| @@ -224,8 +224,9 @@ | ||
| 224 | 224 | "/embed", |
| 225 | 225 | "/view-order/", |
| 226 | 226 | "/redirect/", |
| 227 | 227 | "/elementskit-content/", |
| 228 | + "/checkout/", | |
| 228 | 229 | ]; |
| 229 | 230 | |
| 230 | 231 | $exclude_items = apply_filters('berqwp_exclude_slug_match', $exclude_items); |
| 231 | 232 | |
| @@ -237,8 +238,52 @@ | ||
| 237 | 238 | |
| 238 | 239 | return false; |
| 239 | 240 | } |
| 240 | 241 | |
| 242 | + | |
| 243 | +function berqwp_home_url() { | |
| 244 | + return untrailingslashit(apply_filters('berqwp_site_url', home_url())); | |
| 245 | +} | |
| 246 | + | |
| 247 | +function bwp_canonicalize_page_url($url) { | |
| 248 | + $permalink_structure = get_option('permalink_structure'); | |
| 249 | + | |
| 250 | + if (!$permalink_structure) { | |
| 251 | + return $url; | |
| 252 | + } | |
| 253 | + | |
| 254 | + $path = parse_url($url, PHP_URL_PATH) ?? '/'; | |
| 255 | + | |
| 256 | + if ($path === '/') { | |
| 257 | + return $url; | |
| 258 | + } | |
| 259 | + | |
| 260 | + $uses_trailing_slash = substr(rtrim($permalink_structure), -1) === '/'; | |
| 261 | + $has_trailing_slash = substr($path, -1) === '/'; | |
| 262 | + | |
| 263 | + if ($uses_trailing_slash && !$has_trailing_slash) { | |
| 264 | + return trailingslashit($url); | |
| 265 | + } | |
| 266 | + | |
| 267 | + if (!$uses_trailing_slash && $has_trailing_slash) { | |
| 268 | + return untrailingslashit($url); | |
| 269 | + } | |
| 270 | + | |
| 271 | + return $url; | |
| 272 | +} | |
| 273 | + | |
| 274 | +function bwp_sync_permalink_config() { | |
| 275 | + $permalink_structure = get_option('permalink_structure'); | |
| 276 | + $trailing_slash = empty($permalink_structure) ? null : (substr(rtrim($permalink_structure), -1) === '/'); | |
| 277 | + | |
| 278 | + $berqconfigs = berqConfigs::getInstance(); | |
| 279 | + $current = $berqconfigs->get_configs(); | |
| 280 | + | |
| 281 | + if ($current === false || !array_key_exists('permalink_trailing_slash', $current) || $current['permalink_trailing_slash'] !== $trailing_slash) { | |
| 282 | + $berqconfigs->update_configs(['permalink_trailing_slash' => $trailing_slash]); | |
| 283 | + } | |
| 284 | +} | |
| 285 | + | |
| 241 | 286 | function berqwp_get_page_params($page_url, $is_forced = false) |
| 242 | 287 | { |
| 243 | 288 | |
| 244 | 289 | if (empty($page_url)) { |
| @@ -261,8 +306,10 @@ | ||
| 261 | 306 | } elseif ($optimization_mode == 1) { |
| 262 | 307 | $optimization_mode = 'basic'; |
| 263 | 308 | } |
| 264 | 309 | |
| 310 | + $home_url = berqwp_home_url(); | |
| 311 | + | |
| 265 | 312 | // Data to send as POST parameters |
| 266 | 313 | $post_data = array( |
| 267 | 314 | 'site_id' => $berqwp_configs['site_id'], |
| 268 | 315 | 'license_key' => berqwp_get_license_key(), |
| @@ -267,13 +314,14 @@ | ||
| 267 | 314 | 'site_id' => $berqwp_configs['site_id'], |
| 268 | 315 | 'license_key' => berqwp_get_license_key(), |
| 269 | 316 | 'page_url' => $page_url, |
| 270 | 317 | 'page_slug' => $page_slug, |
| 271 | - 'site_url' => home_url(), | |
