ꦫꦣꦺꦤ꧀ꦄꦤ꧀ꦠꦱꦺꦤ

PATH: home / lab2454c / invest.credityork.com / wp-content / plugins / wp-user-frontend / includes / free

<?php

/**
 * Login and forgot password handler class
 *
 * @since 2.2
 *
 * @author Tareq Hasan <tareq@wedevs.com>
 */
class WPUF_Simple_Login {
    private $login_errors = [];

private $messages = [];

private static $_instance;

public function __construct() {
        add_shortcode( 'wpuf-login', [ $this, 'login_form' ] );

add_action( 'init', [ $this, 'process_login' ] );
        add_action( 'init', [ $this, 'process_logout' ] );
        add_action( 'init', [ $this, 'process_reset_password' ] );

add_action( 'init', [ $this, 'wp_login_page_redirect' ] );
        add_action( 'init', [ $this, 'activation_user_registration' ] );
        add_action( 'login_form', [ $this, 'add_custom_fields' ] );
        add_action( 'login_enqueue_scripts', [ $this, 'login_form_scripts' ] );
        add_filter( 'wp_authenticate_user', [ $this, 'validate_custom_fields' ], 10, 2 );

// URL filters
        add_filter( 'login_url', [ $this, 'filter_login_url' ], 10, 2 );
        add_filter( 'logout_url', [ $this, 'filter_logout_url' ], 10, 2 );
        add_filter( 'lostpassword_url', [ $this, 'filter_lostpassword_url' ], 10, 2 );
        add_filter( 'register_url', [ $this, 'get_registration_url' ] );

add_filter( 'login_redirect', [ $this, 'default_login_redirect' ] );
        add_filter( 'login_form_login', [ $this, 'default_wp_login_override' ] );

add_filter( 'authenticate', [ $this, 'successfully_authenticate' ], 30, 3 );
    }

/**
     * Singleton object
     *
     * @return self
     */
    public static function init() {
        if ( ! self::$_instance ) {
            self::$_instance = new self();
        }

return self::$_instance;
    }

/**
     * Is override enabled
     *
     * @return bool
     */
    public function is_override_enabled() {
        $override = wpuf_get_option( 'register_link_override', 'wpuf_profile', 'off' );

if ( $override !== 'on' ) {
            return false;
        }

return true;
    }

/**
     * Add custom fields to WordPress default login form
     *
     * @since 2.9.0
     */
    public function add_custom_fields() {
        $recaptcha = wpuf_get_option( 'login_form_recaptcha', 'wpuf_profile', 'off' );

if ( $recaptcha === 'on' ) {
            echo wp_kses(
                recaptcha_get_html( wpuf_get_option( 'recaptcha_public', 'wpuf_general' ), true, null, is_ssl() ), [
                    'div' => [
                        'class' => [],
                        'data-sitekey' => [],
                    ],

'script' => [
                        'src' => [],
                    ],

'noscript' => [],

'iframe' => [
                        'src' => [],
                        'height' => [],
                        'width' => [],
                        'frameborder' => [],
                    ],
                    'br' => [],
                    'textarea' => [
                        'name' => [],
                        'rows' => [],
                        'cols' => [],
                    ],
                    'input' => [
                        'type'   => [],
                        'value' => [],
                        'name'   => [],
                    ],
                ]
            );
        }
    }

/**
     * Add custom scripts to WordPress default login form
     *
     * @since 2.9.0
     */
    public function login_form_scripts() {
        $post_data = wp_unslash( $_REQUEST );

if ( isset( $post_data['wpuf_login'] ) ) {
            return;
        }

$recaptcha = wpuf_get_option( 'login_form_recaptcha', 'wpuf_profile', 'off' );

if ( $recaptcha === 'on' ) { ?>
            <style type="text/css">
                body #login {
                    width: 350px;
                }

body .g-recaptcha {
                    margin: 15px 0px 30px 0;
                }
            </style>
            <?php
        }
    }

/**
     * Validate custom fields of WordPress default login form
     *
     * @since 2.9.0
     */
    public function validate_custom_fields( $user, $password ) {
        if ( isset( $_REQUEST['wpuf_login'] ) ) {
            return $user;
        }

