Your IP : 216.73.217.143
<?php
/**
* @version 1.0
* @package Secure Downloads
* @subpackage Support Functions
* @category Functions
*
* @author wpdevelop
* @link https://oplugins.com/
* @email info@oplugins.com
*
* @modified 29.09.2015
*/
if ( ! defined( 'ABSPATH' ) ) exit; // Exit if accessed directly
////////////////////////////////////////////////////////////////////////////////
// Formatting functions
////////////////////////////////////////////////////////////////////////////////
/**
* Sanitize term to Slug format (no spaces, lowercase).
* urldecode - reverse munging of UTF8 characters.
*
* @param mixed $value
* @return string
*/
function opsd_get_slug_format( $value ) {
return urldecode( sanitize_title( $value ) );
}
/**
* Get Slug Format Option Value for saving to the options table.
* Replacing - to _ and restrict length to 64 characters.
*
* @param string $value
* @return string
*/
function opsd_get_slug_format_4_option_name( $value ) {
$value = opsd_get_slug_format( $value );
$value = str_replace('-', '_', $value);
$value = substr($value, 0, 64);
return $value;
}
/** Replace shortcodes in string
*
* @param string $subject - string to manipulate
* @param array $replace_array - array with values to replace // array( [opsd_id] => 9, [id] => 9, [dates] => July 3, 2016 14:00 - July 4, 2016 16:00, .... )
* @param mixed $replace_unknown_shortcodes - replace unknown params, if false, then no replace unknown params
* @return string
*/
function opsd_replace_opsd_shortcodes( $subject, $replace_array , $replace_unknown_shortcodes = ' ' ) {
$defaults = array(
'ip' => apply_opsd_filter( 'opsd_get_user_ip' )
, 'blogname' => wp_specialchars_decode( get_option( 'blogname' ), ENT_QUOTES )
, 'siteurl' => get_site_url()
);
$replace = wp_parse_args( $replace_array, $defaults );
foreach ( $replace as $replace_shortcode => $replace_value ) {
$subject = str_replace( array( '[' . $replace_shortcode . ']'
, '{' . $replace_shortcode . '}' )
, $replace_value
, $subject );
}
// Remove all shortcodes, which is not replaced early.
if ( $replace_unknown_shortcodes !== false )
$subject = preg_replace( '/[\s]{0,}[\[\{]{1}[a-zA-Z0-9.,-_]{0,}[\]\}]{1}[\s]{0,}/', $replace_unknown_shortcodes, $subject );
return $subject;
}
////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////
// S u p p o r t f u n c t i o n s
////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////
// Get array of images - icons inside of this directory
function opsd_dir_list ($directories) {
// create an array to hold directory list
$results = array();
if (is_string($directories)) $directories = array($directories);
foreach ($directories as $dir) {
if ( is_dir($dir) )
$directory = $dir ;
else
$directory = OPSD_PLUGIN_DIR . $dir ;
if ( file_exists( $directory ) ) { //FixIn: 5.4.5
// create a handler for the directory
$handler = @opendir($directory);
if ($handler !== false) {
// keep going until all files in directory have been read
while ($file = readdir($handler)) {
// if $file isn't this directory or its parent,
// add it to the results array
if ($file != '.' && $file != '..' && ( strpos($file, '.css' ) !== false ) )
$results[] = array($file, /* OPSD_PLUGIN_URL .*/ $dir . $file, ucfirst(strtolower( str_replace('.css', '', $file))) );
}
// tidy up: close the handler
closedir($handler);
}
}
}
// done!
return $results;
}
/** Get absolute URL to relative plugin path.
* Depend from the OPSD_MIN contant can be load minified version of file, if its exist
* @param string $path - path
* @return string
*/
function opsd_plugin_url( $path ) {
if ( ( defined( 'OPSD_MIN' ) ) && ( OPSD_MIN ) ){
$path_min = $path;
if ( substr( $path_min , -3 ) === '.js' ) {
$path_min = substr( $path_min , 0, -3 ) . '.min.js';
}
if ( substr( $path_min , -4 ) === '.css' ) {
$path_min = substr( $path_min , 0, -4 ) . '.min.css';
}
if ( file_exists( trailingslashit( OPSD_PLUGIN_DIR ) . ltrim( $path_min, '/\\' ) ) ) // check if this file exist
return trailingslashit( OPSD_PLUGIN_URL ) . ltrim( $path_min, '/\\' );
}
return trailingslashit( OPSD_PLUGIN_URL ) . ltrim( $path, '/\\' );
}
/** Check if such file exist or not.
*
* @param string $path - relative path to file (relative to plugin folder).
* @return boolean true | false
*/
function opsd_is_file_exist( $path ) {
if ( file_exists( trailingslashit( OPSD_PLUGIN_DIR ) . ltrim( $path, '/\\' ) ) ) // check if this file exist
return true;
else
return false;
}
////////////////////////////////////////////////////////////////////////////
// Admin Menu Links
////////////////////////////////////////////////////////////////////////////
/** Get URL to specific Admin Menu page
*
* @param string $menu_type - { item | add | resources | settings }
* @param boolean $is_absolute_url - Absolute or relative url { default: true }
* @return string - URL to menu
*/
function opsd_get_menu_url( $menu_type, $is_absolute_url = true ) {
switch ( $menu_type) {
case 'master': // Master
$link = 'opsd';
break;
case 'add': // Add New
$link = 'opsd-files';
break;
case 'settings': // Settings
case 'options':
$link = 'opsd-settings';
break;
default: // Master
$link = 'opsd';
break;
}
if ( $is_absolute_url ) {
$link = admin_url( 'admin.php' ) . '?page=' . $link ;
}
return $link;
}
// // // // // // // // // // // // // // // // // // // // // // // // // /
/** Get URL of item Listing or Calendar Overview page
*
* @param boolean $is_absolute_url - Absolute or relative url { default: true }
* @param boolean $is_old - { default: true }
* @return string - URL to menu
*/
function opsd_get_master_url( $is_absolute_url = true ) {
return opsd_get_menu_url( 'master', $is_absolute_url );
}
/** Get URL of item > Add item page
*
* @param boolean $is_absolute_url - Absolute or relative url { default: true }
* @param boolean $is_old - { default: true }
* @return string - URL to menu
*/
function opsd_get_new_opsd_url( $is_absolute_url = true ) {
return opsd_get_menu_url( 'add', $is_absolute_url );
}
/** Get URL of item > Settings page
*
* @param boolean $is_absolute_url - Absolute or relative url { default: true }
* @param boolean $is_old - { default: true }
* @return string - URL to menu
*/
function opsd_get_settings_url( $is_absolute_url = true ) {
return opsd_get_menu_url( 'settings', $is_absolute_url );
}
// // // // // // // // // // // // // // // // // // // // // // // // // /
/** Check if this item Listing or Calendar Overview page
* @param string $server_param - 'REQUEST_URI' | 'HTTP_REFERER' Default: 'REQUEST_URI'
* @return boolean true | false
*/
function opsd_is_master_page( $server_param = 'REQUEST_URI' ) {
if ( ( is_admin() ) &&
( strpos($_SERVER[ $server_param ],'page=opsd') !== false ) &&
( strpos($_SERVER[ $server_param ],'page=opsd-') === false )
) {
return true;
}
return false;
}
/** Check if this item > Add item page
* @param string $server_param - 'REQUEST_URI' | 'HTTP_REFERER' Default: 'REQUEST_URI'
* @return boolean true | false
*/
function opsd_is_new_opsd_page( $server_param = 'REQUEST_URI' ) {
if ( ( is_admin() ) &&
( strpos($_SERVER[ $server_param ],'page=opsd-new') !== false )
) {
return true;
}
return false;
}
/** Check if this item > Settings page
* @param string $server_param - 'REQUEST_URI' | 'HTTP_REFERER' Default: 'REQUEST_URI'
* @return boolean true | false
*/
function opsd_is_settings_page( $server_param = 'REQUEST_URI' ) {
if ( ( is_admin() ) &&
( strpos($_SERVER[ $server_param ],'page=opsd-settings') !== false )
) {
return true;
}
return false;
}
////////////////////////////////////////////////////////////////////////////
/** Insert New Line symbols after <br> tags. Usefull for the settings pages to show in redable view
*
* @param type $param
