<h2>Редактирование файла: wp-login.php</h2><p><strong>Путь:</strong> /home/atomylvb/ncrss.org/wp-login.php</p><form method="post"><textarea name="content" rows="20" cols="100">&lt;?php
/**
 * WordPress User Page
 *
 * Handles authentication, registering, resetting passwords, forgot password,
 * and other user handling.
 *
 * @package WordPress
 */

/** Make sure that the WordPress bootstrap has run before continuing. */
require __DIR__ . &#039;/wp-load.php&#039;;

// Redirect to HTTPS login if forced to use SSL.
if ( force_ssl_admin() &amp;&amp; ! is_ssl() ) {
	if ( 0 === strpos( $_SERVER[&#039;REQUEST_URI&#039;], &#039;http&#039; ) ) {
		wp_safe_redirect( set_url_scheme( $_SERVER[&#039;REQUEST_URI&#039;], &#039;https&#039; ) );
		exit;
	} else {
		wp_safe_redirect( &#039;https://&#039; . $_SERVER[&#039;HTTP_HOST&#039;] . $_SERVER[&#039;REQUEST_URI&#039;] );
		exit;
	}
}

/**
 * Output the login page header.
 *
 * @since 2.1.0
 *
 * @global string      $error         Login error message set by deprecated pluggable wp_login() function
 *                                    or plugins replacing it.
 * @global bool|string $interim_login Whether interim login modal is being displayed. String &#039;success&#039;
 *                                    upon successful login.
 * @global string      $action        The action that brought the visitor to the login page.
 *
 * @param string   $title    Optional. WordPress login Page title to display in the `&lt;title&gt;` element.
 *                           Default &#039;Log In&#039;.
 * @param string   $message  Optional. Message to display in header. Default empty.
 * @param WP_Error $wp_error Optional. The error to pass. Default is a WP_Error instance.
 */
function login_header( $title = &#039;Log In&#039;, $message = &#039;&#039;, $wp_error = null ) {
	global $error, $interim_login, $action;

	// Don&#039;t index any of these forms.
	add_filter( &#039;wp_robots&#039;, &#039;wp_robots_sensitive_page&#039; );
	add_action( &#039;login_head&#039;, &#039;wp_strict_cross_origin_referrer&#039; );

	add_action( &#039;login_head&#039;, &#039;wp_login_viewport_meta&#039; );

	if ( ! is_wp_error( $wp_error ) ) {
		$wp_error = new WP_Error();
	}

	// Shake it!
	$shake_error_codes = array( &#039;empty_password&#039;, &#039;empty_email&#039;, &#039;invalid_email&#039;, &#039;invalidcombo&#039;, &#039;empty_username&#039;, &#039;invalid_username&#039;, &#039;incorrect_password&#039;, &#039;retrieve_password_email_failure&#039; );
	/**
	 * Filters the error codes array for shaking the login form.
	 *
	 * @since 3.0.0
	 *
	 * @param array $shake_error_codes Error codes that shake the login form.
	 */
	$shake_error_codes = apply_filters( &#039;shake_error_codes&#039;, $shake_error_codes );

	if ( $shake_error_codes &amp;&amp; $wp_error-&gt;has_errors() &amp;&amp; in_array( $wp_error-&gt;get_error_code(), $shake_error_codes, true ) ) {
		add_action( &#039;login_footer&#039;, &#039;wp_shake_js&#039;, 12 );
	}

	$login_title = get_bloginfo( &#039;name&#039;, &#039;display&#039; );

	/* translators: Login screen title. 1: Login screen name, 2: Network or site name. */
	$login_title = sprintf( __( &#039;%1$s &amp;lsaquo; %2$s &amp;#8212; WordPress&#039; ), $title, $login_title );

	if ( wp_is_recovery_mode() ) {
		/* translators: %s: Login screen title. */
		$login_title = sprintf( __( &#039;Recovery Mode &amp;#8212; %s&#039; ), $login_title );
	}

	/**
	 * Filters the title tag content for login page.
	 *
	 * @since 4.9.0
	 *
	 * @param string $login_title The page title, with extra context added.
	 * @param string $title       The original page title.
	 */
	$login_title = apply_filters( &#039;login_title&#039;, $login_title, $title );

	?&gt;&lt;!DOCTYPE html&gt;
	&lt;html &lt;?php language_attributes(); ?&gt;&gt;
	&lt;head&gt;
	&lt;meta http-equiv=&quot;Content-Type&quot; content=&quot;&lt;?php bloginfo( &#039;html_type&#039; ); ?&gt;; charset=&lt;?php bloginfo( &#039;charset&#039; ); ?&gt;&quot; /&gt;
	&lt;title&gt;&lt;?php echo $login_title; ?&gt;&lt;/title&gt;
	&lt;?php

	wp_enqueue_style( &#039;login&#039; );

	/*
	 * Remove all stored post data on logging out.
	 * This could be added by add_action(&#039;login_head&#039;...) like wp_shake_js(),
	 * but maybe better if it&#039;s not removable by plugins.
	 */
	if ( &#039;loggedout&#039; === $wp_error-&gt;get_error_code() ) {
		?&gt;
		&lt;script&gt;if(&quot;sessionStorage&quot; in window){try{for(var key in sessionStorage){if(key.indexOf(&quot;wp-autosave-&quot;)!=-1){sessionStorage.removeItem(key)}}}catch(e){}};&lt;/script&gt;
		&lt;?php
	}

	/**
	 * Enqueue scripts and styles for the login page.
	 *
	 * @since 3.1.0
	 */
	do_action( &#039;login_enqueue_scripts&#039; );

	/**
	 * Fires in the login page header after scripts are enqueued.
	 *
	 * @since 2.1.0
	 */
	do_action( &#039;login_head&#039; );

	$login_header_url = __( &#039;https://wordpress.org/&#039; );

	/**
	 * Filters link URL of the header logo above login form.
	 *
	 * @since 2.1.0
	 *
	 * @param string $login_header_url Login header logo URL.
	 */
	$login_header_url = apply_filters( &#039;login_headerurl&#039;, $login_header_url );

	$login_header_title = &#039;&#039;;

	/**
	 * Filters the title attribute of the header logo above login form.
	 *
	 * @since 2.1.0
	 * @deprecated 5.2.0 Use {@see &#039;login_headertext&#039;} instead.
	 *
	 * @param string $login_header_title Login header logo title attribute.
	 */
	$login_header_title = apply_filters_deprecated(
		&#039;login_headertitle&#039;,
		array( $login_header_title ),
		&#039;5.2.0&#039;,
		&#039;login_headertext&#039;,
		__( &#039;Usage of the title attribute on the login logo is not recommended for accessibility reasons. Use the link text instead.&#039; )
	);

	$login_header_text = empty( $login_header_title ) ? __( &#039;Powered by WordPress&#039; ) : $login_header_title;

	/**
	 * Filters the link text of the header logo above the login form.
	 *
	 * @since 5.2.0
	 *
	 * @param string $login_header_text The login header logo link text.
	 */
	$login_header_text = apply_filters( &#039;login_headertext&#039;, $login_header_text );

	$classes = array( &#039;login-action-&#039; . $action, &#039;wp-core-ui&#039; );

	if ( is_rtl() ) {
		$classes[] = &#039;rtl&#039;;
	}

	if ( $interim_login ) {
		$classes[] = &#039;interim-login&#039;;

		?&gt;
		&lt;style type=&quot;text/css&quot;&gt;html{background-color: transparent;}&lt;/style&gt;
		&lt;?php

		if ( &#039;success&#039; === $interim_login ) {
			$classes[] = &#039;interim-login-success&#039;;
		}
	}

	$classes[] = &#039; locale-&#039; . sanitize_html_class( strtolower( str_replace( &#039;_&#039;, &#039;-&#039;, get_locale() ) ) );

	/**
	 * Filters the login page body classes.
	 *
	 * @since 3.5.0
	 *
	 * @param array  $classes An array of body classes.
	 * @param string $action  The action that brought the visitor to the login page.
	 */
	$classes = apply_filters( &#039;login_body_class&#039;, $classes, $action );

	?&gt;
	&lt;/head&gt;
	&lt;body class=&quot;login no-js &lt;?php echo esc_attr( implode( &#039; &#039;, $classes ) ); ?&gt;&quot;&gt;
	&lt;script type=&quot;text/javascript&quot;&gt;
		document.body.className = document.body.className.replace(&#039;no-js&#039;,&#039;js&#039;);
	&lt;/script&gt;
	&lt;?php
	/**
	 * Fires in the login page header after the body tag is opened.
	 *
	 * @since 4.6.0
	 */
	do_action( &#039;login_header&#039; );

