' . __("Invite a friend", "secure_invite") . '

' . __("Invitation settings", "secure_invite") . ' ' . __("Invitation list", "secure_invite") . ' | ' . __("Special users", "secure_invite") . '

' . __("Settings presets", "secure_invite") . '

• ' . __("Anyone can join with or without an invitation, and all users can invite as many people as they like", "secure_invites") . '
• ' . __("Signup is just for invited people, and all users can invite as many people as they like", "secure_invites") . '
• ' . __("Signup is just for invited people, and all users who have been registered for 30 days or more can invite as many people as they like", "secure_invites") . '
• ' . __("Signup is just for invited people, and all users who have been registered for 30 days or more can invite up to 10 people", "secure_invites") . '
• ' . __("Use custom settings", "secure_invites") . '

' . __("Save this preset", "secure_invite") . '

'; echo '

' . __("User invitation settings", "secure_invite") . ' ' . __("Invitation list", "secure_invite") . ' | ' . __("Settings", "secure_invite") . '

'; if (@$_POST && is_array($_POST) && count($_POST) > 0) { // show the user results if ($_POST["secure_invite_search_users"] != "") { $q = trim($_POST["secure_invite_search_users"]); $sql = "select u.ID, u.user_nicename, u.display_name, u.user_email, u.user_login, (select count(i.invited_email) from " . $wpdb->base_prefix . "invitations i inner join " . $wpdb->users . " s on s.user_email = i.invited_email where i.user_id = u.ID) as signups, (select count(invited_email) from " . $wpdb->base_prefix . "invitations where user_id = u.ID) as invitations from " . $wpdb->users . " u where u.user_email like '%" . mysql_real_escape_string($q) . "%' or u.user_nicename like '%" . mysql_real_escape_string($q) . "%' or u.display_name like '%" . mysql_real_escape_string($q) . "%' or u.user_login like '%" . mysql_real_escape_string($q) . "%';"; $users = $wpdb->get_results($sql); if ($users && is_array($users) && count($users) > 0) { echo '

' . __("Choose a user", "secure_invite") . '

'; foreach($users as $user) { echo ' '; } echo '

' . __("Username", "secure_invite") . '	' . __("Nice name", "secure_invite") . '	' . __("Display name", "secure_invite") . '	' . __("Email", "secure_invite") . '	' . __("Invites sent", "secure_invite") . '	' . __("Resulting signups", "secure_invite") . '
' . $user->user_login . '	' . $user->user_nicename . '	' . $user->display_name . '	' . $user->user_email . '	' . $user->invitations . '	' . $user->signups . '

'; } else { echo ' '; } } else { // update the details $can = "no"; if ($_POST["secure_invite_user_can_invite"] == "1") { $can = "yes"; } update_usermeta($_GET["id"], "secure_invite_user_can_invite", $can); update_usermeta($_GET["id"], "secure_invite_user_invite_limit", "_" .$_POST["secure_invite_user_invite_limit"]); echo ' '; } } // get a user if (@$_GET && is_array($_GET) && $_GET["id"] != "") { $user = get_userdata($_GET["id"]); $can_invite = get_usermeta($_GET["id"], "secure_invite_user_can_invite"); if ($can_invite == "no") { $can_invite = ''; } else { $can_invite = ' checked="checked"'; } $invite_limit = trim(get_usermeta($_GET["id"], "secure_invite_user_invite_limit"), "_"); $remaining = secure_invite_user_invites_remaining($user->ID); if ($remaining != "") { $remaining = "

" . $remaining . "

"; } echo '

' . __("Set invite settings for this user", "secure_invite") . '

' . __("Username", "secure_invite") . ': ' . $user->user_login . '

' . __("Invites sent", "secure_invite") . ': ' . secure_invite_user_sent_invites($user->ID) . '

' . $remaining . '

' . __("Invites accepted", "secure_invite") . ': ' . (int)secure_invite_user_accepted_invites($user->ID) . '

' . __("Invite points", "secure_invite") . ': ' . (int)get_usermeta($user->ID, "secure_invite_points") . '

' . __("Can invite", "secure_invite") . ' ' . __("Can this user send invitations?", "secure_invites") . '

' . __("Invitation limit", "secure_invite") . ' ' . __("Number of invitations this user can send (leave blank to use the global default, or 0 for unlimited)", "secure_invites") . '

'; } echo '

