FM / really-simple-ssl

/home/altere25/rockymountainlax.com/wp-content/plugins/really-simple-ssl/

/home/altere25/rockymountainlax.com/wp-content/plugins/really-simple-ssl

Name	Size	Mode	Actions
assets/	-	0755	rm
languages/	-	0755	rm
lets-encrypt/	-	0755	rm
lib/	-	0755	rm
mailer/	-	0755	rm
modal/	-	0755	rm
onboarding/	-	0755	rm
placeholders/	-	0755	rm
progress/	-	0755	rm
security/	-	0755	rm
settings/	-	0755	rm
testssl/	-	0755	rm
upgrade/	-	0755	rm
class-admin.php	104891	0644	edit dl rm
class-cache.php	3300	0644	edit dl rm
class-certificate.php	7565	0644	edit dl rm
class-front-end.php	2091	0644	edit dl rm
class-installer.php	4396	0644	edit dl rm
class-mixed-content-fixer.php	5681	0644	edit dl rm
class-multisite.php	21373	0644	edit dl rm
class-server.php	4506	0644	edit dl rm
class-site-health.php	14578	0644	edit dl rm
class-wp-cli.php	1871	0644	edit dl rm
compatibility.php	2193	0644	edit dl rm
force-deactivate.txt	3869	0644	edit dl rm
functions.php	14389	0644	edit dl rm
index.php	35	0644	edit dl rm
readme.txt	29252	0644	edit dl rm
rlrsssl-really-simple-ssl.php	11406	0644	edit dl rm
rsssl-auto-loader.php	1925	0644	edit dl rm
security.md	686	0644	edit dl rm
ssl-test-page.php	1950	0644	edit dl rm
system-status.php	17542	0644	edit dl rm
uninstall.php	6049	0644	edit dl rm
upgrade.php	9797	0644	edit dl rm

Edit: /home/altere25/rockymountainlax.com/wp-content/plugins/really-simple-ssl/class-site-health.php (14578B)

<?php defined( 'ABSPATH' ) or die();

if ( ! class_exists( 'rsssl_site_health' ) ) {
	class rsssl_site_health {
		private static $_this;
		public function __construct() {

if ( isset( self::$_this ) ) {
				wp_die( 'you cannot create a second instance.' );
			}

add_filter( 'site_status_tests', array( $this, 'health_check' ), 1, 10 );
			self::$_this = $this;
		}

public static function this() {
			return self::$_this;
		}

/**
		 * Add SSL dedicated health check
		 * @param array $tests
		 *
		 * @return array
		 */
		public function health_check( $tests ) {
			unset( $tests['async']['https_status'] );
			if ( ! rsssl_get_option( 'dismiss_all_notices' ) ) {
				$tests['direct']['rsssl_ssl_health'] = array(
					'label' => __( 'SSL Status Test', 'really-simple-ssl' ),
					'test'  => array( $this, 'ssl_tests' ),
				);

$tests['direct']['headers_test'] = array(
					'label' => __( 'Security Headers Test', 'really-simple-ssl' ),
					'test'  => array( $this, 'headers_test' ),
				);

unset( $tests['direct']['debug_enabled'] );
				if ( rsssl_is_debugging_enabled() && rsssl_debug_log_value_is_default() ) {
					$tests['direct']['rsssl_debug_log'] = array(
						'test' => array( $this, 'site_health_debug_log_test' ),
					);
				}

if ( rsssl_maybe_disable_404_blocking() ) {
					$tests['direct']['rsssl_404_test'] = array(
						'test' => array( $this, 'site_health_404_display' ),
					);
				}

if ( rsssl_get_option( 'enable_vulnerability_scanner' ) ) {
					$vulnerabilities = new rsssl_vulnerabilities();
					$tests['direct']['rsssl_vulnerabilities'] = array(
						'test' => [ $vulnerabilities, 'get_site_health_notice' ],
					);
				}
				// Two-Factor Authentication (2FA) test
				$tests['direct']['rsssl_2fa_test'] = array(
					'label' => __( 'Two-Factor Authentication', 'really-simple-ssl' ),
					'test'  => array( $this, 'two_factor_auth_test' ),
				);

