Ghost Exploiter Team Official
/
home
/
bwalansa
/
www
/
wp-includes.backup
/
Nama File / Folder
Size
Action
ID3
--
NONE
IXR
--
NONE
Requests
--
NONE
SimplePie
--
NONE
Text
--
NONE
certificates
--
NONE
css
--
NONE
customize
--
NONE
fonts
--
NONE
images
--
NONE
js
--
NONE
pomo
--
NONE
random_compat
--
NONE
rest-api
--
NONE
theme-compat
--
NONE
widgets
--
NONE
admin-bar.php
26.615KB
Hapus
Edit
Rename
atomlib.php
11.09KB
Hapus
Edit
Rename
author-template.php
15.159KB
Hapus
Edit
Rename
bookmark-template.php
11.425KB
Hapus
Edit
Rename
bookmark.php
13.354KB
Hapus
Edit
Rename
cache.php
21.561KB
Hapus
Edit
Rename
canonical.php
26.271KB
Hapus
Edit
Rename
capabilities.php
23.048KB
Hapus
Edit
Rename
category-template.php
47.356KB
Hapus
Edit
Rename
category.php
11.714KB
Hapus
Edit
Rename
class-IXR.php
2.513KB
Hapus
Edit
Rename
class-feed.php
0.51KB
Hapus
Edit
Rename
class-http.php
35.517KB
Hapus
Edit
Rename
class-http_old.php
73.192KB
Hapus
Edit
Rename
class-json.php
39.523KB
Hapus
Edit
Rename
class-oembed.php
28.36KB
Hapus
Edit
Rename
class-phpass.php
7.146KB
Hapus
Edit
Rename
class-phpmailer.php
144.76KB
Hapus
Edit
Rename
class-pop3.php
20.429KB
Hapus
Edit
Rename
class-requests.php
29.092KB
Hapus
Edit
Rename
class-simplepie.php
87.172KB
Hapus
Edit
Rename
class-smtp.php
38.553KB
Hapus
Edit
Rename
class-snoopy.php
36.899KB
Hapus
Edit
Rename
class-walker-category-dropdown.php
2.105KB
Hapus
Edit
Rename
class-walker-category.php
6.595KB
Hapus
Edit
Rename
class-walker-comment.php
11.104KB
Hapus
Edit
Rename
class-walker-nav-menu.php
7.676KB
Hapus
Edit
Rename
class-walker-page-dropdown.php
2.281KB
Hapus
Edit
Rename
class-walker-page.php
5.817KB
Hapus
Edit
Rename
class-wp-admin-bar.php
16.427KB
Hapus
Edit
Rename
class-wp-ajax-response.php
4.925KB
Hapus
Edit
Rename
class-wp-comment-query.php
41.36KB
Hapus
Edit
Rename
class-wp-comment.php
9.218KB
Hapus
Edit
Rename
class-wp-customize-control.php
21.516KB
Hapus
Edit
Rename
class-wp-customize-manager.php
142.875KB
Hapus
Edit
Rename
class-wp-customize-nav-menus.php
48.359KB
Hapus
Edit
Rename
class-wp-customize-panel.php
9.653KB
Hapus
Edit
Rename
class-wp-customize-section.php
9.928KB
Hapus
Edit
Rename
class-wp-customize-setting.php
26.986KB
Hapus
Edit
Rename
class-wp-customize-widgets.php
63.703KB
Hapus
Edit
Rename
class-wp-dependency.php
1.644KB
Hapus
Edit
Rename
class-wp-editor.php
52.799KB
Hapus
Edit
Rename
class-wp-embed.php
11.802KB
Hapus
Edit
Rename
class-wp-error.php
4.555KB
Hapus
Edit
Rename
class-wp-feed-cache-transient.php
2.645KB
Hapus
Edit
Rename
class-wp-feed-cache.php
0.746KB
Hapus
Edit
Rename
class-wp-hook.php
14.121KB
Hapus
Edit
Rename
class-wp-http-cookie.php
6.397KB
Hapus
Edit
Rename
class-wp-http-curl.php
11.456KB
Hapus
Edit
Rename
class-wp-http-encoding.php
6.293KB
Hapus
Edit
Rename
class-wp-http-ixr-client.php
3.174KB
Hapus
Edit
Rename
class-wp-http-proxy.php
5.817KB
Hapus
Edit
Rename
class-wp-http-requests-hooks.php
1.844KB
Hapus
Edit
Rename
class-wp-http-requests-response.php
4.42KB
Hapus
Edit
Rename
class-wp-http-response.php
3.021KB
Hapus
Edit
Rename
class-wp-http-streams.php
14.598KB
Hapus
Edit
Rename
class-wp-image-editor-gd.php
12.87KB
Hapus
Edit
Rename
class-wp-image-editor-imagick.php
21.472KB
Hapus
Edit
Rename
class-wp-image-editor.php
11.737KB
Hapus
Edit
Rename
class-wp-list-util.php
6.335KB
Hapus
Edit
Rename
class-wp-locale-switcher.php
5.019KB
Hapus
Edit
Rename
class-wp-locale.php
14.394KB
Hapus
Edit
Rename
class-wp-matchesmapregex.php
1.868KB
Hapus
Edit
Rename
class-wp-meta-query.php
22.191KB
Hapus
Edit
Rename
class-wp-metadata-lazyloader.php
5.363KB
Hapus
Edit
Rename
class-wp-network-query.php
16.6KB
Hapus
Edit
Rename
class-wp-network.php
10.452KB
Hapus
Edit
Rename
class-wp-oembed-controller.php
2.038KB
Hapus
Edit
Rename
class-wp-post-type.php
18.588KB
