<?php

/**

 * Multisite administration functions.

 *

 * @package WordPress

 * @subpackage Multisite

 * @since 3.0.0

 */

/**

 * Determine if uploaded file exceeds space quota.

 *

 * @since 3.0.0

 *

 * @param array $file $_FILES array for a given file.

 * @return array $_FILES array with 'error' key set if file exceeds quota. 'error' is empty otherwise.

 */

function check_upload_size( $file ) {

	if ( get_site_option( 'upload_space_check_disabled' ) )

		return $file;

	if ( $file['error'] != '0' ) // there's already an error

		return $file;

	if ( defined( 'WP_IMPORTING' ) )

		return $file;

	$space_left = get_upload_space_available();

	$file_size = filesize( $file['tmp_name'] );

	if ( $space_left < $file_size )

		$file['error'] = sprintf( __( 'Not enough space to upload. %1$s KB needed.' ), number_format( ($file_size - $space_left) /1024 ) );

	if ( $file_size > ( 1024 * get_site_option( 'fileupload_maxk', 1500 ) ) )

		$file['error'] = sprintf(__('This file is too big. Files must be less than %1$s KB in size.'), get_site_option( 'fileupload_maxk', 1500 ) );

	if ( upload_is_user_over_quota( false ) ) {

		$file['error'] = __( 'You have used your space quota. Please delete files before uploading.' );

	}

	if ( $file['error'] != '0' && ! isset( $_POST['html-upload'] ) && ( ! defined( 'DOING_AJAX' ) || ! DOING_AJAX ) ) {

		wp_die( $file['error'] . ' <a href="javascript:history.go(-1)">' . __( 'Back' ) . '</a>' );

	}

	return $file;

}

add_filter( 'wp_handle_upload_prefilter', 'check_upload_size' );

/**

 * Delete a blog.

 *

 * @since 3.0.0

 *

 * @param int  $blog_id Blog ID.

 * @param bool $drop    True if blog's table should be dropped. Default is false.

 */

function wpmu_delete_blog( $blog_id, $drop = false ) {

	global $wpdb;

	$switch = false;

	if ( get_current_blog_id() != $blog_id ) {

		$switch = true;

		switch_to_blog( $blog_id );

	}

	$blog = get_blog_details( $blog_id );

	/**

	 * Fires before a blog is deleted.

	 *

	 * @since MU

	 *

	 * @param int  $blog_id The blog ID.

	 * @param bool $drop    True if blog's table should be dropped. Default is false.

	 */

	do_action( 'delete_blog', $blog_id, $drop );

	$users = get_users( array( 'blog_id' => $blog_id, 'fields' => 'ids' ) );

	// Remove users from this blog.

	if ( ! empty( $users ) ) {

		foreach ( $users as $user_id ) {

			remove_user_from_blog( $user_id, $blog_id );

		}

	}

	update_blog_status( $blog_id, 'deleted', 1 );

	$current_site = get_current_site();

	// If a full blog object is not available, do not destroy anything.

	if ( $drop && ! $blog ) {

		$drop = false;

	}

	// Don't destroy the initial, main, or root blog.

	if ( $drop && ( 1 == $blog_id || is_main_site( $blog_id ) || ( $blog->path == $current_site->path && $blog->domain == $current_site->domain ) ) ) {

		$drop = false;

	}

	$upload_path = trim( get_option( 'upload_path' ) );

	// If ms_files_rewriting is enabled and upload_path is empty, wp_upload_dir is not reliable.

	if ( $drop && get_site_option( 'ms_files_rewriting' ) && empty( $upload_path ) ) {

		$drop = false;

	}

	if ( $drop ) {

		$uploads = wp_upload_dir();

		$tables = $wpdb->tables( 'blog' );

		/**

		 * Filter the tables to drop when the blog is deleted.

		 *

		 * @since MU

		 *

		 * @param array $tables  The blog tables to be dropped.

		 * @param int   $blog_id The ID of the blog to drop tables for.

		 */

		$drop_tables = apply_filters( 'wpmu_drop_tables', $tables, $blog_id );

		foreach ( (array) $drop_tables as $table ) {

			$wpdb->query( "DROP TABLE IF EXISTS `$table`" );

		}

		$wpdb->delete( $wpdb->blogs, array( 'blog_id' => $blog_id ) );

		/**

		 * Filter the upload base directory to delete when the blog is deleted.

		 *

		 * @since MU

		 *

		 * @param string $uploads['basedir'] Uploads path without subdirectory. @see wp_upload_dir()

		 * @param int    $blog_id            The blog ID.

