ꦫꦣꦺꦤ꧀ꦄꦤ꧀ꦠꦱꦺꦤ

PATH: home / lab2454c / mact34.com / wp-content / plugins / wpforms-user-registration

<?php

/**
 * User activation.
 *
 * This has been adapted from the WP Approve Users plugin, by Konstantin Obenland.
 *
 * @link https://github.com/obenland/wp-approve-user
 *
 * @since 1.0.0
 */
class WPForms_User_Activation {

/**
	 * Users that were not approved.
	 *
	 * @var array
	 */
	protected $unapproved_users = array();

/**
	 * Primary class constructor.
	 *
	 * @since 1.0.0
	 */
	public function __construct() {
		add_action( 'wpforms_loaded', array( $this, 'init' ) );
	}

/**
	 * Initialize.
	 *
	 * @since 1.0.0
	 */
	public function init() {

add_action( 'init', array( $this, 'listen' ) );

if ( is_admin() ) {
			add_action( 'pre_user_query', array( $this, 'pre_user_query' ) );
			add_action( 'views_users', array( $this, 'users_list_view' ) );
		}

add_action( 'admin_print_scripts-users.php', array( $this, 'users_list_enqueue' ) );
		add_action( 'admin_print_scripts-site-users.php', array( $this, 'users_list_enqueue' ) );
		add_action( 'user_row_actions', array( $this, 'users_list_actions' ), 10, 2 );
		add_action( 'ms_user_row_actions', array( $this, 'users_list_actions' ), 10, 2 );
		add_action( 'admin_action_wpforms_approve', array( $this, 'approve' ) );
		add_action( 'admin_action_wpforms_bulk_approve', array( $this, 'bulk_approve' ) );
		add_action( 'admin_action_wpforms_unapprove', array( $this, 'unapprove' ) );
		add_action( 'admin_action_wpforms_bulk_unapprove', array( $this, 'bulk_unapprove' ) );
		add_action( 'admin_action_wpforms_update', array( $this, 'update_message' ) );
		add_action( 'wp_authenticate_user', array( $this, 'user_authenticate' ) );
	}

/**
	 * Listen for activation key.
	 *
	 * @since 1.0.0
	 */
	public function listen() {

if ( empty( $_GET['wpforms_activate'] ) ) { // phpcs:ignore
			return;
		}

$query_args = base64_decode( $_GET['wpforms_activate'] ); // phpcs:ignore

parse_str( $query_args, $output );

if ( empty( $output['hash'] ) || empty( $output['user_id'] ) || empty( $output['user_email'] ) ) {
			return;
		}

/*
		 * All values returned into array are already urldecode()'d.
		 * Thus, we need to manually fix "+" (plus) character in emails (user+test@gmail.com) - it appears to be a space now.
		 */
		if ( strpos( $output['user_email'], ' ' ) !== false ) {
			$output['user_email'] = str_replace( ' ', '+', $output['user_email'] );
		}

// Verify hash matches.
		if ( wp_hash( $output['user_id'] . ',' . $output['user_email'] ) !== $output['hash'] ) {
			return;
		}

delete_user_meta( $output['user_id'], 'wpforms-pending' );

// Check if we need to assign new role.
		$role = get_user_meta( $output['user_id'], 'wpforms-role', true );
		if ( $role ) {
			wp_update_user(
				array(
					'ID'   => $output['user_id'],
					'role' => $role,
				)
			);
			delete_user_meta( $output['user_id'], 'wpforms-role' );
		}

// Redirect user to confirmation page.
		$confirmation = get_permalink( get_user_meta( $output['user_id'], 'wpforms-confirmation', true ) );
		$redirect     = $confirmation ? $confirmation : home_url();

delete_user_meta( $output['user_id'], 'wpforms-confirmation' );

do_action( 'wpforms_user_approve', $output['user_id'] );

// As we allow only internal redirects (to custom WP Page), it's safe to use wp_safe_redirect().
		wp_safe_redirect( $redirect );
		exit;
	}

