Dashboard

Editing: class-admin.php

<?php
defined('ABSPATH') or die();

class rsssl_admin
{
    private static $_this;
    public $wpconfig_siteurl_not_fixed = false;
    public $no_server_variable = false;
    public $do_wpconfig_loadbalancer_fix = false;
    public $plugin_dir = "really-simple-ssl";
    public $plugin_filename = "rlrsssl-really-simple-ssl.php";
    public $abs_path;
    public $ssl_type = "NA";
	public $pro_url;
    public $configuration_loaded = false;

function __construct()
    {
	    if (isset(self::$_this))
            wp_die(sprintf(__('%s is a singleton class and you cannot create a second instance.', 'really-simple-ssl'), get_class($this)));

self::$_this = $this;
        $this->abs_path = $this->getabs_path();
	    $this->pro_url = is_multisite() ? 'https://really-simple-ssl.com/pro-multisite' : 'https://really-simple-ssl.com/pro';

register_deactivation_hook( __DIR__ . "/" . $this->plugin_filename, array($this, 'deactivate'));
	    add_action( 'admin_init', array($this, 'add_privacy_info') );
	    add_action( 'admin_init', array($this, 'maybe_dismiss_review_notice') );
	    add_action( 'rsssl_weekly_cron', array($this, 'clear_admin_notices_cache') );

//add the settings page for the plugin
	    add_action('admin_enqueue_scripts', array($this, 'enqueue_assets'));
	    add_action('admin_init', array($this, 'listen_for_deactivation'), 40);
	    add_action('plugins_loaded', array($this, 'maybe_redirect_old_settings_url'), 10);

$plugin = rsssl_plugin;
	    add_filter("plugin_action_links_$plugin", array($this, 'plugin_settings_link'));

//Add update notification to Settings admin menu
	    add_action('admin_menu', array($this, 'add_plus_ones') );
	    // Only show deactivate popup when SSL has been enabled.
	    if ( rsssl_get_option('ssl_enabled') ) {
            add_action('admin_footer', array($this, 'deactivate_popup'), 40);
        }

//callbacks for the ajax dismiss buttons
	    add_action('wp_ajax_rsssl_dismiss_review_notice', array($this, 'dismiss_review_notice_callback'));

//handle notices
	    add_action('admin_notices', array($this, 'show_notices'));
	    //show review notice, only to free users
	    if ( !defined("rsssl_pro_version") && !is_multisite() ) {
		    add_action('admin_notices', array($this, 'show_leave_review_notice'));
	    }

//hooks only needed on settings page
        if ( $this->is_settings_page() ) {
	        /**
	         * Htaccess redirect handling
	         */
	        add_action( 'rsssl_after_save_field', array($this, 'maybe_flush_wprocket_htaccess' ),100, 4 );
	        add_action( 'admin_init', array($this, 'insert_secure_cookie_settings'), 70 );
            add_action( 'admin_init', array($this, 'recheck_certificate') );
        }

add_filter( 'rsssl_htaccess_security_rules', array($this, 'add_htaccess_redirect') );
	    add_filter( 'before_rocket_htaccess_rules', array($this, 'add_htaccess_redirect_before_wp_rocket' ) );
	    add_action( 'rocket_activation', 'rsssl_wrap_htaccess' );
	    add_action( 'rocket_deactivation' , 'rsssl_wrap_htaccess' );
    }

static function this()
    {
        return self::$_this;
    }

/**
     * Redirect to the new settings page
     *
	 * @return void
	 */
    public function maybe_redirect_old_settings_url(){
        if ( !rsssl_user_can_manage() || is_multisite() ) {
            return;
        }
        if ( isset($_GET['page']) && $_GET['page'] === 'rlrsssl_really_simple_ssl' ){
            wp_redirect(add_query_arg(['page' => 'really-simple-security'], rsssl_admin_url() ));
            exit;
        }
    }

/**
	 * Add some privacy info, telling our users we aren't tracking them
	 */

public function add_privacy_info()
    {
        if ( !function_exists('wp_add_privacy_policy_content') ) {
            return;
        }

$content = sprintf(
            __('Really Simple SSL and Really Simple SSL add-ons do not process any personal identifiable information, so the GDPR does not apply to these plugins or usage of these plugins on your website. You can find our privacy policy <a href="%s" target="_blank">here</a>.', 'really-simple-ssl'),
            'https://really-simple-ssl.com/privacy-statement/'
        );

wp_add_privacy_policy_content(
            'Really Simple SSL',
            wp_kses_post(wpautop($content, false))
        );
    }

/**
     * Check if current day falls within required date range.
     *
	 * @return bool
	 */

public function is_bf(){
	    if ( defined("rsssl_pro_version" ) ) {
            return false;
        }
	    $start_day = 21;
        $end_day = 28;
	    $current_year = date("Y");//e.g. 2021
	    $current_month = date("n");//e.g. 3
        $current_day = date("j");//e.g. 4

if ( $current_year == 2022 && $current_month == 11 &&
             $current_day >=$start_day &&
             $current_day <= $end_day
        ) {
            return true;
        }

return false;
    }

/**
     * Initializes the admin class
     *
     * @since  2.2
     *
     * @access public
     *
     */

public function init()
    {
        if ( !rsssl_user_can_manage() ) {
            return;
        }

if ( defined("RSSSL_FORCE_ACTIVATE") && RSSSL_FORCE_ACTIVATE ) {
            rsssl_update_option( 'ssl_enabled', true );
        }

/*
         * check if we're one minute past the activation. Then flush rewrite rules
         * this way we lower the memory impact on activation
         * Flush should happen on shutdown, not on init, as often happens in other plugins
         * https://codex.wordpress.org/Function_Reference/flush_rewrite_rules
         * */

$activation_time = get_option('rsssl_flush_rewrite_rules');
        $more_than_one_minute_ago = $activation_time < strtotime("-1 minute");
        $less_than_2_minutes_ago = $activation_time > strtotime("-2 minute");
        if (get_option('rsssl_flush_rewrite_rules') && $more_than_one_minute_ago && $less_than_2_minutes_ago){
            delete_option('rsssl_flush_rewrite_rules');
            add_action('shutdown', 'flush_rewrite_rules');
        }

$more_than_2_minute_ago = get_option('rsssl_flush_caches') < strtotime("-2 minute");
	    $less_than_5_minutes_ago = get_option('rsssl_flush_caches') > strtotime("-5 minute");
	    if (get_option('rsssl_flush_caches') && $more_than_2_minute_ago && $less_than_5_minutes_ago){
		    delete_option('rsssl_flush_caches');
		    add_action('shutdown', array( RSSSL()->cache, 'flush' )  );
	    }

/*
          Detect configuration when:
        - on settings page
        - SSL not enabled
        */

//when configuration detection should run again
        if ( !rsssl_get_option('ssl_enabled') || $this->is_settings_page() || defined('RSSSL_DOING_SYSTEM_STATUS') ) {
            $this->detect_configuration();
            if ( !$this->wpconfig_ok() ) {
	            rsssl_update_option('ssl_enabled', false);
            } else {
	            //when one of the used server variables was found, test if the redirect works
	            if ( RSSSL()->server->uses_htaccess() && $this->ssl_type !== "NA" ) {
		            $this->htaccess_test_success();
	            }
            }
        }
    }

/**
	 * Add htaccess redirect
     * @hooked
	 * @param array $rules
	 * @return []
	 */

public function add_htaccess_redirect( $rules ) {
        //we don't want these rules added by rsssl if wp rocket active.
        //if it's deactivating, start adding them again.
		if ( $this->is_deactivating_wprocket() || !function_exists('rocket_clean_domain') ) {
			$rule = $this->get_redirect_rules();
            if ( !empty($rule) )  {
	            $rules[] = ['rules' => $rule, 'identifier' => 'RewriteRule ^(.*)$ https://%{HTTP_HOST}/$1'];
            }
        }

return $rules;
	}

/**
     * Check if we're in the middle of wp rocket deactivation
     *
	 * @return bool
	 */
    public function is_deactivating_wprocket(){
        //default deactivating
	    $is_deactivating =  isset($_GET['action']) && $_GET['action']==='deactivate' && isset($_GET['plugin']) && strpos($_GET['plugin'], 'wp-rocket.php')!==false;
	    //deactivating with modal
        $is_deactivating = $is_deactivating || ( isset( $_GET['action'] ) && $_GET['action'] === 'rocket_deactivation' );
        return $is_deactivating;
    }

/**
     * Deactivate the plugin while keeping SSL
     * Activated when the 'uninstall_keep_ssl' button is clicked in the settings tab
     *
     */

public function listen_for_deactivation()
    {
        if ( !rsssl_user_can_manage() ) {
            return;
        }

if ( !isset($_GET['token']) || (!wp_verify_nonce($_GET['token'], 'rsssl_deactivate_plugin')) ) {
            return;
        }

if (isset($_GET["action"]) && $_GET["action"] === 'uninstall_keep_ssl') {
            //deactivate plugin, but don't revert to http.
            $plugin = $this->plugin_dir . "/" . $this->plugin_filename;
            $plugin = plugin_basename(trim($plugin));

if ( is_multisite() ) {
                $network_current = get_site_option('active_sitewide_plugins', array());
                if ( is_plugin_active_for_network($plugin) ) {
                    unset($network_current[$plugin]);
                }
                update_site_option('active_sitewide_plugins', $network_current);
                //remove plugin one by one on each site
                $sites = get_sites();
                foreach ($sites as $site) {
	                switch_to_blog($site->blog_id);
                    $current = get_option('active_plugins', array());
                    $current = $this->remove_plugin_from_array($plugin, $current);
                    update_option('active_plugins', $current);
                    restore_current_blog(); //switches back to previous blog, not current, so we have to do it each loop
                }
            } else {
                $current = get_option('active_plugins', array());
                $current = $this->remove_plugin_from_array($plugin, $current);
                update_option('active_plugins', $current);
            }
	        do_action("rsssl_deactivate");
	        wp_redirect(admin_url('plugins.php'));
            exit;
        }
    }

/**
     * Remove the plugin from the active plugins array when called from listen_for_deactivation
     *
     * */

public function remove_plugin_from_array($plugin, $current)
    {
        $key = array_search($plugin, $current);
        if (false !== $key) {
            unset($current[$key]);
        }
        return $current;
    }

/**
     * Check if site uses an htaccess.conf file, used in bitnami installations
     *
     * @Since 3.1
     */

public function uses_htaccess_conf() {
        $htaccess_conf_file = dirname(ABSPATH) . "/conf/htaccess.conf";
        //conf/htaccess.conf can be outside of open basedir, return false if so
        $open_basedir = ini_get("open_basedir");
        if ( !empty($open_basedir) ) {
            return false;
        }
        return is_file($htaccess_conf_file);
    }

/**
     * If the user has clicked "recheck certificate, clear the cache for the certificate check.
     * Used in a form in the dashboard notices.
	 * @return void
	 */
    public function recheck_certificate(){
	    if ( !rsssl_user_can_manage()) {
            return;
	    }
        if ( isset($_POST['rsssl_recheck_certificate']) ) {
	        delete_transient('rsssl_certinfo');
        }
    }

/**
	 *  Activate the SSL for this site
	 */

public function activate_ssl($request)
    {
	    if ( !rsssl_user_can_manage()  ) {
		    return [
			    'success' => false,
			    'site_url_changed' => false,
		    ];
        }
	    $safe_mode = defined('RSSSL_SAFE_MODE') && RSSSL_SAFE_MODE;
        $error = false;
	    $is_rest_request =  $request instanceof WP_REST_Request;
	    $site_url_changed = false;

if ( rsssl_get_option('site_has_ssl') || get_option('rsssl_ssl_detection_overridden') ){
	        //in a configuration reverse proxy without a set server variable https, add code to wpconfig
	        if ( $this->do_wpconfig_loadbalancer_fix || $this->no_server_variable ) {
		        $this->wpconfig_loadbalancer_fix();
	        }

if ( !$safe_mode && $this->wpconfig_siteurl_not_fixed ){
		        $this->fix_siteurl_defines_in_wpconfig();
	        }

$this->insert_secure_cookie_settings();

if ( !$safe_mode ) {
		        rsssl_update_option('redirect', 'wp_redirect');
		        rsssl_update_option('mixed_content_fixer', true);

//flush caches when just activated ssl
		        //flush the permalinks
		        update_option('rsssl_activation_timestamp', time(), false );
		        if (!defined('RSSSL_NO_FLUSH') || !RSSSL_NO_FLUSH) {
			        update_option('rsssl_flush_rewrite_rules', time(), false );
		        }
		        update_option('rsssl_flush_caches', time(), false );
	        }
	        rsssl_update_option('ssl_enabled', true);
	        $site_url_changed = $this->set_siteurl_to_ssl();
		    delete_option('rsssl_admin_notices');
        } else {
	        $error = true;
        }

//if this is true, this is a request from the network admin. We save an option to ensure we know that this part is completed
        if ( is_multisite() && rsssl_is_networkwide_active() ) {
            update_site_option('rsssl_network_activation_status', 'main_site_activated');
        }

if ( $is_rest_request ) {
	        return [
                'success' => !$error,
                'site_url_changed' => $site_url_changed,
            ];
        }
	    return !$error;
    }

