__( 'Ajax Login widget for WP User Frontend', 'wp-user-frontend' )] ); } /** * Ajax Login function * * @return void */ public function ajax_login() { $user_login = isset( $_POST['log'] ) ? sanitize_text_field( wp_unslash( $_POST['log'] ) ) : ''; $user_pass = isset( $_POST['pwd'] ) ? sanitize_text_field( wp_unslash( $_POST['pwd'] ) ) : ''; $rememberme = isset( $_POST['rememberme'] ) ? sanitize_text_field( wp_unslash( $_POST['rememberme'] ) ) : false; $nonce = isset( $_REQUEST['_wpnonce'] ) ? sanitize_key( wp_unslash( $_REQUEST['_wpnonce'] ) ) : ''; if ( empty( $nonce ) || ! wp_verify_nonce( $nonce , 'wpuf_lost_pass' ) ) { wp_send_json_error( __( 'Permission denied', 'wp-user-frontend' ) ); } if ( empty( $user_login ) || empty( $user_pass ) ) { wp_send_json_error( [ 'message'=> __( 'Please fill all form fields', 'wp-user-frontend' ) ] ); } else { $user = wp_signon( ['user_login' => $user_login, 'user_password' => $user_pass], false ); if ( is_wp_error( $user ) ) { wp_send_json_error( [ 'message'=> $user->get_error_message() ] ); } else { wp_send_json_success( [ 'message'=> __( 'Login successful!', 'wp-user-frontend' ) ] ); } } wp_set_auth_cookie( $user->ID, $rememberme ); } /** * Ajax Logout function * * @return void */ public function ajax_logout() { $nonce = isset( $_REQUEST['nonce'] ) ? sanitize_key( wp_unslash( $_REQUEST['nonce'] ) ) : ''; if ( empty( $nonce ) || ! wp_verify_nonce( $nonce, 'wpuf_lost_pass' ) ) { wp_send_json_error( __( 'Permission denied', 'wp-user-frontend' ) ); } wp_logout(); wp_send_json_success( [ 'message'=> __( 'Logout successful!', 'wp-user-frontend' ) ] ); } /** * Ajax password reset function * * @return void */ public function ajax_reset_pass() { $username_or_email = isset( $_POST['user_login'] ) ? sanitize_text_field( wp_unslash( $_POST['user_login'] ) ) : ''; $nonce = isset( $_REQUEST['_wpnonce'] ) ? sanitize_key( wp_unslash( $_REQUEST['_wpnonce'] ) ) : ''; if ( empty( $nonce ) || ! wp_verify_nonce( $nonce, 'wpuf_lost_pass' ) ) { wp_send_json_error( __( 'Permission denied', 'wp-user-frontend' ) ); } // Check if input variables are empty if ( empty( $username_or_email ) ) { wp_send_json_error( [ 'error' => true, 'message'=> __( 'Please fill all form fields', 'wp-user-frontend' ) ] ); } else { $username = is_email( $username_or_email ) ? sanitize_email( $username_or_email ) : sanitize_user( $username_or_email ); $user_forgotten = $this->ajax_lostpassword_retrieve( $username ); if ( is_wp_error( $user_forgotten ) ) { $lostpass_error_messages = $user_forgotten->errors; $display_errors = ''; foreach ( $lostpass_error_messages as $error ) { $display_errors .= '

' . $error[0] . '

