[Summary view] [Print] [Text view]

   1  <?php
   2  /**
   3   * Edit Site Settings Administration Screen
   4   *
   5   * @package WordPress
   6   * @subpackage Multisite
   7   * @since 3.1.0
   8   */
   9  
  10  /** Load WordPress Administration Bootstrap */
  11  require_once  __DIR__ . '/admin.php';
  12  
  13  if ( ! current_user_can( 'manage_sites' ) ) {
  14      wp_die( __( 'Sorry, you are not allowed to edit this site.' ) );
  15  }
  16  
  17  get_current_screen()->add_help_tab( get_site_screen_help_tab_args() );
  18  get_current_screen()->set_help_sidebar( get_site_screen_help_sidebar_content() );
  19  
  20  $id = isset( $_REQUEST['id'] ) ? (int) $_REQUEST['id'] : 0;
  21  
  22  if ( ! $id ) {
  23      wp_die( __( 'Invalid site ID.' ) );
  24  }
  25  
  26  $details = get_site( $id );
  27  if ( ! $details ) {
  28      wp_die( __( 'The requested site does not exist.' ) );
  29  }
  30  
  31  if ( ! can_edit_network( $details->site_id ) ) {
  32      wp_die( __( 'Sorry, you are not allowed to access this page.' ), 403 );
  33  }
  34  
  35  $is_main_site = is_main_site( $id );
  36  
  37  if ( isset( $_REQUEST['action'] ) && 'update-site' === $_REQUEST['action'] && is_array( $_POST['option'] ) ) {
  38      check_admin_referer( 'edit-site' );
  39  
  40      switch_to_blog( $id );
  41  
  42      $skip_options = array( 'allowedthemes' ); // Don't update these options since they are handled elsewhere in the form.
  43      foreach ( (array) $_POST['option'] as $key => $val ) {
  44          $key = wp_unslash( $key );
  45          $val = wp_unslash( $val );
  46          if ( 0 === $key || is_array( $val ) || in_array( $key, $skip_options, true ) ) {
  47              continue; // Avoids "0 is a protected WP option and may not be modified" error when editing blog options.
  48          }
  49          update_option( $key, $val );
  50      }
  51  
  52      /**
  53       * Fires after the site options are updated.
  54       *
  55       * @since 3.0.0
  56       * @since 4.4.0 Added `$id` parameter.
  57       *
  58       * @param int $id The ID of the site being updated.
  59       */
  60      do_action( 'wpmu_update_blog_options', $id );
  61  
  62      restore_current_blog();
  63      wp_redirect(
  64          add_query_arg(
  65              array(
  66                  'update' => 'updated',
  67                  'id'     => $id,
  68              ),
  69              'site-settings.php'
  70          )
  71      );
  72      exit;
  73  }
  74  
  75  if ( isset( $_GET['update'] ) ) {
  76      $messages = array();
  77      if ( 'updated' === $_GET['update'] ) {
  78          $messages[] = __( 'Site options updated.' );
  79      }
  80  }
  81  
  82  // Used in the HTML title tag.
