From 08b44fb842cb91f9c10d9c61925dfb81f66c834d Mon Sep 17 00:00:00 2001
From: Nikita Sinelnikov <nsinelnikov.work@gmail.com>
Date: Fri, 20 Jan 2023 01:40:44 +0200
Subject: [PATCH] - fixed #1125;

---
 includes/core/class-access.php | 154 ++++++++++++++++++++++++++++-----
 templates/restricted-blog.php  |  39 +++++++++
 2 files changed, 171 insertions(+), 22 deletions(-)
 create mode 100644 templates/restricted-blog.php

diff --git a/includes/core/class-access.php b/includes/core/class-access.php
index a35b1f5a..3dc11a72 100644
--- a/includes/core/class-access.php
+++ b/includes/core/class-access.php
@@ -76,6 +76,7 @@ if ( ! class_exists( 'um\core\Access' ) ) {
 
 			// check the site's accessible more priority have Individual Post/Term Restriction settings
 			add_action( 'template_redirect', array( &$this, 'template_redirect' ), 1000 );
+			add_action( 'um_access_check_blog_page_settings', array( &$this, 'um_access_check_blog_page_settings' ) );
 			add_action( 'um_access_check_individual_term_settings', array( &$this, 'um_access_check_individual_term_settings' ) );
 			add_action( 'um_access_check_global_settings', array( &$this, 'um_access_check_global_settings' ) );
 
@@ -243,11 +244,11 @@ if ( ! class_exists( 'um\core\Access' ) ) {
 
 					$terms = $wpdb->get_results(
 						"SELECT tm.term_id AS term_id, 
-					        tt.taxonomy AS taxonomy 
-					FROM {$wpdb->termmeta} tm 
-					LEFT JOIN {$wpdb->term_taxonomy} tt ON tt.term_id = tm.term_id 
-					WHERE tm.meta_key = 'um_content_restriction' AND 
-					      tt.taxonomy IN('" . implode( "','", $restricted_taxonomies ) . "')",
+								tt.taxonomy AS taxonomy 
+						FROM {$wpdb->termmeta} tm 
+						LEFT JOIN {$wpdb->term_taxonomy} tt ON tt.term_id = tm.term_id 
+						WHERE tm.meta_key = 'um_content_restriction' AND 
+							  tt.taxonomy IN('" . implode( "','", $restricted_taxonomies ) . "')",
 						ARRAY_A
 					);
 
@@ -890,7 +891,7 @@ if ( ! class_exists( 'um\core\Access' ) ) {
 						"SELECT ID 
 						FROM {$wpdb->posts} 
 						WHERE post_type = %s AND 
-						      comment_status != 'closed'",
+							  comment_status != 'closed'",
 						$post_type
 					) );
 
@@ -1335,7 +1336,7 @@ if ( ! class_exists( 'um\core\Access' ) ) {
 			}
 
 			if ( is_object( $query ) && is_a( $query, '\WP_Query' ) &&
-			     ( $query->is_main_query() || ! empty( $query->query_vars['um_main_query'] ) ) ) {
+				 ( $query->is_main_query() || ! empty( $query->query_vars['um_main_query'] ) ) ) {
 				if ( $is_singular ) {
 					if ( ! UM()->options()->get( 'disable_restriction_pre_queries' ) && $this->is_restricted( $posts[0]->ID ) ) {
 						$content_restriction = $this->get_post_privacy_settings( $posts[0]->ID );
@@ -1457,8 +1458,31 @@ if ( ! class_exists( 'um\core\Access' ) ) {
 
 			//also skip if we currently at UM Register|Login|Reset Password pages
 			if ( um_is_core_post( $post, 'register' ) ||
-			     um_is_core_post( $post, 'password-reset' ) ||
-			     um_is_core_post( $post, 'login' ) ) {
+				 um_is_core_post( $post, 'password-reset' ) ||
+				 um_is_core_post( $post, 'login' ) ) {
+				return;
+			}
+
+			/**
+			 * UM hook
+			 *
+			 * @type action
+			 * @title um_access_check_blog_page_settings
+			 * @description Check blog page individual restrict options
+			 * @change_log
+			 * ["Since: 2.0"]
+			 * @usage add_action( 'um_access_check_blog_page_settings', 'function_name', 10 );
+			 * @example
+			 * <?php
+			 * add_action( 'um_access_check_blog_page_settings', 'my_access_check_blog_page_settings', 10 );
+			 * function my_access_check_blog_page_settings() {
+			 *     // your code here
+			 * }
+			 * ?>
+			 */
+			do_action( 'um_access_check_blog_page_settings' );
+			//exit from function if blog is accessible
+			if ( $this->check_access() ) {
 				return;
 			}
 
