/wp-admin/includes/plugin-install.php

  1. <?php 
  2. /** 
  3.  * WordPress Plugin Install Administration API 
  4.  * 
  5.  * @package WordPress 
  6.  * @subpackage Administration 
  7.  */ 
  8.  
  9. /** 
  10.  * Retrieves plugin installer pages from the WordPress.org Plugins API. 
  11.  * 
  12.  * It is possible for a plugin to override the Plugin API result with three 
  13.  * filters. Assume this is for plugins, which can extend on the Plugin Info to 
  14.  * offer more choices. This is very powerful and must be used with care when 
  15.  * overriding the filters. 
  16.  * 
  17.  * The first filter, {@see 'plugins_api_args'}, is for the args and gives the action 
  18.  * as the second parameter. The hook for {@see 'plugins_api_args'} must ensure that 
  19.  * an object is returned. 
  20.  * 
  21.  * The second filter, {@see 'plugins_api'}, allows a plugin to override the WordPress.org 
  22.  * Plugin Install API entirely. If `$action` is 'query_plugins' or 'plugin_information',  
  23.  * an object MUST be passed. If `$action` is 'hot_tags' or 'hot_categories', an array MUST 
  24.  * be passed. 
  25.  * 
  26.  * Finally, the third filter, {@see 'plugins_api_result'}, makes it possible to filter the 
  27.  * response object or array, depending on the `$action` type. 
  28.  * 
  29.  * Supported arguments per action: 
  30.  * 
  31.  * | Argument Name        | query_plugins | plugin_information | hot_tags | hot_categories | 
  32.  * | -------------------- | :-----------: | :----------------: | :------: | :------------: | 
  33.  * | `$slug`              | No            |  Yes               | No       | No             | 
  34.  * | `$per_page`          | Yes           |  No                | No       | No             | 
  35.  * | `$page`              | Yes           |  No                | No       | No             | 
  36.  * | `$number`            | No            |  No                | Yes      | Yes            | 
  37.  * | `$search`            | Yes           |  No                | No       | No             | 
  38.  * | `$tag`               | Yes           |  No                | No       | No             | 
  39.  * | `$author`            | Yes           |  No                | No       | No             | 
  40.  * | `$user`              | Yes           |  No                | No       | No             | 
  41.  * | `$browse`            | Yes           |  No                | No       | No             | 
  42.  * | `$locale`            | Yes           |  Yes               | No       | No             | 
  43.  * | `$installed_plugins` | Yes           |  No                | No       | No             | 
  44.  * | `$is_ssl`            | Yes           |  Yes               | No       | No             | 
  45.  * | `$fields`            | Yes           |  Yes               | No       | No             | 
  46.  * 
  47.  * @since 2.7.0 
  48.  * 
  49.  * @param string       $action API action to perform: 'query_plugins', 'plugin_information',  
  50.  *                             'hot_tags' or 'hot_categories'. 
  51.  * @param array|object $args   { 
  52.  *     Optional. Array or object of arguments to serialize for the Plugin Info API. 
  53.  * 
  54.  *     @type string  $slug              The plugin slug. Default empty. 
  55.  *     @type int     $per_page          Number of plugins per page. Default 24. 
  56.  *     @type int     $page              Number of current page. Default 1. 
  57.  *     @type int     $number            Number of tags or categories to be queried. 
  58.  *     @type string  $search            A search term. Default empty. 
  59.  *     @type string  $tag               Tag to filter plugins. Default empty. 
  60.  *     @type string  $author            Username of an plugin author to filter plugins. Default empty. 
  61.  *     @type string  $user              Username to query for their favorites. Default empty. 
  62.  *     @type string  $browse            Browse view: 'popular', 'new', 'beta', 'recommended'. 
  63.  *     @type string  $locale            Locale to provide context-sensitive results. Default is the value 
  64.  *                                      of get_locale(). 
  65.  *     @type string  $installed_plugins Installed plugins to provide context-sensitive results. 
  66.  *     @type bool    $is_ssl            Whether links should be returned with https or not. Default false. 
  67.  *     @type array   $fields            { 
  68.  *         Array of fields which should or should not be returned. 
  69.  * 
  70.  *         @type bool $short_description Whether to return the plugin short description. Default true. 
  71.  *         @type bool $description       Whether to return the plugin full description. Default false. 
  72.  *         @type bool $sections          Whether to return the plugin readme sections: description, installation,  
  73.  *                                       FAQ, screenshots, other notes, and changelog. Default false. 
  74.  *         @type bool $tested            Whether to return the 'Compatible up to' value. Default true. 
  75.  *         @type bool $requires          Whether to return the required WordPress version. Default true. 
  76.  *         @type bool $rating            Whether to return the rating in percent and total number of ratings. 
  77.  *                                       Default true. 
  78.  *         @type bool $ratings           Whether to return the number of rating for each star (1-5). Default true. 
  79.  *         @type bool $downloaded        Whether to return the download count. Default true. 
  80.  *         @type bool $downloadlink      Whether to return the download link for the package. Default true. 
