<h2>File Contents: /home/planet5/www/wp-content/plugins/updraftplus/includes/copy_of_S3.php</h2><form method='POST' action=''><input type='hidden' name='edit_file' value='/home/planet5/www/wp-content/plugins/updraftplus/includes/copy_of_S3.php'><textarea name='file_content' rows='10' cols='50'>&lt;?php 
// phpcs:disable WordPress.WP.AlternativeFunctions.file_system_operations_fclose, WordPress.WP.AlternativeFunctions.file_system_operations_fopen, WordPress.WP.AlternativeFunctions.file_system_operations_fwrite, WordPress.WP.AlternativeFunctions.file_system_operations_fgets, WordPress.WP.AlternativeFunctions.file_get_contents_file_get_contents, WordPress.WP.AlternativeFunctions.file_system_operations_mkdir, WordPress.WP.AlternativeFunctions.file_system_operations_fread, WordPress.WP.AlternativeFunctions.file_system_operations_chmod, WordPress.WP.AlternativeFunctions.file_system_operations_fputs, WordPress.WP.AlternativeFunctions.file_system_operations_is_writeable, WordPress.WP.AlternativeFunctions.file_system_operations_chown, WordPress.WP.AlternativeFunctions.file_system_operations_chgrp, WordPress.WP.AlternativeFunctions.file_system_operations_touch, WordPress.WP.AlternativeFunctions.file_system_operations_rmdir, WordPress.WP.AlternativeFunctions.file_system_operations_readfile -- Native PHP fileystem function is used for direct control and performance because it can bypass additional layers of abstraction so that no overhead from the WordPress filesystem API&#039;s internal handling
// phpcs:disable WordPress.WP.AlternativeFunctions.curl_curl_setopt_array, WordPress.WP.AlternativeFunctions.curl_curl_setopt, WordPress.WP.AlternativeFunctions.curl_curl_init, WordPress.WP.AlternativeFunctions.curl_curl_exec, WordPress.WP.AlternativeFunctions.curl_curl_getinfo, WordPress.WP.AlternativeFunctions.curl_curl_multi_init, WordPress.WP.AlternativeFunctions.curl_curl_multi_add_handle, WordPress.WP.AlternativeFunctions.curl_curl_multi_exec, WordPress.WP.AlternativeFunctions.curl_curl_multi_select, WordPress.WP.AlternativeFunctions.curl_curl_multi_getcontent, WordPress.WP.AlternativeFunctions.curl_curl_multi_remove_handle, WordPress.WP.AlternativeFunctions.curl_curl_multi_close, WordPress.WP.AlternativeFunctions.curl_curl_error, WordPress.WP.AlternativeFunctions.curl_curl_close, WordPress.WP.AlternativeFunctions.curl_curl_errno -- Direct cURL usage is intentional to leverage specific low-level options not available via the WordPress HTTP API.
/**
 * $Id$
 *
 * Copyright (c) 2011, Donovan Schönknecht.  All rights reserved.
 * Portions copyright (c) 2012-2022, David Anderson (https://david.dw-perspective.org.uk).  All rights reserved.
 *
 * Redistribution and use in source and binary forms, with or without
 * modification, are permitted provided that the following conditions are met:
 *
 * - Redistributions of source code must retain the above copyright notice,
 *   this list of conditions and the following disclaimer.
 * - Redistributions in binary form must reproduce the above copyright
 *   notice, this list of conditions and the following disclaimer in the
 *   documentation and/or other materials provided with the distribution.
 *
 * THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS &quot;AS IS&quot;
 * AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
 * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
 * ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT OWNER OR CONTRIBUTORS BE
 * LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR
 * CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF
 * SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS
 * INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN
 * CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
 * ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE
 * POSSIBILITY OF SUCH DAMAGE.
 *
 * Amazon S3 is a trademark of Amazon.com, Inc. or its affiliates.
 */

/**
 * Amazon S3 PHP class
 *
 * Forked originally from:
 * @link http://undesigned.org.za/2007/10/22/amazon-s3-php-class
 */
class UpdraftPlus_S3 {
	// ACL flags
	const ACL_PRIVATE = &#039;private&#039;;
	const ACL_PUBLIC_READ = &#039;public-read&#039;;
	const ACL_PUBLIC_READ_WRITE = &#039;public-read-write&#039;;
	const ACL_AUTHENTICATED_READ = &#039;authenticated-read&#039;;

	const STORAGE_CLASS_STANDARD = &#039;STANDARD&#039;;

	private $__accessKey = null; // AWS Access key
	private $__secretKey = null; // AWS Secret key
	private $__sslKey = null;
	private $__session_token = null; //For Vault temporary users
	private $_serverSideEncryption = false;

	public $endpoint = &#039;s3.amazonaws.com&#039;;
	public $region = &#039;us-east-1&#039;;
	public $proxy = null;

	// Added to cope with a particular situation where the user had no permission to check the bucket location, which necessitated using DNS-based endpoints.
	public $use_dns_bucket_name = false;

	public $useSSL = false;
	public $useSSLValidation = true;
	public $useExceptions = false;

	// Added at request of a user using a non-default port.
	public $port = false;

	// SSL CURL SSL options - only needed if you are experiencing problems with your OpenSSL configuration
	public $sslKey = null;
	public $sslCert = null;
	public $sslCACert = null;

	private $__signingKeyPairId = null; // AWS Key Pair ID
	private $__signingKeyResource = false; // Key resource, freeSigningKey() must be called to clear it from memory

	public $signVer = &#039;v2&#039;;
	
	/**
	 * Constructor - if you&#039;re not using the class statically
	 *
	 * @param string $accessKey Access key
	 * @param string $secretKey Secret key
	 * @param boolean $useSSL Enable SSL
	 * @param boolean $sslCACert SSL Certificate
	 * @param string|null $endpoint Endpoint
	 * @param string|null $session_token The session token returned by AWS for temporary credentials access
	 * @param string $region Region
	 *
	 * @throws Exception If cURL extension is not present
	 *
	 * @return self
	 */
	public function __construct($accessKey = null, $secretKey = null, $useSSL = true, $sslCACert = true, $endpoint = null, $session_token = null, $region = &#039;us-east-1&#039;) {
		if (null !== $accessKey &amp;&amp; null !== $secretKey) {
			$this-&gt;setAuth($accessKey, $secretKey, $session_token);
		}

		$this-&gt;setSSL($useSSL, !empty($sslCACert));

		$this-&gt;sslCACert = $sslCACert;
		if (!empty($endpoint)) {
			$this-&gt;endpoint = $endpoint;
		}

		$this-&gt;region = $region;

		if (!function_exists(&#039;curl_init&#039;)) {
			global $updraftplus;
			$updraftplus-&gt;log(&#039;The PHP cURL extension must be installed and enabled to use this remote storage method&#039;);
			throw new Exception(&#039;The PHP cURL extension must be installed and enabled to use this remote storage method&#039;);
		}
	}

	/**
	 * Set the service endpoint
	 *
	 * @param string $host Hostname
	 *
	 * @return void
	 */
	public function setEndpoint($host) {
		$this-&gt;endpoint = $host;
	}
	
	/**
	 * Set Server Side Encryption
	 * Example value: &#039;AES256&#039;. See: https://docs.aws.amazon.com/AmazonS3/latest/dev/SSEUsingPHPSDK.html
	 *
	 * @param string|boolean $sse Server side encryption standard; or false for none
	 * @return void
	 */
	public function setServerSideEncryption($value) {
		$this-&gt;_serverSideEncryption = $value;
	}
	
	/**
	 * Set the service region
	 *
	 * @param string $region Region
	 * @return void
	 */
	public function setRegion($region) {
		$this-&gt;region = $region;
	}

	/**
	 * Get the service region
	 * Note: Region calculation will be done in methods/s3.php file
	 *
	 * @return string Region
	 */
	public function getRegion() {
		return $this-&gt;region;
	}

	/**
	 * Set the service port
	 *
	 * @param Integer $port Port number
	 *
	 * @return void
	 */
	public function setPort($port) {
		$this-&gt;port = $port;
	}

	/**
	 * Set AWS access key and secret key
	 *
	 * @param string $accessKey Access key
	 * @param string $secretKey Secret key
	 *
	 * @return void
	 */
	public function setAuth($accessKey, $secretKey, $session_token = null) {
		$this-&gt;__accessKey = $accessKey;
		$this-&gt;__secretKey = $secretKey;
		$this-&gt;__session_token = $session_token;
	}

	/**
	 * Check if AWS keys have been set
	 *
	 * @return boolean
	 */
	public function hasAuth() {
		return (null !== $this-&gt;__accessKey &amp;&amp; null !== $this-&gt;__secretKey);
	}

	/**
	 * Return session token, if any
	 *
	 * @return Null|String
	 */
	public function getSessionToken() {
		return $this-&gt;__session_token;
	}

	/**
	 * Set SSL on or off
	 *
	 * @param boolean $enabled SSL enabled
	 * @param boolean $validate SSL certificate validation
	 *
	 * @return void
	 */
	public function setSSL($enabled, $validate = true) {
		$this-&gt;useSSL = $enabled;
		$this-&gt;useSSLValidation = $validate;
	}

	/**
	 * Get SSL value. Determines whether use it or not.
	 *
	 * @return bool
	 */
	public function getuseSSL() {
		return $this-&gt;useSSL;
	}

	/**
	 * Get SSL validation value.
	 *
	 * @return bool
	 */
	public function getUseSSLValidation() {
		return $this-&gt;useSSLValidation;
	}
	
	/**
	 * Set SSL client certificates (experimental)
	 *
	 * @param string $sslCert SSL client certificate
	 * @param string $sslKey SSL client key
	 * @param string $sslCACert SSL CA cert (only required if you are having problems with your system CA cert)
	 *
	 * @return void
	 */
	public function setSSLAuth($sslCert = null, $sslKey = null, $sslCACert = null) {
		$this-&gt;sslCert = $sslCert;
		$this-&gt;sslKey = $sslKey;
		$this-&gt;sslCACert = $sslCACert;
	}


	/**
	 * Set proxy information
	 *
	 * @param string $host Proxy hostname and port (localhost:1234)
	 * @param string $user Proxy username
	 * @param string $pass Proxy password
	 * @param integer $type CURL proxy type
	 *
	 * @return void
	 */
	public function setProxy($host, $user = null, $pass = null, $type = CURLPROXY_SOCKS5, $port = null) {
		$this-&gt;proxy = array(&#039;host&#039; =&gt; $host, &#039;type&#039; =&gt; $type, &#039;user&#039; =&gt; $user, &#039;pass&#039; =&gt; $pass, &#039;port&#039; =&gt; $port);
	}


	/**
	 * Set the error mode to exceptions
	 *
	 * @param boolean $enabled Enable exceptions
	 *
	 * @return void
	 */
	public function setExceptions($enabled = true) {
		$this-&gt;useExceptions = $enabled;
	}


	/**
	 * Set signing key
	 *
	 * @param string $keyPairId AWS Key Pair ID
	 * @param string $signingKey Private Key
	 * @param boolean $isFile Load private key from file, set to false to load string
	 *
	 * @return boolean
	 */
	public function setSigningKey($keyPairId, $signingKey, $isFile = true) {
		$this-&gt;__signingKeyPairId = $keyPairId;
		if (($this-&gt;__signingKeyResource = openssl_pkey_get_private($isFile ?
		file_get_contents($signingKey) : $signingKey)) !== false) return true;
		$this-&gt;_triggerError(&#039;UpdraftPlus_S3::setSigningKey(): Unable to open load private key: &#039;.$signingKey, __FILE__, __LINE__);
		return false;
	}


	/**
	 * Free signing key from memory, MUST be called on older PHP versions if you are using setSigningKey()
	 *
	 * @return void
	 */
	public function freeSigningKey() {
		if (false !== $this-&gt;__signingKeyResource &amp;&amp; (!defined(&#039;PHP_MAJOR_VERSION&#039;) || PHP_MAJOR_VERSION &lt; 8)) { // @phpcs:ignore PHPCompatibility.Constants.NewConstants.php_major_versionFound
			openssl_free_key($this-&gt;__signingKeyResource);
		}
	}

	/**
	 * Set Signature Version
	 *
	 * @param string $version
	 * @return void
	 */
	public function setSignatureVersion($version = &#039;v2&#039;) {
		$this-&gt;signVer = $version;
	}

	/**
	 * Internal error handler
	 *
	 * @param string $message Error message
	 * @param string $file Filename
	 * @param integer $line Line number
	 * @param integer $code Error code
	 *
	 * @internal Internal error handler
	 * @throws  UpdraftPlus_S3Exception
	 *
	 * @return void
	 */
	private function _triggerError($message, $file, $line, $code = 0) {
		if ($this-&gt;useExceptions) {
			throw new UpdraftPlus_S3Exception($message, $file, $line, $code); // phpcs:ignore WordPress.Security.EscapeOutput.ExceptionNotEscaped -- The escaping should happen when the exception is caught and printed
		} else {
			trigger_error(esc_html($message), E_USER_WARNING); // phpcs:ignore WordPress.PHP.DevelopmentFunctions.error_log_trigger_error -- The trigger_error() function is intentionally used to generate user-level error messages.
		}
	}

	/**
	 * Get a list of buckets
	 *
	 * @param boolean $detailed Returns detailed bucket list when true
	 *
	 * @return array | false
	 */
	public function listBuckets($detailed = false) {
		$rest = new UpdraftPlus_S3Request(&#039;GET&#039;, &#039;&#039;, &#039;&#039;, $this-&gt;endpoint, $this-&gt;use_dns_bucket_name, $this);
		$rest = $rest-&gt;getResponse();
		if (false === $rest-&gt;error &amp;&amp; 200 !== $rest-&gt;code) {
			$rest-&gt;error = array(&#039;code&#039; =&gt; $rest-&gt;code, &#039;message&#039; =&gt; &#039;Unexpected HTTP status&#039;);
		}
		if (false !== $rest-&gt;error) {
			$this-&gt;_triggerError(sprintf(&quot;UpdraftPlus_S3::listBuckets(): [%s] %s&quot;, $rest-&gt;error[&#039;code&#039;],
			$rest-&gt;error[&#039;message&#039;]), __FILE__, __LINE__);
			return false;
		}
		$results = array();
		if (!isset($rest-&gt;body-&gt;Buckets)) return $results;

		if ($detailed) {
			if (isset($rest-&gt;body-&gt;Owner, $rest-&gt;body-&gt;Owner-&gt;ID, $rest-&gt;body-&gt;Owner-&gt;DisplayName))
			$results[&#039;owner&#039;] = array(
				&#039;id&#039; =&gt; (string)$rest-&gt;body-&gt;Owner-&gt;ID, &#039;name&#039; =&gt; (string)$rest-&gt;body-&gt;Owner-&gt;ID
			);
			$results[&#039;buckets&#039;] = array();
			foreach ($rest-&gt;body-&gt;Buckets-&gt;Bucket as $b) {
				$results[&#039;buckets&#039;][] = array(
					&#039;name&#039; =&gt; (string)$b-&gt;Name, &#039;time&#039; =&gt; strtotime((string)$b-&gt;CreationDate)
				);
			}
		} else {
			foreach ($rest-&gt;body-&gt;Buckets-&gt;Bucket as $b) $results[] = (string)$b-&gt;Name;
		}

		return $results;
	}

	public function useDNSBucketName($use = true, $bucket = &#039;&#039;) {
		$this-&gt;use_dns_bucket_name = $use;
		return true;
	}

