<?php

[0] Fix | Delete

/**

[1] Fix | Delete

* User API: WP_User_Query class

[2] Fix | Delete

*

[3] Fix | Delete

* @package WordPress

[4] Fix | Delete

* @subpackage Users

[5] Fix | Delete

* @since 4.4.0

[6] Fix | Delete

*/

[7] Fix | Delete

[8] Fix | Delete

/**

[9] Fix | Delete

* Core class used for querying users.

[10] Fix | Delete

*

[11] Fix | Delete

* @since 3.1.0

[12] Fix | Delete

*

[13] Fix | Delete

* @see WP_User_Query::prepare_query() for information on accepted arguments.

[14] Fix | Delete

*/

[15] Fix | Delete

#[AllowDynamicProperties]

[16] Fix | Delete

class WP_User_Query {

[17] Fix | Delete

[18] Fix | Delete

/**

[19] Fix | Delete

* Query vars, after parsing

[20] Fix | Delete

*

[21] Fix | Delete

* @since 3.5.0

[22] Fix | Delete

* @var array

[23] Fix | Delete

*/

[24] Fix | Delete

public $query_vars = array();

[25] Fix | Delete

[26] Fix | Delete

/**

[27] Fix | Delete

* List of found user IDs.

[28] Fix | Delete

*

[29] Fix | Delete

* @since 3.1.0

[30] Fix | Delete

* @var array

[31] Fix | Delete

*/

[32] Fix | Delete

private $results;

[33] Fix | Delete

[34] Fix | Delete

/**

[35] Fix | Delete

* Total number of found users for the current query

[36] Fix | Delete

*

[37] Fix | Delete

* @since 3.1.0

[38] Fix | Delete

* @var int

[39] Fix | Delete

*/

[40] Fix | Delete

private $total_users = 0;

[41] Fix | Delete

[42] Fix | Delete

/**

[43] Fix | Delete

* Metadata query container.

[44] Fix | Delete

*

[45] Fix | Delete

* @since 4.2.0

[46] Fix | Delete

* @var WP_Meta_Query

[47] Fix | Delete

*/

[48] Fix | Delete

public $meta_query = false;

[49] Fix | Delete

[50] Fix | Delete

/**

[51] Fix | Delete

* The SQL query used to fetch matching users.

[52] Fix | Delete

*

[53] Fix | Delete

* @since 4.4.0

[54] Fix | Delete

* @var string

[55] Fix | Delete

*/

[56] Fix | Delete

public $request;

[57] Fix | Delete

[58] Fix | Delete

private $compat_fields = array( 'results', 'total_users' );

[59] Fix | Delete

[60] Fix | Delete

// SQL clauses.

[61] Fix | Delete

public $query_fields;

[62] Fix | Delete

public $query_from;

[63] Fix | Delete

public $query_where;

[64] Fix | Delete

public $query_orderby;

[65] Fix | Delete

public $query_limit;

[66] Fix | Delete

[67] Fix | Delete

/**

[68] Fix | Delete

* Constructor.

[69] Fix | Delete

*

[70] Fix | Delete

* @since 3.1.0

[71] Fix | Delete

*

[72] Fix | Delete

* @param null|string|array $query Optional. The query variables.

[73] Fix | Delete

* See WP_User_Query::prepare_query() for information on accepted arguments.

[74] Fix | Delete

*/

[75] Fix | Delete

public function __construct( $query = null ) {

[76] Fix | Delete

if ( ! empty( $query ) ) {

[77] Fix | Delete

$this->prepare_query( $query );

[78] Fix | Delete

$this->query();

[79] Fix | Delete

}

[80] Fix | Delete

}

[81] Fix | Delete

[82] Fix | Delete

/**

[83] Fix | Delete

* Fills in missing query variables with default values.

[84] Fix | Delete

*

[85] Fix | Delete

* @since 4.4.0

[86] Fix | Delete

*

[87] Fix | Delete

* @param string|array $args Query vars, as passed to `WP_User_Query`.