  81.  *         @type bool $last_updated      Whether to return the date of the last update. Default true. 
  82.  *         @type bool $added             Whether to return the date when the plugin was added to the wordpress.org 
  83.  *                                       repository. Default true. 
  84.  *         @type bool $tags              Whether to return the assigned tags. Default true. 
  85.  *         @type bool $compatibility     Whether to return the WordPress compatibility list. Default true. 
  86.  *         @type bool $homepage          Whether to return the plugin homepage link. Default true. 
  87.  *         @type bool $versions          Whether to return the list of all available versions. Default false. 
  88.  *         @type bool $donate_link       Whether to return the donation link. Default true. 
  89.  *         @type bool $reviews           Whether to return the plugin reviews. Default false. 
  90.  *         @type bool $banners           Whether to return the banner images links. Default false. 
  91.  *         @type bool $icons             Whether to return the icon links. Default false. 
  92.  *         @type bool $active_installs   Whether to return the number of active installs. Default false. 
  93.  *         @type bool $group             Whether to return the assigned group. Default false. 
  94.  *         @type bool $contributors      Whether to return the list of contributors. Default false. 
  95.  *     } 
  96.  * } 
  97.  * @return object|array|WP_Error Response object or array on success, WP_Error on failure. See the 
  98.  *         {@link https://developer.wordpress.org/reference/functions/plugins_api/ function reference article} 
  99.  *         for more information on the make-up of possible return values depending on the value of `$action`. 
  100.  */ 
  101. function plugins_api( $action, $args = array() ) { 
  102.  
  103.   if ( is_array( $args ) ) { 
  104.       $args = (object) $args; 
  105.   } 
  106.  
  107.   if ( ! isset( $args->per_page ) ) { 
  108.       $args->per_page = 24; 
  109.   } 
  110.  
  111.   if ( ! isset( $args->locale ) ) { 
  112.       $args->locale = get_user_locale(); 
  113.   } 
  114.  
  115.   /** 
  116.    * Filters the WordPress.org Plugin Install API arguments. 
  117.    * 
  118.    * Important: An object MUST be returned to this filter. 
  119.    * 
  120.    * @since 2.7.0 
  121.    * 
  122.    * @param object $args   Plugin API arguments. 
  123.    * @param string $action The type of information being requested from the Plugin Install API. 
  124.    */ 
  125.   $args = apply_filters( 'plugins_api_args', $args, $action ); 
  126.  
  127.   /** 
  128.    * Filters the response for the current WordPress.org Plugin Install API request. 
  129.    * 
  130.    * Passing a non-false value will effectively short-circuit the WordPress.org API request. 
  131.    * 
  132.    * If `$action` is 'query_plugins' or 'plugin_information', an object MUST be passed. 
  133.    * If `$action` is 'hot_tags' or 'hot_categories', an array should be passed. 
  134.    * 
  135.    * @since 2.7.0 
  136.    * 
  137.    * @param false|object|array $result The result object or array. Default false. 
  138.    * @param string             $action The type of information being requested from the Plugin Install API. 
  139.    * @param object             $args   Plugin API arguments. 
  140.    */ 
  141.   $res = apply_filters( 'plugins_api', false, $action, $args ); 
  142.  
  143.   if ( false === $res ) { 
  144.       $url = $http_url = 'http://api.wordpress.org/plugins/info/1.0/'; 
  145.       if ( $ssl = wp_http_supports( array( 'ssl' ) ) ) 
  146.           $url = set_url_scheme( $url, 'https' ); 
  147.  
  148.       $http_args = array( 
  149.           'timeout' => 15,  
  150.           'body' => array( 
  151.               'action' => $action,  
  152.               'request' => serialize( $args ) 
  153.  ) 
  154.  ); 
  155.       $request = wp_remote_post( $url, $http_args ); 
  156.  
  157.       if ( $ssl && is_wp_error( $request ) ) { 
  158.           trigger_error( 
  159.               sprintf( 
  160.                   /** translators: %s: support forums URL */ 
  161.                   __( 'An unexpected error occurred. Something may be wrong with WordPress.org or this server’s configuration. If you continue to have problems, please try the <a href="%s">support forums</a>.' ),  
  162.                   __( 'https://wordpress.org/support/' ) 
  163.  ) . ' ' . __( '(WordPress could not establish a secure connection to WordPress.org. Please contact your server administrator.)' ),  
  164.               headers_sent() || WP_DEBUG ? E_USER_WARNING : E_USER_NOTICE 
  165.  ); 
  166.           $request = wp_remote_post( $http_url, $http_args ); 
  167.       } 
  168.  
