web/wp-admin/network/site-users.php
changeset 194 32102edaa81b
child 204 09a1c134465b
equal deleted inserted replaced
193:2f6f6f7551ca 194:32102edaa81b
       
     1 <?php
       
     2 /**
       
     3  * Edit Site Users Administration Screen
       
     4  *
       
     5  * @package WordPress
       
     6  * @subpackage Multisite
       
     7  * @since 3.1.0
       
     8  */
       
     9 
       
    10 /** Load WordPress Administration Bootstrap */
       
    11 require_once( './admin.php' );
       
    12 
       
    13 if ( ! is_multisite() )
       
    14 	wp_die( __( 'Multisite support is not enabled.' ) );
       
    15 
       
    16 if ( ! current_user_can('manage_sites') )
       
    17 	wp_die(__('You do not have sufficient permissions to edit this site.'));
       
    18 
       
    19 $wp_list_table = _get_list_table('WP_Users_List_Table');
       
    20 $wp_list_table->prepare_items();
       
    21 
       
    22 get_current_screen()->add_help_tab( array(
       
    23 	'id'      => 'overview',
       
    24 	'title'   => __('Overview'),
       
    25 	'content' =>
       
    26 		'<p>' . __('The menu is for editing information specific to individual sites, particularly if the admin area of a site is unavailable.') . '</p>' .
       
    27 		'<p>' . __('<strong>Info</strong> - The domain and path are rarely edited as this can cause the site to not work properly. The Registered date and Last Updated date are displayed. Network admins can mark a site as archived, spam, deleted and mature, to remove from public listings or disable.') . '</p>' .
       
    28 		'<p>' . __('<strong>Users</strong> - This displays the users associated with this site. You can also change their role, reset their password, or remove them from the site. Removing the user from the site does not remove the user from the network.') . '</p>' .
       
    29 		'<p>' . sprintf( __('<strong>Themes</strong> - This area shows themes that are not already enabled across the network. Enabling a theme in this menu makes it accessible to this site. It does not activate the theme, but allows it to show in the site&#8217;s Appearance menu. To enable a theme for the entire network, see the <a href="%s">Network Themes</a> screen.' ), network_admin_url( 'themes.php' ) ) . '</p>' .
       
    30 		'<p>' . __('<strong>Settings</strong> - This page shows a list of all settings associated with this site. Some are created by WordPress and others are created by plugins you activate. Note that some fields are grayed out and say Serialized Data. You cannot modify these values due to the way the setting is stored in the database.') . '</p>'
       
    31 ) );
       
    32 
       
    33 get_current_screen()->set_help_sidebar(
       
    34 	'<p><strong>' . __('For more information:') . '</strong></p>' .
       
    35 	'<p>' . __('<a href="http://codex.wordpress.org/Network_Admin_Sites_Screen" target="_blank">Documentation on Site Management</a>') . '</p>' .
       
    36 	'<p>' . __('<a href="http://wordpress.org/support/forum/multisite/" target="_blank">Support Forums</a>') . '</p>'
       
    37 );
       
    38 
       
    39 $_SERVER['REQUEST_URI'] = remove_query_arg( 'update', $_SERVER['REQUEST_URI'] );
       
    40 $referer = remove_query_arg( 'update', wp_get_referer() );
       
    41 
       
    42 $id = isset( $_REQUEST['id'] ) ? intval( $_REQUEST['id'] ) : 0;
       
    43 
       
    44 if ( ! $id )
       
    45 	wp_die( __('Invalid site ID.') );
       
    46 
       
    47 $details = get_blog_details( $id );
       
    48 if ( !can_edit_network( $details->site_id ) )
       
    49 	wp_die( __( 'You do not have permission to access this page.' ) );
       
    50 
       
    51 $is_main_site = is_main_site( $id );
       
    52 
       
    53 // get blog prefix
       
    54 $blog_prefix = $wpdb->get_blog_prefix( $id );
       
    55 
       
    56 // @todo This is a hack. Eventually, add API to WP_Roles allowing retrieval of roles for a particular blog.
       
    57 if ( ! empty($wp_roles->use_db) ) {
       
    58 	$editblog_roles = get_blog_option( $id, "{$blog_prefix}user_roles" );
       
    59 } else {
       
    60 	// Roles are stored in memory, not the DB.
       
