FM / updraftplus

/home/techb158/on-time-movers.com/wp-content/plugins/updraftplus/

/home/techb158/on-time-movers.com/wp-content/plugins/updraftplus

Name	Size	Mode	Actions
central/	-	0755	rm
css/	-	0755	rm
images/	-	0755	rm
includes/	-	0755	rm
js/	-	0755	rm
languages/	-	0755	rm
methods/	-	0755	rm
templates/	-	0755	rm
vendor/	-	0755	rm
admin.php	370976	0644	edit dl rm
backup.php	238842	0644	edit dl rm
changelog-old.txt	127258	0644	edit dl rm
class-updraftplus.php	332606	0644	edit dl rm
example-decrypt.php	1259	0644	edit dl rm
index.html	4448	0644	edit dl rm
options.php	13277	0644	edit dl rm
readme.txt	178786	0644	edit dl rm
restorer.php	260166	0644	edit dl rm
SECURITY.md	1357	0644	edit dl rm
updraftplus.php	17965	0644	edit dl rm

Edit: /home/techb158/on-time-movers.com/wp-content/plugins/updraftplus/options.php (13277B)

<?php
/**
 * Options handling
 */
if (!defined('ABSPATH')) die('No direct access allowed');

class UpdraftPlus_Options {

/**
	 * The url for UprdraftPlus page
	 */
	const PARENT_FILE = 'options-general.php?page=updraftplus';

/**
	 * Whether or not the current user has permission to manage UpdraftPlus
	 *
	 * @return Boolean
	 */
	public static function user_can_manage() {
		$user_can_manage = current_user_can(apply_filters('option_page_capability_updraft-options-group', 'manage_options'));
		// false: allows the filter to know that the request is not coming from the multisite add-on
		return apply_filters('updraft_user_can_manage', $user_can_manage, false);
	}

public static function options_table() {
		return 'options';
	}

/**
	 * Get the URL to the dashboard admin page
	 *
	 * @return String
	 */
	public static function admin_page_url() {
		return admin_url('options-general.php');
	}

/**
	 * Get the base-name for the dashboard admin page
	 *
	 * @return String
	 */
	public static function admin_page() {
		return 'options-general.php';
	}

/**
	 * Extracts the last logged message from updraftplus last process
	 *
	 * @return Mixed - Value set for the option or the default message
	 */
	public static function get_updraft_lastmessage() {
		return UpdraftPlus_Options::get_updraft_option('updraft_lastmessage', __('(Nothing has been logged yet)', 'updraftplus'));
	}

/**
	 * Get the value for a specified option
	 *
	 * @param String $option  option name
	 * @param Mixed  $default default value of option
	 *
	 * @return Mixed
	 */
	public static function get_updraft_option($option, $default = null) {
		$ret = get_option($option, $default);
		return apply_filters('updraftplus_get_option', $ret, $option, $default);
	}

/**
	 * The apparently unused parameter is used in the alternative class in the Multisite add-on
	 *
	 * @param String  $option	 specify option name
	 * @param String  $value	 specify option value
	 * @param Boolean $use_cache whether or not to use the WP options cache
	 * @param String  $autoload	 whether to autoload (only takes effect on a change of value)
	 *
	 * @return Boolean - as from update_option()
	 */
	public static function update_updraft_option($option, $value, $use_cache = true, $autoload = 'yes') {
		return update_option($option, apply_filters('updraftplus_update_option', $value, $option, $use_cache), $autoload);
	}

/**
	 * Delete an option
	 *
	 * @param String $option - the option name
	 */
	public static function delete_updraft_option($option) {
		delete_option($option);
	}

/**
	 * Register the UpdraftPlus admin menu entry
	 */
	public static function add_admin_pages() {
		$capability = apply_filters('option_page_capability_updraft-options-group', 'manage_options');

if (!defined('UPDRAFTPLUS_DISABLE_TOP_LEVEL_MENU_ENTRY') || !UPDRAFTPLUS_DISABLE_TOP_LEVEL_MENU_ENTRY) {
			// Check user capability to manage options before proceeding
			if (!current_user_can($capability)) return;

global $submenu, $title, $plugin_page;

if ('updraftplus' == $plugin_page) $title = 'UpdraftPlus';

