Changeset 3398360

Timestamp:

11/18/2025 08:26:28 PM (3 months ago)

Author:

awesomefootnotes

Message:

Adding the first version of my plugin

Location:

0-day-analytics

Files:

• tags/3.9.2 (deleted)
• tags/3.9.3 (deleted)
• tags/3.9.4 (deleted)
• tags/4.2.0 (copied) (copied from 0-day-analytics/trunk)
• tags/4.2.0/advanced-analytics.php (modified) (3 diffs)
• tags/4.2.0/classes/migration/class-migration.php (modified) (1 diff)
• tags/4.2.0/classes/vendor/controllers/class-wp-mail-log.php (modified) (7 diffs)
• tags/4.2.0/classes/vendor/entities/class-wp-mail-entity.php (modified) (6 diffs)
• tags/4.2.0/classes/vendor/helpers/class-ajax-helper.php (modified) (4 diffs)
• tags/4.2.0/classes/vendor/helpers/class-crons-helper.php (modified) (4 diffs)
• tags/4.2.0/classes/vendor/helpers/class-file-helper.php (modified) (10 diffs)
• tags/4.2.0/classes/vendor/helpers/class-settings.php (modified) (1 diff)
• tags/4.2.0/classes/vendor/helpers/class-system-analytics.php (modified) (2 diffs)
• tags/4.2.0/classes/vendor/helpers/class-wp-error-handler.php (modified) (1 diff)
• tags/4.2.0/classes/vendor/lists/class-crons-list.php (modified) (11 diffs)
• tags/4.2.0/classes/vendor/lists/class-fatals-list.php (modified) (4 diffs)
• tags/4.2.0/classes/vendor/lists/class-requests-list.php (modified) (4 diffs)
• tags/4.2.0/classes/vendor/lists/class-table-list.php (modified) (5 diffs)
• tags/4.2.0/classes/vendor/lists/class-transients-list.php (modified) (3 diffs)
• tags/4.2.0/classes/vendor/lists/class-wp-mail-list.php (modified) (14 diffs)
• tags/4.2.0/classes/vendor/lists/views/class-crons-view.php (modified) (4 diffs)
• tags/4.2.0/classes/vendor/lists/views/class-fatals-view.php (modified) (1 diff)
• tags/4.2.0/classes/vendor/lists/views/class-requests-view.php (modified) (1 diff)
• tags/4.2.0/classes/vendor/lists/views/class-table-view.php (modified) (4 diffs)
• tags/4.2.0/classes/vendor/lists/views/class-wp-mail-view.php (modified) (1 diff)
• tags/4.2.0/classes/vendor/views/class-file-editor.php (modified) (3 diffs)
• tags/4.2.0/css/wfe.css (modified) (3 diffs)
• tags/4.2.0/js/admin/wfe.js (modified) (5 diffs)
• tags/4.2.0/readme.txt (modified) (2 diffs)
• trunk/advanced-analytics.php (modified) (3 diffs)
• trunk/classes/migration/class-migration.php (modified) (1 diff)
• trunk/classes/vendor/controllers/class-wp-mail-log.php (modified) (7 diffs)
• trunk/classes/vendor/entities/class-wp-mail-entity.php (modified) (6 diffs)
• trunk/classes/vendor/helpers/class-ajax-helper.php (modified) (4 diffs)
• trunk/classes/vendor/helpers/class-crons-helper.php (modified) (4 diffs)
• trunk/classes/vendor/helpers/class-file-helper.php (modified) (10 diffs)
• trunk/classes/vendor/helpers/class-settings.php (modified) (1 diff)
• trunk/classes/vendor/helpers/class-system-analytics.php (modified) (2 diffs)
• trunk/classes/vendor/helpers/class-wp-error-handler.php (modified) (1 diff)
• trunk/classes/vendor/lists/class-crons-list.php (modified) (11 diffs)
• trunk/classes/vendor/lists/class-fatals-list.php (modified) (4 diffs)
• trunk/classes/vendor/lists/class-requests-list.php (modified) (4 diffs)
• trunk/classes/vendor/lists/class-table-list.php (modified) (5 diffs)
• trunk/classes/vendor/lists/class-transients-list.php (modified) (3 diffs)
• trunk/classes/vendor/lists/class-wp-mail-list.php (modified) (14 diffs)
• trunk/classes/vendor/lists/views/class-crons-view.php (modified) (4 diffs)
• trunk/classes/vendor/lists/views/class-fatals-view.php (modified) (1 diff)
• trunk/classes/vendor/lists/views/class-requests-view.php (modified) (1 diff)
• trunk/classes/vendor/lists/views/class-table-view.php (modified) (4 diffs)
• trunk/classes/vendor/lists/views/class-wp-mail-view.php (modified) (1 diff)
• trunk/classes/vendor/views/class-file-editor.php (modified) (3 diffs)
• trunk/css/wfe.css (modified) (3 diffs)
• trunk/js/admin/wfe.js (modified) (5 diffs)
• trunk/readme.txt (modified) (2 diffs)

0-day-analytics/tags/4.2.0/advanced-analytics.php

@@ -11 +11 @@
  * Plugin Name:     0 Day Analytics
  * Description:     Take full control of error log, crons, transients, plugins, requests, mails and DB tables.
- * Version:         4.1.1
+ * Version:         4.2.0
  * Author:          Stoil Dobrev
  * Author URI:      https://github.com/sdobreff/
@@ -37 +37 @@
 // Constants.
 if ( ! defined( 'ADVAN_VERSION' ) ) {
-    define( 'ADVAN_VERSION', '4.1.1' );
+    define( 'ADVAN_VERSION', '4.2.0' );
     define( 'ADVAN_TEXTDOMAIN', '0-day-analytics' );
     define( 'ADVAN_NAME', '0 Day Analytics' );
@@ -67 +67 @@
                     sprintf(
                         // translators: the minimum version of the PHP required by the plugin.
-                        __(
+                        \__(
                             '"%1$s" requires PHP %2$s or newer. Plugin is automatically deactivated.',
                             '0-day-analytics'

0-day-analytics/tags/4.2.0/classes/migration/class-migration.php

@@ -216 +216 @@
             }
         }
+
+        /**
+         * Migrates the plugin up-to version 4.2.0 (adds plugin_slug column to mail log).
+         *
+         * @return void
+         *
+         * @since 4.2.0
+         */
+        public static function migrate_up_to_420() {
+            if ( \class_exists( '\\ADVAN\\Entities\\WP_Mail_Entity' ) ) {
+                if ( Common_Table::check_table_exists( WP_Mail_Entity::get_table_name() ) && ! Common_Table::check_column( 'plugin_slug', 'varchar(255)', WP_Mail_Entity::get_table_name() ) ) {
+                    \ADVAN\Entities\WP_Mail_Entity::alter_table_411();
+                }
+            }
+        }
     }
 }

0-day-analytics/tags/4.2.0/classes/vendor/controllers/class-wp-mail-log.php

@@ -13 +13 @@
 
 use ADVAN\Entities\WP_Mail_Entity;
+use ADVAN\Helpers\Plugin_Theme_Helper;
 use ADVAN\Helpers\Settings;
 
@@ -123 +124 @@
                     $message = $email_class->get( 'content_plaintext', 'replace-tokens' );
                 }
+                $bt_segment = self::get_backtrace();
+                $plugin_slug = '';
+                if ( isset( $bt_segment['file'] ) ) {
+                    $plugin_base = Plugin_Theme_Helper::get_plugin_from_file_path( $bt_segment['file'] );
+                    if ( $plugin_base ) {
+                        $plugin_slug = $plugin_base;
+                    }
+                }
                 self::$bp_mail = array(
                     'time'               => time(),
@@ -129 +138 @@
                     'message'            => self::filter_html( $message ),
                     'backtrace_segment'  => \wp_json_encode( self::get_backtrace() ),
+                    'plugin_slug'        => $plugin_slug,
                     'status'             => 1,
                     'attachments'        => \wp_json_encode( self::get_attachment_locations( array() ) ),
@@ -150 +160 @@
 
             if ( \is_array( $args ) ) {
+                $bt_segment = self::get_backtrace();
+                $plugin_slug = '';
+                if ( isset( $bt_segment['file'] ) ) {
+                    $plugin_base = Plugin_Theme_Helper::get_plugin_from_file_path( $bt_segment['file'] );
+                    if ( $plugin_base ) {
+                        $plugin_slug = $plugin_base;
+                    }
+                }
                 $log_entry = array(
                     'time'               => time(),
@@ -156 +174 @@
                     'message'            => self::filter_html( $args['message'] ),
                     'backtrace_segment'  => \wp_json_encode( self::get_backtrace() ),
+                    'plugin_slug'        => $plugin_slug,
                     'status'             => 1,
                     'attachments'        => \wp_json_encode( self::get_attachment_locations( $args['attachments'] ) ),
@@ -202 +221 @@
                     $mail_header = $prop->getValue( $phpmailer );
 
+                    $bt_segment = self::get_backtrace();
+                    $plugin_slug = '';
+                    if ( isset( $phpmailer->Backtrace, $phpmailer->Backtrace['file'] ) ) { // phpcs:ignore WordPress.NamingConventions.ValidVariableName.UsedPropertyNotSnakeCase
+                        $plugin_base = Plugin_Theme_Helper::get_plugin_from_file_path( $phpmailer->Backtrace['file'] ); // phpcs:ignore WordPress.NamingConventions.ValidVariableName.UsedPropertyNotSnakeCase
+                        if ( $plugin_base ) {
+                            $plugin_slug = $plugin_base;
+                        }
+                    } elseif ( isset( $bt_segment['file'] ) ) {
+                        $plugin_base = Plugin_Theme_Helper::get_plugin_from_file_path( $bt_segment['file'] );
+                        if ( $plugin_base ) {
+                            $plugin_slug = $plugin_base;
+                        }
+                    }
                     $log_entry = array(
                         'time'               => time(),
@@ -209 +241 @@
                         'message'            => self::filter_html( $phpmailer->Body ), // phpcs:ignore WordPress.NamingConventions.ValidVariableName.UsedPropertyNotSnakeCase
                         'backtrace_segment'  => \wp_json_encode( self::get_backtrace() ),
+                        'plugin_slug'        => $plugin_slug,
                         'status'             => 1,
                         'attachments'        => \wp_json_encode( self::get_attachment_locations( $attachment ) ),

0-day-analytics/tags/4.2.0/classes/vendor/entities/class-wp-mail-entity.php

@@ -13 +13 @@
 
 use ADVAN\Helpers\WP_Helper;
+use ADVAN\Helpers\Plugin_Theme_Helper;
 use ADVAN\Entities_Global\Common_Table;
 
@@ -54 +55 @@
             'id'                 => 'int',
             'blog_id'            => 'int',
+            'plugin_slug'        => 'string',
             'time'               => 'string',
             'email_to'           => 'string',
@@ -77 +79 @@
             'id'                 => 0,
             'blog_id'            => 0,
+            'plugin_slug'        => '',
             'time'               => '',
             'email_to'           => '',
@@ -115 +118 @@
                 id BIGINT UNSIGNED NOT NULL AUTO_INCREMENT,
                 blog_id INT NOT NULL,
+                plugin_slug VARCHAR(255) DEFAULT NULL,
                 time DOUBLE NOT NULL DEFAULT 0,
                 email_to TEXT DEFAULT NULL,
@@ -168 +172 @@
 
         /**
+         * Adds plugin_slug column (version 4.1.1 migration) capturing originating plugin.
+         *
+         * @return array|bool
+         *
+         * @since 4.1.1
+         */
+        public static function alter_table_411() {
+            $table  = self::get_table_name();
+            $column = 'plugin_slug';
+            if ( self::column_exists( $table, $column ) ) {
+                return true;
+            }
+            $sql = 'ALTER TABLE `' . $table . '` ADD `plugin_slug` VARCHAR(255) DEFAULT NULL AFTER `blog_id`;';
+            return Common_Table::execute_query( $sql );
+        }
+
+        /**
          * Helper to check if a column exists in the given table.
          *
@@ -260 +281 @@
             return $output;
         }
+
+        /**
+         * Generates dropdown with all distinct plugin slugs seen in the mail log.
+         *
+         * @param string $selected The currently selected plugin slug (or -1 for all).
+         * @param string $which    Indicates position of the dropdown (top or bottom).
+         *
+         * @return string Rendered HTML <select> element, or empty string if none.
+         *
+         * @since 4.1.1
+         */
+        public static function get_all_plugins_dropdown( $selected = '', $which = '' ): string {
+            // Restrict visibility to administrators to avoid information disclosure.
+            if ( function_exists( 'current_user_can' ) && ! \current_user_can( 'manage_options' ) ) {
+                return '';
+            }
+
+            $which = in_array( $which, array( 'top', 'bottom' ), true ) ? $which : '';
+
+            // Build cache key per position and selection (reuse sites cache container for simplicity).
+            $cache_key = 'plugins|' . $which . '|' . (string) $selected;
+            if ( isset( self::$drop_down_sites_rendered[ $cache_key ] ) ) {
+                return self::$drop_down_sites_rendered[ $cache_key ];
+            }
+
+            $sql     = 'SELECT plugin_slug FROM ' . self::get_table_name() . ' GROUP BY plugin_slug ORDER BY plugin_slug DESC';
+            $results = self::get_results( $sql );
+            $plugins = array();
+            $output  = '';
+
+            if ( $results ) {
+                foreach ( $results as $result ) {
+                    $slug = isset( $result['plugin_slug'] ) ? trim( (string) $result['plugin_slug'] ) : '';
+                    if ( '' === $slug ) {
+                        continue;
+                    }
+                    $details = Plugin_Theme_Helper::get_plugin_from_path( $slug );
+                    $name    = ( isset( $details['Name'] ) && ! empty( $details['Name'] ) ) ? $details['Name'] : $slug;
+                    $plugins[] = array(
+                        'id'   => $slug,
+                        'name' => $name,
+                    );
+                }
+            }
+
+            if ( ! empty( $plugins ) ) {
+                $output  = '<select class="plugin_filter" name="plugin_' . \esc_attr( $which ) . '" id="plugin_' . \esc_attr( $which ) . '">';
+                $output .= '<option value="-1">' . __( 'All plugins', '0-day-analytics' ) . '</option>';
+                foreach ( $plugins as $plugin_info ) {
+                    $selected_attr = ( isset( $selected ) && '' !== trim( (string) $selected ) && (string) $selected === (string) $plugin_info['id'] ) ? ' selected' : '';
+                    $output       .= '<option value="' . \esc_attr( $plugin_info['id'] ) . '"' . $selected_attr . '>' . \esc_html( $plugin_info['name'] ) . '</option>';
+                }
+                $output .= '</select>';
+            }
+
+            self::$drop_down_sites_rendered[ $cache_key ] = $output;
+            return $output;
+        }
     }
 }

0-day-analytics/tags/4.2.0/classes/vendor/helpers/class-ajax-helper.php

@@ -171 +171 @@
                     \add_action( 'wp_ajax_advan_file_editor_compare_backup', array( File_Editor::class, 'ajax_compare_backup' ) );
                     \add_action( 'wp_ajax_advan_file_editor_delete_backup', array( File_Editor::class, 'ajax_delete_backup' ) );
+                    // Added download action registration (returns 0 previously when unregistered).
+                    \add_action( 'wp_ajax_advan_file_editor_download_file', array( File_Editor::class, 'ajax_download_file' ) );
+                    // Rename file or directory.
+                    \add_action( 'wp_ajax_advan_file_editor_rename', array( File_Editor::class, 'ajax_rename' ) );
+                    // Duplicate file or directory.
+                    \add_action( 'wp_ajax_advan_file_editor_duplicate', array( File_Editor::class, 'ajax_duplicate' ) );
                 }
             }
@@ -708 +714 @@
             if ( isset( $_POST['typeExport'] ) && ! empty( $_POST['typeExport'] ) ) { // phpcs:ignore WordPress.Security.NonceVerification.Missing
                 if ( 'cron' === $_POST['typeExport'] ) { // phpcs:ignore WordPress.Security.NonceVerification.Missing
-                    $rows  = Crons_List::get_cron_items();
+                    $plugin_filter = ( isset( $_POST['plugin_filter'] ) ? sanitize_text_field( wp_unslash( $_POST['plugin_filter'] ) ) : '' ); // phpcs:ignore WordPress.Security.NonceVerification.Missing
+                    $site_filter   = ( isset( $_POST['site_filter'] ) ? sanitize_text_field( wp_unslash( $_POST['site_filter'] ) ) : '' ); // phpcs:ignore WordPress.Security.NonceVerification.Missing
+                    $rows          = array();
+
+                    if ( '' !== $site_filter && -1 !== (int) $site_filter && function_exists( 'is_multisite' ) && is_multisite() ) {
+                        $rows = Crons_Helper::get_events_for_site( (int) $site_filter );
+                    } else {
+                        $rows = Crons_List::get_cron_items();
+                    }
+
+                    if ( '' !== $plugin_filter && -1 !== (int) $plugin_filter ) {
+                        $rows = array_filter(
+                            $rows,
+                            function ( $row ) use ( $plugin_filter ) {
+                                if ( isset( $row['plugin_slugs'] ) && is_array( $row['plugin_slugs'] ) ) {
+                                    return in_array( $plugin_filter, $row['plugin_slugs'], true );
+                                }
+                                return ( isset( $row['plugin_slug'] ) && '' !== $row['plugin_slug'] && $row['plugin_slug'] === $plugin_filter );
+                            }
+                        );
+                    }
+                    $total = count( $rows );
                     $rows  = \array_slice( $rows, $offset, $batch_size, true );
-                    $total = count( $rows );
                 }
                 if ( 'logs' === $_POST['typeExport'] ) { // phpcs:ignore WordPress.Security.NonceVerification.Missing
@@ -768 +794 @@
                 if ( 'mail' === $_POST['typeExport'] ) { // phpcs:ignore WordPress.Security.NonceVerification.Missing
 
-                    $list_table      = new WP_Mail_List();
-                    $search          = isset( $_POST['search'] ) ? sanitize_text_field( wp_unslash( $_POST['search'] ) ) : ''; // phpcs:ignore WordPress.Security.NonceVerification.Missing
+                    $list_table = new WP_Mail_List();
+                    $search     = isset( $_POST['search'] ) ? sanitize_text_field( wp_unslash( $_POST['search'] ) ) : ''; // phpcs:ignore WordPress.Security.NonceVerification.Missing
+                    $plugin     = isset( $_POST['plugin'] ) ? sanitize_text_field( wp_unslash( $_POST['plugin'] ) ) : ''; // phpcs:ignore WordPress.Security.NonceVerification.Missing
+
                     $extra_file_name = '_' . str_replace( ' ', '_', $list_table->get_table_name() ) . '_';
+                    if ( ! empty( $plugin ) && -1 !== (int) $plugin ) {
+                        $extra_file_name .= $plugin . '_';
+                    }
 
                     $rows = $list_table->fetch_table_data(
@@ -779 +810 @@
                             'site_id'  => '',
                             'search'   => $search,
+                            'plugin'   => $plugin,
                         )
                     );

0-day-analytics/tags/4.2.0/classes/vendor/helpers/class-crons-helper.php

@@ -15 +15 @@
 
 use ADVAN\Lists\Crons_List;
+use ADVAN\Helpers\Plugin_Theme_Helper;
 
 // Exit if accessed directly.
@@ -263 +264 @@
                             continue;
                         }
-                        foreach ( $cron as $hook => $events ) {
-                            foreach ( $events as $event ) {
-
-                                $cron_item = array();
-
-                                $cron_item['hook']     = \esc_html( $hook );
-                                $cron_item['schedule'] = $timestamp;
-                                if ( isset( $event['schedule'] ) ) {
-                                    $cron_item['recurrence'] = \esc_html( $event['schedule'] );
+                            foreach ( $cron as $hook => $events ) {
+                                foreach ( $events as $event ) {
+
+                                    $cron_item = array();
+
+                                    $cron_item['hook']     = \esc_html( $hook );
+                                    $cron_item['schedule'] = $timestamp;
+                                    if ( isset( $event['schedule'] ) ) {
+                                        $cron_item['recurrence'] = \esc_html( $event['schedule'] );
+                                    }
+                                    if ( isset( $event['args'] ) ) {
+                                        $cron_item['args'] = $event['args'];
+                                    }
+
+                                    $cron_item['hash'] = substr( md5( $cron_item['hook'] . $cron_item['recurrence'] . $cron_item['schedule'] . \wp_json_encode( $event['args'] ) ), 0, 8 );
+
+                                    // Site metadata for multisite clarity.
+                                    $cron_item['site_id']   = function_exists( 'get_current_blog_id' ) ? get_current_blog_id() : 1;
+                                    $cron_item['site_name'] = ( function_exists( 'get_bloginfo' ) ) ? get_bloginfo( 'name' ) : '';
+
+                                    // Derive all plugin slugs from callback files (multi-plugin aggregation).
+                                    $callbacks    = self::get_cron_callbacks( $hook );
+                                    $plugin_slugs = array();
+                                    if ( ! empty( $callbacks ) ) {
+                                        foreach ( $callbacks as $cb ) {
+                                            if ( isset( $cb['callback']['file'] ) && ! empty( $cb['callback']['file'] ) ) {
+                                                $slug = Plugin_Theme_Helper::get_plugin_from_file_path( (string) $cb['callback']['file'] );
+                                                if ( false !== $slug && ! in_array( $slug, $plugin_slugs, true ) ) {
+                                                    $plugin_slugs[] = (string) $slug;
+                                                }
+                                            }
+                                        }
+                                    }
+                                    // Backward compatibility single slug (first) & full list.
+                                    $cron_item['plugin_slug']  = isset( $plugin_slugs[0] ) ? $plugin_slugs[0] : '';
+                                    $cron_item['plugin_slugs'] = $plugin_slugs; // empty array signifies core/unknown.
+
+                                    self::$events[ $cron_item['hash'] ] = $cron_item;
                                 }
-                                if ( isset( $event['args'] ) ) {
-                                    $cron_item['args'] = $event['args'];
-                                }
-
-                                $cron_item['hash'] = substr( md5( $cron_item['hook'] . $cron_item['recurrence'] . $cron_item['schedule'] . \wp_json_encode( $event['args'] ) ), 0, 8 );
                             }
-                            self::$events[ $cron_item['hash'] ] = $cron_item;
-                        }
                     }
                 }
@@ -286 +309 @@
 
             return self::$events;
+        }
+
+        /**
+         * Returns the cron events for a specific site in a multisite installation.
+         * Safely switches to the blog, collects events, then restores.
+         *
+         * @param int $blog_id Site (blog) ID.
+         * @return array
+         */
+        public static function get_events_for_site( int $blog_id ): array {
+            if ( ! function_exists( 'is_multisite' ) || ! is_multisite() ) {
+                return self::get_events();
+            }
+
+            $original = get_current_blog_id();
+            if ( $original === $blog_id ) {
+                return self::get_events();
+            }
+
+            // Switch, clear cache, collect, restore and clear again to avoid bleed.
+            switch_to_blog( $blog_id );
+            self::$events = null;
+            $events      = self::get_events();
+            restore_current_blog();
+            self::$events = null; // ensure subsequent calls on original blog re-fetch.
+
+            return $events;
         }
 