$recaptcha = wpuf_get_option( 'login_form_recaptcha', 'wpuf_profile', 'off' );

if ( $recaptcha === 'on' ) {
            if ( isset( $_REQUEST['g-recaptcha-response'] ) ) {
                if ( empty( $_REQUEST['g-recaptcha-response'] ) ) {
                    $user = new WP_Error( 'WPUFLoginCaptchaError', 'Empty reCaptcha Field.' );
                } else {
                    $no_captcha        = 1;
                    $invisible_captcha = 0;

WPUF_Render_Form::init()->validate_re_captcha( $no_captcha, $invisible_captcha );
                }
            }
        }

return $user;
    }

/**
     * Get action url based on action type
     *
     * @param string $action
     * @param string $redirect_to url to redirect to
     *
     * @return string
     */
    public function get_action_url( $action = 'login', $redirect_to = '' ) {
        $root_url = $this->get_login_url();

switch ( $action ) {
            case 'resetpass':
                return add_query_arg( [ 'action' => 'resetpass' ], $root_url );
                break;

case 'lostpassword':
                return add_query_arg( [ 'action' => 'lostpassword' ], $root_url );
                break;

case 'register':
                return $this->get_registration_url();
                break;

case 'logout':
                return wp_nonce_url( add_query_arg( [ 'action' => 'logout' ], $root_url ), 'log-out' );
                break;

default:
                if ( empty( $redirect_to ) ) {
                    return $root_url;
                }

return add_query_arg( [ 'redirect_to' => urlencode( $redirect_to ) ], $root_url );
                break;
        }
    }

/**
     * Get login page url
     *
     * @return bool|string
     */
    public function get_login_url() {
        $page_id = wpuf_get_option( 'login_page', 'wpuf_profile', false );

if ( ! $page_id ) {
            remove_filter( 'login_url', [ $this, 'filter_login_url' ], 10 );
            return wp_login_url();
        }

$url = get_permalink( $page_id );

return apply_filters( 'wpuf_login_url', $url, $page_id );
    }

/**
     * Get registration page url
     *
     * @return bool|string
     */
    public function get_registration_url( $register_url = null ) {
        $register_link_override = wpuf_get_option( 'register_link_override', 'wpuf_profile', false );
        $page_id                = wpuf_get_option( 'reg_override_page', 'wpuf_profile', false );
        $wp_reg_url             = site_url( 'wp-login.php?action=register', 'login' );

if ( $register_link_override === 'off' || ! $page_id ) {
            return $wp_reg_url;
        }

$url = get_permalink( $page_id );

return apply_filters( 'wpuf_register_url', $url, $page_id );
    }

/**
     * Filter the login url with ours
     *
     * @param string $url
     * @param string $redirect
     *
     * @return string
     */
    public function filter_login_url( $url, $redirect ) {
        if ( ! $this->is_override_enabled() ) {
            return $url;
        }

return $this->get_action_url( 'login', $redirect );
    }

/**
     * Filter the logout url with ours
     *
     * @param string $url
     * @param string $redirect
     *
     * @return string
     */
    public function filter_logout_url( $url, $redirect ) {
        if ( ! $this->is_override_enabled() ) {
            return $url;
        }

return $this->get_action_url( 'logout', $redirect );
    }

/**
     * Filter the lost password url with ours
     *
     * @param string $url
     * @param string $redirect
     *
     * @return string
     */
    public function filter_lostpassword_url( $url, $redirect ) {
        if ( ! $this->is_override_enabled() ) {
            return $url;
        }

return $this->get_action_url( 'lostpassword', $redirect );
    }

/**
     * Get actions links for displaying in forms
     *
     * @param array $args
     *
     * @return string
     */
    public function get_action_links( $args = [] ) {
        $defaults = [
            'login'        => true,
            'register'     => true,
            'lostpassword' => true,
        ];

$args  = wp_parse_args( $args, $defaults );
        $links = [];

if ( $args['login'] ) {
            $links[] = sprintf( '<a href="%s">%s</a>', $this->get_action_url( 'login' ), __( 'Log In', 'wp-user-frontend' ) );
        }

if ( $args['register'] && get_option( 'users_can_register' ) ) {
            $links[] = sprintf( '<a href="%s">%s</a>', $this->get_action_url( 'register' ), __( 'Register', 'wp-user-frontend' ) );
        }

if ( $args['lostpassword'] ) {
            $links[] = sprintf( '<a href="%s">%s</a>', $this->get_action_url( 'lostpassword' ), __( 'Lost Password', 'wp-user-frontend' ) );
        }

return implode( ' | ', $links );
    }

/**
     * Shows the login form
     *
     * @return string
     */
    public function login_form() {
        $getdata = wp_unslash( $_GET );