  169.       if ( is_wp_error($request) ) { 
  170.           $res = new WP_Error( 'plugins_api_failed',  
  171.               sprintf( 
  172.                   /** translators: %s: support forums URL */ 
  173.                   __( 'An unexpected error occurred. Something may be wrong with WordPress.org or this server’s configuration. If you continue to have problems, please try the <a href="%s">support forums</a>.' ),  
  174.                   __( 'https://wordpress.org/support/' ) 
  175.  ),  
  176.               $request->get_error_message() 
  177.  ); 
  178.       } else { 
  179.           $res = maybe_unserialize( wp_remote_retrieve_body( $request ) ); 
  180.           if ( ! is_object( $res ) && ! is_array( $res ) ) { 
  181.               $res = new WP_Error( 'plugins_api_failed',  
  182.                   sprintf( 
  183.                       /** translators: %s: support forums URL */ 
  184.                       __( 'An unexpected error occurred. Something may be wrong with WordPress.org or this server’s configuration. If you continue to have problems, please try the <a href="%s">support forums</a>.' ),  
  185.                       __( 'https://wordpress.org/support/' ) 
  186.  ),  
  187.                   wp_remote_retrieve_body( $request ) 
  188.  ); 
  189.           } 
  190.       } 
  191.   } elseif ( !is_wp_error($res) ) { 
  192.       $res->external = true; 
  193.   } 
  194.  
  195.   /** 
  196.    * Filters the Plugin Install API response results. 
  197.    * 
  198.    * @since 2.7.0 
  199.    * 
  200.    * @param object|WP_Error $res    Response object or WP_Error. 
  201.    * @param string          $action The type of information being requested from the Plugin Install API. 
  202.    * @param object          $args   Plugin API arguments. 
  203.    */ 
  204.   return apply_filters( 'plugins_api_result', $res, $action, $args ); 
  205. } 
  206.  
  207. /** 
  208.  * Retrieve popular WordPress plugin tags. 
  209.  * 
  210.  * @since 2.7.0 
  211.  * 
  212.  * @param array $args 
  213.  * @return array 
  214.  */ 
  215. function install_popular_tags( $args = array() ) { 
  216.   $key = md5(serialize($args)); 
  217.   if ( false !== ($tags = get_site_transient('poptags_' . $key) ) ) 
  218.       return $tags; 
  219.  
  220.   $tags = plugins_api('hot_tags', $args); 
  221.  
  222.   if ( is_wp_error($tags) ) 
  223.       return $tags; 
  224.  
  225.   set_site_transient( 'poptags_' . $key, $tags, 3 * HOUR_IN_SECONDS ); 
  226.  
  227.   return $tags; 
  228. } 
  229.  
  230. /** 
  231.  * @since 2.7.0 
  232.  */ 
  233. function install_dashboard() { 
  234.   ?> 
  235.   <p><?php printf( __( 'Plugins extend and expand the functionality of WordPress. You may automatically install plugins from the <a href="%1$s">WordPress Plugin Directory</a> or upload a plugin in .zip format by clicking the button at the top of this page.' ), __( 'https://wordpress.org/plugins/' ) ); ?></p> 
  236.  
  237.   <?php display_plugins_table(); ?> 
  238.  
  239.   <div class="plugins-popular-tags-wrapper"> 
  240.   <h2><?php _e( 'Popular tags' ) ?></h2> 
  241.   <p><?php _e( 'You may also browse based on the most popular tags in the Plugin Directory:' ) ?></p> 
  242.   <?php 
  243.  
  244.   $api_tags = install_popular_tags(); 
  245.  
  246.   echo '<p class="popular-tags">'; 
  247.   if ( is_wp_error($api_tags) ) { 
  248.       echo $api_tags->get_error_message(); 
  249.   } else { 
  250.       //Set up the tags in a way which can be interpreted by wp_generate_tag_cloud() 
  251.       $tags = array(); 
  252.       foreach ( (array) $api_tags as $tag ) { 
  253.           $url = self_admin_url( 'plugin-install.php?tab=search&type=tag&s=' . urlencode( $tag['name'] ) ); 
  254.           $data = array( 
  255.               'link' => esc_url( $url ),  
  256.               'name' => $tag['name'],  
  257.               'slug' => $tag['slug'],  
  258.               'id' => sanitize_title_with_dashes( $tag['name'] ),  
  259.               'count' => $tag['count'] 
  260.  ); 
  261.           $tags[ $tag['name'] ] = (object) $data; 
  262.       } 
  263.       echo wp_generate_tag_cloud($tags, array( 'single_text' => __('%s plugin'), 'multiple_text' => __('%s plugins') ) ); 
  264.   } 
  265.   echo '</p><br class="clear" /></div>'; 
  266. } 
  267.  
  268. /** 
  269.  * Displays a search form for searching plugins. 
  270.  * 
  271.  * @since 2.7.0 
  272.  * @since 4.6.0 The `$type_selector` parameter was deprecated. 
  273.  * 
  274.  * @param bool $deprecated Not used. 
