and its Copy button, joined in a single bordered
* unit. `assets/js/src/recovery.js` reads data-ao-copy.
*
* @param string $text The text shown and copied.
* @param string $label Accessible name of the button.
*
* @return void
*/
private static function render_snippet( string $text, string $label ): void {
?>
' . esc_html( $field['desc'] ) . '
';
}
foreach ( $roles as $role => $role_details ) {
$name = translate_user_role( $role_details['name'] );
?>
options['block_users_days'] ) ? absint( $this->options['block_users_days'] ) : 10;
$block_users_login = ! empty( $this->options['block_users_login'] ) ? 1 : 0;
$show_admin_notice = ! empty( $this->options['show_admin_notice'] ) ? 1 : 0;
?>
>
options['trusted_device_roles'] ) && is_array( $this->options['trusted_device_roles'] ) ) ? $this->options['trusted_device_roles'] : [];
$roles = get_editable_roles();
if ( ! empty( $field['desc'] ) ) {
echo '' . esc_html( $field['desc'] ) . '
';
}
foreach ( $roles as $role => $role_details ) {
$name = translate_user_role( $role_details['name'] );
?>
options['trusted_time'] ) ? absint( $this->options['trusted_time'] ) : 30;
?>
' );
?>
' . esc_html( $field['desc'] ) . '
';
}
$disabled = 'disabled="disabled"';
foreach ( $roles as $role => $role_details ) {
$name = translate_user_role( $role_details['name'] );
?>
>
' . esc_html( $field['desc'] ) . '
';
}
$disabled = 'disabled="disabled"';
foreach ( $roles as $role => $role_details ) {
$name = translate_user_role( $role_details['name'] );
?>
' );
?>
render_manage_users_settings(); ?>
render_settings_on_page( Two_Factor_Authentication::MENU_SLUG ); ?>
is_pro_active() ) : ?>
render_settings_on_page( Two_Factor_Authentication::MENU_SLUG . '_Pro', [ 'remove_submit_button' => true ] ); ?>
render_recovery_section(); ?>
'adminoptim_2fa_user',
'id' => 'adminoptim-2fa-user',
'show_option_all' => 'All Users',
'show' => 'display_name_with_login',
]
);
?>
is_pro_active() ) {
$editable_roles = array_keys( get_editable_roles() );
if ( isset( $options['compulsory_roles'] ) ) {
$submitted_roles = is_array( $options['compulsory_roles'] ) ? array_map( 'sanitize_text_field', $options['compulsory_roles'] ) : [];
$sanitized_options['compulsory_roles'] = array_values( array_intersect( $submitted_roles, $editable_roles ) );
}
if ( isset( $options['block_users_login'] ) ) {
$sanitized_options['block_users_login'] = 1;
}
if ( isset( $options['block_users_days'] ) ) {
$sanitized_options['block_users_days'] = absint( $options['block_users_days'] );
}
if ( isset( $options['show_admin_notice'] ) ) {
$sanitized_options['show_admin_notice'] = 1;
}
if ( isset( $options['trusted_device_roles'] ) ) {
$submitted_roles = is_array( $options['trusted_device_roles'] ) ? array_map( 'sanitize_text_field', $options['trusted_device_roles'] ) : [];
$sanitized_options['trusted_device_roles'] = array_values( array_intersect( $submitted_roles, $editable_roles ) );
}
if ( isset( $options['trusted_time'] ) ) {
$sanitized_options['trusted_time'] = absint( $options['trusted_time'] );
}
}
}
return $this->carry_forward_inactive_pro_keys( $sanitized_options );
}
/**
* Enqueue scripts on the Settings page
*
* @param string $hook_suffix The hook suffix to check if we are on the right page.
