PluginProbe
Vigilant – 100% Free Security Suite: Firewall, 2FA, Login, Headers, Scanner… / 2.10.3
Vigilant – 100% Free Security Suite: Firewall, 2FA, Login, Headers, Scanner… v2.10.3
3.0.0 2.11.12 2.11.11 2.11.10 2.11.9 2.11.7 2.11.8 2.11.6 2.11.5 2.11.4 2.11.3 2.11.1 2.11.2 2.11.0 2.10.5 2.10.4 2.10.3 2.10.2 2.10.1 2.10.0 2.9.9 2.9.8 2.9.6 2.9.7 2.9.5 All 88 releases
vigilante / assets / js / admin.js

admin.js in Vigilant – 100% Free Security Suite: Firewall, 2FA, Login, Headers, Scanner… 2.10.3, at assets/js/admin.js

4,328 lines 190.9 KB
No matching file
Up and down to move Enter to open Esc to close
Raw Download Zip
1 /**
2 * Vigilante Admin JavaScript
3 *
4 * @package Vigilante
5 */
6
7 (function($) {
8 'use strict';
9
10 var Vigilante_Admin = {
11
12 /**
13 * Initialize
14 */
15 init: function() {
16 this.bindEvents();
17 this.initModuleToggles();
18 this.initFileIntegrityPagination();
19
20 // Activity log pagination state
21 this.logPage = 1;
22 this.logPerPage = 20;
23 this.logSearchTimer = null;
24 },
25
26 /**
27 * Bind events
28 */
29 bindEvents: function() {
30 // Save settings forms
31 $(document).on('submit', '.vigilante-settings-form', this.handleFormSubmit.bind(this));
32
33 // Module toggles in dashboard
34 $(document).on('change', '.vigilante-module-item input[type="checkbox"]', this.handleModuleToggle.bind(this));
35
36 // Apply preset
37 $(document).on('click', '.vigilante-preset-btn', this.handleApplyPreset.bind(this));
38
39 // Reset section to defaults
40 $(document).on('click', '.vigilante-reset-section-btn', this.handleResetSection.bind(this));
41
42 // Clear lockouts
43 $(document).on('click', '.vigilante-clear-lockout', this.handleClearLockout.bind(this));
44 $(document).on('click', '.vigilante-clear-all-lockouts', this.handleClearAllLockouts.bind(this));
45
46 // Unblock firewall rate-limited IPs
47 $(document).on('click', '.vigilante-unblock-firewall-ip', this.handleUnblockFirewallIp.bind(this));
48
49 // Clear logs
50 $(document).on('click', '.vigilante-clear-logs', this.handleClearLogs.bind(this));
51
52 // Run scan
53 $(document).on('click', '.vigilante-run-scan', this.handleRunScan.bind(this));
54 $(document).on('click', '.vigilante-ignore-file', this.handleIgnoreFile.bind(this));
55 $(document).on('click', '.vigilante-unignore-file', this.handleUnignoreFile.bind(this));
56 $(document).on('click', '.vigilante-clear-ignored', this.handleClearIgnored.bind(this));
57
58 // Closed plugins ignore controls (separate slug-based list, not file paths).
59 $(document).on('click', '.vigilante-ignore-closed-plugin', this.handleIgnoreClosedPlugin.bind(this));
60 $(document).on('click', '.vigilante-unignore-closed-plugin', this.handleUnignoreClosedPlugin.bind(this));
61 $(document).on('click', '.vigilante-clear-ignored-closed-plugins', this.handleClearIgnoredClosedPlugins.bind(this));
62
63 // Bulk selection inside file integrity tables
64 $(document).on('change', '.vigilante-fi-cb-all', this.handleFiSelectAll.bind(this));
65 $(document).on('change', '.vigilante-fi-cb', this.handleFiCheckboxChange.bind(this));
66 $(document).on('click', '.vigilante-bulk-ignore', this.handleBulkIgnore.bind(this));
67 $(document).on('click', '.vigilante-bulk-unignore', this.handleBulkUnignore.bind(this));
68
69 // Clear scan results
70 $(document).on('click', '.vigilante-clear-scan', this.handleClearScan.bind(this));
71
72 // Critical config file actions
73 $(document).on('click', '.vigilante-approve-critical-file', this.handleApproveCriticalFile.bind(this));
74 $(document).on('click', '.vigilante-toggle-critical-content', this.handleToggleCriticalContent.bind(this));
75
76 // Export/Import settings
77 $(document).on('click', '.vigilante-export-settings', this.handleExportSettings.bind(this));
78 $(document).on('click', '.vigilante-import-settings', this.handleImportSettings.bind(this));
79 $(document).on('change', '#vigilante-import-file', this.handleImportFile.bind(this));
80
81 // Reset settings
82 $(document).on('click', '.vigilante-reset-settings', this.handleResetSettings.bind(this));
83
84 // Test headers
85 $(document).on('click', '.vigilante-test-headers', this.handleTestHeaders.bind(this));
86
87 // Login URL notification
88 $(document).on('click', '#vigilante_notify_login_url', this.handleNotifyLoginUrl.bind(this));
89 $(document).on('input', '#vigilante_custom_login_url', this.handleLoginUrlToggle.bind(this));
90
91 // Activity log filters
92 $(document).on('change', '#vigilante-log-type-filter, #vigilante-log-severity-filter, #vigilante-log-method-filter', this.handleLogFilter.bind(this));
93 $(document).on('click', '#vigilante-log-refresh', this.handleLogFilter.bind(this));
94
95 // Activity log search (debounced, min 3 chars)
96 $(document).on('input', '#vigilante-log-search', this.handleLogSearch.bind(this));
97
98 // Activity log pagination
99 $(document).on('click', '#vigilante-log-pagination .vigilante-page-first', function() { Vigilante_Admin.goToLogPage('first'); });
100 $(document).on('click', '#vigilante-log-pagination .vigilante-page-prev', function() { Vigilante_Admin.goToLogPage('prev'); });
101 $(document).on('click', '#vigilante-log-pagination .vigilante-page-next', function() { Vigilante_Admin.goToLogPage('next'); });
102 $(document).on('click', '#vigilante-log-pagination .vigilante-page-last', function() { Vigilante_Admin.goToLogPage('last'); });
103
104 // File integrity client-side pagination
105 $(document).on('click', '.vigilante-fi-pagination .vigilante-page-first', function() { Vigilante_Admin.goToFilePage($(this).closest('.vigilante-paginated-section'), 'first'); });
106 $(document).on('click', '.vigilante-fi-pagination .vigilante-page-prev', function() { Vigilante_Admin.goToFilePage($(this).closest('.vigilante-paginated-section'), 'prev'); });
107 $(document).on('click', '.vigilante-fi-pagination .vigilante-page-next', function() { Vigilante_Admin.goToFilePage($(this).closest('.vigilante-paginated-section'), 'next'); });
108 $(document).on('click', '.vigilante-fi-pagination .vigilante-page-last', function() { Vigilante_Admin.goToFilePage($(this).closest('.vigilante-paginated-section'), 'last'); });
109
110 // Export logs
111 $(document).on('click', '.vigilante-export-logs', this.handleExportLogs.bind(this));
112
113 // Create backup
114 $(document).on('click', '.vigilante-create-backup', this.handleCreateBackup.bind(this));
115
116 // View log details modal
117 $(document).on('click', '.vigilante-view-log-details', this.handleViewLogDetails.bind(this));
118 $(document).on('click', '.vigilante-modal-close, .vigilante-modal', this.handleCloseModal.bind(this));
119 $(document).on('click', '.vigilante-add-to-list', this.handleAddToFirewallList.bind(this));
120 $(document).on('click', '.vigilante-modal-content', function(e) {
121 e.stopPropagation();
122 });
123
124 // Under Attack mode
125 $(document).on('click', '.vigilante-ua-activate', this.handleUnderAttackActivate.bind(this));
126 $(document).on('click', '.vigilante-ua-deactivate', this.handleUnderAttackDeactivate.bind(this));
127
128 // Database backup
129 $(document).on('click', '.vigilante-db-backup-toggle', this.handleDbBackupToggle.bind(this));
130 $(document).on('click', '.vigilante-db-backup-download', this.handleDbBackupDownload.bind(this));
131 $(document).on('change', '#vigilante-db-select-all', this.handleDbSelectAll.bind(this));
132 $(document).on('change', '.vigilante-db-table-check', this.handleDbTableCheck.bind(this));
133
134 // Database prefix
135 $(document).on('click', '.vigilante-db-regenerate-prefix', this.handleDbRegeneratePrefix.bind(this));
136 $(document).on('change', '#vigilante-prefix-backup-confirm', this.handleDbPrefixConfirmToggle.bind(this));
137 $(document).on('click', '.vigilante-db-change-prefix', this.handleDbChangePrefix.bind(this));
138
139 // Settings search
140 $(document).on('input', '#vigilante-settings-search', this.handleSettingsSearch.bind(this));
141 $(document).on('focus', '#vigilante-settings-search', this.handleSettingsSearch.bind(this));
142 $(document).on('keydown', '#vigilante-settings-search', this.handleSettingsSearchKey.bind(this));
143 $(document).on('mouseenter', '.vigilante-search-item', this.handleSettingsSearchHover.bind(this));
144 $(document).on('click', function(e) {
145 if (!$(e.target).closest('.vigilante-search-wrapper').length) {
146 $('#vigilante-settings-search-results').attr('hidden', true);
147 }
148 });
149 // Global "/" shortcut to focus search
150 $(document).on('keydown', function(e) {
151 if (e.key !== '/') return;
152 var $t = $(e.target);
153 if ($t.is('input, textarea, select') || $t.is('[contenteditable="true"]')) return;
154 var $search = $('#vigilante-settings-search');
155 if (!$search.length) return;
156 e.preventDefault();
157 $search.focus().select();
158 });
159
160 // Start Under Attack countdown if active
161 this.initUnderAttackCountdown();
162 },
163
164 /**
165 * Initialize module toggles
166 */
167 initModuleToggles: function() {
168 $(document).on('change', '.vigilante-module-item input[type="checkbox"]', function() {
169 var $item = $(this).closest('.vigilante-module-item');
170 var module = $(this).data('module');
171 var enabled = $(this).is(':checked');
172
173 $item.toggleClass('enabled', enabled).toggleClass('disabled', !enabled);
174
175 // Save module state
176 Vigilante_Admin.saveModuleState(module, enabled);
177 });
178 },
179
180 /**
181 * Save module state
182 */
183 saveModuleState: function(module, enabled) {
184 var $item = $('.vigilante-module-item input[data-module="' + module + '"]').closest('.vigilante-module-item');
185
186 // Show saving state
187 $item.addClass('vigilante-saving');
188
189 $.ajax({
190 url: vigilanteAdmin.ajaxUrl,
191 type: 'POST',
192 data: {
193 action: 'vigilante_save_settings',
194 nonce: vigilanteAdmin.nonce,
195 section: 'modules',
196 data: 'modules[' + module + ']=' + (enabled ? '1' : '0')
197 },
198 success: function(response) {
199 if (response.success) {
200 $item.removeClass('vigilante-saving').addClass('vigilante-saved');
201 // Show success then reload to update recommendations and all UI
202 Vigilante_Admin.showNotice('success', vigilanteAdmin.strings.saved);
203 setTimeout(function() {
204 location.reload();
205 }, 800);
206 } else {
207 $item.removeClass('vigilante-saving');
208 Vigilante_Admin.showNotice('error', response.data || vigilanteAdmin.strings.error);
209 }
210 },
211 error: function() {
212 $item.removeClass('vigilante-saving');
213 Vigilante_Admin.showNotice('error', vigilanteAdmin.strings.error);
214 }
215 });
216 },
217
218 /**
219 * Update security score after module toggle
220 */
221 updateSecurityScore: function() {
222 var total = $('.vigilante-module-item').length;
223 var enabled = $('.vigilante-module-item.enabled').length;
224 var score = total > 0 ? Math.round((enabled / total) * 100) : 0;
225
226 // Grade thresholds: A (90+), B (70-89), C (50-69), D (30-49), E (0-29)
227 var grade;
228 if (score >= 90) {
229 grade = 'A';
230 } else if (score >= 70) {
231 grade = 'B';
232 } else if (score >= 50) {
233 grade = 'C';
234 } else if (score >= 30) {
235 grade = 'D';
236 } else {
237 grade = 'E';
238 }
239
240 // Update score display
241 $('.vigilante-score-text').text(score + '%');
242 $('.vigilante-grade').text(grade);
243 $('.vigilante-score-circle').removeClass('vigilante-grade-a vigilante-grade-b vigilante-grade-c vigilante-grade-d vigilante-grade-e')
244 .addClass('vigilante-grade-' + grade.toLowerCase());
245
246 // Update modules count text - use fixed string to prevent text accumulation
247 var $countText = $('.vigilante-security-score p');
248 if ($countText.length) {
249 var modulesText = (vigilanteAdmin.strings.modulesEnabled || '%1$d / %2$d modules enabled').replace('%1$d', enabled).replace('%2$d', total);
250 $countText.text(modulesText);
251 }
252 },
253
254 /**
255 * Update configuration status badge
256 */
257 updateConfigBadge: function(preset) {
258 var $badge = $('.vigilante-config-status .vigilante-preset-badge');
259 if ($badge.length) {
260 $badge.removeClass('vigilante-preset-standard vigilante-preset-maximum vigilante-preset-custom vigilante-preset-under-attack');
261
262 if (vigilanteAdmin.underAttack && vigilanteAdmin.underAttack.active) {
263 $badge.addClass('vigilante-preset-under-attack').text(vigilanteAdmin.strings.underAttackLabel || 'Under Attack');
264 } else if (preset === 'standard') {
265 $badge.addClass('vigilante-preset-standard').text(vigilanteAdmin.strings.standardLabel || 'Standard');
266 } else if (preset === 'maximum') {
267 $badge.addClass('vigilante-preset-maximum').text(vigilanteAdmin.strings.maximumLabel || 'Maximum Security');
268 } else {
269 $badge.addClass('vigilante-preset-custom').text(vigilanteAdmin.strings.customConfig || 'Custom Configuration');
270 }
271 }
272 },
273
274 /**
275 * Handle form submit
276 */
277 handleFormSubmit: function(e) {
278 e.preventDefault();
279
280 var $form = $(e.currentTarget);
281 var $btn = $form.find('.vigilante-save-btn');
282 var section = $form.data('section');
283
284 $btn.prop('disabled', true).text(vigilanteAdmin.strings.saving);
285 $form.addClass('vigilante-loading');
286
287 // Build form data including unchecked checkboxes
288 var formData = Vigilante_Admin.serializeFormWithCheckboxes($form);
289
290 $.ajax({
291 url: vigilanteAdmin.ajaxUrl,
292 type: 'POST',
293 data: {
294 action: 'vigilante_save_settings',
295 nonce: vigilanteAdmin.nonce,
296 section: section,
297 data: formData
298 },
299 success: function(response) {
300 if (response.success) {
301 var msg = response.data && response.data.message ? response.data.message : (response.data || vigilanteAdmin.strings.saved);
302 Vigilante_Admin.showNotice('success', msg);
303 } else {
304 Vigilante_Admin.showNotice('error', response.data || vigilanteAdmin.strings.error);
305 }
306 },
307 error: function(xhr, status, error) {
308 Vigilante_Admin.showNotice('error', vigilanteAdmin.strings.error);
309 },
310 complete: function() {
311 $btn.prop('disabled', false).text($btn.data('original-text') || vigilanteAdmin.strings.saved);
312 $form.removeClass('vigilante-loading');
313
314 // Reset button text after delay
315 setTimeout(function() {
316 $btn.text($btn.data('original-text') || vigilanteAdmin.strings.saveSettings || 'Save Settings');
317 }, 2000);
318 }
319 });
320 },
321
322 /**
323 * Handle module toggle in dashboard
324 */
325 handleModuleToggle: function(e) {
326 var $checkbox = $(e.currentTarget);
327 var module = $checkbox.data('module');
328 var enabled = $checkbox.is(':checked');
329 var $item = $checkbox.closest('.vigilante-module-item');
330
331 // Visual feedback
332 $item.addClass('vigilante-loading');
333
334 // Build data for modules section
335 var formData = 'modules[' + module + ']=' + (enabled ? '1' : '0');
336
337 $.ajax({
338 url: vigilanteAdmin.ajaxUrl,
339 type: 'POST',
340 data: {
341 action: 'vigilante_save_settings',
342 nonce: vigilanteAdmin.nonce,
343 section: 'modules',
344 data: formData
345 },
346 success: function(response) {
347 if (response.success) {
348 // Update visual state
349 if (enabled) {
350 $item.removeClass('disabled').addClass('enabled');
351 } else {
352 $item.removeClass('enabled').addClass('disabled');
353 }
354 Vigilante_Admin.updateSecurityScore();
355 Vigilante_Admin.showNotice('success', vigilanteAdmin.strings.saved);
356
357 // Update config badge to Custom (since settings were manually changed)
358 Vigilante_Admin.updateConfigBadge('custom');
359
360 // Clear active preset indicator
361 $('.vigilante-preset-card').removeClass('vigilante-preset-active');
362 $('.vigilante-active-indicator').remove();
363 } else {
364 // Revert checkbox on error
365 $checkbox.prop('checked', !enabled);
366 Vigilante_Admin.showNotice('error', response.data || vigilanteAdmin.strings.error);
367 }
368 },
369 error: function() {
370 // Revert checkbox on error
371 $checkbox.prop('checked', !enabled);
372 Vigilante_Admin.showNotice('error', vigilanteAdmin.strings.error);
373 },
374 complete: function() {
375 $item.removeClass('vigilante-loading');
376 }
377 });
378 },
379
380 /**
381 * Serialize form including unchecked checkboxes
382 */
383 serializeFormWithCheckboxes: function($form) {
384 var data = $form.serializeArray();
385 var checkboxNames = [];
386
387 // Find all checkboxes and add unchecked ones with value 0
388 $form.find('input[type="checkbox"]').each(function() {
389 var name = $(this).attr('name');
390 if (name && checkboxNames.indexOf(name) === -1) {
391 checkboxNames.push(name);
392 if (!$(this).is(':checked')) {
393 data.push({ name: name, value: '0' });
394 }
395 }
396 });
397
398 // Convert to query string
399 return $.param(data);
400 },
401
402 /**
403 * Handle apply preset
404 */
405 handleApplyPreset: function(e) {
406 e.preventDefault();
407
408 var preset = $(e.currentTarget).data('preset');
409
410 if (!confirm(vigilanteAdmin.strings.confirm + ' ' + (vigilanteAdmin.strings.confirmApplyPreset || 'Apply the "%s" preset?').replace('%s', preset))) {
411 return;
412 }
413
414 $.ajax({
415 url: vigilanteAdmin.ajaxUrl,
416 type: 'POST',
417 data: {
418 action: 'vigilante_apply_preset',
419 nonce: vigilanteAdmin.nonce,
420 preset: preset
421 },
422 success: function(response) {
423 if (response.success) {
424 Vigilante_Admin.showNotice('success', response.data);
425 setTimeout(function() {
426 location.reload();
427 }, 1000);
428 } else {
429 Vigilante_Admin.showNotice('error', response.data);
430 }
431 },
432 error: function() {
433 Vigilante_Admin.showNotice('error', vigilanteAdmin.strings.error);
434 }
435 });
436 },
437
438 /**
439 * Handle Under Attack mode activation
440 */
441 handleUnderAttackActivate: function(e) {
442 e.preventDefault();
443
444 if (!confirm(vigilanteAdmin.strings.underAttackConfirmActivate)) {
445 return;
446 }
447
448 var $btn = $(e.currentTarget);
449 $btn.prop('disabled', true).text(vigilanteAdmin.strings.underAttackActivating);
450
451 $.ajax({
452 url: vigilanteAdmin.ajaxUrl,
453 type: 'POST',
454 data: {
455 action: 'vigilante_activate_under_attack',
456 nonce: vigilanteAdmin.nonce
457 },
458 success: function(response) {
459 if (response.success) {
460 Vigilante_Admin.showNotice('success', response.data.message);
461 setTimeout(function() {
462 location.reload();
463 }, 1000);
464 } else {
465 Vigilante_Admin.showNotice('error', response.data);
466 $btn.prop('disabled', false).text(vigilanteAdmin.strings.underAttackActivate || 'Activate for 4 hours');
467 }
468 },
469 error: function() {
470 Vigilante_Admin.showNotice('error', vigilanteAdmin.strings.error);
471 $btn.prop('disabled', false).text(vigilanteAdmin.strings.underAttackActivate || 'Activate for 4 hours');
472 }
473 });
474 },
475
476 /**
477 * Handle Under Attack mode deactivation
478 */
479 handleUnderAttackDeactivate: function(e) {
480 e.preventDefault();
481
482 if (!confirm(vigilanteAdmin.strings.underAttackConfirmDeactivate)) {
483 return;
484 }
485
486 var $btn = $(e.currentTarget);
487 $btn.prop('disabled', true).text(vigilanteAdmin.strings.underAttackDeactivating);
488
489 $.ajax({
490 url: vigilanteAdmin.ajaxUrl,
491 type: 'POST',
492 data: {
493 action: 'vigilante_deactivate_under_attack',
494 nonce: vigilanteAdmin.nonce
495 },
496 success: function(response) {
497 if (response.success) {
498 Vigilante_Admin.showNotice('success', response.data);
499 setTimeout(function() {
500 location.reload();
501 }, 1000);
502 } else {
503 Vigilante_Admin.showNotice('error', response.data);
504 $btn.prop('disabled', false).text(vigilanteAdmin.strings.deactivate || 'Deactivate');
505 }
506 },
507 error: function() {
508 Vigilante_Admin.showNotice('error', vigilanteAdmin.strings.error);
509 $btn.prop('disabled', false).text(vigilanteAdmin.strings.deactivate || 'Deactivate');
510 }
511 });
512 },
513
514 /**
515 * Initialize Under Attack countdown timer
516 */
517 initUnderAttackCountdown: function() {
518 var $countdown = $('.vigilante-ua-countdown');
519 if (!$countdown.length) {
520 return;
521 }
522
523 var expiresAt = parseInt($countdown.data('expires'), 10);
524 if (!expiresAt) {
525 return;
526 }
527
528 var $timeEl = $countdown.find('.vigilante-ua-time');
529
530 var updateCountdown = function() {
531 var now = Math.floor(Date.now() / 1000);
532 var remaining = expiresAt - now;
533
534 if (remaining <= 0) {
535 location.reload();
536 return;
537 }
538
539 var hours = Math.floor(remaining / 3600);
540 var mins = Math.floor((remaining % 3600) / 60);
541
542 var text = vigilanteAdmin.strings.underAttackRemaining || '%1$dh %2$dm remaining';
543 text = text.replace('%1$d', hours).replace('%2$d', mins);
544 $timeEl.text(text);
545 };
546
547 // Run immediately, then update every minute
548 updateCountdown();
549 setInterval(updateCountdown, 60000);
550 },
551
552 /**
553 * Handle reset section to defaults
554 */
555 handleResetSection: function(e) {
556 e.preventDefault();
557
558 var $btn = $(e.currentTarget);
559 var $form = $btn.closest('form');
560 var section = $form.data('section');
561
562 if (!section) {
563 Vigilante_Admin.showNotice('error', vigilanteAdmin.strings.couldNotDetermineSection || 'Could not determine section.');
564 return;
565 }
566
567 if (!confirm(vigilanteAdmin.strings.confirmResetSection || 'Reset this section to default values? This cannot be undone.')) {
568 return;
569 }
570
571 var originalText = $btn.data('original-text') || $btn.text();
572 $btn.prop('disabled', true).html(vigilanteAdmin.strings.loading + ' <span class="vigilante-spinner"></span>');
573
574 $.ajax({
575 url: vigilanteAdmin.ajaxUrl,
576 type: 'POST',
577 data: {
578 action: 'vigilante_reset_section',
579 nonce: vigilanteAdmin.nonce,
580 section: section
581 },
582 success: function(response) {
583 if (response.success) {
584 Vigilante_Admin.showNotice('success', response.data.message || vigilanteAdmin.strings.sectionResetDefaults || 'Section reset to defaults.');
585 setTimeout(function() {
586 location.reload();
587 }, 1000);
588 } else {
589 Vigilante_Admin.showNotice('error', response.data);
590 }
591 },
592 error: function() {
593 Vigilante_Admin.showNotice('error', vigilanteAdmin.strings.error);
594 },
595 complete: function() {
596 $btn.prop('disabled', false).text(originalText);
597 }
598 });
599 },
600
601 /**
602 * Handle clear single lockout
603 */
604 handleClearLockout: function(e) {
605 e.preventDefault();
606
607 var $btn = $(e.currentTarget);
608 var ip = $btn.data('ip');
609
610 $.ajax({
611 url: vigilanteAdmin.ajaxUrl,
612 type: 'POST',
613 data: {
614 action: 'vigilante_clear_lockouts',
615 nonce: vigilanteAdmin.nonce,
616 ip: ip
617 },
618 success: function(response) {
619 if (response.success) {
620 var $container = $btn.closest('.vigilante-paginated-section');
621 $btn.closest('tr').fadeOut(function() {
622 $(this).remove();
623 Vigilante_Admin.refreshFilePagination($container);
624 });
625 } else {
626 Vigilante_Admin.showNotice('error', response.data);
627 }
628 }
629 });
630 },
631
632 /**
633 * Handle clear all lockouts
634 */
635 handleClearAllLockouts: function(e) {
636 e.preventDefault();
637
638 if (!confirm(vigilanteAdmin.strings.confirm)) {
639 return;
640 }
641
642 $.ajax({
643 url: vigilanteAdmin.ajaxUrl,
644 type: 'POST',
645 data: {
646 action: 'vigilante_clear_lockouts',
647 nonce: vigilanteAdmin.nonce
648 },
649 success: function(response) {
650 if (response.success) {
651 location.reload();
652 } else {
653 Vigilante_Admin.showNotice('error', response.data);
654 }
655 }
656 });
657 },
658
659 /**
660 * Handle clear logs
661 */
662 handleClearLogs: function(e) {
663 e.preventDefault();
664
665 if (!confirm(vigilanteAdmin.strings.confirm + ' ' + (vigilanteAdmin.strings.confirmClearLogs || 'This will delete all activity logs.'))) {
666 return;
667 }
668
669 $.ajax({
670 url: vigilanteAdmin.ajaxUrl,
671 type: 'POST',
672 data: {
673 action: 'vigilante_clear_logs',
674 nonce: vigilanteAdmin.nonce
675 },
676 success: function(response) {
677 if (response.success) {
678 location.reload();
679 } else {
680 Vigilante_Admin.showNotice('error', response.data);
681 }
682 }
683 });
684 },
685
686 /**
687 * Handle run scan
688 */
689 handleRunScan: function(e) {
690 e.preventDefault();
691 e.stopPropagation();
692
693 var $btn = $(e.currentTarget);
694 var $results = $('#vigilante-scan-results');
695 var $lastResults = $('#vigilante-last-scan-results').closest('.vigilante-settings-section');
696
697 // Hide previous results section
698 $lastResults.hide();
699 $results.empty().hide();
700
701 $btn.prop('disabled', true).html(vigilanteAdmin.strings.scanning + ' <span class="vigilante-spinner"></span>');
702
703 $.ajax({
704 url: vigilanteAdmin.ajaxUrl,
705 type: 'POST',
706 timeout: 120000,
707 data: {
708 action: 'vigilante_run_scan',
709 nonce: vigilanteAdmin.nonce
710 },
711 success: function(response) {
712 if (response.success) {
713 // Reload the page so the server-side render shows ALL findings
714 // in their canonical sections (Suspicious, Extra, Critical Config,
715 // Closed + Removed Plugins, Modified). The legacy in-place JS
716 // render only knows the file-level categories and would leave
717 // the Closed + Removed subsection hidden after a scan.