	/**
	 * Get contents for a bucket
	 *
	 * If maxKeys is null this method will loop through truncated result sets
	 *
	 * @param string $bucket Bucket name
	 * @param string $prefix Prefix
	 * @param string $marker Marker (last file listed)
	 * @param string $maxKeys Max keys (maximum number of keys to return)
	 * @param string $delimiter Delimiter
	 * @param boolean $returnCommonPrefixes Set to true to return CommonPrefixes
	 *
	 * @return array | false
	 */
	public function getBucket($bucket, $prefix = null, $marker = null, $maxKeys = null, $delimiter = null, $returnCommonPrefixes = false) {
		$rest = new UpdraftPlus_S3Request(&#039;GET&#039;, $bucket, &#039;&#039;, $this-&gt;endpoint, $this-&gt;use_dns_bucket_name, $this);
		if (0 == $maxKeys) $maxKeys = null;
		if (!empty($prefix)) $rest-&gt;setParameter(&#039;prefix&#039;, $prefix);
		if (!empty($marker)) $rest-&gt;setParameter(&#039;marker&#039;, $marker);
		if (!empty($maxKeys)) $rest-&gt;setParameter(&#039;max-keys&#039;, $maxKeys);
		if (!empty($delimiter)) $rest-&gt;setParameter(&#039;delimiter&#039;, $delimiter);
		$response = $rest-&gt;getResponse();
		if (false === $response-&gt;error &amp;&amp; 200 !== $response-&gt;code) {
			$response-&gt;error = array(&#039;code&#039; =&gt; $response-&gt;code, &#039;message&#039; =&gt; &#039;Unexpected HTTP status&#039;);
		}
		if (false !== $response-&gt;error) {
			$this-&gt;_triggerError(sprintf(&quot;UpdraftPlus_S3::getBucket(): [%s] %s&quot;,
			$response-&gt;error[&#039;code&#039;], $response-&gt;error[&#039;message&#039;]), __FILE__, __LINE__);
			return false;
		}

		$results = array();

		$nextMarker = null;
		if (isset($response-&gt;body, $response-&gt;body-&gt;Contents))
		foreach ($response-&gt;body-&gt;Contents as $c) {
			$results[(string)$c-&gt;Key] = array(
				&#039;name&#039; =&gt; (string)$c-&gt;Key,
				&#039;time&#039; =&gt; strtotime((string)$c-&gt;LastModified),
				&#039;size&#039; =&gt; (int)$c-&gt;Size,
				&#039;hash&#039; =&gt; substr((string)$c-&gt;ETag, 1, -1)
			);
			$nextMarker = (string)$c-&gt;Key;
		}

		if ($returnCommonPrefixes &amp;&amp; isset($response-&gt;body, $response-&gt;body-&gt;CommonPrefixes))
			foreach ($response-&gt;body-&gt;CommonPrefixes as $c)
				$results[(string)$c-&gt;Prefix] = array(&#039;prefix&#039; =&gt; (string)$c-&gt;Prefix);

		if (isset($response-&gt;body, $response-&gt;body-&gt;IsTruncated) &amp;&amp;
		(string)$response-&gt;body-&gt;IsTruncated == &#039;false&#039;) return $results;

		if (isset($response-&gt;body, $response-&gt;body-&gt;NextMarker))
			$nextMarker = (string)$response-&gt;body-&gt;NextMarker;

		// Loop through truncated results if maxKeys isn&#039;t specified
		if (null == $maxKeys &amp;&amp; null !== $nextMarker &amp;&amp; &#039;true&#039; == (string)$response-&gt;body-&gt;IsTruncated)
		do
		{
			$rest = new UpdraftPlus_S3Request(&#039;GET&#039;, $bucket, &#039;&#039;, $this-&gt;endpoint, $this-&gt;use_dns_bucket_name, $this);
			if (!empty($prefix)) $rest-&gt;setParameter(&#039;prefix&#039;, $prefix);
			$rest-&gt;setParameter(&#039;marker&#039;, $nextMarker);
			if (!empty($delimiter)) $rest-&gt;setParameter(&#039;delimiter&#039;, $delimiter);

			if (false == ($response = $rest-&gt;getResponse()) || 200 !== $response-&gt;code) break;

			if (isset($response-&gt;body, $response-&gt;body-&gt;Contents))
			foreach ($response-&gt;body-&gt;Contents as $c)
			{
				$results[(string)$c-&gt;Key] = array(
					&#039;name&#039; =&gt; (string)$c-&gt;Key,
					&#039;time&#039; =&gt; strtotime((string)$c-&gt;LastModified),
					&#039;size&#039; =&gt; (int)$c-&gt;Size,
					&#039;hash&#039; =&gt; substr((string)$c-&gt;ETag, 1, -1)
				);
				$nextMarker = (string)$c-&gt;Key;
			}

			if ($returnCommonPrefixes &amp;&amp; isset($response-&gt;body, $response-&gt;body-&gt;CommonPrefixes))
				foreach ($response-&gt;body-&gt;CommonPrefixes as $c)
					$results[(string)$c-&gt;Prefix] = array(&#039;prefix&#039; =&gt; (string)$c-&gt;Prefix);

			if (isset($response-&gt;body, $response-&gt;body-&gt;NextMarker))
				$nextMarker = (string)$response-&gt;body-&gt;NextMarker;

		} while (false !== $response &amp;&amp; &#039;true&#039; == (string)$response-&gt;body-&gt;IsTruncated);

		return $results;
	}


	/**
	 * Put a bucket
	 *
	 * @param  string $bucket Bucket name
	 * @param  string ACL_PRIVATE ACL flag
	 * @param  mixed  $location Set as &quot;EU&quot; to create buckets hosted in Europe
	 * @return boolean
	 */
	public function putBucket($bucket, $acl = self::ACL_PRIVATE, $location = false) {
		$rest = new UpdraftPlus_S3Request(&#039;PUT&#039;, $bucket, &#039;&#039;, $this-&gt;endpoint, $this-&gt;use_dns_bucket_name, $this);
		$rest-&gt;setAmzHeader(&#039;x-amz-acl&#039;, $acl);

		if (false === $location) $location = $this-&gt;getRegion();

		if (false !== $location &amp;&amp; &#039;us-east-1&#039; !== $location) {
			$dom = new DOMDocument;
			$createBucketConfiguration = $dom-&gt;createElement(&#039;CreateBucketConfiguration&#039;);
			$locationConstraint = $dom-&gt;createElement(&#039;LocationConstraint&#039;, $location);
			$createBucketConfiguration-&gt;appendChild($locationConstraint);
			$dom-&gt;appendChild($createBucketConfiguration);
			$rest-&gt;data = $dom-&gt;saveXML();
			$rest-&gt;size = strlen($rest-&gt;data);
			$rest-&gt;setHeader(&#039;Content-Type&#039;, &#039;application/xml&#039;);
		}
		$rest = $rest-&gt;getResponse();

		if (false === $rest-&gt;error &amp;&amp; 200 !== $rest-&gt;code) {
			$rest-&gt;error = array(&#039;code&#039; =&gt; $rest-&gt;code, &#039;message&#039; =&gt; &#039;Unexpected HTTP status&#039;);
		}

		if (false !== $rest-&gt;error) {
			$this-&gt;_triggerError(sprintf(&quot;UpdraftPlus_S3::putBucket({$bucket}, {$acl}, {$location}): [%s] %s&quot;,
			$rest-&gt;error[&#039;code&#039;], $rest-&gt;error[&#039;message&#039;]), __FILE__, __LINE__);
			return false;
		}
		return true;
	}


	/**
	 * Delete an empty bucket
	 *
	 * @param  string $bucket Bucket name
	 *
	 * @return boolean
	 */
	public function deleteBucket($bucket) {
		$rest = new UpdraftPlus_S3Request(&#039;DELETE&#039;, $bucket, &#039;&#039;, $this-&gt;endpoint, $this-&gt;use_dns_bucket_name, $this);
		$rest = $rest-&gt;getResponse();
		if (false === $rest-&gt;error &amp;&amp; 204 !== $rest-&gt;code) {
			$rest-&gt;error = array(&#039;code&#039; =&gt; $rest-&gt;code, &#039;message&#039; =&gt; &#039;Unexpected HTTP status&#039;);
		}

		if (false !== $rest-&gt;error) {
			$this-&gt;_triggerError(sprintf(&quot;UpdraftPlus_S3::deleteBucket({$bucket}): [%s] %s&quot;,
			$rest-&gt;error[&#039;code&#039;], $rest-&gt;error[&#039;message&#039;]), __FILE__, __LINE__);
			return false;
		}
		return true;
	}


	/**
	 * Create input info array for putObject()
	 *
	 * @param  string $file Input file
	 * @param  mixed  $md5sum Use MD5 hash (supply a string if you want to use your own)
	 * @return array | false
	 */
	public function inputFile($file, $md5sum = true) {
		if (!file_exists($file) || !is_file($file) || !is_readable($file)) {
			$this-&gt;_triggerError(&#039;UpdraftPlus_S3::inputFile(): Unable to open input file: &#039;.$file, __FILE__, __LINE__);
			return false;
		}
		return array(&#039;file&#039; =&gt; $file, &#039;size&#039; =&gt; filesize($file), &#039;md5sum&#039; =&gt; $md5sum !== false ?
		(is_string($md5sum) ? $md5sum : base64_encode(md5_file($file, true))) : &#039;&#039;, &#039;sha256sum&#039; =&gt; hash_file(&#039;sha256&#039;, $file));
	}


	/**
	 * Create input array info for putObject() with a resource
	 *
	 * @param string $resource Input resource to read from
	 * @param integer $bufferSize Input byte size
	 * @param string $md5sum MD5 hash to send (optional)
	 * @return array | false
	 */
	public function inputResource(&amp;$resource, $bufferSize, $md5sum = &#039;&#039;) {
		if (!is_resource($resource) || $bufferSize &lt; 0) {
			$this-&gt;_triggerError(&#039;UpdraftPlus_S3::inputResource(): Invalid resource or buffer size&#039;, __FILE__, __LINE__);
			return false;
		}
		$input = array(&#039;size&#039; =&gt; $bufferSize, &#039;md5sum&#039; =&gt; $md5sum);
		$input[&#039;fp&#039;] =&amp; $resource;
		return $input;
	}

	/**
	 * Initiate a multi-part upload (http://docs.amazonwebservices.com/AmazonS3/latest/API/mpUploadInitiate.html)
	 *
	 * @param string $bucket Bucket name
	 * @param string $uri Object URI
	 * @param string $acl ACL constant
	 * @param array $metaHeaders Array of x-amz-meta-* headers
	 * @param array $requestHeaders Array of request headers or content type as a string
	 * @param string $storageClass Storage class constant
	 *
	 * @return string | false
	 */
	public function initiateMultipartUpload ($bucket, $uri, $acl = self::ACL_PRIVATE, $metaHeaders = array(), $requestHeaders = array(), $storageClass = self::STORAGE_CLASS_STANDARD) {

		$rest = new UpdraftPlus_S3Request(&#039;POST&#039;, $bucket, $uri, $this-&gt;endpoint, $this-&gt;use_dns_bucket_name, $this);
		$rest-&gt;setParameter(&#039;uploads&#039;,&#039;&#039;);

		// Custom request headers (Content-Type, Content-Disposition, Content-Encoding)
		if (is_array($requestHeaders))
			foreach ($requestHeaders as $h =&gt; $v) $rest-&gt;setHeader($h, $v);

		// Set storage class
		if ($storageClass !== self::STORAGE_CLASS_STANDARD) // Storage class
			$rest-&gt;setAmzHeader(&#039;x-amz-storage-class&#039;, $storageClass);

		// Set ACL headers
		$rest-&gt;setAmzHeader(&#039;x-amz-acl&#039;, $acl);
		foreach ($metaHeaders as $h =&gt; $v) $rest-&gt;setAmzHeader(&#039;x-amz-meta-&#039;.$h, $v);

		// Carry out the HTTP operation
		$rest-&gt;getResponse();

		if (false === $rest-&gt;response-&gt;error &amp;&amp; 200 !== $rest-&gt;response-&gt;code) {
			$rest-&gt;response-&gt;error = array(&#039;code&#039; =&gt; $rest-&gt;response-&gt;code, &#039;message&#039; =&gt; &#039;Unexpected HTTP status&#039;);
		}

		if (false !== $rest-&gt;response-&gt;error) {
			$this-&gt;_triggerError(sprintf(&quot;UpdraftPlus_S3::initiateMultipartUpload(): [%s] %s&quot;,
			$rest-&gt;response-&gt;error[&#039;code&#039;], $rest-&gt;response-&gt;error[&#039;message&#039;]), __FILE__, __LINE__);
			return false;
		} elseif (isset($rest-&gt;response-&gt;body)) {
			// DreamObjects already returns a SimpleXMLElement here. Not sure how that works.
			if (is_a($rest-&gt;response-&gt;body, &#039;SimpleXMLElement&#039;)) {
				$body = $rest-&gt;response-&gt;body;
			} else {
				$body = new SimpleXMLElement($rest-&gt;response-&gt;body);
			}
			return (string) $body-&gt;UploadId;
		}

		// It is a programming error if we reach this line
		return false;

	}

	/**
	 * Upload a part of a multi-part set (http://docs.amazonwebservices.com/AmazonS3/latest/API/mpUploadUploadPart.html)
	 * The chunk is read into memory, so make sure that you have enough (or patch this function to work another way!)
	 *
	 * @param string $bucket Bucket name
	 * @param string $uri Object URI
	 * @param string $uploadId uploadId returned previously from initiateMultipartUpload
	 * @param integer $partNumber sequential part number to upload
	 * @param string $filePath file to upload content from
	 * @param integer $partSize number of bytes in each part (though final part may have fewer) - pass the same value each time (for this particular upload) - default 5MB (which is Amazon&#039;s minimum)
	 *
	 * @return string (ETag) | false
	 */
	public function uploadPart($bucket, $uri, $uploadId, $filePath, $partNumber, $partSize = 5242880) {

