';
}PK :\&X &X recover.phpnu W+A data->ID, 'user_status' ) ){
$message = ''. __('ERROR', 'profile-builder') . ': ' . __('Your account has to be confirmed by an administrator before you can use the "Password Reset" feature.', 'profile-builder');
$message = apply_filters('wppb_recover_password_unapporved_user', $message);
}
}
return $message;
}
/**
* Function that retrieves the unique user key from the database. If we don't have one we generate one and add it to the database
*
* @param string $requested_user_login the user login
*
*/
function wppb_retrieve_activation_key( $requested_user_login ){
global $wpdb;
$key = $wpdb->get_var( $wpdb->prepare( "SELECT user_activation_key FROM $wpdb->users WHERE user_login = %s", $requested_user_login ) );
if ( empty( $key ) ) {
// Generate something random for a key...
$key = wp_generate_password( 20, false );
do_action('wppb_retrieve_password_key', $requested_user_login, $key);
// Now insert the new md5 key into the db
$wpdb->update($wpdb->users, array('user_activation_key' => $key), array('user_login' => $requested_user_login));
}
return $key;
}
/**
* Function that creates a generate new password form
*
* @param array $post_data $_POST
*
*/
function wppb_create_recover_password_form( $user, $post_data ){
?>
user_login;
else
$display_username_email = $user->user_email;
return $display_username_email;
}
/**
* Send the email for the password recovery request
* @param $user
* @return bool|string|void
*/
function wppb_send_recovery_email( $user ){
$requested_user_id = $user->ID;
$requested_user_login = $user->user_login;
$requested_user_email = $user->user_email;
//search if there is already an activation key present, if not create one
$key = wppb_retrieve_activation_key( $requested_user_login );
$display_username_email = wppb_get_email_display_username($user);
//send primary email message
$recovery_email_message = sprintf( __('Someone requested that the password be reset for the following account: %1$s If this was a mistake, just ignore this email and nothing will happen. To reset your password, visit the following link:%2$s', 'profile-builder'), $display_username_email, ''.esc_url( add_query_arg( array( 'key' => $key ), wppb_curpageurl() ) ).'' );
$recovery_email_message = apply_filters( 'wppb_recover_password_message_content_sent_to_user1', $recovery_email_message, $requested_user_id, $requested_user_login, $requested_user_email );
$recovery_email_message_title = sprintf(__('Password Reset from "%1$s"', 'profile-builder'), $blogname = get_option('blogname') );
$recovery_email_message_title = apply_filters('wppb_recover_password_message_title_sent_to_user1', $recovery_email_message_title, $requested_user_login);
$recovery_email_from = apply_filters ( 'wppb_recover_password_notification_email_from_field', get_bloginfo( 'name' ) );
$recovery_email_context = 'email_user_recover';
$sent = false;
//send mail to the user notifying him of the reset request
if (trim($recovery_email_message_title) != '') {
$sent = wppb_mail($requested_user_email, $recovery_email_message_title, $recovery_email_message, $recovery_email_from, $recovery_email_context);
}
return $sent;
}
/**
* Function that sends the successful password reset email to the user
* @param $user
* @param $new_pass
*/
function wppb_send_successful_password_reset_email( $user, $new_pass ){
$display_username_email = wppb_get_email_display_username($user);
//send secondary mail to the user containing the username and the new password
$recovery_email_message = __( 'You have successfully reset your password.', 'profile-builder' );
$recovery_email_message = apply_filters( 'wppb_recover_password_message_content_sent_to_user2', $recovery_email_message, $display_username_email, $new_pass, $user->ID );
$recovery_email_message_title = sprintf( __('Password Successfully Reset for %1$s on "%2$s"', 'profile-builder' ), $display_username_email, $blogname = get_option('blogname') );
$recovery_email_message_title = apply_filters( 'wppb_recover_password_message_title_sent_to_user2', $recovery_email_message_title, $display_username_email );
$recovery_email_from = apply_filters ( 'wppb_recover_password_success_notification_email_from_field', get_bloginfo( 'name' ) );
$recovery_email_context = 'email_user_recover_success';
//send mail to the user notifying him of the reset request
if ( trim( $recovery_email_message_title ) != '' )
wppb_mail( $user->user_email, $recovery_email_message_title, $recovery_email_message, $recovery_email_from, $recovery_email_context );
}
/**
* Function that sends an email to the admin after the password was reset
* we disable the feature to send the admin a notification mail but can be still used using filters
* @param $user
*/
function wppb_send_admin_password_reset_email( $user ){
$display_username_email = wppb_get_email_display_username($user);
$recovery_admin_email_message = sprintf( __( '%1$s has requested a password change via the password reset feature. His/her new password is:%2$s', 'profile-builder' ), $display_username_email, '' );
$recovery_admin_email_message = apply_filters( 'wppb_recover_password_message_content_sent_to_admin', $recovery_admin_email_message, $display_username_email, '', $user->ID );
//we disable the feature to send the admin a notification mail but can be still used using filters
$recovery_admin_email_title = '';
$recovery_admin_email_title = apply_filters( 'wppb_recover_password_message_title_sent_to_admin', $recovery_admin_email_title, $display_username_email );
$recovery_email_from = apply_filters ( 'wppb_recover_password_success_notification_email_from_field', get_bloginfo( 'name' ) );
$recovery_admin_email_context = 'email_admin_recover_success';
//send mail to the admin notifying him of of a user with a password reset request
if (trim($recovery_admin_email_title) != '')
wppb_mail(get_option('admin_email'), $recovery_admin_email_title, $recovery_admin_email_message, $recovery_email_from, $recovery_admin_email_context);
