X-Git-Url: https://scripts.mit.edu/gitweb/autoinstalls/wordpress.git/blobdiff_plain/341dfbb66f24f5145174c373267f889c31615cc5..refs/tags/wordpress-4.5:/wp-admin/users.php diff --git a/wp-admin/users.php b/wp-admin/users.php index 5fefb427..789f34c9 100644 --- a/wp-admin/users.php +++ b/wp-admin/users.php @@ -1,23 +1,29 @@ ' . __( 'Cheatin’ uh?' ) . '' . + '

' . __( 'You are not allowed to browse users.' ) . '

', + 403 + ); +} $wp_list_table = _get_list_table('WP_Users_List_Table'); $pagenum = $wp_list_table->get_pagenum(); $title = __('Users'); $parent_file = 'users.php'; -add_screen_option( 'per_page', array('label' => _x( 'Users', 'users per page (screen options)' )) ); +add_screen_option( 'per_page' ); // contextual help - choose Help on the top right of admin panel to preview this. get_current_screen()->add_help_tab( array( @@ -33,7 +39,7 @@ get_current_screen()->add_help_tab( array( 'content' => '

' . __('You can customize the display of this screen in a number of ways:') . '

' . '' ) ); @@ -43,9 +49,9 @@ $help = '

' . __('Hovering over a row in the users list will display action li '

  • ' . __('Edit takes you to the editable profile screen for that user. You can also reach that screen by clicking on the username.') . '
    • '; if ( is_multisite() ) - $help .= '
  • ' . __( 'Remove allows you to remove a user from your site. It does not delete their posts. You can also remove multiple users at once by using Bulk Actions.' ) . '
    • '; + $help .= '
  • ' . __( 'Remove allows you to remove a user from your site. It does not delete their content. You can also remove multiple users at once by using Bulk Actions.' ) . '
    • '; else - $help .= '
  • ' . __( 'Delete brings you to the Delete Users screen for confirmation, where you can permanently remove a user from your site and delete their posts. You can also delete multiple users at once by using Bulk Actions.' ) . '
    • '; + $help .= '
  • ' . __( 'Delete brings you to the Delete Users screen for confirmation, where you can permanently remove a user from your site and delete their content. You can also delete multiple users at once by using Bulk Actions.' ) . '
    • '; $help .= ''; @@ -58,15 +64,21 @@ unset( $help ); get_current_screen()->set_help_sidebar( '

    ' . __('For more information:') . '

    ' . - '

    ' . __('Documentation on Managing Users') . '

    ' . - '

    ' . __('Descriptions of Roles and Capabilities') . '

    ' . - '

    ' . __('Support Forums') . '

    ' + '

    ' . __('Documentation on Managing Users') . '

    ' . + '

    ' . __('Descriptions of Roles and Capabilities') . '

    ' . + '

    ' . __('Support Forums') . '

    ' ); +get_current_screen()->set_screen_reader_content( array( + 'heading_views' => __( 'Filter users list' ), + 'heading_pagination' => __( 'Users list navigation' ), + 'heading_list' => __( 'Users list' ), +) ); + if ( empty($_REQUEST) ) { - $referer = ''; + $referer = ''; } elseif ( isset($_REQUEST['wp_http_referer']) ) { - $redirect = remove_query_arg(array('wp_http_referer', 'updated', 'delete_count'), stripslashes($_REQUEST['wp_http_referer'])); + $redirect = remove_query_arg(array('wp_http_referer', 'updated', 'delete_count'), wp_unslash( $_REQUEST['wp_http_referer'] ) ); $referer = ''; } else { $redirect = 'users.php'; @@ -90,8 +102,16 @@ case 'promote': } $editable_roles = get_editable_roles(); - if ( empty( $editable_roles[$_REQUEST['new_role']] ) ) - wp_die(__('You can’t give users that role.')); + $role = false; + if ( ! empty( $_REQUEST['new_role2'] ) ) { + $role = $_REQUEST['new_role2']; + } elseif ( ! empty( $_REQUEST['new_role'] ) ) { + $role = $_REQUEST['new_role']; + } + + if ( ! $role || empty( $editable_roles[ $role ] ) ) { + wp_die( __( 'You can’t give users that role.' ) ); + } $userids = $_REQUEST['users']; $update = 'promote'; @@ -101,25 +121,28 @@ case 'promote': if ( ! current_user_can('promote_user', $id) ) wp_die(__('You can’t edit that user.')); // The new role of the current user must also have the promote_users cap or be a multisite super admin - if ( $id == $current_user->ID && ! $wp_roles->role_objects[ $_REQUEST['new_role'] ]->has_cap('promote_users') + if ( $id == $current_user->ID && ! $wp_roles->role_objects[ $role ]->has_cap('promote_users') && ! ( is_multisite() && is_super_admin() ) ) { $update = 'err_admin_role'; continue; } // If the user doesn't already belong to the blog, bail. - if ( is_multisite() && !is_user_member_of_blog( $id ) ) - wp_die(__('Cheatin’ uh?')); + if ( is_multisite() && !is_user_member_of_blog( $id ) ) { + wp_die( + '