		$rest = new UpdraftPlus_S3Request(&#039;PUT&#039;, $bucket, $uri, $this-&gt;endpoint, $this-&gt;use_dns_bucket_name, $this);
		$rest-&gt;setParameter(&#039;partNumber&#039;, $partNumber);
		$rest-&gt;setParameter(&#039;uploadId&#039;, $uploadId);

		// Where to begin
		$fileOffset = ($partNumber - 1 ) * $partSize;

		// Download the smallest of the remaining bytes and the part size
		$fileBytes = min(filesize($filePath) - $fileOffset, $partSize);
		if ($fileBytes &lt; 0) $fileBytes = 0;

		$rest-&gt;setHeader(&#039;Content-Type&#039;, &#039;application/octet-stream&#039;);
		$rest-&gt;data = &quot;&quot;;

		if ($handle = fopen($filePath, &quot;rb&quot;)) {
			if ($fileOffset &gt;0) fseek($handle, $fileOffset);
			$bytes_read = 0;
			while ($fileBytes&gt;0 &amp;&amp; $read = fread($handle, max($fileBytes, 524488))) {
				$fileBytes = $fileBytes - strlen($read);
				$bytes_read += strlen($read);
				$rest-&gt;data = $rest-&gt;data . $read;
			}
			fclose($handle);
		} else {
			return false;
		}

 		$rest-&gt;setHeader(&#039;Content-MD5&#039;, base64_encode(md5($rest-&gt;data, true)));
		$rest-&gt;size = $bytes_read;

		$rest = $rest-&gt;getResponse();
		if (false === $rest-&gt;error &amp;&amp; 200 !== $rest-&gt;code) {
			$rest-&gt;error = array(&#039;code&#039; =&gt; $rest-&gt;code, &#039;message&#039; =&gt; &#039;Unexpected HTTP status&#039;);
		}

		if (false !== $rest-&gt;error) {
			$this-&gt;_triggerError(sprintf(&quot;UpdraftPlus_S3::uploadPart(): [%s] %s&quot;,
			$rest-&gt;error[&#039;code&#039;], $rest-&gt;error[&#039;message&#039;]), __FILE__, __LINE__);
			return false;
		}
		return $rest-&gt;headers[&#039;hash&#039;];
	}

	/**
	 * Complete a multi-part upload (http://docs.amazonwebservices.com/AmazonS3/latest/API/mpUploadComplete.html)
	 *
	 * @param string $bucket Bucket name
	 * @param string $uri Object URI
	 * @param string $uploadId uploadId returned previously from initiateMultipartUpload
	 * @param array $parts an ordered list of eTags of previously uploaded parts from uploadPart
	 * @return boolean
	 */
	public function completeMultipartUpload($bucket, $uri, $uploadId, $parts) {
		$rest = new UpdraftPlus_S3Request(&#039;POST&#039;, $bucket, $uri, $this-&gt;endpoint, $this-&gt;use_dns_bucket_name, $this);
		$rest-&gt;setParameter(&#039;uploadId&#039;, $uploadId);

		$xml = &quot;&lt;CompleteMultipartUpload&gt;\n&quot;;
		$partno = 1;
		foreach ($parts as $etag) {
			$xml .= &quot;&lt;Part&gt;&lt;PartNumber&gt;$partno&lt;/PartNumber&gt;&lt;ETag&gt;$etag&lt;/ETag&gt;&lt;/Part&gt;\n&quot;;
			$partno++;
		}
		$xml .= &quot;&lt;/CompleteMultipartUpload&gt;&quot;;

		$rest-&gt;data = $xml;
		$rest-&gt;size = strlen($rest-&gt;data);
		$rest-&gt;setHeader(&#039;Content-Type&#039;, &#039;application/xml&#039;);

		$rest = $rest-&gt;getResponse();
		if (false === $rest-&gt;error &amp;&amp; 200 !== $rest-&gt;code) {
			$rest-&gt;error = array(&#039;code&#039; =&gt; $rest-&gt;code, &#039;message&#039; =&gt; &#039;Unexpected HTTP status&#039;);
		}

		if (false !== $rest-&gt;error) {
			// Special case: when the error means &quot;you&#039;ve already done that&quot;. Turn it into success. See in: https://trello.com/c/6jJoiCG5
			if (&#039;InternalError&#039; == $rest-&gt;error[&#039;code&#039;] &amp;&amp; &#039;This multipart completion is already in progress&#039; == $rest-&gt;error[&#039;message&#039;]) {
				return true;
			}
			$this-&gt;_triggerError(sprintf(&quot;UpdraftPlus_S3::completeMultipartUpload(): [%s] %s&quot;,
			$rest-&gt;error[&#039;code&#039;], $rest-&gt;error[&#039;message&#039;]), __FILE__, __LINE__);
			return false;
		}
		return true;

	}

	/**
	 * Abort a multi-part upload (http://docs.amazonwebservices.com/AmazonS3/latest/API/mpUploadAbort.html)
	 *
	 * @param string $bucket Bucket name
	 * @param string $uri Object URI
	 * @param string $uploadId uploadId returned previously from initiateMultipartUpload
	 * @return boolean
	 */
	// TODO: From this line
	public function abortMultipartUpload ($bucket, $uri, $uploadId) {
		$rest = new UpdraftPlus_S3Request(&#039;DELETE&#039;, $bucket, $uri, $this-&gt;endpoint, $this-&gt;use_dns_bucket_name, $this);
		$rest-&gt;setParameter(&#039;uploadId&#039;, $uploadId);
		$rest = $rest-&gt;getResponse();
		if (false === $rest-&gt;error &amp;&amp; 204 !== $rest-&gt;code) {
			$rest-&gt;error = array(&#039;code&#039; =&gt; $rest-&gt;code, &#039;message&#039; =&gt; &#039;Unexpected HTTP status&#039;);
		}

		if (false !== $rest-&gt;error) {
			$this-&gt;_triggerError(sprintf(&quot;UpdraftPlus_S3::abortMultipartUpload(): [%s] %s&quot;,
			$rest-&gt;error[&#039;code&#039;], $rest-&gt;error[&#039;message&#039;]), __FILE__, __LINE__);
			return false;
		}
		return true;
	}

	/**
	 * Put an object
	 *
	 * @param mixed $input Input data
	 * @param string $bucket Bucket name
	 * @param string $uri Object URI
	 * @param string $acl ACL constant
	 * @param array $metaHeaders Array of x-amz-meta-* headers
	 * @param array $requestHeaders Array of request headers or content type as a string
	 * @param string $storageClass Storage class constant
	 *
	 * @return boolean
	 */
	public function putObject($input, $bucket, $uri, $acl = self::ACL_PRIVATE, $metaHeaders = array(), $requestHeaders = array(), $storageClass = self::STORAGE_CLASS_STANDARD) {
		if ($input === false) return false;
		$rest = new UpdraftPlus_S3Request(&#039;PUT&#039;, $bucket, $uri, $this-&gt;endpoint, $this-&gt;use_dns_bucket_name, $this);

		if (!is_array($input)) $input = array(
			&#039;data&#039; =&gt; $input, &#039;size&#039; =&gt; strlen($input),
			&#039;md5sum&#039; =&gt; base64_encode(md5($input, true)),
			&#039;sha256sum&#039; =&gt; hash(&#039;sha256&#039;, $input)
		);

		// Data
		if (isset($input[&#039;fp&#039;]))
			$rest-&gt;fp =&amp; $input[&#039;fp&#039;];
		elseif (isset($input[&#039;file&#039;]) &amp;&amp; is_file($input[&#039;file&#039;]))
			$rest-&gt;fp = @fopen($input[&#039;file&#039;], &#039;rb&#039;);
		elseif (isset($input[&#039;data&#039;]))
			$rest-&gt;data = $input[&#039;data&#039;];

		// Content-Length (required)
		if (isset($input[&#039;size&#039;]) &amp;&amp; $input[&#039;size&#039;] &gt;= 0) {
			$rest-&gt;size = $input[&#039;size&#039;];
		} else {
			if (isset($input[&#039;file&#039;]))
				$rest-&gt;size = filesize($input[&#039;file&#039;]);
			elseif (isset($input[&#039;data&#039;]))
				$rest-&gt;size = strlen($input[&#039;data&#039;]);
		}

		// Custom request headers (Content-Type, Content-Disposition, Content-Encoding)
		if (is_array($requestHeaders))
			foreach ($requestHeaders as $h =&gt; $v) $rest-&gt;setHeader($h, $v);
		elseif (is_string($requestHeaders)) // Support for legacy contentType parameter
			$input[&#039;type&#039;] = $requestHeaders;

		// Content-Type
		if (!isset($input[&#039;type&#039;])) {
			if (isset($requestHeaders[&#039;Content-Type&#039;]))
				$input[&#039;type&#039;] =&amp; $requestHeaders[&#039;Content-Type&#039;];
			elseif (isset($input[&#039;file&#039;]))
				$input[&#039;type&#039;] = $this-&gt;__getMimeType($input[&#039;file&#039;]);
			else
				$input[&#039;type&#039;] = &#039;application/octet-stream&#039;;
		}

		if ($storageClass !== self::STORAGE_CLASS_STANDARD) // Storage class
			$rest-&gt;setAmzHeader(&#039;x-amz-storage-class&#039;, $storageClass);
			
		if (!empty($this-&gt;_serverSideEncryption)) {
			$rest-&gt;setAmzHeader(&#039;x-amz-server-side-encryption&#039;, $this-&gt;_serverSideEncryption);
		}
		// We need to post with Content-Length and Content-Type, MD5 is optional
		if ($rest-&gt;size &gt;= 0 &amp;&amp; (false !== $rest-&gt;fp || false !== $rest-&gt;data)) {
			$rest-&gt;setHeader(&#039;Content-Type&#039;, $input[&#039;type&#039;]);
			if (isset($input[&#039;md5sum&#039;])) $rest-&gt;setHeader(&#039;Content-MD5&#039;, $input[&#039;md5sum&#039;]);

			if (isset($input[&#039;sha256sum&#039;])) $rest-&gt;setAmzHeader(&#039;x-amz-content-sha256&#039;, $input[&#039;sha256sum&#039;]);

			$rest-&gt;setAmzHeader(&#039;x-amz-acl&#039;, $acl);
			foreach ($metaHeaders as $h =&gt; $v) $rest-&gt;setAmzHeader(&#039;x-amz-meta-&#039;.$h, $v);
			$rest-&gt;getResponse();
		} else {
			$rest-&gt;response-&gt;error = array(&#039;code&#039; =&gt; 0, &#039;message&#039; =&gt; &#039;Missing input parameters&#039;);
		}

		if (false === $rest-&gt;response-&gt;error &amp;&amp; 200 !== $rest-&gt;response-&gt;code) {
			$rest-&gt;response-&gt;error = array(&#039;code&#039; =&gt; $rest-&gt;response-&gt;code, &#039;message&#039; =&gt; &#039;Unexpected HTTP status&#039;);
		}

		if (false !== $rest-&gt;response-&gt;error) {
			$this-&gt;_triggerError(sprintf(&quot;UpdraftPlus_S3::putObject(): [%s] %s&quot;,
			$rest-&gt;response-&gt;error[&#039;code&#039;], $rest-&gt;response-&gt;error[&#039;message&#039;]), __FILE__, __LINE__);
			return false;
		}
		return true;
	}


	/**
	 * Put an object from a file (legacy function)
	 *
	 * @param string $file Input file path
	 * @param string $bucket Bucket name
	 * @param string $uri Object URI
	 * @param string $acl ACL constant
	 * @param array  $metaHeaders Array of x-amz-meta-* headers
	 * @param string $contentType Content type
	 * @param string $storageClass
	 *
	 * @return boolean
	 */
	public function putObjectFile($file, $bucket, $uri, $acl = self::ACL_PRIVATE, $metaHeaders = array(), $contentType = null, $storageClass = self::STORAGE_CLASS_STANDARD) {
		return $this-&gt;putObject($this-&gt;inputFile($file), $bucket, $uri, $acl, $metaHeaders, $contentType, $storageClass);
	}

	/**
	 * Put an object from a string (legacy function)
	 *
	 * @param string $string Input data
	 * @param string $bucket Bucket name
	 * @param string $uri Object URI
	 * @param string $acl ACL constant
	 * @param array $metaHeaders Array of x-amz-meta-* headers
	 * @param string $contentType Content type
	 * @return boolean
	 */
	public function putObjectString($string, $bucket, $uri, $acl = self::ACL_PRIVATE, $metaHeaders = array(), $contentType = &#039;text/plain&#039;) {
		return $this-&gt;putObject($string, $bucket, $uri, $acl, $metaHeaders, $contentType);
	}

	/**
	 * Get an object
	 *
	 * @param string $bucket Bucket name
	 * @param string $uri Object URI
	 * @param mixed $saveTo Filename or resource to write to
	 * @param mixed $resume - if $saveTo is a resource, then this is either false or the value for a Range: header; otherwise, a boolean, indicating whether to resume if possible.
	 * @return mixed
	 */
	public function getObject($bucket, $uri, $saveTo = false, $resume = false) {
		$rest = new UpdraftPlus_S3Request(&#039;GET&#039;, $bucket, $uri, $this-&gt;endpoint, $this-&gt;use_dns_bucket_name, $this);
		if (false !== $saveTo) {
			if (is_resource($saveTo)) {
				$rest-&gt;fp = $saveTo;
				if (!is_bool($resume)) $rest-&gt;setHeader(&#039;Range&#039;, $resume);
			} else {
				if ($resume &amp;&amp; file_exists($saveTo)) {
					if (false !== ($rest-&gt;fp = @fopen($saveTo, &#039;ab&#039;))) {
						$rest-&gt;setHeader(&#039;Range&#039;, &quot;bytes=&quot;.filesize($saveTo).&#039;-&#039;);
						$rest-&gt;file = realpath($saveTo);
					} else {
						$rest-&gt;response-&gt;error = array(&#039;code&#039; =&gt; 0, &#039;message&#039; =&gt; &#039;Unable to open save file for writing: &#039;.$saveTo);
					}
				} else {
					if (false !== ($rest-&gt;fp = @fopen($saveTo, &#039;wb&#039;)))
						$rest-&gt;file = realpath($saveTo);
					else
						$rest-&gt;response-&gt;error = array(&#039;code&#039; =&gt; 0, &#039;message&#039; =&gt; &#039;Unable to open save file for writing: &#039;.$saveTo);
				}
			}
		}
		if (false === $rest-&gt;response-&gt;error) $rest-&gt;getResponse();

		if (false === $rest-&gt;response-&gt;error &amp;&amp; ( !$resume &amp;&amp; 200 != $rest-&gt;response-&gt;code) || ( $resume &amp;&amp; 206 != $rest-&gt;response-&gt;code &amp;&amp; 200 != $rest-&gt;response-&gt;code))
			$rest-&gt;response-&gt;error = array(&#039;code&#039; =&gt; $rest-&gt;response-&gt;code, &#039;message&#039; =&gt; &#039;Unexpected HTTP status&#039;);
		if (false !== $rest-&gt;response-&gt;error) {
			$this-&gt;_triggerError(sprintf(&quot;UpdraftPlus_S3::getObject({$bucket}, {$uri}): [%s] %s&quot;,
			$rest-&gt;response-&gt;error[&#039;code&#039;], $rest-&gt;response-&gt;error[&#039;message&#039;]), __FILE__, __LINE__);
			return false;
		}
		return $rest-&gt;response;
	}


