Ticket #30245: 30245.3.diff
| File 30245.3.diff, 24.5 KB (added by , 10 years ago) |
|---|
-
src/wp-admin/includes/class-wp-upgrader-skins.php
28 28 } 29 29 30 30 public function set_upgrader(&$upgrader) { 31 31 if ( is_object($upgrader) ) 32 32 $this->upgrader =& $upgrader; 33 33 $this->add_strings(); 34 34 } 35 35 36 36 public function add_strings() { 37 37 } 38 38 39 39 public function set_result($result) { 40 40 $this->result = $result; 41 41 } 42 42 43 public function request_filesystem_credentials( $error = false) {43 public function request_filesystem_credentials( $error = false, $context = false, $allow_relaxed_file_ownership = false ) { 44 44 $url = $this->options['url']; 45 $context = $this->options['context']; 46 if ( !empty($this->options['nonce']) ) 45 if ( ! $context ) { 46 $context = $this->options['context']; 47 } 48 if ( !empty($this->options['nonce']) ) { 47 49 $url = wp_nonce_url($url, $this->options['nonce']); 48 return request_filesystem_credentials($url, '', $error, $context); //Possible to bring inline, Leaving as is for now. 50 } 51 52 $extra_fields = array(); 53 54 return request_filesystem_credentials( $url, '', $error, $context, $extra_fields, $allow_relaxed_file_ownership ); 49 55 } 50 56 51 57 public function header() { 52 58 if ( $this->done_header ) { 53 59 return; 54 60 } 55 61 $this->done_header = true; 56 62 echo '<div class="wrap">'; 57 63 echo '<h2>' . $this->options['title'] . '</h2>'; 58 64 } 59 65 public function footer() { 60 66 if ( $this->done_footer ) { 61 67 return; 62 68 } 63 69 $this->done_footer = true; … … 687 693 } 688 694 689 695 /** 690 696 * Upgrader Skin for Automatic WordPress Upgrades 691 697 * 692 698 * This skin is designed to be used when no output is intended, all output 693 699 * is captured and stored for the caller to process and log/email/discard. 694 700 * 695 701 * @package WordPress 696 702 * @subpackage Upgrader 697 703 * @since 3.7.0 698 704 */ 699 705 class Automatic_Upgrader_Skin extends WP_Upgrader_Skin { 700 706 protected $messages = array(); 701 707 702 public function request_filesystem_credentials( $error = false, $context = '' ) {703 if ( $context ) 708 public function request_filesystem_credentials( $error = false, $context = '', $allow_relaxed_file_ownership = false ) { 709 if ( $context ) { 704 710 $this->options['context'] = $context; 711 } 705 712 // TODO: fix up request_filesystem_credentials(), or split it, to allow us to request a no-output version 706 713 // This will output a credentials form in event of failure, We don't want that, so just hide with a buffer 707 714 ob_start(); 708 $result = parent::request_filesystem_credentials( $error );715 $result = parent::request_filesystem_credentials( $error, $context, $allow_relaxed_file_ownership ); 709 716 ob_end_clean(); 710 717 return $result; 711 718 } 712 719 713 720 public function get_upgrade_messages() { 714 721 return $this->messages; 715 722 } 716 723 717 724 public function feedback( $data ) { 718 725 if ( is_wp_error( $data ) ) 719 726 $string = $data->get_error_message(); 720 727 else if ( is_array( $data ) ) 721 728 return; 722 729 else 723 730 $string = $data; -
src/wp-admin/includes/class-wp-upgrader.php
14 14 require ABSPATH . 'wp-admin/includes/class-wp-upgrader-skins.php'; 15 15 16 16 /** 17 17 * WordPress Upgrader class for Upgrading/Installing a local set of files via the Filesystem Abstraction classes from a Zip file. 18 18 * 19 19 * @package WordPress 20 20 * @subpackage Upgrader 21 21 * @since 2.8.0 22 22 */ 23 23 class WP_Upgrader { 24 24 public $strings = array(); 25 25 public $skin = null; 26 26 public $result = array(); 27 27 public $update_count = 0; 28 28 public $update_current = 0; 29 public $using_relaxed_file_ownership = false; 29 30 30 31 public function __construct($skin = null) { 31 32 if ( null == $skin ) 32 33 $this->skin = new WP_Upgrader_Skin(); 33 34 else 34 35 $this->skin = $skin; 35 36 } 36 37 37 38 public function init() { 38 39 $this->skin->set_upgrader($this); 39 40 $this->generic_strings(); 40 41 } 41 42 42 43 public function generic_strings() { 43 44 $this->strings['bad_request'] = __('Invalid Data provided.'); … … 49 50 $this->strings['fs_no_themes_dir'] = __('Unable to locate WordPress Theme directory.'); 50 51 /* translators: %s: directory name */ 51 52 $this->strings['fs_no_folder'] = __('Unable to locate needed folder (%s).'); 52 53 53 54 $this->strings['download_failed'] = __('Download failed.'); 54 55 $this->strings['installing_package'] = __('Installing the latest version…'); 55 56 $this->strings['no_files'] = __('The package contains no files.'); 56 57 $this->strings['folder_exists'] = __('Destination folder already exists.'); 57 58 $this->strings['mkdir_failed'] = __('Could not create directory.'); 58 59 $this->strings['incompatible_archive'] = __('The package could not be installed.'); 59 60 60 61 $this->strings['maintenance_start'] = __('Enabling Maintenance mode…'); 61 62 $this->strings['maintenance_end'] = __('Disabling Maintenance mode…'); 62 63 } 63 64 64 public function fs_connect( $directories = array() ) {65 public function fs_connect( $directories = array(), $allow_relaxed_file_ownership = false ) { 65 66 global $wp_filesystem; 66 67 67 if ( false === ($credentials = $this->skin->request_filesystem_credentials()) ) 68 return false; 68 $this->using_relaxed_file_ownerhip = false; 69 if ( false === ( $credentials = $this->skin->request_filesystem_credentials( false, $directories[0] ) ) ) { 70 if ( ! $allow_relaxed_file_ownership || false === ( $credentials = $this->skin->request_filesystem_credentials( false, $directories[0], $allow_relaxed_file_ownership ) ) ) { 71 return false; 72 } 73 $this->using_relaxed_file_ownership = true; 74 } 69 75 70 if ( ! WP_Filesystem( $credentials) ) {76 if ( ! WP_Filesystem( $credentials, $directories[0], $allow_relaxed_file_ownership ) ) { 71 77 $error = true; 72 78 if ( is_object($wp_filesystem) && $wp_filesystem->errors->get_error_code() ) 73 79 $error = $wp_filesystem->errors; 74 $this->skin->request_filesystem_credentials($error); //Failed to connect, Error and request again 80 // Failed to connect, Error and request again 81 $this->skin->request_filesystem_credentials( $error, $directories[0], $allow_relaxed_file_ownership ); 75 82 return false; 76 83 } 77 84 78 85 if ( ! is_object($wp_filesystem) ) 79 86 return new WP_Error('fs_unavailable', $this->strings['fs_unavailable'] ); 80 87 81 88 if ( is_wp_error($wp_filesystem->errors) && $wp_filesystem->errors->get_error_code() ) 82 89 return new WP_Error('fs_error', $this->strings['fs_error'], $wp_filesystem->errors); 83 90 84 91 foreach ( (array)$directories as $dir ) { 85 92 switch ( $dir ) { 86 93 case ABSPATH: 87 94 if ( ! $wp_filesystem->abspath() ) 88 95 return new WP_Error('fs_no_root_dir', $this->strings['fs_no_root_dir']); 89 96 break; … … 1444 1451 $this->strings['start_rollback'] = __( 'Attempting to roll back to previous version.' ); 1445 1452 $this->strings['rollback_was_required'] = __( 'Due to an error during updating, WordPress has rolled back to your previous version.' ); 1446 1453 } 1447 1454 1448 1455 public function upgrade( $current, $args = array() ) { 1449 1456 global $wp_filesystem; 1450 1457 1451 1458 include( ABSPATH . WPINC . '/version.php' ); // $wp_version; 1452 1459 1453 1460 $start_time = time(); 1454 1461 1455 1462 $defaults = array( 1456 1463 'pre_check_md5' => true, 1457 1464 'attempt_rollback' => false, 1458 1465 'do_rollback' => false, 1466 'allow_relaxed_file_ownership' => false, 1459 1467 ); 1460 1468 $parsed_args = wp_parse_args( $args, $defaults ); 1461 1469 1462 1470 $this->init(); 1463 1471 $this->upgrade_strings(); 1464 1472 1465 1473 // Is an update available? 