/**
     * Check if the wp config configuration is ok for SSL activation
     *
	 * @return bool
	 */
    public function wpconfig_ok()
    {
        //return false;
        if (($this->do_wpconfig_loadbalancer_fix || $this->no_server_variable || $this->wpconfig_siteurl_not_fixed) && !$this->wpconfig_is_writable()) {
            $result = false;
        } else {
            $result = true;
        }
        return apply_filters('rsssl_wpconfig_ok_check', $result);
    }

/**
	 * @param string      $class
	 * @param string      $content
	 * @param string|bool $more_info
	 * @param string|bool $dismiss_id
	 *
	 * @return false|string
	 *
	 * @since 4.0
	 * Return the notice HTML
	 *
	 */

public function notice_html( string $class, string $content, $more_info=false, $dismiss_id=false ) {
		$class .= ' notice ';
        $target = strpos($more_info, 'really-simple-ssl.com')!==false ? 'target="_blank"' : '';
        $url = is_ssl() ? "https://" : "http://";
		$url .= $_SERVER["HTTP_HOST"].$_SERVER["REQUEST_URI"];
        $url = esc_url_raw($url);
		ob_start();?>
            <style>
                #rsssl-message {
                    padding: 0;
                    border-left-color: #333;
                }
                #rsssl-message.error{
                    border-left-color:#d7263d;
                }
                .rsssl-notice {
                    display:flex;
                    margin:15px;
                }
                .rsssl-notice-content {
                    padding-top: 5px;
                }
                .rsssl-admin-notice-more-info {
                    margin:0 10px 0 auto;
                }
                .settings_page_really-simple-security #wpcontent #rsssl-message, .settings_page_really-simple-ssl #wpcontent #rsssl-message {
                    margin: 20px;
                }
            </style>
            <?php if ( is_rtl() ) { ?>
                <style>
                    #rsssl-message {
                        border-right-color: #333;
                    }
                    #rsssl-message.error{
                        border-right-color:#d7263d;
                    }
                    .rsssl-admin-notice-more-info {
                        margin:0 auto 0 10px;
                    }
                </style>
            <?php } ?>
        <div id="rsssl-message" class="<?php echo $class?> really-simple-plugins">
            <div class="rsssl-notice">
                <div class="rsssl-notice-content">
					<?php echo $content ?>
                </div>
                <?php if ($more_info ) { ?>
                    <div class="rsssl-admin-notice-more-info">
                        <?php if ($dismiss_id) { ?>
                            <a class="button" href="<?php echo add_query_arg(['dismiss_notice'=>$dismiss_id], $url )?>"><?php _e("Dismiss", "really-simple-ssl")?></a>
                        <?php } ?>
                        <a class="button" <?php echo $target?> href="<?php echo esc_url_raw($more_info)?>"><?php _e("More info", "really-simple-ssl")?></a></div>
                <?php } ?>
            </div>
        </div>
		<?php

return ob_get_clean();
	}

/**
     * @return bool
     *
     * Check if wp-config.php is writeable
     *
     * @access public
     */

public function wpconfig_is_writable()
    {
        $wpconfig_path = $this->find_wp_config_path();
        if ( is_writable($wpconfig_path) ) {
	        return true;
        }

return false;
    }

/**
     * Check if the uninstall file is renamed to .php
     *
	 * @return string
	 */

public function check_for_uninstall_file()
    {
        if ( file_exists( __DIR__ . '/force-deactivate.php') ) {
            return 'fail';
        }
        return 'success';
    }

/**
     * Check to see if we are on the settings page, action hook independent
     *
     * @since  2.1
     *
     * @access public
     *
     */

public function is_settings_page()
    {
        if ( rsssl_is_logged_in_rest() ) {
            return true;
        }

if ( !isset($_SERVER['QUERY_STRING']) ) {
            return false;
        }

parse_str($_SERVER['QUERY_STRING'], $params);
	    return array_key_exists( "page", $params ) && ( $params["page"] === "really-simple-security" );
    }

/**
     * Find the path to wp-config
     *
     * @since  2.1
     *
     * @access public
     * @return string|null
     *
     */

public function find_wp_config_path()
    {
        //limit nr of iterations to 20
        $i = 0;
        $maxiterations = 20;
        $dir = __DIR__;
        do {
            $i++;
            if (file_exists($dir . "/wp-config.php")) {
                return $dir . "/wp-config.php";
            }
        } while (($dir = realpath("$dir/..")) && ($i < $maxiterations));
        return null;
    }

/**
     * remove https from defined siteurl and homeurl in the wpconfig, if present
     *
     * @since  2.1
     *
     * @access public
     *
     * @return void
     */

public function remove_ssl_from_siteurl_in_wpconfig()
    {
	    if ( !rsssl_user_can_manage() ) {
		    return;
	    }
        $wpconfig_path = $this->find_wp_config_path();
        if (!empty($wpconfig_path)) {
            $wpconfig = file_get_contents($wpconfig_path);
            $homeurl_pos = strpos($wpconfig, "define('WP_HOME','https://");
            $siteurl_pos = strpos($wpconfig, "define('WP_SITEURL','https://");

if ( ($homeurl_pos !== false) || ($siteurl_pos !== false) ) {
                if ( is_writable($wpconfig_path) ) {
                    $search_array = array("define('WP_HOME','https://", "define('WP_SITEURL','https://");
                    $ssl_array = array("define('WP_HOME','http://", "define('WP_SITEURL','http://");
                    //now replace these urls
                    $wpconfig = str_replace($search_array, $ssl_array, $wpconfig);
                    file_put_contents($wpconfig_path, $wpconfig);
                }
            }
        }
    }

/**
     * Checks if the wp config contains any defined siteurl and homeurl
     *
	 * @return void
	 */
    private function check_for_siteurl_in_wpconfig()
    {
	    if ( !rsssl_user_can_manage() ) {
		    return;
	    }

$wpconfig_path = $this->find_wp_config_path();
        if ( empty($wpconfig_path) ) {
            return;
        }

$wpconfig = file_get_contents($wpconfig_path);
        $homeurl_pattern = '/(define\(\s*\'WP_HOME\'\s*,\s*\'http\:\/\/)/';
        $siteurl_pattern = '/(define\(\s*\'WP_SITEURL\'\s*,\s*\'http\:\/\/)/';

$this->wpconfig_siteurl_not_fixed = false;
        if (preg_match($homeurl_pattern, $wpconfig) || preg_match($siteurl_pattern, $wpconfig)) {
            $this->wpconfig_siteurl_not_fixed = true;
        }
    }

/**
     * Runs only when siteurl or homeurl define was found in the wpconfig, with the check_for_siteurl_in_wpconfig function
     * and only when wpconfig is writable.
     *
     * @since  2.1
     *
     * @access public
     *
     */

private function fix_siteurl_defines_in_wpconfig()
    {
	    if ( !rsssl_user_can_manage() ) {
		    return;
	    }
        $wpconfig_path = $this->find_wp_config_path();
        if ( empty($wpconfig_path) ) {
            return;
        }

if ( preg_match($homeurl_pattern, $wpconfig) || preg_match($siteurl_pattern, $wpconfig) ) {
            if ( is_writable($wpconfig_path) ) {
                $wpconfig = preg_replace($homeurl_pattern, "define('WP_HOME','https://", $wpconfig);
                $wpconfig = preg_replace($siteurl_pattern, "define('WP_SITEURL','https://", $wpconfig);
                file_put_contents($wpconfig_path, $wpconfig);
            } else {
                //only when siteurl or homeurl is defined in wpconfig, and wpconfig is not writable is there a possible issue because we cannot edit the defined urls.
                $this->wpconfig_siteurl_not_fixed = TRUE;
            }
        }
    }

/**
     * Check if the wpconfig is already fixed
     *
     * @since  2.2
     *
     * @access public
     *
     */

public function wpconfig_has_fixes()
    {
        $wpconfig_path = $this->find_wp_config_path();
        if ( empty($wpconfig_path) ) {
            return false;
        }
        $wpconfig = file_get_contents($wpconfig_path);

//only one of two fixes possible.
        if (strpos($wpconfig, "//Begin Really Simple SSL Load balancing fix") !== FALSE) {
            return true;
        }

if (strpos($wpconfig, "//Begin Really Simple SSL Server variable fix") !== FALSE) {
            return true;
        }

return false;
    }

/**
     * In case of load balancer without server https on, add fix in wp-config
     *
     * @since  2.1
     *
     * @access public
     *
     */

public function wpconfig_loadbalancer_fix()
    {
        if ( !rsssl_user_can_manage() ) {
            return;
        }

$wpconfig_path = $this->find_wp_config_path();
        if (empty($wpconfig_path)) return;
        $wpconfig = file_get_contents($wpconfig_path);
	    if ( strpos($wpconfig, "//Begin Really Simple SSL Server variable fix") !== false ) {
		    return;
	    }

if ( strpos($wpconfig, "//Begin Really Simple SSL Load balancing fix") !== false ) {
            return;
        }

if (is_writable($wpconfig_path)) {
            $rule = "\n" . "//Begin Really Simple SSL Server variable fix" . "\n";
            $rule .= '$_SERVER["HTTPS"] = "on";' . "\n";
            $rule .= "//END Really Simple SSL Server variable fix" . "\n";

$insert_after = "<?php";
            $pos = strpos($wpconfig, $insert_after);
            if ($pos !== false) {
                $wpconfig = substr_replace($wpconfig, $rule, $pos + 1 + strlen($insert_after), 0);
            }

file_put_contents($wpconfig_path, $wpconfig);
        }

}

/**
     * Removing changes made to the wpconfig
     *
     * @since  2.1
     *
     * @access public
     *
     */

public function remove_wpconfig_edit()
    {
	    if ( !rsssl_user_can_manage() ){
		    return;
	    }

$wpconfig_path = $this->find_wp_config_path();
        if (empty($wpconfig_path)) {
            return;
        }

//check for permissions
        $wpconfig = file_get_contents($wpconfig_path);
        if (!is_writable($wpconfig_path)) {
            return;
        }

//remove edits
        $wpconfig = preg_replace("/\/\/Begin\s?Really\s?Simple\s?SSL\s?Server\s?variable\s?fix.*?\/\/END\s?Really\s?Simple\s?SSL\s?Server\s?variable\s?fix/s", "", $wpconfig);
        $wpconfig = preg_replace("/\n+/", "\n", $wpconfig);
        file_put_contents($wpconfig_path, $wpconfig);
    }

/**
     * Changes the siteurl and homeurl to https
     *
     * @since  2.0
     *
     * @access public
     * @return bool
     */

public function set_siteurl_to_ssl()
    {
	    $site_url_changed = false;
	    $site_url = get_option('siteurl');
	    $home_url = get_option('home');
	    if ( strpos($site_url,'https://')===false || strpos($home_url, 'https://')===false) {
		    update_option('siteurl', str_replace("http://", "https://", $site_url ));
		    update_option('home', str_replace("http://", "https://", $home_url ));
		    $site_url_changed = true;
        }

//RSSSL has it's own, more extensive mixed content fixer.
	    update_option( 'https_migration_required', false );
        return $site_url_changed;
    }

/**
     * On de-activation, siteurl and homeurl are reset to http
     *
     * @since  2.0
     *
     * @access public
     *
     */

public function remove_ssl_from_siteurl()
    {
	    if ( !rsssl_user_can_manage() ){
		    return;
	    }
        $siteurl_no_ssl = str_replace("https://", "http://", get_option('siteurl'));
        $homeurl_no_ssl = str_replace("https://", "http://", get_option('home'));
        update_option('siteurl', $siteurl_no_ssl);
        update_option('home', $homeurl_no_ssl);
    }

/**
     * Handles deactivation of this plugin
     *
     * @since  2.0
     *
     * @access public
     *
     */

public function deactivate()
    {
	    if ( !rsssl_user_can_manage() ) {
		    return;
	    }
	    if ( is_multisite() ) {
		    RSSSL()->multisite->deactivate();
	    } else {
            $ssl_was_enabled = rsssl_get_option('ssl_enabled');
		    $this->deactivate_site($ssl_was_enabled);
        }
    }

/**]
     * Deactivate SSL for the currently loaded site
     *
	 * @param bool $ssl_was_enabled
	 *
	 * @return void
	 */
    public function deactivate_site( bool $ssl_was_enabled){

if ( !rsssl_user_can_manage() ) {
		    return;
	    }
	    $this->remove_secure_cookie_settings();
	    if ($ssl_was_enabled) {
		    $this->remove_ssl_from_siteurl();
		    if ( !is_multisite() || is_main_site() ) {
			    $this->remove_ssl_from_siteurl_in_wpconfig();
			    $this->remove_wpconfig_edit();
			    rsssl_remove_htaccess_security_edits();
		    }
	    }

do_action("rsssl_deactivate");
	    rsssl_update_option('ssl_enabled', false);
    }

