groups / lib / admin / groups-admin-groups-edit.php

groups-admin-groups-edit.php in Groups – Memberships and Access Control 1.1.4, at lib/admin/groups-admin-groups-edit.php

132 lines 4.8 KB

Raw Download Zip

1	<?php
2	/**
3	* groups-admin-groups-edit.php
4	*
5	* Copyright (c) "kento" Karim Rahimpur www.itthinx.com
6	*
7	* This code is released under the GNU General Public License.
8	* See COPYRIGHT.txt and LICENSE.txt.
9	*
10	* This code is distributed in the hope that it will be useful,
11	* but WITHOUT ANY WARRANTY; without even the implied warranty of
12	* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
13	* GNU General Public License for more details.
14	*
15	* This header and all notices must be kept intact.
16	*
17	* @author Karim Rahimpur
18	* @package groups
19	* @since groups 1.1.0
20	*/
21
22	/**
23	* Show edit group form.
24	* @param int $group_id group id
25	*/
26	function groups_admin_groups_edit( $group_id ) {
27
28	global $wpdb;
29
30	if ( !current_user_can( GROUPS_ADMINISTER_GROUPS ) ) {
31	wp_die( __( 'Access denied.', GROUPS_PLUGIN_DOMAIN ) );
32	}
33
34	$group = Groups_Group::read( intval( $group_id ) );
35
36	if ( empty( $group ) ) {
37	wp_die( __( 'No such group.', GROUPS_PLUGIN_DOMAIN ) );
38	}
39
40	$current_url = ( is_ssl() ? 'https://' : 'http://' ) . $_SERVER['HTTP_HOST'] . $_SERVER['REQUEST_URI'];
41	$current_url = remove_query_arg( 'action', $current_url );
42	$current_url = remove_query_arg( 'group_id', $current_url );
43
44	$name = isset( $_POST['name-field'] ) ? $_POST['name-field'] : $group->name;
45	$description = isset( $_POST['description-field'] ) ? $_POST['description-field'] : $group->description;
46	$parent_id = isset( $_POST['parent-id-field'] ) ? $_POST['parent-id-field'] : $group->parent_id;
47
48	$group_table = _groups_get_tablename( 'group' );
49	$parent_select = '<select name="parent-id-field">';
50	$parent_select .= '<option value="">--</option>';
51	$groups = $wpdb->get_results( $wpdb->prepare( "SELECT * FROM $group_table WHERE group_id != %d", $group->group_id ) );
52	foreach ( $groups as $g ) {
53	$selected = ( $g->group_id == $group->parent_id ? ' selected="selected" ' : '' );
54	$parent_select .= '<option ' . $selected . 'value="' . esc_attr( $g->group_id ) . '">' . wp_filter_nohtml_kses( $g->name ) . '</option>';
55	}
56	$parent_select .= '</select>';
57
58	$name_readonly = ( $name !== Groups_Registered::REGISTERED_GROUP_NAME ) ? "" : ' readonly="readonly" ';
59
60	$output =
61	'<div class="manage-groups">' .
62	'<div>' .
63	'<h2>' .
64	__( 'Edit a group', GROUPS_PLUGIN_DOMAIN ) .
65	'</h2>' .
66	'</div>' .
67
68	'<form id="edit-group" action="' . $current_url . '" method="post">' .
69	'<div class="group edit">' .
70	'<input id="group-id-field" name="group-id-field" type="hidden" value="' . esc_attr( intval( $group_id ) ) . '"/>' .
71
72	'<div class="field">' .
73	'<label for="name-field" class="field-label first required">' .__( 'Name', GROUPS_PLUGIN_DOMAIN ) . '</label>' .
74	'<input ' . $name_readonly . ' id="name-field" name="name-field" class="namefield" type="text" value="' . esc_attr( $name ) . '"/>' .
75	'</div>' .
76
77	'<div class="field">' .
78	'<label for="parent-id-field" class="field-label">' .__( 'Parent', GROUPS_PLUGIN_DOMAIN ) . '</label>' .
79	$parent_select .
80	'</div>' .
81
82	'<div class="field">' .
83	'<label for="description-field" class="field-label description-field">' .__( 'Description', GROUPS_PLUGIN_DOMAIN ) . '</label>' .
84	'<textarea id="description-field" name="description-field" rows="5" cols="45">' . wp_filter_nohtml_kses( $description ) . '</textarea>' .
85	'</div>' .
86
87	'<div class="field">' .
88	wp_nonce_field( 'groups-edit', GROUPS_ADMIN_GROUPS_NONCE, true, false ) .
89	'<input type="submit" value="' . __( 'Save', GROUPS_PLUGIN_DOMAIN ) . '"/>' .
90	'<input type="hidden" value="edit" name="action"/>' .
91	'<a class="cancel" href="' . $current_url . '">' . __( 'Cancel', GROUPS_PLUGIN_DOMAIN ) . '</a>' .
92	'</div>' .
93	'</div>' . // .group.edit
94	'</form>' .
95	'</div>'; // .manage-groups
96
97	echo $output;
98
99	Groups_Help::footer();
100	} // function groups_admin_groups_edit
101
102	/**
103	* Handle edit form submission.
104	*/
105	function groups_admin_groups_edit_submit() {
106
107	if ( !current_user_can( GROUPS_ADMINISTER_GROUPS ) ) {
108	wp_die( __( 'Access denied.', GROUPS_PLUGIN_DOMAIN ) );
109	}
110
111	if ( !wp_verify_nonce( $_POST[GROUPS_ADMIN_GROUPS_NONCE], 'groups-edit' ) ) {
112	wp_die( __( 'Access denied.', GROUPS_PLUGIN_DOMAIN ) );
113	}
114
115	$group_id = isset( $_POST['group-id-field'] ) ? $_POST['group-id-field'] : null;
116	$group = Groups_Group::read( $group_id );
117	if ( $group ) {
118	$group_id = $group->group_id;
119	if ( $group->name !== Groups_Registered::REGISTERED_GROUP_NAME ) {
120	$name = isset( $_POST['name-field'] ) ? $_POST['name-field'] : null;
121	} else {
122	$name = Groups_Registered::REGISTERED_GROUP_NAME;
123	}
124	$parent_id = isset( $_POST['parent-id-field'] ) ? $_POST['parent-id-field'] : null;
125	$description = isset( $_POST['description-field'] ) ? $_POST['description-field'] : '';
126	return Groups_Group::update( compact( "group_id", "name", "parent_id", "description" ) );
127	} else {
128	return false;
129	}
130
131	} // function groups_admin_groups_edit_submit
132