Forum Replies Created

Viewing 4 replies - 1 through 4 (of 4 total)
  • Thread Starter skrunch

    (@skrunch)

    Must have been a white space at the end…woohoo..on to next problem right?

    Thread Starter skrunch

    (@skrunch)

    wpconfig :

    <?php
    // ** MySQL settings ** //
    define('DB_NAME', 'wordpress');    // The name of the database
    define('DB_USER', 'root');     // Your MySQL username
    define('DB_PASSWORD', ''); // ...and password
    define('DB_HOST', 'localhost');    // 99% chance you won't need to change this value
    define('DB_CHARSET', 'utf8');
    define('DB_COLLATE', '');
    
    // Change each KEY to a different unique phrase.  You won't have to remember the phrases later,
    // so make them long and complicated.  You can visit http://api.wordpress.org/secret-key/1.1/
    // to get keys generated for you, or just make something up.  Each key should have a different phrase.
    define('AUTH_KEY', 'CjoYC{:

    /->>z ,kC6wWKlKfhJH>XHzm5;><fB?yEY3+V%?p.<zL@tP=fu/atZCp’);
    define(‘SECURE_AUTH_KEY’, ‘3vV*9XEH93`|}Jlo2\\#3!:\\!V~t^in;=8@!r~6k#M36VF8/<l3C=dm|HK<Q:zwj>’);
    define(‘LOGGED_IN_KEY’, ‘?./N]~]O42XG88SA1bREqnU4qDJ[<P/%P!DO<Uf(A@T]h`%Aw^*$jbk\fbS4igZq’);// You can have multiple installations in one database if you give each a unique prefix
    $table_prefix = ‘wp_’; // Only numbers, letters, and underscores please!

    // Change this to localize WordPress. A corresponding MO file for the
    // chosen language must be installed to wp-content/languages.
    // For example, install de.mo to wp-content/languages and set WPLANG to ‘de’
    // to enable German language support.
    define (‘WPLANG’, ”);

    /* That’s all, stop editing! Happy blogging. */

    if ( !defined(‘ABSPATH’) )
    define(‘ABSPATH’, dirname(__FILE__) . ‘/’);
    require_once(ABSPATH . ‘wp-settings.php’);
    ?>
    `

    Thread Starter skrunch

    (@skrunch)

    wp-login.php:

    <?php
    /**
     * WordPress User Page
     *
     * Handles authentication, registering, resetting passwords, forgot password,
     * and other user handling.
     *
     * @package WordPress
     */
    
    /** Make sure that the WordPress bootstrap has ran before continuing. */
    require( dirname(__FILE__) . '/wp-load.php' );
    
    // Redirect to https login if forced to use SSL
    if ( force_ssl_admin() && !is_ssl() ) {
    	if ( 0 === strpos($_SERVER['REQUEST_URI'], 'http') ) {
    		wp_redirect(preg_replace('|^http://|', 'https://', $_SERVER['REQUEST_URI']));
    		exit();
    	} else {
    		wp_redirect('https://' . $_SERVER['HTTP_HOST'] . $_SERVER['REQUEST_URI']);
    		exit();
    	}
    }
    
    /**
     * login_header() - Outputs the header for the login page
     *
     * @package WordPress
     * @uses do_action() Calls the 'login_head' for outputting HTML in the Login
     *		header.
     * @uses apply_filters() Calls 'login_headerurl' for the top login link.
     * @uses apply_filters() Calls 'login_headertitle' for the top login title.
     * @uses apply_filters() Calls 'login_message' on the message to display in the
     *		header.
     * @uses $error The error global, which is checked for displaying errors.
     *
     * @param string $title Optional. WordPress Login Page title to display in
     *		<title/> element.
     * @param string $message Optional. Message to display in header.
     * @param WP_Error $wp_error Optional. WordPress Error Object
     */
    function login_header($title = 'Login', $message = '', $wp_error = '') {
    	global $error;
    
    	if ( empty($wp_error) )
    		$wp_error = new WP_Error();
    	?>
    <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
    <html xmlns="http://www.w3.org/1999/xhtml" <?php language_attributes(); ?>>
    <head>
    	<title><?php bloginfo('name'); ?> &rsaquo; <?php echo $title; ?></title>
    	<meta http-equiv="Content-Type" content="<?php bloginfo('html_type'); ?>; charset=<?php bloginfo('charset'); ?>" />
    	<?php
    	wp_admin_css( 'login', true );
    	wp_admin_css( 'colors-fresh', true );
    	do_action('login_head'); ?>
    </head>
    <body class="login">
    
    <div id="login"><h1><a href="<?php echo apply_filters('login_headerurl', 'http://wordpress.org/'); ?>" title="<?php echo apply_filters('login_headertitle', __('Powered by WordPress')); ?>"><?php bloginfo('name'); ?></a></h1>
    <?php
    	if ( !empty( $message ) ) echo apply_filters('login_message', $message) . "\n";
    
    	// Incase a plugin uses $error rather than the $errors object
    	if ( !empty( $error ) ) {
    		$wp_error->add('error', $error);
    		unset($error);
    	}
    
    	if ( $wp_error->get_error_code() ) {
    		$errors = '';
    		$messages = '';
    		foreach ( $wp_error->get_error_codes() as $code ) {
    			$severity = $wp_error->get_error_data($code);
    			foreach ( $wp_error->get_error_messages($code) as $error ) {
    				if ( 'message' == $severity )
    					$messages .= '	' . $error . "<br />\n";
    				else
    					$errors .= '	' . $error . "<br />\n";
    			}
    		}
    		if ( !empty($errors) )
    			echo '<div id="login_error">' . apply_filters('login_errors', $errors) . "</div>\n";
    		if ( !empty($messages) )
    			echo '<p class="message">' . apply_filters('login_messages', $messages) . "</p>\n";
    	}
    } // End of login_header()
    
    /**
     * retrieve_password() - Handles sending password retrieval email to user
     *
     * {@internal Missing Long Description}}
     *
     * @uses $wpdb WordPress Database object
     *
     * @return bool|WP_Error True: when finish. WP_Error on error
     */
    function retrieve_password() {
    	global $wpdb;
    
    	$errors = new WP_Error();
    
    	if ( empty( $_POST['user_login'] ) && empty( $_POST['user_email'] ) )
    		$errors->add('empty_username', __('<strong>ERROR</strong>: Enter a username or e-mail address.'));
    
    	if ( strstr($_POST['user_login'], '@') ) {
    		$user_data = get_user_by_email(trim($_POST['user_login']));
    		if ( empty($user_data) )
    			$errors->add('invalid_email', __('<strong>ERROR</strong>: There is no user registered with that email address.'));
    	} else {
    		$login = trim($_POST['user_login']);
    		$user_data = get_userdatabylogin($login);
    	}
    
    	do_action('lostpassword_post');
    
    	if ( $errors->get_error_code() )
    		return $errors;
    
    	if ( !$user_data ) {
    		$errors->add('invalidcombo', __('<strong>ERROR</strong>: Invalid username or e-mail.'));
    		return $errors;
    	}
    
    	// redefining user_login ensures we return the right case in the email
    	$user_login = $user_data->user_login;
    	$user_email = $user_data->user_email;
    
    	do_action('retreive_password', $user_login);  // Misspelled and deprecated
    	do_action('retrieve_password', $user_login);
    
    	$allow = apply_filters('allow_password_reset', true, $user_data->ID);
    
    	if ( ! $allow )
    		return new WP_Error('no_password_reset', __('Password reset is not allowed for this user'));
    	else if ( is_wp_error($allow) )
    		return $allow;
    
    	$key = $wpdb->get_var($wpdb->prepare("SELECT user_activation_key FROM $wpdb->users WHERE user_login = %s", $user_login));
    	if ( empty($key) ) {
    		// Generate something random for a key...
    		$key = wp_generate_password(20, false);
    		do_action('retrieve_password_key', $user_login, $key);
    		// Now insert the new md5 key into the db
    		$wpdb->query($wpdb->prepare("UPDATE $wpdb->users SET user_activation_key = %s WHERE user_login = %s", $key, $user_login));
    	}
    	$message = __('Someone has asked to reset the password for the following site and username.') . "\r\n\r\n";
    	$message .= get_option('siteurl') . "\r\n\r\n";
    	$message .= sprintf(__('Username: %s'), $user_login) . "\r\n\r\n";
    	$message .= __('To reset your password visit the following address, otherwise just ignore this email and nothing will happen.') . "\r\n\r\n";
    	$message .= site_url("wp-login.php?action=rp&key=$key", 'login') . "\r\n";
    
    	if ( !wp_mail($user_email, sprintf(__('[%s] Password Reset'), get_option('blogname')), $message) )
    		die('<p>' . __('The e-mail could not be sent.') . "<br />\n" . __('Possible reason: your host may have disabled the mail() function...') . '</p>');
    
    	return true;
    }
    
    /**
     * reset_password() - Handles resetting the user's password
     *
     * {@internal Missing Long Description}}
     *
     * @uses $wpdb WordPress Database object
     *
     * @param string $key Hash to validate sending user's password
     * @return bool|WP_Error
     */
    function reset_password($key) {
    	global $wpdb;
    
