X-Git-Url: https://scripts.mit.edu/gitweb/autoinstalls/wordpress.git/blobdiff_plain/177fd6fefd2e3d5a0ea6591c71d660cabdb3c1a4..96bc8e88cf39086a9e0a883b8e2c311fe82a5e97:/wp-admin/users.php diff --git a/wp-admin/users.php b/wp-admin/users.php index d8089b4c..f124b9ca 100644 --- a/wp-admin/users.php +++ b/wp-admin/users.php @@ -1,56 +1,115 @@ get_pagenum(); $title = __('Users'); $parent_file = 'users.php'; -$action = $_REQUEST['action']; -$update = ''; - -if ( empty($action) ) { - if ( isset($_GET['deleteit']) ) - $action = 'delete'; - elseif ( isset($_GET['changeit']) && !empty($_GET['new_role']) ) - $action = 'promote'; -} +add_screen_option( 'per_page', array('label' => _x( 'Users', 'users per page (screen options)' )) ); + +// contextual help - choose Help on the top right of admin panel to preview this. +get_current_screen()->add_help_tab( array( + 'id' => 'overview', + 'title' => __('Overview'), + 'content' => '

' . __('This screen lists all the existing users for your site. Each user has one of five defined roles as set by the site admin: Site Administrator, Editor, Author, Contributor, or Subscriber. Users with roles other than Administrator will see fewer options in the dashboard navigation when they are logged in, based on their role.') . '

' . + '

' . __('To add a new user for your site, click the Add New button at the top of the screen or Add New in the Users menu section.') . '

' +) ) ; + +get_current_screen()->add_help_tab( array( + 'id' => 'screen-display', + 'title' => __('Screen Display'), + 'content' => '

' . __('You can customize the display of this screen in a number of ways:') . '

' . + '' +) ); + +$help = '

' . __('Hovering over a row in the users list will display action links that allow you to manage users. You can perform the following actions:') . '

' . + ''; + +get_current_screen()->add_help_tab( array( + 'id' => 'actions', + 'title' => __('Actions'), + 'content' => $help, +) ); +unset( $help ); + +get_current_screen()->set_help_sidebar( + '

' . __('For more information:') . '

' . + '

' . __('Documentation on Managing Users') . '

' . + '

' . __('Descriptions of Roles and Capabilities') . '

' . + '

' . __('Support Forums') . '