/**
	 * remove secure cookie settings
	 *
	 * @since  4.0.10
	 *
	 * @access public
	 *
	 */

public function remove_secure_cookie_settings() {

if ( !rsssl_user_can_manage() ) {
            return;
		}

if ( $this->secure_cookie_settings_status() !== 'set') {
            return;
		}

$wpconfig_path = $this->find_wp_config_path();
		if ( !is_writable($wpconfig_path) ) {
            return;
		}

if (!empty($wpconfig_path)) {
			$wpconfig = file_get_contents($wpconfig_path);
			$wpconfig = preg_replace("/\/\/Begin\s?Really\s?Simple\s?SSL\s?session\s?cookie\s?settings.*?\/\/END\s?Really\s?Simple\s?SSL\s?cookie\s?settings/s", "", $wpconfig);
			$wpconfig = preg_replace("/\n+/","\n", $wpconfig);
			file_put_contents($wpconfig_path, $wpconfig);
		}
	}

/**
     * Checks if we are currently on SSL protocol, but extends standard wp with loadbalancer check.
     *
     * @since  2.0
     *
     * @access public
     *
     */

public function is_ssl_extended()
    {
        $server_var = FALSE;
        if ((isset($_ENV['HTTPS']) && ('on' === $_ENV['HTTPS']))
            || (isset($_SERVER['HTTP_X_FORWARDED_SSL']) && (strpos($_SERVER['HTTP_X_FORWARDED_SSL'], '1') !== false))
            || (isset($_SERVER['HTTP_X_FORWARDED_SSL']) && (strpos($_SERVER['HTTP_X_FORWARDED_SSL'], 'on') !== false))
            || (isset($_SERVER['HTTP_CF_VISITOR']) && (strpos($_SERVER['HTTP_CF_VISITOR'], 'https') !== false))
            || (isset($_SERVER['HTTP_CLOUDFRONT_FORWARDED_PROTO']) && (strpos($_SERVER['HTTP_CLOUDFRONT_FORWARDED_PROTO'], 'https') !== false))
            || (isset($_SERVER['HTTP_X_FORWARDED_PROTO']) && (strpos($_SERVER['HTTP_X_FORWARDED_PROTO'], 'https') !== false))
            || (isset($_SERVER['HTTP_X_PROTO']) && (strpos($_SERVER['HTTP_X_PROTO'], 'SSL') !== false))
        ) {
            $server_var = TRUE;
        }

return is_ssl() || $server_var;
    }

/**
     * Checks for SSL by opening a test page in the plugin directory
     *
     * @since  2.0
     *
     * @access public
     *
     */

public function detect_configuration()
    {
	    $this->configuration_loaded = true;
        //if current page is on SSL, we can assume SSL is available, even when an errormsg was returned
        if ( $this->is_ssl_extended() ) {
            $site_has_ssl = true;
        } else {
            //if certificate is valid
            $site_has_ssl = RSSSL()->certificate->is_valid();
        }

if ( $site_has_ssl ) {
            $filecontents = $this->get_test_page_contents();
            //get filecontents to check .htaccess redirection method and wpconfig fix
            //check the type of SSL, either by parsing the returned string, or by reading the server vars.
            if ((strpos($filecontents, "#CLOUDFRONT#") !== false) || (isset($_SERVER['HTTP_CLOUDFRONT_FORWARDED_PROTO']) && ($_SERVER['HTTP_CLOUDFRONT_FORWARDED_PROTO'] == 'https'))) {
                $this->ssl_type = "CLOUDFRONT";
            } elseif ((strpos($filecontents, "#CLOUDFLARE#") !== false) || (isset($_SERVER['HTTP_CF_VISITOR']) && (strpos($_SERVER["HTTP_CF_VISITOR"], "https") !== false))) {
                $this->ssl_type = "CLOUDFLARE";
            } elseif ((strpos($filecontents, "#LOADBALANCER#") !== false) || (isset($_SERVER['HTTP_X_FORWARDED_PROTO']) && ($_SERVER['HTTP_X_FORWARDED_PROTO'] == 'https'))) {
                $this->ssl_type = "LOADBALANCER";
            } elseif ((strpos($filecontents, "#HTTP_X_PROTO#") !== false) || (isset($_SERVER['HTTP_X_PROTO']) && ($_SERVER['HTTP_X_PROTO'] == 'SSL'))) {
                $this->ssl_type = "HTTP_X_PROTO";
            } elseif ((strpos($filecontents, "#HTTP_X_FORWARDED_SSL_ON#") !== false) || (isset($_SERVER['HTTP_X_FORWARDED_SSL']) && $_SERVER['HTTP_X_FORWARDED_SSL'] == 'on')) {
                $this->ssl_type = "HTTP_X_FORWARDED_SSL_ON";
            } elseif ((strpos($filecontents, "#HTTP_X_FORWARDED_SSL_1#") !== false) || (isset($_SERVER['HTTP_X_FORWARDED_SSL']) && $_SERVER['HTTP_X_FORWARDED_SSL'] == '1')) {
                $this->ssl_type = "HTTP_X_FORWARDED_SSL_1";
            } elseif ((strpos($filecontents, "#SERVER-HTTPS-ON#") !== false) || (isset($_SERVER['HTTPS']) && strtolower($_SERVER['HTTPS']) == 'on')) {
                $this->ssl_type = "SERVER-HTTPS-ON";
            } elseif ((strpos($filecontents, "#SERVER-HTTPS-1#") !== false) || (isset($_SERVER['HTTPS']) && strtolower($_SERVER['HTTPS']) == '1')) {
                $this->ssl_type = "SERVER-HTTPS-1";
            } elseif ((strpos($filecontents, "#SERVERPORT443#") !== false) || (isset($_SERVER['SERVER_PORT']) && ('443' == $_SERVER['SERVER_PORT']))) {
                $this->ssl_type = "SERVERPORT443";
            } elseif ((strpos($filecontents, "#ENVHTTPS#") !== false) || (isset($_ENV['HTTPS']) && ('on' == $_ENV['HTTPS']))) {
                $this->ssl_type = "ENVHTTPS";
            } elseif ((strpos($filecontents, "#NO KNOWN SSL CONFIGURATION DETECTED#") !== false)) {
                //if we are here, SSL was detected, but without any known server variables set.
                //So we can use this info to set a server variable ourselves.
                if ( !$this->wpconfig_has_fixes() ) {
                    $this->no_server_variable = true;
                }
                $this->ssl_type = "NA";
            } else {
                //no valid response, so set to NA
                $this->ssl_type = "NA";
            }

//check for is_ssl()
            if ( ( !$this->is_ssl_extended() &&
                    (strpos($filecontents, "#SERVER-HTTPS-ON#") === false) &&
                    (strpos($filecontents, "#SERVER-HTTPS-1#") === false) &&
                    (strpos($filecontents, "#SERVERPORT443#") === false)
                 ) ||
                 ( !is_ssl() && $this->is_ssl_extended() )) {
                //when is_ssl would return false, we should add some code to wp-config.php
                if ( !$this->wpconfig_has_fixes() ) {
                    $this->do_wpconfig_loadbalancer_fix = true;
                }
            }
        }
        $this->check_for_siteurl_in_wpconfig();
	    rsssl_update_option('site_has_ssl', $site_has_ssl);
    }

/**
     * Test if the htaccess redirect will work
     * This way, no redirect loops should occur.
     *
     * @since  2.1
     *
     * @access public
     *
     */

public function htaccess_test_success()
    {
	    $test = get_transient('rsssl_htaccess_test_success');
        if ( !$test ) {
            $filecontents = "";
            $testpage_url = trailingslashit($this->test_url()) . "testssl/";
            switch ( $this->ssl_type ) {
                case "CLOUDFRONT":
                    $testpage_url .= "cloudfront";
                    break;
                case "CLOUDFLARE":
                    $testpage_url .= "cloudflare";
                    break;
                case "LOADBALANCER":
                    $testpage_url .= "loadbalancer";
                    break;
                case "HTTP_X_PROTO":
                    $testpage_url .= "serverhttpxproto";
                    break;
                case "HTTP_X_FORWARDED_SSL_ON":
                    $testpage_url .= "serverhttpxforwardedsslon";
                    break;
                case "HTTP_X_FORWARDED_SSL_1":
                    $testpage_url .= "serverhttpxforwardedssl1";
                    break;
                case "SERVER-HTTPS-ON":
                    $testpage_url .= "serverhttpson";
                    break;
                case "SERVER-HTTPS-1":
                    $testpage_url .= "serverhttps1";
                    break;
                case "SERVERPORT443":
                    $testpage_url .= "serverport443";
                    break;
                case "ENVHTTPS":
                    $testpage_url .= "envhttps";
                    break;
                default:
                    $testpage_url .= "serverhttpson";
            }

$testpage_url .= ("/ssl-test-page.html");
            $response = wp_remote_get($testpage_url);
            if (is_array($response)) {
                $filecontents = wp_remote_retrieve_body($response);
            }

if ( !is_wp_error($response) && (strpos($filecontents, "#SSL TEST PAGE#") !== false) ) {
                $test = 'success';
            } else {
                //.htaccess rewrite rule seems to be giving problems.
                $test = 'error';
            }
            if ( empty($filecontents) ) {
                $test = 'no-response';
            }
            set_transient('rsssl_htaccess_test_success', $test, 600);
        }

if ( $test === 'no-response' || $test === 'error' ){
            return false;
        }

if ( $test === 'success' ){
            return true;
        }
    }

/**
     * Get an url with which we can test the SSL connection and htaccess redirect rules.
     *
     * @since  2.0
     *
     * @access public
     *
     */

public function test_url()
    {
        $plugin_url = str_replace("http://", "https://", trailingslashit(rsssl_url));
        $https_home_url = str_replace("http://", "https://", home_url());

//in some case we get a relative url here, so we check that.
        //we compare to urls replaced to https, in case one of them is still on http.
        if ((strpos($plugin_url, "https://") === FALSE) &&
            (strpos($plugin_url, $https_home_url) === FALSE)
        ) {
            //make sure we do not have a slash at the start
            $plugin_url = ltrim($plugin_url, "/");
            $plugin_url = trailingslashit(home_url()) . $plugin_url;
        }

//for subdomains or domain mapping situations, we have to convert the plugin_url from main site to the subdomain url.
        if ( is_multisite() && !is_main_site(get_current_blog_id()) && !RSSSL()->multisite->is_multisite_subfolder_install() ) {
            $mainsiteurl = trailingslashit(str_replace("http://", "https://", network_site_url()));
            $home = trailingslashit($https_home_url);
            $plugin_url = str_replace($mainsiteurl, $home, $plugin_url);
        }

return $plugin_url;
    }

/**
	 * @return bool
     *
     * Check if the .htaccess redirect is allowed on this setup
     *
     * @since 2.0
     *
	 */

public function htaccess_redirect_allowed()
    {
        if ( is_multisite() && !$this->can_apply_networkwide() ) {
            return false;
        } if (RSSSL()->server->uses_htaccess()) {
            return true;
        }

return false;
    }

/**
	 * @return bool
     *
     * Checks if the htaccess contains redirect rules, either actual redirect or a rsssl marker.
     *
     * @since 2.0
     *
	 */

public function htaccess_contains_redirect_rules()
    {
        if ( !file_exists($this->htaccess_file()) ) {
            return false;
        }

$pattern = '/RewriteRule \^$\.\*$\$ https:\/\/%{HTTP_HOST}(\/\$1|%{REQUEST_URI}) (\[R=301,.*L\]|\[L,.*R=301\])/i';
	    $htaccess = file_get_contents($this->htaccess_file());
	    return preg_match( $pattern, $htaccess );
    }

/**
      *    Checks if the htaccess contains the Really Simple SSL comment.
      *
      */

public function contains_rsssl_rules()
    {
        if ( !file_exists($this->htaccess_file()) ) {
            return false;
        }

$htaccess = file_get_contents($this->htaccess_file());
	    if (
            preg_match( "/BEGIN rlrssslReallySimpleSSL/", $htaccess, $matches ) ||
            preg_match( "/BEGIN Really Simple SSL Redirect/", $htaccess, $matches ) ||
            preg_match( "/Begin Really Simple Security/", $htaccess, $matches )
        ) {
            return false;
        }

return true;
    }

/**
	 * @return bool
     *
     * Checks if a 301 redirect is set
	 * this is the case if either the wp_redirect is set, or the htaccess redirect is set.
     *
	 */

public function has_301_redirect()
    {
        if ( rsssl_get_option('redirect') === 'htaccess' || rsssl_get_option('redirect') === 'wp_redirect') {
            return true;
        }

if ( RSSSL()->server->uses_htaccess() && $this->htaccess_contains_redirect_rules()) {
            return true;
        }

return false;
    }

/**
	 * returns list of recommended, but not active security headers for this site
     * returns empty array if no .htacces file exists
     * Uses cURL, fallback to .htaccess check upon cURL failure
     * @return array
	 *
	 * @since  4.0
	 *
	 * @access public
	 *
	 */

public function get_recommended_security_headers()
	{

$used_headers = array();
		$not_used_headers = array();
		$check_headers = apply_filters( 'rsssl_recommended_security_headers', array(
			array(
				'name' => 'Upgrade Insecure Requests',
				'pattern' =>  'upgrade-insecure-requests',
			),
			array(
				'name' => 'X-XSS protection',
				'pattern' =>  'X-XSS-Protection',
			),
			array(
				'name' => 'X-Content Type Options',
				'pattern' =>  'X-Content-Type-Options',
			),
			array(
				'name' => 'Referrer-Policy',
				'pattern' =>  'Referrer-Policy',
			),
            array(
                'name' => 'X-Frame-Options',
                'pattern' =>  'X-Frame-Options',
            ),
            array(
                'name' => 'Permissions-Policy',
                'pattern' =>  'Permissions-Policy',
            ),
            array(
                'name' => 'HTTP Strict Transport Security',
                'pattern' =>  'Strict-Transport-Security',
            ),
            )
        );

