PHP nxt_get_referer函数代码示例

/**
 * Redirect to previous page.
 *
 * @param int $post_id Optional. Post ID.
 */
function redirect_post($post_id = '')
{
    if (isset($_POST['save']) || isset($_POST['publish'])) {
        $status = get_post_status($post_id);
        if (isset($_POST['publish'])) {
            switch ($status) {
                case 'pending':
                    $message = 8;
                    break;
                case 'future':
                    $message = 9;
                    break;
                default:
                    $message = 6;
            }
        } else {
            $message = 'draft' == $status ? 10 : 1;
        }
        $location = add_query_arg('message', $message, get_edit_post_link($post_id, 'url'));
    } elseif (isset($_POST['addmeta']) && $_POST['addmeta']) {
        $location = add_query_arg('message', 2, nxt_get_referer());
        $location = explode('#', $location);
        $location = $location[0] . '#postcustom';
    } elseif (isset($_POST['deletemeta']) && $_POST['deletemeta']) {
        $location = add_query_arg('message', 3, nxt_get_referer());
        $location = explode('#', $location);
        $location = $location[0] . '#postcustom';
    } elseif ('post-quickpress-save-cont' == $_POST['action']) {
        $location = "post.php?action=edit&post={$post_id}&message=7";
    } else {
        $location = add_query_arg('message', 4, get_edit_post_link($post_id, 'url'));
    }
    nxt_redirect(apply_filters('redirect_post_location', $location, $post_id));
    exit;
}

/**
 * When a site admin selects "Mark as Spammer/Not Spammer" from the admin menu
 * this action will fire and mark or unmark the user and their blogs as spam.
 * Must be a site admin for this function to run.
 *
 * @package BuddyPress Core
 * @param int $user_id Optional user ID to mark as spam
 * @global object $nxtdb Global NXTClass Database object
 */
function bp_core_action_set_spammer_status($user_id = 0)
{
    // Use displayed user if it's not yourself
    if (empty($user_id)) {
        $user_id = bp_displayed_user_id();
    }
    if (bp_is_current_component('admin') && in_array(bp_current_action(), array('mark-spammer', 'unmark-spammer'))) {
        // Check the nonce
        check_admin_referer('mark-unmark-spammer');
        // To spam or not to spam
        $status = bp_is_current_action('mark-spammer') ? 'spam' : 'ham';
        // The heavy lifting
        bp_core_process_spammer_status($user_id, $status);
        // Add feedback message. @todo - Error reporting
        if ('spam' == $status) {
            bp_core_add_message(__('User marked as spammer. Spam users are visible only to site admins.', 'buddypress'));
        } else {
            bp_core_add_message(__('User removed as spammer.', 'buddypress'));
        }
        // Deprecated. Use bp_core_process_spammer_status.
        $is_spam = 'spam' == $status;
        do_action('bp_core_action_set_spammer_status', bp_displayed_user_id(), $is_spam);
        // Redirect back to where we came from
        bp_core_redirect(nxt_get_referer());
    }
}

function friends_action_remove_friend()
{
    if (!bp_is_friends_component() || !bp_is_current_action('remove-friend')) {
        return false;
    }
    if (!($potential_friend_id = (int) bp_action_variable(0))) {
        return false;
    }
    if ($potential_friend_id == bp_loggedin_user_id()) {
        return false;
    }
    $friendship_status = BP_Friends_Friendship::check_is_friend(bp_loggedin_user_id(), $potential_friend_id);
    if ('is_friend' == $friendship_status) {
        if (!check_admin_referer('friends_remove_friend')) {
            return false;
        }
        if (!friends_remove_friend(bp_loggedin_user_id(), $potential_friend_id)) {
            bp_core_add_message(__('Friendship could not be canceled.', 'buddypress'), 'error');
        } else {
            bp_core_add_message(__('Friendship canceled', 'buddypress'));
        }
    } else {
        if ('is_friends' == $friendship_status) {
            bp_core_add_message(__('You are not yet friends with this user', 'buddypress'), 'error');
        } else {
            bp_core_add_message(__('You have a pending friendship request with this user', 'buddypress'), 'error');
        }
    }
    bp_core_redirect(nxt_get_referer());
    return false;
}

