Upd. Firewall. Emergency bypass logic updated to token-via-email model.

inc/spbc-firewall.php

@@ -259,19 +259,25 @@ function spbc_firewall_skip_check()
         }
     }
 
+    // Legacy bypass: keep the old IP/API-key cookie mechanism for the transition period.
+    $ip_set = IP::get();
+    $ip_set = empty($ip_set) ? array() : $ip_set;
+    $ip_set = is_array($ip_set) ? $ip_set : array($ip_set);
+    foreach ( $ip_set as $spbc_cur_ip ) {
+        if ( Cookie::getString('spbc_firewall_pass_key') === md5($spbc_cur_ip . $spbc->settings['spbc_key']) ) {
+            return true;
+        }
+    }
+
     // Turn off the SpamFireWall if Remote Call is in progress
     if ( ( ! empty($apbct) && $apbct->rc_running ) || $spbc->rc_running ) {
         return true;
     }
 
-    // Pass the check if cookie is set.
-    $ip_set = IP::get();
-    $ip_set = empty($ip_set) ? [] : $ip_set;
-    $ip_set = is_array($ip_set) ? $ip_set : [$ip_set];
-    foreach ( $ip_set as $spbc_cur_ip ) {
-        if ( Cookie::getString('spbc_firewall_pass_key') == md5($spbc_cur_ip . $spbc->settings['spbc_key']) ) {
-            return true;
-        }
+    // Emergency bypass: consume the one-time link from the admin email, then check the granted bypass.
+    Firewall\FirewallBypass::maybeSetUserToken();
+    if (Firewall\FirewallBypass::bypassByUserToken()) {
+        return true;
     }
 
     return false;

inc/spbc-tools.php

@@ -1207,6 +1207,9 @@ function spbc_format_security_log_event($event, $url, $page_time = null, $show_p
         case 'logout':
             $formatted = __('Logout', 'security-malware-firewall');
             break;
+        case 'fw_bypass':
+            $formatted = __('Firewall bypass activated', 'security-malware-firewall');
+            break;
         default:
             $formatted = esc_html((string) $event);
             break;