Installer
5 years ago
AdminNotices.php
4 years ago
AjaxHandler.php
4 years ago
Autologin.php
4 years ago
BuddyPressBbPress.php
5 years ago
EditUserProfile.php
4 years ago
ExtensionManager.php
4 years ago
FileUploader.php
4 years ago
FormPreviewHandler.php
5 years ago
FormRepository.php
4 years ago
FormShortcodeDefaults.php
5 years ago
GDPR.php
5 years ago
GlobalSiteAccess.php
4 years ago
ImageUploader.php
4 years ago
LoginAuth.php
4 years ago
Miscellaneous.php
5 years ago
ModifyRedirectDefaultLinks.php
5 years ago
PPRESS_Session.php
4 years ago
PROFILEPRESS_sql.php
5 years ago
PasswordReset.php
5 years ago
ProfileUrlRewrite.php
4 years ago
RegistrationAuth.php
4 years ago
SendEmail.php
5 years ago
ShortcodeThemeFactory.php
5 years ago
UserAvatar.php
4 years ago
UserSignupLocationListingPage.php
5 years ago
UsernameEmailRestrictLogin.php
4 years ago
WelcomeEmailAfterSignup.php
5 years ago
default-email-template.php
5 years ago
index.php
5 years ago
GlobalSiteAccess.php
82 lines
| 1 | <?php |
| 2 | |
| 3 | namespace ProfilePress\Core\Classes; |
| 4 | |
| 5 | class GlobalSiteAccess |
| 6 | { |
| 7 | public static function init() |
| 8 | { |
| 9 | // using wp hook because it precedes template_redirect which is used by Content protection redirect rules. |
| 10 | add_action('wp', array(__CLASS__, 'global_redirect'), -1); |
| 11 | } |
| 12 | |
| 13 | |
| 14 | /** |
| 15 | * Exclude the redirect URL. |
| 16 | * strtok() remove all query strings and trailing slash. @see https://stackoverflow.com/a/6975045/2648410 |
| 17 | * |
| 18 | * @param $val |
| 19 | * |
| 20 | * @return string |
| 21 | */ |
| 22 | public static function remove_query_string_trailing_slash($val) |
| 23 | { |
| 24 | return untrailingslashit(strtok($val, '?')); |
| 25 | } |
| 26 | |
| 27 | public static function global_redirect() |
| 28 | { |
| 29 | if (is_admin()) return; |
| 30 | |
| 31 | $access = ppress_get_setting('global_site_access', 'everyone', true); |
| 32 | |
| 33 | if ('login' != $access) return; |
| 34 | |
| 35 | $redirect_url = $redirect_url_page_id = ppress_get_setting('global_site_access_redirect_page'); |
| 36 | $custom_redirect_url = ppress_get_setting('global_site_access_custom_redirect_page'); |
| 37 | |
| 38 | $excluded_pages = ppress_get_setting('global_site_access_exclude_pages', [], true); |
| 39 | |
| 40 | $excluded_pages = array_map('absint', array_filter( |
| 41 | array_merge($excluded_pages, [ |
| 42 | ppress_get_setting('set_login_url', false, true), |
| 43 | ppress_get_setting('set_registration_url', false, true), |
| 44 | ppress_get_setting('set_lost_password_url', false, true), |
| 45 | ]) |
| 46 | ) |
| 47 | ); |
| 48 | |
| 49 | $allow_homepage = ppress_get_setting('global_site_access_allow_homepage'); |
| 50 | |
| 51 | if ( ! empty($redirect_url)) { |
| 52 | |
| 53 | $redirect_url = get_permalink(absint($redirect_url)); |
| 54 | |
| 55 | if (ppress_get_setting('set_login_url') == $redirect_url_page_id) { |
| 56 | $redirect_url = add_query_arg('redirect_to', ppress_get_current_url_query_string(), $redirect_url); |
| 57 | } |
| 58 | } |
| 59 | |
| 60 | if ( ! empty($custom_redirect_url)) { |
| 61 | $redirect_url = $custom_redirect_url; |
| 62 | } |
| 63 | |
| 64 | if (empty($redirect_url)) return; |
| 65 | |
| 66 | $current_url = ppress_get_current_url_query_string(); |
| 67 | |
| 68 | // skip all wp-login urls. |
| 69 | if (strpos($current_url, 'wp-login.php') !== false) return; |
| 70 | |
| 71 | if (self::remove_query_string_trailing_slash($current_url) == self::remove_query_string_trailing_slash($redirect_url)) return; |
| 72 | |
| 73 | if ($allow_homepage == 'yes' && is_front_page()) return; |
| 74 | |
| 75 | if ( ! empty($excluded_pages) && is_page($excluded_pages)) return; |
| 76 | |
| 77 | if ( ! is_user_logged_in()) { |
| 78 | wp_safe_redirect($redirect_url); |
| 79 | exit; |
| 80 | } |
| 81 | } |
| 82 | } |