'; $error_msg .= '' . __( 'Click here', 'simple-download-monitor' ) . ''; $error_msg .= __( ' and enter a valid password for this item', 'simple-download-monitor' ); $error_msg .= '
'; wp_die( $error_msg ); } if ( $post_pass != $pass_val ) { //Incorrect password submitted. do_action( 'sdm_process_download_request_incorrect_password'); wp_die( __( 'Error! Incorrect password. This download requires a valid password.', 'simple-download-monitor' ) ); } else { //Password is valid. Go ahead with the download } } //End of password check $main_option = get_option( 'sdm_downloads_options' ); $ipaddress = ''; //Check if do not capture IP is enabled. if ( ! isset( $main_option[ 'admin_do_not_capture_ip' ] ) ) { $ipaddress = sdm_get_ip_address(); } $date_time = current_time( 'mysql' ); $visitor_country = ! empty( $ipaddress ) ? sdm_ip_info( $ipaddress, 'country' ) : ''; $visitor_name = sdm_get_logged_in_user(); // Check if we only allow the download for logged-in users if ( isset( $main_option[ 'only_logged_in_can_download' ] ) ) { if ( $main_option[ 'only_logged_in_can_download' ] && $visitor_name === false ) { //User not logged in, let's display the error message. //But first let's see if we have login page URL set so we can display it as well $loginMsg = ''; if ( isset( $main_option[ 'general_login_page_url' ] ) && ! empty( $main_option[ 'general_login_page_url' ] ) ) { //We have a login page URL set. Lets use it. if ( isset( $main_option[ 'redirect_user_back_to_download_page' ] ) ) { //Redirect to download page after login feature is enabled. $dl_post_url = get_permalink( $download_id );//The single download item page $redirect_url = apply_filters('sdm_after_login_redirect_query_arg', $dl_post_url); $login_page_url = add_query_arg( array( 'sdm_redirect_to' => urlencode($redirect_url) ), $main_option[ 'general_login_page_url' ] ); } else { $login_page_url = $main_option[ 'general_login_page_url' ]; } $tpl = __( "__Click here__ to go to login page.", 'simple-download-monitor' ); $loginMsg = preg_replace( '/__(.*)__/', ' $1 $2', $tpl ); } wp_die( __( 'You need to be logged in to download this file.', 'simple-download-monitor' ) . $loginMsg ); } } $visitor_name = ($visitor_name === false) ? __( 'Not Logged In', 'simple-download-monitor' ) : $visitor_name; // Get option for global disabling of download logging $no_logs = isset( $main_option[ 'admin_no_logs' ] ); // Get optoin for logging only unique IPs $unique_ips = isset( $main_option[ 'admin_log_unique' ] ); // Get post meta for individual disabling of download logging $get_meta = get_post_meta( $download_id, 'sdm_item_no_log', true ); $item_logging_checked = isset( $get_meta ) && $get_meta === 'on' ? 'on' : 'off'; $dl_logging_needed = true; // Check if download logs have been disabled (globally or per download item) if ( $no_logs === true || $item_logging_checked === 'on' ) { $dl_logging_needed = false; } // Check if we are only logging unique ips if ( $unique_ips === true ) { $check_ip = $wpdb->get_results( 'SELECT * FROM ' . $wpdb->prefix . 'sdm_downloads WHERE post_id="' . $download_id . '" AND visitor_ip = "' . $ipaddress . '"' ); //This IP is already logged for this download item. No need to log it again. if ( $check_ip ) { $dl_logging_needed = false; } } // Check if "Do Not Count Downloads from Bots" setting is enabled if ( isset( $main_option[ 'admin_dont_log_bots' ] ) ) { //it is. Now let's check if visitor is a bot if ( sdm_visitor_is_bot() ) { //visitor is a bot. We neither log nor count this download $dl_logging_needed = false; } } if ( $dl_logging_needed ) { // We need to log this download. $table = $wpdb->prefix . 