<?php
#  ________         ____________      _____ ________                       ________      
#  ___  __ )____  _____  /___  /_____ __  /____  __ \______________ ______ ___  __/      
#  __  __  |_  / / /__  / __  / _  _ \_  __/__  /_/ /__  ___/_  __ \_  __ \__  /_        
#  _  /_/ / / /_/ / _  /  _  /  /  __// /_  _  ____/ _  /    / /_/ // /_/ /_  __/        
#  /_____/  \__,_/  /_/   /_/   \___/ \__/  /_/      /_/     \____/ \____/ /_/           
#  ________                             _____ _____              ________                
#  __  ___/_____ ___________  _____________(_)__  /______  __    ___  __ \______________ 
#  _____ \ _  _ \_  ___/_  / / /__  ___/__  / _  __/__  / / /    __  /_/ /__  ___/_  __ \
#  ____/ / /  __// /__  / /_/ / _  /    _  /  / /_  _  /_/ /     _  ____/ _  /    / /_/ /
#  /____/  \___/ \___/  \__,_/  /_/     /_/   \__/  _\__, /      /_/      /_/     \____/ 
#                                                   /____/                               
# 42756C6C657450726F6F66 5365637572697479 50726F 
#
/*	The Copyright, AITpro Software Products License Information must remain
	intact or all BulletProof Security Pro warranties, guarantees, liabilities are void.
	
	Copyright (C) Edward Alexander, AIT-pro.com. All rights reserved.

	AITpro Software Products License Information:
	BY DOWNLOADING, INSTALLING, COPYING, ACCESSING, OR USING BulletProof Security Pro YOU AGREE TO THE TERMS OF THIS AGREEMENT. 
	IF YOU 	ARE ACCEPTING THESE TERMS ON BEHALF OF ANOTHER PERSON OR A COMPANY OR OTHER LEGAL ENTITY, YOU REPRESENT AND WARRANT
	THAT YOU HAVE FULL AUTHORITY TO BIND THAT PERSON, COMPANY, OR LEGAL ENTITY TO THESE TERMS. IF YOU DO NOT AGREE TO THESE TERMS,
	* DO NOT DOWNLOAD, INSTALL, COPY, ACCESS, OR USE BulletProof Security Pro; AND
	* PROMPTLY RETURN BulletProof Security Pro TO THE PARTY FROM WHOM YOU ACQUIRED IT. IF YOU DOWNLOADED BulletProof Security Pro
	FROM THE AITPRO WEBSITE, CONTACT AITPRO FOR A REFUND IF APPLICABLE.
	
	AITpro Software Products License Information continued:
	You agree to keep the AITpro Software Products License for BulletProof Security Pro, unmodified or altered in any way,
	with the original copy of BulletProof Security Pro that you have and any and all copies or partial copies of BulletProof
	Security Pro that You make. 
*/
// Direct calls to this file are Forbidden when core files are not present 
if ( ! current_user_can('manage_options') ) { 
		header('Status: 403 Forbidden');
		header('HTTP/1.1 403 Forbidden');
		exit();
}
	
	$bps_general_help_info = '<strong>'.__('General Help Info', 'bulletproof-security').'</strong><br>'.__('The Setup Wizard automatically sets up and activates all BulletProof Modes and all other BPS settings with default settings. The Setup Wizard can be re-run at any time. If you change any BPS default settings, your custom settings will not be changed/reset by re-running the Setup Wizard. The manual Security Modes option settings are for doing things like changing default settings, adding custom htaccess code to BPS Custom Code, testing and troubleshooting by deactivating (turning Off) BulletProof Modes.', 'bulletproof-security').'<br><br>';

	/**	Root Folder BulletProof Mode & Other Help Info **/
	$bps_rbm_content = '<strong>'.__('Activate|Deactivate Root Folder BulletProof Mode (RBM)', 'bulletproof-security').'</strong><br>'.__('Clicking the Activate button turns On Root Folder BulletProof Mode (RBM) by creating a BPS htaccess file in your WordPress root installation folder (same folder as the wp-config.php file). Clicking the Deactivate button turns Off Root Folder BulletProof Mode (RBM) by creating a generic/default WordPress htaccess file in your WordPress root installation folder. Deactivating Root Folder BulletProof Mode (RBM) is used for testing and troubleshooting. Click the BPS Pro Troubleshooting Steps link at the top of this Read Me help file for BPS Pro troubleshooting steps.', 'bulletproof-security').'<br><br><strong>'.__('Notes:', 'bulletproof-security').'</strong><br><strong>'.__('Viewing, Editing, Modifying, Creating, Saving and Testing htaccess Code/Files', 'bulletproof-security').'</strong><br>'.__('To check, view or edit BPS htaccess files/code manually/directly for testing you can use the htaccess File Editor. Click the htaccess File Editor Read Me help button for more detailed help information. To save htaccess code permanently use BPS Custom Code. Click the Custom Code Read Me help button for more detailed help information.', 'bulletproof-security').'<br><br>'.__('BPS Pro is a very advanced plugin that has built-in troubleshooting capability - all features/options can be turned Off/On independently for troubleshooting. Deactivating/activating or uninstalling/reinstalling the BPS Pro plugin is not the correct way to troubleshoot issues or problems. See the BPS Pro Troubleshooting Steps link at the top of this Read Me help file.', 'bulletproof-security').'<br><br>'.__('The BPS Security Log logs all 403 errors and anything that BPS is blocking - hackers, spammers or something legitimate in another plugin or theme. If you think BPS is blocking something legitimate in another plugin or theme click the BPS Pro Troubleshooting Steps link at the top of this Read Me help file.', 'bulletproof-security').'<br><br>'.__('If you activate BulletProof Mode for your Root folder you should also activate BulletProof Mode for your wp-admin folder. On some Hosts that is required and on other Hosts that is not required for everything to work correctly.', 'bulletproof-security').'<br><br>'.__('The current status of BulletProof Modes is displayed in-page.  The BPS Pro Dashboard Status Display also shows the current status of RBM, WBM, PFW and UAEG.', 'bulletproof-security').'<br><br><strong>'.__('WordPress Network (Multisite) Sites Info','bulletproof-security').'</strong><br>'.__('BPS will automatically detect whether you have a subdomain or subdirectory Network (Multisite) installation and create the correct htaccess code for your website type. The BPS Pro plugin can be Network Activated or you can allow the BPS Pro plugin to be activated individually on each Network/Multisite subsite or of course you can choose not to Network Activate BPS Pro or allow the BPS Pro plugin on subsites. Super Admins will see BPS Pro Dashboard Alerts and other Status displays on the Primary Site only. Administrators can activate or deactivate BPS Pro on subsites, if you allow this on your Network/Multisite.', 'bulletproof-security').'<br><br><strong>'.__('BPS Pro Video Tutorial links can be found in the Help & FAQ pages.','bulletproof-security').'</strong>'; 
	
