/classes/class-s2-frontend.php

  1. <?php 
  2. class s2_frontend extends s2class { 
  3.   /** 
  4.   Load all our strings 
  5.   */ 
  6.   function load_strings() { 
  7.       $this->please_log_in = "<p class=\"s2_message\">" . sprintf(__('To manage your subscription options please <a href="%1$s">login.</a>', 'subscribe2'), get_option('siteurl') . '/wp-login.php') . "</p>"; 
  8.  
  9.       $this->profile = "<p class=\"s2_message\">" . sprintf(__('You may manage your subscription options from your <a href="%1$s">profile</a>', 'subscribe2'), get_option('siteurl') . "/wp-admin/admin.php?page=s2") . "</p>"; 
  10.       if ( $this->s2_mu === true ) { 
  11.           global $blog_id; 
  12.           $user_ID = get_current_user_id(); 
  13.           if ( !is_user_member_of_blog($user_ID, $blog_id) ) { 
  14.               // if we are on multisite and the user is not a member of this blog change the link 
  15.               $this->profile = "<p class=\"s2_message\">" . sprintf(__('<a href="%1$s">Subscribe</a> to email notifications when this blog posts new content.', 'subscribe2'), get_option('siteurl') . "/wp-admin/?s2mu_subscribe=" . $blog_id) . "</p>"; 
  16.           } 
  17.       } 
  18.  
  19.       $this->confirmation_sent = "<p class=\"s2_message\">" . __('A confirmation message is on its way!', 'subscribe2') . "</p>"; 
  20.  
  21.       $this->already_subscribed = "<p class=\"s2_error\">" . __('That email address is already subscribed.', 'subscribe2') . "</p>"; 
  22.  
  23.       $this->not_subscribed = "<p class=\"s2_error\">" . __('That email address is not subscribed.', 'subscribe2') . "</p>"; 
  24.  
  25.       $this->not_an_email = "<p class=\"s2_error\">" . __('Sorry, but that does not look like an email address to me.', 'subscribe2') . "</p>"; 
  26.  
  27.       $this->barred_domain = "<p class=\"s2_error\">" . __('Sorry, email addresses at that domain are currently barred due to spam, please use an alternative email address.', 'subscribe2') . "</p>"; 
  28.  
  29.       $this->error = "<p class=\"s2_error\">" . __('Sorry, there seems to be an error on the server. Please try again later.', 'subscribe2') . "</p>"; 
  30.  
  31.       // confirmation messages 
  32.       $this->no_such_email = "<p class=\"s2_error\">" . __('No such email address is registered.', 'subscribe2') . "</p>"; 
  33.  
  34.       $this->added = "<p class=\"s2_message\">" . __('You have successfully subscribed!', 'subscribe2') . "</p>"; 
  35.  
  36.       $this->deleted = "<p class=\"s2_message\">" . __('You have successfully unsubscribed.', 'subscribe2') . "</p>"; 
  37.  
  38.       /**/$this->subscribe = __('subscribe', 'subscribe2'); //ACTION replacement in subscribing confirmation email 
  39.  
  40.       /**/$this->unsubscribe = __('unsubscribe', 'subscribe2'); //ACTION replacement in unsubscribing in confirmation email 
  41.   } // end load_strings() 
  42.  
  43. /** ===== template and filter functions ===== */ 
  44.   /** 
  45.   Display our form; also handles (un)subscribe requests 
  46.   */ 
  47.   function shortcode($atts) { 
  48.       extract(shortcode_atts(array( 
  49.           'hide' => '',  
  50.           'id' => '',  
  51.           'nojs' => 'false',  
  52.           'noantispam' => 'false',  
  53.           'link' => '',  
  54.           'size' => 20,  
  55.           'wrap' => 'true' 
  56.  ), $atts)); 
  57.  