$login_page = $this->get_login_url();
        $reset = isset( $getdata['reset'] ) ? sanitize_text_field( $getdata['reset'] ) : '';

if ( false === $login_page ) {
            return;
        }

ob_start();

if ( is_user_logged_in() ) {
            wpuf_load_template(
                'logged-in.php', [
                    'user' => wp_get_current_user(),
                ]
            );
        } else {
            $action = isset( $getdata['action'] ) ? sanitize_text_field( $getdata['action'] ) : 'login';

$args = [
                'action_url'  => $login_page,
                'redirect_to' => isset( $getdata['redirect_to'] ) ? $getdata['redirect_to'] : '',
            ];

switch ( $action ) {
                case 'lostpassword':
                    $checkemail = isset( $getdata['checkemail'] ) ? sanitize_text_field( $getdata['checkemail'] ) : '';

if ( 'confirm' === $checkemail ) {
                        $this->messages[] = __( 'Check your e-mail for the confirmation link.', 'wp-user-frontend' );
                    }

if ( ! $checkemail ) {
                        $this->messages[] = __( 'Please enter your username or email address. You will receive a link to create a new password via email.', 'wp-user-frontend' );
                    }

wpuf_load_template( 'lost-pass-form.php', $args );
                    break;

case 'rp':
                case 'resetpass':
                    if ( $reset === 'true' ) {
                        $this->messages[] = __( 'Your password has been reset successfully', 'wp-user-frontend' );

wpuf_load_template( 'login-form.php', $args );

break;
                    } else {
                        $this->messages[] = __( 'Enter your new password below.', 'wp-user-frontend' );

wpuf_load_template( 'reset-pass-form.php', $args );
                    }

break;

default:
                    $loggedout = isset( $getdata['loggedout'] ) ? sanitize_text_field( $getdata['loggedout'] ) : '';

if ( $loggedout === 'true' ) {
                        $this->messages[] = __( 'You are now logged out.', 'wp-user-frontend' );
                    }

$args['redirect_to'] = $this->get_login_redirect_link( $args['redirect_to'] );

wpuf_load_template( 'login-form.php', $args );

break;
            }
        }

return ob_get_clean();
    }

/**
     * Process login form
     *
     * @return void
     */
    public function process_login() {
        if ( ! empty( $_POST['wpuf_login'] ) && ! empty( $_POST['wpuf-login-nonce'] ) ) {
            $creds = [];

$nonce = sanitize_key( wp_unslash( $_POST['wpuf-login-nonce'] ) );

if ( isset( $nonce ) && ! wp_verify_nonce( $nonce, 'wpuf_login_action' ) ) {
                $this->login_errors[] = __( 'Nonce is invalid', 'wp-user-frontend' );

return;
            }

$log = isset( $_POST['log'] ) ? sanitize_text_field( wp_unslash( $_POST['log'] ) ) : '';
            $pwd = isset( $_POST['pwd'] ) ? sanitize_text_field( wp_unslash( $_POST['pwd'] ) ) : '';
            // $g_recaptcha_response = isset( $_POST['g-recaptcha-response'] ) ? sanitize_text_field( wp_unslash( $_POST['g-recaptcha-response'] ) ) : '';

$validation_error = new WP_Error();
            $validation_error = apply_filters( 'wpuf_process_login_errors', $validation_error, $log, $pwd );

if ( $validation_error->get_error_code() ) {
                $this->login_errors[] = $validation_error->get_error_message();

return;
            }

if ( empty( $log ) ) {
                $this->login_errors[] = __( 'Username is required.', 'wp-user-frontend' );

return;
            }

if ( empty( $pwd ) ) {
                $this->login_errors[] = __( 'Password is required.', 'wp-user-frontend' );

return;
            }

if ( isset( $_POST['g-recaptcha-response'] ) ) {
                if ( empty( $_POST['g-recaptcha-response'] ) ) {
                    $this->login_errors[] = __( 'Empty reCaptcha Field', 'wp-user-frontend' );
                    return;
                } else {
                    $no_captcha = 1;
                    $invisible_captcha = 0;
                    WPUF_Render_Form::init()->validate_re_captcha( $no_captcha, $invisible_captcha );
                }
            }

if ( is_email( $log ) && apply_filters( 'wpuf_get_username_from_email', true ) ) {
                $user = get_user_by( 'email', $log );

if ( isset( $user->user_login ) ) {
                    $creds['user_login'] = $user->user_login;
                } else {
                    $this->login_errors[] = '<strong>' . __( 'Error', 'wp-user-frontend' ) . ':</strong> ' . __( 'A user could not be found with this email address.', 'wp-user-frontend' );

return;
                }
            } else {
                $creds['user_login'] = $log;
            }