	/**	wp-admin Folder BulletProof Mode **/
	$bps_wbm_content = '<strong>'.__('Activate|Deactivate wp-admin Folder BulletProof Mode (WBM)', 'bulletproof-security').'</strong><br>'.__('Clicking the Activate button turns On wp-admin Folder BulletProof Mode (WBM) by creating a BPS htaccess file in your WordPress wp-admin folder. Clicking the Deactivate button turns Off wp-admin Folder BulletProof Mode (WBM) by deleting the BPS htaccess file in your WordPress wp-admin folder. Deactivating wp-admin Folder BulletProof Mode (WBM) is used for testing and troubleshooting. Click the BPS Pro Troubleshooting Steps link at the top of this Read Me help file for BPS Pro troubleshooting steps.', 'bulletproof-security').'<br><br><strong>'.__('Notes: ', 'bulletproof-security').'</strong><br><strong>'.__('Viewing, Editing, Modifying, Creating, Saving and Testing htaccess Code/Files', 'bulletproof-security').'</strong><br>'.__('To check, view or edit BPS htaccess files/code manually/directly for testing you can use the htaccess File Editor. Click the htaccess File Editor Read Me help button for more detailed help information. To save htaccess code permanently use BPS Custom Code. Click the Custom Code Read Me help button for more detailed help information.', 'bulletproof-security').'<br><br>'.__('BPS Pro is a very advanced plugin that has built-in troubleshooting capability - all features/options can be turned Off/On independently for troubleshooting. Deactivating/activating or uninstalling/reinstalling the BPS Pro plugin is not the correct way to troubleshoot issues or problems. See the BPS Pro Troubleshooting Steps link at the top of this Read Me help file.', 'bulletproof-security').'<br><br>'.__('The BPS Security Log logs all 403 errors and anything that BPS is blocking - hackers, spammers or something legitimate in another plugin or theme. If you think BPS is blocking something legitimate in another plugin or theme click the BPS Pro Troubleshooting Steps link at the top of this Read Me help file.', 'bulletproof-security').'<br><br>'.__('If you activate BulletProof Mode for your Root folder you should also activate BulletProof Mode for your wp-admin folder. On some Hosts that is required and on other Hosts that is not required for everything to work correctly.', 'bulletproof-security').'<br><br>'.__('The current status of BulletProof Modes is displayed in-page.  The BPS Pro Dashboard Status Display also shows the current status of RBM, WBM, PFW and UAEG.', 'bulletproof-security').'<br><br><strong>'.__('BPS Pro Video Tutorial links can be found in the Help & FAQ pages.','bulletproof-security').'</strong>'; 