    	$key = preg_replace('/[^a-z0-9]/i', '', $key);
    
    	if ( empty( $key ) )
    		return new WP_Error('invalid_key', __('Invalid key'));
    
    	$user = $wpdb->get_row($wpdb->prepare("SELECT * FROM $wpdb->users WHERE user_activation_key = %s", $key));
    	if ( empty( $user ) )
    		return new WP_Error('invalid_key', __('Invalid key'));
    
    	do_action('password_reset', $user);
    
    	// Generate something random for a password...
    	$new_pass = wp_generate_password();
    	wp_set_password($new_pass, $user->ID);
    	$message  = sprintf(__('Username: %s'), $user->user_login) . "\r\n";
    	$message .= sprintf(__('Password: %s'), $new_pass) . "\r\n";
    	$message .= site_url('wp-login.php', 'login') . "\r\n";
    
    	if (  !wp_mail($user->user_email, sprintf(__('[%s] Your new password'), get_option('blogname')), $message) )
    		die('<p>' . __('The e-mail could not be sent.') . "<br />\n" . __('Possible reason: your host may have disabled the mail() function...') . '</p>');
    
    	// send a copy of password change notification to the admin
    	// but check to see if it's the admin whose password we're changing, and skip this
    	if ( $user->user_email != get_option('admin_email') ) {
    		$message = sprintf(__('Password Lost and Changed for user: %s'), $user->user_login) . "\r\n";
    		wp_mail(get_option('admin_email'), sprintf(__('[%s] Password Lost/Changed'), get_option('blogname')), $message);
    	}
    
    	return true;
    }
    
    /**
     * register_new_user() - Handles registering a new user
     *
     * {@internal Missing Long Description}}
     *
     * @param string $user_login User's username for logging in
     * @param string $user_email User's email address to send password and add
     * @return int|WP_Error Either user's ID or error on failure.
     */
    function register_new_user($user_login, $user_email) {
    	$errors = new WP_Error();
    
    	$user_login = sanitize_user( $user_login );
    	$user_email = apply_filters( 'user_registration_email', $user_email );
    
    	// Check the username
    	if ( $user_login == '' )
    		$errors->add('empty_username', __('<strong>ERROR</strong>: Please enter a username.'));
    	elseif ( !validate_username( $user_login ) ) {
    		$errors->add('invalid_username', __('<strong>ERROR</strong>: This username is invalid.  Please enter a valid username.'));
    		$user_login = '';
    	} elseif ( username_exists( $user_login ) )
    		$errors->add('username_exists', __('<strong>ERROR</strong>: This username is already registered, please choose another one.'));
    
    	// Check the e-mail address
    	if ($user_email == '') {
    		$errors->add('empty_email', __('<strong>ERROR</strong>: Please type your e-mail address.'));
    	} elseif ( !is_email( $user_email ) ) {
    		$errors->add('invalid_email', __('<strong>ERROR</strong>: The email address isn’t correct.'));
    		$user_email = '';
    	} elseif ( email_exists( $user_email ) )
    		$errors->add('email_exists', __('<strong>ERROR</strong>: This email is already registered, please choose another one.'));
    
    	do_action('register_post', $user_login, $user_email, $errors);
    
    	$errors = apply_filters( 'registration_errors', $errors );
    
    	if ( $errors->get_error_code() )
    		return $errors;
    
    	$user_pass = wp_generate_password();
    	$user_id = wp_create_user( $user_login, $user_pass, $user_email );
    	if ( !$user_id ) {
    		$errors->add('registerfail', sprintf(__('<strong>ERROR</strong>: Couldn’t register you... please contact the <a href="mailto:%s">webmaster</a> !'), get_option('admin_email')));
    		return $errors;
    	}
    
    	wp_new_user_notification($user_id, $user_pass);
    
    	return $user_id;
    }
    
    //
    // Main
    //
    
    $action = isset($_REQUEST['action']) ? $_REQUEST['action'] : '';
    $errors = new WP_Error();
    
    if ( isset($_GET['key']) )
    	$action = 'resetpass';
    
    nocache_headers();
    
    header('Content-Type: '.get_bloginfo('html_type').'; charset='.get_bloginfo('charset'));
    
    if ( defined('RELOCATE') ) { // Move flag is set
    	if ( isset( $_SERVER['PATH_INFO'] ) && ($_SERVER['PATH_INFO'] != $_SERVER['PHP_SELF']) )
    		$_SERVER['PHP_SELF'] = str_replace( $_SERVER['PATH_INFO'], '', $_SERVER['PHP_SELF'] );
    
    	$schema = ( isset($_SERVER['HTTPS']) && strtolower($_SERVER['HTTPS']) == 'on' ) ? 'https://' : 'http://';
    	if ( dirname($schema . $_SERVER['HTTP_HOST'] . $_SERVER['PHP_SELF']) != get_option('siteurl') )
    		update_option('siteurl', dirname($schema . $_SERVER['HTTP_HOST'] . $_SERVER['PHP_SELF']) );
    }
    
    //Set a cookie now to see if they are supported by the browser.
    setcookie(TEST_COOKIE, 'WP Cookie check', 0, COOKIEPATH, COOKIE_DOMAIN);
    if ( SITECOOKIEPATH != COOKIEPATH )
    	setcookie(TEST_COOKIE, 'WP Cookie check', 0, SITECOOKIEPATH, COOKIE_DOMAIN);
    
    $http_post = ('POST' == $_SERVER['REQUEST_METHOD']);
    switch ($action) {
    
    case 'logout' :
    
    	wp_logout();
    
    	$redirect_to = 'wp-login.php?loggedout=true';
    	if ( isset( $_REQUEST['redirect_to'] ) )
    		$redirect_to = $_REQUEST['redirect_to'];
    
    	wp_safe_redirect($redirect_to);
    	exit();
    
    break;
    
    case 'lostpassword' :
    case 'retrievepassword' :
    	if ( $http_post ) {
    		$errors = retrieve_password();
    		if ( !is_wp_error($errors) ) {
    			wp_redirect('wp-login.php?checkemail=confirm');
    			exit();
    		}
    	}
    
    	if ( 'invalidkey' == $_GET['error'] ) $errors->add('invalidkey', __('Sorry, that key does not appear to be valid.'));
    
    	do_action('lost_password');
    	login_header(__('Lost Password'), '<p class="message">' . __('Please enter your username or e-mail address. You will receive a new password via e-mail.') . '</p>', $errors);
    ?>
    
    <form name="lostpasswordform" id="lostpasswordform" action="<?php echo site_url('wp-login.php?action=lostpassword', 'login_post') ?>" method="post">
    	<p>
    		<label><?php _e('Username or E-mail:') ?><br />
    		<input type="text" name="user_login" id="user_login" class="input" value="<?php echo attribute_escape(stripslashes($_POST['user_login'])); ?>" size="20" tabindex="10" /></label>
    	</p>
    <?php do_action('lostpassword_form'); ?>
    	<p class="submit"><input type="submit" name="wp-submit" id="wp-submit" value="<?php _e('Get New Password'); ?>" tabindex="100" /></p>
    </form>
    
    <p id="nav">
    <?php if (get_option('users_can_register')) : ?>
    <a href="<?php echo site_url('wp-login.php', 'login') ?>"><?php _e('Log in') ?></a> |
    <a href="<?php echo site_url('wp-login.php?action=register', 'login') ?>"><?php _e('Register') ?></a>
    <?php else : ?>
    <a href="<?php echo site_url('wp-login.php', 'login') ?>"><?php _e('Log in') ?></a>
    <?php endif; ?>
    </p>
    
    </div>
    
    <p id="backtoblog"><a href="<?php bloginfo('url'); ?>/" title="<?php _e('Are you lost?') ?>"><?php printf(__('&laquo; Back to %s'), get_bloginfo('title', 'display' )); ?></a></p>
    