@@ -566 +616 @@
             }
 
-            if ( defined( 'ALTERNATE_WP_CRON' ) && \ALTERNATE_WP_CRON ) {
+            if ( defined( 'ALTERNATE_WP_CRON' ) && constant( 'ALTERNATE_WP_CRON' ) ) {
                 return new \WP_Error(
                     'advana_cron_info',

0-day-analytics/tags/4.2.0/classes/vendor/helpers/class-file-helper.php

@@ -28 +28 @@
 
         /**
+         * Try to initialize and return WP_Filesystem instance.
+         *
+         * @return null|\WP_Filesystem_Base Null when unavailable or failed to initialize.
+         *
+         * @since 4.1.2
+         */
+        private static function get_wp_filesystem() {
+            global $wp_filesystem;
+
+            // Attempt to bootstrap the WP_Filesystem API.
+            if ( ! function_exists( '\\WP_Filesystem' ) ) {
+                require_once ABSPATH . 'wp-admin/includes/file.php';
+            }
+
+            try {
+                // Initialize if not already.
+                if ( ! isset( $wp_filesystem ) || ! is_object( $wp_filesystem ) ) {
+                    \WP_Filesystem();
+                }
+            } catch ( \Throwable $e ) {
+                // Initialization failed, fall back to native PHP.
+                return null;
+            }
+
+            return ( isset( $wp_filesystem ) && is_object( $wp_filesystem ) ) ? $wp_filesystem : null;
+        }
+
+        /**
+         * Native PHP file writer with append support and locking.
+         *
+         * @param string $file_path Absolute path to file.
+         * @param string $content   Content to write.
+         * @param bool   $append    Append instead of overwrite.
+         *
+         * @return bool True on success.
+         *
+         * @since 4.1.2
+         */
+        private static function native_put_contents( string $file_path, string $content, bool $append = false ): bool {
+            $flags = LOCK_EX;
+            if ( $append ) {
+                $flags |= FILE_APPEND;
+            }
+            $bytes = @file_put_contents( $file_path, $content, $flags ); // phpcs:ignore WordPress.PHP.NoSilencedErrors.Discouraged,WordPress.WP.AlternativeFunctions.file_system_operations_file_put_contents
+            return ( false !== $bytes );
+        }
+
+        /**
          * Normalize a filesystem path in a cross-platform way.
          *
@@ -117 +165 @@
          */
         public static function write_to_file( string $filename, string $content, bool $append = false ): bool {
-            global $wp_filesystem;
-
-            require_once ABSPATH . 'wp-admin/includes/file.php';
-            WP_Filesystem();
-
             $logging_dir = dirname( $filename );
 
@@ -132 +175 @@
             }
 
-            $result = false;
-
+            // Ensure destination directory exists, try WP first then native.
             if ( ! is_dir( $logging_dir ) ) {
-                if ( false === \wp_mkdir_p( $logging_dir ) ) {
+                if ( ! function_exists( '\\wp_mkdir_p' ) ) {
+                    require_once ABSPATH . 'wp-admin/includes/file.php';
+                }
+                $made_dir = false;
+                try {
+                    $made_dir = \wp_mkdir_p( $logging_dir );
+                } catch ( \Throwable $e ) {
+                    $made_dir = false;
+                }
+                if ( ! $made_dir ) {
+                    $made_dir = @mkdir( $logging_dir, 0755, true ); // phpcs:ignore WordPress.PHP.NoSilencedErrors.Discouraged,WordPress.WP.AlternativeFunctions.mkdir_directoryPermissions
+                }
+                if ( ! $made_dir ) {
                     self::$last_error = new \WP_Error(
                         'mkdir_failed',
@@ -144 +198 @@
                         )
                     );
-
-                    return $result;
+                    return false;
                 }
             }
@@ -157 +210 @@
             }
 
-            // Fix append logic: only append if requested and file exists.
-            if ( $append && $wp_filesystem->exists( $file_path ) ) {
-                $existing_content = $wp_filesystem->get_contents( $file_path );
-                $result           = $wp_filesystem->put_contents( $file_path, $existing_content . $content );
-            } else {
-                $result = $wp_filesystem->put_contents( $file_path, $content );
+            // Try WP_Filesystem first.
+            $result = false;
+            $fs     = self::get_wp_filesystem();
+            if ( $fs ) {
+                try {
+                    if ( $append && $fs->exists( $file_path ) ) {
+                        $existing_content = $fs->get_contents( $file_path );
+                        if ( false === $existing_content ) {
+                            $existing_content = '';
+                        }
+                        $result = (bool) $fs->put_contents( $file_path, $existing_content . $content );
+                    } else {
+                        $result = (bool) $fs->put_contents( $file_path, $content );
+                    }
+                } catch ( \Throwable $e ) {
+                    $result = false; // Will fall back below.
+                }
+            }
+
+            // Fall back to native PHP functions if WP_Filesystem path failed or unavailable.
+            if ( false === $result ) {
+                $result = self::native_put_contents( $file_path, $content, $append );
             }
 
@@ -174 +243 @@
                     )
                 );
-            }
-
-            // Best-effort permission hardening (may not work on all FS abstractions).
-            if ( $result ) {
-                // Best effort tighten file perms; ignore if FS abstraction disallows.
-                @chmod( $file_path, 0640 ); // phpcs:ignore WordPress.PHP.NoSilencedErrors.Discouraged,WordPress.WP.AlternativeFunctions.file_system_operations_chmod
-            }
-
-            return (bool) $result;
+                return false;
+            }
+
+            // Best-effort permission hardening.
+            @chmod( $file_path, 0640 ); // phpcs:ignore WordPress.PHP.NoSilencedErrors.Discouraged,WordPress.WP.AlternativeFunctions.file_system_operations_chmod
+
+            return true;
         }
 
@@ -211 +278 @@
                 $size = filesize( $filename );
 
-                return self::show_size( $size );
-            }
-
-            return '0 B';
-        }
-
-        /**
-         * Shows formatted (human readable) size
-         *
-         * @param int $size - The size (in bytes) to format.
-         *
-         * @return string
-         *
-         * @since 2.1.2
-         */
-        public static function show_size( $size ) {
-
-            if ( 0 <= $size ) {
-
-                $units          = array( 'B', 'KB', 'MB', 'GB', 'TB' );
-                $formatted_size = $size;
-                $i              = 0; // Initialize to avoid undefined index when size < 1024.
-
-                $units_length = count( $units ) - 1;
-
-                for ( $i = 0; $size >= 1024 && $i < $units_length; $i++ ) {
-                    $size          /= 1024;
-                    $formatted_size = round( $size, 2 );
-                }
-
-                return $formatted_size . ' ' . $units[ $i ];
+                return \size_format( $size );
             }
 
@@ -287 +324 @@
 
             // Resolve and validate path against allowed base directory.
-            $allowed_base      = apply_filters( ADVAN_TEXTDOMAIN . 'download_base_dir', WP_CONTENT_DIR );
+            $allowed_base      = \apply_filters( ADVAN_TEXTDOMAIN . 'download_base_dir', WP_CONTENT_DIR );
             $real_allowed_base = realpath( $allowed_base );
             $real_requested    = realpath( $file_path );
@@ -713 +750 @@
             \WP_Filesystem();
             if ( isset( $wp_filesystem ) && is_object( $wp_filesystem ) ) {
-                $move = $wp_filesystem->move( $temp_path, $file_path, true );
+                $move = false;
+                try {
+                    $move = $wp_filesystem->move( $temp_path, $file_path, true );
+                } catch ( \Throwable $e ) {
+                    $move = false;
+                }
+                if ( ! $move ) {
+                    // Try native rename as a fallback when WP_Filesystem move fails.
+                    $move = @rename( $temp_path, $file_path ); // phpcs:ignore WordPress.PHP.NoSilencedErrors.Discouraged,WordPress.WP.AlternativeFunctions.rename_rename
+                }
                 if ( ! $move ) {
                     // Cleanup temp file on failure.
-                    $wp_filesystem->delete( $temp_path );
+                    if ( isset( $wp_filesystem ) && is_object( $wp_filesystem ) ) {
+                        @$wp_filesystem->delete( $temp_path ); // phpcs:ignore WordPress.PHP.NoSilencedErrors.Discouraged
+                    } else {
+                        @unlink( $temp_path ); // phpcs:ignore WordPress.PHP.NoSilencedErrors.Discouraged,WordPress.WP.AlternativeFunctions.unlink_unlink
+                    }
                 }
                 return (bool) $move;
@@ -722 +772 @@
 
             // Fallback if filesystem is unavailable.
-            return rename( $temp_path, $file_path ); // phpcs:ignore WordPress.WP.AlternativeFunctions.rename_rename
+            return @rename( $temp_path, $file_path ); // phpcs:ignore WordPress.PHP.NoSilencedErrors.Discouraged,WordPress.WP.AlternativeFunctions.rename_rename
         }
     }

0-day-analytics/tags/4.2.0/classes/vendor/helpers/class-settings.php

@@ -824 +824 @@
                                 $_FILES[ self::SETTINGS_FILE_FIELD ] = array();
                             } else {
-                                global $wp_filesystem;
-                                if ( null === $wp_filesystem ) {
-                                    \WP_Filesystem(); }
-                                $path = \sanitize_text_field( \wp_unslash( $_FILES[ self::SETTINGS_FILE_FIELD ]['tmp_name'] ) );
-                                if ( $wp_filesystem->exists( $path ) ) {
-                                    $options = json_decode( $wp_filesystem->get_contents( $path ), true );
+                                $path    = \sanitize_text_field( \wp_unslash( $_FILES[ self::SETTINGS_FILE_FIELD ]['tmp_name'] ) );
+                                $content = '';
+
+                                // Try WP_Filesystem first; fall back to native PHP on failure.
+                                try {
+                                    global $wp_filesystem;
+                                    if ( ! isset( $wp_filesystem ) || ! is_object( $wp_filesystem ) ) {
+                                        \WP_Filesystem();
+                                    }
+                                    if ( isset( $wp_filesystem ) && is_object( $wp_filesystem ) && $wp_filesystem->exists( $path ) ) {
+                                        $tmp = $wp_filesystem->get_contents( $path );
+                                        if ( false !== $tmp && '' !== $tmp ) {
+                                            $content = (string) $tmp;
+                                        }
+                                    }
+                                } catch ( \Throwable $e ) {
+                                    // Ignore and fall back below.
+                                }
+
+                                if ( '' === $content && \is_readable( $path ) ) {
+                                    $content = @file_get_contents( $path ); // phpcs:ignore WordPress.PHP.NoSilencedErrors.Discouraged,WordPress.WP.AlternativeFunctions.file_get_contents_file_get_contents
+                                }
+
+                                $options = array();
+                                if ( is_string( $content ) && '' !== $content ) {
+                                    $options = json_decode( $content, true );
                                 }
                                 if ( ! is_array( $options ) ) {
-                                    $options = array(); }
+                                    $options = array();
+                                }
                                 if ( ! empty( $options ) ) {
                                     \remove_filter( 'sanitize_option_' . ADVAN_SETTINGS_NAME, array( self::class, 'collect_and_sanitize_options' ) );

0-day-analytics/tags/4.2.0/classes/vendor/helpers/class-system-analytics.php

@@ -327 +327 @@
 
         /**
+         * Check if a path is allowed by open_basedir restrictions.
+         *
+         * @param string $path The path to check.
+         *
+         * @return bool
+         *
+         * @since 4.2.0
+         */
+        public static function is_allowed_by_open_base_dir( string $path ): bool {
+            $ob = ini_get( 'open_basedir' );
+            if ( ! $ob ) {
+                return true; // no restrictions.
+            }
+
+            $allowed = explode( PATH_SEPARATOR, $ob );
+
+            $real = @realpath( $path );
+            if ( false === $real ) {
+                return false;
+            }
+
+            foreach ( $allowed as $dir ) {
+                $dir = rtrim( $dir, '/' );
+                if ( strpos( $real, $dir ) === 0 ) {
+                    return true;
+                }
+            }
+            return false;
+        }
+
+        /**
          * Returns the disk usage
          *
@@ -335 +366 @@
         public static function get_disk_usage() {
             $total = @disk_total_space( '/' );
-            $free  = @disk_free_space( '/' );
+            if ( self::is_allowed_by_open_base_dir( '/' ) ) {
+                $free = @disk_free_space( '/' );
+            }
             if ( $total && $free ) {
                 $used = 100 - ( ( $free / $total ) * 100 );

0-day-analytics/tags/4.2.0/classes/vendor/helpers/class-wp-error-handler.php

@@ -259 +259 @@
          */
         public static function trigger_error( $status, string $function_name, $errstr, $version, $errno = E_USER_NOTICE ) {
-
             if ( false === $status ) {
                 return $status;

0-day-analytics/tags/4.2.0/classes/vendor/lists/class-crons-list.php

@@ -19 +19 @@
 use ADVAN\Helpers\WP_Helper;
 use ADVAN\Helpers\Crons_Helper;
+use ADVAN\Helpers\Plugin_Theme_Helper;
 use ADVAN\Lists\Views\Crons_View;
 use ADVAN\Lists\Traits\List_Trait;
@@ -57 +58 @@
         public const CRON_MENU_SLUG = 'advan_cron_jobs';
 
+        public const PLUGIN_FILTER_ACTION = self::PAGE_SLUG . '_filter_plugin';
+
+        public const SITE_FILTER_ACTION = self::PAGE_SLUG . '_filter_site';
+
         /**
          * Format for the file link.
@@ -166 +171 @@
             \add_action( 'admin_post_' . self::UPDATE_ACTION, array( Crons_View::class, 'update_cron' ) );
             \add_action( 'admin_post_' . self::NEW_ACTION, array( Crons_View::class, 'new_cron' ) );
+            \add_action( 'admin_post_' . self::PLUGIN_FILTER_ACTION, array( Crons_View::class, 'plugin_filter_action' ) );
+            \add_action( 'admin_post_' . self::SITE_FILTER_ACTION, array( Crons_View::class, 'site_filter_action' ) );
         }
 
@@ -193 +200 @@
 
             \add_action( 'load-' . $cron_hook, array( Settings::class, 'aadvana_common_help' ) );
+            // Process actions early to avoid header warnings on redirects.
+            \add_action( 'load-' . $cron_hook, array( self::class, 'process_actions_load' ) );
 
             /* Crons end */
+        }
+
+        /**
+         * Handle cron table actions on the early page load hook.
+         *
+         * @return void
+         *
+         * @since 4.2.0
+         */
+        public static function process_actions_load() {
+            if ( ! \current_user_can( 'manage_options' ) ) {
+                return;
+            }
+            $table = new self( array() );
+            $table->handle_table_actions();
         }
 
@@ -247 +271 @@
             );
 
+            // Insert site column for multisite network admins for clarity.
+            if ( function_exists( 'is_multisite' ) && is_multisite() && current_user_can( 'manage_network' ) ) {
+                $admin_fields = array(
+                    'cb'         => $admin_fields['cb'],
+                    'hook'       => $admin_fields['hook'],
+                    'site'       => __( 'Site', '0-day-analytics' ),
+                    'schedule'   => $admin_fields['schedule'],
+                    'recurrence' => $admin_fields['recurrence'],
+                    'args'       => $admin_fields['args'],
+                    'actions'    => $admin_fields['actions'],
+                );
+            }
+
             $screen_options = $admin_fields;
 
@@ -273 +310 @@
             $sortable              = $this->get_sortable_columns();
             $this->_column_headers = array( $columns, $hidden, $sortable );
-
-            $this->handle_table_actions();
 
             $this->fetch_table_data();
@@ -394 +429 @@
             }
 
+            // Plugin filtering (only when not requesting unfiltered set for counts).
+            $site_filter = ( isset( $_REQUEST['site'] ) && '' !== trim( (string) $_REQUEST['site'] ) && -1 !== (int) $_REQUEST['site'] ) ? (int) sanitize_text_field( wp_unslash( $_REQUEST['site'] ) ) : -1;
+            if ( -1 !== $site_filter && function_exists( 'is_multisite' ) && is_multisite() ) {
+                self::$read_items = Crons_Helper::get_events_for_site( $site_filter );
+            }
+
+            if ( isset( $_REQUEST['plugin'] ) && '' !== trim( (string) $_REQUEST['plugin'] ) && -1 !== (int) $_REQUEST['plugin'] ) {
+                $plugin_filter    = sanitize_text_field( wp_unslash( $_REQUEST['plugin'] ) );
+                self::$read_items = array_filter(
+                    self::$read_items,
+                    function ( $event ) use ( $plugin_filter ) {
+                        if ( isset( $event['plugin_slugs'] ) && is_array( $event['plugin_slugs'] ) ) {
+                            return in_array( $plugin_filter, $event['plugin_slugs'], true );
+                        }
+                        return ( isset( $event['plugin_slug'] ) && '' !== $event['plugin_slug'] && $event['plugin_slug'] === $plugin_filter );
+                    }
+                );
+            }
+
             if ( ! $no_type_filtering ) {
                 if ( ! empty( $_REQUEST['event_type'] ) && is_string( $_REQUEST['event_type'] ) ) {
@@ -442 +496 @@
         public static function format_column_value( $item, $column_name ) {
             switch ( $column_name ) {
+                case 'site':
+                    if ( isset( $item['site_id'] ) ) {
+                        $site_id   = (int) $item['site_id'];
+                        $site_name = isset( $item['site_name'] ) ? $item['site_name'] : '';
+                        return '<code>' . esc_html( $site_id ) . '</code> ' . ( ! empty( $site_name ) ? esc_html( $site_name ) : '' );
+                    }
+                    return esc_html__( 'N/A', '0-day-analytics' );
                 case 'hook':
                     $query_args_view_data             = array();
@@ -902 +963 @@
                 ?>
                 <div class="alignleft actions">
+                    <?php
+                    // Plugin dropdown.
+                    $selected_plugin    = ( isset( $_REQUEST['plugin'] ) && '' !== trim( (string) $_REQUEST['plugin'] ) ) ? ( ( -1 === (int) $_REQUEST['plugin'] ) ? -1 : sanitize_text_field( wp_unslash( $_REQUEST['plugin'] ) ) ) : -1;
+                    $selected_site      = ( isset( $_REQUEST['site'] ) && '' !== trim( (string) $_REQUEST['site'] ) ) ? ( ( -1 === (int) $_REQUEST['site'] ) ? -1 : (int) sanitize_text_field( wp_unslash( $_REQUEST['site'] ) ) ) : -1;
+                    $plugins_dropdown   = self::get_plugins_dropdown( $selected_plugin, $which );
+                        $sites_dropdown = self::get_sites_dropdown( $selected_site, $which );
+                    if ( ! empty( $plugins_dropdown ) ) {
+                        echo $plugins_dropdown; // phpcs:ignore WordPress.Security.EscapeOutput.OutputNotEscaped
+                        if ( ! empty( $sites_dropdown ) ) {
+                            echo $sites_dropdown; // phpcs:ignore WordPress.Security.EscapeOutput.OutputNotEscaped
+                            ?>
+                            <script>
+                            jQuery(document).ready(function(){
+                                jQuery('form .site_filter').on('change', function(){
+                                    jQuery('form .site_filter').val(jQuery(this).val());
+                                    jQuery(this).closest('form')
+                                        .attr('action','<?php echo esc_url( admin_url( 'admin-post.php' ) ); ?>')
+                                        .append('<input type="hidden" name="action" value="<?php echo esc_attr( self::SITE_FILTER_ACTION ); ?>">')
+                                        .append('<?php wp_nonce_field( self::SITE_FILTER_ACTION, self::SITE_FILTER_ACTION . 'nonce' ); ?>')
+                                        .submit();
+                                });
+                            });
+                            </script>
+                            <?php
+                        }
+                        ?>
+
+                        <script>
+                        jQuery(document).ready(function(){
+                            jQuery('form .plugin_filter').on('change', function(){
+                                jQuery('form .plugin_filter').val(jQuery(this).val());
+                                jQuery(this).closest('form')
+                                    .attr('action','<?php echo esc_url( admin_url( 'admin-post.php' ) ); ?>')
+                                    .append('<input type="hidden" name="action" value="<?php echo esc_attr( self::PLUGIN_FILTER_ACTION ); ?>">')
+                                    .append('<?php wp_nonce_field( self::PLUGIN_FILTER_ACTION, self::PLUGIN_FILTER_ACTION . 'nonce' ); ?>')
+                                    .submit();
+                            });
+                        });
+                        </script>
+                        <?php
+                    }
+                    ?>
                     <select class="schedules-filter" name="schedules_filter">
                     <?php
@@ -927 +1030 @@
                 <div id="export-form">
                     <div>
-                        <button id="start-export" class="button" data-type-export="cron">
+                        <button id="start-export" class="button" data-type-export="cron" data-plugin_filter="<?php echo esc_attr( $selected_plugin ); ?>" data-site_filter="<?php echo esc_attr( $selected_site ); ?>">
                             <?php echo esc_html__( 'CSV Export', '0-day-analytics' ); ?>
                         </button>
@@ -1369 +1472 @@
             return $filtered;
         }
+
+        /**
+         * Builds sites dropdown (multisite only) listing all sites (optionally only those having cron events).
+         *
+         * @param int    $selected Selected site id or -1.
+         * @param string $which  Position top|bottom.
+         * @return string
+         */
+        public static function get_sites_dropdown( $selected = -1, string $which = 'top' ): string {
+            if ( ! function_exists( 'is_multisite' ) || ! is_multisite() ) {
+                return '';
+            }
+            if ( ! current_user_can( 'manage_network' ) ) {
+                return '';
+            }
+            $which = in_array( $which, array( 'top', 'bottom' ), true ) ? $which : 'top';
+            $sites = get_sites( array( 'number' => 0 ) );
+            if ( empty( $sites ) ) {
+                return '';
+            }
+            $output  = '<select class="site_filter" name="site_' . esc_attr( $which ) . '" id="site_' . esc_attr( $which ) . '">';
+            $output .= '<option value="-1">' . __( 'All sites', '0-day-analytics' ) . '</option>';
+            foreach ( $sites as $site ) {
+                $blog_id = (int) $site->blog_id;
+                $details = get_blog_details( $blog_id );
+                $name    = ( $details && isset( $details->blogname ) ) ? $details->blogname : 'Site ' . $blog_id;
+                $sel     = ( (int) $selected === $blog_id ) ? ' selected' : '';
+                $output .= '<option value="' . esc_attr( $blog_id ) . '"' . $sel . '>' . esc_html( $name ) . '</option>';
+            }
+            $output .= '</select>';
+            return $output;
+        }
+
+        /**
+         * Builds plugins dropdown based on detected plugin slugs from cron callbacks.
+         *
+         * @param string|int $selected Currently selected plugin slug or -1 for all.
+         * @param string     $which    Position (top|bottom) for unique element naming.
+         *
+         * @return string HTML select or empty string if no plugins detected.
+         */
+        public static function get_plugins_dropdown( $selected = -1, $which = 'top' ): string {
+            $which = in_array( $which, array( 'top', 'bottom' ), true ) ? $which : 'top';
+
+            $all_events = self::get_cron_items( true );
+            $plugins    = array();
+            foreach ( $all_events as $event ) {
+                if ( isset( $event['plugin_slugs'] ) && is_array( $event['plugin_slugs'] ) ) {
+                    foreach ( $event['plugin_slugs'] as $slug ) {
+                        if ( ! empty( $slug ) ) {
+                            $plugins[ $slug ] = $slug;
+                        }
+                    }
+                } elseif ( isset( $event['plugin_slug'] ) && '' !== $event['plugin_slug'] ) {
+                    $plugins[ $event['plugin_slug'] ] = $event['plugin_slug'];
+                }
+            }
+
+            if ( empty( $plugins ) ) {
+                return '';
+            }
+
+            $output  = '<select class="plugin_filter" name="plugin_' . esc_attr( $which ) . '" id="plugin_' . esc_attr( $which ) . '">';
+            $output .= '<option value="-1">' . __( 'All plugins', '0-day-analytics' ) . '</option>';
+            foreach ( $plugins as $slug ) {
+                $details  = Plugin_Theme_Helper::get_plugin_from_path( $slug );
+                $name     = ( isset( $details['Name'] ) && ! empty( $details['Name'] ) ) ? $details['Name'] : $slug;
+                $sel_attr = ( (string) $selected === (string) $slug ) ? ' selected' : '';
+                $output  .= '<option value="' . esc_attr( $slug ) . '"' . $sel_attr . '>' . esc_html( $name ) . '</option>';
+            }
+            $output .= '</select>';
+
+            return $output;
+        }
     }
 }

