File "functions.php"
Full Path: /home/jlklyejr/public_html/post-date/wp-content/plugins/bbpress/includes/users/functions.php
File size: 27.59 KB
MIME-type: text/x-php
Charset: utf-8
<?php
/**
* bbPress User Functions
*
* @package bbPress
* @subpackage Functions
*/
// Exit if accessed directly
defined( 'ABSPATH' ) || exit;
/**
* Redirect back to $url when attempting to use the login page
*
* @since 2.0.0 bbPress (r2815)
*
* @param string $url The url
* @param string $raw_url Raw url
* @param object $user User object
*/
function bbp_redirect_login( $url = '', $raw_url = '', $user = '' ) {
// Raw redirect_to was passed, so use it
if ( ! empty( $raw_url ) ) {
$url = $raw_url;
// $url was manually set in wp-login.php to redirect to admin
} elseif ( admin_url() === $url ) {
$url = home_url();
// $url is empty
} elseif ( empty( $url ) ) {
$url = home_url();
}
// Filter & return
return apply_filters( 'bbp_redirect_login', $url, $raw_url, $user );
}
/**
* Is an anonymous topic/reply being made?
*
* @since 2.0.0 bbPress (r2688)
*
* @return bool True if anonymous is allowed and user is not logged in, false if
* anonymous is not allowed or user is logged in
*/
function bbp_is_anonymous() {
$is_anonymous = ( ! is_user_logged_in() && bbp_allow_anonymous() );
// Filter & return
return (bool) apply_filters( 'bbp_is_anonymous', $is_anonymous );
}
/**
* Echoes the values for current poster (uses WP comment cookies)
*
* @since 2.0.0 bbPress (r2734)
*
* @param string $key Which value to echo?
*/
function bbp_current_anonymous_user_data( $key = '' ) {
echo esc_attr( bbp_get_current_anonymous_user_data( $key ) );
}
/**
* Get the cookies for current poster (uses WP comment cookies).
*
* @since 2.0.0 bbPress (r2734)
*
* @param string $key Optional. Which value to get? If not given, then
* an array is returned.
* @return string|array Cookie(s) for current poster
*/
function bbp_get_current_anonymous_user_data( $key = '' ) {
// Array of allowed cookie names
$cookie_names = array(
'name' => 'comment_author',
'email' => 'comment_author_email',
'url' => 'comment_author_url',
// Here just for the sake of them, use the above ones
'comment_author' => 'comment_author',
'comment_author_email' => 'comment_author_email',
'comment_author_url' => 'comment_author_url',
);
// Get the current poster's info from the cookies
$bbp_current_poster = wp_get_current_commenter();
// Sanitize the cookie key being retrieved
$key = sanitize_key( $key );
// Maybe return a specific key
if ( ! empty( $key ) && in_array( $key, array_keys( $cookie_names ), true ) ) {
return $bbp_current_poster[ $cookie_names[ $key ] ];
}
// Return all keys
return $bbp_current_poster;
}
/**
* Set the cookies for current poster (uses WP comment cookies)
*
* @since 2.0.0 bbPress (r2734)
*
* @param array $anonymous_data Optional - if it's an anonymous post. Do not
* supply if supplying $author_id. Should be
* sanitized (see {@link bbp_filter_anonymous_post_data()}
*/
function bbp_set_current_anonymous_user_data( $anonymous_data = array() ) {
// Bail if empty or not an array
if ( empty( $anonymous_data ) || ! is_array( $anonymous_data ) ) {
return;
}
// Setup cookie expiration
$lifetime = (int) apply_filters( 'comment_cookie_lifetime', 30000000 );
$expiry = time() + $lifetime;
$secure = ( 'https' === parse_url( home_url(), PHP_URL_SCHEME ) );
// Set the cookies
setcookie( 'comment_author_' . COOKIEHASH, $anonymous_data['bbp_anonymous_name'], $expiry, COOKIEPATH, COOKIE_DOMAIN, $secure );