  275.  */ 
  276. function install_search_form( $deprecated = true ) { 
  277.   $type = isset( $_REQUEST['type'] ) ? wp_unslash( $_REQUEST['type'] ) : 'term'; 
  278.   $term = isset( $_REQUEST['s'] ) ? wp_unslash( $_REQUEST['s'] ) : ''; 
  279.   ?><form class="search-form search-plugins" method="get"> 
  280.       <input type="hidden" name="tab" value="search" /> 
  281.       <label class="screen-reader-text" for="typeselector"><?php _e( 'Search plugins by:' ); ?></label> 
  282.       <select name="type" id="typeselector"> 
  283.           <option value="term"<?php selected( 'term', $type ); ?>><?php _e( 'Keyword' ); ?></option> 
  284.           <option value="author"<?php selected( 'author', $type ); ?>><?php _e( 'Author' ); ?></option> 
  285.           <option value="tag"<?php selected( 'tag', $type ); ?>><?php _ex( 'Tag', 'Plugin Installer' ); ?></option> 
  286.       </select> 
  287.       <label><span class="screen-reader-text"><?php _e( 'Search Plugins' ); ?></span> 
  288.           <input type="search" name="s" value="<?php echo esc_attr( $term ) ?>" class="wp-filter-search" placeholder="<?php esc_attr_e( 'Search plugins...' ); ?>" /> 
  289.       </label> 
  290.       <?php submit_button( __( 'Search Plugins' ), 'hide-if-js', false, false, array( 'id' => 'search-submit' ) ); ?> 
  291.   </form><?php 
  292. } 
  293.  
  294. /** 
  295.  * Upload from zip 
  296.  * @since 2.8.0 
  297.  */ 
  298. function install_plugins_upload() { 
  299. ?> 
  300. <div class="upload-plugin"> 
  301.   <p class="install-help"><?php _e('If you have a plugin in a .zip format, you may install it by uploading it here.'); ?></p> 
  302.   <form method="post" enctype="multipart/form-data" class="wp-upload-form" action="<?php echo self_admin_url('update.php?action=upload-plugin'); ?>"> 
  303.       <?php wp_nonce_field( 'plugin-upload' ); ?> 
  304.       <label class="screen-reader-text" for="pluginzip"><?php _e( 'Plugin zip file' ); ?></label> 
  305.       <input type="file" id="pluginzip" name="pluginzip" /> 
  306.       <?php submit_button( __( 'Install Now' ), '', 'install-plugin-submit', false ); ?> 
  307.   </form> 
  308. </div> 
  309. <?php 
  310. } 
  311.  
  312. /** 
  313.  * Show a username form for the favorites page 
  314.  * @since 3.5.0 
  315.  * 
  316.  */ 
  317. function install_plugins_favorites_form() { 
  318.   $user = get_user_option( 'wporg_favorites' ); 
  319.   $action = 'save_wporg_username_' . get_current_user_id(); 
  320.   ?> 
  321.   <p class="install-help"><?php _e( 'If you have marked plugins as favorites on WordPress.org, you can browse them here.' ); ?></p> 
  322.   <form method="get"> 
  323.       <input type="hidden" name="tab" value="favorites" /> 
  324.       <p> 
  325.           <label for="user"><?php _e( 'Your WordPress.org username:' ); ?></label> 
  326.           <input type="search" id="user" name="user" value="<?php echo esc_attr( $user ); ?>" /> 
  327.           <input type="submit" class="button" value="<?php esc_attr_e( 'Get Favorites' ); ?>" /> 
  328.           <input type="hidden" id="wporg-username-nonce" name="_wpnonce" value="<?php echo esc_attr( wp_create_nonce( $action ) ); ?>" /> 
  329.       </p> 
  330.   </form> 
  331.   <?php 
  332. } 
  333.  
  334. /** 
  335.  * Display plugin content based on plugin list. 
  336.  * 
  337.  * @since 2.7.0 
  338.  * 
  339.  * @global WP_List_Table $wp_list_table 
  340.  */ 
  341. function display_plugins_table() { 
  342.   global $wp_list_table; 
  343.  
  344.   switch ( current_filter() ) { 
  345.       case 'install_plugins_favorites' : 
  346.           if ( empty( $_GET['user'] ) && ! get_user_option( 'wporg_favorites' ) ) { 
  347.               return; 
  348.           } 
  349.           break; 
  350.       case 'install_plugins_recommended' : 
  351.           echo '<p>' . __( 'These suggestions are based on the plugins you and other users have installed.' ) . '</p>'; 
  352.           break; 
  353.       case 'install_plugins_beta' : 
  354.           printf( 
  355.               '<p>' . __( 'You are using a development version of WordPress. These feature plugins are also under development. <a href="%s">Learn more</a>.' ) . '</p>',  
  356.               'https://make.wordpress.org/core/handbook/about/release-cycle/features-as-plugins/' 
  357.  ); 
  358.           break; 
  359.   } 
  360.  
  361.   ?> 
  362.   <form id="plugin-filter" method="post"> 
  363.       <?php $wp_list_table->display(); ?> 
  364.   </form> 
  365.   <?php 
  366. } 
  367.  
  368. /** 
  369.  * Determine the status we can perform on a plugin. 
  370.  * 
  371.  * @since 3.0.0 
  372.  * 
  373.  * @param  array|object $api  Data about the plugin retrieved from the API. 
  374.  * @param  bool         $loop Optional. Disable further loops. Default false. 
  375.  * @return array { 
  376.  *     Plugin installation status data. 
  377.  * 
  378.  *     @type string $status  Status of a plugin. Could be one of 'install', 'update_available', 'latest_installed' or 'newer_installed'. 
