- added deprecated functions;

- added security ABSPATH checking;

includes/admin/core/um-admin-actions-modal.php

@@ -1,4 +1,7 @@
 <?php
+// Exit if accessed directly
+if ( ! defined( 'ABSPATH' ) ) exit;
+
 
 	/***
 	***	@Put status handler in modal

includes/admin/core/um-admin-actions-user.php

@@ -1,4 +1,7 @@
 <?php
+// Exit if accessed directly
+if ( ! defined( 'ABSPATH' ) ) exit;
+
 
 	/***
 	***	@Does an action to user asap

includes/admin/core/um-admin-actions.php

@@ -1,4 +1,7 @@
 <?php
+// Exit if accessed directly
+if ( ! defined( 'ABSPATH' ) ) exit;
+
 
 	/**
 	*

includes/admin/core/um-admin-filters-fields.php

@@ -1,4 +1,7 @@
 <?php
+// Exit if accessed directly
+if ( ! defined( 'ABSPATH' ) ) exit;
+
 
 	/***
 	***	@modify field args just before it is saved into form

includes/core/class-ajax-common.php

@@ -30,29 +30,12 @@ if ( ! class_exists( 'AJAX_Common' ) ) {
              * Fallback for ajax urls
              * @uses action hooks: wp_head, admin_head
              */
-            add_action( 'wp_head', array( $this, 'ultimatemember_ajax_urls' ) );
-            add_action( 'admin_head', array( $this, 'ultimatemember_ajax_urls' ) );
+            //add_action( 'wp_head', array( $this, 'ultimatemember_ajax_urls' ) );
+            //add_action( 'admin_head', array( $this, 'ultimatemember_ajax_urls' ) );
 
         }
 
 
-        function ultimatemember_ajax_urls() {
-            $enable_ajax_urls = apply_filters( "um_enable_ajax_urls", true );
-
-            if ( $enable_ajax_urls ) { ?>
-
-                <script type="text/javascript">
-
-                    var ultimatemember_image_upload_url = '<?php echo um_url . 'includes/lib/upload/um-image-upload.php'; ?>';
-                    var ultimatemember_file_upload_url = '<?php echo um_url . 'includes/lib/upload/um-file-upload.php'; ?>';
-                    var ultimatemember_ajax_url = '<?php echo admin_url('admin-ajax.php'); ?>';
-
-                </script>
-
-            <?php }
-        }
-
-
         /**
          * Router method
          */

includes/core/um-actions-access.php

@@ -1,5 +1,8 @@
 <?php
 
+// Exit if accessed directly
+if ( ! defined( 'ABSPATH' ) ) exit;
+
 /**
  * Profile Access
  *

includes/core/um-actions-account.php

@@ -1,4 +1,6 @@
 <?php
+// Exit if accessed directly
+if ( ! defined( 'ABSPATH' ) ) exit;
 
 /**
  * Validate for errors in account form

includes/core/um-actions-ajax.php

@@ -1,4 +1,6 @@
 <?php
+// Exit if accessed directly
+if ( ! defined( 'ABSPATH' ) ) exit;
 
 	/**
 	 * Run check if username exists

includes/core/um-actions-core.php

@@ -1,4 +1,6 @@
 <?php
+// Exit if accessed directly
+if ( ! defined( 'ABSPATH' ) ) exit;
 
 	/**
 	 * Processes the requests of UM actions

includes/core/um-actions-form.php

@@ -1,4 +1,7 @@
 <?php
+// Exit if accessed directly
+if ( ! defined( 'ABSPATH' ) ) exit;
+
 
 	/***
 	***	@Error handling: blocked emails

includes/core/um-actions-global.php

@@ -1,4 +1,7 @@
 <?php
+// Exit if accessed directly
+if ( ! defined( 'ABSPATH' ) ) exit;
+
 
 	/***
 	***	@adds a form identifier to form

includes/core/um-actions-login.php

@@ -1,4 +1,7 @@
 <?php
+// Exit if accessed directly
+if ( ! defined( 'ABSPATH' ) ) exit;
+
 
