PageRenderTime 45ms CodeModel.GetById 16ms RepoModel.GetById 1ms app.codeStats 0ms

/wp-content/plugins/s2member/includes/classes/posts-sp.inc.php

https://gitlab.com/Gashler/dp
PHP | 120 lines | 71 code | 18 blank | 31 comment | 76 complexity | 02e722daecaa7cea7e6e4d5e843d8440 MD5 | raw file
    

  1. <?php
    2. 

  2. /**
    3. 

  3. * s2Member's Post protection routines *(for specific Posts)*.
    4. 

  4. *
    5. 

  5. * Copyright: © 2009-2011
    6. 

  6. * {@link http://www.websharks-inc.com/ WebSharks, Inc.}
    7. 

  7. * (coded in the USA)
    8. 

  8. *
    9. 

  9. * Released under the terms of the GNU General Public License.
    10. 

  10. * You should have received a copy of the GNU General Public License,
    11. 

  11. * along with this software. In the main directory, see: /licensing/
    12. 

  12. * If not, see: {@link http://www.gnu.org/licenses/}.
    13. 

  13. *
    14. 

  14. * @package s2Member\Posts
    15. 

  15. * @since 3.5
    16. 

  16. */
    17. 

  17. if (realpath (__FILE__) === realpath ($_SERVER["SCRIPT_FILENAME"]))
    18. 

  18. 	exit ("Do not access this file directly.");
    19. 

  19. 

  20. if (!class_exists ("c_ws_plugin__s2member_posts_sp"))
    21. 

  21. 	{
    22. 

  22. 		/**
    23. 

  23. 		* s2Member's Post protection routines *(for specific Posts)*.
    24. 

  24. 		*
    25. 

  25. 		* @package s2Member\Posts
    26. 

  26. 		* @since 3.5
    27. 

  27. 		*/
    28. 

  28. 		class c_ws_plugin__s2member_posts_sp
    29. 

  29. 			{
    30. 

  30. 				/**
    31. 

  31. 				* Handles Post Level Access *(for specific Posts)*.
    32. 

  32. 				*
    33. 

  33. 				* @package s2Member\Posts
    34. 

  34. 				* @since 3.5
    35. 

  35. 				*
    36. 

  36. 				* @param int|str $post_id Numeric Post ID.
    37. 

  37. 				* @param bool $check_user Test permissions against the current User? Defaults to true.
    38. 

  38. 				* @return null|array Non-empty array (with details) if access is denied, else null if access is allowed.
    39. 

  39. 				*/
    40. 

  40. 				public static function check_specific_post_level_access ($post_id = FALSE, $check_user = TRUE)
    41. 

  41. 					{
    42. 

  42. 						do_action ("ws_plugin__s2member_before_check_specific_post_level_access", get_defined_vars ());
    43. 

  43. 

  44. 						$excluded = apply_filters ("ws_plugin__s2member_check_specific_post_level_access_excluded", false, get_defined_vars ());
    45. 

  45. 

  46. 						if (!$excluded && is_numeric ($post_id) && ($post_id = (int)$post_id) && $GLOBALS["WS_PLUGIN__"]["s2member"]["o"]["membership_options_page"])
    47. 

  47. 							{
    48. 

  48. 								$post_uri = c_ws_plugin__s2member_utils_urls::parse_uri (get_permalink ($post_id)); // Get a full valid URI for this Post now.
    49. 

  49. 

  50. 								if (!c_ws_plugin__s2member_systematics_sp::is_wp_systematic_use_specific_page ($post_id, $post_uri)) // Do NOT touch WordPress® Systematics.
    51. 

  51. 									{
    52. 

  52. 										$user = (is_user_logged_in () && is_object ($user = wp_get_current_user ()) && !empty ($user->ID)) ? $user : false; // Current User's object.
    53. 

  53. 

  54. 										if ($GLOBALS["WS_PLUGIN__"]["s2member"]["o"]["login_redirection_override"] && ($login_redirection_uri = c_ws_plugin__s2member_login_redirects::login_redirection_uri ($user, "root-returns-false")) && preg_match ("/^" . preg_quote ($login_redirection_uri, "/") . "$/", $post_uri) && (!$check_user || !$user || !$user->has_cap ("access_s2member_level0")))
    55. 

