Changeset 3310370
- Timestamp:
- 06/12/2025 09:25:43 AM (6 months ago)
- Location:
- really-simple-ssl/trunk
- Files:
-
- 1 added
- 5 edited
-
class-wp-cli.php (added)
-
languages/really-simple-ssl.pot (modified) (8 diffs)
-
readme.txt (modified) (1 diff)
-
security/wordpress/two-fa/class-rsssl-two-factor.php (modified) (2 diffs)
-
security/wordpress/two-fa/controllers/class-rsssl-email-controller.php (modified) (2 diffs)
-
upgrade.php (modified) (2 diffs)
Legend:
- Unmodified
- Added
- Removed
-
really-simple-ssl/trunk/languages/really-simple-ssl.pot
r3306454 r3310370 10 10 "Content-Type: text/plain; charset=UTF-8\n" 11 11 "Content-Transfer-Encoding: 8bit\n" 12 "POT-Creation-Date: 2025-06- 04T11:50:48+00:00\n"12 "POT-Creation-Date: 2025-06-11T11:03:50+00:00\n" 13 13 "PO-Revision-Date: YEAR-MO-DA HO:MI+ZONE\n" 14 14 "X-Generator: WP-CLI 2.11.0\n" … … 74 74 75 75 #: assets/templates/two_fa/onboarding.php:116 76 #: security/wordpress/two-fa/controllers/class-rsssl-email-controller.php:21 776 #: security/wordpress/two-fa/controllers/class-rsssl-email-controller.php:214 77 77 #: security/wordpress/two-fa/providers/class-rsssl-two-factor-email.php:354 78 78 msgid "A verification code has been sent to the email address associated with your account." … … 145 145 #: assets/templates/two_fa/totp-config.php:23 146 146 #: pro/security/wordpress/two-fa/providers/class-rsssl-two-factor-totp.php:668 147 #: security/wordpress/two-fa/class-rsssl-two-factor.php:143 4147 #: security/wordpress/two-fa/class-rsssl-two-factor.php:1435 148 148 msgid "Download Backup Codes" 149 149 msgstr "" … … 792 792 msgstr "" 793 793 794 #: class-wp-cli.php: 94794 #: class-wp-cli.php:65 795 795 msgid "This command is related to functionality available in Really Simple Security Pro, please consider upgrading to unlock all powerful security features. Read more: https://really-simple-ssl.com/pro" 796 796 msgstr "" 797 797 798 #: class-wp-cli.php: 112798 #: class-wp-cli.php:83 799 799 msgid "It seems that no valid license key is activated for this domain. Activate your license key using the `%s` command, or purchase a valid license key via https://really-simple-ssl.com/pro" 800 800 msgstr "" 801 801 802 #: class-wp-cli.php:11 99802 #: class-wp-cli.php:1170 803 803 msgid "Failed to reach %s. The site does not appear to be accessible over HTTPS. Please ensure your server is configured for SSL." 804 804 msgstr "" 805 805 806 #: class-wp-cli.php:1 215806 #: class-wp-cli.php:1186 807 807 msgid "Failed to reach %s. The site does not appear to be accessible over HTTPS (Error: %s). Check debug logs for details." 808 808 msgstr "" 809 809 810 #: class-wp-cli.php:12 37810 #: class-wp-cli.php:1208 811 811 msgid "Reached %s, but received an error response code: %d. HTTPS is not properly configured." 812 812 msgstr "" 813 813 814 #: class-wp-cli.php:1223 815 msgid ".htaccess file (%s) is not writable. Redirects cannot be configured automatically." 816 msgstr "" 817 818 #: class-wp-cli.php:1230 819 msgid "Pre-flight checks passed." 820 msgstr "" 821 822 #: class-wp-cli.php:1242 823 msgid "Activate SSL on the site." 824 msgstr "" 825 826 #: class-wp-cli.php:1247 827 msgid "Deactivate SSL on the site." 828 msgstr "" 829 814 830 #: class-wp-cli.php:1252 815 msgid ".htaccess file (%s) is not writable. Redirects cannot be configured automatically."816 msgstr ""817 818 #: class-wp-cli.php:1259819 msgid "Pre-flight checks passed."820 msgstr ""821 822 #: class-wp-cli.php:1271823 msgid "Activate SSL on the site."824 msgstr ""825 826 #: class-wp-cli.php:1276827 msgid "Deactivate SSL on the site."828 msgstr ""829 830 #: class-wp-cli.php:1281831 831 msgid "Update a Really Simple Security option. Usage: wp rsssl update_option --name=option_name --value=option_value. Use 0 and 1 for booleans." 