// cURL check
        $curl_check_done = get_transient('rsssl_can_use_curl_headers_check');//no, yes or false
        if ( !$curl_check_done ) {
	        //set a default
	        set_transient( 'rsssl_can_use_curl_headers_check', 'no', WEEK_IN_SECONDS );
	        if ( function_exists( 'curl_init' ) ) {
		        $url     = get_site_url();
		        $ch      = curl_init();
		        $headers = [];
		        curl_setopt( $ch, CURLOPT_URL, $url );
		        curl_setopt( $ch, CURLOPT_RETURNTRANSFER, 1 );
		        curl_setopt( $ch, CURLOPT_TIMEOUT, 3 ); //timeout in seconds
		        curl_setopt( $ch, CURLOPT_HEADERFUNCTION,
			        function ( $curl, $header ) use ( &$headers ) {
				        $len    = strlen( $header );
				        $header = explode( ':', $header, 2 );
				        if ( count( $header ) < 2 ) // ignore invalid headers
				        {
					        return $len;
				        }

$headers[ strtolower( trim( $header[0] ) ) ][] = trim( $header[1] );

return $len;
			        }
		        );

curl_exec( $ch );
		        // Check if any headers have been found
		        if ( ! empty( $headers ) && is_array( $headers ) ) {

// Loop through each header and check if it's one of the recommended security headers. If so, add to used_headers array.
			        foreach ( $headers as $name => $value ) {
				        foreach ( $check_headers as $check_header ) {
					        // If the pattern occurs in either the header name or value, it's a security header.
					        if ( stripos( $name, $check_header['pattern'] ) !== false || stripos( $value[0], $check_header['pattern'] ) !== false ) {
						        // Prevent duplicate entries
						        if ( ! in_array( $check_header['name'], $used_headers ) ) {
							        $used_headers[] = $check_header['name'];
						        }
					        }
				        }
			        }

// Now check which headers are unused. Compare the used headers against the $check_headers array.
			        foreach ( $check_headers as $header ) {
				        if ( in_array( $header['name'], $used_headers ) ) {
					        // Header is used, do not add to unused array
					        continue;
				        } else {
					        // Header is not used. Add to not used array
					        $not_used_headers[] = $header['name'];
				        }
			        }
			        $curl_check_done = $not_used_headers;
		        } else {
			        $curl_check_done = 'no';
                }
	        } else {
		        $curl_check_done = 'no';
	        }
	        set_transient( 'rsssl_can_use_curl_headers_check', $curl_check_done, WEEK_IN_SECONDS );
        }

if ( $curl_check_done === 'no' ) {
	        if ( RSSSL()->server->uses_htaccess() && file_exists($this->htaccess_file()) ) {
		        $htaccess = file_get_contents($this->htaccess_file());
		        foreach ($check_headers as $check_header){
			        if ( !preg_match("/".$check_header['pattern']."/", $htaccess, $check) ) {
				        $not_used_headers[] = $check_header['name'];
			        }
		        }
	        }
        } else {
	        $not_used_headers = $curl_check_done;
        }

return $not_used_headers;
	}

/**
	 * Check if the recommended headers are enabled
	 *
	 * @return bool
	 */

public function recommended_headers_enabled() {

$unused_headers = $this->get_recommended_security_headers();
		if ( empty( $unused_headers ) ) {
			return true;
		}
    	return false;
	}

/**
	 * Regenerate the wp rocket .htaccess rules
	 */

public function maybe_flush_wprocket_htaccess($field_id, $field_value, $prev_value, $field_type ){
		if ( $field_id==='redirect' && $field_value !== $prev_value && rsssl_user_can_manage() ){
			if ( function_exists('flush_rocket_htaccess') ) {
				flush_rocket_htaccess();
			}

if ( function_exists('rocket_generate_config_file') ) {
				rocket_generate_config_file();
			}
		}
	}

/**
	 * Return .htaccess redirect when using WP Rocket
	 * @return string
	 */
	public function add_htaccess_redirect_before_wp_rocket() {
        $rules = $this->get_redirect_rules();
        if ( !empty($rules) ) {
	        $start = "\n" . '#Begin Really Simple SSL Redirect';
	        $end   = "\n" . '#End Really Simple SSL Redirect' . "\n";
	        $rules = $start.$rules.$end;
        }
		return $rules;
	}

/**
     * Check if the mixed content fixer is functioning on the front end, by scanning the source of the homepage for the fixer comment.
     * @since 2.2
     * @access public
     * @return string
     */

public function mixed_content_fixer_detected()
    {

//no need to check for the mixed content fixer if it's not enabled yet.
        if ( !rsssl_get_option( 'mixed_content_fixer' ) ) {
		    return 'not-enabled';
	    }

//it's enabled, so check if we can find it on the front-end.
	    $status = 0;
	    $result = get_transient('rsssl_mixed_content_fixer_detected');
        if (!$result) {
            $web_source = "";
            //check if the mixed content fixer is active
            $response = wp_remote_get(home_url());
            if ( !is_wp_error($response) ) {
	            if ( is_array( $response ) ) {
		            $status = wp_remote_retrieve_response_code( $response );
		            $web_source = wp_remote_retrieve_body( $response );
	            }

if ( $status != 200 ) {
		            //Could not connect to website
		            $result = 'no-response';
	            } elseif ( strpos( $web_source, "data-rsssl=" ) === false ) {
		            //Mixed content fixer marker not found in the websource
		            $result = 'not-found';
	            } else {
		            $result = 'found';
	            }
            }

if ( is_wp_error($response) ) {
	            //Fallback since most errors will be cURL errors, Error encountered while retrieving the webpage.
                $result = 'error';
                $error = $response->get_error_message();
                set_transient('rsssl_curl_error' , $error, DAY_IN_SECONDS );
                if ( !empty($error) && (strpos($error, "cURL error") !== false ) ) {
                    $result = 'curl-error';
                }
            }
            set_transient('rsssl_mixed_content_fixer_detected', $result, 600);
        }

return $result === 'found';
    }

/**
     * Create redirect rules for the .htaccess.
	 * @since  2.1
	 *
	 * @access public
     *
	 * @param bool $manual
	 *
	 * @return string
	 */

public function get_redirect_rules($manual = false)
    {
	    //ensure the configuration check has run always.
        if ( !$this->configuration_loaded ) {
	        $this->detect_configuration();
        }
        //only add the redirect rules when a known type of SSL was detected. Otherwise, we use https.
        $rule = "";
        //if the htaccess test was successfull, and we know the redirect type, edit
        if (
                rsssl_get_option('ssl_enabled') &&
                rsssl_get_option('redirect')==='htaccess' &&
                ($manual || $this->htaccess_test_success() ) &&
                $this->ssl_type != "NA"
        ) {
            $rule .= "\n" . "<IfModule mod_rewrite.c>" . "\n";
            $rule .= "RewriteEngine on" . "\n";
            if ($this->ssl_type === "SERVER-HTTPS-ON") {
                $rule .= "RewriteCond %{HTTPS} !=on [NC]" . "\n";
            } elseif ($this->ssl_type === "SERVER-HTTPS-1") {
                $rule .= "RewriteCond %{HTTPS} !=1" . "\n";
            } elseif ($this->ssl_type === "LOADBALANCER") {
                $rule .= "RewriteCond %{HTTP:X-Forwarded-Proto} !https" . "\n";
            } elseif ($this->ssl_type === "HTTP_X_PROTO") {
                $rule .= "RewriteCond %{HTTP:X-Proto} !SSL" . "\n";
            } elseif ($this->ssl_type === "CLOUDFLARE") {
                $rule .= "RewriteCond %{HTTP:CF-Visitor} '" . '"scheme":"http"' . "'" . "\n";//some concatenation to get the quotes right.
            } elseif ($this->ssl_type === "SERVERPORT443") {
                $rule .= "RewriteCond %{SERVER_PORT} !443" . "\n";
            } elseif ($this->ssl_type === "CLOUDFRONT") {
                $rule .= "RewriteCond %{HTTP:CloudFront-Forwarded-Proto} !https" . "\n";
            } elseif ($this->ssl_type === "HTTP_X_FORWARDED_SSL_ON") {
                $rule .= "RewriteCond %{HTTP:X-Forwarded-SSL} !on" . "\n";
            } elseif ($this->ssl_type === "HTTP_X_FORWARDED_SSL_1") {
                $rule .= "RewriteCond %{HTTP:X-Forwarded-SSL} !=1" . "\n";
            } elseif ($this->ssl_type === "ENVHTTPS") {
                $rule .= "RewriteCond %{ENV:HTTPS} !=on" . "\n";
            }

//fastest cache compatibility
            if ( class_exists('WpFastestCache') ) {
                $rule .= "RewriteCond %{REQUEST_URI} !wp-content\/cache\/(all|wpfc-mobile-cache)" . "\n";
            }

//Exclude .well-known/acme-challenge for Let's Encrypt validation
            if ( $this->has_acme_challenge_directory() ) {
                $rule .= "RewriteCond %{REQUEST_URI} !^/\.well-known/acme-challenge/" . "\n";
            }

$rule .= "RewriteRule ^(.*)$ https://%{HTTP_HOST}/$1 [R=301,L]" . "\n";
            $rule .= "</IfModule>" . "\n";
        }

$rule = apply_filters("rsssl_htaccess_output", $rule);
        return preg_replace("/\n+/", "\n", $rule);
    }

/**
     *
     * @return bool
     * since 3.1
     * Check if .well-known/acme-challenge directory exists
     * @access public
     */

public function has_acme_challenge_directory()
    {
        if (file_exists("$this->abs_path.well-known/acme-challenge")) {
            return true;
        }
        return false;
    }

/**
     *
     * @return bool
     * since 3.1
     * Check if there are already .well-known rules in .htaccess file
     * @access public
     *
     */

public function has_well_known_needle()
    {
        $file = $this->htaccess_file();
        if ( !file_exists($file) ) {
            return false;
        }
        $htaccess = file_get_contents( $file );
        $well_known_needle = "RewriteCond %{REQUEST_URI} !^/\.well-known/acme-challenge/";

if (strpos($htaccess, $well_known_needle) !== false) {
            return true;
        }

return false;
    }

/**
	 * Shows a notice, asking users for a review.
	 */

public function show_leave_review_notice()
    {
        if (defined('rsssl_pro_version')) {
            return;
        }

if ( rsssl_get_option('dismiss_all_notices') ) {
            return;
        }
//	    update_option('rsssl_activation_timestamp', strtotime('-2 month'), false );
//	    rsssl_update_option('review_notice_shown', false);
        //prevent showing the review on edit screen, as gutenberg removes the class which makes it editable.
        $screen = get_current_screen();
	    if ( $screen && $screen->base === 'post' ) {
            return;
	    }

//this user has never had the review notice yet.
        if ( rsssl_get_option('ssl_enabled') && !get_option('rsssl_activation_timestamp')){
            $month = rand ( 0, 11);
            $trigger_notice_date = time() + $month * MONTH_IN_SECONDS;
	        update_option('rsssl_activation_timestamp', $trigger_notice_date, false );
	        update_option('rsssl_before_review_notice_user', true, false );
        }

if ( !rsssl_get_option('review_notice_shown') && get_option('rsssl_activation_timestamp') && get_option('rsssl_activation_timestamp') < strtotime("-1 month")) {

//checking legacy options, just in case.
	        $options = get_option('rlrsssl_options');
	        if ( is_array($options) && isset( $options['review_notice_shown'] ) && $options['review_notice_shown']) {
		        rsssl_update_option('review_notice_shown', true);
                return;
	        }

add_action('admin_print_footer_scripts', array($this, 'insert_dismiss_review'));
            ?>

<i>- Rogier</i>
                        <div class="rsssl-buttons-row">
                            <a class="button button-primary" target="_blank"
                               href="https://wordpress.org/support/plugin/really-simple-ssl/reviews/#new-post"><?php _e('Leave a review', 'really-simple-ssl'); ?></a>
                            <div class="dashicons dashicons-calendar"></div><a href="<?php echo esc_url(add_query_arg(array("page"=>"really-simple-security", "rsssl_review_notice"=>'later'), rsssl_admin_url() ) );?>"><?php _e('Maybe later', 'really-simple-ssl'); ?></a>
                            <div class="dashicons dashicons-no-alt"></div><a href="<?php echo esc_url(add_query_arg(array("page"=>"really-simple-security", "rsssl_review_notice"=>'dismiss'), rsssl_admin_url() ) );?>"><?php _e('Don\'t show again', 'really-simple-ssl'); ?></a>
                        </div>
                    </div>
                </div>
            </div>
            <?php
        }
    }

