PluginProbe
Vigilant – 100% Free Security Suite: Firewall, 2FA, Login, Headers, Scanner… / 2.10.4
Vigilant – 100% Free Security Suite: Firewall, 2FA, Login, Headers, Scanner… v2.10.4
3.0.0 2.11.12 2.11.11 2.11.10 2.11.9 2.11.7 2.11.8 2.11.6 2.11.5 2.11.4 2.11.3 2.11.1 2.11.2 2.11.0 2.10.5 2.10.4 2.10.3 2.10.2 2.10.1 2.10.0 2.9.9 2.9.8 2.9.6 2.9.7 2.9.5 All 88 releases
vigilante / assets / js / admin.js

admin.js in Vigilant – 100% Free Security Suite: Firewall, 2FA, Login, Headers, Scanner… 2.10.4, at assets/js/admin.js

4,332 lines 191.2 KB
No matching file
Up and down to move Enter to open Esc to close
Raw Download Zip
1 /**
2 * Vigilante Admin JavaScript
3 *
4 * @package Vigilante
5 */
6
7 (function($) {
8 'use strict';
9
10 var Vigilante_Admin = {
11
12 /**
13 * Initialize
14 */
15 init: function() {
16 this.bindEvents();
17 this.initModuleToggles();
18 this.initFileIntegrityPagination();
19
20 // Activity log pagination state
21 this.logPage = 1;
22 this.logPerPage = 20;
23 this.logSearchTimer = null;
24 },
25
26 /**
27 * Bind events
28 */
29 bindEvents: function() {
30 // Save settings forms
31 $(document).on('submit', '.vigilante-settings-form', this.handleFormSubmit.bind(this));
32
33 // Module toggles in dashboard
34 $(document).on('change', '.vigilante-module-item input[type="checkbox"]', this.handleModuleToggle.bind(this));
35
36 // Apply preset
37 $(document).on('click', '.vigilante-preset-btn', this.handleApplyPreset.bind(this));
38
39 // Reset section to defaults
40 $(document).on('click', '.vigilante-reset-section-btn', this.handleResetSection.bind(this));
41
42 // Clear lockouts
43 $(document).on('click', '.vigilante-clear-lockout', this.handleClearLockout.bind(this));
44 $(document).on('click', '.vigilante-clear-all-lockouts', this.handleClearAllLockouts.bind(this));
45
46 // Unblock firewall rate-limited IPs
47 $(document).on('click', '.vigilante-unblock-firewall-ip', this.handleUnblockFirewallIp.bind(this));
48
49 // Clear logs
50 $(document).on('click', '.vigilante-clear-logs', this.handleClearLogs.bind(this));
51
52 // Run scan
53 $(document).on('click', '.vigilante-run-scan', this.handleRunScan.bind(this));
54 $(document).on('click', '.vigilante-ignore-file', this.handleIgnoreFile.bind(this));
55 $(document).on('click', '.vigilante-unignore-file', this.handleUnignoreFile.bind(this));
56 $(document).on('click', '.vigilante-clear-ignored', this.handleClearIgnored.bind(this));
57
58 // Closed plugins ignore controls (separate slug-based list, not file paths).
59 $(document).on('click', '.vigilante-ignore-closed-plugin', this.handleIgnoreClosedPlugin.bind(this));
60 $(document).on('click', '.vigilante-unignore-closed-plugin', this.handleUnignoreClosedPlugin.bind(this));
61 $(document).on('click', '.vigilante-clear-ignored-closed-plugins', this.handleClearIgnoredClosedPlugins.bind(this));
62
63 // Bulk selection inside file integrity tables
64 $(document).on('change', '.vigilante-fi-cb-all', this.handleFiSelectAll.bind(this));
65 $(document).on('change', '.vigilante-fi-cb', this.handleFiCheckboxChange.bind(this));
66 $(document).on('click', '.vigilante-bulk-ignore', this.handleBulkIgnore.bind(this));
67 $(document).on('click', '.vigilante-bulk-unignore', this.handleBulkUnignore.bind(this));
68
69 // Clear scan results
70 $(document).on('click', '.vigilante-clear-scan', this.handleClearScan.bind(this));
71
72 // Critical config file actions
73 $(document).on('click', '.vigilante-approve-critical-file', this.handleApproveCriticalFile.bind(this));
74 $(document).on('click', '.vigilante-toggle-critical-content', this.handleToggleCriticalContent.bind(this));
75
76 // Export/Import settings
77 $(document).on('click', '.vigilante-export-settings', this.handleExportSettings.bind(this));
78 $(document).on('click', '.vigilante-import-settings', this.handleImportSettings.bind(this));
79 $(document).on('change', '#vigilante-import-file', this.handleImportFile.bind(this));
80
81 // Reset settings
82 $(document).on('click', '.vigilante-reset-settings', this.handleResetSettings.bind(this));
83
84 // Test headers
85 $(document).on('click', '.vigilante-test-headers', this.handleTestHeaders.bind(this));
86
87 // Login URL notification
88 $(document).on('click', '#vigilante_notify_login_url', this.handleNotifyLoginUrl.bind(this));
89 $(document).on('input', '#vigilante_custom_login_url', this.handleLoginUrlToggle.bind(this));
90
91 // Activity log filters
92 $(document).on('change', '#vigilante-log-type-filter, #vigilante-log-severity-filter, #vigilante-log-method-filter', this.handleLogFilter.bind(this));
93 $(document).on('click', '#vigilante-log-refresh', this.handleLogFilter.bind(this));
94
95 // Activity log search (debounced, min 3 chars)
96 $(document).on('input', '#vigilante-log-search', this.handleLogSearch.bind(this));
97
98 // Activity log pagination
99 $(document).on('click', '#vigilante-log-pagination .vigilante-page-first', function() { Vigilante_Admin.goToLogPage('first'); });
100 $(document).on('click', '#vigilante-log-pagination .vigilante-page-prev', function() { Vigilante_Admin.goToLogPage('prev'); });
101 $(document).on('click', '#vigilante-log-pagination .vigilante-page-next', function() { Vigilante_Admin.goToLogPage('next'); });
102 $(document).on('click', '#vigilante-log-pagination .vigilante-page-last', function() { Vigilante_Admin.goToLogPage('last'); });
103
104 // File integrity client-side pagination
105 $(document).on('click', '.vigilante-fi-pagination .vigilante-page-first', function() { Vigilante_Admin.goToFilePage($(this).closest('.vigilante-paginated-section'), 'first'); });
106 $(document).on('click', '.vigilante-fi-pagination .vigilante-page-prev', function() { Vigilante_Admin.goToFilePage($(this).closest('.vigilante-paginated-section'), 'prev'); });
107 $(document).on('click', '.vigilante-fi-pagination .vigilante-page-next', function() { Vigilante_Admin.goToFilePage($(this).closest('.vigilante-paginated-section'), 'next'); });
108 $(document).on('click', '.vigilante-fi-pagination .vigilante-page-last', function() { Vigilante_Admin.goToFilePage($(this).closest('.vigilante-paginated-section'), 'last'); });
109
110 // Export logs
111 $(document).on('click', '.vigilante-export-logs', this.handleExportLogs.bind(this));
112
113 // Create backup
114 $(document).on('click', '.vigilante-create-backup', this.handleCreateBackup.bind(this));
115
116 // View log details modal
117 $(document).on('click', '.vigilante-view-log-details', this.handleViewLogDetails.bind(this));
118 $(document).on('click', '.vigilante-modal-close, .vigilante-modal', this.handleCloseModal.bind(this));
119 $(document).on('click', '.vigilante-add-to-list', this.handleAddToFirewallList.bind(this));
120 $(document).on('click', '.vigilante-modal-content', function(e) {
121 e.stopPropagation();
122 });
123
124 // Under Attack mode
125 $(document).on('click', '.vigilante-ua-activate', this.handleUnderAttackActivate.bind(this));
126 $(document).on('click', '.vigilante-ua-deactivate', this.handleUnderAttackDeactivate.bind(this));
127
128 // Database backup
129 $(document).on('click', '.vigilante-db-backup-toggle', this.handleDbBackupToggle.bind(this));
130 $(document).on('click', '.vigilante-db-backup-download', this.handleDbBackupDownload.bind(this));
131 $(document).on('change', '#vigilante-db-select-all', this.handleDbSelectAll.bind(this));
132 $(document).on('change', '.vigilante-db-table-check', this.handleDbTableCheck.bind(this));
133
134 // Database prefix
135 $(document).on('click', '.vigilante-db-regenerate-prefix', this.handleDbRegeneratePrefix.bind(this));
136 $(document).on('change', '#vigilante-prefix-backup-confirm', this.handleDbPrefixConfirmToggle.bind(this));
137 $(document).on('click', '.vigilante-db-change-prefix', this.handleDbChangePrefix.bind(this));
138
139 // Settings search
140 $(document).on('input', '#vigilante-settings-search', this.handleSettingsSearch.bind(this));
141 $(document).on('focus', '#vigilante-settings-search', this.handleSettingsSearch.bind(this));
142 $(document).on('keydown', '#vigilante-settings-search', this.handleSettingsSearchKey.bind(this));
143 $(document).on('mouseenter', '.vigilante-search-item', this.handleSettingsSearchHover.bind(this));
144 $(document).on('click', function(e) {
145 if (!$(e.target).closest('.vigilante-search-wrapper').length) {
146 $('#vigilante-settings-search-results').attr('hidden', true);
147 }
148 });
149 // Global "/" shortcut to focus search
150 $(document).on('keydown', function(e) {
151 if (e.key !== '/') return;
152 var $t = $(e.target);
153 if ($t.is('input, textarea, select') || $t.is('[contenteditable="true"]')) return;
154 var $search = $('#vigilante-settings-search');
155 if (!$search.length) return;
156 e.preventDefault();
157 $search.focus().select();
158 });
159
160 // Start Under Attack countdown if active
161 this.initUnderAttackCountdown();
162 },
163
164 /**
165 * Initialize module toggles
166 */
167 initModuleToggles: function() {
168 $(document).on('change', '.vigilante-module-item input[type="checkbox"]', function() {
169 var $item = $(this).closest('.vigilante-module-item');
170 var module = $(this).data('module');
171 var enabled = $(this).is(':checked');
172
173 $item.toggleClass('enabled', enabled).toggleClass('disabled', !enabled);
174
175 // Save module state
176 Vigilante_Admin.saveModuleState(module, enabled);
177 });
178 },
179
180 /**
181 * Save module state
182 */
183 saveModuleState: function(module, enabled) {
184 var $item = $('.vigilante-module-item input[data-module="' + module + '"]').closest('.vigilante-module-item');
185
186 // Show saving state
187 $item.addClass('vigilante-saving');
188
189 $.ajax({
190 url: vigilanteAdmin.ajaxUrl,
191 type: 'POST',
192 data: {
193 action: 'vigilante_save_settings',
194 nonce: vigilanteAdmin.nonce,
195 section: 'modules',
196 data: 'modules[' + module + ']=' + (enabled ? '1' : '0')
197 },
198 success: function(response) {
199 if (response.success) {
200 $item.removeClass('vigilante-saving').addClass('vigilante-saved');
201 // Show success then reload to update recommendations and all UI
202 Vigilante_Admin.showNotice('success', vigilanteAdmin.strings.saved);
203 setTimeout(function() {
204 location.reload();
205 }, 800);
206 } else {
207 $item.removeClass('vigilante-saving');
208 Vigilante_Admin.showNotice('error', response.data || vigilanteAdmin.strings.error);
209 }
210 },
211 error: function() {
212 $item.removeClass('vigilante-saving');
213 Vigilante_Admin.showNotice('error', vigilanteAdmin.strings.error);
214 }
215 });
216 },
217
218 /**
219 * Update security score after module toggle
220 */
221 updateSecurityScore: function() {
222 var total = $('.vigilante-module-item').length;
223 var enabled = $('.vigilante-module-item.enabled').length;
224 var score = total > 0 ? Math.round((enabled / total) * 100) : 0;
225
226 // Grade thresholds: A (90+), B (70-89), C (50-69), D (30-49), E (0-29)
227 var grade;
228 if (score >= 90) {
229 grade = 'A';
230 } else if (score >= 70) {
231 grade = 'B';
232 } else if (score >= 50) {
233 grade = 'C';
234 } else if (score >= 30) {
235 grade = 'D';
236 } else {
237 grade = 'E';
238 }
239
240 // Update score display
241 $('.vigilante-score-text').text(score + '%');
242 $('.vigilante-grade').text(grade);
243 $('.vigilante-score-circle').removeClass('vigilante-grade-a vigilante-grade-b vigilante-grade-c vigilante-grade-d vigilante-grade-e')
244 .addClass('vigilante-grade-' + grade.toLowerCase());
245
246 // Update modules count text - use fixed string to prevent text accumulation
247 var $countText = $('.vigilante-security-score p');
248 if ($countText.length) {
249 var modulesText = (vigilanteAdmin.strings.modulesEnabled || '%1$d / %2$d modules enabled').replace('%1$d', enabled).replace('%2$d', total);
250 $countText.text(modulesText);
251 }
252 },
253
254 /**
255 * Update configuration status badge
256 */
257 updateConfigBadge: function(preset) {
258 var $badge = $('.vigilante-config-status .vigilante-preset-badge');
259 if ($badge.length) {
260 $badge.removeClass('vigilante-preset-standard vigilante-preset-maximum vigilante-preset-custom vigilante-preset-under-attack');
261
262 if (vigilanteAdmin.underAttack && vigilanteAdmin.underAttack.active) {
263 $badge.addClass('vigilante-preset-under-attack').text(vigilanteAdmin.strings.underAttackLabel || 'Under Attack');
264 } else if (preset === 'standard') {
265 $badge.addClass('vigilante-preset-standard').text(vigilanteAdmin.strings.standardLabel || 'Standard');
266 } else if (preset === 'maximum') {
267 $badge.addClass('vigilante-preset-maximum').text(vigilanteAdmin.strings.maximumLabel || 'Maximum Security');
268 } else {
269 $badge.addClass('vigilante-preset-custom').text(vigilanteAdmin.strings.customConfig || 'Custom Configuration');
270 }
271 }
272 },
273
274 /**
275 * Handle form submit
276 */
277 handleFormSubmit: function(e) {
278 e.preventDefault();
279
280 var $form = $(e.currentTarget);
281 var $btn = $form.find('.vigilante-save-btn');
282 var section = $form.data('section');
283
284 $btn.prop('disabled', true).text(vigilanteAdmin.strings.saving);
285 $form.addClass('vigilante-loading');
286
287 // Build form data including unchecked checkboxes
288 var formData = Vigilante_Admin.serializeFormWithCheckboxes($form);
289
290 $.ajax({
291 url: vigilanteAdmin.ajaxUrl,
292 type: 'POST',
293 data: {
294 action: 'vigilante_save_settings',
295 nonce: vigilanteAdmin.nonce,
296 section: section,
297 data: formData
298 },
299 success: function(response) {
300 if (response.success) {
301 var msg = response.data && response.data.message ? response.data.message : (response.data || vigilanteAdmin.strings.saved);
302 Vigilante_Admin.showNotice('success', msg);
303 } else {
304 Vigilante_Admin.showNotice('error', response.data || vigilanteAdmin.strings.error);
305 }
306 },
307 error: function(xhr, status, error) {
308 Vigilante_Admin.showNotice('error', vigilanteAdmin.strings.error);
309 },
310 complete: function() {
311 $btn.prop('disabled', false).text($btn.data('original-text') || vigilanteAdmin.strings.saved);
312 $form.removeClass('vigilante-loading');
313
314 // Reset button text after delay
315 setTimeout(function() {
316 $btn.text($btn.data('original-text') || vigilanteAdmin.strings.saveSettings || 'Save Settings');
317 }, 2000);
318 }
319 });
320 },
321
322 /**
323 * Handle module toggle in dashboard
324 */
325 handleModuleToggle: function(e) {
326 var $checkbox = $(e.currentTarget);
327 var module = $checkbox.data('module');
328 var enabled = $checkbox.is(':checked');
329 var $item = $checkbox.closest('.vigilante-module-item');
330
331 // Visual feedback
332 $item.addClass('vigilante-loading');
333
334 // Build data for modules section
335 var formData = 'modules[' + module + ']=' + (enabled ? '1' : '0');
336
337 $.ajax({
338 url: vigilanteAdmin.ajaxUrl,
339 type: 'POST',
340 data: {
341 action: 'vigilante_save_settings',
342 nonce: vigilanteAdmin.nonce,
343 section: 'modules',
344 data: formData
345 },
346 success: function(response) {
347 if (response.success) {
348 // Update visual state
349 if (enabled) {
350 $item.removeClass('disabled').addClass('enabled');
351 } else {
352 $item.removeClass('enabled').addClass('disabled');
353 }
354 Vigilante_Admin.updateSecurityScore();
355 Vigilante_Admin.showNotice('success', vigilanteAdmin.strings.saved);
356
357 // Update config badge to Custom (since settings were manually changed)
358 Vigilante_Admin.updateConfigBadge('custom');
359
360 // Clear active preset indicator
361 $('.vigilante-preset-card').removeClass('vigilante-preset-active');
362 $('.vigilante-active-indicator').remove();
363 } else {
364 // Revert checkbox on error
365 $checkbox.prop('checked', !enabled);
366 Vigilante_Admin.showNotice('error', response.data || vigilanteAdmin.strings.error);
367 }
368 },
369 error: function() {
370 // Revert checkbox on error
371 $checkbox.prop('checked', !enabled);
372 Vigilante_Admin.showNotice('error', vigilanteAdmin.strings.error);
373 },
374 complete: function() {
375 $item.removeClass('vigilante-loading');
376 }
377 });
378 },
379
380 /**
381 * Serialize form including unchecked checkboxes
382 */
383 serializeFormWithCheckboxes: function($form) {
384 var data = $form.serializeArray();
385 var checkboxNames = [];
386
387 // Find all checkboxes and add unchecked ones with value 0
388 $form.find('input[type="checkbox"]').each(function() {
389 var name = $(this).attr('name');
390 if (name && checkboxNames.indexOf(name) === -1) {
391 checkboxNames.push(name);
392 if (!$(this).is(':checked')) {
393 data.push({ name: name, value: '0' });
394 }
395 }
396 });
397
398 // Convert to query string
399 return $.param(data);
400 },
401
402 /**
403 * Handle apply preset
404 */
405 handleApplyPreset: function(e) {
406 e.preventDefault();
407
408 var preset = $(e.currentTarget).data('preset');
409
410 if (!confirm(vigilanteAdmin.strings.confirm + ' ' + (vigilanteAdmin.strings.confirmApplyPreset || 'Apply the "%s" preset?').replace('%s', preset))) {
411 return;
412 }
413
414 $.ajax({
415 url: vigilanteAdmin.ajaxUrl,
416 type: 'POST',
417 data: {
418 action: 'vigilante_apply_preset',
419 nonce: vigilanteAdmin.nonce,
420 preset: preset
421 },
422 success: function(response) {
423 if (response.success) {
424 Vigilante_Admin.showNotice('success', response.data);
425 setTimeout(function() {
426 location.reload();
427 }, 1000);
428 } else {
429 Vigilante_Admin.showNotice('error', response.data);
430 }
431 },
432 error: function() {
433 Vigilante_Admin.showNotice('error', vigilanteAdmin.strings.error);
434 }
435 });
436 },
437
438 /**
439 * Handle Under Attack mode activation
440 */
441 handleUnderAttackActivate: function(e) {
442 e.preventDefault();
443
444 if (!confirm(vigilanteAdmin.strings.underAttackConfirmActivate)) {
445 return;
446 }
447
448 var $btn = $(e.currentTarget);
449 $btn.prop('disabled', true).text(vigilanteAdmin.strings.underAttackActivating);
450
451 $.ajax({
452 url: vigilanteAdmin.ajaxUrl,
453 type: 'POST',
454 data: {
455 action: 'vigilante_activate_under_attack',
456 nonce: vigilanteAdmin.nonce
457 },
458 success: function(response) {
459 if (response.success) {
460 Vigilante_Admin.showNotice('success', response.data.message);
461 setTimeout(function() {
462 location.reload();
463 }, 1000);
464 } else {
465 Vigilante_Admin.showNotice('error', response.data);
466 $btn.prop('disabled', false).text(vigilanteAdmin.strings.underAttackActivate || 'Activate for 4 hours');
467 }
468 },
469 error: function() {
470 Vigilante_Admin.showNotice('error', vigilanteAdmin.strings.error);
471 $btn.prop('disabled', false).text(vigilanteAdmin.strings.underAttackActivate || 'Activate for 4 hours');
472 }
473 });
474 },
475
476 /**
477 * Handle Under Attack mode deactivation
478 */
479 handleUnderAttackDeactivate: function(e) {
480 e.preventDefault();
481
482 if (!confirm(vigilanteAdmin.strings.underAttackConfirmDeactivate)) {
483 return;
484 }
485
486 var $btn = $(e.currentTarget);
487 $btn.prop('disabled', true).text(vigilanteAdmin.strings.underAttackDeactivating);
488
489 $.ajax({
490 url: vigilanteAdmin.ajaxUrl,
491 type: 'POST',
492 data: {
493 action: 'vigilante_deactivate_under_attack',
494 nonce: vigilanteAdmin.nonce
495 },
496 success: function(response) {
497 if (response.success) {
498 Vigilante_Admin.showNotice('success', response.data);
499 setTimeout(function() {
500 location.reload();
501 }, 1000);
502 } else {
503 Vigilante_Admin.showNotice('error', response.data);
504 $btn.prop('disabled', false).text(vigilanteAdmin.strings.deactivate || 'Deactivate');
505 }
506 },
507 error: function() {
508 Vigilante_Admin.showNotice('error', vigilanteAdmin.strings.error);
509 $btn.prop('disabled', false).text(vigilanteAdmin.strings.deactivate || 'Deactivate');
510 }
511 });
512 },
513
514 /**
515 * Initialize Under Attack countdown timer
516 */
517 initUnderAttackCountdown: function() {
518 var $countdown = $('.vigilante-ua-countdown');
519 if (!$countdown.length) {
520 return;
521 }
522
523 var expiresAt = parseInt($countdown.data('expires'), 10);
524 if (!expiresAt) {
525 return;
526 }
527
528 var $timeEl = $countdown.find('.vigilante-ua-time');
529
530 var updateCountdown = function() {
531 var now = Math.floor(Date.now() / 1000);
532 var remaining = expiresAt - now;
533
534 if (remaining <= 0) {
535 location.reload();
536 return;
537 }
538
539 var hours = Math.floor(remaining / 3600);
540 var mins = Math.floor((remaining % 3600) / 60);
541
542 var text = vigilanteAdmin.strings.underAttackRemaining || '%1$dh %2$dm remaining';
543 text = text.replace('%1$d', hours).replace('%2$d', mins);
544 $timeEl.text(text);
545 };
546
547 // Run immediately, then update every minute
548 updateCountdown();
549 setInterval(updateCountdown, 60000);
550 },
551
552 /**
553 * Handle reset section to defaults
554 */
555 handleResetSection: function(e) {
556 e.preventDefault();
557
558 var $btn = $(e.currentTarget);
559 var $form = $btn.closest('form');
560 var section = $form.data('section');
561
562 if (!section) {
563 Vigilante_Admin.showNotice('error', vigilanteAdmin.strings.couldNotDetermineSection || 'Could not determine section.');
564 return;
565 }
566
567 if (!confirm(vigilanteAdmin.strings.confirmResetSection || 'Reset this section to default values? This cannot be undone.')) {
568 return;
569 }
570
571 var originalText = $btn.data('original-text') || $btn.text();
572 $btn.prop('disabled', true).html(vigilanteAdmin.strings.loading + ' <span class="vigilante-spinner"></span>');
573
574 $.ajax({
575 url: vigilanteAdmin.ajaxUrl,
576 type: 'POST',
577 data: {
578 action: 'vigilante_reset_section',
579 nonce: vigilanteAdmin.nonce,
580 section: section
581 },
582 success: function(response) {
583 if (response.success) {
584 Vigilante_Admin.showNotice('success', response.data.message || vigilanteAdmin.strings.sectionResetDefaults || 'Section reset to defaults.');
585 setTimeout(function() {
586 location.reload();
587 }, 1000);
588 } else {
589 Vigilante_Admin.showNotice('error', response.data);
590 }
591 },
592 error: function() {
593 Vigilante_Admin.showNotice('error', vigilanteAdmin.strings.error);
594 },
595 complete: function() {
596 $btn.prop('disabled', false).text(originalText);
597 }
598 });
599 },
600
601 /**
602 * Handle clear single lockout
603 */
604 handleClearLockout: function(e) {
605 e.preventDefault();
606
607 var $btn = $(e.currentTarget);
608 var ip = $btn.data('ip');
609
610 $.ajax({
611 url: vigilanteAdmin.ajaxUrl,
612 type: 'POST',
613 data: {
614 action: 'vigilante_clear_lockouts',
615 nonce: vigilanteAdmin.nonce,
616 ip: ip
617 },
618 success: function(response) {
619 if (response.success) {
620 var $container = $btn.closest('.vigilante-paginated-section');
621 $btn.closest('tr').fadeOut(function() {
622 $(this).remove();
623 Vigilante_Admin.refreshFilePagination($container);
624 });
625 } else {
626 Vigilante_Admin.showNotice('error', response.data);
627 }
628 }
629 });
630 },
631
632 /**
633 * Handle clear all lockouts
634 */
635 handleClearAllLockouts: function(e) {
636 e.preventDefault();
637
638 if (!confirm(vigilanteAdmin.strings.confirm)) {
639 return;
640 }
641
642 $.ajax({
643 url: vigilanteAdmin.ajaxUrl,
644 type: 'POST',
645 data: {
646 action: 'vigilante_clear_lockouts',
647 nonce: vigilanteAdmin.nonce
648 },
649 success: function(response) {
650 if (response.success) {
651 location.reload();
652 } else {
653 Vigilante_Admin.showNotice('error', response.data);
654 }
655 }
656 });
657 },
658
659 /**
660 * Handle clear logs
661 */
662 handleClearLogs: function(e) {
663 e.preventDefault();
664
665 if (!confirm(vigilanteAdmin.strings.confirm + ' ' + (vigilanteAdmin.strings.confirmClearLogs || 'This will delete all activity logs.'))) {
666 return;
667 }
668
669 $.ajax({
670 url: vigilanteAdmin.ajaxUrl,
671 type: 'POST',
672 data: {
673 action: 'vigilante_clear_logs',
674 nonce: vigilanteAdmin.nonce
675 },
676 success: function(response) {
677 if (response.success) {
678 location.reload();
679 } else {
680 Vigilante_Admin.showNotice('error', response.data);
681 }
682 }
683 });
684 },
685
686 /**
687 * Handle run scan
688 */
689 handleRunScan: function(e) {
690 e.preventDefault();
691 e.stopPropagation();
692
693 var $btn = $(e.currentTarget);
694 var $results = $('#vigilante-scan-results');
695 var $lastResults = $('#vigilante-last-scan-results').closest('.vigilante-settings-section');
696
697 // Hide previous results section
698 $lastResults.hide();
699 $results.empty().hide();
700
701 $btn.prop('disabled', true).html(vigilanteAdmin.strings.scanning + ' <span class="vigilante-spinner"></span>');
702
703 $.ajax({
704 url: vigilanteAdmin.ajaxUrl,
705 type: 'POST',
706 timeout: 120000,
707 data: {
708 action: 'vigilante_run_scan',
709 nonce: vigilanteAdmin.nonce
710 },
711 success: function(response) {
712 if (response.success) {
713 // Reload the page so the server-side render shows ALL findings
714 // in their canonical sections (Suspicious, Extra, Critical Config,
715 // Closed + Removed Plugins, Modified). The legacy in-place JS
716 // render only knows the file-level categories and would leave
717 // the Closed + Removed subsection hidden after a scan.
