plugin.php 88 KB

12345678910111213141516171819202122232425262728293031323334353637383940414243444546474849505152535455565758596061626364656667686970717273747576777879808182838485868788899091929394959697989910010110210310410510610710810911011111211311411511611711811912012112212312412512612712812913013113213313413513613713813914014114214314414514614714814915015115215315415515615715815916016116216316416516616716816917017117217317417517617717817918018118218318418518618718818919019119219319419519619719819920020120220320420520620720820921021121221321421521621721821922022122222322422522622722822923023123223323423523623723823924024124224324424524624724824925025125225325425525625725825926026126226326426526626726826927027127227327427527627727827928028128228328428528628728828929029129229329429529629729829930030130230330430530630730830931031131231331431531631731831932032132232332432532632732832933033133233333433533633733833934034134234334434534634734834935035135235335435535635735835936036136236336436536636736836937037137237337437537637737837938038138238338438538638738838939039139239339439539639739839940040140240340440540640740840941041141241341441541641741841942042142242342442542642742842943043143243343443543643743843944044144244344444544644744844945045145245345445545645745845946046146246346446546646746846947047147247347447547647747847948048148248348448548648748848949049149249349449549649749849950050150250350450550650750850951051151251351451551651751851952052152252352452552652752852953053153253353453553653753853954054154254354454554654754854955055155255355455555655755855956056156256356456556656756856957057157257357457557657757857958058158258358458558658758858959059159259359459559659759859960060160260360460560660760860961061161261361461561661761861962062162262362462562662762862963063163263363463563663763863964064164264364464564664764864965065165265365465565665765865966066166266366466566666766866967067167267367467567667767867968068168268368468568668768868969069169269369469569669769869970070170270370470570670770870971071171271371471571671771871972072172272372472572672772872973073173273373473573673773873974074174274374474574674774874975075175275375475575675775875976076176276376476576676776876977077177277377477577677777877978078178278378478578678778878979079179279379479579679779879980080180280380480580680780880981081181281381481581681781881982082182282382482582682782882983083183283383483583683783883984084184284384484584684784884985085185285385485585685785885986086186286386486586686786886987087187287387487587687787887988088188288388488588688788888989089189289389489589689789889990090190290390490590690790890991091191291391491591691791891992092192292392492592692792892993093193293393493593693793893994094194294394494594694794894995095195295395495595695795895996096196296396496596696796896997097197297397497597697797897998098198298398498598698798898999099199299399499599699799899910001001100210031004100510061007100810091010101110121013101410151016101710181019102010211022102310241025102610271028102910301031103210331034103510361037103810391040104110421043104410451046104710481049105010511052105310541055105610571058105910601061106210631064106510661067106810691070107110721073107410751076107710781079108010811082108310841085108610871088108910901091109210931094109510961097109810991100110111021103110411051106110711081109111011111112111311141115111611171118111911201121112211231124112511261127112811291130113111321133113411351136113711381139114011411142114311441145114611471148114911501151115211531154115511561157115811591160116111621163116411651166116711681169117011711172117311741175117611771178117911801181118211831184118511861187118811891190119111921193119411951196119711981199120012011202120312041205120612071208120912101211121212131214121512161217121812191220122112221223122412251226122712281229123012311232123312341235123612371238123912401241124212431244124512461247124812491250125112521253125412551256125712581259126012611262126312641265126612671268126912701271127212731274127512761277127812791280128112821283128412851286128712881289129012911292129312941295129612971298129913001301130213031304130513061307130813091310131113121313131413151316131713181319132013211322132313241325132613271328132913301331133213331334133513361337133813391340134113421343134413451346134713481349135013511352135313541355135613571358135913601361136213631364136513661367136813691370137113721373137413751376137713781379138013811382138313841385138613871388138913901391139213931394139513961397139813991400140114021403140414051406140714081409141014111412141314141415141614171418141914201421142214231424142514261427142814291430143114321433143414351436143714381439144014411442144314441445144614471448144914501451145214531454145514561457145814591460146114621463146414651466146714681469147014711472147314741475147614771478147914801481148214831484148514861487148814891490149114921493149414951496149714981499150015011502150315041505150615071508150915101511151215131514151515161517151815191520152115221523152415251526152715281529153015311532153315341535153615371538153915401541154215431544154515461547154815491550155115521553155415551556155715581559156015611562156315641565156615671568156915701571157215731574157515761577157815791580158115821583158415851586158715881589159015911592159315941595159615971598159916001601160216031604160516061607160816091610161116121613161416151616161716181619162016211622162316241625162616271628162916301631163216331634163516361637163816391640164116421643164416451646164716481649165016511652165316541655165616571658165916601661166216631664166516661667166816691670167116721673167416751676167716781679168016811682168316841685168616871688168916901691169216931694169516961697169816991700170117021703170417051706170717081709171017111712171317141715171617171718171917201721172217231724172517261727172817291730173117321733173417351736173717381739174017411742174317441745174617471748174917501751175217531754175517561757175817591760176117621763176417651766176717681769177017711772177317741775177617771778177917801781178217831784178517861787178817891790179117921793179417951796179717981799180018011802180318041805180618071808180918101811181218131814181518161817181818191820182118221823182418251826182718281829183018311832183318341835183618371838183918401841184218431844184518461847184818491850185118521853185418551856185718581859186018611862186318641865186618671868186918701871187218731874187518761877187818791880188118821883188418851886188718881889189018911892189318941895189618971898189919001901190219031904190519061907190819091910191119121913191419151916191719181919192019211922192319241925192619271928192919301931193219331934193519361937193819391940194119421943194419451946194719481949195019511952195319541955195619571958195919601961196219631964196519661967196819691970197119721973197419751976197719781979198019811982198319841985198619871988198919901991199219931994199519961997199819992000200120022003200420052006200720082009201020112012201320142015201620172018201920202021202220232024202520262027202820292030203120322033203420352036203720382039204020412042204320442045204620472048204920502051205220532054205520562057205820592060206120622063206420652066206720682069207020712072207320742075207620772078207920802081208220832084208520862087208820892090209120922093209420952096209720982099210021012102210321042105210621072108210921102111211221132114211521162117211821192120212121222123212421252126212721282129213021312132213321342135213621372138213921402141214221432144214521462147214821492150215121522153215421552156215721582159216021612162216321642165216621672168216921702171217221732174217521762177217821792180218121822183218421852186218721882189219021912192219321942195219621972198219922002201220222032204220522062207220822092210221122122213221422152216221722182219222022212222222322242225222622272228222922302231223222332234223522362237223822392240224122422243224422452246224722482249225022512252225322542255225622572258225922602261226222632264226522662267226822692270227122722273227422752276227722782279228022812282228322842285228622872288228922902291229222932294229522962297229822992300230123022303230423052306230723082309231023112312231323142315231623172318231923202321232223232324232523262327232823292330233123322333233423352336233723382339234023412342234323442345234623472348234923502351235223532354235523562357235823592360236123622363236423652366236723682369237023712372237323742375237623772378237923802381238223832384238523862387238823892390239123922393239423952396239723982399240024012402240324042405240624072408240924102411241224132414241524162417241824192420242124222423242424252426242724282429243024312432243324342435243624372438243924402441244224432444244524462447244824492450245124522453245424552456245724582459246024612462246324642465246624672468246924702471247224732474247524762477247824792480248124822483248424852486248724882489249024912492249324942495249624972498249925002501250225032504250525062507250825092510251125122513251425152516251725182519252025212522252325242525252625272528252925302531253225332534253525362537253825392540254125422543254425452546254725482549255025512552255325542555255625572558255925602561256225632564256525662567256825692570257125722573257425752576257725782579258025812582258325842585258625872588
  1. <?php
  2. /**
  3. * WordPress Plugin Administration API
  4. *
  5. * @package WordPress
  6. * @subpackage Administration
  7. */
  8. /**
  9. * Parses the plugin contents to retrieve plugin's metadata.
  10. *
  11. * All plugin headers must be on their own line. Plugin description must not have
  12. * any newlines, otherwise only parts of the description will be displayed.
  13. * The below is formatted for printing.
  14. *
  15. * /*
  16. * Plugin Name: Name of the plugin.
  17. * Plugin URI: The home page of the plugin.
  18. * Description: Plugin description.
  19. * Author: Plugin author's name.
  20. * Author URI: Link to the author's website.
  21. * Version: Plugin version.
  22. * Text Domain: Optional. Unique identifier, should be same as the one used in
  23. * load_plugin_textdomain().
  24. * Domain Path: Optional. Only useful if the translations are located in a
  25. * folder above the plugin's base path. For example, if .mo files are
  26. * located in the locale folder then Domain Path will be "/locale/" and
  27. * must have the first slash. Defaults to the base folder the plugin is
  28. * located in.
  29. * Network: Optional. Specify "Network: true" to require that a plugin is activated
  30. * across all sites in an installation. This will prevent a plugin from being
  31. * activated on a single site when Multisite is enabled.
  32. * Requires at least: Optional. Specify the minimum required WordPress version.
  33. * Requires PHP: Optional. Specify the minimum required PHP version.
  34. * * / # Remove the space to close comment.
  35. *
  36. * The first 8 KB of the file will be pulled in and if the plugin data is not
  37. * within that first 8 KB, then the plugin author should correct their plugin
  38. * and move the plugin data headers to the top.
  39. *
  40. * The plugin file is assumed to have permissions to allow for scripts to read
  41. * the file. This is not checked however and the file is only opened for
  42. * reading.
  43. *
  44. * @since 1.5.0
  45. * @since 5.3.0 Added support for `Requires at least` and `Requires PHP` headers.
  46. * @since 5.8.0 Added support for `Update URI` header.
  47. *
  48. * @param string $plugin_file Absolute path to the main plugin file.
  49. * @param bool $markup Optional. If the returned data should have HTML markup applied.
  50. * Default true.
  51. * @param bool $translate Optional. If the returned data should be translated. Default true.
  52. * @return array {
  53. * Plugin data. Values will be empty if not supplied by the plugin.
  54. *
  55. * @type string $Name Name of the plugin. Should be unique.
  56. * @type string $PluginURI Plugin URI.
  57. * @type string $Version Plugin version.
  58. * @type string $Description Plugin description.
  59. * @type string $Author Plugin author's name.
  60. * @type string $AuthorURI Plugin author's website address (if set).
  61. * @type string $TextDomain Plugin textdomain.
  62. * @type string $DomainPath Plugin's relative directory path to .mo files.
  63. * @type bool $Network Whether the plugin can only be activated network-wide.
  64. * @type string $RequiresWP Minimum required version of WordPress.
  65. * @type string $RequiresPHP Minimum required version of PHP.
  66. * @type string $UpdateURI ID of the plugin for update purposes, should be a URI.
  67. * @type string $Title Title of the plugin and link to the plugin's site (if set).
  68. * @type string $AuthorName Plugin author's name.
  69. * }
  70. */
  71. function get_plugin_data( $plugin_file, $markup = true, $translate = true ) {
  72. $default_headers = array(
  73. 'Name' => 'Plugin Name',
  74. 'PluginURI' => 'Plugin URI',
  75. 'Version' => 'Version',
  76. 'Description' => 'Description',
  77. 'Author' => 'Author',
  78. 'AuthorURI' => 'Author URI',
  79. 'TextDomain' => 'Text Domain',
  80. 'DomainPath' => 'Domain Path',
  81. 'Network' => 'Network',
  82. 'RequiresWP' => 'Requires at least',
  83. 'RequiresPHP' => 'Requires PHP',
  84. 'UpdateURI' => 'Update URI',
  85. // Site Wide Only is deprecated in favor of Network.
  86. '_sitewide' => 'Site Wide Only',
  87. );
  88. $plugin_data = get_file_data( $plugin_file, $default_headers, 'plugin' );
  89. // Site Wide Only is the old header for Network.
  90. if ( ! $plugin_data['Network'] && $plugin_data['_sitewide'] ) {
  91. /* translators: 1: Site Wide Only: true, 2: Network: true */
  92. _deprecated_argument( __FUNCTION__, '3.0.0', sprintf( __( 'The %1$s plugin header is deprecated. Use %2$s instead.' ), '<code>Site Wide Only: true</code>', '<code>Network: true</code>' ) );
  93. $plugin_data['Network'] = $plugin_data['_sitewide'];
  94. }
  95. $plugin_data['Network'] = ( 'true' === strtolower( $plugin_data['Network'] ) );
  96. unset( $plugin_data['_sitewide'] );
  97. // If no text domain is defined fall back to the plugin slug.
  98. if ( ! $plugin_data['TextDomain'] ) {
  99. $plugin_slug = dirname( plugin_basename( $plugin_file ) );
  100. if ( '.' !== $plugin_slug && false === strpos( $plugin_slug, '/' ) ) {
  101. $plugin_data['TextDomain'] = $plugin_slug;
  102. }
  103. }
  104. if ( $markup || $translate ) {
  105. $plugin_data = _get_plugin_data_markup_translate( $plugin_file, $plugin_data, $markup, $translate );
  106. } else {
  107. $plugin_data['Title'] = $plugin_data['Name'];
  108. $plugin_data['AuthorName'] = $plugin_data['Author'];
  109. }
  110. return $plugin_data;
  111. }
  112. /**
  113. * Sanitizes plugin data, optionally adds markup, optionally translates.
  114. *
  115. * @since 2.7.0
  116. *
  117. * @see get_plugin_data()
  118. *
  119. * @access private
  120. *
  121. * @param string $plugin_file Path to the main plugin file.
  122. * @param array $plugin_data An array of plugin data. See get_plugin_data().
  123. * @param bool $markup Optional. If the returned data should have HTML markup applied.
  124. * Default true.
  125. * @param bool $translate Optional. If the returned data should be translated. Default true.
  126. * @return array Plugin data. Values will be empty if not supplied by the plugin.
  127. * See get_plugin_data() for the list of possible values.
  128. */
  129. function _get_plugin_data_markup_translate( $plugin_file, $plugin_data, $markup = true, $translate = true ) {
  130. // Sanitize the plugin filename to a WP_PLUGIN_DIR relative path.
  131. $plugin_file = plugin_basename( $plugin_file );
  132. // Translate fields.