    <script type="text/javascript">
    try{document.getElementById('user_login').focus();}catch(e){}
    </script>
    </body>
    </html>
    <?php
    break;
    
    case 'resetpass' :
    case 'rp' :
    	$errors = reset_password($_GET['key']);
    
    	if ( ! is_wp_error($errors) ) {
    		wp_redirect('wp-login.php?checkemail=newpass');
    		exit();
    	}
    
    	wp_redirect('wp-login.php?action=lostpassword&error=invalidkey');
    	exit();
    
    break;
    
    case 'register' :
    	if ( !get_option('users_can_register') ) {
    		wp_redirect('wp-login.php?registration=disabled');
    		exit();
    	}
    
    	$user_login = '';
    	$user_email = '';
    	if ( $http_post ) {
    		require_once( ABSPATH . WPINC . '/registration.php');
    
    		$user_login = $_POST['user_login'];
    		$user_email = $_POST['user_email'];
    		$errors = register_new_user($user_login, $user_email);
    		if ( !is_wp_error($errors) ) {
    			wp_redirect('wp-login.php?checkemail=registered');
    			exit();
    		}
    	}
    
    	login_header(__('Registration Form'), '<p class="message register">' . __('Register For This Site') . '</p>', $errors);
    ?>
    
    <form name="registerform" id="registerform" action="<?php echo site_url('wp-login.php?action=register', 'login_post') ?>" method="post">
    	<p>
    		<label><?php _e('Username') ?><br />
    		<input type="text" name="user_login" id="user_login" class="input" value="<?php echo attribute_escape(stripslashes($user_login)); ?>" size="20" tabindex="10" /></label>
    	</p>
    	<p>
    		<label><?php _e('E-mail') ?><br />
    		<input type="text" name="user_email" id="user_email" class="input" value="<?php echo attribute_escape(stripslashes($user_email)); ?>" size="25" tabindex="20" /></label>
    	</p>
    <?php do_action('register_form'); ?>
    	<p id="reg_passmail"><?php _e('A password will be e-mailed to you.') ?></p>
    	<p class="submit"><input type="submit" name="wp-submit" id="wp-submit" value="<?php _e('Register'); ?>" tabindex="100" /></p>
    </form>
    
    <p id="nav">
    <a href="<?php echo site_url('wp-login.php', 'login') ?>"><?php _e('Log in') ?></a> |
    <a href="<?php echo site_url('wp-login.php?action=lostpassword', 'login') ?>" title="<?php _e('Password Lost and Found') ?>"><?php _e('Lost your password?') ?></a>
    </p>
    
    </div>
    
    <p id="backtoblog"><a href="<?php bloginfo('url'); ?>/" title="<?php _e('Are you lost?') ?>"><?php printf(__('&laquo; Back to %s'), get_bloginfo('title', 'display' )); ?></a></p>
    
    <script type="text/javascript">
    try{document.getElementById('user_login').focus();}catch(e){}
    </script>
    </body>
    </html>
    <?php
    break;
    
    case 'login' :
    default:
    	if ( isset( $_REQUEST['redirect_to'] ) )
    		$redirect_to = $_REQUEST['redirect_to'];
    	else
    		$redirect_to = admin_url();
    
    	if ( is_ssl() && force_ssl_login() && !force_ssl_admin() && ( 0 !== strpos($redirect_to, 'https') ) && ( 0 === strpos($redirect_to, 'http') ) )
    		$secure_cookie = false;
    	else
    		$secure_cookie = '';
    
    	$user = wp_signon('', $secure_cookie);
    
    	$redirect_to = apply_filters('login_redirect', $redirect_to, isset( $_REQUEST['redirect_to'] ) ? $_REQUEST['redirect_to'] : '', $user);
    
    	if ( !is_wp_error($user) ) {
    		// If the user can't edit posts, send them to their profile.
    		if ( !$user->has_cap('edit_posts') && ( empty( $redirect_to ) || $redirect_to == 'wp-admin/' ) )
    			$redirect_to = admin_url('profile.php');
    		wp_safe_redirect($redirect_to);
    		exit();
    	}
    
    	$errors = $user;
    	// Clear errors if loggedout is set.
    	if ( !empty($_GET['loggedout']) )
    		$errors = new WP_Error();
    
    	// If cookies are disabled we can't log in even with a valid user+pass
    	if ( isset($_POST['testcookie']) && empty($_COOKIE[TEST_COOKIE]) )
    		$errors->add('test_cookie', __("<strong>ERROR</strong>: Cookies are blocked or not supported by your browser. You must <a href='http://www.google.com/cookies.html'>enable cookies</a> to use WordPress."));
    
    	// Some parts of this script use the main login form to display a message
    	if		( isset($_GET['loggedout']) && TRUE == $_GET['loggedout'] )			$errors->add('loggedout', __('You are now logged out.'), 'message');
    	elseif	( isset($_GET['registration']) && 'disabled' == $_GET['registration'] )	$errors->add('registerdiabled', __('User registration is currently not allowed.'));
    	elseif	( isset($_GET['checkemail']) && 'confirm' == $_GET['checkemail'] )	$errors->add('confirm', __('Check your e-mail for the confirmation link.'), 'message');
    	elseif	( isset($_GET['checkemail']) && 'newpass' == $_GET['checkemail'] )	$errors->add('newpass', __('Check your e-mail for your new password.'), 'message');
    	elseif	( isset($_GET['checkemail']) && 'registered' == $_GET['checkemail'] )	$errors->add('registered', __('Registration complete. Please check your e-mail.'), 'message');
    
    	login_header(__('Login'), '', $errors);
    ?>
    
    <form name="loginform" id="loginform" action="<?php echo site_url('wp-login.php', 'login_post') ?>" method="post">
    <?php if ( !isset($_GET['checkemail']) || !in_array( $_GET['checkemail'], array('confirm', 'newpass') ) ) : ?>
    	<p>
    		<label><?php _e('Username') ?><br />
    		<input type="text" name="log" id="user_login" class="input" value="<?php echo attribute_escape(stripslashes($user_login)); ?>" size="20" tabindex="10" /></label>
    	</p>
    	<p>
    		<label><?php _e('Password') ?><br />
    		<input type="password" name="pwd" id="user_pass" class="input" value="" size="20" tabindex="20" /></label>
    	</p>
    <?php do_action('login_form'); ?>
    	<p class="forgetmenot"><label><input name="rememberme" type="checkbox" id="rememberme" value="forever" tabindex="90" /> <?php _e('Remember Me'); ?></label></p>
    	<p class="submit">
    		<input type="submit" name="wp-submit" id="wp-submit" value="<?php _e('Log In'); ?>" tabindex="100" />
    		<input type="hidden" name="redirect_to" value="<?php echo attribute_escape($redirect_to); ?>" />
    		<input type="hidden" name="testcookie" value="1" />
    	</p>
    <?php else : ?>
    	<p>&nbsp;</p>
    <?php endif; ?>
    </form>
    
    <p id="nav">
    <?php if ( isset($_GET['checkemail']) && in_array( $_GET['checkemail'], array('confirm', 'newpass') ) ) : ?>
    <?php elseif (get_option('users_can_register')) : ?>
    <a href="<?php echo site_url('wp-login.php?action=register', 'login') ?>"><?php _e('Register') ?></a> |
    <a href="<?php echo site_url('wp-login.php?action=lostpassword', 'login') ?>" title="<?php _e('Password Lost and Found') ?>"><?php _e('Lost your password?') ?></a>
    <?php else : ?>
    <a href="<?php echo site_url('wp-login.php?action=lostpassword', 'login') ?>" title="<?php _e('Password Lost and Found') ?>"><?php _e('Lost your password?') ?></a>
    <?php endif; ?>
    </p>
    
    </div>
    
    <p id="backtoblog"><a href="<?php bloginfo('url'); ?>/" title="<?php _e('Are you lost?') ?>"><?php printf(__('&laquo; Back to %s'), get_bloginfo('title', 'display' )); ?></a></p>
    
    <script type="text/javascript">
    try{document.getElementById('user_login').focus();}catch(e){}
    </script>
    </body>
    </html>
    <?php
    
    break;
    } // end action switch
    ?>

    pluggable.php :

    <?php
    /**
     * These functions can be replaced via plugins. If plugins do not redefine these
     * functions, then these will be used instead.
     *
     * @package WordPress
     */
    
    if ( !function_exists('set_current_user') ) :
    /**
     * Changes the current user by ID or name.
     *
     * Set $id to null and specify a name if you do not know a user's ID.
     *
     * @since 2.0.1
     * @see wp_set_current_user() An alias of wp_set_current_user()
     *
     * @param int|null $id User ID.
     * @param string $name Optional. The user's username
     * @return object returns wp_set_current_user()
     */
    function set_current_user($id, $name = '') {
    	return wp_set_current_user($id, $name);
    }
    endif;
    
    if ( !function_exists('wp_set_current_user') ) :
    /**
     * Changes the current user by ID or name.
     *
     * Set $id to null and specify a name if you do not know a user's ID.
     *
     * Some WordPress functionality is based on the current user and not based on
     * the signed in user. Therefore, it opens the ability to edit and perform
     * actions on users who aren't signed in.
     *
     * @since 2.0.4
     * @global object $current_user The current user object which holds the user data.
     * @uses do_action() Calls 'set_current_user' hook after setting the current user.
     *
     * @param int $id User ID
     * @param string $name User's username
     * @return WP_User Current user User object
     */
    function wp_set_current_user($id, $name = '') {
    	global $current_user;
    
    	if ( isset($current_user) && ($id == $current_user->ID) )
    		return $current_user;
    