/**
	 * Insert some ajax script to dismiss the review notice, and stop nagging about it
	 *
	 * @since  3.0
	 *
	 * @access public
	 */

public function insert_dismiss_review()
	{ ?>
        <script>
            document.addEventListener('click', e => {
                if ( e.target.closest('.rsssl-review.notice.is-dismissible .notice-dismiss') ) {
                    window.location.href='<?php echo esc_url_raw(add_query_arg( array( "page" => "really-simple-security", "rsssl_review_notice" => 'dismiss' ), rsssl_admin_url() ))?>';
                }
            });
        </script>
		<?php
	}

/**
	 * Dismiss review notice of dismissed by the user
	 */

public function maybe_dismiss_review_notice() {
		if ( isset($_GET['rsssl_review_notice']) && $_GET['rsssl_review_notice'] === 'dismiss' ){
			rsssl_update_option('review_notice_shown',true);
		}
		if ( isset($_GET['rsssl_review_notice']) && $_GET['rsssl_review_notice'] === 'dismiss' ){
			//Reset activation timestamp, notice will show again in one month.
			update_option('rsssl_activation_timestamp', time(), false );
        }
	}

/**
     * Show notices
     *
     * @since  2.0
     *
     * @access public
     *
     */

public function show_notices()
    {
        if ( !rsssl_user_can_manage() ){
            return;
        }
	    //prevent showing the review on edit screen, as gutenberg removes the class which makes it editable.
	    $screen = get_current_screen();
	    if ( $screen && $screen->base === 'post' ) {
		    return;
	    }

//don't show admin notices on our own settings page: we have the warnings there
        if ( $this->is_settings_page() ) return;
	    $notices = $this->get_notices_list( array('admin_notices'=>true) );
        if ( is_array($notices) ) {
	        foreach ( $notices as $id => $notice ){
		        $notice = $notice['output'];
		        $class = ( $notice['status'] !== 'completed' ) ? 'error' : 'updated';
		        $more_info = $notice['url'] ?? false;
		        $dismiss_id = isset($notice['dismissible']) && $notice['dismissible'] ? $id : false;
		        echo $this->notice_html( $class.' '.$id, $notice['msg'], $more_info, $dismiss_id);
	        }
        }
    }

/**
     *
     *
     * Add an update count to the WordPress admin Settings menu item
     * Doesn't work when the Admin Menu Editor plugin is active
     * @since 3.1.6
     */

public function add_plus_ones()
    {
        if (!rsssl_user_can_manage()) {
            return;
        }

if ( is_multisite() && rsssl_is_networkwide_active() ) {
            return;
        }

$count = $this->count_plusones();
        if ($count > 0 ){
	        global $menu;
	        foreach($menu as $index => $menu_item){
		        if (!isset($menu_item[2]) || !isset($menu_item[0])) continue;
		        if ($menu_item[2]==='options-general.php'){
			        $pattern = '/<span.*>([1-9])<\/span><\/span>/i';
			        if (preg_match($pattern, $menu_item[0], $matches)){
				        if (isset($matches[1])) $count = (int) $count + (int) $matches[1];
			        }
			        $menu[$index][0] = __('Settings') . "<span class='update-plugins rsssl-update-count'><span class='update-count'>$count</span></span>";
		        }
	        }
        }

}

/**
	 * Helper function to check if the wpconfig needs fixing
     * Used in notices
     *
	 * @return bool
	 */
    public function wpconfig_siteurl_not_fixed(){
        return $this->wpconfig_siteurl_not_fixed;
    }

/**
     * Helper function to check if the wpconfig needs fixing
     * Used in notices
     *
     * @return bool
	 */
    public function no_server_variable(){
        return $this->no_server_variable;
    }

/**
     * Helper function to check if a site url has to be fixed
     * Used in notices
     *
	 * @return bool
	 */
    public function do_wpconfig_loadbalancer_fix(){
        return $this->do_wpconfig_loadbalancer_fix;
    }

/**
     * Clear the cached admin notices list
	 * @return void
	 */
    public function clear_admin_notices_cache(){
	    delete_option('rsssl_admin_notices');
	    delete_option('rsssl_plusone_count');
    }

/**
     * Get array of notices
     * - condition: function returning boolean, if notice should be shown or not
     * - callback: function, returning boolean or string, with multiple possible answers, and resulting messages and icons
     * @param array $args
     * @return array
     */

public function get_notices_list( $args = array() )
    {
	    if ( !rsssl_user_can_manage() ){
		    return [];
	    }
	    $icon_labels = [
		    'success' => __("Completed", "really-simple-ssl"),
		    'warning' => __("Warning", "really-simple-ssl"),
		    'open' => __("Open", "really-simple-ssl"),
		    'premium' => __("Upgrade", "really-simple-ssl"),
	    ];

$defaults = array(
            'admin_notices' => false,
            'premium_only' => false,
            'dismiss_on_upgrade' => false,
            'status' => 'open', //status can be "all" (all tasks, regardless of dismissed or open), "open" (not success/completed) or "completed"
        );
        $args = wp_parse_args($args, $defaults);
	    $cache_admin_notices = !$this->is_settings_page();

//if we're on the settings page, we need to clear the admin notices transient, because this list won't get refreshed otherwise
	    if ( $this->is_settings_page() && !get_option('rsssl_6_notice_dismissed')) {
            update_option('rsssl_6_notice_dismissed', true, false );
	    }

if ( $cache_admin_notices ) {
		    $cached_notices = get_option('rsssl_admin_notices');
            if ( $cached_notices === 'empty') {
                return [];
            }
		    if ( $cached_notices !== false ) {
                return $cached_notices;
		    }
	    }

//not cached, set a default here
	    update_option('rsssl_admin_notices', 'empty');

$rules            = $this->get_redirect_rules( true );
        if ( $this->ssl_type !== "NA" ) {
            $arr_search       = array( "<", ">", "\n" );
            $arr_replace      = array( "&lt", "&gt", "<br>" );
            $rules            = str_replace( $arr_search, $arr_replace, $rules );
            $rules            = substr($rules, 4, -4);
        } else {
            $rules = __( "No recommended redirect rules detected.", "really-simple-ssl" ) ;
        }
	    $rules            = '<br><code>' . $rules . '</code><br>';

$notice_defaults = array(
            'condition' => array(),
            'callback' => false,
        );

$curl_error = get_transient('rsssl_curl_error');
        $current_plugin_folder = $this->get_current_rsssl_free_dirname();

//get expiry date, if we have one.
	    $certinfo = get_transient('rsssl_certinfo');
	    $end_date = isset($certinfo['validTo_time_t']) ? $certinfo['validTo_time_t'] : false;
	    $expiry_date = !empty($end_date) ? date( get_option('date_format'), $end_date ) : __("(Unknown)", "really-simple-ssl");

$notices = array(
	        'load_balancer_fix' => array(
		        'condition' => ['NOT rsssl_ssl_enabled'],
		        'callback' => 'RSSSL()->admin->do_wpconfig_loadbalancer_fix',
		        'score' => 30,
		        'output' => array(
			        'true' => array(
				        'msg' => __("Your wp-config.php has to be edited, but is not writable.", "really-simple-ssl").' '.
                                 __("Set your wp-config.php to writable and reload this page.", "really-simple-ssl").' '.
				                 __("To safely enable SSL on your server configuration, you should add the following line of code to your wp-config.php.", "really-simple-ssl").
                                '<br><code>
                                //Begin Really Simple SSL Server variable fix<br>
                                &nbsp;&nbsp; $_SERVER["HTTPS"] = "on";<br>
                                //END Really Simple SSL
                            </code><br>',
				        'icon' => 'warning',
				        'admin_notice' => true,
				        'plusone' => true,
				        'dismissible' => false,
				        'url' => 'https://really-simple-ssl.com/knowledge-base/htaccess-wp-config-files-not-writable/',
			        ),
		        ),
	        ),
              'site_url_in_wpconfig' => array(
                'condition' => ['NOT rsssl_ssl_enabled'],
                'callback' => 'RSSSL()->admin->wpconfig_siteurl_not_fixed',
                'score' => 30,
                'output' => array(
                    'true' => array(
                        'msg' => __("A definition of a site url or home url was detected in your wp-config.php, but the file is not writable.", "really-simple-ssl").' '.__("Set your wp-config.php to writable and reload this page.", "really-simple-ssl"),
                        'icon' => 'warning',
                        'admin_notice' => true,
                        'plusone' => true,
                        'dismissible' => false,
                        'url' => 'https://really-simple-ssl.com/knowledge-base/htaccess-wp-config-files-not-writable/',
                    ),
                ),
            ),

'deactivation_file_detected' => array(
                'callback' => 'RSSSL()->admin->check_for_uninstall_file',
                'score' => 30,
                'output' => array(
                    'true' => array(
                        'msg' => __("The 'force-deactivate.php' file has to be renamed to .txt. Otherwise your ssl can be deactivated by anyone on the internet.", "really-simple-ssl") .' '.
                                 '<a href="'.add_query_arg(array('page'=>'really-simple-security'), rsssl_admin_url() ).'">'.__("Check again", "really-simple-ssl").'</a>',
                        'icon' => 'warning',
                        'admin_notice' => true,
                        'plusone' => true,
                        'dismissible' => false,
                    ),
                ),
            ),

'non_default_plugin_folder' => array(
                'callback' => 'RSSSL()->admin->uses_default_folder_name',
                'score' => 30,
                'output' => array(
                    'false' => array(
	                    'msg' => sprintf(__("The Really Simple SSL plugin folder in the /wp-content/plugins/ directory has been renamed to %s. This might cause issues when deactivating, or with premium add-ons. To fix this you can rename the Really Simple SSL folder back to the default %s.", "really-simple-ssl"),"<b>" . $current_plugin_folder . "</b>" , "<b>really-simple-ssl</b>"),
	                    'url' => 'https://really-simple-ssl.com/knowledge-base/why-you-should-use-the-default-plugin-folder-name-for-really-simple-ssl/',
                        'icon' => 'warning',
                    ),
                ),
            ),

'mixed_content_scan' => array(
                'dismiss_on_upgrade' => true,
	            'condition' => array('rsssl_ssl_enabled'),
	            'callback' => '_true_',
	            'score' => 5,
	            'output' => array(
		            'true' => array(
                        'url' => 'https://really-simple-ssl.com/knowledge-base/how-to-track-down-mixed-content-or-insecure-content/',
			            'msg' => __("SSL is now activated. Check if your website is secure by following this article.", "really-simple-ssl"),
			            'icon' => 'open',
			            'dismissible' => true,
			            'plusone' => true,
		            ),
	            ),
            ),

'compatiblity_check' => array(
	            'condition' => array('rsssl_incompatible_premium_version'),
	            'callback' => '_true_',
	            'score' => 5,
	            'output' => array(
		            'true' => array(
			            'url' => $this->pro_url,
			            'msg' => __( "Really Simple SSL Pro is not up to date. Update Really Simple SSL Pro to ensure compatibility.", "really-simple-ssl"),
			            'icon' => 'open',
			            'dismissible' => false,
			            'plusone' => true,
		            ),
	            ),
            ),

'google_analytics' => array(
	            'dismiss_on_upgrade' => true,
	            'callback' => '_true_',
                'condition' => array('rsssl_ssl_enabled', 'rsssl_ssl_activation_time_no_longer_then_3_days_ago'),
                'score' => 5,
                'output' => array(
                    'true' => array(
                        'msg' => __("Remember to change your URLs in external services like Google Analytics, Search Console and others. This should prevent any data loss resulting from the switch to https.", "really-simple-ssl"),
                        'url' => 'https://really-simple-ssl.com/knowledge-base/how-to-setup-google-analytics-and-google-search-consolewebmaster-tools/',
                        'icon' => 'open',
                        'dismissible' => true,
                        'plusone' => true,
                    ),
                ),
            ),

'ssl_enabled' => array(
                'callback' => 'rsssl_ssl_enabled',
                'score' => 30,
                'output' => array(
                    'true' => array(
                        'msg' =>__('SSL is enabled on your site.', 'really-simple-ssl'),
                        'icon' => 'success',
                    ),
                    'false' => array(
                        'msg' => __('SSL is not enabled yet.', 'really-simple-ssl'),
                        'title' => 'SSL',
                        'icon' => 'warning',
                        'plusone' => true,
                    ),
                ),
                'menu_id'     => 'general',
                'field_id'     => 'mixed_content_fixer',
            ),

