require __DIR__ . '/wp-load.php';

if ( force_ssl_admin() && ! is_ssl() ) {

if ( 0 === strpos( $_SERVER['REQUEST_URI'], 'http' ) ) {

wp_safe_redirect( set_url_scheme( $_SERVER['REQUEST_URI'], 'https' ) );

exit;

} else {

wp_safe_redirect( 'https://' . $_SERVER['HTTP_HOST'] . $_SERVER['REQUEST_URI'] );

exit;

}

}

function login_header( $title = 'Log In', $message = '', $wp_error = null ) {

} // End of login_header().

function login_footer( $input_id = '' ) {

}

function wp_shake_js() {

}

function wp_login_viewport_meta() {

}

$action = isset( $_REQUEST['action'] ) ? $_REQUEST['action'] : 'login';

$errors = new WP_Error();

if ( isset( $_GET['key'] ) ) {

$action = 'resetpass';

}

if ( isset( $_GET['checkemail'] ) ) {

$action = 'checkemail';

}

$default_actions = array(

'confirm_admin_email',

'postpass',

'logout',

'lostpassword',

'retrievepassword',

'resetpass',

'rp',

'register',

'checkemail',

'confirmaction',

'login',

WP_Recovery_Mode_Link_Service::LOGIN_ACTION_ENTERED,

);

if ( ! in_array( $action, $default_actions, true ) && false === has_filter( 'login_form_' . $action ) ) {

$action = 'login';

}

nocache_headers();

header( 'Content-Type: ' . get_bloginfo( 'html_type' ) . '; charset=' . get_bloginfo( 'charset' ) );

if ( defined( 'RELOCATE' ) && RELOCATE ) { // Move flag is set.

if ( isset( $_SERVER['PATH_INFO'] ) && ( $_SERVER['PATH_INFO'] !== $_SERVER['PHP_SELF'] ) ) {

$_SERVER['PHP_SELF'] = str_replace( $_SERVER['PATH_INFO'], '', $_SERVER['PHP_SELF'] );

}

$url = dirname( set_url_scheme( 'http://' . $_SERVER['HTTP_HOST'] . $_SERVER['PHP_SELF'] ) );

if ( get_option( 'siteurl' ) !== $url ) {

update_option( 'siteurl', $url );

}

}

$secure = ( 'https' === parse_url( wp_login_url(), PHP_URL_SCHEME ) );

setcookie( TEST_COOKIE, 'WP Cookie check', 0, COOKIEPATH, COOKIE_DOMAIN, $secure );

if ( SITECOOKIEPATH !== COOKIEPATH ) {

setcookie( TEST_COOKIE, 'WP Cookie check', 0, SITECOOKIEPATH, COOKIE_DOMAIN, $secure );

}

do_action( 'login_init' );

do_action( "login_form_{$action}" );

$http_post = ( 'POST' === $_SERVER['REQUEST_METHOD'] );

$interim_login = isset( $_REQUEST['interim-login'] );

$login_link_separator = apply_filters( 'login_link_separator', ' | ' );

switch ( $action ) {

case 'confirm_admin_email':

/*

if ( ! is_user_logged_in() ) {

wp_safe_redirect( wp_login_url() );

exit;

}

if ( ! empty( $_REQUEST['redirect_to'] ) ) {

$redirect_to = $_REQUEST['redirect_to'];

} else {

$redirect_to = admin_url();

}

if ( current_user_can( 'manage_options' ) ) {

$admin_email = get_option( 'admin_email' );

} else {

wp_safe_redirect( $redirect_to );

exit;

}

/**

$remind_interval = (int) apply_filters( 'admin_email_remind_interval', 3 * DAY_IN_SECONDS );

if ( ! empty( $_GET['remind_me_later'] ) ) {

if ( ! wp_verify_nonce( $_GET['remind_me_later'], 'remind_me_later_nonce' ) ) {

wp_safe_redirect( wp_login_url() );

exit;

