Upd. Firewall. Emergency bypass logic updated to token-via-email model. https://app.doboard.com/1/task/55234

cleantalk.php

@@ -29,6 +29,7 @@
 use Cleantalk\ApbctWP\Deactivator;
 use Cleantalk\ApbctWP\Firewall\AntiCrawler;
 use Cleantalk\ApbctWP\Firewall\AntiFlood;
+use Cleantalk\ApbctWP\Firewall\FirewallBypass;
 use Cleantalk\ApbctWP\Firewall\SFW;
 use Cleantalk\ApbctWP\Firewall\SFWUpdateHelper;
 use Cleantalk\ApbctWP\Helper;
@@ -898,7 +899,7 @@ function apbct_sfw__check()
         }
     }
 
-    // Skip the check
+    // Skip the check (legacy way, remove in future)
     if ( ! empty(Get::get('access')) ) {
         $spbc_settings = get_option('spbc_settings');
         $spbc_key      = ! empty($spbc_settings['spbc_key']) ? $spbc_settings['spbc_key'] : false;
@@ -938,6 +939,12 @@ function apbct_sfw__check()
         return;
     }
 
+    // Emergency bypass: consume the one-time link from the admin email, then check the granted bypass.
+    FirewallBypass::maybeSetUserToken();
+    if (FirewallBypass::bypassByUserToken()) {
+        return;
+    }
+
     $firewall = new Firewall(
         DB::getInstance()
     );

lib/Cleantalk/ApbctWP/Escape.php

@@ -69,7 +69,7 @@ public static function escUrl($text)
      *
      * @param $text
      *
-     * @return string|null
+     * @return string
      */
     public static function escUrlRaw($text)
     {