  58.       // if link is true return a link to the page with the ajax class 
  59.       if ( $link !== '' && !is_user_logged_in() ) { 
  60.           $hide_id = ($hide === '') ? "": " id=\"" . strtolower($hide) . "\""; 
  61.           $this->s2form = "<a href=\"" . get_permalink($this->subscribe2_options['s2page']) . "\" class=\"s2popup\"" . $hide_id . ">" . $link . "</a>\r\n"; 
  62.           return $this->s2form; 
  63.       } 
  64.  
  65.       // Apply filters to button text 
  66.       $unsubscribe_button_value = apply_filters('s2_unsubscribe_button', __('Unsubscribe', 'subscribe2')); 
  67.       $subscribe_button_value = apply_filters('s2_subscribe_button', __('Subscribe', 'subscribe2')); 
  68.  
  69.       // if a button is hidden, show only other 
  70.       if ( strtolower($hide) == 'subscribe' ) { 
  71.           $this->input_form_action = "<input type=\"submit\" name=\"unsubscribe\" value=\"" . esc_attr($unsubscribe_button_value) . "\" />"; 
  72.       } elseif ( strtolower($hide) == 'unsubscribe' ) { 
  73.           $this->input_form_action = "<input type=\"submit\" name=\"subscribe\" value=\"" . esc_attr($subscribe_button_value) . "\" />"; 
  74.       } else { 
  75.           // both form input actions 
  76.           $this->input_form_action = "<input type=\"submit\" name=\"subscribe\" value=\"" . esc_attr($subscribe_button_value) . "\" /> <input type=\"submit\" name=\"unsubscribe\" value=\"" . esc_attr($unsubscribe_button_value) . "\" />"; 
  77.       } 
  78.  
  79.       // if ID is provided, get permalink 
  80.       $action = ''; 
  81.       if ( is_numeric($id) ) { 
  82.           $action = " action=\"" . get_permalink( $id ) . "\""; 
  83.       } elseif ( $id === 'home' ) { 
  84.           $action = " action=\"" . get_site_url() . "\""; 
  85.       } elseif ( $id === 'self' ) { 
  86.           $action = ''; 
  87.       } elseif ( $this->subscribe2_options['s2page'] > 0 ) { 
  88.           $action = " action=\"" . get_permalink( $this->subscribe2_options['s2page'] ) . "\""; 
  89.       } 
  90.  
  91.       // allow remote setting of email in form 
  92.       if ( isset($_REQUEST['email']) && is_email($_REQUEST['email']) ) { 
  93.           $value = $this->sanitize_email($_REQUEST['email']); 
  94.       } elseif ( strtolower($nojs) == 'true' ) { 
  95.           $value = ''; 
  96.       } else { 
  97.           $value = __('Enter email address...', 'subscribe2'); 
  98.       } 
  99.  
  100.       // if wrap is true add paragraph html tags 
  101.       $wrap_text = ''; 
  102.       if ( strtolower($wrap) == 'true' ) { 
  103.           $wrap_text = '</p><p>'; 
  104.       } 
  105.  
  106.       // deploy some anti-spam measures 
  107.       $antispam_text = ''; 
  108.       if ( strtolower($noantispam) != 'true' ) { 
  109.           $antispam_text = "<span style=\"display:none !important\">"; 
  110.           $antispam_text .= "<label for=\"name\">Leave Blank:</label><input type=\"text\" id=\"name\" name=\"name\" />"; 
  111.           $antispam_text .= "<label for=\"uri\">Do Not Change:</label><input type=\"text\" id=\"uri\" name=\"uri\" value=\"http://\" />"; 
  112.           $antispam_text .= "</span>"; 
  113.       } 
  114.  
