please_log_in = '

' . sprintf( __( 'To manage your subscription options please login.', 'subscribe2' ), get_option( 'siteurl' ) . '/wp-login.php' ) . '

'; $profile = apply_filters( 's2_profile_link', get_option( 'siteurl' ) . '/wp-admin/admin.php?page=s2' ); // Translators: Link to Profile page $this->profile = '

' . sprintf( __( 'You may manage your subscription options from your profile.', 'subscribe2' ), $profile ) . '

'; if ( true === $this->s2_mu ) { global $blog_id; $user_ID = get_current_user_id(); if ( ! is_user_member_of_blog( $user_ID, $blog_id ) ) { // if we are on multisite and the user is not a member of this blog change the link $mu_profile = apply_filters( 's2_mu_profile_link', get_option( 'siteurl' ) . '/wp-admin/?s2mu_subscribe=' . $blog_id ); // Translators: Link to Profile page $this->profile = '

' . sprintf( __( 'Subscribe to email notifications when this blog posts new content.', 'subscribe2' ), $mu_profile ) . '

'; } } $this->confirmation_sent = '

' . __( 'A confirmation message is on its way!', 'subscribe2' ) . '

'; $this->already_subscribed = '

' . __( 'That email address is already subscribed.', 'subscribe2' ) . '

'; $this->not_subscribed = '

' . __( 'That email address is not subscribed.', 'subscribe2' ) . '

'; $this->not_an_email = '

' . __( 'Sorry, but that does not look like an email address to me.', 'subscribe2' ) . '

'; $this->barred_domain = '

' . __( 'Sorry, email addresses at that domain are currently barred due to spam, please use an alternative email address.', 'subscribe2' ) . '

'; $this->error = '

' . __( 'Sorry, there seems to be an error on the server. Please try again later.', 'subscribe2' ) . '

'; // confirmation messages $this->no_such_email = '

' . __( 'No such email address is registered.', 'subscribe2' ) . '

'; $this->added = '

' . __( 'You have successfully subscribed!', 'subscribe2' ) . '

'; $this->deleted = '

' . __( 'You have successfully unsubscribed.', 'subscribe2' ) . '

'; $this->subscribe = __( 'subscribe', 'subscribe2' ); //ACTION replacement in subscribing confirmation email $this->unsubscribe = __( 'unsubscribe', 'subscribe2' ); //ACTION replacement in unsubscribing in confirmation email if ( isset( $_GET['s2_unsub'] ) && ! empty( $_GET['s2_unsub'] ) ) { $this->unsubscribe( $_GET['s2_unsub'] ); } } /** * Process unsubscribe * * @param $email */ public function unsubscribe( $email ) { global $wpdb; $email = base64_decode( $email ); if (! filter_var( $email, FILTER_VALIDATE_EMAIL ) ) { return; } $count = $wpdb->delete( $wpdb->subscribe2, [ 'email' => $email ] ); if ( ! $count ) { wp_safe_redirect( home_url() ); } } /* ===== template and filter functions ===== */ /** * Display our form; also handles (un)subscribe requests */ public function shortcode( $atts ) { $args = shortcode_atts( array( 'hide' => '', 'id' => '', 'nojs' => 'false', 'noantispam' => 'false', 'link' => '', 'size' => 20, 'wrap' => 'true', 'widget' => 'false', ), $atts ); // if link is true return a link to the page with the ajax class if ( '1' === $this->subscribe2_options['ajax'] && '' !== $args['link'] && ! is_user_logged_in() ) { $id = ''; foreach ( $args as $arg_name => $arg_value ) { if ( ! empty( $arg_value ) && 'link' !== $arg_name && 'id' !== $arg_name ) { if ( 'nojs' === $arg_name ) { $arg_value = 'true'; } ( '' === $id ) ? $id .= $arg_name . '-' . $arg_value : $id .= ':' . $arg_name . '-' . $arg_value; } } $this->s2form = '' . esc_html( $args['link'] ) . '' . "\r\n"; return $this->s2form; } // Apply filters to button text $unsubscribe_button_value = apply_filters( 's2_unsubscribe_button', __( 'Unsubscribe', 'subscribe2' ) ); $subscribe_button_value = apply_filters( 's2_subscribe_button', __( 'Subscribe', 'subscribe2' ) ); // if a button is hidden, show only other $hide = strtolower( $args['hide'] ); if ( 'subscribe' === $hide ) { $this->input_form_action = ''; } elseif ( 'unsubscribe' === $hide ) { $this->input_form_action = ''; } else { // both form input actions $this->input_form_action = ' '; } // if ID is provided, get permalink $action = ''; if ( is_numeric( $args['id'] ) ) { $action = ' action="' . get_permalink( $args['id'] ) . '"'; } elseif ( 'home' === $args['id'] ) { $action = ' action="' . get_site_url() . '"'; } elseif ( 'self' === $args['id'] ) { // Correct for Static front page redirect behaviour if ( 'page' === get_option( 'show_on_front' ) && is_front_page() ) { $post = get_post( get_option( 'page_on_front' ) ); $action = ' action="' . get_option( 'home' ) . '/' . $post->post_name . '/"'; } else { $action = ''; } } elseif ( $this->subscribe2_options['s2page'] > 0 ) { $action = ' action="' . get_permalink( $this->subscribe2_options['s2page'] ) . '"'; } // allow remote setting of email in form if ( isset( $_REQUEST['email'] ) ) { $email = $this->sanitize_email( $_REQUEST['email'] ); } if ( isset( $_REQUEST['email'] ) && false !== $this->validate_email( $email ) ) { $value = $email; } elseif ( 'true' === strtolower( $args['nojs'] ) ) { $value = ''; } else { $value = __( 'Enter email address...', 'subscribe2' ); } // if wrap is true add paragraph html tags $wrap_text = ''; if ( 'true' === strtolower( $args['wrap'] ) ) { $wrap_text = '

