10h30/ultimatemember
1
0
Fork 0
mirror of https://github.com/10h30/ultimatemember.git synced 2026-07-11 18:56:10 +09:00
Code Issues Packages Projects Releases Wiki Activity

Validate roles for forms without custom fields

Browse Source
This commit is contained in:
champsupertramp
2016-02-20 16:14:40 +08:00
parent 4dc3169a74
commit b90691dcd8
1 changed files with 13 additions and 9 deletions
Download Patch File Download Diff File Expand all files Collapse all files
core/um-form.php
+13 -9
View File
@@ -82,22 +82,19 @@ class UM_Form {
$this->post_form = array_merge( $this->form_data, $this->post_form );
$role = $this->assigned_role( $this->form_id );
if( $role ){ // has assigned role. Validate non-global forms
if( $role && isset( $this->form_data['custom_fields'] ) && ! strstr( $this->form_data['custom_fields'], 'role_' ) ){ // has assigned role. Validate non-global forms
if ( isset( $this->form_data['role'] ) && ( (boolean) $this->form_data['role'] ) && isset( $_POST['role'] ) && $_POST['role'] != $role ) {
wp_die( __( 'This is not possible for security reasons.','ultimatemember') );
} else {
if ( isset( $this->form_data['custom_fields'] ) && strstr( $this->form_data['custom_fields'], 'role_' ) ) {
// In this case, admin allowed users to choose a role during registration
} else {
if ( isset( $_POST['role'] ) ) {
if ( $role != $_POST['role'] ) {
if ( isset( $_POST['role'] ) ) {
if ( $role != $_POST['role'] ) {
wp_die( __( 'This is not possible for security reasons.','ultimatemember') );
}
}
}
}
}
if ( isset( $_POST[ $ultimatemember->honeypot ] ) && $_POST[ $ultimatemember->honeypot ] != '' )
wp_die('Hello, spam bot!');
@@ -170,7 +167,14 @@ class UM_Form {
}
function assigned_role( $post_id ){
$role = get_post_meta( $post_id, '_um_register_role', true );
$register_use_globals = get_post_meta( $post_id, '_um_register_use_globals', true);
if( $register_use_globals == 1 ){
$role = um_get_option('default_role');
}else if( $register_use_globals == 0 ){
$role = get_post_meta( $post_id, '_um_register_role', true );
}
if( ! $role ){
$role = false;