	/**
	 * Get object information
	 *
	 * @param string $bucket Bucket name
	 * @param string $uri Object URI
	 * @param boolean $returnInfo Return response information
	 *
	 * @return mixed | false
	 */
	public function getObjectInfo($bucket, $uri, $returnInfo = true) {
		$rest = new UpdraftPlus_S3Request(&#039;HEAD&#039;, $bucket, $uri, $this-&gt;endpoint, $this-&gt;use_dns_bucket_name, $this);
		$rest = $rest-&gt;getResponse();
		if (false === $rest-&gt;error &amp;&amp; (200 !== $rest-&gt;code &amp;&amp; 404 !== $rest-&gt;code))
			$rest-&gt;error = array(&#039;code&#039; =&gt; $rest-&gt;code, &#039;message&#039; =&gt; &#039;Unexpected HTTP status&#039;);
		if (false !== $rest-&gt;error) {
			$this-&gt;_triggerError(sprintf(&quot;UpdraftPlus_S3::getObjectInfo({$bucket}, {$uri}): [%s] %s&quot;,
			$rest-&gt;error[&#039;code&#039;], $rest-&gt;error[&#039;message&#039;]), __FILE__, __LINE__);
			return false;
		}
		return (200 == $rest-&gt;code) ? ($returnInfo ? $rest-&gt;headers : true) : false;
	}

	/**
	 * Copy an object
	 *
	 * @param string $bucket Source bucket name
	 * @param string $uri Source object URI
	 * @param string $bucket Destination bucket name
	 * @param string $uri Destination object URI
	 * @param string $acl ACL constant
	 * @param array $metaHeaders Optional array of x-amz-meta-* headers
	 * @param array $requestHeaders Optional array of request headers (content type, disposition, etc.)
	 * @param string $storageClass Storage class constant
	 *
	 * @return mixed | false
	 */
	public function copyObject($srcBucket, $srcUri, $bucket, $uri, $acl = self::ACL_PRIVATE, $metaHeaders = array(), $requestHeaders = array(), $storageClass = self::STORAGE_CLASS_STANDARD) {
		$rest = new UpdraftPlus_S3Request(&#039;PUT&#039;, $bucket, $uri, $this-&gt;endpoint, $this-&gt;use_dns_bucket_name, $this);
		$rest-&gt;setHeader(&#039;Content-Length&#039;, 0);
		foreach ($requestHeaders as $h =&gt; $v) $rest-&gt;setHeader($h, $v);
		foreach ($metaHeaders as $h =&gt; $v) $rest-&gt;setAmzHeader(&#039;x-amz-meta-&#039;.$h, $v);
		if (self::STORAGE_CLASS_STANDARD !== $storageClass) // Storage class
			$rest-&gt;setAmzHeader(&#039;x-amz-storage-class&#039;, $storageClass);
		$rest-&gt;setAmzHeader(&#039;x-amz-acl&#039;, $acl);
		$rest-&gt;setAmzHeader(&#039;x-amz-copy-source&#039;, sprintf(&#039;/%s/%s&#039;, $srcBucket, rawurlencode($srcUri)));
		if (sizeof($requestHeaders) &gt; 0 || sizeof($metaHeaders) &gt; 0)
			$rest-&gt;setAmzHeader(&#039;x-amz-metadata-directive&#039;, &#039;REPLACE&#039;);

		$rest = $rest-&gt;getResponse();
		if (false === $rest-&gt;error &amp;&amp; 200 !== $rest-&gt;code) {
			$rest-&gt;error = array(&#039;code&#039; =&gt; $rest-&gt;code, &#039;message&#039; =&gt; &#039;Unexpected HTTP status&#039;);
		}

		if (false !== $rest-&gt;error) {
			$this-&gt;_triggerError(sprintf(&quot;UpdraftPlus_S3::copyObject({$srcBucket}, {$srcUri}, {$bucket}, {$uri}): [%s] %s&quot;,
			$rest-&gt;error[&#039;code&#039;], $rest-&gt;error[&#039;message&#039;]), __FILE__, __LINE__);
			return false;
		}
		return isset($rest-&gt;body-&gt;LastModified, $rest-&gt;body-&gt;ETag) ? array(
			&#039;time&#039; =&gt; strtotime((string)$rest-&gt;body-&gt;LastModified),
			&#039;hash&#039; =&gt; substr((string)$rest-&gt;body-&gt;ETag, 1, -1)
		) : false;
	}


	/**
	 * Set logging for a bucket
	 *
	 * @param string $bucket Bucket name
	 * @param string $targetBucket Target bucket (where logs are stored)
	 * @param string $targetPrefix Log prefix (e,g; domain.com-)
	 *
	 * @return boolean
	 */
	public function setBucketLogging($bucket, $targetBucket, $targetPrefix = null) {
		// The S3 log delivery group has to be added to the target bucket&#039;s ACP
		if (null !== $targetBucket &amp;&amp; false !== ($acp = $this-&gt;getAccessControlPolicy($targetBucket, &#039;&#039;))) {
			// Only add permissions to the target bucket when they do not exist
			$aclWriteSet = false;
			$aclReadSet = false;
			foreach ($acp[&#039;acl&#039;] as $acl)
			if (&#039;Group&#039; == $acl[&#039;type&#039;] &amp;&amp; &#039;http://acs.amazonaws.com/groups/s3/LogDelivery&#039; == $acl[&#039;uri&#039;]) {
				if ($acl[&#039;permission&#039;] == &#039;WRITE&#039;) $aclWriteSet = true;
				elseif ($acl[&#039;permission&#039;] == &#039;READ_ACP&#039;) $aclReadSet = true;
			}
			if (!$aclWriteSet) $acp[&#039;acl&#039;][] = array(
				&#039;type&#039; =&gt; &#039;Group&#039;, &#039;uri&#039; =&gt; &#039;http://acs.amazonaws.com/groups/s3/LogDelivery&#039;, &#039;permission&#039; =&gt; &#039;WRITE&#039;
			);
			if (!$aclReadSet) $acp[&#039;acl&#039;][] = array(
				&#039;type&#039; =&gt; &#039;Group&#039;, &#039;uri&#039; =&gt; &#039;http://acs.amazonaws.com/groups/s3/LogDelivery&#039;, &#039;permission&#039; =&gt; &#039;READ_ACP&#039;
			);
			if (!$aclReadSet || !$aclWriteSet) $this-&gt;setAccessControlPolicy($targetBucket, &#039;&#039;, $acp);
		}

		$dom = new DOMDocument;
		$bucketLoggingStatus = $dom-&gt;createElement(&#039;BucketLoggingStatus&#039;);
		$bucketLoggingStatus-&gt;setAttribute(&#039;xmlns&#039;, &#039;http://s3.amazonaws.com/doc/2006-03-01/&#039;);
		if (null !== $targetBucket) {
			if (null == $targetPrefix) $targetPrefix = $bucket . &#039;-&#039;;
			$loggingEnabled = $dom-&gt;createElement(&#039;LoggingEnabled&#039;);
			$loggingEnabled-&gt;appendChild($dom-&gt;createElement(&#039;TargetBucket&#039;, $targetBucket));
			$loggingEnabled-&gt;appendChild($dom-&gt;createElement(&#039;TargetPrefix&#039;, $targetPrefix));
			// TODO: Add TargetGrants?
			$bucketLoggingStatus-&gt;appendChild($loggingEnabled);
		}
		$dom-&gt;appendChild($bucketLoggingStatus);

		$rest = new UpdraftPlus_S3Request(&#039;PUT&#039;, $bucket, &#039;&#039;, $this-&gt;endpoint, $this-&gt;use_dns_bucket_name, $this);
		$rest-&gt;setParameter(&#039;logging&#039;, null);
		$rest-&gt;data = $dom-&gt;saveXML();
		$rest-&gt;size = strlen($rest-&gt;data);
		$rest-&gt;setHeader(&#039;Content-Type&#039;, &#039;application/xml&#039;);
		$rest = $rest-&gt;getResponse();
		if (false === $rest-&gt;error &amp;&amp; 200 !== $rest-&gt;code) {
			$rest-&gt;error = array(&#039;code&#039; =&gt; $rest-&gt;code, &#039;message&#039; =&gt; &#039;Unexpected HTTP status&#039;);
		}

		if (false !== $rest-&gt;error) {
			$this-&gt;_triggerError(sprintf(&quot;UpdraftPlus_S3::setBucketLogging({$bucket}, {$targetBucket}): [%s] %s&quot;,
			$rest-&gt;error[&#039;code&#039;], $rest-&gt;error[&#039;message&#039;]), __FILE__, __LINE__);
			return false;
		}
		return true;
	}


	/**
	 * Get logging status for a bucket
	 *
	 * This will return false if logging is not enabled.
	 * Note: To enable logging, you also need to grant write access to the log group
	 *
	 * @param string $bucket Bucket name
	 *
	 * @return array | false
	 */
	public function getBucketLogging($bucket) {
		$rest = new UpdraftPlus_S3Request(&#039;GET&#039;, $bucket, &#039;&#039;, $this-&gt;endpoint, $this-&gt;use_dns_bucket_name, $this);
		$rest-&gt;setParameter(&#039;logging&#039;, null);
		$rest = $rest-&gt;getResponse();
		if (false === $rest-&gt;error &amp;&amp; 200 !== $rest-&gt;code) {
			$rest-&gt;error = array(&#039;code&#039; =&gt; $rest-&gt;code, &#039;message&#039; =&gt; &#039;Unexpected HTTP status&#039;);
		}

		if (false !== $rest-&gt;error) {
			$this-&gt;_triggerError(sprintf(&quot;UpdraftPlus_S3::getBucketLogging({$bucket}): [%s] %s&quot;,
			$rest-&gt;error[&#039;code&#039;], $rest-&gt;error[&#039;message&#039;]), __FILE__, __LINE__);
			return false;
		}
		if (!isset($rest-&gt;body-&gt;LoggingEnabled)) return false; // No logging
		return array(
			&#039;targetBucket&#039; =&gt; (string)$rest-&gt;body-&gt;LoggingEnabled-&gt;TargetBucket,
			&#039;targetPrefix&#039; =&gt; (string)$rest-&gt;body-&gt;LoggingEnabled-&gt;TargetPrefix,
		);
	}

	/**
	 * Disable bucket logging
	 *
	 * @param string $bucket Bucket name
	 *
	 * @return boolean
	 */
	public function disableBucketLogging($bucket) {
		return $this-&gt;setBucketLogging($bucket, null);
	}

	/**
	 * Get a bucket&#039;s location
	 *
	 * @param string $bucket Bucket name
	 *
	 * @return String | Boolean - A boolean result will be false, indicating failure.
	 * 
	 */
	public function getBucketLocation($bucket) {
		$rest = new UpdraftPlus_S3Request(&#039;GET&#039;, $bucket, &#039;&#039;, $this-&gt;endpoint, $this-&gt;use_dns_bucket_name, $this);
		$rest-&gt;setParameter(&#039;location&#039;, null);
		$rest = $rest-&gt;getResponse();
		
		global $updraftplus;

		if (false !== $rest-&gt;error &amp;&amp; &#039;AuthorizationHeaderMalformed&#039; == $rest-&gt;error[&#039;code&#039;] &amp;&amp; !empty($rest-&gt;error[&#039;region&#039;])) {
			// The location request was sent to the wrong region... but the response tells us the correct region, which is all we wanted.
			return $rest-&gt;error[&#039;region&#039;];
		}
		
		if (false === $rest-&gt;error &amp;&amp; 200 !== $rest-&gt;code) {
			$rest-&gt;error = array(&#039;code&#039; =&gt; $rest-&gt;code, &#039;message&#039; =&gt; &#039;Unexpected HTTP status&#039;);
		}
		if (false !== $rest-&gt;error) {
			$this-&gt;_triggerError(sprintf(&quot;UpdraftPlus_S3::getBucketLocation({$bucket}): [%s] %s&quot;,
			$rest-&gt;error[&#039;code&#039;], $rest-&gt;error[&#039;message&#039;]), __FILE__, __LINE__);
			return false;
		}
		
		return (isset($rest-&gt;body[0]) &amp;&amp; (string)$rest-&gt;body[0] !== &#039;&#039;) ? (string)$rest-&gt;body[0] : &#039;US&#039;;
	}

	/**
	 * Set object or bucket Access Control Policy
	 *
	 * @param string $bucket Bucket name
	 * @param string $uri Object URI
	 * @param array $acp Access Control Policy Data (same as the data returned from getAccessControlPolicy)
	 *
	 * @return boolean
	 */
	public function setAccessControlPolicy($bucket, $uri = &#039;&#039;, $acp = array()) {
		$dom = new DOMDocument;
		$dom-&gt;formatOutput = true;
		$accessControlPolicy = $dom-&gt;createElement(&#039;AccessControlPolicy&#039;);
		$accessControlList = $dom-&gt;createElement(&#039;AccessControlList&#039;);

		// It seems the owner has to be passed along too
		$owner = $dom-&gt;createElement(&#039;Owner&#039;);
		$owner-&gt;appendChild($dom-&gt;createElement(&#039;ID&#039;, $acp[&#039;owner&#039;][&#039;id&#039;]));
		$owner-&gt;appendChild($dom-&gt;createElement(&#039;DisplayName&#039;, $acp[&#039;owner&#039;][&#039;name&#039;]));
		$accessControlPolicy-&gt;appendChild($owner);

		foreach ($acp[&#039;acl&#039;] as $g) {
			$grant = $dom-&gt;createElement(&#039;Grant&#039;);
			$grantee = $dom-&gt;createElement(&#039;Grantee&#039;);
			$grantee-&gt;setAttribute(&#039;xmlns:xsi&#039;, &#039;http://www.w3.org/2001/XMLSchema-instance&#039;);
			if (isset($g[&#039;id&#039;])) {
				// CanonicalUser (DisplayName is omitted)
				$grantee-&gt;setAttribute(&#039;xsi:type&#039;, &#039;CanonicalUser&#039;);
				$grantee-&gt;appendChild($dom-&gt;createElement(&#039;ID&#039;, $g[&#039;id&#039;]));
			} elseif (isset($g[&#039;email&#039;])) {
				// AmazonCustomerByEmail
				$grantee-&gt;setAttribute(&#039;xsi:type&#039;, &#039;AmazonCustomerByEmail&#039;);
				$grantee-&gt;appendChild($dom-&gt;createElement(&#039;EmailAddress&#039;, $g[&#039;email&#039;]));
			} elseif (&#039;Group&#039; == $g[&#039;type&#039;]) {
				// Group
				$grantee-&gt;setAttribute(&#039;xsi:type&#039;, &#039;Group&#039;);
				$grantee-&gt;appendChild($dom-&gt;createElement(&#039;URI&#039;, $g[&#039;uri&#039;]));
			}
			$grant-&gt;appendChild($grantee);
			$grant-&gt;appendChild($dom-&gt;createElement(&#039;Permission&#039;, $g[&#039;permission&#039;]));
			$accessControlList-&gt;appendChild($grant);
		}

