X-Git-Url: https://scripts.mit.edu/gitweb/autoinstalls/wordpress.git/blobdiff_plain/022dfbbbe3215917d84708eb09acca93b21ae9e0..a5227bf01edbe6660486c9f5c0f0ed7b7fea3130:/wp-admin/users.php diff --git a/wp-admin/users.php b/wp-admin/users.php index fcd4fe03..aeaabc3b 100644 --- a/wp-admin/users.php +++ b/wp-admin/users.php @@ -1,131 +1,207 @@ ' . __('This screen lists all the existing users for your site. Each user has one of five defined roles as set by the site admin: Site Administrator, Editor, Author, Contributor, or Subscriber. Users with roles other than Administrator will see fewer options when they are logged in, based on their role.') . '

' . + '

' . __('You can customize the display of information on this screen as you can on other screens, by using the Screen Options tab and the on-screen filters.') . '

' . + '

' . __('To add a new user for your site, click the Add New button at the top of the screen or Add New in the Users menu section.') . '

' . + '

' . __('For more information:') . '

' . + '

' . __('Documentation on Authors and Users') . '

' . + '

' . __('Roles and Capabilities Descriptions') . '

' . + '

' . __('Support Forums') . '

' +); + +$update = $doaction = ''; +if ( isset($_REQUEST['action']) ) + $doaction = $_REQUEST['action'] ? $_REQUEST['action'] : $_REQUEST['action2']; + +if ( empty($doaction) ) { + if ( isset($_GET['changeit']) && !empty($_GET['new_role']) ) + $doaction = 'promote'; +} -switch ($action) { +if ( empty($_REQUEST) ) { + $referer = ''; +} elseif ( isset($_REQUEST['wp_http_referer']) ) { + $redirect = remove_query_arg(array('wp_http_referer', 'updated', 'delete_count'), stripslashes($_REQUEST['wp_http_referer'])); + $referer = ''; +} else { + $redirect = 'users.php'; + $referer = ''; +} +switch ($doaction) { + +/* Bulk Dropdown menu Role changes */ case 'promote': check_admin_referer('bulk-users'); - if (empty($_POST['users'])) { - wp_redirect('users.php'); + if ( empty($_REQUEST['users']) ) { + wp_redirect($redirect); exit(); } - if ( !current_user_can('edit_users') ) - die(__('You can’t edit users.')); + $editable_roles = get_editable_roles(); + if ( empty( $editable_roles[$_REQUEST['new_role']] ) ) + wp_die(__('You can’t give users that role.')); - $userids = $_POST['users']; + $userids = $_REQUEST['users']; $update = 'promote'; - foreach($userids as $id) { - // The new role of the current user must also have edit_users caps - if($id == $current_user->id && !$wp_roles->role_objects[$_POST['new_role']]->has_cap('edit_users')) { + foreach ( $userids as $id ) { + $id = (int) $id; + + if ( ! current_user_can('promote_user', $id) ) + wp_die(__('You can’t edit that user.')); + // The new role of the current user must also have promote_users caps + if ( $id == $current_user->ID && !$wp_roles->role_objects[$_REQUEST['new_role']]->has_cap('promote_users') ) { $update = 'err_admin_role'; continue; } - $user = new WP_User($id); - $user->set_role($_POST['new_role']); - } - - wp_redirect('users.php?update=' . $update); + // If the user doesn't already belong to the blog, bail. + if ( is_multisite() && !is_user_member_of_blog( $id ) ) + wp_die(__('Cheatin’ uh?')); + + $user = new WP_User($id); + $user->set_role($_REQUEST['new_role']); + } + + wp_redirect(add_query_arg('update', $update, $redirect)); exit(); break; case 'dodelete': + if ( is_multisite() ) + wp_die( __('User deletion is not allowed from this screen.') ); check_admin_referer('delete-users'); - if ( empty($_POST['users']) ) { - wp_redirect('users.php'); + if ( empty($_REQUEST['users']) ) { + wp_redirect($redirect); exit(); } - if ( !current_user_can('edit_users') ) - die(__('You can’t delete users.')); + if ( ! current_user_can( 'delete_users' ) ) + wp_die(__('You can’t delete users.')); - $userids = $_POST['users']; - + $userids = $_REQUEST['users']; $update = 'del'; - foreach ($userids as $id) { - if($id == $current_user->id) { + $delete_count = 0; + + foreach ( (array) $userids as $id) { + $id = (int) $id; + + if ( ! current_user_can( 'delete_user', $id ) ) + wp_die(__( 'You can’t delete that user.' ) ); + + if ( $id == $current_user->ID ) { $update = 'err_admin_del'; continue; } - switch($_POST['delete_option']) { + switch ( $_REQUEST['delete_option'] ) { case 'delete': - wp_delete_user($id); + if ( current_user_can('delete_user', $id) ) + wp_delete_user($id); break; case 'reassign': - wp_delete_user($id, $_POST['reassign_user']); + if ( current_user_can('delete_user', $id) ) + wp_delete_user($id, $_REQUEST['reassign_user']); break; } + ++$delete_count; } - wp_redirect('users.php?update=' . $update); + $redirect = add_query_arg( array('delete_count' => $delete_count, 'update' => $update), $redirect); + wp_redirect($redirect); exit(); + break; case 'delete': + if ( is_multisite() ) + wp_die( __('User deletion is not allowed from this screen.') ); check_admin_referer('bulk-users'); - if ( empty($_POST['users']) ) { - wp_redirect('users.php'); + if ( empty($_REQUEST['users']) && empty($_REQUEST['user']) ) { + wp_redirect($redirect); exit(); } - if ( !current_user_can('edit_users') ) - $error['edit_users'] = __('You can’t delete users.'); + if ( ! current_user_can( 'delete_users' ) ) + $errors = new WP_Error( 'edit_users', __( 'You can’t delete users.' ) ); - $userids = $_POST['users']; + if ( empty($_REQUEST['users']) ) + $userids = array(intval($_REQUEST['user'])); + else + $userids = $_REQUEST['users']; include ('admin-header.php'); ?>
+ +
+