718 Vigilante_Admin.showNotice('success', vigilanteAdmin.strings.scanComplete);
719 setTimeout(function() { location.reload(); }, 600);
720 } else {
721 Vigilante_Admin.showNotice('error', response.data || vigilanteAdmin.strings.scanFailed || 'Scan failed');
722 $btn.prop('disabled', false).text(vigilanteAdmin.strings.runScanNow || 'Run Scan Now');
723 }
724 },
725 error: function(xhr, status, error) {
726 Vigilante_Admin.showNotice('error', (vigilanteAdmin.strings.scanError || 'Scan error: %s').replace('%s', error));
727 $btn.prop('disabled', false).text(vigilanteAdmin.strings.runScanNow || 'Run Scan Now');
728 }
729 });
730 },
731
732 /**
733 * Handle clear scan results
734 */
735 handleClearScan: function(e) {
736 e.preventDefault();
737 e.stopPropagation();
738
739 if (!confirm(vigilanteAdmin.strings.confirmClearScan || 'Are you sure you want to clear all scan results?')) {
740 return;
741 }
742
743 var $btn = $(e.currentTarget);
744 var originalText = $btn.text();
745 $btn.prop('disabled', true).text(vigilanteAdmin.strings.clearing || 'Clearing...');
746
747 $.ajax({
748 url: vigilanteAdmin.ajaxUrl,
749 type: 'POST',
750 data: {
751 action: 'vigilante_clear_scan',
752 nonce: vigilanteAdmin.nonce
753 },
754 success: function(response) {
755 if (response.success) {
756 // Hide all scan results
757 $('#vigilante-scan-results').empty().hide();
758 $('#vigilante-last-scan-results').closest('.vigilante-settings-section').fadeOut();
759 Vigilante_Admin.showNotice('success', vigilanteAdmin.strings.scanResultsCleared || 'Scan results cleared. Page will reload...');
760 // Reload page to reflect changes
761 setTimeout(function() {
762 location.reload();
763 }, 1000);
764 } else {
765 Vigilante_Admin.showNotice('error', response.data || vigilanteAdmin.strings.failedClearResults || 'Failed to clear results');
766 $btn.prop('disabled', false).text(originalText);
767 }
768 },
769 error: function(xhr, status, error) {
770 Vigilante_Admin.showNotice('error', (vigilanteAdmin.strings.ajaxError || 'AJAX Error: %s').replace('%s', error));
771 $btn.prop('disabled', false).text(originalText);
772 },
773 complete: function() {
774 // Button text restored in success/error handlers
775 }
776 });
777 },
778
779 /**
780 * Handle toggle critical file content viewer
781 */
782 handleToggleCriticalContent: function(e) {
783 e.preventDefault();
784 var $btn = $(e.currentTarget);
785 var targetId = $btn.data('target');
786 var $content = $('#' + targetId);
787
788 // Use toggle instead of slideUp/slideDown because target can be a TR
789 // (animations on table rows are inconsistent across browsers)
790 if ($content.is(':visible')) {
791 $content.hide();
792 $btn.text($btn.data('label-show'));
793 } else {
794 $content.show();
795 $btn.text($btn.data('label-hide'));
796 }
797 },
798
799 /**
800 * Handle approve critical file button click
801 */
802 handleApproveCriticalFile: function(e) {
803 e.preventDefault();
804 var $btn = $(e.currentTarget);
805 var file = $btn.data('file');
806 var strings = vigilanteAdmin.strings;
807 var originalText = $btn.text();
808
809 // The POST carries an opaque key, never the file name: WAFs like
810 // ModSecurity (OWASP CRS 930130) block any request argument
811 // containing the literal "wp-config.php", which made Approve fail
812 // with a generic AJAX error on hardened hostings. The PHP handler
813 // maps the key back against its own whitelist.
814 var fileKey = { 'wp-config.php': 'cfg', '.htaccess': 'hta' }[ file ] || '';
815
816 $btn.prop('disabled', true).text(strings.approving || 'Approving...');
817
818 $.ajax({
819 url: vigilanteAdmin.ajaxUrl,
820 type: 'POST',
821 data: {
822 action: 'vigilante_approve_critical_file',
823 nonce: vigilanteAdmin.nonce,
824 file_key: fileKey
825 },
826 success: function(response) {
827 if (response.success) {
828 // Remove the approved file row and its diff row from the table.
829 // The diff row carries an id derived from the file name (same as
830 // sanitize_html_class() on PHP side), so we target it directly
831 // instead of relying on adjacency in the DOM.
832 var $row = $btn.closest('tr');
833 var fileId = String(file).replace(/[^a-z0-9_-]/gi, '-');
834 $('#vigilante-critical-content-' + fileId).remove();
835 $row.fadeOut(300, function() {
836 $(this).remove();
837 // If no more critical config rows, remove the entire section
838 if ($('.vigilante-critical-config-files tbody tr').length === 0) {
839 $('.vigilante-critical-config-files').fadeOut(300, function() { $(this).remove(); });
840 }
841 });
842 Vigilante_Admin.showNotice('success', strings.criticalApproved || response.data.message);
843 } else {
844 Vigilante_Admin.showNotice('error', response.data || 'Failed to approve.');
845 $btn.prop('disabled', false).text(originalText);
846 }
847 },
848 error: function(xhr, status, error) {
849 Vigilante_Admin.showNotice('error', (strings.ajaxError || 'AJAX Error: %s').replace('%s', error));
850 $btn.prop('disabled', false).text(originalText);
851 }
852 });
853 },
854
855 /**
856 * Handle ignore file button click
857 */
858 handleIgnoreFile: function(e) {
859 e.preventDefault();
860 var $btn = $(e.currentTarget);
861 var file = $btn.data('file');
862 var strings = vigilanteAdmin.strings;
863
864 $btn.prop('disabled', true).text(strings.ignoring || 'Ignoring...');
865
866 $.ajax({
867 url: vigilanteAdmin.ajaxUrl,
868 type: 'POST',
869 data: {
870 action: 'vigilante_ignore_file',
871 nonce: vigilanteAdmin.nonce,
872 file: file
873 },
874 success: function(response) {
875 if (response.success) {
876 var $container = $btn.closest('.vigilante-paginated-section');
877 // Remove the row from the table
878 $btn.closest('tr').fadeOut(300, function() {
879 $(this).remove();
880 // Refresh pagination after row removal
881 Vigilante_Admin.refreshFilePagination($container);
882 });
883 Vigilante_Admin.showNotice('success', strings.fileIgnored || 'File added to ignored list.');
884 } else {
885 Vigilante_Admin.showNotice('error', response.data || 'Failed to ignore file');
886 $btn.prop('disabled', false).text(strings.ignore || 'Ignore');
887 }
888 },
889 error: function() {
890 $btn.prop('disabled', false).text(strings.ignore || 'Ignore');
891 }
892 });
893 },
894
895 /**
896 * Handle stop ignoring file
897 */
898 handleUnignoreFile: function(e) {
899 e.preventDefault();
900 var $btn = $(e.currentTarget);
901 var file = $btn.data('file');
902 var strings = vigilanteAdmin.strings;
903
904 $.ajax({
905 url: vigilanteAdmin.ajaxUrl,
906 type: 'POST',
907 data: {
908 action: 'vigilante_unignore_file',
909 nonce: vigilanteAdmin.nonce,
910 file: file
911 },
912 success: function(response) {
913 if (response.success) {
914 var $container = $btn.closest('.vigilante-paginated-section');
915 $btn.closest('tr').fadeOut(300, function() {
916 $(this).remove();
917 Vigilante_Admin.refreshFilePagination($container);
918 });
919 Vigilante_Admin.showNotice('success', strings.fileUnignored || 'File removed from ignored list.');
920 } else {
921 Vigilante_Admin.showNotice('error', response.data || 'Failed');
922 }
923 }
924 });
925 },
926
927 /**
928 * Handle clear all ignored files
929 */
930 handleClearIgnored: function(e) {
931 e.preventDefault();
932 var strings = vigilanteAdmin.strings;
933
934 if (!confirm(strings.confirmClearIgnored || 'Remove all files from the ignored list?')) {
935 return;
936 }
937
938 $.ajax({
939 url: vigilanteAdmin.ajaxUrl,
940 type: 'POST',
941 data: {
942 action: 'vigilante_clear_ignored',
943 nonce: vigilanteAdmin.nonce
944 },
945 success: function(response) {
946 if (response.success) {
947 Vigilante_Admin.showNotice('success', strings.ignoredCleared || 'Ignored files list cleared. Page will reload...');
948 setTimeout(function() {
949 location.reload();
950 }, 1000);
951 }
952 }
953 });
954 },
955
956 /**
957 * Ignore a closed/removed plugin slug. Reloads to refresh the section.
958 */
959 handleIgnoreClosedPlugin: function(e) {
960 e.preventDefault();
961 var $btn = $(e.currentTarget);
962 var slug = $btn.data('slug');
963 var strings = vigilanteAdmin.strings || {};
964
965 $btn.prop('disabled', true).text(strings.ignoring || 'Ignoring…');
966
967 $.ajax({
968 url: vigilanteAdmin.ajaxUrl,
969 type: 'POST',
970 data: {
971 action: 'vigilante_ignore_closed_plugin',
972 nonce: vigilanteAdmin.nonce,
973 slug: slug
974 },
975 success: function(response) {
976 if (response && response.success) {
977 Vigilante_Admin.showNotice('success', (response.data) || 'Plugin ignored.');
978 setTimeout(function() { location.reload(); }, 600);
979 } else {
980 Vigilante_Admin.showNotice('error', (response && response.data) || 'Failed.');
981 $btn.prop('disabled', false).text(strings.ignore || 'Ignore');
982 }
983 },
984 error: function(xhr, status, error) {
985 Vigilante_Admin.showNotice('error', (strings.ajaxError || 'AJAX Error: %s').replace('%s', error));
986 $btn.prop('disabled', false).text(strings.ignore || 'Ignore');
987 }
988 });
989 },
990
991 /**
992 * Stop ignoring a closed/removed plugin slug.
993 */
994 handleUnignoreClosedPlugin: function(e) {
995 e.preventDefault();
996 var $btn = $(e.currentTarget);
997 var slug = $btn.data('slug');
998 var strings = vigilanteAdmin.strings || {};
999
1000 $btn.prop('disabled', true).text(strings.unignoring || 'Restoring…');
1001
1002 $.ajax({
1003 url: vigilanteAdmin.ajaxUrl,
1004 type: 'POST',
1005 data: {
1006 action: 'vigilante_unignore_closed_plugin',
1007 nonce: vigilanteAdmin.nonce,
1008 slug: slug
1009 },
1010 success: function(response) {
1011 if (response && response.success) {
1012 Vigilante_Admin.showNotice('success', (response.data) || 'Plugin restored to the active list.');
1013 setTimeout(function() { location.reload(); }, 600);
1014 } else {
1015 Vigilante_Admin.showNotice('error', (response && response.data) || 'Failed.');
1016 $btn.prop('disabled', false).text(strings.stopIgnoring || 'Stop ignoring');
1017 }
1018 },
1019 error: function(xhr, status, error) {
1020 Vigilante_Admin.showNotice('error', (strings.ajaxError || 'AJAX Error: %s').replace('%s', error));
1021 $btn.prop('disabled', false).text(strings.stopIgnoring || 'Stop ignoring');
1022 }
1023 });
1024 },
1025
1026 /**
1027 * Clear the entire ignored closed plugins list.
1028 */
1029 handleClearIgnoredClosedPlugins: function(e) {
1030 e.preventDefault();
1031 var strings = vigilanteAdmin.strings || {};
1032
1033 if (!confirm(strings.confirmClearIgnoredClosedPlugins || 'Remove all plugins from the ignored closed plugins list? They will reappear in the main list and in email alerts.')) {
1034 return;
1035 }
1036
1037 $.ajax({
1038 url: vigilanteAdmin.ajaxUrl,
1039 type: 'POST',
1040 data: {
1041 action: 'vigilante_clear_ignored_closed_plugins',
1042 nonce: vigilanteAdmin.nonce
1043 },
1044 success: function(response) {
1045 if (response && response.success) {
1046 Vigilante_Admin.showNotice('success', (response.data) || 'Ignored closed plugins list cleared.');
1047 setTimeout(function() { location.reload(); }, 1000);
1048 }
1049 }
1050 });
1051 },
1052
1053 /**
1054 * Toggle all checkboxes inside a file integrity table when the
1055 * header "select all" checkbox changes. Only operates on visible
1056 * rows so it plays nice with client-side pagination.
1057 */
1058 handleFiSelectAll: function(e) {
1059 var $cb = $(e.currentTarget);
1060 var $section = $cb.closest('.vigilante-paginated-section');
1061 $section.find('table.vigilante-fi-paginated tbody tr:visible .vigilante-fi-cb').prop('checked', $cb.prop('checked'));
1062 this.refreshBulkBar($section);
1063 },
1064
1065 /**
1066 * Refresh bulk bar state after individual checkbox change.
1067 */
1068 handleFiCheckboxChange: function(e) {
1069 var $section = $(e.currentTarget).closest('.vigilante-paginated-section');
1070 this.refreshBulkBar($section);
1071
1072 // Sync the header "select all" with the current visible state
1073 var $allCb = $section.find('.vigilante-fi-cb-all');
1074 var $visible = $section.find('table.vigilante-fi-paginated tbody tr:visible .vigilante-fi-cb');
1075 var $checked = $visible.filter(':checked');
1076 $allCb.prop('checked', $visible.length > 0 && $checked.length === $visible.length);
1077 },
1078
1079 /**
1080 * Update the count label and enable/disable the bulk action button.
1081 */
1082 refreshBulkBar: function($section) {
1083 var strings = vigilanteAdmin.strings;
1084 var mode = $section.data('bulk-mode'); // 'ignore' or 'unignore'
1085 var $checked = $section.find('.vigilante-fi-cb:checked');
1086 var count = $checked.length;
1087 var $btn = $section.find(mode === 'unignore' ? '.vigilante-bulk-unignore' : '.vigilante-bulk-ignore');
1088 var $count = $section.find('.vigilante-fi-bulk-count');
1089
1090 $btn.prop('disabled', count === 0);
1091
1092 if (count === 0) {
1093 $count.text('');
1094 } else {
1095 var template = (strings.bulkSelectedCount || '%d selected');
1096 $count.text(template.replace('%d', count));
1097 }
1098 },
1099
1100 /**
1101 * Collect the file paths checked inside a section.
1102 */
1103 collectSelectedFiles: function($section) {
1104 var files = [];
1105 $section.find('.vigilante-fi-cb:checked').each(function() {
1106 var v = $(this).val();
1107 if (v) {
1108 files.push(v);
1109 }
1110 });
1111 return files;
1112 },
1113
1114 /**
1115 * Bulk add to ignored list.
1116 */
1117 handleBulkIgnore: function(e) {
1118 e.preventDefault();
1119 var self = this;
1120 var strings = vigilanteAdmin.strings;
1121 var $btn = $(e.currentTarget);
1122 var $section = $btn.closest('.vigilante-paginated-section');
1123 var files = this.collectSelectedFiles($section);
1124
1125 if (files.length === 0) {
1126 Vigilante_Admin.showNotice('error', strings.bulkNoSelection || 'Select at least one file first.');
1127 return;
1128 }
1129
1130 if (!confirm(strings.bulkConfirmIgnore || 'Ignore the selected files?')) {
1131 return;
1132 }
1133
1134 var originalText = $btn.text();
1135 $btn.prop('disabled', true).text(strings.bulkProcessing || 'Processing...');
1136
1137 $.ajax({
1138 url: vigilanteAdmin.ajaxUrl,
1139 type: 'POST',
1140 data: {
1141 action: 'vigilante_bulk_ignore_files',
1142 nonce: vigilanteAdmin.nonce,
1143 files: files
1144 },
1145 success: function(response) {
1146 if (response.success) {
1147 // Remove processed rows from this section
1148 files.forEach(function(file) {
1149 $section.find('.vigilante-fi-cb').filter(function() {
1150 return $(this).val() === file;
1151 }).closest('tr').remove();
1152 });
1153 $section.find('.vigilante-fi-cb-all').prop('checked', false);
1154 Vigilante_Admin.refreshFilePagination($section);
1155 self.refreshBulkBar($section);
1156 Vigilante_Admin.showNotice('success', (response.data && response.data.message) || strings.fileIgnored);
1157 } else {
1158 Vigilante_Admin.showNotice('error', (response.data && response.data.message) || response.data || 'Failed to ignore files');
1159 $btn.prop('disabled', false).text(originalText);
1160 }
1161 },
1162 error: function() {
1163 $btn.prop('disabled', false).text(originalText);
1164 },
1165 // Restore the label on success too. refreshBulkBar() re-derives the
1166 // disabled state from the remaining selection but never rewrites the
1167 // button text, so without this the button stays on "Processing...".
