_("#mgjp_mv_ir_restore_default").length&&mgjp_mv_options_media.ir_default!==i[0].id?t.append(r):mgjp_mv_options_media.ir_default===i[0].id&&_("#mgjp_mv_ir_restore_default").parent().detach())})}),e.open(),void 0)}).on("click","#mgjp_mv_ir_restore_default",function(){_.post(ajaxurl,{action:"mgjp_mv_restore_default_placeholder_image",nonce:mgjp_mv_options_media.ir_restore_nonce,size:mgjp_mv_options_media.ir_size,args:mgjp_mv_options_media.ir_preview_args},function(e){-1!==e&&0!==e&&e&&(e=JSON.parse(e),a.val(e.id),m.hide().html(e.img).fadeIn(300),_("#mgjp_mv_ir_restore_default").parent().detach(),mgjp_mv_options_media.ir_default=e.id)})})}(jQuery);
\ No newline at end of file
diff --git a/js/mv-attachment-edit-ltIE9.js b/js/mv-attachment-edit-ltIE9.js
new file mode 100644
index 0000000..1079f1c
--- /dev/null
+++ b/js/mv-attachment-edit-ltIE9.js
@@ -0,0 +1,12 @@
+jQuery(function($){
+
+ var hidden = $('.mgjp-mv-permission-select');
+
+ $('#mgjp_mv_protection_toggle').change(function(){
+ if (this.checked)
+ hidden.addClass('mgjp-mv-active');
+ else
+ hidden.removeClass('mgjp-mv-active');
+ }).change();
+
+}(jQuery));
\ No newline at end of file
diff --git a/js/mv-attachment-fields.js b/js/mv-attachment-fields.js
new file mode 100644
index 0000000..38ca982
--- /dev/null
+++ b/js/mv-attachment-fields.js
@@ -0,0 +1,46 @@
+(function ($) {
+
+ var vals = {},
+ postId, permissionsField;
+
+ $('body')
+
+ .on('mgjpMvLoaded', '#mgjp_mv_attachment_fields', function (event, id) {
+ postId = id;
+ permissionsField = $('#mgjp_mv_attachment_permissions_field');
+
+ if (vals.hasOwnProperty(postId)) {
+ $(this).find('.mgjp_mv_protection_toggle, .mgjp_mv_permission_select').each(function () {
+ if (!vals[postId].hasOwnProperty(this.name))
+ return;
+
+ if ('checkbox' === this.type)
+ this.checked = vals[postId][this.name];
+ else
+ this.value = vals[postId][this.name];
+ });
+ }
+
+ $(this).find('.mgjp_mv_protection_toggle').trigger('change', 'mvJustLoaded');
+ })
+
+ .on('change', '.mgjp_mv_protection_toggle', function (event, justLoaded) {
+ duration = 'mvJustLoaded' !== justLoaded ? 400 : 0;
+
+ if (this.checked)
+ permissionsField.slideDown(duration);
+ else
+ permissionsField.slideUp(duration);
+ })
+
+ .on('change', '.mgjp_mv_protection_toggle, .mgjp_mv_permission_select', function (event, justLoaded) {
+ if ('mvJustLoaded' === justLoaded)
+ return;
+
+ if (!vals.hasOwnProperty(postId))
+ vals[postId] = {};
+
+ vals[postId][this.name] = 'checkbox' === this.type ? this.checked : this.value;
+ });
+
+}(jQuery));
\ No newline at end of file
diff --git a/js/mv-image-selector.js b/js/mv-image-selector.js
new file mode 100644
index 0000000..f1eb4e2
--- /dev/null
+++ b/js/mv-image-selector.js
@@ -0,0 +1,100 @@
+(function ($) {
+ 'use strict';
+
+
+ var frame,
+ buttons,
+ container = $('#mgjp_mv_ir_wrap'),
+ preview = $('#mgjp_mv_ir_preview'),
+ input = $('#mgjp_mv_ir_id'),
+ select_btn = $('' + mgjp_mv_options_media.ir_select_btn + '
'),
+ restore_btn = $('' + mgjp_mv_options_media.ir_restore_btn + '
');
+
+
+
+ buttons = [ select_btn ];
+ if (0 < input.val())
+ buttons = [ select_btn.children().text(mgjp_mv_options_media.ir_select_btn2).parent() ];
+ if (mgjp_mv_options_media.ir_default !== input.val())
+ buttons.push(restore_btn);
+
+
+
+ container
+
+ // append the controls
+ .append(buttons)
+
+
+ // register the media frame creator callback
+ .on('click', '#mgjp_mv_ir_select_btn', function (e) {
+
+ e.preventDefault();
+
+ // If the media frame already exists, reopen it.
+ if (frame) {
+ frame.open();
+ return;
+ }
+
+ // Create the media frame.
+ frame = wp.media.frames.mvCustomIR = wp.media({
+ 'id' : 'mgjp_mv_select_placeholder_modal',
+ 'title' : mgjp_mv_options_media.ir_modal_title,
+ 'library' : { 'type': 'image' },
+ 'button' : { 'text': mgjp_mv_options_media.ir_modal_btn }
+ });
+
+ // When an image is selected, run a callback.
