wp/wp-admin/network/site-users.php
changeset 18 be944660c56a
parent 16 a86126ab1dd4
child 19 3d72ae0968f4
equal deleted inserted replaced
17:34716fd837a4 18:be944660c56a
    33 
    33 
    34 if ( ! empty( $_REQUEST['paged'] ) ) {
    34 if ( ! empty( $_REQUEST['paged'] ) ) {
    35 	$referer = add_query_arg( 'paged', (int) $_REQUEST['paged'], $referer );
    35 	$referer = add_query_arg( 'paged', (int) $_REQUEST['paged'], $referer );
    36 }
    36 }
    37 
    37 
    38 $id = isset( $_REQUEST['id'] ) ? intval( $_REQUEST['id'] ) : 0;
    38 $id = isset( $_REQUEST['id'] ) ? (int) $_REQUEST['id'] : 0;
    39 
    39 
    40 if ( ! $id ) {
    40 if ( ! $id ) {
    41 	wp_die( __( 'Invalid site ID.' ) );
    41 	wp_die( __( 'Invalid site ID.' ) );
    42 }
    42 }
    43 
    43 
   138 			break;
   138 			break;
   139 
   139 
   140 		case 'promote':
   140 		case 'promote':
   141 			check_admin_referer( 'bulk-users' );
   141 			check_admin_referer( 'bulk-users' );
   142 			$editable_roles = get_editable_roles();
   142 			$editable_roles = get_editable_roles();
   143 			$role           = false;
   143 			$role           = $_REQUEST['new_role'];
   144 			if ( ! empty( $_REQUEST['new_role2'] ) ) {
       
   145 				$role = $_REQUEST['new_role2'];
       
   146 			} elseif ( ! empty( $_REQUEST['new_role'] ) ) {
       
   147 				$role = $_REQUEST['new_role'];
       
   148 			}
       
   149 
   144 
   150 			if ( empty( $editable_roles[ $role ] ) ) {
   145 			if ( empty( $editable_roles[ $role ] ) ) {
   151 				wp_die( __( 'Sorry, you are not allowed to give users that role.' ), 403 );
   146 				wp_die( __( 'Sorry, you are not allowed to give users that role.' ), 403 );
   152 			}
   147 			}
   153 
   148 
   218 }
   213 }
   219 
   214 
   220 require_once ABSPATH . 'wp-admin/admin-header.php'; ?>
   215 require_once ABSPATH . 'wp-admin/admin-header.php'; ?>
   221 
   216 
   222 <script type="text/javascript">
   217 <script type="text/javascript">
   223 var current_site_id = <?php echo $id; ?>;
   218 var current_site_id = <?php echo absint( $id ); ?>;
   224 </script>
   219 </script>
   225 
   220 
   226 
   221 
   227 <div class="wrap">
   222 <div class="wrap">
   228 <h1 id="edit-site"><?php echo $title; ?></h1>
   223 <h1 id="edit-site"><?php echo $title; ?></h1>
   333  * @param bool $bool Whether to show the Add New User form. Default true.
   328  * @param bool $bool Whether to show the Add New User form. Default true.
   334  */
   329  */
   335 if ( current_user_can( 'create_users' ) && apply_filters( 'show_network_site_users_add_new_form', true ) ) :
   330 if ( current_user_can( 'create_users' ) && apply_filters( 'show_network_site_users_add_new_form', true ) ) :
   336 	?>
   331 	?>
   337 <h2 id="add-new-user"><?php _e( 'Add New User' ); ?></h2>
   332 <h2 id="add-new-user"><?php _e( 'Add New User' ); ?></h2>
   338 <form action="<?php echo network_admin_url( 'site-users.php?action=newuser' ); ?>" id="newuser" method="post">
   333 <form action="<?php echo esc_url( network_admin_url( 'site-users.php?action=newuser' ) ); ?>" id="newuser" method="post">
   339 	<input type="hidden" name="id" value="<?php echo esc_attr( $id ); ?>" />
   334 	<input type="hidden" name="id" value="<?php echo esc_attr( $id ); ?>" />
   340 	<table class="form-table" role="presentation">
   335 	<table class="form-table" role="presentation">
   341 		<tr>
   336 		<tr>
   342 			<th scope="row"><label for="user_username"><?php _e( 'Username' ); ?></label></th>
   337 			<th scope="row"><label for="user_username"><?php _e( 'Username' ); ?></label></th>
   343 			<td><input type="text" class="regular-text" name="user[username]" id="user_username" /></td>
   338 			<td><input type="text" class="regular-text" name="user[username]" id="user_username" /></td>