'; } // deploy some anti-spam measures $antispam_text = ''; if ( 'true' !== strtolower( $args['noantispam'] ) ) { $antispam_text = ''; } // get remote IP address $remote_ip = $this->get_remote_ip(); // form name if ( 'true' === $args['widget'] ) { $form_name = 's2formwidget'; } else { $form_name = 's2form'; } // build default form if ( 'true' === strtolower( $args['nojs'] ) ) { $this->form = '

'; } else { $this->form = '' . "\r\n"; } $this->s2form = apply_filters( 's2_form', $this->form, $args ); global $user_ID; if ( 0 !== $user_ID ) { return $this->profile; } if ( isset( $_POST['subscribe'] ) || isset( $_POST['unsubscribe'] ) ) { // anti spam sign up measure if ( ( isset( $_POST['firstname'] ) && '' !== $_POST['firstname'] ) || ( isset( $_POST['lastname'] ) && '' !== $_POST['lastname'] ) || ( isset( $_POST['uri'] ) && 'http://' !== $_POST['uri'] ) ) { // looks like some invisible-to-user fields were changed; falsely report success return $this->confirmation_sent; } $validation = apply_filters( 's2_form_submission', true ); if ( true !== $validation ) { return apply_filters( 's2_form_failed_validation', $this->s2form ); } global $wpdb; $this->email = $this->sanitize_email( $_POST['email'] ); if ( false === $this->validate_email( $this->email ) ) { $this->s2form = $this->s2form . $this->not_an_email; } elseif ( $this->is_barred( $this->email ) ) { $this->s2form = $this->s2form . $this->barred_domain; } else { $this->ip = $_POST['ip']; if ( is_int( $this->lockout ) && $this->lockout > 0 ) { $date = gmdate( 'H:i:s.u', $this->lockout ); $ips = $wpdb->get_col( $wpdb->prepare( "SELECT ip FROM $wpdb->subscribe2 WHERE date = CURDATE() AND time > SUBTIME(CURTIME(), %s)", $date ) ); if ( in_array( $this->ip, $ips, true ) ) { return __( 'Slow down, you move too fast.', 'subscribe2' ); } } // does the supplied email belong to a registered user? $check = $wpdb->get_var( $wpdb->prepare( "SELECT user_email FROM $wpdb->users WHERE user_email = %s", $this->email ) ); if ( null !== $check ) { // this is a registered email $this->s2form = $this->please_log_in; } else { // this is not a registered email // what should we do? if ( isset( $_POST['subscribe'] ) ) { // someone is trying to subscribe // lets see if they've tried to subscribe previously if ( '1' !== $this->is_public( $this->email ) ) { // the user is unknown or inactive $this->add( $this->email ); $status = $this->send_confirm( 'add' ); // set a variable to denote that we've already run, and shouldn't run again $this->filtered = 1; if ( $status ) { $this->s2form = $this->confirmation_sent; } else { $this->s2form = $this->error; } } else { // they're already subscribed $this->s2form = $this->already_subscribed; } $this->action = 'subscribe'; } elseif ( isset( $_POST['unsubscribe'] ) ) { // is this email a subscriber? if ( false === $this->is_public( $this->email ) ) { $this->s2form = $this->s2form . $this->not_subscribed; } else { $status = $this->send_confirm( 'del' ); // set a variable to denote that we've already run, and shouldn't run again $this->filtered = 1; if ( $status ) { $this->s2form = $this->confirmation_sent; } else { $this->s2form = $this->error; } } $this->action = 'unsubscribe'; } } } } return $this->s2form; } /** * Display form when deprecated is used */ public function filter( $content = '' ) { if ( '' === $content || ! strstr( $content, '' ) ) { return $content; } return preg_replace( '/(