+ frame.on('select', function () {
+ var attachment = frame.state().get('selection').toJSON();
+
+ $.get(ajaxurl, {
+ 'action' : 'mgjp_mv_get_attachment_image',
+ 'id' : attachment[0].id,
+ 'size' : mgjp_mv_options_media.ir_size,
+ 'args' : mgjp_mv_options_media.ir_preview_args
+ }, function (html) {
+
+ if (-1 !== html && 0 !== html && html) {
+ input.val(attachment[0].id);
+ preview.hide().html(html).fadeIn(300);
+
+ if (1 > $('#mgjp_mv_ir_restore_default').length && mgjp_mv_options_media.ir_default !== attachment[0].id) {
+ container.append(restore_btn);
+ } else if (mgjp_mv_options_media.ir_default === attachment[0].id) {
+ $('#mgjp_mv_ir_restore_default').parent().detach();
+ }
+
+ }
+ });
+ });
+
+ // Finally, open the modal
+ frame.open();
+
+ })
+
+ // register the restore default callback
+ .on('click', '#mgjp_mv_ir_restore_default', function () {
+
+ // attempt to restore the default
+ $.post(ajaxurl, {
+ 'action' : 'mgjp_mv_restore_default_placeholder_image',
+ 'nonce' : mgjp_mv_options_media.ir_restore_nonce,
+ 'size' : mgjp_mv_options_media.ir_size,
+ 'args' : mgjp_mv_options_media.ir_preview_args
+ }, function (data) {
+
+ if (-1 !== data && 0 !== data && data) {
+ // use json2.js to parse json data
+ data = JSON.parse(data);
+ input.val(data.id);
+ preview.hide().html(data.img).fadeIn(300);
+ $('#mgjp_mv_ir_restore_default').parent().detach();
+ mgjp_mv_options_media.ir_default = data.id;
+ }
+ });
+ });
+
+}(jQuery));
\ No newline at end of file
diff --git a/mv-ajax-actions.php b/mv-ajax-actions.php
new file mode 100644
index 0000000..62cf3b5
--- /dev/null
+++ b/mv-ajax-actions.php
@@ -0,0 +1,220 @@
+
+ * @license GPL-3.0+
+ */
+
+
+// forbid direct calls to this file without wp ajax constants
+if ( ! defined( 'DOING_AJAX' ) || ! DOING_AJAX ) {
+ header( 'Status: 403 Forbidden' );
+ header( 'HTTP/1.1 403 Forbidden' );
+ exit();
+}
+
+
+/**
+ * Get the HTML image element of an attachment via AJAX
+ *
+ * @since 0.8
+ *
+ * @return string HTML image element of attachment file,
+ * if there is any, otherwise return 0
+ */
+function mgjp_mv_get_attachment_image() {
+
+ $id = isset( $_GET['id'] ) ? absint( $_GET['id'] ) : '';
+ $size = isset( $_GET['size'] ) ? $_GET['size'] : 'thumbnail';
+ $icon = isset( $_GET['icon'] ) ? ! ! $_GET['icon'] : false;
+ $args = isset( $_GET['args'] ) ? $_GET['args'] : null;
+
+ $html = wp_get_attachment_image( $id, $size, $icon, $args );
+ if ( empty( $html ) )
+ wp_die( -1 );
+
+ wp_die( $html );
+}
+add_action( 'wp_ajax_mgjp_mv_get_attachment_image', 'mgjp_mv_get_attachment_image' );
+
+
+/**
+ * Attempt to restore the default placeholder image
+ *
+ * @since 0.8
+ *
+ * @return array [0]
+ * [1]
+ */
+function mgjp_mv_restore_default_placeholder_image() {
+
+ if ( ! current_user_can( 'manage_options' ) || ! current_user_can( 'upload_files' ) )
+ wp_die( -1 );
+
+ check_ajax_referer( 'mgjp_mv_ir_restore_default', 'nonce' );
+
+ $size = isset( $_POST['size'] ) ? $_POST['size']: 'thumbnail';
+ $args = isset( $_GET['args'] ) ? $_GET['args'] : null;
+
+ $ir_id = mgjp_mv_load_placeholder_image( true );
+ if ( ! $ir_id )
+ wp_die( -1 );
+
+ wp_die( json_encode( array(
+ 'id' => $ir_id,
+ 'img' => wp_get_attachment_image( $ir_id, $size, false, $args )
+ ) ) );
+}
+add_action( 'wp_ajax_mgjp_mv_restore_default_placeholder_image', 'mgjp_mv_restore_default_placeholder_image' );
+
+
+/**
+ * Render the Media Vault attachment edit fields in
+ * the Media Upload modal
+ *
+ * @since 0.8.9
+ *
+ * @uses mgjp_mv_get_the_permissions()
+ * @uses mgjp_mv_is_protected()
+ * @return array if called in the Media Modal, adds a Media Vault field
+ * to the attachment fields to edit array
+ */
+function mgjp_mv_add_attachment_edit_fields( $form_fields, $post ) {
+
+ // only add the field to the Media Upload Modal, and not the attachment
+ // edit page, we have the Media Vault Protection Settings metabox for
+ // that job
+ if ( get_current_screen() !== null )
+ return $form_fields;
+
+ $permission = get_post_meta( $post->ID, '_mgjp_mv_permission', true );
+
+ $permissions = mgjp_mv_get_the_permissions();
+
+ if ( empty( $permission ) || ! isset( $permissions[$permission] ) )
+ $permission = 'default';
+
+ $default = array(
+ 'default' => array(
+ 'select' => __( 'Use Default Setting', 'media-vault' )
+ )
+ );
+ $permissions = $default + $permissions;
+
+ ob_start(); ?>
+
+
+
+ |
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+ |
+
+ |
+
+
\ No newline at end of file
diff --git a/mv-class-update.php b/mv-class-update.php
new file mode 100644
index 0000000..2ef6070
--- /dev/null
+++ b/mv-class-update.php
@@ -0,0 +1,201 @@
+
+ * @license GPL-3.0+
+ */
+
+
+/**
+ * MGJP_MV_Update class handles the necessary
+ * functions to update the plugin from previous
+ * versions.
