social-connect.php

<?php
/*
Plugin Name: Social Connect
Plugin URI: http://wordpress.org/extend/plugins/social-connect/
Description: Allow your visitors to comment, login and register with their Twitter, Facebook, Google, Yahoo or WordPress.com account.
Version: 1.2
Author: Rodrigo Primo
Author URI: http://rodrigoprimo.com/
License: GPL2
*/

/**
 * Check technical requirements are fulfilled before activating.
 **/
function sc_activate(){
	if ( !function_exists( 'register_post_status' ) || !function_exists( 'curl_version' ) || !function_exists( 'hash' ) || version_compare( PHP_VERSION, '5.1.2', '<' ) ) {
		deactivate_plugins( basename( dirname( __FILE__ ) ) . '/' . basename( __FILE__ ) );
		if ( !function_exists( 'register_post_status' ) )
			wp_die( sprintf( __( "Sorry, but you can not run Social Connect. It requires WordPress 3.0 or newer. Consider <a href='http://codex.wordpress.org/Updating_WordPress'>upgrading</a> your WordPress installation, it's worth the effort.<br/><a href=\"%s\">Return to Plugins Admin page &raquo;</a>", 'social_connect'), admin_url( 'plugins.php' ) ), 'social-connect' );
		elseif ( !function_exists( 'curl_version' ) )
			wp_die( sprintf( __( "Sorry, but you can not run Social Connect. It requires the <a href='http://www.php.net/manual/en/intro.curl.php'>PHP libcurl extension</a> be installed. Please contact your web host and request libcurl be <a href='http://www.php.net/manual/en/intro.curl.php'>installed</a>.<br/><a href=\"%s\">Return to Plugins Admin page &raquo;</a>", 'social_connect'), admin_url( 'plugins.php' ) ), 'social-connect' );
		elseif ( !function_exists( 'hash' ) )
			wp_die( sprintf( __( "Sorry, but you can not run Social Connect. It requires the <a href='http://www.php.net/manual/en/intro.hash.php'>PHP Hash Engine</a>. Please contact your web host and request Hash engine be <a href='http://www.php.net/manual/en/hash.setup.php'>installed</a>.<br/><a href=\"%s\">Return to Plugins Admin page &raquo;</a>", 'social_connect'), admin_url( 'plugins.php' ) ), 'social-connect' );
		else
			wp_die( sprintf( __( "Sorry, but you can not run Social Connect. It requires PHP 5.1.2 or newer. Please contact your web host and request they <a href='http://www.php.net/manual/en/migration5.php'>migrate</a> your PHP installation to run Social Connect.<br/><a href=\"%s\">Return to Plugins Admin page &raquo;</a>", 'social_connect'), admin_url( 'plugins.php' ) ), 'social-connect' );
	}
	do_action( 'sc_activation' );
}
register_activation_hook( __FILE__, 'sc_activate' );

/**
 * Internationalization of the plugin
 **/
function sc_social_connect_l10n() {
	$plugin_dir = basename( dirname( __FILE__ ) );
	load_plugin_textdomain( 'social_connect', null, "$plugin_dir/languages" );
}
add_action( 'init', 'sc_social_connect_l10n', -1000 );

require_once( dirname( __FILE__ ) . '/constants.php' );
require_once( dirname( __FILE__ ) . '/utils.php' );
require_once( dirname( __FILE__ ) . '/media.php' );
require_once( dirname( __FILE__ ) . '/admin.php' );
require_once( dirname( __FILE__ ) . '/ui.php' );

/**
 * Add valid query vars to WordPress for Social Connect.
 */
function sc_query_vars($vars) {
	$vars[] = 'social-connect';
	return $vars;
}
add_action('query_vars', 'sc_query_vars');