		 */

		$dir = apply_filters( 'wpmu_delete_blog_upload_dir', $uploads['basedir'], $blog_id );

		$dir = rtrim( $dir, DIRECTORY_SEPARATOR );

		$top_dir = $dir;

		$stack = array($dir);

		$index = 0;

		while ( $index < count( $stack ) ) {

			// Get indexed directory from stack

			$dir = $stack[$index];

			$dh = @opendir( $dir );

			if ( $dh ) {

				while ( ( $file = @readdir( $dh ) ) !== false ) {

					if ( $file == '.' || $file == '..' )

						continue;

					if ( @is_dir( $dir . DIRECTORY_SEPARATOR . $file ) ) {

						$stack[] = $dir . DIRECTORY_SEPARATOR . $file;

					} elseif ( @is_file( $dir . DIRECTORY_SEPARATOR . $file ) ) {

						@unlink( $dir . DIRECTORY_SEPARATOR . $file );

					}

				}

				@closedir( $dh );

			}

			$index++;

		}

		$stack = array_reverse( $stack ); // Last added dirs are deepest

		foreach( (array) $stack as $dir ) {

			if ( $dir != $top_dir)

			@rmdir( $dir );

		}

		clean_blog_cache( $blog );

	}

	if ( $switch )

		restore_current_blog();

}

/**

 * Delete a user from the network and remove from all sites.

 *

 * @since 3.0.0

 *

 * @todo Merge with wp_delete_user() ?

 *

 * @param int $id The user ID.

 * @return bool True if the user was deleted, otherwise false.

 */

function wpmu_delete_user( $id ) {

	global $wpdb;

	$id = (int) $id;

	$user = new WP_User( $id );

	if ( !$user->exists() )

		return false;

	/**

	 * Fires before a user is deleted from the network.

	 *

	 * @since MU

	 *

	 * @param int $id ID of the user about to be deleted from the network.

	 */

	do_action( 'wpmu_delete_user', $id );

	$blogs = get_blogs_of_user( $id );

	if ( ! empty( $blogs ) ) {

		foreach ( $blogs as $blog ) {

			switch_to_blog( $blog->userblog_id );

			remove_user_from_blog( $id, $blog->userblog_id );

			$post_ids = $wpdb->get_col( $wpdb->prepare( "SELECT ID FROM $wpdb->posts WHERE post_author = %d", $id ) );

			foreach ( (array) $post_ids as $post_id ) {

				wp_delete_post( $post_id );

			}

			// Clean links

			$link_ids = $wpdb->get_col( $wpdb->prepare( "SELECT link_id FROM $wpdb->links WHERE link_owner = %d", $id ) );

			if ( $link_ids ) {

				foreach ( $link_ids as $link_id )

					wp_delete_link( $link_id );

			}

			restore_current_blog();

		}

	}

	$meta = $wpdb->get_col( $wpdb->prepare( "SELECT umeta_id FROM $wpdb->usermeta WHERE user_id = %d", $id ) );

	foreach ( $meta as $mid )

		delete_metadata_by_mid( 'user', $mid );

	$wpdb->delete( $wpdb->users, array( 'ID' => $id ) );

	clean_user_cache( $user );

	/** This action is documented in wp-admin/includes/user.php */

	do_action( 'deleted_user', $id );

	return true;

}

/**

 * Sends an email when a site administrator email address is changed.

 *

 * @since 3.0.0

 *

 * @param string $old_value The old email address. Not currently used.

 * @param string $value     The new email address.

 */

function update_option_new_admin_email( $old_value, $value ) {

	if ( $value == get_option( 'admin_email' ) || !is_email( $value ) )

		return;

	$hash = md5( $value. time() .mt_rand() );

	$new_admin_email = array(

		'hash' => $hash,

		'newemail' => $value

	);

	update_option( 'adminhash', $new_admin_email );

	$email_text = __( 'Howdy ###USERNAME###,

You recently requested to have the administration email address on

your site changed.

If this is correct, please click on the following link to change it:

###ADMIN_URL###

You can safely ignore and delete this email if you do not want to

take this action.

This email has been sent to ###EMAIL###

Regards,

All at ###SITENAME###

###SITEURL###' );

	/**

	 * Filter the email text sent when the site admin email is changed.

	 *

	 * The following strings have a special meaning and will get replaced dynamically:

	 * ###USERNAME###  The current user's username.

	 * ###ADMIN_URL### The link to click on to confirm the email change.

	 * ###EMAIL###     The new email.

	 * ###SITENAME###  The name of the site.

	 * ###SITEURL###   The URL to the site.

	 *

	 * @since MU

	 *

	 * @param string $email_text      Text in the email.

	 * @param string $new_admin_email New admin email that the current administration email was changed to.

	 */

	$content = apply_filters( 'new_admin_email_content', $email_text, $new_admin_email );

	$content = str_replace( '###USERNAME###', $current_user->user_login, $content );

	$content = str_replace( '###ADMIN_URL###', esc_url( admin_url( 'options.php?adminhash='.$hash ) ), $content );

	$content = str_replace( '###EMAIL###', $value, $content );

	$content = str_replace( '###SITENAME###', get_site_option( 'site_name' ), $content );

	$content = str_replace( '###SITEURL###', network_home_url(), $content );

	wp_mail( $value, sprintf( __( '[%s] New Admin Email Address' ), wp_specialchars_decode( get_option( 'blogname' ) ) ), $content );

}

add_action( 'update_option_new_admin_email', 'update_option_new_admin_email', 10, 2 );

add_action( 'add_option_new_admin_email', 'update_option_new_admin_email', 10, 2 );

/**

 * Sends an email when an email address change is requested.

