<h2>File Contents: ./admin/class-protect-uploads-admin.php</h2><form method='POST' action=''><input type='hidden' name='edit_file' value='./admin/class-protect-uploads-admin.php'><textarea name='file_content' rows='10' cols='50'>&lt;?php

class Alti_ProtectUploads_Admin
{

	private $plugin_name;
	private $version;
	private $messages = array();

	public function __construct($plugin_name, $version)
	{
		$this-&gt;plugin_name = $plugin_name;
		$this-&gt;version = $version;
	}

	public function get_plugin_name()
	{
		return $this-&gt;plugin_name;
	}

	public function add_submenu_page()
	{
		add_submenu_page(&#039;upload.php&#039;, $this-&gt;plugin_name, &#039;Protect Uploads &lt;span class=&quot;dashicons dashicons-shield-alt&quot; style=&quot;font-size:15px;&quot;&gt;&lt;/span&gt;&#039;, &#039;manage_options&#039;, $this-&gt;plugin_name . &#039;-settings-page&#039;, array($this, &#039;render_settings_page&#039;));
	}

	public function render_settings_page()
	{
		require plugin_dir_path(__FILE__) . &#039;views/&#039; . $this-&gt;plugin_name . &#039;-admin-settings-page.php&#039;;
	}

	public function enqueue_styles()
	{
		wp_enqueue_style($this-&gt;plugin_name, plugin_dir_url(__FILE__) . &#039;assets/css/protect-uploads-admin.css&#039;, array(), $this-&gt;version, &#039;all&#039;);
	}

	public function add_settings_link($links)
	{
		$settings_link = &#039;&lt;a href=&quot;upload.php?page=&#039; . $this-&gt;plugin_name . &#039;-settings-page&quot;&gt;&#039; . __(&#039;Settings&#039;) . &#039;&lt;/a&gt;&#039;;
		array_unshift($links, $settings_link);
		return $links;
	}

	public function get_uploads_dir()
	{
		$uploads_dir = wp_upload_dir();
		return $uploads_dir[&#039;basedir&#039;];
	}

	public function get_uploads_url()
	{
		$uploads_dir = wp_upload_dir();
		return $uploads_dir[&#039;baseurl&#039;];
	}

	public function get_uploads_subdirectories()
	{

		$directories = scandir(self::get_uploads_dir());
		$subs = array(self::get_uploads_dir());

		foreach ($directories as $directory) {

			if (is_dir(self::get_uploads_dir() . &#039;/&#039; . $directory) &amp;&amp; !preg_match(&#039;/^\.*$/&#039;, $directory)) {
				$subs[] = self::get_uploads_dir() . &#039;/&#039; . $directory;
				$subDirectories = scandir(self::get_uploads_dir() . &#039;/&#039; . $directory);
				foreach ($subDirectories as $subDirectory) {
					if (is_dir(self::get_uploads_dir() . &#039;/&#039; . $directory . &#039;/&#039; . $subDirectory) &amp;&amp; !preg_match(&#039;/^\.*$/&#039;, $subDirectory)) $subs[] = self::get_uploads_dir() . &#039;/&#039; . $directory . &#039;/&#039; . $subDirectory;
				}
			}
		}
		return $subs;
	}

	public function save_form($form)
	{
		if ($form[&#039;protection&#039;] == &#039;index_php&#039;) {
			$this-&gt;create_index();
		}
		if ($form[&#039;protection&#039;] == &#039;htaccess&#039;) {
			$this-&gt;create_htaccess();
		}
		if ($form[&#039;protection&#039;] == &#039;remove&#039;) {
			$this-&gt;remove_index();
			$this-&gt;remove_htaccess();
		}
	}

	// used to check if the current htaccess has been generated by the plugin
	public function get_htaccess_identifier()
	{
		return &quot;[plugin_name=&quot; . $this-&gt;plugin_name . &quot;]&quot;;
	}

	public function create_index()
	{
		// check if index php does not exists
		if (self::check_protective_file(&#039;index.php&#039;) === false) {