    	$current_user = new WP_User($id, $name);
    
    	setup_userdata($current_user->ID);
    
    	do_action('set_current_user');
    
    	return $current_user;
    }
    endif;
    
    if ( !function_exists('wp_get_current_user') ) :
    /**
     * Retrieve the current user object.
     *
     * @since 2.0.4
     *
     * @return WP_User Current user WP_User object
     */
    function wp_get_current_user() {
    	global $current_user;
    
    	get_currentuserinfo();
    
    	return $current_user;
    }
    endif;
    
    if ( !function_exists('get_currentuserinfo') ) :
    /**
     * Populate global variables with information about the currently logged in user.
     *
     * Will set the current user, if the current user is not set. The current user
     * will be set to the logged in person. If no user is logged in, then it will
     * set the current user to 0, which is invalid and won't have any permissions.
     *
     * @since 0.71
     * @uses $current_user Checks if the current user is set
     * @uses wp_validate_auth_cookie() Retrieves current logged in user.
     *
     * @return bool|null False on XMLRPC Request and invalid auth cookie. Null when current user set
     */
    function get_currentuserinfo() {
    	global $current_user;
    
    	if ( defined('XMLRPC_REQUEST') && XMLRPC_REQUEST )
    		return false;
    
    	if ( ! empty($current_user) )
    		return;
    
    	if ( ! $user = wp_validate_auth_cookie() ) {
    		 if ( empty($_COOKIE[LOGGED_IN_COOKIE]) || !$user = wp_validate_auth_cookie($_COOKIE[LOGGED_IN_COOKIE], 'logged_in') ) {
    		 	wp_set_current_user(0);
    		 	return false;
    		 }
    	}
    
    	wp_set_current_user($user);
    }
    endif;
    
    if ( !function_exists('get_userdata') ) :
    /**
     * Retrieve user info by user ID.
     *
     * @since 0.71
     *
     * @param int $user_id User ID
     * @return bool|object False on failure, User DB row object
     */
    function get_userdata( $user_id ) {
    	global $wpdb;
    
    	$user_id = absint($user_id);
    	if ( $user_id == 0 )
    		return false;
    
    	$user = wp_cache_get($user_id, 'users');
    
    	if ( $user )
    		return $user;
    
    	if ( !$user = $wpdb->get_row($wpdb->prepare("SELECT * FROM $wpdb->users WHERE ID = %d LIMIT 1", $user_id)) )
    		return false;
    
    	_fill_user($user);
    
    	return $user;
    }
    endif;
    
    if ( !function_exists('update_user_cache') ) :
    /**
     * Updates a users cache when overridden by a plugin.
     *
     * Core function does nothing.
     *
     * @since 1.5
     *
     * @return bool Only returns true
     */
    function update_user_cache() {
    	return true;
    }
    endif;
    
    if ( !function_exists('get_userdatabylogin') ) :
    /**
     * Retrieve user info by login name.
     *
     * @since 0.71
     *
     * @param string $user_login User's username
     * @return bool|object False on failure, User DB row object
     */
    function get_userdatabylogin($user_login) {
    	global $wpdb;
    	$user_login = sanitize_user( $user_login );
    
    	if ( empty( $user_login ) )
    		return false;
    
    	$user_id = wp_cache_get($user_login, 'userlogins');
    
    	$user = false;
    	if ( false !== $user_id )
    		$user = wp_cache_get($user_id, 'users');
    
    	if ( false !== $user )
    		return $user;
    
    	if ( !$user = $wpdb->get_row($wpdb->prepare("SELECT * FROM $wpdb->users WHERE user_login = %s", $user_login)) )
    		return false;
    
    	_fill_user($user);
    
    	return $user;
    }
    endif;
    
    if ( !function_exists('get_user_by_email') ) :
    /**
     * Retrieve user info by email.
     *
     * @since 2.5
     *
     * @param string $email User's email address
     * @return bool|object False on failure, User DB row object
     */
    function get_user_by_email($email) {
    	global $wpdb;
    
    	$user_id = wp_cache_get($email, 'useremail');
    
    	$user = false;
    	if ( false !== $user_id )
    		$user = wp_cache_get($user_id, 'users');
    
    	if ( false !== $user )
    		return $user;
    
    	if ( !$user = $wpdb->get_row($wpdb->prepare("SELECT * FROM $wpdb->users WHERE user_email = %s", $email)) )
    		return false;
    
    	_fill_user($user);
    
    	return $user;
    }
    endif;
    
    if ( !function_exists( 'wp_mail' ) ) :
    /**
     * Send mail, similar to PHP's mail
     *
     * A true return value does not automatically mean that the user received the
     * email successfully. It just only means that the method used was able to
     * process the request without any errors.
     *
     * Using the two 'wp_mail_from' and 'wp_mail_from_name' hooks allow from
     * creating a from address like 'Name <email@address.com>' when both are set. If
     * just 'wp_mail_from' is set, then just the email address will be used with no
     * name.
     *
     * The default content type is 'text/plain' which does not allow using HTML.
     * However, you can set the content type of the email by using the
     * 'wp_mail_content_type' filter.
     *
     * The default charset is based on the charset used on the blog. The charset can
     * be set using the 'wp_mail_charset' filter.
     *
     * @since 1.2.1
     * @uses apply_filters() Calls 'wp_mail' hook on an array of all of the parameters.
     * @uses apply_filters() Calls 'wp_mail_from' hook to get the from email address.
     * @uses apply_filters() Calls 'wp_mail_from_name' hook to get the from address name.
     * @uses apply_filters() Calls 'wp_mail_content_type' hook to get the email content type.
     * @uses apply_filters() Calls 'wp_mail_charset' hook to get the email charset
     * @uses do_action_ref_array() Calls 'phpmailer_init' hook on the reference to
     *		phpmailer object.
     * @uses PHPMailer
     * @
     *
     * @param string $to Email address to send message
     * @param string $subject Email subject
     * @param string $message Message contents
     * @param string|array $headers Optional. Additional headers.
     * @return bool Whether the email contents were sent successfully.
     */
    function wp_mail( $to, $subject, $message, $headers = '' ) {
    	// Compact the input, apply the filters, and extract them back out
    	extract( apply_filters( 'wp_mail', compact( 'to', 'subject', 'message', 'headers' ) ) );
    
    	global $phpmailer;
    
    	// (Re)create it, if it's gone missing
    	if ( !is_object( $phpmailer ) || !is_a( $phpmailer, 'PHPMailer' ) ) {
    		require_once ABSPATH . WPINC . '/class-phpmailer.php';
    		require_once ABSPATH . WPINC . '/class-smtp.php';
    		$phpmailer = new PHPMailer();
    	}
    
    	// Headers
    	if ( empty( $headers ) ) {
    		$headers = array();
    	} elseif ( !is_array( $headers ) ) {
    		// Explode the headers out, so this function can take both
    		// string headers and an array of headers.
    		$tempheaders = (array) explode( "\n", $headers );
    		$headers = array();
    
    		// If it's actually got contents
    		if ( !empty( $tempheaders ) ) {
    			// Iterate through the raw headers
    			foreach ( $tempheaders as $header ) {
    				if ( strpos($header, ':') === false )
    					continue;
    				// Explode them out
    				list( $name, $content ) = explode( ':', trim( $header ), 2 );
    
    				// Cleanup crew
    				$name = trim( $name );
    				$content = trim( $content );
    
    				// Mainly for legacy -- process a From: header if it's there
    				if ( 'from' == strtolower($name) ) {
    					if ( strpos($content, '<' ) !== false ) {
    						// So... making my life hard again?
    						$from_name = substr( $content, 0, strpos( $content, '<' ) - 1 );
    						$from_name = str_replace( '"', '', $from_name );
    						$from_name = trim( $from_name );
    
