mirror of
https://github.com/10h30/ultimatemember.git
synced 2026-06-05 15:09:37 +09:00
135 lines
3.7 KiB
PHP
135 lines
3.7 KiB
PHP
<?php
|
|
|
|
/***
|
|
*** @redirect wp-admin for non guests
|
|
***/
|
|
add_action('init','um_block_wpadmin_for_guests');
|
|
function um_block_wpadmin_for_guests() {
|
|
global $pagenow;
|
|
|
|
|
|
|
|
if ( isset( $_REQUEST['um_panic_key'] ) && $_REQUEST['um_panic_key'] == um_get_option('panic_key') ) {
|
|
exit( wp_redirect( add_query_arg('_verified_key', $_REQUEST['um_panic_key'], wp_login_url() ) ) );
|
|
}
|
|
|
|
if ( !isset( $_REQUEST['_verified_key'] ) || $_REQUEST['_verified_key'] != um_get_option('panic_key') ) {
|
|
// Logout screen
|
|
if ( isset( $pagenow ) && $pagenow == 'wp-login.php' && is_user_logged_in() && isset( $_REQUEST['action'] ) && $_REQUEST['action'] == 'logout' ) {
|
|
$redirect = um_get_core_page('logout');
|
|
|
|
if ( isset( $_REQUEST['redirect_to'] ) && !empty( $_REQUEST['redirect_to'] ) ) {
|
|
$redirect = add_query_arg( 'redirect_to', $_REQUEST['redirect_to'], $redirect );
|
|
}
|
|
|
|
|
|
|
|
exit( wp_redirect( $redirect ) );
|
|
}
|
|
|
|
// Login screen
|
|
if ( isset( $pagenow ) && $pagenow == 'wp-login.php' && !is_user_logged_in() && !isset( $_REQUEST['action'] ) ) {
|
|
|
|
$allowed = um_get_option('wpadmin_login');
|
|
$allowed = apply_filters('um_whitelisted_wpadmin_access', $allowed );
|
|
|
|
if ( !$allowed ) {
|
|
|
|
$act = um_get_option('wpadmin_login_redirect');
|
|
$custom_url = um_get_option('wpadmin_login_redirect_url');
|
|
|
|
if ( $act == 'um_login_page' || !$custom_url ) {
|
|
$redirect = um_get_core_page('login');
|
|
} else {
|
|
$redirect = $custom_url;
|
|
}
|
|
|
|
/* ---------- */
|
|
//Add support query string data after user login
|
|
if($_SERVER['QUERY_STRING']) {
|
|
$redirect .= '?'.$_SERVER['QUERY_STRING'];
|
|
}
|
|
/* ---------- */
|
|
|
|
exit( wp_redirect( $redirect ) );
|
|
}
|
|
}
|
|
|
|
// Register screen
|
|
if ( isset( $pagenow ) && $pagenow == 'wp-login.php' && !is_user_logged_in() && isset( $_REQUEST['action'] ) && $_REQUEST['action'] == 'register' ) {
|
|
|
|
$allowed = um_get_option('wpadmin_register');
|
|
$allowed = apply_filters('um_whitelisted_wpadmin_access', $allowed );
|
|
|
|
if ( !$allowed ) {
|
|
|
|
$act = um_get_option('wpadmin_register_redirect');
|
|
$custom_url = um_get_option('wpadmin_register_redirect_url');
|
|
|
|
if ( $act == 'um_register_page' || !$custom_url ) {
|
|
$redirect = um_get_core_page('register');
|
|
} else {
|
|
$redirect = $custom_url;
|
|
}
|
|
exit( wp_redirect( $redirect ) );
|
|
}
|
|
}
|
|
|
|
// Lost password page
|
|
if ( isset( $pagenow ) && $pagenow == 'wp-login.php' && isset( $_REQUEST['action'] ) && $_REQUEST['action'] == 'lostpassword' ) {
|
|
exit( wp_redirect( um_get_core_page('password-reset') ) );
|
|
}
|
|
|
|
// Prevention for logged in user
|
|
if ( isset( $pagenow ) && $pagenow == 'wp-login.php' && is_user_logged_in() && isset( $_REQUEST['action'] ) && $_REQUEST['action'] != 'postpass' ) {
|
|
|
|
if ( !um_user('can_access_wpadmin') ) {
|
|
exit( wp_redirect( home_url() ) );
|
|
} else {
|
|
exit( wp_redirect( admin_url() ) );
|
|
}
|
|
|
|
}
|
|
|
|
}
|
|
|
|
|
|
}
|
|
|
|
/***
|
|
*** @checks if user can access the backend
|
|
***/
|
|
function um_block_wpadmin_by_user_role(){
|
|
global $ultimatemember;
|
|
if( is_admin() && !defined('DOING_AJAX') && um_user('ID') && !um_user('can_access_wpadmin') && !is_super_admin( um_user('ID') ) ){
|
|
um_redirect_home();
|
|
}
|
|
}
|
|
add_action('init','um_block_wpadmin_by_user_role', 99);
|
|
|
|
/***
|
|
*** @hide admin bar appropriately
|
|
***/
|
|
function um_control_admin_bar( $content ){
|
|
|
|
if( is_user_logged_in() ){
|
|
|
|
if ( um_user('can_not_see_adminbar') ){
|
|
return false;
|
|
}
|
|
|
|
return true;
|
|
}
|
|
|
|
return $content;
|
|
}
|
|
add_filter( 'show_admin_bar' , 'um_control_admin_bar');
|
|
|
|
/***
|
|
*** @fix permission for admin bar
|
|
***/
|
|
function um_force_admin_bar() {
|
|
um_reset_user();
|
|
}
|
|
add_action( 'wp_footer', 'um_force_admin_bar' );
|