';
+ } else {
+ echo '
';
+ }
+ echo $message . '
';
+ }
+
+ }
+ // end of show_message()
+
+
+ /**
+ * Returns value by name from GET/POST/REQUEST. Minimal type checking is provided
+ *
+ * @param string $var_name Variable name to return
+ * @param string $request_type type of request to process get/post/request (default)
+ * @param string $var_type variable type to provide value checking
+ * @return mix variable value from request
+ */
+ public function get_request_var($var_name, $request_type='request', $var_type='string') {
+
+ $result = 0;
+ if ($request_type == 'get') {
+ if (isset($_GET[$var_name])) {
+ $result = $_GET[$var_name];
+ }
+ } else if ($request_type == 'post') {
+ if (isset($_POST[$var_name])) {
+ if ($var_type!='checkbox') {
+ $result = $_POST[$var_name];
+ } else {
+ $result = 1;
+ }
+ }
+ } else {
+ if (isset($_REQUEST[$var_name])) {
+ $result = $_REQUEST[$var_name];
+ }
+ }
+
+ if ($result) {
+ if ($var_type == 'int' && !is_numeric($result)) {
+ $result = 0;
+ }
+ if ($var_type!='int') {
+ $result = esc_attr($result);
+ }
+ }
+
+ return $result;
+ }
+ // end of get_request_var()
+
+
+ /**
+ * returns option value for option with name in $option_name
+ */
+ public function get_option($option_name, $default = false) {
+
+ if ( isset( $this->options[ $option_name ] ) ) {
+ return $this->options[$option_name];
+ } else {
+ return $default;
+ }
+
+ }
+ // end of get_option()
+
+
+ /**
+ * puts option value according to $option_name option name into options array property
+ */
+ public function put_option($option_name, $option_value, $flush_options=false) {
+
+ $this->options[$option_name] = $option_value;
+ if ($flush_options) {
+ $this->flush_options();
+ }
+
+ }
+ // end of put_option()
+
+
+ /**
+ * saves options array into WordPress database wp_options table
+ */
+ public function flush_options() {
+
+ update_option($this->options_id, $this->options);
+
+ }
+ // end of flush_options()
+
+
+ /**
+ * Check product versrion and stop execution if product version is not compatible
+ * @param type $must_have_version
+ * @param type $version_to_check
+ * @param type $error_message
+ * @return type
+ */
+ public static function check_version($must_have_version, $version_to_check, $error_message, $plugin_file_name) {
+
+ if (version_compare( $must_have_version, $version_to_check, '<' ) ) {
+ if ( is_admin() && ( !defined('DOING_AJAX') || !DOING_AJAX ) ) {
+ require_once ABSPATH . '/wp-admin/includes/plugin.php';
+ deactivate_plugins( $plugin_file_name );
+ wp_die( $error_message );
+ } else {
+ return;
+ }
+ }
+ }
+ // end of check_version()
+
+
+ /**
+ * returns 'selected' HTML cluster if $value matches to $etalon
+ *
+ * @param string $value
+ * @param string $etalon
+ * @return string
+ */
+ public function option_selected($value, $etalon) {
+ $selected = '';
+ if (strcasecmp($value, $etalon) == 0) {
+ $selected = 'selected="selected"';
+ }
+
+ return $selected;
+ }
+ // end of option_selected()
+
+
+ public function get_current_url() {
+ global $wp;
+ $current_url = add_query_arg( $wp->query_string, '', home_url( $wp->request ) );
+
+ return $current_url;
+ }
+ // end of get_current_url()
+
+
+//
+}
+// end of Garvs_WP_Lib class
\ No newline at end of file
diff --git a/wp-content/plugins/user-role-editor/includes/class-ure-lib.php b/wp-content/plugins/user-role-editor/includes/class-ure-lib.php
new file mode 100644
index 0000000..b6a1511
--- /dev/null
+++ b/wp-content/plugins/user-role-editor/includes/class-ure-lib.php
@@ -0,0 +1,2431 @@
+integrate_with_gravity_forms = class_exists('GFForms');
+
+
+ }
+ // end of __construct()
+
+
+ /**
+ * get options for User Role Editor plugin
+ * User Role Editor stores its options at the main blog/site only and applies them to the all network
+ *
+ */
+ protected function init_options($options_id) {
+
+ global $wpdb;
+
+ $current_blog = $wpdb->blogid;
+ if ($this->multisite && $current_blog!=$this->main_blog_id) {
+ switch_to_blog($this->main_blog_id); // in order to get URE options from the main blog
+ }
+
+ $this->options_id = $options_id;
+ $this->options = get_option($options_id);
+
+ if ($this->multisite && $current_blog!=$this->main_blog_id) {
+ // return back to the current blog
+ restore_current_blog();
+ }
+
+ }
+ // end of init_options()
+
+
+ /**
+ * saves options array into WordPress database wp_options table
+ */
+ public function flush_options() {
+
+ global $wpdb;
+
+ if ($this->multisite) {
+ $current_blog = $wpdb->blogid;
+ if ($current_blog!==$this->main_blog_id) {
+ switch_to_blog($this->main_blog_id); // in order to save URE options to the main blog
+ }
+ }
+
+ update_option($this->options_id, $this->options);
+
+ if ($this->multisite && $current_blog!==$this->main_blog_id) {
+ // return back to the current blog
+ restore_current_blog();
+ }
+
+ }
+ // end of flush_options()
+
+
+ public function get_main_blog_id() {
+
+ return $this->main_blog_id;
+
+ }
+
+
+ /**
+ * return key capability to have access to User Role Editor Plugin
+ *
+ * @return string
+ */
+ public function get_key_capability() {
+ if (!$this->multisite) {
+ $key_capability = URE_KEY_CAPABILITY;
+ } else {
+ $enable_simple_admin_for_multisite = $this->get_option('enable_simple_admin_for_multisite', 0);
+ if ( (defined('URE_ENABLE_SIMPLE_ADMIN_FOR_MULTISITE') && URE_ENABLE_SIMPLE_ADMIN_FOR_MULTISITE == 1) ||
+ $enable_simple_admin_for_multisite) {
+ $key_capability = URE_KEY_CAPABILITY;
+ } else {
+ $key_capability = 'manage_network_users';
+ }
+ }
+
+ return $key_capability;
+ }
+ // end of get_key_capability()
+
+
+ /**
+ * return front-end according to the context - role or user editor
+ */
+ public function editor() {
+
+ if (!$this->editor_init0()) {
+ $this->show_message(esc_html__('Error: wrong request', 'URE'));
+ return false;
+ }
+ $this->process_user_request();
+ $this->editor_init1();
+ $this->show_editor();
+
+ }
+ // end of editor()
+
+
+ protected function advertisement() {
+
+ if (!class_exists('User_Role_Editor_Pro')) {
+ $this->advert = new ure_Advertisement();
+ $this->advert->display();
+ }
+ }
+ // end of advertisement()
+
+
+ protected function output_role_edit_dialogs() {
+?>
+
+
+
+
+
+
+
+
+
role_delete_html; ?>
+
+
+
+
+
+
+ role_default_html; ?>
+
+
+
+
+
+
+
+
capability_remove_html; ?>
+
+
+
+
+
+show_message($this->notification);
+?>
+
+
+
+ure_object == 'user') {
+ if (!isset($_REQUEST['user_id'])) {
+ return false; // user_id value is missed
+ }
+ $user_id = $_REQUEST['user_id'];
+ if (!is_numeric($user_id)) {
+ return false;
+ }
+ if (!$user_id) {
+ return false;
+ }
+ $this->user_to_edit = get_user_to_edit($user_id);
+ if (empty($this->user_to_edit)) {
+ return false;
+ }
+ }
+
+ return true;
+ }
+ // end of check_user_to_edit()
+
+
+ protected function init_current_role_name() {
+
+ if (!isset($this->roles[$_POST['user_role']])) {
+ $mess = esc_html__('Error: ', 'ure') . esc_html__('Role', 'ure') . '
' . esc_html($_POST['user_role']) . ' ' .
