<?php

/**

 * Multisite administration functions.

 *

 * @package WordPress

 * @subpackage Multisite

 * @since 3.0.0

 */

/**

 * Determine if uploaded file exceeds space quota.

 *

 * @since 3.0.0

 *

 * @param array $file $_FILES array for a given file.

 * @return array $_FILES array with 'error' key set if file exceeds quota. 'error' is empty otherwise.

 */

function check_upload_size( $file ) {

	if ( get_site_option( 'upload_space_check_disabled' ) )

		return $file;

	if ( $file['error'] != '0' ) // there's already an error

		return $file;

	if ( defined( 'WP_IMPORTING' ) )

		return $file;

	$space_allowed = 1048576 * get_space_allowed();

	$space_used = get_dirsize( BLOGUPLOADDIR );

	$space_left = $space_allowed - $space_used;

	$file_size = filesize( $file['tmp_name'] );

	if ( $space_left < $file_size )

		$file['error'] = sprintf( __( 'Not enough space to upload. %1$s KB needed.' ), number_format( ($file_size - $space_left) /1024 ) );

	if ( $file_size > ( 1024 * get_site_option( 'fileupload_maxk', 1500 ) ) )

		$file['error'] = sprintf(__('This file is too big. Files must be less than %1$s KB in size.'), get_site_option( 'fileupload_maxk', 1500 ) );

	if ( upload_is_user_over_quota( false ) ) {

		$file['error'] = __( 'You have used your space quota. Please delete files before uploading.' );

	}

	if ( $file['error'] != '0' && !isset($_POST['html-upload']) )

		wp_die( $file['error'] . ' <a href="javascript:history.go(-1)">' . __( 'Back' ) . '</a>' );

	return $file;

}

add_filter( 'wp_handle_upload_prefilter', 'check_upload_size' );

/**

 * Delete a blog

 *

 * @since 3.0.0

 *

 * @param int $blog_id Blog ID

 * @param bool $drop True if blog's table should be dropped. Default is false.

 * @return void

 */

function wpmu_delete_blog( $blog_id, $drop = false ) {

	global $wpdb, $current_site;

	$switch = false;

	if ( $blog_id != $wpdb->blogid ) {

		$switch = true;

		switch_to_blog( $blog_id );

		$blog = get_blog_details( $blog_id );

	} else {

		$blog = $GLOBALS['current_blog'];

	}

	do_action( 'delete_blog', $blog_id, $drop );

	$users = get_users( array( 'blog_id' => $blog_id, 'fields' => 'ids' ) );

	// Remove users from this blog.

	if ( ! empty( $users ) ) {

		foreach ( $users as $user_id ) {

			remove_user_from_blog( $user_id, $blog_id );

		}

	}

	update_blog_status( $blog_id, 'deleted', 1 );

	// Don't destroy the initial, main, or root blog.

	if ( $drop && ( 1 == $blog_id || is_main_site( $blog_id ) || ( $blog->path == $current_site->path && $blog->domain == $current_site->domain ) ) )

		$drop = false;

	if ( $drop ) {

		$drop_tables = apply_filters( 'wpmu_drop_tables', $wpdb->tables( 'blog' ) );

		foreach ( (array) $drop_tables as $table ) {

			$wpdb->query( "DROP TABLE IF EXISTS `$table`" );

		}

		$wpdb->delete( $wpdb->blogs, array( 'blog_id' => $blog_id ) );

		$dir = apply_filters( 'wpmu_delete_blog_upload_dir', WP_CONTENT_DIR . "/blogs.dir/{$blog_id}/files/", $blog_id );

		$dir = rtrim( $dir, DIRECTORY_SEPARATOR );

		$top_dir = $dir;

		$stack = array($dir);

		$index = 0;

		while ( $index < count( $stack ) ) {

			# Get indexed directory from stack

			$dir = $stack[$index];

			$dh = @opendir( $dir );

			if ( $dh ) {

				while ( ( $file = @readdir( $dh ) ) !== false ) {

					if ( $file == '.' || $file == '..' )

						continue;

					if ( @is_dir( $dir . DIRECTORY_SEPARATOR . $file ) )

						$stack[] = $dir . DIRECTORY_SEPARATOR . $file;

					else if ( @is_file( $dir . DIRECTORY_SEPARATOR . $file ) )

						@unlink( $dir . DIRECTORY_SEPARATOR . $file );

				}

			}

			$index++;

		}

		$stack = array_reverse( $stack ); // Last added dirs are deepest

		foreach( (array) $stack as $dir ) {

			if ( $dir != $top_dir)

			@rmdir( $dir );

		}

	}

	if ( $switch )

		restore_current_blog();

}

// @todo Merge with wp_delete_user() ?

function wpmu_delete_user( $id ) {

	global $wpdb;

