X-Git-Url: https://scripts.mit.edu/gitweb/autoinstallsdev/wordpress.git/blobdiff_plain/ff81ee6e8304a1982a3ec4f5b134764a29d502cf..refs/tags/wordpress-3.0.4:/wp-admin/users.php diff --git a/wp-admin/users.php b/wp-admin/users.php index ab555323..aeaabc3b 100644 --- a/wp-admin/users.php +++ b/wp-admin/users.php @@ -1,126 +1,207 @@ ' . __('This screen lists all the existing users for your site. Each user has one of five defined roles as set by the site admin: Site Administrator, Editor, Author, Contributor, or Subscriber. Users with roles other than Administrator will see fewer options when they are logged in, based on their role.') . '
' . + '' . __('You can customize the display of information on this screen as you can on other screens, by using the Screen Options tab and the on-screen filters.') . '
' . + '' . __('To add a new user for your site, click the Add New button at the top of the screen or Add New in the Users menu section.') . '
' . + '' . __('For more information:') . '
' . + '' . __('Documentation on Authors and Users') . '
' . + '' . __('Roles and Capabilities Descriptions') . '
' . + '' . __('Support Forums') . '
' +); + +$update = $doaction = ''; +if ( isset($_REQUEST['action']) ) + $doaction = $_REQUEST['action'] ? $_REQUEST['action'] : $_REQUEST['action2']; + +if ( empty($doaction) ) { + if ( isset($_GET['changeit']) && !empty($_GET['new_role']) ) + $doaction = 'promote'; +} -switch ($action) { +if ( empty($_REQUEST) ) { + $referer = ''; +} elseif ( isset($_REQUEST['wp_http_referer']) ) { + $redirect = remove_query_arg(array('wp_http_referer', 'updated', 'delete_count'), stripslashes($_REQUEST['wp_http_referer'])); + $referer = ''; +} else { + $redirect = 'users.php'; + $referer = ''; +} + +switch ($doaction) { +/* Bulk Dropdown menu Role changes */ case 'promote': - check_admin_referer(); + check_admin_referer('bulk-users'); - if (empty($_POST['users'])) { - header('Location: users.php'); + if ( empty($_REQUEST['users']) ) { + wp_redirect($redirect); + exit(); } - if ( !current_user_can('edit_users') ) - die(__('You can’t edit users.')); + $editable_roles = get_editable_roles(); + if ( empty( $editable_roles[$_REQUEST['new_role']] ) ) + wp_die(__('You can’t give users that role.')); - $userids = $_POST['users']; + $userids = $_REQUEST['users']; $update = 'promote'; - foreach($userids as $id) { - // The new role of the current user must also have edit_users caps - if($id == $current_user->id && !$wp_roles->role_objects[$_POST['new_role']]->has_cap('edit_users')) { + foreach ( $userids as $id ) { + $id = (int) $id; + + if ( ! current_user_can('promote_user', $id) ) + wp_die(__('You can’t edit that user.')); + // The new role of the current user must also have promote_users caps + if ( $id == $current_user->ID && !$wp_roles->role_objects[$_REQUEST['new_role']]->has_cap('promote_users') ) { $update = 'err_admin_role'; continue; } - $user = new WP_User($id); - $user->set_role($_POST['new_role']); - } - - header('Location: users.php?update=' . $update); + // If the user doesn't already belong to the blog, bail. + if ( is_multisite() && !is_user_member_of_blog( $id ) ) + wp_die(__('Cheatin’ uh?')); + + $user = new WP_User($id); + $user->set_role($_REQUEST['new_role']); + } + + wp_redirect(add_query_arg('update', $update, $redirect)); + exit(); break; case 'dodelete': + if ( is_multisite() ) + wp_die( __('User deletion is not allowed from this screen.') ); - check_admin_referer(); + check_admin_referer('delete-users'); - if ( empty($_POST['users']) ) { - header('Location: users.php'); + if ( empty($_REQUEST['users']) ) { + wp_redirect($redirect); + exit(); } - if ( !current_user_can('edit_users') ) - die(__('You can’t delete users.')); + if ( ! current_user_can( 'delete_users' ) ) + wp_die(__('You can’t delete users.')); - $userids = $_POST['users']; - + $userids = $_REQUEST['users']; $update = 'del'; - foreach ($userids as $id) { - if($id == $current_user->id) { + $delete_count = 0; + + foreach ( (array) $userids as $id) { + $id = (int) $id; + + if ( ! current_user_can( 'delete_user', $id ) ) + wp_die(__( 'You can’t delete that user.' ) ); + + if ( $id == $current_user->ID ) { $update = 'err_admin_del'; continue; } - switch($_POST['delete_option']) { + switch ( $_REQUEST['delete_option'] ) { case 'delete': - wp_delete_user($id); + if ( current_user_can('delete_user', $id) ) + wp_delete_user($id); break; case 'reassign': - wp_delete_user($id, $_POST['reassign_user']); + if ( current_user_can('delete_user', $id) ) + wp_delete_user($id, $_REQUEST['reassign_user']); break; } + ++$delete_count; } - header('Location: users.php?update=' . $update); + $redirect = add_query_arg( array('delete_count' => $delete_count, 'update' => $update), $redirect); + wp_redirect($redirect); + exit(); break; case 'delete': + if ( is_multisite() ) + wp_die( __('User deletion is not allowed from this screen.') ); - check_admin_referer(); + check_admin_referer('bulk-users'); - if (empty($_POST['users'])) { - header('Location: users.php'); + if ( empty($_REQUEST['users']) && empty($_REQUEST['user']) ) { + wp_redirect($redirect); + exit(); } - if ( !current_user_can('edit_users') ) - $error['edit_users'] = __('You can’t delete users.'); + if ( ! current_user_can( 'delete_users' ) ) + $errors = new WP_Error( 'edit_users', __( 'You can’t delete users.' ) ); - $userids = $_POST['users']; + if ( empty($_REQUEST['users']) ) + $userids = array(intval($_REQUEST['user'])); + else + $userids = $_REQUEST['users']; include ('admin-header.php'); ?> +get_results()); + + // Query the users for this page + cache_users($wp_user_search->get_results()); + + $messages = array(); + if ( isset($_GET['update']) ) : switch($_GET['update']) { case 'del': - ?> -' . sprintf(_n('%s user deleted', '%s users deleted', $delete_count), $delete_count) . '
'; break; case 'add': - ?> -' . __('New user created.') . '
'; break; case 'promote': - ?> -' . __('Changed roles.') . '
'; break; case 'err_admin_role': - ?> -' . __('The current user’s role must have user editing capabilities.') . '
'; + $messages[] = '' . __('Other user roles have been changed.') . '
' . __('You can’t delete the current user.') . '
'; + $messages[] = '' . __('Other users have been deleted.') . '
' . __('User removed from this site.') . '
' . __("You can't remove the current user.") . '
' . __('Other users have been removed.') . '
- role_names[$role]; ?>- |
-
- ||||||
---|---|---|---|---|---|---|
- | - | - | - | - | - | - |
- | - | - | $short_url | "; - echo "$numposts | "; - echo ''; - if (current_user_can('edit_users')) - echo "".__('Edit').""; - echo ' | '; - echo '
+ + + +
+- | -- |
---|---|
- | - |
- | - |
- | - |
- | - |
- |
- - |
-
- -
-