Skip to content
This repository has been archived by the owner on Nov 9, 2021. It is now read-only.

Commit

Permalink
Version 1.5.2 Release
Browse files Browse the repository at this point in the history 
Version 1.5.2 Release
  • Loading branch information
@sosokruashvili
sosokruashvili committed Mar 4, 2014
1 parent 0069925 commit 66344dc
Show file tree
Hide file tree
Showing 7 changed files with 302 additions and 89 deletions.
56 changes: 46 additions & 10 deletions pages/admin_main.php
View file
Original file line number Diff line number Diff line change
@@ -1,22 +1,58 @@
<!-- Plugin Admin Main Page Template -->
<h1><?php echo __( "WP Sticky Notes Settings: " )?></h1>
<h1 class="wpst-admin-head"><?php echo __( "WP Sticky Notes Settings: " )?></h1>
<br><br><br>
<h2><?php echo __( "Permission Management" )?></h2><hr>
<?php
global $wpdb;
global $role_to_change;
// Get user roles array
$USER_P = get_option( $wpdb->prefix.'user_roles' );
$groups = get_option( "wpst_allow_user_groups" );
$everyone = get_option( "wpst_allow_unauthorized" );
?>
<form name="user-group-choose" action="" method="post">
<label><?php echo __( "Select user group which can create and see stickers" )?></label><div class="clear h10"></div>
<select name="group[]" multiple >
<?php foreach( $USER_P as $slug => $user_group ): if( $slug == 'administrator' ) continue; ?>
<option <?php echo ( @in_array( $slug, $groups ) ) ? "selected" : ""; ?> value="<?php echo $slug?>"><?php echo $user_group["name"]?></option>

<form name="group-permissions" action="" method="post">
<div style="float:left;">
<label><?php echo __( "Groups" )?></label><div class="clear h10"></div>
<select id="wpst_perm_groups" name="wpst_group">
<?php foreach( $USER_P as $slug => $user_group ): if( $slug == "administrator" ) continue; ?>
<option <?php echo ( $role_to_change == $slug ) ? "selected" : ""; ?> value="<?php echo $slug?>"><?php echo $user_group["name"]?></option>
<?php endforeach?>
<option value="everyone" <?php echo ( @in_array( "everyone", $groups ) ) ? "selected" : ""; ?> ><?php echo __("Everyone ( Includes unauthorized users )"); ?></option>
<option <?php echo ( $role_to_change == 'everyone' ) ? "selected" : ""; ?> value="everyone"><?php echo __("Unauthorized users"); ?></option>
</select>
<div class="clear h10"></div>
<input type="hidden" name="permissions_submit" value="1">
</div>
<div style="float:left; margin-left:40px;">
<label><?php echo __( "Capabilities" )?></label><div class="clear h10"></div>
<?php foreach( $USER_P as $slug => $user_group ): if( $slug == "administrator" ) continue; ?>
<?php
$temp_role = get_role( $slug );
?>
<select id="<?php echo $slug?>_caps" name="<?php echo $slug?>[]" multiple class="wpst-caps-list hide" >
<option <?php echo ( @array_key_exists( "wpst_read", $temp_role->capabilities ) ) ? "selected" : ""; ?> value="wpst_read"><?php echo __("Read")?></option>
<option <?php echo ( @array_key_exists( "wpst_create", $temp_role->capabilities ) ) ? "selected" : ""; ?> value="wpst_create"><?php echo __("Create")?></option>
<option <?php echo ( @array_key_exists( "wpst_edit", $temp_role->capabilities ) ) ? "selected" : ""; ?> value="wpst_edit"><?php echo __("Edit / Delete")?></option>
</select>
<?php endforeach?>

<select id="everyone_caps" name="everyone[]" multiple class="wpst-caps-list hide" >
<option <?php echo ( @in_array( "wpst_read", $everyone ) ) ? "selected" : ""; ?> value="wpst_read"><?php echo __("Read")?></option>
<option <?php echo ( @in_array( "wpst_create", $everyone ) ) ? "selected" : ""; ?> value="wpst_create"><?php echo __("Create")?></option>
<option <?php echo ( @in_array( "wpst_edit", $everyone ) ) ? "selected" : ""; ?> value="wpst_edit"><?php echo __("Edit / Delete")?></option>
</select>
</div>
<div class="clear h10"></div>
<span class="description"><?php echo __( "You can also edit permissions by user on <a href='/wp-admin/users.php'>user edit page</a>" )?></span>
<div class="clear h10"></div>
<button class="button action"><?php echo __( "Save" )?></button>
</form>
<div class="clear h30"></div>
<div class="clear h30"></div>