    						$from_email = substr( $content, strpos( $content, '<' ) + 1 );
    						$from_email = str_replace( '>', '', $from_email );
    						$from_email = trim( $from_email );
    					} else {
    						$from_name = trim( $content );
    					}
    				} elseif ( 'content-type' == strtolower($name) ) {
    					if ( strpos( $content,';' ) !== false ) {
    						list( $type, $charset ) = explode( ';', $content );
    						$content_type = trim( $type );
    						$charset = trim( str_replace( array( 'charset=', '"' ), '', $charset ) );
    					} else {
    						$content_type = trim( $content );
    					}
    				} elseif ( 'cc' == strtolower($name) ) {
    					$cc = explode(",", $content);
    				} elseif ( 'bcc' == strtolower($name) ) {
    					$bcc = explode(",", $content);
    				} else {
    					// Add it to our grand headers array
    					$headers[trim( $name )] = trim( $content );
    				}
    			}
    		}
    	}
    
    	// Empty out the values that may be set
    	$phpmailer->ClearAddresses();
    	$phpmailer->ClearAllRecipients();
    	$phpmailer->ClearAttachments();
    	$phpmailer->ClearBCCs();
    	$phpmailer->ClearCCs();
    	$phpmailer->ClearCustomHeaders();
    	$phpmailer->ClearReplyTos();
    
    	// From email and name
    	// If we don't have a name from the input headers
    	if ( !isset( $from_name ) ) {
    		$from_name = 'WordPress';
    	}
    
    	// If we don't have an email from the input headers
    	if ( !isset( $from_email ) ) {
    		// Get the site domain and get rid of www.
    		$sitename = strtolower( $_SERVER['SERVER_NAME'] );
    		if ( substr( $sitename, 0, 4 ) == 'www.' ) {
    			$sitename = substr( $sitename, 4 );
    		}
    
    		$from_email = 'wordpress@' . $sitename;
    	}
    
    	// Set the from name and email
    	$phpmailer->From = apply_filters( 'wp_mail_from', $from_email );
    	$phpmailer->FromName = apply_filters( 'wp_mail_from_name', $from_name );
    
    	// Set destination address
    	$phpmailer->AddAddress( $to );
    
    	// Set mail's subject and body
    	$phpmailer->Subject = $subject;
    	$phpmailer->Body = $message;
    
    	// Add any CC and BCC recipients
    	if ( !empty($cc) ) {
    		foreach ($cc as $recipient) {
    			$phpmailer->AddCc( trim($recipient) );
    		}
    	}
    	if ( !empty($bcc) ) {
    		foreach ($bcc as $recipient) {
    			$phpmailer->AddBcc( trim($recipient) );
    		}
    	}
    
    	// Set to use PHP's mail()
    	$phpmailer->IsMail();
    
    	// Set Content-Type and charset
    	// If we don't have a content-type from the input headers
    	if ( !isset( $content_type ) ) {
    		$content_type = 'text/plain';
    	}
    
    	$content_type = apply_filters( 'wp_mail_content_type', $content_type );
    
    	// Set whether it's plaintext or not, depending on $content_type
    	if ( $content_type == 'text/html' ) {
    		$phpmailer->IsHTML( true );
    	} else {
    		$phpmailer->IsHTML( false );
    	}
    
    	// If we don't have a charset from the input headers
    	if ( !isset( $charset ) ) {
    		$charset = get_bloginfo( 'charset' );
    	}
    
    	// Set the content-type and charset
    	$phpmailer->CharSet = apply_filters( 'wp_mail_charset', $charset );
    
    	// Set custom headers
    	if ( !empty( $headers ) ) {
    		foreach ( $headers as $name => $content ) {
    			$phpmailer->AddCustomHeader( sprintf( '%1$s: %2$s', $name, $content ) );
    		}
    	}
    
    	do_action_ref_array( 'phpmailer_init', array( &$phpmailer ) );
    
    	// Send!
    	$result = @$phpmailer->Send();
    
    	return $result;
    }
    endif;
    
    /**
     * Checks a user's login information and logs them in if it checks out.
     *
     * @since 2.5
     *
     * @param string $username User's username
     * @param string $password User's password
     * @return WP_Error|WP_User WP_User object if login successful, otherwise WP_Error object.
     */
    if ( !function_exists('wp_authenticate') ) :
    function wp_authenticate($username, $password) {
    	$username = sanitize_user($username);
    
    	if ( '' == $username )
    		return new WP_Error('empty_username', __('<strong>ERROR</strong>: The username field is empty.'));
    
    	if ( '' == $password )
    		return new WP_Error('empty_password', __('<strong>ERROR</strong>: The password field is empty.'));
    
    	$user = get_userdatabylogin($username);
    
    	if ( !$user || ($user->user_login != $username) ) {
    		do_action( 'wp_login_failed', $username );
    		return new WP_Error('invalid_username', __('<strong>ERROR</strong>: Invalid username.'));
    	}
    
    	$user = apply_filters('wp_authenticate_user', $user, $password);
    	if ( is_wp_error($user) ) {
    		do_action( 'wp_login_failed', $username );
    		return $user;
    	}
    
    	if ( !wp_check_password($password, $user->user_pass, $user->ID) ) {
    		do_action( 'wp_login_failed', $username );
    		return new WP_Error('incorrect_password', __('<strong>ERROR</strong>: Incorrect password.'));
    	}
    
    	return new WP_User($user->ID);
    }
    endif;
    
    /**
     * Log the current user out.
     *
     * @since 2.5
     */
    if ( !function_exists('wp_logout') ) :
    function wp_logout() {
    	wp_clear_auth_cookie();
    	do_action('wp_logout');
    }
    endif;
    
    if ( !function_exists('wp_validate_auth_cookie') ) :
    /**
     * Validates authentication cookie.
     *
     * The checks include making sure that the authentication cookie is set and
     * pulling in the contents (if $cookie is not used).
     *
     * Makes sure the cookie is not expired. Verifies the hash in cookie is what is
     * should be and compares the two.
     *
     * @since 2.5
     *
     * @param string $cookie Optional. If used, will validate contents instead of cookie's
     * @param string $scheme Optional. The cookie scheme to use: auth, secure_auth, or logged_in
     * @return bool|int False if invalid cookie, User ID if valid.
     */
    function wp_validate_auth_cookie($cookie = '', $scheme = 'auth') {
    	if ( empty($cookie) ) {
    		if ( is_ssl() ) {
    			$cookie_name = SECURE_AUTH_COOKIE;
    			$scheme = 'secure_auth';
    		} else {
    			$cookie_name = AUTH_COOKIE;
    			$scheme = 'auth';
    		}
    
    		if ( empty($_COOKIE[$cookie_name]) )
    			return false;
    		$cookie = $_COOKIE[$cookie_name];
    	}
    
    	$cookie_elements = explode('|', $cookie);
    	if ( count($cookie_elements) != 3 )
    		return false;
    
    	list($username, $expiration, $hmac) = $cookie_elements;
    
    	$expired = $expiration;
    
    	// Allow a grace period for POST and AJAX requests
    	if ( defined('DOING_AJAX') || 'POST' == $_SERVER['REQUEST_METHOD'] )
    		$expired += 3600;
    
    	// Quick check to see if an honest cookie has expired
    	if ( $expired < time() )
    		return false;
    
    	$key = wp_hash($username . '|' . $expiration, $scheme);
    	$hash = hash_hmac('md5', $username . '|' . $expiration, $key);
    
    	if ( $hmac != $hash )
    		return false;
    
    	$user = get_userdatabylogin($username);
    	if ( ! $user )
    		return false;
    
    	return $user->ID;
    }
    endif;
    
    if ( !function_exists('wp_generate_auth_cookie') ) :
    /**
     * Generate authentication cookie contents.
     *
     * @since 2.5
     * @uses apply_filters() Calls 'auth_cookie' hook on $cookie contents, User ID
     *		and expiration of cookie.
     *
     * @param int $user_id User ID
     * @param int $expiration Cookie expiration in seconds
     * @param string $scheme Optional. The cookie scheme to use: auth, secure_auth, or logged_in
     * @return string Authentication cookie contents
     */
    function wp_generate_auth_cookie($user_id, $expiration, $scheme = 'auth') {
    	$user = get_userdata($user_id);
    
    	$key = wp_hash($user->user_login . '|' . $expiration, $scheme);
    	$hash = hash_hmac('md5', $user->user_login . '|' . $expiration, $key);
    