 	/**
 	 * Error procesing hook for login

includes/core/um-actions-members.php

@@ -1,4 +1,8 @@
 <?php
+// Exit if accessed directly
+if ( ! defined( 'ABSPATH' ) ) exit;
+
+
 	/**
 	 * Member Directory Search
 	 */

includes/core/um-actions-misc.php

@@ -1,4 +1,7 @@
 <?php
+// Exit if accessed directly
+if ( ! defined( 'ABSPATH' ) ) exit;
+
 
 	/***
 	***	@add a force redirect to from $_get

includes/core/um-actions-password.php

@@ -1,4 +1,7 @@
 <?php
+// Exit if accessed directly
+if ( ! defined( 'ABSPATH' ) ) exit;
+
 
 	/***
 	***	@process a new request

includes/core/um-actions-profile.php

@@ -1,4 +1,7 @@
 <?php
+// Exit if accessed directly
+if ( ! defined( 'ABSPATH' ) ) exit;
+
 
 	/***
 	 ***    @um_profile_content_{main_tab}

includes/core/um-actions-register.php

@@ -1,4 +1,7 @@
 <?php
+// Exit if accessed directly
+if ( ! defined( 'ABSPATH' ) ) exit;
+
 
 	/**
 	 * Account automatically approved

includes/core/um-actions-save-profile.php

@@ -1,4 +1,7 @@
 <?php
+// Exit if accessed directly
+if ( ! defined( 'ABSPATH' ) ) exit;
+
 
 	/***
 	***	@profile name update

includes/core/um-actions-user.php

@@ -1,4 +1,7 @@
 <?php
+// Exit if accessed directly
+if ( ! defined( 'ABSPATH' ) ) exit;
+
 
 	/***
 	***	@sync with WP role

includes/core/um-actions-wpadmin.php

@@ -1,5 +1,8 @@
 <?php
-	
+// Exit if accessed directly
+if ( ! defined( 'ABSPATH' ) ) exit;
+
+
 	/***
 	***	@checks if user can access the backend
 	***/

includes/core/um-filters-account.php

@@ -1,4 +1,7 @@
 <?php
+// Exit if accessed directly
+if ( ! defined( 'ABSPATH' ) ) exit;
+
 
 	/**
 	 * Account secure fields

includes/core/um-filters-arguments.php

@@ -1,4 +1,7 @@
 <?php
+// Exit if accessed directly
+if ( ! defined( 'ABSPATH' ) ) exit;
+
 
 	/***
 	***	@conditional logout form

includes/core/um-filters-avatars.php

@@ -1,4 +1,7 @@
 <?php
+// Exit if accessed directly
+if ( ! defined( 'ABSPATH' ) ) exit;
+
 
 	/***
 	***	@Do not apply to backend default avatars

includes/core/um-filters-commenting.php

@@ -1,4 +1,7 @@
 <?php
+// Exit if accessed directly
+if ( ! defined( 'ABSPATH' ) ) exit;
+
 
 	/***
 	***	@Control comment author display

includes/core/um-filters-fields.php

@@ -1,4 +1,7 @@
 <?php
+// Exit if accessed directly
+if ( ! defined( 'ABSPATH' ) ) exit;
+
 
 	/***
 	***	@field is required?

includes/core/um-filters-files.php

@@ -1,4 +1,7 @@
 <?php
+// Exit if accessed directly
+if ( ! defined( 'ABSPATH' ) ) exit;
+
 
 	/***
 	***	@Support multisite

includes/core/um-filters-language.php

@@ -1,4 +1,7 @@
-<?php 
+<?php
+// Exit if accessed directly
+if ( ! defined( 'ABSPATH' ) ) exit;
+
 
 add_filter("um_localize_permalink_filter","um_localize_permalink_filter",10,3);
 function um_localize_permalink_filter( $core_pages,  $page_id, $profile_url ){

includes/core/um-filters-login.php

@@ -1,4 +1,7 @@
 <?php
+// Exit if accessed directly
+if ( ! defined( 'ABSPATH' ) ) exit;
+
 
 	/***
 	***	@filter to allow whitelisted IP to access the wp-admin login

includes/core/um-filters-members.php

@@ -1,4 +1,7 @@
 <?php
+// Exit if accessed directly
+if ( ! defined( 'ABSPATH' ) ) exit;
+
 
 	/***
 	***	@Members Filter Hooks
@@ -305,7 +308,7 @@
 	add_filter('pre_user_query','um_modify_sortby_randomly');
 	function um_modify_sortby_randomly( $query ){
 
