Changeset 4524 for trunk/bp-groups/bp-groups-screens.php

Timestamp:

06/16/2011 08:08:45 PM (15 years ago)

Author:

boonebgorges

Message:

Adds toggle for who can send group invitations, in order to make the option more consistent and configurable throughout BP. Fixes #2005. Props DJPaul for help cleaning up the patches.

File:

• trunk/bp-groups/bp-groups-screens.php (modified) (2 diffs)

trunk/bp-groups/bp-groups-screens.php

@@ -506 +506 @@
                 if ( isset( $_POST['save'] ) ) {
                         $enable_forum   = ( isset($_POST['group-show-forum'] ) ) ? 1 : 0;
+                        
+                        // Checked against a whitelist for security
                         $allowed_status = apply_filters( 'groups_allowed_status', array( 'public', 'private', 'hidden' ) );
                         $status         = ( in_array( $_POST['group-status'], (array)$allowed_status ) ) ? $_POST['group-status'] : 'public';
+                        
+                        // Checked against a whitelist for security
+                        $allowed_invite_status = apply_filters( 'groups_allowed_invite_status', array( 'members', 'mods', 'admins' ) );
+                        $invite_status         = in_array( $_POST['group-invite-status'], (array)$allowed_invite_status ) ? $_POST['group-invite-status'] : 'members';
 
                         // Check the nonce
@@ -513 +519 @@
                                 return false;
 
-                        if ( !groups_edit_group_settings( $_POST['group-id'], $enable_forum, $status ) ) {
+                        if ( !groups_edit_group_settings( $_POST['group-id'], $enable_forum, $status, $invite_status ) ) {
                                 bp_core_add_message( __( 'There was an error updating group settings, please try again.', 'buddypress' ), 'error' );
                         } else {