[88] Fix | Delete

* @return array Complete query variables with undefined ones filled in with defaults.

[89] Fix | Delete

*/

[90] Fix | Delete

public static function fill_query_vars( $args ) {

[91] Fix | Delete

$defaults = array(

[92] Fix | Delete

'blog_id' => get_current_blog_id(),

[93] Fix | Delete

'role' => '',

[94] Fix | Delete

'role__in' => array(),

[95] Fix | Delete

'role__not_in' => array(),

[96] Fix | Delete

'capability' => '',

[97] Fix | Delete

'capability__in' => array(),

[98] Fix | Delete

'capability__not_in' => array(),

[99] Fix | Delete

'meta_key' => '',

[100] Fix | Delete

'meta_value' => '',

[101] Fix | Delete

'meta_compare' => '',

[102] Fix | Delete

'include' => array(),

[103] Fix | Delete

'exclude' => array(),

[104] Fix | Delete

'search' => '',

[105] Fix | Delete

'search_columns' => array(),

[106] Fix | Delete

'orderby' => 'login',

[107] Fix | Delete

'order' => 'ASC',

[108] Fix | Delete

'offset' => '',

[109] Fix | Delete

'number' => '',

[110] Fix | Delete

'paged' => 1,

[111] Fix | Delete

'count_total' => true,

[112] Fix | Delete

'fields' => 'all',

[113] Fix | Delete

'who' => '',

[114] Fix | Delete

'has_published_posts' => null,

[115] Fix | Delete

'nicename' => '',

[116] Fix | Delete

'nicename__in' => array(),

[117] Fix | Delete

'nicename__not_in' => array(),

[118] Fix | Delete

'login' => '',

[119] Fix | Delete

'login__in' => array(),

[120] Fix | Delete

'login__not_in' => array(),

[121] Fix | Delete

'cache_results' => true,

[122] Fix | Delete

);

[123] Fix | Delete

[124] Fix | Delete

return wp_parse_args( $args, $defaults );

[125] Fix | Delete

}

[126] Fix | Delete

[127] Fix | Delete

/**

[128] Fix | Delete

* Prepares the query variables.

[129] Fix | Delete

*

[130] Fix | Delete

* @since 3.1.0

[131] Fix | Delete

* @since 4.1.0 Added the ability to order by the `include` value.

[132] Fix | Delete

* @since 4.2.0 Added 'meta_value_num' support for `$orderby` parameter. Added multi-dimensional array syntax

[133] Fix | Delete

* for `$orderby` parameter.

[134] Fix | Delete

* @since 4.3.0 Added 'has_published_posts' parameter.

[135] Fix | Delete

* @since 4.4.0 Added 'paged', 'role__in', and 'role__not_in' parameters. The 'role' parameter was updated to

[136] Fix | Delete

* permit an array or comma-separated list of values. The 'number' parameter was updated to support

[137] Fix | Delete

* querying for all users with using -1.

[138] Fix | Delete

* @since 4.7.0 Added 'nicename', 'nicename__in', 'nicename__not_in', 'login', 'login__in',

[139] Fix | Delete

* and 'login__not_in' parameters.

[140] Fix | Delete

* @since 5.1.0 Introduced the 'meta_compare_key' parameter.

[141] Fix | Delete

* @since 5.3.0 Introduced the 'meta_type_key' parameter.

[142] Fix | Delete

* @since 5.9.0 Added 'capability', 'capability__in', and 'capability__not_in' parameters.

[143] Fix | Delete

* Deprecated the 'who' parameter.

[144] Fix | Delete

* @since 6.3.0 Added 'cache_results' parameter.

[145] Fix | Delete

*

[146] Fix | Delete

* @global wpdb $wpdb WordPress database abstraction object.

[147] Fix | Delete

* @global WP_Roles $wp_roles WordPress role management object.

