WordPress/wp-admin/user-edit.php

245 lines
8.7 KiB
PHP

<?php
require_once('admin.php');
$title = __('Edit User');
$parent_file = 'profile.php';
$submenu_file = 'users.php';
$wpvarstoreset = array('action', 'redirect', 'profile', 'user_id');
for ($i=0; $i<count($wpvarstoreset); $i += 1) {
$wpvar = $wpvarstoreset[$i];
if (!isset($$wpvar)) {
if (empty($_POST["$wpvar"])) {
if (empty($_GET["$wpvar"])) {
$$wpvar = '';
} else {
$$wpvar = $_GET["$wpvar"];
}
} else {
$$wpvar = $_POST["$wpvar"];
}
}
}
switch ($action) {
case 'switchposts':
check_admin_referer();
/* TODO: Switch all posts from one user to another user */
break;
case 'update':
$errors = array();
if(empty($wp_user)) {
$wp_user = new WP_User($user_id);
$edituser = &$wp_user->data;
}
if (!current_user_can('edit_users')) $errors['head'] = __('You do not have permission to edit this user.');
/* checking the nickname has been typed */
if (empty($_POST["new_nickname"])) {
$errors['nickname'] = __("<strong>ERROR</strong>: please enter your nickname (can be the same as your username)");
}
$new_user_login = wp_specialchars($_POST['new_user_login']);
$pass1 = $_POST['pass1'];
$pass2 = $_POST['pass2'];
do_action('check_passwords', array($new_user_login, &$pass1, &$pass2));
if ( '' == $pass1 ) {
if ( '' != $pass2 )
$errors['pass'] = __("<strong>ERROR</strong>: you typed your new password only once.");
$updatepassword = '';
} else {
if ( '' == $pass2)
$errors['pass'] = __("<strong>ERROR</strong>: you typed your new password only once.");
if ( $pass1 != $pass2 )
$errors['pass'] = __("<strong>ERROR</strong>: you typed two different passwords.");
$new_pass = $pass1;
$updatepassword = "user_pass=MD5('$new_pass'), ";
}
$edituser->user_login = wp_specialchars($_POST['new_user_login']);
$edituser->user_nicename = sanitize_title($new_nickname, $user_id);
$edituser->user_email = wp_specialchars($_POST['new_email']);
$edituser->user_url = wp_specialchars($_POST['new_url']);
$edituser->user_url = preg_match('/^(https?|ftps?|mailto|news|gopher):/is', $edituser->user_url) ? $edituser->user_url : 'http://' . $edituser->user_url;
$edituser->display_name = wp_specialchars($_POST['display_name']);
$edituser->first_name = wp_specialchars($_POST['new_firstname']);
$edituser->last_name = wp_specialchars($_POST['new_lastname']);
$edituser->nickname = $_POST['new_nickname'];
$edituser->icq = wp_specialchars($_POST['new_icq']);
$edituser->aim = wp_specialchars($_POST['new_aim']);
$edituser->msn = wp_specialchars($_POST['new_msn']);
$edituser->yim = wp_specialchars($_POST['new_yim']);
$edituser->description = $_POST['new_description'];
if(count($errors) == 0) {
$result = $wpdb->query("UPDATE $wpdb->users SET user_login = '$edituser->user_login', $updatepassword user_email='$edituser->user_email', user_url='$edituser->user_url', user_nicename = '$edituser->user_nicename', display_name = '$edituser->display_name' WHERE ID = '$user_id'");
update_usermeta( $user_id, 'first_name', $edituser->firstname );
update_usermeta( $user_id, 'last_name', $edituser->lastname );
update_usermeta( $user_id, 'nickname', $edituser->nickname );
update_usermeta( $user_id, 'description', $edituser->description );
update_usermeta( $user_id, 'icq', $edituser->icq );
update_usermeta( $user_id, 'aim', $edituser->aim );
update_usermeta( $user_id, 'msn', $edituser->msn );
update_usermeta( $user_id, 'yim', $edituser->yim );
$wp_user->set_role($_POST['new_role']);
header("Location: user-edit.php?user_id=$user_id&updated=true");
} else {
$wp_user->roles = array($_POST['new_role'] => true);
}
default:
include ('admin-header.php');
if(empty($wp_user)) {
$wp_user = new WP_User($user_id);
$edituser = &$wp_user->data;
}
if (!current_user_can('edit_users')) $errors['head'] = __('You do not have permission to edit this user.');
?>
<?php if ( isset($_GET['updated']) ) : ?>
<div id="message" class="updated fade">
<p><strong><?php _e('User updated.') ?></strong></p>
</div>
<?php endif; ?>
<?php if ( isset($errors) ) : ?>
<div class="error">
<ul>
<?php
foreach($errors as $error) echo "<li>$error</li>";
?>
</ul>
</div>
<?php endif; ?>
<div class="wrap">
<h2><?php _e('Edit User'); ?></h2>
<form name="edituser" id="edituser" action="user-edit.php" method="post">
<table width="99%" border="0" cellspacing="2" cellpadding="3">
<tr>
<th width="33%" scope="row"><?php _e('Username:') ?></th>