- -

+ } + // @todo Delete is always for !is_multisite(). Use API. + if ( !is_multisite() ) { + $all_logins = $wpdb->get_results("SELECT ID, user_login FROM $wpdb->users ORDER BY user_login"); + } else { + // WPMU only searches users of current blog + $all_logins = $wpdb->get_results("SELECT ID, user_login FROM $wpdb->users, $wpdb->usermeta WHERE $wpdb->users.ID = $wpdb->usermeta.user_id AND meta_key = '".$wpdb->prefix."capabilities' ORDER BY user_login"); + } + $user_dropdown = ''; + ?> + + +

  • '.__('Attribute all posts and links to:')." $user_dropdown"; ?>
    • -
+
-

+

@@ -135,201 +211,329 @@ case 'delete': break; -case 'adduser': - check_admin_referer('add-user'); - - $errors = add_user(); - - if ( count($errors) == 0 ) { - wp_redirect('users.php?update=add'); +case 'doremove': + check_admin_referer('remove-users'); + + if ( empty($_REQUEST['users']) ) { + wp_redirect($redirect); + exit; + } + + if ( !current_user_can('remove_users') ) + die(__('You can’t remove users.')); + + $userids = $_REQUEST['users']; + + $update = 'remove'; + foreach ( $userids as $id ) { + $id = (int) $id; + if ( $id == $current_user->id && !is_super_admin() ) { + $update = 'err_admin_remove'; + continue; + } + if ( !current_user_can('remove_user', $id) ) { + $update = 'err_admin_remove'; + continue; + } + remove_user_from_blog($id, $blog_id); + } + + $redirect = add_query_arg( array('update' => $update), $redirect); + wp_redirect($redirect); + exit; + +break; + +case 'remove': + + check_admin_referer('bulk-users'); + + if ( empty($_REQUEST['users']) && empty($_REQUEST['user']) ) { + wp_redirect($redirect); exit(); } -default: - + if ( !current_user_can('remove_users') ) + $error = new WP_Error('edit_users', __('You can’t remove users.')); + + if ( empty($_REQUEST['users']) ) + $userids = array(intval($_REQUEST['user'])); + else + $userids = $_REQUEST['users']; + include ('admin-header.php'); - - $userids = $wpdb->get_col("SELECT ID FROM $wpdb->users;"); - - foreach($userids as $userid) { - $tmp_user = new WP_User($userid); - $roles = $tmp_user->roles; - $role = array_shift($roles); - $roleclasses[$role][$tmp_user->user_login] = $tmp_user; - } - - ?> +?> + + + + +
+ +

+

+
    +id && !is_super_admin() ) { + echo "
  • " . sprintf(__('ID #%1s: %2s The current user will not be removed.'), $id, $user->user_login) . "
    • \n"; + } elseif ( !current_user_can('remove_user', $id) ) { + echo "
  • " . sprintf(__('ID #%1s: %2s You don\'t have permission to remove this user.'), $id, $user->user_login) . "
    • \n"; + } else { + echo "
  • " . sprintf(__('ID #%1s: %2s'), $id, $user->user_login) . "
    • \n"; + $go_remove = true; + } + } + ?> + + +

    + +

    + +
+ +get_results()); + + // Query the users for this page + cache_users($wp_user_search->get_results()); + + $messages = array(); + if ( isset($_GET['update']) ) : switch($_GET['update']) { case 'del': - ?> -

