| 1 |
<?php |
| 2 |
// @codingStandardsIgnoreFile |
| 3 |
/** |
| 4 |
* s2Member's URI protection routines *(for current URI)*. |
| 5 |
* |
| 6 |
* Copyright: © 2009-2011 |
| 7 |
* {@link http://websharks-inc.com/ WebSharks, Inc.} |
| 8 |
* (coded in the USA) |
| 9 |
* |
| 10 |
* Released under the terms of the GNU General Public License. |
| 11 |
* You should have received a copy of the GNU General Public License, |
| 12 |
* along with this software. In the main directory, see: /licensing/ |
| 13 |
* If not, see: {@link http://www.gnu.org/licenses/}. |
| 14 |
* |
| 15 |
* @package s2Member\URIs |
| 16 |
* @since 3.5 |
| 17 |
*/ |
| 18 |
if(!defined('WPINC')) // MUST have WordPress. |
| 19 |
exit ('Do not access this file directly.'); |
| 20 |
|
| 21 |
if(!class_exists('c_ws_plugin__s2member_ruris')) |
| 22 |
{ |
| 23 |
/** |
| 24 |
* s2Member's URI protection routines *(for current URI)*. |
| 25 |
* |
| 26 |
* @package s2Member\URIs |
| 27 |
* @since 3.5 |
| 28 |
*/ |
| 29 |
class c_ws_plugin__s2member_ruris |
| 30 |
{ |
| 31 |
/** |
| 32 |
* Handles URI Level Access permissions *(for current URI)*. |
| 33 |
* |
| 34 |
* @package s2Member\URIs |
| 35 |
* @since 3.5 |
| 36 |
* |
| 37 |
* @return null Or exits script execution after redirection. |
| 38 |
*/ |
| 39 |
public static function check_ruri_level_access() |
| 40 |
{ |
| 41 |
do_action('ws_plugin__s2member_before_check_ruri_level_access', get_defined_vars()); |
| 42 |
|
| 43 |
$ci = $GLOBALS['WS_PLUGIN__']['s2member']['o']['ruris_case_sensitive'] ? '' : 'i'; |
| 44 |
$excluded = apply_filters('ws_plugin__s2member_check_ruri_level_access_excluded', FALSE, get_defined_vars()); |
| 45 |
|
| 46 |
if(!$excluded && $GLOBALS['WS_PLUGIN__']['s2member']['o']['membership_options_page']) // Has it been excluded? |
| 47 |
{ |
| 48 |
if(!c_ws_plugin__s2member_systematics::is_wp_systematic_use_page()) // Do NOT touch WordPress Systematics. This excludes all WordPress Systematics. |
| 49 |
{ |
| 50 |
$user = (is_user_logged_in() && is_object($user = wp_get_current_user()) && !empty($user->ID)) ? $user : FALSE; // Current User's object. |
| 51 |
|
| 52 |
if($GLOBALS['WS_PLUGIN__']['s2member']['o']['login_redirection_override'] && ($login_redirection_uri = c_ws_plugin__s2member_login_redirects::login_redirection_uri($user, 'root-returns-false')) && preg_match('/^'.preg_quote($login_redirection_uri, '/').'$/'.$ci, $_SERVER['REQUEST_URI']) && c_ws_plugin__s2member_no_cache::no_cache_constants('restricted') && (!$user || !$user->has_cap('access_s2member_level0'))) |
| 53 |
c_ws_plugin__s2member_mo_page::wp_redirect_w_mop_vars('ruri', $_SERVER['REQUEST_URI'], 'level', 0, $_SERVER['REQUEST_URI'], 'sys').exit (); |
| 54 |
|
| 55 |
else if(!c_ws_plugin__s2member_systematics::is_systematic_use_page()) // Do NOT protect Systematics. However, there is 1 exception above ^. |
| 56 |
{ |
| 57 |
for($n = $GLOBALS['WS_PLUGIN__']['s2member']['c']['levels']; $n >= 0; $n--) // URIs. Go through each Level. |
| 58 |
{ |
| 59 |
if($GLOBALS['WS_PLUGIN__']['s2member']['o']['level'.$n.'_ruris']) // URIs configured at this Level? |
| 60 |
foreach(preg_split('/['."\r\n\t".']+/', c_ws_plugin__s2member_ruris::fill_ruri_level_access_rc_vars($GLOBALS['WS_PLUGIN__']['s2member']['o']['level'.$n.'_ruris'], $user)) as $str) |
| 61 |
if($str && preg_match('/'.preg_quote($str, '/').'/'.$ci, $_SERVER['REQUEST_URI']) && c_ws_plugin__s2member_no_cache::no_cache_constants('restricted') && (!$user || !$user->has_cap('access_s2member_level'.$n))) |
