download_post->is_featured(), false ) . ' />
' . esc_html__( 'Mark this download as featured. Used by shortcodes and widgets.', 'download-monitor' ) . '
';
echo '
download_post->is_members_only(), false ) . ' />
' . esc_html__( 'Only logged in users will be able to access the file via a download link if this is enabled.', 'download-monitor' ) . '
';
echo '
download_post->is_redirect_only(), false ) . ' />
' . wp_kses_post( __( 'Don\'t force download. If the dlm_uploads folder is protected you may need to move your file.', 'download-monitor' ) ) . 'download_post->is_new_tab(), false ) . ' />
service( 'file_manager' )->get_secure_path( $file_path );
// If remote file don't check for allowed path.
if ( $remote_file ) {
continue;
}
$f_path = str_replace( DLM_Utils::basename( $file_path ), '', $file_path );
// Check if the path is in the allowed paths and has not been added to the new paths array.
if ( $restriction && ! in_array( $f_path, $new_paths ) ) {
$new_paths[] = $f_path;
}
}
// If there are new paths, display a notice.
if ( ! empty( $new_paths ) ) {
$html = '';
// Default notice to be shown.
$notice = sprintf(
esc_html__( 'You\'re trying to serve files from your server that are not in the enabled allowed paths. If you want to learn more about this, %1$sclick here%2$s', 'download-monitor' ),
'',
''
);
if ( is_multisite() && ! current_user_can( 'manage_network' ) ) {
// Notice to be shown if the installation is a multisite.
$notice = sprintf(
esc_html__(
'You\'re trying to serve files from your server that are not in the enabled allowed paths. Please contact the network administrator to add or enable the path(s) for your website.
If you want to learn more about this, %1$sclick here%2$s',
'download-monitor'
),
'',
''
);
}
// Cycle through new paths and display them.
foreach ( $new_paths as $new_path ) {
$exists = false;
// Check if the path is already in the allowed paths but is disabled.
foreach ( $allowed_paths as $a_path ) {
if ( str_replace( DIRECTORY_SEPARATOR, '/', $a_path['path_val'] ) === str_replace( DIRECTORY_SEPARATOR, '/', $new_path ) ) {
$exists = true;
}
}
// If it is a multisite installation, only the network admin can add paths.
if ( is_multisite() && ! current_user_can( 'manage_network' ) ) {
$html .= '
';
// If the path is not in the allowed paths display a button to add it.
if ( ! $exists ) {
$html .= esc_html__( 'Recommended path:', 'download-monitor' ) .
' ' . esc_html( $new_path ) . '
';
$html .= '
';
$html .= esc_html__( 'This will add the download path to the "Approved Download Path" list. ', 'download-monitor' );
} else { // If the path is in the allowed paths but is disabled display a button to enable it.
$html .= esc_html__( 'Path:', 'download-monitor' ) .
' ' . esc_html( $new_path ) . '
';
$html .= '
';
$html .= esc_html__( 'This will enable the download path from the "Approved Download Path" list. ', 'download-monitor' );
}
$html .= '
';
}
}
echo '
';
echo '
' . wp_kses_post( $notice ) . '
';
echo wp_kses_post( $html );
echo '
';
}
}
?>
download_post );
?>
save_meta_boxes( $post_id, $post );
}
}
// Force draft and explicitly clear the title so WordPress doesn't show "Auto Draft".
wp_update_post( array( 'ID' => $post_id, 'post_status' => 'draft', 'post_title' => '' ) );
return add_query_arg( 'dlm_error', 'no_title', remove_query_arg( 'message', $location ) );
}
/**
* Show error notice — priority 8, before DLM removes admin_notices at priority 9.
*/
public function notice_no_title() {
$screen = get_current_screen();
if ( ! $screen || 'dlm_download' !== $screen->post_type ) {
return;
}
if ( isset( $_GET['dlm_error'] ) && 'no_title' === $_GET['dlm_error'] ) {
echo '
' . esc_html__( 'Please add a title before publishing the download.', 'download-monitor' ) . '
';
}
}
/**
* save_post function.