* @return type
*/
function opsd_nl_after_br($param) {
$value = preg_replace( "@(<|<)br\s*/?(>|>)(\r\n)?@", "<br/>", $param );
return $value;
}
/**
* Replace ** to <strong> and * to <em>
*
* @param String $text
* @return string
*/
if ( ! function_exists( 'opsd_recheck_strong_symbols' ) ) {
function opsd_recheck_strong_symbols( $text ){
$patterns = '/(\*\*)(\s*[^\*\*]*)(\*\*)/';
$replacement = '<strong>${2}</strong>';
$value_return = preg_replace($patterns, $replacement, $text);
$patterns = '/(\*)(\s*[^\*]*)(\*)/';
$replacement = '<em>${2}</em>';
$value_return = preg_replace($patterns, $replacement, $value_return);
return $value_return;
}
}
// Set URL from absolute to relative (starting from /)
function opsd_set_relative_url( $url ){
$url = esc_url_raw($url);
$url_path = parse_url($url, PHP_URL_PATH);
$url_path = ( empty($url_path) ? $url : $url_path );
$url = trim($url_path, '/');
return '/' . $url;
}
// Get Correct Relative URL
function opsd_make_link_relative( $link ){
if ( $link == get_option('siteurl') )
$link = '/';
$link = '/' . trim( wp_make_link_relative( $link ), '/' );
return $link;
}
// Get Correct Absolute URL
function opsd_make_link_absolute( $link ){
if ( ( $link != get_option('siteurl') ) && ( strpos($link, 'http') !== 0 ) )
$link = get_option('siteurl') . '/' . trim( wp_make_link_relative( $link ), '/' );
return esc_js( $link ) ;
}
//Simple hack to make array strings lowercase
function opsd_arraytolower( $array ){
return unserialize( strtolower( serialize( $array ) ) );
}
// Get version
function get_opsd_version(){
$version = 'free';
return $version;
}
/** Check if user accidentially update Secure Downloads Paid version to Free
*
* @return bool
*/
function opsd_is_updated_paid_to_free() {
if ( ( opsd_is_table_exists('opsd_log') ) && ( ! class_exists('opsd_personal') ) )
return true;
else
return false;
}
////////////////////////////////////////////////////////////////////////////
function opsd_get_ver_sufix() {
if( strpos( strtolower(OPSD_VERSION) , 'multisite') !== false ) {
$v_type = '-multi';
} else if( strpos( strtolower(OPSD_VERSION) , 'develop') !== false ) {
$v_type = '-dev';
} else {
$v_type = '';
}
$v = '';
if (class_exists('opsd_personal')) $v = 'ps'. $v_type;
if (class_exists('opsd_pro')) $v = '';
return $v ;
}
function opsd_up_link() {
if ( ! opsd_is_this_demo() )
$v = opsd_get_ver_sufix();
else $v = '';
return 'https://oplugins.com/plugins/secure-downloads/' . ( ( empty($v) ) ? '' : 'upgrade-' . $v . '/' ) ;
}
////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////
// DB - cheking if table, field or index exists
////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////
/**
* Check if table exist
*
* @global type $wpdb
* @param string $tablename
* @return 0|1
*/
function opsd_is_table_exists( $tablename ) {
global $wpdb;
if ( (! empty($wpdb->prefix) ) && ( strpos($tablename, $wpdb->prefix) === false ) )
$tablename = $wpdb->prefix . $tablename ;
$sql_check_table = $wpdb->prepare("SHOW TABLES LIKE %s" , $tablename ); //FixIn 5.4.3
$res = $wpdb->get_results( $sql_check_table );
return count($res); //FixIn 5.4.3
/*
$sql_check_table = $wpdb->prepare("
SELECT COUNT(*) AS count
FROM information_schema.tables
WHERE table_schema = '". DB_NAME ."'
AND table_name = %s " , $tablename );
$res = $wpdb->get_results( $sql_check_table );
return $res[0]->count;*/
}
/**
* Check if table exist
*
* @global type $wpdb
* @param string $tablename
* @param type $fieldname
* @return 0|1
*/
function opsd_is_field_in_table_exists( $tablename , $fieldname) {
global $wpdb;
if ( (! empty($wpdb->prefix) ) && ( strpos($tablename, $wpdb->prefix) === false ) ) $tablename = $wpdb->prefix . $tablename ;
$sql_check_table = "SHOW COLUMNS FROM {$tablename}" ;
$res = $wpdb->get_results( $sql_check_table );
foreach ($res as $fld) {
if ($fld->Field == $fieldname) return 1;
}
return 0;
}
/**
* Check if index exist
*
* @global type $wpdb
* @param string $tablename
* @param type $fieldindex
* @return 0|1
*/
function opsd_is_index_in_table_exists( $tablename , $fieldindex) {
global $wpdb;
if ( (! empty($wpdb->prefix) ) && ( strpos($tablename, $wpdb->prefix) === false ) ) $tablename = $wpdb->prefix . $tablename ;
$sql_check_table = $wpdb->prepare("SHOW INDEX FROM {$tablename} WHERE Key_name = %s", $fieldindex );
$res = $wpdb->get_results( $sql_check_table );
if (count($res)>0) return 1;
else return 0;
}
////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////
// Replace the shortcodes in the form by values from array
function replace_opsd_shortcodes_in_form($form, $field_values=array(), $is_delete_unknown_shortcodes = false) {
$new_form = $form;
// Patern for searching of the shortcodes in some form
$any_shortcodes = '[a-zA-Z][0-9a-zA-Z:._-]*';
$regex = '%\[\s*(' . $any_shortcodes . ')\s*\]%';
// Search any shortcodes in the $form
preg_match_all($regex, $form, $matches, PREG_PATTERN_ORDER); // PREG_PATTERN_ORDER, PREG_SET_ORDER, PREG_OFFSET_CAPTURE
// Loop all found shortcodes
if (isset($matches[1])) {
foreach ($matches[1] as $key=>$field) {
//$field // secondname
//$matches[0][$key] // [secondname]
//$matches[1][$key] // secondname
if (isset($field_values[$field])) $replace_value = $field_values[$field];
else {
if ($is_delete_unknown_shortcodes) $replace_value = '';
else $replace_value = $matches[0][$key];
}
$new_form = str_replace( $matches[0][$key] , $replace_value, $new_form);
}
}
return $new_form;
}
/** Get fields from item form at the settings page or return false if no fields
*
* @param string $opsd_form
* @return mixed false | array( $fields_count, $fields_matches )
*/
function opsd_get_fields_from_opsd_form( $opsd_form = '' ){
if ( empty( $opsd_form ) )
$opsd_form = get_opsd_option( 'opsd_form' );
$types = 'text[*]?|email[*]?|time[*]?|textarea[*]?|select[*]?|checkbox[*]?|radio|acceptance|captchac|captchar|file[*]?|quiz';
$regex = '%\[\s*(' . $types . ')(\s+[a-zA-Z][0-9a-zA-Z:._-]*)([-0-9a-zA-Z:#_/|\s]*)?((?:\s*(?:"[^"]*"|\'[^\']*\'))*)?\s*\]%';
$regex2 = '%\[\s*(country[*]?|starttime[*]?|endtime[*]?)(\s*[a-zA-Z]*[0-9a-zA-Z:._-]*)([-0-9a-zA-Z:#_/|\s]*)*((?:\s*(?:"[^"]*"|\'[^\']*\'))*)?\s*\]%';
$fields_count = preg_match_all($regex, $opsd_form, $fields_matches) ;
$fields_count2 = preg_match_all($regex2, $opsd_form, $fields_matches2) ;
//Gathering Together 2 arrays $fields_matches and $fields_matches2
foreach ($fields_matches2 as $key => $value) {
if ($key == 2) $value = $fields_matches2[1];
foreach ($value as $v) {
$fields_matches[$key][count($fields_matches[$key])] = $v;
}
}
$fields_count += $fields_count2;
if ($fields_count>0) return array($fields_count, $fields_matches);
else return false;
}
/** Get Get only SELECT, CHCKBOX & RADIO fields from item form at the settings page or return false if no fields
*
* @param string $opsd_form
* @return mixed false | array( $fields_count, $fields_matches )
*/
function opsd_get_select_checkbox_fields_from_opsd_form( $opsd_form = '' ){
if ( empty( $opsd_form ) )
$opsd_form = get_opsd_option( 'opsd_form' );
$types = 'select[*]?|checkbox[*]?|radio';
$regex = '%\[\s*(' . $types . ')(\s+[a-zA-Z][0-9a-zA-Z:._-]*)([-0-9a-zA-Z:#_/|\s]*)?((?:\s*(?:"[^"]*"|\'[^\']*\'))*)?\s*\]%';
$fields_count = preg_match_all($regex, $opsd_form, $fields_matches) ;
if ( $fields_count > 0 )
return array( $fields_count, $fields_matches );
else return false;
}
// Get header info from this file, just for compatibility with WordPress 2.8 and older versions //////////////////////////////////////
if (!function_exists ('get_file_data_wpdev')) {
function get_file_data_wpdev( $file, $default_headers, $context = '' ) {
// We don't need to write to the file, so just open for reading.