[148] Fix | Delete

*

[149] Fix | Delete

* @param string|array $query {

[150] Fix | Delete

* Optional. Array or string of query parameters.

[151] Fix | Delete

*

[152] Fix | Delete

* @type int $blog_id The site ID. Default is the current site.

[153] Fix | Delete

* @type string|string[] $role An array or a comma-separated list of role names that users

[154] Fix | Delete

* must match to be included in results. Note that this is

[155] Fix | Delete

* an inclusive list: users must match *each* role. Default empty.

[156] Fix | Delete

* @type string[] $role__in An array of role names. Matched users must have at least one

[157] Fix | Delete

* of these roles. Default empty array.

[158] Fix | Delete

* @type string[] $role__not_in An array of role names to exclude. Users matching one or more

[159] Fix | Delete

* of these roles will not be included in results. Default empty array.

[160] Fix | Delete

* @type string|string[] $meta_key Meta key or keys to filter by.

[161] Fix | Delete

* @type string|string[] $meta_value Meta value or values to filter by.

[162] Fix | Delete

* @type string $meta_compare MySQL operator used for comparing the meta value.

[163] Fix | Delete

* See WP_Meta_Query::__construct() for accepted values and default value.

[164] Fix | Delete

* @type string $meta_compare_key MySQL operator used for comparing the meta key.

[165] Fix | Delete

* See WP_Meta_Query::__construct() for accepted values and default value.

[166] Fix | Delete

* @type string $meta_type MySQL data type that the meta_value column will be CAST to for comparisons.

[167] Fix | Delete

* See WP_Meta_Query::__construct() for accepted values and default value.

[168] Fix | Delete

* @type string $meta_type_key MySQL data type that the meta_key column will be CAST to for comparisons.

[169] Fix | Delete

* See WP_Meta_Query::__construct() for accepted values and default value.

[170] Fix | Delete

* @type array $meta_query An associative array of WP_Meta_Query arguments.

[171] Fix | Delete

* See WP_Meta_Query::__construct() for accepted values.

[172] Fix | Delete

* @type string|string[] $capability An array or a comma-separated list of capability names that users

[173] Fix | Delete

* must match to be included in results. Note that this is

[174] Fix | Delete

* an inclusive list: users must match *each* capability.

[175] Fix | Delete

* Does NOT work for capabilities not in the database or filtered

[176] Fix | Delete

* via {@see 'map_meta_cap'}. Default empty.

[177] Fix | Delete

* @type string[] $capability__in An array of capability names. Matched users must have at least one

[178] Fix | Delete

* of these capabilities.

[179] Fix | Delete

* Does NOT work for capabilities not in the database or filtered

[180] Fix | Delete

* via {@see 'map_meta_cap'}. Default empty array.

[181] Fix | Delete

* @type string[] $capability__not_in An array of capability names to exclude. Users matching one or more

[182] Fix | Delete

* of these capabilities will not be included in results.

[183] Fix | Delete

* Does NOT work for capabilities not in the database or filtered

[184] Fix | Delete

* via {@see 'map_meta_cap'}. Default empty array.

[185] Fix | Delete

* @type int[] $include An array of user IDs to include. Default empty array.

[186] Fix | Delete

* @type int[] $exclude An array of user IDs to exclude. Default empty array.

[187] Fix | Delete

* @type string $search Search keyword. Searches for possible string matches on columns.

[188] Fix | Delete

* When `$search_columns` is left empty, it tries to determine which

[189] Fix | Delete

* column to search in based on search string. Default empty.

[190] Fix | Delete

* @type string[] $search_columns Array of column names to be searched. Accepts 'ID', 'user_login',

[191] Fix | Delete

* 'user_email', 'user_url', 'user_nicename', 'display_name'.

[192] Fix | Delete

* Default empty array.