Hapus
Edit
Rename
class-wp-post.php
5.711KB
Hapus
Edit
Rename
class-wp-query.php
120.476KB
Hapus
Edit
Rename
class-wp-rewrite.php
58.716KB
Hapus
Edit
Rename
class-wp-role.php
2.664KB
Hapus
Edit
Rename
class-wp-roles.php
6.42KB
Hapus
Edit
Rename
class-wp-session-tokens.php
7.335KB
Hapus
Edit
Rename
class-wp-simplepie-file.php
2.237KB
Hapus
Edit
Rename
class-wp-simplepie-sanitize-kses.php
1.751KB
Hapus
Edit
Rename
class-wp-site-query.php
21.472KB
Hapus
Edit
Rename
class-wp-site.php
7.395KB
Hapus
Edit
Rename
class-wp-tax-query.php
19.383KB
Hapus
Edit
Rename
class-wp-taxonomy.php
10.297KB
Hapus
Edit
Rename
class-wp-term-query.php
31.977KB
Hapus
Edit
Rename
class-wp-term.php
5.289KB
Hapus
Edit
Rename
class-wp-text-diff-renderer-inline.php
0.695KB
Hapus
Edit
Rename
class-wp-text-diff-renderer-table.php
13.736KB
Hapus
Edit
Rename
class-wp-theme.php
47.354KB
Hapus
Edit
Rename
class-wp-user-meta-session-tokens.php
2.995KB
Hapus
Edit
Rename
class-wp-user-query.php
29.168KB
Hapus
Edit
Rename
class-wp-user.php
19.154KB
Hapus
Edit
Rename
class-wp-walker.php
12.078KB
Hapus
Edit
Rename
class-wp-widget-factory.php
3.809KB
Hapus
Edit
Rename
class-wp-widget.php
17.763KB
Hapus
Edit
Rename
class-wp-xmlrpc-server.php
195.504KB
Hapus
Edit
Rename
class-wp.php
23.786KB
Hapus
Edit
Rename
class.wp-dependencies.php
11.276KB
Hapus
Edit
Rename
class.wp-scripts.php
14.337KB
Hapus
Edit
Rename
class.wp-styles.php
9.937KB
Hapus
Edit
Rename
comment-template.php
85.189KB
Hapus
Edit
Rename
comment.php
100.107KB
Hapus
Edit
Rename
compat.php
16.792KB
Hapus
Edit
Rename
cron.php
15.567KB
Hapus
Edit
Rename
date.php
34.948KB
Hapus
Edit
Rename
default-constants.php
9.248KB
Hapus
Edit
Rename
default-filters.php
24.629KB
Hapus
Edit
Rename
default-widgets.php
1.469KB
Hapus
Edit
Rename
deprecated.php
109.447KB
Hapus
Edit
Rename
embed-template.php
0.336KB
Hapus
Edit
Rename
embed.php
42.9KB
Hapus
Edit
Rename
feed-atom-comments.php
5.225KB
Hapus
Edit
Rename
feed-atom.php
3.011KB
Hapus
Edit
Rename
feed-rdf.php
2.607KB
Hapus
Edit
Rename
feed-rss.php
1.217KB
Hapus
Edit
Rename
feed-rss2-comments.php
3.962KB
Hapus
Edit
Rename
feed-rss2.php
3.722KB
Hapus
Edit
Rename
feed.php
19.093KB
Hapus
Edit
Rename
formatting.php
186.735KB
Hapus
Edit
Rename
functions.php
174.61KB
Hapus
Edit
Rename
functions.wp-scripts.php
11.212KB
Hapus
Edit
Rename
functions.wp-styles.php
7.891KB
Hapus
Edit
Rename
general-template.php
122.813KB
Hapus
Edit
Rename
item.php
1.925KB
Hapus
Edit
Rename
kses.php
50.416KB
Hapus
Edit
Rename
l10n.php
42.119KB
Hapus
Edit
Rename
link-template.php
131.844KB
Hapus
Edit
Rename
load.php
30.688KB
Hapus
Edit
Rename
locale.php
0.138KB
Hapus
Edit
Rename
media-template.php
44.909KB
Hapus
Edit
Rename
media.php
133.988KB
Hapus
Edit
Rename
meta.php
36.607KB
Hapus
Edit
Rename
ms-blogs.php
36.658KB
Hapus
Edit
Rename
ms-default-constants.php
4.645KB
Hapus
Edit
Rename
ms-default-filters.php
4.451KB
Hapus
Edit
Rename
ms-deprecated.php
14.809KB
Hapus
Edit
Rename
ms-files.php
2.559KB
Hapus
Edit
Rename
ms-functions.php
76.881KB
Hapus
Edit
Rename
ms-load.php
19.383KB
Hapus
Edit
Rename
ms-settings.php
3.341KB
Hapus
Edit
Rename
nav-menu-template.php
19.847KB
Hapus
Edit
Rename
nav-menu.php
31.572KB
Hapus
Edit
Rename
option.php
62.292KB
Hapus
Edit
Rename
pluggable-deprecated.php
6.115KB
Hapus
Edit
Rename
pluggable.php
85.183KB
Hapus
Edit
Rename
plugin.php
30.549KB
Hapus
Edit
Rename
post-formats.php
6.788KB
Hapus
Edit
Rename
post-template.php
56.646KB
Hapus
Edit
Rename
post-thumbnail-template.php
7.914KB
Hapus
Edit
Rename
post.php
209.939KB
Hapus
Edit
Rename
query.php
22.924KB
Hapus
Edit
Rename
registration-functions.php
0.174KB
Hapus
Edit
Rename
registration.php
0.174KB
Hapus
Edit
Rename
rest-api.php
35.003KB
Hapus
Edit
Rename
revision.php
20.806KB
Hapus
Edit
Rename
rewrite.php