$fp = fopen( $file, 'r' );
// Pull only the first 8kiB of the file in.
$file_data = fread( $fp, 8192 );
// PHP will close file handle, but we are good citizens.
fclose( $fp );
if( $context != '' ) {
$extra_headers = array();//apply_filters( "extra_$context".'_headers', array() );
$extra_headers = array_flip( $extra_headers );
foreach( $extra_headers as $key=>$value ) {
$extra_headers[$key] = $key;
}
$all_headers = array_merge($extra_headers, $default_headers);
} else {
$all_headers = $default_headers;
}
foreach ( $all_headers as $field => $regex ) {
preg_match( '/' . preg_quote( $regex, '/' ) . ':(.*)$/mi', $file_data, ${$field});
if ( !empty( ${$field} ) )
${$field} = trim(preg_replace("/\s*(?:\*\/|\?>).*/", '', ${$field}[1] ));
else
${$field} = '';
}
$file_data = compact( array_keys( $all_headers ) );
return $file_data;
}
}
/** Clean Request Parameters
*
*/
function opsd_check_request_paramters() {
$clean_params = array();
$clean_params[ 'wh_opsd_id' ] = 'digit_or_csd'; // '0' | '1' | ''
$clean_params[ 'wh_opsd_date' ] = 'digit_or_date'; // number | date 2016-07-20
$clean_params[ 'wh_opsd_datenext' ] = 'd'; // '1' | '2' ....
$clean_params[ 'wh_pay_statuscustom' ] = 's'; //string !!! LIKE !!!
$clean_params[ 'wh_pay_status' ] = array( 'all', 'group_ok', 'group_unknown', 'group_pending', 'group_failed' );
foreach ( $clean_params as $request_key => $clean_type ) {
// elements only listed in array::
if ( is_array( $clean_type ) ) { // check only values from the list in this array
if ( ( isset( $_REQUEST[ $request_key ] ) ) && ( ! in_array( $_REQUEST[ $request_key ], $clean_type ) ) )
$clean_type = 's';
else
$clean_type = 'checked_skip_it';
}
switch ( $clean_type ) {
case 'checked_skip_it':
break;
case 'digit_or_date': // digit or comma separated digit
if ( isset( $_REQUEST[ $request_key ] ) )
$_REQUEST[ $request_key ] = opsd_clean_digit_or_date( $_REQUEST[ $request_key ] ); // nums
break;
case 'digit_or_csd': // digit or comma separated digit
if ( isset( $_REQUEST[ $request_key ] ) )
$_REQUEST[ $request_key ] = opsd_clean_digit_or_csd( $_REQUEST[ $request_key ] ); // nums
break;
case 's': // string
if ( isset( $_REQUEST[ $request_key ] ) )
$_REQUEST[ $request_key ] = opsd_clean_like_string_for_db( $_REQUEST[ $request_key ] );
break;
case 'd': // digit
if ( isset( $_REQUEST[ $request_key ] ) )
if ( $_REQUEST[ $request_key ] !== '' )
$_REQUEST[ $request_key ] = intval( $_REQUEST[ $request_key ] );
break;
default:
if ( isset( $_REQUEST[ $request_key ] ) ) {
$_REQUEST[ $request_key ] = intval( $_REQUEST[ $request_key ] );
}
break;
}
}
}
// Security
function opsd_escape_any_xss($formdata){ //FixIn: 1.1.2.1
$formdata_array = explode('~',$formdata);
$formdata_array_count = count($formdata_array);
$clean_formdata = '';
for ( $i=0 ; $i < $formdata_array_count ; $i++) {
$elemnts = explode('^',$formdata_array[$i]);
if ( count( $elemnts ) > 2 ) {
$type = $elemnts[0];
$element_name = $elemnts[1];
$value = $elemnts[2];
$value = opsd_clean_parameter( $value );
// convert to new value
$clean_formdata .= $type . '^' . $element_name . '^' . $value . '~';
}
}
$clean_formdata = substr($clean_formdata, 0, -1);
$clean_formdata = str_replace('%', '%', $clean_formdata ); // clean any % from the form, because otherwise, there is problems with SQL prepare function
return $clean_formdata;
}
/** Check paramter if it number or comma separated list of numbers
*
* @global type $wpdb
* @param string $value
* @return string
*
* Exmaple:
opsd_clean_digit_or_csd( '12,a,45,9' ) => '12,0,45,9'
* or
opsd_clean_digit_or_csd( '10a' ) => '10
* or
opsd_clean_digit_or_csd( array( '12,a,45,9', '10a' ) ) => array ( '12,0,45,9', '10' )
*/
function opsd_clean_digit_or_csd( $value ) { //FixIn:6.2.1.4
if ( $value === '' ) return $value;
if ( is_array( $value ) ) {
foreach ( $value as $key => $check_value ) {
$value[ $key ] = opsd_clean_digit_or_csd( $check_value );
}
return $value;
}
global $wpdb;
$value = str_replace( ';', ',', $value );
$array_of_nums = explode(',', $value);
$result = array();
foreach ($array_of_nums as $check_element) {
$result[] = $wpdb->prepare( "%d", $check_element );
}
$result = implode(',', $result );
return $result;
}
/** Cehck about Valid date, like 2016-07-20 or digit
*
* @param string $value
* @return string or int
*/
function opsd_clean_digit_or_date( $value ) { //FixIn:6.2.1.4
if ( $value === '' ) return $value;
if ( preg_match("/^[0-9]{4}-(0[1-9]|1[0-2])-(0[1-9]|[1-2][0-9]|3[0-1])$/", $value ) ) {
return $value; // Date is valid in format: 2016-07-20
} else {
return intval( $value );
}
}
// check $value for injection here
function opsd_clean_parameter( $value ) {
$value = preg_replace( '/<[^>]*>/', '', $value ); // clean any tags
$value = str_replace( '<', ' ', $value );
$value = str_replace( '>', ' ', $value );
$value = strip_tags( $value );
// Clean SQL injection
$value = esc_sql( $value );
return $value;
}
function opsd_esc_like( $value_trimmed ) {
global $wpdb;
if ( method_exists( $wpdb ,'esc_like' ) )
return $wpdb->esc_like( $value_trimmed ); // Its require minimum WP 4.0.0
else
return addcslashes( $value_trimmed, '_%\\' ); // Direct implementation from $wpdb->esc_like(
}
/** Clean user string for using in SQL LIKE statement - append to LIKE sql
*
* @param string $value - to clean
* @return string - escaped
* Exmaple:
* $search_escaped_like_title = opsd_clean_like_string_for_append_in_sql_for_db( $input_var );
*
* $where_sql = " WHERE title LIKE ". $search_escaped_like_title ." ";
*/
function opsd_clean_like_string_for_append_in_sql_for_db( $value ) {
global $wpdb;
$value_trimmed = trim( stripslashes( $value ) );
$wild = '%';
$like = $wild . opsd_esc_like( $value_trimmed ) . $wild;
$sql = $wpdb->prepare( "'%s'", $like );
return $sql;
/* Help:
* First half of escaping for LIKE special characters % and _ before preparing for MySQL.
* Use this only before wpdb::prepare() or esc_sql(). Reversing the order is very bad for security.
*
* Example Prepared Statement:
*
* $wild = '%';
* $find = 'only 43% of planets';
* $like = $wild . opsd_esc_like( $find ) . $wild;
* $sql = $wpdb->prepare( "SELECT * FROM $wpdb->posts WHERE post_content LIKE '%s'", $like );
*
* Example Escape Chain:
*
* $sql = esc_sql( opsd_esc_like( $input ) );
*/
}
/** Clean string for using in SQL LIKE requests inside single quotes: WHERE title LIKE '%". $escaped_search_title ."%'
* Replaced _ to \_ % to \% \ to \\
* @param string $value - to clean
* @return string - escaped
* Exmaple:
* $search_escaped_like_title = opsd_clean_like_string_for_db( $input_var );
*
* $where_sql = " WHERE title LIKE '%". $search_escaped_like_title ."%' ";
*
* Important! Use SINGLE quotes after in SQL query: LIKE '%".$data."%'
*/
function opsd_clean_like_string_for_db( $value ){
global $wpdb;
$value_trimmed = trim( stripslashes( $value ) );
$value_trimmed = opsd_esc_like( $value_trimmed );
$value = trim( $wpdb->prepare( "'%s'", $value_trimmed ) , "'" );
return $value;
/* Help:
* First half of escaping for LIKE special characters % and _ before preparing for MySQL.