| 318 | + 'site_url' => $home_url, | |
| 272 | 319 | 'webp_max_width' => (int) get_option('berqwp_webp_max_width'), |
| 273 | 320 | 'webp_quality' => (int) get_option('berqwp_webp_quality'), |
| 274 | 321 | 'fluid_images' => get_option('berqwp_fluid_images'), |
| 275 | 322 | 'enable_critical_css' => get_option('berqwp_enable_critical_css'), |
| 323 | + 'enable_used_css' => get_option('berqwp_enable_used_css'), | |
| 276 | 324 | 'force_include_critical_css'=> get_option('berqwp_force_include_critical_css', []), |
| 277 | 325 | 'exclude_css' => get_option('berqwp_exclude_css', []), |
| 278 | 326 | 'exclude_js' => get_option('berqwp_exclude_js', []), |
| 279 | 327 | 'exclude_third_party_js' => get_option('berqwp_exclude_third_party_js', []), |
| @@ -1300,9 +1348,9 @@ | ||
| 1300 | 1348 | |
| 1301 | 1349 | function bwp_sluguri_into_path($slug_uri) |
| 1302 | 1350 | { |
| 1303 | 1351 | $is_multisite = function_exists('is_multisite') && is_multisite(); |
| 1304 | - $home_path = parse_url(home_url(), PHP_URL_PATH); | |
| 1352 | + $home_path = parse_url(berqwp_home_url(), PHP_URL_PATH); | |
| 1305 | 1353 | |
| 1306 | 1354 | // if (berqwp_is_sub_dir_wp() && !$is_multisite) { |
| 1307 | 1355 | if (!$is_multisite && $home_path !== null) { |
| 1308 | 1356 | // Parse strings to extract paths |
| @@ -1323,9 +1371,9 @@ | ||
| 1323 | 1371 | { |
| 1324 | 1372 | $parsed_url = parse_url($url); |
| 1325 | 1373 | $path = isset($parsed_url['path']) ? $parsed_url['path'] : ''; |
| 1326 | 1374 | $query = isset($parsed_url['query']) ? $parsed_url['query'] : ''; |
| 1327 | - $homeurl = home_url(); | |
| 1375 | + $homeurl = berqwp_home_url(); | |
| 1328 | 1376 | |
| 1329 | 1377 | if (!empty($query)) { |
| 1330 | 1378 | $path = $path . '?' . $query; |
| 1331 | 1379 | } |
| @@ -1449,9 +1497,9 @@ | ||
| 1449 | 1497 | // Set the number of posts per batch to handle |
| 1450 | 1498 | $posts_per_page = 10000; // Adjust this based on server capacity |
| 1451 | 1499 | |
| 1452 | 1500 | // Get current page from query string (for pagination) |
| 1453 | - $paged = isset($_GET['paged']) ? intval($_GET['paged']) : 1; | |
| 1501 | + $paged = isset($_GET['paged']) ? intval($_GET['paged']) : 1; | |
| 1454 | 1502 | |
| 1455 | 1503 | // Build the query arguments with pagination |
| 1456 | 1504 | $args = array( |
| 1457 | 1505 | 'post_type' => $post_types, |
| @@ -1479,8 +1527,9 @@ | ||
| 1479 | 1527 | |
| 1480 | 1528 | $berqconfigs = berqConfigs::getInstance(); |
| 1481 | 1529 | $configs = $berqconfigs->get_configs(); |
| 1482 | 1530 | $post_params['cache_lifespan'] = $configs['cache_lifespan']; |
| 1531 | + $post_params['sandbox'] = get_option('berqwp_enable_sandbox'); | |
| 1483 | 1532 | |
| 1484 | 1533 | if ($query->have_posts()) { |
| 1485 | 1534 | $sitemap_urls = []; |
| 1486 | 1535 | |
| @@ -1638,21 +1687,21 @@ | ||
| 1638 | 1687 | |
| 1639 | 1688 | if (!empty($_GET['tab_id'])) { |
| 1640 | 1689 | if (sanitize_text_field($_GET['tab_id']) == $tab_id) { |
| 1641 | 1690 | // echo ' style="display:block" '; |