    61 	$editblog_roles = $wp_roles->roles;
       
    62 }
       
    63 $default_role = get_blog_option( $id, 'default_role' );
       
    64 
       
    65 $action = $wp_list_table->current_action();
       
    66 
       
    67 if ( $action ) {
       
    68 	switch_to_blog( $id );
       
    69 
       
    70 	switch ( $action ) {
       
    71 		case 'newuser':
       
    72 			check_admin_referer( 'add-user', '_wpnonce_add-new-user' );
       
    73 			$user = $_POST['user'];
       
    74 			if ( !is_array( $_POST['user'] ) || empty( $user['username'] ) || empty( $user['email'] ) ) {
       
    75 				$update = 'err_new';
       
    76 			} else {
       
    77 				$password = wp_generate_password( 12, false);
       
    78 				$user_id = wpmu_create_user( esc_html( strtolower( $user['username'] ) ), $password, esc_html( $user['email'] ) );
       
    79 
       
    80 				if ( false == $user_id ) {
       
    81 		 			$update = 'err_new_dup';
       
    82 				} else {
       
    83 					wp_new_user_notification( $user_id, $password );
       
    84 					add_user_to_blog( $id, $user_id, $_POST['new_role'] );
       
    85 					$update = 'newuser';
       
    86 				}
       
    87 			}
       
    88 			break;
       
    89 
       
    90 		case 'adduser':
       
    91 			check_admin_referer( 'add-user', '_wpnonce_add-user' );
       
    92 			if ( !empty( $_POST['newuser'] ) ) {
       
    93 				$update = 'adduser';
       
    94 				$newuser = $_POST['newuser'];
       
    95 				$userid = $wpdb->get_var( $wpdb->prepare( "SELECT ID FROM " . $wpdb->users . " WHERE user_login = %s", $newuser ) );
       
    96 				if ( $userid ) {
       
    97 					$user = $wpdb->get_var( "SELECT user_id FROM " . $wpdb->usermeta . " WHERE user_id='$userid' AND meta_key='{$blog_prefix}capabilities'" );
       
    98 					if ( $user == false )
       
    99 						add_user_to_blog( $id, $userid, $_POST['new_role'] );
       
   100 					else
       
   101 						$update = 'err_add_member';
       
   102 				} else {
       
   103 					$update = 'err_add_notfound';
       
   104 				}
       
   105 			} else {
       
   106 				$update = 'err_add_notfound';
       
   107 			}
       
   108 			break;
       
   109 
       
   110 		case 'remove':
       
   111 			if ( !current_user_can('remove_users')  )
       
   112 				die(__('You can&#8217;t remove users.'));
       
   113 			check_admin_referer( 'bulk-users' );
       
   114 
       
   115 			$update = 'remove';
       
   116 			if ( isset( $_REQUEST['users'] ) ) {
       
   117 				$userids = $_REQUEST['users'];
       
   118 
       
   119 				foreach ( $userids as $user_id ) {
       
   120 					$user_id = (int) $user_id;
       
   121 					remove_user_from_blog( $user_id, $id );
       
   122 				}
       
   123 			} elseif ( isset( $_GET['user'] ) ) {
       
   124 				remove_user_from_blog( $_GET['user'] );
       
   125 			} else {
       
   126 				$update = 'err_remove';
       
   127 			}
       
   128 			break;
       
   129 
       
   130 		case 'promote':
       
   131 			check_admin_referer( 'bulk-users' );
       
   132 			$editable_roles = get_editable_roles();
       
   133 			if ( empty( $editable_roles[$_REQUEST['new_role']] ) )
       
   134 				wp_die(__('You can&#8217;t give users that role.'));
       
   135 
       
   136 			if ( isset( $_REQUEST['users'] ) ) {
       
   137 				$userids = $_REQUEST['users'];
       
   138 				$update = 'promote';
       
   139 				foreach ( $userids as $user_id ) {
       
   140 					$user_id = (int) $user_id;
       
   141 
       
   142 					// If the user doesn't already belong to the blog, bail.
       
   143 					if ( !is_user_member_of_blog( $user_id ) )
       
   144 						wp_die(__('Cheatin&#8217; uh?'));
       
   145 
       
   146 					$user = new WP_User( $user_id );
       
   147 					$user->set_role( $_REQUEST['new_role'] );
       
   148 				}
       
   149 			} else {
       
   150 				$update = 'err_promote';
       
   151 			}
       
   152 			break;
       
   153 	}
       
   154 
       
   155 	restore_current_blog();
       
   156 	wp_safe_redirect( add_query_arg( 'update', $update, $referer ) );
       
   157 	exit();
       
   158 }
       
   159 
       
   160 if ( isset( $_GET['action'] ) && 'update-site' == $_GET['action'] ) {
       
   161 	wp_safe_redirect( $referer );
       
   162 	exit();
       
   163 }
       
   164 
       
   165 add_screen_option( 'per_page', array( 'label' => _x( 'Users', 'users per page (screen options)' ) ) );
       
   166 
       
   167 $site_url_no_http = preg_replace( '#^http(s)?://#', '', get_blogaddress_by_id( $id ) );
       
   168 $title_site_url_linked = sprintf( __('Edit Site: <a href="%1$s">%2$s</a>'), get_blogaddress_by_id( $id ), $site_url_no_http );
       