    	$cookie = $user->user_login . '|' . $expiration . '|' . $hash;
    
    	return apply_filters('auth_cookie', $cookie, $user_id, $expiration, $scheme);
    }
    endif;
    
    if ( !function_exists('wp_set_auth_cookie') ) :
    /**
     * Sets the authentication cookies based User ID.
     *
     * The $remember parameter increases the time that the cookie will be kept. The
     * default the cookie is kept without remembering is two days. When $remember is
     * set, the cookies will be kept for 14 days or two weeks.
     *
     * @since 2.5
     *
     * @param int $user_id User ID
     * @param bool $remember Whether to remember the user or not
     */
    function wp_set_auth_cookie($user_id, $remember = false, $secure = '') {
    	if ( $remember ) {
    		$expiration = $expire = time() + 1209600;
    	} else {
    		$expiration = time() + 172800;
    		$expire = 0;
    	}
    
    	if ( '' === $secure )
    		$secure = is_ssl() ? true : false;
    
    	if ( $secure ) {
    		$auth_cookie_name = SECURE_AUTH_COOKIE;
    		$scheme = 'secure_auth';
    	} else {
    		$auth_cookie_name = AUTH_COOKIE;
    		$scheme = 'auth';
    	}
    
    	$auth_cookie = wp_generate_auth_cookie($user_id, $expiration, $scheme);
    	$logged_in_cookie = wp_generate_auth_cookie($user_id, $expiration, 'logged_in');
    
    	do_action('set_auth_cookie', $auth_cookie, $expire, $expiration, $user_id, $scheme);
    	do_action('set_logged_in_cookie', $logged_in_cookie, $expire, $expiration, $user_id, 'logged_in');
    
    	setcookie($auth_cookie_name, $auth_cookie, $expire, PLUGINS_COOKIE_PATH, COOKIE_DOMAIN, $secure);
    	setcookie($auth_cookie_name, $auth_cookie, $expire, ADMIN_COOKIE_PATH, COOKIE_DOMAIN, $secure);
    	setcookie(LOGGED_IN_COOKIE, $logged_in_cookie, $expire, COOKIEPATH, COOKIE_DOMAIN);
    	if ( COOKIEPATH != SITECOOKIEPATH )
    		setcookie(LOGGED_IN_COOKIE, $logged_in_cookie, $expire, SITECOOKIEPATH, COOKIE_DOMAIN);
    }
    endif;
    
    if ( !function_exists('wp_clear_auth_cookie') ) :
    /**
     * Removes all of the cookies associated with authentication.
     *
     * @since 2.5
     */
    function wp_clear_auth_cookie() {
    	setcookie(AUTH_COOKIE, ' ', time() - 31536000, ADMIN_COOKIE_PATH, COOKIE_DOMAIN);
    	setcookie(SECURE_AUTH_COOKIE, ' ', time() - 31536000, ADMIN_COOKIE_PATH, COOKIE_DOMAIN);
    	setcookie(AUTH_COOKIE, ' ', time() - 31536000, PLUGINS_COOKIE_PATH, COOKIE_DOMAIN);
    	setcookie(SECURE_AUTH_COOKIE, ' ', time() - 31536000, PLUGINS_COOKIE_PATH, COOKIE_DOMAIN);
    	setcookie(LOGGED_IN_COOKIE, ' ', time() - 31536000, COOKIEPATH, COOKIE_DOMAIN);
    	setcookie(LOGGED_IN_COOKIE, ' ', time() - 31536000, SITECOOKIEPATH, COOKIE_DOMAIN);
    
    	// Old cookies
    	setcookie(AUTH_COOKIE, ' ', time() - 31536000, COOKIEPATH, COOKIE_DOMAIN);
    	setcookie(AUTH_COOKIE, ' ', time() - 31536000, SITECOOKIEPATH, COOKIE_DOMAIN);
    	setcookie(SECURE_AUTH_COOKIE, ' ', time() - 31536000, COOKIEPATH, COOKIE_DOMAIN);
    	setcookie(SECURE_AUTH_COOKIE, ' ', time() - 31536000, SITECOOKIEPATH, COOKIE_DOMAIN);
    
    	// Even older cookies
    	setcookie(USER_COOKIE, ' ', time() - 31536000, COOKIEPATH, COOKIE_DOMAIN);
    	setcookie(PASS_COOKIE, ' ', time() - 31536000, COOKIEPATH, COOKIE_DOMAIN);
    	setcookie(USER_COOKIE, ' ', time() - 31536000, SITECOOKIEPATH, COOKIE_DOMAIN);
    	setcookie(PASS_COOKIE, ' ', time() - 31536000, SITECOOKIEPATH, COOKIE_DOMAIN);
    }
    endif;
    
    if ( !function_exists('is_user_logged_in') ) :
    /**
     * Checks if the current visitor is a logged in user.
     *
     * @since 2.0.0
     *
     * @return bool True if user is logged in, false if not logged in.
     */
    function is_user_logged_in() {
    	$user = wp_get_current_user();
    
    	if ( $user->id == 0 )
    		return false;
    
    	return true;
    }
    endif;
    
    if ( !function_exists('auth_redirect') ) :
    /**
     * Checks if a user is logged in, if not it redirects them to the login page.
     *
     * @since 1.5
     */
    function auth_redirect() {
    	// Checks if a user is logged in, if not redirects them to the login page
    
    	if ( is_ssl() || force_ssl_admin() )
    		$secure = true;
    	else
    		$secure = false;
    
    	// If https is required and request is http, redirect
    	if ( $secure && !is_ssl() ) {
    		if ( 0 === strpos($_SERVER['REQUEST_URI'], 'http') ) {
    			wp_redirect(preg_replace('|^http://|', 'https://', $_SERVER['REQUEST_URI']));
    			exit();
    		} else {
    			wp_redirect('https://' . $_SERVER['HTTP_HOST'] . $_SERVER['REQUEST_URI']);
    			exit();
    		}
    	}
    
    	if ( wp_validate_auth_cookie() )
    		return;  // The cookie is good so we're done
    
    	// The cookie is no good so force login
    	nocache_headers();
    
    	if ( is_ssl() )
    		$proto = 'https://';
    	else
    		$proto = 'http://';
    
    	$login_url = site_url( 'wp-login.php?redirect_to=' . urlencode($proto . $_SERVER['HTTP_HOST'] . $_SERVER['REQUEST_URI']), 'login' );
    
    	wp_redirect($login_url);
    	exit();
    }
    endif;
    
    if ( !function_exists('check_admin_referer') ) :
    /**
     * Makes sure that a user was referred from another admin page.
     *
     * To avoid security exploits.
     *
     * @since 1.2.0
     * @uses do_action() Calls 'check_admin_referer' on $action.
     *
     * @param string $action Action nonce
     * @param string $query_arg where to look for nonce in $_REQUEST (since 2.5)
     */
    function check_admin_referer($action = -1, $query_arg = '_wpnonce') {
    	$adminurl = strtolower(admin_url());
    	$referer = strtolower(wp_get_referer());
    	$result = wp_verify_nonce($_REQUEST[$query_arg], $action);
    	if ( !$result && !(-1 == $action && strpos($referer, $adminurl) !== false) ) {
    		wp_nonce_ays($action);
    		die();
    	}
    	do_action('check_admin_referer', $action, $result);
    	return $result;
    }endif;
    
    if ( !function_exists('check_ajax_referer') ) :
    /**
     * Verifies the AJAX request to prevent processing requests external of the blog.
     *
     * @since 2.0.4
     *
     * @param string $action Action nonce
     * @param string $query_arg where to look for nonce in $_REQUEST (since 2.5)
     */
    function check_ajax_referer( $action = -1, $query_arg = false, $die = true ) {
    	if ( $query_arg )
    		$nonce = $_REQUEST[$query_arg];
    	else
    		$nonce = $_REQUEST['_ajax_nonce'] ? $_REQUEST['_ajax_nonce'] : $_REQUEST['_wpnonce'];
    
    	$result = wp_verify_nonce( $nonce, $action );
    
    	if ( $die && false == $result )
    		die('-1');
    
    	do_action('check_ajax_referer', $action, $result);
    
    	return $result;
    }
    endif;
    
    if ( !function_exists('wp_redirect') ) :
    /**
     * Redirects to another page, with a workaround for the IIS Set-Cookie bug.
     *
     * @link http://support.microsoft.com/kb/q176113/
     * @since 1.5.1
     * @uses apply_filters() Calls 'wp_redirect' hook on $location and $status.
     *
     * @param string $location The path to redirect to
     * @param int $status Status code to use
     * @return bool False if $location is not set
     */
    function wp_redirect($location, $status = 302) {
    	global $is_IIS;
    
    	$location = apply_filters('wp_redirect', $location, $status);
    	$status = apply_filters('wp_redirect_status', $status, $location);
    
    	if ( !$location ) // allows the wp_redirect filter to cancel a redirect
    		return false;
    