$creds['user_password'] = $pwd;
            $creds['remember']      = isset( $_POST['rememberme'] ) ? sanitize_text_field( wp_unslash( $_POST['rememberme'] ) ) : '';

if ( isset( $user->user_login ) ) {
                $validate = wp_authenticate_email_password( null, trim( $log ), $creds['user_password'] );

if ( is_wp_error( $validate ) ) {
                    $this->login_errors[] = $validate->get_error_message();
                    return;
                }
            }

$secure_cookie = is_ssl() ? true : false;
            $user          = wp_signon( apply_filters( 'wpuf_login_credentials', $creds ), $secure_cookie );

if ( is_wp_error( $user ) ) {
                $this->login_errors[] = $user->get_error_message();

return;
            } else {
                $redirect = $this->login_redirect();
                wp_redirect( apply_filters( 'wpuf_login_redirect', $redirect, $user ) );
                exit;
            }
        }
    }

/**
     * Redirect user to a specific page after login
     *
     * @return string $url
     */
    public function login_redirect() {
        $nonce = isset( $_REQUEST['wpuf-login-nonce'] ) ? sanitize_key( wp_unslash( $_REQUEST['wpuf-login-nonce'] ) ) : '';

if ( isset( $nonce ) && ! wp_verify_nonce( $nonce, 'wpuf_login_action' ) ) {
            return;
        }

$redirect_to = isset( $_REQUEST['redirect_to'] ) ? esc_url_raw( wp_unslash( $_REQUEST['redirect_to'] ) ) : '';
        return $this->get_login_redirect_link( $redirect_to );
    }

/**
     * Get redirect link after login
     *
     * Redirect Scenarios (based on `Login / Registration > Redirect After Login` settings)
     *
     * 1. No settings - should redirect to home
     * 2. Previous Page - should redirect to the page coming from before our login page
     * 3. Selected specific Page - should redirect to this page
     * 4. URL has `redirect_to` query param - this is the top priority above all
     *
     * @since 3.3.1
     *
     * @param string $redirect_to Optional $_REQUEST['redirect_to'] link. Must be unslashed before passing.
     *
     * @return string
     */
    public function get_login_redirect_link( $redirect_to = '' ) {
        if ( ! empty( $redirect_to ) ) {
            return esc_url_raw( $redirect_to );
        }

$redirect_after_login = wpuf_get_option( 'redirect_after_login_page', 'wpuf_profile', null );

if ( $redirect_after_login ) {
            if ( 'previous_page' === $redirect_after_login ) {
                $prev_url = wp_get_referer();
                if ( $prev_url ) {
                    return $prev_url;
                }

global $wp;
                return home_url( add_query_arg( [], $wp->request ) );
            }

$redirect_page_link = get_permalink( $redirect_after_login );

if ( ! empty( $redirect_page_link ) ) {
                return $redirect_page_link;
            }
        }

return home_url();
    }

/**
     * Redirect user to a specific page after login using default WordPress login form
     *
     * @return string $url
     */
    public function default_login_redirect( $redirect ) {
        $override    = wpuf_get_option( 'wp_default_login_redirect', 'wpuf_profile', false );
        $redirect_to = wpuf_get_option( 'redirect_after_login_page', 'wpuf_profile', false );

$link = get_permalink( $redirect_to );

if ( $override !== 'on' || 'previous_page' === $redirect_to || empty( $link ) ) {
            return $redirect;
        }

return $link;
    }

/**
     * Logout the user
     *
     * @return void
     */
    public function process_logout() {
        $action = isset( $_GET['action'] ) ? sanitize_text_field( wp_unslash( $_GET['action'] ) ) : '';

if ( $action === 'logout' ) {
            if ( ! $this->is_override_enabled() ) {
                return;
            }

check_admin_referer( 'log-out' );
            wp_logout();