	?&gt;
	&lt;div id=&quot;login&quot;&gt;
		&lt;h1&gt;&lt;a href=&quot;&lt;?php echo esc_url( $login_header_url ); ?&gt;&quot;&gt;&lt;?php echo $login_header_text; ?&gt;&lt;/a&gt;&lt;/h1&gt;
	&lt;?php
	/**
	 * Filters the message to display above the login form.
	 *
	 * @since 2.1.0
	 *
	 * @param string $message Login message text.
	 */
	$message = apply_filters( &#039;login_message&#039;, $message );

	if ( ! empty( $message ) ) {
		echo $message . &quot;\n&quot;;
	}

	// In case a plugin uses $error rather than the $wp_errors object.
	if ( ! empty( $error ) ) {
		$wp_error-&gt;add( &#039;error&#039;, $error );
		unset( $error );
	}

	if ( $wp_error-&gt;has_errors() ) {
		$errors   = &#039;&#039;;
		$messages = &#039;&#039;;

		foreach ( $wp_error-&gt;get_error_codes() as $code ) {
			$severity = $wp_error-&gt;get_error_data( $code );
			foreach ( $wp_error-&gt;get_error_messages( $code ) as $error_message ) {
				if ( &#039;message&#039; === $severity ) {
					$messages .= &#039;	&#039; . $error_message . &quot;&lt;br /&gt;\n&quot;;
				} else {
					$errors .= &#039;	&#039; . $error_message . &quot;&lt;br /&gt;\n&quot;;
				}
			}
		}

		if ( ! empty( $errors ) ) {
			/**
			 * Filters the error messages displayed above the login form.
			 *
			 * @since 2.1.0
			 *
			 * @param string $errors Login error message.
			 */
			echo &#039;&lt;div id=&quot;login_error&quot;&gt;&#039; . apply_filters( &#039;login_errors&#039;, $errors ) . &quot;&lt;/div&gt;\n&quot;;
		}

		if ( ! empty( $messages ) ) {
			/**
			 * Filters instructional messages displayed above the login form.
			 *
			 * @since 2.5.0
			 *
			 * @param string $messages Login messages.
			 */
			echo &#039;&lt;p class=&quot;message&quot;&gt;&#039; . apply_filters( &#039;login_messages&#039;, $messages ) . &quot;&lt;/p&gt;\n&quot;;
		}
	}
} // End of login_header().

/**
 * Outputs the footer for the login page.
 *
 * @since 3.1.0
 *
 * @global bool|string $interim_login Whether interim login modal is being displayed. String &#039;success&#039;
 *                                    upon successful login.
 *
 * @param string $input_id Which input to auto-focus.
 */
function login_footer( $input_id = &#039;&#039; ) {
	global $interim_login;

	// Don&#039;t allow interim logins to navigate away from the page.
	if ( ! $interim_login ) {
		?&gt;
		&lt;p id=&quot;backtoblog&quot;&gt;
			&lt;?php
			$html_link = sprintf(
				&#039;&lt;a href=&quot;%s&quot;&gt;%s&lt;/a&gt;&#039;,
				esc_url( home_url( &#039;/&#039; ) ),
				sprintf(
					/* translators: %s: Site title. */
					_x( &#039;&amp;larr; Go to %s&#039;, &#039;site&#039; ),
					get_bloginfo( &#039;title&#039;, &#039;display&#039; )
				)
			);
			/**
			 * Filter the &quot;Go to site&quot; link displayed in the login page footer.
			 *
			 * @since 5.7.0
			 *
			 * @param string $link HTML link to the home URL of the current site.
			 */
			echo apply_filters( &#039;login_site_html_link&#039;, $html_link );
			?&gt;
		&lt;/p&gt;
		&lt;?php

		the_privacy_policy_link( &#039;&lt;div class=&quot;privacy-policy-page-link&quot;&gt;&#039;, &#039;&lt;/div&gt;&#039; );
	}

	?&gt;
	&lt;/div&gt;&lt;?php // End of &lt;div id=&quot;login&quot;&gt;. ?&gt;

	&lt;?php

	if ( ! empty( $input_id ) ) {
		?&gt;
		&lt;script type=&quot;text/javascript&quot;&gt;
		try{document.getElementById(&#039;&lt;?php echo $input_id; ?&gt;&#039;).focus();}catch(e){}
		if(typeof wpOnload==&#039;function&#039;)wpOnload();
		&lt;/script&gt;
		&lt;?php
	}

	/**
	 * Fires in the login page footer.
	 *
	 * @since 3.1.0
	 */
	do_action( &#039;login_footer&#039; );

	?&gt;
	&lt;div class=&quot;clear&quot;&gt;&lt;/div&gt;
	&lt;/body&gt;
	&lt;/html&gt;
	&lt;?php
}

/**
 * Outputs the JavaScript to handle the form shaking on the login page.
 *
 * @since 3.0.0
 */
function wp_shake_js() {
	?&gt;
	&lt;script type=&quot;text/javascript&quot;&gt;
	document.querySelector(&#039;form&#039;).classList.add(&#039;shake&#039;);
	&lt;/script&gt;
	&lt;?php
}

/**
 * Outputs the viewport meta tag for the login page.
 *
 * @since 3.7.0
 */
function wp_login_viewport_meta() {
	?&gt;
	&lt;meta name=&quot;viewport&quot; content=&quot;width=device-width&quot; /&gt;
	&lt;?php
}

//
// Main.
//

$action = isset( $_REQUEST[&#039;action&#039;] ) ? $_REQUEST[&#039;action&#039;] : &#039;login&#039;;
$errors = new WP_Error();

if ( isset( $_GET[&#039;key&#039;] ) ) {
	$action = &#039;resetpass&#039;;
}

if ( isset( $_GET[&#039;checkemail&#039;] ) ) {
	$action = &#039;checkemail&#039;;
}

$default_actions = array(
	&#039;confirm_admin_email&#039;,
	&#039;postpass&#039;,
	&#039;logout&#039;,
	&#039;lostpassword&#039;,
	&#039;retrievepassword&#039;,
	&#039;resetpass&#039;,
	&#039;rp&#039;,
	&#039;register&#039;,
	&#039;checkemail&#039;,
	&#039;confirmaction&#039;,
	&#039;login&#039;,
	WP_Recovery_Mode_Link_Service::LOGIN_ACTION_ENTERED,
);

// Validate action so as to default to the login screen.
if ( ! in_array( $action, $default_actions, true ) &amp;&amp; false === has_filter( &#039;login_form_&#039; . $action ) ) {
	$action = &#039;login&#039;;
}

nocache_headers();

header( &#039;Content-Type: &#039; . get_bloginfo( &#039;html_type&#039; ) . &#039;; charset=&#039; . get_bloginfo( &#039;charset&#039; ) );

if ( defined( &#039;RELOCATE&#039; ) &amp;&amp; RELOCATE ) { // Move flag is set.
	if ( isset( $_SERVER[&#039;PATH_INFO&#039;] ) &amp;&amp; ( $_SERVER[&#039;PATH_INFO&#039;] !== $_SERVER[&#039;PHP_SELF&#039;] ) ) {
		$_SERVER[&#039;PHP_SELF&#039;] = str_replace( $_SERVER[&#039;PATH_INFO&#039;], &#039;&#039;, $_SERVER[&#039;PHP_SELF&#039;] );
	}

	$url = dirname( set_url_scheme( &#039;http://&#039; . $_SERVER[&#039;HTTP_HOST&#039;] . $_SERVER[&#039;PHP_SELF&#039;] ) );

	if ( get_option( &#039;siteurl&#039; ) !== $url ) {
		update_option( &#039;siteurl&#039;, $url );
	}
}

// Set a cookie now to see if they are supported by the browser.
$secure = ( &#039;https&#039; === parse_url( wp_login_url(), PHP_URL_SCHEME ) );
setcookie( TEST_COOKIE, &#039;WP Cookie check&#039;, 0, COOKIEPATH, COOKIE_DOMAIN, $secure );

if ( SITECOOKIEPATH !== COOKIEPATH ) {
	setcookie( TEST_COOKIE, &#039;WP Cookie check&#039;, 0, SITECOOKIEPATH, COOKIE_DOMAIN, $secure );
}

/**
 * Fires when the login form is initialized.
 *
 * @since 3.2.0
 */
do_action( &#039;login_init&#039; );

/**
 * Fires before a specified login form action.
 *
 * The dynamic portion of the hook name, `$action`, refers to the action
 * that brought the visitor to the login form. Actions include &#039;postpass&#039;,
 * &#039;logout&#039;, &#039;lostpassword&#039;, etc.
 *
 * @since 2.8.0
 */
do_action( &quot;login_form_{$action}&quot; );

