PT'] = 'Portuguese (Portugal)';
	2387	+ $lz_env['lang']['ro'] = 'Romanian';
	2388	+ $lz_env['lang']['ru'] = 'Russian';
	2389	+ $lz_env['lang']['sr'] = 'Serbian';
	2390	+ $lz_env['lang']['sk'] = 'Slovak';
	2391	+ $lz_env['lang']['sl'] = 'Slovenian';
	2392	+ $lz_env['lang']['es'] = 'Spanish';
	2393	+ $lz_env['lang']['es-419'] = 'Spanish (Latin America)';
	2394	+ $lz_env['lang']['sv'] = 'Swedish';
	2395	+ $lz_env['lang']['th'] = 'Thai';
	2396	+ $lz_env['lang']['tr'] = 'Turkish';
	2397	+ $lz_env['lang']['uk'] = 'Ukrainian';
	2398	+ $lz_env['lang']['vi'] = 'Vietnamese';
	2399	+
	2400	+ // Sizes
	2401	+ $lz_env['size']['normal'] = 'Normal';
	2402	+ $lz_env['size']['compact'] = 'Compact';
	2403	+
	2404	+ if(isset($_POST['save_lz'])){
	2405	+
	2406	+ // Google Captcha
	2407	+ $option['captcha_type'] = lz_optpost('captcha_type');
	2408	+ $option['captcha_key'] = lz_optpost('captcha_key');
	2409	+ $option['captcha_secret'] = lz_optpost('captcha_secret');
	2410	+ $option['captcha_theme'] = lz_optpost('captcha_theme');
	2411	+ $option['captcha_size'] = lz_optpost('captcha_size');
	2412	+ $option['captcha_lang'] = lz_optpost('captcha_lang');
	2413	+
	2414	+ // No Google Captcha
	2415	+ $option['captcha_text'] = lz_optpost('captcha_text');
	2416	+ $option['captcha_time'] = (int) lz_optpost('captcha_time');
	2417	+ $option['captcha_words'] = (int) lz_optpost('captcha_words');
	2418	+ $option['captcha_add'] = (int) lz_optpost('captcha_add');
	2419	+ $option['captcha_subtract'] = (int) lz_optpost('captcha_subtract');
	2420	+ $option['captcha_multiply'] = (int) lz_optpost('captcha_multiply');
	2421	+ $option['captcha_divide'] = (int) lz_optpost('captcha_divide');
	2422	+
	2423	+ // Checkboxes
	2424	+ $option['captcha_user_hide'] = (int) lz_optpost('captcha_user_hide');
	2425	+ $option['captcha_no_css_login'] = (int) lz_optpost('captcha_no_css_login');
	2426	+ $option['captcha_login'] = (int) lz_optpost('captcha_login');
	2427	+ $option['captcha_lostpass'] = (int) lz_optpost('captcha_lostpass');
	2428	+ $option['captcha_resetpass'] = (int) lz_optpost('captcha_resetpass');
	2429	+ $option['captcha_register'] = (int) lz_optpost('captcha_register');
	2430	+ $option['captcha_comment'] = (int) lz_optpost('captcha_comment');
	2431	+ $option['captcha_wc_checkout'] = (int) lz_optpost('captcha_wc_checkout');
	2432	+
	2433	+ // Are we to use Math Captcha ?
	2434	+ if(isset($_POST['captcha_no_google'])){
	2435	+
	2436	+ $option['captcha_no_google'] = 1;
	2437	+
	2438	+ // Make the checks
	2439	+ if(strlen($option['captcha_text']) < 1){
	2440	+ $lz_error['captcha_text'] = __('The Captcha key was not submitted', 'loginizer');
	2441	+ }
	2442	+
718	2443	}else{
719		- $message = preg_replace("/\<br\s*\/\>/i", "<br/>", $message);
720		- $message = preg_replace('/(?<!<br\/>)\n/i', "<br/>\n", $message);
	2444	+
	2445	+ // Make the checks
	2446	+ if(strlen($option['captcha_key']) < 32 || strlen($option['captcha_key']) > 50){
	2447	+ $lz_error['captcha_key'] = __('The reCAPTCHA key is invalid', 'loginizer');
	2448	+ }
	2449	+
	2450	+ // Is secret valid ?
	2451	+ if(strlen($option['captcha_secret']) < 32 || strlen($option['captcha_secret']) > 50){
	2452	+ $lz_error['captcha_secret'] = __('The reCAPTCHA secret is invalid', 'loginizer');
	2453	+ }
	2454	+
	2455	+ // Is theme valid ?
	2456	+ if(empty($lz_env['theme'][$option['captcha_theme']])){
	2457	+ $lz_error['captcha_theme'] = __('The reCAPTCHA theme is invalid', 'loginizer');
	2458	+ }
	2459	+
	2460	+ // Is size valid ?
	2461	+ if(empty($lz_env['size'][$option['captcha_size']])){
	2462	+ $lz_error['captcha_size'] = __('The reCAPTCHA size is invalid', 'loginizer');
	2463	+ }
	2464	+
	2465	+ // Is lang valid ?
	2466	+ if(empty($lz_env['lang'][$option['captcha_lang']])){
	2467	+ $lz_error['captcha_lang'] = __('The reCAPTCHA language is invalid', 'loginizer');
	2468	+ }
	2469	+
721	2470	}
	2471	+
	2472	+ // Is there an error ?
	2473	+ if(!empty($lz_error)){
	2474	+ return loginizer_page_recaptcha_T();
	2475	+ }
	2476	+
	2477	+ // Save the options
	2478	+ update_option('loginizer_captcha', $option);
	2479	+
	2480	+ // Mark as saved
	2481	+ $GLOBALS['lz_saved'] = true;
	2482	+
722	2483	}
	2484	+
	2485	+ // Clear this
	2486	+ if(isset($_POST['clear_captcha_lz'])){
	2487	+
	2488	+ // Save the options
	2489	+ update_option('loginizer_captcha', '');
	2490	+
	2491	+ // Mark as saved
	2492	+ $GLOBALS['lz_cleared'] = true;
	2493	+
	2494	+ }
	2495	+
	2496	+ // Call the theme
	2497	+ loginizer_page_recaptcha_T();
	2498	+
	2499	+}
723	2500
724		- // Sending notification
725		- if(empty(wp_mail($email, $subject, $message, $headers))){
726		- error_log(__('There was a problem sending your email.', 'loginizer'));
727		- return;
	2501	+// Loginizer - reCaptcha Page Theme
	2502	+function loginizer_page_recaptcha_T(){
	2503	+
	2504	+ global $loginizer, $lz_error, $lz_env;
	2505	+
	2506	+ // Universal header
	2507	+ loginizer_page_header('reCAPTCHA Settings');
	2508	+
	2509	+ loginizer_feature_available('reCAPTCHA');
	2510	+
	2511	+ // Saved ?
	2512	+ if(!empty($GLOBALS['lz_saved'])){
	2513	+ echo '<div id="message" class="updated"><p>'. __('The settings were saved successfully', 'loginizer'). '</p></div><br />';
728	2514	}
	2515	+
	2516	+ // Cleared ?
	2517	+ if(!empty($GLOBALS['lz_cleared'])){
	2518	+ echo '<div id="message" class="updated"><p>'. __('reCAPTCHA has been disabled !', 'loginizer'). '</p></div><br />';
	2519	+ }
	2520	+
	2521	+ // Any errors ?
	2522	+ if(!empty($lz_error)){
	2523	+ lz_report_error($lz_error);echo '<br />';
	2524	+ }
	2525	+
	2526	+ ?>
	2527	+
	2528	+<style>
	2529	+input[type="text"], textarea, select {
	2530	+ width: 70%;
729	2531	}
	2532	+</style>
730	2533
731		-function loginizer_update_attempt_stats($type){
	2534	+ <div id="" class="postbox">
	2535	+
	2536	+ <div class="postbox-header">
	2537	+ <h2 class="hndle ui-sortable-handle">
	2538	+ <span><?php echo __('reCAPTCHA Settings', 'loginizer'); ?></span>
	2539	+ </h2>
	2540	+ </div>
	2541	+
	2542	+ <div class="inside">
	2543	+
	2544	+ <form action="" method="post" enctype="multipart/form-data" loginizer-premium-only="1">
	2545	+ <?php wp_nonce_field('loginizer-options'); ?>
	2546	+ <table class="form-table">
	2547	+ <tr class="lz_google_cap">
	2548	+ <td scope="row" valign="top" style="width:300px !important; padding-left:0px"><label><b><?php echo __('reCAPTCHA type', 'loginizer'); ?></b></label><br>
	2549	+ <?php echo __('Choose the type of reCAPTCHA', 'loginizer'); ?><br />
	2550	+ <?php echo __('<a href="https://g.co/recaptcha/sitetypes/" target="_blank">See Site Types for more details</a>', 'loginizer'); ?>
	2551	+ </td>
	2552	+ <td>
	2553	+ <input type="radio" value="v3" onchange="google_recaptcha_type(this)" <?php echo lz_POSTradio('captcha_type', 'v3', $loginizer['captcha_type']); ?> name="captcha_type" id="captcha_type_v3" /> <label for="captcha_type_v3"><?php echo __('reCAPTCHA v3', 'loginizer'); ?></label><br /><br />
	2554	+ <input type="radio" value="" onchange="google_recaptcha_type(this)" <?php echo lz_POSTradio('captcha_type', '', $loginizer['captcha_type']); ?> name="captcha_type" id="captcha_type_v2" /> <label for="captcha_type_v2"><?php echo __('reCAPTCHA v2 - Checkbox', 'loginizer'); ?></label><br /><br />
	2555	+ <input type="radio" value="v2_invisible" onchange="google_recaptcha_type(this)" <?php echo lz_POSTradio('captcha_type', 'v2_invisible', $loginizer['captcha_type']); ?> name="captcha_type" id="captcha_type_v2_invisible" /> <label for="captcha_type_v2_invisible"><?php echo __('reCAPTCHA v2 - Invisible', 'loginizer'); ?></label><br />
	2556	+ </td>
	2557	+ </tr>
	2558	+ <tr class="lz_google_cap">
	2559	+ <td scope="row" valign="top" style="width:300px !important; padding-left:0px"><label><b><?php echo __('Site Key', 'loginizer'); ?></b></label><br>
	2560	+ <?php echo __('Make sure you enter the correct keys as per the reCAPTCHA type selected above', 'loginizer'); ?>
	2561	+ </td>
	2562	+ <td>
	2563	+ <input type="text" size="50" value="<?php echo lz_optpost('captcha_key', $loginizer['captcha_key']); ?>" name="captcha_key" /><br />
	2564	+ <?php echo __('Get the Site Key and Secret Key from <a href="https://www.google.com/recaptcha/" target="_blank">Google</a>', 'loginizer'); ?>
	2565	+ </td>
	2566	+ </tr>
	2567	+ <tr class="lz_google_cap">
	2568	+ <th scope="row" valign="top"><label><?php echo __('Secret Key', 'loginizer'); ?></label></th>
	2569	+ <td>
	2570	+ <input type="text" size="50" value="<?php echo lz_optpost('captcha_secret', $loginizer['captcha_secret']); ?>" name="captcha_secret" />
	2571	+ </td>
	2572	+ </tr>
	2573	+ <tr class="lz_google_cap">
	2574	+ <th scope="row" valign="top"><label><?php echo __('Theme', 'loginizer'); ?></label></th>
	2575	+ <td>
	2576	+ <select name="captcha_theme">
	2577	+ <?php
	2578	+ foreach($lz_env['theme'] as $k => $v){
	2579	+ echo '<option '.lz_POSTselect('captcha_theme', $k, ($loginizer['captcha_theme'] == $k ? true : false)).' value="'.$k.'">'.$v.'</value>';
	2580	+ }
	2581	+ ?>
	2582	+ </select>
	2583	+ </td>
	2584	+ </tr>
	2585	+ <tr class="lz_google_cap">
	2586	+ <th scope="row" valign="top"><label><?php echo __('Language', 'loginizer'); ?></label></th>
	2587	+ <td>
	2588	+ <select name="captcha_lang">
	2589	+ <?php
	2590	+ foreach($lz_env['lang'] as $k => $v){
	2591	+ echo '<option '.lz_POSTselect('captcha_lang', $k, ($loginizer['captcha_lang'] == $k ? true : false)).' value="'.$k.'">'.$v.'</value>';
	2592	+ }
	2593	+ ?>
	2594	+ </select>
	2595	+ </td>
	2596	+ </tr>
	2597	+ <tr class="lz_google_cap lz_google_cap_size">
	2598	+ <th scope="row" valign="top"><label><?php echo __('Size', 'loginizer'); ?></label></th>
	2599	+ <td>
	2600	+ <select name="captcha_size">
	2601	+ <?php
	2602	+ foreach($lz_env['size'] as $k => $v){
	2603	+ echo '<option '.lz_POSTselect('captcha_size', $k, ($loginizer['captcha_size'] == $k ? true : false)).' value="'.$k.'">'.$v.'</value>';
	2604	+ }
	2605	+ ?>
	2606	+ </select>
	2607	+ </td>
	2608	+ </tr>
	2609	+ <tr>
	2610	+ <td scope="row" valign="top" style="padding-left:0px">
	2611	+ <label><b><?php echo __('Don\'t use Google reCAPTCHA', 'loginizer'); ?></b></label><br>
	2612	+ <?php echo __('If selected, '.$loginizer['prefix'].' will use a simple Math Captcha instead of Google reCAPTCHA', 'loginizer'); ?>
	2613	+ </td>
	2614	+ <td>
	2615	+ <input type="checkbox" onclick="no_google_recaptcha(this)" id="captcha_no_google" value="1" name="captcha_no_google" <?php echo lz_POSTchecked('captcha_no_google', (empty($loginizer['captcha_no_google']) ? false : true)); ?> />
	2616	+ </td>
	2617	+ </tr>
	2618	+ <tr class="lz_math_cap">
	2619	+ <td scope="row" valign="top" style="width:300px !important; padding-left:0px">
	2620	+ <label><b><?php echo __('Captcha Text', 'loginizer'); ?></b></label><br>
	2621	+ <?php echo __('The text to be shown for the Captcha Field', 'loginizer'); ?>
	2622	+ </td>
	2623	+ <td>
	2624	+ <input type="text" size="30" value="<?php echo lz_optpost('captcha_text', @$loginizer['captcha_text']); ?>" name="captcha_text" />
	2625	+ </td>
	2626	+ </tr>
	2627	+ <tr class="lz_math_cap">
	2628	+ <td scope="row" valign="top" style="padding-left:0px">