0-day-analytics/tags/4.2.0/classes/vendor/lists/class-fatals-list.php

@@ -17 +17 @@
 use ADVAN\Helpers\Settings;
 use ADVAN\Helpers\WP_Helper;
-use ADVAN\Helpers\File_Helper;
 use ADVAN\Helpers\Miscellaneous;
 use ADVAN\Lists\Traits\List_Trait;
@@ -184 +183 @@
 
             \add_action( 'load-' . $fatals_hook, array( Settings::class, 'aadvana_common_help' ) );
+            // Process actions early to allow safe redirects before any output.
+            \add_action( 'load-' . $fatals_hook, array( self::class, 'process_actions_load' ) );
+        }
+
+        /**
+         * Handle bulk and row actions during the early page load hook.
+         *
+         * @return void
+         *
+         * @since 4.2.0
+         */
+        public static function process_actions_load() {
+            if ( ! \current_user_can( 'manage_options' ) ) {
+                return;
+            }
+            $table = new self( '' );
+            $table->handle_table_actions();
         }
 
@@ -205 +221 @@
          */
         public function prepare_items() {
-            $this->handle_table_actions();
+            // Actions are processed during load-<hook> to avoid header warnings.
 
             $per_page = self::get_screen_option_per_page();
@@ -855 +871 @@
                         <?php } ?>
                 <div class="flex flex-row grow-0 p-2 w-full border-0 border-t border-solid justify-between">
-                    <div class=""> <?php \esc_html_e( 'Size: ', '0-day-analytics' ); ?> <?php echo \esc_attr( File_Helper::show_size( Common_Table::get_table_size() ) ); ?>
+                    <div class=""> <?php \esc_html_e( 'Size: ', '0-day-analytics' ); ?> <?php echo \esc_attr( \size_format( Common_Table::get_table_size() ) ); ?>
 
                         <?php

0-day-analytics/tags/4.2.0/classes/vendor/lists/class-requests-list.php

@@ -17 +17 @@
 use ADVAN\Helpers\Settings;
 use ADVAN\Helpers\WP_Helper;
-use ADVAN\Helpers\File_Helper;
 use ADVAN\Helpers\Miscellaneous;
 use ADVAN\Lists\Traits\List_Trait;
@@ -203 +202 @@
 
             \add_action( 'load-' . $requests_hook, array( Settings::class, 'aadvana_common_help' ) );
+            // Process any actions early to allow safe redirects before output.
+            \add_action( 'load-' . $requests_hook, array( self::class, 'process_actions_load' ) );
+        }
+
+        /**
+         * Handle actions on the early page load hook to avoid header issues.
+         *
+         * @return void
+         *
+         * @since 4.2.0
+         */
+        public static function process_actions_load() {
+            if ( ! \current_user_can( 'manage_options' ) ) {
+                return;
+            }
+            $table = new self( '' );
+            $table->handle_table_actions();
         }
 
@@ -224 +240 @@
          */
         public function prepare_items() {
-            $this->handle_table_actions();
+            // Actions are processed during load-<hook> to avoid late redirects.
             $per_page = self::get_screen_option_per_page();
 
@@ -957 +973 @@
                         <?php } ?>
                 <div class="flex flex-row grow-0 p-2 w-full border-0 border-t border-solid justify-between">
-                    <div class=""> <?php \esc_html_e( 'Size: ', '0-day-analytics' ); ?> <?php echo \esc_attr( File_Helper::show_size( Common_Table::get_table_size() ) ); ?>
+                    <div class=""> <?php \esc_html_e( 'Size: ', '0-day-analytics' ); ?> <?php echo \esc_attr( \size_format( Common_Table::get_table_size() ) ); ?>
 
                         <?php

0-day-analytics/tags/4.2.0/classes/vendor/lists/class-table-list.php

@@ -17 +17 @@
 use ADVAN\Helpers\Settings;
 use ADVAN\Helpers\WP_Helper;
-use ADVAN\Helpers\File_Helper;
 use ADVAN\Helpers\Miscellaneous;
 use ADVAN\Lists\Views\Table_View;
@@ -164 +163 @@
             // \add_filter( 'manage_' . $table_hook . '_columns', array( Table_List::class, 'manage_columns' ) );
 
+            // Process bulk/table actions early on page load before any output.
+            \add_action( 'load-' . $table_hook, array( __CLASS__, 'process_actions_load' ), 5 );
+
             \add_action( 'load-' . $table_hook, array( Settings::class, 'aadvana_common_help' ) );
+        }
+
+        /**
+         * Runs table actions during the load-<hook> phase to avoid premature output.
+         *
+         * @return void
+         *
+         * @since 4.2.0
+         */
+        public static function process_actions_load() {
+            if ( ! \is_user_logged_in() || ! \current_user_can( 'manage_options' ) ) {
+                return;
+            }
+
+            $table_name      = Common_Table::get_default_table();
+            $requested_table = isset( $_REQUEST['show_table'] ) ? \sanitize_key( \wp_unslash( $_REQUEST['show_table'] ) ) : '';
+            if ( $requested_table && \in_array( $requested_table, Common_Table::get_tables(), true ) ) {
+                $table_name = $requested_table;
+            }
+
+            // Instantiate and process actions. Redirects will exit before any output.
+            $table = new self( $table_name );
+            $table->handle_table_actions();
         }
 
@@ -186 +211 @@
          */
         public function prepare_items() {
-            $this->handle_table_actions();
 
             $per_page = self::get_screen_option_per_page();
@@ -932 +956 @@
                         <?php } ?>
                 <div class="flex flex-row grow-0 p-2 w-full border-0 border-t border-solid justify-between">
-                    <div class=""> <?php \esc_html_e( 'Size: ', '0-day-analytics' ); ?> <?php echo \esc_attr( File_Helper::show_size( Common_Table::get_table_size() ) ); ?>
+                    <div class=""> <?php \esc_html_e( 'Size: ', '0-day-analytics' ); ?> <?php echo \esc_attr( \size_format( Common_Table::get_table_size() ) ); ?>
 
                     <?php
@@ -971 +995 @@
                     </div>
                     <div>
-                        <b><?php \esc_html_e( 'Schema: ', '0-day-analytics' ); ?></b> <span class="italic"><?php echo \esc_attr( $wpdb->dbname ); ?></span> | <b><?php \esc_html_e( 'Tables: ', '0-day-analytics' ); ?></b><span class="italic"><?php echo \esc_attr( count( Common_Table::get_tables() ) ); ?></span>
+                        <b><?php \esc_html_e( 'Schema: ', '0-day-analytics' ); ?></b> <span class="italic"><?php echo \esc_attr( defined( 'DB_NAME' ) ? DB_NAME : '' ); ?></span> | <b><?php \esc_html_e( 'Tables: ', '0-day-analytics' ); ?></b><span class="italic"><?php echo \esc_attr( count( Common_Table::get_tables() ) ); ?></span>
                     </div>
                 </div>

0-day-analytics/tags/4.2.0/classes/vendor/lists/class-transients-list.php

@@ -187 +187 @@
             \add_filter( 'manage_' . $transients_hook . '_columns', array( self::class, 'manage_columns' ) );
 
-            \add_action( 'load-' . $transients_hook, array( Settings::class, 'aadvana_common_help' ) );
+                    \add_action( 'load-' . $transients_hook, array( Settings::class, 'aadvana_common_help' ) );
+                    // Process bulk/table actions early before any output.
+                    \add_action( 'load-' . $transients_hook, array( self::class, 'process_actions_load' ) );
+        }
+
+        /**
+         * Handle any table actions during the early page load hook to allow safe redirects.
+         *
+         * @return void
+         * 
+         * @since 4.2.0
+         */
+        public static function process_actions_load() {
+            if ( ! \current_user_can( 'manage_options' ) ) {
+                return;
+            }
+            $table = new self( array() );
+            $table->handle_table_actions();
         }
 
@@ -303 +320 @@
                 )
             );
-
             $hidden = \get_user_option( 'manage' . WP_Helper::get_wp_screen()->id . 'columnshidden', false );
             if ( ! $hidden ) {
@@ -611 +627 @@
 
                     \wp_safe_redirect( $redirect );
+                    exit;
                 }
             }

0-day-analytics/tags/4.2.0/classes/vendor/lists/class-wp-mail-list.php

@@ -17 +17 @@
 use ADVAN\Helpers\Settings;
 use ADVAN\Helpers\WP_Helper;
-use ADVAN\Helpers\File_Helper;
 use ADVAN\Entities_Global\Common_Table;
 use ADVAN\Controllers\WP_Mail_Log;
@@ -61 +60 @@
         public const SITE_ID_FILTER_ACTION = 'filter_site_id';
 
+        public const PLUGIN_FILTER_ACTION = self::PAGE_SLUG . '_filter_plugin';
+
         /**
          * The table to show
@@ -160 +161 @@
             \add_action( 'admin_post_' . self::NEW_ACTION, array( WP_Mail_View::class, 'new_mail' ) );
             \add_action( 'admin_post_' . self::SITE_ID_FILTER_ACTION, array( WP_Mail_View::class, 'site_id_filter_action' ) );
+            \add_action( 'admin_post_' . self::PLUGIN_FILTER_ACTION, array( WP_Mail_View::class, 'plugin_filter_action' ) );
             \add_filter( 'advan_cron_hooks', array( __CLASS__, 'add_cron_job' ) );
         }
@@ -218 +220 @@
 
             \add_action( 'load-' . $wp_mail_hook, array( Settings::class, 'aadvana_common_help' ) );
+            // Process actions early to ensure redirects happen before output.
+            \add_action( 'load-' . $wp_mail_hook, array( self::class, 'process_actions_load' ) );
+        }
+
+        /**
+         * Handle actions during the early page load hook to avoid header warnings.
+         *
+         * @return void
+         *
+         * @since 4.2.0
+         */
+        public static function process_actions_load() {
+            if ( ! \current_user_can( 'manage_options' ) ) {
+                return;
+            }
+            $table = new self( '' );
+            $table->handle_table_actions();
         }
 
@@ -239 +258 @@
          */
         public function prepare_items() {
-            $this->handle_table_actions();
+            // Actions are processed on load-<hook> to prevent late redirects.
 
             // Vars.
@@ -252 +271 @@
             $type = ! empty( $_GET['mail_type'] ) ? \sanitize_text_field( \wp_unslash( $_GET['mail_type'] ) ) : '';
 
+            if ( isset( $_REQUEST['plugin'] ) && ! empty( $_REQUEST['plugin'] ) ) {
+                if ( -1 === (int) $_REQUEST['plugin'] ) {
+                    $plugin = -1;
+                } else {
+                    $plugin = \sanitize_text_field( \wp_unslash( $_REQUEST['plugin'] ) );
+                }
+            } else {
+                $plugin = '';
+            }
+
             if ( isset( $_REQUEST['site_id'] ) && ! empty( $_REQUEST['site_id'] ) ) {
                 if ( -1 === (int) $_REQUEST['site_id'] ) {
@@ -275 +304 @@
                     'type'     => $type,
                     'site_id'  => $site_id,
+                    'plugin'   => $plugin,
                 )
             );
@@ -372 +402 @@
                     'count'    => false,
                     'site_id'  => '',
+                    'plugin'   => '',
                 )
             );
@@ -394 +425 @@
             $site_id       = \sanitize_text_field( \wp_unslash( (string) $parsed_args['site_id'] ) );
             $type          = \sanitize_text_field( \wp_unslash( $parsed_args['type'] ?? '' ) );
+            $plugin        = \sanitize_text_field( \wp_unslash( (string) ( $parsed_args['plugin'] ?? '' ) ) );
 
             if ( '' !== $search_string ) {
@@ -433 +465 @@
                     $where_parts[] = 'AND attachments != "[]"';
                 }
+            }
+
+            if ( '' !== $plugin && -1 !== (int) $plugin ) {
+                $where_parts[] = 'AND plugin_slug = %s';
+                $where_args[]  = $plugin;
             }
 
@@ -1035 +1072 @@
         public function extra_tablenav( $which ) {
 
+            // Plugin filter dropdown (mirrors Requests list behavior).
+            if ( isset( $_REQUEST['plugin'] ) && ! empty( $_REQUEST['plugin'] ) ) {
+                if ( -1 === (int) $_REQUEST['plugin'] ) {
+                    $plugin = -1;
+                } else {
+                    $plugin = \sanitize_text_field( \wp_unslash( $_REQUEST['plugin'] ) );
+                }
+            } else {
+                $plugin = 0;
+            }
+            ?>
+                <div class="alignleft actions bulkactions">
+                    <?php echo WP_Mail_Entity::get_all_plugins_dropdown( $plugin, $which ); ?>
+                </div>
+                <script>
+                    jQuery('form .plugin_filter').on('change', function(e) {
+                        jQuery('form .plugin_filter').val(jQuery(this).val());
+                        jQuery( this ).closest( 'form' )
+                            .attr( 'action', '<?php echo \esc_url( \admin_url( 'admin-post.php' ) ); ?>')
+                            .append('<input type="hidden" name="action" value="<?php echo \esc_attr( self::PLUGIN_FILTER_ACTION ); ?>">')
+                            .append('<input type="hidden" name="context" value="<?php echo \esc_attr( ( \is_network_admin() ) ? 'network' : 'site' ); ?>">')
+                            .append('<?php \wp_nonce_field( self::PLUGIN_FILTER_ACTION, self::PLUGIN_FILTER_ACTION . 'nonce' ); ?>')
+                            .submit();
+                    });
+                </script>
+            <?php
+
             if ( WP_Helper::is_multisite() ) {
                 if ( isset( $_REQUEST['site_id'] ) && ! empty( $_REQUEST['site_id'] ) ) {
@@ -1057 +1121 @@
                 ?>
                 <div class="alignleft actions bulkactions">
-                    
                     <?php echo WP_Mail_Entity::get_all_sites_dropdown( $site_id, $which ); ?>
-                    
                 </div>
                 <script>
@@ -1073 +1135 @@
                 <div id="export-form">
                     <div>
-                        <button id="start-export" class="button" data-type-export="mail" data-search="<?php echo self::escaped_search_input(); ?>">
+                        <button id="start-export" class="button" data-type-export="mail" data-search="<?php echo self::escaped_search_input(); ?>" data-plugin="<?php echo \esc_attr( isset( $plugin ) ? (string) $plugin : '' ); ?>">
                             <?php echo \esc_html__( 'CSV Export', '0-day-analytics' ); ?>
                         </button>
@@ -1112 +1174 @@
             <?php } ?>
                 <div class="flex flex-row grow-0 p-2 w-full border-0 border-t border-solid justify-between">
-                    <div class=""> <?php \esc_html_e( 'Size: ', '0-day-analytics' ); ?> <?php echo \esc_attr( File_Helper::show_size( Common_Table::get_table_size() ) ); ?>
+                    <div class=""> <?php \esc_html_e( 'Size: ', '0-day-analytics' ); ?> <?php echo \esc_attr( \size_format( Common_Table::get_table_size() ) ); ?>
 
                         <?php

0-day-analytics/tags/4.2.0/classes/vendor/lists/views/class-crons-view.php

@@ -128 +128 @@
                                 '<input type="hidden" name="event_type" value="%s"/>',
                                 \esc_attr( isset( $_REQUEST['event_type'] ) ? \sanitize_text_field( \wp_unslash( $_REQUEST['event_type'] ) ) : '' )
+                            );
+                            printf(
+                                '<input type="hidden" name="plugin" value="%s"/>',
+                                \esc_attr( isset( $_REQUEST['plugin'] ) ? \sanitize_text_field( \wp_unslash( $_REQUEST['plugin'] ) ) : '' )
+                            );
+                            printf(
+                                '<input type="hidden" name="site" value="%s"/>',
+                                \esc_attr( isset( $_REQUEST['site'] ) ? \sanitize_text_field( \wp_unslash( $_REQUEST['site'] ) ) : '' )
                             );
                             ?>
@@ -200 +208 @@
                                 \esc_attr( isset( $_REQUEST['event_type'] ) ? \sanitize_text_field( \wp_unslash( $_REQUEST['event_type'] ) ) : '' )
                             );
+                            printf(
+                                '<input type="hidden" name="plugin" value="%s"/>',
+                                \esc_attr( isset( $_REQUEST['plugin'] ) ? \sanitize_text_field( \wp_unslash( $_REQUEST['plugin'] ) ) : '' )
+                            );
                         ?>
                         <?php \wp_nonce_field( Crons_List::NONCE_NAME ); ?>
@@ -302 +314 @@
                         \esc_attr( isset( $_REQUEST['event_type'] ) ? \sanitize_text_field( \wp_unslash( $_REQUEST['event_type'] ) ) : '' )
                     );
+                    printf(
+                        '<input type="hidden" name="plugin" value="%s"/>',
+                        \esc_attr( isset( $_REQUEST['plugin'] ) ? \sanitize_text_field( \wp_unslash( $_REQUEST['plugin'] ) ) : '' )
+                    );
+                    printf(
+                        '<input type="hidden" name="site" value="%s"/>',
+                        \esc_attr( isset( $_REQUEST['site'] ) ? \sanitize_text_field( \wp_unslash( $_REQUEST['site'] ) ) : '' )
+                    );
+                    printf(
+                        '<input type="hidden" name="site" value="%s"/>',
+                        \esc_attr( isset( $_REQUEST['site'] ) ? \sanitize_text_field( \wp_unslash( $_REQUEST['site'] ) ) : '' )
+                    );
 
                 ?>
@@ -399 +423 @@
             exit;
         }
+
+        /**
+         * Handles plugin dropdown filter submission for cron list.
+         *
+         * @return void
+         */
+        public static function plugin_filter_action() {
+            if ( isset( $_REQUEST['plugin_top'] ) || isset( $_REQUEST['plugin_bottom'] ) ) {
+                if ( \check_admin_referer( Crons_List::PLUGIN_FILTER_ACTION, Crons_List::PLUGIN_FILTER_ACTION . 'nonce' ) ) {
+                    $plugin = isset( $_REQUEST['plugin_top'] ) ? \sanitize_text_field( \wp_unslash( $_REQUEST['plugin_top'] ) ) : \sanitize_text_field( \wp_unslash( $_REQUEST['plugin_bottom'] ) );
+
+                    \wp_safe_redirect(
+                        \remove_query_arg(
+                            array( 'deleted' ),
+                            \add_query_arg(
+                                array(
+                                    'page'       => Crons_List::CRON_MENU_SLUG,
+                                    Crons_List::SEARCH_INPUT => Crons_List::escaped_search_input(),
+                                    'plugin'     => rawurlencode( $plugin ),
+                                    'site'       => ( isset( $_REQUEST['site'] ) ? rawurlencode( sanitize_text_field( wp_unslash( $_REQUEST['site'] ) ) ) : '' ),
+                                    'event_type' => ( isset( $_REQUEST['event_type'] ) ? \sanitize_text_field( \wp_unslash( $_REQUEST['event_type'] ) ) : '' ),
+                                    'schedules_filter' => ( isset( $_REQUEST['schedules_filter'] ) ? \sanitize_text_field( \wp_unslash( $_REQUEST['schedules_filter'] ) ) : '' ),
+                                ),
+                                \admin_url( 'admin.php' )
+                            )
+                        )
+                    );
+                    exit;
+                }
+            }
+        }
+
+        /**
+         * Handles site filter submission for cron list.
+         *
+         * @return void
+         */
+        public static function site_filter_action() {
+            // Only network admins can filter by site.
+            if ( ! ( function_exists( 'is_multisite' ) && is_multisite() && current_user_can( 'manage_network' ) ) ) {
+                return;
+            }
+            if ( isset( $_REQUEST['site_top'] ) || isset( $_REQUEST['site_bottom'] ) ) {
+                if ( \check_admin_referer( Crons_List::SITE_FILTER_ACTION, Crons_List::SITE_FILTER_ACTION . 'nonce' ) ) {
+                    $site = isset( $_REQUEST['site_top'] ) ? \sanitize_text_field( \wp_unslash( $_REQUEST['site_top'] ) ) : \sanitize_text_field( \wp_unslash( $_REQUEST['site_bottom'] ) );
+                    \wp_safe_redirect(
+                        \remove_query_arg(
+                            array( 'deleted' ),
+                            \add_query_arg(
+                                array(
+                                    'page'       => Crons_List::CRON_MENU_SLUG,
+                                    Crons_List::SEARCH_INPUT => Crons_List::escaped_search_input(),
+                                    'site'       => rawurlencode( $site ),
+                                    'plugin'     => ( isset( $_REQUEST['plugin'] ) ? rawurlencode( sanitize_text_field( wp_unslash( $_REQUEST['plugin'] ) ) ) : '' ),
+                                    'event_type' => ( isset( $_REQUEST['event_type'] ) ? \sanitize_text_field( \wp_unslash( $_REQUEST['event_type'] ) ) : '' ),
+                                    'schedules_filter' => ( isset( $_REQUEST['schedules_filter'] ) ? \sanitize_text_field( \wp_unslash( $_REQUEST['schedules_filter'] ) ) : '' ),
+                                ),
+                                \admin_url( 'admin.php' )
+                            )
+                        )
+                    );
+                    exit;
+                }
+            }
+        }
     }
 }

