| 1 |
<?php |
| 2 |
// @codingStandardsIgnoreFile |
| 3 |
/** |
| 4 |
* Query protection routines. |
| 5 |
* |
| 6 |
* Copyright: © 2009-2011 |
| 7 |
* {@link http://websharks-inc.com/ WebSharks, Inc.} |
| 8 |
* (coded in the USA) |
| 9 |
* |
| 10 |
* Released under the terms of the GNU General Public License. |
| 11 |
* You should have received a copy of the GNU General Public License, |
| 12 |
* along with this software. In the main directory, see: /licensing/ |
| 13 |
* If not, see: {@link http://www.gnu.org/licenses/}. |
| 14 |
* |
| 15 |
* @package s2Member\Queries |
| 16 |
* @since 3.5 |
| 17 |
*/ |
| 18 |
if(!defined('WPINC')) // MUST have WordPress. |
| 19 |
exit('Do not access this file directly.'); |
| 20 |
|
| 21 |
if(!class_exists('c_ws_plugin__s2member_querys')) |
| 22 |
{ |
| 23 |
/** |
| 24 |
* Query protection routines. |
| 25 |
* |
| 26 |
* @package s2Member\Queries |
| 27 |
* @since 3.5 |
| 28 |
*/ |
| 29 |
class c_ws_plugin__s2member_querys |
| 30 |
{ |
| 31 |
/** |
| 32 |
* The current WordPress query object reference. |
| 33 |
* |
| 34 |
* @package s2Member\Queries |
| 35 |
* @since 110912 |
| 36 |
* |
| 37 |
* @var null|object |
| 38 |
*/ |
| 39 |
public static $current_wp_query; |
| 40 |
|
| 41 |
/** |
| 42 |
* Forces query Filters *(on-demand)*. |
| 43 |
* |
| 44 |
* s2Member respects the query var: `suppress_filters`. |
| 45 |
* If you need to make a query without it being Filtered, use ``$wp_query->set ('suppress_filters', true);``. |
| 46 |
* |
| 47 |
* @package s2Member\Queries |
| 48 |
* @since 3.5 |
| 49 |
* |
| 50 |
* @attaches-to ``add_action('pre_get_posts');`` |
| 51 |
* |
| 52 |
* @param WP_Query $wp_query Expects ``$wp_query``. |
| 53 |
*/ |
| 54 |
public static function force_query_level_access($wp_query = NULL) |
| 55 |
{ |
| 56 |
$_hook = 'ws_plugin__s2member_before_force_query_level_access'; if (isset($GLOBALS['wp_filter'][$_hook]) || isset($GLOBALS['wp_filter']['all'])) |
| 57 |
{ foreach(array_keys(get_defined_vars()) as $__v) $__refs[$__v] =& $$__v; do_action($_hook, get_defined_vars()); } unset($_hook, $__refs, $__v); //260901 Vars by reference. |
| 58 |
|
| 59 |
c_ws_plugin__s2member_querys::query_level_access($wp_query, TRUE); |
| 60 |
|
| 61 |
$_hook = 'ws_plugin__s2member_after_force_query_level_access'; if (isset($GLOBALS['wp_filter'][$_hook]) || isset($GLOBALS['wp_filter']['all'])) |
| 62 |
{ foreach(array_keys(get_defined_vars()) as $__v) $__refs[$__v] =& $$__v; do_action($_hook, get_defined_vars()); } unset($_hook, $__refs, $__v); //260901 Vars by reference. |
| 63 |
} |
| 64 |
|
| 65 |
/** |
| 66 |
* Filter all WordPress queries. |
| 67 |
* |
| 68 |
* s2Member respects the query var: `suppress_filters`. |
| 69 |
* If you need to make a query without it being Filtered, use ``$wp_query->set ('suppress_filters', true);``. |
| 70 |
* |
| 71 |
* @package s2Member\Queries |
| 72 |
* @since 3.5 |
| 73 |
* |
| 74 |
* @attaches-to ``add_action('pre_get_posts');`` |
| 75 |
* |
| 76 |
* @param WP_Query $wp_query Expects ``$wp_query`` from the Filter. |
| 77 |
* @param bool $force Optional. Defaults to false. If true, we bypass all standard conditions. |
| 78 |
* However, s2Member will NEVER bypass `supress_filters`. |
| 79 |
* |
| 80 |
* @todo For improved reliability, modify other query vars associated with exclusions/inclusions. Like `tag_slug__in`? |
| 81 |
* See: {@link http://codex.wordpress.org/Class_Reference/WP_Query#Parameters WP_Query#Parameters} |
| 82 |
* |
| 83 |
* @todo Make it possible to force filtering, even when used in combination with Query Conditionals and ``get_posts()``, which auto-supresses. |
| 84 |
* Or, perhaps strengthen the existing ``$force`` parameter in this regard. |
| 85 |
* |
| 86 |
* @see Workaround for bbPress and the `s` key. See: <http://bit.ly/1obLpv4> |
