GitLab

This change fixes a bug causing User Roles to be incorrectly set when saving the "Permissions" tab on multisite installations.

It also shifts the order of switch_to_blog() and current_user_can() calls, to ensure that Roles are only saved when the current user can "promote_users" on the current site for the user being edited (never self!)

It also also includes a little bit of surrounding code clean-up while I'm here.

Props chrisvanpatten. Fixes #70.

This change prevents a cache collision between the filtered $user variable and the cached user object returned by get_userdata(), which could result in incorrect information being compared against and saved to the database.

See #70.

This change makes sure that every hook that expects to be a filter and have a return value, has a return value.

It also reprioritizes the internals of wp_user_profiles_save_user_super_admin() to avoid an unexpected wp_die() on single-site installations.

See #70.

This change ensures that the date & time displayed matches what the user expects to see for the site.

Fixes #65. Props knutsp.

This avoids a fatal error in WordPress versions lower than 5.7.

Fixes #67. Props johnbillion.

* Specify the columns shown in the Sites tab, remove the default filter.
* Remove dead code.
* Improved docs.

Also fix incorrect text domain.

* Move authorship from individual (JJJ) to business (JJJ)
* Add sponsor.php to add "Sponsor" link to plugin row-actions
* Update donate link, from PayPal to Stripe
* Update support links, for WordPress.org & GitHub
* Bump "Tested up to" to 5.8 if needed
* Increment asset & minor version numbers
* Random small non-code related improvements (whitespace, grammar, URLs...)

* Fix missing text domains
* Add RTL & minified CSS
* Add .pot string dictionary
* Update file headers
* Update .gitignore
* Bump versions to 2.6.0

* Globals: define $user_can_edit for Classic Editor compatibility.
* Remove the Classic Editor meta-box.
* Introduce wp_user_profiles_buffer_action().
* Metaboxes: assorted cleanup
* HTML markup fixes
* Add scope attribute to TH elements
* Add missing text domains
* Remove redundant hook documentation from being copied from WordPress core
* Add capability checks to personal options to better match WordPress core
* Add missing `profile_personal_options` action call
* Docs.
* Introduce wp_user_profiles_maybe_empty().
* Rename to wp_user_profiles_handle_empty_metabox().

* Passwords: merge Password Reset functionality from core.
* Passwords: only show UI for sending reset email if not your own profile.
* Passwords: UX improvements to password reset email.
* Always disable button on click to prevent spamming
* Always enable button when complete to allow retrying
* Make notices dismissible

This updates the JavaScript and Password metabox to allow site admins to send an email to a user to allow them to reset their password.

This commit includes the following intended changes:

* Move user_status save out of Base class and into its own global function & hook. Subclasses should not risk executing this code.
* Move super-admin grant/revoke code out of status.php and into capabilities.php
* Rename wp_user_profiles_update_global_admin() to wp_user_profiles_save_user_super_admin() to better match existing patterns
* Hook newly named function to Permissions-Only section hook so that it only fires on that section
* Moves make_spam and make_ham actions into wp_user_profiles_transition_user_status
* When making spam or ham, only do so if not already spam or ham, to prevent overspamming and overhamming
* Remove a few is_a() checks that aren't actually necessary, since this gets done further downstream
* Fixes a forever-bug causing wp_user_profiles_update_user_status() not to work on single-site installs :picard-face-palm:
* General logical order-of-operations fixes to prevent doing status & super-admin related things when they were not necessary

Fixes #56.

This should make these classes easier to test independently, while also allowing a bit more flexibility on how they are invoked in third party plugins.

This is for plugins using the "wp_user_profiles_title_actions" action only.

Changed originally in b4be6a7c, these parameters were switched to an array to work around an assumption in WordPress that meta-boxes always used arrays for their second parameter.

See #57.

* More empty() checks where appropriate, to reduce chances of PHP errors when relying on hooks to behave
* Replace global with static, to avoid weird initialization
* Reduce timeout from 20 to 10 on remote requests
* New method to reduce array of available roles down to the ones that are present on all listed sites
* Use _network_ functions directly instead of _site_
* Cast some untrusted global request variables more specifically

Fixes #23.

* Add missing text domains to password meta box output.
* Correct phpdoc for Sessions meta box.
* Make $user_id global, and set it when adding meta-boxes.
* Add new files for Application Passwords.
* Register Application Passwords meta box and bump versions.
* Only enqueue/override Application Passwords JS if available for user.
* Add Help text for Application Passwords.
* Shorten strings, and make clicking on the password copy it to the clipboard.

This commit prevents the BuddyPress profile navigation UI from triggering our "Other" compatibility section, and also fixes a related profile.php redirection issue.

* Alters Section Base class to include "parent" and "subname" properties, used for a brief tree climb and overriding the text of a prepended subnav item
* Adds helper functions to abstract some duplication between primary-nav and secondary-nav
* Wrap navs in their own div, as well as output buffers to reduce some UI jumpiness
* Move the admin notices action underneath the H1 to limit some jumpiness
* Adds CSS styling for the sub-nav
* Add support for Multisite User dashboard.
* Pass $user into Query Arguments function call.
* Change "Your Profile" to "Profile"