Changeset 47835 for trunk/src/wp-admin/includes/class-wp-ms-themes-list-table.php

Timestamp:

05/20/2020 06:47:24 PM (6 years ago)

Author:

whyisjake

Message:

Security: Add user interface to auto-update themes and plugins.

Building on core update mechanisms, this adds the ability to enable automatic updates for themes and plugins to the WordPress admin.

Fixes: #50052.
Props: afercia, afragen, audrasjb, azaozz, bookdude13, davidperonne, desrosj, gmays, gmays, javiercasares, karmatosed, knutsp, mapk, mukesh27, netweb, nicolaskulka, nielsdeblaauw, paaljoachim, passoniate, pbiron, pedromendonca, whodunitagency, whyisjake, wpamitkumar, and xkon.

File:

• trunk/src/wp-admin/includes/class-wp-ms-themes-list-table.php (modified) (10 diffs)

trunk/src/wp-admin/includes/class-wp-ms-themes-list-table.php

@@ -24 +24 @@
 
         /**
+         * Whether to show the auto-updates UI.
+         *
+         * @since 5.5.0
+         *
+         * @var bool True if auto-updates UI is to be shown, false otherwise.
+         */
+        protected $show_autoupdates = true;
+
+        /**
          * Constructor.
          *
@@ -46 +55 @@
 
                 $status = isset( $_REQUEST['theme_status'] ) ? $_REQUEST['theme_status'] : 'all';
-                if ( ! in_array( $status, array( 'all', 'enabled', 'disabled', 'upgrade', 'search', 'broken' ), true ) ) {
+                if ( ! in_array( $status, array( 'all', 'enabled', 'disabled', 'upgrade', 'search', 'broken', 'auto-update-enabled', 'auto-update-disabled' ), true ) ) {
                         $status = 'all';
                 }
@@ -57 +66 @@
                         $this->site_id = isset( $_REQUEST['id'] ) ? intval( $_REQUEST['id'] ) : 0;
                 }
+
+                $this->show_autoupdates = wp_is_auto_update_enabled_for_type( 'theme' ) &&
+                        ! $this->is_site_themes && current_user_can( 'update_themes' );
         }
 
@@ -108 +120 @@
                 );
 
+                if ( $this->show_autoupdates ) {
+                        $auto_updates = (array) get_site_option( 'auto_update_themes', array() );
+
+                        $themes['auto-update-enabled']  = array();
+                        $themes['auto-update-disabled'] = array();
+                }
+
                 if ( $this->is_site_themes ) {
                         $themes_per_page = $this->get_items_per_page( 'site_themes_network_per_page' );
@@ -132 +151 @@
                         $filter                    = $theme->is_allowed( $allowed_where, $this->site_id ) ? 'enabled' : 'disabled';
                         $themes[ $filter ][ $key ] = $themes['all'][ $key ];
+
+                        if ( $this->show_autoupdates ) {
+                                if ( in_array( $key, $auto_updates, true ) ) {
+                                        $themes['auto-update-enabled'][ $key ] = $themes['all'][ $key ];
+                                } else {
+                                        $themes['auto-update-disabled'][ $key ] = $themes['all'][ $key ];
+                                }
+                        }
                 }
 
@@ -258 +285 @@
          */
         public function get_columns() {
-                return array(
+                $columns = array(
                         'cb'          => '<input type="checkbox" />',
                         'name'        => __( 'Theme' ),
                         'description' => __( 'Description' ),
                 );
+
+                if ( $this->show_autoupdates ) {
+                        $columns['auto-updates'] = __( 'Automatic Updates' );
+                }
+
+                return $columns;
         }
 
@@ -345 +378 @@
                                         );
                                         break;
+                                case 'auto-update-enabled':
+                                        /* translators: %s: Number of themes. */
+                                        $text = _n(
+                                                'Auto-updates Enabled <span class="count">(%s)</span>',
+                                                'Auto-updates Enabled <span class="count">(%s)</span>',
+                                                $count
+                                        );
+                                        break;
+                                case 'auto-update-disabled':
+                                        /* translators: %s: Number of themes. */
+                                        $text = _n(
+                                                'Auto-updates Disabled <span class="count">(%s)</span>',
+                                                'Auto-updates Disabled <span class="count">(%s)</span>',
+                                                $count
+                                        );
+                                        break;
                         }
 
@@ -389 +438 @@
                         }
                 }
+
+                if ( $this->show_autoupdates ) {
+                        if ( 'auto-update-enabled' !== $status ) {
+                                $actions['enable-auto-update-selected'] = __( 'Enable Auto-updates' );
+                        }
+
+                        if ( 'auto-update-disabled' !== $status ) {
+                                $actions['disable-auto-update-selected'] = __( 'Disable Auto-updates' );
+                        }
+                }
+
                 return $actions;
         }
@@ -641 +701 @@
 
         /**
+         * Handles the auto-updates column output.
+         *
+         * @since 5.5.0
+         *
+         * @global string $status
+         * @global int  $page
+         *
+         * @param WP_Theme $theme The current WP_Theme object.
+         */
+        public function column_autoupdates( $theme ) {
+                global $status, $page;
+
+                static $auto_updates, $available_updates;
+
+                if ( ! $auto_updates ) {
+                        $auto_updates = (array) get_site_option( 'auto_update_themes', array() );
+                }
+                if ( ! $available_updates ) {
+                        $available_updates = get_site_transient( 'update_themes' );
+                }
+
+                $stylesheet = $theme->get_stylesheet();
+
+                if ( in_array( $stylesheet, $auto_updates, true ) ) {
+                        $text       = __( 'Disable auto-updates' );
+                        $action     = 'disable';
+                        $time_class = '';
+                } else {
+                        $text       = __( 'Enable auto-updates' );
+                        $action     = 'enable';
+                        $time_class = ' hidden';
+                }
+
+                $query_args = array(
+                        'action'       => "{$action}-auto-update",
+                        'theme'        => $stylesheet,
+                        'paged'        => $page,
+                        'theme_status' => $status,
+                );
+
+                $url = add_query_arg( $query_args, 'themes.php' );
+
+                printf(
+                        '<a href="%s" class="toggle-auto-update" data-wp-action="%s">',
+                        wp_nonce_url( $url, 'updates' ),
+                        $action
+                );
+
+                echo '<span class="dashicons dashicons-update spin hidden"></span>';
+                echo '<span class="label">' . $text . '</span>';
+                echo '</a>';
+
+                $available_updates = get_site_transient( 'update_themes' );
+                if ( isset( $available_updates->response[ $stylesheet ] ) ) {
+                        printf(
+                                '<div class="auto-update-time%s">%s</div>',
+                                $time_class,
+                                wp_get_auto_update_message()
+                        );
+                }
+                echo '<div class="auto-updates-error inline notice error hidden"><p></p></div>';
+        }
+
+        /**
          * Handles default column output.
          *
@@ -722 +846 @@
                                         break;
 
+                                case 'auto-updates':
+                                        echo "<td class='column-auto-updates{$extra_classes}'>";
+
+                                        $this->column_autoupdates( $item );
+
+                                        echo '</td>';
+                                        break;
                                 default:
                                         echo "<td class='$column_name column-$column_name{$extra_classes}'>";