if ( empty($credentials) ) {

if ( ! empty($_POST['log']) )

$credentials['user_login'] = $_POST['log'];

if ( ! empty($_POST['pwd']) )

$credentials['user_password'] = $_POST['pwd'];

if ( ! empty($_POST['rememberme']) )

$credentials['remember'] = $_POST['rememberme'];

}

if ( !empty($credentials['remember']) )

$credentials['remember'] = true;

else

$credentials['remember'] = false;

// TODO do we deprecate the wp_authentication action?

do_action_ref_array('wp_authenticate', array(&$credentials['user_login'], &$credentials['user_password']));

if ( '' === $secure_cookie )

$secure_cookie = is_ssl();

$secure_cookie = apply_filters('secure_signon_cookie', $secure_cookie, $credentials);

global $auth_secure_cookie; // XXX ugly hack to pass this to wp_authenticate_cookie

$auth_secure_cookie = $secure_cookie;

add_filter('authenticate', 'wp_authenticate_cookie', 30, 3);

$user = wp_authenticate($credentials['user_login'], $credentials['user_password']);

if ( is_wp_error($user) ) {

if ( $user->get_error_codes() == array('empty_username', 'empty_password') ) {

$user = new WP_Error('', '');

}

return $user;

}

wp_set_auth_cookie($user->ID, $credentials['remember'], $secure_cookie);

do_action('wp_login', $user->user_login, $user);

return $user;

if ( is_a($user, 'WP_User') ) { return $user; }

if ( empty($username) || empty($password) ) {

$error = new WP_Error();

if ( empty($username) )

$error->add('empty_username', __('<strong>ERROR</strong>: The username field is empty.'));

if ( empty($password) )

$error->add('empty_password', __('<strong>ERROR</strong>: The password field is empty.'));

return $error;

}

$userdata = get_user_by('login', $username);

if ( !$userdata )

return new WP_Error('invalid_username', sprintf(__('<strong>ERROR</strong>: Invalid username. <a href="%s" title="Password Lost and Found">Lost your password</a>?'), wp_lostpassword_url()));

if ( is_multisite() ) {

// Is user marked as spam?

if ( 1 == $userdata->spam)

return new WP_Error('invalid_username', __('<strong>ERROR</strong>: Your account has been marked as a spammer.'));

// Is a user's blog marked as spam?

if ( !is_super_admin( $userdata->ID ) && isset($userdata->primary_blog) ) {

$details = get_blog_details( $userdata->primary_blog );

if ( is_object( $details ) && $details->spam == 1 )

return new WP_Error('blog_suspended', __('Site Suspended.'));

}

}

$userdata = apply_filters('wp_authenticate_user', $userdata, $password);

if ( is_wp_error($userdata) )

return $userdata;

if ( !wp_check_password($password, $userdata->user_pass, $userdata->ID) )

return new WP_Error( 'incorrect_password', sprintf( __( '<strong>ERROR</strong>: The password you entered for the username <strong>%1$s</strong> is incorrect. <a href="%2$s" title="Password Lost and Found">Lost your password</a>?' ),

$username, wp_lostpassword_url() ) );

$user = new WP_User($userdata->ID);

return $user;

if ( is_a($user, 'WP_User') ) { return $user; }

if ( empty($username) && empty($password) ) {

$user_id = wp_validate_auth_cookie();

if ( $user_id )

return new WP_User($user_id);

global $auth_secure_cookie;

if ( $auth_secure_cookie )

$auth_cookie = SECURE_AUTH_COOKIE;

else

$auth_cookie = AUTH_COOKIE;

if ( !empty($_COOKIE[$auth_cookie]) )

return new WP_Error('expired_session', __('Please log in again.'));

// If the cookie is not set, be silent.

