221 lines
8.9 KiB
PHP
221 lines
8.9 KiB
PHP
|
<?php
|
||
|
|
|
||
|
|
trait Shortcode {
|
||
|
|
/* ===== template and filter functions ===== */
|
||
|
|
/**
|
||
|
|
* Display our form; also handles (un)subscribe requests
|
||
|
|
*/
|
||
|
|
public function widget_shortcode( $atts ) {
|
||
|
|
$args = shortcode_atts(
|
||
|
|
array(
|
||
|
|
'hide' => '',
|
||
|
|
'id' => '',
|
||
|
|
'nojs' => 'false',
|
||
|
|
'noantispam' => 'false',
|
||
|
|
'link' => '',
|
||
|
|
'size' => 20,
|
||
|
|
'wrap' => 'true',
|
||
|
|
'widget' => 'false',
|
||
|
|
),
|
||
|
|
$atts
|
||
|
|
);
|
||
|
|
|
||
|
|
// if link is true return a link to the page with the ajax class
|
||
|
|
if ( '1' === $this->subscribe2_options['ajax'] && '' !== $args['link'] && ! is_user_logged_in() ) {
|
||
|
|
$id = '';
|
||
|
|
foreach ( $args as $arg_name => $arg_value ) {
|
||
|
|
if ( ! empty( $arg_value ) && 'link' !== $arg_name && 'id' !== $arg_name ) {
|
||
|
|
if ( 'nojs' === $arg_name ) {
|
||
|
|
$arg_value = 'true';
|
||
|
|
}
|
||
|
|
( '' === $id ) ? $id .= $arg_name . '-' . $arg_value : $id .= ':' . $arg_name . '-' . $arg_value;
|
||
|
|
}
|
||
|
|
}
|
||
|
|
$this->s2form = '<a href="#" class="s2popup" id="' . esc_attr( $id ) . '">' . esc_html( $args['link'] ) . '</a>' . "\r\n";
|
||
|
|
return $this->s2form;
|
||
|
|
}
|
||
|
|
|
||
|
|
// Apply filters to button text
|
||
|
|
$unsubscribe_button_value = apply_filters( 's2_unsubscribe_button', __( 'Unsubscribe', 'subscribe2' ) );
|
||
|
|
$subscribe_button_value = apply_filters( 's2_subscribe_button', __( 'Subscribe', 'subscribe2' ) );
|
||
|
|
|
||
|
|
// if a button is hidden, show only other
|
||
|
|
$hide = strtolower( $args['hide'] );
|
||
|
|
if ( 'subscribe' === $hide ) {
|
||
|
|
$this->input_form_action = '<input type="submit" name="unsubscribe" value="' . esc_attr( $unsubscribe_button_value ) . '" />';
|
||
|
|
} elseif ( 'unsubscribe' === $hide ) {
|
||
|
|
$this->input_form_action = '<input type="submit" name="subscribe" value="' . esc_attr( $subscribe_button_value ) . '" />';
|
||
|
|
} else {
|
||
|
|
// both form input actions
|
||
|
|
$this->input_form_action = '<input type="submit" name="subscribe" value="' . esc_attr( $subscribe_button_value ) . '" /> <input type="submit" name="unsubscribe" value="' . esc_attr( $unsubscribe_button_value ) . '" />';
|
||
|
|
}
|
||
|
|
|
||
|
|
// if ID is provided, get permalink
|
||
|
|
$action = '';
|
||
|
|
if ( is_numeric( $args['id'] ) ) {
|
||
|
|
$action = ' action="' . get_permalink( $args['id'] ) . '"';
|
||
|
|
} elseif ( 'home' === $args['id'] ) {
|
||
|
|
$action = ' action="' . get_site_url() . '"';
|
||
|
|
} elseif ( 'self' === $args['id'] ) {
|
||
|
|
// Correct for Static front page redirect behaviour
|
||
|
|
if ( 'page' === get_option( 'show_on_front' ) && is_front_page() ) {
|
||
|
|
$post = get_post( get_option( 'page_on_front' ) );
|
||
|
|
$action = ' action="' . get_option( 'home' ) . '/' . $post->post_name . '/"';
|
||
|
|
} else {
|
||
|
|
$action = '';
|
||
|
|
}
|
||
|
|
} elseif ( $this->subscribe2_options['s2page'] > 0 ) {
|
||
|
|
$action = ' action="' . get_permalink( $this->subscribe2_options['s2page'] ) . '"';
|
||
|
|
}
|
||
|
|
|
||
|
|
// allow remote setting of email in form
|
||
|
|
if ( isset( $_REQUEST['email'] ) ) {
|
||
|
|
$email = $this->sanitize_email( $_REQUEST['email'] );
|
||
|
|
}
|
||
|
|
if ( isset( $_REQUEST['email'] ) && false !== $this->validate_email( $email ) ) {
|
||
|
|
$value = $email;
|
||
|
|
} elseif ( 'true' === strtolower( $args['nojs'] ) ) {
|
||
|
|
$value = '';
|
||
|
|
} else {
|
||
|
|
$value = __( 'Enter email address...', 'subscribe2' );
|
||
|
|
}
|
||
|
|
|
||
|
|
// if wrap is true add paragraph html tags
|
||
|
|
$wrap_text = '';
|
||
|
