[ Index ]

PHP Cross Reference of WordPress

title

Body

[close]

/wp-admin/network/ -> site-users.php (source)

   1  <?php
   2  /**
   3   * Edit Site Users Administration Screen
   4   *
   5   * @package WordPress
   6   * @subpackage Multisite
   7   * @since 3.1.0
   8   */
   9  
  10  /** Load WordPress Administration Bootstrap */
  11  require_once ( './admin.php' );
  12  
  13  if ( ! is_multisite() )
  14      wp_die( __( 'Multisite support is not enabled.' ) );
  15  
  16  if ( ! current_user_can('manage_sites') )
  17      wp_die(__('You do not have sufficient permissions to edit this site.'));
  18  
  19  $wp_list_table = _get_list_table('WP_Users_List_Table');
  20  $wp_list_table->prepare_items();
  21  
  22  get_current_screen()->add_help_tab( array(
  23      'id'      => 'overview',
  24      'title'   => __('Overview'),
  25      'content' =>
  26          '<p>' . __('The menu is for editing information specific to individual sites, particularly if the admin area of a site is unavailable.') . '</p>' .
  27          '<p>' . __('<strong>Info</strong> - The domain and path are rarely edited as this can cause the site to not work properly. The Registered date and Last Updated date are displayed. Network admins can mark a site as archived, spam, deleted and mature, to remove from public listings or disable.') . '</p>' .
  28          '<p>' . __('<strong>Users</strong> - This displays the users associated with this site. You can also change their role, reset their password, or remove them from the site. Removing the user from the site does not remove the user from the network.') . '</p>' .
  29          '<p>' . sprintf( __('<strong>Themes</strong> - This area shows themes that are not already enabled across the network. Enabling a theme in this menu makes it accessible to this site. It does not activate the theme, but allows it to show in the site&#8217;s Appearance menu. To enable a theme for the entire network, see the <a href="%s">Network Themes</a> screen.' ), network_admin_url( 'themes.php' ) ) . '</p>' .
  30          '<p>' . __('<strong>Settings</strong> - This page shows a list of all settings associated with this site. Some are created by WordPress and others are created by plugins you activate. Note that some fields are grayed out and say Serialized Data. You cannot modify these values due to the way the setting is stored in the database.') . '</p>'
  31  ) );
  32  
  33  get_current_screen()->set_help_sidebar(
  34      '<p><strong>' . __('For more information:') . '</strong></p>' .
  35      '<p>' . __('<a href="http://codex.wordpress.org/Network_Admin_Sites_Screen" target="_blank">Documentation on Site Management</a>') . '</p>' .
  36      '<p>' . __('<a href="http://wordpress.org/support/forum/multisite/" target="_blank">Support Forums</a>') . '</p>'
  37  );
  38  
  39  $_SERVER['REQUEST_URI'] = remove_query_arg( 'update', $_SERVER['REQUEST_URI'] );
  40  $referer = remove_query_arg( 'update', wp_get_referer() );
  41  
  42  $id = isset( $_REQUEST['id'] ) ? intval( $_REQUEST['id'] ) : 0;
  43  
  44  if ( ! $id )
  45      wp_die( __('Invalid site ID.') );
  46  
  47  $details = get_blog_details( $id );
  48  if ( !can_edit_network( $details->site_id ) )
  49      wp_die( __( 'You do not have permission to access this page.' ) );
  50  
  51  $is_main_site = is_main_site( $id );
  52  
  53  // get blog prefix
  54  $blog_prefix = $wpdb->get_blog_prefix( $id );
  55  
  56  // @todo This is a hack. Eventually, add API to WP_Roles allowing retrieval of roles for a particular blog.
  57  if ( ! empty($wp_roles->use_db) ) {
  58      $editblog_roles = get_blog_option( $id, "{$blog_prefix}user_roles" );
  59  } else {
  60      // Roles are stored in memory, not the DB.
  61      $editblog_roles = $wp_roles->roles;
  62  }
  63  $default_role = get_blog_option( $id, 'default_role' );
  64  
  65  $action = $wp_list_table->current_action();
  66  
  67  if ( $action ) {
  68      switch_to_blog( $id );
  69  
  70      switch ( $action ) {
  71          case 'newuser':