	/** Plugin Firewall BulletProof Mode **/
	$bps_pfw_content = '<strong>'.__('Plugin Firewall Setup using the Setup Wizard', 'bulletproof-security').'</strong><br><strong>'.__('1. ', 'bulletproof-security').'</strong>'.__('Run the Pre-installation Wizard & Setup Wizard.', 'bulletproof-security').'<br><strong>'.__('Note: Plugin Firewall AutoPilot Mode is turned On by default when running the Setup Wizard (unless you have turned AutoPilot Mode Off) and the AutoPilot Cron check is set to 15 minutes.', 'bulletproof-security').'</strong><br><br><strong>'.__('Plugin Firewall Manual Setup Steps', 'bulletproof-security').'</strong><br><strong>'.__('1. ', 'bulletproof-security').'</strong>'.__('Copy and paste plugin scripts/whitelist rules to the Plugins Script|File Whitelist Text Area.', 'bulletproof-security').'<br><strong>'.__('2. ', 'bulletproof-security').'</strong>'.__('Click the Save Whitelist Options button.', 'bulletproof-security').'<br><strong>'.__('3. ', 'bulletproof-security').'</strong>'.__('Turn AutoPilot Mode On.', 'bulletproof-security').'<br><strong>'.__('4. ', 'bulletproof-security').'</strong>'.__('Click the Activate button to activate the Plugin Firewall.', 'bulletproof-security').'<br><br><strong>'.__('Plugin Firewall Test Mode', 'bulletproof-security').'</strong><br>'.__('Clicking the Test Mode button will allow you to check the frontend of your website as if you are visitor to your website to check for any problems or errors. You do not need to check the backend wp-admin Dashboard of your site. AutoPilot Mode is also enabled when you are in Test Mode. Plugin Firewall AutoPilot Mode will automatically create any new Plugin Firewall whitelist rules (once every 1 minute in Test Mode) for frontloading plugin scripts on the frontend of your website while Test Mode is turned On. Clicking the Plugin Firewall Activate or Deactivate button turns Off Plugin Firewall Test Mode. The BPS Pro Dashboard Status Display will display: ', 'bulletproof-security').'<strong>'.__('PFW: ', 'bulletproof-security').'<font color="blue">'.__('Test Mode : 1 Min : 00:00 AM', 'bulletproof-security').'</font></strong>'.__(' when Test Mode is turned On. ', 'bulletproof-security').'<br><br><strong>'.__('Plugin Firewall Test Mode Example Usage: ', 'bulletproof-security').'</strong><br>'.__('If you have these example plugins installed: WooCommerce, NextGen Gallery and Contact Form 7 then you would visit/click your main WooCommerce store pages: Shop, Cart, Checkout, Registration and My Account, visit/click you NextGen Gallery page and visit/click your Contact Form 7 contact page/form. If you do see a problem or error, wait 1 minute and check the problem or error again. AutoPilot Mode/Test Mode is designed to automatically create new Plugin Firewall whitelist rules for any problems or errors that are detected when the next Plugin Firewall AutoPilot Mode Cron job runs (once every 1 minute in Test Mode). You can also check the actual functionality of plugins, but normally that should not be necessary to do. After you are done using Test Mode, you can either leave the AutoPilot Mode Cron Check Frequency setting to 1 minute or you can change the Cron Check Frequency to a different Cron check frequency setting.', 'bulletproof-security').'<br><br><strong>'.__('Plugin Firewall Whitelist Tools', 'bulletproof-security').'</strong><br><br><strong>'.__('Plugins Script|File Whitelist Text Area', 'bulletproof-security').'</strong><br>'.__('This text area is where you add any plugin scripts that need to be Whitelisted in your Plugin Firewall. Note: AutoPilot Mode creates plugin script whitelist rules automatically. When you click the Save Whitelist Data button this saves anything that you have added in this text area to your database. You can add and remove plugin scripts at any time and then click the Save Whitelist Options button to save your changes. After saving your changes you click the Activate button.', 'bulletproof-security').'<br><br><strong>'.__('Payment Providers - Payment Gateway Providers', 'bulletproof-security').'</strong><br>'.__('If you have a Shopping Cart plugin or other plugin that needs to communicate/receive payment transaction data then check the Payment Gateway Provider checkboxes (PayPal, Google Checkout, Amazon Checkout and Authorize.net) that your Shopping Cart plugin or other plugin needs to communicate with and receive transaction data from. If you want to add additional Payment Provider hostnames/domains/websites or IP addresses you can add additional Whitelist rules for additional hostnames/domains/websites and IP addresses that you want to whitelist. See the ', 'bulletproof-security').'<strong>'.__('Plugin Firewall Additional Whitelist Tools - Whitelist by Hostname (domain name) and IP Address', 'bulletproof-security').'</strong>'.__(' help section for additional details and examples.', 'bulletproof-security').'<br><br><strong>'.__('Save Whitelist Options button', 'bulletproof-security').'</strong><br>'.__('Saves plugin scripts that you have added in the Plugins Script|File Whitelist Text Area and Payment Provider options you have selected to your database. Note: AutoPilot Mode creates plugin script whitelist rules automatically. You can add and remove plugin scripts or Payment Provider options at any time and then click the Save Whitelist Options button to save your changes. After saving your changes you click the Activate button.', 'bulletproof-security').'<br><br><strong>'.__('Plugin Firewall AutoPilot Mode', 'bulletproof-security').'</strong><br>'.__('The BPS Pro Dashboard Status Display will display: ', 'bulletproof-security').'<strong>'.__('PFW: ', 'bulletproof-security').'<font color="green">'.__('AutoPilot : 00 Min : 00:00 AM', 'bulletproof-security').'</font></strong>'.__(' when AutoPilot Mode is turned On. The Cron check frequency is displayed and the next Cron check time is displayed. The Plugin Firewall AutoPilot Mode is designed to check your website in real-time for any additional or new whitelist rules that need to be created in the Plugin Firewall. If you install a new plugin and AutoPilot Mode detects that a new Plugin Firewall whitelist rule needs to be created for that plugin then a new whitelist rule will be automatically created in the Plugins Script|File Whitelist Text Area and your Plugin Firewall htaccess file. When a new Plugin Firewall whitelist rule is detected and created in your Plugin Firewall htaccess file it is logged in your BPS Pro Security Log.', 'bulletproof-security').'<br><br><strong>'.__('Example Plugin Firewall AutoPilot Mode Security Log entry:', 'bulletproof-security').'</strong><br>[Plugin Firewall AutoPilot Mode New Whitelist Rule(s) Created: November 3, 2014 - 11:32 am]<br>Whitelist Rule: /nextgen-gallery/products/photocrati_nextgen/modules/ajax/static/persist.js<br>Whitelist Rule: /nextgen-gallery/products/photocrati_nextgen/modules/ajax/static/ajax.js<br>Whitelist Rule: /cforms/js/cforms.js<br>Whitelist Rule: /nextgen-gallery/products/photocrati_nextgen/modules/lightbox/static/lightbox_context.js<br>Whitelist Rule: /nextgen-gallery/products/photocrati_nextgen/modules/ajax/static/ngg_store.js<br><br><strong>'.__('AutoPilot Mode Cron Check Frequency:', 'bulletproof-security').'</strong><br>'.__('Choose how often the AutoPilot Mode Cron Check should be performed. Every 1 minute, Every 5 Minutes, etc. The Default Cron Frequency Check is set to 15 minutes by the Setup Wizard. You can of course change this to any other Cron frequency checking time that you want to use. Running a Cron check every 15 minutes is probably the best setting to use.', 'bulletproof-security').'<br><br><strong>'.__('Turn On|Off AutoPilot Mode:', 'bulletproof-security').'</strong><br>'.__('Turn the Plugin Firewall AutoPilot Mode Cron Check On or Off. You can turn AutoPilot Mode On or Off as needed or just leave it turned On or Off.', 'bulletproof-security').'<br><br><strong>'.__('Plugin Firewall Additional Whitelist Tools', 'bulletproof-security').'</strong><br><br><strong>'.__('Whitelist by Hostname (domain name) and IP Address', 'bulletproof-security').'</strong><br>'.__('This option is for adding additional whitelist rules to whitelist additional Hostnames (domain names) or IP addresses in your Plugin Firewall .htaccess file. Example whitelist rules: example.com will whitelist the example.com hostname/domain name. 100.99.88.77 will whitelist IP address 100.99.88.77. Whitelist rules are separated by a comma and a space. Example: example.com,100.99.88.77, example-2.com. After clicking the Save Hostname and IP Address Rules button, click the Activate button to activate the Plugin Firewall again.', 'bulletproof-security').'<br><br><strong>'.__('Additional Roles IP Whitelist', 'bulletproof-security').'</strong><br>'.__('This option is for folks who have additional Administrators, Editors, Authors and Contributors who log into the website to create Posts or perform other website tasks. When you select and save additional Roles this means that any person with the Role capabilities that you have selected will have their IP addresses automatically Whitelisted when they log into the website. If your website is using/has Custom User Roles, your Custom User Roles will be displayed in a scrollable box below the standard WP User Roles: Administrator, Editor, Author, Contributor.', 'bulletproof-security').'<br><br><strong>'.__('Notes:', 'bulletproof-security').'</strong><br>'.__('If you are using a Minify plugin then you will not see any Security Log entries due to the general way that a minifying plugin works. Most if not all Minify plugins allow you to exclude plugin scripts from being minified. You will need to create exclude rules in your Minify plugin for whatever plugin scripts cannot be minified in order for them to be whitelisted successfully in the Plugin Firewall.', 'bulletproof-security').'<br><br>'.__('Plugin Firewall AutoPilot Mode automatically adds/creates Plugin Firewall whitelist rules in real-time. This is a completely automated process. You should not need to check for and add Plugin Firewall whitelist rules manually unless you have AutoPilot Mode turned Off.', 'bulletproof-security').'<br><br>'.__('The Plugin Firewall blocks external/remote access to plugin files that are located in the plugins folder. If you have a script/file outside of the plugins folder then you do not need to Whitelist it. Your Public IP Address (ISP) is whitelisted by default to allow only your IP address unrestricted access to all plugin folders and files. When your Public IP Address changes the Plugin Firewall .htaccess file will be updated automatically with your new Public IP address.', 'bulletproof-security').'<br><br>'.__('When manually creating plugin script whitelist rules, each plugin script/file path that you add MUST be separated by a comma and a space. Example: /plugin-folder-name/example-file-name.js, /example-plugin-folder-name/api/paypal-ipn-script.php, /another-example-plugin-folder-name/example-script-name.php. The path name starts with the plugin folder name (do not add /', 'bulletproof-security').$bps_wpcontent_dir.__(' in the path name). After manually adding your script/file name path to the Plugins Script|File Whitelist Text Area click the Save Whitelist Options button and click the Activate button.', 'bulletproof-security').'<br><br>'.__('Plugin Whitelisting rules use standard Regex characters. For example you could Whitelist all .js files in a particular plugins folder by creating this whitelist rule: /example-plugin-folder-name/(.*).js. The (.*) Regex characters mean match anything. The rule says match any file name in the /example-plugin-folder-name/ folder that is a .js file.', 'bulletproof-security').'<br><br>'.__('If invalid whitelist rules are detected the Plugin Firewall will be automatically deactivated/turned Off to prevent causing any problems for your website. Your saved whitelist rules will not be deleted. An error message will be displayed with an exact description of what the problem is with the whitelist rule or rules that need to be fixed/corrected. Fix/correct the invalid whitelist rule or rules and do the Plugin Firewall Manual Setup Steps.', 'bulletproof-security').'<br><br>'.__('Activating the Plugin Firewall BulletProof Mode for your Plugins folder copies and renames the plugins.htaccess file located in the /plugins/bulletproof-security/admin/htaccess/ folder to your /plugins folder and renames it to just .htaccess. To manually edit the Plugin Firewall .htaccess file go to the htaccess File Editor page and click on the Your Current Plugins htaccess File tab.', 'bulletproof-security').'<br><br>'.__('You can add additional Whitelist rules for additional Payment Providers, hostnames/domains/websites and IP addresses that you want to whitelist. See the ', 'bulletproof-security').'<strong>'.__('Plugin Firewall Additional Whitelist Tools - Whitelist by Hostname (domain name) and IP Address', 'bulletproof-security').'</strong>'.__(' help section for additional details and examples.', 'bulletproof-security').'<br><br>'.__('What does Whitelist/Whitelisting Plugin Scripts Mean? Whitelisting plugin scripts means that you are creating exceptions or exclusion rules that tell the Plugin Firewall to allow those plugin scripts to load publicly on the front end of your website so that those plugin scripts will function normally and not be blocked by the Plugin Firewall for visitors to your website.', 'bulletproof-security').'<br><br>'.__('You can check your BPS Pro Security Log to see if any plugin scripts are being blocked by the Plugin Firewall and those plugin script paths to the Plugins Script|File Whitelist Text Area. If you are using a Minify plugin then you will NOT see any plugin script errors in your Security Log file unless you have excluded those plugin scripts from being minified in your Minify plugin.', 'bulletproof-security').'<br><br><strong>'.__('Pro-Tools cURL Multi Page Scanner', 'bulletproof-security').'</strong><br>'.__('The cURL Multi Page Scanner tool is located in BPS Pro Pro-Tools. This is an older Pro-Tool that is a predecessor of AutoPilot Mode, but may be useful in certain cases. AutoPilot Mode should find and create all plugin script whitelist rules automatically. So using the cURL Multi Page Scanner Pro-Tool should not be necessary. The Multi page cURL Scan Tool scand the total number of Pages and Posts that you enter in the Limit Number Of Pages To Scan text box. The default scan is already set to scan up to 50 Pages/Posts. This scanner is designed to look for plugin scripts to add to the Plugin Firewall Whitelist. This scanner has been tested up to scanning 1500 website Pages & Posts simultaneously. ', 'bulletproof-security').'<br><br><strong>'.__('Troubleshooting The Plugins htaccess File','bulletproof-security').'</strong><br>'.__('Plugin Firewall AutoPilot Mode is designed to automatically correct most issues or problems. To check if the Plugin Firewall is causing another plugin not to work correctly or blocking a plugin script/file check your BPS Pro Security log file for 403 Errors. The script/file name and path will be listed in your Security log if it is being blocked. You can then add this plugin script/file name to the Plugins Script|File Whitelist Text Area to whitelist this plugin script/file name, click the Save Whitelist Options button and click the Activate button.', 'bulletproof-security').'<br><br>'.__('To turn Off the Plugin Firewall click the Deactivate button. Test the plugin that was having a problem and if the problem is still occurring then the Plugins Firewall BulletProof Mode is not causing the problem. Click the BPS Pro Troubleshooting Steps link at the top of this Read Me help file for additional BPS Pro troubleshooting steps.', 'bulletproof-security');	
	
