+* if ($this->data['openid_mode']) {
+* $openid = new LightOpenID;
+* echo $openid->validate() ? 'Logged in.' : 'Failed';
+* }
+*
+*
+* Optionally, you can set $returnUrl and $realm (or $trustRoot, which is an alias).
+* The default values for those are:
+* $openid->realm = (!empty($_SERVER['HTTPS']) ? 'https' : 'http') . '://' . $_SERVER['HTTP_HOST'];
+* $openid->returnUrl = $openid->realm . $_SERVER['REQUEST_URI']; # without the query part, if present
+* If you don't know their meaning, refer to any openid tutorial, or specification. Or just guess.
+*
+* AX and SREG extensions are supported.
+* To use them, specify $openid->required and/or $openid->optional before calling $openid->authUrl().
+* These are arrays, with values being AX schema paths (the 'path' part of the URL).
+* For example:
+* $openid->required = array('namePerson/friendly', 'contact/email');
+* $openid->optional = array('namePerson/first');
+* If the server supports only SREG or OpenID 1.1, these are automaticaly
+* mapped to SREG names, so that user doesn't have to know anything about the server.
+*
+* To get the values, use $openid->getAttributes().
+*
+*
+* The library requires PHP >= 5.1.2 with curl or http/https stream wrappers enabled..
+* @author Mewp
+* @copyright Copyright (c) 2010, Mewp
+* @license http://www.opensource.org/licenses/mit-license.php MIT
+*/
+class LightOpenID
+{
+ public $returnUrl
+ , $required = array()
+ , $optional = array();
+ private $identity, $claimed_id;
+ protected $server, $version, $trustRoot, $aliases, $identifier_select = false
+ , $ax = false, $sreg = false, $data;
+ static protected $ax_to_sreg = array(
+ 'namePerson/friendly' => 'nickname',
+ 'contact/email' => 'email',
+ 'namePerson' => 'fullname',
+ 'birthDate' => 'dob',
+ 'person/gender' => 'gender',
+ 'contact/postalCode/home' => 'postcode',
+ 'contact/country/home' => 'country',
+ 'pref/language' => 'language',
+ 'pref/timezone' => 'timezone',
+ );
+
+ function __construct()
+ {
+ $this->trustRoot = (!empty($_SERVER['HTTPS']) ? 'https' : 'http') . '://' . $_SERVER['HTTP_HOST'];
+ $uri = $_SERVER['REQUEST_URI'];
+ $uri = strpos($uri, '?') ? substr($uri, 0, strpos($uri, '?')) : $uri;
+ $this->returnUrl = $this->trustRoot . $uri;
+
+ $this->data = $_POST + $_GET; # OPs may send data as POST or GET.
+ }
+
+ function __set($name, $value)
+ {
+ switch ($name) {
+ case 'identity':
+ if (strlen($value = trim((String) $value))) {
+ if (preg_match('#^xri:/*#i', $value, $m)) {
+ $value = substr($value, strlen($m[0]));
+ } elseif (!preg_match('/^(?:[=@+\$!\(]|https?:)/i', $value)) {
+ $value = "http://$value";
+ }
+ if (preg_match('#^https?://[^/]+$#i', $value, $m)) {
+ $value .= '/';
+ }
+ }
+ $this->$name = $this->claimed_id = $value;
+ break;
+ case 'trustRoot':
+ case 'realm':
+ $this->trustRoot = trim($value);
+ }
+ }
+
+ function __get($name)
+ {
+ switch ($name) {
+ case 'identity':
+ # We return claimed_id instead of identity,
+ # because the developer should see the claimed identifier,
+ # i.e. what he set as identity, not the op-local identifier (which is what we verify)
+ return $this->claimed_id;
+ case 'trustRoot':
+ case 'realm':
+ return $this->trustRoot;
+ }
+ }
+
+ /**
+ * Checks if the server specified in the url exists.
+ *
+ * @param $url url to check
+ * @return true, if the server exists; false otherwise
+ */
+ function hostExists($url)
+ {
+ if (strpos($url, '/') === false) {
+ $server = $url;
+ } else {
+ $server = @parse_url($url, PHP_URL_HOST);
+ }
+
+ if (!$server) {
+ return false;
+ }
+
+ return !!gethostbynamel($server);
+ }
+
+ protected function request_curl($url, $method='GET', $params=array())
+ {
+ $params = http_build_query($params, '', '&');
+ $curl = curl_init($url . ($method == 'GET' && $params ? '?' . $params : ''));
+ curl_setopt($curl, CURLOPT_FOLLOWLOCATION, true);
+ curl_setopt($curl, CURLOPT_HEADER, false);
+ curl_setopt($curl, CURLOPT_SSL_VERIFYPEER, false);
+ curl_setopt($curl, CURLOPT_RETURNTRANSFER, true);
+ curl_setopt($curl, CURLOPT_HTTPHEADER, array('Accept: application/xrds+xml, */*'));
+ if ($method == 'POST') {
+ curl_setopt($curl, CURLOPT_POST, true);
+ curl_setopt($curl, CURLOPT_POSTFIELDS, $params);
+ } elseif ($method == 'HEAD') {
+ curl_setopt($curl, CURLOPT_HEADER, true);
+ curl_setopt($curl, CURLOPT_NOBODY, true);
+ } else {
+ curl_setopt($curl, CURLOPT_HTTPGET, true);
+ }
+ $response = curl_exec($curl);
+
+ if($method == 'HEAD') {
+ $headers = array();
+ foreach(explode("\n", $response) as $header) {
+ $pos = strpos($header,':');
+ $name = strtolower(trim(substr($header, 0, $pos)));
+ $headers[$name] = trim(substr($header, $pos+1));
+ }
+
+ # Updating claimed_id in case of redirections.