}
/**
* The function for the recover password shortcode
*
*/
function wppb_front_end_password_recovery(){
global $wppb_shortcode_on_front;
$wppb_shortcode_on_front = true;
$password_email_sent = false;
$password_changed_success = false;
$output = '
';
global $wpdb;
if( is_user_logged_in() )
return apply_filters( 'wppb_recover_password_already_logged_in', __( 'You are already logged in. You can change your password on the edit profile form.', 'profile-builder' ) );
//Get general settings
$wppb_generalSettings = get_option( 'wppb_general_settings' );
// If the user entered an email/username, process the request
if ( 'POST' == $_SERVER['REQUEST_METHOD'] && !empty( $_POST['action'] ) && $_POST['action'] == 'recover_password' && wp_verify_nonce($_POST['password_recovery_nonce_field'],'verify_true_password_recovery') ) {
// filter must be applied on the $_POST variable so that the value returned to the form can be corrected too
$username_email = apply_filters( 'wppb_before_processing_email_from_forms', $_POST['username_email'] ); //we get the raw data
//check to see if it's an e-mail (and if this is valid/present in the database) or is a username
// if we do not have an email in the posted date we try to get the email for that user
if( !is_email( $username_email ) ){
/* make sure it is a username */
$username = sanitize_user( $username_email );
if ( username_exists($username) ){
$query = $wpdb->get_results( $wpdb->prepare( "SELECT * FROM $wpdb->users WHERE user_login= %s", $username ) );
if( !empty( $query[0] ) ){
$username_email = $query[0]->user_email;
}
}
else{
$warning = __( 'The username entered wasn\'t found in the database!', 'profile-builder').' '.__('Please check that you entered the correct username.', 'profile-builder' );
$warning = apply_filters( 'wppb_recover_password_sent_message4', $warning );
$output .= wppb_password_recovery_warning( $warning, 'wppb_recover_password_displayed_message1' );
}
}
// we should have an email by this point
if ( is_email( $username_email ) ){
if ( email_exists( $username_email ) ){
$warning = wppb_check_for_unapproved_user($username_email, 'user_email');
if ($warning != ''){
$output .= wppb_password_recovery_warning( $warning, 'wppb_recover_password_displayed_message1' );
}else{
$success = sprintf( __( 'Check your e-mail for the confirmation link.', 'profile-builder'), $username_email );
$success = apply_filters( 'wppb_recover_password_sent_message1', $success, $username_email );
$output .= wppb_password_recovery_success( $success, 'wppb_recover_password_displayed_message2' );
//verify e-mail validity
$query = $wpdb->get_results( $wpdb->prepare( "SELECT * FROM $wpdb->users WHERE user_email= %s", sanitize_email( $username_email ) ) );
if( !empty( $query[0] ) ){
$user = $query[0];
//send mail to the user notifying him of the reset request
$sent = wppb_send_recovery_email( $user );
if ($sent === false){
$warning = ''. __( 'ERROR', 'profile-builder' ) .': ' . sprintf( __( 'There was an error while trying to send the activation link to %1$s!', 'profile-builder' ), $username_email );
$warning = apply_filters( 'wppb_recover_password_sent_message_error_sending', $warning );
wppb_password_recovery_warning( $warning, 'wppb_recover_password_displayed_message1' );
}
else
$password_email_sent = true;
}
}
}elseif ( !email_exists( $username_email ) ){
$warning = __('The email address entered wasn\'t found in the database!', 'profile-builder').' '.__('Please check that you entered the correct email address.', 'profile-builder');
$warning = apply_filters('wppb_recover_password_sent_message2', $warning);
$output .= wppb_password_recovery_warning( $warning, 'wppb_recover_password_displayed_message1' );
}
}
}
// If the user used the correct key-code, update his/her password
elseif ( 'POST' == $_SERVER['REQUEST_METHOD'] && !empty( $_POST['action2'] ) && $_POST['action2'] == 'recover_password2' && wp_verify_nonce( $_POST['password_recovery_nonce_field2'], 'verify_true_password_recovery2_'.absint( $_POST['userData'] ) ) ) {
$password_change_message = '';
if( ( !empty( $_POST['passw1'] ) && !empty( $_POST['passw2'] ) ) ){
if( $_POST['passw1'] != $_POST['passw2'] ) {
$password_change_message = __('The entered passwords don\'t match!', 'profile-builder');
$output .= wppb_password_recovery_error( $password_change_message, 'wppb_recover_password_password_changed_message2' );
}
if( !empty( $wppb_generalSettings['minimum_password_length'] ) || ( isset( $_POST['wppb_password_strength'] ) && !empty( $wppb_generalSettings['minimum_password_strength'] ) ) ){
if( wppb_check_password_length( $_POST['passw1'] ) ){
$password_change_message = sprintf( __( "The password must have the minimum length of %s characters", "profile-builder" ), $wppb_generalSettings['minimum_password_length'] ) . ' ';
$output .= wppb_password_recovery_error( $password_change_message, 'wppb_recover_password_password_changed_message2' );
}
if( wppb_check_password_strength() ){
$password_change_message = sprintf( __( "The password must have a minimum strength of %s", "profile-builder" ), wppb_check_password_strength() );
$output .= wppb_password_recovery_error( $password_change_message, 'wppb_recover_password_password_changed_message2' );
}
}
if( empty($password_change_message) ){
$password_change_message = __( 'Your password has been successfully changed!', 'profile-builder' );
$output .= wppb_password_recovery_success( $password_change_message, 'wppb_recover_password_password_changed_message1' );
$password_changed_success = true;
$userID = absint( $_POST['userData'] );
$new_pass = $_POST['passw1'];
//update the new password and delete the key
do_action( 'wppb_password_reset', $userID, $new_pass );
wp_set_password( $new_pass, $userID );
/* log out of all sessions on password reset */
$sessions = WP_Session_Tokens::get_instance( $userID );
$sessions->destroy_all();