	2629	+ <label><b><?php echo __('Captcha Time', 'loginizer'); ?></b></label><br>
	2630	+ <?php echo __('Enter the number of seconds, a user has to enter captcha value.', 'loginizer'); ?>
	2631	+ </td>
	2632	+ <td>
	2633	+ <input type="text" size="30" value="<?php echo lz_optpost('captcha_time', @$loginizer['captcha_time']); ?>" name="captcha_time" />
	2634	+ </td>
	2635	+ </tr>
	2636	+ <tr class="lz_math_cap">
	2637	+ <td scope="row" valign="top" style="padding-left:0px">
	2638	+ <label><b><?php echo __('Display Captcha in Words', 'loginizer'); ?></b></label><br>
	2639	+ <?php echo __('If selected the Captcha will be displayed in words rather than numbers', 'loginizer'); ?>
	2640	+ </td>
	2641	+ <td>
	2642	+ <input type="checkbox" value="1" name="captcha_words" <?php echo lz_POSTchecked('captcha_words', (empty($loginizer['captcha_words']) ? false : true));?> />
	2643	+ </td>
	2644	+ </tr>
	2645	+ <tr class="lz_math_cap">
	2646	+ <td scope="row" valign="top" style="vertical-align: top !important; padding-left:0px">
	2647	+ <label><b><?php echo __('Mathematical operations', 'loginizer'); ?></b></label><br>
	2648	+ <?php echo __('The Mathematical operations to use for Captcha', 'loginizer'); ?>
	2649	+ </td>
	2650	+ <td valign="top">
	2651	+ <table class="wp-list-table fixed users" cellpadding="8" cellspacing="1">
	2652	+ <?php echo '
	2653	+ <tr>
	2654	+ <td>'.__('Addition (+)', 'loginizer').'</td>
	2655	+ <td><input type="checkbox" value="1" name="captcha_add" '.lz_POSTchecked('captcha_add', (empty($loginizer['captcha_add']) ? false : true)).' /></td>
	2656	+ </tr>
	2657	+ <tr>
	2658	+ <td>'.__('Subtraction (-)', 'loginizer').'</td>
	2659	+ <td><input type="checkbox" value="1" name="captcha_subtract" '.lz_POSTchecked('captcha_subtract', (empty($loginizer['captcha_subtract']) ? false : true)).' /></td>
	2660	+ </tr>
	2661	+ <tr>
	2662	+ <td>'.__('Multiplication (x)', 'loginizer').'</td>
	2663	+ <td><input type="checkbox" value="1" name="captcha_multiply" '.lz_POSTchecked('captcha_multiply', (empty($loginizer['captcha_multiply']) ? false : true)).' /></td>
	2664	+ </tr>
	2665	+ <tr>
	2666	+ <td>'.__('Division (รท)', 'loginizer').'</td>
	2667	+ <td><input type="checkbox" value="1" name="captcha_divide" '.lz_POSTchecked('captcha_divide', (empty($loginizer['captcha_divide']) ? false : true)).' /></td>
	2668	+ </tr>';
	2669	+ ?>
	2670	+ </table>
	2671	+ </td>
	2672	+ </tr>
	2673	+ <tr>
	2674	+ <th scope="row" valign="top"><label><?php echo __('Show Captcha On', 'loginizer'); ?></label></th>
	2675	+ <td valign="top">
	2676	+ <table class="wp-list-table fixed users" cellpadding="8" cellspacing="1">
	2677	+ <?php echo '
	2678	+ <tr>
	2679	+ <td>'.__('Login Form', 'loginizer').'</td>
	2680	+ <td><input type="checkbox" value="1" name="captcha_login" '.lz_POSTchecked('captcha_login', (empty($loginizer['captcha_login']) ? false : true)).' /></td>
	2681	+ </tr>
	2682	+ <tr>
	2683	+ <td>'.__('Lost Password Form', 'loginizer').'</td>
	2684	+ <td><input type="checkbox" value="1" name="captcha_lostpass" '.lz_POSTchecked('captcha_lostpass', (empty($loginizer['captcha_lostpass']) ? false : true)).' /></td>
	2685	+ </tr>
	2686	+ <tr>
	2687	+ <td>'.__('Reset Password Form', 'loginizer').'</td>
	2688	+ <td><input type="checkbox" value="1" name="captcha_resetpass" '.lz_POSTchecked('captcha_resetpass', (empty($loginizer['captcha_resetpass']) ? false : true)).' /></td>
	2689	+ </tr>
	2690	+ <tr>
	2691	+ <td>'.__('Registration Form', 'loginizer').'</td>
	2692	+ <td><input type="checkbox" value="1" name="captcha_register" '.lz_POSTchecked('captcha_register', (empty($loginizer['captcha_register']) ? false : true)).' /></td>
	2693	+ </tr>
	2694	+ <tr>
	2695	+ <td>'.__('Comment Form', 'loginizer').'</td>
	2696	+ <td><input type="checkbox" value="1" name="captcha_comment" '.lz_POSTchecked('captcha_comment', (empty($loginizer['captcha_comment']) ? false : true)).' /></td>
	2697	+ </tr>';
	2698	+
	2699	+ if(!defined('SITEPAD')){
	2700	+
	2701	+ echo '<tr>
	2702	+ <td>'.__('WooCommerce Checkout', 'loginizer').'</td>
	2703	+ <td><input type="checkbox" value="1" name="captcha_wc_checkout" '.lz_POSTchecked('captcha_wc_checkout', (empty($loginizer['captcha_wc_checkout']) ? false : true)).' /></td>
	2704	+ </tr>';
	2705	+
	2706	+ }
	2707	+
	2708	+ ?>
	2709	+ </table>
	2710	+ </td>
	2711	+ </tr>
	2712	+ <tr>
	2713	+ <th scope="row" valign="top"><label><?php echo __('Hide CAPTCHA for logged in Users', 'loginizer'); ?></label></th>
	2714	+ <td>
	2715	+ <input type="checkbox" value="1" name="captcha_user_hide" <?php echo lz_POSTchecked('captcha_user_hide', (empty($loginizer['captcha_user_hide']) ? false : true)); ?> />
	2716	+ </td>
	2717	+ </tr>
	2718	+ <tr class="lz_google_cap">
	2719	+ <th scope="row" valign="top"><label><?php echo __('Disable CSS inserted on Login Page', 'loginizer'); ?></label></th>
	2720	+ <td>
	2721	+ <input type="checkbox" value="1" name="captcha_no_css_login" <?php echo lz_POSTchecked('captcha_no_css_login', (empty($loginizer['captcha_no_css_login']) ? false : true)); ?> />
	2722	+ </td>
	2723	+ </tr>
	2724	+ </table><br />
	2725	+ <center><input name="save_lz" class="button button-primary action" value="<?php echo __('Save Settings','loginizer'); ?>" type="submit" />
	2726	+ <input style="float:right" name="clear_captcha_lz" class="button action" value="<?php echo __('Disable reCAPTCHA','loginizer'); ?>" type="submit" /></center>
	2727	+ </form>
	2728	+
	2729	+ </div>
	2730	+ </div>
	2731	+ <br />
732	2732
733		- $stats = get_option('loginizer_login_attempt_stats', []);
734		- $time = strtotime(date('Y-m-d H:00:00'));
	2733	+<script type="text/javascript">
	2734	+
	2735	+function no_google_recaptcha(obj){
735	2736
736		- if(empty($stats[$time][$type])){
737		- $stats[$time][$type] = 0;
	2737	+ if(obj.checked){
	2738	+ jQuery(".lz_google_cap").hide();
	2739	+ jQuery(".lz_math_cap").show();
	2740	+ }else{
	2741	+ jQuery(".lz_google_cap").show();
	2742	+ jQuery(".lz_math_cap").hide();
738	2743	}
	2744	+
	2745	+ var cur_captcha_type = jQuery("input:radio[name='captcha_type']:checked").val();
	2746	+
	2747	+ if(cur_captcha_type == 'v3' || cur_captcha_type == 'v2_invisible'){
	2748	+ jQuery(".lz_google_cap_size").hide();
	2749	+ }else{
	2750	+ jQuery(".lz_google_cap_size").show();
	2751	+ }
	2752	+
	2753	+}
739	2754
740		- $stats[$time][$type] += 1;
	2755	+no_google_recaptcha(jQuery("#captcha_no_google")[0]);
741	2756
742		- update_option('loginizer_login_attempt_stats', $stats, false);
	2757	+function google_recaptcha_type(obj){
	2758	+ if(obj.value == 'v3' || obj.value == 'v2_invisible'){
	2759	+ jQuery(".lz_google_cap_size").hide();
	2760	+ }else{
	2761	+ jQuery(".lz_google_cap_size").show();
	2762	+ }
743	2763	}
744	2764
745		-// Handles the error of the password not being there
746		-function loginizer_error_handler($errors, $redirect_to){
	2765	+
	2766	+</script>
747	2767
748		- global $wpdb, $loginizer, $lz_user_pass, $lz_cannot_login;
	2768	+ <?php
	2769	+ loginizer_page_footer();
	2770	+
	2771	+}
749	2772
750		- //echo 'loginizer_error_handler :';print_r($errors->errors);echo '<br>';
751		- if(is_null($errors) || empty($errors)){
752		- return true;
	2773	+
	2774	+// Loginizer - Two Factor Auth Page
	2775	+function loginizer_page_2fa(){
	2776	+
	2777	+ global $loginizer, $lz_error, $lz_env, $lz_roles, $lz_options, $saved_msgs;
	2778	+
	2779	+ if(!current_user_can('manage_options')){
	2780	+ wp_die('Sorry, but you do not have permissions to change settings.');
753	2781	}
	2782	+
	2783	+ if(!loginizer_is_premium() && count($_POST) > 0){
	2784	+ $lz_error['not_in_free'] = __('This feature is not available in the Free version. <a href="'.LOGINIZER_PRICING_URL.'" target="_blank" style="text-decoration:none; color:green;"><b>Upgrade to Pro</b></a>', 'loginizer');
	2785	+ return loginizer_page_2fa_T();
	2786	+ }
754	2787
755		- // Remove the empty password error
756		- if(is_wp_error($errors)){
	2788	+ $lz_roles = get_editable_roles();
	2789	+
	2790	+ /* Make sure post was from this page */
	2791	+ if(count($_POST) > 0){
	2792	+ check_admin_referer('loginizer-options');
	2793	+ }
	2794	+
	2795	+ // Settings submitted
	2796	+ if(isset($_POST['save_lz'])){
757	2797
758		- $codes = $errors->get_error_codes();
	2798	+ // In the future there can be more settings
	2799	+ $option['2fa_app'] = (int) lz_optpost('2fa_app');
	2800	+ $option['2fa_email'] = (int) lz_optpost('2fa_email');
	2801	+ $option['question'] = (int) lz_optpost('question');
	2802	+ $option['2fa_email_force'] = (int) lz_optpost('2fa_email_force');
759	2803
760		- foreach($codes as $k => $v){
761		- if($v == 'invalid_username' || $v == 'incorrect_password'){
762		- $show_error = 1;
	2804	+ // Any roles to apply to ?
	2805	+ foreach($lz_roles as $k => $v){
	2806	+
	2807	+ if(lz_optpost('2fa_roles_'.$k)){
	2808	+ $option['2fa_roles'][$k] = 1;
763	2809	}
	2810	+
764	2811	}
765	2812
766		- $errors->remove('invalid_username');
767		- $errors->remove('incorrect_password');
	2813	+ // If its all, then blank it
	2814	+ if(lz_optpost('2fa_roles_all') || empty($option['2fa_roles'])){
	2815	+ $option['2fa_roles'] = '';
	2816	+ }
	2817	+
	2818	+ // Is there an error ?
	2819	+ if(!empty($lz_error)){
	2820	+ return loginizer_page_2fa_T();
	2821	+ }
	2822	+
	2823	+ // Save the options
	2824	+ update_option('loginizer_2fa', $option);
	2825	+
	2826	+ // Mark as saved
	2827	+ $GLOBALS['lz_saved'] = true;
	2828	+
	2829	+ }
768	2830
769		- // Add the error
770		- if(!empty($lz_user_pass) && !empty($show_error) && empty($lz_cannot_login)){
771		- $errors->add('invalid_userpass', '<b>ERROR:</b> ' . $loginizer['msg']['inv_userpass']);
	2831	+ // Reset a users 2FA
	2832	+ if(isset($_POST['reset_user_lz'])){
	2833	+
	2834	+ $_username = lz_optpost('lz_user_2fa_disable');
	2835	+
	2836	+ // Try to get the user
	2837	+ $user_search = get_user_by('login', $_username);
	2838	+
	2839	+ // If not found then search by email
	2840	+ if(empty($user_search)){
	2841	+ $user_search = get_user_by('email', $_username);
772	2842	}
773	2843
774		- // Add the number of retires left as well
775		- if(count($errors->get_error_codes()) > 0 && isset($loginizer['retries_left'])){
776		- $errors->add('retries_left', loginizer_retries_left());
	2844	+ // If not found then give error
	2845	+ if(empty($user_search)){
	2846	+ $lz_error['2fa_user_not'] = __('There is no such user with the email or username you submitted', 'loginizer');
	2847	+ return loginizer_page_2fa_T();
777	2848	}
	2849	+
	2850	+ // Get the user prefences
	2851	+ $user_pref = get_user_meta($user_search->ID, 'loginizer_user_settings');
	2852	+
	2853	+ // Blank it
	2854	+ $user_pref['pref'] = 'none';
	2855	+
	2856	+ // Save it
	2857	+ update_user_meta($user_search->ID, 'loginizer_user_settings', $user_pref);
	2858	+
	2859	+ // Mark as saved
	2860	+ $GLOBALS['lz_saved'] = __('The user\'s 2FA settings have been reset', 'loginizer');
	2861	+
	2862	+ }
	2863	+
	2864	+ if(isset($_POST['save_2fa_email_template_lz'])){
	2865	+
	2866	+ // In the future there can be more settings
	2867	+ $option['2fa_email_sub'] = lz_optpost('lz_2fa_email_sub');
	2868	+ $option['2fa_email_msg'] = lz_optpost('lz_2fa_email_msg');
	2869	+
	2870	+ // Is there an error ?