   169 $title = sprintf( __('Edit Site: %s'), $site_url_no_http );
       
   170 
       
   171 $parent_file = 'sites.php';
       
   172 $submenu_file = 'sites.php';
       
   173 
       
   174 if ( ! wp_is_large_network( 'users' ) && apply_filters( 'show_network_site_users_add_existing_form', true ) )
       
   175 	wp_enqueue_script( 'user-suggest' );
       
   176 
       
   177 require('../admin-header.php'); ?>
       
   178 
       
   179 <script type='text/javascript'>
       
   180 /* <![CDATA[ */
       
   181 var current_site_id = <?php echo $id; ?>;
       
   182 /* ]]> */
       
   183 </script>
       
   184 
       
   185 
       
   186 <div class="wrap">
       
   187 <?php screen_icon('ms-admin'); ?>
       
   188 <h2 id="edit-site"><?php echo $title_site_url_linked ?></h2>
       
   189 <h3 class="nav-tab-wrapper">
       
   190 <?php
       
   191 $tabs = array(
       
   192 	'site-info'     => array( 'label' => __( 'Info' ),     'url' => 'site-info.php'     ),
       
   193 	'site-users'    => array( 'label' => __( 'Users' ),    'url' => 'site-users.php'    ),
       
   194 	'site-themes'   => array( 'label' => __( 'Themes' ),   'url' => 'site-themes.php'   ),
       
   195 	'site-settings' => array( 'label' => __( 'Settings' ), 'url' => 'site-settings.php' ),
       
   196 );
       
   197 foreach ( $tabs as $tab_id => $tab ) {
       
   198 	$class = ( $tab['url'] == $pagenow ) ? ' nav-tab-active' : '';
       
   199 	echo '<a href="' . $tab['url'] . '?id=' . $id .'" class="nav-tab' . $class . '">' . esc_html( $tab['label'] ) . '</a>';
       
   200 }
       
   201 ?>
       
   202 </h3><?php
       
   203 
       
   204 if ( isset($_GET['update']) ) :
       
   205 	switch($_GET['update']) {
       
   206 	case 'adduser':
       
   207 		echo '<div id="message" class="updated"><p>' . __( 'User added.' ) . '</p></div>';
       
   208 		break;
       
   209 	case 'err_add_member':
       
   210 		echo '<div id="message" class="error"><p>' . __( 'User is already a member of this site.' ) . '</p></div>';
       
   211 		break;
       
   212 	case 'err_add_notfound':
       
   213 		echo '<div id="message" class="error"><p>' . __( 'Enter the username of an existing user.' ) . '</p></div>';
       
   214 		break;
       
   215 	case 'promote':
       
   216 		echo '<div id="message" class="updated"><p>' . __( 'Changed roles.' ) . '</p></div>';
       
   217 		break;
       
   218 	case 'err_promote':
       
   219 		echo '<div id="message" class="error"><p>' . __( 'Select a user to change role.' ) . '</p></div>';
       
   220 		break;
       
   221 	case 'remove':
       
   222 		echo '<div id="message" class="updated"><p>' . __( 'User removed from this site.' ) . '</p></div>';
       
   223 		break;
       
   224 	case 'err_remove':
       
   225 		echo '<div id="message" class="error"><p>' . __( 'Select a user to remove.' ) . '</p></div>';
       
   226 		break;
       
   227 	case 'newuser':
       
   228 		echo '<div id="message" class="updated"><p>' . __( 'User created.' ) . '</p></div>';
       
   229 		break;
       
   230 	case 'err_new':
       
   231 		echo '<div id="message" class="error"><p>' . __( 'Enter the username and email.' ) . '</p></div>';
       
   232 		break;
       
   233 	case 'err_new_dup':
       
   234 		echo '<div id="message" class="error"><p>' . __( 'Duplicated username or email address.' ) . '</p></div>';
       
   235 		break;
       
   236 	}
       
   237 endif; ?>
       
   238 
       
   239 <form class="search-form" action="" method="get">
       
   240 <?php $wp_list_table->search_box( __( 'Search Users' ), 'user' ); ?>
       
   241 <input type="hidden" name="id" value="<?php echo esc_attr( $id ) ?>" />
       
   242 </form>
       
   243 
       
   244 <?php $wp_list_table->views(); ?>
       
   245 
       
   246 <form method="post" action="site-users.php?action=update-site">
       
   247 	<?php wp_nonce_field( 'edit-site' ); ?>
       
   248 	<input type="hidden" name="id" value="<?php echo esc_attr( $id ) ?>" />
       
   249 
       
   250 <?php $wp_list_table->display(); ?>
       
   251 
       
   252 </form>
       
   253 
       
   254 <?php do_action( 'network_site_users_after_list_table', '' );?>
       
   255 
       
   256 <?php if ( current_user_can( 'promote_users' ) && apply_filters( 'show_network_site_users_add_existing_form', true ) ) : ?>
       