$user_info = get_userdata( $userID );
//send email to user
wppb_send_successful_password_reset_email( $user_info, $new_pass );
//send email to admin
wppb_send_admin_password_reset_email( $user_info );
// CHECK FOR REDIRECT
$redirect_url = wppb_get_redirect_url( 'normal', 'after_success_password_reset', '', sanitize_user( $user_info->user_login ) );
$redirect_delay = apply_filters( 'wppb_success_password_reset_redirect_delay', 3, sanitize_user( $user_info->user_login ) );
$redirect_message = wppb_build_redirect( $redirect_url, $redirect_delay, 'after_success_password_reset' );
if( isset( $redirect_message ) && ! empty( $redirect_message ) ) {
$output .= '
' . $redirect_message . '
';
}
}
}
else{
$password_change_message .= __( "The password must not be empty!", "profile-builder" );
$output .= wppb_password_recovery_error( $password_change_message, 'wppb_recover_password_password_changed_message2' );
}
}
// use this action hook to add extra content before the password recovery form
do_action( 'wppb_before_recover_password_fields' );
//this is the part that shows the forms
if( isset( $_GET['key'] ) && !empty( $_GET['key'] ) ){
if( !$password_changed_success ) {
//get the login name and key and verify if they match the ones in the database
$key = sanitize_text_field( $_GET['key'] );
$user = $wpdb->get_row( $wpdb->prepare( "SELECT * FROM $wpdb->users WHERE user_activation_key = %s", $key ) );
if( !empty( $user ) ) {
ob_start();
wppb_create_recover_password_form($user, $_POST);
$output .= ob_get_contents();
ob_end_clean();
}
else {
$output .= wppb_password_recovery_error('' . __('ERROR:', 'profile-builder') . '' . __('Invalid key!', 'profile-builder'), 'wppb_recover_password_invalid_key_message');
}
}
}
else{
if( !$password_email_sent ) {
ob_start();
wppb_create_generate_password_form($_POST);
$output .= ob_get_contents();
ob_end_clean();
}
}
// use this action hook to add extra content after the password recovery form.
do_action( 'wppb_after_recover_password_fields' );
$output .= '
';
return $output;
}
/* function for displaying success messages on the recover password page */
function wppb_password_recovery_success( $message, $filter ){
return apply_filters( $filter, '
'.$message.'
', $message );
}
/* function for displaying warning messages on the recover password page */
function wppb_password_recovery_warning( $message, $filter ){
return apply_filters( $filter, '
'.$message.'
', $message );
}
/* function for displaying error messages on the recover password page */
function wppb_password_recovery_error( $message, $filter ){
return apply_filters( $filter, '
'.$message.'
', $message );
}
PK :\tWp p class-formbuilder.phpnu W+A '',
'form_fields' => array(),
'form_name' => '',
'role' => '', //used only for the register-form settings
'redirect_url' => '',
'logout_redirect_url' => '', //used only for the register-form settings
'redirect_priority' => 'normal',
'ID' => null
);
public $args;
// Constructor method for the class
function __construct( $args ) {
/* we should stop the execution of the forms if they are in the wp_head hook because it should not be there.
SEO plugins can execute shortcodes in the auto generated descriptions */
if( apply_filters( 'wppb_dont_render_form_in_wp_head_hook', true ) ){
global $wp_current_filter;
if( !empty( $wp_current_filter ) && is_array( $wp_current_filter ) ){
foreach( $wp_current_filter as $filter ){
if( $filter == 'wp_head' )
return;
}
}
}
// Merge the input arguments and the defaults
$this->args = wp_parse_args( $args, $this->defaults );
/* set up the ID here if it is a multi form */
if( $this->args['form_name'] != 'unspecified' ){
$this->args['ID'] = Profile_Builder_Form_Creator::wppb_get_form_id_from_form_name( $this->args['form_name'], $this->args['form_type'] );
}
global $wppb_shortcode_on_front;
$wppb_shortcode_on_front = true;
if( empty( $this->args['form_fields'] ) )
$this->args['form_fields'] = apply_filters( 'wppb_change_form_fields', get_option( 'wppb_manage_fields' ), $this->args );
if ( file_exists ( WPPB_PLUGIN_DIR.'/front-end/default-fields/default-fields.php' ) )
require_once( WPPB_PLUGIN_DIR.'/front-end/default-fields/default-fields.php' );
if ( file_exists ( WPPB_PLUGIN_DIR.'/front-end/extra-fields/extra-fields.php' ) )
require_once( WPPB_PLUGIN_DIR.'/front-end/extra-fields/extra-fields.php' );
$this->wppb_retrieve_custom_settings();
if( ( !is_multisite() && current_user_can( 'edit_users' ) ) || ( is_multisite() && current_user_can( 'manage_network' ) ) )
add_action( 'wppb_before_edit_profile_fields', array( 'Profile_Builder_Form_Creator', 'wppb_edit_profile_select_user_to_edit' ) );
//enqueue frontend scripts for forms
add_action( 'wp_footer', array( $this, 'wppb_frontend_scripts' ), 9999 );
}
/**
* @param $form_name The "slug" generated from the current Form Title
* @param $form_type the form type of the form: register, edit_profile
* @return null
*/
static function wppb_get_form_id_from_form_name( $form_name, $form_type ){
global $wpdb;
if( $form_type == 'edit_profile' ){
$post_type = 'wppb-epf-cpt';
}elseif( $form_type == 'register' ){
$post_type = 'wppb-rf-cpt';
}
$all_forms = $wpdb->get_results(
"
SELECT ID, post_title
FROM $wpdb->posts
WHERE post_status = 'publish'
AND post_type = '$post_type'
"
);
if( !empty( $all_forms ) ) {
foreach ($all_forms as $form) {
if( empty( $form->post_title ) )
$form->post_title = '(no title)';
if ($form_name == Wordpress_Creation_Kit_PB::wck_generate_slug($form->post_title)) {
return $form->ID;
}
}
}
return null;
}
function wppb_retrieve_custom_settings(){
$this->args['login_after_register'] = apply_filters( 'wppb_automatically_login_after_register', 'No' ); //used only for the register-form settings
$this->args['redirect_activated'] = apply_filters( 'wppb_redirect_default_setting', '-' );
$this->args['redirect_url'] = apply_filters( 'wppb_redirect_default_location', ( $this->args['redirect_url'] != '' ) ? $this->args['redirect_url'] : '' );
