root/tags/1.3/wp-includes/pluggable.php

<?php

    /* These functions can be replaced via plugins.  They are loaded after
     plugins are loaded. */

if ( !function_exists('set_current_user') ) :
function set_current_user($id, $name = '') {
    return wp_set_current_user($id, $name);
}
endif;

if ( !function_exists('wp_set_current_user') ) :
function wp_set_current_user($id, $name = '') {
    global $current_user;

    if ( isset($current_user) && ($id == $current_user->ID) )
        return $current_user;

    $current_user = new WP_User($id, $name);

    setup_userdata($current_user->ID);

    do_action('set_current_user');

    return $current_user;
}
endif;

if ( !function_exists('wp_get_current_user') ) :
function wp_get_current_user() {
    global $current_user;

    get_currentuserinfo();

    return $current_user;
}
endif;

if ( !function_exists('get_currentuserinfo') ) :
function get_currentuserinfo() {
    global $current_user;

    if ( defined('XMLRPC_REQUEST') && XMLRPC_REQUEST )
        return false;

    if ( ! empty($current_user) )
        return;

    if ( empty($_COOKIE[USER_COOKIE]) || empty($_COOKIE[PASS_COOKIE]) ||
        !wp_login($_COOKIE[USER_COOKIE], $_COOKIE[PASS_COOKIE], true) ) {
        wp_set_current_user(0);
        return false;
    }

    $user_login = $_COOKIE[USER_COOKIE];
    wp_set_current_user(0, $user_login);
}
endif;

if ( !function_exists('get_userdata') ) :
function get_userdata( $user_id ) {
    global $wpdb, $cache_userdata;
    $user_id = abs(intval($user_id));
    if ( $user_id == 0 )
        return false;

    $user = wp_cache_get($user_id, 'users');
    $user_level = $wpdb->base_prefix . $wpdb->blogid . '_user_level';
    if ( $user && is_site_admin( $user->user_login ) ) {
        $user->$user_level = 10;
        $user->user_level = 10;
        $cap_key = $wpdb->prefix . 'capabilities';
        $user->{$cap_key} = array( 'administrator' => '1' );
        return $user;
    } elseif ( $user ) {
        return $user;
    }

    if ( !$user = $wpdb->get_row("SELECT * FROM $wpdb->users WHERE ID = '$user_id' LIMIT 1") )
        return false;

    $wpdb->hide_errors();
    $metavalues = $wpdb->get_results("SELECT meta_key, meta_value FROM $wpdb->usermeta WHERE user_id = '$user_id'");
    $wpdb->show_errors();

    if ($metavalues) {
        foreach ( $metavalues as $meta ) {
            $value = maybe_unserialize($meta->meta_value);
            $user->{$meta->meta_key} = $value;

            // We need to set user_level from meta, not row
            if ( $wpdb->prefix . 'user_level' == $meta->meta_key )
                $user->user_level = $meta->meta_value;
        } // end foreach
    } //end if

    // For backwards compat.
    if ( isset($user->first_name) )
        $user->user_firstname = $user->first_name;
    if ( isset($user->last_name) )
        $user->user_lastname = $user->last_name;
    if ( isset($user->description) )
        $user->user_description = $user->description;

    if( is_site_admin( $user->user_login ) == true ) {
        $user->user_level = 10;
        $cap_key = $wpdb->prefix . 'capabilities';
        $user->{$cap_key} = array( 'administrator' => '1' );
    }

    wp_cache_add($user_id, $user, 'users');
    wp_cache_add($user->user_login, $user_id, 'userlogins');
    return $user;
}
endif;

if ( !function_exists('update_user_cache') ) :
function update_user_cache() {
    return true;
}
endif;

if ( !function_exists('get_userdatabylogin') ) :
function get_userdatabylogin($user_login) {
    global $wpdb;
    $user_login = sanitize_user( $user_login );

    if ( empty( $user_login ) )
        return false;