setcookie( 'comment_author_email_' . COOKIEHASH, $anonymous_data['bbp_anonymous_email'], $expiry, COOKIEPATH, COOKIE_DOMAIN, $secure );
setcookie( 'comment_author_url_' . COOKIEHASH, $anonymous_data['bbp_anonymous_website'], $expiry, COOKIEPATH, COOKIE_DOMAIN, $secure );
}
/**
* Get the poster IP address
*
* @since 2.0.0 bbPress (r3120)
* @since 2.6.0 bbPress (r5609) Added `empty()` check for unit tests
*
* @return string
*/
function bbp_current_author_ip() {
// Check for remote address
$remote_address = ! empty( $_SERVER['REMOTE_ADDR'] )
? wp_unslash( $_SERVER['REMOTE_ADDR'] )
: '127.0.0.1';
// Remove any unsavory bits
$retval = preg_replace( '/[^0-9a-fA-F:., ]/', '', $remote_address );
// Filter & return
return apply_filters( 'bbp_current_author_ip', $retval, $remote_address );
}
/**
* Get the poster user agent
*
* @since 2.0.0 bbPress (r3446)
*
* @return string
*/
function bbp_current_author_ua() {
$retval = ! empty( $_SERVER['HTTP_USER_AGENT'] )
? mb_substr( wp_unslash( $_SERVER['HTTP_USER_AGENT'] ), 0, 254 )
: '';
// Filter & return
return apply_filters( 'bbp_current_author_ua', $retval );
}
/** Edit **********************************************************************/
/**
* Handles the front end user editing from POST requests
*
* @since 2.0.0 bbPress (r2790)
*
* @param string $action The requested action to compare this function to
*/
function bbp_edit_user_handler( $action = '' ) {
// Bail if action is not `bbp-update-user`
if ( 'bbp-update-user' !== $action ) {
return;
}
// Bail if in wp-admin
if ( is_admin() ) {
return;
}
// Get the displayed user ID
$user_id = bbp_get_displayed_user_id();
// Nonce check
if ( ! bbp_verify_nonce_request( 'update-user_' . $user_id ) ) {
bbp_add_error( 'bbp_update_user_nonce', __( '<strong>Error</strong>: Are you sure you wanted to do that?', 'bbpress' ) );
return;
}
// Cap check
if ( ! current_user_can( 'edit_user', $user_id ) ) {
bbp_add_error( 'bbp_update_user_capability', __( '<strong>Error</strong>: Are you sure you wanted to do that?', 'bbpress' ) );
return;
}
// Empty email check
if ( empty( $_POST['email'] ) ) {
bbp_add_error( 'bbp_user_email_empty', __( '<strong>Error</strong>: That is not a valid email address.', 'bbpress' ), array( 'form-field' => 'email' ) );
return;
}
// Get the users current email address to use for comparisons
$user_email = bbp_get_displayed_user_field( 'user_email', 'raw' );
// Bail if no email change
if ( $user_email !== $_POST['email'] ) {
// Check that new email address is valid
if ( ! is_email( $_POST['email'] ) ) {
bbp_add_error( 'bbp_user_email_invalid', __( '<strong>Error</strong>: That is not a valid email address.', 'bbpress' ), array( 'form-field' => 'email' ) );
return;
}
// Check if email address is already in use
if ( email_exists( $_POST['email'] ) ) {
bbp_add_error( 'bbp_user_email_taken', __( '<strong>Error</strong>: That email address is already in use.', 'bbpress' ), array( 'form-field' => 'email' ) );
return;
}
// Update the option
$option = array(
'hash' => md5( $_POST['email'] . time() . wp_rand() ),
'newemail' => $_POST['email'],
);
update_user_meta( $user_id, '_new_email', $option );
// Attempt to notify the user of email address change
bbp_edit_user_email_send_notification( $user_id, $option );
// Set the POST email variable back to the user's email address
// so `edit_user()` does not attempt to update it. This is not ideal,
// but it's also what send_confirmation_on_profile_email() does.