}

if ( $remind_interval > 0 ) {

update_option( 'admin_email_lifespan', time() + $remind_interval );

}

$redirect_to = add_query_arg( 'admin_email_remind_later', 1, $redirect_to );

wp_safe_redirect( $redirect_to );

exit;

}

if ( ! empty( $_POST['correct-admin-email'] ) ) {

if ( ! check_admin_referer( 'confirm_admin_email', 'confirm_admin_email_nonce' ) ) {

wp_safe_redirect( wp_login_url() );

exit;

}

/**

$admin_email_check_interval = (int) apply_filters( 'admin_email_check_interval', 6 * MONTH_IN_SECONDS );

if ( $admin_email_check_interval > 0 ) {

update_option( 'admin_email_lifespan', time() + $admin_email_check_interval );

}

wp_safe_redirect( $redirect_to );

exit;

}

login_header( __( 'Confirm your administration email' ), '', $errors );

/**

do_action( 'admin_email_confirm', $errors );

?>

<form class="admin-email-confirm-form" name="admin-email-confirm-form" action="<?php echo esc_url( site_url( 'wp-login.php?action=confirm_admin_email', 'login_post' ) ); ?>" method="post">

<?php

/**

do_action( 'admin_email_confirm_form' );

wp_nonce_field( 'confirm_admin_email', 'confirm_admin_email_nonce' );

?>

<input type="hidden" name="redirect_to" value="<?php echo esc_attr( $redirect_to ); ?>" />

<h1 class="admin-email__heading">

<?php _e( 'Administration email verification' ); ?>

</h1>

<p class="admin-email__details">

<?php _e( 'Please verify that the <strong>administration email</strong> for this website is still correct.' ); ?>

<?php

/* translators: URL to the WordPress help section about admin email. */

$admin_email_help_url = __( 'https://wordpress.org/support/article/settings-general-screen/#email-address' );

/* translators: Accessibility text. */

$accessibility_text = sprintf( '<span class="screen-reader-text"> %s</span>', __( '(opens in a new tab)' ) );

printf(

'<a href="%s" rel="noopener" target="_blank">%s%s</a>',

esc_url( $admin_email_help_url ),

__( 'Why is this important?' ),

$accessibility_text

);

?>

</p>

<p class="admin-email__details">

<?php

printf(

/* translators: %s: Admin email address. */

__( 'Current administration email: %s' ),

'<strong>' . esc_html( $admin_email ) . '</strong>'

);

?>

</p>

<p class="admin-email__details">

<?php _e( 'This email may be different from your personal email address.' ); ?>

</p>

<div class="admin-email__actions">

<div class="admin-email__actions-primary">

<?php

$change_link = admin_url( 'options-general.php' );

$change_link = add_query_arg( 'highlight', 'confirm_admin_email', $change_link );

?>

<a class="button button-large" href="<?php echo esc_url( $change_link ); ?>"><?php _e( 'Update' ); ?></a>

<input type="submit" name="correct-admin-email" id="correct-admin-email" class="button button-primary button-large" value="<?php esc_attr_e( 'The email is correct' ); ?>" />

</div>

<?php if ( $remind_interval > 0 ) : ?>

<div class="admin-email__actions-secondary">

<?php

$remind_me_link = wp_login_url( $redirect_to );

$remind_me_link = add_query_arg(

array(

'action' => 'confirm_admin_email',

'remind_me_later' => wp_create_nonce( 'remind_me_later_nonce' ),

),

$remind_me_link

);

?>

<a href="<?php echo esc_url( $remind_me_link ); ?>"><?php _e( 'Remind me later' ); ?></a>

</div>

<?php endif; ?>

</div>

</form>

<?php

login_footer();

break;

case 'postpass':

if ( ! array_key_exists( 'post_password', $_POST ) ) {

wp_safe_redirect( wp_get_referer() );

exit;

}

require_once ABSPATH . WPINC . '/class-phpass.php';

