Changeset 48127 for trunk/src/wp-admin/includes/privacy-tools.php

Timestamp:

06/22/2020 10:38:11 PM (6 years ago)

Author:

whyisjake

Message:

Privacy: Use relative paths for exported personal data.

Ensures back-compat while moving to paths off of the /exports directory.

Fixes: #44038.

Props: allendav, mrTall, desrosj, garrett-eclipse, cameronamcintyre, nmenescardi, xkon, whyisjake, davidbaumwald.

File:

• trunk/src/wp-admin/includes/privacy-tools.php (modified) (4 diffs)

trunk/src/wp-admin/includes/privacy-tools.php

@@ -469 +469 @@
          * via email.
          */
-        $error            = false;
+        $error = false;
+
+        // This postmeta is used from version 5.4.
+        $archive_filename = get_post_meta( $request_id, '_export_file_name', true );
+
+        // These are used for backwards compatibility.
         $archive_url      = get_post_meta( $request_id, '_export_file_url', true );
         $archive_pathname = get_post_meta( $request_id, '_export_file_path', true );
 
-        if ( empty( $archive_pathname ) || empty( $archive_url ) ) {
-                $archive_filename = $file_basename . '.zip';
+        // If archive_filename exists, make sure to remove deprecated postmeta.
+        if ( ! empty( $archive_filename ) ) {
                 $archive_pathname = $exports_dir . $archive_filename;
                 $archive_url      = $exports_url . $archive_filename;
 
-                update_post_meta( $request_id, '_export_file_url', $archive_url );
-                update_post_meta( $request_id, '_export_file_path', wp_normalize_path( $archive_pathname ) );
+                // Remove the deprecated postmeta.
+                delete_post_meta( $request_id, '_export_file_url' );
+                delete_post_meta( $request_id, '_export_file_path' );
+        } elseif ( ! empty( $archive_pathname ) ) {
+                // Check if archive_pathname exists. If not, create the new postmeta and remove the deprecated.
+                $archive_filename = basename( $archive_pathname );
+                $archive_url      = $exports_url . $archive_filename;
+
+                // Add the new postmeta that is used since version 5.4.
+                update_post_meta( $request_id, '_export_file_name', wp_normalize_path( $archive_filename ) );
+
+                // Remove the deprecated postmeta.
+                delete_post_meta( $request_id, '_export_file_url' );
+                delete_post_meta( $request_id, '_export_file_path' );
+        } else {
+                // If there's no archive_filename or archive_pathname create a new one.
+                $archive_filename = $file_basename . '.zip';
+                $archive_url      = $exports_url . $archive_filename;
+                $archive_pathname = $exports_dir . $archive_filename;
+
+                // Add the new postmeta that is used since version 5.4.
+                update_post_meta( $request_id, '_export_file_name', wp_normalize_path( $archive_filename ) );
+
+                // Remove the deprecated postmeta.
+                delete_post_meta( $request_id, '_export_file_url' );
+                delete_post_meta( $request_id, '_export_file_path' );
         }
 
@@ -540 +569 @@
         $request = wp_get_user_request( $request_id );
 
+        // Get the export file URL.
+        $exports_url      = wp_privacy_exports_url();
+        $export_file_name = get_post_meta( $request_id, '_export_file_name', true );
+
         if ( ! $request || 'export_personal_data' !== $request->action_name ) {
                 return new WP_Error( 'invalid_request', __( 'Invalid request ID when sending personal data export email.' ) );
@@ -557 +590 @@
         $expiration_date = date_i18n( get_option( 'date_format' ), time() + $expiration );
 
-        $export_file_url = get_post_meta( $request_id, '_export_file_url', true );
+        $export_file_url = $exports_url . $export_file_name;
         $site_name       = wp_specialchars_decode( get_option( 'blogname' ), ENT_QUOTES );
         $site_url        = home_url();
@@ -821 +854 @@
         } else {
                 // Modify the response to include the URL of the export file so the browser can fetch it.
-                $export_file_url = get_post_meta( $request_id, '_export_file_url', true );
+                $exports_url      = wp_privacy_exports_url();
+                $export_file_name = get_post_meta( $request_id, '_export_file_name', true );
+                $export_file_url  = $exports_url . $export_file_name;
+
                 if ( ! empty( $export_file_url ) ) {
                         $response['url'] = $export_file_url;