drmx_login.php

<?php
session_start();
require '../../../wp-load.php';
error_reporting(E_ALL & ~E_DEPRECATED);

$flag	= 0;
// Get the yourproductid set in the license Profile.
// $PIDs	= explode('-', $_SESSION['ProductID']);

// Get integration parameters
define( 'DRMX_ACCOUNT', 		get_option('drmx_account'));
define( 'DRMX_AUTHENTICATION', 		get_option('drmx_authentication'));
define( 'DRMX_GROUPID', 		get_option('drmx_groupid'));
define( 'DRMX_RIGHTSID', 		get_option('drmx_rightsid'));
define( 'WSDL', 			get_option('drmx_wsdl'));
define( 'DRMX_BINDING', 		get_option('drmx_binding'));

$client = new SoapClient(WSDL, array('trace' => false));

if($_POST){
	$username 	= $_REQUEST["username"];
	$pwd 		= $_REQUEST["password"];
	$user		= get_user_by('login', $username); 
	$userid 	= $user->ID;
	$user_pass 	= $user->user_pass;
	$userEmail	= $user->user_email;

	if (!wp_check_password($pwd, $user_pass)) {
		echo "<SCRIPT language=JavaScript>location='drmx_LicError.php?message=Your Account or Password is incorrect! <br><br>Please revisit the course!<br>&error=null'</SCRIPT>";
		exit;
	}
}else{
	$userid 	= get_current_user_id();
	$user 		= get_user_by( 'id', $userid );
	$username 	= $user->user_login;
	$userEmail 	= $user->user_email;
}

/********* Business logic verification ***********/

/****** Connect database configuration *******/
$dbcon=mysqli_connect(DB_HOST, DB_USER, DB_PASSWORD, DB_NAME);
if ($dbcon -> connect_errno) {
	echo "Failed to connect to MySQL: " . $dbcon -> connect_error;
	exit();
}
mysqli_set_charset ($dbcon,'utf8');

// Get website db table prefix
$table_prefix = $wpdb->prefix;

// Get Course Access Expiration
$courseResult = mysqli_query($dbcon,"SELECT meta_value FROM ".$table_prefix."postmeta WHERE meta_key='_sfwd-courses' AND post_id='".$_SESSION['ProductID']."'");
$courseRow = mysqli_fetch_array($courseResult, MYSQLI_ASSOC);
$sfwd_courses_expire_access = strstr($courseRow['meta_value'], '"sfwd-courses_expire_access";s:2:"on"');

// Course Access Expiration   
if($sfwd_courses_expire_access != FALSE){
	$newStr = substr(strstr($courseRow['meta_value'], '"sfwd-courses_expire_access_days";i:'), 36);
	$rights_duration = substr($newStr,0,strpos($newStr,';')); //Access Period 
}else{
	$rights_duration = "-1"; //Access Period 
}

// user user group course 
$meta_key = "course_".$_SESSION['ProductID']."_access_from";

$result = mysqli_query($dbcon,"SELECT meta_value FROM ".$table_prefix."usermeta WHERE meta_key='".$meta_key."' AND user_id='".$userid."'");
$resultRow = mysqli_fetch_array($result, MYSQLI_ASSOC);
$isEnrolled = $resultRow['meta_value'];

if($isEnrolled == NULL){
	// Get the user group set by the course
	$course_group_result = mysqli_query($dbcon,"SELECT meta_key FROM ".$table_prefix."postmeta WHERE meta_key LIKE 'learndash_group_enrolled_%' AND post_id='".$_SESSION['ProductID']."'");
	$course_group_resultRow = mysqli_fetch_all($course_group_result, MYSQLI_ASSOC);
	
	//Find out if a user belongs to this user group
	foreach($course_group_resultRow as $group){
		$group_id = str_replace('learndash_group_enrolled_','',$group['meta_key']);