	/** Uploads Anti-Exploit Guard (UAEG) BulletProof Mode **/
	$bps_uaeg_content = '<strong>'.__('Uploads Anti-Exploit Guard (UAEG) is activated automatically. If your Server type does not allow the /uploads/.htaccess file to be created automatically then use these manual controls to activate BulletProof Mode for your WordPress uploads folder.', 'bulletproof-security').'</strong><br><br><strong>'.__('Reset UAEG htaccess File:', 'bulletproof-security').'</strong><br>'.__('Clicking the Reset UAEG htaccess File button will reset your UAEG htaccess file back to the default BPS Pro UAEG htaccess file and also delete UAEG htaccess code that has been saved to BPS UAEG Custom Code. If you have made any customizations to your UAEG file either directly or in BPS UAEG Custom Code then save your UAEG htaccess code/file before clicking the Reset button. You can then add any of your saved UAEG customizations into your new default UAEG htaccess file that is created after clicking the Reset button. If UAEG is currently deactivated then the default UAEG files will be replaced, but UAEG will not be activated until you Activate UAEG BulletProof Mode again.', 'bulletproof-security').'<br><br><strong>'.__('Troubleshooting the UAEG/uploads folder htaccess file', 'bulletproof-security').'</strong><br>'.__('Check your BPS Security Log file for any security log entries showing that something is being blocked in your WordPress uploads folder. If you think the /uploads/.htaccess file may be causing a problem then click the UAEG BulletProof Mode Deactivate button. This deletes the /uploads/.htaccess file. Test whatever was not working and see if the problem is still occurring. If the problem is still occurring then UAEG is not causing the problem. Activate UAEG BulletProof Mode again by clicking the UAEG BulletProof Mode Activate button.', 'bulletproof-security').'<br><br><strong>'.__('IMPORTANT NOTE:', 'bulletproof-security').'</strong><br>'.__('If you Deactivate UAEG BulletProof Mode using this manual control then this also turns Off automatic creation of the /uploads/.htaccess file and you will need to use this manual control to activate UAEG BulletProof Mode again to turn automatic creation of the /uploads/.htaccess file back On again.', 'bulletproof-security').'<br><br><strong>'.__('General Info', 'bulletproof-security').'</strong><br>'.__('Activating UAEG BulletProof Mode for your WordPress uploads folder copies and renames the uploads.htaccess file located in the /plugins/bulletproof-security/admin/htaccess/ folder to your /uploads folder and renames it to just .htaccess.', 'bulletproof-security').'<br><br><strong>'.__('UAEG htaccess File Custom Code Steps', 'bulletproof-security').'</strong><br>'.__('1. Copy and paste your entire Uploads .htaccess file code from the "Your Current Uploads htaccess File" tab on the htaccess File Editor page into the CUSTOM CODE UAEG text box.', 'bulletproof-security').'<br>'.__('2. Edit/modify/customize your UAEG htaccess code in the CUSTOM CODE UAEG text box.', 'bulletproof-security').'<br>'.__('3. Click the Save UAEG Custom Code button to save your UAEG custom code.', 'bulletproof-security').'<br>'.__('4. Go to the Security Modes page and click the UAEG BulletProof Mode Activate button.', 'bulletproof-security').'<br><br><strong>'.__('BPS Pro Video Tutorial links can be found in the Help & FAQ pages.','bulletproof-security').'</strong>';
	
