X-Git-Url: https://scripts.mit.edu/gitweb/autoinstalls/wordpress.git/blobdiff_plain/5964d2279dc52bdfe105f9bfa17e04337d47a3fa..e0feb3b2e5b436a06bbb04fbc838d1cd6ec95399:/wp-admin/network/sites.php?ds=sidebyside diff --git a/wp-admin/network/sites.php b/wp-admin/network/sites.php index e9b314da..733383ac 100644 --- a/wp-admin/network/sites.php +++ b/wp-admin/network/sites.php @@ -8,13 +8,13 @@ */ /** Load WordPress Administration Bootstrap */ -require_once( './admin.php' ); +require_once( dirname( __FILE__ ) . '/admin.php' ); if ( ! is_multisite() ) wp_die( __( 'Multisite support is not enabled.' ) ); if ( ! current_user_can( 'manage_sites' ) ) - wp_die( __( 'You do not have permission to access this page.' ) ); + wp_die( __( 'You do not have permission to access this page.' ), 403 ); $wp_list_table = _get_list_table( 'WP_MS_Sites_List_Table' ); $pagenum = $wp_list_table->get_pagenum(); @@ -22,7 +22,7 @@ $pagenum = $wp_list_table->get_pagenum(); $title = __( 'Sites' ); $parent_file = 'sites.php'; -add_screen_option( 'per_page', array( 'label' => _x( 'Sites', 'sites per page (screen options)' ) ) ); +add_screen_option( 'per_page' ); get_current_screen()->add_help_tab( array( 'id' => 'overview', @@ -42,68 +42,86 @@ get_current_screen()->add_help_tab( array( get_current_screen()->set_help_sidebar( '
' . __('For more information:') . '
' . - '' . __('Documentation on Site Management') . '
' . - '' . __('Support Forums') . '
' + '' . __('Documentation on Site Management') . '
' . + '' . __('Support Forums') . '
' ); $id = isset( $_REQUEST['id'] ) ? intval( $_REQUEST['id'] ) : 0; if ( isset( $_GET['action'] ) ) { - do_action( 'wpmuadminedit' , '' ); + /** This action is documented in wp-admin/network/edit.php */ + do_action( 'wpmuadminedit' ); + + // A list of valid actions and their associated messaging for confirmation output. + $manage_actions = array( + 'activateblog' => __( 'You are about to activate the site %s' ), + 'deactivateblog' => __( 'You are about to deactivate the site %s' ), + 'unarchiveblog' => __( 'You are about to unarchive the site %s.' ), + 'archiveblog' => __( 'You are about to archive the site %s.' ), + 'unspamblog' => __( 'You are about to unspam the site %s.' ), + 'spamblog' => __( 'You are about to mark the site %s as spam.' ), + 'deleteblog' => __( 'You are about to delete the site %s.' ), + 'unmatureblog' => __( 'You are about to mark the site %s as mature.' ), + 'matureblog' => __( 'You are about to mark the site %s as not mature.' ), + ); if ( 'confirm' === $_GET['action'] ) { - check_admin_referer( 'confirm' ); + // The action2 parameter contains the action being taken on the site. + $site_action = $_GET['action2']; + + if ( ! array_key_exists( $site_action, $manage_actions ) ) { + wp_die( __( 'The requested action is not valid.' ) ); + } + + // The mature/unmature UI exists only as external code. Check the "confirm" nonce for backward compatibility. + if ( 'matureblog' === $site_action || 'unmatureblog' === $site_action ) { + check_admin_referer( 'confirm' ); + } else { + check_admin_referer( $site_action . '_' . $id ); + } if ( ! headers_sent() ) { nocache_headers(); header( 'Content-Type: text/html; charset=utf-8' ); } - if ( $current_site->blog_id == $id ) + + if ( $current_site->blog_id == $id ) { wp_die( __( 'You are not allowed to change the current site.' ) ); + } + + $site_details = get_blog_details( $id ); + $site_address = untrailingslashit( $site_details->domain . $site_details->path ); + + require_once( ABSPATH . 'wp-admin/admin-header.php' ); ?> - - > - -