  115.       // build default form 
  116.       if ( strtolower($nojs) == 'true' ) { 
  117.           $this->form = "<form method=\"post\"" . $action . "><input type=\"hidden\" name=\"ip\" value=\"" . $_SERVER['REMOTE_ADDR'] . "\" />" . $antispam_text . "<p><label for=\"s2email\">" . __('Your email:', 'subscribe2') . "</label><br /><input type=\"text\" name=\"email\" id=\"s2email\" value=\"" . $value . "\" size=\"" . $size . "\" />" . $wrap_text . $this->input_form_action . "</p></form>"; 
  118.       } else { 
  119.           $this->form = "<form method=\"post\"" . $action . "><input type=\"hidden\" name=\"ip\" value=\"" . $_SERVER['REMOTE_ADDR'] . "\" />" . $antispam_text . "<p><label for=\"s2email\">" . __('Your email:', 'subscribe2') . "</label><br /><input type=\"text\" name=\"email\" id=\"s2email\" value=\"" . $value . "\" size=\"" . $size . "\" onfocus=\"if (this.value == '" . $value . "') {this.value = '';}\" onblur=\"if (this.value == '') {this.value = '" . $value . "';}\" />" . $wrap_text . $this->input_form_action . "</p></form>\r\n"; 
  120.       } 
  121.       $this->s2form = apply_filters('s2_form', $this->form); 
  122.  
  123.       global $user_ID; 
  124.       get_currentuserinfo(); 
  125.       if ( $user_ID ) { 
  126.           $this->s2form = $this->profile; 
  127.       } 
  128.       if ( isset($_POST['subscribe']) || isset($_POST['unsubscribe']) ) { 
  129.           // anti spam sign up measure 
  130.           if ( $_POST['name'] != '' || $_POST['uri'] != 'http://' ) { 
  131.               // looks like some invisible-to-user fields were changed; falsely report success 
  132.               return $this->confirmation_sent; 
  133.           } 
  134.           global $wpdb, $user_email; 
  135.           $this->email = $this->sanitize_email($_POST['email']); 
  136.           if ( !is_email($this->email) ) { 
  137.               $this->s2form = $this->form . $this->not_an_email; 
  138.           } elseif ( $this->is_barred($this->email) ) { 
  139.               $this->s2form = $this->form . $this->barred_domain; 
  140.           } else { 
  141.               $this->ip = $_POST['ip']; 
  142.               if ( is_int($this->lockout) && $this->lockout > 0 ) { 
  143.                   $date = date('H:i:s.u', $this->lockout); 
  144.                   $ips = $wpdb->get_col($wpdb->prepare("SELECT ip FROM $this->public WHERE date = CURDATE() AND time > SUBTIME(CURTIME(), %s)", $date)); 
  145.                   if ( in_array($this->ip, $ips) ) { 
  146.                       return __('Slow down, you move too fast.', 'subscribe2'); 
  147.                   } 
  148.               } 
  149.               // does the supplied email belong to a registered user? 
  150.               $check = $wpdb->get_var($wpdb->prepare("SELECT user_email FROM $wpdb->users WHERE user_email = %s", $this->email)); 
  151.               if ( '' != $check ) { 
  152.                   // this is a registered email 
  153.                   $this->s2form = $this->please_log_in; 
  154.               } else { 
  155.                   // this is not a registered email 
  156.                   // what should we do? 
  157.                   if ( isset($_POST['subscribe']) ) { 
  158.                       // someone is trying to subscribe 
  159.                       // lets see if they've tried to subscribe previously 
  160.                       if ( '1' !== $this->is_public($this->email) ) { 
  161.                           // the user is unknown or inactive 
  162.                           $this->add($this->email); 
  163.                           $status = $this->send_confirm('add'); 
  164.                           // set a variable to denote that we've already run, and shouldn't run again 
  165.                           $this->filtered = 1; 
  166.                           if ( $status ) { 
  167.                               $this->s2form = $this->confirmation_sent; 
  168.                           } else { 
  169.                               $this->s2form = $this->error; 
  170.                           } 
  171.                       } else { 
  172.                           // they're already subscribed 
  173.                           $this->s2form = $this->already_subscribed; 
  174.                       } 
  175.                       $this->action = 'subscribe'; 
  176.                   } elseif ( isset($_POST['unsubscribe']) ) { 
  177.                       // is this email a subscriber? 
