function jwplayer_login_logout()
{
if (!current_user_can('manage_options')) {
jwplayer_login_print_error('You do not have sufficient privileges to access this page.');
return;
}
if (!isset($_POST['logout'])) {
//input var okay
jwplayer_login_logout_form();
return;
}
// Check the nonce (counter XSRF)
if (isset($_POST['_wpnonce'])) {
$nonce = sanitize_text_field($_POST['_wpnonce']);
//input var okay
if (!wp_verify_nonce($nonce, 'jwplayer-logout-nonce')) {
jwplayer_login_print_error('Could not verify the form data.');
jwplayer_login_logout_form();
return;
}
}
// Perform the logout.
update_option('jwplayer_login', null);
update_option('jwplayer_api_key', '');
update_option('jwplayer_api_secret', '');
echo '<h2>Deauthorized</h2><p>Deauthorization successful. Returning you to the <a href="' . esc_url('options-media.php') . '">media settings</a> page...</p>';
// Perform a manual JavaScript redirect
echo '<script type="application/x-javascript">document.location.href = "options-media.php"</script>';
}
function jwplayer_login_logout()
{
if (!current_user_can('manage_options')) {
jwplayer_login_print_error('You do not have sufficient privileges to access this page.');
return;
}
if (!isset($_POST['logout'])) {
// Input var okay
jwplayer_login_logout_form();
return;
}
// Check the nonce (counter XSRF)
if (!isset($_POST['_wpnonce']) || !wp_verify_nonce(sanitize_text_field(wp_unslash($_POST['_wpnonce'])), 'jwplayer-logout-nonce')) {
// Input var okay
jwplayer_login_print_error('Could not verify the form data.');
jwplayer_login_logout_form();
return;
}
// Perform the logout.
update_option('jwplayer_login', null);
update_option('jwplayer_api_key', '');
update_option('jwplayer_api_secret', '');
$login_url = get_admin_url(null, 'admin.php?page=jwplayer_login_page');
$plugins_url = get_admin_url(null, 'plugins.php');
?>
<h2>Deauthorization successful.</h2>
<p>
You can <a href="<?php
echo esc_url($login_url);
?>
">authorized the plugin with different credentials</a> or
disable the JW Player plugin on <a href="<?php
echo esc_url($plugins_url);
?>
">the plugins page</a>.
</p>
<?php
}
