site-users.php 11 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342343344345346347348349350351352353354355356357358359360361362363364365
  1. <?php
  2. /**
  3. * Edit Site Users Administration Screen
  4. *
  5. * @package WordPress
  6. * @subpackage Multisite
  7. * @since 3.1.0
  8. */
  9. /** Load WordPress Administration Bootstrap */
  10. require_once __DIR__ . '/admin.php';
  11. if ( ! current_user_can( 'manage_sites' ) ) {
  12. wp_die( __( 'Sorry, you are not allowed to edit this site.' ), 403 );
  13. }
  14. $wp_list_table = _get_list_table( 'WP_Users_List_Table' );
  15. $wp_list_table->prepare_items();
  16. get_current_screen()->add_help_tab( get_site_screen_help_tab_args() );
  17. get_current_screen()->set_help_sidebar( get_site_screen_help_sidebar_content() );
  18. get_current_screen()->set_screen_reader_content(
  19. array(
  20. 'heading_views' => __( 'Filter site users list' ),
  21. 'heading_pagination' => __( 'Site users list navigation' ),
  22. 'heading_list' => __( 'Site users list' ),
  23. )
  24. );
  25. $_SERVER['REQUEST_URI'] = remove_query_arg( 'update', $_SERVER['REQUEST_URI'] );
  26. $referer = remove_query_arg( 'update', wp_get_referer() );
  27. if ( ! empty( $_REQUEST['paged'] ) ) {
  28. $referer = add_query_arg( 'paged', (int) $_REQUEST['paged'], $referer );
  29. }
  30. $id = isset( $_REQUEST['id'] ) ? (int) $_REQUEST['id'] : 0;
  31. if ( ! $id ) {
  32. wp_die( __( 'Invalid site ID.' ) );
  33. }
  34. $details = get_site( $id );
  35. if ( ! $details ) {
  36. wp_die( __( 'The requested site does not exist.' ) );
  37. }
  38. if ( ! can_edit_network( $details->site_id ) ) {
  39. wp_die( __( 'Sorry, you are not allowed to access this page.' ), 403 );
  40. }
  41. $is_main_site = is_main_site( $id );
  42. switch_to_blog( $id );
  43. $action = $wp_list_table->current_action();
  44. if ( $action ) {
  45. switch ( $action ) {
  46. case 'newuser':
  47. check_admin_referer( 'add-user', '_wpnonce_add-new-user' );
  48. $user = $_POST['user'];
  49. if ( ! is_array( $_POST['user'] ) || empty( $user['username'] ) || empty( $user['email'] ) ) {
  50. $update = 'err_new';
  51. } else {
  52. $password = wp_generate_password( 12, false );
  53. $user_id = wpmu_create_user( esc_html( strtolower( $user['username'] ) ), $password, esc_html( $user['email'] ) );
  54. if ( false === $user_id ) {
  55. $update = 'err_new_dup';
  56. } else {
  57. $result = add_user_to_blog( $id, $user_id, $_POST['new_role'] );
  58. if ( is_wp_error( $result ) ) {
  59. $update = 'err_add_fail';
  60. } else {
  61. $update = 'newuser';
  62. /**
  63. * Fires after a user has been created via the network site-users.php page.
  64. *
  65. * @since 4.4.0
  66. *
  67. * @param int $user_id ID of the newly created user.
  68. */
  69. do_action( 'network_site_users_created_user', $user_id );
  70. }
  71. }
  72. }
  73. break;
  74. case 'adduser':
  75. check_admin_referer( 'add-user', '_wpnonce_add-user' );
  76. if ( ! empty( $_POST['newuser'] ) ) {
  77. $update = 'adduser';
  78. $newuser = $_POST['newuser'];
  79. $user = get_user_by( 'login', $newuser );
  80. if ( $user && $user->exists() ) {
  81. if ( ! is_user_member_of_blog( $user->ID, $id ) ) {
  82. $result = add_user_to_blog( $id, $user->ID, $_POST['new_role'] );
  83. if ( is_wp_error( $result ) ) {
  84. $update = 'err_add_fail';
  85. }
  86. } else {
  87. $update = 'err_add_member';
  88. }
  89. } else {
  90. $update = 'err_add_notfound';
  91. }
  92. } else {
  93. $update = 'err_add_notfound';
  94. }
  95. break;
  96. case 'remove':
  97. if ( ! current_user_can( 'remove_users' ) ) {
  98. wp_die( __( 'Sorry, you are not allowed to remove users.' ), 403 );
  99. }
  100. check_admin_referer( 'bulk-users' );
  101. $update = 'remove';
  102. if ( isset( $_REQUEST['users'] ) ) {
  103. $userids = $_REQUEST['users'];
  104. foreach ( $userids as $user_id ) {
  105. $user_id = (int) $user_id;
  106. remove_user_from_blog( $user_id, $id );
  107. }
  108. } elseif ( isset( $_GET['user'] ) ) {
  109. remove_user_from_blog( $_GET['user'] );
  110. } else {
  111. $update = 'err_remove';
  112. }
  113. break;
  114. case 'promote':
  115. check_admin_referer( 'bulk-users' );
  116. $editable_roles = get_editable_roles();
  117. $role = $_REQUEST['new_role'];
  118. if ( empty( $editable_roles[ $role ] ) ) {
  119. wp_die( __( 'Sorry, you are not allowed to give users that role.' ), 403 );
  120. }
  121. if ( isset( $_REQUEST['users'] ) ) {
  122. $userids = $_REQUEST['users'];
  123. $update = 'promote';
  124. foreach ( $userids as $user_id ) {
  125. $user_id = (int) $user_id;
  126. // If the user doesn't already belong to the blog, bail.