	2871	+ if(!empty($lz_error)){
	2872	+ return loginizer_page_2fa_T();
	2873	+ }
	2874	+
	2875	+ // Save the options
	2876	+ update_option('loginizer_2fa_email_template', $option);
	2877	+
	2878	+ // Mark as saved
	2879	+ $GLOBALS['lz_saved'] = true;
	2880	+
	2881	+ }
	2882	+
	2883	+ // Save the messages
	2884	+ if(isset($_POST['save_msgs_lz'])){
	2885	+
	2886	+ $msgs['otp_app'] = lz_optpost('msg_otp_app');
	2887	+ $msgs['otp_email'] = lz_optpost('msg_otp_email');
	2888	+ $msgs['otp_field'] = lz_optpost('msg_otp_field');
	2889	+ $msgs['otp_question'] = lz_optpost('msg_otp_question');
	2890	+ $msgs['otp_answer'] = lz_optpost('msg_otp_answer');
	2891	+
	2892	+ // Update them
	2893	+ update_option('loginizer_2fa_msg', $msgs);
	2894	+
	2895	+ // Mark as saved
	2896	+ $GLOBALS['lz_saved'] = __('Messages were saved successfully', 'loginizer');
	2897	+
	2898	+ }
	2899	+
	2900	+ // Delete a Whitelist IP range
	2901	+ if(isset($_POST['delid'])){
	2902	+
	2903	+ $delid = (int) lz_optreq('delid');
	2904	+
	2905	+ // Unset and save
	2906	+ $whitelist = $loginizer['2fa_whitelist'];
	2907	+ unset($whitelist[$delid]);
	2908	+ update_option('loginizer_2fa_whitelist', $whitelist);
	2909	+
	2910	+ // Mark as saved
	2911	+ $GLOBALS['lz_saved'] = __('The Whitelist IP range has been deleted successfully', 'loginizer');
	2912	+
	2913	+ }
	2914	+
	2915	+ // Delete all Blackist IP ranges
	2916	+ if(isset($_POST['del_all_whitelist'])){
	2917	+
	2918	+ // Unset and save
	2919	+ update_option('loginizer_2fa_whitelist', array());
	2920	+
	2921	+ // Mark as saved
	2922	+ $GLOBALS['lz_saved'] = __('The Whitelist IP range(s) have been cleared successfully', 'loginizer');
	2923	+
	2924	+ }
	2925	+
	2926	+ // Add IP range to 2FA whitelist
	2927	+ if(isset($_POST['2fa_whitelist_iprange'])){
778	2928
	2929	+ $start_ip = lz_optpost('start_ip_w_2fa');
	2930	+ $end_ip = lz_optpost('end_ip_w_2fa');
	2931	+
	2932	+ if(empty($start_ip)){
	2933	+ $lz_error[] = __('Please enter the Start IP', 'loginizer');
	2934	+ return loginizer_page_2fa_T();
	2935	+ }
	2936	+
	2937	+ // If no end IP we consider only 1 IP
	2938	+ if(empty($end_ip)){
	2939	+ $end_ip = $start_ip;
	2940	+ }
	2941	+
	2942	+ if(!lz_valid_ip($start_ip)){
	2943	+ $lz_error[] = __('Please provide a valid start IP', 'loginizer');
	2944	+ }
	2945	+
	2946	+ if(!lz_valid_ip($end_ip)){
	2947	+ $lz_error[] = __('Please provide a valid end IP', 'loginizer');
	2948	+ }
	2949	+
	2950	+ if(inet_ptoi($start_ip) > inet_ptoi($end_ip)){
	2951	+
	2952	+ // BUT, if 0.0.0.1 - 255.255.255.255 is given, it will not work
	2953	+ if(inet_ptoi($start_ip) >= 0 && inet_ptoi($end_ip) < 0){
	2954	+ // This is right
	2955	+ }else{
	2956	+ $lz_error[] = __('The End IP cannot be smaller than the Start IP', 'loginizer');
	2957	+ }
	2958	+
	2959	+ }
	2960	+
	2961	+ if(empty($lz_error)){
	2962	+
	2963	+ $whitelist = $loginizer['2fa_whitelist'];
	2964	+
	2965	+ foreach($whitelist as $k => $v){
	2966	+
	2967	+ // This is to check if there is any other range exists with the same Start or End IP
	2968	+ if(( inet_ptoi($start_ip) <= inet_ptoi($v['start']) && inet_ptoi($v['start']) <= inet_ptoi($end_ip) )
	2969	+ || ( inet_ptoi($start_ip) <= inet_ptoi($v['end']) && inet_ptoi($v['end']) <= inet_ptoi($end_ip) )
	2970	+ ){
	2971	+ $lz_error[] = __('The Start IP or End IP submitted conflicts with an existing IP range !', 'loginizer');
	2972	+ break;
	2973	+ }
	2974	+
	2975	+ // This is to check if there is any other range exists with the same Start IP
	2976	+ if(inet_ptoi($v['start']) <= inet_ptoi($start_ip) && inet_ptoi($start_ip) <= inet_ptoi($v['end'])){
	2977	+ $lz_error[] = __('The Start IP is present in an existing range !', 'loginizer');
	2978	+ break;
	2979	+ }
	2980	+
	2981	+ // This is to check if there is any other range exists with the same End IP
	2982	+ if(inet_ptoi($v['start']) <= inet_ptoi($end_ip) && inet_ptoi($end_ip) <= inet_ptoi($v['end'])){
	2983	+ $lz_error[] = __('The End IP is present in an existing range!', 'loginizer');
	2984	+ break;
	2985	+ }
	2986	+
	2987	+ }
	2988	+
	2989	+ $newid = ( empty($whitelist) ? 0 : max(array_keys($whitelist)) ) + 1;
	2990	+
	2991	+ if(empty($lz_error)){
	2992	+
	2993	+ $whitelist[$newid] = array();
	2994	+ $whitelist[$newid]['start'] = $start_ip;
	2995	+ $whitelist[$newid]['end'] = $end_ip;
	2996	+ $whitelist[$newid]['time'] = time();
	2997	+
	2998	+ update_option('loginizer_2fa_whitelist', $whitelist);
	2999	+
	3000	+ // Mark as saved
	3001	+ $GLOBALS['lz_saved'] = __('Whitelist IP range for Two Factor Authentication added successfully', 'loginizer');
	3002	+
	3003	+ }
	3004	+
	3005	+ }
779	3006	}
780	3007
781		- return $errors;
782	3008
	3009	+ $lz_options = get_option('loginizer_2fa_email_template');
	3010	+ $saved_msgs = get_option('loginizer_2fa_msg');
	3011	+ $loginizer['2fa_whitelist'] = get_option('loginizer_2fa_whitelist');
	3012	+
	3013	+ // Call theme
	3014	+ loginizer_page_2fa_T();
	3015	+
783	3016	}
784	3017
785		-// Handles the error of the password not being there
786		-function loginizer_woocommerce_error_handler(){
787	3018
788		- global $wpdb, $loginizer, $lz_user_pass, $lz_cannot_login;
	3019	+// Loginizer - Two Factor Auth Page
	3020	+function loginizer_page_2fa_T(){
789	3021
790		- if(function_exists('wc_add_notice')){
791		- wc_add_notice( loginizer_retries_left(), 'error' );
	3022	+ global $loginizer, $lz_error, $lz_env, $lz_roles, $lz_options, $saved_msgs;
	3023	+
	3024	+ // Universal header
	3025	+ loginizer_page_header('Two Factor Authentication');
	3026	+
	3027	+ loginizer_feature_available('Two-Factor Authentication');
	3028	+
	3029	+ // Saved ?
	3030	+ if(!empty($GLOBALS['lz_saved'])){
	3031	+ echo '<div id="message" class="updated"><p>'. __(is_string($GLOBALS['lz_saved']) ? $GLOBALS['lz_saved'] : 'The settings were saved successfully', 'loginizer'). '</p></div><br />';
792	3032	}
	3033	+
	3034	+ // Any errors ?
	3035	+ if(!empty($lz_error)){
	3036	+ lz_report_error($lz_error);echo '<br />';
	3037	+ }
	3038	+
	3039	+ ?>
	3040	+
	3041	+<style>
	3042	+input[type="text"], textarea, select {
	3043	+ width: 70%;
793	3044	}
794	3045
795		-function loginizer_ultimatemember_error_handler(){
	3046	+.form-table label{
	3047	+ font-weight:bold;
	3048	+}
	3049	+
	3050	+.exp{
	3051	+ font-size:12px;
	3052	+}
	3053	+</style>
	3054	+
	3055	+ <div id="" class="postbox">
796	3056
797		- if(class_exists('UM')){
798		- \UM()->form()->add_error('remaining_tries', loginizer_retries_left());
	3057	+ <div class="postbox-header">
	3058	+ <h2 class="hndle ui-sortable-handle">
	3059	+ <span><?php echo __('Two Factor Authentication Settings', 'loginizer'); ?></span>
	3060	+ </h2>
	3061	+ </div>
	3062	+
	3063	+ <div class="inside">
	3064	+
	3065	+ <form action="" method="post" enctype="multipart/form-data" loginizer-premium-only="1">
	3066	+ <?php wp_nonce_field('loginizer-options'); ?>
	3067	+ <table class="form-table">
	3068	+ <tr>
	3069	+ <td scope="row" valign="top" colspan="2">
	3070	+ <i><?php echo __('Please choose from the following Two Factor Authentication methods. Each user can choose any one method from the ones enabled by you. You can enable all or anyone that you would like.', 'loginizer'); ?></i>
	3071	+ </td>
	3072	+ </tr>
	3073	+ <tr>
	3074	+ <td scope="row" valign="top" style="width:70% !important">
	3075	+ <label><?php echo __('OTP via App', 'loginizer'); ?></label><br>
	3076	+ <span class="exp"><?php echo __('After entering the correct login credentials, the user will be asked for the OTP. The OTP will be obtained from the users mobile app e.g. <b>Google Authenticator, Authy, etc.</b>', 'loginizer'); ?></span>
	3077	+ </td>
	3078	+ <td>
	3079	+ <input type="checkbox" value="1" name="2fa_app" <?php echo lz_POSTchecked('2fa_app', (empty($loginizer['2fa_app']) ? false : true), 'save_lz'); ?> />
	3080	+ </td>
	3081	+ </tr>
	3082	+ <tr>
	3083	+ <td scope="row" valign="top">
	3084	+ <label><?php echo __('OTP via Email', 'loginizer'); ?></label><br>
	3085	+ <span class="exp"><?php echo __('After entering the correct login credentials, the user will be asked for the OTP. The OTP will be emailed to the user.', 'loginizer'); ?></span>
	3086	+ </td>
	3087	+ <td>
	3088	+ <input type="checkbox" value="1" name="2fa_email" <?php echo lz_POSTchecked('2fa_email', (empty($loginizer['2fa_email']) ? false : true), 'save_lz'); ?> />
	3089	+ </td>
	3090	+ </tr>
	3091	+ <tr>
	3092	+ <td scope="row" valign="top">
	3093	+ <label><?php echo __('User Defined Question & Answer', 'loginizer'); ?></label><br>
	3094	+ <span class="exp"><?php echo __('In this method the user will be asked to set a secret personal question and answer. After entering the correct login credentials, the user will be asked to answer the question set by them, thus increasing the security', 'loginizer'); ?></span>
	3095	+ </td>
	3096	+ <td>
	3097	+ <input type="checkbox" value="1" name="question" <?php echo lz_POSTchecked('question', (empty($loginizer['question']) ? false : true), 'save_lz'); ?> />
	3098	+ </td>
	3099	+ </tr>
	3100	+ </table><br />
	3101	+
	3102	+ <table class="form-table">
	3103	+ <tr>
	3104	+ <td scope="row" valign="top" style="width:70% !important">
	3105	+ <label><?php echo __('Force OTP via Email', 'loginizer'); ?></label><br>
	3106	+ <span class="exp"><?php echo __('If the user does not have any 2FA method selected, this will enforce the OTP via Email for the users.', 'loginizer'); ?></span>
	3107	+ </td>
	3108	+ <td>
	3109	+ <input type="checkbox" value="1" name="2fa_email_force" <?php echo lz_POSTchecked('2fa_email_force', (empty($loginizer['2fa_email_force']) ? false : true), 'save_lz'); ?> />
	3110	+ </td>
	3111	+ </tr>
	3112	+ <tr>
	3113	+ <td scope="row" valign="top" style="width:70% !important">
	3114	+ <label><?php echo __('Apply 2FA to Roles', 'loginizer'); ?></label><br>
	3115	+ <span class="exp"><?php echo __('Select the Roles to which 2FA should be applied.', 'loginizer'); ?></span>
	3116	+ </td>
	3117	+ <td>
	3118	+ <input type="checkbox" value="1" onchange="lz_roles_handle()" name="2fa_roles_all" id="2fa_roles_all" <?php echo lz_POSTchecked('2fa_roles_all', (empty($loginizer['2fa_roles']) ? true : false), 'save_lz'); ?> /> All<br />
	3119	+ <?php
	3120	+
	3121	+ foreach($lz_roles as $k => $v){
	3122	+ echo '<span class="lz_roles"><input type="checkbox" value="1" name="2fa_roles_'.$k.'" '.lz_POSTchecked('2fa_roles_'.$k, (empty($loginizer['2fa_roles'][$k]) ? false : true), 'save_lz').' /> '.$v['name'].'<br /></span>';
	3123	+ }
	3124	+
	3125	+ ?>
	3126	+ </td>
	3127	+ </tr>
	3128	+ </table><br />
	3129	+ <center><input name="save_lz" class="button button-primary action" value="<?php echo __('Save Settings', 'loginizer'); ?>" type="submit" /></center>
	3130	+ </form>
	3131	+
	3132	+ </div>
	3133	+ </div>
	3134	+
	3135	+<script type="text/javascript">
	3136	+
	3137	+function lz_roles_handle(){
	3138	+
	3139	+ var obj = jQuery("#2fa_roles_all")[0];
	3140	+
	3141	+ if(obj.checked){
	3142	+ jQuery(".lz_roles").hide();
	3143	+ }else{
	3144	+ jQuery(".lz_roles").show();
799	3145	}
	3146	+
800	3147	}
801	3148
802		-// Handles social login URL
803		-function loginizer_social_login_error_handler($errors = '', $redirect_to = ''){
804		- global $loginizer;
	3149	+lz_roles_handle();
805	3150
806		- loginizer_get_social_error();
	3151	+</script>
807	3152
808		- if(empty($loginizer['social_errors'])){
809		- return $errors;
	3153	+ <div id="" class="postbox">
	3154	+
	3155	+ <div class="postbox-header">
	3156	+ <h2 class="hndle ui-sortable-handle">
	3157	+ <span><?php echo __('OTP via Email Template', 'loginizer'); ?></span>
	3158	+ </h2>
	3159	+ </div>
	3160	+
	3161	+ <div class="inside">
	3162	+
	3163	+ <form action="" method="post" enctype="multipart/form-data" loginizer-premium-only="1">
	3164	+ <?php wp_nonce_field('loginizer-options'); ?>
	3165	+ <table class="form-table">
	3166	+ <tr>
	3167	+ <td colspan="2" valign="top">
	3168	+ <?php echo __('Customize the email template to be used when sending the OTP to login via Email for 2FA.', 'loginizer'); ?><br>
	3169	+ <?php echo __('If you do not make changes below the default email template will be used !', 'loginizer'); ?>
	3170	+ </td>
	3171	+ </tr>
	3172	+ <tr>
	3173	+ <td scope="row" valign="top" style="width:350px !important">
	3174	+ <label><?php echo __('Email Subject', 'loginizer'); ?></label><br>
	3175	+ <span class="exp"><?php echo __('Set blank to reset to the default subject', 'loginizer'); ?></span>
	3176	+ <br />Default : <?php echo @$loginizer['2fa_email_d_sub']; ?>
	3177	+ </td>
	3178	+ <td valign="top">
	3179	+ <input type="text" size="40" value="<?php echo lz_optpost('lz_2fa_email_sub', @$lz_options['2fa_email_sub']); ?>" name="lz_2fa_email_sub" />
	3180	+ </td>
	3181	+ </tr>
	3182	+ <tr>
	3183	+ <td scope="row" valign="top">
	3184	+ <label><?php echo __('Email Body', 'loginizer'); ?></label><br>
	3185	+ <span class="exp"><?php echo __('Set blank to reset to the default message', 'loginizer'); ?></span>
	3186	+ <br />Default : <pre style="font-size:10px"><?php echo @$loginizer['2fa_email_d_msg']; ?></pre>
	3187	+ </td>
	3188	+ <td valign="top">
	3189	+ <textarea rows="10" name="lz_2fa_email_msg"><?php echo lz_optpost('lz_2fa_email_msg', @$lz_options['2fa_email_msg']); ?></textarea>
	3190	+ <br />
	3191	+ Variables :
	3192	+ <br />$otp - The OTP for login
	3193	+ <br />$site_name - The Site Name
	3194	+ <br />$site_url - The Site URL
	3195	+ <br />$email - Users Email
	3196	+ <br />$display_name - Users Display Name
	3197	+ <br />$user_login - Username
	3198	+ <br />$first_name - Users First Name
	3199	+ <br />$last_name - Users Last Name
	3200	+ </td>
	3201	+ </tr>
	3202	+ </table><br />
	3203	+ <center><input name="save_2fa_email_template_lz" class="button button-primary action" value="<?php echo __('Save Settings', 'loginizer'); ?>" type="submit" /></center>