16.812KB
Hapus
Edit
Rename
rss-functions.php
0.187KB
Hapus
Edit
Rename
rss.php
22.664KB
Hapus
Edit
Rename
script-loader.php
64.138KB
Hapus
Edit
Rename
session.php
0.236KB
Hapus
Edit
Rename
shortcodes.php
21.153KB
Hapus
Edit
Rename
taxonomy.php
147.188KB
Hapus
Edit
Rename
template-loader.php
49.752KB
Hapus
Edit
Rename
template.php
18.865KB
Hapus
Edit
Rename
theme.php
94.23KB
Hapus
Edit
Rename
theme.php.old
94.226KB
Hapus
Edit
Rename
update.php
23.067KB
Hapus
Edit
Rename
user.php
83.362KB
Hapus
Edit
Rename
vars.php
5.201KB
Hapus
Edit
Rename
version.php
0.605KB
Hapus
Edit
Rename
widgets.php
46.99KB
Hapus
Edit
Rename
wlwmanifest.xml
1.021KB
Hapus
Edit
Rename
wp-configs.php
5.587KB
Hapus
Edit
Rename
wp-db.php
97.633KB
Hapus
Edit
Rename
wp-diff.php
0.646KB
Hapus
Edit
Rename
<=Back
<?php /** * Core User Role & Capabilities API * * @package WordPress * @subpackage Users */ /** * Map meta capabilities to primitive capabilities. * * This does not actually compare whether the user ID has the actual capability, * just what the capability or capabilities are. Meta capability list value can * be 'delete_user', 'edit_user', 'remove_user', 'promote_user', 'delete_post', * 'delete_page', 'edit_post', 'edit_page', 'read_post', or 'read_page'. * * @since 2.0.0 * * @global array $post_type_meta_caps Used to get post type meta capabilities. * * @param string $cap Capability name. * @param int $user_id User ID. * @param int $object_id Optional. ID of the specific object to check against if `$cap` is a "meta" cap. * "Meta" capabilities, e.g. 'edit_post', 'edit_user', etc., are capabilities used * by map_meta_cap() to map to other "primitive" capabilities, e.g. 'edit_posts', * 'edit_others_posts', etc. The parameter is accessed via func_get_args(). * @return array Actual capabilities for meta capability. */ function map_meta_cap( $cap, $user_id ) { $args = array_slice( func_get_args(), 2 ); $caps = array(); switch ( $cap ) { case 'remove_user': $caps[] = 'remove_users'; break; case 'promote_user': case 'add_users': $caps[] = 'promote_users'; break; case 'edit_user': case 'edit_users': // Allow user to edit itself if ( 'edit_user' == $cap && isset( $args[0] ) && $user_id == $args[0] ) break; // In multisite the user must have manage_network_users caps. If editing a super admin, the user must be a super admin. if ( is_multisite() && ( ( ! is_super_admin( $user_id ) && 'edit_user' === $cap && is_super_admin( $args[0] ) ) || ! user_can( $user_id, 'manage_network_users' ) ) ) { $caps[] = 'do_not_allow'; } else { $caps[] = 'edit_users'; // edit_user maps to edit_users. } break; case 'delete_post': case 'delete_page': $post = get_post( $args[0] ); if ( ! $post ) { $caps[] = 'do_not_allow'; break; } if ( 'revision' == $post->post_type ) { $post = get_post( $post->post_parent ); if ( ! $post ) { $caps[] = 'do_not_allow'; break; } } if ( ( get_option( 'page_for_posts' ) == $post->ID ) || ( get_option( 'page_on_front' ) == $post->ID ) ) { $caps[] = 'manage_options'; break; } $post_type = get_post_type_object( $post->post_type ); if ( ! $post_type ) { /* translators: 1: post type, 2: capability name */ _doing_it_wrong( __FUNCTION__, sprintf( __( 'The post type %1$s is not registered, so it may not be reliable to check the capability "%2$s" against a post of that type.' ), $post->post_type, $cap ), '4.4.0' ); $caps[] = 'edit_others_posts'; break; } if ( ! $post_type->map_meta_cap ) { $caps[] = $post_type->cap->$cap; // Prior to 3.1 we would re-call map_meta_cap here. if ( 'delete_post' == $cap ) $cap = $post_type->cap->$cap; break; } // If the post author is set and the user is the author... if ( $post->post_author && $user_id == $post->post_author ) { // If the post is published or scheduled... if ( in_array( $post->post_status, array( 'publish', 