+ $effective_url = curl_getinfo($curl, CURLINFO_EFFECTIVE_URL);
+ if($effective_url != $url) {
+ $this->claimed_id = $effective_url;
+ }
+
+ return $headers;
+ }
+
+ if (curl_errno($curl)) {
+ throw new ErrorException(curl_error($curl), curl_errno($curl));
+ }
+
+ return $response;
+ }
+
+ protected function request_streams($url, $method='GET', $params=array())
+ {
+ if(!$this->hostExists($url)) {
+ throw new ErrorException('Invalid request.');
+ }
+
+ $params = http_build_query($params, '', '&');
+ switch($method) {
+ case 'GET':
+ $opts = array(
+ 'http' => array(
+ 'method' => 'GET',
+ 'header' => 'Accept: application/xrds+xml, */*',
+ 'ignore_errors' => true,
+ )
+ );
+ $url = $url . ($params ? '?' . $params : '');
+ break;
+ case 'POST':
+ $opts = array(
+ 'http' => array(
+ 'method' => 'POST',
+ 'header' => 'Content-type: application/x-www-form-urlencoded',
+ 'content' => $params,
+ 'ignore_errors' => true,
+ )
+ );
+ break;
+ case 'HEAD':
+ # We want to send a HEAD request,
+ # but since get_headers doesn't accept $context parameter,
+ # we have to change the defaults.
+ $default = stream_context_get_options(stream_context_get_default());
+ stream_context_get_default(
+ array('http' => array(
+ 'method' => 'HEAD',
+ 'header' => 'Accept: application/xrds+xml, */*',
+ 'ignore_errors' => true,
+ ))
+ );
+
+ $url = $url . ($params ? '?' . $params : '');
+ $headers_tmp = get_headers ($url);
+ if(!$headers_tmp) {
+ return array();
+ }
+
+ # Parsing headers.
+ $headers = array();
+ foreach($headers_tmp as $header) {
+ $pos = strpos($header,':');
+ $name = strtolower(trim(substr($header, 0, $pos)));
+ $headers[$name] = trim(substr($header, $pos+1));
+
+ # Following possible redirections. The point is just to have
+ # claimed_id change with them, because get_headers() will
+ # follow redirections automatically.
+ # We ignore redirections with relative paths.
+ # If any known provider uses them, file a bug report.
+ if($name == 'location') {
+ if(strpos($headers[$name], 'http') === 0) {
+ $this->claimed_id = $headers[$name];
+ } elseif($headers[$name][0] == '/') {
+ $parsed_url = parse_url($this->claimed_id);
+ $this->claimed_id = $parsed_url['scheme'] . '://'
+ . $parsed_url['host']
+ . $headers[$name];
+ }
+ }
+ }
+
+ # And restore them.
+ stream_context_get_default($default);
+ return $headers;
+ }
+ $context = stream_context_create ($opts);
+
+ return file_get_contents($url, false, $context);
+ }
+
+ protected function request($url, $method='GET', $params=array())
+ {
+ if(function_exists('curl_init') && !ini_get('safe_mode')) {
+ return $this->request_curl($url, $method, $params);
+ }
+ return $this->request_streams($url, $method, $params);
+ }
+
+ protected function build_url($url, $parts)
+ {
+ if (isset($url['query'], $parts['query'])) {
+ $parts['query'] = $url['query'] . '&' . $parts['query'];
+ }
+
+ $url = $parts + $url;
+ $url = $url['scheme'] . '://'
+ . (empty($url['username'])?''
+ :(empty($url['password'])? "{$url['username']}@"
+ :"{$url['username']}:{$url['password']}@"))
+ . $url['host']
+ . (empty($url['port'])?'':":{$url['port']}")
+ . (empty($url['path'])?'':$url['path'])
+ . (empty($url['query'])?'':"?{$url['query']}")
+ . (empty($url['fragment'])?'':":{$url['fragment']}");
+ return $url;
+ }
+
+ /**
+ * Helper function used to scan for / tags and extract information
+ * from them
+ */
+ protected function htmlTag($content, $tag, $attrName, $attrValue, $valueName)
+ {
+ preg_match_all("#<{$tag}[^>]*$attrName=['\"].*?$attrValue.*?['\"][^>]*$valueName=['\"](.+?)['\"][^>]*/?>#i", $content, $matches1);
+ preg_match_all("#<{$tag}[^>]*$valueName=['\"](.+?)['\"][^>]*$attrName=['\"].*?$attrValue.*?['\"][^>]*/?>#i", $content, $matches2);
+
+ $result = array_merge($matches1[1], $matches2[1]);
+ return empty($result)?false:$result[0];
+ }
+
+ /**
+ * Performs Yadis and HTML discovery. Normally not used.
+ * @param $url Identity URL.
+ * @return String OP Endpoint (i.e. OpenID provider address).
+ * @throws ErrorException
+ */
+ function discover($url)
+ {
+ if (!$url) throw new ErrorException('No identity supplied.');
+ # Use xri.net proxy to resolve i-name identities
+ if (!preg_match('#^https?:#', $url)) {
+ $url = "https://xri.net/$url";
+ }
+
+ # We save the original url in case of Yadis discovery failure.
+ # It can happen when we'll be lead to an XRDS document
+ # which does not have any OpenID2 services.
+ $originalUrl = $url;
+
+ # A flag to disable yadis discovery in case of failure in headers.
+ $yadis = true;
+
+ # We'll jump a maximum of 5 times, to avoid endless redirections.
+ for ($i = 0; $i < 5; $i ++) {
+ if ($yadis) {
+ $headers = $this->request($url, 'HEAD');
+
+ $next = false;
+ if (isset($headers['x-xrds-location'])) {
+ $url = $this->build_url(parse_url($url), parse_url(trim($headers['x-xrds-location'])));
+ $next = true;
+ }
+
+ if (isset($headers['content-type'])
+ && strpos($headers['content-type'], 'application/xrds+xml') !== false
+ ) {
+ # Found an XRDS document, now let's find the server, and optionally delegate.
