| | 1 | <?php |
| | 2 | require('admin-action.php'); |
| | 3 | |
| | 4 | $user_id = (int) $_GET['id']; |
| | 5 | |
| | 6 | bb_check_admin_referer( 'delete-user_' . $user_id ); |
| | 7 | |
| | 8 | if ( !bb_current_user_can( 'edit_user', $user_id ) ) |
| | 9 | bb_die( __( 'You can\'t do that!' ) ); |
| | 10 | |
| | 11 | $bb_current_id = bb_get_current_user_info( 'id' ); |
| | 12 | $bb_user = bb_get_user( $user_id ); |
| | 13 | |
| | 14 | if ( !$bb_user ) |
| | 15 | bb_die( __( 'There is a problem with that user.' ) ); |
| | 16 | |
| | 17 | if ( $bb_current_id == $user_id ) |
| | 18 | bb_die( __( 'You can\'t delete yourself!' ) ); |
| | 19 | |
| | 20 | if( bb_delete_user( $user_id ) ) |
| | 21 | $message = 'deleted'; |
| | 22 | else |
| | 23 | bb_die( __( 'There was an error deleting that user.' ) ); |
| | 24 | |
| | 25 | if ( $sendto = wp_get_referer() ) { |
| | 26 | $sendto = remove_query_arg( 'message', $sendto ); |
| | 27 | $sendto = add_query_arg( 'message', $message, $sendto ); |
| | 28 | } else { |
| | 29 | $sendto = bb_get_uri(); |
| | 30 | } |
| | 31 | |
| | 32 | bb_safe_redirect( $sendto ); |
| | 33 | exit; |