  55. 											return apply_filters ("ws_plugin__s2member_check_specific_post_level_access", array ("s2member_level_req" => 0), get_defined_vars ());
    56. 

  56. 

  57. 										else if (!c_ws_plugin__s2member_systematics_sp::is_systematic_use_specific_page ($post_id, $post_uri)) // Never restrict Systematics. However, there is 1 exception above.
    58. 

  58. 											{
    59. 

  59. 												for ($n = $GLOBALS["WS_PLUGIN__"]["s2member"]["c"]["levels"]; $n >= 0; $n--) // Post Level restrictions (including Custom Post Types). Go through each Level.
    60. 

  60. 													{
    61. 

  61. 														if ($GLOBALS["WS_PLUGIN__"]["s2member"]["o"]["level" . $n . "_posts"] === "all" && (!$check_user || !$user || !$user->has_cap ("access_s2member_level" . $n)))
    62. 

  62. 															return apply_filters ("ws_plugin__s2member_check_specific_post_level_access", array ("s2member_level_req" => $n), get_defined_vars ());
    63. 

  63. 

  64. 														else if (strpos ($GLOBALS["WS_PLUGIN__"]["s2member"]["o"]["level" . $n . "_posts"], "all-") !== false && ($post_type = get_post_type ($post_id)) && in_array ("all-" . $post_type . "s", preg_split ("/[\r\n\t\s;,]+/", $GLOBALS["WS_PLUGIN__"]["s2member"]["o"]["level" . $n . "_posts"])) && (!$check_user || !$user || !$user->has_cap ("access_s2member_level" . $n)))
    65. 

  65. 															return apply_filters ("ws_plugin__s2member_check_specific_post_level_access", array ("s2member_level_req" => $n), get_defined_vars ());
    66. 

  66. 

  67. 														else if ($GLOBALS["WS_PLUGIN__"]["s2member"]["o"]["level" . $n . "_posts"] && in_array ($post_id, preg_split ("/[\r\n\t\s;,]+/", $GLOBALS["WS_PLUGIN__"]["s2member"]["o"]["level" . $n . "_posts"])) && (!$check_user || !$user || !$user->has_cap ("access_s2member_level" . $n)))
    68. 

  68. 															return apply_filters ("ws_plugin__s2member_check_specific_post_level_access", array ("s2member_level_req" => $n), get_defined_vars ());
    69. 

  69. 													}
    70. 

  70. 

  71. 												for ($n = $GLOBALS["WS_PLUGIN__"]["s2member"]["c"]["levels"]; $n >= 0; $n--) // Category Level Access against this Post. Go through each Level.
    72. 

  72. 													{
    73. 

  73. 														if ($GLOBALS["WS_PLUGIN__"]["s2member"]["o"]["level" . $n . "_catgs"] === "all" && (!$check_user || !$user || !$user->has_cap ("access_s2member_level" . $n)))
    74. 

  74. 															return apply_filters ("ws_plugin__s2member_check_specific_post_level_access", array ("s2member_level_req" => $n), get_defined_vars ());
    75. 

  75. 

  76. 														else if ($GLOBALS["WS_PLUGIN__"]["s2member"]["o"]["level" . $n . "_catgs"] && (in_category (($catgs = preg_split ("/[\r\n\t\s;,]+/", $GLOBALS["WS_PLUGIN__"]["s2member"]["o"]["level" . $n . "_catgs"])), $post_id) || c_ws_plugin__s2member_utils_conds::in_descendant_category ($catgs, $post_id)) && (!$check_user || !$user || !$user->has_cap ("access_s2member_level" . $n)))
    77. 

  77. 															return apply_filters ("ws_plugin__s2member_check_specific_post_level_access", array ("s2member_level_req" => $n), get_defined_vars ());
    78. 

  78. 													}
    79. 

  79. 

  80. 												if (has_tag ("", $post_id)) // Here we take a look to see if this Post has any Tags. If so, we need to run the full set of routines against Tags also.
    81. 

  81. 													{
    82. 