+ *
+ * @since 0.8
+ *
+ * @param $version_db string the plugin version as stored in the db
+ * @param $version_cur string the current plugin version
+ * @param $option_key string the option_key for the option row where the
+ * version string is saved in the database
+ */
+class MGJP_MV_Update {
+
+ /**
+ * associative array of version numbers below which
+ * an update is required
+ * array key = version number less than which this update callback must run
+ * array value = the update callback to run
+ *
+ * @since 0.8
+ */
+ var $updates = array(
+ '0.8' => 'update_08',
+ '0.8.5' => 'update_085'
+ );
+
+ /**
+ * Boolean holds whether the page should reload
+ * after all the update scripts have run
+ *
+ * @since 0.8.5
+ */
+ var $force_reload = false;
+
+ /**
+ * Compare the current version with the version updated
+ * from, determine the update functions that are required
+ * to run and then run them sequentially
+ *
+ * @since 0.8
+ *
+ * @param $version_db string the plugin version as stored in the db
+ * @param $version_cur string the current plugin version
+ * @param $option_key string the option_key for the option row where the
+ * version string is saved in the database
+ */
+ function __construct( $version_db, $version_cur, $option_key ) {
+
+ $versions = array_keys( $this->updates );
+
+ foreach ( $versions as $version ) {
+ if ( version_compare( $version_db, $version, 'lt' ) ) {
+ $updates_start = $version;
+ break;
+ }
+ }
+
+ if ( ! isset( $updates_start ) )
+ return update_site_option( $option_key, $version_cur );
+
+ $updates_todo = array_slice(
+ $this->updates,
+ array_search(
+ $updates_start,
+ $versions
+ ) );
+
+ foreach ( $updates_todo as $update ) {
+ if ( is_callable( array( &$this, $update ) ) )
+ call_user_func( array( &$this, $update ) );
+ }
+
+ update_site_option( $option_key, $version_cur );
+
+ if ( ! $this->force_reload )
+ return;
+
+ $current_url = esc_url_raw( '//' . $_SERVER['HTTP_HOST'] . $_SERVER['REQUEST_URI'] );
+
+ if ( headers_sent() )
+ echo '';
+ else
+ wp_redirect( $current_url );
+ exit;
+ }
+
+ /**
+ * Updates plugin data from pre-version 0.8 to version 0.8
+ * Loads the Media Vault place-holder image
+ * which is used from 0.8 onwards to replace
+ * images a user does not have permission to view.
+ * Modifies the db replacing all references to the deprecated
+ * `mgjp_mv_meta` post meta key with the new `_mgjp_mv_permission`
+ * post meta key.
+ *
+ * @since 0.8
+ *
+ * @uses mgjp_mv_load_placeholder_image()
+ */
+ function update_08() {
+
+ // edit existing options
+ $default_permission = get_option( 'mgjp_mv_default_permission', 'logged-in' );
+ delete_option( 'mgjp_mv_default_permission' );
+ add_option( 'mgjp_mv_default_permission', $default_permission, '', 'yes' );
+
+ // add options
+ add_option( 'mgjp_mv_ir', array( 'is_on' => true ), '', 'no' );
+
+ // load place-holder image into Media Library
+ mgjp_mv_load_placeholder_image();
+
+ /** correctly replace old `mgjp_mv_meta` meta with new `_mgjp_mv_permission` meta **/
+ global $wpdb;
+
+ // get all posts with the old 'mgjp_mv_meta' meta key
+ $old = $wpdb->get_results(
+ $wpdb->prepare(
+ "
+ SELECT meta_id, meta_value
+ FROM $wpdb->postmeta
+ WHERE meta_key = %s
+ ",
+ 'mgjp_mv_meta'
+ ), ARRAY_A
+ );
+
+ if ( empty( $old ) )
+ return;
+
+ // distill the meta values which have custom
+ // permissions set on them
+ foreach ( $old as $columns ) {
+ $meta = unserialize( $columns['meta_value'] );
+ if ( ! isset( $meta['permission'] ) )
+ continue;
+ $ids[] = $columns['meta_id'];
+ $data[$meta['permission']][] = $columns['meta_id'];
+ }
+
+ if ( ! isset( $data ) )
+ return delete_post_meta_by_key( 'mgjp_mv_meta' );
+
+ // build the sql update query to convert the old meta system
+ // using 'mgjp_mv_meta' to the new meta system using '_mgjp_mv_permission'
+ $sql_update[] = $wpdb->prepare( "UPDATE `$wpdb->postmeta` SET `meta_key` = %s, `meta_value` = CASE", '_mgjp_mv_permission' );
+ foreach ( $data as $meta_value => $meta_ids ) {
+ if ( isset( $meta_ids[1] ) )
+ $sql_update[] = $wpdb->prepare( "WHEN `meta_id` IN (" . implode( ', ', array_fill( 0, count( $meta_ids ), '%d' ) ) . ") THEN %s", array_merge( $meta_ids, array( $meta_value ) ) );
+ else
+ $sql_update[] = $wpdb->prepare( "WHEN `meta_id` = %d THEN %s", $meta_ids[0], $meta_value );
+ }
+ $sql_update[] = $wpdb->prepare( "ELSE %s END WHERE `meta_id` IN (" . implode( ', ', array_fill( 0, count( $ids ), '%d' ) ) . ")", array_merge( array( 'logged-in' ), $ids ) );
+
+ // run the update query
+ $wpdb->query( implode( ' ', $sql_update ) );
+
+ // and delete all other references to 'mgjp_mv_meta'
+ delete_post_meta_by_key( 'mgjp_mv_meta' );
+ }
+
+ /**
+ * Verifies that the rewrite rules required for Media Vault
+ * to function correctly are set and functioning. If they are
+ * it enables all the plugin's functionality and sets the
+ * force_reload flag for the update class
+ *
+ * @since 0.8.5
+ *
+ * @uses mgjp_mv_check_rewrite_rules()
+ */
+ function update_085() {
+
+ if ( ! mgjp_mv_check_rewrite_rules() )
+ return;
+
+ update_site_option( 'mgjp_mv_enabled', true );
+
+ $this->force_reload = true;
+
+ }
+
+} // END of class MGJP_MV_Update
+
+
+?>
\ No newline at end of file
diff --git a/mv-extra-activation-steps.php b/mv-extra-activation-steps.php
new file mode 100644
index 0000000..89199a7
--- /dev/null
+++ b/mv-extra-activation-steps.php
@@ -0,0 +1,253 @@
+
+ * @license GPL-3.0+
+ */
+
+
+
+/**
+ * Required to verify rewrite rules are functioning
+ * correctly when the plugin is not fully enabled
+ *
+ * @since 0.8.5
+ */
+function mgjp_mv_check_rewrite_rules_answer() {
+ if ( isset( $_GET['mgjp_mv_file'] ) && ! empty( $_GET['mgjp_mv_file'] )
+ && isset( $_GET['mgjp_mv_rewrite_test'] ) && $_GET['mgjp_mv_rewrite_test'] )
+ die( 'pass' );
+}
+add_action( 'init', 'mgjp_mv_check_rewrite_rules_answer', 0 );
+
+
+/**
+ * Display a notice in WP admin to the Admins to prompt
+ * them to do the extra steps to fully activate the
+ * Media Vault plugin
+ *
+ * @since 0.8.5
+ */
+function mgjp_mv_extra_activation_steps_notice() {
+
+ // only show to admins on single site install or
+ // network admins on multisite install
+ if ( ! current_user_can( 'install_plugins' ) )
+ return;
+
+ $screen = get_current_screen();
+ if ( ! in_array( $screen->id, array( 'plugins-network', 'plugins', 'options-media', 'upload', 'media', 'attachment' ) ) )
+ return;
+
+ mgjp_mv_admin_notice(
+ '' . __( 'Almost there!', 'media-vault' ) . ' - ' . __( 'Because of your setup, Media Vault requires some extra steps before it is enabled. Follow the instructions and then go protect some files!', 'media-vault' ),
+ array(
+ 'link' => network_admin_url( 'plugins.php?page=mgjp-mv-eas' ),
+ 'text' => __( 'Fully Activate Media Vault', 'media-vault' )
+ )
+ );
+
+}
+add_action( 'admin_notices', 'mgjp_mv_extra_activation_steps_notice' );
+add_action( 'network_admin_notices', 'mgjp_mv_extra_activation_steps_notice' );
+
+
+/**
+ * Adds an admin page to the plugins admin menu dropdown.