832 832 msgstr "" 833 833 834 #: class-wp-cli.php:12 87834 #: class-wp-cli.php:1258 835 835 msgid "Name of the option to update." 836 836 msgstr "" 837 837 838 #: class-wp-cli.php:12 93838 #: class-wp-cli.php:1264 839 839 msgid "Value to set for the option." 840 840 msgstr "" 841 841 842 #: class-wp-cli.php:12 99842 #: class-wp-cli.php:1270 843 843 msgid "Activate all recommended features." 844 844 msgstr "" 845 845 846 #: class-wp-cli.php:1 304846 #: class-wp-cli.php:1275 847 847 msgid "Deactivate all recommended features." 848 848 msgstr "" 849 849 850 #: class-wp-cli.php:1 309850 #: class-wp-cli.php:1280 851 851 msgid "Activate essential security headers." 852 852 msgstr "" 853 853 854 #: class-wp-cli.php:1 314854 #: class-wp-cli.php:1285 855 855 msgid "Deactivate essential security headers." 856 856 msgstr "" 857 857 858 #: class-wp-cli.php:1 319858 #: class-wp-cli.php:1290 859 859 msgid "Activate the firewall." 860 860 msgstr "" 861 861 862 #: class-wp-cli.php:1 324862 #: class-wp-cli.php:1295 863 863 msgid "Deactivate the firewall." 864 864 msgstr "" 865 865 866 #: class-wp-cli.php:13 29866 #: class-wp-cli.php:1300 867 867 msgid "Activate Two-Factor Authentication." 868 868 msgstr "" 869 869 870 #: class-wp-cli.php:13 34870 #: class-wp-cli.php:1305 871 871 msgid "Deactivate Two-Factor Authentication." 872 872 msgstr "" 873 873 874 #: class-wp-cli.php:13 39874 #: class-wp-cli.php:1310 875 875 msgid "Activate password security features." 876 876 msgstr "" 877 877 878 #: class-wp-cli.php:13 44878 #: class-wp-cli.php:1315 879 879 msgid "Deactivate password security features." 880 880 msgstr "" 881 881 882 #: class-wp-cli.php:13 49882 #: class-wp-cli.php:1320 883 883 msgid "Activate limit login attempts." 884 884 msgstr "" 885 885 886 #: class-wp-cli.php:13 54886 #: class-wp-cli.php:1325 887 887 msgid "Deactivate limit login attempts." 888 888 msgstr "" 889 889 890 #: class-wp-cli.php:13 59890 #: class-wp-cli.php:1330 891 891 msgid "Activate vulnerability scanning." 892 892 msgstr "" 893 893 894 #: class-wp-cli.php:13 64894 #: class-wp-cli.php:1335 895 895 msgid "Deactivate vulnerability scanning." 896 896 msgstr "" 897 897 898 #: class-wp-cli.php:13 69898 #: class-wp-cli.php:1340 899 899 msgid "Activate a license key. Usage: wp rsssl activate_license YOUR_LICENSE_KEY." 900 900 msgstr "" 901 901 902 #: class-wp-cli.php:13 75902 #: class-wp-cli.php:1346 903 903 msgid "The license key to activate." 904 904 msgstr "" 905 905 906 #: class-wp-cli.php:13 81906 #: class-wp-cli.php:1352 907 907 msgid "Deactivate the license." 908 908 msgstr "" 909 909 910 #: class-wp-cli.php:13 86910 #: class-wp-cli.php:1357 911 911 msgid "Add a lock file for safe mode." 912 912 msgstr "" 913 913 914 #: class-wp-cli.php:13 91914 #: class-wp-cli.php:1362 915 915 msgid "Remove the lock file for safe mode." 916 916 msgstr "" 917 917 918 #: class-wp-cli.php:13 96918 #: class-wp-cli.php:1367 919 919 msgid "Reset the 2FA status of a user to disabled." 920 920 msgstr "" 921 921 922 #: class-wp-cli.php:1372 923 msgid "Update the advanced-headers.php with the latest rules." 924 msgstr "" 925 926 #: class-wp-cli.php:1377 927 msgid "Add IP block." 928 msgstr "" 929 930 #: class-wp-cli.php:1383 931 #: class-wp-cli.php:1444 932 #: class-wp-cli.php:1462 933 msgid "The IP to block." 