[Summary view] [Print] [Text view]

   1  <?php
   2  /**
   3   * Add Site Administration Screen
   4   *
   5   * @package WordPress
   6   * @subpackage Multisite
   7   * @since 3.1.0
   8   */
   9  
  10  /** Load WordPress Administration Bootstrap */
  11  require_once  __DIR__ . '/admin.php';
  12  
  13  /** WordPress Translation Installation API */
  14  require_once  ABSPATH . 'wp-admin/includes/translation-install.php';
  15  
  16  if ( ! current_user_can( 'create_sites' ) ) {
  17      wp_die( __( 'Sorry, you are not allowed to add sites to this network.' ) );
  18  }
  19  
  20  get_current_screen()->add_help_tab(
  21      array(
  22          'id'      => 'overview',
  23          'title'   => __( 'Overview' ),
  24          'content' =>
  25              '<p>' . __( 'This screen is for Super Admins to add new sites to the network. This is not affected by the registration settings.' ) . '</p>' .
  26              '<p>' . __( 'If the admin email for the new site does not exist in the database, a new user will also be created.' ) . '</p>',
  27      )
  28  );
  29  
  30  get_current_screen()->set_help_sidebar(
  31      '<p><strong>' . __( 'For more information:' ) . '</strong></p>' .
  32      '<p>' . __( '<a href="https://developer.wordpress.org/advanced-administration/multisite/admin/#network-admin-sites-screen">Documentation on Site Management</a>' ) . '</p>' .
  33      '<p>' . __( '<a href="https://wordpress.org/support/forum/multisite/">Support forums</a>' ) . '</p>'
  34  );
  35  
  36  if ( isset( $_REQUEST['action'] ) && 'add-site' === $_REQUEST['action'] ) {
  37      check_admin_referer( 'add-blog', '_wpnonce_add-blog' );
  38  
  39      if ( ! is_array( $_POST['blog'] ) ) {
  40          wp_die( __( 'Cannot create an empty site.' ) );
  41      }
  42  
  43      $blog   = $_POST['blog'];
  44      $domain = '';
  45  
  46      $blog['domain'] = trim( $blog['domain'] );
  47      if ( preg_match( '|^([a-zA-Z0-9-])+$|', $blog['domain'] ) ) {
  48          $domain = strtolower( $blog['domain'] );
  49      }
  50  
  51      // If not a subdomain installation, make sure the domain isn't a reserved word.
  52      if ( ! is_subdomain_install() ) {
  53          $subdirectory_reserved_names = get_subdirectory_reserved_names();
  54  
  55          if ( in_array( $domain, $subdirectory_reserved_names, true ) ) {
  56              wp_die(
  57                  sprintf(
  58                      /* translators: %s: Reserved names list. */
  59                      __( 'The following words are reserved for use by WordPress functions and cannot be used as site names: %s' ),
  60                      '<code>' . implode( '</code>, <code>', $subdirectory_reserved_names ) . '</code>'
  61                  )
  62              );
  63          }
  64      }
  65  
  66      $title = $blog['title'];
  67  
  68      $meta = array(
  69          'public' => 1,
  70      );
  71  
  72      // Handle translation installation for the new site.
  73      if ( isset( $_POST['WPLANG'] ) ) {
  74          if ( '' === $_POST['WPLANG'] ) {
  75              $meta['WPLANG'] = ''; // en_US
  76          } elseif ( in_array( $_POST['WPLANG'], get_available_languages(), true ) ) {
  77              $meta['WPLANG'] = $_POST['WPLANG'];
  78          } elseif ( current_user_can( 'install_languages' ) && wp_can_install_language_pack() ) {
  79              $language = wp_download_language_pack( wp_unslash( $_POST['WPLANG'] ) );
  80              if ( $language ) {
  81                  $meta['WPLANG'] = $language;
  82              }
  83          }
  84      }
  85  
  86      if ( empty( $title ) ) {
  87          wp_die( __( 'Missing site title.' ) );
  88      }
  89  
  90      if ( empty( $domain ) ) {
  91          wp_die( __( 'Missing or invalid site address.' ) );
  92      }
  93  
  94      if ( isset( $blog['email'] ) && '' === trim( $blog['email'] ) ) {
  95          wp_die( __( 'Missing email address.' ) );
  96      }
  97  
  98      $email = sanitize_email( $blog['email'] );
  99      if ( ! is_email( $email ) ) {
 100          wp_die( __( 'Invalid email address.' ) );
 101      }
 102  
 103      if ( is_subdomain_install() ) {
 104          $newdomain = $domain . '.' . preg_replace( '|^www\.|', '', get_network()->domain );
 105          $path      = get_network()->path;
 106      } else {
 107          $newdomain = get_network()->domain;
 108          $path      = get_network()->path . $domain . '/';
 109      }
 110  
 111      $password = 'N/A';
 112      $user_id  = email_exists( $email );
 113      if ( ! $user_id ) { // Create a new user with a random password.