'ssl_detected' => array(
	            'condition' => array('NOT rsssl_ssl_detection_overridden'),
	            'callback' => 'rsssl_ssl_detected',
	            'score' => 30,
	            'output' => array(
		            'fail' => array(
                        'url' => 'https://really-simple-ssl.com/wp-config-fix-needed',
			            'msg' => __("The wp-config.php file is not writable, and needs to be edited. Please set this file to writable.", "really-simple-ssl"),
                        'icon' => 'warning'
		            ),
		            'no-ssl-detected' => array(
			            'title' => __("No SSL detected", "really-simple-ssl"),
			            'msg' => __("No SSL detected. Use the retry button to check again.", "really-simple-ssl").
			                     '<form class="rsssl-task-form"  action="" method="POST"><a href="'.add_query_arg(array("page" => "really-simple-security", "letsencrypt" => "1"), rsssl_admin_url() ) .'#letsencrypt" type="submit" class="button button-default  rsssl-button-small">'.__("Install SSL certificate", "really-simple-ssl").'</a>'.
			                     '<input type="submit" class="button button-default rsssl-button-small" value="'.__("Retry", "really-simple-ssl").'" id="rsssl_recheck_certificate" name="rsssl_recheck_certificate"></form>',
			            'icon' => 'warning',
			            'dismissible' => rsssl_get_option('ssl_enabled')
		            ),
		            'no-response' => array(
			            'title' => __("Could not test certificate", "really-simple-ssl"),
			            'msg' => __("Automatic certificate detection is not possible on your server.", "really-simple-ssl").'<br>'.
			                     '<a href="'.add_query_arg(array("page" => "really-simple-security", "letsencrypt"=>1), rsssl_admin_url()) .'#letsencrypt" type="submit" class="button button-default  rsssl-button-small">'.__("Install SSL certificate", "really-simple-ssl").'</a>'.
			                     '<button class="button button-default rsssl-button-small" id="ssl-labs-check-button">'.__("Check manually", "really-simple-ssl").'</button>',
			            'icon' => 'warning',
			            'dismissible' => true,
		            ),
		            'ssl-detected' => array(
			            'msg' => __('An SSL certificate was detected on your site.', 'really-simple-ssl'),
			            'icon' => 'success'
		            ),

'about-to-expire' => array(
			            'title' => __("Your SSL certificate will expire soon.", "really-simple-ssl"),
			            'msg' => sprintf(__("SSL certificate will expire on %s.","really-simple-ssl"), $expiry_date).'&nbsp;'.__("If your hosting provider auto-renews your certificate, no action is required. Alternatively, you have the option to generate an SSL certificate with Really Simple SSL.","really-simple-ssl").'&nbsp;'.
                                 sprintf(__("Depending on your hosting provider, %smanual installation%s may be required.", "really-simple-ssl"),'<a target="_blank" href="https://really-simple-ssl.com/install-ssl-certificate">','</a>').
			                     '<br><br><form action="" method="POST"><a href="'.add_query_arg(array("page" => "really-simple-security", "letsencrypt"=>1), rsssl_admin_url() ) .'#letsencrypt" type="submit" class="button button-default">'.__("Install SSL certificate", "really-simple-ssl").'</a>'.
			                     '&nbsp;<input type="submit" class="button button-default" value="'.__("Re-check", "really-simple-ssl").'" id="rsssl_recheck_certificate" name="rsssl_recheck_certificate"></form>',
			            'icon' => 'warning',
		            ),
	            ),
            ),

'mixed_content_fixer_detected' => array(
                'condition' => array('rsssl_ssl_enabled'),
                'callback' => 'RSSSL()->admin->mixed_content_fixer_detected',
                'score' => 10,
                'output' => array(
                    'found' => array(
                        'msg' =>__('Mixed content fixer was successfully detected on the front-end.', 'really-simple-ssl'),
                        'icon' => 'success'
                    ),
                    'no-response' => array(
                        'url' => 'https://really-simple-ssl.com/knowledge-base/how-to-fix-no-response-from-webpage-warning/',
                        'msg' => __('Really Simple SSL has received no response from the webpage.', 'really-simple-ssl'),
                        'icon' => 'open',
                        'dismissible' => true,
                        'plusone' => true
                    ),
                    'not-found' => array(
                        'url' => "https://really-simple-ssl.com/knowledge-base/how-to-check-if-the-mixed-content-fixer-is-active/",
                        'msg' => __('The mixed content fixer is active, but was not detected on the frontpage.', "really-simple-ssl"),
                        'icon' => 'open',
                        'dismissible' => true
                    ),
                    'error' => array(
	                    'msg' =>__('Error occurred when retrieving the webpage.', 'really-simple-ssl'),
	                    'icon' => 'open',
                        'dismissible' => true
                    ),
                    'not-enabled' => array(
	                    'highlight_field_id' => 'mixed_content_fixer',
	                    'msg' =>__('Mixed content fixer not enabled. Enable the option to fix mixed content on your site.', 'really-simple-ssl'),
                        'icon' => 'open',
                        'dismissible' => true
                    ),
                    'curl-error' => array(
                        'url' => 'https://really-simple-ssl.com/knowledge-base/curl-errors/',
	                    'msg' =>sprintf(__("The mixed content fixer could not be detected due to a cURL error: %s. cURL errors are often caused by an outdated version of PHP or cURL and don't affect the front-end of your site. Contact your hosting provider for a fix.", 'really-simple-ssl'), "<b>" . $curl_error . "</b>"),
	                    'icon' => 'open',
                        'dismissible' => true,
                    ),
                ),
            ),

'wordpress_redirect' => array(
	            'condition' => array('rsssl_ssl_enabled', 'NOT RSSSL()->admin->htaccess_redirect_allowed'),
	            'callback' => 'RSSSL()->admin->has_301_redirect',
                'score' => 10,
                'output' => array(
                     'true' => array(
                        'msg' => __('301 redirect to https set.', 'really-simple-ssl'),
                        'icon' => 'success'
                        ),
                     'false' => array(
                         'msg' => __('No 301 redirect is set. Enable the WordPress 301 redirect in the settings to get a 301 permanent redirect.', 'really-simple-ssl'),
                         'icon' => 'open'
                     ),
                )
            ),

'check_redirect' => array(
	            'condition' => array( 'rsssl_ssl_enabled' , 'RSSSL()->admin->htaccess_redirect_allowed'),
	            'callback' => 'RSSSL()->admin->redirect_status',
                'score' => 10,
	            'show_with_options' => [
		            'redirect',
	            ],
	            'output' => array(
                    'htaccess-redirect-set' => array(
                        'msg' =>__('301 redirect to https set: .htaccess redirect.', 'really-simple-ssl'),
                        'icon' => 'success'
                    ),
                    'wp-redirect-to-htaccess' => array(
                        'highlight_field_id' => 'redirect',
                        'msg' => __('WordPress 301 redirect enabled. We recommend to enable a 301 .htaccess redirect.', 'really-simple-ssl'),
                        'icon' => 'open',
                        'plusone' => RSSSL()->server->uses_htaccess(),
                        'dismissible' => true,
                    ),
                    'no-redirect-set' => array(
	                    'highlight_field_id' => 'redirect',
	                    'msg' => __('Enable a .htaccess redirect or PHP redirect in the settings to create a 301 redirect.', 'really-simple-ssl') ,
                        'icon' => 'open',
                        'dismissible' => false
                    ),
                    'htaccess-rules-test-failed' => array(
	                    'title' => __('.htaccess redirect.', 'really-simple-ssl'),
	                    'url' => 'https://really-simple-ssl.com/knowledge-base/manually-insert-htaccess-redirect-http-to-https/',
	                    'msg' => __('The .htaccess redirect rules selected by this plugin failed in the test. Set manually or dismiss to leave on PHP redirect.', 'really-simple-ssl') . $rules,
                        'icon' => 'warning',
                        'dismissible' => true,
                        'plusone'=>true,
                    ),
                ),
            ),

'elementor' => array(
	            'condition' => array( 'rsssl_ssl_activation_time_no_longer_then_3_days_ago'),
	            'callback' => 'rsssl_uses_elementor',
	            'score' => 5,
	            'output' => array(
		            'true' => array(
                        'url' => 'https://really-simple-ssl.com/knowledge-base/how-to-fix-mixed-content-in-elementor-after-moving-to-ssl/',
			            'msg' => __("Your site uses Elementor. This can require some additional steps before getting the secure lock.", "really-simple-ssl"),
			            'icon' => 'open',
			            'dismissible' => true
		            ),
	            ),
            ),

'divi' => array(
	            'condition' => array( 'rsssl_ssl_activation_time_no_longer_then_3_days_ago'),
	            'callback' => 'rsssl_uses_divi',
	            'score' => 5,
	            'output' => array(
		            'true' => array(
                        'url' => "https://really-simple-ssl.com/knowledge-base/mixed-content-when-using-divi-theme/",
			            'msg' => __("Your site uses Divi. This can require some additional steps before getting the secure lock.", "really-simple-ssl"),
			            'icon' => 'open',
			            'dismissible' => true
		            ),
	            ),
            ),

'secure_cookies_set' => array(
	            'condition' => array(
	                    'rsssl_ssl_enabled',
                        'RSSSL()->admin->can_apply_networkwide',
                ),
	            'callback' => 'RSSSL()->admin->secure_cookie_settings_status',
                'score' => 5,
                'output' => array(
                    'set' => array(
                        'msg' =>__('HttpOnly Secure cookies have been set automatically!', 'really-simple-ssl'),
                        'icon' => 'success',
                        'url' => 'https://really-simple-ssl.com/secure-cookies-with-httponly-secure-and-use_only_cookies/',
                    ),
                    'not-set' => array(
	                    'msg' => __('HttpOnly Secure cookies not set.', 'really-simple-ssl'),
	                    'icon' => 'warning',
	                    'dismissible' => true,
	                    'plusone' => true,
                        'url' => 'https://really-simple-ssl.com/secure-cookies-with-httponly-secure-and-use_only_cookies/',
                    ),
                    'wpconfig-not-writable' => array(
                        'msg' =>    __("To set the httponly secure cookie settings, your wp-config.php has to be edited, but the file is not writable.","really-simple-ssl").'&nbsp;'.__("Add the following lines of code to your wp-config.php.","really-simple-ssl") .
                                    "<br><br><code>
                                            //Begin Really Simple SSL session cookie settings <br>
                                            &nbsp;&nbsp;@ini_set('session.cookie_httponly', true); <br>
                                            &nbsp;&nbsp;@ini_set('session.cookie_secure', true); <br>
                                            &nbsp;&nbsp;@ini_set('session.use_only_cookies', true); <br>
                                            //END Really Simple SSL cookie settings <br>
                                        </code><br>
                                    ".__("Or set your wp-config.php to writable and reload this page.", "really-simple-ssl"),
                        'icon' => 'warning',
                        'dismissible' => true,
                        'plusone' => true,
                        'url' => 'https://really-simple-ssl.com/secure-cookies-with-httponly-secure-and-use_only_cookies/',
                    )
                ),
            ),

'recommended_security_headers_not_set' => array(
		        'callback' => 'RSSSL()->admin->recommended_headers_enabled',
		        'score' => 5,
		        'output' => array(
			        'false' => array(
				        'msg' => __("See which recommended security headers are not present on your website.", "really-simple-ssl"),
                        'icon' => 'premium',
				        'dismissible' => false,
				        'url' => 'https://scan.really-simple-ssl.com/',
			        ),
			        'true' => array(
				        'msg' => __("Recommended security headers enabled.", "really-simple-ssl"),
				        'icon' => 'success',
			        ),
		        ),

'pro_upsell' => array(
	            'callback' => '_true_',
	            'score' => 5,
	            'output' => array(
		            'true' => array(
			            'msg' => __("Improve security with Really Simple SSL Pro.", "really-simple-ssl"),
			            'url' => $this->pro_url,
			            'icon' => 'premium',
			            'dismissible' => false,
		            ),
	            ),
            ),

'uses_wp_engine' => array(
                'condition' => array('rsssl_uses_wp_engine'),
                'callback' => '_true_',
                'score' => 5,
                'output' => array(
                    'true' => array(
                        'msg' =>__('Due to a recent update by WP Engine, we have changed your settings automatically to adapt.', 'really-simple-ssl'),
                        'url' => 'https://really-simple-ssl.com/really-simple-ssl-adapts-to-recent-wp-engine-changes/',
                        'icon' => 'open',
                        'dismissible' => true
                    ),
                ),
            ),
            'beta_5_addon_active' => array(
                'condition' => array('rsssl_beta_5_addon_active'),
                'callback' => '_true_',
                'score' => 5,
                'output' => array(
                    'true' => array(
                        'msg' =>__('You have the Really Simple SSL Let\'s Encrypt beta add-on activated. This functionality has now been integrated in core, so you can deactivate the add-on.', 'really-simple-ssl'),
                        'icon' => 'open',
                        'dismissible' => true
                    ),
                ),
            ),
            'duplicate-ssl-plugins' => array(
	            'condition'  => array('rsssl_detected_duplicate_ssl_plugin'),
	            'callback' => '_true_',
	            'output' => array(
		            'true' => array(
			            'msg' => sprintf(__( 'We have detected the %s plugin on your website.', 'really-simple-ssl' ),rsssl_detected_duplicate_ssl_plugin(true)).'&nbsp;'.__( 'As Really Simple SSL handles all the functionality this plugin provides, we recommend to disable this plugin to prevent unexpected behavior.', 'really-simple-ssl' ),
			            'icon' => 'warning',
			            'dismissible' => true,
			            'plusone' => true,
		            ),
	            ),
            ),