<td width="73%"><input type="text" name="new_user_login" id="new_user_login" value="<?php echo $edituser->user_login; ?>" /></td>
</tr>
<tr>
<th scope="row"><?php _e('Role:') ?></th>
<td><select name="new_role" id="new_role"><?php
foreach($wp_roles->role_names as $role => $name) {
$selected = (empty($wp_user->roles[$role])) ? '' : 'selected="selected"';
echo "<option {$selected} value=\"{$role}\">{$name}</option>";
}
?></select></td>
</tr>
<tr>
<th scope="row"><?php _e('Posts:') ?></th>
<td><?php echo get_usernumposts($edituser->ID); ?></td>
</tr>
<?php if ( isset($edituser->user_registered) && ('0000-00-00 00:00:00' != $edituser->user_registered) ) { ?>
<tr>
<th scope="row"><?php _e('Registered on:') ?></th>
<td><?php echo substr($edituser->user_registered, 0, 11); ?></td>
</tr>
<?php } ?>
<tr>
<th scope="row"><?php _e('First name:') ?></th>
<td><input type="text" name="new_firstname" id="new_firstname" value="<?php echo $edituser->first_name ?>" /></td>
</tr>
<tr>
<th scope="row"><?php _e('Last name:') ?></th>
<td><input type="text" name="new_lastname" id="new_lastname2" value="<?php echo $edituser->last_name ?>" /></td>
</tr>
<tr>
<th scope="row"><?php _e('Profile:') ?></th>
<td><textarea name="new_description" rows="5" id="new_description" style="width: 99%; "><?php echo $edituser->description ?></textarea></td>
</tr>
<tr>
<th scope="row"><?php _e('Nickname:') ?></th>
<td><input type="text" name="new_nickname" id="new_nickname" value="<?php echo $edituser->nickname ?>" /></td>
</tr>
<tr>
<th scope="row"><?php _e('E-mail:') ?></th>
<td><input type="text" name="new_email" id="new_email" value="<?php echo $edituser->user_email ?>" /></td>
</tr>
<tr>
<th scope="row"><?php _e('Website:') ?></th>
<td><input type="text" name="new_url" id="new_url" value="<?php echo $edituser->user_url ?>" /></td>
</tr>
<tr>
<th scope="row"><?php _e('ICQ:') ?></th>
<td><input type="text" name="new_icq" id="new_icq" value="<?php if ($edituser->icq > 0) { echo $edituser->icq; } ?>" /></td>
</tr>
<tr>
<th scope="row"><?php _e('AIM:') ?></th>
<td><input type="text" name="new_aim" id="new_aim" value="<?php echo $edituser->aim ?>" /></td>
</tr>
<tr>
<th scope="row"><?php _e('MSN IM:') ?>
</th>
<td><input type="text" name="new_msn" id="new_msn" value="<?php echo $edituser->msn ?>" /></td>
</tr>
<tr>
<th scope="row"><?php _e('Yahoo IM:') ?>
</th>
<td><input type="text" name="new_yim" id="new_yim" value="<?php echo $edituser->yim ?>" />
</td>
</tr>
<tr>
<th scope="row"><?php _e('Identity on blog:') ?>
</th>
<td> <select name="display_name">
<option value="<?php echo $edituser->display_name; ?>"><?php echo $edituser->display_name; ?></option>
<option value="<?php echo $edituser->nickname ?>"><?php echo $edituser->nickname ?></option>
<option value="<?php echo $edituser->user_login ?>"><?php echo $edituser->user_login ?></option>
<?php if ( !empty( $edituser->first_name ) ) : ?>
<option value="<?php echo $edituser->first_name ?>"><?php echo $edituser->first_name ?></option>
<?php endif; ?>
<?php if ( !empty( $edituser->last_name ) ) : ?>
<option value="<?php echo $edituser->last_name ?>"><?php echo $edituser->last_name ?></option>
<?php endif; ?>
<?php if ( !empty( $edituser->first_name ) && !empty( $edituser->last_name ) ) : ?>
<option value="<?php echo $edituser->first_name." ".$edituser->last_name ?>"><?php echo $edituser->first_name." ".$edituser->last_name ?></option>
<option value="<?php echo $edituser->last_name." ".$edituser->first_name ?>"><?php echo $edituser->last_name." ".$edituser->first_name ?></option>
<?php endif; ?>
</select>
</td>
</tr>
<?php
do_action('edit_user_profile');
$show_password_fields = apply_filters('show_password_fields', true);
if ( $show_password_fields ) :
?>
<tr>
<th scope="row"><?php _e('New <strong>Password</strong> (Leave blank to stay the same.)') ?></th>
<td><input type="password" name="pass1" size="16" value="" />
<br />
<input type="password" name="pass2" size="16" value="" /></td>
</tr>
<?php endif; ?>
</table>
<p class="submit">
<input type="hidden" name="action" value="update" />
<input type="hidden" name="user_id" id="user_id" value="<?php echo $user_id; ?>" />
<input type="submit" value="<?php _e('Update User &raquo;') ?>" name="submit" />
</p>
</form>
</div>
<?php
break;
}
include('admin-footer.php');
?>