Ticket #1202: users.php.diff

users.php

@@ -1 +1 @@
 <?php
 require_once('admin.php');
 
+if ( 'post' == strtolower( $_SERVER['REQUEST_METHOD'] ) ) {
+
+        bb_check_admin_referer( 'user-bulk' );
+        $user_ids = array_map( 'absint', $_POST['user'] );
+        $count = 0;
+        $bb_current_id = bb_get_current_user_info( 'id' );
+        
+        $action = trim( $_POST['action'] );
+        
+        switch ( $action ) {
+        case 'delete' :
+                foreach ( $user_ids as $user_id ) {
+                    if ( $bb_current_id != $user_id )
+                        $count += (int) (bool) bb_delete_user( $user_id );
+                }
+                $query_vars = array( 'message' => 'deleted', 'count' => $count );
+                break;
+        default :
+                if ( $action )
+                        $query_vars = apply_filters( "bulk_user__$action", array(), $user_ids, $action );
+                break;
+        }
+
+        bb_safe_redirect( add_query_arg( $query_vars ) );
+        exit;
+}
+
+if ( !empty( $_GET['message'] ) ) {
+        $message_count = isset( $_GET['count'] ) ? (int) $_GET['count'] : 1;
+
+        switch ( (string) $_GET['message'] ) {
+                case 'deleted':
+                        bb_admin_notice( sprintf( _n( '<strong>User deleted.</strong>', '<strong>%s users deleted.</strong>', $message_count ), bb_number_format_i18n( $message_count ) ) );
+                        break;
+        }
+}
+
 // Query the users
 $bb_user_search = new BB_User_Search(@$_GET['usersearch'], @$_GET['page'], @$_GET['userrole']);
 
@@ -12 +49 @@
 <div class="wrap">
 
 <?php
-$bb_user_search->display( true, bb_current_user_can( 'edit_users' ) );
+$bb_user_search->display( true, bb_current_user_can( 'edit_users' ), bb_current_user_can( 'edit_users' ) );
 ?>
 
 </div>