Ticket #29046: 29046.diff

src/wp-admin/includes/update.php

@@ -196 +196 @@
 
         global $pagenow;
 
+        $plugin_needs_update = maybe_unserialize( get_site_transient('update_plugins'));
+        foreach( $plugin_needs_update->response as $plugins => $plugin_slugs ) {
+                $plugin_slug =  $plugin_slugs->slug;
+                $url = $http_url = 'http://api.wordpress.org/plugins/info/1.0/';
+                if ( $ssl = wp_http_supports( array( 'ssl' ) ) )
+                        $url = set_url_scheme( $url, 'https' );
+                // Check the Plugin repo for plugin information
+                $request = wp_remote_post( $url . $plugin_slug );
+                $res = maybe_unserialize( wp_remote_retrieve_body( $request ) );
+                // Check for the "security-update" tag on the .org repo
+                if( isset( $res->tags['security-update'] ) ) {
+                        $plugin_security_update = $res->tags['security-update'];
+                }
+        }
+
         if ( 'update-core.php' == $pagenow )
                 return;
 
         $cur = get_preferred_from_update_core();
 
-        if ( ! isset( $cur->response ) || $cur->response != 'upgrade' )
-                return false;
-
-        if ( current_user_can('update_core') ) {
-                $msg = sprintf( __('<a href="http://codex.wordpress.org/Version_%1$s">WordPress %1$s</a> is available! <a href="%2$s">Please update now</a>.'), $cur->current, network_admin_url( 'update-core.php' ) );
+        if ( isset( $cur->response ) || $cur->response == 'upgrade' ) {
+                if ( current_user_can('update_core') ) {
+                        $msg = sprintf( __('<a href="http://codex.wordpress.org/Version_%1$s">WordPress %1$s</a> is available! <a href="%2$s">Please update now</a>.'), $cur->current, network_admin_url( 'update-core.php' ) );
+                } else {
+                        $msg = sprintf( __('<a href="http://codex.wordpress.org/Version_%1$s">WordPress %1$s</a> is available! Please notify the site administrator.'), $cur->current );
+                        echo "<div class='update-nag'>$msg</div>";
+                }
         } else {
-                $msg = sprintf( __('<a href="http://codex.wordpress.org/Version_%1$s">WordPress %1$s</a> is available! Please notify the site administrator.'), $cur->current );
+                return;
         }
-        echo "<div class='update-nag'>$msg</div>";
+
+        if ( isset( $plugin_security_update ) && $plugin_security_update == 'security-update' ) {
+                if ( current_user_can( 'update_plugins' ) ) {
+                        $msg = sprintf( __('A plugin you have installed has issued a security release. <a href="%1$s">Please update now.</a>'), network_admin_url( 'update-core.php' ) );
+                        echo "<div class='update-nag'>$msg</div>";
+                } else {
+                        return;
+                }
+        }
 }
 add_action( 'admin_notices', 'update_nag', 3 );
 add_action( 'network_admin_notices', 'update_nag', 3 );