'bf_notice2022' => array(
	            'condition'  => array(
                        'RSSSL()->admin->is_bf'
                ),
	            'callback' => '_true_',
	            'output' => array(
		            'true' => array(
			            'msg' => __( "Black Friday sale! Get 40% Off Really Simple SSL Pro", 'really-simple-ssl' ) ,
			            'icon' => 'premium',
			            'url' => $this->pro_url,
			            'dismissible' => true,
			            'plusone' => true,
		            ),
	            ),
            ),

'upgraded_to_6' => array(
	            'condition'  => array(
                        'RSSSL()->admin->is_upgraded_to_6',
                ),
	            'callback' => '_true_',
	            'output' => array(
		            'true' => array(
			            'msg' => __( "Thanks for updating to Really Simple SSL 6.0! Check out our new features on the settings page.", 'really-simple-ssl' ),
			            'icon' => 'open',
			            'admin_notice' => true,
			            'url' => add_query_arg(['page'=>'really-simple-security'], rsssl_admin_url() ),
			            'dismissible' => true,
			            'plusone' => true,
		            ),
	            ),
            ),
        );
        //on multisite, don't show the notice on subsites.
        //we can't make different sets for network admin and for subsites (at least not for admin notices), as these notices are cached,
        //so the same cache will be used on both types of site
        if ( is_multisite() ) {
            unset($notices['secure_cookies_set']);
            unset($notices['upgraded_to_6']);
        }

$notices = apply_filters('rsssl_notices', $notices);
        foreach ($notices as $id => $notice) {
            $notices[$id] = wp_parse_args($notice, $notice_defaults);
        }

/**
	     * If a list of notices that should be dismissed on upgrade is requested
	     */
	    if ( $args['dismiss_on_upgrade'] ) {
		    $output = array();
            foreach( $notices as $key => $notice ) {
                if ( isset($notice['dismiss_on_upgrade']) && $notice['dismiss_on_upgrade'] ) {
                    $output[] = $key;
                }
            }
		    return $output;
	    }

/**
	     * Filter out notice that do not apply, or are dismissed
	     */

foreach ( $notices as $id => $notice ) {
		    $func   = $notice['callback'];
		    $output = $this->validate_function($func);

//check if all notices should be dismissed
            if ( isset( $notice['output'][$output]['dismissible'] )
                && $notice['output'][$output]['dismissible']
                && rsssl_get_option('dismiss_all_notices')
            ) {
                unset($notices[$id]);
                continue;
            }

if ( !isset($notice['output'][ $output ]) ) {
	            unset($notices[$id]);
	            continue;
            } else {
                $notices[$id]['output'] = $notice['output'][ $output ];
            }

$notices[$id]['output']['status'] = ( $notices[$id]['output']['icon'] !== 'success') ? 'open' : 'completed';
		    if ( $args['status'] === 'open' && ($notices[$id]['output']['status'] === 'completed' ) ){
			    unset($notices[$id]);
			    continue;
            }
		    $condition_functions = $notice['condition'];
		    foreach ( $condition_functions as $func ) {
			    $condition = $this->validate_function($func, true);
			    if ( ! $condition ) {
				    unset($notices[$id]);
			    }
		    }

if ( isset($notices[$id]) ) {
	            $notices[$id]['output']['label'] = $icon_labels[ $notices[$id]['output']['icon'] ];
            }

//only remove this option if it's both dismissed AND not completed. This way we keep completed notices in the list.
		    if ( isset($notices[$id]) && get_option( "rsssl_" . $id . "_dismissed" ) && $notices[$id]['output']['status'] !== 'completed') {
			    unset($notices[$id]);
		    }
	    }

//if only admin_notices are required, filter out the rest.
	    if ( $args['admin_notices'] ) {
            foreach ( $notices as $id => $notice ) {
                if (!isset($notice['output']['admin_notice']) || !$notice['output']['admin_notice']){
	                unset( $notices[$id]);
                }
            }
            //ensure an empty list is also cached
		    $cache_notices = empty($notices) ? 'empty' : $notices;
		    update_option('rsssl_admin_notices', $cache_notices );
        }

//sort so warnings are on top
	    $warnings = array();
	    $open = array();
	    $other = array();
	    foreach ($notices as $key => $notice){
            if (!isset($notice['output']['icon'])) continue;

if ($notice['output']['icon']==='warning') {
	            $warnings[$key] = $notice;
            } else if ($notice['output']['icon']==='open') {
		        $open[$key] = $notice;
	        } else {
		        $other[$key] = $notice;
	        }
        }
	    $notices = $warnings + $open + $other;

//if we only want a list of premium notices
	    if ( $args['premium_only'] ) {
		    foreach ($notices as $key => $notice){
			    if ( !isset($notice['output']['icon']) || $notice['output']['icon'] !== 'premium' ) {
				    unset($notices[$key]);
			    }
		    }
        }
	    return $notices;
    }

private function is_upgraded_to_6(){
        return get_option('rsssl_show_onboarding') && !get_option('rsssl_6_notice_dismissed');
    }

/**
     * Get output of function, in format 'function', or 'class()->sub()->function'
	 * @param string $func
     * @param bool $is_condition // if the check is a condition, which should return a boolean
     * @return string|bool
	 */

private function validate_function($func, $is_condition = false ){
	    if ( !rsssl_user_can_manage() ){
		    return false;
	    }

$invert = false;
	    if (strpos($func, 'NOT ') !== FALSE ) {
		    $func = str_replace('NOT ', '', $func);
		    $invert = true;
	    }

if ( strpos($func, 'option_')!==false ){
		    $output = rsssl_get_option(str_replace('option_', '', $func))==1;
	    } else if ( $func === '_true_') {
	        $output = true;
        } else if ( $func === '_false_' ) {
		    $output = false;
	    } else {
		    if ( preg_match( '/(.*)\-\>(.*)->(.*)/i', $func, $matches)) {
			    $base = $matches[1];
			    $class = $matches[2];
			    $function = $matches[3];
			    $output = call_user_func( array( $base()->{$class}, $function ) );
		    } else {
			    $output = $func();
		    }
        }

if ( $invert ) {
		    $output = !$output;
	    }

//stringyfy booleans
        if (!$is_condition) {
	        if ( $output === false || $output === 0 ) {
		        $output = 'false';
	        }
	        if ( $output === true || $output === 1 ) {
		        $output = 'true';
	        }
        }
	    return sanitize_text_field($output);
    }

/**
     * Count the plusones
     *
	 * @return int
     *
     * @since 3.2
	 */

public function count_plusones() {
		if ( ! rsssl_user_can_manage() ) {
			return 0;
		}

$cache = $this->is_settings_page() ? false : true;
		$count = get_option( 'rsssl_plusone_count' );
		if ( !$cache || ($count === false) ) {
			$count = 0;
			$notices = $this->get_notices_list();
			foreach ( $notices as $id => $notice ) {
                $success = ( isset( $notice['output']['icon'] ) && ( $notice['output']['icon'] === 'success' ) ) ? true : false;
                if ( ! $success
                     && isset( $notice['output']['plusone'] )
                     && $notice['output']['plusone']
                ) {
                    $count++;
                }
			}
            if ( $count==0) {
                $count = 'empty';
            }
			update_option( 'rsssl_plusone_count', $count );
		}

if ( $count==='empty' ) {
			return 0;
		}
		return $count;
	}

/**
     * Add some css for the settings page
     *
     * @since  2.0
     *
     * @access public
     *
     */

public function enqueue_assets($hook)
    {
        if ( $hook !== 'settings_page_really-simple-security') {
            return;
        }
	    $min = ( defined( 'SCRIPT_DEBUG' ) && SCRIPT_DEBUG ) ? '' : '.min';
        $rtl = is_rtl() ? 'rtl/' : '';
        $url = trailingslashit(rsssl_url) . "assets/css/{$rtl}admin{$min}.css";
        $path = trailingslashit(rsssl_path) . "assets/css/{$rtl}admin{$min}.css";
	    wp_enqueue_style('rsssl-css', $url, ['wp-components'], filemtime($path));
    }

/**
     *
     * Add a button and thickbox to deactivate the plugin while keeping SSL
     *
     * @since 3.0
     *
     * @access public
     *
     */

public function deactivate_popup()
    {
        //only on plugins page
        $screen = get_current_screen();
        if (!$screen || $screen->base !=='plugins' ) return;

?>
	    <?php add_thickbox();?>
        <?php { ?>
            <style>
                #TB_ajaxContent.rsssl-deactivation-popup {
                    text-align: center !important;
                }
                #TB_window.rsssl-deactivation-popup {
                    height:370px!important;
                    margin-top:initial!important;
                    margin-left:initial!important;
                    display:flex;
                    flex-direction: column;
                    top: 50% !important;
                    left: 50%;
                    transform: translate(-50%, -50%);
                    width:576px!important;
                    border-radius:13px!important;
                }
                .rsssl-deactivation-popup #TB_title{
                    padding-bottom: 20px;
                    border-radius:12px;
                    border-bottom:none!important;
                    background:#fff !important;
                }
                .rsssl-deactivation-popup #TB_ajaxWindowTitle {
                    font-weight:bold;
                    font-size:20px;
                    padding: 20px 0 0 20px;
                    background:#fff !important;
                    border-radius:13px!important;
                }

.rsssl-deactivation-popup .tb-close-icon {
                    color:#333;
                    width: 25px;
                    height: 25px;
                    top: 12px;
                    right: 20px;
                }
                .rsssl-deactivation-popup .tb-close-icon:before {
                    font: normal 25px/25px dashicons;
                }
                .rsssl-deactivation-popup #TB_closeWindowButton:focus .tb-close-icon {
                    outline:0;
                    color:#666;
                }
                .rsssl-deactivation-popup #TB_closeWindowButton .tb-close-icon:hover {
                    color:#666;
                }
                .rsssl-deactivation-popup #TB_closeWindowButton:focus {
                    outline:0;
                }
                .rsssl-deactivation-popup #TB_ajaxContent {
                    width: 100% !important;
                    height:initial!important;
                    padding-left: 20px!important;
                }

.rsssl-deactivation-popup .button-rsssl-tertiary.button {
                    background-color: #D7263D !important;
                    color: white !important;
                    border-color: #D7263D;
                }

.rsssl-deactivation-popup .button-rsssl-tertiary.button:hover {
                    background-color: #f1f1f1 !important;
                    color: #d7263d !important;
                }

.rsssl-deactivate-notice-content {
                    margin: 20px
                    font-size: 12px!important;
                }
                .rsssl-deactivate-notice-content h3 , .rsssl-deactivate-notice-content ul{
                    font-size:12px!important;
                }

.rsssl-deactivate-notice-footer {
                    display: flex;
                    gap:10px;
                    padding: 20px 10px 20px 0;
                    position:absolute;
                }

.rsssl-deactivation-popup ul {
                    list-style: disc;
                    padding-left: 20px;
                }
            </style>
        <?php } ?>
        <script>
            jQuery(document).ready(function ($) {
                $('#rsssl_close_tb_window').click(tb_remove);
                $(document).on('click', '#deactivate-really-simple-ssl', function(e){
                    e.preventDefault();
                    tb_show( '<?php _e("Are you sure?", "really-simple-ssl") ?>', '#TB_inline?height=auto&inlineId=deactivate_keep_ssl', 'null');
                    $("#TB_window").addClass('rsssl-deactivation-popup');
                });
                if ($('#deactivate-really-simple-ssl').length){
                    $('.rsssl-button-deactivate-revert').attr('href',  $('#deactivate-really-simple-ssl').attr('href') );
                }
            });
        </script>
        <div id="deactivate_keep_ssl" style="display: none;">
                <div class="rsssl-deactivate-notice-content">
                    <h3 style="margin: 20px 0; text-align: left;">
                        <?php _e("To deactivate the plugin correctly, please select if you want to:", "really-simple-ssl") ?></h3>
                    <ul style="text-align: left; font-size: 1.2em;">
                        <li><?php _e("Deactivate, but stay on SSL.", "really-simple-ssl") ?></li>
                        <li><?php _e("Deactivate, and revert to http. This will remove all changes by the plugin.", "really-simple-ssl") ?></li>
                    </ul>
                    <h3><?php _e("Deactivating the plugin while keeping SSL will do the following:", "really-simple-ssl") ?></h3>
                    <ul style="text-align: left; font-size: 1.2em;">
                        <li><?php _e("The mixed content fixer will stop working", "really-simple-ssl") ?></li>
                        <li><?php _e("The WordPress 301 redirect will stop working", "really-simple-ssl") ?></li>
                        <li><?php _e("Your site address will remain https://", "really-simple-ssl") ?> </li>
                        <li><?php _e("The .htaccess redirect will remain active", "really-simple-ssl") ?></li>
                    </ul>
                </div>

<?php
                $token = wp_create_nonce('rsssl_deactivate_plugin');
                $deactivate_keep_ssl_link = add_query_arg(['page'=>'really-simple-security', 'action'=>'uninstall_keep_ssl', 'token'=>$token], rsssl_admin_url() );
                ?>
                <div class="rsssl-deactivate-notice-footer">
                    <a class="button button-default" href="#" id="rsssl_close_tb_window"><?php _e("Cancel", "really-simple-ssl") ?></a>
                    <a class="button button-primary" href="<?php echo $deactivate_keep_ssl_link ?>"><?php _e("Deactivate, keep https", "really-simple-ssl") ?></a>
                    <a class="button  button-rsssl-tertiary rsssl-button-deactivate-revert" href="#"><?php _e("Deactivate, revert to http", "really-simple-ssl") ?></a>
                </div>
        </div>
        <?php
    }

