bp_document_download_url_file()
Check if user have a access to download the file. If not redirect to homepage.
Description
Source
File: bp-document/bp-document-filters.php
function bp_document_download_url_file() {
if ( isset( $_GET['attachment'] ) && isset( $_GET['download_document_file'] ) && isset( $_GET['document_file'] ) && isset( $_GET['document_type'] ) ) { // phpcs:ignore WordPress.Security.NonceVerification
if ( 'folder' !== $_GET['document_type'] ) {
$document_privacy = bp_document_user_can_manage_document( $_GET['document_file'], bp_loggedin_user_id() ); // phpcs:ignore WordPress.Security.NonceVerification
$can_download_btn = ( true === (bool) $document_privacy['can_download'] ) ? true : false;
} else {
$folder_privacy = bp_document_user_can_manage_folder( $_GET['document_file'], bp_loggedin_user_id() ); // phpcs:ignore WordPress.Security.NonceVerification
$can_download_btn = ( true === (bool) $folder_privacy['can_download'] ) ? true : false;
}
if ( $can_download_btn ) {
bp_document_download_file( $_GET['attachment'], $_GET['document_type'] ); // phpcs:ignore WordPress.Security.NonceVerification
} else {
wp_safe_redirect( site_url() );
exit;
}
}
}
Changelog
| Version | Description |
|---|---|
| BuddyBoss 1.4.0 | Introduced. |
Questions?
We're always happy to help with code or other questions you might have! Search our developer docs, contact support, or connect with our sales team.