$this->args['logout_redirect_url'] = apply_filters( 'wppb_logout_redirect_default_location', ( $this->args['logout_redirect_url'] != '' ) ? $this->args['logout_redirect_url'] : '' );
$this->args['redirect_delay'] = apply_filters( 'wppb_redirect_default_duration', 3 );
if ( !is_null( $this->args['ID'] ) ){
$meta_name = ( ( $this->args['form_type'] == 'register' ) ? 'wppb_rf_page_settings' : 'wppb_epf_page_settings' );
$page_settings = get_post_meta( $this->args['ID'], $meta_name, true );
if( !empty( $page_settings[0]['set-role'] ) ){
if( $page_settings[0]['set-role'] == 'default role' ){
$selected_role = trim( get_option( 'default_role' ) );
}
else
$selected_role = $page_settings[0]['set-role'];
}
$this->args['role'] = ( isset( $selected_role ) ? $selected_role : $this->args['role'] );
$this->args['login_after_register'] = ( isset( $page_settings[0]['automatically-log-in'] ) ? $page_settings[0]['automatically-log-in'] : $this->args['login_after_register'] );
$this->args['redirect_activated'] = ( isset( $page_settings[0]['redirect'] ) ? $page_settings[0]['redirect'] : $this->args['redirect_activated'] );
$this->args['redirect_url'] = ( ! empty( $page_settings[0]['url'] ) && $this->args['redirect_activated'] == 'Yes' && $this->args['redirect_priority'] != 'top' ? $page_settings[0]['url'] : $this->args['redirect_url'] );
$this->args['redirect_delay'] = ( isset( $page_settings[0]['display-messages'] ) && $this->args['redirect_activated'] == 'Yes' ? $page_settings[0]['display-messages'] : $this->args['redirect_delay'] );
}
if( !empty( $this->args['role'] ) ){
$role_in_arg = get_role( $this->args['role'] );
if( !empty( $role_in_arg->capabilities['manage_options'] ) || !empty( $role_in_arg->capabilities['remove_users'] ) ){
if( !current_user_can( 'manage_options' ) || !current_user_can( 'remove_users' ) ){
$this->args['role'] = get_option('default_role');
echo apply_filters( 'wppb_register_pre_form_user_role_message', '
'.__( 'The role of the created user set to the default role. Only an administrator can register a user with the role assigned to this form.', 'profile-builder').'
' );
}
}
}
}
function wppb_form_logic() {
if( $this->args['form_type'] == 'register' ){
$registration = apply_filters ( 'wppb_register_setting_override', true );//used to be get_option( 'users_can_register' )
if ( !is_user_logged_in() ){
if ( !$registration )
echo apply_filters( 'wppb_register_pre_form_message', '
'.esc_html(__( 'Only an administrator can add new users.', 'profile-builder')).'
', $field, $this->args['ID'], $this->args['form_type'], $called_from );
}
$output_fields .= apply_filters( 'wppb_output_after_last_form_field', '', $this->args['ID'], $this->args['form_type'], $called_from );
}
return apply_filters( 'wppb_output_fields_filter', $output_fields );
}
function wppb_add_send_credentials_checkbox ( $request_data, $form ){
if ( $form == 'edit_profile' )
echo '';
else{
$checkbox = apply_filters( 'wppb_send_credentials_checkbox_logic', '', $request_data, $form );
$wppb_general_settings = get_option( 'wppb_general_settings' );
echo ( isset( $wppb_general_settings['emailConfirmation'] ) && ( $wppb_general_settings['emailConfirmation'] == 'yes' ) ? '' : $checkbox );
}
}
function wppb_test_required_form_values( $global_request ){
$output_field_errors = array();
$form_fields = apply_filters( 'wppb_form_fields', $this->args['form_fields'], array( 'global_request' => $global_request, 'context' => 'validate_frontend', 'form_type' => $this->args['form_type'], 'role' => $this->args['role'], 'user_id' => $this->wppb_get_desired_user_id() ) );
if( !empty( $form_fields ) ){
foreach( $form_fields as $field ){
$error_for_field = apply_filters( 'wppb_check_form_field_'.Wordpress_Creation_Kit_PB::wck_generate_slug( $field['field'] ), '', $field, $global_request, $this->args['form_type'], $this->args['role'], $this->wppb_get_desired_user_id() );
if( !empty( $error_for_field ) )
$output_field_errors[$field['id']] = '' . $error_for_field . '';
}
}
return apply_filters( 'wppb_output_field_errors_filter', $output_field_errors, $this->args['form_fields'], $global_request, $this->args['form_type'] );
}
function wppb_save_form_values( $global_request ){
$user_id = $this->wppb_get_desired_user_id();
$userdata = apply_filters( 'wppb_build_userdata', array(), $global_request, $this->args );
$new_user_signup = false;
$wppb_general_settings = get_option( 'wppb_general_settings' );
if( $this->args['form_type'] == 'register' ){
$result = $this->wppb_register_user( $global_request, $userdata );
$user_id = $result['user_id'];
$userdata = $result['userdata'];
$new_user_signup = $result['new_user_signup'];
}elseif( $this->args['form_type'] == 'edit_profile' ){
if( isset( $wppb_general_settings['loginWith'] ) && ( $wppb_general_settings['loginWith'] == 'email' ) ){
$user_info = get_userdata( $user_id );
$userdata['user_login'] = $user_info->user_login;
}
$userdata['ID'] = $this->wppb_get_desired_user_id();
$userdata = wp_unslash( $userdata );
/* if the user changes his password then we can't send it to the wp_update_user() function or
the user will be logged out and won't be logged in again because we call wp_update_user() after
the headers were sent( in the content as a shortcode ) */
if( isset( $userdata['user_pass'] ) && !empty( $userdata['user_pass'] ) ){
unset($userdata['user_pass']);
}
if( isset( $userdata['role'] ) && is_array( $userdata['role'] ) ) {
$user_data = get_userdata( $user_id );
$user_data->remove_all_caps();
foreach( $userdata['role'] as $role ) {
if( $role !== 'administrator' || $role !== 'super-admin' )//make sure this doesn't happen for any reason
$user_data->add_role( $role );
}
unset( $userdata['role'] );
}
wp_update_user( $userdata );
}
if( !empty( $this->args['form_fields'] ) && !$new_user_signup ){
foreach( $this->args['form_fields'] as $field ){