' +); if ( empty($_REQUEST) ) { - $referer = ''; + $referer = ''; } elseif ( isset($_REQUEST['wp_http_referer']) ) { $redirect = remove_query_arg(array('wp_http_referer', 'updated', 'delete_count'), stripslashes($_REQUEST['wp_http_referer'])); - $referer = ''; + $referer = ''; } else { $redirect = 'users.php'; + $referer = ''; } -switch ($action) { +$update = ''; +switch ( $wp_list_table->current_action() ) { + +/* Bulk Dropdown menu Role changes */ case 'promote': check_admin_referer('bulk-users'); - if (empty($_REQUEST['users'])) { + if ( ! current_user_can( 'promote_users' ) ) + wp_die( __( 'You can’t edit that user.' ) ); + + if ( empty($_REQUEST['users']) ) { wp_redirect($redirect); exit(); } - if ( !current_user_can('edit_users') ) - wp_die(__('You can’t edit users.')); + $editable_roles = get_editable_roles(); + if ( empty( $editable_roles[$_REQUEST['new_role']] ) ) + wp_die(__('You can’t give users that role.')); $userids = $_REQUEST['users']; $update = 'promote'; - foreach($userids as $id) { - if ( ! current_user_can('edit_user', $id) ) + foreach ( $userids as $id ) { + $id = (int) $id; + + if ( ! current_user_can('promote_user', $id) ) wp_die(__('You can’t edit that user.')); - // The new role of the current user must also have edit_users caps - if($id == $current_user->ID && !$wp_roles->role_objects[$_REQUEST['new_role']]->has_cap('edit_users')) { + // The new role of the current user must also have the promote_users cap or be a super admin + if ( $id == $current_user->ID && ! is_super_admin() && ! $wp_roles->role_objects[ $_REQUEST['new_role'] ]->has_cap('promote_users') ) { $update = 'err_admin_role'; continue; } + // If the user doesn't already belong to the blog, bail. + if ( is_multisite() && !is_user_member_of_blog( $id ) ) + wp_die(__('Cheatin’ uh?')); + $user = new WP_User($id); $user->set_role($_REQUEST['new_role']); } @@ -61,6 +120,8 @@ case 'promote': break; case 'dodelete': + if ( is_multisite() ) + wp_die( __('User deletion is not allowed from this screen.') ); check_admin_referer('delete-users'); @@ -69,7 +130,7 @@ case 'dodelete': exit(); } - if ( !current_user_can('delete_users') ) + if ( ! current_user_can( 'delete_users' ) ) wp_die(__('You can’t delete users.')); $userids = $_REQUEST['users']; @@ -77,19 +138,23 @@ case 'dodelete': $delete_count = 0; foreach ( (array) $userids as $id) { - if ( ! current_user_can('delete_user', $id) ) - wp_die(__('You can’t delete that user.')); + $id = (int) $id; + + if ( ! current_user_can( 'delete_user', $id ) ) + wp_die(__( 'You can’t delete that user.' ) ); - if($id == $current_user->ID) { + if ( $id == $current_user->ID ) { $update = 'err_admin_del'; continue; } - switch($_REQUEST['delete_option']) { + switch ( $_REQUEST['delete_option'] ) { case 'delete': - wp_delete_user($id); + if ( current_user_can('delete_user', $id) ) + wp_delete_user($id); break; case 'reassign': - wp_delete_user($id, $_REQUEST['reassign_user']); + if ( current_user_can('delete_user', $id) ) + wp_delete_user($id, $_REQUEST['reassign_user']); break; } ++$delete_count; @@ -102,18 +167,23 @@ case 'dodelete': break; case 'delete': + if ( is_multisite() ) + wp_die( __('User deletion is not allowed from this screen.') ); check_admin_referer('bulk-users'); - if ( empty($_REQUEST['users']) ) { + if ( empty($_REQUEST['users']) && empty($_REQUEST['user']) ) { wp_redirect($redirect); exit(); } - if ( !current_user_can('delete_users') ) - $errors = new WP_Error('edit_users', __('You can’t delete users.')); + if ( ! current_user_can( 'delete_users' ) ) + $errors = new WP_Error( 'edit_users', __( 'You can’t delete users.' ) ); - $userids = $_REQUEST['users']; + if ( empty($_REQUEST['users']) ) + $userids = array(intval($_REQUEST['user'])); + else + $userids = (array) $_REQUEST['users']; include ('admin-header.php'); ?> @@ -122,38 +192,35 @@ case 'delete':
+

-

+

-

+

+ '.__('Attribute all posts and links to:').''; + wp_dropdown_users( array( 'name' => 'reassign_user', 'exclude' => array_diff( $userids, array($current_user->ID) ) ) ); ?> +
-

+

@@ -163,23 +230,100 @@ case 'delete': break; -case 'adduser': - check_admin_referer('add-user'); - - if ( ! current_user_can('create_users') ) - wp_die(__('You can’t create users.')); - - $user_id = add_user(); - $update = 'add'; - if ( is_wp_error( $user_id ) ) - $add_user_errors = $user_id; - else { - $new_user_login = apply_filters('pre_user_login', sanitize_user(stripslashes($_REQUEST['user_login']), true)); - $redirect = add_query_arg( array('usersearch' => urlencode($new_user_login), 'update' => $update), $redirect ); - wp_redirect( $redirect . '#user-' . $user_id ); - die(); +case 'doremove': + check_admin_referer('remove-users'); + + if ( ! is_multisite() ) + wp_die( __( 'You can’t remove users.' ) ); + + if ( empty($_REQUEST['users']) ) { + wp_redirect($redirect); + exit; + } + + if ( ! current_user_can( 'remove_users' ) ) + wp_die( __( 'You can’t remove users.' ) ); + + $userids = $_REQUEST['users']; + + $update = 'remove'; + foreach ( $userids as $id ) { + $id = (int) $id; + if ( $id == $current_user->ID && !is_super_admin() ) { + $update = 'err_admin_remove'; + continue; + } + if ( !current_user_can('remove_user', $id) ) { + $update = 'err_admin_remove'; + continue; + } + remove_user_from_blog($id, $blog_id); + } + + $redirect = add_query_arg( array('update' => $update), $redirect); + wp_redirect($redirect); + exit; + +break; + +case 'remove': + + check_admin_referer('bulk-users'); + + if ( ! is_multisite() ) + wp_die( __( 'You can’t remove users.' ) ); + + if ( empty($_REQUEST['users']) && empty($_REQUEST['user']) ) { + wp_redirect($redirect); + exit(); } + if ( !current_user_can('remove_users') ) + $error = new WP_Error('edit_users', __('You can’t remove users.')); + + if ( empty($_REQUEST['users']) ) + $userids = array(intval($_REQUEST['user'])); + else + $userids = $_REQUEST['users']; + + include ('admin-header.php'); +?> +
+ + + +
+ +