}

return $user;

global $wpdb;

$where = get_posts_by_author_sql('post', TRUE, $userid);

$count = $wpdb->get_var( "SELECT COUNT(*) FROM $wpdb->posts $where" );

return apply_filters('get_usernumposts', $count, $userid);

global $wpdb;

$count = array();

if ( empty( $users ) || ! is_array( $users ) )

return $count;

$userlist = implode( ',', array_map( 'absint', $users ) );

$where = get_posts_by_author_sql( $post_type );

$result = $wpdb->get_results( "SELECT post_author, COUNT(*) FROM $wpdb->posts $where AND post_author IN ($userlist) GROUP BY post_author", ARRAY_N );

foreach ( $result as $row ) {

$count[ $row[0] ] = $row[1];

}

foreach ( $users as $id ) {

if ( ! isset( $count[ $id ] ) )

$count[ $id ] = 0;

}

return $count;

$user = wp_authenticate($user_login, $user_pass);

if ( is_wp_error($user) )

return false;

return true;

global $wpdb;

if ( !empty( $deprecated ) )

_deprecated_argument( __FUNCTION__, '3.0' );

if ( empty( $user ) )

$user = wp_get_current_user();

else

$user = new WP_User( $user );

if ( ! isset( $user->ID ) )

return false;

if ( $user->has_prop( $wpdb->prefix . $option ) ) // Blog specific

$result = $user->get( $wpdb->prefix . $option );

elseif ( $user->has_prop( $option ) ) // User specific and cross-blog

$result = $user->get( $option );

else

$result = false;

return apply_filters("get_user_option_{$option}", $result, $option, $user);

global $wpdb;

if ( !$global )

$option_name = $wpdb->prefix . $option_name;

// For backward compatibility. See differences between update_user_meta() and deprecated update_usermeta().

// http://core.trac.wordpress.org/ticket/13088

if ( is_null( $newvalue ) || is_scalar( $newvalue ) && empty( $newvalue ) )

return delete_user_meta( $user_id, $option_name );

return update_user_meta( $user_id, $option_name, $newvalue );

global $wpdb;

if ( !$global )

$option_name = $wpdb->prefix . $option_name;

return delete_user_meta( $user_id, $option_name );

/**

var $results;

/**

var $total_users = 0;

// SQL clauses

var $query_fields;

var $query_from;

var $query_where;

var $query_orderby;

var $query_limit;

/**

function __construct( $query = null ) {

if ( !empty( $query ) ) {

$this->query_vars = wp_parse_args( $query, array(

'blog_id' => $GLOBALS['blog_id'],

'role' => '',

'meta_key' => '',

'meta_value' => '',

'meta_compare' => '',

'include' => array(),

'exclude' => array(),

'search' => '',

'orderby' => 'login',

'order' => 'ASC',

'offset' => '',

'number' => '',

'count_total' => true,

'fields' => 'all',

'who' => ''

) );

$this->prepare_query();

$this->query();

}

}

/**

function prepare_query() {

global $wpdb;

$qv = &$this->query_vars;

if ( is_array( $qv['fields'] ) ) {

$qv['fields'] = array_unique( $qv['fields'] );

$this->query_fields = array();

foreach ( $qv['fields'] as $field )

$this->query_fields[] = $wpdb->users . '.' . esc_sql( $field );

$this->query_fields = implode( ',', $this->query_fields );

} elseif ( 'all' == $qv['fields'] ) {

$this->query_fields = "$wpdb->users.*";

} else {

$this->query_fields = "$wpdb->users.ID";

}

if ( $this->query_vars['count_total'] )

$this->query_fields = 'SQL_CALC_FOUND_ROWS ' . $this->query_fields;

$this->query_from = "FROM $wpdb->users";

$this->query_where = "WHERE 1=1";

// sorting

if ( in_array( $qv['orderby'], array('nicename', 'email', 'url', 'registered') ) ) {

$orderby = 'user_' . $qv['orderby'];

} elseif ( in_array( $qv['orderby'], array('user_nicename', 'user_email', 'user_url', 'user_registered') ) ) {