  83  /* translators: %s: Site title. */
  84  $title = sprintf( __( 'Edit Site: %s' ), esc_html( $details->blogname ) );
  85  
  86  $parent_file  = 'sites.php';
  87  $submenu_file = 'sites.php';
  88  
  89  require_once ABSPATH . 'wp-admin/admin-header.php';
  90  
  91  ?>
  92  
  93  <div class="wrap">
  94  <h1 id="edit-site"><?php echo $title; ?></h1>
  95  <p class="edit-site-actions"><a href="<?php echo esc_url( get_home_url( $id, '/' ) ); ?>"><?php _e( 'Visit' ); ?></a> | <a href="<?php echo esc_url( get_admin_url( $id ) ); ?>"><?php _e( 'Dashboard' ); ?></a></p>
  96  
  97  <?php
  98  
  99  network_edit_site_nav(
 100      array(
 101          'blog_id'  => $id,
 102          'selected' => 'site-settings',
 103      )
 104  );
 105  
 106  if ( ! empty( $messages ) ) {
 107      foreach ( $messages as $msg ) {
 108          echo '<div id="message" class="updated notice is-dismissible"><p>' . $msg . '</p></div>';
 109      }
 110  }
 111  ?>
 112  <form method="post" action="site-settings.php?action=update-site">
 113      <?php wp_nonce_field( 'edit-site' ); ?>
 114      <input type="hidden" name="id" value="<?php echo esc_attr( $id ); ?>" />
 115      <table class="form-table" role="presentation">
 116          <?php
 117          $blog_prefix = $wpdb->get_blog_prefix( $id );
 118          $sql         = "SELECT * FROM {$blog_prefix}options
 119              WHERE option_name NOT LIKE %s
 120              AND option_name NOT LIKE %s";
 121          $query       = $wpdb->prepare(
 122              $sql,
 123              $wpdb->esc_like( '_' ) . '%',
 124              '%' . $wpdb->esc_like( 'user_roles' )
 125          );
 126          $options     = $wpdb->get_results( $query );
 127  
 128          foreach ( $options as $option ) {
 129              if ( 'default_role' === $option->option_name ) {
 130                  $editblog_default_role = $option->option_value;
 131              }
 132  
 133              $disabled = false;
 134              $class    = 'all-options';
 135  
 136              if ( is_serialized( $option->option_value ) ) {
 137                  if ( is_serialized_string( $option->option_value ) ) {
 138                      $option->option_value = esc_html( maybe_unserialize( $option->option_value ) );
 139                  } else {
 140                      $option->option_value = 'SERIALIZED DATA';
 141                      $disabled             = true;
 142                      $class                = 'all-options disabled';
 143                  }
 144              }
 145  
 146              if ( strpos( $option->option_value, "\n" ) !== false ) {
 147                  ?>
 148                  <tr class="form-field">
 149                      <th scope="row"><label for="<?php echo esc_attr( $option->option_name ); ?>"><?php echo ucwords( str_replace( '_', ' ', $option->option_name ) ); ?></label></th>
 150                      <td><textarea class="<?php echo $class; ?>" rows="5" cols="40" name="option[<?php echo esc_attr( $option->option_name ); ?>]" id="<?php echo esc_attr( $option->option_name ); ?>"<?php disabled( $disabled ); ?>><?php echo esc_textarea( $option->option_value ); ?></textarea></td>
 151                  </tr>
 152                  <?php
 153              } else {
 154                  ?>
 155                  <tr class="form-field">
 156                      <th scope="row"><label for="<?php echo esc_attr( $option->option_name ); ?>"><?php echo esc_html( ucwords( str_replace( '_', ' ', $option->option_name ) ) ); ?></label></th>
 157                      <?php if ( $is_main_site && in_array( $option->option_name, array( 'siteurl', 'home' ), true ) ) { ?>
 158                      <td><code><?php echo esc_html( $option->option_value ); ?></code></td>
 159                      <?php } else { ?>
 160                      <td><input class="<?php echo $class; ?>" name="option[<?php echo esc_attr( $option->option_name ); ?>]" type="text" id="<?php echo esc_attr( $option->option_name ); ?>" value="<?php echo esc_attr( $option->option_value ); ?>" size="40" <?php disabled( $disabled ); ?> /></td>
 161                      <?php } ?>
 162                  </tr>
 163                  <?php
 164              }
 165          } // End foreach.
 166  
 167          /**
 168           * Fires at the end of the Edit Site form, before the submit button.
 169           *
 170           * @since 3.0.0
 171           *
 172           * @param int $id Site ID.
 173           */
 174          do_action( 'wpmueditblogaction', $id );
 175          ?>
 176      </table>
 177      <?php submit_button(); ?>
 178  </form>
 179  
 180  </div>
 181  <?php
 182  require_once ABSPATH . 'wp-admin/admin-footer.php';