$hasher = new PasswordHash( 8, true );

/**

$expire = apply_filters( 'post_password_expires', time() + 10 * DAY_IN_SECONDS );

$referer = wp_get_referer();

if ( $referer ) {

$secure = ( 'https' === parse_url( $referer, PHP_URL_SCHEME ) );

} else {

$secure = false;

}

setcookie( 'wp-postpass_' . COOKIEHASH, $hasher->HashPassword( wp_unslash( $_POST['post_password'] ) ), $expire, COOKIEPATH, COOKIE_DOMAIN, $secure );

wp_safe_redirect( wp_get_referer() );

exit;

case 'logout':

check_admin_referer( 'log-out' );

$user = wp_get_current_user();

wp_logout();

if ( ! empty( $_REQUEST['redirect_to'] ) ) {

$redirect_to = $_REQUEST['redirect_to'];

$requested_redirect_to = $redirect_to;

} else {

$redirect_to = add_query_arg(

array(

'loggedout' => 'true',

'wp_lang' => get_user_locale( $user ),

),

wp_login_url()

);

$requested_redirect_to = '';

}

/**

$redirect_to = apply_filters( 'logout_redirect', $redirect_to, $requested_redirect_to, $user );

wp_safe_redirect( $redirect_to );

exit;

case 'lostpassword':

case 'retrievepassword':

if ( $http_post ) {

$errors = retrieve_password();

if ( ! is_wp_error( $errors ) ) {

$redirect_to = ! empty( $_REQUEST['redirect_to'] ) ? $_REQUEST['redirect_to'] : 'wp-login.php?checkemail=confirm';

wp_safe_redirect( $redirect_to );

exit;

}

}

if ( isset( $_GET['error'] ) ) {

if ( 'invalidkey' === $_GET['error'] ) {

$errors->add( 'invalidkey', __( '<strong>Error</strong>: Your password reset link appears to be invalid. Please request a new link below.' ) );

} elseif ( 'expiredkey' === $_GET['error'] ) {

$errors->add( 'expiredkey', __( '<strong>Error</strong>: Your password reset link has expired. Please request a new link below.' ) );

}

}

$lostpassword_redirect = ! empty( $_REQUEST['redirect_to'] ) ? $_REQUEST['redirect_to'] : '';

/**

$redirect_to = apply_filters( 'lostpassword_redirect', $lostpassword_redirect );

/**

do_action( 'lost_password', $errors );

login_header( __( 'Lost Password' ), '<p class="message">' . __( 'Please enter your username or email address. You will receive an email message with instructions on how to reset your password.' ) . '</p>', $errors );

$user_login = '';

if ( isset( $_POST['user_login'] ) && is_string( $_POST['user_login'] ) ) {

$user_login = wp_unslash( $_POST['user_login'] );

}

?>

<form name="lostpasswordform" id="lostpasswordform" action="<?php echo esc_url( network_site_url( 'wp-login.php?action=lostpassword', 'login_post' ) ); ?>" method="post">

<p>

<label for="user_login"><?php _e( 'Username or Email Address' ); ?></label>

<input type="text" name="user_login" id="user_login" class="input" value="<?php echo esc_attr( $user_login ); ?>" size="20" autocapitalize="off" />

</p>

<?php

/**

do_action( 'lostpassword_form' );

?>

<input type="hidden" name="redirect_to" value="<?php echo esc_attr( $redirect_to ); ?>" />

<p class="submit">

<input type="submit" name="wp-submit" id="wp-submit" class="button button-primary button-large" value="<?php esc_attr_e( 'Get New Password' ); ?>" />

</p>

</form>

<p id="nav">

<a href="<?php echo esc_url( wp_login_url() ); ?>"><?php _e( 'Log in' ); ?></a>

<?php

if ( get_option( 'users_can_register' ) ) {

$registration_url = sprintf( '<a href="%s">%s</a>', esc_url( wp_registration_url() ), __( 'Register' ) );

echo esc_html( $login_link_separator );