$redirect_to = ! empty( $_REQUEST['redirect_to'] ) ? sanitize_text_field( wp_unslash( $_REQUEST['redirect_to'] ) ) : add_query_arg( [ 'loggedout' => 'true' ], $this->get_login_url() );
            wp_safe_redirect( $redirect_to );
            exit();
        }
    }

/**
     * Handle reset password form
     *
     * @return void
     */
    public function process_reset_password() {
        if ( ! isset( $_POST['wpuf_reset_password'] ) ) {
            return;
        }

// process lost password form
        if ( isset( $_POST['user_login'] ) && isset( $_POST['_wpnonce'] ) ) {
            $nonce = sanitize_key( wp_unslash( $_POST['_wpnonce'] ) );
            wp_verify_nonce( $nonce, 'wpuf_lost_pass' );

if ( $this->retrieve_password() ) {
                $url = add_query_arg(
                    [
                        'action' => 'lostpassword',
                        'checkemail' => 'confirm',
                    ], $this->get_login_url()
                );
                wp_redirect( $url );
                exit;
            }
        }

// process reset password form
        if ( isset( $_POST['pass1'] ) && isset( $_POST['pass2'] ) && isset( $_POST['key'] ) && isset( $_POST['login'] ) && isset( $_POST['_wpnonce'] ) ) {
            $pass1 = sanitize_text_field( wp_unslash( $_POST['pass1'] ) );
            $pass2 = sanitize_text_field( wp_unslash( $_POST['pass2'] ) );
            $key = sanitize_text_field( wp_unslash( $_POST['key'] ) );
            $login = sanitize_text_field( wp_unslash( $_POST['login'] ) );
            $nonce = sanitize_text_field( wp_unslash( $_POST['_wpnonce'] ) );

// verify reset key again
            $user = check_password_reset_key( $key, $login );

if ( $user instanceof WP_User ) {

// save these values into the form again in case of errors
                $args['key']   = $key;
                $args['login'] = $login;

wp_verify_nonce( $nonce, 'wpuf_reset_pass' );

if ( empty( $pass1 ) || empty( $pass2 ) ) {
                    $this->login_errors[] = __( 'Please enter your password.', 'wp-user-frontend' );

return;
                }

if ( $pass1 !== $pass2 ) {
                    $this->login_errors[] = __( 'Passwords do not match.', 'wp-user-frontend' );

return;
                }

$errors = new WP_Error();

do_action( 'validate_password_reset', $errors, $user );

if ( $errors->get_error_messages() ) {
                    foreach ( $errors->get_error_messages() as $error ) {
                        $this->login_errors[] = $error;
                    }

return;
                }

if ( ! $this->login_errors ) {
                    $this->reset_password( $user, $pass1 );

do_action( 'wpuf_customer_reset_password', $user );

wp_redirect( add_query_arg( 'reset', 'true', remove_query_arg( [ 'key', 'login' ] ) ) );
                    exit;
                }
            }
        }
    }

/**
     * Handles sending password retrieval email to customer.
     *
     * @uses $wpdb WordPress Database object
     *
     * @return bool True: when finish. False: on error
     */
    public function retrieve_password() {
        global $wpdb, $wp_hasher;

$nonce = isset( $_REQUEST['_wpnonce'] ) ? sanitize_key( wp_unslash( $_REQUEST['_wpnonce'] ) ) : '';

if ( isset( $nonce ) && ! wp_verify_nonce( $nonce, 'wpuf_lost_pass' ) ) {
            return;
        }

$user_login = isset( $_POST['user_login'] ) ? sanitize_text_field( wp_unslash( $_POST['user_login'] ) ) : '';

if ( empty( $user_login ) ) {
            $this->login_errors[] = __( 'Enter a username or e-mail address.', 'wp-user-frontend' );

return;
        } elseif ( strpos( $user_login, '@' ) && apply_filters( 'wpuf_get_username_from_email', true ) ) {
            $user_data = get_user_by( 'email', trim( $user_login ) );

if ( empty( $user_data ) ) {
                $this->login_errors[] = __( 'There is no user registered with that email address.', 'wp-user-frontend' );

return;
            }
        } else {
            $login = trim( $user_login );

