mirror of
https://github.com/10h30/ultimatemember.git
synced 2026-06-05 15:09:37 +09:00
nikitozzzzzzz
9d6f6231bd
- checked and optimized um_role() function; - small changes and fixes for 2.0;
309 lines
10 KiB
PHP
309 lines
10 KiB
PHP
<?php
|
|
|
|
/***
|
|
*** @Error processing hook : login
|
|
***/
|
|
add_action('um_submit_form_errors_hook_login', 'um_submit_form_errors_hook_login', 10);
|
|
function um_submit_form_errors_hook_login( $args ){
|
|
$is_email = false;
|
|
|
|
$form_id = $args['form_id'];
|
|
$mode = $args['mode'];
|
|
$user_password = $args['user_password'];
|
|
|
|
|
|
if ( isset( $args['username'] ) && $args['username'] == '' ) {
|
|
UM()->form()->add_error( 'username', __('Please enter your username or email','ultimate-member') );
|
|
}
|
|
|
|
if ( isset( $args['user_login'] ) && $args['user_login'] == '' ) {
|
|
UM()->form()->add_error( 'user_login', __('Please enter your username','ultimate-member') );
|
|
}
|
|
|
|
if ( isset( $args['user_email'] ) && $args['user_email'] == '' ) {
|
|
UM()->form()->add_error( 'user_email', __('Please enter your email','ultimate-member') );
|
|
}
|
|
|
|
if ( isset( $args['username'] ) ) {
|
|
$field = 'username';
|
|
if ( is_email( $args['username'] ) ) {
|
|
$is_email = true;
|
|
$data = get_user_by('email', $args['username'] );
|
|
$user_name = (isset ( $data->user_login ) ) ? $data->user_login : null;
|
|
} else {
|
|
$user_name = $args['username'];
|
|
}
|
|
} else if ( isset( $args['user_email'] ) ) {
|
|
$field = 'user_email';
|
|
$is_email = true;
|
|
$data = get_user_by('email', $args['user_email'] );
|
|
$user_name = (isset ( $data->user_login ) ) ? $data->user_login : null;
|
|
} else {
|
|
$field = 'user_login';
|
|
$user_name = $args['user_login'];
|
|
}
|
|
|
|
if ( !username_exists( $user_name ) ) {
|
|
if ( $is_email ) {
|
|
UM()->form()->add_error( $field, __(' Sorry, we can\'t find an account with that email address','ultimate-member') );
|
|
} else {
|
|
UM()->form()->add_error( $field, __(' Sorry, we can\'t find an account with that username','ultimate-member') );
|
|
}
|
|
} else {
|
|
if ( $args['user_password'] == '' ) {
|
|
UM()->form()->add_error( 'user_password', __('Please enter your password','ultimate-member') );
|
|
}
|
|
}
|
|
|
|
$user = get_user_by( 'login', $user_name );
|
|
if ( $user && wp_check_password( $args['user_password'], $user->data->user_pass, $user->ID) ) {
|
|
UM()->login()->auth_id = username_exists( $user_name );
|
|
} else {
|
|
UM()->form()->add_error( 'user_password', __('Password is incorrect. Please try again.','ultimate-member') );
|
|
}
|
|
|
|
// add a way for other plugins like wp limit login
|
|
// to limit the login attempts
|
|
$user = apply_filters( 'authenticate', null, $user_name, $args['user_password'] );
|
|
|
|
$authenticate_user = apply_filters( 'wp_authenticate_user', $user_name, $args['user_password'] );
|
|
|
|
// @since 4.18 replacement for 'wp_login_failed' action hook
|
|
// see WP function wp_authenticate()
|
|
$ignore_codes = array('empty_username', 'empty_password');
|
|
|
|
if ( is_wp_error( $user ) && ! in_array( $user->get_error_code(), $ignore_codes ) ) {
|
|
|
|
UM()->form()->add_error( $user->get_error_code(), __( $user->get_error_message() ,'ultimate-member') );
|
|
}
|
|
|
|
if( is_wp_error( $authenticate_user ) && ! in_array( $authenticate_user->get_error_code(), $ignore_codes ) ){
|
|
|
|
UM()->form()->add_error( $authenticate_user->get_error_code(), __( $authenticate_user->get_error_message() ,'ultimate-member') );
|
|
|
|
}
|
|
|
|
// if there is an error notify wp
|
|
if( UM()->form()->has_error( $field ) || UM()->form()->has_error( $user_password ) || UM()->form()->count_errors() > 0 ) {
|
|