  72              check_admin_referer( 'add-user', '_wpnonce_add-new-user' );
  73              $user = $_POST['user'];
  74              if ( !is_array( $_POST['user'] ) || empty( $user['username'] ) || empty( $user['email'] ) ) {
  75                  $update = 'err_new';
  76              } else {
  77                  $password = wp_generate_password( 12, false);
  78                  $user_id = wpmu_create_user( esc_html( strtolower( $user['username'] ) ), $password, esc_html( $user['email'] ) );
  79  
  80                  if ( false == $user_id ) {
  81                       $update = 'err_new_dup';
  82                  } else {
  83                      wp_new_user_notification( $user_id, $password );
  84                      add_user_to_blog( $id, $user_id, $_POST['new_role'] );
  85                      $update = 'newuser';
  86                  }
  87              }
  88              break;
  89  
  90          case 'adduser':
  91              check_admin_referer( 'add-user', '_wpnonce_add-user' );
  92              if ( !empty( $_POST['newuser'] ) ) {
  93                  $update = 'adduser';
  94                  $newuser = $_POST['newuser'];
  95                  $userid = $wpdb->get_var( $wpdb->prepare( "SELECT ID FROM " . $wpdb->users . " WHERE user_login = %s", $newuser ) );
  96                  if ( $userid ) {
  97                      $user = $wpdb->get_var( "SELECT user_id FROM " . $wpdb->usermeta . " WHERE user_id='$userid' AND meta_key='{$blog_prefix}capabilities'" );
  98                      if ( $user == false )
  99                          add_user_to_blog( $id, $userid, $_POST['new_role'] );
 100                      else
 101                          $update = 'err_add_member';
 102                  } else {
 103                      $update = 'err_add_notfound';
 104                  }
 105              } else {
 106                  $update = 'err_add_notfound';
 107              }
 108              break;
 109  
 110          case 'remove':
 111              if ( !current_user_can('remove_users')  )
 112                  die(__('You can&#8217;t remove users.'));
 113              check_admin_referer( 'bulk-users' );
 114  
 115              $update = 'remove';
 116              if ( isset( $_REQUEST['users'] ) ) {
 117                  $userids = $_REQUEST['users'];
 118  
 119                  foreach ( $userids as $user_id ) {
 120                      $user_id = (int) $user_id;
 121                      remove_user_from_blog( $user_id, $id );
 122                  }
 123              } elseif ( isset( $_GET['user'] ) ) {
 124                  remove_user_from_blog( $_GET['user'] );
 125              } else {
 126                  $update = 'err_remove';
 127              }
 128              break;
 129  
 130          case 'promote':
 131              check_admin_referer( 'bulk-users' );
 132              $editable_roles = get_editable_roles();
 133              if ( empty( $editable_roles[$_REQUEST['new_role']] ) )
 134                  wp_die(__('You can&#8217;t give users that role.'));
 135  
 136              if ( isset( $_REQUEST['users'] ) ) {
 137                  $userids = $_REQUEST['users'];
 138                  $update = 'promote';
 139                  foreach ( $userids as $user_id ) {
 140                      $user_id = (int) $user_id;
 141  
 142                      // If the user doesn't already belong to the blog, bail.
 143                      if ( !is_user_member_of_blog( $user_id ) )
 144                          wp_die(__('Cheatin&#8217; uh?'));
 145  
 146                      $user = new WP_User( $user_id );
 147                      $user->set_role( $_REQUEST['new_role'] );
 148                  }
 149              } else {
 150                  $update = 'err_promote';
 151              }
 152              break;
 153      }
 154  
 155      restore_current_blog();
 156      wp_safe_redirect( add_query_arg( 'update', $update, $referer ) );
 157      exit();
 158  }
 159  
 160  if ( isset( $_GET['action'] ) && 'update-site' == $_GET['action'] ) {
 161      wp_safe_redirect( $referer );
 162      exit();