/**
 * Parse the WordPress request. If the query var 'social-connect' is present,
 * then handle the request accordingly.
 *
 * @param WP $wp WP instance for the current request
 */
function sc_parse_request($wp) {
	if (array_key_exists('social-connect', $wp->query_vars)) {
		if (!session_id()) {
			session_start();
		}

		switch ($wp->query_vars['social-connect']) {
			case 'twitter':
				require_once 'twitter/connect.php';
				break;
			case 'twitter-callback':
				require_once 'twitter/callback.php';
				break;
			case 'facebook-callback':
				require_once 'facebook/callback.php';
				break;
			case 'google':
				require_once 'google/connect.php';
				break;
			case 'google-plus':
				require_once 'google-plus/connect.php';
				break;
			case 'google-plus-callback':
				require_once 'google-plus/callback.php';
				break;
			case 'yahoo':
				require_once 'yahoo/connect.php';
				break;
			case 'wordpress':
				require_once 'wordpress/connect.php';
				break;
			default:
				break;
		}

		wp_die();
	}
}
add_action('parse_request', 'sc_parse_request');

function sc_social_connect_process_login( $is_ajax = false ) {
	if ( isset( $_REQUEST[ 'redirect_to' ] ) && $_REQUEST[ 'redirect_to' ] != '' ) {
		$redirect_to = $_REQUEST[ 'redirect_to' ];
		// Redirect to https if user wants ssl
		if ( isset( $secure_cookie ) && $secure_cookie && false !== strpos( $redirect_to, 'wp-admin') )
			$redirect_to = preg_replace( '|^http://|', 'https://', $redirect_to );
	} else {
		$redirect_to = admin_url();
	}
	$redirect_to = apply_filters( 'social_connect_redirect_to', $redirect_to );

	$social_connect_provider = $_REQUEST[ 'social_connect_provider' ];
	$sc_provider_identity_key = 'social_connect_' . $social_connect_provider . '_id';
	$sc_provided_signature =  $_REQUEST[ 'social_connect_signature' ];

	switch( $social_connect_provider ) {
		case 'facebook':
			social_connect_verify_signature( $_REQUEST[ 'social_connect_access_token' ], $sc_provided_signature, $redirect_to );
			$fb_json = json_decode( sc_http_get_contents("https://graph.facebook.com/me?access_token=" . $_REQUEST['social_connect_access_token']) );
			$sc_provider_identity = $fb_json->{ 'id' };
			$sc_email = $fb_json->{ 'email' };
			$sc_first_name = $fb_json->{ 'first_name' };
			$sc_last_name = $fb_json->{ 'last_name' };
			$sc_profile_url = $fb_json->{ 'link' };
			$sc_name = $sc_first_name . ' ' . $sc_last_name;
			$user_login = strtolower( str_replace( ' ', '', $sc_first_name . $sc_last_name ) );
			break;
		case 'twitter':
			$sc_provider_identity = $_REQUEST[ 'social_connect_twitter_identity' ];
			social_connect_verify_signature( $sc_provider_identity, $sc_provided_signature, $redirect_to );
			$sc_name = $_REQUEST[ 'social_connect_name' ];
			$names = explode( ' ', $sc_name, 2 );
			$sc_first_name = $names[0];
			$sc_last_name = $names[1];
			$sc_screen_name = $_REQUEST[ 'social_connect_screen_name' ];
			$sc_avatar = isset( $_REQUEST['social_connect_avatar'] ) ? str_replace( 'http:', '', $_REQUEST['social_connect_avatar'] ) : '';
			$sc_profile_url = '';
			// Get host name from URL
			$site_url = parse_url( site_url() );
			$sc_email = 'tw_' . md5( $sc_provider_identity ) . '@' . $site_url['host'];
			$user_login = $sc_screen_name;
			break;
		case 'google':
			$sc_provider_identity = $_REQUEST[ 'social_connect_openid_identity' ];
			social_connect_verify_signature( $sc_provider_identity, $sc_provided_signature, $redirect_to );
			$sc_email = $_REQUEST[ 'social_connect_email' ];
			$sc_first_name = $_REQUEST[ 'social_connect_first_name' ];
			$sc_last_name = $_REQUEST[ 'social_connect_last_name' ];
			$sc_profile_url = '';
			$sc_name = $sc_first_name . ' ' . $sc_last_name;
			$user_login = strtolower( str_replace( ' ', '', $sc_first_name . $sc_last_name ) );
			break;
		case 'google-plus':
			$sc_provider_identity = $_REQUEST['social_connect_google_id'];
			social_connect_verify_signature( $sc_provider_identity, $sc_provided_signature, $redirect_to );
			$sc_email = $_REQUEST['social_connect_email'];
			$sc_first_name = $_REQUEST['social_connect_first_name'];
			$sc_last_name = $_REQUEST['social_connect_last_name'];
			$sc_profile_url = $_REQUEST['social_connect_profile_url'];
			$user_login = strtolower( $sc_first_name.$sc_last_name );
			break;
		case 'yahoo':
			$sc_provider_identity = $_REQUEST[ 'social_connect_openid_identity' ];
			social_connect_verify_signature( $sc_provider_identity, $sc_provided_signature, $redirect_to );
			$sc_email = $_REQUEST[ 'social_connect_email' ];
			$sc_name = $_REQUEST[ 'social_connect_name' ];
			$sc_username = $_REQUEST[ 'social_connect_username' ];
			$sc_profile_url = '';
			if ( $sc_name == '') {
				if ( $sc_username == '') {
					$names = explode("@", $sc_email );
					$sc_name = $names[0];
					$sc_first_name = $sc_name;
					$sc_last_name = '';
				} else {
					$names = explode( ' ', $sc_username, 2 );
					$sc_first_name = $names[0];
					$sc_last_name = $names[1];
				}
			} else {
				$names = explode( ' ', $sc_name, 2 );
				$sc_first_name = $names[0];
				$sc_last_name = $names[1];
			}
			$user_login = strtolower( str_replace( ' ', '', $sc_first_name . $sc_last_name ) );
			break;
		case 'wordpress':
			$sc_provider_identity = $_REQUEST[ 'social_connect_openid_identity' ];
			social_connect_verify_signature( $sc_provider_identity, $sc_provided_signature, $redirect_to );
			$sc_email = $_REQUEST[ 'social_connect_email' ];
			$sc_name = $_REQUEST[ 'social_connect_name' ];
			$sc_profile_url = '';
			if ( trim( $sc_name ) == '') {
				$names = explode("@", $sc_email );
				$sc_name = $names[0];
				$sc_first_name = $sc_name;
				$sc_last_name = '';
			} else {
				$names = explode( ' ', $sc_name, 2 );
				$sc_first_name = $names[0];
				$sc_last_name = $names[1];
			}
			$user_login = strtolower( str_replace( ' ', '', $sc_first_name . $sc_last_name ) );
			break;
		default:
			break;
	}