@@ -1508,6 +1532,44 @@ if ( ! class_exists( 'um\core\Access' ) ) {
 		}
 
 
+		/**
+		 * Check Blog page Content Restriction settings
+		 */
+		function um_access_check_blog_page_settings() {
+			global $wp_query;
+
+			if ( ! empty( $wp_query->is_home ) && ! empty( $wp_query->is_posts_page ) ) {
+				$post_id = get_option( 'page_for_posts' );
+				if ( ! empty( $post_id ) ) {
+					$restriction_result = $this->is_restricted( $post_id, true, true );
+					if ( $restriction_result ) {
+						$restriction = get_post_meta( $post_id, 'um_content_restriction', true );
+						if ( '1' == $restriction['_um_noaccess_action'] ) {
+							$curr = UM()->permalinks()->get_current_url();
+
+							if ( ! isset( $restriction['_um_access_redirect'] ) || '0' == $restriction['_um_access_redirect'] ) {
+
+								$this->redirect_handler = $this->set_referer( esc_url( add_query_arg( 'redirect_to', urlencode_deep( $curr ), um_get_core_page( 'login' ) ) ), 'individual_term' );
+
+							} elseif ( '1' == $restriction['_um_access_redirect'] ) {
+
+								if ( ! empty( $restriction['_um_access_redirect_url'] ) ) {
+									$redirect = $restriction['_um_access_redirect_url'];
+								} else {
+									$redirect = esc_url( add_query_arg( 'redirect_to', urlencode_deep( $curr ), um_get_core_page( 'login' ) ) );
+								}
+
+								$this->redirect_handler = $this->set_referer( $redirect, 'individual_term' );
+
+							}
+						} else {
+							add_filter( 'home_template', array( &$this, 'blog_message' ), 10, 3 );
+						}
+					}
+				}
+			}
+		}
+
 		/**
 		 * Check individual term Content Restriction settings
 		 */
@@ -1535,7 +1597,7 @@ if ( ! class_exists( 'um\core\Access' ) ) {
 				return;
 			}
 
-			if ( $this->is_restricted_term( $term_id, true ) ) {
+			if ( $this->is_restricted_term( $term_id, true, true ) ) {
 				$restriction = get_term_meta( $term_id, 'um_content_restriction', true );
 				if ( '1' == $restriction['_um_noaccess_action'] ) {
 					$curr = UM()->permalinks()->get_current_url();
@@ -1576,6 +1638,17 @@ if ( ! class_exists( 'um\core\Access' ) ) {
 			return UM()->locate_template( 'restricted-taxonomy.php' );
 		}
 
+		/**
+		 * @param $template
+		 * @param $type
+		 * @param $templates
+		 *
+		 * @return string
+		 */
+		function blog_message( $template, $type, $templates ) {
+			return UM()->locate_template( 'restricted-blog.php' );
+		}
+
 
 		/**
 		 * Check global accessible settings
@@ -1980,9 +2053,11 @@ if ( ! class_exists( 'um\core\Access' ) ) {
 		 * Is post restricted?
 		 *
 		 * @param int $post_id
+		 * @param bool $on_single_page
+		 * @param bool $ignore_cache
 		 * @return bool
 		 */
-		function is_restricted( $post_id ) {
+		function is_restricted( $post_id, $on_single_page = false, $ignore_cache = false ) {
 			// break for incorrect post
 			if ( empty( $post_id ) ) {
 				return false;
@@ -1990,18 +2065,22 @@ if ( ! class_exists( 'um\core\Access' ) ) {
 
 			static $cache = array();
 
-			if ( isset( $cache[ $post_id ] ) ) {
+			if ( isset( $cache[ $post_id ] ) && ! $ignore_cache ) {
 				return $cache[ $post_id ];
 			}
 
 			if ( current_user_can( 'administrator' ) ) {
-				$cache[ $post_id ] = false;
+				if ( ! $ignore_cache ) {
+					$cache[ $post_id ] = false;
+				}
 				return false;
 			}
 
 			$post = get_post( $post_id );
 			if ( is_user_logged_in() && isset( $post->post_author ) && $post->post_author == get_current_user_id() ) {
-				$cache[ $post_id ] = false;
+				if ( ! $ignore_cache ) {
+					$cache[ $post_id ] = false;
+				}
 				return false;
 			}
 
@@ -2014,10 +2093,16 @@ if ( ! class_exists( 'um\core\Access' ) ) {
 				if ( '0' == $restriction['_um_accessible'] ) {
 					//post is private
 					$restricted = false;
+					if ( $on_single_page ) {
+						$this->allow_access = true;
+					}
 				} elseif ( '1' == $restriction['_um_accessible'] ) {
 					//if post for not logged in users and user is not logged in
 					if ( ! is_user_logged_in() ) {
 						$restricted = false;
+						if ( $on_single_page ) {
+							$this->allow_access = true;
+						}
 					}
 				} elseif ( '2' == $restriction['_um_accessible'] ) {
 					//if post for logged in users and user is not logged in
@@ -2027,21 +2112,37 @@ if ( ! class_exists( 'um\core\Access' ) ) {
 						if ( empty( $restriction['_um_access_roles'] ) || false === array_search( '1', $restriction['_um_access_roles'] ) ) {
 							if ( $custom_restrict ) {
 								$restricted = false;
+								if ( $on_single_page ) {
+									$this->allow_access = true;
+								}
 							}
 						} else {
 							$user_can = $this->user_can( get_current_user_id(), $restriction['_um_access_roles'] );
 
