├── .gitignore
├── CONTRIBUTING.md
├── LICENSE.md
├── README.md
├── includes
    ├── helpers.php
    ├── migrate-options.php
    └── wp-session-manager
    │   ├── .gitignore
    │   ├── README.md
    │   ├── composer.json
    │   ├── includes
    │       ├── class-recursive-arrayaccess.php
    │       ├── class-wp-session-utils.php
    │       ├── class-wp-session.php
    │       ├── wp-cli.php
    │       └── wp-session.php
    │   ├── readme.txt
    │   └── wp-session-manager.php
├── options
    ├── options.php
    ├── options_deprecated.php
    ├── security.php
    └── user-access.php
├── shortcodes
    ├── delete-account.php
    ├── email-change.php
    ├── login.php
    ├── navigation.php
    ├── password-change.php
    ├── password-reset.php
    └── signup.php
└── wordpress-for-web-apps.php


/.gitignore:
--------------------------------------------------------------------------------
 1 | # Node
 2 | node_modules
 3 | test/results
 4 | test/coverage
 5 | 
 6 | ## OS X
 7 | .DS_Store
 8 | ._*
 9 | .Spotlight-V100
10 | .Trashes


--------------------------------------------------------------------------------
/CONTRIBUTING.md:
--------------------------------------------------------------------------------
 1 | # How to contribute
 2 | 
 3 | I'm delighted that you're helping make this open source project better. Here are a few quick guidelines to make this an easier and better process for everyone.
 4 | 
 5 | ## Reporting a bug
 6 | 
 7 | First, **make sure the bug hasn't already been reported** by searching GitHub's issues section.
 8 | 
 9 | If no existing issue exists, go ahead and create one. **Please be sure to include all of the following:**
10 | 
11 | 1. A clear, descriptive title (ie. "A bug" is *not* a good title).
12 | 2. [A reduced test case.](https://css-tricks.com/reduced-test-cases/) In order to debug code issues, I need to see actual code in a browser.
13 | 3. The browser and OS that you're using.
14 | 
15 | ## Asking a question
16 | 
17 | Before asking, please **make sure the question hasn't already been asked** by searching GitHub's issues section.
18 | 
19 | ## Submitting a Pull Request
20 | 
21 | Please make sure your code meets the following code standards:
22 | 
23 | - Camel case for JavaScript variables.
24 | - [Object-Oriented CSS](http://www.slideshare.net/stubbornella/object-oriented-css) for CSS selectors.
25 | - Favor readable code over brevity. The build process will reduce size, so opt for readability. (ex. `var navigation` is better than `var n`)
26 | - Order CSS properties alphabetically.
27 | - Hard tabs.
28 | 
29 | Before submitting, make sure that you've updated the version number using semantic versioning.


--------------------------------------------------------------------------------
/LICENSE.md:
--------------------------------------------------------------------------------
 1 | # The MIT License (MIT)
 2 | 
 3 | Copyright (c) Go Make Things, LLC
 4 | 
 5 | Permission is hereby granted, free of charge, to any person obtaining a copy
 6 | of this software and associated documentation files (the "Software"), to deal
 7 | in the Software without restriction, including without limitation the rights
 8 | to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
 9 | copies of the Software, and to permit persons to whom the Software is
10 | furnished to do so, subject to the following conditions:
11 | 
12 | The above copyright notice and this permission notice shall be included in all
13 | copies or substantial portions of the Software.
14 | 
15 | THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
16 | IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
17 | FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
18 | AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
19 | LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
20 | OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
21 | SOFTWARE.


--------------------------------------------------------------------------------
/README.md:
--------------------------------------------------------------------------------
  1 | # [DEPRECATED] WordPress for Web Apps
  2 | 
  3 | *__Deprecation Notice:__ This plugin is no longer be maintained or updated.*
  4 | 
  5 | A plugin that provides the essential components you need to power your web app with WordPress.
  6 | 
  7 | - Front-end forms:
  8 | 	- Login
  9 | 	- Sign-up
 10 | 	- Password reset
 11 | 	- Email change
 12 | 	- Password change
 13 | 	- Delete account
 14 | - User access settings, so you can selectively hide content from logged-out or logged-in users.
 15 | - Security settings let you set password requirements, hide the admin bar, and force password resets.
 16 | - The web app settings panel lets you easily configure error messages, button text, and more.
 17 | 
 18 | [Download WordPress for Web Apps](https://github.com/cferdinandi/wordpress-for-web-apps/archive/master.zip)
 19 | 
 20 | 
 21 | 
 22 | ## Getting Started
 23 | 
 24 | Getting started with WordPress for Web Apps is as simple as installing a plugin:
 25 | 
 26 | 1. Upload the `wordpress-for-web-apps` folder to the `/wp-content/plugins/` directory.
 27 | 2. Activate the plugin through the Plugins menu in WordPress.
 28 | 
 29 | To make sure you always get the latest updates, it’s recommended that you also install the [GitHub Updater plugin](https://github.com/afragen/github-updater).
 30 | 
 31 | 
 32 | 
 33 | ## Using WordPress for Web Apps
 34 | 
 35 | Configure all of your settings under `Settings` > `Web Apps` in the WordPress Dashboard.
 36 | 
 37 | ### Shortcodes
 38 | 
 39 | - `[wpwa_login]` - Login form
 40 | - `[wpwa_signup]` - Sign up form
 41 | - `[wpwa_change_email]` - Change email form
 42 | - `[wpwa_change_password]` - Change password form
 43 | - `[wpwa_forgot_password]` - Forgot password/password reset form
 44 | - `[wpwa_delete_account]` - Delete account form
 45 | - `[wpwa_logout]` - Logout URL (can be included as a `wp_nav_menu()` URL)
 46 | - `[wpwa_username]` - The current user's username (can be included as the text in a `wp_nav_menu()` link)
 47 | - `[wpwa_referrer]` - Adds `referrer={{current page URL}}`, handy for login/signup redirects (can be included in a `wp_nav_menu()` URL)
 48 | 
 49 | ### User Access
 50 | 
 51 | All pages will now include a metabox labeled *User Access*. Select `Everyone`, `Only Logged In Users`, or `Only Logged Out Users` as desired and publish or update your page.
 52 | 
 53 | ### Action Hooks
 54 | 
 55 | #### wpwebapp_after_login
 56 | 
 57 | Runs after a user has logged in. Passes in the user's `$username` as an argument.
 58 | 
 59 | ```php
 60 | do_action( 'wpwebapp_after_login', $username );
 61 | ```
 62 | 
 63 | #### wpwebapp_after_signup
 64 | 
 65 | Runs after a user has signed up. Passes in the new user's `$username` and `$email` as arguments.
 66 | 
 67 | ```php
 68 | do_action( 'wpwebapp_after_signup', $username, $email );
 69 | ```
 70 | 
 71 | #### wpwebapp_after_email_change
 72 | 
 73 | Runs after a user has changed their email address. Passes in the user's `$user_id` and `$old_email` as arguments.
 74 | 
 75 | ```php
 76 | do_action( 'wpwebapp_after_email_change', $user_id, $old_email );
 77 | ```
 78 | 
 79 | #### wpwebapp_after_password_change
 80 | 
 81 | Runs after a user's password has been changed. Passes in the user's `$user_id` as an argument.
 82 | 
 83 | ```php
 84 | do_action( 'wpwebapp_after_password_change', $user_id );
 85 | ```
 86 | 
 87 | #### wpwebapp_after_password_forgot_email_sent
 88 | 
 89 | Runs after a password reset email is sent to a user. Passes in the user's `$user_id` as an argument.
 90 | 
 91 | ```php
 92 | do_action( 'wpwebapp_after_password_forgot_email_sent', $user_id );
 93 | ```
 94 | 
 95 | #### wpwebapp_after_password_reset
 96 | 
 97 | Runs after a user's password has been reset. Passes in the user's `$user_id` as an argument.
 98 | 
 99 | ```php
100 | do_action( 'wpwebapp_after_password_reset', $user_id );
101 | ```
102 | 
103 | #### wpwebapp_after_delete_user
104 | 
105 | Runs after a user deletes their account. Passes in the former user's `$username` and `$email` as arguments.
106 | 
107 | ```php
108 | do_action( 'wpwebapp_after_delete_user',  $username, $email );
109 | ```
110 | 
111 | ### Redirecting after login or signup
112 | 
113 | To redirect a user back to their current page after login or sign up, add the `referrer={{current URL}}` query string to the login or sign up page URL, where `{{current URL}}` is the URL of the page the user is currently on. You can also use the `[wpwa_referrer]` shortcode to handle this dynamically.
114 | 
115 | 
116 | 
117 | ## CSS Hooks
118 | 
119 | Every form and input includes a unique `id` you can hook into for styling. Additionally, form element categories also include shared classes you can use to easily style like elements in a consistent way.
120 | 
121 | - `.wpwebapp-form-label` - Form labels
122 | - `.wpwebapp-form-input` - Text inputs
123 | - `.wpwebaspp-form-password` - Password inputs
124 | - `.wpwebapp-form-button` - Form buttons and input[type="submit"]
125 | - `.wpwebapp-form-label-checkbox` - Labels for checkboxes
126 | - `.wpwebapp-form-checkbox` - Checkboxes
127 | 
128 | 
129 | 
130 | ## How to Contribute
131 | 
132 | To contribute to this project, please consult the [Contribution Guidelines](CONTRIBUTING.md).
133 | 
134 | 
135 | 
136 | ## License
137 | 
138 | The code is available under the [MIT License](LICENSE.md).
139 | 


--------------------------------------------------------------------------------
/includes/helpers.php:
--------------------------------------------------------------------------------
  1 | <?php
  2 | 
  3 | /**
  4 |  * Helper Methods
  5 |  */
  6 | 
  7 | 
  8 | 	/**
  9 | 	 * WP Session Helpers
 10 | 	 */
 11 | 
 12 | 	// Set session data
 13 | 	function wpwebapp_set_session( $name, $value, $sanitize = null ) {
 14 | 
 15 | 		// Start session
 16 | 		$wp_session = WP_Session::get_instance();
 17 | 
 18 | 		// Sanitize data
 19 | 		if ( $sanitize === 'post' ) {
 20 | 			$value = wp_filter_post_kses( $value );
 21 | 		} elseif ( $sanitize === 'nohtml' ) {
 22 | 			$value = wp_filter_nohtml_kses( $value );
 23 | 		}
 24 | 
 25 | 		// Store session value
 26 | 		$wp_session[$name] = $value;
 27 | 
 28 | 	}
 29 | 
 30 | 	// Get session data
 31 | 	function wpwebapp_get_session( $name, $unset = false ) {
 32 | 
 33 | 		// Start session
 34 | 		$wp_session = WP_Session::get_instance();
 35 | 
 36 | 		// Store session value
 37 | 		$value = $wp_session[$name];
 38 | 
 39 | 		// If value is array, transform it
 40 | 		if ( is_object( $value ) ) {
 41 | 			$value->toArray();
 42 | 		}
 43 | 
 44 | 		// Unset session value
 45 | 		if ( $unset ) {
 46 | 			unset( $wp_session[$name] );
 47 | 		}
 48 | 
 49 | 		return $value;
 50 | 
 51 | 	}
 52 | 
 53 | 
 54 | 
 55 | 	/**
 56 | 	 * URL Helpers
 57 | 	 * Get, sanitize, and process URLs.
 58 | 	 */
 59 | 
 60 | 	// Get and sanitize the current URL
 61 | 	function wpwebapp_get_url() {
 62 | 		$url  = @( $_SERVER['HTTPS'] != 'on' ) ? 'http://' . $_SERVER['SERVER_NAME'] :  'https://' . $_SERVER['SERVER_NAME'];
 63 | 		$url .= ( $_SERVER['SERVER_PORT'] !== 80 ) ? ":" . $_SERVER['SERVER_PORT'] : '';
 64 | 		$url .= $_SERVER['REQUEST_URI'];
 65 | 		return $url;
 66 | 	}
 67 | 
 68 | 	// Get the site domain and remove the www.
 69 | 	function wpwebapp_get_site_domain() {
 70 | 		$sitename = strtolower( $_SERVER['SERVER_NAME'] );
 71 | 		if ( substr( $sitename, 0, 4 ) == 'www.' ) {
 72 | 			$sitename = substr( $sitename, 4 );
 73 | 		}
 74 | 		return $sitename;
 75 | 	}
 76 | 
 77 | 	// Prepare URL for status string
 78 | 	function wpwebapp_prepare_url( $url ) {
 79 | 
 80 | 		// If URL has a '?', add an '&'.
 81 | 		// Otherwise, add a '?'.
 82 | 		$url_status = strpos($url, '?');
 83 | 		if ( $url_status === false ) {
 84 | 			$concate = '?';
 85 | 		}
 86 | 		else {
 87 | 			$concate = '&';
 88 | 		}
 89 | 
 90 | 		return $url . $concate;
 91 | 
 92 | 	}
 93 | 
 94 | 	// Remove a $_GET variable from the URL
 95 | 	function wpwebapp_clean_url( $variable, $url ) {
 96 | 		$new_url = preg_replace('/(?:&|(\?))' . $variable . '=[^&]*(?(1)&|)?/i', '$1', $url);
 97 | 		$last_char = substr( $new_url, -1 );
 98 | 		if ( $last_char == '?' ) {
 99 | 			$new_url = substr($new_url, 0, -1);
100 | 		}
101 | 		return $new_url;
102 | 	}
103 | 
104 | 	// Get the proper redirect URL
105 | 	function wpwebapp_get_redirect_url( $id, $refer = 'off' ) {
106 | 		$url = $id === 0 || $id === '0' ? get_home_url() : get_permalink( $id );
107 | 		if ( $refer === 'on' ) {
108 | 			$url = wpwebapp_prepare_url( $url ) . 'referrer=' . wpwebapp_get_url();
109 | 		}
110 | 		return esc_url_raw( $url );
111 | 	}
112 | 
113 | 	// Set a password reset key
114 | 	function wpwebapp_set_reset_key( $user_id, $url, $expires ) {
115 | 
116 | 		// Add a secret, temporary key to the database
117 | 		$key = wp_generate_password( 48, false );
118 | 		set_transient( 'wpwebapp_forgot_password_key_' . $key . $user_id, $key, 60 * 60 * $expires );
119 | 
120 | 		// Return a URL with the reset key
121 | 		return wpwebapp_prepare_url( $url ) . 'reset_pw=' . $key . $user_id;
122 | 	}
123 | 
124 | 
125 | 
126 | 	/**
127 | 	 * String tests
128 | 	 * Test strings for letters, numbers, and special characters.
129 | 	 * @link http://stackoverflow.com/a/9588010/1293256
130 | 	 */
131 | 
132 | 	// Does string contain letter?
133 | 	function wpwebapp_has_letters( $string ) {
134 | 		return preg_match( '/[a-zA-Z]/', $string );
135 | 	}
136 | 
137 | 	// Does string contain numbers?
138 | 	function wpwebapp_has_numbers( $string ) {
139 | 		return preg_match( '/\d/', $string );
140 | 	}
141 | 
142 | 	// Does string contain special characters?
143 | 	function wpwebapp_has_special_chars( $string ) {
144 | 		return preg_match('/[^a-zA-Z\d]/', $string);
145 | 	}
146 | 
147 | 	// Does string contain mixed case?
148 | 	function wpwebapp_has_mixed_case( $string ) {
149 | 		if ( empty( preg_match('/[a-z]/', $string) ) ) return false;
150 | 		if ( empty( preg_match('/[A-Z]/', $string) ) ) return false;
151 | 		return true;
152 | 	}


--------------------------------------------------------------------------------
/includes/migrate-options.php:
--------------------------------------------------------------------------------
  1 | <?php
  2 | 
  3 | /**
  4 |  * Migrate settings from v7.x to v8.x
  5 |  */
  6 | 
  7 | 
  8 | 	/**
  9 | 	 * Migrate old settings from v7.x or lower to the new v8.x+ format
 10 | 	 * @return [type] [description]
 11 | 	 */
 12 | 	function wpwebapp_migrate_settings() {
 13 | 
 14 | 		// Get the old settings from v7.x and older
 15 | 		$saved = get_option( 'wpwebapp_theme_options' );
 16 | 		if ( empty( $saved ) ) return;
 17 | 
 18 | 		/**
 19 | 		 * Migrate the old settings to the new settings
 20 | 		 */
 21 | 		update_option('wpwebapp_theme_options_signup', array(
 22 | 			'signup_username_label' => $saved['signup_username_label'],
 23 | 			'signup_email_label' => $saved['signup_email_label'],
 24 | 			'signup_password_label' => $saved['signup_password_label'],
 25 | 			'signup_submit_text' => $saved['signup_submit_text'],
 26 | 			'signup_show_requirements' => ( array_key_exists('signup_show_requirements', $saved) ? $saved['signup_show_requirements'] : 'off' ),
 27 | 			'signup_username_field_empty_error' => $saved['signup_username_field_empty_error'],
 28 | 			'signup_email_field_empty_error' => $saved['signup_email_field_empty_error'],
 29 | 			'signup_password_field_empty_error' => $saved['signup_password_field_empty_error'],
 30 | 			'signup_username_invalid_error' => $saved['signup_username_invalid_error'],
 31 | 			'signup_username_exists_error' => $saved['signup_username_exists_error'],
 32 | 			'signup_email_invalid_error' => $saved['signup_email_invalid_error'],
 33 | 			'signup_email_exists_error' => $saved['signup_email_exists_error'],
 34 | 			'signup_login_failed_error' => $saved['signup_login_failed_error'],
 35 | 			'signup_receive_notifications' => ( array_key_exists('signup_receive_notifications', $saved) ? $saved['signup_receive_notifications'] : 'off' ),
 36 | 			'signup_notification_to_admin' => $saved['signup_notification_to_admin'],
 37 | 			'signup_send_notifications' => ( array_key_exists('signup_send_notifications', $saved) ? $saved['signup_send_notifications'] : 'off' ),
 38 | 			'signup_notification_to_user' => $saved['signup_notification_to_user'],
 39 | 			'create_user_password_time_valid' => $saved['create_user_password_time_valid'],
 40 | 			'create_user_send_notifications' => ( array_key_exists('create_user_send_notifications', $saved) ? $saved['create_user_send_notifications'] : 'off' ),
 41 | 			'create_user_notification' => $saved['create_user_notification'],
 42 | 		));
 43 | 
 44 | 		update_option('wpwebapp_theme_options_login', array(
 45 | 			'login_username_label' => $saved['login_username_label'],
 46 | 			'login_password_label' => $saved['login_password_label'],
 47 | 			'login_rememberme_label' => $saved['login_rememberme_label'],
 48 | 			'login_submit_text' =>  $saved['login_submit_text'],
 49 | 			'login_username_field_empty_error' => $saved['login_username_field_empty_error'],
 50 | 			'login_password_field_empty_error' => $saved['login_password_field_empty_error'],
 51 | 			'login_failed_error' => $saved['login_failed_error'],
 52 | 		));
 53 | 
 54 | 		update_option('wpwebapp_theme_options_redirects', array(
 55 | 			'login_redirect' => $saved['login_redirect'],
 56 | 			'logout_redirect' => $saved['logout_redirect'],
 57 | 			'password_reset_redirect' => $saved['password_reset_redirect'],
 58 | 			'add_redirect_referrer' => ( array_key_exists('add_redirect_referrer', $saved) ? $saved['add_redirect_referrer'] : 'off' ),
 59 | 		));
 60 | 
 61 | 		update_option('wpwebapp_theme_options_change_email', array(
 62 | 			'email_change_current_email_label' => $saved['email_change_current_email_label'],
 63 | 			'email_change_password_label' => $saved['email_change_password_label'],
 64 | 			'email_change_submit_text' =>  $saved['email_change_submit_text'],
 65 | 			'email_change_email_field_empty_error' => $saved['email_change_email_field_empty_error'],
 66 | 			'email_change_password_field_empty_error' => $saved['email_change_password_field_empty_error'],
 67 | 			'email_change_password_error' => $saved['email_change_password_error'],
 68 | 			'email_change_success' => $saved['email_change_success'],
 69 | 		));
 70 | 
 71 | 		update_option('wpwebapp_theme_options_change_password', array(
 72 | 			'password_change_current_password_label' => $saved['password_change_current_password_label'],
 73 | 			'password_change_new_password_label' => $saved['password_change_new_password_label'],
 74 | 			'password_change_submit_text' => $saved['password_change_submit_text'],
 75 | 			'password_change_show_requirements' => ( array_key_exists('password_change_show_requirements', $saved) ? $saved['password_change_show_requirements'] : 'off' ),
 76 | 			'password_change_forced_reset_error' => $saved['password_change_forced_reset_error'],
 77 | 			'password_change_current_password_field_empty_error' => $saved['password_change_current_password_field_empty_error'],
 78 | 			'password_change_new_password_field_empty_error' => $saved['password_change_new_password_field_empty_error'],
 79 | 			'password_change_password_error' => $saved['password_change_password_error'],
 80 | 			'password_change_success' => $saved['password_change_success'],
 81 | 			'password_change_receive_notifications' => ( array_key_exists('password_change_receive_notifications', $saved) ? $saved['password_change_receive_notifications'] : 'off' ),
 82 | 			'password_change_notification_to_admin' => $saved['password_change_notification_to_admin'],
 83 | 			'password_change_send_notifications' => ( array_key_exists('password_change_send_notifications', $saved) ? $saved['password_change_send_notifications'] : 'off' ),
 84 | 			'password_change_notification_to_user' => $saved['password_change_notification_to_user'],
 85 | 		));
 86 | 
 87 | 		update_option('wpwebapp_theme_options_forgot_password', array(
 88 | 			'password_reset_url' => $saved['password_reset_url'],
 89 | 			'password_forgot_label' => $saved['password_forgot_label'],
 90 | 			'password_forgot_submit_text' => $saved['password_forgot_submit_text'],
 91 | 			'password_reset_label' => $saved['password_reset_label'],
 92 | 			'password_reset_submit_text' => $saved['password_reset_submit_text'],
 93 | 			'password_reset_show_requirements' => ( array_key_exists('password_reset_show_requirements', $saved) ? $saved['password_reset_show_requirements'] : 'off' ),
 94 | 			'password_forgot_password_field_empty_error' => $saved['password_forgot_password_field_empty_error'],
 95 | 			'password_forgot_password_invalid_user_error' => $saved['password_forgot_password_invalid_user_error'],
 96 | 			'password_forgot_password_is_admin_error' => $saved['password_forgot_password_is_admin_error'],
 97 | 			'password_forgot_password_email_error' => $saved['password_forgot_password_email_error'],
 98 | 			'password_forgot_password_reset_key_expired_error' => $saved['password_forgot_password_reset_key_expired_error'],
 99 | 			'password_forgot_password_success' => $saved['password_forgot_password_success'],
100 | 			'password_reset_password_field_empty_error' => $saved['password_reset_password_field_empty_error'],
101 | 			'password_reset_time_valid' => $saved['password_reset_time_valid'],
102 | 			'password_reset_notification_email' => $saved['password_reset_notification_email'],
103 | 		));
104 | 
105 | 		update_option('wpwebapp_theme_options_delete_account', array(
106 | 			'delete_account_password_label' => $saved['delete_account_password_label'],
107 | 			'delete_account_submit_text' =>  $saved['delete_account_submit_text'],
108 | 			'delete_account_password_error' => $saved['delete_account_password_error'],
109 | 			'delete_account_redirect' => $saved['delete_account_redirect'],
110 | 		));
111 | 
112 | 		update_option('wpwebapp_theme_options_security', array(
113 | 			'password_minimum_length' => $saved['password_minimum_length'],
114 | 			'password_requires_letters' => ( array_key_exists('password_requires_letters', $saved) ? $saved['password_requires_letters'] : 'off' ),
115 | 			'password_requires_numbers' => ( array_key_exists('password_requires_numbers', $saved) ? $saved['password_requires_numbers'] : 'off' ),
116 | 			'password_requires_special_characters' => ( array_key_exists('password_requires_special_characters', $saved) ? $saved['password_requires_special_characters'] : 'off' ),
117 | 			'password_requires_mixed_case' => ( array_key_exists('password_requires_mixed_case', $saved) ? $saved['password_requires_mixed_case'] : 'off' ),
118 | 			'show_admin_bar' => ( array_key_exists('show_admin_bar', $saved) ? $saved['show_admin_bar'] : 'off' ),
119 | 		));
120 | 
121 | 		// Remove the old settings
122 | 		delete_option( 'wpwebapp_theme_options' );
123 | 
124 | 	}
125 | 	add_action( 'plugins_loaded', 'wpwebapp_migrate_settings' );


--------------------------------------------------------------------------------
/includes/wp-session-manager/.gitignore:
--------------------------------------------------------------------------------
1 | .idea/
2 | 


--------------------------------------------------------------------------------
/includes/wp-session-manager/README.md:
--------------------------------------------------------------------------------
  1 | WP Session Manager
  2 | ==================
  3 | 
  4 | Prototype session management for WordPress.
  5 | 
  6 | Description
  7 | -----------
  8 | 
  9 | Adds `$_SESSION`-like functionality to WordPress.
 10 | 
 11 | Every visitor, logged in or not, will be issued an instance of `WP_Session`.  Their instance will be identified by an ID
 12 | stored in the `_wp_session` cookie.  Typically, session data will be stored in a WordPress transient, but if your
 13 | installation has a caching system in-place (i.e. memcached), the session data might be stored in memory.
 14 | 
 15 | This provides plugin and theme authors the ability to use WordPress-managed session variables without having to use the
 16 | standard PHP `$_SESSION` superglobal.
 17 | 
 18 | Installation
 19 | ------------
 20 | 
 21 | **Manual Installation**
 22 | 
 23 | 1. Upload the entire `/wp-session-manager` folder to the `/wp-content/plugins/` directory.
 24 | 1. Activate the plugin through the 'Plugins' menu in WordPress.
 25 | 1. Use `WP_Session::get_instance();` in your code.
 26 | 
 27 | Frequently Asked Questions
 28 | --------------------------
 29 | 
 30 | **How do I add session variables?**
 31 | 
 32 | First, make a reference to the WP_Session instance.  Then, use it like an associative array, just like `$_SESSION`:
 33 | 
 34 | `$wp_session = WP_Session::get_instance();
 35 | $wp_session['user_name'] = 'User Name';                            // A string
 36 | $wp_session['user_contact'] = array( 'email' => 'user@name.com' ); // An array
 37 | $wp_session['user_obj'] = new WP_User( 1 );                        // An object`
 38 | 
 39 | **How long do session variables live?**
 40 | 
 41 | By default, session variables will live for 24 minutes from the last time they were accessed - either read or write.
 42 | 
 43 | This value can be changed by using the `wp_session_expiration` filter:
 44 | 
 45 | `add_filter( 'wp_session_expiration', function() { return 60 * 60; } ); // Set expiration to 1 hour`
 46 | 
 47 | Screenshots
 48 | -----------
 49 | 
 50 | None
 51 | 
 52 | Changelog
 53 | ---------
 54 | 
 55 | **1.2.0**
 56 | 
 57 | - Update: Enhanced plugin organization
 58 | - Update: Added WP_CLI support for session management
 59 | - Update: Add Composer definitions
 60 | - Fix: Break up the deletion of old sessions so queries don't time out under load
 61 | 
 62 | **1.1.2**
 63 | 
 64 | - Fix a race condition where session expiration options could accidentally be set to autoload
 65 | - Make the garbage collection routine run hourly to alleviate long-running tasks on larger sites
 66 | 
 67 | **1.1.1**
 68 | 
 69 | - Fix a bug where session expiration was not properly set upon instantiation
 70 | 
 71 | **1.1**
 72 | 
 73 | - Implement Recursive_ArrayAccess to provide multidimensional array support
 74 | - Better expiration for session data
 75 | - Implement garbage collection to keep the database clean
 76 | 
 77 | **1.0.2**
 78 | 
 79 | - Switch to object persistence rather than transients
 80 | 
 81 | **1.0.1**
 82 | 
 83 | - Changes implementation to avoid the use of a global variable (still registered for convenience)
 84 | 
 85 | **1.0**
 86 | 
 87 | - First version
 88 | 
 89 | Upgrade Notice
 90 | --------------
 91 | 
 92 | **1.0**
 93 | 
 94 | First version
 95 | 
 96 | Additional Information
 97 | ----------------------
 98 | 
 99 | **Contributors:** ericmann
100 | **Donate link:** http://jumping-duck.com/wordpress/plugins
101 | **Tags:** session
102 | **Requires at least:** 3.4.2
103 | **Tested up to:** 4.0
104 | **Stable tag:** 1.2.0
105 | **License:** GPLv2 or later
106 | **License URI:** http://www.gnu.org/licenses/gpl-2.0.html


--------------------------------------------------------------------------------
/includes/wp-session-manager/composer.json:
--------------------------------------------------------------------------------
1 | {
2 | 	"name"             : "ericmann/wp-session-manager",
3 | 	"type"             : "wordpress-plugin",
4 | 	"minimum-stability": "dev",
5 | 	"require-dev"      : {},
6 | 	"require"          : {}
7 | }