-		if( um_is_session_started() === FALSE ){
+		if( um_is_session_started() === false ){
 				@session_start();
 		}
 		

includes/core/um-filters-misc.php

@@ -1,4 +1,7 @@
 <?php
+// Exit if accessed directly
+if ( ! defined( 'ABSPATH' ) ) exit;
+
 
 	/***
 	***	@formats numbers nicely

includes/core/um-filters-navmenu.php

@@ -1,4 +1,7 @@
 <?php
+// Exit if accessed directly
+if ( ! defined( 'ABSPATH' ) ) exit;
+
 
 	/***
 	***	@add dynamic profile headers

includes/core/um-filters-profile.php

@@ -1,4 +1,7 @@
 <?php
+// Exit if accessed directly
+if ( ! defined( 'ABSPATH' ) ) exit;
+
 
 	/***
 	***	@dynamic profile page title

includes/core/um-filters-user.php

@@ -1,6 +1,8 @@
 <?php
+// Exit if accessed directly
+if ( ! defined( 'ABSPATH' ) ) exit;
+
 
-	
 	/***
 	***	@Main admin user actions
 	***/

includes/lib/upload/um-image-upload.php

@@ -11,6 +11,7 @@ while( !file_exists( $wp_config ) );
 if ( !file_exists( $wp_load ) ) {
     $dirs = glob( $dirname . '/*' , GLOB_ONLYDIR );
 
+
     foreach ( $dirs as $key => $value ) {
         $wp_load = "{$value}/wp-load.php";
         if ( file_exists( $wp_load ) ) {