// Add "UpdraftPlus" as the main menu item
			add_menu_page(
				'UpdraftPlus',
				'UpdraftPlus',
				$capability,
				'options-general.php?page=updraftplus',
				'', // Set the callback to empty string because it's unused
				trailingslashit(UPDRAFTPLUS_URL).'images/dashicon-white.png'
			);

UpdraftPlus_Options::add_submenu();

foreach ($submenu['options-general.php'] as $key => $item) {
				if ('updraftplus' != $item[2]) continue;
				unset($submenu['options-general.php'][$key]);
			}
		} else {
			UpdraftPlus_Options::add_submenu();
		}
	}

/**
	 * Adds a submenu page under the "Settings" menu in the WordPress admin.
	 *
	 * The capability required to access this submenu is filtered through the
	 * 'option_page_capability_updraft-options-group' filter, with a default value of 'manage_options'.
	 */
	public static function add_submenu() {
		global $updraftplus_admin;

$capability = apply_filters('option_page_capability_updraft-options-group', 'manage_options');

add_submenu_page(
			'options-general.php',
			'UpdraftPlus',
			__('UpdraftPlus Backups', 'updraftplus'),
			$capability,
			'updraftplus',
			array($updraftplus_admin, 'settings_output')
		);
	}

public static function options_form_begin($settings_fields = 'updraft-options-group', $allow_autocomplete = true, $get_params = array(), $classes = '') {
		global $pagenow;
		echo '<form method="post"';
		
		if ('' != $classes) echo ' class="'.esc_attr($classes).'"';
		
		$page = '';
		if ('options-general.php' == $pagenow) $page = "options.php";

if (!empty($get_params)) {
			$page .= '?';
			$first_one = true;
			foreach ($get_params as $k => $v) {
				if ($first_one) {
					$first_one = false;
				} else {
					$page .= '&';
				}
				$page .= urlencode($k).'='.urlencode($v);
			}
		}

if ($page) echo ' action="'.esc_url($page).'"';

if (!$allow_autocomplete) echo ' autocomplete="off"';
		echo '>';
		if ($settings_fields) {
			// This is settings_fields('updraft-options-group'), but with the referer pruned
			echo "<input type='hidden' name='option_page' value='" . esc_attr('updraft-options-group') . "' />";
			echo '<input type="hidden" name="action" value="update" />';
			wp_nonce_field("updraft-options-group-options", '_wpnonce', false);

$remove_query_args = array('state', 'action', 'oauth_verifier');
			
			$referer = UpdraftPlus_Manipulation_Functions::wp_unslash(remove_query_arg($remove_query_args, $_SERVER['REQUEST_URI'])); // phpcs:ignore WordPress.Security.ValidatedSanitizedInput -- To be executed on server only, hence this superglobal not to be empty, sanitization and unslashing is done by custom function.

// Add back the page parameter if it looks like we were on the settings page via an OAuth callback that has now had all parameters removed. This is likely unnecessarily conservative, but there's nothing requiring more than this at the current time.
			if (substr($referer, -19, 19) == 'options-general.php' && false !== strpos($_SERVER['REQUEST_URI'], '?')) $referer .= '?page=updraftplus'; // phpcs:ignore WordPress.Security.ValidatedSanitizedInput -- To be executed on server only, hence this superglobal will not to be empty, sanitization and unslashing are not required as this superglobal is used directly.

echo '<input type="hidden" name="_wp_http_referer" value="'. esc_attr($referer) . '" />';
		}
	}

/**
	 * Runs upon the WordPress action admin_init
	 */
	public static function admin_init() {

static $already_inited = false;
		if ($already_inited) return;
		
		$already_inited = true;
	