--------------------------------------------------------------------------------
/includes/wp-session-manager/includes/class-recursive-arrayaccess.php:
--------------------------------------------------------------------------------
  1 | <?php
  2 | /**
  3 |  * Multidimensional ArrayAccess
  4 |  *
  5 |  * Allows ArrayAccess-like functionality with multidimensional arrays.  Fully supports
  6 |  * both sets and unsets.
  7 |  *
  8 |  * @package WordPress
  9 |  * @subpackage Session
 10 |  * @since 3.7.0
 11 |  */
 12 | 
 13 | /**
 14 |  * Recursive array class to allow multidimensional array access.
 15 |  *
 16 |  * @package WordPress
 17 |  * @since 3.7.0
 18 |  */
 19 | class Recursive_ArrayAccess implements ArrayAccess, Iterator, Countable {
 20 | 	/**
 21 | 	 * Internal data collection.
 22 | 	 *
 23 | 	 * @var array
 24 | 	 */
 25 | 	protected $container = array();
 26 | 
 27 | 	/**
 28 | 	 * Flag whether or not the internal collection has been changed.
 29 | 	 *
 30 | 	 * @var bool
 31 | 	 */
 32 | 	protected $dirty = false;
 33 | 
 34 | 	/**
 35 | 	 * Default object constructor.
 36 | 	 *
 37 | 	 * @param array $data
 38 | 	 */
 39 | 	protected function __construct( $data = array() ) {
 40 | 		foreach ( $data as $key => $value ) {
 41 | 			$this[ $key ] = $value;
 42 | 		}
 43 | 	}
 44 | 
 45 | 	/**
 46 | 	 * Allow deep copies of objects
 47 | 	 */
 48 | 	public function __clone() {
 49 | 		foreach ( $this->container as $key => $value ) {
 50 | 			if ( $value instanceof self ) {
 51 | 				$this[ $key ] = clone $value;
 52 | 			}
 53 | 		}
 54 | 	}
 55 | 
 56 | 	/**
 57 | 	 * Output the data container as a multidimensional array.
 58 | 	 *
 59 | 	 * @return array
 60 | 	 */
 61 | 	public function toArray() {
 62 | 		$data = $this->container;
 63 | 		foreach ( $data as $key => $value ) {
 64 | 			if ( $value instanceof self ) {
 65 | 				$data[ $key ] = $value->toArray();
 66 | 			}
 67 | 		}
 68 | 		return $data;
 69 | 	}
 70 | 
 71 | 	/*****************************************************************/
 72 | 	/*                   ArrayAccess Implementation                  */
 73 | 	/*****************************************************************/
 74 | 
 75 | 	/**
 76 | 	 * Whether a offset exists
 77 | 	 *
 78 | 	 * @link http://php.net/manual/en/arrayaccess.offsetexists.php
 79 | 	 *
 80 | 	 * @param mixed $offset An offset to check for.
 81 | 	 *
 82 | 	 * @return boolean true on success or false on failure.
 83 | 	 */
 84 | 	public function offsetExists( $offset ) {
 85 | 		return isset( $this->container[ $offset ]) ;
 86 | 	}
 87 | 
 88 | 	/**
 89 | 	 * Offset to retrieve
 90 | 	 *
 91 | 	 * @link http://php.net/manual/en/arrayaccess.offsetget.php
 92 | 	 *
 93 | 	 * @param mixed $offset The offset to retrieve.
 94 | 	 *
 95 | 	 * @return mixed Can return all value types.
 96 | 	 */
 97 | 	public function offsetGet( $offset ) {
 98 | 		return isset( $this->container[ $offset ] ) ? $this->container[ $offset ] : null;
 99 | 	}
100 | 
101 | 	/**
102 | 	 * Offset to set
103 | 	 *
104 | 	 * @link http://php.net/manual/en/arrayaccess.offsetset.php
105 | 	 *
106 | 	 * @param mixed $offset The offset to assign the value to.
107 | 	 * @param mixed $value  The value to set.
108 | 	 *
109 | 	 * @return void
110 | 	 */
111 | 	public function offsetSet( $offset, $data ) {
112 | 		if ( is_array( $data ) ) {
113 | 			$data = new self( $data );
114 | 		}
115 | 		if ( $offset === null ) { // don't forget this!
116 | 			$this->container[] = $data;
117 | 		} else {
118 | 			$this->container[ $offset ] = $data;
119 | 		}
120 | 
121 | 		$this->dirty = true;
122 | 	}
123 | 
124 | 	/**
125 | 	 * Offset to unset
126 | 	 *
127 | 	 * @link http://php.net/manual/en/arrayaccess.offsetunset.php
128 | 	 *
129 | 	 * @param mixed $offset The offset to unset.
130 | 	 *
131 | 	 * @return void
132 | 	 */
133 | 	public function offsetUnset( $offset ) {
134 | 		unset( $this->container[ $offset ] );
135 | 
136 | 		$this->dirty = true;
137 | 	}
138 | 	
139 | 	
140 | 	/*****************************************************************/
141 | 	/*                     Iterator Implementation                   */
142 | 	/*****************************************************************/
143 | 
144 | 	/**
145 | 	 * Current position of the array.
146 | 	 *
147 | 	 * @link http://php.net/manual/en/iterator.current.php
148 | 	 *
149 | 	 * @return mixed
150 | 	 */
151 | 	public function current() {
152 | 		return current( $this->container );
153 | 	}
154 | 
155 | 	/**
156 | 	 * Key of the current element.
157 | 	 *
158 | 	 * @link http://php.net/manual/en/iterator.key.php
159 | 	 *
160 | 	 * @return mixed
161 | 	 */
162 | 	public function key() {
163 | 		return key( $this->container );
164 | 	}
165 | 
166 | 	/**
167 | 	 * Move the internal point of the container array to the next item
168 | 	 *
169 | 	 * @link http://php.net/manual/en/iterator.next.php
170 | 	 *
171 | 	 * @return void
172 | 	 */
173 | 	public function next() {
174 | 		next( $this->container );
175 | 	}
176 | 
177 | 	/**
178 | 	 * Rewind the internal point of the container array.
179 | 	 *
180 | 	 * @link http://php.net/manual/en/iterator.rewind.php
181 | 	 *
182 | 	 * @return void
183 | 	 */
184 | 	public function rewind() {
185 | 		reset( $this->container );
186 | 	}
187 | 
188 | 	/**
189 | 	 * Is the current key valid?
190 | 	 *
191 | 	 * @link http://php.net/manual/en/iterator.rewind.php
192 | 	 *
193 | 	 * @return bool
194 | 	 */
195 | 	public function valid() {
196 | 		return $this->offsetExists( $this->key() );
197 | 	}
198 | 
199 | 	/*****************************************************************/
200 | 	/*                    Countable Implementation                   */
201 | 	/*****************************************************************/
202 | 
203 | 	/**
204 | 	 * Get the count of elements in the container array.
205 | 	 *
206 | 	 * @link http://php.net/manual/en/countable.count.php
207 | 	 *
208 | 	 * @return int
209 | 	 */
210 | 	public function count() {
211 | 		return count( $this->container );
212 | 	}
213 | }
214 | 


--------------------------------------------------------------------------------
/includes/wp-session-manager/includes/class-wp-session-utils.php:
--------------------------------------------------------------------------------
  1 | <?php
  2 | 
  3 | /**
  4 |  * Utility class for sesion utilities
  5 |  *
  6 |  * THIS CLASS SHOULD NEVER BE INSTANTIATED
  7 |  */
  8 | class WP_Session_Utils {
  9 | 	/**
 10 | 	 * Count the total sessions in the database.
 11 | 	 *
 12 | 	 * @global wpdb $wpdb
 13 | 	 *
 14 | 	 * @return int
 15 | 	 */
 16 | 	public static function count_sessions() {
 17 | 		global $wpdb;
 18 | 
 19 | 		$query = "SELECT COUNT(*) FROM $wpdb->options WHERE option_name LIKE '_wp_session_expires_%'";
 20 | 
 21 | 		/**
 22 | 		 * Filter the query in case tables are non-standard.
 23 | 		 *
 24 | 		 * @param string $query Database count query
 25 | 		 */
 26 | 		$query = apply_filters( 'wp_session_count_query', $query );
 27 | 
 28 | 		$sessions = $wpdb->get_var( $query );
 29 | 
 30 | 		return absint( $sessions );
 31 | 	}
 32 | 
 33 | 	/**
 34 | 	 * Create a new, random session in the database.
 35 | 	 *
 36 | 	 * @param null|string $date
 37 | 	 */
 38 | 	public static function create_dummy_session( $date = null ) {
 39 | 		// Generate our date
 40 | 		if ( null !== $date ) {
 41 | 			$time = strtotime( $date );
 42 | 
 43 | 			if ( false === $time ) {
 44 | 				$date = null;
 45 | 			} else {
 46 | 				$expires = date( 'U', strtotime( $date ) );
 47 | 			}
 48 | 		}
 49 | 
 50 | 		// If null was passed, or if the string parsing failed, fall back on a default
 51 | 		if ( null === $date ) {
 52 | 			/**
 53 | 			 * Filter the expiration of the session in the database
 54 | 			 *
 55 | 			 * @param int
 56 | 			 */
 57 | 			$expires = time() + (int) apply_filters( 'wp_session_expiration', 30 * 60 );
 58 | 		}
 59 | 
 60 | 		$session_id = self::generate_id();
 61 | 
 62 | 		// Store the session
 63 | 		add_option( "_wp_session_{$session_id}", array(), '', 'no' );
 64 | 		add_option( "_wp_session_expires_{$session_id}", $expires, '', 'no' );
 65 | 	}
 66 | 
 67 | 	/**
 68 | 	 * Delete old sessions from the database.
 69 | 	 *
 70 | 	 * @param int $limit Maximum number of sessions to delete.
 71 | 	 *
 72 | 	 * @global wpdb $wpdb
 73 | 	 *
 74 | 	 * @return int Sessions deleted.
 75 | 	 */
 76 | 	public static function delete_old_sessions( $limit = 1000 ) {
 77 | 		global $wpdb;
 78 | 
 79 | 		$limit = absint( $limit );
 80 | 		$keys = $wpdb->get_results( "SELECT option_name, option_value FROM $wpdb->options WHERE option_name LIKE '_wp_session_expires_%' ORDER BY option_value ASC LIMIT 0, {$limit}" );
 81 | 
 82 | 		$now = time();
 83 | 		$expired = array();
 84 | 		$count = 0;
 85 | 
 86 | 		foreach( $keys as $expiration ) {
 87 | 			$key = $expiration->option_name;
 88 | 			$expires = $expiration->option_value;
 89 | 
 90 | 			if ( $now > $expires ) {
 91 | 				$session_id = addslashes( substr( $key, 20 ) );
 92 | 
 93 | 				$expired[] = $key;
 94 | 				$expired[] = "_wp_session_{$session_id}";
 95 | 
 96 | 				$count += 1;
 97 | 			}
 98 | 		}
 99 | 
100 | 		// Delete expired sessions
101 | 		if ( ! empty( $expired ) ) {
102 | 			$names = implode( "','", $expired );
103 | 			$wpdb->query( "DELETE FROM $wpdb->options WHERE option_name IN ('{$names}')" );
104 | 		}
105 | 
106 | 		return $count;
107 | 	}
108 | 
109 | 	/**
110 | 	 * Remove all sessions from the database, regardless of expiration.
111 | 	 *
112 | 	 * @global wpdb $wpdb
113 | 	 *
114 | 	 * @return int Sessions deleted
115 | 	 */
116 | 	public static function delete_all_sessions() {
117 | 		global $wpdb;
118 | 
119 | 		$count = $wpdb->query( "DELETE FROM $wpdb->options WHERE option_name LIKE '_wp_session_%'" );
120 | 
121 | 		return (int) ( $count / 2 );
122 | 	}
123 | 
124 | 	/**
125 | 	 * Generate a new, random session ID.
126 | 	 *
127 | 	 * @return string
128 | 	 */
129 | 	public static function generate_id() {
130 | 		require_once( ABSPATH . 'wp-includes/class-phpass.php' );
131 | 		$hash = new PasswordHash( 8, false );
132 | 
133 | 		return md5( $hash->get_random_bytes( 32 ) );
134 | 	}
135 | } 


--------------------------------------------------------------------------------
/includes/wp-session-manager/includes/class-wp-session.php:
--------------------------------------------------------------------------------
  1 | <?php
  2 | /**
  3 |  * WordPress session managment.
  4 |  *
  5 |  * Standardizes WordPress session data using database-backed options for storage.
  6 |  * for storing user session information.
  7 |  *
  8 |  * @package WordPress
  9 |  * @subpackage Session
 10 |  * @since   3.7.0
 11 |  */
 12 | 
 13 | /**
 14 |  * WordPress Session class for managing user session data.
 15 |  *
 16 |  * @package WordPress
 17 |  * @since   3.7.0
 18 |  */
 19 | final class WP_Session extends Recursive_ArrayAccess {
 20 | 	/**
 21 | 	 * ID of the current session.
 22 | 	 *
 23 | 	 * @var string
 24 | 	 */
 25 | 	protected $session_id;
 26 | 
 27 | 	/**
 28 | 	 * Unix timestamp when session expires.
 29 | 	 *
 30 | 	 * @var int
 31 | 	 */
 32 | 	protected $expires;
 33 | 
 34 | 	/**
 35 | 	 * Unix timestamp indicating when the expiration time needs to be reset.
 36 | 	 *
 37 | 	 * @var int
 38 | 	 */
 39 | 	protected $exp_variant;
 40 | 
 41 | 	/**
 42 | 	 * Singleton instance.
 43 | 	 *
 44 | 	 * @var bool|WP_Session
 45 | 	 */
 46 | 	private static $instance = false;
 47 | 
 48 | 	/**
 49 | 	 * Retrieve the current session instance.
 50 | 	 *
 51 | 	 * @param bool $session_id Session ID from which to populate data.
 52 | 	 *
 53 | 	 * @return bool|WP_Session
 54 | 	 */
 55 | 	public static function get_instance() {
 56 | 		if ( ! self::$instance ) {
 57 | 			self::$instance = new self();
 58 | 		}
 59 | 
 60 | 		return self::$instance;
 61 | 	}
 62 | 
 63 | 	/**
 64 | 	 * Default constructor.
 65 | 	 * Will rebuild the session collection from the given session ID if it exists. Otherwise, will
 66 | 	 * create a new session with that ID.
 67 | 	 *
 68 | 	 * @param $session_id
 69 | 	 * @uses apply_filters Calls `wp_session_expiration` to determine how long until sessions expire.
 70 | 	 */
 71 | 	protected function __construct() {
 72 | 		if ( isset( $_COOKIE[WP_SESSION_COOKIE] ) ) {
 73 | 			$cookie = stripslashes( $_COOKIE[WP_SESSION_COOKIE] );
 74 | 			$cookie_crumbs = explode( '||', $cookie );
 75 | 
 76 | 			$this->session_id = $cookie_crumbs[0];
 77 | 			$this->expires = $cookie_crumbs[1];
 78 | 			$this->exp_variant = $cookie_crumbs[2];
 79 | 
 80 | 			// Update the session expiration if we're past the variant time
 81 | 			if ( time() > $this->exp_variant ) {
 82 | 				$this->set_expiration();
 83 | 				delete_option( "_wp_session_expires_{$this->session_id}" );
 84 | 				add_option( "_wp_session_expires_{$this->session_id}", $this->expires, '', 'no' );
 85 | 			}
 86 | 		} else {
 87 | 			$this->session_id = WP_Session_Utils::generate_id();
 88 | 			$this->set_expiration();
 89 | 		}
 90 | 
 91 | 		$this->read_data();
 92 | 
 93 | 		$this->set_cookie();
 94 | 
 95 | 	}
 96 | 
 97 | 	/**
 98 | 	 * Set both the expiration time and the expiration variant.
 99 | 	 *
100 | 	 * If the current time is below the variant, we don't update the session's expiration time. If it's
101 | 	 * greater than the variant, then we update the expiration time in the database.  This prevents
102 | 	 * writing to the database on every page load for active sessions and only updates the expiration
103 | 	 * time if we're nearing when the session actually expires.
104 | 	 *
105 | 	 * By default, the expiration time is set to 30 minutes.
106 | 	 * By default, the expiration variant is set to 24 minutes.
107 | 	 *
108 | 	 * As a result, the session expiration time - at a maximum - will only be written to the database once
109 | 	 * every 24 minutes.  After 30 minutes, the session will have been expired. No cookie will be sent by
110 | 	 * the browser, and the old session will be queued for deletion by the garbage collector.
111 | 	 *
112 | 	 * @uses apply_filters Calls `wp_session_expiration_variant` to get the max update window for session data.
113 | 	 * @uses apply_filters Calls `wp_session_expiration` to get the standard expiration time for sessions.
114 | 	 */
115 | 	protected function set_expiration() {
116 | 		$this->exp_variant = time() + (int) apply_filters( 'wp_session_expiration_variant', 24 * 60 );
117 | 		$this->expires = time() + (int) apply_filters( 'wp_session_expiration', 30 * 60 );
118 | 	}
119 | 
120 | 	/**
121 | 	* Set the session cookie
122 |      	* @uses apply_filters Calls `wp_session_cookie_secure` to set the $secure parameter of setcookie()
123 |      	* @uses apply_filters Calls `wp_session_cookie_httponly` to set the $httponly parameter of setcookie()
124 |      	*/
125 | 	protected function set_cookie() {
126 |         	$secure = apply_filters('wp_session_cookie_secure', false);
127 |         	$httponly = apply_filters('wp_session_cookie_httponly', false);
128 | 		setcookie( WP_SESSION_COOKIE, $this->session_id . '||' . $this->expires . '||' . $this->exp_variant , $this->expires, COOKIEPATH, COOKIE_DOMAIN, $secure, $httponly );
129 | 	}
130 | 
131 | 	/**
132 | 	 * Read data from a transient for the current session.
133 | 	 *
134 | 	 * Automatically resets the expiration time for the session transient to some time in the future.
135 | 	 *
136 | 	 * @return array
137 | 	 */
138 | 	protected function read_data() {
139 | 		$this->container = get_option( "_wp_session_{$this->session_id}", array() );
140 | 
141 | 		return $this->container;
142 | 	}
143 | 
144 | 	/**
145 | 	 * Write the data from the current session to the data storage system.
146 | 	 */
147 | 	public function write_data() {
148 | 		$option_key = "_wp_session_{$this->session_id}";
149 | 		
150 | 		if ( false === get_option( $option_key ) ) {
151 | 			add_option( "_wp_session_{$this->session_id}", $this->container, '', 'no' );
152 | 			add_option( "_wp_session_expires_{$this->session_id}", $this->expires, '', 'no' );
153 | 		} else {
154 | 			delete_option( "_wp_session_{$this->session_id}" );
155 | 			add_option( "_wp_session_{$this->session_id}", $this->container, '', 'no' );
156 | 		}
157 | 	}
158 | 
159 | 	/**
160 | 	 * Output the current container contents as a JSON-encoded string.
161 | 	 *
162 | 	 * @return string
163 | 	 */
164 | 	public function json_out() {
165 | 		return json_encode( $this->container );
166 | 	}
167 | 
168 | 	/**
169 | 	 * Decodes a JSON string and, if the object is an array, overwrites the session container with its contents.
170 | 	 *
171 | 	 * @param string $data
172 | 	 *
173 | 	 * @return bool
174 | 	 */
175 | 	public function json_in( $data ) {
176 | 		$array = json_decode( $data );
177 | 
178 | 		if ( is_array( $array ) ) {
179 | 			$this->container = $array;
180 | 			return true;
181 | 		}
182 | 
183 | 		return false;
184 | 	}
185 | 
186 | 	/**
187 | 	 * Regenerate the current session's ID.
188 | 	 *
189 | 	 * @param bool $delete_old Flag whether or not to delete the old session data from the server.
190 | 	 */
191 | 	public function regenerate_id( $delete_old = false ) {
192 | 		if ( $delete_old ) {
193 | 			delete_option( "_wp_session_{$this->session_id}" );
194 | 		}
195 | 
196 | 		$this->session_id = WP_Session_Utils::generate_id();
197 | 
198 | 		$this->set_cookie();
199 | 	}
200 | 
201 | 	/**
202 | 	 * Check if a session has been initialized.
203 | 	 *
204 | 	 * @return bool
205 | 	 */
206 | 	public function session_started() {
207 | 		return !!self::$instance;
208 | 	}
209 | 
210 | 	/**
211 | 	 * Return the read-only cache expiration value.
212 | 	 *
213 | 	 * @return int
214 | 	 */
215 | 	public function cache_expiration() {
216 | 		return $this->expires;
217 | 	}
218 | 
219 | 	/**
220 | 	 * Flushes all session variables.
221 | 	 */
222 | 	public function reset() {
223 | 		$this->container = array();
224 | 	}
225 | }
226 | 


--------------------------------------------------------------------------------
/includes/wp-session-manager/includes/wp-cli.php:
--------------------------------------------------------------------------------
  1 | <?php
  2 | 
  3 | /**
  4 |  * CLI commands for WP Session Manager
  5 |  *
  6 |  * @package    WP_Session
  7 |  * @subpackage Commands
  8 |  */
  9 | class WP_Session_Command extends \WP_CLI_Command {
 10 | 
 11 | 	/**
 12 | 	 * Count the total number of sessions stored in the database.
 13 | 	 *
 14 | 	 *
 15 | 	 * ## EXAMPLES
 16 | 	 *
 17 | 	 *      wp session count
 18 | 	 *
 19 | 	 * @global wpdb $wpdb
 20 | 	 *
 21 | 	 * @param array $args
 22 | 	 * @param array $assoc_args
 23 | 	 */
 24 | 	public function count( $args, $assoc_args ) {
 25 | 		$sessions = WP_Session_Utils::count_sessions();
 26 | 
 27 | 		\WP_CLI::line( sprintf( '%d sessions currently exist.', absint( $sessions ) ) );
 28 | 	}
 29 | 
 30 | 	/**
 31 | 	 * Delete sessions from the database.
 32 | 	 *
 33 | 	 * ## OPTIONS
 34 | 	 *
 35 | 	 * [--all]
 36 | 	 * : Flag whether or not to purge all sessions from the database.
 37 | 	 *
 38 | 	 * [--batch=<batch>]
 39 | 	 * : Set the batch size for deleting old sessions
 40 | 	 *
 41 | 	 * [--limit=<limit>]
 42 | 	 * : Delete just this number of old sessions
 43 | 	 *
 44 | 	 * ## EXAMPLES
 45 | 	 *
 46 | 	 *      wp session delete
 47 | 	 *      wp session delete [--batch=<batch>]
 48 | 	 *      wp session delete [--limit=<limit>]
 49 | 	 *      wp session delete [--all]
 50 | 	 *
 51 | 	 * @synopsis [--all] [--batch=<batch>] [--limit=<limit>]
 52 | 	 *
 53 | 	 * @param array $args
 54 | 	 * @param array $assoc_args
 55 | 	 */
 56 | 	public function delete( $args, $assoc_args ) {
 57 | 		if ( isset( $assoc_args['limit'] ) ) {
 58 | 			$limit = absint( $assoc_args['limit'] );
 59 | 
 60 | 			$count = WP_Session_Utils::delete_old_sessions( $limit );
 61 | 
 62 | 			if ( $count > 0 ) {
 63 | 				\WP_CLI::line( sprintf( 'Deleted %d sessions.', $count ) );
 64 | 			}
 65 | 
 66 | 			// Clear memory
 67 | 			self::free_up_memory();
 68 | 			return;
 69 | 		}
 70 | 
 71 | 		// Determine if we're deleting all sessions or just a subset.
 72 | 		$all = isset( $assoc_args['all'] );
 73 | 
 74 | 		/**
 75 | 		 * Determine the size of each batch for deletion.
 76 | 		 *
 77 | 		 * @param int
 78 | 		 */
 79 | 		$batch = isset( $assoc_args['batch'] ) ? absint( $assoc_args['batch'] ) : apply_filters( 'wp_session_delete_batch_size', 1000 );
 80 | 
 81 | 		switch ( $all ) {
 82 | 			case true:
 83 | 				$count = WP_Session_Utils::delete_all_sessions();
 84 | 
 85 | 				\WP_CLI::line( sprintf( 'Deleted all %d sessions.', $count ) );
 86 | 				break;
 87 | 			case false:
 88 | 				do {
 89 | 					$count = WP_Session_Utils::delete_old_sessions( $batch );
 90 | 
 91 | 					if ( $count > 0 ) {
 92 | 						\WP_CLI::line( sprintf( 'Deleted %d sessions.', $count ) );
 93 | 					}
 94 | 
 95 | 					// Clear memory
 96 | 					self::free_up_memory();
 97 | 				} while ( $count > 0 );
 98 | 				break;
 99 | 		}
100 | 	}
101 | 
102 | 	/**
103 | 	 * Generate a number of dummy sessions for testing purposes.
104 | 	 *
105 | 	 * ## OPTIONS
106 | 	 *
107 | 	 * <count>
108 | 	 * : Number of sessions to create.
109 | 	 *
110 | 	 * [--expires=<date>]
111 | 	 * : Optional expiration time tagged for each session. Will use WordPress' local time.
112 | 	 *
113 | 	 * ## EXAMPLES
114 | 	 *
115 | 	 *      wp session generate 5000
116 | 	 *      wp session generate 5000 --expires="2014-11-09T08:00"
117 | 	 *
118 | 	 * @synopsis <count> [--expires=<date>]
119 | 	 *
120 | 	 * @param array $args
121 | 	 * @param array $assoc_args
122 | 	 */
123 | 	public function generate( $args, $assoc_args ) {
124 | 		$count = absint( $args[0] );
125 | 		$date  = isset( $assoc_args['expires'] ) ? $assoc_args['expires'] : null;
126 | 
127 | 		$notify = \WP_CLI\Utils\make_progress_bar( 'Generating sessions', $count );
128 | 
129 | 		for ( $i = 0; $i < $count; $i ++ ) {
130 | 			WP_Session_Utils::create_dummy_session( $date );
131 | 			$notify->tick();
132 | 		}
133 | 
134 | 		$notify->finish();
135 | 	}
136 | 
137 | 	/**
138 | 	 * Free up memory
139 | 	 *
140 | 	 * @global WP_Object_Cache $wp_object_cache
141 | 	 * @global wpdb            $wpdb
142 | 	 */
143 | 	private function free_up_memory() {
144 | 		global $wp_object_cache, $wpdb;
145 | 		$wpdb->queries = array();
146 | 
147 | 		if ( ! is_object( $wp_object_cache ) ) {
148 | 			return;
149 | 		}
150 | 
151 | 		$wp_object_cache->group_ops      = array();
152 | 		$wp_object_cache->stats          = array();
153 | 		$wp_object_cache->memcache_debug = array();
154 | 		$wp_object_cache->cache          = array();
155 | 	}
156 | }
157 | 
158 | \WP_CLI::add_command( 'session', 'WP_Session_Command' );


--------------------------------------------------------------------------------
/includes/wp-session-manager/includes/wp-session.php:
--------------------------------------------------------------------------------
  1 | <?php
  2 | /**
  3 |  * WordPress session managment.
  4 |  *
  5 |  * Standardizes WordPress session data and uses either database transients or in-memory caching
  6 |  * for storing user session information.
  7 |  *
  8 |  * @package WordPress
  9 |  * @subpackage Session
 10 |  * @since   3.7.0
 11 |  */
 12 | 
 13 | /**
 14 |  * Return the current cache expire setting.
 15 |  *
 16 |  * @return int
 17 |  */
 18 | function wp_session_cache_expire() {
 19 | 	$wp_session = WP_Session::get_instance();
 20 | 
 21 | 	return $wp_session->cache_expiration();
 22 | }
 23 | 
 24 | /**
 25 |  * Alias of wp_session_write_close()
 26 |  */
 27 | function wp_session_commit() {
 28 | 	wp_session_write_close();
 29 | }
 30 | 
 31 | /**
 32 |  * Load a JSON-encoded string into the current session.
 33 |  *
 34 |  * @param string $data
 35 |  */
 36 | function wp_session_decode( $data ) {
 37 | 	$wp_session = WP_Session::get_instance();
 38 | 
 39 | 	return $wp_session->json_in( $data );
 40 | }
 41 | 
 42 | /**
 43 |  * Encode the current session's data as a JSON string.
 44 |  *
 45 |  * @return string
 46 |  */
 47 | function wp_session_encode() {
 48 | 	$wp_session = WP_Session::get_instance();
 49 | 
 50 | 	return $wp_session->json_out();
 51 | }
 52 | 
 53 | /**
 54 |  * Regenerate the session ID.
 55 |  *
 56 |  * @param bool $delete_old_session
 57 |  *
 58 |  * @return bool
 59 |  */
 60 | function wp_session_regenerate_id( $delete_old_session = false ) {
 61 | 	$wp_session = WP_Session::get_instance();
 62 | 
 63 | 	$wp_session->regenerate_id( $delete_old_session );
 64 | 
 65 | 	return true;
 66 | }
 67 | 
 68 | /**
 69 |  * Start new or resume existing session.
 70 |  *
 71 |  * Resumes an existing session based on a value sent by the _wp_session cookie.
 72 |  *
 73 |  * @return bool
 74 |  */
 75 | function wp_session_start() {
 76 | 	$wp_session = WP_Session::get_instance();
 77 | 	do_action( 'wp_session_start' );
 78 | 
 79 | 	return $wp_session->session_started();
 80 | }
 81 | if ( ! defined( 'WP_CLI' ) || false === WP_CLI ) {
 82 | 	add_action( 'plugins_loaded', 'wp_session_start' );
 83 | }
 84 | 
 85 | /**
 86 |  * Return the current session status.
 87 |  *
 88 |  * @return int
 89 |  */
 90 | function wp_session_status() {
 91 | 	$wp_session = WP_Session::get_instance();
 92 | 
 93 | 	if ( $wp_session->session_started() ) {
 94 | 		return PHP_SESSION_ACTIVE;
 95 | 	}
 96 | 
 97 | 	return PHP_SESSION_NONE;
 98 | }
 99 | 
100 | /**
101 |  * Unset all session variables.
102 |  */
103 | function wp_session_unset() {
104 | 	$wp_session = WP_Session::get_instance();
105 | 
106 | 	$wp_session->reset();
107 | }
108 | 
109 | /**
110 |  * Write session data and end session
111 |  */
112 | function wp_session_write_close() {
113 | 	$wp_session = WP_Session::get_instance();
114 | 
115 | 	$wp_session->write_data();
116 | 	do_action( 'wp_session_commit' );
117 | }
118 | if ( ! defined( 'WP_CLI' ) || false === WP_CLI ) {
119 | 	add_action( 'shutdown', 'wp_session_write_close' );
120 | }
121 | 
122 | /**
123 |  * Clean up expired sessions by removing data and their expiration entries from
124 |  * the WordPress options table.
125 |  *
126 |  * This method should never be called directly and should instead be triggered as part
127 |  * of a scheduled task or cron job.
128 |  */
129 | function wp_session_cleanup() {
130 | 	if ( defined( 'WP_SETUP_CONFIG' ) ) {
131 | 		return;
132 | 	}
133 | 
134 | 	if ( ! defined( 'WP_INSTALLING' ) ) {
135 | 		/**
136 | 		 * Determine the size of each batch for deletion.
137 | 		 *
138 | 		 * @param int
139 | 		 */
140 | 		$batch_size = apply_filters( 'wp_session_delete_batch_size', 1000 );
141 | 
142 | 		// Delete a batch of old sessions
143 | 		WP_Session_Utils::delete_old_sessions( $batch_size );
144 | 	}
145 | 
146 | 	// Allow other plugins to hook in to the garbage collection process.
147 | 	do_action( 'wp_session_cleanup' );
148 | }
149 | add_action( 'wp_session_garbage_collection', 'wp_session_cleanup' );
150 | 
151 | /**
152 |  * Register the garbage collector as a twice daily event.
153 |  */
154 | function wp_session_register_garbage_collection() {
155 | 	if ( ! wp_next_scheduled( 'wp_session_garbage_collection' ) ) {
156 | 		wp_schedule_event( time(), 'hourly', 'wp_session_garbage_collection' );
157 | 	}
158 | }
159 | add_action( 'wp', 'wp_session_register_garbage_collection' );
160 | 