    $user_id = wp_cache_get($user_login, 'userlogins');
    $userdata = wp_cache_get($user_id, 'users');

    if( $userdata && is_site_admin( $user_login ) == true ) {
        $userdata->user_level = 10;
        $cap_key = $wpdb->prefix . 'capabilities';
        $userdata->{$cap_key} = array( 'administrator' => '1' );
        return $userdata;
    } elseif( $userdata )
        return $userdata;

    $user_login = $wpdb->escape($user_login);

    if ( !$user_ID = $wpdb->get_var("SELECT ID FROM $wpdb->users WHERE user_login = '$user_login'") )
        return false;

    $user = get_userdata($user_ID);
    if( is_site_admin( $user_login ) == true ) {
        $user->user_level = 10;
        $cap_key = $wpdb->prefix . 'capabilities';
        $user->{$cap_key} = array( 'administrator' => '1' );
    }
    return $user;
}
endif;

if ( !function_exists( 'wp_mail' ) ) :
function wp_mail( $to, $subject, $message, $headers = '' ) {
    // Compact the input, apply the filters, and extract them back out
    extract( apply_filters( 'wp_mail', compact( 'to', 'subject', 'message', 'headers' ) ) );

    global $phpmailer;

    // (Re)create it, if it's gone missing
    if ( !is_object( $phpmailer ) || !is_a( $phpmailer, 'PHPMailer' ) ) {
        require_once ABSPATH . WPINC . '/class-phpmailer.php';
        require_once ABSPATH . WPINC . '/class-smtp.php';
        $phpmailer = new PHPMailer();
    }

    // Headers
    if ( empty( $headers ) ) {
        $headers = array();
    } elseif ( !is_array( $headers ) ) {
        // Explode the headers out, so this function can take both
        // string headers and an array of headers.
        $tempheaders = (array) explode( "\n", $headers );
        $headers = array();

        // If it's actually got contents
        if ( !empty( $tempheaders ) ) {
            // Iterate through the raw headers
            foreach ( $tempheaders as $header ) {
                if ( strpos($header, ':') === false )
                    continue;
                // Explode them out
                list( $name, $content ) = explode( ':', trim( $header ), 2 );

                // Cleanup crew
                $name = trim( $name );
                $content = trim( $content );

                // Mainly for legacy -- process a From: header if it's there
                if ( 'from' == strtolower($name) ) {
                    if ( strpos($content, '<' ) !== false ) {
                        // So... making my life hard again?
                        $from_name = substr( $content, 0, strpos( $content, '<' ) - 1 );
                        $from_name = str_replace( '"', '', $from_name );
                        $from_name = trim( $from_name );

                        $from_email = substr( $content, strpos( $content, '<' ) + 1 );
                        $from_email = str_replace( '>', '', $from_email );
                        $from_email = trim( $from_email );
                    } else {
                        $from_name = trim( $content );
                    }
                } elseif ( 'content-type' == strtolower($name) ) {
                    if ( strpos( $content,';' ) !== false ) {
                        list( $type, $charset ) = explode( ';', $content );
                        $content_type = trim( $type );
                        $charset = trim( str_replace( array( 'charset=', '"' ), '', $charset ) );
                    } else {
                        $content_type = trim( $content );
                    }
                } else {
                    // Add it to our grand headers array
                    $headers[trim( $name )] = trim( $content );
                }
            }
        }
    }

    // Empty out the values that may be set
    $phpmailer->ClearAddresses();
    $phpmailer->ClearAllRecipients();
    $phpmailer->ClearAttachments();
    $phpmailer->ClearBCCs();
    $phpmailer->ClearCCs();
    $phpmailer->ClearCustomHeaders();
    $phpmailer->ClearReplyTos();

    // From email and name
    // If we don't have a name from the input headers
    if ( !isset( $from_name ) ) {
        $from_name = 'WordPress';
    }

    // If we don't have an email from the input headers
    if ( !isset( $from_email ) ) {
        // Get the site domain and get rid of www.
        $sitename = strtolower( $_SERVER['SERVER_NAME'] );
        if ( substr( $sitename, 0, 4 ) == 'www.' ) {
            $sitename = substr( $sitename, 4 );
        }

