| 1 |
<?php |
| 2 |
/** |
| 3 |
* s2Member's URI protection routines *( for current URI )*. |
| 4 |
* |
| 5 |
* Copyright: © 2009-2011 |
| 6 |
* {@link http://www.websharks-inc.com/ WebSharks, Inc.} |
| 7 |
* ( coded in the USA ) |
| 8 |
* |
| 9 |
* Released under the terms of the GNU General Public License. |
| 10 |
* You should have received a copy of the GNU General Public License, |
| 11 |
* along with this software. In the main directory, see: /licensing/ |
| 12 |
* If not, see: {@link http://www.gnu.org/licenses/}. |
| 13 |
* |
| 14 |
* @package s2Member\URIs |
| 15 |
* @since 3.5 |
| 16 |
*/ |
| 17 |
if (realpath (__FILE__) === realpath ($_SERVER["SCRIPT_FILENAME"])) |
| 18 |
exit("Do not access this file directly."); |
| 19 |
/**/ |
| 20 |
if (!class_exists ("c_ws_plugin__s2member_ruris")) |
| 21 |
{ |
| 22 |
/** |
| 23 |
* s2Member's URI protection routines *( for current URI )*. |
| 24 |
* |
| 25 |
* @package s2Member\URIs |
| 26 |
* @since 3.5 |
| 27 |
*/ |
| 28 |
class c_ws_plugin__s2member_ruris |
| 29 |
{ |
| 30 |
/** |
| 31 |
* Handles URI Level Access permissions *( for current URI )*. |
| 32 |
* |
| 33 |
* @package s2Member\URIs |
| 34 |
* @since 3.5 |
| 35 |
* |
| 36 |
* @return null Or exits script execution after redirection. |
| 37 |
*/ |
| 38 |
public static function check_ruri_level_access () |
| 39 |
{ |
| 40 |
do_action ("ws_plugin__s2member_before_check_ruri_level_access", get_defined_vars ()); |
| 41 |
/**/ |
| 42 |
$excluded = apply_filters ("ws_plugin__s2member_check_ruri_level_access_excluded", false, get_defined_vars ()); |
| 43 |
/**/ |
| 44 |
if (!$excluded && $GLOBALS["WS_PLUGIN__"]["s2member"]["o"]["membership_options_page"]) /* Has it been excluded? */ |
| 45 |
{ |
| 46 |
$user = (is_user_logged_in ()) ? wp_get_current_user () : false; /* Get the current User's object. */ |
| 47 |
/**/ |
| 48 |
if ($GLOBALS["WS_PLUGIN__"]["s2member"]["o"]["login_redirection_override"] && ($login_redirection_uri = c_ws_plugin__s2member_login_redirects::login_redirection_uri ($user, "root-returns-false")) && preg_match ("/^" . preg_quote ($login_redirection_uri, "/") . "$/", $_SERVER["REQUEST_URI"]) && c_ws_plugin__s2member_no_cache::no_cache_constants (true) !== "nill" && (!$user || !current_user_can ("access_s2member_level0"))) |
| 49 |
{ |
| 50 |
wp_redirect (add_query_arg (urlencode_deep (array ("s2member_seeking" => "ruri-" . base64_encode ($_SERVER["REQUEST_URI"]), "s2member_level_req" => "0")), get_page_link ($GLOBALS["WS_PLUGIN__"]["s2member"]["o"]["membership_options_page"])), apply_filters ("ws_plugin__s2member_content_redirect_status", 301, get_defined_vars ())); |
| 51 |
exit (); |
| 52 |
} |
| 53 |
else if (!c_ws_plugin__s2member_systematics::is_systematic_use_page ()) /* Do NOT protect Systematics. However, there is 1 exception above ^. */ |
| 54 |
{ |
| 55 |
for ($n = $GLOBALS["WS_PLUGIN__"]["s2member"]["c"]["levels"]; $n >= 0; $n--) /* URIs. Go through each Level. */ |
| 56 |
{ |
| 57 |
if ($GLOBALS["WS_PLUGIN__"]["s2member"]["o"]["level" . $n . "_ruris"]) |
| 58 |
foreach (preg_split ("/[\r\n\t]+/", c_ws_plugin__s2member_ruris::fill_ruri_level_access_rc_vars ($GLOBALS["WS_PLUGIN__"]["s2member"]["o"]["level" . $n . "_ruris"], $user)) as $str) |
| 59 |
if ($str && preg_match ("/" . preg_quote ($str, "/") . "/", $_SERVER["REQUEST_URI"]) && c_ws_plugin__s2member_no_cache::no_cache_constants (true) !== "nill" && (!$user || !current_user_can ("access_s2member_level" . $n))) |
