Changed: modified canBypass function, it now passes a $isMuCall variable which indicates if it's a mu-plugin call or not.

Author: dave83649

src/Extensions/ExtensionInterface.php

@@ -20,10 +20,13 @@ public function logRequest($ruleId, $bodyData, $blockType);
 
     /**
      * Determine if the current visitor can bypass the firewall.
+     * If $isMuCall is true, we MUST avoid any function calls that checks the current authorization of the user,
+     * this includes current_user_can. Otherwise, a fatal error is thrown.
      *
+     * @param bool $isMuCall
      * @return bool
      */
-    public function canBypass();
+    public function canBypass($isMuCall);
 
     /**
      * Determine if the visitor is blocked from the website.

src/Extensions/Test/Extension.php

@@ -21,10 +21,13 @@ public function logRequest($ruleId, $bodyData, $blockType)
 
     /**
      * Determine if the current visitor can bypass the firewall.
+     * If $isMuCall is true, we MUST avoid any function calls that checks the current authorization of the user,
+     * this includes current_user_can. Otherwise, a fatal error is thrown.
      *
+     * @param bool $isMuCall
      * @return bool
      */
-    public function canBypass()
+    public function canBypass($isMuCall)
     {
         return false;
     }

src/Processor.php

@@ -104,9 +104,7 @@ public function launch($mustExit = true)
     {
         // Determine if the user is temporarily blocked from the site before we do anything else.
         if (
-            $this->extension->isBlocked($this->autoblockMinutes, $this->autoblockTime, $this->autoblockAttempts) && (
-                $this->mustUsePluginCall || (!$this->mustUsePluginCall && !$this->extension->canBypass())
-            )
+            $this->extension->isBlocked($this->autoblockMinutes, $this->autoblockTime, $this->autoblockAttempts) && !$this->extension->canBypass($this->mustUsePluginCall)
         ) {
             $this->extension->forceExit(22);
         }
@@ -122,7 +120,7 @@ public function launch($mustExit = true)
         }
 
         // Determine if the current request is whitelisted or not.
-        $isWhitelisted = !$this->mustUsePluginCall && $this->extension->canBypass();
+        $isWhitelisted = $this->extension->canBypass($this->mustUsePluginCall);
 
         // Merge the rules together. First iterate through the whitelist rules because
         // we want to whitelist the request if there's a whitelist rule match.