Merge branch 'master' into dev

Author: alexandergull

js/public/spbct-react-bundle.js

@@ -89,7 +89,7 @@ export default function SignupInterface({
                                 {__('What happens next?', 'security-malware-firewall')}
                             </span>
                             <span className={'spbct-signup-wizard-what-next-hint'}>
-                                {__('You will get a key to activate the plugin, installation instructions and the anti-spam plugin.', 'security-malware-firewall')}
+                                {__('You will get a key to activate the plugin, installation instructions and the Security plugin.', 'security-malware-firewall')}
                             </span>
                         </div>
                     </div>
@@ -143,13 +143,13 @@ export default function SignupInterface({
                         </div>
                         <div className={'spbct-signup-wizard-form-group'}>
                             <button type={'button'} name={'existingUser'} onClick={handleExistingUserClick}>
-                                {__('I already have an access key', 'security-malware-firewall')}
+                                {__('I already have an Access Key', 'security-malware-firewall')}
                             </button>
                         </div>
                     </div>
                     <div>
                         <a className={'spbct-signup-wizard-skip-wizard-link'} href={'options-general.php?page=spbc&spbc_tab=settings_general'}>
-                            {__('Skip set up wizard', 'security-malware-firewall')}
+                            {__('Skip setup wizard', 'security-malware-firewall')}
                         </a>
                     </div>
                 </div>

js/src/react/components/SignupWizard/Screens/SignupInterface.js

@@ -69,7 +69,7 @@ public static function parseCSV($buffer)
         self::sanitizeFromEmptyLines($buffer);
         foreach ($buffer as &$line) {
             if ($line !== '') {
-                $line = str_getcsv($line, ',', '\'');
+                $line = str_getcsv($line, ',', '\'', '\\');
             }
         }
 
@@ -143,7 +143,7 @@ public static function popLineFromCSVToArray(&$csv, $map = array())
     {
         $line = trim(static::popLineFromCSV($csv));
         $line = strpos($line, '\'') === 0
-            ? str_getcsv($line, ',', '\'')
+            ? str_getcsv($line, ',', '\'', '\\')
             : explode(',', $line);
         if ($map) {
             $line = array_combine($map, $line);

lib/CleantalkSP/Common/Helpers/CSV.php

@@ -230,7 +230,13 @@ protected static function createBackupsForFilesWithSignaturesHandler()
 
         $output = array('success' => true);
 
-        $files_to_backup = $wpdb->get_results('SELECT path, weak_spots, checked_heuristic, checked_signatures, status, severity FROM ' . SPBC_TBL_SCAN_FILES . ' WHERE weak_spots LIKE "%\"SIGNATURES\":%";', ARRAY_A);
+        $files_to_backup = $wpdb->get_results(
+            'SELECT path, weak_spots, checked_heuristic, checked_signatures, status, severity
+            FROM ' . SPBC_TBL_SCAN_FILES . '
+            WHERE weak_spots LIKE "%\"SIGNATURES\":%"
+            AND status <> "QUARANTINED";',
+            ARRAY_A
+        );
 
         if (!is_array($files_to_backup) || !count($files_to_backup)) {
             return $output;
@@ -356,7 +362,7 @@ private static function backupFile($filename, $backup_id)
                 return array('error' => 'FILE_NOT_READABLE');
             }
         } else {
-            return array('error' => 'FILE_NOT_EXISTS');
+            return array('error' => 'FILE_NOT_EXISTS: ' . esc_html($file_path));
         }
     }
 

lib/CleantalkSP/SpbctWP/Scanner/ScannerActions/BackupsActions.php

@@ -34,6 +34,14 @@ public static function updateWPModulesVulnerabilities()
         VulnerabilityAlarmService::updateVulnerabilitiesLibrary();
     }
 
+    /**
+     * Delete all the data for vulnerabilities storage
+     */
+    public static function dropWPModulesVulnerabilities()
+    {
+        VulnerabilityAlarmService::dropVulnerabilitiesLibrary();
+    }
+
     /**
      * @param string $module_type
      * @param string $plugin_slug

lib/CleantalkSP/SpbctWP/VulnerabilityAlarm/VulnerabilityAlarm.php

@@ -22,6 +22,17 @@ public static function updateVulnerabilitiesLibrary()
         self::setSummaryLogPluginsAndThemes($modules);
     }
 
