', $tags ) ) // phpcs:ignore WordPress.Security.EscapeOutput.OutputNotEscaped
);
}
/**
* Populates the setting field.
*
* @author Konstantin Obenland
* @since 2.0.0 - 31.03.2012
* @access public
*
* @param array $option Settings option.
*
* @return void
*/
public function checkbox_cb( $option ) {
$option = (object) $option;
?>
(bool) isset( $input['wpau-send-approve-email'] ),
'wpau-send-unapprove-email' => (bool) isset( $input['wpau-send-unapprove-email'] ),
'wpau-approve-email' => isset( $input['wpau-approve-email'] ) ? trim( $input['wpau-approve-email'] ) : '',
'wpau-unapprove-email' => isset( $input['wpau-unapprove-email'] ) ? trim( $input['wpau-unapprove-email'] ) : '',
);
}
/**
* Sends the approval email.
*
* @author Konstantin Obenland
* @since 2.0.0 - 31.03.2012
* @access public
*
* @param int $user_id User ID.
*
* @return void
*/
public function wpau_approve( $user_id ) {
if ( get_user_meta( $user_id, 'wp-approve-user-new-registration', true ) ) {
wp_new_user_notification( $user_id, null, 'user' );
delete_user_meta( $user_id, 'wp-approve-user-new-registration' );
}
// Check user meta if mail has been sent already.
if ( $this->options['wpau-send-approve-email'] && ! get_user_meta( $user_id, 'wp-approve-user-mail-sent', true ) ) {
$user = new WP_User( $user_id );
$blogname = wp_specialchars_decode( get_option( 'blogname' ), ENT_QUOTES );
// Send mail.
$sent = wp_mail(
$user->user_email,
/* translators: Blog name. */
sprintf( esc_html_x( '[%s] Registration approved', 'Blogname', 'wp-approve-user' ), $blogname ),
$this->populate_message( $this->options['wpau-approve-email'], $user )
);
if ( $sent ) {
update_user_meta( $user_id, 'wp-approve-user-mail-sent', true );
}
}
}
/**
* Sends the rejection email.
*
* @author Konstantin Obenland
* @since 2.0.0 - 31.03.2012
* @access public
*
* @param int $user_id User ID.
*
* @return void
*/
public function delete_user( $user_id ) {
$is_new_registration = get_user_meta( $user_id, 'wp-approve-user-new-registration', true );
$is_approved = get_user_meta( $user_id, 'wp-approve-user', true );
if ( $is_new_registration && ! $is_approved && $this->options['wpau-send-unapprove-email'] ) {
$user = new WP_User( $user_id );
$blogname = wp_specialchars_decode( get_option( 'blogname' ), ENT_QUOTES );
// Send mail.
wp_mail(
$user->user_email,
/* translators: Blog name. */
sprintf( esc_html_x( '[%s] Registration unapproved', 'Blogname', 'wp-approve-user' ), $blogname ),
$this->populate_message( $this->options['wpau-unapprove-email'], $user )
);
// No need to delete user_meta, since this user will be GONE.
}
}
/**
* Display all messages registered to this plugin.
*
* @author Konstantin Obenland
* @since 2.0.0 - 30.03.2012
* @access public
*
* @return void
*/
public function all_admin_notices() {
settings_errors( $this->textdomain );
}
/**
* Updates user_meta to approve user.
*
* @author Konstantin Obenland
* @since 1.1 - 12.02.2012
* @access protected
*
* @return void
*/
protected function approve() {
list( $user_ids, $url ) = $this->check_user();
foreach ( (array) $user_ids as $id ) {
$id = (int) $id;
if ( ! current_user_can( 'edit_user', $id ) ) {
wp_die( esc_html__( 'You can’t edit that user.' ), '', array(
'back_link' => true,
) );
}
update_user_meta( $id, 'wp-approve-user', true );
do_action( 'wpau_approve', $id );
}
wp_safe_redirect( add_query_arg( array(
'action' => 'wpau_update',
'update' => 'wpau-approved',
'count' => count( $user_ids ),
'role' => $this->get_role(),
), $url ) );
exit();
}
/**
* Updates user_meta to unapprove user.
*
* @author Konstantin Obenland
* @since 1.1 - 12.02.2012
* @access protected
*
* @return void
*/
protected function unapprove() {
list( $user_ids, $url ) = $this->check_user();
foreach ( (array) $user_ids as $id ) {
$id = (int) $id;
if ( ! current_user_can( 'edit_user', $id ) ) {
wp_die( esc_html__( 'You can’t edit that user.' ), '', array(
'back_link' => true,
) );
}
update_user_meta( $id, 'wp-approve-user', false );
do_action( 'wpau_unapprove', $id );
}
wp_safe_redirect( add_query_arg( array(
'action' => 'wpau_update',
'update' => 'wpau-unapproved',
'count' => count( $user_ids ),
'role' => $this->get_role(),
), $url ) );
exit();
}
/**
* Checks permissions and assembles User IDs.
