<?php
/**
* User securities.
*
* Copyright: © 2009-2011
* {@link http://www.websharks-inc.com/ WebSharks, Inc.}
* ( coded in the USA )
*
* Released under the terms of the GNU General Public License.
* You should have received a copy of the GNU General Public License,
* along with this software. In the main directory, see: /licensing/
* If not, see: {@link http://www.gnu.org/licenses/}.
*
* @package s2Member\User_Securities
* @since 3.5
*/
if (realpath (__FILE__) === realpath ($_SERVER["SCRIPT_FILENAME"]))
	exit ("Do not access this file directly.");
/**/
if (!class_exists ("c_ws_plugin__s2member_user_securities"))
	{
		/**
		* User securities.
		*
		* @package s2Member\User_Securities
		* @since 3.5
		*/
		class c_ws_plugin__s2member_user_securities
			{
				/**
				* Initializes a Multisite Filter for `user_has_cap`.
				*
				* It's very important that this is NOT attached before WordPress® creates `$current_user` via `$wp->init()`.
				* This prevents crashes when other plugins attempt to call upon `current_user_can()` before WordPress is initialized.
				* For instance, some plugins attempt to use `current_user_can()` on the `plugins_loaded` Hook, which they should not do.
				*
				* @package s2Member\User_Securities
				* @since 3.5
				*
				* @attaches-to: ``add_action("init");``
				*
				* @return null
				*/
				public static function initialize () /* Initializes the Filter for `user_has_cap`. */
					{
						add_filter ("user_has_cap", "c_ws_plugin__s2member_user_securities::ms_user_capabilities", 10, 3);
					}
				/**
				* Alters `WP_User->has_cap()` on a Multisite Blog Farm.
				*
				* @package s2Member\User_Securities
				* @since 3.5
				*
				* @attaches-to: ``add_filter("user_has_cap");``
				*
				* @param array $capabilities Expects an array of Capabilities passed in by the Filter.
				* 	This array contains all of the Capabilities that the User has *( i.e. ``$user->allcaps`` )*.
				* @param array $caps_map An array of Capabilities mapped out by the ``map_meta_cap`` function.
				* @param array $args Array of arguments originally passed through the ``has_cap()`` function.
				* 	However, WordPress® modifies this array of arguments in the following way.
				* 	Argument `[0]` is the Capability test string itself *( this is normal )*.
				* 	Argument `[1]` is added by WordPress®; it's the ID of the User.
				* 	Other arguments starting from array index `[2]` are normal.
				* @return array An array of Capabilities.
				*/
				public static function ms_user_capabilities ($capabilities = FALSE, $caps_map = FALSE, $args = FALSE)
					{
						eval ('foreach(array_keys(get_defined_vars())as$__v)$__refs[$__v]=&$$__v;');
						do_action ("ws_plugin__s2member_before_ms_user_capabilities", get_defined_vars ());
						unset ($__refs, $__v); /* Unset defined __refs, __v. */
						/**/
						if (is_multisite () && c_ws_plugin__s2member_utils_conds::is_multisite_farm () && (is_super_admin () || !empty ($capabilities["administrator"])) && !empty ($args[0]) && ($args[0] === "edit_user" || $args[0] === "edit_users"))
							if ($args[0] === "edit_users" || ($args[0] === "edit_user" && !empty ($args[2]) && ((!empty ($args[1]) && (int)$args[1] === (int)$args[2]) || is_user_member_of_blog ($args[2]))))
								$capabilities = array_merge ((array)$capabilities, array ("edit_users" => 1, "do_not_allow" => 1));
						/**/
						return apply_filters ("ws_plugin__s2member_ms_user_capabilities", $capabilities, get_defined_vars ());
					}
				/**
				* Alters this Filter inside `/wp-admin/user-edit.php`.
				*
				* @package s2Member\User_Securities
				* @since 3.5
				*
				* @attaches-to: ``add_filter("enable_edit_any_user_configuration");``
				*
				* @param bool $allow Expects boolean value passed through by the Filter.
				* @return bool True if the current User is allowed to edit any User, else existing value.
				*/
				public static function ms_allow_edits ($allow = FALSE)
					{
						global $user_id; /* Available inside `/wp-admin/user-edit.php`. */
						/**/
						eval ('foreach(array_keys(get_defined_vars())as$__v)$__refs[$__v]=&$$__v;');
						do_action ("ws_plugin__s2member_before_ms_allow_edits", get_defined_vars ());
						unset ($__refs, $__v); /* Unset defined __refs, __v. */
						/**/
						if (is_multisite () && c_ws_plugin__s2member_utils_conds::is_multisite_farm ())
							if (is_super_admin () || (current_user_can ("administrator") && $user_id && is_user_member_of_blog ($user_id)))
								$allow = true; /* Yes, allow Administrators to edit User Profiles. */
						/**/
						return apply_filters ("ws_plugin__s2member_ms_allow_edits", $allow, get_defined_vars ());
					}
				/**
				* Hides Password fields for Demo Users; and deals with Password fields on Multisite Blog Farms.
				*
				* Demo accounts *( where the Username MUST be "demo" )*, will NOT be allowed to change their Password.
				* Any other restrictions you need to impose must be done through custom programming, using s2Member's Conditionals.
				* 	See `s2Member -> API Scripting`.
				*
				* @package s2Member\User_Securities
				* @since 3.5
				*
				* @attaches-to: ``add_filter("show_password_fields");``
				*
				* @param bool $show Expects boolean value passed through by the Filter.
				* @param obj $user Expects a `WP_User` object passed through by the Filter.
				* @return bool False if the Password is locked for this User, else existing value.
				*/
				public static function hide_password_fields ($show = TRUE, $user = FALSE)
					{
						eval ('foreach(array_keys(get_defined_vars())as$__v)$__refs[$__v]=&$$__v;');
						do_action ("ws_plugin__s2member_before_hide_password_fields", get_defined_vars ());
						unset ($__refs, $__v); /* Unset defined __refs, __v. */
						/**/
						if ($show && is_multisite () && c_ws_plugin__s2member_utils_conds::is_multisite_farm ())
							if (!is_super_admin () && is_object ($user) && $user->ID && is_object ($current_user = wp_get_current_user ()) && $current_user->ID)
								if ($user->ID !== $current_user->ID)
									$show = false;
						/**/
						if ($show && is_object ($user) && $user->ID && $user->user_login === "demo")
							$show = false; /* Lock Password on Demos. */
						/**/
						return apply_filters ("ws_plugin__s2member_hide_password_fields", $show, get_defined_vars ());
					}
			}
	}
?>