/**
 * This function runs when an action is set for a screen:
 * example.com/members/andy/profile/change-avatar/ [delete-avatar]
 *
 * The function will delete the active avatar for a user.
 *
 * @package BuddyPress Xprofile
 * @global object $bp Global BuddyPress settings object
 * @uses bp_core_delete_avatar() Deletes the active avatar for the logged in user.
 * @uses add_action() Runs a specific function for an action when it fires.
 * @uses bp_core_load_template() Looks for and loads a template file within the current member theme (folder/filename)
 */
function xprofile_action_delete_avatar()
{
    global $bp;
    if (!bp_is_user_change_avatar() || !bp_is_action_variable('delete-avatar', 0)) {
        return false;
    }
    // Check the nonce
    check_admin_referer('bp_delete_avatar_link');
    if (!bp_is_my_profile() && !is_super_admin()) {
        return false;
    }
    if (bp_core_delete_existing_avatar(array('item_id' => $bp->displayed_user->id))) {
        bp_core_add_message(__('Your avatar was deleted successfully!', 'buddypress'));
    } else {
        bp_core_add_message(__('There was a problem deleting that avatar, please try again.', 'buddypress'), 'error');
    }
    bp_core_redirect(nxt_get_referer());
}

            ?>
" /></h1>
					<form action="sites.php?action=<?php 
            echo esc_attr($_GET['action2']);
            ?>
" method="post">
						<input type="hidden" name="action" value="<?php 
            echo esc_attr($_GET['action2']);
            ?>
" />
						<input type="hidden" name="id" value="<?php 
            echo esc_attr($id);
            ?>
" />
						<input type="hidden" name="_nxt_http_referer" value="<?php 
            echo esc_attr(nxt_get_referer());
            ?>
" />
						<?php 
            nxt_nonce_field($_GET['action2'], '_nxtnonce', false);
            ?>
						<p><?php 
            echo esc_html(stripslashes($_GET['msg']));
            ?>
</p>
						<?php 
            submit_button(__('Confirm'), 'button');
            ?>
					</form>
				</body>
			</html>

/**
 * Return the activity delete link.
 *
 * @since 1.1.0
 *
 * @global object $activities_template {@link BP_Activity_Template}
 * @global object $bp BuddyPress global settings
 * @uses bp_get_root_domain()
 * @uses bp_get_activity_root_slug()
 * @uses bp_is_activity_component()
 * @uses bp_current_action()
 * @uses add_query_arg()
 * @uses nxt_get_referer()
 * @uses nxt_nonce_url()
 * @uses apply_filters() To call the 'bp_get_activity_delete_link' hook
 *
 * @return string $link Activity delete link. Contains $redirect_to arg if on single activity page.
 */
function bp_get_activity_delete_link()
{
    global $activities_template, $bp;
    $url = bp_get_root_domain() . '/' . bp_get_activity_root_slug() . '/delete/' . $activities_template->activity->id;
    $class = 'delete-activity';
    // Determine if we're on a single activity page, and customize accordingly
    if (bp_is_activity_component() && is_numeric(bp_current_action())) {
        $url = add_query_arg(array('redirect_to' => nxt_get_referer()), $url);
        $class = 'delete-activity-single';
    }
    $link = '<a href="' . nxt_nonce_url($url, 'bp_activity_delete_link') . '" class="button item-button bp-secondary-action ' . $class . ' confirm" rel="nofollow">' . __('Delete', 'buddypress') . '</a>';
    return apply_filters('bp_get_activity_delete_link', $link);
}

                             }
                         }
                         update_user_status($val, 'spam', '1');
                         break;
                     case 'notspam':
                         $userfunction = 'all_notspam';
                         $blogs = get_blogs_of_user($val, true);
                         foreach ((array) $blogs as $key => $details) {
                             update_blog_status($details->userblog_id, 'spam', '0');
                         }
                         update_user_status($val, 'spam', '0');
                         break;
                 }
             }
         }
         nxt_safe_redirect(add_query_arg(array('updated' => 'true', 'action' => $userfunction), nxt_get_referer()));
     } else {
         $location = network_admin_url('users.php');
         if (!empty($_REQUEST['paged'])) {
             $location = add_query_arg('paged', (int) $_REQUEST['paged'], $location);
         }
         nxt_redirect($location);
     }
     exit;
     break;
 case 'dodelete':
     check_admin_referer('ms-users-delete');
     if (!(current_user_can('manage_network_users') && current_user_can('delete_users'))) {
         nxt_die(__('You do not have permission to access this page.'));
     }
     if (!empty($_POST['blog']) && is_array($_POST['blog'])) {

