109 lines
3.9 KiB
PHP
109 lines
3.9 KiB
PHP
|
<?php
|
||
|
|
/**
|
||
|
|
* groups-admin-capabilities-add.php
|
||
|
|
*
|
||
|
|
* Copyright (c) "kento" Karim Rahimpur www.itthinx.com
|
||
|
|
*
|
||
|
|
* This code is released under the GNU General Public License.
|
||
|
|
* See COPYRIGHT.txt and LICENSE.txt.
|
||
|
|
*
|
||
|
|
* This code is distributed in the hope that it will be useful,
|
||
|
|
* but WITHOUT ANY WARRANTY; without even the implied warranty of
|
||
|
|
* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
||
|
|
* GNU General Public License for more details.
|
||
|
|
*
|
||
|
|
* This header and all notices must be kept intact.
|
||
|
|
*
|
||
|
|
* @author Karim Rahimpur
|
||
|
|
* @package groups
|
||
|
|
* @since groups 1.0.0
|
||
|
|
*/
|
||
|
|
|
||
|
|
if ( !defined( 'ABSPATH' ) ) {
|
||
|
|
exit;
|
||
|
|
}
|
||
|
|
|
||
|
|
/**
|
||
|
|
* Show add capability form.
|
||
|
|
*/
|
||
|
|
function groups_admin_capabilities_add() {
|
||
|
|
|
||
|
|
global $wpdb;
|
||
|
|
|
||
|
|
if ( !current_user_can( GROUPS_ADMINISTER_GROUPS ) ) {
|
||
|
|
wp_die( __( 'Access denied.', 'groups' ) );
|
||
|
|
}
|
||
|
|
|
||
|
|
$current_url = ( is_ssl() ? 'https://' : 'http://' ) . $_SERVER['HTTP_HOST'] . $_SERVER['REQUEST_URI'];
|
||
|
|
$current_url = remove_query_arg( 'paged', $current_url );
|
||
|
|
$current_url = remove_query_arg( 'action', $current_url );
|
||
|
|
$current_url = remove_query_arg( 'capability_id', $current_url );
|
||
|
|
|
||
|
|
$capability = isset( $_POST['capability-field'] ) ? $_POST['capability-field'] : '';
|
||
|
|
$description = isset( $_POST['description-field'] ) ? $_POST['description-field'] : '';
|
||
|
|
|
||
|
|
$capability_table = _groups_get_tablename( 'capability' );
|
||
|
|
|
||
|
|
$output =
|
||
|
|
'<div class="manage-capabilities wrap">' .
|
||
|
|
'<h1>' .
|
||
|
|
__( 'Add a new capability', 'groups' ) .
|
||
|
|
'</h1>' .
|
||
|
|
Groups_Admin::render_messages() .
|
||
|
|
'<form id="add-capability" action="' . esc_url( $current_url ) . '" method="post">' .
|
||
|
|
'<div class="capability new">' .
|
||
|
|
|
||
|
|
'<div class="field">' .
|
||
|
|
'<label for="capability-field" class="field-label first required">' .__( 'Capability', 'groups' ) . '</label>' .
|
||
|
|
'<input id="name-field" name="capability-field" class="capability-field" type="text" value="' . esc_attr( stripslashes( $capability ) ) . '"/>' .
|
||
|
|
'</div>' .
|
||
|
|
|
||
|
|
'<div class="field">' .
|
||
|
|
'<label for="description-field" class="field-label description-field">' .__( 'Description', 'groups' ) . '</label>' .
|
||
|
|
'<textarea id="description-field" name="description-field" rows="5" cols="45">' . stripslashes( wp_filter_nohtml_kses( $description ) ) . '</textarea>' .
|
||
|
|
'</div>' .
|
||
|
|
|
||
|
|
'<div class="field">' .
|
||
|
|
wp_nonce_field( 'capabilities-add', GROUPS_ADMIN_GROUPS_NONCE, true, false ) .
|
||
|
|
'<input class="button button-primary" type="submit" value="' . __( 'Add', 'groups' ) . '"/>' .
|
||
|
|
'<input type="hidden" value="add" name="action"/>' .
|
||
|
|
'<a class="cancel button" href="' . esc_url( $current_url ) . '">' . __( 'Cancel', 'groups' ) . '</a>' .
|
||
|
|
'</div>' .
|
||
|
|
'</div>' . // .capability.new
|
||
|
|
'</form>' .
|
||
|
|
'</div>'; // .manage-capabilities
|
||
|
|
|
||
|
|
echo $output;
|
||
|
|
|
||
|
|
} // function groups_admin_capabilities_add
|
||
|
|
|
||
|
|
/**
|
||
|
|
* Handle add capability form submission.
|
||
|
|
* @return int new capability's id or false if unsuccessful
|
||
|
|
*/
|
||
|
|
function groups_admin_capabilities_add_submit() {
|
||
|
|
|
||
|
|
global $wpdb;
|
||
|
|
|
||
|
|
if ( !current_user_can( GROUPS_ADMINISTER_GROUPS ) ) {
|
||
|
|
wp_die( __( 'Access denied.', 'groups' ) );
|
||
|
|
}
|
||
|
|
|
||
|
|
if ( !wp_verify_nonce( $_POST[GROUPS_ADMIN_GROUPS_NONCE], 'capabilities-add' ) ) {
|
||
|
|
wp_die( __( 'Access denied.', 'groups' ) );
|
||
|
|
}
|
||
|
|
|
||
|
|
$capability = isset( $_POST['capability-field'] ) ? $_POST['capability-field'] : null;
|
||
|
|
$description = isset( $_POST['description-field'] ) ? $_POST['description-field'] : '';
|
||
|
|
|
||
|
|
$capability_id = Groups_Capability::create( compact( "capability", "description" ) );
|
||
|
|
if ( !$capability_id ) {
|
||
|
|
if ( empty( $capability ) ) {
|
||
|
|
Groups_Admin::add_message( __( 'The <em>Capability</em> must not be empty.', 'groups' ), 'error' );
|
||
|
|
} else if ( Groups_Capability::read_by_capability( $capability ) ) {
|
||
|
|
Groups_Admin::add_message( sprintf( __( 'The <em>%s</em> capability already exists.', 'groups' ), stripslashes( wp_filter_nohtml_kses( ( $capability ) ) ) ), 'error' );
|
||
|
|
}
|
||
|
|
}
|
||
|
|
return $capability_id;
|
||
|
|
} // function groups_admin_capabilities_add_submit
|