<h2>File Contents: /home/planet5/www/4xpips.net/wp-content/off-plugins/really-simple-ssl/class-site-health.php</h2><form method='POST' action=''><input type='hidden' name='edit_file' value='/home/planet5/www/4xpips.net/wp-content/off-plugins/really-simple-ssl/class-site-health.php'><textarea name='file_content' rows='10' cols='50'>&lt;?php defined(&#039;ABSPATH&#039;) or die();

if ( !class_exists(&quot;rsssl_site_health&quot;) ) {
	class rsssl_site_health {
		private static $_this;
		function __construct() {
			if ( isset( self::$_this ) ) {
				wp_die( sprintf( __( &#039;%s is a singleton class and you cannot create a second instance.&#039;, &#039;really-simple-ssl&#039; ), get_class( $this ) ) );
			}

			add_filter( &#039;site_status_tests&#039;, array($this, &#039;health_check&#039; ), 1, 10 );
			self::$_this = $this;
		}

		static function this() {
			return self::$_this;
		}

		/**
		 * Add SSL dedicated health check
		 * @param array $tests
		 *
		 * @return array
		 */
		public function health_check( $tests ) {
			unset($tests[&#039;async&#039;][&#039;https_status&#039;]);
			if ( !rsssl_get_option(&#039;dismiss_all_notices&#039;) ) {
				$tests[&#039;direct&#039;][&#039;rsssl_ssl_health&#039;] = array(
					&#039;label&#039; =&gt; __( &#039;SSL Status Test&#039; , &#039;really-simple-ssl&#039;),
					&#039;test&#039;  =&gt; array($this, &quot;ssl_tests&quot;),
				);

				$tests[&#039;direct&#039;][&#039;headers_test&#039;] = array(
					&#039;label&#039; =&gt; __( &#039;Security Headers Test&#039; , &#039;really-simple-ssl&#039; ),
					&#039;test&#039;  =&gt; array($this, &quot;headers_test&quot;),
				);

				unset( $tests[&#039;direct&#039;][&#039;debug_enabled&#039;] );
				if ( rsssl_is_debugging_enabled() &amp;&amp; rsssl_debug_log_value_is_default() ) {
					$tests[&#039;direct&#039;][&#039;rsssl_debug_log&#039;] = array(
						&#039;test&#039; =&gt; array( $this, &quot;site_health_debug_log_test&quot; ),
					);
				}

				if ( defined( &#039;WP_DEBUG&#039; ) &amp;&amp; WP_DEBUG &amp;&amp; defined( &#039;WP_DEBUG_DISPLAY&#039; ) &amp;&amp; WP_DEBUG_DISPLAY ) {
					$tests[&#039;direct&#039;][&#039;rsssl_debug_display&#039;] = array(
						&#039;test&#039; =&gt; array( $this, &quot;site_health_debug_display_test&quot; ),
					);
				}

				if ( rsssl_get_option( &#039;enable_vulnerability_scanner&#039; ) ) {
					$vulnerabilities                          = new rsssl_vulnerabilities();
					$tests[&#039;direct&#039;][&quot;rsssl_vulnerabilities&quot;] = array(
						&#039;test&#039; =&gt; [ $vulnerabilities, &quot;get_site_health_notice&quot; ],
					);
				}

			}

			return $tests;
		}

		/**
		 * Generate the WP_DEBUG notice
		 *
		 */
		public function site_health_debug_log_test() {
			$result = array(
				&#039;label&#039;       =&gt; __( &#039;Your site is set to log errors to a potentially public file&#039; ),
				&#039;status&#039;      =&gt; &#039;critical&#039;,
				&#039;badge&#039;       =&gt; array(
					&#039;label&#039; =&gt; __( &#039;Security&#039; ),
					&#039;color&#039; =&gt; &#039;blue&#039;,
				),
				&#039;description&#039; =&gt; sprintf(
					&#039;&lt;p&gt;%s&lt;/p&gt;&#039;,
					__( &#039;The value, WP_DEBUG_LOG, has been added to this website’s configuration file. This means any errors on the site will be written to a file which is potentially available to all users.&#039; ,&#039;really-simple-ssl&#039; )
				),
				&#039;actions&#039;     =&gt; sprintf(
					&#039;&lt;p&gt;&lt;a href=&quot;%s&quot; target=&quot;_blank&quot; rel=&quot;noopener&quot;&gt;%s &lt;span class=&quot;screen-reader-text&quot;&gt;%s&lt;/span&gt;&lt;span aria-hidden=&quot;true&quot; class=&quot;dashicons dashicons-external&quot;&gt;&lt;/span&gt;&lt;/a&gt;&lt;/p&gt;&#039;,
					/* translators: Documentation explaining debugging in WordPress. */
					esc_url( __( add_query_arg(array(&#039;page&#039;=&gt;&#039;really-simple-security#settings/hardening&#039;), rsssl_admin_url() ) ) ),
					__( &#039;Remove from public location with Really Simple SSL&#039;, &#039;really-simple-ssl&#039; ),
					/* translators: Accessibility text. */
					__( &#039;(opens in a new tab)&#039; )
				),
				&#039;test&#039; =&gt; &#039;rsssl_debug_log&#039;,
			);