'future' ), true ) ) { $caps[] = $post_type->cap->delete_published_posts; } elseif ( 'trash' == $post->post_status ) { $status = get_post_meta( $post->ID, '_wp_trash_meta_status', true ); if ( in_array( $status, array( 'publish', 'future' ), true ) ) { $caps[] = $post_type->cap->delete_published_posts; } else { $caps[] = $post_type->cap->delete_posts; } } else { // If the post is draft... $caps[] = $post_type->cap->delete_posts; } } else { // The user is trying to edit someone else's post. $caps[] = $post_type->cap->delete_others_posts; // The post is published or scheduled, extra cap required. if ( in_array( $post->post_status, array( 'publish', 'future' ), true ) ) { $caps[] = $post_type->cap->delete_published_posts; } elseif ( 'private' == $post->post_status ) { $caps[] = $post_type->cap->delete_private_posts; } } break; // edit_post breaks down to edit_posts, edit_published_posts, or // edit_others_posts case 'edit_post': case 'edit_page': $post = get_post( $args[0] ); if ( ! $post ) { $caps[] = 'do_not_allow'; break; } if ( 'revision' == $post->post_type ) { $post = get_post( $post->post_parent ); if ( ! $post ) { $caps[] = 'do_not_allow'; break; } } $post_type = get_post_type_object( $post->post_type ); if ( ! $post_type ) { /* translators: 1: post type, 2: capability name */ _doing_it_wrong( __FUNCTION__, sprintf( __( 'The post type %1$s is not registered, so it may not be reliable to check the capability "%2$s" against a post of that type.' ), $post->post_type, $cap ), '4.4.0' ); $caps[] = 'edit_others_posts'; break; } if ( ! $post_type->map_meta_cap ) { $caps[] = $post_type->cap->$cap; // Prior to 3.1 we would re-call map_meta_cap here. if ( 'edit_post' == $cap ) $cap = $post_type->cap->$cap; break; } // If the post author is set and the user is the author... if ( $post->post_author && $user_id == $post->post_author ) { // If the post is published or scheduled... if ( in_array( $post->post_status, array( 'publish', 'future' ), true ) ) { $caps[] = $post_type->cap->edit_published_posts; } elseif ( 'trash' == $post->post_status ) { $status = get_post_meta( $post->ID, '_wp_trash_meta_status', true ); if ( in_array( $status, array( 'publish', 'future' ), true ) ) { $caps[] = $post_type->cap->edit_published_posts; } else { $caps[] = $post_type->cap->edit_posts; } } else { // If the post is draft... $caps[] = $post_type->cap->edit_posts; } } else { // The user is trying to edit someone else's post. $caps[] = $post_type->cap->edit_others_posts; // The post is published or scheduled, extra cap required. if ( in_array( $post->post_status, array( 'publish', 'future' ), true ) ) { $caps[] = $post_type->cap->edit_published_posts; } elseif ( 'private' == $post->post_status ) { $caps[] = $post_type->cap->edit_private_posts; } } break; case 'read_post': case 'read_page': $post = get_post( $args[0] ); if ( ! $post ) { $caps[] = 'do_not_allow'; break; } if ( 'revision' == $post->post_type ) { $post = get_post( $post->post_parent ); if ( ! $post ) { $caps[] = 'do_not_allow'; break; } } $post_type = get_post_type_object( $post->post_type ); if ( ! $post_type ) { /* translators: 1: post type, 2: capability name */ _doing_it_wrong( __FUNCTION__, sprintf( __( 'The post type %1$s is not registered, so it may not be reliable to check the capability "%2$s" against a post of that type.' ), $post->post_type, $cap ), '4.4.0' ); $caps[] = 'edit_others_posts'; break; } if ( ! $post_type->map_meta_cap ) { $caps[] = $post_type->cap->$cap; // Prior to 3.1 we would re-call map_meta_cap here. if ( 'read_post' == $cap ) $cap = $post_type->cap->$cap; break; } $status_obj = get_post_status_object( $post->post_status ); if ( $status_obj->public ) { $caps[] = $post_type->cap->read; break; } if ( $post->post_author && $user_id == $post->post_author ) { $caps[] = $post_type->cap->read; } elseif ( $status_obj->private ) { $caps[] = $post_type->cap->read_private_posts; } else { $caps = map_meta_cap( 'edit_post', $user_id, $post->ID ); } break; case 'publish_post': $post = get_post( $args[0] ); if ( ! $post ) { $caps[] = 'do_not_allow'; break; } $post_type = get_post_type_object( $post->post_type ); if ( ! $post_type ) { /* translators: 1: post type, 2: capability name */ _doing_it_wrong( __FUNCTION__, sprintf( __( 'The post type %1$s is not registered, so it may not be reliable to check the capability "%2$s" against a post of that type.' ), $post->post_type, $cap ), '4.4.0' ); $caps[] = 'edit_others_posts'; break; } $caps[] = $post_type->cap->publish_posts; break; case 'edit_post_meta': case 'delete_post_meta': case 'add_post_meta': case 'edit_comment_meta': case 'delete_comment_meta': case 'add_comment_meta': case 'edit_term_meta': case 'delete_term_meta': case 'add_term_meta': case 'edit_user_meta': case 'delete_user_meta': case 'add_user_meta': list( $_, $object_type, $_ ) = explode( '_', $cap ); $object_id = (int) $args[0]; switch ( $object_type ) { case 'post': $post = get_post( $object_id ); if ( ! $post ) { break; } $sub_type = get_post_type( $post ); break; case 'comment': $comment = get_comment( $object_id ); if ( ! $comment ) { break; } $sub_type = empty( $comment->comment_type ) ? 'comment' : $comment->comment_type; break; case 'term': $term = get_term( $object_id ); if ( ! $term ) { break; } $sub_type = $term->taxonomy; break; case 'user': $user = get_user_by( 'id', $object_id ); if ( ! $user ) { break; } $sub_type = 'user'; break; } if ( empty( $sub_type ) ) { $caps[] = 'do_not_allow'; break; } $caps = map_meta_cap( "edit_{$object_type}", $user_id, $object_id ); $meta_key = isset( $args[1] ) ? $args[1] : false; $has_filter = has_filter( "auth_{$object_type}_meta_{$meta_key}" ) || has_filter( "auth_{$object_type}_{$sub_type}_meta_{$meta_key}" ); if ( $meta_key && $has_filter ) { /** This filter is documented in wp-includes/meta.php */ $allowed = apply_filters( "auth_{$object_type}_meta_{$meta_key}", false, $meta_key, $object_id, $user_id, $cap, $caps ); /** This filter is documented in wp-includes/meta.php */ $allowed = apply_filters( "auth_{$object_type}_{$sub_type}_meta_{$meta_key}", $allowed, $meta_key, $object_id, $user_id, $cap, $caps ); if ( ! $allowed ) { $caps[] = $cap; } } elseif ( $meta_key && is_protected_meta( $meta_key, $object_type ) ) { $caps[] = $cap; } break; case 'edit_comment': $comment = get_comment( $args[0] ); if ( ! $comment ) { $caps[] = 'do_not_allow'; break; } $post = get_post( $comment->comment_post_ID ); /* * If the post doesn't exist, we have an orphaned comment. * Fall back to the edit_posts capability, instead. */ if ( $post ) { $caps = map_meta_cap( 'edit_post', $user_id, $post->ID ); } else { $caps = map_meta_cap( 'edit_posts', $user_id ); } break; case 'unfiltered_upload': if ( defined('ALLOW_UNFILTERED_UPLOADS') && ALLOW_UNFILTERED_UPLOADS && ( !is_multisite() || is_super_admin( $user_id ) ) ) $caps[] = $cap; else $caps[] = 'do_not_allow'; break; case 'edit_css' : case 'unfiltered_html' : // Disallow unfiltered_html for all users, even admins and super admins. if ( defined( 'DISALLOW_UNFILTERED_HTML' ) && DISALLOW_UNFILTERED_HTML ) $caps[] = 'do_not_allow'; elseif ( is_multisite() && ! is_super_admin( $user_id ) ) $caps[] = 'do_not_allow'; else $caps[] = 'unfiltered_html'; break; case 'edit_files': case 'edit_plugins': case 'edit_themes': // Disallow the file editors. if ( defined( 'DISALLOW_FILE_EDIT' ) && DISALLOW_FILE_EDIT ) $caps[] = 'do_not_allow'; elseif ( defined( 'DISALLOW_FILE_MODS' ) && DISALLOW_FILE_MODS ) $caps[] = 'do_not_allow'; elseif ( is_multisite() && ! is_super_admin( $user_id ) ) $caps[] = 'do_not_allow'; else $caps[] = $cap; break; case 'update_plugins': case 'delete_plugins': case 'install_plugins': case 'upload_plugins': case 'update_themes': case 'delete_themes': case 'install_themes': case 'upload_themes': case 'update_core': // Disallow anything that creates, deletes, or updates core, plugin, or theme files. // Files in uploads are excepted. if ( defined( 'DISALLOW_FILE_MODS' ) && DISALLOW_FILE_MODS ) { $caps[] = 'do_not_allow'; } elseif ( is_multisite() && ! is_super_admin( $user_id ) ) { $caps[] = 'do_not_allow'; } elseif ( 'upload_themes' === $cap ) { $caps[] = 'install_themes'; } elseif ( 'upload_plugins' === $cap ) { $caps[] = 'install_plugins'; } else { $caps[] = $cap; } break; case 'activate_plugins': $caps[] = $cap; if ( is_multisite() ) { // update_, install_, and delete_ are handled above with is_super_admin(). $menu_perms = get_site_option( 'menu_items', array() ); if ( empty( $menu_perms['plugins'] ) ) $caps[] = 'manage_network_plugins'; } break; case 'delete_user': case 'delete_users': // If multisite only super admins can delete users. if ( is_multisite() && ! is_super_admin( $user_id ) ) $caps[] = 'do_not_allow'; else $caps[] = 'delete_users'; // delete_user maps to delete_users. break; case 'create_users': if ( !is_multisite() ) $caps[] = $cap; elseif ( is_super_admin( $user_id ) || get_site_option( 'add_new_users' ) ) $caps[] = $cap; else $caps[] = 'do_not_allow'; break; case 'manage_links' : if ( get_option( 'link_manager_enabled' ) ) $caps[] = $cap; else $caps[] = 'do_not_allow'; break; case 'customize' : $caps[] = 'edit_theme_options'; break; case 'delete_site': $caps[] = 'manage_options'; break; case 'edit_term': case 'delete_term': case 'assign_term': $term_id = (int) $args[0]; $term = get_term( $term_id ); if ( ! $term || is_wp_error( $term ) ) { $caps[] = 'do_not_allow'; break; } $tax = get_taxonomy( $term->taxonomy ); if ( ! $tax ) { $caps[] = 'do_not_allow'; break; } if ( 'delete_term' === $cap && ( $term->term_id == get_option( 'default_' . $term->taxonomy ) ) ) { $caps[] = 'do_not_allow'; break; } $taxo_cap = $cap . 's'; $caps = map_meta_cap( $tax->cap->$taxo_cap, $user_id, $term_id ); break; case 'manage_post_tags': case 'edit_categories': case 'edit_post_tags': case 'delete_categories': case 'delete_post_tags': $caps[] = 'manage_categories'; break; case 'assign_categories': case 'assign_post_tags': $caps[] = 'edit_posts'; break; case 'create_sites': case 'delete_sites': case 'manage_network': case 'manage_sites': case 'manage_network_users': case 'manage_network_plugins': case 'manage_network_themes': case 'manage_network_options': $caps[] = $cap; break; default: // Handle meta capabilities for custom post types. global $post_type_meta_caps; if ( isset( $post_type_meta_caps[ $cap ] ) ) { $args = array_merge( array( $post_type_meta_caps[ $cap ], $user_id ), $args ); return call_user_func_array( 'map_meta_cap', $args ); } // If no meta caps match, return the original cap. $caps[] = $cap; } /** * Filters a user's capabilities depending on specific context and/or privilege. * * @since 2.8.0 * * @param array $caps Returns the user's actual capabilities. * @param string $cap Capability name. * @param int $user_id The user ID. * @param array $args Adds the context to the cap. Typically the object ID. */ return apply_filters( 'map_meta_cap', $caps, $cap, $user_id, $args ); } /** * Whether the current user has a specific capability. * * While checking against particular roles in place of a capability is supported * in part, this practice is discouraged as it may produce unreliable results. * * Note: Will always return true if the current user is a super admin, unless specifically denied. * * @since 2.0.0 * * @see WP_User::has_cap() * @see map_meta_cap() * * @param string $capability Capability name. * @param int $object_id Optional. ID of the specific object to check against if `$capability` is a "meta" cap. * "Meta" capabilities, e.g. 