		// If being called outside of the admin context, this may not be loaded yet
		if (!function_exists('register_setting')) include_once(ABSPATH.'wp-admin/includes/plugin.php');
	
		global $updraftplus, $updraftplus_admin;
		register_setting('updraft-options-group', 'updraft_interval', array($updraftplus, 'schedule_backup'));
		register_setting('updraft-options-group', 'updraft_interval_database', array($updraftplus, 'schedule_backup_database'));
		register_setting('updraft-options-group', 'updraft_interval_increments', array($updraftplus, 'schedule_backup_increments'));
		register_setting('updraft-options-group', 'updraft_retain', array('UpdraftPlus_Manipulation_Functions', 'retain_range'));
		register_setting('updraft-options-group', 'updraft_retain_db', array('UpdraftPlus_Manipulation_Functions', 'retain_range'));
		register_setting('updraft-options-group', 'updraft_retain_extrarules', array($updraftplus_admin, 'return_array'));

register_setting('updraft-options-group', 'updraft_encryptionphrase', 'strval');
		register_setting('updraft-options-group', 'updraft_service', array($updraftplus, 'just_one'));

$services_to_register = array_keys($updraftplus->backup_methods);
		foreach ($services_to_register as $service) {
			register_setting('updraft-options-group', 'updraft_'.$service); // phpcs:ignore PluginCheck.CodeAnalysis.SettingSanitization.register_settingMissing -- Sanitize callback added below to avail two params.
			// We have to add the filter manually in order to get the second parameter passed through (register_setting() only registers with one parameter)
			add_filter('sanitize_option_updraft_'.$service, array($updraftplus, 'storage_options_filter'), 10, 2);
		}
		
		register_setting('updraft-options-group', 'updraft_auto_updates', 'absint');
		register_setting('updraft-options-group', 'updraft_ssl_nossl', 'absint');
		register_setting('updraft-options-group', 'updraft_log_syslog', 'absint');
		register_setting('updraft-options-group', 'updraft_ssl_useservercerts', 'absint');
		register_setting('updraft-options-group', 'updraft_ssl_disableverify', 'absint');

register_setting('updraft-options-group', 'updraft_split_every', array($updraftplus_admin, 'optionfilter_split_every'));

register_setting('updraft-options-group', 'updraft_dir', array('UpdraftPlus_Manipulation_Functions', 'prune_updraft_dir_prefix'));

register_setting('updraft-options-group', 'updraft_report_warningsonly', array($updraftplus_admin, 'return_array'));
		register_setting('updraft-options-group', 'updraft_report_wholebackup', array($updraftplus_admin, 'return_array'));
		register_setting('updraft-options-group', 'updraft_report_dbbackup', array($updraftplus_admin, 'return_array'));

register_setting('updraft-options-group', 'updraft_autobackup_default', 'absint');
		register_setting('updraft-options-group', 'updraft_delete_local', 'absint');
		register_setting('updraft-options-group', 'updraft_debug_mode', 'absint');
		register_setting('updraft-options-group', 'updraft_extradbs', array($updraftplus_admin, 'return_array'));
		register_setting('updraft-options-group', 'updraft_backupdb_nonwp', 'absint');

register_setting('updraft-options-group', 'updraft_include_plugins', 'absint');
		register_setting('updraft-options-group', 'updraft_include_themes', 'absint');
		register_setting('updraft-options-group', 'updraft_include_uploads', 'absint');
		register_setting('updraft-options-group', 'updraft_include_others', 'absint');
		register_setting('updraft-options-group', 'updraft_include_wpcore', 'absint');
		register_setting('updraft-options-group', 'updraft_include_wpcore_exclude', array('UpdraftPlus_Manipulation_Functions', 'strip_dirslash'));
		register_setting('updraft-options-group', 'updraft_include_more', 'absint');
		register_setting('updraft-options-group', 'updraft_include_more_path', array('UpdraftPlus_Manipulation_Functions', 'remove_empties'));
		register_setting('updraft-options-group', 'updraft_include_uploads_exclude', array('UpdraftPlus_Manipulation_Functions', 'strip_dirslash'));
		register_setting('updraft-options-group', 'updraft_include_others_exclude', array('UpdraftPlus_Manipulation_Functions', 'strip_dirslash'));