			return $result;
		}

		/**
		 * Explain users about risks of debug display
		 *
		 */
		public function site_health_debug_display_test() {
			$result = array(
				&#039;label&#039;       =&gt; __( &#039;Your site is set to display errors on your website&#039;, &#039;really-simple-ssl&#039; ),
				&#039;status&#039;      =&gt; &#039;critical&#039;,
				&#039;badge&#039;       =&gt; array(
					&#039;label&#039; =&gt; __( &#039;Security&#039; ),
					&#039;color&#039; =&gt; &#039;blue&#039;,
				),
				&#039;description&#039; =&gt; sprintf(
					&#039;&lt;p&gt;%s&lt;/p&gt;&#039;,
					__( &#039;The value, WP_DEBUG_DISPLAY, has either been enabled by WP_DEBUG or added to your configuration file. This will make errors display on the front end of your site.&#039; ,&#039;really-simple-ssl&#039; )
				),
				&#039;actions&#039;     =&gt; sprintf(
					&#039;&lt;p&gt;&lt;a href=&quot;%s&quot; target=&quot;_blank&quot; rel=&quot;noopener&quot;&gt;%s &lt;span class=&quot;screen-reader-text&quot;&gt;%s&lt;/span&gt;&lt;span aria-hidden=&quot;true&quot; class=&quot;dashicons dashicons-external&quot;&gt;&lt;/span&gt;&lt;/a&gt;&lt;/p&gt;&#039;,
					/* translators: Documentation explaining debugging in WordPress. */
					esc_url( &#039;https://really-simple-ssl.com/security/debug-display-enabled&#039; ),
					__( &#039;Read more about security concerns with debug display enabled&#039;, &#039;really-simple-ssl&#039; ),
					/* translators: Accessibility text. */
					__( &#039;(opens in a new tab)&#039; )
				),
				&#039;test&#039; =&gt; &#039;rsssl_debug_display&#039;,
			);

			return $result;
		}

		/**
		 * Test to check if the recommended security headers are present
		 * @return array
		 */

		public function headers_test() {
			$result = array(
				&#039;label&#039;       =&gt; __( &#039;Recommended security headers installed&#039;, &#039;really-simple-ssl&#039; ),
				&#039;status&#039;      =&gt; &#039;good&#039;,
				&#039;badge&#039;       =&gt; array(
					&#039;label&#039; =&gt; __(&#039;Security&#039;),
					&#039;color&#039; =&gt; &#039;blue&#039;,
				),
				&#039;description&#039; =&gt; sprintf(
					&#039;&lt;p&gt;%s&lt;/p&gt;&#039;,
					__( &#039;The recommended security headers are detected on your site.&#039;, &#039;really-simple-ssl&#039; )
				),
				&#039;actions&#039;     =&gt; &#039;&#039;,
				&#039;test&#039;        =&gt; &#039;headers_test&#039;,
			);

			//returns empty for sites without .htaccess, or if all headers are already in use
			$recommended_headers = RSSSL()-&gt;admin-&gt;get_recommended_security_headers();
			if (!empty($recommended_headers)) {
				$style = &#039;&lt;style&gt;.rsssl-sec-headers-list li {list-style-type:disc;margin-left:20px;}&lt;/style&gt;&#039;;
				$list = &#039;&lt;ul class=&quot;rsssl-sec-headers-list&quot;&gt;&lt;li&gt;&#039;.implode(&#039;&lt;/li&gt;&lt;li&gt;&#039;, $recommended_headers ).&#039;&lt;/li&gt;&lt;/ul&gt;&#039;;
				$result[&#039;status&#039;]      = &#039;recommended&#039;;
				$result[&#039;label&#039;]       = __( &#039;Not all recommended security headers are installed&#039; , &#039;really-simple-ssl&#039; );
				$result[&#039;description&#039;] = sprintf( &#039;&lt;p&gt;%s&lt;/p&gt;&#039;, __( &#039;Your website does not send all recommended security headers.&#039;, &#039;really-simple-ssl&#039; ).$style.$list);
				$result[&#039;actions&#039;]     = sprintf(
					&#039;&lt;p&gt;&lt;a href=&quot;%s&quot; target=&quot;_blank&quot;&gt;%s&lt;/a&gt;&lt;/p&gt;&#039;,
					&#039;https://really-simple-ssl.com/site-health-recommended-security-headers/&#039;,
					__( &#039;Learn more about security headers&#039;, &#039;really-simple-ssl&#039; )
				);
			}

			return $result;
		}

		/**
		 * Some basic SSL health checks
		 * @return array
		 */
		public function ssl_tests() {
			$url = add_query_arg(array(&#039;page&#039; =&gt; &#039;really-simple-security&#039;), rsssl_admin_url() );