$user_data = get_user_by( 'login', $login );
        }

do_action( 'lostpassword_post' );

if ( $this->login_errors ) {
            return false;
        }

if ( ! $user_data ) {
            $this->login_errors[] = __( 'Invalid username or e-mail.', 'wp-user-frontend' );

return false;
        }

// redefining user_login ensures we return the right case in the email
        $user_login = $user_data->user_login;
        $user_email = $user_data->user_email;

do_action( 'retrieve_password', $user_login );

$allow = apply_filters( 'allow_password_reset', true, $user_data->ID );

if ( ! $allow ) {
            $this->login_errors[] = __( 'Password reset is not allowed for this user', 'wp-user-frontend' );

return false;
        } elseif ( is_wp_error( $allow ) ) {
            $this->login_errors[] = $allow->get_error_message();

return false;
        }

$key = get_password_reset_key( $user_data );

if ( is_wp_error( $key ) ) {
            return;
        }

// Send email notification
        $this->email_reset_pass( $user_login, $user_email, $key );

return true;
    }

/**
     * Successfull authenticate when enable email verfication in registration
     *
     * @param object $user
     * @param string $username
     * @param string $password
     *
     * @return object
     */
    public function successfully_authenticate( $user, $username, $password ) {
        if ( ! is_wp_error( $user ) ) {
            if ( $user->ID ) {
                $resend_link = add_query_arg( 'resend_activation', $user->ID, $this->get_login_url() );
                $error       = new WP_Error();
                $wpuf_user   = new WPUF_User( $user->ID );

if ( ! $wpuf_user->is_verified() ) {
                    /* translators: %s: activation link */
                    $error->add( 'acitve_user', sprintf( __( '<strong>Your account is not active.</strong><br>Please check your email for activation link. <br><a href="%s">Click here</a> to resend the activation link', 'wp-user-frontend' ), $resend_link ) );

return $error;
                }
            }
        }

return $user;
    }

/**
     * Check in activation of user registration
     *
     * @since 2.2
     */
    public function activation_user_registration() {
        if ( ! isset( $_GET['wpuf_registration_activation'] ) && empty( $_GET['wpuf_registration_activation'] ) ) {
            return;
        }

if ( ! isset( $_GET['id'] ) && empty( $_GET['id'] ) ) {
            wpuf()->login->add_error( __( 'Activation URL is not valid', 'wp-user-frontend' ) );

return;
        }

$user_id          = intval( wp_unslash( $_GET['id'] ) );
        $user             = new WPUF_User( $user_id );
        $wpuf_user_active = get_user_meta( $user_id, '_wpuf_user_active', true );
        $wpuf_user_status = get_user_meta( $user_id, 'wpuf_user_status', true );

if ( ! $user ) {
            wpuf()->login->add_error( __( 'Invalid User activation url', 'wp-user-frontend' ) );

return;
        }

if ( $user->is_verified() ) {
            wpuf()->login->add_error( __( 'User already verified', 'wp-user-frontend' ) );

return;
        }

$activation_key = isset( $_GET['wpuf_registration_activation'] ) ? sanitize_text_field( wp_unslash( $_GET['wpuf_registration_activation'] ) ) : '';

if ( $user->get_activation_key() !== $activation_key ) {
            wpuf()->login->add_error( __( 'Activation URL is not valid', 'wp-user-frontend' ) );

return;
        }

$user->mark_verified();
        $user->remove_activation_key();

$message = __( 'Your account has been activated', 'wp-user-frontend' );

if ( $wpuf_user_status !== 'approved' ) {
            $message = __( "Your account has been verified , but you can't login until manually approved your account by an administrator.", 'wp-user-frontend' );
        }

wpuf()->login->add_message( $message );

// show activation message
        add_filter( 'wp_login_errors', [ $this, 'user_activation_message' ] );

$password_info_email = isset( $_GET['wpuf_password_info_email'] ) ? sanitize_email( wp_unslash( $_GET['wpuf_password_info_email'] ) ) : false;
        $the_user            = get_user_by( 'id', $user_id );
        $user_email          = $the_user->user_email;
        $blogname            = wp_specialchars_decode( get_option( 'blogname' ), ENT_QUOTES );

if ( $password_info_email ) {
            global $wpdb, $wp_hasher;