718 Vigilante_Admin.showNotice('success', vigilanteAdmin.strings.scanComplete);
719 setTimeout(function() { location.reload(); }, 600);
720 } else {
721 Vigilante_Admin.showNotice('error', response.data || vigilanteAdmin.strings.scanFailed || 'Scan failed');
722 $btn.prop('disabled', false).text(vigilanteAdmin.strings.runScanNow || 'Run Scan Now');
723 }
724 },
725 error: function(xhr, status, error) {
726 Vigilante_Admin.showNotice('error', (vigilanteAdmin.strings.scanError || 'Scan error: %s').replace('%s', error));
727 $btn.prop('disabled', false).text(vigilanteAdmin.strings.runScanNow || 'Run Scan Now');
728 }
729 });
730 },
731
732 /**
733 * Handle clear scan results
734 */
735 handleClearScan: function(e) {
736 e.preventDefault();
737 e.stopPropagation();
738
739 if (!confirm(vigilanteAdmin.strings.confirmClearScan || 'Are you sure you want to clear all scan results?')) {
740 return;
741 }
742
743 var $btn = $(e.currentTarget);
744 var originalText = $btn.text();
745 $btn.prop('disabled', true).text(vigilanteAdmin.strings.clearing || 'Clearing...');
746
747 $.ajax({
748 url: vigilanteAdmin.ajaxUrl,
749 type: 'POST',
750 data: {
751 action: 'vigilante_clear_scan',
752 nonce: vigilanteAdmin.nonce
753 },
754 success: function(response) {
755 if (response.success) {
756 // Hide all scan results
757 $('#vigilante-scan-results').empty().hide();
758 $('#vigilante-last-scan-results').closest('.vigilante-settings-section').fadeOut();
759 Vigilante_Admin.showNotice('success', vigilanteAdmin.strings.scanResultsCleared || 'Scan results cleared. Page will reload...');
760 // Reload page to reflect changes
761 setTimeout(function() {
762 location.reload();
763 }, 1000);
764 } else {
765 Vigilante_Admin.showNotice('error', response.data || vigilanteAdmin.strings.failedClearResults || 'Failed to clear results');
766 $btn.prop('disabled', false).text(originalText);
767 }
768 },
769 error: function(xhr, status, error) {
770 Vigilante_Admin.showNotice('error', (vigilanteAdmin.strings.ajaxError || 'AJAX Error: %s').replace('%s', error));
771 $btn.prop('disabled', false).text(originalText);
772 },
773 complete: function() {
774 // Button text restored in success/error handlers
775 }
776 });
777 },
778
779 /**
780 * Handle toggle critical file content viewer
781 */
782 handleToggleCriticalContent: function(e) {
783 e.preventDefault();
784 var $btn = $(e.currentTarget);
785 var targetId = $btn.data('target');
786 var $content = $('#' + targetId);
787
788 // Use toggle instead of slideUp/slideDown because target can be a TR
789 // (animations on table rows are inconsistent across browsers)
790 if ($content.is(':visible')) {
791 $content.hide();
792 $btn.text($btn.data('label-show'));
793 } else {
794 $content.show();
795 $btn.text($btn.data('label-hide'));
796 }
797 },
798
799 /**
800 * Handle approve critical file button click
801 */
802 handleApproveCriticalFile: function(e) {
803 e.preventDefault();
804 var $btn = $(e.currentTarget);
805 var file = $btn.data('file');
806 var strings = vigilanteAdmin.strings;
807 var originalText = $btn.text();
808
809 // The POST carries an opaque key, never the file name: WAFs like
810 // ModSecurity (OWASP CRS 930130) block any request argument
811 // containing the literal "wp-config.php", which made Approve fail
812 // with a generic AJAX error on hardened hostings. The PHP handler
813 // maps the key back against its own whitelist.
814 var fileKey = { 'wp-config.php': 'cfg', '.htaccess': 'hta' }[ file ] || '';
815
816 $btn.prop('disabled', true).text(strings.approving || 'Approving...');
817
818 $.ajax({
819 url: vigilanteAdmin.ajaxUrl,
820 type: 'POST',
821 data: {
822 action: 'vigilante_approve_critical_file',
823 nonce: vigilanteAdmin.nonce,
824 file_key: fileKey
825 },
826 success: function(response) {
827 if (response.success) {
828 // Remove the approved file row and its diff row from the table.
829 // The diff row carries an id derived from the file name (same as
830 // sanitize_html_class() on PHP side), so we target it directly
831 // instead of relying on adjacency in the DOM.
832 var $row = $btn.closest('tr');
833 var fileId = String(file).replace(/[^a-z0-9_-]/gi, '-');
834 $('#vigilante-critical-content-' + fileId).remove();
835 $row.fadeOut(300, function() {
836 $(this).remove();
837 // If no more critical config rows, remove the entire section
838 if ($('.vigilante-critical-config-files tbody tr').length === 0) {
839 $('.vigilante-critical-config-files').fadeOut(300, function() { $(this).remove(); });
840 }
841 });
842 Vigilante_Admin.showNotice('success', strings.criticalApproved || response.data.message);
843 } else {
844 Vigilante_Admin.showNotice('error', response.data || 'Failed to approve.');
845 $btn.prop('disabled', false).text(originalText);
846 }
847 },
848 error: function(xhr, status, error) {
849 Vigilante_Admin.showNotice('error', (strings.ajaxError || 'AJAX Error: %s').replace('%s', error));
850 $btn.prop('disabled', false).text(originalText);
851 }
852 });
853 },
854
855 /**
856 * Handle ignore file button click
857 */
858 handleIgnoreFile: function(e) {
859 e.preventDefault();
860 var $btn = $(e.currentTarget);
861 var file = $btn.data('file');
862 var strings = vigilanteAdmin.strings;
863
864 $btn.prop('disabled', true).text(strings.ignoring || 'Ignoring...');
865
866 $.ajax({
867 url: vigilanteAdmin.ajaxUrl,
868 type: 'POST',
869 data: {
870 action: 'vigilante_ignore_file',
871 nonce: vigilanteAdmin.nonce,
872 file: file
873 },
874 success: function(response) {
875 if (response.success) {
876 var $container = $btn.closest('.vigilante-paginated-section');
877 // Remove the row from the table
878 $btn.closest('tr').fadeOut(300, function() {
879 $(this).remove();
880 // Refresh pagination after row removal
881 Vigilante_Admin.refreshFilePagination($container);
882 });
883 Vigilante_Admin.showNotice('success', strings.fileIgnored || 'File added to ignored list.');
884 } else {
885 Vigilante_Admin.showNotice('error', response.data || 'Failed to ignore file');
886 $btn.prop('disabled', false).text(strings.ignore || 'Ignore');
887 }
888 },
889 error: function() {
890 $btn.prop('disabled', false).text(strings.ignore || 'Ignore');
891 }
892 });
893 },
894
895 /**
896 * Handle stop ignoring file
897 */
898 handleUnignoreFile: function(e) {
899 e.preventDefault();
900 var $btn = $(e.currentTarget);
901 var file = $btn.data('file');
902 var strings = vigilanteAdmin.strings;
903
904 $.ajax({
905 url: vigilanteAdmin.ajaxUrl,
906 type: 'POST',
907 data: {
908 action: 'vigilante_unignore_file',
909 nonce: vigilanteAdmin.nonce,
910 file: file
911 },
912 success: function(response) {
913 if (response.success) {
914 var $container = $btn.closest('.vigilante-paginated-section');
915 $btn.closest('tr').fadeOut(300, function() {
916 $(this).remove();
917 Vigilante_Admin.refreshFilePagination($container);
918 });
919 Vigilante_Admin.showNotice('success', strings.fileUnignored || 'File removed from ignored list.');
920 } else {
921 Vigilante_Admin.showNotice('error', response.data || 'Failed');
922 }
923 }
924 });
925 },
926
927 /**
928 * Handle clear all ignored files
929 */
930 handleClearIgnored: function(e) {
931 e.preventDefault();
932 var strings = vigilanteAdmin.strings;
933
934 if (!confirm(strings.confirmClearIgnored || 'Remove all files from the ignored list?')) {
935 return;
936 }
937
938 $.ajax({
939 url: vigilanteAdmin.ajaxUrl,
940 type: 'POST',
941 data: {
942 action: 'vigilante_clear_ignored',
943 nonce: vigilanteAdmin.nonce
944 },
945 success: function(response) {
946 if (response.success) {
947 Vigilante_Admin.showNotice('success', strings.ignoredCleared || 'Ignored files list cleared. Page will reload...');
948 setTimeout(function() {
949 location.reload();
950 }, 1000);
951 }
952 }
953 });
954 },
955
956 /**
957 * Ignore a closed/removed plugin slug. Reloads to refresh the section.
958 */
959 handleIgnoreClosedPlugin: function(e) {
960 e.preventDefault();
961 var $btn = $(e.currentTarget);
962 var slug = $btn.data('slug');
963 var strings = vigilanteAdmin.strings || {};
964
965 $btn.prop('disabled', true).text(strings.ignoring || 'Ignoring…');
966
967 $.ajax({
968 url: vigilanteAdmin.ajaxUrl,
969 type: 'POST',
970 data: {
971 action: 'vigilante_ignore_closed_plugin',
972 nonce: vigilanteAdmin.nonce,
973 slug: slug
974 },
975 success: function(response) {
976 if (response && response.success) {
977 Vigilante_Admin.showNotice('success', (response.data) || 'Plugin ignored.');
978 setTimeout(function() { location.reload(); }, 600);
979 } else {
980 Vigilante_Admin.showNotice('error', (response && response.data) || 'Failed.');
981 $btn.prop('disabled', false).text(strings.ignore || 'Ignore');
982 }
983 },
984 error: function(xhr, status, error) {
985 Vigilante_Admin.showNotice('error', (strings.ajaxError || 'AJAX Error: %s').replace('%s', error));
986 $btn.prop('disabled', false).text(strings.ignore || 'Ignore');
987 }
988 });
989 },
990
991 /**
992 * Stop ignoring a closed/removed plugin slug.
993 */
994 handleUnignoreClosedPlugin: function(e) {
995 e.preventDefault();
996 var $btn = $(e.currentTarget);
997 var slug = $btn.data('slug');
998 var strings = vigilanteAdmin.strings || {};
999
1000 $btn.prop('disabled', true).text(strings.unignoring || 'Restoring…');
1001
1002 $.ajax({
1003 url: vigilanteAdmin.ajaxUrl,
1004 type: 'POST',
1005 data: {
1006 action: 'vigilante_unignore_closed_plugin',
1007 nonce: vigilanteAdmin.nonce,
1008 slug: slug
1009 },
1010 success: function(response) {
1011 if (response && response.success) {
1012 Vigilante_Admin.showNotice('success', (response.data) || 'Plugin restored to the active list.');
1013 setTimeout(function() { location.reload(); }, 600);
1014 } else {
1015 Vigilante_Admin.showNotice('error', (response && response.data) || 'Failed.');
1016 $btn.prop('disabled', false).text(strings.stopIgnoring || 'Stop ignoring');
1017 }
1018 },
1019 error: function(xhr, status, error) {
1020 Vigilante_Admin.showNotice('error', (strings.ajaxError || 'AJAX Error: %s').replace('%s', error));
1021 $btn.prop('disabled', false).text(strings.stopIgnoring || 'Stop ignoring');
1022 }
1023 });
1024 },
1025
1026 /**
1027 * Clear the entire ignored closed plugins list.
1028 */
1029 handleClearIgnoredClosedPlugins: function(e) {
1030 e.preventDefault();
1031 var strings = vigilanteAdmin.strings || {};
1032
1033 if (!confirm(strings.confirmClearIgnoredClosedPlugins || 'Remove all plugins from the ignored closed plugins list? They will reappear in the main list and in email alerts.')) {
1034 return;
1035 }
1036
1037 $.ajax({
1038 url: vigilanteAdmin.ajaxUrl,
1039 type: 'POST',
1040 data: {
1041 action: 'vigilante_clear_ignored_closed_plugins',
1042 nonce: vigilanteAdmin.nonce
1043 },
1044 success: function(response) {
1045 if (response && response.success) {
1046 Vigilante_Admin.showNotice('success', (response.data) || 'Ignored closed plugins list cleared.');
1047 setTimeout(function() { location.reload(); }, 1000);
1048 }
1049 }
1050 });
1051 },
1052
1053 /**
1054 * Toggle all checkboxes inside a file integrity table when the
1055 * header "select all" checkbox changes. Only operates on visible
1056 * rows so it plays nice with client-side pagination.
1057 */
1058 handleFiSelectAll: function(e) {
1059 var $cb = $(e.currentTarget);
1060 var $section = $cb.closest('.vigilante-paginated-section');
1061 $section.find('table.vigilante-fi-paginated tbody tr:visible .vigilante-fi-cb').prop('checked', $cb.prop('checked'));
1062 this.refreshBulkBar($section);
1063 },
1064
1065 /**
1066 * Refresh bulk bar state after individual checkbox change.
1067 */
1068 handleFiCheckboxChange: function(e) {
1069 var $section = $(e.currentTarget).closest('.vigilante-paginated-section');
1070 this.refreshBulkBar($section);
1071
1072 // Sync the header "select all" with the current visible state
1073 var $allCb = $section.find('.vigilante-fi-cb-all');
1074 var $visible = $section.find('table.vigilante-fi-paginated tbody tr:visible .vigilante-fi-cb');
1075 var $checked = $visible.filter(':checked');
1076 $allCb.prop('checked', $visible.length > 0 && $checked.length === $visible.length);
1077 },
1078
1079 /**
1080 * Update the count label and enable/disable the bulk action button.
1081 */
1082 refreshBulkBar: function($section) {
1083 var strings = vigilanteAdmin.strings;
1084 var mode = $section.data('bulk-mode'); // 'ignore' or 'unignore'
1085 var $checked = $section.find('.vigilante-fi-cb:checked');
1086 var count = $checked.length;
1087 var $btn = $section.find(mode === 'unignore' ? '.vigilante-bulk-unignore' : '.vigilante-bulk-ignore');
1088 var $count = $section.find('.vigilante-fi-bulk-count');
1089
1090 $btn.prop('disabled', count === 0);
1091
1092 if (count === 0) {
1093 $count.text('');
1094 } else {
1095 var template = (strings.bulkSelectedCount || '%d selected');
1096 $count.text(template.replace('%d', count));
1097 }
1098 },
1099
1100 /**
1101 * Collect the file paths checked inside a section.
1102 */
1103 collectSelectedFiles: function($section) {
1104 var files = [];
1105 $section.find('.vigilante-fi-cb:checked').each(function() {
1106 var v = $(this).val();
1107 if (v) {
1108 files.push(v);
1109 }
1110 });
1111 return files;
1112 },
1113
1114 /**
1115 * Bulk add to ignored list.
1116 */
1117 handleBulkIgnore: function(e) {
1118 e.preventDefault();
1119 var self = this;
1120 var strings = vigilanteAdmin.strings;
1121 var $btn = $(e.currentTarget);
1122 var $section = $btn.closest('.vigilante-paginated-section');
1123 var files = this.collectSelectedFiles($section);
1124
1125 if (files.length === 0) {
1126 Vigilante_Admin.showNotice('error', strings.bulkNoSelection || 'Select at least one file first.');
1127 return;
1128 }
1129
1130 if (!confirm(strings.bulkConfirmIgnore || 'Ignore the selected files?')) {
1131 return;
1132 }
1133
1134 var originalText = $btn.text();
1135 $btn.prop('disabled', true).text(strings.bulkProcessing || 'Processing...');
1136
1137 $.ajax({
1138 url: vigilanteAdmin.ajaxUrl,
1139 type: 'POST',
1140 data: {
1141 action: 'vigilante_bulk_ignore_files',
1142 nonce: vigilanteAdmin.nonce,
1143 files: files
1144 },
1145 success: function(response) {
1146 if (response.success) {
1147 // Remove processed rows from this section
1148 files.forEach(function(file) {
1149 $section.find('.vigilante-fi-cb').filter(function() {
1150 return $(this).val() === file;
1151 }).closest('tr').remove();
1152 });
1153 $section.find('.vigilante-fi-cb-all').prop('checked', false);
1154 Vigilante_Admin.refreshFilePagination($section);
1155 self.refreshBulkBar($section);
1156 Vigilante_Admin.showNotice('success', (response.data && response.data.message) || strings.fileIgnored);
1157 } else {
1158 Vigilante_Admin.showNotice('error', (response.data && response.data.message) || response.data || 'Failed to ignore files');
1159 $btn.prop('disabled', false).text(originalText);
1160 }
1161 },
1162 error: function() {
1163 $btn.prop('disabled', false).text(originalText);
1164 },
1165 // Restore the label on success too. refreshBulkBar() re-derives the
1166 // disabled state from the remaining selection but never rewrites the
1167 // button text, so without this the button stays on "Processing...".