| 87 |
*/ |
| 88 |
public static function query_level_access($wp_query = NULL, $force = FALSE) |
| 89 |
{ |
| 90 |
global $wpdb; // Global DB object reference. |
| 91 |
|
| 92 |
c_ws_plugin__s2member_querys::$current_wp_query = &$wp_query; |
| 93 |
|
| 94 |
$_hook = 'ws_plugin__s2member_before_query_level_access'; if (isset($GLOBALS['wp_filter'][$_hook]) || isset($GLOBALS['wp_filter']['all'])) |
| 95 |
{ foreach(array_keys(get_defined_vars()) as $__v) $__refs[$__v] =& $$__v; do_action($_hook, get_defined_vars()); } unset($_hook, $__refs, $__v); //260901 Vars by reference. |
| 96 |
|
| 97 |
if(is_object($wp_query) && !$wp_query->get('___s2_is_bbp_has_replies')) |
| 98 |
// Workaround for bbPress and the `s` key. See: <http://bit.ly/1obLpv4> |
| 99 |
c_ws_plugin__s2member_querys::_query_level_access_sys($wp_query); // Systematics. |
| 100 |
|
| 101 |
remove_filter('comment_feed_where', 'c_ws_plugin__s2member_querys::_query_level_access_coms', 100, 2); |
| 102 |
remove_filter('wp_get_nav_menu_items', 'c_ws_plugin__s2member_querys::_query_level_access_navs', 100); |
| 103 |
|
| 104 |
if(is_object($wpdb) && is_object($wp_query) && (($o = $GLOBALS['WS_PLUGIN__']['s2member']['o']['filter_wp_query']) || $force)) |
| 105 |
{ |
| 106 |
if((!is_admin() || c_ws_plugin__s2member_querys::_is_admin_ajax_search($wp_query)) && !$wp_query->get('___s2_is_bbp_has_replies') /* See: <http://bit.ly/1obLpv4> */) |
| 107 |
{ |
| 108 |
$suppressing_filters = $wp_query->get('suppress_filters'); // Filter suppression on? |
| 109 |
|
| 110 |
if((!$suppressing_filters && $force) // Forcing this routine bypasses all of these other conditionals. Works with API function ``attach_s2member_query_filters()``. |
| 111 |
|| (!$suppressing_filters && in_array('all', $o) && !($wp_query->is_main_query() && $wp_query->is_singular())) // Don't create 404 errors. Allow Security Gate to handle these. |
| 112 |
|| (!$suppressing_filters && (in_array('all', $o) || in_array('searches', $o)) && $wp_query->is_search()) // Or, is this a search results query, possibly via AJAX: `admin-ajax.php`? |
| 113 |
|| (!$suppressing_filters && (in_array('all', $o) || in_array('feeds', $o)) && $wp_query->is_feed() && !$wp_query->is_comment_feed()) // Or, is this a feed; and it's NOT for comments? |
| 114 |
|| (!$suppressing_filters && (in_array('all', $o) || in_array('comment-feeds', $o)) && $wp_query->is_feed() && $wp_query->is_comment_feed()) // Or, is this a feed; and it IS indeed for comments? |
| 115 |
|| (($suppressing_filters !== 'n/a') && (in_array('all', $o) || in_array('nav-menus', $o)) && in_array('wp_get_nav_menu_items', ($callers = (isset($callers) ? $callers : c_ws_plugin__s2member_utilities::callers())))) |
| 116 |
) |
| 117 |
{ |
| 118 |
if(!$suppressing_filters && (in_array('all', $o) || in_array('comment-feeds', $o)) && $wp_query->is_feed() && $wp_query->is_comment_feed()) |
| 119 |
add_filter('comment_feed_where', 'c_ws_plugin__s2member_querys::_query_level_access_coms', 100, 2); |
| 120 |
|
| 121 |
if($suppressing_filters !== 'n/a' && (in_array('all', $o) || in_array('nav-menus', $o))) // Suppression irrelevant here. |
| 122 |
if(in_array('wp_get_nav_menu_items', ($callers = (isset($callers) ? $callers : c_ws_plugin__s2member_utilities::callers())))) |
| 123 |
add_filter('wp_get_nav_menu_items', 'c_ws_plugin__s2member_querys::_query_level_access_navs', 100); |
| 124 |
|
| 125 |
if((is_user_logged_in() && is_object($user = wp_get_current_user()) && !empty($user->ID) && ($user_id = $user->ID)) || !($user = FALSE)) |
| 126 |
{ |
| 127 |
$bbpress_restrictions_enable = apply_filters('ws_plugin__s2member_bbpress_restrictions_enable', TRUE); |
| 128 |
$bbpress_installed = c_ws_plugin__s2member_utils_conds::bbp_is_installed(); // bbPress is installed? |
