Changeset 5633

Timestamp:

07/08/2017 03:59:58 PM (7 years ago)

Author:

SergeyBiryukov

Message:

Support Forums: Allow keymasters and moderators to change user's email address without requiring a confirmation.

Fixes #1985.

File:

• sites/trunk/wordpress.org/public_html/wp-content/plugins/support-forums/inc/class-moderators.php (modified) (2 diffs)

sites/trunk/wordpress.org/public_html/wp-content/plugins/support-forums/inc/class-moderators.php

@@ -20 +20 @@
         // Allow keymasters and moderators to edit users.
         add_filter( 'bbp_map_primary_meta_caps',        array( $this, 'map_meta_caps' ), 10, 4 );
+        add_action( 'bbp_post_request',                 array( $this, 'edit_user_handler' ), 0 );
 
         // Append 'view=all' to forum, topic, and reply URLs in moderator views.
@@ -174 +175 @@
 
         return $caps;
+    }
+
+    /**
+     * Allow keymasters and moderators to change user's email address
+     * without requiring a confirmation.
+     *
+     * @param string $action The requested action.
+     */
+    function edit_user_handler( $action = '' ) {
+        if ( 'bbp-update-user' !== $action || is_admin() || bbp_is_user_home_edit() ) {
+            return;
+        }
+
+        $user_id = bbp_get_displayed_user_id();
+
+        if ( ! bbp_verify_nonce_request( 'update-user_' . $user_id ) ) {
+            return;
+        }
+
+        if ( ! current_user_can( 'edit_user', $user_id ) || empty( $_POST['email'] ) ) {
+            return;
+        }
+
+        $user_email = bbp_get_displayed_user_field( 'user_email', 'raw' );
+        $new_email  = sanitize_text_field( wp_unslash( $_POST['email'] ) );
+
+        if ( $user_email !== $new_email ) {
+            // Bail if the email address is invalid or already in use.
+            if ( ! is_email( $new_email ) || email_exists( $new_email ) ) {
+                return;
+            }
+
+            // Set the displayed user's email to the new address
+            // so `bbp_edit_user_handler()` does not attempt to update it,
+            // `edit_user()` will handle that instead.
+            bbpress()->displayed_user->user_email = $new_email;
+
+            add_filter( 'send_email_change_email', '__return_false' );
+        }
     }