$_POST['email'] = $user_email;
}
// Do action based on who's profile you're editing
$edit_action = bbp_is_user_home_edit()
? 'personal_options_update'
: 'edit_user_profile_update';
do_action( $edit_action, $user_id );
// Prevent edit_user() from wiping out the user's Toolbar on front setting
if ( ! isset( $_POST['admin_bar_front'] ) && _get_admin_bar_pref( 'front', $user_id ) ) {
$_POST['admin_bar_front'] = 1;
}
// Bail if errors already exist
if ( bbp_has_errors() ) {
return;
}
// Handle user edit
$edit_user = edit_user( $user_id );
// Error(s) editng the user, so copy them into the global
if ( is_wp_error( $edit_user ) ) {
bbpress()->errors = $edit_user;
// Successful edit to redirect
} elseif ( is_integer( $edit_user ) ) {
// Maybe update super admin ability
if ( is_multisite() && ! bbp_is_user_home_edit() && current_user_can( 'manage_network_options' ) && is_super_admin() ) {
empty( $_POST['super_admin'] )
? revoke_super_admin( $edit_user )
: grant_super_admin( $edit_user );
}
// Redirect
$args = array( 'updated' => 'true' );
$user_url = bbp_get_user_profile_edit_url( $edit_user );
$redirect = add_query_arg( $args, $user_url );
bbp_redirect( $redirect );
}
}
/**
* Handles user email address updating from GET requests
*
* @since 2.6.0 bbPress (r5660)
*
* @param string $action
*/
function bbp_user_email_change_handler( $action = '' ) {
// Bail if action is not `bbp-update-user-email`
if ( 'bbp-update-user-email' !== $action ) {
return;
}
// Bail if not on users own profile
if ( ! bbp_is_user_home_edit() ) {
return;
}
// Bail if not attempting to modify user email address
if ( empty( $_GET['newuseremail'] ) && empty( $_GET['dismiss'] ) ) {
return;
}
// Get the displayed user ID & option key
$user_id = bbp_get_displayed_user_id();
$key = '_new_email';
$redirect_to = bbp_get_user_profile_edit_url( $user_id );
// Execute confirmed email change.
if ( ! empty( $_GET['newuseremail'] ) ) {
// Check for email address change option
$new_email = get_user_meta( $user_id, $key, true );
// Redirect if *no* email address change exists
if ( false === $new_email ) {
bbp_redirect( $redirect_to );
}
// Cleanup & redirect if *invalid* email address change exists
if ( empty( $new_email['hash'] ) || empty( $new_email['newemail'] ) ) {
delete_user_meta( $user_id, $key );
bbp_redirect( $redirect_to );
}
// Compare hashes, and update user if hashes match
if ( hash_equals( $new_email['hash'], $_GET['newuseremail'] ) ) {
// Does another user have this email address already?
if ( email_exists( $new_email['newemail'] ) ) {
delete_user_meta( $user_id, $key );
bbp_add_error( 'bbp_user_email_taken', __( '<strong>Error</strong>: That email address is already in use.', 'bbpress' ), array( 'form-field' => 'email' ) );
// Email address is good to change to
} else {
// Create a stdClass (for easy call to wp_update_user())
$user = new stdClass();
$user->ID = $user_id;
$user->user_email = esc_html( trim( $new_email['newemail'] ) );
// Attempt to update user email
$update_user = wp_update_user( $user );
// Error(s) editing the user, so copy them into the global
if ( is_wp_error( $update_user ) ) {
bbpress()->errors = $update_user;
// All done, so redirect and show the updated message
} else {
// Update signups table, if signups table & entry exists
// For Multisite & BuddyPress compatibility
$bbp_db = bbp_db();
if ( ! empty( $bbp_db->signups ) && $bbp_db->get_var( $bbp_db->prepare( "SELECT user_login FROM {$bbp_db->signups} WHERE user_login = %s", bbp_get_displayed_user_field( 'user_login', 'raw' ) ) ) ) {
$bbp_db->query( $bbp_db->prepare( "UPDATE {$bbp_db->signups} SET user_email = %s WHERE user_login = %s", $user->user_email, bbp_get_displayed_user_field( 'user_login', 'raw' ) ) );
}
delete_user_meta( $user_id, $key );
bbp_redirect( add_query_arg( array( 'updated' => 'true' ), $redirect_to ) );
}
}
}
// Delete new email address from user options
} elseif ( ! empty( $_GET['dismiss'] ) && ( "{$user_id}{$key}" === $_GET['dismiss'] ) ) {
if ( ! bbp_verify_nonce_request( "dismiss-{$user_id}{$key}" ) ) {
bbp_add_error( 'bbp_dismiss_new_email_nonce', __( '<strong>Error</strong>: Are you sure you wanted to do that?', 'bbpress' ) );
return;
}
delete_user_meta( $user_id, $key );
bbp_redirect( $redirect_to );
}
}
/**
* Sends an email when an email address change occurs on POST requests
*
* @since 2.6.0 bbPress (r5660)
*
* @see send_confirmation_on_profile_email()
*/
function bbp_edit_user_email_send_notification( $user_id = 0, $args = array() ) {
// Parse args
$r = bbp_parse_args( $args, array(
'hash' => '',
'newemail' => '',
) );
// Bail if any relevant parameters are empty
if ( empty( $user_id ) || empty( $r['hash'] ) || empty( $r['newemail'] ) ) {
bbp_add_error( 'bbp_user_email_invalid_hash', __( '<strong>Error</strong>: An error occurred while updating your email address.', 'bbpress' ), array( 'form-field' => 'email' ) );
return;
}
// Build the nonced URL to dismiss the pending change
$user_login = bbp_get_displayed_user_field( 'user_login', 'raw' );
$user_url = bbp_get_user_profile_edit_url( $user_id );
$confirm_url = add_query_arg( array(
'action' => 'bbp-update-user-email',
'newuseremail' => $r['hash']
), $user_url );
$email_text = __( '%1$s
Someone requested a change to the email address on your account.