* Use this only before wpdb::prepare() or esc_sql(). Reversing the order is very bad for security.
*
* Example Prepared Statement:
*
* $wild = '%';
* $find = 'only 43% of planets';
* $like = $wild . opsd_esc_like( $find ) . $wild;
* $sql = $wpdb->prepare( "SELECT * FROM $wpdb->posts WHERE post_content LIKE '%s'", $like );
*
* Example Escape Chain:
*
* $sql = esc_sql( opsd_esc_like( $input ) );
*/
}
/** Escape string from SQL for the HTML form field
*
* @param string $value
* @return string
*
* Used: esc_sql function.
*
* https://codex.wordpress.org/Function_Reference/esc_sql
* Note: Be careful to use this function correctly. It will only escape values to be used in strings in the query.
* That is, it only provides escaping for values that will be within quotes in the SQL (as in field = '{$escaped_value}').
* If your value is not going to be within quotes, your code will still be vulnerable to SQL injection.
* For example, this is vulnerable, because the escaped value is not surrounded by quotes in the SQL query:
* ORDER BY {$escaped_value}. As such, this function does not escape unquoted numeric values, field names, or SQL keywords.
*
*/
function opsd_clean_string_for_form( $value ){
global $wpdb;
$value_trimmed = trim( stripslashes( $value ) );
$esc_sql_value = esc_sql( $value_trimmed );
//$value = trim( $wpdb->prepare( "'%s'", $esc_sql_value ) , "'" );
$esc_sql_value = trim( stripslashes( $esc_sql_value ) );
return $esc_sql_value;
}
////////////////////////////////////////////////////////////////////////////
function opsd_get_number_new_items(){
return 0;
}
/** Check if this demo website
*
* @return bool
*/
function opsd_is_this_demo() {
//return ! true; //TODO: comment it. 2016-09-27 // Replaced!
if (
( strpos( $_SERVER['SCRIPT_FILENAME'], 'oplugins.com' ) !== false )
|| ( strpos( $_SERVER['HTTP_HOST'], 'oplugins.com' ) !== false )
)
return true;
else
return false;
}
// Add Admin Bar
add_action( 'admin_bar_menu', 'wp_opsd_admin_bar_items_menu', 70 );
function wp_opsd_admin_bar_items_menu(){
global $wp_admin_bar;
//debuge($wp_admin_bar);die;
$current_user = wp_get_current_user();
$curr_user_role = get_opsd_option( 'opsd_user_role_master' );
$level = 10;
if ($curr_user_role == 'administrator') $level = 10;
else if ($curr_user_role == 'editor') $level = 7;
else if ($curr_user_role == 'author') $level = 2;
else if ($curr_user_role == 'contributor') $level = 1;
else if ($curr_user_role == 'subscriber') $level = 0;
if ( ( $current_user->user_level < $level ) || ! is_admin_bar_showing() )
return;
$update_count = opsd_get_number_new_items(); // 0
$title = 'Secure Downloads';
$update_title = $title;
if ( $update_count > 0 ) {
$update_count_title = " <span style='background: #f0f0f1;color: #2c3338;display: inline;padding: 2px 5px;font-weight: 600;border-radius: 10px;' class='opsd-count bk-update-count' >" . number_format_i18n($update_count) . "</span>" ; //id='opsd-count'
$update_title .= $update_count_title;
}
$link_items = opsd_get_master_url();
$link_settings = opsd_get_settings_url();
$wp_admin_bar->add_menu(
array(
'id' => 'bar_opsd',
'title' => $update_title ,
'href' => opsd_get_master_url()
)
);
// Add also to "+ New" bar menu link
$wp_admin_bar->add_menu(
array(
'id' => 'bar_opsd_send',
'title' => __( 'Secure Link', 'secure-downloads'),
'href' => opsd_get_master_url(),
'parent' => 'new-content',
)
);
$curr_user_role_settings = get_opsd_option( 'opsd_user_role_settings' );
$level = 10;
if ($curr_user_role_settings == 'administrator') $level = 10;
else if ($curr_user_role_settings == 'editor') $level = 7;
else if ($curr_user_role_settings == 'author') $level = 2;
else if ($curr_user_role_settings == 'contributor') $level = 1;
else if ($curr_user_role_settings == 'subscriber') $level = 0;
if ( ( ($current_user->user_level < $level) ) || !is_admin_bar_showing() ) return;
$wp_admin_bar->add_menu(
array(
'id' => 'bar_opsd_new',
'title' => __( 'Add New', 'secure-downloads'),
'href' => opsd_get_new_opsd_url(),
'parent' => 'bar_opsd',
)
);
$wp_admin_bar->add_menu(
array(
'id' => 'bar_opsd_settings',
'title' => __( 'Settings', 'secure-downloads'),
'href' => opsd_get_settings_url(),
'parent' => 'bar_opsd',
)
);
$wp_admin_bar->add_menu(
array(
'id' => 'bar_opsd_settings_email',
'title' => __( 'Emails', 'secure-downloads'),
'href' => $link_settings . '&tab=email',
'parent' => 'bar_opsd_settings'
)
);
}
function opsd_show_opsd_footer(){
if ( ! opsd_is_this_demo() ) {
$message = sprintf( __( 'If you like %s please leave us a %s rating. A huge thank you in advance!', 'secure-downloads')
, '<strong>Secure Downloads</strong>' . ' ' . OPSD_VERSION_NUM
, '<a href="https://wordpress.org/support/plugin/secure-downloads/reviews/#new-post" target="_blank" title="' . esc_attr__( 'Thanks :)', 'secure-downloads') . '">'
. '★★★★★'
. '</a>'
);
echo '<div id="opsd-footer" style="position:absolute;bottom:40px;text-align:left;width:95%;font-size:0.9em;text-shadow:0 1px 0 #fff;margin:0;color:#888;">' . $message . '</div>';
?>
<script type="text/javascript">
jQuery(document).ready(function(){
jQuery('#wpfooter').append( jQuery('#opsd-footer') );
});
</script>
<?php
}
}
////////////////////////////////////////////////////////////////////////////////
// Support functions
////////////////////////////////////////////////////////////////////////////////
function get_opsd_current_user_id() {
$user = wp_get_current_user();
return ( isset( $user->ID ) ? (int) $user->ID : 0 );
}
/** Check if Current User have specific Role
*
* @return bool Whether the current user has the given capability.
*/
function opsd_is_current_user_have_this_role( $user_role ) {
if ( $user_role == 'administrator' ) $user_role = 'activate_plugins';
if ( $user_role == 'editor' ) $user_role = 'publish_pages';
if ( $user_role == 'author' ) $user_role = 'publish_posts';
if ( $user_role == 'contributor' ) $user_role = 'edit_posts';
if ( $user_role == 'subscriber') $user_role = 'read';
return current_user_can( $user_role );
}
function opsd_get_user_ip() {
//return '84.243.195.114' ; // Test //90.36.89.174
if (isset($_SERVER['HTTP_CLIENT_IP'])) {
$userIP = $_SERVER['HTTP_CLIENT_IP'] ;
} elseif (isset($_SERVER['HTTP_X_FORWARDED_FOR'])) {
$userIP = $_SERVER['HTTP_X_FORWARDED_FOR'] ;
} elseif (isset($_SERVER['HTTP_X_FORWARDED'])) {
$userIP = $_SERVER['HTTP_X_FORWARDED'] ;
} elseif (isset($_SERVER['HTTP_FORWARDED_FOR'])) {
$userIP = $_SERVER['HTTP_FORWARDED_FOR'] ;
} elseif (isset($_SERVER['HTTP_FORWARDED'])) {
$userIP = $_SERVER['HTTP_FORWARDED'] ;
} elseif (isset($_SERVER['REMOTE_ADDR'])) {
$userIP = $_SERVER['REMOTE_ADDR'] ;
} else {
$userIP = "" ;
}
$userIP = explode( ',', $userIP );
$userIP = array_map( 'trim', $userIP );
return $userIP[0] ;
}
add_opsd_filter('opsd_get_user_ip', 'opsd_get_user_ip');
/** Transform the REQESTS parameters (GET and POST) into URL
*
* @param type $page_param
* @param array $exclude_params
* @param type $only_these_parameters
* @return type
*/
function opsd_get_params_in_url( $page_param , $exclude_params = array(), $only_these_parameters = false, $is_escape_url = false, $only_get = false ){
$exclude_params[] = 'page';
if ( isset( $_GET['page'] ) )
$page_param = $_GET['page'];
$get_paramaters = array( 'page' => $page_param );
if ( $only_get )
$check_params = $_GET;
else
$check_params = $_REQUEST;
//debuge($check_params);
foreach ( $check_params as $prm_key => $prm_value ) {
// Skip parameters arrays, like $_GET['rvaluation_to'] = Array ( [0] => 6, [1] => 14, [2] => 14 )
if (
( is_string( $prm_value ) )
|| ( is_numeric( $prm_value ) )
) {
if ( strlen( $prm_value ) > 1000 ) { // Check about TOOO long parameters, if it exist then reset it.
