<?php

[0] Fix | Delete

/**

[1] Fix | Delete

* Created by PhpStorm.

[2] Fix | Delete

* User: gaupoit

[3] Fix | Delete

* Date: 5/6/19

[4] Fix | Delete

* Time: 21:04

[5] Fix | Delete

*/

[6] Fix | Delete

[7] Fix | Delete

if ( ! class_exists( 'PPW_Password_Services' ) ) {

[8] Fix | Delete

class PPW_Password_Services implements PPW_Service_Interfaces {

[9] Fix | Delete

[10] Fix | Delete

/**

[11] Fix | Delete

* @var PPW_Repository_Passwords

[12] Fix | Delete

*/

[13] Fix | Delete

private $passwords_repository;

[14] Fix | Delete

[15] Fix | Delete

/**

[16] Fix | Delete

* PPW_Password_Services constructor.

[17] Fix | Delete

*

[18] Fix | Delete

* @param PPW_Repository_Passwords $repo The password repository class help to interact with DB.

[19] Fix | Delete

*/

[20] Fix | Delete

public function __construct( $repo = null ) {

[21] Fix | Delete

if ( is_null( $repo ) ) {

[22] Fix | Delete

$this->passwords_repository = new PPW_Repository_Passwords();

[23] Fix | Delete

} else {

[24] Fix | Delete

$this->passwords_repository = $repo;

[25] Fix | Delete

}

[26] Fix | Delete

}

[27] Fix | Delete

[28] Fix | Delete

/**

[29] Fix | Delete

* Check content is protected

[30] Fix | Delete

*

[31] Fix | Delete

* @param $post_id

[32] Fix | Delete

*

[33] Fix | Delete

* @return array|bool

[34] Fix | Delete

*/

[35] Fix | Delete

public function is_protected_content( $post_id ) {

[36] Fix | Delete

$result = $this->get_passwords( $post_id );

[37] Fix | Delete

if ( ! $result['has_global_passwords'] && ! $result['has_role_passwords'] ) {

[38] Fix | Delete

return false;

[39] Fix | Delete

}

[40] Fix | Delete

[41] Fix | Delete

return $result;

[42] Fix | Delete

}

[43] Fix | Delete

[44] Fix | Delete

/**

[45] Fix | Delete

* Check password is valid

[46] Fix | Delete

*

[47] Fix | Delete

* @param $password

[48] Fix | Delete

* @param $post_id

[49] Fix | Delete

* @param $current_roles

[50] Fix | Delete

*

[51] Fix | Delete

* @return bool

[52] Fix | Delete

*/

[53] Fix | Delete

public function is_valid_password( $password, $post_id, $current_roles ) {

[54] Fix | Delete

if ( $this->check_password_type_is_global( $post_id, $password ) ) {

[55] Fix | Delete

$this->set_cookie_bypass_cache( $password . $post_id, PPW_Constants::COOKIE_NAME . $post_id );

[56] Fix | Delete

[57] Fix | Delete

return true;

[58] Fix | Delete

}

[59] Fix | Delete

[60] Fix | Delete

if ( ! is_user_logged_in() ) {

[61] Fix | Delete

return false;

[62] Fix | Delete

}

[63] Fix | Delete

[64] Fix | Delete

$role_meta = get_post_meta( $post_id, PPW_Constants::POST_PROTECTION_ROLES, true );

[65] Fix | Delete

$protected_roles = ppw_free_fix_serialize_data( $role_meta );

[66] Fix | Delete

[67] Fix | Delete

if ( empty( $protected_roles ) ) {

[68] Fix | Delete

return false;

[69] Fix | Delete

}

[70] Fix | Delete

[71] Fix | Delete

return $this->check_password_type_is_roles( $current_roles, $protected_roles, $password, $post_id );

[72] Fix | Delete

}

[73] Fix | Delete

[74] Fix | Delete

/**

[75] Fix | Delete

* Set password to cookie

[76] Fix | Delete

*

[77] Fix | Delete

* @param $password

[78] Fix | Delete

* @param $cookie_name

[79] Fix | Delete

*/

[80] Fix | Delete

public function set_password_to_cookie( $password, $cookie_name ) {

[81] Fix | Delete

$password_hashed = wp_hash_password( $password );