/**
	 * Reset the user query to handle request for unapproved users only.
	 *
	 * @since 1.0.0
	 *
	 * @param WP_User_Query $query Default WordPress User Query.
	 *
	 * @return void
	 */
	public function pre_user_query( $query ) {

if ( 'wpforms_unapproved' === $query->query_vars['role'] ) {

unset( $query->query_vars['meta_query'][0] );

$query->query_vars['role']       = '';
			$query->query_vars['meta_key']   = 'wpforms-pending';
			$query->query_vars['meta_value'] = true;
			$query->prepare_query();
		}
	}

/**
	 * Enqueue the script for users table.
	 *
	 * @since 1.0.0
	 */
	public function users_list_enqueue() {

wp_enqueue_script(
			'wpforms-admin-users',
			plugin_dir_url( __FILE__ ) . 'assets/js/admin-users.js',
			array( 'jquery' ),
			WPFORMS_USER_REGISTRATION_VERSION,
			true
		);

wp_localize_script(
			'wpforms-admin-users',
			'wpforms_admin_users',
			array(
				'approve'   => esc_html__( 'Approve', 'wpforms-user-registration' ),
				'unapprove' => esc_html__( 'Unapprove', 'wpforms-user-registration' ),
			)
		);
	}

/**
	 * User table view.
	 *
	 * @since  1.0.0
	 *
	 * @param array $views An array of available list table views.
	 *
	 * @return array
	 */
	public function users_list_view( $views ) {

$unapproved_users = get_users(
			array(
				'meta_key'   => 'wpforms-pending',
				'meta_value' => true,
			)
		);

if ( $unapproved_users ) {

$site_id = isset( $_REQUEST['id'] ) ? intval( $_REQUEST['id'] ) : 0;
			$url     = 'site-users-network' === get_current_screen()->id ? add_query_arg( array( 'id' => $site_id ), 'site-users.php' ) : 'users.php';

$views['unapproved'] = sprintf(
				'<a href="%1$s" class="%2$s">%3$s <span class="count">(%4$s)</span></a>',
				esc_url( add_query_arg( array( 'role' => 'wpforms_unapproved' ), $url ) ),
				'wpforms_unapproved' === $this->get_role() ? 'current' : '',
				esc_html__( 'Unapproved', 'wpforms-user-registration' ),
				count( $unapproved_users )
			);
		}

return $views;
	}

/**
	 * User table row action.
	 *
	 * @since 1.0.0
	 *
	 * @param array $actions
	 * @param WP_User $user_object
	 *
	 * @return array
	 */
	public function users_list_actions( $actions, $user_object ) {

if ( ( get_current_user_id() !== $user_object->ID ) && wpforms_current_user_can() ) {

if ( get_user_meta( $user_object->ID, 'wpforms-pending', true ) ) {

$url = wp_nonce_url(
					add_query_arg(
						array(
							'action' => 'wpforms_approve',
							'user'   => $user_object->ID,
							'role'   => $this->get_role(),
						),
						$url
					),
					'wpforms-approve-users'
				);

$actions['wpforms-approve'] = sprintf( '<a class="submitapprove" href="%1$s">%2$s</a>', esc_url( $url ), esc_html__( 'Approve', 'wpforms-user-registration' ) );

} else {

$url = wp_nonce_url(
					add_query_arg(
						array(
							'action' => 'wpforms_unapprove',
							'user'   => $user_object->ID,
							'role'   => $this->get_role(),
						),
						$url
					),
					'wpforms-unapprove-users'
				);

$actions['wpforms-unapprove'] = sprintf( '<a class="submitunapprove" href="%1$s">%2$s</a>', esc_url( $url ), esc_html__( 'Unapprove', 'wpforms-user-registration' ) );
			}
		}

return $actions;
	}

/**
	 * Update user_meta to approve user.
	 *
	 * @since 1.0.0
	 */
	public function approve() {

check_admin_referer( 'wpforms-approve-users' );

$this->do_approve();
	}

/**
	 * Update user_meta in bulk to approve user.
	 *
	 * @since 1.0.0
	 */
	public function bulk_approve() {

check_admin_referer( 'bulk-users' );