1168 complete: function() {
1169 $btn.text(originalText);
1170 }
1171 });
1172 },
1173
1174 /**
1175 * Bulk remove from ignored list.
1176 */
1177 handleBulkUnignore: function(e) {
1178 e.preventDefault();
1179 var self = this;
1180 var strings = vigilanteAdmin.strings;
1181 var $btn = $(e.currentTarget);
1182 var $section = $btn.closest('.vigilante-paginated-section');
1183 var files = this.collectSelectedFiles($section);
1184
1185 if (files.length === 0) {
1186 Vigilante_Admin.showNotice('error', strings.bulkNoSelection || 'Select at least one file first.');
1187 return;
1188 }
1189
1190 if (!confirm(strings.bulkConfirmUnignore || 'Remove the selected files from ignored list?')) {
1191 return;
1192 }
1193
1194 var originalText = $btn.text();
1195 $btn.prop('disabled', true).text(strings.bulkProcessing || 'Processing...');
1196
1197 $.ajax({
1198 url: vigilanteAdmin.ajaxUrl,
1199 type: 'POST',
1200 data: {
1201 action: 'vigilante_bulk_unignore_files',
1202 nonce: vigilanteAdmin.nonce,
1203 files: files
1204 },
1205 success: function(response) {
1206 if (response.success) {
1207 files.forEach(function(file) {
1208 $section.find('.vigilante-fi-cb').filter(function() {
1209 return $(this).val() === file;
1210 }).closest('tr').remove();
1211 });
1212 $section.find('.vigilante-fi-cb-all').prop('checked', false);
1213 Vigilante_Admin.refreshFilePagination($section);
1214 self.refreshBulkBar($section);
1215 Vigilante_Admin.showNotice('success', (response.data && response.data.message) || strings.fileUnignored);
1216
1217 // If the ignored table is now empty, hide its section.
1218 if ($section.find('table.vigilante-fi-paginated tbody tr').length === 0) {
1219 $('#vigilante-section-fi-ignored').fadeOut(300, function() { $(this).remove(); });
1220 }
1221 } else {
1222 Vigilante_Admin.showNotice('error', (response.data && response.data.message) || response.data || 'Failed');
1223 $btn.prop('disabled', false).text(originalText);
1224 }
1225 },
1226 error: function() {
1227 $btn.prop('disabled', false).text(originalText);
1228 },
1229 // Restore the label on success too. refreshBulkBar() re-derives the
1230 // disabled state from the remaining selection but never rewrites the
1231 // button text, so without this the button stays on "Processing...".
1232 complete: function() {
1233 $btn.text(originalText);
1234 }
1235 });
1236 },
1237
1238 /**
1239 * Display scan results
1240 */
1241 displayScanResults: function(results, $container, ignoredCount) {
1242 // Ensure arrays exist
1243 results.modified = results.modified || [];
1244 results.suspicious = results.suspicious || [];
1245 results.extra = results.extra || [];
1246 results.missing = results.missing || [];
1247
1248 var strings = vigilanteAdmin.strings;
1249 var esc = Vigilante_Admin.escapeHtml;
1250
1251 var html = '<h2>' + strings.scanResults + '</h2>';
1252 html += '<div class="vigilante-scan-summary">';
1253 html += '<div class="vigilante-scan-stat vigilante-stat-ok">';
1254 html += '<span class="vigilante-stat-number">' + (results.ok || 0) + '</span>';
1255 html += '<span class="vigilante-stat-label">' + strings.ok + '</span>';
1256 html += '</div>';
1257 html += '<div class="vigilante-scan-stat vigilante-stat-modified">';
1258 html += '<span class="vigilante-stat-number">' + results.modified.length + '</span>';
1259 html += '<span class="vigilante-stat-label">' + strings.modified + '</span>';
1260 html += '</div>';
1261 html += '<div class="vigilante-scan-stat vigilante-stat-suspicious">';
1262 html += '<span class="vigilante-stat-number">' + results.suspicious.length + '</span>';
1263 html += '<span class="vigilante-stat-label">' + strings.suspicious + '</span>';
1264 html += '</div>';
1265 html += '<div class="vigilante-scan-stat vigilante-stat-extra">';
1266 html += '<span class="vigilante-stat-number">' + results.extra.length + '</span>';
1267 html += '<span class="vigilante-stat-label">' + (strings.extra || 'Extra') + '</span>';
1268 html += '</div>';
1269 if (ignoredCount > 0) {
1270 html += '<div class="vigilante-scan-stat vigilante-stat-ignored">';
1271 html += '<span class="vigilante-stat-number">' + ignoredCount + '</span>';
1272 html += '<span class="vigilante-stat-label">' + (strings.ignored || 'Ignored') + '</span>';
1273 html += '</div>';
1274 }
1275 html += '<div class="vigilante-scan-stat">';
1276 var computedTotal = (results.ok || 0) + results.modified.length + results.suspicious.length + results.extra.length + (ignoredCount || 0);
1277 html += '<span class="vigilante-stat-number">' + computedTotal + '</span>';
1278 html += '<span class="vigilante-stat-label">' + strings.totalScanned + '</span>';
1279 html += '</div>';
1280 html += '</div>';
1281
1282 var bulkBar = '<div class="vigilante-fi-bulk-bar">'
1283 + '<button type="button" class="button vigilante-bulk-ignore" disabled>' + (strings.bulkIgnoreSelected || 'Ignore selected') + '</button>'
1284 + '<span class="vigilante-fi-bulk-count" aria-live="polite"></span>'
1285 + '</div>';
1286 var selectAllCell = '<td class="manage-column column-cb check-column"><input type="checkbox" class="vigilante-fi-cb-all" aria-label="' + (strings.selectAll || 'Select all') + '"></td>';
1287
1288 // Suspicious files table
1289 if (results.suspicious.length > 0) {
1290 html += '<div class="vigilante-file-list vigilante-suspicious-files vigilante-paginated-section" data-bulk-mode="ignore">';
1291 html += '<h3 style="color: #d63638;">' + strings.suspiciousFiles + '</h3>';
1292 html += '<p class="description" style="color: #d63638;">' + strings.suspiciousWarning + '</p>';
1293 html += bulkBar;
1294 html += '<div class="vigilante-fi-pagination-wrap"></div>';
1295 html += '<table class="wp-list-table widefat fixed striped vigilante-fi-paginated">';
1296 html += '<thead><tr>' + selectAllCell + '<th>' + strings.file + '</th><th style="width: 250px;">' + strings.reason + '</th><th style="width: 120px;">' + strings.type + '</th><th style="width: 80px;">' + (strings.actions || 'Actions') + '</th></tr></thead>';
1297 html += '<tbody>';
1298 results.suspicious.forEach(function(file) {
1299 html += '<tr>';
1300 html += '<th scope="row" class="check-column"><input type="checkbox" class="vigilante-fi-cb" value="' + esc(file.file) + '"></th>';
1301 html += '<td><code style="color: #d63638;">' + esc(file.file) + '</code></td>';
1302 html += '<td>' + esc(file.reason || strings.unknown) + '</td>';
1303 html += '<td>' + esc(file.type || strings.unknown) + '</td>';
1304 html += '<td><button type="button" class="button button-small vigilante-ignore-file" data-file="' + esc(file.file) + '">' + (strings.ignore || 'Ignore') + '</button></td>';
1305 html += '</tr>';
1306 });
1307 html += '</tbody></table>';
1308 html += '</div>';
1309 }
1310
1311 // Extra files table
1312 if (results.extra.length > 0) {
1313 html += '<div class="vigilante-file-list vigilante-extra-files vigilante-paginated-section" data-bulk-mode="ignore">';
1314 html += '<h3 style="color: #b32d2e;">' + (strings.extraFiles || 'Extra Files') + '</h3>';
1315 html += '<p class="description">' + (strings.extraDescription || 'PHP files not in original distribution.') + '</p>';
1316 html += bulkBar;
1317 html += '<div class="vigilante-fi-pagination-wrap"></div>';
1318 html += '<table class="wp-list-table widefat fixed striped vigilante-fi-paginated">';
1319 html += '<thead><tr>' + selectAllCell + '<th>' + strings.file + '</th><th style="width: 250px;">' + strings.reason + '</th><th style="width: 120px;">' + strings.type + '</th><th style="width: 80px;">' + (strings.actions || 'Actions') + '</th></tr></thead>';
1320 html += '<tbody>';
1321 results.extra.forEach(function(file) {
1322 html += '<tr>';
1323 html += '<th scope="row" class="check-column"><input type="checkbox" class="vigilante-fi-cb" value="' + esc(file.file) + '"></th>';
1324 html += '<td><code style="color: #b32d2e;">' + esc(file.file) + '</code></td>';
1325 html += '<td>' + esc(file.reason || strings.unknown) + '</td>';
1326 html += '<td>' + esc(file.type || strings.unknown) + '</td>';
1327 html += '<td><button type="button" class="button button-small vigilante-ignore-file" data-file="' + esc(file.file) + '">' + (strings.ignore || 'Ignore') + '</button></td>';
1328 html += '</tr>';
1329 });
1330 html += '</tbody></table>';
1331 html += '</div>';
1332 }
1333
1334 // Split critical config from regular modified
1335 var criticalModified = [];
1336 var regularModified = [];
1337 results.modified.forEach(function(file) {
1338 if (file.type === 'critical_config') {
1339 criticalModified.push(file);
1340 } else {
1341 regularModified.push(file);
1342 }
1343 });
1344
1345 // Critical config files section (same visual treatment as suspicious files)
1346 if (criticalModified.length > 0) {
1347 html += '<div class="vigilante-file-list vigilante-critical-config-files">';
1348 html += '<h3 style="color: #e36210;">' + (strings.criticalConfigTitle || 'Critical config files modified') + '</h3>';
1349 html += '<p class="description">' + (strings.criticalConfigDesc || '') + '</p>';
1350 html += '<table class="wp-list-table widefat fixed striped">';
1351 html += '<thead><tr><th>' + strings.file + '</th><th style="width: 200px;">' + (strings.changes || 'Changes') + '</th><th style="width: 220px;">' + (strings.actions || 'Actions') + '</th></tr></thead>';
1352 html += '<tbody>';
1353
1354 var escHtml = function(s) { return $('<span>').text(s).html(); };
1355
1356 criticalModified.forEach(function(file) {
1357 var fileId = file.file.replace(/[^a-z0-9]/gi, '-');
1358 var baselineSize = file.baseline_size ? Number(file.baseline_size).toLocaleString() : '?';
1359 var currentSize = file.current_size ? Number(file.current_size).toLocaleString() : '?';
1360 var diff = file.diff || {};
1361 var added = diff.added || [];
1362 var removed = diff.removed || [];
1363 var diffUnavailable = !!diff.unavailable;
1364
1365 // Main row
1366 html += '<tr>';
1367 html += '<td><code style="color: #e36210;">' + esc(file.file) + '</code></td>';
1368 html += '<td>';
1369 if (!diffUnavailable) {
1370 html += '<span style="color: #007017;">+' + added.length + '</span> <span style="color: #b32d2e;">-' + removed.length + '</span> ' + (strings.diffLines || 'lines') + '<br>';
1371 }
1372 html += '<small style="color: #50575e;">' + baselineSize + ' &rarr; ' + currentSize + ' bytes</small>';
1373 html += '</td>';
1374 html += '<td>';
1375 html += '<button type="button" class="button button-small vigilante-toggle-critical-content" data-target="vigilante-critical-content-' + fileId + '" data-label-show="' + (strings.reviewChanges || 'Review changes') + '" data-label-hide="' + (strings.hideChanges || 'Hide changes') + '">' + (strings.reviewChanges || 'Review changes') + '</button> ';
1376 html += '<button type="button" class="button button-small button-primary vigilante-approve-critical-file" data-file="' + esc(file.file) + '">' + (strings.approve || 'Approve') + '</button>';
1377 html += '</td>';
1378 html += '</tr>';
1379
1380 // Expandable diff row
1381 html += '<tr id="vigilante-critical-content-' + fileId + '" class="vigilante-critical-content-row" style="display:none;">';
1382 html += '<td colspan="3" style="padding: 0;">';
1383 html += '<div class="vigilante-critical-content" style="max-height: 400px; overflow: auto; background: #fff; padding: 10px; font-size: 12px; line-height: 1.5; font-family: Consolas, Monaco, monospace; border-top: 1px solid #c3c4c7;">';
1384 if (diffUnavailable) {
1385 html += '<p style="color: #50575e; font-style: italic; margin: 0;">' + (strings.diffUnavailable || 'Diff not available.') + '</p>';
1386 } else if (added.length === 0 && removed.length === 0) {
1387 html += '<p style="color: #50575e; font-style: italic; margin: 0;">' + (strings.diffEmpty || 'No line changes detected.') + '</p>';
1388 } else {
1389 removed.forEach(function(rline) {
1390 html += '<div style="background: #fbeaea; color: #b32d2e; padding: 1px 4px; white-space: pre-wrap; word-wrap: break-word;"><span style="display: inline-block; width: 50px; color: #999; user-select: none;">' + (rline.line || 0) + '</span>- ' + escHtml(rline.content || '') + '</div>';
1391 });
1392 added.forEach(function(aline) {
1393 html += '<div style="background: #e6f4e9; color: #007017; padding: 1px 4px; white-space: pre-wrap; word-wrap: break-word;"><span style="display: inline-block; width: 50px; color: #999; user-select: none;">' + (aline.line || 0) + '</span>+ ' + escHtml(aline.content || '') + '</div>';
1394 });
1395 }
1396 html += '</div>';
1397 html += '</td>';
1398 html += '</tr>';
1399 });
1400
1401 html += '</tbody></table>';
1402 html += '</div>';
1403 }
1404
1405 // Regular modified files table
1406 if (regularModified.length > 0) {
1407 html += '<div class="vigilante-file-list vigilante-paginated-section" data-bulk-mode="ignore">';
1408 html += '<h3>' + strings.modifiedFiles + '</h3>';
1409 html += '<p class="description">' + strings.modifiedDescription + '</p>';
1410 html += bulkBar;
1411 html += '<div class="vigilante-fi-pagination-wrap"></div>';
1412 html += '<table class="wp-list-table widefat fixed striped vigilante-fi-paginated">';
1413 html += '<thead><tr>' + selectAllCell + '<th>' + strings.file + '</th><th style="width: 100px;">' + strings.type + '</th><th style="width: 80px;">' + (strings.actions || 'Actions') + '</th></tr></thead>';
1414 html += '<tbody>';
1415 regularModified.forEach(function(file) {
1416 html += '<tr>';
1417 html += '<th scope="row" class="check-column"><input type="checkbox" class="vigilante-fi-cb" value="' + esc(file.file) + '"></th>';
1418 html += '<td><code>' + esc(file.file) + '</code></td>';
1419 html += '<td>' + esc(file.type || strings.unknown) + '</td>';
1420 html += '<td><button type="button" class="button button-small vigilante-ignore-file" data-file="' + esc(file.file) + '">' + (strings.ignore || 'Ignore') + '</button></td>';
1421 html += '</tr>';
1422 });
1423 html += '</tbody></table>';
1424 html += '</div>';
1425 }
1426
1427 if (results.modified.length === 0 && results.suspicious.length === 0 && results.extra.length === 0) {
1428 html += '<div class="vigilante-all-clear"><span class="dashicons dashicons-yes-alt"></span> ' + strings.allClear + '</div>';
1429 }
1430
1431 $container.html(html).show();
1432
1433 // Initialize client-side pagination for file integrity tables
1434 this.initFileIntegrityPagination($container);
1435 },
1436
1437 /**
1438 * Initialize client-side pagination for file integrity tables
1439 * Works on both PHP-rendered (last results) and JS-rendered (live scan) tables
1440 *
1441 * @param {jQuery} $scope Optional scope to limit search (for live scan results)
1442 */
1443 initFileIntegrityPagination: function($scope) {
1444 var perPage = 20;
1445 var $context = $scope || $(document);
1446
1447 $context.find('table.vigilante-fi-paginated').each(function() {
1448 var $table = $(this);
1449 var $rows = $table.find('tbody tr');
1450 var total = $rows.length;
1451
1452 if (total === 0) {
1453 return;
1454 }
1455
1456 // Store state on the parent container
1457 var $container = $table.closest('.vigilante-paginated-section');
1458 $container.data('fi-page', 1);
1459 $container.data('fi-per-page', perPage);
1460 $container.data('fi-total', total);
1461
1462 // Hide rows beyond first page (only if more than perPage)
1463 if (total > perPage) {
1464 $rows.each(function(index) {
1465 $(this).toggle(index < perPage);
1466 });
1467 }
1468
1469 // Build pagination controls (always show count, buttons only when needed)
1470 var $wrap = $container.find('.vigilante-fi-pagination-wrap');
1471 var paginationHtml = Vigilante_Admin.buildFilePaginationHtml(1, perPage, total);
1472 $wrap.html(paginationHtml);
1473 });
1474 },
1475
1476 /**
1477 * Build pagination HTML for file integrity tables
1478 */
1479 buildFilePaginationHtml: function(page, perPage, total) {
1480 var totalPages = Math.ceil(total / perPage) || 1;
1481 var from = total > 0 ? ((page - 1) * perPage) + 1 : 0;
1482 var to = Math.min(page * perPage, total);
1483 var needsNav = total > perPage;
1484
1485 var text = total > 0
1486 ? (vigilanteAdmin.strings.paginationOf || '%1$d–%2$d of %3$d').replace('%1$d', from).replace('%2$d', to).replace('%3$d', total)
1487 : (vigilanteAdmin.strings.paginationEmpty || '0 items');
1488
1489 var prevDisabled = page <= 1 ? ' disabled' : '';
1490 var nextDisabled = page >= totalPages ? ' disabled' : '';
1491
1492 var html = '<span class="vigilante-pagination vigilante-fi-pagination">';
1493 if (needsNav) {
1494 html += '<button type="button" class="vigilante-page-first" title="First"' + prevDisabled + '>&laquo;</button>';
1495 html += '<button type="button" class="vigilante-page-prev" title="Previous"' + prevDisabled + '>&lsaquo;</button>';
1496 }
1497 html += '<span class="vigilante-page-info">' + text + '</span>';
1498 if (needsNav) {
1499 html += '<button type="button" class="vigilante-page-next" title="Next"' + nextDisabled + '>&rsaquo;</button>';
1500 html += '<button type="button" class="vigilante-page-last" title="Last"' + nextDisabled + '>&raquo;</button>';
1501 }
1502 html += '</span>';
1503
1504 return html;
1505 },
1506
1507 /**
1508 * Navigate file integrity table pages (client-side)
1509 */
1510 goToFilePage: function($container, direction) {
1511 var page = $container.data('fi-page') || 1;
1512 var perPage = $container.data('fi-per-page') || 20;
1513 var total = $container.data('fi-total') || 0;
1514 var totalPages = Math.ceil(total / perPage) || 1;
1515
1516 switch (direction) {
1517 case 'first': page = 1; break;
1518 case 'prev': page = Math.max(1, page - 1); break;
1519 case 'next': page = Math.min(totalPages, page + 1); break;
1520 case 'last': page = totalPages; break;
1521 }
1522
1523 $container.data('fi-page', page);
1524
1525 // Show/hide rows
1526 var start = (page - 1) * perPage;
1527 var end = start + perPage;
1528 $container.find('table.vigilante-fi-paginated tbody tr').each(function(index) {
1529 $(this).toggle(index >= start && index < end);
1530 });
1531
1532 // Update controls
1533 var $wrap = $container.find('.vigilante-fi-pagination-wrap');
1534 $wrap.html(this.buildFilePaginationHtml(page, perPage, total));
1535
1536 // Sync the "select all" header with what is now visible.
1537 // Selections in other pages remain checked and will be included
1538 // in any bulk action, but the header reflects only this page.