--------------------------------------------------------------------------------
/includes/wp-session-manager/readme.txt:
--------------------------------------------------------------------------------
 1 | === WP Session Manager ===
 2 | Contributors: ericmann
 3 | Donate link: http://jumping-duck.com/wordpress/plugins
 4 | Tags: session
 5 | Requires at least: 3.4.2
 6 | Tested up to: 4.0
 7 | Stable tag: 1.2.0
 8 | License: GPLv2 or later
 9 | License URI: http://www.gnu.org/licenses/gpl-2.0.html
10 | 
11 | Prototype session management for WordPress.
12 | 
13 | == Description ==
14 | 
15 | Adds `$_SESSION`-like functionality to WordPress.
16 | 
17 | Every visitor, logged in or not, will be issued an instance of `WP_Session`.  Their instance will be identified by an ID
18 | stored in the `_wp_session` cookie.  Typically, session data will be stored in a WordPress transient, but if your
19 | installation has a caching system in-place (i.e. memcached), the session data might be stored in memory.
20 | 
21 | This provides plugin and theme authors the ability to use WordPress-managed session variables without having to use the
22 | standard PHP `$_SESSION` superglobal.
23 | 
24 | == Installation ==
25 | 
26 | = Manual Installation =
27 | 
28 | 1. Upload the entire `/wp-session-manager` folder to the `/wp-content/plugins/` directory.
29 | 1. Activate the plugin through the 'Plugins' menu in WordPress.
30 | 1. Use `WP_Session::get_instance()` in your code.
31 | 
32 | == Frequently Asked Questions ==
33 | 
34 | = How do I add session variables? =
35 | 
36 | First, make a reference to the WP_Session instance.  Then, use it like an associative array, just like `$_SESSION`:
37 | 
38 | `$wp_session = WP_Session::get_instance();
39 | $wp_session['user_name'] = 'User Name';                            // A string
40 | $wp_session['user_contact'] = array( 'email' => 'user@name.com' ); // An array
41 | $wp_session['user_obj'] = new WP_User( 1 );                        // An object`
42 | 
43 | = How long do session variables live? =
44 | 
45 | By default, session variables will live for 24 minutes from the last time they were accessed - either read or write.
46 | 
47 | This value can be changed by using the `wp_session_expiration` filter:
48 | 
49 | `add_filter( 'wp_session_expiration', function() { return 60 * 60; } ); // Set expiration to 1 hour`
50 | 
51 | == Screenshots ==
52 | 
53 | None
54 | 
55 | == Changelog ==
56 | 
57 | = 1.2.0 =
58 | * Update: Enhanced plugin organization
59 | * Update: Added WP_CLI support for session management
60 | * Update: Add Composer definitions
61 | * Fix: Break up the deletion of old sessions so queries don't time out under load
62 | 
63 | = 1.1.2 =
64 | * Fix a race condition where session expiration options could accidentally be set to autoload
65 | * Make the garbage collection routine run hourly to alleviate long-running tasks on larger sites
66 | 
67 | = 1.1.1 =
68 | * Fix a bug where session expiration was not properly set upon instantiation
69 | 
70 | = 1.1 =
71 | * Implement Recursive_ArrayAccess to provide multidimensional array support
72 | * Better expiration for session data
73 | * Implement garbage collection to keep the database clean
74 | 
75 | = 1.0.2 =
76 | * Switch to object persistence rather than transients
77 | 
78 | = 1.0.1 =
79 | * Changes implementation to avoid the use of a global variable (still registered for convenience)
80 | 
81 | = 1.0 =
82 | * First version
83 | 
84 | == Upgrade Notice ==
85 | 
86 | = 1.0 =
87 | First version


--------------------------------------------------------------------------------
/includes/wp-session-manager/wp-session-manager.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | /**
 3 |  * Plugin Name: WP Session Manager
 4 |  * Plugin URI:  http://jumping-duck.com/wordpress/plugins
 5 |  * Description: Prototype session management for WordPress.
 6 |  * Version:     1.2.0
 7 |  * Author:      Eric Mann
 8 |  * Author URI:  http://eamann.com
 9 |  * License:     GPLv2+
10 |  */
11 | 
12 | // let users change the session cookie name
13 | if( ! defined( 'WP_SESSION_COOKIE' ) ) {
14 | 	define( 'WP_SESSION_COOKIE', '_wp_session' );
15 | }
16 | 
17 | if ( ! class_exists( 'Recursive_ArrayAccess' ) ) {
18 | 	include 'includes/class-recursive-arrayaccess.php';
19 | }
20 | 
21 | // Include utilities class
22 | if ( ! class_exists( 'WP_Session_Utils' ) ) {
23 | 	include 'includes/class-wp-session-utils.php';
24 | }
25 | 
26 | // Include WP_CLI routines early
27 | if ( defined( 'WP_CLI' ) && WP_CLI ) {
28 | 	include 'includes/wp-cli.php';
29 | }
30 | 
31 | // Only include the functionality if it's not pre-defined.
32 | if ( ! class_exists( 'WP_Session' ) ) {
33 | 	include 'includes/class-wp-session.php';
34 | 	include 'includes/wp-session.php';
35 | }
36 | 