1466 1474 if ( !isset( $current->response ) || $current->response == 'latest' ) 1467 1475 return new WP_Error('up_to_date', $this->strings['up_to_date']); 1468 1476 1469 $res = $this->fs_connect( array( ABSPATH, WP_CONTENT_DIR));1477 $res = $this->fs_connect( array( ABSPATH, WP_CONTENT_DIR ), $parsed_args['allow_relaxed_file_ownership'] ); 1470 1478 if ( ! $res || is_wp_error( $res ) ) { 1471 1479 return $res; 1472 1480 } 1473 1481 1474 1482 $wp_dir = trailingslashit($wp_filesystem->abspath()); 1475 1483 1476 1484 $partial = true; 1477 1485 if ( $parsed_args['do_rollback'] ) 1478 1486 $partial = false; 1479 1487 elseif ( $parsed_args['pre_check_md5'] && ! $this->check_files() ) 1480 1488 $partial = false; 1481 1489 1490 // If we haven't done a pre-flight files check (which Background Updates don't do) and we're using relaxed file ownership 1491 // perform a files-exist check to avoid creating files owned by PHP 1492 if ( $this->using_relaxed_file_ownership && ! $parsed_args['pre_check_md5'] ) { 1493 if ( ! $this->check_files( $md5 = false ) ) { 1494 return new WP_Error( 'not_all_files_exist', 'not_all_files_exist???' ); // TODO STRINGS 1495 } 1496 } 1497 1482 1498 /* 1483 1499 * If partial update is returned from the API, use that, unless we're doing 1484 1500 * a reinstall. If we cross the new_bundled version number, then use 1485 1501 * the new_bundled zip. Don't though if the constant is set to skip bundled items. 1486 1502 * If the API returns a no_content zip, go with it. Finally, default to the full zip. 1487 1503 */ 1488 1504 if ( $parsed_args['do_rollback'] && $current->packages->rollback ) 1489 1505 $to_download = 'rollback'; 1490 1506 elseif ( $current->packages->partial && 'reinstall' != $current->response && $wp_version == $current->partial_version && $partial ) 1491 1507 $to_download = 'partial'; 1492 1508 elseif ( $current->packages->new_bundled && version_compare( $wp_version, $current->new_bundled, '<' ) 1493 1509 && ( ! defined( 'CORE_UPGRADE_SKIP_NEW_BUNDLED' ) || ! CORE_UPGRADE_SKIP_NEW_BUNDLED ) ) 1494 1510 $to_download = 'new_bundled'; 1495 1511 elseif ( $current->packages->no_content ) 1496 1512 $to_download = 'no_content'; … … 1679 1695 1680 1696 /** 1681 1697 * Filter whether to enable major automatic core updates. 1682 1698 * 1683 1699 * @since 3.7.0 1684 1700 * 1685 1701 * @param bool $upgrade_major Whether to enable major automatic core updates. 1686 1702 */ 1687 1703 return apply_filters( 'allow_major_auto_core_updates', $upgrade_major ); 1688 1704 } 1689 1705 1690 1706 // If we're not sure, we don't want it 1691 1707 return false; 1692 1708 } 1693 1709 1694 public function check_files( ) {1710 public function check_files( $check_md5 = true ) { 1695 1711 global $wp_version, $wp_local_package; 1696 1712 1697 1713 $checksums = get_core_checksums( $wp_version, isset( $wp_local_package ) ? $wp_local_package : 'en_US' ); 1698 1714 1699 1715 if ( ! is_array( $checksums ) ) 1700 1716 return false; 1701 1717 1702 1718 foreach ( $checksums as $file => $checksum ) { 1703 1719 // Skip files which get updated 1704 1720 if ( 'wp-content' == substr( $file, 0, 10 ) ) 1705 1721 continue; 1706 if ( ! file_exists( ABSPATH . $file ) || md5_file( ABSPATH . $file ) !== $checksum ) 1722 if ( ! file_exists( ABSPATH . $file ) ) { 1723 return false; 1724 } 1725 if ( $check_md5 && md5_file( ABSPATH . $file ) !== $checksum ) { 1707 1726 return false; 1727 } 1708 1728 } 1709 1729 1710 1730 return true; 1711 1731 } 1712 1732 } 1713 1733 1714 1734 /** 1715 1735 * Upgrade Skin helper for File uploads. This class handles the upload process and passes it as if it's a local file to the Upgrade/Installer functions. 