+ esc_html__('does not exist', 'ure');
+ $this->current_role = '';
+ $this->current_role_name = '';
+ } else {
+ $this->current_role = $_POST['user_role'];
+ $this->current_role_name = $this->roles[$this->current_role]['name'];
+ $mess = '';
+ }
+
+ return $mess;
+
+ }
+ // end of init_current_role_name()
+
+
+ /**
+ * prepare capabilities from user input to save at the database
+ */
+ protected function prepare_capabilities_to_save() {
+ $this->capabilities_to_save = array();
+ foreach ($this->full_capabilities as $available_capability) {
+ $cap_id = str_replace(' ', URE_SPACE_REPLACER, $available_capability['inner']);
+ if (isset($_POST[$cap_id])) {
+ $this->capabilities_to_save[$available_capability['inner']] = true;
+ }
+ }
+ }
+ // end of prepare_capabilities_to_save()
+
+
+ /**
+ * save changes to the roles or user
+ * @param string $mess - notification message to the user
+ * @return string - notification message to the user
+ */
+ protected function permissions_object_update($mess) {
+
+ if ($this->ure_object == 'role') { // save role changes to database
+ if ($this->update_roles()) {
+ if ($mess) {
+ $mess .= '
';
+ }
+ if (!$this->apply_to_all) {
+ $mess = esc_html__('Role is updated successfully', 'ure');
+ } else {
+ $mess = esc_html__('Roles are updated for all network', 'ure');
+ }
+ } else {
+ if ($mess) {
+ $mess .= '
';
+ }
+ $mess = esc_html__('Error occured during role(s) update', 'ure');
+ }
+ } else {
+ if ($this->update_user($this->user_to_edit)) {
+ if ($mess) {
+ $mess .= '
';
+ }
+ $mess = esc_html__('User capabilities are updated successfully', 'ure');
+ } else {
+ if ($mess) {
+ $mess .= '
';
+ }
+ $mess = esc_html__('Error occured during user update', 'ure');
+ }
+ }
+ return $mess;
+ }
+ // end of permissions_object_update()
+
+
+ /**
+ * Process user request
+ */
+ protected function process_user_request() {
+
+ $this->notification = '';
+ if (isset($_POST['action'])) {
+ if (empty($_POST['ure_nonce']) || !wp_verify_nonce($_POST['ure_nonce'], 'user-role-editor')) {
+ echo '
Wrong nonce. Action prohibitied. ';
+ exit;
+ }
+
+ $action = $_POST['action'];
+
+ if ($action == 'reset') {
+ $this->reset_user_roles();
+ exit;
+ } else if ($action == 'add-new-role') {
+ // process new role create request
+ $this->notification = $this->add_new_role();
+ } else if ($action == 'delete-role') {
+ $this->notification = $this->delete_role();
+ } else if ($action == 'change-default-role') {
+ $this->notification = $this->change_default_role();
+ } else if ($action == 'caps-readable') {
+ if ($this->caps_readable) {
+ $this->caps_readable = 0;
+ } else {
+ $this->caps_readable = 1;
+ }
+ set_site_transient( 'ure_caps_readable', $this->caps_readable, 600 );
+ } else if ($action == 'show-deprecated-caps') {
+ if ($this->show_deprecated_caps) {
+ $this->show_deprecated_caps = 0;
+ } else {
+ $this->show_deprecated_caps = 1;
+ }
+ set_site_transient( 'ure_show_deprecated_caps', $this->show_deprecated_caps, 600 );
+ } else if ($action == 'hide-pro-banner') {
+ $this->hide_pro_banner = 1;
+ $this->put_option('ure_hide_pro_banner', 1);
+ $this->flush_options();
+ } else if ($action == 'add-new-capability') {
+ $this->notification = $this->add_new_capability();
+ } else if ($action == 'delete-user-capability') {
+ $this->notification = $this->delete_capability();
+ } else if ($action == 'roles_restore_note') {
+ $this->notification = esc_html__('User Roles are restored to WordPress default values. ', 'ure');
+ } else if ($action == 'update') {
+ $this->roles = $this->get_user_roles();
+ $this->init_full_capabilities();
+ if (isset($_POST['user_role'])) {
+ $this->notification = $this->init_current_role_name();
+ }
+ $this->prepare_capabilities_to_save();
+ $this->notification = $this->permissions_object_update($this->notification);
+ } else {
+ do_action('ure_process_user_request');
+ } // if ($action
+ }
+
+ }
+ // end of process_user_request()
+
+
+ protected function set_apply_to_all() {
+ if (isset($_POST['ure_apply_to_all'])) {
+ $this->apply_to_all = 1;
+ } else {
+ $this->apply_to_all = 0;
+ }
+}
+ // end of set_apply_to_all()
+
+
+ public function get_default_role() {
+ $this->wp_default_role = get_option('default_role');
+ }
+ // end of get_default_role()
+
+
+ protected function editor_init0() {
+ $this->caps_readable = get_site_transient('ure_caps_readable');
+ if (false === $this->caps_readable) {
+ $this->caps_readable = $this->get_option('ure_caps_readable');
+ set_site_transient('ure_caps_readable', $this->caps_readable, 600);
+ }
+ $this->show_deprecated_caps = get_site_transient('ure_show_deprecated_caps');
+ if (false === $this->show_deprecated_caps) {
+ $this->show_deprecated_caps = $this->get_option('ure_show_deprecated_caps');
+ set_site_transient('ure_caps_readable', $this->caps_readable, 600);
+ }
+
+ $this->hide_pro_banner = $this->get_option('ure_hide_pro_banner', 0);
+ $this->get_default_role();
+
+ // could be sent as by POST, as by GET
+ if (isset($_REQUEST['object'])) {
+ $this->ure_object = $_REQUEST['object'];
+ if (!$this->check_user_to_edit()) {
+ return false;
+ }
+ } else {
+ $this->ure_object = 'role';
+ }
+
+ $this->set_apply_to_all();
+
+ return true;
+ }
+ // end of editor_init0()
+
+
+ public function editor_init1() {
+
+ if (!isset($this->roles) || !$this->roles) {
+ // get roles data from database
+ $this->roles = $this->get_user_roles();
+ }
+
+ $this->init_full_capabilities();
+
+ if (!class_exists('User_Role_Editor_Pro')) {
+ require_once(URE_PLUGIN_DIR . 'includes/class-advertisement.php');
+ }
+
+ }
+ // end of editor_init1()
+
+
+ /**
+ * return id of role last in the list of sorted roles
+ *
+ */
+ protected function get_last_role_id() {
+
+ // get the key of the last element in roles array
+ $keys = array_keys($this->roles);
+ $last_role_id = array_pop($keys);
+
+ return $last_role_id;
+ }
+ // end of get_last_role_id()
+
+
+ /**
+ * Check if user has "Administrator" role assigned
+ *
+ * @global wpdb $wpdb
+ * @param int $user_id
+ * @return boolean returns true is user has Role "Administrator"
+ */
+ public function has_administrator_role($user_id) {
+ global $wpdb;
+
+ if (empty($user_id) || !is_numeric($user_id)) {
+ return false;
+ }
+
+ $table_name = (!$this->multisite && defined('CUSTOM_USER_META_TABLE')) ? CUSTOM_USER_META_TABLE : $wpdb->usermeta;
+ $meta_key = $wpdb->prefix . 'capabilities';
+ $query = "SELECT count(*)
+ FROM $table_name
+ WHERE user_id=$user_id AND meta_key='$meta_key' AND meta_value like '%administrator%'";
+ $has_admin_role = $wpdb->get_var($query);
+ if ($has_admin_role > 0) {
+ $result = true;
+ } else {
+ $result = false;
+ }
+ // cache checking result for the future use
+ $this->lib->user_to_check[$user_id] = $result;
+
+ return $result;
+ }
+
+ // end of has_administrator_role()
+
+
+ /**
+ * Checks if user is allowed to user User Role Editor
+ *
+ * @global int $current_user
+ * @param int $user_id
+ * @return boolean true
+ */
+ public function user_is_admin($user_id = false) {
+ global $current_user;
+
+ $ure_key_capability = $this->get_key_capability();
+ if (empty($user_id)) {
+ $user_id = $current_user->ID;
+ }
+ $result = user_can($user_id, $ure_key_capability);
+
+ return $result;
+ }
+ // end of user_is_admin()
+
+
+ /**
+ * return array with WordPress user roles
+ *
+ * @global WP_Roles $wp_roles
+ * @global type $wp_user_roles
+ * @return array
+ */
+ public function get_user_roles() {
+
+ global $wp_roles;
+
+ if (!isset($wp_roles)) {
+ $wp_roles = new WP_Roles();
+ }
+
+ if (function_exists('bbp_filter_blog_editable_roles')) { // bbPress plugin is active
+ $this->roles = bbp_filter_blog_editable_roles($wp_roles->roles); // exclude bbPress roles
+ $bbp_full_caps = bbp_get_caps_for_role(bbp_get_keymaster_role());
+ // exclude capabilities automatically added by bbPress bbp_dynamic_role_caps() and not bbPress related: read, level_0, all s2Member levels, e.g. access_s2member_level_0, etc.
+ $built_in_wp_caps = $this->get_built_in_wp_caps();
+ $bbp_only_caps = array();
+ foreach ($bbp_full_caps as $bbp_cap => $val) {
+ if (isset($built_in_wp_caps[$bbp_cap]) || substr($bbp_cap, 0, 15) == 'access_s2member') {
+ continue;
+ }
+ $bbp_only_caps[$bbp_cap] = $val;
+ }
+ // remove bbPress dynamically created capabilities from WordPress persistent roles in order to not save them to database with any role update
+ $cap_removed = false;
+ foreach ($bbp_only_caps as $bbp_cap => $val) {
+ foreach ($this->roles as &$role) {
+ if (isset($role['capabilities'][$bbp_cap])) {
+ unset($role['capabilities'][$bbp_cap]);
+ $cap_removed = true;
+ }
+ }
+ }
+ /*
+ if ($cap_removed) {
+ // save changes to database
+ $option_name = $wpdb->prefix.'user_roles';
+ update_option($option_name, $this->roles);
+ }
+ */
+ } else {
+ $this->roles = $wp_roles->roles;
+ }
+
+ if (is_array($this->roles) && count($this->roles) > 0) {
+ asort($this->roles);
+ }
+
+ return $this->roles;
+ }
+ // end of get_user_roles()
+
+/*
+ // restores User Roles from the backup record
+ protected function restore_user_roles()
+ {
+ global $wpdb, $wp_roles;
+
+ $error_message = 'Error! ' . __('Database operation error. Check log file.', 'ure');
+ $option_name = $wpdb->prefix . 'user_roles';
+ $backup_option_name = $wpdb->prefix . 'backup_user_roles';
+ $query = "select option_value
+ from $wpdb->options
+ where option_name='$backup_option_name'
+ limit 0, 1";
+ $option_value = $wpdb->get_var($query);
+ if ($wpdb->last_error) {
+ $this->log_event($wpdb->last_error, true);
+ return $error_message;
+ }
+ if ($option_value) {
+ $query = "update $wpdb->options
+ set option_value='$option_value'
+ where option_name='$option_name'
+ limit 1";
+ $record = $wpdb->query($query);
+ if ($wpdb->last_error) {
+ $this->log_event($wpdb->last_error, true);
+ return $error_message;
+ }
+ $wp_roles = new WP_Roles();
+ $reload_link = wp_get_referer();
+ $reload_link = remove_query_arg('action', $reload_link);
+ $reload_link = add_query_arg('action', 'roles_restore_note', $reload_link);
+?>
+
+ prefix . 'backup_user_roles';
+ $query = "select option_id
+ from $wpdb->options
+ where option_name='$backup_option_name'
+ limit 0, 1";
+ $option_id = $wpdb->get_var($query);
+ if ($wpdb->last_error) {
+ $this->log_event($wpdb->last_error, true);
+ return false;
+ }
+ if (!$option_id) {
+ $roles_option_name = $wpdb->prefix.'user_roles';
+ $query = "select option_value
+ from $wpdb->options
+ where option_name like '$roles_option_name' limit 0,1";
+ $serialized_roles = $wpdb->get_var($query);