  178.                       if ( false == $this->is_public($this->email) ) { 
  179.                           $this->s2form = $this->form . $this->not_subscribed; 
  180.                       } else { 
  181.                           $status = $this->send_confirm('del'); 
  182.                           // set a variable to denote that we've already run, and shouldn't run again 
  183.                           $this->filtered = 1; 
  184.                           if ( $status ) { 
  185.                               $this->s2form = $this->confirmation_sent; 
  186.                           } else { 
  187.                               $this->s2form = $this->error; 
  188.                           } 
  189.                       } 
  190.                       $this->action = 'unsubscribe'; 
  191.                   } 
  192.               } 
  193.           } 
  194.       } 
  195.       return $this->s2form; 
  196.   } // end shortcode() 
  197.  
  198.   /** 
  199.   Display form when deprecated <!--subscribe2--> is used 
  200.   */ 
  201.   function filter($content = '') { 
  202.       if ( '' == $content || !strstr($content, '<!--subscribe2-->') ) { return $content; } 
  203.  
  204.       return preg_replace('|(<p>)?(\n)*<!--subscribe2-->(\n)*(</p>)?|', do_shortcode( '[subscribe2]' ), $content); 
  205.   } // end filter() 
  206.  
  207.   /** 
  208.   Overrides the default query when handling a (un)subscription confirmation 
  209.   This is basically a trick: if the s2 variable is in the query string, just grab the first 
  210.   static page and override it's contents later with title_filter() 
  211.   */ 
  212.   function query_filter() { 
  213.       // don't interfere if we've already done our thing 
  214.       if ( 1 == $this->filtered ) { return; } 
  215.  
  216.       global $wpdb; 
  217.  
  218.       // brute force Simple Facebook Connect to bypass compatiblity issues 
  219.       $priority = has_filter('wp_head', 'sfc_base_meta'); 
  220.       if ( $priority !== false ) { 
  221.           remove_action('wp_head', 'sfc_base_meta', $priority); 
  222.       } 
  223.  
  224.       if ( 0 != $this->subscribe2_options['s2page'] ) { 
  225.           return array('page_id' => $this->subscribe2_options['s2page']); 
  226.       } else { 
  227.           $id = $wpdb->get_var("SELECT ID FROM $wpdb->posts WHERE post_type='page' AND post_status='publish' LIMIT 1"); 
  228.           if ( $id ) { 
  229.               return array('page_id' => $id); 
  230.           } else { 
  231.               return array('showposts' => 1); 
  232.           } 
  233.       } 
  234.   } // end query_filter() 
  235.  
  236.   /** 
  237.   Overrides the page title 
  238.   */ 
  239.   function title_filter($title) { 
  240.       // don't interfere if we've already done our thing 
  241.       if ( in_the_loop() ) { 
  242.           $code = $_GET['s2']; 
  243.           $action = intval(substr($code, 0, 1)); 
  244.           if ( $action == '1' ) { 
  245.               return __('Subscription Confirmation', 'subscribe2'); 
  246.           } else { 
  247.               return __('Unsubscription Confirmation', 'subscribe2'); 
  248.           } 
  249.       } else { 
  250.           return $title; 
  251.       } 
  252.   } // end title_filter() 
  253.  
  254.   /** 
  255.   Confirm request from the link emailed to the user and email the admin 
  256.   */ 
  257.   function confirm($content = '') { 
  258.       global $wpdb; 
  259.  
  260.       if ( 1 == $this->filtered ) { return $content; } 
  261.  
  262.       $code = $_GET['s2']; 
  263.       $action = intval(substr($code, 0, 1)); 
  264.       $hash = substr($code, 1, 32); 
  265.       $id = intval(substr($code, 33)); 
  266.       if ( $id ) { 
  267.           $this->email = $this->sanitize_email($this->get_email($id)); 
  268.           if ( !$this->email || $hash !== wp_hash($this->email) ) { 
  269.               return $this->no_such_email; 
  270.           } 
  271.       } else { 
  272.           return $this->no_such_email; 
  273.       } 
  274.  