1716 1736 * 1717 1737 * @package WordPress 1718 1738 * @subpackage Upgrader 1719 1739 * @since 2.8.0 1720 1740 */ 1721 1741 class File_Upload_Upgrader { 1722 1742 public $package; … … 1899 1919 * @since 3.7.0 1900 1920 * 1901 1921 * @param string $type The type of update being checked: 'core', 'theme', 1902 1922 * 'plugin', 'translation'. 1903 1923 * @param object $item The update offer. 1904 1924 * @param string $context The filesystem context (a path) against which filesystem 1905 1925 * access and status should be checked. 1906 1926 */ 1907 1927 public function should_update( $type, $item, $context ) { 1908 1928 // Used to see if WP_Filesystem is set up to allow unattended updates. 1909 1929 $skin = new Automatic_Upgrader_Skin; 1910 1930 1911 1931 if ( $this->is_disabled() ) 1912 1932 return false; 1913 1933 1934 // Only relax the filesystem checks when the update doesn't include new files 1935 $allow_relaxed_file_ownership = false; 1936 if ( 'core' == $type && isset( $item->new_files ) && ! $item->new_files ) { 1937 $allow_relaxed_file_ownership = true; 1938 } /* elseif ( 'translation' == $type && $translation_is_installed ) { 1939 $allow_relaxed_file_ownership = true; 1940 }*/ 1941 1914 1942 // If we can't do an auto core update, we may still be able to email the user. 1915 if ( ! $skin->request_filesystem_credentials( false, $context ) || $this->is_vcs_checkout( $context ) ) {1943 if ( ! $skin->request_filesystem_credentials( false, $context, $allow_relaxed_file_ownership ) || $this->is_vcs_checkout( $context ) ) { 1916 1944 if ( 'core' == $type ) 1917 1945 $this->send_core_update_notification_email( $item ); 1918 1946 return false; 1919 1947 } 1920 1948 1921 1949 // Next up, is this an item we can update? 1922 1950 if ( 'core' == $type ) 1923 1951 $update = Core_Upgrader::should_update_to_version( $item->current ); 1924 1952 else 1925 1953 $update = ! empty( $item->autoupdate ); 1926 1954 1927 1955 /** 1928 1956 * Filter whether to automatically update core, a plugin, a theme, or a language. 1929 1957 * 1930 1958 * The dynamic portion of the hook name, $type, refers to the type of update … … 2060 2088 $skin->feedback( __( 'Updating theme: %s' ), $item_name ); 2061 2089 break; 2062 2090 case 'plugin': 2063 2091 $upgrader_item = $item->plugin; 2064 2092 $plugin_data = get_plugin_data( $context . '/' . $upgrader_item ); 2065 2093 $item_name = $plugin_data['Name']; 2066 2094 $skin->feedback( __( 'Updating plugin: %s' ), $item_name ); 2067 2095 break; 2068 2096 case 'translation': 2069 2097 $language_item_name = $upgrader->get_name_for_update( $item ); 2070 2098 $item_name = sprintf( __( 'Translations for %s' ), $language_item_name ); 2071 2099 $skin->feedback( sprintf( __( 'Updating translations for %1$s (%2$s)…' ), $language_item_name, $item->language ) ); 2072 2100 break; 2073 2101 } 2074 2102 2103 $allow_relaxed_file_ownership = false; 2104 if ( 'core' == $type && isset( $item->new_files ) && ! $item->new_files ) { 2105 $allow_relaxed_file_ownership = true; 2106 }/* elseif ( 'translation' == $type && $translation_is_installed ) { 2107 $allow_relaxed_file_ownership = true; 2108 }*/ 2109 2075 2110 // Boom, This sites about to get a whole new splash of paint! 2076 2111 $upgrade_result = $upgrader->upgrade( $upgrader_item, array( 2077 2112 'clear_update_cache' => false, 2078 2113 // Always use partial builds if possible for core updates. 2079 2114 'pre_check_md5' => false, 2080 2115 // Only available for core updates. 2081 2116 'attempt_rollback' => true, 2117 // Allow relaxed file ownership in some scenarios 2118 'allow_relaxed_file_ownership' => $allow_relaxed_file_ownership, 2119 2082 2120 ) ); 2083 2121 2084 2122 // If the filesystem is unavailable, false is returned. 2085 2123 if ( false === $upgrade_result ) { 2086 2124 $upgrade_result = new WP_Error( 'fs_unavailable', __( 'Could not access filesystem.' ) ); 2087 2125 } 2088 2126 2089 2127 // Core doesn't output this, so lets append it so we don't get confused. 2090 2128 if ( 'core' == $type ) { 2091 2129 if ( is_wp_error( $upgrade_result ) ) { 2092 2130 $skin->error( __( 'Installation Failed' ), $upgrade_result ); 2093 2131 } else { 2094 2132 $skin->feedback( __( 'WordPress updated successfully' ) ); 2095 2133 } 2096 2134 } -
