class-user-notices.php — WP 2FA – Two-factor authentication for WordPress 2.6.2

wp-2fa / includes / classes / Admin / class-user-notices.php

wp-2fa / includes / classes / Admin Last commit date

Controllers 2 years ago Helpers 2 years ago Methods 2 years ago SettingsPages 2 years ago Views 2 years ago class-help-contact-us.php 2 years ago class-premium-features.php 2 years ago class-settings-page.php 2 years ago class-setup-wizard.php 2 years ago class-user-listing.php 2 years ago class-user-notices.php 2 years ago class-user-profile.php 2 years ago class-user-registered.php 2 years ago index.php 2 years ago

class-user-notices.php

263 lines

1	<?php
2	/**
3	* Responsible for WP2FA user's notifying.
4	*
5	* @package wp2fa
6	* @subpackage user-utils
7	* @copyright 2024 Melapress
8	* @license https://www.apache.org/licenses/LICENSE-2.0 Apache License 2.0
9	* @link https://wordpress.org/plugins/wp-2fa/
10	*/
11
12	namespace WP2FA\Admin;
13
14	use WP2FA\WP2FA;
15	use WP2FA\Extensions_Loader;
16	use WP2FA\Admin\Helpers\WP_Helper;
17	use WP2FA\Freemius\User_Licensing;
18	use WP2FA\Admin\Controllers\Methods;
19	use WP2FA\Admin\Helpers\User_Helper;
20	use WP2FA\Admin\Controllers\Settings;
21	use WP2FA\Admin\Views\Grace_Period_Notifications;
22	use WP2FA\Extensions\Integrations\WP2FA_Integrations;
23	use WP2FA\Extensions\Integrations\Plugins\Woocommerce;
24	use WP2FA\Extensions\WhiteLabeling\White_Labeling_Render;
25
26	/**
27	* User_Notices class with user notification filters
28	*
29	* @since 2.4.0
30	*/
31	if ( ! class_exists( '\WP2FA\Admin\User_Notices' ) ) {
32	/**
33	* User_Notices - Class for displaying notices to our users.
34	*/
35	class User_Notices {
36
37	/**
38	* Lets set things up
39	*/
40	public static function init() {
41	$enforcement_policy = WP2FA::get_wp2fa_setting( 'enforcement-policy' );
42	if ( ! empty( $enforcement_policy ) ) {
43	// Check we are supposed to, before adding action to show nag.
44	if ( in_array( $enforcement_policy, array( 'all-users', 'certain-roles-only', 'certain-users-only', 'superadmins-only', 'superadmins-siteadmins-only', 'enforce-on-multisite', true ), true ) ) {
45	$global_methods = Methods::get_available_2fa_methods();
46	$user = User_Helper::get_user_object();
47	$users_method = User_Helper::get_enabled_method_for_user( User_Helper::get_user_object() );
48
49	if ( Grace_Period_Notifications::notify_using_dashboard( User_Helper::get_user_object() ) ) {
50	add_action( 'admin_notices', array( __CLASS__, 'user_setup_2fa_nag' ) );
51	add_action( 'network_admin_notices', array( __CLASS__, 'user_setup_2fa_nag' ) );
52	}
53
54	// If enaabled method is no longer available, show nag so users reconfigures using an available remaining method.
55	if ( User_Helper::is_enforced( $user ) && ! empty( $users_method ) && empty( \array_intersect( array( $users_method ), $global_methods ) ) ) {
56	}
57	} elseif ( 'do-not-enforce' === WP2FA::get_wp2fa_setting( 'enforcement-policy' ) ) {
58	add_action( 'admin_notices', array( __CLASS__, 'user_reconfigure_2fa_nag' ) );
59	add_action( 'network_admin_notices', array( __CLASS__, 'user_setup_2fa_nag' ) );
60	}
61	}
62	}
63
64	/**
65	* The nag content
66	*
67	* @param string $is_shortcode - Is that a call from shortcode.
68	* @param string $configure_2fa_url - The configuration url.
69	*
70	* @return void
71	*/
72	public static function user_setup_2fa_nag( $is_shortcode = '', $configure_2fa_url = '' ) {
73
74	if ( isset( $_GET['user_id'] ) ) { // phpcs:ignore
75	$current_profile_user_id = (int) $_GET['user_id']; // phpcs:ignore
76	} elseif ( ! is_null( User_Helper::get_user_object() ) ) {
77	$current_profile_user_id = User_Helper::get_user_object()->ID;
78	} else {