| 129 |
$bbpress_forum_post_type = $bbpress_installed ? bbp_get_forum_post_type() : ''; // Acquire the current post type for forums. |
| 130 |
$bbpress_topic_post_type = $bbpress_installed ? bbp_get_topic_post_type() : ''; // Acquire the current post type for topics. |
| 131 |
|
| 132 |
if(!$user && ($_lwp = (int)$GLOBALS['WS_PLUGIN__']['s2member']['o']['login_welcome_page'])) |
| 133 |
{ |
| 134 |
$wp_query->set('post__in', array_unique(array_diff(c_ws_plugin__s2member_utils_arrays::force_integers((array)$wp_query->get('post__in')), array($_lwp)))); |
| 135 |
$wp_query->set('post__not_in', array_unique(array_merge(c_ws_plugin__s2member_utils_arrays::force_integers((array)$wp_query->get('post__not_in')), array($_lwp)))); |
| 136 |
} |
| 137 |
if(!$user && ($_dep = (int)$GLOBALS['WS_PLUGIN__']['s2member']['o']['file_download_limit_exceeded_page'])) |
| 138 |
{ |
| 139 |
$wp_query->set('post__in', array_unique(array_diff(c_ws_plugin__s2member_utils_arrays::force_integers((array)$wp_query->get('post__in')), array($_dep)))); |
| 140 |
$wp_query->set('post__not_in', array_unique(array_merge(c_ws_plugin__s2member_utils_arrays::force_integers((array)$wp_query->get('post__not_in')), array($_dep)))); |
| 141 |
} |
| 142 |
if(is_array($_ccaps = c_ws_plugin__s2member_utils_gets::get_unavailable_singular_ids_with_ccaps($user)) && !empty($_ccaps)) |
| 143 |
{ |
| 144 |
$wp_query->set('post__in', array_unique(array_diff(c_ws_plugin__s2member_utils_arrays::force_integers((array)$wp_query->get('post__in')), $_ccaps))); |
| 145 |
$wp_query->set('post__not_in', array_unique(array_merge(c_ws_plugin__s2member_utils_arrays::force_integers((array)$wp_query->get('post__not_in')), $_ccaps))); |
| 146 |
} |
| 147 |
if(is_array($_sps = c_ws_plugin__s2member_utils_gets::get_unavailable_singular_ids_with_sp()) && !empty($_sps)) |
| 148 |
{ |
| 149 |
$wp_query->set('post__in', array_unique(array_diff(c_ws_plugin__s2member_utils_arrays::force_integers((array)$wp_query->get('post__in')), $_sps))); |
| 150 |
$wp_query->set('post__not_in', array_unique(array_merge(c_ws_plugin__s2member_utils_arrays::force_integers((array)$wp_query->get('post__not_in')), $_sps))); |
| 151 |
} |
| 152 |
unset($_lwp, $_dep, $_ccaps, $_sps); // A little housekeeping here. Ditch these temporary variables. |
| 153 |
|
| 154 |
//260914.2132 Cache each Level capability result only for this query pass; Category/Tag/Post/Page restrictions can otherwise repeat the same `current_user_can()` check, while empty restriction settings still short-circuit without checking it. |
| 155 |
$_level_access = array(); |
| 156 |
for($n = $GLOBALS['WS_PLUGIN__']['s2member']['c']['levels']; $n >= 0; $n--) // Category Level Restrictions. |
| 157 |
{ |
| 158 |
if($GLOBALS['WS_PLUGIN__']['s2member']['o']['level'.$n.'_catgs'] === 'all' && (!$user || !(isset($_level_access[$n]) ? $_level_access[$n] : ($_level_access[$n] = (bool)current_user_can('access_s2member_level'.$n))))) |
| 159 |
{ |
| 160 |
$wp_query->set('category__in', array()); // Include no other Categories. |
| 161 |
$wp_query->set('category__not_in', ($_catgs = c_ws_plugin__s2member_utils_gets::get_all_category_ids())); |
| 162 |
$wp_query->set('post__not_in', array_unique(array_merge(c_ws_plugin__s2member_utils_arrays::force_integers((array)$wp_query->get('post__not_in')), ($_singulars = c_ws_plugin__s2member_utils_gets::get_singular_ids_in_terms($_catgs))))); |
| 163 |
$wp_query->set('post__in', array_unique(array_diff(c_ws_plugin__s2member_utils_arrays::force_integers((array)$wp_query->get('post__in')), $_singulars))); |
| 164 |
break; // All Categories will be locked down. |
| 165 |
} |
| 166 |
else if($GLOBALS['WS_PLUGIN__']['s2member']['o']['level'.$n.'_catgs'] && (!$user || !(isset($_level_access[$n]) ? $_level_access[$n] : ($_level_access[$n] = (bool)current_user_can('access_s2member_level'.$n))))) |