1168 complete: function() {
1169 $btn.text(originalText);
1170 }
1171 });
1172 },
1173
1174 /**
1175 * Bulk remove from ignored list.
1176 */
1177 handleBulkUnignore: function(e) {
1178 e.preventDefault();
1179 var self = this;
1180 var strings = vigilanteAdmin.strings;
1181 var $btn = $(e.currentTarget);
1182 var $section = $btn.closest('.vigilante-paginated-section');
1183 var files = this.collectSelectedFiles($section);
1184
1185 if (files.length === 0) {
1186 Vigilante_Admin.showNotice('error', strings.bulkNoSelection || 'Select at least one file first.');
1187 return;
1188 }
1189
1190 if (!confirm(strings.bulkConfirmUnignore || 'Remove the selected files from ignored list?')) {
1191 return;
1192 }
1193
1194 var originalText = $btn.text();
1195 $btn.prop('disabled', true).text(strings.bulkProcessing || 'Processing...');
1196
1197 $.ajax({
1198 url: vigilanteAdmin.ajaxUrl,
1199 type: 'POST',
1200 data: {
1201 action: 'vigilante_bulk_unignore_files',
1202 nonce: vigilanteAdmin.nonce,
1203 files: files
1204 },
1205 success: function(response) {
1206 if (response.success) {
1207 files.forEach(function(file) {
1208 $section.find('.vigilante-fi-cb').filter(function() {
1209 return $(this).val() === file;
1210 }).closest('tr').remove();
1211 });
1212 $section.find('.vigilante-fi-cb-all').prop('checked', false);
1213 Vigilante_Admin.refreshFilePagination($section);
1214 self.refreshBulkBar($section);
1215 Vigilante_Admin.showNotice('success', (response.data && response.data.message) || strings.fileUnignored);
1216
1217 // If the ignored table is now empty, hide its section.
1218 if ($section.find('table.vigilante-fi-paginated tbody tr').length === 0) {
1219 $('#vigilante-section-fi-ignored').fadeOut(300, function() { $(this).remove(); });
1220 }
1221 } else {
1222 Vigilante_Admin.showNotice('error', (response.data && response.data.message) || response.data || 'Failed');
1223 $btn.prop('disabled', false).text(originalText);
1224 }
1225 },
1226 error: function() {
1227 $btn.prop('disabled', false).text(originalText);
1228 },
1229 // Restore the label on success too. refreshBulkBar() re-derives the
1230 // disabled state from the remaining selection but never rewrites the
1231 // button text, so without this the button stays on "Processing...".
1232 complete: function() {
1233 $btn.text(originalText);
1234 }
1235 });
1236 },
1237
1238 /**
1239 * Display scan results
1240 */
1241 displayScanResults: function(results, $container, ignoredCount) {
1242 // Ensure arrays exist
1243 results.modified = results.modified || [];
1244 results.suspicious = results.suspicious || [];
1245 results.extra = results.extra || [];
1246 results.missing = results.missing || [];
1247
1248 var strings = vigilanteAdmin.strings;
1249 var esc = Vigilante_Admin.escapeHtml;
1250
1251 var html = '<h2>' + strings.scanResults + '</h2>';
1252 html += '<div class="vigilante-scan-summary">';
1253 html += '<div class="vigilante-scan-stat vigilante-stat-ok">';
1254 html += '<span class="vigilante-stat-number">' + (results.ok || 0) + '</span>';
1255 html += '<span class="vigilante-stat-label">' + strings.ok + '</span>';
1256 html += '</div>';
1257 html += '<div class="vigilante-scan-stat vigilante-stat-modified">';
1258 html += '<span class="vigilante-stat-number">' + results.modified.length + '</span>';
1259 html += '<span class="vigilante-stat-label">' + strings.modified + '</span>';
1260 html += '</div>';
1261 html += '<div class="vigilante-scan-stat vigilante-stat-suspicious">';
1262 html += '<span class="vigilante-stat-number">' + results.suspicious.length + '</span>';
1263 html += '<span class="vigilante-stat-label">' + strings.suspicious + '</span>';
1264 html += '</div>';
1265 html += '<div class="vigilante-scan-stat vigilante-stat-extra">';
1266 html += '<span class="vigilante-stat-number">' + results.extra.length + '</span>';
1267 html += '<span class="vigilante-stat-label">' + (strings.extra || 'Extra') + '</span>';
1268 html += '</div>';
1269 if (ignoredCount > 0) {
1270 html += '<div class="vigilante-scan-stat vigilante-stat-ignored">';
1271 html += '<span class="vigilante-stat-number">' + ignoredCount + '</span>';
1272 html += '<span class="vigilante-stat-label">' + (strings.ignored || 'Ignored') + '</span>';
1273 html += '</div>';
1274 }
1275 html += '<div class="vigilante-scan-stat">';
1276 var computedTotal = (results.ok || 0) + results.modified.length + results.suspicious.length + results.extra.length + (ignoredCount || 0);
1277 html += '<span class="vigilante-stat-number">' + computedTotal + '</span>';
1278 html += '<span class="vigilante-stat-label">' + strings.totalScanned + '</span>';
1279 html += '</div>';
1280 html += '</div>';
1281
1282 var bulkBar = '<div class="vigilante-fi-bulk-bar">'
1283 + '<button type="button" class="button vigilante-bulk-ignore" disabled>' + (strings.bulkIgnoreSelected || 'Ignore selected') + '</button>'
1284 + '<span class="vigilante-fi-bulk-count" aria-live="polite"></span>'
1285 + '</div>';
1286 var selectAllCell = '<td class="manage-column column-cb check-column"><input type="checkbox" class="vigilante-fi-cb-all" aria-label="' + (strings.selectAll || 'Select all') + '"></td>';
1287
1288 // Suspicious files table
1289 if (results.suspicious.length > 0) {
1290 html += '<div class="vigilante-file-list vigilante-suspicious-files vigilante-paginated-section" data-bulk-mode="ignore">';
1291 html += '<h3 style="color: #d63638;">' + strings.suspiciousFiles + '</h3>';
1292 html += '<p class="description" style="color: #d63638;">' + strings.suspiciousWarning + '</p>';
1293 html += bulkBar;
1294 html += '<div class="vigilante-fi-pagination-wrap"></div>';
1295 html += '<table class="wp-list-table widefat fixed striped vigilante-fi-paginated">';
1296 html += '<thead><tr>' + selectAllCell + '<th>' + strings.file + '</th><th style="width: 250px;">' + strings.reason + '</th><th style="width: 120px;">' + strings.type + '</th><th style="width: 80px;">' + (strings.actions || 'Actions') + '</th></tr></thead>';
1297 html += '<tbody>';
1298 results.suspicious.forEach(function(file) {
1299 html += '<tr>';
1300 html += '<th scope="row" class="check-column"><input type="checkbox" class="vigilante-fi-cb" value="' + esc(file.file) + '"></th>';
1301 html += '<td><code style="color: #d63638;">' + esc(file.file) + '</code></td>';
1302 html += '<td>' + esc(file.reason || strings.unknown) + '</td>';
1303 html += '<td>' + esc(file.type || strings.unknown) + '</td>';
1304 html += '<td><button type="button" class="button button-small vigilante-ignore-file" data-file="' + esc(file.file) + '">' + (strings.ignore || 'Ignore') + '</button></td>';
1305 html += '</tr>';
1306 });
1307 html += '</tbody></table>';
1308 html += '</div>';
1309 }
1310
1311 // Extra files table
1312 if (results.extra.length > 0) {
1313 html += '<div class="vigilante-file-list vigilante-extra-files vigilante-paginated-section" data-bulk-mode="ignore">';
1314 html += '<h3 style="color: #b32d2e;">' + (strings.extraFiles || 'Extra Files') + '</h3>';
1315 html += '<p class="description">' + (strings.extraDescription || 'PHP files not in original distribution.') + '</p>';
1316 html += bulkBar;
1317 html += '<div class="vigilante-fi-pagination-wrap"></div>';
1318 html += '<table class="wp-list-table widefat fixed striped vigilante-fi-paginated">';
1319 html += '<thead><tr>' + selectAllCell + '<th>' + strings.file + '</th><th style="width: 250px;">' + strings.reason + '</th><th style="width: 120px;">' + strings.type + '</th><th style="width: 80px;">' + (strings.actions || 'Actions') + '</th></tr></thead>';
1320 html += '<tbody>';
1321 results.extra.forEach(function(file) {
1322 html += '<tr>';
1323 html += '<th scope="row" class="check-column"><input type="checkbox" class="vigilante-fi-cb" value="' + esc(file.file) + '"></th>';
1324 html += '<td><code style="color: #b32d2e;">' + esc(file.file) + '</code></td>';
1325 html += '<td>' + esc(file.reason || strings.unknown) + '</td>';
1326 html += '<td>' + esc(file.type || strings.unknown) + '</td>';
1327 html += '<td><button type="button" class="button button-small vigilante-ignore-file" data-file="' + esc(file.file) + '">' + (strings.ignore || 'Ignore') + '</button></td>';
1328 html += '</tr>';
1329 });
1330 html += '</tbody></table>';
1331 html += '</div>';
1332 }
1333
1334 // Split critical config from regular modified
1335 var criticalModified = [];
1336 var regularModified = [];
1337 results.modified.forEach(function(file) {
1338 if (file.type === 'critical_config') {
1339 criticalModified.push(file);
1340 } else {
1341 regularModified.push(file);
1342 }
1343 });
1344
1345 // Critical config files section (same visual treatment as suspicious files)
1346 if (criticalModified.length > 0) {
1347 html += '<div class="vigilante-file-list vigilante-critical-config-files">';
1348 html += '<h3 style="color: #e36210;">' + (strings.criticalConfigTitle || 'Critical config files modified') + '</h3>';
1349 html += '<p class="description">' + (strings.criticalConfigDesc || '') + '</p>';
1350 html += '<table class="wp-list-table widefat fixed striped">';
1351 html += '<thead><tr><th>' + strings.file + '</th><th style="width: 200px;">' + (strings.changes || 'Changes') + '</th><th style="width: 220px;">' + (strings.actions || 'Actions') + '</th></tr></thead>';
1352 html += '<tbody>';
1353
1354 // Delega en el escapador del objeto, que codifica comillas. La
1355 // version anterior era $('<span>').text(s).html(), que no las toca:
1356 // aqui solo se usa en posicion de texto, pero es el patron del
1357 // CVE-2026-81754 esperando a que alguien lo mueva a un atributo.
1358 var escHtml = Vigilante_Admin.escapeHtml;
1359
1360 criticalModified.forEach(function(file) {
1361 var fileId = file.file.replace(/[^a-z0-9]/gi, '-');
1362 var baselineSize = file.baseline_size ? Number(file.baseline_size).toLocaleString() : '?';
1363 var currentSize = file.current_size ? Number(file.current_size).toLocaleString() : '?';
1364 var diff = file.diff || {};
1365 var added = diff.added || [];
1366 var removed = diff.removed || [];
1367 var diffUnavailable = !!diff.unavailable;
1368
1369 // Main row
1370 html += '<tr>';
1371 html += '<td><code style="color: #e36210;">' + esc(file.file) + '</code></td>';
1372 html += '<td>';
1373 if (!diffUnavailable) {
1374 html += '<span style="color: #007017;">+' + added.length + '</span> <span style="color: #b32d2e;">-' + removed.length + '</span> ' + (strings.diffLines || 'lines') + '<br>';
1375 }
1376 html += '<small style="color: #50575e;">' + baselineSize + ' &rarr; ' + currentSize + ' bytes</small>';
1377 html += '</td>';
1378 html += '<td>';
1379 html += '<button type="button" class="button button-small vigilante-toggle-critical-content" data-target="vigilante-critical-content-' + fileId + '" data-label-show="' + (strings.reviewChanges || 'Review changes') + '" data-label-hide="' + (strings.hideChanges || 'Hide changes') + '">' + (strings.reviewChanges || 'Review changes') + '</button> ';
1380 html += '<button type="button" class="button button-small button-primary vigilante-approve-critical-file" data-file="' + esc(file.file) + '">' + (strings.approve || 'Approve') + '</button>';
1381 html += '</td>';
1382 html += '</tr>';
1383
1384 // Expandable diff row
1385 html += '<tr id="vigilante-critical-content-' + fileId + '" class="vigilante-critical-content-row" style="display:none;">';
1386 html += '<td colspan="3" style="padding: 0;">';
1387 html += '<div class="vigilante-critical-content" style="max-height: 400px; overflow: auto; background: #fff; padding: 10px; font-size: 12px; line-height: 1.5; font-family: Consolas, Monaco, monospace; border-top: 1px solid #c3c4c7;">';
1388 if (diffUnavailable) {
1389 html += '<p style="color: #50575e; font-style: italic; margin: 0;">' + (strings.diffUnavailable || 'Diff not available.') + '</p>';
1390 } else if (added.length === 0 && removed.length === 0) {
1391 html += '<p style="color: #50575e; font-style: italic; margin: 0;">' + (strings.diffEmpty || 'No line changes detected.') + '</p>';
1392 } else {
1393 removed.forEach(function(rline) {
1394 html += '<div style="background: #fbeaea; color: #b32d2e; padding: 1px 4px; white-space: pre-wrap; word-wrap: break-word;"><span style="display: inline-block; width: 50px; color: #999; user-select: none;">' + (rline.line || 0) + '</span>- ' + escHtml(rline.content || '') + '</div>';
1395 });
1396 added.forEach(function(aline) {
1397 html += '<div style="background: #e6f4e9; color: #007017; padding: 1px 4px; white-space: pre-wrap; word-wrap: break-word;"><span style="display: inline-block; width: 50px; color: #999; user-select: none;">' + (aline.line || 0) + '</span>+ ' + escHtml(aline.content || '') + '</div>';
1398 });
1399 }
1400 html += '</div>';
1401 html += '</td>';
1402 html += '</tr>';
1403 });
1404
1405 html += '</tbody></table>';
1406 html += '</div>';
1407 }
1408
1409 // Regular modified files table
1410 if (regularModified.length > 0) {
1411 html += '<div class="vigilante-file-list vigilante-paginated-section" data-bulk-mode="ignore">';
1412 html += '<h3>' + strings.modifiedFiles + '</h3>';
1413 html += '<p class="description">' + strings.modifiedDescription + '</p>';
1414 html += bulkBar;
1415 html += '<div class="vigilante-fi-pagination-wrap"></div>';
1416 html += '<table class="wp-list-table widefat fixed striped vigilante-fi-paginated">';
1417 html += '<thead><tr>' + selectAllCell + '<th>' + strings.file + '</th><th style="width: 100px;">' + strings.type + '</th><th style="width: 80px;">' + (strings.actions || 'Actions') + '</th></tr></thead>';
1418 html += '<tbody>';
1419 regularModified.forEach(function(file) {
1420 html += '<tr>';
1421 html += '<th scope="row" class="check-column"><input type="checkbox" class="vigilante-fi-cb" value="' + esc(file.file) + '"></th>';
1422 html += '<td><code>' + esc(file.file) + '</code></td>';
1423 html += '<td>' + esc(file.type || strings.unknown) + '</td>';
1424 html += '<td><button type="button" class="button button-small vigilante-ignore-file" data-file="' + esc(file.file) + '">' + (strings.ignore || 'Ignore') + '</button></td>';
1425 html += '</tr>';
1426 });
1427 html += '</tbody></table>';
1428 html += '</div>';
1429 }
1430
1431 if (results.modified.length === 0 && results.suspicious.length === 0 && results.extra.length === 0) {
1432 html += '<div class="vigilante-all-clear"><span class="dashicons dashicons-yes-alt"></span> ' + strings.allClear + '</div>';
1433 }
1434
1435 $container.html(html).show();
1436
1437 // Initialize client-side pagination for file integrity tables
1438 this.initFileIntegrityPagination($container);
1439 },
1440
1441 /**
1442 * Initialize client-side pagination for file integrity tables
1443 * Works on both PHP-rendered (last results) and JS-rendered (live scan) tables
1444 *
1445 * @param {jQuery} $scope Optional scope to limit search (for live scan results)
1446 */
1447 initFileIntegrityPagination: function($scope) {
1448 var perPage = 20;
1449 var $context = $scope || $(document);
1450
1451 $context.find('table.vigilante-fi-paginated').each(function() {
1452 var $table = $(this);
1453 var $rows = $table.find('tbody tr');
1454 var total = $rows.length;
1455
1456 if (total === 0) {
1457 return;
1458 }
1459
1460 // Store state on the parent container
1461 var $container = $table.closest('.vigilante-paginated-section');
1462 $container.data('fi-page', 1);
1463 $container.data('fi-per-page', perPage);
1464 $container.data('fi-total', total);
1465
1466 // Hide rows beyond first page (only if more than perPage)
1467 if (total > perPage) {
1468 $rows.each(function(index) {
1469 $(this).toggle(index < perPage);
1470 });
1471 }
1472
1473 // Build pagination controls (always show count, buttons only when needed)
1474 var $wrap = $container.find('.vigilante-fi-pagination-wrap');
1475 var paginationHtml = Vigilante_Admin.buildFilePaginationHtml(1, perPage, total);
1476 $wrap.html(paginationHtml);
1477 });
1478 },
1479
1480 /**
1481 * Build pagination HTML for file integrity tables
1482 */
1483 buildFilePaginationHtml: function(page, perPage, total) {
1484 var totalPages = Math.ceil(total / perPage) || 1;
1485 var from = total > 0 ? ((page - 1) * perPage) + 1 : 0;
1486 var to = Math.min(page * perPage, total);
1487 var needsNav = total > perPage;
1488
1489 var text = total > 0
1490 ? (vigilanteAdmin.strings.paginationOf || '%1$d–%2$d of %3$d').replace('%1$d', from).replace('%2$d', to).replace('%3$d', total)
1491 : (vigilanteAdmin.strings.paginationEmpty || '0 items');
1492
1493 var prevDisabled = page <= 1 ? ' disabled' : '';
1494 var nextDisabled = page >= totalPages ? ' disabled' : '';
1495
1496 var html = '<span class="vigilante-pagination vigilante-fi-pagination">';
1497 if (needsNav) {
1498 html += '<button type="button" class="vigilante-page-first" title="First"' + prevDisabled + '>&laquo;</button>';
1499 html += '<button type="button" class="vigilante-page-prev" title="Previous"' + prevDisabled + '>&lsaquo;</button>';
1500 }
1501 html += '<span class="vigilante-page-info">' + text + '</span>';
1502 if (needsNav) {
1503 html += '<button type="button" class="vigilante-page-next" title="Next"' + nextDisabled + '>&rsaquo;</button>';
1504 html += '<button type="button" class="vigilante-page-last" title="Last"' + nextDisabled + '>&raquo;</button>';
1505 }
1506 html += '</span>';
1507
1508 return html;
1509 },
1510
1511 /**
1512 * Navigate file integrity table pages (client-side)
1513 */
1514 goToFilePage: function($container, direction) {
1515 var page = $container.data('fi-page') || 1;
1516 var perPage = $container.data('fi-per-page') || 20;
1517 var total = $container.data('fi-total') || 0;
1518 var totalPages = Math.ceil(total / perPage) || 1;
1519
1520 switch (direction) {
1521 case 'first': page = 1; break;
1522 case 'prev': page = Math.max(1, page - 1); break;
1523 case 'next': page = Math.min(totalPages, page + 1); break;
1524 case 'last': page = totalPages; break;
1525 }
1526
1527 $container.data('fi-page', page);
1528
1529 // Show/hide rows
1530 var start = (page - 1) * perPage;
1531 var end = start + perPage;
1532 $container.find('table.vigilante-fi-paginated tbody tr').each(function(index) {
1533 $(this).toggle(index >= start && index < end);
1534 });
1535
1536 // Update controls
1537 var $wrap = $container.find('.vigilante-fi-pagination-wrap');
1538 $wrap.html(this.buildFilePaginationHtml(page, perPage, total));
1539
1540 // Sync the "select all" header with what is now visible.
1541 // Selections in other pages remain checked and will be included
1542 // in any bulk action, but the header reflects only this page.