*
* @access public
*
* @param int $post_id
* @param WP_Post $post
*
* @return void
*/
public function save_post( $post_id, $post ) {
if ( empty( $post_id ) || empty( $post ) || empty( $_POST ) ) {
return;
}
if ( defined( 'DOING_AUTOSAVE' ) && DOING_AUTOSAVE ) {
return;
}
if ( is_int( wp_is_post_revision( $post ) ) ) {
return;
}
if ( is_int( wp_is_post_autosave( $post ) ) ) {
return;
}
// validate nonce.
// phpcs:ignore
if ( empty( $_POST['dlm_nonce'] ) || ! wp_verify_nonce( wp_unslash( $_POST['dlm_nonce'] ), 'save_meta_data' ) ) {
return;
}
if ( ! current_user_can( 'edit_post', $post_id ) ) {
return;
}
if ( $post->post_type != 'dlm_download' ) {
return;
}
// unset nonce because it's only valid of 1 post
unset( $_POST['dlm_nonce'] );
do_action( 'dlm_save_meta_boxes', $post_id, $post );
}
/**
* save function.
*
* @access public
*
* @param int $post_id
* @param WP_Post $post
*
* @return void
*/
public function save_meta_boxes( $post_id, $post ) {
if ( 'dlm_download' !== $post->post_type ) {
return;
}
/**
* Fetch old download object
* There are certain props we don't need to manually persist here because WP does this automatically for us.
* These props are:
* - Download Title
* - Download Status
* - Download Author
* - Download Description & Excerpt
* - Download Categories
* - Download Tags
*/
/** @var DLM_Download $download */
try {
if ( isset( $GLOBALS['dlm_download'] ) ) {
$this->download_post = $GLOBALS['dlm_download'];
} elseif ( ! isset( $this->download_post ) || $post->ID !== $this->download_post->get_id() ) {
$this->download_post = download_monitor()->service( 'download_repository' )->retrieve_single( $post_id );
}
} catch ( Exception $e ) {
// download not found, no point in continuing
return;
}
// set the 'Download Options'
$this->download_post->set_featured( ( isset( $_POST['_featured'] ) ) );
$this->download_post->set_members_only( ( isset( $_POST['_members_only'] ) ) );
$this->download_post->set_redirect_only( ( isset( $_POST['_redirect_only'] ) ) );
$this->download_post->set_new_tab( ( isset( $_POST['_new_tab'] ) ) );
$total_meta_download_count = 0;
// Process files
if ( isset( $_POST['downloadable_file_id'] ) ) {
// gather post data we will sanitize in for becase each variable is an array.
// phpcs:disable
$downloadable_file_id = $_POST['downloadable_file_id'];
$downloadable_file_menu_order = $_POST['downloadable_file_menu_order'];
$downloadable_file_version = $_POST['downloadable_file_version'];
$downloadable_file_urls = wp_unslash( $_POST['downloadable_file_urls'] );
$downloadable_file_download_count = array();
$downloadable_file_date = '';
$downloadable_file_date_hour = array();
$downloadable_file_date_minute = array();
if ( apply_filters( 'dlm_show_version_extra_fields', false ) ) {
$downloadable_file_download_count = isset( $_POST['downloadable_file_download_count'] ) ? $_POST['downloadable_file_download_count'] : array();
$downloadable_file_date = isset( $_POST['downloadable_file_date'] ) ? $_POST['downloadable_file_date'] : '';
$downloadable_file_date_hour = isset( $_POST['downloadable_file_date_hour'] ) ? $_POST['downloadable_file_date_hour'] : array();
$downloadable_file_date_minute = isset( $_POST['downloadable_file_date_minute'] ) ? $_POST['downloadable_file_date_minute'] : array();
}
// loop
for ( $i = 0; $i <= max( array_keys( $downloadable_file_id ) ); $i ++ ) {
// file id must be set in post data
if ( ! isset( $downloadable_file_id[ $i ] ) ) {
continue;
}
// sanatize post data
$file_id = absint( $downloadable_file_id[ $i ] );
$file_menu_order = absint( $downloadable_file_menu_order[ $i ] );
$file_version = sanitize_text_field( $downloadable_file_version[ $i ] );
$file_download_count = isset( $downloadable_file_download_count[ $i ] ) ? sanitize_text_field( $downloadable_file_download_count[ $i ] ) : '';
$file_date_str = ! empty( $downloadable_file_date[ $i ] ) ? sanitize_text_field( $downloadable_file_date[ $i ] ) : '';
$file_date_hour = ! empty( $downloadable_file_date_hour[ $i ] ) ? absint( $downloadable_file_date_hour[ $i ] ) : 0;
$file_date_minute = ! empty( $downloadable_file_date_minute[ $i ] ) ? absint( $downloadable_file_date_minute[ $i ] ) : 0;
$files = array_filter( array_map( 'trim', explode( "\n", $downloadable_file_urls[ $i ] ) ) );
$secured_files = array();
$file_manager = new DLM_File_Manager();
// only continue if there's a file_id
if ( ! $file_id ) {
continue;
}
try {
// create version object
/** @var DLM_Download_Version $version */
$version = download_monitor()->service( 'version_repository' )->retrieve_single( $file_id );
// set post data in version object
$version->set_author( get_current_user_id() );
$version->set_menu_order( $file_menu_order );
$version->set_version( $file_version );
// If date came from the form (extra fields enabled), use it; otherwise preserve existing.