934 msgstr "" 935 936 #: class-wp-cli.php:1389 937 #: class-wp-cli.php:1450 938 #: class-wp-cli.php:1468 939 #: class-wp-cli.php:1496 940 msgid "Flag to add a permanent block." 941 msgstr "" 942 943 #: class-wp-cli.php:1395 944 msgid "Optional note for the block." 945 msgstr "" 946 922 947 #: class-wp-cli.php:1401 923 msgid "Update the advanced-headers.php with the latest rules." 924 msgstr "" 925 926 #: class-wp-cli.php:1406 927 msgid "Add IP block." 928 msgstr "" 929 930 #: class-wp-cli.php:1412 931 #: class-wp-cli.php:1473 932 #: class-wp-cli.php:1491 933 msgid "The IP to block." 948 msgid "Remove IP block." 949 msgstr "" 950 951 #: class-wp-cli.php:1407 952 msgid "The IP to remove the block for." 953 msgstr "" 954 955 #: class-wp-cli.php:1413 956 msgid "Show blocked IP's." 934 957 msgstr "" 935 958 936 959 #: class-wp-cli.php:1418 960 msgid "Add a trusted IP to the firewall." 961 msgstr "" 962 963 #: class-wp-cli.php:1423 964 msgid "Remove a trusted IP from the firewall." 965 msgstr "" 966 967 #: class-wp-cli.php:1428 968 msgid "Add a trusted IP to the limit login attempts table." 969 msgstr "" 970 971 #: class-wp-cli.php:1433 972 msgid "Remove a trusted IP from the limit login attempts table." 973 msgstr "" 974 975 #: class-wp-cli.php:1438 976 msgid "Add a blocked IP to the limit login attempts table." 977 msgstr "" 978 979 #: class-wp-cli.php:1456 980 msgid "Remove a blocked IP from the limit login attempts table." 981 msgstr "" 982 983 #: class-wp-cli.php:1474 984 msgid "Add a trusted username to the limit login attempts table." 985 msgstr "" 986 937 987 #: class-wp-cli.php:1479 938 #: class-wp-cli.php:1497 939 #: class-wp-cli.php:1525 940 msgid "Flag to add a permanent block." 941 msgstr "" 942 943 #: class-wp-cli.php:1424 944 msgid "Optional note for the block." 945 msgstr "" 946 947 #: class-wp-cli.php:1430 948 msgid "Remove IP block." 949 msgstr "" 950 951 #: class-wp-cli.php:1436 952 msgid "The IP to remove the block for." 953 msgstr "" 954 955 #: class-wp-cli.php:1442 956 msgid "Show blocked IP's." 957 msgstr "" 958 959 #: class-wp-cli.php:1447 960 msgid "Add a trusted IP to the firewall." 961 msgstr "" 962 963 #: class-wp-cli.php:1452 964 msgid "Remove a trusted IP from the firewall." 965 msgstr "" 966 967 #: class-wp-cli.php:1457 968 msgid "Add a trusted IP to the limit login attempts table." 969 msgstr "" 970 971 #: class-wp-cli.php:1462 972 msgid "Remove a trusted IP from the limit login attempts table." 973 msgstr "" 974 975 #: class-wp-cli.php:1467 976 msgid "Add a blocked IP to the limit login attempts table." 977 msgstr "" 978 979 #: class-wp-cli.php:1485 980 msgid "Remove a blocked IP from the limit login attempts table." 981 msgstr "" 982 983 #: class-wp-cli.php:1503 984 msgid "Add a trusted username to the limit login attempts table." 988 msgid "Remove a trusted username from the limit login attempts table." 989 msgstr "" 990 991 #: class-wp-cli.php:1484 992 msgid "Add a blocked username to the limit login attempts table." 993 msgstr "" 994 995 #: class-wp-cli.php:1490 996 msgid "The username to block." 997 msgstr "" 998 999 #: class-wp-cli.php:1502 1000 msgid "Remove a blocked username from the limit login attempts table." 985 1001 msgstr "" 986 1002 987 1003 #: class-wp-cli.php:1508 988 msgid "Remove a trusted username from the limit login attempts table."989 msgstr ""990 991 #: class-wp-cli.php:1513992 msgid "Add a blocked username to the limit login attempts table."993 msgstr ""994 995 #: class-wp-cli.php:1519996 msgid "The username to block."997 msgstr ""998 999 #: class-wp-cli.php:15311000 msgid "Remove a blocked username from the limit login attempts table."1001 msgstr ""1002 1003 #: class-wp-cli.php:15371004 1004 msgid "The username to remove the block for." 1005 1005 msgstr "" 1006 1006 1007 #: class-wp-cli.php:15 431007 #: class-wp-cli.php:1514 1008 1008 msgid "Flag to remove a permanent block." 