*
* @author Konstantin Obenland
* @since 2.0.0 - 15.03.2012
* @access protected
*
* @return array User IDs and URL
*/
protected function check_user() {
// phpcs:disable WordPress.CSRF.NonceVerification.NoNonceVerification
$screen_id = get_current_screen()->id;
$users_key = 'user';
if ( false !== stripos( current_action(), 'wpau_bulk_' ) ) {
$users_key = 'users-network' === $screen_id ? 'allusers' : 'users';
}
$site_id = isset( $_REQUEST['id'] ) ? intval( $_REQUEST['id'] ) : 0;
$url = 'site-users-network' === $screen_id ? add_query_arg( array( 'id' => $site_id ), 'site-users.php' ) : 'users.php';
if ( empty( $_REQUEST[ $users_key ] ) && empty( $_REQUEST[ $users_key ] ) ) {
wp_safe_redirect( $url );
exit();
}
if ( ! current_user_can( 'promote_users' ) ) {
wp_die( esc_html__( 'You can’t unapprove users.', 'wp-approve-user' ), '', array(
'back_link' => true,
) );
}
$user_ids = array_map( 'intval', (array) $_REQUEST[ $users_key ] );
$user_ids = array_diff( $user_ids, array( get_user_by( 'email', get_bloginfo( 'admin_email' ) )->ID ) );
return array( $user_ids, $url );
// phpcs:enable WordPress.CSRF.NonceVerification.NoNonceVerification
}
/**
* Replaces all the placeholders with their content.
*
* @author Konstantin Obenland
* @since 2.0.0 - 15.03.2012
* @access protected
*
* @param string $message Email body.
* @param WP_User $user User object.
*
* @return string
*/
protected function populate_message( $message, $user ) {
$placeholders = array(
'BLOG_TITLE' => wp_specialchars_decode( get_option( 'blogname' ), ENT_QUOTES ),
'BLOG_URL' => home_url(),
'LOGINLINK' => wp_login_url(),
'USERNAME' => $user->user_nicename,
);
if ( is_multisite() ) {
$placeholders['SITE_NAME'] = $GLOBALS['current_site']->site_name;
}
/**
* Filters the placeholders in approve/unapprove emails.
*
* @since 7
*
* @param array $placeholders Key => Value pair of placeholders and the value they're replaced with.
* @param string $message Message that will have its placeholders replaced. Note: This will not change the message.
* Use `option_wp-approve-user` to filter message bodies.
* @param WP_User $user WP_User object of the user being approved/unapproved.
*/
$placeholders = apply_filters( 'wpau_message_placeholders', $placeholders, $message, $user );
foreach ( $placeholders as $placeholder => $replacement ) {
$message = str_replace( $placeholder, $replacement, $message );
}
return $message;
}
/**
* Returns the default options.
*
* @author Konstantin Obenland
* @since 2.0.0 - 15.03.2012
* @access protected
*
* @return array
*/
protected function default_options() {
$options = array(
'wpau-send-approve-email' => false,
'wpau-approve-email' => '
Hi USERNAME,
Your registration for BLOG_TITLE has now been approved.
You can log in, using your username and password that you created when registering for our website, at the following URL: LOGINLINK
If you have any questions, or problems, then please do not hesitate to contact us.
Name,
Company,
Contact details',
'wpau-send-unapprove-email' => false,
'wpau-unapprove-email' => '',
);
return apply_filters( 'wpau_default_options', $options );
}
/**
* Sets the role context on bulk actions.
*
* On bulk actions the role parameter is not passed, since we're using a form
* to submit information. The information is only available through the
* `_wp_http_referer` parameter, so we get it from there and make it available
* for the request.
*
* @author Konstantin Obenland
* @since 3 - 04.09.2014
* @access protected
*/
protected function set_up_role_context() {
// phpcs:disable WordPress.CSRF.NonceVerification.NoNonceVerification, WordPress.Security.ValidatedSanitizedInput
if ( empty( $_REQUEST['role'] ) && ! empty( $_REQUEST['_wp_http_referer'] ) ) {
$referrer = parse_url( $_REQUEST['_wp_http_referer'] ); // phpcs:ignore WordPress.WP.AlternativeFunctions.parse_url_parse_url
if ( ! empty( $referrer['query'] ) ) {
$args = wp_parse_args( $referrer['query'] );
if ( ! empty( $args['role'] ) ) {
$_REQUEST['role'] = $args['role'];
}
}
}
}
/**
* Returns the current role.
*
* If the user list is in the context of a specific role, this function makes
* sure that the requested role is valid. By returning `false` otherwise, we
* make sure that parameter gets removed from the activation link.
*
* @author Konstantin Obenland
* @since 3 - 04.09.2014
* @access protected
*
* @return string|bool The role key if set, false otherwise.
*/
protected function get_role() {
$roles = array_keys( get_editable_roles() );
$roles[] = 'wpau_unapproved';
$role = false;
if ( isset( $_REQUEST['role'] ) && in_array( $_REQUEST['role'], $roles, true ) ) {
$role = $_REQUEST['role'];
}
return $role;
// phpcs:enable WordPress.CSRF.NonceVerification.NoNonceVerification, WordPress.Security.ValidatedSanitizedInput
}
/**
* Re-runs the activation hook when registration is activated.
*
* If the plugin is activated and user registration is disabled, the plugin
* activation hook never gets added, let alone fired. This a secondary
* measure to make sure all existing users are approved on activation.
*
* @author Konstantin Obenland
* @deprecated 2.3.0 - 13.08.2013
* @access public
*
* @param string $old Old settings value.
* @param int $new New settings value.
*
* @return void
*/
public function update_option_users_can_register( $old, $new ) {
_deprecated_function( __FUNCTION__, '2.3' );
}
} // End of class Obenland_Wp_Approve_User
new Obenland_Wp_Approve_User();
register_activation_hook( __FILE__, array(
Obenland_Wp_Approve_User::$instance,
'activation',
) );