| 167 |
{ |
| 168 |
foreach(($_catgs = preg_split('/['."\r\n\t".'\s;,]+/', $GLOBALS['WS_PLUGIN__']['s2member']['o']['level'.$n.'_catgs'])) as $_catg) |
| 169 |
$_catgs = array_merge($_catgs, c_ws_plugin__s2member_utils_gets::get_all_child_category_ids($_catg)); |
| 170 |
|
| 171 |
$wp_query->set('category__in', array_unique(array_diff(c_ws_plugin__s2member_utils_arrays::force_integers((array)$wp_query->get('category__in')), $_catgs))); |
| 172 |
$wp_query->set('category__not_in', array_unique(array_merge(c_ws_plugin__s2member_utils_arrays::force_integers((array)$wp_query->get('category__not_in')), $_catgs))); |
| 173 |
$wp_query->set('post__not_in', array_unique(array_merge(c_ws_plugin__s2member_utils_arrays::force_integers((array)$wp_query->get('post__not_in')), ($_singulars = c_ws_plugin__s2member_utils_gets::get_singular_ids_in_terms($_catgs))))); |
| 174 |
$wp_query->set('post__in', array_unique(array_diff(c_ws_plugin__s2member_utils_arrays::force_integers((array)$wp_query->get('post__in')), $_singulars))); |
| 175 |
} |
| 176 |
} |
| 177 |
unset($_catgs, $_catg, $_singulars); // A little housekeeping here. Ditch these temporary variables. |
| 178 |
|
| 179 |
for($n = $GLOBALS['WS_PLUGIN__']['s2member']['c']['levels']; $n >= 0; $n--) // Tag Level Restrictions. |
| 180 |
{ |
| 181 |
if($GLOBALS['WS_PLUGIN__']['s2member']['o']['level'.$n.'_ptags'] === 'all' && (!$user || !(isset($_level_access[$n]) ? $_level_access[$n] : ($_level_access[$n] = (bool)current_user_can('access_s2member_level'.$n))))) |
| 182 |
{ |
| 183 |
$wp_query->set('tag__in', array()); // Include no other Tags. |
| 184 |
$wp_query->set('tag__not_in', ($_tags = c_ws_plugin__s2member_utils_gets::get_all_tag_ids())); |
| 185 |
$wp_query->set('post__not_in', array_unique(array_merge(c_ws_plugin__s2member_utils_arrays::force_integers((array)$wp_query->get('post__not_in')), ($_singulars = c_ws_plugin__s2member_utils_gets::get_singular_ids_in_terms($_tags))))); |
| 186 |
$wp_query->set('post__in', array_unique(array_diff(c_ws_plugin__s2member_utils_arrays::force_integers((array)$wp_query->get('post__in')), $_singulars))); |
| 187 |
break; // ALL Tags will be locked down. |
| 188 |
} |
| 189 |
else if($GLOBALS['WS_PLUGIN__']['s2member']['o']['level'.$n.'_ptags'] && (!$user || !(isset($_level_access[$n]) ? $_level_access[$n] : ($_level_access[$n] = (bool)current_user_can('access_s2member_level'.$n))))) |
| 190 |
{ |
| 191 |
$_tags = c_ws_plugin__s2member_utils_gets::get_tags_converted_to_ids($GLOBALS['WS_PLUGIN__']['s2member']['o']['level'.$n.'_ptags']); |
| 192 |
|
| 193 |
$wp_query->set('tag__in', array_unique(array_diff(c_ws_plugin__s2member_utils_arrays::force_integers((array)$wp_query->get('tag__in')), $_tags))); |
| 194 |
$wp_query->set('tag__not_in', array_unique(array_merge(c_ws_plugin__s2member_utils_arrays::force_integers((array)$wp_query->get('tag__not_in')), $_tags))); |
| 195 |
$wp_query->set('post__not_in', array_unique(array_merge(c_ws_plugin__s2member_utils_arrays::force_integers((array)$wp_query->get('post__not_in')), ($_singulars = c_ws_plugin__s2member_utils_gets::get_singular_ids_in_terms($_tags))))); |
| 196 |
$wp_query->set('post__in', array_unique(array_diff(c_ws_plugin__s2member_utils_arrays::force_integers((array)$wp_query->get('post__in')), $_singulars))); |
| 197 |
} |
| 198 |
} |
| 199 |
unset($_tags, $_tag, $_singulars); // A little housekeeping here. Ditch these temporary variables. |
| 200 |
|
| 201 |
for($n = $GLOBALS['WS_PLUGIN__']['s2member']['c']['levels']; $n >= 0; $n--) // Post Level Restrictions. |
| 202 |
{ |
| 203 |
if($GLOBALS['WS_PLUGIN__']['s2member']['o']['level'.$n.'_posts'] === 'all' && (!$user || !(isset($_level_access[$n]) ? $_level_access[$n] : ($_level_access[$n] = (bool)current_user_can('access_s2member_level'.$n))))) |
