\n";
readfile(SSLFIX_PLUGIN_ROOT . 'css/settings.css');
echo "\n";
}
/**
* load CSS for tests page
*/
public function printStylesTests() {
echo "\n";
}
/**
* check for required PHP extensions, tell admin if any are missing
*/
public function checkPrerequisites() {
// only bother admins / plugin installers / option setters with this stuff
if (!current_user_can('activate_plugins') && !current_user_can('manage_options')) {
return;
}
// only on specific pages
if (!self::canShowNotices()) {
return;
}
// need these PHP extensions
$prereqs = array('json', 'pcre');
$missing = array();
foreach ($prereqs as $ext) {
if (!extension_loaded($ext)) {
$missing[] = $ext;
}
}
if (!empty($missing)) {
include SSLFIX_PLUGIN_ROOT . 'views/requires-extensions.php';
}
// and PCRE needs to be v8+ or we break! e.g. \K not present until v7.2 and some sites still use v6.6!
$pcre_min = '8';
if (apply_filters('ssl_insecure_content_pcre_version_permissive', false)) {
$pcre_min = '7.2';
}
if (defined('PCRE_VERSION') && version_compare(PCRE_VERSION, $pcre_min, '<')) {
include SSLFIX_PLUGIN_ROOT . 'views/requires-pcre.php';
}
}
/**
* check admin page to see if we should show notices or not
*/
protected static function canShowNotices() {
global $pagenow;
switch ($pagenow) {
case 'plugins.php':
return true;
case 'tools.php':
if (!empty($_GET['page']) && wp_unslash($_GET['page']) === 'ssl-insecure-content-fixer-tests') {
return true;
}
return false;
case 'options-general.php':
case 'settings.php':
if (!empty($_GET['page']) && wp_unslash($_GET['page']) === 'ssl-insecure-content-fixer') {
return true;
}
return false;
default:
return false;
}
}
/**
* add plugin details links on plugins page
*/
public function pluginDetailsLinks($links, $file) {
if ($file == SSLFIX_PLUGIN_NAME) {
if (is_network_admin()) {
if (current_user_can('manage_network_options')) {
$url = network_admin_url('settings.php?page=ssl-insecure-content-fixer');
$links[] = sprintf('%s', esc_url($url), _x('Settings', 'plugin details links', 'ssl-insecure-content-fixer'));
}
}
elseif (current_user_can($this->getMenuCapability())) {
$url = admin_url('tools.php?page=ssl-insecure-content-fixer-tests');
$links[] = sprintf('%s', esc_url($url), _x('SSL Tests', 'menu link', 'ssl-insecure-content-fixer'));
}
$links[] = sprintf('%s', _x('Instructions', 'plugin details links', 'ssl-insecure-content-fixer'));
$links[] = sprintf('%s', _x('Get help', 'plugin details links', 'ssl-insecure-content-fixer'));
$links[] = sprintf('%s', _x('Rating', 'plugin details links', 'ssl-insecure-content-fixer'));
$links[] = sprintf('%s', _x('Translate', 'plugin details links', 'ssl-insecure-content-fixer'));
$links[] = sprintf('%s', _x('Donate', 'plugin details links', 'ssl-insecure-content-fixer'));
}
return $links;
}
/**
* add our admin menu items
*/
public function adminMenu() {
$capability = $this->getMenuCapability();
$label = _x('SSL Insecure Content', 'menu link', 'ssl-insecure-content-fixer');
add_options_page($label, $label, $capability, 'ssl-insecure-content-fixer', array($this, 'settingsPage'));
if (!is_network_admin()) {
$label = _x('SSL Tests', 'menu link', 'ssl-insecure-content-fixer');
add_management_page($label, $label, $capability, 'ssl-insecure-content-fixer-tests', array($this, 'testPage'));
}
}
/**
* add multisite network admin menu items
*/
public function adminMenuNetwork() {
$label = _x('SSL Insecure Content', 'menu link', 'ssl-insecure-content-fixer');
add_submenu_page('settings.php', $label, $label, 'manage_network_options', 'ssl-insecure-content-fixer', array($this, 'settingsPage'));
}
/**
* add plugin action links
*/
public function pluginActionLinks($links) {
if (current_user_can('manage_options')) {
// add settings link
$url = admin_url('options-general.php?page=ssl-insecure-content-fixer');
$settings_link = sprintf('%s', esc_url($url), _x('Settings', 'plugin details links', 'ssl-insecure-content-fixer'));
array_unshift($links, $settings_link);
}
return $links;
}
/**
* settings admin
*/
public function settingsPage() {
require SSLFIX_PLUGIN_ROOT . 'includes/nonces.php';
if (is_network_admin()) {
// multisite network settings
$options = SSLInsecureContentFixer::getInstance()->network_options;
if (!empty($_POST[SSLFIX_PLUGIN_OPTIONS])) {