 163  }
 164  
 165  add_screen_option( 'per_page', array( 'label' => _x( 'Users', 'users per page (screen options)' ) ) );
 166  
 167  $site_url_no_http = preg_replace( '#^http(s)?://#', '', get_blogaddress_by_id( $id ) );
 168  $title_site_url_linked = sprintf( __('Edit Site: <a href="%1$s">%2$s</a>'), get_blogaddress_by_id( $id ), $site_url_no_http );
 169  $title = sprintf( __('Edit Site: %s'), $site_url_no_http );
 170  
 171  $parent_file = 'sites.php';
 172  $submenu_file = 'sites.php';
 173  
 174  if ( ! wp_is_large_network( 'users' ) && apply_filters( 'show_network_site_users_add_existing_form', true ) )
 175      wp_enqueue_script( 'user-search' );
 176  
 177  require ('../admin-header.php'); ?>
 178  
 179  <script type='text/javascript'>
 180  /* <![CDATA[ */
 181  var current_site_id = <?php echo $id; ?>;
 182  /* ]]> */
 183  </script>
 184  
 185  
 186  <div class="wrap">
 187  <?php screen_icon('ms-admin'); ?>
 188  <h2 id="edit-site"><?php echo $title_site_url_linked ?></h2>
 189  <h3 class="nav-tab-wrapper">
 190  <?php
 191  $tabs = array(
 192      'site-info'     => array( 'label' => __( 'Info' ),     'url' => 'site-info.php'     ),
 193      'site-users'    => array( 'label' => __( 'Users' ),    'url' => 'site-users.php'    ),
 194      'site-themes'   => array( 'label' => __( 'Themes' ),   'url' => 'site-themes.php'   ),
 195      'site-settings' => array( 'label' => __( 'Settings' ), 'url' => 'site-settings.php' ),
 196  );
 197  foreach ( $tabs as $tab_id => $tab ) {
 198      $class = ( $tab['url'] == $pagenow ) ? ' nav-tab-active' : '';
 199      echo '<a href="' . $tab['url'] . '?id=' . $id .'" class="nav-tab' . $class . '">' . esc_html( $tab['label'] ) . '</a>';
 200  }
 201  ?>
 202  </h3><?php
 203  
 204  if ( isset($_GET['update']) ) :
 205      switch($_GET['update']) {
 206      case 'adduser':
 207          echo '<div id="message" class="updated"><p>' . __( 'User added.' ) . '</p></div>';
 208          break;
 209      case 'err_add_member':
 210          echo '<div id="message" class="error"><p>' . __( 'User is already a member of this site.' ) . '</p></div>';
 211          break;
 212      case 'err_add_notfound':
 213          echo '<div id="message" class="error"><p>' . __( 'Enter the username of an existing user.' ) . '</p></div>';
 214          break;
 215      case 'promote':
 216          echo '<div id="message" class="updated"><p>' . __( 'Changed roles.' ) . '</p></div>';
 217          break;
 218      case 'err_promote':
 219          echo '<div id="message" class="error"><p>' . __( 'Select a user to change role.' ) . '</p></div>';
 220          break;
 221      case 'remove':
 222          echo '<div id="message" class="updated"><p>' . __( 'User removed from this site.' ) . '</p></div>';
 223          break;
 224      case 'err_remove':
 225          echo '<div id="message" class="error"><p>' . __( 'Select a user to remove.' ) . '</p></div>';
 226          break;
 227      case 'newuser':
 228          echo '<div id="message" class="updated"><p>' . __( 'User created.' ) . '</p></div>';
 229          break;
 230      case 'err_new':
 231          echo '<div id="message" class="error"><p>' . __( 'Enter the username and email.' ) . '</p></div>';
 232          break;
 233      case 'err_new_dup':
 234          echo '<div id="message" class="error"><p>' . __( 'Duplicated username or email address.' ) . '</p></div>';
 235          break;
 236      }
 237  endif; ?>
 238  
 239  <form class="search-form" action="" method="get">
 240  <?php $wp_list_table->search_box( __( 'Search Users' ), 'user' ); ?>
 241  <input type="hidden" name="id" value="<?php echo esc_attr( $id ) ?>" />
 242  </form>
 243  
 244  <?php $wp_list_table->views(); ?>
 245  
 246  <form method="post" action="site-users.php?action=update-site">
 247      <?php wp_nonce_field( 'edit-site' ); ?>
 248      <input type="hidden" name="id" value="<?php echo esc_attr( $id ) ?>" />
 249  
 250  <?php $wp_list_table->display(); ?>
 251  
 252  </form>
 253  
 254  <?php do_action( 'network_site_users_after_list_table', '' );?>