| 204 |
{ |
| 205 |
$wp_query->set('post__in', array_unique(array_diff(c_ws_plugin__s2member_utils_arrays::force_integers((array)$wp_query->get('post__in')), ($_posts = c_ws_plugin__s2member_utils_gets::get_all_post_ids())))); |
| 206 |
$wp_query->set('post__not_in', array_unique(array_merge(c_ws_plugin__s2member_utils_arrays::force_integers((array)$wp_query->get('post__not_in')), $_posts))); |
| 207 |
break; // ALL Posts will be locked down. |
| 208 |
} |
| 209 |
else if($GLOBALS['WS_PLUGIN__']['s2member']['o']['level'.$n.'_posts'] && (!$user || !(isset($_level_access[$n]) ? $_level_access[$n] : ($_level_access[$n] = (bool)current_user_can('access_s2member_level'.$n))))) |
| 210 |
{ |
| 211 |
foreach(($_posts = preg_split('/['."\r\n\t".'\s;,]+/', $GLOBALS['WS_PLUGIN__']['s2member']['o']['level'.$n.'_posts'])) as $_p) |
| 212 |
{ |
| 213 |
if(strpos($_p, 'all-') === 0 && preg_match('/^all-(.+?)$/', $_p, $_m)) // Protecting `all-` of a specific Post Type? |
| 214 |
if((is_array($_p_of_type = c_ws_plugin__s2member_utils_gets::get_all_post_ids($_m[1])) || (substr($_m[1], -1) === 's' && is_array($_p_of_type = c_ws_plugin__s2member_utils_gets::get_all_post_ids(substr($_m[1], 0, -1))))) && !empty($_p_of_type)) |
| 215 |
$_posts = array_merge($_posts, $_p_of_type); // Merge all Posts of this Post Type. |
| 216 |
} |
| 217 |
if($bbpress_restrictions_enable && $bbpress_installed) |
| 218 |
$_posts = array_merge($_posts, c_ws_plugin__s2member_utils_gets::get_all_child_post_ids($_posts, $bbpress_topic_post_type)); |
| 219 |
$_posts = array_unique(c_ws_plugin__s2member_utils_arrays::force_integers($_posts)); // Force integers. |
| 220 |
|
| 221 |
$wp_query->set('post__in', array_unique(array_diff(c_ws_plugin__s2member_utils_arrays::force_integers((array)$wp_query->get('post__in')), $_posts))); |
| 222 |
$wp_query->set('post__not_in', array_unique(array_merge(c_ws_plugin__s2member_utils_arrays::force_integers((array)$wp_query->get('post__not_in')), $_posts))); |
| 223 |
} |
| 224 |
} |
| 225 |
unset($_posts, $_p, $_m, $_p_of_type); // A little housekeeping here. Ditch these temporary variables. |
| 226 |
|
| 227 |
for($n = $GLOBALS['WS_PLUGIN__']['s2member']['c']['levels']; $n >= 0; $n--) // Page Level Restrictions. |
| 228 |
{ |
| 229 |
if($GLOBALS['WS_PLUGIN__']['s2member']['o']['level'.$n.'_pages'] === 'all' && (!$user || !(isset($_level_access[$n]) ? $_level_access[$n] : ($_level_access[$n] = (bool)current_user_can('access_s2member_level'.$n))))) |
| 230 |
{ |
| 231 |
$wp_query->set('post__in', array_unique(array_diff(c_ws_plugin__s2member_utils_arrays::force_integers((array)$wp_query->get('post__in')), ($_pages = c_ws_plugin__s2member_utils_gets::get_all_page_ids())))); |
| 232 |
$wp_query->set('post__not_in', array_unique(array_merge(c_ws_plugin__s2member_utils_arrays::force_integers((array)$wp_query->get('post__not_in')), $_pages))); |
| 233 |
break; // ALL Pages will be locked down. |
| 234 |
} |
| 235 |
else if($GLOBALS['WS_PLUGIN__']['s2member']['o']['level'.$n.'_pages'] && (!$user || !(isset($_level_access[$n]) ? $_level_access[$n] : ($_level_access[$n] = (bool)current_user_can('access_s2member_level'.$n))))) |
| 236 |
{ |
| 237 |
$_pages = c_ws_plugin__s2member_utils_arrays::force_integers(preg_split('/['."\r\n\t".'\s;,]+/', $GLOBALS['WS_PLUGIN__']['s2member']['o']['level'.$n.'_pages'])); |
| 238 |
|
| 239 |
$wp_query->set('post__in', array_unique(array_diff(c_ws_plugin__s2member_utils_arrays::force_integers((array)$wp_query->get('post__in')), $_pages))); |
| 240 |
$wp_query->set('post__not_in', array_unique(array_merge(c_ws_plugin__s2member_utils_arrays::force_integers((array)$wp_query->get('post__not_in')), $_pages))); |
| 241 |