	$id = (int) $id;

	$user = new WP_User( $id );

	do_action( 'wpmu_delete_user', $id );

	$blogs = get_blogs_of_user( $id );

	if ( ! empty( $blogs ) ) {

		foreach ( $blogs as $blog ) {

			switch_to_blog( $blog->userblog_id );

			remove_user_from_blog( $id, $blog->userblog_id );

			$post_ids = $wpdb->get_col( $wpdb->prepare( "SELECT ID FROM $wpdb->posts WHERE post_author = %d", $id ) );

			foreach ( (array) $post_ids as $post_id ) {

				wp_delete_post( $post_id );

			}

			// Clean links

			$link_ids = $wpdb->get_col( $wpdb->prepare( "SELECT link_id FROM $wpdb->links WHERE link_owner = %d", $id ) );

			if ( $link_ids ) {

				foreach ( $link_ids as $link_id )

					wp_delete_link( $link_id );

			}

			restore_current_blog();

		}

	}

	$meta = $wpdb->get_col( $wpdb->prepare( "SELECT umeta_id FROM $wpdb->usermeta WHERE user_id = %d", $id ) );

	foreach ( $meta as $mid )

		delete_metadata_by_mid( 'user', $mid );

	$wpdb->delete( $wpdb->users, array( 'ID' => $id ) );

	clean_user_cache( $user );

	// allow for commit transaction

	do_action( 'deleted_user', $id );

	return true;

}

function update_option_new_admin_email( $old_value, $value ) {

	$email = get_option( 'admin_email' );

	if ( $value == get_option( 'admin_email' ) || !is_email( $value ) )

		return;

	$hash = md5( $value. time() .mt_rand() );

	$new_admin_email = array(

		'hash' => $hash,

		'newemail' => $value

	);

	update_option( 'adminhash', $new_admin_email );

	$content = apply_filters( 'new_admin_email_content', __( "Dear user,

You recently requested to have the administration email address on

your site changed.

If this is correct, please click on the following link to change it:

###ADMIN_URL###

You can safely ignore and delete this email if you do not want to

take this action.

This email has been sent to ###EMAIL###

Regards,

All at ###SITENAME###

###SITEURL### "), $new_admin_email );

	$content = str_replace( '###ADMIN_URL###', esc_url( admin_url( 'options.php?adminhash='.$hash ) ), $content );

	$content = str_replace( '###EMAIL###', $value, $content );

	$content = str_replace( '###SITENAME###', get_site_option( 'site_name' ), $content );

	$content = str_replace( '###SITEURL###', network_home_url(), $content );

	wp_mail( $value, sprintf( __( '[%s] New Admin Email Address' ), get_option( 'blogname' ) ), $content );

}

add_action( 'update_option_new_admin_email', 'update_option_new_admin_email', 10, 2 );

add_action( 'add_option_new_admin_email', 'update_option_new_admin_email', 10, 2 );

function send_confirmation_on_profile_email() {

	global $errors, $wpdb;

	$current_user = wp_get_current_user();

	if ( ! is_object($errors) )

		$errors = new WP_Error();

	if ( $current_user->ID != $_POST['user_id'] )

		return false;

	if ( $current_user->user_email != $_POST['email'] ) {

		if ( !is_email( $_POST['email'] ) ) {

			$errors->add( 'user_email', __( "<strong>ERROR</strong>: The e-mail address isn't correct." ), array( 'form-field' => 'email' ) );

			return;

		}

		if ( $wpdb->get_var( $wpdb->prepare( "SELECT user_email FROM {$wpdb->users} WHERE user_email=%s", $_POST['email'] ) ) ) {

			$errors->add( 'user_email', __( "<strong>ERROR</strong>: The e-mail address is already used." ), array( 'form-field' => 'email' ) );

			delete_option( $current_user->ID . '_new_email' );

			return;

		}

		$hash = md5( $_POST['email'] . time() . mt_rand() );

		$new_user_email = array(

				'hash' => $hash,

				'newemail' => $_POST['email']

				);

		update_option( $current_user->ID . '_new_email', $new_user_email );

		$content = apply_filters( 'new_user_email_content', __( "Dear user,

You recently requested to have the email address on your account changed.

If this is correct, please click on the following link to change it:

###ADMIN_URL###

You can safely ignore and delete this email if you do not want to

take this action.