+ * The page displays instructions to admins to fully activate
+ * the Media Vault plugin
+ *
+ * @since 0.8.5
+ */
+function mgjp_mv_extra_activation_steps_page() {
+
+ if ( is_multisite() && ! is_network_admin() )
+ return;
+
+ add_submenu_page(
+ 'plugins.php',
+ __( 'Media Vault Activation Helper', 'media-vault' ),
+ __( 'Media Vault Activation', 'media-vault' ),
+ 'install_plugins',
+ 'mgjp-mv-eas',
+ 'mgjp_mv_render_extra_activation_steps_page'
+ );
+
+}
+add_action( 'admin_menu', 'mgjp_mv_extra_activation_steps_page' );
+add_action( 'network_admin_menu', 'mgjp_mv_extra_activation_steps_page' );
+
+
+/**
+ * Render the page
+ *
+ * @since 0.8.5
+ */
+function mgjp_mv_render_extra_activation_steps_page() {
+
+ wp_enqueue_style( 'mgjp-mv-eas-page', plugins_url( 'css/mv-eas-page.css', __FILE__ ), 'all', null );
+
+ global $is_apache;
+
+ $home_path = get_home_path();
+ $rewrite_rules_enabled = mgjp_mv_check_rewrite_rules();
+ $eas_supported = $is_apache;
+
+ if ( isset( $_POST['enable_mediavault'] ) ) {
+ if ( $rewrite_rules_enabled ) {
+ check_admin_referer( 'mgjp_mv_enable_media_vault' );
+ ?>
+
+
+ ' . esc_html__( 'files', 'media-vault' ) . '' ); ?>
+
+
+
+
+ ; ?>)
+
+
+
+
+
+
+ ' . esc_html__( 'Media files', 'media-vault' ) . '', '' . esc_html__( 'uploading new files', 'media-vault' ) . '', '' . esc_html__( 'settings', 'media-vault' ) . '' ); ?>
+
+
+
+
+
+ ' . esc_html__( 'support forum', 'media-vault' ) . '' ); ?>
+
+
+
+
+
+
+
+ Apache Server' );
+
+ if ( is_multisite() )
+ $errors['Multisite'] = sprintf( esc_html_x( 'you are running a %s installation', 'as in: "you are on a WordPress Multisite installation"', 'media-vault' ), 'WordPress MultiSite' );
+
+ if ( ! isset( $errors ) && ! get_option( 'permalink_structure' ) )
+ $errors['Nopretty'] = sprintf( esc_html_x( 'you do not have %s enabled', 'as in: "you do not have Pretty Permalinks enabled"', 'media-vault' ), '' . esc_html__( 'Pretty Permalinks' ) . '' );
+
+ if ( ! isset( $errors ) && ! is_writable( $home_path . '.htaccess' ) )
+ $errors['Nonwritable'] = sprintf( esc_html__( 'the site\'s %s file is not writable', 'as in: "the site\'s .htaccess file is not writable "', 'media-vault' ), '.htaccess' );
+
+ if ( isset( $errors ) ) {
+
+ $error_txt = '';
+ $last_error = array_pop( $errors );
+ if ( count( $errors ) > 0 )
+ $error_txt .= implode( ', ', $errors ) . ' ' . esc_html__( 'and', 'media-vault' ) . ' ';
+ $error_txt .= $last_error . ',';
+
+ printf( esc_html_x( 'However, because %s the plugin was unable to successfully update the rewrite rules for this site programmatically.', 'as in: "Because *you are running WordPress MultiSite* Media Vault cannot do it automatically"', 'media-vault' ), $error_txt );
+
+ } else {
+
+ esc_html_e( 'However for some reason the plugin was unable to successfully update the rewrite rules for this site.', 'media-vault' );
+
+ }
+
+ echo ' ';
+
+ echo wp_kses( __( 'In order to manually fully activate Media Vault on your setup please carefully follow the instructions below:', 'media-vault' ), array( 'strong' => array() ), false ); ?>
+
+
+
+
+
+ -
+
+ !: ' . esc_html__( 'requires' ) . '', 'mod_rewrite', 'Apache' ); ?>
+
+
+
+
+ -
+
+
+
+ .htaccess';
+ $rewrite_file_loc = '' . $home_path . '';
+ $rewrite_rule_loc = sprintf( wp_kses( __( 'in the WordPress rewrite block (the WordPress block usually starts with %s and ends with %s), just below the line reading %s', 'media-vault' ), array( 'strong' => array() ), false ), '# BEGIN WordPress', '# END WordPress', 'RewriteRule ^index\.php$ - [L]' );
+
+ if ( ! is_multisite() && ! get_option( 'permalink_structure' ) ) {
+
+ $rewrite_rule_loc = __( 'above any other rewrite rules in the file.', 'media-vault' );
+
+ printf( wp_kses( __( 'Media Vault works best with %s enabled, so it is strongly recommended that you %s! If, however, you really really want to use ugly permalinks, then...', 'media-vault' ), array( 'i' => array() ), false ), '' . esc_html__( 'Pretty Permalinks', 'media-vault' ) . '', '' . esc_html__( 'enable them', 'media-vault' ) . '' );
+ echo "\n";
+ }
+
+ printf( esc_html__( 'Add the following to your %s file in %s', 'media-vault' ), $rewrite_file_type, $rewrite_file_loc );
+ echo ' ', $rewrite_rule_loc;
+ ?>
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+ -
+
+
+
+
+
+
+
+
+
+
+
+
+ At least one Media Vault rewrite rule is still functional. Media Vault will not be properly deactivated if the rewrite rules are not removed because they will cause problems when attempting to access files that are in the Media Vault protected folders.', 'media-vault' ), array( 'em' => array(), 'strong' => array() ) ); ?>