do_action( 'wp_login_failed', $user_name );
|
|
}
|
|
}
|
|
|
|
/**
|
|
* Display the login errors from other plugins
|
|
*/
|
|
add_action( 'um_before_login_fields', 'um_display_login_errors' );
|
|
function um_display_login_errors( $args ) {
|
|
$error = '';
|
|
|
|
if( UM()->form()->count_errors() > 0 ) {
|
|
$errors = UM()->form()->errors;
|
|
// hook for other plugins to display error
|
|
$error_keys = array_keys( $errors );
|
|
}
|
|
|
|
if( isset( $args['custom_fields'] ) ){
|
|
$custom_fields = $args['custom_fields'];
|
|
}
|
|
|
|
if( ! empty( $error_keys ) && ! empty( $custom_fields ) ){
|
|
foreach( $error_keys as $error ){
|
|
if( trim( $error ) && ! isset( $custom_fields[ $error ] ) && ! empty( $errors[ $error ] ) ){
|
|
$error_message = apply_filters( 'login_errors', $errors[ $error ] );
|
|
echo '<p class="um-notice err um-error-code-'.$error.'"><i class="um-icon-ios-close-empty" onclick="jQuery(this).parent().fadeOut();"></i>' . $error_message . '</p>';
|
|
}
|
|
}
|
|
}
|
|
}
|
|
|
|
/***
|
|
*** @login checks thru the frontend login
|
|
***/
|
|
add_action('um_submit_form_errors_hook_logincheck', 'um_submit_form_errors_hook_logincheck', 9999 );
|
|
function um_submit_form_errors_hook_logincheck($args){
|
|
// Logout if logged in
|
|
if ( is_user_logged_in() ) {
|
|
wp_logout();
|
|
}
|
|
|
|
$user_id = ( isset( UM()->login()->auth_id ) ) ? UM()->login()->auth_id : '';
|
|
um_fetch_user( $user_id );
|
|
|
|
$status = um_user('account_status'); // account status
|
|
switch( $status ) {
|
|
|
|
// If user can't login to site...
|
|
case 'inactive':
|
|
case 'awaiting_admin_review':
|
|
case 'awaiting_email_confirmation':
|
|
case 'rejected':
|
|
um_reset_user();
|
|
exit( wp_redirect( add_query_arg( 'err', esc_attr( $status ), UM()->permalinks()->get_current_url() ) ) );
|
|
break;
|
|
|
|
}
|
|
|
|
if ( isset( $args['form_id'] ) && $args['form_id'] == UM()->shortcodes()->core_login_form() && UM()->form()->errors && !isset( $_POST[ UM()->honeypot ] ) ) {
|
|
exit( wp_redirect( um_get_core_page('login') ) );
|
|
}
|
|
|
|
}
|
|
|
|
/***
|
|
*** @store last login timestamp
|
|
***/
|
|
add_action('um_on_login_before_redirect', 'um_store_lastlogin_timestamp', 10);
|
|
function um_store_lastlogin_timestamp( $user_id ) {
|
|
delete_user_meta( $user_id, '_um_last_login' );
|
|
update_user_meta( $user_id, '_um_last_login', current_time( 'timestamp' ) );
|
|
}
|
|
|
|
add_action( 'wp_login', 'um_store_lastlogin_timestamp_' );
|
|
function um_store_lastlogin_timestamp_( $login ) {
|
|
$user = get_user_by('login',$login);
|
|
$user_id = $user->ID;
|
|
delete_user_meta( $user_id, '_um_last_login' );
|
|
update_user_meta( $user_id, '_um_last_login', current_time( 'timestamp' ) );
|
|
}
|
|
|
|
/***
|
|
*** @login user
|
|
***/
|
|
add_action('um_user_login', 'um_user_login', 10);
|
|
function um_user_login($args){
|
|
extract( $args );
|
|
|
|
$rememberme = ( isset($args['rememberme']) ) ? 1 : 0;
|
|
|
|
if ( ( um_get_option('deny_admin_frontend_login') && ! isset( $_GET['provider'] ) ) && strrpos( um_user('wp_roles' ), 'administrator' ) !== FALSE ){
|
|
wp_die( __('This action has been prevented for security measures.','ultimate-member') );
|
|
}
|
|
|
|
UM()->user()->auto_login( um_user('ID'), $rememberme );
|
|
|
|
// Hook that runs after successful login and before user is redirected
|
|
do_action('um_on_login_before_redirect', um_user('ID') );
|
|
|
|
// Priority redirect
|
|
if ( isset( $args['redirect_to'] ) && ! empty( $args['redirect_to'] ) ) {
|
|
exit( wp_redirect( $args['redirect_to'] ) );
|
|
}
|
|
|
|
$role_data = UM()->roles()->role_data( um_user( 'role' ) );
|
|
|
|
// Role redirect
|
|
if ( empty( $role_data['after_login'] ) )