1539 var $allCb = $container.find('.vigilante-fi-cb-all');
1540 if ($allCb.length) {
1541 var $visible = $container.find('table.vigilante-fi-paginated tbody tr:visible .vigilante-fi-cb');
1542 var $checked = $visible.filter(':checked');
1543 $allCb.prop('checked', $visible.length > 0 && $checked.length === $visible.length);
1544 }
1545 },
1546
1547 /**
1548 * Refresh file integrity pagination after row removal (ignore)
1549 */
1550 refreshFilePagination: function($container) {
1551 var perPage = $container.data('fi-per-page') || 20;
1552 var $rows = $container.find('table.vigilante-fi-paginated tbody tr');
1553 var total = $rows.length;
1554
1555 $container.data('fi-total', total);
1556
1557 if (total === 0) {
1558 $container.find('.vigilante-fi-pagination-wrap').empty();
1559 return;
1560 }
1561
1562 if (total <= perPage) {
1563 // Show all rows, display count only
1564 $rows.show();
1565 $container.data('fi-page', 1);
1566 var $wrap = $container.find('.vigilante-fi-pagination-wrap');
1567 $wrap.html(this.buildFilePaginationHtml(1, perPage, total));
1568 return;
1569 }
1570
1571 // Ensure current page is still valid
1572 var page = $container.data('fi-page') || 1;
1573 var totalPages = Math.ceil(total / perPage);
1574 if (page > totalPages) {
1575 page = totalPages;
1576 }
1577 $container.data('fi-page', page);
1578
1579 // Show/hide rows for current page
1580 var start = (page - 1) * perPage;
1581 var end = start + perPage;
1582 $rows.each(function(index) {
1583 $(this).toggle(index >= start && index < end);
1584 });
1585
1586 var $wrap = $container.find('.vigilante-fi-pagination-wrap');
1587 $wrap.html(this.buildFilePaginationHtml(page, perPage, total));
1588 },
1589
1590 /**
1591 * Handle export settings
1592 */
1593 handleExportSettings: function(e) {
1594 e.preventDefault();
1595
1596 $.ajax({
1597 url: vigilanteAdmin.ajaxUrl,
1598 type: 'POST',
1599 data: {
1600 action: 'vigilante_export_settings',
1601 nonce: vigilanteAdmin.nonce
1602 },
1603 success: function(response) {
1604 if (response.success) {
1605 var blob = new Blob([response.data.content], { type: 'application/json' });
1606 var url = URL.createObjectURL(blob);
1607 var a = document.createElement('a');
1608 a.href = url;
1609 a.download = response.data.filename;
1610 document.body.appendChild(a);
1611 a.click();
1612 document.body.removeChild(a);
1613 URL.revokeObjectURL(url);
1614 } else {
1615 Vigilante_Admin.showNotice('error', response.data);
1616 }
1617 }
1618 });
1619 },
1620
1621 /**
1622 * Handle import settings click
1623 */
1624 handleImportSettings: function(e) {
1625 e.preventDefault();
1626 $('#vigilante-import-file').trigger('click');
1627 },
1628
1629 /**
1630 * Handle import file selection
1631 */
1632 handleImportFile: function(e) {
1633 var file = e.target.files[0];
1634 if (!file) return;
1635
1636 var reader = new FileReader();
1637 reader.onload = function(e) {
1638 if (!confirm(vigilanteAdmin.strings.confirm + ' ' + (vigilanteAdmin.strings.confirmOverwrite || 'This will overwrite your current settings.'))) {
1639 return;
1640 }
1641
1642 $.ajax({
1643 url: vigilanteAdmin.ajaxUrl,
1644 type: 'POST',
1645 data: {
1646 action: 'vigilante_import_settings',
1647 nonce: vigilanteAdmin.nonce,
1648 settings: e.target.result
1649 },
1650 success: function(response) {
1651 if (response.success) {
1652 Vigilante_Admin.showNotice('success', response.data);
1653 setTimeout(function() {
1654 location.reload();
1655 }, 1000);
1656 } else {
1657 Vigilante_Admin.showNotice('error', response.data || vigilanteAdmin.strings.importFailed);
1658 }
1659 },
1660 error: function() {
1661 Vigilante_Admin.showNotice('error', vigilanteAdmin.strings.importFailed);
1662 }
1663 });
1664 };
1665 reader.readAsText(file);
1666 },
1667
1668 /**
1669 * Handle reset settings
1670 */
1671 handleResetSettings: function(e) {
1672 e.preventDefault();
1673
1674 if (!confirm(vigilanteAdmin.strings.confirm + ' ' + (vigilanteAdmin.strings.confirmResetAll || 'This will reset ALL settings to defaults.'))) {
1675 return;
1676 }
1677
1678 $.ajax({
1679 url: vigilanteAdmin.ajaxUrl,
1680 type: 'POST',
1681 data: {
1682 action: 'vigilante_apply_preset',
1683 nonce: vigilanteAdmin.nonce,
1684 preset: 'reset'
1685 },
1686 success: function(response) {
1687 if (response.success) {
1688 Vigilante_Admin.showNotice('success', vigilanteAdmin.strings.settingsResetDefaults || 'Settings reset to defaults.');
1689 setTimeout(function() {
1690 location.reload();
1691 }, 1000);
1692 } else {
1693 Vigilante_Admin.showNotice('error', response.data);
1694 }
1695 }
1696 });
1697 },
1698
1699 /**
1700 * Handle test headers
1701 */
1702 handleTestHeaders: function(e) {
1703 e.preventDefault();
1704
1705 var $btn = $(e.currentTarget);
1706 var $results = $('#vigilante-headers-result');
1707
1708 $btn.prop('disabled', true).html(vigilanteAdmin.strings.testing + ' <span class="vigilante-spinner"></span>');
1709
1710 $.ajax({
1711 url: vigilanteAdmin.ajaxUrl,
1712 type: 'POST',
1713 data: {
1714 action: 'vigilante_test_headers',
1715 nonce: vigilanteAdmin.nonce
1716 },
1717 success: function(response) {
1718 if (response.success) {
1719 Vigilante_Admin.displayHeaderResults(response.data, $results);
1720 } else {
1721 Vigilante_Admin.showNotice('error', response.data);
1722 }
1723 },
1724 complete: function() {
1725 $btn.prop('disabled', false).text(vigilanteAdmin.strings.testHeaders);
1726 }
1727 });
1728 },
1729
1730 /**
1731 * Handle login URL notification button
1732 */
1733 handleNotifyLoginUrl: function(e) {
1734 e.preventDefault();
1735
1736 var $btn = $(e.currentTarget);
1737 var $status = $btn.siblings('.vigilante-login-url-notify-status');
1738
1739 $btn.prop('disabled', true).text(vigilanteAdmin.strings.sending || 'Sending...');
1740 $status.removeClass('success error').text('');
1741
1742 $.ajax({
1743 url: vigilanteAdmin.ajaxUrl,
1744 type: 'POST',
1745 data: {
1746 action: 'vigilante_notify_login_url',
1747 nonce: vigilanteAdmin.nonce
1748 },
1749 success: function(response) {
1750 if (response.success) {
1751 var msg = response.data.sent + ' ' + (vigilanteAdmin.strings.notificationsSent || 'notifications sent');
1752 if (response.data.failed > 0) {
1753 msg += ', ' + response.data.failed + ' ' + (vigilanteAdmin.strings.failed || 'failed');
1754 }
1755 $status.addClass('success').text(msg);
1756 } else {
1757 $status.addClass('error').text(response.data || 'Error');
1758 }
1759 },
1760 error: function() {
1761 $status.addClass('error').text('Error');
1762 },
1763 complete: function() {
1764 $btn.prop('disabled', false).text(vigilanteAdmin.strings.sendNotification || 'Send notification now');
1765 }
1766 });
1767 },
1768
1769 /**
1770 * Toggle login URL notification section based on URL input
1771 */
1772 handleLoginUrlToggle: function() {
1773 var hasUrl = $('#vigilante_custom_login_url').val().trim().length > 0;
1774 $('.vigilante-login-url-notify-wrapper').toggleClass('vigilante-login-url-notify-disabled', !hasUrl);
1775 $('.vigilante-login-url-preview').toggle(hasUrl);
1776 },
1777
1778 /**
1779 * Display header test results
1780 */
1781 displayHeaderResults: function(results, $container) {
1782 var gradeClass = 'vigilante-grade-' + results.grade.toLowerCase();
1783 var html = '<div class="vigilante-security-score" style="text-align: center; padding: 20px;">';
1784 html += '<div class="vigilante-score-circle ' + gradeClass + '">';
1785 html += '<span class="vigilante-grade">' + results.grade + '</span>';
1786 html += '</div>';
1787 html += '<p style="text-align: center;"><strong>' + vigilanteAdmin.strings.score + ':</strong> ' + Math.round(results.score) + '%</p>';
1788 html += '</div>';
1789
1790 if (results.headers.length > 0) {
1791 html += '<p><strong>' + vigilanteAdmin.strings.enabledHeaders + ':</strong></p><ul>';
1792 results.headers.forEach(function(header) {
1793 html += '<li class="enabled">&#10003; ' + header + '</li>';
1794 });
1795 html += '</ul>';
1796 }
1797
1798 if (results.missing.length > 0) {
1799 html += '<p><strong>' + vigilanteAdmin.strings.missingHeaders + ':</strong></p><ul>';
1800 results.missing.forEach(function(header) {
1801 html += '<li class="missing">&#10007; ' + header + '</li>';
1802 });
1803 html += '</ul>';
1804 }
1805
1806 if (results.warnings && results.warnings.length > 0) {
1807 html += '<p><strong>' + vigilanteAdmin.strings.warnings + ':</strong></p><ul>';
1808 results.warnings.forEach(function(warning) {
1809 html += '<li class="warning">&#9888; ' + warning + '</li>';
1810 });
1811 html += '</ul>';
1812 }
1813
1814 $container.html(html).addClass('visible');
1815 },
1816
1817 /**
1818 * Handle activity log filter
1819 */
1820 handleLogFilter: function() {
1821 this.logPage = 1;
1822 this.loadActivityLogs();
1823 },
1824
1825 /**
1826 * Handle activity log search with debounce (400ms, min 3 chars)
1827 */
1828 handleLogSearch: function() {
1829 var self = this;
1830 clearTimeout(this.logSearchTimer);
1831 this.logSearchTimer = setTimeout(function() {
1832 var term = $('#vigilante-log-search').val().trim();
1833 // Only search with 3+ chars, or clear search when empty
1834 if (term.length >= 3 || term.length === 0) {
1835 self.logPage = 1;
1836 self.loadActivityLogs();
1837 }
1838 }, 400);
1839 },
1840
1841 /**
1842 * Load activity logs via AJAX (with filters and pagination)
1843 */
1844 loadActivityLogs: function() {
1845 var type = $('#vigilante-log-type-filter').val();
1846 var severity = $('#vigilante-log-severity-filter').val();
1847 var method = $('#vigilante-log-method-filter').val();
1848 var search = $('#vigilante-log-search').val();
1849 var $refreshBtn = $('#vigilante-log-refresh');
1850
1851 // Visual feedback
1852 $refreshBtn.prop('disabled', true).addClass('updating-message');
1853
1854 var data = {
1855 action: 'vigilante_get_logs',
1856 nonce: vigilanteAdmin.nonce,
1857 per_page: this.logPerPage,
1858 page: this.logPage,
1859 type: type,
1860 severity: severity
1861 };
1862
1863 if (method) {
1864 data.request_method = method;
1865 }
1866
1867 if (search && search.trim().length >= 3) {
1868 data.search = search.trim();
1869 }
1870
1871 $.ajax({
1872 url: vigilanteAdmin.ajaxUrl,
1873 type: 'POST',
1874 data: data,
1875 success: function(response) {
1876 if (response.success) {
1877 Vigilante_Admin.renderLogTable(response.data.logs);
1878 Vigilante_Admin.updateLogPagination(response.data.total);
1879 } else {
1880 Vigilante_Admin.showNotice('error', response.data || vigilanteAdmin.strings.error);
1881 }
1882 },
1883 error: function() {
1884 Vigilante_Admin.showNotice('error', vigilanteAdmin.strings.error || 'Request failed');
1885 },
1886 complete: function() {
1887 $refreshBtn.prop('disabled', false).removeClass('updating-message');
1888 }
1889 });
1890 },
1891
1892 /**
1893 * Navigate activity log pages
1894 */
1895 goToLogPage: function(direction) {
1896 var $pagination = $('#vigilante-log-pagination');
1897 var total = parseInt($pagination.attr('data-total'), 10) || 0;
1898 var totalPages = Math.ceil(total / this.logPerPage) || 1;
1899
1900 switch (direction) {
1901 case 'first': this.logPage = 1; break;
1902 case 'prev': this.logPage = Math.max(1, this.logPage - 1); break;
1903 case 'next': this.logPage = Math.min(totalPages, this.logPage + 1); break;
1904 case 'last': this.logPage = totalPages; break;
1905 }
1906
1907 this.loadActivityLogs();
1908 },
1909
1910 /**
1911 * Update activity log pagination controls
1912 */
1913 updateLogPagination: function(total) {
1914 var $pagination = $('#vigilante-log-pagination');
1915 total = parseInt(total, 10) || 0;
1916 var totalPages = Math.ceil(total / this.logPerPage) || 1;
1917 var needsNav = total > this.logPerPage;
1918
1919 $pagination.attr('data-total', total);
1920 $pagination.attr('data-page', this.logPage);
1921
1922 var from = total > 0 ? ((this.logPage - 1) * this.logPerPage) + 1 : 0;
1923 var to = Math.min(this.logPage * this.logPerPage, total);
1924
1925 var text = total > 0
1926 ? (vigilanteAdmin.strings.paginationOf || '%1$d–%2$d of %3$d').replace('%1$d', from).replace('%2$d', to).replace('%3$d', total)
1927 : (vigilanteAdmin.strings.paginationEmpty || '0 items');
1928
1929 var prevDisabled = this.logPage <= 1 ? ' disabled' : '';
1930 var nextDisabled = this.logPage >= totalPages ? ' disabled' : '';
1931
1932 var html = '';
1933 if (needsNav) {
1934 html += '<button type="button" class="vigilante-page-first"' + prevDisabled + '>&laquo;</button>';
1935 html += '<button type="button" class="vigilante-page-prev"' + prevDisabled + '>&lsaquo;</button>';
1936 }
1937 html += '<span class="vigilante-page-info">' + text + '</span>';
1938 if (needsNav) {
1939 html += '<button type="button" class="vigilante-page-next"' + nextDisabled + '>&rsaquo;</button>';
1940 html += '<button type="button" class="vigilante-page-last"' + nextDisabled + '>&raquo;</button>';
1941 }
1942
1943 $pagination.html(html);
1944 },
1945
1946 /**
1947 * Render log table
1948 */
1949 renderLogTable: function(logs) {
1950 var $tbody = $('#vigilante-activity-log-table tbody');
1951 $tbody.empty();
1952
1953 if (logs.length === 0) {
1954 $tbody.append('<tr><td colspan="8">' + (vigilanteAdmin.strings.noLogEntries || 'No log entries found.') + '</td></tr>');
1955 return;
1956 }
1957
1958 var self = this;
1959 var typeLabels = (vigilanteAdmin.strings && vigilanteAdmin.strings.eventTypeLabels) || {};
1960 var severityLabels = (vigilanteAdmin.strings && vigilanteAdmin.strings.severityLabels) || {};
1961
1962 logs.forEach(function(log) {
1963 var details = {
1964 id: log.id,
1965 type: log.event_type || '',
1966 action: log.event_action || '',
1967 message: log.event_message || '',
1968 user: log.user_login || '',
1969 ip: log.ip_address || '',
1970 user_agent: log.user_agent || '',
1971 request_method: log.request_method || '',
1972 request_uri: log.request_uri || '',
1973 date: log.created_at || '',
1974 severity: log.severity || 'info',
1975 is_ip_whitelisted: !!log.is_ip_whitelisted,
1976 is_ip_blacklisted: !!log.is_ip_blacklisted,
1977 is_ua_whitelisted: !!log.is_ua_whitelisted,
1978 is_ua_blacklisted: !!log.is_ua_blacklisted
1979 };
1980
1981 var displayType = typeLabels[log.event_type] || log.event_type;
1982 var displaySeverity = severityLabels[log.severity] || log.severity;
1983
1984 var methodHtml = '-';
1985 if (log.request_method) {
1986 methodHtml = '<span class="vigilante-method-label vigilante-method-' + self.escapeHtml(log.request_method.toLowerCase()) + '">' + self.escapeHtml(log.request_method) + '</span>';
1987 }
1988
1989 var row = '<tr class="vigilante-severity-' + self.escapeHtml(log.severity) + '">';
1990 row += '<td>' + self.escapeHtml(log.created_at) + '</td>';
1991 row += '<td>' + self.escapeHtml(displayType) + '</td>';
1992 row += '<td>' + methodHtml + '</td>';
1993 row += '<td><span class="vigilante-badge vigilante-badge-' + self.escapeHtml(log.severity) + '">' + self.escapeHtml(displaySeverity) + '</span></td>';
1994 row += '<td>' + self.escapeHtml(log.event_message) + '</td>';
1995 row += '<td>' + self.escapeHtml(log.user_login || '-') + '</td>';
1996 row += '<td><code>' + self.escapeHtml(log.ip_address) + '</code></td>';
1997 row += '<td><button type="button" class="button button-small vigilante-view-log-details" data-details=\'' + self.escapeHtml(JSON.stringify(details)) + '\'>' + (vigilanteAdmin.strings.view || 'View') + '</button></td>';
1998 row += '</tr>';
1999 $tbody.append(row);
2000 });
2001 },
2002
2003 /**
2004 * Handle export logs
2005 */
2006 handleExportLogs: function(e) {
2007 e.preventDefault();
2008
2009 var $btn = $(e.currentTarget);
2010 var type = $('#vigilante-log-type-filter').val();
2011 var severity = $('#vigilante-log-severity-filter').val();
2012 var method = $('#vigilante-log-method-filter').val();
2013 var search = $('#vigilante-log-search').val();
2014
2015 var data = {
2016 action: 'vigilante_get_logs',
2017 nonce: vigilanteAdmin.nonce,
2018 per_page: 9999
2019 };
2020
2021 // Only add filters if they have values
2022 if (type && type !== '') {
2023 data.type = type;
2024 }
2025 if (severity && severity !== '') {
2026 data.severity = severity;
2027 }
2028 if (method && method !== '') {
2029 data.request_method = method;
2030 }
2031 if (search && search.trim().length >= 3) {
2032 data.search = search.trim();
2033 }
2034
2035 $btn.prop('disabled', true).text(vigilanteAdmin.strings.exporting || 'Exporting...');
2036
2037 $.ajax({
2038 url: vigilanteAdmin.ajaxUrl,
2039 type: 'POST',
2040 data: data,
2041 success: function(response) {
2042 if (response.success && response.data.logs && response.data.logs.length > 0) {
2043 Vigilante_Admin.downloadCSV(response.data.logs);
2044 Vigilante_Admin.showNotice('success', (vigilanteAdmin.strings.logsExported || 'Logs exported (%d entries)').replace('%d', response.data.logs.length));
2045 } else {
2046 Vigilante_Admin.showNotice('warning', vigilanteAdmin.strings.noLogsToExport || 'No logs to export');
2047 }
2048 },
2049 error: function() {
2050 Vigilante_Admin.showNotice('error', vigilanteAdmin.strings.exportFailed || 'Export failed');
2051 },
2052 complete: function() {
2053 $btn.prop('disabled', false).text(vigilanteAdmin.strings.exportLogs || 'Export Logs');
2054 }
2055 });
2056 },
2057
2058 /**
2059 * Download logs as CSV
2060 */
2061 downloadCSV: function(logs) {
2062 var csv = 'Date,Type,Method,Severity,Message,User,IP\n';
2063
2064 logs.forEach(function(log) {
2065 csv += '"' + log.created_at + '",';
2066 csv += '"' + log.event_type + '",';
2067 csv += '"' + (log.request_method || '') + '",';
2068 csv += '"' + log.severity + '",';
2069 csv += '"' + (log.event_message || '').replace(/"/g, '""') + '",';
2070 csv += '"' + (log.user_login || '') + '",';
2071 csv += '"' + log.ip_address + '"\n';
2072 });
2073
2074 var blob = new Blob([csv], { type: 'text/csv' });
2075 var url = URL.createObjectURL(blob);
2076 var a = document.createElement('a');
2077 a.href = url;
2078 a.download = 'activity-log-' + new Date().toISOString().slice(0, 10) + '.csv';
2079 document.body.appendChild(a);
2080 a.click();
2081 document.body.removeChild(a);
2082 URL.revokeObjectURL(url);
2083 },
2084
2085 /**
2086 * Handle create backup
2087 */
2088 handleCreateBackup: function(e) {
2089 e.preventDefault();
2090
2091 var $btn = $(e.currentTarget);
2092 $btn.prop('disabled', true).html(vigilanteAdmin.strings.loading + ' <span class="vigilante-spinner"></span>');
2093
2094 // Direct file download via a hidden form (same pattern as the
2095 // database backup): the server streams a ZIP with wp-config.php and
2096 // .htaccess as an attachment.
2097 var $form = $('<form>', { method: 'POST', action: vigilanteAdmin.ajaxUrl });
2098 $form.append($('<input>', { type: 'hidden', name: 'action', value: 'vigilante_download_files_backup' }));
2099 $form.append($('<input>', { type: 'hidden', name: 'nonce', value: vigilanteAdmin.nonce }));
2100 $('body').append($form);
2101 $form.submit();
2102 $form.remove();
2103
2104 // Re-enable the button after a short delay (download runs in the background).
2105 setTimeout(function() {
2106 $btn.prop('disabled', false).text(vigilanteAdmin.strings.createBackupNow || 'Create Backup Now');
2107 }, 2000);
2108 },
2109
2110 // =================================================================
2111 // DATABASE BACKUP HANDLERS
2112 // =================================================================
2113
2114 /**
2115 * Toggle database backup panel and load tables
2116 */
2117 handleDbBackupToggle: function(e) {
2118 e.preventDefault();
2119
2120 var $panel = $('.vigilante-db-backup-panel');
2121 var $btn = $(e.currentTarget);
2122
2123 if ($panel.is(':visible')) {
2124 $panel.slideUp(200);
2125 return;
2126 }
2127
2128 $panel.slideDown(200);
2129
2130 // Load tables if not already loaded
2131 if ($panel.find('.vigilante-db-tables-content').is(':hidden')) {
2132 this.loadDbTables();
2133 }
2134 },
2135
2136 /**
2137 * Handle settings search input
2138 */
2139 searchActiveIndex: -1,
2140
2141 handleSettingsSearch: function(e) {
2142 var query = ($('#vigilante-settings-search').val() || '').trim().toLowerCase();
2143 var $results = $('#vigilante-settings-search-results');
2144 var index = (vigilanteAdmin.searchIndex || []);
2145
2146 if (query.length < 2) {
2147 $results.attr('hidden', true).empty();
2148 this.searchActiveIndex = -1;
2149 return;
2150 }
2151
2152 // Score every entry and sort before cutting. It used to stop at the
2153 // first 30 matches in index order, so a broad query ("password"
2154 // already returns 19) could hide the very row the user was after
2155 // behind whatever happened to be declared first.