| 62 |
c_ws_plugin__s2member_mo_page::wp_redirect_w_mop_vars('ruri', $_SERVER['REQUEST_URI'], 'level', $n, $_SERVER['REQUEST_URI']).exit (); |
| 63 |
} |
| 64 |
} |
| 65 |
do_action('ws_plugin__s2member_during_check_ruri_level_access', get_defined_vars()); |
| 66 |
} |
| 67 |
} |
| 68 |
do_action('ws_plugin__s2member_after_check_ruri_level_access', get_defined_vars()); |
| 69 |
} |
| 70 |
|
| 71 |
/** |
| 72 |
* Fills Replacement Code variables in URIs; collectively. |
| 73 |
* |
| 74 |
* @package s2Member\URIs |
| 75 |
* @since 3.5 |
| 76 |
* |
| 77 |
* @param string $uris A URI string, or a string of multiple URIs is also fine. |
| 78 |
* @param object $user Optional. A `WP_User` object. Defaults to the current User, if logged-in. |
| 79 |
* |
| 80 |
* @return string Collective string of input URIs, with Replacement Codes having been filled. |
| 81 |
*/ |
| 82 |
public static function fill_ruri_level_access_rc_vars($uris = '', $user = NULL) |
| 83 |
{ |
| 84 |
foreach(array_keys(get_defined_vars()) as $__v) $__refs[$__v] =& $$__v; |
| 85 |
do_action('ws_plugin__s2member_before_fill_ruri_level_access_rc_vars', get_defined_vars()); |
| 86 |
unset($__refs, $__v); // Housekeeping. |
| 87 |
|
| 88 |
$uris = (string)$uris; // Force ``$uris`` to a string value. |
| 89 |
$orig_uris = $uris; // Record the original URIs that were passed in; collectively. |
| 90 |
|
| 91 |
$user = (is_object($user) || is_object($user = wp_get_current_user())) |
| 92 |
&& !empty($user->ID) ? $user : NULL; |
| 93 |
|
| 94 |
$user_id = ($user) ? (string)$user->ID : ''; |
| 95 |
$user_login = ($user) ? (string)strtolower($user->user_login) : ''; |
| 96 |
$user_nicename = ($user) ? (string)strtolower($user->user_nicename) : ''; |
| 97 |
|
| 98 |
$user_level = (string)c_ws_plugin__s2member_user_access::user_access_level($user); |
| 99 |
$user_role = (string)c_ws_plugin__s2member_user_access::user_access_role($user); |
| 100 |
$user_ccaps = (string)implode('-', c_ws_plugin__s2member_user_access::user_access_ccaps($user)); |
| 101 |
$user_logins = ($user) ? (string)(int)get_user_option('s2member_login_counter', $user_id) : '-1'; |
| 102 |
|
| 103 |
$uris = (strlen($user_login)) ? preg_replace('/%%current_user_login%%/i', c_ws_plugin__s2member_utils_strings::esc_refs(urlencode($user_login)), $uris) : $uris; |
| 104 |
$uris = (strlen($user_nicename)) ? preg_replace('/%%current_user_nicename%%/i', c_ws_plugin__s2member_utils_strings::esc_refs(urlencode($user_nicename)), $uris) : $uris; |
| 105 |
$uris = (strlen($user_id)) ? preg_replace('/%%current_user_id%%/i', c_ws_plugin__s2member_utils_strings::esc_refs(urlencode($user_id)), $uris) : $uris; |
| 106 |
$uris = (strlen($user_level)) ? preg_replace('/%%current_user_level%%/i', c_ws_plugin__s2member_utils_strings::esc_refs(urlencode($user_level)), $uris) : $uris; |
| 107 |
$uris = (strlen($user_role)) ? preg_replace('/%%current_user_role%%/i', c_ws_plugin__s2member_utils_strings::esc_refs(urlencode($user_role)), $uris) : $uris; |
| 108 |
$uris = (strlen($user_ccaps)) ? preg_replace('/%%current_user_ccaps%%/i', c_ws_plugin__s2member_utils_strings::esc_refs(urlencode($user_ccaps)), $uris) : $uris; |
| 109 |
$uris = (strlen($user_logins)) ? preg_replace('/%%current_user_logins%%/i', c_ws_plugin__s2member_utils_strings::esc_refs(urlencode($user_logins)), $uris) : $uris; |
| 110 |
|
| 111 |
return apply_filters('ws_plugin__s2member_fill_ruri_level_access_rc_vars', $uris, get_defined_vars()); |
| 112 |
} |
| 113 |
} |
| 114 |
} |
| 115 |
|