 114          /**
 115           * Fires immediately before a new user is created via the network site-new.php page.
 116           *
 117           * @since 4.5.0
 118           *
 119           * @param string $email Email of the non-existent user.
 120           */
 121          do_action( 'pre_network_site_new_created_user', $email );
 122  
 123          $user_id = username_exists( $domain );
 124          if ( $user_id ) {
 125              wp_die( __( 'The domain or path entered conflicts with an existing username.' ) );
 126          }
 127          $password = wp_generate_password( 12, false );
 128          $user_id  = wpmu_create_user( $domain, $password, $email );
 129          if ( false === $user_id ) {
 130              wp_die( __( 'There was an error creating the user.' ) );
 131          }
 132  
 133          /**
 134           * Fires after a new user has been created via the network site-new.php page.
 135           *
 136           * @since 4.4.0
 137           *
 138           * @param int $user_id ID of the newly created user.
 139           */
 140          do_action( 'network_site_new_created_user', $user_id );
 141      }
 142  
 143      /**
 144       * @global wpdb $wpdb WordPress database abstraction object.
 145       */
 146      global $wpdb;
 147  
 148      $wpdb->hide_errors();
 149      $id = wpmu_create_blog( $newdomain, $path, $title, $user_id, $meta, get_current_network_id() );
 150      $wpdb->show_errors();
 151  
 152      if ( ! is_wp_error( $id ) ) {
 153          if ( ! is_super_admin( $user_id ) && ! get_user_option( 'primary_blog', $user_id ) ) {
 154              update_user_option( $user_id, 'primary_blog', $id, true );
 155          }
 156  
 157          wpmu_new_site_admin_notification( $id, $user_id );
 158          wpmu_welcome_notification( $id, $user_id, $password, $title, array( 'public' => 1 ) );
 159          wp_redirect(
 160              add_query_arg(
 161                  array(
 162                      'update' => 'added',
 163                      'id'     => $id,
 164                  ),
 165                  'site-new.php'
 166              )
 167          );
 168          exit;
 169      } else {
 170          wp_die( $id->get_error_message() );
 171      }
 172  }
 173  
 174  if ( isset( $_GET['update'] ) ) {
 175      $messages = array();
 176      if ( 'added' === $_GET['update'] ) {
 177          $messages[] = sprintf(
 178              /* translators: 1: Dashboard URL, 2: Network admin edit URL. */
 179              __( 'Site added. <a href="%1$s">Visit Dashboard</a> or <a href="%2$s">Edit Site</a>' ),
 180              esc_url( get_admin_url( absint( $_GET['id'] ) ) ),
 181              network_admin_url( 'site-info.php?id=' . absint( $_GET['id'] ) )
 182          );
 183      }
 184  }
 185  
 186  // Used in the HTML title tag.