+
+
+
+
+
+
+
+
+
+
+
+
+ Apache Server' );
+
+ if ( is_multisite() )
+ $errors['Multisite'] = sprintf( esc_html_x( 'you are running a %s installation', 'as in: "you are on a WordPress Multisite installation"', 'media-vault' ), 'WordPress MultiSite' );
+
+ if ( ! isset( $errors ) && ! get_option( 'permalink_structure' ) )
+ $errors['Nopretty'] = sprintf( esc_html_x( 'you do not have %s enabled', 'as in: "you do not have Pretty Permalinks enabled"', 'media-vault' ), '' . esc_html__( 'Pretty Permalinks' ) . '' );
+
+ if ( ! isset( $errors ) && ! is_writable( $home_path . '.htaccess' ) )
+ $errors['Nonwritable'] = sprintf( esc_html__( 'the site\'s %s file is not writable', 'as in: "the site\'s .htaccess file is not writable "', 'media-vault' ), '.htaccess' );
+
+ if ( isset( $errors ) ) {
+
+ $error_txt = '';
+ $last_error = array_pop( $errors );
+ if ( count( $errors ) > 0 )
+ $error_txt .= implode( ', ', $errors ) . ' ' . esc_html__( 'and', 'media-vault' ) . ' ';
+ $error_txt .= $last_error . ',';
+
+ printf( esc_html_x( 'However, because %s the plugin was unable to successfully update the rewrite rules for this site programmatically.', 'as in: "Because *you are running WordPress MultiSite* Media Vault cannot do it automatically"', 'media-vault' ), $error_txt );
+
+ } else {
+
+ esc_html_e( 'However for some reason the plugin was unable to successfully update the rewrite rules for this site.', 'media-vault' );
+
+ }
+
+ printf( wp_kses( __( 'In order to manually fully %s Media Vault on your setup please carefully follow the instructions below:', 'media-vault' ), array( 'strong' => array() ), false ), 'deactivate' );
+ ?>
+
+
+
+ temporarily deactivate Media Vault and do not mind leaving the rewrite rules functioning, simply click the "Temporarily Deactivate Media Vault" button. However, if you are planning on permanently deactivating Media Vault make sure to follow the steps below, otherwise you may experience problems when trying to access attachment files still in the Media Vault protected folders.', 'media-vault' ), array( 'strong' => array() ) ); ?>
+
+
+
+
+
+ -
+
+
+ .htaccess';
+ $rewrite_file_loc = '' . $home_path . '';
+
+ printf( wp_kses( __( 'From your %s file in %s, remove all the code between the lines starting with %s and ending with %s.', 'media-vault' ), array( 'strong' => array() ) ), $rewrite_file_type, $rewrite_file_loc, '# Media Vault Rewrite Rules', '# Media Vault Rewrite Rules End' );
+ ?>
+
+
+
+ ' . esc_html__( 'support forum', 'media-vault' ) . '' ); ?>
+
+
+
+
+ -
+
+
+
+
+
+
+
+
+
You cannot directly access files of this type in this directory on this server. Please contact the website administrator.' ) );
+ }
+
+ //---Permission Checks-----------------------------------------------//
+
+ $file_info = pathinfo( $rel_file );
+
+ // check if file is protected by checking
+ // if it is in the protected folder before
+ // doing any permission checks
+ if ( 0 === stripos( $file_info['dirname'] . '/', mgjp_mv_upload_dir( '/', true ) ) ) {
+
+ // disable caching of this page by caching plugins ------//
+ if ( ! defined( 'DONOTCACHEPAGE' ) )
+ define( 'DONOTCACHEPAGE', 1 );
+
+ if ( ! defined( 'DONOTCACHEOBJECT' ) )
+ define( 'DONOTCACHEOBJECT', 1 );
+
+ if ( ! defined( 'DONOTMINIFY' ) )
+ define( 'DONOTMINIFY', 1 );
+
+ //-------------------------------------------------------//
+
+ // try and get attachment id from url -------------------//
+ global $wpdb;
+ $attachments = $wpdb->get_results(
+ $wpdb->prepare(
+ "
+ SELECT post_id, meta_value
+ FROM $wpdb->postmeta
+ WHERE meta_key = %s
+ AND meta_value LIKE %s
+ ",
+ '_wp_attachment_metadata',
+ '%' . $file_info['basename'] . '%'
+ ), ARRAY_A
+ );
+
+ $attachment_id = false;
+ foreach ( $attachments as $attachment ) {
+
+ $meta_value = unserialize( $attachment['meta_value'] );
+
+ if ( ltrim( dirname( $meta_value['file'] ), '/' ) == ltrim( $file_info['dirname'], '/' ) ) {
+ $attachment_id = $attachment['post_id'];
+ break;
+ }
+ }
+ // ------------------------------------------------------//
+
+ if ( ! $permission = mgjp_mv_get_the_permission( $attachment_id ) )
+ $permission = get_option( 'mgjp_mv_default_permission', 'logged-in' );
+
+ $permissions = mgjp_mv_get_the_permissions();
+
+ // permission set up error detection
+ $standard_error_txt = ' ' . esc_html__( 'Therefore for safety and privacy reasons this file is unavailable. Please contact the website administrator.', 'media-vault' ) . '←' . esc_html__( 'Return to homepage', 'media-vault' ) .'