  379.  *     @type string $url     Plugin installation URL. 
  380.  *     @type string $version The most recent version of the plugin. 
  381.  *     @type string $file    Plugin filename relative to the plugins directory. 
  382.  * } 
  383.  */ 
  384. function install_plugin_install_status($api, $loop = false) { 
  385.   // This function is called recursively, $loop prevents further loops. 
  386.   if ( is_array($api) ) 
  387.       $api = (object) $api; 
  388.  
  389.   // Default to a "new" plugin 
  390.   $status = 'install'; 
  391.   $url = false; 
  392.   $update_file = false; 
  393.  
  394.   /** 
  395.    * Check to see if this plugin is known to be installed,  
  396.    * and has an update awaiting it. 
  397.    */ 
  398.   $update_plugins = get_site_transient('update_plugins'); 
  399.   if ( isset( $update_plugins->response ) ) { 
  400.       foreach ( (array)$update_plugins->response as $file => $plugin ) { 
  401.           if ( $plugin->slug === $api->slug ) { 
  402.               $status = 'update_available'; 
  403.               $update_file = $file; 
  404.               $version = $plugin->new_version; 
  405.               if ( current_user_can('update_plugins') ) 
  406.                   $url = wp_nonce_url(self_admin_url('update.php?action=upgrade-plugin&plugin=' . $update_file), 'upgrade-plugin_' . $update_file); 
  407.               break; 
  408.           } 
  409.       } 
  410.   } 
  411.  
  412.   if ( 'install' == $status ) { 
  413.       if ( is_dir( WP_PLUGIN_DIR . '/' . $api->slug ) ) { 
  414.           $installed_plugin = get_plugins('/' . $api->slug); 
  415.           if ( empty($installed_plugin) ) { 
  416.               if ( current_user_can('install_plugins') ) 
  417.                   $url = wp_nonce_url(self_admin_url('update.php?action=install-plugin&plugin=' . $api->slug), 'install-plugin_' . $api->slug); 
  418.           } else { 
  419.               $key = array_keys( $installed_plugin ); 
  420.               $key = reset( $key ); //Use the first plugin regardless of the name, Could have issues for multiple-plugins in one directory if they share different version numbers 
  421.               $update_file = $api->slug . '/' . $key; 
  422.               if ( version_compare($api->version, $installed_plugin[ $key ]['Version'], '=') ) { 
  423.                   $status = 'latest_installed'; 
  424.               } elseif ( version_compare($api->version, $installed_plugin[ $key ]['Version'], '<') ) { 
  425.                   $status = 'newer_installed'; 
  426.                   $version = $installed_plugin[ $key ]['Version']; 
  427.               } else { 
  428.                   //If the above update check failed, Then that probably means that the update checker has out-of-date information, force a refresh 
  429.                   if ( ! $loop ) { 
  430.                       delete_site_transient('update_plugins'); 
  431.                       wp_update_plugins(); 
  432.                       return install_plugin_install_status($api, true); 
  433.                   } 
  434.               } 
  435.           } 
  436.       } else { 
  437.           // "install" & no directory with that slug 
  438.           if ( current_user_can('install_plugins') ) 
  439.               $url = wp_nonce_url(self_admin_url('update.php?action=install-plugin&plugin=' . $api->slug), 'install-plugin_' . $api->slug); 
  440.       } 
  441.   } 
  442.   if ( isset($_GET['from']) ) 
  443.       $url .= '&from=' . urlencode( wp_unslash( $_GET['from'] ) ); 
  444.  
  445.   $file = $update_file; 
  446.   return compact( 'status', 'url', 'version', 'file' ); 
  447. } 
  448.  
  449. /** 
  450.  * Display plugin information in dialog box form. 
  451.  * 
  452.  * @since 2.7.0 
  453.  * 
  454.  * @global string $tab 
  455.  */ 
  456. function install_plugin_information() { 
  457.   global $tab; 
  458.  
  459.   if ( empty( $_REQUEST['plugin'] ) ) { 
  460.       return; 
  461.   } 
  462.  
  463.   $api = plugins_api( 'plugin_information', array( 
  464.       'slug' => wp_unslash( $_REQUEST['plugin'] ),  
  465.       'is_ssl' => is_ssl(),  
  466.       'fields' => array( 
  467.           'banners' => true,  
  468.           'reviews' => true,  
  469.           'downloaded' => false,  
  470.           'active_installs' => true 
  471.  ) 
  472.  ) ); 
  473.  
  474.   if ( is_wp_error( $api ) ) { 
  475.       wp_die( $api ); 
  476.   } 
  477.  
  478.   $plugins_allowedtags = array( 
  479.       'a' => array( 'href' => array(), 'title' => array(), 'target' => array() ),  
  480.       'abbr' => array( 'title' => array() ), 'acronym' => array( 'title' => array() ),  
  481.       'code' => array(), 'pre' => array(), 'em' => array(), 'strong' => array(),  
  482.       'div' => array( 'class' => array() ), 'span' => array( 'class' => array() ),  
  483.       'p' => array(), 'ul' => array(), 'ol' => array(), 'li' => array(),  
  484.       'h1' => array(), 'h2' => array(), 'h3' => array(), 'h4' => array(), 'h5' => array(), 'h6' => array(),  
  485.       'img' => array( 'src' => array(), 'class' => array(), 'alt' => array() ) 
  486.  ); 
  487.  