*
* @return void
*/
public function enqueue_settings_assets( string $hook_suffix ): void {
wp_enqueue_style( 'adminoptim-modules-pro-settings' );
if ( ! isset( $_GET['tab'] ) || 'user' !== sanitize_text_field( wp_unslash( $_GET['tab'] ) ) ) { // phpcs:ignore WordPress.Security.NonceVerification.Recommended
wp_enqueue_style( 'adminoptim-2fa-settings', Two_Factor_Authentication::MODULE_URL . 'assets/css/settings.min.css', [], ADMINOPTIMIZER_VERSION );
wp_enqueue_script( 'adminoptim-2fa-recovery', Two_Factor_Authentication::MODULE_URL . 'assets/js/recovery.min.js', [], ADMINOPTIMIZER_VERSION, true );
}
if ( isset( $_GET['tab'] ) && 'user' === sanitize_text_field( wp_unslash( $_GET['tab'] ) ) ) { // phpcs:ignore WordPress.Security.NonceVerification.Recommended
wp_enqueue_script( 'adminoptim-select2' );
wp_enqueue_style( 'adminoptim-select2-style' );
wp_enqueue_script( 'adminoptim-2fa-settings', Two_Factor_Authentication::MODULE_URL . 'assets/js/settings.min.js', [ 'jquery', 'adminoptim-select2' ], ADMINOPTIMIZER_VERSION, true );
}
}
/**
* Ajax action for admin to manage user's 2FA settings.
*
* @return void
*/
public function ajax_mange_user_2fa() {
if ( ! current_user_can( 'edit_users' ) ) {
wp_send_json_error(
new \WP_Error(
'adminoptim-unauthorized-user',
ao_get_admin_notice(
__( 'You have no permission to edit users.', 'admin-optimizer' ),
[
'type' => 'error',
]
)
)
);
}
check_ajax_referer( 'adminoptim_2fa_user_action', 'nonce' );
$response = [];
$action = ! empty( $_REQUEST['user_action'] ) ? sanitize_text_field( wp_unslash( $_REQUEST['user_action'] ) ) : '';
if ( ! in_array( $action, [ 'deactivate', 'unblock' ], true ) ) {
$response = new \WP_Error(
'adminoptim-no-2fa-action-found',
ao_get_admin_notice(
__( 'No appropriate action is found', 'admin-optimizer' ),
[
'type' => 'error',
]
)
);
wp_send_json_error( $response );
}
$user_id = ! empty( $_REQUEST['user_id'] ) ? absint( $_REQUEST['user_id'] ) : 0;
if ( $user_id > 0 ) {
$user_2fa = get_user_meta( $user_id, Two_Factor_Authentication::OPTION_NAME, true );
if ( ! empty( $user_2fa ) && is_array( $user_2fa ) ) {
if ( 'deactivate' === $action && isset( $user_2fa['enabled'] ) ) {
unset( $user_2fa['enabled'] );
unset( $user_2fa['secret'] );
Two_Factor_Authentication::delete_secret( $user_id );
update_user_meta( $user_id, Two_Factor_Authentication::OPTION_NAME, $user_2fa );
delete_user_meta( $user_id, Two_Factor_Authentication::TRUSTED_TOKEN_NAME );
$response['message'] = ao_get_admin_notice(
__( 'Two-factor authentication disabled for user.', 'admin-optimizer' ),
[
'type' => 'success',
]
);
wp_send_json_success( $response );
} elseif ( 'unblock' === $action && ! empty( $user_2fa['block_login_time'] ) ) {
if ( time() > $user_2fa['block_login_time'] ) {
$user_2fa['block_login_time'] = time() + ( 3 * DAY_IN_SECONDS );
update_user_meta( $user_id, Two_Factor_Authentication::OPTION_NAME, $user_2fa );
}
$response['message'] = ao_get_admin_notice(
__( 'Login access is now temporarily granted for the user.', 'admin-optimizer' ),
[
'type' => 'success',
]
);
wp_send_json_success( $response );
} else {
$message = 'deactivate' === $action
? __( 'Cannot deactivate 2FA. This user did not have a valid 2FA setup.', 'admin-optimizer' )
: __( 'Cannot unblock login. This user is not being blocked at the moment.', 'admin-optimizer' );
$response = new \WP_Error(
'adminoptim-2fa-user-action-noop',
ao_get_admin_notice(
$message,
[
'type' => 'error',
]
)
);
wp_send_json_error( $response );
}
} else {
$response = new \WP_Error(
'adminoptim-invalid-user-2fa',
ao_get_admin_notice(
__( 'Cannot deactivate 2FA. This user did not have a valid 2FA setup.', 'admin-optimizer' ),
[
'type' => 'error',
]
)
);
wp_send_json_error( $response );
}
} else {
$response = new \WP_Error(
'adminoptim-invalid-user',
ao_get_admin_notice(
__( 'Invalid user', 'admin-optimizer' ),
[
'type' => 'error',
]
)
);
wp_send_json_error( $response );
}
}
}