  275.       // get current status of email so messages are only sent once per emailed link 
  276.       $current = $this->is_public($this->email); 
  277.  
  278.       if ( '1' == $action ) { 
  279.           // make this subscription active 
  280.           $this->message = apply_filters('s2_subscribe_confirmed', $this->added); 
  281.           if ( '1' != $current ) { 
  282.               $this->ip = $_SERVER['REMOTE_ADDR']; 
  283.               $this->toggle($this->email); 
  284.               if ( $this->subscribe2_options['admin_email'] == 'subs' || $this->subscribe2_options['admin_email'] == 'both' ) { 
  285.                   ( '' == get_option('blogname') ) ? $subject = "" : $subject = "[" . stripslashes(html_entity_decode(get_option('blogname'), ENT_QUOTES)) . "] "; 
  286.                   $subject .= __('New Subscription', 'subscribe2'); 
  287.                   $subject = html_entity_decode($subject, ENT_QUOTES); 
  288.                   $message = $this->email . " " . __('subscribed to email notifications!', 'subscribe2'); 
  289.                   $role = array('fields' => array('user_email'), 'role' => 'administrator'); 
  290.                   $wp_user_query = get_users( $role ); 
  291.                   foreach ($wp_user_query as $user) { 
  292.                       $recipients[] = $user->user_email; 
  293.                   } 
  294.                   $recipients = apply_filters('s2_admin_email', $recipients, 'subscribe'); 
  295.                   $headers = $this->headers(); 
  296.                   // send individual emails so we don't reveal admin emails to each other 
  297.                   foreach ( $recipients as $recipient ) { 
  298.                       @wp_mail($recipient, $subject, $message, $headers); 
  299.                   } 
  300.               } 
  301.           } 
  302.           $this->filtered = 1; 
  303.       } elseif ( '0' == $action ) { 
  304.           // remove this subscriber 
  305.           $this->message = apply_filters('s2_unsubscribe_confirmed', $this->deleted); 
  306.           if ( '0' != $current ) { 
  307.               $this->delete($this->email); 
  308.               if ( $this->subscribe2_options['admin_email'] == 'unsubs' || $this->subscribe2_options['admin_email'] == 'both' ) { 
  309.                   ( '' == get_option('blogname') ) ? $subject = "" : $subject = "[" . stripslashes(html_entity_decode(get_option('blogname'), ENT_QUOTES)) . "] "; 
  310.                   $subject .= __('New Unsubscription', 'subscribe2'); 
  311.                   $subject = html_entity_decode($subject, ENT_QUOTES); 
  312.                   $message = $this->email . " " . __('unsubscribed from email notifications!', 'subscribe2'); 
  313.                   $role = array('fields' => array('user_email'), 'role' => 'administrator'); 
  314.                   $wp_user_query = get_users( $role ); 
  315.                   foreach ($wp_user_query as $user) { 
  316.                       $recipients[] = $user->user_email; 
  317.                   } 
  318.                   $recipients = apply_filters('s2_admin_email', $recipients, 'unsubscribe'); 
  319.                   $headers = $this->headers(); 
  320.                   // send individual emails so we don't reveal admin emails to each other 
  321.                   foreach ( $recipients as $recipient ) { 
  322.                       @wp_mail($recipient, $subject, $message, $headers); 
  323.                   } 
  324.               } 
  325.           } 
  326.           $this->filtered = 1; 
  327.       } 
  328.  
  329.       if ( '' != $this->message ) { 
  330.           return $this->message; 
  331.       } 
  332.   } // end confirm() 
  333.  
  334.   /** 
  335.   Add hook for Minimeta Widget plugin 
  336.   */ 
  337.   function add_minimeta() { 
  338.       if ( $this->subscribe2_options['s2page'] != 0 ) { 
  339.           echo "<li><a href=\"" . get_permalink($this->subscribe2_options['s2page']) . "\">" . __('[Un]Subscribe to Posts', 'subscribe2') . "</a></li>\r\n"; 
  340.       } 
  341.   } // end add_minimeta() 
  342.  