)?(\n)*(\n)*(<\/p>)?/', do_shortcode( '[subscribe2]' ), $content ); } /** * Overrides the default query when handling a (un)subscription confirmation * This is basically a trick: if the s2 variable is in the query string, just grab the first * static page and override it's contents later with title_filter() */ public function query_filter() { // don't interfere if we've already done our thing if ( 1 === $this->filtered ) { return; } global $wpdb; // brute force Simple Facebook Connect to bypass compatiblity issues $priority = has_filter( 'wp_head', 'sfc_base_meta' ); if ( false !== $priority ) { remove_action( 'wp_head', 'sfc_base_meta', $priority ); } if ( 0 !== $this->subscribe2_options['s2page'] ) { return array( 'page_id' => $this->subscribe2_options['s2page'], ); } else { $id = $wpdb->get_var( "SELECT ID FROM $wpdb->posts WHERE post_type='page' AND post_status='publish' LIMIT 1" ); if ( $id ) { return array( 'page_id' => $id, ); } else { return array( 'showposts' => 1, ); } } } /** * Overrides the page title */ public function title_filter( $title ) { if ( in_the_loop() ) { $code = $_GET['s2']; $action = intval( substr( $code, 0, 1 ) ); if ( 1 === $action ) { return __( 'Subscription Confirmation', 'subscribe2' ); } else { return __( 'Unsubscription Confirmation', 'subscribe2' ); } } else { return $title; } } /** * Confirm request from the link emailed to the user and email the admin */ public function confirm( $content = '' ) { global $wpdb; if ( 1 === $this->filtered && '' !== $this->message ) { return $this->message; } elseif ( 1 === $this->filtered ) { return $content; } $code = $_GET['s2']; $action = substr( $code, 0, 1 ); $hash = substr( $code, 1, 32 ); $id = intval( substr( $code, 33 ) ); if ( $id ) { $this->email = $this->sanitize_email( $this->get_email( $id ) ); if ( ! $this->email || wp_hash( $this->email ) !== $hash ) { return $this->no_such_email; } } else { return $this->no_such_email; } // get current status of email so messages are only sent once per emailed link $current = $this->is_public( $this->email ); if ( '1' === $action ) { // make this subscription active $this->message = apply_filters( 's2_subscribe_confirmed', $this->added ); if ( '1' !== $this->is_public( $this->email ) ) { $this->ip = esc_html( $this->get_remote_ip() ); $this->toggle( $this->email ); if ( 'subs' === $this->subscribe2_options['admin_email'] || 'both' === $this->subscribe2_options['admin_email'] ) { $this->admin_email( 'subscribe' ); } } $this->filtered = 1; } elseif ( '0' === $action ) { // remove this public subscriber $this->message = apply_filters( 's2_unsubscribe_confirmed', $this->deleted ); if ( '0' !== $this->is_public( $this->email ) ) { $this->delete( $this->email ); if ( 'unsubs' === $this->subscribe2_options['admin_email'] || 'both' === $this->subscribe2_options['admin_email'] ) { $this->admin_email( 'unsubscribe' ); } } $this->filtered = 1; } if ( '' !== $this->message ) { return $this->message; } } /** * Prepare and send emails to admins on new subscriptions and unsubsriptions */ public function admin_email( $action ) { if ( ! in_array( $action, array( 'subscribe', 'unsubscribe' ), true ) ) { return false; } ( '' === get_option( 'blogname' ) ) ? $subject = '' : $subject = '[' . stripslashes( html_entity_decode( get_option( 'blogname' ), ENT_QUOTES ) ) . '] '; if ( 'subscribe' === $action ) { $subject .= __( 'New Subscription', 'subscribe2' ); $message = $this->email . ' ' . __( 'subscribed to email notifications!', 'subscribe2' ); } elseif ( 'unsubscribe' === $action ) { $subject .= __( 'New Unsubscription', 'subscribe2' ); $message = $this->email . ' ' . __( 'unsubscribed from email notifications!', 'subscribe2' ); } $subject = html_entity_decode( $subject, ENT_QUOTES ); $role = array( 'fields' => array( 'user_email', ), 'role' => 'administrator', ); $wp_user_query = get_users( $role ); foreach ( $wp_user_query as $user ) { $recipients[] = $user->user_email; } $recipients = apply_filters( 's2_admin_email', $recipients, $action ); $headers = $this->headers(); // send individual emails so we don't reveal admin emails to each other foreach ( $recipients as $recipient ) { $status = wp_mail( $recipient, $subject, $message, $headers ); } } /** * Add hook for Minimeta Widget plugin */ public function add_minimeta() { if ( 0 !== $this->subscribe2_options['s2page'] ) { echo '