$prm_value = '';
}
if ( ! in_array( $prm_key, $exclude_params ) )
if ( ( $only_these_parameters === false ) || ( in_array( $prm_key, $only_these_parameters ) ) )
$get_paramaters[ $prm_key ] = $prm_value;
}
}
//debuge($check_params, $get_paramaters, $exclude_params );
$url = admin_url( add_query_arg( $get_paramaters , 'admin.php' ) );
if ( $is_escape_url )
$url = esc_url( $url );
return $url;
/* // Old variant:
if ( isset( $_GET['page'] ) ) $page_param = $_GET['page'];
$url_start = 'admin.php?page=' . $page_param . '&';
$exclude_params[] = 'page';
foreach ( $_REQUEST as $prm_key => $prm_value ) {
if ( !in_array( $prm_key, $exclude_params ) )
if ( ($only_these_parameters === false) || ( in_array( $prm_key, $only_these_parameters ) ) )
$url_start .= $prm_key . '=' . $prm_value . '&';
}
$url_start = substr( $url_start, 0, -1 );
return $url_start;
*/
}
////////////////////////////////////////////////////////////////////////////////
// Mesages for Admin panel
////////////////////////////////////////////////////////////////////////////////
function opsd_show_fixed_message( $message, $time_to_show , $message_type = 'updated' , $notice_id = 0, $is_dismissible = false ) {
// Generate unique HTML ID for the message
if ( $notice_id == 0 )
$notice_id = intval( time() * rand(10, 100) );
$notice_id = 'opsd_system_notice_' . $notice_id;
$is_dismissible = false;
if (
( ( $is_dismissible ) && ( ! opsd_section_is_dismissed( $notice_id ) ) )
|| ( ! $is_dismissible )
// || true
){
?><div id="<?php echo $notice_id; ?>"
class="opsd_system_notice opsd_is_dismissible opsd_is_hideable <?php echo $message_type; ?>"
data-nonce="<?php echo wp_create_nonce( $nonce_name = $notice_id . '_opsdnonce' ); ?>"
data-user-id="<?php echo get_current_user_id(); ?>"
><?php
opsd_x_dismiss_button();
echo $message;
?></div><?php
// Get the time of message showing
$time_to_show = intval( $time_to_show ) * 1000;
if ( $time_to_show > 0 ) {
?> <script type="text/javascript">
jQuery('#<?php echo $notice_id; ?>').animate({opacity: 1},<?php echo $time_to_show; ?>).fadeOut( 2000 );
</script> <?php
}
}
}
// Show Ajax message at the top of page //////////////////////////////////////////////////////////////////////////////////////////////////////
function opsd_show_ajax_message( $message, $time_to_show = 3000, $is_error = false ) {
// Recheck for any "lang" shortcodes for replacing to correct language
$message = apply_opsd_filter('opsd_check_for_active_language', $message );
// Escape any JavaScript from message
$notice = html_entity_decode( esc_js( $message ) ,ENT_QUOTES) ;
?><script type="text/javascript">
var my_message = '<?php echo $notice; ?>';
opsd_admin_show_message( my_message, '<?php echo ( $is_error ? 'error' : 'success' ); ?>', <?php echo $time_to_show; ?> );
</script><?php
}
/** Show "Saved Changes" message at the top of settings page.
*
*/
function opsd_show_changes_saved_message() {
opsd_show_message ( __('Changes saved.', 'secure-downloads'), 5 );
}
/** Show Message at Top of Admin Pages
*
* @param type $message - mesage to show
* @param type $time_to_show - number of seconds to show, if 0 or skiped, then unlimited time.
* @param type $message_type - Default: updated { updated | error | notice }
*/
function opsd_show_message ( $message, $time_to_show , $message_type = 'updated') {
// Generate unique HTML ID for the message
$inner_message_id = intval( time() * rand(10, 100) );
// Get formated HTML message
$notice = opsd_get_formated_message( $message, $message_type, $inner_message_id );
// Get the time of message showing
$time_to_show = intval( $time_to_show ) * 1000;
// Show this Message
?> <script type="text/javascript">
if ( jQuery('.opsd_admin_message').length ) {
jQuery('.opsd_admin_message').append( '<?php echo $notice; ?>' );
<?php if ( $time_to_show > 0 ) { ?>
jQuery('#opsd_inner_message_<?php echo $inner_message_id; ?>').animate({opacity: 1},<?php echo $time_to_show; ?>).fadeOut( 2000 );
<?php } ?>
}
</script> <?php
}
/** Escape and prepare message to show it
*
* @param type $message - message
* @param type $message_type - Default: updated { updated | error | notice }
* @param string $inner_message_id - ID of message DIV, can be skipped
* @return string
*/
function opsd_get_formated_message ( $message, $message_type = 'updated', $inner_message_id = '') {
// Recheck for any "lang" shortcodes for replacing to correct language
$message = apply_opsd_filter('opsd_check_for_active_language', $message );
// Escape any JavaScript from message
$notice = html_entity_decode( esc_js( $message ) ,ENT_QUOTES) ;
$notice .= '<a class="close tooltip_left" rel="tooltip" title="'. esc_js(__("Hide", 'secure-downloads')). '" data-dismiss="alert" href="javascript:void(0)" onclick="javascript:jQuery(this).parent().hide();">×</a>';
if (! empty( $inner_message_id ))
$inner_message_id = 'id="opsd_inner_message_'. $inner_message_id .'"';
$notice = '<div '.$inner_message_id.' class="opsd_inner_message '. $message_type . '">' . $notice . '</div>';
return $notice;
}
/** Show system info in settings page
*
* @param string $message ...
