300, ) ); } } return $avatar; } /** * Function to add invitation field to use later after submission of form. * * @since BuddyBoss 2.3.4 */ function bb_invites_add_invite_fields_after_wp_registration_fields() { // phpcs:ignore WordPress.Security.NonceVerification.Recommended if ( bp_is_active( 'invites' ) && isset( $_GET ) && isset( $_GET['bp-invites'] ) && 'accept-member-invitation' === $_GET['bp-invites'] && ! empty( $_GET['action'] ) && 'register' === $_GET['action'] ) { $bp_invites = sanitize_text_field( wp_unslash( $_GET['bp-invites'] ) ); // phpcs:ignore WordPress.Security.NonceVerification.Recommended $inviter = sanitize_text_field( wp_unslash( $_GET['inviter'] ) ); // phpcs:ignore WordPress.Security.NonceVerification.Recommended ?> bp_get_invite_post_type(), 'posts_per_page' => -1, 'meta_query' => array( array( 'key' => '_bp_invitee_email', 'value' => $email, 'compare' => '=', ), array( 'key' => '_bp_invitee_status', 'value' => 0, 'compare' => '=', ), ), ); if ( ! empty( $inviter ) ) { $args['posts_author'] = base64_decode( $inviter ); // phpcs:ignore WordPress.PHP.DiscouragedPHPFunctions.obfuscation_base64_decode } $bp_get_invitee_email = new WP_Query( $args ); if ( ! $bp_get_invitee_email->have_posts() ) { return __( "We couldn't find any invitations associated with this email address.", 'buddyboss' ); } } return true; } /** * Function to validate the invitation before a new signup for buddyboss registration. * * @since BuddyBoss 2.3.4 */ function bb_invites_validate_invitation_before_bb_registration() { if ( ! empty( $_REQUEST['inviter'] ) && ! empty( $_REQUEST['signup_email'] ) ) { // phpcs:ignore WordPress.Security.NonceVerification.Recommended $email = sanitize_text_field( wp_unslash( $_REQUEST['signup_email'] ) ); // phpcs:ignore WordPress.Security.NonceVerification.Recommended $inviter = sanitize_text_field( wp_unslash( $_REQUEST['inviter'] ) ); // phpcs:ignore WordPress.Security.NonceVerification.Recommended $is_valid = bb_invites_validate_invitation_before_registration( $email, $inviter ); if ( is_string( $is_valid ) ) { $bp = buddypress(); $bp->signup->errors['signup_email'] = $is_valid; } } } /** * Validates invitation and appends any errors to prevent new user registration. * * @since BuddyBoss 2.3.4 * * @param WP_Error $errors A WP_Error object containing any errors encountered during registration. * @param string $sanitized_user_login User's username after it has been sanitized. * @param string $user_email User's email. * * @return WP_Error */ function bb_invites_validate_invitation_before_wp_registration( $errors, $sanitized_user_login, $user_email ) { if ( ! empty( $_REQUEST['inviter'] ) && ! empty( $user_email ) ) { // phpcs:ignore WordPress.Security.NonceVerification.Recommended $inviter = sanitize_text_field( wp_unslash( $_REQUEST['inviter'] ) ); // phpcs:ignore WordPress.Security.NonceVerification.Recommended $is_valid = bb_invites_validate_invitation_before_registration( $user_email, $inviter ); if ( is_string( $is_valid ) ) { $errors->add( 'email_error', $is_valid ); } } return $errors; }