includes/um-deprecated-functions.php

@@ -72,4 +72,267 @@ function um_update_option( $option_id, $value ) {
 function um_remove_option( $option_id ) {
 	//um_deprecated_function( 'um_remove_option', '2.0', 'UM()->options()->remove' );
 	UM()->options()->remove( $option_id );
+}
+
+
+/**
+ * @deprecated 2.0
+ *
+ * @param $content_type
+ * @return string
+ */
+function um_mail_content_type( $content_type ) {
+	return 'text/html';
+}
+
+
+/**
+ * Convert urls to clickable links
+ *
+ * @deprecated 2.0
+ *
+ * @param $s
+ * @return mixed
+ */
+function um_clickable_links( $s ) {
+	return preg_replace( '@(https?://([-\w\.]+[-\w])+(:\d+)?(/([\w/_\.#-]*(\?\S+)?[^\.\s])?)?)@', '<a href="$1" class="um-link" target="_blank">$1</a>', $s );
+}
+
+
+/**
+ * Set redirect key
+ *
+ * @deprecated 2.0
+ *
+ * @param  string $url
+ * @return string $redirect_key
+ */
+function um_set_redirect_url( $url ) {
+
+	if (um_is_session_started() === false) {
+		session_start();
+	}
+
+	$redirect_key = wp_generate_password( 12, false );
+
+	$_SESSION['um_redirect_key'] = array( $redirect_key => $url );
+
+	return $redirect_key;
+}
+
+
+/**
+ * Set redirect key
+ *
+ * @deprecated 2.0
+ *
+ * @param  string $key
+ * @return string $redirect_key
+ */
+function um_get_redirect_url( $key ) {
+
+	if (um_is_session_started() === false) {
+		session_start();
+	}
+
+	if (isset( $_SESSION['um_redirect_key'][$key] )) {
+
+		$url = $_SESSION['um_redirect_key'][$key];
+
+		return $url;
+
+	} else {
+
+		if (isset( $_SESSION['um_redirect_key'] )) {
+			foreach ($_SESSION['um_redirect_key'] as $key => $url) {
+
+				return $url;
+
+				break;
+			}
+		}
+	}
+
+	return;
+}
+
+
+/**
+ * Get user's last login time
+ *
+ * @deprecated 2.0
+ *
+ * @param $user_id
+ * @return string
+ */
+function um_user_last_login_date( $user_id ) {
+	$value = get_user_meta( $user_id, '_um_last_login', true );
+	if ($value)
+		return date_i18n( 'F d, Y', $value );
+
+	return '';
+}
+
+
+/**
+ * Check if we are on UM page
+ *
+ * @deprecated 2.0
+ *
+ * @return bool
+ */
+function is_ultimatemember() {
+	global $post;
+	if ( isset( $post->ID ) && in_array( $post->ID, UM()->config()->permalinks ) )
+		return true;
+
+	return false;
+}
+
+
+/**
+ * Is core URL
+ *
+ * @deprecated 2.0
+ *
+ * @return bool
+ */
+function um_is_core_uri() {
+	$array = UM()->config()->permalinks;
+	$current_url = UM()->permalinks()->get_current_url( get_option( 'permalink_structure' ) );
+
+	if (!isset( $array ) || !is_array( $array )) return false;
+
+	foreach ($array as $k => $id) {
+		$page_url = get_permalink( $id );
+		if (strstr( $current_url, $page_url ))
+			return true;
+	}
+
+	return false;
+}
+
+
+/**
+ * Check if meta_value exists
+ *
+ * @deprecated 2.0
+ *
+ * @param  string $key
+ * @param  mixed  $value
+ * @param  mixed  $return_user_id
+ *
+ * @return integer
+ */
+function um_is_meta_value_exists( $key, $value, $return_user_id = false ) {
+	global $wpdb;
+
+	if (isset( UM()->profile()->arr_user_slugs['is_' . $return_user_id][$key] )) {
+		return UM()->profile()->arr_user_slugs['is_' . $return_user_id][$key];
+	}
+
+	if (!$return_user_id) {
+		$count = $wpdb->get_var( $wpdb->prepare(
+			"SELECT COUNT(*) as count FROM {$wpdb->usermeta} WHERE meta_key = %s AND meta_value = %s ",
+			$key,
+			$value
+		) );
+
+		UM()->profile()->arr_user_slugs['is_' . $return_user_id][$key] = $count;
+
+		return $count;
+	}
+
+	$user_id = $wpdb->get_var( $wpdb->prepare(
+		"SELECT user_id FROM {$wpdb->usermeta} WHERE meta_key = %s AND meta_value = %s ",
+		$key,
+		$value
+	) );
+
+	UM()->profile()->arr_user_slugs['is_' . $return_user_id][$key] = $user_id;
+
+	return $user_id;
+
+}
+
+
+/**
+ * Get localization
+ *
+ * @deprecated 2.0
+ *
+ * @return string
+ */
+function um_get_locale() {
+
+	$lang_code = get_locale();
+
+	if (strpos( $lang_code, 'en_' ) > -1 || empty( $lang_code ) || $lang_code == 0) {
+		return 'en';
+	}
+
+	return $lang_code;
+}
+
+
+/**
+ * Get current page type
+ *
+ * @deprecated 2.0
+ *
+ * @return string
+ */
+function um_get_current_page_type() {
+	global $wp_query;
+	$loop = 'notfound';
+
+	if ($wp_query->is_page) {
+		//$loop = is_front_page() ? 'front' : 'page';
+		$loop = 'page';
+	} else if ($wp_query->is_home) {
+		$loop = 'home';
+	} else if ($wp_query->is_single) {
+		$loop = ( $wp_query->is_attachment ) ? 'attachment' : 'single';
+	} else if ($wp_query->is_category) {
+		$loop = 'category';
+	} else if ($wp_query->is_tag) {
+		$loop = 'tag';
+	} else if ($wp_query->is_tax) {
+		$loop = 'tax';
+	} else if ($wp_query->is_archive) {
+		if ($wp_query->is_day) {
+			$loop = 'day';
+		} else if ($wp_query->is_month) {
+			$loop = 'month';
+		} else if ($wp_query->is_year) {
+			$loop = 'year';
+		} else if ($wp_query->is_author) {
+			$loop = 'author';
+		} else {
+			$loop = 'archive';
+		}
+	} else if ($wp_query->is_search) {
+		$loop = 'search';
+	} else if ($wp_query->is_404) {
+		$loop = 'notfound';
+	}
+
+	return $loop;
+}
+
+
+/**
+ * Check if running local
+ *
+ * @deprecated 2.0
+ *
+ * @return boolean
+ */
+function um_core_is_local() {
+	if ($_SERVER['HTTP_HOST'] == 'localhost'
+	    || substr( $_SERVER['HTTP_HOST'], 0, 3 ) == '10.'
+	    || substr( $_SERVER['HTTP_HOST'], 0, 7 ) == '192.168'
+	) return true;
+
+	return false;
 }