  133. if ( $translate ) {
  134. $textdomain = $plugin_data['TextDomain'];
  135. if ( $textdomain ) {
  136. if ( ! is_textdomain_loaded( $textdomain ) ) {
  137. if ( $plugin_data['DomainPath'] ) {
  138. load_plugin_textdomain( $textdomain, false, dirname( $plugin_file ) . $plugin_data['DomainPath'] );
  139. } else {
  140. load_plugin_textdomain( $textdomain, false, dirname( $plugin_file ) );
  141. }
  142. }
  143. } elseif ( 'hello.php' === basename( $plugin_file ) ) {
  144. $textdomain = 'default';
  145. }
  146. if ( $textdomain ) {
  147. foreach ( array( 'Name', 'PluginURI', 'Description', 'Author', 'AuthorURI', 'Version' ) as $field ) {
  148. if ( ! empty( $plugin_data[ $field ] ) ) {
  149. // phpcs:ignore WordPress.WP.I18n.LowLevelTranslationFunction,WordPress.WP.I18n.NonSingularStringLiteralText,WordPress.WP.I18n.NonSingularStringLiteralDomain
  150. $plugin_data[ $field ] = translate( $plugin_data[ $field ], $textdomain );
  151. }
  152. }
  153. }
  154. }
  155. // Sanitize fields.
  156. $allowed_tags_in_links = array(
  157. 'abbr' => array( 'title' => true ),
  158. 'acronym' => array( 'title' => true ),
  159. 'code' => true,
  160. 'em' => true,
  161. 'strong' => true,
  162. );
  163. $allowed_tags = $allowed_tags_in_links;
  164. $allowed_tags['a'] = array(
  165. 'href' => true,
  166. 'title' => true,
  167. );
  168. // Name is marked up inside <a> tags. Don't allow these.
  169. // Author is too, but some plugins have used <a> here (omitting Author URI).
  170. $plugin_data['Name'] = wp_kses( $plugin_data['Name'], $allowed_tags_in_links );
  171. $plugin_data['Author'] = wp_kses( $plugin_data['Author'], $allowed_tags );
  172. $plugin_data['Description'] = wp_kses( $plugin_data['Description'], $allowed_tags );
  173. $plugin_data['Version'] = wp_kses( $plugin_data['Version'], $allowed_tags );
  174. $plugin_data['PluginURI'] = esc_url( $plugin_data['PluginURI'] );
  175. $plugin_data['AuthorURI'] = esc_url( $plugin_data['AuthorURI'] );
  176. $plugin_data['Title'] = $plugin_data['Name'];
  177. $plugin_data['AuthorName'] = $plugin_data['Author'];
  178. // Apply markup.
  179. if ( $markup ) {
  180. if ( $plugin_data['PluginURI'] && $plugin_data['Name'] ) {
  181. $plugin_data['Title'] = '<a href="' . $plugin_data['PluginURI'] . '">' . $plugin_data['Name'] . '</a>';
  182. }
  183. if ( $plugin_data['AuthorURI'] && $plugin_data['Author'] ) {
  184. $plugin_data['Author'] = '<a href="' . $plugin_data['AuthorURI'] . '">' . $plugin_data['Author'] . '</a>';
  185. }
  186. $plugin_data['Description'] = wptexturize( $plugin_data['Description'] );
  187. if ( $plugin_data['Author'] ) {
  188. $plugin_data['Description'] .= sprintf(
  189. /* translators: %s: Plugin author. */
  190. ' <cite>' . __( 'By %s.' ) . '</cite>',
  191. $plugin_data['Author']
  192. );
  193. }
  194. }
  195. return $plugin_data;
  196. }
  197. /**
  198. * Gets a list of a plugin's files.
  199. *
  200. * @since 2.8.0
  201. *
  202. * @param string $plugin Path to the plugin file relative to the plugins directory.
  203. * @return string[] Array of file names relative to the plugin root.
  204. */
  205. function get_plugin_files( $plugin ) {
  206. $plugin_file = WP_PLUGIN_DIR . '/' . $plugin;
  207. $dir = dirname( $plugin_file );
  208. $plugin_files = array( plugin_basename( $plugin_file ) );
  209. if ( is_dir( $dir ) && WP_PLUGIN_DIR !== $dir ) {
  210. /**
  211. * Filters the array of excluded directories and files while scanning the folder.
  212. *
  213. * @since 4.9.0
  214. *
  215. * @param string[] $exclusions Array of excluded directories and files.
  216. */
  217. $exclusions = (array) apply_filters( 'plugin_files_exclusions', array( 'CVS', 'node_modules', 'vendor', 'bower_components' ) );
  218. $list_files = list_files( $dir, 100, $exclusions );
  219. $list_files = array_map( 'plugin_basename', $list_files );
  220. $plugin_files = array_merge( $plugin_files, $list_files );
  221. $plugin_files = array_values( array_unique( $plugin_files ) );
  222. }
  223. return $plugin_files;
  224. }
  225. /**
  226. * Checks the plugins directory and retrieve all plugin files with plugin data.
  227. *
  228. * WordPress only supports plugin files in the base plugins directory
  229. * (wp-content/plugins) and in one directory above the plugins directory
  230. * (wp-content/plugins/my-plugin). The file it looks for has the plugin data
  231. * and must be found in those two locations. It is recommended to keep your
  232. * plugin files in their own directories.
  233. *
  234. * The file with the plugin data is the file that will be included and therefore
  235. * needs to have the main execution for the plugin. This does not mean
  236. * everything must be contained in the file and it is recommended that the file
  237. * be split for maintainability. Keep everything in one file for extreme
  238. * optimization purposes.
  239. *
  240. * @since 1.5.0
  241. *
  242. * @param string $plugin_folder Optional. Relative path to single plugin folder.
  243. * @return array[] Array of arrays of plugin data, keyed by plugin file name. See get_plugin_data().
  244. */
  245. function get_plugins( $plugin_folder = '' ) {
  246. $cache_plugins = wp_cache_get( 'plugins', 'plugins' );
  247. if ( ! $cache_plugins ) {
  248. $cache_plugins = array();
  249. }
  250. if ( isset( $cache_plugins[ $plugin_folder ] ) ) {
  251. return $cache_plugins[ $plugin_folder ];
  252. }
  253. $wp_plugins = array();
  254. $plugin_root = WP_PLUGIN_DIR;
  255. if ( ! empty( $plugin_folder ) ) {
  256. $plugin_root .= $plugin_folder;
  257. }
  258. // Files in wp-content/plugins directory.
  259. $plugins_dir = @opendir( $plugin_root );
  260. $plugin_files = array();
  261. if ( $plugins_dir ) {
  262. while ( ( $file = readdir( $plugins_dir ) ) !== false ) {
  263. if ( '.' === substr( $file, 0, 1 ) ) {
  264. continue;
  265. }
  266. if ( is_dir( $plugin_root . '/' . $file ) ) {
  267. $plugins_subdir = @opendir( $plugin_root . '/' . $file );
  268. if ( $plugins_subdir ) {
  269. while ( ( $subfile = readdir( $plugins_subdir ) ) !== false ) {
  270. if ( '.' === substr( $subfile, 0, 1 ) ) {
  271. continue;
  272. }
  273. if ( '.php' === substr( $subfile, -4 ) ) {
  274. $plugin_files[] = "$file/$subfile";
  275. }
  276. }
  277. closedir( $plugins_subdir );
  278. }
  279. } else {
  280. if ( '.php' === substr( $file, -4 ) ) {
  281. $plugin_files[] = $file;
  282. }
  283. }
  284. }
  285. closedir( $plugins_dir );
  286. }
  287. if ( empty( $plugin_files ) ) {
  288. return $wp_plugins;
  289. }
  290. foreach ( $plugin_files as $plugin_file ) {
  291. if ( ! is_readable( "$plugin_root/$plugin_file" ) ) {
  292. continue;
  293. }
  294. // Do not apply markup/translate as it will be cached.
  295. $plugin_data = get_plugin_data( "$plugin_root/$plugin_file", false, false );
  296. if ( empty( $plugin_data['Name'] ) ) {
  297. continue;
  298. }
  299. $wp_plugins[ plugin_basename( $plugin_file ) ] = $plugin_data;
  300. }
  301. uasort( $wp_plugins, '_sort_uname_callback' );
  302. $cache_plugins[ $plugin_folder ] = $wp_plugins;
  303. wp_cache_set( 'plugins', $cache_plugins, 'plugins' );
  304. return $wp_plugins;
  305. }
  306. /**
  307. * Checks the mu-plugins directory and retrieve all mu-plugin files with any plugin data.
  308. *
  309. * WordPress only includes mu-plugin files in the base mu-plugins directory (wp-content/mu-plugins).
  310. *
  311. * @since 3.0.0
  312. * @return array[] Array of arrays of mu-plugin data, keyed by plugin file name. See get_plugin_data().
  313. */
  314. function get_mu_plugins() {
  315. $wp_plugins = array();
  316. $plugin_files = array();
  317. if ( ! is_dir( WPMU_PLUGIN_DIR ) ) {
  318. return $wp_plugins;
  319. }
  320. // Files in wp-content/mu-plugins directory.
  321. $plugins_dir = @opendir( WPMU_PLUGIN_DIR );
  322. if ( $plugins_dir ) {
  323. while ( ( $file = readdir( $plugins_dir ) ) !== false ) {
  324. if ( '.php' === substr( $file, -4 ) ) {
  325. $plugin_files[] = $file;
  326. }
  327. }
  328. } else {
  329. return $wp_plugins;
  330. }
  331. closedir( $plugins_dir );
  332. if ( empty( $plugin_files ) ) {
  333. return $wp_plugins;
  334. }
  335. foreach ( $plugin_files as $plugin_file ) {
  336. if ( ! is_readable( WPMU_PLUGIN_DIR . "/$plugin_file" ) ) {
  337. continue;
  338. }
  339. // Do not apply markup/translate as it will be cached.
  340. $plugin_data = get_plugin_data( WPMU_PLUGIN_DIR . "/$plugin_file", false, false );
  341. if ( empty( $plugin_data['Name'] ) ) {
  342. $plugin_data['Name'] = $plugin_file;
  343. }
  344. $wp_plugins[ $plugin_file ] = $plugin_data;
  345. }
  346. if ( isset( $wp_plugins['index.php'] ) && filesize( WPMU_PLUGIN_DIR . '/index.php' ) <= 30 ) {
  347. // Silence is golden.
  348. unset( $wp_plugins['index.php'] );
  349. }
  350. uasort( $wp_plugins, '_sort_uname_callback' );
  351. return $wp_plugins;
  352. }
  353. /**
  354. * Declares a callback to sort array by a 'Name' key.
  355. *
  356. * @since 3.1.0
  357. *
  358. * @access private
  359. *
  360. * @param array $a array with 'Name' key.
  361. * @param array $b array with 'Name' key.
  362. * @return int Return 0 or 1 based on two string comparison.
  363. */
  364. function _sort_uname_callback( $a, $b ) {
  365. return strnatcasecmp( $a['Name'], $b['Name'] );
  366. }
  367. /**
  368. * Checks the wp-content directory and retrieve all drop-ins with any plugin data.
  369. *
  370. * @since 3.0.0
  371. * @return array[] Array of arrays of dropin plugin data, keyed by plugin file name. See get_plugin_data().
  372. */
  373. function get_dropins() {
  374. $dropins = array();
  375. $plugin_files = array();
  376. $_dropins = _get_dropins();
  377. // Files in wp-content directory.
  378. $plugins_dir = @opendir( WP_CONTENT_DIR );
  379. if ( $plugins_dir ) {
  380. while ( ( $file = readdir( $plugins_dir ) ) !== false ) {
  381. if ( isset( $_dropins[ $file ] ) ) {
  382. $plugin_files[] = $file;
  383. }
  384. }
  385. } else {
  386. return $dropins;
  387. }
  388. closedir( $plugins_dir );
  389. if ( empty( $plugin_files ) ) {
  390. return $dropins;
  391. }
  392. foreach ( $plugin_files as $plugin_file ) {
  393. if ( ! is_readable( WP_CONTENT_DIR . "/$plugin_file" ) ) {
  394. continue;
  395. }
  396. // Do not apply markup/translate as it will be cached.
  397. $plugin_data = get_plugin_data( WP_CONTENT_DIR . "/$plugin_file", false, false );
  398. if ( empty( $plugin_data['Name'] ) ) {
  399. $plugin_data['Name'] = $plugin_file;
  400. }
  401. $dropins[ $plugin_file ] = $plugin_data;
  402. }
  403. uksort( $dropins, 'strnatcasecmp' );
  404. return $dropins;
  405. }
  406. /**
  407. * Returns drop-ins that WordPress uses.
  408. *
  409. * Includes Multisite drop-ins only when is_multisite()
  410. *
  411. * @since 3.0.0
  412. * @return array[] Key is file name. The value is an array, with the first value the
  413. * purpose of the drop-in and the second value the name of the constant that must be
  414. * true for the drop-in to be used, or true if no constant is required.
  415. */
  416. function _get_dropins() {
  417. $dropins = array(
  418. 'advanced-cache.php' => array( __( 'Advanced caching plugin.' ), 'WP_CACHE' ), // WP_CACHE
  419. 'db.php' => array( __( 'Custom database class.' ), true ), // Auto on load.
  420. 'db-error.php' => array( __( 'Custom database error message.' ), true ), // Auto on error.
  421. 'install.php' => array( __( 'Custom installation script.' ), true ), // Auto on installation.
  422. 'maintenance.php' => array( __( 'Custom maintenance message.' ), true ), // Auto on maintenance.
  423. 'object-cache.php' => array( __( 'External object cache.' ), true ), // Auto on load.
  424. 'php-error.php' => array( __( 'Custom PHP error message.' ), true ), // Auto on error.
  425. 'fatal-error-handler.php' => array( __( 'Custom PHP fatal error handler.' ), true ), // Auto on error.
  426. );
  427. if ( is_multisite() ) {
  428. $dropins['sunrise.php'] = array( __( 'Executed before Multisite is loaded.' ), 'SUNRISE' ); // SUNRISE
  429. $dropins['blog-deleted.php'] = array( __( 'Custom site deleted message.' ), true ); // Auto on deleted blog.