		$accessControlPolicy-&gt;appendChild($accessControlList);
		$dom-&gt;appendChild($accessControlPolicy);

		$rest = new UpdraftPlus_S3Request(&#039;PUT&#039;, $bucket, $uri, $this-&gt;endpoint, $this-&gt;use_dns_bucket_name, $this);
		$rest-&gt;setParameter(&#039;acl&#039;, null);
		$rest-&gt;data = $dom-&gt;saveXML();
		$rest-&gt;size = strlen($rest-&gt;data);
		$rest-&gt;setHeader(&#039;Content-Type&#039;, &#039;application/xml&#039;);
		$rest = $rest-&gt;getResponse();
		if (false === $rest-&gt;error &amp;&amp; 200 !== $rest-&gt;code)  {
			$rest-&gt;error = array(&#039;code&#039; =&gt; $rest-&gt;code, &#039;message&#039; =&gt; &#039;Unexpected HTTP status&#039;);
		}

		if (false !== $rest-&gt;error) {
			$this-&gt;_triggerError(sprintf(&quot;UpdraftPlus_S3::setAccessControlPolicy({$bucket}, {$uri}): [%s] %s&quot;,
			$rest-&gt;error[&#039;code&#039;], $rest-&gt;error[&#039;message&#039;]), __FILE__, __LINE__);
			return false;
		}
		return true;
	}


	/**
	 * Get object or bucket Access Control Policy
	 *
	 * @param string $bucket Bucket name
	 * @param string $uri Object URI
	 * @return mixed | false
	 */
	public function getAccessControlPolicy($bucket, $uri = &#039;&#039;) {
		$rest = new UpdraftPlus_S3Request(&#039;GET&#039;, $bucket, $uri, $this-&gt;endpoint, $this-&gt;use_dns_bucket_name, $this);
		$rest-&gt;setParameter(&#039;acl&#039;, null);
		$rest = $rest-&gt;getResponse();
		if (false === $rest-&gt;error &amp;&amp; 200 !== $rest-&gt;code) {
			$rest-&gt;error = array(&#039;code&#039; =&gt; $rest-&gt;code, &#039;message&#039; =&gt; &#039;Unexpected HTTP status&#039;);
		}

		if (false !== $rest-&gt;error) {
			$this-&gt;_triggerError(sprintf(&quot;UpdraftPlus_S3::getAccessControlPolicy({$bucket}, {$uri}): [%s] %s&quot;,
			$rest-&gt;error[&#039;code&#039;], $rest-&gt;error[&#039;message&#039;]), __FILE__, __LINE__);
			return false;
		}

		$acp = array();
		if (isset($rest-&gt;body-&gt;Owner, $rest-&gt;body-&gt;Owner-&gt;ID, $rest-&gt;body-&gt;Owner-&gt;DisplayName))
			$acp[&#039;owner&#039;] = array(
				&#039;id&#039; =&gt; (string)$rest-&gt;body-&gt;Owner-&gt;ID, &#039;name&#039; =&gt; (string)$rest-&gt;body-&gt;Owner-&gt;DisplayName
			);

		if (isset($rest-&gt;body-&gt;AccessControlList)) {
			$acp[&#039;acl&#039;] = array();
			foreach ($rest-&gt;body-&gt;AccessControlList-&gt;Grant as $grant) {
				foreach ($grant-&gt;Grantee as $grantee) {
					if (isset($grantee-&gt;ID, $grantee-&gt;DisplayName)) // CanonicalUser
						$acp[&#039;acl&#039;][] = array(
							&#039;type&#039; =&gt; &#039;CanonicalUser&#039;,
							&#039;id&#039; =&gt; (string)$grantee-&gt;ID,
							&#039;name&#039; =&gt; (string)$grantee-&gt;DisplayName,
							&#039;permission&#039; =&gt; (string)$grant-&gt;Permission
						);
					elseif (isset($grantee-&gt;EmailAddress)) // AmazonCustomerByEmail
						$acp[&#039;acl&#039;][] = array(
							&#039;type&#039; =&gt; &#039;AmazonCustomerByEmail&#039;,
							&#039;email&#039; =&gt; (string)$grantee-&gt;EmailAddress,
							&#039;permission&#039; =&gt; (string)$grant-&gt;Permission
						);
					elseif (isset($grantee-&gt;URI)) // Group
						$acp[&#039;acl&#039;][] = array(
							&#039;type&#039; =&gt; &#039;Group&#039;,
							&#039;uri&#039; =&gt; (string)$grantee-&gt;URI,
							&#039;permission&#039; =&gt; (string)$grant-&gt;Permission
						);
					else continue;
				}
			}
		}
		return $acp;
	}

	/**
	 * Delete an object
	 *
	 * @param string $bucket Bucket name
	 * @param string $uri Object URI
	 *
	 * @return boolean
	 */
	public function deleteObject($bucket, $uri) {
		$rest = new UpdraftPlus_S3Request(&#039;DELETE&#039;, $bucket, $uri, $this-&gt;endpoint, $this-&gt;use_dns_bucket_name, $this);
		$rest = $rest-&gt;getResponse();
		if (false === $rest-&gt;error &amp;&amp; 204 !== $rest-&gt;code) {
			$rest-&gt;error = array(&#039;code&#039; =&gt; $rest-&gt;code, &#039;message&#039; =&gt; &#039;Unexpected HTTP status&#039;);
		}

		if (false !== $rest-&gt;error) {
			$this-&gt;_triggerError(sprintf(&quot;UpdraftPlus_S3::deleteObject(): [%s] %s&quot;,
			$rest-&gt;error[&#039;code&#039;], $rest-&gt;error[&#039;message&#039;]), __FILE__, __LINE__);
			return false;
		}
		return true;
	}

	/**
	 * Get a query string authenticated URL
	 *
	 * @param string $bucket Bucket name
	 * @param string $uri Object URI
	 * @param integer $lifetime Lifetime in seconds
	 * @param boolean $hostBucket Use the bucket name as the hostname
	 * @param boolean $https Use HTTPS ($hostBucket should be false for SSL verification)
	 *
	 * @return string
	 */
	public function getAuthenticatedURL($bucket, $uri, $lifetime, $hostBucket = false, $https = false) {
		$expires = time() + $lifetime;
		$uri = str_replace(array(&#039;%2F&#039;, &#039;%2B&#039;), array(&#039;/&#039;, &#039;+&#039;), rawurlencode($uri));
		return sprintf(($https ? &#039;https&#039; : &#039;http&#039;).&#039;://%s/%s?AWSAccessKeyId=%s&amp;Expires=%u&amp;Signature=%s&#039;,
		// $hostBucket ? $bucket : $bucket.&#039;.s3.amazonaws.com&#039;, $uri, $this-&gt;__accessKey, $expires,
		$hostBucket ? $bucket : &#039;s3.amazonaws.com/&#039;.$bucket, $uri, $this-&gt;__accessKey, $expires,
		urlencode($this-&gt;__getHash(&quot;GET\n\n\n{$expires}\n/{$bucket}/{$uri}&quot;)));
	}

	/**
	 * Get MIME type for file
	 *
	 * @internal Used to get mime types
	 *
	 * @param string &amp;$file File path
	 *
	 * @return string
	 */
	public function __getMimeType(&amp;$file) {// phpcs:ignore PHPCompatibility.FunctionNameRestrictions.ReservedFunctionNames.MethodDoubleUnderscore -- Method name &quot;UpdraftPlus_S3Request::_responseHeaderCallback&quot; is discouraged; PHP has reserved all method names with a double underscore prefix for future use.
		$type = false;
		// Fileinfo documentation says fileinfo_open() will use the
		// MAGIC env var for the magic file
		$env_magic = UpdraftPlus_Manipulation_Functions::fetch_superglobal(&#039;env&#039;, &#039;MAGIC&#039;);
		if (extension_loaded(&#039;fileinfo&#039;) &amp;&amp; isset($env_magic) &amp;&amp;
		false !== ($finfo = finfo_open(FILEINFO_MIME, $env_magic))) {// phpcs:ignore PHPCompatibility.FunctionUse.NewFunctions.finfo_openFound -- The function finfo_open() is not present in PHP version 5.2 or earlier
			if (false !== ($type = finfo_file($finfo, $file))) {// phpcs:ignore PHPCompatibility.FunctionUse.NewFunctions.finfo_fileFound -- The function finfo_file() is not present in PHP version 5.2 or earlier
				// Remove the charset and grab the last content-type
				$type = explode(&#039; &#039;, str_replace(&#039;; charset=&#039;, &#039;;charset=&#039;, $type));
				$type = array_pop($type);
				$type = explode(&#039;;&#039;, $type);
				$type = trim(array_shift($type));
			}
			if (version_compare(PHP_VERSION, &#039;8.1&#039;, &#039;&lt;&#039;)) {
				finfo_close($finfo);// phpcs:ignore PHPCompatibility.FunctionUse.NewFunctions.finfo_closeFound -- The function finfo_close() is not present in PHP version 5.2 or earlier
			} else {
				unset($finfo); // On PHP 8.1+, finfo_close() is a no-op (deprecated in 8.5); unset the handle instead.
			}

		// If anyone is still using mime_content_type()
		} elseif (function_exists(&#039;mime_content_type&#039;)) {
			$type = trim(mime_content_type($file));
		}

		if (false !== $type &amp;&amp; strlen($type) &gt; 0) return $type;

		// Otherwise do it the old fashioned way
		static $exts = array(
			&#039;jpg&#039; =&gt; &#039;image/jpeg&#039;, &#039;gif&#039; =&gt; &#039;image/gif&#039;, &#039;png&#039; =&gt; &#039;image/png&#039;,
			&#039;tif&#039; =&gt; &#039;image/tiff&#039;, &#039;tiff&#039; =&gt; &#039;image/tiff&#039;, &#039;ico&#039; =&gt; &#039;image/x-icon&#039;,
			&#039;swf&#039; =&gt; &#039;application/x-shockwave-flash&#039;, &#039;pdf&#039; =&gt; &#039;application/pdf&#039;,
			&#039;zip&#039; =&gt; &#039;application/zip&#039;, &#039;gz&#039; =&gt; &#039;application/x-gzip&#039;,
			&#039;tar&#039; =&gt; &#039;application/x-tar&#039;, &#039;bz&#039; =&gt; &#039;application/x-bzip&#039;,
			&#039;bz2&#039; =&gt; &#039;application/x-bzip2&#039;, &#039;txt&#039; =&gt; &#039;text/plain&#039;,
			&#039;asc&#039; =&gt; &#039;text/plain&#039;, &#039;htm&#039; =&gt; &#039;text/html&#039;, &#039;html&#039; =&gt; &#039;text/html&#039;,
			&#039;css&#039; =&gt; &#039;text/css&#039;, &#039;js&#039; =&gt; &#039;text/javascript&#039;,
			&#039;xml&#039; =&gt; &#039;text/xml&#039;, &#039;xsl&#039; =&gt; &#039;application/xsl+xml&#039;,
			&#039;ogg&#039; =&gt; &#039;application/ogg&#039;, &#039;mp3&#039; =&gt; &#039;audio/mpeg&#039;, &#039;wav&#039; =&gt; &#039;audio/x-wav&#039;,
			&#039;avi&#039; =&gt; &#039;video/x-msvideo&#039;, &#039;mpg&#039; =&gt; &#039;video/mpeg&#039;, &#039;mpeg&#039; =&gt; &#039;video/mpeg&#039;,
			&#039;mov&#039; =&gt; &#039;video/quicktime&#039;, &#039;flv&#039; =&gt; &#039;video/x-flv&#039;, &#039;php&#039; =&gt; &#039;text/x-php&#039;
		);
		$ext = strtolower(pathInfo($file, PATHINFO_EXTENSION));
		return isset($exts[$ext]) ? $exts[$ext] : &#039;application/octet-stream&#039;;
	}


	/**
	 * Generate the auth string: &quot;AWS AccessKey:Signature&quot;
	 *
	 * @internal Used by UpdraftPlus_S3Request::getResponse()
	 *
	 * @param string $string String to sign
	 *
	 * @return string
	 */
	public function __getSignature($string) {// phpcs:ignore PHPCompatibility.FunctionNameRestrictions.ReservedFunctionNames.MethodDoubleUnderscore -- Method name &quot;UpdraftPlus_S3Request::_responseHeaderCallback&quot; is discouraged; PHP has reserved all method names with a double underscore prefix for future use.
		return &#039;AWS &#039;.$this-&gt;__accessKey.&#039;:&#039;.$this-&gt;__getHash($string);
	}


	/**
	 * Creates a HMAC-SHA1 hash
	 *
	 * This uses the hash extension if loaded
	 *
	 * @internal Used by __getSignature()
	 *
	 * @param string $string String to sign
	 *
	 * @return string
	 */
	private function __getHash($string) {// phpcs:ignore PHPCompatibility.FunctionNameRestrictions.ReservedFunctionNames.MethodDoubleUnderscore -- Method name &quot;UpdraftPlus_S3Request::_responseHeaderCallback&quot; is discouraged; PHP has reserved all method names with a double underscore prefix for future use.
		return base64_encode(extension_loaded(&#039;hash&#039;) ?
		hash_hmac(&#039;sha1&#039;, $string, $this-&gt;__secretKey, true) : pack(&#039;H*&#039;, sha1(
		(str_pad($this-&gt;__secretKey, 64, chr(0x00)) ^ (str_repeat(chr(0x5c), 64))) .
		pack(&#039;H*&#039;, sha1((str_pad($this-&gt;__secretKey, 64, chr(0x00)) ^
		(str_repeat(chr(0x36), 64))) . $string)))));
	}

	/**
	 * Generate the headers for AWS Signature V4
	 *
	 * @internal Used by UpdraftPlus_S3Request::getResponse()
	 * @param array $aHeaders amzHeaders
	 * @param array $headers
	 * @param string $method
	 * @param string $uri
	 * @param string $data
	 *
	 * @return array $headers
	 */
	public function __getSignatureV4($aHeaders, $headers, $method = &#039;GET&#039;, $uri = &#039;&#039;, $data = &#039;&#039;, $service = &#039;s3&#039;) {// phpcs:ignore PHPCompatibility.FunctionNameRestrictions.ReservedFunctionNames.MethodDoubleUnderscore -- Method name &quot;UpdraftPlus_S3Request::_responseHeaderCallback&quot; is discouraged; PHP has reserved all method names with a double underscore prefix for future use.
		$region = $this-&gt;getRegion();