2156 var scored = [];
2157 for (var i = 0; i < index.length; i++) {
2158 var entry = index[i];
2159 var label = (entry.label || '').toLowerCase();
2160 var labelEn = (entry.label_en || '').toLowerCase();
2161 var section = (entry.section || '').toLowerCase();
2162 var tabLabel = (entry.tab_label || '').toLowerCase();
2163 var keywords = (entry.keywords || '').toLowerCase();
2164 var score = 0;
2165
2166 if (label === query || labelEn === query) {
2167 score = 100;
2168 } else if (label.indexOf(query) === 0 || labelEn.indexOf(query) === 0) {
2169 score = 80;
2170 } else if (label.indexOf(query) !== -1 || labelEn.indexOf(query) !== -1) {
2171 score = 60;
2172 } else if (section.indexOf(query) !== -1) {
2173 score = 40;
2174 } else if (tabLabel.indexOf(query) !== -1) {
2175 score = 35;
2176 } else if (keywords.indexOf(query) !== -1) {
2177 score = 30;
2178 }
2179
2180 if (score > 0) {
2181 scored.push({ entry: entry, score: score, order: i });
2182 }
2183 }
2184
2185 scored.sort(function(a, b) {
2186 return (b.score - a.score) || (a.order - b.order);
2187 });
2188
2189 var matches = [];
2190 for (var t = 0; t < scored.length && matches.length < 30; t++) {
2191 matches.push(scored[t].entry);
2192 }
2193 var hiddenCount = scored.length - matches.length;
2194
2195 if (!matches.length) {
2196 $results.html('<div class="vigilante-search-empty">' + (vigilanteAdmin.strings.searchNoResults || 'No results') + '</div>').attr('hidden', false);
2197 this.searchActiveIndex = -1;
2198 return;
2199 }
2200
2201 // Group by tab
2202 var grouped = {};
2203 var tabOrder = [];
2204 for (var j = 0; j < matches.length; j++) {
2205 var m = matches[j];
2206 if (!grouped[m.tab]) {
2207 grouped[m.tab] = { label: m.tab_label, items: [] };
2208 tabOrder.push(m.tab);
2209 }
2210 grouped[m.tab].items.push(m);
2211 }
2212
2213 var html = '';
2214 var flatIdx = 0;
2215 for (var k = 0; k < tabOrder.length; k++) {
2216 var tab = tabOrder[k];
2217 var group = grouped[tab];
2218 html += '<div class="vigilante-search-group">';
2219 html += '<div class="vigilante-search-group-title">' + this.escapeHtml(group.label) + '</div>';
2220 for (var n = 0; n < group.items.length; n++) {
2221 var it = group.items[n];
2222 var base = (vigilanteAdmin.adminUrl || 'admin.php?page=vigilante');
2223 var href = base + '&tab=' + encodeURIComponent(it.tab) + '#' + encodeURIComponent(it.anchor);
2224 var activeClass = flatIdx === 0 ? ' vigilante-search-item-active' : '';
2225 html += '<a class="vigilante-search-item' + activeClass + '" data-idx="' + flatIdx + '" role="option" href="' + href + '">';
2226 html += '<span class="vigilante-search-item-label">' + this.escapeHtml(it.label) + '</span>';
2227 html += '<span class="vigilante-search-item-section">' + this.escapeHtml(it.section) + '</span>';
2228 html += '</a>';
2229 flatIdx++;
2230 }
2231 html += '</div>';
2232 }
2233
2234 if (hiddenCount > 0) {
2235 var moreTpl = vigilanteAdmin.strings.searchMoreResults || '%d more results, refine the search';
2236 html += '<div class="vigilante-search-more">' + this.escapeHtml(moreTpl.replace('%d', hiddenCount)) + '</div>';
2237 }
2238
2239 $results.html(html).attr('hidden', false);
2240 this.searchActiveIndex = 0;
2241 },
2242
2243 /**
2244 * Handle keyboard navigation in search: arrows move highlight, Enter navigates, Escape closes
2245 */
2246 handleSettingsSearchKey: function(e) {
2247 var $items = $('#vigilante-settings-search-results .vigilante-search-item');
2248
2249 if (e.key === 'Escape') {
2250 $('#vigilante-settings-search-results').attr('hidden', true);
2251 $('#vigilante-settings-search').blur();
2252 return;
2253 }
2254
2255 if (!$items.length) return;
2256
2257 if (e.key === 'ArrowDown') {
2258 e.preventDefault();
2259 this.searchActiveIndex = Math.min(this.searchActiveIndex + 1, $items.length - 1);
2260 this.updateSearchActive();
2261 } else if (e.key === 'ArrowUp') {
2262 e.preventDefault();
2263 this.searchActiveIndex = Math.max(this.searchActiveIndex - 1, 0);
2264 this.updateSearchActive();
2265 } else if (e.key === 'Home') {
2266 e.preventDefault();
2267 this.searchActiveIndex = 0;
2268 this.updateSearchActive();
2269 } else if (e.key === 'End') {
2270 e.preventDefault();
2271 this.searchActiveIndex = $items.length - 1;
2272 this.updateSearchActive();
2273 } else if (e.key === 'Enter') {
2274 e.preventDefault();
2275 var idx = this.searchActiveIndex >= 0 ? this.searchActiveIndex : 0;
2276 var $target = $items.eq(idx);
2277 if ($target.length) {
2278 window.location.href = $target.attr('href');
2279 }
2280 }
2281 },
2282
2283 /**
2284 * Sync active highlight when user hovers a search result
2285 */
2286 handleSettingsSearchHover: function(e) {
2287 var idx = parseInt($(e.currentTarget).attr('data-idx'), 10);
2288 if (isNaN(idx)) return;
2289 this.searchActiveIndex = idx;
2290 this.updateSearchActive(false);
2291 },
2292
2293 /**
2294 * Apply the active class to the current index and scroll it into view
2295 */
2296 updateSearchActive: function(scroll) {
2297 var $items = $('#vigilante-settings-search-results .vigilante-search-item');
2298 $items.removeClass('vigilante-search-item-active');
2299 var $active = $items.eq(this.searchActiveIndex);
2300 if (!$active.length) return;
2301 $active.addClass('vigilante-search-item-active');
2302 if (scroll !== false && $active[0] && typeof $active[0].scrollIntoView === 'function') {
2303 $active[0].scrollIntoView({ block: 'nearest' });
2304 }
2305 },
2306
2307 /**
2308 * Format bytes as a human-readable size
2309 */
2310 formatBytes: function(bytes) {
2311 if (!bytes || bytes < 0) return '0 B';
2312 var units = ['B', 'KB', 'MB', 'GB', 'TB'];
2313 var i = 0;
2314 var n = bytes;
2315 while (n >= 1024 && i < units.length - 1) {
2316 n = n / 1024;
2317 i++;
2318 }
2319 return (i === 0 ? n.toFixed(0) : n.toFixed(1)) + ' ' + units[i];
2320 },
2321
2322 /**
2323 * Update DB tables info: count + total size
2324 */
2325 updateDbTablesInfo: function() {
2326 var $boxes = $('.vigilante-db-table-check');
2327 var total = $boxes.length;
2328 if (!total) {
2329 $('.vigilante-db-tables-info').text('');
2330 return;
2331 }
2332 var $checked = $boxes.filter(':checked');
2333 var checkedCount = $checked.length;
2334 var bytes = 0;
2335 $checked.each(function() {
2336 bytes += parseInt($(this).attr('data-bytes'), 10) || 0;
2337 });
2338 var sizeStr = Vigilante_Admin.formatBytes(bytes);
2339 var tpl;
2340 if (checkedCount === total) {
2341 tpl = vigilanteAdmin.strings.dbTablesTotal || '%1$d tables total (%2$s)';
2342 $('.vigilante-db-tables-info').text(tpl.replace('%1$d', total).replace('%2$s', sizeStr));
2343 } else {
2344 tpl = vigilanteAdmin.strings.dbTablesSelected || '%1$d tables selected (%2$s)';
2345 $('.vigilante-db-tables-info').text(tpl.replace('%1$d', checkedCount).replace('%2$s', sizeStr));
2346 }
2347 },
2348
2349 /**
2350 * Load database tables via AJAX
2351 */
2352 loadDbTables: function() {
2353 $.ajax({
2354 url: vigilanteAdmin.ajaxUrl,
2355 type: 'POST',
2356 data: {
2357 action: 'vigilante_get_db_tables',
2358 nonce: vigilanteAdmin.nonce
2359 },
2360 success: function(response) {
2361 if (!response.success) {
2362 Vigilante_Admin.showNotice('error', response.data);
2363 return;
2364 }
2365
2366 var data = response.data;
2367 var coreHtml = '';
2368 var otherHtml = '';
2369
2370 // Build core tables checkboxes
2371 if (data.core && data.core.length) {
2372 $.each(data.core, function(i, table) {
2373 coreHtml += '<label class="vigilante-db-table-label">';
2374 coreHtml += '<input type="checkbox" class="vigilante-db-table-check" value="' + table.name + '" data-bytes="' + (table.bytes || 0) + '" checked>';
2375 coreHtml += '<span class="vigilante-db-table-name" title="' + table.name + '">' + table.short + '</span>';
2376 coreHtml += '<span class="vigilante-db-table-meta">' + table.rows + ' rows &middot; ' + table.size + '</span>';
2377 coreHtml += '</label>';
2378 });
2379 }
2380
2381 // Build other tables checkboxes
2382 if (data.other && data.other.length) {
2383 $.each(data.other, function(i, table) {
2384 otherHtml += '<label class="vigilante-db-table-label">';
2385 otherHtml += '<input type="checkbox" class="vigilante-db-table-check" value="' + table.name + '" data-bytes="' + (table.bytes || 0) + '" checked>';
2386 otherHtml += '<span class="vigilante-db-table-name" title="' + table.name + '">' + table.short + '</span>';
2387 otherHtml += '<span class="vigilante-db-table-meta">' + table.rows + ' rows &middot; ' + table.size + '</span>';
2388 otherHtml += '</label>';
2389 });
2390 $('#vigilante-db-other-group').show();
2391 }
2392
2393 $('#vigilante-db-core-tables').html(coreHtml);
2394 $('#vigilante-db-other-tables').html(otherHtml);
2395
2396 Vigilante_Admin.updateDbTablesInfo();
2397
2398 $('.vigilante-db-tables-loading').hide();
2399 $('.vigilante-db-tables-content').show();
2400 }
2401 });
2402 },
2403
2404 /**
2405 * Select/deselect all tables
2406 */
2407 handleDbSelectAll: function(e) {
2408 var checked = $(e.currentTarget).prop('checked');
2409 $('.vigilante-db-table-check').prop('checked', checked);
2410 this.updateDbTablesInfo();
2411 },
2412
2413 /**
2414 * Update select-all state when individual checkbox changes
2415 */
2416 handleDbTableCheck: function() {
2417 var total = $('.vigilante-db-table-check').length;
2418 var checked = $('.vigilante-db-table-check:checked').length;
2419 $('#vigilante-db-select-all').prop('checked', total === checked);
2420 this.updateDbTablesInfo();
2421 },
2422
2423 /**
2424 * Download database backup
2425 */
2426 handleDbBackupDownload: function(e) {
2427 e.preventDefault();
2428
2429 var tables = [];
2430 $('.vigilante-db-table-check:checked').each(function() {
2431 tables.push($(this).val());
2432 });
2433
2434 if (tables.length === 0) {
2435 Vigilante_Admin.showNotice('error', vigilanteAdmin.strings.dbBackupNoTables);
2436 return;
2437 }
2438
2439 var $btn = $(e.currentTarget);
2440 $btn.prop('disabled', true).html(vigilanteAdmin.strings.dbBackupDownloading + ' <span class="vigilante-spinner"></span>');
2441
2442 // Submit via hidden form for direct file download
2443 var $form = $('<form>', {
2444 method: 'POST',
2445 action: vigilanteAdmin.ajaxUrl
2446 });
2447
2448 $form.append($('<input>', { type: 'hidden', name: 'action', value: 'vigilante_download_db_backup' }));
2449 $form.append($('<input>', { type: 'hidden', name: 'nonce', value: vigilanteAdmin.nonce }));
2450 $form.append($('<input>', { type: 'hidden', name: 'tables', value: tables.join(',') }));
2451
2452 $('body').append($form);
2453 $form.submit();
2454 $form.remove();
2455
2456 // Re-enable button after a delay (download starts in background)
2457 setTimeout(function() {
2458 $btn.prop('disabled', false).text($btn.data('original-text') || vigilanteAdmin.strings.downloadBackup || 'Download Backup (.zip)');
2459 Vigilante_Admin.showNotice('success', vigilanteAdmin.strings.dbBackupSuccess);
2460 }, 3000);
2461 },
2462
2463 // =================================================================
2464 // DATABASE PREFIX HANDLERS
2465 // =================================================================
2466
2467 /**
2468 * Regenerate random prefix
2469 */
2470 handleDbRegeneratePrefix: function(e) {
2471 e.preventDefault();
2472
2473 var $btn = $(e.currentTarget);
2474 $btn.prop('disabled', true);
2475
2476 $.ajax({
2477 url: vigilanteAdmin.ajaxUrl,
2478 type: 'POST',
2479 data: {
2480 action: 'vigilante_generate_prefix',
2481 nonce: vigilanteAdmin.nonce
2482 },
2483 success: function(response) {
2484 if (response.success) {
2485 $('#vigilante-new-prefix').text(response.data.prefix);
2486 } else {
2487 Vigilante_Admin.showNotice('error', response.data);
2488 }
2489 },
2490 complete: function() {
2491 $btn.prop('disabled', false);
2492 }
2493 });
2494 },
2495
2496 /**
2497 * Toggle the change prefix button based on checkbox
2498 */
2499 handleDbPrefixConfirmToggle: function(e) {
2500 var checked = $(e.currentTarget).prop('checked');
2501 $('.vigilante-db-change-prefix').prop('disabled', !checked);
2502 },
2503
2504 /**
2505 * Change database prefix
2506 */
2507 handleDbChangePrefix: function(e) {
2508 e.preventDefault();
2509
2510 // Verify checkbox is checked
2511 if (!$('#vigilante-prefix-backup-confirm').prop('checked')) {
2512 Vigilante_Admin.showNotice('error', vigilanteAdmin.strings.dbPrefixCheckbox);
2513 return;
2514 }
2515
2516 var newPrefix = $('#vigilante-new-prefix').text().trim();
2517
2518 if (!confirm(vigilanteAdmin.strings.dbPrefixConfirm)) {
2519 return;
2520 }
2521
2522 var $btn = $(e.currentTarget);
2523 $btn.prop('disabled', true).html(vigilanteAdmin.strings.dbPrefixChanging + ' <span class="vigilante-spinner"></span>');
2524
2525 $.ajax({
2526 url: vigilanteAdmin.ajaxUrl,
2527 type: 'POST',
2528 data: {
2529 action: 'vigilante_change_prefix',
2530 nonce: vigilanteAdmin.nonce,
2531 prefix: newPrefix
2532 },
2533 success: function(response) {
2534 if (response.success) {
2535 Vigilante_Admin.showNotice('success', vigilanteAdmin.strings.dbPrefixSuccess);
2536 // Reload page after prefix change (session will still work)
2537 setTimeout(function() {
2538 location.reload();
2539 }, 2000);
2540 } else {
2541 Vigilante_Admin.showNotice('error', response.data);
2542 $btn.prop('disabled', false).text($btn.data('original-text'));
2543 }
2544 },
2545 error: function() {
2546 Vigilante_Admin.showNotice('error', vigilanteAdmin.strings.error);
2547 $btn.prop('disabled', false).text($btn.data('original-text'));
2548 }
2549 });
2550 },
2551
2552 /**
2553 * Show notice
2554 */
2555 showNotice: function(type, message) {
2556 // Remove any existing notices first.
2557 $('.vigilante-notice').remove();
2558
2559 var $notice = $('<div class="vigilante-notice vigilante-notice-' + type + '">' + message + '</div>');
2560 $('.vigilante-main').prepend($notice);
2561
2562 // Scroll to top of the settings area so user sees the notice.
2563 $('html, body').animate({
2564 scrollTop: $('.vigilante-admin-wrap').offset().top - 50
2565 }, 300);
2566
2567 setTimeout(function() {
2568 $notice.fadeOut(function() {
2569 $(this).remove();
2570 });
2571 }, 5000);
2572 },
2573
2574 /**
2575 * Handle view log details
2576 */
2577 handleViewLogDetails: function(e) {
2578 e.preventDefault();
2579 e.stopPropagation();
2580
2581 var $btn = $(e.currentTarget);
2582 var detailsStr = $btn.attr('data-details');
2583
2584 if (!detailsStr) {
2585 return;
2586 }
2587
2588 var details;
2589 try {
2590 details = JSON.parse(detailsStr);
2591 } catch (err) {
2592 return;
2593 }
2594
2595 var html = '';
2596
2597 var s = vigilanteAdmin.strings;
2598
2599 // -- Section: Request --
2600 html += '<div class="vigilante-popup-section">';
2601 html += '<h4 class="vigilante-popup-section-title">' + this.escapeHtml(s.logRequest || 'Request') + '</h4>';
2602 html += '<table class="vigilante-details-table">';
2603 html += '<tr><th>' + this.escapeHtml(s.logDate || 'Date') + '</th><td>' + this.escapeHtml(details.date) + '</td></tr>';
2604 if (details.request_method) {
2605 html += '<tr><th>' + this.escapeHtml(s.logMethod || 'Method') + '</th><td><span class="vigilante-method-label vigilante-method-' + this.escapeHtml(details.request_method.toLowerCase()) + '">' + this.escapeHtml(details.request_method) + '</span></td></tr>';
2606 }
2607 html += '<tr><th>' + this.escapeHtml(s.logType || 'Type') + '</th><td>' + this.escapeHtml(details.type) + '</td></tr>';
2608 html += '<tr><th>' + this.escapeHtml(s.logAction || 'Action') + '</th><td>' + this.escapeHtml(details.action || '-') + '</td></tr>';
2609 html += '<tr><th>' + this.escapeHtml(s.logSeverity || 'Severity') + '</th><td><span class="vigilante-badge vigilante-badge-' + this.escapeHtml(details.severity || 'info') + '">' + this.escapeHtml(details.severity || 'info') + '</span></td></tr>';
2610 html += '<tr><th>' + this.escapeHtml(s.logMessage || 'Message') + '</th><td>' + this.escapeHtml(details.message) + '</td></tr>';
2611 if (details.request_uri) {
2612 html += '<tr><th>' + this.escapeHtml(s.logRequestUri || 'Address') + '</th><td class="vigilante-ua-cell"><code>' + this.escapeHtml(details.request_uri) + '</code></td></tr>';
2613 }
2614 html += '</table>';
2615 html += '</div>';
2616
2617 // -- Section: Client --
2618 html += '<div class="vigilante-popup-section">';
2619 html += '<h4 class="vigilante-popup-section-title">' + this.escapeHtml(s.logClient || 'Client') + '</h4>';
2620 html += '<table class="vigilante-details-table">';
2621 html += '<tr><th>' + this.escapeHtml(s.logUser || 'User') + '</th><td>' + this.escapeHtml(details.user || '-') + '</td></tr>';
2622
2623 // IP with lookup link
2624 if (details.ip && details.ip !== '0.0.0.0') {
2625 var ipEscaped = this.escapeHtml(details.ip);
2626 html += '<tr><th>' + this.escapeHtml(s.logIpAddress || 'IP Address') + '</th><td>';
2627 html += '<code>' + ipEscaped + '</code> ';
2628 html += '<a href="https://abuseipdb.com/check/' + encodeURIComponent(details.ip) + '" target="_blank" rel="noopener noreferrer" class="vigilante-ip-lookup" title="Lookup IP">';
2629 html += '<span class="dashicons dashicons-search"></span></a>';
2630 html += '</td></tr>';
2631 } else {
2632 html += '<tr><th>' + this.escapeHtml(s.logIpAddress || 'IP Address') + '</th><td><code>' + this.escapeHtml(details.ip) + '</code></td></tr>';
2633 }
2634
2635 if (details.user_agent) {
2636 html += '<tr><th>' + this.escapeHtml(s.logUserAgent || 'User Agent') + '</th><td class="vigilante-ua-cell"><code>' + this.escapeHtml(details.user_agent) + '</code></td></tr>';
2637 }
2638 html += '</table>';
2639
2640 // Action buttons for IP and UA
2641 html += '<div class="vigilante-popup-actions">';
2642 if (details.ip && details.ip !== '0.0.0.0') {
2643 html += '<span class="vigilante-popup-actions-label">' + this.escapeHtml(s.logIpLabel || 'IP:') + '</span>';
2644 if (details.is_ip_whitelisted) {
2645 html += '<button type="button" class="button button-small vigilante-btn-added" disabled><span class="dashicons dashicons-yes-alt"></span> ' + this.escapeHtml(s.logInWhitelist || 'In whitelist') + '</button> ';
2646 } else {
2647 html += '<button type="button" class="button button-small vigilante-add-to-list" data-item-type="ip" data-list-type="whitelist" data-value="' + this.escapeHtml(details.ip) + '"><span class="dashicons dashicons-yes-alt"></span> ' + this.escapeHtml(s.logWhitelist || 'Whitelist') + '</button> ';
2648 }
2649 if (details.is_ip_blacklisted) {
2650 html += '<button type="button" class="button button-small vigilante-btn-added" disabled><span class="dashicons dashicons-dismiss"></span> ' + this.escapeHtml(s.logInBlacklist || 'In blacklist') + '</button> ';
2651 } else {
2652 html += '<button type="button" class="button button-small vigilante-add-to-list vigilante-btn-danger" data-item-type="ip" data-list-type="blacklist" data-value="' + this.escapeHtml(details.ip) + '"><span class="dashicons dashicons-dismiss"></span> ' + this.escapeHtml(s.logBlacklist || 'Blacklist') + '</button> ';
2653 }
2654 }
2655 if (details.user_agent) {
2656 html += '<span class="vigilante-popup-actions-label">' + this.escapeHtml(s.logUaLabel || 'UA:') + '</span>';
2657 if (details.is_ua_whitelisted) {
2658 html += '<button type="button" class="button button-small vigilante-btn-added" disabled><span class="dashicons dashicons-yes-alt"></span> ' + this.escapeHtml(s.logInWhitelist || 'In whitelist') + '</button> ';
2659 } else {
2660 html += '<button type="button" class="button button-small vigilante-add-to-list" data-item-type="ua" data-list-type="whitelist" data-value="' + this.escapeHtml(details.user_agent) + '"><span class="dashicons dashicons-yes-alt"></span> ' + this.escapeHtml(s.logWhitelist || 'Whitelist') + '</button> ';
2661 }
2662 if (details.is_ua_blacklisted) {
2663 html += '<button type="button" class="button button-small vigilante-btn-added" disabled><span class="dashicons dashicons-dismiss"></span> ' + this.escapeHtml(s.logInBlacklist || 'In blacklist') + '</button>';
2664 } else {
2665 html += '<button type="button" class="button button-small vigilante-add-to-list vigilante-btn-danger" data-item-type="ua" data-list-type="blacklist" data-value="' + this.escapeHtml(details.user_agent) + '"><span class="dashicons dashicons-dismiss"></span> ' + this.escapeHtml(s.logBlacklist || 'Blacklist') + '</button>';
2666 }
2667 }
2668 html += '</div>';
2669 html += '<div class="vigilante-popup-feedback" style="display:none;"></div>';
2670 html += '</div>';
2671
2672 // Event ID for reference
2673 html += '<div class="vigilante-popup-footer">';
2674 html += '<span class="vigilante-popup-id">ID: ' + this.escapeHtml(details.id) + '</span>';
2675 html += '</div>';
2676
2677 $('#vigilante-log-details-content').html(html);
2678 $('#vigilante-log-details-modal').fadeIn(200);
2679 },
2680
2681 /**
2682 * Handle adding IP or UA to firewall whitelist/blacklist
2683 */
2684 handleAddToFirewallList: function(e) {
2685 e.preventDefault();
2686 var $btn = $(e.currentTarget);
2687 var itemType = $btn.data('item-type');
2688 var listType = $btn.data('list-type');
2689 // attr(), not data(): jQuery runs JSON.parse on values that look like
2690 // JSON, so a User-Agent such as {"a":1} would arrive as an object.