<?php

require 'admin-action.php';
$topic_id = (int) $_GET['id'];
$topic = get_topic($topic_id);
if (!$topic) {
    bb_die(__('There is a problem with that topic, pardner.'));
}
if (!bb_current_user_can('close_topic', $topic_id)) {
    nxt_redirect(bb_get_uri(null, null, BB_URI_CONTEXT_HEADER));
    exit;
}
bb_check_admin_referer('close-topic_' . $topic_id);
if (topic_is_open($topic_id)) {
    bb_close_topic($topic_id);
    $message = 'closed';
} else {
    bb_open_topic($topic_id);
    $message = 'opened';
}
if ($sendto = nxt_get_referer()) {
    $sendto = remove_query_arg('message', $sendto);
    $sendto = add_query_arg('message', $message, $sendto);
} else {
    $sendto = get_topic_link($topic_id);
}
bb_safe_redirect($sendto);
exit;

 /**
  * Makes sure that a user was referred from another admin page.
  *
  * To avoid security exploits.
  *
  * @since 1.2.0
  * @uses do_action() Calls 'check_admin_referer' on $action.
  *
  * @param string $action Action nonce
  * @param string $query_arg where to look for nonce in $_REQUEST (since 2.5)
  */
 function check_admin_referer($action = -1, $query_arg = '_nxtnonce')
 {
     if (-1 == $action) {
         _doing_it_wrong(__FUNCTION__, __('You should specify a nonce action to be verified by using the first parameter.'), '3.2');
     }
     $adminurl = strtolower(admin_url());
     $referer = strtolower(nxt_get_referer());
     $result = isset($_REQUEST[$query_arg]) ? nxt_verify_nonce($_REQUEST[$query_arg], $action) : false;
     if (!$result && !(-1 == $action && strpos($referer, $adminurl) === 0)) {
         nxt_nonce_ays($action);
         die;
     }
     do_action('check_admin_referer', $action, $result);
     return $result;
 }

            $value = is_array($value) ? $value : trim($value);
            $value = stripslashes_deep($value);
            if (($option == 'nxt_siteurl' || $option == 'nxt_home') && !empty($value)) {
                $value = rtrim($value, " \t\n\r\v/") . '/';
            }
            if ($value) {
                bb_update_option($option, $value);
            } else {
                bb_delete_option($option);
            }
        }
    }
    if ($action == 'update-users') {
        bb_apply_nxt_role_map_to_orphans();
    }
    $goback = add_query_arg('updated', $action, nxt_get_referer());
    bb_safe_redirect($goback);
    exit;
}
switch (@$_GET['updated']) {
    case 'update-users':
        bb_admin_notice(__('<strong>User role mapping saved.</strong>'));
        break;
    case 'update-options':
        bb_admin_notice(__('<strong>User integration settings saved.</strong>'));
        break;
}
$bb_role_names[''] = _c('none|no bbPress role');
$bb_role_names = array_merge($bb_role_names, array_map(create_function('$a', 'return sprintf( _c( "bbPress %s|bbPress role" ), $a );'), $nxt_roles->get_names()));
$nxtRoles = array('administrator' => __('NXTClass Administrator'), 'editor' => __('NXTClass Editor'), 'author' => __('NXTClass Author'), 'contributor' => __('NXTClass Contributor'), 'subscriber' => __('NXTClass Subscriber'));
$nxtRoles = apply_filters('role_map_nxt_roles', $nxtRoles);

