[Summary view] [Print] [Text view]

   1  <?php
   2  /**
   3   * Edit Site Settings Administration Screen
   4   *
   5   * @package WordPress
   6   * @subpackage Multisite
   7   * @since 3.1.0
   8   */
   9  
  10  /** Load WordPress Administration Bootstrap */
  11  require_once  __DIR__ . '/admin.php';
  12  
  13  if ( ! current_user_can( 'manage_sites' ) ) {
  14      wp_die( __( 'Sorry, you are not allowed to edit this site.' ) );
  15  }
  16  
  17  get_current_screen()->add_help_tab( get_site_screen_help_tab_args() );
  18  get_current_screen()->set_help_sidebar( get_site_screen_help_sidebar_content() );
  19  
  20  $id = isset( $_REQUEST['id'] ) ? (int) $_REQUEST['id'] : 0;
  21  
  22  if ( ! $id ) {
  23      wp_die( __( 'Invalid site ID.' ) );
  24  }
  25  
  26  $details = get_site( $id );
  27  if ( ! $details ) {
  28      wp_die( __( 'The requested site does not exist.' ) );
  29  }
  30  
  31  if ( ! can_edit_network( $details->site_id ) ) {
  32      wp_die( __( 'Sorry, you are not allowed to access this page.' ), 403 );
  33  }
  34  
  35  $is_main_site = is_main_site( $id );
  36  
  37  if ( isset( $_REQUEST['action'] ) && 'update-site' === $_REQUEST['action'] && is_array( $_POST['option'] ) ) {
  38      check_admin_referer( 'edit-site' );
  39  
  40      switch_to_blog( $id );
  41  
  42      $skip_options = array( 'allowedthemes' ); // Don't update these options since they are handled elsewhere in the form.
  43      foreach ( (array) $_POST['option'] as $key => $val ) {
  44          $key = wp_unslash( $key );
  45          $val = wp_unslash( $val );
  46          if ( 0 === $key || is_array( $val ) || in_array( $key, $skip_options, true ) ) {
  47              continue; // Avoids "0 is a protected WP option and may not be modified" error when editing blog options.
  48          }
  49          update_option( $key, $val );
  50      }
  51  
  52      /**
  53       * Fires after the site options are updated.
  54       *
  55       * @since 3.0.0
  56       * @since 4.4.0 Added `$id` parameter.
  57       *
  58       * @param int $id The ID of the site being updated.
  59       */
  60      do_action( 'wpmu_update_blog_options', $id );
  61  
  62      restore_current_blog();
  63      wp_redirect(
  64          add_query_arg(
  65              array(
  66                  'update' => 'updated',
  67                  'id'     => $id,
  68              ),
  69              'site-settings.php'
  70          )
  71      );
  72      exit;
  73  }
  74  
  75  if ( isset( $_GET['update'] ) ) {
  76      $messages = array();
  77      if ( 'updated' === $_GET['update'] ) {
  78          $messages[] = __( 'Site options updated.' );
  79      }
  80  }
  81  
  82  // Used in the HTML title tag.