Please click the following link to confirm this change:
%2$s
If you did not request this, you can safely ignore and delete this notification.
This email was sent to: %3$s
Regards,
The %4$s Team
%5$s', 'bbpress' );
/**
* Filter the email text sent when a user changes emails.
*
* The following strings have a special meaning and will get replaced dynamically:
*
* %1$s - The current user's username
* %2$s - The link to click on to confirm the email change
* %3$s - The new email
* %4$s - The name of the site
* %5$s - The URL to the site
*
* @param string $email_text Text in the email.
* @param string $r New user email that the current user has changed to.
*/
$content = apply_filters( 'bbp_user_email_update_content', $email_text, $r );
// Build the email message
$message = sprintf( $content, $user_login, $confirm_url, $r['newemail'], get_site_option( 'site_name' ), network_home_url() );
// Build the email subject
$subject = sprintf( __( '[%s] New Email Address', 'bbpress' ), wp_specialchars_decode( get_option( 'blogname' ) ) );
// Send the email
wp_mail( $r['newemail'], $subject, $message );
}
/**
* Conditionally hook the core WordPress output actions to the end of the
* default user's edit profile template
*
* This allows clever plugin authors to conditionally unhook the WordPress core
* output actions if they don't want any unexpected junk to appear there, and
* also avoids needing to pollute the templates with additional logic and actions.
*
* @since 2.2.0 bbPress (r4273)
*/
function bbp_user_edit_after() {
$action = bbp_is_user_home_edit() ? 'show_user_profile' : 'edit_user_profile';
do_action( $action, get_userdata( bbp_get_displayed_user_id() ) );
}
/** User Queries **************************************************************/
/**
* Get the topics that a user created
*
* @since 2.0.0 bbPress (r2660)
* @since 2.6.0 bbPress (r6618) Signature changed to accept an array of arguments
*
* @param array $args Optional. Arguments to pass into bbp_has_topics()
*
* @return bool True if user has started topics, otherwise false
*/
function bbp_get_user_topics_started( $args = array() ) {
// Backwards compat for pre-2.6.0
if ( is_numeric( $args ) ) {
$args = array(
'author' => bbp_get_user_id( $args, false, false )
);
}
// Default arguments
$defaults = array(
'author' => bbp_get_displayed_user_id()
);
// Parse arguments
$r = bbp_parse_args( $args, $defaults, 'get_user_topics_started' );
// Get the topics
$query = bbp_has_topics( $r );
$user_id = $r['author'];
// Filter & return
return apply_filters( 'bbp_get_user_topics_started', $query, $user_id, $r, $args );
}
/**
* Get the replies that a user created
*
* @since 2.2.0 bbPress (r4225)
* @since 2.6.0 bbPress (r6618) Signature changed to accept an array of arguments
*
* @param array $args Optional. Arguments to pass into bbp_has_replies()
*
* @return bool True if user has created replies, otherwise false
*/
function bbp_get_user_replies_created( $args = array() ) {
// Backwards compat for pre-2.6.0
if ( is_numeric( $args ) ) {
$args = array(
'author' => bbp_get_user_id( $args, false, false ),
'post_type' => bbp_get_reply_post_type(),
'order' => 'DESC'
);
}
// Default arguments
$defaults = array(
'author' => bbp_get_displayed_user_id(),
'post_type' => bbp_get_reply_post_type(),
'order' => 'DESC'
);
// Parse arguments
$r = bbp_parse_args( $args, $defaults, 'get_user_replies_created' );
// Get the replies
$query = bbp_has_replies( $r );
$user_id = $r['author'];
// Filter & return
return apply_filters( 'bbp_get_user_replies_created', $query, $user_id, $r, $args );
}
/**
* Get user IDs from nicenames
*
* This function is primarily used when saving object moderators
*
* @since 2.6.0 bbPress
*
* @param mixed $user_nicenames
* @return array
*/
function bbp_get_user_ids_from_nicenames( $user_nicenames = array() ) {
// Default value
$retval = array();
// Only query if nicenames
if ( ! empty( $user_nicenames ) ) {
// Maybe explode by comma
$user_nicenames = ( is_string( $user_nicenames ) && strstr( $user_nicenames, ',' ) )
? explode( ',', $user_nicenames )
: (array) $user_nicenames;
// Sanitize each nicename in the array
$user_nicenames = array_map( 'sanitize_title', $user_nicenames );
// Get users
$users = get_users( array(
'nicename__in' => $user_nicenames
) );
// Pluck or empty
if ( ! empty( $users ) ) {
$retval = wp_list_pluck( $users, 'ID' );
}
}
// Filter & return
return (array) apply_filters( 'bbp_get_user_ids_from_nicenames', $retval, $user_nicenames );
}
/**
* Get user nicenames from IDs
*
* This function is primarily used when saving object moderators
*
* @since 2.6.0 bbPress
*
* @param mixed $user_ids
* @return array
*/
function bbp_get_user_nicenames_from_ids( $user_ids = array() ) {
// Default value
$retval = array();
// Only query if nicenames
if ( ! empty( $user_ids ) ) {
// Get users
$users = get_users( array(
'include' => $user_ids
) );
// Pluck or empty
if ( ! empty( $users ) ) {
$retval = wp_list_pluck( $users, 'user_nicename' );
}
}
// Filter & return
return (array) apply_filters( 'bbp_get_user_nicenames_from_ids', $retval, $user_ids );
}
/** Post Counts ***************************************************************/
/**
* Return the raw database count of topics by a user
*
* @since 2.1.0 bbPress (r3633)
*
* @param int $user_id User ID to get count for
*
* @return int Raw DB count of topics
*/
function bbp_get_user_topic_count_raw( $user_id = 0 ) {
$user_id = bbp_get_user_id( $user_id );
$bbp_db = bbp_db();
$statii = "'" . implode( "', '", bbp_get_public_topic_statuses() ) . "'";
$sql = "SELECT COUNT(*)
FROM {$bbp_db->posts}
WHERE post_author = %d
AND post_type = %s
AND post_status IN ({$statii})";
$query = $bbp_db->prepare( $sql, $user_id, bbp_get_topic_post_type() );
$count = (int) $bbp_db->get_var( $query );
// Filter & return
return (int) apply_filters( 'bbp_get_user_topic_count_raw', $count, $user_id );
}
/**
* Return the raw database count of replies by a user
*
* @since 2.1.0 bbPress (r3633)
*
* @param int $user_id User ID to get count for
*
* @return int Raw DB count of replies
*/
function bbp_get_user_reply_count_raw( $user_id = 0 ) {
$user_id = bbp_get_user_id( $user_id );
$bbp_db = bbp_db();
$statii = "'" . implode( "', '", bbp_get_public_reply_statuses() ) . "'";
$sql = "SELECT COUNT(*)
FROM {$bbp_db->posts}
WHERE post_author = %d
AND post_type = %s
AND post_status IN ({$statii})";
$query = $bbp_db->prepare( $sql, $user_id, bbp_get_reply_post_type() );
$count = (int) $bbp_db->get_var( $query );
// Filter & return
return (int) apply_filters( 'bbp_get_user_reply_count_raw', $count, $user_id );
}
/**
* Bump the topic count for a user by a certain amount.