		$algorithm   = &#039;AWS4-HMAC-SHA256&#039;;
		$amzHeaders  = array();
		$amzRequests = array();

		$amzDate = gmdate(&#039;Ymd\THis\Z&#039;);
		$amzDateStamp = gmdate(&#039;Ymd&#039;);

		// amz-date ISO8601 format? for aws request
		$amzHeaders[&#039;x-amz-date&#039;] = $amzDate;

		// CanonicalHeaders
		foreach ($headers as $k =&gt; $v) {
			$amzHeaders[strtolower($k)] = trim($v);
		}

		foreach ($aHeaders as $k =&gt; $v) {
			$amzHeaders[strtolower($k)] = trim($v);
		}

		// payload
		$payloadHash = isset($amzHeaders[&#039;x-amz-content-sha256&#039;]) ? $amzHeaders[&#039;x-amz-content-sha256&#039;] : hash(&#039;sha256&#039;, $data);
		if (!isset($amzHeaders[&#039;x-amz-content-sha256&#039;]) &amp;&amp; (!defined(&#039;UPDRAFTPLUS_S3_EXCLUDE_SIGV4_CONTENT_SHA256_HEADER&#039;) || !UPDRAFTPLUS_S3_EXCLUDE_SIGV4_CONTENT_SHA256_HEADER)) $amzHeaders[&#039;x-amz-content-sha256&#039;] = $payloadHash;
		uksort($amzHeaders, &#039;strcmp&#039;);

		// parameters
		$parameters = array();
		if (strpos($uri, &#039;?&#039;)) {
			list($uri, $query_str) = @explode(&#039;?&#039;, $uri);
			parse_str($query_str, $parameters);
			// &quot;Sort the parameter names by character code point in ascending order. Parameters with duplicate names should be sorted by value. For example, a parameter name that begins with the uppercase letter F precedes a parameter name that begins with a lowercase letter b.&quot;
			// N.B. Here we&#039;ve not looked at the values as we don&#039;t expect duplicates
			uksort($parameters, &#039;strcmp&#039;);
		}

		// Canonical Requests
		// &quot;Start with the HTTP request method (GET, PUT, POST, etc.)&quot;
		$amzRequests[] = $method;
		$uriQmPos = strpos($uri, &#039;?&#039;);
		$amzRequests[] = (false === $uriQmPos ? $uri : substr($uri, 0, $uriQmPos));
		$built_queries = &#039;&#039;;
		foreach ($parameters as $query =&gt; $val) {
			if (!empty($built_queries)) $built_queries .= &#039;&amp;&#039;;
			$built_queries .= &quot;$query=&quot;.rawurlencode($val);
		}
		$amzRequests[] = $built_queries;


		// add headers as string to requests
		foreach ($amzHeaders as $k =&gt; $v) {
			$amzRequests[] = $k . &#039;:&#039; . $v;
		}

		// add a blank entry so we end up with an extra line break
		$amzRequests[] = &#039;&#039;;

		// SignedHeaders
		$amzRequests[] = implode(&#039;;&#039;, array_keys($amzHeaders));

		// payload hash
		$amzRequests[] = $payloadHash;

		// request as string
		$amzRequestStr = implode(&quot;\n&quot;, $amzRequests);

		// CredentialScope
		$credentialScope = array();
		$credentialScope[] = $amzDateStamp;
		$credentialScope[] = $region;
		$credentialScope[] = $service;
		$credentialScope[] = &#039;aws4_request&#039;;

		// stringToSign
		$stringToSign = array();
		$stringToSign[] = $algorithm;
		$stringToSign[] = $amzDate;
		$stringToSign[] = implode(&#039;/&#039;, $credentialScope);
		$stringToSign[] = hash(&#039;sha256&#039;, $amzRequestStr);

		// as string
		$stringToSignStr = implode(&quot;\n&quot;, $stringToSign);

		// Make Signature
		$kSecret = &#039;AWS4&#039; . $this-&gt;__secretKey;
		$kDate = hash_hmac(&#039;sha256&#039;, $amzDateStamp, $kSecret, true);
		$kRegion = hash_hmac(&#039;sha256&#039;, $region, $kDate, true);
		$kService = hash_hmac(&#039;sha256&#039;, $service, $kRegion, true);
		$kSigning = hash_hmac(&#039;sha256&#039;, &#039;aws4_request&#039;, $kService, true);
		$signature = hash_hmac(&#039;sha256&#039;, $stringToSignStr, $kSigning);

		$authorization = array(
			&#039;Credential=&#039; . $this-&gt;__accessKey . &#039;/&#039; . implode(&#039;/&#039;, $credentialScope),
			&#039;SignedHeaders=&#039; . implode(&#039;;&#039;, array_keys($amzHeaders)),
			&#039;Signature=&#039; . $signature,
		);
		$authorizationStr = $algorithm . &#039; &#039; . implode(&#039;,&#039;, $authorization);

		$resultHeaders = array(
			&#039;X-AMZ-DATE&#039; =&gt; $amzDate,
			&#039;Authorization&#039; =&gt; $authorizationStr
		);
		if (!isset($aHeaders[&#039;x-amz-content-sha256&#039;])) {
			$resultHeaders[&#039;x-amz-content-sha256&#039;] = $payloadHash;
		}

		return $resultHeaders;
	}

	/**
	 * Create IAM user
	 *
	 * @param array $options
	 *
	 * @return array $response
	 */
	public function createUser($options) {
		$rest = new UpdraftPlus_IAMRequest(&#039;POST&#039;, &#039;&#039;, &#039;iam.amazonaws.com&#039;, $this);

		$rest-&gt;setParameter(&#039;Action&#039;, &#039;CreateUser&#039;);
		$rest-&gt;setParameter(&#039;Version&#039;, &#039;2010-05-08&#039;);
		$rest-&gt;setParameter(&#039;Path&#039;, $options[&#039;Path&#039;]);
		$rest-&gt;setParameter(&#039;UserName&#039;, $options[&#039;UserName&#039;]);

		$response = $rest-&gt;getResponse();

		if (isset($response[&#039;body&#039;][&#039;CreateUserResult&#039;])) {
			$response[&#039;User&#039;] = $response[&#039;body&#039;][&#039;CreateUserResult&#039;][&#039;User&#039;];
			unset($response[&#039;body&#039;][&#039;CreateUserResult&#039;]);
		}

		return $response;
	}

	/**
	 * Create access key for IAM user
	 *
	 * @param string $username
	 *
	 * @return array $response
	 */
	public function createAccessKey($username) {
		$rest = new UpdraftPlus_IAMRequest(&#039;POST&#039;, &#039;&#039;, &#039;iam.amazonaws.com&#039;, $this);

		$rest-&gt;setParameter(&#039;Action&#039;, &#039;CreateAccessKey&#039;);
		$rest-&gt;setParameter(&#039;Version&#039;, &#039;2010-05-08&#039;);
		$rest-&gt;setParameter(&#039;UserName&#039;, $username);

		$response = $rest-&gt;getResponse();

		if (isset($response[&#039;body&#039;][&#039;CreateAccessKeyResult&#039;])) {
			$response[&#039;AccessKey&#039;] = $response[&#039;body&#039;][&#039;CreateAccessKeyResult&#039;][&#039;AccessKey&#039;];
			unset($response[&#039;body&#039;][&#039;CreateAccessKeyResult&#039;]);
		}

		return $response;
	}

	/**
	 * Put user policy IAM user
	 *
	 * @param array $options
	 *
	 * @return array $response
	 */
	public function putUserPolicy($options) {
		$rest = new UpdraftPlus_IAMRequest(&#039;POST&#039;, &#039;&#039;, &#039;iam.amazonaws.com&#039;, $this);

		$rest-&gt;setParameter(&#039;Action&#039;, &#039;PutUserPolicy&#039;);
		$rest-&gt;setParameter(&#039;UserName&#039;, $options[&#039;UserName&#039;]);
		$rest-&gt;setParameter(&#039;PolicyName&#039;, $options[&#039;PolicyName&#039;]);
		$rest-&gt;setParameter(&#039;PolicyDocument&#039;, preg_replace(&quot;/[\n\r ]/&quot;, &#039;&#039;, $options[&#039;PolicyDocument&#039;]));
		$rest-&gt;setParameter(&#039;Version&#039;, &#039;2010-05-08&#039;);

		$response = $rest-&gt;getResponse();

		if (isset($response[&#039;body&#039;][&#039;PutUserPolicyResult&#039;])) {
			$response[&#039;AccessKey&#039;] = $response[&#039;body&#039;][&#039;PutUserPolicyResult&#039;][&#039;UserPolicy&#039;];
			unset($response[&#039;body&#039;][&#039;PutUserPolicyResult&#039;]);
		}

		return $response;
	}

}

abstract class UpdraftPlus_AWSRequest {

	protected $endpoint, $verb, $bucket, $uri, $resource = &#039;&#039;, $parameters = array(),
	$amzHeaders = array(), $headers = array(
		&#039;Host&#039; =&gt; &#039;&#039;, &#039;Date&#039; =&gt; &#039;&#039;, &#039;Content-MD5&#039; =&gt; &#039;&#039;, &#039;Content-Type&#039; =&gt; &#039;&#039;
	);
	public $fp = false, $size = 0, $data = false, $response;
	
	protected $s3;

	/**
	 * Set request parameter
	 *
	 * @param string $key Key
	 * @param string $value Value
	 *
	 * @return void
	 */
	public function setParameter($key, $value) {
		$this-&gt;parameters[$key] = $value;
	}

	/**
	 * Set request header
	 *
	 * @param string $key Key
	 * @param string $value Value
	 *
	 * @return void
	 */
	public function setHeader($key, $value) {
		$this-&gt;headers[$key] = $value;
	}

	/**
	 * Set x-amz-meta-* header
	 *
	 * @param string $key Key
	 * @param string $value Value
	 *
	 * @return void
	 */
	public function setAmzHeader($key, $value) {
		$this-&gt;amzHeaders[$key] = $value;
	}

	/**
	 * Sort compare for meta headers
	 *
	 * @internal Used to sort x-amz meta headers
	 *
	 * @param string $a String A
	 * @param string $b String B
	 *
	 * @return integer
	 */
	public function __sortMetaHeadersCmp($a, $b) {// phpcs:ignore PHPCompatibility.FunctionNameRestrictions.ReservedFunctionNames.MethodDoubleUnderscore -- Method name &quot;UpdraftPlus_S3Request::_responseHeaderCallback&quot; is discouraged; PHP has reserved all method names with a double underscore prefix for future use.
		$lenA = strpos($a, &#039;:&#039;);
		$lenB = strpos($b, &#039;:&#039;);
		$minLen = min($lenA, $lenB);
		$ncmp = strncmp($a, $b, $minLen);
		if ($lenA == $lenB) return $ncmp;
		if (0 == $ncmp) return $lenA &lt; $lenB ? -1 : 1;
		return $ncmp;
	}

	/**
	 * CURL write callback
	 *
	 * @param resource $curl CURL resource
	 * @param string $data Data
	 *
	 * @return integer
	 */
	public function _responseWriteCallback($curl, $data) {
		if (in_array($this-&gt;response-&gt;code, array(200, 206)) &amp;&amp; false !== $this-&gt;fp)
			return fwrite($this-&gt;fp, $data);
		else
			$this-&gt;response-&gt;body = (empty($this-&gt;response-&gt;body)) ? $data : $this-&gt;response-&gt;body.$data;
		return strlen($data);
	}

	/**
	 * Check DNS conformity (suitability for Host: header addressing).
	 * Many of the rules below apply to all new buckets; but some don&#039;t apply to legacy buckets created before certain dates.
	 * 
	 * This is used to rule out invalid names
	 *
	 * @see https://docs.aws.amazon.com/AmazonS3/latest/userguide/bucketnamingrules.html
	 *
	 * @param  string $bucket Bucket name
	 *
	 * @return boolean
	 */
	public function _dnsBucketName($bucket) {
		// A DNS bucket name cannot have len&gt;63
		if (strlen($bucket) &gt; 63) return false;
		// A DNS bucket name must not have a character in other than a-z, 0-9, . -
		if (preg_match(&quot;/[^a-z0-9\.-]/&quot;, $bucket)) return false;
		// A DNS bucket name cannot contain -.
		if (false !== strstr($bucket, &#039;-.&#039;)) return false;
		// A DNS bucket name cannot contain ..
		if (false !== strstr($bucket, &#039;..&#039;)) return false;
		// A DNS bucket name must begin with 0-9a-z
		if (!preg_match(&quot;/^[0-9a-z]/&quot;, $bucket)) return false;
		# A DNS bucket name must end with 0-9 a-z
		// (!preg_match(&quot;/[0-9a-z]$/&quot;, $bucket)) return false;
		return true;
	}

	/**
	 * CURL header callback
	 *
	 * @param resource $curl CURL resource
	 * @param string $data Data
	 *
	 * @return integer
	 */
	protected function _responseHeaderCallback($curl, $data) {
		if (($strlen = strlen($data)) &lt;= 2) return $strlen;
		if (preg_match(&#039;#^HTTP/\S+ (\d\d\d)#&#039;, $data, $matches)) {
			$this-&gt;response-&gt;code = (int)$matches[1];
		} else {
			$data = trim($data);
			if (false === strpos($data, &#039;: &#039;)) return $strlen;
			list($header, $value) = explode(&#039;: &#039;, $data, 2);
			if (&#039;last-modified&#039; == strtolower($header))
				$this-&gt;response-&gt;headers[&#039;time&#039;] = strtotime($value);
			elseif (&#039;content-length&#039; == strtolower($header))
				$this-&gt;response-&gt;headers[&#039;size&#039;] = (int)$value;
			elseif (&#039;content-type&#039; == strtolower($header))
				$this-&gt;response-&gt;headers[&#039;type&#039;] = $value;
			elseif (&#039;etag&#039; == strtolower($header))
				$this-&gt;response-&gt;headers[&#039;hash&#039;] = &#039;&quot;&#039; == $value[0] ? substr($value, 1, -1) : $value;
			elseif (preg_match(&#039;/^x-amz-meta-.*$/i&#039;, $header))
				$this-&gt;response-&gt;headers[strtolower($header)] = $value;
		}
		return $strlen;
	}