		$user_group_result = mysqli_query($dbcon,"SELECT meta_value FROM ".$table_prefix."usermeta WHERE meta_key='learndash_group_users_".$group_id."' AND user_id='".$userid."'");
		$user_group_resultRow = mysqli_fetch_array($user_group_result, MYSQLI_ASSOC);
		$isEnrolled = $user_group_resultRow['meta_value'];
		if($isEnrolled != NULL){
			break;
		}
	}
}

if($isEnrolled != NULL){
	// If the username is not exists, call 'AddNewUser' to add user.
	if(checkUserExists($client, $username) == "False"){
		$addNewUserResult = addNewUser($client, $username, $userEmail);
		$info = $addNewUserResult;
		$flag = 1;
	}
	// check user is revoked
	/*if(checkUserIsRevoked($client, $username)){
		$errorInfo = 'Username: '.$username.' is revoked.';
		header("location:drmx_LicError.php?error=".$errorInfo."&message=".$message);
		exit;
	}*/

	/*** Automatically update license permissions for users based on duration of the course ****/
	$updateRightResult = updateRight($client, $rights_duration, $userEmail);

	if($updateRightResult == '1'){
		
		/*****After the License Rights is updated, perform the method of obtaining the license****/
		$licenseResult = getLicense($client, $username);
		$license = $licenseResult->getLicenseRemoteToTableWithVersionResult;
		$message = $licenseResult->Message;

		if(stripos($license, '<div id="License_table_DRM-x4" style="display:none;">' )  === false ){
			header('location: drmx_LicError.php?error='.$license.'&message='.$message);
			exit;
		}
		/*****After obtaining the license, store the license and message through the session, and then direct to the licstore page******/
		$_SESSION['license'] = $license;
		$_SESSION['message'] = $message;
		
		header('location: licstore.php');
		$flag = 1;
		$info = "Getting license...";
		exit;
	}else{
		$info = $updateRightResult;
		$flag = 1;
	}
}

if($flag == 0) {
	$info = "You have not enrolled the course.";
}

mysqli_close($dbcon);

/***** End of business logic verification ******/

/********DRM-X 4.0 functions********/
function getIP(){
    static $realip;
    if (isset($_SERVER)){
        if (isset($_SERVER["HTTP_X_FORWARDED_FOR"])){
            $realip = $_SERVER["HTTP_X_FORWARDED_FOR"];
        } else if (isset($_SERVER["HTTP_CLIENT_IP"])) {
            $realip = $_SERVER["HTTP_CLIENT_IP"];
        } else {
            $realip = $_SERVER["REMOTE_ADDR"];
        }
    } else {
        if (getenv("HTTP_X_FORWARDED_FOR")){
            $realip = getenv("HTTP_X_FORWARDED_FOR");
        } else if (getenv("HTTP_CLIENT_IP")) {
            $realip = getenv("HTTP_CLIENT_IP");
        } else {
            $realip = getenv("REMOTE_ADDR");
        }
    }
    return $realip;
}

function checkUserExists($client, $username) {
    $CheckUser_param = array(
        'UserName' 				=> $username,
        'AdminEmail' 			=> DRMX_ACCOUNT,
        'WebServiceAuthStr' 	=> DRMX_AUTHENTICATION,
    );

    $CheckUser = $client->__soapCall('CheckUserExists', array('parameters' => $CheckUser_param));
    return $CheckUser->CheckUserExistsResult;
}

function addNewUser($client, $username, $userEmail){
	$add_user_param = array(
		'AdminEmail' 		=> DRMX_ACCOUNT,
		'WebServiceAuthStr' => DRMX_AUTHENTICATION,
		'GroupID' 			=> DRMX_GROUPID,
		'UserLoginName' 	=> $username,
		'UserPassword' 		=> 'N/A',
		'UserEmail' 		=> $userEmail,
		'UserFullName' 		=> 'N/A',
		'Title' 			=> 'N/A',
		'Company' 			=> 'N/A',
		'Address' 			=> 'N/A',
		'City' 				=> 'N/A',
		'Province' 			=> 'N/A',
		'ZipCode' 			=> 'N/A',
		'Phone' 			=> 'N/A',
		'CompanyURL' 		=> 'N/A',
		'SecurityQuestion' 	=> 'N/A',
		'SecurityAnswer' 	=> 'N/A',
		'IP' 				=> getIP(),
		'Money' 			=> '0',
		'BindNumber' 		=> DRMX_BINDING,
		'IsApproved' 		=> 'yes',
		'IsLockedOut' 		=> 'no',
	);