1543 var $allCb = $container.find('.vigilante-fi-cb-all');
1544 if ($allCb.length) {
1545 var $visible = $container.find('table.vigilante-fi-paginated tbody tr:visible .vigilante-fi-cb');
1546 var $checked = $visible.filter(':checked');
1547 $allCb.prop('checked', $visible.length > 0 && $checked.length === $visible.length);
1548 }
1549 },
1550
1551 /**
1552 * Refresh file integrity pagination after row removal (ignore)
1553 */
1554 refreshFilePagination: function($container) {
1555 var perPage = $container.data('fi-per-page') || 20;
1556 var $rows = $container.find('table.vigilante-fi-paginated tbody tr');
1557 var total = $rows.length;
1558
1559 $container.data('fi-total', total);
1560
1561 if (total === 0) {
1562 $container.find('.vigilante-fi-pagination-wrap').empty();
1563 return;
1564 }
1565
1566 if (total <= perPage) {
1567 // Show all rows, display count only
1568 $rows.show();
1569 $container.data('fi-page', 1);
1570 var $wrap = $container.find('.vigilante-fi-pagination-wrap');
1571 $wrap.html(this.buildFilePaginationHtml(1, perPage, total));
1572 return;
1573 }
1574
1575 // Ensure current page is still valid
1576 var page = $container.data('fi-page') || 1;
1577 var totalPages = Math.ceil(total / perPage);
1578 if (page > totalPages) {
1579 page = totalPages;
1580 }
1581 $container.data('fi-page', page);
1582
1583 // Show/hide rows for current page
1584 var start = (page - 1) * perPage;
1585 var end = start + perPage;
1586 $rows.each(function(index) {
1587 $(this).toggle(index >= start && index < end);
1588 });
1589
1590 var $wrap = $container.find('.vigilante-fi-pagination-wrap');
1591 $wrap.html(this.buildFilePaginationHtml(page, perPage, total));
1592 },
1593
1594 /**
1595 * Handle export settings
1596 */
1597 handleExportSettings: function(e) {
1598 e.preventDefault();
1599
1600 $.ajax({
1601 url: vigilanteAdmin.ajaxUrl,
1602 type: 'POST',
1603 data: {
1604 action: 'vigilante_export_settings',
1605 nonce: vigilanteAdmin.nonce
1606 },
1607 success: function(response) {
1608 if (response.success) {
1609 var blob = new Blob([response.data.content], { type: 'application/json' });
1610 var url = URL.createObjectURL(blob);
1611 var a = document.createElement('a');
1612 a.href = url;
1613 a.download = response.data.filename;
1614 document.body.appendChild(a);
1615 a.click();
1616 document.body.removeChild(a);
1617 URL.revokeObjectURL(url);
1618 } else {
1619 Vigilante_Admin.showNotice('error', response.data);
1620 }
1621 }
1622 });
1623 },
1624
1625 /**
1626 * Handle import settings click
1627 */
1628 handleImportSettings: function(e) {
1629 e.preventDefault();
1630 $('#vigilante-import-file').trigger('click');
1631 },
1632
1633 /**
1634 * Handle import file selection
1635 */
1636 handleImportFile: function(e) {
1637 var file = e.target.files[0];
1638 if (!file) return;
1639
1640 var reader = new FileReader();
1641 reader.onload = function(e) {
1642 if (!confirm(vigilanteAdmin.strings.confirm + ' ' + (vigilanteAdmin.strings.confirmOverwrite || 'This will overwrite your current settings.'))) {
1643 return;
1644 }
1645
1646 $.ajax({
1647 url: vigilanteAdmin.ajaxUrl,
1648 type: 'POST',
1649 data: {
1650 action: 'vigilante_import_settings',
1651 nonce: vigilanteAdmin.nonce,
1652 settings: e.target.result
1653 },
1654 success: function(response) {
1655 if (response.success) {
1656 Vigilante_Admin.showNotice('success', response.data);
1657 setTimeout(function() {
1658 location.reload();
1659 }, 1000);
1660 } else {
1661 Vigilante_Admin.showNotice('error', response.data || vigilanteAdmin.strings.importFailed);
1662 }
1663 },
1664 error: function() {
1665 Vigilante_Admin.showNotice('error', vigilanteAdmin.strings.importFailed);
1666 }
1667 });
1668 };
1669 reader.readAsText(file);
1670 },
1671
1672 /**
1673 * Handle reset settings
1674 */
1675 handleResetSettings: function(e) {
1676 e.preventDefault();
1677
1678 if (!confirm(vigilanteAdmin.strings.confirm + ' ' + (vigilanteAdmin.strings.confirmResetAll || 'This will reset ALL settings to defaults.'))) {
1679 return;
1680 }
1681
1682 $.ajax({
1683 url: vigilanteAdmin.ajaxUrl,
1684 type: 'POST',
1685 data: {
1686 action: 'vigilante_apply_preset',
1687 nonce: vigilanteAdmin.nonce,
1688 preset: 'reset'
1689 },
1690 success: function(response) {
1691 if (response.success) {
1692 Vigilante_Admin.showNotice('success', vigilanteAdmin.strings.settingsResetDefaults || 'Settings reset to defaults.');
1693 setTimeout(function() {
1694 location.reload();
1695 }, 1000);
1696 } else {
1697 Vigilante_Admin.showNotice('error', response.data);
1698 }
1699 }
1700 });
1701 },
1702
1703 /**
1704 * Handle test headers
1705 */
1706 handleTestHeaders: function(e) {
1707 e.preventDefault();
1708
1709 var $btn = $(e.currentTarget);
1710 var $results = $('#vigilante-headers-result');
1711
1712 $btn.prop('disabled', true).html(vigilanteAdmin.strings.testing + ' <span class="vigilante-spinner"></span>');
1713
1714 $.ajax({
1715 url: vigilanteAdmin.ajaxUrl,
1716 type: 'POST',
1717 data: {
1718 action: 'vigilante_test_headers',
1719 nonce: vigilanteAdmin.nonce
1720 },
1721 success: function(response) {
1722 if (response.success) {
1723 Vigilante_Admin.displayHeaderResults(response.data, $results);
1724 } else {
1725 Vigilante_Admin.showNotice('error', response.data);
1726 }
1727 },
1728 complete: function() {
1729 $btn.prop('disabled', false).text(vigilanteAdmin.strings.testHeaders);
1730 }
1731 });
1732 },
1733
1734 /**
1735 * Handle login URL notification button
1736 */
1737 handleNotifyLoginUrl: function(e) {
1738 e.preventDefault();
1739
1740 var $btn = $(e.currentTarget);
1741 var $status = $btn.siblings('.vigilante-login-url-notify-status');
1742
1743 $btn.prop('disabled', true).text(vigilanteAdmin.strings.sending || 'Sending...');
1744 $status.removeClass('success error').text('');
1745
1746 $.ajax({
1747 url: vigilanteAdmin.ajaxUrl,
1748 type: 'POST',
1749 data: {
1750 action: 'vigilante_notify_login_url',
1751 nonce: vigilanteAdmin.nonce
1752 },
1753 success: function(response) {
1754 if (response.success) {
1755 var msg = response.data.sent + ' ' + (vigilanteAdmin.strings.notificationsSent || 'notifications sent');
1756 if (response.data.failed > 0) {
1757 msg += ', ' + response.data.failed + ' ' + (vigilanteAdmin.strings.failed || 'failed');
1758 }
1759 $status.addClass('success').text(msg);
1760 } else {
1761 $status.addClass('error').text(response.data || 'Error');
1762 }
1763 },
1764 error: function() {
1765 $status.addClass('error').text('Error');
1766 },
1767 complete: function() {
1768 $btn.prop('disabled', false).text(vigilanteAdmin.strings.sendNotification || 'Send notification now');
1769 }
1770 });
1771 },
1772
1773 /**
1774 * Toggle login URL notification section based on URL input
1775 */
1776 handleLoginUrlToggle: function() {
1777 var hasUrl = $('#vigilante_custom_login_url').val().trim().length > 0;
1778 $('.vigilante-login-url-notify-wrapper').toggleClass('vigilante-login-url-notify-disabled', !hasUrl);
1779 $('.vigilante-login-url-preview').toggle(hasUrl);
1780 },
1781
1782 /**
1783 * Display header test results
1784 */
1785 displayHeaderResults: function(results, $container) {
1786 var gradeClass = 'vigilante-grade-' + results.grade.toLowerCase();
1787 var html = '<div class="vigilante-security-score" style="text-align: center; padding: 20px;">';
1788 html += '<div class="vigilante-score-circle ' + gradeClass + '">';
1789 html += '<span class="vigilante-grade">' + results.grade + '</span>';
1790 html += '</div>';
1791 html += '<p style="text-align: center;"><strong>' + vigilanteAdmin.strings.score + ':</strong> ' + Math.round(results.score) + '%</p>';
1792 html += '</div>';
1793
1794 if (results.headers.length > 0) {
1795 html += '<p><strong>' + vigilanteAdmin.strings.enabledHeaders + ':</strong></p><ul>';
1796 results.headers.forEach(function(header) {
1797 html += '<li class="enabled">&#10003; ' + header + '</li>';
1798 });
1799 html += '</ul>';
1800 }
1801
1802 if (results.missing.length > 0) {
1803 html += '<p><strong>' + vigilanteAdmin.strings.missingHeaders + ':</strong></p><ul>';
1804 results.missing.forEach(function(header) {
1805 html += '<li class="missing">&#10007; ' + header + '</li>';
1806 });
1807 html += '</ul>';
1808 }
1809
1810 if (results.warnings && results.warnings.length > 0) {
1811 html += '<p><strong>' + vigilanteAdmin.strings.warnings + ':</strong></p><ul>';
1812 results.warnings.forEach(function(warning) {
1813 html += '<li class="warning">&#9888; ' + warning + '</li>';
1814 });
1815 html += '</ul>';
1816 }
1817
1818 $container.html(html).addClass('visible');
1819 },
1820
1821 /**
1822 * Handle activity log filter
1823 */
1824 handleLogFilter: function() {
1825 this.logPage = 1;
1826 this.loadActivityLogs();
1827 },
1828
1829 /**
1830 * Handle activity log search with debounce (400ms, min 3 chars)
1831 */
1832 handleLogSearch: function() {
1833 var self = this;
1834 clearTimeout(this.logSearchTimer);
1835 this.logSearchTimer = setTimeout(function() {
1836 var term = $('#vigilante-log-search').val().trim();
1837 // Only search with 3+ chars, or clear search when empty
1838 if (term.length >= 3 || term.length === 0) {
1839 self.logPage = 1;
1840 self.loadActivityLogs();
1841 }
1842 }, 400);
1843 },
1844
1845 /**
1846 * Load activity logs via AJAX (with filters and pagination)
1847 */
1848 loadActivityLogs: function() {
1849 var type = $('#vigilante-log-type-filter').val();
1850 var severity = $('#vigilante-log-severity-filter').val();
1851 var method = $('#vigilante-log-method-filter').val();
1852 var search = $('#vigilante-log-search').val();
1853 var $refreshBtn = $('#vigilante-log-refresh');
1854
1855 // Visual feedback
1856 $refreshBtn.prop('disabled', true).addClass('updating-message');
1857
1858 var data = {
1859 action: 'vigilante_get_logs',
1860 nonce: vigilanteAdmin.nonce,
1861 per_page: this.logPerPage,
1862 page: this.logPage,
1863 type: type,
1864 severity: severity
1865 };
1866
1867 if (method) {
1868 data.request_method = method;
1869 }
1870
1871 if (search && search.trim().length >= 3) {
1872 data.search = search.trim();
1873 }
1874
1875 $.ajax({
1876 url: vigilanteAdmin.ajaxUrl,
1877 type: 'POST',
1878 data: data,
1879 success: function(response) {
1880 if (response.success) {
1881 Vigilante_Admin.renderLogTable(response.data.logs);
1882 Vigilante_Admin.updateLogPagination(response.data.total);
1883 } else {
1884 Vigilante_Admin.showNotice('error', response.data || vigilanteAdmin.strings.error);
1885 }
1886 },
1887 error: function() {
1888 Vigilante_Admin.showNotice('error', vigilanteAdmin.strings.error || 'Request failed');
1889 },
1890 complete: function() {
1891 $refreshBtn.prop('disabled', false).removeClass('updating-message');
1892 }
1893 });
1894 },
1895
1896 /**
1897 * Navigate activity log pages
1898 */
1899 goToLogPage: function(direction) {
1900 var $pagination = $('#vigilante-log-pagination');
1901 var total = parseInt($pagination.attr('data-total'), 10) || 0;
1902 var totalPages = Math.ceil(total / this.logPerPage) || 1;
1903
1904 switch (direction) {
1905 case 'first': this.logPage = 1; break;
1906 case 'prev': this.logPage = Math.max(1, this.logPage - 1); break;
1907 case 'next': this.logPage = Math.min(totalPages, this.logPage + 1); break;
1908 case 'last': this.logPage = totalPages; break;
1909 }
1910
1911 this.loadActivityLogs();
1912 },
1913
1914 /**
1915 * Update activity log pagination controls
1916 */
1917 updateLogPagination: function(total) {
1918 var $pagination = $('#vigilante-log-pagination');
1919 total = parseInt(total, 10) || 0;
1920 var totalPages = Math.ceil(total / this.logPerPage) || 1;
1921 var needsNav = total > this.logPerPage;
1922
1923 $pagination.attr('data-total', total);
1924 $pagination.attr('data-page', this.logPage);
1925
1926 var from = total > 0 ? ((this.logPage - 1) * this.logPerPage) + 1 : 0;
1927 var to = Math.min(this.logPage * this.logPerPage, total);
1928
1929 var text = total > 0
1930 ? (vigilanteAdmin.strings.paginationOf || '%1$d–%2$d of %3$d').replace('%1$d', from).replace('%2$d', to).replace('%3$d', total)
1931 : (vigilanteAdmin.strings.paginationEmpty || '0 items');
1932
1933 var prevDisabled = this.logPage <= 1 ? ' disabled' : '';
1934 var nextDisabled = this.logPage >= totalPages ? ' disabled' : '';
1935
1936 var html = '';
1937 if (needsNav) {
1938 html += '<button type="button" class="vigilante-page-first"' + prevDisabled + '>&laquo;</button>';
1939 html += '<button type="button" class="vigilante-page-prev"' + prevDisabled + '>&lsaquo;</button>';
1940 }
1941 html += '<span class="vigilante-page-info">' + text + '</span>';
1942 if (needsNav) {
1943 html += '<button type="button" class="vigilante-page-next"' + nextDisabled + '>&rsaquo;</button>';
1944 html += '<button type="button" class="vigilante-page-last"' + nextDisabled + '>&raquo;</button>';
1945 }
1946
1947 $pagination.html(html);
1948 },
1949
1950 /**
1951 * Render log table
1952 */
1953 renderLogTable: function(logs) {
1954 var $tbody = $('#vigilante-activity-log-table tbody');
1955 $tbody.empty();
1956
1957 if (logs.length === 0) {
1958 $tbody.append('<tr><td colspan="8">' + (vigilanteAdmin.strings.noLogEntries || 'No log entries found.') + '</td></tr>');
1959 return;
1960 }
1961
1962 var self = this;
1963 var typeLabels = (vigilanteAdmin.strings && vigilanteAdmin.strings.eventTypeLabels) || {};
1964 var severityLabels = (vigilanteAdmin.strings && vigilanteAdmin.strings.severityLabels) || {};
1965
1966 logs.forEach(function(log) {
1967 var details = {
1968 id: log.id,
1969 type: log.event_type || '',
1970 action: log.event_action || '',
1971 message: log.event_message || '',
1972 user: log.user_login || '',
1973 ip: log.ip_address || '',
1974 user_agent: log.user_agent || '',
1975 request_method: log.request_method || '',
1976 request_uri: log.request_uri || '',
1977 date: log.created_at || '',
1978 severity: log.severity || 'info',
1979 is_ip_whitelisted: !!log.is_ip_whitelisted,
1980 is_ip_blacklisted: !!log.is_ip_blacklisted,
1981 is_ua_whitelisted: !!log.is_ua_whitelisted,
1982 is_ua_blacklisted: !!log.is_ua_blacklisted
1983 };
1984
1985 var displayType = typeLabels[log.event_type] || log.event_type;
1986 var displaySeverity = severityLabels[log.severity] || log.severity;
1987
1988 var methodHtml = '-';
1989 if (log.request_method) {
1990 methodHtml = '<span class="vigilante-method-label vigilante-method-' + self.escapeHtml(log.request_method.toLowerCase()) + '">' + self.escapeHtml(log.request_method) + '</span>';
1991 }
1992
1993 var row = '<tr class="vigilante-severity-' + self.escapeHtml(log.severity) + '">';
1994 row += '<td>' + self.escapeHtml(log.created_at) + '</td>';
1995 row += '<td>' + self.escapeHtml(displayType) + '</td>';
1996 row += '<td>' + methodHtml + '</td>';
1997 row += '<td><span class="vigilante-badge vigilante-badge-' + self.escapeHtml(log.severity) + '">' + self.escapeHtml(displaySeverity) + '</span></td>';
1998 row += '<td>' + self.escapeHtml(log.event_message) + '</td>';
1999 row += '<td>' + self.escapeHtml(log.user_login || '-') + '</td>';
2000 row += '<td><code>' + self.escapeHtml(log.ip_address) + '</code></td>';
2001 row += '<td><button type="button" class="button button-small vigilante-view-log-details" data-details=\'' + self.escapeHtml(JSON.stringify(details)) + '\'>' + (vigilanteAdmin.strings.view || 'View') + '</button></td>';
2002 row += '</tr>';
2003 $tbody.append(row);
2004 });
2005 },
2006
2007 /**
2008 * Handle export logs
2009 */
2010 handleExportLogs: function(e) {
2011 e.preventDefault();
2012
2013 var $btn = $(e.currentTarget);
2014 var type = $('#vigilante-log-type-filter').val();
2015 var severity = $('#vigilante-log-severity-filter').val();
2016 var method = $('#vigilante-log-method-filter').val();
2017 var search = $('#vigilante-log-search').val();
2018
2019 var data = {
2020 action: 'vigilante_get_logs',
2021 nonce: vigilanteAdmin.nonce,
2022 per_page: 9999
2023 };
2024
2025 // Only add filters if they have values
2026 if (type && type !== '') {
2027 data.type = type;
2028 }
2029 if (severity && severity !== '') {
2030 data.severity = severity;
2031 }
2032 if (method && method !== '') {
2033 data.request_method = method;
2034 }
2035 if (search && search.trim().length >= 3) {
2036 data.search = search.trim();
2037 }
2038
2039 $btn.prop('disabled', true).text(vigilanteAdmin.strings.exporting || 'Exporting...');
2040
2041 $.ajax({
2042 url: vigilanteAdmin.ajaxUrl,
2043 type: 'POST',
2044 data: data,
2045 success: function(response) {
2046 if (response.success && response.data.logs && response.data.logs.length > 0) {
2047 Vigilante_Admin.downloadCSV(response.data.logs);
2048 Vigilante_Admin.showNotice('success', (vigilanteAdmin.strings.logsExported || 'Logs exported (%d entries)').replace('%d', response.data.logs.length));
2049 } else {
2050 Vigilante_Admin.showNotice('warning', vigilanteAdmin.strings.noLogsToExport || 'No logs to export');
2051 }
2052 },
2053 error: function() {
2054 Vigilante_Admin.showNotice('error', vigilanteAdmin.strings.exportFailed || 'Export failed');
2055 },
2056 complete: function() {
2057 $btn.prop('disabled', false).text(vigilanteAdmin.strings.exportLogs || 'Export Logs');
2058 }
2059 });
2060 },
2061
2062 /**
2063 * Download logs as CSV
2064 */
2065 downloadCSV: function(logs) {
2066 var csv = 'Date,Type,Method,Severity,Message,User,IP\n';
2067
2068 logs.forEach(function(log) {
2069 csv += '"' + log.created_at + '",';
2070 csv += '"' + log.event_type + '",';
2071 csv += '"' + (log.request_method || '') + '",';
2072 csv += '"' + log.severity + '",';
2073 csv += '"' + (log.event_message || '').replace(/"/g, '""') + '",';
2074 csv += '"' + (log.user_login || '') + '",';
2075 csv += '"' + log.ip_address + '"\n';
2076 });
2077
2078 var blob = new Blob([csv], { type: 'text/csv' });
2079 var url = URL.createObjectURL(blob);
2080 var a = document.createElement('a');
2081 a.href = url;
2082 a.download = 'activity-log-' + new Date().toISOString().slice(0, 10) + '.csv';
2083 document.body.appendChild(a);
2084 a.click();
2085 document.body.removeChild(a);
2086 URL.revokeObjectURL(url);
2087 },
2088
2089 /**
2090 * Handle create backup
2091 */
2092 handleCreateBackup: function(e) {
2093 e.preventDefault();
2094
2095 var $btn = $(e.currentTarget);
2096 $btn.prop('disabled', true).html(vigilanteAdmin.strings.loading + ' <span class="vigilante-spinner"></span>');
2097
2098 // Direct file download via a hidden form (same pattern as the
2099 // database backup): the server streams a ZIP with wp-config.php and
2100 // .htaccess as an attachment.
2101 var $form = $('<form>', { method: 'POST', action: vigilanteAdmin.ajaxUrl });
2102 $form.append($('<input>', { type: 'hidden', name: 'action', value: 'vigilante_download_files_backup' }));
2103 $form.append($('<input>', { type: 'hidden', name: 'nonce', value: vigilanteAdmin.nonce }));
2104 $('body').append($form);
2105 $form.submit();
2106 $form.remove();
2107
2108 // Re-enable the button after a short delay (download runs in the background).
2109 setTimeout(function() {
2110 $btn.prop('disabled', false).text(vigilanteAdmin.strings.createBackupNow || 'Create Backup Now');
2111 }, 2000);
2112 },
2113
2114 // =================================================================
2115 // DATABASE BACKUP HANDLERS
2116 // =================================================================
2117
2118 /**
2119 * Toggle database backup panel and load tables
2120 */
2121 handleDbBackupToggle: function(e) {
2122 e.preventDefault();
2123
2124 var $panel = $('.vigilante-db-backup-panel');
2125 var $btn = $(e.currentTarget);
2126
2127 if ($panel.is(':visible')) {
2128 $panel.slideUp(200);
2129 return;
2130 }
2131
2132 $panel.slideDown(200);
2133
2134 // Load tables if not already loaded
2135 if ($panel.find('.vigilante-db-tables-content').is(':hidden')) {
2136 this.loadDbTables();
2137 }
2138 },
2139
2140 /**
2141 * Handle settings search input
2142 */
2143 searchActiveIndex: -1,
2144
2145 handleSettingsSearch: function(e) {
2146 var query = ($('#vigilante-settings-search').val() || '').trim().toLowerCase();
2147 var $results = $('#vigilante-settings-search-results');
2148 var index = (vigilanteAdmin.searchIndex || []);
2149
2150 if (query.length < 2) {
2151 $results.attr('hidden', true).empty();
2152 this.searchActiveIndex = -1;
2153 return;
2154 }
2155
2156 // Score every entry and sort before cutting. It used to stop at the
2157 // first 30 matches in index order, so a broad query ("password"
2158 // already returns 19) could hide the very row the user was after
2159 // behind whatever happened to be declared first.
