root/branches/2.0/wp-includes/pluggable-functions.php

<?php

    /* These functions can be replaced via plugins.  They are loaded after
     plugins are loaded. */

if ( !function_exists('set_current_user') ) :
function set_current_user($id, $name = '') {
    return wp_set_current_user($id, $name);
}
endif;

if ( !function_exists('wp_set_current_user') ) :
function wp_set_current_user($id, $name = '') {
    global $current_user;

    if ( isset($current_user) && ($id == $current_user->ID) )
        return $current_user;

    $current_user = new WP_User($id, $name);

    setup_userdata($current_user->ID);

    do_action('set_current_user');

    return $current_user;
}
endif;

if ( !function_exists('wp_get_current_user') ) :
function wp_get_current_user() {
    global $current_user;

    get_currentuserinfo();

    return $current_user;
}
endif;

if ( !function_exists('get_currentuserinfo') ) :
function get_currentuserinfo() {
    global $current_user;

    if ( defined('XMLRPC_REQUEST') && XMLRPC_REQUEST )
        return false;

    if ( ! empty($current_user) )
        return;

    if ( empty($_COOKIE[USER_COOKIE]) || empty($_COOKIE[PASS_COOKIE]) || 
        !wp_login($_COOKIE[USER_COOKIE], $_COOKIE[PASS_COOKIE], true) ) {
        wp_set_current_user(0);
        return false;
    }

    $user_login = $_COOKIE[USER_COOKIE];
    wp_set_current_user(0, $user_login);
}
endif;

if ( !function_exists('get_userdata') ) :
function get_userdata( $user_id ) {
    global $wpdb;
    $user_id = (int) $user_id;
    if ( $user_id == 0 )
        return false;

    $user = wp_cache_get($user_id, 'users');
    
    if ( $user )
        return $user;

    if ( !$user = $wpdb->get_row("SELECT * FROM $wpdb->users WHERE ID = '$user_id' LIMIT 1") )
        return false;

    $wpdb->hide_errors();
    $metavalues = $wpdb->get_results("SELECT meta_key, meta_value FROM $wpdb->usermeta WHERE user_id = '$user_id'");
    $wpdb->show_errors();

    if ($metavalues) {
        foreach ( $metavalues as $meta ) {
            $value = maybe_unserialize($meta->meta_value);
            $user->{$meta->meta_key} = $value;

            // We need to set user_level from meta, not row
            if ( $wpdb->prefix . 'user_level' == $meta->meta_key )
                $user->user_level = $meta->meta_value;
        } // end foreach
    } //end if

    // For backwards compat.
    if ( isset($user->first_name) )
        $user->user_firstname = $user->first_name;
    if ( isset($user->last_name) )
        $user->user_lastname = $user->last_name;
    if ( isset($user->description) )
        $user->user_description = $user->description;
        
    wp_cache_add($user_id, $user, 'users');
    wp_cache_add($user->user_login, $user, 'userlogins');
    
    return $user;
}
endif;

if ( !function_exists('update_user_cache') ) :
function update_user_cache() {
    return true;
}
endif;

if ( !function_exists('get_userdatabylogin') ) :
function get_userdatabylogin($user_login) {
    global $wpdb;
    $user_login = sanitize_user( $user_login );

    if ( empty( $user_login ) )
        return false;
        
    $userdata = wp_cache_get($user_login, 'userlogins');
    if ( $userdata )
        return $userdata;

    $user_login = $wpdb->escape($user_login);

    if ( !$user = $wpdb->get_row("SELECT * FROM $wpdb->users WHERE user_login = '$user_login'") )
        return false;

    $wpdb->hide_errors();
    $metavalues = $wpdb->get_results("SELECT meta_key, meta_value FROM $wpdb->usermeta WHERE user_id = '$user->ID'");
    $wpdb->show_errors();

    if ($metavalues) {
        foreach ( $metavalues as $meta ) {
            $value = maybe_unserialize($meta->meta_value);
            $user->{$meta->meta_key} = $value;

            // We need to set user_level from meta, not row
            if ( $wpdb->prefix . 'user_level' == $meta->meta_key )
                $user->user_level = $meta->meta_value;
        }
    }

    // For backwards compat.
    if ( isset($user->first_name) )
        $user->user_firstname = $user->first_name;
    if ( isset($user->last_name) )
        $user->user_lastname = $user->last_name;
    if ( isset($user->description) )
        $user->user_description = $user->description;

    wp_cache_add($user->ID, $user, 'users');
    wp_cache_add($user->user_login, $user, 'userlogins');

    return $user;

