X-Git-Url: https://scripts.mit.edu/gitweb/autoinstalls/wordpress.git/blobdiff_plain/e08b42e8ad054ec67522d7ac1aaae5dc68cb3d01..ac7339a398e6df50f722bc9616291ce5447d8e5e:/wp-admin/ms-delete-site.php diff --git a/wp-admin/ms-delete-site.php b/wp-admin/ms-delete-site.php index c94089de..af8a5e05 100644 --- a/wp-admin/ms-delete-site.php +++ b/wp-admin/ms-delete-site.php @@ -12,8 +12,7 @@ require_once( dirname( __FILE__ ) . '/admin.php' ); if ( !is_multisite() ) wp_die( __( 'Multisite support is not enabled.' ) ); -// @todo Create a delete blog cap. -if ( ! current_user_can( 'manage_options' ) ) +if ( ! current_user_can( 'delete_site' ) ) wp_die(__( 'You do not have sufficient permissions to delete this site.')); if ( isset( $_GET['h'] ) && $_GET['h'] != '' && get_option( 'delete_blog_hash' ) != false ) { @@ -26,6 +25,7 @@ if ( isset( $_GET['h'] ) && $_GET['h'] != '' && get_option( 'delete_blog_hash' ) } $blog = get_blog_details(); +$user = wp_get_current_user(); $title = __( 'Delete Site' ); $parent_file = 'tools.php'; @@ -42,9 +42,11 @@ if ( isset( $_POST['action'] ) && $_POST['action'] == 'deleteblog' && isset( $_P $url_delete = esc_url( admin_url( 'ms-delete-site.php?h=' . $hash ) ); - $content = __( "Dear User, + $content = __( "Howdy ###USERNAME###, + You recently clicked the 'Delete Site' link on your site and filled in a form on that page. + If you really want to delete your site, click the link below. You will not be asked to confirm again so only click this link if you are absolutely certain: ###URL_DELETE### @@ -65,10 +67,11 @@ Webmaster */ $content = apply_filters( 'delete_site_email_content', $content ); + $content = str_replace( '###USERNAME###', $user->user_login, $content ); $content = str_replace( '###URL_DELETE###', $url_delete, $content ); $content = str_replace( '###SITE_NAME###', $current_site->site_name, $content ); - wp_mail( get_option( 'admin_email' ), "[ " . get_option( 'blogname' ) . " ] ".__( 'Delete My Site' ), $content ); + wp_mail( get_option( 'admin_email' ), "[ " . wp_specialchars_decode( get_option( 'blogname' ) ) . " ] ".__( 'Delete My Site' ), $content ); ?>