  430. $dropins['blog-inactive.php'] = array( __( 'Custom site inactive message.' ), true ); // Auto on inactive blog.
  431. $dropins['blog-suspended.php'] = array( __( 'Custom site suspended message.' ), true ); // Auto on archived or spammed blog.
  432. }
  433. return $dropins;
  434. }
  435. /**
  436. * Determines whether a plugin is active.
  437. *
  438. * Only plugins installed in the plugins/ folder can be active.
  439. *
  440. * Plugins in the mu-plugins/ folder can't be "activated," so this function will
  441. * return false for those plugins.
  442. *
  443. * For more information on this and similar theme functions, check out
  444. * the {@link https://developer.wordpress.org/themes/basics/conditional-tags/
  445. * Conditional Tags} article in the Theme Developer Handbook.
  446. *
  447. * @since 2.5.0
  448. *
  449. * @param string $plugin Path to the plugin file relative to the plugins directory.
  450. * @return bool True, if in the active plugins list. False, not in the list.
  451. */
  452. function is_plugin_active( $plugin ) {
  453. return in_array( $plugin, (array) get_option( 'active_plugins', array() ), true ) || is_plugin_active_for_network( $plugin );
  454. }
  455. /**
  456. * Determines whether the plugin is inactive.
  457. *
  458. * Reverse of is_plugin_active(). Used as a callback.
  459. *
  460. * For more information on this and similar theme functions, check out
  461. * the {@link https://developer.wordpress.org/themes/basics/conditional-tags/
  462. * Conditional Tags} article in the Theme Developer Handbook.
  463. *
  464. * @since 3.1.0
  465. *
  466. * @see is_plugin_active()
  467. *
  468. * @param string $plugin Path to the plugin file relative to the plugins directory.
  469. * @return bool True if inactive. False if active.
  470. */
  471. function is_plugin_inactive( $plugin ) {
  472. return ! is_plugin_active( $plugin );
  473. }
  474. /**
  475. * Determines whether the plugin is active for the entire network.
  476. *
  477. * Only plugins installed in the plugins/ folder can be active.
  478. *
  479. * Plugins in the mu-plugins/ folder can't be "activated," so this function will
  480. * return false for those plugins.
  481. *
  482. * For more information on this and similar theme functions, check out
  483. * the {@link https://developer.wordpress.org/themes/basics/conditional-tags/
  484. * Conditional Tags} article in the Theme Developer Handbook.
  485. *
  486. * @since 3.0.0
  487. *
  488. * @param string $plugin Path to the plugin file relative to the plugins directory.
  489. * @return bool True if active for the network, otherwise false.
  490. */
  491. function is_plugin_active_for_network( $plugin ) {
  492. if ( ! is_multisite() ) {
  493. return false;
  494. }
  495. $plugins = get_site_option( 'active_sitewide_plugins' );
  496. if ( isset( $plugins[ $plugin ] ) ) {
  497. return true;
  498. }
  499. return false;
  500. }
  501. /**
  502. * Checks for "Network: true" in the plugin header to see if this should
  503. * be activated only as a network wide plugin. The plugin would also work
  504. * when Multisite is not enabled.
  505. *
  506. * Checks for "Site Wide Only: true" for backward compatibility.
  507. *
  508. * @since 3.0.0
  509. *
  510. * @param string $plugin Path to the plugin file relative to the plugins directory.
  511. * @return bool True if plugin is network only, false otherwise.
  512. */
  513. function is_network_only_plugin( $plugin ) {
  514. $plugin_data = get_plugin_data( WP_PLUGIN_DIR . '/' . $plugin );
  515. if ( $plugin_data ) {
  516. return $plugin_data['Network'];
  517. }
  518. return false;
  519. }
  520. /**
  521. * Attempts activation of plugin in a "sandbox" and redirects on success.
  522. *
  523. * A plugin that is already activated will not attempt to be activated again.
  524. *
  525. * The way it works is by setting the redirection to the error before trying to
  526. * include the plugin file. If the plugin fails, then the redirection will not
  527. * be overwritten with the success message. Also, the options will not be
  528. * updated and the activation hook will not be called on plugin error.
  529. *
  530. * It should be noted that in no way the below code will actually prevent errors
  531. * within the file. The code should not be used elsewhere to replicate the
  532. * "sandbox", which uses redirection to work.
  533. * {@source 13 1}
  534. *
  535. * If any errors are found or text is outputted, then it will be captured to
  536. * ensure that the success redirection will update the error redirection.
  537. *
  538. * @since 2.5.0
  539. * @since 5.2.0 Test for WordPress version and PHP version compatibility.
  540. *
  541. * @param string $plugin Path to the plugin file relative to the plugins directory.
  542. * @param string $redirect Optional. URL to redirect to.
  543. * @param bool $network_wide Optional. Whether to enable the plugin for all sites in the network
  544. * or just the current site. Multisite only. Default false.
  545. * @param bool $silent Optional. Whether to prevent calling activation hooks. Default false.
  546. * @return null|WP_Error Null on success, WP_Error on invalid file.
  547. */
  548. function activate_plugin( $plugin, $redirect = '', $network_wide = false, $silent = false ) {
  549. $plugin = plugin_basename( trim( $plugin ) );
  550. if ( is_multisite() && ( $network_wide || is_network_only_plugin( $plugin ) ) ) {
  551. $network_wide = true;
  552. $current = get_site_option( 'active_sitewide_plugins', array() );
  553. $_GET['networkwide'] = 1; // Back compat for plugins looking for this value.
  554. } else {
  555. $current = get_option( 'active_plugins', array() );
  556. }
  557. $valid = validate_plugin( $plugin );
  558. if ( is_wp_error( $valid ) ) {
  559. return $valid;
  560. }
  561. $requirements = validate_plugin_requirements( $plugin );
  562. if ( is_wp_error( $requirements ) ) {
  563. return $requirements;
  564. }
  565. if ( $network_wide && ! isset( $current[ $plugin ] )
  566. || ! $network_wide && ! in_array( $plugin, $current, true )
  567. ) {
  568. if ( ! empty( $redirect ) ) {
  569. // We'll override this later if the plugin can be included without fatal error.
  570. wp_redirect( add_query_arg( '_error_nonce', wp_create_nonce( 'plugin-activation-error_' . $plugin ), $redirect ) );
  571. }
  572. ob_start();
  573. // Load the plugin to test whether it throws any errors.
  574. plugin_sandbox_scrape( $plugin );
  575. if ( ! $silent ) {
  576. /**
  577. * Fires before a plugin is activated.
  578. *
  579. * If a plugin is silently activated (such as during an update),
  580. * this hook does not fire.
  581. *
  582. * @since 2.9.0
  583. *
  584. * @param string $plugin Path to the plugin file relative to the plugins directory.
  585. * @param bool $network_wide Whether to enable the plugin for all sites in the network
  586. * or just the current site. Multisite only. Default false.
  587. */
  588. do_action( 'activate_plugin', $plugin, $network_wide );
  589. /**
  590. * Fires as a specific plugin is being activated.
  591. *
  592. * This hook is the "activation" hook used internally by register_activation_hook().
  593. * The dynamic portion of the hook name, `$plugin`, refers to the plugin basename.
  594. *
  595. * If a plugin is silently activated (such as during an update), this hook does not fire.
  596. *
  597. * @since 2.0.0
  598. *
  599. * @param bool $network_wide Whether to enable the plugin for all sites in the network
  600. * or just the current site. Multisite only. Default false.
  601. */
  602. do_action( "activate_{$plugin}", $network_wide );
  603. }
  604. if ( $network_wide ) {
  605. $current = get_site_option( 'active_sitewide_plugins', array() );
  606. $current[ $plugin ] = time();
  607. update_site_option( 'active_sitewide_plugins', $current );
  608. } else {
  609. $current = get_option( 'active_plugins', array() );
  610. $current[] = $plugin;
  611. sort( $current );
  612. update_option( 'active_plugins', $current );
  613. }
  614. if ( ! $silent ) {
  615. /**
  616. * Fires after a plugin has been activated.
  617. *
  618. * If a plugin is silently activated (such as during an update),
  619. * this hook does not fire.
  620. *
  621. * @since 2.9.0
  622. *
  623. * @param string $plugin Path to the plugin file relative to the plugins directory.
  624. * @param bool $network_wide Whether to enable the plugin for all sites in the network
  625. * or just the current site. Multisite only. Default false.
  626. */
  627. do_action( 'activated_plugin', $plugin, $network_wide );
  628. }
  629. if ( ob_get_length() > 0 ) {
  630. $output = ob_get_clean();
  631. return new WP_Error( 'unexpected_output', __( 'The plugin generated unexpected output.' ), $output );
  632. }
  633. ob_end_clean();
  634. }
  635. return null;
  636. }
  637. /**
  638. * Deactivates a single plugin or multiple plugins.
  639. *
  640. * The deactivation hook is disabled by the plugin upgrader by using the $silent
  641. * parameter.
  642. *
  643. * @since 2.5.0
  644. *
  645. * @param string|string[] $plugins Single plugin or list of plugins to deactivate.
  646. * @param bool $silent Prevent calling deactivation hooks. Default false.
  647. * @param bool|null $network_wide Whether to deactivate the plugin for all sites in the network.
  648. * A value of null will deactivate plugins for both the network
  649. * and the current site. Multisite only. Default null.
  650. */
  651. function deactivate_plugins( $plugins, $silent = false, $network_wide = null ) {
  652. if ( is_multisite() ) {
  653. $network_current = get_site_option( 'active_sitewide_plugins', array() );
  654. }
  655. $current = get_option( 'active_plugins', array() );
  656. $do_blog = false;
  657. $do_network = false;
  658. foreach ( (array) $plugins as $plugin ) {
  659. $plugin = plugin_basename( trim( $plugin ) );
  660. if ( ! is_plugin_active( $plugin ) ) {
  661. continue;
  662. }
  663. $network_deactivating = ( false !== $network_wide ) && is_plugin_active_for_network( $plugin );
  664. if ( ! $silent ) {
  665. /**
  666. * Fires before a plugin is deactivated.
  667. *
  668. * If a plugin is silently deactivated (such as during an update),
  669. * this hook does not fire.
  670. *
  671. * @since 2.9.0
  672. *
  673. * @param string $plugin Path to the plugin file relative to the plugins directory.
  674. * @param bool $network_deactivating Whether the plugin is deactivated for all sites in the network
  675. * or just the current site. Multisite only. Default false.
  676. */
  677. do_action( 'deactivate_plugin', $plugin, $network_deactivating );
  678. }
  679. if ( false !== $network_wide ) {
  680. if ( is_plugin_active_for_network( $plugin ) ) {
  681. $do_network = true;
  682. unset( $network_current[ $plugin ] );
  683. } elseif ( $network_wide ) {
  684. continue;
  685. }
  686. }
  687. if ( true !== $network_wide ) {
  688. $key = array_search( $plugin, $current, true );
  689. if ( false !== $key ) {
  690. $do_blog = true;
  691. unset( $current[ $key ] );
  692. }
  693. }
  694. if ( $do_blog && wp_is_recovery_mode() ) {
  695. list( $extension ) = explode( '/', $plugin );
  696. wp_paused_plugins()->delete( $extension );
  697. }
  698. if ( ! $silent ) {
  699. /**
  700. * Fires as a specific plugin is being deactivated.
  701. *
  702. * This hook is the "deactivation" hook used internally by register_deactivation_hook().
  703. * The dynamic portion of the hook name, `$plugin`, refers to the plugin basename.
  704. *
  705. * If a plugin is silently deactivated (such as during an update), this hook does not fire.
  706. *
  707. * @since 2.0.0
  708. *
  709. * @param bool $network_deactivating Whether the plugin is deactivated for all sites in the network
  710. * or just the current site. Multisite only. Default false.
  711. */
  712. do_action( "deactivate_{$plugin}", $network_deactivating );
  713. /**
  714. * Fires after a plugin is deactivated.
  715. *
  716. * If a plugin is silently deactivated (such as during an update),
  717. * this hook does not fire.
  718. *
  719. * @since 2.9.0
  720. *
  721. * @param string $plugin Path to the plugin file relative to the plugins directory.
  722. * @param bool $network_deactivating Whether the plugin is deactivated for all sites in the network
  723. * or just the current site. Multisite only. Default false.
  724. */
  725. do_action( 'deactivated_plugin', $plugin, $network_deactivating );
  726. }
  727. }
  728. if ( $do_blog ) {
  729. update_option( 'active_plugins', $current );
  730. }
  731. if ( $do_network ) {
  732. update_site_option( 'active_sitewide_plugins', $network_current );
  733. }
  734. }
  735. /**
  736. * Activates multiple plugins.
  737. *
  738. * When WP_Error is returned, it does not mean that one of the plugins had
  739. * errors. It means that one or more of the plugin file paths were invalid.
  740. *
  741. * The execution will be halted as soon as one of the plugins has an error.
  742. *
  743. * @since 2.6.0
  744. *
  745. * @param string|string[] $plugins Single plugin or list of plugins to activate.
  746. * @param string $redirect Redirect to page after successful activation.
  747. * @param bool $network_wide Whether to enable the plugin for all sites in the network.
  748. * Default false.
  749. * @param bool $silent Prevent calling activation hooks. Default false.
  750. * @return bool|WP_Error True when finished or WP_Error if there were errors during a plugin activation.
  751. */
  752. function activate_plugins( $plugins, $redirect = '', $network_wide = false, $silent = false ) {
  753. if ( ! is_array( $plugins ) ) {
  754. $plugins = array( $plugins );
  755. }
  756. $errors = array();
  757. foreach ( $plugins as $plugin ) {
  758. if ( ! empty( $redirect ) ) {
  759. $redirect = add_query_arg( 'plugin', $plugin, $redirect );
  760. }
  761. $result = activate_plugin( $plugin, $redirect, $network_wide, $silent );
  762. if ( is_wp_error( $result ) ) {
  763. $errors[ $plugin ] = $result;
  764. }
  765. }
  766. if ( ! empty( $errors ) ) {
  767. return new WP_Error( 'plugins_invalid', __( 'One of the plugins is invalid.' ), $errors );
  768. }
  769. return true;
  770. }
  771. /**
  772. * Removes directory and files of a plugin for a list of plugins.
