ssl_enabled_networkwide;
$options = array_map(array($this, "sanitize_boolean"), $_POST["rlrsssl_network_options"]);
$options["selected_networkwide_or_per_site"] = true;
$this->ssl_enabled_networkwide = isset($options["ssl_enabled_networkwide"]) ? $options["ssl_enabled_networkwide"] : false;
$this->wp_redirect = isset($options["wp_redirect"]) ? $options["wp_redirect"] : false;
$this->htaccess_redirect = isset($options["htaccess_redirect"]) ? $options["htaccess_redirect"] : false;
$this->do_not_edit_htaccess = isset($options["do_not_edit_htaccess"]) ? $options["do_not_edit_htaccess"] : false;
$this->autoreplace_mixed_content = isset($options["autoreplace_mixed_content"]) ? $options["autoreplace_mixed_content"] : false;
$this->javascript_redirect = isset($options["javascript_redirect"]) ? $options["javascript_redirect"] : false;
$this->hsts = isset($options["hsts"]) ? $options["hsts"] : false;
$this->mixed_content_admin = isset($options["mixed_content_admin"]) ? $options["mixed_content_admin"] : false;
$this->cert_expiration_warning = isset($options["cert_expiration_warning"]) ? $options["cert_expiration_warning"] : false;
$this->hide_menu_for_subsites = isset($options["hide_menu_for_subsites"]) ? $options["hide_menu_for_subsites"] : false;
$this->selected_networkwide_or_per_site = isset($options["selected_networkwide_or_per_site"]) ? $options["selected_networkwide_or_per_site"] : false;
$this->save_options();
if ($this->ssl_enabled_networkwide && !$prev_ssl_enabled_networkwide) {
//reset
$this->start_ssl_activation();
//enable SSL on all sites on the network
}
if (!$this->ssl_enabled_networkwide && $prev_ssl_enabled_networkwide ) {
//if we switch to per page, we deactivate SSL on all pages first, but only if the setting was changed.
$this->start_ssl_deactivation();
}
}
// At last we redirect back to our options page.
wp_redirect(add_query_arg(array('page' => "really-simple-ssl", 'updated' => 'true'), network_admin_url('settings.php')));
exit;
}
public function sanitize_boolean($value)
{
if ($value == true) {
return true;
} else {
return false;
}
}
/**
* Give the user an option to activate networkwide or not.
* Needs to be called after detect_configuration function
*
* @since 2.3
*
* @access public
*
*/
public function show_notice_activate_networkwide()
{
//prevent showing the review on edit screen, as gutenberg removes the class which makes it editable.
$screen = get_current_screen();
if ( $screen->base === 'post' ) return;
if (is_network_admin() && RSSSL()->really_simple_ssl->wpconfig_ok()) {
$class = "updated notice activate-ssl really-simple-plugins";
$title = __("Setup", "really-simple-ssl");
$content = '
' . __("Some things can't be done automatically. Before you migrate, please check for: ", "really-simple-ssl") . '
';
$content .= '
'. __("Http references in your .css and .js files: change any http:// into https://", "really-simple-ssl") .'
'. __("Images, stylesheets or scripts from a domain without an SSL certificate: remove them or move to your own server.", "really-simple-ssl") .'
