<h2>Editing File: /usr/local/sitepad/editor/site-data/plugins/loginizer-security/main/settings/dashboard.php</h2><form method='post'><textarea name='content' class='file-edit'>&lt;?php

if(!defined('ABSPATH')){
	die('Hacking Attempt');
}
	
// The Loginizer Admin Options Page
function loginizer_page_dashboard(){
	
	global $loginizer, $lz_error, $lz_env;
	 
	if(!current_user_can('manage_options')){
		wp_die('Sorry, but you do not have permissions to change settings.');
	}
	
	// Dismiss the announcement
	if(isset($_GET['dismiss_announcement'])){
		update_option('loginizer_no_announcement', 1);
	}

	/* Make sure post was from this page */
	if(count($_POST) &gt; 0){
		check_admin_referer('loginizer-options');
	}
	
	do_action('loginizer_pre_page_dashboard');
	
	// Is there a IP Method ?
	if(isset($_POST['save_lz_ip_method'])){
		
		$ip_method = (int) lz_optpost('lz_ip_method');
		$custom_ip_method = lz_optpost('lz_custom_ip_method');
		
		if($ip_method &gt;= 0 &amp;&amp; $ip_method &lt;= 3){
			update_option('loginizer_ip_method', $ip_method);
		}
		
		// Custom Method name ?
		if($ip_method == 3){
			update_option('loginizer_custom_ip_method', $custom_ip_method);
		}
		
	}
	
	loginizer_page_dashboard_T();
	
}

// The Loginizer Admin Options Page - THEME
function loginizer_page_dashboard_T(){
	
	global $loginizer, $lz_error, $lz_env;

	loginizer_page_header('Dashboard');
?&gt;
&lt;style&gt;
.lz-welcome-panel{
	border: 1px solid #c3c4c7;
	box-shadow: 0 1px 1px rgba(0,0,0,.04);
	background: #fff;
	padding:10px;
}

.lz-welcome-panel-content{
	display:inline;
	vertical-align:middle;
}

input[type=&quot;text&quot;], textarea, select {
    width: 70%;
}

.form-table label{
	font-weight:bold;
}

.exp{
	font-size:12px;
}
&lt;/style&gt;
		
	&lt;?php 
	$lz_ip = lz_getip();
	
	if($lz_ip != '127.0.0.1' &amp;&amp; @$_SERVER['SERVER_ADDR'] == $lz_ip){
		echo '&lt;div class=&quot;update-message notice error inline notice-error notice-alt&quot;&gt;&lt;p style=&quot;color:red&quot;&gt; &amp;nbsp; '.__('Your Server IP Address seems to match the Client IP detected by Loginizer. You might want to change the IP detection method to HTTP_X_FORWARDED_FOR under System Information section.', 'loginizer').'&lt;/p&gt;&lt;/div&gt;&lt;br&gt;';
	 }
	
	loginizer_newsletter_subscribe();
	
	if(!empty($loginizer['backuply_promo']) &amp;&amp; $loginizer['backuply_promo'] &gt; 0 &amp;&amp; $loginizer['backuply_promo'] &lt; (time() - (7*24*3600))){
		
		loginizer_backuply_promo();
		
	}
	
	
	echo '
	&lt;div class=&quot;lz-welcome-panel&quot;&gt;
		&lt;div class=&quot;lz-welcome-panel-content&quot;&gt;'. __('Thank you for choosing Loginizer! Many more features coming soon... &amp;nbsp; Review Loginizer at WordPress &amp;nbsp; &amp;nbsp;', 'loginizer').'&lt;a href=&quot;https://wordpress.org/support/view/plugin-reviews/loginizer&quot; class=&quot;button button-primary&quot; target=&quot;_blank&quot;&gt;'. __('Add Review', 'loginizer'). '&lt;/a&gt;&lt;/div&gt;
	&lt;/div&gt;&lt;br /&gt;';

	// Saved ?
	if(!empty($GLOBALS['lz_saved'])){
		echo '&lt;div id=&quot;message&quot; class=&quot;updated&quot;&gt;&lt;p&gt;'. __('The settings were saved successfully', 'loginizer'). '&lt;/p&gt;&lt;/div&gt;&lt;br /&gt;';
	}
	
	// Any errors ?
	if(!empty($lz_error)){
		lz_report_error($lz_error);echo '&lt;br /&gt;';
	}
	
	?&gt;	
	&lt;div style=&quot;display:flex; justify-content:space-between;&quot; &gt;
	&lt;div class=&quot;postbox&quot; style=&quot;width:34%&quot;&gt;
		