  83  /* translators: %s: Site title. */
  84  $title = sprintf( __( 'Edit Site: %s' ), esc_html( $details->blogname ) );
  85  
  86  $parent_file  = 'sites.php';
  87  $submenu_file = 'sites.php';
  88  
  89  require_once  ABSPATH . 'wp-admin/admin-header.php';
  90  
  91  ?>
  92  
  93  <div class="wrap">
  94  <h1 id="edit-site"><?php echo $title; ?></h1>
  95  <p class="edit-site-actions"><a href="<?php echo esc_url( get_home_url( $id, '/' ) ); ?>"><?php _e( 'Visit' ); ?></a> | <a href="<?php echo esc_url( get_admin_url( $id ) ); ?>"><?php _e( 'Dashboard' ); ?></a></p>
  96  
  97  <?php
  98  
  99  network_edit_site_nav(
 100      array(
 101          'blog_id'  => $id,
 102          'selected' => 'site-settings',
 103      )
 104  );
 105  
 106  if ( ! empty( $messages ) ) {
 107      $notice_args = array(
 108          'type'        => 'success',
 109          'dismissible' => true,
 110          'id'          => 'message',
 111      );
 112  
 113      foreach ( $messages as $msg ) {
 114          wp_admin_notice( $msg, $notice_args );
 115      }
 116  }
 117  ?>
 118  <form method="post" action="site-settings.php?action=update-site">
 119      <?php wp_nonce_field( 'edit-site' ); ?>
 120      <input type="hidden" name="id" value="<?php echo esc_attr( $id ); ?>" />
 121      <table class="form-table" role="presentation">
 122          <?php
 123          $blog_prefix = $wpdb->get_blog_prefix( $id );
 124          $sql         = "SELECT * FROM {$blog_prefix}options
 125              WHERE option_name NOT LIKE %s
 126              AND option_name NOT LIKE %s";
 127          $query       = $wpdb->prepare(
 128              $sql,
 129              $wpdb->esc_like( '_' ) . '%',
 130              '%' . $wpdb->esc_like( 'user_roles' )
 131          );
 132          $options     = $wpdb->get_results( $query );
 133  
 134          foreach ( $options as $option ) {
 135              if ( 'default_role' === $option->option_name ) {
 136                  $editblog_default_role = $option->option_value;
 137              }
 138  
 139              $disabled = false;
 140              $class    = 'all-options';
 141  
 142              if ( is_serialized( $option->option_value ) ) {
 143                  if ( is_serialized_string( $option->option_value ) ) {
 144                      $option->option_value = esc_html( maybe_unserialize( $option->option_value ) );
 145                  } else {
 146                      $option->option_value = 'SERIALIZED DATA';
 147                      $disabled             = true;
 148                      $class                = 'all-options disabled';
 149                  }
 150              }
 151  
 152              if ( str_contains( $option->option_value, "\n" ) ) {
 153                  ?>
 154                  <tr class="form-field">
 155                      <th scope="row"><label for="<?php echo esc_attr( $option->option_name ); ?>" class="code"><?php echo esc_html( $option->option_name ); ?></label></th>
 156                      <td><textarea class="<?php echo $class; ?>" rows="5" cols="40" name="option[<?php echo esc_attr( $option->option_name ); ?>]" id="<?php echo esc_attr( $option->option_name ); ?>"<?php disabled( $disabled ); ?>><?php echo esc_textarea( $option->option_value ); ?></textarea></td>
 157                  </tr>
 158                  <?php
 159              } else {
 160                  ?>
 161                  <tr class="form-field">
 162                      <th scope="row"><label for="<?php echo esc_attr( $option->option_name ); ?>" class="code"><?php echo esc_html( $option->option_name ); ?></label></th>
 163                      <?php if ( $is_main_site && in_array( $option->option_name, array( 'siteurl', 'home' ), true ) ) { ?>
 164                      <td><code><?php echo esc_html( $option->option_value ); ?></code></td>
 165                      <?php } else { ?>
 166                      <td><input class="<?php echo $class; ?>" name="option[<?php echo esc_attr( $option->option_name ); ?>]" type="text" id="<?php echo esc_attr( $option->option_name ); ?>" value="<?php echo esc_attr( $option->option_value ); ?>" size="40" <?php disabled( $disabled ); ?> /></td>
 167                      <?php } ?>
 168                  </tr>
 169                  <?php
 170              }
 171          } // End foreach.
 172  
 173          /**
 174           * Fires at the end of the Edit Site form, before the submit button.
 175           *
 176           * @since 3.0.0
 177           *
 178           * @param int $id Site ID.
 179           */
 180          do_action( 'wpmueditblogaction', $id );
 181          ?>
 182      </table>
 183      <?php submit_button(); ?>
 184  </form>
 185  
 186  </div>
 187  <?php
 188  require_once  ABSPATH . 'wp-admin/admin-footer.php';