	$add_user = $client->__soapCall('AddNewUser', array('parameters' => $add_user_param));
	return $add_user->AddNewUserResult;
}

function updateRight($client, $lp_duration, $userEmail){
	$beginDate = date("Y/m/d", strtotime("-2 days"));
	$ExpirationDate = date("Y/m/d", strtotime("+1 year"));

	$updateRight_param = array(
		'AdminEmail'				=> DRMX_ACCOUNT,
		'WebServiceAuthStr'			=> DRMX_AUTHENTICATION,
		'RightsID'					=> DRMX_RIGHTSID,
		'Description' 				=> "Courses Rights (Please don't delete)",
		'PlayCount' 				=> "-1",
		'BeginDate' 				=> $beginDate,
		'ExpirationDate' 			=> $ExpirationDate,
		'ExpirationAfterFirstUse'	=> $lp_duration,
		'RightsPrice' 				=> "0",
		'AllowPrint' 				=> "False",
		'AllowClipBoard' 			=> "False",
		'AllowDoc'					=> "False",
		'EnableWatermark' 			=> "True",
		'WatermarkText' 			=> $userEmail." ++username",
		'WatermarkArea' 			=> "1,2,3,4,5,",
		'RandomChangeArea' 			=> "True",
		'RandomFrquency' 			=> "12",
		'EnableBlacklist' 			=> "True",
		'EnableWhitelist' 			=> "True",
		'ExpireTimeUnit' 			=> "Day",
		'PreviewTime' 				=> 3,
		'PreviewTimeUnit' 			=> "Day",
		'PreviewPage' 				=> 3,
		'DisableVirtualMachine'		=> 'True',
	);
	
	$update_Right = $client->__soapCall('UpdateRightWithDisableVirtualMachine', array('parameters' => $updateRight_param));
	return $update_Right->UpdateRightWithDisableVirtualMachineResult;
}

function checkUserIsRevoked($client, $username){
	$CheckUserIsRevoked = array(
		'AdminEmail'         => DRMX_ACCOUNT,
		'WebServiceAuthStr'  => DRMX_AUTHENTICATION,
		'UserLoginName'      => $username,
	);
	
	$CheckUserIsRevokedResult = $client->__soapCall('CheckUserIsRevoked', array('parameters' => $CheckUserIsRevoked));
	return $CheckUserIsRevokedResult->CheckUserIsRevokedResult;
}


function getLicense($client, $username){
	$param = array(
		'AdminEmail'         => DRMX_ACCOUNT,
		'WebServiceAuthStr'  => DRMX_AUTHENTICATION,
		'ProfileID'          => $_SESSION["ProfileID"],
		'ClientInfo'         => $_SESSION["ClientInfo"],
		'RightsID'           => DRMX_RIGHTSID,
		'UserLoginName'      => $username,
		'UserFullName'       => 'N/A',
		'GroupID'            => DRMX_GROUPID,
		'Message'            => 'N/A',
		'IP'                 => getIP(),
		'Platform'           => $_SESSION["Platform"],
		'ContentType'        => $_SESSION["ContentType"],
		'Version'            => $_SESSION["Version"],
	);
	
	/*****Obtain license by calling getLicenseRemoteToTableWithVersion******/
	$result = $client->__soapCall('getLicenseRemoteToTableWithVersion', array('parameters' => $param));
	return $result;
}

?>

<!DOCTYPE html>
<html>
<head>
 <meta http-equiv="content-type" content="text/html; charset=UTF-8">
 <title>Login and obtain license</title>
 <link rel="stylesheet" type="text/css" href="public/css/login-style.css" />
</head>

<body>
	<div class="login-wrap">
       	<div class="login-head">
          	<div align="center"><img src="public/images/logo.png" alt=""></div>
       	</div>
		<div class="login-cont">
			<div id="btl-login-error" class="btl-error">
				<div class="black">
					<?php 
						echo esc_attr($info);
					?>
				</div>
			</div>
			<div class="login-foot">
				<div class="foot-tit">Other options</div>
				<div class="foot-acts">
					<a class="link-reg" href="<?php echo esc_attr(site_url()); ?>" target="_blank">Help?</a>
					<a class="link-get-pwd" href="<?php echo esc_attr(site_url()); ?>" target="_blank">Buy Course</a>
				</div>
			</div>
		</div>
	</div>
</body>
</html>