	/** Hidden Plugin Folders|Files (HPF) Cron **/
	$bps_hpf_content = '<strong>'.__('Hidden Plugin Folders|Files (HPF) Cron General Info', 'bulletproof-security').'</strong><br>'.__('A hidden or empty plugin folder is a plugin the exists in your /plugins/ folder, but is not displayed on the WordPress Plugins page. A hidden plugin can be used as a hacker backdoor to gain access to your WP Dashboard, hosting account, create user accounts, completely control your website and hosting account, etc. A non-standard WP file or modified/altered file in your /plugins/ folder can also do all of the things a hidden plugin can do.', 'bulletproof-security').'<br><br>'.__('The HPF Cron is setup automatically by running the Setup Wizard. The HPF Cron checks the WordPress /plugins/ folder for hidden or empty plugin folders and any non-standard WP files or altered files in the /plugins/ folder. This is a lightweight Cron check that uses an insignificant amount of resources/memory. So 4 checks per hour (check every 15 minutes) will not cause any significant resource/memory issues whatsoever. Even choosing Run Check Every 1 Minute would not cause any significant resource/memory issues whatsoever.', 'bulletproof-security').'<br><br><strong>'.__('What to do if a hidden plugin folder or file is detected', 'bulletproof-security').'</strong><br>'.__('If a hidden or empty plugin folder is detected or a non-standard WP file is detected then you would use FTP to check the folder or file. If the folder or file contains hacker code or is a hidden plugin or is a non-standard WP file then make a copy of it and delete it. If the plugin folder is just an empty plugin folder then delete it. If you recognize the folder or file you can use the Ignore Hidden Plugin Folders & Files textarea box option to ignore/not check this folder or file.', 'bulletproof-security').'<br><br><strong>'.__('Dashboard Alerts & Email Alerts:', 'bulletproof-security').'</strong><br>'.__('If a hidden or empty plugin folder is detected or a non-standard WP file is detected then a BPS Dashboard Alert will be displayed and Email Alert will be sent to you. ', 'bulletproof-security').'<strong><font color="blue">'.__('BPS Pro Only:', 'bulletproof-security').'</font></strong>'.__(' The HPF Email Alert setting is in S-Monitor: HPF: Hidden Plugin Folders|Files (HPF) Cron and the option settings are: Send Email Alerts or Do Not Send Email Alerts.', 'bulletproof-security').'<br><br><strong>'.__('HPF Cron Check Frequency:', 'bulletproof-security').'</strong><br>'.__('Available Cron Check Frequency Settings are: 1, 5, 10, 15, 30 or 60 minutes. The default HPF Cron Frequency is: Run Check Every 15 Minutes, which is setup automatically by running the Setup Wizard. Click the Save HPF Cron Options button to save your settings.', 'bulletproof-security').'<br><br><strong>'.__('HPF Cron On|Off:', 'bulletproof-security').'</strong><br>'.__('To turn on the HPF Cron choose HPF Cron On. To turn off the HPF Cron choose HPF Cron Off. Click the Save HPF Cron Options button to save your settings.', 'bulletproof-security').'<br><br><strong>'.__('Ignore Hidden Plugin Folders & Files:', 'bulletproof-security').'</strong><br>'.__('This option is for adding ignore rules for Hidden or Empty Plugin Folders Detected by BPS or Non-standard WP files detected by BPS in your /plugins/ folder. This is an independent option setting that does not require clicking any other buttons. Example Usage: If you intentionally have an empty plugin folder in your /plugins/ folder or you have a custom file in your /plugins/ folder then you can add the plugin folder or custom file name in the Ignore Hidden Plugin Folders & Files textarea box so that the HPF Cron check will ignore any folder or file names that you add. Add Ignore rules using plugin folder names or file names. Use a comma and a space between folder and/or file names. Example Ignore Rules: plugin-folder-name, example-file-name.php', 'bulletproof-security').'<br><br><strong>'.__('BPS Pro Video Tutorial links can be found in the Help & FAQ pages.','bulletproof-security').'</strong>';

	/** Master htaccess Folder BulletProof Mode (MBM) **/
	$bps_mbm_content = '<strong>'.__('Activate Master htaccess BulletProof Mode', 'bulletproof-security').'</strong><br>'.__('Your BPS Master htaccess folder should already be automatically protected by BPS Pro, but if it is not then activate BulletProof Mode for your BPS Master htaccess folder. Activating Master htaccess BulletProof Mode copies and renames the deny-all.htaccess file located in the /bulletproof-security/admin/htaccess/ folder and renames it to just .htaccess to protect this folder. This Deny All htaccess file blocks everyone, except for you, from accessing and viewing the BPS Master htaccess files folder.','bulletproof-security').'<br><br><strong>'.__('BPS Pro Video Tutorial links can be found in the Help & FAQ pages.','bulletproof-security').'</strong>';
	
	/** BPS Backup Folder BulletProof Mode (BBM) **/
	$bps_bbm_content = '<strong>'.__('Activate BPS Backup BulletProof Mode', 'bulletproof-security').'</strong><br>'.__('Your BPS Backup folder should already be automatically protected by BPS Pro, but if it is not then activate BulletProof Mode for your BPS Backup folder. Activating BPS Backup BulletProof Mode copies and renames the deny-all.htaccess file located in the /bulletproof-security/admin/htaccess/ folder to the BPS Backup folder /','bulletproof-security').$bps_wpcontent_dir.__('/bps-backup and renames it to just .htaccess to protect this folder. This Deny All htaccess file blocks everyone, except for you, from accessing and viewing your BPS Backup folder.','bulletproof-security').'<br><br><strong>'.__('BPS Pro Video Tutorial links can be found in the Help & FAQ pages.','bulletproof-security').'</strong>';	

	/** htaccess File Backup & Restore **/	
	$bps_backup_restore_content = __('The Backup and Restore tools can be used to quickly backup and restore the root and wp-admin htaccess files. Example usage: You are testing some code and want to save copies of your working root and wp-admin htaccess files so that you can quickly restore them. It is not necessary to create backups of the root and wp-admin htaccess files. These tools should just be used as stated above.', 'bulletproof-security').'<br><br><strong>'.__('Note:', 'bulletproof-security').'</strong><br>'.__('Typically if invalid/bad htaccess code is added in an htaccess file then most likely your site will crash. The quick and simple solution if your website crashes is to use FTP or your web host control panel file manager and delete the htaccess file that has the invalid/bad htaccess code in it so you can log back into your site and correct or delete the invalid/bad htaccess code. So using Backup & Restore will not work in a scenario where invalid/bad htaccess code has caused your website to crash.','bulletproof-security').'<br><br><strong>'.__('Tip:', 'bulletproof-security').'</strong><br>'.__('A more practical method of temporarily testing new htaccess code is to use the htaccess File Editor. Example: You add your new htaccess code using the htaccess File Editor, save it and activate BulletProof Mode instead of using these Backup & Restore options. Or you can use Custom Code. Example: You add your new htaccess code using BPS Custom Code, save it and activate BulletProof Mode.', 'bulletproof-security').'<br><br><strong>'.__('Reminder:', 'bulletproof-security').'</strong><br>'.__('Any htaccess code that you add using the htaccess File Editor is not saved permanently. To save any new htaccess code permanently use BPS Custom Code.', 'bulletproof-security').'<br><br><strong>'.__('BPS Pro Video Tutorial links can be found in the Help & FAQ pages.', 'bulletproof-security').'</strong>';
	