  82. 														for ($n = $GLOBALS["WS_PLUGIN__"]["s2member"]["c"]["levels"]; $n >= 0; $n--) // Tag Level restrictions now. Go through each Level.
    83. 

  83. 															{
    84. 

  84. 																if ($GLOBALS["WS_PLUGIN__"]["s2member"]["o"]["level" . $n . "_ptags"] === "all" && (!$check_user || !$user || !$user->has_cap ("access_s2member_level" . $n)))
    85. 

  85. 																	return apply_filters ("ws_plugin__s2member_check_specific_post_level_access", array ("s2member_level_req" => $n), get_defined_vars ());
    86. 

  86. 

  87. 																else if ($GLOBALS["WS_PLUGIN__"]["s2member"]["o"]["level" . $n . "_ptags"] && has_tag (preg_split ("/[\r\n\t;,]+/", $GLOBALS["WS_PLUGIN__"]["s2member"]["o"]["level" . $n . "_ptags"]), $post_id) && (!$check_user || !$user || !$user->has_cap ("access_s2member_level" . $n)))
    88. 

  88. 																	return apply_filters ("ws_plugin__s2member_check_specific_post_level_access", array ("s2member_level_req" => $n), get_defined_vars ());
    89. 

  89. 															}
    90. 

  90. 													}
    91. 

  91. 

  92. 												for ($n = $GLOBALS["WS_PLUGIN__"]["s2member"]["c"]["levels"]; $n >= 0; $n--) // URIs. Go through each Level.
    93. 

  93. 													{
    94. 

  94. 														if ($GLOBALS["WS_PLUGIN__"]["s2member"]["o"]["level" . $n . "_ruris"]) // URIs configured at this Level?
    95. 

  95. 

  96. 															foreach (preg_split ("/[\r\n\t]+/", c_ws_plugin__s2member_ruris::fill_ruri_level_access_rc_vars ($GLOBALS["WS_PLUGIN__"]["s2member"]["o"]["level" . $n . "_ruris"], $user)) as $str)
    97. 

  97. 																if ($str && preg_match ("/" . preg_quote ($str, "/") . "/", $post_uri) && (!$check_user || !$user || !$user->has_cap ("access_s2member_level" . $n)))
    98. 

  98. 																	return apply_filters ("ws_plugin__s2member_check_specific_post_level_access", array ("s2member_level_req" => $n), get_defined_vars ());
    99. 

  99. 													}
    100. 

  100. 

  101. 												if (is_array ($ccaps_req = get_post_meta ($post_id, "s2member_ccaps_req", true)) && !empty ($ccaps_req))
    102. 

  102. 													{
    103. 

  103. 														foreach ($ccaps_req as $ccap) // The $user MUST satisfy ALL Custom Capabilities. Serialized array.
    104. 

  104. 															if (strlen ($ccap) && (!$check_user || !$user || !$user->has_cap ("access_s2member_ccap_" . $ccap)))
    105. 

  105. 																return apply_filters ("ws_plugin__s2member_check_specific_post_level_access", array ("s2member_ccap_req" => $ccap), get_defined_vars ());
    106. 

  106. 													}
    107. 

  107. 

  108. 												if ($GLOBALS["WS_PLUGIN__"]["s2member"]["o"]["specific_ids"] && in_array ($post_id, preg_split ("/[\r\n\t\s;,]+/", $GLOBALS["WS_PLUGIN__"]["s2member"]["o"]["specific_ids"])) && (!$check_user || !c_ws_plugin__s2member_sp_access::sp_access ($post_id, "read-only")))
    109. 

  109. 													return apply_filters ("ws_plugin__s2member_check_specific_post_level_access", array ("s2member_sp_req" => $post_id), get_defined_vars ());
    110. 

  110. 											}
    111. 

  111. 

  112. 										do_action ("ws_plugin__s2member_during_check_specific_post_level_access", get_defined_vars ());
    113. 

  113. 									}
    114. 

  114. 							}
    115. 

  115. 

  116. 						return apply_filters ("ws_plugin__s2member_check_specific_post_level_access", null, get_defined_vars ());
    117. 

  117. 					}
    118. 

  118. 			}
    119. 

  119. 	}
    120. 

  120. ?>
    121.