[ Root ] [ Search ] [ Index ]

PHP Cross Reference of WordPress MU 2.9.2

Provided by Yoast

title

Body

[close]

/wp-admin/ -> user-edit.php (source)

   1  <?php
   2  /**
   3   * Edit user administration panel.
   4   *
   5   * @package WordPress
   6   * @subpackage Administration
   7   */
   8  
   9  /** WordPress Administration Bootstrap */
  10  require_once ('admin.php');
  11  
  12  if ( !defined('IS_PROFILE_PAGE') )
  13      define('IS_PROFILE_PAGE', false);
  14  
  15  wp_enqueue_script('user-profile');
  16  wp_enqueue_script('password-strength-meter');
  17  
  18  $title = IS_PROFILE_PAGE ? __('Profile') : __('Edit User');
  19  if ( current_user_can('edit_users') && !IS_PROFILE_PAGE )
  20      $submenu_file = 'users.php';
  21  else
  22      $submenu_file = 'profile.php';
  23  $parent_file = 'users.php';
  24  
  25  wp_reset_vars(array('action', 'redirect', 'profile', 'user_id', 'wp_http_referer'));
  26  
  27  $wp_http_referer = remove_query_arg(array('update', 'delete_count'), stripslashes($wp_http_referer));
  28  
  29  $user_id = (int) $user_id;
  30  
  31  if ( !$user_id ) {
  32      if ( IS_PROFILE_PAGE ) {
  33          $current_user = wp_get_current_user();
  34          $user_id = $current_user->ID;
  35      } else {
  36          wp_die(__('Invalid user ID.'));
  37      }
  38  } elseif ( !get_userdata($user_id) ) {
  39      wp_die( __('Invalid user ID.') );
  40  }
  41  
  42  $all_post_caps = array('posts', 'pages');
  43  $user_can_edit = false;
  44  foreach ( $all_post_caps as $post_cap )
  45      $user_can_edit |= current_user_can("edit_$post_cap");
  46  
  47  /**
  48   * Optional SSL preference that can be turned on by hooking to the 'personal_options' action.
  49   *
  50   * @since 2.7.0
  51   *
  52   * @param object $user User data object
  53   */
  54  function use_ssl_preference($user) {
  55  ?>
  56      <tr>
  57          <th scope="row"><?php _e('Use https')?></th>
  58          <td><label for="use_ssl"><input name="use_ssl" type="checkbox" id="use_ssl" value="1" <?php checked('1', $user->use_ssl); ?> /> <?php _e('Always use https when visiting the admin'); ?></label></td>
  59      </tr>
  60  <?php
  61  }
  62  
  63  // Only allow site admins to edit every user. 
  64  if ( defined( "EDIT_ANY_USER" ) == false && !is_site_admin() && $user_id != $current_user->ID ) 
  65      wp_die( __( 'You do not have permission to edit this user.' ) ); 
  66      
  67  switch ($action) {
  68  case 'switchposts':
  69  
  70  check_admin_referer();
  71  
  72  /* TODO: Switch all posts from one user to another user */
  73  
  74  break;
  75  
  76  case 'update':
  77  
  78  check_admin_referer('update-user_' . $user_id);
  79  
  80  if ( !current_user_can('edit_user', $user_id) )
  81      wp_die(__('You do not have permission to edit this user.'));
  82  
  83  if ( IS_PROFILE_PAGE )
  84      do_action('personal_options_update', $user_id);
  85  else
  86      do_action('edit_user_profile_update', $user_id);
  87  
  88  // WPMU must delete the user from the current blog if WP added him after editing.
  89  $delete_role = false;
  90  if( $user_id != $current_user->ID ) {
  91      $cap = $wpdb->get_var( "SELECT meta_value FROM {$wpdb->usermeta} WHERE user_id = '{$user_id}' AND meta_key = '{$wpdb->base_prefix}{$wpdb->blogid}_capabilities' AND meta_value = 'a:0:{}'" );
  92      if( null == $cap && $_POST[ 'role' ] == '' ) {
  93          $_POST[ 'role' ] = 'contributor';
  94          $delete_role = true;
  95      }
  96  }
  97  if ( !isset( $errors ) || ( isset( $errors ) && is_object( $errors ) && false == $errors->get_error_codes() ) )
  98      $errors = edit_user($user_id);
  99  if( $delete_role ) // stops users being added to current blog when they are edited
 100      update_usermeta( $user_id, $wpdb->base_prefix . $wpdb->blogid . '_capabilities' , '' );
 101  
 102  if ( !is_wp_error( $errors ) ) {
 103      $redirect = (IS_PROFILE_PAGE ? "profile.php?" : "user-edit.php?user_id=$user_id&"). "updated=true";
 104      $redirect = add_query_arg('wp_http_referer', urlencode($wp_http_referer), $redirect);
