| 1 |
<?php |
| 2 |
/** |
| 3 |
* Security meta box. |
| 4 |
* |
| 5 |
* Copyright: © 2009-2011 |
| 6 |
* {@link http://www.websharks-inc.com/ WebSharks, Inc.} |
| 7 |
* ( coded in the USA ) |
| 8 |
* |
| 9 |
* Released under the terms of the GNU General Public License. |
| 10 |
* You should have received a copy of the GNU General Public License, |
| 11 |
* along with this software. In the main directory, see: /licensing/ |
| 12 |
* If not, see: {@link http://www.gnu.org/licenses/}. |
| 13 |
* |
| 14 |
* @package s2Member\Meta_Boxes |
| 15 |
* @since 3.5 |
| 16 |
*/ |
| 17 |
if (realpath (__FILE__) === realpath ($_SERVER["SCRIPT_FILENAME"])) |
| 18 |
exit("Do not access this file directly."); |
| 19 |
/**/ |
| 20 |
if (!class_exists ("c_ws_plugin__s2member_meta_box_security")) |
| 21 |
{ |
| 22 |
/** |
| 23 |
* Security meta box. |
| 24 |
* |
| 25 |
* @package s2Member\Meta_Boxes |
| 26 |
* @since 3.5 |
| 27 |
*/ |
| 28 |
class c_ws_plugin__s2member_meta_box_security |
| 29 |
{ |
| 30 |
/** |
| 31 |
* Adds security meta box to Post/Page editing stations. |
| 32 |
* |
| 33 |
* @package s2Member\Meta_Boxes |
| 34 |
* @since 3.5 |
| 35 |
* |
| 36 |
* @param obj $post Post/Page object. |
| 37 |
* @return null |
| 38 |
*/ |
| 39 |
public static function security_meta_box ($post = FALSE) |
| 40 |
{ |
| 41 |
eval('foreach(array_keys(get_defined_vars())as$__v)$__refs[$__v]=&$$__v;'); |
| 42 |
do_action ("ws_plugin__s2member_before_security_meta_box", get_defined_vars ()); |
| 43 |
unset ($__refs, $__v); /* Unset defined __refs, __v. */ |
| 44 |
/**/ |
| 45 |
if (is_object ($post) && ($post_id = $post->ID) && (($post->post_type === "page" && current_user_can ("edit_page", $post_id)) || current_user_can ("edit_post", $post_id))) |
| 46 |
{ |
| 47 |
if ($post->post_type === "page" && ($page_id = $post_id)) /* OK. So we're dealing with a Page classification. */ |
| 48 |
{ |
| 49 |
if (!in_array ($page_id, array_merge (array ($GLOBALS["WS_PLUGIN__"]["s2member"]["o"]["membership_options_page"], $GLOBALS["WS_PLUGIN__"]["s2member"]["o"]["login_welcome_page"], $GLOBALS["WS_PLUGIN__"]["s2member"]["o"]["file_download_limit_exceeded_page"]), preg_split ("/[\r\n\t\s;,]+/", $GLOBALS["WS_PLUGIN__"]["s2member"]["o"]["specific_ids"])))) |
| 50 |
{ |
| 51 |
echo '<input type="hidden" name="ws_plugin__s2member_security_meta_box_save" id="ws-plugin--s2member-security-meta-box-save" value="' . esc_attr (wp_create_nonce ("ws-plugin--s2member-security-meta-box-save")) . '" />' . "\n"; |
| 52 |
echo '<input type="hidden" name="ws_plugin__s2member_security_meta_box_save_id" id="ws-plugin--s2member-security-meta-box-save-id" value="' . esc_attr ($page_id) . '" />' . "\n"; |
| 53 |
/**/ |
| 54 |
for ($n = 0; $n <= $GLOBALS["WS_PLUGIN__"]["s2member"]["c"]["levels"]; $n++) |
| 55 |
$pages[$n] = array_unique (preg_split ("/[\r\n\t\s;,]+/", $GLOBALS["WS_PLUGIN__"]["s2member"]["o"]["level" . $n . "_pages"])); |
| 56 |
/**/ |
| 57 |
echo '<p style="margin-left:2px;"><strong>Page Level Restriction?</strong></p>' . "\n"; |
| 58 |
echo '<label class="screen-reader-text" for="ws-plugin--s2member-security-meta-box-level">Add Level Restriction?</label>' . "\n"; |
| 59 |
echo '<select name="ws_plugin__s2member_security_meta_box_level" id="ws-plugin--s2member-security-meta-box-level" style="width:99%;">' . "\n"; |