[82] Fix | Delete

$expire = apply_filters( PPW_Constants::HOOK_COOKIE_EXPIRED, time() + 7 * DAY_IN_SECONDS );

[83] Fix | Delete

$password_cookie_expired = ppw_core_get_setting_type_string( PPW_Constants::COOKIE_EXPIRED );

[84] Fix | Delete

if ( ! empty( $password_cookie_expired ) ) {

[85] Fix | Delete

$time = explode( ' ', $password_cookie_expired )[0];

[86] Fix | Delete

$unit = ppw_core_get_unit_time( $password_cookie_expired );

[87] Fix | Delete

if ( 0 !== $unit ) {

[88] Fix | Delete

$expire = apply_filters( PPW_Constants::HOOK_COOKIE_EXPIRED, time() + (int) $time * $unit );

[89] Fix | Delete

}

[90] Fix | Delete

}

[91] Fix | Delete

[92] Fix | Delete

$referer = wp_get_referer();

[93] Fix | Delete

if ( $referer ) {

[94] Fix | Delete

$secure = ( 'https' === parse_url( $referer, PHP_URL_SCHEME ) );

[95] Fix | Delete

} else {

[96] Fix | Delete

$secure = false;

[97] Fix | Delete

}

[98] Fix | Delete

[99] Fix | Delete

$expire = apply_filters( 'ppw_cookie_expire', $expire );

[100] Fix | Delete

$expire = apply_filters( 'ppwp_cookie_expiry', $expire );

[101] Fix | Delete

return setcookie( $cookie_name . COOKIEHASH, $password_hashed, $expire, COOKIEPATH, COOKIE_DOMAIN, $secure );

[102] Fix | Delete

}

[103] Fix | Delete

[104] Fix | Delete

public function generate_cookie_data( $cookie_name, $password ) {

[105] Fix | Delete

$password_hashed = wp_hash_password( $password );

[106] Fix | Delete

$expire = apply_filters( PPW_Constants::HOOK_COOKIE_EXPIRED, time() + 7 * DAY_IN_SECONDS );

[107] Fix | Delete

$password_cookie_expired = ppw_core_get_setting_type_string( PPW_Constants::COOKIE_EXPIRED );

[108] Fix | Delete

if ( ! empty( $password_cookie_expired ) ) {

[109] Fix | Delete

$time = explode( ' ', $password_cookie_expired )[0];

[110] Fix | Delete

$unit = ppw_core_get_unit_time( $password_cookie_expired );

[111] Fix | Delete

if ( 0 !== $unit ) {

[112] Fix | Delete

$expire = apply_filters( PPW_Constants::HOOK_COOKIE_EXPIRED, time() + (int) $time * $unit );

[113] Fix | Delete

}

[114] Fix | Delete

}

[115] Fix | Delete

[116] Fix | Delete

$referer = wp_get_referer();

[117] Fix | Delete

if ( $referer ) {

[118] Fix | Delete

$secure = ( 'https' === parse_url( $referer, PHP_URL_SCHEME ) );

[119] Fix | Delete

} else {

[120] Fix | Delete

$secure = false;

[121] Fix | Delete

}

[122] Fix | Delete

[123] Fix | Delete

$expire = apply_filters( 'ppw_cookie_expire', $expire );

[124] Fix | Delete

$expire = apply_filters( 'ppwp_cookie_expiry', $expire );

[125] Fix | Delete

[126] Fix | Delete

return array(

[127] Fix | Delete

'name' => $cookie_name . COOKIEHASH,

[128] Fix | Delete

'value' => $password_hashed,

[129] Fix | Delete

'expire' => $expire,

[130] Fix | Delete

);

[131] Fix | Delete

}

[132] Fix | Delete

[133] Fix | Delete

/**

[134] Fix | Delete

* Set password to cookie with case cookie name the same WP to bypass cache

[135] Fix | Delete

*

[136] Fix | Delete

* @param string $cookie_value The value of the cookie.

[137] Fix | Delete

* @param string $cookie_name The name of the cookie.

[138] Fix | Delete

*/

[139] Fix | Delete

public function set_cookie_bypass_cache( $cookie_value, $cookie_name ) {

[140] Fix | Delete

// Bypass Caching plugin with WordPress cookie.