	/** htaccess File Editing **/
	$bps_hfe_content = '<strong>'.__('This Read Me Help window is draggable (top) and resizable (bottom right corner)', 'bulletproof-security').'</strong><br><br><strong>'.__('The File Editor is designed to open all of your htaccess files simultaneously and allow you to copy and paste from one window (file) to another window (file), BUT you can ONLY save your edits for one file at a time. Whichever file you currently have opened (the tab that you are currently viewing) when you click the Update File button is the file that will be updated/saved.', 'bulletproof-security').'</strong><br><br><strong>'.__('Important Notes:', 'bulletproof-security').'</strong><br>'.__('You can edit all of your htaccess files directly using the htaccess File Editor, but to save your edits permanently for the "Your Current Root htaccess File" tab, which is your Root htaccess file and the "Your Current wp-admin htaccess File" tab, which is your wp-admin folder htaccess file and the "Your Current Uploads htaccess File" tab, which is your uploads folder/Uploads Anti-Exploit Guard (UAEG) htaccess file, use BPS Custom Code to save your editing changes permanently.', 'bulletproof-security').'<br><br><font color="blue"><strong>'.__('default.htaccess File Exception: ', 'bulletproof-security').'</strong></font>'.__('You can create a Custom default.htaccess file that will be saved permanently by editing the default.htaccess file using the htaccess File Editor. Your Custom default.htaccess file will be saved permanently to this folder: /bps-backup/master-backups/default.htaccess. If you have created a Custom default.htaccess file then it will be automatically copied from the /bps-backup/master-backups/ folder during a BPS plugin upgrade and will replace the default BPS default.htaccess Master file.', 'bulletproof-security').'<br><br>'.__('The "Your Current Plugins htaccess File" tab is your Plugin Firewall htaccess file. The Plugin Firewall has tools on the Security Modes page where you can add/customize and permanently save any additional custom whitelist rules/code for your Plugin Firewall htaccess file.', 'bulletproof-security').'<br><br>'.__('The secure.htaccess (Root htaccess Master htaccess file), default.htaccess (Default WP Master htaccess file) and wpadmin-secure.htaccess (wp-admin folder Master htaccess file) tabs are Master htaccess files that will be replaced when you upgrade BPS. You can edit these files directly, but these files will not be saved permanently, with the exception of the default.htaccess file - See the ', 'bulletproof-security').'<font color="blue"><strong>'.__('default.htaccess File Exception', 'bulletproof-security').'</strong></font>'.__(' help information above.', 'bulletproof-security').'<br><br><strong>'.__('Encryption|Decryption ModSecurity CRS Bypass', 'bulletproof-security').'</strong><br>'.__('ModSecurity CRS is a security feature installed on some web hosts. ModSecurity CRS sees the legitimate htaccess code in the htaccess File Editor as malicious and will prevent you from saving your htaccess code edits. When trying to save your htaccess code you may see an error message or you may be redirected to your website Home page or nothing happens or other various problems. To evade/bypass ModSecurity CRS click the Encrypt htaccess Code button before clicking the Update File button. Your htaccess code is encrypted in the POST Form submission and then decrypted in the Form processing code. That means that your htaccess code is only encrypted temporarily during htaccess File Editor Form submission to bypass/evade ModSecurity CRS detection. The Decrypt htaccess Code feature was added as an additional user friendly convenience feature. It allows you to decrypt your htaccess code in real time if you already clicked the Encrypt htaccess Code button. You can then continue editing your htaccess code and then click the Encrypt htaccess Code button again when you are done editing custom code. Important!!! Do not forget to click the Encrypt htaccess Code button before clicking the Update File button.', 'bulletproof-security').'<br><br><strong>'.__('Lock|Unlock .htaccess Files', 'bulletproof-security').'</strong><br>'.__('If your Server API is using CGI then you will see Lock and Unlock buttons to lock your Root htaccess file with 404 Permissions and unlock your root htaccess file with 644 Permissions. If your Server API is using CLI - DSO/Apache/mod_php then you will not see lock and unlock buttons. 644 Permissions are required to write to/edit the root htaccess file. Once you are done editing your root htaccess file use the lock button to lock it with 404 Permissions. 644 Permissions for DSO are considered secure for DSO because of the different way that file security is handled with DSO.','bulletproof-security').'<br><br>'.__('If your Root htaccess file is locked and you try to save your editing changes you will see a pop message that your Root htaccess file is locked. You will need to unlock your Root htaccess file before you can save your changes.', 'bulletproof-security').'<br><br><strong>'.__('Turn On AutoLock|Turn Off AutoLock', 'bulletproof-security').'</strong><br>'.__('AutoLock is designed to automatically lock your root .htaccess file to save you an additional step of locking your root .htaccess file when performing certain actions, tasks or functions and AutoLock also automatically locks your root .htaccess during BPS Pro upgrades. This can be a problem for some folks whose Web Hosts do not allow locking the root .htaccess file with 404 file permissions and can cause 403 errors and/or cause a website to crash. For 99.99% of folks leaving AutoLock turned On will work fine. If your Web Host ONLY allows 644 file permissions for your root .htaccess file then click the Turn Off AutoLock button. This turns Off AutoLocking for all BPS actions, tasks, functions and also for BPS Pro upgrades.', 'bulletproof-security').'<br><br><strong>'.__('BPS Pro Video Tutorial links can be found in the Help & FAQ pages.','bulletproof-security').'</strong>';

	/** Custom Code - Network/Multisite specific **/
	if ( is_multisite() ) {
	$network_cc_help = '<br><br><strong>'.__('CUSTOM CODE WP REWRITE LOOP END: Add WP Rewrite Loop End code here', 'bulletproof-security').'</strong><br>'.__('This is a Special Network/Multisite Custom Code text box that should ONLY be used if the correct WP REWRITE LOOP END code is not being created in your root .htaccess file. If you have a Network/Multisite site that is installed in an unusual way/has an unusual folder structure then what seems to work best in these cases is to delete any folder paths/names and the trailing slash: "delete-this-folder-name/" that you see in these 2 example RewriteRules: ', 'bulletproof-security').'RewriteRule ^[_0-9a-zA-Z-]+/(wp-(content|admin|includes).*) delete-this-folder-name/$1 [L] RewriteRule ^[_0-9a-zA-Z-]+/(.*\.php)$ delete-this-folder-name/$1 [L] '.__('Typically this problem is caused by not being able to get the correct folder/directory structure for the website. This is very rare, but can happen on unusual Network/Multisite setups with unusual folder structures.', 'bulletproof-security');	
	} else {
	$network_cc_help = '';	
	}