| 60 |
echo '<option value=""></option>' . "\n"; /* By default, we allow public access to any Post/Page. */ |
| 61 |
/**/ |
| 62 |
for ($n = 0; $n <= $GLOBALS["WS_PLUGIN__"]["s2member"]["c"]["levels"]; $n++) |
| 63 |
echo ($pages[$n] !== array ("all")) ? '<option value="' . $n . '"' . ((in_array ($page_id, $pages[$n])) ? ' selected="selected"' : '') . '>' . (($n === $GLOBALS["WS_PLUGIN__"]["s2member"]["c"]["levels"]) ? 'Require Highest Level #' . $n : 'Require Level #' . $n . ' ( or higher )') . '</option>' . "\n" : '<option value="" disabled="disabled">Level #' . $n . ' ( already protects "all" Pages )</option>' . "\n"; |
| 64 |
/**/ |
| 65 |
echo '</select><br /><small>* see: <code>General Options -> Page Level Access</code></small>' . "\n"; |
| 66 |
/**/ |
| 67 |
if (!is_multisite () || !c_ws_plugin__s2member_utils_conds::is_multisite_farm () || is_main_site ()) |
| 68 |
/* ^ Will change once Custom Capabilities are compatible with a Blog Farm. */ |
| 69 |
{ |
| 70 |
echo '<p style="margin-top:15px; margin-left:2px;"><strong>Require Custom Capabilities?</strong></p>' . "\n"; |
| 71 |
echo '<label class="screen-reader-text" for="ws-plugin--s2member-security-meta-box-ccaps">Custom Capabilities?</label>' . "\n"; |
| 72 |
echo '<input type="text" name="ws_plugin__s2member_security_meta_box_ccaps" id="ws-plugin--s2member-security-meta-box-ccaps" value="' . format_to_edit (trim (implode (",", (array)get_post_meta ($page_id, "s2member_ccaps_req", true)))) . '" onkeyup="if(this.value.match(/[^a-z_0-9,]/)) this.value = jQuery.trim (jQuery.trim (this.value).replace (/[ \-]/g, \'_\').replace (/[^a-z_0-9,]/gi, \'\').toLowerCase ());" style="width:99%;" />' . "\n"; |
| 73 |
echo '<br /><small>* see: <code>API Scripting -> Custom Capabilities</code></small>' . "\n"; |
| 74 |
} |
| 75 |
} |
| 76 |
/**/ |
| 77 |
else if ($page_id == $GLOBALS["WS_PLUGIN__"]["s2member"]["o"]["membership_options_page"]) |
| 78 |
echo 'This Page is your:<br /><strong>Membership Options Page</strong><br />( always publicly available )'; |
| 79 |
/**/ |
| 80 |
else if ($page_id == $GLOBALS["WS_PLUGIN__"]["s2member"]["o"]["login_welcome_page"]) |
| 81 |
echo 'This Page is your:<br /><strong>Login Welcome Page</strong><br />( automatically guarded by s2Member )'; |
| 82 |
/**/ |
| 83 |
else if ($page_id == $GLOBALS["WS_PLUGIN__"]["s2member"]["o"]["file_download_limit_exceeded_page"]) |
| 84 |
echo 'This Page is your:<br /><strong>Download Limit Exceeded Page</strong><br />( automatically guarded by s2Member )'; |
| 85 |
/**/ |
| 86 |
else if (in_array ($page_id, preg_split ("/[\r\n\t\s;,]+/", $GLOBALS["WS_PLUGIN__"]["s2member"]["o"]["specific_ids"]))) |
| 87 |
echo 'This Page is a:<br /><strong>Specific Post/Page for sale</strong><br />( already guarded by s2Member )'; |
| 88 |
} |
| 89 |
else /* Otherwise, we assume this is a Post, or possibly a Custom Post Type. It's NOT a Page. */ |
| 90 |
{ |
| 91 |
if (!in_array ($post_id, preg_split ("/[\r\n\t\s;,]+/", $GLOBALS["WS_PLUGIN__"]["s2member"]["o"]["specific_ids"]))) |
| 92 |
{ |
| 93 |
echo '<input type="hidden" name="ws_plugin__s2member_security_meta_box_save" id="ws-plugin--s2member-security-meta-box-save" value="' . esc_attr (wp_create_nonce ("ws-plugin--s2member-security-meta-box-save")) . '" />' . "\n"; |