+ // create user roles record backup
+ $query = "insert into $wpdb->options
+ (option_name, option_value, autoload)
+ values ('$backup_option_name', '$serialized_roles', 'no')";
+ $record = $wpdb->query($query);
+ if ($wpdb->last_error) {
+ $this->log_event($wpdb->last_error, true);
+ return false;
+ }
+ }
+
+ return true;
+ }
+ // end of ure_make_roles_backup()
+
+
+ protected function role_contains_caps_not_allowed_for_simple_admin($role_id) {
+
+ $result = false;
+ $role = $this->roles[$role_id];
+ if (!is_array($role['capabilities'])) {
+ return false;
+ }
+ foreach (array_keys($role['capabilities']) as $cap) {
+ if ($this->block_cap_for_single_admin($cap)) {
+ $result = true;
+ break;
+ }
+ }
+
+ return $result;
+ }
+ // end of role_contains_caps_not_allowed_for_simple_admin()
+
+ /**
+ * return array with roles which we could delete, e.g self-created and not used with any blog user
+ *
+ * @global wpdb $wpdb - WP database object
+ * @return array
+ */
+ protected function get_roles_can_delete()
+ {
+ global $wpdb;
+
+ $table_name = (!$this->multisite && defined('CUSTOM_USER_META_TABLE')) ? CUSTOM_USER_META_TABLE : $wpdb->usermeta;
+ $meta_key = $wpdb->prefix . 'capabilities';
+ $default_role = get_option('default_role');
+ $standard_roles = array('administrator', 'editor', 'author', 'contributor', 'subscriber');
+ $roles_can_delete = array();
+ foreach ($this->roles as $key => $role) {
+ $can_delete = true;
+ // check if it is default role for new users
+ if ($key == $default_role) {
+ $can_delete = false;
+ continue;
+ }
+ // check if it is standard role
+ if (in_array($key, $standard_roles)) {
+ continue;
+ }
+ // check if role has capabilities prohibited for the single site administrator
+ if ($this->role_contains_caps_not_allowed_for_simple_admin($key)) {
+ continue;
+ }
+
+ // check if user with such role exists
+ $query = "SELECT DISTINCT meta_value
+ FROM $table_name
+ WHERE meta_key='$meta_key' AND meta_value like '%$key%'";
+ $roles_used = $wpdb->get_results($query);
+ if ($roles_used && count($roles_used > 0)) {
+ foreach ($roles_used as $role_used) {
+ $role_name = unserialize($role_used->meta_value);
+ foreach ($role_name as $key1 => $value1) {
+ if ($key == $key1) {
+ $can_delete = false;
+ break;
+ }
+ }
+ if (!$can_delete) {
+ break;
+ }
+ }
+ }
+ if ($can_delete) {
+ $roles_can_delete[$key] = $role['name'] . ' (' . $key . ')';
+ }
+ }
+
+ return $roles_can_delete;
+ }
+ // end of get_roles_can_delete()
+
+
+ /**
+ * return array of built-in WP capabilities (WP 3.1 wp-admin/includes/schema.php)
+ *
+ * @return array
+ */
+ public function get_built_in_wp_caps() {
+ $caps = array();
+ $caps['switch_themes'] = 1;
+ $caps['edit_themes'] = 1;
+ $caps['activate_plugins'] = 1;
+ $caps['edit_plugins'] = 1;
+ $caps['edit_users'] = 1;
+ $caps['edit_files'] = 1;
+ $caps['manage_options'] = 1;
+ $caps['moderate_comments'] = 1;
+ $caps['manage_categories'] = 1;
+ $caps['manage_links'] = 1;
+ $caps['upload_files'] = 1;
+ $caps['import'] = 1;
+ $caps['unfiltered_html'] = 1;
+ $caps['edit_posts'] = 1;
+ $caps['edit_others_posts'] = 1;
+ $caps['edit_published_posts'] = 1;
+ $caps['publish_posts'] = 1;
+ $caps['edit_pages'] = 1;
+ $caps['read'] = 1;
+ $caps['level_10'] = 1;
+ $caps['level_9'] = 1;
+ $caps['level_8'] = 1;
+ $caps['level_7'] = 1;
+ $caps['level_6'] = 1;
+ $caps['level_5'] = 1;
+ $caps['level_4'] = 1;
+ $caps['level_3'] = 1;
+ $caps['level_2'] = 1;
+ $caps['level_1'] = 1;
+ $caps['level_0'] = 1;
+ $caps['edit_others_pages'] = 1;
+ $caps['edit_published_pages'] = 1;
+ $caps['publish_pages'] = 1;
+ $caps['delete_pages'] = 1;
+ $caps['delete_others_pages'] = 1;
+ $caps['delete_published_pages'] = 1;
+ $caps['delete_posts'] = 1;
+ $caps['delete_others_posts'] = 1;
+ $caps['delete_published_posts'] = 1;
+ $caps['delete_private_posts'] = 1;
+ $caps['edit_private_posts'] = 1;
+ $caps['read_private_posts'] = 1;
+ $caps['delete_private_pages'] = 1;
+ $caps['edit_private_pages'] = 1;
+ $caps['read_private_pages'] = 1;
+ $caps['unfiltered_upload'] = 1;
+ $caps['edit_dashboard'] = 1;
+ $caps['update_plugins'] = 1;
+ $caps['delete_plugins'] = 1;
+ $caps['install_plugins'] = 1;
+ $caps['update_themes'] = 1;
+ $caps['install_themes'] = 1;
+ $caps['update_core'] = 1;
+ $caps['list_users'] = 1;
+ $caps['remove_users'] = 1;
+ $caps['add_users'] = 1;
+ $caps['promote_users'] = 1;
+ $caps['edit_theme_options'] = 1;
+ $caps['delete_themes'] = 1;
+ $caps['export'] = 1;
+ $caps['delete_users'] = 1;
+ $caps['create_users'] = 1;
+ if ($this->multisite) {
+ $caps['manage_network'] = 1;
+ $caps['manage_network_users'] = 1;
+ $caps['manage_network_themes'] = 1;
+ $caps['manage_network_plugins'] = 1;
+ $caps['manage_network_options'] = 1;
+ }
+
+ return $caps;
+ }
+ // end of get_built_in_wp_caps()
+
+
+ /**
+ * return the array of unused user capabilities
+ *
+ * @global WP_Roles $wp_roles
+ * @global wpdb $wpdb
+ * @return array
+ */
+ protected function get_caps_to_remove()
+ {
+ global $wp_roles;
+
+ // build full capabilities list from all roles except Administrator
+ $full_caps_list = array();
+ foreach ($wp_roles->roles as $role) {
+ // validate if capabilities is an array
+ if (isset($role['capabilities']) && is_array($role['capabilities'])) {
+ foreach ($role['capabilities'] as $capability => $value) {
+ if (!isset($full_caps_list[$capability])) {
+ $full_caps_list[$capability] = 1;
+ }
+ }
+ }
+ }
+
+ $caps_to_exclude = $this->get_built_in_wp_caps();
+
+ $caps_to_remove = array();
+ foreach ($full_caps_list as $capability => $value) {
+ if (!isset($caps_to_exclude[$capability])) { // do not touch built-in WP caps
+ // check roles
+ $cap_in_use = false;
+ foreach ($wp_roles->role_objects as $wp_role) {
+ if ($wp_role->name != 'administrator') {
+ if ($wp_role->has_cap($capability)) {
+ $cap_in_use = true;
+ break;
+ }
+ }
+ }
+ if (!$cap_in_use) {
+ $caps_to_remove[$capability] = 1;
+ }
+ }
+ }
+
+ return $caps_to_remove;
+ }
+ // end of get_caps_to_remove()
+
+
+ /**
+ * Build HTML for select drop-down list from capabilities we can remove
+ *
+ * @return string
+ */
+ protected function get_caps_to_remove_html() {
+
+ $caps_to_remove = $this->get_caps_to_remove();
+ if (!empty($caps_to_remove) && is_array($caps_to_remove) && count($caps_to_remove) > 0) {
+ $html = '
';
+ foreach ($caps_to_remove as $key => $value) {
+ $html .= '' . $key . ' ';
+ }
+ $html .= ' ';
+ } else {
+ $html = '';
+ }
+
+ return $html;
+ }
+ // end of getCapsToRemoveHTML()
+
+
+ /**
+ * returns array of deprecated capabilities
+ *
+ * @return array
+ */
+ protected function get_deprecated_caps()
+ {
+
+ $dep_caps = array(
+ 'level_0' => 0,
+ 'level_1' => 0,
+ 'level_2' => 0,
+ 'level_3' => 0,
+ 'level_4' => 0,
+ 'level_5' => 0,
+ 'level_6' => 0,
+ 'level_7' => 0,
+ 'level_8' => 0,
+ 'level_9' => 0,
+ 'level_10' => 0,
+ 'edit_files' => 0);
+ if ($this->multisite) {
+ $dep_caps['unfiltered_html'] = 0;
+ }
+
+ return $dep_caps;
+ }
+ // end of get_deprecated_caps()
+
+
+ /**
+ * Return true if $capability is included to the list of capabilities allowed for the single site administrator
+ * @param string $capability - capability ID
+ * @param boolean $ignore_super_admin - if
+ * @return boolean
+ */
+ protected function block_cap_for_single_admin($capability, $ignore_super_admin=false) {
+
+ if (!class_exists('User_Role_Editor_Pro')) { // this functionality is for the Pro version only.
+ return false;
+ }
+
+ if (!$this->multisite) { // work for multisite only
+ return false;
+ }
+ if (!$ignore_super_admin && is_super_admin()) { // Do not block superadmin
+ return false;
+ }
+ $caps_access_restrict_for_simple_admin = $this->get_option('caps_access_restrict_for_simple_admin', 0);
+ if (!$caps_access_restrict_for_simple_admin) {
+ return false;
+ }
+ $allowed_caps = $this->get_option('caps_allowed_for_single_admin', array());
+ if (in_array($capability, $allowed_caps)) {
+ $block_this_cap = false;
+ } else {
+ $block_this_cap = true;
+ }
+
+ return $block_this_cap;
+ }
+ // end of block_cap_for_single_admin()
+
+
+ /**
+ * output HTML-code for capabilities list
+ * @param boolean $core - if true, then show WordPress core capabilities, else custom (plugins and themes created)
+ * @param boolean $for_role - if true, it is role capabilities list, else - user specific capabilities list
+ */
+ protected function show_capabilities($core = true, $for_role = true) {
+
+ if ($this->multisite && !is_super_admin()) {
+ $help_links_enabled = $this->get_option('enable_help_links_for_simple_admin_ms', 1);
+ } else {
+ $help_links_enabled = true;
+ }
+
+ $onclick_for_admin = '';
+ if (!( $this->multisite && is_super_admin() )) { // do not limit SuperAdmin for multi-site
+ if ($core && 'administrator' == $this->current_role) {
+ $onclick_for_admin = 'onclick="turn_it_back(this)"';
+ }
+ }
+
+ if ($core) {
+ $quant = count($this->get_built_in_wp_caps());
+ $deprecated_caps = $this->get_deprecated_caps();
+ } else {
+ $quant = count($this->full_capabilities) - count($this->get_built_in_wp_caps());
+ $deprecated_caps = array();
+ }
+ $quant_in_column = (int) $quant / 3;
+ $printed_quant = 0;
+ foreach ($this->full_capabilities as $capability) {
+ if ($core) {
+ if (!$capability['wp_core']) { // show WP built-in capabilities 1st
+ continue;
+ }
+ } else {
+ if ($capability['wp_core']) { // show plugins and themes added capabilities
+ continue;
+ }
+ }
+ if (!$this->show_deprecated_caps && isset($deprecated_caps[$capability['inner']])) {
+ $hidden_class = 'class="hidden"';
+ } else {
+ $hidden_class = '';
+ }
+ if (isset($deprecated_caps[$capability['inner']])) {
+ $label_style = 'style="color:#BBBBBB;"';
+ } else {
+ $label_style = '';
+ }
+ if ($this->multisite && $this->block_cap_for_single_admin($capability['inner'], true)) {
+ if (is_super_admin()) {
+ if (!is_network_admin()) {
+ $label_style = 'style="color: red;"';
+ }
+ } else {
+ $hidden_class = 'class="hidden"';
+ }
+ }
+ $checked = '';
+ $disabled = '';
+ if ($for_role) {
+ if (isset($this->roles[$this->current_role]['capabilities'][$capability['inner']]) &&
+ !empty($this->roles[$this->current_role]['capabilities'][$capability['inner']])) {
+ $checked = 'checked="checked"';
+ }
+ } else {
+ if ($this->user_can($capability['inner'])) {
+ $checked = 'checked="checked"';
+ if (!isset($this->user_to_edit->caps[$capability['inner']])) {
+ $disabled = 'disabled="disabled"';
+ }
+ }
+ }
+ $cap_id = str_replace(' ', URE_SPACE_REPLACER, $capability['inner']);
+ echo '
' .
