if ( ! current_user_can( 'remove_users' ) ) {

[500] Fix | Delete

$error = new WP_Error( 'edit_users', __( 'Sorry, you are not allowed to remove users.' ) );

[501] Fix | Delete

}

[502] Fix | Delete

[503] Fix | Delete

if ( empty( $_REQUEST['users'] ) ) {

[504] Fix | Delete

$user_ids = array( (int) $_REQUEST['user'] );

[505] Fix | Delete

} else {

[506] Fix | Delete

$user_ids = array_map( 'intval', (array) $_REQUEST['users'] );

[507] Fix | Delete

}

[508] Fix | Delete

[509] Fix | Delete

require_once ABSPATH . 'wp-admin/admin-header.php';

[510] Fix | Delete

?>

[511] Fix | Delete

<form method="post" name="updateusers" id="updateusers">

[512] Fix | Delete

<?php wp_nonce_field( 'remove-users' ); ?>

[513] Fix | Delete

<?php echo $referer; ?>

[514] Fix | Delete

[515] Fix | Delete

<div class="wrap">

[516] Fix | Delete

<h1><?php _e( 'Remove Users from Site' ); ?></h1>

[517] Fix | Delete

[518] Fix | Delete

<?php if ( 1 === count( $user_ids ) ) : ?>

[519] Fix | Delete

<p><?php _e( 'You have specified this user for removal:' ); ?></p>

[520] Fix | Delete

<?php else : ?>

[521] Fix | Delete

<p><?php _e( 'You have specified these users for removal:' ); ?></p>

[522] Fix | Delete

<?php endif; ?>

[523] Fix | Delete

[524] Fix | Delete

<ul>

[525] Fix | Delete

<?php

[526] Fix | Delete

$go_remove = false;

[527] Fix | Delete

[528] Fix | Delete

foreach ( $user_ids as $id ) {

[529] Fix | Delete

$user = get_userdata( $id );

[530] Fix | Delete

[531] Fix | Delete

if ( ! current_user_can( 'remove_user', $id ) ) {

[532] Fix | Delete

echo '<li>';

[533] Fix | Delete

printf(

[534] Fix | Delete

/* translators: 1: User ID, 2: User login. */

[535] Fix | Delete

__( 'ID #%1$s: %2$s <strong>Sorry, you are not allowed to remove this user.</strong>' ),

[536] Fix | Delete

$id,

[537] Fix | Delete

$user->user_login

[538] Fix | Delete

);

[539] Fix | Delete

echo "</li>\n";

[540] Fix | Delete

} else {

[541] Fix | Delete

echo '<li>';

[542] Fix | Delete

printf(

[543] Fix | Delete

'<input type="hidden" name="users[]" value="%s" />',

[544] Fix | Delete

esc_attr( $id )

[545] Fix | Delete

);

[546] Fix | Delete

printf(

[547] Fix | Delete

/* translators: 1: User ID, 2: User login. */

[548] Fix | Delete

__( 'ID #%1$s: %2$s' ),

[549] Fix | Delete

$id,

[550] Fix | Delete

$user->user_login

[551] Fix | Delete

);

[552] Fix | Delete

echo "</li>\n";

[553] Fix | Delete

[554] Fix | Delete

$go_remove = true;

[555] Fix | Delete

}

[556] Fix | Delete

}

[557] Fix | Delete

?>

[558] Fix | Delete

</ul>

[559] Fix | Delete

[560] Fix | Delete

<?php if ( $go_remove ) : ?>

[561] Fix | Delete

[562] Fix | Delete

<input type="hidden" name="action" value="doremove" />

[563] Fix | Delete

<?php submit_button( __( 'Confirm Removal' ), 'primary' ); ?>

[564] Fix | Delete

[565] Fix | Delete

<?php else : ?>

[566] Fix | Delete

[567] Fix | Delete

<p><?php _e( 'There are no valid users selected for removal.' ); ?></p>

[568] Fix | Delete

[569] Fix | Delete

<?php endif; ?>

[570] Fix | Delete

</div><!-- .wrap -->

[571] Fix | Delete

</form><!-- #updateusers -->

[572] Fix | Delete

<?php

[573] Fix | Delete

[574] Fix | Delete

break;

[575] Fix | Delete

[576] Fix | Delete

default:

[577] Fix | Delete

if ( ! empty( $_GET['_wp_http_referer'] ) ) {

[578] Fix | Delete

wp_redirect( remove_query_arg( array( '_wp_http_referer', '_wpnonce' ), wp_unslash( $_SERVER['REQUEST_URI'] ) ) );

