temporary-clone-auto-login.php
1 month ago
temporary-clone-dash-notice.php
7 months ago
temporary-clone-restore.php
4 weeks ago
temporary-clone-status.php
7 months ago
temporary-clone-user-notice.php
1 year ago
temporary-clone-user-notice.php
116 lines
| 1 | <?php |
| 2 | |
| 3 | if (!defined('ABSPATH')) die('No direct access allowed'); |
| 4 | |
| 5 | class UpdraftPlus_Temporary_Clone_User_Notice { |
| 6 | |
| 7 | /** |
| 8 | * Constructor for the class. |
| 9 | */ |
| 10 | public function __construct() { |
| 11 | add_filter('wp_authenticate_user', array($this, 'wp_authenticate_user')); |
| 12 | add_action('wp_ajax_updraftplus_user_notice_ajax', array($this, 'updraftplus_user_notice_ajax')); |
| 13 | add_action('all_admin_notices', array($this, 'all_admin_notices_users_notice')); |
| 14 | } |
| 15 | |
| 16 | /** |
| 17 | * This function will add a dashboard notice to the users page, that gives the user the option to enable admin only logins to the clone. |
| 18 | * |
| 19 | * @return void |
| 20 | */ |
| 21 | public function all_admin_notices_users_notice() { |
| 22 | global $pagenow; |
| 23 | |
| 24 | if ('users.php' != $pagenow) return; |
| 25 | |
| 26 | $admin_login = get_site_option('updraftplus_clone_admin_only_login'); |
| 27 | |
| 28 | ?> |
| 29 | <div id="updraftplus_temporary_clone-usernotice" class="updated"> |
| 30 | <h1><?php esc_html_e('UpdraftPlus temporary clone user login settings:', 'updraftplus'); ?></h1> |
| 31 | <p><?php esc_html_e('You can forbid non-admins logins to this cloned site by checking the checkbox below', 'updraftplus'); ?></p> |
| 32 | <input type="checkbox" id="updraftplus_clone_admin_only" name="updraftplus_clone_admin_only" value="1" <?php if ($admin_login) echo 'checked="checked"'; ?> onclick="jQuery.post('<?php echo esc_js(admin_url('admin-ajax.php')); ?>', {action: 'updraftplus_user_notice_ajax', subaction: 'admin_only_login', nonce: '<?php echo esc_js(wp_create_nonce('updraftplus_admin_only_login'));?>', admin_only_login: jQuery(this).is(':checked') });"> <label for="updraftplus_clone_admin_only"><?php esc_html_e('Allow only administrators to log in', 'updraftplus'); ?></label><br> |
| 33 | </div> |
| 34 | <?php |
| 35 | } |
| 36 | |
| 37 | /** |
| 38 | * This function will check if the user trying to login is an admin and if non admin logins have been disabled. If non admin logins are disabled and the user logging in is not a admin then it will stop the login and return an error. |
| 39 | * Runs upon the WP filter wp_authenticate_user |
| 40 | * |
| 41 | * @param object $user - the user login object |
| 42 | * |
| 43 | * @return object|WP_Error - returns the logged in user or a WP_Error stopping non admin logins |
| 44 | */ |
| 45 | public function wp_authenticate_user($user) { |
| 46 | // The WP_User object does not exist in WP 3.2, so we don't check for that |
| 47 | if (is_wp_error($user) || !is_object($user) || empty($user->ID)) return $user; |
| 48 | |
| 49 | $admin_login = get_site_option('updraftplus_clone_admin_only_login'); |
| 50 | $user_is_admin = user_can($user->ID, 'manage_options'); |
| 51 | |
| 52 | if (!$user_is_admin && $admin_login) { |
| 53 | return new WP_Error('user_login_disabled', '<strong>ERROR</strong>: This user account is not allowed to login.'); |
| 54 | } |
| 55 | |
| 56 | return $user; |
| 57 | } |
| 58 | |
| 59 | /** |
| 60 | * This function will perform security checks before allowing the ajax calls for the UpdraftClone VPS mu-plugin be processed. |
| 61 | * |
| 62 | * @return void |
| 63 | */ |
| 64 | public function updraftplus_user_notice_ajax() { |
| 65 | |
| 66 | if (is_user_logged_in() && current_user_can('manage_options')) { |
| 67 | $this->process_user_notice_ajax(); |
| 68 | } |
| 69 | } |
| 70 | |
| 71 | /** |
| 72 | * This function will handle the ajax calls for the UpdraftClone user notice mu-plugin. |
| 73 | * |
| 74 | * @return void |
| 75 | */ |
| 76 | public function process_user_notice_ajax() { |
| 77 | $return = array('code' => 'fail', 'data' => ''); |
| 78 | |
| 79 | if (!isset($_POST['subaction'])) { |
| 80 | $return['code'] = 'error'; |
| 81 | $return['data'] = 'Missing subaction'; |
| 82 | echo json_encode($return); |
| 83 | die(); |
| 84 | } |
| 85 | |
| 86 | if ('admin_only_login' == $_POST['subaction']) { |
| 87 | check_ajax_referer('updraftplus_admin_only_login', 'nonce'); |
| 88 | |
| 89 | if (!isset($_POST['admin_only_login'])) { |
| 90 | $return['code'] = 'error'; |
| 91 | $return['data'] = 'Missing parameter'; |
| 92 | echo json_encode($return); |
| 93 | die(); |
| 94 | } |
| 95 | |
| 96 | $admin_only = ('true' === $_POST['admin_only_login']); |
| 97 | |
| 98 | update_site_option('updraftplus_clone_admin_only_login', $admin_only); |
| 99 | |
| 100 | $return['code'] = 'success'; |
| 101 | $return['data'] = 'Option updated'; |
| 102 | echo json_encode($return); |
| 103 | die(); |
| 104 | } else { |
| 105 | $return['code'] = 'error'; |
| 106 | $return['data'] = 'Unknown action'; |
| 107 | echo json_encode($return); |
| 108 | die(); |
| 109 | } |
| 110 | } |
| 111 | } |
| 112 | |
| 113 | if (defined('UPDRAFTPLUS_THIS_IS_CLONE')) { |
| 114 | new UpdraftPlus_Temporary_Clone_User_Notice(); |
| 115 | } |
| 116 |