/** * Overwrites capabilities in certain scenarios. * * @since 1.0.0 * @access public * @param array $caps * @param string $cap * @param int $user_id * @param array $args * @return array */ function mb_forum_map_meta_cap($caps, $cap, $user_id, $args) { /* Checks if a user can read a specific forum. */ if ('read_post' === $cap && mb_is_forum($args[0])) { $post = get_post($args[0]); if ($user_id != $post->post_author) { $parent_id = $post->post_parent; /* If we have a parent forum and the user can't read it, don't allow reading this forum. */ if (0 < $parent_id && !mb_user_can($user_id, 'read_forum', $parent_id)) { $caps = array('do_not_allow'); /* If the user can read the parent forum, check if they can read this one. */ } else { $post_type = get_post_type_object($post->post_type); $post_status = mb_get_forum_status($post->ID); $status_obj = get_post_status_object($post_status); if (mb_get_hidden_post_status() === $status_obj->name) { $caps[] = $post_type->cap->read_hidden_forums; } elseif (mb_get_private_post_status() === $status_obj->name) { $caps[] = $post_type->cap->read_private_posts; } elseif ($post_type->cap->read !== $post_type->cap->read_others_forums) { $caps[] = $post_type->cap->read_others_forums; } else { $caps = array(); } } } else { $caps = array(); } /* Meta cap for editing a single forum. */ } elseif ('edit_post' === $cap && mb_is_forum($args[0])) { $post = get_post($args[0]); $forum_obj = get_post_type_object(mb_get_forum_post_type()); if ($user_id != $post->post_author) { // Open forums. if (mb_is_forum_open($args[0])) { $caps[] = $forum_obj->cap->edit_open_forums; } elseif (mb_is_forum_closed($args[0])) { $caps[] = $forum_obj->cap->edit_closed_forums; } elseif (mb_is_forum_hidden($args[0])) { $caps[] = $forum_obj->cap->edit_hidden_forums; } } /* Meta cap for opening a single forum. */ } elseif ('open_forum' === $cap) { $caps = array(); $caps[] = user_can($user_id, 'edit_forum', $args[0]) ? 'open_forums' : 'do_not_allow'; /* Meta cap for closing a single forum. */ } elseif ('close_forum' === $cap) { $caps = array(); $caps[] = user_can($user_id, 'edit_forum', $args[0]) ? 'close_forums' : 'do_not_allow'; /* Meta cap for privatizing a single forum. */ } elseif ('privatize_forum' === $cap) { $caps = array(); $caps[] = user_can($user_id, 'edit_forum', $args[0]) ? 'privatize_forums' : 'do_not_allow'; /* Meta cap for hiding a single forum. */ } elseif ('hide_forum' === $cap) { $caps = array(); $caps[] = user_can($user_id, 'edit_forum', $args[0]) ? 'hide_forums' : 'do_not_allow'; /* Meta cap for spamming a single forum. */ } elseif ('archive_forum' === $cap) { $caps = array(); $caps[] = user_can($user_id, 'edit_forum', $args[0]) ? 'archive_forums' : 'do_not_allow'; /* Meta cap for deleting a specific forum. */ } elseif ('delete_post' === $cap && mb_is_forum($args[0])) { $forum_id = mb_get_forum_id($args[0]); if (mb_get_default_forum_id() === $forum_id) { $caps = array('do_not_allow'); } /* Meta cap check for accessing the forum form. */ } elseif ('access_forum_form' === $cap) { $caps = array('create_forums'); /* If this is a single forum page, check if user can create sub-forums. */ if (mb_is_single_forum()) { $forum_id = mb_get_forum_id(); if (!current_user_can('read_forum', $forum_id)) { $caps[] = 'do_not_allow'; } elseif (!mb_forum_allows_subforums($forum_id)) { $caps[] = 'do_not_allow'; } } elseif (mb_is_forum_edit() && !user_can($user_id, 'edit_post', mb_get_forum_id())) { $caps[] = 'do_not_allow'; } } return $caps; }
<?php /** * This template part outputs the edit page content. */ ?> <header class="mb-page-header"> <h1 class="mb-page-title"><?php mb_edit_page_title(); ?> </h1> </header><!-- .mb-page-header --> <?php if (mb_is_forum_edit()) { // If viewing the forum edit page. ?> <?php mb_get_template_part('form-forum', 'edit'); ?> <?php } elseif (mb_is_topic_edit()) { // If viewing the topic edit page. ?> <?php mb_get_template_part('form-topic', 'edit'); ?>