[193] Fix | Delete

* @type string|array $orderby Field(s) to sort the retrieved users by. May be a single value,

[194] Fix | Delete

* an array of values, or a multi-dimensional array with fields as

[195] Fix | Delete

* keys and orders ('ASC' or 'DESC') as values. Accepted values are:

[196] Fix | Delete

* - 'ID'

[197] Fix | Delete

* - 'display_name' (or 'name')

[198] Fix | Delete

* - 'include'

[199] Fix | Delete

* - 'user_login' (or 'login')

[200] Fix | Delete

* - 'login__in'

[201] Fix | Delete

* - 'user_nicename' (or 'nicename')

[202] Fix | Delete

* - 'nicename__in'

[203] Fix | Delete

* - 'user_email' (or 'email')

[204] Fix | Delete

* - 'user_url' (or 'url')

[205] Fix | Delete

* - 'user_registered' (or 'registered')

[206] Fix | Delete

* - 'post_count'

[207] Fix | Delete

* - 'meta_value'

[208] Fix | Delete

* - 'meta_value_num'

[209] Fix | Delete

* - The value of `$meta_key`

[210] Fix | Delete

* - An array key of `$meta_query`

[211] Fix | Delete

* To use 'meta_value' or 'meta_value_num', `$meta_key`

[212] Fix | Delete

* must be also be defined. Default 'user_login'.

[213] Fix | Delete

* @type string $order Designates ascending or descending order of users. Order values

[214] Fix | Delete

* passed as part of an `$orderby` array take precedence over this

[215] Fix | Delete

* parameter. Accepts 'ASC', 'DESC'. Default 'ASC'.

[216] Fix | Delete

* @type int $offset Number of users to offset in retrieved results. Can be used in

[217] Fix | Delete

* conjunction with pagination. Default 0.

[218] Fix | Delete

* @type int $number Number of users to limit the query for. Can be used in

[219] Fix | Delete

* conjunction with pagination. Value -1 (all) is supported, but

[220] Fix | Delete

* should be used with caution on larger sites.

[221] Fix | Delete

* Default -1 (all users).

[222] Fix | Delete

* @type int $paged When used with number, defines the page of results to return.

[223] Fix | Delete

* Default 1.

[224] Fix | Delete

* @type bool $count_total Whether to count the total number of users found. If pagination

[225] Fix | Delete

* is not needed, setting this to false can improve performance.

[226] Fix | Delete

* Default true.

[227] Fix | Delete

* @type string|string[] $fields Which fields to return. Single or all fields (string), or array

[228] Fix | Delete

* of fields. Accepts:

[229] Fix | Delete

* - 'ID'

[230] Fix | Delete

* - 'display_name'

[231] Fix | Delete

* - 'user_login'

[232] Fix | Delete

* - 'user_nicename'

[233] Fix | Delete

* - 'user_email'

[234] Fix | Delete

* - 'user_url'

[235] Fix | Delete

* - 'user_registered'

[236] Fix | Delete

* - 'user_pass'

[237] Fix | Delete

* - 'user_activation_key'

[238] Fix | Delete

* - 'user_status'

[239] Fix | Delete

* - 'spam' (only available on multisite installs)

[240] Fix | Delete

* - 'deleted' (only available on multisite installs)

[241] Fix | Delete

* - 'all' for all fields and loads user meta.

[242] Fix | Delete

* - 'all_with_meta' Deprecated. Use 'all'.

[243] Fix | Delete

* Default 'all'.

[244] Fix | Delete

* @type string $who Deprecated, use `$capability` instead.

[245] Fix | Delete

* Type of users to query. Accepts 'authors'.

[246] Fix | Delete

* Default empty (all users).

[247] Fix | Delete

* @type bool|string[] $has_published_posts Pass an array of post types to filter results to users who have

[248] Fix | Delete

* published posts in those post types. `true` is an alias for all

[249] Fix | Delete

* public post types.

[250] Fix | Delete

* @type string $nicename The user nicename. Default empty.