/**
 * Saves option for number of rows when listing posts, pages, comments, etc.
 *
 * @since 2.8
**/
function set_screen_options()
{
    if (isset($_POST['nxt_screen_options']) && is_array($_POST['nxt_screen_options'])) {
        check_admin_referer('screen-options-nonce', 'screenoptionnonce');
        if (!($user = nxt_get_current_user())) {
            return;
        }
        $option = $_POST['nxt_screen_options']['option'];
        $value = $_POST['nxt_screen_options']['value'];
        if (!preg_match('/^[a-z_-]+$/', $option)) {
            return;
        }
        $option = str_replace('-', '_', $option);
        $map_option = $option;
        $type = str_replace('edit_', '', $map_option);
        $type = str_replace('_per_page', '', $type);
        if (in_array($type, get_post_types())) {
            $map_option = 'edit_per_page';
        }
        if (in_array($type, get_taxonomies())) {
            $map_option = 'edit_tags_per_page';
        }
        switch ($map_option) {
            case 'edit_per_page':
            case 'users_per_page':
            case 'edit_comments_per_page':
            case 'upload_per_page':
            case 'edit_tags_per_page':
            case 'plugins_per_page':
                // Network admin
            // Network admin
            case 'sites_network_per_page':
            case 'users_network_per_page':
            case 'site_users_network_per_page':
            case 'plugins_network_per_page':
            case 'themes_network_per_page':
            case 'site_themes_network_per_page':
                $value = (int) $value;
                if ($value < 1 || $value > 999) {
                    return;
                }
                break;
            default:
                $value = apply_filters('set-screen-option', false, $option, $value);
                if (false === $value) {
                    return;
                }
                break;
        }
        update_user_meta($user->ID, $option, $value);
        nxt_safe_redirect(remove_query_arg(array('pagenum', 'apage', 'paged'), nxt_get_referer()));
        exit;
    }
}

<?php

require 'admin.php';
if (!bb_current_user_can('manage_tags')) {
    bb_die(__('You are not allowed to manage tags.'));
}
$old_id = (int) $_POST['id'];
$tag = $_POST['tag'];
bb_check_admin_referer('merge-tag_' . $old_id);
if (!($tag = bb_get_tag($tag))) {
    bb_die(__('The destination tag you specified could not be found.'));
}
if (!bb_get_tag($old_id)) {
    bb_die(__('The original tag could not be found.'));
}
if ($merged = bb_merge_tags($old_id, $tag->tag_id)) {
    bb_die(sprintf(__("Number of topics from which the old tag was removed: %d <br />\n"), $merged['old_count']) . sprintf(__("Number of topics to which the new tag was added: %d <br />\n"), $merged['diff_count']) . sprintf(__("Number of rows deleted from tags table:%d <br />\n"), $merged['destroyed']['tags']) . sprintf(__('<a href="%s">View Results of Merge</a>'), bb_get_tag_link()));
} else {
    bb_die(printf(__("Something odd happened when attempting to merge those tags.<br />\n<a href=\"%s\">Try Again?</a>"), nxt_get_referer()));
}

/**
 * Display "Are You Sure" message to confirm the action being taken.
 *
 * If the action has the nonce explain message, then it will be displayed along
 * with the "Are you sure?" message.
 *
 * @package NXTClass
 * @subpackage Security
 * @since 2.0.4
 *
 * @param string $action The nonce action.
 */
function nxt_nonce_ays($action)
{
    $title = __('NXTClass Failure Notice');
    $html = esc_html(nxt_explain_nonce($action));
    if ('log-out' == $action) {
        $html .= "</p><p>" . sprintf(__("Do you really want to <a href='%s'>log out</a>?"), nxt_logout_url());
    } elseif (nxt_get_referer()) {
        $html .= "</p><p><a href='" . esc_url(remove_query_arg('updated', nxt_get_referer())) . "'>" . __('Please try again.') . "</a>";
    }
    nxt_die($html, $title, array('response' => 403));
}