	/** Custom Code **/
	$bps_customcode_content = '<strong>'.__('Export Tool', 'bulletproof-security').'</strong><br>'.__('The Custom Code Export tool exports (copies) all of your Root, wp-admin and UAEG custom htaccess code into the cc-master.zip file, which you can then download to your computer by clicking the Download Zip Export button displayed in the Custom Code Export success message. You can unzip the cc-master.zip file on your computer to extract the cc-master.txt file for editing - see the Import Tool help info below.', 'bulletproof-security').'<br><br><strong>'.__('Import Tool', 'bulletproof-security').'</strong><br>'.__('The Custom Code Import tool imports all of your Root, wp-admin and UAEG Custom Code from the cc-master.zip file on your computer into the Custom Code text boxes and saves your imported custom htaccess code to your WordPress Database. You can unzip the cc-master.zip file on your computer to extract the cc-master.txt file for editing to add/change any custom htaccess code in the cc-master.txt file. Do NOT delete any of the BEGIN and END placeholder lines of code in the cc-master.txt file. You can add/edit/change any code in-between the BEGIN and END lines of code. After editing the cc-master.txt file you will need to zip the cc-master.txt file in order to be able to import the cc-master.zip file using the Custom Code Import tool. The zip file MUST be named cc-master.zip in order to be able to Import it to BPS Custom Code. Important Note: Use Notepad, Notepad++ or another ASCII text editor to edit the cc-master.txt file. Do NOT use Word or WordPad to edit the cc-master.txt file.', 'bulletproof-security').'<br><br><strong>'.__('Delete Tool', 'bulletproof-security').'</strong><br>'.__('The Custom Code Delete tool deletes all of your Root and wp-admin Custom Code from all of the Custom Code text boxes and your WordPress Database. The Delete tool can be used for troubleshooting possible invalid/bad custom htaccess code issues/problems or simply just to delete all custom htaccess code in all of the Custom Code text boxes. Note: the Delete Tool does not delete the UAEG Custom Code.', 'bulletproof-security').'<br><br><strong>'.__('Custom Code General Help Information', 'bulletproof-security').'</strong><br>'.__('ONLY add valid htaccess code into these text areas/text boxes. If you want to add regular text instead of .htaccess code then you will need to add a pound sign # in front of the text to comment it out. If you do not do this then the next time you activate BulletProof Mode for your Root folder or your wp-admin folder your website WILL crash.', 'bulletproof-security').'<br><br>'.__('For Custom Code text boxes the require that you copy the entire section of code that you want to edit and modify you will see this blue help text - ', 'bulletproof-security').'<strong><font color="blue">'.__('"You MUST copy and paste the entire xxxxx section of code from your root .htaccess file into this text box first. You can then edit and modify the code in this text window and save your changes."', 'bulletproof-security').'</font></strong><br><br><strong>'.__('If you do not copy the entire section of code into a text box that requires this then the next time activate BulletProof Mode for your Root folder or your wp-admin folder your website WILL crash.', 'bulletproof-security').'</strong><br><br><strong>'.__('If your website crashes after adding custom code: Use FTP or use your web host control panel file manager and delete the root .htaccess file or the wp-admin file or both files if necessary. Log back into your website and correct/fix the invalid/incorrect custom htaccess code that was added in any of the Custom Code text boxes, save your changes, go to the Security Modes page and click the Activate button for the Root or wp-admin Folder BulletProof Mode or both if necessary.', 'bulletproof-security').'</strong><br><br><strong>'.__('Your Custom Code is saved permanently until you delete it and will not be removed or deleted when you upgrade BPS.','bulletproof-security').'</strong><br><br><strong>'.__('Root htaccess File Custom Code Setup Steps', 'bulletproof-security').'</strong><br>'.__('1. Add your custom code in the appropriate Root Custom Code text box.', 'bulletproof-security').'<br>'.__('2. Click the Encrypt Custom Code button - You only need to do this step if you are unable to save your custom code - See the Encryption|Decryption ModSecurity CRS Bypass help section below.', 'bulletproof-security').'<br>'.__('3. Click the Save Root Custom Code button to save your Root custom code.', 'bulletproof-security').'<br>'.__('4. Go to the Security Modes page and click the Root Folder BulletProof Mode Activate button.', 'bulletproof-security').'<br><br><strong>'.__('Encryption|Decryption ModSecurity CRS Bypass', 'bulletproof-security').'</strong><br>'.__('ModSecurity CRS is a security feature installed on some web hosts. ModSecurity CRS sees the legitimate htaccess code in the Custom Code text boxes as malicious and will prevent you from saving your custom htaccess code. When trying to save your custom code you may see an error message or you may be redirected to your website Home page or nothing happens or other various problems. To evade/bypass ModSecurity CRS click the Encrypt Custom Code button before clicking the Save Custom Code buttons. Your custom htaccess code is encrypted in the POST Form submission and then decrypted in the Form processing code. That means that your custom htaccess code is only encrypted temporarily during Custom Code Form submission to bypass/evade ModSecurity CRS detection. The Decrypt Custom Code feature was added as an additional user friendly convenience feature. It allows you to decrypt your custom code in real time if you already clicked the Encrypt Custom Code button. You can then continue adding or editing your custom code and then click the Encrypt Custom Code button again when you are done adding or editing custom code. Important!!! Do not forget to click the Encrypt Custom Code button before clicking the Save Custom Code buttons.', 'bulletproof-security').'<br><br><strong>'.__('CUSTOM CODE TOP PHP/PHP.INI HANDLER/CACHE CODE:', 'bulletproof-security').'<br>'.__('Add php/php.ini handler code, cache code and/or Speed Boost Cache Code here', 'bulletproof-security').'</strong><br>'.__('ONLY add valid php/php.ini handler htaccess code and/or cache htaccess code or text commented out with a pound sign #.','bulletproof-security').'<br><br><strong>'.__('CUSTOM CODE TURN OFF YOUR SERVER SIGNATURE:', 'bulletproof-security').'</strong><br>'.__('You MUST copy and paste the entire TURN OFF YOUR SERVER SIGNATURE section of code from your root .htaccess file into this text box first. You can then edit and modify the code in this text window and save your changes.','bulletproof-security').'<br><br><strong>'.__('CUSTOM CODE DO NOT SHOW DIRECTORY LISTING/DIRECTORY INDEX:','bulletproof-security').'</strong><br>'.__('You MUST copy and paste the entire DO NOT SHOW DIRECTORY LISTING and DIRECTORY INDEX sections of code from your root .htaccess file into this text box first. You can then edit and modify the code in this text window and save your changes.','bulletproof-security').'<br><br><strong>'.__('CUSTOM CODE BRUTE FORCE LOGIN PAGE PROTECTION:','bulletproof-security').'</strong><br>'.__('This Custom Code text box is for optional/Bonus code. To get this code see the Forum Help Links at the top of this Read Me help window. CAUTION! This code has a 95%/5% success/fail ratio meaning that this code will not work on 5% of websites. If you see a 403 error when logging out and logging into your website then you cannot use this code on your website and will need to delete this code to correct the 403 error when logging out and logging into your website.','bulletproof-security').'<br><br><strong>'.__('CUSTOM CODE ERROR LOGGING AND TRACKING:','bulletproof-security').'</strong><br>'.__('You MUST copy and paste the entire ERROR LOGGING AND TRACKING section of code from your root .htaccess file into this text box first. You can then edit and modify the code in this text window and save your changes.','bulletproof-security').'<br><br><strong>'.__('CUSTOM CODE DENY ACCESS TO PROTECTED SERVER FILES AND FOLDERS:', 'bulletproof-security').'</strong><br>'.__('You MUST copy and paste the entire DENY ACCESS TO PROTECTED SERVER FILES AND FOLDERS section of code from your root .htaccess file into this text box first. You can then edit and modify the code in this text window and save your changes.', 'bulletproof-security').'<br><br><strong>'.