[579] Fix | Delete

exit;

[580] Fix | Delete

}

[581] Fix | Delete

[582] Fix | Delete

if ( $wp_list_table->current_action() && ! empty( $_REQUEST['users'] ) ) {

[583] Fix | Delete

$screen = get_current_screen()->id;

[584] Fix | Delete

$sendback = wp_get_referer();

[585] Fix | Delete

$user_ids = array_map( 'intval', (array) $_REQUEST['users'] );

[586] Fix | Delete

[587] Fix | Delete

/** This action is documented in wp-admin/edit.php */

[588] Fix | Delete

$sendback = apply_filters( "handle_bulk_actions-{$screen}", $sendback, $wp_list_table->current_action(), $user_ids ); // phpcs:ignore WordPress.NamingConventions.ValidHookName.UseUnderscores

[589] Fix | Delete

[590] Fix | Delete

wp_safe_redirect( $sendback );

[591] Fix | Delete

exit;

[592] Fix | Delete

}

[593] Fix | Delete

[594] Fix | Delete

$wp_list_table->prepare_items();

[595] Fix | Delete

$total_pages = $wp_list_table->get_pagination_arg( 'total_pages' );

[596] Fix | Delete

[597] Fix | Delete

if ( $pagenum > $total_pages && $total_pages > 0 ) {

[598] Fix | Delete

wp_redirect( add_query_arg( 'paged', $total_pages ) );

[599] Fix | Delete

exit;

[600] Fix | Delete

}

[601] Fix | Delete

[602] Fix | Delete

require_once ABSPATH . 'wp-admin/admin-header.php';

[603] Fix | Delete

[604] Fix | Delete

$messages = array();

[605] Fix | Delete

if ( isset( $_GET['update'] ) ) :

[606] Fix | Delete

switch ( $_GET['update'] ) {

[607] Fix | Delete

case 'del':

[608] Fix | Delete

case 'del_many':

[609] Fix | Delete

$delete_count = isset( $_GET['delete_count'] ) ? (int) $_GET['delete_count'] : 0;

[610] Fix | Delete

if ( 1 === $delete_count ) {

[611] Fix | Delete

$message = __( 'User deleted.' );

[612] Fix | Delete

} else {

[613] Fix | Delete

/* translators: %s: Number of users. */

[614] Fix | Delete

$message = _n( '%s user deleted.', '%s users deleted.', $delete_count );

[615] Fix | Delete

}

[616] Fix | Delete

$message = sprintf( $message, number_format_i18n( $delete_count ) );

[617] Fix | Delete

$messages[] = wp_get_admin_notice(

[618] Fix | Delete

$message,

[619] Fix | Delete

array(

[620] Fix | Delete

'id' => 'message',

[621] Fix | Delete

'additional_classes' => array( 'updated' ),

[622] Fix | Delete

'dismissible' => true,

[623] Fix | Delete

)

[624] Fix | Delete

);

[625] Fix | Delete

break;

[626] Fix | Delete

case 'add':

[627] Fix | Delete

$message = __( 'New user created.' );

[628] Fix | Delete

$user_id = isset( $_GET['id'] ) ? $_GET['id'] : false;

[629] Fix | Delete

if ( $user_id && current_user_can( 'edit_user', $user_id ) ) {

[630] Fix | Delete

$message .= sprintf(

[631] Fix | Delete

' <a href="%1$s">%2$s</a>',

[632] Fix | Delete

esc_url(

[633] Fix | Delete

add_query_arg(

[634] Fix | Delete

'wp_http_referer',

[635] Fix | Delete

urlencode( wp_unslash( $_SERVER['REQUEST_URI'] ) ),

[636] Fix | Delete

self_admin_url( 'user-edit.php?user_id=' . $user_id )

[637] Fix | Delete

)

[638] Fix | Delete

),

[639] Fix | Delete

__( 'Edit user' )

[640] Fix | Delete

);

[641] Fix | Delete

}

[642] Fix | Delete

[643] Fix | Delete

$messages[] = wp_get_admin_notice(

[644] Fix | Delete

$message,

[645] Fix | Delete

array(

[646] Fix | Delete

'id' => 'message',

[647] Fix | Delete

'additional_classes' => array( 'updated' ),

[648] Fix | Delete

'dismissible' => true,

[649] Fix | Delete

)

[650] Fix | Delete

);

[651] Fix | Delete

break;

[652] Fix | Delete

case 'resetpassword':

[653] Fix | Delete

$reset_count = isset( $_GET['reset_count'] ) ? (int) $_GET['reset_count'] : 0;