';
$content .= __('You can also let the automatic scan of the pro version handle this for you, and get premium support and increased security with HSTS included.', 'really-simple-ssl') . " "
. '' . __("Check out Really Simple SSL Premium", "really-simple-ssl") . '' . " ";
$footer = '';
$content .= __("Networkwide activation does not check if a site has an SSL certificate. It just migrates all sites to SSL.", "really-simple-ssl");
echo RSSSL()->really_simple_ssl->notice_html($class, $title, $content, $footer);
}
}
/**
* @since 2.3
* Shows option to buy pro
*/
public function show_pro()
{
?>
plugin_network_wide_active()) return;
if (isset($_POST['rsssl_do_activate_ssl_networkwide'])) {
$this->selected_networkwide_or_per_site = true;
$this->ssl_enabled_networkwide = true;
$this->wp_redirect = true;
$this->save_options();
//enable SSL on all sites on the network
$this->start_ssl_activation();
}
if (isset($_POST['rsssl_do_activate_ssl_per_site'])) {
$this->selected_networkwide_or_per_site = true;
$this->ssl_enabled_networkwide = false;
$this->save_options();
}
if (isset($_POST['rsssl_do_activate_ssl_networkwide']) || isset($_POST['rsssl_do_activate_ssl_per_site']) ) {
$url = add_query_arg( array(
"page" => "really-simple-ssl",
), network_admin_url( "settings.php" ) );
wp_safe_redirect( $url );
exit;
}
}
public function save_options()
{
if ( ! current_user_can( 'manage_options' ) ) return;
$options = get_site_option("rlrsssl_network_options");
if (!is_array($options)) $options = array();
$options["selected_networkwide_or_per_site"] = $this->selected_networkwide_or_per_site;
$options["ssl_enabled_networkwide"] = $this->ssl_enabled_networkwide;
$options["wp_redirect"] = $this->wp_redirect;
$options["htaccess_redirect"] = $this->htaccess_redirect;
$options["do_not_edit_htaccess"] = $this->do_not_edit_htaccess;
$options["autoreplace_mixed_content"] = $this->autoreplace_mixed_content;
$options["javascript_redirect"] = $this->javascript_redirect;
$options["hsts"] = $this->hsts;
$options["mixed_content_admin"] = $this->mixed_content_admin;
$options["cert_expiration_warning"] = $this->cert_expiration_warning;
$options["hide_menu_for_subsites"] = $this->hide_menu_for_subsites;
update_site_option("rlrsssl_network_options", $options);
}
public function ssl_process_active(){
if (get_site_option('rsssl_ssl_activation_active')){
return true;
}
if ( get_site_option('rsssl_ssl_deactivation_active')){
return true;
}
return false;
}
public function run_ssl_process(){
// if (!get_site_option('rsssl_run')) return;
if (get_site_option('rsssl_ssl_activation_active')){
$this->activate_ssl_networkwide();
}
if (get_site_option('rsssl_ssl_deactivation_active')){
//$this->deactivate_ssl_networkwide();
$this->end_ssl_deactivation();
}
update_site_option('rsssl_run', false);
}
public function get_process_completed_percentage(){
$complete_count = get_site_option('rsssl_siteprocessing_progress');
$percentage = round(($complete_count/$this->get_total_blog_count())*100,0);
if ($percentage > 99) $percentage = 100;
return intval($percentage);
}
public function start_ssl_activation(){
update_site_option('rsssl_siteprocessing_progress', 0);
update_site_option('rsssl_ssl_activation_active', true);
}
public function end_ssl_activation(){
update_site_option('rsssl_ssl_activation_active', false);
update_site_option('run_ssl_process_hook_switched', false);
}
public function start_ssl_deactivation(){
update_site_option('rsssl_siteprocessing_progress', 0);
update_site_option('rsssl_ssl_deactivation_active', true);
}
public function end_ssl_deactivation(){
update_site_option('rsssl_ssl_deactivation_active', false);
update_site_option('run_ssl_process_hook_switched', false);
}
public function deactivate_ssl_networkwide(){
//run chunked
$nr_of_sites = 200;
$current_offset = get_site_option('rsssl_siteprocessing_progress');
//set batch of sites
$sites = $this->get_sites_bw_compatible($current_offset, $nr_of_sites);
//if no sites are found, we assume we're done.
if (count($sites)==0) {
$this->end_ssl_deactivation();
} else {
foreach ($sites as $site) {
$this->switch_to_blog_bw_compatible($site);
RSSSL()->really_simple_ssl->deactivate_ssl();
restore_current_blog(); //switches back to previous blog, not current, so we have to do it each loop
update_site_option('rsssl_siteprocessing_progress', $current_offset+$nr_of_sites);
}
}
}
/**
* Activate SSL network wide
*/
public function activate_ssl_networkwide()
{
//run chunked
$nr_of_sites = 200;
$current_offset = get_site_option('rsssl_siteprocessing_progress');
//set batch of sites
$sites = $this->get_sites_bw_compatible($current_offset, $nr_of_sites);
//if no sites are found, we assume we're done.
if (count($sites)==0) {
$this->end_ssl_activation();
} else {
foreach ($sites as $site) {
$this->switch_to_blog_bw_compatible($site);
RSSSL()->really_simple_ssl->activate_ssl();
restore_current_blog(); //switches back to previous blog, not current, so we have to do it each loop
update_site_option('rsssl_siteprocessing_progress', $current_offset+$nr_of_sites);
}
}
}
//change deprecated function depending on version.