  773. *
  774. * @since 2.6.0
  775. *
  776. * @global WP_Filesystem_Base $wp_filesystem WordPress filesystem subclass.
  777. *
  778. * @param string[] $plugins List of plugin paths to delete, relative to the plugins directory.
  779. * @param string $deprecated Not used.
  780. * @return bool|null|WP_Error True on success, false if `$plugins` is empty, `WP_Error` on failure.
  781. * `null` if filesystem credentials are required to proceed.
  782. */
  783. function delete_plugins( $plugins, $deprecated = '' ) {
  784. global $wp_filesystem;
  785. if ( empty( $plugins ) ) {
  786. return false;
  787. }
  788. $checked = array();
  789. foreach ( $plugins as $plugin ) {
  790. $checked[] = 'checked[]=' . $plugin;
  791. }
  792. $url = wp_nonce_url( 'plugins.php?action=delete-selected&verify-delete=1&' . implode( '&', $checked ), 'bulk-plugins' );
  793. ob_start();
  794. $credentials = request_filesystem_credentials( $url );
  795. $data = ob_get_clean();
  796. if ( false === $credentials ) {
  797. if ( ! empty( $data ) ) {
  798. require_once ABSPATH . 'wp-admin/admin-header.php';
  799. echo $data;
  800. require_once ABSPATH . 'wp-admin/admin-footer.php';
  801. exit;
  802. }
  803. return;
  804. }
  805. if ( ! WP_Filesystem( $credentials ) ) {
  806. ob_start();
  807. // Failed to connect. Error and request again.
  808. request_filesystem_credentials( $url, '', true );
  809. $data = ob_get_clean();
  810. if ( ! empty( $data ) ) {
  811. require_once ABSPATH . 'wp-admin/admin-header.php';
  812. echo $data;
  813. require_once ABSPATH . 'wp-admin/admin-footer.php';
  814. exit;
  815. }
  816. return;
  817. }
  818. if ( ! is_object( $wp_filesystem ) ) {
  819. return new WP_Error( 'fs_unavailable', __( 'Could not access filesystem.' ) );
  820. }
  821. if ( is_wp_error( $wp_filesystem->errors ) && $wp_filesystem->errors->has_errors() ) {
  822. return new WP_Error( 'fs_error', __( 'Filesystem error.' ), $wp_filesystem->errors );
  823. }
  824. // Get the base plugin folder.
  825. $plugins_dir = $wp_filesystem->wp_plugins_dir();
  826. if ( empty( $plugins_dir ) ) {
  827. return new WP_Error( 'fs_no_plugins_dir', __( 'Unable to locate WordPress plugin directory.' ) );
  828. }
  829. $plugins_dir = trailingslashit( $plugins_dir );
  830. $plugin_translations = wp_get_installed_translations( 'plugins' );
  831. $errors = array();
  832. foreach ( $plugins as $plugin_file ) {
  833. // Run Uninstall hook.
  834. if ( is_uninstallable_plugin( $plugin_file ) ) {
  835. uninstall_plugin( $plugin_file );
  836. }
  837. /**
  838. * Fires immediately before a plugin deletion attempt.
  839. *
  840. * @since 4.4.0
  841. *
  842. * @param string $plugin_file Path to the plugin file relative to the plugins directory.
  843. */
  844. do_action( 'delete_plugin', $plugin_file );
  845. $this_plugin_dir = trailingslashit( dirname( $plugins_dir . $plugin_file ) );
  846. // If plugin is in its own directory, recursively delete the directory.
  847. // Base check on if plugin includes directory separator AND that it's not the root plugin folder.
  848. if ( strpos( $plugin_file, '/' ) && $this_plugin_dir !== $plugins_dir ) {
  849. $deleted = $wp_filesystem->delete( $this_plugin_dir, true );
  850. } else {
  851. $deleted = $wp_filesystem->delete( $plugins_dir . $plugin_file );
  852. }
  853. /**
  854. * Fires immediately after a plugin deletion attempt.
  855. *
  856. * @since 4.4.0
  857. *
  858. * @param string $plugin_file Path to the plugin file relative to the plugins directory.
  859. * @param bool $deleted Whether the plugin deletion was successful.
  860. */
  861. do_action( 'deleted_plugin', $plugin_file, $deleted );
  862. if ( ! $deleted ) {
  863. $errors[] = $plugin_file;
  864. continue;
  865. }
  866. $plugin_slug = dirname( $plugin_file );
  867. if ( 'hello.php' === $plugin_file ) {
  868. $plugin_slug = 'hello-dolly';
  869. }
  870. // Remove language files, silently.
  871. if ( '.' !== $plugin_slug && ! empty( $plugin_translations[ $plugin_slug ] ) ) {
  872. $translations = $plugin_translations[ $plugin_slug ];
  873. foreach ( $translations as $translation => $data ) {
  874. $wp_filesystem->delete( WP_LANG_DIR . '/plugins/' . $plugin_slug . '-' . $translation . '.po' );
  875. $wp_filesystem->delete( WP_LANG_DIR . '/plugins/' . $plugin_slug . '-' . $translation . '.mo' );
  876. $json_translation_files = glob( WP_LANG_DIR . '/plugins/' . $plugin_slug . '-' . $translation . '-*.json' );
  877. if ( $json_translation_files ) {
  878. array_map( array( $wp_filesystem, 'delete' ), $json_translation_files );
  879. }
  880. }
  881. }
  882. }
  883. // Remove deleted plugins from the plugin updates list.
  884. $current = get_site_transient( 'update_plugins' );
  885. if ( $current ) {
  886. // Don't remove the plugins that weren't deleted.
  887. $deleted = array_diff( $plugins, $errors );
  888. foreach ( $deleted as $plugin_file ) {
  889. unset( $current->response[ $plugin_file ] );
  890. }
  891. set_site_transient( 'update_plugins', $current );
  892. }
  893. if ( ! empty( $errors ) ) {
  894. if ( 1 === count( $errors ) ) {
  895. /* translators: %s: Plugin filename. */
  896. $message = __( 'Could not fully remove the plugin %s.' );
  897. } else {
  898. /* translators: %s: Comma-separated list of plugin filenames. */
  899. $message = __( 'Could not fully remove the plugins %s.' );
  900. }
  901. return new WP_Error( 'could_not_remove_plugin', sprintf( $message, implode( ', ', $errors ) ) );
  902. }
  903. return true;
  904. }
  905. /**
  906. * Validates active plugins.
  907. *
  908. * Validate all active plugins, deactivates invalid and
  909. * returns an array of deactivated ones.
  910. *
  911. * @since 2.5.0
  912. * @return WP_Error[] Array of plugin errors keyed by plugin file name.
  913. */
  914. function validate_active_plugins() {
  915. $plugins = get_option( 'active_plugins', array() );
  916. // Validate vartype: array.
  917. if ( ! is_array( $plugins ) ) {
  918. update_option( 'active_plugins', array() );
  919. $plugins = array();
  920. }
  921. if ( is_multisite() && current_user_can( 'manage_network_plugins' ) ) {
  922. $network_plugins = (array) get_site_option( 'active_sitewide_plugins', array() );
  923. $plugins = array_merge( $plugins, array_keys( $network_plugins ) );
  924. }
  925. if ( empty( $plugins ) ) {
  926. return array();
  927. }
  928. $invalid = array();
  929. // Invalid plugins get deactivated.
  930. foreach ( $plugins as $plugin ) {
  931. $result = validate_plugin( $plugin );
  932. if ( is_wp_error( $result ) ) {
  933. $invalid[ $plugin ] = $result;
  934. deactivate_plugins( $plugin, true );
  935. }
  936. }
  937. return $invalid;
  938. }
  939. /**
  940. * Validates the plugin path.
  941. *
  942. * Checks that the main plugin file exists and is a valid plugin. See validate_file().
  943. *
  944. * @since 2.5.0
  945. *
  946. * @param string $plugin Path to the plugin file relative to the plugins directory.
  947. * @return int|WP_Error 0 on success, WP_Error on failure.
  948. */
  949. function validate_plugin( $plugin ) {
  950. if ( validate_file( $plugin ) ) {
  951. return new WP_Error( 'plugin_invalid', __( 'Invalid plugin path.' ) );
  952. }
  953. if ( ! file_exists( WP_PLUGIN_DIR . '/' . $plugin ) ) {
  954. return new WP_Error( 'plugin_not_found', __( 'Plugin file does not exist.' ) );
  955. }
  956. $installed_plugins = get_plugins();
  957. if ( ! isset( $installed_plugins[ $plugin ] ) ) {
  958. return new WP_Error( 'no_plugin_header', __( 'The plugin does not have a valid header.' ) );
  959. }
  960. return 0;
  961. }
  962. /**
  963. * Validates the plugin requirements for WordPress version and PHP version.
  964. *
  965. * Uses the information from `Requires at least` and `Requires PHP` headers
  966. * defined in the plugin's main PHP file.
  967. *
  968. * @since 5.2.0
  969. * @since 5.3.0 Added support for reading the headers from the plugin's
  970. * main PHP file, with `readme.txt` as a fallback.
  971. * @since 5.8.0 Removed support for using `readme.txt` as a fallback.
  972. *
  973. * @param string $plugin Path to the plugin file relative to the plugins directory.
  974. * @return true|WP_Error True if requirements are met, WP_Error on failure.
  975. */
  976. function validate_plugin_requirements( $plugin ) {
  977. $plugin_headers = get_plugin_data( WP_PLUGIN_DIR . '/' . $plugin );
  978. $requirements = array(
  979. 'requires' => ! empty( $plugin_headers['RequiresWP'] ) ? $plugin_headers['RequiresWP'] : '',
  980. 'requires_php' => ! empty( $plugin_headers['RequiresPHP'] ) ? $plugin_headers['RequiresPHP'] : '',
  981. );
  982. $compatible_wp = is_wp_version_compatible( $requirements['requires'] );
  983. $compatible_php = is_php_version_compatible( $requirements['requires_php'] );
  984. $php_update_message = '</p><p>' . sprintf(
  985. /* translators: %s: URL to Update PHP page. */
  986. __( '<a href="%s">Learn more about updating PHP</a>.' ),
  987. esc_url( wp_get_update_php_url() )
  988. );
  989. $annotation = wp_get_update_php_annotation();
  990. if ( $annotation ) {
  991. $php_update_message .= '</p><p><em>' . $annotation . '</em>';
  992. }
  993. if ( ! $compatible_wp && ! $compatible_php ) {
  994. return new WP_Error(
  995. 'plugin_wp_php_incompatible',
  996. '<p>' . sprintf(
  997. /* translators: 1: Current WordPress version, 2: Current PHP version, 3: Plugin name, 4: Required WordPress version, 5: Required PHP version. */
  998. _x( '<strong>Error:</strong> Current versions of WordPress (%1$s) and PHP (%2$s) do not meet minimum requirements for %3$s. The plugin requires WordPress %4$s and PHP %5$s.', 'plugin' ),
  999. get_bloginfo( 'version' ),
  1000. PHP_VERSION,
  1001. $plugin_headers['Name'],
  1002. $requirements['requires'],
  1003. $requirements['requires_php']
  1004. ) . $php_update_message . '</p>'
  1005. );
  1006. } elseif ( ! $compatible_php ) {
  1007. return new WP_Error(
  1008. 'plugin_php_incompatible',
  1009. '<p>' . sprintf(
  1010. /* translators: 1: Current PHP version, 2: Plugin name, 3: Required PHP version. */
  1011. _x( '<strong>Error:</strong> Current PHP version (%1$s) does not meet minimum requirements for %2$s. The plugin requires PHP %3$s.', 'plugin' ),
  1012. PHP_VERSION,
  1013. $plugin_headers['Name'],
  1014. $requirements['requires_php']
  1015. ) . $php_update_message . '</p>'
  1016. );
  1017. } elseif ( ! $compatible_wp ) {
  1018. return new WP_Error(
  1019. 'plugin_wp_incompatible',
  1020. '<p>' . sprintf(
  1021. /* translators: 1: Current WordPress version, 2: Plugin name, 3: Required WordPress version. */
  1022. _x( '<strong>Error:</strong> Current WordPress version (%1$s) does not meet minimum requirements for %2$s. The plugin requires WordPress %3$s.', 'plugin' ),
  1023. get_bloginfo( 'version' ),
  1024. $plugin_headers['Name'],
  1025. $requirements['requires']
  1026. ) . '</p>'
  1027. );
  1028. }
  1029. return true;
  1030. }
  1031. /**
  1032. * Determines whether the plugin can be uninstalled.
  1033. *
  1034. * @since 2.7.0
  1035. *
  1036. * @param string $plugin Path to the plugin file relative to the plugins directory.
  1037. * @return bool Whether plugin can be uninstalled.
  1038. */
  1039. function is_uninstallable_plugin( $plugin ) {
  1040. $file = plugin_basename( $plugin );
  1041. $uninstallable_plugins = (array) get_option( 'uninstall_plugins' );
  1042. if ( isset( $uninstallable_plugins[ $file ] ) || file_exists( WP_PLUGIN_DIR . '/' . dirname( $file ) . '/uninstall.php' ) ) {
  1043. return true;
  1044. }
  1045. return false;
  1046. }
  1047. /**
  1048. * Uninstalls a single plugin.
  1049. *
  1050. * Calls the uninstall hook, if it is available.
  1051. *
  1052. * @since 2.7.0
  1053. *
  1054. * @param string $plugin Path to the plugin file relative to the plugins directory.
  1055. * @return true|void True if a plugin's uninstall.php file has been found and included.
  1056. * Void otherwise.
  1057. */
  1058. function uninstall_plugin( $plugin ) {
  1059. $file = plugin_basename( $plugin );
  1060. $uninstallable_plugins = (array) get_option( 'uninstall_plugins' );
  1061. /**
  1062. * Fires in uninstall_plugin() immediately before the plugin is uninstalled.
  1063. *
  1064. * @since 4.5.0
  1065. *
  1066. * @param string $plugin Path to the plugin file relative to the plugins directory.
  1067. * @param array $uninstallable_plugins Uninstallable plugins.