 							if ( $user_can && $custom_restrict ) {
 								$restricted = false;
+								if ( $on_single_page ) {
+									$this->allow_access = true;
+								}
+							}
+						}
+					} else {
+						if ( ! isset( $restriction['_um_noaccess_action'] ) || '0' == $restriction['_um_noaccess_action'] ) {
+							if ( UM()->options()->get( 'disable_restriction_pre_queries' ) || empty( $restriction['_um_access_hide_from_queries'] ) ) {
+								if ( $on_single_page ) {
+									$this->allow_access = true;
+								}
 							}
 						}
 					}
 				}
 			}
 
-			$restricted = apply_filters( 'um_is_restricted_post', $restricted, $post_id );
+			$restricted = apply_filters( 'um_is_restricted_post', $restricted, $post_id, $on_single_page );
 
-			$cache[ $post_id ] = $restricted;
+			if ( ! $ignore_cache ) {
+				$cache[ $post_id ] = $restricted;
+			}
 
 			return $restricted;
 		}
@@ -2052,29 +2153,36 @@ if ( ! class_exists( 'um\core\Access' ) ) {
 		 *
 		 * @param int $term_id
 		 * @param bool $on_term_page
+		 * @param bool $ignore_cache
 		 * @return bool
 		 */
-		function is_restricted_term( $term_id, $on_term_page = false ) {
+		function is_restricted_term( $term_id, $on_term_page = false, $ignore_cache = false ) {
 			static $cache = array();
 
-			if ( isset( $cache[ $term_id ] ) ) {
+			if ( isset( $cache[ $term_id ] ) && ! $ignore_cache ) {
 				return $cache[ $term_id ];
 			}
 
 			if ( current_user_can( 'administrator' ) ) {
-				$cache[ $term_id ] = false;
+				if ( ! $ignore_cache ) {
+					$cache[ $term_id ] = false;
+				}
 				return false;
 			}
 
 			$restricted_taxonomies = UM()->options()->get( 'restricted_access_taxonomy_metabox' );
 			if ( empty( $restricted_taxonomies ) ) {
-				$cache[ $term_id ] = false;
+				if ( ! $ignore_cache ) {
+					$cache[ $term_id ] = false;
+				}
 				return false;
 			}
 
 			$term = get_term( $term_id );
 			if ( empty( $term->taxonomy ) || empty( $restricted_taxonomies[ $term->taxonomy ] ) ) {
-				$cache[ $term_id ] = false;
+				if ( ! $ignore_cache ) {
+					$cache[ $term_id ] = false;
+				}
 				return false;
 			}
 
@@ -2132,7 +2240,9 @@ if ( ! class_exists( 'um\core\Access' ) ) {
 
 			$restricted = apply_filters( 'um_is_restricted_term', $restricted, $term_id, $on_term_page );
 
-			$cache[ $term_id ] = $restricted;
+			if ( ! $ignore_cache ) {
+				$cache[ $term_id ] = $restricted;
+			}
 			return $restricted;
 		}
 	}
diff --git a/templates/restricted-blog.php b/templates/restricted-blog.php
new file mode 100644
index 00000000..5f682323
--- /dev/null
+++ b/templates/restricted-blog.php
@@ -0,0 +1,39 @@
+<?php
+if ( ! defined( 'ABSPATH' ) ) {
+	exit;
+}
+
+global $post, $wp_query;
+$wp_query->queried_object = UM()->access()->maybe_replace_title( $post );
+
+get_header();
+?>
+
+<?php if ( is_home() && ! is_front_page() && ! empty( single_post_title( '', false ) ) ) : ?>
+	<header class="page-header alignwide">
+		<h1 class="page-title"><?php single_post_title(); ?></h1>
+	</header><!-- .page-header -->
+<?php endif; ?>
+
+<div class="wrap">
+	<div id="primary" class="content-area">
+		<main id="main" class="site-main" role="main">
+			<?php
+			$restriction = get_post_meta( $post->ID, 'um_content_restriction', true );
+
+			if ( ! isset( $restriction['_um_restrict_by_custom_message'] ) || '0' == $restriction['_um_restrict_by_custom_message'] ) {
+				$restricted_global_message = UM()->options()->get( 'restricted_access_message' );
+				$message = stripslashes( $restricted_global_message );
+			} elseif ( '1' == $restriction['_um_restrict_by_custom_message'] ) {
+				$message = ! empty( $restriction['_um_restrict_custom_message'] ) ? stripslashes( $restriction['_um_restrict_custom_message'] ) : '';
+			}
+
+			// translators: %s: Restricted blog page message.
+			printf( __( '%s', 'ultimate-member' ), $message );
+			?>
+		</main><!-- #main -->
+	</div><!-- #primary -->
+</div><!-- .wrap -->
+
+<?php
+get_footer();