	3204	+ </form>
	3205	+
	3206	+ </div>
	3207	+ </div>
	3208	+
	3209	+ <div id="" class="postbox">
	3210	+
	3211	+ <div class="postbox-header">
	3212	+ <h2 class="hndle ui-sortable-handle">
	3213	+ <span><?php echo __('Custom Messages for OTP', 'loginizer'); ?></span>
	3214	+ </h2>
	3215	+ </div>
	3216	+
	3217	+ <div class="inside">
	3218	+
	3219	+ <form action="" method="post" enctype="multipart/form-data" loginizer-premium-only="1">
	3220	+ <?php wp_nonce_field('loginizer-options'); ?>
	3221	+ <table class="form-table">
	3222	+ <tr>
	3223	+ <td colspan="2" valign="top">
	3224	+ <?php echo __('Customize the title for OTP field displayed to the user on the login form.', 'loginizer'); ?><br>
	3225	+ <?php echo __('If you do not make changes below the default messages will be used !', 'loginizer'); ?>
	3226	+ </td>
	3227	+ </tr>
	3228	+ <tr>
	3229	+ <td scope="row" valign="top" style="width:350px !important">
	3230	+ <label for="msg_otp_app"><?php echo __('OTP via APP','loginizer'); ?></label><br />
	3231	+ <?php echo __('Default: <em>&quot;' . $loginizer['2fa_d_msg']['otp_app']. '&quot;</em>', 'loginizer'); ?>
	3232	+ </td>
	3233	+ <td>
	3234	+ <input type="text" size="50" value="<?php echo esc_attr(@$saved_msgs['otp_app']); ?>" name="msg_otp_app" id="msg_otp_app" style="width:auto !important;" />
	3235	+ <br />
	3236	+ </td>
	3237	+ </tr>
	3238	+ <tr>
	3239	+ <td scope="row" valign="top" style="width:350px !important">
	3240	+ <label for="msg_otp_email"><?php echo __('OTP via Email','loginizer'); ?></label><br />
	3241	+ <?php echo __('Default: <em>&quot;' . $loginizer['2fa_d_msg']['otp_email']. '&quot;</em>', 'loginizer'); ?>
	3242	+ </td>
	3243	+ <td>
	3244	+ <input type="text" size="50" value="<?php echo esc_attr(@$saved_msgs['otp_email']); ?>" name="msg_otp_email" id="msg_otp_email" style="width:auto !important;" />
	3245	+ <br />
	3246	+ </td>
	3247	+ </tr>
	3248	+ <tr>
	3249	+ <td scope="row" valign="top" style="width:350px !important">
	3250	+ <label for="msg_otp_field"><?php echo __('Title for OTP field','loginizer'); ?></label><br />
	3251	+ <?php echo __('Default: <em>&quot;' . $loginizer['2fa_d_msg']['otp_field']. '&quot;</em>', 'loginizer'); ?>
	3252	+ </td>
	3253	+ <td>
	3254	+ <input type="text" size="50" value="<?php echo esc_attr(@$saved_msgs['otp_field']); ?>" name="msg_otp_field" id="msg_otp_field" style="width:auto !important;" />
	3255	+ <br />
	3256	+ </td>
	3257	+ </tr>
	3258	+ <tr>
	3259	+ <td scope="row" valign="top" style="width:350px !important">
	3260	+ <label for="msg_otp_question"><?php echo __('Title for Security Question','loginizer'); ?></label><br />
	3261	+ <?php echo __('Default: <em>&quot;' . $loginizer['2fa_d_msg']['otp_question']. '&quot;</em>', 'loginizer'); ?>
	3262	+ </td>
	3263	+ <td>
	3264	+ <input type="text" size="50" value="<?php echo esc_attr(@$saved_msgs['otp_question']); ?>" name="msg_otp_question" id="msg_otp_question" style="width:auto !important;" />
	3265	+ <br />
	3266	+ </td>
	3267	+ </tr>
	3268	+ <tr>
	3269	+ <td scope="row" valign="top" style="width:350px !important">
	3270	+ <label for="msg_otp_answer"><?php echo __('Title for Security Answer','loginizer'); ?></label><br />
	3271	+ <?php echo __('Default: <em>&quot;' . $loginizer['2fa_d_msg']['otp_answer']. '&quot;</em>', 'loginizer'); ?>
	3272	+ </td>
	3273	+ <td>
	3274	+ <input type="text" size="50" value="<?php echo esc_attr(@$saved_msgs['otp_answer']); ?>" name="msg_otp_answer" id="msg_otp_answer" style="width:auto !important;" />
	3275	+ <br />
	3276	+ </td>
	3277	+ </tr>
	3278	+ </table><br />
	3279	+ <center><input name="save_msgs_lz" class="button button-primary action" value="<?php echo __('Save Messages','loginizer'); ?>" type="submit" /></center>
	3280	+ </form>
	3281	+ </div>
	3282	+ </div>
	3283	+
	3284	+ <!--Bypass a single user-->
	3285	+ <div id="" class="postbox">
	3286	+
	3287	+ <div class="postbox-header">
	3288	+ <h2 class="hndle ui-sortable-handle">
	3289	+ <span><?php echo __('Disable Two Factor Authentication for a User', 'loginizer'); ?></span>
	3290	+ </h2>
	3291	+ </div>
	3292	+
	3293	+ <div class="inside">
	3294	+
	3295	+ <form action="" method="post" enctype="multipart/form-data" loginizer-premium-only="1">
	3296	+ <?php wp_nonce_field('loginizer-options'); ?>
	3297	+ <table class="form-table">
	3298	+ <tr>
	3299	+ <td scope="row" valign="top" colspan="2">
	3300	+ <i><?php echo __('Here you can disable the Two Factor Authentication settings of a user. In the event a user has forgotten his secret answer or lost his Device App, he will not be able to login. You can reset such a users settings from here.', 'loginizer'); ?></i>
	3301	+ </td>
	3302	+ </tr>
	3303	+ <tr>
	3304	+ <td scope="row" valign="top">
	3305	+ <label><?php echo __('Username / Email', 'loginizer'); ?></label><br>
	3306	+ <span class="exp"><?php echo __('The username or email of the user whose 2FA you would like to disable', 'loginizer'); ?></span>
	3307	+ </td>
	3308	+ <td>
	3309	+ <input type="text" size="50" value="<?php echo lz_optpost('lz_user_2fa_disable', ''); ?>" name="lz_user_2fa_disable" />
	3310	+ </td>
	3311	+ </tr>
	3312	+ </table><br />
	3313	+
	3314	+ <center><input name="reset_user_lz" class="button button-primary action" value="<?php echo __('Reset 2FA for User', 'loginizer'); ?>" type="submit" /></center>
	3315	+ </form>
	3316	+
	3317	+ </div>
	3318	+ </div>
	3319	+
	3320	+ <br />
	3321	+
	3322	+<?php
	3323	+
	3324	+ wp_enqueue_script('jquery-paginate', LOGINIZER_URL.'/jquery-paginate.js', array('jquery'), '1.10.15');
	3325	+
	3326	+?>
	3327	+
	3328	+<style>
	3329	+.page-navigation a {
	3330	+margin: 5px 2px;
	3331	+display: inline-block;
	3332	+padding: 5px 8px;
	3333	+color: #0073aa;
	3334	+background: #e5e5e5 none repeat scroll 0 0;
	3335	+border: 1px solid #ccc;
	3336	+text-decoration: none;
	3337	+transition-duration: 0.05s;
	3338	+transition-property: border, background, color;
	3339	+transition-timing-function: ease-in-out;
	3340	+}
	3341	+
	3342	+.page-navigation a[data-selected] {
	3343	+background-color: #00a0d2;
	3344	+color: #fff;
	3345	+}
	3346	+</style>
	3347	+
	3348	+<script>
	3349	+
	3350	+jQuery(document).ready(function(){
	3351	+ jQuery('#lz_wl_2fa_table').paginate({ limit: 11, navigationWrapper: jQuery('#lz_wl_2fa_nav')});
	3352	+});
	3353	+
	3354	+// Delete a 2FA Whitelist IP Range
	3355	+function del_2fa_confirm(field, todo_id, msg){
	3356	+ var ret = confirm(msg);
	3357	+
	3358	+ if(ret){
	3359	+ jQuery('#lz_wl_2fa_todo').attr('name', field);
	3360	+ jQuery('#lz_wl_2fa_todo').val(todo_id);
	3361	+ jQuery('#lz_wl_2fa_form').submit();
810	3362	}
	3363	+
	3364	+ return false;
	3365	+
	3366	+}
811	3367
812		- if(is_null($errors) || empty($errors) || !is_wp_error($errors)){
813		- $errors = new WP_Error();
	3368	+// Delete all 2FA Whitelist IP Ranges
	3369	+function del_2fa_confirm_all(msg){
	3370	+ var ret = confirm(msg);
	3371	+
	3372	+ if(ret){
	3373	+ return true;
814	3374	}
	3375	+
	3376	+ return false;
	3377	+
	3378	+}
815	3379
816		- foreach($loginizer['social_errors'] as $key => $text){
817		- $errors->add($key, $text);
818		- }
	3380	+</script>
	3381	+
	3382	+ <div id="" class="postbox">
	3383	+
	3384	+ <div class="postbox-header">
	3385	+ <h2 class="hndle ui-sortable-handle">
	3386	+ <span><?php echo __('Disable Two Factor Authentication for IP', 'loginizer'); ?></span>
	3387	+ </h2>
	3388	+ </div>
	3389	+
	3390	+ <div class="inside">
	3391	+
	3392	+ <?php echo __('Enter the IP you want to whitelist for two factor authentication', 'loginizer'); ?>
	3393	+ <form action="" method="post" loginizer-premium-only="1">
	3394	+ <?php wp_nonce_field('loginizer-options'); ?>
	3395	+ <table class="form-table">
	3396	+ <tr>
	3397	+ <th scope="row" valign="top"><label for="start_ip_w_2fa"><?php echo __('Start IP','loginizer'); ?></label></th>
	3398	+ <td>
	3399	+ <input type="text" size="25" style="width:auto;" value="<?php echo(lz_optpost('start_ip_w_2fa')); ?>" name="start_ip_w_2fa" id="start_ip_w_2fa"/> <?php echo __('Start IP of the range','loginizer'); ?> <br />
	3400	+ </td>
	3401	+ </tr>
	3402	+ <tr>
	3403	+ <th scope="row" valign="top"><label for="end_ip_w_2fa"><?php echo __('End IP (Optional)','loginizer'); ?></label></th>
	3404	+ <td>
	3405	+ <input type="text" size="25" style="width:auto;" value="<?php echo(lz_optpost('end_ip_w_2fa')); ?>" name="end_ip_w_2fa" id="end_ip_w_2fa"/> <?php echo __('End IP of the range. <br />If you want to whitelist single IP leave this field blank.','loginizer'); ?> <br />
	3406	+ </td>
	3407	+ </tr>
	3408	+ </table><br />
	3409	+ <input name="2fa_whitelist_iprange" class="button button-primary action" value="<?php echo __('Add Whitelist IP Range','loginizer'); ?>" type="submit" />
	3410	+ <input style="float:right" name="del_all_whitelist" onclick="return del_2fa_confirm_all('<?php echo __('Are you sure you want to delete all Whitelist IP Range(s) for 2FA ?','loginizer'); ?>')" class="button action" value="<?php echo __('Delete All Whitelist IP Range(s) for 2FA','loginizer'); ?>" type="submit" />
	3411	+ </form>
	3412	+ </div>
	3413	+
	3414	+ <div id="lz_wl_2fa_nav" style="margin: 5px 10px; text-align:right"></div>
	3415	+ <table id="lz_wl_2fa_table" class="wp-list-table fixed striped users" border="0" width="95%" cellpadding="10" align="center">
	3416	+ <tr>
	3417	+ <th scope="row" valign="top" style="background:#EFEFEF;"><?php echo __('Start IP','loginizer'); ?></th>
	3418	+ <th scope="row" valign="top" style="background:#EFEFEF;"><?php echo __('End IP','loginizer'); ?></th>
	3419	+ <th scope="row" valign="top" style="background:#EFEFEF;"><?php echo __('Date (DD/MM/YYYY)','loginizer'); ?></th>
	3420	+ <th scope="row" valign="top" style="background:#EFEFEF;" width="100"><?php echo __('Options','loginizer'); ?></th>
	3421	+ </tr>
	3422	+ <?php
	3423	+ if(empty($loginizer['2fa_whitelist'])){
	3424	+ echo '
	3425	+ <tr>
	3426	+ <td colspan="4">
	3427	+ '.__('No Whitelist IPs for Two Factor Authentication. You will see whitelisted IP ranges here.', 'loginizer').'
	3428	+ </td>
	3429	+ </tr>';
	3430	+ }else{
	3431	+ foreach($loginizer['2fa_whitelist'] as $ik => $iv){
	3432	+ echo '
	3433	+ <tr>
	3434	+ <td>
	3435	+ '.$iv['start'].'
	3436	+ </td>
	3437	+ <td>
	3438	+ '.$iv['end'].'
	3439	+ </td>
	3440	+ <td>
	3441	+ '.date('d/m/Y', $iv['time']).'
	3442	+ </td>
	3443	+ <td>
	3444	+ <a class="submitdelete" href="javascript:void(0)" onclick="return del_2fa_confirm(\'delid\', '.$ik.', \'Are you sure you want to delete this IP range for 2FA ?\')">Delete</a>
	3445	+ </td>
	3446	+ </tr>';
	3447	+ }
	3448	+ }
	3449	+ ?>
	3450	+ </table>
	3451	+ <br />
	3452	+ <form action="" method="post" id="lz_wl_2fa_form">
	3453	+ <?php wp_nonce_field('loginizer-options'); ?>
	3454	+ <input type="hidden" value="" name="" id="lz_wl_2fa_todo"/>
	3455	+ </form>
	3456	+ <br />
	3457	+
	3458	+ </div>
819	3459
820		- return $errors;
	3460	+ <?php
	3461	+ loginizer_page_footer();
	3462	+
821	3463	}
822	3464
823		-// Returns a string with the number of retries left
824		-function loginizer_retries_left(){
	3465	+// Loginizer - PasswordLess Page
	3466	+function loginizer_page_passwordless(){
825	3467
826		- global $wpdb, $loginizer, $lz_user_pass, $lz_cannot_login;
	3468	+ global $loginizer, $lz_error, $lz_env;
	3469	+
	3470	+ if(!current_user_can('manage_options')){
	3471	+ wp_die('Sorry, but you do not have permissions to change settings.');
	3472	+ }
827	3473
828		- // If we are to show the number of retries left
829		- if(isset($loginizer['retries_left'])){
830		- $retries_left = apply_filters('loginizer_retries_left_num', $loginizer['retries_left']);
	3474	+ if(!loginizer_is_premium() && count($_POST) > 0){
	3475	+ $lz_error['not_in_free'] = __('This feature is not available in the Free version. <a href="'.LOGINIZER_PRICING_URL.'" target="_blank" style="text-decoration:none; color:green;"><b>Upgrade to Pro</b></a>', 'loginizer');
	3476	+ return loginizer_page_passwordless_T();
	3477	+ }
	3478	+
	3479	+ /* Make sure post was from this page */
	3480	+ if(count($_POST) > 0){
	3481	+ check_admin_referer('loginizer-options');
	3482	+ }
	3483	+
	3484	+ if(isset($_POST['save_lz'])){
831	3485
832		- return '<b>'.esc_html($retries_left).'</b> '.$loginizer['msg']['attempts_left'];
	3486	+ // In the future there can be more settings
	3487	+ $option['email_pass_less'] = (int) lz_optpost('email_pass_less');
	3488	+ $option['passwordless_sub'] = lz_optpost('lz_passwordless_sub');
	3489	+ $option['passwordless_msg'] = lz_optpost('lz_passwordless_msg');
	3490	+ $option['passwordless_html'] = (int) lz_optpost('lz_passwordless_html');
	3491	+
	3492	+ // Is there an error ?
	3493	+ if(!empty($lz_error)){
	3494	+ return loginizer_page_passwordless_T();
	3495	+ }
	3496	+
	3497	+ // Save the options
	3498	+ update_option('loginizer_epl', $option);
	3499	+
	3500	+ // Mark as saved
	3501	+ $GLOBALS['lz_saved'] = true;
	3502	+
833	3503	}
834	3504
	3505	+ // Call theme
	3506	+ loginizer_page_passwordless_T();
835	3507	}
836	3508
837		-function loginizer_reset_retries(){
	3509	+// Loginizer - PasswordLess Page Theme
	3510	+function loginizer_page_passwordless_T(){
	3511	+
	3512	+ global $loginizer, $lz_error, $lz_env;
	3513	+
	3514	+ $lz_options = get_option('loginizer_epl');
	3515	+
	3516	+ // Universal header
	3517	+ loginizer_page_header('PasswordLess Settings');
	3518	+
	3519	+ loginizer_feature_available('PasswordLess Login');
	3520	+
	3521	+ // Saved ?
	3522	+ if(!empty($GLOBALS['lz_saved'])){
	3523	+ echo '<div id="message" class="updated"><p>'. __('The settings were saved successfully', 'loginizer'). '</p></div><br />';
	3524	+ }
	3525	+
	3526	+ // Any errors ?