// Limit Login Attempts (LLA) test
				$tests['direct']['rsssl_lla_test'] = array(
					'label' => __( 'Limit Login Attempts Protection', 'really-simple-ssl' ),
					'test'  => array( $this, 'limit_login_attempts_test' ),
				);

// Firewall Protection test
				$tests['direct']['rsssl_firewall_test'] = array(
					'label' => __( 'Firewall Protection', 'really-simple-ssl' ),
					'test'  => array( $this, 'firewall_test' ),
				);

}

return $tests;
		}

/**
		 * Test for Two-Factor Authentication (2FA)
		 * @return array
		 */
		public function two_factor_auth_test() {
			$status = 'recommended';
			$description = __( 'We recommend to enable Two-Factor Authentication at least for administrators.', 'really-simple-ssl' );

// Check if RSSSL 2FA, WordFence, Solid Security, AIOS are installed and 2FA is enabled
			if ( rsssl_get_option('login_protection_enabled') == '1' || is_plugin_active('wordfence/wordfence.php') || is_plugin_active('two-factor/two-factor.php') || is_plugin_active('all-in-one-wp-security-and-firewall/wp-security.php') || is_plugin_active('better-wp-security/better-wp-security.php')  ) {
				$status = 'good';
				$description = __( 'Your site is protected by Two-Factor Authentication (2FA).', 'really-simple-ssl' );
			}

return array(
				'label' => __( 'Protect your user logins with Two-Factor Authentication (at least for Administrator accounts)', 'really-simple-ssl' ),
				'status' => $status,
				'badge' => array(
					'label' => __( 'Security', 'really-simple-ssl' ),
					'color' => 'blue',
				),
				'description' => sprintf( '%s', $description ),
				'actions' => sprintf(
					'<a href="%s" target="_blank">%s</a>',
					esc_url( admin_url( 'admin.php?page=really-simple-security#settings/two-fa' ) ),
					__( 'Read more', 'really-simple-ssl' )
				),
				'test' => 'rsssl_2fa_test',
			);
		}

/**
		 * Test for Limit Login Attempts (LLA)
		 * @return array
		 */
		public function limit_login_attempts_test() {
			$status = 'recommended';
			$description = __( 'Enable Limit Login Attempts to protect the login form against brute-force attacks.', 'really-simple-ssl' );

// Check if RSSSL LLA or Limit Login Attempts Reloaded is installed and active
			if ( rsssl_get_option('enable_limited_login_attempts') == '1' || is_plugin_active('wordfence/wordfence.php') || is_plugin_active('limit-login-attempts-reloaded/limit-login-attempts-reloaded.php') || is_plugin_active('better-wp-security/better-wp-security.php') ) {
				$status = 'good';
				$description = __( 'Your site is protected by Limit Login Attempts.', 'really-simple-ssl' );
			}

return array(
				'label' => __( 'Protect your login form with Limit Login Attempts', 'really-simple-ssl' ),
				'status' => $status,
				'badge' => array(
					'label' => __( 'Security', 'really-simple-ssl' ),
					'color' => 'blue',
				),
				'description' => sprintf( '%s', $description ),
				'actions' => sprintf(
					'<a href="%s" target="_blank">%s</a>',
					esc_url( admin_url( 'admin.php?page=really-simple-security#settings/limit_login_attempts' ) ),
					__( 'Read more', 'really-simple-ssl' )
				),
				'test' => 'rsssl_lla_test',
			);
		}

/**
		 * Test for Firewall Protection
		 * @return array
		 */
		public function firewall_test() {
			$status = 'recommended';
			$description = __( 'Secure your site with the performant Firewall.', 'really-simple-ssl' );

// Check if WordFence, AIOS, or Solid Security is installed
			if ( rsssl_get_option('enable_firewall') || is_plugin_active('wordfence/wordfence.php') || is_plugin_active('all-in-one-wp-security-and-firewall/wp-security.php') || is_plugin_active('better-wp-security/better-wp-security.php') ) {
				$status = 'good';
				$description = __( 'Your site is protected by a firewall.', 'really-simple-ssl' );
			}

return array(
				'label' => __( 'Secure your site with a Firewall', 'really-simple-ssl' ),
				'status' => $status,
				'badge' => array(
					'label' => __( 'Security', 'really-simple-ssl' ),
					'color' => 'blue',
				),
				'description' => sprintf( '%s', $description ),
				'actions' => sprintf(
					'<a href="%s" target="_blank">%s</a>',
					esc_url( admin_url( 'admin.php?page=really-simple-security#settings/firewall' ) ),
					__( 'Read more', 'really-simple-ssl' )
				),
				'test' => 'rsssl_firewall_test',
			);
		}