* @param string $message_type 'info' | 'warning' | 'error'
* @param string $title __('Important!' , 'secure-downloads') | __('Note' , 'secure-downloads')
*
* Exmaple: opsd_show_message_in_settings( __( 'Nothing Found', 'secure-downloads'), 'warning', __('Important!' , 'secure-downloads') );
*/
function opsd_show_message_in_settings( $message, $message_type = 'info', $title = '' , $is_echo = true ) {
$message_content = '';
$message_content .= '<div class="clear"></div>';
$message_content .= '<div class="opsd-settings-notice notice-' . $message_type . '" style="text-align:left;">';
if ( ! empty( $title ) )
$message_content .= '<strong>' . esc_js( $title ) . '</strong> ';
$message_content .= html_entity_decode( esc_js( $message ) ,ENT_QUOTES) ;
$message_content .= '</div>';
$message_content .= '<div class="clear"></div>';
if ( $is_echo )
echo $message_content;
else
return $message_content;
}
////////////////////////////////////////////////////////////////////////////////
// Settings Meta Boxes
////////////////////////////////////////////////////////////////////////////////
function opsd_open_meta_box_section( $metabox_id, $title ) {
$my_close_open_win_id = $metabox_id . '_metabox';
//FixIn: 1.1.5.1
?>
<div class='meta-box'>
<div
id="<?php echo $my_close_open_win_id; ?>"
class="postbox <?php //if ( '1' == get_user_option( 'opsd_win_' . $my_close_open_win_id ) ) echo 'closed'; ?>"
><div class="postbox-header" style="display: flex;flex-flow: row nowrap;border-bottom: 1px solid #ccd0d4;"><?php //FixIn: 8.7.8.1 ?>
<h3 class='hndle' style="flex: 1 1 auto;border: none;">
<span><?php echo wp_kses_post( $title ); ?></span>
</h3>
<!--div title="<?php _e('Click to toggle','secure-downloads'); ?>"
class="handlediv"
onclick="javascript:opsd_verify_window_opening(<?php echo get_opsd_current_user_id(); ?>, '<?php echo $my_close_open_win_id; ?>');"
><br/></div-->
</div>
<div class="inside">
<?php
}
function opsd_close_meta_box_section() {
?>
</div>
</div>
</div>
<?php
}
////////////////////////////////////////////////////////////////////////////////
// P a g i n a t i o n o f T a b l e L i s t i n g ///////////////
////////////////////////////////////////////////////////////////////////////////
/** Show P a g i n a t i o n
*
* @param int $summ_number_of_items - total number of items
* @param int $active_page_num - number of activated page
* @param int $num_items_per_page - number of items per page
* @param array $only_these_parameters - array of keys to exclude from links
* @param string $url_sufix - usefule for anchor to HTML section with specific ID, Example: '#my_section'
*/
function opsd_show_pagination( $summ_number_of_items, $active_page_num, $num_items_per_page , $only_these_parameters = false, $url_sufix = '' ) {
if ( empty( $num_items_per_page ) ) {
$num_items_per_page = '10';
}
$pages_number = ceil( $summ_number_of_items / $num_items_per_page );
if ( $pages_number < 2 )
return;
//Fix: 5.1.4 - Just in case we are having tooo much resources, then we need to show all resources - and its empty string
if ( ( isset($_REQUEST['wh_opsd_type'] ) ) && ( strlen($_REQUEST['wh_opsd_type']) > 1000 ) ) {
$_REQUEST['wh_opsd_type'] = '';
}
// First parameter will overwriten by $_GET['page'] parameter
$bk_admin_url = opsd_get_params_in_url( opsd_get_master_url( false ), array('page_num'), $only_these_parameters );
?>
<span class="wpdevelop opsd-pagination">
<div class="container-fluid">
<div class="row">
<div class="col-sm-12 text-center control-group0">
<nav class="btn-toolbar">
<div class="btn-group opsd-no-margin" style="float:none;">
<?php if ( $pages_number > 1 ) { ?>
<a class="button button-secondary <?php echo ( $active_page_num == 1 ) ? ' disabled' : ''; ?>"
href="<?php echo $bk_admin_url; ?>&page_num=<?php if ($active_page_num == 1) { echo $active_page_num; } else { echo ($active_page_num-1); } echo $url_sufix; ?>">
<?php _e('Prev', 'secure-downloads'); ?>
</a>
<?php }
/** Number visible pages (links) that linked to active page, other pages skipped by "..." */
$num_closed_steps = 3;
for ( $pg_num = 1; $pg_num <= $pages_number; $pg_num++ ) {
if ( ! (
( $pages_number > ( $num_closed_steps * 4) )
&& ( $pg_num > $num_closed_steps )
&& ( ( $pages_number - $pg_num + 1 ) > $num_closed_steps )
&& ( abs( $active_page_num - $pg_num ) > $num_closed_steps )
) ) {
?> <a class="button button-secondary <?php if ($pg_num == $active_page_num ) echo ' active'; ?>"
href="<?php echo $bk_admin_url; ?>&page_num=<?php echo $pg_num; echo $url_sufix; ?>">
<?php echo $pg_num; ?>
</a><?php
if ( ( $pages_number > ( $num_closed_steps * 4) )
&& ( ($pg_num+1) > $num_closed_steps )
&& ( ( $pages_number - ( $pg_num + 1 ) ) > $num_closed_steps )
&& ( abs($active_page_num - ( $pg_num + 1 ) ) > $num_closed_steps )
) {
echo ' <a class="button button-secondary disabled" href="javascript:void(0);">...</a> ';
}
}
}
if ( $pages_number > 1 ) { ?>
<a class="button button-secondary <?php echo ( $active_page_num == $pages_number ) ? ' disabled' : ''; ?>"
href="<?php echo $bk_admin_url; ?>&page_num=<?php if ($active_page_num == $pages_number) { echo $active_page_num; } else { echo ($active_page_num+1); } echo $url_sufix; ?>">
<?php _e('Next', 'secure-downloads'); ?>
</a>
<?php } ?>
</div>
</nav>
</div>
</div>
</div>
</span>
<?php
}
////////////////////////////////////////////////////////////////////////////////
// Inline JavaScript to Footer page
////////////////////////////////////////////////////////////////////////////////
/**
* Queue JavaScript for later output at footer
*
* @param string $code
*/
function opsd_enqueue_js( $code ) {
global $opsd_queued_js;
if ( empty( $opsd_queued_js ) ) {
$opsd_queued_js = '';
}
$opsd_queued_js .= "\n" . $code . "\n";
}
/**
* Output any queued javascript code in the footer.
*/
function opsd_print_js() {
global $opsd_queued_js;
if ( ! empty( $opsd_queued_js ) ) {
echo "<!-- OPSD JavaScript -->\n<script type=\"text/javascript\">\njQuery(function($) {";
$opsd_queued_js = wp_check_invalid_utf8( $opsd_queued_js );
$opsd_queued_js = wp_specialchars_decode( $opsd_queued_js , ENT_COMPAT); // Converts double quotes '"' => '"'
$opsd_queued_js = preg_replace( '/&#(x)?0*(?(1)27|39);?/i', "'", $opsd_queued_js );
$opsd_queued_js = str_replace( "\r", '', $opsd_queued_js );
echo $opsd_queued_js . "});\n</script>\n<!-- End OPSD JavaScript -->\n";
$opsd_queued_js = '';
unset( $opsd_queued_js );
}
}
/**
* Reload page by using JavaScript
*
* @param string $url - URL of page to load
*/
function opsd_reload_page_by_js( $url ) {
$redir = html_entity_decode( esc_url( $url ) );
if ( ! empty( $redir ) ) {
?>
<script type="text/javascript">
window.location.href = '<?php echo $redir ?>';
</script>
<?php
}
}
/** Redirect browser to a specific page
*
* @param string $url - URL of page to redirect
*/
function opsd_redirect( $url ) {
$url = opsd_make_link_absolute( $url );
$url = html_entity_decode( esc_url( $url ) );
echo '<script type="text/javascript">';
echo 'window.location.href="'.$url.'";';
echo '</script>';
echo '<noscript>';
echo '<meta http-equiv="refresh" content="0;url='.$url.'" />';
echo '</noscript>';
}
/** Get Warning Text for Demo websites */
function opsd_get_warning_text_in_demo_mode() {
// return '<div class="opsd-error-message opsd_demo_test_version_warning"><strong>Warning!</strong> Demo test version does not allow changes to these items.</div>'; //Old Style
return '<div class="opsd-settings-notice notice-warning"><strong>Warning!</strong> Demo test version does not allow changes to these items.</div>';
}
/** Show System Info (status) at item > Settings General page
* Link: http://server.com/wp-admin/admin.php?page=opsd-settings&system_info=show#opsd_general_settings_system_info_metabox
*/
function opsd_system_info() {
if ( opsd_is_this_demo() ) return;
if ( current_user_can( 'activate_plugins' ) ) { // Only for Administrator or Super admin. More here: https://codex.wordpress.org/Roles_and_Capabilities
global $wpdb, $wp_version;
$all_plugins = get_plugins();
$active_plugins = get_option( 'active_plugins' );
$mysql_info = $wpdb->get_results( "SHOW VARIABLES LIKE 'sql_mode'" );
if ( is_array( $mysql_info ) ) $sql_mode = $mysql_info[0]->Value;
if ( empty( $sql_mode ) ) $sql_mode = 'Not set';
$safe_mode = ( ini_get( 'safe_mode' ) ) ? 'On' : 'Off';
$allow_url_fopen = ( ini_get( 'allow_url_fopen' ) ) ? 'On' : 'Off';
$upload_max_filesize = ( ini_get( 'upload_max_filesize' ) ) ? ini_get( 'upload_max_filesize' ) : 'N/A';
$post_max_size = ( ini_get( 'post_max_size' ) ) ? ini_get( 'post_max_size' ) : 'N/A';
