Ticket #53658: patch_53658.2.diff

src/wp-admin/user-edit.php

@@ -734 +734 @@
         </table>
 
 
-                <?php if ( wp_is_application_passwords_available_for_user( $user_id ) ) : ?>
         <div class="application-passwords hide-if-no-js" id="application-passwords-section">
                 <h2><?php _e( 'Application Passwords' ); ?></h2>
+                <?php if ( wp_is_application_passwords_available_for_user( $user_id ) ) : ?>
                 <p><?php _e( 'Application passwords allow authentication via non-interactive systems, such as XML-RPC or the REST API, without providing your actual password. Application passwords can be easily revoked. They cannot be used for traditional logins to your website.' ); ?></p>
                         <?php
                         if ( is_multisite() ) {
@@ -797 +797 @@
                         $application_passwords_list_table->display();
                         ?>
                 </div>
+                <?php else: ?>
+                        <p><?php printf( __( 'Application Passwords require <a href="%s" target="_blank">HTTPS on production websites</a>.' ), "https://wordpress.org/search/https/" ); ?></p>
+                        <p><?php printf( __( 'If this is a local website, you can set the <a href="%s" target="_blank">environment type</a> to make it functional.' ), "https://wordpress.org/support/article/editing-wp-config-php/#wp_environment_type" ); ?></p>
+                <?php endif; ?>
         </div>
-<?php endif; ?>
 
                 <?php
                 if ( IS_PROFILE_PAGE ) {