[141] Fix | Delete

$this->set_password_to_cookie( $cookie_value, PPW_Constants::WP_POST_PASS );

[142] Fix | Delete

$this->set_password_to_cookie( $cookie_value, $cookie_name );

[143] Fix | Delete

}

[144] Fix | Delete

[145] Fix | Delete

/**

[146] Fix | Delete

* Check whether the current cookie is valid.

[147] Fix | Delete

*

[148] Fix | Delete

* @param $post_id

[149] Fix | Delete

* @param $passwords

[150] Fix | Delete

* @param $cookie_name

[151] Fix | Delete

*

[152] Fix | Delete

* @return bool

[153] Fix | Delete

*/

[154] Fix | Delete

public function is_valid_cookie( $post_id, $passwords, $cookie_name ) {

[155] Fix | Delete

$_cookie = wp_unslash( $_COOKIE );

[156] Fix | Delete

if ( ! isset( $_cookie[ $cookie_name . $post_id . COOKIEHASH ] ) ) {

[157] Fix | Delete

return false;

[158] Fix | Delete

}

[159] Fix | Delete

[160] Fix | Delete

$cookie = sanitize_text_field( $_cookie[ $cookie_name . $post_id . COOKIEHASH ] );

[161] Fix | Delete

$hash = wp_unslash( $cookie );

[162] Fix | Delete

$checked = apply_filters( 'ppw_check_md5_format', true );

[163] Fix | Delete

if ( $checked && 0 !== strpos( $hash, '$P$B' ) ) {

[164] Fix | Delete

return false;

[165] Fix | Delete

}

[166] Fix | Delete

[167] Fix | Delete

$roles = ppw_core_get_current_role();

[168] Fix | Delete

foreach ( $passwords as $password ) {

[169] Fix | Delete

if ( wp_check_password( $password . $post_id, $hash ) ) {

[170] Fix | Delete

return true;

[171] Fix | Delete

}

[172] Fix | Delete

[173] Fix | Delete

foreach ( $roles as $role ) {

[174] Fix | Delete

if ( wp_check_password( $password . $role . $post_id, $hash ) ) {

[175] Fix | Delete

return true;

[176] Fix | Delete

}

[177] Fix | Delete

}

[178] Fix | Delete

}

[179] Fix | Delete

[180] Fix | Delete

return false;

[181] Fix | Delete

}

[182] Fix | Delete

[183] Fix | Delete

/**

[184] Fix | Delete

* Redirect after enter password

[185] Fix | Delete

*

[186] Fix | Delete

* @param bool $is_valid Is entered password valid.

[187] Fix | Delete

*/

[188] Fix | Delete

public function handle_redirect_after_enter_password( $is_valid ) {

[189] Fix | Delete

// Refactor since 1.4.2.

[190] Fix | Delete

// 1. Clean code

[191] Fix | Delete

// 2. Easier to write UT.

[192] Fix | Delete

$redirect_url = $this->get_redirect_url( $is_valid );

[193] Fix | Delete

wp_safe_redirect( $redirect_url );

[194] Fix | Delete

exit();

[195] Fix | Delete

}

[196] Fix | Delete

[197] Fix | Delete

/**

[198] Fix | Delete

* Get redirect URL after user entered password.

[199] Fix | Delete

*

[200] Fix | Delete

* @param bool $is_valid Is password valid.

[201] Fix | Delete

*

[202] Fix | Delete

* @return string

[203] Fix | Delete

*/

[204] Fix | Delete

public function get_redirect_url( $is_valid ) {

[205] Fix | Delete

$referrer_url = $this->get_referer_url();

[206] Fix | Delete

$params_in_referer = ppw_core_get_param_in_url( $referrer_url );

[207] Fix | Delete

[208] Fix | Delete

if ( $is_valid ) {

[209] Fix | Delete

$referrer_url = apply_filters(

[210] Fix | Delete

'ppwp_ppf_referrer_url',

[211] Fix | Delete

$referrer_url,

[212] Fix | Delete

array(

[213] Fix | Delete

'is_valid' => $is_valid,

[214] Fix | Delete

'parameters' => $params_in_referer,

[215] Fix | Delete

)

[216] Fix | Delete

);

[217] Fix | Delete

[218] Fix | Delete

$url_redirect = preg_replace( '/[&?]' . PPW_Constants::WRONG_PASSWORD_PARAM . '=true/', '', $referrer_url );