--------------------------------------------------------------------------------
/options/options_deprecated.php:
--------------------------------------------------------------------------------
   1 | <?php
   2 | 
   3 | /**
   4 |  * Theme Options v1.1.0
   5 |  * Adjust theme settings from the admin dashboard.
   6 |  * Find and replace `YourTheme` with your own namepspacing.
   7 |  *
   8 |  * Created by Michael Fields.
   9 |  * https://gist.github.com/mfields/4678999
  10 |  *
  11 |  * Forked by Chris Ferdinandi
  12 |  * http://gomakethings.com
  13 |  *
  14 |  * Free to use under the MIT License.
  15 |  * http://gomakethings.com/mit/
  16 |  *
  17 |  * @deprecated 8.0.0 replaced with tabbed options
  18 |  */
  19 | 
  20 | 
  21 | 	/**
  22 | 	 * Theme Options Fields
  23 | 	 * Each option field requires its own uniquely named function. Select options and radio buttons also require an additional uniquely named function with an array of option choices.
  24 | 	 */
  25 | 
  26 | 	// Create a select menu with all the current pages
  27 | 	function wpwebapp_settings_create_pages_select_fields( $selected ) {
  28 | 		$pages = get_pages(
  29 | 			array(
  30 | 				'sort_order' => 'asc',
  31 | 				'sort_column' => 'post_title',
  32 | 				'post_type' => 'page',
  33 | 				'post_status' => 'publish'
  34 | 			)
  35 | 		);
  36 | 		?>
  37 | 			<?php foreach( $pages as $key => $page ) : ?>
  38 | 				<option value="<?php echo esc_attr( $page->ID ); ?>" <?php selected( $page->ID, $selected ); ?>><?php echo esc_html( $page->post_title ); ?></option>
  39 | 			<?php endforeach; ?>
  40 | 		<?php
  41 | 	}
  42 | 
  43 | 	// Sign up form labels
  44 | 	function wpwebapp_settings_field_signup_form_labels() {
  45 | 		$options = wpwebapp_get_theme_options();
  46 | 		?>
  47 | 		<div>
  48 | 			<input type="text" name="wpwebapp_theme_options[signup_username_label]" id="signup_username_label" value="<?php echo stripslashes( esc_attr( $options['signup_username_label'] ) ); ?>" />
  49 | 			<label class="description" for="signup_username_label"><?php _e( 'Sign up form "Username" field label', 'wpwebapp' ); ?></label>
  50 | 		</div>
  51 | 
  52 | 		<div>
  53 | 			<input type="text" name="wpwebapp_theme_options[signup_email_label]" id="signup_email_label" value="<?php echo stripslashes( esc_attr( $options['signup_email_label'] ) ); ?>" />
  54 | 			<label class="description" for="signup_email_label"><?php _e( 'Sign up form "Email" field label', 'wpwebapp' ); ?></label>
  55 | 		</div>
  56 | 
  57 | 		<div>
  58 | 			<input type="text" name="wpwebapp_theme_options[signup_password_label]" id="signup_password_label" value="<?php echo stripslashes( esc_attr( $options['signup_password_label'] ) ); ?>" />
  59 | 			<label class="description" for="signup_password_label"><?php _e( 'Sign up form "Password" field label', 'wpwebapp' ); ?></label>
  60 | 		</div>
  61 | 		<?php
  62 | 	}
  63 | 
  64 | 	// Sign up form submit button
  65 | 	function wpwebapp_settings_field_signup_form_submit() {
  66 | 		$options = wpwebapp_get_theme_options();
  67 | 		?>
  68 | 		<div>
  69 | 			<input type="text" name="wpwebapp_theme_options[signup_submit_text]" id="signup_submit_text" value="<?php echo esc_attr( $options['signup_submit_text'] ); ?>" />
  70 | 			<label class="description" for="signup_submit_text"><?php _e( 'Sign up form "Submit" button text', 'wpwebapp' ); ?></label>
  71 | 		</div>
  72 | 
  73 | 		<?php
  74 | 	}
  75 | 
  76 | 	// Change password form show requirements
  77 | 	function wpwebapp_settings_field_signup_form_show_requirements() {
  78 | 		$options = wpwebapp_get_theme_options();
  79 | 		?>
  80 | 		<div>
  81 | 			<label>
  82 | 				<input type="checkbox" name="wpwebapp_theme_options[signup_show_requirements]" id="signup_show_requirements" value="on" <?php checked( $options['signup_show_requirements'], 'on' ); ?>>
  83 | 				<?php _e( 'Show password requirements with the sign up form', 'wpwebapp' ); ?>
  84 | 			</label>
  85 | 		</div>
  86 | 		<?php
  87 | 	}
  88 | 
  89 | 	// Sign up form error messages
  90 | 	function wpwebapp_settings_field_signup_form_errors() {
  91 | 		$options = wpwebapp_get_theme_options();
  92 | 		?>
  93 | 		<div>
  94 | 			<input type="text" name="wpwebapp_theme_options[signup_username_field_empty_error]" class="large-text" id="signup_username_field_empty_error" value="<?php echo stripslashes( esc_attr( $options['signup_username_field_empty_error'] ) ); ?>" />
  95 | 			<label class="description" for="signup_username_field_empty_error"><?php _e( 'Error when no username is provided on the sign up form', 'wpwebapp' ); ?></label>
  96 | 		</div>
  97 | 		<br>
  98 | 
  99 | 		<div>
 100 | 			<input type="text" name="wpwebapp_theme_options[signup_email_field_empty_error]" class="large-text" id="signup_email_field_empty_error" value="<?php echo stripslashes( esc_attr( $options['signup_email_field_empty_error'] ) ); ?>" />
 101 | 			<label class="description" for="signup_email_field_empty_error"><?php _e( 'Error when no email is provided on the sign up form', 'wpwebapp' ); ?></label>
 102 | 		</div>
 103 | 		<br>
 104 | 
 105 | 		<div>
 106 | 			<input type="text" name="wpwebapp_theme_options[signup_password_field_empty_error]" class="large-text" id="signup_password_field_empty_error" value="<?php echo stripslashes( esc_attr( $options['signup_password_field_empty_error'] ) ); ?>" />
 107 | 			<label class="description" for="signup_password_field_empty_error"><?php _e( 'Error when no password is provided on the sign up form', 'wpwebapp' ); ?></label>
 108 | 		</div>
 109 | 		<br>
 110 | 
 111 | 		<div>
 112 | 			<input type="text" name="wpwebapp_theme_options[signup_username_invalid_error]" class="large-text" id="signup_username_invalid_error" value="<?php echo stripslashes( esc_attr( $options['signup_username_invalid_error'] ) ); ?>" />
 113 | 			<label class="description" for="signup_username_invalid_error"><?php _e( 'Error when username provided on the sign up form contains invalid characters', 'wpwebapp' ); ?></label>
 114 | 		</div>
 115 | 		<br>
 116 | 
 117 | 		<div>
 118 | 			<input type="text" name="wpwebapp_theme_options[signup_username_exists_error]" class="large-text" id="signup_username_exists_error" value="<?php echo stripslashes( esc_attr( $options['signup_username_exists_error'] ) ); ?>" />
 119 | 			<label class="description" for="signup_username_exists_error"><?php _e( 'Error when username provided on the sign up form already exists', 'wpwebapp' ); ?></label>
 120 | 		</div>
 121 | 		<br>
 122 | 
 123 | 		<div>
 124 | 			<input type="text" name="wpwebapp_theme_options[signup_email_invalid_error]" class="large-text" id="signup_email_invalid_error" value="<?php echo stripslashes( esc_attr( $options['signup_email_invalid_error'] ) ); ?>" />
 125 | 			<label class="description" for="signup_email_invalid_error"><?php _e( 'Error when email provided on the sign up form is invalid', 'wpwebapp' ); ?></label>
 126 | 		</div>
 127 | 		<br>
 128 | 
 129 | 		<div>
 130 | 			<input type="text" name="wpwebapp_theme_options[signup_email_exists_error]" class="large-text" id="signup_email_exists_error" value="<?php echo stripslashes( esc_attr( $options['signup_email_exists_error'] ) ); ?>" />
 131 | 			<label class="description" for="signup_email_exists_error"><?php _e( 'Error when email provided on the sign up form already exists', 'wpwebapp' ); ?></label>
 132 | 		</div>
 133 | 		<br>
 134 | 
 135 | 		<div>
 136 | 			<input type="text" name="wpwebapp_theme_options[signup_login_failed_error]" class="large-text" id="signup_login_failed_error" value="<?php echo stripslashes( esc_attr( $options['signup_login_failed_error'] ) ); ?>" />
 137 | 			<label class="description" for="signup_login_failed_error"><?php _e( 'Error when signup fails', 'wpwebapp' ); ?></label>
 138 | 		</div>
 139 | 		<?php
 140 | 	}
 141 | 
 142 | 	// Sign up form notifications to site admins
 143 | 	function wpwebapp_settings_field_signup_form_notifications_to_admin() {
 144 | 		$options = wpwebapp_get_theme_options();
 145 | 		?>
 146 | 		<div>
 147 | 			<label for="signup_receive_notifications">
 148 | 				<input type="checkbox" name="wpwebapp_theme_options[signup_receive_notifications]" id="signup_receive_notifications" <?php checked( 'on', $options['signup_receive_notifications'] ); ?> />
 149 | 				<?php _e( 'Send admins a notification when a new user signs up', 'wpwebapp' ); ?>
 150 | 			</label>
 151 | 		</div>
 152 | 		<br>
 153 | 
 154 | 		<div>
 155 | 			<textarea name="wpwebapp_theme_options[signup_notification_to_admin]" class="large-text" id="signup_notification_to_admin" cols="50" rows="10"><?php echo stripslashes( esc_textarea( $options['signup_notification_to_admin'] ) ); ?></textarea>
 156 | 			<label for="signup_notification_to_admin">
 157 | 				<?php printf( __( 'The email to send to site admins when new users sign up. Use %s to dynamically add their username, and %s to dynamically add their email address.', 'wpwebapp' ), '<code>[username]</code>', '<code>[email]</code>'  ); ?>
 158 | 			</label>
 159 | 		</div>
 160 | 		<?php
 161 | 	}
 162 | 
 163 | 	// Sign up form notifications to users
 164 | 	function wpwebapp_settings_field_signup_form_notifications_to_user() {
 165 | 		$options = wpwebapp_get_theme_options();
 166 | 		?>
 167 | 		<div>
 168 | 			<label for="signup_send_notifications">
 169 | 				<input type="checkbox" name="wpwebapp_theme_options[signup_send_notifications]" id="signup_send_notifications" <?php checked( 'on', $options['signup_send_notifications'] ); ?> />
 170 | 				<?php _e( 'Send new users a welcome email when they sign up', 'wpwebapp' ); ?>
 171 | 			</label>
 172 | 		</div>
 173 | 		<br>
 174 | 
 175 | 		<div>
 176 | 			<textarea name="wpwebapp_theme_options[signup_notification_to_user]" class="large-text" id="signup_notification_to_user" cols="50" rows="10"><?php echo stripslashes( esc_textarea( $options['signup_notification_to_user'] ) ); ?></textarea>
 177 | 			<label for="signup_notification_to_user">
 178 | 				<?php printf( __( 'The email to send to new users after they sign up. Use %s to dynamically add their username, and %s to dynamically add the log in URL.', 'wpwebapp' ), '<code>[username]</code>', '<code>[login]</code>'  ); ?>
 179 | 			</label>
 180 | 		</div>
 181 | 		<?php
 182 | 	}
 183 | 
 184 | 	// Forgot password form time limit
 185 | 	function wpwebapp_settings_field_create_user_password_time_limit() {
 186 | 		$options = wpwebapp_get_theme_options();
 187 | 		?>
 188 | 		<div>
 189 | 			<input type="number" min="1" name="wpwebapp_theme_options[create_user_password_time_valid]" class="small-text" id="create_user_password_time_valid" value="<?php echo esc_attr( $options['create_user_password_time_valid'] ); ?>" />
 190 | 			<label class="description" for="create_user_password_time_valid"><?php _e( 'Time (in hours) that a manually created new user "create a password" link is good for', 'wpwebapp' ); ?></label>
 191 | 		</div>
 192 | 		<?php
 193 | 	}
 194 | 
 195 | 	// Create user notifications to user
 196 | 	function wpwebapp_settings_field_create_user_notifications_to_user() {
 197 | 		$options = wpwebapp_get_theme_options();
 198 | 		?>
 199 | 		<div>
 200 | 			<label for="create_user_send_notifications">
 201 | 				<input type="checkbox" name="wpwebapp_theme_options[create_user_send_notifications]" id="create_user_send_notifications" <?php checked( 'on', $options['create_user_send_notifications'] ); ?> />
 202 | 				<?php _e( 'Send new users a welcome email when accounts are created manually in the WordPress Dashboard', 'wpwebapp' ); ?>
 203 | 			</label>
 204 | 		</div>
 205 | 		<br>
 206 | 
 207 | 		<div>
 208 | 			<textarea name="wpwebapp_theme_options[create_user_notification]" class="large-text" id="create_user_notification" cols="50" rows="10"><?php echo stripslashes( esc_textarea( $options['create_user_notification'] ) ); ?></textarea>
 209 | 			<label for="create_user_notification">
 210 | 				<?php printf( __( 'The email to send to users when an account is created for them in the WordPress Dashboard. Use %s to dynamically add their username, and %s to dynamically add a link to your password reset form (only works if a page for this form has been specified). Use %s to include the number of hours their "create a new password" URL is good for.', 'wpwebapp' ), '<code>[username]</code>', '<code>[pw_reset]</code>', '<code>[expires]</code>'  ); ?>
 211 | 			</label>
 212 | 		</div>
 213 | 		<?php
 214 | 	}
 215 | 
 216 | 	// Login form labels
 217 | 	function wpwebapp_settings_field_login_form_labels() {
 218 | 		$options = wpwebapp_get_theme_options();
 219 | 		?>
 220 | 		<div>
 221 | 			<input type="text" name="wpwebapp_theme_options[login_username_label]" id="login_username_label" value="<?php echo stripslashes( esc_attr( $options['login_username_label'] ) ); ?>" />
 222 | 			<label class="description" for="login_username_label"><?php _e( 'Login form "Username" label', 'wpwebapp' ); ?></label>
 223 | 		</div>
 224 | 
 225 | 		<div>
 226 | 			<input type="text" name="wpwebapp_theme_options[login_password_label]" id="login_password_label" value="<?php echo stripslashes( esc_attr( $options['login_password_label'] ) ); ?>" />
 227 | 			<label class="description" for="login_password_label"><?php _e( 'Login form "Password" label', 'wpwebapp' ); ?></label>
 228 | 		</div>
 229 | 
 230 | 		<div>
 231 | 			<input type="text" name="wpwebapp_theme_options[login_rememberme_label]" id="login_rememberme_label" value="<?php echo stripslashes( esc_attr( $options['login_rememberme_label'] ) ); ?>" />
 232 | 			<label class="description" for="login_rememberme_label"><?php _e( 'Login form "Remember Me" label', 'wpwebapp' ); ?></label>
 233 | 		</div>
 234 | 		<?php
 235 | 	}
 236 | 
 237 | 	// Login form submit button
 238 | 	function wpwebapp_settings_field_login_form_submit() {
 239 | 		$options = wpwebapp_get_theme_options();
 240 | 		?>
 241 | 		<div>
 242 | 			<input type="text" name="wpwebapp_theme_options[login_submit_text]" id="login_submit_text" value="<?php echo esc_attr( $options['login_submit_text'] ); ?>" />
 243 | 			<label class="description" for="login_submit_text"><?php _e( 'Login form "Submit" button text', 'wpwebapp' ); ?></label>
 244 | 		</div>
 245 | 		<?php
 246 | 	}
 247 | 
 248 | 	// Login form error messages
 249 | 	function wpwebapp_settings_field_login_form_errors() {
 250 | 		$options = wpwebapp_get_theme_options();
 251 | 		?>
 252 | 		<div>
 253 | 			<input type="text" name="wpwebapp_theme_options[login_username_field_empty_error]" class="large-text" id="login_username_field_empty_error" value="<?php echo stripslashes( esc_attr( $options['login_username_field_empty_error'] ) ); ?>" />
 254 | 			<label class="description" for="login_username_field_empty_error"><?php _e( 'Error when no username is provided on the login form', 'wpwebapp' ); ?></label>
 255 | 		</div>
 256 | 		<br>
 257 | 
 258 | 		<div>
 259 | 			<input type="text" name="wpwebapp_theme_options[login_password_field_empty_error]" class="large-text" id="login_password_field_empty_error" value="<?php echo stripslashes( esc_attr( $options['login_password_field_empty_error'] ) ); ?>" />
 260 | 			<label class="description" for="login_password_field_empty_error"><?php _e( 'Error when no password is provided on the login form', 'wpwebapp' ); ?></label>
 261 | 		</div>
 262 | 		<br>
 263 | 
 264 | 		<div>
 265 | 			<input type="text" name="wpwebapp_theme_options[login_failed_error]" class="large-text" id="login_failed_error" value="<?php echo stripslashes( esc_attr( $options['login_failed_error'] ) ); ?>" />
 266 | 			<label class="description" for="login_failed_error"><?php _e( 'Error when login fails', 'wpwebapp' ); ?></label>
 267 | 		</div>
 268 | 		<?php
 269 | 	}
 270 | 
 271 | 	// Login/logout redirect URLs
 272 | 	function wpwebapp_settings_field_login_logout_redirects() {
 273 | 		$options = wpwebapp_get_theme_options();
 274 | 		?>
 275 | 		<div>
 276 | 			<label class="description" for="login_redirect"><?php _e( 'URL to redirect users to after they log in:', 'wpwebapp' ); ?></label><br>
 277 | 			<select name="wpwebapp_theme_options[login_redirect]" id="login_redirect" >
 278 | 				<option value="0" <?php selected( '0', $options['login_redirect'] ); ?>><?php _e( 'Home', 'wpwebapp' ) ?></option>
 279 | 				<?php wpwebapp_settings_create_pages_select_fields( $options['login_redirect'] ); ?>
 280 | 			</select>
 281 | 		</div>
 282 | 		<br>
 283 | 
 284 | 		<div>
 285 | 			<label class="description" for="logout_redirect"><?php _e( 'URL to redirect users to after they logout:', 'wpwebapp' ); ?></label><br>
 286 | 			<select name="wpwebapp_theme_options[logout_redirect]" id="logout_redirect" >
 287 | 				<option value="0" <?php selected( '0', $options['login_redirect'] ); ?>><?php _e( 'Home', 'wpwebapp' ) ?></option>
 288 | 				<?php wpwebapp_settings_create_pages_select_fields( $options['logout_redirect'] ); ?>
 289 | 			</select>
 290 | 		</div>
 291 | 		<br>
 292 | 
 293 | 		<div>
 294 | 			<label class="description" for="password_reset_redirect"><?php _e( 'URL to redirect users to for a forced password reset:', 'wpwebapp' ); ?></label><br>
 295 | 			<select name="wpwebapp_theme_options[password_reset_redirect]" id="password_reset_redirect">
 296 | 				<option value="" <?php selected( '', $options['password_reset_redirect'] ); ?>><?php _e( '', 'wpwebapp' ) ?></option>
 297 | 				<?php wpwebapp_settings_create_pages_select_fields( $options['password_reset_redirect'] ); ?>
 298 | 			</select>
 299 | 		</div>
 300 | 		<br>
 301 | 
 302 | 		<div>
 303 | 			<label class="description">
 304 | 				<input type="checkbox" name="wpwebapp_theme_options[add_redirect_referrer]" id="add_redirect_referrer" value="on" <?php checked( $options['add_redirect_referrer'], 'on' ); ?>>
 305 | 				<?php _e( 'Add a URL referrer to "Logged Out" and "Forced Password Reset" redirects', 'wpwebapp' ); ?>
 306 | 			</label>
 307 | 		</div>
 308 | 
 309 | 		<?php
 310 | 	}
 311 | 
 312 | 	// Change email address form labels
 313 | 	function wpwebapp_settings_field_email_change_form_labels() {
 314 | 		$options = wpwebapp_get_theme_options();
 315 | 		?>
 316 | 		<div>
 317 | 			<input type="text" name="wpwebapp_theme_options[email_change_current_email_label]" id="email_change_current_email_label" value="<?php echo stripslashes( esc_attr( $options['email_change_current_email_label'] ) ); ?>" />
 318 | 			<label class="description" for="email_change_current_email_label"><?php _e( 'Change email form "Email" label', 'wpwebapp' ); ?></label>
 319 | 		</div>
 320 | 
 321 | 		<div>
 322 | 			<input type="text" name="wpwebapp_theme_options[email_change_password_label]" id="email_change_password_label" value="<?php echo stripslashes( esc_attr( $options['email_change_password_label'] ) ); ?>" />
 323 | 			<label class="description" for="email_change_password_label"><?php _e( 'Change email form "Password" label', 'wpwebapp' ); ?></label>
 324 | 		</div>
 325 | 		<?php
 326 | 	}
 327 | 
 328 | 	// Change email address form submit button
 329 | 	function wpwebapp_settings_field_email_change_form_submit() {
 330 | 		$options = wpwebapp_get_theme_options();
 331 | 		?>
 332 | 		<div>
 333 | 			<input type="text" name="wpwebapp_theme_options[email_change_submit_text]" id="email_change_submit_text" value="<?php echo esc_attr( $options['email_change_submit_text'] ); ?>" />
 334 | 			<label class="description" for="email_change_submit_text"><?php _e( 'Change email form "Submit" button text', 'wpwebapp' ); ?></label>
 335 | 		</div>
 336 | 		<?php
 337 | 	}
 338 | 
 339 | 	// Change email address form error messages
 340 | 	function wpwebapp_settings_field_email_change_form_errors() {
 341 | 		$options = wpwebapp_get_theme_options();
 342 | 		?>
 343 | 		<div>
 344 | 			<input type="text" name="wpwebapp_theme_options[email_change_email_field_empty_error]" class="large-text" id="email_change_email_field_empty_error" value="<?php echo stripslashes( esc_attr( $options['email_change_email_field_empty_error'] ) ); ?>" />
 345 | 			<label class="description" for="email_change_email_field_empty_error"><?php _e( 'Error when no email address is provided on the change email form', 'wpwebapp' ); ?></label>
 346 | 		</div>
 347 | 		<br>
 348 | 
 349 | 		<div>
 350 | 			<input type="text" name="wpwebapp_theme_options[email_change_password_field_empty_error]" class="large-text" id="email_change_password_field_empty_error" value="<?php echo stripslashes( esc_attr( $options['email_change_password_field_empty_error'] ) ); ?>" />
 351 | 			<label class="description" for="email_change_password_field_empty_error"><?php _e( 'Error when no password is provided on the change email form', 'wpwebapp' ); ?></label>
 352 | 		</div>
 353 | 		<br>
 354 | 
 355 | 		<div>
 356 | 			<input type="text" name="wpwebapp_theme_options[email_change_password_error]" class="large-text" id="email_change_password_error" value="<?php echo stripslashes( esc_attr( $options['email_change_password_error'] ) ); ?>" />
 357 | 			<label class="description" for="email_change_password_error"><?php _e( 'Error when the password is incorrect on the change email form', 'wpwebapp' ); ?></label>
 358 | 		</div>
 359 | 		<br>
 360 | 
 361 | 		<div>
 362 | 			<input type="text" name="wpwebapp_theme_options[email_change_success]" class="large-text" id="email_change_success" value="<?php echo stripslashes( esc_attr( $options['email_change_success'] ) ); ?>" />
 363 | 			<label class="description" for="email_change_success"><?php _e( 'Message when the user\'s email address is successfully changed', 'wpwebapp' ); ?></label>
 364 | 		</div>
 365 | 		<?php
 366 | 	}
 367 | 
 368 | 	// Change password form labels
 369 | 	function wpwebapp_settings_field_password_change_form_labels() {
 370 | 		$options = wpwebapp_get_theme_options();
 371 | 		?>
 372 | 		<div>
 373 | 			<input type="text" name="wpwebapp_theme_options[password_change_current_password_label]" id="password_change_current_password_label" value="<?php echo stripslashes( esc_attr( $options['password_change_current_password_label'] ) ); ?>" />
 374 | 			<label class="description" for="password_change_current_password_label"><?php _e( 'Change password form "Current Password" label', 'wpwebapp' ); ?></label>
 375 | 		</div>
 376 | 
 377 | 		<div>
 378 | 			<input type="text" name="wpwebapp_theme_options[password_change_new_password_label]" id="password_change_new_password_label" value="<?php echo stripslashes( esc_attr( $options['password_change_new_password_label'] ) ); ?>" />
 379 | 			<label class="description" for="password_change_new_password_label"><?php _e( 'Change password form "New Password" label', 'wpwebapp' ); ?></label>
 380 | 		</div>
 381 | 		<?php
 382 | 	}
 383 | 
 384 | 	// Change password form submit button
 385 | 	function wpwebapp_settings_field_password_change_form_submit() {
 386 | 		$options = wpwebapp_get_theme_options();
 387 | 		?>
 388 | 		<div>
 389 | 			<input type="text" name="wpwebapp_theme_options[password_change_submit_text]" id="password_change_submit_text" value="<?php echo esc_attr( $options['password_change_submit_text'] ); ?>" />
 390 | 			<label class="description" for="password_change_submit_text"><?php _e( 'Change password form "Submit" button text', 'wpwebapp' ); ?></label>
 391 | 		</div>
 392 | 		<?php
 393 | 	}
 394 | 
 395 | 	// Change password form show requirements
 396 | 	function wpwebapp_settings_field_password_change_form_show_requirements() {
 397 | 		$options = wpwebapp_get_theme_options();
 398 | 		?>
 399 | 		<div>
 400 | 			<label>
 401 | 				<input type="checkbox" name="wpwebapp_theme_options[password_change_show_requirements]" id="password_change_show_requirements" value="on" <?php checked( $options['password_change_show_requirements'], 'on' ); ?>>
 402 | 				<?php _e( 'Show password requirements with the change password form', 'wpwebapp' ); ?>
 403 | 			</label>
 404 | 		</div>
 405 | 		<?php
 406 | 	}
 407 | 
 408 | 	// Change password form error messages
 409 | 	function wpwebapp_settings_field_password_change_form_errors() {
 410 | 		$options = wpwebapp_get_theme_options();
 411 | 		?>
 412 | 		<div>
 413 | 			<input type="text" name="wpwebapp_theme_options[password_change_forced_reset_error]" class="large-text" id="password_change_forced_reset_error" value="<?php echo stripslashes( esc_attr( $options['password_change_forced_reset_error'] ) ); ?>" />
 414 | 			<label class="description" for="password_change_forced_reset_error"><?php _e( 'Error when user is forced to reset their password', 'wpwebapp' ); ?></label>
 415 | 		</div>
 416 | 		<br>
 417 | 
 418 | 		<div>
 419 | 			<input type="text" name="wpwebapp_theme_options[password_change_current_password_field_empty_error]" class="large-text" id="password_change_current_password_field_empty_error" value="<?php echo stripslashes( esc_attr( $options['password_change_current_password_field_empty_error'] ) ); ?>" />
 420 | 			<label class="description" for="password_change_current_password_field_empty_error"><?php _e( 'Error when current password is not provided on the change password form', 'wpwebapp' ); ?></label>
 421 | 		</div>
 422 | 		<br>
 423 | 
 424 | 		<div>
 425 | 			<input type="text" name="wpwebapp_theme_options[password_change_new_password_field_empty_error]" class="large-text" id="password_change_new_password_field_empty_error" value="<?php echo stripslashes( esc_attr( $options['password_change_new_password_field_empty_error'] ) ); ?>" />
 426 | 			<label class="description" for="password_change_new_password_field_empty_error"><?php _e( 'Error when new password is not provided on the change password form', 'wpwebapp' ); ?></label>
 427 | 		</div>
 428 | 		<br>
 429 | 
 430 | 		<div>
 431 | 			<input type="text" name="wpwebapp_theme_options[password_change_password_error]" class="large-text" id="password_change_password_error" value="<?php echo stripslashes( esc_attr( $options['password_change_password_error'] ) ); ?>" />
 432 | 			<label class="description" for="password_change_password_error"><?php _e( 'Error when the current password is incorrect on the change password form', 'wpwebapp' ); ?></label>
 433 | 		</div>
 434 | 		<br>
 435 | 
 436 | 		<div>
 437 | 			<input type="text" name="wpwebapp_theme_options[password_change_success]" class="large-text" id="password_change_success" value="<?php echo stripslashes( esc_attr( $options['password_change_success'] ) ); ?>" />
 438 | 			<label class="description" for="password_change_success"><?php _e( 'Message when the user\'s password is successfully changed', 'wpwebapp' ); ?></label>
 439 | 		</div>
 440 | 		<?php
 441 | 	}
 442 | 
 443 | 	// Change password form notifications to site admins
 444 | 	function wpwebapp_settings_field_password_change_form_notifications_to_admin() {
 445 | 		$options = wpwebapp_get_theme_options();
 446 | 		?>
 447 | 		<div>
 448 | 			<label for="password_change_receive_notifications">
 449 | 				<input type="checkbox" name="wpwebapp_theme_options[password_change_receive_notifications]" id="password_change_receive_notifications" <?php checked( 'on', $options['password_change_receive_notifications'] ); ?> />
 450 | 				<?php _e( 'Send admins a notification when a user changes their password', 'wpwebapp' ); ?>
 451 | 			</label>
 452 | 		</div>
 453 | 		<br>
 454 | 
 455 | 		<div>
 456 | 			<textarea name="wpwebapp_theme_options[password_change_notification_to_admin]" class="large-text" id="password_change_notification_to_admin" cols="50" rows="10"><?php echo stripslashes( esc_textarea( $options['password_change_notification_to_admin'] ) ); ?></textarea>
 457 | 			<label for="password_change_notification_to_admin">
 458 | 				<?php printf( __( 'The email to send to site admins when a user changes their password. Use %s to dynamically add their username, and %s to dynamically add their email address.', 'wpwebapp' ), '<code>[username]</code>', '<code>[email]</code>'  ); ?>
 459 | 			</label>
 460 | 		</div>
 461 | 		<?php
 462 | 	}
 463 | 
 464 | 	// Change password form notifications to users
 465 | 	function wpwebapp_settings_field_password_change_form_notifications_to_user() {
 466 | 		$options = wpwebapp_get_theme_options();
 467 | 		?>
 468 | 		<div>
 469 | 			<label for="password_change_send_notifications">
 470 | 				<input type="checkbox" name="wpwebapp_theme_options[password_change_send_notifications]" id="password_change_send_notifications" <?php checked( 'on', $options['password_change_send_notifications'] ); ?> />
 471 | 				<?php _e( 'Send users an email when they change their password', 'wpwebapp' ); ?>
 472 | 			</label>
 473 | 		</div>
 474 | 		<br>
 475 | 
 476 | 		<div>
 477 | 			<textarea name="wpwebapp_theme_options[password_change_notification_to_user]" class="large-text" id="password_change_notification_to_user" cols="50" rows="10"><?php echo stripslashes( esc_textarea( $options['password_change_notification_to_user'] ) ); ?></textarea>
 478 | 			<label for="password_change_notification_to_user">
 479 | 				<?php printf( __( 'The email to send to users after they change their password. Use %s to dynamically add their username', 'wpwebapp' ), '<code>[username]</code>' ); ?>
 480 | 			</label>
 481 | 		</div>
 482 | 		<?php
 483 | 	}
 484 | 
 485 | 	// Forgot password page
 486 | 	function wpwebapp_settings_field_password_reset_url() {
 487 | 		$options = wpwebapp_get_theme_options();
 488 | 		?>
 489 | 		<div>
 490 | 			<label class="description" for="password_reset_url"><?php _e( 'URL for password resets', 'wpwebapp' ); ?></label><br>
 491 | 			<select name="wpwebapp_theme_options[password_reset_url]" id="password_reset_url">
 492 | 				<option value="" <?php selected( '', $options['password_reset_url'] ); ?>><?php _e( '', 'wpwebapp' ) ?></option>
 493 | 				<?php wpwebapp_settings_create_pages_select_fields( $options['password_reset_url'] ); ?>
 494 | 			</select>
 495 | 		</div>
 496 | 		<?php
 497 | 	}
 498 | 
 499 | 	// Forgot password form labels
 500 | 	function wpwebapp_settings_field_password_reset_form_labels() {
 501 | 		$options = wpwebapp_get_theme_options();
 502 | 		?>
 503 | 		<div>
 504 | 			<input type="text" name="wpwebapp_theme_options[password_forgot_label]" id="password_forgot_label" value="<?php echo stripslashes( esc_attr( $options['password_forgot_label'] ) ); ?>" />
 505 | 			<label class="description" for="password_forgot_label"><?php _e( 'Forgot password form "Username" label', 'wpwebapp' ); ?></label>
 506 | 		</div>
 507 | 
 508 | 		<div>
 509 | 			<input type="text" name="wpwebapp_theme_options[password_reset_label]" id="password_reset_label" value="<?php echo stripslashes( esc_attr( $options['password_reset_label'] ) ); ?>" />
 510 | 			<label class="description" for="password_reset_label"><?php _e( 'Reset password form "New Password" label', 'wpwebapp' ); ?></label>
 511 | 		</div>
 512 | 		<?php
 513 | 	}
 514 | 
 515 | 	// Forgot password form submit button
 516 | 	function wpwebapp_settings_field_password_reset_form_submit() {
 517 | 		$options = wpwebapp_get_theme_options();
 518 | 		?>
 519 | 		<div>
 520 | 			<input type="text" name="wpwebapp_theme_options[password_forgot_submit_text]" id="password_forgot_submit_text" value="<?php echo esc_attr( $options['password_forgot_submit_text'] ); ?>" />
 521 | 			<label class="description" for="password_forgot_submit_text"><?php _e( 'Forgot password form "Submit" button text', 'wpwebapp' ); ?></label>
 522 | 		</div>
 523 | 
 524 | 		<div>
 525 | 			<input type="text" name="wpwebapp_theme_options[password_reset_submit_text]" id="password_reset_submit_text" value="<?php echo esc_attr( $options['password_reset_submit_text'] ); ?>" />
 526 | 			<label class="description" for="password_reset_submit_text"><?php _e( 'Reset password form "Submit" button text', 'wpwebapp' ); ?></label>
 527 | 		</div>
 528 | 		<?php
 529 | 	}
 530 | 
 531 | 	// Change password form show requirements
 532 | 	function wpwebapp_settings_field_password_reset_form_show_requirements() {
 533 | 		$options = wpwebapp_get_theme_options();
 534 | 		?>
 535 | 		<div>
 536 | 			<label>
 537 | 				<input type="checkbox" name="wpwebapp_theme_options[password_reset_show_requirements]" id="password_reset_show_requirements" value="on" <?php checked( $options['password_reset_show_requirements'], 'on' ); ?>>
 538 | 				<?php _e( 'Show password requirements with the password reset form', 'wpwebapp' ); ?>
 539 | 			</label>
 540 | 		</div>
 541 | 		<?php
 542 | 	}
 543 | 
 544 | 	// Forgot password form error messages
 545 | 	function wpwebapp_settings_field_password_reset_form_errors() {
 546 | 		$options = wpwebapp_get_theme_options();
 547 | 		?>
 548 | 		<div>
 549 | 			<input type="text" name="wpwebapp_theme_options[password_forgot_password_field_empty_error]" class="large-text" id="password_forgot_password_field_empty_error" value="<?php echo stripslashes( esc_attr( $options['password_forgot_password_field_empty_error'] ) ); ?>" />
 550 | 			<label class="description" for="password_forgot_password_field_empty_error"><?php _e( 'Error when username or email is not provided on the forgot password form', 'wpwebapp' ); ?></label>
 551 | 		</div>
 552 | 		<br>
 553 | 
 554 | 		<div>
 555 | 			<input type="text" name="wpwebapp_theme_options[password_forgot_password_invalid_user_error]" class="large-text" id="password_forgot_password_invalid_user_error" value="<?php echo stripslashes( esc_attr( $options['password_forgot_password_invalid_user_error'] ) ); ?>" />
 556 | 			<label class="description" for="password_forgot_password_invalid_user_error"><?php _e( 'Error when username or email address provided on the forgot password form do not exist', 'wpwebapp' ); ?></label>
 557 | 		</div>
 558 | 		<br>
 559 | 
 560 | 		<div>
 561 | 			<input type="text" name="wpwebapp_theme_options[password_forgot_password_is_admin_error]" class="large-text" id="password_forgot_password_is_admin_error" value="<?php echo stripslashes( esc_attr( $options['password_forgot_password_is_admin_error'] ) ); ?>" />
 562 | 			<label class="description" for="password_forgot_password_is_admin_error"><?php _e( 'Error when the username or email attempting to be reset belongs to an admin', 'wpwebapp' ); ?></label>
 563 | 		</div>
 564 | 		<br>
 565 | 
 566 | 		<div>
 567 | 			<input type="text" name="wpwebapp_theme_options[password_forgot_password_email_error]" class="large-text" id="password_forgot_password_email_error" value="<?php echo stripslashes( esc_attr( $options['password_forgot_password_email_error'] ) ); ?>" />
 568 | 			<label class="description" for="password_forgot_password_email_error"><?php _e( 'Error when the user\'s password reset fails', 'wpwebapp' ); ?></label>
 569 | 		</div>
 570 | 		<br>
 571 | 
 572 | 		<div>
 573 | 			<input type="text" name="wpwebapp_theme_options[password_forgot_password_reset_key_expired_error]" class="large-text" id="password_forgot_password_reset_key_expired_error" value="<?php echo stripslashes( esc_attr( $options['password_forgot_password_reset_key_expired_error'] ) ); ?>" />
 574 | 			<label class="description" for="password_forgot_password_reset_key_expired_error"><?php _e( 'Error when the password reset link has expired', 'wpwebapp' ); ?></label>
 575 | 		</div>
 576 | 		<br>
 577 | 
 578 | 		<div>
 579 | 			<input type="text" name="wpwebapp_theme_options[password_forgot_password_success]" class="large-text" id="password_forgot_password_success" value="<?php echo stripslashes( esc_attr( $options['password_forgot_password_success'] ) ); ?>" />
 580 | 			<label class="description" for="password_forgot_password_success"><?php _e( 'Message when the password reset link has been sent', 'wpwebapp' ); ?></label>
 581 | 		</div>
 582 | 		<br>
 583 | 
 584 | 		<div>
 585 | 			<input type="text" name="wpwebapp_theme_options[password_reset_password_field_empty_error]" class="large-text" id="password_reset_password_field_empty_error" value="<?php echo stripslashes( esc_attr( $options['password_reset_password_field_empty_error'] ) ); ?>" />
 586 | 			<label class="description" for="password_reset_password_field_empty_error"><?php _e( 'Error when the new password is left blank on the password reset form', 'wpwebapp' ); ?></label>
 587 | 		</div>
 588 | 		<?php
 589 | 	}
 590 | 
 591 | 	// Forgot password form time limit
 592 | 	function wpwebapp_settings_field_password_reset_time_limit() {
 593 | 		$options = wpwebapp_get_theme_options();
 594 | 		?>
 595 | 		<div>
 596 | 			<input type="number" min="1" name="wpwebapp_theme_options[password_reset_time_valid]" class="small-text" id="password_reset_time_valid" value="<?php echo esc_attr( $options['password_reset_time_valid'] ); ?>" />
 597 | 			<label class="description" for="password_reset_time_valid"><?php _e( 'Time (in hours) that password reset link is valid for', 'wpwebapp' ); ?></label>
 598 | 		</div>
 599 | 		<?php
 600 | 	}
 601 | 
 602 | 	// Email to send to users when they reset their password
 603 | 	function wpwebapp_settings_field_password_reset_notification_email() {
 604 | 		$options = wpwebapp_get_theme_options();
 605 | 		?>
 606 | 		<div>
 607 | 			<textarea name="wpwebapp_theme_options[password_reset_notification_email]" class="large-text" id="password_reset_notification_email" cols="50" rows="10"><?php echo stripslashes( esc_textarea( $options['password_reset_notification_email'] ) ); ?></textarea>
 608 | 			<label for="password_reset_notification_email">
 609 | 				<?php printf( __( 'The email to send to users when they request a password rest. Use %s to dynamically add their username, and %s to dynamically add their custom reset URL (required). Use %s to include the number of hours their reset URL is good for.', 'wpwebapp' ), '<code>[username]</code>', '<code>[reset]</code>', '<code>[expires]</code>'  ); ?>
 610 | 			</label>
 611 | 		</div>
 612 | 		<?php
 613 | 	}
 614 | 
 615 | 	// Delete account form labels
 616 | 	function wpwebapp_settings_field_delete_account_form_labels() {
 617 | 		$options = wpwebapp_get_theme_options();
 618 | 		?>
 619 | 		<div>
 620 | 			<input type="text" name="wpwebapp_theme_options[delete_account_password_label]" id="delete_account_password_label" value="<?php echo stripslashes( esc_attr( $options['delete_account_password_label'] ) ); ?>" />
 621 | 			<label class="description" for="delete_account_password_label"><?php _e( 'Delete account form "Password" label', 'wpwebapp' ); ?></label>
 622 | 		</div>
 623 | 		<?php
 624 | 	}
 625 | 
 626 | 	// Delete account form submit button
 627 | 	function wpwebapp_settings_field_delete_account_form_submit() {
 628 | 		$options = wpwebapp_get_theme_options();
 629 | 		?>
 630 | 		<div>
 631 | 			<input type="text" name="wpwebapp_theme_options[delete_account_submit_text]" id="delete_account_submit_text" value="<?php echo esc_attr( $options['delete_account_submit_text'] ); ?>" />
 632 | 			<label class="description" for="delete_account_submit_text"><?php _e( 'Delete account form "Submit" button text', 'wpwebapp' ); ?></label>
 633 | 		</div>
 634 | 		<?php
 635 | 	}
 636 | 
 637 | 	// Delete account form error messages
 638 | 	function wpwebapp_settings_field_delete_account_form_errors() {
 639 | 		$options = wpwebapp_get_theme_options();
 640 | 		?>
 641 | 		<div>
 642 | 			<input type="text" name="wpwebapp_theme_options[delete_account_password_error]" class="large-text" id="delete_account_password_error" value="<?php echo stripslashes( esc_attr( $options['delete_account_password_error'] ) ); ?>" />
 643 | 			<label class="description" for="delete_account_password_error"><?php _e( 'Error when password provided in the delete account form is not correct', 'wpwebapp' ); ?></label>
 644 | 		</div>
 645 | 		<?php
 646 | 	}
 647 | 
 648 | 	// Delete account redirect URL
 649 | 	function wpwebapp_settings_field_delete_account_form_redirect_url() {
 650 | 		$options = wpwebapp_get_theme_options();
 651 | 		?>
 652 | 		<div>
 653 | 			<label class="description" for="delete_account_redirect"><?php _e( 'URL to redirect users to after their account is deleted:', 'wpwebapp' ); ?></label><br>
 654 | 			<select name="wpwebapp_theme_options[delete_account_redirect]" id="delete_account_redirect" >
 655 | 				<option value="0" <?php selected( '0', $options['delete_account_redirect'] ); ?>><?php _e( 'Home', 'wpwebapp' ) ?></option>
 656 | 				<?php wpwebapp_settings_create_pages_select_fields( $options['delete_account_redirect'] ); ?>
 657 | 			</select>
 658 | 		</div>
 659 | 		<?php
 660 | 	}
 661 | 
 662 | 	// Password length requirements
 663 | 	function wpwebapp_settings_field_password_length_requirements() {
 664 | 		$options = wpwebapp_get_theme_options();
 665 | 		?>
 666 | 		<div>
 667 | 			<input type="number" min="2" name="wpwebapp_theme_options[password_minimum_length]" class="small-text" id="password_minimum_length" value="<?php echo esc_attr( $options['password_minimum_length'] ); ?>" />
 668 | 			<label class="description" for="password_minimum_length"><?php _e( 'Minimum character length for passwords', 'wpwebapp' ); ?></label>
 669 | 		</div>
 670 | 		<?php
 671 | 	}
 672 | 
 673 | 	// Password characters requirements
 674 | 	function wpwebapp_settings_field_password_character_requirements() {
 675 | 		$options = wpwebapp_get_theme_options();
 676 | 		?>
 677 | 		<div>
 678 | 			<label>
 679 | 				<input type="checkbox" name="wpwebapp_theme_options[password_requires_letters]" id="password_requires_letters" <?php checked( 'on', $options['password_requires_letters'] ); ?> />
 680 | 				<?php _e( 'Require passwords to contain at least 1 letter (if mixed-case is required, this will also be required)', 'wpwebapp' ); ?>
 681 | 			</label>
 682 | 		</div>
 683 | 		<div>
 684 | 			<label>
 685 | 				<input type="checkbox" name="wpwebapp_theme_options[password_requires_numbers]" id="password_requires_numbers" <?php checked( 'on', $options['password_requires_numbers'] ); ?> />
 686 | 				<?php _e( 'Require passwords to contain at least 1 number', 'wpwebapp' ); ?>
 687 | 			</label>
 688 | 		</div>
 689 | 		<div>
 690 | 			<label>
 691 | 				<input type="checkbox" name="wpwebapp_theme_options[password_requires_special_characters]" id="password_requires_special_characters" <?php checked( 'on', $options['password_requires_special_characters'] ); ?> />
 692 | 				<?php _e( 'Require passwords to contain at least 1 special character', 'wpwebapp' ); ?>
 693 | 			</label>
 694 | 		</div>
 695 | 		<div>
 696 | 			<label>
 697 | 				<input type="checkbox" name="wpwebapp_theme_options[password_requires_mixed_case]" id="password_requires_mixed_case" <?php checked( 'on', $options['password_requires_mixed_case'] ); ?> />
 698 | 				<?php _e( 'Require passwords to contain mixed-case (both uppercase and lowercase letters)', 'wpwebapp' ); ?>
 699 | 			</label>
 700 | 		</div>
 701 | 		<?php
 702 | 	}
 703 | 
 704 | 	// Show the admin bar
 705 | 	function wpwebapp_settings_field_show_admin_bar() {
 706 | 		$options = wpwebapp_get_theme_options();
 707 | 		?>
 708 | 		<div>
 709 | 			<label>
 710 | 				<input type="checkbox" name="wpwebapp_theme_options[show_admin_bar]" id="show_admin_bar" <?php checked( 'on', $options['show_admin_bar'] ); ?> />
 711 | 				<?php _e( 'Show the admin bar for non-admin (disabled by default)', 'wpwebapp' ); ?>
 712 | 			</label>
 713 | 		</div>
 714 | 		<?php
 715 | 	}
 716 | 
 717 | 
 718 | 
 719 | 	/**
 720 | 	 * Theme Option Defaults & Sanitization
 721 | 	 * Each option field requires a default value under wpwebapp_get_theme_options(), and an if statement under wpwebapp_theme_options_validate();
 722 | 	 */
 723 | 
 724 | 	// Get the current options from the database.
 725 | 	// If none are specified, use these defaults.
 726 | 	function wpwebapp_get_theme_options() {
 727 | 		$saved = (array) get_option( 'wpwebapp_theme_options' );
 728 | 		$defaults = array(
 729 | 
 730 | 			// Sign Up
 731 | 			'signup_username_label' => __( 'Username', 'wpwebapp' ),
 732 | 			'signup_email_label' => __( 'Email', 'wpwebapp' ),
 733 | 			'signup_password_label' => __( 'Password', 'wpwebapp' ),
 734 | 			'signup_submit_text' => __( 'Sign Up', 'wpwebapp' ),
 735 | 			'signup_show_requirements' => 'off',
 736 | 			'signup_username_field_empty_error' => __( 'Please enter a username.', 'wpwebapp' ),
 737 | 			'signup_email_field_empty_error' => __( 'Please enter an email address.', 'wpwebapp' ),
 738 | 			'signup_password_field_empty_error' => __( 'Please enter a password.', 'wpwebapp' ),
 739 | 			'signup_username_invalid_error' => __( 'Usernames can only contain letters, numbers, and these special characters: _, space, ., -, *, and @.', 'wpwebapp' ),
 740 | 			'signup_username_exists_error' => __( 'Your chosen username is already in use. Sorry.', 'wpwebapp' ),
 741 | 			'signup_email_invalid_error' => __( 'Please use a valid email address.', 'wpwebapp' ),
 742 | 			'signup_email_exists_error' => __( 'Your chosen email is already in use. Sorry.', 'wpwebapp' ),
 743 | 			'signup_login_failed_error' => __( 'Your account was created by the system failed to log you in. Please try logging in now.', 'wpwebapp' ),
 744 | 			'signup_receive_notifications' => 'off',
 745 | 			'signup_notification_to_admin' => 'New user registration for ' . get_bloginfo('name') . '.' . "\r\n\r\n" . 'Username: [username]' . "\r\n" . 'Email: [email]' . "\r\n",
 746 | 			'signup_send_notifications' => 'off',
 747 | 			'signup_notification_to_user' => 'Welcome to ' . get_bloginfo('name') . '. Your username is [username]. Log in at [login].',
 748 | 			'create_user_password_time_valid' => 48,
 749 | 			'create_user_send_notifications' => 'off',
 750 | 			'create_user_notification' => 'An account for ' . get_bloginfo('name') . ' has been created for you. Your username is [username]. You can create a password for your account at [pw_reset].'. "\r\n\r\n" . 'This link is good for [expires] hours.',
 751 | 
 752 | 			// Login
 753 | 			'login_username_label' => __( 'Username or Email', 'wpwebapp' ),
 754 | 			'login_password_label' => __( 'Password', 'wpwebapp' ),
 755 | 			'login_rememberme_label' => __( 'Remember me', 'wpwebapp' ),
 756 | 			'login_submit_text' =>  __( 'Login', 'wpwebapp' ),
 757 | 			'login_username_field_empty_error' => __( 'Please enter a username or email address.', 'wpwebapp' ),
 758 | 			'login_password_field_empty_error' => __( 'Please enter your password.', 'wpwebapp' ),
 759 | 			'login_failed_error' => __( 'Login failed. Please try again.', 'wpwebapp' ),
 760 | 
 761 | 			// Redirect URLs
 762 | 			'login_redirect' => '0',
 763 | 			'logout_redirect' => '0',
 764 | 			'password_reset_redirect' => '',
 765 | 			'add_redirect_referrer' => 'off',
 766 | 
 767 | 			// Change email address
 768 | 			'email_change_current_email_label' => __( 'Email', 'wpwebapp' ),
 769 | 			'email_change_password_label' => __( 'Password', 'wpwebapp' ),
 770 | 			'email_change_submit_text' =>  __( 'Change My Email', 'wpwebapp' ),
 771 | 			'email_change_email_field_empty_error' => __( 'Please enter a new email address.', 'wpwebapp' ),
 772 | 			'email_change_password_field_empty_error' => __( 'Please enter your password.', 'wpwebapp' ),
 773 | 			'email_change_password_error' => __( 'The password you provided is not correct.', 'wpwebapp' ),
 774 | 			'email_change_success' => __( 'Your email address was updated.', 'wpwebapp' ),
 775 | 
 776 | 			// Change password
 777 | 			'password_change_current_password_label' => __( 'Current Password', 'wpwebapp' ),
 778 | 			'password_change_new_password_label' => __( 'New Password', 'wpwebapp' ),
 779 | 			'password_change_submit_text' => __( 'Change My Password', 'wpwebapp' ),
 780 | 			'password_change_show_requirements' => 'off',
 781 | 			'password_change_forced_reset_error' => __(' You must change your password before you can continue.', 'wpwebapp' ),
 782 | 			'password_change_current_password_field_empty_error' => __( 'Please enter your current password.', 'wpwebapp' ),
 783 | 			'password_change_new_password_field_empty_error' => __( 'Please enter a new password.', 'wpwebapp' ),
 784 | 			'password_change_password_error' => __( 'The current password you provided is not correct.', 'wpwebapp' ),
 785 | 			'password_change_success' => __( 'Your password was updated.', 'wpwebapp' ),
 786 | 			'password_change_receive_notifications' => 'off',
 787 | 			'password_change_notification_to_admin' => 'A user at ' . get_bloginfo('name') . ' changed their password.' . "\r\n\r\n" . 'Username: [username]' . "\r\n" . 'Email: [email]' . "\r\n",
 788 | 			'password_change_send_notifications' => 'off',
 789 | 			'password_change_notification_to_user' => 'Your password was changed on ' . get_bloginfo('name') . '. If you did not change your password, please contact your site adminstrator at ' . get_option( 'admin_email' ) . '.',
 790 | 
 791 | 			// Forgot password
 792 | 			'password_reset_url' => '',
 793 | 			'password_forgot_label' => __( 'Username or Email', 'wpwebapp' ),
 794 | 			'password_forgot_submit_text' => __( 'Reset My Password', 'wpwebapp' ),
 795 | 			'password_reset_label' => __( 'New Password', 'wpwebapp' ),
 796 | 			'password_reset_submit_text' => __( 'Update My Password', 'wpwebapp' ),
 797 | 			'password_reset_show_requirements' => 'off',
 798 | 			'password_forgot_password_field_empty_error' => __( 'Please enter your username or email.', 'wpwebapp' ),
 799 | 			'password_forgot_password_invalid_user_error' => __( 'The username or email your entered does not exist.', 'wpwebapp' ),
 800 | 			'password_forgot_password_is_admin_error' => __( 'This user\'s password cannot be reset.', 'wpwebapp' ),
 801 | 			'password_forgot_password_email_error' => __( 'Password reset failed. Please try again.', 'wpwebapp' ),
 802 | 			'password_forgot_password_reset_key_expired_error' => __( 'This link has expired. Please try again.', 'wpwebapp' ),
 803 | 			'password_forgot_password_success' => __( 'An email has been sent to you with a password reset link.', 'wpwebapp' ),
 804 | 			'password_reset_password_field_empty_error' => __( 'Please enter a new password.', 'wpwebapp' ),
 805 | 			'password_reset_time_valid' => 24,
 806 | 			'password_reset_notification_email' => 'We received a request to reset the password for your ' . get_bloginfo('name') . ' account: [username]. To reset your password, click on this link (or copy and paste the URL into your browser): [reset].' . "\r\n\r\n" . 'This link will expire in [expires] hours. If this was a mistake, please ignore this email.',
 807 | 
 808 | 			// Delete account
 809 | 			'delete_account_password_label' => __( 'Confirm Password', 'wpwebapp' ),
 810 | 			'delete_account_submit_text' =>  __( 'Delete My Account', 'wpwebapp' ),
 811 | 			'delete_account_password_error' => __( 'The password you provided is not correct.', 'wpwebapp' ),
 812 | 			'delete_account_redirect' => '0',
 813 | 
 814 | 			// Security
 815 | 			'password_minimum_length' => 8,
 816 | 			'password_requires_letters' => 'off',
 817 | 			'password_requires_numbers' => 'off',
 818 | 			'password_requires_special_characters' => 'off',
 819 | 			'password_requires_mixed_case' => 'off',
 820 | 			'show_admin_bar' => 'off',
 821 | 
 822 | 		);
 823 | 
 824 | 		$defaults = apply_filters( 'wpwebapp_default_theme_options', $defaults );
 825 | 
 826 | 		$options = wp_parse_args( $saved, $defaults );
 827 | 		$options = array_intersect_key( $options, $defaults );
 828 | 
 829 | 		return $options;
 830 | 	}
 831 | 
 832 | 	// Sanitize and validate updated theme options
 833 | 	function wpwebapp_theme_options_validate( $input ) {
 834 | 		$output = array();
 835 | 
 836 | 		// Sign Up
 837 | 		if ( isset( $input['signup_username_label'] ) && ! empty( $input['signup_username_label'] ) )
 838 | 			$output['signup_username_label'] = wp_filter_post_kses( $input['signup_username_label'] );
 839 | 
 840 | 		if ( isset( $input['signup_email_label'] ) && ! empty( $input['signup_email_label'] ) )
 841 | 			$output['signup_email_label'] = wp_filter_post_kses( $input['signup_email_label'] );
 842 | 
 843 | 		if ( isset( $input['signup_password_label'] ) && ! empty( $input['signup_password_label'] ) )
 844 | 			$output['signup_password_label'] = wp_filter_post_kses( $input['signup_password_label'] );
 845 | 
 846 | 		if ( isset( $input['signup_submit_text'] ) && ! empty( $input['signup_submit_text'] ) )
 847 | 			$output['signup_submit_text'] = wp_filter_nohtml_kses( $input['signup_submit_text'] );
 848 | 
 849 | 		if ( isset( $input['signup_show_requirements'] ) )
 850 | 			$output['signup_show_requirements'] = 'on';
 851 | 
 852 | 		if ( isset( $input['signup_username_field_empty_error'] ) && ! empty( $input['signup_username_field_empty_error'] ) )
 853 | 			$output['signup_username_field_empty_error'] = wp_filter_nohtml_kses( $input['signup_username_field_empty_error'] );
 854 | 
 855 | 		if ( isset( $input['signup_email_field_empty_error'] ) && ! empty( $input['signup_email_field_empty_error'] ) )
 856 | 			$output['signup_email_field_empty_error'] = wp_filter_nohtml_kses( $input['signup_email_field_empty_error'] );
 857 | 
 858 | 		if ( isset( $input['signup_password_field_empty_error'] ) && ! empty( $input['signup_password_field_empty_error'] ) )
 859 | 			$output['signup_password_field_empty_error'] = wp_filter_nohtml_kses( $input['signup_password_field_empty_error'] );
 860 | 
 861 | 		if ( isset( $input['signup_username_invalid_error'] ) && ! empty( $input['signup_username_invalid_error'] ) )
 862 | 			$output['signup_username_invalid_error'] = wp_filter_nohtml_kses( $input['signup_username_invalid_error'] );
 863 | 
 864 | 		if ( isset( $input['signup_username_exists_error'] ) && ! empty( $input['signup_username_exists_error'] ) )
 865 | 			$output['signup_username_exists_error'] = wp_filter_nohtml_kses( $input['signup_username_exists_error'] );
 866 | 
 867 | 		if ( isset( $input['signup_email_invalid_error'] ) && ! empty( $input['signup_email_invalid_error'] ) )
 868 | 			$output['signup_email_invalid_error'] = wp_filter_nohtml_kses( $input['signup_email_invalid_error'] );
 869 | 
 870 | 		if ( isset( $input['signup_email_exists_error'] ) && ! empty( $input['signup_email_exists_error'] ) )
 871 | 			$output['signup_email_exists_error'] = wp_filter_nohtml_kses( $input['signup_email_exists_error'] );
 872 | 
 873 | 		if ( isset( $input['signup_login_failed_error'] ) && ! empty( $input['signup_login_failed_error'] ) )
 874 | 			$output['signup_login_failed_error'] = wp_filter_nohtml_kses( $input['signup_login_failed_error'] );
 875 | 
 876 | 		if ( isset( $input['signup_login_failed_error'] ) && ! empty( $input['signup_login_failed_error'] ) )
 877 | 			$output['signup_login_failed_error'] = wp_filter_nohtml_kses( $input['signup_login_failed_error'] );
 878 | 
 879 | 		if ( isset( $input['signup_receive_notifications'] ) )
 880 | 			$output['signup_receive_notifications'] = 'on';
 881 | 
 882 | 		if ( isset( $input['signup_notification_to_admin'] ) && ! empty( $input['signup_notification_to_admin'] ) )
 883 | 			$output['signup_notification_to_admin'] = wp_filter_post_kses( $input['signup_notification_to_admin'] );
 884 | 
 885 | 		if ( isset( $input['signup_send_notifications'] ) )
 886 | 			$output['signup_send_notifications'] = 'on';
 887 | 
 888 | 		if ( isset( $input['signup_notification_to_user'] ) && ! empty( $input['signup_notification_to_user'] ) )
 889 | 			$output['signup_notification_to_user'] = wp_filter_post_kses( $input['signup_notification_to_user'] );
 890 | 
 891 | 		if ( isset( $input['create_user_password_time_valid'] ) && ! empty( $input['create_user_password_time_valid'] ) && is_numeric( $input['create_user_password_time_valid'] ) && $input['create_user_password_time_valid'] > 0 )
 892 | 			$output['create_user_password_time_valid'] = wp_filter_nohtml_kses( $input['create_user_password_time_valid'] );
 893 | 
 894 | 		if ( isset( $input['create_user_send_notifications'] ) )
 895 | 			$output['create_user_send_notifications'] = 'on';
 896 | 
 897 | 		if ( isset( $input['create_user_notification'] ) && ! empty( $input['create_user_notification'] ) )
 898 | 			$output['create_user_notification'] = wp_filter_post_kses( $input['create_user_notification'] );
 899 | 
 900 | 		// Login
 901 | 		if ( isset( $input['login_username_label'] ) && ! empty( $input['login_username_label'] ) )
 902 | 			$output['login_username_label'] = wp_filter_post_kses( $input['login_username_label'] );
 903 | 
 904 | 		if ( isset( $input['login_password_label'] ) && ! empty( $input['login_password_label'] ) )
 905 | 			$output['login_password_label'] = wp_filter_post_kses( $input['login_password_label'] );
 906 | 
 907 | 		if ( isset( $input['login_rememberme_label'] ) && ! empty( $input['login_rememberme_label'] ) )
 908 | 			$output['login_rememberme_label'] = wp_filter_nohtml_kses( $input['login_rememberme_label'] );
 909 | 
 910 | 		if ( isset( $input['login_submit_text'] ) && ! empty( $input['login_submit_text'] ) )
 911 | 			$output['login_submit_text'] = wp_filter_nohtml_kses( $input['login_submit_text'] );
 912 | 
 913 | 		if ( isset( $input['login_username_field_empty_error'] ) && ! empty( $input['login_username_field_empty_error'] ) )
 914 | 			$output['login_username_field_empty_error'] = wp_filter_nohtml_kses( $input['login_username_field_empty_error'] );
 915 | 
 916 | 		if ( isset( $input['login_password_field_empty_error'] ) && ! empty( $input['login_password_field_empty_error'] ) )
 917 | 			$output['login_password_field_empty_error'] = wp_filter_nohtml_kses( $input['login_password_field_empty_error'] );
 918 | 
 919 | 		if ( isset( $input['login_failed_error'] ) && ! empty( $input['login_failed_error'] ) )
 920 | 			$output['login_failed_error'] = wp_filter_nohtml_kses( $input['login_failed_error'] );
 921 | 
 922 | 		// Redirects
 923 | 		if ( isset( $input['login_redirect'] ) )
 924 | 			$output['login_redirect'] = wp_filter_nohtml_kses( $input['login_redirect'] );
 925 | 
 926 | 		if ( isset( $input['logout_redirect'] ) )
 927 | 			$output['logout_redirect'] = wp_filter_nohtml_kses( $input['logout_redirect'] );
 928 | 
 929 | 		if ( isset( $input['password_reset_redirect'] ) )
 930 | 			$output['password_reset_redirect'] = wp_filter_nohtml_kses( $input['password_reset_redirect'] );
 931 | 
 932 | 		if ( isset( $input['add_redirect_referrer'] ) )
 933 | 			$output['add_redirect_referrer'] = 'on';
 934 | 
 935 | 		// Change email address
 936 | 		if ( isset( $input['email_change_current_email_label'] ) && ! empty( $input['email_change_current_email_label'] ) )
 937 | 			$output['email_change_current_email_label'] = wp_filter_post_kses( $input['email_change_current_email_label'] );
 938 | 
 939 | 		if ( isset( $input['email_change_password_label'] ) && ! empty( $input['email_change_password_label'] ) )
 940 | 			$output['email_change_password_label'] = wp_filter_post_kses( $input['email_change_password_label'] );
 941 | 
 942 | 		if ( isset( $input['email_change_submit_text'] ) && ! empty( $input['email_change_submit_text'] ) )
 943 | 			$output['email_change_submit_text'] = wp_filter_nohtml_kses( $input['email_change_submit_text'] );
 944 | 
 945 | 		if ( isset( $input['email_change_email_field_empty_error'] ) && ! empty( $input['email_change_email_field_empty_error'] ) )
 946 | 			$output['email_change_email_field_empty_error'] = wp_filter_nohtml_kses( $input['email_change_email_field_empty_error'] );
 947 | 
 948 | 		if ( isset( $input['email_change_password_field_empty_error'] ) && ! empty( $input['email_change_password_field_empty_error'] ) )
 949 | 			$output['email_change_password_field_empty_error'] = wp_filter_nohtml_kses( $input['email_change_password_field_empty_error'] );
 950 | 
 951 | 		if ( isset( $input['email_change_password_error'] ) && ! empty( $input['email_change_password_error'] ) )
 952 | 			$output['email_change_password_error'] = wp_filter_nohtml_kses( $input['email_change_password_error'] );
 953 | 
 954 | 		if ( isset( $input['email_change_success'] ) && ! empty( $input['email_change_success'] ) )
 955 | 			$output['email_change_success'] = wp_filter_nohtml_kses( $input['email_change_success'] );
 956 | 
 957 | 		// Change password
 958 | 		if ( isset( $input['password_change_current_password_label'] ) && ! empty( $input['password_change_current_password_label'] ) )
 959 | 			$output['password_change_current_password_label'] = wp_filter_post_kses( $input['password_change_current_password_label'] );
 960 | 
 961 | 		if ( isset( $input['password_change_new_password_label'] ) && ! empty( $input['password_change_new_password_label'] ) )
 962 | 			$output['password_change_new_password_label'] = wp_filter_post_kses( $input['password_change_new_password_label'] );
 963 | 
 964 | 		if ( isset( $input['password_change_submit_text'] ) && ! empty( $input['password_change_submit_text'] ) )
 965 | 			$output['password_change_submit_text'] = wp_filter_nohtml_kses( $input['password_change_submit_text'] );
 966 | 
 967 | 		if ( isset( $input['password_change_show_requirements'] ) )
 968 | 			$output['password_change_show_requirements'] = 'on';
 969 | 
 970 | 		if ( isset( $input['password_change_forced_reset_error'] ) && ! empty( $input['password_change_forced_reset_error'] ) )
 971 | 			$output['password_change_forced_reset_error'] = wp_filter_nohtml_kses( $input['password_change_forced_reset_error'] );
 972 | 
 973 | 		if ( isset( $input['password_change_current_password_field_empty_error'] ) && ! empty( $input['password_change_current_password_field_empty_error'] ) )
 974 | 			$output['password_change_current_password_field_empty_error'] = wp_filter_nohtml_kses( $input['password_change_current_password_field_empty_error'] );
 975 | 
 976 | 		if ( isset( $input['password_change_new_password_field_empty_error'] ) && ! empty( $input['password_change_new_password_field_empty_error'] ) )
 977 | 			$output['password_change_new_password_field_empty_error'] = wp_filter_nohtml_kses( $input['password_change_new_password_field_empty_error'] );
 978 | 
 979 | 		if ( isset( $input['password_change_password_error'] ) && ! empty( $input['password_change_password_error'] ) )
 980 | 			$output['password_change_password_error'] = wp_filter_nohtml_kses( $input['password_change_password_error'] );
 981 | 
 982 | 		if ( isset( $input['password_change_success'] ) && ! empty( $input['password_change_success'] ) )
 983 | 			$output['password_change_success'] = wp_filter_nohtml_kses( $input['password_change_success'] );
 984 | 
 985 | 		if ( isset( $input['password_change_receive_notifications'] ) )
 986 | 			$output['password_change_receive_notifications'] = 'on';
 987 | 
 988 | 		if ( isset( $input['password_change_notification_to_admin'] ) && ! empty( $input['password_change_notification_to_admin'] ) )
 989 | 			$output['password_change_notification_to_admin'] = wp_filter_post_kses( $input['password_change_notification_to_admin'] );
 990 | 
 991 | 		if ( isset( $input['password_change_send_notifications'] ) )
 992 | 			$output['password_change_send_notifications'] = 'on';
 993 | 
 994 | 		if ( isset( $input['password_change_notification_to_user'] ) && ! empty( $input['password_change_notification_to_user'] ) )
 995 | 			$output['password_change_notification_to_user'] = wp_filter_post_kses( $input['password_change_notification_to_user'] );
 996 | 
 997 | 		// Forgot password
 998 | 		if ( isset( $input['password_reset_url'] ) )
 999 | 			$output['password_reset_url'] = wp_filter_nohtml_kses( $input['password_reset_url'] );
1000 | 
1001 | 		if ( isset( $input['password_forgot_label'] ) && ! empty( $input['password_forgot_label'] ) )
1002 | 			$output['password_forgot_label'] = wp_filter_post_kses( $input['password_forgot_label'] );
1003 | 
1004 | 		if ( isset( $input['password_forgot_submit_text'] ) && ! empty( $input['password_forgot_submit_text'] ) )
1005 | 			$output['password_forgot_submit_text'] = wp_filter_nohtml_kses( $input['password_forgot_submit_text'] );
1006 | 
1007 | 		if ( isset( $input['password_reset_label'] ) && ! empty( $input['password_reset_label'] ) )
1008 | 			$output['password_reset_label'] = wp_filter_post_kses( $input['password_reset_label'] );
1009 | 
1010 | 		if ( isset( $input['password_reset_submit_text'] ) && ! empty( $input['password_reset_submit_text'] ) )
1011 | 			$output['password_reset_submit_text'] = wp_filter_nohtml_kses( $input['password_reset_submit_text'] );
1012 | 
1013 | 		if ( isset( $input['password_reset_show_requirements'] ) )
1014 | 			$output['password_reset_show_requirements'] = 'on';
1015 | 
1016 | 		if ( isset( $input['password_forgot_password_field_empty_error'] ) && ! empty( $input['password_forgot_password_field_empty_error'] ) )
1017 | 			$output['password_forgot_password_field_empty_error'] = wp_filter_nohtml_kses( $input['password_forgot_password_field_empty_error'] );
1018 | 
1019 | 		if ( isset( $input['password_forgot_password_invalid_user_error'] ) && ! empty( $input['password_forgot_password_invalid_user_error'] ) )
1020 | 			$output['password_forgot_password_invalid_user_error'] = wp_filter_nohtml_kses( $input['password_forgot_password_invalid_user_error'] );
1021 | 
1022 | 		if ( isset( $input['password_forgot_password_is_admin_error'] ) && ! empty( $input['password_forgot_password_is_admin_error'] ) )
1023 | 			$output['password_forgot_password_is_admin_error'] = wp_filter_nohtml_kses( $input['password_forgot_password_is_admin_error'] );
1024 | 
1025 | 		if ( isset( $input['password_forgot_password_email_error'] ) && ! empty( $input['password_forgot_password_email_error'] ) )
1026 | 			$output['password_forgot_password_email_error'] = wp_filter_nohtml_kses( $input['password_forgot_password_email_error'] );
1027 | 
1028 | 		if ( isset( $input['password_forgot_password_reset_key_expired_error'] ) && ! empty( $input['password_forgot_password_reset_key_expired_error'] ) )
1029 | 			$output['password_forgot_password_reset_key_expired_error'] = wp_filter_nohtml_kses( $input['password_forgot_password_reset_key_expired_error'] );
1030 | 
1031 | 		if ( isset( $input['password_forgot_password_success'] ) && ! empty( $input['password_forgot_password_success'] ) )
1032 | 			$output['password_forgot_password_success'] = wp_filter_nohtml_kses( $input['password_forgot_password_success'] );
1033 | 
1034 | 		if ( isset( $input['password_reset_password_field_empty_error'] ) && ! empty( $input['password_reset_password_field_empty_error'] ) )
1035 | 			$output['password_reset_password_field_empty_error'] = wp_filter_nohtml_kses( $input['password_reset_password_field_empty_error'] );
1036 | 
1037 | 		if ( isset( $input['password_reset_time_valid'] ) && ! empty( $input['password_reset_time_valid'] ) && is_numeric( $input['password_reset_time_valid'] ) && $input['password_reset_time_valid'] > 0 )
1038 | 			$output['password_reset_time_valid'] = wp_filter_nohtml_kses( $input['password_reset_time_valid'] );
1039 | 
1040 | 		if ( isset( $input['password_reset_notification_email'] ) && ! empty( $input['password_reset_notification_email'] ) )
1041 | 			$output['password_reset_notification_email'] = wp_filter_post_kses( $input['password_reset_notification_email'] );
1042 | 
1043 | 		// Delete account
1044 | 		if ( isset( $input['delete_account_password_label'] ) && ! empty( $input['delete_account_password_label'] ) )
1045 | 			$output['delete_account_password_label'] = wp_filter_post_kses( $input['delete_account_password_label'] );
1046 | 
1047 | 		if ( isset( $input['delete_account_submit_text'] ) && ! empty( $input['delete_account_submit_text'] ) )
1048 | 			$output['delete_account_submit_text'] = wp_filter_nohtml_kses( $input['delete_account_submit_text'] );
1049 | 
1050 | 		if ( isset( $input['delete_account_password_error'] ) && ! empty( $input['delete_account_password_error'] ) )
1051 | 			$output['delete_account_password_error'] = wp_filter_nohtml_kses( $input['delete_account_password_error'] );
1052 | 
1053 | 		if ( isset( $input['delete_account_redirect'] ) )
1054 | 			$output['delete_account_redirect'] = wp_filter_nohtml_kses( $input['delete_account_redirect'] );
1055 | 
1056 | 		// Security
1057 | 		if ( isset( $input['password_minimum_length'] ) && ! empty( $input['password_minimum_length'] ) && is_numeric( $input['password_minimum_length'] ) && $input['password_minimum_length'] > 2 )
1058 | 			$output['password_minimum_length'] = wp_filter_nohtml_kses( $input['password_minimum_length'] );
1059 | 
1060 | 		if ( isset( $input['password_requires_letters'] ) )
1061 | 			$output['password_requires_letters'] = 'on';
1062 | 
1063 | 		if ( isset( $input['password_requires_numbers'] ) )
1064 | 			$output['password_requires_numbers'] = 'on';
1065 | 
1066 | 		if ( isset( $input['password_requires_special_characters'] ) )
1067 | 			$output['password_requires_special_characters'] = 'on';
1068 | 
1069 | 		if ( isset( $input['password_requires_mixed_case'] ) ) {
1070 | 			$output['password_requires_letters'] = 'on';
1071 | 			$output['password_requires_mixed_case'] = 'on';
1072 | 		}
1073 | 
1074 | 		if ( isset( $input['show_admin_bar'] ) )
1075 | 			$output['show_admin_bar'] = 'on';
1076 | 
1077 | 
1078 | 		return apply_filters( 'wpwebapp_theme_options_validate', $output, $input );
1079 | 	}
1080 | 
1081 | 
1082 | 
1083 | 	/**
1084 | 	 * Theme Options Menu
1085 | 	 * Each option field requires its own add_settings_field function.
1086 | 	 */
1087 | 
1088 | 	// Create theme options menu
1089 | 	// The content that's rendered on the menu page.
1090 | 	function wpwebapp_theme_options_render_page() {
1091 | 		?>
1092 | 		<div class="wrap">
1093 | 			<h2><?php _e( 'WordPress for Web Apps Options', 'wpwebapp' ); ?></h2>
1094 | 			<?php // settings_errors(); ?>
1095 | 
1096 | 			<form method="post" action="options.php">
1097 | 				<?php
1098 | 					settings_fields( 'wpwebapp_options' );
1099 | 					do_settings_sections( 'wpwebapp_plugin_options' );
1100 | 					submit_button();
1101 | 				?>
1102 | 			</form>
1103 | 		</div>
1104 | 		<?php
1105 | 	}
1106 | 
1107 | 	// Register the theme options page and its fields
1108 | 	function wpwebapp_theme_options_init() {
1109 | 
1110 | 		// Register a setting and its sanitization callback
1111 | 		// register_setting( $option_group, $option_name, $sanitize_callback );
1112 | 		// $option_group - A settings group name.
1113 | 		// $option_name - The name of an option to sanitize and save.
1114 | 		// $sanitize_callback - A callback function that sanitizes the option's value.
1115 | 		register_setting( 'wpwebapp_options', 'wpwebapp_theme_options', 'wpwebapp_theme_options_validate' );
1116 | 
1117 | 
1118 | 		// Register our settings field group
1119 | 		// add_settings_section( $id, $title, $callback, $page );
1120 | 		// $id - Unique identifier for the settings section
1121 | 		// $title - Section title
1122 | 		// $callback - // Section callback (we don't want anything)
1123 | 		// $page - // Menu slug, used to uniquely identify the page. See wpwebapp_theme_options_add_page().
1124 | 		add_settings_section( 'signup', __( 'Sign Up Form', 'wpwebapp' ),  '__return_false', 'wpwebapp_plugin_options' );
1125 | 		add_settings_section( 'login', __( 'Login Form', 'wpwebapp' ),  '__return_false', 'wpwebapp_plugin_options' );
1126 | 		add_settings_section( 'redirects', __( 'Redirects', 'wpwebapp' ),  '__return_false', 'wpwebapp_plugin_options' );
1127 | 		add_settings_section( 'email_change', __( 'Change Email Form', 'wpwebapp' ),  '__return_false', 'wpwebapp_plugin_options' );
1128 | 		add_settings_section( 'password_change', __( 'Change Password Form', 'wpwebapp' ),  '__return_false', 'wpwebapp_plugin_options' );
1129 | 		add_settings_section( 'password_forgot', __( 'Forgot Password Form', 'wpwebapp' ),  '__return_false', 'wpwebapp_plugin_options' );
1130 | 		add_settings_section( 'delete_account', __( 'Delete Account Form', 'wpwebapp' ),  '__return_false', 'wpwebapp_plugin_options' );
1131 | 		add_settings_section( 'security', __( 'Security', 'wpwebapp' ),  '__return_false', 'wpwebapp_plugin_options' );
1132 | 
1133 | 
1134 | 		// Register our individual settings fields
1135 | 		// add_settings_field( $id, $title, $callback, $page, $section );
1136 | 		// $id - Unique identifier for the field.
1137 | 		// $title - Setting field title.
1138 | 		// $callback - Function that creates the field (from the Theme Option Fields section).
1139 | 		// $page - The menu page on which to display this field.
1140 | 		// $section - The section of the settings page in which to show the field.
1141 | 
1142 | 		// Sign up form
1143 | 		add_settings_field( 'signup_labels', __( 'Sign Up Labels', 'wpwebapp' ), 'wpwebapp_settings_field_signup_form_labels', 'wpwebapp_plugin_options', 'signup' );
1144 | 		add_settings_field( 'signup_submit', __( 'Sign Up Submit Button', 'wpwebapp' ), 'wpwebapp_settings_field_signup_form_submit', 'wpwebapp_plugin_options', 'signup' );
1145 | 		add_settings_field( 'signup_requirements', __( 'Sign Up Password Requirements', 'wpwebapp' ), 'wpwebapp_settings_field_signup_form_show_requirements', 'wpwebapp_plugin_options', 'signup' );
1146 | 		add_settings_field( 'signup_errors', __( 'Sign Up Errors', 'wpwebapp' ), 'wpwebapp_settings_field_signup_form_errors', 'wpwebapp_plugin_options', 'signup' );
1147 | 		add_settings_field( 'signup_notifications_to_admin', __( 'Sign Up Admin Notifications', 'wpwebapp' ), 'wpwebapp_settings_field_signup_form_notifications_to_admin', 'wpwebapp_plugin_options', 'signup' );
1148 | 		add_settings_field( 'signup_notifications_to_user', __( 'Sign Up User Notifications', 'wpwebapp' ), 'wpwebapp_settings_field_signup_form_notifications_to_user', 'wpwebapp_plugin_options', 'signup' );
1149 | 		add_settings_field( 'create_user_password_time_valid', __( 'User Password Time Limit', 'wpwebapp' ), 'wpwebapp_settings_field_create_user_password_time_limit', 'wpwebapp_plugin_options', 'signup' );
1150 | 		add_settings_field( 'create_user_notifications', __( 'Create User Notifications', 'wpwebapp' ), 'wpwebapp_settings_field_create_user_notifications_to_user', 'wpwebapp_plugin_options', 'signup' );
1151 | 
1152 | 		// Login form
1153 | 		add_settings_field( 'login_labels', __( 'Login Labels', 'wpwebapp' ), 'wpwebapp_settings_field_login_form_labels', 'wpwebapp_plugin_options', 'login' );
1154 | 		add_settings_field( 'login_submit', __( 'Login Submit Button', 'wpwebapp' ), 'wpwebapp_settings_field_login_form_submit', 'wpwebapp_plugin_options', 'login' );
1155 | 		add_settings_field( 'login_errors', __( 'Login Errors', 'wpwebapp' ), 'wpwebapp_settings_field_login_form_errors', 'wpwebapp_plugin_options', 'login' );
1156 | 
1157 | 		// Redirects
1158 | 		add_settings_field( 'redirects', __( 'Redirect URLs', 'wpwebapp' ), 'wpwebapp_settings_field_login_logout_redirects', 'wpwebapp_plugin_options', 'redirects' );
1159 | 
1160 | 		// Email change form
1161 | 		add_settings_field( 'email_change_labels', __( 'Email Change Labels', 'wpwebapp' ), 'wpwebapp_settings_field_email_change_form_labels', 'wpwebapp_plugin_options', 'email_change' );
1162 | 		add_settings_field( 'email_change_submit', __( 'Email Change Submit Buttons', 'wpwebapp' ), 'wpwebapp_settings_field_email_change_form_submit', 'wpwebapp_plugin_options', 'email_change' );
1163 | 		add_settings_field( 'email_change_errors', __( 'Email Change Errors', 'wpwebapp' ), 'wpwebapp_settings_field_email_change_form_errors', 'wpwebapp_plugin_options', 'email_change' );
1164 | 
1165 | 		// Password change form
1166 | 		add_settings_field( 'password_change_labels', __( 'Change Password Labels', 'wpwebapp' ), 'wpwebapp_settings_field_password_change_form_labels', 'wpwebapp_plugin_options', 'password_change' );
1167 | 		add_settings_field( 'password_change_submit', __( 'Change Password Submit Buttons', 'wpwebapp' ), 'wpwebapp_settings_field_password_change_form_submit', 'wpwebapp_plugin_options', 'password_change' );
1168 | 		add_settings_field( 'password_change_show_requirements', __( 'Change Password Requirements', 'wpwebapp' ), 'wpwebapp_settings_field_password_change_form_show_requirements', 'wpwebapp_plugin_options', 'password_change' );
1169 | 		add_settings_field( 'password_change_errors', __( 'Change Password Errors', 'wpwebapp' ), 'wpwebapp_settings_field_password_change_form_errors', 'wpwebapp_plugin_options', 'password_change' );
1170 | 		add_settings_field( 'password_change_notifications_to_admin', __( 'Password Change Admin Notifications', 'wpwebapp' ), 'wpwebapp_settings_field_password_change_form_notifications_to_admin', 'wpwebapp_plugin_options', 'password_change' );
1171 | 		add_settings_field( 'password_change_notifications_to_user', __( 'Password Change User Notifications', 'wpwebapp' ), 'wpwebapp_settings_field_password_change_form_notifications_to_user', 'wpwebapp_plugin_options', 'password_change' );
1172 | 
1173 | 		// Forgot password form
1174 | 		add_settings_field( 'password_reset_url', __( 'Forgot Password URL', 'wpwebapp' ), 'wpwebapp_settings_field_password_reset_url', 'wpwebapp_plugin_options', 'password_forgot' );
1175 | 		add_settings_field( 'password_forgot_labels', __( 'Forgot Password Labels', 'wpwebapp' ), 'wpwebapp_settings_field_password_reset_form_labels', 'wpwebapp_plugin_options', 'password_forgot' );
1176 | 		add_settings_field( 'password_forgot_submit', __( 'Forgot Password Submit Buttons', 'wpwebapp' ), 'wpwebapp_settings_field_password_reset_form_submit', 'wpwebapp_plugin_options', 'password_forgot' );
1177 | 		add_settings_field( 'password_forgot_show_requirements', __( 'Forgot Password Requirements', 'wpwebapp' ), 'wpwebapp_settings_field_password_reset_form_show_requirements', 'wpwebapp_plugin_options', 'password_forgot' );
1178 | 		add_settings_field( 'password_forgot_errors', __( 'Forgot Password Errors', 'wpwebapp' ), 'wpwebapp_settings_field_password_reset_form_errors', 'wpwebapp_plugin_options', 'password_forgot' );
1179 | 		add_settings_field( 'password_forgot_timelimit', __( 'Forgot Password Time Limit', 'wpwebapp' ), 'wpwebapp_settings_field_password_reset_time_limit', 'wpwebapp_plugin_options', 'password_forgot' );
1180 | 		add_settings_field( 'password_reset_notification', __( 'Password Reset Notification', 'wpwebapp' ), 'wpwebapp_settings_field_password_reset_notification_email', 'wpwebapp_plugin_options', 'password_forgot' );
1181 | 
1182 | 		// Delete acccount form
1183 | 		add_settings_field( 'delete_account_labels', __( 'Delete Account Labels', 'wpwebapp' ), 'wpwebapp_settings_field_delete_account_form_labels', 'wpwebapp_plugin_options', 'delete_account' );
1184 | 		add_settings_field( 'delete_account_submit', __( 'Delete Account Submit Buttons', 'wpwebapp' ), 'wpwebapp_settings_field_delete_account_form_submit', 'wpwebapp_plugin_options', 'delete_account' );
1185 | 		add_settings_field( 'delete_account_errors', __( 'Delete Account Errors', 'wpwebapp' ), 'wpwebapp_settings_field_delete_account_form_errors', 'wpwebapp_plugin_options', 'delete_account' );
1186 | 		add_settings_field( 'delete_account_redirect', __( 'Delete Account Redirect', 'wpwebapp' ), 'wpwebapp_settings_field_delete_account_form_redirect_url', 'wpwebapp_plugin_options', 'delete_account' );
1187 | 
1188 | 		// Security
1189 | 		add_settings_field( 'security_password_length', __( 'Password Length', 'wpwebapp' ), 'wpwebapp_settings_field_password_length_requirements', 'wpwebapp_plugin_options', 'security' );
1190 | 		add_settings_field( 'security_password_characters', __( 'Password Characters', 'wpwebapp' ), 'wpwebapp_settings_field_password_character_requirements', 'wpwebapp_plugin_options', 'security' );
1191 | 		add_settings_field( 'security_show_admin_bar', __( 'Admin Bar', 'wpwebapp' ), 'wpwebapp_settings_field_show_admin_bar', 'wpwebapp_plugin_options', 'security' );
1192 | 
1193 | 	}
1194 | 	add_action( 'admin_init', 'wpwebapp_theme_options_init' );
1195 | 
1196 | 	// Add the theme options page to the admin menu
1197 | 	// Use add_theme_page() to add under Appearance tab (default).
1198 | 	// Use add_menu_page() to add as it's own tab.
1199 | 	// Use add_submenu_page() to add to another tab.
1200 | 	function wpwebapp_theme_options_add_page() {
1201 | 
1202 | 		// add_theme_page( $page_title, $menu_title, $capability, $menu_slug, $function );
1203 | 		// add_menu_page( $page_title, $menu_title, $capability, $menu_slug, $function );
1204 | 		// add_submenu_page( $parent_slug, $page_title, $menu_title, $capability, $menu_slug, $function );
1205 | 		// $page_title - Name of page
1206 | 		// $menu_title - Label in menu
1207 | 		// $capability - Capability required
1208 | 		// $menu_slug - Used to uniquely identify the page
1209 | 		// $function - Function that renders the options page
1210 | 		// $theme_page = add_theme_page( __( 'Theme Options', 'wpwebapp' ), __( 'Theme Options', 'wpwebapp' ), 'edit_theme_options', 'theme_options', 'wpwebapp_theme_options_render_page' );
1211 | 
1212 | 		// $theme_page = add_menu_page( __( 'Theme Options', 'wpwebapp' ), __( 'Theme Options', 'wpwebapp' ), 'edit_theme_options', 'theme_options', 'wpwebapp_theme_options_render_page' );
1213 | 		$theme_page = add_submenu_page( 'options-general.php', __( 'Web Apps', 'wpwebapp' ), __( 'Web Apps', 'wpwebapp' ), 'edit_theme_options', 'wpwebapp_plugin_options', 'wpwebapp_theme_options_render_page' );
1214 | 	}
1215 | 	add_action( 'admin_menu', 'wpwebapp_theme_options_add_page' );
1216 | 
1217 | 
1218 | 
1219 | 	// Restrict access to the theme options page to admins
1220 | 	function wpwebapp_option_page_capability( $capability ) {
1221 | 		return 'edit_theme_options';
1222 | 	}
1223 | 	add_filter( 'option_page_capability_wpwebapp_options', 'wpwebapp_option_page_capability' );
1224 | 


