Kevin Behrens

thomstark

Show or hide any portion of post content based on usernames, user roles, capabilities, custom groups, or logged-in status. Construct shortcodes manually or using a point and click UI.
<h4>Mini Update Log</h4>
<ul>
<li>v1.8.2 compat with WordPress 3.9</li>
<li>
v1.8.1 fixed conflict with the Tabify Edit Screen plugin
</li>
<li>
v1.8 added new shortcode handlers for nesting eyesonly shortcodes. also added body classes for logged-in user roles and logged-in usernames.
</li>
<li>
v1.7.1 fixed bug with TinyMCE button where TinyMCE panel is used outside post/page editor.
</li>
<li>
v1.7 added multisite support for username multiselect; fixed bug with role/level dropdown in non-Mozilla browsers.
</li>
<li>
Lots of new features in v1.6, including smooth integration with Role Scoper and Press Permit, thanks to their author Kevin Behrens, who has also now joined the Eyes Only team. Two makes a team, right?
</li>
<li>
As of v1.5, has compatibility with BuddyPress and BBPress forums in conjunction with the bbPress2 shortcode whitelist plugin by Anton Channing.
</li>
<li>
As of v1.4, includes TinyMCE Shortcode Button with Shortcode Generator Modal, with options to restrict access to the Shortcode Button, and to determine its position on the TinyMCE panel.
</li>
<li>
As of v1.3, includes Options page, with options to restrict access to the Meta Box, and to prevent content being hidden from Administrators.
</li>
<li>
As of v1.2, includes Shortcode Generator Meta Box
</li>
<li>
<a href="https://wordpress.org/plugins/eyes-only-user-access-shortcode/changelog/" title="Right-Click to Open in New Window">See full changelog</a>
</li>
</ul>
<h4>The Shortcode</h4>
[eyesonly] [/eyesonly]
or
[eyesonlier] [/eyesonlier]
or
[eyesonliest] [/eyesonliest]
<ul>
<li>
Required attributes: either logged=”in|out” or level=”anyrole, any_capability” or username=”anyusername” or all three
</li>
<li>
Newly integrated attributes: rs_group=”any_Role_Scoper_group(s)” or pp_group=”any_Permit_Press_group(s)”
</li>
<li>
Optional attribute: hide=”yes”
</li>
</ul>
All shortcodes must include at least one of the three required attributes. In some cases, it makes sense to use all of them together.
<ul>
<li>
The ‘logged’ attribute takes one of two values: ‘in’ or ‘out’
</li>
<li>
The ‘level’ attribute takes any user role (including custom roles) or any capability (including custom capabilities). It can take multiple roles and/or capabilities, separated either by spaces or commas.
</li>
<li>
The ‘username’ attribute takes any userlogin (username), or multiple, separated either by spaces or commas.
</li>
<li>
The ‘rs_group’ and ‘pp_group’ attributes can take comma or space-separated lists just like the ‘level’ and ‘username’ attributes. If you have the latest versions of either Role Scoper or Press Permit activated, you’ll get an extra menu in your shortcode generators to filter your content by those custom user groups. This attribute can also be used in combination with any of the others to fine tune your filtering.
</li>
<li>
The ‘hide’ attribute: By default, the shortcode will show the content only to the users specified by the ‘username’, ‘level’ or ‘logged’ attributes. Adding the ‘hide’ attribute will reverse that, and hide the content from the specified users. To hide content from the specified users, use hide=yes or hide=true.
</li>
</ul>
Any other shortcode can be used inside this shortcode.
<h4>Examples</h4>
<ul>
<li>
[eyesonly level=”administrator, customrole, moderate_comments”] Any kind of content. [/eyesonly] This will show the content only to users with the ‘administrator’ role, the ‘customrole’ role, and the ‘moderate_comments’ capability.
</li>
<li>
[eyesonly hide=”yes” logged=”out” level=”subscriber customrole”] Any kind of content. [/eyesonly] This will hide the content from all logged out users, and from anyone with the roles ‘subscriber’ or ‘customrole’.
</li>
<li>
[eyesonly username=”joebob, billyjean” level=”administrator”] Your content. [/eyesonly] This will show the content to all administrators and to the specific users ‘joebob’ and ‘billyjean,’ whether they’re administrators or not.
</li>
<li>
[eyesonly logged=”in”] Content for logged-in users. [/eyesonly][eyesonly logged=”out”] Content for logged-out users. [/eyesonly] This will show different content in the same location on the page depending on a user’s logged-in or out status.
</li>
<li>
[eyesonly level=”administrator”] Content. [/eyesonly] This will show the content only to administrators.
</li>
<li>
[eyesonly hide=”yes” level=”administrator custom_capability”] Content. [/eyesonly] This will hide the content only from administrators and from any role that has the ‘custom_capability’.
</li>
</ul>
<h4>Eyes Only Nesting</h4>
<ul>
<li>Eyes Only allows for nested user access shortcodes up to three levels deep. Example:</li>
</ul>
[eyesonly level=”administrator, editor, author”] Restricted content. [eyesonlier level=”administrator, editor”] Restricteder content. [eyesonliest level=”administrator”] Restrictedest content. [/eyesonliest] More restricteder content. [/eyesonlier] More restricted content. [/eyesonly]
<ul>
<li>It doesn’t matter which order you use them in, just so long as you keep your nested levels straight. </li>
</ul>
<h4>Requirements</h4>
<ul>
<li>
PHP 5.2+
</li>
<li>
WordPress 3.3+
</li>
</ul>