[219] Fix | Delete

$params = apply_filters(

[220] Fix | Delete

PPW_Constants::HOOK_PARAM_PASSWORD_SUCCESS,

[221] Fix | Delete

array(

[222] Fix | Delete

'name' => PPW_Constants::PASSWORD_PARAM_NAME,

[223] Fix | Delete

'value' => PPW_Constants::PASSWORD_PARAM_VALUE,

[224] Fix | Delete

)

[225] Fix | Delete

);

[226] Fix | Delete

[227] Fix | Delete

if ( array_key_exists( $params['name'], $params_in_referer ) && '1' === $params_in_referer[ $params['name'] ] ) {

[228] Fix | Delete

return $url_redirect;

[229] Fix | Delete

}

[230] Fix | Delete

[231] Fix | Delete

$params_in_redirect = ppw_core_get_param_in_url( $url_redirect );

[232] Fix | Delete

$new_param = empty( $params_in_redirect ) ? '?' . $params['name'] . '=' . $params['value'] : '&' . $params['name'] . '=' . $params['value'];

[233] Fix | Delete

[234] Fix | Delete

$new_param = apply_filters(

[235] Fix | Delete

'ppwp_ppf_redirect_url_param_before_return_content',

[236] Fix | Delete

$new_param

[237] Fix | Delete

);

[238] Fix | Delete

[239] Fix | Delete

return apply_filters( 'ppwp_ppf_redirect_url_before_return_content', $url_redirect . $new_param );

[240] Fix | Delete

}

[241] Fix | Delete

[242] Fix | Delete

if ( array_key_exists( PPW_Constants::WRONG_PASSWORD_PARAM, $params_in_referer ) && 'true' === $params_in_referer[ PPW_Constants::WRONG_PASSWORD_PARAM ] ) {

[243] Fix | Delete

return apply_filters(

[244] Fix | Delete

'ppwp_ppf_redirect_url',

[245] Fix | Delete

$referrer_url,

[246] Fix | Delete

array(

[247] Fix | Delete

'is_valid' => $is_valid,

[248] Fix | Delete

'parameters' => $params_in_referer,

[249] Fix | Delete

)

[250] Fix | Delete

);

[251] Fix | Delete

}

[252] Fix | Delete

[253] Fix | Delete

$new_param = empty( $params_in_referer ) ? '?' . PPW_Constants::WRONG_PASSWORD_PARAM . '=true' : '&' . PPW_Constants::WRONG_PASSWORD_PARAM . '=true';

[254] Fix | Delete

[255] Fix | Delete

return apply_filters(

[256] Fix | Delete

'ppwp_ppf_redirect_url',

[257] Fix | Delete

$referrer_url . $new_param,

[258] Fix | Delete

array(

[259] Fix | Delete

'is_valid' => $is_valid,

[260] Fix | Delete

'parameters' => $params_in_referer,

[261] Fix | Delete

)

[262] Fix | Delete

);

[263] Fix | Delete

}

[264] Fix | Delete

[265] Fix | Delete

/**

[266] Fix | Delete

* Get referer URL from HTTP Referrer or callback URL in post form action URL.

[267] Fix | Delete

*

[268] Fix | Delete

* @return mixed False if cannot find the referer URL.

[269] Fix | Delete

*/

[270] Fix | Delete

public function get_referer_url() {

[271] Fix | Delete

$referrer_url = wp_get_referer();

[272] Fix | Delete

$using_cb = false === $referrer_url;

[273] Fix | Delete

$using_cb = apply_filters( 'ppw_use_callback_url', $using_cb );

[274] Fix | Delete

if ( $using_cb ) {

[275] Fix | Delete

// We need to get the callback URL in the password form action URL.

[276] Fix | Delete

// in case Referrer-Policy is set no-referrer.

[277] Fix | Delete

$cb_param = PPW_Constants::CALL_BACK_URL_PARAM;

[278] Fix | Delete

if ( isset( $_GET[ $cb_param ] ) ) { // phpcs:ignore WordPress.Security.NonceVerification.Recommended -- We no need to handle nonce verfication for this one because already verify in parent function.

[279] Fix | Delete

$referrer_url = rawurldecode( esc_url_raw( wp_unslash( $_GET[ $cb_param ] ) ) ); // phpcs:ignore WordPress.Security.NonceVerification.Recommended -- We no need to handle nonce verfication for this one because already verify in parent function.