$this->set_up_role_context();
		$this->do_approve();
	}

/**
	 * Update user_meta to unapprove user.
	 *
	 * @since 1.0.0
	 */
	public function unapprove() {

check_admin_referer( 'wpforms-unapprove-users' );

$this->do_unapprove();
	}

/**
	 * Update user_meta in bulk to unapprove user.
	 *
	 * @since 1.0.0
	 */
	public function bulk_unapprove() {

check_admin_referer( 'bulk-users' );

$this->set_up_role_context();
		$this->do_unapprove();
	}

/**
	 * Add the update message to the admin notices queue.
	 *
	 * @since 1.0.0
	 */
	public function update_message() {

if ( ! isset( $_REQUEST['update'] ) ) { //phpcs:ignore
			return;
		}

$count = absint( $_REQUEST['count'] );

switch ( $_REQUEST['update'] ) { //phpcs:ignore
			case 'wpforms-approved':
				/* translators: %s - number of users. */
				$message = sprintf( _n( '%s user approved.', '%s users approved.', $count, 'wpforms-user-registration' ), number_format_i18n( $count ) );
				break;

case 'wpforms-unapproved':
				/* translators: %s - number of users. */
				$message = sprintf( _n( '%s user unapproved.', '%s users unapproved.', $count, 'wpforms-user-registration' ), number_format_i18n( $count ) );
				break;
			default:
				$message = apply_filters( 'wpforms_update_message_handler', '', $_REQUEST['update'] ); //phpcs:ignore
		}

if ( isset( $message ) ) {
			add_settings_error(
				'wpforms_user_registration',
				esc_attr( $_REQUEST['update'] ), //phpcs:ignore
				esc_html( $message ),
				'updated'
			);

add_action( 'all_admin_notices', array( $this, 'display_settings_errors' ) );
		}

// Prevent other admin action handlers from trying to handle our action.
		$_REQUEST['action'] = - 1;
	}

/**
	 * Display all addon settings errors.
	 *
	 * @since 1.2.0
	 */
	public function display_settings_errors() {
		settings_errors( 'wpforms_user_registration' );
	}

/**
	 * Check whether the user is approved. Throws error if not.
	 *
	 * @since 1.0.0
	 *
	 * @param WP_User|WP_Error $userdata
	 *
	 * @return WP_User|WP_Error
	 */
	public function user_authenticate( $userdata ) {

if (
			! is_wp_error( $userdata ) &&
			get_user_meta( $userdata->ID, 'wpforms-pending', true ) &&
			$userdata->user_email !== get_bloginfo( 'admin_email' )
		) {
			$userdata = new WP_Error(
				'wpforms_confirmation_error',
				wp_kses(
					__( '<strong>ERROR:</strong> Your account must be activated before you can login.', 'wpforms-user-registration' ),
					array(
						'strong' => array(),
					)
				)
			);
		}

return $userdata;
	}

/**********************
	 * Protected Methods. *
	 **********************/

/**
	 * Update user_meta to approve user.
	 *
	 * @since 1.0.0
	 */
	protected function do_approve() {

list( $userids, $url ) = $this->check_user();

foreach ( (array) $userids as $id ) {
			$id = (int) $id;

if ( ! current_user_can( 'edit_user', $id ) ) {
				wp_die( esc_html__( 'You can&#8217;t edit that user.' ), '', array(
					'back_link' => true,
				) );
			}

delete_user_meta( $id, 'wpforms-pending' );
			delete_user_meta( $id, 'wpforms-confirmation' );

// Check if we need to assign new role.
			$role = get_user_meta( $id, 'wpforms-role', true );
			if ( $role ) {
				wp_update_user(
					array(
						'ID'   => $id,
						'role' => $role,
					)
				);
				delete_user_meta( $id, 'wpforms-role' );
			}

do_action( 'wpforms_user_approve', $id );
		}

wp_redirect(
			add_query_arg(
				array(
					'action' => 'wpforms_update',
					'update' => 'wpforms-approved',
					'count'  => count( $userids ),
					'role'   => $this->get_role(),
				),
				$url
			)
		);
		exit();
	}