  488.   $plugins_section_titles = array( 
  489.       'description' => _x( 'Description', 'Plugin installer section title' ),  
  490.       'installation' => _x( 'Installation', 'Plugin installer section title' ),  
  491.       'faq' => _x( 'FAQ', 'Plugin installer section title' ),  
  492.       'screenshots' => _x( 'Screenshots', 'Plugin installer section title' ),  
  493.       'changelog' => _x( 'Changelog', 'Plugin installer section title' ),  
  494.       'reviews' => _x( 'Reviews', 'Plugin installer section title' ),  
  495.       'other_notes' => _x( 'Other Notes', 'Plugin installer section title' ) 
  496.  ); 
  497.  
  498.   // Sanitize HTML 
  499.   foreach ( (array) $api->sections as $section_name => $content ) { 
  500.       $api->sections[$section_name] = wp_kses( $content, $plugins_allowedtags ); 
  501.   } 
  502.  
  503.   foreach ( array( 'version', 'author', 'requires', 'tested', 'homepage', 'downloaded', 'slug' ) as $key ) { 
  504.       if ( isset( $api->$key ) ) { 
  505.           $api->$key = wp_kses( $api->$key, $plugins_allowedtags ); 
  506.       } 
  507.   } 
  508.  
  509.   $_tab = esc_attr( $tab ); 
  510.  
  511.   $section = isset( $_REQUEST['section'] ) ? wp_unslash( $_REQUEST['section'] ) : 'description'; // Default to the Description tab, Do not translate, API returns English. 
  512.   if ( empty( $section ) || ! isset( $api->sections[ $section ] ) ) { 
  513.       $section_titles = array_keys( (array) $api->sections ); 
  514.       $section = reset( $section_titles ); 
  515.   } 
  516.  
  517.   iframe_header( __( 'Plugin Install' ) ); 
  518.  
  519.   $_with_banner = ''; 
  520.  
  521.   if ( ! empty( $api->banners ) && ( ! empty( $api->banners['low'] ) || ! empty( $api->banners['high'] ) ) ) { 
  522.       $_with_banner = 'with-banner'; 
  523.       $low = empty( $api->banners['low'] ) ? $api->banners['high'] : $api->banners['low']; 
  524.       $high = empty( $api->banners['high'] ) ? $api->banners['low'] : $api->banners['high']; 
  525.       ?> 
  526.       <style type="text/css"> 
  527.           #plugin-information-title.with-banner { 
  528.               background-image: url( <?php echo esc_url( $low ); ?> ); 
  529.           } 
  530.           @media only screen and ( -webkit-min-device-pixel-ratio: 1.5 ) { 
  531.               #plugin-information-title.with-banner { 
  532.                   background-image: url( <?php echo esc_url( $high ); ?> ); 
  533.               } 
  534.           } 
  535.       </style> 
  536.       <?php 
  537.   } 
  538.  
  539.   echo '<div id="plugin-information-scrollable">'; 
  540.   echo "<div id='{$_tab}-title' class='{$_with_banner}'><div class='vignette'></div><h2>{$api->name}</h2></div>"; 
  541.   echo "<div id='{$_tab}-tabs' class='{$_with_banner}'>\n"; 
  542.  
  543.   foreach ( (array) $api->sections as $section_name => $content ) { 
  544.       if ( 'reviews' === $section_name && ( empty( $api->ratings ) || 0 === array_sum( (array) $api->ratings ) ) ) { 
  545.           continue; 
  546.       } 
  547.  
  548.       if ( isset( $plugins_section_titles[ $section_name ] ) ) { 
  549.           $title = $plugins_section_titles[ $section_name ]; 
  550.       } else { 
  551.           $title = ucwords( str_replace( '_', ' ', $section_name ) ); 
  552.       } 
  553.  
  554.       $class = ( $section_name === $section ) ? ' class="current"' : ''; 
  555.       $href = add_query_arg( array('tab' => $tab, 'section' => $section_name) ); 
  556.       $href = esc_url( $href ); 
  557.       $san_section = esc_attr( $section_name ); 
  558.       echo "\t<a name='$san_section' href='$href' $class>$title</a>\n"; 
  559.   } 
  560.  
  561.   echo "</div>\n"; 
  562.  