This email has been sent to ###EMAIL###

Regards,

All at ###SITENAME###

###SITEURL###" ), $new_user_email );

		$content = str_replace( '###ADMIN_URL###', esc_url( admin_url( 'profile.php?newuseremail='.$hash ) ), $content );

		$content = str_replace( '###EMAIL###', $_POST['email'], $content);

		$content = str_replace( '###SITENAME###', get_site_option( 'site_name' ), $content );

		$content = str_replace( '###SITEURL###', network_home_url(), $content );

		wp_mail( $_POST['email'], sprintf( __( '[%s] New Email Address' ), get_option( 'blogname' ) ), $content );

		$_POST['email'] = $current_user->user_email;

	}

}

add_action( 'personal_options_update', 'send_confirmation_on_profile_email' );

function new_user_email_admin_notice() {

	if ( strpos( $_SERVER['PHP_SELF'], 'profile.php' ) && isset( $_GET['updated'] ) && $email = get_option( get_current_user_id() . '_new_email' ) )

		echo "<div class='update-nag'>" . sprintf( __( "Your email address has not been updated yet. Please check your inbox at %s for a confirmation email." ), $email['newemail'] ) . "</div>";

}

add_action( 'admin_notices', 'new_user_email_admin_notice' );

/**

 * Determines if there is any upload space left in the current blog's quota.

 *

 * @since 3.0.0

 * @return bool True if space is available, false otherwise.

 */

function is_upload_space_available() {

	if ( get_site_option( 'upload_space_check_disabled' ) )

		return true;

	if ( !( $space_allowed = get_upload_space_available() ) )

		return false;

	return true;

}

/**

 * @since 3.0.0

 *

 * @return int of upload size limit in bytes

 */

function upload_size_limit_filter( $size ) {

	$fileupload_maxk = 1024 * get_site_option( 'fileupload_maxk', 1500 );

	if ( get_site_option( 'upload_space_check_disabled' ) )

		return min( $size, $fileupload_maxk );

	return min( $size, $fileupload_maxk, get_upload_space_available() );

}

/**

 * Determines if there is any upload space left in the current blog's quota.

 *

 * @return int of upload space available in bytes

 */

function get_upload_space_available() {

	$space_allowed = get_space_allowed() * 1024 * 1024;

	if ( get_site_option( 'upload_space_check_disabled' ) )

		return $space_allowed;

	$dir_name = trailingslashit( BLOGUPLOADDIR );

	if ( !( is_dir( $dir_name) && is_readable( $dir_name ) ) )

		return $space_allowed;

  	$dir = dir( $dir_name );

   	$size = 0;

	while ( $file = $dir->read() ) {

		if ( $file != '.' && $file != '..' ) {

			if ( is_dir( $dir_name . $file) ) {

				$size += get_dirsize( $dir_name . $file );

			} else {

				$size += filesize( $dir_name . $file );

			}

		}

	}

	$dir->close();

	if ( ( $space_allowed - $size ) <= 0 )

		return 0;

	return $space_allowed - $size;

}

/**

 * Returns the upload quota for the current blog.

 *

 * @return int Quota

 */

function get_space_allowed() {

	$space_allowed = get_option( 'blog_upload_space' );

	if ( ! is_numeric( $space_allowed ) )

		$space_allowed = get_site_option( 'blog_upload_space' );

	if ( empty( $space_allowed ) || ! is_numeric( $space_allowed ) )

		$space_allowed = 50;

	return $space_allowed;

}

function display_space_usage() {

	$space = get_space_allowed();

	$used = get_dirsize( BLOGUPLOADDIR ) / 1024 / 1024;

	$percentused = ( $used / $space ) * 100;

	if ( $space > 1000 ) {

		$space = number_format( $space / 1024 );

		/* translators: Gigabytes */

		$space .= __( 'GB' );

	} else {

		/* translators: Megabytes */

		$space .= __( 'MB' );

	}

	?>

	<strong><?php printf( __( 'Used: %1s%% of %2s' ), number_format( $percentused ), $space ); ?></strong>

	<?php

}

// Edit blog upload space setting on Edit Blog page

function upload_space_setting( $id ) {

	$quota = get_blog_option( $id, 'blog_upload_space' );

	if ( !$quota )

		$quota = '';

	?>

	<tr>

		<th><?php _e( 'Site Upload Space Quota '); ?></th>

		<td><input type="number" step="1" min="0" style="width: 100px" name="option[blog_upload_space]" value="<?php echo $quota; ?>" /> <?php _e( 'MB (Leave blank for network default)' ); ?></td>

	</tr>

	<?php

}

add_action( 'wpmueditblogaction', 'upload_space_setting' );

function update_user_status( $id, $pref, $value, $deprecated = null ) {

	global $wpdb;

	if ( null !== $deprecated )

		_deprecated_argument( __FUNCTION__, '3.1' );

	$wpdb->update( $wpdb->users, array( $pref => $value ), array( 'ID' => $id ) );

	$user = new WP_User( $id );

	clean_user_cache( $user );

	if ( $pref == 'spam' ) {

		if ( $value == 1 )

			do_action( 'make_spam_user', $id );

		else

			do_action( 'make_ham_user', $id );

	}

	return $value;

}