[251] Fix | Delete

* @type string[] $nicename__in An array of nicenames to include. Users matching one of these

[252] Fix | Delete

* nicenames will be included in results. Default empty array.

[253] Fix | Delete

* @type string[] $nicename__not_in An array of nicenames to exclude. Users matching one of these

[254] Fix | Delete

* nicenames will not be included in results. Default empty array.

[255] Fix | Delete

* @type string $login The user login. Default empty.

[256] Fix | Delete

* @type string[] $login__in An array of logins to include. Users matching one of these

[257] Fix | Delete

* logins will be included in results. Default empty array.

[258] Fix | Delete

* @type string[] $login__not_in An array of logins to exclude. Users matching one of these

[259] Fix | Delete

* logins will not be included in results. Default empty array.

[260] Fix | Delete

* @type bool $cache_results Whether to cache user information. Default true.

[261] Fix | Delete

* }

[262] Fix | Delete

*/

[263] Fix | Delete

public function prepare_query( $query = array() ) {

[264] Fix | Delete

global $wpdb, $wp_roles;

[265] Fix | Delete

[266] Fix | Delete

if ( empty( $this->query_vars ) || ! empty( $query ) ) {

[267] Fix | Delete

$this->query_limit = null;

[268] Fix | Delete

$this->query_vars = $this->fill_query_vars( $query );

[269] Fix | Delete

}

[270] Fix | Delete

[271] Fix | Delete

/**

[272] Fix | Delete

* Fires before the WP_User_Query has been parsed.

[273] Fix | Delete

*

[274] Fix | Delete

* The passed WP_User_Query object contains the query variables,

[275] Fix | Delete

* not yet passed into SQL.

[276] Fix | Delete

*

[277] Fix | Delete

* @since 4.0.0

[278] Fix | Delete

*

[279] Fix | Delete

* @param WP_User_Query $query Current instance of WP_User_Query (passed by reference).

[280] Fix | Delete

*/

[281] Fix | Delete

do_action_ref_array( 'pre_get_users', array( &$this ) );

[282] Fix | Delete

[283] Fix | Delete

// Ensure that query vars are filled after 'pre_get_users'.

[284] Fix | Delete

$qv =& $this->query_vars;

[285] Fix | Delete

$qv = $this->fill_query_vars( $qv );

[286] Fix | Delete

[287] Fix | Delete

$allowed_fields = array(

[288] Fix | Delete

'id',

[289] Fix | Delete

'user_login',

[290] Fix | Delete

'user_pass',

[291] Fix | Delete

'user_nicename',

[292] Fix | Delete

'user_email',

[293] Fix | Delete

'user_url',

[294] Fix | Delete

'user_registered',

[295] Fix | Delete

'user_activation_key',

[296] Fix | Delete

'user_status',

[297] Fix | Delete

'display_name',

[298] Fix | Delete

);

[299] Fix | Delete

if ( is_multisite() ) {

[300] Fix | Delete

$allowed_fields[] = 'spam';

[301] Fix | Delete

$allowed_fields[] = 'deleted';

[302] Fix | Delete

}

[303] Fix | Delete

[304] Fix | Delete

if ( is_array( $qv['fields'] ) ) {

[305] Fix | Delete

$qv['fields'] = array_map( 'strtolower', $qv['fields'] );

[306] Fix | Delete

$qv['fields'] = array_intersect( array_unique( $qv['fields'] ), $allowed_fields );

[307] Fix | Delete

[308] Fix | Delete

if ( empty( $qv['fields'] ) ) {

[309] Fix | Delete

$qv['fields'] = array( 'id' );

[310] Fix | Delete

}

[311] Fix | Delete

[312] Fix | Delete

$this->query_fields = array();

[313] Fix | Delete

foreach ( $qv['fields'] as $field ) {

[314] Fix | Delete

$field = 'id' === $field ? 'ID' : sanitize_key( $field );

