10h30/ultimatemember
1
0
Fork 0
mirror of https://github.com/10h30/ultimatemember.git synced 2026-07-11 10:46:11 +09:00
Code Issues Packages Projects Releases Wiki Activity

Reduce hash length and add user token management functions

Browse Source 
Shortened directory hash length from 32 to 5 characters for efficiency. Introduced `set_user_hash` and `get_user_hash` functions to securely manage unique tokens for user cards, ensuring better organization and fallback mechanisms. Updated references to use the new user hash method where applicable.
This commit is contained in:
Mykyta Synelnikov
2025-12-16 17:05:51 +02:00
parent fc2c5456e4
commit 6f47b19719
1 changed files with 36 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files
includes/core/class-member-directory.php
+36 -2
View File
@@ -310,7 +310,7 @@ if ( ! class_exists( 'um\core\Member_Directory' ) ) {
* @return false|string
*/
public function set_directory_hash( $id ) {
$unique_hash = wp_generate_password( 32, false );
$unique_hash = wp_generate_password( 5, false );
$result = update_post_meta( $id, '_um_directory_token', $unique_hash );
if ( false === $result ) {
return false;
@@ -336,6 +336,40 @@ if ( ! class_exists( 'um\core\Member_Directory' ) ) {
return $hash;
}
/**
* Generate a secure random token for each user card
*
* @param int $id
*
* @return false|string
*/
public function set_user_hash( $id ) {
$unique_hash = wp_generate_password( 5, false );
$result = update_user_meta( $id, '_um_card_anchor_token', $unique_hash );
if ( false === $result ) {
return false;
}
return $unique_hash;
}
/**
* @param $id
*
* @return bool|string
*/
public function get_user_hash( $id ) {
$hash = get_user_meta( $id, '_um_card_anchor_token', true );
if ( '' === $hash ) {
// Set the hash if empty.
$hash = $this->set_user_hash( $id );
}
if ( empty( $hash ) ) {
// Fallback, use old value.
$hash = substr( md5( $id ), 10, 5 );
}
return $hash;
}
/**
* Get view Type template
* @param string $type
@@ -2655,7 +2689,7 @@ if ( ! class_exists( 'um\core\Member_Directory' ) ) {
$hook_after_user_name = ob_get_clean();
$data_array = array(
'card_anchor' => esc_html( substr( md5( $user_id ), 10, 5 ) ),
'card_anchor' => esc_html( $this->get_user_hash( $user_id ) ),
'role' => is_user_logged_in() ? esc_html( um_user( 'role' ) ) : 'undefined', // make the role hidden for the nopriv requests.
'account_status' => is_user_logged_in() ? esc_html( UM()->common()->users()->get_status( $user_id ) ) : 'undefined', // make the status hidden for the nopriv requests.
'account_status_name' => is_user_logged_in() ? esc_html( UM()->common()->users()->get_status( $user_id, 'formatted' ) ) : __( 'Undefined', 'ultimate-member' ), // make the status hidden for the nopriv requests.