';
+
+ if ( ! isset( $permissions[$permission] ) )
+ wp_die( __( 'The permissions set for this file are not recognized.', 'media-vault' ) . $standard_error_txt );
+
+ if ( ! isset( $permissions[$permission]['logged_in'] ) )
+ $errors[] = 'logged_in';
+ if ( ! isset( $permissions[$permission]['cb'] ) )
+ $errors[] = 'cb';
+ if ( isset( $errors ) ) {
+ $error_txt = __( 'The permissions set for this file have left the following important parameters undefined:', 'media-vault' )
+ . '- \'' . implode( '\'
- \'', $errors ) . '\'
'
+ . '' . $standard_error_txt . '
';
+ wp_die( $error_txt );
+ }
+
+ if ( $permissions[$permission]['logged_in'] )
+ is_user_logged_in() || auth_redirect(); // using is_user_logged_in is lighter than using just auth_redirect
+
+ if ( false !== $permissions[$permission]['cb'] ) {
+
+ if ( ! is_callable( $permissions[$permission]['cb'] ) )
+ wp_die( __( 'The permission checking function set in this file\'s permissions is not callable.', 'media-vault' ) . $standard_error_txt );
+
+ $permission_check = call_user_func_array( $permissions[$permission]['cb'], array( $attachment_id, $rel_file, $file ) );
+
+ if ( is_wp_error( $permission_check ) )
+ wp_die( $permission_check->get_error_message() . $standard_error_txt );
+
+ if ( true !== $permission_check )
+ wp_die( __( 'You do not have sufficient permissions to view this file.', 'media-vault' ) . $standard_error_txt );
+ }
+
+ } // end of permission checks
+
+ //-------------------------------------------------------------------//
+
+ header( 'Content-Type: ' . $mimetype ); // always send this
+ if ( false === strpos( $_SERVER['SERVER_SOFTWARE'], 'Microsoft-IIS' ) )
+ header( 'Content-Length: ' . filesize( $file ) );
+
+ if ( 'safeforce' !== $action ) {
+ //--OPEN FILE IN BROWSER functions-------------//
+
+ $last_modified = gmdate( 'D, d M Y H:i:s', filemtime( $file ) );
+ $etag = '"' . md5( $last_modified ) . '"';
+ header( "Last-Modified: $last_modified GMT" );
+ header( 'ETag: ' . $etag );
+ header( 'Cache-Control: no-store, no-cache, must-revalidate' ); // HTTP 1.1.
+ header( 'Pragma: no-cache' ); // HTTP 1.0.
+ header( 'Expires: Thu, 01 Dec 1994 16:00:00 GMT' ); // Proxies
+
+ // Support for Conditional GET
+ $client_etag = isset( $_SERVER['HTTP_IF_NONE_MATCH'] ) ? stripslashes( $_SERVER['HTTP_IF_NONE_MATCH'] ) : false;
+
+ if( ! isset( $_SERVER['HTTP_IF_MODIFIED_SINCE'] ) )
+ $_SERVER['HTTP_IF_MODIFIED_SINCE'] = false;
+
+ $client_last_modified = trim( $_SERVER['HTTP_IF_MODIFIED_SINCE'] );
+ // If string is empty, return 0. If not, attempt to parse into a timestamp
+ $client_modified_timestamp = $client_last_modified ? strtotime( $client_last_modified ) : 0;
+
+ // Make a timestamp for our most recent modification...
+ $modified_timestamp = strtotime( $last_modified );
+
+ if ( ( $client_last_modified && $client_etag )
+ ? ( ( $client_modified_timestamp >= $modified_timestamp ) && ( $client_etag == $etag ) )
+ : ( ( $client_modified_timestamp >= $modified_timestamp ) || ( $client_etag == $etag ) )
+ ) {
+ status_header( 304 );
+ exit;
+ }
+
+ } else {
+ //--FORCE DOWNLOAD Functions-----------------------//
+
+ // required for IE, otherwise Content-disposition is ignored
+ if( ini_get( 'zlib.output_compression' ) )
+ ini_set( 'zlib.output_compression', 'Off' );
+
+ header( 'Pragma: public' ); // required
+ header( 'Expires: 0' );
+ header( 'Cache-Control: must-revalidate, post-check=0, pre-check=0' );
+ header( 'Cache-Control: private', false ); // required for certain browsers
+ header( 'Content-Disposition: attachment; filename="' . $file_info['basename'] . '";' );
+ header( 'Content-Transfer-Encoding: binary' );
+
+ }
+
+ // If we made it this far, just serve the file
+ if ( ob_get_length() )
+ ob_clean();
+
+ flush();
+
+ readfile( $file );
+ exit;
+}
\ No newline at end of file
diff --git a/mv-metaboxes.php b/mv-metaboxes.php
new file mode 100644
index 0000000..d7a85fe
--- /dev/null
+++ b/mv-metaboxes.php
@@ -0,0 +1,178 @@
+
+ * @license GPL-3.0+
+ */
+
+
+/** Register custom metabox **/
+add_meta_box(
+ 'mgjp_mv_protection_metabox',
+ __( 'Media Vault Protection Settings', 'media-vault' ),
+ 'mgjp_mv_render_attachment_protection_metabox',
+ 'attachment',
+ 'side'
+);
+
+
+/**
+ * Enqueue metabox styles in head of attachment
+ * edit page
+ *
+ * @since 0.8.9
+ */
+function mgjp_mv_attachment_protection_metabox_styles_and_scripts() {
+
+ $screen = get_current_screen();
+ if ( 'attachment' !== $screen->id )
+ return;
+
+ // enqueue metabox styles
+ wp_enqueue_style( 'mgjp-mv-att-edit-css', plugins_url( 'css/mv-attachment-edit.css', __FILE__ ), 'all', null );
+
+}
+add_action( 'admin_enqueue_scripts', 'mgjp_mv_attachment_protection_metabox_styles_and_scripts' );
+
+
+/**
+ * Rendering function for the Media Vault attachment
+ * metabox
+ *
+ * @since 0.7.1
+ *
+ * @uses mgjp_mv_get_the_permissions()
+ * @uses mgjp_mv_is_protected()
+ * @param $post object WP_Post object of current attachment
+ */
+function mgjp_mv_render_attachment_protection_metabox( $post ) {
+
+
+ wp_nonce_field( 'mgjp_mv_protection_metabox', 'mgjp_mv_protection_metabox_nonce' );
+
+
+ $permission = get_post_meta( $post->ID, '_mgjp_mv_permission', true );
+
+ $permissions = mgjp_mv_get_the_permissions();
+
+ if ( empty( $permission ) || ! isset( $permissions[$permission] ) )
+ $permission = 'default';
+
+ $default = array(
+ 'default' => array(
+ 'select' => __( 'Use Default Setting', 'media-vault' )
+ )
+ );
+ $permissions = $default + $permissions; ?>
+
+
+
+
+ ID ) ); ?>>
+
+
+
+
+
+
+
+
+
+
\ No newline at end of file
diff --git a/mv-options-media-library.php b/mv-options-media-library.php
new file mode 100644
index 0000000..932931d
--- /dev/null
+++ b/mv-options-media-library.php
@@ -0,0 +1,294 @@
+
+ * @license GPL-3.0+
+ */
+
+
+
+/**
+ * Remove WP List Table row actions in the Media Library List Table
+ * if the attachment is protected and the user is not permitted to access it
+ *
+ * @since 0.7
+ *
+ * @uses mgjp_mv_check_user_permitted() returns true if user is permitted to access
+ * specified attachment
+ * @param $actions array Array of row actions available for specific attachment
+ * @param $post object WP_Post object of currently rendering attachment
+ * @return array Return row actions untouched if user permitted to access attachment
+ * @return array Empty array if no access permitted
+ */
+function mgjp_mv_modify_media_library_row_actions( $actions, $post ) {
+
+ // check if current user is permitted to access the post
+ if ( ! mgjp_mv_check_user_permitted( $post->ID ) )
+ return array( esc_html__( 'You do not have permission to access this attachment', 'media-vault' ) );
+
+ return $actions;
+}
+add_filter( 'media_row_actions', 'mgjp_mv_modify_media_library_row_actions', 10, 2 );
+
+
+/**
+ * Register Media Vault custom column to WP Media Library (wp-admin/upload.php)
+ * list table.