 105      wp_redirect($redirect);
 106      exit;
 107  }
 108  
 109  default:
 110  $profileuser = get_user_to_edit($user_id);
 111  
 112  if ( !current_user_can('edit_user', $user_id) )
 113      wp_die(__('You do not have permission to edit this user.'));
 114  
 115  include  ('admin-header.php');
 116  ?>
 117  
 118  <?php if ( isset($_GET['updated']) ) : ?>
 119  <div id="message" class="updated fade">
 120      <p><strong><?php _e('User updated.') ?></strong></p>
 121      <?php if ( $wp_http_referer && !IS_PROFILE_PAGE ) : ?>
 122      <p><a href="users.php"><?php _e('&larr; Back to Authors and Users'); ?></a></p>
 123      <?php endif; ?>
 124  </div>
 125  <?php endif; ?>
 126  <?php if ( isset( $errors ) && is_wp_error( $errors ) ) : ?>
 127  <div class="error">
 128      <ul>
 129      <?php
 130      foreach( $errors->get_error_messages() as $message )
 131          echo "<li>$message</li>";
 132      ?>
 133      </ul>
 134  </div>
 135  <?php endif; ?>
 136  
 137  <div class="wrap" id="profile-page">
 138  <?php screen_icon(); ?>
 139  <h2><?php echo esc_html( $title ); ?></h2>
 140  
 141  <form id="your-profile" action="<?php if ( IS_PROFILE_PAGE ) { echo admin_url('profile.php'); } else { echo admin_url('user-edit.php'); } ?>" method="post">
 142  <?php wp_nonce_field('update-user_' . $user_id) ?>
 143  <?php if ( $wp_http_referer ) : ?>
 144      <input type="hidden" name="wp_http_referer" value="<?php echo esc_url($wp_http_referer); ?>" />
 145  <?php endif; ?>
 146  <p>
 147  <input type="hidden" name="from" value="profile" />
 148  <input type="hidden" name="checkuser_id" value="<?php echo $user_ID ?>" />
 149  </p>
 150  
 151  <h3><?php _e('Personal Options'); ?></h3>
 152  
 153  <table class="form-table">
 154  <?php if ( rich_edit_exists() && !( IS_PROFILE_PAGE && !$user_can_edit ) ) : // don't bother showing the option if the editor has been removed ?>
 155      <tr>
 156          <th scope="row"><?php _e('Visual Editor')?></th>
 157          <td><label for="rich_editing"><input name="rich_editing" type="checkbox" id="rich_editing" value="false" <?php checked('false', $profileuser->rich_editing); ?> /> <?php _e('Disable the visual editor when writing'); ?></label></td>
 158      </tr>
 159  <?php endif; ?>
 160  <?php if (count($_wp_admin_css_colors) > 1 ) : ?>
 161  <tr>
 162  <th scope="row"><?php _e('Admin Color Scheme')?></th>
 163  <td><fieldset><legend class="screen-reader-text"><span><?php _e('Admin Color Scheme')?></span></legend>
 164  <?php
 165  $current_color = get_user_option('admin_color', $user_id);
 166  if ( empty($current_color) )
 167      $current_color = 'fresh';
 168  foreach ( $_wp_admin_css_colors as $color => $color_info ): ?>
 169  <div class="color-option"><input name="admin_color" id="admin_color_<?php echo $color; ?>" type="radio" value="<?php echo esc_attr($color) ?>" class="tog" <?php checked($color, $current_color); ?> />
 170      <table class="color-palette">
 171      <tr>
 172      <?php foreach ( $color_info->colors as $html_color ): ?>
 173      <td style="background-color: <?php echo $html_color ?>" title="<?php echo $color ?>">&nbsp;</td>
 174      <?php endforeach; ?>
 175      </tr>
 176      </table>
 177  
 178      <label for="admin_color_<?php echo $color; ?>"><?php echo $color_info->name ?></label>
 179  </div>
 180      <?php endforeach; ?>
 181  </fieldset></td>
 182  </tr>
 183  <?php if ( !( IS_PROFILE_PAGE && !$user_can_edit ) ) : ?>
 184  <tr>
 185  <th scope="row"><?php _e( 'Keyboard Shortcuts' ); ?></th>
 186  <td><label for="comment_shortcuts"><input type="checkbox" name="comment_shortcuts" id="comment_shortcuts" value="true" <?php if ( !empty($profileuser->comment_shortcuts) ) checked('true', $profileuser->comment_shortcuts); ?> /> <?php _e('Enable keyboard shortcuts for comment moderation.'); ?></label> <?php _e('<a href="http://codex.wordpress.org/Keyboard_Shortcuts">More information</a>'); ?></td>
 187  </tr>
 188  <?php
 189  endif;
 190  endif;
 191  do_action('personal_options', $profileuser);
 192  ?>
 193  </table>
 194  <?php
 195      if ( IS_PROFILE_PAGE )
 196          do_action('profile_personal_options', $profileuser);