  343.   /** 
  344.   Add jQuery code and CSS to front pages for ajax form 
  345.   */ 
  346.   function add_ajax() { 
  347.       // enqueue the jQuery script we need and let WordPress handle the dependencies 
  348.       wp_enqueue_script('jquery-ui-dialog'); 
  349.       $css = 'http://ajax.googleapis.com/ajax/libs/jqueryui/1.10.3/themes/ui-darkness/jquery-ui.css'; 
  350.       if ( is_ssl() ) { 
  351.           $css = str_replace('http:', 'https:', $css); 
  352.       } 
  353.       wp_register_style('jquery-ui-style', apply_filters('s2_jqueryui_css', $css)); 
  354.       wp_enqueue_style('jquery-ui-style'); 
  355.   } // end add_ajax() 
  356.  
  357.   /** 
  358.   Write Subscribe2 form js code dynamically so we can pull WordPress functions 
  359.   */ 
  360.   function add_s2_ajax() { 
  361.       echo "<script type=\"text/javascript\">\r\n"; 
  362.       echo "//<![CDATA[\r\n"; 
  363.       echo "var s2jQuery = jQuery.noConflict();\r\n"; 
  364.       echo "s2jQuery(document).ready(function() {\r\n"; 
  365.       echo "    var dialog = s2jQuery('<div></div>');\r\n"; 
  366.       echo "    if (s2jQuery('a.s2popup').attr('id') === 'unsubscribe') {\r\n"; 
  367.       echo "        dialog.html('" . do_shortcode('[subscribe2 nojs="true" hide="unsubscribe"]') . "');\r\n"; 
  368.       echo "    } else if (s2jQuery('a.s2popup').attr('id') === 'subscribe') {\r\n"; 
  369.       echo "        dialog.html('" . do_shortcode('[subscribe2 nojs="true" hide="subscribe"]') . "');\r\n"; 
  370.       echo "    } else {\r\n"; 
  371.       echo "        dialog.html('" . do_shortcode('[subscribe2 nojs="true"]') . "');\r\n"; 
  372.       echo "    }\r\n"; 
  373.       if ( $this->s2form != $this->form && !is_user_logged_in() ) { 
  374.           echo "    dialog.dialog({modal: true, zIndex: 10000, title: '" . __('Subscribe to this blog', 'subscribe2') . "'});\r\n"; 
  375.       } else { 
  376.           echo "    dialog.dialog({autoOpen: false, modal: true, zIndex: 10000, title: '" . __('Subscribe to this blog', 'subscribe2') . "'});\r\n"; 
  377.       } 
  378.       echo "    s2jQuery('a.s2popup').click(function() {\r\n"; 
  379.       echo "        dialog.dialog('open');\r\n"; 
  380.       echo "        return false;\r\n"; 
  381.       echo "    });\r\n"; 
  382.       echo "});\r\n"; 
  383.       echo "//]]>\r\n"; 
  384.       echo "</script>\r\n"; 
  385.   } // end add_s2_ajax() 
  386.  
  387.   /** 
  388.   Check email is not from a barred domain 
  389.   */ 
  390.   function is_barred($email = '') { 
  391.       if ( '' == $email ) { return false; } 
  392.  
  393.       $bar_check = false; 
  394.       list($user, $domain) = explode('@', $email, 2); 
  395.       foreach ( preg_split("|[\s, ]+|", $this->subscribe2_options['barred']) as $barred_domain ) { 
  396.           if ( strtolower($domain) === strtolower(trim($barred_domain)) ) { 
  397.               $bar_check = true; 
  398.           } 
  399.       } 
  400.       return $bar_check; 
  401.   } // end is_barred() 
  402. } 
  403. ?> 
.