+ *
+ * @since 0.4
+ *
+ * @param array $columns array of columns for WP Media List Table
+ * @return array Array of columns, including custom column, for WP Media List Table
+ */
+function mgjp_mv_register_media_library_custom_column( $columns ) {
+
+ $columns['mgjp_mv_info'] = 'Media Vault';
+
+ return $columns;
+}
+add_filter( 'manage_upload_columns', 'mgjp_mv_register_media_library_custom_column' );
+
+
+/**
+ * Render function for Media Vault custom column in WP Media Library list table.
+ *
+ * @since 0.4
+ *
+ * @uses mgjp_mv_get_the_permissions()
+ * @param $column_name string name-id of current column
+ * @param $post_id int ID of post being evaluated
+ */
+function mgjp_mv_render_media_library_custom_column( $column_name, $post_id ) {
+
+ if ( 'mgjp_mv_info' != $column_name )
+ return;
+
+ if ( ! $permission = mgjp_mv_get_the_permission( $post_id ) )
+ return;
+
+ $permissions = mgjp_mv_get_the_permissions();
+
+ $permission = isset( $permissions[$permission] ) ? $permissions[$permission] : '';
+
+ $description = isset( $permission['description'] ) && ! empty( $permission['description'] ) ?
+ esc_html( $permission['description'] ) :
+ ''
+ . esc_html__( 'Undetermined! Permissions have been misconfigured for this attachment!', 'media-vault' )
+ . ''; ?>
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+ id ) {
+
+ if ( isset( $_REQUEST['mgjp-mv-protected'] ) && (int) $_REQUEST['mgjp-mv-protected'] ) {
+ $message = sprintf(
+ _n(
+ 'Media file is now protected.', //singular
+ '%s media files are now protected.', //plural
+ $_REQUEST['mgjp-mv-protected'],
+ 'media-vault'
+ ), number_format_i18n( $_REQUEST['mgjp-mv-protected'] )
+ );
+ echo '' . esc_html( $message ) . '
' . esc_html( $message ) . '
' . $move->get_error_message() );
+
+ $protected++;
+ }
+
+ $location = add_query_arg( array(
+ 'mgjp-mv-protected' => $protected,
+ 'ids' => join( ',', $media_ids )
+ ), $location );
+ break;
+
+ case 'mgjp-mv-unprotect':
+ if ( ! current_user_can( 'edit_posts' ) )
+ wp_die( __( 'You are not allowed to remove attachments from the protected directory.', 'media-vault' ) );
+
+ $unprotected = 0;
+ foreach ( (array) $media_ids as $media_id ) {
+
+ if ( ! current_user_can( 'edit_post', $media_id ) )
+ continue;
+
+ if ( ! mgjp_mv_is_protected( $media_id ) )
+ continue;
+
+ $move = mgjp_mv_move_attachment_from_protected( $media_id );
+
+ if ( is_wp_error( $move ) )
+ wp_die( __( 'There was an error moving the files from the protected directory.', 'media-vault' ) . '
' . $move->get_error_message() );
+
+ delete_post_meta( $media_id, '_mgjp_mv_permission' );
+
+ $unprotected++;
+ }
+
+ $location = add_query_arg( array(
+ 'mgjp-mv-unprotected' => $unprotected,
+ 'ids' => join( ',', $media_ids )
+ ), $location );
+ break;
+
+ default: return;
+}
+
+$location = remove_query_arg( array( 'action', 'action2', 'media' ), $location );
+
+wp_redirect( $location );
+exit();
\ No newline at end of file
diff --git a/mv-options-media-new.php b/mv-options-media-new.php
new file mode 100644
index 0000000..a4bc479
--- /dev/null
+++ b/mv-options-media-new.php
@@ -0,0 +1,139 @@
+
+ * @license GPL-3.0+
+ */
+
+
+/**
+ * Add custom styles to the media upload page
+ *
+ * @since 0.2
+ */
+function mgjp_mv_media_new_options_css() {
+
+ $screen = get_current_screen();
+ if ( 'media' == $screen->base && 'add' == $screen->action )
+ wp_enqueue_style( 'mgjp-mv-media-new-styles', plugins_url( 'css/mv-media-new.css', __FILE__ ), 'all', null );
+
+}
+add_action( 'admin_enqueue_scripts', 'mgjp_mv_media_new_options_css' );
+
+
+/**
+ * Js for uploads page updates a plupload var controlling
+ * whether an upload is moved to the protected directory
+ * or not.