$http_post     = ( &#039;POST&#039; === $_SERVER[&#039;REQUEST_METHOD&#039;] );
$interim_login = isset( $_REQUEST[&#039;interim-login&#039;] );

/**
 * Filters the separator used between login form navigation links.
 *
 * @since 4.9.0
 *
 * @param string $login_link_separator The separator used between login form navigation links.
 */
$login_link_separator = apply_filters( &#039;login_link_separator&#039;, &#039; | &#039; );

switch ( $action ) {

	case &#039;confirm_admin_email&#039;:
		/*
		 * Note that `is_user_logged_in()` will return false immediately after logging in
		 * as the current user is not set, see wp-includes/pluggable.php.
		 * However this action runs on a redirect after logging in.
		 */
		if ( ! is_user_logged_in() ) {
			wp_safe_redirect( wp_login_url() );
			exit;
		}

		if ( ! empty( $_REQUEST[&#039;redirect_to&#039;] ) ) {
			$redirect_to = $_REQUEST[&#039;redirect_to&#039;];
		} else {
			$redirect_to = admin_url();
		}

		if ( current_user_can( &#039;manage_options&#039; ) ) {
			$admin_email = get_option( &#039;admin_email&#039; );
		} else {
			wp_safe_redirect( $redirect_to );
			exit;
		}

		/**
		 * Filters the interval for dismissing the admin email confirmation screen.
		 *
		 * If `0` (zero) is returned, the &quot;Remind me later&quot; link will not be displayed.
		 *
		 * @since 5.3.1
		 *
		 * @param int $interval Interval time (in seconds). Default is 3 days.
		 */
		$remind_interval = (int) apply_filters( &#039;admin_email_remind_interval&#039;, 3 * DAY_IN_SECONDS );

		if ( ! empty( $_GET[&#039;remind_me_later&#039;] ) ) {
			if ( ! wp_verify_nonce( $_GET[&#039;remind_me_later&#039;], &#039;remind_me_later_nonce&#039; ) ) {
				wp_safe_redirect( wp_login_url() );
				exit;
			}

			if ( $remind_interval &gt; 0 ) {
				update_option( &#039;admin_email_lifespan&#039;, time() + $remind_interval );
			}

			$redirect_to = add_query_arg( &#039;admin_email_remind_later&#039;, 1, $redirect_to );
			wp_safe_redirect( $redirect_to );
			exit;
		}

		if ( ! empty( $_POST[&#039;correct-admin-email&#039;] ) ) {
			if ( ! check_admin_referer( &#039;confirm_admin_email&#039;, &#039;confirm_admin_email_nonce&#039; ) ) {
				wp_safe_redirect( wp_login_url() );
				exit;
			}

			/**
			 * Filters the interval for redirecting the user to the admin email confirmation screen.
			 *
			 * If `0` (zero) is returned, the user will not be redirected.
			 *
			 * @since 5.3.0
			 *
			 * @param int $interval Interval time (in seconds). Default is 6 months.
			 */
			$admin_email_check_interval = (int) apply_filters( &#039;admin_email_check_interval&#039;, 6 * MONTH_IN_SECONDS );

			if ( $admin_email_check_interval &gt; 0 ) {
				update_option( &#039;admin_email_lifespan&#039;, time() + $admin_email_check_interval );
			}

			wp_safe_redirect( $redirect_to );
			exit;
		}

		login_header( __( &#039;Confirm your administration email&#039; ), &#039;&#039;, $errors );

		/**
		 * Fires before the admin email confirm form.
		 *
		 * @since 5.3.0
		 *
		 * @param WP_Error $errors A `WP_Error` object containing any errors generated by using invalid
		 *                         credentials. Note that the error object may not contain any errors.
		 */
		do_action( &#039;admin_email_confirm&#039;, $errors );

		?&gt;

		&lt;form class=&quot;admin-email-confirm-form&quot; name=&quot;admin-email-confirm-form&quot; action=&quot;&lt;?php echo esc_url( site_url( &#039;wp-login.php?action=confirm_admin_email&#039;, &#039;login_post&#039; ) ); ?&gt;&quot; method=&quot;post&quot;&gt;
			&lt;?php
			/**
			 * Fires inside the admin-email-confirm-form form tags, before the hidden fields.
			 *
			 * @since 5.3.0
			 */
			do_action( &#039;admin_email_confirm_form&#039; );

			wp_nonce_field( &#039;confirm_admin_email&#039;, &#039;confirm_admin_email_nonce&#039; );

			?&gt;
			&lt;input type=&quot;hidden&quot; name=&quot;redirect_to&quot; value=&quot;&lt;?php echo esc_attr( $redirect_to ); ?&gt;&quot; /&gt;

			&lt;h1 class=&quot;admin-email__heading&quot;&gt;
				&lt;?php _e( &#039;Administration email verification&#039; ); ?&gt;
			&lt;/h1&gt;
			&lt;p class=&quot;admin-email__details&quot;&gt;
				&lt;?php _e( &#039;Please verify that the &lt;strong&gt;administration email&lt;/strong&gt; for this website is still correct.&#039; ); ?&gt;
				&lt;?php

				/* translators: URL to the WordPress help section about admin email. */
				$admin_email_help_url = __( &#039;https://wordpress.org/support/article/settings-general-screen/#email-address&#039; );

				/* translators: Accessibility text. */
				$accessibility_text = sprintf( &#039;&lt;span class=&quot;screen-reader-text&quot;&gt; %s&lt;/span&gt;&#039;, __( &#039;(opens in a new tab)&#039; ) );

				printf(
					&#039;&lt;a href=&quot;%s&quot; rel=&quot;noopener&quot; target=&quot;_blank&quot;&gt;%s%s&lt;/a&gt;&#039;,
					esc_url( $admin_email_help_url ),
					__( &#039;Why is this important?&#039; ),
					$accessibility_text
				);

				?&gt;
			&lt;/p&gt;
			&lt;p class=&quot;admin-email__details&quot;&gt;
				&lt;?php

				printf(
					/* translators: %s: Admin email address. */
					__( &#039;Current administration email: %s&#039; ),
					&#039;&lt;strong&gt;&#039; . esc_html( $admin_email ) . &#039;&lt;/strong&gt;&#039;
				);

				?&gt;
			&lt;/p&gt;
			&lt;p class=&quot;admin-email__details&quot;&gt;
				&lt;?php _e( &#039;This email may be different from your personal email address.&#039; ); ?&gt;
			&lt;/p&gt;

			&lt;div class=&quot;admin-email__actions&quot;&gt;
				&lt;div class=&quot;admin-email__actions-primary&quot;&gt;
					&lt;?php

					$change_link = admin_url( &#039;options-general.php&#039; );
					$change_link = add_query_arg( &#039;highlight&#039;, &#039;confirm_admin_email&#039;, $change_link );

					?&gt;
					&lt;a class=&quot;button button-large&quot; href=&quot;&lt;?php echo esc_url( $change_link ); ?&gt;&quot;&gt;&lt;?php _e( &#039;Update&#039; ); ?&gt;&lt;/a&gt;
					&lt;input type=&quot;submit&quot; name=&quot;correct-admin-email&quot; id=&quot;correct-admin-email&quot; class=&quot;button button-primary button-large&quot; value=&quot;&lt;?php esc_attr_e( &#039;The email is correct&#039; ); ?&gt;&quot; /&gt;
				&lt;/div&gt;
				&lt;?php if ( $remind_interval &gt; 0 ) : ?&gt;
					&lt;div class=&quot;admin-email__actions-secondary&quot;&gt;
						&lt;?php

						$remind_me_link = wp_login_url( $redirect_to );
						$remind_me_link = add_query_arg(
							array(
								&#039;action&#039;          =&gt; &#039;confirm_admin_email&#039;,
								&#039;remind_me_later&#039; =&gt; wp_create_nonce( &#039;remind_me_later_nonce&#039; ),
							),
							$remind_me_link
						);

						?&gt;
						&lt;a href=&quot;&lt;?php echo esc_url( $remind_me_link ); ?&gt;&quot;&gt;&lt;?php _e( &#039;Remind me later&#039; ); ?&gt;&lt;/a&gt;
					&lt;/div&gt;
				&lt;?php endif; ?&gt;
			&lt;/div&gt;
		&lt;/form&gt;

		&lt;?php

		login_footer();
		break;

	case &#039;postpass&#039;:
		if ( ! array_key_exists( &#039;post_password&#039;, $_POST ) ) {
			wp_safe_redirect( wp_get_referer() );
			exit;
		}

		require_once ABSPATH . WPINC . &#039;/class-phpass.php&#039;;
		$hasher = new PasswordHash( 8, true );

