$wp_roles = wp_roles();

$user = new stdClass;

$user_id = (int) $user_id;

if ( $user_id ) {

$update = true;

$user->ID = $user_id;

$userdata = get_userdata( $user_id );

$user->user_login = wp_slash( $userdata->user_login );

} else {

$update = false;

}

if ( ! $update && isset( $_POST['user_login'] ) ) {

$user->user_login = sanitize_user( $_POST['user_login'], true );

}

$pass1 = $pass2 = '';

if ( isset( $_POST['pass1'] ) ) {

$pass1 = $_POST['pass1'];

}

if ( isset( $_POST['pass2'] ) ) {

$pass2 = $_POST['pass2'];

}

if ( isset( $_POST['role'] ) && current_user_can( 'promote_users' ) && ( ! $user_id || current_user_can( 'promote_user', $user_id ) ) ) {

$new_role = sanitize_text_field( $_POST['role'] );

// If the new role isn't editable by the logged-in user die with error.

$editable_roles = get_editable_roles();

if ( ! empty( $new_role ) && empty( $editable_roles[ $new_role ] ) ) {

wp_die( __( 'Sorry, you are not allowed to give users that role.' ), 403 );

}

$potential_role = isset( $wp_roles->role_objects[ $new_role ] ) ? $wp_roles->role_objects[ $new_role ] : false;

/*

if (

( is_multisite() && current_user_can( 'manage_network_users' ) ) ||

$user_id !== get_current_user_id() ||

( $potential_role && $potential_role->has_cap( 'promote_users' ) )

) {

$user->role = $new_role;

}

}

if ( isset( $_POST['email'] ) ) {

$user->user_email = sanitize_text_field( wp_unslash( $_POST['email'] ) );

}

if ( isset( $_POST['url'] ) ) {

if ( empty( $_POST['url'] ) || $_POST['url'] == 'http://' ) {

$user->user_url = '';

} else {

$user->user_url = esc_url_raw( $_POST['url'] );

$protocols = implode( '|', array_map( 'preg_quote', wp_allowed_protocols() ) );

$user->user_url = preg_match( '/^(' . $protocols . '):/is', $user->user_url ) ? $user->user_url : 'http://' . $user->user_url;

}

}

if ( isset( $_POST['first_name'] ) ) {

$user->first_name = sanitize_text_field( $_POST['first_name'] );

}

if ( isset( $_POST['last_name'] ) ) {

$user->last_name = sanitize_text_field( $_POST['last_name'] );

}

if ( isset( $_POST['nickname'] ) ) {

$user->nickname = sanitize_text_field( $_POST['nickname'] );

}

if ( isset( $_POST['display_name'] ) ) {

$user->display_name = sanitize_text_field( $_POST['display_name'] );

}

if ( isset( $_POST['description'] ) ) {

$user->description = trim( $_POST['description'] );

}

foreach ( wp_get_user_contact_methods( $user ) as $method => $name ) {

if ( isset( $_POST[ $method ] ) ) {

$user->$method = sanitize_text_field( $_POST[ $method ] );

}

}

if ( $update ) {

$user->rich_editing = isset( $_POST['rich_editing'] ) && 'false' === $_POST['rich_editing'] ? 'false' : 'true';

$user->syntax_highlighting = isset( $_POST['syntax_highlighting'] ) && 'false' === $_POST['syntax_highlighting'] ? 'false' : 'true';

$user->admin_color = isset( $_POST['admin_color'] ) ? sanitize_text_field( $_POST['admin_color'] ) : 'fresh';

$user->show_admin_bar_front = isset( $_POST['admin_bar_front'] ) ? 'true' : 'false';

$user->locale = '';

if ( isset( $_POST['locale'] ) ) {

$locale = sanitize_text_field( $_POST['locale'] );

if ( 'site-default' === $locale ) {

$locale = '';

} elseif ( '' === $locale ) {

$locale = 'en_US';

} elseif ( ! in_array( $locale, get_available_languages(), true ) ) {

$locale = '';

}

$user->locale = $locale;

}

}

$user->comment_shortcuts = isset( $_POST['comment_shortcuts'] ) && 'true' == $_POST['comment_shortcuts'] ? 'true' : '';