' . __("Search users", "secure_invite") . '

' . __("Search for a user to override their invitation settings.", "secure_invite") . '

' . __("Search users", "secure_invite") . '

'; secure_invite_wp_plugin_standard_header( "GBP", "Secure invites", "Chris Taylor", "chris@stillbreathing.co.uk", "http://wordpress.org/extend/plugins/wordpress-mu-secure-invites/" ); echo '

' . __("Secure invites admin", "secure_invite") . ' ' . __("Settings", "secure_invite") . ' | ' . __("Special users", "secure_invite") . '

'; // if deleting if ((isset($_GET["delete"]) && $_GET["delete"] != "") || (isset($_POST["delete"]) && @$_POST["delete"] != "")) { if (isset($_GET["delete"]) && $_GET["delete"] != "") { $sql = "delete from ".$wpdb->base_prefix."invitations where invited_email = '" . str_replace(" ", "+", urldecode($wpdb->escape($_GET["delete"]))) . "';"; if ($wpdb->query($sql)) { echo ''; } else { echo ''; } } else { $emails = str_replace(" ", "+", urldecode(implode("','", $_POST["delete"]))); $sql = "delete from ".$wpdb->base_prefix."invitations where invited_email in ('" . $emails . "');"; if ($wpdb->query($sql)) { echo ''; } else { echo ''; } } } // check the invites table exists secure_invite_check_table(); // show the number of invites per month $sql = "select UNIX_TIMESTAMP(i.datestamp) as date, count(i.invited_email) as invites, (select count(i2.invited_email) from ".$wpdb->base_prefix."invitations i2 inner join ".$wpdb->users." u2 on u2.user_email = i2.invited_email where year(i2.datestamp) = year(i.datestamp) and month(i2.datestamp) = month(i.datestamp)) as signups from ".$wpdb->base_prefix."invitations i group by month(i.datestamp) order by i.datestamp desc limit 0, 12;"; $invites_per_month = $wpdb->get_results($sql); $invites_per_month_num = count($invites_per_month); echo ' '; // get the best inviters by signups $sql = "select u.user_nicename, count(i.invited_email) as invites, (select count(i2.invited_email) from ".$wpdb->base_prefix."invitations i2 inner join ".$wpdb->users." u2 on u2.user_email = i2.invited_email where i2.user_id = i.user_id) as signups from ".$wpdb->base_prefix."invitations i inner join ".$wpdb->base_prefix."users u on u.id = i.user_id group by i.user_id order by count(i.invited_email) desc limit 0, 6;"; $best_inviters = $wpdb->get_results($sql); $best_inviters_num = count($best_inviters); echo ' '; // get the best inviters by points $sql = "select u.user_nicename, CAST(m.secure_invite_points AS SIGNED) as secure_invite_points from ".$wpdb->users." u inner join ".$wpdb->usermeta." m on m.user_id = u.ID and m.meta_key = 'secure_invite_points' order by CAST(m.secure_invite_points AS SIGNED) desc limit 0, 6;"; $best_inviters = $wpdb->get_results($sql); $best_inviters_num = count($best_inviters); if ($best_inviters && $best_inviters_num > 0) { echo ' '; } // get the page $page = @(int)$_GET["p"]; if ($page == "") { $page = "1"; } $start = ($page * 50) -50; if ($start == "") { $start = 0; } // get the invites $sql = $wpdb->prepare("select SQL_CALC_FOUND_ROWS i.user_id, i.invited_email, UNIX_TIMESTAMP(i.datestamp) as datestamp, u.user_nicename as inviter, l.user_nicename as signed_up from ".$wpdb->base_prefix."invitations i inner join ".$wpdb->users." u on u.id = i.user_id left outer join ".$wpdb->users." l on l.user_email = i.invited_email order by i.datestamp desc limit %d, 50", $start); $invites = $wpdb->get_results($sql); echo '

' . __("Invitation list", "secure_invite") . '

'; $invites_num = count($invites); $total = $wpdb->get_var( "SELECT found_rows() AS found_rows" ); $invites_pages = ceil($total/50); if ($invites && $invites_num > 0) { if ($invites_pages > 1) { $thisp = @$_GET["p"]; if ($thisp == "") { $thisp = 1; } echo '

'; for ($i = 1; $i <= $invites_pages; $i++) { if ($i == $thisp) { echo '
• '.$i.'
'; } else { echo '
• '.$i.'
'; } } echo '