0-day-analytics/tags/4.2.0/classes/vendor/lists/views/class-fatals-view.php

@@ -506 +506 @@
         public static function page_load() {
             if ( ! empty( $_GET['_wp_http_referer'] ) ) {
-                \wp_redirect(
+                \wp_safe_redirect(
                     \remove_query_arg( array( '_wp_http_referer', 'bulk_action' ), \wp_unslash( $_SERVER['REQUEST_URI'] ) )
                 );

0-day-analytics/tags/4.2.0/classes/vendor/lists/views/class-requests-view.php

@@ -651 +651 @@
         public static function page_load() {
             if ( ! empty( $_GET['_wp_http_referer'] ) ) {
-                \wp_redirect(
+                \wp_safe_redirect(
                     \remove_query_arg( array( '_wp_http_referer', 'bulk_action' ), \wp_unslash( $_SERVER['REQUEST_URI'] ) )
                 );

0-day-analytics/tags/4.2.0/classes/vendor/lists/views/class-table-view.php

@@ -45 +45 @@
                 \wp_die( \esc_html__( 'You do not have permission to manage tables.', '0-day-analytics' ) );
             }
+
+            // Determine requested table early so we can process actions before any output.
+            $table_name      = Common_Table::get_default_table();
+            $requested_table = isset( $_REQUEST['show_table'] ) ? \sanitize_key( \wp_unslash( $_REQUEST['show_table'] ) ) : '';
+            if ( $requested_table && \in_array( $requested_table, Common_Table::get_tables(), true ) ) {
+                $table_name = $requested_table;
+            }
+
+            // Instantiate list table and process bulk actions BEFORE any output to avoid header issues.
+            $table = new Table_List( $table_name );
+
+            // Enqueue assets and render after potential redirects are processed.
             \add_thickbox();
             \wp_enqueue_style( 'media-views' );
@@ -60 +72 @@
             </script>
             <?php
-
-            $table_name      = Common_Table::get_default_table();
-            $requested_table = isset( $_REQUEST['show_table'] ) ? \sanitize_key( \wp_unslash( $_REQUEST['show_table'] ) ) : '';
-            if ( $requested_table && \in_array( $requested_table, Common_Table::get_tables(), true ) ) {
-                $table_name = $requested_table;
-            }
 
             $action = ! empty( $_REQUEST['action'] ) // phpcs:ignore WordPress.Security.NonceVerification.Recommended
@@ -202 +208 @@
             } else {
 
-                $table = new Table_List( $table_name );
                 $table->prepare_items();
                 $core_table = '';
@@ -725 +730 @@
         public static function page_load() {
             if ( ! empty( $_GET['_wp_http_referer'] ) ) {
-                \wp_redirect(
+                \wp_safe_redirect(
                     \remove_query_arg( array( '_wp_http_referer' ), \wp_unslash( $_SERVER['REQUEST_URI'] ) )
                 );

0-day-analytics/tags/4.2.0/classes/vendor/lists/views/class-wp-mail-view.php

@@ -795 +795 @@
             }
         }
+
+        /**
+         * Responsible for filtering table by plugin slug.
+         *
+         * @return void
+         *
+         * @since 4.1.1
+         */
+        public static function plugin_filter_action() {
+
+            if ( isset( $_REQUEST['plugin_top'] ) || isset( $_REQUEST['plugin_filter_bottom'] ) ) {
+
+                if ( \check_admin_referer( WP_Mail_List::PLUGIN_FILTER_ACTION, WP_Mail_List::PLUGIN_FILTER_ACTION . 'nonce' ) ) {
+                    $id = \sanitize_text_field( \wp_unslash( $_REQUEST['plugin_top'] ) ); // phpcs:ignore WordPress.Security.NonceVerification.Recommended
+
+                    $context    = isset( $_REQUEST['context'] ) ? \sanitize_text_field( $_REQUEST['context'] ) : 'site';
+                    $is_network = ( $context === 'network' && \is_multisite() );
+
+                    \wp_safe_redirect(
+                        \remove_query_arg(
+                            array( 'deleted' ),
+                            \add_query_arg(
+                                array(
+                                    'page'                          => WP_Mail_List::WP_MAIL_MENU_SLUG,
+                                    WP_Mail_List::SEARCH_INPUT       => WP_Mail_List::escaped_search_input(),
+                                    'plugin'                        => rawurlencode( $id ),
+                                ),
+                                ( ( $is_network ) ? \network_admin_url( 'admin.php' ) : \admin_url( 'admin.php' ) )
+                            )
+                        )
+                    );
+                    exit;
+                }
+            }
+        }
     }
 }

0-day-analytics/tags/4.2.0/classes/vendor/views/class-file-editor.php

@@ -298 +298 @@
                         </div>
                     </div>
+                    <div class="wfe-resizer" role="separator" aria-label="Resize sidebar" aria-orientation="vertical" tabindex="0"></div>
 
                     <div class="wfe-editor-area">
@@ -489 +490 @@
                 }
                 $path    = $real . \DIRECTORY_SEPARATOR . $file;
+                $type    = is_dir( $path ) ? 'dir' : 'file';
+                $display = $file;
+                if ( 'file' === $type ) {
+                    $size     = @filesize( $path );
+                    if ( false !== $size ) {
+                        $display .= ' (' . \size_format( (int) $size ) . ')';
+                    }
+                }
                 $items[] = array(
-                    'name' => $file,
+                    'name' => $display,
                     'path' => $path,
-                    'type' => is_dir( $path ) ? 'dir' : 'file',
+                    'type' => $type,
                 );
             }
@@ -763 +772 @@
             \wp_send_json_success( array( 'diff' => $diff ) );
         }
+
+        /**
+         * AJAX: Downloads a regular file (not backup)
+         *
+         * @return void
+         *
+         * @since 4.1.1
+         */
+        public static function ajax_download_file() {
+            WP_Helper::verify_admin_nonce( 'advan_file_editor_nonce', '_ajax_nonce' );
+
+            $file = \sanitize_text_field( $_GET['file'] ?? '' );
+            $real = self::safe_path( $file );
+            if ( ! $real || ! is_file( $real ) || ! is_readable( $real ) ) {
+                \wp_die( 'Invalid file.' );
+            }
+
+            $filename = basename( $real );
+            header( 'Content-Type: application/octet-stream' );
+            header( 'X-Content-Type-Options: nosniff' );
+            header( 'Content-Disposition: attachment; filename="' . $filename . '"' );
+            header( 'Content-Length: ' . filesize( $real ) );
+            header( 'Cache-Control: no-store, no-cache, must-revalidate, max-age=0' );
+            header( 'Pragma: no-cache' );
+            readfile( $real );
+            exit;
+        }
+
+        /**
+         * AJAX: Renames a file or directory
+         *
+         * @return void
+         *
+         * @since 4.1.1
+         */
+        public static function ajax_rename() {
+            WP_Helper::verify_admin_nonce( 'advan_file_editor_nonce', '_ajax_nonce' );
+
+            $src      = \sanitize_text_field( $_POST['file'] ?? '' );
+            $new_name = \sanitize_file_name( $_POST['new_name'] ?? '' );
+
+            if ( empty( $src ) || empty( $new_name ) ) {
+                \wp_send_json_error( 'Missing parameters.' );
+            }
+
+            $real = self::safe_path( $src );
+            if ( ! $real || ! file_exists( $real ) ) {
+                \wp_send_json_error( 'Source not found.' );
+            }
+
+            $target = dirname( $real ) . \DIRECTORY_SEPARATOR . $new_name;
+            if ( file_exists( $target ) ) {
+                \wp_send_json_error( 'Target exists.' );
+            }
+
+            if ( ! @rename( $real, $target ) ) { // phpcs:ignore WordPress.PHP.NoSilencedErrors.Discouraged
+                \wp_send_json_error( 'Unable to rename.' );
+            }
+
+            \wp_send_json_success( array( 'new_path' => $target, 'new_name' => basename( $target ) ) );
+        }
+
+        /**
+         * AJAX: Duplicates a file or directory
+         *
+         * @return void
+         *
+         * @since 4.1.1
+         */
+        public static function ajax_duplicate() {
+            WP_Helper::verify_admin_nonce( 'advan_file_editor_nonce', '_ajax_nonce' );
+
+            $src = \sanitize_text_field( $_POST['file'] ?? '' );
+            if ( empty( $src ) ) {
+                \wp_send_json_error( 'Missing parameters.' );
+            }
+
+            $real = self::safe_path( $src );
+            if ( ! $real || ! file_exists( $real ) ) {
+                \wp_send_json_error( 'Source not found.' );
+            }
+
+            $is_dir   = is_dir( $real );
+            $dirname  = dirname( $real );
+            $basename = basename( $real );
+
+            // Determine target name.
+            $ext      = '';
+            $name_only = $basename;
+            if ( ! $is_dir && false !== strpos( $basename, '.' ) ) {
+                $parts    = explode( '.', $basename );
+                $ext      = array_pop( $parts );
+                $name_only = implode( '.', $parts );
+            }
+
+            $base_candidate = $name_only . '-copy';
+            $counter        = 1;
+            $target         = '';
+            while ( true ) {
+                $suffix = ( $counter > 1 ) ? '-' . $counter : '';
+                $target_name = $base_candidate . $suffix . ( $is_dir ? '' : ( ( '' !== $ext ) ? '.' . $ext : '' ) );
+                $target      = $dirname . \DIRECTORY_SEPARATOR . $target_name;
+                if ( ! file_exists( $target ) ) {
+                    break;
+                }
+                $counter++;
+            }
+
+            // Perform copy.
+            if ( $is_dir ) {
+                self::recursive_copy( $real, $target );
+            } else {
+                if ( ! @copy( $real, $target ) ) { // phpcs:ignore WordPress.PHP.NoSilencedErrors.Discouraged
+                    \wp_send_json_error( 'Unable to duplicate file.' );
+                }
+            }
+
+            \wp_send_json_success( array( 'new_path' => $target, 'new_name' => basename( $target ) ) );
+        }
+
+        /**
+         * Recursively copies a directory.
+         *
+         * @param string $src Source dir.
+         * @param string $dst Destination dir.
+         *
+         * @return void
+         *
+         * @since 4.1.1
+         */
+        private static function recursive_copy( $src, $dst ) {
+            if ( ! is_dir( $src ) ) {
+                return;
+            }
+            @wp_mkdir_p( $dst );
+            $dir_handle = opendir( $src );
+            if ( false === $dir_handle ) {
+                return;
+            }
+            while ( false !== ( $item = readdir( $dir_handle ) ) ) {
+                if ( '.' === $item || '..' === $item ) {
+                    continue;
+                }
+                $from = $src . \DIRECTORY_SEPARATOR . $item;
+                $to   = $dst . \DIRECTORY_SEPARATOR . $item;
+                if ( is_dir( $from ) ) {
+                    self::recursive_copy( $from, $to );
+                } else {
+                    @copy( $from, $to ); // phpcs:ignore WordPress.PHP.NoSilencedErrors.Discouraged
+                }
+            }
+            closedir( $dir_handle );
+        }
     }
 }

0-day-analytics/tags/4.2.0/css/wfe.css

@@ -7 +7 @@
 .wfe-sidebar {
     width: 280px;
-    /* border-right: 1px solid #ccc; */
     padding-right: 10px;
-    max-height: 80vh;
     background: transparent;
     display: flex;
     flex-direction: column;
     min-height: 30px;
-    resize: both;
     overflow: auto;
-    max-height: fit-content;
-    max-width: fit-content;
+    max-width: 100%;
+    position: relative;
 }
 
@@ -87 +84 @@
     height: 100%;
 }
+.wfe-resizer {
+    width: 6px;
+    cursor: col-resize;
+    background: linear-gradient(to right, #ddd, #bbb);
+    border-left: 1px solid #aaa;
+    border-right: 1px solid #aaa;
+    margin: 0;
+    flex: 0 0 auto;
+}
+.aadvana-darkskin .wfe-resizer {
+    background: linear-gradient(to right, #233445, #1a2734);
+    border-left: 1px solid #2f4a60;
+    border-right: 1px solid #2f4a60;
+}
+.wfe-resizer:hover, .wfe-resizer:focus {
+    background: #92b7dd;
+    outline: none;
+}
+.wfe-resizing {
+    user-select: none !important;
+    cursor: col-resize !important;
+}
+.wfe-context-menu {
+    position: absolute;
+    z-index: 99999;
+    background: #fff;
+    border: 1px solid #ccc;
+    box-shadow: 0 2px 6px rgba(0,0,0,0.15);
+    padding: 4px 0;
+    min-width: 160px;
+    font-size: 13px;
+    border-radius: 4px;
+}
+.wfe-context-menu button {
+    background: none;
+    border: none;
+    width: 100%;
+    text-align: left;
+    padding: 6px 12px;
+    cursor: pointer;
+    font-size: 13px;
+}
+.wfe-context-menu button:hover, .wfe-context-menu button:focus {
+    background: #f0f6ff;
+    outline: none;
+}
+.aadvana-darkskin .wfe-context-menu {
+    background: #13273b;
+    border-color: #2f4a60;
+    box-shadow: 0 2px 6px rgba(0,0,0,0.4);
+}
+.aadvana-darkskin .wfe-context-menu button:hover, .aadvana-darkskin .wfe-context-menu button:focus {
+    background: #1e3e59;
+}
 .wfe-tree {
     border-left: 1px solid #8d7a7a73;
@@ -105 +156 @@
 .wfe-item:hover {
     background: #e2f0ff26;
+}
+.wfe-item.active {
+    background: #c7e3ff;
+    font-weight: 600;
+}
+.aadvana-darkskin .wfe-item.active {
+    background: #1e3e59;
 }
 .toggle {

0-day-analytics/tags/4.2.0/js/admin/wfe.js

@@ -58 +58 @@
     $('#wfe-tree').on('click', '.wfe-item.file', function (e) {
         e.stopPropagation();
-        const path = $(this).data('path');
+        const $li = $(this);
+        const path = $li.data('path');
         currentDir = path.substring(0, path.lastIndexOf('/'));
         $.post(AFE_Ajax.ajax_url, { action: 'advan_file_editor_get_file', file: path, _ajax_nonce: AFE_Ajax.nonce }, (res) => {
@@ -66 +67 @@
                 $('#wfe-filename').text(path);
                 $('#wfe-diff').hide();
+                $('#wfe-tree .wfe-item.file.active').removeClass('active');
+                $li.addClass('active');
                 listBackups();
             } else alert(res.data);
@@ -139 +142 @@
             $('#wfe-filename').text(__('No file selected', '0-day-analytics'));
             editor.setValue('');
+            $('#wfe-tree .wfe-item.file.active').removeClass('active');
         });
     });
@@ -180 +184 @@
         }, (res) => {
             alert(res.success ? '✅ ' + res.data : '❌ ' + res.data);
+            if (res.success && file) {
+                // Reload the file content into the editor to reflect restored version
+                $.post(AFE_Ajax.ajax_url, {
+                    action: 'advan_file_editor_get_file',
+                    file: file,
+                    _ajax_nonce: AFE_Ajax.nonce
+                }, (res2) => {
+                    if (res2.success) {
+                        editor.setValue(res2.data.content);
+                        $('#wfe-diff').hide();
+                    }
+                });
+                // Refresh backups list
+                listBackups();
+            }
         });
     });
@@ -240 +259 @@
         });
     }
+
+    // --- Resizable Sidebar ---
+    const $sidebar = $('.wfe-sidebar');
+    const $resizer = $('.wfe-resizer');
+    const $container = $('.wfe-container');
+    const isReverse = $container.css('flex-direction') === 'row-reverse';
+    const savedWidth = localStorage.getItem('wfeSidebarWidth');
+    if (savedWidth && parseInt(savedWidth, 10) > 0) {
+        $sidebar.css('width', parseInt(savedWidth, 10) + 'px');
+    }
+
+    let startX = 0, startWidth = 0, dragging = false;
+
+    function onMouseMove(e) {
+        if (!dragging) return;
+        const dx = e.pageX - startX;
+        const adjust = isReverse ? -dx : dx; // row-reverse flips direction
+        let newWidth = startWidth + adjust;
+        const min = 160;
+        const max = 720;
+        if (newWidth < min) newWidth = min;
+        if (newWidth > max) newWidth = max;
+        $sidebar.css('width', newWidth + 'px');
+    }
+
+    function stopDrag() {
+        if (!dragging) return;
+        dragging = false;
+        $('body').removeClass('wfe-resizing');
+        $(document).off('mousemove.wfeResize mouseup.wfeResize');
+        const finalWidth = parseInt($sidebar.width(), 10);
+        if (finalWidth) {
+            localStorage.setItem('wfeSidebarWidth', finalWidth);
+        }
+    }
+
+    $resizer.on('mousedown', function (e) {
+        e.preventDefault();
+        startX = e.pageX;
+        startWidth = parseInt($sidebar.width(), 10) || 280;
+        dragging = true;
+        $('body').addClass('wfe-resizing');
+        $(document).on('mousemove.wfeResize', onMouseMove).on('mouseup.wfeResize', stopDrag);
+    });
+
+    // Keyboard accessibility: left/right arrows
+    $resizer.on('keydown', function(e){
+        const key = e.key;
+        let width = parseInt($sidebar.width(), 10) || 280;
+        const step = (e.shiftKey ? 40 : 20);
+        if (key === 'ArrowLeft' || key === 'ArrowRight') {
+            const dirFactor = (key === 'ArrowRight' ? 1 : -1) * (isReverse ? -1 : 1);
+            width += step * dirFactor;
+            if (width < 160) width = 160;
+            if (width > 720) width = 720;
+            $sidebar.css('width', width + 'px');
+            localStorage.setItem('wfeSidebarWidth', width);
+            e.preventDefault();
+        }
+    });
+
+    // --- File Context Menu (Download) ---
+    let $ctxMenu = null;
+    function hideContextMenu(){
+        if($ctxMenu){
+            $ctxMenu.remove();
+            $ctxMenu = null;
+        }
+        // Remove temporary listeners
+        $(document).off('.wfeCtx');
+        $(window).off('.wfeCtx');
+    }
+    function showContextMenu(e, filePath){
+        hideContextMenu();
+        $ctxMenu = $('<div class="wfe-context-menu" role="menu"></div>');
+        // Download
+        const $downloadBtn = $('<button type="button" role="menuitem">⬇️ '+__('Download','0-day-analytics')+'</button>');
+        $downloadBtn.on('click', function(){
+            const url = `${AFE_Ajax.ajax_url}?action=advan_file_editor_download_file&_ajax_nonce=${AFE_Ajax.nonce}&file=${encodeURIComponent(filePath)}`;
+            hideContextMenu();
+            window.location.href = url;
+        });
+        // Rename
+        const $renameBtn = $('<button type="button" role="menuitem">✏️ '+__('Rename','0-day-analytics')+'</button>');
+        $renameBtn.on('click', function(){
+            const currentBase = filePath.substring(filePath.lastIndexOf('/'));
+            const newName = prompt(__('Enter new name:','0-day-analytics'), currentBase.replace('/',''));
+            if(!newName){ return; }
+            $.post(AFE_Ajax.ajax_url, { action:'advan_file_editor_rename', file:filePath, new_name:newName, _ajax_nonce: AFE_Ajax.nonce }, function(res){
+                alert(res.success ? '✅ '+__('Renamed','0-day-analytics') : '❌ '+res.data);
+                if(res.success){
+                    if(currentFile === filePath){
+                        currentFile = res.data.new_path;
+                        $('#wfe-filename').text(res.data.new_path);
+                    }
+                    $('#wfe-tree').empty();
+                    loadDir(AFE_Ajax.base, $('#wfe-tree'));
+                }
+            });
+            hideContextMenu();
+        });
+        // Copy Path
+        const $copyPathBtn = $('<button type="button" role="menuitem">📋 '+__('Copy Path','0-day-analytics')+'</button>');
+        $copyPathBtn.on('click', function(){
+            navigator.clipboard.writeText(filePath).then(()=>{
+                alert('📋 '+__('Path copied','0-day-analytics'));
+            }).catch(()=>{ alert('❌ '+__('Unable to copy path','0-day-analytics')); });
+            hideContextMenu();
+        });
+        // Delete
+        const $deleteBtn = $('<button type="button" role="menuitem">🗑️ '+__('Delete','0-day-analytics')+'</button>');
+        $deleteBtn.on('click', function(){
+            if(!confirm(__('Delete file?','0-day-analytics')+'\n'+filePath)) { return; }
+            $.post(AFE_Ajax.ajax_url, { action:'advan_file_editor_delete', path:filePath, _ajax_nonce:AFE_Ajax.nonce }, function(res){
+                alert(res.success ? '🗑️ '+__('Deleted','0-day-analytics') : '❌ '+res.data);
+                if(res.success){
+                    if(currentFile === filePath){
+                        currentFile = null;
+                        editor.setValue('');
+                        $('#wfe-filename').text(__('No file selected','0-day-analytics'));
+                    }
+                    $('#wfe-tree').empty();
+                    loadDir(AFE_Ajax.base, $('#wfe-tree'));
+                }
+            });
+            hideContextMenu();
+        });
+        // Duplicate
+        const $duplicateBtn = $('<button type="button" role="menuitem">🧬 '+__('Duplicate','0-day-analytics')+'</button>');
+        $duplicateBtn.on('click', function(){
+            $.post(AFE_Ajax.ajax_url, { action:'advan_file_editor_duplicate', file:filePath, _ajax_nonce:AFE_Ajax.nonce }, function(res){
+                alert(res.success ? '🧬 '+__('Duplicated','0-day-analytics')+': '+res.data.new_name : '❌ '+res.data);
+                if(res.success){
+                    $('#wfe-tree').empty();
+                    loadDir(AFE_Ajax.base, $('#wfe-tree'));
+                }
+            });
+            hideContextMenu();
+        });
+        $ctxMenu.append($downloadBtn, $renameBtn, $duplicateBtn, $copyPathBtn, $deleteBtn);
+        $('body').append($ctxMenu);
+        const x = e.pageX;
+        const y = e.pageY;
+        $ctxMenu.css({ top: y + 'px', left: x + 'px' });
+        // Delay binding to avoid immediate self-close from originating event
+        setTimeout(function(){
+            $(document).on('mousedown.wfeCtx', function(ev){
+                if(!$ctxMenu) return;
+                if(!$(ev.target).closest('.wfe-context-menu').length){ hideContextMenu(); }
+            });
+            $(document).on('contextmenu.wfeCtx', function(ev){
+                if(!$ctxMenu) return;
+                if(!$(ev.target).closest('.wfe-context-menu').length){ hideContextMenu(); }
+            });
+            $(document).on('keydown.wfeCtx', function(ev){ if(ev.key === 'Escape'){ hideContextMenu(); } });
+            $(window).on('scroll.wfeCtx resize.wfeCtx', hideContextMenu);
+        },0);
+        // Focus first item for accessibility
+        $downloadBtn.focus();
+    }
+    $('#wfe-tree').on('contextmenu', '.wfe-item.file', function(e){
+        e.preventDefault();
+        const path = $(this).data('path');
+        showContextMenu(e, path);
+    });
+    // Global listeners now added dynamically per open; fallback in case menu injected elsewhere
+    // (No always-on handlers needed here.)
 });

0-day-analytics/tags/4.2.0/readme.txt

@@ -4 +4 @@
 Tested up to: 6.8
 Requires PHP: 7.4
-Stable tag: 4.1.1
+Stable tag: 4.2.0
 License: GPLv3 or later
 License URI: http://www.gnu.org/licenses/gpl-3.0.txt
@@ -114 +114 @@
 == Changelog ==
 
+= 4.2.0 =
+New filters introduced. Code optimizations and bug fixes. File editor extending.
+
 = 4.1.1 =
 Very small maintenance update - optimizations and bug fixes.