/**
	 * Update user_meta to unapprove user.
	 *
	 * @since 1.0.0
	 */
	protected function do_unapprove() {

list( $userids, $url ) = $this->check_user();

foreach ( (array) $userids as $id ) {
			$id = (int) $id;

if ( ! current_user_can( 'edit_user', $id ) ) {
				wp_die( esc_html__( 'You can&#8217;t edit that user.' ), '', array(
					'back_link' => true,
				) );
			}

update_user_meta( $id, 'wpforms-pending', true );
			do_action( 'wpforms_user_unapprove', $id );
		}

wp_redirect(
			add_query_arg(
				array(
					'action' => 'wpforms_update',
					'update' => 'wpforms-unapproved',
					'count'  => count( $userids ),
					'role'   => $this->get_role(),
				),
				$url
			)
		);
		exit();
	}

/**
	 * Check permissions and assembles User IDs.
	 *
	 * @since 1.0.0
	 *
	 * @return array User IDs and URL.
	 */
	protected function check_user() {

$site_id = isset( $_REQUEST['id'] ) ? intval( $_REQUEST['id'] ) : 0;
		$url     = 'site-users-network' === get_current_screen()->id ? add_query_arg( array( 'id' => $site_id ), 'site-users.php' ) : 'users.php';

if ( empty( $_REQUEST['users'] ) && empty( $_REQUEST['user'] ) ) {
			wp_redirect( $url );
			exit();
		}

if ( ! current_user_can( 'promote_users' ) ) {
			wp_die( esc_html__( 'You can&#8217;t unapprove users.', 'wpforms-user-registration' ), '', array(
				'back_link' => true,
			) );
		}

$userids = empty( $_REQUEST['users'] ) ? array( intval( $_REQUEST['user'] ) ) : array_map( 'intval', (array) $_REQUEST['users'] );
		$userids = array_diff( $userids, array( get_user_by( 'email', get_bloginfo( 'admin_email' ) )->ID ) );

return array( $userids, $url );
	}

/**
	 * Set the role context on bulk actions.
	 *
	 * On bulk actions the role parameter is not passed, since we're using a form
	 * to submit information. The information is only available through the
	 * `_wp_http_referer` parameter, so we get it from there and make it available
	 * for the request.
	 *
	 * @since 1.0.0
	 */
	protected function set_up_role_context() {

if ( empty( $_REQUEST['role'] ) && ! empty( $_REQUEST['_wp_http_referer'] ) ) {
			$referrer = wp_parse_url( $_REQUEST['_wp_http_referer'] );

if ( ! empty( $referrer['query'] ) ) {
				$args = wp_parse_args( $referrer['query'] );

if ( ! empty( $args['role'] ) ) {
					$_REQUEST['role'] = $args['role'];
				}
			}
		}
	}

/**
	 * Return the current role.
	 *
	 * If the user list is in the context of a specific role, this function makes
	 * sure that the requested role is valid. By returning `false` otherwise, we
	 * make sure that parameter gets removed from the activation link.
	 *
	 * @since 1.0.0
	 *
	 * @return string|bool The role key if set, false otherwise.
	 */
	protected function get_role() {

$roles   = array_keys( get_editable_roles() );
		$roles[] = 'wpforms_unapproved';
		$role    = false;

if ( isset( $_REQUEST['role'] ) && in_array( $_REQUEST['role'], $roles, true ) ) {
			$role = $_REQUEST['role'];
		}

return $role;
	}

}

new WPForms_User_Activation;

[-] class-user-registration.php [edit]
[-] class-user-registration-template.php [edit]
[+] ..
[+] languages
[-] wpforms-user-registration.php [edit]
[+] assets
[-] class-user-login-template.php [edit]
[-] class-user-login.php [edit]
[-] CHANGELOG.md [edit]
[-] class-user-activation.php [edit]