Eyes Only: User Access Shortcode

The plugin does the job. The authors should update compatibility :-)



Works

Show or hide any portion of post content based on usernames, user roles, capabilities, custom groups, or logged-in status.

Jonathan Horowitz

Content Visibility for Divi Builder allows Sections and Modules to be displayed/hidden based on the outcome of a PHP boolean expression.
This plugin is for both the standalone Divi theme (or child themes thereof) and the Divi Builder plugin, version 3 or higher!
<h3>Developer Filters</h3>
<h4>Expression Validation Filters</h4>
The following filters allow developers to customize expression validation behavior. Add these filters in your theme’s functions.php or in a custom plugin.
<code>content_visibility_for_divi_builder_blocked_functions</code>
Filter the array of blocked function names. Functions in this list will cause an expression to fail validation. All comparisons are case-insensitive.
Example – allow <code>file_get_contents</code> (blocked by default):
<pre><code>add_filter( 'content_visibility_for_divi_builder_blocked_functions', function( $functions ) {
 return array_diff( $functions, array( 'file_get_contents' ) );
} );
</code></pre>
Example – block an additional function:
<pre><code>add_filter( 'content_visibility_for_divi_builder_blocked_functions', function( $functions ) {
 $functions[] = 'my_dangerous_function';
 return $functions;
} );
</code></pre>
<code>content_visibility_for_divi_builder_allowed_tokens</code>
Filter the array of allowed PHP token types (T_* constants). Tokens not in this list will cause an expression to fail validation. This is an advanced filter – consult the PHP tokenizer documentation before modifying.
Example – allow the T_VARIABLE token type (blocked by default, use with caution):
<pre><code>add_filter( 'content_visibility_for_divi_builder_allowed_tokens', function( $tokens ) {
 $tokens[] = T_VARIABLE;
 return $tokens;
} );
</code></pre>
<code>content_visibility_for_divi_builder_allowed_chars</code>
Filter the array of allowed single-character tokens. Characters not in this list (such as <code>=</code>, <code>;</code>, <code>{</code>, <code>}</code>, <code>`</code>, <code>@</code>, <code>&</code>, <code>|</code>, <code>~</code>, <code>^</code>) will cause an expression to fail validation.
Example – allow the <code>&</code> character for bitwise operations:
<pre><code>add_filter( 'content_visibility_for_divi_builder_allowed_chars', function( $chars ) {
 $chars[] = '&';
 return $chars;
} );
</code></pre>
<code>content_visibility_for_divi_builder_allowed_callables</code>
Filter the array of callables (function names and <code>Class::method</code> static-method entries) the validator considers known-safe. Anything not on the allowlist (and not on the <code>blocked_functions</code> denylist) is treated as an “Unknown callable” error. Names are normalized (leading <code>\</code> stripped, <code>namespace\</code> keyword prefix stripped, lowercased) before comparison, so <code>\My\Namespace\Class::method</code>, <code>My\Namespace\Class::method</code>, and <code>namespace\My\Namespace\Class::method</code> all match the same allowlist entry. The default list ships with WordPress conditional tags (<code>is_user_logged_in</code>, <code>current_user_can</code>, <code>is_admin</code>, etc.). The Expression Validation tab’s content scanner generates a ready-to-paste snippet for this filter pre-populated with every custom callable currently in your content.
Example – allowlist a theme helper and a static service method:
<pre><code>add_filter( 'content_visibility_for_divi_builder_allowed_callables', function( $callables ) {
 $callables[] = 'mytheme_should_be_visible';
 $callables[] = 'MyTheme\Visibility\Service::checkUser';
 return $callables;
} );
</code></pre>

Content Visibility for Divi Builder

Thanks for maintaining this plugin. It works great. Some examples in the documentation would make the use at the beginning easier :)

Great PlugIn


I found this addon to be very useful in putting up content for a persons website. It allows you to create PHP functions or use inherent true/false functions that you can then control what content shows based on that. I find it useful in having one content being shown before a certain date and another block being set to show after a certain date. Allowing you to schedule content changes within the website.


Eyes Only: User Access Shortcode vs Content Visibility for Divi Builder