Invite links: page selector + auto-redirect for stray tokens #19
@@ -41,6 +41,7 @@ recorded in `us_policy_acceptances` with `registration_type = account` and
|
|||||||
|
|
||||||
## Admin Interface
|
## Admin Interface
|
||||||
**Invites** in wp-admin (`manage_students`, studio admin only):
|
**Invites** in wp-admin (`manage_students`, studio admin only):
|
||||||
|
- Select the **registration page** (the page hosting `[us_student_register]`), stored in the `us_registration_page_id` option; invitation links point there (falling back to the home page if unset)
|
||||||
- Invite an email (creates a pending invite + link)
|
- Invite an email (creates a pending invite + link)
|
||||||
- List pending invites; revoke an invite
|
- List pending invites; revoke an invite
|
||||||
|
|
||||||
|
|||||||
@@ -5,6 +5,11 @@ namespace Unsupervised\Schedular\Auth;
|
|||||||
|
|
||||||
class RegistrationController {
|
class RegistrationController {
|
||||||
|
|
||||||
|
/**
|
||||||
|
* Option storing the page ID that hosts the [us_student_register] shortcode.
|
||||||
|
*/
|
||||||
|
public const OPTION_PAGE = 'us_registration_page_id';
|
||||||
|
|
||||||
public function __construct( private InviteRepository $invites ) {}
|
public function __construct( private InviteRepository $invites ) {}
|
||||||
|
|
||||||
public function renderPage(): void {
|
public function renderPage(): void {
|
||||||
@@ -17,6 +22,8 @@ class RegistrationController {
|
|||||||
}
|
}
|
||||||
|
|
||||||
$pendingInvites = $this->invites->findPending();
|
$pendingInvites = $this->invites->findPending();
|
||||||
|
$registrationPageId = (int) get_option( self::OPTION_PAGE, 0 );
|
||||||
|
$registrationPageUrl = $registrationPageId > 0 ? (string) get_permalink( $registrationPageId ) : '';
|
||||||
|
|
||||||
include USC_PLUGIN_DIR . 'templates/admin/invites.php';
|
include USC_PLUGIN_DIR . 'templates/admin/invites.php';
|
||||||
}
|
}
|
||||||
@@ -26,6 +33,10 @@ class RegistrationController {
|
|||||||
// phpcs:disable WordPress.Security.NonceVerification.Missing
|
// phpcs:disable WordPress.Security.NonceVerification.Missing
|
||||||
$action = sanitize_key( wp_unslash( $_POST['usc_action'] ?? '' ) );
|
$action = sanitize_key( wp_unslash( $_POST['usc_action'] ?? '' ) );
|
||||||
|
|
||||||
|
if ( 'set_page' === $action ) {
|
||||||
|
update_option( self::OPTION_PAGE, absint( $_POST['registration_page_id'] ?? 0 ) );
|
||||||
|
}
|
||||||
|
|
||||||
if ( 'invite' === $action ) {
|
if ( 'invite' === $action ) {
|
||||||
$email = sanitize_email( wp_unslash( $_POST['email'] ?? '' ) );
|
$email = sanitize_email( wp_unslash( $_POST['email'] ?? '' ) );
|
||||||
|
|
||||||
|
|||||||
@@ -5,12 +5,46 @@ if (! defined('ABSPATH')) {
|
|||||||
exit;
|
exit;
|
||||||
}
|
}
|
||||||
|
|
||||||
/** @var list<\Unsupervised\Schedular\Auth\Invite> $pendingInvites */
|
/**
|
||||||
|
* @var list<\Unsupervised\Schedular\Auth\Invite> $pendingInvites
|
||||||
|
* @var int $registrationPageId
|
||||||
|
* @var string $registrationPageUrl
|
||||||
|
*/
|
||||||
?>
|
?>
|
||||||
<div class="wrap">
|
<div class="wrap">
|
||||||
<h1><?php esc_html_e('Invites', 'unsupervised-schedular'); ?></h1>
|
<h1><?php esc_html_e('Invites', 'unsupervised-schedular'); ?></h1>
|
||||||
<p class="description"><?php esc_html_e('Invite a student by email, then send them the registration link below. They complete signup and accept any required policies through the [us_student_register] page.', 'unsupervised-schedular'); ?></p>