/** This filter is documented in wp-includes/general-template.php */

echo apply_filters( 'register', $registration_url );

}

?>

</p>

<?php

login_footer( 'user_login' );

break;

case 'resetpass':

case 'rp':

list( $rp_path ) = explode( '?', wp_unslash( $_SERVER['REQUEST_URI'] ) );

$rp_cookie = 'wp-resetpass-' . COOKIEHASH;

if ( isset( $_GET['key'] ) && isset( $_GET['login'] ) ) {

$value = sprintf( '%s:%s', wp_unslash( $_GET['login'] ), wp_unslash( $_GET['key'] ) );

setcookie( $rp_cookie, $value, 0, $rp_path, COOKIE_DOMAIN, is_ssl(), true );

wp_safe_redirect( remove_query_arg( array( 'key', 'login' ) ) );

exit;

}

if ( isset( $_COOKIE[ $rp_cookie ] ) && 0 < strpos( $_COOKIE[ $rp_cookie ], ':' ) ) {

list( $rp_login, $rp_key ) = explode( ':', wp_unslash( $_COOKIE[ $rp_cookie ] ), 2 );

$user = check_password_reset_key( $rp_key, $rp_login );

if ( isset( $_POST['pass1'] ) && ! hash_equals( $rp_key, $_POST['rp_key'] ) ) {

$user = false;

}

} else {

$user = false;

}

if ( ! $user || is_wp_error( $user ) ) {

setcookie( $rp_cookie, ' ', time() - YEAR_IN_SECONDS, $rp_path, COOKIE_DOMAIN, is_ssl(), true );

if ( $user && $user->get_error_code() === 'expired_key' ) {

wp_redirect( site_url( 'wp-login.php?action=lostpassword&error=expiredkey' ) );

} else {

wp_redirect( site_url( 'wp-login.php?action=lostpassword&error=invalidkey' ) );

}

exit;

}

$errors = new WP_Error();

if ( isset( $_POST['pass1'] ) && $_POST['pass1'] !== $_POST['pass2'] ) {

$errors->add( 'password_reset_mismatch', __( '<strong>Error</strong>: The passwords do not match.' ) );

}

/**

do_action( 'validate_password_reset', $errors, $user );

if ( ( ! $errors->has_errors() ) && isset( $_POST['pass1'] ) && ! empty( $_POST['pass1'] ) ) {

reset_password( $user, $_POST['pass1'] );

setcookie( $rp_cookie, ' ', time() - YEAR_IN_SECONDS, $rp_path, COOKIE_DOMAIN, is_ssl(), true );

login_header( __( 'Password Reset' ), '<p class="message reset-pass">' . __( 'Your password has been reset.' ) . ' <a href="' . esc_url( wp_login_url() ) . '">' . __( 'Log in' ) . '</a></p>' );

login_footer();

exit;

}

wp_enqueue_script( 'utils' );

wp_enqueue_script( 'user-profile' );

login_header( __( 'Reset Password' ), '<p class="message reset-pass">' . __( 'Enter your new password below or generate one.' ) . '</p>', $errors );

?>

<form name="resetpassform" id="resetpassform" action="<?php echo esc_url( network_site_url( 'wp-login.php?action=resetpass', 'login_post' ) ); ?>" method="post" autocomplete="off">

<input type="hidden" id="user_login" value="<?php echo esc_attr( $rp_login ); ?>" autocomplete="off" />

<div class="user-pass1-wrap">

<p>

<label for="pass1"><?php _e( 'New password' ); ?></label>

</p>

<div class="wp-pwd">

<input type="password" data-reveal="1" data-pw="<?php echo esc_attr( wp_generate_password( 16 ) ); ?>" name="pass1" id="pass1" class="input password-input" size="24" value="" autocomplete="off" aria-describedby="pass-strength-result" />