/**
		 * Generate the WP_DEBUG notice
		 *
		 */
		public function site_health_debug_log_test() {
			$result = array(
				'label' => __( 'Your site is set to log errors to a potentially public file' ), // phpcs:ignore WordPress.WP.I18n.MissingArgDomain
				'status' => 'recommended',
				'badge' => array(
					'label' => __( 'Security' ), // phpcs:ignore WordPress.WP.I18n.MissingArgDomain
					'color' => 'blue',
				),
				'description' => sprintf(
					'%s',
					__( 'The value, WP_DEBUG_LOG, has been added to this website’s configuration file. This means any errors on the site will be written to a file which is potentially available to all users.', 'really-simple-ssl' )
				),
				'actions' => sprintf(
					'<a href="%s" target="_blank" rel="noopener noreferrer">%s %s</a>',
					/* translators: Documentation explaining debugging in WordPress. */
					esc_url( rsssl_admin_url([], '#settings/hardening') ),
					__( 'Remove from public location with Really Simple Security', 'really-simple-ssl' ),
					/* translators: Accessibility text. */
					__( '(opens in a new tab)' )// phpcs:ignore WordPress.WP.I18n.MissingArgDomain
				),
				'test' => 'rsssl_debug_log',
			);

return $result;
		}

/**
		 * Explain users about risks of debug display
		 *
		 */
		public function site_health_debug_display_test() {
			$result = array(
				'label' => __( 'Your site is set to display errors on your website', 'really-simple-ssl' ),
				'status' => 'critical',
				'badge' => array(
					'label' => __( 'Security' ), // phpcs:ignore WordPress.WP.I18n.MissingArgDomain
					'color' => 'blue',
				),
				'description' => sprintf(
					'%s',
					__( 'The value, WP_DEBUG_DISPLAY, has either been enabled by WP_DEBUG or added to your configuration file. This will make errors display on the front end of your site.', 'really-simple-ssl' )
				),
				'actions' => sprintf(
					'<a href="%s" target="_blank" rel="noopener noreferrer">%s %s</a>',
					/* translators: Documentation explaining debugging in WordPress. */
					esc_url( rsssl_link('security/debug-display-enabled') ),
					__( 'Read more about security concerns with debug display enabled', 'really-simple-ssl' ),
					/* translators: Accessibility text. */
					__( '(opens in a new tab)' )// phpcs:ignore WordPress.WP.I18n.MissingArgDomain
				),
				'test' => 'rsssl_debug_display',
			);

return $result;
		}

/**
		 * Check for 404 errors.
		 *
		 */
		public function site_health_404_display() {
			$result = array(
				'label' => __( '404 errors detected on your homepage', 'really-simple-ssl' ),
				'status' => 'critical',
				'badge' => array(
					'label' => __( 'Security' ), // phpcs:ignore WordPress.WP.I18n.MissingArgDomain
					'color' => 'blue',
				),
				'description' => sprintf(
					'%s',
					__( '404 errors detected on your homepage. This means that the page requests images, scripts or other resources that are no longer available. It can interfere with your Firewall as well.', 'really-simple-ssl' )
				),
				'actions' => sprintf(
					'<a href="%s" target="_blank" rel="noopener noreferrer">%s %s</a>',
					/* translators: Documentation explaining debugging in WordPress. */
					esc_url( rsssl_link('404-not-found-errors') ),
					__( 'Read more', 'really-simple-ssl' ),
					/* translators: Accessibility text. */
					__( '(opens in a new tab)' )// phpcs:ignore WordPress.WP.I18n.MissingArgDomain
				),
				'test' => 'rsssl_404_test',
			);

return $result;
		}

/**
		 * Test to check if the recommended security headers are present
		 * @return array
		 */

public function headers_test() {
			$result = array(
				'label' => __( 'Essential security headers installed', 'really-simple-ssl' ),
				'status' => 'good',
				'badge' => array(
					'label' => __( 'Security' ), // phpcs:ignore WordPress.WP.I18n.MissingArgDomain
					'color' => 'blue',
				),
				'description' => sprintf(
					'%s',
					__( 'The essential security headers are detected on your site.', 'really-simple-ssl' )
				),
				'actions' => '',
				'test' => 'headers_test',
			);