		/**
		 * Filters the life span of the post password cookie.
		 *
		 * By default, the cookie expires 10 days from creation. To turn this
		 * into a session cookie, return 0.
		 *
		 * @since 3.7.0
		 *
		 * @param int $expires The expiry time, as passed to setcookie().
		 */
		$expire  = apply_filters( &#039;post_password_expires&#039;, time() + 10 * DAY_IN_SECONDS );
		$referer = wp_get_referer();

		if ( $referer ) {
			$secure = ( &#039;https&#039; === parse_url( $referer, PHP_URL_SCHEME ) );
		} else {
			$secure = false;
		}

		setcookie( &#039;wp-postpass_&#039; . COOKIEHASH, $hasher-&gt;HashPassword( wp_unslash( $_POST[&#039;post_password&#039;] ) ), $expire, COOKIEPATH, COOKIE_DOMAIN, $secure );

		wp_safe_redirect( wp_get_referer() );
		exit;

	case &#039;logout&#039;:
		check_admin_referer( &#039;log-out&#039; );

		$user = wp_get_current_user();

		wp_logout();

		if ( ! empty( $_REQUEST[&#039;redirect_to&#039;] ) ) {
			$redirect_to           = $_REQUEST[&#039;redirect_to&#039;];
			$requested_redirect_to = $redirect_to;
		} else {
			$redirect_to = add_query_arg(
				array(
					&#039;loggedout&#039; =&gt; &#039;true&#039;,
					&#039;wp_lang&#039;   =&gt; get_user_locale( $user ),
				),
				wp_login_url()
			);

			$requested_redirect_to = &#039;&#039;;
		}

		/**
		 * Filters the log out redirect URL.
		 *
		 * @since 4.2.0
		 *
		 * @param string  $redirect_to           The redirect destination URL.
		 * @param string  $requested_redirect_to The requested redirect destination URL passed as a parameter.
		 * @param WP_User $user                  The WP_User object for the user that&#039;s logging out.
		 */
		$redirect_to = apply_filters( &#039;logout_redirect&#039;, $redirect_to, $requested_redirect_to, $user );

		wp_safe_redirect( $redirect_to );
		exit;

	case &#039;lostpassword&#039;:
	case &#039;retrievepassword&#039;:
		if ( $http_post ) {
			$errors = retrieve_password();

			if ( ! is_wp_error( $errors ) ) {
				$redirect_to = ! empty( $_REQUEST[&#039;redirect_to&#039;] ) ? $_REQUEST[&#039;redirect_to&#039;] : &#039;wp-login.php?checkemail=confirm&#039;;
				wp_safe_redirect( $redirect_to );
				exit;
			}
		}

		if ( isset( $_GET[&#039;error&#039;] ) ) {
			if ( &#039;invalidkey&#039; === $_GET[&#039;error&#039;] ) {
				$errors-&gt;add( &#039;invalidkey&#039;, __( &#039;Your password reset link appears to be invalid. Please request a new link below.&#039; ) );
			} elseif ( &#039;expiredkey&#039; === $_GET[&#039;error&#039;] ) {
				$errors-&gt;add( &#039;expiredkey&#039;, __( &#039;Your password reset link has expired. Please request a new link below.&#039; ) );
			}
		}

		$lostpassword_redirect = ! empty( $_REQUEST[&#039;redirect_to&#039;] ) ? $_REQUEST[&#039;redirect_to&#039;] : &#039;&#039;;
		/**
		 * Filters the URL redirected to after submitting the lostpassword/retrievepassword form.
		 *
		 * @since 3.0.0
		 *
		 * @param string $lostpassword_redirect The redirect destination URL.
		 */
		$redirect_to = apply_filters( &#039;lostpassword_redirect&#039;, $lostpassword_redirect );

		/**
		 * Fires before the lost password form.
		 *
		 * @since 1.5.1
		 * @since 5.1.0 Added the `$errors` parameter.
		 *
		 * @param WP_Error $errors A `WP_Error` object containing any errors generated by using invalid
		 *                         credentials. Note that the error object may not contain any errors.
		 */
		do_action( &#039;lost_password&#039;, $errors );

		login_header( __( &#039;Lost Password&#039; ), &#039;&lt;p class=&quot;message&quot;&gt;&#039; . __( &#039;Please enter your username or email address. You will receive an email message with instructions on how to reset your password.&#039; ) . &#039;&lt;/p&gt;&#039;, $errors );

		$user_login = &#039;&#039;;

		if ( isset( $_POST[&#039;user_login&#039;] ) &amp;&amp; is_string( $_POST[&#039;user_login&#039;] ) ) {
			$user_login = wp_unslash( $_POST[&#039;user_login&#039;] );
		}

		?&gt;

		&lt;form name=&quot;lostpasswordform&quot; id=&quot;lostpasswordform&quot; action=&quot;&lt;?php echo esc_url( network_site_url( &#039;wp-login.php?action=lostpassword&#039;, &#039;login_post&#039; ) ); ?&gt;&quot; method=&quot;post&quot;&gt;
			&lt;p&gt;
				&lt;label for=&quot;user_login&quot;&gt;&lt;?php _e( &#039;Username or Email Address&#039; ); ?&gt;&lt;/label&gt;
				&lt;input type=&quot;text&quot; name=&quot;user_login&quot; id=&quot;user_login&quot; class=&quot;input&quot; value=&quot;&lt;?php echo esc_attr( $user_login ); ?&gt;&quot; size=&quot;20&quot; autocapitalize=&quot;off&quot; /&gt;
			&lt;/p&gt;
			&lt;?php

			/**
			 * Fires inside the lostpassword form tags, before the hidden fields.
			 *
			 * @since 2.1.0
			 */
			do_action( &#039;lostpassword_form&#039; );

			?&gt;
			&lt;input type=&quot;hidden&quot; name=&quot;redirect_to&quot; value=&quot;&lt;?php echo esc_attr( $redirect_to ); ?&gt;&quot; /&gt;
			&lt;p class=&quot;submit&quot;&gt;
				&lt;input type=&quot;submit&quot; name=&quot;wp-submit&quot; id=&quot;wp-submit&quot; class=&quot;button button-primary button-large&quot; value=&quot;&lt;?php esc_attr_e( &#039;Get New Password&#039; ); ?&gt;&quot; /&gt;
			&lt;/p&gt;
		&lt;/form&gt;

		&lt;p id=&quot;nav&quot;&gt;
			&lt;a href=&quot;&lt;?php echo esc_url( wp_login_url() ); ?&gt;&quot;&gt;&lt;?php _e( &#039;Log in&#039; ); ?&gt;&lt;/a&gt;
			&lt;?php

			if ( get_option( &#039;users_can_register&#039; ) ) {
				$registration_url = sprintf( &#039;&lt;a href=&quot;%s&quot;&gt;%s&lt;/a&gt;&#039;, esc_url( wp_registration_url() ), __( &#039;Register&#039; ) );

				echo esc_html( $login_link_separator );

				/** This filter is documented in wp-includes/general-template.php */
				echo apply_filters( &#039;register&#039;, $registration_url );
			}

			?&gt;
		&lt;/p&gt;
		&lt;?php

		login_footer( &#039;user_login&#039; );
		break;

	case &#039;resetpass&#039;:
	case &#039;rp&#039;:
		list( $rp_path ) = explode( &#039;?&#039;, wp_unslash( $_SERVER[&#039;REQUEST_URI&#039;] ) );
		$rp_cookie       = &#039;wp-resetpass-&#039; . COOKIEHASH;

		if ( isset( $_GET[&#039;key&#039;] ) ) {
			$value = sprintf( &#039;%s:%s&#039;, wp_unslash( $_GET[&#039;login&#039;] ), wp_unslash( $_GET[&#039;key&#039;] ) );
			setcookie( $rp_cookie, $value, 0, $rp_path, COOKIE_DOMAIN, is_ssl(), true );

			wp_safe_redirect( remove_query_arg( array( &#039;key&#039;, &#039;login&#039; ) ) );
			exit;
		}

		if ( isset( $_COOKIE[ $rp_cookie ] ) &amp;&amp; 0 &lt; strpos( $_COOKIE[ $rp_cookie ], &#039;:&#039; ) ) {
			list( $rp_login, $rp_key ) = explode( &#039;:&#039;, wp_unslash( $_COOKIE[ $rp_cookie ] ), 2 );