	3527	+ if(!empty($lz_error)){
	3528	+ lz_report_error($lz_error);echo '<br />';
	3529	+ }
838	3530
839		- global $wpdb, $loginizer;
	3531	+ ?>
840	3532
841		- $deltime = time() - $loginizer['reset_retries'];
	3533	+<style>
	3534	+input[type="text"], textarea, select {
	3535	+ width: 90%;
	3536	+}
842	3537
843		- $del_query = $wpdb->prepare("DELETE FROM `".$wpdb->prefix."loginizer_logs` WHERE `time` <= %d", $deltime);
844		- $result = $wpdb->query($del_query);
	3538	+.form-table label{
	3539	+ font-weight:bold;
	3540	+}
845	3541
846		- update_option('loginizer_last_reset', time());
	3542	+.form-table td{
	3543	+ vertical-align:top;
	3544	+}
847	3545
	3546	+.exp{
	3547	+ font-size:12px;
848	3548	}
	3549	+</style>
849	3550
850		-function loginizer_load_translation_vars(){
851		- global $loginizer;
	3551	+ <div id="" class="postbox">
852	3552
853		- $loginizer['login_mail_default_sub'] = __('Login Successful at $sitename', 'loginizer');
854		- $loginizer['login_mail_default_msg'] = __('Hello $user_login,
	3553	+ <div class="postbox-header">
	3554	+ <h2 class="hndle ui-sortable-handle">
	3555	+ <span><?php echo __('PasswordLess Settings', 'loginizer'); ?></span>
	3556	+ </h2>
	3557	+ </div>
	3558	+
	3559	+ <div class="inside">
	3560	+
	3561	+ <form action="" method="post" enctype="multipart/form-data" loginizer-premium-only="1">
	3562	+ <?php wp_nonce_field('loginizer-options'); ?>
	3563	+ <table class="form-table">
	3564	+ <tr>
	3565	+ <th scope="row" valign="top" style="width:350px !important"><label for="email_pass_less"><?php echo __('Enable PasswordLess Login', 'loginizer'); ?></label></th>
	3566	+ <td>
	3567	+ <input type="checkbox" value="1" name="email_pass_less" id="email_pass_less" <?php echo lz_POSTchecked('email_pass_less', (empty($loginizer['email_pass_less']) ? false : true)); echo (defined('SITEPAD') ? 'disabled="disabled"' : '') ?> />
	3568	+ </td>
	3569	+ </tr>
	3570	+ <tr>
	3571	+ <td colspan="2" valign="top">
	3572	+ <?php echo __('If enabled, the login screen will just ask for the username <b>OR</b> email address of the user. If such a user exists, an email with a <b>One Time Login </b> link will be sent to the email address of the user. The link will be valid for 10 minutes only.', 'loginizer'); ?><br><br>
	3573	+ <?php echo __('If a wrong username/email is given, the brute force checker will prevent any brute force attempt !', 'loginizer'); ?>
	3574	+ </td>
	3575	+ </tr>
	3576	+ <tr>
	3577	+ <td scope="row" valign="top">
	3578	+ <label for="lz_passwordless_sub"><?php echo __('Email Subject', 'loginizer'); ?></label><br>
	3579	+ <span class="exp"><?php echo __('Set blank to reset to the default subject', 'loginizer'); ?></span>
	3580	+ <br />Default : <?php echo @$loginizer['pl_d_sub']; ?>
	3581	+ </td>
	3582	+ <td valign="top">
	3583	+ <input type="text" size="40" value="<?php echo lz_optpost('lz_passwordless_sub', @$lz_options['passwordless_sub']); ?>" name="lz_passwordless_sub" id="lz_passwordless_sub" />
	3584	+ </td>
	3585	+ </tr>
	3586	+ <tr>
	3587	+ <td scope="row" valign="top">
	3588	+ <label for="lz_passwordless_msg"><?php echo __('Email Body', 'loginizer'); ?></label><br>
	3589	+ <span class="exp"><?php echo __('Set blank to reset to the default message', 'loginizer'); ?></span>
	3590	+ <br />Default : <pre style="font-size:10px"><?php echo @$loginizer['pl_d_msg']; ?></pre>
	3591	+ </td>
	3592	+ <td valign="top">
	3593	+ <textarea rows="10" name="lz_passwordless_msg" id="lz_passwordless_msg"><?php echo lz_optpost('lz_passwordless_msg', @$lz_options['passwordless_msg']); ?></textarea>
	3594	+ <br />
	3595	+ Variables :
	3596	+ <br />$email - Users Email
	3597	+ <br />$site_name - The Site Name
	3598	+ <br />$site_url - The Site URL
	3599	+ <br />$login_url - The Login URL
	3600	+ </td>
	3601	+ </tr>
	3602	+ <tr>
	3603	+ <th scope="row" valign="top" style="width:350px !important"><label for="lz_passwordless_html"><?php echo __('Send email as HTML', 'loginizer'); ?></label></th>
	3604	+ <td>
	3605	+ <input type="checkbox" value="1" name="lz_passwordless_html" id="lz_passwordless_html" <?php echo lz_POSTchecked('lz_passwordless_html', (empty($loginizer['passwordless_html']) ? false : true)); ?> />
	3606	+ </td>
	3607	+ </tr>
	3608	+ </table><br />
	3609	+ <center><input name="save_lz" class="button button-primary action" value="<?php echo __('Save Settings', 'loginizer'); ?>" type="submit" /></center>
	3610	+ </form>
	3611	+
	3612	+ </div>
	3613	+ </div>
	3614	+ <br />
855	3615
856		-Your account was recently logged in from the IP : $ip
857		-Time : $date
858		-If it was not you who logged in then please report this to us immediately.
	3616	+ <?php
	3617	+ loginizer_page_footer();
	3618	+
	3619	+}
859	3620
860		-Regards,
861		-$sitename','loginizer');
	3621	+// Loginizer - Security Settings Page
	3622	+function loginizer_page_security(){
	3623	+
	3624	+ global $loginizer, $lz_error, $lz_env, $wpdb;
	3625	+
	3626	+ if(!current_user_can('manage_options')){
	3627	+ wp_die('Sorry, but you do not have permissions to change settings.');
	3628	+ }
	3629	+
	3630	+ if(!loginizer_is_premium() && count($_POST) > 0){
	3631	+ $lz_error['not_in_free'] = __('This feature is not available in the Free version. <a href="'.LOGINIZER_PRICING_URL.'" target="_blank" style="text-decoration:none; color:green;"><b>Upgrade to Pro</b></a>', 'loginizer');
	3632	+ return loginizer_page_security_T();
	3633	+ }
862	3634
863		- if(empty($loginizer['login_mail_subject'])){
864		- $loginizer['login_mail_subject'] = $loginizer['login_mail_default_sub'];
	3635	+ /* Make sure post was from this page */
	3636	+ if(count($_POST) > 0){
	3637	+ check_admin_referer('loginizer-options');
865	3638	}
866	3639
867		- if(empty($loginizer['login_mail_body'])){
868		- $loginizer['login_mail_body'] = $loginizer['login_mail_default_msg'];
	3640	+ if(isset($_POST['save_lz'])){
	3641	+
	3642	+ $option['login_slug'] = lz_optpost('login_slug');
	3643	+ $option['rename_login_secret'] = (int) lz_optpost('rename_login_secret');
	3644	+ $option['xmlrpc_slug'] = lz_optpost('xmlrpc_slug');
	3645	+ $option['xmlrpc_disable'] = (int) lz_optpost('xmlrpc_disable');
	3646	+ $option['pingbacks_disable'] = (int) lz_optpost('pingbacks_disable');
	3647	+
	3648	+ // Login Slug Valid ?
	3649	+ if(!empty($option['login_slug'])){
	3650	+ if(strlen($option['login_slug']) <= 4 || strlen($option['login_slug']) > 50){
	3651	+ $lz_error['login_slug'] = __('The Login slug length must be greater than <b>4</b> chars and upto <b>50</b> chars long', 'loginizer');
	3652	+ }
	3653	+ }
	3654	+
	3655	+ // XML-RPC Slug Valid ?
	3656	+ if(!empty($option['xmlrpc_slug'])){
	3657	+ if(strlen($option['xmlrpc_slug']) <= 4 || strlen($option['xmlrpc_slug']) > 50){
	3658	+ $lz_error['xmlrpc_slug'] = __('The XML-RPC slug length must be greater than <b>4</b> chars and upto <b>50</b> chars long', 'loginizer');
	3659	+ }
	3660	+ }
	3661	+
	3662	+ // Is there an error ?
	3663	+ if(!empty($lz_error)){
	3664	+ return loginizer_page_security_T();
	3665	+ }
	3666	+
	3667	+ // Save the options
	3668	+ update_option('loginizer_security', $option);
	3669	+
	3670	+ // Mark as saved
	3671	+ $GLOBALS['lz_saved'] = true;
	3672	+
869	3673	}
870	3674
871		- // Default messages
872		- $loginizer['d_msg']['inv_userpass'] = __('Incorrect Username or Password', 'loginizer');
873		- $loginizer['d_msg']['ip_blacklisted'] = __('Your IP has been blacklisted', 'loginizer');
874		- $loginizer['d_msg']['attempts_left'] = __('attempt(s) left', 'loginizer');
875		- $loginizer['d_msg']['lockout_err'] = __('You have exceeded maximum login retries<br /> Please try after', 'loginizer');
876		- $loginizer['d_msg']['minutes_err'] = __('minute(s)', 'loginizer');
877		- $loginizer['d_msg']['hours_err'] = __('hour(s)', 'loginizer');
	3675	+ // Reset the username
	3676	+ if(isset($_POST['save_lz_admin'])){
	3677	+
	3678	+ // Get the new username
	3679	+ $current_username = lz_optpost('current_username');
	3680	+ $new_username = lz_optpost('new_username');
	3681	+
	3682	+ if(empty($current_username)){
	3683	+ $lz_error['current_username_empty'] = __('Current username is required', 'loginizer');
	3684	+ return loginizer_page_security_T();
	3685	+ }
	3686	+
	3687	+ if(empty($new_username)){
	3688	+ $lz_error['new_username_empty'] = __('New username is required', 'loginizer');
	3689	+ return loginizer_page_security_T();
	3690	+ }
	3691	+
	3692	+ // Is the starting of the username having 'admin' ?
	3693	+ if(@strtolower(substr($new_username, 0, 5)) == 'admin'){
	3694	+ $lz_error['user_exists'] = __('The username begins with <b>admin</b>. Please change it !', 'loginizer');
	3695	+ return loginizer_page_security_T();
	3696	+ }
	3697	+
	3698	+ // Lets check if there is such a user
	3699	+ $found = get_user_by('login', $new_username);
	3700	+
	3701	+ // Found one !
	3702	+ if(!empty($found->ID)){
	3703	+ $lz_error['user_exists'] = __('The new username is already assigned to another user', 'loginizer');
	3704	+ return loginizer_page_security_T();
	3705	+ }
878	3706
879		- // Message Strings
880		- $loginizer['msg'] = get_option('loginizer_msg', []);
	3707	+ $old_user = get_user_by('login', $current_username);
	3708	+
	3709	+ if(empty($old_user->ID)){
	3710	+ $lz_error['current_username_invalid'] = __('No user found with the current username provided', 'loginizer');
	3711	+ return loginizer_page_security_T();
	3712	+ }
	3713	+
	3714	+ if(empty($old_user->caps['administrator'])){
	3715	+ $lz_error['user_not_admin'] = __('The user is not an administrator. Only administrator user\'s username can be changed.', 'loginizer');
	3716	+ return loginizer_page_security_T();
	3717	+ }
	3718	+
	3719	+ // Update the username
	3720	+ $update_data = array('user_login' => $new_username);
	3721	+ $where_data = array('ID' => $old_user->ID);
	3722	+
	3723	+ $format = array('%s');
	3724	+ $where_format = array('%d');
	3725	+
	3726	+ $wpdb->update($wpdb->prefix.'users', $update_data, $where_data, $format, $where_format);
	3727	+
	3728	+ // Mark as saved
	3729	+ $GLOBALS['lz_saved'] = true;
	3730	+
	3731	+ }
881	3732
882		- foreach($loginizer['d_msg'] as $lk => $lv){
883		- if(empty($loginizer['msg'][$lk])){
884		- $loginizer['msg'][$lk] = $loginizer['d_msg'][$lk];
	3733	+ // Change the wp-admin slug
	3734	+ if(isset($_POST['save_lz_wp_admin'])){
	3735	+
	3736	+ // Get the new username
	3737	+ $option['admin_slug'] = lz_optpost('admin_slug');
	3738	+ $option['restrict_wp_admin'] = (int) lz_optpost('restrict_wp_admin');
	3739	+ $option['wp_admin_msg'] = @stripslashes($_POST['wp_admin_msg']);
	3740	+ $lz_wp_admin_docs = (int) lz_optpost('lz_wp_admin_docs');
	3741	+
	3742	+ // Did you agree to this ?
	3743	+ if(!empty($option['admin_slug']) && empty($lz_wp_admin_docs)){
	3744	+ $lz_error['lz_wp_admin_docs'] = __('You have not confirmed that you have read the guide and configured .htaccess. Please read the guide, configure .htaccess and then save these settings and check this checkbox', 'loginizer');
	3745	+ return loginizer_page_security_T();
885	3746	}
	3747	+
	3748	+ // Length
	3749	+ if(!empty($option['admin_slug']) && (strlen($option['admin_slug']) <= 4 || strlen($option['admin_slug']) > 50)){
	3750	+ $lz_error['admin_slug'] = __('The new Admin slug length must be greater than <b>4</b> chars and upto <b>50</b> chars long', 'loginizer');
	3751	+ return loginizer_page_security_T();
	3752	+ }
	3753	+
	3754	+ // Only regular characters
	3755	+ if(preg_match('/[^\w\d\-_]/is', $option['admin_slug'])){
	3756	+ $lz_error['admin_slug_chars'] = __('Special characters are not allowed', 'loginizer');
	3757	+ return loginizer_page_security_T();
	3758	+ }
	3759	+
	3760	+ // Update the option
	3761	+ update_option('loginizer_wp_admin', $option);
	3762	+
	3763	+ // Mark as saved
	3764	+ $GLOBALS['lz_saved'] = true;
	3765	+
886	3766	}
887	3767
888		- $loginizer['2fa_d_msg']['otp_app'] = __('Please enter the OTP as seen in your App', 'loginizer');
889		- $loginizer['2fa_d_msg']['otp_email'] = __('Please enter the OTP emailed to you', 'loginizer');
890		- $loginizer['2fa_d_msg']['otp_field'] = __('One Time Password', 'loginizer');
891		- $loginizer['2fa_d_msg']['otp_question'] = __('Please answer your security question', 'loginizer');
892		- $loginizer['2fa_d_msg']['otp_answer'] = __('Your Answer', 'loginizer');
893	3768
894		- // Message Strings
895		- $loginizer['2fa_msg'] = get_option('loginizer_2fa_msg', []);
	3769	+ // Save blacklisted usernames
	3770	+ if(isset($_POST['save_lz_bl_users'])){
	3771	+
	3772	+ $usernames = isset($_POST['lz_bl_users']) && is_array($_POST['lz_bl_users']) ? $_POST['lz_bl_users'] : array();
	3773	+
	3774	+ // Process the usernames i.e. remove blanks
	3775	+ foreach($usernames as $k => $v){
	3776	+ $v = trim($v);
	3777	+
	3778	+ // Unset blank values
	3779	+ if(empty($v)){
	3780	+ unset($usernames[$k]);
	3781	+ }
	3782	+
	3783	+ // Disallow these special characters to avoid XSS or any other security vulnerability
	3784	+ if(preg_match('/[\<\>\"\']/', $v)){
	3785	+ unset($usernames[$k]);
	3786	+ }
	3787	+ }
	3788	+
	3789	+ // Update the blacklist
	3790	+ update_option('loginizer_username_blacklist', array_values($usernames));
	3791	+
	3792	+ // Mark as saved
	3793	+ $GLOBALS['lz_saved'] = true;
	3794	+
	3795	+ }
896	3796
897		- foreach($loginizer['2fa_d_msg'] as $lk => $lv){
898		- if(empty($loginizer['2fa_msg'][$lk])){
899		- $loginizer['2fa_msg'][$lk] = $loginizer['2fa_d_msg'][$lk];
	3797	+
	3798	+ // Save blacklisted domains
	3799	+ if(isset($_POST['save_lz_bl_domains'])){
	3800	+
	3801	+ $domains = isset($_POST['lz_bl_domains']) && is_array($_POST['lz_bl_domains']) ? $_POST['lz_bl_domains'] : array();
	3802	+
	3803	+ // Process the domains i.e. remove blanks
	3804	+ foreach($domains as $k => $v){
	3805	+ $v = trim($v);
	3806	+
	3807	+ // Unset blank values
	3808	+ if(empty($v)){
	3809	+ unset($domains[$k]);
	3810	+ }
	3811	+
	3812	+ // Disallow these special characters to avoid XSS or any other security vulnerability
	3813	+ if(preg_match('/[\<\>\"\']/', $v)){
	3814	+ unset($domains[$k]);
	3815	+ }
900	3816	}
	3817	+
	3818	+ // Update the blacklist
	3819	+ update_option('loginizer_domains_blacklist', array_values($domains));
	3820	+
	3821	+ // Mark as saved
	3822	+ $GLOBALS['lz_saved'] = true;
	3823	+
901	3824	}
902	3825
	3826	+ // Call theme
	3827	+ loginizer_page_security_T();
	3828	+
903	3829	}
904	3830
905		-function loginizer_social_login_load(){
906		- include_once LOGINIZER_DIR . '/main/social-login.php';
	3831	+// Loginizer - Security Settings Page Theme
	3832	+function loginizer_page_security_T(){
	3833	+
	3834	+ global $loginizer, $lz_error, $lz_env;
	3835	+
	3836	+ // Universal header
	3837	+ loginizer_page_header('Security Settings');
	3838	+
	3839	+ loginizer_feature_available('Security Settings');
	3840	+
	3841	+ // Saved ?