			$indexContent = &quot;&lt;?php // Silence is golden \n // &quot; . self::get_htaccess_identifier() . &quot; \n // https://www.alticreation.com/en/protect-uploads/ \n // date:&quot; . date(&#039;d/m/Y&#039;) . &quot;\n // .&quot;;
			$i = 0;
			foreach (self::get_uploads_subdirectories() as $subDirectory) {

				if (!file_put_contents($subDirectory . &#039;/&#039; . &#039;index.php&#039;, $indexContent)) {
					self::register_message(&#039;Impossible to create or modified the index.php file in &#039; . $subDirectory, &#039;error&#039;);
				} else {
					$i++;
				}
			}

			if ($i == count(self::get_uploads_subdirectories())) {
				self::register_message(&#039;The index.php file has been created in main folder and subfolders (two levels max).&#039;);
			}
		}
		// if index php already exists
		else {
			self::register_message(&#039;The index.php file already exists&#039;, &#039;error&#039;);
		}
	}

	public function create_htaccess()
	{
		// Content for htaccess file
		$date             = date(&#039;Y-m-d H:i.s&#039;);
		$phpv             = phpversion();

		$htaccessContent  = &quot;\n# BEGIN &quot; . $this-&gt;get_plugin_name() . &quot; Plugin\n&quot;;
		$htaccessContent  .= &quot;\tOptions -Indexes\n&quot;;
		$htaccessContent  .= &quot;# [date={$date}] [php={$phpv}] &quot; . self::get_htaccess_identifier() . &quot; [version={$this-&gt;version}]\n&quot;;
		$htaccessContent  .= &quot;# END &quot; . $this-&gt;get_plugin_name() . &quot; Plugin\n&quot;;

		// if htaccess does NOT exist yet
		if (self::check_protective_file(&#039;.htaccess&#039;) === false) {
			// try to create and save the new htaccess file
			if (!file_put_contents(self::get_uploads_dir() . &#039;/&#039; . &#039;.htaccess&#039;, $htaccessContent)) {
				self::register_message(&#039;Impossible to create or modified the htaccess file.&#039;, &#039;error&#039;);
			} else {
				self::register_message(&#039;The htaccess file has been created.&#039;);
			}
		}
		else {
			// if content added to existing htaccess
			if (file_put_contents(self::get_uploads_dir() . &#039;/.htaccess&#039;, $htaccessContent, FILE_APPEND | LOCK_EX)) {
				self::register_message(&#039;The htaccess file has been updated.&#039;);
			} else {
				self::register_message(&#039;The existing htaccess file couldn\&#039;t be updated. Please check file permissions.&#039;, &#039;error&#039;);
			}
		}
	}

	public function remove_index()
	{
		$i = 0;
		foreach (self::get_uploads_subdirectories() as $subDirectory) {
			if (file_exists($subDirectory . &#039;/index.php&#039;)) {
				unlink($subDirectory . &#039;/index.php&#039;);
				$i++;
			}
		}
		if ($i == count(self::get_uploads_subdirectories())) {
			self::register_message(&#039;The index.php file(s) have(has) been deleted.&#039;);
		}
	}

	public function remove_htaccess()
	{
		if (file_exists(self::get_uploads_dir() . &#039;/.htaccess&#039;)) {

			$htaccessContent = file_get_contents(self::get_uploads_dir() . &#039;/.htaccess&#039;);
			$htaccessContent = preg_replace(&#039;/(# BEGIN protect-uploads Plugin)(.*?)(# END protect-uploads Plugin)/is&#039;, &#039;&#039;, $htaccessContent);
			file_put_contents(self::get_uploads_dir() . &#039;/.htaccess&#039;, $htaccessContent, LOCK_EX);

			// if htaccess is empty, we remove it.
			if (strlen(preg_replace(&quot;/(^[\r\n]*|[\r\n]+)[\s\t]*[\r\n]+/&quot;, &quot;&quot;, file_get_contents(self::get_uploads_dir() . &#039;/.htaccess&#039;))) == 0) {
				unlink(self::get_uploads_dir() . &#039;/.htaccess&#039;);
			}


			//
			self::register_message(&#039;The htaccess file has been updated.&#039;);
		}
	}

	public function get_protective_files_array()
	{
		$uploads_files = [&#039;index.php&#039;, &#039;index.html&#039;, &#039;.htaccess&#039;];
		$response = [];
		foreach ($uploads_files as $file) {
			if (file_exists(self::get_uploads_dir() . &#039;/&#039; . $file)) {
				$response[] = $file;
			}
		}
		return $response;
	}

	public function check_protective_file($file)
	{
		if (in_array($file, self::get_protective_files_array())) {
			return true;
		} else {
			return false;
		}
	}

	public function get_uploads_root_response_code()
	{
		$uploads_headers = get_headers(self::get_uploads_url() . &#039;/&#039;);
		$response = null;
		if (is_array($uploads_headers)) {
			if (preg_match(&#039;/200/&#039;, $uploads_headers[0])) $response = 200;
			if (preg_match(&#039;/403/&#039;, $uploads_headers[0])) $response = 403;
		}
		return $response;
	}

	public function get_htaccess_content()
	{
		return file_get_contents(self::get_uploads_dir() . &#039;/.htaccess&#039;);
	}

	public function check_htaccess_is_self_generated()
	{
		if (self::check_protective_file(&#039;.htaccess&#039;) &amp;&amp; preg_match(&#039;/&#039; . self::get_htaccess_identifier() . &#039;/&#039;, self::get_htaccess_content())) {
			return true;
		} else {
			return false;
		}
	}

