Changeset 47835 for trunk/src/wp-admin/includes/theme.php

Timestamp:

05/20/2020 06:47:24 PM (5 years ago)

Author:

whyisjake

Message:

Security: Add user interface to auto-update themes and plugins.

Building on core update mechanisms, this adds the ability to enable automatic updates for themes and plugins to the WordPress admin.

Fixes: #50052.
Props: afercia, afragen, audrasjb, azaozz, bookdude13, davidperonne, desrosj, gmays, gmays, javiercasares, karmatosed, knutsp, mapk, mukesh27, netweb, nicolaskulka, nielsdeblaauw, paaljoachim, passoniate, pbiron, pedromendonca, whodunitagency, whyisjake, wpamitkumar, and xkon.

File:

• trunk/src/wp-admin/includes/theme.php (modified) (3 diffs)

trunk/src/wp-admin/includes/theme.php

@@ -661 +661 @@
     $parents = array();
 
+    $auto_updates = (array) get_site_option( 'auto_update_themes', array() );
+
     foreach ( $themes as $theme ) {
         $slug         = $theme->get_stylesheet();
@@ -683 +685 @@
             );
         }
+
+        $auto_update        = in_array( $slug, $auto_updates, true );
+        $auto_update_action = $auto_update ? 'disable-auto-update' : 'enable-auto-update';
 
         $prepared_themes[ $slug ] = array(
@@ -700 +705 @@
             'hasPackage'    => isset( $updates[ $slug ] ) && ! empty( $updates[ $slug ]['package'] ),
             'update'        => get_theme_update_available( $theme ),
+            'autoupdate'    => $auto_update,
             'actions'       => array(
-                'activate'  => current_user_can( 'switch_themes' ) ? wp_nonce_url( admin_url( 'themes.php?action=activate&stylesheet=' . $encoded_slug ), 'switch-theme_' . $slug ) : null,
-                'customize' => $customize_action,
-                'delete'    => current_user_can( 'delete_themes' ) ? wp_nonce_url( admin_url( 'themes.php?action=delete&stylesheet=' . $encoded_slug ), 'delete-theme_' . $slug ) : null,
+                'activate'   => current_user_can( 'switch_themes' ) ? wp_nonce_url( admin_url( 'themes.php?action=activate&stylesheet=' . $encoded_slug ), 'switch-theme_' . $slug ) : null,
+                'customize'  => $customize_action,
+                'delete'     => current_user_can( 'delete_themes' ) ? wp_nonce_url( admin_url( 'themes.php?action=delete&stylesheet=' . $encoded_slug ), 'delete-theme_' . $slug ) : null,
+                'autoupdate' => wp_is_auto_update_enabled_for_type( 'theme' ) && ! is_multisite() && current_user_can( 'update_themes' )
+                    ? wp_nonce_url( admin_url( 'themes.php?action=' . $auto_update_action . '&stylesheet=' . $encoded_slug ), 'updates' )
+                    : null,
             ),
         );