  1068. */
  1069. do_action( 'pre_uninstall_plugin', $plugin, $uninstallable_plugins );
  1070. if ( file_exists( WP_PLUGIN_DIR . '/' . dirname( $file ) . '/uninstall.php' ) ) {
  1071. if ( isset( $uninstallable_plugins[ $file ] ) ) {
  1072. unset( $uninstallable_plugins[ $file ] );
  1073. update_option( 'uninstall_plugins', $uninstallable_plugins );
  1074. }
  1075. unset( $uninstallable_plugins );
  1076. define( 'WP_UNINSTALL_PLUGIN', $file );
  1077. wp_register_plugin_realpath( WP_PLUGIN_DIR . '/' . $file );
  1078. include_once WP_PLUGIN_DIR . '/' . dirname( $file ) . '/uninstall.php';
  1079. return true;
  1080. }
  1081. if ( isset( $uninstallable_plugins[ $file ] ) ) {
  1082. $callable = $uninstallable_plugins[ $file ];
  1083. unset( $uninstallable_plugins[ $file ] );
  1084. update_option( 'uninstall_plugins', $uninstallable_plugins );
  1085. unset( $uninstallable_plugins );
  1086. wp_register_plugin_realpath( WP_PLUGIN_DIR . '/' . $file );
  1087. include_once WP_PLUGIN_DIR . '/' . $file;
  1088. add_action( "uninstall_{$file}", $callable );
  1089. /**
  1090. * Fires in uninstall_plugin() once the plugin has been uninstalled.
  1091. *
  1092. * The action concatenates the 'uninstall_' prefix with the basename of the
  1093. * plugin passed to uninstall_plugin() to create a dynamically-named action.
  1094. *
  1095. * @since 2.7.0
  1096. */
  1097. do_action( "uninstall_{$file}" );
  1098. }
  1099. }
  1100. //
  1101. // Menu.
  1102. //
  1103. /**
  1104. * Adds a top-level menu page.
  1105. *
  1106. * This function takes a capability which will be used to determine whether
  1107. * or not a page is included in the menu.
  1108. *
  1109. * The function which is hooked in to handle the output of the page must check
  1110. * that the user has the required capability as well.
  1111. *
  1112. * @since 1.5.0
  1113. *
  1114. * @global array $menu
  1115. * @global array $admin_page_hooks
  1116. * @global array $_registered_pages
  1117. * @global array $_parent_pages
  1118. *
  1119. * @param string $page_title The text to be displayed in the title tags of the page when the menu is selected.
  1120. * @param string $menu_title The text to be used for the menu.
  1121. * @param string $capability The capability required for this menu to be displayed to the user.
  1122. * @param string $menu_slug The slug name to refer to this menu by. Should be unique for this menu page and only
  1123. * include lowercase alphanumeric, dashes, and underscores characters to be compatible
  1124. * with sanitize_key().
  1125. * @param callable $callback Optional. The function to be called to output the content for this page.
  1126. * @param string $icon_url Optional. The URL to the icon to be used for this menu.
  1127. * * Pass a base64-encoded SVG using a data URI, which will be colored to match
  1128. * the color scheme. This should begin with 'data:image/svg+xml;base64,'.
  1129. * * Pass the name of a Dashicons helper class to use a font icon,
  1130. * e.g. 'dashicons-chart-pie'.
  1131. * * Pass 'none' to leave div.wp-menu-image empty so an icon can be added via CSS.
  1132. * @param int|float $position Optional. The position in the menu order this item should appear.
  1133. * @return string The resulting page's hook_suffix.
  1134. */
  1135. function add_menu_page( $page_title, $menu_title, $capability, $menu_slug, $callback = '', $icon_url = '', $position = null ) {
  1136. global $menu, $admin_page_hooks, $_registered_pages, $_parent_pages;
  1137. $menu_slug = plugin_basename( $menu_slug );
  1138. $admin_page_hooks[ $menu_slug ] = sanitize_title( $menu_title );
  1139. $hookname = get_plugin_page_hookname( $menu_slug, '' );
  1140. if ( ! empty( $callback ) && ! empty( $hookname ) && current_user_can( $capability ) ) {
  1141. add_action( $hookname, $callback );
  1142. }
  1143. if ( empty( $icon_url ) ) {
  1144. $icon_url = 'dashicons-admin-generic';
  1145. $icon_class = 'menu-icon-generic ';
  1146. } else {
  1147. $icon_url = set_url_scheme( $icon_url );
  1148. $icon_class = '';
  1149. }
  1150. $new_menu = array( $menu_title, $capability, $menu_slug, $page_title, 'menu-top ' . $icon_class . $hookname, $hookname, $icon_url );
  1151. if ( null !== $position && ! is_numeric( $position ) ) {
  1152. _doing_it_wrong(
  1153. __FUNCTION__,
  1154. sprintf(
  1155. /* translators: %s: add_menu_page() */
  1156. __( 'The seventh parameter passed to %s should be numeric representing menu position.' ),
  1157. '<code>add_menu_page()</code>'
  1158. ),
  1159. '6.0.0'
  1160. );
  1161. $position = null;
  1162. }
  1163. if ( null === $position || ! is_numeric( $position ) ) {
  1164. $menu[] = $new_menu;
  1165. } elseif ( isset( $menu[ (string) $position ] ) ) {
  1166. $collision_avoider = base_convert( substr( md5( $menu_slug . $menu_title ), -4 ), 16, 10 ) * 0.00001;
  1167. $position = (string) ( $position + $collision_avoider );
  1168. $menu[ $position ] = $new_menu;
  1169. } else {
  1170. /*
  1171. * Cast menu position to a string.
  1172. *
  1173. * This allows for floats to be passed as the position. PHP will normally cast a float to an
  1174. * integer value, this ensures the float retains its mantissa (positive fractional part).
  1175. *
  1176. * A string containing an integer value, eg "10", is treated as a numeric index.
  1177. */
  1178. $position = (string) $position;
  1179. $menu[ $position ] = $new_menu;
  1180. }
  1181. $_registered_pages[ $hookname ] = true;
  1182. // No parent as top level.
  1183. $_parent_pages[ $menu_slug ] = false;
  1184. return $hookname;
  1185. }
  1186. /**
  1187. * Adds a submenu page.
  1188. *
  1189. * This function takes a capability which will be used to determine whether
  1190. * or not a page is included in the menu.
  1191. *
  1192. * The function which is hooked in to handle the output of the page must check
  1193. * that the user has the required capability as well.
  1194. *
  1195. * @since 1.5.0
  1196. * @since 5.3.0 Added the `$position` parameter.
  1197. *
  1198. * @global array $submenu
  1199. * @global array $menu
  1200. * @global array $_wp_real_parent_file
  1201. * @global bool $_wp_submenu_nopriv
  1202. * @global array $_registered_pages
  1203. * @global array $_parent_pages
  1204. *
  1205. * @param string $parent_slug The slug name for the parent menu (or the file name of a standard
  1206. * WordPress admin page).
  1207. * @param string $page_title The text to be displayed in the title tags of the page when the menu
  1208. * is selected.
  1209. * @param string $menu_title The text to be used for the menu.
  1210. * @param string $capability The capability required for this menu to be displayed to the user.
  1211. * @param string $menu_slug The slug name to refer to this menu by. Should be unique for this menu
  1212. * and only include lowercase alphanumeric, dashes, and underscores characters
  1213. * to be compatible with sanitize_key().
  1214. * @param callable $callback Optional. The function to be called to output the content for this page.
  1215. * @param int|float $position Optional. The position in the menu order this item should appear.
  1216. * @return string|false The resulting page's hook_suffix, or false if the user does not have the capability required.
  1217. */
  1218. function add_submenu_page( $parent_slug, $page_title, $menu_title, $capability, $menu_slug, $callback = '', $position = null ) {
  1219. global $submenu, $menu, $_wp_real_parent_file, $_wp_submenu_nopriv,
  1220. $_registered_pages, $_parent_pages;
  1221. $menu_slug = plugin_basename( $menu_slug );
  1222. $parent_slug = plugin_basename( $parent_slug );
  1223. if ( isset( $_wp_real_parent_file[ $parent_slug ] ) ) {
  1224. $parent_slug = $_wp_real_parent_file[ $parent_slug ];
  1225. }
  1226. if ( ! current_user_can( $capability ) ) {
  1227. $_wp_submenu_nopriv[ $parent_slug ][ $menu_slug ] = true;
  1228. return false;
  1229. }
  1230. /*
  1231. * If the parent doesn't already have a submenu, add a link to the parent
  1232. * as the first item in the submenu. If the submenu file is the same as the
  1233. * parent file someone is trying to link back to the parent manually. In
  1234. * this case, don't automatically add a link back to avoid duplication.
  1235. */
  1236. if ( ! isset( $submenu[ $parent_slug ] ) && $menu_slug !== $parent_slug ) {
  1237. foreach ( (array) $menu as $parent_menu ) {
  1238. if ( $parent_menu[2] === $parent_slug && current_user_can( $parent_menu[1] ) ) {
  1239. $submenu[ $parent_slug ][] = array_slice( $parent_menu, 0, 4 );
  1240. }
  1241. }
  1242. }
  1243. $new_sub_menu = array( $menu_title, $capability, $menu_slug, $page_title );
  1244. if ( null !== $position && ! is_numeric( $position ) ) {
  1245. _doing_it_wrong(
  1246. __FUNCTION__,
  1247. sprintf(
  1248. /* translators: %s: add_submenu_page() */
  1249. __( 'The seventh parameter passed to %s should be numeric representing menu position.' ),
  1250. '<code>add_submenu_page()</code>'
  1251. ),
  1252. '5.3.0'
  1253. );
  1254. $position = null;
  1255. }
  1256. if (
  1257. null === $position ||
  1258. ( ! isset( $submenu[ $parent_slug ] ) || $position >= count( $submenu[ $parent_slug ] ) )
  1259. ) {
  1260. $submenu[ $parent_slug ][] = $new_sub_menu;
  1261. } else {
  1262. // Test for a negative position.
  1263. $position = max( $position, 0 );
  1264. if ( 0 === $position ) {
  1265. // For negative or `0` positions, prepend the submenu.
  1266. array_unshift( $submenu[ $parent_slug ], $new_sub_menu );
  1267. } else {
  1268. $position = absint( $position );
  1269. // Grab all of the items before the insertion point.
  1270. $before_items = array_slice( $submenu[ $parent_slug ], 0, $position, true );
  1271. // Grab all of the items after the insertion point.
  1272. $after_items = array_slice( $submenu[ $parent_slug ], $position, null, true );
  1273. // Add the new item.
  1274. $before_items[] = $new_sub_menu;
  1275. // Merge the items.
  1276. $submenu[ $parent_slug ] = array_merge( $before_items, $after_items );
  1277. }
  1278. }
  1279. // Sort the parent array.
  1280. ksort( $submenu[ $parent_slug ] );
  1281. $hookname = get_plugin_page_hookname( $menu_slug, $parent_slug );
  1282. if ( ! empty( $callback ) && ! empty( $hookname ) ) {
  1283. add_action( $hookname, $callback );
  1284. }
  1285. $_registered_pages[ $hookname ] = true;
  1286. /*
  1287. * Backward-compatibility for plugins using add_management_page().
  1288. * See wp-admin/admin.php for redirect from edit.php to tools.php.
  1289. */
  1290. if ( 'tools.php' === $parent_slug ) {
  1291. $_registered_pages[ get_plugin_page_hookname( $menu_slug, 'edit.php' ) ] = true;
  1292. }
  1293. // No parent as top level.
  1294. $_parent_pages[ $menu_slug ] = $parent_slug;
  1295. return $hookname;
  1296. }
  1297. /**
  1298. * Adds a submenu page to the Tools main menu.
  1299. *
  1300. * This function takes a capability which will be used to determine whether
  1301. * or not a page is included in the menu.
  1302. *
  1303. * The function which is hooked in to handle the output of the page must check
  1304. * that the user has the required capability as well.
  1305. *
  1306. * @since 1.5.0
  1307. * @since 5.3.0 Added the `$position` parameter.
  1308. *
  1309. * @param string $page_title The text to be displayed in the title tags of the page when the menu is selected.
  1310. * @param string $menu_title The text to be used for the menu.
  1311. * @param string $capability The capability required for this menu to be displayed to the user.
  1312. * @param string $menu_slug The slug name to refer to this menu by (should be unique for this menu).
  1313. * @param callable $callback Optional. The function to be called to output the content for this page.
  1314. * @param int $position Optional. The position in the menu order this item should appear.
  1315. * @return string|false The resulting page's hook_suffix, or false if the user does not have the capability required.
  1316. */
  1317. function add_management_page( $page_title, $menu_title, $capability, $menu_slug, $callback = '', $position = null ) {
  1318. return add_submenu_page( 'tools.php', $page_title, $menu_title, $capability, $menu_slug, $callback, $position );
  1319. }
  1320. /**
  1321. * Adds a submenu page to the Settings main menu.
  1322. *
  1323. * This function takes a capability which will be used to determine whether
  1324. * or not a page is included in the menu.
  1325. *
  1326. * The function which is hooked in to handle the output of the page must check
  1327. * that the user has the required capability as well.
  1328. *
  1329. * @since 1.5.0
  1330. * @since 5.3.0 Added the `$position` parameter.
  1331. *
  1332. * @param string $page_title The text to be displayed in the title tags of the page when the menu is selected.
  1333. * @param string $menu_title The text to be used for the menu.
  1334. * @param string $capability The capability required for this menu to be displayed to the user.
  1335. * @param string $menu_slug The slug name to refer to this menu by (should be unique for this menu).
  1336. * @param callable $callback Optional. The function to be called to output the content for this page.
  1337. * @param int $position Optional. The position in the menu order this item should appear.
  1338. * @return string|false The resulting page's hook_suffix, or false if the user does not have the capability required.
  1339. */
  1340. function add_options_page( $page_title, $menu_title, $capability, $menu_slug, $callback = '', $position = null ) {
  1341. return add_submenu_page( 'options-general.php', $page_title, $menu_title, $capability, $menu_slug, $callback, $position );
  1342. }
  1343. /**
  1344. * Adds a submenu page to the Appearance main menu.
  1345. *
  1346. * This function takes a capability which will be used to determine whether
  1347. * or not a page is included in the menu.
  1348. *
  1349. * The function which is hooked in to handle the output of the page must check
  1350. * that the user has the required capability as well.