--------------------------------------------------------------------------------
/options/security.php:
--------------------------------------------------------------------------------
  1 | <?php
  2 | 
  3 | 
  4 | 	/**
  5 | 	 * Test whether or not password meets security requirements
  6 | 	 * @param  string $password Password to test
  7 | 	 * @return boolen           Returns true if it meets te requirements
  8 | 	 */
  9 | 	function wpwebapp_test_password_requirements( $password ) {
 10 | 
 11 | 		// Variables
 12 | 		$options = wpwebapp_get_theme_options_security();
 13 | 
 14 | 		// Test the password
 15 | 		if ( strlen( $password ) < $options['password_minimum_length'] ) return false;
 16 | 		if ( $options['password_requires_letters'] === 'on' && !wpwebapp_has_letters( $password ) ) return false;
 17 | 		if ( $options['password_requires_numbers'] === 'on' && !wpwebapp_has_numbers( $password ) ) return false;
 18 | 		if ( $options['password_requires_special_characters'] === 'on' && !wpwebapp_has_special_chars( $password ) ) return false;
 19 | 		if ( $options['password_requires_mixed_case'] === 'on' && !wpwebapp_has_mixed_case( $password ) ) return false;
 20 | 		return true;
 21 | 
 22 | 	}
 23 | 
 24 | 
 25 | 	/**
 26 | 	 * Create password requirements string
 27 | 	 * @return string  The password requirements
 28 | 	 */
 29 | 	function wpwebapp_password_requirements_message() {
 30 | 
 31 | 		// Variables
 32 | 		$options = wpwebapp_get_theme_options_security();
 33 | 		$length = $options['password_requires_mixed_case'] === 'on' && intval( $options['password_minimum_length'] ) < 2 ? 2 : $options['password_minimum_length'];
 34 | 
 35 | 		// Message
 36 | 		if ( $options['password_requires_mixed_case'] === 'on' && $options['password_requires_numbers'] === 'on' && $options['password_requires_special_characters'] === 'on' ) {
 37 | 			$message = 'Password must contain at least 1 uppercase letter, 1 lowercase letter, 1 number, and 1 special character, and be at least ' . $length . ' characters long.';
 38 | 		} elseif ( $options['password_requires_mixed_case'] === 'on' && $options['password_requires_numbers'] === 'on' ) {
 39 | 			$message = 'Password must contain at least 1 uppercase letter, 1 lowercase letter, and 1 number, and be at least ' . $length . ' characters long.';
 40 | 		} elseif ( $options['password_requires_mixed_case'] === 'on' && $options['password_requires_special_characters'] === 'on' ) {
 41 | 			$message = 'Password must contain at least 1 uppercase letter, 1 lowercase letter, and 1 special character, and be at least ' . $length . ' characters long.';
 42 | 		} elseif ( $options['password_requires_letters'] === 'on' && $options['password_requires_numbers'] === 'on' && $options['password_requires_special_characters'] === 'on' ) {
 43 | 			$message = 'Password must contain at least 1 letter, 1 number, and 1 special character, and be at least ' . $length . ' characters long.';
 44 | 		} elseif ( $options['password_requires_mixed_case'] === 'on' && $options['password_requires_numbers'] === 'on' ) {
 45 | 			$message = 'Password must contain at least 1 uppercase letter, 1 lowercase letter, and 1 number, and be at least ' . $length . ' characters long.';
 46 | 		} elseif ( $options['password_requires_mixed_case'] === 'on' && $options['password_requires_special_characters'] === 'on' ) {
 47 | 			$message = 'Password must contain at least 1 uppercase letter, 1 lowercase letter, and 1 special character, and be at least ' . $length . ' characters long.';
 48 | 		} elseif ( $options['password_requires_letters'] === 'on' && $options['password_requires_numbers'] === 'on' ) {
 49 | 			$message = 'Password must contain at least 1 letter and 1 number, and be at least ' . $length . ' characters long.';
 50 | 		} elseif ( $options['password_requires_letters'] === 'on' && $options['password_requires_special_characters'] === 'on' ) {
 51 | 			$message = 'Password must contain at least 1 letter and 1 special character, and be at least ' . $length . ' characters long.';
 52 | 		} elseif ( $options['password_requires_numbers'] === 'on' && $options['password_requires_special_characters'] === 'on' ) {
 53 | 			$message = 'Password must contain at least 1 number and 1 special character, and be at least ' . $length . ' characters long.';
 54 | 		} elseif ( $options['password_requires_mixed_case'] === 'on' ) {
 55 | 			$message = 'Password must contain at least 1 uppercase letter and 1 lowercase letter, and be at least ' . $length . ' characters long.';
 56 | 		} elseif ( $options['password_requires_letters'] === 'on' ) {
 57 | 			$message = 'Password must contain at least 1 letter and be at least ' . $length . ' characters long.';
 58 | 		} elseif ( $options['password_requires_numbers'] === 'on' ) {
 59 | 			$message = 'Password must contain at least 1 number and be at least ' . $length . ' characters long.';
 60 | 		} elseif ( $options['password_requires_special_characters'] === 'on' ) {
 61 | 			$message = 'Password must contain at least 1 special character and be at least ' . $length . ' characters long.';
 62 | 		} else {
 63 | 			$message = 'Password must be at least ' . $length . ' characters long.';
 64 | 		}
 65 | 
 66 | 		return $message;
 67 | 
 68 | 	}
 69 | 
 70 | 
 71 | 	/**
 72 | 	 * Create custom user profile fields to force password reset
 73 | 	 * @param  object $user The user
 74 | 	 */
 75 | 	function wpwebapp_security_add_user_fields( $user ) {
 76 | 
 77 | 		// Don't load for admins
 78 | 		if ( user_can( $user, 'edit_themes' ) ) return;
 79 | 
 80 | 		// Get user's forced password reset status
 81 | 		$force_reset = empty($user) || !is_object( $user ) ? null : get_the_author_meta( 'wpwebapp_force_password_reset', $user->ID );
 82 | 
 83 | 		// Get options
 84 | 		$options = wpwebapp_get_theme_options_redirects();
 85 | 
 86 | 		?>
 87 | 
 88 | 		<h3><?php _e( 'Security', 'wpwebapp' ); ?></h3>
 89 | 
 90 | 		<table class="form-table">
 91 | 
 92 | 			<tr>
 93 | 				<th><?php _e( 'Force Password Reset', 'wpwebapp' ); ?></th>
 94 | 
 95 | 				<td>
 96 | 					<?php if ( empty( $options['password_reset_redirect'] ) ) : ?>
 97 | 						<div class="error notice">
 98 | 							<p>You have not specified a <a href="options-general.php?page=wpwebapp_plugin_options">forced password reset redirect URL</a> yet. The "Force Password Reset" feature will not work unless you do.</p>
 99 | 						</div>
100 | 					<?php endif; ?>
101 | 					<label>
102 | 						<input type="checkbox" name="wpwebapp_force_password_reset" id="wpwebapp_force_password_reset" value="on" <?php checked( $force_reset, 'on' ); ?>>
103 | 						<?php _e( 'Force user to reset their password at next login', 'photoboard_user_groups' ); ?>
104 | 					</label>
105 | 				</td>
106 | 			</tr>
107 | 
108 | 		</table>
109 | 
110 | 		<?php
111 | 	}
112 | 	add_action( 'show_user_profile', 'wpwebapp_security_add_user_fields' );
113 | 	add_action( 'edit_user_profile', 'wpwebapp_security_add_user_fields' );
114 | 	add_action( 'user_new_form', 'wpwebapp_security_add_user_fields' );
115 | 
116 | 
117 | 
118 | 	/**
119 | 	 * Save custom user field
120 | 	 * @param  integer $user_id The user ID
121 | 	 */
122 | 	function wpwebapp_security_save_user_fields( $user_id ) {
123 | 
124 | 		// Security check
125 | 		if ( !current_user_can( 'edit_user', $user_id ) ) return false;
126 | 
127 | 		// Update force reset status
128 | 		if ( isset( $_POST['wpwebapp_force_password_reset'] ) )  {
129 | 			update_user_meta( $user_id, 'wpwebapp_force_password_reset', 'on' );
130 | 		} else {
131 | 			update_user_meta( $user_id, 'wpwebapp_force_password_reset', 'off' );
132 | 		}
133 | 
134 | 	}
135 | 	add_action( 'personal_options_update', 'wpwebapp_security_save_user_fields' );
136 | 	add_action( 'edit_user_profile_update', 'wpwebapp_security_save_user_fields' );
137 | 	add_action( 'user_register', 'wpwebapp_security_save_user_fields' );
138 | 
139 | 
140 | 	/**
141 | 	 * Force password reset when user logs in
142 | 	 */
143 | 	function wpwebapp_force_password_reset_on_login() {
144 | 
145 | 		// Don't run for logged-out users or admin
146 | 		if ( !is_user_logged_in() || current_user_can( 'edit_themes' ) ) return;
147 | 
148 | 		// Get user forced password reset status
149 | 		$current_user = wp_get_current_user();
150 | 		$force_reset = get_user_meta( $current_user->ID, 'wpwebapp_force_password_reset', true );
151 | 
152 | 		// Don't run if password reset isn't required
153 | 		if ( $force_reset !== 'on' ) return;
154 | 
155 | 		// Check that current page isn't the change password page
156 | 		$options = wpwebapp_get_theme_options_redirects();
157 | 		if ( empty( $options['password_reset_redirect'] ) || is_page( $options['password_reset_redirect'] ) ) return;
158 | 
159 | 		// Redirect to change password
160 | 		wp_safe_redirect( wpwebapp_get_redirect_url( $options['password_reset_redirect'], $options['add_redirect_referrer'] ), 302 );
161 | 		exit;
162 | 
163 | 	}
164 | 	add_action( 'wp', 'wpwebapp_force_password_reset_on_login' );