    	$location = wp_sanitize_redirect($location);
    
    	if ( $is_IIS ) {
    		header("Refresh: 0;url=$location");
    	} else {
    		if ( php_sapi_name() != 'cgi-fcgi' )
    			status_header($status); // This causes problems on IIS and some FastCGI setups
    		header("Location: $location");
    	}
    }
    endif;
    
    if ( !function_exists('wp_sanitize_redirect') ) :
    /**
     * Sanitizes a URL for use in a redirect.
     *
     * @since 2.3
     *
     * @return string redirect-sanitized URL
     **/
    function wp_sanitize_redirect($location) {
    	$location = preg_replace('|[^a-z0-9-~+_.?#=&;,/:%]|i', '', $location);
    	$location = wp_kses_no_null($location);
    
    	// remove %0d and %0a from location
    	$strip = array('%0d', '%0a');
    	$found = true;
    	while($found) {
    		$found = false;
    		foreach($strip as $val) {
    			while(strpos($location, $val) !== false) {
    				$found = true;
    				$location = str_replace($val, '', $location);
    			}
    		}
    	}
    	return $location;
    }
    endif;
    
    if ( !function_exists('wp_safe_redirect') ) :
    /**
     * Performs a safe (local) redirect, using wp_redirect().
     *
     * Checks whether the $location is using an allowed host, if it has an absolute
     * path. A plugin can therefore set or remove allowed host(s) to or from the
     * list.
     *
     * If the host is not allowed, then the redirect is to wp-admin on the siteurl
     * instead. This prevents malicious redirects which redirect to another host,
     * but only used in a few places.
     *
     * @since 2.3
     * @uses apply_filters() Calls 'allowed_redirect_hosts' on an array containing
     *		WordPress host string and $location host string.
     *
     * @return void Does not return anything
     **/
    function wp_safe_redirect($location, $status = 302) {
    
    	// Need to look at the URL the way it will end up in wp_redirect()
    	$location = wp_sanitize_redirect($location);
    
    	// browsers will assume 'http' is your protocol, and will obey a redirect to a URL starting with '//'
    	if ( substr($location, 0, 2) == '//' )
    		$location = 'http:' . $location;
    
    	// In php 5 parse_url may fail if the URL query part contains http://, bug #38143
    	$test = ( $cut = strpos($location, '?') ) ? substr( $location, 0, $cut ) : $location;
    
    	$lp  = parse_url($test);
    	$wpp = parse_url(get_option('home'));
    
    	$allowed_hosts = (array) apply_filters('allowed_redirect_hosts', array($wpp['host']), isset($lp['host']) ? $lp['host'] : '');
    
    	if ( isset($lp['host']) && ( !in_array($lp['host'], $allowed_hosts) && $lp['host'] != strtolower($wpp['host'])) )
    		$location = admin_url();
    
    	wp_redirect($location, $status);
    }
    endif;
    
    if ( ! function_exists('wp_notify_postauthor') ) :
    /**
     * Notify an author of a comment/trackback/pingback to one of their posts.
     *
     * @since 1.0.0
     *
     * @param int $comment_id Comment ID
     * @param string $comment_type Optional. The comment type either 'comment' (default), 'trackback', or 'pingback'
     * @return bool False if user email does not exist. True on completion.
     */
    function wp_notify_postauthor($comment_id, $comment_type='') {
    	$comment = get_comment($comment_id);
    	$post    = get_post($comment->comment_post_ID);
    	$user    = get_userdata( $post->post_author );
    
    	if ('' == $user->user_email) return false; // If there's no email to send the comment to
    
    	$comment_author_domain = @gethostbyaddr($comment->comment_author_IP);
    
    	$blogname = get_option('blogname');
    
    	if ( empty( $comment_type ) ) $comment_type = 'comment';
    
    	if ('comment' == $comment_type) {
    		$notify_message  = sprintf( __('New comment on your post #%1$s "%2$s"'), $comment->comment_post_ID, $post->post_title ) . "\r\n";
    		$notify_message .= sprintf( __('Author : %1$s (IP: %2$s , %3$s)'), $comment->comment_author, $comment->comment_author_IP, $comment_author_domain ) . "\r\n";
    		$notify_message .= sprintf( __('E-mail : %s'), $comment->comment_author_email ) . "\r\n";
    		$notify_message .= sprintf( __('URL    : %s'), $comment->comment_author_url ) . "\r\n";
    		$notify_message .= sprintf( __('Whois  : http://ws.arin.net/cgi-bin/whois.pl?queryinput=%s'), $comment->comment_author_IP ) . "\r\n";
    		$notify_message .= __('Comment: ') . "\r\n" . $comment->comment_content . "\r\n\r\n";
    		$notify_message .= __('You can see all comments on this post here: ') . "\r\n";
    		$subject = sprintf( __('[%1$s] Comment: "%2$s"'), $blogname, $post->post_title );
    	} elseif ('trackback' == $comment_type) {
    		$notify_message  = sprintf( __('New trackback on your post #%1$s "%2$s"'), $comment->comment_post_ID, $post->post_title ) . "\r\n";
    		$notify_message .= sprintf( __('Website: %1$s (IP: %2$s , %3$s)'), $comment->comment_author, $comment->comment_author_IP, $comment_author_domain ) . "\r\n";
    		$notify_message .= sprintf( __('URL    : %s'), $comment->comment_author_url ) . "\r\n";
    		$notify_message .= __('Excerpt: ') . "\r\n" . $comment->comment_content . "\r\n\r\n";
    		$notify_message .= __('You can see all trackbacks on this post here: ') . "\r\n";
    		$subject = sprintf( __('[%1$s] Trackback: "%2$s"'), $blogname, $post->post_title );
    	} elseif ('pingback' == $comment_type) {
    		$notify_message  = sprintf( __('New pingback on your post #%1$s "%2$s"'), $comment->comment_post_ID, $post->post_title ) . "\r\n";
    		$notify_message .= sprintf( __('Website: %1$s (IP: %2$s , %3$s)'), $comment->comment_author, $comment->comment_author_IP, $comment_author_domain ) . "\r\n";
    		$notify_message .= sprintf( __('URL    : %s'), $comment->comment_author_url ) . "\r\n";
    		$notify_message .= __('Excerpt: ') . "\r\n" . sprintf('[...] %s [...]', $comment->comment_content ) . "\r\n\r\n";
    		$notify_message .= __('You can see all pingbacks on this post here: ') . "\r\n";
    		$subject = sprintf( __('[%1$s] Pingback: "%2$s"'), $blogname, $post->post_title );
    	}
    	$notify_message .= get_permalink($comment->comment_post_ID) . "#comments\r\n\r\n";
    	$notify_message .= sprintf( __('Delete it: %s'), admin_url("comment.php?action=cdc&c=$comment_id") ) . "\r\n";
    	$notify_message .= sprintf( __('Spam it: %s'), admin_url("comment.php?action=cdc&dt=spam&c=$comment_id") ) . "\r\n";
    
    	$wp_email = 'wordpress@' . preg_replace('#^www\.#', '', strtolower($_SERVER['SERVER_NAME']));
    
    	if ( '' == $comment->comment_author ) {
    		$from = "From: \"$blogname\" <$wp_email>";
    		if ( '' != $comment->comment_author_email )
    			$reply_to = "Reply-To: $comment->comment_author_email";
    	} else {
    		$from = "From: \"$comment->comment_author\" <$wp_email>";
    		if ( '' != $comment->comment_author_email )
    			$reply_to = "Reply-To: \"$comment->comment_author_email\" <$comment->comment_author_email>";
    	}
    
    	$message_headers = "$from\n"
    		. "Content-Type: text/plain; charset=\"" . get_option('blog_charset') . "\"\n";
    
    	if ( isset($reply_to) )
    		$message_headers .= $reply_to . "\n";
    
    	$notify_message = apply_filters('comment_notification_text', $notify_message, $comment_id);
    	$subject = apply_filters('comment_notification_subject', $subject, $comment_id);
    	$message_headers = apply_filters('comment_notification_headers', $message_headers, $comment_id);
    
    	@wp_mail($user->user_email, $subject, $notify_message, $message_headers);
    
    	return true;
    }
    endif;
    
    if ( !function_exists('wp_notify_moderator') ) :
    /**
     * Notifies the moderator of the blog about a new comment that is awaiting approval.
     *
     * @since 1.0
     * @uses $wpdb
     *
     * @param int $comment_id Comment ID
     * @return bool Always returns true
     */
    function wp_notify_moderator($comment_id) {
    	global $wpdb;
    
    	if( get_option( "moderation_notify" ) == 0 )
    		return true;
    