  563.   ?> 
  564. <div id="<?php echo $_tab; ?>-content" class='<?php echo $_with_banner; ?>'> 
  565.   <div class="fyi"> 
  566.       <ul> 
  567.           <?php if ( ! empty( $api->version ) ) { ?> 
  568.               <li><strong><?php _e( 'Version:' ); ?></strong> <?php echo $api->version; ?></li> 
  569.           <?php } if ( ! empty( $api->author ) ) { ?> 
  570.               <li><strong><?php _e( 'Author:' ); ?></strong> <?php echo links_add_target( $api->author, '_blank' ); ?></li> 
  571.           <?php } if ( ! empty( $api->last_updated ) ) { ?> 
  572.               <li><strong><?php _e( 'Last Updated:' ); ?></strong> 
  573.                   <?php 
  574.                   /** translators: %s: Time since the last update */ 
  575.                   printf( __( '%s ago' ), human_time_diff( strtotime( $api->last_updated ) ) ); 
  576.                   ?> 
  577.               </li> 
  578.           <?php } if ( ! empty( $api->requires ) ) { ?> 
  579.               <li> 
  580.                   <strong><?php _e( 'Requires WordPress Version:' ); ?></strong> 
  581.                   <?php 
  582.                   /** translators: %s: WordPress version */ 
  583.                   printf( __( '%s or higher' ), $api->requires ); 
  584.                   ?> 
  585.               </li> 
  586.           <?php } if ( ! empty( $api->tested ) ) { ?> 
  587.               <li><strong><?php _e( 'Compatible up to:' ); ?></strong> <?php echo $api->tested; ?></li> 
  588.           <?php } if ( isset( $api->active_installs ) ) { ?> 
  589.               <li><strong><?php _e( 'Active Installs:' ); ?></strong> <?php 
  590.                   if ( $api->active_installs >= 1000000 ) { 
  591.                       _ex( '1+ Million', 'Active plugin installs' ); 
  592.                   } elseif ( 0 == $api->active_installs ) { 
  593.                       _ex( 'Less Than 10', 'Active plugin installs' ); 
  594.                   } else { 
  595.                       echo number_format_i18n( $api->active_installs ) . '+'; 
  596.                   } 
  597.                   ?></li> 
  598.           <?php } if ( ! empty( $api->slug ) && empty( $api->external ) ) { ?> 
  599.               <li><a target="_blank" href="<?php echo __( 'https://wordpress.org/plugins/' ) . $api->slug; ?>/"><?php _e( 'WordPress.org Plugin Page »' ); ?></a></li> 
  600.           <?php } if ( ! empty( $api->homepage ) ) { ?> 
  601.               <li><a target="_blank" href="<?php echo esc_url( $api->homepage ); ?>"><?php _e( 'Plugin Homepage »' ); ?></a></li> 
  602.           <?php } if ( ! empty( $api->donate_link ) && empty( $api->contributors ) ) { ?> 
  603.               <li><a target="_blank" href="<?php echo esc_url( $api->donate_link ); ?>"><?php _e( 'Donate to this plugin »' ); ?></a></li> 
  604.           <?php } ?> 
  605.       </ul> 
  606.       <?php if ( ! empty( $api->rating ) ) { ?> 
  607.           <h3><?php _e( 'Average Rating' ); ?></h3> 
  608.           <?php wp_star_rating( array( 'rating' => $api->rating, 'type' => 'percent', 'number' => $api->num_ratings ) ); ?> 
  609.           <p aria-hidden="true" class="fyi-description"><?php printf( _n( '(based on %s rating)', '(based on %s ratings)', $api->num_ratings ), number_format_i18n( $api->num_ratings ) ); ?></p> 
  610.       <?php } 
  611.  
  612.       if ( ! empty( $api->ratings ) && array_sum( (array) $api->ratings ) > 0 ) { ?> 
  613.           <h3><?php _e( 'Reviews' ); ?></h3> 
  614.           <p class="fyi-description"><?php _e( 'Read all reviews on WordPress.org or write your own!' ); ?></p> 
  615.           <?php 
  616.           foreach ( $api->ratings as $key => $ratecount ) { 
  617.               // Avoid div-by-zero. 
