' .
esc_html__( 'Capabilities', 'groups' ) .
// add capability
sprintf(
'',
esc_attr__( 'Click to add a new capability', 'groups' ),
esc_url( $current_url . '&action=add' )
) .
sprintf(
'
',
esc_attr__( 'Add', 'groups' ),
esc_url( GROUPS_PLUGIN_URL . 'images/add.png' )
) .
sprintf(
'%s',
esc_html__( 'New Capability', 'groups' )
) .
'' .
// refresh capabilities
sprintf(
'',
esc_attr__( 'Click to refresh capabilities', 'groups' ),
esc_url( wp_nonce_url( $current_url . '&action=refresh', 'refresh' ) )
) .
sprintf(
'',
esc_attr__( 'Refresh', 'groups' ),
esc_url( GROUPS_PLUGIN_URL . 'images/refresh.png' )
) .
sprintf(
'%s',
esc_html__( 'Refresh', 'groups' )
) .
'' .
'
';
$output .= Groups_Admin::render_messages();
$row_count = intval( groups_sanitize_post( 'row_count' ) ?? 0 );
if ($row_count <= 0) {
$row_count = Groups_Options::get_user_option( 'capabilities_per_page', GROUPS_CAPABILITIES_PER_PAGE );
} else {
Groups_Options::update_user_option('capabilities_per_page', $row_count );
}
$offset = intval( groups_sanitize_get( 'offset' ) ?? 0 );
if ( $offset < 0 ) {
$offset = 0;
}
$paged = intval( groups_sanitize_request( 'paged' ) ?? 0 );
if ( $paged < 0 ) {
$paged = 0;
}
$orderby = groups_sanitize_get( 'orderby' );
switch ( $orderby ) {
case 'capability_id' :
case 'capability' :
case 'description' :
break;
default:
$orderby = 'name';
}
$order = groups_sanitize_get( 'order' );
switch ( $order ) {
case 'asc' :
case 'ASC' :
$switch_order = 'DESC';
break;
case 'desc' :
case 'DESC' :
$switch_order = 'ASC';
break;
default:
$order = 'ASC';
$switch_order = 'DESC';
}
$filters = array( " 1=%d " );
$filter_params = array( 1 );
if ( $capability_id ) {
$filters[] = " $capability_table.capability_id = %d ";
$filter_params[] = $capability_id;
}
if ( $capability ) {
$filters[] = " $capability_table.capability LIKE %s ";
$filter_params[] = '%' . $wpdb->esc_like( $capability ) . '%';
}
if ( !empty( $filters ) ) { // @phpstan-ignore empty.variable
$filters = " WHERE " . implode( " AND ", $filters );
} else {
$filters = '';
}
$count_query = $wpdb->prepare( "SELECT COUNT(*) FROM $capability_table $filters", $filter_params ); // phpcs:ignore WordPress.DB.PreparedSQL.InterpolatedNotPrepared, WordPress.DB.PreparedSQLPlaceholders.UnfinishedPrepare
$count = $wpdb->get_var( $count_query ); // phpcs:ignore WordPress.DB.PreparedSQL.NotPrepared
if ( $count > $row_count ) {
$paginate = true;
} else {
$paginate = false;
}
$pages = ceil ( $count / $row_count );
if ( $paged > $pages ) {
$paged = $pages;
}
if ( $paged != 0 ) {
$offset = ( $paged - 1 ) * $row_count;
}
$query = $wpdb->prepare(
// nosemgrep: audit.php.wp.security.sqli.input-in-sinks
"SELECT * FROM $capability_table $filters ORDER BY $orderby $order LIMIT $row_count OFFSET $offset", // phpcs:ignore WordPress.DB.PreparedSQL.InterpolatedNotPrepared, WordPress.DB.PreparedSQLPlaceholders.UnfinishedPrepare
$filter_params
);
// nosemgrep: audit.php.wp.security.sqli.input-in-sinks
$results = $wpdb->get_results( $query, OBJECT ); // phpcs:ignore WordPress.DB.PreparedSQL.NotPrepared
$column_display_names = array(
'capability_id' => __( 'ID', 'groups' ),
'capability' => __( 'Capability', 'groups' ),
'description' => __( 'Description', 'groups' )
);
$output .= '';
$output .=
'
'; // .capabilities-overview
$output .= '' .
'' .
'
';
$output .= ''; // #groups-action
if ( $paginate ) {
require_once GROUPS_CORE_LIB . '/class-groups-pagination.php';
$pagination = new Groups_Pagination($count, null, $row_count);
$output .= '';
$output .= $pagination->pagination( 'bottom' );
$output .= '
';
}
$output .= '