  1351. *
  1352. * @since 2.0.0
  1353. * @since 5.3.0 Added the `$position` parameter.
  1354. *
  1355. * @param string $page_title The text to be displayed in the title tags of the page when the menu is selected.
  1356. * @param string $menu_title The text to be used for the menu.
  1357. * @param string $capability The capability required for this menu to be displayed to the user.
  1358. * @param string $menu_slug The slug name to refer to this menu by (should be unique for this menu).
  1359. * @param callable $callback Optional. The function to be called to output the content for this page.
  1360. * @param int $position Optional. The position in the menu order this item should appear.
  1361. * @return string|false The resulting page's hook_suffix, or false if the user does not have the capability required.
  1362. */
  1363. function add_theme_page( $page_title, $menu_title, $capability, $menu_slug, $callback = '', $position = null ) {
  1364. return add_submenu_page( 'themes.php', $page_title, $menu_title, $capability, $menu_slug, $callback, $position );
  1365. }
  1366. /**
  1367. * Adds a submenu page to the Plugins main menu.
  1368. *
  1369. * This function takes a capability which will be used to determine whether
  1370. * or not a page is included in the menu.
  1371. *
  1372. * The function which is hooked in to handle the output of the page must check
  1373. * that the user has the required capability as well.
  1374. *
  1375. * @since 3.0.0
  1376. * @since 5.3.0 Added the `$position` parameter.
  1377. *
  1378. * @param string $page_title The text to be displayed in the title tags of the page when the menu is selected.
  1379. * @param string $menu_title The text to be used for the menu.
  1380. * @param string $capability The capability required for this menu to be displayed to the user.
  1381. * @param string $menu_slug The slug name to refer to this menu by (should be unique for this menu).
  1382. * @param callable $callback Optional. The function to be called to output the content for this page.
  1383. * @param int $position Optional. The position in the menu order this item should appear.
  1384. * @return string|false The resulting page's hook_suffix, or false if the user does not have the capability required.
  1385. */
  1386. function add_plugins_page( $page_title, $menu_title, $capability, $menu_slug, $callback = '', $position = null ) {
  1387. return add_submenu_page( 'plugins.php', $page_title, $menu_title, $capability, $menu_slug, $callback, $position );
  1388. }
  1389. /**
  1390. * Adds a submenu page to the Users/Profile main menu.
  1391. *
  1392. * This function takes a capability which will be used to determine whether
  1393. * or not a page is included in the menu.
  1394. *
  1395. * The function which is hooked in to handle the output of the page must check
  1396. * that the user has the required capability as well.
  1397. *
  1398. * @since 2.1.3
  1399. * @since 5.3.0 Added the `$position` parameter.
  1400. *
  1401. * @param string $page_title The text to be displayed in the title tags of the page when the menu is selected.
  1402. * @param string $menu_title The text to be used for the menu.
  1403. * @param string $capability The capability required for this menu to be displayed to the user.
  1404. * @param string $menu_slug The slug name to refer to this menu by (should be unique for this menu).
  1405. * @param callable $callback Optional. The function to be called to output the content for this page.
  1406. * @param int $position Optional. The position in the menu order this item should appear.
  1407. * @return string|false The resulting page's hook_suffix, or false if the user does not have the capability required.
  1408. */
  1409. function add_users_page( $page_title, $menu_title, $capability, $menu_slug, $callback = '', $position = null ) {
  1410. if ( current_user_can( 'edit_users' ) ) {
  1411. $parent = 'users.php';
  1412. } else {
  1413. $parent = 'profile.php';
  1414. }
  1415. return add_submenu_page( $parent, $page_title, $menu_title, $capability, $menu_slug, $callback, $position );
  1416. }
  1417. /**
  1418. * Adds a submenu page to the Dashboard main menu.
  1419. *
  1420. * This function takes a capability which will be used to determine whether
  1421. * or not a page is included in the menu.
  1422. *
  1423. * The function which is hooked in to handle the output of the page must check
  1424. * that the user has the required capability as well.
  1425. *
  1426. * @since 2.7.0
  1427. * @since 5.3.0 Added the `$position` parameter.
  1428. *
  1429. * @param string $page_title The text to be displayed in the title tags of the page when the menu is selected.
  1430. * @param string $menu_title The text to be used for the menu.
  1431. * @param string $capability The capability required for this menu to be displayed to the user.
  1432. * @param string $menu_slug The slug name to refer to this menu by (should be unique for this menu).
  1433. * @param callable $callback Optional. The function to be called to output the content for this page.
  1434. * @param int $position Optional. The position in the menu order this item should appear.
  1435. * @return string|false The resulting page's hook_suffix, or false if the user does not have the capability required.
  1436. */
  1437. function add_dashboard_page( $page_title, $menu_title, $capability, $menu_slug, $callback = '', $position = null ) {
  1438. return add_submenu_page( 'index.php', $page_title, $menu_title, $capability, $menu_slug, $callback, $position );
  1439. }
  1440. /**
  1441. * Adds a submenu page to the Posts main menu.
  1442. *
  1443. * This function takes a capability which will be used to determine whether
  1444. * or not a page is included in the menu.
  1445. *
  1446. * The function which is hooked in to handle the output of the page must check
  1447. * that the user has the required capability as well.
  1448. *
  1449. * @since 2.7.0
  1450. * @since 5.3.0 Added the `$position` parameter.
  1451. *
  1452. * @param string $page_title The text to be displayed in the title tags of the page when the menu is selected.
  1453. * @param string $menu_title The text to be used for the menu.
  1454. * @param string $capability The capability required for this menu to be displayed to the user.
  1455. * @param string $menu_slug The slug name to refer to this menu by (should be unique for this menu).
  1456. * @param callable $callback Optional. The function to be called to output the content for this page.
  1457. * @param int $position Optional. The position in the menu order this item should appear.
  1458. * @return string|false The resulting page's hook_suffix, or false if the user does not have the capability required.
  1459. */
  1460. function add_posts_page( $page_title, $menu_title, $capability, $menu_slug, $callback = '', $position = null ) {
  1461. return add_submenu_page( 'edit.php', $page_title, $menu_title, $capability, $menu_slug, $callback, $position );
  1462. }
  1463. /**
  1464. * Adds a submenu page to the Media main menu.
  1465. *
  1466. * This function takes a capability which will be used to determine whether
  1467. * or not a page is included in the menu.
  1468. *
  1469. * The function which is hooked in to handle the output of the page must check
  1470. * that the user has the required capability as well.
  1471. *
  1472. * @since 2.7.0
  1473. * @since 5.3.0 Added the `$position` parameter.
  1474. *
  1475. * @param string $page_title The text to be displayed in the title tags of the page when the menu is selected.
  1476. * @param string $menu_title The text to be used for the menu.
  1477. * @param string $capability The capability required for this menu to be displayed to the user.
  1478. * @param string $menu_slug The slug name to refer to this menu by (should be unique for this menu).
  1479. * @param callable $callback Optional. The function to be called to output the content for this page.
  1480. * @param int $position Optional. The position in the menu order this item should appear.
  1481. * @return string|false The resulting page's hook_suffix, or false if the user does not have the capability required.
  1482. */
  1483. function add_media_page( $page_title, $menu_title, $capability, $menu_slug, $callback = '', $position = null ) {
  1484. return add_submenu_page( 'upload.php', $page_title, $menu_title, $capability, $menu_slug, $callback, $position );
  1485. }
  1486. /**
  1487. * Adds a submenu page to the Links main menu.
  1488. *
  1489. * This function takes a capability which will be used to determine whether
  1490. * or not a page is included in the menu.
  1491. *
  1492. * The function which is hooked in to handle the output of the page must check
  1493. * that the user has the required capability as well.
  1494. *
  1495. * @since 2.7.0
  1496. * @since 5.3.0 Added the `$position` parameter.
  1497. *
  1498. * @param string $page_title The text to be displayed in the title tags of the page when the menu is selected.
  1499. * @param string $menu_title The text to be used for the menu.
  1500. * @param string $capability The capability required for this menu to be displayed to the user.
  1501. * @param string $menu_slug The slug name to refer to this menu by (should be unique for this menu).
  1502. * @param callable $callback Optional. The function to be called to output the content for this page.
  1503. * @param int $position Optional. The position in the menu order this item should appear.
  1504. * @return string|false The resulting page's hook_suffix, or false if the user does not have the capability required.
  1505. */
  1506. function add_links_page( $page_title, $menu_title, $capability, $menu_slug, $callback = '', $position = null ) {
  1507. return add_submenu_page( 'link-manager.php', $page_title, $menu_title, $capability, $menu_slug, $callback, $position );
  1508. }
  1509. /**
  1510. * Adds a submenu page to the Pages main menu.
  1511. *
  1512. * This function takes a capability which will be used to determine whether
  1513. * or not a page is included in the menu.
  1514. *
  1515. * The function which is hooked in to handle the output of the page must check
  1516. * that the user has the required capability as well.
  1517. *
  1518. * @since 2.7.0
  1519. * @since 5.3.0 Added the `$position` parameter.
  1520. *
  1521. * @param string $page_title The text to be displayed in the title tags of the page when the menu is selected.
  1522. * @param string $menu_title The text to be used for the menu.
  1523. * @param string $capability The capability required for this menu to be displayed to the user.
  1524. * @param string $menu_slug The slug name to refer to this menu by (should be unique for this menu).
  1525. * @param callable $callback Optional. The function to be called to output the content for this page.
  1526. * @param int $position Optional. The position in the menu order this item should appear.
  1527. * @return string|false The resulting page's hook_suffix, or false if the user does not have the capability required.
  1528. */
  1529. function add_pages_page( $page_title, $menu_title, $capability, $menu_slug, $callback = '', $position = null ) {
  1530. return add_submenu_page( 'edit.php?post_type=page', $page_title, $menu_title, $capability, $menu_slug, $callback, $position );
  1531. }
  1532. /**
  1533. * Adds a submenu page to the Comments main menu.
  1534. *
  1535. * This function takes a capability which will be used to determine whether
  1536. * or not a page is included in the menu.
  1537. *
  1538. * The function which is hooked in to handle the output of the page must check
  1539. * that the user has the required capability as well.
  1540. *
  1541. * @since 2.7.0
  1542. * @since 5.3.0 Added the `$position` parameter.
  1543. *
  1544. * @param string $page_title The text to be displayed in the title tags of the page when the menu is selected.
  1545. * @param string $menu_title The text to be used for the menu.
  1546. * @param string $capability The capability required for this menu to be displayed to the user.
  1547. * @param string $menu_slug The slug name to refer to this menu by (should be unique for this menu).
  1548. * @param callable $callback Optional. The function to be called to output the content for this page.
  1549. * @param int $position Optional. The position in the menu order this item should appear.
  1550. * @return string|false The resulting page's hook_suffix, or false if the user does not have the capability required.
  1551. */
  1552. function add_comments_page( $page_title, $menu_title, $capability, $menu_slug, $callback = '', $position = null ) {
  1553. return add_submenu_page( 'edit-comments.php', $page_title, $menu_title, $capability, $menu_slug, $callback, $position );
  1554. }
  1555. /**
  1556. * Removes a top-level admin menu.
  1557. *
  1558. * Example usage:
  1559. *
  1560. * - `remove_menu_page( 'tools.php' )`
  1561. * - `remove_menu_page( 'plugin_menu_slug' )`
  1562. *
  1563. * @since 3.1.0
  1564. *
  1565. * @global array $menu
  1566. *
  1567. * @param string $menu_slug The slug of the menu.
  1568. * @return array|false The removed menu on success, false if not found.
  1569. */
  1570. function remove_menu_page( $menu_slug ) {
  1571. global $menu;
  1572. foreach ( $menu as $i => $item ) {
  1573. if ( $menu_slug === $item[2] ) {
  1574. unset( $menu[ $i ] );
  1575. return $item;
  1576. }
  1577. }
  1578. return false;
  1579. }
  1580. /**
  1581. * Removes an admin submenu.
  1582. *
  1583. * Example usage:
  1584. *
  1585. * - `remove_submenu_page( 'themes.php', 'nav-menus.php' )`
  1586. * - `remove_submenu_page( 'tools.php', 'plugin_submenu_slug' )`
  1587. * - `remove_submenu_page( 'plugin_menu_slug', 'plugin_submenu_slug' )`
  1588. *
  1589. * @since 3.1.0
  1590. *
  1591. * @global array $submenu
  1592. *
  1593. * @param string $menu_slug The slug for the parent menu.
  1594. * @param string $submenu_slug The slug of the submenu.
  1595. * @return array|false The removed submenu on success, false if not found.
  1596. */
  1597. function remove_submenu_page( $menu_slug, $submenu_slug ) {
  1598. global $submenu;
  1599. if ( ! isset( $submenu[ $menu_slug ] ) ) {
  1600. return false;
  1601. }
  1602. foreach ( $submenu[ $menu_slug ] as $i => $item ) {
  1603. if ( $submenu_slug === $item[2] ) {
  1604. unset( $submenu[ $menu_slug ][ $i ] );
  1605. return $item;
  1606. }
  1607. }
  1608. return false;
  1609. }
  1610. /**
  1611. * Gets the URL to access a particular menu page based on the slug it was registered with.
  1612. *
  1613. * If the slug hasn't been registered properly, no URL will be returned.
  1614. *
  1615. * @since 3.0.0
  1616. *
  1617. * @global array $_parent_pages
  1618. *
  1619. * @param string $menu_slug The slug name to refer to this menu by (should be unique for this menu).
  1620. * @param bool $display Optional. Whether or not to display the URL. Default true.
  1621. * @return string The menu page URL.
  1622. */
  1623. function menu_page_url( $menu_slug, $display = true ) {
  1624. global $_parent_pages;
  1625. if ( isset( $_parent_pages[ $menu_slug ] ) ) {
  1626. $parent_slug = $_parent_pages[ $menu_slug ];
  1627. if ( $parent_slug && ! isset( $_parent_pages[ $parent_slug ] ) ) {
  1628. $url = admin_url( add_query_arg( 'page', $menu_slug, $parent_slug ) );
  1629. } else {
  1630. $url = admin_url( 'admin.php?page=' . $menu_slug );
  1631. }
  1632. } else {
  1633. $url = '';
  1634. }
  1635. $url = esc_url( $url );
  1636. if ( $display ) {
  1637. echo $url;
  1638. }
  1639. return $url;
  1640. }
  1641. //
  1642. // Pluggable Menu Support -- Private.
