' . esc_html__( 'Sign-in', 'sirius-press' ) . '

'; foreach ( $errors as $e ) { printf( '

', esc_html( $e ) ); } foreach ( $notes as $n ) { printf( '

', esc_html( $n ) ); } echo '

'; wp_nonce_field( 'sirius_auth_settings' ); echo ''; echo ''; echo ''; echo ''; echo ''; echo '

' . esc_html__( 'Passwords', 'sirius-press' ) . '

'; printf( ' %s', checked( SPA_Login::passwords_allowed(), true, false ), esc_html__( 'Also accept username and password sign-in', 'sirius-press' ) ); echo '

'; esc_html_e( 'Leave this on until every account that needs access has a wallet attached. With it off, a wallet signature is the only way in — which is the point of this fork, but it is also final.', 'sirius-press' ); echo '

' . esc_html__( 'Registration', 'sirius-press' ) . ' '; printf( ' %s', checked( SP_Settings::open_registration(), true, false ), esc_html__( 'Anyone who can sign with a wallet may create an account', 'sirius-press' ) ); echo '

' . esc_html__( 'Login address', 'sirius-press' ) . '

'; printf( '%s ', esc_html( trailingslashit( home_url( '/' ) ) ), esc_attr( SPA_Login_URL::slug() ), esc_attr__( 'wp-login.php', 'sirius-press' ) ); echo '

'; esc_html_e( 'Move the sign-in screen somewhere other than wp-login.php. Leave it empty to keep the usual address.', 'sirius-press' ); echo ' '; esc_html_e( 'This is not about brute force — there is no password to guess — but wp-login.php is the most-requested path on the internet, and answering it tells every scanner what is running here. Note that it does not move wp-admin: WordPress has no supported way to rename that, and pretending otherwise breaks plugins quietly.', 'sirius-press' ); echo '

'; if ( SPA_Login_URL::slug() ) { echo '

'; printf( /* translators: %s: the current login URL. */ esc_html__( 'Signing in now happens at %s.', 'sirius-press' ), '' . esc_html( home_url( '/' . SPA_Login_URL::slug() ) ) . '' ); echo ' '; esc_html_e( 'If you lose it, `wp option get sirius_press_login_slug` on the server will tell you, and `wp option delete sirius_press_login_slug` will put the login back.', 'sirius-press' ); echo '

'; } echo '

'; submit_button(); echo '

'; echo '

' . esc_html__( 'Accounts without a wallet', 'sirius-press' ) . '

'; if ( ! $stranded ) { echo '

' . esc_html__( 'Every account here can sign in with a wallet.', 'sirius-press' ) . '

'; } else { echo '

' . esc_html__( 'These accounts can only sign in with a password. Turning passwords off locks them out.', 'sirius-press' ) . '

'; echo ''; foreach ( $stranded as $user ) { printf( '', esc_url( get_edit_user_link( $user->ID ) ), esc_html( $user->user_login ), esc_html( implode( ', ', $user->roles ) ) ); } echo '

' . esc_html__( 'Account', 'sirius-press' ) . '	' . esc_html__( 'Role', 'sirius-press' ) . '
%s	%s

'; } echo '

' . esc_html__( 'For other plugins', 'sirius-press' ) . '

'; echo '

' . esc_html__( 'A plugin that wants a fresh signature before something irreversible can call sirius_press_confirmation_challenge() and post the answer to:', 'sirius-press' ) . '

'; echo '

' . esc_html( rest_url( 'sirius-press/v1/confirm' ) ) . '

'; echo ''; } /** Accounts that would be locked out if passwords were turned off. */ private static function accounts_without_wallets() { return get_users( array( 'meta_query' => array( 'relation' => 'OR', array( 'key' => SP_Identity::META_ADDRESS, 'compare' => 'NOT EXISTS', ), array( 'key' => SP_Identity::META_ADDRESS, 'value' => '', 'compare' => '=', ), ), 'number' => 50, ) ); } }