10h30/ultimatemember
1
0
Fork 0
mirror of https://github.com/10h30/ultimatemember.git synced 2026-07-11 18:56:10 +09:00
Code Issues Packages Projects Releases Wiki Activity

- fixed #1125;

Browse Source
This commit is contained in:
Nikita Sinelnikov
2023-01-20 01:40:44 +02:00
parent 1cf8d88f5d
commit 08b44fb842
2 changed files with 171 additions and 22 deletions
Download Patch File Download Diff File Expand all files Collapse all files
includes/core/class-access.php
+132 -22
View File
@@ -76,6 +76,7 @@ if ( ! class_exists( 'um\core\Access' ) ) {
// check the site's accessible more priority have Individual Post/Term Restriction settings
add_action( 'template_redirect', array( &$this, 'template_redirect' ), 1000 );
add_action( 'um_access_check_blog_page_settings', array( &$this, 'um_access_check_blog_page_settings' ) );
add_action( 'um_access_check_individual_term_settings', array( &$this, 'um_access_check_individual_term_settings' ) );
add_action( 'um_access_check_global_settings', array( &$this, 'um_access_check_global_settings' ) );
@@ -243,11 +244,11 @@ if ( ! class_exists( 'um\core\Access' ) ) {
$terms = $wpdb->get_results(
"SELECT tm.term_id AS term_id,
tt.taxonomy AS taxonomy
FROM {$wpdb->termmeta} tm
LEFT JOIN {$wpdb->term_taxonomy} tt ON tt.term_id = tm.term_id
WHERE tm.meta_key = 'um_content_restriction' AND
tt.taxonomy IN('" . implode( "','", $restricted_taxonomies ) . "')",
tt.taxonomy AS taxonomy
FROM {$wpdb->termmeta} tm
LEFT JOIN {$wpdb->term_taxonomy} tt ON tt.term_id = tm.term_id
WHERE tm.meta_key = 'um_content_restriction' AND
tt.taxonomy IN('" . implode( "','", $restricted_taxonomies ) . "')",
ARRAY_A
);
@@ -890,7 +891,7 @@ if ( ! class_exists( 'um\core\Access' ) ) {
"SELECT ID
FROM {$wpdb->posts}
WHERE post_type = %s AND
comment_status != 'closed'",
comment_status != 'closed'",
$post_type
) );
@@ -1335,7 +1336,7 @@ if ( ! class_exists( 'um\core\Access' ) ) {
}
if ( is_object( $query ) && is_a( $query, '\WP_Query' ) &&
( $query->is_main_query() || ! empty( $query->query_vars['um_main_query'] ) ) ) {
( $query->is_main_query() || ! empty( $query->query_vars['um_main_query'] ) ) ) {
if ( $is_singular ) {
if ( ! UM()->options()->get( 'disable_restriction_pre_queries' ) && $this->is_restricted( $posts[0]->ID ) ) {
$content_restriction = $this->get_post_privacy_settings( $posts[0]->ID );
@@ -1457,8 +1458,31 @@ if ( ! class_exists( 'um\core\Access' ) ) {
//also skip if we currently at UM Register|Login|Reset Password pages
if ( um_is_core_post( $post, 'register' ) ||
um_is_core_post( $post, 'password-reset' ) ||
um_is_core_post( $post, 'login' ) ) {
um_is_core_post( $post, 'password-reset' ) ||
um_is_core_post( $post, 'login' ) ) {
return;
}
/**
* UM hook
*
* @type action
* @title um_access_check_blog_page_settings
* @description Check blog page individual restrict options
* @change_log
* ["Since: 2.0"]
* @usage add_action( 'um_access_check_blog_page_settings', 'function_name', 10 );
* @example
* <?php
* add_action( 'um_access_check_blog_page_settings', 'my_access_check_blog_page_settings', 10 );
* function my_access_check_blog_page_settings() {
* // your code here
* }
* ?>
*/
do_action( 'um_access_check_blog_page_settings' );
//exit from function if blog is accessible
if ( $this->check_access() ) {
return;
}
@@ -1508,6 +1532,44 @@ if ( ! class_exists( 'um\core\Access' ) ) {
}
/**
* Check Blog page Content Restriction settings
*/
function um_access_check_blog_page_settings() {
global $wp_query;
if ( ! empty( $wp_query->is_home ) && ! empty( $wp_query->is_posts_page ) ) {
$post_id = get_option( 'page_for_posts' );
if ( ! empty( $post_id ) ) {
$restriction_result = $this->is_restricted( $post_id, true, true );
if ( $restriction_result ) {
$restriction = get_post_meta( $post_id, 'um_content_restriction', true );
if ( '1' == $restriction['_um_noaccess_action'] ) {
$curr = UM()->permalinks()->get_current_url();
if ( ! isset( $restriction['_um_access_redirect'] ) || '0' == $restriction['_um_access_redirect'] ) {
$this->redirect_handler = $this->set_referer( esc_url( add_query_arg( 'redirect_to', urlencode_deep( $curr ), um_get_core_page( 'login' ) ) ), 'individual_term' );
} elseif ( '1' == $restriction['_um_access_redirect'] ) {
if ( ! empty( $restriction['_um_access_redirect_url'] ) ) {
$redirect = $restriction['_um_access_redirect_url'];
} else {
$redirect = esc_url( add_query_arg( 'redirect_to', urlencode_deep( $curr ), um_get_core_page( 'login' ) ) );
}
$this->redirect_handler = $this->set_referer( $redirect, 'individual_term' );
}
} else {
add_filter( 'home_template', array( &$this, 'blog_message' ), 10, 3 );
}
}
}
}
}
/**
* Check individual term Content Restriction settings
*/
@@ -1535,7 +1597,7 @@ if ( ! class_exists( 'um\core\Access' ) ) {
return;
}
if ( $this->is_restricted_term( $term_id, true ) ) {
if ( $this->is_restricted_term( $term_id, true, true ) ) {
$restriction = get_term_meta( $term_id, 'um_content_restriction', true );
if ( '1' == $restriction['_um_noaccess_action'] ) {
$curr = UM()->permalinks()->get_current_url();
@@ -1576,6 +1638,17 @@ if ( ! class_exists( 'um\core\Access' ) ) {
return UM()->locate_template( 'restricted-taxonomy.php' );
}
/**
* @param $template
* @param $type
* @param $templates
*
* @return string
*/
function blog_message( $template, $type, $templates ) {
return UM()->locate_template( 'restricted-blog.php' );
}
/**
* Check global accessible settings
@@ -1980,9 +2053,11 @@ if ( ! class_exists( 'um\core\Access' ) ) {
* Is post restricted?