$user->use_ssl = 0;

if ( ! empty( $_POST['use_ssl'] ) ) {

$user->use_ssl = 1;

}

$errors = new WP_Error();

/* checking that username has been typed */

if ( $user->user_login == '' ) {

$errors->add( 'user_login', __( '<strong>ERROR</strong>: Please enter a username.' ) );

}

/* checking that nickname has been typed */

if ( $update && empty( $user->nickname ) ) {

$errors->add( 'nickname', __( '<strong>ERROR</strong>: Please enter a nickname.' ) );

}

/**

do_action_ref_array( 'check_passwords', array( $user->user_login, &$pass1, &$pass2 ) );

// Check for blank password when adding a user.

if ( ! $update && empty( $pass1 ) ) {

$errors->add( 'pass', __( '<strong>ERROR</strong>: Please enter a password.' ), array( 'form-field' => 'pass1' ) );

}

// Check for "\" in password.

if ( false !== strpos( wp_unslash( $pass1 ), '\\' ) ) {

$errors->add( 'pass', __( '<strong>ERROR</strong>: Passwords may not contain the character "\\".' ), array( 'form-field' => 'pass1' ) );

}

// Checking the password has been typed twice the same.

if ( ( $update || ! empty( $pass1 ) ) && $pass1 != $pass2 ) {

$errors->add( 'pass', __( '<strong>ERROR</strong>: Please enter the same password in both password fields.' ), array( 'form-field' => 'pass1' ) );

}

if ( ! empty( $pass1 ) ) {

$user->user_pass = $pass1;

}

if ( ! $update && isset( $_POST['user_login'] ) && ! validate_username( $_POST['user_login'] ) ) {

$errors->add( 'user_login', __( '<strong>ERROR</strong>: This username is invalid because it uses illegal characters. Please enter a valid username.' ) );

}

if ( ! $update && username_exists( $user->user_login ) ) {

$errors->add( 'user_login', __( '<strong>ERROR</strong>: This username is already registered. Please choose another one.' ) );

}

/** This filter is documented in wp-includes/user.php */

$illegal_logins = (array) apply_filters( 'illegal_user_logins', array() );

if ( in_array( strtolower( $user->user_login ), array_map( 'strtolower', $illegal_logins ) ) ) {

$errors->add( 'invalid_username', __( '<strong>ERROR</strong>: Sorry, that username is not allowed.' ) );

}

/* checking email address */

if ( empty( $user->user_email ) ) {

$errors->add( 'empty_email', __( '<strong>ERROR</strong>: Please enter an email address.' ), array( 'form-field' => 'email' ) );

} elseif ( ! is_email( $user->user_email ) ) {

$errors->add( 'invalid_email', __( '<strong>ERROR</strong>: The email address isn&#8217;t correct.' ), array( 'form-field' => 'email' ) );

} elseif ( ( $owner_id = email_exists( $user->user_email ) ) && ( ! $update || ( $owner_id != $user->ID ) ) ) {

$errors->add( 'email_exists', __( '<strong>ERROR</strong>: This email is already registered, please choose another one.' ), array( 'form-field' => 'email' ) );

}

/**

do_action_ref_array( 'user_profile_update_errors', array( &$errors, $update, &$user ) );

if ( $errors->has_errors() ) {

return $errors;

}

if ( $update ) {

$user_id = wp_update_user( $user );

} else {

$user_id = wp_insert_user( $user );

$notify = isset( $_POST['send_user_notification'] ) ? 'both' : 'admin';

/**

do_action( 'edit_user_created_user', $user_id, $notify );

}

return $user_id;

$all_roles = wp_roles()->roles;

/**

$editable_roles = apply_filters( 'editable_roles', $all_roles );

return $editable_roles;

$user = get_userdata( $user_id );

if ( $user ) {

$user->filter = 'edit';

}

return $user;

global $wpdb;

$query = $wpdb->prepare( "SELECT ID, post_title FROM $wpdb->posts WHERE post_type = 'post' AND post_status = 'draft' AND post_author = %d ORDER BY post_modified DESC", $user_id );

/**

$query = apply_filters( 'get_users_drafts', $query );

return $wpdb->get_results( $query );

global $wpdb;

if ( ! is_numeric( $id ) ) {

return false;