0-day-analytics/trunk/advanced-analytics.php

@@ -11 +11 @@
  * Plugin Name:     0 Day Analytics
  * Description:     Take full control of error log, crons, transients, plugins, requests, mails and DB tables.
- * Version:         4.1.1
+ * Version:         4.2.0
  * Author:          Stoil Dobrev
  * Author URI:      https://github.com/sdobreff/
@@ -37 +37 @@
 // Constants.
 if ( ! defined( 'ADVAN_VERSION' ) ) {
-    define( 'ADVAN_VERSION', '4.1.1' );
+    define( 'ADVAN_VERSION', '4.2.0' );
     define( 'ADVAN_TEXTDOMAIN', '0-day-analytics' );
     define( 'ADVAN_NAME', '0 Day Analytics' );
@@ -67 +67 @@
                     sprintf(
                         // translators: the minimum version of the PHP required by the plugin.
-                        __(
+                        \__(
                             '"%1$s" requires PHP %2$s or newer. Plugin is automatically deactivated.',
                             '0-day-analytics'

0-day-analytics/trunk/classes/migration/class-migration.php

@@ -216 +216 @@
             }
         }
+
+        /**
+         * Migrates the plugin up-to version 4.2.0 (adds plugin_slug column to mail log).
+         *
+         * @return void
+         *
+         * @since 4.2.0
+         */
+        public static function migrate_up_to_420() {
+            if ( \class_exists( '\\ADVAN\\Entities\\WP_Mail_Entity' ) ) {
+                if ( Common_Table::check_table_exists( WP_Mail_Entity::get_table_name() ) && ! Common_Table::check_column( 'plugin_slug', 'varchar(255)', WP_Mail_Entity::get_table_name() ) ) {
+                    \ADVAN\Entities\WP_Mail_Entity::alter_table_411();
+                }
+            }
+        }
     }
 }

0-day-analytics/trunk/classes/vendor/controllers/class-wp-mail-log.php

@@ -13 +13 @@
 
 use ADVAN\Entities\WP_Mail_Entity;
+use ADVAN\Helpers\Plugin_Theme_Helper;
 use ADVAN\Helpers\Settings;
 
@@ -123 +124 @@
                     $message = $email_class->get( 'content_plaintext', 'replace-tokens' );
                 }
+                $bt_segment = self::get_backtrace();
+                $plugin_slug = '';
+                if ( isset( $bt_segment['file'] ) ) {
+                    $plugin_base = Plugin_Theme_Helper::get_plugin_from_file_path( $bt_segment['file'] );
+                    if ( $plugin_base ) {
+                        $plugin_slug = $plugin_base;
+                    }
+                }
                 self::$bp_mail = array(
                     'time'               => time(),
@@ -129 +138 @@
                     'message'            => self::filter_html( $message ),
                     'backtrace_segment'  => \wp_json_encode( self::get_backtrace() ),
+                    'plugin_slug'        => $plugin_slug,
                     'status'             => 1,
                     'attachments'        => \wp_json_encode( self::get_attachment_locations( array() ) ),
@@ -150 +160 @@
 
             if ( \is_array( $args ) ) {
+                $bt_segment = self::get_backtrace();
+                $plugin_slug = '';
+                if ( isset( $bt_segment['file'] ) ) {
+                    $plugin_base = Plugin_Theme_Helper::get_plugin_from_file_path( $bt_segment['file'] );
+                    if ( $plugin_base ) {
+                        $plugin_slug = $plugin_base;
+                    }
+                }
                 $log_entry = array(
                     'time'               => time(),
@@ -156 +174 @@
                     'message'            => self::filter_html( $args['message'] ),
                     'backtrace_segment'  => \wp_json_encode( self::get_backtrace() ),
+                    'plugin_slug'        => $plugin_slug,
                     'status'             => 1,
                     'attachments'        => \wp_json_encode( self::get_attachment_locations( $args['attachments'] ) ),
@@ -202 +221 @@
                     $mail_header = $prop->getValue( $phpmailer );
 
+                    $bt_segment = self::get_backtrace();
+                    $plugin_slug = '';
+                    if ( isset( $phpmailer->Backtrace, $phpmailer->Backtrace['file'] ) ) { // phpcs:ignore WordPress.NamingConventions.ValidVariableName.UsedPropertyNotSnakeCase
+                        $plugin_base = Plugin_Theme_Helper::get_plugin_from_file_path( $phpmailer->Backtrace['file'] ); // phpcs:ignore WordPress.NamingConventions.ValidVariableName.UsedPropertyNotSnakeCase
+                        if ( $plugin_base ) {
+                            $plugin_slug = $plugin_base;
+                        }
+                    } elseif ( isset( $bt_segment['file'] ) ) {
+                        $plugin_base = Plugin_Theme_Helper::get_plugin_from_file_path( $bt_segment['file'] );
+                        if ( $plugin_base ) {
+                            $plugin_slug = $plugin_base;
+                        }
+                    }
                     $log_entry = array(
                         'time'               => time(),
@@ -209 +241 @@
                         'message'            => self::filter_html( $phpmailer->Body ), // phpcs:ignore WordPress.NamingConventions.ValidVariableName.UsedPropertyNotSnakeCase
                         'backtrace_segment'  => \wp_json_encode( self::get_backtrace() ),
+                        'plugin_slug'        => $plugin_slug,
                         'status'             => 1,
                         'attachments'        => \wp_json_encode( self::get_attachment_locations( $attachment ) ),

0-day-analytics/trunk/classes/vendor/entities/class-wp-mail-entity.php

@@ -13 +13 @@
 
 use ADVAN\Helpers\WP_Helper;
+use ADVAN\Helpers\Plugin_Theme_Helper;
 use ADVAN\Entities_Global\Common_Table;
 
@@ -54 +55 @@
             'id'                 => 'int',
             'blog_id'            => 'int',
+            'plugin_slug'        => 'string',
             'time'               => 'string',
             'email_to'           => 'string',
@@ -77 +79 @@
             'id'                 => 0,
             'blog_id'            => 0,
+            'plugin_slug'        => '',
             'time'               => '',
             'email_to'           => '',
@@ -115 +118 @@
                 id BIGINT UNSIGNED NOT NULL AUTO_INCREMENT,
                 blog_id INT NOT NULL,
+                plugin_slug VARCHAR(255) DEFAULT NULL,
                 time DOUBLE NOT NULL DEFAULT 0,
                 email_to TEXT DEFAULT NULL,
@@ -168 +172 @@
 
         /**
+         * Adds plugin_slug column (version 4.1.1 migration) capturing originating plugin.
+         *
+         * @return array|bool
+         *
+         * @since 4.1.1
+         */
+        public static function alter_table_411() {
+            $table  = self::get_table_name();
+            $column = 'plugin_slug';
+            if ( self::column_exists( $table, $column ) ) {
+                return true;
+            }
+            $sql = 'ALTER TABLE `' . $table . '` ADD `plugin_slug` VARCHAR(255) DEFAULT NULL AFTER `blog_id`;';
+            return Common_Table::execute_query( $sql );
+        }
+
+        /**
          * Helper to check if a column exists in the given table.
          *
@@ -260 +281 @@
             return $output;
         }
+
+        /**
+         * Generates dropdown with all distinct plugin slugs seen in the mail log.
+         *
+         * @param string $selected The currently selected plugin slug (or -1 for all).
+         * @param string $which    Indicates position of the dropdown (top or bottom).
+         *
+         * @return string Rendered HTML <select> element, or empty string if none.
+         *
+         * @since 4.1.1
+         */
+        public static function get_all_plugins_dropdown( $selected = '', $which = '' ): string {
+            // Restrict visibility to administrators to avoid information disclosure.
+            if ( function_exists( 'current_user_can' ) && ! \current_user_can( 'manage_options' ) ) {
+                return '';
+            }
+
+            $which = in_array( $which, array( 'top', 'bottom' ), true ) ? $which : '';
+
+            // Build cache key per position and selection (reuse sites cache container for simplicity).
+            $cache_key = 'plugins|' . $which . '|' . (string) $selected;
+            if ( isset( self::$drop_down_sites_rendered[ $cache_key ] ) ) {
+                return self::$drop_down_sites_rendered[ $cache_key ];
+            }
+
+            $sql     = 'SELECT plugin_slug FROM ' . self::get_table_name() . ' GROUP BY plugin_slug ORDER BY plugin_slug DESC';
+            $results = self::get_results( $sql );
+            $plugins = array();
+            $output  = '';
+
+            if ( $results ) {
+                foreach ( $results as $result ) {
+                    $slug = isset( $result['plugin_slug'] ) ? trim( (string) $result['plugin_slug'] ) : '';
+                    if ( '' === $slug ) {
+                        continue;
+                    }
+                    $details = Plugin_Theme_Helper::get_plugin_from_path( $slug );
+                    $name    = ( isset( $details['Name'] ) && ! empty( $details['Name'] ) ) ? $details['Name'] : $slug;
+                    $plugins[] = array(
+                        'id'   => $slug,
+                        'name' => $name,
+                    );
+                }
+            }
+
+            if ( ! empty( $plugins ) ) {
+                $output  = '<select class="plugin_filter" name="plugin_' . \esc_attr( $which ) . '" id="plugin_' . \esc_attr( $which ) . '">';
+                $output .= '<option value="-1">' . __( 'All plugins', '0-day-analytics' ) . '</option>';
+                foreach ( $plugins as $plugin_info ) {
+                    $selected_attr = ( isset( $selected ) && '' !== trim( (string) $selected ) && (string) $selected === (string) $plugin_info['id'] ) ? ' selected' : '';
+                    $output       .= '<option value="' . \esc_attr( $plugin_info['id'] ) . '"' . $selected_attr . '>' . \esc_html( $plugin_info['name'] ) . '</option>';
+                }
+                $output .= '</select>';
+            }
+
+            self::$drop_down_sites_rendered[ $cache_key ] = $output;
+            return $output;
+        }
     }
 }

0-day-analytics/trunk/classes/vendor/helpers/class-ajax-helper.php

@@ -171 +171 @@
                     \add_action( 'wp_ajax_advan_file_editor_compare_backup', array( File_Editor::class, 'ajax_compare_backup' ) );
                     \add_action( 'wp_ajax_advan_file_editor_delete_backup', array( File_Editor::class, 'ajax_delete_backup' ) );
+                    // Added download action registration (returns 0 previously when unregistered).
+                    \add_action( 'wp_ajax_advan_file_editor_download_file', array( File_Editor::class, 'ajax_download_file' ) );
+                    // Rename file or directory.
+                    \add_action( 'wp_ajax_advan_file_editor_rename', array( File_Editor::class, 'ajax_rename' ) );
+                    // Duplicate file or directory.
+                    \add_action( 'wp_ajax_advan_file_editor_duplicate', array( File_Editor::class, 'ajax_duplicate' ) );
                 }
             }
@@ -708 +714 @@
             if ( isset( $_POST['typeExport'] ) && ! empty( $_POST['typeExport'] ) ) { // phpcs:ignore WordPress.Security.NonceVerification.Missing
                 if ( 'cron' === $_POST['typeExport'] ) { // phpcs:ignore WordPress.Security.NonceVerification.Missing
-                    $rows  = Crons_List::get_cron_items();
+                    $plugin_filter = ( isset( $_POST['plugin_filter'] ) ? sanitize_text_field( wp_unslash( $_POST['plugin_filter'] ) ) : '' ); // phpcs:ignore WordPress.Security.NonceVerification.Missing
+                    $site_filter   = ( isset( $_POST['site_filter'] ) ? sanitize_text_field( wp_unslash( $_POST['site_filter'] ) ) : '' ); // phpcs:ignore WordPress.Security.NonceVerification.Missing
+                    $rows          = array();
+
+                    if ( '' !== $site_filter && -1 !== (int) $site_filter && function_exists( 'is_multisite' ) && is_multisite() ) {
+                        $rows = Crons_Helper::get_events_for_site( (int) $site_filter );
+                    } else {
+                        $rows = Crons_List::get_cron_items();
+                    }
+
+                    if ( '' !== $plugin_filter && -1 !== (int) $plugin_filter ) {
+                        $rows = array_filter(
+                            $rows,
+                            function ( $row ) use ( $plugin_filter ) {
+                                if ( isset( $row['plugin_slugs'] ) && is_array( $row['plugin_slugs'] ) ) {
+                                    return in_array( $plugin_filter, $row['plugin_slugs'], true );
+                                }
+                                return ( isset( $row['plugin_slug'] ) && '' !== $row['plugin_slug'] && $row['plugin_slug'] === $plugin_filter );
+                            }
+                        );
+                    }
+                    $total = count( $rows );
                     $rows  = \array_slice( $rows, $offset, $batch_size, true );
-                    $total = count( $rows );
                 }
                 if ( 'logs' === $_POST['typeExport'] ) { // phpcs:ignore WordPress.Security.NonceVerification.Missing
@@ -768 +794 @@
                 if ( 'mail' === $_POST['typeExport'] ) { // phpcs:ignore WordPress.Security.NonceVerification.Missing
 
-                    $list_table      = new WP_Mail_List();
-                    $search          = isset( $_POST['search'] ) ? sanitize_text_field( wp_unslash( $_POST['search'] ) ) : ''; // phpcs:ignore WordPress.Security.NonceVerification.Missing
+                    $list_table = new WP_Mail_List();
+                    $search     = isset( $_POST['search'] ) ? sanitize_text_field( wp_unslash( $_POST['search'] ) ) : ''; // phpcs:ignore WordPress.Security.NonceVerification.Missing
+                    $plugin     = isset( $_POST['plugin'] ) ? sanitize_text_field( wp_unslash( $_POST['plugin'] ) ) : ''; // phpcs:ignore WordPress.Security.NonceVerification.Missing
+
                     $extra_file_name = '_' . str_replace( ' ', '_', $list_table->get_table_name() ) . '_';
+                    if ( ! empty( $plugin ) && -1 !== (int) $plugin ) {
+                        $extra_file_name .= $plugin . '_';
+                    }
 
                     $rows = $list_table->fetch_table_data(
@@ -779 +810 @@
                             'site_id'  => '',
                             'search'   => $search,
+                            'plugin'   => $plugin,
                         )
                     );

0-day-analytics/trunk/classes/vendor/helpers/class-crons-helper.php

@@ -15 +15 @@
 
 use ADVAN\Lists\Crons_List;
+use ADVAN\Helpers\Plugin_Theme_Helper;
 
 // Exit if accessed directly.
@@ -263 +264 @@
                             continue;
                         }
-                        foreach ( $cron as $hook => $events ) {
-                            foreach ( $events as $event ) {
-
-                                $cron_item = array();
-
-                                $cron_item['hook']     = \esc_html( $hook );
-                                $cron_item['schedule'] = $timestamp;
-                                if ( isset( $event['schedule'] ) ) {
-                                    $cron_item['recurrence'] = \esc_html( $event['schedule'] );
+                            foreach ( $cron as $hook => $events ) {
+                                foreach ( $events as $event ) {
+
+                                    $cron_item = array();
+
+                                    $cron_item['hook']     = \esc_html( $hook );
+                                    $cron_item['schedule'] = $timestamp;
+                                    if ( isset( $event['schedule'] ) ) {
+                                        $cron_item['recurrence'] = \esc_html( $event['schedule'] );
+                                    }
+                                    if ( isset( $event['args'] ) ) {
+                                        $cron_item['args'] = $event['args'];
+                                    }
+
+                                    $cron_item['hash'] = substr( md5( $cron_item['hook'] . $cron_item['recurrence'] . $cron_item['schedule'] . \wp_json_encode( $event['args'] ) ), 0, 8 );
+
+                                    // Site metadata for multisite clarity.
+                                    $cron_item['site_id']   = function_exists( 'get_current_blog_id' ) ? get_current_blog_id() : 1;
+                                    $cron_item['site_name'] = ( function_exists( 'get_bloginfo' ) ) ? get_bloginfo( 'name' ) : '';
+
+                                    // Derive all plugin slugs from callback files (multi-plugin aggregation).
+                                    $callbacks    = self::get_cron_callbacks( $hook );
+                                    $plugin_slugs = array();
+                                    if ( ! empty( $callbacks ) ) {
+                                        foreach ( $callbacks as $cb ) {
+                                            if ( isset( $cb['callback']['file'] ) && ! empty( $cb['callback']['file'] ) ) {
+                                                $slug = Plugin_Theme_Helper::get_plugin_from_file_path( (string) $cb['callback']['file'] );
+                                                if ( false !== $slug && ! in_array( $slug, $plugin_slugs, true ) ) {
+                                                    $plugin_slugs[] = (string) $slug;
+                                                }
+                                            }
+                                        }
+                                    }
+                                    // Backward compatibility single slug (first) & full list.
+                                    $cron_item['plugin_slug']  = isset( $plugin_slugs[0] ) ? $plugin_slugs[0] : '';
+                                    $cron_item['plugin_slugs'] = $plugin_slugs; // empty array signifies core/unknown.
+
+                                    self::$events[ $cron_item['hash'] ] = $cron_item;
                                 }
-                                if ( isset( $event['args'] ) ) {
-                                    $cron_item['args'] = $event['args'];
-                                }
-
-                                $cron_item['hash'] = substr( md5( $cron_item['hook'] . $cron_item['recurrence'] . $cron_item['schedule'] . \wp_json_encode( $event['args'] ) ), 0, 8 );
                             }
-                            self::$events[ $cron_item['hash'] ] = $cron_item;
-                        }
                     }
                 }
@@ -286 +309 @@
 
             return self::$events;
+        }
+
+        /**
+         * Returns the cron events for a specific site in a multisite installation.
+         * Safely switches to the blog, collects events, then restores.
+         *
+         * @param int $blog_id Site (blog) ID.
+         * @return array
+         */
+        public static function get_events_for_site( int $blog_id ): array {
+            if ( ! function_exists( 'is_multisite' ) || ! is_multisite() ) {
+                return self::get_events();
+            }
+
+            $original = get_current_blog_id();
+            if ( $original === $blog_id ) {
+                return self::get_events();
+            }
+
+            // Switch, clear cache, collect, restore and clear again to avoid bleed.
+            switch_to_blog( $blog_id );
+            self::$events = null;
+            $events      = self::get_events();
+            restore_current_blog();
+            self::$events = null; // ensure subsequent calls on original blog re-fetch.
+
+            return $events;
         }
 
@@ -566 +616 @@
             }
 
-            if ( defined( 'ALTERNATE_WP_CRON' ) && \ALTERNATE_WP_CRON ) {
+            if ( defined( 'ALTERNATE_WP_CRON' ) && constant( 'ALTERNATE_WP_CRON' ) ) {
                 return new \WP_Error(
                     'advana_cron_info',

0-day-analytics/trunk/classes/vendor/helpers/class-file-helper.php

@@ -28 +28 @@
 
         /**
+         * Try to initialize and return WP_Filesystem instance.
+         *
+         * @return null|\WP_Filesystem_Base Null when unavailable or failed to initialize.
+         *
+         * @since 4.1.2
+         */
+        private static function get_wp_filesystem() {
+            global $wp_filesystem;
+
+            // Attempt to bootstrap the WP_Filesystem API.
+            if ( ! function_exists( '\\WP_Filesystem' ) ) {
+                require_once ABSPATH . 'wp-admin/includes/file.php';
+            }
+
+            try {
+                // Initialize if not already.
+                if ( ! isset( $wp_filesystem ) || ! is_object( $wp_filesystem ) ) {
+                    \WP_Filesystem();
+                }
+            } catch ( \Throwable $e ) {
+                // Initialization failed, fall back to native PHP.
+                return null;
+            }
+
+            return ( isset( $wp_filesystem ) && is_object( $wp_filesystem ) ) ? $wp_filesystem : null;
+        }
+
+        /**
+         * Native PHP file writer with append support and locking.
+         *
+         * @param string $file_path Absolute path to file.
+         * @param string $content   Content to write.
+         * @param bool   $append    Append instead of overwrite.
+         *
+         * @return bool True on success.
+         *
+         * @since 4.1.2
+         */
+        private static function native_put_contents( string $file_path, string $content, bool $append = false ): bool {
+            $flags = LOCK_EX;
+            if ( $append ) {
+                $flags |= FILE_APPEND;
+            }
+            $bytes = @file_put_contents( $file_path, $content, $flags ); // phpcs:ignore WordPress.PHP.NoSilencedErrors.Discouraged,WordPress.WP.AlternativeFunctions.file_system_operations_file_put_contents
+            return ( false !== $bytes );
+        }
+
+        /**
          * Normalize a filesystem path in a cross-platform way.
          *
@@ -117 +165 @@
          */
         public static function write_to_file( string $filename, string $content, bool $append = false ): bool {
-            global $wp_filesystem;
-
-            require_once ABSPATH . 'wp-admin/includes/file.php';
-            WP_Filesystem();
-
             $logging_dir = dirname( $filename );
 