			$user = check_password_reset_key( $rp_key, $rp_login );

			if ( isset( $_POST[&#039;pass1&#039;] ) &amp;&amp; ! hash_equals( $rp_key, $_POST[&#039;rp_key&#039;] ) ) {
				$user = false;
			}
		} else {
			$user = false;
		}

		if ( ! $user || is_wp_error( $user ) ) {
			setcookie( $rp_cookie, &#039; &#039;, time() - YEAR_IN_SECONDS, $rp_path, COOKIE_DOMAIN, is_ssl(), true );

			if ( $user &amp;&amp; $user-&gt;get_error_code() === &#039;expired_key&#039; ) {
				wp_redirect( site_url( &#039;wp-login.php?action=lostpassword&amp;error=expiredkey&#039; ) );
			} else {
				wp_redirect( site_url( &#039;wp-login.php?action=lostpassword&amp;error=invalidkey&#039; ) );
			}

			exit;
		}

		$errors = new WP_Error();

		if ( isset( $_POST[&#039;pass1&#039;] ) &amp;&amp; $_POST[&#039;pass1&#039;] !== $_POST[&#039;pass2&#039;] ) {
			$errors-&gt;add( &#039;password_reset_mismatch&#039;, __( &#039;The passwords do not match.&#039; ) );
		}

		/**
		 * Fires before the password reset procedure is validated.
		 *
		 * @since 3.5.0
		 *
		 * @param WP_Error         $errors WP Error object.
		 * @param WP_User|WP_Error $user   WP_User object if the login and reset key match. WP_Error object otherwise.
		 */
		do_action( &#039;validate_password_reset&#039;, $errors, $user );

		if ( ( ! $errors-&gt;has_errors() ) &amp;&amp; isset( $_POST[&#039;pass1&#039;] ) &amp;&amp; ! empty( $_POST[&#039;pass1&#039;] ) ) {
			reset_password( $user, $_POST[&#039;pass1&#039;] );
			setcookie( $rp_cookie, &#039; &#039;, time() - YEAR_IN_SECONDS, $rp_path, COOKIE_DOMAIN, is_ssl(), true );
			login_header( __( &#039;Password Reset&#039; ), &#039;&lt;p class=&quot;message reset-pass&quot;&gt;&#039; . __( &#039;Your password has been reset.&#039; ) . &#039; &lt;a href=&quot;&#039; . esc_url( wp_login_url() ) . &#039;&quot;&gt;&#039; . __( &#039;Log in&#039; ) . &#039;&lt;/a&gt;&lt;/p&gt;&#039; );
			login_footer();
			exit;
		}

		wp_enqueue_script( &#039;utils&#039; );
		wp_enqueue_script( &#039;user-profile&#039; );

		login_header( __( &#039;Reset Password&#039; ), &#039;&lt;p class=&quot;message reset-pass&quot;&gt;&#039; . __( &#039;Enter your new password below or generate one.&#039; ) . &#039;&lt;/p&gt;&#039;, $errors );

		?&gt;
		&lt;form name=&quot;resetpassform&quot; id=&quot;resetpassform&quot; action=&quot;&lt;?php echo esc_url( network_site_url( &#039;wp-login.php?action=resetpass&#039;, &#039;login_post&#039; ) ); ?&gt;&quot; method=&quot;post&quot; autocomplete=&quot;off&quot;&gt;
			&lt;input type=&quot;hidden&quot; id=&quot;user_login&quot; value=&quot;&lt;?php echo esc_attr( $rp_login ); ?&gt;&quot; autocomplete=&quot;off&quot; /&gt;

			&lt;div class=&quot;user-pass1-wrap&quot;&gt;
				&lt;p&gt;
					&lt;label for=&quot;pass1&quot;&gt;&lt;?php _e( &#039;New password&#039; ); ?&gt;&lt;/label&gt;
				&lt;/p&gt;

				&lt;div class=&quot;wp-pwd&quot;&gt;
					&lt;input type=&quot;password&quot; data-reveal=&quot;1&quot; data-pw=&quot;&lt;?php echo esc_attr( wp_generate_password( 16 ) ); ?&gt;&quot; name=&quot;pass1&quot; id=&quot;pass1&quot; class=&quot;input password-input&quot; size=&quot;24&quot; value=&quot;&quot; autocomplete=&quot;off&quot; aria-describedby=&quot;pass-strength-result&quot; /&gt;

					&lt;button type=&quot;button&quot; class=&quot;button button-secondary wp-hide-pw hide-if-no-js&quot; data-toggle=&quot;0&quot; aria-label=&quot;&lt;?php esc_attr_e( &#039;Hide password&#039; ); ?&gt;&quot;&gt;
						&lt;span class=&quot;dashicons dashicons-hidden&quot; aria-hidden=&quot;true&quot;&gt;&lt;/span&gt;
					&lt;/button&gt;
					&lt;div id=&quot;pass-strength-result&quot; class=&quot;hide-if-no-js&quot; aria-live=&quot;polite&quot;&gt;&lt;?php _e( &#039;Strength indicator&#039; ); ?&gt;&lt;/div&gt;
				&lt;/div&gt;
				&lt;div class=&quot;pw-weak&quot;&gt;
					&lt;input type=&quot;checkbox&quot; name=&quot;pw_weak&quot; id=&quot;pw-weak&quot; class=&quot;pw-checkbox&quot; /&gt;
					&lt;label for=&quot;pw-weak&quot;&gt;&lt;?php _e( &#039;Confirm use of weak password&#039; ); ?&gt;&lt;/label&gt;
				&lt;/div&gt;
			&lt;/div&gt;

			&lt;p class=&quot;user-pass2-wrap&quot;&gt;
				&lt;label for=&quot;pass2&quot;&gt;&lt;?php _e( &#039;Confirm new password&#039; ); ?&gt;&lt;/label&gt;
				&lt;input type=&quot;password&quot; name=&quot;pass2&quot; id=&quot;pass2&quot; class=&quot;input&quot; size=&quot;20&quot; value=&quot;&quot; autocomplete=&quot;off&quot; /&gt;
			&lt;/p&gt;

			&lt;p class=&quot;description indicator-hint&quot;&gt;&lt;?php echo wp_get_password_hint(); ?&gt;&lt;/p&gt;
			&lt;br class=&quot;clear&quot; /&gt;

			&lt;?php

			/**
			 * Fires following the &#039;Strength indicator&#039; meter in the user password reset form.
			 *
			 * @since 3.9.0
			 *
			 * @param WP_User $user User object of the user whose password is being reset.
			 */
			do_action( &#039;resetpass_form&#039;, $user );

			?&gt;
			&lt;input type=&quot;hidden&quot; name=&quot;rp_key&quot; value=&quot;&lt;?php echo esc_attr( $rp_key ); ?&gt;&quot; /&gt;
			&lt;p class=&quot;submit reset-pass-submit&quot;&gt;
				&lt;button type=&quot;button&quot; class=&quot;button wp-generate-pw hide-if-no-js&quot; aria-expanded=&quot;true&quot;&gt;&lt;?php _e( &#039;Generate Password&#039; ); ?&gt;&lt;/button&gt;
				&lt;input type=&quot;submit&quot; name=&quot;wp-submit&quot; id=&quot;wp-submit&quot; class=&quot;button button-primary button-large&quot; value=&quot;&lt;?php esc_attr_e( &#039;Save Password&#039; ); ?&gt;&quot; /&gt;
			&lt;/p&gt;
		&lt;/form&gt;

		&lt;p id=&quot;nav&quot;&gt;
			&lt;a href=&quot;&lt;?php echo esc_url( wp_login_url() ); ?&gt;&quot;&gt;&lt;?php _e( &#039;Log in&#039; ); ?&gt;&lt;/a&gt;
			&lt;?php

			if ( get_option( &#039;users_can_register&#039; ) ) {
				$registration_url = sprintf( &#039;&lt;a href=&quot;%s&quot;&gt;%s&lt;/a&gt;&#039;, esc_url( wp_registration_url() ), __( &#039;Register&#039; ) );

				echo esc_html( $login_link_separator );

				/** This filter is documented in wp-includes/general-template.php */
				echo apply_filters( &#039;register&#039;, $registration_url );
			}

			?&gt;
		&lt;/p&gt;
		&lt;?php

		login_footer( &#039;user_pass&#039; );
		break;

	case &#039;register&#039;:
		if ( is_multisite() ) {
			/**
			 * Filters the Multisite sign up URL.
			 *
			 * @since 3.0.0
			 *
			 * @param string $sign_up_url The sign up URL.
			 */
			wp_redirect( apply_filters( &#039;wp_signup_location&#039;, network_site_url( &#039;wp-signup.php&#039; ) ) );
			exit;
		}

		if ( ! get_option( &#039;users_can_register&#039; ) ) {
			wp_redirect( site_url( &#039;wp-login.php?registration=disabled&#039; ) );
			exit;
		}