+ $content = $this->request($url, 'GET');
+
+ preg_match_all('#Return to Plugins Admin page »", 'social_connect'), admin_url( 'plugins.php' ) ), 'social-connect' ); - elseif ( !function_exists( 'curl_version' ) ) - wp_die( sprintf( __( "Sorry, but you can not run Social Connect. It requires the PHP libcurl extension be installed. Please contact your web host and request libcurl be installed.
Return to Plugins Admin page »", 'social_connect'), admin_url( 'plugins.php' ) ), 'social-connect' ); - elseif ( !function_exists( 'hash' ) ) - wp_die( sprintf( __( "Sorry, but you can not run Social Connect. It requires the PHP Hash Engine. Please contact your web host and request Hash engine be installed.
Return to Plugins Admin page »", 'social_connect'), admin_url( 'plugins.php' ) ), 'social-connect' ); - else - wp_die( sprintf( __( "Sorry, but you can not run Social Connect. It requires PHP 5.1.2 or newer. Please contact your web host and request they migrate your PHP installation to run Social Connect.
Return to Plugins Admin page »", 'social_connect'), admin_url( 'plugins.php' ) ), 'social-connect' ); - } - do_action( 'sc_activation' ); -} -register_activation_hook( __FILE__, 'sc_activate' ); - -/** - * Internationalization of the plugin - **/ -function sc_social_connect_l10n() { - $plugin_dir = basename( dirname( __FILE__ ) ); - load_plugin_textdomain( 'social_connect', null, "$plugin_dir/languages" ); -} -add_action( 'init', 'sc_social_connect_l10n', -1000 ); - -require_once( dirname( __FILE__ ) . '/constants.php' ); -require_once( dirname( __FILE__ ) . '/utils.php' ); -require_once( dirname( __FILE__ ) . '/media.php' ); -require_once( dirname( __FILE__ ) . '/admin.php' ); -require_once( dirname( __FILE__ ) . '/ui.php' ); - -/** - * Add valid query vars to WordPress for Social Connect. - */ -function sc_query_vars($vars) { - $vars[] = 'social-connect'; - return $vars; -} -add_action('query_vars', 'sc_query_vars'); - -/** - * Parse the WordPress request. If the query var 'social-connect' is present, - * then handle the request accordingly. - * - * @param WP $wp WP instance for the current request - */ -function sc_parse_request($wp) { - if (array_key_exists('social-connect', $wp->query_vars)) { - if (!session_id()) { - session_start(); - } - - switch ($wp->query_vars['social-connect']) { - case 'twitter': - require_once 'twitter/connect.php'; - break; - case 'twitter-callback': - require_once 'twitter/callback.php'; - break; - case 'facebook-callback': - require_once 'facebook/callback.php'; - break; - case 'google': - require_once 'google/connect.php'; - break; - case 'google-plus': - require_once 'google-plus/connect.php'; - break; - case 'google-plus-callback': - require_once 'google-plus/callback.php'; - break; - case 'yahoo': - require_once 'yahoo/connect.php'; - break; - case 'wordpress': - require_once 'wordpress/connect.php'; - break; - default: - break; - } - - wp_die(); - } -} -add_action('parse_request', 'sc_parse_request'); - -function sc_social_connect_process_login( $is_ajax = false ) { - if ( isset( $_REQUEST[ 'redirect_to' ] ) && $_REQUEST[ 'redirect_to' ] != '' ) { - $redirect_to = $_REQUEST[ 'redirect_to' ]; - // Redirect to https if user wants ssl - if ( isset( $secure_cookie ) && $secure_cookie && false !== strpos( $redirect_to, 'wp-admin') ) - $redirect_to = preg_replace( '|^http://|', 'https://', $redirect_to ); - } else { - $redirect_to = admin_url(); - } - $redirect_to = apply_filters( 'social_connect_redirect_to', $redirect_to ); - - $social_connect_provider = $_REQUEST[ 'social_connect_provider' ]; - $sc_provider_identity_key = 'social_connect_' . $social_connect_provider . '_id'; - $sc_provided_signature = $_REQUEST[ 'social_connect_signature' ]; - - switch( $social_connect_provider ) { - case 'facebook': - social_connect_verify_signature( $_REQUEST[ 'social_connect_access_token' ], $sc_provided_signature, $redirect_to ); - $fb_json = json_decode( sc_http_get_contents("https://graph.facebook.com/me?access_token=" . $_REQUEST['social_connect_access_token']) ); - $sc_provider_identity = $fb_json->{ 'id' }; - $sc_email = $fb_json->{ 'email' }; - $sc_first_name = $fb_json->{ 'first_name' }; - $sc_last_name = $fb_json->{ 'last_name' }; - $sc_profile_url = $fb_json->{ 'link' }; - $sc_name = $sc_first_name . ' ' . $sc_last_name; - $user_login = strtolower( str_replace( ' ', '', $sc_first_name . $sc_last_name ) ); - break; - case 'twitter': - $sc_provider_identity = $_REQUEST[ 'social_connect_twitter_identity' ]; - social_connect_verify_signature( $sc_provider_identity, $sc_provided_signature, $redirect_to ); - $sc_name = $_REQUEST[ 'social_connect_name' ]; - $names = explode( ' ', $sc_name, 2 ); - $sc_first_name = $names[0]; - $sc_last_name = $names[1]; - $sc_screen_name = $_REQUEST[ 'social_connect_screen_name' ]; - $sc_avatar = isset( $_REQUEST['social_connect_avatar'] ) ? str_replace( 'http:', '', $_REQUEST['social_connect_avatar'] ) : ''; - $sc_profile_url = ''; - // Get host name from URL - $site_url = parse_url( site_url() ); - $sc_email = 'tw_' . md5( $sc_provider_identity ) . '@' . $site_url['host']; - $user_login = $sc_screen_name; - break; - case 'google': - $sc_provider_identity = $_REQUEST[ 'social_connect_openid_identity' ]; - social_connect_verify_signature( $sc_provider_identity, $sc_provided_signature, $redirect_to ); - $sc_email = $_REQUEST[ 'social_connect_email' ]; - $sc_first_name = $_REQUEST[ 'social_connect_first_name' ]; - $sc_last_name = $_REQUEST[ 'social_connect_last_name' ]; - $sc_profile_url = ''; - $sc_name = $sc_first_name . ' ' . $sc_last_name; - $user_login = strtolower( str_replace( ' ', '', $sc_first_name . $sc_last_name ) ); - break; - case 'google-plus': - $sc_provider_identity = $_REQUEST['social_connect_google_id']; - social_connect_verify_signature( $sc_provider_identity, $sc_provided_signature, $redirect_to ); - $sc_email = $_REQUEST['social_connect_email']; - $sc_first_name = $_REQUEST['social_connect_first_name']; - $sc_last_name = $_REQUEST['social_connect_last_name']; - $sc_profile_url = $_REQUEST['social_connect_profile_url']; - $user_login = strtolower( $sc_first_name.$sc_last_name ); - break; - case 'yahoo': - $sc_provider_identity = $_REQUEST[ 'social_connect_openid_identity' ]; - social_connect_verify_signature( $sc_provider_identity, $sc_provided_signature, $redirect_to ); - $sc_email = $_REQUEST[ 'social_connect_email' ]; - $sc_name = $_REQUEST[ 'social_connect_name' ]; - $sc_username = $_REQUEST[ 'social_connect_username' ]; - $sc_profile_url = ''; - if ( $sc_name == '') { - if ( $sc_username == '') { - $names = explode("@", $sc_email ); - $sc_name = $names[0]; - $sc_first_name = $sc_name; - $sc_last_name = ''; - } else { - $names = explode( ' ', $sc_username, 2 ); - $sc_first_name = $names[0]; - $sc_last_name = $names[1]; - } - } else { - $names = explode( ' ', $sc_name, 2 ); - $sc_first_name = $names[0]; - $sc_last_name = $names[1]; - } - $user_login = strtolower( str_replace( ' ', '', $sc_first_name . $sc_last_name ) ); - break; - case 'wordpress': - $sc_provider_identity = $_REQUEST[ 'social_connect_openid_identity' ]; - social_connect_verify_signature( $sc_provider_identity, $sc_provided_signature, $redirect_to ); - $sc_email = $_REQUEST[ 'social_connect_email' ]; - $sc_name = $_REQUEST[ 'social_connect_name' ]; - $sc_profile_url = ''; - if ( trim( $sc_name ) == '') { - $names = explode("@", $sc_email ); - $sc_name = $names[0]; - $sc_first_name = $sc_name; - $sc_last_name = ''; - } else { - $names = explode( ' ', $sc_name, 2 ); - $sc_first_name = $names[0]; - $sc_last_name = $names[1]; - } - $user_login = strtolower( str_replace( ' ', '', $sc_first_name . $sc_last_name ) ); - break; - default: - break; - } - - // Cookies used to display welcome message if already signed in recently using some provider - setcookie("social_connect_current_provider", $social_connect_provider, time()+3600, SITECOOKIEPATH, COOKIE_DOMAIN, false, true ); - - // Get user by meta - $user_id = social_connect_get_user_by_meta( $sc_provider_identity_key, $sc_provider_identity ); - if ( $user_id ) { - $user_data = get_userdata( $user_id ); - $user_login = $user_data->user_login; - } elseif ( $user_id = email_exists( $sc_email ) ) { // User not found by provider identity, check by email - update_user_meta( $user_id, $sc_provider_identity_key, $sc_provider_identity ); - - $user_data = get_userdata( $user_id ); - $user_login = $user_data->user_login; - - } else { // Create new user and associate provider identity - if ( get_option( 'users_can_register' ) ) { - $user_login = sc_get_unique_username($user_login); - - $userdata = array( 'user_login' => $user_login, 'user_email' => $sc_email, 'first_name' => $sc_first_name, 'last_name' => $sc_last_name, 'user_url' => $sc_profile_url, 'user_pass' => wp_generate_password() ); - - // Create a new user - $user_id = wp_insert_user( apply_filters( 'social_connect_insert_user', $userdata ) ); - - if ( $user_id && is_integer( $user_id ) ) { - update_user_meta( $user_id, $sc_provider_identity_key, $sc_provider_identity ); - } - - if( isset( $sc_avatar ) && $sc_avatar ){ - update_user_meta( $user_id, 'social_connect_twitter_avatar', $sc_avatar ); - } - do_action( 'social_connect_inserted_user', $user_id, $social_connect_provider ); - } else { - add_filter( 'wp_login_errors', 'sc_login_errors' ); - - return; - } - } - - wp_set_auth_cookie( $user_id ); - - do_action( 'social_connect_login', $user_login ); - - if ( $is_ajax ) { - echo '{"redirect":"' . $redirect_to . '"}'; - } else { - wp_safe_redirect( $redirect_to ); - } - - exit(); -} - -/** - * Add error message when user try to login - * with an nonexistent e-mail and registration is disabled - * - * @param WP_Error $errors - * @return WP_Error - */ -function sc_login_errors( $errors ) { - $errors->errors = array(); - $errors->add( 'registration_disabled', __( 'ERROR: Registration is disabled.', 'social-connect' ) ); - - return $errors; -} - -function sc_get_unique_username($user_login, $c = 1) { - if ( username_exists( $user_login ) ) { - if ($c > 5) - $append = '_'.substr(md5($user_login),0,3) . $c; - else - $append = $c; - - $user_login = apply_filters( 'social_connect_username_exists', $user_login . $append ); - return sc_get_unique_username($user_login,++$c); - } else { - return $user_login; - } -} - -// Hook to 'login_form_' . $action -add_action( 'login_form_social_connect', 'sc_social_connect_process_login'); - -// Handle calls from plugins that use an Ajax for login -function sc_ajax_login(){ - if ( isset( $_POST[ 'login_submit' ] ) && $_POST[ 'login_submit' ] == 'ajax' && // Plugins will need to pass this param - isset( $_POST[ 'action' ] ) && $_POST[ 'action' ] == 'social_connect' ) - sc_social_connect_process_login( true ); -} -add_action( 'init', 'sc_ajax_login'); - -/** - * Use avatars in priority order - * @author Aaron Oneal - * @link http://aarononeal.info - * - */ -function sc_filter_avatar($avatar, $id_or_email, $size, $default, $alt) { - $custom_avatar = ''; - $social_id = ''; - $provider_id = ''; - $user_id = (!is_integer($id_or_email) && !is_string($id_or_email) && get_class($id_or_email)) ? $id_or_email->user_id : $id_or_email; - - if (!empty($user_id)) { - // Providers to search for (assume user prefers their current logged in service) - // Note: OpenID providers use gravatars - $providers = array('facebook', 'twitter'); - - $social_connect_provider = isset( $_COOKIE['social_connect_current_provider']) ? $_COOKIE['social_connect_current_provider'] : ''; - if (!empty($social_connect_provider) && $social_connect_provider == 'twitter') { - $providers = array('twitter', 'facebook'); - } - - foreach($providers as $search_provider) { - $social_id = get_user_meta($user_id, 'social_connect_'.$search_provider.'_id', true); - if (!empty($social_id)) { - $provider_id = $search_provider; - break; - } - } - } - - // At least one social ID was found - if (!empty($social_id)) { - switch($provider_id) { - case 'facebook': - // square (50x50) - // small (50 pixels wide, variable height) - // normal (100 pixels wide, variable height) - // large (about 200 pixels wide, variable height) - - $size_label = 'large'; - - if($size <= 100) - $size_label = 'normal'; - else if($size <= 50) - $size_label = 'small'; - - $custom_avatar = "http://graph.facebook.com/$social_id/picture?type=$size_label"; - break; - case 'twitter': - // bigger - 73px by 73px - // normal - 48px by 48px - // mini - 24px by 24px - - $size_label = 'bigger'; - - if ($size <= 48) { - $size_label = 'normal'; - } else if ($size <= 24) { - $size_label = 'mini'; - } - - $custom_avatar = get_user_meta( $user_id, 'social_connect_twitter_avatar', true ); - $custom_avatar = str_replace( '_normal', '_' . $size_label, $custom_avatar ); - break; - } - } - - if (!empty($custom_avatar)) { - // return the custom avatar from the social network - $return = '
Return to Plugins Admin page »", 'social_connect'), admin_url( 'plugins.php' ) ), 'social-connect' ); + elseif ( !function_exists( 'curl_version' ) ) + wp_die( sprintf( __( "Sorry, but you can not run Social Connect. It requires the PHP libcurl extension be installed. Please contact your web host and request libcurl be installed.
Return to Plugins Admin page »", 'social_connect'), admin_url( 'plugins.php' ) ), 'social-connect' ); + elseif ( !function_exists( 'hash' ) ) + wp_die( sprintf( __( "Sorry, but you can not run Social Connect. It requires the PHP Hash Engine. Please contact your web host and request Hash engine be installed.
Return to Plugins Admin page »", 'social_connect'), admin_url( 'plugins.php' ) ), 'social-connect' ); + else + wp_die( sprintf( __( "Sorry, but you can not run Social Connect. It requires PHP 5.1.2 or newer. Please contact your web host and request they migrate your PHP installation to run Social Connect.
Return to Plugins Admin page »", 'social_connect'), admin_url( 'plugins.php' ) ), 'social-connect' ); + } + do_action( 'sc_activation' ); +} +register_activation_hook( __FILE__, 'sc_activate' ); + +/** + * Internationalization of the plugin + **/ +function sc_social_connect_l10n() { + $plugin_dir = basename( dirname( __FILE__ ) ); + load_plugin_textdomain( 'social_connect', null, "$plugin_dir/languages" ); +} +add_action( 'init', 'sc_social_connect_l10n', -1000 ); + +require_once( dirname( __FILE__ ) . '/constants.php' ); +require_once( dirname( __FILE__ ) . '/utils.php' ); +require_once( dirname( __FILE__ ) . '/media.php' ); +require_once( dirname( __FILE__ ) . '/admin.php' ); +require_once( dirname( __FILE__ ) . '/ui.php' ); + +/** + * Add valid query vars to WordPress for Social Connect. + */ +function sc_query_vars($vars) { + $vars[] = 'social-connect'; + return $vars; +} +add_action('query_vars', 'sc_query_vars'); + +/** + * Parse the WordPress request. If the query var 'social-connect' is present, + * then handle the request accordingly. + * + * @param WP $wp WP instance for the current request + */ +function sc_parse_request($wp) { + if (array_key_exists('social-connect', $wp->query_vars)) { + if (!session_id()) { + session_start(); + } + + switch ($wp->query_vars['social-connect']) { + case 'twitter': + require_once 'twitter/connect.php'; + break; + case 'twitter-callback': + require_once 'twitter/callback.php'; + break; + case 'facebook-callback': + require_once 'facebook/callback.php'; + break; + case 'google': + require_once 'google/connect.php'; + break; + case 'google-plus': + require_once 'google-plus/connect.php'; + break; + case 'google-plus-callback': + require_once 'google-plus/callback.php'; + break; + case 'yahoo': + require_once 'yahoo/connect.php'; + break; + case 'wordpress': + require_once 'wordpress/connect.php'; + break; + default: + break; + } + + wp_die(); + } +} +add_action('parse_request', 'sc_parse_request'); + +function sc_social_connect_process_login( $is_ajax = false ) { + if ( isset( $_REQUEST[ 'redirect_to' ] ) && $_REQUEST[ 'redirect_to' ] != '' ) { + $redirect_to = $_REQUEST[ 'redirect_to' ]; + // Redirect to https if user wants ssl + if ( isset( $secure_cookie ) && $secure_cookie && false !