Changeset 42832

Timestamp:

03/12/2018 04:42:11 PM (7 years ago)

Author:

flixos90

Message:

General: Introduce dashboard widget to inform administrators about outdated PHP versions.

This new dashboard widget is shown on WordPress sites which are powered by a PHP version which WordPress considers outdated, in order to inform site owners about the resulting problems and to explain how to upgrade to a supported version. An education page for that purpose has been previously created that the widget links to. The link is translatable so that localized versions of the page can be referred to as they become available.

The nag follows the example of the Browse Happy dashboard widget and is only visible for administrators, or network administrators when using multisite. To determine whether it needs to be displayed, a new wordpress.org API introduced prior is called that handles the version logic in a centralized location.

Props flixos90, hedgefield, schlessera.
Fixes #41191.

Location:

trunk

Files:

• src/wp-admin/css/dashboard.css (modified) (1 diff)
• src/wp-admin/includes/dashboard.php (modified) (3 diffs)
• src/wp-includes/capabilities.php (modified) (1 diff)
• tests/phpunit/tests/user/capabilities.php (modified) (2 diffs)

trunk/src/wp-admin/css/dashboard.css

@@ -1117 +1117 @@
 }
 
+/* PHP Nag */
+#dashboard_php_nag h2.hndle {
+    border-left: 4px solid #dc3232;
+}
+
+#dashboard_php_nag h3 {
+    font-weight: 600;
+}
+
+#dashboard_php_nag .button.button-hero {
+    display: block;
+    text-align: center;
+}
+
 /* =Media Queries
 -------------------------------------------------------------- */

trunk/src/wp-admin/includes/dashboard.php

@@ -34 +34 @@
             wp_add_dashboard_widget( 'dashboard_browser_nag', __( 'Your browser is out of date!' ), 'wp_dashboard_browser_nag' );
         }
+    }
+
+    // PHP Version
+    $response = wp_check_php_version();
+    if ( $response && ! $response['is_acceptable'] && current_user_can( 'upgrade_php' ) ) {
+        $title = $response['is_secure'] ? __( 'Your site could be much faster!' ) : __( 'Your site could be much faster and more secure!' );
+        wp_add_dashboard_widget( 'dashboard_php_nag', $title, 'wp_dashboard_php_nag' );
     }
 
@@ -179 +186 @@
     }
 
+    $high_priority_widgets = array( 'dashboard_browser_nag', 'dashboard_php_nag' );
+
     $priority = 'core';
-    if ( 'dashboard_browser_nag' === $widget_id ) {
+    if ( in_array( $widget_id, $high_priority_widgets, true ) ) {
         $priority = 'high';
     }
@@ -1595 +1604 @@
 
         set_site_transient( 'browser_' . $key, $response, WEEK_IN_SECONDS );
+    }
+
+    return $response;
+}
+
+/**
+ * Displays the PHP upgrade nag.
+ *
+ * @since 5.0.0
+ */
+function wp_dashboard_php_nag() {
+    $response = wp_check_php_version();
+
+    if ( ! $response ) {
+        return;
+    }
+
+    $information_url = _x( 'https://wordpress.org/support/upgrade-php/', 'localized PHP upgrade information page' );
+
+    $msg = __( 'Hi, it’s your friends at WordPress here.' );
+    if ( ! $response['is_secure'] ) {
+        $msg .= ' ' . __( 'We noticed that your site is running on an insecure version of PHP, which is why we’re showing you this notice.' );
+    } else {
+        $msg .= ' ' . __( 'We noticed that your site is running on an outdated version of PHP, which is why we’re showing you this notice.' );
+    }
+
+    ?>
+    <p><?php echo $msg; ?></p>
+
+    <h3><?php _e( 'What is PHP and why should I care?' ); ?></h3>
+    <p><?php _e( 'PHP is the programming language that WordPress is built on. Newer versions of PHP are both faster and more secure, so upgrading is better for your site, and better for the people who are building WordPress.' ); ?></p>
+    <p><?php _e( 'If you want to know exactly how PHP works and why it is important, continue reading.' ); ?></p>
+
+    <h3><?php _e( 'Okay, how do I update?' ); ?></h3>
+    <p><?php _e( 'The button below will take you to a page with more details on what PHP is, how to upgrade your PHP version, and what to do if it turns out you can&#8217;t.' ); ?></p>
+    <p>
+        <a class="button button-primary button-hero" href="<?php echo esc_url( $information_url ); ?>"><?php _e( 'Show me how to upgrade my PHP' ); ?></a>
+    </p>
+
+    <h3><?php _e( 'Thank you for taking the time to read this!' ); ?></h3>
+    <p><?php _e( 'If you carefully follow the instructions we&#8217;ve provided, upgrading shouldn&#8217;t take more than a few minutes, and it is generally very safe to do.' ); ?></p>
+    <p><?php _e( 'Good luck and happy blogging!' ); ?></p>
+    <?php
+}
+
+/**
+ * Checks if the user needs to upgrade PHP.
+ *
+ * @since 5.0.0
+ *
+ * @return array Array of PHP version data.
+ */
+function wp_check_php_version() {
+    $version = phpversion();
+    $key     = md5( $version );
+
+    $response = get_site_transient( 'php_check_' . $key );
+    if ( false === $response ) {
+        $url = 'http://api.wordpress.org/core/serve-happy/1.0/';
+        if ( wp_http_supports( array( 'ssl' ) ) ) {
+            $url = set_url_scheme( $url, 'https' );
+        }
+
+        $url = add_query_arg( 'php_version', $version, $url );
+
+        $response = wp_remote_get( $url );
+
+        if ( is_wp_error( $response ) || 200 != wp_remote_retrieve_response_code( $response ) ) {
+            return false;
+        }
+
+        /**
+         * Response should be an array with:
+         *  'recommended_version' - string - The PHP version recommended by WordPress
+         *  'is_supported' - boolean - Whether the PHP version is actively supported
+         *  'is_secure' - boolean - Whether the PHP version receives security updates
+         *  'is_acceptable' - boolean - Whether the PHP version is still acceptable for WordPress
+         */
+        $response = json_decode( wp_remote_retrieve_body( $response ), true );
+
+        if ( ! is_array( $response ) ) {
+            return false;
+        }
+
+        set_site_transient( 'php_check_' . $key, $response, WEEK_IN_SECONDS );
     }
 

trunk/src/wp-includes/capabilities.php

@@ -549 +549 @@
             }
             break;
+        case 'upgrade_php':
+            if ( is_multisite() && ! is_super_admin( $user_id ) ) {
+                $caps[] = 'do_not_allow';
+            } else {
+                $caps[] = 'update_core';
+            }
+            break;
         default:
             // Handle meta capabilities for custom post types.

trunk/tests/phpunit/tests/user/capabilities.php

@@ -237 +237 @@
             'update_languages'       => array( 'administrator' ),
             'deactivate_plugins'     => array( 'administrator' ),
+            'upgrade_php'            => array( 'administrator' ),
 
             'edit_categories'        => array( 'administrator', 'editor' ),
@@ -268 +269 @@
             'update_languages'       => array(),
             'deactivate_plugins'     => array(),
+            'upgrade_php'            => array(),
 
             'customize'              => array( 'administrator' ),