@@ -132 +175 @@
             }
 
-            $result = false;
-
+            // Ensure destination directory exists, try WP first then native.
             if ( ! is_dir( $logging_dir ) ) {
-                if ( false === \wp_mkdir_p( $logging_dir ) ) {
+                if ( ! function_exists( '\\wp_mkdir_p' ) ) {
+                    require_once ABSPATH . 'wp-admin/includes/file.php';
+                }
+                $made_dir = false;
+                try {
+                    $made_dir = \wp_mkdir_p( $logging_dir );
+                } catch ( \Throwable $e ) {
+                    $made_dir = false;
+                }
+                if ( ! $made_dir ) {
+                    $made_dir = @mkdir( $logging_dir, 0755, true ); // phpcs:ignore WordPress.PHP.NoSilencedErrors.Discouraged,WordPress.WP.AlternativeFunctions.mkdir_directoryPermissions
+                }
+                if ( ! $made_dir ) {
                     self::$last_error = new \WP_Error(
                         'mkdir_failed',
@@ -144 +198 @@
                         )
                     );
-
-                    return $result;
+                    return false;
                 }
             }
@@ -157 +210 @@
             }
 
-            // Fix append logic: only append if requested and file exists.
-            if ( $append && $wp_filesystem->exists( $file_path ) ) {
-                $existing_content = $wp_filesystem->get_contents( $file_path );
-                $result           = $wp_filesystem->put_contents( $file_path, $existing_content . $content );
-            } else {
-                $result = $wp_filesystem->put_contents( $file_path, $content );
+            // Try WP_Filesystem first.
+            $result = false;
+            $fs     = self::get_wp_filesystem();
+            if ( $fs ) {
+                try {
+                    if ( $append && $fs->exists( $file_path ) ) {
+                        $existing_content = $fs->get_contents( $file_path );
+                        if ( false === $existing_content ) {
+                            $existing_content = '';
+                        }
+                        $result = (bool) $fs->put_contents( $file_path, $existing_content . $content );
+                    } else {
+                        $result = (bool) $fs->put_contents( $file_path, $content );
+                    }
+                } catch ( \Throwable $e ) {
+                    $result = false; // Will fall back below.
+                }
+            }
+
+            // Fall back to native PHP functions if WP_Filesystem path failed or unavailable.
+            if ( false === $result ) {
+                $result = self::native_put_contents( $file_path, $content, $append );
             }
 
@@ -174 +243 @@
                     )
                 );
-            }
-
-            // Best-effort permission hardening (may not work on all FS abstractions).
-            if ( $result ) {
-                // Best effort tighten file perms; ignore if FS abstraction disallows.
-                @chmod( $file_path, 0640 ); // phpcs:ignore WordPress.PHP.NoSilencedErrors.Discouraged,WordPress.WP.AlternativeFunctions.file_system_operations_chmod
-            }
-
-            return (bool) $result;
+                return false;
+            }
+
+            // Best-effort permission hardening.
+            @chmod( $file_path, 0640 ); // phpcs:ignore WordPress.PHP.NoSilencedErrors.Discouraged,WordPress.WP.AlternativeFunctions.file_system_operations_chmod
+
+            return true;
         }
 
@@ -211 +278 @@
                 $size = filesize( $filename );
 
-                return self::show_size( $size );
-            }
-
-            return '0 B';
-        }
-
-        /**
-         * Shows formatted (human readable) size
-         *
-         * @param int $size - The size (in bytes) to format.
-         *
-         * @return string
-         *
-         * @since 2.1.2
-         */
-        public static function show_size( $size ) {
-
-            if ( 0 <= $size ) {
-
-                $units          = array( 'B', 'KB', 'MB', 'GB', 'TB' );
-                $formatted_size = $size;
-                $i              = 0; // Initialize to avoid undefined index when size < 1024.
-
-                $units_length = count( $units ) - 1;
-
-                for ( $i = 0; $size >= 1024 && $i < $units_length; $i++ ) {
-                    $size          /= 1024;
-                    $formatted_size = round( $size, 2 );
-                }
-
-                return $formatted_size . ' ' . $units[ $i ];
+                return \size_format( $size );
             }
 
@@ -287 +324 @@
 
             // Resolve and validate path against allowed base directory.
-            $allowed_base      = apply_filters( ADVAN_TEXTDOMAIN . 'download_base_dir', WP_CONTENT_DIR );
+            $allowed_base      = \apply_filters( ADVAN_TEXTDOMAIN . 'download_base_dir', WP_CONTENT_DIR );
             $real_allowed_base = realpath( $allowed_base );
             $real_requested    = realpath( $file_path );
@@ -713 +750 @@
             \WP_Filesystem();
             if ( isset( $wp_filesystem ) && is_object( $wp_filesystem ) ) {
-                $move = $wp_filesystem->move( $temp_path, $file_path, true );
+                $move = false;
+                try {
+                    $move = $wp_filesystem->move( $temp_path, $file_path, true );
+                } catch ( \Throwable $e ) {
+                    $move = false;
+                }
+                if ( ! $move ) {
+                    // Try native rename as a fallback when WP_Filesystem move fails.
+                    $move = @rename( $temp_path, $file_path ); // phpcs:ignore WordPress.PHP.NoSilencedErrors.Discouraged,WordPress.WP.AlternativeFunctions.rename_rename
+                }
                 if ( ! $move ) {
                     // Cleanup temp file on failure.
-                    $wp_filesystem->delete( $temp_path );
+                    if ( isset( $wp_filesystem ) && is_object( $wp_filesystem ) ) {
+                        @$wp_filesystem->delete( $temp_path ); // phpcs:ignore WordPress.PHP.NoSilencedErrors.Discouraged
+                    } else {
+                        @unlink( $temp_path ); // phpcs:ignore WordPress.PHP.NoSilencedErrors.Discouraged,WordPress.WP.AlternativeFunctions.unlink_unlink
+                    }
                 }
                 return (bool) $move;
@@ -722 +772 @@
 
             // Fallback if filesystem is unavailable.
-            return rename( $temp_path, $file_path ); // phpcs:ignore WordPress.WP.AlternativeFunctions.rename_rename
+            return @rename( $temp_path, $file_path ); // phpcs:ignore WordPress.PHP.NoSilencedErrors.Discouraged,WordPress.WP.AlternativeFunctions.rename_rename
         }
     }

0-day-analytics/trunk/classes/vendor/helpers/class-settings.php

@@ -824 +824 @@
                                 $_FILES[ self::SETTINGS_FILE_FIELD ] = array();
                             } else {
-                                global $wp_filesystem;
-                                if ( null === $wp_filesystem ) {
-                                    \WP_Filesystem(); }
-                                $path = \sanitize_text_field( \wp_unslash( $_FILES[ self::SETTINGS_FILE_FIELD ]['tmp_name'] ) );
-                                if ( $wp_filesystem->exists( $path ) ) {
-                                    $options = json_decode( $wp_filesystem->get_contents( $path ), true );
+                                $path    = \sanitize_text_field( \wp_unslash( $_FILES[ self::SETTINGS_FILE_FIELD ]['tmp_name'] ) );
+                                $content = '';
+
+                                // Try WP_Filesystem first; fall back to native PHP on failure.
+                                try {
+                                    global $wp_filesystem;
+                                    if ( ! isset( $wp_filesystem ) || ! is_object( $wp_filesystem ) ) {
+                                        \WP_Filesystem();
+                                    }
+                                    if ( isset( $wp_filesystem ) && is_object( $wp_filesystem ) && $wp_filesystem->exists( $path ) ) {
+                                        $tmp = $wp_filesystem->get_contents( $path );
+                                        if ( false !== $tmp && '' !== $tmp ) {
+                                            $content = (string) $tmp;
+                                        }
+                                    }
+                                } catch ( \Throwable $e ) {
+                                    // Ignore and fall back below.
+                                }
+
+                                if ( '' === $content && \is_readable( $path ) ) {
+                                    $content = @file_get_contents( $path ); // phpcs:ignore WordPress.PHP.NoSilencedErrors.Discouraged,WordPress.WP.AlternativeFunctions.file_get_contents_file_get_contents
+                                }
+
+                                $options = array();
+                                if ( is_string( $content ) && '' !== $content ) {
+                                    $options = json_decode( $content, true );
                                 }
                                 if ( ! is_array( $options ) ) {
-                                    $options = array(); }
+                                    $options = array();
+                                }
                                 if ( ! empty( $options ) ) {
                                     \remove_filter( 'sanitize_option_' . ADVAN_SETTINGS_NAME, array( self::class, 'collect_and_sanitize_options' ) );

0-day-analytics/trunk/classes/vendor/helpers/class-system-analytics.php

@@ -327 +327 @@
 
         /**
+         * Check if a path is allowed by open_basedir restrictions.
+         *
+         * @param string $path The path to check.
+         *
+         * @return bool
+         *
+         * @since 4.2.0
+         */
+        public static function is_allowed_by_open_base_dir( string $path ): bool {
+            $ob = ini_get( 'open_basedir' );
+            if ( ! $ob ) {
+                return true; // no restrictions.
+            }
+
+            $allowed = explode( PATH_SEPARATOR, $ob );
+
+            $real = @realpath( $path );
+            if ( false === $real ) {
+                return false;
+            }
+
+            foreach ( $allowed as $dir ) {
+                $dir = rtrim( $dir, '/' );
+                if ( strpos( $real, $dir ) === 0 ) {
+                    return true;
+                }
+            }
+            return false;
+        }
+
+        /**
          * Returns the disk usage
          *
@@ -335 +366 @@
         public static function get_disk_usage() {
             $total = @disk_total_space( '/' );
-            $free  = @disk_free_space( '/' );
+            if ( self::is_allowed_by_open_base_dir( '/' ) ) {
+                $free = @disk_free_space( '/' );
+            }
             if ( $total && $free ) {
                 $used = 100 - ( ( $free / $total ) * 100 );

0-day-analytics/trunk/classes/vendor/helpers/class-wp-error-handler.php

@@ -259 +259 @@
          */
         public static function trigger_error( $status, string $function_name, $errstr, $version, $errno = E_USER_NOTICE ) {
-
             if ( false === $status ) {
                 return $status;

0-day-analytics/trunk/classes/vendor/lists/class-crons-list.php

@@ -19 +19 @@
 use ADVAN\Helpers\WP_Helper;
 use ADVAN\Helpers\Crons_Helper;
+use ADVAN\Helpers\Plugin_Theme_Helper;
 use ADVAN\Lists\Views\Crons_View;
 use ADVAN\Lists\Traits\List_Trait;
@@ -57 +58 @@
         public const CRON_MENU_SLUG = 'advan_cron_jobs';
 
+        public const PLUGIN_FILTER_ACTION = self::PAGE_SLUG . '_filter_plugin';
+
+        public const SITE_FILTER_ACTION = self::PAGE_SLUG . '_filter_site';
+
         /**
          * Format for the file link.
@@ -166 +171 @@
             \add_action( 'admin_post_' . self::UPDATE_ACTION, array( Crons_View::class, 'update_cron' ) );
             \add_action( 'admin_post_' . self::NEW_ACTION, array( Crons_View::class, 'new_cron' ) );
+            \add_action( 'admin_post_' . self::PLUGIN_FILTER_ACTION, array( Crons_View::class, 'plugin_filter_action' ) );
+            \add_action( 'admin_post_' . self::SITE_FILTER_ACTION, array( Crons_View::class, 'site_filter_action' ) );
         }
 
@@ -193 +200 @@
 
             \add_action( 'load-' . $cron_hook, array( Settings::class, 'aadvana_common_help' ) );
+            // Process actions early to avoid header warnings on redirects.
+            \add_action( 'load-' . $cron_hook, array( self::class, 'process_actions_load' ) );
 
             /* Crons end */
+        }
+
+        /**
+         * Handle cron table actions on the early page load hook.
+         *
+         * @return void
+         *
+         * @since 4.2.0
+         */
+        public static function process_actions_load() {
+            if ( ! \current_user_can( 'manage_options' ) ) {
+                return;
+            }
+            $table = new self( array() );
+            $table->handle_table_actions();
         }
 
@@ -247 +271 @@
             );
 
+            // Insert site column for multisite network admins for clarity.
+            if ( function_exists( 'is_multisite' ) && is_multisite() && current_user_can( 'manage_network' ) ) {
+                $admin_fields = array(
+                    'cb'         => $admin_fields['cb'],
+                    'hook'       => $admin_fields['hook'],
+                    'site'       => __( 'Site', '0-day-analytics' ),
+                    'schedule'   => $admin_fields['schedule'],
+                    'recurrence' => $admin_fields['recurrence'],
+                    'args'       => $admin_fields['args'],
+                    'actions'    => $admin_fields['actions'],
+                );
+            }
+
             $screen_options = $admin_fields;
 
@@ -273 +310 @@
             $sortable              = $this->get_sortable_columns();
             $this->_column_headers = array( $columns, $hidden, $sortable );
-
-            $this->handle_table_actions();
 
             $this->fetch_table_data();
@@ -394 +429 @@
             }
 
+            // Plugin filtering (only when not requesting unfiltered set for counts).
+            $site_filter = ( isset( $_REQUEST['site'] ) && '' !== trim( (string) $_REQUEST['site'] ) && -1 !== (int) $_REQUEST['site'] ) ? (int) sanitize_text_field( wp_unslash( $_REQUEST['site'] ) ) : -1;
+            if ( -1 !== $site_filter && function_exists( 'is_multisite' ) && is_multisite() ) {
+                self::$read_items = Crons_Helper::get_events_for_site( $site_filter );
+            }
+
+            if ( isset( $_REQUEST['plugin'] ) && '' !== trim( (string) $_REQUEST['plugin'] ) && -1 !== (int) $_REQUEST['plugin'] ) {
+                $plugin_filter    = sanitize_text_field( wp_unslash( $_REQUEST['plugin'] ) );
+                self::$read_items = array_filter(
+                    self::$read_items,
+                    function ( $event ) use ( $plugin_filter ) {
+                        if ( isset( $event['plugin_slugs'] ) && is_array( $event['plugin_slugs'] ) ) {
+                            return in_array( $plugin_filter, $event['plugin_slugs'], true );
+                        }
+                        return ( isset( $event['plugin_slug'] ) && '' !== $event['plugin_slug'] && $event['plugin_slug'] === $plugin_filter );
+                    }
+                );
+            }
+
             if ( ! $no_type_filtering ) {
                 if ( ! empty( $_REQUEST['event_type'] ) && is_string( $_REQUEST['event_type'] ) ) {
@@ -442 +496 @@
         public static function format_column_value( $item, $column_name ) {
             switch ( $column_name ) {
+                case 'site':
+                    if ( isset( $item['site_id'] ) ) {
+                        $site_id   = (int) $item['site_id'];
+                        $site_name = isset( $item['site_name'] ) ? $item['site_name'] : '';
+                        return '<code>' . esc_html( $site_id ) . '</code> ' . ( ! empty( $site_name ) ? esc_html( $site_name ) : '' );
+                    }
+                    return esc_html__( 'N/A', '0-day-analytics' );
                 case 'hook':
                     $query_args_view_data             = array();
@@ -902 +963 @@
                 ?>
                 <div class="alignleft actions">
+                    <?php
+                    // Plugin dropdown.
+                    $selected_plugin    = ( isset( $_REQUEST['plugin'] ) && '' !== trim( (string) $_REQUEST['plugin'] ) ) ? ( ( -1 === (int) $_REQUEST['plugin'] ) ? -1 : sanitize_text_field( wp_unslash( $_REQUEST['plugin'] ) ) ) : -1;
+                    $selected_site      = ( isset( $_REQUEST['site'] ) && '' !== trim( (string) $_REQUEST['site'] ) ) ? ( ( -1 === (int) $_REQUEST['site'] ) ? -1 : (int) sanitize_text_field( wp_unslash( $_REQUEST['site'] ) ) ) : -1;
+                    $plugins_dropdown   = self::get_plugins_dropdown( $selected_plugin, $which );
+                        $sites_dropdown = self::get_sites_dropdown( $selected_site, $which );
+                    if ( ! empty( $plugins_dropdown ) ) {
+                        echo $plugins_dropdown; // phpcs:ignore WordPress.Security.EscapeOutput.OutputNotEscaped
+                        if ( ! empty( $sites_dropdown ) ) {
+                            echo $sites_dropdown; // phpcs:ignore WordPress.Security.EscapeOutput.OutputNotEscaped
+                            ?>
+                            <script>
+                            jQuery(document).ready(function(){
+                                jQuery('form .site_filter').on('change', function(){
+                                    jQuery('form .site_filter').val(jQuery(this).val());
+                                    jQuery(this).closest('form')
+                                        .attr('action','<?php echo esc_url( admin_url( 'admin-post.php' ) ); ?>')
+                                        .append('<input type="hidden" name="action" value="<?php echo esc_attr( self::SITE_FILTER_ACTION ); ?>">')
+                                        .append('<?php wp_nonce_field( self::SITE_FILTER_ACTION, self::SITE_FILTER_ACTION . 'nonce' ); ?>')
+                                        .submit();
+                                });
+                            });
+                            </script>
+                            <?php
+                        }
+                        ?>
+
+                        <script>
+                        jQuery(document).ready(function(){
+                            jQuery('form .plugin_filter').on('change', function(){
+                                jQuery('form .plugin_filter').val(jQuery(this).val());
+                                jQuery(this).closest('form')
+                                    .attr('action','<?php echo esc_url( admin_url( 'admin-post.php' ) ); ?>')
+                                    .append('<input type="hidden" name="action" value="<?php echo esc_attr( self::PLUGIN_FILTER_ACTION ); ?>">')
+                                    .append('<?php wp_nonce_field( self::PLUGIN_FILTER_ACTION, self::PLUGIN_FILTER_ACTION . 'nonce' ); ?>')
+                                    .submit();
+                            });
+                        });
+                        </script>
+                        <?php
+                    }
+                    ?>
                     <select class="schedules-filter" name="schedules_filter">
                     <?php
@@ -927 +1030 @@
                 <div id="export-form">
                     <div>
-                        <button id="start-export" class="button" data-type-export="cron">
+                        <button id="start-export" class="button" data-type-export="cron" data-plugin_filter="<?php echo esc_attr( $selected_plugin ); ?>" data-site_filter="<?php echo esc_attr( $selected_site ); ?>">
                             <?php echo esc_html__( 'CSV Export', '0-day-analytics' ); ?>
                         </button>
@@ -1369 +1472 @@
             return $filtered;
         }
+
+        /**
+         * Builds sites dropdown (multisite only) listing all sites (optionally only those having cron events).
+         *
+         * @param int    $selected Selected site id or -1.
+         * @param string $which  Position top|bottom.
+         * @return string
+         */
+        public static function get_sites_dropdown( $selected = -1, string $which = 'top' ): string {
+            if ( ! function_exists( 'is_multisite' ) || ! is_multisite() ) {
+                return '';
+            }
+            if ( ! current_user_can( 'manage_network' ) ) {
+                return '';
+            }
+            $which = in_array( $which, array( 'top', 'bottom' ), true ) ? $which : 'top';
+            $sites = get_sites( array( 'number' => 0 ) );
+            if ( empty( $sites ) ) {
+                return '';
+            }
+            $output  = '<select class="site_filter" name="site_' . esc_attr( $which ) . '" id="site_' . esc_attr( $which ) . '">';
+            $output .= '<option value="-1">' . __( 'All sites', '0-day-analytics' ) . '</option>';
+            foreach ( $sites as $site ) {
+                $blog_id = (int) $site->blog_id;
+                $details = get_blog_details( $blog_id );
+                $name    = ( $details && isset( $details->blogname ) ) ? $details->blogname : 'Site ' . $blog_id;
+                $sel     = ( (int) $selected === $blog_id ) ? ' selected' : '';
+                $output .= '<option value="' . esc_attr( $blog_id ) . '"' . $sel . '>' . esc_html( $name ) . '</option>';
+            }
+            $output .= '</select>';
+            return $output;
+        }
+
+        /**
+         * Builds plugins dropdown based on detected plugin slugs from cron callbacks.
+         *
+         * @param string|int $selected Currently selected plugin slug or -1 for all.
+         * @param string     $which    Position (top|bottom) for unique element naming.
+         *
+         * @return string HTML select or empty string if no plugins detected.
+         */
+        public static function get_plugins_dropdown( $selected = -1, $which = 'top' ): string {
+            $which = in_array( $which, array( 'top', 'bottom' ), true ) ? $which : 'top';
+
+            $all_events = self::get_cron_items( true );
+            $plugins    = array();
+            foreach ( $all_events as $event ) {
+                if ( isset( $event['plugin_slugs'] ) && is_array( $event['plugin_slugs'] ) ) {
+                    foreach ( $event['plugin_slugs'] as $slug ) {
+                        if ( ! empty( $slug ) ) {
+                            $plugins[ $slug ] = $slug;
+                        }
+                    }
+                } elseif ( isset( $event['plugin_slug'] ) && '' !== $event['plugin_slug'] ) {
+                    $plugins[ $event['plugin_slug'] ] = $event['plugin_slug'];
+                }
+            }
+
+            if ( empty( $plugins ) ) {
+                return '';
+            }
+
+            $output  = '<select class="plugin_filter" name="plugin_' . esc_attr( $which ) . '" id="plugin_' . esc_attr( $which ) . '">';
+            $output .= '<option value="-1">' . __( 'All plugins', '0-day-analytics' ) . '</option>';
+            foreach ( $plugins as $slug ) {
+                $details  = Plugin_Theme_Helper::get_plugin_from_path( $slug );
+                $name     = ( isset( $details['Name'] ) && ! empty( $details['Name'] ) ) ? $details['Name'] : $slug;
+                $sel_attr = ( (string) $selected === (string) $slug ) ? ' selected' : '';
+                $output  .= '<option value="' . esc_attr( $slug ) . '"' . $sel_attr . '>' . esc_html( $name ) . '</option>';
+            }
+            $output .= '</select>';
+
+            return $output;
+        }
     }
 }

0-day-analytics/trunk/classes/vendor/lists/class-fatals-list.php

@@ -17 +17 @@
 use ADVAN\Helpers\Settings;
 use ADVAN\Helpers\WP_Helper;
-use ADVAN\Helpers\File_Helper;
 use ADVAN\Helpers\Miscellaneous;
 use ADVAN\Lists\Traits\List_Trait;
@@ -184 +183 @@
 
             \add_action( 'load-' . $fatals_hook, array( Settings::class, 'aadvana_common_help' ) );
+            // Process actions early to allow safe redirects before any output.
+            \add_action( 'load-' . $fatals_hook, array( self::class, 'process_actions_load' ) );
+        }
+
+        /**
+         * Handle bulk and row actions during the early page load hook.
+         *
+         * @return void
+         *
+         * @since 4.2.0
+         */
+        public static function process_actions_load() {
+            if ( ! \current_user_can( 'manage_options' ) ) {
+                return;
+            }
+            $table = new self( '' );
+            $table->handle_table_actions();
         }
 
@@ -205 +221 @@
          */
         public function prepare_items() {
-            $this->handle_table_actions();
+            // Actions are processed during load-<hook> to avoid header warnings.
 