-

' . sprintf(_n('%s user deleted', '%s users deleted', $delete_count), $delete_count) . '

'; break; case 'add': - ?> -

-

' . __('New user created.') . '

'; break; case 'promote': - ?> -

-

' . __('Changed roles.') . '

'; break; case 'err_admin_role': - ?> -

-

-

' . __('The current user’s role must have user editing capabilities.') . '

'; + $messages[] = '

' . __('Other user roles have been changed.') . '

'; break; case 'err_admin_del': - ?> -

-

-

' . __('You can’t delete the current user.') . '

'; + $messages[] = '

' . __('Other users have been deleted.') . '

'; + break; + case 'remove': + $messages[] = '

' . __('User removed from this site.') . '

'; + break; + case 'err_admin_remove': + $messages[] = '

' . __("You can't remove the current user.") . '

'; + $messages[] = '

' . __('Other users have been removed.') . '

'; break; } - endif; - if ( isset($errors) ) : ?> + endif; ?> + +
- - -
- -
-

- - $roleclass) { - uksort($roleclass, "strnatcasecmp"); - ?> + - - - - - - - - - - - - user_email; - $url = $user_object->user_url; - $short_url = str_replace('http://', '', $url); - $short_url = str_replace('www.', '', $short_url); - if ('/' == substr($short_url, -1)) - $short_url = substr($short_url, 0, -1); - if (strlen($short_url) > 35) - $short_url = substr($short_url, 0, 32).'...'; - $style = ('class="alternate"' == $style) ? '' : 'class="alternate"'; - $numposts = $wpdb->get_var("SELECT COUNT(*) FROM $wpdb->posts WHERE post_author = '$user_object->ID' and post_status = 'publish'"); - if (0 < $numposts) $numposts = "$numposts"; - echo " - - - - - - "; - echo ""; - echo ''; - echo ''; - } - - ?> - +if ( ! empty($messages) ) { + foreach ( $messages as $msg ) + echo $msg; +} ?> +
+ +

' . __('Search results for “%s”') . '', esc_html( $_GET['usersearch'] ) ); ?> +

+ +
+ +
    " . sprintf( _nx( 'All (%s)', 'All (%s)', $total_users, 'users' ), number_format_i18n( $total_users ) ) . ''; +foreach ( $wp_roles->get_names() as $this_role => $name ) { + if ( !isset($avail_roles[$this_role]) ) + continue; + + $class = ''; + + if ( $this_role == $role ) { + $current_role = $role; + $class = ' class="current"'; } + + $name = translate_user_role( $name ); + /* translators: User role name with count */ + $name = sprintf( __('%1$s (%2$s)'), $name, $avail_roles[$this_role] ); + $role_links[] = "
  • $name"; +} +echo implode( " |
    • \n", $role_links) . ''; +unset($role_links); ?> -
-

role_names[$role]; ?>

-
 
$email$short_url$numposts'; - if (current_user_can('edit_users')) - echo "".__('Edit').""; - echo '
+ + +
+ +
+

+ + + +

+
+ +
+
+ +results_are_paged() ) : ?> +
page_links(); ?>
+ +
+ + + + + +
+ +
+
-

+ search_errors ) ) : ?> +
+ +
+ + + +get_results() ) : ?> + + is_search() ) : ?> +

+ + + + + + + + + + + + + + + +'; -foreach($wp_roles->role_names as $role => $name) { - $role_select .= ""; +$style = ''; +foreach ( $wp_user_search->get_results() as $userid ) { + $user_object = new WP_User($userid); + $roles = $user_object->roles; + $role = array_shift($roles); + + if ( is_multisite() && empty( $role ) ) + continue; + + $style = ( ' class="alternate"' == $style ) ? '' : ' class="alternate"'; + echo "\n\t", user_row( $user_object, $style, $role, $post_counts[ $userid ] ); } -$role_select .= ''; -?> - -

+?> + +
+ +
+ +results_are_paged() ) : ?> +
page_links(); ?>
+ + +
+ + +
+ +
+ + +
+ -
-

-'.sprintf(__('Users can register themselves or you can manually create users here.'), get_settings('siteurl').'/wp-register.php').'

'; ?> -
- - - - - - - - - - - - - - - - - - - - - - 'user_login', 'first_name' => 'user_firstname', 'last_name' => 'user_lastname', 'email' => 'user_email', 'url' => 'user_uri', 'role' => 'user_role') as $formpost => $var ) { + $var = 'new_' . $var; + $$var = isset($_REQUEST[$formpost]) ? esc_attr(stripslashes($_REQUEST[$formpost])) : ''; + } + unset($name); +} ?> - - - - - -
-
-
-
-

- -

-
-
- +