/**
* Offset is used to chunk the site loops.
* But offset is not used in the pre 4.6 function.
*
*
* */
public function get_sites_bw_compatible($offset=0, $nr_of_sites=100)
{
global $wp_version;
$args = array(
'number' => $nr_of_sites,
'offset' => $offset,
);
$sites = ($wp_version >= 4.6) ? get_sites($args) : wp_get_sites();
return $sites;
}
/**
The new get_sites function returns an object.
*/
public function switch_to_blog_bw_compatible($site)
{
global $wp_version;
if ($wp_version >= 4.6) {
switch_to_blog($site->blog_id);
} else {
switch_to_blog($site['blog_id']);
}
}
public function deactivate()
{
$options = get_site_option("rlrsssl_network_options");
$options["selected_networkwide_or_per_site"] = false;
$options["wp_redirect"] = false;
$options["htaccess_redirect"] = false;
$options["do_not_edit_htaccess"] = false;
$options["autoreplace_mixed_content"] = false;
$options["javascript_redirect"] = false;
$options["hsts"] = false;
$options["mixed_content_admin"] = false;
$options["cert_expiration_warning"] = false;
$options["hide_menu_for_subsites"] = false;
unset($options["ssl_enabled_networkwide"]);
update_site_option("rlrsssl_network_options", $options);
//because the deactivation should be a one click procedure, chunking this would cause dificulties
$sites = $this->get_sites_bw_compatible(0, $this->get_total_blog_count());
foreach ($sites as $site) {
$this->switch_to_blog_bw_compatible($site);
RSSSL()->really_simple_ssl->deactivate_ssl();
restore_current_blog(); //switches back to previous blog, not current, so we have to do it each loop
}
}
/**
* filters the get_admin_url function to correct the false https urls wordpress returns for non SSL websites.
*
* @since 2.3.10
*
*/
public function check_admin_protocol($url, $path, $blog_id)
{
if (!$blog_id) $blog_id = get_current_blog_id();
//if the force_ssl_admin is defined, the admin_url should not be forced back to http: all admin panels should be https.
if (defined('FORCE_SSL_ADMIN')) return $url;
//do not force to http if the request is made for an url of the current blog.
//if a site is loaded over https, it should return https links, unless the url is requested for another blog.
//In that case, we only return a https link if the site_url is https, and http otherwise.
if (get_current_blog_id() == $blog_id) return $url;
//now check if the blog is http or https, and change the url accordingly
if (!$this->ssl_enabled_networkwide) {
$home_url = get_blog_option($blog_id, 'home');
if (strpos($home_url, "https://") === false) {
$url = str_replace("https://", "http://", $url);
}
}
return $url;
}
/**
* filters the home_url and/or site_url function to correct the false https urls wordpress returns for non SSL websites.
*
* @since 2.3.17
*
*/
public function check_site_protocol($url, $path, $orig_scheme, $blog_id)
{
if (!$blog_id) $blog_id = get_current_blog_id();
if (get_current_blog_id() == $blog_id) return $url;
if (!$this->ssl_enabled_networkwide) {
$home_url = get_blog_option($blog_id, 'home');
if (strpos($home_url, "https://") === false) {
$url = str_replace("https://", "http://", $url);
}
}
return $url;
}
/**
* Checks if we are on a subfolder install. (domain.com/site1 )
*
* @since 2.2
*
* @access public
*
**/
public function is_multisite_subfolder_install()
{
if (!is_multisite()) return FALSE;
//we check this manually, as the SUBDOMAIN_INSTALL constant of wordpress might return false for domain mapping configs
$is_subfolder = FALSE;
$sites = $this->get_sites_bw_compatible(0, 10);
foreach ($sites as $site) {
$this->switch_to_blog_bw_compatible($site);
if ($this->is_subfolder(home_url())) {
$is_subfolder = TRUE;
}
restore_current_blog(); //switches back to previous blog, not current, so we have to do it each loop
if ($is_subfolder) return true;
}
return $is_subfolder;
}
/**
* Test if a domain has a subfolder structure
*
* @since 2.2
*
* @param string $domain
*
* @access private
*
* @return bool