|
|
exit( wp_redirect( um_user_profile_url() ) );
|
|
|
|
switch( $role_data['after_login'] ) {
|
|
|
|
case 'redirect_admin':
|
|
exit( wp_redirect( admin_url() ) );
|
|
break;
|
|
|
|
case 'redirect_url':
|
|
exit( wp_redirect( $role_data['login_redirect_url'] ) );
|
|
break;
|
|
|
|
case 'refresh':
|
|
exit( wp_redirect( UM()->permalinks()->get_current_url() ) );
|
|
break;
|
|
|
|
case 'redirect_profile':
|
|
default:
|
|
exit( wp_redirect( um_user_profile_url() ) );
|
|
break;
|
|
|
|
}
|
|
}
|
|
|
|
/***
|
|
*** @form processing
|
|
***/
|
|
add_action('um_submit_form_login', 'um_submit_form_login', 10);
|
|
function um_submit_form_login($args){
|
|
if ( !isset( UM()->form()->errors) ) {
|
|
do_action( 'um_user_login', $args );
|
|
}
|
|
|
|
do_action('um_user_login_extra_hook', $args );
|
|
}
|
|
|
|
/***
|
|
*** @Show the submit button
|
|
***/
|
|
add_action('um_after_login_fields', 'um_add_submit_button_to_login', 1000);
|
|
function um_add_submit_button_to_login($args){
|
|
// DO NOT add when reviewing user's details
|
|
if ( UM()->user()->preview == true && is_admin() ) return;
|
|
|
|
$primary_btn_word = $args['primary_btn_word'];
|
|
$primary_btn_word = apply_filters('um_login_form_button_one', $primary_btn_word, $args );
|
|
|
|
$secondary_btn_word = $args['secondary_btn_word'];
|
|
$secondary_btn_word = apply_filters('um_login_form_button_two', $secondary_btn_word, $args );
|
|
|
|
$secondary_btn_url = ( isset( $args['secondary_btn_url'] ) && $args['secondary_btn_url'] ) ? $args['secondary_btn_url'] : um_get_core_page('register');
|
|
$secondary_btn_url = apply_filters('um_login_form_button_two_url', $secondary_btn_url, $args );
|
|
|
|
?>
|
|
|
|
<div class="um-col-alt">
|
|
|
|
<?php if ( isset( $args['show_rememberme'] ) && $args['show_rememberme'] ) {
|
|
echo UM()->fields()->checkbox('rememberme', __('Keep me signed in','ultimate-member') );
|
|
echo '<div class="um-clear"></div>';
|
|
} ?>
|
|
|
|
<?php if ( isset($args['secondary_btn']) && $args['secondary_btn'] != 0 ) { ?>
|
|
|
|
<div class="um-left um-half"><input type="submit" value="<?php echo __( $primary_btn_word,'ultimate-member'); ?>" class="um-button" id="um-submit-btn" /></div>
|
|
<div class="um-right um-half"><a href="<?php echo $secondary_btn_url; ?>" class="um-button um-alt"><?php echo __( $secondary_btn_word,'ultimate-member'); ?></a></div>
|
|
|
|
<?php } else { ?>
|
|
|
|
<div class="um-center"><input type="submit" value="<?php echo __( $args['primary_btn_word'],'ultimate-member'); ?>" class="um-button" id="um-submit-btn" /></div>
|
|
|
|
<?php } ?>
|
|
|
|
<div class="um-clear"></div>
|
|
|
|
</div>
|
|
|
|
<?php
|
|
}
|
|
|
|
/***
|
|
*** @Display a forgot password link
|
|
***/
|
|
add_action('um_after_login_fields', 'um_after_login_submit', 1001);
|
|
function um_after_login_submit( $args ){
|
|
if ( $args['forgot_pass_link'] == 0 ) return;
|
|
|
|
?>
|
|
|
|
<div class="um-col-alt-b">
|
|
<a href="<?php echo um_get_core_page('password-reset'); ?>" class="um-link-alt"><?php _e('Forgot your password?','ultimate-member'); ?></a>
|
|
</div>
|
|
|
|
<?php
|
|
}
|
|
|
|
/***
|
|
*** @Show Fields
|
|
***/
|
|
add_action('um_main_login_fields', 'um_add_login_fields', 100);
|
|
function um_add_login_fields($args){
|
|
echo UM()->fields()->display( 'login', $args );
|
|
}
|
|
|
|
/**
|
|
* Remove authenticate filter
|
|
* @uses 'wp_authenticate_username_password_before'
|
|
*/
|
|
add_action('wp_authenticate_username_password_before','um_auth_username_password_before',10,3);
|
|
function um_auth_username_password_before( $user, $username, $password ){
|
|
remove_filter( 'authenticate', 'wp_authenticate_username_password', 20 );
|
|
}
|
|
|