2691 var value = $btn.attr('data-value');
2692
2693 if (!itemType || !listType || !value) {
2694 return;
2695 }
2696
2697 $btn.prop('disabled', true);
2698
2699 var self = this;
2700 $.ajax({
2701 url: vigilanteAdmin.ajaxUrl,
2702 type: 'POST',
2703 data: {
2704 action: 'vigilante_add_to_firewall_list',
2705 nonce: vigilanteAdmin.nonce,
2706 item_type: itemType,
2707 list_type: listType,
2708 value: value
2709 },
2710 success: function(response) {
2711 var $feedback = $('.vigilante-popup-feedback');
2712 if (response.success) {
2713 $btn.text(vigilanteAdmin.strings.logAdded || 'Added!').addClass('vigilante-btn-added');
2714 $feedback.html('<span class="vigilante-popup-msg vigilante-popup-msg-success">' + response.data + '</span>').slideDown(150);
2715 } else {
2716 $btn.prop('disabled', false);
2717 $feedback.html('<span class="vigilante-popup-msg vigilante-popup-msg-warning">' + (response.data || vigilanteAdmin.strings.logErrorAddingToList || 'Error adding to list') + '</span>').slideDown(150);
2718 }
2719 },
2720 error: function() {
2721 $btn.prop('disabled', false);
2722 $('.vigilante-popup-feedback').html('<span class="vigilante-popup-msg vigilante-popup-msg-error">' + (vigilanteAdmin.strings.logRequestFailed || 'Request failed') + '</span>').slideDown(150);
2723 }
2724 });
2725 },
2726
2727 /**
2728 * Handle unblock firewall IP
2729 */
2730 handleUnblockFirewallIp: function(e) {
2731 var $btn = $(e.currentTarget);
2732 var ip = $btn.data('ip');
2733
2734 if (!confirm(vigilanteAdmin.strings.confirmUnblockIp || 'Unblock this IP?')) {
2735 return;
2736 }
2737
2738 $btn.prop('disabled', true).text(vigilanteAdmin.strings.loading || 'Loading...');
2739
2740 $.ajax({
2741 url: vigilanteAdmin.ajaxUrl,
2742 type: 'POST',
2743 data: {
2744 action: 'vigilante_unblock_firewall_ip',
2745 nonce: vigilanteAdmin.nonce,
2746 ip: ip
2747 },
2748 success: function(response) {
2749 if (response.success) {
2750 $btn.closest('tr').fadeOut(300, function() {
2751 var $tbody = $(this).closest('tbody');
2752 $(this).remove();
2753 // Hide the whole section if no more blocked IPs
2754 if ($tbody.children('tr').length === 0) {
2755 $tbody.closest('.vigilante-lockout-section').fadeOut(300);
2756 }
2757 });
2758 } else {
2759 alert(response.data || 'Error');
2760 $btn.prop('disabled', false).text(vigilanteAdmin.strings.unblock || 'Unblock');
2761 }
2762 },
2763 error: function() {
2764 $btn.prop('disabled', false).text(vigilanteAdmin.strings.unblock || 'Unblock');
2765 }
2766 });
2767 },
2768
2769 /**
2770 * Handle close modal
2771 */
2772 handleCloseModal: function(e) {
2773 if ($(e.target).hasClass('vigilante-modal') || $(e.target).hasClass('vigilante-modal-close')) {
2774 $('.vigilante-modal').hide();
2775 }
2776 },
2777
2778 /**
2779 * Escape HTML
2780 */
2781 escapeHtml: function(text) {
2782 if (text === null || text === undefined) return '';
2783 if (typeof text !== 'string') {
2784 text = String(text);
2785 }
2786 // Quotes must be encoded too: this helper is also used in attribute
2787 // position, where an unescaped quote closes the attribute early.
2788 return text
2789 .replace(/&/g, '&amp;')
2790 .replace(/</g, '&lt;')
2791 .replace(/>/g, '&gt;')
2792 .replace(/"/g, '&quot;')
2793 .replace(/'/g, '&#039;');
2794 },
2795
2796 /**
2797 * Debounce function
2798 */
2799 debounce: function(func, wait) {
2800 var timeout;
2801 return function() {
2802 var context = this, args = arguments;
2803 clearTimeout(timeout);
2804 timeout = setTimeout(function() {
2805 func.apply(context, args);
2806 }, wait);
2807 };
2808 },
2809
2810 // =================================================================
2811 // Force Password Reset functionality
2812 // =================================================================
2813
2814 /**
2815 * Selected users for password reset
2816 */
2817 selectedPasswordResetUsers: [],
2818
2819 /**
2820 * Initialize password reset handlers
2821 */
2822 initPasswordReset: function() {
2823 var self = this;
2824
2825 // User search for password reset
2826 var searchTimeout;
2827 $(document).on('input', '#vigilante-password-reset-search', function() {
2828 var query = $(this).val();
2829 clearTimeout(searchTimeout);
2830
2831 if (query.length < 2) {
2832 $('#vigilante-password-reset-results').hide().empty();
2833 return;
2834 }
2835
2836 searchTimeout = setTimeout(function() {
2837 self.searchUsersForPasswordReset(query);
2838 }, 300);
2839 });
2840
2841 // Close search results when clicking outside
2842 $(document).on('click', function(e) {
2843 if (!$(e.target).closest('.vigilante-user-search-wrapper').length) {
2844 $('#vigilante-password-reset-results').hide();
2845 }
2846 });
2847
2848 // Reset selected users button
2849 $(document).on('click', '#vigilante-reset-selected-users', function(e) {
2850 e.preventDefault();
2851 self.forceResetSelectedUsers();
2852 });
2853
2854 // Reset all users button
2855 $(document).on('click', '#vigilante-reset-all-users', function(e) {
2856 e.preventDefault();
2857 self.forceResetAllUsers();
2858 });
2859
2860 // Reset by role - checkbox change
2861 $(document).on('change', '.vigilante-reset-role-checkbox', function() {
2862 self.updateRoleResetSummary();
2863 });
2864
2865 // Reset by role button
2866 $(document).on('click', '#vigilante-reset-by-role', function(e) {
2867 e.preventDefault();
2868 self.forceResetByRoles();
2869 });
2870 },
2871
2872 /**
2873 * Search users for password reset
2874 */
2875 searchUsersForPasswordReset: function(query) {
2876 var self = this;
2877 var $results = $('#vigilante-password-reset-results');
2878
2879 $.ajax({
2880 url: vigilanteAdmin.ajaxUrl,
2881 type: 'POST',
2882 data: {
2883 action: 'vigilante_search_users_password_reset',
2884 nonce: vigilanteAdmin.nonce,
2885 query: query
2886 },
2887 success: function(response) {
2888 if (response.success && response.data.length > 0) {
2889 var html = '<ul class="vigilante-user-search-list">';
2890 response.data.forEach(function(user) {
2891 var isSelected = self.selectedPasswordResetUsers.indexOf(user.ID) !== -1;
2892 html += '<li data-user-id="' + user.ID + '" class="' + (isSelected ? 'selected' : '') + '">';
2893 html += '<img src="' + self.escapeHtml(user.avatar) + '" alt="" class="vigilante-user-avatar">';
2894 html += '<div class="vigilante-user-info">';
2895 html += '<strong>' + self.escapeHtml(user.display_name) + '</strong>';
2896 html += '<br><small>' + self.escapeHtml(user.user_login) + ' - ' + self.escapeHtml(user.user_email) + '</small>';
2897 html += '<br><small class="vigilante-user-roles">' + self.escapeHtml(user.roles) + '</small>';
2898 html += '</div>';
2899 html += '</li>';
2900 });
2901 html += '</ul>';
2902 $results.html(html).show();
2903
2904 // Handle user selection
2905 $results.find('li').on('click', function() {
2906 var userId = parseInt($(this).data('user-id'));
2907 var userName = $(this).find('strong').text();
2908 var userEmail = $(this).find('small').first().text();
2909 self.togglePasswordResetUser(userId, userName, userEmail);
2910 $(this).toggleClass('selected');
2911 });
2912 } else {
2913 $results.html('<p class="vigilante-no-results">' + (vigilanteAdmin.strings.noUsersFoundSearch || 'No users found') + '</p>').show();
2914 }
2915 }
2916 });
2917 },
2918
2919 /**
2920 * Toggle user selection for password reset
2921 */
2922 togglePasswordResetUser: function(userId, userName, userEmail) {
2923 var index = this.selectedPasswordResetUsers.indexOf(userId);
2924 var $selectedContainer = $('#vigilante-password-reset-selected');
2925 var $list = $selectedContainer.find('.vigilante-selected-users-list');
2926 var $btn = $('#vigilante-reset-selected-users');
2927
2928 if (index === -1) {
2929 // Add user
2930 this.selectedPasswordResetUsers.push(userId);
2931 $list.append(
2932 '<li data-user-id="' + userId + '">' +
2933 '<span>' + this.escapeHtml(userName) + '</span>' +
2934 '<button type="button" class="vigilante-remove-user" title="Remove">&times;</button>' +
2935 '</li>'
2936 );
2937 } else {
2938 // Remove user
2939 this.selectedPasswordResetUsers.splice(index, 1);
2940 $list.find('li[data-user-id="' + userId + '"]').remove();
2941 }
2942
2943 // Update UI
2944 if (this.selectedPasswordResetUsers.length > 0) {
2945 $selectedContainer.show();
2946 $btn.prop('disabled', false);
2947 } else {
2948 $selectedContainer.hide();
2949 $btn.prop('disabled', true);
2950 }
2951
2952 // Handle remove button click
2953 $list.find('.vigilante-remove-user').off('click').on('click', function() {
2954 var uid = $(this).closest('li').data('user-id');
2955 var idx = Vigilante_Admin.selectedPasswordResetUsers.indexOf(uid);
2956 if (idx !== -1) {
2957 Vigilante_Admin.selectedPasswordResetUsers.splice(idx, 1);
2958 }
2959 $(this).closest('li').remove();
2960 $('#vigilante-password-reset-results').find('li[data-user-id="' + uid + '"]').removeClass('selected');
2961
2962 if (Vigilante_Admin.selectedPasswordResetUsers.length === 0) {
2963 $selectedContainer.hide();
2964 $btn.prop('disabled', true);
2965 }
2966 });
2967 },
2968
2969 /**
2970 * Force reset for selected users
2971 */
2972 forceResetSelectedUsers: function() {
2973 var self = this;
2974
2975 if (this.selectedPasswordResetUsers.length === 0) {
2976 return;
2977 }
2978
2979 var currentUserId = parseInt(vigilanteAdmin.currentUserId || 0);
2980 var resettingSelf = this.selectedPasswordResetUsers.indexOf(currentUserId) !== -1;
2981
2982 var confirmMsg = (vigilanteAdmin.strings.confirmForceReset || 'Force password reset for %d user(s)? A password reset email will be sent to each user.').replace('%d', this.selectedPasswordResetUsers.length);
2983 if (resettingSelf) {
2984 confirmMsg += '\n\n' + (vigilanteAdmin.strings.warningResettingSelf || 'WARNING: You are including yourself. Your session will end and you will need to set a new password.');
2985 }
2986
2987 if (!confirm(confirmMsg)) {
2988 return;
2989 }
2990
2991 var $btn = $('#vigilante-reset-selected-users');
2992 $btn.prop('disabled', true).text(vigilanteAdmin.strings.processing || 'Processing...');
2993
2994 $.ajax({
2995 url: vigilanteAdmin.ajaxUrl,
2996 type: 'POST',
2997 data: {
2998 action: 'vigilante_force_password_reset',
2999 nonce: vigilanteAdmin.nonce,
3000 user_ids: this.selectedPasswordResetUsers
3001 },
3002 success: function(response) {
3003 if (response.success) {
3004 self.showNotice('success', response.data.message);
3005
3006 // Clear selection
3007 self.selectedPasswordResetUsers = [];
3008 $('#vigilante-password-reset-selected').hide().find('.vigilante-selected-users-list').empty();
3009 $('#vigilante-password-reset-search').val('');
3010 $('#vigilante-password-reset-results').hide().empty();
3011
3012 // Reload if resetting self
3013 if (response.data.resetting_self) {
3014 setTimeout(function() {
3015 window.location.href = vigilanteAdmin.logoutUrl || '/wp-login.php';
3016 }, 2000);
3017 } else {
3018 setTimeout(function() {
3019 location.reload();
3020 }, 1500);
3021 }
3022 } else {
3023 self.showNotice('error', response.data);
3024 }
3025 },
3026 error: function() {
3027 self.showNotice('error', vigilanteAdmin.strings.anErrorOccurred || 'An error occurred');
3028 },
3029 complete: function() {
3030 $btn.prop('disabled', false).text(vigilanteAdmin.strings.forceResetSelected || 'Force Reset for Selected Users');
3031 }
3032 });
3033 },
3034
3035 /**
3036 * Force reset for all users
3037 */
3038 forceResetAllUsers: function() {
3039 var self = this;
3040 var includeSelf = $('#vigilante-reset-all-include-self').is(':checked');
3041
3042 var confirmMsg = vigilanteAdmin.strings.confirmForceResetAll || 'This will force ALL users to reset their password. All users will receive a password reset email. Are you sure you want to continue?';
3043 if (includeSelf) {
3044 confirmMsg += '\n\n' + (vigilanteAdmin.strings.warningResettingSelfAll || 'WARNING: You are including yourself. Your session will end immediately.');
3045 }
3046
3047 if (!confirm(confirmMsg)) {
3048 return;
3049 }
3050
3051 var $btn = $('#vigilante-reset-all-users');
3052 $btn.prop('disabled', true).text(vigilanteAdmin.strings.processing || 'Processing...');
3053
3054 $.ajax({
3055 url: vigilanteAdmin.ajaxUrl,
3056 type: 'POST',
3057 data: {
3058 action: 'vigilante_force_password_reset_all',
3059 nonce: vigilanteAdmin.nonce,
3060 include_self: includeSelf ? 1 : 0
3061 },
3062 success: function(response) {
3063 if (response.success) {
3064 self.showNotice('success', response.data.message);
3065
3066 // Reload if resetting self
3067 if (response.data.resetting_self) {
3068 setTimeout(function() {
3069 window.location.href = vigilanteAdmin.logoutUrl || '/wp-login.php';
3070 }, 2000);
3071 } else {
3072 setTimeout(function() {
3073 location.reload();
3074 }, 1500);
3075 }
3076 } else {
3077 self.showNotice('error', response.data);
3078 }
3079 },
3080 error: function() {
3081 self.showNotice('error', vigilanteAdmin.strings.anErrorOccurred || 'An error occurred');
3082 },
3083 complete: function() {
3084 $btn.prop('disabled', false).text(vigilanteAdmin.strings.forceResetAll || 'Force Reset for ALL Users');
3085 }
3086 });
3087 },
3088
3089 /**
3090 * Update role reset summary when checkboxes change
3091 */
3092 updateRoleResetSummary: function() {
3093 var totalCount = 0;
3094 var includesSelf = false;
3095
3096 $('.vigilante-reset-role-checkbox:checked').each(function() {
3097 totalCount += parseInt($(this).data('count') || 0);
3098 if ($(this).closest('label').find('em').length > 0) {
3099 includesSelf = true;
3100 }
3101 });
3102
3103 var $summary = $('#vigilante-reset-role-summary');
3104 var $selfOption = $('#vigilante-reset-role-self-option');
3105 var $btn = $('#vigilante-reset-by-role');
3106
3107 if (totalCount > 0) {
3108 $('#vigilante-reset-role-count').text(totalCount);
3109 $summary.show();
3110 $btn.prop('disabled', false);
3111 } else {
3112 $summary.hide();
3113 $btn.prop('disabled', true);
3114 }
3115
3116 if (includesSelf) {
3117 $selfOption.show();
3118 } else {
3119 $selfOption.hide();
3120 $('#vigilante-reset-role-include-self').prop('checked', false);
3121 }
3122 },
3123
3124 /**
3125 * Force reset for users with selected roles
3126 */
3127 forceResetByRoles: function() {
3128 var self = this;
3129 var roles = [];
3130
3131 $('.vigilante-reset-role-checkbox:checked').each(function() {
3132 roles.push($(this).val());
3133 });
3134
3135 if (roles.length === 0) {
3136 self.showNotice('error', vigilanteAdmin.strings.noRolesSelected || 'Please select at least one role.');
3137 return;
3138 }
3139
3140 var totalCount = 0;
3141 $('.vigilante-reset-role-checkbox:checked').each(function() {
3142 totalCount += parseInt($(this).data('count') || 0);
3143 });
3144
3145 var includeSelf = $('#vigilante-reset-role-include-self').is(':checked');
3146
3147 var confirmMsg = (vigilanteAdmin.strings.confirmForceResetByRole || 'Force password reset for %d user(s) with the selected roles? A password reset email will be sent to each user.').replace('%d', totalCount);
3148 if (includeSelf) {
3149 confirmMsg += '\n\n' + (vigilanteAdmin.strings.warningResettingSelfAll || 'WARNING: You are including yourself. Your session will end immediately.');
3150 }
3151
3152 if (!confirm(confirmMsg)) {
3153 return;
3154 }
3155
3156 var $btn = $('#vigilante-reset-by-role');
3157 $btn.prop('disabled', true).text(vigilanteAdmin.strings.processing || 'Processing...');
3158
3159 $.ajax({
3160 url: vigilanteAdmin.ajaxUrl,
3161 type: 'POST',
3162 data: {
3163 action: 'vigilante_force_password_reset_by_role',
3164 nonce: vigilanteAdmin.nonce,
3165 roles: roles,
3166 include_self: includeSelf ? 1 : 0
3167 },
3168 success: function(response) {
3169 if (response.success) {
3170 self.showNotice('success', response.data.message);
3171
3172 // Clear role checkboxes
3173 $('.vigilante-reset-role-checkbox').prop('checked', false);
3174 self.updateRoleResetSummary();
3175
3176 if (response.data.resetting_self) {
3177 setTimeout(function() {
3178 window.location.href = vigilanteAdmin.logoutUrl || '/wp-login.php';
3179 }, 2000);
3180 } else {
3181 setTimeout(function() {
3182 location.reload();
3183 }, 1500);
3184 }
3185 } else {
3186 self.showNotice('error', response.data);
3187 }
3188 },
3189 error: function() {
3190 self.showNotice('error', vigilanteAdmin.strings.anErrorOccurred || 'An error occurred');
3191 },
3192 complete: function() {
3193 $btn.prop('disabled', false).text(vigilanteAdmin.strings.forceResetByRole || 'Force Reset for Selected Roles');
3194 }
3195 });
3196 },
3197
3198 /**
3199 * Initialize user approval handlers
3200 */
3201 initUserApproval: function() {
3202 var self = this;
3203
3204 // Approve user
3205 $(document).on('click', '.vigilante-approve-user', function() {
3206 var $btn = $(this);
3207 var userId = $btn.data('user-id');
3208 var $row = $btn.closest('tr');
3209
3210 if (!confirm(vigilanteAdmin.strings.confirmApprove || 'Approve this user?')) {
3211 return;
3212 }
3213
3214 $btn.prop('disabled', true).text(vigilanteAdmin.strings.processing || 'Processing...');
3215
3216 $.ajax({
3217 url: vigilanteAdmin.ajaxUrl,
3218 type: 'POST',
3219 data: {
3220 action: 'vigilante_approve_user',
3221 nonce: vigilanteAdmin.nonce,
3222 user_id: userId
3223 },
3224 success: function(response) {
3225 if (response.success) {
3226 self.showNotice('success', response.data.message);
3227 $row.fadeOut(400, function() {
3228 $(this).remove();
3229 self.updatePendingCount();
3230 });
3231 } else {
3232 self.showNotice('error', response.data);
3233 $btn.prop('disabled', false).text(vigilanteAdmin.strings.approve || 'Approve');
3234 }
3235 },
3236 error: function() {
3237 self.showNotice('error', vigilanteAdmin.strings.error);
3238 $btn.prop('disabled', false).text(vigilanteAdmin.strings.approve || 'Approve');
3239 }
3240 });
3241 });
3242
3243 // Reject user
3244 $(document).on('click', '.vigilante-reject-user', function() {
3245 var $btn = $(this);
3246 var userId = $btn.data('user-id');
3247 var $row = $btn.closest('tr');
3248
3249 var reason = prompt(vigilanteAdmin.strings.rejectReason || 'Enter rejection reason (optional):');
3250 if (reason === null) {
3251 return; // Cancelled
3252 }
3253
3254 $btn.prop('disabled', true).text(vigilanteAdmin.strings.processing || 'Processing...');
3255
3256 $.ajax({
3257 url: vigilanteAdmin.ajaxUrl,
3258 type: 'POST',
3259 data: {
3260 action: 'vigilante_reject_user',
3261 nonce: vigilanteAdmin.nonce,
3262 user_id: userId,
3263 reason: reason
3264 },
3265 success: function(response) {