if( apply_filters( 'wppb_pre_save_form_field', true, $field, $user_id, $global_request, $this->args['form_type'] ) )
do_action( 'wppb_save_form_field', $field, $user_id, $global_request, $this->args['form_type'] );
}
if ( $this->args['form_type'] == 'register' ){
if ( !is_wp_error( $user_id ) ){
$wppb_general_settings = get_option( 'wppb_general_settings' );
if( isset( $global_request['send_credentials_via_email'] ) && ( $global_request['send_credentials_via_email'] == 'sending' ) )
$send_credentials_via_email = 'sending';
else
$send_credentials_via_email = '';
wppb_notify_user_registration_email( get_bloginfo( 'name' ), ( isset( $userdata['user_login'] ) ? trim( $userdata['user_login'] ) : trim( $userdata['user_email'] ) ), trim( $userdata['user_email'] ), $send_credentials_via_email, trim( $userdata['user_pass'] ), ( wppb_get_admin_approval_option_value() === 'yes' ? 'yes' : 'no' ) );
}
}
}
return $user_id;
}
function wppb_register_user( $global_request, $userdata ){
$wppb_module_settings = get_option( 'wppb_module_settings' );
$wppb_general_settings = get_option( 'wppb_general_settings' );
$user_id = null;
$new_user_signup = false;
if( isset( $wppb_general_settings['loginWith'] ) && ( $wppb_general_settings['loginWith'] == 'email' ) ){
$userdata['user_login'] = apply_filters( 'wppb_generated_random_username', Wordpress_Creation_Kit_PB::wck_generate_slug( trim( $userdata['user_email'] ) ), $userdata['user_email'] );
}
/* filter so we can bypass Email Confirmation on register */
$wppb_general_settings['emailConfirmation'] = apply_filters( 'wppb_email_confirmation_on_register', $wppb_general_settings['emailConfirmation'], $global_request );
if ( isset( $wppb_general_settings['emailConfirmation'] ) && ( $wppb_general_settings['emailConfirmation'] == 'yes' ) ){
$new_user_signup = true;
$userdata = $this->wppb_add_custom_field_values( $global_request, $userdata, $this->args['form_fields'] );
if( ! isset( $userdata['role'] ) ) {
$userdata['role'] = $this->args['role'];
}
$userdata['user_pass'] = wp_hash_password( $userdata['user_pass'] );
if( is_multisite() ){
/* since version 2.0.7 add this meta so we know on what blog the user registered */
$userdata['registered_for_blog_id'] = get_current_blog_id();
$userdata = wp_unslash( $userdata );
}
wppb_signup_user( $userdata['user_login'], $userdata['user_email'], $userdata );
}else{
if( ! isset( $userdata['role'] ) ) {
$userdata['role'] = $this->args['role'];
}
$userdata = wp_unslash( $userdata );
// change User Registered date and time according to timezone selected in WordPress settings
$wppb_get_date = wppb_get_register_date();
if( isset( $wppb_get_date ) ) {
$userdata['user_registered'] = $wppb_get_date;
}
// insert user to database
$user_id = wp_insert_user( $userdata );
}
return array( 'userdata' => $userdata, 'user_id' => $user_id, 'new_user_signup' => $new_user_signup );
}
function wppb_add_custom_field_values( $global_request, $meta, $form_properties ){
$form_fields = apply_filters( 'wppb_form_fields', $this->args['form_fields'], array( 'meta' => $meta, 'global_request' => $global_request, 'context' => 'user_signup' ) );
if( !empty( $form_fields ) ){
foreach( $form_fields as $field ){
if( !empty( $field['meta-name'] ) ){
$posted_value = ( !empty( $global_request[$field['meta-name']] ) ? $global_request[$field['meta-name']] : '' );
$meta[$field['meta-name']] = apply_filters( 'wppb_add_to_user_signup_form_field_'.Wordpress_Creation_Kit_PB::wck_generate_slug( $field['field'] ), $posted_value, $field, $global_request );
}
}
}
return apply_filters( 'wppb_add_to_user_signup_form_meta', $meta, $global_request, $this->args['role'] );
}
/**
* Function that returns the id for the current logged in user or for edit profile forms for administrator it can return the id of a selected user
*/
function wppb_get_desired_user_id(){
if( $this->args['form_type'] == 'edit_profile' ){
//only admins
if( ( !is_multisite() && current_user_can( 'edit_users' ) ) || ( is_multisite() && current_user_can( 'manage_network' ) ) ) {
if( isset( $_GET['edit_user'] ) && ! empty( $_GET['edit_user'] ) ){
return absint( $_GET['edit_user'] );
}
}
}
return get_current_user_id();
}
static function wppb_edit_profile_select_user_to_edit(){
$display_edit_users_dropdown = apply_filters( 'wppb_display_edit_other_users_dropdown', true );
if( !$display_edit_users_dropdown )
return;
/* add a hard cap: if we have more than 5000 users don't display the dropdown for performance considerations */
$user_count = count_users();
if( $user_count['total_users'] > apply_filters( 'wppb_edit_other_users_count_limit', 5000 ) )
return;
if( isset( $_GET['edit_user'] ) && ! empty( $_GET['edit_user'] ) )
$selected = absint( $_GET['edit_user'] );
else
$selected = get_current_user_id();
$query_args['fields'] = array( 'ID', 'user_login', 'display_name' );
$query_args['role'] = apply_filters( 'wppb_edit_profile_user_dropdown_role', '' );
$users = get_users( apply_filters( 'wppb_edit_other_users_dropdown_query_args', $query_args ) );
if( !empty( $users ) ) {
/* turn it in a select2 */
wp_enqueue_script( 'wppb_select2_js', WPPB_PLUGIN_URL .'assets/js/select2/select2.min.js', array( 'jquery' ), PROFILE_BUILDER_VERSION );
wp_enqueue_style( 'wppb_select2_css', WPPB_PLUGIN_URL .'assets/css/select2/select2.min.css', array(), PROFILE_BUILDER_VERSION );
wp_add_inline_script( 'wppb_select2_js', 'jQuery(".wppb-user-to-edit").change(function () {window.location.href = jQuery(this).val(); });jQuery(function(){jQuery(".wppb-user-to-edit").select2(); })' );
?>
'. apply_filters( 'wppb_no_users_to_edit_message', __( 'There are no other users to edit', 'profile-builder' ) ) .'';
}
}
function wppb_frontend_scripts(){
wp_enqueue_script( 'wppb_front_end_script', WPPB_PLUGIN_URL.'assets/js/script-front-end.js', array('jquery'), PROFILE_BUILDER_VERSION, true );
wp_print_scripts( 'wppb_front_end_script' );
}
/**
* Handle toString method
*
* @since 2.0
*
* @return string $html html for the form.