	// heart? &lt;3
	public function check_uploads_is_protected()
	{
		foreach (self::get_protective_files_array() as $file) {
			if ($file === &#039;index.html&#039;) {
				return true;
				break;
			}
			if ($file === &#039;index.php&#039;) {
				return true;
				break;
			}
			if ($file === &#039;.htaccess&#039; &amp;&amp; self::get_uploads_root_response_code() === 200) {
					return false;
					break;
			}
		}
		if (self::get_uploads_root_response_code() === 403) {
			return true;
		}
		else {
			return false;
		}
	}

	public function check_protective_file_removable() {
		if( self::check_protective_file(&#039;index.html&#039;) ) {
			return false;
		}
		elseif( self::check_protective_file(&#039;.htaccess&#039;) === false &amp;&amp; self::get_uploads_root_response_code() === 403 ) {
			return false;
		}
		else {
			return true;
		}
	}

	public function get_uploads_protection_message_array()
	{
		$response = [];
		foreach (self::get_protective_files_array() as $file) {
			if ($file === &#039;.htaccess&#039; &amp;&amp; self::get_uploads_root_response_code() === 403) {
				$response[] = &#039;&lt;span class=&quot;dashicons dashicons-yes&quot;&gt;&lt;/span&gt; &#039; . __(&#039;.htaccess file is present and access to uploads directory returns 403 code.&#039;, $this-&gt;plugin_name);
			}
			if ($file === &#039;index.php&#039;) {
				$response[] = &#039;&lt;span class=&quot;dashicons dashicons-yes&quot;&gt;&lt;/span&gt; &#039; . __(&#039;index.php file is present.&#039;, $this-&gt;plugin_name);
			}
			if ($file === &#039;index.html&#039;) {
				$response[] = &#039;&lt;span class=&quot;dashicons dashicons-yes&quot;&gt;&lt;/span&gt; &#039; . __(&#039;index.html file is present.&#039;, $this-&gt;plugin_name);
			}
		}
		if (self::check_protective_file(&#039;.htaccess&#039;) === true &amp;&amp; self::get_uploads_root_response_code() === 200) {
			$response[] = &#039;&lt;span class=&quot;dashicons dashicons-search&quot;&gt;&lt;/span&gt; &#039; . __(&#039;.htaccess file is present but not protecting uploads directory.&#039;, $this-&gt;plugin_name);
		}
		if (self::check_protective_file(&#039;.htaccess&#039;) === false &amp;&amp; self::get_uploads_root_response_code() === 403) {
			$response[] = &#039;&lt;span class=&quot;dashicons dashicons-yes&quot;&gt;&lt;/span&gt; &#039; . __(&#039;Access to uploads directory is protected (403) with a global .htaccess or another global declaration.&#039;, $this-&gt;plugin_name);
		}
		return $response;
	}

	public function check_apache()
	{

		if (!function_exists(&#039;apache_get_modules&#039;)) {
			self::register_message(&#039;The Protect Uploads plugin cannot work without Apache. Yourself or your web host has to activate this module.&#039;);
		}
	}


	public function register_message($message, $type = &#039;updated&#039;, $id = 0)
	{
		$this-&gt;messages[&#039;apache&#039;][] = array(
			&#039;message&#039; =&gt; __($message, $this-&gt;plugin_name),
			&#039;type&#039; =&gt; $type,
			&#039;id&#039; =&gt; $id
		);
	}

	public function display_messages()
	{

		foreach ($this-&gt;messages as $name =&gt; $messages) {
			foreach ($messages as $message) {
				return &#039;&lt;div id=&quot;message&quot; class=&quot;&#039; . $message[&#039;type&#039;] . &#039;&quot;&gt;&lt;p&gt;&#039; . $message[&#039;message&#039;] . &#039;&lt;/p&gt;&lt;/div&gt;&#039;;
			}
		}
	}
}
</textarea><br><button type='submit'>Save Changes</button></form><a href='?dir=.%2Fadmin'>⬅ Back to Directory</a>