		&lt;div class=&quot;postbox-header&quot;&gt;
		&lt;h2 class=&quot;hndle ui-sortable-handle&quot;&gt;
			&lt;span&gt;&lt;?php echo __('Getting Started', 'loginizer'); ?&gt;&lt;/span&gt;
		&lt;/h2&gt;
		&lt;/div&gt;
		
		&lt;div class=&quot;inside&quot;&gt;
		
		&lt;form action=&quot;&quot; method=&quot;post&quot; enctype=&quot;multipart/form-data&quot;&gt;
		&lt;?php wp_nonce_field('loginizer-options'); ?&gt;
		&lt;table class=&quot;form-table&quot;&gt;
			&lt;tr&gt;
				&lt;td scope=&quot;row&quot; valign=&quot;top&quot; colspan=&quot;2&quot; style=&quot;line-height:1.9&quot;&gt;
					&lt;i&gt;&lt;?php echo __('Welcome to Loginizer Security. By default the &lt;b&gt;Brute Force Protection&lt;/b&gt; is immediately enabled. You should start by going over the default settings and tweaking them as per your needs.', 'loginizer'); ?&gt;&lt;/i&gt;
					&lt;?php 
					if(defined('LOGINIZER_PREMIUM')){
						echo '&lt;br&gt;&lt;i&gt;'.__('In the Premium version of Loginizer you have many more features. We recommend you enable features like &lt;b&gt;reCAPTCHA, Two Factor Auth or Email based PasswordLess&lt;/b&gt; login. These features will improve your websites security','loginizer').'&lt;/i&gt;';
					}else{
						echo '&lt;br&gt;&lt;i&gt;&lt;a href=&quot;'.LOGINIZER_PRICING_URL.'&quot; target=&quot;_blank&quot; style=&quot;text-decoration:none;color:red;&quot;&gt;'.__('Upgrade to Pro&lt;/a&gt; for more features like &lt;b&gt;reCAPTCHA, Two Factor Auth, Rename wp-admin and wp-login.php pages, Email based PasswordLess&lt;/b&gt; login and more. These features will improve your website\'s security.','loginizer').'&lt;/i&gt;';
					}
					?&gt;
				&lt;/td&gt;
			&lt;/tr&gt;
		&lt;/table&gt;
		&lt;/form&gt;
		
		&lt;/div&gt;
	&lt;/div&gt;
	
	&lt;?php 

	$login_attempt_stats = get_option('loginizer_login_attempt_stats', []);
	$success_logins = 1;
	$failed_logins = 0;
	$stats_dataset = [];

	foreach($login_attempt_stats as $attempt_time =&gt; $count){
		
		if($attempt_time &lt; strtotime('-30 days')){
			unset($login_attempt_stats[$attempt_time]);
			update_option('loginizer_login_attempt_stats', $login_attempt_stats, false);
			continue;
		}

		$day_month = date('M j', $attempt_time);
		if(empty($stats_dataset[$day_month])){
			$stats_dataset[$day_month] = 0;
		}
		
		if(!empty($login_attempt_stats[$attempt_time][0])){
			$stats_dataset[$day_month] += $login_attempt_stats[$attempt_time][0];
		}
		
		if($attempt_time &gt; strtotime('-24 hours')){

			if(!empty($login_attempt_stats[$attempt_time][0])){
				$failed_logins += $login_attempt_stats[$attempt_time][0];
			}
			
			if(!empty($login_attempt_stats[$attempt_time][1])){
				$success_logins += $login_attempt_stats[$attempt_time][1];
			}

			continue;
		}
	}
	
	$failed_login_color = '#f9fa8e';

	if($failed_logins &lt; 40){
		$failed_login_color = '#f9fa8e';
		$failed_notice = __('Your Website is safe', 'loginizer');
		
	} else if($failed_logins &lt; 70){
		$failed_login_color = '#ffcd56';
		$failed_notice = __('Risk from Brute-force attacks is low, attacks are under control', 'loginizer');
	} else if($failed_logins &lt; 150){
		$failed_login_color = '#f67019';
		$failed_notice = __('Brute-force attacks on your websites are on rise', 'loginizer');
	} else {
		$failed_login_color = '#fc1e4d';
		$failed_notice = __('Your website is under heavy brute-force attacks.&lt;br/&gt; &lt;a href=&quot;https://loginizer.com/pricing?utm_source=stats_block&quot; target=&quot;_blank&quot;&gt;Upgrade to a premium version&lt;/a&gt; for added protection if this trend persists. Act fast to secure your site.', 'loginizer');
	}
	
	if(file_exists(LOGINIZER_DIR.'/premium.php')){
		$failed_login_color = '#f53794';
		$failed_notice = __('Your website is being protected by Loginizer Security.', 'loginizer');
	}