        $from_email = 'wordpress@' . $sitename;
    }

    // Set the from name and email
    $phpmailer->From = apply_filters( 'wp_mail_from', $from_email );
    $phpmailer->Sender = apply_filters( 'wp_mail_from', $from_email );
    $phpmailer->FromName = apply_filters( 'wp_mail_from_name', $from_name );

    // Set destination address
    $phpmailer->AddAddress( $to );

    // Set mail's subject and body
    $phpmailer->Subject = $subject;
    $phpmailer->Body = $message;

    // Set to use PHP's mail()
    $phpmailer->IsMail();

    // Set Content-Type and charset
    // If we don't have a content-type from the input headers
    if ( !isset( $content_type ) ) {
        $content_type = 'text/plain';
    }

    $content_type = apply_filters( 'wp_mail_content_type', $content_type );

    // Set whether it's plaintext or not, depending on $content_type
    if ( $content_type == 'text/html' ) {
        $phpmailer->IsHTML( true );
    } else {
        $phpmailer->IsHTML( false );
    }

    // If we don't have a charset from the input headers
    if ( !isset( $charset ) ) {
        $charset = get_bloginfo( 'charset' );
    }

    // Set the content-type and charset
    $phpmailer->CharSet = apply_filters( 'wp_mail_charset', $charset );

    // Set custom headers
    if ( !empty( $headers ) ) {
        foreach ( $headers as $name => $content ) {
            $phpmailer->AddCustomHeader( sprintf( '%1$s: %2$s', $name, $content ) );
        }
    }

    do_action_ref_array( 'phpmailer_init', array( &$phpmailer ) );

    // Send!
    $result = @$phpmailer->Send();

    return $result;
}
endif;

if ( !function_exists('wp_login') ) :
function wp_login($username, $password, $already_md5 = false) {
    global $wpdb, $error, $current_user;

    $username = sanitize_user($username);

    if ( '' == $username )
        return false;

    if ( '' == $password ) {
        $error = __('<strong>ERROR</strong>: The password field is empty.');
        return false;
    }

    $login = get_userdatabylogin($username);
    //$login = $wpdb->get_row("SELECT ID, user_login, user_pass FROM $wpdb->users WHERE user_login = '$username'");

    if (!$login) {
        if( is_site_admin( $username ) ) {
            unset( $login );
            $userdetails = get_userdatabylogin( $username );
            $login->user_login = $username;
            $login->user_pass = $userdetails->user_pass;
        } else {
            $admins = get_admin_users_for_domain();
            reset( $admins );
            foreach( $admins as $admin ) {
                if( $admin[ 'user_login' ] == $username ) {
                    unset( $login );
                    $login->user_login = $username;
                    $login->user_pass  = $admin[ 'user_pass' ];
                }
            }
        }
    }
    if (!$login) {
        $error = __('<strong>ERROR</strong>: Invalid username.');
        return false;
    } else {
        if( is_site_admin( $username ) == false && ( $primary_blog = get_usermeta( $login->ID, "primary_blog" ) ) ) {
            $details = get_blog_details( $primary_blog );
            if( is_object( $details ) && $details->archived == 1 || $details->spam == 1 || $details->deleted == 1 ) {
                $error = __('<strong>Error</strong>: Blog suspended.');
                return false;
            }
        }
        // If the password is already_md5, it has been double hashed.
        // Otherwise, it is plain text.
        if ( ($already_md5 && $login->user_login == $username && md5($login->user_pass) == $password) || ($login->user_login == $username && $login->user_pass == md5($password)) ) {
            return true;
        } else {
            $error = __('<strong>ERROR</strong>: Incorrect password.');
            $pwd = '';
            return false;
        }
    }
}
endif;

if ( !function_exists('is_user_logged_in') ) :
function is_user_logged_in() {
    $user = wp_get_current_user();

    if ( $user->id == 0 )
        return false;

    return true;
}
endif;

if ( !function_exists('auth_redirect') ) :
function auth_redirect() {
    // Checks if a user is logged in, if not redirects them to the login page
    if ( (!empty($_COOKIE[USER_COOKIE]) &&
                !wp_login($_COOKIE[USER_COOKIE], $_COOKIE[PASS_COOKIE], true)) ||
             (empty($_COOKIE[USER_COOKIE])) ) {
        nocache_headers();
        wp_clearcookie();