} |
| 242 |
} |
| 243 |
unset($_pages, $_level_access); //260914.2132 Keep the per-pass Level capability cache out of the legacy `get_defined_vars()` hook context below. |
| 244 |
} |
| 245 |
$_hook = 'ws_plugin__s2member_during_query_level_access'; if (isset($GLOBALS['wp_filter'][$_hook]) || isset($GLOBALS['wp_filter']['all'])) |
| 246 |
{ foreach(array_keys(get_defined_vars()) as $__v) $__refs[$__v] =& $$__v; do_action($_hook, get_defined_vars()); } unset($_hook, $__refs, $__v); //260901 Vars by reference. |
| 247 |
} |
| 248 |
} |
| 249 |
} |
| 250 |
$_hook = 'ws_plugin__s2member_after_query_level_access'; if (isset($GLOBALS['wp_filter'][$_hook]) || isset($GLOBALS['wp_filter']['all'])) |
| 251 |
{ foreach(array_keys(get_defined_vars()) as $__v) $__refs[$__v] =& $$__v; do_action($_hook, get_defined_vars()); } unset($_hook, $__refs, $__v); //260901 Vars by reference. |
| 252 |
} |
| 253 |
|
| 254 |
/** |
| 255 |
* Always filters Systematics in search results & feeds. |
| 256 |
* |
| 257 |
* s2Member respects the query var: `suppress_filters`. |
| 258 |
* If you need to make a query without it being Filtered, use ``$wp_query->set ('suppress_filters', true);``. |
| 259 |
* |
| 260 |
* @package s2Member\Queries |
| 261 |
* @since 3.5 |
| 262 |
* |
| 263 |
* @param WP_Query $wp_query Expects ``$wp_query``. |
| 264 |
*/ |
| 265 |
public static function _query_level_access_sys($wp_query = NULL) |
| 266 |
{ |
| 267 |
global $wpdb; // Global DB object reference. |
| 268 |
|
| 269 |
$_hook = '_ws_plugin__s2member_before_query_level_access_sys'; if (isset($GLOBALS['wp_filter'][$_hook]) || isset($GLOBALS['wp_filter']['all'])) |
| 270 |
{ foreach(array_keys(get_defined_vars()) as $__v) $__refs[$__v] =& $$__v; do_action($_hook, get_defined_vars()); } unset($_hook, $__refs, $__v); //260901 Vars by reference. |
| 271 |
|
| 272 |
if(is_object($wpdb) && is_object($wp_query) && !($suppressing_filters = $wp_query->get('suppress_filters'))) |
| 273 |
if((!is_admin() && ($wp_query->is_search() || $wp_query->is_feed())) || c_ws_plugin__s2member_querys::_is_admin_ajax_search($wp_query)) |
| 274 |
{ |
| 275 |
$s = $systematics = array($GLOBALS['WS_PLUGIN__']['s2member']['o']['login_welcome_page'], $GLOBALS['WS_PLUGIN__']['s2member']['o']['membership_options_page'], $GLOBALS['WS_PLUGIN__']['s2member']['o']['file_download_limit_exceeded_page']); |
| 276 |
$s = $systematics = c_ws_plugin__s2member_utils_arrays::force_integers($s); // Force integer values here. |
| 277 |
|
| 278 |
$wp_query->set('post__not_in', array_unique(array_merge(c_ws_plugin__s2member_utils_arrays::force_integers((array)$wp_query->get('post__not_in')), $s))); |
| 279 |
$wp_query->set('post__in', array_unique(array_diff(c_ws_plugin__s2member_utils_arrays::force_integers((array)$wp_query->get('post__in')), $s))); |
| 280 |
|
| 281 |
$_hook = '_ws_plugin__s2member_during_query_level_access_sys'; if (isset($GLOBALS['wp_filter'][$_hook]) || isset($GLOBALS['wp_filter']['all'])) |
| 282 |
{ foreach(array_keys(get_defined_vars()) as $__v) $__refs[$__v] =& $$__v; do_action($_hook, get_defined_vars()); } unset($_hook, $__refs, $__v); //260901 Vars by reference. |
| 283 |
} |
| 284 |
$_hook = '_ws_plugin__s2member_after_query_level_access_sys'; if (isset($GLOBALS['wp_filter'][$_hook]) || isset($GLOBALS['wp_filter']['all'])) |
| 285 |
{ foreach(array_keys(get_defined_vars()) as $__v) $__refs[$__v] =& $$__v; do_action($_hook, get_defined_vars()); } unset($_hook, $__refs, $__v); //260901 Vars by reference. |
| 286 |
} |
| 287 |
|
| 288 |
/** |
| 289 |
* Filters WordPress navigation menu items. |
| 290 |
* |
| 291 |
* @package s2Member\Queries |
| 292 |
* @since 110912 |
| 293 |
* |
| 294 |
* @attaches-to ``add_filter('wp_get_nav_menu_items');`` |
| 295 |
* |
| 296 |