*/
public function __toString() {
try {
ob_start();
$this->wppb_form_logic();
$html = ob_get_clean();
return "{$html}";
} catch (Exception $exception) {
return __( 'Something went wrong. Please try again!', 'profile-builder');
}
}
}
/* set action for automatic login after registration */
add_action( 'init', 'wppb_autologin_after_registration' );
function wppb_autologin_after_registration(){
if( isset( $_GET['autologin'] ) && isset( $_GET['uid'] ) ){
$uid = absint( $_GET['uid'] );
$nonce = $_REQUEST['_wpnonce'];
$arr_params = array( 'autologin', 'uid', '_wpnonce' );
$current_page_url = remove_query_arg( $arr_params, wppb_curpageurl() );
if ( ! ( wp_verify_nonce( $nonce , 'autologin-'.$uid.'-'.(int)( time() / 60 ) ) || wp_verify_nonce( $nonce , 'autologin-'.$uid.'-'.(int)( time() / 60 ) - 1 ) ) ){
wp_redirect( $current_page_url );
exit;
} else {
wp_set_auth_cookie( $uid );
wp_redirect( $current_page_url );
exit;
}
}
}
PK :\,$q q $ default-fields/password/password.phpnu W+A *' : '' );
if ( array_key_exists( $field['id'], $field_check_errors ) )
$error_mark = '';
$extra_attr = apply_filters( 'wppb_extra_attribute', '', $field, $form_location );
$output = '
';
if( ! empty( $item_description ) )
$output .= ''. $item_description .' '. wppb_password_length_text() .' '. wppb_password_strength_description() .'';
else
$output .= ''. wppb_password_length_text() .' '. wppb_password_strength_description() .'';
/* if we have active the password strength checker */
$output .= wppb_password_strength_checker_html();
}
return apply_filters( 'wppb_'.$form_location.'_password', $output, $form_location, $field, $user_id, $field_check_errors, $request_data );
}
add_filter( 'wppb_output_form_field_default-password', 'wppb_password_handler', 10, 6 );
/* handle field validation */
function wppb_check_password_value( $message, $field, $request_data, $form_location ){
if ( $form_location == 'register' ){
if ( ( isset( $request_data['passw1'] ) && ( trim( $request_data['passw1'] ) == '' ) ) && ( $field['required'] == 'Yes' ) )
return wppb_required_field_error($field["field-title"]);
elseif ( !isset( $request_data['passw1'] ) && ( $field['required'] == 'Yes' ) )
return wppb_required_field_error($field["field-title"]);
}
if ( trim( $request_data['passw1'] ) != '' ){
$wppb_generalSettings = get_option( 'wppb_general_settings' );
if( wppb_check_password_length( $request_data['passw1'] ) )
return ' '. sprintf( __( "The password must have the minimum length of %s characters", "profile-builder" ), $wppb_generalSettings['minimum_password_length'] );
if( wppb_check_password_strength() ){
return ' ' . sprintf( __( "The password must have a minimum strength of %s", "profile-builder" ), wppb_check_password_strength() );
}
}
return $message;
}
add_filter( 'wppb_check_form_field_default-password', 'wppb_check_password_value', 10, 4 );
/* handle field save */
function wppb_userdata_add_password( $userdata, $global_request, $form_args ){
if( wppb_field_exists_in_form( 'Default - Password', $form_args ) ) {
if (isset($global_request['passw1']) && (trim($global_request['passw1']) != ''))
$userdata['user_pass'] = trim($global_request['passw1']);
}
return $userdata;
}
add_filter( 'wppb_build_userdata', 'wppb_userdata_add_password', 10, 3 );PK :\>F F 2 default-fields/password-repeat/password-repeat.phpnu W+A *' : '' );
if ( array_key_exists( $field['id'], $field_check_errors ) )
$error_mark = '';
$extra_attr = apply_filters( 'wppb_extra_attribute', '', $field, $form_location );
$output = '
';
if( !empty( $item_description ) )
$output .= ''.$item_description.'';
}
return apply_filters( 'wppb_'.$form_location.'_repeat_password', $output, $form_location, $field, $user_id, $field_check_errors, $request_data );
}
add_filter( 'wppb_output_form_field_default-repeat-password', 'wppb_password_repeat_handler', 10, 6 );
/* handle field validation */
function wppb_check_repeat_password_value( $message, $field, $request_data, $form_location ){
if ( $form_location == 'register' ){
if ( ( isset( $request_data['passw2'] ) && ( trim( $request_data['passw2'] ) == '' ) ) && ( $field['required'] == 'Yes' ) )
return wppb_required_field_error($field["field-title"]);
elseif ( !isset( $request_data['passw2'] ) && ( $field['required'] == 'Yes' ) )
return wppb_required_field_error($field["field-title"]);
elseif ( isset( $request_data['passw1'] ) && isset( $request_data['passw2'] ) && ( trim( $request_data['passw1'] ) != trim( $request_data['passw2'] ) ) && ( $field['required'] == 'Yes' ) )