  127. if ( ! is_user_member_of_blog( $user_id ) ) {
  128. wp_die(
  129. '<h1>' . __( 'Something went wrong.' ) . '</h1>' .
  130. '<p>' . __( 'One of the selected users is not a member of this site.' ) . '</p>',
  131. 403
  132. );
  133. }
  134. $user = get_userdata( $user_id );
  135. $user->set_role( $role );
  136. }
  137. } else {
  138. $update = 'err_promote';
  139. }
  140. break;
  141. default:
  142. if ( ! isset( $_REQUEST['users'] ) ) {
  143. break;
  144. }
  145. check_admin_referer( 'bulk-users' );
  146. $userids = $_REQUEST['users'];
  147. /** This action is documented in wp-admin/network/site-themes.php */
  148. $referer = apply_filters( 'handle_network_bulk_actions-' . get_current_screen()->id, $referer, $action, $userids, $id ); // phpcs:ignore WordPress.NamingConventions.ValidHookName.UseUnderscores
  149. $update = $action;
  150. break;
  151. }
  152. wp_safe_redirect( add_query_arg( 'update', $update, $referer ) );
  153. exit;
  154. }
  155. restore_current_blog();
  156. if ( isset( $_GET['action'] ) && 'update-site' === $_GET['action'] ) {
  157. wp_safe_redirect( $referer );
  158. exit;
  159. }
  160. add_screen_option( 'per_page' );
  161. // Used in the HTML title tag.
  162. /* translators: %s: Site title. */
  163. $title = sprintf( __( 'Edit Site: %s' ), esc_html( $details->blogname ) );
  164. $parent_file = 'sites.php';
  165. $submenu_file = 'sites.php';
  166. /**
  167. * Filters whether to show the Add Existing User form on the Multisite Users screen.
  168. *
  169. * @since 3.1.0
  170. *
  171. * @param bool $bool Whether to show the Add Existing User form. Default true.
  172. */
  173. if ( ! wp_is_large_network( 'users' ) && apply_filters( 'show_network_site_users_add_existing_form', true ) ) {
  174. wp_enqueue_script( 'user-suggest' );
  175. }
  176. require_once ABSPATH . 'wp-admin/admin-header.php'; ?>
  177. <script type="text/javascript">
  178. var current_site_id = <?php echo absint( $id ); ?>;
  179. </script>
  180. <div class="wrap">
  181. <h1 id="edit-site"><?php echo $title; ?></h1>
  182. <p class="edit-site-actions"><a href="<?php echo esc_url( get_home_url( $id, '/' ) ); ?>"><?php _e( 'Visit' ); ?></a> | <a href="<?php echo esc_url( get_admin_url( $id ) ); ?>"><?php _e( 'Dashboard' ); ?></a></p>
  183. <?php
  184. network_edit_site_nav(
  185. array(
  186. 'blog_id' => $id,
  187. 'selected' => 'site-users',
  188. )
  189. );
  190. if ( isset( $_GET['update'] ) ) :
  191. switch ( $_GET['update'] ) {
  192. case 'adduser':
  193. echo '<div id="message" class="updated notice is-dismissible"><p>' . __( 'User added.' ) . '</p></div>';
  194. break;
  195. case 'err_add_member':
  196. echo '<div id="message" class="error notice is-dismissible"><p>' . __( 'User is already a member of this site.' ) . '</p></div>';
  197. break;
  198. case 'err_add_fail':
  199. echo '<div id="message" class="error notice is-dismissible"><p>' . __( 'User could not be added to this site.' ) . '</p></div>';
  200. break;
  201. case 'err_add_notfound':
  202. echo '<div id="message" class="error notice is-dismissible"><p>' . __( 'Enter the username of an existing user.' ) . '</p></div>';
  203. break;
  204. case 'promote':
  205. echo '<div id="message" class="updated notice is-dismissible"><p>' . __( 'Changed roles.' ) . '</p></div>';
  206. break;
  207. case 'err_promote':
  208. echo '<div id="message" class="error notice is-dismissible"><p>' . __( 'Select a user to change role.' ) . '</p></div>';
  209. break;
  210. case 'remove':
  211. echo '<div id="message" class="updated notice is-dismissible"><p>' . __( 'User removed from this site.' ) . '</p></div>';
  212. break;
  213. case 'err_remove':
  214. echo '<div id="message" class="error notice is-dismissible"><p>' . __( 'Select a user to remove.' ) . '</p></div>';
  215. break;
  216. case 'newuser':
  217. echo '<div id="message" class="updated notice is-dismissible"><p>' . __( 'User created.' ) . '</p></div>';
  218. break;
  219. case 'err_new':
  220. echo '<div id="message" class="error notice is-dismissible"><p>' . __( 'Enter the username and email.' ) . '</p></div>';
  221. break;
  222. case 'err_new_dup':
  223. echo '<div id="message" class="error notice is-dismissible"><p>' . __( 'Duplicated username or email address.' ) . '</p></div>';
  224. break;
  225. }
  226. endif;
  227. ?>
  228. <form class="search-form" method="get">
  229. <?php $wp_list_table->search_box( __( 'Search Users' ), 'user' ); ?>
  230. <input type="hidden" name="id" value="<?php echo esc_attr( $id ); ?>" />
  231. </form>
  232. <?php $wp_list_table->views(); ?>
  233. <form method="post" action="site-users.php?action=update-site">
  234. <input type="hidden" name="id" value="<?php echo esc_attr( $id ); ?>" />
  235. <?php $wp_list_table->display(); ?>
  236. </form>
  237. <?php
  238. /**
  239. * Fires after the list table on the Users screen in the Multisite Network Admin.