2160 var scored = [];
2161 for (var i = 0; i < index.length; i++) {
2162 var entry = index[i];
2163 var label = (entry.label || '').toLowerCase();
2164 var labelEn = (entry.label_en || '').toLowerCase();
2165 var section = (entry.section || '').toLowerCase();
2166 var tabLabel = (entry.tab_label || '').toLowerCase();
2167 var keywords = (entry.keywords || '').toLowerCase();
2168 var score = 0;
2169
2170 if (label === query || labelEn === query) {
2171 score = 100;
2172 } else if (label.indexOf(query) === 0 || labelEn.indexOf(query) === 0) {
2173 score = 80;
2174 } else if (label.indexOf(query) !== -1 || labelEn.indexOf(query) !== -1) {
2175 score = 60;
2176 } else if (section.indexOf(query) !== -1) {
2177 score = 40;
2178 } else if (tabLabel.indexOf(query) !== -1) {
2179 score = 35;
2180 } else if (keywords.indexOf(query) !== -1) {
2181 score = 30;
2182 }
2183
2184 if (score > 0) {
2185 scored.push({ entry: entry, score: score, order: i });
2186 }
2187 }
2188
2189 scored.sort(function(a, b) {
2190 return (b.score - a.score) || (a.order - b.order);
2191 });
2192
2193 var matches = [];
2194 for (var t = 0; t < scored.length && matches.length < 30; t++) {
2195 matches.push(scored[t].entry);
2196 }
2197 var hiddenCount = scored.length - matches.length;
2198
2199 if (!matches.length) {
2200 $results.html('<div class="vigilante-search-empty">' + (vigilanteAdmin.strings.searchNoResults || 'No results') + '</div>').attr('hidden', false);
2201 this.searchActiveIndex = -1;
2202 return;
2203 }
2204
2205 // Group by tab
2206 var grouped = {};
2207 var tabOrder = [];
2208 for (var j = 0; j < matches.length; j++) {
2209 var m = matches[j];
2210 if (!grouped[m.tab]) {
2211 grouped[m.tab] = { label: m.tab_label, items: [] };
2212 tabOrder.push(m.tab);
2213 }
2214 grouped[m.tab].items.push(m);
2215 }
2216
2217 var html = '';
2218 var flatIdx = 0;
2219 for (var k = 0; k < tabOrder.length; k++) {
2220 var tab = tabOrder[k];
2221 var group = grouped[tab];
2222 html += '<div class="vigilante-search-group">';
2223 html += '<div class="vigilante-search-group-title">' + this.escapeHtml(group.label) + '</div>';
2224 for (var n = 0; n < group.items.length; n++) {
2225 var it = group.items[n];
2226 var base = (vigilanteAdmin.adminUrl || 'admin.php?page=vigilante');
2227 var href = base + '&tab=' + encodeURIComponent(it.tab) + '#' + encodeURIComponent(it.anchor);
2228 var activeClass = flatIdx === 0 ? ' vigilante-search-item-active' : '';
2229 html += '<a class="vigilante-search-item' + activeClass + '" data-idx="' + flatIdx + '" role="option" href="' + href + '">';
2230 html += '<span class="vigilante-search-item-label">' + this.escapeHtml(it.label) + '</span>';
2231 html += '<span class="vigilante-search-item-section">' + this.escapeHtml(it.section) + '</span>';
2232 html += '</a>';
2233 flatIdx++;
2234 }
2235 html += '</div>';
2236 }
2237
2238 if (hiddenCount > 0) {
2239 var moreTpl = vigilanteAdmin.strings.searchMoreResults || '%d more results, refine the search';
2240 html += '<div class="vigilante-search-more">' + this.escapeHtml(moreTpl.replace('%d', hiddenCount)) + '</div>';
2241 }
2242
2243 $results.html(html).attr('hidden', false);
2244 this.searchActiveIndex = 0;
2245 },
2246
2247 /**
2248 * Handle keyboard navigation in search: arrows move highlight, Enter navigates, Escape closes
2249 */
2250 handleSettingsSearchKey: function(e) {
2251 var $items = $('#vigilante-settings-search-results .vigilante-search-item');
2252
2253 if (e.key === 'Escape') {
2254 $('#vigilante-settings-search-results').attr('hidden', true);
2255 $('#vigilante-settings-search').blur();
2256 return;
2257 }
2258
2259 if (!$items.length) return;
2260
2261 if (e.key === 'ArrowDown') {
2262 e.preventDefault();
2263 this.searchActiveIndex = Math.min(this.searchActiveIndex + 1, $items.length - 1);
2264 this.updateSearchActive();
2265 } else if (e.key === 'ArrowUp') {
2266 e.preventDefault();
2267 this.searchActiveIndex = Math.max(this.searchActiveIndex - 1, 0);
2268 this.updateSearchActive();
2269 } else if (e.key === 'Home') {
2270 e.preventDefault();
2271 this.searchActiveIndex = 0;
2272 this.updateSearchActive();
2273 } else if (e.key === 'End') {
2274 e.preventDefault();
2275 this.searchActiveIndex = $items.length - 1;
2276 this.updateSearchActive();
2277 } else if (e.key === 'Enter') {
2278 e.preventDefault();
2279 var idx = this.searchActiveIndex >= 0 ? this.searchActiveIndex : 0;
2280 var $target = $items.eq(idx);
2281 if ($target.length) {
2282 window.location.href = $target.attr('href');
2283 }
2284 }
2285 },
2286
2287 /**
2288 * Sync active highlight when user hovers a search result
2289 */
2290 handleSettingsSearchHover: function(e) {
2291 var idx = parseInt($(e.currentTarget).attr('data-idx'), 10);
2292 if (isNaN(idx)) return;
2293 this.searchActiveIndex = idx;
2294 this.updateSearchActive(false);
2295 },
2296
2297 /**
2298 * Apply the active class to the current index and scroll it into view
2299 */
2300 updateSearchActive: function(scroll) {
2301 var $items = $('#vigilante-settings-search-results .vigilante-search-item');
2302 $items.removeClass('vigilante-search-item-active');
2303 var $active = $items.eq(this.searchActiveIndex);
2304 if (!$active.length) return;
2305 $active.addClass('vigilante-search-item-active');
2306 if (scroll !== false && $active[0] && typeof $active[0].scrollIntoView === 'function') {
2307 $active[0].scrollIntoView({ block: 'nearest' });
2308 }
2309 },
2310
2311 /**
2312 * Format bytes as a human-readable size
2313 */
2314 formatBytes: function(bytes) {
2315 if (!bytes || bytes < 0) return '0 B';
2316 var units = ['B', 'KB', 'MB', 'GB', 'TB'];
2317 var i = 0;
2318 var n = bytes;
2319 while (n >= 1024 && i < units.length - 1) {
2320 n = n / 1024;
2321 i++;
2322 }
2323 return (i === 0 ? n.toFixed(0) : n.toFixed(1)) + ' ' + units[i];
2324 },
2325
2326 /**
2327 * Update DB tables info: count + total size
2328 */
2329 updateDbTablesInfo: function() {
2330 var $boxes = $('.vigilante-db-table-check');
2331 var total = $boxes.length;
2332 if (!total) {
2333 $('.vigilante-db-tables-info').text('');
2334 return;
2335 }
2336 var $checked = $boxes.filter(':checked');
2337 var checkedCount = $checked.length;
2338 var bytes = 0;
2339 $checked.each(function() {
2340 bytes += parseInt($(this).attr('data-bytes'), 10) || 0;
2341 });
2342 var sizeStr = Vigilante_Admin.formatBytes(bytes);
2343 var tpl;
2344 if (checkedCount === total) {
2345 tpl = vigilanteAdmin.strings.dbTablesTotal || '%1$d tables total (%2$s)';
2346 $('.vigilante-db-tables-info').text(tpl.replace('%1$d', total).replace('%2$s', sizeStr));
2347 } else {
2348 tpl = vigilanteAdmin.strings.dbTablesSelected || '%1$d tables selected (%2$s)';
2349 $('.vigilante-db-tables-info').text(tpl.replace('%1$d', checkedCount).replace('%2$s', sizeStr));
2350 }
2351 },
2352
2353 /**
2354 * Load database tables via AJAX
2355 */
2356 loadDbTables: function() {
2357 $.ajax({
2358 url: vigilanteAdmin.ajaxUrl,
2359 type: 'POST',
2360 data: {
2361 action: 'vigilante_get_db_tables',
2362 nonce: vigilanteAdmin.nonce
2363 },
2364 success: function(response) {
2365 if (!response.success) {
2366 Vigilante_Admin.showNotice('error', response.data);
2367 return;
2368 }
2369
2370 var data = response.data;
2371 var coreHtml = '';
2372 var otherHtml = '';
2373
2374 // Build core tables checkboxes
2375 if (data.core && data.core.length) {
2376 $.each(data.core, function(i, table) {
2377 coreHtml += '<label class="vigilante-db-table-label">';
2378 coreHtml += '<input type="checkbox" class="vigilante-db-table-check" value="' + table.name + '" data-bytes="' + (table.bytes || 0) + '" checked>';
2379 coreHtml += '<span class="vigilante-db-table-name" title="' + table.name + '">' + table.short + '</span>';
2380 coreHtml += '<span class="vigilante-db-table-meta">' + table.rows + ' rows &middot; ' + table.size + '</span>';
2381 coreHtml += '</label>';
2382 });
2383 }
2384
2385 // Build other tables checkboxes
2386 if (data.other && data.other.length) {
2387 $.each(data.other, function(i, table) {
2388 otherHtml += '<label class="vigilante-db-table-label">';
2389 otherHtml += '<input type="checkbox" class="vigilante-db-table-check" value="' + table.name + '" data-bytes="' + (table.bytes || 0) + '" checked>';
2390 otherHtml += '<span class="vigilante-db-table-name" title="' + table.name + '">' + table.short + '</span>';
2391 otherHtml += '<span class="vigilante-db-table-meta">' + table.rows + ' rows &middot; ' + table.size + '</span>';
2392 otherHtml += '</label>';
2393 });
2394 $('#vigilante-db-other-group').show();
2395 }
2396
2397 $('#vigilante-db-core-tables').html(coreHtml);
2398 $('#vigilante-db-other-tables').html(otherHtml);
2399
2400 Vigilante_Admin.updateDbTablesInfo();
2401
2402 $('.vigilante-db-tables-loading').hide();
2403 $('.vigilante-db-tables-content').show();
2404 }
2405 });
2406 },
2407
2408 /**
2409 * Select/deselect all tables
2410 */
2411 handleDbSelectAll: function(e) {
2412 var checked = $(e.currentTarget).prop('checked');
2413 $('.vigilante-db-table-check').prop('checked', checked);
2414 this.updateDbTablesInfo();
2415 },
2416
2417 /**
2418 * Update select-all state when individual checkbox changes
2419 */
2420 handleDbTableCheck: function() {
2421 var total = $('.vigilante-db-table-check').length;
2422 var checked = $('.vigilante-db-table-check:checked').length;
2423 $('#vigilante-db-select-all').prop('checked', total === checked);
2424 this.updateDbTablesInfo();
2425 },
2426
2427 /**
2428 * Download database backup
2429 */
2430 handleDbBackupDownload: function(e) {
2431 e.preventDefault();
2432
2433 var tables = [];
2434 $('.vigilante-db-table-check:checked').each(function() {
2435 tables.push($(this).val());
2436 });
2437
2438 if (tables.length === 0) {
2439 Vigilante_Admin.showNotice('error', vigilanteAdmin.strings.dbBackupNoTables);
2440 return;
2441 }
2442
2443 var $btn = $(e.currentTarget);
2444 $btn.prop('disabled', true).html(vigilanteAdmin.strings.dbBackupDownloading + ' <span class="vigilante-spinner"></span>');
2445
2446 // Submit via hidden form for direct file download
2447 var $form = $('<form>', {
2448 method: 'POST',
2449 action: vigilanteAdmin.ajaxUrl
2450 });
2451
2452 $form.append($('<input>', { type: 'hidden', name: 'action', value: 'vigilante_download_db_backup' }));
2453 $form.append($('<input>', { type: 'hidden', name: 'nonce', value: vigilanteAdmin.nonce }));
2454 $form.append($('<input>', { type: 'hidden', name: 'tables', value: tables.join(',') }));
2455
2456 $('body').append($form);
2457 $form.submit();
2458 $form.remove();
2459
2460 // Re-enable button after a delay (download starts in background)
2461 setTimeout(function() {
2462 $btn.prop('disabled', false).text($btn.data('original-text') || vigilanteAdmin.strings.downloadBackup || 'Download Backup (.zip)');
2463 Vigilante_Admin.showNotice('success', vigilanteAdmin.strings.dbBackupSuccess);
2464 }, 3000);
2465 },
2466
2467 // =================================================================
2468 // DATABASE PREFIX HANDLERS
2469 // =================================================================
2470
2471 /**
2472 * Regenerate random prefix
2473 */
2474 handleDbRegeneratePrefix: function(e) {
2475 e.preventDefault();
2476
2477 var $btn = $(e.currentTarget);
2478 $btn.prop('disabled', true);
2479
2480 $.ajax({
2481 url: vigilanteAdmin.ajaxUrl,
2482 type: 'POST',
2483 data: {
2484 action: 'vigilante_generate_prefix',
2485 nonce: vigilanteAdmin.nonce
2486 },
2487 success: function(response) {
2488 if (response.success) {
2489 $('#vigilante-new-prefix').text(response.data.prefix);
2490 } else {
2491 Vigilante_Admin.showNotice('error', response.data);
2492 }
2493 },
2494 complete: function() {
2495 $btn.prop('disabled', false);
2496 }
2497 });
2498 },
2499
2500 /**
2501 * Toggle the change prefix button based on checkbox
2502 */
2503 handleDbPrefixConfirmToggle: function(e) {
2504 var checked = $(e.currentTarget).prop('checked');
2505 $('.vigilante-db-change-prefix').prop('disabled', !checked);
2506 },
2507
2508 /**
2509 * Change database prefix
2510 */
2511 handleDbChangePrefix: function(e) {
2512 e.preventDefault();
2513
2514 // Verify checkbox is checked
2515 if (!$('#vigilante-prefix-backup-confirm').prop('checked')) {
2516 Vigilante_Admin.showNotice('error', vigilanteAdmin.strings.dbPrefixCheckbox);
2517 return;
2518 }
2519
2520 var newPrefix = $('#vigilante-new-prefix').text().trim();
2521
2522 if (!confirm(vigilanteAdmin.strings.dbPrefixConfirm)) {
2523 return;
2524 }
2525
2526 var $btn = $(e.currentTarget);
2527 $btn.prop('disabled', true).html(vigilanteAdmin.strings.dbPrefixChanging + ' <span class="vigilante-spinner"></span>');
2528
2529 $.ajax({
2530 url: vigilanteAdmin.ajaxUrl,
2531 type: 'POST',
2532 data: {
2533 action: 'vigilante_change_prefix',
2534 nonce: vigilanteAdmin.nonce,
2535 prefix: newPrefix
2536 },
2537 success: function(response) {
2538 if (response.success) {
2539 Vigilante_Admin.showNotice('success', vigilanteAdmin.strings.dbPrefixSuccess);
2540 // Reload page after prefix change (session will still work)
2541 setTimeout(function() {
2542 location.reload();
2543 }, 2000);
2544 } else {
2545 Vigilante_Admin.showNotice('error', response.data);
2546 $btn.prop('disabled', false).text($btn.data('original-text'));
2547 }
2548 },
2549 error: function() {
2550 Vigilante_Admin.showNotice('error', vigilanteAdmin.strings.error);
2551 $btn.prop('disabled', false).text($btn.data('original-text'));
2552 }
2553 });
2554 },
2555
2556 /**
2557 * Show notice
2558 */
2559 showNotice: function(type, message) {
2560 // Remove any existing notices first.
2561 $('.vigilante-notice').remove();
2562
2563 var $notice = $('<div class="vigilante-notice vigilante-notice-' + type + '">' + message + '</div>');
2564 $('.vigilante-main').prepend($notice);
2565
2566 // Scroll to top of the settings area so user sees the notice.
2567 $('html, body').animate({
2568 scrollTop: $('.vigilante-admin-wrap').offset().top - 50
2569 }, 300);
2570
2571 setTimeout(function() {
2572 $notice.fadeOut(function() {
2573 $(this).remove();
2574 });
2575 }, 5000);
2576 },
2577
2578 /**
2579 * Handle view log details
2580 */
2581 handleViewLogDetails: function(e) {
2582 e.preventDefault();
2583 e.stopPropagation();
2584
2585 var $btn = $(e.currentTarget);
2586 var detailsStr = $btn.attr('data-details');
2587
2588 if (!detailsStr) {
2589 return;
2590 }
2591
2592 var details;
2593 try {
2594 details = JSON.parse(detailsStr);
2595 } catch (err) {
2596 return;
2597 }
2598
2599 var html = '';
2600
2601 var s = vigilanteAdmin.strings;
2602
2603 // -- Section: Request --
2604 html += '<div class="vigilante-popup-section">';
2605 html += '<h4 class="vigilante-popup-section-title">' + this.escapeHtml(s.logRequest || 'Request') + '</h4>';
2606 html += '<table class="vigilante-details-table">';
2607 html += '<tr><th>' + this.escapeHtml(s.logDate || 'Date') + '</th><td>' + this.escapeHtml(details.date) + '</td></tr>';
2608 if (details.request_method) {
2609 html += '<tr><th>' + this.escapeHtml(s.logMethod || 'Method') + '</th><td><span class="vigilante-method-label vigilante-method-' + this.escapeHtml(details.request_method.toLowerCase()) + '">' + this.escapeHtml(details.request_method) + '</span></td></tr>';
2610 }
2611 html += '<tr><th>' + this.escapeHtml(s.logType || 'Type') + '</th><td>' + this.escapeHtml(details.type) + '</td></tr>';
2612 html += '<tr><th>' + this.escapeHtml(s.logAction || 'Action') + '</th><td>' + this.escapeHtml(details.action || '-') + '</td></tr>';
2613 html += '<tr><th>' + this.escapeHtml(s.logSeverity || 'Severity') + '</th><td><span class="vigilante-badge vigilante-badge-' + this.escapeHtml(details.severity || 'info') + '">' + this.escapeHtml(details.severity || 'info') + '</span></td></tr>';
2614 html += '<tr><th>' + this.escapeHtml(s.logMessage || 'Message') + '</th><td>' + this.escapeHtml(details.message) + '</td></tr>';
2615 if (details.request_uri) {
2616 html += '<tr><th>' + this.escapeHtml(s.logRequestUri || 'Address') + '</th><td class="vigilante-ua-cell"><code>' + this.escapeHtml(details.request_uri) + '</code></td></tr>';
2617 }
2618 html += '</table>';
2619 html += '</div>';
2620
2621 // -- Section: Client --
2622 html += '<div class="vigilante-popup-section">';
2623 html += '<h4 class="vigilante-popup-section-title">' + this.escapeHtml(s.logClient || 'Client') + '</h4>';
2624 html += '<table class="vigilante-details-table">';
2625 html += '<tr><th>' + this.escapeHtml(s.logUser || 'User') + '</th><td>' + this.escapeHtml(details.user || '-') + '</td></tr>';
2626
2627 // IP with lookup link
2628 if (details.ip && details.ip !== '0.0.0.0') {
2629 var ipEscaped = this.escapeHtml(details.ip);
2630 html += '<tr><th>' + this.escapeHtml(s.logIpAddress || 'IP Address') + '</th><td>';
2631 html += '<code>' + ipEscaped + '</code> ';
2632 html += '<a href="https://abuseipdb.com/check/' + encodeURIComponent(details.ip) + '" target="_blank" rel="noopener noreferrer" class="vigilante-ip-lookup" title="Lookup IP">';
2633 html += '<span class="dashicons dashicons-search"></span></a>';
2634 html += '</td></tr>';
2635 } else {
2636 html += '<tr><th>' + this.escapeHtml(s.logIpAddress || 'IP Address') + '</th><td><code>' + this.escapeHtml(details.ip) + '</code></td></tr>';
2637 }
2638
2639 if (details.user_agent) {
2640 html += '<tr><th>' + this.escapeHtml(s.logUserAgent || 'User Agent') + '</th><td class="vigilante-ua-cell"><code>' + this.escapeHtml(details.user_agent) + '</code></td></tr>';
2641 }
2642 html += '</table>';
2643
2644 // Action buttons for IP and UA
2645 html += '<div class="vigilante-popup-actions">';
2646 if (details.ip && details.ip !== '0.0.0.0') {
2647 html += '<span class="vigilante-popup-actions-label">' + this.escapeHtml(s.logIpLabel || 'IP:') + '</span>';
2648 if (details.is_ip_whitelisted) {
2649 html += '<button type="button" class="button button-small vigilante-btn-added" disabled><span class="dashicons dashicons-yes-alt"></span> ' + this.escapeHtml(s.logInWhitelist || 'In whitelist') + '</button> ';
2650 } else {
2651 html += '<button type="button" class="button button-small vigilante-add-to-list" data-item-type="ip" data-list-type="whitelist" data-value="' + this.escapeHtml(details.ip) + '"><span class="dashicons dashicons-yes-alt"></span> ' + this.escapeHtml(s.logWhitelist || 'Whitelist') + '</button> ';
2652 }
2653 if (details.is_ip_blacklisted) {
2654 html += '<button type="button" class="button button-small vigilante-btn-added" disabled><span class="dashicons dashicons-dismiss"></span> ' + this.escapeHtml(s.logInBlacklist || 'In blacklist') + '</button> ';
2655 } else {
2656 html += '<button type="button" class="button button-small vigilante-add-to-list vigilante-btn-danger" data-item-type="ip" data-list-type="blacklist" data-value="' + this.escapeHtml(details.ip) + '"><span class="dashicons dashicons-dismiss"></span> ' + this.escapeHtml(s.logBlacklist || 'Blacklist') + '</button> ';
2657 }
2658 }
2659 if (details.user_agent) {
2660 html += '<span class="vigilante-popup-actions-label">' + this.escapeHtml(s.logUaLabel || 'UA:') + '</span>';
2661 if (details.is_ua_whitelisted) {
2662 html += '<button type="button" class="button button-small vigilante-btn-added" disabled><span class="dashicons dashicons-yes-alt"></span> ' + this.escapeHtml(s.logInWhitelist || 'In whitelist') + '</button> ';
2663 } else {
2664 html += '<button type="button" class="button button-small vigilante-add-to-list" data-item-type="ua" data-list-type="whitelist" data-value="' + this.escapeHtml(details.user_agent) + '"><span class="dashicons dashicons-yes-alt"></span> ' + this.escapeHtml(s.logWhitelist || 'Whitelist') + '</button> ';
2665 }
2666 if (details.is_ua_blacklisted) {
2667 html += '<button type="button" class="button button-small vigilante-btn-added" disabled><span class="dashicons dashicons-dismiss"></span> ' + this.escapeHtml(s.logInBlacklist || 'In blacklist') + '</button>';
2668 } else {
2669 html += '<button type="button" class="button button-small vigilante-add-to-list vigilante-btn-danger" data-item-type="ua" data-list-type="blacklist" data-value="' + this.escapeHtml(details.user_agent) + '"><span class="dashicons dashicons-dismiss"></span> ' + this.escapeHtml(s.logBlacklist || 'Blacklist') + '</button>';
2670 }
2671 }
2672 html += '</div>';
2673 html += '<div class="vigilante-popup-feedback" style="display:none;"></div>';
2674 html += '</div>';
2675
2676 // Event ID for reference
2677 html += '<div class="vigilante-popup-footer">';
2678 html += '<span class="vigilante-popup-id">ID: ' + this.escapeHtml(details.id) + '</span>';
2679 html += '</div>';
2680
2681 $('#vigilante-log-details-content').html(html);
2682 $('#vigilante-log-details-modal').fadeIn(200);
2683 },
2684
2685 /**
2686 * Handle adding IP or UA to firewall whitelist/blacklist
2687 */
2688 handleAddToFirewallList: function(e) {
2689 e.preventDefault();
2690 var $btn = $(e.currentTarget);
2691 var itemType = $btn.data('item-type');
2692 var listType = $btn.data('list-type');
2693 // attr(), not data(): jQuery runs JSON.parse on values that look like
2694 // JSON, so a User-Agent such as {"a":1} would arrive as an object.