}
endif;

if ( !function_exists('wp_mail') ) :
function wp_mail($to, $subject, $message, $headers = '') {
    if( $headers == '' ) {
        $headers = "MIME-Version: 1.0\n" .
            "From: wordpress@" . preg_replace('#^www\.#', '', strtolower($_SERVER['SERVER_NAME'])) . "\n" . 
            "Content-Type: text/plain; charset=\"" . get_settings('blog_charset') . "\"\n";
    }

    return @mail($to, $subject, $message, $headers);
}
endif;

if ( !function_exists('wp_login') ) :
function wp_login($username, $password, $already_md5 = false) {
    global $wpdb, $error;

    if ( '' == $username )
        return false;

    if ( '' == $password ) {
        $error = __('<strong>Error</strong>: The password field is empty.');
        return false;
    }

    $login = get_userdatabylogin($username);
    //$login = $wpdb->get_row("SELECT ID, user_login, user_pass FROM $wpdb->users WHERE user_login = '$username'");

    if (!$login) {
        $error = __('<strong>Error</strong>: Wrong username.');
        return false;
    } else {
        // If the password is already_md5, it has been double hashed.
        // Otherwise, it is plain text.
        if ( ($already_md5 && md5($login->user_pass) == $password) || ($login->user_login == $username && $login->user_pass == md5($password)) ) {
            return true;
        } else {
            $error = __('<strong>Error</strong>: Incorrect password.');
            $pwd = '';
            return false;
        }
    }
}
endif;

if ( !function_exists('is_user_logged_in') ) :
function is_user_logged_in() {
    $user = wp_get_current_user();
    
    if ( $user->id == 0 )
        return false;

    return true;
}
endif;

if ( !function_exists('auth_redirect') ) :
function auth_redirect() {
    // Checks if a user is logged in, if not redirects them to the login page
    if ( (!empty($_COOKIE[USER_COOKIE]) && 
                !wp_login($_COOKIE[USER_COOKIE], $_COOKIE[PASS_COOKIE], true)) ||
             (empty($_COOKIE[USER_COOKIE])) ) {
        nocache_headers();
    
        wp_redirect(get_settings('siteurl') . '/wp-login.php?redirect_to=' . urlencode($_SERVER['REQUEST_URI']));
        exit();
    }
}
endif;

if ( !function_exists('check_admin_referer') ) :
function check_admin_referer($action = -1) {
    $adminurl = strtolower(get_settings('siteurl')).'/wp-admin';
    $referer = strtolower(wp_get_referer());
    if ( !wp_verify_nonce($_REQUEST['_wpnonce'], $action) &&
        !(-1 == $action && strstr($referer, $adminurl)) ) {
        wp_nonce_ays($action);
        die();
    }
    do_action('check_admin_referer', $action);
}
endif;

if ( !function_exists('check_ajax_referer') ) :
function check_ajax_referer() {
    $cookie = explode('; ', urldecode(empty($_POST['cookie']) ? $_GET['cookie'] : $_POST['cookie'])); // AJAX scripts must pass cookie=document.cookie
    foreach ( $cookie as $tasty ) {
        if ( false !== strpos($tasty, USER_COOKIE) )
            $user = urldecode(substr(strstr($tasty, '='), 1)); // Nasty double encoding
        if ( false !== strpos($tasty, PASS_COOKIE) )
            $pass = urldecode(substr(strstr($tasty, '='), 1));
    }
    if ( wp_login( $user, $pass, true ) )
        return true;
    return false;
}
endif;

// Cookie safe redirect.  Works around IIS Set-Cookie bug.
// http://support.microsoft.com/kb/q176113/
if ( !function_exists('wp_redirect') ) :
function wp_redirect($location, $status = 302) {
    global $is_IIS;

    $location = apply_filters('wp_redirect', $location, $status);

    if ( !$location ) // allows the wp_redirect filter to cancel a redirect
        return false;

    $location = wp_sanitize_redirect($location);

    if ( $is_IIS ) {
        header("Refresh: 0;url=$location");
    } else {
        if ( php_sapi_name() != 'cgi-fcgi' )
            status_header($status); // This causes problems on IIS and some FastCGI setups
        header("Location: $location");
    }
}
endif;

if ( !function_exists('wp_sanitize_redirect') ) :
/**
* sanitizes a URL for use in a redirect
* @return string redirect-sanitized URL
**/
function wp_sanitize_redirect($location) {
    $location = preg_replace('|[^a-z0-9-~+_.?#=&;,/:%]|i', '', $location);
    $location = wp_kses_no_null($location);