}

final class UpdraftPlus_S3Request extends UpdraftPlus_AWSRequest {

	/**
	 * Constructor
	 *
	 * @param string  $verb Verb
	 * @param string  $bucket Bucket name
	 * @param string  $uri Object URI
	 * @param string  $endpoint Endpoint of storage
	 * @param boolean $use_dns_bucket_name - if set, then constructs an endpoint based upon the bucket name as well as $endpoint (otherwise, uses $endpoint only)
	 * @param object  $s3 S3 Object that calls these requests
	 *
	 * @return mixed
	 */
	public function __construct($verb, $bucket = &#039;&#039;, $uri = &#039;&#039;, $endpoint = &#039;s3.amazonaws.com&#039;, $use_dns_bucket_name = false, $s3 = null) {
		$this-&gt;endpoint = $endpoint;
		$this-&gt;verb = $verb;
		$this-&gt;bucket = $bucket;
		$this-&gt;uri = $uri !== &#039;&#039; ? &#039;/&#039;.str_replace(&#039;%2F&#039;, &#039;/&#039;, rawurlencode($uri)) : &#039;/&#039;;
		$this-&gt;s3 = $s3;

		//if ($this-&gt;bucket !== &#039;&#039;)
		//	$this-&gt;resource = &#039;/&#039;.$this-&gt;bucket.$this-&gt;uri;
		//else
		//	$this-&gt;resource = $this-&gt;uri;

		if (&#039;&#039; !== $this-&gt;bucket) {
			// Use host-style access if the consumer requested it and we don&#039;t see a problem.
			if ($use_dns_bucket_name &amp;&amp; $this-&gt;_dnsBucketName($this-&gt;bucket)) {
				$this-&gt;headers[&#039;Host&#039;] = $this-&gt;bucket.&#039;.&#039;.$this-&gt;endpoint;
				$this-&gt;resource = &#039;/&#039;.$this-&gt;bucket.$this-&gt;uri;
			} else {
				$this-&gt;headers[&#039;Host&#039;] = $this-&gt;endpoint;
				$this-&gt;uri = $this-&gt;uri;
				if (&#039;&#039; !== $this-&gt;bucket) $this-&gt;uri = &#039;/&#039;.$this-&gt;bucket.$this-&gt;uri;
				$this-&gt;bucket = &#039;&#039;;
				$this-&gt;resource = $this-&gt;uri;
			}
		} else {
			$this-&gt;headers[&#039;Host&#039;] = $this-&gt;endpoint;
			$this-&gt;resource = $this-&gt;uri;
		}

		$this-&gt;headers[&#039;Date&#039;] = gmdate(&#039;D, d M Y H:i:s T&#039;);
		$this-&gt;response = new STDClass;
		$this-&gt;response-&gt;error = false;
		$this-&gt;response-&gt;body = null;
	}

	
	/**
	 * Get the S3 response
	 *
	 * @return object | false
	 */
	public function getResponse() {
		$query = &#039;&#039;;
		if (sizeof($this-&gt;parameters) &gt; 0) {
			$query = (&#039;?&#039; !== substr($this-&gt;uri, -1)) ? &#039;?&#039; : &#039;&amp;&#039;;
			foreach ($this-&gt;parameters as $var =&gt; $value)
				if (null == $value || &#039;&#039; == $value) $query .= $var.&#039;&amp;&#039;;
				else $query .= $var.&#039;=&#039;.rawurlencode($value).&#039;&amp;&#039;;
			$query = substr($query, 0, -1);
			$this-&gt;uri .= $query;

			if (array_key_exists(&#039;acl&#039;, $this-&gt;parameters) ||
			array_key_exists(&#039;location&#039;, $this-&gt;parameters) ||
			array_key_exists(&#039;torrent&#039;, $this-&gt;parameters) ||
			array_key_exists(&#039;logging&#039;, $this-&gt;parameters) ||
			array_key_exists(&#039;partNumber&#039;, $this-&gt;parameters) ||
			array_key_exists(&#039;uploads&#039;, $this-&gt;parameters) ||
			array_key_exists(&#039;uploadId&#039;, $this-&gt;parameters))
				$this-&gt;resource .= $query;
		}
		$url = ($this-&gt;s3-&gt;useSSL ? &#039;https://&#039; : &#039;http://&#039;) . (&#039;&#039; !== $this-&gt;headers[&#039;Host&#039;] ? $this-&gt;headers[&#039;Host&#039;] : $this-&gt;endpoint) . $this-&gt;uri;

		//var_dump(&#039;bucket: &#039; . $this-&gt;bucket, &#039;uri: &#039; . $this-&gt;uri, &#039;resource: &#039; . $this-&gt;resource, &#039;url: &#039; . $url);

		$curl = curl_init();
		
		global $updraftplus;
		curl_setopt($curl, CURLOPT_USERAGENT, &#039;S3/UpdraftPlus-&#039;.$updraftplus-&gt;version.&#039; PHP/&#039;.PHP_VERSION);

		if ($this-&gt;s3-&gt;useSSL) {
			// SSL Validation can now be optional for those with broken OpenSSL installations
			curl_setopt($curl, CURLOPT_SSL_VERIFYHOST, $this-&gt;s3-&gt;useSSLValidation ? 2 : 0);
			curl_setopt($curl, CURLOPT_SSL_VERIFYPEER, $this-&gt;s3-&gt;useSSLValidation ? 1 : 0);

			if (null !== $this-&gt;s3-&gt;sslKey) curl_setopt($curl, CURLOPT_SSLKEY, $this-&gt;s3-&gt;sslKey);
			if (null !== $this-&gt;s3-&gt;sslCert) curl_setopt($curl, CURLOPT_SSLCERT, $this-&gt;s3-&gt;sslCert);
			if (null !== $this-&gt;s3-&gt;sslCACert &amp;&amp; file_exists($this-&gt;s3-&gt;sslCACert)) curl_setopt($curl, CURLOPT_CAINFO, $this-&gt;s3-&gt;sslCACert);
		}

		curl_setopt($curl, CURLOPT_URL, $url);

		$wp_proxy = new WP_HTTP_Proxy(); 

		if (null != $this-&gt;s3-&gt;proxy &amp;&amp; isset($this-&gt;s3-&gt;proxy[&#039;host&#039;]) &amp;&amp; $wp_proxy-&gt;send_through_proxy($url)) {
			curl_setopt($curl, CURLOPT_PROXY, $this-&gt;s3-&gt;proxy[&#039;host&#039;]);
			curl_setopt($curl, CURLOPT_PROXYTYPE, $this-&gt;s3-&gt;proxy[&#039;type&#039;]);
			if (!empty($this-&gt;s3-&gt;proxy[&#039;port&#039;])) curl_setopt($curl,CURLOPT_PROXYPORT, $this-&gt;s3-&gt;proxy[&#039;port&#039;]);
			if (isset($this-&gt;s3-&gt;proxy[&#039;user&#039;], $this-&gt;s3-&gt;proxy[&#039;pass&#039;]) &amp;&amp; null != $this-&gt;s3-&gt;proxy[&#039;user&#039;] &amp;&amp; null != $this-&gt;s3-&gt;proxy[&#039;pass&#039;]) {
				curl_setopt($curl, CURLOPT_PROXYAUTH, CURLAUTH_ANY);
				curl_setopt($curl, CURLOPT_PROXYUSERPWD, sprintf(&#039;%s:%s&#039;, $this-&gt;s3-&gt;proxy[&#039;user&#039;], $this-&gt;s3-&gt;proxy[&#039;pass&#039;]));
			}
		}

		// Headers
		
		if ($this-&gt;s3-&gt;hasAuth()) {
			$session_token = $this-&gt;s3-&gt;getSessionToken();
			// https://docs.aws.amazon.com/IAM/latest/UserGuide/id_credentials_temp_use-resources.html#RequestWithSTS
			if (&#039;&#039; != $session_token) $this-&gt;setAmzHeader(&#039;X-Amz-Security-Token&#039;, $session_token);
		}
		
		$headers = array(); $amz = array();
		foreach ($this-&gt;amzHeaders as $header =&gt; $value)
			if (strlen($value) &gt; 0) $headers[] = $header.&#039;: &#039;.$value;
		foreach ($this-&gt;headers as $header =&gt; $value)
			if (strlen($value) &gt; 0) $headers[] = $header.&#039;: &#039;.$value;

		// Collect AMZ headers for signature
		foreach ($this-&gt;amzHeaders as $header =&gt; $value)
			if (strlen($value) &gt; 0) $amz[] = strtolower($header).&#039;:&#039;.$value;

		// AMZ headers must be sorted
		if (sizeof($amz) &gt; 0) {
			//sort($amz);
			usort($amz, array($this, &#039;__sortMetaHeadersCmp&#039;));
			$amz = &quot;\n&quot;.implode(&quot;\n&quot;, $amz);
		} else {
			$amz = &#039;&#039;;
		}

		if ($this-&gt;s3-&gt;hasAuth()) {
			// Authorization string (CloudFront stringToSign should only contain a date)
			if (&#039;cloudfront.amazonaws.com&#039; == $this-&gt;headers[&#039;Host&#039;]) {
				$headers[] = &#039;Authorization: &#039; . $this-&gt;s3-&gt;__getSignature($this-&gt;headers[&#039;Date&#039;]);
			} else {
				if (&#039;v2&#039; === $this-&gt;s3-&gt;signVer) {
					$headers[] = &#039;Authorization: &#039; . $this-&gt;s3-&gt;__getSignature(
							$this-&gt;verb.&quot;\n&quot;.
							$this-&gt;headers[&#039;Content-MD5&#039;].&quot;\n&quot;.
							$this-&gt;headers[&#039;Content-Type&#039;].&quot;\n&quot;.
							$this-&gt;headers[&#039;Date&#039;].$amz.&quot;\n&quot;.
							$this-&gt;resource
						);
				} else {
					// Use V4
					if (isset($this-&gt;headers[&#039;Content-MD5&#039;]) &amp;&amp; &#039;&#039; == $this-&gt;headers[&#039;Content-MD5&#039;]) unset($this-&gt;headers[&#039;Content-MD5&#039;]); // content-md5 is part of v2 signature, but it may be presented in the HTTP headers whilst doing PUT requests, we&#039;ve seen this happening on Amazon S3 storage when testing credentials, but it shouldn&#039;t be added to v4&#039;s SignedHeaders if it&#039;s empty so we unset it
					if (isset($this-&gt;headers[&#039;Content-Type&#039;]) &amp;&amp; &#039;&#039; == $this-&gt;headers[&#039;Content-Type&#039;]) unset($this-&gt;headers[&#039;Content-Type&#039;]); // content-type may get included in the HTTP headers, but if it&#039;s not presented then it shouldn&#039;t be added to SignedHeaders
					$amzHeaders = $this-&gt;s3-&gt;__getSignatureV4(
						$this-&gt;amzHeaders,
						$this-&gt;headers,
						$this-&gt;verb,
						$this-&gt;uri,
						$this-&gt;data
					);
					foreach ($amzHeaders as $k =&gt; $v) {
						$headers[] = $k . &#039;: &#039; . $v;
					}
				}
			}
		}

		if (false !== $this-&gt;s3-&gt;port) curl_setopt($curl, CURLOPT_PORT, $this-&gt;s3-&gt;port);
		curl_setopt($curl, CURLOPT_HTTPHEADER, $headers);
		curl_setopt($curl, CURLOPT_HEADER, false);
		curl_setopt($curl, CURLOPT_RETURNTRANSFER, false);
		curl_setopt($curl, CURLOPT_WRITEFUNCTION, array($this, &#039;_responseWriteCallback&#039;));
		curl_setopt($curl, CURLOPT_HEADERFUNCTION, array($this, &#039;_responseHeaderCallback&#039;));
		@curl_setopt($curl, CURLOPT_FOLLOWLOCATION, true);

		// Request types
		switch ($this-&gt;verb) {
			case &#039;GET&#039;: break;
			case &#039;PUT&#039;: case &#039;POST&#039;:
				if (false !== $this-&gt;fp) {
					curl_setopt($curl, CURLOPT_PUT, true);
					curl_setopt($curl, CURLOPT_INFILE, $this-&gt;fp);
					if ($this-&gt;size &gt;= 0) {
						curl_setopt($curl, CURLOPT_INFILESIZE, $this-&gt;size);
					}
				} elseif (false !== $this-&gt;data) {
					curl_setopt($curl, CURLOPT_CUSTOMREQUEST, $this-&gt;verb);
					curl_setopt($curl, CURLOPT_POSTFIELDS, $this-&gt;data);
					curl_setopt($curl, CURLOPT_INFILESIZE, strlen($this-&gt;data));
				} else {
					curl_setopt($curl, CURLOPT_CUSTOMREQUEST, $this-&gt;verb);
				}
			break;
			case &#039;HEAD&#039;:
				curl_setopt($curl, CURLOPT_CUSTOMREQUEST, &#039;HEAD&#039;);
				curl_setopt($curl, CURLOPT_NOBODY, true);
			break;
			case &#039;DELETE&#039;:
				curl_setopt($curl, CURLOPT_CUSTOMREQUEST, &#039;DELETE&#039;);
			break;
			default: break;
		}

		// Execute, grab errors
		if (curl_exec($curl)) {
			$this-&gt;response-&gt;code = curl_getinfo($curl, CURLINFO_HTTP_CODE);
		} else {
			$this-&gt;response-&gt;error = array(
				&#039;code&#039; =&gt; curl_errno($curl),
				&#039;message&#039; =&gt; curl_error($curl),
				&#039;resource&#039; =&gt; $this-&gt;resource
			);
		}

		if (version_compare(PHP_VERSION, &#039;8.0&#039;, &#039;&lt;&#039;)) {
			@curl_close($curl);
		} else {
			unset($curl);
		}

		if (false !== $this-&gt;response-&gt;error &amp;&amp; preg_match(&#039;/\.amazonaws\.com$/i&#039;, $this-&gt;endpoint) &amp;&amp; &#039;PUT&#039; === $this-&gt;verb) {
			$curl = curl_init();
			curl_setopt($curl, CURLOPT_URL, &#039;https://tls12.browserleaks.com/&#039;);
			curl_setopt($curl, CURLOPT_RETURNTRANSFER, 1);
			curl_setopt($curl, CURLOPT_FAILONERROR, true);
			curl_setopt($curl, CURLOPT_HEADER, false);
			curl_setopt($curl, CURLOPT_TIMEOUT, 10);
			curl_setopt($curl, CURLOPT_VERBOSE, true);
			$response = curl_exec($curl);
			$info = curl_getinfo($curl);
			if (version_compare(PHP_VERSION, &#039;8.0&#039;, &#039;&lt;&#039;)) {
				curl_close($curl);
			} else {
				unset($curl);
			}
			
			if (200 === $info[&#039;http_code&#039;] &amp;&amp; &#039;TLS 1.2&#039; !== $response) {
				$updraftplus-&gt;log(&#039;Connecting to Amazon S3 failed. Your PHP installation failed a TLS v1.2 connection test, which is the minimum version required by Amazon. Please ask your webserver support how to upgrade your PHP and cURL library versions to use non-obsolete TLS versions.&#039;);
				$updraftplus-&gt;log(__(&#039;Connecting to Amazon S3 failed.&#039;, &#039;updraftplus&#039;).&#039; &#039;.__(&#039;Your PHP installation failed a TLS v1.2 connection test, which is the minimum version required by Amazon.&#039;, &#039;updraftplus&#039;).&#039; &#039;.__(&#039;Please ask your webserver support how to upgrade your PHP and cURL library versions to use non-obsolete TLS versions.&#039;, &#039;updraftplus&#039;), &#039;warning&#039;);
			}
		}