| 60 |
{ |
| 61 |
wp_redirect (add_query_arg (urlencode_deep (array ("s2member_seeking" => "ruri-" . base64_encode ($_SERVER["REQUEST_URI"]), "s2member_level_req" => $n)), get_page_link ($GLOBALS["WS_PLUGIN__"]["s2member"]["o"]["membership_options_page"])), apply_filters ("ws_plugin__s2member_content_redirect_status", 301, get_defined_vars ())); |
| 62 |
exit (); |
| 63 |
} |
| 64 |
} |
| 65 |
} |
| 66 |
/**/ |
| 67 |
do_action ("ws_plugin__s2member_during_check_ruri_level_access", get_defined_vars ()); |
| 68 |
} |
| 69 |
/**/ |
| 70 |
do_action ("ws_plugin__s2member_after_check_ruri_level_access", get_defined_vars ()); |
| 71 |
/**/ |
| 72 |
return; /* For uniformity. */ |
| 73 |
} |
| 74 |
/** |
| 75 |
* Fills Replacement Code variables in URIs; collectively. |
| 76 |
* |
| 77 |
* @package s2Member\URIs |
| 78 |
* @since 3.5 |
| 79 |
* |
| 80 |
* @return str Collective string of input URIs, with Replacement Codes having been filled. |
| 81 |
*/ |
| 82 |
public static function fill_ruri_level_access_rc_vars ($uris = FALSE, $user = FALSE) |
| 83 |
{ |
| 84 |
eval('foreach(array_keys(get_defined_vars())as$__v)$__refs[$__v]=&$$__v;'); |
| 85 |
do_action ("ws_plugin__s2member_before_fill_ruri_level_access_rc_vars", get_defined_vars ()); |
| 86 |
unset ($__refs, $__v); /* Unset defined __refs, __v. */ |
| 87 |
/**/ |
| 88 |
$orig_uris = $uris; /* Record the original URIs that were passed in; collectively. */ |
| 89 |
/**/ |
| 90 |
$user = ((is_object ($user) || is_object ($user = (is_user_logged_in ()) ? wp_get_current_user () : false)) && !empty ($user->ID)) ? $user : false; |
| 91 |
/**/ |
| 92 |
$user_login = ($user) ? (string)strtolower ($user->user_login) : ""; |
| 93 |
$user_id = ($user) ? (string)$user->ID : ""; |
| 94 |
/**/ |
| 95 |
$user_level = (string)c_ws_plugin__s2member_user_access::user_access_level ($user); |
| 96 |
$user_role = (string)c_ws_plugin__s2member_user_access::user_access_role ($user); |
| 97 |
$user_ccaps = (string)implode ("-", c_ws_plugin__s2member_user_access::user_access_ccaps ($user)); |
| 98 |
$user_logins = ($user) ? (string)(int)get_user_option ("s2member_login_counter", $user_id) : "-1"; |
| 99 |
/**/ |
| 100 |
$uris = (strlen ($user_login)) ? preg_replace ("/%%current_user_login%%/i", c_ws_plugin__s2member_utils_strings::esc_ds ($user_login), $uris) : $uris; |
| 101 |
$uris = (strlen ($user_id)) ? preg_replace ("/%%current_user_id%%/i", c_ws_plugin__s2member_utils_strings::esc_ds ($user_id), $uris) : $uris; |
| 102 |
$uris = (strlen ($user_level)) ? preg_replace ("/%%current_user_level%%/i", c_ws_plugin__s2member_utils_strings::esc_ds ($user_level), $uris) : $uris; |
| 103 |
$uris = (strlen ($user_role)) ? preg_replace ("/%%current_user_role%%/i", c_ws_plugin__s2member_utils_strings::esc_ds ($user_role), $uris) : $uris; |
| 104 |
$uris = (strlen ($user_ccaps)) ? preg_replace ("/%%current_user_ccaps%%/i", c_ws_plugin__s2member_utils_strings::esc_ds ($user_ccaps), $uris) : $uris; |
| 105 |
$uris = (strlen ($user_logins)) ? preg_replace ("/%%current_user_logins%%/i", c_ws_plugin__s2member_utils_strings::esc_ds ($user_logins), $uris) : $uris; |
| 106 |
/**/ |
| 107 |
return apply_filters ("ws_plugin__s2member_fill_ruri_level_access_rc_vars", $uris, get_defined_vars ()); |
| 108 |
} |
| 109 |
} |
| 110 |
} |
| 111 |
?> |