[654] Fix | Delete

if ( 1 === $reset_count ) {

[655] Fix | Delete

$message = __( 'Password reset link sent.' );

[656] Fix | Delete

} else {

[657] Fix | Delete

/* translators: %s: Number of users. */

[658] Fix | Delete

$message = _n( 'Password reset links sent to %s user.', 'Password reset links sent to %s users.', $reset_count );

[659] Fix | Delete

}

[660] Fix | Delete

$message = sprintf( $message, number_format_i18n( $reset_count ) );

[661] Fix | Delete

$messages[] = wp_get_admin_notice(

[662] Fix | Delete

$message,

[663] Fix | Delete

array(

[664] Fix | Delete

'id' => 'message',

[665] Fix | Delete

'additional_classes' => array( 'updated' ),

[666] Fix | Delete

'dismissible' => true,

[667] Fix | Delete

)

[668] Fix | Delete

);

[669] Fix | Delete

break;

[670] Fix | Delete

case 'promote':

[671] Fix | Delete

$messages[] = wp_get_admin_notice(

[672] Fix | Delete

__( 'Changed roles.' ),

[673] Fix | Delete

array(

[674] Fix | Delete

'id' => 'message',

[675] Fix | Delete

'additional_classes' => array( 'updated' ),

[676] Fix | Delete

'dismissible' => true,

[677] Fix | Delete

)

[678] Fix | Delete

);

[679] Fix | Delete

break;

[680] Fix | Delete

case 'err_admin_role':

[681] Fix | Delete

$messages[] = wp_get_admin_notice(

[682] Fix | Delete

__( 'The current user&#8217;s role must have user editing capabilities.' ),

[683] Fix | Delete

array(

[684] Fix | Delete

'id' => 'message',

[685] Fix | Delete

'additional_classes' => array( 'error' ),

[686] Fix | Delete

'dismissible' => true,

[687] Fix | Delete

)

[688] Fix | Delete

);

[689] Fix | Delete

$messages[] = wp_get_admin_notice(

[690] Fix | Delete

__( 'Other user roles have been changed.' ),

[691] Fix | Delete

array(

[692] Fix | Delete

'id' => 'message',

[693] Fix | Delete

'additional_classes' => array( 'updated' ),

[694] Fix | Delete

'dismissible' => true,

[695] Fix | Delete

)

[696] Fix | Delete

);

[697] Fix | Delete

break;

[698] Fix | Delete

case 'err_admin_del':

[699] Fix | Delete

$messages[] = wp_get_admin_notice(

[700] Fix | Delete

__( 'You cannot delete the current user.' ),

[701] Fix | Delete

array(

[702] Fix | Delete

'id' => 'message',

[703] Fix | Delete

'additional_classes' => array( 'error' ),

[704] Fix | Delete

'dismissible' => true,

[705] Fix | Delete

)

[706] Fix | Delete

);

[707] Fix | Delete

$messages[] = wp_get_admin_notice(

[708] Fix | Delete

__( 'Other users have been deleted.' ),

[709] Fix | Delete

array(

[710] Fix | Delete

'id' => 'message',

[711] Fix | Delete

'additional_classes' => array( 'updated' ),

[712] Fix | Delete

'dismissible' => true,

[713] Fix | Delete

)

[714] Fix | Delete

);

[715] Fix | Delete

break;

[716] Fix | Delete

case 'remove':

[717] Fix | Delete

$messages[] = wp_get_admin_notice(

[718] Fix | Delete

__( 'User removed from this site.' ),

[719] Fix | Delete

array(

[720] Fix | Delete

'id' => 'message',

[721] Fix | Delete

'additional_classes' => array( 'updated', 'fade' ),

[722] Fix | Delete

'dismissible' => true,

[723] Fix | Delete

)

[724] Fix | Delete

);

[725] Fix | Delete

break;

[726] Fix | Delete

case 'err_admin_remove':

[727] Fix | Delete

$messages[] = wp_get_admin_notice(

[728] Fix | Delete

__( 'You cannot remove the current user.' ),

[729] Fix | Delete

array(

[730] Fix | Delete

'id' => 'message',

[731] Fix | Delete

'additional_classes' => array( 'error' ),

[732] Fix | Delete

'dismissible' => true,

[733] Fix | Delete

)

[734] Fix | Delete

);

[735] Fix | Delete

$messages[] = wp_get_admin_notice(

[736] Fix | Delete

__( 'Other users have been removed.' ),

[737] Fix | Delete

array(

[738] Fix | Delete

'id' => 'message',

[739] Fix | Delete

'additional_classes' => array( 'updated', 'fade' ),

[740] Fix | Delete

'dismissible' => true,

[741] Fix | Delete

)