+ $capability[$cap_ind] . ' ' . $help_link . '
';
+ $printed_quant++;
+ if ($printed_quant >= $quant_in_column) {
+ $printed_quant = 0;
+ echo '
+
';
+ }
+ } else { // if (empty($hidden_class
+ echo '';
+ } // if (empty($hidden_class
+ }
+ }
+ // end of show_capabilities()
+
+
+ /**
+ * output HTML code to create URE toolbar
+ *
+ * @param string $this->current_role
+ * @param boolean $role_delete
+ * @param boolean $capability_remove
+ */
+ protected function toolbar($role_delete = false, $capability_remove = false) {
+ $caps_access_restrict_for_simple_admin = $this->get_option('caps_access_restrict_for_simple_admin', 0);
+ if ($caps_access_restrict_for_simple_admin) {
+ $add_del_role_for_simple_admin = $this->get_option('add_del_role_for_simple_admin', 1);
+ } else {
+ $add_del_role_for_simple_admin = 1;
+ }
+ $super_admin = is_super_admin();
+
+?>
+
+ Roles updated for ' . ( microtime() - $time_shot ) . ' milliseconds
';
+ }
+
+ return $result;
+ }
+ // end of multisite_update_roles()
+
+
+ /**
+ * Process user request on update roles
+ *
+ * @global wpdb $wpdb
+ * @return boolean
+ */
+ protected function update_roles() {
+ global $wpdb;
+
+ if ($this->multisite && is_super_admin() && $this->apply_to_all) { // update Role for the all blogs/sites in the network (permitted to superadmin only)
+ if (!$this->multisite_update_roles()) {
+ return false;
+ }
+ } else {
+ if (!$this->save_roles()) {
+ return false;
+ }
+ }
+
+ return true;
+ }
+ // end of update_roles()
+
+
+ /**
+ * Write message to the log file
+ *
+ * @global type $wp_version
+ * @param string $message
+ * @param boolean $show_message
+ */
+ protected function log_event($message, $show_message = false) {
+ global $wp_version;
+
+ $file_name = URE_PLUGIN_DIR . 'user-role-editor.log';
+ $fh = fopen($file_name, 'a');
+ $cr = "\n";
+ $s = $cr . date("d-m-Y H:i:s") . $cr .
+ 'WordPress version: ' . $wp_version . ', PHP version: ' . phpversion() . ', MySQL version: ' . mysql_get_server_info() . $cr;
+ fwrite($fh, $s);
+ fwrite($fh, $message . $cr);
+ fclose($fh);
+
+ if ($show_message) {
+ $this->show_message('Error! ' . esc_html__('Error is occur. Please check the log file.', 'ure'));
+ }
+ }
+ // end of log_event()
+
+
+ /**
+ * returns array without capabilities blocked for single site administrators
+ * @param array $capabilities
+ * @return array
+ */
+ protected function remove_caps_not_allowed_for_single_admin($capabilities) {
+
+ foreach(array_keys($capabilities) as $cap) {
+ if ($this->block_cap_for_single_admin($cap)) {
+ unset($capabilities[$cap]);
+ }
+ }
+
+ return $capabilities;
+ }
+ // end of remove_caps_not_allowed_for_single_admin()
+
+
+ /**
+ * process new role create request
+ *
+ * @global WP_Roles $wp_roles
+ *
+ * @return string - message about operation result
+ *
+ */
+ protected function add_new_role() {
+
+ global $wp_roles;
+
+ $mess = '';
+ $this->current_role = '';
+ if (isset($_POST['user_role_id']) && $_POST['user_role_id']) {
+ $user_role_id = utf8_decode($_POST['user_role_id']);
+ // sanitize user input for security
+ $valid_name = preg_match('/[A-Za-z0-9_\-]*/', $user_role_id, $match);
+ if (!$valid_name || ($valid_name && ($match[0] != $user_role_id))) { // some non-alphanumeric charactes found!
+ return esc_html__('Error: Role ID must contain latin characters, digits, hyphens or underscore only!', 'ure');
+ }
+ $numeric_name = preg_match('/[0-9]*/', $user_role_id, $match);
+ if ($numeric_name && ($match[0] == $user_role_id)) { // numeric name discovered
+ return esc_html__('Error: WordPress does not support numeric Role name (ID). Add latin characters to it.', 'ure');
+ }
+
+ if ($user_role_id) {
+ $user_role_name = isset($_POST['user_role_name']) ? $_POST['user_role_name'] : false;
+ if (!empty($user_role_name)) {
+ $user_role_name = sanitize_text_field($user_role_name);
+ } else {
+ $user_role_name = $user_role_id; // as user role name is empty, use user role ID instead
+ }
+
+ if (!isset($wp_roles)) {
+ $wp_roles = new WP_Roles();
+ }
+ if (isset($wp_roles->roles[$user_role_id])) {
+ return sprintf('Error! ' . esc_html__('Role %s exists already', 'ure'), $user_role_id);
+ }
+ $user_role_id = strtolower($user_role_id);
+ $this->current_role = $user_role_id;
+
+ $user_role_copy_from = isset($_POST['user_role_copy_from']) ? $_POST['user_role_copy_from'] : false;
+ if (!empty($user_role_copy_from) && $user_role_copy_from != 'none' && $wp_roles->is_role($user_role_copy_from)) {
+ $role = $wp_roles->get_role($user_role_copy_from);
+ $capabilities = $this->remove_caps_not_allowed_for_single_admin($role->capabilities);
+ } else {
+ $capabilities = array('read' => 1, 'level_0' => 1);
+ }
+ // add new role to the roles array
+ $result = add_role($user_role_id, $user_role_name, $capabilities);
+ if (!isset($result) || empty($result)) {
+ $mess = 'Error! ' . esc_html__('Error is encountered during new role create operation', 'ure');
+ } else {
+ $mess = sprintf(esc_html__('Role %s is created successfully', 'ure'), $user_role_name);
+ }
+ }
+ }
+ return $mess;
+ }
+ // end of new_role_create()
+
+
+ /**
+ * Deletes user role from the WP database
+ */
+ protected function delete_wp_roles($roles_to_del) {
+ global $wp_roles;
+
+ if (!isset($wp_roles)) {
+ $wp_roles = new WP_Roles();
+ }
+ $result = false;
+ foreach($roles_to_del as $role_id) {
+ if (!isset($wp_roles->roles[$role_id])) {
+ $result = false;
+ break;
+ }
+ if ($this->role_contains_caps_not_allowed_for_simple_admin($role_id)) { // do not delete
+ continue;
+ }
+ unset($wp_roles->role_objects[$role_id]);
+ unset($wp_roles->role_names[$role_id]);
+ unset($wp_roles->roles[$role_id]);
+ $result = true;
+ } // foreach()
+ if ($result) {
+ update_option($wp_roles->role_key, $wp_roles->roles);
+ }
+
+ return $result;
+ }
+ // end of delete_wp_roles()
+
+
+ protected function delete_all_unused_roles() {
+
+ $this->roles = $this->get_user_roles();
+ $roles_to_del = array_keys($this->get_roles_can_delete());
+ $result = $this->delete_wp_roles($roles_to_del);
+ $this->roles = null; // to force roles refresh
+
+ return $result;
+ }
+ // end of delete_all_unused_roles()
+
+
+ /**
+ * process user request for user role deletion
+ * @global WP_Roles $wp_roles
+ * @return type
+ */
+ protected function delete_role() {
+
+ $mess = '';
+ if (isset($_POST['user_role_id']) && $_POST['user_role_id']) {
+ $role = $_POST['user_role_id'];
+ if ($role==-1) { // delete all unused roles
+ $result = $this->delete_all_unused_roles();
+ } else {
+ $result = $this->delete_wp_roles(array($role));
+ }
+ if (empty($result)) {
+ $mess = 'Error! ' . esc_html__('Error encountered during role delete operation', 'ure');
+ } elseif ($role==-1) {
+ $mess = sprintf(esc_html__('Unused roles are deleted successfully', 'ure'), $role);
+ } else {
+ $mess = sprintf(esc_html__('Role %s is deleted successfully', 'ure'), $role);
+ }
+ unset($_POST['user_role']);
+ }
+
+ return $mess;
+ }
+ // end of ure_delete_role()
+
+
+ /**
+ * Change default WordPress role
+ * @global WP_Roles $wp_roles
+ * @return string
+ */
+ protected function change_default_role() {
+ global $wp_roles;
+
+ $mess = '';
+ if (!isset($wp_roles)) {
+ $wp_roles = new WP_Roles();
+ }
+ if (!empty($_POST['user_role_id'])) {
+ $user_role_id = $_POST['user_role_id'];
+ unset($_POST['user_role_id']);
+ $errorMessage = 'Error! ' . esc_html__('Error encountered during default role change operation', 'ure');
+ if (isset($wp_roles->role_objects[$user_role_id]) && $user_role_id !== 'administrator') {
+ $result = update_option('default_role', $user_role_id);
+ if (empty($result)) {
+ $mess = $errorMessage;
+ } else {
+ $mess = sprintf(esc_html__('Default role for new users is set to %s successfully', 'ure'), $wp_roles->role_names[$user_role_id]);
+ }
+ } else {
+ $mess = $errorMessage;
+ }
+ }
+
+ return $mess;
+ }
+ // end of change_default_role()
+
+
+ /**
+ * Not really used in the plugin - just storage for the translation strings
+ */
+ protected function translation_data() {
+// for the translation purpose
+ if (false) {
+// Standard WordPress roles
+ __('Editor', 'ure');
+ __('Author', 'ure');
+ __('Contributor', 'ure');
+ __('Subscriber', 'ure');
+// Standard WordPress capabilities
+ __('Switch themes', 'ure');
+ __('Edit themes', 'ure');
+ __('Activate plugins', 'ure');
+ __('Edit plugins', 'ure');
+ __('Edit users', 'ure');
+ __('Edit files', 'ure');
+ __('Manage options', 'ure');
+ __('Moderate comments', 'ure');
+ __('Manage categories', 'ure');
+ __('Manage links', 'ure');
+ __('Upload files', 'ure');
+ __('Import', 'ure');
+ __('Unfiltered html', 'ure');
+ __('Edit posts', 'ure');
+ __('Edit others posts', 'ure');
+ __('Edit published posts', 'ure');
+ __('Publish posts', 'ure');
+ __('Edit pages', 'ure');
+ __('Read', 'ure');
+ __('Level 10', 'ure');
+ __('Level 9', 'ure');
+ __('Level 8', 'ure');
+ __('Level 7', 'ure');
+ __('Level 6', 'ure');
+ __('Level 5', 'ure');
+ __('Level 4', 'ure');
+ __('Level 3', 'ure');
+ __('Level 2', 'ure');
+ __('Level 1', 'ure');
+ __('Level 0', 'ure');
+ __('Edit others pages', 'ure');
+ __('Edit published pages', 'ure');
+ __('Publish pages', 'ure');
+ __('Delete pages', 'ure');
+ __('Delete others pages', 'ure');
+ __('Delete published pages', 'ure');
+ __('Delete posts', 'ure');
+ __('Delete others posts', 'ure');
+ __('Delete published posts', 'ure');
+ __('Delete private posts', 'ure');
+ __('Edit private posts', 'ure');
+ __('Read private posts', 'ure');
+ __('Delete private pages', 'ure');
+ __('Edit private pages', 'ure');
+ __('Read private pages', 'ure');
+ __('Delete users', 'ure');