'; } echo '

'; $alt = ''; foreach ($invites as $invite) { if ($alt == '') { $alt = ' class="alternate"'; } else { $alt = ''; } echo ' '; if ($invite->signed_up == "") { echo ' '; } else { echo ' '; } echo ' '; } echo '

'.__("Inviter", "secure_invite").'	'.__("Datestamp", "secure_invite").'	'.__("Invited email", "secure_invite").'	'.__("Signed up name", "secure_invite").'	'.__("Delete invitation", "secure_invite").'
' . $invite->inviter . '	' . date("F j, Y, g:i a", $invite->datestamp) . '	' . $invite->invited_email . '	' . $invite->signed_up . '	' . __("Delete", "secure_invite") . '

'; if ($invites_pages > 1) { echo '

'; for ($i = 1; $i <= $invites_pages; $i++) { if ($i == $thisp) { echo '
• '.$i.'
'; } else { echo '
• '.$i.'
'; } } echo '

'; } } else { echo '

' . __("No invitations sent yet.", "secure_invite") . '

'; } } // check the invites table exists function secure_invite_check_table() { global $wpdb; // if the invitations table does not exist $sql = "select count(id) from ".$wpdb->base_prefix."invitations;"; $exists = $wpdb->get_var($sql); if($exists == "") { require_once(ABSPATH . 'wp-admin/upgrade-functions.php'); // include the file with the required database manipulation functions // create the table $sql = "CREATE TABLE ".$wpdb->base_prefix."invitations ( id mediumint(9) NOT NULL AUTO_INCREMENT, user_id mediumint(9), invited_email varchar(255), datestamp datetime, PRIMARY KEY (id) );"; dbDelta($sql); } } // show a BuddyPress form function secure_invite_buddypress_form($hidelink = false, $usepost = false) { // if the current user is allowed to send invites if (secure_invite_user_can_invite()) { $name = ""; $email = ""; $message = ""; if ($usepost) { $name = @$_POST["name"]; $email = @$_POST["email"]; $message = @$_POST["personalmessage"]; } $rand = rand(1, 10000); $hide = "_visible"; if (!$hidelink) { $hide = ""; echo ' '; } $qs = ""; if ($_SERVER["QUERY_STRING"] != "") { $qs = "?" . $_SERVER["QUERY_STRING"]; } echo ' '; } } // show an invitation form function secure_invite_form($success='Thanks, your invitation has been sent', $error='Sorry, your invitation could not be sent. Perhaps this email address is already registered.') { // if the current user is allowed to send invites if (secure_invite_user_can_invite()) { // if an email has been supplied if (@$_POST['invite-email'] != "" && is_email($_POST['invite-email'])) { if (secure_invite_send()) { // show the success message echo '

' . __($success, "secure_invite") . '

'; } else { // show the error message echo '

' . __($error, "secure_invite") . '

'; } } $qs = ""; if ($_SERVER["QUERY_STRING"] != "") { $qs = "?" . $_SERVER["QUERY_STRING"]; } // show the form echo '

' . __("Name of person to invite", "secure_invite") . '

' . __("Email of person to invite", "secure_invite") . '

' . __("A personal message (optional)", "secure_invite") . '

' . __("Send this invitation", "secure_invite") . ' ' . secure_invite_user_invites_remaining() . '