'; } wp_send_json_error( [ 'message' => $display_errors ] ); } else { wp_send_json_success( [ 'message' => __( 'Password has been reset. Please check your email.', 'wp-user-frontend' ) ] ); } } } /** * Password retrieve function * * @return mixed */ private function ajax_lostpassword_retrieve( $user_input ) { global $wpdb, $wp_hasher; $errors = new WP_Error(); if ( empty( $user_input ) ) { $errors->add( 'empty_username', __( 'ERROR: Enter a username or email address.', 'wp-user-frontend' ) ); } elseif ( strpos( $user_input, '@' ) ) { $user_data = get_user_by( 'email', trim( $user_input ) ); if ( empty( $user_data ) ) { $errors->add( 'invalid_email', __( 'ERROR: There is no user registered with that email address.', 'wp-user-frontend' ) ); } } else { $login = trim( $user_input ); $user_data = get_user_by( 'login', $login ); } /* * Fires before errors are returned from a password reset request. */ do_action( 'lostpassword_post', $errors ); if ( $errors->get_error_code() ) { return $errors; } if ( !$user_data ) { $errors->add( 'invalidcombo', __( 'ERROR: Invalid username or email.', 'wp-user-frontend' ) ); return $errors; } // Redefining user_login ensures we return the right case in the email. $user_login = $user_data->user_login; $user_email = $user_data->user_email; $key = get_password_reset_key( $user_data ); if ( is_wp_error( $key ) ) { return $key; } $message = __( 'Someone has requested a password reset for the following account:', 'wp-user-frontend' ) . "\r\n\r\n"; $message .= network_home_url( '/' ) . "\r\n\r\n"; $message .= sprintf( // translators: %s is the user name __( 'Username: %s', 'wp-user-frontend' ), $user_login ) . "\r\n\r\n"; $message .= __( 'If this was a mistake, just ignore this email and nothing will happen.', 'wp-user-frontend' ) . "\r\n\r\n"; $message .= __( 'To reset your password, visit the following address:', 'wp-user-frontend' ) . "\r\n\r\n"; $message .= '<' . network_site_url( "wp-login.php?action=rp&key=$key&login=" . rawurlencode( $user_login ), 'login' ) . ">\r\n"; $blogname = wp_specialchars_decode( get_option( 'blogname' ), ENT_QUOTES ); $title = sprintf( // translators: %s is the blogname __( '[%s] Password Reset', 'wp-user-frontend' ), $blogname ); $title = apply_filters( 'retrieve_password_title', $title, $user_login, $user_data ); $message = apply_filters( 'retrieve_password_message', $message, $key, $user_login, $user_data ); if ( $message && !wp_mail( $user_email, wp_specialchars_decode( $title ), $message ) ) { $errors->add( 'mailfailed', __( 'ERROR: The email could not be sent.Possible reason: your host may have disabled the mail() function.', 'wp-user-frontend' ) ); } return true; } /** * Display Ajax Login widget * * @return void */ public function widget( $args, $instance ) { wp_enqueue_script( 'wpuf_ajax_login' ); wp_localize_script( 'wpuf_ajax_login', 'wpuf_ajax', [ 'ajaxurl' => admin_url( 'admin-ajax.php' ), ] ); $title = apply_filters( 'widget_title', $instance['title'] ); $log_in_header = apply_filters( 'widget_text_content', $instance['log_in_header'] ); $pwd_reset_header = apply_filters( 'widget_text_content', $instance['pwd_reset_header'] ); $uname_label = apply_filters( 'widget_text', $instance['uname_label'] ); $pwd_label = apply_filters( 'widget_text', $instance['pwd_label'] ); $remember_label = apply_filters( 'widget_text', $instance['remember_label'] ); $log_in_label = apply_filters( 'widget_text', $instance['log_in_label'] ); $pass_reset_label = apply_filters( 'widget_text', $instance['pass_reset_label'] ); echo wp_kses_post( $args['before_widget'] ); if ( !empty( $title ) ) { echo wp_kses_post( $args['before_title'] . $title . $args['after_title'] ); } if ( is_user_logged_in() ) { $user_id = get_current_user_id(); echo wp_kses_post( get_avatar( $user_id, 24 ) ); } $login_args = [ 'form_id' => 'wpuf_ajax_login_form', 'label_username' => $uname_label, 'label_password' => $pwd_label, 'label_remember' => $remember_label, 'label_log_in' => $log_in_label, ]; ?>

%s', esc_url( wp_registration_url() ), __( 'Register', 'wp-user-frontend' ) ); echo wp_kses( $registration_url, [ 'a' => [ 'href' => [] ] ] ); echo esc_html( apply_filters( 'login_link_separator', ' | ' ) ); }?>

%s', esc_url( wp_registration_url() ), __( 'Register', 'wp-user-frontend' ) ); echo wp_kses_post( $registration_url ); } ?>