groups / lib / admin / groups-admin-capabilities-remove.php

groups-admin-capabilities-remove.php in Groups – Memberships and Access Control 1.11.2, at lib/admin/groups-admin-capabilities-remove.php

199 lines 6.6 KB

Raw Download Zip

1	<?php
2	/**
3	* groups-admin-capabilities-remove.php
4	*
5	* Copyright (c) "kento" Karim Rahimpur www.itthinx.com
6	*
7	* This code is released under the GNU General Public License.
8	* See COPYRIGHT.txt and LICENSE.txt.
9	*
10	* This code is distributed in the hope that it will be useful,
11	* but WITHOUT ANY WARRANTY; without even the implied warranty of
12	* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
13	* GNU General Public License for more details.
14	*
15	* This header and all notices must be kept intact.
16	*
17	* @author Karim Rahimpur
18	* @package groups
19	* @since groups 1.0.0
20	*/
21
22	if ( !defined( 'ABSPATH' ) ) {
23	exit;
24	}
25
26	/**
27	* Shows form to confirm capability deletion.
28	* @param int $capability_id capability id
29	*/
30	function groups_admin_capabilities_remove( $capability_id ) {
31
32	global $wpdb;
33
34	if ( !current_user_can( GROUPS_ADMINISTER_GROUPS ) ) {
35	wp_die( __( 'Access denied.', GROUPS_PLUGIN_DOMAIN ) );
36	}
37
38	$capability = Groups_Capability::read( intval( $capability_id ) );
39
40	if ( empty( $capability ) ) {
41	wp_die( __( 'No such capability.', GROUPS_PLUGIN_DOMAIN ) );
42	}
43
44	$capability_table = _groups_get_tablename( 'capability' );
45
46	$current_url = ( is_ssl() ? 'https://' : 'http://' ) . $_SERVER['HTTP_HOST'] . $_SERVER['REQUEST_URI'];
47	$current_url = remove_query_arg( 'action', $current_url );
48	$current_url = remove_query_arg( 'capability_id', $current_url );
49
50	$output =
51	'<div class="manage-capabilities wrap">' .
52	'<h1>' .
53	__( 'Remove a capability', GROUPS_PLUGIN_DOMAIN ) .
54	'</h1>' .
55	'<form id="remove-capability" action="' . esc_url( $current_url ) . '" method="post">' .
56	'<div class="capability remove">' .
57	'<input id="capability-id-field" name="capability-id-field" type="hidden" value="' . esc_attr( intval( $capability->capability_id ) ) . '"/>' .
58	'<ul>' .
59	'<li>' . sprintf( __( 'Capability : %s', GROUPS_PLUGIN_DOMAIN ), stripslashes( wp_filter_nohtml_kses( $capability->capability ) ) ) . '</li>' .
60	'</ul> ' .
61	wp_nonce_field( 'capabilities-remove', GROUPS_ADMIN_GROUPS_NONCE, true, false ) .
62	'<input class="button button-primary" type="submit" value="' . __( 'Remove', GROUPS_PLUGIN_DOMAIN ) . '"/>' .
63	'<input type="hidden" value="remove" name="action"/>' .
64	'<a class="cancel button" href="' . esc_url( $current_url ) . '">' . __( 'Cancel', GROUPS_PLUGIN_DOMAIN ) . '</a>' .
65	'</div>' .
66	'</div>' . // .capability.remove
67	'</form>' .
68	'</div>'; // .manage-capabilities
69
70	echo $output;
71	} // function groups_admin_capabilities_remove
72
73	/**
74	* Handle remove form submission.
75	*/
76	function groups_admin_capabilities_remove_submit() {
77
78	global $wpdb;
79
80	$result = false;
81
82	if ( !current_user_can( GROUPS_ADMINISTER_GROUPS ) ) {
83	wp_die( __( 'Access denied.', GROUPS_PLUGIN_DOMAIN ) );
84	}
85
86	if ( !wp_verify_nonce( $_POST[GROUPS_ADMIN_GROUPS_NONCE], 'capabilities-remove' ) ) {
87	wp_die( __( 'Access denied.', GROUPS_PLUGIN_DOMAIN ) );
88	}
89
90	$capability_id = isset( $_POST['capability-id-field'] ) ? $_POST['capability-id-field'] : null;
91	$capability = Groups_Capability::read( $capability_id );
92	if ( $capability ) {
93	if ( $capability->capability !== Groups_Post_Access::READ_POST_CAPABILITY ) {
94	$result = Groups_Capability::delete( $capability_id );
95	}
96	}
97	return $result;
98	} // function groups_admin_capabilities_remove_submit