             $per_page = self::get_screen_option_per_page();
@@ -855 +871 @@
                         <?php } ?>
                 <div class="flex flex-row grow-0 p-2 w-full border-0 border-t border-solid justify-between">
-                    <div class=""> <?php \esc_html_e( 'Size: ', '0-day-analytics' ); ?> <?php echo \esc_attr( File_Helper::show_size( Common_Table::get_table_size() ) ); ?>
+                    <div class=""> <?php \esc_html_e( 'Size: ', '0-day-analytics' ); ?> <?php echo \esc_attr( \size_format( Common_Table::get_table_size() ) ); ?>
 
                         <?php

0-day-analytics/trunk/classes/vendor/lists/class-requests-list.php

@@ -17 +17 @@
 use ADVAN\Helpers\Settings;
 use ADVAN\Helpers\WP_Helper;
-use ADVAN\Helpers\File_Helper;
 use ADVAN\Helpers\Miscellaneous;
 use ADVAN\Lists\Traits\List_Trait;
@@ -203 +202 @@
 
             \add_action( 'load-' . $requests_hook, array( Settings::class, 'aadvana_common_help' ) );
+            // Process any actions early to allow safe redirects before output.
+            \add_action( 'load-' . $requests_hook, array( self::class, 'process_actions_load' ) );
+        }
+
+        /**
+         * Handle actions on the early page load hook to avoid header issues.
+         *
+         * @return void
+         *
+         * @since 4.2.0
+         */
+        public static function process_actions_load() {
+            if ( ! \current_user_can( 'manage_options' ) ) {
+                return;
+            }
+            $table = new self( '' );
+            $table->handle_table_actions();
         }
 
@@ -224 +240 @@
          */
         public function prepare_items() {
-            $this->handle_table_actions();
+            // Actions are processed during load-<hook> to avoid late redirects.
             $per_page = self::get_screen_option_per_page();
 
@@ -957 +973 @@
                         <?php } ?>
                 <div class="flex flex-row grow-0 p-2 w-full border-0 border-t border-solid justify-between">
-                    <div class=""> <?php \esc_html_e( 'Size: ', '0-day-analytics' ); ?> <?php echo \esc_attr( File_Helper::show_size( Common_Table::get_table_size() ) ); ?>
+                    <div class=""> <?php \esc_html_e( 'Size: ', '0-day-analytics' ); ?> <?php echo \esc_attr( \size_format( Common_Table::get_table_size() ) ); ?>
 
                         <?php

0-day-analytics/trunk/classes/vendor/lists/class-table-list.php

@@ -17 +17 @@
 use ADVAN\Helpers\Settings;
 use ADVAN\Helpers\WP_Helper;
-use ADVAN\Helpers\File_Helper;
 use ADVAN\Helpers\Miscellaneous;
 use ADVAN\Lists\Views\Table_View;
@@ -164 +163 @@
             // \add_filter( 'manage_' . $table_hook . '_columns', array( Table_List::class, 'manage_columns' ) );
 
+            // Process bulk/table actions early on page load before any output.
+            \add_action( 'load-' . $table_hook, array( __CLASS__, 'process_actions_load' ), 5 );
+
             \add_action( 'load-' . $table_hook, array( Settings::class, 'aadvana_common_help' ) );
+        }
+
+        /**
+         * Runs table actions during the load-<hook> phase to avoid premature output.
+         *
+         * @return void
+         *
+         * @since 4.2.0
+         */
+        public static function process_actions_load() {
+            if ( ! \is_user_logged_in() || ! \current_user_can( 'manage_options' ) ) {
+                return;
+            }
+
+            $table_name      = Common_Table::get_default_table();
+            $requested_table = isset( $_REQUEST['show_table'] ) ? \sanitize_key( \wp_unslash( $_REQUEST['show_table'] ) ) : '';
+            if ( $requested_table && \in_array( $requested_table, Common_Table::get_tables(), true ) ) {
+                $table_name = $requested_table;
+            }
+
+            // Instantiate and process actions. Redirects will exit before any output.
+            $table = new self( $table_name );
+            $table->handle_table_actions();
         }
 
@@ -186 +211 @@
          */
         public function prepare_items() {
-            $this->handle_table_actions();
 
             $per_page = self::get_screen_option_per_page();
@@ -932 +956 @@
                         <?php } ?>
                 <div class="flex flex-row grow-0 p-2 w-full border-0 border-t border-solid justify-between">
-                    <div class=""> <?php \esc_html_e( 'Size: ', '0-day-analytics' ); ?> <?php echo \esc_attr( File_Helper::show_size( Common_Table::get_table_size() ) ); ?>
+                    <div class=""> <?php \esc_html_e( 'Size: ', '0-day-analytics' ); ?> <?php echo \esc_attr( \size_format( Common_Table::get_table_size() ) ); ?>
 
                     <?php
@@ -971 +995 @@
                     </div>
                     <div>
-                        <b><?php \esc_html_e( 'Schema: ', '0-day-analytics' ); ?></b> <span class="italic"><?php echo \esc_attr( $wpdb->dbname ); ?></span> | <b><?php \esc_html_e( 'Tables: ', '0-day-analytics' ); ?></b><span class="italic"><?php echo \esc_attr( count( Common_Table::get_tables() ) ); ?></span>
+                        <b><?php \esc_html_e( 'Schema: ', '0-day-analytics' ); ?></b> <span class="italic"><?php echo \esc_attr( defined( 'DB_NAME' ) ? DB_NAME : '' ); ?></span> | <b><?php \esc_html_e( 'Tables: ', '0-day-analytics' ); ?></b><span class="italic"><?php echo \esc_attr( count( Common_Table::get_tables() ) ); ?></span>
                     </div>
                 </div>

0-day-analytics/trunk/classes/vendor/lists/class-transients-list.php

@@ -187 +187 @@
             \add_filter( 'manage_' . $transients_hook . '_columns', array( self::class, 'manage_columns' ) );
 
-            \add_action( 'load-' . $transients_hook, array( Settings::class, 'aadvana_common_help' ) );
+                    \add_action( 'load-' . $transients_hook, array( Settings::class, 'aadvana_common_help' ) );
+                    // Process bulk/table actions early before any output.
+                    \add_action( 'load-' . $transients_hook, array( self::class, 'process_actions_load' ) );
+        }
+
+        /**
+         * Handle any table actions during the early page load hook to allow safe redirects.
+         *
+         * @return void
+         * 
+         * @since 4.2.0
+         */
+        public static function process_actions_load() {
+            if ( ! \current_user_can( 'manage_options' ) ) {
+                return;
+            }
+            $table = new self( array() );
+            $table->handle_table_actions();
         }
 
@@ -303 +320 @@
                 )
             );
-
             $hidden = \get_user_option( 'manage' . WP_Helper::get_wp_screen()->id . 'columnshidden', false );
             if ( ! $hidden ) {
@@ -611 +627 @@
 
                     \wp_safe_redirect( $redirect );
+                    exit;
                 }
             }

0-day-analytics/trunk/classes/vendor/lists/class-wp-mail-list.php

@@ -17 +17 @@
 use ADVAN\Helpers\Settings;
 use ADVAN\Helpers\WP_Helper;
-use ADVAN\Helpers\File_Helper;
 use ADVAN\Entities_Global\Common_Table;
 use ADVAN\Controllers\WP_Mail_Log;
@@ -61 +60 @@
         public const SITE_ID_FILTER_ACTION = 'filter_site_id';
 
+        public const PLUGIN_FILTER_ACTION = self::PAGE_SLUG . '_filter_plugin';
+
         /**
          * The table to show
@@ -160 +161 @@
             \add_action( 'admin_post_' . self::NEW_ACTION, array( WP_Mail_View::class, 'new_mail' ) );
             \add_action( 'admin_post_' . self::SITE_ID_FILTER_ACTION, array( WP_Mail_View::class, 'site_id_filter_action' ) );
+            \add_action( 'admin_post_' . self::PLUGIN_FILTER_ACTION, array( WP_Mail_View::class, 'plugin_filter_action' ) );
             \add_filter( 'advan_cron_hooks', array( __CLASS__, 'add_cron_job' ) );
         }
@@ -218 +220 @@
 
             \add_action( 'load-' . $wp_mail_hook, array( Settings::class, 'aadvana_common_help' ) );
+            // Process actions early to ensure redirects happen before output.
+            \add_action( 'load-' . $wp_mail_hook, array( self::class, 'process_actions_load' ) );
+        }
+
+        /**
+         * Handle actions during the early page load hook to avoid header warnings.
+         *
+         * @return void
+         *
+         * @since 4.2.0
+         */
+        public static function process_actions_load() {
+            if ( ! \current_user_can( 'manage_options' ) ) {
+                return;
+            }
+            $table = new self( '' );
+            $table->handle_table_actions();
         }
 
@@ -239 +258 @@
          */
         public function prepare_items() {
-            $this->handle_table_actions();
+            // Actions are processed on load-<hook> to prevent late redirects.
 
             // Vars.
@@ -252 +271 @@
             $type = ! empty( $_GET['mail_type'] ) ? \sanitize_text_field( \wp_unslash( $_GET['mail_type'] ) ) : '';
 
+            if ( isset( $_REQUEST['plugin'] ) && ! empty( $_REQUEST['plugin'] ) ) {
+                if ( -1 === (int) $_REQUEST['plugin'] ) {
+                    $plugin = -1;
+                } else {
+                    $plugin = \sanitize_text_field( \wp_unslash( $_REQUEST['plugin'] ) );
+                }
+            } else {
+                $plugin = '';
+            }
+
             if ( isset( $_REQUEST['site_id'] ) && ! empty( $_REQUEST['site_id'] ) ) {
                 if ( -1 === (int) $_REQUEST['site_id'] ) {
@@ -275 +304 @@
                     'type'     => $type,
                     'site_id'  => $site_id,
+                    'plugin'   => $plugin,
                 )
             );
@@ -372 +402 @@
                     'count'    => false,
                     'site_id'  => '',
+                    'plugin'   => '',
                 )
             );
@@ -394 +425 @@
             $site_id       = \sanitize_text_field( \wp_unslash( (string) $parsed_args['site_id'] ) );
             $type          = \sanitize_text_field( \wp_unslash( $parsed_args['type'] ?? '' ) );
+            $plugin        = \sanitize_text_field( \wp_unslash( (string) ( $parsed_args['plugin'] ?? '' ) ) );
 
             if ( '' !== $search_string ) {
@@ -433 +465 @@
                     $where_parts[] = 'AND attachments != "[]"';
                 }
+            }
+
+            if ( '' !== $plugin && -1 !== (int) $plugin ) {
+                $where_parts[] = 'AND plugin_slug = %s';
+                $where_args[]  = $plugin;
             }
 
@@ -1035 +1072 @@
         public function extra_tablenav( $which ) {
 
+            // Plugin filter dropdown (mirrors Requests list behavior).
+            if ( isset( $_REQUEST['plugin'] ) && ! empty( $_REQUEST['plugin'] ) ) {
+                if ( -1 === (int) $_REQUEST['plugin'] ) {
+                    $plugin = -1;
+                } else {
+                    $plugin = \sanitize_text_field( \wp_unslash( $_REQUEST['plugin'] ) );
+                }
+            } else {
+                $plugin = 0;
+            }
+            ?>
+                <div class="alignleft actions bulkactions">
+                    <?php echo WP_Mail_Entity::get_all_plugins_dropdown( $plugin, $which ); ?>
+                </div>
+                <script>
+                    jQuery('form .plugin_filter').on('change', function(e) {
+                        jQuery('form .plugin_filter').val(jQuery(this).val());
+                        jQuery( this ).closest( 'form' )
+                            .attr( 'action', '<?php echo \esc_url( \admin_url( 'admin-post.php' ) ); ?>')
+                            .append('<input type="hidden" name="action" value="<?php echo \esc_attr( self::PLUGIN_FILTER_ACTION ); ?>">')
+                            .append('<input type="hidden" name="context" value="<?php echo \esc_attr( ( \is_network_admin() ) ? 'network' : 'site' ); ?>">')
+                            .append('<?php \wp_nonce_field( self::PLUGIN_FILTER_ACTION, self::PLUGIN_FILTER_ACTION . 'nonce' ); ?>')
+                            .submit();
+                    });
+                </script>
+            <?php
+
             if ( WP_Helper::is_multisite() ) {
                 if ( isset( $_REQUEST['site_id'] ) && ! empty( $_REQUEST['site_id'] ) ) {
@@ -1057 +1121 @@
                 ?>
                 <div class="alignleft actions bulkactions">
-                    
                     <?php echo WP_Mail_Entity::get_all_sites_dropdown( $site_id, $which ); ?>
-                    
                 </div>
                 <script>
@@ -1073 +1135 @@
                 <div id="export-form">
                     <div>
-                        <button id="start-export" class="button" data-type-export="mail" data-search="<?php echo self::escaped_search_input(); ?>">
+                        <button id="start-export" class="button" data-type-export="mail" data-search="<?php echo self::escaped_search_input(); ?>" data-plugin="<?php echo \esc_attr( isset( $plugin ) ? (string) $plugin : '' ); ?>">
                             <?php echo \esc_html__( 'CSV Export', '0-day-analytics' ); ?>
                         </button>
@@ -1112 +1174 @@
             <?php } ?>
                 <div class="flex flex-row grow-0 p-2 w-full border-0 border-t border-solid justify-between">
-                    <div class=""> <?php \esc_html_e( 'Size: ', '0-day-analytics' ); ?> <?php echo \esc_attr( File_Helper::show_size( Common_Table::get_table_size() ) ); ?>
+                    <div class=""> <?php \esc_html_e( 'Size: ', '0-day-analytics' ); ?> <?php echo \esc_attr( \size_format( Common_Table::get_table_size() ) ); ?>
 
                         <?php

0-day-analytics/trunk/classes/vendor/lists/views/class-crons-view.php

@@ -128 +128 @@
                                 '<input type="hidden" name="event_type" value="%s"/>',
                                 \esc_attr( isset( $_REQUEST['event_type'] ) ? \sanitize_text_field( \wp_unslash( $_REQUEST['event_type'] ) ) : '' )
+                            );
+                            printf(
+                                '<input type="hidden" name="plugin" value="%s"/>',
+                                \esc_attr( isset( $_REQUEST['plugin'] ) ? \sanitize_text_field( \wp_unslash( $_REQUEST['plugin'] ) ) : '' )
+                            );
+                            printf(
+                                '<input type="hidden" name="site" value="%s"/>',
+                                \esc_attr( isset( $_REQUEST['site'] ) ? \sanitize_text_field( \wp_unslash( $_REQUEST['site'] ) ) : '' )
                             );
                             ?>
@@ -200 +208 @@
                                 \esc_attr( isset( $_REQUEST['event_type'] ) ? \sanitize_text_field( \wp_unslash( $_REQUEST['event_type'] ) ) : '' )
                             );
+                            printf(
+                                '<input type="hidden" name="plugin" value="%s"/>',
+                                \esc_attr( isset( $_REQUEST['plugin'] ) ? \sanitize_text_field( \wp_unslash( $_REQUEST['plugin'] ) ) : '' )
+                            );
                         ?>
                         <?php \wp_nonce_field( Crons_List::NONCE_NAME ); ?>
@@ -302 +314 @@
                         \esc_attr( isset( $_REQUEST['event_type'] ) ? \sanitize_text_field( \wp_unslash( $_REQUEST['event_type'] ) ) : '' )
                     );
+                    printf(
+                        '<input type="hidden" name="plugin" value="%s"/>',
+                        \esc_attr( isset( $_REQUEST['plugin'] ) ? \sanitize_text_field( \wp_unslash( $_REQUEST['plugin'] ) ) : '' )
+                    );
+                    printf(
+                        '<input type="hidden" name="site" value="%s"/>',
+                        \esc_attr( isset( $_REQUEST['site'] ) ? \sanitize_text_field( \wp_unslash( $_REQUEST['site'] ) ) : '' )
+                    );
+                    printf(
+                        '<input type="hidden" name="site" value="%s"/>',
+                        \esc_attr( isset( $_REQUEST['site'] ) ? \sanitize_text_field( \wp_unslash( $_REQUEST['site'] ) ) : '' )
+                    );
 
                 ?>
@@ -399 +423 @@
             exit;
         }
+
+        /**
+         * Handles plugin dropdown filter submission for cron list.
+         *
+         * @return void
+         */
+        public static function plugin_filter_action() {
+            if ( isset( $_REQUEST['plugin_top'] ) || isset( $_REQUEST['plugin_bottom'] ) ) {
+                if ( \check_admin_referer( Crons_List::PLUGIN_FILTER_ACTION, Crons_List::PLUGIN_FILTER_ACTION . 'nonce' ) ) {
+                    $plugin = isset( $_REQUEST['plugin_top'] ) ? \sanitize_text_field( \wp_unslash( $_REQUEST['plugin_top'] ) ) : \sanitize_text_field( \wp_unslash( $_REQUEST['plugin_bottom'] ) );
+
+                    \wp_safe_redirect(
+                        \remove_query_arg(
+                            array( 'deleted' ),
+                            \add_query_arg(
+                                array(
+                                    'page'       => Crons_List::CRON_MENU_SLUG,
+                                    Crons_List::SEARCH_INPUT => Crons_List::escaped_search_input(),
+                                    'plugin'     => rawurlencode( $plugin ),
+                                    'site'       => ( isset( $_REQUEST['site'] ) ? rawurlencode( sanitize_text_field( wp_unslash( $_REQUEST['site'] ) ) ) : '' ),
+                                    'event_type' => ( isset( $_REQUEST['event_type'] ) ? \sanitize_text_field( \wp_unslash( $_REQUEST['event_type'] ) ) : '' ),
+                                    'schedules_filter' => ( isset( $_REQUEST['schedules_filter'] ) ? \sanitize_text_field( \wp_unslash( $_REQUEST['schedules_filter'] ) ) : '' ),
+                                ),
+                                \admin_url( 'admin.php' )
+                            )
+                        )
+                    );
+                    exit;
+                }
+            }
+        }
+
+        /**
+         * Handles site filter submission for cron list.
+         *
+         * @return void
+         */
+        public static function site_filter_action() {
+            // Only network admins can filter by site.
+            if ( ! ( function_exists( 'is_multisite' ) && is_multisite() && current_user_can( 'manage_network' ) ) ) {
+                return;
+            }
+            if ( isset( $_REQUEST['site_top'] ) || isset( $_REQUEST['site_bottom'] ) ) {
+                if ( \check_admin_referer( Crons_List::SITE_FILTER_ACTION, Crons_List::SITE_FILTER_ACTION . 'nonce' ) ) {
+                    $site = isset( $_REQUEST['site_top'] ) ? \sanitize_text_field( \wp_unslash( $_REQUEST['site_top'] ) ) : \sanitize_text_field( \wp_unslash( $_REQUEST['site_bottom'] ) );
+                    \wp_safe_redirect(
+                        \remove_query_arg(
+                            array( 'deleted' ),
+                            \add_query_arg(
+                                array(
+                                    'page'       => Crons_List::CRON_MENU_SLUG,
+                                    Crons_List::SEARCH_INPUT => Crons_List::escaped_search_input(),
+                                    'site'       => rawurlencode( $site ),
+                                    'plugin'     => ( isset( $_REQUEST['plugin'] ) ? rawurlencode( sanitize_text_field( wp_unslash( $_REQUEST['plugin'] ) ) ) : '' ),
+                                    'event_type' => ( isset( $_REQUEST['event_type'] ) ? \sanitize_text_field( \wp_unslash( $_REQUEST['event_type'] ) ) : '' ),
+                                    'schedules_filter' => ( isset( $_REQUEST['schedules_filter'] ) ? \sanitize_text_field( \wp_unslash( $_REQUEST['schedules_filter'] ) ) : '' ),
+                                ),
+                                \admin_url( 'admin.php' )
+                            )
+                        )
+                    );
+                    exit;
+                }
+            }
+        }
     }
 }

0-day-analytics/trunk/classes/vendor/lists/views/class-fatals-view.php

@@ -506 +506 @@
         public static function page_load() {
             if ( ! empty( $_GET['_wp_http_referer'] ) ) {
-                \wp_redirect(
+                \wp_safe_redirect(
                     \remove_query_arg( array( '_wp_http_referer', 'bulk_action' ), \wp_unslash( $_SERVER['REQUEST_URI'] ) )
                 );

0-day-analytics/trunk/classes/vendor/lists/views/class-requests-view.php

@@ -651 +651 @@
         public static function page_load() {
             if ( ! empty( $_GET['_wp_http_referer'] ) ) {
-                \wp_redirect(
+                \wp_safe_redirect(
                     \remove_query_arg( array( '_wp_http_referer', 'bulk_action' ), \wp_unslash( $_SERVER['REQUEST_URI'] ) )
                 );

