From bdd73c991bf27c1831ee1e43497d24d7f751e0eb Mon Sep 17 00:00:00 2001
From: Tobias Bode <tobias.bode@ionos.com>
Date: Mon, 26 Jan 2026 11:09:20 +0100
Subject: [PATCH] feat(stretch-extra): add patchstack

---
 .../stretch-extra/inc/patchstack.php          | 52 +++++++++++++++++++
 .../inc/stretch-extra-config.php              |  9 ++++
 .../stretch-extra/stretch-extra/index.php     |  1 +
 3 files changed, 62 insertions(+)
 create mode 100644 packages/wp-mu-plugin/stretch-extra/stretch-extra/inc/patchstack.php

diff --git a/packages/wp-mu-plugin/stretch-extra/stretch-extra/inc/patchstack.php b/packages/wp-mu-plugin/stretch-extra/stretch-extra/inc/patchstack.php
new file mode 100644
index 000000000..da6e2ecdb
--- /dev/null
+++ b/packages/wp-mu-plugin/stretch-extra/stretch-extra/inc/patchstack.php
@@ -0,0 +1,52 @@
+<?php
+
+// Do not allow the file to be called directly.
+if ( ! defined( 'ABSPATH' ) ) {
+	exit;
+}
+
+// Do not run if already executed.
+if ( defined( 'PS_FW_MU_RAN' ) ) {
+    return;
+}
+
+// Do not run if we're not supposed to.
+if ( get_option( 'patchstack_license_activated', 0 ) == 0 || get_option( 'patchstack_basic_firewall', 0 ) != 1 || get_option( 'patchstack_license_free', 0 ) == 1 ) {
+    return;
+}
+
+// Load essential WP core file.
+require_once ABSPATH . 'wp-admin/includes/plugin.php';
+
+// Determine if the Patchstack plugin folder exists.
+$pluginDir = WP_PLUGIN_DIR . '/patchstack';
+if ( ! is_dir( $pluginDir ) || ! is_plugin_active( 'patchstack/patchstack.php' ) ) {
+    return;
+}
+
+// Determine if the core file exists.
+if ( ! file_exists( $pluginDir . '/includes/core.php' ) || ! file_exists( $pluginDir . '/includes/firewall.php' ) ) {
+    return;
+}
+
+// Make sure to load essential files.
+if ( ! class_exists( 'P_Firewall' ) || ! class_exists( 'P_Core' ) ) {
+    // Require the core and firewall files.
+    require_once $pluginDir . '/includes/core.php';
+    require_once $pluginDir . '/includes/firewall.php';
+
+    // For rare situations where it did not load properly.
+    if ( ! class_exists( 'P_Firewall' ) || ! class_exists( 'P_Core' ) ) {
+        return;
+    }
+}
+
+// Initialize and launch.
+try {
+    $core = new P_Core( null );
+    new P_Firewall( true, $core, false, true );
+} catch (\Exception $e) {
+    //
+}
+
+define( 'PS_FW_MU_RAN', true );
diff --git a/packages/wp-mu-plugin/stretch-extra/stretch-extra/inc/stretch-extra-config.php b/packages/wp-mu-plugin/stretch-extra/stretch-extra/inc/stretch-extra-config.php
index b645f23f0..c9d415cd7 100644
--- a/packages/wp-mu-plugin/stretch-extra/stretch-extra/inc/stretch-extra-config.php
+++ b/packages/wp-mu-plugin/stretch-extra/stretch-extra/inc/stretch-extra-config.php
@@ -35,6 +35,15 @@
         'Name' => 'Essentials',
       ],
     ],
+    [
+      'url'  => 'https://downloads.wordpress.org/plugin/patchstack.zip',
+      'key'  => 'plugins/patchstack/patchstack.php',
+      'file' => IONOS_CUSTOM_DIR . '/plugins/patchstack/patchstack.php',
+      'slug' => 'patchstack',
+      'data' => [
+        'Name' => 'Patchstack',
+      ],
+    ],
   ],
   'themes' => [
     [
diff --git a/packages/wp-mu-plugin/stretch-extra/stretch-extra/index.php b/packages/wp-mu-plugin/stretch-extra/stretch-extra/index.php
index 755a3ddbd..2d148a799 100644
--- a/packages/wp-mu-plugin/stretch-extra/stretch-extra/index.php
+++ b/packages/wp-mu-plugin/stretch-extra/stretch-extra/index.php
@@ -26,3 +26,4 @@
 require_once __DIR__ . '/inc/migration.php';
 require_once __DIR__ . '/inc/secondary-plugin-dir.php';
 require_once __DIR__ . '/inc/secondary-theme-dir.php';
+require_once __DIR__ . '/inc/patchstack.php';