'; } } // see if a user can send an invite function secure_invite_user_can_invite() { global $wpdb, $current_user; $site_registration = stripslashes( get_site_option( "registration" ) ); // if the current user exists and is logged in if ($current_user && $current_user->id != "") { // if site registration is allowed if ($site_registration == "all" || $site_registration == "user") { // if the user has not been overridden if (get_usermeta($current_user->ID, "secure_invite_user_can_invite") != "no") { // get the date this user was registered $registered = $wpdb->get_var($wpdb->prepare("select UNIX_TIMESTAMP(user_registered) from ".$wpdb->users." where id=%d;", $current_user->id)); // get how many days after registration invites are locked $secure_invite_days_after_joining = (int)stripslashes( get_site_option("secure_invite_days_after_joining") ); if ($secure_invite_days_after_joining == "") { $secure_invite_days_after_joining = 30; } // if the user is not too new, or is a site admin if ($registered < (time() - ($secure_invite_days_after_joining * 24 * 60 * 60)) || is_site_admin()) { // get the total number of invites a user is allowed to send $secure_invite_invite_limit = stripslashes( get_site_option("secure_invite_invite_limit") ); if ($secure_invite_invite_limit == "") { $secure_invite_invite_limit = 0; } // get the limit for this user $user_limit = trim(get_usermeta($current_user->ID, "secure_invite_user_invite_limit"), "_"); if ($user_limit != "") { $secure_invite_invite_limit = (int)$user_limit; } // get the number of invites this user has sent $sent = secure_invite_user_sent_invites(); // if the user has sent less than their limit, or there is no limit if ($sent < $secure_invite_invite_limit || $secure_invite_invite_limit == "" || $secure_invite_invite_limit == 0 || $user_limit == 0) { return true; } else { add_action('admin_head', 'secure_invites_disallowed_limit'); add_action('wp_head', 'secure_invites_disallowed_limit'); return false; } } else { add_action('admin_head', 'secure_invites_disallowed_new'); add_action('wp_head', 'secure_invites_disallowed_new'); return false; } } else { add_action('admin_head', 'secure_invites_disallowed_turnedoff'); add_action('wp_head', 'secure_invites_disallowed_turnedoff'); return false; } } else { add_action('admin_head', 'secure_invites_disallowed_registration'); add_action('wp_head', 'secure_invites_disallowed_registration'); return false; } } else { add_action('admin_head', 'secure_invites_disallowed_login'); add_action('wp_head', 'secure_invites_disallowed_login'); return false; } } // the reasons why people are disallowed from sending invites function secure_invites_disallowed_limit() { echo ''; } function secure_invites_disallowed_new() { echo ''; } function secure_invites_disallowed_registration() { echo ''; } function secure_invites_disallowed_login() { echo ''; } function secure_invites_disallowed_turnedoff() { echo ''; } // get the number of invites this user has sent function secure_invite_user_sent_invites($userid = 0) { global $wpdb, $current_user; if ($userid == 0) { $userid = $current_user->id; } return $wpdb->get_var($wpdb->prepare("select count(user_id) from ".$wpdb->base_prefix."invitations where user_id = %d", $userid)); } // get the number of invites this user has sent which have resulted in a non-spam, non-deleted signup function secure_invite_user_accepted_invites() { global $wpdb, $current_user; if ($userid == 0) { $userid = $current_user->id; } return $wpdb->get_var($wpdb->prepare("select count(u.user_id) from ".$wpdb->users." u inner join ".$wpdb->base_prefix."invitations i on i.invited_email = u.user_email where u.spam = 0 and u.deleted = 0 and i.user_id = %d", $userid)); } // show how many invites this user is allowed to send function secure_invite_user_invites_remaining() { global $current_user; // get the total number of invites a user is allowed to send $secure_invite_invite_limit = stripslashes( get_site_option("secure_invite_invite_limit") ); if ($secure_invite_invite_limit == "") { $secure_invite_invite_limit = secure_invite_default_setting("secure_invite_invite_limit"); } // get the limit for this user $user_limit = trim(get_usermeta($current_user->ID, "secure_invite_user_invite_limit"), "_"); if ($user_limit != "") { $secure_invite_invite_limit = (int)$user_limit; } if ($secure_invite_invite_limit > 0) { // get the number of invites sent $sent = secure_invite_user_sent_invites(); return __("Number of invites left to send:", "secure_invite") . " " . ($secure_invite_invite_limit - $sent); } else { return ""; } } // check if an email address exists function secure_invite_email_exists($email) { if( function_exists('email_exists') ) { return email_exists( trim( $email ) ); } else { global $wpdb; $sql = $wpdb->prepare( "select user_email from " . $wpdb->users . " where user_email = %s;", trim( $email ) ); $saved_email = $wpdb->get_var( $sql ); if ( $saved_email == trim( $email ) ) { return true; } else { return false; } } return false; } // send an invitation function secure_invite_send() { global $current_site, $current_user, $blog_id, $wpdb; // check the user can invite if (secure_invite_user_can_invite()) { // check this email address isn't already registered if ( !secure_invite_email_exists( trim($_POST['invite-email']) ) ) { $usernickname = $current_user->display_name; $to = trim($_POST['invite-email']); $from = $current_user->display_name . ' <' . $current_user->user_email . '>'; $pname = trim($_POST['invite-name']); $site_url = $current_site->domain; $site_name = stripslashes( get_site_option("site_name") ); // save the invitation $sql = $wpdb->prepare("insert into ".$wpdb->base_prefix."invitations (user_id, invited_email, datestamp) values (%d, %s, now());", $current_user->id, $to); $wpdb->print_error(); $query = $wpdb->query($sql); $query_error = mysql_error(); // if the invitation could be saved if ($query) { if(!empty($pname)) { $subject = $pname.', '.$usernickname.' has invited you to join '.$site_name; $message .= "Dear ".$pname.", "; } else { $subject = 'Hi there, '. $usernickname.' has invited you to join '.$site_name; $message .= "Hi there, "; } $secure_invite_signup_time_limit = (int)stripslashes( get_site_option("secure_invite_signup_time_limit") ); if ($secure_invite_signup_time_limit == "") { $secure_invite_signup_time_limit = secure_invite_default_setting("secure_invite_signup_time_limit"); } $secure_invite_signup_page = stripslashes( get_site_option("secure_invite_signup_page") ); if ($secure_invite_signup_page == "") { $secure_invite_signup_page = secure_invite_default_setting("secure_invite_signup_page"); } $secure_invite_registration_page = stripslashes( get_site_option("secure_invite_registration_page") ); if ($secure_invite_registration_page == "") { $secure_invite_registration_page = secure_invite_default_setting("secure_invite_registration_page"); } $secure_invite_default_message = stripslashes( get_site_option("secure_invite_default_message") ); if ($secure_invite_default_message == "") { $secure_invite_default_message = secure_invite_default_setting("secure_invite_default_message"); } $secure_invite_default_message = str_replace("[sitename]", $site_name, $secure_invite_default_message); $secure_invite_default_message = str_replace("[signuplink]", $secure_invite_registration_page . "?" . $to, $secure_invite_default_message); $secure_invite_default_message = str_replace("[name]", $usernickname, $secure_invite_default_message); $secure_invite_default_message = str_replace("[timeout]", $secure_invite_signup_time_limit, $secure_invite_default_message); $message = $message . "\n\n" . stripslashes($_POST['invite-personalmessage']) . "\n\n" . $secure_invite_default_message; $headers = 'From: '. $from . "\r\n" . 'Reply-To: ' . $from; wp_mail($to, $subject, $message, $headers); return true; } else { $headers = 'From: '. $from . "\r\n" . 'Reply-To: ' . $from; wp_mail(stripslashes( get_site_option("admin_email") ), "Secure invite failure for ".$from, "A user just tried to invite someone to join ".$site_name.". The following SQL query could not be completed:\n\n".$sql."\n\nThe error reported was:\n\n".$query_error."\n\nThis is an automatic email sent by the Secure Invites plugin.", $headers); } } } return false; } // add an invitation to the database function secure_invite_admin() { global $current_site, $current_user, $blog_id, $wpdb; $site_url = $current_site->domain; $site_name = stripslashes( get_site_option("site_name") ); // check the invites table exists secure_invite_check_table(); if($_POST['invite-action']=="send") { // if the email is valid if(is_email($_POST['invite-email'])) { // try to send if (secure_invite_send()) { echo ''; // the invitation could not be saved, show an error } else { echo ''; } } else { echo ''; } // end error } // end if action is send echo ''; } // a standard header for your plugins, offers a PayPal donate button and link to a support page function secure_invite_wp_plugin_standard_header( $currency = "", $plugin_name = "", $author_name = "", $paypal_address = "", $bugs_page ) { $r = ""; $option = get_option( $plugin_name . " header" ); if ( $_GET[ "header" ] != "" || $_GET["thankyou"] == "true" ) { update_option( $plugin_name . " header", "hide" ); $option = "hide"; } if ( $_GET["thankyou"] == "true" ) { $r .= ''; } if ( $currency != "" && $plugin_name != "" && $_GET[ "header" ] != "hide" && $option != "hide" ) { $r .= ''; } print $r; } function secure_invite_wp_plugin_standard_footer( $currency = "", $plugin_name = "", $author_name = "", $paypal_address = "", $bugs_page ) { $r = ""; if ( $currency != "" && $plugin_name != "" ) { $r .= '

'; if ( $paypal_address != "" && is_email( $paypal_address ) ) { $r .= ' '; } if ( $bugs_page != "" ) { $r .= sprintf ( __( 'Bugs' ), $bugs_page ); } $r .= '

'; } print $r; } ?>