|
if ( 'true' === strtolower( $args['wrap'] ) ) {
|
||
|
|
$wrap_text = '</p><p>';
|
||
|
|
}
|
||
|
|
|
||
|
|
// deploy some anti-spam measures
|
||
|
|
$antispam_text = '';
|
||
|
|
if ( 'true' !== strtolower( $args['noantispam'] ) ) {
|
||
|
|
$antispam_text = '<span style="display:none !important">';
|
||
|
|
$antispam_text .= '<label for="firstname">Leave This Blank:</label><input type="text" id="firstname" name="firstname" />';
|
||
|
|
$antispam_text .= '<label for="lastname">Leave This Blank Too:</label><input type="text" id="lastname" name="lastname" />';
|
||
|
|
$antispam_text .= '<label for="uri">Do Not Change This:</label><input type="text" id="uri" name="uri" value="http://" />';
|
||
|
|
$antispam_text .= '</span>';
|
||
|
|
}
|
||
|
|
|
||
|
|
// get remote IP address
|
||
|
|
$remote_ip = $this->get_remote_ip();
|
||
|
|
|
||
|
|
// form name
|
||
|
|
if ( 'true' === $args['widget'] ) {
|
||
|
|
$form_name = 's2formwidget';
|
||
|
|
} else {
|
||
|
|
$form_name = 's2form';
|
||
|
|
}
|
||
|
|
|
||
|
|
// build default form
|
||
|
|
if ( 'true' === strtolower( $args['nojs'] ) ) {
|
||
|
|
$this->form = '<form name="' . $form_name . '" method="post"' . $action . '><input type="hidden" name="ip" value="' . esc_attr( $_SERVER['REMOTE_ADDR'] ) . '" />' . $antispam_text . '<p><label for="s2email">' . __( 'Your email:', 'subscribe2' ) . '</label><br><input type="email" name="email" id="s2email" value="' . $value . '" size="' . $args['size'] . '" />' . $wrap_text . $this->input_form_action . '</p></form>';
|
||
|
|
} else {
|
||
|
|
$this->form = '<form name="' . $form_name . '" method="post"' . $action . '><input type="hidden" name="ip" value="' . esc_attr( $_SERVER['REMOTE_ADDR'] ) . '" />' . $antispam_text . '<p><label for="s2email">' . __( 'Your email:', 'subscribe2' ) . '</label><br><input type="email" name="email" id="s2email" value="' . $value . '" size="' . $args['size'] . '" onfocus="if (this.value === \'' . $value . '\') {this.value = \'\';}" onblur="if (this.value === \'\') {this.value = \'' . $value . '\';}" />' . $wrap_text . $this->input_form_action . '</p></form>' . "\r\n";
|
||
|
|
}
|
||
|
|
$this->s2form = apply_filters( 's2_form', $this->form, $args );
|
||
|
|
|
||
|
|
if ( isset( $_POST['subscribe'] ) || isset( $_POST['unsubscribe'] ) ) {
|
||
|
|
// anti spam sign up measure
|
||
|
|
if ( ( isset( $_POST['firstname'] ) && '' !== $_POST['firstname'] ) || ( isset( $_POST['lastname'] ) && '' !== $_POST['lastname'] ) || ( isset( $_POST['uri'] ) && 'http://' !== $_POST['uri'] ) ) {
|
||
|
|
// looks like some invisible-to-user fields were changed; falsely report success
|
||
|
|
return $this->confirmation_sent;
|
||
|
|
}
|
||
|
|
$validation = apply_filters( 's2_form_submission', true );
|
||
|
|
if ( true !== $validation ) {
|
||
|
|
return apply_filters( 's2_form_failed_validation', $this->s2form );
|
||
|
|
}
|
||
|
|
global $wpdb;
|
||
|
|
$this->email = $this->sanitize_email( $_POST['email'] );
|
||
|
|
if ( false === $this->validate_email( $this->email ) ) {
|
||
|
|
$this->s2form = $this->s2form . $this->not_an_email;
|
||
|
|
} elseif ( $this->is_barred( $this->email ) ) {
|
||
|
|
$this->s2form = $this->s2form . $this->barred_domain;
|
||
|
|
} else {
|
||
|
|
$this->ip = $_POST['ip'];
|
||
|
|
if ( is_int( $this->lockout ) && $this->lockout > 0 ) {
|
||
|
|
$date = gmdate( 'H:i:s.u', $this->lockout );
|
||
|
|
$ips = $wpdb->get_col( $wpdb->prepare( "SELECT ip FROM $wpdb->subscribe2 WHERE date = CURDATE() AND time > SUBTIME(CURTIME(), %s)", $date ) );
|
||
|
|
if ( in_array( $this->ip, $ips, true ) ) {
|
||
|
|
return __( 'Slow down, you move too fast.', 'subscribe2' );
|
||
|
|
}
|
||
|
|
}
|
||
|
|
// does the supplied email belong to a registered user?