--------------------------------------------------------------------------------
/options/user-access.php:
--------------------------------------------------------------------------------
  1 | <?php
  2 | 
  3 | /**
  4 |  * Control user access
  5 |  */
  6 | 
  7 | 
  8 | 	/**
  9 | 	 * Create a metabox
 10 | 	 */
 11 | 	function wpwebapp_user_access_metabox() {
 12 | 		add_meta_box( 'wpwebapp_user_access_metabox_content', __( 'User Access', 'wpwebapp' ), 'wpwebapp_user_access_metabox_content', 'page', 'side', 'default');
 13 | 	}
 14 | 	add_action('add_meta_boxes', 'wpwebapp_user_access_metabox');
 15 | 
 16 | 
 17 | 	/**
 18 | 	 * Add content to the metabox
 19 | 	 */
 20 | 	function wpwebapp_user_access_metabox_content() {
 21 | 
 22 | 		global $post;
 23 | 
 24 | 		// Get checkedbox value
 25 | 		$user_access = get_post_meta( $post->ID, 'wpwebapp_user_access', true );
 26 | 
 27 | 		?>
 28 | 
 29 | 			<fieldset id="wpwebapp_user_access_metabox">
 30 | 				<div>
 31 | 					<label>
 32 | 						<input type="radio" name="wpwebapp_user_access" value="everyone" <?php checked( $user_access, '' ); checked( $user_access, 'everyone' ); ?>>
 33 | 						Everyone
 34 | 					</label>
 35 | 					<br>
 36 | 					<label>
 37 | 						<input type="radio" name="wpwebapp_user_access" value="loggedin" <?php checked( $user_access, 'loggedin' ); ?>>
 38 | 						Only Logged In Users
 39 | 					</label>
 40 | 					<br>
 41 | 					<label>
 42 | 						<input type="radio" name="wpwebapp_user_access" value="loggedout" <?php checked( $user_access, 'loggedout' ); ?>>
 43 | 						Only Logged Out Users
 44 | 					</label>
 45 | 				</div>
 46 | 			</fieldset>
 47 | 
 48 | 		<?php
 49 | 
 50 | 		// Security field
 51 | 		wp_nonce_field( 'wpwebapp_user_access_nonce', 'wpwebapp_user_access_process' );
 52 | 
 53 | 	}
 54 | 
 55 | 
 56 | 	/**
 57 | 	 * Save checkbox data
 58 | 	 * @param  number $post_id The Post ID
 59 | 	 * @param  array  $post    Post data
 60 | 	 */
 61 | 	function wpwebapp_user_access_metabox_process( $post_id, $post ) {
 62 | 
 63 | 		// Verify data came from edit screen
 64 | 		if ( !isset( $_POST['wpwebapp_user_access_process'] ) || !wp_verify_nonce( $_POST['wpwebapp_user_access_process'], 'wpwebapp_user_access_nonce' ) ) {
 65 | 			return $post->ID;
 66 | 		}
 67 | 
 68 | 		// Verify user has permission to edit post
 69 | 		if ( !current_user_can( 'edit_post', $post->ID )) {
 70 | 			return $post->ID;
 71 | 		}
 72 | 
 73 | 		// Verify field exists
 74 | 		if ( empty( $_POST['wpwebapp_user_access'] ) ) return;
 75 | 
 76 | 		// Update metadata
 77 | 		update_post_meta( $post->ID, 'wpwebapp_user_access', $_POST['wpwebapp_user_access'] );
 78 | 
 79 | 	}
 80 | 	add_action('save_post', 'wpwebapp_user_access_metabox_process', 1, 2);
 81 | 
 82 | 
 83 | 	/**
 84 | 	 * Save the data with revisions
 85 | 	 * @param  number $post_id The post ID
 86 | 	 */
 87 | 	function wpwebapp_user_access_metabox_save_revisions( $post_id ) {
 88 | 
 89 | 		// Check if it's a revision
 90 | 		$parent_id = wp_is_post_revision( $post_id );
 91 | 
 92 | 		// If not a revision, bail
 93 | 		if ( !$parent_id ) return;
 94 | 
 95 | 		// Get the data
 96 | 		$parent = get_post( $parent_id );
 97 | 		$user_access = get_post_meta( $parent->ID, 'wpwebapp_user_access', true );
 98 | 
 99 | 		// If data exists, add to revision
100 | 		if ( empty( $user_access ) ) return;
101 | 		add_metadata( 'post', $post_id, 'wpwebapp_user_access', $user_access );
102 | 
103 | 	}
104 | 	add_action( 'save_post', 'wpwebapp_user_access_metabox_save_revisions' );
105 | 
106 | 
107 | 	/**
108 | 	 * Restore the data with revisions
109 | 	 * @param  number $post_id     The post ID
110 | 	 * @param  number $revision_id The revision ID
111 | 	 */
112 | 	function wpwebapp_user_access_metabox_restore_revisions( $post_id, $revision_id ) {
113 | 
114 | 		// Variables
115 | 		$post = get_post( $post_id );
116 | 		$revision = get_post( $revision_id );
117 | 		$user_access = get_metadata( 'post', $revision->ID, 'wpwebapp_user_access', true );
118 | 
119 | 		if ( !empty( $width ) ) {
120 | 			update_post_meta( $post_id, 'wpwebapp_user_access', $user_access );
121 | 		} else {
122 | 			delete_post_meta( $post_id, 'wpwebapp_user_access' );
123 | 		}
124 | 
125 | 	}
126 | 	add_action( 'wp_restore_post_revision', 'wpwebapp_user_access_metabox_restore_revisions', 10, 2 );
127 | 
128 | 
129 | 	/**
130 | 	 * Get the data to display the revisions page
131 | 	 * @param  array $fields The revision fields
132 | 	 */
133 | 	function wpwebapp_user_access_metabox_get_revisions_field( $fields ) {
134 | 		$fields['wpwebapp_user_access'] = 'User Access';
135 | 		return $fields;
136 | 	}
137 | 	add_filter( '_wp_post_revision_fields', 'wpwebapp_user_access_metabox_get_revisions_field' );
138 | 
139 | 
140 | 	/**
141 | 	 * Display the data on the revisions page
142 | 	 */
143 | 	function wpwebapp_user_access_metabox_set_revisions_field( $value, $field ) {
144 | 		global $revision;
145 | 		return get_metadata( 'post', $revision->ID, $field, true );
146 | 	}
147 | 	add_filter( '_wp_post_revision_field_my_meta', 'wpwebapp_user_access_metabox_set_revisions_field', 10, 2 );
148 | 
149 | 
150 | 	/**
151 | 	 * Redirect users that don't have access to the page
152 | 	 */
153 | 	function wpwebapp_control_access() {
154 | 
155 | 		// Don't run on admin page
156 | 		if ( is_admin() ) return;
157 | 
158 | 		// Variables
159 | 		global $post;
160 | 		if ( empty( $post ) ) return;
161 | 		$options = wpwebapp_get_theme_options_redirects();
162 | 		$user_access = get_post_meta( $post->ID, 'wpwebapp_user_access', true );
163 | 
164 | 		// Bail if no access restrictions
165 | 		if ( empty( $user_access ) || $user_access === 'everyone' ) return;
166 | 
167 | 		// If user is logged out and page is for logged in users only
168 | 		if ( $user_access === 'loggedin' && !is_user_logged_in() ) {
169 | 			wp_safe_redirect( wpwebapp_get_redirect_url( $options['logout_redirect'], $options['add_redirect_referrer'] ), 302 );
170 | 			exit;
171 | 		}
172 | 
173 | 		// If user is logged in and page is for logged out users only
174 | 		if ( $user_access === 'loggedout' && is_user_logged_in() ) {
175 | 			wp_safe_redirect( wpwebapp_get_redirect_url( $options['login_redirect'] ), 302 );
176 | 			exit;
177 | 		}
178 | 
179 | 	}
180 | 	add_action( 'wp', 'wpwebapp_control_access' );
181 | 
182 | 
183 | 	/**
184 | 	 * Redirect users away from wp-login.php after logout
185 | 	 */
186 | 	function wpwebapp_logout_redirect() {
187 | 		$options = wpwebapp_get_theme_options_redirects();
188 | 		wp_redirect( wpwebapp_get_redirect_url( $options['logout_redirect'] ) );
189 | 		exit();
190 | 	}
191 | 	add_action( 'wp_logout', 'wpwebapp_logout_redirect' );
192 | 
193 | 
194 | 	/**
195 | 	 * Disable the admin bar for all users
196 | 	 */
197 | 	function wpwebapp_disable_admin_bar() {
198 | 		if ( current_user_can( 'edit_themes' ) ) return;
199 | 		$options = wpwebapp_get_theme_options_security();
200 | 		if ( $options['show_admin_bar'] === 'on' ) return;
201 | 		show_admin_bar( false );
202 | 	}
203 | 	add_filter( 'init' , 'wpwebapp_disable_admin_bar');


--------------------------------------------------------------------------------
/shortcodes/delete-account.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | 
 3 | /**
 4 |  * Delete user account
 5 |  */
 6 | 
 7 | 
 8 | 	// Delete account form shortcode
 9 | 	function wpwebapp_delete_account_form() {
10 | 
11 | 		// Prevent this content from caching
12 | 		if ( !defined ( 'DONOTCACHEPAGE' ) || !DONOTCACHEPAGE ) {
13 | 			define('DONOTCACHEPAGE', TRUE);
14 | 		}
15 | 
16 | 		if ( is_user_logged_in() ) {
17 | 
18 | 			// Variables
19 | 			$options = wpwebapp_get_theme_options_delete_account();
20 | 			$error = wpwebapp_get_session( 'wpwebapp_delete_account_error', true );
21 | 
22 | 			$form =
23 | 				( empty( $error ) ? '' : '<div class="wpwebapp-alert wpwebapp-alert-error">' . stripslashes( $error ) . '</div>' ) .
24 | 				'<form class="wpwebapp-form" id="wpwebapp_delete_account" name="wpwebapp_delete_account" action="" method="post">' .
25 | 					'<label class="wpwebapp-form-label" for="wpwebapp_delete_account_password">' . stripslashes( $options['delete_account_password_label'] ) . '</label>' .
26 | 					'<input type="password" class="wpwebapp-form-input wpwebapp-form-password" id="wpwebapp_delete_account_password" name="wpwebapp_delete_account_password"  value="" required>' .
27 | 					'<button class="wpwebapp-form-button wpwebapp-form-button-delete-account">' . $options['delete_account_submit_text'] . '</button>' .
28 | 					wp_nonce_field( 'wpwebapp_delete_account_nonce', 'wpwebapp_delete_account_process', true, false ) .
29 | 				'</form>';
30 | 
31 | 		} else {
32 | 			$form = '<p>' . __( 'You need to be logged in to delete your account.', 'wpwebapp' ) . '</p>';
33 | 		}
34 | 
35 | 		return $form;
36 | 
37 | 	}
38 | 	add_shortcode( 'wpwa_delete_account', 'wpwebapp_delete_account_form' );
39 | 
40 | 	// Process account deletion
41 | 	function wpwebapp_process_delete_account() {
42 | 
43 | 		// Verify data came from form
44 | 		if ( !isset( $_POST['wpwebapp_delete_account_process'] ) || !wp_verify_nonce( $_POST['wpwebapp_delete_account_process'], 'wpwebapp_delete_account_nonce' ) ) return;
45 | 
46 | 		// Require user.php
47 | 		require_once( ABSPATH . 'wp-admin/includes/user.php' );
48 | 
49 | 		// Variables
50 | 		$current_user = wp_get_current_user();
51 | 		$options = wpwebapp_get_theme_options_delete_account();
52 | 		$referer = esc_url_raw( wpwebapp_get_url() );
53 | 		$redirect = wpwebapp_get_redirect_url( $options['delete_account_redirect'] );
54 | 
55 | 		// Verify that password matches
56 | 		if ( !isset( $_POST['wpwebapp_delete_account_password'] ) || !wp_check_password( $_POST['wpwebapp_delete_account_password'], $current_user->user_pass, $current_user->ID ) ) {
57 | 			wpwebapp_set_session( 'wpwebapp_delete_account_error', $options['delete_account_password_error'] );
58 | 			wp_safe_redirect( $referer, 302 );
59 | 			exit;
60 | 		}
61 | 
62 | 		// Verify that user is NOT an admin
63 | 		if ( current_user_can( 'edit_theme_options' ) ) {
64 | 			wpwebapp_set_session( 'wpwebapp_delete_account_error', __( 'This account cannot be deleted.', 'wpwebapp' ) );
65 | 			wp_safe_redirect( $referer, 302 );
66 | 			exit;
67 | 		}
68 | 
69 | 		// Delete current user's account
70 | 		wp_delete_user( $current_user->ID );
71 | 
72 | 		// Run custom WordPress action
73 | 		do_action( 'wpwebapp_after_delete_user',  $current_user->user_login, $current_user->user_email );
74 | 
75 | 		// Redirect
76 | 		wp_safe_redirect( $redirect, 302 );
77 | 		exit;
78 | 
79 | 	}
80 | 	add_action( 'init', 'wpwebapp_process_delete_account' );