// Generate something random for a password reset key.
            $key = get_password_reset_key( $user );

if ( is_wp_error( $key ) ) {
                return;
            }
            /* translators: %s: blogname */
            $subject = sprintf( __( '[%s] Your username and password info', 'wp-user-frontend' ), $blogname );
            /* translators: %s: username */
            $message  = sprintf( __( 'Username: %s', 'wp-user-frontend' ), $the_user->user_login ) . "\r\n\r\n";
            $message .= __( 'To set your password, visit the following address:', 'wp-user-frontend' ) . "\r\n\r\n";
            $message .= network_site_url( "wp-login.php?action=rp&key=$key&login=" . rawurlencode( $the_user->user_login ), 'login' ) . "\r\n\r\n";
            $message .= wp_login_url() . "\r\n";

$subject  = apply_filters( 'wpuf_password_info_mail_subject', $subject );
            $message  = apply_filters( 'wpuf_password_info_mail_body', $message );
            $message  = get_formatted_mail_body( $message, $subject );

wp_mail( $user_email, $subject, $message );
        } else {
            /* translators: %s: blogname */
            $subject = sprintf( __( '[%s] Account has been activated', 'wp-user-frontend' ), $blogname );
            /* translators: %s: username */
            $message  = sprintf( __( 'Hi %s,', 'wp-user-frontend' ), $the_user->user_login ) . "\r\n\r\n";
            $message .= __( 'Congrats! Your account has been activated. To login visit the following url:', 'wp-user-frontend' ) . "\r\n\r\n";
            $message .= wp_login_url() . "\r\n\r\n";
            $message .= __( 'Thanks', 'wp-user-frontend' );

$subject  = apply_filters( 'wpuf_mail_after_confirmation_subject', $subject );
            $message  = apply_filters( 'wpuf_mail_after_confirmation_body', $message );
            $message  = get_formatted_mail_body( $message, $subject );

wp_mail( $user_email, $subject, $message );
        }

$autologin_after_registration = wpuf_get_option( 'autologin_after_registration', 'wpuf_profile', 'on' );
        $pack_id                      = ! empty( $_GET['pack_id'] ) ? sanitize_key( wp_unslash( $_GET['pack_id'] ) ) : '';

if ( $autologin_after_registration === 'on'
            && $pack_id !== null && is_integer( (int) $pack_id ) ) {
            wp_set_current_user( $user_id );
            wp_set_auth_cookie( $user_id );
        }

if ( $pack_id ) {
            wp_safe_redirect(
                add_query_arg(
                    [
                        'action' => 'wpuf_pay',
                        'type' => 'pack',
                        'pack_id' => $pack_id,
                    ], home_url() . '/payment'
                )
            );
            exit();
        }

add_filter( 'redirect_canonical', '__return_false' );
        do_action( 'wpuf_user_activated', $user_id );
    }

/**
     * Shows activation message on success to wp-login.php
     *
     * @since 2.2
     *
     * @return \WP_Error
     */
    public function user_activation_message() {
        return new WP_Error( 'user-activated', __( 'Your account has been activated', 'wp-user-frontend' ), 'message' );
    }

public function wp_login_page_redirect() {
        global $pagenow;

if ( ! is_admin() && $pagenow === 'wp-login.php' && isset( $_GET['action'] ) && $_GET['action'] === 'register' ) {
            if ( wpuf_get_option( 'register_link_override', 'wpuf_profile' ) !== 'on' ) {
                return;
            }

$reg_page = get_permalink( wpuf_get_option( 'reg_override_page', 'wpuf_profile' ) );
            wp_redirect( $reg_page );
            exit;
        }
    }

/**
     * Handles resetting the user's password.
     *
     * @param object $user     The user
     * @param string $new_pass New password for the user in plaintext
     *
     * @return void
     */
    public function reset_password( $user, $new_pass ) {
        do_action( 'password_reset', $user, $new_pass );

wp_set_password( $new_pass, $user->ID );

wp_password_change_notification( $user );
    }

/**
     * Email reset password link
     *
     * @param string $user_login
     * @param string $user_email
     * @param string $key
     */
    public function email_reset_pass( $user_login, $user_email, $key ) {
        $reset_url = add_query_arg(
            [
                'action' => 'rp',
                'key' => $key,
                'login' => urlencode( $user_login ),
            ], $this->get_login_url()
        );