 * @since 3.1.0
 */
/** Load NXTClass Administration Bootstrap */
require_once './admin.php';
if (!is_multisite()) {
    nxt_die(__('Multisite support is not enabled.'));
}
if (!current_user_can('manage_sites')) {
    nxt_die(__('You do not have sufficient permissions to edit this site.'));
}
$nxt_list_table = _get_list_table('nxt_Users_List_Table');
$nxt_list_table->prepare_items();
get_current_screen()->add_help_tab(array('id' => 'overview', 'title' => __('Overview'), 'content' => '<p>' . __('The menu is for editing information specific to individual sites, particularly if the admin area of a site is unavailable.') . '</p>' . '<p>' . __('<strong>Info</strong> - The domain and path are rarely edited as this can cause the site to not work properly. The Registered date and Last Updated date are displayed. Network admins can mark a site as archived, spam, deleted and mature, to remove from public listings or disable.') . '</p>' . '<p>' . __('<strong>Users</strong> - This displays the users associated with this site. You can also change their role, reset their password, or remove them from the site. Removing the user from the site does not remove the user from the network.') . '</p>' . '<p>' . sprintf(__('<strong>Themes</strong> - This area shows themes that are not already enabled across the network. Enabling a theme in this menu makes it accessible to this site. It does not activate the theme, but allows it to show in the site&#8217;s Appearance menu. To enable a theme for the entire network, see the <a href="%s">Network Themes</a> screen.'), network_admin_url('themes.php')) . '</p>' . '<p>' . __('<strong>Settings</strong> - This page shows a list of all settings associated with this site. Some are created by NXTClass and others are created by plugins you activate. Note that some fields are grayed out and say Serialized Data. You cannot modify these values due to the way the setting is stored in the database.') . '</p>'));
get_current_screen()->set_help_sidebar('<p><strong>' . __('For more information:') . '</strong></p>' . '<p>' . __('<a href="http://codex.nxtclass.org/Network_Admin_Sites_Screens" target="_blank">Documentation on Site Management</a>') . '</p>' . '<p>' . __('<a href="http://nxtclass.org/support/forum/multisite/" target="_blank">Support Forums</a>') . '</p>');
$_SERVER['REQUEST_URI'] = remove_query_arg('update', $_SERVER['REQUEST_URI']);
$referer = remove_query_arg('update', nxt_get_referer());
$id = isset($_REQUEST['id']) ? intval($_REQUEST['id']) : 0;
if (!$id) {
    nxt_die(__('Invalid site ID.'));
}
$details = get_blog_details($id);
if (!can_edit_network($details->site_id)) {
    nxt_die(__('You do not have permission to access this page.'));
}
$is_main_site = is_main_site($id);
// get blog prefix
$blog_prefix = $nxtdb->get_blog_prefix($id);
// @todo This is a hack. Eventually, add API to nxt_Roles allowing retrieval of roles for a particular blog.
if (!empty($nxt_roles->use_db)) {
    $editblog_roles = get_blog_option($id, "{$blog_prefix}user_roles");
} else {

    ?>
</a></p>

<?php 
} elseif (!$php_compat || !$mysql_compat) {
    if (!$mysql_compat && !$php_compat) {
        printf(__('You cannot update because <a href="http://codex.nxtclass.org/Version_%1$s">NXTClass %1$s</a> requires PHP version %2$s or higher and MySQL version %3$s or higher. You are running PHP version %4$s and MySQL version %5$s.'), $nxt_version, $required_php_version, $required_mysql_version, $php_version, $mysql_version);
    } elseif (!$php_compat) {
        printf(__('You cannot update because <a href="http://codex.nxtclass.org/Version_%1$s">NXTClass %1$s</a> requires PHP version %2$s or higher. You are running version %3$s.'), $nxt_version, $required_php_version, $php_version);
    } elseif (!$mysql_compat) {
        printf(__('You cannot update because <a href="http://codex.nxtclass.org/Version_%1$s">NXTClass %1$s</a> requires MySQL version %2$s or higher. You are running version %3$s.'), $nxt_version, $required_mysql_version, $mysql_version);
    }
} else {
    switch ($step) {
        case 0:
            $goback = stripslashes(nxt_get_referer());
            $goback = esc_url_raw($goback);
            $goback = urlencode($goback);
            ?>
<h2><?php 
            _e('Database Update Required');
            ?>
</h2>
<p><?php 
            _e('NXTClass has been updated! Before we send you on your way, we have to update your database to the newest version.');
            ?>
</p>
<p><?php 
            _e('The update process may take a little while, so please be patient.');
            ?>
</p>