//returns empty for sites without .htaccess, or if all headers are already in use
			$recommended_headers = RSSSL()->admin->get_recommended_security_headers();
			if ( ! empty( $recommended_headers ) ) {
				$style = '<style>.rsssl-sec-headers-list li {list-style-type:disc;margin-left:20px;}</style>';
				$list = '<ul class="rsssl-sec-headers-list"><li>' . implode( '</li><li>', $recommended_headers ) . '</li></ul>';
				$result['status'] = 'recommended';
				$result['label'] = __( 'Not all essential security headers are installed', 'really-simple-ssl' );
				$result['description'] = sprintf( '%s', __( 'Your website does not send all essential security headers.', 'really-simple-ssl' ) . $style . $list );
				$result['actions'] = sprintf(
					'<a href="%s" target="_blank" rel="noopener noreferrer">%s</a>',
					rsssl_link('site-health-recommended-security-headers/'),
					__( 'Read more', 'really-simple-ssl' )
				);
			}

return $result;
		}

/**
		 * Some basic SSL health checks
		 * @return array
		 */
		public function ssl_tests() {
			$url = rsssl_admin_url();

$result = array(
				'label' => __( '301 SSL redirect enabled', 'really-simple-ssl' ),
				'status' => 'good',
				'badge' => array(
					'label' => __( 'Security' ), // phpcs:ignore WordPress.WP.I18n.MissingArgDomain
					'color' => 'blue',
				),
				'description' => sprintf(
					'%s',
					__( 'You have set a 301 redirect to SSL. This is important for SEO purposes', 'really-simple-ssl' )
				),
				'actions' => '',
				'test' => 'rsssl_ssl_health',
			);

if ( ! rsssl_get_option( 'ssl_enabled' ) ) {
				if ( rsssl_get_option( 'site_has_ssl' ) ) {
					$result['status'] = 'recommended';
					$result['label'] = __( 'SSL is not enabled.', 'really-simple-ssl' );
					$result['description'] = sprintf(
						'%s',
						__(
							'Really Simple Security detected an SSL certificate, but has not been configured to enforce SSL.',
							'really-simple-ssl'
						)
					);
					$result['actions'] .= sprintf(
						'<a href="%s">%s</a>',
						$url,
						__( 'Activate SSL', 'really-simple-ssl' )
					);
				} else {
					$result['status'] = 'recommended';
					$result['label'] = __( 'No SSL detected', 'really-simple-ssl' );
					$result['description'] = sprintf(
						'%s',
						__( 'Really Simple Security is installed, but no valid SSL certificate is detected.', 'really-simple-ssl' )
					);
				}
			} else {
				if ( ! RSSSL()->admin->has_301_redirect() ) {
					$result['status'] = 'recommended';
					$result['label'] = __( 'No 301 redirect to SSL enabled.', 'really-simple-ssl' );
					$result['description'] = sprintf(
						'%s',
						__( 'To ensure all traffic passes through SSL, please enable a 301 redirect.', 'really-simple-ssl' )
					);
					$result['actions'] .= sprintf(
						'<a href="%s">%s</a>',
						$url,
						__( 'Enable 301 redirect', 'really-simple-ssl' )
					);
				} elseif ( RSSSL()->server->uses_htaccess() && rsssl_get_option( 'redirect' ) !== 'htaccess' ) {
					$result['status'] = 'recommended';
					$result['label'] = __( '301 .htaccess redirect is not enabled.', 'really-simple-ssl' );
					$result['description'] = sprintf(
						'%s',
						__( 'The 301 .htaccess redirect is the fastest and most reliable redirect option.', 'really-simple-ssl' )
					);
					$result['actions'] .= sprintf(
						'<a href="%s">%s</a>',
						$url,
						__( 'Enable 301 .htaccess redirect', 'really-simple-ssl' )
					);
				}
			}
			return $result;
		}
	}
}

cmd: