XMAN Replicator

Path: /home/rlinfolily/www/wp-content/plugins/upme/classes/
Name	Size	Rights	Date	Actions
[.]	<DIR>	drwx---r-x	2015-02-16 13:56	🔄 🗑️ 🗑️📁 ⬇️ 🔒
[..]	<DIR>	drwx---r-x	2015-02-16 10:04	🔄 🗑️ 🗑️📁 ⬇️ 🔒
class-upme-admin.php	105,279 B	-rw----r--	2015-02-16 10:03	✏️ 🔄 🗑️ ⬇️ 🔒
class-upme-api.php	5,887 B	-rw----r--	2015-02-16 10:03	✏️ 🔄 🗑️ ⬇️ 🔒
class-upme-captcha-loader.php	13,239 B	-rw----r--	2015-02-16 10:03	✏️ 🔄 🗑️ ⬇️ 🔒
class-upme-cards.php	15,106 B	-rw----r--	2015-02-16 10:03	✏️ 🔄 🗑️ ⬇️ 🔒
class-upme-html.php	3,483 B	-rw----r--	2015-02-16 10:03	✏️ 🔄 🗑️ ⬇️ 🔒
class-upme-login.php	12,433 B	-rw----r--	2015-02-16 10:03	✏️ 🔄 🗑️ ⬇️ 🔒
class-upme-predefined.php	6,997 B	-rw----r--	2015-02-16 10:03	✏️ 🔄 🗑️ ⬇️ 🔒
class-upme-private-content.php	9,644 B	-rw----r--	2015-02-16 10:03	✏️ 🔄 🗑️ ⬇️ 🔒
class-upme-profile-fields.php	5,662 B	-rw----r--	2015-02-16 10:03	✏️ 🔄 🗑️ ⬇️ 🔒
class-upme-profile.php	2,349 B	-rw----r--	2015-02-16 10:03	✏️ 🔄 🗑️ ⬇️ 🔒
class-upme-recaptchalib.php	9,910 B	-rw----r--	2015-02-16 10:03	✏️ 🔄 🗑️ ⬇️ 🔒
class-upme-register.php	27,282 B	-rw----r--	2015-02-16 10:03	✏️ 🔄 🗑️ ⬇️ 🔒
class-upme-reset-password.php	5,974 B	-rw----r--	2015-02-16 10:03	✏️ 🔄 🗑️ ⬇️ 🔒
class-upme-roles.php	5,539 B	-rw----r--	2015-02-16 10:03	✏️ 🔄 🗑️ ⬇️ 🔒
class-upme-save.php	17,920 B	-rw----r--	2015-02-16 10:03	✏️ 🔄 🗑️ ⬇️ 🔒
class-upme-scripts-styles.php	1,751 B	-rw----r--	2015-02-16 10:03	✏️ 🔄 🗑️ ⬇️ 🔒
class-upme-sync-woocommerce.php	9,304 B	-rw----r--	2015-02-16 10:03	✏️ 🔄 🗑️ ⬇️ 🔒
class-upme-template-loader.php	3,596 B	-rw----r--	2015-02-16 10:03	✏️ 🔄 🗑️ ⬇️ 🔒
class-upme-updater.php	21,206 B	-rw----r--	2015-02-16 10:03	✏️ 🔄 🗑️ ⬇️ 🔒
class-upme.php	232,101 B	-rw----r--	2015-02-16 13:56	✏️ 🔄 🗑️ ⬇️ 🔒
View: class-upme-register.php

<?php

class UPME_Register {

    function __construct() {
        add_action('init', array($this, 'handle_init'));
        add_action('init', array($this, 'upme_password_nag_handler'));
             
        $this->errors = null;

        add_action('upme_before_registration_restrictions',array($this, 'upme_before_registration_restrictions'), 10 ,2);
    }

    /* Prepare user meta */
    function prepare($array) {


        /* UPME Filters for omit saving custom or hidden fields */
        $skip_save_registration_fields_params = array();
        $skipped_reg_fields = apply_filters( 'upme_skip_save_registration_fields', array() , $skip_save_registration_fields_params);
        // End Filters

        foreach ($array as $k => $v) {
            if ($k == 'upme-register')
                continue;
            if (!(false === strpos($k, 'upme-hidden')))
                continue;
            if(in_array($k, $skipped_reg_fields))
                continue;
            $this->usermeta[$k] = $v;
        }
        return $this->usermeta;
    }

    /* Handle/return any errors */

    function handle() {
        global $upme_captcha_loader;
        require_once(ABSPATH . 'wp-includes/pluggable.php');

        if (get_option('users_can_register') == '1') {
            foreach ($this->usermeta as $key => $value) {

                /* Validate username */
                if ($key == 'user_login') {

                    /* UPME Action for validating username before creating new user */
                    do_action('upme_validate_username',$value);
                    // End Action

                    if (esc_attr($value) == '') {
                        $this->errors[] = __('Please enter a username.', 'upme');
                    } elseif (username_exists($value)) {
                        $this->errors[] = __('This username is already registered. Please choose another one.', 'upme');
                    }
                }

                /* Validate email */
                if ($key == 'user_email') {
                    if (esc_attr($value) == '') {
                        $this->errors[] = __('Please type your e-mail address.', 'upme');
                    } elseif (!is_email($value)) {
                        $this->errors[] = __('The email address isn\'t correct.', 'upme');
                    } elseif (email_exists($value)) {
                        $this->errors[] = __('This email is already registered, please choose another one.', 'upme');
                    }
                }


                /* UPME filter for adding restrictions before custom field type saving */
                $registration_custom_field_type_restrictions_params = array('meta' => $key, 'value' => $value);
                $this->errors = apply_filters('upme_registration_custom_field_type_restrictions', $this->errors, $registration_custom_field_type_restrictions_params);
                /* END filter */ 
            }

            if (!is_in_post('no_captcha', 'yes')) {
                if (!$upme_captcha_loader->validate_captcha(post_value('captcha_plugin'))) {
                    $this->errors[] = __('Please complete Captcha Test first.', 'upme');
                }
            }
        } else {
            $this->errors[] = __('Registration is disabled for this site.', 'upme');
        }
    }

    /* Create user */

    function create() {
        global $upme_roles,$upme_email_templates;
        
        require_once(ABSPATH . 'wp-includes/pluggable.php');

        // Verify whether registration form name is modified
        if(isset($_POST['upme-register-form-name'])){

            $upme_secret_key = get_option('upme_secret_key');
            $register_form_name = $_POST['upme-register-form-name'];
            $register_form_name_hash = $_POST['upme-hidden-register-form-name-hash'];

            if($register_form_name_hash != hash('sha256', $register_form_name.$upme_secret_key) ){
                // Invailid form name was defined by manually editing
                $this->errors[] = __('Invalid registration form.','upme');
                return;
            }
            $this->registration_form_name = $register_form_name;
        }


        /* UPME action for adding restrictions before registration */
        $before_registration_validation_params = array();
        do_action('upme_before_registration_restrictions', $this->usermeta , $before_registration_validation_params);
        /* END action */ 

        /* Create profile when there is no error */
        if (!isset($this->errors)) {

            // Set date format from admin settings
            $upme_settings = get_option('upme_options');
            $upme_date_format = (string) isset($upme_settings['date_format']) ? $upme_settings['date_format'] : 'mm/dd/yy';

            /* Create account, update user meta */
            $sanitized_user_login = sanitize_user($_POST['user_login']);

            /* Get password */
            if (isset($_POST['user_pass']) && $_POST['user_pass'] != '') {
                $user_pass = $_POST['user_pass'];
            } else {
                $user_pass = wp_generate_password(12, false);

                /* UPME Filters for before registration head section */
                $registration_generated_password_params = array('meta' => $this->usermeta);
                $user_pass = apply_filters( 'upme_registration_generated_password', $user_pass , $registration_generated_password_params);
                // End Filters
            }

            /* New user */
            $user_id = wp_create_user($sanitized_user_login, $user_pass, $_POST['user_email']);
            if (!$user_id) {

                /* UPME action for handling failure in new user creation */
                $new_user_registration_fail_params = array();
                do_action('upme_new_user_registration_fail', $user_id , $new_user_registration_fail_params);
                /* END action */

            } else {
                global $upme;
                
                /* Force custom user role on registration using shortcode attributes */
                
                if(isset($_POST['upme-hidden-register-form-user-role'])){
                    $upme_secret_key = get_option('upme_secret_key');
                    $register_user_role = $_POST['upme-hidden-register-form-user-role'];
                    $register_user_role_hash = $_POST['upme-hidden-register-form-user-role-hash'];

                    if($register_user_role_hash == hash('sha256', $register_user_role.$upme_secret_key) && get_role($register_user_role) ){
                        $user = new WP_User( $user_id );
                        $user->set_role( $register_user_role );
                    }else{
                        // Invailid user role was defined by manually editing
                        return;
                    }
                }else{
                    /* Allow users to select the role without forcing */

                    $allow_user_role_registration = $upme_settings['select_user_role_in_registration'];
                    // Set new users role specified in the registration page
                    // This will only used when Select User Role in Registration setting is enabled
                    $allowed_user_roles = $upme_roles->upme_allowed_user_roles_registration();
                    $user_role = isset($this->usermeta['user_role']) ? $this->usermeta['user_role'] : '';

                    if(!empty($user_role) && isset($allowed_user_roles[$user_role]) && $allow_user_role_registration){

                        $user = new WP_User( $user_id );
                        $user->set_role( $user_role );
                    }  
                }

                // Get profile fields
                $profile_fields = get_option('upme_profile_fields');

                // Get list of dattime fields
                $date_time_fields = array();

                foreach ($profile_fields as $key => $field) {
                    extract($field);

                    // Filter date/time custom fields
                    if (isset($profile_fields[$key]['field']) && $profile_fields[$key]['field'] == 'datetime') {
                        array_push($date_time_fields, $profile_fields[$key]['meta']);
                    }
                }

                /* Now update all user meta */
                foreach ($this->usermeta as $key => $value) {

                    // save checkboxes
                    if (is_array($value)) { // checkboxes
                        $value = implode(', ', $value);
                    }

                    if (in_array($key, $date_time_fields)) {
                        if('' != $value){
                            $formatted_date = upme_date_format_to_standerd($value, $upme_date_format);
                            $value = $formatted_date;
                        }
                    }

                    /* UPME action for adding custom filtering for each field save registration */
                    $before_registration_field_update_params = array('user_id' => $user_id, 'meta' => $key, 'value' => $value);
                    do_action('upme_before_registration_field_update', $before_registration_field_update_params);
                    /* END action */

                    // Prevent passwords from saving in user meta table
                    if('user_pass' != $key && 'user_pass_confirm' != $key){
                        update_user_meta($user_id, $key, esc_attr($value));
                    }

                    /* UPME action for adding custom filtering for each field save registration */
                    $after_registration_field_update_params = array('user_id' => $user_id, 'meta' => $key, 'value' => $value);
                    do_action('upme_after_registration_field_update', $after_registration_field_update_params);
                    /* END action */ 

                    /* update core fields - email, url, pass */
                    if (in_array($key, array('user_email', 'user_url', 'display_name'))) {
                        wp_update_user(array('ID' => $user_id, $key => esc_attr($value)));
                    }
                }


                // Check user selected passwrod setting for saving the activation details

            }



            // Set approval status when user profile approvals are enabled
            $approval_setting_status = $this->validate_user_approval();
            if($approval_setting_status){
                $approval_status = 'INACTIVE';
                update_user_meta($user_id, 'upme_approval_status', $approval_status);
            }else{
                $approval_status = 'ACTIVE';
                update_user_meta($user_id, 'upme_approval_status', $approval_status);
            }

            // Set Profile Status to active by default
            update_user_meta( $user_id, 'upme_user_profile_status', 'ACTIVE' );

            // Set the password nag when user selected password setting is disabled
            // Set activation status and codes when selected password setting is enabled
            $upme_settings = get_option('upme_options');
            $set_pass = (boolean) $upme_settings['set_password'];
            $activation_setting_status = $this->validate_email_confirmation();


            $activation_status = '';
            if (!$set_pass) {                
                update_user_option($user_id, 'default_password_nag', true, true); //Set up the Password change nag.
            }

            if($activation_setting_status){
                $activation_status = 'INACTIVE';
                update_user_meta($user_id, 'upme_activation_status', $activation_status);
            }else{
                $activation_status = 'ACTIVE';
                update_user_meta($user_id, 'upme_activation_status', $activation_status);
            }

            $activation_code = wp_generate_password(12, false);

            update_user_meta($user_id, 'upme_activation_code',$activation_code);


            // Set automatic login based on the setting value in admin
            if ($this->validate_automatic_login()) {
                wp_set_auth_cookie($user_id, false, is_ssl());
            }

            /* action after Account Creation */
            do_action('upme_user_register', $user_id);


            if ( (!empty($activation_status) && 'INACTIVE' == $activation_status) || 
                 (!empty($approval_status) && 'INACTIVE' == $approval_status)) {
                
                $user = new WP_User( $user_id );
                $username = $user->user_login;
                
                $current_option = get_option('upme_options');
                $link = get_permalink($current_option['profile_page_id']);
                $query_str = "upme_action=upme_activate&upme_id=" . $user_id . "&upme_activation_code=" . $activation_code;
                $activation_link = upme_add_query_string($link, $query_str);
                
                
                if('INACTIVE' == $activation_status && 'INACTIVE' == $approval_status){
                    // Activation and approval enabled
                    $send_params = array('activation_link' => $activation_link, 'username' => $username , 'email' => $user->user_email,'password' => $user_pass);
                    
                    if($current_option['notifications_all_admins']){
                        $admin_emails_list = implode(',',$upme_roles->get_admin_emails());
                        $admin_email_status = $upme_email_templates->upme_send_emails( 'reg_activation_approval_admin' , $admin_emails_list , '' , '' ,$send_params,$user_id);
                    }else{
                        $admin_email_status = $upme_email_templates->upme_send_emails( 'reg_activation_approval_admin' , get_option('admin_email') , '' , '' ,$send_params,$user_id);
                    }
                    
                    
                    $email_status = $upme_email_templates->upme_send_emails('reg_activation_approval_user', $user->user_email , '' , '' ,$send_params,$user_id);
                    
                    
                }else if('INACTIVE' == $activation_status){
                    // Activation enabled 
                    
                    $send_params = array('activation_link' => $activation_link,'username' => $username , 'email' => $user->user_email,'password' => $user_pass);
                    
                    if($current_option['notifications_all_admins']){
                        $admin_emails_list = implode(',',$upme_roles->get_admin_emails());
                        $admin_email_status = $upme_email_templates->upme_send_emails( 'reg_activation_admin' , $admin_emails_list , '' , '' ,$send_params,$user_id);
                    }else{
                        $admin_email_status = $upme_email_templates->upme_send_emails( 'reg_activation_admin' , get_option('admin_email') , '' , '' ,$send_params,$user_id);
                    }
                    
                    
                    
                    $email_status = $upme_email_templates->upme_send_emails('reg_activation_user', $user->user_email , '' , '' ,$send_params,$user_id);
                    
                }else if('INACTIVE' == $approval_status){
                    // Approval enabled
                    
                    $send_params = array('username' => $username , 'email' => $user->user_email, 'password' => $user_pass);
                    
                    if($current_option['notifications_all_admins']){
                        $admin_emails_list = implode(',',$upme_roles->get_admin_emails());
                        $admin_email_status = $upme_email_templates->upme_send_emails( 'reg_approval_admin' , $admin_emails_list , '' , '' ,$send_params,$user_id);
                    }else{
                        $admin_email_status = $upme_email_templates->upme_send_emails( 'reg_approval_admin' , get_option('admin_email') , '' , '' ,$send_params,$user_id);
                    }
                    
                    $email_status = $upme_email_templates->upme_send_emails('reg_approval_user', $user->user_email , '' , '' ,$send_params,$user_id);
                    
                }
                
                //upme_new_user_notification($user_id, $user_pass,$activation_status,$activation_code);
                
            }else{
                $user = new WP_User( $user_id );
                $username = $user->user_login;

                $current_option = get_option('upme_options');
                $link = get_permalink($current_option['login_page_id']);

                $send_params = array('username' => $username , 'password' => $user_pass, 'login_link' => $link);
                $email_status = $upme_email_templates->upme_send_emails('reg_default_user', '' , '' , '' ,$send_params,$user_id);
                $send_params = array('username' => $username , 'email' => $user->user_email);
                $admin_email_status = $upme_email_templates->upme_send_emails('reg_default_admin', '' , '' , '' ,$send_params,$user_id);
            
                if(!$email_status && !$admin_email_status){
                    wp_new_user_notification($user_id, $user_pass);
                }
                
            }
        }
    }

    /* Get errors display */

    function get_errors() {
        global $upme;
        $display = null;

        $error_result = array();

        if (isset($this->errors) && count($this->errors) > 0) {
            $display .= '<div class="upme-errors">';
            foreach ($this->errors as $newError) {

                $display .= '<span class="upme-error upme-error-block"><i class="upme-icon upme-icon-remove"></i>' . $newError . '</span>';
            }
            $display .= '</div>';

            $error_result['status'] = "error";
            $error_result['display'] = $display;
        } else {

            $this->registered = 1;

            $upme_settings = get_option('upme_options');

            // Display custom registraion message
            if (isset($upme_settings['msg_register_success'])) {

                $reg_success_msg = $upme_settings['msg_register_success'];
                $approval_setting_status = $this->validate_user_approval();
                if($approval_setting_status){
                    $reg_success_msg .= __('Your account is pending approval.','upme');
                }
                $display .= '<div class="upme-success"><span><i class="upme-icon upme-icon-ok"></i>' . $reg_success_msg . '</span></div>';
            }

            // Add text/HTML setting to be displayed after registration message
            if (isset($upme_settings['html_register_success_after']) && !empty($upme_settings['html_register_success_after'])) {
                $display .= '<div class="upme-success-html">' . remove_script_tags($upme_settings['html_register_success_after']) . '</div>';
            }


            if (isset($_POST['redirect_to'])) {
                wp_redirect($_POST['redirect_to']);
            } else {
                // Redirect to profile page after registration when automatic login is set to true
                if ($this->validate_automatic_login()) {

                    // Redirect to custom page based on the values provided in settings section

                    $register_redirect_page_id = (int) isset($upme_settings['register_redirect_page_id']) ? $upme_settings['register_redirect_page_id'] : 0;
                    
                    if ($register_redirect_page_id) {
                        $url = get_permalink($register_redirect_page_id);
                        wp_redirect($url);
                    }
                }
            }

            $error_result['status'] = "success";
            $error_result['display'] = $display;
        }
        return $error_result;
    }

    /* Initializing login class on init action */

    function handle_init() {
        /* Form is fired */

        if (isset($_POST['upme-register-form'])) {

            /* Prepare array of fields */
            $this->prepare($_POST);

            /* Validate, get errors, etc before we create account */
            $this->handle();

            /* Create account */
            $this->create();
        }
    }

    // Valdate automatic login based on set password
    function validate_automatic_login() {

        $automatic_login_status = FALSE;

        $upme_settings = get_option('upme_options');

        $set_pass = (boolean) $upme_settings['set_password'];
        $automatic_login = (boolean) $upme_settings['automatic_login'];

        if ($set_pass && $automatic_login) {
            $automatic_login_status = TRUE;
        }
        return $automatic_login_status;
    }

    function disable_password_nag($current_status) {
        return 0;
    }

    // Disable password nag notice in the admin for user setup passwords
    function upme_password_nag_handler() {

        if (is_user_logged_in ()) {
            $current_user = wp_get_current_user();

            if (!get_user_option('default_password_nag', $current_user->ID)) {
                add_filter('get_user_option_default_password_nag', array($this, 'disable_password_nag'));
            }
        }
    }

    // Activate users by verifying the activation code against the username
    function upme_user_activation_handler(){

        $message = array();

        if(is_user_logged_in()){
            return;
        }

        if(isset($_GET['upme_action']) && $_GET['upme_action'] == 'upme_activate'){

            $user_id = isset($_GET['upme_id']) ? $_GET['upme_id'] : '';
            $activation_code = isset($_GET['upme_activation_code']) ? $_GET['upme_activation_code'] : '';
            $act_status = get_user_meta($user_id, 'upme_activation_status',TRUE);

            
            if('ACTIVE' == $act_status && $activation_code == get_user_meta($user_id, 'upme_activation_code', TRUE)){

                if('INACTIVE' == get_user_meta($user_id, 'upme_approval_status', TRUE)){

                }else{
                    update_user_meta($user_id, 'upme_activation_status', "ACTIVE");
                    $message['msg'] = __('Account already activated. You can now login.' , 'upme');
                    $message['status'] = 'success';

                    /* UPME Action for User Activation Failure */
                    do_action('upme_activation_failed',$user_id,$activation_code,$message['msg']);
                    // End Action
                }

                
                 
            }else if($activation_code == get_user_meta($user_id, 'upme_activation_code', TRUE)){
                update_user_meta($user_id, 'upme_activation_status', "ACTIVE");
                // Show messages based on approval status
                if('INACTIVE' == get_user_meta($user_id, 'upme_approval_status', TRUE)){
                    $message['msg'] = __('Your email has been verified. Please wait for moderator approval.' , 'upme');
                    $message['status'] = 'errors';
                }else{
                    $message['msg'] = __('Activation successful. You can now login.' , 'upme');
                    $message['status'] = 'success';
                }
                

                /* UPME Action for User Activation Success */
                do_action('upme_activation_success',$user_id,$activation_code);
                // End Action
                 
                upme_update_user_cache($user_id);
            }
            else{
                $message['msg'] = __('Activation failed. Please use a valid activation code.' , 'upme');
                $message['status'] = 'errors';

                /* UPME Action for User Activation Failure */
                do_action('upme_activation_failed',$user_id,$activation_code,$message['msg']);
                // End Action
            }
        }

        return $message;
    }

    // Valdate email confirmation based on automatic login and set password
    function validate_email_confirmation() {

        $email_confirmation_status = FALSE;

        $upme_settings = get_option('upme_options');

        $set_pass = (boolean) $upme_settings['set_password'];
        $automatic_login = (boolean) $upme_settings['automatic_login'];
        $set_email_confirmation = (boolean) $upme_settings['set_email_confirmation'];

        if ($set_pass && !$automatic_login && $set_email_confirmation) {
            $email_confirmation_status = TRUE;
        }
        return $email_confirmation_status;
    }

    // Valdate user approvals based on automatic login and set password
    function validate_user_approval(){

        $user_approval_status = FALSE;

        $upme_settings = get_option('upme_options');

        $set_pass = (boolean) $upme_settings['set_password'];
        $automatic_login = (boolean) $upme_settings['automatic_login'];
        $set_user_approvals = (boolean) $upme_settings['profile_approval_status'];

        if ($set_pass && !$automatic_login && $set_user_approvals) {
            $user_approval_status = TRUE;
        }
        return $user_approval_status;

    }

    function upme_before_registration_restrictions($usermeta, $params){

//        $username = isset($usermeta['user_login']) ? $usermeta['user_login'] : '';
//        $email    = isset($usermeta['user_email']) ? $usermeta['user_email'] : '';
//
//        $this->upme_register_username_restrictions($username);
//        $this->upme_register_email_restrictions($email);
    }

    function upme_register_username_restrictions($username){
        $blocked_usernames = array();
        /* UPME filter for defining blocked emails for registration */
        $register_blocked_username_params = array();
        $blocked_usernames = apply_filters('upme_register_blocked_usernames',array(),$register_blocked_username_params);
        /* End filter */ 

        if(in_array($username, $blocked_usernames)){
            $this->errors[] = __('Username you have used is not allowed.','upme');
        }
    }

    function upme_register_email_restrictions($email){
        /* UPME filter for defining blocked emails for register */
        $register_blocked_email_params = array();
        $blocked_emails = apply_filters('upme_register_blocked_emails',array(),$register_blocked_email_params);
        /* End filter */ 

        $response = true;

        if(in_array($email, $blocked_emails)){
            $this->errors[] = __('Email you have used is not allowed.','upme');
            $response = false;
        }

        /* UPME filter for defining blocked emails for register */
        $register_blocked_email_domain_params = array();
        $blocked_email_domains = apply_filters('upme_register_blocked_email_domains',array(),$register_blocked_email_domain_params);
        /* End filter */ 


        if(is_email($email)){
            $email_domain = explode('@', $email);
            $email_domain = array_pop($email_domain);

            if(in_array($email_domain, $blocked_email_domains)){
                $this->errors[] = __('Email domain you have used is not allowed.','upme');
                $response = false;
            }
        }

        return $response;
        
    }
    

}

$upme_register = new UPME_Register();
🛸 XMAN Replicator

View: class-upme-register.php

PHP Console

SQL Console