 187  $title       = __( 'Add Site' );
 188  $parent_file = 'sites.php';
 189  
 190  wp_enqueue_script( 'user-suggest' );
 191  
 192  require_once  ABSPATH . 'wp-admin/admin-header.php';
 193  
 194  ?>
 195  
 196  <div class="wrap">
 197  <h1 id="add-new-site"><?php _e( 'Add Site' ); ?></h1>
 198  <?php
 199  if ( ! empty( $messages ) ) {
 200      $notice_args = array(
 201          'type'        => 'success',
 202          'dismissible' => true,
 203          'id'          => 'message',
 204      );
 205  
 206      foreach ( $messages as $msg ) {
 207          wp_admin_notice( $msg, $notice_args );
 208      }
 209  }
 210  ?>
 211  <p><?php echo wp_required_field_message(); ?></p>
 212  <form method="post" enctype="multipart/form-data" action="<?php echo esc_url( network_admin_url( 'site-new.php?action=add-site' ) ); ?>" novalidate="novalidate">
 213  <?php wp_nonce_field( 'add-blog', '_wpnonce_add-blog' ); ?>
 214      <table class="form-table" role="presentation">
 215          <tr class="form-field form-required">
 216              <th scope="row">
 217                  <label for="site-address">
 218                      <?php
 219                      _e( 'Site Address (URL)' );
 220                      echo ' ' . wp_required_field_indicator();
 221                      ?>
 222                  </label>
 223              </th>
 224              <td>
 225                  <span class="code">
 226                      <?php if ( is_subdomain_install() ) : ?>
 227                          <input name="blog[domain]" type="text" class="regular-text code" id="site-address" aria-describedby="site-address-desc" autocapitalize="none" autocorrect="off" required /><!--
 228                          --><code class="no-break"><?php echo esc_html( '.' . preg_replace( '|^www\.|', '', get_network()->domain ) ); ?></code>
 229                      <?php else : ?>
 230                          <code class="no-break"><?php echo esc_html( get_network()->domain . get_network()->path ); ?></code><!--
 231                          --><input name="blog[domain]" type="text" class="regular-text code" id="site-address" aria-describedby="site-address-desc" autocapitalize="none" autocorrect="off" required />
 232                      <?php endif; ?>
 233                  </span>
 234                  <p class="description" id="site-address-desc">
 235                      <?php _e( 'Only lowercase letters (a-z), numbers, and hyphens are allowed.' ); ?>
 236                  </p>
 237              </td>
 238          </tr>
 239          <tr class="form-field form-required">
 240              <th scope="row">
 241                  <label for="site-title">
 242                      <?php
 243                      _e( 'Site Title' );
 244                      echo ' ' . wp_required_field_indicator();
 245                      ?>
 246                  </label>
 247              </th>
 248              <td><input name="blog[title]" type="text" class="regular-text" id="site-title" required /></td>
 249          </tr>
 250          <?php
 251          $languages    = get_available_languages();
 252          $translations = wp_get_available_translations();
 253          if ( ! empty( $languages ) || ! empty( $translations ) ) :
 254              ?>
 255              <tr class="form-field form-required">
 256                  <th scope="row"><label for="site-language"><?php _e( 'Site Language' ); ?><span class="dashicons dashicons-translation" aria-hidden="true"></span></label></th>
 257                  <td>
 258                      <?php
 259                      // Network default.
 260                      $lang = get_site_option( 'WPLANG' );
 261  
 262                      // Use English if the default isn't available.
 263                      if ( ! in_array( $lang, $languages, true ) ) {
 264                          $lang = '';
 265                      }
 266  
 267                      wp_dropdown_languages(
 268                          array(
 269                              'name'                        => 'WPLANG',
 270                              'id'                          => 'site-language',
 271                              'selected'                    => $lang,
 272                              'languages'                   => $languages,
 273                              'translations'                => $translations,
 274                              'show_available_translations' => current_user_can( 'install_languages' ) && wp_can_install_language_pack(),
 275                          )
 276                      );
 277                      ?>
 278                  </td>
 279              </tr>
 280          <?php endif; // Languages. ?>
 281          <tr class="form-field form-required">
 282              <th scope="row">
 283                  <label for="admin-email">
 284                      <?php
 285                      _e( 'Admin Email' );
 286                      echo ' ' . wp_required_field_indicator();
 287                      ?>
 288                  </label>
 289              </th>
 290              <td><input name="blog[email]" type="email" class="regular-text wp-suggest-user" id="admin-email" data-autocomplete-type="search" data-autocomplete-field="user_email" aria-describedby="site-admin-email" required /></td>
 291          </tr>
 292          <tr class="form-field">
 293              <td colspan="2" class="td-full"><p id="site-admin-email"><?php _e( 'A new user will be created if the above email address is not in the database.' ); ?><br /><?php _e( 'The username and a link to set the password will be mailed to this email address.' ); ?></p></td>
 294          </tr>
 295      </table>
 296  
 297      <?php
 298      /**
 299       * Fires at the end of the new site form in network admin.
 300       *
 301       * @since 4.5.0
 302       */
 303      do_action( 'network_site_new_form' );
 304  
 305      submit_button( __( 'Add Site' ), 'primary', 'add-site' );
 306      ?>
 307      </form>
 308  </div>
 309  <?php
 310  require_once  ABSPATH . 'wp-admin/admin-footer.php';