	// Cookies used to display welcome message if already signed in recently using some provider
	setcookie("social_connect_current_provider", $social_connect_provider, time()+3600, SITECOOKIEPATH, COOKIE_DOMAIN, false, true );

	// Get user by meta
	$user_id = social_connect_get_user_by_meta( $sc_provider_identity_key, $sc_provider_identity );
	if ( $user_id ) {
		$user_data  = get_userdata( $user_id );
		$user_login = $user_data->user_login;
	} elseif ( $user_id = email_exists( $sc_email ) ) { // User not found by provider identity, check by email
		update_user_meta( $user_id, $sc_provider_identity_key, $sc_provider_identity );

		$user_data  = get_userdata( $user_id );
		$user_login = $user_data->user_login;

	} else { // Create new user and associate provider identity
		if ( get_option( 'users_can_register' ) ) {
			$user_login = sc_get_unique_username($user_login);

			$userdata = array( 'user_login' => $user_login, 'user_email' => $sc_email, 'first_name' => $sc_first_name, 'last_name' => $sc_last_name, 'user_url' => $sc_profile_url, 'user_pass' => wp_generate_password() );

			// Create a new user
			$user_id = wp_insert_user( apply_filters( 'social_connect_insert_user', $userdata ) );

			if ( $user_id && is_integer( $user_id ) ) {
				update_user_meta( $user_id, $sc_provider_identity_key, $sc_provider_identity );
			}

			if( isset( $sc_avatar ) && $sc_avatar ){
				update_user_meta( $user_id, 'social_connect_twitter_avatar', $sc_avatar );
			}
			do_action( 'social_connect_inserted_user', $user_id, $social_connect_provider );
		} else {
			add_filter( 'wp_login_errors', 'sc_login_errors' );

			return;
		}
	}

	wp_set_auth_cookie( $user_id );

	do_action( 'social_connect_login', $user_login );

	if ( $is_ajax ) {
		echo '{"redirect":"' . $redirect_to . '"}';
	} else {
		wp_safe_redirect( $redirect_to );
	}

	exit();
}

/**
 * Add error message when user try to login
 * with an nonexistent e-mail and registration is disabled
 *
 * @param WP_Error $errors
 * @return WP_Error
 */
function sc_login_errors( $errors ) {
	$errors->errors = array();
	$errors->add( 'registration_disabled', __( '<strong>ERROR</strong>: Registration is disabled.', 'social-connect' ) );

	return $errors;
}

function sc_get_unique_username($user_login, $c = 1) {
	if ( username_exists( $user_login ) ) {
		if ($c > 5)
			$append = '_'.substr(md5($user_login),0,3) . $c;
		else
			$append = $c;

