Changeset 47835 for trunk/src/wp-admin/includes/class-wp-ms-themes-list-table.php

Timestamp:

05/20/2020 06:47:24 PM (4 years ago)

Author:

whyisjake

Message:

Security: Add user interface to auto-update themes and plugins.

Building on core update mechanisms, this adds the ability to enable automatic updates for themes and plugins to the WordPress admin.

Fixes: #50052.
Props: afercia, afragen, audrasjb, azaozz, bookdude13, davidperonne, desrosj, gmays, gmays, javiercasares, karmatosed, knutsp, mapk, mukesh27, netweb, nicolaskulka, nielsdeblaauw, paaljoachim, passoniate, pbiron, pedromendonca, whodunitagency, whyisjake, wpamitkumar, and xkon.

File:

• trunk/src/wp-admin/includes/class-wp-ms-themes-list-table.php (modified) (10 diffs)

trunk/src/wp-admin/includes/class-wp-ms-themes-list-table.php

@@ -24 +24 @@
 
     /**
+     * Whether to show the auto-updates UI.
+     *
+     * @since 5.5.0
+     *
+     * @var bool True if auto-updates UI is to be shown, false otherwise.
+     */
+    protected $show_autoupdates = true;
+
+    /**
      * Constructor.
      *
@@ -46 +55 @@
 
         $status = isset( $_REQUEST['theme_status'] ) ? $_REQUEST['theme_status'] : 'all';
-        if ( ! in_array( $status, array( 'all', 'enabled', 'disabled', 'upgrade', 'search', 'broken' ), true ) ) {
+        if ( ! in_array( $status, array( 'all', 'enabled', 'disabled', 'upgrade', 'search', 'broken', 'auto-update-enabled', 'auto-update-disabled' ), true ) ) {
             $status = 'all';
         }
@@ -57 +66 @@
             $this->site_id = isset( $_REQUEST['id'] ) ? intval( $_REQUEST['id'] ) : 0;
         }
+
+        $this->show_autoupdates = wp_is_auto_update_enabled_for_type( 'theme' ) &&
+            ! $this->is_site_themes && current_user_can( 'update_themes' );
     }
 
@@ -108 +120 @@
         );
 
+        if ( $this->show_autoupdates ) {
+            $auto_updates = (array) get_site_option( 'auto_update_themes', array() );
+
+            $themes['auto-update-enabled']  = array();
+            $themes['auto-update-disabled'] = array();
+        }
+
         if ( $this->is_site_themes ) {
             $themes_per_page = $this->get_items_per_page( 'site_themes_network_per_page' );
@@ -132 +151 @@
             $filter                    = $theme->is_allowed( $allowed_where, $this->site_id ) ? 'enabled' : 'disabled';
             $themes[ $filter ][ $key ] = $themes['all'][ $key ];
+
+            if ( $this->show_autoupdates ) {
+                if ( in_array( $key, $auto_updates, true ) ) {
+                    $themes['auto-update-enabled'][ $key ] = $themes['all'][ $key ];
+                } else {
+                    $themes['auto-update-disabled'][ $key ] = $themes['all'][ $key ];
+                }
+            }
         }
 
@@ -258 +285 @@
      */
     public function get_columns() {
-        return array(
+        $columns = array(
             'cb'          => '<input type="checkbox" />',
             'name'        => __( 'Theme' ),
             'description' => __( 'Description' ),
         );
+
+        if ( $this->show_autoupdates ) {
+            $columns['auto-updates'] = __( 'Automatic Updates' );
+        }
+
+        return $columns;
     }
 
@@ -345 +378 @@
                     );
                     break;
+                case 'auto-update-enabled':
+                    /* translators: %s: Number of themes. */
+                    $text = _n(
+                        'Auto-updates Enabled <span class="count">(%s)</span>',
+                        'Auto-updates Enabled <span class="count">(%s)</span>',
+                        $count
+                    );
+                    break;
+                case 'auto-update-disabled':
+                    /* translators: %s: Number of themes. */
+                    $text = _n(
+                        'Auto-updates Disabled <span class="count">(%s)</span>',
+                        'Auto-updates Disabled <span class="count">(%s)</span>',
+                        $count
+                    );
+                    break;
             }
 
@@ -389 +438 @@
             }
         }
+
+        if ( $this->show_autoupdates ) {
+            if ( 'auto-update-enabled' !== $status ) {
+                $actions['enable-auto-update-selected'] = __( 'Enable Auto-updates' );
+            }
+
+            if ( 'auto-update-disabled' !== $status ) {
+                $actions['disable-auto-update-selected'] = __( 'Disable Auto-updates' );
+            }
+        }
+
         return $actions;
     }
@@ -641 +701 @@
 
     /**
+     * Handles the auto-updates column output.
+     *
+     * @since 5.5.0
+     *
+     * @global string $status
+     * @global int  $page
+     *
+     * @param WP_Theme $theme The current WP_Theme object.
+     */
+    public function column_autoupdates( $theme ) {
+        global $status, $page;
+
+        static $auto_updates, $available_updates;
+
+        if ( ! $auto_updates ) {
+            $auto_updates = (array) get_site_option( 'auto_update_themes', array() );
+        }
+        if ( ! $available_updates ) {
+            $available_updates = get_site_transient( 'update_themes' );
+        }
+
+        $stylesheet = $theme->get_stylesheet();
+
+        if ( in_array( $stylesheet, $auto_updates, true ) ) {
+            $text       = __( 'Disable auto-updates' );
+            $action     = 'disable';
+            $time_class = '';
+        } else {
+            $text       = __( 'Enable auto-updates' );
+            $action     = 'enable';
+            $time_class = ' hidden';
+        }
+
+        $query_args = array(
+            'action'       => "{$action}-auto-update",
+            'theme'        => $stylesheet,
+            'paged'        => $page,
+            'theme_status' => $status,
+        );
+
+        $url = add_query_arg( $query_args, 'themes.php' );
+
+        printf(
+            '<a href="%s" class="toggle-auto-update" data-wp-action="%s">',
+            wp_nonce_url( $url, 'updates' ),
+            $action
+        );
+
+        echo '<span class="dashicons dashicons-update spin hidden"></span>';
+        echo '<span class="label">' . $text . '</span>';
+        echo '</a>';
+
+        $available_updates = get_site_transient( 'update_themes' );
+        if ( isset( $available_updates->response[ $stylesheet ] ) ) {
+            printf(
+                '<div class="auto-update-time%s">%s</div>',
+                $time_class,
+                wp_get_auto_update_message()
+            );
+        }
+        echo '<div class="auto-updates-error inline notice error hidden"><p></p></div>';
+    }
+
+    /**
      * Handles default column output.
      *
@@ -722 +846 @@
                     break;
 
+                case 'auto-updates':
+                    echo "<td class='column-auto-updates{$extra_classes}'>";
+
+                    $this->column_autoupdates( $item );
+
+                    echo '</td>';
+                    break;
                 default:
                     echo "<td class='$column_name column-$column_name{$extra_classes}'>";