+ *
+ * @since 0.2
+ */
+function mgjp_mv_media_new_options_js() { ?>
+
+
+
+ base && 'add' == $screen->action ) : ?>
+
+
+
+ base && 'add' == $screen->action ) : ?>
+
+
+
+
+
+
+
+
\ No newline at end of file
diff --git a/mv-options-media-vault.php b/mv-options-media-vault.php
new file mode 100644
index 0000000..bfe3ed5
--- /dev/null
+++ b/mv-options-media-vault.php
@@ -0,0 +1,309 @@
+
+ * @license GPL-3.0+
+ */
+
+
+/** Register plugin settings **/
+register_setting( 'media', 'mgjp_mv_default_permission' );
+register_setting( 'media', 'mgjp_mv_options', 'mgjp_mv_options_sanitize' );
+register_setting( 'media', 'mgjp_mv_ir', 'mgjp_mv_ir_sanitize' );
+
+
+add_settings_section(
+ 'mgjp_mv_general_settings',
+ null,
+ 'mgjp_mv_render_general_settings_info_txt',
+ 'media'
+);
+
+
+add_settings_field(
+ 'default_permission',
+ __( 'Default Protected File Permissions', 'media-vault' ),
+ 'mgjp_mv_render_default_permission_field',
+ 'media',
+ 'mgjp_mv_general_settings',
+ array( 'label_for' => 'mgjp_mv_default_permission' )
+);
+
+add_settings_field(
+ 'default_upload_protection',
+ __( 'Default Upload Protection', 'media-vault' ),
+ 'mgjp_mv_render_checkbox_field',
+ 'media',
+ 'mgjp_mv_general_settings',
+ array(
+ 'label_for' => 'mgjp_mv_default_upload_protection',
+ 'option' => 'mgjp_mv_options',
+ 'option_id' => 'default_upload_protection',
+ 'value' => 'on',
+ 'desc' => __( 'Set media file upload protection to be enabled by default when uploading new files through the Add New Media page in the WordPress Admin.', 'media-vault' )
+ )
+);
+
+add_settings_field(
+ 'place_holder_img',
+ __( 'Image Placeholder', 'media-vault' ),
+ 'mgjp_mv_render_place_holder_img_field',
+ 'media',
+ 'mgjp_mv_general_settings'
+);
+
+
+/**
+ * Sanitization function for mgjp_mv_option settings
+ *
+ * @since 0.8
+ *
+ * @param $input array of options from settings page
+ * @return array sanitized array of mgjp_mv_options
+ */
+function mgjp_mv_options_sanitize( $input ) {
+
+ $options = get_option( 'mgjp_mv_options' );
+
+ $options['default_upload_protection'] = isset( $input['default_upload_protection'] ) ? 'on' : 'off';
+
+ return $options;
+}
+
+
+/**
+ * Sanitization function for mgjp_mv_ir settings
+ *
+ * @since 0.8
+ *
+ * @param $input array of options from settings page
+ * @return array sanitized array of mgjp_mv_ir options
+ */
+function mgjp_mv_ir_sanitize( $input ) {
+
+ $options = get_option( 'mgjp_mv_ir' );
+
+ $options['is_on'] = isset( $input['is_on'] ) ? ! ! $input['is_on'] : false;
+
+ if ( isset( $input['id'] ) && wp_attachment_is_image( absint( $input['id'] ) ) )
+ $options['id'] = absint( $input['id'] );
+ else
+ add_settings_error(
+ 'mgjp_mv_ir',
+ 'invalid-attachment-id',
+ __( 'The Media Vault placeholder image ID must be the ID of an existing image attachment in your media library. Please select a different Media Vault placeholder image.', 'media-vault' )
+ );
+
+ if ( isset( $input['default'] ) && wp_attachment_is_image( absint( $input['default'] ) ) )
+ $options['default'] = absint( $input['default'] );
+
+ return $options;
+}
+
+
+/**
+ * Render the General Settings info txt
+ *
+ * @since 0.4
+ */
+function mgjp_mv_render_general_settings_info_txt() {
+
+ echo 'Media Vault
';
+ echo '';
+ esc_html_e( 'Media Vault is a plugin that allows you to protect media files in your uploads folder.', 'media-vault' );
+ echo ' ';
+ esc_html_e( 'Here you can set options for:', 'media-vault' );
+ echo '
';
+
+}
+
+
+/**
+ * Render a generic single checkbox field, supports options
+ * saved in an array *for options saved in an array remember
+ * to always manually handle sanitizing the saved settings
+ *
+ * @since 0.8
+ *
+ * @param array Array of arguments passed the specific settings field
+ */
+function mgjp_mv_render_checkbox_field( $args ) {
+
+ $id = isset( $args['label_for'] ) ? $args['label_for'] : ( isset( $args['id'] ) ? $args['id'] : '' );
+ $id = esc_attr( $id );
+
+ $option = get_option( $args['option'] );
+ $name = $args['option'];
+ if ( isset( $args['option_id'] ) ) {
+ $option = isset( $option[$args['option_id']] ) ? $option[$args['option_id']] : null;
+ $name = $args['option'] . '[' . $args['option_id'] . ']';
+ }
+
+ $value = isset( $args['value'] ) ? $args['value'] : true;
+
+ ?>
+
+
+
+
+
+
+
+
+
+
+ __( 'Media Vault selected placeholder image', 'media-vault' ),
+ 'title' => __( 'Selected placeholder', 'media-vault' )
+ );
+
+ wp_localize_script( 'mgjp-image-selector', 'mgjp_mv_options_media', array(
+ 'ir_select_btn' => __( 'Select Placeholder', 'media-vault' ),
+ 'ir_select_btn2' => __( 'Change Placeholder', 'media-vault' ),
+ 'ir_restore_btn' => __( 'Restore the Default', 'media-vault' ),
+ 'ir_modal_title' => __( 'Select image placeholder for images that have been restricted.', 'media-vault' ),
+ 'ir_modal_btn' => __( 'Use image as placeholder', 'media-vault' ),
+ 'ir_image_args' => $image_args,
+ 'ir_default' => isset( $ir['default'] ) ? $ir['default'] : -1,
+ 'ir_size' => array( 100, 80 ),
+ 'ir_restore_nonce' => wp_create_nonce( 'mgjp_mv_ir_restore_default' )
+ ) );
+
+ ?>
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+