src/wp-admin/includes/file.php
797 797 } 798 798 } 799 799 return true; 800 800 } 801 801 802 802 /** 803 803 * Initialises and connects the WordPress Filesystem Abstraction classes. 804 804 * This function will include the chosen transport and attempt connecting. 805 805 * 806 806 * Plugins may add extra transports, And force WordPress to use them by returning the filename via the 'filesystem_method_file' filter. 807 807 * 808 808 * @since 2.5.0 809 809 * 810 810 * @param array $args (optional) Connection args, These are passed directly to the WP_Filesystem_*() classes. 811 811 * @param string $context (optional) Context for get_filesystem_method(), See function declaration for more information. 812 * @param bool $allow_relaxed_file_ownership Whether to allow Group/World writable. 812 813 * @return null|boolean false on failure, true on success 813 814 */ 814 function WP_Filesystem( $args = false, $context = false ) {815 function WP_Filesystem( $args = false, $context = false, $allow_relaxed_file_ownership = false ) { 815 816 global $wp_filesystem; 816 817 817 818 require_once(ABSPATH . 'wp-admin/includes/class-wp-filesystem-base.php'); 818 819 819 $method = get_filesystem_method( $args, $context);820 $method = get_filesystem_method( $args, $context, $allow_relaxed_file_ownership ); 820 821 821 822 if ( ! $method ) 822 823 return false; 823 824 824 825 if ( ! class_exists("WP_Filesystem_$method") ) { 825 826 826 827 /** 827 828 * Filter the path for a specific filesystem method class file. 828 829 * 829 830 * @since 2.6.0 830 831 * 831 832 * @see get_filesystem_method() 832 833 * 833 834 * @param string $path Path to the specific filesystem method class file. 834 835 * @param string $method The filesystem method to use. … … 867 868 868 869 /** 869 870 * Determines which Filesystem Method to use. 870 871 * The priority of the Transports are: Direct, SSH2, FTP PHP Extension, FTP Sockets (Via Sockets class, or fsockopen()) 871 872 * 872 873 * Note that the return value of this function can be overridden in 2 ways 873 874 * - By defining FS_METHOD in your <code>wp-config.php</code> file 874 875 * - By using the filesystem_method filter 875 876 * Valid values for these are: 'direct', 'ssh2', 'ftpext' or 'ftpsockets' 876 877 * Plugins may also define a custom transport handler, See the WP_Filesystem function for more information. 877 878 * 878 879 * @since 2.5.0 879 880 * 880 881 * @param array $args Connection details. 881 882 * @param string $context Full path to the directory that is tested for being writable. 883 * @param bool $allow_relaxed_file_ownership Whether to allow Group/World writable. 882 884 * @return string The transport to use, see description for valid return values. 883 885 */ 884 function get_filesystem_method( $args = array(), $context = false) {886 function get_filesystem_method( $args = array(), $context = false, $allow_relaxed_file_ownership = false ) { 885 887 $method = defined('FS_METHOD') ? FS_METHOD : false; // Please ensure that this is either 'direct', 'ssh2', 'ftpext' or 'ftpsockets' 886 888 887 if ( ! $method && function_exists('getmyuid') && function_exists('fileowner') ){888 if ( !$context ) 889 if ( ! $method ) { 890 if ( !