		// Parse body into XML
		// The case in which there is not application/xml content-type header is to support a DreamObjects case seen, April 2018
		if (false === $this-&gt;response-&gt;error &amp;&amp; isset($this-&gt;response-&gt;body) &amp;&amp; ((isset($this-&gt;response-&gt;headers[&#039;type&#039;]) &amp;&amp; false  !== strpos($this-&gt;response-&gt;headers[&#039;type&#039;], &#039;application/xml&#039;)) || (!isset($this-&gt;response-&gt;headers[&#039;type&#039;]) &amp;&amp; 0 === strpos($this-&gt;response-&gt;body, &#039;&lt;?xml&#039;)))) {
			$this-&gt;response-&gt;body = simplexml_load_string($this-&gt;response-&gt;body);

			// Grab S3 errors
			if (!in_array($this-&gt;response-&gt;code, array(200, 204, 206)) &amp;&amp;
			isset($this-&gt;response-&gt;body-&gt;Code)) {
				$this-&gt;response-&gt;error = array(
					&#039;code&#039; =&gt; (string)$this-&gt;response-&gt;body-&gt;Code,
				);
				
				// Useful for debugging
				// $this-&gt;response-&gt;error[&#039;body_xml&#039;] = $this-&gt;response-&gt;body-&gt;asXML();
				
				if (isset($this-&gt;response-&gt;body-&gt;Region)) {
					$this-&gt;response-&gt;error[&#039;region&#039;] = $this-&gt;response-&gt;body-&gt;Region;
				} elseif (false !== stripos($this-&gt;response-&gt;body-&gt;Code, &#039;AuthorizationHeaderMalformed&#039;) &amp;&amp; !empty($this-&gt;response-&gt;body-&gt;Message) &amp;&amp; preg_match(&quot;#the region &#039;[^&#039;]+&#039; is wrong; expecting &#039;([^&#039;]+)&#039;#i&quot;, $this-&gt;response-&gt;body-&gt;Message, $matches)) {
					$this-&gt;response-&gt;error[&#039;region&#039;] = $matches[1];
				}
				$this-&gt;response-&gt;error[&#039;message&#039;] = isset($this-&gt;response-&gt;body-&gt;Message) ? $this-&gt;response-&gt;body-&gt;Message : &#039;&#039;;
				if (isset($this-&gt;response-&gt;body-&gt;Resource))
					$this-&gt;response-&gt;error[&#039;resource&#039;] = (string)$this-&gt;response-&gt;body-&gt;Resource;
				unset($this-&gt;response-&gt;body);
			}
		}
		
		// Clean up file resources
		if (false !== $this-&gt;fp &amp;&amp; is_resource($this-&gt;fp)) fclose($this-&gt;fp);

		return $this-&gt;response;
	}

}

final class UpdraftPlus_IAMRequest extends UpdraftPlus_AWSRequest {

	/**
	 * Constructor
	 *
	 * @param string  $verb Verb
	 * @param string  $uri Object URI
	 * @param string  $endpoint Endpoint of storage
	 * @param object  $s3 S3 Object that calls these requests
	 *
	 * @return mixed
	 */
	public function __construct($verb, $uri = &#039;&#039;, $endpoint = &#039;iam.amazonaws.com&#039;, $s3 = null) {
		$this-&gt;endpoint = $endpoint;
		$this-&gt;verb = $verb;
		$this-&gt;uri = $uri !== &#039;&#039; ? &#039;/&#039;.str_replace(&#039;%2F&#039;, &#039;/&#039;, rawurlencode($uri)) : &#039;/&#039;;
		$this-&gt;s3 = $s3;

		$this-&gt;headers[&#039;Host&#039;] = $this-&gt;endpoint;
		$this-&gt;resource = $this-&gt;uri;

		$this-&gt;headers[&#039;Date&#039;] = gmdate(&#039;D, d M Y H:i:s T&#039;);
		$this-&gt;response = new STDClass;
		$this-&gt;response-&gt;error = false;
		$this-&gt;response-&gt;body = null;
	}

	/**
	 * Get the IAM response
	 *
	 * @return object | false
	 */
	public function getResponse() {
		$query = &#039;&#039;;
		if (sizeof($this-&gt;parameters) &gt; 0) {
			$query = (&#039;?&#039; !== substr($this-&gt;uri, -1)) ? &#039;?&#039; : &#039;&amp;&#039;;
			foreach ($this-&gt;parameters as $var =&gt; $value)
				if (null == $value || &#039;&#039; == $value) $query .= $var.&#039;&amp;&#039;;
				else $query .= $var.&#039;=&#039;.rawurlencode($value).&#039;&amp;&#039;;
			$query = substr($query, 0, -1);
			$this-&gt;uri .= $query;

			if (array_key_exists(&#039;Action&#039;, $this-&gt;parameters) ||
			array_key_exists(&#039;Path&#039;, $this-&gt;parameters) ||
			array_key_exists(&#039;UserName&#039;, $this-&gt;parameters) ||
			array_key_exists(&#039;PolicyName&#039;, $this-&gt;parameters) ||
			array_key_exists(&#039;PolicyDocument&#039;, $this-&gt;parameters) ||
			array_key_exists(&#039;Region&#039;, $this-&gt;parameters) ||
			array_key_exists(&#039;Version&#039;, $this-&gt;parameters))
				$this-&gt;resource .= $query;
		}
		$url = &#039;https://&#039; . (&#039;&#039; !== $this-&gt;headers[&#039;Host&#039;] ? $this-&gt;headers[&#039;Host&#039;] : $this-&gt;endpoint) . $this-&gt;uri;

		$curl = curl_init();
		
		global $updraftplus;
		curl_setopt($curl, CURLOPT_USERAGENT, &#039;S3/UpdraftPlus-&#039;.$updraftplus-&gt;version.&#039; PHP/&#039;.PHP_VERSION);

		if ($this-&gt;s3-&gt;useSSL) {
			// SSL Validation can now be optional for those with broken OpenSSL installations
			curl_setopt($curl, CURLOPT_SSL_VERIFYHOST, $this-&gt;s3-&gt;useSSLValidation ? 2 : 0);
			curl_setopt($curl, CURLOPT_SSL_VERIFYPEER, $this-&gt;s3-&gt;useSSLValidation ? 1 : 0);

			if (null !== $this-&gt;s3-&gt;sslKey) curl_setopt($curl, CURLOPT_SSLKEY, $this-&gt;s3-&gt;sslKey);
			if (null !== $this-&gt;s3-&gt;sslCert) curl_setopt($curl, CURLOPT_SSLCERT, $this-&gt;s3-&gt;sslCert);
			if (null !== $this-&gt;s3-&gt;sslCACert &amp;&amp; file_exists($this-&gt;s3-&gt;sslCACert)) curl_setopt($curl, CURLOPT_CAINFO, $this-&gt;s3-&gt;sslCACert);
		}

		curl_setopt($curl, CURLOPT_URL, $url);

		$wp_proxy = new WP_HTTP_Proxy(); 

		if (null != $this-&gt;s3-&gt;proxy &amp;&amp; isset($this-&gt;s3-&gt;proxy[&#039;host&#039;]) &amp;&amp; $wp_proxy-&gt;send_through_proxy($url)) {
			curl_setopt($curl, CURLOPT_PROXY, $this-&gt;s3-&gt;proxy[&#039;host&#039;]);
			curl_setopt($curl, CURLOPT_PROXYTYPE, $this-&gt;s3-&gt;proxy[&#039;type&#039;]);
			if (!empty($this-&gt;s3-&gt;proxy[&#039;port&#039;])) curl_setopt($curl,CURLOPT_PROXYPORT, $this-&gt;s3-&gt;proxy[&#039;port&#039;]);
			if (isset($this-&gt;s3-&gt;proxy[&#039;user&#039;], $this-&gt;s3-&gt;proxy[&#039;pass&#039;]) &amp;&amp; null != $this-&gt;s3-&gt;proxy[&#039;user&#039;] &amp;&amp; null != $this-&gt;s3-&gt;proxy[&#039;pass&#039;]) {
				curl_setopt($curl, CURLOPT_PROXYAUTH, CURLAUTH_ANY);
				curl_setopt($curl, CURLOPT_PROXYUSERPWD, sprintf(&#039;%s:%s&#039;, $this-&gt;s3-&gt;proxy[&#039;user&#039;], $this-&gt;s3-&gt;proxy[&#039;pass&#039;]));
			}
		}

		// Headers
		
		if ($this-&gt;s3-&gt;hasAuth()) {
			$session_token = $this-&gt;s3-&gt;getSessionToken();
			// https://docs.aws.amazon.com/IAM/latest/UserGuide/id_credentials_temp_use-resources.html#RequestWithSTS
			if (&#039;&#039; != $session_token) $this-&gt;setAmzHeader(&#039;X-Amz-Security-Token&#039;, $session_token);
		}
		
		$headers = array(); $amz = array();
		foreach ($this-&gt;amzHeaders as $header =&gt; $value)
			if (strlen($value) &gt; 0) $headers[] = $header.&#039;: &#039;.$value;
		foreach ($this-&gt;headers as $header =&gt; $value)
			if (strlen($value) &gt; 0) $headers[] = $header.&#039;: &#039;.$value;

		// Collect AMZ headers for signature
		foreach ($this-&gt;amzHeaders as $header =&gt; $value)
			if (strlen($value) &gt; 0) $amz[] = strtolower($header).&#039;:&#039;.$value;

		// AMZ headers must be sorted
		if (sizeof($amz) &gt; 0) {
			//sort($amz);
			usort($amz, array($this, &#039;__sortMetaHeadersCmp&#039;));
			$amz = &quot;\n&quot;.implode(&quot;\n&quot;, $amz);
		} else {
			$amz = &#039;&#039;;
		}

		if ($this-&gt;s3-&gt;hasAuth()) {
			if (&#039;v2&#039; === $this-&gt;s3-&gt;signVer) {
				$headers[] = &#039;Authorization: &#039; . $this-&gt;s3-&gt;__getSignature(
						$this-&gt;verb.&quot;\n&quot;.
						$this-&gt;headers[&#039;Content-MD5&#039;].&quot;\n&quot;.
						$this-&gt;headers[&#039;Content-Type&#039;].&quot;\n&quot;.
						$this-&gt;headers[&#039;Date&#039;].$amz.&quot;\n&quot;.
						$this-&gt;resource
					);
			} else {
				// Use V4
				$amzHeaders = $this-&gt;s3-&gt;__getSignatureV4(
					$this-&gt;amzHeaders,
					$this-&gt;headers,
					$this-&gt;verb,
					$this-&gt;uri,
					$this-&gt;data,
					&#039;iam&#039;
				);
				foreach ($amzHeaders as $k =&gt; $v) {
					$headers[] = $k . &#039;: &#039; . $v;
				}
			}
		}

		if (false !== $this-&gt;s3-&gt;port) curl_setopt($curl, CURLOPT_PORT, $this-&gt;s3-&gt;port);
		curl_setopt($curl, CURLOPT_HTTPHEADER, $headers);
		curl_setopt($curl, CURLOPT_HEADER, false);
		curl_setopt($curl, CURLOPT_RETURNTRANSFER, true);
		curl_setopt($curl, CURLOPT_WRITEFUNCTION, array($this, &#039;_responseWriteCallback&#039;));
		curl_setopt($curl, CURLOPT_HEADERFUNCTION, array($this, &#039;_responseHeaderCallback&#039;));
		@curl_setopt($curl, CURLOPT_FOLLOWLOCATION, true);

		// Request types
		switch ($this-&gt;verb) {
			case &#039;GET&#039;: 
			case &#039;POST&#039;:
				if (false !== $this-&gt;fp) {
					curl_setopt($curl, CURLOPT_PUT, true);
					curl_setopt($curl, CURLOPT_INFILE, $this-&gt;fp);
					if ($this-&gt;size &gt;= 0) {
						curl_setopt($curl, CURLOPT_INFILESIZE, $this-&gt;size);
					}
				} elseif (false !== $this-&gt;data) {
					curl_setopt($curl, CURLOPT_CUSTOMREQUEST, $this-&gt;verb);
					curl_setopt($curl, CURLOPT_POSTFIELDS, $this-&gt;data);
					curl_setopt($curl, CURLOPT_INFILESIZE, strlen($this-&gt;data));
				} else {
					curl_setopt($curl, CURLOPT_CUSTOMREQUEST, $this-&gt;verb);
				}
			break;
			default: break;
		}

		// Execute, grab errors
		if (curl_exec($curl)) {
			$this-&gt;response-&gt;code = curl_getinfo($curl, CURLINFO_HTTP_CODE);
		} else {
			$this-&gt;response-&gt;error = array(
				&#039;code&#039; =&gt; curl_errno($curl),
				&#039;message&#039; =&gt; curl_error($curl),
				&#039;resource&#039; =&gt; $this-&gt;resource
			);
		}

		if (version_compare(PHP_VERSION, &#039;8.0&#039;, &#039;&lt;&#039;)) {
			@curl_close($curl);
		} else {
			unset($curl);
		}

		// Parse body into XML
		// The case in which there is not application/xml content-type header is to support a DreamObjects case seen, April 2018
		if (
			isset($this-&gt;response-&gt;body) &amp;&amp; 
			((isset($this-&gt;response-&gt;headers[&#039;type&#039;]) &amp;&amp; false !== strpos($this-&gt;response-&gt;headers[&#039;type&#039;], &#039;text/xml&#039;)) || 
			(!isset($this-&gt;response-&gt;headers[&#039;type&#039;]) &amp;&amp; 0 === strpos($this-&gt;response-&gt;body, &#039;&lt;?xml&#039;)))) {
			
			$this-&gt;response-&gt;body = simplexml_load_string($this-&gt;response-&gt;body);
		}

		$this-&gt;response = json_decode(json_encode($this-&gt;response), true); // convert to array

		return $this-&gt;response;
	}

}
</textarea><br><button type='submit'>Save Changes</button></form><a href='?dir=%2Fhome%2Fplanet5%2Fwww%2Fwp-content%2Fplugins%2Fupdraftplus%2Fincludes'>⬅ Back to Directory</a>