--------------------------------------------------------------------------------
/shortcodes/email-change.php:
--------------------------------------------------------------------------------
  1 | <?php
  2 | 
  3 | /**
  4 |  * Change email
  5 |  */
  6 | 
  7 | 
  8 | 	// Change email form shortcode
  9 | 	function wpwebapp_email_change_form() {
 10 | 
 11 | 		// Prevent this content from caching
 12 | 		if ( !defined ( 'DONOTCACHEPAGE' ) || !DONOTCACHEPAGE ) {
 13 | 			define('DONOTCACHEPAGE', TRUE);
 14 | 		}
 15 | 
 16 | 		if ( is_user_logged_in() ) {
 17 | 
 18 | 			// Variables
 19 | 			$current_user = wp_get_current_user();
 20 | 			$options = wpwebapp_get_theme_options_change_email();
 21 | 			$error = wpwebapp_get_session( 'wpwebapp_email_change_error', true );
 22 | 			$success = wpwebapp_get_session( 'wpwebapp_email_change_success', true );
 23 | 
 24 | 			$form =
 25 | 				( empty( $error ) ? '' : '<div class="wpwebapp-alert wpwebapp-alert-error">' . stripslashes( $error ) . '</div>' ) .
 26 | 				( empty( $success ) ? '' : '<div class="wpwebapp-alert wpwebapp-alert-success">' . stripslashes( $success ) . '</div>' ) .
 27 | 
 28 | 				'<form class="wpwebapp-form" id="wpwebapp_email_change" name="wpwebapp_email_change" action="" method="post">' .
 29 | 
 30 | 					'<label class="wpwebapp-form-label" for="wpwebapp_email_change_current_email">' . stripslashes( $options['email_change_current_email_label'] ) . '</label>' .
 31 | 					'<input type="email" class="wpwebapp-form-input" id="wpwebapp_email_change_current_email" name="wpwebapp_email_change_current_email"  value="' . esc_attr( $current_user->user_email ) . '" required>' .
 32 | 
 33 | 					'<label class="wpwebapp-form-label" for="wpwebapp_email_change_password">' . stripslashes( $options['email_change_password_label'] ) . '</label>' .
 34 | 					'<input type="password" class="wpwebapp-form-input wpwebapp-form-password" id="wpwebapp_email_change_password" name="wpwebapp_email_change_password"  value="" required>' .
 35 | 
 36 | 					'<button class="wpwebapp-form-button wpwebapp-form-button-email-change">' . $options['email_change_submit_text'] . '</button>' .
 37 | 
 38 | 					wp_nonce_field( 'wpwebapp_email_change_nonce', 'wpwebapp_email_change_process', true, false ) .
 39 | 
 40 | 				'</form>';
 41 | 
 42 | 		} else {
 43 | 			$form = '<p>' . __( 'You need to be logged in to change your email address.', 'wpwebapp' ) . '</p>';
 44 | 		}
 45 | 
 46 | 		return $form;
 47 | 
 48 | 	}
 49 | 	add_shortcode( 'wpwa_change_email', 'wpwebapp_email_change_form' );
 50 | 
 51 | 	// Process email change
 52 | 	function wpwebapp_process_email_change() {
 53 | 
 54 | 		// Verify data came from form
 55 | 		if ( !isset( $_POST['wpwebapp_email_change_process'] ) || !wp_verify_nonce( $_POST['wpwebapp_email_change_process'], 'wpwebapp_email_change_nonce' ) ) return;
 56 | 
 57 | 		// Variables
 58 | 		$current_user = wp_get_current_user();
 59 | 		$options = wpwebapp_get_theme_options_change_email();
 60 | 		$options_signup = wpwebapp_get_theme_options_signup();
 61 | 		$referer = esc_url_raw( wpwebapp_get_url() );
 62 | 
 63 | 		// Check that email is supplied
 64 | 		if ( empty( $_POST['wpwebapp_email_change_current_email'] ) ) {
 65 | 			wpwebapp_set_session( 'wpwebapp_email_change_error', $options['email_change_email_field_empty_error'] );
 66 | 			wp_safe_redirect( $referer, 302 );
 67 | 			exit;
 68 | 		}
 69 | 
 70 | 		// Check that password is provided
 71 | 		if ( empty( $_POST['wpwebapp_email_change_password'] ) ) {
 72 | 			wpwebapp_set_session( 'wpwebapp_email_change_error', $options['email_change_password_field_empty_error'] );
 73 | 			wp_safe_redirect( $referer, 302 );
 74 | 			exit;
 75 | 		}
 76 | 
 77 | 		// Validate and authenticate password
 78 | 		if ( !wp_check_password( $_POST['wpwebapp_email_change_password'], $current_user->user_pass, $current_user->ID ) ) {
 79 | 			wpwebapp_set_session( 'wpwebapp_email_change_error', $options['email_change_password_error'] );
 80 | 			wp_safe_redirect( $referer, 302 );
 81 | 			exit;
 82 | 		}
 83 | 
 84 | 		// Make sure email isn't already taken by another user
 85 | 		if ( email_exists( $_POST['wpwebapp_email_change_current_email'] ) ) {
 86 | 			wpwebapp_set_session( 'wpwebapp_email_change_error', $options_signup['signup_username_exists_error'] );
 87 | 			wp_safe_redirect( $referer, 302 );
 88 | 			exit;
 89 | 		}
 90 | 
 91 | 		// If no errors exist, change the email address
 92 | 		wp_update_user( array( 'ID' => $current_user->ID, 'user_email' => $_POST['wpwebapp_email_change_current_email'] ) );
 93 | 		wpwebapp_set_session( 'wpwebapp_email_change_success', $options['email_change_success'] );
 94 | 
 95 | 		// Run custom WordPress action
 96 | 		do_action( 'wpwebapp_after_email_change', $current_user->ID, $current_user->user_email );
 97 | 
 98 | 		// Redirect
 99 | 		wp_safe_redirect( $referer, 302 );
100 | 		exit;
101 | 
102 | 	}
103 | 	add_action( 'init', 'wpwebapp_process_email_change' );


--------------------------------------------------------------------------------
/shortcodes/login.php:
--------------------------------------------------------------------------------
  1 | <?php
  2 | 
  3 | /**
  4 |  * Login
  5 |  */
  6 | 
  7 | 
  8 | 	// Login form shortcode
  9 | 	function wpwebapp_login_form() {
 10 | 
 11 | 		// Prevent this content from caching
 12 | 		if ( !defined ( 'DONOTCACHEPAGE' ) || !DONOTCACHEPAGE ) {
 13 | 			define('DONOTCACHEPAGE', TRUE);
 14 | 		}
 15 | 
 16 | 		if ( is_user_logged_in() ) {
 17 | 			$form = '<p>' . __( 'You\'re already logged in.', 'wpwebapp' ) . '</p>';
 18 | 		} else {
 19 | 
 20 | 			// Variables
 21 | 			$current_user = wp_get_current_user();
 22 | 			$options = wpwebapp_get_theme_options_login();
 23 | 			$error = wpwebapp_get_session( 'wpwebapp_login_error', true );
 24 | 			$credentials = wpwebapp_get_session( 'wpwebapp_login_credentials', true );
 25 | 
 26 | 			$form =
 27 | 				( empty( $error ) ? '' : '<div class="wpwebapp-alert wpwebapp-alert-error">' . stripslashes( $error ) . '</div>' ) .
 28 | 
 29 | 				'<form class="wpwebapp-form" id="wpwebapp_login" name="wpwebapp_login" action="" method="post">' .
 30 | 
 31 | 					'<label class="wpwebapp-form-label" for="wpwebapp_login_username">' . stripslashes( $options['login_username_label'] ) . '</label>' .
 32 | 					'<input type="text" class="wpwebapp-form-input" id="wpwebapp_login_username" name="wpwebapp_login_username"  value="' . esc_attr( $credentials ) . '" required>' .
 33 | 
 34 | 					'<label class="wpwebapp-form-label" for="wpwebapp_login_password">' . stripslashes( $options['login_password_label'] ) . '</label>' .
 35 | 					'<input type="password" class="wpwebapp-form-input wpwebapp-form-password" id="wpwebapp_login_password" name="wpwebapp_login_password"  value="" required>' .
 36 | 
 37 | 					'<label class="wpwebapp-form-label-checkbox"><input type="checkbox" class="wpwebapp-form-checkbox" id="wpwebapp_login_rememberme" name="wpwebapp_login_rememberme" value=""> ' . stripslashes( $options['login_rememberme_label'] ) . '</label>' .
 38 | 
 39 | 					'<button class="wpwebapp-form-button wpwebapp-form-button-login">' . $options['login_submit_text'] . '</button>' .
 40 | 
 41 | 					wp_nonce_field( 'wpwebapp_login_nonce', 'wpwebapp_login_process', true, false ) .
 42 | 
 43 | 				'</form>';
 44 | 
 45 | 		}
 46 | 
 47 | 		return $form;
 48 | 
 49 | 	}
 50 | 	add_shortcode( 'wpwa_login', 'wpwebapp_login_form' );
 51 | 
 52 | 
 53 | 	// Process login
 54 | 	function wpwebapp_process_login() {
 55 | 
 56 | 		// Verify data came from form
 57 | 		if ( !isset( $_POST['wpwebapp_login_process'] ) || !wp_verify_nonce( $_POST['wpwebapp_login_process'], 'wpwebapp_login_nonce' ) ) return;
 58 | 
 59 | 		// Variables
 60 | 		$options = wpwebapp_get_theme_options_login();
 61 | 		$redirects = wpwebapp_get_theme_options_redirects();
 62 | 		$referer = esc_url_raw( wpwebapp_get_url() );
 63 | 		$username = isset( $_POST['wpwebapp_login_username'] ) ? $_POST['wpwebapp_login_username'] : '';
 64 | 		$rememberme = isset( $_POST['wpwebapp_login_rememberme'] ) ? true : false;
 65 | 
 66 | 		// Check that username is supplied
 67 | 		if ( empty( $_POST['wpwebapp_login_username'] ) ) {
 68 | 			wpwebapp_set_session( 'wpwebapp_login_error', $options['login_username_field_empty_error'] );
 69 | 			wp_safe_redirect( $referer, 302 );
 70 | 			exit;
 71 | 		}
 72 | 
 73 | 		// Check that password is provided
 74 | 		if ( empty( $_POST['wpwebapp_login_password'] ) ) {
 75 | 			wpwebapp_set_session( 'wpwebapp_login_error', $options['login_password_field_empty_error'] );
 76 | 			wpwebapp_set_session( 'wpwebapp_login_credentials', $username );
 77 | 			wp_safe_redirect( $referer, 302 );
 78 | 			exit;
 79 | 		}
 80 | 
 81 | 
 82 | 		// If login is an email, get username
 83 | 		if ( is_email( $_POST['wpwebapp_login_username'] ) ) {
 84 | 			$user = get_user_by( 'email', $_POST['wpwebapp_login_username'] );
 85 | 			$user = get_userdata( $user->ID );
 86 | 			$_POST['wpwebapp_login_username'] = $user->user_login;
 87 | 		}
 88 | 
 89 | 		// Authenticate User
 90 | 		$credentials = array(
 91 | 			'user_login' => $_POST['wpwebapp_login_username'],
 92 | 			'user_password' => $_POST['wpwebapp_login_password'],
 93 | 			'remember' => $rememberme,
 94 | 		);
 95 | 		$login = wp_signon( $credentials );
 96 | 
 97 | 		// If errors
 98 | 		if ( is_wp_error( $login ) ) {
 99 | 			wpwebapp_set_session( 'wpwebapp_login_error', $options['login_failed_error'] );
100 | 			wpwebapp_set_session( 'wpwebapp_login_credentials', $username );
101 | 			wp_safe_redirect( $referer, 302 );
102 | 			exit;
103 | 		}
104 | 
105 | 		// Run custom WordPress action
106 | 		do_action( 'wpwebapp_after_login', $_POST['wpwebapp_login_username'] );
107 | 
108 | 		// Redirect after login
109 | 		$redirect = isset( $_GET['referrer'] ) && !empty( $_GET['referrer'] ) ? esc_url_raw( $_GET['referrer'] ) : wpwebapp_get_redirect_url( $redirects['login_redirect'] );
110 | 		wp_safe_redirect( $redirect, 302 );
111 | 		exit;
112 | 
113 | 	}
114 | 	add_action( 'init', 'wpwebapp_process_login' );


--------------------------------------------------------------------------------
/shortcodes/navigation.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | 
 3 | /**
 4 |  * Navigation menu and link shortcodes
 5 |  */
 6 | 
 7 | 
 8 | 	// Create logout link shortcode
 9 | 	function wpwebapp_get_logout_url() {
10 | 		$options = wpwebapp_get_theme_options_redirects();
11 | 		$redirect = wpwebapp_get_redirect_url( $options['logout_redirect'] );
12 | 		return wp_logout_url( $redirect );
13 | 	}
14 | 	add_shortcode( 'wpwa_logout', 'wpwebapp_get_logout_url' );
15 | 
16 | 	// Use the logout shortcode with `wp_nav_menu()`
17 | 	function wpwebapp_menu_logout_url( $menu ) {
18 | 		$logout = wpwebapp_get_logout_url();
19 | 		return str_replace( '[wpwa_logout]', preg_replace( '~^(?:f|ht)tps?://~i', '', $logout ), $menu );
20 | 
21 | 	}
22 | 	add_filter( 'wp_nav_menu', 'wpwebapp_menu_logout_url' );
23 | 
24 | 	// Create username shortcode
25 | 	function wpwebapp_get_username() {
26 | 		$current_user = wp_get_current_user();
27 | 		return $current_user->user_login;
28 | 	}
29 | 	add_shortcode( 'wpwa_username', 'wpwebapp_get_username' );
30 | 
31 | 
32 | 	// Use the username shortcode with `wp_nav_menu()`
33 | 	function wpwebapp_menu_username( $menu ) {
34 | 		$username = wpwebapp_get_username();
35 | 		return str_replace( '[wpwa_username]', $username, $menu );
36 | 	}
37 | 	add_filter('wp_nav_menu', 'wpwebapp_menu_username');
38 | 
39 | 
40 | 	// Create referrer URL shortcode
41 | 	function wpwebapp_get_referrer() {
42 | 		return 'referrer=' . esc_url_raw( wpwebapp_get_url() );
43 | 	}
44 | 	add_shortcode( 'wpwa_referrer', 'wpwebapp_get_referrer' );
45 | 
46 | 
47 | 	// Use the referrer shortcode with `wp_nav_menu()`
48 | 	function wpwebapp_menu_referrer( $menu ) {
49 | 		$referrer = wpwebapp_get_referrer();
50 | 		return str_replace( 'wpwa_referrer', $referrer, $menu );
51 | 	}
52 | 	add_filter('wp_nav_menu', 'wpwebapp_menu_referrer');


--------------------------------------------------------------------------------
/shortcodes/password-change.php:
--------------------------------------------------------------------------------
  1 | <?php
  2 | 
  3 | /**
  4 |  * Change password
  5 |  */
  6 | 
  7 | 
  8 | 	// Password change form shortcode
  9 | 	function wpwebapp_password_change_form() {
 10 | 
 11 | 		// Prevent this content from caching
 12 | 		if ( !defined ( 'DONOTCACHEPAGE' ) || !DONOTCACHEPAGE ) {
 13 | 			define('DONOTCACHEPAGE', TRUE);
 14 | 		}
 15 | 
 16 | 		if ( is_user_logged_in() ) {
 17 | 
 18 | 			// Variables
 19 | 			$options = wpwebapp_get_theme_options_change_password();
 20 | 			$error = wpwebapp_get_session( 'wpwebapp_password_change_error', true );
 21 | 			$success = wpwebapp_get_session( 'wpwebapp_password_change_success', true );
 22 | 			$pw_requirements = $options['password_change_show_requirements'] === 'on' ? '<div class="wpwebapp-form-label-description">' . wpwebapp_password_requirements_message() . '</div>' : null;
 23 | 
 24 | 			// Check if forced reset is required
 25 | 			$current_user = wp_get_current_user();
 26 | 			$force_reset = get_user_meta( $current_user->ID, 'wpwebapp_force_password_reset', true );
 27 | 
 28 | 			$form =
 29 | 				( $force_reset === 'on' ? '<div class="wpwebapp-alert wpwebapp-alert-error">' . stripslashes( $options['password_change_forced_reset_error'] ) . '</div>' : '' ) .
 30 | 				( empty( $error ) ? '' : '<div class="wpwebapp-alert wpwebapp-alert-error">' . stripslashes( $error ) . '</div>' ) .
 31 | 				( empty( $success ) ? '' : '<div class="wpwebapp-alert wpwebapp-alert-success">' . stripslashes( $success ) . '</div>' ) .
 32 | 
 33 | 				'<form class="wpwebapp-form" id="wpwebapp_password_change" name="wpwebapp_password_change" action="" method="post">' .
 34 | 
 35 | 					'<label class="wpwebapp-form-label" for="wpwebapp_password_change_current_password">' . stripslashes( $options['password_change_current_password_label'] ) . '</label>' .
 36 | 					'<input type="password" class="wpwebapp-form-input wpwebapp-form-password" id="wpwebapp_password_change_current_password" name="wpwebapp_password_change_current_password"  value="" required>' .
 37 | 
 38 | 					'<label class="wpwebapp-form-label" for="wpwebapp_password_change_new_password">' . stripslashes( $options['password_change_new_password_label'] ) . '</label>' .
 39 | 					'<input type="password" class="wpwebapp-form-input wpwebapp-form-password ' . ( empty( $pw_requirements ) ? '' : 'wpwebapp-form-input-has-description' ) . '" id="wpwebapp_password_change_new_password" name="wpwebapp_password_change_new_password"  value="" required>' .
 40 | 					$pw_requirements .
 41 | 
 42 | 					'<button class="wpwebapp-form-button wpwebapp-form-button-password-change">' . $options['password_change_submit_text'] . '</button>' .
 43 | 
 44 | 					wp_nonce_field( 'wpwebapp_password_change_nonce', 'wpwebapp_password_change_process', true, false ) .
 45 | 
 46 | 				'</form>';
 47 | 
 48 | 		} else {
 49 | 			$form = '<p>' . __( 'You need to be logged in to change your password.', 'wpwebapp' ) . '</p>';
 50 | 		}
 51 | 
 52 | 		return $form;
 53 | 
 54 | 	}
 55 | 	add_shortcode( 'wpwa_change_password', 'wpwebapp_password_change_form' );
 56 | 
 57 | 
 58 | 	// Send password change email to the admin
 59 | 	function wpwebapp_send_password_change_email_to_admin( $login, $email ) {
 60 | 
 61 | 		// Check if admin wants to receive emails
 62 | 		$options = wpwebapp_get_theme_options_change_password();
 63 | 		if ( $options['password_change_receive_notifications'] === 'off' ) return;
 64 | 
 65 | 		// Variables
 66 | 		$site_name = get_bloginfo('name');
 67 | 		$domain = wpwebapp_get_site_domain();
 68 | 		$headers = 'From: ' . $site_name . ' <donotreply@' . $domain . '>' . "\r\n";
 69 | 		$subject = $site_name . ': User Password Change';
 70 | 		$message  = str_replace( '[email]', sanitize_email( $email ), str_replace( '[username]', esc_attr( $login ), stripslashes( $options['password_change_notification_to_admin'] ) ) );
 71 | 
 72 | 		// Send email
 73 | 		@wp_mail( get_option('admin_email'), $subject, $message, $headers );
 74 | 
 75 | 	}
 76 | 
 77 | 
 78 | 	// Send password change email to the user
 79 | 	function wpwebapp_send_password_change_email_to_user( $login, $email ) {
 80 | 
 81 | 		// Check if user should receive email
 82 | 		$options = wpwebapp_get_theme_options_change_password();
 83 | 		if ( $options['password_change_send_notifications'] === 'off' ) return;
 84 | 
 85 | 		// Variables
 86 | 		$site_name = get_bloginfo('name');
 87 | 		$domain = wpwebapp_get_site_domain();
 88 | 		$headers = 'From: ' . $site_name . ' <donotreply@' . $domain . '>' . "\r\n";
 89 | 		$subject = $site_name . ': Your Password Was Changed';
 90 | 		$message  = str_replace( '[username]', esc_attr( $login ), stripslashes( $options['password_change_notification_to_user'] ) );
 91 | 
 92 | 		// Send email
 93 | 		@wp_mail( sanitize_email( $email ), $subject, $message, $headers );
 94 | 
 95 | 	}
 96 | 
 97 | 
 98 | 	// Process password change
 99 | 	function wpwebapp_process_password_change() {
100 | 
101 | 		// Verify data came from form
102 | 		if ( !isset( $_POST['wpwebapp_password_change_process'] ) || !wp_verify_nonce( $_POST['wpwebapp_password_change_process'], 'wpwebapp_password_change_nonce' ) ) return;
103 | 
104 | 		// Variables
105 | 		$current_user = wp_get_current_user();
106 | 		$force_reset = get_user_meta( $current_user->ID, 'wpwebapp_force_password_reset', true );
107 | 		$options = wpwebapp_get_theme_options_change_password();
108 | 		$referer = esc_url_raw( wpwebapp_get_url() );
109 | 
110 | 		// Check that current password is supplied
111 | 		if ( empty( $_POST['wpwebapp_password_change_current_password'] ) ) {
112 | 			wpwebapp_set_session( 'wpwebapp_password_change_error', $options['password_change_current_password_field_empty_error'] );
113 | 			wp_safe_redirect( $referer, 302 );
114 | 			exit;
115 | 		}
116 | 
117 | 		// Check that new password is provided
118 | 		if ( empty( $_POST['wpwebapp_password_change_new_password'] ) ) {
119 | 			wpwebapp_set_session( 'wpwebapp_password_change_error', $options['password_change_new_password_field_empty_error'] );
120 | 			wp_safe_redirect( $referer, 302 );
121 | 			exit;
122 | 		}
123 | 
124 | 		// Validate and authenticate current password
125 | 		if ( !wp_check_password( $_POST['wpwebapp_password_change_current_password'], $current_user->user_pass, $current_user->ID ) ) {
126 | 			wpwebapp_set_session( 'wpwebapp_password_change_error', $options['password_change_password_error'] );
127 | 			wp_safe_redirect( $referer, 302 );
128 | 			exit;
129 | 		}
130 | 
131 | 		// Enforce password requirements
132 | 		if ( !wpwebapp_test_password_requirements( $_POST['wpwebapp_password_change_new_password'] ) ) {
133 | 			$message = wpwebapp_password_requirements_message();
134 | 			wpwebapp_set_session( 'wpwebapp_password_change_error', $message );
135 | 			wp_safe_redirect( $referer, 302 );
136 | 			exit;
137 | 		}
138 | 
139 | 		// Enforce different password on forced password reset
140 | 		if ( $force_reset === 'on' && $_POST['wpwebapp_password_change_current_password'] === $_POST['wpwebapp_password_change_new_password'] ) {
141 | 			wp_safe_redirect( $referer, 302 );
142 | 			exit;
143 | 		}
144 | 
145 | 		// If no errors exist, change the password
146 | 		wp_update_user( array( 'ID' => $current_user->ID, 'user_pass' => $_POST['wpwebapp_password_change_new_password'] ) );
147 | 		wpwebapp_set_session( 'wpwebapp_password_change_success', $options['password_change_success'] );
148 | 
149 | 		// Send password change emails
150 | 		wpwebapp_send_password_change_email_to_admin( $current_user->user_login, $current_user->user_email );
151 | 		wpwebapp_send_password_change_email_to_user( $current_user->user_login, $current_user->user_email );
152 | 
153 | 		// Remove forced password reset if one was set
154 | 		update_user_meta( $current_user->ID, 'wpwebapp_force_password_reset', 'off' );
155 | 
156 | 		// Run custom WordPress action
157 | 		do_action( 'wpwebapp_after_password_change', $current_user->ID );
158 | 
159 | 		// Redirect
160 | 		$redirect = $force_reset === 'on' && isset( $_GET['referrer'] ) && !empty( $_GET['referrer'] ) ? esc_url_raw( $_GET['referrer'] ) : $referer;
161 | 		wp_safe_redirect( $redirect, 302 );
162 | 		exit;
163 | 
164 | 	}
165 | 	add_action( 'init', 'wpwebapp_process_password_change' );
166 | 
167 | 
168 | 	// Send password change emails when the password is changed from the dashboard or some other method
169 | 	function wpwebapp_send_dashboard_password_change_emails( $user ) {
170 | 
171 | 		// Don't run if password change happens via a shortcode form
172 | 		if ( isset( $_POST['wpwebapp_password_change_process'] ) || isset( $_POST['wpwebapp_password_reset_process'] ) ) return;
173 | 
174 | 		// Send password change emails
175 | 		wpwebapp_send_password_change_email_to_admin( $user->user_login, $user->user_email );
176 | 		wpwebapp_send_password_change_email_to_user( $user->user_login, $user->user_email );
177 | 
178 | 	}
179 | 	add_action( 'after_password_reset', 'wpwebapp_send_dashboard_password_change_emails' );
180 | 
181 | 
182 | 	// Disable WordPress notifications for password changes
183 | 	if ( !function_exists( 'wp_password_change_notification' ) ) {
184 | 	    function wp_password_change_notification() {}
185 | 	}
186 | 	add_filter( 'send_password_change_email', '__return_false');