		$user_login = apply_filters( 'social_connect_username_exists', $user_login . $append );
		return sc_get_unique_username($user_login,++$c);
	} else {
		return $user_login;
	}
}

// Hook to 'login_form_' . $action
add_action( 'login_form_social_connect', 'sc_social_connect_process_login');

// Handle calls from plugins that use an Ajax for login
function sc_ajax_login(){
	if ( isset( $_POST[ 'login_submit' ] ) && $_POST[ 'login_submit' ] == 'ajax' && // Plugins will need to pass this param
	isset( $_POST[ 'action' ] ) && $_POST[ 'action' ] == 'social_connect' )
		sc_social_connect_process_login( true );
}
add_action( 'init', 'sc_ajax_login');

/**
 * Use avatars in priority order
 * @author Aaron Oneal
 * @link http://aarononeal.info
 *
 */
function sc_filter_avatar($avatar, $id_or_email, $size, $default, $alt) {
	$custom_avatar = '';
	$social_id = '';
	$provider_id = '';
	$user_id = (!is_integer($id_or_email) && !is_string($id_or_email) && get_class($id_or_email)) ? $id_or_email->user_id : $id_or_email;

	if (!empty($user_id)) {
		// Providers to search for (assume user prefers their current logged in service)
		// Note: OpenID providers use gravatars
		$providers = array('facebook', 'twitter');

		$social_connect_provider = isset( $_COOKIE['social_connect_current_provider']) ? $_COOKIE['social_connect_current_provider'] : '';
		if (!empty($social_connect_provider) && $social_connect_provider == 'twitter') {
			$providers = array('twitter', 'facebook');
		}

		foreach($providers as $search_provider) {
			$social_id = get_user_meta($user_id, 'social_connect_'.$search_provider.'_id', true);
			if (!empty($social_id)) {
				$provider_id = $search_provider;
				break;
			}
		}
	}

	// At least one social ID was found
	if (!empty($social_id)) {
		switch($provider_id) {
			case 'facebook':
				// square (50x50)
				// small (50 pixels wide, variable height)
				// normal (100 pixels wide, variable height)
				// large (about 200 pixels wide, variable height)

				$size_label = 'large';

				if($size <= 100)
					$size_label = 'normal';
				else if($size <= 50)
					$size_label = 'small';

				$custom_avatar = "//graph.facebook.com/$social_id/picture?type=$size_label";
				break;
			case 'twitter':
				// bigger - 73px by 73px
				// normal - 48px by 48px
				// mini - 24px by 24px

				$size_label = 'bigger';

				if ($size <= 48) {
					$size_label = 'normal';
				} else if ($size <= 24) {
					$size_label = 'mini';
				}

				$custom_avatar = get_user_meta( $user_id, 'social_connect_twitter_avatar', true );
				$custom_avatar = str_replace( '_normal', '_' . $size_label, $custom_avatar );
				break;
		}
	}

	if (!empty($custom_avatar)) {
		// return the custom avatar from the social network
		$return = '<img class="avatar" src="'.$custom_avatar.'" style="width:'.$size.'px" alt="'.$alt.'" />';
	} else if ($avatar) {
		// gravatar
		$return = $avatar;
	} else {
		// default
		$return = '<img class="avatar" src="'.$default.'" style="width:'.$size.'px" alt="'.$alt.'" />';
	}

	return $return;
}
add_filter('get_avatar', 'sc_filter_avatar', 10, 5);

/**
 * Add link to Social Connect settings page in the plugins page
 *
 * @return array plugin links
*/
function sc_add_settings_link( $default_links ) {
	$links = array('<a href="' . get_admin_url(null, 'options-general.php?page=social-connect-id') . '">' . __('Settings', 'social_connect') . '</a>');
	return array_merge($links, $default_links);
}
add_filter( 'plugin_action_links_' . plugin_basename(__FILE__), 'sc_add_settings_link' );