Wordpress Plugin: Invite Users with Role.

Wordpress Plugin: Invite Users with Role. I'm looking for a custom wordpress plugin that lets me securely invite uses by role for my multisite installation. So imagine that you are are an administrator of site X in a multi-site installation. You want to invite a friend to be an 'author' on your site, so you use the plugin to create an invitation to the site, specifying her first name, last name, email, and new role. When your friend checks her email, she'll see an email inviting them to the site, and telling them that the activation link expires in 3 days. When she clicks on the link, she'll be brought to site X and will need to enter a new username and password. She now she'll be able to login and she'll have the role of 'author'. She's pleased that she didn't need to enter her name or email. Any other user that visits the site won't be able to register unless they have an invitation email. If your friend clicks on her registration link a second time, or forwards the email to a friend, she'll see a message saying that her link has already been used. Instead of reading her email immediately, if your friend were to click on her link several days after she initially received it, she would see a message that the invitation had already expired. If you try to invite a friend to be, say, an 'author', but they are already registered (base on their email), then you would see a message saying something like: Melissa Meyers ([login to view URL]) is already a registered user as a 'editor'. Now, as the original inviter, you can visit the [login to view URL] page and see the status of your invitations (see mockup). Importantly, you re-send invitations to send out emails again and reset the expiration clock. Special Consideration ===================== Because of another plugin that I use, sometimes some extra paramaters are added to the [login to view URL] url, namely, it looks like this: ...wp-admin/[login to view URL] If initially present, those params should persist, and the plugin should filter results to match 'role'. So, if the parameter is 'role='editor', then the report should only show invitations to new 'editors.' When making a new invitation, the user should only have the option to invite at the same role, so it would fixed to 'editor'. If interested, this is the plugin that I'm using: [login to view URL] Security ========= Only users with 'edit_users' capability should be able to see the invitation form Also, to avoid hacking, before entering the invitation into the database, the plugin should again re-check current user permissions. The invitation will be via an obfuscated token, so the invitee will receive an email with a link to a registration page - at registration, the plugin will use the token to look up the invation and to find the user's first name, last name, and email. It is important that the user isn't given a chance to spoof the email and name at registration (so, for example, simply using hidden fields wouldn't be secure enough ) We might need to work together make this secure - basically, it shouldn't be obviously hackable and only the invited people should should be able to complete the registration Settings ======== The following should be in a stand-alone settings file (feel free to add more) * invitation email text * text explaining a role change * Number of days an invitation stays fresh before it expires * The max number of invitations a person is allowed to send within a 30 day period * capability needed invite people * capability needed to delete outstanding invitations * capability needed to change an existing user's role * number of rows to show in 'recents' in a report