2695 var value = $btn.attr('data-value');
2696
2697 if (!itemType || !listType || !value) {
2698 return;
2699 }
2700
2701 $btn.prop('disabled', true);
2702
2703 var self = this;
2704 $.ajax({
2705 url: vigilanteAdmin.ajaxUrl,
2706 type: 'POST',
2707 data: {
2708 action: 'vigilante_add_to_firewall_list',
2709 nonce: vigilanteAdmin.nonce,
2710 item_type: itemType,
2711 list_type: listType,
2712 value: value
2713 },
2714 success: function(response) {
2715 var $feedback = $('.vigilante-popup-feedback');
2716 if (response.success) {
2717 $btn.text(vigilanteAdmin.strings.logAdded || 'Added!').addClass('vigilante-btn-added');
2718 $feedback.html('<span class="vigilante-popup-msg vigilante-popup-msg-success">' + response.data + '</span>').slideDown(150);
2719 } else {
2720 $btn.prop('disabled', false);
2721 $feedback.html('<span class="vigilante-popup-msg vigilante-popup-msg-warning">' + (response.data || vigilanteAdmin.strings.logErrorAddingToList || 'Error adding to list') + '</span>').slideDown(150);
2722 }
2723 },
2724 error: function() {
2725 $btn.prop('disabled', false);
2726 $('.vigilante-popup-feedback').html('<span class="vigilante-popup-msg vigilante-popup-msg-error">' + (vigilanteAdmin.strings.logRequestFailed || 'Request failed') + '</span>').slideDown(150);
2727 }
2728 });
2729 },
2730
2731 /**
2732 * Handle unblock firewall IP
2733 */
2734 handleUnblockFirewallIp: function(e) {
2735 var $btn = $(e.currentTarget);
2736 var ip = $btn.data('ip');
2737
2738 if (!confirm(vigilanteAdmin.strings.confirmUnblockIp || 'Unblock this IP?')) {
2739 return;
2740 }
2741
2742 $btn.prop('disabled', true).text(vigilanteAdmin.strings.loading || 'Loading...');
2743
2744 $.ajax({
2745 url: vigilanteAdmin.ajaxUrl,
2746 type: 'POST',
2747 data: {
2748 action: 'vigilante_unblock_firewall_ip',
2749 nonce: vigilanteAdmin.nonce,
2750 ip: ip
2751 },
2752 success: function(response) {
2753 if (response.success) {
2754 $btn.closest('tr').fadeOut(300, function() {
2755 var $tbody = $(this).closest('tbody');
2756 $(this).remove();
2757 // Hide the whole section if no more blocked IPs
2758 if ($tbody.children('tr').length === 0) {
2759 $tbody.closest('.vigilante-lockout-section').fadeOut(300);
2760 }
2761 });
2762 } else {
2763 alert(response.data || 'Error');
2764 $btn.prop('disabled', false).text(vigilanteAdmin.strings.unblock || 'Unblock');
2765 }
2766 },
2767 error: function() {
2768 $btn.prop('disabled', false).text(vigilanteAdmin.strings.unblock || 'Unblock');
2769 }
2770 });
2771 },
2772
2773 /**
2774 * Handle close modal
2775 */
2776 handleCloseModal: function(e) {
2777 if ($(e.target).hasClass('vigilante-modal') || $(e.target).hasClass('vigilante-modal-close')) {
2778 $('.vigilante-modal').hide();
2779 }
2780 },
2781
2782 /**
2783 * Escape HTML
2784 */
2785 escapeHtml: function(text) {
2786 if (text === null || text === undefined) return '';
2787 if (typeof text !== 'string') {
2788 text = String(text);
2789 }
2790 // Quotes must be encoded too: this helper is also used in attribute
2791 // position, where an unescaped quote closes the attribute early.
2792 return text
2793 .replace(/&/g, '&amp;')
2794 .replace(/</g, '&lt;')
2795 .replace(/>/g, '&gt;')
2796 .replace(/"/g, '&quot;')
2797 .replace(/'/g, '&#039;');
2798 },
2799
2800 /**
2801 * Debounce function
2802 */
2803 debounce: function(func, wait) {
2804 var timeout;
2805 return function() {
2806 var context = this, args = arguments;
2807 clearTimeout(timeout);
2808 timeout = setTimeout(function() {
2809 func.apply(context, args);
2810 }, wait);
2811 };
2812 },
2813
2814 // =================================================================
2815 // Force Password Reset functionality
2816 // =================================================================
2817
2818 /**
2819 * Selected users for password reset
2820 */
2821 selectedPasswordResetUsers: [],
2822
2823 /**
2824 * Initialize password reset handlers
2825 */
2826 initPasswordReset: function() {
2827 var self = this;
2828
2829 // User search for password reset
2830 var searchTimeout;
2831 $(document).on('input', '#vigilante-password-reset-search', function() {
2832 var query = $(this).val();
2833 clearTimeout(searchTimeout);
2834
2835 if (query.length < 2) {
2836 $('#vigilante-password-reset-results').hide().empty();
2837 return;
2838 }
2839
2840 searchTimeout = setTimeout(function() {
2841 self.searchUsersForPasswordReset(query);
2842 }, 300);
2843 });
2844
2845 // Close search results when clicking outside
2846 $(document).on('click', function(e) {
2847 if (!$(e.target).closest('.vigilante-user-search-wrapper').length) {
2848 $('#vigilante-password-reset-results').hide();
2849 }
2850 });
2851
2852 // Reset selected users button
2853 $(document).on('click', '#vigilante-reset-selected-users', function(e) {
2854 e.preventDefault();
2855 self.forceResetSelectedUsers();
2856 });
2857
2858 // Reset all users button
2859 $(document).on('click', '#vigilante-reset-all-users', function(e) {
2860 e.preventDefault();
2861 self.forceResetAllUsers();
2862 });
2863
2864 // Reset by role - checkbox change
2865 $(document).on('change', '.vigilante-reset-role-checkbox', function() {
2866 self.updateRoleResetSummary();
2867 });
2868
2869 // Reset by role button
2870 $(document).on('click', '#vigilante-reset-by-role', function(e) {
2871 e.preventDefault();
2872 self.forceResetByRoles();
2873 });
2874 },
2875
2876 /**
2877 * Search users for password reset
2878 */
2879 searchUsersForPasswordReset: function(query) {
2880 var self = this;
2881 var $results = $('#vigilante-password-reset-results');
2882
2883 $.ajax({
2884 url: vigilanteAdmin.ajaxUrl,
2885 type: 'POST',
2886 data: {
2887 action: 'vigilante_search_users_password_reset',
2888 nonce: vigilanteAdmin.nonce,
2889 query: query
2890 },
2891 success: function(response) {
2892 if (response.success && response.data.length > 0) {
2893 var html = '<ul class="vigilante-user-search-list">';
2894 response.data.forEach(function(user) {
2895 var isSelected = self.selectedPasswordResetUsers.indexOf(user.ID) !== -1;
2896 html += '<li data-user-id="' + user.ID + '" class="' + (isSelected ? 'selected' : '') + '">';
2897 html += '<img src="' + self.escapeHtml(user.avatar) + '" alt="" class="vigilante-user-avatar">';
2898 html += '<div class="vigilante-user-info">';
2899 html += '<strong>' + self.escapeHtml(user.display_name) + '</strong>';
2900 html += '<br><small>' + self.escapeHtml(user.user_login) + ' - ' + self.escapeHtml(user.user_email) + '</small>';
2901 html += '<br><small class="vigilante-user-roles">' + self.escapeHtml(user.roles) + '</small>';
2902 html += '</div>';
2903 html += '</li>';
2904 });
2905 html += '</ul>';
2906 $results.html(html).show();
2907
2908 // Handle user selection
2909 $results.find('li').on('click', function() {
2910 var userId = parseInt($(this).data('user-id'));
2911 var userName = $(this).find('strong').text();
2912 var userEmail = $(this).find('small').first().text();
2913 self.togglePasswordResetUser(userId, userName, userEmail);
2914 $(this).toggleClass('selected');
2915 });
2916 } else {
2917 $results.html('<p class="vigilante-no-results">' + (vigilanteAdmin.strings.noUsersFoundSearch || 'No users found') + '</p>').show();
2918 }
2919 }
2920 });
2921 },
2922
2923 /**
2924 * Toggle user selection for password reset
2925 */
2926 togglePasswordResetUser: function(userId, userName, userEmail) {
2927 var index = this.selectedPasswordResetUsers.indexOf(userId);
2928 var $selectedContainer = $('#vigilante-password-reset-selected');
2929 var $list = $selectedContainer.find('.vigilante-selected-users-list');
2930 var $btn = $('#vigilante-reset-selected-users');
2931
2932 if (index === -1) {
2933 // Add user
2934 this.selectedPasswordResetUsers.push(userId);
2935 $list.append(
2936 '<li data-user-id="' + userId + '">' +
2937 '<span>' + this.escapeHtml(userName) + '</span>' +
2938 '<button type="button" class="vigilante-remove-user" title="Remove">&times;</button>' +
2939 '</li>'
2940 );
2941 } else {
2942 // Remove user
2943 this.selectedPasswordResetUsers.splice(index, 1);
2944 $list.find('li[data-user-id="' + userId + '"]').remove();
2945 }
2946
2947 // Update UI
2948 if (this.selectedPasswordResetUsers.length > 0) {
2949 $selectedContainer.show();
2950 $btn.prop('disabled', false);
2951 } else {
2952 $selectedContainer.hide();
2953 $btn.prop('disabled', true);
2954 }
2955
2956 // Handle remove button click
2957 $list.find('.vigilante-remove-user').off('click').on('click', function() {
2958 var uid = $(this).closest('li').data('user-id');
2959 var idx = Vigilante_Admin.selectedPasswordResetUsers.indexOf(uid);
2960 if (idx !== -1) {
2961 Vigilante_Admin.selectedPasswordResetUsers.splice(idx, 1);
2962 }
2963 $(this).closest('li').remove();
2964 $('#vigilante-password-reset-results').find('li[data-user-id="' + uid + '"]').removeClass('selected');
2965
2966 if (Vigilante_Admin.selectedPasswordResetUsers.length === 0) {
2967 $selectedContainer.hide();
2968 $btn.prop('disabled', true);
2969 }
2970 });
2971 },
2972
2973 /**
2974 * Force reset for selected users
2975 */
2976 forceResetSelectedUsers: function() {
2977 var self = this;
2978
2979 if (this.selectedPasswordResetUsers.length === 0) {
2980 return;
2981 }
2982
2983 var currentUserId = parseInt(vigilanteAdmin.currentUserId || 0);
2984 var resettingSelf = this.selectedPasswordResetUsers.indexOf(currentUserId) !== -1;
2985
2986 var confirmMsg = (vigilanteAdmin.strings.confirmForceReset || 'Force password reset for %d user(s)? A password reset email will be sent to each user.').replace('%d', this.selectedPasswordResetUsers.length);
2987 if (resettingSelf) {
2988 confirmMsg += '\n\n' + (vigilanteAdmin.strings.warningResettingSelf || 'WARNING: You are including yourself. Your session will end and you will need to set a new password.');
2989 }
2990
2991 if (!confirm(confirmMsg)) {
2992 return;
2993 }
2994
2995 var $btn = $('#vigilante-reset-selected-users');
2996 $btn.prop('disabled', true).text(vigilanteAdmin.strings.processing || 'Processing...');
2997
2998 $.ajax({
2999 url: vigilanteAdmin.ajaxUrl,
3000 type: 'POST',
3001 data: {
3002 action: 'vigilante_force_password_reset',
3003 nonce: vigilanteAdmin.nonce,
3004 user_ids: this.selectedPasswordResetUsers
3005 },
3006 success: function(response) {
3007 if (response.success) {
3008 self.showNotice('success', response.data.message);
3009
3010 // Clear selection
3011 self.selectedPasswordResetUsers = [];
3012 $('#vigilante-password-reset-selected').hide().find('.vigilante-selected-users-list').empty();
3013 $('#vigilante-password-reset-search').val('');
3014 $('#vigilante-password-reset-results').hide().empty();
3015
3016 // Reload if resetting self
3017 if (response.data.resetting_self) {
3018 setTimeout(function() {
3019 window.location.href = vigilanteAdmin.logoutUrl || '/wp-login.php';
3020 }, 2000);
3021 } else {
3022 setTimeout(function() {
3023 location.reload();
3024 }, 1500);
3025 }
3026 } else {
3027 self.showNotice('error', response.data);
3028 }
3029 },
3030 error: function() {
3031 self.showNotice('error', vigilanteAdmin.strings.anErrorOccurred || 'An error occurred');
3032 },
3033 complete: function() {
3034 $btn.prop('disabled', false).text(vigilanteAdmin.strings.forceResetSelected || 'Force Reset for Selected Users');
3035 }
3036 });
3037 },
3038
3039 /**
3040 * Force reset for all users
3041 */
3042 forceResetAllUsers: function() {
3043 var self = this;
3044 var includeSelf = $('#vigilante-reset-all-include-self').is(':checked');
3045
3046 var confirmMsg = vigilanteAdmin.strings.confirmForceResetAll || 'This will force ALL users to reset their password. All users will receive a password reset email. Are you sure you want to continue?';
3047 if (includeSelf) {
3048 confirmMsg += '\n\n' + (vigilanteAdmin.strings.warningResettingSelfAll || 'WARNING: You are including yourself. Your session will end immediately.');
3049 }
3050
3051 if (!confirm(confirmMsg)) {
3052 return;
3053 }
3054
3055 var $btn = $('#vigilante-reset-all-users');
3056 $btn.prop('disabled', true).text(vigilanteAdmin.strings.processing || 'Processing...');
3057
3058 $.ajax({
3059 url: vigilanteAdmin.ajaxUrl,
3060 type: 'POST',
3061 data: {
3062 action: 'vigilante_force_password_reset_all',
3063 nonce: vigilanteAdmin.nonce,
3064 include_self: includeSelf ? 1 : 0
3065 },
3066 success: function(response) {
3067 if (response.success) {
3068 self.showNotice('success', response.data.message);
3069
3070 // Reload if resetting self
3071 if (response.data.resetting_self) {
3072 setTimeout(function() {
3073 window.location.href = vigilanteAdmin.logoutUrl || '/wp-login.php';
3074 }, 2000);
3075 } else {
3076 setTimeout(function() {
3077 location.reload();
3078 }, 1500);
3079 }
3080 } else {
3081 self.showNotice('error', response.data);
3082 }
3083 },
3084 error: function() {
3085 self.showNotice('error', vigilanteAdmin.strings.anErrorOccurred || 'An error occurred');
3086 },
3087 complete: function() {
3088 $btn.prop('disabled', false).text(vigilanteAdmin.strings.forceResetAll || 'Force Reset for ALL Users');
3089 }
3090 });
3091 },
3092
3093 /**
3094 * Update role reset summary when checkboxes change
3095 */
3096 updateRoleResetSummary: function() {
3097 var totalCount = 0;
3098 var includesSelf = false;
3099
3100 $('.vigilante-reset-role-checkbox:checked').each(function() {
3101 totalCount += parseInt($(this).data('count') || 0);
3102 if ($(this).closest('label').find('em').length > 0) {
3103 includesSelf = true;
3104 }
3105 });
3106
3107 var $summary = $('#vigilante-reset-role-summary');
3108 var $selfOption = $('#vigilante-reset-role-self-option');
3109 var $btn = $('#vigilante-reset-by-role');
3110
3111 if (totalCount > 0) {
3112 $('#vigilante-reset-role-count').text(totalCount);
3113 $summary.show();
3114 $btn.prop('disabled', false);
3115 } else {
3116 $summary.hide();
3117 $btn.prop('disabled', true);
3118 }
3119
3120 if (includesSelf) {
3121 $selfOption.show();
3122 } else {
3123 $selfOption.hide();
3124 $('#vigilante-reset-role-include-self').prop('checked', false);
3125 }
3126 },
3127
3128 /**
3129 * Force reset for users with selected roles
3130 */
3131 forceResetByRoles: function() {
3132 var self = this;
3133 var roles = [];
3134
3135 $('.vigilante-reset-role-checkbox:checked').each(function() {
3136 roles.push($(this).val());
3137 });
3138
3139 if (roles.length === 0) {
3140 self.showNotice('error', vigilanteAdmin.strings.noRolesSelected || 'Please select at least one role.');
3141 return;
3142 }
3143
3144 var totalCount = 0;
3145 $('.vigilante-reset-role-checkbox:checked').each(function() {
3146 totalCount += parseInt($(this).data('count') || 0);
3147 });
3148
3149 var includeSelf = $('#vigilante-reset-role-include-self').is(':checked');
3150
3151 var confirmMsg = (vigilanteAdmin.strings.confirmForceResetByRole || 'Force password reset for %d user(s) with the selected roles? A password reset email will be sent to each user.').replace('%d', totalCount);
3152 if (includeSelf) {
3153 confirmMsg += '\n\n' + (vigilanteAdmin.strings.warningResettingSelfAll || 'WARNING: You are including yourself. Your session will end immediately.');
3154 }
3155
3156 if (!confirm(confirmMsg)) {
3157 return;
3158 }
3159
3160 var $btn = $('#vigilante-reset-by-role');
3161 $btn.prop('disabled', true).text(vigilanteAdmin.strings.processing || 'Processing...');
3162
3163 $.ajax({
3164 url: vigilanteAdmin.ajaxUrl,
3165 type: 'POST',
3166 data: {
3167 action: 'vigilante_force_password_reset_by_role',
3168 nonce: vigilanteAdmin.nonce,
3169 roles: roles,
3170 include_self: includeSelf ? 1 : 0
3171 },
3172 success: function(response) {
3173 if (response.success) {
3174 self.showNotice('success', response.data.message);
3175
3176 // Clear role checkboxes
3177 $('.vigilante-reset-role-checkbox').prop('checked', false);
3178 self.updateRoleResetSummary();
3179
3180 if (response.data.resetting_self) {
3181 setTimeout(function() {
3182 window.location.href = vigilanteAdmin.logoutUrl || '/wp-login.php';
3183 }, 2000);
3184 } else {
3185 setTimeout(function() {
3186 location.reload();
3187 }, 1500);
3188 }
3189 } else {
3190 self.showNotice('error', response.data);
3191 }
3192 },
3193 error: function() {
3194 self.showNotice('error', vigilanteAdmin.strings.anErrorOccurred || 'An error occurred');
3195 },
3196 complete: function() {
3197 $btn.prop('disabled', false).text(vigilanteAdmin.strings.forceResetByRole || 'Force Reset for Selected Roles');
3198 }
3199 });
3200 },
3201
3202 /**
3203 * Initialize user approval handlers
3204 */
3205 initUserApproval: function() {
3206 var self = this;
3207
3208 // Approve user
3209 $(document).on('click', '.vigilante-approve-user', function() {
3210 var $btn = $(this);
3211 var userId = $btn.data('user-id');
3212 var $row = $btn.closest('tr');
3213
3214 if (!confirm(vigilanteAdmin.strings.confirmApprove || 'Approve this user?')) {
3215 return;
3216 }
3217
3218 $btn.prop('disabled', true).text(vigilanteAdmin.strings.processing || 'Processing...');
3219
3220 $.ajax({
3221 url: vigilanteAdmin.ajaxUrl,
3222 type: 'POST',
3223 data: {
3224 action: 'vigilante_approve_user',
3225 nonce: vigilanteAdmin.nonce,
3226 user_id: userId
3227 },
3228 success: function(response) {
3229 if (response.success) {
3230 self.showNotice('success', response.data.message);
3231 $row.fadeOut(400, function() {
3232 $(this).remove();
3233 self.updatePendingCount();
3234 });
3235 } else {
3236 self.showNotice('error', response.data);
3237 $btn.prop('disabled', false).text(vigilanteAdmin.strings.approve || 'Approve');
3238 }
3239 },
3240 error: function() {
3241 self.showNotice('error', vigilanteAdmin.strings.error);
3242 $btn.prop('disabled', false).text(vigilanteAdmin.strings.approve || 'Approve');
3243 }
3244 });
3245 });
3246
3247 // Reject user
3248 $(document).on('click', '.vigilante-reject-user', function() {
3249 var $btn = $(this);
3250 var userId = $btn.data('user-id');
3251 var $row = $btn.closest('tr');