3266 if (response.success) {
3267 self.showNotice('success', response.data.message);
3268 $row.fadeOut(400, function() {
3269 $(this).remove();
3270 self.updatePendingCount();
3271 });
3272 } else {
3273 self.showNotice('error', response.data);
3274 $btn.prop('disabled', false).text(vigilanteAdmin.strings.reject || 'Reject');
3275 }
3276 },
3277 error: function() {
3278 self.showNotice('error', vigilanteAdmin.strings.error);
3279 $btn.prop('disabled', false).text(vigilanteAdmin.strings.reject || 'Reject');
3280 }
3281 });
3282 });
3283 },
3284
3285 /**
3286 * Update pending users count badge
3287 */
3288 updatePendingCount: function() {
3289 var $badge = $('.vigilante-pending-users-section .vigilante-badge-warning');
3290 var $table = $('.vigilante-pending-users-table tbody tr');
3291 var count = $table.length;
3292
3293 if (count === 0) {
3294 $badge.remove();
3295 $('.vigilante-pending-users-table').replaceWith(
3296 '<div class="vigilante-no-lockouts">' +
3297 '<span class="dashicons dashicons-yes-alt"></span>' +
3298 '<p>' + (vigilanteAdmin.strings.noPending || 'No pending registrations.') + '</p>' +
3299 '</div>'
3300 );
3301 } else {
3302 $badge.text(count);
3303 }
3304 },
3305
3306 /**
3307 * Initialize session management handlers
3308 */
3309 initSessionManagement: function() {
3310 var self = this;
3311 var searchTimer = null;
3312 this.selectedSessionUserId = null;
3313
3314 // Search users for session management
3315 $(document).on('input', '#vigilante-session-user-search', function() {
3316 var query = $(this).val();
3317 var $results = $('#vigilante-session-search-results');
3318
3319 clearTimeout(searchTimer);
3320
3321 if (query.length < 2) {
3322 $results.hide().empty();
3323 return;
3324 }
3325
3326 searchTimer = setTimeout(function() {
3327 $.ajax({
3328 url: vigilanteAdmin.ajaxUrl,
3329 type: 'POST',
3330 data: {
3331 action: 'vigilante_search_users_password_reset',
3332 nonce: vigilanteAdmin.nonce,
3333 query: query
3334 },
3335 success: function(response) {
3336 if (response.success && response.data.length > 0) {
3337 var html = '<ul class="vigilante-user-search-list">';
3338 $.each(response.data, function(i, user) {
3339 html += '<li data-user-id="' + user.ID + '">' +
3340 '<img src="' + self.escapeHtml(user.avatar) + '" class="vigilante-user-avatar" alt="">' +
3341 '<div class="vigilante-user-info">' +
3342 '<strong>' + self.escapeHtml(user.display_name) + '</strong><br>' +
3343 '<small>' + self.escapeHtml(user.user_email) + '</small>' +
3344 '</div>' +
3345 '</li>';
3346 });
3347 html += '</ul>';
3348 $results.html(html).show();
3349 } else {
3350 $results.html('<p class="vigilante-no-results">' + (vigilanteAdmin.strings.noUsers || 'No users found') + '</p>').show();
3351 }
3352 }
3353 });
3354 }, 300);
3355 });
3356
3357 // Click handler for user selection in session search
3358 $(document).on('click', '#vigilante-session-search-results li', function() {
3359 var userId = $(this).data('user-id');
3360 var userName = $(this).find('strong').text();
3361 self.loadUserSessions(userId, userName);
3362 $('#vigilante-session-search-results').hide();
3363 $('#vigilante-session-user-search').val(userName);
3364 });
3365
3366 // Revoke single session
3367 $(document).on('click', '.vigilante-revoke-session', function() {
3368 var $btn = $(this);
3369 var userId = $btn.attr('data-user-id');
3370 var token = $btn.attr('data-token');
3371 var $row = $btn.closest('tr');
3372 var $paginatedContainer = $btn.closest('.vigilante-paginated-section');
3373
3374 // Fallback to row token if button token is invalid
3375 if (!token || token.length < 32) {
3376 token = $row.attr('data-token');
3377 }
3378
3379 if (!token || token.length < 32) {
3380 self.showNotice('error', vigilanteAdmin.strings.error || 'Invalid session token');
3381 return;
3382 }
3383
3384 if (!confirm(vigilanteAdmin.strings.confirmRevoke || 'Revoke this session?')) {
3385 return;
3386 }
3387
3388 $btn.prop('disabled', true);
3389
3390 $.ajax({
3391 url: vigilanteAdmin.ajaxUrl,
3392 type: 'POST',
3393 data: {
3394 action: 'vigilante_revoke_session',
3395 nonce: vigilanteAdmin.nonce,
3396 user_id: userId,
3397 token: token
3398 },
3399 success: function(response) {
3400 if (response.success) {
3401 self.showNotice('success', response.data.message);
3402 $row.fadeOut(400, function() {
3403 $(this).remove();
3404 if ($paginatedContainer.length) {
3405 Vigilante_Admin.refreshFilePagination($paginatedContainer);
3406 }
3407 });
3408 } else {
3409 self.showNotice('error', response.data);
3410 $btn.prop('disabled', false);
3411 }
3412 },
3413 error: function() {
3414 self.showNotice('error', vigilanteAdmin.strings.error);
3415 $btn.prop('disabled', false);
3416 }
3417 });
3418 });
3419
3420 // Revoke all other sessions (current user)
3421 $(document).on('click', '.vigilante-revoke-other-sessions', function() {
3422 var $btn = $(this);
3423 var userId = $btn.data('user-id');
3424
3425 if (!confirm(vigilanteAdmin.strings.confirmRevokeAll || 'Revoke all other sessions?')) {
3426 return;
3427 }
3428
3429 $btn.prop('disabled', true).text(vigilanteAdmin.strings.processing || 'Processing...');
3430
3431 $.ajax({
3432 url: vigilanteAdmin.ajaxUrl,
3433 type: 'POST',
3434 data: {
3435 action: 'vigilante_revoke_all_sessions',
3436 nonce: vigilanteAdmin.nonce,
3437 user_id: userId,
3438 include_current: 0
3439 },
3440 success: function(response) {
3441 if (response.success) {
3442 self.showNotice('success', response.data.message);
3443 setTimeout(function() {
3444 location.reload();
3445 }, 1000);
3446 } else {
3447 self.showNotice('error', response.data);
3448 }
3449 },
3450 error: function() {
3451 self.showNotice('error', vigilanteAdmin.strings.error);
3452 },
3453 complete: function() {
3454 $btn.prop('disabled', false).text(vigilanteAdmin.strings.revokeOthers || 'Revoke All Other Sessions');
3455 }
3456 });
3457 });
3458
3459 // Revoke all sessions for a user (admin managing other users)
3460 $(document).on('click', '.vigilante-revoke-all-user-sessions', function() {
3461 var $btn = $(this);
3462
3463 if (!self.selectedSessionUserId) {
3464 return;
3465 }
3466
3467 if (!confirm(vigilanteAdmin.strings.confirmRevokeAllUser || 'Revoke ALL sessions for this user? They will be logged out everywhere.')) {
3468 return;
3469 }
3470
3471 $btn.prop('disabled', true);
3472
3473 $.ajax({
3474 url: vigilanteAdmin.ajaxUrl,
3475 type: 'POST',
3476 data: {
3477 action: 'vigilante_revoke_all_sessions',
3478 nonce: vigilanteAdmin.nonce,
3479 user_id: self.selectedSessionUserId,
3480 include_current: 1
3481 },
3482 success: function(response) {
3483 if (response.success) {
3484 self.showNotice('success', response.data.message);
3485 $('#vigilante-user-sessions-container').hide();
3486 $('#vigilante-session-user-search').val('');
3487 } else {
3488 self.showNotice('error', response.data);
3489 }
3490 },
3491 error: function() {
3492 self.showNotice('error', vigilanteAdmin.strings.error);
3493 },
3494 complete: function() {
3495 $btn.prop('disabled', false);
3496 }
3497 });
3498 });
3499 },
3500
3501 /**
3502 * Load sessions for a specific user
3503 */
3504 loadUserSessions: function(userId, userName) {
3505 var self = this;
3506 this.selectedSessionUserId = userId;
3507 var $container = $('#vigilante-user-sessions-container');
3508 var $list = $('#vigilante-user-sessions-list');
3509
3510 $list.html('<tr><td colspan="4">' + (vigilanteAdmin.strings.loading || 'Loading...') + '</td></tr>');
3511 $container.show();
3512 $('#vigilante-sessions-user-name').text((vigilanteAdmin.strings.sessionsFor || 'Sessions for: ') + userName);
3513
3514 $.ajax({
3515 url: vigilanteAdmin.ajaxUrl,
3516 type: 'POST',
3517 data: {
3518 action: 'vigilante_get_user_sessions',
3519 nonce: vigilanteAdmin.nonce,
3520 user_id: userId
3521 },
3522 success: function(response) {
3523 if (response.success) {
3524 var sessions = response.data.sessions;
3525 if (sessions.length === 0) {
3526 $list.html('<tr><td colspan="4">' + (vigilanteAdmin.strings.noSessions || 'No active sessions') + '</td></tr>');
3527 return;
3528 }
3529
3530 var html = '';
3531 $.each(sessions, function(i, session) {
3532 var loginTime = session.login ? self.timeAgo(session.login) : (vigilanteAdmin.strings.unknown || 'Unknown');
3533 html += '<tr data-token="' + session.token_hash + '">' +
3534 '<td>' + self.escapeHtml(session.browser) + '</td>' +
3535 '<td><code>' + self.escapeHtml(session.ip) + '</code></td>' +
3536 '<td>' + loginTime + '</td>' +
3537 '<td>' +
3538 '<button type="button" class="button button-small vigilante-revoke-session" ' +
3539 'data-user-id="' + userId + '" data-token="' + session.token_hash + '">' +
3540 (vigilanteAdmin.strings.revoke || 'Revoke') +
3541 '</button>' +
3542 '</td>' +
3543 '</tr>';
3544 });
3545 $list.html(html);
3546 } else {
3547 $list.html('<tr><td colspan="4">' + response.data + '</td></tr>');
3548 }
3549 },
3550 error: function() {
3551 $list.html('<tr><td colspan="4">' + vigilanteAdmin.strings.error + '</td></tr>');
3552 }
3553 });
3554 },
3555
3556 /**
3557 * Format timestamp as time ago
3558 */
3559 timeAgo: function(timestamp) {
3560 var seconds = Math.floor((Date.now() / 1000) - timestamp);
3561 var s = vigilanteAdmin.strings;
3562 var intervals = [
3563 { label: s.timeYear || 'year', labelPlural: s.timeYears || 'years', seconds: 31536000 },
3564 { label: s.timeMonth || 'month', labelPlural: s.timeMonths || 'months', seconds: 2592000 },
3565 { label: s.timeDay || 'day', labelPlural: s.timeDays || 'days', seconds: 86400 },
3566 { label: s.timeHour || 'hour', labelPlural: s.timeHours || 'hours', seconds: 3600 },
3567 { label: s.timeMinute || 'minute', labelPlural: s.timeMinutes || 'minutes', seconds: 60 }
3568 ];
3569
3570 for (var i = 0; i < intervals.length; i++) {
3571 var count = Math.floor(seconds / intervals[i].seconds);
3572 if (count >= 1) {
3573 var unit = count > 1 ? intervals[i].labelPlural : intervals[i].label;
3574 return (s.timeAgo || '%1$d %2$s ago').replace('%1$d', count).replace('%2$s', unit);
3575 }
3576 }
3577 return s.justNow || 'Just now';
3578 }
3579 };
3580
3581 /* ---------------------------------------------------------------------
3582 * Security Analyzer (Dashboard widget) — v2.1.0
3583 * ------------------------------------------------------------------ */
3584
3585 var VigilanteAnalyzer = {
3586
3587 $root: null,
3588
3589 init: function() {
3590 this.$root = $('#vigilante-analyzer');
3591 if (!this.$root.length) {
3592 // Widget not present on this page — still run hash focus in case a fix link was followed.
3593 this.hashFocusFlash();
3594 return;
3595 }
3596
3597 // Scan button — 2-phase AJAX.
3598 $(document).on('click', '#vigilante-analyzer-scan', this.handleScan.bind(this));
3599
3600 // Expand/collapse detailed breakdown.
3601 $(document).on('click', '.vigilante-analyzer-toggle', this.handleToggleDetails.bind(this));
3602
3603 // Save weekly cron + email toggle on change.
3604 $(document).on('change',
3605 '.vigilante-analyzer-weekly input[type="checkbox"]',
3606 this.handleSettingsChange.bind(this));
3607
3608 // Pulse the row we landed on if we came from a fix link.
3609 this.hashFocusFlash();
3610
3611 // Upgrade the server-rendered SVG (no-op if already correct).
3612 this.renderSparklineFromData();
3613 },
3614
3615 /**
3616 * Kick off a scan. Phase 'fast' first for instant feedback, then 'slow' for remote checks.
3617 */
3618 handleScan: function(e) {
3619 e.preventDefault();
3620 if (this.isScanning) {
3621 return;
3622 }
3623 this.isScanning = true;
3624
3625 var $btn = $('#vigilante-analyzer-scan');
3626 var originalHtml = $btn.html();
3627 $btn.data('original-html', originalHtml);
3628 $btn.prop('disabled', true)
3629 .html('<span class="dashicons dashicons-update vigilante-analyzer-spin"></span> '
3630 + (vigilanteAdmin.strings.analyzerFastPhase || 'Running fast checks…'));
3631
3632 var self = this;
3633
3634 // Expand the details section so the user sees results pour in.
3635 this.expandDetails(true);
3636
3637 this.runScanPhase('fast')
3638 .done(function(fastReport) {
3639 self.applyReport(fastReport);
3640 $btn.html('<span class="dashicons dashicons-update vigilante-analyzer-spin"></span> '
3641 + (vigilanteAdmin.strings.analyzerSlowPhase || 'Running remote checks…'));
3642
3643 self.runScanPhase('slow')
3644 .done(function(slowReport) {
3645 self.applyReport(slowReport);
3646 if (typeof Vigilante_Admin !== 'undefined' && Vigilante_Admin.showNotice) {
3647 Vigilante_Admin.showNotice('success',
3648 vigilanteAdmin.strings.analyzerScanComplete || 'Security scan complete.');
3649 }
3650 })
3651 .fail(function(msg) {
3652 if (typeof Vigilante_Admin !== 'undefined' && Vigilante_Admin.showNotice) {
3653 Vigilante_Admin.showNotice('error',
3654 msg || vigilanteAdmin.strings.analyzerScanFailed || 'Security scan failed.');
3655 }
3656 })
3657 .always(function() {
3658 $btn.prop('disabled', false).html($btn.data('original-html') || originalHtml);
3659 self.isScanning = false;
3660 });
3661 })
3662 .fail(function(msg) {
3663 $btn.prop('disabled', false).html($btn.data('original-html') || originalHtml);
3664 self.isScanning = false;
3665 if (typeof Vigilante_Admin !== 'undefined' && Vigilante_Admin.showNotice) {
3666 Vigilante_Admin.showNotice('error',
3667 msg || vigilanteAdmin.strings.analyzerScanFailed || 'Security scan failed.');
3668 }
3669 });
3670 },
3671
3672 runScanPhase: function(phase) {
3673 var deferred = $.Deferred();
3674 $.ajax({
3675 url: vigilanteAdmin.ajaxUrl,
3676 type: 'POST',
3677 timeout: 60000,
3678 data: {
3679 action: 'vigilante_analyzer_run',
3680 nonce: vigilanteAdmin.nonce,
3681 phase: phase
3682 }
3683 }).done(function(response) {
3684 if (response && response.success) {
3685 deferred.resolve(response.data);
3686 } else {
3687 deferred.reject(response && response.data ? response.data : null);
3688 }
3689 }).fail(function(xhr, status, err) {
3690 deferred.reject(err || status);
3691 });
3692 return deferred.promise();
3693 },
3694
3695 /**
3696 * Map a 0-100 score percentage to a quality tag {label, slug}, mirroring
3697 * Vigilante_Admin::analyzer_quality_tag() in PHP.
3698 */
3699 qualityTag: function(pct) {
3700 pct = Math.max(0, Math.min(100, parseInt(pct, 10) || 0));
3701 var s = vigilanteAdmin.strings || {};
3702 // "Excellent" is reserved for a perfect score — a single missing point drops to Good.
3703 if (pct === 100) { return { label: s.analyzerQualityExcellent || 'Excellent', slug: 'a' }; }
3704 if (pct >= 70) { return { label: s.analyzerQualityGood || 'Good', slug: 'b' }; }
3705 if (pct >= 50) { return { label: s.analyzerQualityFair || 'Fair', slug: 'c' }; }
3706 if (pct >= 30) { return { label: s.analyzerQualityPoor || 'Poor', slug: 'd' }; }
3707 return { label: s.analyzerQualityCritical || 'Critical', slug: 'e' };
3708 },
3709
3710 /**
3711 * Swap a {a,b,c,d,e} slug modifier class on an element.
3712 */
3713 setQualityClass: function($el, baseClass, slug) {
3714 $el.removeClass(function(i, cls) {
3715 return (cls.match(new RegExp('(^|\\s)' + baseClass + '-[abcde](?=\\s|$)', 'g')) || []).join(' ');
3716 });
3717 $el.addClass(baseClass + '-' + slug);
3718 },
3719
3720 /**
3721 * Merge a phase report into the widget DOM.
3722 */
3723 applyReport: function(report) {
3724 if (!report || typeof report !== 'object') {
3725 return;
3726 }
3727 var $root = this.$root;
3728 var self = this;
3729
3730 // Overall pass/warn/fail counts (summary).
3731 if (report.counts && typeof report.counts === 'object') {
3732 $root.find('[data-role="pass"]').text(report.counts.pass || 0);
3733 $root.find('[data-role="warn"]').text(report.counts.warn || 0);
3734 $root.find('[data-role="fail"]').text(report.counts.fail || 0);
3735 }
3736
3737 // Main score circle + quality tag.
3738 if (report.grade) {
3739 var $card = $root.find('.vigilante-analyzer-score-card');
3740 var $circle = $card.find('.vigilante-score-circle');
3741 var gradeLc = String(report.grade).toLowerCase();
3742 var scoreN = parseInt(report.score, 10) || 0;
3743
3744 if (!$circle.length || $circle.hasClass('vigilante-grade-empty')) {
3745 $circle.remove();
3746 $card.prepend(
3747 '<div class="vigilante-score-circle vigilante-grade-'
3748 + this.escAttr(gradeLc)
3749 + '">'
3750 + '<span class="vigilante-grade">' + this.esc(report.grade) + '</span>'
3751 + '<span class="vigilante-score-text">' + this.esc(scoreN) + '%</span>'
3752 + '</div>'
3753 );
3754 } else {
3755 $circle.removeClass(function(i, cls) {
3756 return (cls.match(/(^|\s)vigilante-grade-\S+/g) || []).join(' ');
3757 }).addClass('vigilante-grade-' + gradeLc);
3758 $circle.find('.vigilante-grade').text(report.grade);
3759 $circle.find('.vigilante-score-text').text(scoreN + '%');
3760 }
3761
3762 // Quality tag in the score card.
3763 var quality = this.qualityTag(scoreN);
3764 var $tag = $root.find('[data-role="quality-tag"]');
3765 if ($tag.length) {
3766 this.setQualityClass($tag, 'vigilante-analyzer-quality', quality.slug);
3767 $tag.text(quality.label);
3768 }
3769 }
3770
3771 // "Last scan" label in the header.
3772 if (report.ran_at) {
3773 var $ranAt = $root.find('[data-role="ran-at"]');
3774 var justNow = vigilanteAdmin.strings.analyzerLastScanJustNow
3775 || 'Last scan just now';
3776 $ranAt.html(
3777 '<span class="dashicons dashicons-clock" aria-hidden="true"></span>'
3778 + this.esc(justNow)
3779 );
3780 }
3781
3782 // Per-category rows: quality pill, state counts, score, bar, and check rows.
3783 if (report.categories && typeof report.categories === 'object') {
3784 $.each(report.categories, function(slug, cat) {
3785 var $cat = $root.find('.vigilante-analyzer-category[data-category="' + slug + '"]');
3786 if (!$cat.length) {
3787 return;
3788 }
3789
3790 var infoOnly = $cat.attr('data-info-only') === '1';
3791 var counts = (cat.counts && typeof cat.counts === 'object') ? cat.counts : {};
3792
3793 if (!infoOnly) {
3794 var earned = parseInt(cat.earned, 10) || 0;
3795 var max = parseInt(cat.max, 10) || 0;
3796 var pct = max > 0 ? Math.round((earned / max) * 100) : 0;
3797 var cq = self.qualityTag(pct);
3798
3799 $cat.find('[data-role="earned"]').text(earned);
3800
3801 var $catQuality = $cat.find('[data-role="category-quality"]');
3802 if ($catQuality.length) {
3803 self.setQualityClass($catQuality, 'vigilante-analyzer-quality', cq.slug);
3804 // Update only the label span; the pill also contains the
3805 // "X/Y tests" counter so a blanket .text() would wipe it.