}

$id = (int) $id;

$user = new WP_User( $id );

if ( ! $user->exists() ) {

return false;

}

// Normalize $reassign to null or a user ID. 'novalue' was an older default.

if ( 'novalue' === $reassign ) {

$reassign = null;

} elseif ( null !== $reassign ) {

$reassign = (int) $reassign;

}

/**

do_action( 'delete_user', $id, $reassign );

if ( null === $reassign ) {

$post_types_to_delete = array();

foreach ( get_post_types( array(), 'objects' ) as $post_type ) {

if ( $post_type->delete_with_user ) {

$post_types_to_delete[] = $post_type->name;

} elseif ( null === $post_type->delete_with_user && post_type_supports( $post_type->name, 'author' ) ) {

$post_types_to_delete[] = $post_type->name;

}

}

/**

$post_types_to_delete = apply_filters( 'post_types_to_delete_with_user', $post_types_to_delete, $id );

$post_types_to_delete = implode( "', '", $post_types_to_delete );

$post_ids = $wpdb->get_col( $wpdb->prepare( "SELECT ID FROM $wpdb->posts WHERE post_author = %d AND post_type IN ('$post_types_to_delete')", $id ) );

if ( $post_ids ) {

foreach ( $post_ids as $post_id ) {

wp_delete_post( $post_id );

}

}

// Clean links

$link_ids = $wpdb->get_col( $wpdb->prepare( "SELECT link_id FROM $wpdb->links WHERE link_owner = %d", $id ) );

if ( $link_ids ) {

foreach ( $link_ids as $link_id ) {

wp_delete_link( $link_id );

}

}

} else {

$post_ids = $wpdb->get_col( $wpdb->prepare( "SELECT ID FROM $wpdb->posts WHERE post_author = %d", $id ) );

$wpdb->update( $wpdb->posts, array( 'post_author' => $reassign ), array( 'post_author' => $id ) );

if ( ! empty( $post_ids ) ) {

foreach ( $post_ids as $post_id ) {

clean_post_cache( $post_id );

}

}

$link_ids = $wpdb->get_col( $wpdb->prepare( "SELECT link_id FROM $wpdb->links WHERE link_owner = %d", $id ) );

$wpdb->update( $wpdb->links, array( 'link_owner' => $reassign ), array( 'link_owner' => $id ) );

if ( ! empty( $link_ids ) ) {

foreach ( $link_ids as $link_id ) {

clean_bookmark_cache( $link_id );

}

}

}

// FINALLY, delete user

if ( is_multisite() ) {

remove_user_from_blog( $id, get_current_blog_id() );

} else {

$meta = $wpdb->get_col( $wpdb->prepare( "SELECT umeta_id FROM $wpdb->usermeta WHERE user_id = %d", $id ) );

foreach ( $meta as $mid ) {

delete_metadata_by_mid( 'user', $mid );

}

$wpdb->delete( $wpdb->users, array( 'ID' => $id ) );

}

clean_user_cache( $user );

/**

do_action( 'deleted_user', $id, $reassign );

return true;

$id = (int) $id;

$user = new WP_User( $id );

$user->remove_all_caps();

global $user_ID;

// Short-circuit it.

if ( ! get_user_option( 'default_password_nag' ) ) {

return;

}

// get_user_setting = JS saved UI setting. else no-js-fallback code.

if ( 'hide' == get_user_setting( 'default_password_nag' ) || isset( $_GET['default_password_nag'] ) && '0' == $_GET['default_password_nag'] ) {

delete_user_setting( 'default_password_nag' );

update_user_option( $user_ID, 'default_password_nag', false, true );

}

// Short-circuit it.

if ( ! get_user_option( 'default_password_nag', $user_ID ) ) {

return;

}

$new_data = get_userdata( $user_ID );

// Remove the nag if the password has been changed.

if ( $new_data->user_pass != $old_data->user_pass ) {

delete_user_setting( 'default_password_nag' );

update_user_option( $user_ID, 'default_password_nag', false, true );

}

global $pagenow;

// Short-circuit it.

if ( 'profile.php' == $pagenow || ! get_user_option( 'default_password_nag' ) ) {

return;