| 1642 | - echo ' style="visibility:visible;opacity:1;height:auto;" '; | |
| 1691 | + echo ' style="visibility:visible;opacity:1;height:auto;display:block;" '; | |
| 1643 | 1692 | } else { |
| 1644 | 1693 | // echo ' style="display:none" '; |
| 1645 | - echo ' style="visibility:hidden;opacity:0;height:0;overflow:hidden;" '; | |
| 1694 | + echo ' style="visibility:hidden;opacity:0;height:0;overflow:hidden;display:none;" '; | |
| 1646 | 1695 | } |
| 1647 | 1696 | } else { |
| 1648 | 1697 | |
| 1649 | 1698 | if ($tab_id == $default_tab) { |
| 1650 | 1699 | // echo ' style="display:block" '; |
| 1651 | - echo ' style="visibility:visible;opacity:1;height:auto;" '; | |
| 1700 | + echo ' style="visibility:visible;opacity:1;height:auto;display:block;" '; | |
| 1652 | 1701 | } else { |
| 1653 | 1702 | // echo ' style="display:none" '; |
| 1654 | - echo ' style="visibility:hidden;opacity:0;height:0;overflow:hidden;" '; | |
| 1703 | + echo ' style="visibility:hidden;opacity:0;height:0;overflow:hidden;display:none;" '; | |
| 1655 | 1704 | } |
| 1656 | 1705 | } |
| 1657 | 1706 | } |
| 1658 | 1707 | |
| @@ -1879,8 +1928,16 @@ | ||
| 1879 | 1928 | if (!file_exists($cache_dir)) { |
| 1880 | 1929 | wp_mkdir_p($cache_dir); |
| 1881 | 1930 | } |
| 1882 | 1931 | |
| 1932 | + if (!function_exists('got_mod_rewrite')) { | |
| 1933 | + require_once ABSPATH . 'wp-admin/includes/misc.php'; | |
| 1934 | + } | |
| 1935 | + | |
| 1936 | + if (!got_mod_rewrite()) { | |
| 1937 | + return; | |
| 1938 | + } | |
| 1939 | + | |
| 1883 | 1940 | $rules = <<<HTACCESS |
| 1884 | 1941 | Order allow,deny |
| 1885 | 1942 | Deny from all |
| 1886 | 1943 | |
| @@ -1887,13 +1944,50 @@ | ||
| 1887 | 1944 | <FilesMatch "index\.html\.gz$"> |
| 1888 | 1945 | Order allow,deny |
| 1889 | 1946 | Allow from all |
| 1890 | 1947 | </FilesMatch> |
| 1948 | + | |
| 1949 | +# Block PHP execution and dot-files to prevent webshell deployment | |
| 1950 | +<FilesMatch "\.php\d*$|\.phtml$|\.phar$"> | |
| 1951 | + Order allow,deny | |
| 1952 | + Deny from all | |
| 1953 | +</FilesMatch> | |
| 1954 | +<FilesMatch "^\."> | |
| 1955 | + Order allow,deny | |
| 1956 | + Deny from all | |
| 1957 | +</FilesMatch> | |
| 1891 | 1958 | HTACCESS; |
| 1892 | 1959 | |
| 1893 | 1960 | file_put_contents($cache_dir . '.htaccess', $rules); |
| 1961 | + | |
| 1962 | + // Suppress directory listing | |
| 1963 | + $index_stub = $cache_dir . 'index.php'; | |
| 1964 | + if (!file_exists($index_stub)) { | |
| 1965 | + file_put_contents($index_stub, '<?php // Silence is golden'); | |
| 1966 | + } | |
| 1967 | + | |
| 1894 | 1968 | } |
| 1895 | 1969 | |
| 1970 | +function bwp_delete_php_files_in_cache() | |
| 1971 | +{ | |
| 1972 | + $cache_dir = optifer_cache; | |
| 1973 | + if (!is_dir($cache_dir)) { | |
| 1974 | + return; | |
| 1975 | + } | |
| 1976 | + | |
| 1977 | + $php_extensions = ['php', 'php3', 'php4', 'php5', 'php7', 'php8', 'phtml', 'phar']; | |
| 1978 | + | |
| 1979 | + $iterator = new RecursiveIteratorIterator( | |