 255  
 256  <?php if ( current_user_can( 'promote_users' ) && apply_filters( 'show_network_site_users_add_existing_form', true ) ) : ?>
 257  <h4 id="add-user"><?php _e('Add User to This Site') ?></h4>
 258      <?php if ( current_user_can( 'create_users' ) && apply_filters( 'show_network_site_users_add_new_form', true ) ) : ?>
 259  <p><?php _e( 'You may add from existing network users, or set up a new user to add to this site.' ); ?></p>
 260      <?php else : ?>
 261  <p><?php _e( 'You may add from existing network users to this site.' ); ?></p>
 262      <?php endif; ?>
 263  <h5 id="add-existing-user"><?php _e('Add Existing User') ?></h5>
 264  <form action="site-users.php?action=adduser" id="adduser" method="post">
 265      <?php wp_nonce_field( 'edit-site' ); ?>
 266      <input type="hidden" name="id" value="<?php echo esc_attr( $id ) ?>" />
 267      <table class="form-table">
 268          <tr>
 269              <th scope="row"><?php _e( 'Username' ); ?></th>
 270              <td><input type="text" class="regular-text" name="newuser" id="newuser" /></td>
 271          </tr>
 272          <tr>
 273              <th scope="row"><?php _e( 'Role'); ?></th>
 274              <td><select name="new_role" id="new_role_0">
 275              <?php
 276              reset( $editblog_roles );
 277              foreach ( $editblog_roles as $role => $role_assoc ){
 278                  $name = translate_user_role( $role_assoc['name'] );
 279                  $selected = ( $role == $default_role ) ? 'selected="selected"' : '';
 280                  echo '<option ' . $selected . ' value="' . esc_attr( $role ) . '">' . esc_html( $name ) . '</option>';
 281              }
 282              ?>
 283              </select></td>
 284          </tr>
 285      </table>
 286      <?php wp_nonce_field( 'add-user', '_wpnonce_add-user' ) ?>
 287      <?php submit_button( __('Add User'), 'primary', 'add-user', false, array( 'id' => 'submit-add-existing-user' ) ); ?>
 288  </form>
 289  <?php endif; ?>
 290  
 291  <?php if ( current_user_can( 'create_users' ) && apply_filters( 'show_network_site_users_add_new_form', true ) ) : ?>
 292  <h5 id="add-new-user"><?php _e('Add New User') ?></h5>
 293  <form action="<?php echo network_admin_url('site-users.php?action=newuser'); ?>" id="newuser" method="post">
 294      <?php wp_nonce_field( 'edit-site' ); ?>
 295      <input type="hidden" name="id" value="<?php echo esc_attr( $id ) ?>" />
 296      <table class="form-table">
 297          <tr>
 298              <th scope="row"><?php _e( 'Username' ) ?></th>
 299              <td><input type="text" class="regular-text" name="user[username]" /></td>
 300          </tr>
 301          <tr>
 302              <th scope="row"><?php _e( 'Email' ) ?></th>
 303              <td><input type="text" class="regular-text" name="user[email]" /></td>
 304          </tr>
 305          <tr>
 306              <th scope="row"><?php _e( 'Role'); ?></th>
 307              <td><select name="new_role" id="new_role_0">
 308              <?php
 309              reset( $editblog_roles );
 310              foreach ( $editblog_roles as $role => $role_assoc ){
 311                  $name = translate_user_role( $role_assoc['name'] );
 312                  $selected = ( $role == $default_role ) ? 'selected="selected"' : '';
 313                  echo '<option ' . $selected . ' value="' . esc_attr( $role ) . '">' . esc_html( $name ) . '</option>';
 314              }
 315              ?>
 316              </select></td>
 317          </tr>
 318          <tr class="form-field">
 319              <td colspan="2"><?php _e( 'Username and password will be mailed to the above email address.' ) ?></td>
 320          </tr>
 321      </table>
 322      <?php wp_nonce_field( 'add-user', '_wpnonce_add-new-user' ) ?>
 323      <?php submit_button( __('Add New User'), 'primary', 'add-user', false, array( 'id' => 'submit-add-user' ) ); ?>
 324  </form>
 325  <?php endif; ?>
 326  </div>
 327  <?php
 328  require ('../admin-footer.php');


Generated: Fri May 25 03:56:23 2012 Hosted by follow the white rabbit.