99
100	/**
101	* Shows form to confirm removal bulk capabilities
102	*/
103	function groups_admin_capabilities_bulk_remove() {
104
105	global $wpdb;
106
107	$output = '';
108
109	if ( !current_user_can( GROUPS_ADMINISTER_GROUPS ) ) {
110	wp_die( __( 'Access denied.', GROUPS_PLUGIN_DOMAIN ) );
111	}
112
113	$capability_ids = isset( $_POST['capability_ids'] ) ? $_POST['capability_ids'] : null;
114
115	if ( ! $capability_ids ) {
116	wp_die( __( 'No such capabilities.', GROUPS_PLUGIN_DOMAIN ) );
117	}
118
119	$capabilities = array();
120	foreach ( $capability_ids as $capability_id ) {
121	$capability = Groups_Capability::read( intval( $capability_id ) );
122	if ( $capability ) {
123	$capabilities[] = $capability;
124	}
125	}
126
127	$current_url = ( is_ssl() ? 'https://' : 'http://' ) . $_SERVER['HTTP_HOST'] . $_SERVER['REQUEST_URI'];
128	$current_url = remove_query_arg( 'action', $current_url );
129	$current_url = remove_query_arg( 'capability_id', $current_url );
130
131	$output .= '<div class="manage-capabilities wrap">';
132	$output .= '<h1>';
133	$output .= __( 'Remove capabilities', GROUPS_PLUGIN_DOMAIN );
134	$output .= '</h1>';
135
136	$output .= '<form id="capabilities-action" method="post" action="">';
137	$output .= '<div class="capability remove">';
138	$output .= '<p>';
139	$output .= __( 'Please confirm to remove the following capabilities. This action cannot be undone.', GROUPS_PLUGIN_DOMAIN );
140	$output .= '</p>';
141	foreach ( $capabilities as $capability ) {
142	$output .= '<input id="capability_ids" name="capability_ids[]" type="hidden" value="' . esc_attr( intval( $capability->capability_id ) ) . '"/>';
143	$output .= '<ul>';
144	$output .= '<li>';
145	$output .= sprintf( __( '<strong>%s</strong>', GROUPS_PLUGIN_DOMAIN ), wp_filter_nohtml_kses( $capability->capability ) );
146	$output .= '</li>';
147	$output .= '</ul>';
148	}
149	$output .= '<input class="button button-primary" type="submit" name="bulk" value="' . __( "Remove", GROUPS_PLUGIN_DOMAIN ) . '"/>';
150	$output .= '<a class="cancel button" href="' . esc_url( $current_url ) . '">' . __( 'Cancel', GROUPS_PLUGIN_DOMAIN ) . '</a>';
151
152	$output .= '<input type="hidden" name="action" value="groups-action"/>';
153	$output .= '<input type="hidden" name="bulk-action" value="remove"/>';
154	$output .= '<input type="hidden" name="confirm" value="1"/>';
155	$output .= wp_nonce_field( 'admin', GROUPS_ADMIN_GROUPS_ACTION_NONCE, true, false );
156
157	$output .= '</div>';
158	$output .= '</form>';
159	$output .= '</div>';
160
161	echo $output;
162	} // function groups_admin_capabilities_bulk_remove
163
164	/**
165	* Handle remove form submission.
166	* @return array of deleted capabilities' ids
167	*/
168	function groups_admin_capabilities_bulk_remove_submit() {
169
170	global $wpdb;
171
172	$result = array();
173
174	if ( !current_user_can( GROUPS_ADMINISTER_GROUPS ) ) {
175	wp_die( __( 'Access denied.', GROUPS_PLUGIN_DOMAIN ) );
176	}
177
178	if ( !wp_verify_nonce( $_POST[GROUPS_ADMIN_GROUPS_ACTION_NONCE], 'admin' ) ) {
179	wp_die( __( 'Access denied.', GROUPS_PLUGIN_DOMAIN ) );
180	}
181
182	$capability_ids = isset( $_POST['capability_ids'] ) ? $_POST['capability_ids'] : null;
183
184	if ( $capability_ids ) {
185	foreach ( $capability_ids as $capability_id ) {
186	$capability = Groups_Capability::read( $capability_id );
187	if ( $capability ) {
188	if ( $capability->capability !== Groups_Post_Access::READ_POST_CAPABILITY ) {
189	if ( Groups_Capability::delete( $capability_id ) ) {
190	$result[] = $capability->capability_id;
191	}
192	}
193	}
194	}
195	}
196
197	return $result;
198	} // function groups_admin_capabilities_bulk_remove_submit
199