79	$current_profile_user_id = false;
80	}
81
82	if ( ! $current_profile_user_id \|\|
83	isset( $_GET['user_id'] ) && // phpcs:ignore
84	$_GET['user_id'] !== User_Helper::get_user_object()->ID \|\| // phpcs:ignore
85	User_Helper::get_user_enforced_instantly( User_Helper::get_user_object() ) ) {
86	return;
87	}
88
89	$grace_expiry = (int) User_Helper::get_user_expiry_date( User_Helper::get_user_object() );
90
91	$class = 'notice notice-info wp-2fa-nag';
92
93	if ( User_Helper::get_user_needs_to_reconfigure_2fa( User_Helper::get_user_object() ) ) {
94	$message = WP2FA::get_wp2fa_white_label_setting( 'default-2fa-resetup-required-notice', true );
95	} else {
96	$message = WP2FA::get_wp2fa_white_label_setting( 'default-2fa-required-notice', true );
97	}
98
99	$is_nag_dismissed = User_Helper::get_nag_status();
100	$is_nag_needed = User_Helper::is_enforced( User_Helper::get_user_object()->ID );
101	$is_user_excluded = User_Helper::is_excluded( User_Helper::get_user_object()->ID );
102	$enabled_methods = User_Helper::get_enabled_method_for_user( User_Helper::get_user_object() );
103	$new_page_id = WP2FA::get_wp2fa_setting( 'custom-user-page-id' );
104
105	if ( empty( $new_page_id ) ) {
106	$new_page_id = Settings::get_custom_settings_page_id( '', User_Helper::get_user_object() );
107	}
108
109	$new_page_permalink = get_permalink( $new_page_id );
110
111	$setup_url = Settings::get_setup_page_link();
112
113	// Allow setup URL to be customized if outputting via shortcode.
114	if ( isset( $is_shortcode ) && 'output_shortcode' === $is_shortcode && ! empty( $configure_2fa_url ) ) {
115	$setup_url = $configure_2fa_url;
116	}
117
118	// Stop the page from being a link to a page this user cant access if needed.
119	if ( WP_Helper::is_multisite() && ! is_user_member_of_blog( User_Helper::get_user_object()->ID ) ) {
120	$new_page_id = false;
121	}
122
123	// If we have a custom page generated, lets use it.
124	if ( ! empty( $new_page_id ) && $new_page_permalink ) {
125	$setup_url = $new_page_permalink;
126	}
127
128	// If the nag has not already been dismissed, and of course if the user is eligible, lets show them something.
129	if ( ! $is_nag_dismissed && $is_nag_needed && empty( $enabled_methods ) && ! $is_user_excluded && ! empty( $grace_expiry ) ) {
130
131	$show = true;
132
133	if ( class_exists( '\WP2FA\Freemius\User_Licensing' ) ) {
134	if ( Extensions_Loader::use_proxytron() ) {
135	$show = User_Licensing::enable_2fa_user_setting( true );
136	}
137	}
138
139	if ( $show ) {
140	echo '<div class="' . esc_attr( $class ) . '">';
141	echo wpautop( wp_kses_post( WP2FA::replace_remaining_grace_period( $message, (int) $grace_expiry ) ) ); // phpcs:ignore WordPress.Security.EscapeOutput.OutputNotEscaped
142	echo ' <a href="' . esc_url( $setup_url ) . '" class="button button-primary">' . esc_html__( 'Configure 2FA now', 'wp-2fa' ) . '</a>';
143	echo ' <a href="#" class="button button-secondary dismiss-user-configure-nag">' . esc_html__( 'Remind me on next login', 'wp-2fa' ) . '</a></p>';
144	echo '</div>';
145	}
146	} else {
147	self::user_reconfigure_2fa_nag();
148	}
149	}
150
151	/**
152	* The nag content
153	*/
154	public static function user_reconfigure_2fa_nag() {
155
156	// If the nag has not already been dismissed, and of course if the user is eligible, lets show them something.
157	if ( User_Helper::needs_to_reconfigure_method() ) {
158	$class = 'notice notice-info wp-2fa-nag';
159
160	$message = esc_html__( 'The 2FA method you were using is no longer allowed on this website. Please reconfigure 2FA using one of the supported methods.', 'wp-2fa' );
161
162	echo '<div class="' . esc_attr( $class ) . '"><p>' . esc_html( $message );