[742] Fix | Delete

);

[743] Fix | Delete

break;

[744] Fix | Delete

}

[745] Fix | Delete

endif;

[746] Fix | Delete

?>

[747] Fix | Delete

[748] Fix | Delete

<?php

[749] Fix | Delete

if ( isset( $errors ) && is_wp_error( $errors ) ) :

[750] Fix | Delete

$error_message = '';

[751] Fix | Delete

foreach ( $errors->get_error_messages() as $err ) {

[752] Fix | Delete

$error_message .= "<li>$err</li>\n";

[753] Fix | Delete

}

[754] Fix | Delete

wp_admin_notice(

[755] Fix | Delete

'<ul>' . $error_message . '</ul>',

[756] Fix | Delete

array(

[757] Fix | Delete

'additional_classes' => array( 'error' ),

[758] Fix | Delete

)

[759] Fix | Delete

);

[760] Fix | Delete

endif;

[761] Fix | Delete

[762] Fix | Delete

if ( ! empty( $messages ) ) {

[763] Fix | Delete

foreach ( $messages as $msg ) {

[764] Fix | Delete

echo $msg;

[765] Fix | Delete

}

[766] Fix | Delete

}

[767] Fix | Delete

?>

[768] Fix | Delete

[769] Fix | Delete

<div class="wrap">

[770] Fix | Delete

<h1 class="wp-heading-inline">

[771] Fix | Delete

<?php echo esc_html( $title ); ?>

[772] Fix | Delete

</h1>

[773] Fix | Delete

[774] Fix | Delete

<?php

[775] Fix | Delete

if ( current_user_can( 'create_users' ) ) {

[776] Fix | Delete

printf(

[777] Fix | Delete

'<a href="%1$s" class="page-title-action">%2$s</a>',

[778] Fix | Delete

esc_url( admin_url( 'user-new.php' ) ),

[779] Fix | Delete

esc_html__( 'Add User' )

[780] Fix | Delete

);

[781] Fix | Delete

} elseif ( is_multisite() && current_user_can( 'promote_users' ) ) {

[782] Fix | Delete

printf(

[783] Fix | Delete

'<a href="%1$s" class="page-title-action">%2$s</a>',

[784] Fix | Delete

esc_url( admin_url( 'user-new.php' ) ),

[785] Fix | Delete

esc_html__( 'Add Existing User' )

[786] Fix | Delete

);

[787] Fix | Delete

}

[788] Fix | Delete

[789] Fix | Delete

if ( strlen( $usersearch ) ) {

[790] Fix | Delete

echo '<span class="subtitle">';

[791] Fix | Delete

printf(

[792] Fix | Delete

/* translators: %s: Search query. */

[793] Fix | Delete

__( 'Search results for: %s' ),

[794] Fix | Delete

'<strong>' . esc_html( $usersearch ) . '</strong>'

[795] Fix | Delete

);

[796] Fix | Delete

echo '</span>';

[797] Fix | Delete

}

[798] Fix | Delete

?>

[799] Fix | Delete

[800] Fix | Delete

<hr class="wp-header-end">

[801] Fix | Delete

[802] Fix | Delete

<?php $wp_list_table->views(); ?>

[803] Fix | Delete

[804] Fix | Delete

<form method="get">

[805] Fix | Delete

[806] Fix | Delete

<?php $wp_list_table->search_box( __( 'Search Users' ), 'user' ); ?>

[807] Fix | Delete

[808] Fix | Delete

<?php if ( ! empty( $_REQUEST['role'] ) ) { ?>

[809] Fix | Delete

<input type="hidden" name="role" value="<?php echo esc_attr( $_REQUEST['role'] ); ?>" />

[810] Fix | Delete

<?php } ?>

[811] Fix | Delete

[812] Fix | Delete

<?php $wp_list_table->display(); ?>

[813] Fix | Delete

[814] Fix | Delete

</form>

[815] Fix | Delete

[816] Fix | Delete

<div class="clear"></div>

[817] Fix | Delete

</div><!-- .wrap -->

[818] Fix | Delete

<?php

[819] Fix | Delete

break;

[820] Fix | Delete

[821] Fix | Delete

} // End of the $doaction switch.

[822] Fix | Delete

[823] Fix | Delete

require_once ABSPATH . 'wp-admin/admin-footer.php';

[824] Fix | Delete

[825] Fix | Delete