$message = __( 'Someone requested that the password be reset for the following account:', 'wp-user-frontend' ) . "\r\n\r\n";
        $message .= network_home_url( '/' ) . "\r\n\r\n";
        /* translators: %s: username */
        $message .= sprintf( __( 'Username: %s', 'wp-user-frontend' ), $user_login ) . "\r\n\r\n";
        $message .= __( 'If this was a mistake, just ignore this email and nothing will happen.', 'wp-user-frontend' ) . "\r\n\r\n";
        $message .= __( 'To reset your password, visit the following address:', 'wp-user-frontend' ) . "\r\n\r\n";
        $message .= ' ' . $reset_url . " \r\n";

$blogname = wp_specialchars_decode( get_option( 'blogname' ), ENT_QUOTES );

if ( is_multisite() ) {
            $blogname = $GLOBALS['current_site']->site_name;
        }

$user_data = get_user_by( 'login', $user_login );
        /* translators: %s: blogname */
        $title   = sprintf( __( '[%s] Password Reset', 'wp-user-frontend' ), $blogname );
        $title   = apply_filters( 'retrieve_password_title', $title );

$message = apply_filters( 'retrieve_password_message', $message, $key, $user_login, $user_data );

if ( $message && ! wp_mail( $user_email, wp_specialchars_decode( $title ), $message ) ) {
            wp_die( esc_html( __( 'The e-mail could not be sent.', 'wp-user-frontend' ) ) . "<br />\n" . esc_html( __( 'Possible reason: your host may have disabled the mail() function.', 'wp-user-frontend' ) ) );
        }
    }

/**
     * Add Error message
     *
     * @since 2.8.8
     *
     * @param $message
     */
    public function add_error( $message ) {
        $this->login_errors[] = $message;
    }

/**
     * Add info message
     *
     * @since 2.8.8
     *
     * @param $message
     */
    public function add_message( $message ) {
        $this->messages[] = $message;
    }

/**
     * Show erros on the form
     *
     * @return void
     */
    public function show_errors() {
        $errors = apply_filters( 'wpuf_login_errors', $this->login_errors );
        if ( $errors ) {
            foreach ( $errors as $error ) {
                //phpcs:disable
                echo wp_kses_post( '<div class="wpuf-error">' . __( $error, 'wp-user-frontend' ) . '</div>' );
            }
        }
    }

/**
     * Show messages on the form
     *
     * @return void
     */
    public function show_messages() {
        if ( $this->messages ) {
            foreach ( $this->messages as $message ) {
                printf( '<div class="wpuf-message">%s</div>', esc_html( $message ) );
            }
        }
    }

/**
     * Get a posted value for showing in the form field
     *
     * @param string $key
     *
     * @return string
     */
    public static function get_posted_value( $key ) {
        if ( isset( $_REQUEST[ $key ] ) ) {
            return sanitize_text_field( wp_unslash( $_REQUEST[ $key ] ) );
        }

return '';
    }

/**
     * WP default login page override
     *
     * This hook only works in wp-login.php.
     *
     * @since 3.3.0
     *
     * @return void
     */
    public function default_wp_login_override() {
        $override       = wpuf_get_option( 'register_link_override', 'wpuf_profile', false );
        $login_redirect = wpuf_get_option( 'wp_default_login_redirect', 'wpuf_profile', false );
        $login_page     = wpuf_get_option( 'login_page', 'wpuf_profile', null );

$login_page_url = get_permalink( $login_page );

if ( wpuf_validate_boolean( $override ) && wpuf_validate_boolean( $login_redirect ) && ! empty( $login_page_url ) ) {
            if ( isset( $_REQUEST['redirect_to'] ) ) {
                $redirect_to = esc_url_raw( wp_unslash( $_REQUEST['redirect_to'] ) );
            } else {
                $redirect_to_pg_id = wpuf_get_option( 'redirect_after_login_page', 'wpuf_profile', null );
                $redirect_to_pg    = get_permalink( $redirect_to_pg_id );
                $redirect_to       = $redirect_to_pg ? $redirect_to_pg : home_url();
            }

$login_page_url = add_query_arg(
                'redirect_to',
                $redirect_to,
                $login_page_url
            );

wp_safe_redirect( $login_page_url );
            exit;
        }
    }
}

[+] admin
[-] edit-profile.php [edit]
[-] loader.php [edit]
[+] ..
[-] prompt.php [edit]
[-] subscription.php [edit]
[+] post-form-templates
[-] edit-user.php [edit]
[-] class-login.php [edit]
[-] form.php [edit]
[-] class-registration.php [edit]
[-] form-element.php [edit]