    // remove %0d and %0a from location
    $strip = array('%0d', '%0a');
    $found = true;
    while($found) {
        $found = false;
        foreach($strip as $val) {
            while(strpos($location, $val) !== false) {
                $found = true;
                $location = str_replace($val, '', $location);
            }
        }
    }
    return $location;
}
endif;

if ( !function_exists('wp_safe_redirect') ) :
/**
* performs a safe (local) redirect, using wp_redirect()
* @return void
**/
function wp_safe_redirect($location, $status = 302) {

    // Need to look at the URL the way it will end up in wp_redirect()
    $location = wp_sanitize_redirect($location);

    // browsers will assume 'http' is your protocol, and will obey a redirect to a URL starting with '//'
    if ( substr($location, 0, 2) == '//' )
        $location = 'http:' . $location;

    $lp  = parse_url($location);
    $wpp = parse_url(get_option('home'));

    $allowed_hosts = (array) apply_filters('allowed_redirect_hosts', array($wpp['host']));

    if ( isset($lp['host']) && ( !in_array($lp['host'], $allowed_hosts) && $lp['host'] != strtolower($wpp['host'])) )
        $location = get_option('siteurl') . '/wp-admin/';
    
    wp_redirect($location, $status);
}
endif;

if ( !function_exists('wp_get_cookie_login') ):
function wp_get_cookie_login() {
    if ( empty($_COOKIE[USER_COOKIE]) || empty($_COOKIE[PASS_COOKIE]) )
        return false;

    return array('login' => $_COOKIE[USER_COOKIE],    'password' => $_COOKIE[PASS_COOKIE]);
}

endif;

if ( !function_exists('wp_setcookie') ) :
function wp_setcookie($username, $password, $already_md5 = false, $home = '', $siteurl = '', $remember = false) {
    if ( !$already_md5 )
        $password = md5( md5($password) ); // Double hash the password in the cookie.

    if ( empty($home) )
        $cookiepath = COOKIEPATH;
    else
        $cookiepath = preg_replace('|https?://[^/]+|i', '', $home . '/' );

    if ( empty($siteurl) ) {
        $sitecookiepath = SITECOOKIEPATH;
        $cookiehash = COOKIEHASH;
    } else {
        $sitecookiepath = preg_replace('|https?://[^/]+|i', '', $siteurl . '/' );
        $cookiehash = md5($siteurl);
    }

    if ( $remember )
        $expire = time() + 31536000;
    else
        $expire = 0;

    setcookie(USER_COOKIE, $username, $expire, $cookiepath, COOKIE_DOMAIN);
    setcookie(PASS_COOKIE, $password, $expire, $cookiepath, COOKIE_DOMAIN);

    if ( $cookiepath != $sitecookiepath ) {
        setcookie(USER_COOKIE, $username, $expire, $sitecookiepath, COOKIE_DOMAIN);
        setcookie(PASS_COOKIE, $password, $expire, $sitecookiepath, COOKIE_DOMAIN);
    }
}
endif;

if ( !function_exists('wp_clearcookie') ) :
function wp_clearcookie() {
    setcookie(USER_COOKIE, ' ', time() - 31536000, COOKIEPATH, COOKIE_DOMAIN);
    setcookie(PASS_COOKIE, ' ', time() - 31536000, COOKIEPATH, COOKIE_DOMAIN);
    setcookie(USER_COOKIE, ' ', time() - 31536000, SITECOOKIEPATH, COOKIE_DOMAIN);
    setcookie(PASS_COOKIE, ' ', time() - 31536000, SITECOOKIEPATH, COOKIE_DOMAIN);
}
endif;

if ( ! function_exists('wp_notify_postauthor') ) :
function wp_notify_postauthor($comment_id, $comment_type='') {
    global $wpdb;
    
    $comment = get_comment($comment_id);
    $post    = get_post($comment->comment_post_ID);
    $user    = get_userdata( $post->post_author );

    if ('' == $user->user_email) return false; // If there's no email to send the comment to

    $comment_author_domain = @gethostbyaddr($comment->comment_author_IP);