*
* @since 2.6.0 bbPress (r5309)
*
* @param int $user_id
* @param int $difference
*/
function bbp_bump_user_topic_count( $user_id = 0, $difference = 1 ) {
// Bail if no bump
if ( empty( $difference ) ) {
return false;
}
// Validate user ID
$user_id = bbp_get_user_id( $user_id );
if ( empty( $user_id ) ) {
return false;
}
// Check meta for count, or query directly if not found
$count = bbp_get_user_topic_count( $user_id, true );
if ( empty( $count ) ) {
$count = bbp_get_user_topic_count_raw( $user_id );
}
$difference = (int) $difference;
$user_topic_count = (int) ( $count + $difference );
// Add them up and filter them
$new_count = (int) apply_filters( 'bbp_bump_user_topic_count', $user_topic_count, $user_id, $difference, $count );
return bbp_update_user_topic_count( $user_id, $new_count );
}
/**
* Bump the reply count for a user by a certain amount.
*
* @since 2.6.0 bbPress (r5309)
*
* @param int $user_id
* @param int $difference
*/
function bbp_bump_user_reply_count( $user_id = 0, $difference = 1 ) {
// Bail if no bump
if ( empty( $difference ) ) {
return false;
}
// Validate user ID
$user_id = bbp_get_user_id( $user_id );
if ( empty( $user_id ) ) {
return false;
}
// Check meta for count, or query directly if not found
$count = bbp_get_user_reply_count( $user_id, true );
if ( empty( $count ) ) {
$count = bbp_get_user_reply_count_raw( $user_id );
}
$difference = (int) $difference;
$user_reply_count = (int) ( $count + $difference );
// Add them up and filter them
$new_count = (int) apply_filters( 'bbp_bump_user_reply_count', $user_reply_count, $user_id, $difference, $count );
return bbp_update_user_reply_count( $user_id, $new_count );
}
/**
* Helper function used to increase (by one) the count of topics for a user when
* a topic is published.
*
* @since 2.6.0 bbPress (r5309)
*
* @access
* @param $topic_id
* @param $forum_id
* @param $anonymous_data
* @param $topic_author
*/
function bbp_increase_user_topic_count( $topic_id = 0 ) {
$user_id = bbp_get_topic_author_id( $topic_id );
return bbp_bump_user_topic_count( $user_id, 1 );
}
/**
* Helper function used to increase (by one) the count of replies for a user when
* a reply is published.
*
* This is a helper function, hooked to `bbp_new_reply`
*
* @since 2.6.0 bbPress (r5309)
*
* @param $topic_id
* @param $forum_id
* @param $anonymous_data
* @param $topic_author
*/
function bbp_increase_user_reply_count( $reply_id = 0 ) {
$user_id = bbp_get_reply_author_id( $reply_id );
return bbp_bump_user_reply_count( $user_id, 1 );
}
/**
* Helper function used to decrease (by one) the count of topics for a user when
* a topic is unpublished.
*
* @since 2.6.0 bbPress (r5309)
*
* @param $topic_id
*/
function bbp_decrease_user_topic_count( $topic_id = 0 ) {
$user_id = bbp_get_topic_author_id( $topic_id );
return bbp_bump_user_topic_count( $user_id, -1 );
}
/**
* Helper function used to increase (by one) the count of replies for a user when
* a topic is unpublished.
*
* @since 2.6.0 bbPress (r5309)
*
* @param $reply_id
*/
function bbp_decrease_user_reply_count( $reply_id = 0 ) {
$user_id = bbp_get_reply_author_id( $reply_id );
return bbp_bump_user_reply_count( $user_id, -1 );
}
/** Permissions ***************************************************************/
/**
* Redirect if unauthorized user is attempting to edit another user
*
* This is hooked to 'bbp_template_redirect' and controls the conditions under
* which a user can edit another user (or themselves.) If these conditions are
* met, we assume a user cannot perform this task, and look for ways they can
* earn the ability to access this template.