 197  ?>
 198  
 199  <h3><?php _e('Name') ?></h3>
 200  
 201  <table class="form-table">
 202      <tr>
 203          <th><label for="user_login"><?php _e('Username'); ?></label></th>
 204          <td><input type="text" name="user_login" id="user_login" value="<?php echo esc_attr($profileuser->user_login); ?>" disabled="disabled" class="regular-text" /> <span class="description"><?php _e('Your username cannot be changed.'); ?></span></td>
 205      </tr>
 206  
 207  <?php if ( !IS_PROFILE_PAGE ): ?>
 208  <tr><th><label for="role"><?php _e('Role:') ?></label></th>
 209  <td><select name="role" id="role">
 210  <?php
 211  // Get the highest/primary role for this user
 212  // TODO: create a function that does this: wp_get_user_role()
 213  $user_roles = $profileuser->roles;
 214  $user_role = array_shift($user_roles);
 215  
 216  // print the full list of roles with the primary one selected.
 217  wp_dropdown_roles($user_role);
 218  
 219  // print the 'no role' option. Make it selected if the user has no role yet.
 220  if ( $user_role )
 221      echo '<option value="">' . __('&mdash; No role for this blog &mdash;') . '</option>';
 222  else
 223      echo '<option value="" selected="selected">' . __('&mdash; No role for this blog &mdash;') . '</option>';
 224  ?>
 225  </select></td></tr>
 226  <?php endif; //!IS_PROFILE_PAGE ?>
 227  
 228  <tr>
 229      <th><label for="first_name"><?php _e('First name') ?></label></th>
 230      <td><input type="text" name="first_name" id="first_name" value="<?php echo esc_attr($profileuser->first_name) ?>" class="regular-text" /></td>
 231  </tr>
 232  
 233  <tr>
 234      <th><label for="last_name"><?php _e('Last name') ?></label></th>
 235      <td><input type="text" name="last_name" id="last_name" value="<?php echo esc_attr($profileuser->last_name) ?>" class="regular-text" /></td>
 236  </tr>
 237  
 238  <tr>
 239      <th><label for="nickname"><?php _e('Nickname'); ?> <span class="description"><?php _e('(required)'); ?></span></label></th>
 240      <td><input type="text" name="nickname" id="nickname" value="<?php echo esc_attr($profileuser->nickname) ?>" class="regular-text" /></td>
 241  </tr>
 242  
 243  <tr>
 244      <th><label for="display_name"><?php _e('Display name publicly as') ?></label></th>
 245      <td>
 246          <select name="display_name" id="display_name">
 247          <?php
 248              $public_display = array();
 249              $public_display['display_nickname']  = $profileuser->nickname;
 250              $public_display['display_username']  = $profileuser->user_login;
 251              if ( !empty($profileuser->first_name) )
 252                  $public_display['display_firstname'] = $profileuser->first_name;
 253              if ( !empty($profileuser->last_name) )
 254                  $public_display['display_lastname'] = $profileuser->last_name;
 255              if ( !empty($profileuser->first_name) && !empty($profileuser->last_name) ) {
 256                  $public_display['display_firstlast'] = $profileuser->first_name . ' ' . $profileuser->last_name;
 257                  $public_display['display_lastfirst'] = $profileuser->last_name . ' ' . $profileuser->first_name;
 258              }
 259              if ( !in_array( $profileuser->display_name, $public_display ) )// Only add this if it isn't duplicated elsewhere
 260                  $public_display = array( 'display_displayname' => $profileuser->display_name ) + $public_display;
 261              $public_display = array_map( 'trim', $public_display );
 262              foreach ( $public_display as $id => $item ) {
 263          ?>
 264              <option id="<?php echo $id; ?>" value="<?php echo esc_attr($item); ?>"<?php selected( $profileuser->display_name, $item ); ?>><?php echo $item; ?></option>
 265          <?php
 266              }
 267          ?>
 268          </select>
 269      </td>
 270  </tr>
 271  </table>
 272  
 273  <h3><?php _e('Contact Info') ?></h3>
 274  
 275  <table class="form-table">
 276  <tr>
 277      <th><label for="email"><?php _e('E-mail'); ?> <span class="description"><?php _e('(required)'); ?></span></label></th>