[280] Fix | Delete

}

[281] Fix | Delete

}

[282] Fix | Delete

[283] Fix | Delete

// If doesn't have callback URL and no-referer then return to home page.

[284] Fix | Delete

if ( false === $referrer_url ) {

[285] Fix | Delete

global $wp;

[286] Fix | Delete

$referrer_url = home_url( $wp->request );

[287] Fix | Delete

}

[288] Fix | Delete

[289] Fix | Delete

return $referrer_url;

[290] Fix | Delete

}

[291] Fix | Delete

[292] Fix | Delete

/**

[293] Fix | Delete

* Handle and check condition before create new password

[294] Fix | Delete

*

[295] Fix | Delete

* @param int|string $id The post ID.

[296] Fix | Delete

* @param string $role_selected The role user select on client.

[297] Fix | Delete

* @param array $new_global_passwords List global passwords user enter on client.

[298] Fix | Delete

* @param string $new_role_password Role password user enter on client.

[299] Fix | Delete

*

[300] Fix | Delete

* @return array|mixed

[301] Fix | Delete

*/

[302] Fix | Delete

public function create_new_password( $id, $role_selected, $new_global_passwords, $new_role_password ) {

[303] Fix | Delete

$post_meta = get_post_meta( $id, PPW_Constants::POST_PROTECTION_ROLES, true );

[304] Fix | Delete

$current_roles_password = ppw_free_fix_serialize_data( $post_meta );

[305] Fix | Delete

$current_global_passwords = get_post_meta( $id, PPW_Constants::GLOBAL_PASSWORDS, true );

[306] Fix | Delete

if ( 'global' === $role_selected ) {

[307] Fix | Delete

return $this->create_password_type_global( $id, $new_global_passwords, $current_global_passwords, $current_roles_password, $role_selected );

[308] Fix | Delete

}

[309] Fix | Delete

[310] Fix | Delete

return $this->create_password_type_role( $id, $role_selected, $new_role_password, $current_global_passwords, $current_roles_password );

[311] Fix | Delete

}

[312] Fix | Delete

[313] Fix | Delete

/**

[314] Fix | Delete

* Check condition before create new password type global

[315] Fix | Delete

*

[316] Fix | Delete

* @param int|string $id The post ID.

[317] Fix | Delete

* @param array $new_global_passwords List global passwords user enter on client.

[318] Fix | Delete

* @param array $current_global_passwords List all current global passwords.

[319] Fix | Delete

* @param array $current_roles_password List all current role passwords.

[320] Fix | Delete

* @param string $role_selected The role user select on client.

[321] Fix | Delete

*

[322] Fix | Delete

* @return mixed

[323] Fix | Delete

*/

[324] Fix | Delete

public function create_password_type_global( $id, $new_global_passwords, $current_global_passwords, $current_roles_password, $role_selected ) {

[325] Fix | Delete

// Validate global password(check bad request).

[326] Fix | Delete

if ( $this->global_passwords_is_bad_request( $new_global_passwords ) ) {

[327] Fix | Delete

wp_send_json(

[328] Fix | Delete

array(

[329] Fix | Delete

'is_error' => true,

[330] Fix | Delete

'message' => PPW_Constants::BAD_REQUEST_MESSAGE,

[331] Fix | Delete

),

[332] Fix | Delete

400

[333] Fix | Delete

);

[334] Fix | Delete

wp_die();

[335] Fix | Delete

}

[336] Fix | Delete

[337] Fix | Delete

// Validate global password(empty and duplicate).

[338] Fix | Delete

ppw_free_validate_password_type_global( $new_global_passwords, $current_global_passwords, $current_roles_password );

[339] Fix | Delete

update_post_meta( $id, PPW_Constants::GLOBAL_PASSWORDS, $new_global_passwords );

[340] Fix | Delete

[341] Fix | Delete

// Clear cache for Cache plugin.

[342] Fix | Delete

ppw_core_clear_cache_by_id( $id );

[343] Fix | Delete

[344] Fix | Delete

/*

[345] Fix | Delete

// Handle cache for page/post have password type is global with Super Cache plugin.