$orderby = $qv['orderby'];

} elseif ( 'name' == $qv['orderby'] || 'display_name' == $qv['orderby'] ) {

$orderby = 'display_name';

} elseif ( 'post_count' == $qv['orderby'] ) {

// todo: avoid the JOIN

$where = get_posts_by_author_sql('post');

$this->query_from .= " LEFT OUTER JOIN (

";

$orderby = 'post_count';

} elseif ( 'ID' == $qv['orderby'] || 'id' == $qv['orderby'] ) {

$orderby = 'ID';

} else {

$orderby = 'user_login';

}

$qv['order'] = strtoupper( $qv['order'] );

if ( 'ASC' == $qv['order'] )

$order = 'ASC';

else

$order = 'DESC';

$this->query_orderby = "ORDER BY $orderby $order";

// limit

if ( $qv['number'] ) {

if ( $qv['offset'] )

$this->query_limit = $wpdb->prepare("LIMIT %d, %d", $qv['offset'], $qv['number']);

else

$this->query_limit = $wpdb->prepare("LIMIT %d", $qv['number']);

}

$search = trim( $qv['search'] );

if ( $search ) {

$leading_wild = ( ltrim($search, '*') != $search );

$trailing_wild = ( rtrim($search, '*') != $search );

if ( $leading_wild && $trailing_wild )

$wild = 'both';

elseif ( $leading_wild )

$wild = 'leading';

elseif ( $trailing_wild )

$wild = 'trailing';

else

$wild = false;

if ( $wild )

$search = trim($search, '*');

if ( false !== strpos( $search, '@') )

$search_columns = array('user_email');

elseif ( is_numeric($search) )

$search_columns = array('user_login', 'ID');

elseif ( preg_match('|^https?://|', $search) )

$search_columns = array('user_url');

else

$search_columns = array('user_login', 'user_nicename');

$this->query_where .= $this->get_search_sql( $search, $search_columns, $wild );

}

$blog_id = absint( $qv['blog_id'] );

if ( 'authors' == $qv['who'] && $blog_id ) {

$qv['meta_key'] = $wpdb->get_blog_prefix( $blog_id ) . 'user_level';

$qv['meta_value'] = 0;

$qv['meta_compare'] = '!=';

$qv['blog_id'] = $blog_id = 0; // Prevent extra meta query

}

$role = trim( $qv['role'] );

if ( $blog_id && ( $role || is_multisite() ) ) {

$cap_meta_query = array();

$cap_meta_query['key'] = $wpdb->get_blog_prefix( $blog_id ) . 'capabilities';

if ( $role ) {

$cap_meta_query['value'] = '"' . $role . '"';

$cap_meta_query['compare'] = 'like';

}

$qv['meta_query'][] = $cap_meta_query;

}

$meta_query = new WP_Meta_Query();

$meta_query->parse_query_vars( $qv );

if ( !empty( $meta_query->queries ) ) {

$clauses = $meta_query->get_sql( 'user', $wpdb->users, 'ID', $this );

$this->query_from .= $clauses['join'];

$this->query_where .= $clauses['where'];

if ( 'OR' == $meta_query->relation )

$this->query_fields = 'DISTINCT ' . $this->query_fields;

}

if ( !empty( $qv['include'] ) ) {

$ids = implode( ',', wp_parse_id_list( $qv['include'] ) );

$this->query_where .= " AND $wpdb->users.ID IN ($ids)";

} elseif ( !empty($qv['exclude']) ) {

$ids = implode( ',', wp_parse_id_list( $qv['exclude'] ) );

$this->query_where .= " AND $wpdb->users.ID NOT IN ($ids)";

}

do_action_ref_array( 'pre_user_query', array( &$this ) );

}

/**

function query() {

global $wpdb;

if ( is_array( $this->query_vars['fields'] ) || 'all' == $this->query_vars['fields'] ) {

