Ticket #43992: 43992-3.diff

src/wp-admin/includes/plugin.php

@@ -31 +31 @@
  *     Network: Optional. Specify "Network: true" to require that a plugin is activated
  *          across all sites in an installation. This will prevent a plugin from being
  *          activated on a single site when Multisite is enabled.
+ *     Requires WP: Optional. Specify the minimum required WordPress version.
+ *     Requires PHP: Optional. Specify the minimum required PHP version.
  *      * / # Remove the space to close comment
  *
  * Some users have issues with opening large files and manipulating the contents
@@ -63 +65 @@
  *     @type string $TextDomain  Plugin textdomain.
  *     @type string $DomainPath  Plugins relative directory path to .mo files.
  *     @type bool   $Network     Whether the plugin can only be activated network-wide.
+ *     @type string $RequiresWP  Minimum required version of WordPress.
+ *     @type string $RequiresPHP Minimum required version of PHP.
+
  * }
  */
 function get_plugin_data( $plugin_file, $markup = true, $translate = true ) {
@@ -77 +82 @@
                 'TextDomain'  => 'Text Domain',
                 'DomainPath'  => 'Domain Path',
                 'Network'     => 'Network',
+                'RequiresWP'  => 'Requires WP',
+                'RequiresPHP' => 'Requires PHP',
                 // Site Wide Only is deprecated in favor of Network.
                 '_sitewide'   => 'Site Wide Only',
         );
@@ -189 +196 @@
         return $plugin_data;
 }
 
+/**
+ * Query the Plugin API to get and return plugin data.
+ *
+ * Alternately see if a plugin header `Requires WP` or `Requires PHP` exists and use that if there's no API response.
+ *
+ * @since 5.1.0
+ * @see validate_plugin_requirements()
+ *
+ * @param string $plugin Path to the plugin file relative to the plugins directory.
+ *
+ * @return array $plugin_data Array of Plugin API data.
+ */
+function get_plugin_api_data( $plugin_file ) {
+        $plugin_data = new stdClass();
+        $url         = 'https://api.wordpress.org/plugins/info/1.2/';
+        $url         = add_query_arg(
+                array(
+                        'action'                        => 'plugin_information',
+                        rawurlencode( 'request[slug]' ) => dirname( $plugin_file ),
+                ),
+                $url
+        );
+        $response    = wp_remote_get( $url );
+        if ( ! is_wp_error( $response ) ) {
+                $plugin_data = json_decode( wp_remote_retrieve_body( $response ) );
+        }
+
+        /*
+         * Plugin is likley not in the WP Plugin Directory but if they have designated
+         * `Requires WP` and/or `Requires PHP` headers we can use those.
+         */
+        if ( isset( $plugin_data->error ) ) {
+                $plugin_headers            = get_plugin_data( WP_PLUGIN_DIR . '/' . $plugin_file );
+                $plugin_data->requires     = $plugin_headers['RequiresWP'];
+                $plugin_data->requires_php = $plugin_headers['RequiresPHP'];
+        }
+
+        return $plugin_data;
+}
+
 /**
  * Get a list of a plugin's files.
  *
@@ -589 +636 @@
                 return $valid;
         }
 
+        if ( validate_plugin_requirements( $plugin ) ) {
+                return new WP_Error( 'plugin_invalid', __( 'Plugin does not meet minimum WordPress and/or PHP requirements.' ) );
+        }
+
         if ( ( $network_wide && ! isset( $current[ $plugin ] ) ) || ( ! $network_wide && ! in_array( $plugin, $current ) ) ) {
                 if ( ! empty( $redirect ) ) {
                         wp_redirect( add_query_arg( '_error_nonce', wp_create_nonce( 'plugin-activation-error_' . $plugin ), $redirect ) ); // we'll override this later if the plugin can be included without fatal error
@@ -1023 +1074 @@
         return 0;
 }
 
+/**
+ * Validate the plugin requirements for WP version and PHP version.
+ * Plugin data retrieved from Plugin API call.
+ * Default to true if data not available from Plugin API.
+ *
+ * @since 5.1.0
+ * @see activate_plugin()
+ *
+ * @param string $plugin Path to the plugin file relative to the plugins directory.
+ *
+ * @return bool
+ */
+function validate_plugin_requirements( $plugin ) {
+        $plugin_data  = get_plugin_api_data( $plugin );
+        $wp_requires  = isset( $plugin_data->requires ) ? $plugin_data->requires : null;
+        $php_requires = isset( $plugin_data->requires_php ) ? $plugin_data->requires_php : null;
+
+        return ! ( is_compatible_wp( $wp_requires ) &&  is_compatible_php( $php_requires ) );
+}
+
 /**
  * Whether the plugin can be uninstalled.
  *

src/wp-includes/functions.php

@@ -6553 +6553 @@
                 }
         }
 }
+
+/**
+ * Check compatibility with current WordPress version.
+ *
+ * @since 5.1.0
+ *
+ * @param string $requires Minimum WordPress version from API.
+ *
+ * @return bool Returns true if requirement met or empty.
+ */
+function is_compatible_wp( $requires ) {
+        $wp_version = get_bloginfo( 'version' );
+        return ( empty( $requires ) || version_compare( substr( $wp_version, 0, strlen( $requires ) ), $requires, '>=' ) );
+}
+
+// add to wp-includes/functions.php
+/**
+ * Check compatibility with current PHP version.
+ *
+ * @since 5.1.0
+ *
+ * @param string $requires Minimum PHP version from API.
+ *
+ * @return bool Returns true if requirement met or empty.
+ */
+function is_compatible_php( $requires ) {
+        return ( empty( $requires ) || version_compare( substr( phpversion(), 0, strlen( $requires ) ), $requires, '>=' ) );
+}