--------------------------------------------------------------------------------
/shortcodes/password-reset.php:
--------------------------------------------------------------------------------
  1 | <?php
  2 | 
  3 | /**
  4 |  * Reset Lost Password
  5 |  */
  6 | 
  7 | 
  8 | 	// Forgot password form
  9 | 	function wpwebapp_password_forgot_form() {
 10 | 
 11 | 		// Prevent this content from caching
 12 | 		if ( !defined ( 'DONOTCACHEPAGE' ) || !DONOTCACHEPAGE ) {
 13 | 			define('DONOTCACHEPAGE', TRUE);
 14 | 		}
 15 | 
 16 | 		if ( is_user_logged_in() ) {
 17 | 			$form = '<p>' . __( 'You\'re already logged in.', 'wpwebapp' ) . '</p>';
 18 | 		} else {
 19 | 
 20 | 			// Variables
 21 | 			$options = wpwebapp_get_theme_options_forgot_password();
 22 | 			$error = wpwebapp_get_session( 'wpwebapp_password_reset_error', true );
 23 | 			$success = wpwebapp_get_session( 'wpwebapp_password_reset_success', true );
 24 | 			$credentials = wpwebapp_get_session( 'wpwebapp_password_reset_credentials', true );
 25 | 
 26 | 			// Check if there's an expired reset key
 27 | 			if ( isset( $_GET['reset_pw'] ) && empty( get_transient( 'wpwebapp_forgot_password_key_' . $_GET['reset_pw'] ) ) ) {
 28 | 				$error = $options['password_forgot_password_reset_key_expired_error'];
 29 | 			}
 30 | 
 31 | 			$form =
 32 | 				( empty( $error ) ? '' : '<div class="wpwebapp-alert wpwebapp-alert-error">' . stripslashes( $error ) . '</div>' ) .
 33 | 				( empty( $success ) ? '' : '<div class="wpwebapp-alert wpwebapp-alert-success">' . stripslashes( $success ) . '</div>' ) .
 34 | 
 35 | 				'<form class="wpwebapp-form" id="wpwebapp_password_forgot" name="wpwebapp_password_forgot" action="" method="post">' .
 36 | 
 37 | 					'<label class="wpwebapp-form-label" for="wpwebapp_password_forgot_username">' . stripslashes( $options['password_forgot_label'] ) . '</label>' .
 38 | 					'<input type="text" class="wpwebapp-form-input" id="wpwebapp_password_forgot_username" name="wpwebapp_password_forgot_username"  value="' . esc_attr( $credentials ) . '" required>' .
 39 | 
 40 | 					'<button class="wpwebapp-form-button wpwebapp-form-button-password-forgot">' . $options['password_forgot_submit_text'] . '</button>' .
 41 | 
 42 | 					wp_nonce_field( 'wpwebapp_password_forgot_nonce', 'wpwebapp_password_forgot_process', true, false ) .
 43 | 
 44 | 				'</form>';
 45 | 
 46 | 		}
 47 | 
 48 | 		return $form;
 49 | 
 50 | 	}
 51 | 
 52 | 	// Reset password form
 53 | 	function wpwebapp_password_reset_form() {
 54 | 
 55 | 		// Prevent this content from caching
 56 | 		if ( !defined ( 'DONOTCACHEPAGE' ) || !DONOTCACHEPAGE ) {
 57 | 			define('DONOTCACHEPAGE', TRUE);
 58 | 		}
 59 | 
 60 | 		if ( is_user_logged_in() ) {
 61 | 			$form = '<p>' . __( 'You\'re already logged in.', 'wpwebapp' ) . '</p>';
 62 | 		} else {
 63 | 
 64 | 			// Variables
 65 | 			$options = wpwebapp_get_theme_options_forgot_password();
 66 | 			$error = wpwebapp_get_session( 'wpwebapp_password_reset_error', true );
 67 | 			$pw_requirements = $options['password_reset_show_requirements'] === 'on' ? '<div class="wpwebapp-form-label-description">' . wpwebapp_password_requirements_message() . '</div>' : null;
 68 | 
 69 | 			$form =
 70 | 				( empty( $error ) ? '' : '<div class="wpwebapp-alert wpwebapp-alert-error">' . stripslashes( $error ) . '</div>' ) .
 71 | 
 72 | 				'<form class="wpwebapp-form" id="wpwebapp_password_reset" name="wpwebapp_password_reset" action="" method="post">' .
 73 | 
 74 | 					'<label class="wpwebapp-form-label" for="wpwebapp_password_reset_password">' . stripslashes( $options['password_reset_label'] ) . '</label>' .
 75 | 					'<input type="password" class="wpwebapp-form-input wpwebapp-form-password ' . ( empty( $pw_requirements ) ? '' : 'wpwebapp-form-input-has-description' ) . '" id="wpwebapp_password_reset_password" name="wpwebapp_password_reset_password" value="" required>' .
 76 | 					$pw_requirements .
 77 | 
 78 | 					'<input type="hidden" id="wpwebapp_password_reset_key" name="wpwebapp_password_reset_key"  value="' . $_GET['reset_pw'] . '">' .
 79 | 
 80 | 					'<button class="wpwebapp-form-button wpwebapp-form-button-reset-key">' . $options['password_reset_submit_text'] . '</button>' .
 81 | 
 82 | 					wp_nonce_field( 'wpwebapp_password_reset_nonce', 'wpwebapp_password_reset_process', true, false ) .
 83 | 
 84 | 				'</form>';
 85 | 
 86 | 		}
 87 | 
 88 | 		return $form;
 89 | 
 90 | 	}
 91 | 
 92 | 	// Display password forgot or reset form
 93 | 	function wpwebapp_display_password_reset_form() {
 94 | 
 95 | 		// If this is password reset URL and key is still valid, return reset form
 96 | 		if ( isset( $_GET['reset_pw'] ) && !empty( get_transient( 'wpwebapp_forgot_password_key_' . $_GET['reset_pw'] ) ) ) {
 97 | 			return wpwebapp_password_reset_form();
 98 | 		}
 99 | 
100 | 		// Otherwise, return the forgot password form
101 | 		return wpwebapp_password_forgot_form();
102 | 
103 | 	}
104 | 	add_shortcode( 'wpwa_forgot_password', 'wpwebapp_display_password_reset_form' );
105 | 
106 | 	// Send password reset email
107 | 	function wpwebapp_send_password_reset_email( $to, $login, $reset_url, $expires, $email ) {
108 | 
109 | 		// Variables
110 | 		$site_name = get_bloginfo('name');
111 | 		$domain = wpwebapp_get_site_domain();
112 | 		$headers = 'From: ' . $site_name . ' <donotreply@' . $domain . '>' . "\r\n";
113 | 		$subject = $site_name . ': Password Reset';
114 | 		$message = str_replace( '[expires]', $expires, str_replace( '[reset]', esc_url( $reset_url ), str_replace( '[username]', esc_attr( $login ), stripslashes( $email ) ) ) );
115 | 
116 | 		// Send email
117 | 		@wp_mail( sanitize_email( $to ), $subject, $message, $headers );
118 | 
119 | 	}
120 | 
121 | 	// Process password forgot
122 | 	function wpwebapp_process_password_forgot() {
123 | 
124 | 		// Verify data came from form
125 | 		if ( !isset( $_POST['wpwebapp_password_forgot_process'] ) || !wp_verify_nonce( $_POST['wpwebapp_password_forgot_process'], 'wpwebapp_password_forgot_nonce' ) ) return;
126 | 
127 | 		// Variables
128 | 		$options = wpwebapp_get_theme_options_forgot_password();
129 | 		$referer = esc_url_raw( wpwebapp_clean_url( 'reset_pw', wpwebapp_get_url() ) );
130 | 
131 | 		// Check that a username is supplied
132 | 		if ( empty( $_POST['wpwebapp_password_forgot_username'] ) ) {
133 | 			wpwebapp_set_session( 'wpwebapp_password_reset_error', $options['password_forgot_password_field_empty_error'] );
134 | 			wp_safe_redirect( $referer, 302 );
135 | 			exit;
136 | 		}
137 | 
138 | 		// Get user
139 | 		$user = is_email( $_POST['wpwebapp_password_forgot_username'] ) ? get_user_by( 'email', $_POST['wpwebapp_password_forgot_username'] ) : get_user_by( 'login', $_POST['wpwebapp_password_forgot_username'] );
140 | 
141 | 		// Verify that user exists
142 | 		if ( !$user ) {
143 | 			wpwebapp_set_session( 'wpwebapp_password_reset_error', $options['password_forgot_password_invalid_user_error'] );
144 | 			wpwebapp_set_session( 'wpwebapp_password_reset_credentials', $_POST['wpwebapp_password_forgot_username'] );
145 | 			wp_safe_redirect( $referer, 302 );
146 | 			exit;
147 | 		}
148 | 
149 | 		// Verify that user is not admin
150 | 		if ( user_can( $user->ID, 'edit_theme_options' ) ) {
151 | 			wpwebapp_set_session( 'wpwebapp_password_reset_error', $options['password_forgot_password_is_admin_error'] );
152 | 			wpwebapp_set_session( 'wpwebapp_password_reset_credentials', $_POST['wpwebapp_password_forgot_username'] );
153 | 			wp_safe_redirect( $referer, 302 );
154 | 			exit;
155 | 		}
156 | 
157 | 		// Send Password Reset Email
158 | 		$user_data = get_userdata( $user->ID );
159 | 		$reset_url =  wpwebapp_set_reset_key( $user->ID, $referer, $options['password_reset_time_valid'] );
160 | 		wpwebapp_send_password_reset_email( $user_data->user_email, $user_data->user_login, $reset_url, $options['password_reset_time_valid'], $options['password_reset_notification_email'] );
161 | 
162 | 		// Run custom WordPress action
163 | 		do_action( 'wpwebapp_after_password_forgot_email_sent', $user->ID );
164 | 
165 | 		// Show success message
166 | 		wpwebapp_set_session( 'wpwebapp_password_reset_success', $options['password_forgot_password_success'] );
167 | 		wp_safe_redirect( $referer, 302 );
168 | 		exit;
169 | 
170 | 	}
171 | 	add_action( 'init', 'wpwebapp_process_password_forgot' );
172 | 
173 | 
174 | 	// Process password reset
175 | 	function wpwebapp_process_password_reset() {
176 | 
177 | 		// Verify data came from form
178 | 		if ( !isset( $_POST['wpwebapp_password_reset_process'] ) || !wp_verify_nonce( $_POST['wpwebapp_password_reset_process'], 'wpwebapp_password_reset_nonce' ) ) return;
179 | 
180 | 		// Variables
181 | 		$options = wpwebapp_get_theme_options_forgot_password();
182 | 		$redirects = wpwebapp_get_theme_options_redirects();
183 | 		$referer = esc_url_raw( wpwebapp_get_url() );
184 | 		$redirect = wpwebapp_clean_url( 'reset_pw', wpwebapp_get_url() );
185 | 
186 | 		// Check that a password is supplied
187 | 		if ( empty( $_POST['wpwebapp_password_reset_password'] ) ) {
188 | 			wpwebapp_set_session( 'wpwebapp_password_reset_error', $options['password_reset_password_field_empty_error'] );
189 | 			wp_safe_redirect( $referer, 302 );
190 | 			exit;
191 | 		}
192 | 
193 | 		// Get user ID
194 | 		$user_id = empty( $_POST['wpwebapp_password_reset_key'] ) ? null : substr( $_POST['wpwebapp_password_reset_key'], 48 );
195 | 		if ( !$user_id ) {
196 | 			wpwebapp_set_session( 'wpwebapp_password_reset_error', $options['password_forgot_password_email_error'] );
197 | 			wp_safe_redirect( $redirect, 302 );
198 | 			exit;
199 | 		}
200 | 
201 | 		// Enforce password requirements
202 | 		if ( !wpwebapp_test_password_requirements( $_POST['wpwebapp_password_reset_password'] ) ) {
203 | 			$message = wpwebapp_password_requirements_message();
204 | 			wpwebapp_set_session( 'wpwebapp_password_reset_error', $message );
205 | 			wp_safe_redirect( $referer, 302 );
206 | 			exit;
207 | 		}
208 | 
209 | 		// Reset the user's password
210 | 		wp_update_user( array( 'ID' => $user_id, 'user_pass' => $_POST['wpwebapp_password_reset_password'] ) );
211 | 		delete_transient( 'wpwebapp_forgot_password_key_' . $_POST['wpwebapp_password_reset_key'] );
212 | 
213 | 		// Remove forced password reset if one was set
214 | 		update_user_meta( $user_id, 'wpwebapp_force_password_reset', 'off' );
215 | 
216 | 		// Run custom WordPress action
217 | 		do_action( 'wpwebapp_after_password_reset', $user_id );
218 | 
219 | 		// Log the user in
220 | 		$user = get_userdata( $user_id );
221 | 		$credentials = array(
222 | 			'user_login' => $user->user_login,
223 | 			'user_password' => $_POST['wpwebapp_password_reset_password'],
224 | 			'remember' => true,
225 | 		);
226 | 		wp_signon( $credentials);
227 | 
228 | 		// Send password change emails
229 | 		wpwebapp_send_password_change_email_to_admin( $user->user_login, $user->user_email );
230 | 		wpwebapp_send_password_change_email_to_user( $user->user_login, $user->user_email );
231 | 
232 | 		// Redirect and exit
233 | 		wp_safe_redirect( wpwebapp_get_redirect_url( $redirects['login_redirect'] ), 302 );
234 | 		exit;
235 | 
236 | 	}
237 | 	add_action( 'init', 'wpwebapp_process_password_reset' );


--------------------------------------------------------------------------------
/shortcodes/signup.php:
--------------------------------------------------------------------------------
  1 | <?php
  2 | 
  3 | /**
  4 |  * Create an account
  5 |  */
  6 | 
  7 | 
  8 | 	// Sign up form shortcode
  9 | 	function wpwebapp_signup_form() {
 10 | 
 11 | 		// Prevent this content from caching
 12 | 		if ( !defined ( 'DONOTCACHEPAGE' ) || !DONOTCACHEPAGE ) {
 13 | 			define('DONOTCACHEPAGE', TRUE);
 14 | 		}
 15 | 
 16 | 		if ( is_user_logged_in() ) {
 17 | 			$form = '<p>' . __( 'You\'re already logged in.', 'wpwebapp' ) . '</p>';
 18 | 		} else {
 19 | 
 20 | 			// Variables
 21 | 			$options = wpwebapp_get_theme_options_signup();
 22 | 			$error = wpwebapp_get_session( 'wpwebapp_signup_error', true );
 23 | 			$credentials = wpwebapp_get_session( 'wpwebapp_signup_credentials', true );
 24 | 			$pw_requirements = $options['signup_show_requirements'] === 'on' ? '<div class="wpwebapp-form-label-description">' . wpwebapp_password_requirements_message() . '</div>' : null;
 25 | 			if ( empty( $credentials ) || !is_object( $credentials ) ) {
 26 | 				$credentials = array(
 27 | 					'username' => '',
 28 | 					'email' => '',
 29 | 				);
 30 | 			}
 31 | 
 32 | 			$form =
 33 | 				( empty( $error ) ? '' : '<div class="wpwebapp_alert wpwebapp_alert_error">' . stripslashes( $error ) . '</div>' ) .
 34 | 
 35 | 				'<form class="wpwebapp-form" id="wpwebapp_signup" name="wpwebapp_signup" action="" method="post">' .
 36 | 
 37 | 					'<label class="wpwebapp-form-label" for="wpwebapp_signup_username">' . stripslashes( $options['signup_username_label'] ) . '</label>' .
 38 | 					'<input type="text" class="wpwebapp-form-input" id="wpwebapp_signup_username" name="wpwebapp_signup_username"  value="' . esc_attr( $credentials['username'] ) . '" required>' .
 39 | 
 40 | 					'<label class="wpwebapp-form-label" for="wpwebapp_signup_email">' . stripslashes( $options['signup_email_label'] ) . '</label>' .
 41 | 					'<input type="email" class="wpwebapp-form-input" id="wpwebapp_signup_email" name="wpwebapp_signup_email"  value="' . esc_attr( $credentials['email'] ) . '" required>' .
 42 | 
 43 | 					'<label class="wpwebapp-form-label" for="wpwebapp_signup_password">' . stripslashes( $options['signup_password_label'] ) . '</label>' .
 44 | 					'<input type="password" class="wpwebapp-form-input wpwebapp-form-password ' . ( empty( $pw_requirements ) ? '' : 'wpwebapp-form-input-has-description' ) . '" id="wpwebapp_signup_password" name="wpwebapp_signup_password"  value="" required>' .
 45 | 					$pw_requirements .
 46 | 
 47 | 					'<label class="wpwebapp-form-label wpwebapp-form-label-tarpit" for="wpwebapp_signup_password_confirm">' . __( 'If you are human, leave this blank', 'beacon' ) . '</label>' .
 48 | 					'<input type="text" class="wpwebapp-form-input wpwebapp-form-password wpwebapp-form-input-tarpit" id="wpwebapp_signup_password_confirm" name="wpwebapp_signup_password_confirm"  value="">' .
 49 | 
 50 | 					'<button class="wpwebapp-form-button wpwebapp-form-button-signup">' . $options['signup_submit_text'] . '</button>' .
 51 | 
 52 | 					'<input type="hidden" id="wpwebapp_signup_tarpit_time" name="wpwebapp_signup_tarpit_time" value="' . current_time( 'timestamp' ) . '">' .
 53 | 
 54 | 					wp_nonce_field( 'wpwebapp_signup_nonce', 'wpwebapp_signup_process', true, false ) .
 55 | 
 56 | 				'</form>';
 57 | 
 58 | 		}
 59 | 
 60 | 		return $form;
 61 | 
 62 | 	}
 63 | 	add_shortcode( 'wpwa_signup', 'wpwebapp_signup_form' );
 64 | 
 65 | 	// Send notification email to admin when new account created
 66 | 	function wpwebapp_send_user_notification_email( $login, $email ) {
 67 | 
 68 | 		// Check if admin wants to receive emails
 69 | 		$options = wpwebapp_get_theme_options_signup();
 70 | 		if ( $options['signup_receive_notifications'] === 'off' ) return;
 71 | 
 72 | 		// Variables
 73 | 		$site_name = get_bloginfo('name');
 74 | 		$domain = wpwebapp_get_site_domain();
 75 | 		$headers = 'From: ' . $site_name . ' <donotreply@' . $domain . '>' . "\r\n";
 76 | 		$subject = $site_name . ': New User Registration';
 77 | 		$message  = str_replace( '[email]', sanitize_email( $email ), str_replace( '[username]', esc_attr( $login ), stripslashes( $options['signup_notification_to_admin'] ) ) );
 78 | 
 79 | 		// Send email
 80 | 		@wp_mail( get_option('admin_email'), $subject, $message, $headers );
 81 | 
 82 | 	}
 83 | 
 84 | 	// Send notification email to member when new account created
 85 | 	function wpwebapp_send_user_welcome_email( $login, $email ) {
 86 | 
 87 | 		// Check if user should receive emails
 88 | 		$options = wpwebapp_get_theme_options_signup();
 89 | 		$redirects = wpwebapp_get_theme_options_redirects();
 90 | 		if ( $options['signup_send_notifications'] === 'off' ) return;
 91 | 
 92 | 		// Variables
 93 | 		$site_name = get_bloginfo('name');
 94 | 		$domain = wpwebapp_get_site_domain();
 95 | 		$headers = 'From: ' . $site_name . ' <donotreply@' . $domain . '>' . "\r\n";
 96 | 		$subject = 'Welcome to ' . $site_name;
 97 | 		$message  = str_replace( '[login]', $redirects['logout_redirect'], str_replace( '[username]', esc_attr( $login ), stripslashes( $options['signup_notification_to_user'] ) ) );
 98 | 
 99 | 		// Send email
100 | 		$email = @wp_mail( sanitize_email( $email ), $subject, $message, $headers );
101 | 
102 | 	}
103 | 
104 | 	// Create new user account
105 | 	function wpwebapp_create_new_user() {
106 | 		// @todo include an option to select the type of user role to assign member to (allows for custom roles)
107 | 
108 | 		// Verify data came from form
109 | 		if ( !isset( $_POST['wpwebapp_signup_process'] ) || !wp_verify_nonce( $_POST['wpwebapp_signup_process'], 'wpwebapp_signup_nonce' ) ) return;
110 | 
111 | 		// Variables
112 | 		$options = wpwebapp_get_theme_options_signup();
113 | 		$redirects = wpwebapp_get_theme_options_redirects();
114 | 		$referer = esc_url_raw( wpwebapp_get_url() );
115 | 		$credentials = array(
116 | 			'username' => $_POST['wpwebapp_signup_username'],
117 | 			'email' => $_POST['wpwebapp_signup_email'],
118 | 		);
119 | 
120 | 		// Check that username is supplied
121 | 		if ( empty( $_POST['wpwebapp_signup_username'] ) ) {
122 | 			wpwebapp_set_session( 'wpwebapp_signup_error', $options['signup_username_field_empty_error'] );
123 | 			wpwebapp_set_session( 'wpwebapp_signup_credentials', $credentials );
124 | 			wp_safe_redirect( $referer, 302 );
125 | 			exit;
126 | 		}
127 | 
128 | 		// Check that email is supplied
129 | 		if ( empty( $_POST['wpwebapp_signup_email'] ) ) {
130 | 			wpwebapp_set_session( 'wpwebapp_signup_error', $options['signup_email_field_empty_error'] );
131 | 			wpwebapp_set_session( 'wpwebapp_signup_credentials', $credentials );
132 | 			wp_safe_redirect( $referer, 302 );
133 | 			exit;
134 | 		}
135 | 
136 | 		// Check that password is supplied
137 | 		if ( empty( $_POST['wpwebapp_signup_password'] ) ) {
138 | 			wpwebapp_set_session( 'wpwebapp_signup_error', $options['signup_password_field_empty_error'] );
139 | 			wpwebapp_set_session( 'wpwebapp_signup_credentials', $credentials );
140 | 			wp_safe_redirect( $referer, 302 );
141 | 			exit;
142 | 		}
143 | 
144 | 		// Check that username is valid
145 | 		if ( !validate_username( $_POST['wpwebapp_signup_username'] ) ) {
146 | 			wpwebapp_set_session( 'wpwebapp_signup_error', $options['signup_username_invalid_error'] );
147 | 			wpwebapp_set_session( 'wpwebapp_signup_credentials', $credentials );
148 | 			wp_safe_redirect( $referer, 302 );
149 | 			exit;
150 | 		}
151 | 
152 | 		// Check that username isn't already taken
153 | 		if ( username_exists( $_POST['wpwebapp_signup_username'] ) ) {
154 | 			wpwebapp_set_session( 'wpwebapp_signup_error', $options['signup_username_exists_error'] );
155 | 			wpwebapp_set_session( 'wpwebapp_signup_credentials', $credentials );
156 | 			wp_safe_redirect( $referer, 302 );
157 | 			exit;
158 | 		}
159 | 
160 | 		// Check that email address is valid
161 | 		if ( !is_email( $_POST['wpwebapp_signup_email'] ) ) {
162 | 			wpwebapp_set_session( 'wpwebapp_signup_error', $options['signup_email_invalid_error'] );
163 | 			wpwebapp_set_session( 'wpwebapp_signup_credentials', $credentials );
164 | 			wp_safe_redirect( $referer, 302 );
165 | 			exit;
166 | 		}
167 | 
168 | 		// Check that email isn't already taken
169 | 		if ( email_exists( $_POST['wpwebapp_signup_email'] ) ) {
170 | 			wpwebapp_set_session( 'wpwebapp_signup_error', $options['signup_email_exists_error'] );
171 | 			wpwebapp_set_session( 'wpwebapp_signup_credentials', $credentials );
172 | 			wp_safe_redirect( $referer, 302 );
173 | 			exit;
174 | 		}
175 | 
176 | 		// Enforce password requirements
177 | 		if ( !wpwebapp_test_password_requirements( $_POST['wpwebapp_signup_password'] ) ) {
178 | 			$message = wpwebapp_password_requirements_message();
179 | 			wpwebapp_set_session( 'wpwebapp_signup_error', $message );
180 | 			wpwebapp_set_session( 'wpwebapp_signup_credentials', $credentials );
181 | 			wp_safe_redirect( $referer, 302 );
182 | 			exit;
183 | 		}
184 | 
185 | 		// Honeypots
186 | 		if ( !empty( $_POST['wpwebapp_signup_password_confirm'] ) || !isset( $_POST['wpwebapp_signup_tarpit_time'] ) || current_time( 'timestamp' ) - $_POST['wpwebapp_signup_tarpit_time'] < 2 ) {
187 | 			$message = __( 'We are unable to create your account. Sorry.', 'beacon' );
188 | 			wpwebapp_set_session( 'wpwebapp_signup_error', $message );
189 | 			wpwebapp_set_session( 'wpwebapp_signup_credentials', $credentials );
190 | 			wp_safe_redirect( $referer, 302 );
191 | 			exit;
192 | 		}
193 | 
194 | 		// If no errors exist, create an account and send notification emails
195 | 		wp_create_user( $_POST['wpwebapp_signup_username'], $_POST['wpwebapp_signup_password'], sanitize_email( $_POST['wpwebapp_signup_email'] ) );
196 | 		wpwebapp_send_user_notification_email( $_POST['wpwebapp_signup_username'], $_POST['wpwebapp_signup_email'] );
197 | 		wpwebapp_send_user_welcome_email( $_POST['wpwebapp_signup_username'], $_POST['wpwebapp_signup_email'] );
198 | 
199 | 		// Run custom WordPress action
200 | 		do_action( 'wpwebapp_after_signup', $_POST['wpwebapp_signup_username'], sanitize_email( $_POST['wpwebapp_signup_email'] ) );
201 | 
202 | 		// Log user in
203 | 		$credentials = array(
204 | 			'user_login' => $_POST['wpwebapp_signup_username'],
205 | 			'user_password' => $_POST['wpwebapp_signup_password'],
206 | 			'remember' => true,
207 | 		);
208 | 		$login = wp_signon( $credentials );
209 | 
210 | 		// If errors
211 | 		if ( is_wp_error( $login ) ) {
212 | 			wpwebapp_set_session( 'wpwebapp_signup_error', $options['signup_login_failed_error'] );
213 | 			wpwebapp_set_session( 'wpwebapp_signup_credentials', $credentials );
214 | 			wp_safe_redirect( $referer, 302 );
215 | 			exit;
216 | 		}
217 | 
218 | 		// Redirect after login
219 | 		$redirect = isset( $_GET['referrer'] ) && !empty( $_GET['referrer'] ) ? esc_url_raw( $_GET['referrer'] ) : wpwebapp_get_redirect_url( $redirects['login_redirect'] );
220 | 		wp_safe_redirect( $redirect, 302 );
221 | 		exit;
222 | 
223 | 	}
224 | 	add_action( 'init', 'wpwebapp_create_new_user' );
225 | 
226 | 	// Add honeypot classes to the header
227 | 	function beacon_load_honeypot_styles() {
228 | 		?>
229 | 			<style>
230 | 				.wpwebapp-form-label-tarpit,
231 | 				.wpwebapp-form-input-tarpit {
232 | 					display: none;
233 | 					visibility: hidden;
234 | 				}
235 | 			</style>
236 | 		<?php
237 | 	}
238 | 	add_action('wp_head', 'beacon_load_honeypot_styles', 30);
239 | 
240 | 	// Disable default new user admin notifications
241 | 	if ( !function_exists( 'wp_new_user_notification' ) ) {
242 | 		function wp_new_user_notification() {}
243 | 	}
244 | 
245 | 	// Send notification when user is manually created via the Dashboard
246 | 	function wpwebapp_create_user_notification_email( $user_id ) {
247 | 
248 | 		// Don't run user was created via the front-end
249 | 		if ( isset( $_POST['wpwebapp_signup_process'] ) ) return;
250 | 
251 | 		// Check if users should receive emails
252 | 		$options = wpwebapp_get_theme_options_signup();
253 | 		$pw_reset = wpwebapp_get_theme_options_forgot_password();
254 | 		if ( $options['create_user_send_notifications'] === 'off' ) return;
255 | 
256 | 		// Variables
257 | 		$user = get_user_by( 'ID', $user_id );
258 | 		$site_name = get_bloginfo('name');
259 | 		$domain = wpwebapp_get_site_domain();
260 | 		$pw = empty( $pw_reset['password_reset_url'] ) ? null : wpwebapp_get_redirect_url( $pw_reset['password_reset_url'] );
261 | 		$pw_reset = empty( $pw ) ? '' : wpwebapp_set_reset_key( $user_id, $pw, $options['create_user_password_time_valid'] );
262 | 		$headers = 'From: ' . $site_name . ' <donotreply@' . $domain . '>' . "\r\n";
263 | 		$subject = 'Welcome to ' . $site_name;
264 | 		$message  = str_replace( '[expires]', $options['create_user_password_time_valid'], str_replace( '[pw_reset]', $pw_reset, str_replace( '[username]', esc_attr( $user->user_login ), stripslashes( $options['create_user_notification'] ) ) ) );
265 | 
266 | 		// Send email
267 | 		@wp_mail( $user->user_email, $subject, $message, $headers );
268 | 
269 | 	}
270 | 	add_action( 'user_register', 'wpwebapp_create_user_notification_email', 10, 1 );


--------------------------------------------------------------------------------
/wordpress-for-web-apps.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | 
 3 | /**
 4 |  * Plugin Name: GMT WordPress for Web Apps
 5 |  * Plugin URI: https://github.com/cferdinandi/gmt-wordpress-for-web-apps/
 6 |  * GitHub Plugin URI: https://github.com/cferdinandi/gmt-wordpress-for-web-apps/
 7 |  * Description: Transform WordPress into a web app engine. Adjust your settings under <a href="options-general.php?page=wpwebapp_plugin_options">Web App Options</a>.
 8 |  * Version: 8.0.8
 9 |  * Author: Chris Ferdinandi
10 |  * Author URI: http://gomakethings.com
11 |  * License: MIT
12 |  */
13 | 
14 | // Includes
15 | require_once( plugin_dir_path( __FILE__ ) . 'includes/wp-session-manager/wp-session-manager.php' );
16 | require_once( plugin_dir_path( __FILE__ ) . 'includes/helpers.php' );
17 | require_once( plugin_dir_path( __FILE__ ) . 'includes/migrate-options.php' );
18 | 
19 | // Options
20 | require_once( plugin_dir_path( __FILE__ ) . 'options/options.php' );
21 | 
22 | // Shortcodes
23 | require_once( plugin_dir_path( __FILE__ ) . 'shortcodes/signup.php' ); // Sign up for an account
24 | require_once( plugin_dir_path( __FILE__ ) . 'shortcodes/login.php' ); // Login
25 | require_once( plugin_dir_path( __FILE__ ) . 'shortcodes/password-reset.php' ); // Reset Password
26 | require_once( plugin_dir_path( __FILE__ ) . 'shortcodes/password-change.php' ); // Change Password
27 | require_once( plugin_dir_path( __FILE__ ) . 'shortcodes/email-change.php' ); // Change Email
28 | require_once( plugin_dir_path( __FILE__ ) . 'shortcodes/delete-account.php' ); // Delete Account
29 | require_once( plugin_dir_path( __FILE__ ) . 'shortcodes/navigation.php' ); // Nav menu shortcodes
30 | 
31 | // Security and Access
32 | require_once( plugin_dir_path( __FILE__ ) . 'options/security.php' );
33 | require_once( plugin_dir_path( __FILE__ ) . 'options/user-access.php' );


--------------------------------------------------------------------------------