3252
3253 var reason = prompt(vigilanteAdmin.strings.rejectReason || 'Enter rejection reason (optional):');
3254 if (reason === null) {
3255 return; // Cancelled
3256 }
3257
3258 $btn.prop('disabled', true).text(vigilanteAdmin.strings.processing || 'Processing...');
3259
3260 $.ajax({
3261 url: vigilanteAdmin.ajaxUrl,
3262 type: 'POST',
3263 data: {
3264 action: 'vigilante_reject_user',
3265 nonce: vigilanteAdmin.nonce,
3266 user_id: userId,
3267 reason: reason
3268 },
3269 success: function(response) {
3270 if (response.success) {
3271 self.showNotice('success', response.data.message);
3272 $row.fadeOut(400, function() {
3273 $(this).remove();
3274 self.updatePendingCount();
3275 });
3276 } else {
3277 self.showNotice('error', response.data);
3278 $btn.prop('disabled', false).text(vigilanteAdmin.strings.reject || 'Reject');
3279 }
3280 },
3281 error: function() {
3282 self.showNotice('error', vigilanteAdmin.strings.error);
3283 $btn.prop('disabled', false).text(vigilanteAdmin.strings.reject || 'Reject');
3284 }
3285 });
3286 });
3287 },
3288
3289 /**
3290 * Update pending users count badge
3291 */
3292 updatePendingCount: function() {
3293 var $badge = $('.vigilante-pending-users-section .vigilante-badge-warning');
3294 var $table = $('.vigilante-pending-users-table tbody tr');
3295 var count = $table.length;
3296
3297 if (count === 0) {
3298 $badge.remove();
3299 $('.vigilante-pending-users-table').replaceWith(
3300 '<div class="vigilante-no-lockouts">' +
3301 '<span class="dashicons dashicons-yes-alt"></span>' +
3302 '<p>' + (vigilanteAdmin.strings.noPending || 'No pending registrations.') + '</p>' +
3303 '</div>'
3304 );
3305 } else {
3306 $badge.text(count);
3307 }
3308 },
3309
3310 /**
3311 * Initialize session management handlers
3312 */
3313 initSessionManagement: function() {
3314 var self = this;
3315 var searchTimer = null;
3316 this.selectedSessionUserId = null;
3317
3318 // Search users for session management
3319 $(document).on('input', '#vigilante-session-user-search', function() {
3320 var query = $(this).val();
3321 var $results = $('#vigilante-session-search-results');
3322
3323 clearTimeout(searchTimer);
3324
3325 if (query.length < 2) {
3326 $results.hide().empty();
3327 return;
3328 }
3329
3330 searchTimer = setTimeout(function() {
3331 $.ajax({
3332 url: vigilanteAdmin.ajaxUrl,
3333 type: 'POST',
3334 data: {
3335 action: 'vigilante_search_users_password_reset',
3336 nonce: vigilanteAdmin.nonce,
3337 query: query
3338 },
3339 success: function(response) {
3340 if (response.success && response.data.length > 0) {
3341 var html = '<ul class="vigilante-user-search-list">';
3342 $.each(response.data, function(i, user) {
3343 html += '<li data-user-id="' + user.ID + '">' +
3344 '<img src="' + self.escapeHtml(user.avatar) + '" class="vigilante-user-avatar" alt="">' +
3345 '<div class="vigilante-user-info">' +
3346 '<strong>' + self.escapeHtml(user.display_name) + '</strong><br>' +
3347 '<small>' + self.escapeHtml(user.user_email) + '</small>' +
3348 '</div>' +
3349 '</li>';
3350 });
3351 html += '</ul>';
3352 $results.html(html).show();
3353 } else {
3354 $results.html('<p class="vigilante-no-results">' + (vigilanteAdmin.strings.noUsers || 'No users found') + '</p>').show();
3355 }
3356 }
3357 });
3358 }, 300);
3359 });
3360
3361 // Click handler for user selection in session search
3362 $(document).on('click', '#vigilante-session-search-results li', function() {
3363 var userId = $(this).data('user-id');
3364 var userName = $(this).find('strong').text();
3365 self.loadUserSessions(userId, userName);
3366 $('#vigilante-session-search-results').hide();
3367 $('#vigilante-session-user-search').val(userName);
3368 });
3369
3370 // Revoke single session
3371 $(document).on('click', '.vigilante-revoke-session', function() {
3372 var $btn = $(this);
3373 var userId = $btn.attr('data-user-id');
3374 var token = $btn.attr('data-token');
3375 var $row = $btn.closest('tr');
3376 var $paginatedContainer = $btn.closest('.vigilante-paginated-section');
3377
3378 // Fallback to row token if button token is invalid
3379 if (!token || token.length < 32) {
3380 token = $row.attr('data-token');
3381 }
3382
3383 if (!token || token.length < 32) {
3384 self.showNotice('error', vigilanteAdmin.strings.error || 'Invalid session token');
3385 return;
3386 }
3387
3388 if (!confirm(vigilanteAdmin.strings.confirmRevoke || 'Revoke this session?')) {
3389 return;
3390 }
3391
3392 $btn.prop('disabled', true);
3393
3394 $.ajax({
3395 url: vigilanteAdmin.ajaxUrl,
3396 type: 'POST',
3397 data: {
3398 action: 'vigilante_revoke_session',
3399 nonce: vigilanteAdmin.nonce,
3400 user_id: userId,
3401 token: token
3402 },
3403 success: function(response) {
3404 if (response.success) {
3405 self.showNotice('success', response.data.message);
3406 $row.fadeOut(400, function() {
3407 $(this).remove();
3408 if ($paginatedContainer.length) {
3409 Vigilante_Admin.refreshFilePagination($paginatedContainer);
3410 }
3411 });
3412 } else {
3413 self.showNotice('error', response.data);
3414 $btn.prop('disabled', false);
3415 }
3416 },
3417 error: function() {
3418 self.showNotice('error', vigilanteAdmin.strings.error);
3419 $btn.prop('disabled', false);
3420 }
3421 });
3422 });
3423
3424 // Revoke all other sessions (current user)
3425 $(document).on('click', '.vigilante-revoke-other-sessions', function() {
3426 var $btn = $(this);
3427 var userId = $btn.data('user-id');
3428
3429 if (!confirm(vigilanteAdmin.strings.confirmRevokeAll || 'Revoke all other sessions?')) {
3430 return;
3431 }
3432
3433 $btn.prop('disabled', true).text(vigilanteAdmin.strings.processing || 'Processing...');
3434
3435 $.ajax({
3436 url: vigilanteAdmin.ajaxUrl,
3437 type: 'POST',
3438 data: {
3439 action: 'vigilante_revoke_all_sessions',
3440 nonce: vigilanteAdmin.nonce,
3441 user_id: userId,
3442 include_current: 0
3443 },
3444 success: function(response) {
3445 if (response.success) {
3446 self.showNotice('success', response.data.message);
3447 setTimeout(function() {
3448 location.reload();
3449 }, 1000);
3450 } else {
3451 self.showNotice('error', response.data);
3452 }
3453 },
3454 error: function() {
3455 self.showNotice('error', vigilanteAdmin.strings.error);
3456 },
3457 complete: function() {
3458 $btn.prop('disabled', false).text(vigilanteAdmin.strings.revokeOthers || 'Revoke All Other Sessions');
3459 }
3460 });
3461 });
3462
3463 // Revoke all sessions for a user (admin managing other users)
3464 $(document).on('click', '.vigilante-revoke-all-user-sessions', function() {
3465 var $btn = $(this);
3466
3467 if (!self.selectedSessionUserId) {
3468 return;
3469 }
3470
3471 if (!confirm(vigilanteAdmin.strings.confirmRevokeAllUser || 'Revoke ALL sessions for this user? They will be logged out everywhere.')) {
3472 return;
3473 }
3474
3475 $btn.prop('disabled', true);
3476
3477 $.ajax({
3478 url: vigilanteAdmin.ajaxUrl,
3479 type: 'POST',
3480 data: {
3481 action: 'vigilante_revoke_all_sessions',
3482 nonce: vigilanteAdmin.nonce,
3483 user_id: self.selectedSessionUserId,
3484 include_current: 1
3485 },
3486 success: function(response) {
3487 if (response.success) {
3488 self.showNotice('success', response.data.message);
3489 $('#vigilante-user-sessions-container').hide();
3490 $('#vigilante-session-user-search').val('');
3491 } else {
3492 self.showNotice('error', response.data);
3493 }
3494 },
3495 error: function() {
3496 self.showNotice('error', vigilanteAdmin.strings.error);
3497 },
3498 complete: function() {
3499 $btn.prop('disabled', false);
3500 }
3501 });
3502 });
3503 },
3504
3505 /**
3506 * Load sessions for a specific user
3507 */
3508 loadUserSessions: function(userId, userName) {
3509 var self = this;
3510 this.selectedSessionUserId = userId;
3511 var $container = $('#vigilante-user-sessions-container');
3512 var $list = $('#vigilante-user-sessions-list');
3513
3514 $list.html('<tr><td colspan="4">' + (vigilanteAdmin.strings.loading || 'Loading...') + '</td></tr>');
3515 $container.show();
3516 $('#vigilante-sessions-user-name').text((vigilanteAdmin.strings.sessionsFor || 'Sessions for: ') + userName);
3517
3518 $.ajax({
3519 url: vigilanteAdmin.ajaxUrl,
3520 type: 'POST',
3521 data: {
3522 action: 'vigilante_get_user_sessions',
3523 nonce: vigilanteAdmin.nonce,
3524 user_id: userId
3525 },
3526 success: function(response) {
3527 if (response.success) {
3528 var sessions = response.data.sessions;
3529 if (sessions.length === 0) {
3530 $list.html('<tr><td colspan="4">' + (vigilanteAdmin.strings.noSessions || 'No active sessions') + '</td></tr>');
3531 return;
3532 }
3533
3534 var html = '';
3535 $.each(sessions, function(i, session) {
3536 var loginTime = session.login ? self.timeAgo(session.login) : (vigilanteAdmin.strings.unknown || 'Unknown');
3537 html += '<tr data-token="' + session.token_hash + '">' +
3538 '<td>' + self.escapeHtml(session.browser) + '</td>' +
3539 '<td><code>' + self.escapeHtml(session.ip) + '</code></td>' +
3540 '<td>' + loginTime + '</td>' +
3541 '<td>' +
3542 '<button type="button" class="button button-small vigilante-revoke-session" ' +
3543 'data-user-id="' + userId + '" data-token="' + session.token_hash + '">' +
3544 (vigilanteAdmin.strings.revoke || 'Revoke') +
3545 '</button>' +
3546 '</td>' +
3547 '</tr>';
3548 });
3549 $list.html(html);
3550 } else {
3551 $list.html('<tr><td colspan="4">' + response.data + '</td></tr>');
3552 }
3553 },
3554 error: function() {
3555 $list.html('<tr><td colspan="4">' + vigilanteAdmin.strings.error + '</td></tr>');
3556 }
3557 });
3558 },
3559
3560 /**
3561 * Format timestamp as time ago
3562 */
3563 timeAgo: function(timestamp) {
3564 var seconds = Math.floor((Date.now() / 1000) - timestamp);
3565 var s = vigilanteAdmin.strings;
3566 var intervals = [
3567 { label: s.timeYear || 'year', labelPlural: s.timeYears || 'years', seconds: 31536000 },
3568 { label: s.timeMonth || 'month', labelPlural: s.timeMonths || 'months', seconds: 2592000 },
3569 { label: s.timeDay || 'day', labelPlural: s.timeDays || 'days', seconds: 86400 },
3570 { label: s.timeHour || 'hour', labelPlural: s.timeHours || 'hours', seconds: 3600 },
3571 { label: s.timeMinute || 'minute', labelPlural: s.timeMinutes || 'minutes', seconds: 60 }
3572 ];
3573
3574 for (var i = 0; i < intervals.length; i++) {
3575 var count = Math.floor(seconds / intervals[i].seconds);
3576 if (count >= 1) {
3577 var unit = count > 1 ? intervals[i].labelPlural : intervals[i].label;
3578 return (s.timeAgo || '%1$d %2$s ago').replace('%1$d', count).replace('%2$s', unit);
3579 }
3580 }
3581 return s.justNow || 'Just now';
3582 }
3583 };
3584
3585 /* ---------------------------------------------------------------------
3586 * Security Analyzer (Dashboard widget) — v2.1.0
3587 * ------------------------------------------------------------------ */
3588
3589 var VigilanteAnalyzer = {
3590
3591 $root: null,
3592
3593 init: function() {
3594 this.$root = $('#vigilante-analyzer');
3595 if (!this.$root.length) {
3596 // Widget not present on this page — still run hash focus in case a fix link was followed.
3597 this.hashFocusFlash();
3598 return;
3599 }
3600
3601 // Scan button — 2-phase AJAX.
3602 $(document).on('click', '#vigilante-analyzer-scan', this.handleScan.bind(this));
3603
3604 // Expand/collapse detailed breakdown.
3605 $(document).on('click', '.vigilante-analyzer-toggle', this.handleToggleDetails.bind(this));
3606
3607 // Save weekly cron + email toggle on change.
3608 $(document).on('change',
3609 '.vigilante-analyzer-weekly input[type="checkbox"]',
3610 this.handleSettingsChange.bind(this));
3611
3612 // Pulse the row we landed on if we came from a fix link.
3613 this.hashFocusFlash();
3614
3615 // Upgrade the server-rendered SVG (no-op if already correct).
3616 this.renderSparklineFromData();
3617 },
3618
3619 /**
3620 * Kick off a scan. Phase 'fast' first for instant feedback, then 'slow' for remote checks.
3621 */
3622 handleScan: function(e) {
3623 e.preventDefault();
3624 if (this.isScanning) {
3625 return;
3626 }
3627 this.isScanning = true;
3628
3629 var $btn = $('#vigilante-analyzer-scan');
3630 var originalHtml = $btn.html();
3631 $btn.data('original-html', originalHtml);
3632 $btn.prop('disabled', true)
3633 .html('<span class="dashicons dashicons-update vigilante-analyzer-spin"></span> '
3634 + (vigilanteAdmin.strings.analyzerFastPhase || 'Running fast checks…'));
3635
3636 var self = this;
3637
3638 // Expand the details section so the user sees results pour in.
3639 this.expandDetails(true);
3640
3641 this.runScanPhase('fast')
3642 .done(function(fastReport) {
3643 self.applyReport(fastReport);
3644 $btn.html('<span class="dashicons dashicons-update vigilante-analyzer-spin"></span> '
3645 + (vigilanteAdmin.strings.analyzerSlowPhase || 'Running remote checks…'));
3646
3647 self.runScanPhase('slow')
3648 .done(function(slowReport) {
3649 self.applyReport(slowReport);
3650 if (typeof Vigilante_Admin !== 'undefined' && Vigilante_Admin.showNotice) {
3651 Vigilante_Admin.showNotice('success',
3652 vigilanteAdmin.strings.analyzerScanComplete || 'Security scan complete.');
3653 }
3654 })
3655 .fail(function(msg) {
3656 if (typeof Vigilante_Admin !== 'undefined' && Vigilante_Admin.showNotice) {
3657 Vigilante_Admin.showNotice('error',
3658 msg || vigilanteAdmin.strings.analyzerScanFailed || 'Security scan failed.');
3659 }
3660 })
3661 .always(function() {
3662 $btn.prop('disabled', false).html($btn.data('original-html') || originalHtml);
3663 self.isScanning = false;
3664 });
3665 })
3666 .fail(function(msg) {
3667 $btn.prop('disabled', false).html($btn.data('original-html') || originalHtml);
3668 self.isScanning = false;
3669 if (typeof Vigilante_Admin !== 'undefined' && Vigilante_Admin.showNotice) {
3670 Vigilante_Admin.showNotice('error',
3671 msg || vigilanteAdmin.strings.analyzerScanFailed || 'Security scan failed.');
3672 }
3673 });
3674 },
3675
3676 runScanPhase: function(phase) {
3677 var deferred = $.Deferred();
3678 $.ajax({
3679 url: vigilanteAdmin.ajaxUrl,
3680 type: 'POST',
3681 timeout: 60000,
3682 data: {
3683 action: 'vigilante_analyzer_run',
3684 nonce: vigilanteAdmin.nonce,
3685 phase: phase
3686 }
3687 }).done(function(response) {
3688 if (response && response.success) {
3689 deferred.resolve(response.data);
3690 } else {
3691 deferred.reject(response && response.data ? response.data : null);
3692 }
3693 }).fail(function(xhr, status, err) {
3694 deferred.reject(err || status);
3695 });
3696 return deferred.promise();
3697 },
3698
3699 /**
3700 * Map a 0-100 score percentage to a quality tag {label, slug}, mirroring
3701 * Vigilante_Admin::analyzer_quality_tag() in PHP.
3702 */
3703 qualityTag: function(pct) {
3704 pct = Math.max(0, Math.min(100, parseInt(pct, 10) || 0));
3705 var s = vigilanteAdmin.strings || {};
3706 // "Excellent" is reserved for a perfect score — a single missing point drops to Good.
3707 if (pct === 100) { return { label: s.analyzerQualityExcellent || 'Excellent', slug: 'a' }; }
3708 if (pct >= 70) { return { label: s.analyzerQualityGood || 'Good', slug: 'b' }; }
3709 if (pct >= 50) { return { label: s.analyzerQualityFair || 'Fair', slug: 'c' }; }
3710 if (pct >= 30) { return { label: s.analyzerQualityPoor || 'Poor', slug: 'd' }; }
3711 return { label: s.analyzerQualityCritical || 'Critical', slug: 'e' };
3712 },
3713
3714 /**
3715 * Swap a {a,b,c,d,e} slug modifier class on an element.
3716 */
3717 setQualityClass: function($el, baseClass, slug) {
3718 $el.removeClass(function(i, cls) {
3719 return (cls.match(new RegExp('(^|\\s)' + baseClass + '-[abcde](?=\\s|$)', 'g')) || []).join(' ');
3720 });
3721 $el.addClass(baseClass + '-' + slug);
3722 },
3723
3724 /**
3725 * Merge a phase report into the widget DOM.
3726 */
3727 applyReport: function(report) {
3728 if (!report || typeof report !== 'object') {
3729 return;
3730 }
3731 var $root = this.$root;
3732 var self = this;
3733
3734 // Overall pass/warn/fail counts (summary).
3735 if (report.counts && typeof report.counts === 'object') {
3736 $root.find('[data-role="pass"]').text(report.counts.pass || 0);
3737 $root.find('[data-role="warn"]').text(report.counts.warn || 0);
3738 $root.find('[data-role="fail"]').text(report.counts.fail || 0);
3739 }
3740
3741 // Main score circle + quality tag.
3742 if (report.grade) {
3743 var $card = $root.find('.vigilante-analyzer-score-card');
3744 var $circle = $card.find('.vigilante-score-circle');
3745 var gradeLc = String(report.grade).toLowerCase();
3746 var scoreN = parseInt(report.score, 10) || 0;
3747
3748 if (!$circle.length || $circle.hasClass('vigilante-grade-empty')) {
3749 $circle.remove();
3750 $card.prepend(
3751 '<div class="vigilante-score-circle vigilante-grade-'
3752 + this.escAttr(gradeLc)
3753 + '">'
3754 + '<span class="vigilante-grade">' + this.esc(report.grade) + '</span>'
3755 + '<span class="vigilante-score-text">' + this.esc(scoreN) + '%</span>'
3756 + '</div>'
3757 );
3758 } else {
3759 $circle.removeClass(function(i, cls) {
3760 return (cls.match(/(^|\s)vigilante-grade-\S+/g) || []).join(' ');
3761 }).addClass('vigilante-grade-' + gradeLc);
3762 $circle.find('.vigilante-grade').text(report.grade);
3763 $circle.find('.vigilante-score-text').text(scoreN + '%');
3764 }
3765
3766 // Quality tag in the score card.
3767 var quality = this.qualityTag(scoreN);
3768 var $tag = $root.find('[data-role="quality-tag"]');
3769 if ($tag.length) {
3770 this.setQualityClass($tag, 'vigilante-analyzer-quality', quality.slug);
3771 $tag.text(quality.label);
3772 }
3773 }
3774
3775 // "Last scan" label in the header.
3776 if (report.ran_at) {
3777 var $ranAt = $root.find('[data-role="ran-at"]');
3778 var justNow = vigilanteAdmin.strings.analyzerLastScanJustNow
3779 || 'Last scan just now';
3780 $ranAt.html(
3781 '<span class="dashicons dashicons-clock" aria-hidden="true"></span>'
3782 + this.esc(justNow)
3783 );
3784 }
3785
3786 // Per-category rows: quality pill, state counts, score, bar, and check rows.