' . esc_html__( '[Un]Subscribe to Posts', 'subscribe2' ) . '

' . "\r\n"; } } /** * Check email is not from a barred domain */ public function is_barred( $email = '' ) { if ( '' === $email ) { return false; } list( $user, $domain ) = explode( '@', $email, 2 ); $domain = '@' . $domain; foreach ( preg_split( '/[\s,]+/', $this->subscribe2_options['barred'] ) as $barred_domain ) { if ( false !== strpos( $barred_domain, '!' ) ) { $url = explode( '.', str_replace( '!', '', $barred_domain ) ); $count = count( $url ); // make sure our exploded domain has at least 2 components e.g. yahoo.* if ( $count < 2 ) { continue; } for ( $i = 0; $i < $count; $i++ ) { if ( '*' === $url[ $i ] ) { unset( $url[ $i ] ); } } $new_barred_domain = '@' . strtolower( trim( implode( '.', $url ) ) ); if ( false !== strpos( $barred_domain, '*' ) ) { $new_barred_subdomain = '.' . strtolower( trim( implode( '.', $url ) ) ); if ( false !== stripos( $domain, $new_barred_domain ) || false !== stripos( $domain, $new_barred_subdomain ) ) { return false; } } else { if ( false !== stripos( $domain, $new_barred_domain ) ) { return false; } } } if ( false === strpos( $barred_domain, '!' ) && false !== strpos( $barred_domain, '*' ) ) { // wildcard and explictly allowed checking $url = explode( '.', str_replace( '!', '', $barred_domain ) ); $count = count( $url ); // make sure our exploded domain has at least 2 components e.g. yahoo.* if ( $count < 2 ) { continue; } for ( $i = 0; $i < $count; $i++ ) { if ( '*' === $url[ $i ] ) { unset( $url[ $i ] ); } } $new_barred_domain = '@' . strtolower( trim( implode( '.', $url ) ) ); $new_barred_subdomain = '.' . strtolower( trim( implode( '.', $url ) ) ); if ( false !== stripos( $domain, $new_barred_domain ) || false !== stripos( $domain, $new_barred_subdomain ) ) { return true; } } else { // direct domain string comparison $barred_domain = '@' . $barred_domain; if ( strtolower( $domain ) === strtolower( trim( $barred_domain ) ) ) { return true; } } } return false; } /** * Collect and return the IP address of the remote client machine */ public function get_remote_ip() { $remote_ip = false; // In order of preference, with the best ones for this purpose first $address_headers = array( 'HTTP_CLIENT_IP', 'HTTP_X_FORWARDED_FOR', 'HTTP_X_FORWARDED', 'HTTP_X_CLUSTER_CLIENT_IP', 'HTTP_FORWARDED_FOR', 'HTTP_FORWARDED', 'REMOTE_ADDR', ); foreach ( $address_headers as $header ) { if ( array_key_exists( $header, $_SERVER ) ) { // HTTP_X_FORWARDED_FOR can contain a chain of comma-separated // addresses. The first one is the original client. It can't be // trusted for authenticity, but we don't need to for this purpose. $address_chain = explode( ',', $_SERVER[ $header ] ); $remote_ip = trim( $address_chain[0] ); break; } } return $remote_ip; } /** * Enqueue javascript ip updater code */ public function js_ip_script() { wp_register_script( 's2_ip_updater', S2URL . 'include/s2-ip-updater' . $this->script_debug . '.js', array(), '1.1', true ); wp_enqueue_script( 's2_ip_updater' ); } /** * Add ip updater library to footer */ public function js_ip_library_script() { $args = array( 'format' => 'jsonp', 'callback' => 'getip', ); wp_enqueue_script( 's2_ip_library', add_query_arg( $args, 'https://api.ipify.org' ), array(), S2VERSION, true ); } /** * Reformat WordPress escaped link to IPify library */ public function tag_replace_ampersand( $tag ) { if ( strstr( $tag, 'ipify' ) !== false ) { $tag = str_replace( '&', '&', $tag ); } return $tag; } /* ===== define some variables ===== */ public $profile = ''; }