<script>
( function( $ ) {
$("#wpst_perm_groups").change(function(e) {
$('.wpst-caps-list').hide();
$("#"+$('#wpst_perm_groups').val()+"_caps").show();
});
$("#wpst_perm_groups").change();
} )( jQuery );
</script>
225 changes: 177 additions & 48 deletions plugin.php
View file
Original file line number Diff line number Diff line change
Expand Up @@ -3,7 +3,7 @@
Plugin Name: WP Sticky Notes
Plugin URI: http://sticker-notes.com/
Description: Add sticky note for any page to any position
Version: 1.0.8
Version: 1.5.2
Author: Kruashvili
Author URI: http://sticker-notes.com/
License: GPL 2
Expand Down Expand Up @@ -35,10 +35,32 @@
$WPST_PLUGIN['name'] = "WP Sticky Notes";
$WPST_PLUGIN['folder'] = basename( dirname( __FILE__ ) );

// Register and update plugin options to wordpress options mechanism
if( $_POST['group'] ) {
add_option( "wpst_allow_user_groups", $_POST['group'] );
update_option( "wpst_allow_user_groups", $_POST['group'] );
/* Set cookie variable to identify unauthorized users */
if( !$_COOKIE["wpst_id"] ) {
setcookie( "wpst_id", uniqid(), time()+60*60*24*300, "/" );
}

/* Add custom caps to administrator by default */
$role = get_role( "administrator" );
$role->add_cap( "wpst_read" );
$role->add_cap( "wpst_edit" );
$role->add_cap( "wpst_create" );

// Update wordpress capabilities
if( @$_POST['permissions_submit'] == 1 ) {
$role_to_change = $_POST["wpst_group"];
if( $role_to_change != "everyone" ) {
$role = get_role( $role_to_change );
$role->remove_cap( "wpst_read" );
$role->remove_cap( "wpst_edit" );
$role->remove_cap( "wpst_create" );
foreach( $_POST[ $role_to_change ] as $cap ) {
$role->add_cap( $cap );
}
}
else {
update_option( "wpst_allow_unauthorized", $_POST['everyone'] );
}
}

function __wp_sticker_menu() {
Expand All @@ -49,16 +71,18 @@ function __wp_sticker_menu() {
function __wp_sticker_get_page() {
global $WPSticker;
global $WPST_PLUGIN;

wp_enqueue_style( 'wpst-main-style', plugins_url() . "/" . $WPST_PLUGIN['folder'] . "/scripts/admin-style.css", false, "1.0.8" );
require_once( __DIR__ . "/pages/admin_main.php" );
}

function wpst_is_unauth_and_can( $cap ) {
if( is_user_logged_in() ) return false;
$unauth_caps = get_option( "wpst_allow_unauthorized" );
if( @in_array( $cap, $unauth_caps ) ) return true;
}

function wpst_load_front_files() {
// Check user permissions
if( ! wpst_check_permissions() ) return;
global $WPST_PLUGIN;

wp_enqueue_style( 'wpst-main-style', plugins_url() . "/" . $WPST_PLUGIN['folder'] . "/scripts/wpst_style.css", false, "1.0.8" );
wp_enqueue_script( 'jquery' );
wp_enqueue_script( 'jquery-ui-draggable', "", array("jquery"), "", true );
Expand All @@ -71,81 +95,184 @@ function wpst_load_front_files() {

function wpst_send_client_data() {
global $WPST_PLUGIN;
$user_data = get_userdata( get_current_user_id() );

$wpst_current_caps = array( "wpst_read" => wpst_user_can( "wpst_read" ),
"wpst_create" => wpst_user_can( "wpst_create" ),
"wpst_edit" => wpst_user_can( "wpst_edit" ) );
$wpst_current_caps = array_filter( $wpst_current_caps );
// Send CDATA for JS
wp_localize_script( 'wpst-main-script', 'wpst_data', array(
'userid' => get_current_user_id(),
'home_url' => home_url(),
'plugin_dir' => plugins_url() . "/" . $WPST_PLUGIN['folder'],
'stickers' => get_stickers_json()
'stickers' => get_stickers_json(),
'wpst_current_caps' => $wpst_current_caps
));
}

function wpst_user_can( $subject ) {
switch( $subject ) {
case "wpst_read":
if( current_user_can( "wpst_read" ) || wpst_is_unauth_and_can( "wpst_read" ) )
return true;
break;

