JezK

Edit File: two-fa-frontend-functions.php

<?php
defined( 'ABSPATH' ) or die();

/**
 * Front-end safe security helpers.
 *
 * These checks are shared between admin settings and login-page flows, so they
 * must not depend on admin-only bootstrap.
 */

if ( ! function_exists( 'rsssl_rest_api_accessible_for_logged_out_users' ) ) {
	/**
	 * Check if the REST API is accessible for logged-out users.
	 *
	 * Makes an actual HTTP request to the REST API to verify accessibility.
	 * Returns true only if the request succeeds with a 200 status code.
	 * Any other status or network error is considered inaccessible.
	 *
	 * Uses a short option-backed cache to avoid generating a loopback request to
	 * /wp-json/ on every settings request.
	 * When live checks are disabled, an unknown result is treated as accessible
	 * so display-only callers do not block while configuration is being built.
	 *
	 * @param bool $perform_check Whether to perform a live check when no result is cached.
	 */
	function rsssl_rest_api_accessible_for_logged_out_users( bool $perform_check = true ): bool {
		if ( defined( 'RSSSL_SKIP_REST_API_ACCESSIBLE_CHECK' ) && RSSSL_SKIP_REST_API_ACCESSIBLE_CHECK ) {
			return true;
		}

$is_accessible_for_request = rsssl_rest_api_accessible_runtime_cache();
		if ( $is_accessible_for_request !== null ) {
			return $is_accessible_for_request;
		}

$cache_key = rsssl_rest_api_accessible_cache_key();
		$cached    = get_option( $cache_key, false );
		if ( is_array( $cached ) && array_key_exists( 'accessible', $cached ) ) {
			$expires = isset( $cached['expires'] ) ? (int) $cached['expires'] : 0;
			if ( $expires > time() ) {
				$is_accessible_for_request = (bool) $cached['accessible'];
				rsssl_rest_api_accessible_runtime_cache( $is_accessible_for_request );
				return $is_accessible_for_request;
			}

delete_option( $cache_key );
		}

if ( ! $perform_check ) {
			return true;
		}

// sslverify disabled: loopback requests to the site itself often fail SSL
		// verification due to server configuration issues even when browsers work.
		$response = wp_remote_get(
			rest_url(),
			[
				'limit_response_size' => 1,
				'redirection'          => 1,
				'sslverify'            => false,
				'timeout'              => 5,
			]
		);

$is_accessible_for_request = ! is_wp_error( $response )
			&& wp_remote_retrieve_response_code( $response ) === 200;
		rsssl_rest_api_accessible_runtime_cache( $is_accessible_for_request );

update_option(
			$cache_key,
			[
				'accessible' => $is_accessible_for_request,
				'expires'    => time() + ( 5 * MINUTE_IN_SECONDS ),
			],
			false
		);

return $is_accessible_for_request;
	}
}

if ( ! function_exists( 'rsssl_rest_api_accessible_runtime_cache' ) ) {
	/**
	 * Get, set, or clear the in-request REST API accessibility cache.
	 *
	 * @param bool|null $value
	 * @param bool      $clear
	 *
	 * @return bool|null
	 */
	function rsssl_rest_api_accessible_runtime_cache( ?bool $value = null, bool $clear = false ): ?bool {
		static $is_accessible_for_request = null;

if ( $clear ) {
			$is_accessible_for_request = null;
			return null;
		}

if ( $value !== null ) {
			$is_accessible_for_request = $value;
		}

return $is_accessible_for_request;
	}
}

if ( ! function_exists( 'rsssl_rest_api_accessible_cache_key' ) ) {
	/**
	 * Return the option key for the REST API accessibility probe.
	 */
	function rsssl_rest_api_accessible_cache_key(): string {
		return 'rsssl_rest_api_access_' . md5( rest_url() );
	}
}

if ( ! function_exists( 'rsssl_clear_rest_api_accessible_cache' ) ) {
	/**
	 * Clear the cached REST API accessibility probe.
	 */
	function rsssl_clear_rest_api_accessible_cache(): void {
		rsssl_rest_api_accessible_runtime_cache( null, true );
		delete_option( rsssl_rest_api_accessible_cache_key() );
	}
}

if ( ! function_exists( 'rsssl_get_login_protection_enable_block_reason' ) ) {
	/**
	 * Return the blocker message when two-factor authentication cannot be enabled.
	 *
	 * @param bool $rest_api_check Whether to perform a live REST API check when no result is cached.
	 */
	function rsssl_get_login_protection_enable_block_reason( bool $rest_api_check = true ): string {
		if ( ! rsssl_rest_api_accessible_for_logged_out_users( $rest_api_check ) ) {
			return __( "Two-Factor Authentication requires the REST API to be accessible for logged-out users. Please ensure the REST API is not blocked.", "really-simple-ssl" );
		}

return '';
	}
}

Paket Wisata Karimunjawa Terlengkap & Harga Terbaik 2026 https://validator.w3.org/feed/docs/rss2.html Promo Paket Wisata Karimunjawa Info Harga dan Paket Liburan ke Karimunjawa Pulau Karimun Jawa Paket Mancing Karimunjawa Paket Trip Karimunjawa Pelabuhan Karimunjawa Kuliner Khas Karimunjawa Pantai Bobby Karimunjawa Whales: Giants of the Ocean Whales: Giants of the Ocean Taka Sendok Karimunjawa Contact US Informasi Perjalanan Paket Travel Wisata Karimunjawa Rental Mobil Karimunjawa Paket Open Trip Karimunjawa Paket Snorkeling Karimunjawa Sama Sama Homestay Karimunjawa Paket Tour Karimunjawa Jepara Informasi Biaya Liburan ke Karimunjawa Paket Wisata Karimunjawa 4 Hari 3 Malam Oleh Oleh Khas Karimunjawa Promo Open Trip Karimun Jawa Tentang Kami Sunset Karimunjawa Tiket Kapal Karimunjawa Informasi Reservasi Hotel Resort Java Paradise Karimunjawa Taman Nasional Karimunjawa Informasi Harga Paket Wisata Karimunjawa Murah Informasi Jadwal Kapal Pelni Semarang ke Karimunjawa Informasi Jadwal Kapal Karimunjawa Ferry Siginjai Paket Wisata Karimunjawa Rombongan Tiket Kapal Rincian Biaya Wisata Karimunjawa Paket Wisata Karimunjawa 2 Hari 1 Malam Booking Informasi Jadwal Kapal Express Karimunjawa Paket Diving Karimunjawa Informasi Harga Paket Wisata Karimunjawa 3 Hari 2 Malam Harga Paket Travel Karimunjawa Private Trip Karimunjawa Paket Wisata Karimunjawa dari Solo Paket Homestay RGJS Karimunjawa Cara ke Karimunjawa Pantai Sunset Beach Karimunjawa Sitemap Paket Regular Karimunjawa 3 Hari 2 Malam Cuaca Karimun Jawa Karimunjawa Dimana Narayana Resort Karimunjawa Pantai Laendra Karimunjawa