 *

 * @since 3.0.0

 *

 * @global object $errors WP_Error object.

 * @global object $wpdb   WordPress database object.

 */

function send_confirmation_on_profile_email() {

	global $errors, $wpdb;

	$current_user = wp_get_current_user();

	if ( ! is_object($errors) )

		$errors = new WP_Error();

	if ( $current_user->ID != $_POST['user_id'] )

		return false;

	if ( $current_user->user_email != $_POST['email'] ) {

		if ( !is_email( $_POST['email'] ) ) {

			$errors->add( 'user_email', __( "<strong>ERROR</strong>: The email address isn&#8217;t correct." ), array( 'form-field' => 'email' ) );

			return;

		}

		if ( $wpdb->get_var( $wpdb->prepare( "SELECT user_email FROM {$wpdb->users} WHERE user_email=%s", $_POST['email'] ) ) ) {

			$errors->add( 'user_email', __( "<strong>ERROR</strong>: The email address is already used." ), array( 'form-field' => 'email' ) );

			delete_option( $current_user->ID . '_new_email' );

			return;

		}

		$hash = md5( $_POST['email'] . time() . mt_rand() );

		$new_user_email = array(

				'hash' => $hash,

				'newemail' => $_POST['email']

				);

		update_option( $current_user->ID . '_new_email', $new_user_email );

		$email_text = __( 'Howdy ###USERNAME###,

You recently requested to have the email address on your account changed.

If this is correct, please click on the following link to change it:

###ADMIN_URL###

You can safely ignore and delete this email if you do not want to

take this action.

This email has been sent to ###EMAIL###

Regards,

All at ###SITENAME###

###SITEURL###' );

		/**

		 * Filter the email text sent when a user changes emails.

		 *

		 * The following strings have a special meaning and will get replaced dynamically:

		 * ###USERNAME###  The current user's username.

		 * ###ADMIN_URL### The link to click on to confirm the email change.

		 * ###EMAIL###     The new email.

		 * ###SITENAME###  The name of the site.

		 * ###SITEURL###   The URL to the site.

		 *

		 * @since MU

		 *

		 * @param string $email_text     Text in the email.

		 * @param string $new_user_email New user email that the current user has changed to.

		 */

		$content = apply_filters( 'new_user_email_content', $email_text, $new_user_email );

		$content = str_replace( '###USERNAME###', $current_user->user_login, $content );

		$content = str_replace( '###ADMIN_URL###', esc_url( admin_url( 'profile.php?newuseremail='.$hash ) ), $content );

		$content = str_replace( '###EMAIL###', $_POST['email'], $content);

		$content = str_replace( '###SITENAME###', get_site_option( 'site_name' ), $content );

		$content = str_replace( '###SITEURL###', network_home_url(), $content );

		wp_mail( $_POST['email'], sprintf( __( '[%s] New Email Address' ), wp_specialchars_decode( get_option( 'blogname' ) ) ), $content );

		$_POST['email'] = $current_user->user_email;

	}

}

add_action( 'personal_options_update', 'send_confirmation_on_profile_email' );

/**

 * Adds an admin notice alerting the user to check for confirmation email

 * after email address change.

 *

 * @since 3.0.0

 */

function new_user_email_admin_notice() {

	if ( strpos( $_SERVER['PHP_SELF'], 'profile.php' ) && isset( $_GET['updated'] ) && $email = get_option( get_current_user_id() . '_new_email' ) )

		echo "<div class='update-nag'>" . sprintf( __( "Your email address has not been updated yet. Please check your inbox at %s for a confirmation email." ), $email['newemail'] ) . "</div>";

}

add_action( 'admin_notices', 'new_user_email_admin_notice' );

/**

 * Check whether a blog has used its allotted upload space.

 *

 * @since MU

 *

 * @param bool $echo Optional. If $echo is set and the quota is exceeded, a warning message is echoed. Default is true.

 * @return bool True if user is over upload space quota, otherwise false.

 */

function upload_is_user_over_quota( $echo = true ) {

	if ( get_site_option( 'upload_space_check_disabled' ) )

		return false;

	$space_allowed = get_space_allowed();

	if ( empty( $space_allowed ) || !is_numeric( $space_allowed ) )

		$space_allowed = 10; // Default space allowed is 10 MB

	$space_used = get_space_used();

	if ( ( $space_allowed - $space_used ) < 0 ) {

		if ( $echo )

			_e( 'Sorry, you have used your space allocation. Please delete some files to upload more files.' );

		return true;