case "wpst_create":
if( current_user_can( "wpst_create" ) || wpst_is_unauth_and_can( "wpst_create" ) )
return true;
break;

case "wpst_edit":
if( current_user_can( "wpst_edit" ) || wpst_is_unauth_and_can( "wpst_edit" ) )
return true;
break;

default:
return false;
}
}

function get_stickers_json() {
global $wpdb;
$current_url = "http" . (( $_SERVER['SERVER_PORT'] == 443 ) ? "s://" : "://") . $_SERVER['HTTP_HOST'] . $_SERVER['REQUEST_URI'];
$results = $wpdb->get_results( "SELECT * FROM " . $wpdb->prefix ."sticker_notes WHERE url = '{$current_url}'" );
return json_encode( $results );
}

function wpst_check_permissions() {

// Get Current User Data Object
$curent_user_data = get_userdata( get_current_user_id() );
$current_user_groups = $curent_user_data->roles;

// Get allows groups to use this plugin front
$allowed_groups = get_option( "wpst_allow_user_groups" );

// Return true if everyone is selected in permissions
if( @in_array( "everyone", $allowed_groups ) )
return true;

// Return true if user is administrator
if( @in_array( "administrator", $current_user_groups ) ) {
return true;
if( wpst_user_can( "wpst_read" ) ) {
$results = $wpdb->get_results( "SELECT * FROM " . $wpdb->prefix . "sticker_notes WHERE url = '{$current_url}' ");
}

if( ! $current_user_groups ) return false;

foreach( @$current_user_groups as $group ) {
if( @in_array( $group, $allowed_groups ) )
return true;
else if( is_user_logged_in() ) {
$results = $wpdb->get_results( "SELECT * FROM " . $wpdb->prefix . "sticker_notes WHERE url = '{$current_url}' AND author = " . get_current_user_id() );
}
return false;
else {
$results = $wpdb->get_results( "SELECT * FROM " . $wpdb->prefix . "sticker_notes WHERE url = '{$current_url}' AND cookie_user_id = '" . $_COOKIE["wpst_id"] . "'" );
}

return json_encode( $results );
}


add_action( 'wp_ajax_nopriv_wpst_save_sticker', 'wpst_save_sticker' );
add_action( 'wp_ajax_wpst_save_sticker', 'wpst_save_sticker' );
function wpst_save_sticker() {
global $wpdb;

$sticker_id = $_POST["sticker_id"];
$sticker_props = stripslashes($_POST['properties']);
$sticker_url = $_POST['url'];
$sticker_note = $_POST['note'];

if( $sticker_id ) {
if( ! $wpdb->get_results( "SELECT sticker_id FROM " . $wpdb->prefix ."sticker_notes WHERE sticker_id = '{$sticker_id}'" ) )
$res = $wpdb->query( "INSERT INTO " . $wpdb->prefix ."sticker_notes (sticker_id, url, properties, note, cr_date) VALUES ('{$sticker_id}', '{$sticker_url}', '{$sticker_props}', '{$sticker_note}', '".date("Y-m-d")."')" );
else
$res1 = $wpdb->query( "UPDATE " . $wpdb->prefix ."sticker_notes SET sticker_id = '{$sticker_id}', url = '{$sticker_url}', properties = '{$sticker_props}', note = '{$sticker_note}' WHERE sticker_id = '{$sticker_id}'" );
if( !$wpdb->get_results( "SELECT sticker_id FROM " . $wpdb->prefix ."sticker_notes WHERE sticker_id = '{$sticker_id}'" ) ) {
if( !wpst_user_can( "wpst_create" ) ) {
exit( __("Yout cannot create sticky note") );
}
$res = $wpdb->insert( $wpdb->prefix ."sticker_notes", array( "sticker_id" => $sticker_id,
"url" => $sticker_url,
"properties" => $sticker_props,
"note" => $sticker_note,
"cr_date" => date("Y-m-d"),
"author" => get_current_user_id(),
"cookie_user_id" => $_COOKIE["wpst_id"]
) );
if( !$res )
exit( __("Something wrong with query") );
}
else {
if( !wpst_user_can( "wpst_edit" ) ) {
$where["sticker_id"] = $sticker_id;
$where["author"] = get_current_user_id();
if( !is_user_logged_in() )
$where["cookie_user_id"] = $_COOKIE["wpst_id"];
$res1 = $wpdb->update( $wpdb->prefix ."sticker_notes", array( "sticker_id" => $sticker_id,
"url" => $sticker_url,
"properties" => $sticker_props,
"note" => $sticker_note ),
$where );
if( !$res1 )
exit( __("You cannot edit this sticky note or is already deleted") );
}
else {
$res1 = $wpdb->update( $wpdb->prefix ."sticker_notes", array( "sticker_id" => $sticker_id,
"url" => $sticker_url,
"properties" => $sticker_props,
"note" => $sticker_note ),
array( "sticker_id" => $sticker_id ) );
}
}
}
echo "OK";
exit();
unset( $where );
exit("OK");
}