  240. *
  241. * @since 3.1.0
  242. */
  243. do_action( 'network_site_users_after_list_table' );
  244. /** This filter is documented in wp-admin/network/site-users.php */
  245. if ( current_user_can( 'promote_users' ) && apply_filters( 'show_network_site_users_add_existing_form', true ) ) :
  246. ?>
  247. <h2 id="add-existing-user"><?php _e( 'Add Existing User' ); ?></h2>
  248. <form action="site-users.php?action=adduser" id="adduser" method="post">
  249. <input type="hidden" name="id" value="<?php echo esc_attr( $id ); ?>" />
  250. <table class="form-table" role="presentation">
  251. <tr>
  252. <th scope="row"><label for="newuser"><?php _e( 'Username' ); ?></label></th>
  253. <td><input type="text" class="regular-text wp-suggest-user" name="newuser" id="newuser" /></td>
  254. </tr>
  255. <tr>
  256. <th scope="row"><label for="new_role_adduser"><?php _e( 'Role' ); ?></label></th>
  257. <td><select name="new_role" id="new_role_adduser">
  258. <?php
  259. switch_to_blog( $id );
  260. wp_dropdown_roles( get_option( 'default_role' ) );
  261. restore_current_blog();
  262. ?>
  263. </select></td>
  264. </tr>
  265. </table>
  266. <?php wp_nonce_field( 'add-user', '_wpnonce_add-user' ); ?>
  267. <?php submit_button( __( 'Add User' ), 'primary', 'add-user', true, array( 'id' => 'submit-add-existing-user' ) ); ?>
  268. </form>
  269. <?php endif; ?>
  270. <?php
  271. /**
  272. * Filters whether to show the Add New User form on the Multisite Users screen.
  273. *
  274. * @since 3.1.0
  275. *
  276. * @param bool $bool Whether to show the Add New User form. Default true.
  277. */
  278. if ( current_user_can( 'create_users' ) && apply_filters( 'show_network_site_users_add_new_form', true ) ) :
  279. ?>
  280. <h2 id="add-new-user"><?php _e( 'Add New User' ); ?></h2>
  281. <form action="<?php echo esc_url( network_admin_url( 'site-users.php?action=newuser' ) ); ?>" id="newuser" method="post">
  282. <input type="hidden" name="id" value="<?php echo esc_attr( $id ); ?>" />
  283. <table class="form-table" role="presentation">
  284. <tr>
  285. <th scope="row"><label for="user_username"><?php _e( 'Username' ); ?></label></th>
  286. <td><input type="text" class="regular-text" name="user[username]" id="user_username" /></td>
  287. </tr>
  288. <tr>
  289. <th scope="row"><label for="user_email"><?php _e( 'Email' ); ?></label></th>
  290. <td><input type="text" class="regular-text" name="user[email]" id="user_email" /></td>
  291. </tr>
  292. <tr>
  293. <th scope="row"><label for="new_role_newuser"><?php _e( 'Role' ); ?></label></th>
  294. <td><select name="new_role" id="new_role_newuser">
  295. <?php
  296. switch_to_blog( $id );
  297. wp_dropdown_roles( get_option( 'default_role' ) );
  298. restore_current_blog();
  299. ?>
  300. </select></td>
  301. </tr>
  302. <tr class="form-field">
  303. <td colspan="2" class="td-full"><?php _e( 'A password reset link will be sent to the user via email.' ); ?></td>
  304. </tr>
  305. </table>
  306. <?php wp_nonce_field( 'add-user', '_wpnonce_add-new-user' ); ?>
  307. <?php submit_button( __( 'Add New User' ), 'primary', 'add-user', true, array( 'id' => 'submit-add-user' ) ); ?>
  308. </form>
  309. <?php endif; ?>
  310. </div>
  311. <?php
  312. require_once ABSPATH . 'wp-admin/admin-footer.php';