3787 if (report.categories && typeof report.categories === 'object') {
3788 $.each(report.categories, function(slug, cat) {
3789 var $cat = $root.find('.vigilante-analyzer-category[data-category="' + slug + '"]');
3790 if (!$cat.length) {
3791 return;
3792 }
3793
3794 var infoOnly = $cat.attr('data-info-only') === '1';
3795 var counts = (cat.counts && typeof cat.counts === 'object') ? cat.counts : {};
3796
3797 if (!infoOnly) {
3798 var earned = parseInt(cat.earned, 10) || 0;
3799 var max = parseInt(cat.max, 10) || 0;
3800 var pct = max > 0 ? Math.round((earned / max) * 100) : 0;
3801 var cq = self.qualityTag(pct);
3802
3803 $cat.find('[data-role="earned"]').text(earned);
3804
3805 var $catQuality = $cat.find('[data-role="category-quality"]');
3806 if ($catQuality.length) {
3807 self.setQualityClass($catQuality, 'vigilante-analyzer-quality', cq.slug);
3808 // Update only the label span; the pill also contains the
3809 // "X/Y tests" counter so a blanket .text() would wipe it.
3810 var $label = $catQuality.find('[data-role="category-quality-label"]');
3811 if ($label.length) {
3812 $label.text(cq.label);
3813 } else {
3814 $catQuality.text(cq.label);
3815 }
3816 }
3817
3818 // "X/Y tests" inside the pill. Total is everything that
3819 // scores (pass + warn + fail), info/skip are excluded
3820 // because they don't move the category score.
3821 var $tests = $cat.find('[data-role="category-tests"]');
3822 if ($tests.length) {
3823 var passed = parseInt(counts.pass, 10) || 0;
3824 var total = passed
3825 + (parseInt(counts.warn, 10) || 0)
3826 + (parseInt(counts.fail, 10) || 0);
3827 var tpl = (vigilanteAdmin.strings && vigilanteAdmin.strings.testsCounter)
3828 || '%1$d/%2$d tests';
3829 $tests.text(tpl.replace('%1$d', passed).replace('%2$d', total));
3830 $tests.attr('data-passed', passed);
3831 $tests.attr('data-total', total);
3832 }
3833
3834 // Progress bar (width + quality color).
3835 var $bar = $cat.find('[data-role="category-bar"]');
3836 if ($bar.length) {
3837 $bar.css('width', pct + '%');
3838 self.setQualityClass($bar, 'vigilante-analyzer-category-bar-fill', cq.slug);
3839 }
3840 }
3841
3842 // State counts — show each chip only when count > 0.
3843 // Info-only categories (like reputation) also show an info count.
3844 self.updateCategoryState($cat, 'pass', parseInt(counts.pass, 10) || 0);
3845 self.updateCategoryState($cat, 'warn', parseInt(counts.warn, 10) || 0);
3846 self.updateCategoryState($cat, 'fail', parseInt(counts.fail, 10) || 0);
3847 if (infoOnly) {
3848 self.updateCategoryState($cat, 'info', parseInt(counts.info, 10) || 0);
3849 // Info-only categories replace the progress bar with a status pill
3850 // ("All clear" when nothing actionable, "N findings" otherwise).
3851 self.updateInfoStatus($cat, counts);
3852 }
3853
3854 // Replace the check rows only for checks this phase actually returned.
3855 if (cat.checks && cat.checks.length) {
3856 var $list = $cat.find('[data-role="check-list"]');
3857 $list.find('.vigilante-analyzer-check-empty').remove();
3858
3859 $.each(cat.checks, function(i, check) {
3860 var $existing = $list.find('[data-check-id="' + check.id + '"]');
3861 var html = self.renderCheckRow(check);
3862 if ($existing.length) {
3863 $existing.replaceWith(html);
3864 } else {
3865 $list.append(html);
3866 }
3867 });
3868 }
3869 });
3870 }
3871 },
3872
3873 /**
3874 * Update a per-category state chip (pass/warn/fail). Adds the chip if it doesn't
3875 * exist yet, updates its number, or removes it when the count is zero.
3876 */
3877 updateCategoryState: function($cat, state, count) {
3878 var $wrap = $cat.find('[data-role="category-states"]');
3879 if (!$wrap.length) {
3880 return;
3881 }
3882 var selector = '.vigilante-analyzer-category-state--' + state;
3883 var $chip = $wrap.find(selector);
3884
3885 if (count > 0) {
3886 if (!$chip.length) {
3887 var iconMap = { pass: 'yes', warn: 'warning', fail: 'no', info: 'info-outline' };
3888 var titleMap = {
3889 pass: 'Passing',
3890 warn: 'Warning',
3891 fail: 'Failing',
3892 info: 'Informational'
3893 };
3894 var title = titleMap[state] || '';
3895 $chip = $(
3896 '<span class="vigilante-analyzer-category-state vigilante-analyzer-category-state--'
3897 + state + '" title="' + this.escAttr(title) + '">'
3898 + '<span data-role="state-' + state + '">0</span>'
3899 + '<span class="dashicons dashicons-' + iconMap[state] + '" aria-hidden="true"></span>'
3900 + '</span>'
3901 );
3902 // Keep order: pass → warn → fail → info.
3903 if (state === 'pass') {
3904 $wrap.prepend($chip);
3905 } else if (state === 'warn') {
3906 var $passChip = $wrap.find('.vigilante-analyzer-category-state--pass');
3907 if ($passChip.length) { $chip.insertAfter($passChip); } else { $wrap.prepend($chip); }
3908 } else if (state === 'fail') {
3909 var $infoChip = $wrap.find('.vigilante-analyzer-category-state--info');
3910 if ($infoChip.length) { $chip.insertBefore($infoChip); } else { $wrap.append($chip); }
3911 } else {
3912 $wrap.append($chip);
3913 }
3914 }
3915 $chip.find('[data-role="state-' + state + '"]').text(count);
3916 } else if ($chip.length) {
3917 $chip.remove();
3918 }
3919 },
3920
3921 /**
3922 * Refresh the "All clear" / "N findings" pill for an info-only category.
3923 * Runs after a scan replaces the counts on the server side.
3924 */
3925 updateInfoStatus: function($cat, counts) {
3926 var $status = $cat.find('[data-role="info-status"]');
3927 if (!$status.length) {
3928 return;
3929 }
3930 var warnN = parseInt(counts.warn, 10) || 0;
3931 var failN = parseInt(counts.fail, 10) || 0;
3932 var issues = warnN + failN;
3933 var strings = (vigilanteAdmin && vigilanteAdmin.strings) || {};
3934
3935 if (issues > 0) {
3936 var template = strings.analyzerInfoFindings || '%d findings';
3937 var label = template.replace('%d', issues);
3938 $status
3939 .removeClass('vigilante-analyzer-category-status--clear')
3940 .addClass('vigilante-analyzer-category-status--attention')
3941 .html(
3942 '<span class="dashicons dashicons-warning" aria-hidden="true"></span>'
3943 + this.esc(label)
3944 );
3945 } else {
3946 var clear = strings.analyzerInfoAllClear || 'All clear';
3947 $status
3948 .removeClass('vigilante-analyzer-category-status--attention')
3949 .addClass('vigilante-analyzer-category-status--clear')
3950 .html(
3951 '<span class="dashicons dashicons-yes-alt" aria-hidden="true"></span>'
3952 + this.esc(clear)
3953 );
3954 }
3955 },
3956
3957 renderCheckRow: function(check) {
3958 var state = check.state || 'skip';
3959 var icons = {
3960 pass: 'yes-alt',
3961 warn: 'warning',
3962 fail: 'dismiss',
3963 info: 'info',
3964 skip: 'minus'
3965 };
3966 var icon = icons[state] || 'minus';
3967
3968 var scoreHtml = '';
3969 var max = parseInt(check.max, 10) || 0;
3970 if (max > 0 && state !== 'info' && state !== 'skip') {
3971 scoreHtml = '<span class="vigilante-analyzer-check-score">'
3972 + this.esc((parseInt(check.score, 10) || 0) + '/' + max)
3973 + '</span>';
3974 }
3975
3976 var fixHtml = '';
3977 if (check.fix_link && (state === 'fail' || state === 'warn')) {
3978 fixHtml = '<a href="' + this.escAttr(check.fix_link) + '" class="vigilante-analyzer-fix-link">'
3979 + this.esc(vigilanteAdmin.strings.analyzerGoToSetting || 'Go to setting')
3980 + '<span class="vigilante-analyzer-fix-arrow" aria-hidden="true">&rarr;</span></a>';
3981 } else if (check.fix_link && state === 'info') {
3982 var isExt = /^https?:\/\//i.test(check.fix_link);
3983 fixHtml = '<a href="' + this.escAttr(check.fix_link) + '" class="vigilante-analyzer-fix-link"'
3984 + (isExt ? ' target="_blank" rel="noopener noreferrer"' : '') + '>'
3985 + this.esc(vigilanteAdmin.strings.analyzerLearnMore || 'Learn more')
3986 + '<span class="vigilante-analyzer-fix-arrow" aria-hidden="true">&rarr;</span></a>';
3987 }
3988
3989 var detailHtml = '';
3990 if (check.detail) {
3991 detailHtml = '<p class="vigilante-analyzer-check-detail">' + this.esc(check.detail) + '</p>';
3992 }
3993
3994 return '<li class="vigilante-analyzer-check vigilante-analyzer-check--' + this.escAttr(state) + '"'
3995 + ' data-check-id="' + this.escAttr(check.id || '') + '">'
3996 + '<span class="vigilante-analyzer-check-icon dashicons dashicons-' + this.escAttr(icon) + '" aria-hidden="true"></span>'
3997 + '<div class="vigilante-analyzer-check-body">'
3998 + '<div class="vigilante-analyzer-check-label">'
3999 + '<span>' + this.esc(check.label || '') + '</span>'
4000 + scoreHtml
4001 + '</div>'
4002 + detailHtml
4003 + fixHtml
4004 + '</div>'
4005 + '</li>';
4006 },
4007
4008 /**
4009 * Expand or collapse the detailed breakdown section.
4010 */
4011 handleToggleDetails: function(e) {
4012 e.preventDefault();
4013 var $btn = $(e.currentTarget);
4014 var expanded = $btn.attr('aria-expanded') === 'true';
4015 this.expandDetails(!expanded);
4016 },
4017
4018 expandDetails: function(expand) {
4019 var $btn = this.$root.find('.vigilante-analyzer-toggle');
4020 var $details = this.$root.find('.vigilante-analyzer-details');
4021 var show = !!expand;
4022
4023 $btn.attr('aria-expanded', show ? 'true' : 'false');
4024
4025 var label = show
4026 ? (vigilanteAdmin.strings.analyzerHideDetails || 'Hide detailed breakdown')
4027 : (vigilanteAdmin.strings.analyzerShowDetails || 'Show detailed breakdown');
4028
4029 // Preserve the chevron element; only swap the label text.
4030 var $chevron = $btn.find('.vigilante-analyzer-toggle-chevron').detach();
4031 if (!$chevron.length) {
4032 $chevron = $('<span class="vigilante-analyzer-toggle-chevron" aria-hidden="true"></span>');
4033 }
4034 $btn.text(label).append(' ').append($chevron);
4035
4036 if (show) {
4037 $details.removeAttr('hidden');
4038 } else {
4039 $details.attr('hidden', 'hidden');
4040 }
4041 },
4042
4043 /**
4044 * Auto-save weekly scan + email toggles.
4045 */
4046 handleSettingsChange: function(e) {
4047 var $input = $(e.currentTarget);
4048 var $weekly = this.$root.find('input[name="security_analyzer[weekly_scan_enabled]"]');
4049 var $email = this.$root.find('input[name="security_analyzer[email_on_regression]"]');
4050
4051 $.ajax({
4052 url: vigilanteAdmin.ajaxUrl,
4053 type: 'POST',
4054 data: {
4055 action: 'vigilante_analyzer_save_settings',
4056 nonce: vigilanteAdmin.nonce,
4057 weekly_scan_enabled: $weekly.is(':checked') ? 1 : 0,
4058 email_on_regression: $email.is(':checked') ? 1 : 0
4059 },
4060 success: function(response) {
4061 if (response && response.success) {
4062 if (typeof Vigilante_Admin !== 'undefined' && Vigilante_Admin.showNotice) {
4063 Vigilante_Admin.showNotice('success',
4064 vigilanteAdmin.strings.analyzerSettingsSaved || 'Analyzer settings saved.');
4065 }
4066 } else {
4067 if (typeof Vigilante_Admin !== 'undefined' && Vigilante_Admin.showNotice) {
4068 Vigilante_Admin.showNotice('error',
4069 (response && response.data) || vigilanteAdmin.strings.error);
4070 }
4071 $input.prop('checked', !$input.is(':checked'));
4072 }
4073 },
4074 error: function() {
4075 if (typeof Vigilante_Admin !== 'undefined' && Vigilante_Admin.showNotice) {
4076 Vigilante_Admin.showNotice('error', vigilanteAdmin.strings.error);
4077 }
4078 $input.prop('checked', !$input.is(':checked'));
4079 }
4080 });
4081 },
4082
4083 /**
4084 * Re-render the sparkline from data-points (no-op if no points).
4085 */
4086 renderSparklineFromData: function() {
4087 var $wrap = this.$root.find('[data-role="sparkline"]');
4088 if (!$wrap.length) {
4089 return;
4090 }
4091 var raw = $wrap.attr('data-points');
4092 if (!raw) {
4093 return;
4094 }
4095 try {
4096 var points = JSON.parse(raw);
4097 if (!points || points.length < 2) {
4098 return;
4099 }
4100 // Only regenerate if the SVG is missing (e.g. server gave empty markup).
4101 if (!$wrap.find('svg').length) {
4102 $wrap.html(this.buildSparklineSvg(points));
4103 }
4104 this.attachSparklineHotspots($wrap, points);
4105 } catch (err) { /* ignore parse errors */ }
4106 },
4107
4108 /**
4109 * Inject invisible hot-spots over each sparkline point and wire up a tooltip
4110 * that shows the score on hover/focus.
4111 */
4112 attachSparklineHotspots: function($wrap, points) {
4113 if (!points || points.length < 2) {
4114 return;
4115 }
4116 // Idempotent: clear any previous hot-spots/tooltip first.
4117 $wrap.find('.vigilante-analyzer-sparkline-dot, .vigilante-analyzer-sparkline-tooltip').remove();
4118
4119 var SVG_W = 280, SVG_H = 60, PAD = 4;
4120 var usableW = SVG_W - PAD * 2;
4121 var usableH = SVG_H - PAD * 2;
4122 var step = usableW / Math.max(1, points.length - 1);
4123 var max = 100;
4124
4125 var $tooltip = $('<div class="vigilante-analyzer-sparkline-tooltip" aria-hidden="true"></div>');
4126 $wrap.append($tooltip);
4127
4128 for (var i = 0; i < points.length; i++) {
4129 var x = PAD + (i * step);
4130 var y = PAD + (usableH - ((points[i] / max) * usableH));
4131 var xPct = (x / SVG_W) * 100;
4132 var yPct = (y / SVG_H) * 100;
4133
4134 var $dot = $('<button type="button" class="vigilante-analyzer-sparkline-dot"></button>')
4135 .css({ left: xPct + '%', top: yPct + '%' })
4136 .attr('data-score', points[i])
4137 .attr('data-index', i)
4138 .attr('aria-label', String(points[i]));
4139 $wrap.append($dot);
4140 }
4141
4142 $wrap.off('.vigSpark');
4143 $wrap.on('mouseenter.vigSpark focus.vigSpark', '.vigilante-analyzer-sparkline-dot', function() {
4144 var $dot = $(this);
4145 $tooltip
4146 .text($dot.attr('data-score'))
4147 .css({ left: $dot.css('left'), top: $dot.css('top') })
4148 .addClass('is-visible');
4149 });
4150 $wrap.on('mouseleave.vigSpark blur.vigSpark', '.vigilante-analyzer-sparkline-dot', function() {
4151 $tooltip.removeClass('is-visible');
4152 });
4153 },
4154
4155 buildSparklineSvg: function(points) {
4156 var width = 280;
4157 var height = 60;
4158 var padding = 4;
4159 var usableW = width - (padding * 2);
4160 var usableH = height - (padding * 2);
4161 var count = points.length;
4162 var step = usableW / Math.max(1, count - 1);
4163 var max = 100;
4164
4165 var coords = [];
4166 for (var i = 0; i < count; i++) {
4167 var x = padding + (i * step);
4168 var y = padding + (usableH - ((points[i] / max) * usableH));
4169 coords.push(x.toFixed(2) + ',' + y.toFixed(2));
4170 }
4171 var path = 'M ' + coords.join(' L ');
4172 var lastX = padding + ((count - 1) * step);
4173 var lastY = padding + (usableH - ((points[count - 1] / max) * usableH));
4174
4175 return '<svg viewBox="0 0 ' + width + ' ' + height + '" preserveAspectRatio="none" '
4176 + 'role="img" focusable="false">'
4177 + '<path d="' + path + '" fill="none" stroke="currentColor" '
4178 + 'stroke-width="2" stroke-linecap="round" stroke-linejoin="round"/>'
4179 + '<circle cx="' + lastX.toFixed(2) + '" cy="' + lastY.toFixed(2) + '" r="3" fill="currentColor"/>'
4180 + '</svg>';
4181 },
4182
4183 /**
4184 * When landing on a fix link (#field-* or #vigilante-section-*),
4185 * scroll smoothly and flash-highlight the target.
4186 */
4187 hashFocusFlash: function() {
4188 var hash = window.location.hash;
4189 if (!hash || hash.length < 2) {
4190 return;
4191 }
4192 // Accept both section anchors and field anchors.
4193 if (!/^#(?:field-|vigilante-section-)/.test(hash)) {
4194 return;
4195 }
4196
4197 setTimeout(function() {
4198 var $target;
4199 try {
4200 $target = $(hash);
4201 } catch (err) { return; }
4202 if (!$target || !$target.length) {
4203 return;
4204 }
4205
4206 // Scroll to it smoothly.
4207 if ('scrollIntoView' in $target[0]) {
4208 $target[0].scrollIntoView({ behavior: 'smooth', block: 'center' });
4209 }
4210
4211 // Flash — remove any previous flash first.
4212 $('.vigilante-focus-flash').removeClass('vigilante-focus-flash');
4213 $target.addClass('vigilante-focus-flash');
4214 setTimeout(function() {
4215 $target.removeClass('vigilante-focus-flash');
4216 }, 1800);
4217 }, 150);
4218 },
4219
4220 /** Escape text for HTML. */
4221 esc: function(str) {
4222 return String(str == null ? '' : str)
4223 .replace(/&/g, '&amp;')
4224 .replace(/</g, '&lt;')
4225 .replace(/>/g, '&gt;')
4226 .replace(/"/g, '&quot;')
4227 .replace(/'/g, '&#039;');
4228 },
4229
4230 /** Escape text for HTML attribute. */
4231 escAttr: function(str) {
4232 return this.esc(str);
4233 }
4234 };
4235
4236 // Initialize on document ready
4237 $(document).ready(function() {
4238 Vigilante_Admin.init();
4239 Vigilante_Admin.initPasswordReset();
4240 Vigilante_Admin.initUserApproval();
4241 Vigilante_Admin.initSessionManagement();
4242 VigilanteAnalyzer.init();
4243
4244 // Shared "Send test email" button (Notification settings, File Integrity, Audit Alerts).
4245 $(document).on('click', '.vigilante-test-email-btn', function(e) {
4246 e.preventDefault();
4247 var $btn = $(this);
4248 var $result = $btn.siblings('.vigilante-test-email-result');
4249 var original = $btn.data('original-text') || $btn.text();
4250 $btn.prop('disabled', true).text(vigilanteAdmin.strings.sendingTest || 'Sending...');
4251 $result.text('').css('color', '');
4252 $.ajax({
4253 url: vigilanteAdmin.ajaxUrl,
4254 type: 'POST',
4255 data: {
4256 action: 'vigilante_send_test_email',
4257 nonce: vigilanteAdmin.nonce
4258 },
4259 success: function(response) {
4260 if (response && response.success) {
4261 $result.css('color', '#00a32a').text((response.data && response.data.message) || '');
4262 } else {
4263 $result.css('color', '#d63638').text((response && response.data && response.data.message) || vigilanteAdmin.strings.error);
4264 }
4265 },
4266 error: function() {
4267 $result.css('color', '#d63638').text(vigilanteAdmin.strings.error);
4268 },
4269 complete: function() {
4270 $btn.prop('disabled', false).text(original);
4271 }
4272 });
4273 });
4274 });
4275
4276 /**
4277 * Security Headers settings recovery (2.10.0).
4278 *
4279 * Both buttons are disabled together while the request is in flight, so a
4280 * second click cannot fire a second restore. The page reloads afterwards
4281 * because the whole tab is rendered from the settings that just changed.
4282 */
4283 $(function() {
4284 var SELECTOR = '#vigilante-recovery-restore, #vigilante-recovery-dismiss';
4285
4286 function recoveryRun(action) {
4287 $(SELECTOR).prop('disabled', true);
4288
4289 $.ajax({
4290 url: vigilanteAdmin.ajaxUrl,
4291 type: 'POST',
4292 data: {
4293 action: action,
4294 nonce: vigilanteAdmin.nonce
4295 },
4296 success: function(response) {
4297 if (response.success) {
4298 Vigilante_Admin.showNotice('success', response.data);
4299 setTimeout(function() {
4300 location.reload();
4301 }, 1200);
4302 return;
4303 }
4304
4305 Vigilante_Admin.showNotice('error', response.data);
4306 $(SELECTOR).prop('disabled', false);
4307 },
4308 error: function() {
4309 Vigilante_Admin.showNotice('error', vigilanteAdmin.strings.error);
4310 $(SELECTOR).prop('disabled', false);
4311 }
4312 });
4313 }
4314
4315 $(document).on('click', '#vigilante-recovery-restore', function(e) {
4316 e.preventDefault();
4317 recoveryRun('vigilante_headers_recovery_restore');
4318 });
4319
4320 $(document).on('click', '#vigilante-recovery-dismiss', function(e) {
4321 e.preventDefault();
4322 recoveryRun('vigilante_headers_recovery_dismiss');
4323 });
4324
4325 $(document).on('click', '#vigilante-recovery-undo', function(e) {
4326 e.preventDefault();
4327 $(this).prop('disabled', true);
4328 recoveryRun('vigilante_headers_recovery_undo');
4329 });
4330 });
4331
4332 })(jQuery);