    	$comment = $wpdb->get_row($wpdb->prepare("SELECT * FROM $wpdb->comments WHERE comment_ID=%d LIMIT 1", $comment_id));
    	$post = $wpdb->get_row($wpdb->prepare("SELECT * FROM $wpdb->posts WHERE ID=%d LIMIT 1", $comment->comment_post_ID));
    
    	$comment_author_domain = @gethostbyaddr($comment->comment_author_IP);
    	$comments_waiting = $wpdb->get_var("SELECT count(comment_ID) FROM $wpdb->comments WHERE comment_approved = '0'");
    
    	switch ($comment->comment_type)
    	{
    		case 'trackback':
    			$notify_message  = sprintf( __('A new trackback on the post #%1$s "%2$s" is waiting for your approval'), $post->ID, $post->post_title ) . "\r\n";
    			$notify_message .= get_permalink($comment->comment_post_ID) . "\r\n\r\n";
    			$notify_message .= sprintf( __('Website : %1$s (IP: %2$s , %3$s)'), $comment->comment_author, $comment->comment_author_IP, $comment_author_domain ) . "\r\n";
    			$notify_message .= sprintf( __('URL    : %s'), $comment->comment_author_url ) . "\r\n";
    			$notify_message .= __('Trackback excerpt: ') . "\r\n" . $comment->comment_content . "\r\n\r\n";
    			break;
    		case 'pingback':
    			$notify_message  = sprintf( __('A new pingback on the post #%1$s "%2$s" is waiting for your approval'), $post->ID, $post->post_title ) . "\r\n";
    			$notify_message .= get_permalink($comment->comment_post_ID) . "\r\n\r\n";
    			$notify_message .= sprintf( __('Website : %1$s (IP: %2$s , %3$s)'), $comment->comment_author, $comment->comment_author_IP, $comment_author_domain ) . "\r\n";
    			$notify_message .= sprintf( __('URL    : %s'), $comment->comment_author_url ) . "\r\n";
    			$notify_message .= __('Pingback excerpt: ') . "\r\n" . $comment->comment_content . "\r\n\r\n";
    			break;
    		default: //Comments
    			$notify_message  = sprintf( __('A new comment on the post #%1$s "%2$s" is waiting for your approval'), $post->ID, $post->post_title ) . "\r\n";
    			$notify_message .= get_permalink($comment->comment_post_ID) . "\r\n\r\n";
    			$notify_message .= sprintf( __('Author : %1$s (IP: %2$s , %3$s)'), $comment->comment_author, $comment->comment_author_IP, $comment_author_domain ) . "\r\n";
    			$notify_message .= sprintf( __('E-mail : %s'), $comment->comment_author_email ) . "\r\n";
    			$notify_message .= sprintf( __('URL    : %s'), $comment->comment_author_url ) . "\r\n";
    			$notify_message .= sprintf( __('Whois  : http://ws.arin.net/cgi-bin/whois.pl?queryinput=%s'), $comment->comment_author_IP ) . "\r\n";
    			$notify_message .= __('Comment: ') . "\r\n" . $comment->comment_content . "\r\n\r\n";
    			break;
    	}
    
    	$notify_message .= sprintf( __('Approve it: %s'),  admin_url("comment.php?action=mac&c=$comment_id") ) . "\r\n";
    	$notify_message .= sprintf( __('Delete it: %s'), admin_url("comment.php?action=cdc&c=$comment_id") ) . "\r\n";
    	$notify_message .= sprintf( __('Spam it: %s'), admin_url("comment.php?action=cdc&dt=spam&c=$comment_id") ) . "\r\n";
    
    	$notify_message .= sprintf( __ngettext('Currently %s comment is waiting for approval. Please visit the moderation panel:',
     		'Currently %s comments are waiting for approval. Please visit the moderation panel:', $comments_waiting), number_format_i18n($comments_waiting) ) . "\r\n";
    	$notify_message .= admin_url("edit-comments.php?comment_status=moderated") . "\r\n";
    
    	$subject = sprintf( __('[%1$s] Please moderate: "%2$s"'), get_option('blogname'), $post->post_title );
    	$admin_email = get_option('admin_email');
    
    	$notify_message = apply_filters('comment_moderation_text', $notify_message, $comment_id);
    	$subject = apply_filters('comment_moderation_subject', $subject, $comment_id);
    
    	@wp_mail($admin_email, $subject, $notify_message);
    
    	return true;
    }
    endif;
    
    if ( !function_exists('wp_new_user_notification') ) :
    /**
     * Notify the blog admin of a new user, normally via email.
     *
     * @since 2.0
     *
     * @param int $user_id User ID
     * @param string $plaintext_pass Optional. The user's plaintext password
     */
    function wp_new_user_notification($user_id, $plaintext_pass = '') {
    	$user = new WP_User($user_id);
    
    	$user_login = stripslashes($user->user_login);
    	$user_email = stripslashes($user->user_email);
    
    	$message  = sprintf(__('New user registration on your blog %s:'), get_option('blogname')) . "\r\n\r\n";
    	$message .= sprintf(__('Username: %s'), $user_login) . "\r\n\r\n";
    	$message .= sprintf(__('E-mail: %s'), $user_email) . "\r\n";
    
    	@wp_mail(get_option('admin_email'), sprintf(__('[%s] New User Registration'), get_option('blogname')), $message);
    
    	if ( empty($plaintext_pass) )
    		return;
    
    	$message  = sprintf(__('Username: %s'), $user_login) . "\r\n";
    	$message .= sprintf(__('Password: %s'), $plaintext_pass) . "\r\n";
    	$message .= site_url("wp-login.php", 'login') . "\r\n";
    
    	wp_mail($user_email, sprintf(__('[%s] Your username and password'), get_option('blogname')), $message);
    
    }
    endif;
    
    if ( !function_exists('wp_nonce_tick') ) :
    /**
     * Get the time-dependent variable for nonce creation.
     *
     * A nonce has a lifespan of two ticks. Nonces in their second tick may be
     * updated, e.g. by autosave.
     *
     * @since 2.5
     *
     * @return int
     */
    function wp_nonce_tick() {
    	$nonce_life = apply_filters('nonce_life', 86400);
    
    	return ceil(time() / ( $nonce_life / 2 ));
    }
    endif;
    
    if ( !function_exists('wp_verify_nonce') ) :
    /**
     * Verify that correct nonce was used with time limit.
     *
     * The user is given an amount of time to use the token, so therefore, since the
     * UID and $action remain the same, the independent variable is the time.
     *
     * @since 2.0.4
     *
     * @param string $nonce Nonce that was used in the form to verify
     * @param string|int $action Should give context to what is taking place and be the same when nonce was created.
     * @return bool Whether the nonce check passed or failed.
     */
    function wp_verify_nonce($nonce, $action = -1) {
    	$user = wp_get_current_user();
    	$uid = (int) $user->id;
    
    	$i = wp_nonce_tick();
    
    	// Nonce generated 0-12 hours ago
    	if ( substr(wp_hash($i . $action . $uid), -12, 10) == $nonce )
    		return 1;
    	// Nonce generated 12-24 hours ago
    	if ( substr(wp_hash(($i - 1) . $action . $uid), -12, 10) == $nonce )
    		return 2;
    	// Invalid nonce
    	return false;
    }
    endif;
    
    if ( !function_exists('wp_create_nonce') ) :
    /**
     * Creates a random, one time use token.
     *
     * @since 2.0.4
     *
     * @param string|int $action Scalar value to add context to the nonce.
     * @return string The one use form token
     */
    function wp_create_nonce($action = -1) {
    	$user = wp_get_current_user();
    	$uid = (int) $user->id;
    
    	$i = wp_nonce_tick();
    
    	return substr(wp_hash($i . $action . $uid), -12, 10);
    }
    endif;
    
    if ( !function_exists('wp_salt') ) :
    /**
     * Get salt to add to hashes to help prevent attacks.
     *
     * The secret key is located in two places: the database in case the secret key
     * isn't defined in the second place, which is in the wp-config.php file. If you
     * are going to set the secret key, then you must do so in the wp-config.php
     * file.
     *
     * The secret key in the database is randomly generated and will be appended to
     * the secret key that is in wp-config.php file in some instances. It is
     * important to have the secret key defined or changed in wp-config.php.
     *
     * If you have installed WordPress 2.5 or later, then you will have the
     * SECRET_KEY defined in the wp-config.php already. You will want to change the
     * value in it because hackers will know what it is. If you have upgraded to
     * WordPress 2.5 or later version from a version before WordPress 2.5, then you
     * should add the constant to your wp-con

    Thread Starter skrunch

    (@skrunch)

    Thanx! I followed both replies and it worked…thanx!

Viewing 4 replies - 1 through 4 (of 4 total)