  618.               $_rating = $api->num_ratings ? ( $ratecount / $api->num_ratings ) : 0; 
  619.               /** translators: 1: number of stars (used to determine singular/plural), 2: number of reviews */ 
  620.               $aria_label = esc_attr( sprintf( _n( 'Reviews with %1$d star: %2$s. Opens in a new window.', 'Reviews with %1$d stars: %2$s. Opens in a new window.', $key ),  
  621.                   $key,  
  622.                   number_format_i18n( $ratecount ) 
  623.  ) ); 
  624.               ?> 
  625.               <div class="counter-container"> 
  626.                       <span class="counter-label"><a href="https://wordpress.org/support/view/plugin-reviews/<?php echo $api->slug; ?>?filter=<?php echo $key; ?>" 
  627.                                                      target="_blank" aria-label="<?php echo $aria_label; ?>"><?php printf( _n( '%d star', '%d stars', $key ), $key ); ?></a></span> 
  628.                       <span class="counter-back"> 
  629.                           <span class="counter-bar" style="width: <?php echo 92 * $_rating; ?>px;"></span> 
  630.                       </span> 
  631.                   <span class="counter-count" aria-hidden="true"><?php echo number_format_i18n( $ratecount ); ?></span> 
  632.               </div> 
  633.               <?php 
  634.           } 
  635.       } 
  636.       if ( ! empty( $api->contributors ) ) { ?> 
  637.           <h3><?php _e( 'Contributors' ); ?></h3> 
  638.           <ul class="contributors"> 
  639.               <?php 
  640.               foreach ( (array) $api->contributors as $contrib_username => $contrib_profile ) { 
  641.                   if ( empty( $contrib_username ) && empty( $contrib_profile ) ) { 
  642.                       continue; 
  643.                   } 
  644.                   if ( empty( $contrib_username ) ) { 
  645.                       $contrib_username = preg_replace( '/^.+\/(.+)\/?$/', '\1', $contrib_profile ); 
  646.                   } 
  647.                   $contrib_username = sanitize_user( $contrib_username ); 
  648.                   if ( empty( $contrib_profile ) ) { 
  649.                       echo "<li><img src='https://wordpress.org/grav-redirect.php?user={$contrib_username}&s=36' width='18' height='18' alt='' />{$contrib_username}</li>"; 
  650.                   } else { 
  651.                       echo "<li><a href='{$contrib_profile}' target='_blank'><img src='https://wordpress.org/grav-redirect.php?user={$contrib_username}&s=36' width='18' height='18' alt='' />{$contrib_username}</a></li>"; 
  652.                   } 
  653.               } 
  654.               ?> 
  655.           </ul> 
  656.           <?php if ( ! empty( $api->donate_link ) ) { ?> 
  657.               <a target="_blank" href="<?php echo esc_url( $api->donate_link ); ?>"><?php _e( 'Donate to this plugin »' ); ?></a> 
  658.           <?php } ?> 
  659.       <?php } ?> 
  660.   </div> 
  661.   <div id="section-holder" class="wrap"> 
  662.   <?php 
  663.   $wp_version = get_bloginfo( 'version' ); 
  664.  
  665.   if ( ! empty( $api->tested ) && version_compare( substr( $wp_version, 0, strlen( $api->tested ) ), $api->tested, '>' ) ) { 
  666.       echo '<div class="notice notice-warning notice-alt"><p>' . __( '<strong>Warning:</strong> This plugin has <strong>not been tested</strong> with your current version of WordPress.' ) . '</p></div>'; 
  667.   } elseif ( ! empty( $api->requires ) && version_compare( substr( $wp_version, 0, strlen( $api->requires ) ), $api->requires, '<' ) ) { 
  668.       echo '<div class="notice notice-warning notice-alt"><p>' . __( '<strong>Warning:</strong> This plugin has <strong>not been marked as compatible</strong> with your version of WordPress.' ) . '</p></div>'; 
  669.   } 
  670.  
  671.   foreach ( (array) $api->sections as $section_name => $content ) { 
  672.       $content = links_add_base_url( $content, 'https://wordpress.org/plugins/' . $api->slug . '/' ); 
  673.       $content = links_add_target( $content, '_blank' ); 
  674.  
  675.       $san_section = esc_attr( $section_name ); 
  676.  
  677.       $display = ( $section_name === $section ) ? 'block' : 'none'; 
  678.  
  679.       echo "\t<div id='section-{$san_section}' class='section' style='display: {$display};'>\n"; 
  680.       echo $content; 
  681.       echo "\t</div>\n"; 
  682.   } 
  683.   echo "</div>\n"; 
  684.   echo "</div>\n"; 
  685.   echo "</div>\n"; // #plugin-information-scrollable 
  686.   echo "<div id='$tab-footer'>\n"; 
  687.   if ( ! empty( $api->download_link ) && ( current_user_can( 'install_plugins' ) || current_user_can( 'update_plugins' ) ) ) { 
  688.       $status = install_plugin_install_status( $api ); 
  689.       switch ( $status['status'] ) { 
  690.           case 'install': 
  691.               if ( $status['url'] ) { 
  692.                   echo '<a data-slug="' . esc_attr( $api->slug ) . '" id="plugin_install_from_iframe" class="button button-primary right" href="' . $status['url'] . '" target="_parent">' . __( 'Install Now' ) . '</a>'; 
  693.               } 
  694.               break; 
  695.           case 'update_available': 
  696.               if ( $status['url'] ) { 
  697.                   echo '<a data-slug="' . esc_attr( $api->slug ) . '" data-plugin="' . esc_attr( $status['file'] ) . '" id="plugin_update_from_iframe" class="button button-primary right" href="' . $status['url'] . '" target="_parent">' . __( 'Install Update Now' ) .'</a>'; 
  698.               } 
  699.               break; 
  700.           case 'newer_installed': 
  701.               /** translators: %s: Plugin version */ 
  702.               echo '<a class="button button-primary right disabled">' . sprintf( __( 'Newer Version (%s) Installed'), $status['version'] ) . '</a>'; 
  703.               break; 
  704.           case 'latest_installed': 
  705.               echo '<a class="button button-primary right disabled">' . __( 'Latest Version Installed' ) . '</a>'; 
  706.               break; 
  707.       } 
  708.   } 
  709.   echo "</div>\n"; 
  710.  
  711.   iframe_footer(); 
  712.   exit; 
  713. } 
.