  1643. //
  1644. /**
  1645. * Gets the parent file of the current admin page.
  1646. *
  1647. * @since 1.5.0
  1648. *
  1649. * @global string $parent_file
  1650. * @global array $menu
  1651. * @global array $submenu
  1652. * @global string $pagenow The filename of the current screen.
  1653. * @global string $typenow The post type of the current screen.
  1654. * @global string $plugin_page
  1655. * @global array $_wp_real_parent_file
  1656. * @global array $_wp_menu_nopriv
  1657. * @global array $_wp_submenu_nopriv
  1658. *
  1659. * @param string $parent_page Optional. The slug name for the parent menu (or the file name
  1660. * of a standard WordPress admin page). Default empty string.
  1661. * @return string The parent file of the current admin page.
  1662. */
  1663. function get_admin_page_parent( $parent_page = '' ) {
  1664. global $parent_file, $menu, $submenu, $pagenow, $typenow,
  1665. $plugin_page, $_wp_real_parent_file, $_wp_menu_nopriv, $_wp_submenu_nopriv;
  1666. if ( ! empty( $parent_page ) && 'admin.php' !== $parent_page ) {
  1667. if ( isset( $_wp_real_parent_file[ $parent_page ] ) ) {
  1668. $parent_page = $_wp_real_parent_file[ $parent_page ];
  1669. }
  1670. return $parent_page;
  1671. }
  1672. if ( 'admin.php' === $pagenow && isset( $plugin_page ) ) {
  1673. foreach ( (array) $menu as $parent_menu ) {
  1674. if ( $parent_menu[2] === $plugin_page ) {
  1675. $parent_file = $plugin_page;
  1676. if ( isset( $_wp_real_parent_file[ $parent_file ] ) ) {
  1677. $parent_file = $_wp_real_parent_file[ $parent_file ];
  1678. }
  1679. return $parent_file;
  1680. }
  1681. }
  1682. if ( isset( $_wp_menu_nopriv[ $plugin_page ] ) ) {
  1683. $parent_file = $plugin_page;
  1684. if ( isset( $_wp_real_parent_file[ $parent_file ] ) ) {
  1685. $parent_file = $_wp_real_parent_file[ $parent_file ];
  1686. }
  1687. return $parent_file;
  1688. }
  1689. }
  1690. if ( isset( $plugin_page ) && isset( $_wp_submenu_nopriv[ $pagenow ][ $plugin_page ] ) ) {
  1691. $parent_file = $pagenow;
  1692. if ( isset( $_wp_real_parent_file[ $parent_file ] ) ) {
  1693. $parent_file = $_wp_real_parent_file[ $parent_file ];
  1694. }
  1695. return $parent_file;
  1696. }
  1697. foreach ( array_keys( (array) $submenu ) as $parent_page ) {
  1698. foreach ( $submenu[ $parent_page ] as $submenu_array ) {
  1699. if ( isset( $_wp_real_parent_file[ $parent_page ] ) ) {
  1700. $parent_page = $_wp_real_parent_file[ $parent_page ];
  1701. }
  1702. if ( ! empty( $typenow ) && "$pagenow?post_type=$typenow" === $submenu_array[2] ) {
  1703. $parent_file = $parent_page;
  1704. return $parent_page;
  1705. } elseif ( empty( $typenow ) && $pagenow === $submenu_array[2]
  1706. && ( empty( $parent_file ) || false === strpos( $parent_file, '?' ) )
  1707. ) {
  1708. $parent_file = $parent_page;
  1709. return $parent_page;
  1710. } elseif ( isset( $plugin_page ) && $plugin_page === $submenu_array[2] ) {
  1711. $parent_file = $parent_page;
  1712. return $parent_page;
  1713. }
  1714. }
  1715. }
  1716. if ( empty( $parent_file ) ) {
  1717. $parent_file = '';
  1718. }
  1719. return '';
  1720. }
  1721. /**
  1722. * Gets the title of the current admin page.
  1723. *
  1724. * @since 1.5.0
  1725. *
  1726. * @global string $title
  1727. * @global array $menu
  1728. * @global array $submenu
  1729. * @global string $pagenow The filename of the current screen.
  1730. * @global string $typenow The post type of the current screen.
  1731. * @global string $plugin_page
  1732. *
  1733. * @return string The title of the current admin page.
  1734. */
  1735. function get_admin_page_title() {
  1736. global $title, $menu, $submenu, $pagenow, $typenow, $plugin_page;
  1737. if ( ! empty( $title ) ) {
  1738. return $title;
  1739. }
  1740. $hook = get_plugin_page_hook( $plugin_page, $pagenow );
  1741. $parent = get_admin_page_parent();
  1742. $parent1 = $parent;
  1743. if ( empty( $parent ) ) {
  1744. foreach ( (array) $menu as $menu_array ) {
  1745. if ( isset( $menu_array[3] ) ) {
  1746. if ( $menu_array[2] === $pagenow ) {
  1747. $title = $menu_array[3];
  1748. return $menu_array[3];
  1749. } elseif ( isset( $plugin_page ) && $plugin_page === $menu_array[2] && $hook === $menu_array[5] ) {
  1750. $title = $menu_array[3];
  1751. return $menu_array[3];
  1752. }
  1753. } else {
  1754. $title = $menu_array[0];
  1755. return $title;
  1756. }
  1757. }
  1758. } else {
  1759. foreach ( array_keys( $submenu ) as $parent ) {
  1760. foreach ( $submenu[ $parent ] as $submenu_array ) {
  1761. if ( isset( $plugin_page )
  1762. && $plugin_page === $submenu_array[2]
  1763. && ( $pagenow === $parent
  1764. || $plugin_page === $parent
  1765. || $plugin_page === $hook
  1766. || 'admin.php' === $pagenow && $parent1 !== $submenu_array[2]
  1767. || ! empty( $typenow ) && "$pagenow?post_type=$typenow" === $parent )
  1768. ) {
  1769. $title = $submenu_array[3];
  1770. return $submenu_array[3];
  1771. }
  1772. if ( $submenu_array[2] !== $pagenow || isset( $_GET['page'] ) ) { // Not the current page.
  1773. continue;
  1774. }
  1775. if ( isset( $submenu_array[3] ) ) {
  1776. $title = $submenu_array[3];
  1777. return $submenu_array[3];
  1778. } else {
  1779. $title = $submenu_array[0];
  1780. return $title;
  1781. }
  1782. }
  1783. }
  1784. if ( empty( $title ) ) {
  1785. foreach ( $menu as $menu_array ) {
  1786. if ( isset( $plugin_page )
  1787. && $plugin_page === $menu_array[2]
  1788. && 'admin.php' === $pagenow
  1789. && $parent1 === $menu_array[2]
  1790. ) {
  1791. $title = $menu_array[3];
  1792. return $menu_array[3];
  1793. }
  1794. }
  1795. }
  1796. }
  1797. return $title;
  1798. }
  1799. /**
  1800. * Gets the hook attached to the administrative page of a plugin.
  1801. *
  1802. * @since 1.5.0
  1803. *
  1804. * @param string $plugin_page The slug name of the plugin page.
  1805. * @param string $parent_page The slug name for the parent menu (or the file name of a standard
  1806. * WordPress admin page).
  1807. * @return string|null Hook attached to the plugin page, null otherwise.
  1808. */
  1809. function get_plugin_page_hook( $plugin_page, $parent_page ) {
  1810. $hook = get_plugin_page_hookname( $plugin_page, $parent_page );
  1811. if ( has_action( $hook ) ) {
  1812. return $hook;
  1813. } else {
  1814. return null;
  1815. }
  1816. }
  1817. /**
  1818. * Gets the hook name for the administrative page of a plugin.
  1819. *
  1820. * @since 1.5.0
  1821. *
  1822. * @global array $admin_page_hooks
  1823. *
  1824. * @param string $plugin_page The slug name of the plugin page.
  1825. * @param string $parent_page The slug name for the parent menu (or the file name of a standard
  1826. * WordPress admin page).
  1827. * @return string Hook name for the plugin page.
  1828. */
  1829. function get_plugin_page_hookname( $plugin_page, $parent_page ) {
  1830. global $admin_page_hooks;
  1831. $parent = get_admin_page_parent( $parent_page );
  1832. $page_type = 'admin';
  1833. if ( empty( $parent_page ) || 'admin.php' === $parent_page || isset( $admin_page_hooks[ $plugin_page ] ) ) {
  1834. if ( isset( $admin_page_hooks[ $plugin_page ] ) ) {
  1835. $page_type = 'toplevel';
  1836. } elseif ( isset( $admin_page_hooks[ $parent ] ) ) {
  1837. $page_type = $admin_page_hooks[ $parent ];
  1838. }
  1839. } elseif ( isset( $admin_page_hooks[ $parent ] ) ) {
  1840. $page_type = $admin_page_hooks[ $parent ];
  1841. }
  1842. $plugin_name = preg_replace( '!\.php!', '', $plugin_page );
  1843. return $page_type . '_page_' . $plugin_name;
  1844. }
  1845. /**
  1846. * Determines whether the current user can access the current admin page.
  1847. *
  1848. * @since 1.5.0
  1849. *
  1850. * @global string $pagenow The filename of the current screen.
  1851. * @global array $menu
  1852. * @global array $submenu
  1853. * @global array $_wp_menu_nopriv
  1854. * @global array $_wp_submenu_nopriv
  1855. * @global string $plugin_page
  1856. * @global array $_registered_pages
  1857. *
  1858. * @return bool True if the current user can access the admin page, false otherwise.
  1859. */
  1860. function user_can_access_admin_page() {
  1861. global $pagenow, $menu, $submenu, $_wp_menu_nopriv, $_wp_submenu_nopriv,
  1862. $plugin_page, $_registered_pages;
  1863. $parent = get_admin_page_parent();
  1864. if ( ! isset( $plugin_page ) && isset( $_wp_submenu_nopriv[ $parent ][ $pagenow ] ) ) {
  1865. return false;
  1866. }
  1867. if ( isset( $plugin_page ) ) {
  1868. if ( isset( $_wp_submenu_nopriv[ $parent ][ $plugin_page ] ) ) {
  1869. return false;
  1870. }
  1871. $hookname = get_plugin_page_hookname( $plugin_page, $parent );
  1872. if ( ! isset( $_registered_pages[ $hookname ] ) ) {
  1873. return false;
  1874. }
  1875. }
  1876. if ( empty( $parent ) ) {
  1877. if ( isset( $_wp_menu_nopriv[ $pagenow ] ) ) {
  1878. return false;
  1879. }
  1880. if ( isset( $_wp_submenu_nopriv[ $pagenow ][ $pagenow ] ) ) {
  1881. return false;
  1882. }
  1883. if ( isset( $plugin_page ) && isset( $_wp_submenu_nopriv[ $pagenow ][ $plugin_page ] ) ) {
  1884. return false;
  1885. }
  1886. if ( isset( $plugin_page ) && isset( $_wp_menu_nopriv[ $plugin_page ] ) ) {
  1887. return false;
  1888. }
  1889. foreach ( array_keys( $_wp_submenu_nopriv ) as $key ) {
  1890. if ( isset( $_wp_submenu_nopriv[ $key ][ $pagenow ] ) ) {
  1891. return false;
  1892. }
  1893. if ( isset( $plugin_page ) && isset( $_wp_submenu_nopriv[ $key ][ $plugin_page ] ) ) {
  1894. return false;
  1895. }
  1896. }
  1897. return true;
  1898. }
  1899. if ( isset( $plugin_page ) && $plugin_page === $parent && isset( $_wp_menu_nopriv[ $plugin_page ] ) ) {
  1900. return false;
  1901. }
  1902. if ( isset( $submenu[ $parent ] ) ) {
  1903. foreach ( $submenu[ $parent ] as $submenu_array ) {
  1904. if ( isset( $plugin_page ) && $submenu_array[2] === $plugin_page ) {
  1905. return current_user_can( $submenu_array[1] );
  1906. } elseif ( $submenu_array[2] === $pagenow ) {
  1907. return current_user_can( $submenu_array[1] );
  1908. }
  1909. }
  1910. }
  1911. foreach ( $menu as $menu_array ) {
  1912. if ( $menu_array[2] === $parent ) {
  1913. return current_user_can( $menu_array[1] );
  1914. }
  1915. }
  1916. return true;
  1917. }
  1918. /* Allowed list functions */
  1919. /**
  1920. * Refreshes the value of the allowed options list available via the 'allowed_options' hook.
  1921. *
  1922. * See the {@see 'allowed_options'} filter.
  1923. *
  1924. * @since 2.7.0
  1925. * @since 5.5.0 `$new_whitelist_options` was renamed to `$new_allowed_options`.
  1926. * Please consider writing more inclusive code.
  1927. *
  1928. * @global array $new_allowed_options
  1929. *
  1930. * @param array $options
  1931. * @return array
  1932. */
  1933. function option_update_filter( $options ) {
  1934. global $new_allowed_options;
  1935. if ( is_array( $new_allowed_options ) ) {
  1936. $options = add_allowed_options( $new_allowed_options, $options );
  1937. }
  1938. return $options;
  1939. }
  1940. /**
  1941. * Adds an array of options to the list of allowed options.
  1942. *
  1943. * @since 5.5.0
  1944. *
  1945. * @global array $allowed_options
  1946. *
  1947. * @param array $new_options
  1948. * @param string|array $options
  1949. * @return array
  1950. */
  1951. function add_allowed_options( $new_options, $options = '' ) {
  1952. if ( '' === $options ) {
  1953. global $allowed_options;
  1954. } else {
  1955. $allowed_options = $options;
  1956. }
  1957. foreach ( $new_options as $page => $keys ) {
  1958. foreach ( $keys as $key ) {
  1959. if ( ! isset( $allowed_options[ $page ] ) || ! is_array( $allowed_options[ $page ] ) ) {
  1960. $allowed_options[ $page ] = array();
  1961. $allowed_options[ $page ][] = $key;
  1962. } else {
  1963. $pos = array_search( $key, $allowed_options[ $page ], true );
  1964. if ( false === $pos ) {
  1965. $allowed_options[ $page ][] = $key;
  1966. }
  1967. }
  1968. }
  1969. }
  1970. return $allowed_options;
  1971. }
  1972. /**
  1973. * Removes a list of options from the allowed options list.