 278      <td><input type="text" name="email" id="email" value="<?php echo esc_attr($profileuser->user_email) ?>" class="regular-text" /></td>
 279  </tr>
 280  
 281  <tr>
 282      <th><label for="url"><?php _e('Website') ?></label></th>
 283      <td><input type="text" name="url" id="url" value="<?php echo esc_attr($profileuser->user_url) ?>" class="regular-text code" /></td>
 284  </tr>
 285  
 286  <?php
 287      foreach (_wp_get_user_contactmethods() as $name => $desc) {
 288  ?>
 289  <tr>
 290      <th><label for="<?php echo $name; ?>"><?php echo apply_filters('user_'.$name.'_label', $desc); ?></label></th>
 291      <td><input type="text" name="<?php echo $name; ?>" id="<?php echo $name; ?>" value="<?php echo esc_attr($profileuser->$name) ?>" class="regular-text" /></td>
 292  </tr>
 293  <?php
 294      }
 295  ?>
 296  </table>
 297  
 298  <h3><?php IS_PROFILE_PAGE ? _e('About Yourself') : _e('About the user'); ?></h3>
 299  
 300  <table class="form-table">
 301  <tr>
 302      <th><label for="description"><?php _e('Biographical Info'); ?></label></th>
 303      <td><textarea name="description" id="description" rows="5" cols="30"><?php echo esc_html($profileuser->description); ?></textarea><br />
 304      <span class="description"><?php _e('Share a little biographical information to fill out your profile. This may be shown publicly.'); ?></span></td>
 305  </tr>
 306  
 307  <?php
 308  $show_password_fields = apply_filters('show_password_fields', true, $profileuser);
 309  if ( $show_password_fields ) :
 310  ?>
 311  <tr id="password">
 312      <th><label for="pass1"><?php _e('New Password'); ?></label></th>
 313      <td><input type="password" name="pass1" id="pass1" size="16" value="" autocomplete="off" /> <span class="description"><?php _e("If you would like to change the password type a new one. Otherwise leave this blank."); ?></span><br />
 314          <input type="password" name="pass2" id="pass2" size="16" value="" autocomplete="off" /> <span class="description"><?php _e("Type your new password again."); ?></span><br />
 315          <div id="pass-strength-result"><?php _e('Strength indicator'); ?></div>
 316          <p class="description indicator-hint"><?php _e('Hint: The password should be at least seven characters long. To make it stronger, use upper and lower case letters, numbers and symbols like ! " ? $ % ^ &amp; ).'); ?></p>
 317      </td>
 318  </tr>
 319  <?php endif; ?>
 320  </table>
 321  
 322  <?php
 323      if ( IS_PROFILE_PAGE ) {
 324          do_action('show_user_profile', $profileuser);
 325      } else {
 326          do_action('edit_user_profile', $profileuser);
 327      }
 328  ?>
 329  
 330  <?php if ( count($profileuser->caps) > count($profileuser->roles) && apply_filters('additional_capabilities_display', true, $profileuser) ) { ?>
 331  <br class="clear" />
 332      <table width="99%" style="border: none;" cellspacing="2" cellpadding="3" class="editform">
 333          <tr>
 334              <th scope="row"><?php _e('Additional Capabilities') ?></th>
 335              <td><?php
 336              $output = '';
 337              foreach ( $profileuser->caps as $cap => $value ) {
 338                  if ( !$wp_roles->is_role($cap) ) {
 339                      if ( $output != '' )
 340                          $output .= ', ';
 341                      $output .= $value ? $cap : "Denied: {$cap}";
 342                  }
 343              }
 344              echo $output;
 345              ?></td>
 346          </tr>
 347      </table>
 348  <?php } ?>
 349  
 350  <p class="submit">
 351      <input type="hidden" name="action" value="update" />
 352      <input type="hidden" name="user_id" id="user_id" value="<?php echo esc_attr($user_id); ?>" />
 353      <input type="submit" class="button-primary" value="<?php IS_PROFILE_PAGE ? esc_attr_e('Update Profile') : esc_attr_e('Update User') ?>" name="submit" />
 354  </p>
 355  </form>
 356  </div>
 357  <?php
 358  break;
 359  }
 360  
 361  include ('admin-footer.php');
 362  ?>


Generated: Mon May 3 12:25:32 2010 Cross-referenced by PHPXref 0.7