$this->results = $wpdb->get_results("SELECT $this->query_fields $this->query_from $this->query_where $this->query_orderby $this->query_limit");

} else {

$this->results = $wpdb->get_col("SELECT $this->query_fields $this->query_from $this->query_where $this->query_orderby $this->query_limit");

}

if ( $this->query_vars['count_total'] )

$this->total_users = $wpdb->get_var( apply_filters( 'found_users_query', 'SELECT FOUND_ROWS()' ) );

if ( !$this->results )

return;

if ( 'all_with_meta' == $this->query_vars['fields'] ) {

cache_users( $this->results );

$r = array();

foreach ( $this->results as $userid )

$r[ $userid ] = new WP_User( $userid, '', $this->query_vars['blog_id'] );

$this->results = $r;

}

}

/*

function get_search_sql( $string, $cols, $wild = false ) {

$string = esc_sql( $string );

$searches = array();

$leading_wild = ( 'leading' == $wild || 'both' == $wild ) ? '%' : '';

$trailing_wild = ( 'trailing' == $wild || 'both' == $wild ) ? '%' : '';

foreach ( $cols as $col ) {

if ( 'ID' == $col )

$searches[] = "$col = '$string'";

else

$searches[] = "$col LIKE '$leading_wild" . like_escape($string) . "$trailing_wild'";

}

return ' AND (' . implode(' OR ', $searches) . ')';

}

/**

function get_results() {

return $this->results;

}

/**

function get_total() {

return $this->total_users;

}

$args = wp_parse_args( $args );

$args['count_total'] = false;

$user_search = new WP_User_Query($args);

return (array) $user_search->get_results();

global $wpdb;

$user_id = (int) $user_id;

// Logged out users can't have blogs

if ( empty( $user_id ) )

return false;

$keys = get_user_meta( $user_id );

if ( empty( $keys ) )

return false;

if ( ! is_multisite() ) {

$blog_id = get_current_blog_id();

$blogs = array( $blog_id => new stdClass );

$blogs[ $blog_id ]->userblog_id = $blog_id;

$blogs[ $blog_id ]->blogname = get_option('blogname');

$blogs[ $blog_id ]->domain = '';

$blogs[ $blog_id ]->path = '';

$blogs[ $blog_id ]->site_id = 1;

$blogs[ $blog_id ]->siteurl = get_option('siteurl');

return $blogs;

}

$blogs = array();

if ( isset( $keys[ $wpdb->base_prefix . 'capabilities' ] ) && defined( 'MULTISITE' ) ) {

$blog = get_blog_details( 1 );

if ( $blog && isset( $blog->domain ) && ( $all || ( ! $blog->archived && ! $blog->spam && ! $blog->deleted ) ) ) {

$blogs[ 1 ] = (object) array(

'userblog_id' => 1,

'blogname' => $blog->blogname,

'domain' => $blog->domain,

'path' => $blog->path,

'site_id' => $blog->site_id,

'siteurl' => $blog->siteurl,

);

}

unset( $keys[ $wpdb->base_prefix . 'capabilities' ] );

}

$keys = array_keys( $keys );

foreach ( $keys as $key ) {

if ( 'capabilities' !== substr( $key, -12 ) )

continue;

if ( $wpdb->base_prefix && 0 !== strpos( $key, $wpdb->base_prefix ) )

continue;

$blog_id = str_replace( array( $wpdb->base_prefix, '_capabilities' ), '', $key );

if ( ! is_numeric( $blog_id ) )

continue;

$blog_id = (int) $blog_id;

$blog = get_blog_details( $blog_id );

if ( $blog && isset( $blog->domain ) && ( $all || ( ! $blog->archived && ! $blog->spam && ! $blog->deleted ) ) ) {

$blogs[ $blog_id ] = (object) array(

'userblog_id' => $blog_id,

'blogname' => $blog->blogname,

'domain' => $blog->domain,

'path' => $blog->path,

'site_id' => $blog->site_id,

'siteurl' => $blog->siteurl,

);