[346] Fix | Delete

$free_cache = new PPW_Cache_Services();

[347] Fix | Delete

$free_cache->handle_cache_for_password_type_global_with_super_cache( $new_global_passwords, $id, $current_roles_password );

[348] Fix | Delete

*/

[349] Fix | Delete

$current_roles_password[ $role_selected ] = implode( "\n", $new_global_passwords );

[350] Fix | Delete

[351] Fix | Delete

return $current_roles_password;

[352] Fix | Delete

}

[353] Fix | Delete

[354] Fix | Delete

/**

[355] Fix | Delete

* Check bad request with data type is global passwords

[356] Fix | Delete

*

[357] Fix | Delete

* @param array $passwords Global passwords.

[358] Fix | Delete

*

[359] Fix | Delete

* @return bool

[360] Fix | Delete

*/

[361] Fix | Delete

private function global_passwords_is_bad_request( $passwords ) {

[362] Fix | Delete

foreach ( $passwords as $password ) {

[363] Fix | Delete

if ( strpos( $password, ' ' ) !== false ) {

[364] Fix | Delete

return true;

[365] Fix | Delete

}

[366] Fix | Delete

}

[367] Fix | Delete

[368] Fix | Delete

// Check element unique in array.

[369] Fix | Delete

return count( $passwords ) !== count( array_unique( $passwords ) );

[370] Fix | Delete

}

[371] Fix | Delete

[372] Fix | Delete

/**

[373] Fix | Delete

* Check condition before create new password type role

[374] Fix | Delete

*

[375] Fix | Delete

* @param int|string $id The post ID.

[376] Fix | Delete

* @param string $role_selected The role user select on client.

[377] Fix | Delete

* @param string $new_role_password Role password user enter on client.

[378] Fix | Delete

* @param array $current_global_passwords List all current global passwords.

[379] Fix | Delete

* @param array $current_roles_password List all current role passwords.

[380] Fix | Delete

*

[381] Fix | Delete

* @return mixed

[382] Fix | Delete

*/

[383] Fix | Delete

public function create_password_type_role( $id, $role_selected, $new_role_password, $current_global_passwords, $current_roles_password ) {

[384] Fix | Delete

// Validate role password(check bad request).

[385] Fix | Delete

if ( $this->role_password_is_bad_request( $new_role_password ) ) {

[386] Fix | Delete

wp_send_json(

[387] Fix | Delete

array(

[388] Fix | Delete

'is_error' => true,

[389] Fix | Delete

'message' => PPW_Constants::BAD_REQUEST_MESSAGE,

[390] Fix | Delete

),

[391] Fix | Delete

400

[392] Fix | Delete

);

[393] Fix | Delete

wp_die();

[394] Fix | Delete

}

[395] Fix | Delete

[396] Fix | Delete

// Validate role password(empty and duplicate).

[397] Fix | Delete

ppw_free_validate_password_type_role( $role_selected, $new_role_password, $current_global_passwords, $current_roles_password );

[398] Fix | Delete

$current_roles_password[ $role_selected ] = $new_role_password;

[399] Fix | Delete

delete_post_meta( $id, PPW_Constants::POST_PROTECTION_ROLES );

[400] Fix | Delete

add_post_meta( $id, PPW_Constants::POST_PROTECTION_ROLES, $current_roles_password );

[401] Fix | Delete

[402] Fix | Delete

// Clear cache for Cache plugin.

[403] Fix | Delete

ppw_core_clear_cache_by_id( $id );

[404] Fix | Delete

[405] Fix | Delete

/*

[406] Fix | Delete

// Handle cache for page/post have password type is role with Super Cache plugin.

[407] Fix | Delete

$free_cache = new PPW_Cache_Services();

[408] Fix | Delete

$free_cache->handle_cache_for_password_type_role_with_super_cache( $new_role_password, $id, $current_roles_password, $current_global_passwords );

[409] Fix | Delete

*/

[410] Fix | Delete

if ( ! empty( $current_global_passwords ) ) {

[411] Fix | Delete

$current_roles_password['global'] = implode( "\n", $current_global_passwords );

[412] Fix | Delete

}

[413] Fix | Delete

[414] Fix | Delete

return $current_roles_password;

[415] Fix | Delete

}

[416] Fix | Delete

[417] Fix | Delete

/**

[418] Fix | Delete

* Check bad request with data type is role password

[419] Fix | Delete

*

[420] Fix | Delete

* @param string $password Role password.