__('CUSTOM CODE WP-ADMIN/INCLUDES: DO NOT add wp-admin .htaccess file code here', 'bulletproof-security').'</strong><br>'.__('Add one pound sign # in this text box to prevent the WP-ADMIN/INCLUDES section of code from being created in your root .htaccess file.','bulletproof-security').'<br><br><strong>'.__('CUSTOM CODE WP REWRITE LOOP START: Add www to non-www/non-www to www code here', 'bulletproof-security').'</strong><br>'.__('You MUST copy and paste the entire WP REWRITE LOOP START section of code from your root .htaccess file into this text box first. You can then edit and modify the code in this text window and save your changes.','bulletproof-security').'<br><br><strong>'.__('CUSTOM CODE REQUEST METHODS FILTERED: Whitelist User Agents and allow HEAD Requests', 'bulletproof-security').'</strong><br>'.__('You MUST copy and paste the entire REQUEST METHODS FILTERED section of code from your root .htaccess file into this text box first. You can then edit and modify the code in this text window and save your changes. If you see this code: ','bulletproof-security').'RewriteRule ^(.*)$ - [R=405,L]'.__('. To Allow HEAD Requests, comment out these 2 lines of code with # signs: ', 'bulletproof-security').'#RewriteCond %{REQUEST_METHOD} ^(HEAD) [NC] and #RewriteRule ^(.*)$ - [R=405,L].'.__(' If you see this code: ','bulletproof-security').'RewriteRule ^(.*)$ /wp-content/plugins/bulletproof-security/405.php [L]'.__('. To Allow HEAD Requests, comment out these 2 lines of code with # signs: ', 'bulletproof-security').'#RewriteCond %{REQUEST_METHOD} ^(HEAD) [NC] and #RewriteRule ^(.*)$ /wp-content/plugins/bulletproof-security/405.php [L].<br><br><strong>'.__('CUSTOM CODE PLUGIN/THEME SKIP/BYPASS RULES:','bulletproof-security').'</strong><br>'.__('ONLY add valid htaccess code or text commented out with a pound sign #. This text area is for plugin fixes that are specific to your website. BPS already has some plugin skip/bypass rules included in the Root htaccess file by default. Adding additional plugin skip/bypass rules for your plugins on your website goes in this text box. There are 12 default skip rules in the standard BPS root htaccess file already. Skip rules MUST be in descending consecutive number order: 15, 14, 13... If you add one plugin skip/bypass rule in this text box it should be skip rule #13. For each additional plugin skip rule that you add the S= skip number is increased by one. Example: if you add 3 plugin skip rules in this text box they would be Skip rules #15, #14 and #13 - RewriteRule . - [S=15] and RewriteRule . - [S=14] and RewriteRule . - [S=13] in descending consecutive order', 'bulletproof-security').'<br><br><strong>'.__('CUSTOM CODE TIMTHUMB FORBID RFI and MISC FILE SKIP/BYPASS RULE:','bulletproof-security').'</strong><br>'.__('You MUST copy and paste the entire TIMTHUMB FORBID RFI section of code from your root .htaccess file into this text box first. You can then edit and modify the code in this text window and save your changes.','bulletproof-security').'<br><br><strong>'.__('CUSTOM CODE BPSQSE BPS QUERY STRING EXPLOITS:','bulletproof-security').'</strong><br>'.__('You MUST copy and paste the entire BPSQSE QUERY STRING EXPLOITS section of code from your root .htaccess file from # BEGIN BPSQSE BPS QUERY STRING EXPLOITS to # END BPSQSE BPS QUERY STRING EXPLOITS into this text box first. You can then edit and modify the code in this text window and save your changes.', 'bulletproof-security').$network_cc_help.'<br><br><strong>'.__('CUSTOM CODE DENY BROWSER ACCESS TO THESE FILES:','bulletproof-security').'</strong><br>'.__('You MUST copy and paste the entire DENY BROWSER ACCESS section of code from your root .htaccess file into this text box first. You can then edit and modify the code in this text window and save your changes.', 'bulletproof-security').'<br><br><strong>'.__('CUSTOM CODE BOTTOM HOTLINKING/FORBID COMMENT SPAMMERS/BLOCK BOTS/BLOCK IP/REDIRECT CODE: Add miscellaneous code here','bulletproof-security').'</strong><br>'.__('This Custom Code text box is for any/all personal custom code that you have created or want to use that is not standard BPS htaccess code. ONLY add valid htaccess code below or text commented out with a pound sign # You can save any miscellaneous custom htaccess code here as long as it is valid htaccess code or if it is just plain text then you will need to comment it out with a pound sign # in front of the text.', 'bulletproof-security').'<br><br><strong>'.__('wp-admin htaccess File Custom Code Steps','bulletproof-security').'</strong><br>'.__('1. Add your custom code in the appropriate wp-admin Custom Code text box.', 'bulletproof-security').'<br>'.__('2. Click the Save wp-admin Custom Code button to save your wp-admin custom code.', 'bulletproof-security').'<br>'.__('3. Go to the Security Modes page and click the wp-admin Folder BulletProof Mode Activate button.', 'bulletproof-security').'<br><br><strong>'.__('CUSTOM CODE BPS WPADMIN DENY ACCESS TO FILES:','bulletproof-security').'<br>'.__('Add additional wp-admin files that you would like to block here','bulletproof-security').'</strong><br>'.__('You MUST copy and paste the entire WPADMIN DENY BROWSER ACCESS TO FILES section of code from your wp-admin .htaccess file into this text box first. You can then edit and modify the code in this text window and save your changes. Add one pound sign # below to prevent the WPADMIN DENY BROWSER ACCESS TO FILES section of code from being created in your wp-admin .htaccess file.', 'bulletproof-security').'<br><br><strong>'.__('CUSTOM CODE WPADMIN TOP:','bulletproof-security').'<br>'.__('Add wp-admin password protection, IP whitelist allow access & miscellaneous custom code here','bulletproof-security').'</strong><br>'.__('ONLY add valid htaccess code below or text commented out with a pound sign # You can save any miscellaneous custom htaccess code here as long as it is valid htaccess code or if it is just plain text then you will need to comment it out with a pound sign # in front of the text.','bulletproof-security').'<br><br><strong>'.__('CUSTOM CODE WPADMIN PLUGIN/FILE SKIP RULES:','bulletproof-security').'<br>'.__('Add wp-admin plugin/file skip rules code here','bulletproof-security').'</strong><br>'.__('ONLY add valid htaccess code below or text commented out with a pound sign #. There is currently one default skip rule [S=1] in the standard BPS wp-admin htaccess file already. Skip rules MUST be in descending consecutive number order: 4, 3, 2... If you add one plugin skip/bypass rule in this text box it will be skip rule #2. For each additional plugin skip rule that you add the S= skip number is increased by one. Example: if you add 3 plugin skip rules in this text box they would be Skip rules #4, #3 and #2 - RewriteRule . - [S=4] and RewriteRule . - [S=3] and RewriteRule . - [S=2] in descending consecutive order.','bulletproof-security').'<br><br><strong>'.__('CUSTOM CODE BPSQSE-check BPS QUERY STRING EXPLOITS AND FILTERS:','bulletproof-security').'<br>'.__('Modify wp-admin Query String Exploit code here','bulletproof-security').'</strong><br>'.__('You MUST copy and paste the entire BPS QUERY STRING EXPLOITS section of code from your wp-admin .htaccess file from # BEGIN BPSQSE-check BPS QUERY STRING EXPLOITS AND FILTERS to # END BPSQSE-check BPS QUERY STRING EXPLOITS AND FILTERS into this text box first. You can then edit and modify the code in this text window and save your changes.','bulletproof-security').'<br><br><strong>'.__('UAEG htaccess File Custom Code Steps','bulletproof-security').'</strong><br>'.__('1. Copy and paste your entire Uploads .htaccess file code from the "Your Current Uploads htaccess File" tab on the htaccess File Editor page into the CUSTOM CODE UAEG text box.', 'bulletproof-security').'<br>'.__('2. Edit/modify/customize your UAEG htaccess code.', 'bulletproof-security').'<br>'.__('3. Click the Save UAEG Custom Code button to save your UAEG custom code.', 'bulletproof-security').'<br>'.__('4. Go to the Security Modes page and click the Uploads Anti-Exploit Guard BulletProof Mode Activate button.', 'bulletproof-security').'<br><br><strong>'.__('CUSTOM CODE UAEG:','bulletproof-security').'</strong><br>'.__('Copy and paste your entire Uploads .htaccess file code from the "Your Current Uploads htaccess File" tab on the htaccess File Editor page into this text box first. You can then edit and modify the code in this text window and save your changes.','bulletproof-security').'<br><br><strong>'.__('BPS Pro Video Tutorial links can be found in the Help & FAQ pages.','bulletproof-security').'</strong>';

?>