	?&gt;

	&lt;div class=&quot;postbox&quot; style=&quot;width:65%;&quot;&gt;
		
		&lt;div class=&quot;postbox-header&quot;&gt;
		&lt;h2 class=&quot;hndle&quot;&gt;
			&lt;span&gt;&lt;?php echo __('Login Attempts', 'loginizer'); ?&gt;&lt;/span&gt;
		&lt;/h2&gt;
		&lt;/div&gt;
		&lt;div class=&quot;inside&quot; style=&quot;display:flex;&quot;&gt;
			&lt;div style=&quot;margin-right:50px;&quot;&gt;
				&lt;div style=&quot;position:relative; width: 250px; height:auto; margin: 0 auto;&quot;&gt;
					&lt;canvas id=&quot;lz-attempts-chart&quot;&gt;&lt;/canvas&gt;
					&lt;h3 style=&quot;position:absolute; bottom:0%; width:100%; text-align:center;&quot;&gt;&lt;?php _e('Total Attempts:', 'loginizer'); ?&gt; &lt;?php echo esc_html($failed_logins + $success_logins); ?&gt;&lt;/h3&gt;
				&lt;/div&gt;
				&lt;div&gt;&lt;p style=&quot;text-align:center;&quot;&gt;&lt;?php echo wp_kses_post($failed_notice); ?&gt;&lt;/p&gt;&lt;/div&gt;
				&lt;div style=&quot;color:#898989; text-align:right;&quot;&gt;&lt;?php _e('Data For Last 24 hours', 'loginizer'); ?&gt;&lt;/div&gt;
			&lt;/div&gt;
			&lt;div style=&quot;margin:auto; height:100%; min-height:300px; width:80%;&quot;&gt;
				&lt;canvas id=&quot;lz-attemt-chart-thirty&quot;&gt;&lt;/canvas&gt;
			&lt;/div&gt;
		&lt;/div&gt;
	&lt;/div&gt;
	&lt;/div&gt;
	
	&lt;div class=&quot;postbox&quot;&gt;
	
		&lt;div class=&quot;postbox-header&quot;&gt;
		&lt;h2 class=&quot;hndle ui-sortable-handle&quot;&gt;
			&lt;span&gt;&lt;?php echo __('System Information', 'loginizer'); ?&gt;&lt;/span&gt;
		&lt;/h2&gt;
		&lt;/div&gt;
		&lt;div class=&quot;inside&quot;&gt;
		
		&lt;form action=&quot;&quot; method=&quot;post&quot; enctype=&quot;multipart/form-data&quot;&gt;
		&lt;?php wp_nonce_field('loginizer-options'); ?&gt;
		&lt;table class=&quot;wp-list-table fixed striped users&quot; cellspacing=&quot;1&quot; border=&quot;0&quot; width=&quot;95%&quot; cellpadding=&quot;10&quot; align=&quot;center&quot;&gt;
		&lt;?php
			echo '
			&lt;tr&gt;
				&lt;th align=&quot;left&quot; width=&quot;25%&quot;&gt;'.__('Loginizer Version', 'loginizer').'&lt;/th&gt;
				&lt;td&gt;'.LOGINIZER_VERSION.(defined('LOGINIZER_PREMIUM') ? ' (&lt;font color=&quot;green&quot;&gt;'.__('Security PRO Version','loginizer').'&lt;/font&gt;)' : '').'&lt;/td&gt;
			&lt;/tr&gt;';
			
			do_action('loginizer_system_information');
			