| 1980 | + new RecursiveDirectoryIterator($cache_dir, RecursiveDirectoryIterator::SKIP_DOTS) | |
| 1981 | + ); | |
| 1982 | + | |
| 1983 | + foreach ($iterator as $file) { | |
| 1984 | + if ($file->isFile() && in_array(strtolower($file->getExtension()), $php_extensions, true)) { | |
| 1985 | + @unlink($file->getRealPath()); | |
| 1986 | + } | |
| 1987 | + } | |
| 1988 | +} | |
| 1989 | + | |
| 1896 | 1990 | function bwp_write_htaccess_rules($ignore_sandbox = false) |
| 1897 | 1991 | { |
| 1898 | 1992 | if (!got_mod_rewrite() || bwp_is_openlitespeed_server()) { |
| 1899 | 1993 | return; |
| @@ -1903,14 +1997,27 @@ | ||
| 1903 | 1997 | return; |
| 1904 | 1998 | } |
| 1905 | 1999 | |
| 1906 | 2000 | $htaccess = get_home_path() . '.htaccess'; |
| 1907 | - $rules = [ | |
| 2001 | + $cache_tag_host = parse_url(home_url(), PHP_URL_HOST); | |
| 2002 | + | |
| 2003 | + // Match the cache-serving RewriteCond to the site's actual permalink convention, | |
| 2004 | + // so caching works whether the site uses trailing slashes or not. | |
| 2005 | + $permalink_structure = get_option('permalink_structure'); | |
| 2006 | + $uses_trailing_slash = empty($permalink_structure) || substr(rtrim($permalink_structure), -1) === '/'; | |
| 2007 | + | |
| 2008 | + $slash_conds = $uses_trailing_slash | |
| 2009 | + ? [' RewriteCond %{REQUEST_URI} /$'] | |
| 2010 | + : [' RewriteCond %{REQUEST_URI} ^/$ [OR]', ' RewriteCond %{REQUEST_URI} !/$']; | |
| 2011 | + | |
| 2012 | + $rules = array_merge([ | |
| 1908 | 2013 | '<IfModule mod_rewrite.c>', |
| 1909 | 2014 | ' RewriteEngine On', |
| 1910 | 2015 | ' RewriteCond %{REQUEST_METHOD} !POST', |
| 1911 | 2016 | ' RewriteCond %{QUERY_STRING} ^$', |
| 1912 | 2017 | ' RewriteCond %{HTTP_COOKIE} !(wp\-postpass|wordpress_logged_in|comment_author|woocommerce_cart_hash|edd_items_in_cart) [NC]', |
| 2018 | + ' RewriteCond %{HTTP_USER_AGENT} !(Googlebot|Google-InspectionTool|Bingbot|Slurp|DuckDuckBot|Baiduspider|YandexBot|Sogou|Exabot|facebookexternalhit|Twitterbot|LinkedInBot|WhatsApp|TelegramBot|Applebot|AhrefsBot|SemrushBot|MJ12bot|DotBot|PetalBot|BLEXBot|archive\.org_bot|UptimeRobot|Pingdom|ChatGPT-User|GPTBot|ClaudeBot|Bytespider) [NC]', | |
| 2019 | + ], $slash_conds, [ | |
| 1913 | 2020 | ' RewriteCond %{DOCUMENT_ROOT}/wp-content/cache/berqwp/html/%{HTTP_HOST}%{REQUEST_URI}/index.html.gz -f', |
| 1914 | 2021 | ' RewriteRule .* /wp-content/cache/berqwp/html/%{HTTP_HOST}%{REQUEST_URI}/index.html.gz [L]', |
| 1915 | 2022 | '</IfModule>', |
| 1916 | 2023 | '<IfModule mod_mime.c>', |
| @@ -1916,16 +2023,20 @@ | ||
| 1916 | 2023 | '<IfModule mod_mime.c>', |
| 1917 | 2024 | ' <FilesMatch "index\.html\.gz$">', |
| 1918 | 2025 | ' ForceType text/html', |
| 1919 | 2026 | ' AddEncoding gzip .gz', |
| 2027 | + ' AddDefaultCharset utf-8', | |
| 1920 | 2028 | ' </FilesMatch>', |
| 1921 | 2029 | '</IfModule>', |
| 1922 | 2030 | '<IfModule mod_headers.c>', |
| 1923 | 2031 | ' <FilesMatch "index\.html\.gz$">', |
| 2032 | + ' Header set X-BerqWP-Cache "HIT"', | |
| 1924 | 2033 | ' Header set X-Served "server"', |
| 1925 | 2034 | ' Header set Content-Encoding "gzip"', |
| 1926 | 2035 | ' Header set Vary "Accept-Encoding, Cookie"', |
| 1927 | - ' Header set Cache-Control "public, max-age=0, s-maxage=3600, must-revalidate"', | |
| 2036 | + ' Header set CDN-Cache-Control "max-age=2592000"', | |
| 2037 | + ' Header set Cache-Control "public, max-age=600, s-maxage=2592000, stale-while-revalidate=86400"', | |
| 2038 | + ' Header set Cache-Tag "' . $cache_tag_host . '"', | |
| 1928 | 2039 | ' Header set X-Content-Type-Options "nosniff"', |
| 1929 | 2040 | ' </FilesMatch>', |
| 1930 | 2041 | '</IfModule>', |
| 1931 | 2042 | '<IfModule mod_expires.c>', |
| @@ -1958,9 +2069,9 @@ | ||
| 1958 | 2069 | ' Header set Cache-Control "public, max-age=31536000, immutable"', |
| 1959 | 2070 | ' Header set Access-Control-Allow-Origin "*"', |
| 1960 | 2071 | ' </FilesMatch>', |
| 1961 | 2072 | '</IfModule>', |
| 1962 | - ]; | |
| 2073 | + ]); | |
| 1963 | 2074 | |
| 1964 | 2075 | // Must appear before the WordPress block so Apache processes it first |
| 1965 | 2076 | $marker = 'BerqWP Cache'; |
| 1966 | 2077 | $start = "# BEGIN $marker"; |
| @@ -2136,8 +2247,40 @@ | ||
| 2136 | 2247 | // Fallback: no <head> tag found, return unchanged |
| 2137 | 2248 | return $buffer; |
| 2138 | 2249 | } |
| 2139 | 2250 | |
| 2251 | +function berqwp_earlyHeadHtml($buffer, $htmlToInsert) | |
| 2252 | +{ | |
| 2253 | + // Locate <head> opening tag | |
| 2254 | + if (!preg_match('/<head(\s[^>]*)?>/i', $buffer, $headMatch, PREG_OFFSET_CAPTURE)) { | |
| 2255 | + return berqwp_prependHtmlToHead($buffer, $htmlToInsert); | |
| 2256 | + } | |
| 2257 | + | |
| 2258 | + $headStart = $headMatch[0][1] + strlen($headMatch[0][0]); | |
| 2259 | + | |
| 2260 | + // Bound the search to content inside <head>...</head> | |
| 2261 | + $headEndPos = stripos($buffer, '</head>', $headStart); | |
| 2262 | + if ($headEndPos === false) { | |
| 2263 | + return berqwp_prependHtmlToHead($buffer, $htmlToInsert); | |
| 2264 | + } | |
| 2265 | + | |
| 2266 | + $headContent = substr($buffer, $headStart, $headEndPos - $headStart); | |
| 2267 | + | |
| 2268 | + // Find first <script, <link, or <style in the head | |
| 2269 | + // if (preg_match('/<(script|link|style)[\s>\/]/i', $headContent, $tagMatch, PREG_OFFSET_CAPTURE)) { | |
| 2270 | + | |
| 2271 | + $regex = "/<(script|link[^>]+rel=['\"]+(modulepreload|stylesheet|preload)['\"]|style)[\s>\/]/i"; | |
| 2272 | + | |
| 2273 | + if (preg_match($regex, $headContent, $tagMatch, PREG_OFFSET_CAPTURE)) { | |
| 2274 | + $insertPos = $headStart + $tagMatch[0][1]; | |
| 2275 | + return substr_replace($buffer, $htmlToInsert . PHP_EOL, $insertPos, 0); | |
| 2276 | + } | |
| 2277 | + | |
| 2278 | + // Fallback: no matching tag in head | |
| 2279 | + return berqwp_prependHtmlToHead($buffer, $htmlToInsert); | |
| 2280 | +} | |
| 2281 | + | |
| 2282 | + | |
| 2140 | 2283 | function berqwp_setup_dropin() |
| 2141 | 2284 | { |
| 2142 | 2285 | if (defined('BERQWP_ADVANCED_CACHE_PATH')) { |