return __( "The passwords do not match", "profile-builder" );
}elseif ( $form_location == 'edit_profile' ){
if ( isset( $request_data['passw1'] ) && isset( $request_data['passw2'] ) && ( trim( $request_data['passw1'] ) != trim( $request_data['passw2'] ) ) )
return __( "The passwords do not match", "profile-builder" );
}
return $message;
}
add_filter( 'wppb_check_form_field_default-repeat-password', 'wppb_check_repeat_password_value', 10, 4 );PK :\1Uu Uu & default-fields/recaptcha/recaptcha.phpnu W+A $value) {
$req .= $key . '=' . urlencode(stripslashes($value)) . '&';
}
// Cut the last '&'
$req=substr($req, 0, strlen($req)-1);
return $req;
}
/**
* Submits an HTTP GET to a reCAPTCHA server
* @param string $path
* @param array $data
*/
function _wppb_submitHTTPGet($path, $data)
{
$req = _wppb_encodeQS($data);
$response = wp_remote_get($path . $req);
if ( ! is_wp_error( $response ))
return $response["body"];
}
/**
* Gets the challenge HTML (javascript and non-javascript version).
* This is called from the browser, and the resulting reCAPTCHA HTML widget
* is embedded within the HTML form it was called from.
* @param string $pubkey A public key for reCAPTCHA
* @param string $error The error given by reCAPTCHA (optional, default is null)
* @param boolean $use_ssl Should the request be made over ssl? (optional, default is false)
* @return string - The HTML to be embedded in the user's form.
*/
function wppb_recaptcha_get_html ( $pubkey, $form_name='' ){
global $wppb_recaptcha_forms; // is the counter for the number of forms that have recaptcha so we always have unique ids on the element
if( is_null( $wppb_recaptcha_forms ) )
$wppb_recaptcha_forms = 0;
$wppb_recaptcha_forms++;
$field = wppb_get_recaptcha_field();
if ( empty($pubkey) )
echo $errorMessage = ''. __("To use reCAPTCHA you must get an API key from", "profile-builder"). " https://www.google.com/recaptcha/admin/create
";
// extra class needed for Invisible reCAPTCHA html
$invisible_class = '';
if ( isset($field['recaptcha-type']) && ($field['recaptcha-type'] == 'invisible') ) {
$invisible_class = 'wppb-invisible-recaptcha';
}
// reCAPTCHA html for all forms and we make sure we have a unique id for v2
return '';
}
/**
* Add reCAPTCHA scripts to both front-end PB forms (with support for multiple forms) as well as Default WP forms
*/
function wppb_recaptcha_script_footer(){
$field = wppb_get_recaptcha_field();
/* if we do not have a recaptcha field don't do nothing */
if( empty( $field ) )
return;
//we don't have jquery on the backend
if( current_filter() != 'wp_footer' ) {
wp_print_scripts('jquery');
}else if(!wp_script_is('jquery')){
wp_print_scripts('jquery');
}
//get site key
$pubkey = '';
if( isset( $field['public-key'] ) ) {
$pubkey = trim( $field['public-key'] );
}
// Check if we have a reCAPTCHA type
if ( !isset($field['recaptcha-type']) )
$field['recaptcha-type'] = 'v2' ;
/*for invisible recaptcha we have extra parameters and the selector is different. v2 is initialized on the id of the div
that must be unique and invisible is on the submit button of the forms that have the div */
if( $field['recaptcha-type'] === 'invisible' ) {
$callback_conditions = 'jQuery("input[type=\'submit\']", jQuery( ".wppb-recaptcha-element" ).closest("form") )';
$invisible_parameters = '"callback" : wppbInvisibleRecaptchaOnSubmit,"size": "invisible"';
}else {
$callback_conditions = 'jQuery(".wppb-recaptcha-element")';
$invisible_parameters = '';
}
echo '';
if( $field['recaptcha-type'] === 'invisible' ) {
echo '';
}
$lang = '&hl=en';
$locale = get_locale();
if(!empty($locale)) {
$locale_parts = explode('_',$locale);
$lang = '&hl='.urlencode($locale_parts[0]);
}
echo '';
}
add_action('wp_footer', 'wppb_recaptcha_script_footer', 9999);
add_action('login_footer', 'wppb_recaptcha_script_footer');
add_action('register_form', 'wppb_recaptcha_script_footer');
add_action('lost_password', 'wppb_recaptcha_script_footer');
/**
* A wppb_ReCaptchaResponse is returned from wppb_recaptcha_check_answer()
*/
class wppb_ReCaptchaResponse {
var $is_valid;
}
/**
* Calls an HTTP POST function to verify if the user's answer was correct
* @param string $privkey
* @param string $remoteip
* @param string $response
* @return wppb_ReCaptchaResponse
*/
function wppb_recaptcha_check_answer ( $privkey, $remoteip, $response ){
if ( $remoteip == null || $remoteip == '' )
echo ''. __("For security reasons, you must pass the remote ip to reCAPTCHA!", "profile-builder") .'