|
<p class="description"><?php esc_html_e('Invite a student by email, then send them the registration link below. They complete signup and accept any required policies through the [us_student_register] page.', 'unsupervised-schedular'); ?></p>
|
||||||
|
|
||||||
|
<h2><?php esc_html_e('Registration Page', 'unsupervised-schedular'); ?></h2>
|
||||||
|
<form method="post">
|
||||||
|
<?php wp_nonce_field('usc_invite_action'); ?>
|
||||||
|
<input type="hidden" name="usc_action" value="set_page">
|
||||||
|
<table class="form-table">
|
||||||
|
<tr>
|
||||||
|
<th><label for="registration_page_id"><?php esc_html_e('Page with the registration form', 'unsupervised-schedular'); ?></label></th>
|
||||||
|
<td>
|
||||||
|
<?php
|
||||||
|
wp_dropdown_pages(
|
||||||
|
[
|
||||||
|
'name' => 'registration_page_id',
|
||||||
|
'id' => 'registration_page_id',
|
||||||
|
'selected' => $registrationPageId,
|
||||||
|
'show_option_none' => esc_html__('— Select a page —', 'unsupervised-schedular'),
|
||||||
|
'option_none_value' => '0',
|
||||||
|
]
|
||||||
|
);
|
||||||
|
?>
|
||||||
|
<p class="description"><?php esc_html_e('Choose the page that contains the [us_student_register] shortcode. Invitation links point here.', 'unsupervised-schedular'); ?></p>
|
||||||
|
</td>
|
||||||
|
</tr>
|
||||||
|
</table>
|
||||||
|
<?php submit_button(esc_html__('Save Page', 'unsupervised-schedular'), 'secondary'); ?>
|
||||||
|
</form>
|
||||||
|
|
||||||
|
<?php if ($registrationPageUrl === '') : ?>
|
||||||
|
<div class="notice notice-warning inline"><p><?php esc_html_e('No registration page is set yet — invitation links will fall back to the site home page. Select a page above.', 'unsupervised-schedular'); ?></p></div>
|
||||||
|
<?php endif; ?>
|
||||||
|
|
||||||
<h2><?php esc_html_e('Invite a Student', 'unsupervised-schedular'); ?></h2>
|
<h2><?php esc_html_e('Invite a Student', 'unsupervised-schedular'); ?></h2>
|
||||||
<form method="post">
|
<form method="post">
|
||||||
<?php wp_nonce_field('usc_invite_action'); ?>
|
<?php wp_nonce_field('usc_invite_action'); ?>
|
||||||
@@ -38,13 +72,13 @@ if (! defined('ABSPATH')) {
|
|||||||
</tr>
|
</tr>
|
||||||
</thead>
|
</thead>
|
||||||
<tbody>
|
<tbody>
|
||||||
|
<?php $linkBase = $registrationPageUrl !== '' ? $registrationPageUrl : home_url('/'); ?>
|
||||||
<?php foreach ($pendingInvites as $invite) : ?>
|
<?php foreach ($pendingInvites as $invite) : ?>
|
||||||
<?php $link = esc_url(add_query_arg('us_invite', $invite->token, home_url('/'))); ?>
|
<?php $link = esc_url(add_query_arg('us_invite', $invite->token, $linkBase)); ?>
|
||||||
<tr>
|
<tr>
|
||||||
<td><?php echo esc_html($invite->email); ?></td>
|
<td><?php echo esc_html($invite->email); ?></td>
|
||||||
<td>
|
<td>
|
||||||
<input type="text" class="large-text code" readonly value="<?php echo esc_attr($link); ?>" onclick="this.select()">
|
<input type="text" class="large-text code" readonly value="<?php echo esc_attr($link); ?>" onclick="this.select()">
|
||||||
<span class="description"><?php esc_html_e('Point this token (?us_invite=…) at the page containing the registration shortcode.', 'unsupervised-schedular'); ?></span>
|
|
||||||
</td>
|
</td>
|
||||||
<td>
|
<td>
|
||||||
<form method="post" style="display:inline;">
|
<form method="post" style="display:inline;">
|
||||||
|
|||||||
Reference in New Issue
Block a user