# s2member/110913/includes/classes/user-securities.inc.php s2Member – Excellent for All Kinds of Memberships, Content Restriction Paywalls & Member Access Subscriptions, version 110913. 140 lines. - Page: https://pluginprobe.com/plugins/s2member/110913/code/includes/classes/user-securities.inc.php - Raw: https://pluginprobe.com/plugins/s2member/110913/raw/includes/classes/user-securities.inc.php - Modified: 2011-09-14T05:54:10+00:00 Line numbers below start at 1. Link to a line or a range by appending a fragment to the page URL, for example `https://pluginprobe.com/plugins/s2member/110913/code/includes/classes/user-securities.inc.php#L10-L20`. ```php init()`. * This prevents crashes when other plugins attempt to call upon `current_user_can()` before WordPress is initialized. * For instance, some plugins attempt to use `current_user_can()` on the `plugins_loaded` Hook, which they should not do. * * @package s2Member\User_Securities * @since 3.5 * * @attaches-to: ``add_action("init");`` * * @return null */ public static function initialize () /* Initializes the Filter for `user_has_cap`. */ { add_filter ("user_has_cap", "c_ws_plugin__s2member_user_securities::user_capabilities", 10, 3); } /** * Alters `WP_User->has_cap()` in special cases for Administrators. * * @package s2Member\User_Securities * @since 110815 * * @attaches-to: ``add_filter("user_has_cap");`` * * @param array $capabilities Expects an array of Capabilities passed in by the Filter. * This array contains all of the Capabilities that the User has *( i.e. ``$user->allcaps`` )*. * @param array $caps_map An array of Capabilities mapped out by the ``map_meta_cap`` function. * @param array $args Array of arguments originally passed through the ``has_cap()`` function. * However, WordPress® modifies this array of arguments in the following way. * Argument `[0]` is the Capability test string itself *( this is normal )*. * Argument `[1]` is added by WordPress®; it's the ID of the User. * Other arguments starting from array index `[2]` are normal. * @return array An array of Capabilities. */ public static function user_capabilities ($capabilities = FALSE, $caps_map = FALSE, $args = FALSE) { eval ('foreach(array_keys(get_defined_vars())as$__v)$__refs[$__v]=&$$__v;'); do_action ("ws_plugin__s2member_before_user_capabilities", get_defined_vars ()); unset ($__refs, $__v); /* Unset defined __refs, __v. */ /**/ if (!is_multisite () && !empty ($capabilities["administrator"]) && !empty ($args[0]) && preg_match ("/^access_s2member_ccap_/i", $args[0]) && apply_filters ("ws_plugin__s2member_admins_have_all_ccaps", true, get_defined_vars ())) $capabilities = array_merge ((array)$capabilities, array ($args[0] => 1)); /**/ else if (is_multisite () && c_ws_plugin__s2member_utils_conds::is_multisite_farm () && (is_super_admin () || !empty ($capabilities["administrator"])) && !empty ($args[0]) && ($args[0] === "edit_user" || $args[0] === "edit_users")) if ($args[0] === "edit_users" || ($args[0] === "edit_user" && !empty ($args[2]) && ((!empty ($args[1]) && (int)$args[1] === (int)$args[2]) || is_user_member_of_blog ($args[2])))) $capabilities = array_merge ((array)$capabilities, array ("edit_users" => 1)); /**/ return apply_filters ("ws_plugin__s2member_user_capabilities", $capabilities, get_defined_vars ()); } /** * Alters this Filter inside `/wp-admin/user-edit.php`. * * @package s2Member\User_Securities * @since 3.5 * * @attaches-to: ``add_filter("enable_edit_any_user_configuration");`` * * @param bool $allow Expects boolean value passed through by the Filter. * @return bool True if the current User is allowed to edit any User, else existing value. */ public static function ms_allow_edits ($allow = FALSE) { global $user_id; /* Available inside `/wp-admin/user-edit.php`. */ /**/ eval ('foreach(array_keys(get_defined_vars())as$__v)$__refs[$__v]=&$$__v;'); do_action ("ws_plugin__s2member_before_ms_allow_edits", get_defined_vars ()); unset ($__refs, $__v); /* Unset defined __refs, __v. */ /**/ if (is_multisite () && c_ws_plugin__s2member_utils_conds::is_multisite_farm ()) if (is_super_admin () || (current_user_can ("administrator") && $user_id && is_user_member_of_blog ($user_id))) $allow = true; /* Yes, allow Administrators to edit User Profiles. */ /**/ return apply_filters ("ws_plugin__s2member_ms_allow_edits", $allow, get_defined_vars ()); } /** * Hides Password fields for Demo Users; and deals with Password fields on Multisite Blog Farms. * * Demo accounts *( where the Username MUST be "demo" )*, will NOT be allowed to change their Password. * Any other restrictions you need to impose must be done through custom programming, using s2Member's Conditionals. * See `s2Member -> API Scripting`. * * @package s2Member\User_Securities * @since 3.5 * * @attaches-to: ``add_filter("show_password_fields");`` * * @param bool $show Expects boolean value passed through by the Filter. * @param obj $user Expects a `WP_User` object passed through by the Filter. * @return bool False if the Password is locked for this User, else existing value. */ public static function hide_password_fields ($show = TRUE, $user = FALSE) { eval ('foreach(array_keys(get_defined_vars())as$__v)$__refs[$__v]=&$$__v;'); do_action ("ws_plugin__s2member_before_hide_password_fields", get_defined_vars ()); unset ($__refs, $__v); /* Unset defined __refs, __v. */ /**/ if ($show && is_multisite () && c_ws_plugin__s2member_utils_conds::is_multisite_farm ()) if (!is_super_admin () && is_object ($user) && !empty ($user->ID) && is_object ($current_user = wp_get_current_user ()) && !empty ($current_user->ID)) if ($user->ID !== $current_user->ID) $show = false; /**/ if ($show && is_object ($user) && !empty ($user->ID) && $user->user_login === "demo") $show = false; /* Lock Password on Demos. */ /**/ return apply_filters ("ws_plugin__s2member_hide_password_fields", $show, get_defined_vars ()); } } } ?> ```