| 2143 | 2286 | $adv_cache_path = BERQWP_ADVANCED_CACHE_PATH; |
| @@ -2250,9 +2393,8 @@ | ||
| 2250 | 2393 | |
| 2251 | 2394 | function berqwp_validate_url_array($urls) |
| 2252 | 2395 | { |
| 2253 | 2396 | $home_host = parse_url(home_url(), PHP_URL_HOST); |
| 2254 | - $home_scheme = parse_url(home_url(), PHP_URL_SCHEME); | |
| 2255 | 2397 | |
| 2256 | 2398 | $urls = array_filter($urls, function ($url) use ($home_host) { |
| 2257 | 2399 | $url_host = parse_url($url, PHP_URL_HOST); |
| 2258 | 2400 | |
| @@ -2263,35 +2405,9 @@ | ||
| 2263 | 2405 | |
| 2264 | 2406 | return $url_host === $home_host; |
| 2265 | 2407 | }); |
| 2266 | 2408 | |
| 2267 | - $urls = array_map(function ($url) use ($home_scheme) { | |
| 2268 | - // Skip invalid URLs | |
| 2269 | - if (!is_string($url) || $url === '') { | |
| 2270 | - return $url; | |
| 2271 | - } | |
| 2272 | - | |
| 2273 | - $parts = parse_url($url); | |
| 2274 | - | |
| 2275 | - // Relative URL → leave as-is | |
| 2276 | - if (empty($parts['scheme'])) { | |
| 2277 | - return $url; | |
| 2278 | - } | |
| 2279 | - | |
| 2280 | - // Rebuild URL with home scheme | |
| 2281 | - $parts['scheme'] = $home_scheme; | |
| 2282 | - | |
| 2283 | - $new_url = $parts['scheme'] . '://'; | |
| 2284 | - $new_url .= $parts['host'] ?? ''; | |
| 2285 | - $new_url .= isset($parts['port']) ? ':' . $parts['port'] : ''; | |
| 2286 | - $new_url .= $parts['path'] ?? ''; | |
| 2287 | - $new_url .= isset($parts['query']) ? '?' . $parts['query'] : ''; | |
| 2288 | - $new_url .= isset($parts['fragment']) ? '#' . $parts['fragment'] : ''; | |
| 2289 | - | |
| 2290 | - return $new_url; | |
| 2291 | - }, $urls); | |
| 2292 | - | |
| 2293 | - return $urls; | |
| 2409 | + return array_values($urls); | |
| 2294 | 2410 | } |
| 2295 | 2411 | |
| 2296 | 2412 | function berqwp_render_toggle($name, $checked) { |
| 2297 | 2413 | ?> |
| @@ -2336,9 +2452,9 @@ | ||
| 2336 | 2452 | } |
| 2337 | 2453 | |
| 2338 | 2454 | function bwp_remove_recently_optimized_entry($page_url) |
| 2339 | 2455 | { |
| 2340 | - if (empty($page_url)) return; | |
| 2456 | + if (empty($page_url)) return; | |
| 2341 | 2457 | |
| 2342 | 2458 | $log = json_decode(get_option('berqwp_recently_optimized', '[]'), true); |
| 2343 | 2459 | if (!is_array($log)) return; |
| 2344 | 2460 | |
| @@ -2351,5 +2467,12 @@ | ||
| 2351 | 2467 | $configs = $berqconfigs->get_configs(); |
| 2352 | 2468 | $license_key = berqwp_get_license_key(); |
| 2353 | 2469 | |
| 2354 | 2470 | return !empty($configs['site_id']) && !empty($configs['secret']) && !empty($configs['optimization_method']) && $configs['optimization_method'] == 'cloud' && !empty($license_key); |
| 2471 | +} | |
| 2472 | + | |
| 2473 | +function berqwp_generate_site_id() { | |
| 2474 | + $blog_id = get_current_blog_id(); | |
| 2475 | + $network_id = function_exists('get_current_network_id') ? get_current_network_id() : 1; | |
| 2476 | + $siteurl = get_option('siteurl'); | |
| 2477 | + return md5("berqwp|$network_id|$blog_id|$siteurl"); | |
| 2355 | 2478 | } |