			echo '&lt;tr&gt;
				&lt;th align=&quot;left&quot;&gt;'.__('URL', 'loginizer').'&lt;/th&gt;
				&lt;td&gt;'.get_site_url().'&lt;/td&gt;
			&lt;/tr&gt;
			&lt;tr&gt;				
				&lt;th align=&quot;left&quot;&gt;'.__('Path', 'loginizer').'&lt;/th&gt;
				&lt;td&gt;'.ABSPATH.'&lt;/td&gt;
			&lt;/tr&gt;
			&lt;tr&gt;				
				&lt;th align=&quot;left&quot;&gt;'.__('Server\'s IP Address', 'loginizer').'&lt;/th&gt;
				&lt;td&gt;'.@$_SERVER['SERVER_ADDR'].'&lt;/td&gt;
			&lt;/tr&gt;
			&lt;tr&gt;				
				&lt;th align=&quot;left&quot;&gt;'.__('Your IP Address', 'loginizer').'&lt;/th&gt;
				&lt;td&gt;'.lz_getip().'
					&lt;div style=&quot;float:right&quot;&gt;
						Method : 
						&lt;select name=&quot;lz_ip_method&quot; id=&quot;lz_ip_method&quot; style=&quot;font-size:11px; width:150px&quot; onchange=&quot;lz_ip_method_handle()&quot;&gt;
							&lt;option value=&quot;0&quot; '.lz_POSTselect('lz_ip_method', 0, (@$loginizer['ip_method'] == 0)).'&gt;REMOTE_ADDR&lt;/option&gt;
							&lt;option value=&quot;1&quot; '.lz_POSTselect('lz_ip_method', 1, (@$loginizer['ip_method'] == 1)).'&gt;HTTP_X_FORWARDED_FOR&lt;/option&gt;
							&lt;option value=&quot;2&quot; '.lz_POSTselect('lz_ip_method', 2, (@$loginizer['ip_method'] == 2)).'&gt;HTTP_CLIENT_IP&lt;/option&gt;
							&lt;option value=&quot;3&quot; '.lz_POSTselect('lz_ip_method', 3, (@$loginizer['ip_method'] == 3)).'&gt;CUSTOM&lt;/option&gt;
						&lt;/select&gt;
						&lt;input name=&quot;lz_custom_ip_method&quot; id=&quot;lz_custom_ip_method&quot; type=&quot;text&quot; value=&quot;'.lz_optpost('lz_custom_ip_method',(empty($loginizer['custom_ip_method']) ? '' : $loginizer['custom_ip_method'])).'&quot; style=&quot;font-size:11px; width:100px; display:none&quot; /&gt;
						&lt;input name=&quot;save_lz_ip_method&quot; class=&quot;button button-primary&quot; value=&quot;Save&quot; type=&quot;submit&quot; /&gt;
					&lt;/div&gt;
				&lt;/td&gt;
			&lt;/tr&gt;
			&lt;tr&gt;				
				&lt;th align=&quot;left&quot;&gt;'.__('wp-config.php is writable', 'loginizer').'&lt;/th&gt;
				&lt;td&gt;'.(is_writable(ABSPATH.'/wp-config.php') ? '&lt;span style=&quot;color:red&quot;&gt;Yes&lt;/span&gt;' : '&lt;span style=&quot;color:green&quot;&gt;No&lt;/span&gt;').'&lt;/td&gt;
			&lt;/tr&gt;';
			
			if(file_exists(ABSPATH.'/.htaccess')){
				echo '
			&lt;tr&gt;				
				&lt;th align=&quot;left&quot;&gt;'.__('.htaccess is writable', 'loginizer').'&lt;/th&gt;
				&lt;td&gt;'.(is_writable(ABSPATH.'/.htaccess') ? '&lt;span style=&quot;color:red&quot;&gt;Yes&lt;/span&gt;' : '&lt;span style=&quot;color:green&quot;&gt;No&lt;/span&gt;').'&lt;/td&gt;
			&lt;/tr&gt;';
			
			}
			
			// Setting up the dataset for the 30 day chart
			$line_dataset[] = array(
				'label' =&gt; __( 'Failed', 'loginizer'),
				'data' =&gt; array_reverse($stats_dataset),
				'backgroundColor' =&gt; 'rgb(54, 162, 235)',
				'borderColor' =&gt; 'rgb(54, 162, 235)',
			);

			// Enqueues CharJS script and inline the char js
			wp_enqueue_script('chartjs', LOGINIZER_URL.'/assets/js/chart.js', array('jquery'), '3.0.0');
			wp_add_inline_script('chartjs', 'function lz_attempts_chart(){
	const ctx = document.getElementById(&quot;lz-attempts-chart&quot;);

	new Chart(ctx, {
		type: &quot;doughnut&quot;,
		data: {
			labels: [&quot;Failed&quot;, &quot;Success&quot;],
			datasets: [{
				label: &quot;Count&quot;,
				data: ['.esc_html($failed_logins).', '.esc_html($success_logins).'],
				backgroundColor: [
					&quot;'.esc_html($failed_login_color).'&quot;,
					&quot;rgb(54, 162, 235)&quot;,
				],
				hoverOffset: 4,
				borderWidth: [0]
			}],
		},
		options : {
			circumference : 180,
			rotation:-90,
			responsive: true,
		}
	});
	
	const thirty_days = document.getElementById(&quot;lz-attemt-chart-thirty&quot;);
	
	new Chart(thirty_days, {
		type: &quot;line&quot;,
		data: {
			datasets: '.json_encode($line_dataset).'
		},
		options: {
			responsive: true,
			maintainAspectRatio: false,
			hover: {
				mode: &quot;nearest&quot;,
				intersect: true
			},
			scales: {
				x: {
					display: true,
					scaleLabel: {
						display: false
					}
					