$max_execution_time = ( ini_get( 'max_execution_time' ) ) ? ini_get( 'max_execution_time' ) : 'N/A';
$memory_limit = ( ini_get( 'memory_limit' ) ) ? ini_get( 'memory_limit' ) : 'N/A';
$memory_usage = ( function_exists( 'memory_get_usage' ) ) ? round( memory_get_usage() / 1024 / 1024, 2 ) . ' Mb' : 'N/A';
$exif_read_data = ( is_callable( 'exif_read_data' ) ) ? 'Yes' . " ( V" . substr( phpversion( 'exif' ), 0, 4 ) . ")" : 'No';
$iptcparse = ( is_callable( 'iptcparse' ) ) ? 'Yes' : 'No';
$xml_parser_create = ( is_callable( 'xml_parser_create' ) ) ? 'Yes' : 'No';
$theme = ( function_exists( 'wp_get_theme' ) ) ? wp_get_theme() : get_theme( get_current_theme() );
if ( function_exists( 'is_multisite' ) ) {
if ( is_multisite() ) $multisite = 'Yes';
else $multisite = 'No';
} else { $multisite = 'N/A';
}
$system_info = array(
'system_info' => '',
'php_info' => '',
'active_plugins' => '',
'inactive_plugins' => ''
);
$ver_small_name = get_opsd_version();
if ( class_exists( 'opsd_multiuser' ) ) $ver_small_name = 'multiuser';
$system_info['system_info'] = array(
'Plugin Update' => ( defined( 'OPSD_VERSION' ) ) ? OPSD_VERSION : 'N/A',
'Plugin Version' => ucwords( $ver_small_name ),
'Plugin Update Date' => date( "Y-m-d", filemtime( OPSD_FILE ) ),
'WP Version' => $wp_version,
'WP DEBUG' => ( ( defined('WP_DEBUG') ) && ( WP_DEBUG ) ) ? 'On' : 'Off',
'WP DB Version' => get_option( 'db_version' ),
'Operating System' => PHP_OS,
'Server' => $_SERVER["SERVER_SOFTWARE"],
'PHP Version' => PHP_VERSION,
'PHP Safe Mode' => $safe_mode,
'MYSQL Version' => $wpdb->get_var( "SELECT VERSION() AS version" ),
'SQL Mode' => $sql_mode,
'Memory usage' => $memory_usage,
'Site URL' => get_option( 'siteurl' ),
'Home URL' => home_url(),
'SERVER[HTTP_HOST]' => $_SERVER['HTTP_HOST'],
'SERVER[SERVER_NAME]' => $_SERVER['SERVER_NAME'],
'Multisite' => $multisite,
'Active Theme' => $theme['Name'] . ' ' . $theme['Version']
);
$system_info['php_info'] = array(
'PHP Version' => PHP_VERSION,
'PHP Safe Mode' => $safe_mode,
'PHP Memory Limit' => '<strong>' . $memory_limit . '</strong>',
'PHP Max Script Execute Time' => '<strong>' . $max_execution_time . '</strong>',
'PHP Max Post Size' => '<strong>' . $post_max_size . '</strong>',
'PHP MAX Input Vars' => '<strong>' . ( ( ini_get( 'max_input_vars' ) ) ? ini_get( 'max_input_vars' ) : 'N/A' ) . '</strong>', //How many input variables may be accepted (limit is applied to $_GET, $_POST and $_COOKIE superglobal separately).
'PHP Max Upload Size' => $upload_max_filesize,
'PHP Allow URL fopen' => $allow_url_fopen,
'PHP Exif support' => $exif_read_data,
'PHP IPTC support' => $iptcparse,
'PHP XML support' => $xml_parser_create
);
$system_info['php_info']['PHP cURL'] = ( function_exists('curl_init') ) ? 'On' : 'Off';
$system_info['php_info']['Max Nesting Level'] = ( ( ini_get( 'max_input_nesting_level' ) ) ? ini_get( 'max_input_nesting_level' ) : 'N/A' );
$system_info['php_info']['Max Time 4 script'] = ( ( ini_get( 'max_input_time' ) ) ? ini_get( 'max_input_time' ) : 'N/A' ); //Maximum amount of time each script may spend parsing request data
$system_info['php_info']['Log'] = ( ( ini_get( 'error_log' ) ) ? ini_get( 'error_log' ) : 'N/A' );
if ( ini_get( "suhosin.get.max_value_length" ) ) {
$system_info['suhosin_info'] = array();
$system_info['suhosin_info']['POST max_array_index_length'] = ( ( ini_get( 'suhosin.post.max_array_index_length' ) ) ? ini_get( 'suhosin.post.max_array_index_length' ) : 'N/A' );
$system_info['suhosin_info']['REQUEST max_array_index_length'] = ( ( ini_get( 'suhosin.request.max_array_index_length' ) ) ? ini_get( 'suhosin.request.max_array_index_length' ) : 'N/A' );
$system_info['suhosin_info']['POST max_totalname_length'] = ( ( ini_get( 'suhosin.post.max_totalname_length' ) ) ? ini_get( 'suhosin.post.max_totalname_length' ) : 'N/A' );
$system_info['suhosin_info']['REQUEST max_totalname_length'] = ( ( ini_get( 'suhosin.request.max_totalname_length' ) ) ? ini_get( 'suhosin.request.max_totalname_length' ) : 'N/A' );
$system_info['suhosin_info']['POST max_vars'] = ( ( ini_get( 'suhosin.post.max_vars' ) ) ? ini_get( 'suhosin.post.max_vars' ) : 'N/A' );
$system_info['suhosin_info']['REQUEST max_vars'] = ( ( ini_get( 'suhosin.request.max_vars' ) ) ? ini_get( 'suhosin.request.max_vars' ) : 'N/A' );
$system_info['suhosin_info']['POST max_value_length'] = ( ( ini_get( 'suhosin.post.max_value_length' ) ) ? ini_get( 'suhosin.post.max_value_length' ) : 'N/A' );
$system_info['suhosin_info']['REQUEST max_value_length'] = ( ( ini_get( 'suhosin.request.max_value_length' ) ) ? ini_get( 'suhosin.request.max_value_length' ) : 'N/A' );
$system_info['suhosin_info']['POST max_name_length'] = ( ( ini_get( 'suhosin.post.max_name_length' ) ) ? ini_get( 'suhosin.post.max_name_length' ) : 'N/A' );
$system_info['suhosin_info']['REQUEST max_varname_length'] = ( ( ini_get( 'suhosin.request.max_varname_length' ) ) ? ini_get( 'suhosin.request.max_varname_length' ) : 'N/A' );
$system_info['suhosin_info']['POST max_array_depth'] = ( ( ini_get( 'suhosin.post.max_array_depth' ) ) ? ini_get( 'suhosin.post.max_array_depth' ) : 'N/A' );
$system_info['suhosin_info']['REQUEST max_array_depth'] = ( ( ini_get( 'suhosin.request.max_array_depth' ) ) ? ini_get( 'suhosin.request.max_array_depth' ) : 'N/A' );
}
if ( function_exists('gd_info') ) {
$gd_info = gd_info();
if ( isset( $gd_info['GD Version'] ) )
$gd_info = $gd_info['GD Version'];
else
$gd_info = json_encode( $gd_info );
} else {
$gd_info = 'Off';
}
$system_info['php_info']['PHP GD'] = $gd_info;
// More here https://docs.woocommerce.com/document/problems-with-large-amounts-of-data-not-saving-variations-rates-etc/
foreach ( $all_plugins as $path => $plugin ) {
if ( is_plugin_active( $path ) )
$system_info['active_plugins'][$plugin['Name']] = $plugin['Version'];
else
$system_info['inactive_plugins'][$plugin['Name']] = $plugin['Version'];
}
// Showing
foreach ( $system_info as $section_name => $section_values ) {
?>
<span class="wpdevelop">
<table class="table table-striped table-bordered">
<thead><tr><th colspan="2" style="border-bottom: 1px solid #eeeeee;padding: 10px;"><?php echo strtoupper( $section_name ); ?></th></tr></thead>
<tbody>
<?php
if ( !empty( $section_values ) ) {
foreach ( $section_values as $key => $value ) {
?>
<tr>
<td scope="row" style="width:18em;padding:4px 8px;"><?php echo $key; ?></td>
<td scope="row" style="padding:4px 8px;"><?php echo $value; ?></td>
</tr>
<?php
}
}
?>
</tbody>
</table>
</span>
<div class="clear"></div>
<?php
}
?>
<hr>
<div style="color:#777;">
<h4 style="font-size:1.1em;">Commonly required configuration vars in php.ini file:</h4>
<h4>General section:</h4>
<pre><code>memory_limit = 256M
max_execution_time = 120
post_max_size = 8M
upload_max_filesize = 8M
max_input_vars = 20480
post_max_size = 64M</code></pre>
<h4>Suhosin section (if installed):</h4>
<pre><code>suhosin.post.max_array_index_length = 1024
suhosin.post.max_totalname_length = 65535
suhosin.post.max_vars = 2048
suhosin.post.max_value_length = 1000000
suhosin.post.max_name_length = 256
suhosin.post.max_array_depth = 1000
suhosin.request.max_array_index_length = 1024
suhosin.request.max_totalname_length = 65535
suhosin.request.max_vars = 2048
suhosin.request.max_value_length = 1000000
suhosin.request.max_varname_length = 256
suhosin.request.max_array_depth = 1000</code></pre>
</div>
<?php
// phpinfo();
}
}
////////////////////////////////////////////////////////////////////////////////
// Support functions for MU version
////////////////////////////////////////////////////////////////////////////////
////////////////////////////////////////////////////////////////////////////////
// Support Specials
////////////////////////////////////////////////////////////////////////////////
/** Support 'hash_equals' this function at older servers than PHP 5.6.0 */
if ( !function_exists( 'hash_equals' ) ) {
function hash_equals( $known_string, $user_string ) {
$ret = 0;
if ( strlen( $known_string ) !== strlen( $user_string ) ) {
$user_string = $known_string;
$ret = 1;
}
$res = $known_string ^ $user_string;
for ( $i = strlen( $res ) - 1; $i >= 0; --$i ) {
$ret |= ord( $res[$i] );
}
return !$ret;
}
}
/** Check if this valid timestamp
*
* @param string|int $timestamp
* @return bool
*/
function opsd_is_valid_timestamp( $timestamp ) {
return ( ( (string) (int) $timestamp === $timestamp)
&& ($timestamp <= PHP_INT_MAX)
&& ($timestamp >= ~PHP_INT_MAX)
);
}
/** Create Blank files in protected dir.