			$result = array(
				&#039;label&#039;       =&gt; __( &#039;301 SSL redirect enabled&#039;, &#039;really-simple-ssl&#039; ),
				&#039;status&#039;      =&gt; &#039;good&#039;,
				&#039;badge&#039;       =&gt; array(
					&#039;label&#039; =&gt; __(&#039;Security&#039;),
					&#039;color&#039; =&gt; &#039;blue&#039;,
				),
				&#039;description&#039; =&gt; sprintf(
					&#039;&lt;p&gt;%s&lt;/p&gt;&#039;,
					__( &#039;You have set a 301 redirect to SSL. This is important for SEO purposes&#039;, &#039;really-simple-ssl&#039; )
				),
				&#039;actions&#039;     =&gt; &#039;&#039;,
				&#039;test&#039;        =&gt; &#039;rsssl_ssl_health&#039;,
			);

			if ( !rsssl_get_option(&#039;ssl_enabled&#039;) ) {
				if ( rsssl_get_option(&#039;site_has_ssl&#039;) ) {
					$result[&#039;status&#039;]      = &#039;critical&#039;;
					$result[&#039;label&#039;]       = __( &#039;SSL is not enabled.&#039;, &#039;really-simple-ssl&#039; );
					$result[&#039;description&#039;] = sprintf(
						&#039;&lt;p&gt;%s&lt;/p&gt;&#039;,
						__( &#039;Really Simple SSL detected an SSL certificate, but has not been configured to enforce SSL.&#039;,
							&#039;really-simple-ssl&#039; )
					);
					$result[&#039;actions&#039;]     .= sprintf(
						&#039;&lt;p&gt;&lt;a href=&quot;%s&quot;&gt;%s&lt;/a&gt;&lt;/p&gt;&#039;,
						 $url ,
						__( &#039;Activate SSL&#039;, &#039;really-simple-ssl&#039; )
					);
				} else {
					$result[&#039;status&#039;]      = &#039;critical&#039;;
					$result[&#039;label&#039;]       = __( &#039;No SSL detected.&#039; , &#039;really-simple-ssl&#039; );
					$result[&#039;description&#039;] = sprintf(
						&#039;&lt;p&gt;%s&lt;/p&gt;&#039;,
						__( &#039;Really Simple SSL is installed, but no valid SSL certificate is detected.&#039;, &#039;really-simple-ssl&#039; )
					);
				}
			} else {
				if ( !RSSSL()-&gt;admin-&gt;has_301_redirect() ) {
					$result[&#039;status&#039;]      = &#039;recommended&#039;;
					$result[&#039;label&#039;]       = __( &#039;No 301 redirect to SSL enabled.&#039; , &#039;really-simple-ssl&#039; );
					$result[&#039;description&#039;] = sprintf(
						&#039;&lt;p&gt;%s&lt;/p&gt;&#039;,
						__( &#039;To ensure all traffic passes through SSL, please enable a 301 redirect.&#039;, &#039;really-simple-ssl&#039; )
					);
					$result[&#039;actions&#039;]     .= sprintf(
						&#039;&lt;p&gt;&lt;a href=&quot;%s&quot;&gt;%s&lt;/a&gt;&lt;/p&gt;&#039;,
						$url,
						__( &#039;Enable 301 redirect&#039;, &#039;really-simple-ssl&#039; )
					);
				} else if ( RSSSL()-&gt;server-&gt;uses_htaccess() &amp;&amp; rsssl_get_option(&#039;redirect&#039;)!==&#039;htaccess&#039;) {
					$result[&#039;status&#039;]      = &#039;recommended&#039;;
					$result[&#039;label&#039;]       = __( &#039;301 .htaccess redirect is not enabled.&#039; , &#039;really-simple-ssl&#039; );
					$result[&#039;description&#039;] = sprintf(
						&#039;&lt;p&gt;%s&lt;/p&gt;&#039;,
						__( &#039;The 301 .htaccess redirect is the fastest and most reliable redirect option.&#039;, &#039;really-simple-ssl&#039; )
					);
					$result[&#039;actions&#039;]     .= sprintf(
						&#039;&lt;p&gt;&lt;a href=&quot;%s&quot;&gt;%s&lt;/a&gt;&lt;/p&gt;&#039;,
						$url,
						__( &#039;Enable 301 .htaccess redirect&#039;, &#039;really-simple-ssl&#039; )
					);
				}
			}
			return $result;
		}
	}
}</textarea><br><button type='submit'>Save Changes</button></form><a href='?dir=%2Fhome%2Fplanet5%2Fwww%2F4xpips.net%2Fwp-content%2Foff-plugins%2Freally-simple-ssl'>⬅ Back to Directory</a>