+ __('Create users', 'ure');
+ __('Unfiltered upload', 'ure');
+ __('Edit dashboard', 'ure');
+ __('Update plugins', 'ure');
+ __('Delete plugins', 'ure');
+ __('Install plugins', 'ure');
+ __('Update themes', 'ure');
+ __('Install themes', 'ure');
+ __('Update core', 'ure');
+ __('List users', 'ure');
+ __('Remove users', 'ure');
+ __('Add users', 'ure');
+ __('Promote users', 'ure');
+ __('Edit theme options', 'ure');
+ __('Delete themes', 'ure');
+ __('Export', 'ure');
+ }
+ }
+ // end of ure_TranslationData()
+
+
+ /**
+ * placeholder - realized at the Pro version
+ */
+ protected function check_blog_user($user) {
+
+ return true;
+ }
+ // end of check_blog_user()
+
+ /**
+ * placeholder - realized at the Pro version
+ */
+ protected function network_update_user($user) {
+
+ return true;
+ }
+ // end of network_update_user()
+
+
+ /**
+ * Update user roles and capabilities
+ *
+ * @global WP_Roles $wp_roles
+ * @param WP_User $user
+ * @return boolean
+ */
+ protected function update_user($user) {
+ global $wp_roles;
+
+ if ($this->multisite) {
+ if (!$this->check_blog_user($user)) {
+ return false;
+ }
+ }
+
+ $primary_role = $_POST['primary_role'];
+ if (empty($primary_role) || !isset($wp_roles->roles[$primary_role])) {
+ $primary_role = '';
+ }
+ if (function_exists('bbp_filter_blog_editable_roles')) { // bbPress plugin is active
+ $bbp_user_role = bbp_get_user_role($user->ID);
+ } else {
+ $bbp_user_role = '';
+ }
+
+ // revoke all roles and capabilities from this user
+ $user->roles = array();
+ $user->remove_all_caps();
+
+ // restore primary role
+ if (!empty($primary_role)) {
+ $user->add_role($primary_role);
+ }
+
+ // restore bbPress user role if she had one
+ if (!empty($bbp_user_role)) {
+ $user->add_role($bbp_user_role);
+ }
+
+ // add other roles to user
+ foreach ($_POST as $key => $value) {
+ $result = preg_match('/^wp_role_(.+)/', $key, $match);
+ if ($result === 1) {
+ $role = $match[1];
+ if (isset($wp_roles->roles[$role])) {
+ $user->add_role($role);
+ }
+ }
+ }
+
+ // add individual capabilities to user
+ if (count($this->capabilities_to_save) > 0) {
+ foreach ($this->capabilities_to_save as $key => $value) {
+ $user->add_cap($key);
+ }
+ }
+ $user->update_user_level_from_caps();
+
+ if ($this->apply_to_all) { // apply update to the all network
+ if (!$this->network_update_user($user)) {
+ return false;
+ }
+ }
+
+ return true;
+ }
+ // end of update_user()
+
+
+ /**
+ * Add new capability
+ *
+ * @global WP_Roles $wp_roles
+ * @return string
+ */
+ protected function add_new_capability() {
+ global $wp_roles;
+
+ $mess = '';
+ if (isset($_POST['capability_id']) && $_POST['capability_id']) {
+ $user_capability = $_POST['capability_id'];
+ // sanitize user input for security
+ $valid_name = preg_match('/[A-Za-z0-9_\-]*/', $user_capability, $match);
+ if (!$valid_name || ($valid_name && ($match[0] != $user_capability))) { // some non-alphanumeric charactes found!
+ return 'Error! ' . esc_html__('Error: Capability name must contain latin characters and digits only!', 'ure');
+ ;
+ }
+
+ if ($user_capability) {
+ $user_capability = strtolower($user_capability);
+ if (!isset($wp_roles)) {
+ $wp_roles = new WP_Roles();
+ }
+ $wp_roles->use_db = true;
+ $administrator = $wp_roles->get_role('administrator');
+ if (!$administrator->has_cap($user_capability)) {
+ $wp_roles->add_cap('administrator', $user_capability);
+ $mess = sprintf(esc_html__('Capability %s is added successfully', 'ure'), $user_capability);
+ } else {
+ $mess = sprintf('Error! ' . esc_html__('Capability %s exists already', 'ure'), $user_capability);
+ }
+ }
+ }
+
+ return $mess;
+ }
+ // end of add_new_capability()
+
+
+ /**
+ * Delete capability
+ *
+ * @global wpdb $wpdb
+ * @global WP_Roles $wp_roles
+ * @return string - information message
+ */
+ protected function delete_capability() {
+ global $wpdb, $wp_roles;
+
+ $mess = '';
+ if (!empty($_POST['user_capability_id'])) {
+ $capability_id = $_POST['user_capability_id'];
+ $caps_to_remove = $this->get_caps_to_remove();
+ if (!is_array($caps_to_remove) || count($caps_to_remove) == 0 || !isset($caps_to_remove[$capability_id])) {
+ return sprintf(esc_html__('Error! You do not have permission to delete this capability: %s!', 'ure'), $capability_id);
+ }
+
+ // process users
+ $usersId = $wpdb->get_col("SELECT $wpdb->users.ID FROM $wpdb->users");
+ foreach ($usersId as $user_id) {
+ $user = get_user_to_edit($user_id);
+ if ($user->has_cap($capability_id)) {
+ $user->remove_cap($capability_id);
+ }
+ }
+
+ // process roles
+ foreach ($wp_roles->role_objects as $wp_role) {
+ if ($wp_role->has_cap($capability_id)) {
+ $wp_role->remove_cap($capability_id);
+ }
+ }
+
+ $mess = sprintf(esc_html__('Capability %s is removed successfully', 'ure'), $capability_id);
+ }
+
+ return $mess;
+ }
+ // end of remove_capability()
+
+
+ /**
+ * Returns list of user roles, except 1st one, and bbPress assigned as they are shown by WordPress and bbPress theirselves.
+ *
+ * @param type $user WP_User from wp-includes/capabilities.php
+ * @return array
+ */
+ public function other_user_roles($user) {
+
+ global $wp_roles;
+
+ if (!is_array($user->roles) || count($user->roles) <= 1) {
+ return '';
+ }
+
+ // get bbPress assigned user role
+ if (function_exists('bbp_filter_blog_editable_roles')) {
+ $bb_press_role = bbp_get_user_role($user->ID);
+ } else {
+ $bb_press_role = '';
+ }
+
+ $roles = array();
+ foreach ($user->roles as $key => $value) {
+ if (!empty($bb_press_role) && $bb_press_role === $value) {
+ // exclude bbPress assigned role
+ continue;
+ }
+ $roles[] = $value;
+ }
+ array_shift($roles); // exclude primary role which is shown by WordPress itself
+
+ return $roles;
+ }
+ // end of ure_other_user_roles()
+
+
+ /**
+ * Returns text presentation of user roles
+ *
+ * @param type $roles user roles list
+ * @return string
+ */
+ public function roles_text($roles) {
+ global $wp_roles;
+
+ if (is_array($roles) && count($roles) > 0) {
+ $role_names = array();
+ foreach ($roles as $role) {
+ $role_names[] = $wp_roles->roles[$role]['name'];
+ }
+ $output = implode(', ', $role_names);
+ } else {
+ $output = '';
+ }
+
+ return $output;
+ }
+ // end of roles_text()
+
+
+ /**
+ * display opening part of the HTML box with title and CSS style
+ *
+ * @param string $title
+ * @param string $style
+ */
+ protected function display_box_start($title, $style = '') {
+ ?>
+
+
+ User Role Editor
+
+ ';
+ $this->role_to_copy_html = '
+ ' . esc_html__('None', 'ure') . ' ';
+ $this->role_select_html = '';
+ foreach ($this->roles as $key => $value) {
+ $selected1 = $this->option_selected($key, $this->current_role);
+ $selected2 = $this->option_selected($key, $this->wp_default_role);
+ $disabled = ($key==='administrator' && $caps_access_restrict_for_simple_admin && !is_super_admin()) ? 'disabled' : '';
+ if ($show_admin_role || $key != 'administrator') {
+ $translated_name = esc_html__($value['name'], 'ure'); // get translation from URE language file, if exists
+ if ($translated_name === $value['name']) { // get WordPress internal translation
+ $translated_name = translate_user_role($translated_name);
+ }
+ $translated_name .= ' (' . $key . ')';
+ $this->role_select_html .= '' . $translated_name . ' ';
+ $this->role_default_html .= '' . $translated_name . ' ';
+ $this->role_to_copy_html .= '' . $translated_name . ' ';
+ }
+ }
+ $this->role_select_html .= ' ';
+ $this->role_default_html .= ' ';
+ $this->role_to_copy_html .= ' ';
+
+ $roles_can_delete = $this->get_roles_can_delete();
+ if ($roles_can_delete && count($roles_can_delete) > 0) {
+ $this->role_delete_html = '';
+ foreach ($roles_can_delete as $key => $value) {
+ $this->role_delete_html .= '' . esc_html__($value, 'ure') . ' ';
+ }
+ $this->role_delete_html .= '' . esc_html__('Delete All Unused Roles', 'ure') . ' ';
+ $this->role_delete_html .= ' ';
+ } else {
+ $this->role_delete_html = '';
+ }
+
+ $this->capability_remove_html = $this->get_caps_to_remove_html();
+ }
+ // end of role_edit_prepare_html()
+
+
+ public function user_primary_role_dropdown_list($user_roles) {
+?>
+
+' . esc_html__('— No role for this site —') . '';
+?>
+
+user_to_edit->caps[$capability])) {
+ return true;
+ }
+ foreach ($this->user_to_edit->roles as $role) {
+ if ($role===$capability) {
+ return true;
+ }
+ if (!empty($this->roles[$role]['capabilities'][$capability])) {
+ return true;
+ }
+ }
+
+ return false;
+ }
+ // end of user_can()
+
+
+ // returns true if current user has $capability assigned through the roles or directly
+ // returns true if current user has role with name equal $cap
+ public function user_has_capability($user, $cap) {
+
+ global $wp_roles;
+
+ if (!is_object($user) || empty($user->ID)) {
+ return false;
+ }
+ if (is_multisite() && is_super_admin($user->ID)) {
+ return true;
+ }
+
+ if (isset($user->caps[$cap])) {
+ return true;
+ }
+ foreach ($user->roles as $role) {
+ if ($role === $cap) {
+ return true;
+ }
+ if (!empty($wp_roles->roles[$role]['capabilities'][$cap])) {
+ return true;
+ }
+ }
+
+ return false;
+ }
+ // end of user_has_capability()
+
+
+ public function show_other_default_roles() {
+ $other_default_roles = $this->get_option('other_default_roles', array());
+ foreach ($this->roles as $role_id => $role) {
+ if ( $role_id=='administrator' || $role_id==$this->wp_default_role ) {
+ continue;
+ }
+ if ( in_array($role_id, $other_default_roles) ) {
+ $checked = 'checked="checked"';
+ } else {
+ $checked = '';
+ }
+ echo '
+
+ ' . esc_html__('Show Administrator role at User Role Editor', 'ure').' - ' .