   257 <h4 id="add-user"><?php _e('Add User to This Site') ?></h4>
       
   258 	<?php if ( current_user_can( 'create_users' ) && apply_filters( 'show_network_site_users_add_new_form', true ) ) : ?>
       
   259 <p><?php _e( 'You may add from existing network users, or set up a new user to add to this site.' ); ?></p>
       
   260 	<?php else : ?>
       
   261 <p><?php _e( 'You may add from existing network users to this site.' ); ?></p>
       
   262 	<?php endif; ?>
       
   263 <h5 id="add-existing-user"><?php _e('Add Existing User') ?></h5>
       
   264 <form action="site-users.php?action=adduser" id="adduser" method="post">
       
   265 	<?php wp_nonce_field( 'edit-site' ); ?>
       
   266 	<input type="hidden" name="id" value="<?php echo esc_attr( $id ) ?>" />
       
   267 	<table class="form-table">
       
   268 		<tr>
       
   269 			<th scope="row"><?php _e( 'Username' ); ?></th>
       
   270 			<td><input type="text" class="regular-text wp-suggest-user" name="newuser" id="newuser" /></td>
       
   271 		</tr>
       
   272 		<tr>
       
   273 			<th scope="row"><?php _e( 'Role'); ?></th>
       
   274 			<td><select name="new_role" id="new_role_0">
       
   275 			<?php
       
   276 			reset( $editblog_roles );
       
   277 			foreach ( $editblog_roles as $role => $role_assoc ){
       
   278 				$name = translate_user_role( $role_assoc['name'] );
       
   279 				$selected = ( $role == $default_role ) ? 'selected="selected"' : '';
       
   280 				echo '<option ' . $selected . ' value="' . esc_attr( $role ) . '">' . esc_html( $name ) . '</option>';
       
   281 			}
       
   282 			?>
       
   283 			</select></td>
       
   284 		</tr>
       
   285 	</table>
       
   286 	<?php wp_nonce_field( 'add-user', '_wpnonce_add-user' ) ?>
       
   287 	<?php submit_button( __('Add User'), 'primary', 'add-user', false, array( 'id' => 'submit-add-existing-user' ) ); ?>
       
   288 </form>
       
   289 <?php endif; ?>
       
   290 
       
   291 <?php if ( current_user_can( 'create_users' ) && apply_filters( 'show_network_site_users_add_new_form', true ) ) : ?>
       
   292 <h5 id="add-new-user"><?php _e('Add New User') ?></h5>
       
   293 <form action="<?php echo network_admin_url('site-users.php?action=newuser'); ?>" id="newuser" method="post">
       
   294 	<?php wp_nonce_field( 'edit-site' ); ?>
       
   295 	<input type="hidden" name="id" value="<?php echo esc_attr( $id ) ?>" />
       
   296 	<table class="form-table">
       
   297 		<tr>
       
   298 			<th scope="row"><?php _e( 'Username' ) ?></th>
       
   299 			<td><input type="text" class="regular-text" name="user[username]" /></td>
       
   300 		</tr>
       
   301 		<tr>
       
   302 			<th scope="row"><?php _e( 'Email' ) ?></th>
       
   303 			<td><input type="text" class="regular-text" name="user[email]" /></td>
       
   304 		</tr>
       
   305 		<tr>
       
   306 			<th scope="row"><?php _e( 'Role'); ?></th>
       
   307 			<td><select name="new_role" id="new_role_0">
       
   308 			<?php
       
   309 			reset( $editblog_roles );
       
   310 			foreach ( $editblog_roles as $role => $role_assoc ){
       
   311 				$name = translate_user_role( $role_assoc['name'] );
       
   312 				$selected = ( $role == $default_role ) ? 'selected="selected"' : '';
       
   313 				echo '<option ' . $selected . ' value="' . esc_attr( $role ) . '">' . esc_html( $name ) . '</option>';
       
   314 			}
       
   315 			?>
       
   316 			</select></td>
       
   317 		</tr>
       
   318 		<tr class="form-field">
       
   319 			<td colspan="2"><?php _e( 'Username and password will be mailed to the above email address.' ) ?></td>
       
   320 		</tr>
       
   321 	</table>
       
   322 	<?php wp_nonce_field( 'add-user', '_wpnonce_add-new-user' ) ?>
       
   323 	<?php submit_button( __('Add New User'), 'primary', 'add-user', false, array( 'id' => 'submit-add-user' ) ); ?>
       
   324 </form>
       
   325 <?php endif; ?>
       
   326 </div>
       
   327 <?php
       
   328 require('../admin-footer.php');