1009 1009 msgstr "" … … 4453 4453 4454 4454 #: pro/security/wordpress/two-fa/controllers/class-rsssl-totp-controller.php:66 4455 #: security/wordpress/two-fa/controllers/class-rsssl-email-controller.php:11 74456 #: security/wordpress/two-fa/controllers/class-rsssl-email-controller.php:1 914455 #: security/wordpress/two-fa/controllers/class-rsssl-email-controller.php:116 4456 #: security/wordpress/two-fa/controllers/class-rsssl-email-controller.php:188 4457 4457 msgid "Invalid provider" 4458 4458 msgstr "" … … 4654 4654 4655 4655 #: pro/security/wordpress/two-fa/providers/class-rsssl-two-factor-totp.php:669 4656 #: security/wordpress/two-fa/class-rsssl-two-factor.php:143 54656 #: security/wordpress/two-fa/class-rsssl-two-factor.php:1436 4657 4657 msgid "Key copied" 4658 4658 msgstr "" 4659 4659 4660 4660 #: pro/security/wordpress/two-fa/providers/class-rsssl-two-factor-totp.php:670 4661 #: security/wordpress/two-fa/class-rsssl-two-factor.php:143 64661 #: security/wordpress/two-fa/class-rsssl-two-factor.php:1437 4662 4662 msgid "Could not copy text: " 4663 4663 msgstr "" … … 5091 5091 5092 5092 #: security/wordpress/two-fa/class-rsssl-two-factor.php:551 5093 #: security/wordpress/two-fa/class-rsssl-two-factor.php:129 85093 #: security/wordpress/two-fa/class-rsssl-two-factor.php:1299 5094 5094 msgid "Your 2FA grace period expired. Please contact your site administrator to regain access and to configure 2FA." 5095 5095 msgstr "" … … 5123 5123 msgstr "" 5124 5124 5125 #: security/wordpress/two-fa/class-rsssl-two-factor.php:123 55125 #: security/wordpress/two-fa/class-rsssl-two-factor.php:1236 5126 5126 msgid "There have been too many failed two-factor authentication attempts, which often indicates that the password has been compromised. The password has been reset in order to protect the account." 5127 5127 msgstr "" 5128 5128 5129 #: security/wordpress/two-fa/class-rsssl-two-factor.php:12 395129 #: security/wordpress/two-fa/class-rsssl-two-factor.php:1240 5130 5130 msgid "If you are the owner of this account, please check your email for instructions on regaining access." 5131 5131 msgstr "" 5132 5132 5133 #: security/wordpress/two-fa/class-rsssl-two-factor.php:124 65133 #: security/wordpress/two-fa/class-rsssl-two-factor.php:1247 5134 5134 msgid "Password Reset" 5135 5135 msgstr "" 5136 5136 5137 #: security/wordpress/two-fa/class-rsssl-two-factor.php:135 25137 #: security/wordpress/two-fa/class-rsssl-two-factor.php:1353 5138 5138 msgid "Two-Factor Authentication Setup" 5139 5139 msgstr "" 5140 5140 5141 #: security/wordpress/two-fa/class-rsssl-two-factor.php:145 45141 #: security/wordpress/two-fa/class-rsssl-two-factor.php:1455 5142 5142 msgid "Failed to create a login nonce." 5143 5143 msgstr "" 5144 5144 5145 #: security/wordpress/two-fa/controllers/class-rsssl-email-controller.php:1 625145 #: security/wordpress/two-fa/controllers/class-rsssl-email-controller.php:159 5146 5146 msgid "Code was was invalid, try \"Resend Code\"" 5147 5147 msgstr "" 5148 5148 5149 #: security/wordpress/two-fa/controllers/class-rsssl-email-controller.php:20 55149 #: security/wordpress/two-fa/controllers/class-rsssl-email-controller.php:202 5150 5150 msgid "Email authentication is not active for this user" 5151 5151 msgstr "" 5152 5152 5153 #: security/wordpress/two-fa/controllers/class-rsssl-email-controller.php:27 85154 #: security/wordpress/two-fa/controllers/class-rsssl-email-controller.php:29 65155 #: security/wordpress/two-fa/controllers/class-rsssl-email-controller.php:32 65153 #: security/wordpress/two-fa/controllers/class-rsssl-email-controller.php:275 5154 #: security/wordpress/two-fa/controllers/class-rsssl-email-controller.php:293 5155 #: security/wordpress/two-fa/controllers/class-rsssl-email-controller.php:323 5156 5156 msgid "Access denied." 