function mb_get_edit_page_title() { $title = ''; if (mb_is_forum_edit()) { $title = sprintf(mb_get_forum_label('mb_form_edit_item'), mb_get_forum_title()); } elseif (mb_is_topic_edit()) { $title = sprintf(mb_get_topic_label('mb_form_edit_item'), mb_get_topic_title()); } elseif (mb_is_reply_edit()) { $title = sprintf(mb_get_reply_label('mb_form_edit_item'), mb_get_reply_title()); } elseif (mb_is_user_edit()) { $title = __('Edit User', 'message-board'); } return apply_filters('mb_get_edit_title', $title); }
/** * Builds the template hierarchy for the plugin. This function figures out what the current page * is and returns an array of possible templates to use. Note that this function only returns * the templates name and not a full paths. It is meant to be used within other functions that actually * locate/load the templates. * * @since 1.0.0 * @access public * @return array */ function mb_get_template_hierarchy() { $hierarchy = array(); /* If viewing a single forum page. */ if (mb_is_single_forum()) { $hierarchy[] = 'single-forum.php'; /* If viewing the forum archive (default forum front). */ } elseif (mb_is_forum_archive()) { $hierarchy[] = 'archive-forum.php'; /* If viewing a single topic. */ } elseif (mb_is_single_topic()) { $hierarchy[] = "single-topic.php"; /* If viewing the topic archive (possible forum front page). */ } elseif (mb_is_topic_archive()) { $hierarchy[] = 'archive-topic.php'; /* If viewing a single reply. */ } elseif (mb_is_single_reply()) { $hierarchy[] = "single-reply.php"; /* If viewing the reply archive. */ } elseif (mb_is_reply_archive()) { $hierarchy[] = 'archive-reply.php'; } elseif (mb_is_role_archive()) { $hierarchy[] = 'archive-role.php'; } elseif (mb_is_single_role()) { $hierarchy[] = 'single-role.php'; /* If viewing a user sub-page. */ } elseif (mb_is_user_page()) { $page = sanitize_key(get_query_var('mb_user_page')); $hierarchy[] = "single-user-{$page}.php"; $hierarchy[] = 'single-user.php'; /* If viewing a user profile page. */ } elseif (mb_is_single_user()) { $hierarchy[] = 'single-user.php'; /* If viewing the user archive. */ } elseif (mb_is_user_archive()) { $hierarchy[] = 'archive-user.php'; /* If viewing a search results page. */ } elseif (mb_is_search_results()) { $hierarchy[] = 'search-results.php'; /* If viewing the advanced search page. */ } elseif (mb_is_search()) { $hierarchy[] = 'search.php'; /* If viewing the forum login page. */ } elseif (mb_is_forum_login()) { $hierarchy[] = 'login.php'; /* If viewing an edit page. */ } elseif (mb_is_edit()) { if (mb_is_forum_edit()) { $hierarchy[] = 'edit-forum.php'; } elseif (mb_is_topic_edit()) { $hierarchy[] = 'edit-topic.php'; } elseif (mb_is_reply_edit()) { $hierarchy[] = 'edit-reply.php'; } elseif (mb_is_user_edit()) { $hierarchy[] = 'edit-user.php'; } $hierarchy[] = 'edit.php'; } /* Add the fallback template. */ $hierarchy[] = 'board.php'; return apply_filters('mb_get_template_hierarchy', $hierarchy); }
/** * Figures out whether we're on an edit page and whether the current user has permission to be here. * * @since 1.0.0 * @access public * @return void */ function mb_handler_edit_access() { if (mb_is_edit()) { if (mb_is_forum_edit() && !current_user_can('edit_forum', mb_get_forum_id())) { mb_bring_the_doom('no-permission'); } elseif (mb_is_topic_edit() && !current_user_can('edit_topic', mb_get_topic_id())) { mb_bring_the_doom('no-permission'); } elseif (mb_is_reply_edit() && !current_user_can('edit_reply', mb_get_reply_id())) { mb_bring_the_doom('no-permission'); } elseif (mb_is_user_edit() && !current_user_can('edit_user', mb_get_user_id())) { mb_bring_the_doom('no-permission'); } elseif (!mb_is_forum_edit() && !mb_is_topic_edit() && !mb_is_reply_edit() && !mb_is_user_edit()) { mb_bring_the_doom('no-permission'); } } }