  1974. *
  1975. * @since 5.5.0
  1976. *
  1977. * @global array $allowed_options
  1978. *
  1979. * @param array $del_options
  1980. * @param string|array $options
  1981. * @return array
  1982. */
  1983. function remove_allowed_options( $del_options, $options = '' ) {
  1984. if ( '' === $options ) {
  1985. global $allowed_options;
  1986. } else {
  1987. $allowed_options = $options;
  1988. }
  1989. foreach ( $del_options as $page => $keys ) {
  1990. foreach ( $keys as $key ) {
  1991. if ( isset( $allowed_options[ $page ] ) && is_array( $allowed_options[ $page ] ) ) {
  1992. $pos = array_search( $key, $allowed_options[ $page ], true );
  1993. if ( false !== $pos ) {
  1994. unset( $allowed_options[ $page ][ $pos ] );
  1995. }
  1996. }
  1997. }
  1998. }
  1999. return $allowed_options;
  2000. }
  2001. /**
  2002. * Outputs nonce, action, and option_page fields for a settings page.
  2003. *
  2004. * @since 2.7.0
  2005. *
  2006. * @param string $option_group A settings group name. This should match the group name
  2007. * used in register_setting().
  2008. */
  2009. function settings_fields( $option_group ) {
  2010. echo "<input type='hidden' name='option_page' value='" . esc_attr( $option_group ) . "' />";
  2011. echo '<input type="hidden" name="action" value="update" />';
  2012. wp_nonce_field( "$option_group-options" );
  2013. }
  2014. /**
  2015. * Clears the plugins cache used by get_plugins() and by default, the plugin updates cache.
  2016. *
  2017. * @since 3.7.0
  2018. *
  2019. * @param bool $clear_update_cache Whether to clear the plugin updates cache. Default true.
  2020. */
  2021. function wp_clean_plugins_cache( $clear_update_cache = true ) {
  2022. if ( $clear_update_cache ) {
  2023. delete_site_transient( 'update_plugins' );
  2024. }
  2025. wp_cache_delete( 'plugins', 'plugins' );
  2026. }
  2027. /**
  2028. * Loads a given plugin attempt to generate errors.
  2029. *
  2030. * @since 3.0.0
  2031. * @since 4.4.0 Function was moved into the `wp-admin/includes/plugin.php` file.
  2032. *
  2033. * @param string $plugin Path to the plugin file relative to the plugins directory.
  2034. */
  2035. function plugin_sandbox_scrape( $plugin ) {
  2036. if ( ! defined( 'WP_SANDBOX_SCRAPING' ) ) {
  2037. define( 'WP_SANDBOX_SCRAPING', true );
  2038. }
  2039. wp_register_plugin_realpath( WP_PLUGIN_DIR . '/' . $plugin );
  2040. include_once WP_PLUGIN_DIR . '/' . $plugin;
  2041. }
  2042. /**
  2043. * Declares a helper function for adding content to the Privacy Policy Guide.
  2044. *
  2045. * Plugins and themes should suggest text for inclusion in the site's privacy policy.
  2046. * The suggested text should contain information about any functionality that affects user privacy,
  2047. * and will be shown on the Privacy Policy Guide screen.
  2048. *
  2049. * A plugin or theme can use this function multiple times as long as it will help to better present
  2050. * the suggested policy content. For example modular plugins such as WooCommerse or Jetpack
  2051. * can add or remove suggested content depending on the modules/extensions that are enabled.
  2052. * For more information see the Plugin Handbook:
  2053. * https://developer.wordpress.org/plugins/privacy/suggesting-text-for-the-site-privacy-policy/.
  2054. *
  2055. * The HTML contents of the `$policy_text` supports use of a specialized `.privacy-policy-tutorial`
  2056. * CSS class which can be used to provide supplemental information. Any content contained within
  2057. * HTML elements that have the `.privacy-policy-tutorial` CSS class applied will be omitted
  2058. * from the clipboard when the section content is copied.
  2059. *
  2060. * Intended for use with the `'admin_init'` action.
  2061. *
  2062. * @since 4.9.6
  2063. *
  2064. * @param string $plugin_name The name of the plugin or theme that is suggesting content
  2065. * for the site's privacy policy.
  2066. * @param string $policy_text The suggested content for inclusion in the policy.
  2067. */
  2068. function wp_add_privacy_policy_content( $plugin_name, $policy_text ) {
  2069. if ( ! is_admin() ) {
  2070. _doing_it_wrong(
  2071. __FUNCTION__,
  2072. sprintf(
  2073. /* translators: %s: admin_init */
  2074. __( 'The suggested privacy policy content should be added only in wp-admin by using the %s (or later) action.' ),
  2075. '<code>admin_init</code>'
  2076. ),
  2077. '4.9.7'
  2078. );
  2079. return;
  2080. } elseif ( ! doing_action( 'admin_init' ) && ! did_action( 'admin_init' ) ) {
  2081. _doing_it_wrong(
  2082. __FUNCTION__,
  2083. sprintf(
  2084. /* translators: %s: admin_init */
  2085. __( 'The suggested privacy policy content should be added by using the %s (or later) action. Please see the inline documentation.' ),
  2086. '<code>admin_init</code>'
  2087. ),
  2088. '4.9.7'
  2089. );
  2090. return;
  2091. }
  2092. if ( ! class_exists( 'WP_Privacy_Policy_Content' ) ) {
  2093. require_once ABSPATH . 'wp-admin/includes/class-wp-privacy-policy-content.php';
  2094. }
  2095. WP_Privacy_Policy_Content::add( $plugin_name, $policy_text );
  2096. }
  2097. /**
  2098. * Determines whether a plugin is technically active but was paused while
  2099. * loading.
  2100. *
  2101. * For more information on this and similar theme functions, check out
  2102. * the {@link https://developer.wordpress.org/themes/basics/conditional-tags/
  2103. * Conditional Tags} article in the Theme Developer Handbook.
  2104. *
  2105. * @since 5.2.0
  2106. *
  2107. * @param string $plugin Path to the plugin file relative to the plugins directory.
  2108. * @return bool True, if in the list of paused plugins. False, if not in the list.
  2109. */
  2110. function is_plugin_paused( $plugin ) {
  2111. if ( ! isset( $GLOBALS['_paused_plugins'] ) ) {
  2112. return false;
  2113. }
  2114. if ( ! is_plugin_active( $plugin ) ) {
  2115. return false;
  2116. }
  2117. list( $plugin ) = explode( '/', $plugin );
  2118. return array_key_exists( $plugin, $GLOBALS['_paused_plugins'] );
  2119. }
  2120. /**
  2121. * Gets the error that was recorded for a paused plugin.
  2122. *
  2123. * @since 5.2.0
  2124. *
  2125. * @param string $plugin Path to the plugin file relative to the plugins directory.
  2126. * @return array|false Array of error information as returned by `error_get_last()`,
  2127. * or false if none was recorded.
  2128. */
  2129. function wp_get_plugin_error( $plugin ) {
  2130. if ( ! isset( $GLOBALS['_paused_plugins'] ) ) {
  2131. return false;
  2132. }
  2133. list( $plugin ) = explode( '/', $plugin );
  2134. if ( ! array_key_exists( $plugin, $GLOBALS['_paused_plugins'] ) ) {
  2135. return false;
  2136. }
  2137. return $GLOBALS['_paused_plugins'][ $plugin ];
  2138. }
  2139. /**
  2140. * Tries to resume a single plugin.
  2141. *
  2142. * If a redirect was provided, we first ensure the plugin does not throw fatal
  2143. * errors anymore.
  2144. *
  2145. * The way it works is by setting the redirection to the error before trying to
  2146. * include the plugin file. If the plugin fails, then the redirection will not
  2147. * be overwritten with the success message and the plugin will not be resumed.
  2148. *
  2149. * @since 5.2.0
  2150. *
  2151. * @param string $plugin Single plugin to resume.
  2152. * @param string $redirect Optional. URL to redirect to. Default empty string.
  2153. * @return bool|WP_Error True on success, false if `$plugin` was not paused,
  2154. * `WP_Error` on failure.
  2155. */
  2156. function resume_plugin( $plugin, $redirect = '' ) {
  2157. /*
  2158. * We'll override this later if the plugin could be resumed without
  2159. * creating a fatal error.
  2160. */
  2161. if ( ! empty( $redirect ) ) {
  2162. wp_redirect(
  2163. add_query_arg(
  2164. '_error_nonce',
  2165. wp_create_nonce( 'plugin-resume-error_' . $plugin ),
  2166. $redirect
  2167. )
  2168. );
  2169. // Load the plugin to test whether it throws a fatal error.
  2170. ob_start();
  2171. plugin_sandbox_scrape( $plugin );
  2172. ob_clean();
  2173. }
  2174. list( $extension ) = explode( '/', $plugin );
  2175. $result = wp_paused_plugins()->delete( $extension );
  2176. if ( ! $result ) {
  2177. return new WP_Error(
  2178. 'could_not_resume_plugin',
  2179. __( 'Could not resume the plugin.' )
  2180. );
  2181. }
  2182. return true;
  2183. }
  2184. /**
  2185. * Renders an admin notice in case some plugins have been paused due to errors.
  2186. *
  2187. * @since 5.2.0
  2188. *
  2189. * @global string $pagenow The filename of the current screen.
  2190. */
  2191. function paused_plugins_notice() {
  2192. if ( 'plugins.php' === $GLOBALS['pagenow'] ) {
  2193. return;
  2194. }
  2195. if ( ! current_user_can( 'resume_plugins' ) ) {
  2196. return;
  2197. }
  2198. if ( ! isset( $GLOBALS['_paused_plugins'] ) || empty( $GLOBALS['_paused_plugins'] ) ) {
  2199. return;
  2200. }
  2201. printf(
  2202. '<div class="notice notice-error"><p><strong>%s</strong><br>%s</p><p><a href="%s">%s</a></p></div>',
  2203. __( 'One or more plugins failed to load properly.' ),
  2204. __( 'You can find more details and make changes on the Plugins screen.' ),
  2205. esc_url( admin_url( 'plugins.php?plugin_status=paused' ) ),
  2206. __( 'Go to the Plugins screen' )
  2207. );
  2208. }
  2209. /**
  2210. * Renders an admin notice when a plugin was deactivated during an update.
  2211. *
  2212. * Displays an admin notice in case a plugin has been deactivated during an
  2213. * upgrade due to incompatibility with the current version of WordPress.
  2214. *
  2215. * @since 5.8.0
  2216. * @access private
  2217. *
  2218. * @global string $pagenow The filename of the current screen.
  2219. * @global string $wp_version The WordPress version string.
  2220. */
  2221. function deactivated_plugins_notice() {
  2222. if ( 'plugins.php' === $GLOBALS['pagenow'] ) {
  2223. return;
  2224. }
  2225. if ( ! current_user_can( 'activate_plugins' ) ) {
  2226. return;
  2227. }
  2228. $blog_deactivated_plugins = get_option( 'wp_force_deactivated_plugins' );
  2229. $site_deactivated_plugins = array();
  2230. if ( false === $blog_deactivated_plugins ) {
  2231. // Option not in database, add an empty array to avoid extra DB queries on subsequent loads.
  2232. update_option( 'wp_force_deactivated_plugins', array() );
  2233. }
  2234. if ( is_multisite() ) {
  2235. $site_deactivated_plugins = get_site_option( 'wp_force_deactivated_plugins' );
  2236. if ( false === $site_deactivated_plugins ) {
  2237. // Option not in database, add an empty array to avoid extra DB queries on subsequent loads.
  2238. update_site_option( 'wp_force_deactivated_plugins', array() );
  2239. }
  2240. }
  2241. if ( empty( $blog_deactivated_plugins ) && empty( $site_deactivated_plugins ) ) {
  2242. // No deactivated plugins.
  2243. return;
  2244. }
  2245. $deactivated_plugins = array_merge( $blog_deactivated_plugins, $site_deactivated_plugins );
  2246. foreach ( $deactivated_plugins as $plugin ) {
  2247. if ( ! empty( $plugin['version_compatible'] ) && ! empty( $plugin['version_deactivated'] ) ) {
  2248. $explanation = sprintf(
  2249. /* translators: 1: Name of deactivated plugin, 2: Plugin version deactivated, 3: Current WP version, 4: Compatible plugin version. */
  2250. __( '%1$s %2$s was deactivated due to incompatibility with WordPress %3$s, please upgrade to %1$s %4$s or later.' ),
  2251. $plugin['plugin_name'],
  2252. $plugin['version_deactivated'],
  2253. $GLOBALS['wp_version'],
  2254. $plugin['version_compatible']
  2255. );
  2256. } else {
  2257. $explanation = sprintf(
  2258. /* translators: 1: Name of deactivated plugin, 2: Plugin version deactivated, 3: Current WP version. */
  2259. __( '%1$s %2$s was deactivated due to incompatibility with WordPress %3$s.' ),
  2260. $plugin['plugin_name'],
  2261. ! empty( $plugin['version_deactivated'] ) ? $plugin['version_deactivated'] : '',
  2262. $GLOBALS['wp_version'],
  2263. $plugin['version_compatible']
  2264. );
  2265. }
  2266. printf(
  2267. '<div class="notice notice-warning"><p><strong>%s</strong><br>%s</p><p><a href="%s">%s</a></p></div>',
  2268. sprintf(
  2269. /* translators: %s: Name of deactivated plugin. */
  2270. __( '%s plugin deactivated during WordPress upgrade.' ),
  2271. $plugin['plugin_name']
  2272. ),
  2273. $explanation,
  2274. esc_url( admin_url( 'plugins.php?plugin_status=inactive' ) ),
  2275. __( 'Go to the Plugins screen' )
  2276. );
  2277. }
  2278. // Empty the options.
  2279. update_option( 'wp_force_deactivated_plugins', array() );
  2280. if ( is_multisite() ) {
  2281. update_site_option( 'wp_force_deactivated_plugins', array() );
  2282. }
  2283. }