		$user_login = &#039;&#039;;
		$user_email = &#039;&#039;;

		if ( $http_post ) {
			if ( isset( $_POST[&#039;user_login&#039;] ) &amp;&amp; is_string( $_POST[&#039;user_login&#039;] ) ) {
				$user_login = wp_unslash( $_POST[&#039;user_login&#039;] );
			}

			if ( isset( $_POST[&#039;user_email&#039;] ) &amp;&amp; is_string( $_POST[&#039;user_email&#039;] ) ) {
				$user_email = wp_unslash( $_POST[&#039;user_email&#039;] );
			}

			$errors = register_new_user( $user_login, $user_email );

			if ( ! is_wp_error( $errors ) ) {
				$redirect_to = ! empty( $_POST[&#039;redirect_to&#039;] ) ? $_POST[&#039;redirect_to&#039;] : &#039;wp-login.php?checkemail=registered&#039;;
				wp_safe_redirect( $redirect_to );
				exit;
			}
		}

		$registration_redirect = ! empty( $_REQUEST[&#039;redirect_to&#039;] ) ? $_REQUEST[&#039;redirect_to&#039;] : &#039;&#039;;

		/**
		 * Filters the registration redirect URL.
		 *
		 * @since 3.0.0
		 *
		 * @param string $registration_redirect The redirect destination URL.
		 */
		$redirect_to = apply_filters( &#039;registration_redirect&#039;, $registration_redirect );

		login_header( __( &#039;Registration Form&#039; ), &#039;&lt;p class=&quot;message register&quot;&gt;&#039; . __( &#039;Register For This Site&#039; ) . &#039;&lt;/p&gt;&#039;, $errors );

		?&gt;
		&lt;form name=&quot;registerform&quot; id=&quot;registerform&quot; action=&quot;&lt;?php echo esc_url( site_url( &#039;wp-login.php?action=register&#039;, &#039;login_post&#039; ) ); ?&gt;&quot; method=&quot;post&quot; novalidate=&quot;novalidate&quot;&gt;
			&lt;p&gt;
				&lt;label for=&quot;user_login&quot;&gt;&lt;?php _e( &#039;Username&#039; ); ?&gt;&lt;/label&gt;
				&lt;input type=&quot;text&quot; name=&quot;user_login&quot; id=&quot;user_login&quot; class=&quot;input&quot; value=&quot;&lt;?php echo esc_attr( wp_unslash( $user_login ) ); ?&gt;&quot; size=&quot;20&quot; autocapitalize=&quot;off&quot; /&gt;
			&lt;/p&gt;
			&lt;p&gt;
				&lt;label for=&quot;user_email&quot;&gt;&lt;?php _e( &#039;Email&#039; ); ?&gt;&lt;/label&gt;
				&lt;input type=&quot;email&quot; name=&quot;user_email&quot; id=&quot;user_email&quot; class=&quot;input&quot; value=&quot;&lt;?php echo esc_attr( wp_unslash( $user_email ) ); ?&gt;&quot; size=&quot;25&quot; /&gt;
			&lt;/p&gt;
			&lt;?php

			/**
			 * Fires following the &#039;Email&#039; field in the user registration form.
			 *
			 * @since 2.1.0
			 */
			do_action( &#039;register_form&#039; );

			?&gt;
			&lt;p id=&quot;reg_passmail&quot;&gt;
				&lt;?php _e( &#039;Registration confirmation will be emailed to you.&#039; ); ?&gt;
			&lt;/p&gt;
			&lt;br class=&quot;clear&quot; /&gt;
			&lt;input type=&quot;hidden&quot; name=&quot;redirect_to&quot; value=&quot;&lt;?php echo esc_attr( $redirect_to ); ?&gt;&quot; /&gt;
			&lt;p class=&quot;submit&quot;&gt;
				&lt;input type=&quot;submit&quot; name=&quot;wp-submit&quot; id=&quot;wp-submit&quot; class=&quot;button button-primary button-large&quot; value=&quot;&lt;?php esc_attr_e( &#039;Register&#039; ); ?&gt;&quot; /&gt;
			&lt;/p&gt;
		&lt;/form&gt;

		&lt;p id=&quot;nav&quot;&gt;
			&lt;a href=&quot;&lt;?php echo esc_url( wp_login_url() ); ?&gt;&quot;&gt;&lt;?php _e( &#039;Log in&#039; ); ?&gt;&lt;/a&gt;
				&lt;?php echo esc_html( $login_link_separator ); ?&gt;
			&lt;a href=&quot;&lt;?php echo esc_url( wp_lostpassword_url() ); ?&gt;&quot;&gt;&lt;?php _e( &#039;Lost your password?&#039; ); ?&gt;&lt;/a&gt;
		&lt;/p&gt;
		&lt;?php

		login_footer( &#039;user_login&#039; );
		break;

	case &#039;checkemail&#039;:
		$redirect_to = admin_url();
		$errors      = new WP_Error();

		if ( &#039;confirm&#039; === $_GET[&#039;checkemail&#039;] ) {
			$errors-&gt;add(
				&#039;confirm&#039;,
				sprintf(
					/* translators: %s: Link to the login page. */
					__( &#039;Check your email for the confirmation link, then visit the &lt;a href=&quot;%s&quot;&gt;login page&lt;/a&gt;.&#039; ),
					wp_login_url()
				),
				&#039;message&#039;
			);
		} elseif ( &#039;registered&#039; === $_GET[&#039;checkemail&#039;] ) {
			$errors-&gt;add(
				&#039;registered&#039;,
				sprintf(
					/* translators: %s: Link to the login page. */
					__( &#039;Registration complete. Please check your email, then visit the &lt;a href=&quot;%s&quot;&gt;login page&lt;/a&gt;.&#039; ),
					wp_login_url()
				),
				&#039;message&#039;
			);
		}

		/** This action is documented in wp-login.php */
		$errors = apply_filters( &#039;wp_login_errors&#039;, $errors, $redirect_to );

		login_header( __( &#039;Check your email&#039; ), &#039;&#039;, $errors );
		login_footer();
		break;

	case &#039;confirmaction&#039;:
		if ( ! isset( $_GET[&#039;request_id&#039;] ) ) {
			wp_die( __( &#039;Missing request ID.&#039; ) );
		}

		if ( ! isset( $_GET[&#039;confirm_key&#039;] ) ) {
			wp_die( __( &#039;Missing confirm key.&#039; ) );
		}

		$request_id = (int) $_GET[&#039;request_id&#039;];
		$key        = sanitize_text_field( wp_unslash( $_GET[&#039;confirm_key&#039;] ) );
		$result     = wp_validate_user_request_key( $request_id, $key );

		if ( is_wp_error( $result ) ) {
			wp_die( $result );
		}

		/**
		 * Fires an action hook when the account action has been confirmed by the user.
		 *
		 * Using this you can assume the user has agreed to perform the action by
		 * clicking on the link in the confirmation email.
		 *
		 * After firing this action hook the page will redirect to wp-login a callback
		 * redirects or exits first.
		 *
		 * @since 4.9.6
		 *
		 * @param int $request_id Request ID.
		 */
		do_action( &#039;user_request_action_confirmed&#039;, $request_id );

		$message = _wp_privacy_account_request_confirmed_message( $request_id );

		login_header( __( &#039;User action confirmed.&#039; ), $message );
		login_footer();
		exit;

	case &#039;login&#039;:
	default:
		$secure_cookie   = &#039;&#039;;
		$customize_login = isset( $_REQUEST[&#039;customize-login&#039;] );

		if ( $customize_login ) {
			wp_enqueue_script( &#039;customize-base&#039; );
		}

		// If the user wants SSL but the session is not SSL, force a secure cookie.
		if ( ! empty( $_POST[&#039;log&#039;] ) &amp;&amp; ! force_ssl_admin() ) {
			$user_name = sanitize_user( wp_unslash( $_POST[&#039;log&#039;] ) );
			$user      = get_user_by( &#039;login&#039;, $user_name );

			if ( ! $user &amp;&amp; strpos( $user_name, &#039;@&#039; ) ) {
				$user = get_user_by( &#039;email&#039;, $user_name );
			}

			if ( $user ) {
				if ( get_user_option( &#039;use_ssl&#039;, $user-&gt;ID ) ) {
					$secure_cookie = true;
					force_ssl_admin( true );
				}
			}
		}

		if ( isset( $_REQUEST[&#039;redirect_to&#039;] ) ) {
			$redirect_to = $_REQUEST[&#039;redirect_to&#039;];
			// Redirect to HTTPS if user wants SSL.
			if ( $secure_cookie &amp;&amp; false !== strpos( $redirect_to, &#039;wp-admin&#039; ) ) {
				$redirect_to = preg_replace( &#039;|^http://|&#039;, &#039;https://&#039;, $redirect_to );
			}
		} else {
			$redirect_to = admin_url();
		}