[315] Fix | Delete

$this->query_fields[] = "$wpdb->users.$field";

[316] Fix | Delete

}

[317] Fix | Delete

$this->query_fields = implode( ',', $this->query_fields );

[318] Fix | Delete

} elseif ( 'all_with_meta' === $qv['fields'] || 'all' === $qv['fields'] || ! in_array( $qv['fields'], $allowed_fields, true ) ) {

[319] Fix | Delete

$this->query_fields = "$wpdb->users.ID";

[320] Fix | Delete

} else {

[321] Fix | Delete

$field = 'id' === strtolower( $qv['fields'] ) ? 'ID' : sanitize_key( $qv['fields'] );

[322] Fix | Delete

$this->query_fields = "$wpdb->users.$field";

[323] Fix | Delete

}

[324] Fix | Delete

[325] Fix | Delete

if ( isset( $qv['count_total'] ) && $qv['count_total'] ) {

[326] Fix | Delete

$this->query_fields = 'SQL_CALC_FOUND_ROWS ' . $this->query_fields;

[327] Fix | Delete

}

[328] Fix | Delete

[329] Fix | Delete

$this->query_from = "FROM $wpdb->users";

[330] Fix | Delete

$this->query_where = 'WHERE 1=1';

[331] Fix | Delete

[332] Fix | Delete

// Parse and sanitize 'include', for use by 'orderby' as well as 'include' below.

[333] Fix | Delete

if ( ! empty( $qv['include'] ) ) {

[334] Fix | Delete

$include = wp_parse_id_list( $qv['include'] );

[335] Fix | Delete

} else {

[336] Fix | Delete

$include = false;

[337] Fix | Delete

}

[338] Fix | Delete

[339] Fix | Delete

$blog_id = 0;

[340] Fix | Delete

if ( isset( $qv['blog_id'] ) ) {

[341] Fix | Delete

$blog_id = absint( $qv['blog_id'] );

[342] Fix | Delete

}

[343] Fix | Delete

[344] Fix | Delete

if ( $qv['has_published_posts'] && $blog_id ) {

[345] Fix | Delete

if ( true === $qv['has_published_posts'] ) {

[346] Fix | Delete

$post_types = get_post_types( array( 'public' => true ) );

[347] Fix | Delete

} else {

[348] Fix | Delete

$post_types = (array) $qv['has_published_posts'];

[349] Fix | Delete

}

[350] Fix | Delete

[351] Fix | Delete

foreach ( $post_types as &$post_type ) {

[352] Fix | Delete

$post_type = $wpdb->prepare( '%s', $post_type );

[353] Fix | Delete

}

[354] Fix | Delete

[355] Fix | Delete

$posts_table = $wpdb->get_blog_prefix( $blog_id ) . 'posts';

[356] Fix | Delete

$this->query_where .= " AND $wpdb->users.ID IN ( SELECT DISTINCT $posts_table.post_author FROM $posts_table WHERE $posts_table.post_status = 'publish' AND $posts_table.post_type IN ( " . implode( ', ', $post_types ) . ' ) )';

[357] Fix | Delete

}

[358] Fix | Delete

[359] Fix | Delete

// nicename

[360] Fix | Delete

if ( '' !== $qv['nicename'] ) {

[361] Fix | Delete

$this->query_where .= $wpdb->prepare( ' AND user_nicename = %s', $qv['nicename'] );

[362] Fix | Delete

}

[363] Fix | Delete

[364] Fix | Delete

if ( ! empty( $qv['nicename__in'] ) ) {

[365] Fix | Delete

$sanitized_nicename__in = array_map( 'esc_sql', $qv['nicename__in'] );

[366] Fix | Delete

$nicename__in = implode( "','", $sanitized_nicename__in );

[367] Fix | Delete

$this->query_where .= " AND user_nicename IN ( '$nicename__in' )";