== strpos( $redirect_to, 'wp-admin') ) + $redirect_to = preg_replace( '|^http://|', 'https://', $redirect_to ); + } else { + $redirect_to = admin_url(); + } + $redirect_to = apply_filters( 'social_connect_redirect_to', $redirect_to ); + + $social_connect_provider = $_REQUEST[ 'social_connect_provider' ]; + $sc_provider_identity_key = 'social_connect_' . $social_connect_provider . '_id'; + $sc_provided_signature = $_REQUEST[ 'social_connect_signature' ]; + + switch( $social_connect_provider ) { + case 'facebook': + social_connect_verify_signature( $_REQUEST[ 'social_connect_access_token' ], $sc_provided_signature, $redirect_to ); + $fb_json = json_decode( sc_http_get_contents("https://graph.facebook.com/me?access_token=" . $_REQUEST['social_connect_access_token']) ); + $sc_provider_identity = $fb_json->{ 'id' }; + $sc_email = $fb_json->{ 'email' }; + $sc_first_name = $fb_json->{ 'first_name' }; + $sc_last_name = $fb_json->{ 'last_name' }; + $sc_profile_url = $fb_json->{ 'link' }; + $sc_name = $sc_first_name . ' ' . $sc_last_name; + $user_login = strtolower( str_replace( ' ', '', $sc_first_name . $sc_last_name ) ); + break; + case 'twitter': + $sc_provider_identity = $_REQUEST[ 'social_connect_twitter_identity' ]; + social_connect_verify_signature( $sc_provider_identity, $sc_provided_signature, $redirect_to ); + $sc_name = $_REQUEST[ 'social_connect_name' ]; + $names = explode( ' ', $sc_name, 2 ); + $sc_first_name = $names[0]; + $sc_last_name = $names[1]; + $sc_screen_name = $_REQUEST[ 'social_connect_screen_name' ]; + $sc_avatar = isset( $_REQUEST['social_connect_avatar'] ) ? str_replace( 'http:', '', $_REQUEST['social_connect_avatar'] ) : ''; + $sc_profile_url = ''; + // Get host name from URL + $site_url = parse_url( site_url() ); + $sc_email = 'tw_' . md5( $sc_provider_identity ) . '@' . $site_url['host']; + $user_login = $sc_screen_name; + break; + case 'google': + $sc_provider_identity = $_REQUEST[ 'social_connect_openid_identity' ]; + social_connect_verify_signature( $sc_provider_identity, $sc_provided_signature, $redirect_to ); + $sc_email = $_REQUEST[ 'social_connect_email' ]; + $sc_first_name = $_REQUEST[ 'social_connect_first_name' ]; + $sc_last_name = $_REQUEST[ 'social_connect_last_name' ]; + $sc_profile_url = ''; + $sc_name = $sc_first_name . ' ' . $sc_last_name; + $user_login = strtolower( str_replace( ' ', '', $sc_first_name . $sc_last_name ) ); + break; + case 'google-plus': + $sc_provider_identity = $_REQUEST['social_connect_google_id']; + social_connect_verify_signature( $sc_provider_identity, $sc_provided_signature, $redirect_to ); + $sc_email = $_REQUEST['social_connect_email']; + $sc_first_name = $_REQUEST['social_connect_first_name']; + $sc_last_name = $_REQUEST['social_connect_last_name']; + $sc_profile_url = $_REQUEST['social_connect_profile_url']; + $user_login = strtolower( $sc_first_name.$sc_last_name ); + break; + case 'yahoo': + $sc_provider_identity = $_REQUEST[ 'social_connect_openid_identity' ]; + social_connect_verify_signature( $sc_provider_identity, $sc_provided_signature, $redirect_to ); + $sc_email = $_REQUEST[ 'social_connect_email' ]; + $sc_name = $_REQUEST[ 'social_connect_name' ]; + $sc_username = $_REQUEST[ 'social_connect_username' ]; + $sc_profile_url = ''; + if ( $sc_name == '') { + if ( $sc_username == '') { + $names = explode("@", $sc_email ); + $sc_name = $names[0]; + $sc_first_name = $sc_name; + $sc_last_name = ''; + } else { + $names = explode( ' ', $sc_username, 2 ); + $sc_first_name = $names[0]; + $sc_last_name = $names[1]; + } + } else { + $names = explode( ' ', $sc_name, 2 ); + $sc_first_name = $names[0]; + $sc_last_name = $names[1]; + } + $user_login = strtolower( str_replace( ' ', '', $sc_first_name . $sc_last_name ) ); + break; + case 'wordpress': + $sc_provider_identity = $_REQUEST[ 'social_connect_openid_identity' ]; + social_connect_verify_signature( $sc_provider_identity, $sc_provided_signature, $redirect_to ); + $sc_email = $_REQUEST[ 'social_connect_email' ]; + $sc_name = $_REQUEST[ 'social_connect_name' ]; + $sc_profile_url = ''; + if ( trim( $sc_name ) == '') { + $names = explode("@", $sc_email ); + $sc_name = $names[0]; + $sc_first_name = $sc_name; + $sc_last_name = ''; + } else { + $names = explode( ' ', $sc_name, 2 ); + $sc_first_name = $names[0]; + $sc_last_name = $names[1]; + } + $user_login = strtolower( str_replace( ' ', '', $sc_first_name . $sc_last_name ) ); + break; + default: + break; + } + + // Cookies used to display welcome message if already signed in recently using some provider + setcookie("social_connect_current_provider", $social_connect_provider, time()+3600, SITECOOKIEPATH, COOKIE_DOMAIN, false, true ); + + // Get user by meta + $user_id = social_connect_get_user_by_meta( $sc_provider_identity_key, $sc_provider_identity ); + if ( $user_id ) { + $user_data = get_userdata( $user_id ); + $user_login = $user_data->user_login; + } elseif ( $user_id = email_exists( $sc_email ) ) { // User not found by provider identity, check by email + update_user_meta( $user_id, $sc_provider_identity_key, $sc_provider_identity ); + + $user_data = get_userdata( $user_id ); + $user_login = $user_data->user_login; + + } else { // Create new user and associate provider identity + if ( get_option( 'users_can_register' ) ) { + $user_login = sc_get_unique_username($user_login); + + $userdata = array( 'user_login' => $user_login, 'user_email' => $sc_email, 'first_name' => $sc_first_name, 'last_name' => $sc_last_name, 'user_url' => $sc_profile_url, 'user_pass' => wp_generate_password() ); + + // Create a new user + $user_id = wp_insert_user( apply_filters( 'social_connect_insert_user', $userdata ) ); + + if ( $user_id && is_integer( $user_id ) ) { + update_user_meta( $user_id, $sc_provider_identity_key, $sc_provider_identity ); + } + + if( isset( $sc_avatar ) && $sc_avatar ){ + update_user_meta( $user_id, 'social_connect_twitter_avatar', $sc_avatar ); + } + do_action( 'social_connect_inserted_user', $user_id, $social_connect_provider ); + } else { + add_filter( 'wp_login_errors', 'sc_login_errors' ); + + return; + } + } + + wp_set_auth_cookie( $user_id ); + + do_action( 'social_connect_login', $user_login ); + + if ( $is_ajax ) { + echo '{"redirect":"' . $redirect_to . '"}'; + } else { + wp_safe_redirect( $redirect_to ); + } + + exit(); +} + +/** + * Add error message when user try to login + * with an nonexistent e-mail and registration is disabled + * + * @param WP_Error $errors + * @return WP_Error + */ +function sc_login_errors( $errors ) { + $errors->errors = array(); + $errors->add( 'registration_disabled', __( 'ERROR: Registration is disabled.', 'social-connect' ) ); + + return $errors; +} + +function sc_get_unique_username($user_login, $c = 1) { + if ( username_exists( $user_login ) ) { + if ($c > 5) + $append = '_'.substr(md5($user_login),0,3) . $c; + else + $append = $c; + + $user_login = apply_filters( 'social_connect_username_exists', $user_login . $append ); + return sc_get_unique_username($user_login,++$c); + } else { + return $user_login; + } +} + +// Hook to 'login_form_' . $action +add_action( 'login_form_social_connect', 'sc_social_connect_process_login'); + +// Handle calls from plugins that use an Ajax for login +function sc_ajax_login(){ + if ( isset( $_POST[ 'login_submit' ] ) && $_POST[ 'login_submit' ] == 'ajax' && // Plugins will need to pass this param + isset( $_POST[ 'action' ] ) && $_POST[ 'action' ] == 'social_connect' ) + sc_social_connect_process_login( true ); +} +add_action( 'init', 'sc_ajax_login'); + +/** + * Use avatars in priority order + * @author Aaron Oneal + * @link http://aarononeal.info + * + */ +function sc_filter_avatar($avatar, $id_or_email, $size, $default, $alt) { + $custom_avatar = ''; + $social_id = ''; + $provider_id = ''; + $user_id = (!is_integer($id_or_email) && !is_string($id_or_email) && get_class($id_or_email)) ? $id_or_email->user_id : $id_or_email; + + if (!empty($user_id)) { + // Providers to search for (assume user prefers their current logged in service) + // Note: OpenID providers use gravatars + $providers = array('facebook', 'twitter'); + + $social_connect_provider = isset( $_COOKIE['social_connect_current_provider']) ? $_COOKIE['social_connect_current_provider'] : ''; + if (!empty($social_connect_provider) && $social_connect_provider == 'twitter') { + $providers = array('twitter', 'facebook'); + } + + foreach($providers as $search_provider) { + $social_id = get_user_meta($user_id, 'social_connect_'.$search_provider.'_id', true); + if (!empty($social_id)) { + $provider_id = $search_provider; + break; + } + } + } + + // At least one social ID was found + if (!empty($social_id)) { + switch($provider_id) { + case 'facebook': + // square (50x50) + // small (50 pixels wide, variable height) + // normal (100 pixels wide, variable height) + // large (about 200 pixels wide, variable height) + + $size_label = 'large'; + + if($size <= 100) + $size_label = 'normal'; + else if($size <= 50) + $size_label = 'small'; + + $custom_avatar = "http://graph.facebook.com/$social_id/picture?type=$size_label"; + break; + case 'twitter': + // bigger - 73px by 73px + // normal - 48px by 48px + // mini - 24px by 24px + + $size_label = 'bigger'; + + if ($size <= 48) { + $size_label = 'normal'; + } else if ($size <= 24) { + $size_label = 'mini'; + } + + $custom_avatar = get_user_meta( $user_id, 'social_connect_twitter_avatar', true ); + $custom_avatar = str_replace( '_normal', '_' . $size_label, $custom_avatar ); + break; + } + } + + if (!empty($custom_avatar)) { + // return the custom avatar from the social network + $return = '
