Authorization.php — Advanced Access Manager – Access Governance for WordPress 5.8.2

advanced-access-manager / Application / Frontend / Authorization.php

advanced-access-manager / Application / Frontend Last commit date

phtml 7 years ago Authorization.php 7 years ago Filter.php 7 years ago Manager.php 7 years ago

Authorization.php

201 lines

1	<?php
2
3	/**
4	* ======================================================================
5	* LICENSE: This file is subject to the terms and conditions defined in *
6	* file 'license.txt', which is part of this source code package. *
7	* ======================================================================
8	*/
9
10	/**
11	* AAM frontend authorization
12	*
13	* @package AAM
14	* @author Vasyl Martyniuk <vasyl@vasyltech.com>
15	*/
16	class AAM_Frontend_Authorization {
17
18	/**
19	* Instance of itself
20	*
21	* @var AAM_Frontend_Authorization
22	*
23	* @access private
24	*/
25	private static $_instance = null;
26
27	/**
28	* Check post access
29	*
30	* Based on the provided post object, check if current user has access to it.
31	* This method run multiple checks at-once
32	*
33	* @param AAM_Core_Object_Post $post
34	*
35	* @return void
36	*
37	* @access public
38	*/
39	public function chechReadAuth(AAM_Core_Object_Post $post) {
40	// pre post access hook
41	do_action('aam-pre-post-authorization-action', $post);
42
43	// Step #1. Check if access expired to the post
44	$this->checkExpiration($post);
45
46	// Step #2. Check if user has access to read the post
47	$this->checkReadAccess($post);
48
49	// Step #3. Check if counter exceeded max allowed views
50	$this->checkCounter($post);
51
52	// Step #4. Check if redirect is defined for the post
53	$this->checkRedirect($post);
54
55	// post post access hook
56	do_action('aam-post-post-authorization-action', $post);
57	}
58
59	/**
60	* Check ACCESS_EXPIRATION option
61	*
62	* If access is expired, override the access settings based on the
63	* post.access.expired ConfigPress settings (default frontend.read)
64	*
65	* @param AAM_Core_Object_Post $post
66	*
67	* @return void
68	*
69	* @access protected
70	*/
71	protected function checkExpiration($post) {
72	$expire = $post->has('frontend.expire');
73
74	if ($expire) {
75	$date = strtotime($post->get('frontend.expire_datetime'));
76	if ($date <= time()) {
77	$actions = AAM_Core_Config::get(
78	'feature.frontend.postAccess.expired', 'frontend.read'
79	);
80
81	foreach(array_map('trim', explode(',', $actions)) as $action) {
82	$post->set($action, 1);
83	}
84	}
85	}
86	}
87
88	/**
89	* Check READ & READ_OTHERS options
90	*
91	* @param AAM_Core_Object_Post $post
92	*
93	* @return void
94	*
95	* @access protected
96	*/
97	protected function checkReadAccess(AAM_Core_Object_Post $post) {
98	if (!$post->allowed('frontend.read')) {
99	$this->deny('post_read', 'frontend.read', $post->getPost());
100	}
101	}
102
103	/**
104	* Check ACCESS_COUNTER option
105	*
106	* @param AAM_Core_Object_Post $post
107	*
108	* @return void
109	*
110	* @access protected
111	*/
112	protected function checkCounter(AAM_Core_Object_Post $post) {
113	$user = get_current_user_id();
114
115	//check counter only for authenticated users and if ACCESS COUNTER is set
116	if ($user && $post->has('frontend.access_counter')) {
117	$counter = intval(get_user_meta(
118	$user, 'aam-post-' . $post->ID . '-access-counter', true
119	));
120
121	if ($counter >= $post->get('frontend.access_counter_limit')) {
122	$this->deny('post_read', 'frontend.access_counter', $post->getPost());
123	} else {
124	update_user_meta(
125	$user, 'aam-post-' . $post->ID . '-access-counter', ++$counter
126	);
127	}
128	}
129	}
130
131	/**
132	* Check REDIRECT option
133	*
134	* @param AAM_Core_Object_Post $post
135	*
136	* @return void
137	*
138	* @access protected
139	*/
140	protected function checkRedirect(AAM_Core_Object_Post $post) {
141	if ($post->has(AAM_Core_Api_Area::get() . '.redirect')) {
142	$rule = explode('\|', $post->get(AAM_Core_Api_Area::get() . '.location'));
143	$code = apply_filters('aam-post-redirect-http-code-filter', 307);
144
145	if (count($rule) === 1) { // TODO: legacy. Remove in Jul 2020
146	AAM_Core_API::redirect($rule[0]);
147	} elseif ($rule[0] === 'page') {
148	wp_safe_redirect(get_page_link($rule[1]), $code); exit;
149	} elseif ($rule[0] === 'url') {
150	wp_redirect($rule[1], $code); exit;
151	} elseif (($rule[0] === 'callback') && is_callable($rule[1])) {
152	call_user_func($rule[1], $post);
153	}
154	}
155	}
156
157	/**
158	* Deny access
159	*
160	* @param string $hook
161	* @param string $action
162	* @param WP_Post $post
163	*
164	* @return void
165	*
166	* @access protected
167	*/
168	protected function deny($hook, $action, $post) {
169	AAM_Core_API::reject('frontend', array(
170	'hook' => $hook, 'action' => $action, 'post' => $post
171	));
172	}
173
174	/**
175	* Alias for the bootstrap
176	*
177	* @return AAM_Frontend_Authorization
178	*
179	* @access public
180	* @static
181	*/
182	public static function getInstance() {
183	return self::bootstrap();
184	}
185
186	/**
187	* Bootstrap authorization layer
188	*
189	* @return void
190	*
191	* @access public
192	*/
193	public static function bootstrap() {
194	if (is_null(self::$_instance)) {
195	self::$_instance = new self;
196	}
197
198	return self::$_instance;
199	}
200
201	}