    ' . __( 'Cheatin’ uh?' ) . '

    ' . + '

    ' . __( 'One of the selected users is not a member of this site.' ) . '

    ', + 403 + ); + } - $user = new WP_User($id); - $user->set_role($_REQUEST['new_role']); + $user = get_userdata( $id ); + $user->set_role( $role ); } wp_redirect(add_query_arg('update', $update, $redirect)); exit(); -break; - case 'dodelete': if ( is_multisite() ) wp_die( __('User deletion is not allowed from this screen.') ); @@ -131,16 +154,22 @@ case 'dodelete': exit(); } + $userids = array_map( 'intval', (array) $_REQUEST['users'] ); + + if ( empty( $_REQUEST['delete_option'] ) ) { + $url = self_admin_url( 'users.php?action=delete&users[]=' . implode( '&users[]=', $userids ) . '&error=true' ); + $url = str_replace( '&', '&', wp_nonce_url( $url, 'bulk-users' ) ); + wp_redirect( $url ); + exit; + } + if ( ! current_user_can( 'delete_users' ) ) wp_die(__('You can’t delete users.')); - $userids = $_REQUEST['users']; $update = 'del'; $delete_count = 0; - foreach ( (array) $userids as $id) { - $id = (int) $id; - + foreach ( $userids as $id ) { if ( ! current_user_can( 'delete_user', $id ) ) wp_die(__( 'You can’t delete that user.' ) ); @@ -150,12 +179,10 @@ case 'dodelete': } switch ( $_REQUEST['delete_option'] ) { case 'delete': - if ( current_user_can('delete_user', $id) ) - wp_delete_user($id); + wp_delete_user( $id ); break; case 'reassign': - if ( current_user_can('delete_user', $id) ) - wp_delete_user($id, $_REQUEST['reassign_user']); + wp_delete_user( $id, $_REQUEST['reassign_user'] ); break; } ++$delete_count; @@ -165,8 +192,6 @@ case 'dodelete': wp_redirect($redirect); exit(); -break; - case 'delete': if ( is_multisite() ) wp_die( __('User deletion is not allowed from this screen.') ); @@ -182,46 +207,92 @@ case 'delete': $errors = new WP_Error( 'edit_users', __( 'You can’t delete users.' ) ); if ( empty($_REQUEST['users']) ) - $userids = array(intval($_REQUEST['user'])); + $userids = array( intval( $_REQUEST['user'] ) ); else - $userids = (array) $_REQUEST['users']; + $userids = array_map( 'intval', (array) $_REQUEST['users'] ); - include ('admin-header.php'); + $users_have_content = false; + if ( $wpdb->get_var( "SELECT ID FROM {$wpdb->posts} WHERE post_author IN( " . implode( ',', $userids ) . " ) LIMIT 1" ) ) { + $users_have_content = true; + } elseif ( $wpdb->get_var( "SELECT link_id FROM {$wpdb->links} WHERE link_owner IN( " . implode( ',', $userids ) . " ) LIMIT 1" ) ) { + $users_have_content = true; + } + + if ( $users_have_content ) { + add_action( 'admin_head', 'delete_users_add_js' ); + } + + include( ABSPATH . 'wp-admin/admin-header.php' ); ?> -
    +
    - -

    -

    +

    + +
    +

    +
    + + + +

    + +

    + + - -

    -
      -
      • -
    • - '.__('Attribute all posts and links to:').''; - wp_dropdown_users( array( 'name' => 'reassign_user', 'exclude' => array_diff( $userids, array($current_user->ID) ) ) ); ?>
      • -
    + + + + +

    + +

    + +
      +
      • +
    • + ' . __( 'Attribute all content to:' ) . ' '; + wp_dropdown_users( array( + 'name' => 'reassign_user', + 'exclude' => array_diff( $userids, array( $current_user->ID ) ), + 'show' => 'display_name_with_login', + ) ); ?>
      • +
    + - +

    @@ -265,8 +336,6 @@ case 'doremove': wp_redirect($redirect); exit; -break; - case 'remove': check_admin_referer('bulk-users'); @@ -287,35 +356,44 @@ case 'remove': else $userids = $_REQUEST['users']; - include ('admin-header.php'); + include( ABSPATH . 'wp-admin/admin-header.php' ); ?> - +
    - -