[368] Fix | Delete

}

[369] Fix | Delete

[370] Fix | Delete

if ( ! empty( $qv['nicename__not_in'] ) ) {

[371] Fix | Delete

$sanitized_nicename__not_in = array_map( 'esc_sql', $qv['nicename__not_in'] );

[372] Fix | Delete

$nicename__not_in = implode( "','", $sanitized_nicename__not_in );

[373] Fix | Delete

$this->query_where .= " AND user_nicename NOT IN ( '$nicename__not_in' )";

[374] Fix | Delete

}

[375] Fix | Delete

[376] Fix | Delete

// login

[377] Fix | Delete

if ( '' !== $qv['login'] ) {

[378] Fix | Delete

$this->query_where .= $wpdb->prepare( ' AND user_login = %s', $qv['login'] );

[379] Fix | Delete

}

[380] Fix | Delete

[381] Fix | Delete

if ( ! empty( $qv['login__in'] ) ) {

[382] Fix | Delete

$sanitized_login__in = array_map( 'esc_sql', $qv['login__in'] );

[383] Fix | Delete

$login__in = implode( "','", $sanitized_login__in );

[384] Fix | Delete

$this->query_where .= " AND user_login IN ( '$login__in' )";

[385] Fix | Delete

}

[386] Fix | Delete

[387] Fix | Delete

if ( ! empty( $qv['login__not_in'] ) ) {

[388] Fix | Delete

$sanitized_login__not_in = array_map( 'esc_sql', $qv['login__not_in'] );

[389] Fix | Delete

$login__not_in = implode( "','", $sanitized_login__not_in );

[390] Fix | Delete

$this->query_where .= " AND user_login NOT IN ( '$login__not_in' )";

[391] Fix | Delete

}

[392] Fix | Delete

[393] Fix | Delete

// Meta query.

[394] Fix | Delete

$this->meta_query = new WP_Meta_Query();

[395] Fix | Delete

$this->meta_query->parse_query_vars( $qv );

[396] Fix | Delete

[397] Fix | Delete

if ( isset( $qv['who'] ) && 'authors' === $qv['who'] && $blog_id ) {

[398] Fix | Delete

_deprecated_argument(

[399] Fix | Delete

'WP_User_Query',

[400] Fix | Delete

'5.9.0',

[401] Fix | Delete

sprintf(

[402] Fix | Delete

/* translators: 1: who, 2: capability */

[403] Fix | Delete

__( '%1$s is deprecated. Use %2$s instead.' ),

[404] Fix | Delete

'<code>who</code>',

[405] Fix | Delete

'<code>capability</code>'

[406] Fix | Delete

)

[407] Fix | Delete

);

[408] Fix | Delete

[409] Fix | Delete

$who_query = array(

[410] Fix | Delete

'key' => $wpdb->get_blog_prefix( $blog_id ) . 'user_level',

[411] Fix | Delete

'value' => 0,

[412] Fix | Delete

'compare' => '!=',

[413] Fix | Delete

);

[414] Fix | Delete

[415] Fix | Delete

// Prevent extra meta query.

[416] Fix | Delete

$qv['blog_id'] = 0;

[417] Fix | Delete

$blog_id = 0;

[418] Fix | Delete

[419] Fix | Delete

if ( empty( $this->meta_query->queries ) ) {

[420] Fix | Delete

$this->meta_query->queries = array( $who_query );

[421] Fix | Delete

} else {

[422] Fix | Delete

// Append the cap query to the original queries and reparse the query.

[423] Fix | Delete

$this->meta_query->queries = array(

[424] Fix | Delete

'relation' => 'AND',

[425] Fix | Delete

array( $this->meta_query->queries, $who_query ),

[426] Fix | Delete

);

[427] Fix | Delete

}

[428] Fix | Delete

[429] Fix | Delete

$this->meta_query->parse_query_vars( $this->meta_query->queries );

[430] Fix | Delete

}

[431] Fix | Delete

[432] Fix | Delete

// Roles.