add_action( 'wp_ajax_nopriv_wpst_delete_sticker', 'wpst_delete_sticker' );
add_action( 'wp_ajax_wpst_delete_sticker', 'wpst_delete_sticker' );
function wpst_delete_sticker() {
global $wpdb;
$sticker_id = $_POST["sticker_id"];
if( $sticker_id )
$res2 = $wpdb->query( "DELETE FROM " . $wpdb->prefix ."sticker_notes WHERE sticker_id = '{$sticker_id}'" );
if( $res2 )
echo "OK";
exit();
if( $sticker_id ) {
if( !wpst_user_can( "wpst_edit" ) ) {
$where["sticker_id"] = $sticker_id;
$where["author"] = get_current_user_id();
if( !is_user_logged_in() )
$where["cookie_user_id"] = $_COOKIE['wpst_id'];

$res2 = $wpdb->delete( $wpdb->prefix ."sticker_notes", $where );
if( !$res2 )
exit( __("You cannot delete this sticky note or is already deleted") );
}
else {
$res2 = $wpdb->delete( $wpdb->prefix ."sticker_notes", array( "sticker_id" => $sticker_id ) );
if( !$res2 )
exit( __("Something wrong with query") );
}
}
unset( $where );
exit( "OK" );
}

/*
Create and display user meta field on user edit page, this field is for
storing permission value
*/
add_action( 'show_user_profile', 'wpst_extra_user_profile_fields' );
add_action( 'edit_user_profile', 'wpst_extra_user_profile_fields' );
add_action( 'personal_options_update', 'wpst_save_extra_user_profile_fields' );
add_action( 'edit_user_profile_update', 'wpst_save_extra_user_profile_fields' );

function wpst_save_extra_user_profile_fields( $user_id ) {
$user = new WP_User( $user_id );
$user->remove_cap( "wpst_read" );
$user->remove_cap( "wpst_edit" );
$user->remove_cap( "wpst_create" );
foreach( $_POST['wpst_caps'] as $cap ) {
$user->add_cap( $cap );
}
}

function wpst_extra_user_profile_fields( $user ) { ?>
<h3><?php echo __("Sticky Notes Permissions"); ?></h3>
<table class="form-table">
<tr>
<th><label for="wpst_caps"><?php echo __("Sticky Notes caps") ?></label></th>
<td>
<select name="wpst_caps[]" id="wpst-user-profile-caps-select" multiple style="width:200px; height:100px;">
<option <?php echo ( user_can( $user, "wpst_read" ) ) ? "selected" : ""; ?> value="wpst_read"><?php echo __("Read")?></option>
<option <?php echo ( user_can( $user, "wpst_create" ) ) ? "selected" : ""; ?> value="wpst_create"><?php echo __("Create")?></option>
<option <?php echo ( user_can( $user, "wpst_edit" ) ) ? "selected" : ""; ?> value="wpst_edit"><?php echo __("Edit")?></option>
</select>
<div style="clear:both;"></div>
<span class="description"><?php echo __("Please choose sticky notes capabilities for this user") ?></span>
</td>
</tr>
</table>
<?php
}

function __wp_sticker_plugin_install() {
$role = get_role( "administrator" );
$role->add_cap( "wpst_read" );
$role->add_cap( "wpst_edit" );
$role->add_cap( "wpst_create" );

require_once( ABSPATH . 'wp-admin/includes/upgrade.php' );
$main_table = "CREATE TABLE " . $wpdb->prefix . "sticker_notes (
id INT NOT NULL AUTO_INCREMENT,
Expand All @@ -155,6 +282,8 @@ function __wp_sticker_plugin_install() {
note text NOT NULL,
color varchar(100) NOT NULL,
cr_date varchar(200) NOT NULL,
author INT NOT NULL,
cookie_user_id varchar(100) NOT NULL,
UNIQUE KEY id (id)
) ENGINE=InnoDB DEFAULT CHARSET=utf8";
dbDelta( $main_table );
Expand Down
Loading

0 comments on commit 66344dc

Please sign in to comment.