bp_document_download_url_file()
Check if user have a access to download the file. If not redirect to homepage.
Description
Source
File: bp-document/bp-document-filters.php
function bp_document_download_url_file() { if ( isset( $_GET['attachment'] ) && isset( $_GET['download_document_file'] ) && isset( $_GET['document_file'] ) && isset( $_GET['document_type'] ) ) { // phpcs:ignore WordPress.Security.NonceVerification if ( 'folder' !== $_GET['document_type'] ) { $document_privacy = bp_document_user_can_manage_document( $_GET['document_file'], bp_loggedin_user_id() ); // phpcs:ignore WordPress.Security.NonceVerification $can_download_btn = ( true === (bool) $document_privacy['can_download'] ) ? true : false; } else { $folder_privacy = bp_document_user_can_manage_folder( $_GET['document_file'], bp_loggedin_user_id() ); // phpcs:ignore WordPress.Security.NonceVerification $can_download_btn = ( true === (bool) $folder_privacy['can_download'] ) ? true : false; } if ( $can_download_btn ) { bp_document_download_file( $_GET['attachment'], $_GET['document_type'] ); // phpcs:ignore WordPress.Security.NonceVerification } else { wp_safe_redirect( site_url() ); exit; } } }
Changelog
Version | Description |
---|---|
BuddyBoss 1.4.0 | Introduced. |
Questions?
We're always happy to help with code or other questions you might have! Search our developer docs, contact support, or connect with our sales team.