	3842	+ if(!empty($GLOBALS['lz_saved'])){
	3843	+ echo '<div id="message" class="updated"><p>'. __('The settings were saved successfully', 'loginizer'). '</p></div><br />';
	3844	+ }
	3845	+
	3846	+ // Any errors ?
	3847	+ if(!empty($lz_error)){
	3848	+ lz_report_error($lz_error);echo '<br />';
	3849	+ }
	3850	+
	3851	+ $current_admin = get_user_by('id', 1);
	3852	+
	3853	+ ?>
	3854	+
	3855	+<style>
	3856	+input[type="text"], textarea, select {
	3857	+ width: 70%;
907	3858	}
908	3859
909		-// Checks if softaculous is installed on the server.
910		-function loginizer_check_softaculous(){
	3860	+.form-table label{
	3861	+ font-weight:bold;
	3862	+}
911	3863
912		- // Checking if we have Softaculous installed?
913		- if(!preg_match('/^\/home(?:\d+)?\/.*\//U', ABSPATH, $matches)){
914		- return false;
	3864	+.exp{
	3865	+ font-size:12px;
	3866	+}
	3867	+</style>
	3868	+
	3869	+<form action="" method="post" enctype="multipart/form-data" loginizer-premium-only="1">
	3870	+
	3871	+ <div id="" class="postbox">
	3872	+
	3873	+ <div class="postbox-header">
	3874	+ <h2 class="hndle ui-sortable-handle">
	3875	+ <span><?php echo __('Rename Login Page', 'loginizer'); ?></span>
	3876	+ </h2>
	3877	+ </div>
	3878	+
	3879	+ <div class="inside">
	3880	+
	3881	+ <?php wp_nonce_field('loginizer-options'); ?>
	3882	+ <table class="form-table">
	3883	+ <tr>
	3884	+ <td scope="row" valign="top" colspan="2">
	3885	+ <i>You can rename your Login page from <b><?php echo $loginizer['login_basename']; ?></b> to anything of your choice e.g. mylogin. This would make it very difficult for automated attack bots to know where to login !</i>
	3886	+ </td>
	3887	+ </tr>
	3888	+ <tr>
	3889	+ <td scope="row" valign="top" style="width:40% !important">
	3890	+ <label><?php echo __('New Login Slug', 'loginizer'); ?></label><br>
	3891	+ <span class="exp"><?php echo __('Set blank to reset to the original login URL', 'loginizer'); ?></span>
	3892	+ </td>
	3893	+ <td>
	3894	+ <input type="text" size="50" value="<?php echo lz_POSTval('login_slug', $loginizer['login_slug']); ?>" name="login_slug" />
	3895	+ </td>
	3896	+ </tr>
	3897	+
	3898	+<?php
	3899	+
	3900	+if(!defined('SITEPAD')){
	3901	+
	3902	+?>
	3903	+ <tr>
	3904	+ <td scope="row" valign="top" style="width:200px !important">
	3905	+ <label><?php echo __('Access Secretly Only', 'loginizer'); ?></label><br>
	3906	+ <span class="exp"><?php echo __('If set, then all Login URL\'s will still point to '.$loginizer['login_basename'].' and users will have to access the New Login Slug by typing it in the browser.', 'loginizer'); ?></span>
	3907	+ </td>
	3908	+ <td>
	3909	+ <input type="checkbox" value="1" name="rename_login_secret" <?php echo lz_POSTchecked('rename_login_secret', (empty($loginizer['rename_login_secret']) ? false : true)); ?> />
	3910	+ </td>
	3911	+ </tr>
	3912	+
	3913	+<?php
	3914	+
	3915	+}
	3916	+
	3917	+?>
	3918	+ </table><br />
	3919	+ <center><input name="save_lz" class="button button-primary action" value="<?php echo __('Save Settings', 'loginizer'); ?>" type="submit" /></center>
	3920	+
	3921	+ </div>
	3922	+ </div>
	3923	+ <br />
	3924	+
	3925	+ <?php
	3926	+
	3927	+ if(!defined('SITEPAD')){
	3928	+
	3929	+ ?>
	3930	+
	3931	+ <div id="" class="postbox">
	3932	+
	3933	+ <div class="postbox-header">
	3934	+ <h2 class="hndle ui-sortable-handle">
	3935	+ <span><?php echo __('XML-RPC Settings', 'loginizer'); ?></span>
	3936	+ </h2>
	3937	+ </div>
	3938	+
	3939	+ <div class="inside">
	3940	+
	3941	+ <?php wp_nonce_field('loginizer-options'); ?>
	3942	+ <table class="form-table">
	3943	+ <tr>
	3944	+ <td scope="row" valign="top" colspan="2">
	3945	+ <i><?php echo __('WordPress\'s XML-RPC feature allows external services to access and modify content on the site. Services like the Jetpack plugin, the WordPress mobile app, pingbacks, etc make use of the XML-RPC feature. If this site does not use a service that requires XML-RPC, please <b>disable</b> the XML-RPC feature as it prevents attackers from using the feature to attack the site. If your service can use a custom XML-RPC URL, you can also <b>rename</b> the XML-RPC page to a <b>custom slug</b>.', 'loginizer'); ?></i>
	3946	+ </td>
	3947	+ </tr>
	3948	+ <tr>
	3949	+ <td scope="row" valign="top" style="width:40% !important">
	3950	+ <label><?php echo __('Disable XML-RPC', 'loginizer'); ?></label>
	3951	+ </td>
	3952	+ <td>
	3953	+ <input type="checkbox" value="1" name="xmlrpc_disable" <?php echo lz_POSTchecked('xmlrpc_disable', (empty($loginizer['xmlrpc_disable']) ? false : true)); ?> />
	3954	+ </td>
	3955	+ </tr>
	3956	+ <tr>
	3957	+ <td scope="row" valign="top" style="width:40% !important">
	3958	+ <label><?php echo __('Disable Pingbacks', 'loginizer'); ?></label>
	3959	+ </td>
	3960	+ <td>
	3961	+ <input type="checkbox" value="1" name="pingbacks_disable" <?php echo lz_POSTchecked('pingbacks_disable', (empty($loginizer['pingbacks_disable']) ? false : true)); ?> />
	3962	+ </td>
	3963	+ </tr>
	3964	+ <tr>
	3965	+ <td scope="row" valign="top">
	3966	+ <label><?php echo __('New XML-RPC Slug', 'loginizer'); ?></label><br>
	3967	+ <span class="exp"><?php echo __('Set blank to reset to the original XML-RPC URL', 'loginizer'); ?></span>
	3968	+ </td>
	3969	+ <td>
	3970	+ <input type="text" size="50" value="<?php echo lz_optpost('xmlrpc_slug', $loginizer['xmlrpc_slug']); ?>" name="xmlrpc_slug" />
	3971	+ </td>
	3972	+ </tr>
	3973	+ </table><br />
	3974	+ <center><input name="save_lz" class="button button-primary action" value="<?php echo __('Save Settings', 'loginizer'); ?>" type="submit" /></center>
	3975	+
	3976	+ </div>
	3977	+ </div>
	3978	+ <br />
	3979	+
	3980	+ <?php
	3981	+
915	3982	}
916	3983
917		- if(empty($matches) || empty($matches[0])){
918		- return false;
	3984	+ ?>
	3985	+
	3986	+</form>
	3987	+
	3988	+<?php
	3989	+
	3990	+if(!defined('SITEPAD')){
	3991	+
	3992	+?>
	3993	+
	3994	+<script type="text/javascript">
	3995	+
	3996	+
	3997	+function dirname(path) {
	3998	+ return path.replace(/\\/g, '/').replace(/\/[^/]*\/?$/, '');
	3999	+}
	4000	+
	4001	+function lz_test_wp_admin(){
	4002	+
	4003	+ var data = new Object();
	4004	+ data["action"] = "loginizer_wp_admin";
	4005	+ data["nonce"] = "<?php echo wp_create_nonce('loginizer_admin_ajax');?>";
	4006	+
	4007	+ var new_ajaxurl = dirname(dirname(ajaxurl))+'/'+jQuery('#lz_admin_slug').val()+'/admin-ajax.php';
	4008	+
	4009	+ // AJAX and on success function
	4010	+ jQuery.post(new_ajaxurl, data, function(response){
	4011	+
	4012	+ if(response['result'] == 1){
	4013	+ alert("<?php echo __('Everything seems to be good. You can proceed to save the settings !', 'loginizer'); ?>");
	4014	+ }
	4015	+
	4016	+ // Throw an error for failures
	4017	+ }).fail(function() {
	4018	+ alert("<?php echo __('There was an error connecting to WordPress with the new Admin Slug. Did you configure everything properly ?', 'loginizer'); ?>");
	4019	+ });
	4020	+ //jQuery.ajax('<input type="text" size="30" value="" name="lz_bl_users[]" class="lz_bl_users" />');
	4021	+ return false;
	4022	+};
	4023	+
	4024	+</script>
	4025	+
	4026	+<form action="" method="post" enctype="multipart/form-data" loginizer-premium-only="1">
	4027	+ <div id="" class="postbox">
	4028	+
	4029	+ <div class="postbox-header">
	4030	+ <h2 class="hndle ui-sortable-handle">
	4031	+ <span><?php echo __('Rename wp-admin access', 'loginizer'); ?></span>
	4032	+ </h2>
	4033	+ </div>
	4034	+
	4035	+ <div class="inside">
	4036	+
	4037	+ <?php wp_nonce_field('loginizer-options'); ?>
	4038	+ <table class="form-table">
	4039	+ <?php
	4040	+ if(preg_match('/(apache|litespeed|lsws)/is', $_SERVER["SERVER_SOFTWARE"])){
	4041	+ // Supported. Do nothing
	4042	+ }else{
	4043	+ echo '<tr>
	4044	+ <td scope="row" valign="top" colspan="2">
	4045	+ <div style="color:#a94442; background-color:#f2dede; border-color:#ebccd1; padding:15px; border:1px solid transparent; border-radius:4px;">'.__('Rename wp-admin access feature is supported only on Apache and Litespeed', 'loginizer').'</div>
	4046	+ </td>
	4047	+ </tr>';
	4048	+ }
	4049	+ ?>
	4050	+ <tr>
	4051	+ <td scope="row" valign="top" colspan="2">
	4052	+ <i>You can rename your WordPress Admin access URL <b>wp-admin</b> to anything of your choice e.g. my-admin. This will require you to change .htaccess, so please follow <a href="<?php echo LOGINIZER_DOCS;?>Renaming_the_WP-Admin_Area" target="_blank">our guide</a> on how to do so !</i>
	4053	+ </td>
	4054	+ </tr>
	4055	+ <tr>
	4056	+ <td scope="row" valign="top" style="width:40% !important">
	4057	+ <label><?php echo __('New wp-admin Slug', 'loginizer'); ?></label><br>
	4058	+ <span class="exp"><?php echo __('Set blank to reset to the original wp-admin URL', 'loginizer'); ?></span>
	4059	+ </td>
	4060	+ <td>
	4061	+ <input type="text" size="50" value="<?php echo lz_optpost('admin_slug', $loginizer['admin_slug']); ?>" name="admin_slug" id="lz_admin_slug" />
	4062	+ </td>
	4063	+ </tr>
	4064	+ <tr>
	4065	+ <td scope="row" valign="top" style="width:200px !important">
	4066	+ <label><?php echo __('Disable wp-admin access', 'loginizer'); ?></label><br>
	4067	+ <span class="exp"><?php echo __('If set, then only the new admin slug will work and access to the Old Admin Slug i.e. wp-admin will be disabled. If anyone accesses wp-admin, a warning will be shown.<br><label>NOTE: Please use this option cautiously !</label>', 'loginizer'); ?></span>
	4068	+ </td>
	4069	+ <td>
	4070	+ <input type="checkbox" id="lz_restrict_wp_admin" onchange="lz_wp_admin_msg_toggle()" value="1" name="restrict_wp_admin" <?php echo lz_POSTchecked('restrict_wp_admin', (empty($loginizer['restrict_wp_admin']) ? false : true)); ?> />
	4071	+ </td>
	4072	+ </tr>
	4073	+ <tr id="lz_wp_admin_msg_row" style="display:none">
	4074	+ <td scope="row" valign="top">
	4075	+ <label><?php echo __('WP-Admin Error Message', 'loginizer'); ?></label><br>
	4076	+ <span class="exp"><?php echo __('Error message to show if someone accesses wp-admin', 'loginizer'); ?></span> Default : <?php echo $loginizer['wp_admin_d_msg']; ?>
	4077	+ </td>
	4078	+ <td>
	4079	+ <input type="text" size="50" value="<?php echo lz_htmlizer(!empty($_POST['wp_admin_msg']) ? stripslashes($_POST['wp_admin_msg']) : @$loginizer['wp_admin_msg']); ?>" name="wp_admin_msg" id="lz_wp_admin_msg" />
	4080	+ </td>
	4081	+ </tr>
	4082	+ <tr>
	4083	+ <td scope="row" valign="top" style="width:200px !important">
	4084	+ <label><?php echo __('I have setup .htaccess', 'loginizer'); ?></label><br>
	4085	+ <span class="exp"><?php echo __('You need to confirm that you have configured .htaccess as per <a href="'.LOGINIZER_DOCS.'Renaming_the_WP-Admin_Area" target="_blank">our guide</a> so that we can safely enable this feature', 'loginizer'); ?></span>
	4086	+ </td>
	4087	+ <td>
	4088	+ <input type="checkbox" value="1" name="lz_wp_admin_docs" />
	4089	+ <input type="button" onclick="lz_test_wp_admin()" class="button" style="background: #5cb85c; color:white; border:#5cb85c" value="<?php echo __('Test New WP-Admin Slug', 'loginizer'); ?>" />
	4090	+ </td>
	4091	+ </tr>
	4092	+ </table><br />
	4093	+ <center><input name="save_lz_wp_admin" class="button button-primary action" value="<?php echo __('Save Settings', 'loginizer'); ?>" type="submit" /></center>
	4094	+
	4095	+ </div>
	4096	+ </div>
	4097	+ <br />
	4098	+</form>
	4099	+
	4100	+<script type="text/javascript">
	4101	+
	4102	+function lz_wp_admin_msg_toggle(){
	4103	+ var ele = jQuery('#lz_restrict_wp_admin')[0];
	4104	+ if(ele.checked){
	4105	+ jQuery('#lz_wp_admin_msg_row').show();
	4106	+ }else{
	4107	+ jQuery('#lz_wp_admin_msg_row').hide();
919	4108	}
	4109	+};
920	4110
921		- $softaculous_path = $matches[0] . '.softaculous/installations.php';
922		- if(!file_exists($softaculous_path)){
923		- return false;
	4111	+lz_wp_admin_msg_toggle();
	4112	+
	4113	+</script>
	4114	+
	4115	+
	4116	+<form action="" method="post" enctype="multipart/form-data" loginizer-premium-only="1">
	4117	+ <div id="" class="postbox">
	4118	+
	4119	+ <div class="postbox-header">
	4120	+ <h2 class="hndle ui-sortable-handle">
	4121	+ <span><?php echo __('Change Admin Username', 'loginizer'); ?></span>
	4122	+ </h2>
	4123	+ </div>
	4124	+
	4125	+ <div class="inside">
	4126	+
	4127	+ <?php wp_nonce_field('loginizer-options'); ?>
	4128	+ <table class="form-table">