register_setting('updraft-options-group', 'updraft_starttime_files', array('UpdraftPlus_Options', 'hourminute'));
		register_setting('updraft-options-group', 'updraft_starttime_db', array('UpdraftPlus_Options', 'hourminute'));

register_setting('updraft-options-group', 'updraft_startday_files', array('UpdraftPlus_Options', 'week_or_month_day'));
		register_setting('updraft-options-group', 'updraft_startday_db', array('UpdraftPlus_Options', 'week_or_month_day'));

global $pagenow;
		$page = UpdraftPlus_Manipulation_Functions::fetch_superglobal('request', 'page', '');
		if ('options-general.php' == $pagenow && 'updraftplus' == substr($page, 0, 11)) {
			if (!defined('UPDRAFTPLUS_DISABLE_TOP_LEVEL_MENU_ENTRY') || !UPDRAFTPLUS_DISABLE_TOP_LEVEL_MENU_ENTRY) add_filter('parent_file', array('UpdraftPlus', 'parent_file'), 99);
			if (is_multisite()) add_action('all_admin_notices', array('UpdraftPlus_Options', 'show_admin_warning_multisite'));
		}
	}

public static function hourminute($pot) {
		if (preg_match("/^([0-2]?[0-9]):([0-5][0-9])$/", $pot, $matches)) return sprintf("%02d:%s", $matches[1], $matches[2]);
		if ('' == $pot) return gmdate('H:i', time()+300);
		return '00:00';
	}

public static function week_or_month_day($pot) {
		$pot = absint($pot);
		return ($pot>28) ? 1 : $pot;
	}

/**
	 * Output information about the multisite add-on when relevant
	 */
	public static function show_admin_warning_multisite() {
		global $updraftplus_admin;
		$updraftplus_admin->show_admin_warning('<strong>'.__('UpdraftPlus warning:', 'updraftplus').'</strong> '.__('This is a WordPress multi-site (a.k.a. network) installation.', 'updraftplus').' <a href="https://updraftplus.com/shop/" target="_blank">'.__('WordPress Multisite is supported, with extra features, by UpdraftPlus Premium.', 'updraftplus').'</a> '.__('Without upgrading, UpdraftPlus allows <strong>every</strong> blog admin who can modify plugin settings to backup (and hence access the data, including passwords, from) and restore (including with customized modifications, e.g. changed passwords) <strong>the entire network</strong>.', 'updraftplus').' '.__('(This applies to all WordPress backup plugins unless they have been explicitly coded for multisite compatibility).', 'updraftplus'), 'error');
	}
}

add_action('admin_init', array('UpdraftPlus_Options', 'admin_init'));
add_action('admin_menu', array('UpdraftPlus_Options', 'add_admin_pages'));

$item) { if ('updraftplus' != $item[2]) continue; unset($submenu['options-general.php'][$key]); } } else { UpdraftPlus_Options::add_submenu(); } } /** * Adds a submenu page under the "Settings" menu in the WordPress admin. * * The capability required to access this submenu is filtered through the * 'option_page_capability_updraft-options-group' filter, with a default value of 'manage_options'. */ public static function add_submenu() { global $updraftplus_admin; $capability = apply_filters('option_page_capability_updraft-options-group', 'manage_options'); add_submenu_page( 'options-general.php', 'UpdraftPlus', __('UpdraftPlus Backups', 'updraftplus'), $capability, 'updraftplus', array($updraftplus_admin, 'settings_output') ); } public static function options_form_begin($settings_fields = 'updraft-options-group', $allow_autocomplete = true, $get_params = array(), $classes = '') { global $pagenow; echo '