163	echo ' <a href="' . esc_url( Settings::get_setup_page_link() ) . '" class="button button-primary">' . esc_html__( 'Configure 2FA now', 'wp-2fa' ) . '</a>';
164	echo ' <a href="#" class="button button-secondary wp-2fa-button-secondary dismiss-user-reconfigure-nag">' . esc_html__( 'I\'ll do it later', 'wp-2fa' ) . '</a></p>';
165	echo '</div>';
166	}
167	}
168
169
170	/**
171	* Dismiss notice and setup a user meta value so we know its been dismissed
172	*/
173	public static function dismiss_nag() {
174	User_Helper::set_nag_status( true );
175	}
176
177	/**
178	* Reset the nag when the user logs out, so they get it again next time.
179	*
180	* @param [type] $user_id - The ID of the user.
181	*
182	* @return void
183	*/
184	public static function reset_nag( $user_id ) {
185	User_Helper::remove_nag_status( $user_id );
186	}
187
188	/**
189	* Adds setting option in the white label settings page.
190	*
191	* @return void
192	*
193	* @since 2.5.0
194	*/
195	public static function white_label_settings_text() {
196	?>
197	<tr>
198	<th><label for="email-backup-method"><?php esc_html_e( '2FA mandatory notice', 'wp-2fa' ); ?></label></th>
199	<td>
200	<?php
201	echo White_Labeling_Render::get_method_text_editor( 'default-2fa-required-notice' ); // phpcs:ignore
202	?>
203	<div style="margin-top: 5px;"><span><strong><i><?php esc_html_e( 'Note:', 'wp-2fa' ); ?></i></strong> <?php esc_html_e( 'Only plain text is allowed.', 'wp-2fa' ); ?></span></div>
204	</td>
205	</tr>
206	<tr>
207	<th><label for="email-backup-method"><?php esc_html_e( '2FA reconfiguration mandatory notice', 'wp-2fa' ); ?></label></th>
208	<td>
209	<?php
210	echo White_Labeling_Render::get_method_text_editor( 'default-2fa-resetup-required-notice' ); // phpcs:ignore
211	?>
212	<div style="margin-top: 5px;"><span><strong><i><?php esc_html_e( 'Note:', 'wp-2fa' ); ?></i></strong> <?php esc_html_e( 'Only plain text is allowed.', 'wp-2fa' ); ?></span></div>
213	</td>
214	</tr>
215	<tr>
216	<th><label><?php esc_html_e( 'User profile 2FA configuration area title', 'wp-2fa' ); ?></label></th>
217	<td>
218	<?php
219	echo White_Labeling_Render::get_method_text_editor( 'user-profile-form-preamble-title' ); // phpcs:ignore
220	?>
221	<div style="margin-top: 5px;"><span><strong><i><?php esc_html_e( 'Note:', 'wp-2fa' ); ?></i></strong> <?php esc_html_e( 'Only plain text is allowed.', 'wp-2fa' ); ?></span></div>
222	</td>
223	</tr>
224	<tr>
225	<th><label><?php esc_html_e( 'User profile 2FA configuration area description', 'wp-2fa' ); ?></label></th>
226	<td>
227	<?php
228	echo White_Labeling_Render::get_method_text_editor( 'user-profile-form-preamble-desc' ); // phpcs:ignore
229	?>
230	<div style="margin-top: 5px;"><span><strong><i><?php esc_html_e( 'Note:', 'wp-2fa' ); ?></i></strong> <?php esc_html_e( 'Only plain text is allowed.', 'wp-2fa' ); ?></span></div>
231	</td>
232	</tr>
233	<?php
234	// phpcs:disable
235	// phpcs:enable
236	?>
237	<?php
238	}
239
240	/**
241	* Adds and filters extension values in the settings store array ($output).
242	*
243	* @param array $output - Array with the currently stored settings.
244	* @param array $input - Array with the input ($_POST) values.
245	*
246	* @return array
247	*
248	* @since 2.5.0
249	*/
250	public static function settings_store( array $output, array $input ) {
251	if ( isset( $input['default-2fa-required-notice'] ) ) {
252	$output['default-2fa-required-notice'] = \wp_kses_post( $input['default-2fa-required-notice'] );
253	}
254
255	if ( isset( $input['default-2fa-resetup-required-notice'] ) ) {
256	$output['default-2fa-resetup-required-notice'] = \wp_kses_post( $input['default-2fa-resetup-required-notice'] );
257	}
258
259	return $output;
260	}
261	}
262	}
263