}

}

return apply_filters( 'get_blogs_of_user', $blogs, $user_id, $all );

$user_id = (int) $user_id;

$blog_id = (int) $blog_id;

if ( empty( $user_id ) )

$user_id = get_current_user_id();

if ( empty( $blog_id ) )

$blog_id = get_current_blog_id();

$blogs = get_blogs_of_user( $user_id );

if ( is_array( $blogs ) )

return array_key_exists( $blog_id, $blogs );

else

return false;

global $wpdb, $wp_roles;

// Initialize

$id = get_current_blog_id();

$blog_prefix = $wpdb->get_blog_prefix($id);

$result = array();

if ( 'time' == $strategy ) {

global $wp_roles;

if ( ! isset( $wp_roles ) )

$wp_roles = new WP_Roles();

$avail_roles = $wp_roles->get_names();

// Build a CPU-intensive query that will return concise information.

$select_count = array();

foreach ( $avail_roles as $this_role => $name ) {

$select_count[] = "COUNT(NULLIF(`meta_value` LIKE '%" . like_escape($this_role) . "%', FALSE))";

}

$select_count = implode(', ', $select_count);

// Add the meta_value index to the selection list, then run the query.

$row = $wpdb->get_row( "SELECT $select_count, COUNT(*) FROM $wpdb->usermeta WHERE meta_key = '{$blog_prefix}capabilities'", ARRAY_N );

// Run the previous loop again to associate results with role names.

$col = 0;

$role_counts = array();

foreach ( $avail_roles as $this_role => $name ) {

$count = (int) $row[$col++];

if ($count > 0) {

$role_counts[$this_role] = $count;

}

}

// Get the meta_value index from the end of the result set.

$total_users = (int) $row[$col];

$result['total_users'] = $total_users;

$result['avail_roles'] =& $role_counts;

} else {

$avail_roles = array();

$users_of_blog = $wpdb->get_col( "SELECT meta_value FROM $wpdb->usermeta WHERE meta_key = '{$blog_prefix}capabilities'" );

foreach ( $users_of_blog as $caps_meta ) {

$b_roles = unserialize($caps_meta);

if ( is_array($b_roles) ) {

foreach ( $b_roles as $b_role => $val ) {

if ( isset($avail_roles[$b_role]) ) {

$avail_roles[$b_role]++;

} else {

$avail_roles[$b_role] = 1;

}

}

}

}

$result['total_users'] = count( $users_of_blog );

$result['avail_roles'] =& $avail_roles;

}

return $result;

global $user_login, $userdata, $user_level, $user_ID, $user_email, $user_url, $user_pass_md5, $user_identity;

if ( '' == $for_user_id )

$user = wp_get_current_user();

else

$user = new WP_User($for_user_id);

$userdata = null;

$user_ID = (int) $user->ID;

$user_level = (int) isset($user->user_level) ? $user->user_level : 0;

if ( 0 == $user->ID ) {

$user_login = $user_email = $user_url = $user_pass_md5 = $user_identity = '';

return;

}

$userdata = $user;

$user_login = $user->user_login;

$user_email = $user->user_email;

$user_url = $user->user_url;

$user_pass_md5 = md5($user->user_pass);

$user_identity = $user->display_name;

$defaults = array(

'show_option_all' => '', 'show_option_none' => '', 'hide_if_only_one_author' => '',

'orderby' => 'display_name', 'order' => 'ASC',

'include' => '', 'exclude' => '', 'multi' => 0,

'show' => 'display_name', 'echo' => 1,

'selected' => 0, 'name' => 'user', 'class' => '', 'id' => '',

'blog_id' => $GLOBALS['blog_id'], 'who' => '', 'include_selected' => false

);

$defaults['selected'] = is_author() ? get_query_var( 'author' ) : 0;

$r = wp_parse_args( $args, $defaults );

extract( $r, EXTR_SKIP );