Ticket #41191: 41191.5.diff

src/wp-admin/css/dashboard.css

@@ -1116 +1116 @@
         font-size: 16px;
 }
 
+/* PHP Nag */
+#dashboard_php_nag h2.hndle {
+        border-left: 4px solid #dc3232;
+}
+
+#dashboard_php_nag h3 {
+        font-weight: 600;
+}
+
+#dashboard_php_nag .notice-upgrade-button-wrap {
+        text-align: center;
+}
+
+#dashboard_php_nag .button.button-hero.notice-upgrade-button {
+        display: block;
+        margin-bottom: 1em;
+        text-align: center;
+}
+
 /* =Media Queries
 -------------------------------------------------------------- */
 

src/wp-admin/includes/dashboard.php

@@ -35 +35 @@
                 }
         }
 
+        // PHP Version
+        $response = wp_check_php_version();
+        if ( $response && ! $response['is_acceptable'] && current_user_can( 'upgrade_php' ) ) {
+                $title = ! $response['is_secure'] ? __( 'Your site could be much faster and more secure!' ) : __( 'Your site could be much faster!' );
+                wp_add_dashboard_widget( 'dashboard_php_nag', $title, 'wp_dashboard_php_nag' );
+        }
+
         // Right Now
         if ( is_blog_admin() && current_user_can( 'edit_posts' ) ) {
                 wp_add_dashboard_widget( 'dashboard_right_now', __( 'At a Glance' ), 'wp_dashboard_right_now' );
@@ -1600 +1607 @@
 }
 
 /**
+ * Displays the PHP upgrade nag.
+ *
+ * @since 5.0.0
+ */
+function wp_dashboard_php_nag() {
+        $response = wp_check_php_version();
+
+        if ( ! $response ) {
+                return;
+        }
+
+        $information_url = _x( 'https://wordpress.org/support/upgrade-php/', 'localized PHP upgrade information page' );
+
+        /**
+         * Filters the URL to environment-specific instructions on how to upgrade the PHP version.
+         *
+         * By default, no such URL is provided.
+         *
+         * @since 5.0.0
+         *
+         * @param string $update_url PHP version upgrade URL. Default empty string.
+         */
+        $update_url = apply_filters( 'php_update_url', '' );
+
+        $msg = __( 'Hi, it's your friends at WordPress here.' );
+        if ( ! $response['is_secure'] ) {
+                $msg .= ' ' . __( 'We noticed that your site is running on an insecure version of PHP, which is why we're showing you this notice.' );
+        } else {
+                $msg .= ' ' . __( 'We noticed that your site is running on an outdated version of PHP, which is why we're showing you this notice.' );
+        }
+
+        ?>
+        <p><?php echo $msg; ?></p>
+
+        <h3><?php _e( 'What is PHP and why should I care?' ); ?></h3>
+        <p><?php _e( 'PHP is the programming language that WordPress is built on. Newer versions of PHP are both faster and more secure, so upgrading is better for your site, and better for the people who are building WordPress.' ); ?></p>
+        <p><?php _e( 'If you want to know exactly how PHP works and why it is important, continue reading.' ); ?></p>
+
+        <h3><?php _e( 'Okay, how do I update?' ); ?></h3>
+        <p><?php _e( 'The button below will take you to a page with more details on what PHP is, how to upgrade your PHP version, and what to do if it turns out you can&apos;t.' ); ?></p>
+        <p class="notice-upgrade-button-wrap">
+                <?php if ( ! empty( $update_url ) ) : ?>
+                        <a class="notice-upgrade-button button button-primary button-hero" href="<?php echo esc_url( $information_url ); ?>"><?php _e( 'Learn more about upgrading PHP' ); ?></a>
+                        <a href="<?php echo esc_url( $update_url ); ?>"><?php _e( 'or upgrade right away' ); ?></a>
+                <?php else : ?>
+                        <a class="notice-upgrade-button button button-primary button-hero" href="<?php echo esc_url( $information_url ); ?>"><?php _e( 'Show me how to upgrade my PHP' ); ?></a>
+                <?php endif; ?>
+        </p>
+
+        <h3><?php _e( 'Thank you for taking the time to read this!' ); ?></h3>
+        <p><?php _e( 'If you follow the instructions we&apos;ve provided to the letter, upgrading shouldn&apos;t take more than a few minutes, and it is generally very safe to do.' ); ?></p>
+        <p><?php _e( 'Good luck and happy blogging!' ); ?></p>
+        <?php
+}
+
+/**
+ * Checks if the user needs to upgrade PHP.
+ *
+ * @since 5.0.0
+ *
+ * @return array Array of PHP version data.
+ */
+function wp_check_php_version() {
+        $version = phpversion();
+        $key     = md5( $version );
+
+        $response = get_site_transient( 'php_check_' . $key );
+        if ( false === $response ) {
+                $url = 'http://api.wordpress.org/core/serve-happy/1.0/';
+                if ( wp_http_supports( array( 'ssl' ) ) ) {
+                        $url = set_url_scheme( $url, 'https' );
+                }
+
+                $url = add_query_arg( 'php_version', $version, $url );
+
+                $response = wp_remote_get( $url );
+
+                if ( is_wp_error( $response ) || 200 != wp_remote_retrieve_response_code( $response ) ) {
+                        return false;
+                }
+
+                /**
+                 * Response should be an array with:
+                 *  'recommended_version' - string - The PHP version recommended by WordPress
+                 *  'is_supported' - boolean - Whether the PHP version is actively supported
+                 *  'is_secure' - boolean - Whether the PHP version receives security updates
+                 *  'is_acceptable' - boolean - Whether the PHP version is still acceptable for WordPress
+                 */
+                $response = json_decode( wp_remote_retrieve_body( $response ), true );
+
+                if ( ! is_array( $response ) ) {
+                        return false;
+                }
+
+                set_site_transient( 'php_check_' . $key, $response, WEEK_IN_SECONDS );
+        }
+
+        return $response;
+}
+
+/**
  * Empty function usable by plugins to output empty dashboard widget (to be populated later by JS).
  */
 function wp_dashboard_empty() {}

src/wp-includes/capabilities.php

@@ -550 +550 @@
                                 $caps[] = 'manage_options';
                         }
                         break;
+                case 'upgrade_php':
+                        if ( is_multisite() && ! is_super_admin( $user_id ) ) {
+                                $caps[] = 'do_not_allow';
+                        } else {
+                                $caps[] = 'update_core';
+                        }
+                        break;
                 default:
                         // Handle meta capabilities for custom post types.
                         global $post_type_meta_caps;