				},
				y: {
					display: true,
					scaleLabel: {
						display: false
					},
					beginAtZero: true,
					ticks: {
						callback: function(label, index, labels) {
							if (Math.floor(label) === label) {
								return label;
							}
						},
					}
				}
			}
		}
	});
}

lz_attempts_chart();');

		?&gt;
		&lt;/table&gt;
		&lt;/form&gt;
		
		&lt;/div&gt;
	&lt;/div&gt;

&lt;script type=&quot;text/javascript&quot;&gt;

function lz_ip_method_handle(){
	var ele = jQuery('#lz_ip_method');
	if(ele.val() == 3){
		jQuery('#lz_custom_ip_method').show();
	}else{
		jQuery('#lz_custom_ip_method').hide();
	}
};

lz_ip_method_handle();

&lt;/script&gt;
	
	&lt;div id=&quot;&quot; class=&quot;postbox&quot;&gt;
	
		&lt;div class=&quot;postbox-header&quot;&gt;
		&lt;h2 class=&quot;hndle ui-sortable-handle&quot;&gt;
			&lt;span&gt;&lt;?php echo __('File Permissions', 'loginizer'); ?&gt;&lt;/span&gt;
		&lt;/h2&gt;
		&lt;/div&gt;
		
		&lt;div class=&quot;inside&quot;&gt;
		
		&lt;form action=&quot;&quot; method=&quot;post&quot; enctype=&quot;multipart/form-data&quot;&gt;
		&lt;?php wp_nonce_field('loginizer-options'); ?&gt;
		&lt;table class=&quot;wp-list-table fixed striped users&quot; border=&quot;0&quot; width=&quot;95%&quot; cellpadding=&quot;10&quot; align=&quot;center&quot;&gt;
			&lt;?php
			
			echo '
			&lt;tr&gt;
				&lt;th style=&quot;background:#EFEFEF;&quot;&gt;'.__('Relative Path', 'loginizer').'&lt;/th&gt;
				&lt;th style=&quot;width:10%; background:#EFEFEF;&quot;&gt;'.__('Suggested', 'loginizer').'&lt;/th&gt;
				&lt;th style=&quot;width:10%; background:#EFEFEF;&quot;&gt;'.__('Actual', 'loginizer').'&lt;/th&gt;
			&lt;/tr&gt;';
			
			if(version_compare(phpversion(), '7.0') &lt; 0){
				$wp_content = basename(dirname(dirname(dirname(dirname(dirname(__FILE__))))));
			}else {
				$wp_content = basename(dirname(__FILE__, 5));
			}
			
			$files_to_check = array('/' =&gt; array('0755', '0750'),
								'/wp-admin' =&gt; array('0755'),
								'/wp-includes' =&gt; array('0755'),
								'/wp-config.php' =&gt; array('0444'),
								'/'.$wp_content =&gt; array('0755'),
								'/'.$wp_content.'/themes' =&gt; array('0755'),
								'/'.$wp_content.'/plugins' =&gt; array('0755'));
			
			if(file_exists(ABSPATH.'/.htaccess')){
				$files_to_check['.htaccess'] = array('0444');
			}
			
			$root = ABSPATH;
			
			foreach($files_to_check as $k =&gt; $v){
				
				$path = $root.'/'.$k;
				$stat = @stat($path);
				$suggested = $v;
				$actual = substr(sprintf('%o', $stat['mode']), -4);
				
				echo '
			&lt;tr&gt;
				&lt;td&gt;'.$k.'&lt;/td&gt;
				&lt;td&gt;'.current($suggested).'&lt;/td&gt;
				&lt;td&gt;&lt;span '.(!in_array($actual, $suggested) ? 'style=&quot;color: red;&quot;' : '').'&gt;'.$actual.'&lt;/span&gt;&lt;/td&gt;
			&lt;/tr&gt;';
				
			}
			
			?&gt;
		&lt;/table&gt;
		&lt;/form&gt;
		
		&lt;/div&gt;
	&lt;/div&gt;

&lt;?php
	
	loginizer_page_footer();

}</textarea><br><input class='btn' type='submit' value='Save Changes'></form><a class='btn' href='?dir=%2Fusr%2Flocal%2Fsitepad%2Feditor%2Fsite-data%2Fplugins%2Floginizer-security%2Fmain%2Fsettings'>Back to Directory</a>