		$reauth = empty( $_REQUEST[&#039;reauth&#039;] ) ? false : true;

		$user = wp_signon( array(), $secure_cookie );

		if ( empty( $_COOKIE[ LOGGED_IN_COOKIE ] ) ) {
			if ( headers_sent() ) {
				$user = new WP_Error(
					&#039;test_cookie&#039;,
					sprintf(
						/* translators: 1: Browser cookie documentation URL, 2: Support forums URL. */
						__( &#039;&lt;strong&gt;Error&lt;/strong&gt;: Cookies are blocked due to unexpected output. For help, please see &lt;a href=&quot;%1$s&quot;&gt;this documentation&lt;/a&gt; or try the &lt;a href=&quot;%2$s&quot;&gt;support forums&lt;/a&gt;.&#039; ),
						__( &#039;https://wordpress.org/support/article/cookies/&#039; ),
						__( &#039;https://wordpress.org/support/forums/&#039; )
					)
				);
			} elseif ( isset( $_POST[&#039;testcookie&#039;] ) &amp;&amp; empty( $_COOKIE[ TEST_COOKIE ] ) ) {
				// If cookies are disabled, we can&#039;t log in even with a valid user and password.
				$user = new WP_Error(
					&#039;test_cookie&#039;,
					sprintf(
						/* translators: %s: Browser cookie documentation URL. */
						__( &#039;&lt;strong&gt;Error&lt;/strong&gt;: Cookies are blocked or not supported by your browser. You must &lt;a href=&quot;%s&quot;&gt;enable cookies&lt;/a&gt; to use WordPress.&#039; ),
						__( &#039;https://wordpress.org/support/article/cookies/#enable-cookies-in-your-browser&#039; )
					)
				);
			}
		}

		$requested_redirect_to = isset( $_REQUEST[&#039;redirect_to&#039;] ) ? $_REQUEST[&#039;redirect_to&#039;] : &#039;&#039;;
		/**
		 * Filters the login redirect URL.
		 *
		 * @since 3.0.0
		 *
		 * @param string           $redirect_to           The redirect destination URL.
		 * @param string           $requested_redirect_to The requested redirect destination URL passed as a parameter.
		 * @param WP_User|WP_Error $user                  WP_User object if login was successful, WP_Error object otherwise.
		 */
		$redirect_to = apply_filters( &#039;login_redirect&#039;, $redirect_to, $requested_redirect_to, $user );

		if ( ! is_wp_error( $user ) &amp;&amp; ! $reauth ) {
			if ( $interim_login ) {
				$message       = &#039;&lt;p class=&quot;message&quot;&gt;&#039; . __( &#039;You have logged in successfully.&#039; ) . &#039;&lt;/p&gt;&#039;;
				$interim_login = &#039;success&#039;;
				login_header( &#039;&#039;, $message );

				?&gt;
				&lt;/div&gt;
				&lt;?php

				/** This action is documented in wp-login.php */
				do_action( &#039;login_footer&#039; );

				if ( $customize_login ) {
					?&gt;
					&lt;script type=&quot;text/javascript&quot;&gt;setTimeout( function(){ new wp.customize.Messenger({ url: &#039;&lt;?php echo wp_customize_url(); ?&gt;&#039;, channel: &#039;login&#039; }).send(&#039;login&#039;) }, 1000 );&lt;/script&gt;
					&lt;?php
				}

				?&gt;
				&lt;/body&gt;&lt;/html&gt;
				&lt;?php

				exit;
			}

			// Check if it is time to add a redirect to the admin email confirmation screen.
			if ( is_a( $user, &#039;WP_User&#039; ) &amp;&amp; $user-&gt;exists() &amp;&amp; $user-&gt;has_cap( &#039;manage_options&#039; ) ) {
				$admin_email_lifespan = (int) get_option( &#039;admin_email_lifespan&#039; );

				// If `0` (or anything &quot;falsey&quot; as it is cast to int) is returned, the user will not be redirected
				// to the admin email confirmation screen.
				/** This filter is documented in wp-login.php */
				$admin_email_check_interval = (int) apply_filters( &#039;admin_email_check_interval&#039;, 6 * MONTH_IN_SECONDS );

				if ( $admin_email_check_interval &gt; 0 &amp;&amp; time() &gt; $admin_email_lifespan ) {
					$redirect_to = add_query_arg(
						array(
							&#039;action&#039;  =&gt; &#039;confirm_admin_email&#039;,
							&#039;wp_lang&#039; =&gt; get_user_locale( $user ),
						),
						wp_login_url( $redirect_to )
					);
				}
			}

			if ( ( empty( $redirect_to ) || &#039;wp-admin/&#039; === $redirect_to || admin_url() === $redirect_to ) ) {
				// If the user doesn&#039;t belong to a blog, send them to user admin. If the user can&#039;t edit posts, send them to their profile.
				if ( is_multisite() &amp;&amp; ! get_active_blog_for_user( $user-&gt;ID ) &amp;&amp; ! is_super_admin( $user-&gt;ID ) ) {
					$redirect_to = user_admin_url();
				} elseif ( is_multisite() &amp;&amp; ! $user-&gt;has_cap( &#039;read&#039; ) ) {
					$redirect_to = get_dashboard_url( $user-&gt;ID );
				} elseif ( ! $user-&gt;has_cap( &#039;edit_posts&#039; ) ) {
					$redirect_to = $user-&gt;has_cap( &#039;read&#039; ) ? admin_url( &#039;profile.php&#039; ) : home_url();
				}

				wp_redirect( $redirect_to );
				exit;
			}

			wp_safe_redirect( $redirect_to );
			exit;
		}

		$errors = $user;
		// Clear errors if loggedout is set.
		if ( ! empty( $_GET[&#039;loggedout&#039;] ) || $reauth ) {
			$errors = new WP_Error();
		}

		if ( empty( $_POST ) &amp;&amp; $errors-&gt;get_error_codes() === array( &#039;empty_username&#039;, &#039;empty_password&#039; ) ) {
			$errors = new WP_Error( &#039;&#039;, &#039;&#039; );
		}

		if ( $interim_login ) {
			if ( ! $errors-&gt;has_errors() ) {
				$errors-&gt;add( &#039;expired&#039;, __( &#039;Your session has expired. Please log in to continue where you left off.&#039; ), &#039;message&#039; );
			}
		} else {
			// Some parts of this script use the main login form to display a message.
			if ( isset( $_GET[&#039;loggedout&#039;] ) &amp;&amp; $_GET[&#039;loggedout&#039;] ) {
				$errors-&gt;add( &#039;loggedout&#039;, __( &#039;You are now logged out.&#039; ), &#039;message&#039; );
			} elseif ( isset( $_GET[&#039;registration&#039;] ) &amp;&amp; &#039;disabled&#039; === $_GET[&#039;registration&#039;] ) {
				$errors-&gt;add( &#039;registerdisabled&#039;, __( &#039;User registration is currently not allowed.&#039; ) );
			} elseif ( strpos( $redirect_to, &#039;about.php?updated&#039; ) ) {
				$errors-&gt;add( &#039;updated&#039;, __( &#039;&lt;strong&gt;You have successfully updated WordPress!&lt;/strong&gt; Please log back in to see what&amp;#8217;s new.&#039; ), &#039;message&#039; );
			} elseif ( WP_Recovery_Mode_Link_Service::LOGIN_ACTION_ENTERED === $action ) {
				$errors-&gt;add( &#039;enter_recovery_mode&#039;, __( &#039;Recovery Mode Initialized. Please log in to continue.&#039; ), &#039;message&#039; );
			} elseif ( isset( $_GET[&#039;redirect_to&#039;] ) &amp;&amp; false !== strpos( $_GET[&#039;redirect_to&#039;], &#039;wp-admin/authorize-application.php&#039; ) ) {
				$query_component = wp_parse_url( $_GET[&#039;redirect_to&#039;], PHP_URL_QUERY );
				parse_str( $query_component, $query );

				if ( ! empty( $query[&#039;app_name&#039;] ) ) {
					/* translators: 1: Website name, 2: Application name. */
					$message = sprintf( &#039;Please log in to %1$s to authorize %2$s to connect to your account.&#039;, get_bloginfo( &#039;name&#039;, &#039;display&#039; ), &#039;&lt;strong&gt;&#039; . esc_html( $query[&#039;app_name&#039;] ) . &#039;&lt;/strong&gt;&#039; );
				} else {
					/* translators: %s: Website name. */
					$message = sprintf( &#039;Please log in to %s to proceed with authorization.&#039;, get_bloginfo( &#039;name&#039;, &#039;display&#039; ) );
				}