        wp_redirect(get_option('siteurl') . '/wp-login.php?action=auth&redirect_to=' . urlencode($_SERVER['REQUEST_URI']));
        exit();
    }
}
endif;

if ( !function_exists('check_admin_referer') ) :
function check_admin_referer($action = -1) {
    $adminurl = strtolower(get_option('siteurl')).'/wp-admin';
    $referer = strtolower(wp_get_referer());
    if ( !wp_verify_nonce($_REQUEST['_wpnonce'], $action) &&
        !(-1 == $action && strpos($referer, $adminurl) !== false)) {
        wp_nonce_ays($action);
        die();
    }
    do_action('check_admin_referer', $action);
}endif;

if ( !function_exists('check_ajax_referer') ) :
function check_ajax_referer() {
    $current_name = '';
    if ( ( $current = wp_get_current_user() ) && $current->ID )
        $current_name = $current->data->user_login;
    if ( !$current_name )
        die('-1');

    $cookie = explode('; ', urldecode(empty($_POST['cookie']) ? $_GET['cookie'] : $_POST['cookie'])); // AJAX scripts must pass cookie=document.cookie
    foreach ( $cookie as $tasty ) {
        if ( false !== strpos($tasty, USER_COOKIE) )
            $user = substr(strstr($tasty, '='), 1);
        if ( false !== strpos($tasty, PASS_COOKIE) )
            $pass = substr(strstr($tasty, '='), 1);
    }

    if ( $current_name != $user || !wp_login( $user, $pass, true ) )
        die('-1');
    do_action('check_ajax_referer');
}
endif;

// Cookie safe redirect.  Works around IIS Set-Cookie bug.
// http://support.microsoft.com/kb/q176113/
if ( !function_exists('wp_redirect') ) :
function wp_redirect($location, $status = 302) {
    global $is_IIS;

    $location = apply_filters('wp_redirect', $location, $status);

    if ( !$location ) // allows the wp_redirect filter to cancel a redirect
        return false;

    $location = wp_sanitize_redirect($location);

    if ( $is_IIS ) {
        header("Refresh: 0;url=$location");
    } else {
        if ( php_sapi_name() != 'cgi-fcgi' )
            status_header($status); // This causes problems on IIS and some FastCGI setups
        header("Location: $location");
    }
}
endif;

if ( !function_exists('wp_sanitize_redirect') ) :
/**
 * sanitizes a URL for use in a redirect
 * @return string redirect-sanitized URL
 **/
function wp_sanitize_redirect($location) {
    $location = preg_replace('|[^a-z0-9-~+_.?#=&;,/:%]|i', '', $location);
    $location = wp_kses_no_null($location);

    // remove %0d and %0a from location
    $strip = array('%0d', '%0a');
    $found = true;
    while($found) {
        $found = false;
        foreach($strip as $val) {
            while(strpos($location, $val) !== false) {
                $found = true;
                $location = str_replace($val, '', $location);
            }
        }
    }
    return $location;
}
endif;

if ( !function_exists('wp_safe_redirect') ) :
/**
 * performs a safe (local) redirect, using wp_redirect()
 * @return void
 **/
function wp_safe_redirect($location, $status = 302) {

    // Need to look at the URL the way it will end up in wp_redirect()
    $location = wp_sanitize_redirect($location);

    // browsers will assume 'http' is your protocol, and will obey a redirect to a URL starting with '//'
    if ( substr($location, 0, 2) == '//' )
        $location = 'http:' . $location;

    $lp  = parse_url($location);
    $wpp = parse_url(get_option('home'));

    $allowed_hosts = (array) apply_filters('allowed_redirect_hosts', array($wpp['host']), $lp['host']);

    if ( isset($lp['host']) && ( !in_array($lp['host'], $allowed_hosts) && $lp['host'] != strtolower($wpp['host'])) )
        $location = get_option('siteurl') . '/wp-admin/';

    wp_redirect($location, $status);
}
endif;