|
||
|
|
$check = $wpdb->get_var( $wpdb->prepare( "SELECT user_email FROM $wpdb->users WHERE user_email = %s", $this->email ) );
|
||
|
|
if ( null !== $check ) {
|
||
|
|
// this is a registered email
|
||
|
|
$this->s2form = $this->please_log_in;
|
||
|
|
} else {
|
||
|
|
// this is not a registered email
|
||
|
|
// what should we do?
|
||
|
|
if ( isset( $_POST['subscribe'] ) ) {
|
||
|
|
// someone is trying to subscribe
|
||
|
|
// lets see if they've tried to subscribe previously
|
||
|
|
if ( '1' !== $this->is_public( $this->email ) ) {
|
||
|
|
// the user is unknown or inactive
|
||
|
|
$this->add( $this->email );
|
||
|
|
$status = $this->send_confirm( 'add' );
|
||
|
|
// set a variable to denote that we've already run, and shouldn't run again
|
||
|
|
$this->filtered = 1;
|
||
|
|
if ( $status ) {
|
||
|
|
$this->s2form = $this->confirmation_sent;
|
||
|
|
} else {
|
||
|
|
$this->s2form = $this->error;
|
||
|
|
}
|
||
|
|
} else {
|
||
|
|
// they're already subscribed
|
||
|
|
$this->s2form = $this->already_subscribed;
|
||
|
|
}
|
||
|
|
$this->action = 'subscribe';
|
||
|
|
} elseif ( isset( $_POST['unsubscribe'] ) ) {
|
||
|
|
// is this email a subscriber?
|
||
|
|
if ( false === $this->is_public( $this->email ) ) {
|
||
|
|
$this->s2form = $this->s2form . $this->not_subscribed;
|
||
|
|
} else {
|
||
|
|
$status = $this->send_confirm( 'del' );
|
||
|
|
// set a variable to denote that we've already run, and shouldn't run again
|
||
|
|
$this->filtered = 1;
|
||
|
|
if ( $status ) {
|
||
|
|
$this->s2form = $this->confirmation_sent;
|
||
|
|
} else {
|
||
|
|
$this->s2form = $this->error;
|
||
|
|
}
|
||
|
|
}
|
||
|
|
$this->action = 'unsubscribe';
|
||
|
|
}
|
||
|
|
}
|
||
|
|
}
|
||
|
|
}
|
||
|
|
return $this->s2form;
|
||
|
|
}
|
||
|
|
|
||
|
|
/**
|
||
|
|
* Collect and return the IP address of the remote client machine
|
||
|
|
*/
|
||
|
|
public function get_remote_ip() {
|
||
|
|
$remote_ip = false;
|
||
|
|
|
||
|
|
// In order of preference, with the best ones for this purpose first
|
||
|
|
$address_headers = array(
|
||
|
|
'HTTP_CLIENT_IP',
|
||
|
|
'HTTP_X_FORWARDED_FOR',
|
||
|
|
'HTTP_X_FORWARDED',
|
||
|
|
'HTTP_X_CLUSTER_CLIENT_IP',
|
||
|
|
'HTTP_FORWARDED_FOR',
|
||
|
|
'HTTP_FORWARDED',
|
||
|
|
'REMOTE_ADDR',
|
||
|
|
);
|
||
|
|
|
||
|
|
foreach ( $address_headers as $header ) {
|
||
|
|
if ( array_key_exists( $header, $_SERVER ) ) {
|
||
|
|
// HTTP_X_FORWARDED_FOR can contain a chain of comma-separated
|
||
|
|
// addresses. The first one is the original client. It can't be
|
||
|
|
// trusted for authenticity, but we don't need to for this purpose.
|
||
|
|
$address_chain = explode( ',', $_SERVER[ $header ] );
|
||
|
|
$remote_ip = trim( $address_chain[0] );
|
||
|
|
break;
|
||
|
|
}
|
||
|
|
}
|
||
|
|
|
||
|
|
return $remote_ip;
|
||
|
|
}
|
||
|
|
}
|