| 94 |
echo '<input type="hidden" name="ws_plugin__s2member_security_meta_box_save_id" id="ws-plugin--s2member-security-meta-box-save-id" value="' . esc_attr ($post_id) . '" />' . "\n"; |
| 95 |
/**/ |
| 96 |
for ($n = 0; $n <= $GLOBALS["WS_PLUGIN__"]["s2member"]["c"]["levels"]; $n++) |
| 97 |
$posts[$n] = array_unique (preg_split ("/[\r\n\t\s;,]+/", $GLOBALS["WS_PLUGIN__"]["s2member"]["o"]["level" . $n . "_posts"])); |
| 98 |
/**/ |
| 99 |
echo '<p style="margin-left:2px;"><strong>Post Level Restriction?</strong></p>' . "\n"; |
| 100 |
echo '<label class="screen-reader-text" for="ws-plugin--s2member-security-meta-box-level">Add Level Restriction?</label>' . "\n"; |
| 101 |
echo '<select name="ws_plugin__s2member_security_meta_box_level" id="ws-plugin--s2member-security-meta-box-level" style="width:99%;">' . "\n"; |
| 102 |
echo '<option value=""></option>' . "\n"; /* By default, we allow public access to any Post/Page. */ |
| 103 |
/**/ |
| 104 |
for ($n = 0; $n <= $GLOBALS["WS_PLUGIN__"]["s2member"]["c"]["levels"]; $n++) |
| 105 |
echo ($posts[$n] !== array ("all")) ? '<option value="' . $n . '"' . ((in_array ($post_id, $posts[$n])) ? ' selected="selected"' : '') . '>' . (($n === $GLOBALS["WS_PLUGIN__"]["s2member"]["c"]["levels"]) ? 'Require Highest Level #' . $n : 'Require Level #' . $n . ' ( or higher )') . '</option>' . "\n" : '<option value="" disabled="disabled">Level #' . $n . ' ( already protects "all" Posts )</option>' . "\n"; |
| 106 |
/**/ |
| 107 |
echo '</select><br /><small>* see: <code>General Options -> Post Level Access</code></small>' . "\n"; |
| 108 |
/**/ |
| 109 |
if (!is_multisite () || !c_ws_plugin__s2member_utils_conds::is_multisite_farm () || is_main_site ()) |
| 110 |
/* ^ Will change once Custom Capabilities are compatible with a Blog Farm. */ |
| 111 |
{ |
| 112 |
echo '<p style="margin-top:15px; margin-left:2px;"><strong>Require Custom Capabilities?</strong></p>' . "\n"; |
| 113 |
echo '<label class="screen-reader-text" for="ws-plugin--s2member-security-meta-box-ccaps">Custom Capabilities?</label>' . "\n"; |
| 114 |
echo '<input type="text" name="ws_plugin__s2member_security_meta_box_ccaps" id="ws-plugin--s2member-security-meta-box-ccaps" value="' . format_to_edit (trim (implode (",", (array)get_post_meta ($post_id, "s2member_ccaps_req", true)))) . '" onkeyup="if(this.value.match(/[^a-z_0-9,]/)) this.value = jQuery.trim (jQuery.trim (this.value).replace (/[ \-]/g, \'_\').replace (/[^a-z_0-9,]/gi, \'\').toLowerCase ());" style="width:99%;" />' . "\n"; |
| 115 |
echo '<br /><small>* see: <code>API Scripting -> Custom Capabilities</code></small>' . "\n"; |
| 116 |
} |
| 117 |
} |
| 118 |
/**/ |
| 119 |
else if (in_array ($post_id, preg_split ("/[\r\n\t\s;,]+/", $GLOBALS["WS_PLUGIN__"]["s2member"]["o"]["specific_ids"]))) |
| 120 |
echo 'This Post is a:<br /><strong>Specific Post/Page for sale</strong><br />( already guarded by s2Member )'; |
| 121 |
} |
| 122 |
} |
| 123 |
/**/ |
| 124 |
do_action ("ws_plugin__s2member_after_security_meta_box", get_defined_vars ()); |
| 125 |
/**/ |
| 126 |
return; /* Return for uniformity. */ |
| 127 |
} |
| 128 |
} |
| 129 |
} |
| 130 |
?> |