$v) { if ($first_one) { $first_one = false; } else { $page .= '&'; } $page .= urlencode($k).'='.urlencode($v); } } if ($page) echo ' action="'.esc_url($page).'"'; if (!$allow_autocomplete) echo ' autocomplete="off"'; echo '>'; if ($settings_fields) { // This is settings_fields('updraft-options-group'), but with the referer pruned echo ""; echo ''; wp_nonce_field("updraft-options-group-options", '_wpnonce', false); $remove_query_args = array('state', 'action', 'oauth_verifier'); $referer = UpdraftPlus_Manipulation_Functions::wp_unslash(remove_query_arg($remove_query_args, $_SERVER['REQUEST_URI'])); // phpcs:ignore WordPress.Security.ValidatedSanitizedInput -- To be executed on server only, hence this superglobal not to be empty, sanitization and unslashing is done by custom function. // Add back the page parameter if it looks like we were on the settings page via an OAuth callback that has now had all parameters removed. This is likely unnecessarily conservative, but there's nothing requiring more than this at the current time. if (substr($referer, -19, 19) == 'options-general.php' && false !== strpos($_SERVER['REQUEST_URI'], '?')) $referer .= '?page=updraftplus'; // phpcs:ignore WordPress.Security.ValidatedSanitizedInput -- To be executed on server only, hence this superglobal will not to be empty, sanitization and unslashing are not required as this superglobal is used directly. echo ''; } } /** * Runs upon the WordPress action admin_init */ public static function admin_init() { static $already_inited = false; if ($already_inited) return; $already_inited = true; // If being called outside of the admin context, this may not be loaded yet if (!function_exists('register_setting')) include_once(ABSPATH.'wp-admin/includes/plugin.php'); global $updraftplus, $updraftplus_admin; register_setting('updraft-options-group', 'updraft_interval', array($updraftplus, 'schedule_backup')); register_setting('updraft-options-group', 'updraft_interval_database', array($updraftplus, 'schedule_backup_database')); register_setting('updraft-options-group', 'updraft_interval_increments', array($updraftplus, 'schedule_backup_increments')); register_setting('updraft-options-group', 'updraft_retain', array('UpdraftPlus_Manipulation_Functions', 'retain_range')); register_setting('updraft-options-group', 'updraft_retain_db', array('UpdraftPlus_Manipulation_Functions', 'retain_range')); register_setting('updraft-options-group', 'updraft_retain_extrarules', array($updraftplus_admin, 'return_array')); register_setting('updraft-options-group', 'updraft_encryptionphrase', 'strval'); register_setting('updraft-options-group', 'updraft_service', array($updraftplus, 'just_one')); $services_to_register = array_keys($updraftplus->backup_methods); foreach ($services_to_register as $service) { register_setting('updraft-options-group', 'updraft_'.$service); // phpcs:ignore PluginCheck.CodeAnalysis.SettingSanitization.register_settingMissing -- Sanitize callback added below to avail two params. // We have to add the filter manually in order to get the second parameter passed through (register_setting() only registers with one parameter) add_filter('sanitize_option_updraft_'.$service, array($updraftplus, 'storage_options_filter'), 10, 2); } register_setting('updraft-options-group', 'updraft_auto_updates', 'absint'); register_setting('updraft-options-group', 'updraft_ssl_nossl', 'absint'); register_setting('updraft-options-group', 'updraft_log_syslog', 'absint'); register_setting('updraft-options-group', 'updraft_ssl_useservercerts', 'absint'); register_setting('updraft-options-group', 'updraft_ssl_disableverify', 'absint'); register_setting('updraft-options-group', 'updraft_split_every', array($updraftplus_admin, 'optionfilter_split_every')); register_setting('updraft-options-group', 'updraft_dir', array('UpdraftPlus_Manipulation_Functions', 'prune_updraft_dir_prefix')); register_setting('updraft-options-group', 'updraft_report_warningsonly', array($updraftplus_admin, 