}

echo '<div class="error default-password-nag">';

echo '<p>';

echo '<strong>' . __( 'Notice:' ) . '</strong> ';

_e( 'You&rsquo;re using the auto-generated password for your account. Would you like to change it?' );

echo '</p><p>';

printf( '<a href="%s">' . __( 'Yes, take me to my profile page' ) . '</a> | ', get_edit_profile_url() . '#password' );

printf( '<a href="%s" id="default-password-nag-no">' . __( 'No thanks, do not remind me again' ) . '</a>', '?default_password_nag=0' );

echo '</p></div>';

?>

<script>

jQuery(document).ready( function($) {

var submit = $('#submit').prop('disabled', true);

$('input[name="delete_option"]').one('change', function() {

submit.prop('disabled', false);

});

$('#reassign_user').focus( function() {

$('#delete_option1').prop('checked', true).trigger('change');

});

});

</script>

<?php

?>

<tr class="user-use-ssl-wrap">

<th scope="row"><?php _e( 'Use https' ); ?></th>

<td><label for="use_ssl"><input name="use_ssl" type="checkbox" id="use_ssl" value="1" <?php checked( '1', $user->use_ssl ); ?> /> <?php _e( 'Always use https when visiting the admin' ); ?></label></td>

</tr>

<?php

$roles = get_editable_roles();

$role = $roles[ $_REQUEST['role'] ];

/* translators: 1: site name, 2: site URL, 3: role */

return sprintf(

__(

'Hi,

),

wp_specialchars_decode( get_bloginfo( 'name' ), ENT_QUOTES ),

home_url(),

wp_specialchars_decode( translate_user_role( $role['name'] ) )

);

$request_id = absint( $request_id );

$request = get_post( $request_id );

if ( ! $request || 'user_request' !== $request->post_type ) {

return new WP_Error( 'privacy_request_error', __( 'Invalid request.' ) );

}

$result = wp_send_user_request( $request_id );

if ( is_wp_error( $result ) ) {

return $result;

} elseif ( ! $result ) {

return new WP_Error( 'privacy_request_error', __( 'Unable to initiate confirmation request.' ) );

}

return true;

$request_id = absint( $request_id );

$request = wp_get_user_request_data( $request_id );

if ( ! $request ) {

return new WP_Error( 'privacy_request_error', __( 'Invalid request.' ) );

}

update_post_meta( $request_id, '_wp_user_request_completed_timestamp', time() );

$result = wp_update_post(

array(

'ID' => $request_id,

'post_status' => 'request-completed',

)

);

return $result;

if ( isset( $_POST['privacy_action_email_retry'] ) ) {

check_admin_referer( 'bulk-privacy_requests' );

$request_id = absint( current( array_keys( (array) wp_unslash( $_POST['privacy_action_email_retry'] ) ) ) );

$result = _wp_privacy_resend_request( $request_id );

if ( is_wp_error( $result ) ) {

add_settings_error(

'privacy_action_email_retry',

'privacy_action_email_retry',

$result->get_error_message(),

'error'

);

} else {

add_settings_error(

'privacy_action_email_retry',

'privacy_action_email_retry',

__( 'Confirmation request sent again successfully.' ),

'updated'

);

}

} elseif ( isset( $_POST['action'] ) ) {

$action = isset( $_POST['action'] ) ? sanitize_key( wp_unslash( $_POST['action'] ) ) : '';

switch ( $action ) {

case 'add_export_personal_data_request':

case 'add_remove_personal_data_request':

check_admin_referer( 'personal-data-request' );

if ( ! isset( $_POST['type_of_action'], $_POST['username_or_email_for_privacy_request'] ) ) {

add_settings_error(

'action_type',

'action_type',

__( 'Invalid action.' ),

'error'

);

}

$action_type = sanitize_text_field( wp_unslash( $_POST['type_of_action'] ) );

$username_or_email_address = sanitize_text_field( wp_unslash( $_POST['username_or_email_for_privacy_request'] ) );

$email_address = '';

if ( ! in_array( $action_type, _wp_privacy_action_request_types(), true ) ) {

add_settings_error(

'action_type',

'action_type',

__( 'Invalid action.' ),

'error'

);