[433] Fix | Delete

$roles = array();

[434] Fix | Delete

if ( isset( $qv['role'] ) ) {

[435] Fix | Delete

if ( is_array( $qv['role'] ) ) {

[436] Fix | Delete

$roles = $qv['role'];

[437] Fix | Delete

} elseif ( is_string( $qv['role'] ) && ! empty( $qv['role'] ) ) {

[438] Fix | Delete

$roles = array_map( 'trim', explode( ',', $qv['role'] ) );

[439] Fix | Delete

}

[440] Fix | Delete

}

[441] Fix | Delete

[442] Fix | Delete

$role__in = array();

[443] Fix | Delete

if ( isset( $qv['role__in'] ) ) {

[444] Fix | Delete

$role__in = (array) $qv['role__in'];

[445] Fix | Delete

}

[446] Fix | Delete

[447] Fix | Delete

$role__not_in = array();

[448] Fix | Delete

if ( isset( $qv['role__not_in'] ) ) {

[449] Fix | Delete

$role__not_in = (array) $qv['role__not_in'];

[450] Fix | Delete

}

[451] Fix | Delete

[452] Fix | Delete

// Capabilities.

[453] Fix | Delete

$available_roles = array();

[454] Fix | Delete

[455] Fix | Delete

if ( ! empty( $qv['capability'] ) || ! empty( $qv['capability__in'] ) || ! empty( $qv['capability__not_in'] ) ) {

[456] Fix | Delete

$wp_roles->for_site( $blog_id );

[457] Fix | Delete

$available_roles = $wp_roles->roles;

[458] Fix | Delete

}

[459] Fix | Delete

[460] Fix | Delete

$capabilities = array();

[461] Fix | Delete

if ( ! empty( $qv['capability'] ) ) {

[462] Fix | Delete

if ( is_array( $qv['capability'] ) ) {

[463] Fix | Delete

$capabilities = $qv['capability'];

[464] Fix | Delete

} elseif ( is_string( $qv['capability'] ) ) {

[465] Fix | Delete

$capabilities = array_map( 'trim', explode( ',', $qv['capability'] ) );

[466] Fix | Delete

}

[467] Fix | Delete

}

[468] Fix | Delete

[469] Fix | Delete

$capability__in = array();

[470] Fix | Delete

if ( ! empty( $qv['capability__in'] ) ) {

[471] Fix | Delete

$capability__in = (array) $qv['capability__in'];

[472] Fix | Delete

}

[473] Fix | Delete

[474] Fix | Delete

$capability__not_in = array();

[475] Fix | Delete

if ( ! empty( $qv['capability__not_in'] ) ) {

[476] Fix | Delete

$capability__not_in = (array) $qv['capability__not_in'];

[477] Fix | Delete

}

[478] Fix | Delete

[479] Fix | Delete

// Keep track of all capabilities and the roles they're added on.

[480] Fix | Delete

$caps_with_roles = array();

[481] Fix | Delete

[482] Fix | Delete

foreach ( $available_roles as $role => $role_data ) {

[483] Fix | Delete

$role_caps = array_keys( array_filter( $role_data['capabilities'] ) );

[484] Fix | Delete

[485] Fix | Delete

foreach ( $capabilities as $cap ) {

[486] Fix | Delete

if ( in_array( $cap, $role_caps, true ) ) {

[487] Fix | Delete

$caps_with_roles[ $cap ][] = $role;

[488] Fix | Delete

break;

[489] Fix | Delete

}

[490] Fix | Delete

}

[491] Fix | Delete

[492] Fix | Delete

foreach ( $capability__in as $cap ) {

[493] Fix | Delete

if ( in_array( $cap, $role_caps, true ) ) {

[494] Fix | Delete

$role__in[] = $role;

[495] Fix | Delete

break;

[496] Fix | Delete

}

[497] Fix | Delete

}

[498] Fix | Delete

[499] Fix | Delete