Ticket #43546: 43546.diff

src/wp-admin/privacy.php

@@ -13 +13 @@
         wp_die( __( 'Sorry, you are not allowed to manage privacy on this site.' ) );
 }
 
+// Collect all the export verification requests from the options and usermeta
+
+function _wp_privacy_get_all_personal_data_export_requests() {
+        global $wpdb;
+
+        $requests = array();
+
+        $registered_user_export_requests = $wpdb->get_results(
+                "SELECT * FROM $wpdb->usermeta WHERE meta_key LIKE '_account_action_%'",
+                ARRAY_A
+        );
+
+        foreach ( (array) $registered_user_export_requests as $export_request ) {
+                error_log( print_r( $export_request, true ) );
+
+                $user = get_user_by( 'id', $export_request['user_id'] );
+                // TODO handle user not found
+
+                $email    = $user->user_email;
+                $username = $user->user_login;
+                $details  = explode( ':', $export_request['meta_value'] );
+                // TODO handle malformed details
+
+                $requests[] = array(
+                        'email'     => $email,
+                        'requested' => $details[0],
+                        'verified'  => ''
+                );
+        }
+
+        $email_only_export_requests = $wpdb->get_results(
+                "SELECT * FROM $wpdb->options WHERE option_name LIKE '_account_action_%'",
+                ARRAY_A
+        );
+
+        foreach ( (array) $email_only_export_requests as $export_request ) {
+                $details  = explode( ':', $export_request['option_value'] );
+                // TODO handle malformed details
+
+                $requests[] = array(
+                        'email' => $details[2],
+                        'requested' => $details[0],
+                        'verified' => ''
+                );
+        }
+
+        return $requests;
+}
+
+global $export_requests;
+$export_requests = _wp_privacy_get_all_personal_data_export_requests();
+
+if ( ! class_exists( 'WP_List_Table' ) ) {
+        require_once( ABSPATH . 'wp-admin/includes/class-wp-list-table.php' );
+}
+
+// Build export request list table class here for now so we don't have to create new files
+
+class WP_Personal_Data_Export_Requests_Table extends WP_List_Table {
+        function get_columns() {
+                $columns = array(
+                        'email'     => __( 'Email' ),
+                        'requested' => __( 'Requested' ),
+                        'verified'  => __( 'Verified' ),
+                        'actions'   => __( 'Export File Actions' ),
+                );
+
+                return $columns;
+        }
+
+        function prepare_items() {
+                global $export_requests;
+
+                $columns = $this->get_columns();
+                $hidden = array();
+                $sortable = array();
+                $this->_column_headers = array( $columns, $hidden, $sortable );
+                $this->items = $export_requests;
+        }
+
+        function column_default( $item, $column_name ) {
+                $cell_value = $item[ $column_name ];
+
+                if ( in_array( $column_name, array( 'requested', 'verified' ) ) ) {
+                        if ( empty( $cell_value ) ) {
+                                return '-';
+                        }
+
+                        $time_diff = current_time( 'timestamp', true ) - $cell_value;
+                        if ( $time_diff > 0 && $time_diff < DAY_IN_SECONDS ) {
+                                return sprintf( __( '%s ago' ), human_time_diff( $cell_value ) );
+                        }
+
+                        return
+                                date( get_option( 'date_format' ), $cell_value ) .
+                                '<br>' .
+                                date( get_option( 'time_format' ), $cell_value );
+                }
+
+                if ( 'actions' === $column_name ) {
+                        return '<a href="#">Download</a> | <a href="#">Send via Email</a>';
+                }
+
+                return $cell_value;
+        }
+
+        function column_email( $item ) {
+                // TODO links, nonces
+
+                $actions = array(
+                        'resend'   => __( '<a href="#">Re-send verification email</a>' ),
+                        'delete'   => __( '<a href="#">Delete</a>' ),
+                );
+
+                return sprintf( '%1$s %2$s', $item['email'], $this->row_actions( $actions ) );
+        }
+}
+
+$personal_data_export_requests_table = new WP_Personal_Data_Export_Requests_Table();
+
 // "Borrow" xfn.js for now so we don't have to create new files.
 // wp_enqueue_script( 'xfn' );
 
+$doing_personal_data_export_for_email = '';
+
 $action = isset( $_POST['action'] ) ? $_POST['action'] : '';
 
 if ( ! empty( $action ) ) {
@@ -57 +179 @@
                                 'updated'
                         );
                 }
+        } elseif ( 'add-export-request' === $action ) {
+                $username_or_email_address = isset( $_POST['username_or_email_to_export'] ) ? $_POST['username_or_email_to_export'] : '';
+                $username_or_email_address = sanitize_text_field( $username_or_email_address );
+
+                if ( ! is_email( $username_or_email_address ) ) {
+                        $user = get_user_by( 'login', $username_or_email_address );
+                        if ( ! $user instanceof WP_User ) {
+                                add_settings_error(
+                                        'username_or_email_to_export',
+                                        'username_or_email_to_export',
+                                        __( 'Unable to add export request. A valid email address or username must be supplied.' ),
+                                        'error'
+                                );
+                        } else {
+                                $doing_personal_data_export_for_email = $user->user_email;
+                        }
+                } else {
+                        $doing_personal_data_export_for_email = $username_or_email_address;
+                }
+
+                if ( ! empty( $doing_personal_data_export_for_email ) ) {
+                        $result = send_confirm_account_action_email( 'export_personal_data', __( 'Export personal data' ), $doing_personal_data_export_for_email );
+                        if ( is_wp_error( $result ) || ! $result ) {
+                                add_settings_error(
+                                        'username_or_email_to_export',
+                                        'username_or_email_to_export',
+                                        __( 'Unable to initiate export verification request.' ),
+                                        'error'
+                                );
+                        } else {
+                                add_settings_error(
+                                        'username_or_email_to_export',
+                                        'username_or_email_to_export',
+                                        __( 'Export verification request initiated successfully.' ),
+                                        'updated'
+                                );
+
+                                // Re-fetch the requests since we just added one
+                                global $export_requests;
+                                $export_requests =_wp_privacy_get_all_personal_data_export_requests();
+                        }
+                }
         }
 }
 
@@ -195 +359 @@
 
                 ?>
         </table>
+
+        <h2><?php _e( 'Personal Data Export Requests' ); ?></h2>
+        <?php
+                $personal_data_export_requests_table->prepare_items();
+                $personal_data_export_requests_table->display();
+        ?>
+        <h3><?php _e( 'Add New Request' ); ?></h3>
+        <form method="post" action="">
+                <input type="hidden" name="action" value="add-export-request" />
+                <?php wp_nonce_field( 'add-export-request' ); ?>
+                <fieldset>
+                        <legend class="screen-reader-text"><span><?php _e( 'Enter the username or email address of the user whose personal data you wish to export.' ); ?></span></legend>
+                        <label for="username_or_email_to_export">
+                                <input type="text" class="regular-text" name="username_or_email_to_export" />
+                        </label>
+                        <p class="description"><?php _e( 'A verification email will be sent to the user at this email address, asking them to verify the request.' ); ?></p>
+                </fieldset>
+                <?php submit_button( __( 'Add New Request' ) ); ?>
+        </form>
 </div>
 
 <?php