* @param array $items Expects an array of items to be passed through by the Filter. |
| 297 |
* |
| 298 |
* @return array The revised array of ``$items``. |
| 299 |
*/ |
| 300 |
public static function _query_level_access_navs($items = array()) |
| 301 |
{ |
| 302 |
global $wpdb; // Global DB object reference. |
| 303 |
$wp_query = &c_ws_plugin__s2member_querys::$current_wp_query; |
| 304 |
|
| 305 |
if(is_array($items) && !empty($items) && is_object($wpdb) && is_object($wp_query) && $wp_query->get('suppress_filters') !== 'n/a') |
| 306 |
{ |
| 307 |
$x_post_ids = (array)$wp_query->get('post__not_in'); |
| 308 |
$x_post_ids = c_ws_plugin__s2member_utils_arrays::force_integers($x_post_ids); |
| 309 |
|
| 310 |
$x_taxonomy_ids = array_merge((array)$wp_query->get('category__not_in'), (array)$wp_query->get('tag__not_in')); |
| 311 |
$x_taxonomy_ids = c_ws_plugin__s2member_utils_arrays::force_integers($x_taxonomy_ids); |
| 312 |
|
| 313 |
foreach($items as $key => $item) // Filter through all navigational menu ``$items``. |
| 314 |
if(isset($item->ID, $item->object_id, $item->type) && (int)$item->ID !== (int)$item->object_id && in_array($item->type, array('post_type', 'category'), TRUE)) |
| 315 |
if(($item->type === 'post_type' && in_array($item->object_id, $x_post_ids)) || ($item->type === 'category' && in_array($item->object_id, $x_taxonomy_ids))) |
| 316 |
{ |
| 317 |
foreach($items as $child_key => $child_item) // Loop back through all ``$items``, looking for children. |
| 318 |
if(!empty($child_item->menu_item_parent) && (int)$child_item->menu_item_parent === (int)$item->ID) |
| 319 |
unset($items[$child_key]); // Remove this ``$child_item``, belonging to an excluded parent. |
| 320 |
unset($items[$key]); // Exclude the parent ``$item`` now. |
| 321 |
} |
| 322 |
} |
| 323 |
remove_filter('wp_get_nav_menu_items', 'c_ws_plugin__s2member_querys::_query_level_access_navs', 100); |
| 324 |
|
| 325 |
return apply_filters('_ws_plugin__s2member_query_level_access_navs', $items, get_defined_vars()); |
| 326 |
} |
| 327 |
|
| 328 |
/** |
| 329 |
* Filters ``$cwhere`` query portion. |
| 330 |
* |
| 331 |
* @package s2Member\Queries |
| 332 |
* @since 110912 |
| 333 |
* |
| 334 |
* @attaches-to ``add_filter('comment_feed_where');`` |
| 335 |
* |
| 336 |
* @param string $cwhere Expects the SQL `WHERE` portion to be passed through by the Filter. |
| 337 |
* @param WP_Query $wp_query Expects ``$wp_query`` from the Filter. |
| 338 |
* |
| 339 |
* @return string The revised ``$cwhere`` string. |
| 340 |
*/ |
| 341 |
public static function _query_level_access_coms($cwhere = '', $wp_query = NULL) |
| 342 |
{ |
| 343 |
global $wpdb; // Global DB object reference. |
| 344 |
|
| 345 |
if(is_string($cwhere) && is_object($wpdb) && is_object($wp_query) && !$wp_query->get('suppress_filters')) |
| 346 |
{ |
| 347 |
$x_terms = array_merge((array)$wp_query->get('category__not_in'), (array)$wp_query->get('tag__not_in')); |
| 348 |
$x_terms = array_unique(c_ws_plugin__s2member_utils_arrays::force_integers($x_terms)); // Force integer values. |
| 349 |
$x_singulars = c_ws_plugin__s2member_utils_gets::get_singular_ids_in_terms($x_terms); // Singulars. |
| 350 |
|
| 351 |
$cwhere .= " AND `".$wpdb->comments."`.`comment_post_ID` NOT IN('".implode("','", (array)$wp_query->get('post__not_in'))."')"; |
| 352 |
$cwhere .= " AND `".$wpdb->comments."`.`comment_post_ID` NOT IN('".implode("','", $x_singulars)."')"; |
| 353 |
} |
| 354 |
remove_filter('comment_feed_where', 'c_ws_plugin__s2member_querys::_query_level_access_coms', 100, 2); |
| 355 |
|
| 356 |
return apply_filters('_ws_plugin__s2member_query_level_access_coms', $cwhere, get_defined_vars()); |
| 357 |
} |
| 358 |
|
| 359 |
/** |
| 360 |
* AJAX search via `admin-ajax.php`? |
| 361 |
* |
| 362 |
* @package s2Member\Queries |