<button type="button" class="button button-secondary wp-hide-pw hide-if-no-js" data-toggle="0" aria-label="<?php esc_attr_e( 'Hide password' ); ?>">

<span class="dashicons dashicons-hidden" aria-hidden="true"></span>

</button>

<div id="pass-strength-result" class="hide-if-no-js" aria-live="polite"><?php _e( 'Strength indicator' ); ?></div>

</div>

<div class="pw-weak">

<input type="checkbox" name="pw_weak" id="pw-weak" class="pw-checkbox" />

<label for="pw-weak"><?php _e( 'Confirm use of weak password' ); ?></label>

</div>

</div>

<p class="user-pass2-wrap">

<label for="pass2"><?php _e( 'Confirm new password' ); ?></label>

<input type="password" name="pass2" id="pass2" class="input" size="20" value="" autocomplete="off" />

</p>

<p class="description indicator-hint"><?php echo wp_get_password_hint(); ?></p>

<br class="clear" />

<?php

/**

do_action( 'resetpass_form', $user );

?>

<input type="hidden" name="rp_key" value="<?php echo esc_attr( $rp_key ); ?>" />

<p class="submit reset-pass-submit">

<button type="button" class="button wp-generate-pw hide-if-no-js" aria-expanded="true"><?php _e( 'Generate Password' ); ?></button>

<input type="submit" name="wp-submit" id="wp-submit" class="button button-primary button-large" value="<?php esc_attr_e( 'Save Password' ); ?>" />

</p>

</form>

<p id="nav">

<a href="<?php echo esc_url( wp_login_url() ); ?>"><?php _e( 'Log in' ); ?></a>

<?php

if ( get_option( 'users_can_register' ) ) {

$registration_url = sprintf( '<a href="%s">%s</a>', esc_url( wp_registration_url() ), __( 'Register' ) );

echo esc_html( $login_link_separator );

/** This filter is documented in wp-includes/general-template.php */

echo apply_filters( 'register', $registration_url );

}

?>

</p>

<?php

login_footer( 'user_pass' );

break;

case 'register':

if ( is_multisite() ) {

/**

wp_redirect( apply_filters( 'wp_signup_location', network_site_url( 'wp-signup.php' ) ) );

exit;

}

if ( ! get_option( 'users_can_register' ) ) {

wp_redirect( site_url( 'wp-login.php?registration=disabled' ) );

exit;

}

$user_login = '';

$user_email = '';

if ( $http_post ) {

if ( isset( $_POST['user_login'] ) && is_string( $_POST['user_login'] ) ) {

$user_login = wp_unslash( $_POST['user_login'] );

}

if ( isset( $_POST['user_email'] ) && is_string( $_POST['user_email'] ) ) {

$user_email = wp_unslash( $_POST['user_email'] );

}

$errors = register_new_user( $user_login, $user_email );

if ( ! is_wp_error( $errors ) ) {

$redirect_to = ! empty( $_POST['redirect_to'] ) ? $_POST['redirect_to'] : 'wp-login.php?checkemail=registered';

wp_safe_redirect( $redirect_to );

exit;

}

}

$registration_redirect = ! empty( $_REQUEST['redirect_to'] ) ? $_REQUEST['redirect_to'] : '';

/**

$redirect_to = apply_filters( 'registration_redirect', $registration_redirect );

login_header( __( 'Registration Form' ), '<p class="message register">' . __( 'Register For This Site' ) . '</p>', $errors );

?>

<form name="registerform" id="registerform" action="<?php echo esc_url( site_url( 'wp-login.php?action=register', 'login_post' ) ); ?>" method="post" novalidate="novalidate">

<p>

<label for="user_login"><?php _e( 'Username' ); ?></label>

<input type="text" name="user_login" id="user_login" class="input" value="<?php echo esc_attr( wp_unslash( $user_login ) ); ?>" size="20" autocapitalize="off" />

</p>

<p>

<label for="user_email"><?php _e( 'Email' ); ?></label>