if ( ! empty( $file_date_str ) ) {
$version->set_date( new DateTime( $file_date_str . ' ' . $file_date_hour . ':' . $file_date_minute . ':00' ) );
} elseif ( ! $version->get_date() ) {
$version->set_date( new DateTime() );
}
$version->set_mirrors( $files );
// Only update download count if submitted (extra fields enabled and value entered).
if ( '' !== $file_download_count ) {
$version->set_meta_download_count( $file_download_count );
}
// persist version
download_monitor()->service( 'version_repository' )->persist( $version );
// add version download count to total download count
$total_meta_download_count += absint( $version->get_meta_download_count() );
} catch ( Exception $e ) {
}
// do dlm_save_downloadable_file action
do_action( 'dlm_save_downloadable_file', $file_id, $i );
}
}
// sync download_count
$this->download_post->set_meta_download_count( $total_meta_download_count );
// persist download
download_monitor()->service( 'download_repository' )->persist( $this->download_post );
// do dlm_save_metabox action
do_action( 'dlm_save_metabox', $post_id, $post, $this->download_post );
}
/**
* Directly upload file
*
* @return void
*
* @since 4.5.4
*/
public function upload_file() {
if ( ! current_user_can( 'upload_file' ) ) {
wp_send_json_error( array( 'errorMessage' => esc_html__( 'You are not allowed to upload files.', 'download-monitor' ) ) );
}
$uploadedfile = $_FILES['file'];
$image_url = $uploadedfile['tmp_name'];
$wp_allowed = wp_check_filetype( $image_url );
$dlm_denied_filetypes = array( 'php', 'htaccess' );
// If not allowed file type, return error.
if ( ! $wp_allowed['ext'] || in_array( $wp_allowed['ext'], $dlm_denied_filetypes ) ) {
wp_send_json_error( array( 'errorMessage' => esc_html__( 'File type not allowed.', 'download-monitor' ) ) );
}
$upload_dir = wp_upload_dir();
$image_data = file_get_contents( $image_url );
$filename = $uploadedfile['name'];
$file = $upload_dir['basedir'] . '/dlm_uploads/' . date( 'Y/m/' ) . $filename;
if ( ! file_put_contents( $file, $image_data ) ) {
wp_send_json_error( array( 'errorMessage' => esc_html__( 'Failed to write the file at: ', 'download-monitor' ) . $file ) );
}
$wp_filetype = wp_check_filetype( $filename, null );
$attachment = array(
'post_mime_type' => $wp_filetype['type'],
'post_title' => sanitize_file_name( $filename ),
'post_content' => '',
'post_status' => 'inherit',
);
$attach_id = wp_insert_attachment( $attachment, $file );
if ( ! is_wp_error( $attach_id ) ) {
$attach_data = wp_generate_attachment_metadata( $attach_id, $file );
} else {
wp_send_json_error( array( 'errorMessage' => $attach_id->get_error_message() ) );
}
wp_update_attachment_metadata( $attach_id, $attach_data );
wp_send_json_success( array( 'file_url' => wp_get_attachment_url( $attach_id ) ) );
}
}