Ticket #43437: 43437.diff

wp-admin/includes/user.php

@@ -750 +750 @@
         }
 }
 
+/**
+ * Handle profile page actions.
+ *
+ * @since
+ * @access private
+ */
+function _wp_personal_data_handle_profile_actions() {
+
+        if ( isset( $_POST['wp-user-data-request'] ) ) {
+
+                check_admin_referer( 'user-data-request', '_user_data_request_nonce' );
+
+                $action_type    = sanitize_text_field( wp_unslash( $_POST['wp-user-data-request'] ) );
+                $email_address  = sanitize_text_field( wp_unslash( $_POST['email'] ) );
+
+                if ( ! in_array( $action_type, _wp_privacy_action_request_types(), true ) ) {
+                        add_settings_error(
+                                'action_type',
+                                'action_type',
+                                __( 'Invalid action.' ),
+                                'error'
+                        );
+                }
+
+                $request_id = wp_create_user_request( $email_address, $action_type );
+
+                if ( is_wp_error( $request_id ) ) {
+                        add_settings_error(
+                                'user_profile_privacy_request',
+                                'user_profile_privacy_request',
+                                $request_id->get_error_message(),
+                                'error'
+                        );
+                        return;
+                } elseif ( ! $request_id ) {
+                        add_settings_error(
+                                'user_profile_privacy_request',
+                                'user_profile_privacy_request',
+                                __( 'Unable to initiate confirmation request.' ),
+                                'error'
+                        );
+                        return;
+                }
+
+                wp_send_user_request( $request_id );
+                /*
+                add_settings_error(
+                        'username_or_email_for_privacy_request',
+                        'username_or_email_for_privacy_request',
+                        __( 'Confirmation request initiated successfully.' ),
+                        'updated'
+                );
+                */
+                wp_redirect( add_query_arg( array( 'updated' => 1, 'data-request' => 1 ), self_admin_url( 'profile.php' ) ) );
+                exit;
+        }
+}
+
 /**
  * Cleans up failed and expired requests before displaying the list table.
  *

wp-admin/user-edit.php

@@ -93 +93 @@
         wp_die( __( 'Sorry, you are not allowed to edit this user.' ) );
 }
 
+// Check for the data export or delete requests.
+if ( IS_PROFILE_PAGE ) {
+        _wp_personal_data_handle_profile_actions();
+}
+
 // Execute confirmed email change. See send_confirmation_on_profile_email().
 if ( IS_PROFILE_PAGE && isset( $_GET['newuseremail'] ) && $current_user->ID ) {
         $new_email = get_user_meta( $current_user->ID, '_new_email', true );
@@ -683 +688 @@
         </tr>
 <?php endif; ?>
 
+<?php if ( IS_PROFILE_PAGE ) : ?>
+        <tr class="data-management-wrap">
+                <th><label><?php _e( 'Data Management' ); ?></label></th>
+                <td>
+                        <button type="submit" class="button" id="wp-export-data" name="wp-user-data-request" value="export_personal_data"><?php _e( 'Export My Data' ); ?></button>
+                        <button type="submit" class="button" id="wp-delete-account" name="wp-user-data-request" value="remove_personal_data"><?php _e( 'Delete My Account' ); ?></button>
+                        <?php wp_nonce_field( 'user-data-request', '_user_data_request_nonce' ); ?>
+                </td>
+        </tr>
+<?php endif; ?>
+
         </table>
 
                 <?php