*
* @return string - CSV content
*/
function opsd_create_blank_files() {
// Get OPSD_Upload obj. instance
$opsd_upload = opsd_upload();
// Protected secret name LEVEL 1
$dir_level1 = $opsd_upload->get_protected_dir_name();
// Install files and folders for uploading files and prevent hotlinking
$upload_dir = wp_upload_dir();
$files = array(
array(
'base' => $upload_dir['basedir'] . '/' . $dir_level1,
'baseurl' => $upload_dir['baseurl'] . '/' . $dir_level1,
'file' => 'test.txt',
'content' => 'Test File' . "\n"
)
, array(
'base' => $upload_dir['basedir'] . '/' . $dir_level1,
'baseurl' => $upload_dir['baseurl'] . '/' . $dir_level1,
'file' => 'test.html',
'content' => '<!DOCTYPE html>' . "\n"
. '<html>' . "\n"
. ' <head>' . "\n"
. ' <title>Test HTML File</title>' . "\n"
. ' <meta charset="UTF-8">' . "\n"
. ' <meta name="viewport" content="width=device-width, initial-scale=1.0">' . "\n"
. ' </head>' . "\n"
. ' <body>' . "\n"
. ' <div>Test HTML Content</div>' . "\n"
. ' </body>' . "\n"
. '</html>' . "\n"
)
);
foreach ( $files as $file ) {
if ( ( wp_mkdir_p( $file['base'] ) ) // Recursive directory creation based on full path.
&& ( ! file_exists( trailingslashit( $file['base'] ) . $file['file'] ) ) // If file not exist
) {
if ( $file_handle = @fopen( trailingslashit( $file['base'] ) . $file['file'], 'w' ) ) {
fwrite( $file_handle, $file['content'] );
fclose( $file_handle );
}
}
}
$new_products_arr = array();
$new_products_arr[] = array( 'title' => 'Text Files' );
$product_arr = array();
$product_arr[ 'id' ] = 1;
$product_arr[ 'title' ] = 'Text File';
$product_arr[ 'version_num' ] = '1.0';
$product_arr[ 'description' ] = 'Simple TXT file';
$product_arr[ 'path' ] = trim( str_replace( site_url(), '', trailingslashit( $files[0]['baseurl'] ) . $files[0]['file'] ) );
$new_products_arr[] = $product_arr;
$new_products_arr[] = array( 'title' => 'HTML Files' );
$product_arr = array();
$product_arr[ 'id' ] = 2;
$product_arr[ 'title' ] = 'HTML File';
$product_arr[ 'version_num' ] = '1.0';
$product_arr[ 'description' ] = 'Test HTML file';
$product_arr[ 'path' ] = trim( str_replace( site_url(), '', trailingslashit( $files[1]['baseurl'] ) . $files[1]['file'] ) );
$new_products_arr[] = $product_arr;
$products_obj = new OPSD_Products();
$products_csv = $products_obj->save_products( $new_products_arr );
return $products_csv;
}
//FixIn: 1.1.3.2
/**
* Send Secure Download Email to User
*
* @param $send_params = Array (
* [opsd_email_to] => test@wpbookingcalendar.com
* [send_copy_to_admin] => On
* [opsd_product_selection] => 1
* [opsd_product_expire] => +24 hours
* [opsd_product_ip_lock] =>
* [continue_without_product] => true | false
* [select_opsd_form] => my-custom-email
*
* In addition this array can contain any other parameters,
* that will be replaced in Email
*
* )
*
*
* @return array(
* 'status' => 'error' | 'email_sent' | 'link_generated'
* , (optional) 'error_type' => 'select_valid_product'
* , (optional) 'mail_api' => $mail_api
* , (optional) 'product_replace' => $replace
*
* )
*
*
* Example:
* do_action( 'opsd_send_secure_download_email_to_user', array( 'opsd_email_to' => 'email@server.com', 'send_copy_to_admin' => 'Off', 'opsd_product_selection' => 1, 'opsd_product_expire' => '+ 24 hours', 'continue_without_product' => true ) );
*
* Description:
*
* do_action( 'opsd_send_secure_download_email_to_user', array(
* 'opsd_email_to' => 'email@server.com' // Email, where we will send it
* , 'send_copy_to_admin' => 'Off' // On | Off - for sending copy to admin email, wchich defined at the Settings Eamils page
* , 'opsd_product_selection' => 1 // ID of product
* , 'opsd_product_expire' => '+ 24 hours' // Expiration time of link
* // , 'opsd_product_ip_lock' => false // Lock or NOT by IP, need to provide otherwise
* , 'continue_without_product' => true // Possible to send email without email
* // , 'select_opsd_form' => 'custom_email_name' // (Optional) need to use "Secure Downloads Email" (addon) for this.
* ) );
*
*/
function opsd_send_secure_download_email_to_user( $send_params ) {
$opt = array();
if ( isset( $send_params[ 'opsd_product_expire' ] ) ) $opt['expire'] = $send_params[ 'opsd_product_expire' ]; //FixIn: 1.2.2.2
if ( ! empty( $send_params[ 'opsd_product_ip_lock' ] ) ) $opt['ip'] = $send_params[ 'opsd_product_ip_lock' ];
if ( ! empty( $send_params[ 'opsd_email_to' ] ) ) $opt['order'] = $send_params[ 'opsd_email_to' ];
$replace = opsd_get_product_replace_shortcodes( $send_params[ 'opsd_product_selection' ], $opt );
// In case, if we added some additional shortcodes into $send_params for replacing in email.
$defaults = $send_params;
$replace = wp_parse_args( $replace, $defaults );
if ( ( empty( $replace['products_list'] ) )
&& ( false === $send_params[ 'continue_without_product' ] )
) {
return array(
'status' => 'error'
, 'error_type' => 'select_valid_product'
);
} else {
// Send Email to User -- Send copy of email to admin also to "From" email address
$mail_api = opsd_send_email_to_user_notification( $replace, $send_params['opsd_email_to'], $send_params['send_copy_to_admin'], $send_params );
if ( ( ! empty ( $send_params['opsd_email_to'] ) ) && ( false !== $mail_api ) ) {
return array(
'status' => 'email_sent'
, 'mail_api' => $mail_api
, 'product_replace' => $replace
);
} else {
return array(
'status' => 'link_generated'
, 'mail_api' => $mail_api
, 'product_replace' => $replace
);
}
}
}
add_filter( 'opsd_send_secure_download_email_to_user_filter' , 'opsd_send_secure_download_email_to_user' );
// $send_response = apply_filters( 'opsd_send_secure_download_email_to_user_filter', $send_params );
add_action( 'opsd_send_secure_download_email_to_user' , 'opsd_send_secure_download_email_to_user' );
// do_action( 'opsd_send_secure_download_email_to_user', $send_params );