}

if ( ! is_email( $username_or_email_address ) ) {

$user = get_user_by( 'login', $username_or_email_address );

if ( ! $user instanceof WP_User ) {

add_settings_error(

'username_or_email_for_privacy_request',

'username_or_email_for_privacy_request',

__( 'Unable to add this request. A valid email address or username must be supplied.' ),

'error'

);

} else {

$email_address = $user->user_email;

}

} else {

$email_address = $username_or_email_address;

}

if ( empty( $email_address ) ) {

break;

}

$request_id = wp_create_user_request( $email_address, $action_type );

if ( is_wp_error( $request_id ) ) {

add_settings_error(

'username_or_email_for_privacy_request',

'username_or_email_for_privacy_request',

$request_id->get_error_message(),

'error'

);

break;

} elseif ( ! $request_id ) {

add_settings_error(

'username_or_email_for_privacy_request',

'username_or_email_for_privacy_request',

__( 'Unable to initiate confirmation request.' ),

'error'

);

break;

}

wp_send_user_request( $request_id );

add_settings_error(

'username_or_email_for_privacy_request',

'username_or_email_for_privacy_request',

__( 'Confirmation request initiated successfully.' ),

'updated'

);

break;

}

}

/** This filter is documented in wp-includes/user.php */

$expires = (int) apply_filters( 'user_request_key_expiration', DAY_IN_SECONDS );

$requests_query = new WP_Query(

array(

'post_type' => 'user_request',

'posts_per_page' => -1,

'post_status' => 'request-pending',

'fields' => 'ids',

'date_query' => array(

array(

'column' => 'post_modified_gmt',

'before' => $expires . ' seconds ago',

),

),

)

);

$request_ids = $requests_query->posts;

foreach ( $request_ids as $request_id ) {

wp_update_post(

array(

'ID' => $request_id,

'post_status' => 'request-failed',

'post_password' => '',

)

);

}

if ( ! current_user_can( 'export_others_personal_data' ) ) {

wp_die( __( 'Sorry, you are not allowed to export personal data on this site.' ) );

}

_wp_personal_data_handle_actions();

_wp_personal_data_cleanup_requests();

// "Borrow" xfn.js for now so we don't have to create new files.

wp_enqueue_script( 'xfn' );

$requests_table = new WP_Privacy_Data_Export_Requests_Table(

array(

'plural' => 'privacy_requests',

'singular' => 'privacy_request',

'screen' => 'export_personal_data',

)

);

$requests_table->screen->set_screen_reader_content(

array(

'heading_views' => __( 'Filter export personal data list' ),

'heading_pagination' => __( 'Export personal data list navigation' ),

'heading_list' => __( 'Export personal data list' ),

)

);

$requests_table->process_bulk_action();

$requests_table->prepare_items();

?>

<div class="wrap nosubsub">

<h1><?php esc_html_e( 'Export Personal Data' ); ?></h1>

<hr class="wp-header-end" />

<?php settings_errors(); ?>

<form action="<?php echo esc_url( admin_url( 'tools.php?page=export_personal_data' ) ); ?>" method="post" class="wp-privacy-request-form">

<h2><?php esc_html_e( 'Add Data Export Request' ); ?></h2>

<p><?php esc_html_e( 'An email will be sent to the user at this email address asking them to verify the request.' ); ?></p>

<div class="wp-privacy-request-form-field">

<label for="username_or_email_for_privacy_request"><?php esc_html_e( 'Username or email address' ); ?></label>

<input type="text" required class="regular-text" id="username_or_email_for_privacy_request" name="username_or_email_for_privacy_request" />

<?php submit_button( __( 'Send Request' ), 'secondary', 'submit', false ); ?>

</div>

<?php wp_nonce_field( 'personal-data-request' ); ?>

<input type="hidden" name="action" value="add_export_personal_data_request" />

<input type="hidden" name="type_of_action" value="export_personal_data" />

</form>

<hr />

<?php $requests_table->views(); ?>

<form class="search-form wp-clearfix">

<?php $requests_table->search_box( __( 'Search Requests' ), 'requests' ); ?>

<input type="hidden" name="page" value="export_personal_data" />

<input type="hidden" name="filter-status" value="<?php echo isset( $_REQUEST['filter-status'] ) ? esc_attr( sanitize_text_field( $_REQUEST['filter-status'] ) ) : ''; ?>" />