-
- comment_ID, 'social_connect_comment_via_provider', true );
- if( $social_connect_comment_via_provider && current_user_can( 'manage_options' )) {
- return $link . '
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
- 
');
- endif; ?>
- 
');
- endif; ?>
- 
');
- endif; ?>
- 
');
- endif; ?>
- 
');
- endif; ?>
- 
');
- endif; ?>
-
-
- ');
- endif; ?>
- ');
- endif; ?>
- ');
- endif; ?>
- ');
- endif; ?>
- ');
- endif; ?>
- ');
- endif; ?>
-
- 
';
- } else {
- return $link;
- }
-}
-add_action( 'get_comment_author_link', 'sc_social_connect_render_comment_meta' );
-
-
-function sc_render_comment_form_social_connect() {
- if( comments_open() && !is_user_logged_in()) {
- sc_render_login_form_social_connect();
- }
-}
-add_action( 'comment_form_top', 'sc_render_comment_form_social_connect' );
-
-
-function sc_render_login_page_uri(){
- ?>
-
- __( 'Login or register with Facebook, Twitter, Yahoo, Google or a Wordpress.com account', 'social_connect' ))
- );
- }
-
- /** This is rendered widget content */
- function widget( $args, $instance ) {
- extract( $args );
-
- if($instance['hide_for_logged_in']==1 && is_user_logged_in()) return;
-
- echo $before_widget;
-
- if( !empty( $instance['title'] ) ){
- $title = apply_filters( 'widget_title', $instance[ 'title' ] );
- echo $before_title . $title . $after_title;
- }
-
- if( !empty( $instance['before_widget_content'] ) ){
- echo $instance['before_widget_content'];
- }
-
- sc_render_login_form_social_connect( array( 'display_label' => false ) );
-
- if( !empty( $instance['after_widget_content'] ) ){
- echo $instance['after_widget_content'];
- }
-
- echo $after_widget;
- }
-
- /** Everything which should happen when user edit widget at admin panel */
- function update( $new_instance, $old_instance ) {
- $instance = $old_instance;
- $instance['title'] = strip_tags( $new_instance['title'] );
- $instance['before_widget_content'] = $new_instance['before_widget_content'];
- $instance['after_widget_content'] = $new_instance['after_widget_content'];
- $instance['hide_for_logged_in'] = $new_instance['hide_for_logged_in'];
-
- return $instance;
- }
-
- /** Widget edit form at admin panel */
- function form( $instance ) {
- /* Set up default widget settings. */
- $defaults = array( 'title' => '', 'before_widget_content' => '', 'after_widget_content' => '' );
-
- foreach( $instance as $key => $value )
- $instance[ $key ] = esc_attr( $value );
-
- $instance = wp_parse_args( (array)$instance, $defaults );
- ?>
-
-
-
-
-
-
-
-
- />
-
+
+ comment_ID, 'social_connect_comment_via_provider', true );
+ if( $social_connect_comment_via_provider && current_user_can( 'manage_options' )) {
+ return $link . '
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+ ');
+ endif; ?>
+ ');
+ endif; ?>
+ ');
+ endif; ?>
+ ');
+ endif; ?>
+ ');
+ endif; ?>
+ ');
+ endif; ?>
+
+
+ ');
+ endif; ?>
+ ');
+ endif; ?>
+ ');
+ endif; ?>
+ ');
+ endif; ?>
+ ');
+ endif; ?>
+ ');
+ endif; ?>
+
+ ';
+ } else {
+ return $link;
+ }
+}
+add_action( 'get_comment_author_link', 'sc_social_connect_render_comment_meta' );
+
+
+function sc_render_comment_form_social_connect() {
+ if( comments_open() && !is_user_logged_in()) {
+ sc_render_login_form_social_connect();
+ }
+}
+add_action( 'comment_form_top', 'sc_render_comment_form_social_connect' );
+
+
+function sc_render_login_page_uri(){
+ ?>
+
+ __( 'Login or register with Facebook, Twitter, Yahoo, Google or a Wordpress.com account', 'social_connect' ))
+ );
+ }
+
+ /** This is rendered widget content */
+ function widget( $args, $instance ) {
+ extract( $args );
+
+ if($instance['hide_for_logged_in']==1 && is_user_logged_in()) return;
+
+ echo $before_widget;
+
+ if( !empty( $instance['title'] ) ){
+ $title = apply_filters( 'widget_title', $instance[ 'title' ] );
+ echo $before_title . $title . $after_title;
+ }
+
+ if( !empty( $instance['before_widget_content'] ) ){
+ echo $instance['before_widget_content'];
+ }
+
+ sc_render_login_form_social_connect( array( 'display_label' => false ) );
+
+ if( !empty( $instance['after_widget_content'] ) ){
+ echo $instance['after_widget_content'];
+ }
+
+ echo $after_widget;
+ }
+
+ /** Everything which should happen when user edit widget at admin panel */
+ function update( $new_instance, $old_instance ) {
+ $instance = $old_instance;
+ $instance['title'] = strip_tags( $new_instance['title'] );
+ $instance['before_widget_content'] = $new_instance['before_widget_content'];
+ $instance['after_widget_content'] = $new_instance['after_widget_content'];
+ $instance['hide_for_logged_in'] = $new_instance['hide_for_logged_in'];
+
+ return $instance;
+ }
+
+ /** Widget edit form at admin panel */
+ function form( $instance ) {
+ /* Set up default widget settings. */
+ $defaults = array( 'title' => '', 'before_widget_content' => '', 'after_widget_content' => '' );
+
+ foreach( $instance as $key => $value )
+ $instance[ $key ] = esc_attr( $value );
+
+ $instance = wp_parse_args( (array)$instance, $defaults );
+ ?>
+
+
+
+
+
+
+
+
+ />
+