'edit_post', 'edit_user', etc., are capabilities used * by map_meta_cap() to map to other "primitive" capabilities, e.g. 'edit_posts', * 'edit_others_posts', etc. Accessed via func_get_args() and passed to WP_User::has_cap(), * then map_meta_cap(). * @return bool Whether the current user has the given capability. If `$capability` is a meta cap and `$object_id` is * passed, whether the current user has the given meta capability for the given object. */ function current_user_can( $capability ) { $current_user = wp_get_current_user(); if ( empty( $current_user ) ) return false; $args = array_slice( func_get_args(), 1 ); $args = array_merge( array( $capability ), $args ); return call_user_func_array( array( $current_user, 'has_cap' ), $args ); } /** * Whether current user has a capability or role for a given site. * * @since 3.0.0 * * @param int $blog_id Site ID. * @param string $capability Capability or role name. * @return bool */ function current_user_can_for_blog( $blog_id, $capability ) { $switched = is_multisite() ? switch_to_blog( $blog_id ) : false; $current_user = wp_get_current_user(); if ( empty( $current_user ) ) { if ( $switched ) { restore_current_blog(); } return false; } $args = array_slice( func_get_args(), 2 ); $args = array_merge( array( $capability ), $args ); $can = call_user_func_array( array( $current_user, 'has_cap' ), $args ); if ( $switched ) { restore_current_blog(); } return $can; } /** * Whether author of supplied post has capability or role. * * @since 2.9.0 * * @param int|object $post Post ID or post object. * @param string $capability Capability or role name. * @return bool */ function author_can( $post, $capability ) { if ( !$post = get_post($post) ) return false; $author = get_userdata( $post->post_author ); if ( ! $author ) return false; $args = array_slice( func_get_args(), 2 ); $args = array_merge( array( $capability ), $args ); return call_user_func_array( array( $author, 'has_cap' ), $args ); } /** * Whether a particular user has capability or role. * * @since 3.1.0 * * @param int|object $user User ID or object. * @param string $capability Capability or role name. * @return bool */ function user_can( $user, $capability ) { if ( ! is_object( $user ) ) $user = get_userdata( $user ); if ( ! $user || ! $user->exists() ) return false; $args = array_slice( func_get_args(), 2 ); $args = array_merge( array( $capability ), $args ); return call_user_func_array( array( $user, 'has_cap' ), $args ); } /** * Retrieves the global WP_Roles instance and instantiates it if necessary. * * @since 4.3.0 * * @global WP_Roles $wp_roles WP_Roles global instance. * * @return WP_Roles WP_Roles global instance if not already instantiated. */ function wp_roles() { global $wp_roles; if ( ! isset( $wp_roles ) ) { $wp_roles = new WP_Roles(); } return $wp_roles; } /** * Retrieve role object. * * @since 2.0.0 * * @param string $role Role name. * @return WP_Role|null WP_Role object if found, null if the role does not exist. */ function get_role( $role ) { return wp_roles()->get_role( $role ); } /** * Add role, if it does not exist. * * @since 2.0.0 * * @param string $role Role name. * @param string $display_name Display name for role. * @param array $capabilities List of capabilities, e.g. array( 'edit_posts' => true, 'delete_posts' => false ); * @return WP_Role|null WP_Role object if role is added, null if already exists. */ function add_role( $role, $display_name, $capabilities = array() ) { if ( empty( $role ) ) { return; } return wp_roles()->add_role( $role, $display_name, $capabilities ); } /** * Remove role, if it exists. * * @since 