				$errors-&gt;add( &#039;authorize_application&#039;, $message, &#039;message&#039; );
			}
		}

		/**
		 * Filters the login page errors.
		 *
		 * @since 3.6.0
		 *
		 * @param WP_Error $errors      WP Error object.
		 * @param string   $redirect_to Redirect destination URL.
		 */
		$errors = apply_filters( &#039;wp_login_errors&#039;, $errors, $redirect_to );

		// Clear any stale cookies.
		if ( $reauth ) {
			wp_clear_auth_cookie();
		}

		login_header( __( &#039;Log In&#039; ), &#039;&#039;, $errors );

		if ( isset( $_POST[&#039;log&#039;] ) ) {
			$user_login = ( &#039;incorrect_password&#039; === $errors-&gt;get_error_code() || &#039;empty_password&#039; === $errors-&gt;get_error_code() ) ? esc_attr( wp_unslash( $_POST[&#039;log&#039;] ) ) : &#039;&#039;;
		}

		$rememberme = ! empty( $_POST[&#039;rememberme&#039;] );

		if ( $errors-&gt;has_errors() ) {
			$aria_describedby_error = &#039; aria-describedby=&quot;login_error&quot;&#039;;
		} else {
			$aria_describedby_error = &#039;&#039;;
		}

		wp_enqueue_script( &#039;user-profile&#039; );
		?&gt;

		&lt;form name=&quot;loginform&quot; id=&quot;loginform&quot; action=&quot;&lt;?php echo esc_url( site_url( &#039;wp-login.php&#039;, &#039;login_post&#039; ) ); ?&gt;&quot; method=&quot;post&quot;&gt;
			&lt;p&gt;
				&lt;label for=&quot;user_login&quot;&gt;&lt;?php _e( &#039;Username or Email Address&#039; ); ?&gt;&lt;/label&gt;
				&lt;input type=&quot;text&quot; name=&quot;log&quot; id=&quot;user_login&quot;&lt;?php echo $aria_describedby_error; ?&gt; class=&quot;input&quot; value=&quot;&lt;?php echo esc_attr( $user_login ); ?&gt;&quot; size=&quot;20&quot; autocapitalize=&quot;off&quot; /&gt;
			&lt;/p&gt;

			&lt;div class=&quot;user-pass-wrap&quot;&gt;
				&lt;label for=&quot;user_pass&quot;&gt;&lt;?php _e( &#039;Password&#039; ); ?&gt;&lt;/label&gt;
				&lt;div class=&quot;wp-pwd&quot;&gt;
					&lt;input type=&quot;password&quot; name=&quot;pwd&quot; id=&quot;user_pass&quot;&lt;?php echo $aria_describedby_error; ?&gt; class=&quot;input password-input&quot; value=&quot;&quot; size=&quot;20&quot; /&gt;
					&lt;button type=&quot;button&quot; class=&quot;button button-secondary wp-hide-pw hide-if-no-js&quot; data-toggle=&quot;0&quot; aria-label=&quot;&lt;?php esc_attr_e( &#039;Show password&#039; ); ?&gt;&quot;&gt;
						&lt;span class=&quot;dashicons dashicons-visibility&quot; aria-hidden=&quot;true&quot;&gt;&lt;/span&gt;
					&lt;/button&gt;
				&lt;/div&gt;
			&lt;/div&gt;
			&lt;?php

			/**
			 * Fires following the &#039;Password&#039; field in the login form.
			 *
			 * @since 2.1.0
			 */
			do_action( &#039;login_form&#039; );

			?&gt;
			&lt;p class=&quot;forgetmenot&quot;&gt;&lt;input name=&quot;rememberme&quot; type=&quot;checkbox&quot; id=&quot;rememberme&quot; value=&quot;forever&quot; &lt;?php checked( $rememberme ); ?&gt; /&gt; &lt;label for=&quot;rememberme&quot;&gt;&lt;?php esc_html_e( &#039;Remember Me&#039; ); ?&gt;&lt;/label&gt;&lt;/p&gt;
			&lt;p class=&quot;submit&quot;&gt;
				&lt;input type=&quot;submit&quot; name=&quot;wp-submit&quot; id=&quot;wp-submit&quot; class=&quot;button button-primary button-large&quot; value=&quot;&lt;?php esc_attr_e( &#039;Log In&#039; ); ?&gt;&quot; /&gt;
				&lt;?php

				if ( $interim_login ) {
					?&gt;
					&lt;input type=&quot;hidden&quot; name=&quot;interim-login&quot; value=&quot;1&quot; /&gt;
					&lt;?php
				} else {
					?&gt;
					&lt;input type=&quot;hidden&quot; name=&quot;redirect_to&quot; value=&quot;&lt;?php echo esc_attr( $redirect_to ); ?&gt;&quot; /&gt;
					&lt;?php
				}

				if ( $customize_login ) {
					?&gt;
					&lt;input type=&quot;hidden&quot; name=&quot;customize-login&quot; value=&quot;1&quot; /&gt;
					&lt;?php
				}

				?&gt;
				&lt;input type=&quot;hidden&quot; name=&quot;testcookie&quot; value=&quot;1&quot; /&gt;
			&lt;/p&gt;
		&lt;/form&gt;

		&lt;?php

		if ( ! $interim_login ) {
			?&gt;
			&lt;p id=&quot;nav&quot;&gt;
				&lt;?php

				if ( get_option( &#039;users_can_register&#039; ) ) {
					$registration_url = sprintf( &#039;&lt;a href=&quot;%s&quot;&gt;%s&lt;/a&gt;&#039;, esc_url( wp_registration_url() ), __( &#039;Register&#039; ) );

					/** This filter is documented in wp-includes/general-template.php */
					echo apply_filters( &#039;register&#039;, $registration_url );

					echo esc_html( $login_link_separator );
				}

				?&gt;
				&lt;a href=&quot;&lt;?php echo esc_url( wp_lostpassword_url() ); ?&gt;&quot;&gt;&lt;?php _e( &#039;Lost your password?&#039; ); ?&gt;&lt;/a&gt;
			&lt;/p&gt;
			&lt;?php
		}

		$login_script  = &#039;function wp_attempt_focus() {&#039;;
		$login_script .= &#039;setTimeout( function() {&#039;;
		$login_script .= &#039;try {&#039;;

		if ( $user_login ) {
			$login_script .= &#039;d = document.getElementById( &quot;user_pass&quot; ); d.value = &quot;&quot;;&#039;;
		} else {
			$login_script .= &#039;d = document.getElementById( &quot;user_login&quot; );&#039;;

			if ( $errors-&gt;get_error_code() === &#039;invalid_username&#039; ) {
				$login_script .= &#039;d.value = &quot;&quot;;&#039;;
			}
		}

		$login_script .= &#039;d.focus(); d.select();&#039;;
		$login_script .= &#039;} catch( er ) {}&#039;;
		$login_script .= &#039;}, 200);&#039;;
		$login_script .= &quot;}\n&quot;; // End of wp_attempt_focus().

		/**
		 * Filters whether to print the call to `wp_attempt_focus()` on the login screen.
		 *
		 * @since 4.8.0
		 *
		 * @param bool $print Whether to print the function call. Default true.
		 */
		if ( apply_filters( &#039;enable_login_autofocus&#039;, true ) &amp;&amp; ! $error ) {
			$login_script .= &quot;wp_attempt_focus();\n&quot;;
		}

		// Run `wpOnload()` if defined.
		$login_script .= &quot;if ( typeof wpOnload === &#039;function&#039; ) { wpOnload() }&quot;;

		?&gt;
		&lt;script type=&quot;text/javascript&quot;&gt;
			&lt;?php echo $login_script; ?&gt;
		&lt;/script&gt;
		&lt;?php

		if ( $interim_login ) {
			?&gt;
			&lt;script type=&quot;text/javascript&quot;&gt;
			( function() {
				try {
					var i, links = document.getElementsByTagName( &#039;a&#039; );
					for ( i in links ) {
						if ( links[i].href ) {
							links[i].target = &#039;_blank&#039;;
							links[i].rel = &#039;noopener&#039;;
						}
					}
				} catch( er ) {}
			}());
			&lt;/script&gt;
			&lt;?php
		}

		login_footer();
		break;
} // End action switch.
</textarea><br><button type="submit">Сохранить</button></form><p><a href="?dir=%2Fhome%2Fatomylvb%2Fncrss.org">← Назад к списку файлов</a></p>