$context ) { 889 891 $context = WP_CONTENT_DIR; 892 } 890 893 891 894 // If the directory doesn't exist (wp-content/languages) then use the parent directory as we'll create it. 892 if ( WP_LANG_DIR == $context && ! is_dir( $context ) ) 895 if ( WP_LANG_DIR == $context && ! is_dir( $context ) ) { 893 896 $context = dirname( $context ); 897 } 894 898 895 899 $context = trailingslashit($context); 900 896 901 $temp_file_name = $context . 'temp-write-test-' . time(); 897 902 $temp_handle = @fopen($temp_file_name, 'w'); 898 903 if ( $temp_handle ) { 899 if ( getmyuid() == @fileowner($temp_file_name) ) 904 /** 905 * getmyuid() will return the User ID of the current script, equiv to fileowner( __FILE__ ). 906 * getmygid() will return the Group ID of the current script, equiv to filegroup( __FILE__ ). 907 * 908 * The below tests are used to select the appropriate WP_Filesystem_* class, allowing for 909 * created files to be owned by the correct user. If no new files are being created, then 910 * group / world writable is enough to modify core files. 911 */ 912 913 $owner_writable_functions_exist = function_exists('getmyuid') && function_exists('fileowner'); 914 $group_writable_functions_exist = function_exists('getmygid') && function_exists('filegroup'); 915 916 if ( $owner_writable_functions_exist && getmyuid() == @fileowner( $temp_file_name ) ) { 917 $method = 'direct'; 918 } elseif ( $allow_relaxed_file_ownership && $group_writable_functions_exist && getmygid() === @filegroup( $temp_file_name ) ) { 900 919 $method = 'direct'; 920 } elseif ( $allow_relaxed_file_ownership ) { 921 // wp_is_writable( $context ) is assumed based on fopen() suceeding. 922 $method = 'direct'; 923 } 901 924 @fclose($temp_handle); 902 925 @unlink($temp_file_name); 903 926 } 904 927 } 905 928 906 929 if ( ! $method && isset($args['connection_type']) && 'ssh' == $args['connection_type'] && extension_loaded('ssh2') && function_exists('stream_get_contents') ) $method = 'ssh2'; 907 930 if ( ! $method && extension_loaded('ftp') ) $method = 'ftpext'; 908 931 if ( ! $method && ( extension_loaded('sockets') || function_exists('fsockopen') ) ) $method = 'ftpsockets'; //Sockets: Socket extension; PHP Mode: FSockopen / fwrite / fread 909 932 910 933 /** 911 934 * Filter the filesystem method to use. 912 935 * 913 936 * @since 2.6.0 914 937 * 915 938 * @param string $method Filesystem method to return. … … 921 944 /** 922 945 * Displays a form to the user to request for their FTP/SSH details in order to connect to the filesystem. 923 946 * All chosen/entered details are saved, Excluding the Password. 924 947 * 925 948 * Hostnames may be in the form of hostname:portnumber (eg: wordpress.org:2467) to specify an alternate FTP/SSH port. 926 949 * 927 950 * Plugins may override this form by returning true|false via the <code>request_filesystem_credentials</code> filter. 928 951 * 929 952 * @since 2.5.0 930 953 * 931 954 * @param string $form_post the URL to post the form to 932 955 * @param string $type the chosen Filesystem method in use 933 956 * @param boolean $error if the current request has failed to connect 934 957 * @param string $context The directory which is needed access to, The write-test will be performed on this directory by get_filesystem_method() 935 958 * @param string $extra_fields Extra POST fields which should be checked for to be included in the post. 959 * @param bool $allow_relaxed_file_ownership Whether to allow Group/World writable. 936 960 * @return boolean False on failure. True on success. 937 961 */ 938 function request_filesystem_credentials($form_post, $type = '', $error = false, $context = false, $extra_fields = null ) {962 function request_filesystem_credentials($form_post, $type = '', $error = false, $context = false, $extra_fields = null, $allow_relaxed_file_ownership = false ) { 939 963 940 964 /** 941 965 * Filter the filesystem credentials form output. 