*
* @param int $post_id
* @param bool $on_single_page
* @param bool $ignore_cache
* @return bool
*/
function is_restricted( $post_id ) {
function is_restricted( $post_id, $on_single_page = false, $ignore_cache = false ) {
// break for incorrect post
if ( empty( $post_id ) ) {
return false;
@@ -1990,18 +2065,22 @@ if ( ! class_exists( 'um\core\Access' ) ) {
static $cache = array();
if ( isset( $cache[ $post_id ] ) ) {
if ( isset( $cache[ $post_id ] ) && ! $ignore_cache ) {
return $cache[ $post_id ];
}
if ( current_user_can( 'administrator' ) ) {
$cache[ $post_id ] = false;
if ( ! $ignore_cache ) {
$cache[ $post_id ] = false;
}
return false;
}
$post = get_post( $post_id );
if ( is_user_logged_in() && isset( $post->post_author ) && $post->post_author == get_current_user_id() ) {
$cache[ $post_id ] = false;
if ( ! $ignore_cache ) {
$cache[ $post_id ] = false;
}
return false;
}
@@ -2014,10 +2093,16 @@ if ( ! class_exists( 'um\core\Access' ) ) {
if ( '0' == $restriction['_um_accessible'] ) {
//post is private
$restricted = false;
if ( $on_single_page ) {
$this->allow_access = true;
}
} elseif ( '1' == $restriction['_um_accessible'] ) {
//if post for not logged in users and user is not logged in
if ( ! is_user_logged_in() ) {
$restricted = false;
if ( $on_single_page ) {
$this->allow_access = true;
}
}
} elseif ( '2' == $restriction['_um_accessible'] ) {
//if post for logged in users and user is not logged in
@@ -2027,21 +2112,37 @@ if ( ! class_exists( 'um\core\Access' ) ) {
if ( empty( $restriction['_um_access_roles'] ) || false === array_search( '1', $restriction['_um_access_roles'] ) ) {
if ( $custom_restrict ) {
$restricted = false;
if ( $on_single_page ) {
$this->allow_access = true;
}
}
} else {
$user_can = $this->user_can( get_current_user_id(), $restriction['_um_access_roles'] );
if ( $user_can && $custom_restrict ) {
$restricted = false;
if ( $on_single_page ) {
$this->allow_access = true;
}
}
}
} else {
if ( ! isset( $restriction['_um_noaccess_action'] ) || '0' == $restriction['_um_noaccess_action'] ) {
if ( UM()->options()->get( 'disable_restriction_pre_queries' ) || empty( $restriction['_um_access_hide_from_queries'] ) ) {
if ( $on_single_page ) {
$this->allow_access = true;
}
}
}
}
}
}
$restricted = apply_filters( 'um_is_restricted_post', $restricted, $post_id );
$restricted = apply_filters( 'um_is_restricted_post', $restricted, $post_id, $on_single_page );
$cache[ $post_id ] = $restricted;
if ( ! $ignore_cache ) {
$cache[ $post_id ] = $restricted;
}
return $restricted;
}
@@ -2052,29 +2153,36 @@ if ( ! class_exists( 'um\core\Access' ) ) {
*
* @param int $term_id
* @param bool $on_term_page
* @param bool $ignore_cache
* @return bool
*/
function is_restricted_term( $term_id, $on_term_page = false ) {
function is_restricted_term( $term_id, $on_term_page = false, $ignore_cache = false ) {
static $cache = array();
if ( isset( $cache[ $term_id ] ) ) {
if ( isset( $cache[ $term_id ] ) && ! $ignore_cache ) {
return $cache[ $term_id ];
}
if ( current_user_can( 'administrator' ) ) {
$cache[ $term_id ] = false;
if ( ! $ignore_cache ) {
$cache[ $term_id ] = false;
}
return false;
}
$restricted_taxonomies = UM()->options()->get( 'restricted_access_taxonomy_metabox' );
if ( empty( $restricted_taxonomies ) ) {
$cache[ $term_id ] = false;
if ( ! $ignore_cache ) {
$cache[ $term_id ] = false;
}
return false;
}
$term = get_term( $term_id );
if ( empty( $term->taxonomy ) || empty( $restricted_taxonomies[ $term->taxonomy ] ) ) {
$cache[ $term_id ] = false;
if ( ! $ignore_cache ) {
$cache[ $term_id ] = false;
}
return false;
}
@@ -2132,7 +2240,9 @@ if ( ! class_exists( 'um\core\Access' ) ) {
$restricted = apply_filters( 'um_is_restricted_term', $restricted, $term_id, $on_term_page );
$cache[ $term_id ] = $restricted;
if ( ! $ignore_cache ) {
$cache[ $term_id ] = $restricted;
}
return $restricted;
}
}