3806 var $label = $catQuality.find('[data-role="category-quality-label"]');
3807 if ($label.length) {
3808 $label.text(cq.label);
3809 } else {
3810 $catQuality.text(cq.label);
3811 }
3812 }
3813
3814 // "X/Y tests" inside the pill. Total is everything that
3815 // scores (pass + warn + fail), info/skip are excluded
3816 // because they don't move the category score.
3817 var $tests = $cat.find('[data-role="category-tests"]');
3818 if ($tests.length) {
3819 var passed = parseInt(counts.pass, 10) || 0;
3820 var total = passed
3821 + (parseInt(counts.warn, 10) || 0)
3822 + (parseInt(counts.fail, 10) || 0);
3823 var tpl = (vigilanteAdmin.strings && vigilanteAdmin.strings.testsCounter)
3824 || '%1$d/%2$d tests';
3825 $tests.text(tpl.replace('%1$d', passed).replace('%2$d', total));
3826 $tests.attr('data-passed', passed);
3827 $tests.attr('data-total', total);
3828 }
3829
3830 // Progress bar (width + quality color).
3831 var $bar = $cat.find('[data-role="category-bar"]');
3832 if ($bar.length) {
3833 $bar.css('width', pct + '%');
3834 self.setQualityClass($bar, 'vigilante-analyzer-category-bar-fill', cq.slug);
3835 }
3836 }
3837
3838 // State counts — show each chip only when count > 0.
3839 // Info-only categories (like reputation) also show an info count.
3840 self.updateCategoryState($cat, 'pass', parseInt(counts.pass, 10) || 0);
3841 self.updateCategoryState($cat, 'warn', parseInt(counts.warn, 10) || 0);
3842 self.updateCategoryState($cat, 'fail', parseInt(counts.fail, 10) || 0);
3843 if (infoOnly) {
3844 self.updateCategoryState($cat, 'info', parseInt(counts.info, 10) || 0);
3845 // Info-only categories replace the progress bar with a status pill
3846 // ("All clear" when nothing actionable, "N findings" otherwise).
3847 self.updateInfoStatus($cat, counts);
3848 }
3849
3850 // Replace the check rows only for checks this phase actually returned.
3851 if (cat.checks && cat.checks.length) {
3852 var $list = $cat.find('[data-role="check-list"]');
3853 $list.find('.vigilante-analyzer-check-empty').remove();
3854
3855 $.each(cat.checks, function(i, check) {
3856 var $existing = $list.find('[data-check-id="' + check.id + '"]');
3857 var html = self.renderCheckRow(check);
3858 if ($existing.length) {
3859 $existing.replaceWith(html);
3860 } else {
3861 $list.append(html);
3862 }
3863 });
3864 }
3865 });
3866 }
3867 },
3868
3869 /**
3870 * Update a per-category state chip (pass/warn/fail). Adds the chip if it doesn't
3871 * exist yet, updates its number, or removes it when the count is zero.
3872 */
3873 updateCategoryState: function($cat, state, count) {
3874 var $wrap = $cat.find('[data-role="category-states"]');
3875 if (!$wrap.length) {
3876 return;
3877 }
3878 var selector = '.vigilante-analyzer-category-state--' + state;
3879 var $chip = $wrap.find(selector);
3880
3881 if (count > 0) {
3882 if (!$chip.length) {
3883 var iconMap = { pass: 'yes', warn: 'warning', fail: 'no', info: 'info-outline' };
3884 var titleMap = {
3885 pass: 'Passing',
3886 warn: 'Warning',
3887 fail: 'Failing',
3888 info: 'Informational'
3889 };
3890 var title = titleMap[state] || '';
3891 $chip = $(
3892 '<span class="vigilante-analyzer-category-state vigilante-analyzer-category-state--'
3893 + state + '" title="' + this.escAttr(title) + '">'
3894 + '<span data-role="state-' + state + '">0</span>'
3895 + '<span class="dashicons dashicons-' + iconMap[state] + '" aria-hidden="true"></span>'
3896 + '</span>'
3897 );
3898 // Keep order: pass → warn → fail → info.
3899 if (state === 'pass') {
3900 $wrap.prepend($chip);
3901 } else if (state === 'warn') {
3902 var $passChip = $wrap.find('.vigilante-analyzer-category-state--pass');
3903 if ($passChip.length) { $chip.insertAfter($passChip); } else { $wrap.prepend($chip); }
3904 } else if (state === 'fail') {
3905 var $infoChip = $wrap.find('.vigilante-analyzer-category-state--info');
3906 if ($infoChip.length) { $chip.insertBefore($infoChip); } else { $wrap.append($chip); }
3907 } else {
3908 $wrap.append($chip);
3909 }
3910 }
3911 $chip.find('[data-role="state-' + state + '"]').text(count);
3912 } else if ($chip.length) {
3913 $chip.remove();
3914 }
3915 },
3916
3917 /**
3918 * Refresh the "All clear" / "N findings" pill for an info-only category.
3919 * Runs after a scan replaces the counts on the server side.
3920 */
3921 updateInfoStatus: function($cat, counts) {
3922 var $status = $cat.find('[data-role="info-status"]');
3923 if (!$status.length) {
3924 return;
3925 }
3926 var warnN = parseInt(counts.warn, 10) || 0;
3927 var failN = parseInt(counts.fail, 10) || 0;
3928 var issues = warnN + failN;
3929 var strings = (vigilanteAdmin && vigilanteAdmin.strings) || {};
3930
3931 if (issues > 0) {
3932 var template = strings.analyzerInfoFindings || '%d findings';
3933 var label = template.replace('%d', issues);
3934 $status
3935 .removeClass('vigilante-analyzer-category-status--clear')
3936 .addClass('vigilante-analyzer-category-status--attention')
3937 .html(
3938 '<span class="dashicons dashicons-warning" aria-hidden="true"></span>'
3939 + this.esc(label)
3940 );
3941 } else {
3942 var clear = strings.analyzerInfoAllClear || 'All clear';
3943 $status
3944 .removeClass('vigilante-analyzer-category-status--attention')
3945 .addClass('vigilante-analyzer-category-status--clear')
3946 .html(
3947 '<span class="dashicons dashicons-yes-alt" aria-hidden="true"></span>'
3948 + this.esc(clear)
3949 );
3950 }
3951 },
3952
3953 renderCheckRow: function(check) {
3954 var state = check.state || 'skip';
3955 var icons = {
3956 pass: 'yes-alt',
3957 warn: 'warning',
3958 fail: 'dismiss',
3959 info: 'info',
3960 skip: 'minus'
3961 };
3962 var icon = icons[state] || 'minus';
3963
3964 var scoreHtml = '';
3965 var max = parseInt(check.max, 10) || 0;
3966 if (max > 0 && state !== 'info' && state !== 'skip') {
3967 scoreHtml = '<span class="vigilante-analyzer-check-score">'
3968 + this.esc((parseInt(check.score, 10) || 0) + '/' + max)
3969 + '</span>';
3970 }
3971
3972 var fixHtml = '';
3973 if (check.fix_link && (state === 'fail' || state === 'warn')) {
3974 fixHtml = '<a href="' + this.escAttr(check.fix_link) + '" class="vigilante-analyzer-fix-link">'
3975 + this.esc(vigilanteAdmin.strings.analyzerGoToSetting || 'Go to setting')
3976 + '<span class="vigilante-analyzer-fix-arrow" aria-hidden="true">&rarr;</span></a>';
3977 } else if (check.fix_link && state === 'info') {
3978 var isExt = /^https?:\/\//i.test(check.fix_link);
3979 fixHtml = '<a href="' + this.escAttr(check.fix_link) + '" class="vigilante-analyzer-fix-link"'
3980 + (isExt ? ' target="_blank" rel="noopener noreferrer"' : '') + '>'
3981 + this.esc(vigilanteAdmin.strings.analyzerLearnMore || 'Learn more')
3982 + '<span class="vigilante-analyzer-fix-arrow" aria-hidden="true">&rarr;</span></a>';
3983 }
3984
3985 var detailHtml = '';
3986 if (check.detail) {
3987 detailHtml = '<p class="vigilante-analyzer-check-detail">' + this.esc(check.detail) + '</p>';
3988 }
3989
3990 return '<li class="vigilante-analyzer-check vigilante-analyzer-check--' + this.escAttr(state) + '"'
3991 + ' data-check-id="' + this.escAttr(check.id || '') + '">'
3992 + '<span class="vigilante-analyzer-check-icon dashicons dashicons-' + this.escAttr(icon) + '" aria-hidden="true"></span>'
3993 + '<div class="vigilante-analyzer-check-body">'
3994 + '<div class="vigilante-analyzer-check-label">'
3995 + '<span>' + this.esc(check.label || '') + '</span>'
3996 + scoreHtml
3997 + '</div>'
3998 + detailHtml
3999 + fixHtml
4000 + '</div>'
4001 + '</li>';
4002 },
4003
4004 /**
4005 * Expand or collapse the detailed breakdown section.
4006 */
4007 handleToggleDetails: function(e) {
4008 e.preventDefault();
4009 var $btn = $(e.currentTarget);
4010 var expanded = $btn.attr('aria-expanded') === 'true';
4011 this.expandDetails(!expanded);
4012 },
4013
4014 expandDetails: function(expand) {
4015 var $btn = this.$root.find('.vigilante-analyzer-toggle');
4016 var $details = this.$root.find('.vigilante-analyzer-details');
4017 var show = !!expand;
4018
4019 $btn.attr('aria-expanded', show ? 'true' : 'false');
4020
4021 var label = show
4022 ? (vigilanteAdmin.strings.analyzerHideDetails || 'Hide detailed breakdown')
4023 : (vigilanteAdmin.strings.analyzerShowDetails || 'Show detailed breakdown');
4024
4025 // Preserve the chevron element; only swap the label text.
4026 var $chevron = $btn.find('.vigilante-analyzer-toggle-chevron').detach();
4027 if (!$chevron.length) {
4028 $chevron = $('<span class="vigilante-analyzer-toggle-chevron" aria-hidden="true"></span>');
4029 }
4030 $btn.text(label).append(' ').append($chevron);
4031
4032 if (show) {
4033 $details.removeAttr('hidden');
4034 } else {
4035 $details.attr('hidden', 'hidden');
4036 }
4037 },
4038
4039 /**
4040 * Auto-save weekly scan + email toggles.
4041 */
4042 handleSettingsChange: function(e) {
4043 var $input = $(e.currentTarget);
4044 var $weekly = this.$root.find('input[name="security_analyzer[weekly_scan_enabled]"]');
4045 var $email = this.$root.find('input[name="security_analyzer[email_on_regression]"]');
4046
4047 $.ajax({
4048 url: vigilanteAdmin.ajaxUrl,
4049 type: 'POST',
4050 data: {
4051 action: 'vigilante_analyzer_save_settings',
4052 nonce: vigilanteAdmin.nonce,
4053 weekly_scan_enabled: $weekly.is(':checked') ? 1 : 0,
4054 email_on_regression: $email.is(':checked') ? 1 : 0
4055 },
4056 success: function(response) {
4057 if (response && response.success) {
4058 if (typeof Vigilante_Admin !== 'undefined' && Vigilante_Admin.showNotice) {
4059 Vigilante_Admin.showNotice('success',
4060 vigilanteAdmin.strings.analyzerSettingsSaved || 'Analyzer settings saved.');
4061 }
4062 } else {
4063 if (typeof Vigilante_Admin !== 'undefined' && Vigilante_Admin.showNotice) {
4064 Vigilante_Admin.showNotice('error',
4065 (response && response.data) || vigilanteAdmin.strings.error);
4066 }
4067 $input.prop('checked', !$input.is(':checked'));
4068 }
4069 },
4070 error: function() {
4071 if (typeof Vigilante_Admin !== 'undefined' && Vigilante_Admin.showNotice) {
4072 Vigilante_Admin.showNotice('error', vigilanteAdmin.strings.error);
4073 }
4074 $input.prop('checked', !$input.is(':checked'));
4075 }
4076 });
4077 },
4078
4079 /**
4080 * Re-render the sparkline from data-points (no-op if no points).
4081 */
4082 renderSparklineFromData: function() {
4083 var $wrap = this.$root.find('[data-role="sparkline"]');
4084 if (!$wrap.length) {
4085 return;
4086 }
4087 var raw = $wrap.attr('data-points');
4088 if (!raw) {
4089 return;
4090 }
4091 try {
4092 var points = JSON.parse(raw);
4093 if (!points || points.length < 2) {
4094 return;
4095 }
4096 // Only regenerate if the SVG is missing (e.g. server gave empty markup).
4097 if (!$wrap.find('svg').length) {
4098 $wrap.html(this.buildSparklineSvg(points));
4099 }
4100 this.attachSparklineHotspots($wrap, points);
4101 } catch (err) { /* ignore parse errors */ }
4102 },
4103
4104 /**
4105 * Inject invisible hot-spots over each sparkline point and wire up a tooltip
4106 * that shows the score on hover/focus.
4107 */
4108 attachSparklineHotspots: function($wrap, points) {
4109 if (!points || points.length < 2) {
4110 return;
4111 }
4112 // Idempotent: clear any previous hot-spots/tooltip first.
4113 $wrap.find('.vigilante-analyzer-sparkline-dot, .vigilante-analyzer-sparkline-tooltip').remove();
4114
4115 var SVG_W = 280, SVG_H = 60, PAD = 4;
4116 var usableW = SVG_W - PAD * 2;
4117 var usableH = SVG_H - PAD * 2;
4118 var step = usableW / Math.max(1, points.length - 1);
4119 var max = 100;
4120
4121 var $tooltip = $('<div class="vigilante-analyzer-sparkline-tooltip" aria-hidden="true"></div>');
4122 $wrap.append($tooltip);
4123
4124 for (var i = 0; i < points.length; i++) {
4125 var x = PAD + (i * step);
4126 var y = PAD + (usableH - ((points[i] / max) * usableH));
4127 var xPct = (x / SVG_W) * 100;
4128 var yPct = (y / SVG_H) * 100;
4129
4130 var $dot = $('<button type="button" class="vigilante-analyzer-sparkline-dot"></button>')
4131 .css({ left: xPct + '%', top: yPct + '%' })
4132 .attr('data-score', points[i])
4133 .attr('data-index', i)
4134 .attr('aria-label', String(points[i]));
4135 $wrap.append($dot);
4136 }
4137
4138 $wrap.off('.vigSpark');
4139 $wrap.on('mouseenter.vigSpark focus.vigSpark', '.vigilante-analyzer-sparkline-dot', function() {
4140 var $dot = $(this);
4141 $tooltip
4142 .text($dot.attr('data-score'))
4143 .css({ left: $dot.css('left'), top: $dot.css('top') })
4144 .addClass('is-visible');
4145 });
4146 $wrap.on('mouseleave.vigSpark blur.vigSpark', '.vigilante-analyzer-sparkline-dot', function() {
4147 $tooltip.removeClass('is-visible');
4148 });
4149 },
4150
4151 buildSparklineSvg: function(points) {
4152 var width = 280;
4153 var height = 60;
4154 var padding = 4;
4155 var usableW = width - (padding * 2);
4156 var usableH = height - (padding * 2);
4157 var count = points.length;
4158 var step = usableW / Math.max(1, count - 1);
4159 var max = 100;
4160
4161 var coords = [];
4162 for (var i = 0; i < count; i++) {
4163 var x = padding + (i * step);
4164 var y = padding + (usableH - ((points[i] / max) * usableH));
4165 coords.push(x.toFixed(2) + ',' + y.toFixed(2));
4166 }
4167 var path = 'M ' + coords.join(' L ');
4168 var lastX = padding + ((count - 1) * step);
4169 var lastY = padding + (usableH - ((points[count - 1] / max) * usableH));
4170
4171 return '<svg viewBox="0 0 ' + width + ' ' + height + '" preserveAspectRatio="none" '
4172 + 'role="img" focusable="false">'
4173 + '<path d="' + path + '" fill="none" stroke="currentColor" '
4174 + 'stroke-width="2" stroke-linecap="round" stroke-linejoin="round"/>'
4175 + '<circle cx="' + lastX.toFixed(2) + '" cy="' + lastY.toFixed(2) + '" r="3" fill="currentColor"/>'
4176 + '</svg>';
4177 },
4178
4179 /**
4180 * When landing on a fix link (#field-* or #vigilante-section-*),
4181 * scroll smoothly and flash-highlight the target.
4182 */
4183 hashFocusFlash: function() {
4184 var hash = window.location.hash;
4185 if (!hash || hash.length < 2) {
4186 return;
4187 }
4188 // Accept both section anchors and field anchors.
4189 if (!/^#(?:field-|vigilante-section-)/.test(hash)) {
4190 return;
4191 }
4192
4193 setTimeout(function() {
4194 var $target;
4195 try {
4196 $target = $(hash);
4197 } catch (err) { return; }
4198 if (!$target || !$target.length) {
4199 return;
4200 }
4201
4202 // Scroll to it smoothly.
4203 if ('scrollIntoView' in $target[0]) {
4204 $target[0].scrollIntoView({ behavior: 'smooth', block: 'center' });
4205 }
4206
4207 // Flash — remove any previous flash first.
4208 $('.vigilante-focus-flash').removeClass('vigilante-focus-flash');
4209 $target.addClass('vigilante-focus-flash');
4210 setTimeout(function() {
4211 $target.removeClass('vigilante-focus-flash');
4212 }, 1800);
4213 }, 150);
4214 },
4215
4216 /** Escape text for HTML. */
4217 esc: function(str) {
4218 return String(str == null ? '' : str)
4219 .replace(/&/g, '&amp;')
4220 .replace(/</g, '&lt;')
4221 .replace(/>/g, '&gt;')
4222 .replace(/"/g, '&quot;')
4223 .replace(/'/g, '&#039;');
4224 },
4225
4226 /** Escape text for HTML attribute. */
4227 escAttr: function(str) {
4228 return this.esc(str);
4229 }
4230 };
4231
4232 // Initialize on document ready
4233 $(document).ready(function() {
4234 Vigilante_Admin.init();
4235 Vigilante_Admin.initPasswordReset();
4236 Vigilante_Admin.initUserApproval();
4237 Vigilante_Admin.initSessionManagement();
4238 VigilanteAnalyzer.init();
4239
4240 // Shared "Send test email" button (Notification settings, File Integrity, Audit Alerts).
4241 $(document).on('click', '.vigilante-test-email-btn', function(e) {
4242 e.preventDefault();
4243 var $btn = $(this);
4244 var $result = $btn.siblings('.vigilante-test-email-result');
4245 var original = $btn.data('original-text') || $btn.text();
4246 $btn.prop('disabled', true).text(vigilanteAdmin.strings.sendingTest || 'Sending...');
4247 $result.text('').css('color', '');
4248 $.ajax({
4249 url: vigilanteAdmin.ajaxUrl,
4250 type: 'POST',
4251 data: {
4252 action: 'vigilante_send_test_email',
4253 nonce: vigilanteAdmin.nonce
4254 },
4255 success: function(response) {
4256 if (response && response.success) {
4257 $result.css('color', '#00a32a').text((response.data && response.data.message) || '');
4258 } else {
4259 $result.css('color', '#d63638').text((response && response.data && response.data.message) || vigilanteAdmin.strings.error);
4260 }
4261 },
4262 error: function() {
4263 $result.css('color', '#d63638').text(vigilanteAdmin.strings.error);
4264 },
4265 complete: function() {
4266 $btn.prop('disabled', false).text(original);
4267 }
4268 });
4269 });
4270 });
4271
4272 /**
4273 * Security Headers settings recovery (2.10.0).
4274 *
4275 * Both buttons are disabled together while the request is in flight, so a
4276 * second click cannot fire a second restore. The page reloads afterwards
4277 * because the whole tab is rendered from the settings that just changed.
4278 */
4279 $(function() {
4280 var SELECTOR = '#vigilante-recovery-restore, #vigilante-recovery-dismiss';
4281
4282 function recoveryRun(action) {
4283 $(SELECTOR).prop('disabled', true);
4284
4285 $.ajax({
4286 url: vigilanteAdmin.ajaxUrl,
4287 type: 'POST',
4288 data: {
4289 action: action,
4290 nonce: vigilanteAdmin.nonce
4291 },
4292 success: function(response) {
4293 if (response.success) {
4294 Vigilante_Admin.showNotice('success', response.data);
4295 setTimeout(function() {
4296 location.reload();
4297 }, 1200);
4298 return;
4299 }
4300
4301 Vigilante_Admin.showNotice('error', response.data);
4302 $(SELECTOR).prop('disabled', false);
4303 },
4304 error: function() {
4305 Vigilante_Admin.showNotice('error', vigilanteAdmin.strings.error);
4306 $(SELECTOR).prop('disabled', false);
4307 }
4308 });
4309 }
4310
4311 $(document).on('click', '#vigilante-recovery-restore', function(e) {
4312 e.preventDefault();
4313 recoveryRun('vigilante_headers_recovery_restore');
4314 });
4315
4316 $(document).on('click', '#vigilante-recovery-dismiss', function(e) {
4317 e.preventDefault();
4318 recoveryRun('vigilante_headers_recovery_dismiss');
4319 });
4320
4321 $(document).on('click', '#vigilante-recovery-undo', function(e) {
4322 e.preventDefault();
4323 $(this).prop('disabled', true);
4324 recoveryRun('vigilante_headers_recovery_undo');
4325 });
4326 });
4327
4328 })(jQuery);