';
// Discard empty solution submissions
if ($response == null || strlen($response) == 0) {
$recaptchaResponse = new wppb_ReCaptchaResponse();
if( isset( $_POST['wppb_recaptcha_load_error'] ) && wp_verify_nonce( $_POST['wppb_recaptcha_load_error'], 'wppb_recaptcha_init_error' ) )
$recaptchaResponse->is_valid = true;
else
$recaptchaResponse->is_valid = false;
return $recaptchaResponse;
}
$getResponse = _wppb_submitHTTPGet(
"https://www.google.com/recaptcha/api/siteverify?",
array (
'secret' => $privkey,
'remoteip' => $remoteip,
'response' => $response
)
);
$answers = json_decode($getResponse, true);
$recaptchaResponse = new wppb_ReCaptchaResponse();
if (trim($answers ['success']) == true) {
$recaptchaResponse->is_valid = true;
} else {
$recaptchaResponse->is_valid = false;
}
return $recaptchaResponse;
}
/* the function to display error message on the registration page */
function wppb_validate_captcha_response( $publickey, $privatekey ){
if (isset($_POST['g-recaptcha-response'])){
$recaptcha_response_field = $_POST['g-recaptcha-response'];
}
else {
$recaptcha_response_field = '';
}
$resp = wppb_recaptcha_check_answer($privatekey, $_SERVER["REMOTE_ADDR"], $recaptcha_response_field );
if ( !empty( $_POST ) )
return ( ( !$resp->is_valid ) ? false : true );
}
/* the function to add reCAPTCHA to the registration form of PB */
function wppb_recaptcha_handler ( $output, $form_location, $field, $user_id, $field_check_errors, $request_data ){
if ( $field['field'] == 'reCAPTCHA' ){
$item_title = apply_filters( 'wppb_'.$form_location.'_recaptcha_custom_field_'.$field['id'].'_item_title', wppb_icl_t( 'plugin profile-builder-pro', 'custom_field_'.$field['id'].'_title_translation', $field['field-title'] ) );
$item_description = wppb_icl_t( 'plugin profile-builder-pro', 'custom_field_'.$field['id'].'_description_translation', $field['description'] );
wppb_recaptcha_set_default_values();
if ( ($form_location == 'register') && ( isset($field['captcha-pb-forms']) ) && (strpos($field['captcha-pb-forms'],'pb_register') !== false) ) {
$error_mark = ( ( $field['required'] == 'Yes' ) ? '*' : '' );
if ( array_key_exists( $field['id'], $field_check_errors ) )
$error_mark = '';
$publickey = trim( $field['public-key'] );
$privatekey = trim( $field['private-key'] );
if ( empty( $publickey ) || empty( $privatekey ) )
return ''.apply_filters( 'wppb_'.$form_location.'_recaptcha_custom_field_'.$field['id'].'_error_message', __("To use reCAPTCHA you must get an API public key from:", "profile-builder"). 'https://www.google.com/recaptcha/admin/create' ).'';
if ( empty($field['recaptcha-type']) || ($field['recaptcha-type'] == 'v2') ) {
$output = '' . wppb_recaptcha_get_html($publickey, 'pb_register');
if (!empty($item_description))
$output .= '' . $item_description . '';
}
else {
// html for Invisible reCAPTCHA
$output = wppb_recaptcha_get_html($publickey, 'pb_register');
}
return $output;
}
}
}
add_filter( 'wppb_output_form_field_recaptcha', 'wppb_recaptcha_handler', 10, 6 );
/* handle reCAPTCHA field validation on PB Register form */
function wppb_check_recaptcha_value( $message, $field, $request_data, $form_location ){
if( $field['field'] == 'reCAPTCHA' ){
if ( ( $form_location == 'register' ) && ( isset($field['captcha-pb-forms']) ) && (strpos($field['captcha-pb-forms'],'pb_register') !== false) ) {
/* theme my login plugin executes the register_errors hook on the frontend on all pages so on our register forms we might have already a recaptcha response
so do not verify it again or it will fail */
global $wppb_recaptcha_response;
if (!isset($wppb_recaptcha_response)){
$wppb_recaptcha_response = wppb_validate_captcha_response( trim( $field['public-key'] ), trim( $field['private-key'] ) );
}
if ( ( $wppb_recaptcha_response == false ) && ( $field['required'] == 'Yes' ) ){
return wppb_required_field_error($field["field-title"]);
}
}
}
return $message;
}
add_filter( 'wppb_check_form_field_recaptcha', 'wppb_check_recaptcha_value', 10, 4 );
// Get the reCAPTCHA field information
function wppb_get_recaptcha_field(){
$wppb_manage_fields = get_option( 'wppb_manage_fields', 'not_found' );
$field = '';
if ( $wppb_manage_fields != 'not_found' ) {
foreach ($wppb_manage_fields as $value) {
if ($value['field'] == 'reCAPTCHA')
$field = $value;
}
}
return $field;
}
/* Display reCAPTCHA on PB Recover Password form */
function wppb_display_recaptcha_recover_password( $output ){
$field = wppb_get_recaptcha_field();
if ( !empty($field) ) {
$publickey = trim($field['public-key']);
$item_title = apply_filters('wppb_recover_password_recaptcha_custom_field_' . $field['id'] . '_item_title', wppb_icl_t('plugin profile-builder-pro', 'custom_field_' . $field['id'] . '_title_translation', $field['field-title']));
$item_description = wppb_icl_t('plugin profile-builder-pro', 'custom_field_' . $field['id'] . '_description_translation', $field['description']);
// check where reCAPTCHA should display and add reCAPTCHA html
if ( isset($field['captcha-pb-forms']) && ( strpos( $field['captcha-pb-forms'],'pb_recover_password' ) !== false ) ) {
if ( empty($field['recaptcha-type']) || ($field['recaptcha-type'] == 'v2') ) {
$recaptcha_output = '' . wppb_recaptcha_get_html($publickey, 'pb_recover_password');
if (!empty($item_description))
$recaptcha_output .= '' . $item_description . '';
$output = str_replace('', '
' . '
';
$error_class = ' wppb-field-error';
}
$output .= '