*/
public function is_subfolder($domain)
{
//remove slashes of the http(s)
$domain = preg_replace("/(http:\/\/|https:\/\/)/", "", $domain);
if (strpos($domain, "/") !== FALSE) {
return true;
}
return false;
}
public function is_per_site_activated_multisite_subfolder_install()
{
if (is_multisite() && $this->is_multisite_subfolder_install() && !$this->ssl_enabled_networkwide) {
return true;
}
return false;
}
/**
*
* Sometimes conversion of websites hangs on 0%. If user clicks the link, the hook where run_ssl_process (multisite-cron.php)
* fires on will be switched to admin_init
*
*/
public function listen_for_ssl_conversion_hook_switch()
{
//check if we are on ssl settings page
if (!$this->is_settings_page()) return;
//check user role
if (!current_user_can('manage_options')) return;
//check nonce
if (!isset($_GET['token']) || (!wp_verify_nonce($_GET['token'], 'run_ssl_to_admin_init'))) return;
//check for action
if (isset($_GET["action"]) && $_GET["action"] == 'ssl_conversion_hook_switch') {
update_site_option('run_ssl_process_hook_switched', true);
}
}
/**
* Show notices
*
* @since 2.0
*
* @access public
*
*/
public function show_notices()
{
//prevent showing the review on edit screen, as gutenberg removes the class which makes it editable.
$screen = get_current_screen();
if ( $screen->base === 'post' ) return;
if ( !$this->is_settings_page() ) {
$notices = RSSSL()->really_simple_ssl->get_notices_list( array('admin_notices'=>true) );
foreach ( $notices as $id => $notice ){
$notice = $notice['output'];
$class = ( $notice['status'] !== 'completed' ) ? 'error' : 'updated';
echo RSSSL()->really_simple_ssl->notice_html( $class.' '.$id, $notice['title'], $notice['msg'] );
}
}
/**
* ssl switch for sites processing active
*/
if ($this->ssl_process_active()) {
$class = "notice is-dismissible rlrsssl-fail";
$title = "Website conversion";
//In some cases the rsssl_ssl_process_hook hook can fail. Therefore we offer the option to switch the hook to admin_init when the conversion is stuck.
$token = wp_create_nonce('run_ssl_to_admin_init');
$run_ssl_process_hook_switch_link = network_admin_url("settings.php?page=really-simple-ssl&action=ssl_conversion_hook_switch&token=" . $token);
$link_open = '';
$link_close = '';
$completed = $this->get_process_completed_percentage();
if ($completed < 100){
$class.=" error ";
$content = sprintf(__("Conversion of websites %s percent complete.", "really-simple-ssl"), $completed) . " ";
$content .= __("Site conversion in progress. Please refresh this page to check if the process has finished. It will proceed in the background.", "really-simple-ssl") . " ";
$content .= sprintf(__("If the conversion does not proceed after a few minutes, click %shere%s to force the conversion process.", "really-simple-ssl"), $link_open, $link_close);
} else {
$class.=" updated ";
$activation_active = get_site_option('rsssl_ssl_activation_active');
$content = __("Conversion of websites completed.", "really-simple-ssl") . " ";
if ($activation_active) {
$content .= __("Really Simple SSL has converted all your websites to SSL.", "really-simple-ssl");
} else {
$content .= __("Really Simple SSL has converted all your websites to non SSL.", "really-simple-ssl");
}
}
echo RSSSL()->really_simple_ssl->notice_html($class, $title, $content);
}
}
/**
* Insert some ajax script to dismiss the SSL success message, and stop nagging about it
*
* @since 2.0
*
* @access public
*
*/
public function insert_dismiss_success()
{
if ($this->selected_networkwide_or_per_site && !get_site_option("rsssl_success_message_shown")) {
$ajax_nonce = wp_create_nonce("really-simple-ssl-dismiss");
?>
selected_networkwide_or_per_site && !get_site_option("rsssl_success_message_shown")) {
$ajax_nonce = wp_create_nonce("really-simple-ssl-dismiss");
?>
__get('id'));
$blog_count = get_blog_count($network_id);
$total_blog_count += $blog_count;
}
return $total_blog_count;
}
} //class closure
}