	4129	+ <tr>
	4130	+ <td scope="row" valign="top" colspan="2">
	4131	+ <i><?php echo __('You can change the Admin Username from here to anything of your choice e.g. iamtheboss. This would make it very difficult for automated attack bots to know what is the admin username !', 'loginizer'); ?></i>
	4132	+ </td>
	4133	+ </tr>
	4134	+ <tr>
	4135	+ <td scope="row" valign="top" style="width:40% !important">
	4136	+ <label for="current_username"><?php echo __('Current Username', 'loginizer'); ?></label><br>
	4137	+ <span class="exp"><?php echo __('The current username you want to change', 'loginizer'); ?></span>
	4138	+ </td>
	4139	+ <td>
	4140	+ <input type="text" size="50" value="<?php echo lz_optpost('current_username', (!empty($current_admin->user_login) ? $current_admin->user_login : '')); ?>" name="current_username" id="current_username" />
	4141	+ </td>
	4142	+ </tr>
	4143	+ <tr>
	4144	+ <td scope="row" valign="top" style="width:40% !important">
	4145	+ <label for="new_username"><?php echo __('New Username', 'loginizer'); ?></label><br>
	4146	+ <span class="exp"><?php echo __('The new username you want to set', 'loginizer'); ?></span>
	4147	+ </td>
	4148	+ <td>
	4149	+ <input type="text" size="50" value="<?php echo lz_optpost('new_username', ''); ?>" name="new_username" id="new_username" />
	4150	+ </td>
	4151	+ </tr>
	4152	+ </table><br />
	4153	+ <i><?php echo __('Note: Username can be changed only for administrator users.'); ?></i>
	4154	+ <center><input name="save_lz_admin" class="button button-primary action" value="<?php echo __('Set the Username', 'loginizer'); ?>" type="submit" /></center>
	4155	+
	4156	+ </div>
	4157	+ </div>
	4158	+</form>
	4159	+
	4160	+<script type="text/javascript">
	4161	+function add_lz_bl_users(){
	4162	+ jQuery("#lz_bl_users").append('<input type="text" size="30" value="" name="lz_bl_users[]" class="lz_bl_users" />');
	4163	+ return false;
	4164	+};
	4165	+</script>
	4166	+
	4167	+<style>
	4168	+.lz_bl_users, .lz_bl_domains{
	4169	+ margin-bottom:20px;
	4170	+}
	4171	+</style>
	4172	+
	4173	+<form action="" method="post" enctype="multipart/form-data" loginizer-premium-only="1">
	4174	+ <div id="" class="postbox">
	4175	+
	4176	+ <div class="postbox-header">
	4177	+ <h2 class="hndle ui-sortable-handle">
	4178	+ <span><?php echo __('Username Auto Blacklist', 'loginizer'); ?></span>
	4179	+ </h2>
	4180	+ </div>
	4181	+
	4182	+ <div class="inside">
	4183	+
	4184	+ <?php wp_nonce_field('loginizer-options'); ?>
	4185	+ <table class="form-table">
	4186	+ <tr>
	4187	+ <td scope="row" valign="top" colspan="2">
	4188	+ <i><?php echo __('Attackers generally use common usernames like <b>admin, administrator, or variations of your domain name / business name</b>. You can specify such username here and Loginizer will auto-blacklist the IP Address(s) of clients who try to use such username(s).', 'loginizer'); ?></i>
	4189	+ </td>
	4190	+ </tr>
	4191	+ <tr>
	4192	+ <td scope="row" valign="top" style="width:40% !important; vertical-align:top !important;">
	4193	+ <label><?php echo __('Username(s)', 'loginizer'); ?></label><br>
	4194	+ <span class="exp"><?php echo __('You can use - <b>*</b> (Star)- as a wild card as well. Blank fields will be ignored', 'loginizer'); ?></span>
	4195	+ </td>
	4196	+ <td>
	4197	+ <div id="lz_bl_users">
	4198	+ <?php
	4199	+
	4200	+ $usernames = isset($_POST['lz_bl_users']) && is_array($_POST['lz_bl_users']) ? $_POST['lz_bl_users'] : $loginizer['username_blacklist'];
	4201	+
	4202	+ if(empty($usernames)){
	4203	+ $usernames[] = '';
	4204	+ }
	4205	+
	4206	+ foreach($usernames as $_user){
	4207	+ echo '<input type="text" size="30" value="'.$_user.'" name="lz_bl_users[]" class="lz_bl_users" />';
	4208	+ }
	4209	+
	4210	+ ?>
	4211	+ </div>
	4212	+ <br />
	4213	+ <input class="button" type="button" value="<?php echo __('Add New Username', 'loginizer'); ?>" onclick="return add_lz_bl_users();" style="float:right" />
	4214	+ </td>
	4215	+ </tr>
	4216	+ </table><br />
	4217	+ <center><input name="save_lz_bl_users" class="button button-primary action" value="<?php echo __('Save Username(s)', 'loginizer'); ?>" type="submit" /></center>
	4218	+
	4219	+ </div>
	4220	+ </div>
	4221	+</form>
	4222	+
	4223	+<script type="text/javascript">
	4224	+function add_lz_bl_domains(){
	4225	+ jQuery("#lz_bl_domains").append('<input type="text" size="30" value="" name="lz_bl_domains[]" class="lz_bl_domains" />');
	4226	+ return false;
	4227	+};
	4228	+</script>
	4229	+
	4230	+
	4231	+<form action="" method="post" enctype="multipart/form-data" loginizer-premium-only="1">
	4232	+ <div id="" class="postbox">
	4233	+
	4234	+ <div class="postbox-header">
	4235	+ <h2 class="hndle ui-sortable-handle">
	4236	+ <span><?php echo __('New Registration Domain Blacklist', 'loginizer'); ?></span>
	4237	+ </h2>
	4238	+ </div>
	4239	+
	4240	+ <div class="inside">
	4241	+
	4242	+ <?php wp_nonce_field('loginizer-options'); ?>
	4243	+ <table class="form-table">
	4244	+ <tr>
	4245	+ <td scope="row" valign="top" colspan="2">
	4246	+ <i>If you would like to ban new registrations from a particular domain, you can use this utility to do so.</i>
	4247	+ </td>
	4248	+ </tr>
	4249	+ <tr>
	4250	+ <td scope="row" valign="top" style="width:40% !important; vertical-align:top !important;">
	4251	+ <label><?php echo __('Domain(s)', 'loginizer'); ?></label><br>
	4252	+ <span class="exp"><?php echo __('You can use - <b>*</b> (Star)- as a wild card as well. Blank fields will be ignored', 'loginizer'); ?></span>
	4253	+ </td>
	4254	+ <td>
	4255	+ <div id="lz_bl_domains">
	4256	+ <?php
	4257	+
	4258	+ $domains = isset($_POST['lz_bl_domains']) && is_array($_POST['lz_bl_domains']) ? $_POST['lz_bl_domains'] : $loginizer['domains_blacklist'];
	4259	+
	4260	+ if(empty($domains)){
	4261	+ $domains[] = '';
	4262	+ }
	4263	+
	4264	+ foreach($domains as $_domain){
	4265	+ echo '<input type="text" size="30" value="'.$_domain.'" name="lz_bl_domains[]" class="lz_bl_domains" />';
	4266	+ }
	4267	+
	4268	+ ?>
	4269	+ </div>
	4270	+ <br />
	4271	+ <input class="button" type="button" value="<?php echo __('Add New Domain', 'loginizer'); ?>" onclick="return add_lz_bl_domains();" style="float:right" />
	4272	+ </td>
	4273	+ </tr>
	4274	+ </table><br />
	4275	+ <center><input name="save_lz_bl_domains" class="button button-primary action" value="<?php echo __('Save Domains(s)', 'loginizer'); ?>" type="submit" /></center>
	4276	+
	4277	+ </div>
	4278	+ </div>
	4279	+</form>
	4280	+
	4281	+<?php
	4282	+
	4283	+}
	4284	+
	4285	+ loginizer_page_footer();
	4286	+
	4287	+}
	4288	+
	4289	+// Loginizer - Checksum load data
	4290	+function loginizer_page_checksums_L(&$files, &$_ignores){
	4291	+
	4292	+ global $loginizer, $lz_error, $lz_env;
	4293	+
	4294	+ // Load any mismatched files and ignores
	4295	+ $files = get_option('loginizer_checksums_diff');
	4296	+ $_ignores = get_option('loginizer_checksums_ignore');
	4297	+ $_ignores = is_array($_ignores) ? $_ignores : array(); // SHOULD ALWAYS BE PURE
	4298	+ $ignores = array();
	4299	+
	4300	+ foreach($_ignores as $ik => $iv){
	4301	+ $ignores[$iv] = array();
	4302	+ if(!empty($files[$iv])){
	4303	+ $ignores[$iv] = $files[$iv];
	4304	+ }
924	4305	}
925	4306
926		- // Checking if users has changed the branding of Softaculous.
927		- $universal_file = '';
928		- // Plesk, ISPManager, ISPConfig, InterWorx, H-Sphere, CentOS Web Panel, Softaculous Remote and Softaculous Enterprise
929		- if(file_exists('/usr/local/softaculous/enduser/universal.php')){
930		- $universal_file = '/usr/local/softaculous/enduser/universal.php';
931		- }else if(file_exists('/usr/local/cpanel/whostmgr/docroot/cgi/softaculous/enduser/universal.php')){
932		- $universal_file = '/usr/local/cpanel/whostmgr/docroot/cgi/softaculous/enduser/universal.php';
933		- }else if(file_exists('/usr/local/directadmin/plugins/softaculous/enduser/universal.php')){
934		- $universal_file = '/usr/local/directadmin/plugins/softaculous/enduser/universal.php';
935		- }else if(file_exists('/usr/local/vesta/softaculous/enduser/universal.php')){
936		- $universal_file = '/usr/local/vesta/softaculous/enduser/universal.php';
	4307	+ $lz_env['files'] = $files;
	4308	+ $lz_env['ignores'] = $ignores;
	4309	+
	4310	+}
	4311	+
	4312	+// Loginizer - PasswordLess Page
	4313	+function loginizer_page_checksums(){
	4314	+
	4315	+ global $loginizer, $lz_error, $lz_env;
	4316	+
	4317	+ if(!current_user_can('manage_options')){
	4318	+ wp_die('Sorry, but you do not have permissions to change settings.');
937	4319	}
	4320	+
	4321	+ if(!loginizer_is_premium() && count($_POST) > 0){
	4322	+ $lz_error['not_in_free'] = __('This feature is not available in the Free version. <a href="'.LOGINIZER_PRICING_URL.'" target="_blank" style="text-decoration:none; color:green;"><b>Upgrade to Pro</b></a>', 'loginizer');
	4323	+ return loginizer_page_checksums_T();
	4324	+ }
938	4325
939		- if(empty($universal_file)){
940		- return false;
	4326	+ /* Make sure post was from this page */
	4327	+ if(count($_POST) > 0){
	4328	+ check_admin_referer('loginizer-options');
941	4329	}
	4330	+
	4331	+ // Are we to run it ?
	4332	+ if(isset($_REQUEST['lz_run_checksum'])){
	4333	+ loginizer_checksums();
	4334	+ }
	4335	+
	4336	+ loginizer_page_checksums_L($files, $_ignores);
	4337	+
	4338	+ $lz_env['csum_freq'][1] = __('Once a Day', 'loginizer');
	4339	+ $lz_env['csum_freq'][7] = __('Once a Week', 'loginizer');
	4340	+ $lz_env['csum_freq'][30] = __('Once a Month', 'loginizer');
	4341	+
	4342	+ if(isset($_POST['save_lz'])){
	4343	+
	4344	+ // In the future there can be more settings
	4345	+ $option['disable_checksum'] = (int) lz_optpost('disable_checksum');
	4346	+ $option['no_checksum_email'] = (int) lz_optpost('no_checksum_email');
	4347	+ $option['checksum_frequency'] = (int) lz_optpost('checksum_frequency');
	4348	+ $option['checksum_time'] = lz_optpost('checksum_time');
	4349	+
	4350	+ // Is there an error ?
	4351	+ if(!empty($lz_error)){
	4352	+ return loginizer_page_checksums_T();
	4353	+ }
	4354	+
	4355	+ // Save the options
	4356	+ update_option('loginizer_checksums', $option);
	4357	+
	4358	+ // Mark as saved
	4359	+ $GLOBALS['lz_saved'] = true;
	4360	+
	4361	+ }
	4362	+
	4363	+ // Add or remove from ignore list
	4364	+ if(isset($_POST['save_lz_csum_ig'])){
	4365	+
	4366	+ if(@is_array($_POST['checksum_del_ignore'])){
	4367	+
	4368	+ foreach($_POST['checksum_del_ignore'] as $k => $v){
	4369	+ $key = array_search($v, $_ignores);
	4370	+ if($key !== false){
	4371	+ unset($_ignores[$key]);
	4372	+ }
	4373	+ }
	4374	+
	4375	+ // Save it
	4376	+ update_option('loginizer_checksums_ignore', $_ignores);
	4377	+
	4378	+ }
	4379	+
	4380	+ if(@is_array($_POST['checksum_add_ignore'])){
	4381	+
	4382	+ foreach($_POST['checksum_add_ignore'] as $k => $v){
	4383	+ if(!empty($files[$v])){
	4384	+ $_ignores[] = $v;
	4385	+ }
	4386	+ }
	4387	+
	4388	+ // Save it
	4389	+ update_option('loginizer_checksums_ignore', $_ignores);
	4390	+
	4391	+ }
	4392	+
	4393	+ // Reload
	4394	+ loginizer_page_checksums_L($files, $_ignores);
	4395	+
	4396	+ // Mark as saved
	4397	+ $GLOBALS['lz_saved'] = true;
	4398	+
	4399	+ }
	4400	+
	4401	+ // Call theme
	4402	+ loginizer_page_checksums_T();
	4403	+}
942	4404
943		- $universal = file_get_contents($universal_file);
	4405	+// Loginizer - PasswordLess Page Theme
	4406	+function loginizer_page_checksums_T(){
	4407	+
	4408	+ global $loginizer, $lz_error, $lz_env;
	4409	+
	4410	+ // Universal header
	4411	+ loginizer_page_header('File Checksum Settings');
	4412	+
	4413	+ loginizer_feature_available('File Checksum');
	4414	+
	4415	+ wp_enqueue_script('jquery-clockpicker', LOGINIZER_URL.'/jquery-clockpicker.min.js', array('jquery'), '0.0.7');
	4416	+ wp_enqueue_style('jquery-clockpicker', LOGINIZER_URL.'/jquery-clockpicker.min.css', array(), '0.0.7');
	4417	+
	4418	+ // Saved ?
	4419	+ if(!empty($GLOBALS['lz_saved'])){
	4420	+ echo '<div id="message" class="updated"><p>'. __('The settings were saved successfully', 'loginizer'). '</p></div><br />';
	4421	+ }
	4422	+
	4423	+ // Did we just run the checksums
	4424	+ if(isset($_REQUEST['lz_run_checksum'])){
	4425	+ echo '<div id="message" class="updated"><p>'. __('The Checksum process was executed successfully', 'loginizer'). '</p></div><br />';
	4426	+ }
	4427	+
	4428	+ // Any errors ?