[421] Fix | Delete

*

[422] Fix | Delete

* @return bool

[423] Fix | Delete

*/

[424] Fix | Delete

private function role_password_is_bad_request( $password ) {

[425] Fix | Delete

return strpos( $password, ' ' ) !== false;

[426] Fix | Delete

}

[427] Fix | Delete

[428] Fix | Delete

/**

[429] Fix | Delete

* Password is empty with not 0.

[430] Fix | Delete

*

[431] Fix | Delete

* @param string $pwd Password.

[432] Fix | Delete

*

[433] Fix | Delete

* @return bool

[434] Fix | Delete

*/

[435] Fix | Delete

public function has_no_empty_password( $pwd ) {

[436] Fix | Delete

return ! empty( $pwd ) || '0' === $pwd;

[437] Fix | Delete

}

[438] Fix | Delete

[439] Fix | Delete

/**

[440] Fix | Delete

* Get all passwords

[441] Fix | Delete

*

[442] Fix | Delete

* @param int|string $post_id The post ID.

[443] Fix | Delete

*

[444] Fix | Delete

* @return array

[445] Fix | Delete

*/

[446] Fix | Delete

public function get_passwords( $post_id ) {

[447] Fix | Delete

// 1. Get all passwords.

[448] Fix | Delete

$global_passwords = get_post_meta( $post_id, PPW_Constants::GLOBAL_PASSWORDS, true );

[449] Fix | Delete

$global_passwords = ! empty( $global_passwords ) ? $global_passwords : array();

[450] Fix | Delete

$has_global_passwords = ! empty( $global_passwords ) && is_array( $global_passwords );

[451] Fix | Delete

$raw_data = get_post_meta( $post_id, PPW_Constants::POST_PROTECTION_ROLES, true );

[452] Fix | Delete

$protected_roles = ppw_free_fix_serialize_data( $raw_data );

[453] Fix | Delete

[454] Fix | Delete

$filtered_protected_roles = array_filter(

[455] Fix | Delete

$protected_roles,

[456] Fix | Delete

function ( $pass ) {

[457] Fix | Delete

return $this->has_no_empty_password( $pass );

[458] Fix | Delete

}

[459] Fix | Delete

);

[460] Fix | Delete

$has_role_passwords = ! empty( $filtered_protected_roles );

[461] Fix | Delete

$has_current_role_password = false;

[462] Fix | Delete

if ( $has_role_passwords ) {

[463] Fix | Delete

$roles = ppw_core_get_current_role();

[464] Fix | Delete

foreach ( $roles as $role ) {

[465] Fix | Delete

if ( array_key_exists( $role, $filtered_protected_roles ) ) {

[466] Fix | Delete

$has_current_role_password = true;

[467] Fix | Delete

array_push( $global_passwords, $protected_roles[ $role ] );

[468] Fix | Delete

}

[469] Fix | Delete

}

[470] Fix | Delete

}

[471] Fix | Delete

[472] Fix | Delete

return array(

[473] Fix | Delete

'passwords' => $global_passwords,

[474] Fix | Delete

'has_role_passwords' => $has_role_passwords,

[475] Fix | Delete

'has_current_role_password' => $has_current_role_password,

[476] Fix | Delete

'has_global_passwords' => $has_global_passwords,

[477] Fix | Delete

);

[478] Fix | Delete

}

[479] Fix | Delete

[480] Fix | Delete

/**

[481] Fix | Delete

* Check password type is global

[482] Fix | Delete

*

[483] Fix | Delete

* @param $post_id

[484] Fix | Delete

* @param $password

[485] Fix | Delete

*

[486] Fix | Delete

* @return bool

[487] Fix | Delete

*/

[488] Fix | Delete

public function check_password_type_is_global( $post_id, $password ) {

[489] Fix | Delete

$global_passwords = get_post_meta( $post_id, PPW_Constants::GLOBAL_PASSWORDS, true );

[490] Fix | Delete

if ( empty( $global_passwords ) || ! is_array( $global_passwords ) ) {

[491] Fix | Delete

return false;

[492] Fix | Delete

}

[493] Fix | Delete

[494] Fix | Delete

foreach ( $global_passwords as $pass ) {

[495] Fix | Delete

if ( $password === $pass ) {

[496] Fix | Delete

return true;

[497] Fix | Delete

}

[498] Fix | Delete

}

[499] Fix | Delete