| 363 |
* @since 110912 |
| 364 |
* |
| 365 |
* @param WP_Query $wp_query Expects ``$wp_query``. |
| 366 |
* |
| 367 |
* @return bool True if it's an AJAX search via `admin-ajax.php`, else false. |
| 368 |
*/ |
| 369 |
public static function _is_admin_ajax_search($wp_query = NULL) |
| 370 |
{ |
| 371 |
global $wpdb; // Global DB object reference. |
| 372 |
|
| 373 |
if(is_object($wpdb) && is_object($wp_query) && is_admin() && $wp_query->is_search()) |
| 374 |
if(defined('DOING_AJAX') && DOING_AJAX && !empty($_REQUEST['action']) && (did_action('wp_ajax_nopriv_'.$_REQUEST['action']) || did_action('wp_ajax_'.$_REQUEST['action']))) |
| 375 |
return apply_filters('_ws_plugin__s2member_is_admin_ajax_search', TRUE, get_defined_vars()); |
| 376 |
|
| 377 |
return apply_filters('_ws_plugin__s2member_is_admin_ajax_search', FALSE, get_defined_vars()); |
| 378 |
} |
| 379 |
|
| 380 |
/** |
| 381 |
* Filters WordPress Page queries that use wp_list_pages() |
| 382 |
* |
| 383 |
* @package s2Member\Queries |
| 384 |
* @since 130617 |
| 385 |
* |
| 386 |
* @attaches-to ``add_filter('wp_list_pages_excludes');`` |
| 387 |
* |
| 388 |
* @param array $excludes An array of any existing excludes. |
| 389 |
* |
| 390 |
* @return array The array of ``$excludes``. |
| 391 |
*/ |
| 392 |
public static function _query_level_access_list_pages($excludes = array()) |
| 393 |
{ |
| 394 |
if(!$GLOBALS['WS_PLUGIN__']['s2member']['o']['filter_wp_query'] |
| 395 |
|| (!in_array('all', $GLOBALS['WS_PLUGIN__']['s2member']['o']['filter_wp_query']) |
| 396 |
&& !in_array('pages', $GLOBALS['WS_PLUGIN__']['s2member']['o']['filter_wp_query'])) |
| 397 |
) return $excludes; // Not applicable. |
| 398 |
|
| 399 |
$systematics = array(); // Initialize. |
| 400 |
$systematics[] = $GLOBALS['WS_PLUGIN__']['s2member']['o']['file_download_limit_exceeded_page']; |
| 401 |
if(!is_user_logged_in()) $systematics[] = $GLOBALS['WS_PLUGIN__']['s2member']['o']['login_welcome_page']; |
| 402 |
$systematics = c_ws_plugin__s2member_utils_arrays::force_integers($systematics); // Force integer values here. |
| 403 |
$excludes = array_merge($excludes, $systematics); |
| 404 |
|
| 405 |
for($n = $GLOBALS['WS_PLUGIN__']['s2member']['c']['levels']; $n >= 0; $n--) // Here we need to exclude any Page not available to the current user. |
| 406 |
{ |
| 407 |
if($GLOBALS['WS_PLUGIN__']['s2member']['o']['level'.$n.'_pages'] === 'all' && !current_user_can('access_s2member_level'.$n)) |
| 408 |
$excludes = array_merge($excludes, c_ws_plugin__s2member_utils_arrays::force_integers(c_ws_plugin__s2member_utils_gets::get_all_page_ids())); |
| 409 |
else if($GLOBALS['WS_PLUGIN__']['s2member']['o']['level'.$n.'_pages'] && !current_user_can('access_s2member_level'.$n)) |
| 410 |
$excludes = array_merge($excludes, c_ws_plugin__s2member_utils_arrays::force_integers(preg_split('/['."\r\n\t".'\s;,]+/', $GLOBALS['WS_PLUGIN__']['s2member']['o']['level'.$n.'_pages']))); |
| 411 |
} |
| 412 |
return apply_filters('_ws_plugin__s2member_query_level_access_list_pages', $excludes, get_defined_vars()); |
| 413 |
} |
| 414 |
|
| 415 |
/** |
| 416 |
* Flags a WP Query has being a `bbp_has_replies()` query. |
| 417 |
* |
| 418 |
* @package s2Member\Queries |
| 419 |
* @since 140906 |
| 420 |
* |
| 421 |
* @attaches-to ``add_filter('bbp_has_replies_query');`` |
| 422 |
* |
| 423 |
* @param array $args Query arguments passed by the filter. |
| 424 |
* |
| 425 |
* @return array The array of ``$args``. |
| 426 |
* |
| 427 |
* @see Workaround for bbPress and the `s` key. See: <http://bit.ly/1obLpv4> |
| 428 |
*/ |
| 429 |
public static function _bbp_flag_has_replies($args) |
| 430 |
{ |
| 431 |
return array_merge($args, array('___s2_is_bbp_has_replies' => TRUE)); |
| 432 |
} |
| 433 |
} |
| 434 |
} |
| 435 |
|