	4429	+ if(!empty($lz_error)){
	4430	+ lz_report_error($lz_error);echo '<br />';
	4431	+ }
944	4432
945		- if(empty($universal)){
946		- return false;
	4433	+ ?>
	4434	+
	4435	+<style>
	4436	+input[type="text"], textarea, select {
	4437	+ width: 70%;
	4438	+}
	4439	+
	4440	+.form-table label{
	4441	+ font-weight:bold;
	4442	+}
	4443	+
	4444	+.exp{
	4445	+ font-size:12px;
	4446	+}
	4447	+</style>
	4448	+
	4449	+<script>
	4450	+function lz_apply_status(ele, the_class){
	4451	+
	4452	+ var status = ele.checked;
	4453	+ jQuery(the_class).each(function(){
	4454	+ this.checked = status;
	4455	+ });
	4456	+
	4457	+}
	4458	+</script>
	4459	+
	4460	+ <div id="" class="postbox">
	4461	+ <div class="postbox-header">
	4462	+ <h2 class="hndle ui-sortable-handle">
	4463	+ <span><?php echo __('Checksum Settings', 'loginizer'); ?></span>
	4464	+ </h2>
	4465	+ </div>
	4466	+ <div class="inside">
	4467	+
	4468	+ <form action="" method="post" enctype="multipart/form-data" loginizer-premium-only="1">
	4469	+ <?php wp_nonce_field('loginizer-options'); ?>
	4470	+ <table class="form-table">
	4471	+ <tr>
	4472	+ <td scope="row" valign="top" style="width:400px !important">
	4473	+ <label><?php echo __('Disable Checksum of WP Core', 'loginizer'); ?></label><br>
	4474	+ <span class="exp"><?php echo __('If disabled, Loginizer will not check your sites core files against the WordPress checksum list.', 'loginizer'); ?></span>
	4475	+ </td>
	4476	+ <td valign="top">
	4477	+ <input type="checkbox" value="1" name="disable_checksum" <?php echo lz_POSTchecked('disable_checksum', (empty($loginizer['disable_checksum']) ? false : true)); ?> />
	4478	+ </td>
	4479	+ </tr>
	4480	+ <tr>
	4481	+ <td scope="row" valign="top" style="width:400px !important">
	4482	+ <label><?php echo __('Disable Email of Checksum Results', 'loginizer'); ?></label><br>
	4483	+ <span class="exp"><?php echo __('If checked, Loginizer will not email you the checksum results.', 'loginizer'); ?></span>
	4484	+ </td>
	4485	+ <td valign="top">
	4486	+ <input type="checkbox" value="1" name="no_checksum_email" <?php echo lz_POSTchecked('no_checksum_email', (empty($loginizer['no_checksum_email']) ? false : true)); ?> />
	4487	+ </td>
	4488	+ </tr>
	4489	+ <tr>
	4490	+ <td scope="row" valign="top" style="width:400px !important">
	4491	+ <label><?php echo __('Checksum Frequency', 'loginizer'); ?></label><br>
	4492	+ <span class="exp"><?php echo __('If Checksum is enabled, at what frequency should the checksums be performed.', 'loginizer'); ?></span>
	4493	+ </td>
	4494	+ <td valign="top">
	4495	+ <select name="checksum_frequency">
	4496	+ <?php
	4497	+ foreach($lz_env['csum_freq'] as $k => $v){
	4498	+ echo '<option '.lz_POSTselect('checksum_frequency', $k, ($loginizer['checksum_frequency'] == $k ? true : false)).' value="'.$k.'">'.$v.'</value>';
	4499	+ }
	4500	+ ?>
	4501	+ </select>
	4502	+ </td>
	4503	+ </tr>
	4504	+ <tr id="lz_checksum_time">
	4505	+ <td scope="row" valign="top" style="width:400px !important">
	4506	+ <label><?php echo __('Time of Day', 'loginizer'); ?></label><br>
	4507	+ <span class="exp"><?php echo __('If Checksum is enabled, what time of day should Loginizer do the check. Note : The check will be done on or after this time has elapsed as per the accesses being made.', 'loginizer'); ?></span>
	4508	+ </td>
	4509	+ <td valign="top">
	4510	+ <div class="input-group clockpicker" data-autoclose="true">
	4511	+ <input type="text" name="checksum_time" class="form-control" value="<?php echo (empty($loginizer['checksum_time']) ? '00:00' : $loginizer['checksum_time']);?>">
	4512	+ <span class="input-group-addon">
	4513	+ <span class="glyphicon glyphicon-time"></span>
	4514	+ </span>
	4515	+ </div>
	4516	+ <script type="text/javascript">
	4517	+ jQuery(document).ready(function(){
	4518	+ (function($) {
	4519	+ $('.clockpicker').clockpicker({donetext: 'Done'});
	4520	+ })(jQuery);
	4521	+ });
	4522	+ </script>
	4523	+ </td>
	4524	+ </tr>
	4525	+ <tr>
	4526	+ <td colspan="2">
	4527	+ <?php echo __('If disabled, Loginizer will not check your sites core files against the WordPress checksum list.', 'loginizer'); ?>
	4528	+ </td>
	4529	+ </tr>
	4530	+ </table><br />
	4531	+ <center><input name="save_lz" class="button button-primary action" value="<?php echo __('Save Settings', 'loginizer'); ?>" type="submit" /><input name="lz_run_checksum" style="float:right; background: #5cb85c; color:white; border:#5cb85c" class="button button-secondary" value="<?php echo __('Do a Checksum Now', 'loginizer'); ?>" type="submit" /></center>
	4532	+ </form>
	4533	+
	4534	+ </div>
	4535	+ </div>
	4536	+
	4537	+ <div id="" class="postbox">
	4538	+
	4539	+ <div class="postbox-header">
	4540	+ <h2 class="hndle ui-sortable-handle">
	4541	+ <span><?php echo __('Mismatching Files', 'loginizer'); ?></span>
	4542	+ </h2>
	4543	+ </div>
	4544	+
	4545	+ <div class="inside">
	4546	+
	4547	+ <form action="" method="post" enctype="multipart/form-data" loginizer-premium-only="1">
	4548	+ <?php wp_nonce_field('loginizer-options'); ?>
	4549	+ <table class="wp-list-table fixed striped users" border="0" width="100%" cellpadding="10" align="center">
	4550	+ <?php
	4551	+
	4552	+ $files = $lz_env['files'];
	4553	+
	4554	+ // Avoid undefined notice for $files
	4555	+ if(!empty($files)){
	4556	+ foreach($files as $k => $v){
	4557	+ if(!empty($lz_env['ignores'][$k])){
	4558	+ unset($files[$k]);
	4559	+ }
	4560	+ }
	4561	+ }
	4562	+
	4563	+ echo '
	4564	+ <tr>
	4565	+ <th style="background:#EFEFEF;">'.__('Relative Path', 'loginizer').'</th>
	4566	+ <th style="width:240px; background:#EFEFEF;">'.__('Found', 'loginizer').'</th>
	4567	+ <th style="width:240px; background:#EFEFEF;">'.__('Should be', 'loginizer').'</th>
	4568	+ <th style="width:10px; background:#EFEFEF;"><input type="checkbox" onchange="lz_apply_status(this, \'.csum_add_ig\');" /></th>
	4569	+ </tr>';
	4570	+
	4571	+ if(is_array($files) && count($files) > 0){
	4572	+
	4573	+ foreach($files as $k => $v){
	4574	+
	4575	+ echo '
	4576	+ <tr>
	4577	+ <td>'.$k.'</td>
	4578	+ <td>'.$v['cur_md5'].'</td>
	4579	+ <td>'.$v['md5'].'</td>
	4580	+ <td><input type="checkbox" name="checksum_add_ignore[]" class="csum_add_ig" value="'.$k.'" /></td>
	4581	+ </tr>';
	4582	+
	4583	+ }
	4584	+
	4585	+ }else{
	4586	+
	4587	+ echo '
	4588	+ <tr>
	4589	+ <td colspan="4" align="center">'.__('This is great ! No file with any wrong checksum has been found.').'</td>
	4590	+ </tr>';
	4591	+
	4592	+ }
	4593	+
	4594	+ ?>
	4595	+ </table><br />
	4596	+ <center><input name="save_lz_csum_ig" class="button button-primary action" value="<?php echo __('Add Selected to Ignore List', 'loginizer'); ?>" type="submit" /></center>
	4597	+ </form>
	4598	+ </div>
	4599	+
	4600	+ </div>
	4601	+ <br />
	4602	+
	4603	+ <div id="" class="postbox">
	4604	+
	4605	+ <div class="postbox-header">
	4606	+ <h2 class="hndle ui-sortable-handle">
	4607	+ <span><?php echo __('Ignore List', 'loginizer'); ?></span>
	4608	+ </h2>
	4609	+ </div>
	4610	+
	4611	+ <div class="inside">
	4612	+
	4613	+ <form action="" method="post" enctype="multipart/form-data" loginizer-premium-only="1">
	4614	+ <?php wp_nonce_field('loginizer-options'); ?>
	4615	+ <table class="wp-list-table fixed striped users" border="0" width="100%" cellpadding="10" align="center">
	4616	+ <?php
	4617	+
	4618	+ $ignores = $lz_env['ignores'];
	4619	+
	4620	+ echo '
	4621	+ <tr>
	4622	+ <th style="background:#EFEFEF;">'.__('Relative Path', 'loginizer').'</th>
	4623	+ <th style="width:240px; background:#EFEFEF;">'.__('Found', 'loginizer').'</th>
	4624	+ <th style="width:240px; background:#EFEFEF;">'.__('Should be', 'loginizer').'</th>
	4625	+ <th style="width:10px; background:#EFEFEF;"><input type="checkbox" onchange="lz_apply_status(this, \'.csum_del_ig\');" /></th>
	4626	+ </tr>';
	4627	+
	4628	+ // Load any mismatched files
	4629	+ $files = $ignores;
	4630	+
	4631	+ if(is_array($files) && count($files) > 0){
	4632	+
	4633	+ foreach($files as $k => $v){
	4634	+
	4635	+ echo '
	4636	+ <tr>
	4637	+ <td>'.$k.'</td>
	4638	+ <td>'.$v['cur_md5'].'</td>
	4639	+ <td>'.$v['md5'].'</td>
	4640	+ <td><input type="checkbox" name="checksum_del_ignore[]" class="csum_del_ig" value="'.$k.'" /></td>
	4641	+ </tr>';
	4642	+
	4643	+ }
	4644	+
	4645	+ }else{
	4646	+
	4647	+ echo '
	4648	+ <tr>
	4649	+ <td colspan="4" align="center">'.__('No files have been added to the ignore list').'</td>
	4650	+ </tr>';
	4651	+
	4652	+ }
	4653	+
	4654	+ ?>
	4655	+ </table><br />
	4656	+ <center><input name="save_lz_csum_ig" class="button button-primary action" value="<?php echo __('Remove Selected from Ignore List', 'loginizer'); ?>" type="submit" /></center>
	4657	+ </form>
	4658	+ </div>
	4659	+
	4660	+ </div>
	4661	+ <br />
	4662	+
	4663	+ <?php
	4664	+ loginizer_page_footer();
	4665	+
	4666	+}
	4667	+
	4668	+function loginizer_dismiss_newsletter(){
	4669	+
	4670	+ // Some AJAX security
	4671	+ check_ajax_referer('loginizer_admin_ajax', 'nonce');
	4672	+
	4673	+ if(!current_user_can('manage_options')){
	4674	+ wp_die('Sorry, but you do not have permissions to change settings.');
947	4675	}
	4676	+
	4677	+ update_option('loginizer_dismiss_newsletter', time());
	4678	+ echo 1;
	4679	+ wp_die();
	4680	+}
948	4681
949		- // Checking if Softaculous is being whitelabeled
950		- if(preg_match('/\$globals\[["\']sn["\']\]\s.?=\s.?["\']Softaculous["\']/', $universal)){
951		- update_option('loginizer_softwp_upgrade', time());
	4682	+add_action('wp_ajax_loginizer_dismiss_newsletter', 'loginizer_dismiss_newsletter');
	4683	+
	4684	+function loginizer_newsletter_subscribe(){
	4685	+
	4686	+ $newsletter_dismiss = get_option('loginizer_dismiss_newsletter');
	4687	+
	4688	+ if(!empty($newsletter_dismiss)){
	4689	+ return;
952	4690	}
	4691	+
	4692	+ $env['url'] = 'https://loginizer.com/';
	4693	+
	4694	+ echo '
	4695	+ <style>
	4696	+ .newsletter_container{
	4697	+ color: #000000;
	4698	+ background: #FFFFFF;
	4699	+ text-align:center;
	4700	+ }
	4701	+ .subscribe_form_row{
	4702	+ color: #000000;
	4703	+ padding-bottom:0px !important;
	4704	+ }
	4705	+ .subscribe_heading{
	4706	+ font-size:22px;
	4707	+ }
	4708	+ </style>
	4709	+
	4710	+ <div class="notice my-loginizer-dismiss-notice is-dismissible" style="background:#FFF;padding:15px; border: 1px solid #ccd0d4; width:80%;margin-left:0px;margin:auto;">
	4711	+ <div class="container">
	4712	+ <div class="col-md-6 col-md-offset-3 text-center newsletter_container">
	4713	+ <h2 style="font-weight:100; margin-bottom:20px; margin-top:5px;" class="subscribe_heading">Subscribe to our Newsletter</h2>
	4714	+ <form class="form-inline" action="" method="POST">
	4715	+ <div class="row subscribe_form_row">
	4716	+ <div class="col-md-12">
	4717	+ <input type="email" name="email" size="40" id="subscribe_email" class="" placeholder="email@example.com" value="">&nbsp;
	4718	+ <input type="button" name="subscribe" id="subscribe_button" class="button button-primary" value="Subscribe" onclick="loginizer_email_subscribe();" style="margin-top:0px;">
	4719	+ </div>
	4720	+ <div class="col-md-3">
	4721	+ </div>
	4722	+ </div>
	4723	+ </form>
	4724	+ <p><b>Note :</b> If a Loginizer account does not exist it will be created.</p>
	4725	+ </div>
	4726	+ </div>
	4727	+ </div><br />
	4728	+
	4729	+ <script type="text/javascript">
	4730	+ function loginizer_dismiss_newsletter(){
	4731	+
	4732	+ var data = new Object();
	4733	+ data["action"] = "loginizer_dismiss_newsletter";
	4734	+ data["nonce"] = "'.wp_create_nonce('loginizer_admin_ajax').'";
	4735	+
	4736	+ var admin_url = "'.admin_url().'"+"admin-ajax.php";
	4737	+ jQuery.post(admin_url, data, function(response){
	4738	+
	4739	+ });
	4740	+
	4741	+ }
	4742	+
	4743	+ function loginizer_email_subscribe(){
	4744	+ var subs_location = "'.$env['url'].'?email="+encodeURIComponent(jQuery("#subscribe_email").val());
	4745	+ window.open(subs_location, "_blank");
	4746	+ }
	4747	+ jQuery(document).on("click", ".my-loginizer-dismiss-notice .notice-dismiss", loginizer_dismiss_newsletter);
	4748	+ </script>';
	4749	+
	4750	+ return true;
	4751	+}
953	4752
954		- return false;
955		-}
956	4753
957	4754	// Sorry to see you going
958	4755	register_uninstall_hook(LOGINIZER_FILE, 'loginizer_deactivation');
959	4756
		@@ -977,17 +4774,7 @@
977	4774	delete_option('loginizer_2fa_msg');
978	4775	delete_option('loginizer_2fa_email_template');
979	4776	delete_option('loginizer_security');
980	4777	delete_option('loginizer_wp_admin');
981		- delete_option('loginizer_csrf_promo_time');
982		- delete_option('loginizer_backuply_promo_time');
983		- delete_option('loginizer_promo_time');
984		- delete_option('loginizer_ins_time');
985		- delete_option('loginizer_2fa_whitelist');
986		- delete_option('loginizer_checksums_last_run');
987		- delete_option('loginizer_checksums_diff');
988		- delete_option('loginizer_ip_method');
989		- delete_option('loginizer_2fa_custom_redirect');
990		- delete_option('external_updates-loginizer-security');
991		- delete_option('loginizer_login_attempt_stats');
992	4778
993		-}
	4779	+}
	4780	+