2.0.0 * * @param string $role Role name. */ function remove_role( $role ) { wp_roles()->remove_role( $role ); } /** * Retrieve a list of super admins. * * @since 3.0.0 * * @global array $super_admins * * @return array List of super admin logins */ function get_super_admins() { global $super_admins; if ( isset($super_admins) ) return $super_admins; else return get_site_option( 'site_admins', array('admin') ); } /** * Determine if user is a site admin. * * @since 3.0.0 * * @param int $user_id (Optional) The ID of a user. Defaults to the current user. * @return bool True if the user is a site admin. */ function is_super_admin( $user_id = false ) { if ( ! $user_id || $user_id == get_current_user_id() ) $user = wp_get_current_user(); else $user = get_userdata( $user_id ); if ( ! $user || ! $user->exists() ) return false; if ( is_multisite() ) { $super_admins = get_super_admins(); if ( is_array( $super_admins ) && in_array( $user->user_login, $super_admins ) ) return true; } else { if ( $user->has_cap('delete_users') ) return true; } return false; } /** * Grants Super Admin privileges. * * @since 3.0.0 * * @global array $super_admins * * @param int $user_id ID of the user to be granted Super Admin privileges. * @return bool True on success, false on failure. This can fail when the user is * already a super admin or when the `$super_admins` global is defined. */ function grant_super_admin( $user_id ) { // If global super_admins override is defined, there is nothing to do here. if ( isset( $GLOBALS['super_admins'] ) || ! is_multisite() ) { return false; } /** * Fires before the user is granted Super Admin privileges. * * @since 3.0.0 * * @param int $user_id ID of the user that is about to be granted Super Admin privileges. */ do_action( 'grant_super_admin', $user_id ); // Directly fetch site_admins instead of using get_super_admins() $super_admins = get_site_option( 'site_admins', array( 'admin' ) ); $user = get_userdata( $user_id ); if ( $user && ! in_array( $user->user_login, $super_admins ) ) { $super_admins[] = $user->user_login; update_site_option( 'site_admins' , $super_admins ); /** * Fires after the user is granted Super Admin privileges. * * @since 3.0.0 * * @param int $user_id ID of the user that was granted Super Admin privileges. */ do_action( 'granted_super_admin', $user_id ); return true; } return false; } /** * Revokes Super Admin privileges. * * @since 3.0.0 * * @global array $super_admins * * @param int $user_id ID of the user Super Admin privileges to be revoked from. * @return bool True on success, false on failure. This can fail when the user's email * is the network admin email or when the `$super_admins` global is defined. */ function revoke_super_admin( $user_id ) { // If global super_admins override is defined, there is nothing to do here. if ( isset( $GLOBALS['super_admins'] ) || ! is_multisite() ) { return false; } /** * Fires before the user's Super Admin privileges are revoked. * * @since 3.0.0 * * @param int $user_id ID of the user Super Admin privileges are being revoked from. */ do_action( 'revoke_super_admin', $user_id ); // Directly fetch site_admins instead of using get_super_admins() $super_admins = get_site_option( 'site_admins', array( 'admin' ) ); $user = get_userdata( $user_id ); if ( $user && 0 !== strcasecmp( $user->user_email, get_site_option( 'admin_email' ) ) ) { if ( false !== ( $key = array_search( $user->user_login, $super_admins ) ) ) { unset( $super_admins[$key] ); update_site_option( 'site_admins', $super_admins ); /** * Fires after the user's Super Admin privileges are revoked. * * @since 3.0.0 * * @param int $user_id ID of the user Super Admin privileges were revoked from. */ do_action( 'revoked_super_admin', $user_id ); return true; } } return false; }
Liking