5157 5157 msgstr "" 5158 5158 5159 #: security/wordpress/two-fa/controllers/class-rsssl-email-controller.php:31 35159 #: security/wordpress/two-fa/controllers/class-rsssl-email-controller.php:310 5160 5160 msgid "Too many attempts. Please try again later." 5161 5161 msgstr "" -
really-simple-ssl/trunk/readme.txt
r3306454 r3310370 7 7 Tested up to: 6.8 8 8 Requires PHP: 7.4 9 Stable tag: 9.3. 59 Stable tag: 9.3.6 10 10 11 11 Easily improve site security with WordPress Hardening, Two-Factor Authentication (2FA), Login Protection, Vulnerability Detection and SSL certificate. -
really-simple-ssl/trunk/security/wordpress/two-fa/class-rsssl-two-factor.php
r3306454 r3310370 994 994 // Allow the provider to re-send codes, etc. 995 995 if ( ( 'email' === $provider_key ) && true === $provider_instance->pre_process_authentication( $user ) ) { 996 self::login_html( $user, $redirect_to, '', $provider_class);996 self::login_html( $user, $nonce, $redirect_to, $provider_key ); 997 997 exit; 998 998 } … … 1113 1113 self::login_html( 1114 1114 $user, 1115 $login_nonce, 1115 1116 isset($_REQUEST['redirect_to']) ? esc_url_raw(wp_unslash($_REQUEST['redirect_to'])) : '', 1116 1117 '', -
really-simple-ssl/trunk/security/wordpress/two-fa/controllers/class-rsssl-email-controller.php
r3306454 r3310370 8 8 use Exception; 9 9 use RSSSL\Pro\Security\WordPress\Limitlogin\Rsssl_IP_Fetcher; 10 use RSSSL\Pro\Security\WordPress\Two_Fa\Providers\Rsssl_Two_Factor_Totp;11 10 use RSSSL\Security\WordPress\Two_Fa\Providers\Rsssl_Two_Factor_Email; 12 11 use RSSSL\Security\WordPress\Two_Fa\Models\Rsssl_Request_Parameters; … … 155 154 // Reset all the settings if the token is invalid. 156 155 Rsssl_Two_Factor_Email::set_user_status($user->ID, 'open'); 157 Rsssl_Two_Factor_Totp::set_user_status($user->ID, 'open');158 159 156 // Log out the user. 160 157 wp_logout(); -
really-simple-ssl/trunk/upgrade.php
r3301983 r3310370 18 18 //dismiss notices that should be dismissed on plugin upgrade 19 19 if ( $prev_version && version_compare( $prev_version, rsssl_version, '!=' ) ) { 20 $dismiss_options = RSSSL()->admin->get_notices_list( 21 array( 22 'dismiss_on_upgrade' => true, 23 ) 24 ); 20 // $dismiss_options = RSSSL()->admin->get_notices_list( 21 // array( 22 // 'dismiss_on_upgrade' => true, 23 // ) 24 // ); 25 $dismiss_options = ['mixed_content_scan']; // Temporary fix for translation issues on plugins_loaded. 25 26 foreach ( $dismiss_options as $dismiss_option ) { 26 27 if ( !is_string($dismiss_option) ) continue; … … 173 174 174 175 if ( $prev_version && version_compare( $prev_version, '6.2.3', '<' ) ) { 175 rsssl_update_option( 'send_notifications_email', 1 ); 176 //rsssl_update_option( 'send_notifications_email', 1 ); 177 //do not use rsssl_update_option as it will load all fields, causing translation issues on plugins_loaded hook. 178 $options = get_option('rsssl_options', []); 179 if ( !is_array($options) ) $options = []; 180 $options['send_notifications_email'] = 1; 181 update_option( 'rsssl_options', $options); 176 182 } 177 183
Note: See TracChangeset
for help on using the changeset viewer.