rahulsprajapati /
user-approval
| 1 | <?php |
||
| 2 | /** |
||
| 3 | * User_Approval Namespace. |
||
| 4 | * |
||
| 5 | * @package user-approval |
||
| 6 | */ |
||
| 7 | |||
| 8 | namespace User_Approval; |
||
| 9 | |||
| 10 | use WP_User; |
||
| 11 | |||
| 12 | const STATUS_PRE_APPROVED = 'pre-approved'; |
||
| 13 | const STATUS_PENDING = 'pending'; |
||
| 14 | const STATUS_APPROVED = 'approved'; |
||
| 15 | const STATUS_BLOCKED = 'blocked'; |
||
| 16 | const STATUS_META_KEY = 'aj_user_status'; |
||
| 17 | const STATUS_APPROVED_NONCE = 'aj-user-approve'; |
||
| 18 | 1 | const STATUS_BLOCKED_NONCE = 'aj-user-blocked'; |
|
| 19 | 1 | ||
| 20 | /** |
||
| 21 | * Hook up all the filters and actions. |
||
| 22 | */ |
||
| 23 | function bootstrap() { |
||
| 24 | |||
| 25 | // Load text-domain for language translation. |
||
| 26 | add_action( 'plugins_loaded', __NAMESPACE__ . '\\load_textdomain' ); |
||
| 27 | } |
||
| 28 | |||
| 29 | /** |
||
| 30 | * Load plugin text domain for text translation. |
||
| 31 | * |
||
| 32 | * @codeCoverageIgnore |
||
| 33 | */ |
||
| 34 | function load_textdomain() { |
||
| 35 | |||
| 36 | load_plugin_textdomain( |
||
| 37 | 'user-approval', |
||
| 38 | false, |
||
| 39 | basename( plugin_dir_url( __DIR__ ) ) . '/languages' |
||
| 40 | ); |
||
| 41 | 8 | } |
|
| 42 | |||
| 43 | /** |
||
| 44 | * Get default user role to which new registered user will be assigned. |
||
| 45 | * |
||
| 46 | * @return string |
||
| 47 | */ |
||
| 48 | function get_default_user_role() { |
||
| 49 | return apply_filters( 'user_approval_default_user_role', get_option( 'default_role' ) ); |
||
| 50 | } |
||
| 51 | |||
| 52 | /** |
||
| 53 | * Check if given user is with default user role which need user status verification. |
||
| 54 | 2 | * |
|
| 55 | 2 | * @param WP_User $user WP_User object. |
|
| 56 | * |
||
| 57 | * @return bool |
||
| 58 | */ |
||
| 59 | function is_default_role_user( $user ) { |
||
| 60 | |||
| 61 | return ( |
||
| 62 | $user instanceof WP_User |
||
| 63 | && in_array( get_default_user_role(), $user->roles, true ) |
||
| 64 | ); |
||
| 65 | 3 | } |
|
| 66 | |||
| 67 | 3 | /** |
|
| 68 | * Get all user role names array. |
||
| 69 | * |
||
| 70 | * @return array|string[] |
||
| 71 | */ |
||
| 72 | function get_role_names() { |
||
| 73 | $user_roles_obj = wp_roles(); |
||
| 74 | |||
| 75 | return $user_roles_obj->role_names ?? []; |
||
| 76 | 2 | } |
|
| 77 | |||
| 78 | /** |
||
| 79 | 2 | * Get user role which should be pre-approved. |
|
| 80 | * |
||
| 81 | 2 | * @return array |
|
| 82 | */ |
||
| 83 | function get_pre_approved_user_roles() { |
||
| 84 | $user_roles = get_role_names(); |
||
| 85 | |||
| 86 | // Remove default role. |
||
| 87 | unset( $user_roles[ get_default_user_role() ] ); |
||
| 88 | |||
| 89 | return $user_roles; |
||
| 90 | } |
||
| 91 | |||
| 92 | /** |
||
| 93 | * Get all user status. |
||
| 94 | 5 | * |
|
| 95 | 5 | * @param string $status Status key to get label of respective user status. |
|
| 96 | 5 | * |
|
| 97 | 5 | * @return string|array |
|
| 98 | */ |
||
| 99 | function get_user_status( $status = '' ) { |
||
| 100 | 5 | ||
| 101 | 4 | $user_status = [ |
|
| 102 | STATUS_PRE_APPROVED => esc_html__( 'Pre Approved', 'user-approval' ), |
||
| 103 | STATUS_PENDING => esc_html__( 'Pending', 'user-approval' ), |
||
| 104 | 2 | STATUS_APPROVED => esc_html__( 'Approved', 'user-approval' ), |
|
| 105 | STATUS_BLOCKED => esc_html__( 'Blocked', 'user-approval' ), |
||
| 106 | ]; |
||
| 107 | |||
| 108 | if ( isset( $user_status[ $status ] ) ) { |
||
| 109 | return $user_status[ $status ]; |
||
| 110 | } |
||
| 111 | |||
| 112 | return empty( $status ) ? $user_status[ STATUS_PENDING ] : $user_status; |