    -

    +

    + + +

    + +

    + +
      ID && !is_super_admin() ) { - echo "
    • " . sprintf(__('ID #%1s: %2s The current user will not be removed.'), $id, $user->user_login) . "
      • \n"; + /* translators: 1: user id, 2: user login */ + echo "
    • " . sprintf(__('ID #%1$s: %2$s The current user will not be removed.'), $id, $user->user_login) . "
      • \n"; } elseif ( !current_user_can('remove_user', $id) ) { - echo "
    • " . sprintf(__('ID #%1s: %2s You don\'t have permission to remove this user.'), $id, $user->user_login) . "
      • \n"; + /* translators: 1: user id, 2: user login */ + echo "
    • " . sprintf(__('ID #%1$s: %2$s You don’t have permission to remove this user.'), $id, $user->user_login) . "
      • \n"; } else { - echo "
    • " . sprintf(__('ID #%1s: %2s'), $id, $user->user_login) . "
      • \n"; + /* translators: 1: user id, 2: user login */ + echo "
    • " . sprintf(__('ID #%1$s: %2$s'), $id, $user->user_login) . "
      • \n"; $go_remove = true; } } ?> +
    - +

    @@ -328,7 +406,7 @@ break; default: if ( !empty($_GET['_wp_http_referer']) ) { - wp_redirect(remove_query_arg(array('_wp_http_referer', '_wpnonce'), stripslashes($_SERVER['REQUEST_URI']))); + wp_redirect( remove_query_arg( array( '_wp_http_referer', '_wpnonce'), wp_unslash( $_SERVER['REQUEST_URI'] ) ) ); exit; } @@ -338,7 +416,8 @@ default: wp_redirect( add_query_arg( 'paged', $total_pages ) ); exit; } - include('./admin-header.php'); + + include( ABSPATH . 'wp-admin/admin-header.php' ); $messages = array(); if ( isset($_GET['update']) ) : @@ -346,28 +425,40 @@ default: case 'del': case 'del_many': $delete_count = isset($_GET['delete_count']) ? (int) $_GET['delete_count'] : 0; - $messages[] = '

    ' . sprintf(_n('%s user deleted', '%s users deleted', $delete_count), $delete_count) . '

    '; + if ( 1 == $delete_count ) { + $message = __( 'User deleted.' ); + } else { + $message = _n( '%s user deleted.', '%s users deleted.', $delete_count ); + } + $messages[] = '

    ' . sprintf( $message, number_format_i18n( $delete_count ) ) . '

    '; break; case 'add': - $messages[] = '

    ' . __('New user created.') . '

    '; + if ( isset( $_GET['id'] ) && ( $user_id = $_GET['id'] ) && current_user_can( 'edit_user', $user_id ) ) { + /* translators: %s: edit page url */ + $messages[] = '

    ' . sprintf( __( 'New user created. Edit user' ), + esc_url( add_query_arg( 'wp_http_referer', urlencode( wp_unslash( $_SERVER['REQUEST_URI'] ) ), + self_admin_url( 'user-edit.php?user_id=' . $user_id ) ) ) ) . '

    '; + } else { + $messages[] = '

    ' . __( 'New user created.' ) . '

    '; + } break; case 'promote': - $messages[] = '

    ' . __('Changed roles.') . '

    '; + $messages[] = '

    ' . __('Changed roles.') . '

    '; break; case 'err_admin_role': - $messages[] = '

    ' . __('The current user’s role must have user editing capabilities.') . '

    '; - $messages[] = '

    ' . __('Other user roles have been changed.') . '

    '; + $messages[] = '

    ' . __('The current user’s role must have user editing capabilities.') . '

    '; + $messages[] = '

    ' . __('Other user roles have been changed.') . '

    '; break; case 'err_admin_del': - $messages[] = '

    ' . __('You can’t delete the current user.') . '

    '; - $messages[] = '

    ' . __('Other users have been deleted.') . '

    '; + $messages[] = '

    ' . __('You can’t delete the current user.') . '

    '; + $messages[] = '

    ' . __('Other users have been deleted.') . '

    '; break; case 'remove': - $messages[] = '

    ' . __('User removed from this site.') . '

    '; + $messages[] = '

    ' . __('User removed from this site.') . '

    '; break; case 'err_admin_remove': - $messages[] = '

    ' . __("You can't remove the current user.") . '

    '; - $messages[] = '

    ' . __('Other users have been removed.') . '

    '; + $messages[] = '

    ' . __("You can't remove the current user.") . '

    '; + $messages[] = '

    ' . __('Other users have been removed.') . '

    '; break; } endif; ?> @@ -389,23 +480,25 @@ if ( ! empty($messages) ) { } ?>
    - -

    +

    - + - + ' . __('Search results for “%s”') . '', esc_html( $usersearch ) ); ?> -

    +if ( strlen( $usersearch ) ) { + /* translators: %s: search keywords */ + printf( '' . __( 'Search results for “%s”' ) . '', esc_html( $usersearch ) ); +} +?> + views(); ?> - + search_box( __( 'Search Users' ), 'user' ); ?> @@ -419,4 +512,4 @@ break; } // end of the $doaction switch -include('./admin-footer.php'); +include( ABSPATH . 'wp-admin/admin-footer.php' );