+ esc_html__('turn this option on in order to make the "Administrator" role available at the User Role Editor '
+ . 'roles selection drop-down list. It is hidden by default for security reasons.','ure') . '' . esc_html__('Show capabilities in the human readable form','ure').' - ' .
+ esc_html__('automatically converts capability names from the technical form for internal use like '
+ . '"edit_others_posts" to more user friendly form, e.g. "Edit others posts".','ure') . '' . esc_html__('Show deprecated capabilities','ure').' - '.
+ esc_html__('Capabilities like "level_0", "level_1" are deprecated and are not used by WordPress. '
+ . 'They are left at the user roles for the compatibility purpose with the old themes and plugins code. '
+ . 'Turning on this option will show those deprecated capabilities.', 'ure') . '' . esc_html__('Allow create, edit and delete users to not super-admininstrators', 'ure').' - ' .
+ esc_html__('Super administrator only may create, edit and delete users under WordPress multi-site. '
+ . 'Turn this option on in order to remove this limitation.','ure') . '
+ ';
+
+ return $text;
+ }
+ // end of get_settings_overview_tab_help()
+
+
+ public function get_settings_help($tab_name) {
+ switch ($tab_name) {
+ case 'overview':{
+ $text = $this->get_settings_overview_tab_help();
+ break;
+ }
+ default:
+ }
+
+ return $text;
+ }
+ // end of get_settings_help()
+
+
+}
+// end of URE_Screen_Help
diff --git a/wp-content/plugins/user-role-editor/includes/class-user-role-editor.php b/wp-content/plugins/user-role-editor/includes/class-user-role-editor.php
new file mode 100644
index 0000000..c58069f
--- /dev/null
+++ b/wp-content/plugins/user-role-editor/includes/class-user-role-editor.php
@@ -0,0 +1,1001 @@
+lib = $library;
+
+ // Who may use this plugin
+ $this->key_capability = $this->lib->get_key_capability();
+
+ if ($this->lib->multisite) {
+ // new blog may be registered not at admin back-end only but automatically after new user registration, e.g.
+ // Gravity Forms User Registration Addon does
+ add_action( 'wpmu_new_blog', array($this, 'duplicate_roles_for_new_blog'), 10, 2);
+ }
+
+ if (!is_admin()) {
+ return;
+ }
+
+ add_action('admin_init', array($this, 'plugin_init'), 1);
+
+ // Add the translation function after the plugins loaded hook.
+ add_action('plugins_loaded', array($this, 'load_translation'));
+
+ // add own submenu
+ add_action('admin_menu', array($this, 'plugin_menu'));
+
+ if ($this->lib->multisite) {
+ // add own submenu
+ add_action('network_admin_menu', array($this, 'network_plugin_menu'));
+ }
+
+
+ // add a Settings link in the installed plugins page
+ add_filter('plugin_action_links', array($this, 'plugin_action_links'), 10, 2);
+
+ add_filter('plugin_row_meta', array($this, 'plugin_row_meta'), 10, 2);
+
+ }
+ // end of __construct()
+
+
+ /**
+ * Plugin initialization
+ *
+ */
+ public function plugin_init() {
+
+ global $current_user;
+
+ if (!empty($current_user->ID)) {
+ $user_id = $current_user->ID;
+ } else {
+ $user_id = 0;
+ }
+
+ // these filters and actions should prevent editing users with administrator role
+ // by other users with 'edit_users' capability
+ if (!$this->lib->user_is_admin($user_id)) {
+ // Exclude administrator role from edit list.
+ add_filter('editable_roles', array($this, 'exclude_admin_role' ) );
+ // prohibit any actions with user who has Administrator role
+ add_filter('user_has_cap', array($this, 'not_edit_admin' ), 10, 3);
+ // exclude users with 'Administrator' role from users list
+ add_action('pre_user_query', array($this, 'exclude_administrators' ) );
+ // do not show 'Administrator (s)' view above users list
+ add_filter('views_users', array($this, 'exclude_admins_view' ) );
+ }
+
+ add_action( 'admin_enqueue_scripts', array($this, 'admin_load_js' ) );
+ add_action( 'user_row_actions', array($this, 'user_row'), 10, 2 );
+ add_action( 'edit_user_profile', array($this, 'edit_user_profile'), 10, 2 );
+ add_filter( 'manage_users_columns', array($this, 'user_role_column'), 10, 1 );
+ add_filter( 'manage_users_custom_column', array($this, 'user_role_row'), 10, 3 );
+ add_action( 'profile_update', array($this, 'user_profile_update'), 10 );
+ add_filter( 'all_plugins', array($this, 'exclude_from_plugins_list' ) );
+
+ if ($this->lib->multisite) {
+ add_action( 'wpmu_activate_user', array($this, 'add_other_default_roles'), 10, 1 );
+
+ $allow_edit_users_to_not_super_admin = $this->lib->get_option('allow_edit_users_to_not_super_admin', 0);
+ if ($allow_edit_users_to_not_super_admin) {
+ add_filter( 'map_meta_cap', array($this, 'restore_users_edit_caps'), 1, 4 );
+ remove_all_filters( 'enable_edit_any_user_configuration' );
+ add_filter( 'enable_edit_any_user_configuration', '__return_true');
+ add_filter( 'admin_head', array($this, 'edit_user_permission_check'), 1, 4 );
+ }
+ } else {
+ add_action( 'user_register', array($this, 'add_other_default_roles'), 10, 1 );
+ $count_users_without_role = $this->lib->get_option('count_users_without_role', 0);
+ if ($count_users_without_role) {
+ add_action( 'restrict_manage_users', array($this, 'move_users_from_no_role_button') );
+ add_action( 'admin_init', array($this, 'add_css_to_users_page'));
+ add_action( 'admin_footer', array($this, 'add_js_to_users_page') );
+ }
+ }
+
+ add_action('wp_ajax_ure_ajax', array($this, 'ure_ajax'));
+
+ }
+ // end of plugin_init()
+
+
+ public function move_users_from_no_role_button() {
+
+ global $wpdb;
+
+ if ( stripos($_SERVER['REQUEST_URI'], 'wp-admin/users.php')===false ) {
+ return;
+ }
+
+ $id = get_current_blog_id();
+ $blog_prefix = $wpdb->get_blog_prefix($id);
+ $query = "select count(ID) from {$wpdb->users} users
+ where not exists (select user_id from {$wpdb->usermeta}
+ where user_id=users.ID and meta_key='{$blog_prefix}capabilities') or
+ exists (select user_id from wp_usermeta
+ where user_id=users.ID and meta_key='{$blog_prefix}capabilities' and meta_value='a:0:{}') ;";
+ $users_count = $wpdb->get_var($query);
+ if ($users_count>0) {
+?>
+
+
+ To:
+ No rights
+
+
ID}", "ure_user_{$user->ID}") .
+ '">' . esc_html__('Capabilities', 'ure') . ' ';
+ }
+ }
+
+ return $actions;
+ }
+ // end of user_row()
+
+
+ /**
+ * every time when new blog created - duplicate to it roles from the main blog (1)
+ * @global wpdb $wpdb
+ * @global WP_Roles $wp_roles
+ * @param int $blog_id
+ * @param int $user_id
+ *
+ */
+ public function duplicate_roles_for_new_blog($blog_id)
+ {
+
+ global $wpdb, $wp_roles;
+
+ // get Id of 1st (main) blog
+ $main_blog_id = $this->lib->get_main_blog_id();
+ if ( empty($main_blog_id) ) {
+ return;
+ }
+ $current_blog = $wpdb->blogid;
+ switch_to_blog( $main_blog_id );
+ $main_roles = new WP_Roles(); // get roles from primary blog
+ $default_role = get_option('default_role'); // get default role from primary blog
+ switch_to_blog($blog_id); // switch to the new created blog
+ $main_roles->use_db = false; // do not touch DB
+ $main_roles->add_cap('administrator', 'dummy_123456'); // just to save current roles into new blog
+ $main_roles->role_key = $wp_roles->role_key;
+ $main_roles->use_db = true; // save roles into new blog DB
+ $main_roles->remove_cap('administrator', 'dummy_123456'); // remove unneeded dummy capability
+ update_option('default_role', $default_role); // set default role for new blog as it set for primary one
+ switch_to_blog($current_blog); // return to blog where we were at the begin
+ }
+ // end of duplicate_roles_for_new_blog()
+
+
+ /**
+ * Filter out URE plugin from not superadmin users
+ * @param type array $plugins plugins list
+ * @return type array $plugins updated plugins list
+ */
+ public function exclude_from_plugins_list($plugins) {
+ global $current_user;
+
+ $ure_key_capability = $this->lib->get_key_capability();
+ // if multi-site, then allow plugin activation for network superadmins and, if that's specially defined, - for single site administrators too
+ if ($this->lib->user_has_capability($current_user, $ure_key_capability)) {
+ return $plugins;
+ }
+
+ // exclude URE from plugins list
+ foreach ($plugins as $key => $value) {
+ if ($key == 'user-role-editor/' . URE_PLUGIN_FILE) {
+ unset($plugins[$key]);
+ break;
+ }
+ }
+
+ return $plugins;
+ }
+ // end of exclude_from_plugins_list()
+
+
+ /**
+ * Load plugin translation files - linked to the 'plugins_loaded' action
+ *
+ */
+ function load_translation()
+ {
+
+ load_plugin_textdomain('ure', '', dirname( plugin_basename( URE_PLUGIN_FULL_PATH ) ) .'/lang');
+
+ }
+ // end of ure_load_translation()
+
+ /**
+ * Modify plugin actions link
+ *
+ * @param array $links
+ * @param string $file
+ * @return array
+ */
+ public function plugin_action_links($links, $file)
+ {
+
+ if ($file == plugin_basename(dirname(URE_PLUGIN_FULL_PATH).'/'.URE_PLUGIN_FILE)) {
+ $settings_link = "" . esc_html__('Settings', 'ure') . " ";
+ array_unshift($links, $settings_link);
+ }
+
+ return $links;
+ }
+
+ // end of plugin_action_links()
+
+
+ public function plugin_row_meta($links, $file) {
+
+ if ($file == plugin_basename(dirname(URE_PLUGIN_FULL_PATH) .'/'.URE_PLUGIN_FILE)) {
+ $links[] = '' . esc_html__('Changelog', 'ure') . ' ';
+ }
+
+ return $links;
+ }
+
+ // end of plugin_row_meta
+
+
+ public function settings_screen_configure() {
+ $settings_page_hook = $this->settings_page_hook;
+ if (is_multisite()) {
+ $settings_page_hook .= '-network';
+ }
+ $screen = get_current_screen();
+ // Check if current screen is URE's settings page
+ if ($screen->id != $settings_page_hook) {
+ return;
+ }
+ $screen_help = new Ure_Screen_Help();
+ $screen->add_help_tab( array(
+ 'id' => 'overview',
+ 'title' => esc_html__('Overview'),
+ 'content' => $screen_help->get_settings_help('overview')
+ ));
+ }
+ // end of settings_screen_configure()
+
+
+ public function plugin_menu() {
+
+ $translated_title = esc_html__('User Role Editor', 'ure');