||
| 113 | } |
||
| 114 | |||
| 115 | /** |
||
| 116 | * This method is an improved version of PHP's filter_input() and |
||
| 117 | * works well on PHP Cli as well which PHP default method does not. |
||
| 118 | * |
||
| 119 | * @param int $type One of INPUT_GET, INPUT_POST, INPUT_COOKIE, INPUT_SERVER, or INPUT_ENV. |
||
| 120 | * @param string $variable_name Name of a variable to get. |
||
| 121 | * @param int $filter The ID of the filter to apply. |
||
| 122 | * @param mixed $options filter to apply. |
||
| 123 | * |
||
| 124 | * @codeCoverageIgnore |
||
| 125 | * |
||
| 126 | * @return mixed Value of the requested variable on success, FALSE if the filter fails, or NULL if the variable_name variable is not set. |
||
| 127 | */ |
||
| 128 | function filter_input( $type, $variable_name, $filter = FILTER_DEFAULT, $options = null ) { |
||
| 129 | |||
| 130 | if ( php_sapi_name() !== 'cli' ) { |
||
| 131 | /* |
||
| 132 | * Code is not running on PHP Cli and we are in clear. |
||
| 133 | * Use the PHP method and bail out. |
||
| 134 | */ |
||
| 135 | switch ( $filter ) { |
||
| 136 | case FILTER_SANITIZE_STRING: |
||
| 137 | $sanitized_variable = sanitize_text_field( \filter_input( $type, $variable_name, $filter ) ); |
||
| 138 | break; |
||
| 139 | default: |
||
| 140 | $sanitized_variable = \filter_input( $type, $variable_name, $filter, $options ); |
||
| 141 | break; |
||
| 142 | } |
||
| 143 | |||
| 144 | return $sanitized_variable; |
||
| 145 | } |
||
| 146 | |||
| 147 | $allowed_html_tags = wp_kses_allowed_html( 'post' ); |
||
| 148 | |||
| 149 | /** |
||
| 150 | * Marking the switch() block below to be ignored by PHPCS |
||
| 151 | * because PHPCS squawks on using superglobals like $_POST or $_GET |
||
| 152 | * directly but it can't be helped in this case as this code |
||
| 153 | * is running on Cli. |
||
| 154 | */ |
||
| 155 | |||
| 156 | // @codingStandardsIgnoreStart |
||
| 157 | switch ( $type ) { |
||
| 158 | |||
| 159 | case INPUT_GET: |
||
| 160 | if ( ! isset( $_GET[ $variable_name ] ) ) { |
||
| 161 | return null; |
||
| 162 | } |
||
| 163 | $input = wp_kses( $_GET[ $variable_name ], $allowed_html_tags ); |
||
| 164 | break; |
||
| 165 | |||
| 166 | case INPUT_POST: |
||
| 167 | if ( ! isset( $_POST[ $variable_name ] ) ) { |
||
| 168 | return null; |
||
| 169 | } |
||
| 170 | |||
| 171 | $input = wp_kses( $_POST[ $variable_name ], $allowed_html_tags ); |
||
| 172 | break; |
||
| 173 | |||
| 174 | case INPUT_COOKIE: |
||
| 175 | if ( ! isset( $_COOKIE[ $variable_name ] ) ) { |
||
| 176 | return null; |
||
| 177 | } |
||
| 178 | $input = wp_kses( $_COOKIE[ $variable_name ], $allowed_html_tags ); |
||
| 179 | break; |
||
| 180 | |||
| 181 | case INPUT_SERVER: |
||
| 182 | if ( ! isset( $_SERVER[ $variable_name ] ) ) { |
||
| 183 | return null; |
||
| 184 | } |
||
| 185 | |||
| 186 | $input = wp_kses( $_SERVER[ $variable_name ], $allowed_html_tags ); |
||
| 187 | break; |
||
| 188 | |||
| 189 | case INPUT_ENV: |
||
| 190 | if ( ! isset( $_ENV[ $variable_name ] ) ) { |
||
| 191 | return null; |
||
| 192 | } |
||
| 193 | |||
| 194 | $input = wp_kses( $_ENV[ $variable_name ], $allowed_html_tags ); |
||
| 195 | break; |
||
| 196 | |||
| 197 | default: |
||
| 198 | return null; |
||
| 199 | break; |
||
|
0 ignored issues
–
show
|
|||
| 200 | |||
| 201 | } |
||
| 202 | // @codingStandardsIgnoreEnd​ |
||
| 203 | |||
| 204 | return filter_var( $input, $filter ); |
||
| 205 | } |
||
| 206 |
The
breakstatement is not necessary if it is preceded for example by areturnstatement:If you would like to keep this construct to be consistent with other
casestatements, you can safely mark this issue as a false-positive.