'return_array')); register_setting('updraft-options-group', 'updraft_report_wholebackup', array($updraftplus_admin, 'return_array')); register_setting('updraft-options-group', 'updraft_report_dbbackup', array($updraftplus_admin, 'return_array')); register_setting('updraft-options-group', 'updraft_autobackup_default', 'absint'); register_setting('updraft-options-group', 'updraft_delete_local', 'absint'); register_setting('updraft-options-group', 'updraft_debug_mode', 'absint'); register_setting('updraft-options-group', 'updraft_extradbs', array($updraftplus_admin, 'return_array')); register_setting('updraft-options-group', 'updraft_backupdb_nonwp', 'absint'); register_setting('updraft-options-group', 'updraft_include_plugins', 'absint'); register_setting('updraft-options-group', 'updraft_include_themes', 'absint'); register_setting('updraft-options-group', 'updraft_include_uploads', 'absint'); register_setting('updraft-options-group', 'updraft_include_others', 'absint'); register_setting('updraft-options-group', 'updraft_include_wpcore', 'absint'); register_setting('updraft-options-group', 'updraft_include_wpcore_exclude', array('UpdraftPlus_Manipulation_Functions', 'strip_dirslash')); register_setting('updraft-options-group', 'updraft_include_more', 'absint'); register_setting('updraft-options-group', 'updraft_include_more_path', array('UpdraftPlus_Manipulation_Functions', 'remove_empties')); register_setting('updraft-options-group', 'updraft_include_uploads_exclude', array('UpdraftPlus_Manipulation_Functions', 'strip_dirslash')); register_setting('updraft-options-group', 'updraft_include_others_exclude', array('UpdraftPlus_Manipulation_Functions', 'strip_dirslash')); register_setting('updraft-options-group', 'updraft_starttime_files', array('UpdraftPlus_Options', 'hourminute')); register_setting('updraft-options-group', 'updraft_starttime_db', array('UpdraftPlus_Options', 'hourminute')); register_setting('updraft-options-group', 'updraft_startday_files', array('UpdraftPlus_Options', 'week_or_month_day')); register_setting('updraft-options-group', 'updraft_startday_db', array('UpdraftPlus_Options', 'week_or_month_day')); global $pagenow; $page = UpdraftPlus_Manipulation_Functions::fetch_superglobal('request', 'page', ''); if ('options-general.php' == $pagenow && 'updraftplus' == substr($page, 0, 11)) { if (!defined('UPDRAFTPLUS_DISABLE_TOP_LEVEL_MENU_ENTRY') || !UPDRAFTPLUS_DISABLE_TOP_LEVEL_MENU_ENTRY) add_filter('parent_file', array('UpdraftPlus', 'parent_file'), 99); if (is_multisite()) add_action('all_admin_notices', array('UpdraftPlus_Options', 'show_admin_warning_multisite')); } } public static function hourminute($pot) { if (preg_match("/^([0-2]?[0-9]):([0-5][0-9])$/", $pot, $matches)) return sprintf("%02d:%s", $matches[1], $matches[2]); if ('' == $pot) return gmdate('H:i', time()+300); return '00:00'; } public static function week_or_month_day($pot) { $pot = absint($pot); return ($pot>28) ? 1 : $pot; } /** * Output information about the multisite add-on when relevant */ public static function show_admin_warning_multisite() { global $updraftplus_admin; $updraftplus_admin->show_admin_warning(''.__('UpdraftPlus warning:', 'updraftplus').' '.__('This is a WordPress multi-site (a.k.a. network) installation.', 'updraftplus').' '.__('WordPress Multisite is supported, with extra features, by UpdraftPlus Premium.', 'updraftplus').' '.__('Without upgrading, UpdraftPlus allows every blog admin who can modify plugin settings to backup (and hence access the data, including passwords, from) and restore (including with customized modifications, e.g. changed passwords) the entire network.', 'updraftplus').' '.__('(This applies to all WordPress backup plugins unless they have been explicitly coded for multisite compatibility).', 'updraftplus'), 'error'); } } add_action('admin_init', array('UpdraftPlus_Options', 'admin_init')); add_action('admin_menu', array('UpdraftPlus_Options', 'add_admin_pages'));