check_admin_referer('settings', 'sslfix_nonce');
$options = wp_unslash($_POST[SSLFIX_PLUGIN_OPTIONS]);
$options = $this->settingsValidate($options);
if (!$this->has_settings_errors) {
update_site_option(SSLFIX_PLUGIN_OPTIONS, $options);
add_settings_error(SSLFIX_PLUGIN_OPTIONS, 'sslfix-network-updated', __('Multisite network settings updated.', 'ssl-insecure-content-fixer'), 'updated');
}
}
require SSLFIX_PLUGIN_ROOT . 'views/settings-form-network.php';
}
else {
// individual site settings
$options = SSLInsecureContentFixer::getInstance()->options;
require SSLFIX_PLUGIN_ROOT . 'views/settings-form.php';
}
$min = SCRIPT_DEBUG ? '' : '.min';
$ver = SCRIPT_DEBUG ? time() : SSLFIX_PLUGIN_VERSION;
$ajax_url = $this->getNoWpAJAX();
wp_enqueue_script('sslfix-admin-settings', plugins_url("js/admin-settings$min.js", SSLFIX_PLUGIN_FILE), array('jquery'), $ver, true);
wp_localize_script('sslfix-admin-settings', 'sslfix', array(
'ajax_url_wp' => ssl_insecure_content_fix_url(admin_url('admin-ajax.php')),
'ajax_url_ssl' => ssl_insecure_content_fix_url($ajax_url),
'test_nonce' => ssl_insecure_content_fix_nonce_value(),
'msg' => array(
'recommended' => _x('* detected as recommended setting', 'proxy settings', 'ssl-insecure-content-fixer'),
),
));
}
/**
* validate settings on save
* @param array $input
* @return array
*/
public function settingsValidate($input) {
$output = array();
$output['fix_level'] = empty($input['fix_level']) ? '' : $input['fix_level'];
$output['proxy_fix'] = empty($input['proxy_fix']) ? '' : $input['proxy_fix'];
$output['site_only'] = empty($input['site_only']) ? 0 : 1;
if (!in_array($output['fix_level'], array('off', 'simple', 'content', 'widgets', 'capture', 'capture_all'))) {
add_settings_error(SSLFIX_PLUGIN_OPTIONS, 'sslfix-fix_level', _x('Fix level is invalid', 'settings error', 'ssl-insecure-content-fixer'));
$this->has_settings_errors = true;
}
if (!in_array($output['proxy_fix'], array('normal', 'HTTP_X_FORWARDED_PROTO', 'HTTP_CLOUDFRONT_FORWARDED_PROTO', 'HTTP_X_FORWARDED_SSL', 'HTTP_CF_VISITOR', 'HTTP_X_ARR_SSL', 'HTTP_X_FORWARDED_SCHEME', 'detect_fail'))) {
add_settings_error(SSLFIX_PLUGIN_OPTIONS, 'sslfix-proxy_fix', _x('HTTPS detection setting is invalid', 'settings error', 'ssl-insecure-content-fixer'));
$this->has_settings_errors = true;
}
if (isset($input['fix_specific']) && is_array($input['fix_specific'])) {
$output['fix_specific'] = array_map('intval', array_filter($input['fix_specific']));
}
else {
$output['fix_specific'] = array();
}
return $output;
}
/**
* show SSL tests page
*/
public function testPage() {
require SSLFIX_PLUGIN_ROOT . 'includes/nonces.php';
require SSLFIX_PLUGIN_ROOT . 'views/ssl-tests.php';
$min = SCRIPT_DEBUG ? '' : '.min';
$ver = SCRIPT_DEBUG ? time() : SSLFIX_PLUGIN_VERSION;
$ajax_url = $this->getNoWpAJAX();
wp_enqueue_script('sslfix-admin-settings', plugins_url("js/admin-tests$min.js", SSLFIX_PLUGIN_FILE), array('jquery'), $ver, true);
wp_localize_script('sslfix-admin-settings', 'sslfix', array(
'ajax_url_wp' => ssl_insecure_content_fix_url(admin_url('admin-ajax.php')),
'ajax_url_ssl' => ssl_insecure_content_fix_url($ajax_url),
'test_nonce' => ssl_insecure_content_fix_nonce_value(),
));
}
/**
* get path to non-WP AJAX script
* @return string
*/
protected function getNoWpAJAX() {
return plugins_url('nowp/ajax.php', SSLFIX_PLUGIN_FILE);
}
/**
* get capability required for menu access
* @return string
*/
protected function getMenuCapability() {
return $this->isNetworkActivated() ? 'manage_network_options' : 'manage_options';
}
/**
* test whether this plugin is network activated
* @return bool
*/
protected function isNetworkActivated() {
static $is_network_activated = null;
if (is_null($is_network_activated)) {
if (is_multisite()) {
if (!function_exists('is_plugin_active_for_network')) {
require_once ABSPATH . '/wp-admin/includes/plugin.php';
}
$is_network_activated = is_plugin_active_for_network(SSLFIX_PLUGIN_NAME);
}
else {
$is_network_activated = false;
}
}
return $is_network_activated;
}
/**
* AJAX handler for testing HTTPS detection within WordPress
*/
public function ajaxTestHTTPS() {
$response = array('https' => (is_ssl() ? 'yes' : 'no'));
wp_send_json($response);
}
}