<input type="hidden" name="orderby" value="<?php echo isset( $_REQUEST['orderby'] ) ? esc_attr( sanitize_text_field( $_REQUEST['orderby'] ) ) : ''; ?>" />

<input type="hidden" name="order" value="<?php echo isset( $_REQUEST['order'] ) ? esc_attr( sanitize_text_field( $_REQUEST['order'] ) ) : ''; ?>" />

</form>

<form method="post">

<?php

$requests_table->display();

$requests_table->embed_scripts();

?>

</form>

</div>

<?php

/*

if ( ! current_user_can( 'erase_others_personal_data' ) || ! current_user_can( 'delete_users' ) ) {

wp_die( __( 'Sorry, you are not allowed to erase data on this site.' ) );

}

_wp_personal_data_handle_actions();

_wp_personal_data_cleanup_requests();

// "Borrow" xfn.js for now so we don't have to create new files.

wp_enqueue_script( 'xfn' );

$requests_table = new WP_Privacy_Data_Removal_Requests_Table(

array(

'plural' => 'privacy_requests',

'singular' => 'privacy_request',

'screen' => 'remove_personal_data',

)

);

$requests_table->screen->set_screen_reader_content(

array(

'heading_views' => __( 'Filter erase personal data list' ),

'heading_pagination' => __( 'Erase personal data list navigation' ),

'heading_list' => __( 'Erase personal data list' ),

)

);

$requests_table->process_bulk_action();

$requests_table->prepare_items();

?>

<div class="wrap nosubsub">

<h1><?php esc_html_e( 'Erase Personal Data' ); ?></h1>

<hr class="wp-header-end" />

<?php settings_errors(); ?>

<form action="<?php echo esc_url( admin_url( 'tools.php?page=remove_personal_data' ) ); ?>" method="post" class="wp-privacy-request-form">

<h2><?php esc_html_e( 'Add Data Erasure Request' ); ?></h2>

<p><?php esc_html_e( 'An email will be sent to the user at this email address asking them to verify the request.' ); ?></p>

<div class="wp-privacy-request-form-field">

<label for="username_or_email_for_privacy_request"><?php esc_html_e( 'Username or email address' ); ?></label>

<input type="text" required class="regular-text" id="username_or_email_for_privacy_request" name="username_or_email_for_privacy_request" />

<?php submit_button( __( 'Send Request' ), 'secondary', 'submit', false ); ?>

</div>

<?php wp_nonce_field( 'personal-data-request' ); ?>

<input type="hidden" name="action" value="add_remove_personal_data_request" />

<input type="hidden" name="type_of_action" value="remove_personal_data" />

</form>

<hr />

<?php $requests_table->views(); ?>

<form class="search-form wp-clearfix">

<?php $requests_table->search_box( __( 'Search Requests' ), 'requests' ); ?>

<input type="hidden" name="page" value="remove_personal_data" />

<input type="hidden" name="filter-status" value="<?php echo isset( $_REQUEST['filter-status'] ) ? esc_attr( sanitize_text_field( $_REQUEST['filter-status'] ) ) : ''; ?>" />

<input type="hidden" name="orderby" value="<?php echo isset( $_REQUEST['orderby'] ) ? esc_attr( sanitize_text_field( $_REQUEST['orderby'] ) ) : ''; ?>" />

<input type="hidden" name="order" value="<?php echo isset( $_REQUEST['order'] ) ? esc_attr( sanitize_text_field( $_REQUEST['order'] ) ) : ''; ?>" />

</form>

<form method="post">

<?php

$requests_table->display();

$requests_table->embed_scripts();

?>

</form>

</div>

<?php

/*

if ( ! is_array( $response ) ) {

return $response;

}

if ( ! array_key_exists( 'done', $response ) ) {

return $response;

}

if ( ! array_key_exists( 'items_removed', $response ) ) {

return $response;

}

if ( ! array_key_exists( 'items_retained', $response ) ) {

return $response;

}

if ( ! array_key_exists( 'messages', $response ) ) {

return $response;

}

$request = wp_get_user_request_data( $request_id );