+ if (function_exists('add_submenu_page')) {
+ $ure_page = add_submenu_page(
+ 'users.php',
+ $translated_title,
+ $translated_title,
+ $this->key_capability,
+ 'users-' . URE_PLUGIN_FILE,
+ array($this, 'edit_roles'));
+ add_action("admin_print_styles-$ure_page", array($this, 'admin_css_action'));
+ }
+
+ if (!$this->lib->multisite) {
+ $this->settings_page_hook = add_options_page(
+ $translated_title,
+ $translated_title,
+ $this->key_capability,
+ 'settings-' . URE_PLUGIN_FILE,
+ array($this, 'settings'));
+ add_action( 'load-'.$this->settings_page_hook, array($this,'settings_screen_configure') );
+ add_action("admin_print_styles-{$this->settings_page_hook}", array($this, 'admin_css_action'));
+ }
+ }
+ // end of plugin_menu()
+
+
+ public function network_plugin_menu() {
+ if (is_multisite()) {
+ $translated_title = esc_html__('User Role Editor', 'ure');
+ $this->settings_page_hook = add_submenu_page(
+ 'settings.php',
+ $translated_title,
+ $translated_title,
+ $this->key_capability,
+ 'settings-' . URE_PLUGIN_FILE,
+ array(&$this, 'settings'));
+ add_action( 'load-'.$this->settings_page_hook, array($this,'settings_screen_configure') );
+ add_action("admin_print_styles-{$this->settings_page_hook}", array($this, 'admin_css_action'));
+ }
+
+ }
+
+ // end of network_plugin_menu()
+
+
+ protected function get_settings_action() {
+
+ $action = 'show';
+ $update_buttons = array('ure_settings_update', 'ure_addons_settings_update', 'ure_settings_ms_update', 'ure_default_roles_update');
+ foreach($update_buttons as $update_button) {
+ if (!isset($_POST[$update_button])) {
+ continue;
+ }
+ if (!wp_verify_nonce($_POST['_wpnonce'], 'user-role-editor')) {
+ wp_die('Security check failed');
+ }
+ $action = $update_button;
+ break;
+ }
+
+ return $action;
+
+ }
+ // end of get_settings_action()
+
+ /**
+ * Update General Options tab
+ */
+ protected function update_general_options() {
+ if (defined('URE_SHOW_ADMIN_ROLE') && (URE_SHOW_ADMIN_ROLE == 1)) {
+ $show_admin_role = 1;
+ } else {
+ $show_admin_role = $this->lib->get_request_var('show_admin_role', 'checkbox');
+ }
+ $this->lib->put_option('show_admin_role', $show_admin_role);
+
+ $caps_readable = $this->lib->get_request_var('caps_readable', 'checkbox');
+ $this->lib->put_option('ure_caps_readable', $caps_readable);
+
+ $show_deprecated_caps = $this->lib->get_request_var('show_deprecated_caps', 'checkbox');
+ $this->lib->put_option('ure_show_deprecated_caps', $show_deprecated_caps);
+
+ do_action('ure_settings_update1');
+
+ $this->lib->flush_options();
+ $this->lib->show_message(esc_html__('User Role Editor options are updated', 'ure'));
+
+ }
+ // end of update_general_options()
+
+
+ /**
+ * Update Additional Modules Options tab
+ */
+ protected function update_addons_options() {
+
+ if (!$this->lib->multisite) {
+ $count_users_without_role = $this->lib->get_request_var('count_users_without_role', 'checkbox');
+ $this->lib->put_option('count_users_without_role', $count_users_without_role);
+ }
+ do_action('ure_settings_update2');
+
+ $this->lib->flush_options();
+ $this->lib->show_message(esc_html__('User Role Editor options are updated', 'ure'));
+ }
+ // end of update_addons_options()
+
+
+ protected function update_default_roles() {
+ global $wp_roles;
+
+ // Primary default role
+ $primary_default_role = $this->lib->get_request_var('default_user_role', 'post');
+ if (!empty($primary_default_role) && isset($wp_roles->role_objects[$primary_default_role]) && $primary_default_role !== 'administrator') {
+ update_option('default_role', $primary_default_role);
+ }
+
+ // Other default roles
+ $other_default_roles = array();
+ foreach($_POST as $key=>$value) {
+ $prefix = substr($key, 0, 8);
+ if ($prefix!=='wp_role_') {
+ continue;
+ }
+ $role_id = substr($key, 8);
+ if ($role_id!=='administrator' && isset($wp_roles->role_objects[$role_id])) {
+ $other_default_roles[] = $role_id;
+ }
+ } // foreach()
+ $this->lib->put_option('other_default_roles', $other_default_roles, true);
+
+ $this->lib->show_message(esc_html__('Default Roles are updated', 'ure'));
+ }
+ // end of update_default_roles()
+
+
+ protected function update_multisite_options() {
+ if (!$this->lib->multisite) {
+ return;
+ }
+
+ $allow_edit_users_to_not_super_admin = $this->lib->get_request_var('allow_edit_users_to_not_super_admin', 'checkbox');
+ $this->lib->put_option('allow_edit_users_to_not_super_admin', $allow_edit_users_to_not_super_admin);
+
+ do_action('ure_settings_ms_update');
+
+ $this->lib->flush_options();
+ $this->lib->show_message(esc_html__('User Role Editor options are updated', 'ure'));
+
+ }
+ // end of update_multisite_options()
+
+
+ public function settings() {
+ if (!current_user_can($this->key_capability)) {
+ esc_html__( 'You do not have sufficient permissions to manage options for User Role Editor.', 'ure' );
+ }
+ $action = $this->get_settings_action();
+ switch ($action) {
+ case 'ure_settings_update':
+ $this->update_general_options();
+ break;
+ case 'ure_addons_settings_update':
+ $this->update_addons_options();
+ break;
+ case 'ure_settings_ms_update':
+ $this->update_multisite_options();
+ break;
+ case 'ure_default_roles_update':
+ $this->update_default_roles();
+ case 'show':
+ default:
+ ;
+ } // switch()
+
+ if (defined('URE_SHOW_ADMIN_ROLE') && (URE_SHOW_ADMIN_ROLE == 1)) {
+ $show_admin_role = 1;
+ } else {
+ $show_admin_role = $this->lib->get_option('show_admin_role', 0);
+ }
+ $caps_readable = $this->lib->get_option('ure_caps_readable', 0);
+ $show_deprecated_caps = $this->lib->get_option('ure_show_deprecated_caps', 0);
+
+ if ($this->lib->multisite) {
+ $allow_edit_users_to_not_super_admin = $this->lib->get_option('allow_edit_users_to_not_super_admin', 0);
+ } else {
+ $count_users_without_role = $this->lib->get_option('count_users_without_role', 0);
+ }
+
+ $this->lib->get_default_role();
+ $this->lib->editor_init1();
+ $this->lib->role_edit_prepare_html(0);
+
+ $ure_tab_idx = $this->lib->get_request_var('ure_tab_idx', 'int');
+
+ do_action('ure_settings_load');
+
+ if ($this->lib->multisite) {
+ $link = 'settings.php';
+ } else {
+ $link = 'options-general.php';
+ }
+ require_once(URE_PLUGIN_DIR . 'includes/settings-template.php');
+ }
+ // end of settings()
+
+
+ public function admin_css_action() {
+
+ wp_enqueue_style('wp-jquery-ui-dialog');
+ if (stripos($_SERVER['REQUEST_URI'], 'settings-user-role-editor')!==false) {
+ wp_enqueue_style('ure-jquery-ui-tabs', URE_PLUGIN_URL . 'css/jquery-ui-1.10.4.custom.min.css', array(), false, 'screen');
+ }
+ wp_enqueue_style('ure-admin-css', URE_PLUGIN_URL . 'css/ure-admin.css', array(), false, 'screen');
+ }
+ // end of admin_css_action()
+
+
+ // call roles editor page
+ public function edit_roles() {
+
+ global $current_user;
+
+ if (!empty($current_user)) {
+ $user_id = $current_user->ID;
+ } else {
+ $user_id = false;
+ }
+ $ure_key_capability = $this->lib->get_key_capability();
+ if (!$this->lib->user_has_capability($current_user, $ure_key_capability)) {
+ die(esc_html__('Insufficient permissions to work with User Role Editor', 'ure'));
+ }
+
+ $this->lib->editor();
+ }
+ // end of edit_roles()
+
+
+ // move old version option to the new storage 'user_role_editor' option, array, containing all URE options
+ private function convert_option($option_name) {
+
+ $option_value = get_option($option_name, 0);
+ delete_option($option_name);
+ $this->lib->put_option( $option_name, $option_value );
+
+ }
+
+/**
+ * execute on plugin activation
+ */
+function setup() {
+
+ $this->convert_option('ure_caps_readable');
+ $this->convert_option('ure_show_deprecated_caps');
+ $this->convert_option('ure_hide_pro_banner');
+ $this->lib->flush_options();
+
+ $this->lib->make_roles_backup();
+
+ do_action('ure_activation');
+}
+// end of setup()
+
+ /**
+ * Load plugin javascript stuff
+ *
+ * @param string $hook_suffix
+ */
+ public function admin_load_js($hook_suffix){
+
+ if (class_exists('User_Role_Editor_Pro')) {
+ $ure_hook_suffixes = array('settings_page_settings-user-role-editor-pro', 'users_page_users-user-role-editor-pro');
+ } else {
+ $ure_hook_suffixes = array('settings_page_settings-user-role-editor', 'users_page_users-user-role-editor');
+ }
+ if (in_array($hook_suffix, $ure_hook_suffixes)) {
+ wp_enqueue_script('jquery-ui-dialog', false, array('jquery-ui-core','jquery-ui-button', 'jquery') );
+ wp_enqueue_script('jquery-ui-tabs', false, array('jquery-ui-core', 'jquery') );
+ wp_register_script( 'ure-js', plugins_url( '/js/ure-js.js', URE_PLUGIN_FULL_PATH ) );
+ wp_enqueue_script ( 'ure-js' );
+ wp_localize_script( 'ure-js', 'ure_data', array(
+ 'wp_nonce' => wp_create_nonce('user-role-editor'),
+ 'page_url' => URE_WP_ADMIN_URL . URE_PARENT .'?page=users-'.URE_PLUGIN_FILE,
+ 'is_multisite' => is_multisite() ? 1 : 0,
+ 'select_all' => esc_html__('Select All', 'ure'),
+ 'unselect_all' => esc_html__('Unselect All', 'ure'),
+ 'reverse' => esc_html__('Reverse', 'ure'),
+ 'update' => esc_html__('Update', 'ure'),
+ 'confirm_submit' => esc_html__('Please confirm permissions update', 'ure'),
+ 'add_new_role_title' => esc_html__('Add New Role', 'ure'),
+ 'role_name_required' => esc_html__(' Role name (ID) can not be empty!', 'ure'),
+ 'role_name_valid_chars' => esc_html__(' Role name (ID) must contain latin characters, digits, hyphens or underscore only!', 'ure'),
+ 'numeric_role_name_prohibited' => esc_html__(' WordPress does not support numeric Role name (ID). Add latin characters to it.', 'ure'),
+ 'add_role' => esc_html__('Add Role', 'ure'),
+ 'delete_role' => esc_html__('Delete Role', 'ure'),
+ 'cancel' => esc_html__('Cancel', 'ure'),
+ 'add_capability' => esc_html__('Add Capability', 'ure'),
+ 'delete_capability' => esc_html__('Delete Capability', 'ure'),
+ 'reset' => esc_html__('Reset', 'ure'),
+ 'reset_warning' => esc_html__('DANGER! Resetting will restore default settings from WordPress Core.','ure')."\n\n".