/**
     * Add settings link on plugins overview page
     *
     * @param array $links
     *
     * @return array $links
     * @since  2.0
     *
     * @access public
     *
     */

public function plugin_settings_link( array $links ): array {
        if ( !rsssl_user_can_manage() || ( is_multisite() && !is_network_admin() ) ) {
            return $links;
        }

$url = add_query_arg(array('page' => 'really-simple-security'), rsssl_admin_url() );
	    //settings only on network wide activated, or no multisite at all.
        if ( is_multisite() && rsssl_is_networkwide_active() && is_super_admin() ) {
	        $settings_link = '<a href="' . $url . '">' . __("Settings", "really-simple-ssl") . '</a>';
	        array_unshift($links, $settings_link);
        } else if ( !is_multisite() ) {
	        $settings_link = '<a href="' . $url . '">' . __("Settings", "really-simple-ssl") . '</a>';
	        array_unshift($links, $settings_link);
        }

//support
	    $support = apply_filters('rsssl_support_link', '<a target="_blank" href="https://wordpress.org/support/plugin/really-simple-ssl/">' . __('Support', 'really-simple-ssl') . '</a>');
	    array_unshift($links, $support);

if ( ! defined( 'rsssl_pro_version' ) ) {
	        $upgrade_link = '<a style="color:#2271b1;font-weight:bold" target="_blank" href="'.$this->pro_url.'">'
		      . __( 'Improve security - Upgrade', 'really-simple-ssl' ) . '</a>';
	        array_unshift( $links, $upgrade_link );
	    }

return $links;
    }

/**
     * Check if wpconfig contains httponly cookie settings
     *
	 * @return string
	 */

public function secure_cookie_settings_status()
	{
		$wpconfig_path = $this->find_wp_config_path();
		if ( !$wpconfig_path ) {
			return 'wpconfig-not-writable';
		}

$wpconfig = file_get_contents($wpconfig_path);
		if ((strpos($wpconfig, "//Begin Really Simple SSL session cookie settings") !== FALSE) || (strpos($wpconfig, "cookie_httponly") !== FALSE)) {
			return 'set';
		}

if ( !is_writable($wpconfig_path) ) {
			return 'wpconfig-not-writable';
		}

return 'not-set';
	}

/**
	 * Insert secure cookie settings
	 */

public function insert_secure_cookie_settings(){
		if ( !rsssl_user_can_manage() ) {
            return;
		}

if ( !$this->is_settings_page() ) {
            return;
		}

//if multisite, only on network wide activated setups
		if ( is_multisite() && !rsssl_is_networkwide_active() ) {
            return;
		}

//only if cookie settings were not inserted yet
		if ( $this->secure_cookie_settings_status() !== 'set' ) {
			$wpconfig_path = RSSSL()->admin->find_wp_config_path();
			$wpconfig = file_get_contents($wpconfig_path);
			if ((strlen($wpconfig)!=0) && is_writable($wpconfig_path)) {
				$rule  = "\n"."//Begin Really Simple SSL session cookie settings"."\n";
				$rule .= "@ini_set('session.cookie_httponly', true);"."\n";
				$rule .= "@ini_set('session.cookie_secure', true);"."\n";
				$rule .= "@ini_set('session.use_only_cookies', true);"."\n";
				$rule .= "//END Really Simple SSL cookie settings"."\n";

$insert_after = "<?php";
				$pos = strpos($wpconfig, $insert_after);
				if ($pos !== false) {
					$wpconfig = substr_replace($wpconfig,$rule,$pos+1+strlen($insert_after),0);
				}

file_put_contents($wpconfig_path, $wpconfig);
			}
		}
	}

/**
     * Get the absolute path the the www directory of this site, where .htaccess lives.
     *
     * @since  2.0
     *
     * @access public
     *
     */

public function getabs_path()
    {
        $path = ABSPATH;
        if ($this->is_subdirectory_install()) {
            $siteUrl = site_url();
            $homeUrl = home_url();
            $diff = str_replace($homeUrl, "", $siteUrl);
            $diff = trim($diff, "/");
            $pos = strrpos($path, $diff);
            if ($pos !== false) {
                $path = substr_replace($path, "", $pos, strlen($diff));
                $path = trim($path, "/");
                $path = "/" . $path . "/";
            }
        }

return $path;
    }

/**
     * Check if it's either a single site, or when multisite, network enabled.
	 * @return bool
	 */
    public function can_apply_networkwide(){
	    if ( !is_multisite() ) {
            return true;
        }

if ( is_multisite() && rsssl_is_networkwide_active() ) {
            return true;
        }

return false;
    }

/**
     * Find if this WordPress installation is installed in a subdirectory
     *
     * @since  2.0
     *
     * @access protected
     *
     */

protected function is_subdirectory_install()
    {
	    return strlen( site_url() ) > strlen( home_url() );
    }

/**
     * Retrieve the contents of the test page
     *
	 * @return string
     *
	 */

protected function get_test_page_contents()
    {
        $filecontents = get_transient('rsssl_testpage');
        if ( !$filecontents ) {
            $testpage_url = trailingslashit($this->test_url()) . "ssl-test-page.php";
            $response = wp_remote_get($testpage_url);
            if ( is_array($response) ) {
                $filecontents = wp_remote_retrieve_body($response);
            }

if ( empty($filecontents) ) {
                $filecontents = 'not-valid';
            }
            set_transient('rsssl_testpage', $filecontents, DAY_IN_SECONDS);
        }
        return $filecontents;
    }

/**
     * Determine dirname to show in admin_notices() in really-simple-ssl-pro.php to show a warning when free folder has been renamed
     *
     * @return string
     *
     * since 3.1
     *
     */

public function get_current_rsssl_free_dirname() {
        return basename( __DIR__ );
    }

/**
	 *
	 * Check the current free plugin folder path and compare it to default path to detect if the plugin folder has been renamed
	 *
	 * @return boolean
	 *
	 * @since 3.1
	 *
	 */

public function uses_default_folder_name() {
		$current_plugin_path = $this->get_current_rsssl_free_dirname();
		return $this->plugin_dir === $current_plugin_path;
    }

/**
     * Determine the htaccess file. This can be either the regular .htaccess file, or an htaccess.conf file on bitnami installations.
     *
     * since 3.1
     *
     * @return string
     */

public function htaccess_file() {
        if ( $this->uses_htaccess_conf() ) {
            $htaccess_file = realpath(dirname(ABSPATH) . "/conf/htaccess.conf");
        } else {
            $htaccess_file = $this->abs_path . ".htaccess";
        }
        return $htaccess_file;
    }

/**
     * Check the current redirect status
     *
	 * @return string
	 */
	public function redirect_status() {
		if ( !RSSSL()->admin->has_301_redirect() ) {
			return 'no-redirect-set';
		}

if ( RSSSL()->admin->has_301_redirect() && RSSSL()->server->uses_htaccess() && RSSSL()->admin->htaccess_contains_redirect_rules() ) {
			return 'htaccess-redirect-set';
		}

if ( $this->can_apply_networkwide() && !RSSSL()->admin->htaccess_contains_redirect_rules() && rsssl_get_option('redirect')==='wp_redirect' ) {
			return 'wp-redirect-to-htaccess';
		}

if ( rsssl_get_option('redirect') ==='htaccess' && !RSSSL()->admin->htaccess_test_success() && $this->can_apply_networkwide()) {
			return 'htaccess-rules-test-failed';
		}

return 'default';
	}
} //class closure

if ( !function_exists('rsssl_ssl_enabled') ) {
    function rsssl_ssl_enabled() {
        return rsssl_get_option('ssl_enabled');
    }
}

if (!function_exists('rsssl_ssl_detected')) {
	function rsssl_ssl_detected() {
		if ( ! RSSSL()->admin->wpconfig_ok() ) {
			return apply_filters('rsssl_ssl_detected', 'fail');
		}

$valid = RSSSL()->certificate->is_valid();
		if ( !$valid ) {
		    if ( ! function_exists( 'stream_context_get_params' ) || RSSSL()->certificate->detection_failed() ) {
			    return apply_filters('rsssl_ssl_detected', 'no-response');
		    } else {
			    return apply_filters('rsssl_ssl_detected', 'no-ssl-detected');
		    }
		} else {
		    $about_to_expire = RSSSL()->certificate->about_to_expire();
			if ( !$about_to_expire ) {
				return apply_filters('rsssl_ssl_detected', 'ssl-detected');
			} else {
				return apply_filters('rsssl_ssl_detected', 'ssl-detected');
//				return apply_filters('rsssl_ssl_detected', 'about-to-expire');
			}
        }

}
}

if (!function_exists('rsssl_uses_elementor')) {
	function rsssl_uses_elementor() {
		return ( defined( 'ELEMENTOR_VERSION' ) || defined( 'ELEMENTOR_PRO_VERSION' ) );
	}
}

if (!function_exists('rsssl_uses_divi')) {
	function rsssl_uses_divi() {
		return defined( 'ET_CORE_PATH' );
	}
}

if (!function_exists('rsssl_uses_wp_engine')) {
    function rsssl_uses_wp_engine() {
        if (function_exists('is_wpe') && is_wpe()) {
            return true;
        }
        return false;
    }
}

if (!function_exists('rsssl_beta_5_addon_active')) {
    function rsssl_beta_5_addon_active() {
        if (defined('rsssl_beta_addon') && rsssl_beta_addon ) {
            return true;
        }
        return false;
    }
}

if (!function_exists('rsssl_incompatible_premium_version')) {
    function rsssl_incompatible_premium_version() {
        if ( !defined('rsssl_pro_version') ) {
           return false;
        }

if ( version_compare(rsssl_pro_version,rsssl_add_on_version_requirement,'<' ) ){
            return true;
        }

return false;
    }
}

if (!function_exists('rsssl_ssl_activation_time_no_longer_then_3_days_ago')) {
	function rsssl_ssl_activation_time_no_longer_then_3_days_ago() {

$activation_time             = get_option( 'rsssl_activation_timestamp' );
		$three_days_after_activation = $activation_time + 3 * DAY_IN_SECONDS;

if ( time() < $three_days_after_activation ) {
			return true;
		} else {
			return false;
		}
	}
}

if ( !function_exists('rsssl_letsencrypt_wizard_url') ) {
	/**
     * Get link to SSL certificate generation page
     *
	 * @param string $page
	 *
	 * @return string
	 */
	function rsssl_letsencrypt_wizard_url($page = ''){
        if ( !empty($page) ) {
	        $page = '/'.$page;
        }
		if ( is_multisite() && !is_main_site() ) {
			return add_query_arg(array('page' => 'really-simple-security', 'letsencrypt'=>1), get_admin_url(get_main_site_id(),'options-general.php') )."#letsencrypt$page";
		} else {
			return add_query_arg(array('page' => 'really-simple-security', 'letsencrypt'=>1), admin_url('options-general.php') )."#letsencrypt$page";
		}
	}
}

if ( !function_exists('rsssl_detected_duplicate_ssl_plugin')) {
	/**
     * Duplicate functionality test
     *
	 * @param string $return_name
	 *
	 * @return bool|string
	 */
	function rsssl_detected_duplicate_ssl_plugin( $return_name = false ){
		$plugin = false;
		if ( defined('WPLE_PLUGIN_VERSION') ){
			$plugin = "WP Encryption";
		} elseif( defined('WPSSL_VER') ) {
			$plugin = "WP Free SSL";
		} elseif( defined('SSL_ZEN_PLUGIN_VERSION') ) {
			$plugin = "SSL Zen";
		} elseif( defined('WPSSL_VER') ) {
			$plugin = "WP Free SSL";
		} elseif( defined('SSLFIX_PLUGIN_VERSION') ) {
			$plugin = "SSL Insecure Content Fixer";
		} elseif( class_exists('OCSSL',false) ) {
			$plugin = "One Click SSL";
		} elseif( class_exists('JSM_Force_SSL',false) ) {
			$plugin = "JSM's Force HTTP to HTTPS (SSL)";
		} elseif( function_exists('httpsrdrctn_plugin_init') ) {
			$plugin = "Easy HTTPS (SSL) Redirection";
		} elseif( defined('WPSSL_VER') ) {
			$plugin = "WP Free SSL";
		} elseif( defined('WPFSSL_OPTIONS_KEY') ) {
			$plugin = "WP Force SSL";
		}elseif( defined('ESSL_REQUIRED_PHP_VERSION') ) {
			$plugin = "EasySSL";
		}

if ( $plugin !== false && !$return_name ) {
			return true;
		} else {
			return $plugin;
		}
	}
}

if ( !function_exists('rsssl_ssl_detection_overridden' ) ) {
	function rsssl_ssl_detection_overridden() {
		return get_option( 'rsssl_ssl_detection_overridden' ) !== false;
	}
}

Cancel

Dashboard

Powered by WordPress