10h30/ultimatemember
1
0
Fork 0
mirror of https://github.com/10h30/ultimatemember.git synced 2026-06-05 15:09:37 +09:00
Code Issues Packages Projects Releases Wiki Activity

- added form administrative roles notice;

Browse Source 
- fixed #1245;
This commit is contained in:
Mykyta Synelnikov
2023-07-11 22:31:02 +03:00
parent 979927a9df
commit bdfcd0f55f
3 changed files with 69 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files
includes/admin/assets/css/um-admin-global.css
+5
View File
@@ -3,6 +3,11 @@
color: #555;
}
.um-admin-notice.notice-warning {
border-color: #dba617 !important;
color: #555;
}
.um-admin-notice.upgraded {
border-color: #0085ba !important;
color: #555;
includes/admin/core/class-admin-notices.php
+62
View File
@@ -803,6 +803,68 @@ if ( ! class_exists( 'um\admin\core\Admin_Notices' ) ) {
1
);
}
$this->check_registration_forms();
}
private function check_registration_forms() {
$um_forms = get_posts(
array(
'post_type' => 'um_form',
'meta_query' => array(
array(
'key' => '_um_mode',
'value' => 'register',
),
array(
'key' => '_um_register_use_custom_settings',
'value' => true,
),
),
'numberposts' => -1,
'fields' => 'ids',
)
);
$content = '';
$arr_banned_caps = UM()->options()->get( 'banned_capabilities' );
foreach ( $um_forms as $form_id ) {
$role = get_post_meta( $form_id, '_um_register_role', true );
if ( empty( $role ) ) {
continue;
}
$caps = get_role( $role )->capabilities;
foreach ( array_keys( $caps ) as $cap ) {
if ( in_array( $cap, $arr_banned_caps, true ) ) {
$content .= '<br /><a target="_blank" href="' . get_edit_post_link( $form_id ) . '">' . get_the_title( $form_id ) . '</a> contains <strong>administrative role</strong>.';
break;
}
}
}
if ( empty( $content ) ) {
return;
}
ob_start();
?>
<p>
<?php // translators: %s are link(s) to the forms. ?>
<?php echo wp_kses( sprintf( __( 'Register forms have Administrative roles, we recommend that you assign a non-admin roles to secure the forms. %s', 'ultimate-member' ), $content ), UM()->get_allowed_html( 'admin_notice' ) ); ?>
</p>
<?php
$message = ob_get_clean();
$this->add_notice(
'forms_secure_suspicious_activity',
array(
'class' => 'notice-warning',
'message' => $message,
'dismissible' => true,
),
1
);
}
public function dismiss_notice() {
includes/core/class-form.php
+2 -4
View File
@@ -494,10 +494,8 @@ if ( ! class_exists( 'um\core\Form' ) ) {
$cf_metakeys[] = 'profile_photo';
$cf_metakeys[] = 'cover_photo';
if ( array_key_exists( 'show_bio', $this->form_data ) ) {
if ( ! empty( $this->form_data['show_bio'] ) ) {
$cf_metakeys[] = UM()->profile()->get_show_bio_key( $this->form_data );
}
if ( ! empty( $this->form_data['use_custom_settings'] ) && ! empty( $this->form_data['show_bio'] ) ) {
$cf_metakeys[] = UM()->profile()->get_show_bio_key( $this->form_data );
} else {
if ( UM()->options()->get( 'profile_show_bio' ) ) {
$cf_metakeys[] = UM()->profile()->get_show_bio_key( $this->form_data );