+ esc_html__('If any plugins have changed capabilities in any way upon installation (such as S2Member, WooCommerce, and many more), those capabilities will be DELETED!', 'ure')."\n\n" .
+ esc_html__('For more information on how to undo changes and restore plugin capabilities go to', 'ure')."\n".
+ 'http://role-editor.com/how-to-restore-deleted-wordpress-user-roles/'."\n\n".
+ esc_html__('Continue?', 'ure'),
+ 'default_role' => esc_html__('Default Role', 'ure'),
+ 'set_new_default_role' => esc_html__('Set New Default Role', 'ure'),
+ 'delete_capability' => esc_html__('Delete Capability', 'ure'),
+ 'delete_capability_warning' => esc_html__('Warning! Be careful - removing critical capability could crash some plugin or other custom code', 'ure'),
+ 'capability_name_required' => esc_html__(' Capability name (ID) can not be empty!', 'ure'),
+ 'capability_name_valid_chars' => esc_html__(' Capability name (ID) must contain latin characters, digits, hyphens or underscore only!', 'ure'),
+ ) );
+ // load additional JS stuff for Pro version, if exists
+ do_action('ure_load_js');
+ }
+
+}
+// end of admin_load_js()
+
+
+ protected function is_user_profile_extention_allowed() {
+ // Check if we are not at the network admin center
+ $result = stripos($_SERVER['REQUEST_URI'], 'network/user-edit.php') == false;
+
+ return $result;
+ }
+ // end of is_user_profile_extention_allowed()
+
+
+ public function edit_user_profile($user) {
+
+ global $current_user;
+
+ if (!$this->is_user_profile_extention_allowed()) {
+ return;
+ }
+ if (!$this->lib->user_is_admin($current_user->ID)) {
+ return;
+ }
+?>
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+lib->multisite) {
+?>
+
+
+
+ lib->about(); ?>
+
+
+
+
+ 
+
+ 
+ 
';
+ } else {
+ $link = '';
+ }
+
+ return $link;
+ }
+ // end of capability_help_link()
+
+
+ /**
+ * Go through all users and if user has non-existing role lower him to Subscriber role
+ *
+ */
+ protected function validate_user_roles() {
+
+ global $wp_roles;
+
+ $default_role = get_option('default_role');
+ if (empty($default_role)) {
+ $default_role = 'subscriber';
+ }
+ $users_query = new WP_User_Query(array('fields' => 'ID'));
+ $users = $users_query->get_results();
+ foreach ($users as $user_id) {
+ $user = get_user_by('id', $user_id);
+ if (is_array($user->roles) && count($user->roles) > 0) {
+ foreach ($user->roles as $role) {
+ $user_role = $role;
+ break;
+ }
+ } else {
+ $user_role = is_array($user->roles) ? '' : $user->roles;
+ }
+ if (!empty($user_role) && !isset($wp_roles->roles[$user_role])) { // role doesn't exists
+ $user->set_role($default_role); // set the lowest level role for this user
+ $user_role = '';
+ }
+
+ if (empty($user_role)) {
+ // Cleanup users level capabilities from non-existed roles
+ $cap_removed = true;
+ while (count($user->caps) > 0 && $cap_removed) {
+ foreach ($user->caps as $capability => $value) {
+ if (!isset($this->full_capabilities[$capability])) {
+ $user->remove_cap($capability);
+ $cap_removed = true;
+ break;
+ }
+ $cap_removed = false;
+ }
+ } // while ()
+ }
+ } // foreach()
+ }
+ // end of validate_user_roles()
+
+
+ protected function add_capability_to_full_caps_list($cap_id) {
+ if (!isset($this->full_capabilities[$cap_id])) {
+ $cap = array();
+ $cap['inner'] = $cap_id;
+ $cap['human'] = esc_html__($this->convert_caps_to_readable($cap_id), 'ure');
+ if (isset($this->built_in_wp_caps[$cap_id])) {
+ $cap['wp_core'] = true;
+ } else {
+ $cap['wp_core'] = false;
+ }
+
+ $this->full_capabilities[$cap_id] = $cap;
+ }
+ }
+ // end of add_capability_to_full_caps_list()
+
+
+ protected function init_full_capabilities() {
+ $this->built_in_wp_caps = $this->get_built_in_wp_caps();
+ $this->full_capabilities = array();
+ foreach ($this->roles as $role) {
+ // validate if capabilities is an array
+ if (isset($role['capabilities']) && is_array($role['capabilities'])) {
+ foreach ($role['capabilities'] as $key => $value) {
+ $this->add_capability_to_full_caps_list($key);
+ }
+ }
+ }
+ // Get Gravity Forms plugin capabilities, if available
+ if ($this->integrate_with_gravity_forms) {
+ $gf_caps = GFCommon::all_caps();
+ foreach ($gf_caps as $gf_cap) {
+ $this->add_capability_to_full_caps_list($gf_cap);
+ }
+ }
+ // provide compatibility with plugins and themes which use 'members_get_capabilities' filter from Members plugin to define their capabilities
+ $custom_caps = array();
+ $custom_caps = apply_filters( 'members_get_capabilities', $custom_caps );
+ foreach ($custom_caps as $cap) {
+ $this->add_capability_to_full_caps_list($cap);
+ }
+
+ if ($this->ure_object=='user') {
+ foreach($this->user_to_edit->caps as $key=>$value) {
+ if (!isset($this->roles[$key])) { // it is the user capability, not role
+ $this->add_capability_to_full_caps_list($key);
+ }
+ }
+ }
+
+ foreach ($this->built_in_wp_caps as $cap=>$val) {
+ if (!isset($this->full_capabilities[$cap])) {
+ $this->add_capability_to_full_caps_list($cap);
+ }
+ }
+
+ unset($this->built_in_wp_caps);
+ asort($this->full_capabilities);
+ }
+ // end of init_full_capabilities()
+
+
+ /**
+ * return WordPress user roles to its initial state, just like after installation
+ * @global WP_Roles $wp_roles
+ */
+ protected function wp_roles_reinit() {
+ global $wp_roles;
+
+ $wp_roles->roles = array();
+ $wp_roles->role_objects = array();
+ $wp_roles->role_names = array();
+ $wp_roles->use_db = true;
+
+ require_once(ABSPATH . '/wp-admin/includes/schema.php');
+ populate_roles();
+ $wp_roles->reinit();
+
+ $this->roles = $this->get_user_roles();
+
+ }
+ // end of wp_roles_reinit()
+
+ /**
+ * reset user roles to WordPress default roles
+ */
+ protected function reset_user_roles() {
+
+ $this->wp_roles_reinit();
+ if ($this->is_full_network_synch() || $this->apply_to_all) {
+ $this->current_role = '';
+ $this->direct_network_roles_update();
+ }
+ //$this->validate_user_roles(); // if user has non-existing role lower him to Subscriber role
+
+ $reload_link = wp_get_referer();
+ $reload_link = remove_query_arg('action', $reload_link);
+ ?>
+
+ roles) || !is_array($this->roles) || count($this->roles)==0) { // Nothing to save - something goes wrong - stop ...
+ return false;
+ }
+
+ return true;
+ }
+ // end of last_check_before_update()
+
+
+ // Save Roles to database
+ protected function save_roles() {
+ global $wpdb;
+
+ if (!$this->last_check_before_update()) {
+ return false;
+ }
+ if (!isset($this->roles[$this->current_role])) {
+ return false;
+ }
+
+ $this->capabilities_to_save = $this->remove_caps_not_allowed_for_single_admin($this->capabilities_to_save);
+ $this->roles[$this->current_role]['capabilities'] = $this->capabilities_to_save;
+ $option_name = $wpdb->prefix . 'user_roles';
+
+ update_option($option_name, $this->roles);
+
+ return true;
+ }
+ // end of save_roles()
+
+
+ /**
+ * Update roles for all network using direct database access - quicker in several times
+ *
+ * @global wpdb $wpdb
+ * @return boolean
+ */
+ function direct_network_roles_update() {
+ global $wpdb;
+
+ if (!$this->last_check_before_update()) {
+ return false;
+ }
+ if (!empty($this->current_role)) {
+ if (!isset($this->roles[$this->current_role])) {
+ $this->roles[$this->current_role]['name'] = $this->current_role_name;
+ }
+ $this->roles[$this->current_role]['capabilities'] = $this->capabilities_to_save;
+ }
+
+ $serialized_roles = serialize($this->roles);
+ foreach ($this->blog_ids as $blog_id) {
+ $prefix = $wpdb->get_blog_prefix($blog_id);
+ $options_table_name = $prefix . 'options';
+ $option_name = $prefix . 'user_roles';
+ $query = "update $options_table_name
+ set option_value='$serialized_roles'
+ where option_name='$option_name'
+ limit 1";
+ $wpdb->query($query);
+ if ($wpdb->last_error) {
+ $this->log_event($wpdb->last_error, true);
+ return false;
+ }
+ }
+
+ return true;
+ }
+ // end of direct_network_roles_update()
+
+
+ protected function wp_api_network_roles_update() {
+ global $wpdb;
+
+ $result = true;
+ $old_blog = $wpdb->blogid;
+ foreach ($this->blog_ids as $blog_id) {
+ switch_to_blog($blog_id);
+ $this->roles = $this->get_user_roles();
+ if (!isset($this->roles[$this->current_role])) { // add new role to this blog
+ $this->roles[$this->current_role] = array('name' => $this->current_role_name, 'capabilities' => array('read' => 1));
+ }
+ if (!$this->save_roles()) {
+ $result = false;
+ break;
+ }
+ }
+ switch_to_blog($old_blog);
+ // cleanup blog switching data
+ $GLOBALS['_wp_switched_stack'] = array();
+ $GLOBALS['switched'] = ! empty( $GLOBALS['_wp_switched_stack'] );
+ $this->roles = $this->get_user_roles();
+
+ return $result;
+ }
+ // end of wp_api_network_roles_update()
+
+
+ /**
+ * Update role for all network using WordPress API
+ *
+ * @return boolean
+ */
+ protected function multisite_update_roles() {
+
+ if (defined('URE_DEBUG') && URE_DEBUG) {
+ $time_shot = microtime();
+ }
+
+ if ($this->is_full_network_synch()) {
+ $result = $this->direct_network_roles_update();
+ } else {
+ $result = $this->wp_api_network_roles_update();
+ }
+
+ if (defined('URE_DEBUG') && URE_DEBUG) {
+ echo '