942 966 * 943 967 * Returning anything other than an empty string will effectively short-circuit 944 968 * output of the filesystem credentials form, returning that value instead. 945 969 * 946 970 * @since 2.5.0 947 971 * 948 972 * @param mixed $output Form output to return instead. Default empty. 949 973 * @param string $form_post URL to POST the form to. 950 974 * @param string $type Chosen type of filesystem. 951 975 * @param bool $error Whether the current request has failed to connect. 952 976 * Default false. 953 977 * @param string $context Full path to the directory that is tested for 954 978 * being writable. 979 * @param bool $allow_relaxed_file_ownership Whether to allow Group/World writable. 955 980 * @param array $extra_fields Extra POST fields. 956 981 */ 957 $req_cred = apply_filters( 'request_filesystem_credentials', '', $form_post, $type, $error, $context, $extra_fields );982 $req_cred = apply_filters( 'request_filesystem_credentials', '', $form_post, $type, $error, $context, $extra_fields, $allow_relaxed_file_ownership ); 958 983 if ( '' !== $req_cred ) 959 984 return $req_cred; 960 985 961 if ( empty($type) ) 962 $type = get_filesystem_method(array(), $context); 986 if ( empty($type) ) { 987 $type = get_filesystem_method( array(), $context, $allow_relaxed_file_ownership ); 988 } 963 989 964 990 if ( 'direct' == $type ) 965 991 return true; 966 992 967 993 if ( is_null( $extra_fields ) ) 968 994 $extra_fields = array( 'version', 'locale' ); 969 995 970 996 $credentials = get_option('ftp_credentials', array( 'hostname' => '', 'username' => '')); 971 997 972 998 // If defined, set it to that, Else, If POST'd, set it to that, If not, Set it to whatever it previously was(saved details in option) 973 999 $credentials['hostname'] = defined('FTP_HOST') ? FTP_HOST : (!empty($_POST['hostname']) ? wp_unslash( $_POST['hostname'] ) : $credentials['hostname']); 974 1000 $credentials['username'] = defined('FTP_USER') ? FTP_USER : (!empty($_POST['username']) ? wp_unslash( $_POST['username'] ) : $credentials['username']); 975 1001 $credentials['password'] = defined('FTP_PASS') ? FTP_PASS : (!empty($_POST['password']) ? wp_unslash( $_POST['password'] ) : ''); 976 1002 977 1003 // Check to see if we are setting the public/private keys for ssh -
src/wp-includes/update.php
130 130 return false; 131 131 132 132 $offers = $body['offers']; 133 133 134 134 foreach ( $offers as &$offer ) { 135 135 foreach ( $offer as $offer_key => $value ) { 136 136 if ( 'packages' == $offer_key ) 137 137 $offer['packages'] = (object) array_intersect_key( array_map( 'esc_url', $offer['packages'] ), 138 138 array_fill_keys( array( 'full', 'no_content', 'new_bundled', 'partial', 'rollback' ), '' ) ); 139 139 elseif ( 'download' == $offer_key ) 140 140 $offer['download'] = esc_url( $value ); 141 141 else 142 142 $offer[ $offer_key ] = esc_html( $value ); 143 143 } 144 144 $offer = (object) array_intersect_key( $offer, array_fill_keys( array( 'response', 'download', 'locale', 145 'packages', 'current', 'version', 'php_version', 'mysql_version', 'new_bundled', 'partial_version', 'notify_email', 'support_email' ), '' ) );145 'packages', 'current', 'version', 'php_version', 'mysql_version', 'new_bundled', 'partial_version', 'notify_email', 'support_email', 'new_files' ), '' ) ); 146 146 } 147 147 148 148 $updates = new stdClass(); 149 149 $updates->updates = $offers; 150 150 $updates->last_checked = time(); 151 151 $updates->version_checked = $wp_version; 152 152 153 153 if ( isset( $body['translations'] ) ) 154 154 $updates->translations = $body['translations']; 155 155 156 156 set_site_transient( 'update_core', $updates ); 157 157 158 158 if ( ! empty( $body['ttl'] ) ) { 159 159 $ttl = (int) $body['ttl']; 160 160 if ( $ttl && ( time() + $ttl < wp_next_scheduled( 'wp_version_check' ) ) ) {