Member Content: Tags: Require Login

[n7studios]

Summary

Fixes this reported vulnerability by requiring that Member Content gated by Tag enforce the login / magic link method to obtain a signed subscriber ID to access the content gated by tag, in the same way the Plugin functions for content gated by Kit Form or Kit Product.

As a result, numeric, non signed subscriber IDs cannot access gated content by tag, which mirrors the behaviour for gated content by Kit Form and Kit Product.

Slack thread.

Testing

Updated tests to reflect that gating content by tag requires a login.

Checklist

• I have written a test and included it in this PR
• I have run all tests and they pass
• The code passes when running the PHP CodeSniffer
• Code meets WordPress Coding Standards for PHP, HTML, CSS and JS
• Security and Sanitization requirements have been followed
• I have assigned a reviewer or two to review this PR (if you're not sure who to assign, we can do this step for you)

[ciccio-kit]

LGTM ✅

[github-actions]

WordPress Playground

🚀 Your PR has been built and is ready for testing in WordPress Playground!

Click here to test your changes in WordPress Playground