'sdm_downloads'; $data = array( 'post_id' => $download_id, 'post_title' => $download_title, 'file_url' => $download_link, 'visitor_ip' => $ipaddress, 'date_time' => $date_time, 'visitor_country' => $visitor_country, 'visitor_name' => $visitor_name ); $data = array_filter( $data ); //Remove any null values. $insert_table = $wpdb->insert( $table, $data ); if ( $insert_table ) { //Download request was logged successfully } else { //Failed to log the download request wp_die( __( 'Error! Failed to log the download request in the database table', 'simple-download-monitor' ) ); } } // Allow plugin extensions to hook into download request. do_action( 'sdm_process_download_request', $download_id, $download_link ); // Should the item be dispatched? $dispatch = apply_filters( 'sdm_dispatch_downloads', get_post_meta( $download_id, 'sdm_item_dispatch', true ) ); // Only local file can be dispatched. if ( $dispatch && (stripos( $download_link, WP_CONTENT_URL ) === 0) ) { // Get file path $file = path_join( WP_CONTENT_DIR, ltrim( substr( $download_link, strlen( WP_CONTENT_URL ) ), '/' ) ); // Try to dispatch file (terminates script execution on success) sdm_dispatch_file( $file ); } // As a fallback or when dispatching is disabled, redirect to the file // (and terminate script execution). sdm_redirect_to_url( $download_link ); } } /** * Dispatch file with $filename and terminate script execution, if the file is * readable and headers have not been sent yet. * @param string $filename * @return void */ function sdm_dispatch_file( $filename ) { if ( headers_sent() ) { trigger_error( __FUNCTION__ . ": Cannot dispatch file $filename, headers already sent." ); return; } if ( ! is_readable( $filename ) ) { trigger_error( __FUNCTION__ . ": Cannot dispatch file $filename, file is not readable." ); return; } header( 'Content-Description: File Transfer' ); header( 'Content-Type: application/octet-stream' ); // http://stackoverflow.com/a/20509354 header( 'Content-Disposition: attachment; filename="' . basename( $filename ) . '"' ); header( 'Expires: 0' ); header( 'Cache-Control: must-revalidate' ); header( 'Pragma: public' ); header( 'Content-Length: ' . filesize( $filename ) ); ob_end_clean(); readfile( $filename ); exit; } /** * If reCAPTCHA Enabled verify answer, send it to google API * @return boolean */ function sdm_recaptcha_verify() { $main_advanced_opts = get_option( 'sdm_advanced_options' ); $recaptcha_enable = isset( $main_advanced_opts[ 'recaptcha_enable' ] ) ? true : false; if ( $recaptcha_enable ) { if ( $_SERVER[ "REQUEST_METHOD" ] == "POST" && isset( $_POST[ "g-recaptcha-response" ] ) ) { $recaptcha_secret_key = $main_advanced_opts[ 'recaptcha_secret_key' ]; $recaptcha_response = filter_input( INPUT_POST, "g-recaptcha-response", FILTER_SANITIZE_FULL_SPECIAL_CHARS ); $response = wp_remote_get( "https://www.google.com/recaptcha/api/siteverify?secret={$recaptcha_secret_key}&response={$recaptcha_response}" ); $response = json_decode( $response[ "body" ], 1 ); if ( $response[ "success" ] ) { return true; } else { wp_die( "" . __( "ERROR:", 'simple-download-monitor' ) . " " . __( "Google reCAPTCHA verification failed.", 'simple-download-monitor' ) . "
\n\n« " . __( "Back", 'simple-download-monitor' ) . "", "", 403 ); return false; } } else { wp_die( "
" . __( "ERROR:", 'simple-download-monitor' ) . " " . __( "Google reCAPTCHA verification failed.", 'simple-download-monitor' ) . " " . __( "Do you have JavaScript enabled?", 'simple-download-monitor' ) . "
\n\n« " . __( "Back", 'simple-download-monitor' ) . "", "", 403 ); return false; } } return true; }