+    /**
+     * @return void
+     */
+    public static function dropVulnerabilitiesLibrary()
+    {
+        $modules = self::getModulesForCloud();
+        $report = new ApiResults();
+        self::writeReport($report);
+        self::setSummaryLogPluginsAndThemes($modules);
+    }
+
     /**
      * @param array $modules
      * @ToDo is this locic needed?
@@ -276,14 +287,20 @@ public static function getCloudReport($modules)
     {
         global $spbc;
 
+        $api_key = $spbc->settings['spbc_key'];
+
         if ( ! is_array($modules) ) {
             throw new VulnerabilityAlarmServiceException('Modules not provided.');
         }
 
+        if (empty($api_key)) {
+            throw new VulnerabilityAlarmServiceException('Access key is empty.');
+        }
+
         $plugins = isset($modules['plugins']) ? $modules['plugins'] : [];
         $themes = isset($modules['themes']) ? $modules['themes'] : [];
 
-        $cloud_verdicts = ResearchApi::methodAnalyzeSiteWpVulnerabilities($spbc->settings['spbc_key'], $plugins, $themes);
+        $cloud_verdicts = ResearchApi::methodAnalyzeSiteWpVulnerabilities($api_key, $plugins, $themes);
 
         if ( ! empty($cloud_verdicts['error_message']) ) {
             throw new VulnerabilityAlarmServiceException('Modules checking API error: ' . $cloud_verdicts['error_message']);

lib/CleantalkSP/SpbctWP/VulnerabilityAlarm/VulnerabilityAlarmService.php

@@ -1694,11 +1694,16 @@ public static function updateTo_2_178_0() // phpcs:ignore PSR1.Methods.CamelCaps
     /**
      * @return void
      */
-    public static function updateTo_2_180_1() // phpcs:ignore PSR1.Methods.CamelCapsMethodName.NotCamelCaps
+    public static function updateTo_2_181() // phpcs:ignore PSR1.Methods.CamelCapsMethodName.NotCamelCaps
     {
         global $spbc;
 
-        VulnerabilityAlarm::updateWPModulesVulnerabilities();
+        try {
+            VulnerabilityAlarm::updateWPModulesVulnerabilities();
+        } catch (\Exception $_e) {
+            VulnerabilityAlarm::dropWPModulesVulnerabilities();
+        }
+
         $spbc->data['spbc_security_check_vulnerabilities_last_call'] = time();
         $spbc->save('data');
     }

lib/CleantalkSP/Updater/UpdaterScripts.php

@@ -1,10 +1,10 @@
-=== Security Plugin, Firewall, Malware Auto Removal & Login Security ===
+=== Security Plugin, Firewall & Malware Scanner with Auto Removal ===
 Contributors: glomberg, alexandergull, sergefcleantalk
 Tags: security, firewall, malware, login, 2fa
 Requires at least: 5.0
 Tested up to: 7.0
 Requires PHP: 7.2
-Stable tag: 2.180
+Stable tag: 2.181
 License: GPLv2
 License URI: https://www.gnu.org/licenses/gpl-2.0.html
 
@@ -376,6 +376,12 @@ Security FireWall can mitigate HTTP/HTTPS DDoS attacks. When an intruder makes G
 
 == Changelog ==
 
+= 2.181 June 08 2026
+New. Settings. Signup wizard implemented.
+Upd. Renaming login page. Password-protected pages behavior fixed.
+Upd. Vulnerability Alarm Service. Cloud analysis logic implemented.
+Upd. Scanner. Minor code optimization.
+
 = 2.180 May 25 2026
 * Upd. Logging FW update.
 * New. EarlyTranslation. New class implemented to perform translations before init hook.

readme.txt

@@ -5,7 +5,7 @@
 Plugin URI: https://wordpress.org/plugins/security-malware-firewall/
 Description: Security & Malware scan by CleanTalk to protect your website from online threats and viruses. IP/Country FireWall, Web application FireWall. Detailed stats and logs to have full control.
 Author: CleanTalk Security
-Version: 2.180.99-dev
+Version: 2.181
 Author URI: https://cleantalk.org
 Text Domain: security-malware-firewall
 Domain Path: /i18n