*
* @since 2.1.0 bbPress (r3605)
*/
function bbp_check_user_edit() {
// Bail if not editing a user
if ( ! bbp_is_single_user_edit() ) {
return;
}
// Default to false
$redirect = true;
$user_id = bbp_get_displayed_user_id();
// Allow user to edit their own profile
if ( bbp_is_user_home_edit() ) {
$redirect = false;
// Allow if current user can edit the displayed user
} elseif ( current_user_can( 'edit_user', $user_id ) ) {
$redirect = false;
// Allow if user can manage network users, or edit-any is enabled
} elseif ( current_user_can( 'manage_network_users' ) || apply_filters( 'enable_edit_any_user_configuration', false ) ) {
$redirect = false;
}
// Allow conclusion to be overridden
$redirect = (bool) apply_filters( 'bbp_check_user_edit', $redirect, $user_id );
// Bail if not redirecting
if ( false === $redirect ) {
return;
}
// Filter redirect URL
$profile_url = bbp_get_user_profile_url( $user_id );
$redirect_to = apply_filters( 'bbp_check_user_edit_redirect_to', $profile_url, $user_id );
// Redirect
bbp_redirect( $redirect_to );
}
/**
* Check if a user is blocked, or cannot spectate the forums.
*
* @since 2.0.0 bbPress (r2996)
*/
function bbp_forum_enforce_blocked() {
// Bail if not logged in or keymaster
if ( ! is_user_logged_in() || bbp_is_user_keymaster() ) {
return;
}
// Set 404 if in bbPress and user cannot spectate
if ( is_bbpress() && ! current_user_can( 'spectate' ) ) {
bbp_set_404();
}
}
/** Sanitization **************************************************************/
/**
* Sanitize displayed user data, when viewing and editing any user.
*
* This somewhat monolithic function handles the escaping and sanitization of
* user data for a bbPress profile. There are two reasons this all happens here:
*
* 1. bbPress took a similar approach to WordPress, and funnels all user profile
* data through a central helper. This eventually calls sanitize_user_field()
* which applies a few context based filters, which some third party plugins
* might be relying on bbPress to play nicely with.
*
* 2. Early versions of bbPress 2.x templates did not escape this data meaning
* a backwards compatible approach like this one was necessary to protect
* existing installations that may have custom template parts.
*
* @since 2.6.0 bbPress (r5368)
*
* @param string $value
* @param string $field
* @param string $context
* @return string
*/
function bbp_sanitize_displayed_user_field( $value = '', $field = '', $context = 'display' ) {
// Bail if not editing or displaying (maybe we'll do more here later)
if ( ! in_array( $context, array( 'edit', 'display' ), true ) ) {
return $value;
}
// By default, no filter set (consider making this an array later)
$filter = false;
// Big switch statement to decide which user field we're sanitizing and how
switch ( $field ) {
// Description is a paragraph
case 'description' :
$filter = ( 'edit' === $context ) ? '' : 'wp_kses_data';
break;
// Email addresses are sanitized with a specific function
case 'user_email' :
$filter = 'sanitize_email';
break;
// Name & login fields
case 'user_login' :
case 'display_name' :
case 'first_name' :
case 'last_name' :
case 'nick_name' :
$filter = ( 'edit' === $context ) ? 'esc_attr' : 'esc_html';
break;
// wp-includes/default-filters.php escapes this for us via esc_url()
case 'user_url' :
break;
}
// Run any applicable filters on the value
if ( ! empty( $filter ) ) {
$value = call_user_func( $filter, $value );
}
return $value;
}
/** Converter *****************************************************************/
/**
* Convert passwords from previous platform encryption to WordPress encryption.
*
* @since 2.1.0 bbPress (r3813)
*/
function bbp_user_maybe_convert_pass() {
// Sanitize username
$username = ! empty( $_POST['log'] )
? sanitize_user( $_POST['log'] )
: '';
// Bail if no username
if ( empty( $username ) ) {
return;
}
// Bail if no user password to convert
$bbp_db = bbp_db();
$query = $bbp_db->prepare( "SELECT * FROM {$bbp_db->users} INNER JOIN {$bbp_db->usermeta} ON user_id = ID WHERE meta_key = %s AND user_login = %s LIMIT 1", '_bbp_class', $username );
$row = $bbp_db->get_row( $query );
if ( empty( $row ) || is_wp_error( $row ) ) {
return;
}
// Setup the converter
bbp_setup_converter();
// Try to convert the old password for this user
$converter = bbp_new_converter( $row->meta_value );
// Try to call the conversion method
if ( ( $converter instanceof BBP_Converter_Base ) && method_exists( $converter, 'callback_pass' ) ) {
$converter->callback_pass( $username, $_POST['pwd'] );
}
}