    $blogname = get_settings('blogname');
    
    if ( empty( $comment_type ) ) $comment_type = 'comment';
    
    if ('comment' == $comment_type) {
        $notify_message  = sprintf( __('New comment on your post #%1$s "%2$s"'), $comment->comment_post_ID, $post->post_title ) . "\r\n";
        $notify_message .= sprintf( __('Author : %1$s (IP: %2$s , %3$s)'), $comment->comment_author, $comment->comment_author_IP, $comment_author_domain ) . "\r\n";
        $notify_message .= sprintf( __('E-mail : %s'), $comment->comment_author_email ) . "\r\n";
        $notify_message .= sprintf( __('URI    : %s'), $comment->comment_author_url ) . "\r\n";
        $notify_message .= sprintf( __('Whois  : http://ws.arin.net/cgi-bin/whois.pl?queryinput=%s'), $comment->comment_author_IP ) . "\r\n";
        $notify_message .= __('Comment: ') . "\r\n" . $comment->comment_content . "\r\n\r\n";
        $notify_message .= __('You can see all comments on this post here: ') . "\r\n";
        $subject = sprintf( __('[%1$s] Comment: "%2$s"'), $blogname, $post->post_title );
    } elseif ('trackback' == $comment_type) {
        $notify_message  = sprintf( __('New trackback on your post #%1$s "%2$s"'), $comment->comment_post_ID, $post->post_title ) . "\r\n";
        $notify_message .= sprintf( __('Website: %1$s (IP: %2$s , %3$s)'), $comment->comment_author, $comment->comment_author_IP, $comment_author_domain ) . "\r\n";
        $notify_message .= sprintf( __('URI    : %s'), $comment->comment_author_url ) . "\r\n";
        $notify_message .= __('Excerpt: ') . "\r\n" . $comment->comment_content . "\r\n\r\n";
        $notify_message .= __('You can see all trackbacks on this post here: ') . "\r\n";
        $subject = sprintf( __('[%1$s] Trackback: "%2$s"'), $blogname, $post->post_title );
    } elseif ('pingback' == $comment_type) {
        $notify_message  = sprintf( __('New pingback on your post #%1$s "%2$s"'), $comment->comment_post_ID, $post->post_title ) . "\r\n";
        $notify_message .= sprintf( __('Website: %1$s (IP: %2$s , %3$s)'), $comment->comment_author, $comment->comment_author_IP, $comment_author_domain ) . "\r\n";
        $notify_message .= sprintf( __('URI    : %s'), $comment->comment_author_url ) . "\r\n";
        $notify_message .= __('Excerpt: ') . "\r\n" . sprintf('[...] %s [...]', $comment->comment_content ) . "\r\n\r\n";
        $notify_message .= __('You can see all pingbacks on this post here: ') . "\r\n";
        $subject = sprintf( __('[%1$s] Pingback: "%2$s"'), $blogname, $post->post_title );
    }
    $notify_message .= get_permalink($comment->comment_post_ID) . "#comments\r\n\r\n";
    $notify_message .= sprintf( __('To delete this comment, visit: %s'), get_settings('siteurl').'/wp-admin/post.php?action=confirmdeletecomment&p='.$comment->comment_post_ID."&comment=$comment_id" ) . "\r\n";

    $wp_email = 'wordpress@' . preg_replace('#^www\.#', '', strtolower($_SERVER['SERVER_NAME']));

    if ( '' == $comment->comment_author ) {
        $from = "From: \"$blogname\" <$wp_email>";
        if ( '' != $comment->comment_author_email )
            $reply_to = "Reply-To: $comment->comment_author_email";
     } else {
        $from = "From: \"$comment->comment_author\" <$wp_email>";
        if ( '' != $comment->comment_author_email )
            $reply_to = "Reply-To: \"$comment->comment_author_email\" <$comment->comment_author_email>";
     }

    $message_headers = "MIME-Version: 1.0\n"
        . "$from\n"
        . "Content-Type: text/plain; charset=\"" . get_settings('blog_charset') . "\"\n";

    if ( isset($reply_to) )
        $message_headers .= $reply_to . "\n";

    $notify_message = apply_filters('comment_notification_text', $notify_message, $comment_id);
    $subject = apply_filters('comment_notification_subject', $subject, $comment_id);
    $message_headers = apply_filters('comment_notification_headers', $message_headers, $comment_id);

    @wp_mail($user->user_email, $subject, $notify_message, $message_headers);
   
    return true;
}
endif;

/* wp_notify_moderator
   notifies the moderator of the blog (usually the admin)
   about a new comment that waits for approval
   always returns true
 */
if ( !function_exists('wp_notify_moderator') ) :
function wp_notify_moderator($comment_id) {
    global $wpdb;

    if( get_settings( "moderation_notify" ) == 0 )
        return true; 
    
    $comment