From 2569cf45c7cc091ca48236cd887182263ed39004 Mon Sep 17 00:00:00 2001
From: sbyrd <steven@cooini.com>
Date: Mon, 14 Aug 2023 15:27:17 -0400
Subject: [PATCH] and the password goes too...

---
 plugin_controls.php | 67 ++++++++++++++++++++++++++++++++++++++++-----
 1 file changed, 60 insertions(+), 7 deletions(-)

diff --git a/plugin_controls.php b/plugin_controls.php
index c7d53af..80bc181 100644
--- a/plugin_controls.php
+++ b/plugin_controls.php
@@ -1,10 +1,63 @@
 <?php
 
-//* Remove Menu Links
-function plugin_controls_remove_menus() {
-    remove_menu_page( 'plugins.php' );
-    remove_menu_page( 'update-core.php' );
-}
-add_action( 'admin_menu', 'plugin_controls_remove_menus' );
+/*
+Plugin Name: Plugin Control
+Plugin URI: https://cooini.com/services/dev/wordpress
+Description: This plugin will disable access to the plugins and other pages
+Version: 1.0
+Author: sbyrd
+Author URI: https://cooini.com/
+License: MINE-all-mine
+*/
+
+function plugin_controls_remove_menus()
+{
+    $allow_plugin_file = plugin_dir_path(__FILE__)."/.allow_plugin_list";
+
+    if (isset($_GET['allow_plugin_list']) and $_GET['allow_plugin_list'] === "123letmesee")
+    {
+        touch( $allow_plugin_file );
+    }
+    //
+
+    if (!file_exists($allow_plugin_file)) {
+        remove_menu_page('plugins.php');
+        remove_menu_page('update-core.php');
+    }
+
+}
+function plugin_page_control()
+{
+    $allow_plugin_file = plugin_dir_path(__FILE__)."/.allow_updates";
+
+    if (isset($_GET['allow_updates']) and $_GET['allow_updates'] === "123letmeupdate")
+    {
+        touch( $allow_plugin_file );
+    }
+    else
+    {
+        if (file_exists($allow_plugin_file) and (time() - filectime($allow_plugin_file) >= 60 * 60 * 12  ))
+        {
+            // File is older than threshold, delete
+            unlink($allow_plugin_file);
+        }
+    }
+
+    //
+
+    if (file_exists($allow_plugin_file))
+    {
+        define( 'DISALLOW_FILE_EDIT', false ); // allow
+        define( 'DISALLOW_FILE_MODS', false);
+    }
+    else
+    {
+        define( 'DISALLOW_FILE_EDIT', true ); // disable
+        define( 'DISALLOW_FILE_MODS', true);
+    }
+}
+
+add_action( 'admin_menu', 'plugin_controls_remove_menus' );
+add_action( 'admin_menu', 'plugin_page_control' );
+
 
-//TODO make plugins only accessible with token