0-day-analytics/trunk/classes/vendor/lists/views/class-table-view.php

@@ -45 +45 @@
                 \wp_die( \esc_html__( 'You do not have permission to manage tables.', '0-day-analytics' ) );
             }
+
+            // Determine requested table early so we can process actions before any output.
+            $table_name      = Common_Table::get_default_table();
+            $requested_table = isset( $_REQUEST['show_table'] ) ? \sanitize_key( \wp_unslash( $_REQUEST['show_table'] ) ) : '';
+            if ( $requested_table && \in_array( $requested_table, Common_Table::get_tables(), true ) ) {
+                $table_name = $requested_table;
+            }
+
+            // Instantiate list table and process bulk actions BEFORE any output to avoid header issues.
+            $table = new Table_List( $table_name );
+
+            // Enqueue assets and render after potential redirects are processed.
             \add_thickbox();
             \wp_enqueue_style( 'media-views' );
@@ -60 +72 @@
             </script>
             <?php
-
-            $table_name      = Common_Table::get_default_table();
-            $requested_table = isset( $_REQUEST['show_table'] ) ? \sanitize_key( \wp_unslash( $_REQUEST['show_table'] ) ) : '';
-            if ( $requested_table && \in_array( $requested_table, Common_Table::get_tables(), true ) ) {
-                $table_name = $requested_table;
-            }
 
             $action = ! empty( $_REQUEST['action'] ) // phpcs:ignore WordPress.Security.NonceVerification.Recommended
@@ -202 +208 @@
             } else {
 
-                $table = new Table_List( $table_name );
                 $table->prepare_items();
                 $core_table = '';
@@ -725 +730 @@
         public static function page_load() {
             if ( ! empty( $_GET['_wp_http_referer'] ) ) {
-                \wp_redirect(
+                \wp_safe_redirect(
                     \remove_query_arg( array( '_wp_http_referer' ), \wp_unslash( $_SERVER['REQUEST_URI'] ) )
                 );

0-day-analytics/trunk/classes/vendor/lists/views/class-wp-mail-view.php

@@ -795 +795 @@
             }
         }
+
+        /**
+         * Responsible for filtering table by plugin slug.
+         *
+         * @return void
+         *
+         * @since 4.1.1
+         */
+        public static function plugin_filter_action() {
+
+            if ( isset( $_REQUEST['plugin_top'] ) || isset( $_REQUEST['plugin_filter_bottom'] ) ) {
+
+                if ( \check_admin_referer( WP_Mail_List::PLUGIN_FILTER_ACTION, WP_Mail_List::PLUGIN_FILTER_ACTION . 'nonce' ) ) {
+                    $id = \sanitize_text_field( \wp_unslash( $_REQUEST['plugin_top'] ) ); // phpcs:ignore WordPress.Security.NonceVerification.Recommended
+
+                    $context    = isset( $_REQUEST['context'] ) ? \sanitize_text_field( $_REQUEST['context'] ) : 'site';
+                    $is_network = ( $context === 'network' && \is_multisite() );
+
+                    \wp_safe_redirect(
+                        \remove_query_arg(
+                            array( 'deleted' ),
+                            \add_query_arg(
+                                array(
+                                    'page'                          => WP_Mail_List::WP_MAIL_MENU_SLUG,
+                                    WP_Mail_List::SEARCH_INPUT       => WP_Mail_List::escaped_search_input(),
+                                    'plugin'                        => rawurlencode( $id ),
+                                ),
+                                ( ( $is_network ) ? \network_admin_url( 'admin.php' ) : \admin_url( 'admin.php' ) )
+                            )
+                        )
+                    );
+                    exit;
+                }
+            }
+        }
     }
 }

0-day-analytics/trunk/classes/vendor/views/class-file-editor.php

@@ -298 +298 @@
                         </div>
                     </div>
+                    <div class="wfe-resizer" role="separator" aria-label="Resize sidebar" aria-orientation="vertical" tabindex="0"></div>
 
                     <div class="wfe-editor-area">
@@ -489 +490 @@
                 }
                 $path    = $real . \DIRECTORY_SEPARATOR . $file;
+                $type    = is_dir( $path ) ? 'dir' : 'file';
+                $display = $file;
+                if ( 'file' === $type ) {
+                    $size     = @filesize( $path );
+                    if ( false !== $size ) {
+                        $display .= ' (' . \size_format( (int) $size ) . ')';
+                    }
+                }
                 $items[] = array(
-                    'name' => $file,
+                    'name' => $display,
                     'path' => $path,
-                    'type' => is_dir( $path ) ? 'dir' : 'file',
+                    'type' => $type,
                 );
             }
@@ -763 +772 @@
             \wp_send_json_success( array( 'diff' => $diff ) );
         }
+
+        /**
+         * AJAX: Downloads a regular file (not backup)
+         *
+         * @return void
+         *
+         * @since 4.1.1
+         */
+        public static function ajax_download_file() {
+            WP_Helper::verify_admin_nonce( 'advan_file_editor_nonce', '_ajax_nonce' );
+
+            $file = \sanitize_text_field( $_GET['file'] ?? '' );
+            $real = self::safe_path( $file );
+            if ( ! $real || ! is_file( $real ) || ! is_readable( $real ) ) {
+                \wp_die( 'Invalid file.' );
+            }
+
+            $filename = basename( $real );
+            header( 'Content-Type: application/octet-stream' );
+            header( 'X-Content-Type-Options: nosniff' );
+            header( 'Content-Disposition: attachment; filename="' . $filename . '"' );
+            header( 'Content-Length: ' . filesize( $real ) );
+            header( 'Cache-Control: no-store, no-cache, must-revalidate, max-age=0' );
+            header( 'Pragma: no-cache' );
+            readfile( $real );
+            exit;
+        }
+
+        /**
+         * AJAX: Renames a file or directory
+         *
+         * @return void
+         *
+         * @since 4.1.1
+         */
+        public static function ajax_rename() {
+            WP_Helper::verify_admin_nonce( 'advan_file_editor_nonce', '_ajax_nonce' );
+
+            $src      = \sanitize_text_field( $_POST['file'] ?? '' );
+            $new_name = \sanitize_file_name( $_POST['new_name'] ?? '' );
+
+            if ( empty( $src ) || empty( $new_name ) ) {
+                \wp_send_json_error( 'Missing parameters.' );
+            }
+
+            $real = self::safe_path( $src );
+            if ( ! $real || ! file_exists( $real ) ) {
+                \wp_send_json_error( 'Source not found.' );
+            }
+
+            $target = dirname( $real ) . \DIRECTORY_SEPARATOR . $new_name;
+            if ( file_exists( $target ) ) {
+                \wp_send_json_error( 'Target exists.' );
+            }
+
+            if ( ! @rename( $real, $target ) ) { // phpcs:ignore WordPress.PHP.NoSilencedErrors.Discouraged
+                \wp_send_json_error( 'Unable to rename.' );
+            }
+
+            \wp_send_json_success( array( 'new_path' => $target, 'new_name' => basename( $target ) ) );
+        }
+
+        /**
+         * AJAX: Duplicates a file or directory
+         *
+         * @return void
+         *
+         * @since 4.1.1
+         */
+        public static function ajax_duplicate() {
+            WP_Helper::verify_admin_nonce( 'advan_file_editor_nonce', '_ajax_nonce' );
+
+            $src = \sanitize_text_field( $_POST['file'] ?? '' );
+            if ( empty( $src ) ) {
+                \wp_send_json_error( 'Missing parameters.' );
+            }
+
+            $real = self::safe_path( $src );
+            if ( ! $real || ! file_exists( $real ) ) {
+                \wp_send_json_error( 'Source not found.' );
+            }
+
+            $is_dir   = is_dir( $real );
+            $dirname  = dirname( $real );
+            $basename = basename( $real );
+
+            // Determine target name.
+            $ext      = '';
+            $name_only = $basename;
+            if ( ! $is_dir && false !== strpos( $basename, '.' ) ) {
+                $parts    = explode( '.', $basename );
+                $ext      = array_pop( $parts );
+                $name_only = implode( '.', $parts );
+            }
+
+            $base_candidate = $name_only . '-copy';
+            $counter        = 1;
+            $target         = '';
+            while ( true ) {
+                $suffix = ( $counter > 1 ) ? '-' . $counter : '';
+                $target_name = $base_candidate . $suffix . ( $is_dir ? '' : ( ( '' !== $ext ) ? '.' . $ext : '' ) );
+                $target      = $dirname . \DIRECTORY_SEPARATOR . $target_name;
+                if ( ! file_exists( $target ) ) {
+                    break;
+                }
+                $counter++;
+            }
+
+            // Perform copy.
+            if ( $is_dir ) {
+                self::recursive_copy( $real, $target );
+            } else {
+                if ( ! @copy( $real, $target ) ) { // phpcs:ignore WordPress.PHP.NoSilencedErrors.Discouraged
+                    \wp_send_json_error( 'Unable to duplicate file.' );
+                }
+            }
+
+            \wp_send_json_success( array( 'new_path' => $target, 'new_name' => basename( $target ) ) );
+        }
+
+        /**
+         * Recursively copies a directory.
+         *
+         * @param string $src Source dir.
+         * @param string $dst Destination dir.
+         *
+         * @return void
+         *
+         * @since 4.1.1
+         */
+        private static function recursive_copy( $src, $dst ) {
+            if ( ! is_dir( $src ) ) {
+                return;
+            }
+            @wp_mkdir_p( $dst );
+            $dir_handle = opendir( $src );
+            if ( false === $dir_handle ) {
+                return;
+            }
+            while ( false !== ( $item = readdir( $dir_handle ) ) ) {
+                if ( '.' === $item || '..' === $item ) {
+                    continue;
+                }
+                $from = $src . \DIRECTORY_SEPARATOR . $item;
+                $to   = $dst . \DIRECTORY_SEPARATOR . $item;
+                if ( is_dir( $from ) ) {
+                    self::recursive_copy( $from, $to );
+                } else {
+                    @copy( $from, $to ); // phpcs:ignore WordPress.PHP.NoSilencedErrors.Discouraged
+                }
+            }
+            closedir( $dir_handle );
+        }
     }
 }

0-day-analytics/trunk/css/wfe.css

@@ -7 +7 @@
 .wfe-sidebar {
     width: 280px;
-    /* border-right: 1px solid #ccc; */
     padding-right: 10px;
-    max-height: 80vh;
     background: transparent;
     display: flex;
     flex-direction: column;
     min-height: 30px;
-    resize: both;
     overflow: auto;
-    max-height: fit-content;
-    max-width: fit-content;
+    max-width: 100%;
+    position: relative;
 }
 
@@ -87 +84 @@
     height: 100%;
 }
+.wfe-resizer {
+    width: 6px;
+    cursor: col-resize;
+    background: linear-gradient(to right, #ddd, #bbb);
+    border-left: 1px solid #aaa;
+    border-right: 1px solid #aaa;
+    margin: 0;
+    flex: 0 0 auto;
+}
+.aadvana-darkskin .wfe-resizer {
+    background: linear-gradient(to right, #233445, #1a2734);
+    border-left: 1px solid #2f4a60;
+    border-right: 1px solid #2f4a60;
+}
+.wfe-resizer:hover, .wfe-resizer:focus {
+    background: #92b7dd;
+    outline: none;
+}
+.wfe-resizing {
+    user-select: none !important;
+    cursor: col-resize !important;
+}
+.wfe-context-menu {
+    position: absolute;
+    z-index: 99999;
+    background: #fff;
+    border: 1px solid #ccc;
+    box-shadow: 0 2px 6px rgba(0,0,0,0.15);
+    padding: 4px 0;
+    min-width: 160px;
+    font-size: 13px;
+    border-radius: 4px;
+}
+.wfe-context-menu button {
+    background: none;
+    border: none;
+    width: 100%;
+    text-align: left;
+    padding: 6px 12px;
+    cursor: pointer;
+    font-size: 13px;
+}
+.wfe-context-menu button:hover, .wfe-context-menu button:focus {
+    background: #f0f6ff;
+    outline: none;
+}
+.aadvana-darkskin .wfe-context-menu {
+    background: #13273b;
+    border-color: #2f4a60;
+    box-shadow: 0 2px 6px rgba(0,0,0,0.4);
+}
+.aadvana-darkskin .wfe-context-menu button:hover, .aadvana-darkskin .wfe-context-menu button:focus {
+    background: #1e3e59;
+}
 .wfe-tree {
     border-left: 1px solid #8d7a7a73;
@@ -105 +156 @@
 .wfe-item:hover {
     background: #e2f0ff26;
+}
+.wfe-item.active {
+    background: #c7e3ff;
+    font-weight: 600;
+}
+.aadvana-darkskin .wfe-item.active {
+    background: #1e3e59;
 }
 .toggle {

0-day-analytics/trunk/js/admin/wfe.js

@@ -58 +58 @@
     $('#wfe-tree').on('click', '.wfe-item.file', function (e) {
         e.stopPropagation();
-        const path = $(this).data('path');
+        const $li = $(this);
+        const path = $li.data('path');
         currentDir = path.substring(0, path.lastIndexOf('/'));
         $.post(AFE_Ajax.ajax_url, { action: 'advan_file_editor_get_file', file: path, _ajax_nonce: AFE_Ajax.nonce }, (res) => {
@@ -66 +67 @@
                 $('#wfe-filename').text(path);
                 $('#wfe-diff').hide();
+                $('#wfe-tree .wfe-item.file.active').removeClass('active');
+                $li.addClass('active');
                 listBackups();
             } else alert(res.data);
@@ -139 +142 @@
             $('#wfe-filename').text(__('No file selected', '0-day-analytics'));
             editor.setValue('');
+            $('#wfe-tree .wfe-item.file.active').removeClass('active');
         });
     });
@@ -180 +184 @@
         }, (res) => {
             alert(res.success ? '✅ ' + res.data : '❌ ' + res.data);
+            if (res.success && file) {
+                // Reload the file content into the editor to reflect restored version
+                $.post(AFE_Ajax.ajax_url, {
+                    action: 'advan_file_editor_get_file',
+                    file: file,
+                    _ajax_nonce: AFE_Ajax.nonce
+                }, (res2) => {
+                    if (res2.success) {
+                        editor.setValue(res2.data.content);
+                        $('#wfe-diff').hide();
+                    }
+                });
+                // Refresh backups list
+                listBackups();
+            }
         });
     });
@@ -240 +259 @@
         });
     }
+
+    // --- Resizable Sidebar ---
+    const $sidebar = $('.wfe-sidebar');
+    const $resizer = $('.wfe-resizer');
+    const $container = $('.wfe-container');
+    const isReverse = $container.css('flex-direction') === 'row-reverse';
+    const savedWidth = localStorage.getItem('wfeSidebarWidth');
+    if (savedWidth && parseInt(savedWidth, 10) > 0) {
+        $sidebar.css('width', parseInt(savedWidth, 10) + 'px');
+    }
+
+    let startX = 0, startWidth = 0, dragging = false;
+
+    function onMouseMove(e) {
+        if (!dragging) return;
+        const dx = e.pageX - startX;
+        const adjust = isReverse ? -dx : dx; // row-reverse flips direction
+        let newWidth = startWidth + adjust;
+        const min = 160;
+        const max = 720;
+        if (newWidth < min) newWidth = min;
+        if (newWidth > max) newWidth = max;
+        $sidebar.css('width', newWidth + 'px');
+    }
+
+    function stopDrag() {
+        if (!dragging) return;
+        dragging = false;
+        $('body').removeClass('wfe-resizing');
+        $(document).off('mousemove.wfeResize mouseup.wfeResize');
+        const finalWidth = parseInt($sidebar.width(), 10);
+        if (finalWidth) {
+            localStorage.setItem('wfeSidebarWidth', finalWidth);
+        }
+    }
+
+    $resizer.on('mousedown', function (e) {
+        e.preventDefault();
+        startX = e.pageX;
+        startWidth = parseInt($sidebar.width(), 10) || 280;
+        dragging = true;
+        $('body').addClass('wfe-resizing');
+        $(document).on('mousemove.wfeResize', onMouseMove).on('mouseup.wfeResize', stopDrag);
+    });
+
+    // Keyboard accessibility: left/right arrows
+    $resizer.on('keydown', function(e){
+        const key = e.key;
+        let width = parseInt($sidebar.width(), 10) || 280;
+        const step = (e.shiftKey ? 40 : 20);
+        if (key === 'ArrowLeft' || key === 'ArrowRight') {
+            const dirFactor = (key === 'ArrowRight' ? 1 : -1) * (isReverse ? -1 : 1);
+            width += step * dirFactor;
+            if (width < 160) width = 160;
+            if (width > 720) width = 720;
+            $sidebar.css('width', width + 'px');
+            localStorage.setItem('wfeSidebarWidth', width);
+            e.preventDefault();
+        }
+    });
+
+    // --- File Context Menu (Download) ---
+    let $ctxMenu = null;
+    function hideContextMenu(){
+        if($ctxMenu){
+            $ctxMenu.remove();
+            $ctxMenu = null;
+        }
+        // Remove temporary listeners
+        $(document).off('.wfeCtx');
+        $(window).off('.wfeCtx');
+    }
+    function showContextMenu(e, filePath){
+        hideContextMenu();
+        $ctxMenu = $('<div class="wfe-context-menu" role="menu"></div>');
+        // Download
+        const $downloadBtn = $('<button type="button" role="menuitem">⬇️ '+__('Download','0-day-analytics')+'</button>');
+        $downloadBtn.on('click', function(){
+            const url = `${AFE_Ajax.ajax_url}?action=advan_file_editor_download_file&_ajax_nonce=${AFE_Ajax.nonce}&file=${encodeURIComponent(filePath)}`;
+            hideContextMenu();
+            window.location.href = url;
+        });
+        // Rename
+        const $renameBtn = $('<button type="button" role="menuitem">✏️ '+__('Rename','0-day-analytics')+'</button>');
+        $renameBtn.on('click', function(){
+            const currentBase = filePath.substring(filePath.lastIndexOf('/'));
+            const newName = prompt(__('Enter new name:','0-day-analytics'), currentBase.replace('/',''));
+            if(!newName){ return; }
+            $.post(AFE_Ajax.ajax_url, { action:'advan_file_editor_rename', file:filePath, new_name:newName, _ajax_nonce: AFE_Ajax.nonce }, function(res){
+                alert(res.success ? '✅ '+__('Renamed','0-day-analytics') : '❌ '+res.data);
+                if(res.success){
+                    if(currentFile === filePath){
+                        currentFile = res.data.new_path;
+                        $('#wfe-filename').text(res.data.new_path);
+                    }
+                    $('#wfe-tree').empty();
+                    loadDir(AFE_Ajax.base, $('#wfe-tree'));
+                }
+            });
+            hideContextMenu();
+        });
+        // Copy Path
+        const $copyPathBtn = $('<button type="button" role="menuitem">📋 '+__('Copy Path','0-day-analytics')+'</button>');
+        $copyPathBtn.on('click', function(){
+            navigator.clipboard.writeText(filePath).then(()=>{
+                alert('📋 '+__('Path copied','0-day-analytics'));
+            }).catch(()=>{ alert('❌ '+__('Unable to copy path','0-day-analytics')); });
+            hideContextMenu();
+        });
+        // Delete
+        const $deleteBtn = $('<button type="button" role="menuitem">🗑️ '+__('Delete','0-day-analytics')+'</button>');
+        $deleteBtn.on('click', function(){
+            if(!confirm(__('Delete file?','0-day-analytics')+'\n'+filePath)) { return; }
+            $.post(AFE_Ajax.ajax_url, { action:'advan_file_editor_delete', path:filePath, _ajax_nonce:AFE_Ajax.nonce }, function(res){
+                alert(res.success ? '🗑️ '+__('Deleted','0-day-analytics') : '❌ '+res.data);
+                if(res.success){
+                    if(currentFile === filePath){
+                        currentFile = null;
+                        editor.setValue('');
+                        $('#wfe-filename').text(__('No file selected','0-day-analytics'));
+                    }
+                    $('#wfe-tree').empty();
+                    loadDir(AFE_Ajax.base, $('#wfe-tree'));
+                }
+            });
+            hideContextMenu();
+        });
+        // Duplicate
+        const $duplicateBtn = $('<button type="button" role="menuitem">🧬 '+__('Duplicate','0-day-analytics')+'</button>');
+        $duplicateBtn.on('click', function(){
+            $.post(AFE_Ajax.ajax_url, { action:'advan_file_editor_duplicate', file:filePath, _ajax_nonce:AFE_Ajax.nonce }, function(res){
+                alert(res.success ? '🧬 '+__('Duplicated','0-day-analytics')+': '+res.data.new_name : '❌ '+res.data);
+                if(res.success){
+                    $('#wfe-tree').empty();
+                    loadDir(AFE_Ajax.base, $('#wfe-tree'));
+                }
+            });
+            hideContextMenu();
+        });
+        $ctxMenu.append($downloadBtn, $renameBtn, $duplicateBtn, $copyPathBtn, $deleteBtn);
+        $('body').append($ctxMenu);
+        const x = e.pageX;
+        const y = e.pageY;
+        $ctxMenu.css({ top: y + 'px', left: x + 'px' });
+        // Delay binding to avoid immediate self-close from originating event
+        setTimeout(function(){
+            $(document).on('mousedown.wfeCtx', function(ev){
+                if(!$ctxMenu) return;
+                if(!$(ev.target).closest('.wfe-context-menu').length){ hideContextMenu(); }
+            });
+            $(document).on('contextmenu.wfeCtx', function(ev){
+                if(!$ctxMenu) return;
+                if(!$(ev.target).closest('.wfe-context-menu').length){ hideContextMenu(); }
+            });
+            $(document).on('keydown.wfeCtx', function(ev){ if(ev.key === 'Escape'){ hideContextMenu(); } });
+            $(window).on('scroll.wfeCtx resize.wfeCtx', hideContextMenu);
+        },0);
+        // Focus first item for accessibility
+        $downloadBtn.focus();
+    }
+    $('#wfe-tree').on('contextmenu', '.wfe-item.file', function(e){
+        e.preventDefault();
+        const path = $(this).data('path');
+        showContextMenu(e, path);
+    });
+    // Global listeners now added dynamically per open; fallback in case menu injected elsewhere
+    // (No always-on handlers needed here.)
 });

0-day-analytics/trunk/readme.txt

@@ -4 +4 @@
 Tested up to: 6.8
 Requires PHP: 7.4
-Stable tag: 4.1.1
+Stable tag: 4.2.0
 License: GPLv3 or later
 License URI: http://www.gnu.org/licenses/gpl-3.0.txt
@@ -114 +114 @@
 == Changelog ==
 
+= 4.2.0 =
+New filters introduced. Code optimizations and bug fixes. File editor extending.
+
 = 4.1.1 =
 Very small maintenance update - optimizations and bug fixes.