+

+
    +ID && !is_super_admin() ) { + echo "
  • " . sprintf(__('ID #%1s: %2s The current user will not be removed.'), $id, $user->user_login) . "
    • \n"; + } elseif ( !current_user_can('remove_user', $id) ) { + echo "
  • " . sprintf(__('ID #%1s: %2s You don\'t have permission to remove this user.'), $id, $user->user_login) . "
    • \n"; + } else { + echo "
  • " . sprintf(__('ID #%1s: %2s'), $id, $user->user_login) . "
    • \n"; + $go_remove = true; + } + } + ?> + + + + +

    + +
+
+prepare_items(); + $total_pages = $wp_list_table->get_pagination_arg( 'total_pages' ); + if ( $pagenum > $total_pages && $total_pages > 0 ) { + wp_redirect( add_query_arg( 'paged', $total_pages ) ); + exit; + } + include('./admin-header.php'); + $messages = array(); if ( isset($_GET['update']) ) : switch($_GET['update']) { case 'del': case 'del_many': - ?> - -

-

' . sprintf(_n('%s user deleted', '%s users deleted', $delete_count), $delete_count) . '

'; break; case 'add': - ?> -

-

' . __('New user created.') . '

'; break; case 'promote': - ?> -

-

' . __('Changed roles.') . '

'; break; case 'err_admin_role': - ?> -

-

-

' . __('The current user’s role must have user editing capabilities.') . '

'; + $messages[] = '

' . __('Other user roles have been changed.') . '

'; break; case 'err_admin_del': - ?> -

-

-

' . __('You can’t delete the current user.') . '

'; + $messages[] = '

' . __('Other users have been deleted.') . '

'; + break; + case 'remove': + $messages[] = '

' . __('User removed from this site.') . '

'; + break; + case 'err_admin_remove': + $messages[] = '

' . __("You can't remove the current user.") . '

'; + $messages[] = '

' . __('Other users have been removed.') . '

'; break; } endif; ?> - +
- - -
-
- is_search() ) : ?> -

search_term)); ?>

- -

- - - -

- - -

+ +if ( ! empty($messages) ) { + foreach ( $messages as $msg ) + echo $msg; +} ?> -results_are_paged() ) : ?> -
page_links(); ?>
- - -
- - - - -
- -
-
- -
- - search_errors ) ) : ?> -
- -
- - - -get_results() ) : ?> - - is_search() ) : ?> -

- - - - - - - - - - - - - - +
+ +

get_results() as $userid ) { - $user_object = new WP_User($userid); - $roles = $user_object->roles; - $role = array_shift($roles); - - $style = ( ' class="alternate"' == $style ) ? '' : ' class="alternate"'; - echo "\n\t" . user_row($user_object, $style, $role); -} -?> -

-
+echo esc_html( $title ); +if ( current_user_can( 'create_users' ) ) { ?> + + + + +if ( $usersearch ) + printf( '' . __('Search results for “%s”') . '', esc_html( $usersearch ) ); ?> + -results_are_paged() ) : ?> -
page_links(); ?>
- +views(); ?> -
- + - +search_box( __( 'Search Users' ), 'user' ); ?> +display(); ?> - - - 'user_login', 'first_name' => 'user_firstname', 'last_name' => 'user_lastname', 'email' => 'user_email', 'url' => 'user_uri', 'role' => 'user_role') as $formpost => $var ) { - $var = 'new_' . $var; - $$var = attribute_escape(stripslashes($_REQUEST[$formpost])); - } - unset($name); - } -?>
- - -
-

- - -
- get_error_messages() as $message ) - echo "

$message

"; - ?> -
- -
- -' . sprintf(__('Users can register themselves or you can manually create users here.'), get_option('siteurl').'/wp-register.php') . '

'; - else - echo '

' . sprintf(__('Users cannot currently register themselves, but you can manually create users here.'), get_option('siteurl').'/wp-admin/options-general.php#users_can_register') . '

'; -?> -
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
-
-
-
-

- - -

-
-
- +include('./admin-footer.php');