Changeset 54898

Timestamp:

11/29/2022 10:00:05 PM (4 years ago)

Author:

peterwilsoncc

Message:

Security: Replace update nag to indicate end of support.

Replace update nag in WordPress 4.0 to indicate users need to update to a newer version of WordPress in order to continue receiving security updates.

Props peterwilsoncc, audrasjb.
Fixes #56786 for the 4.0 branch.

Location:

branches/4.0/src/wp-admin

Files:

• css/common.css (modified) (1 diff)
• includes/update.php (modified) (1 diff)

branches/4.0/src/wp-admin/css/common.css

@@ -1265 +1265 @@
         -webkit-box-shadow: 0 1px 1px 0 rgba(0,0,0,0.1);
         box-shadow: 0 1px 1px 0 rgba(0,0,0,0.1);
+}
+
+.update-nag-core-insecure {
+        color: #fff;
+        background-color: #ac1b1b;
+        border-left-color: #cd5a5a;
+        font-weight: bold;
+}
+
+.update-nag-core-insecure > p:first-child {
+        margin-top: 0;
+}
+
+.update-nag-core-insecure > p:last-child {
+        margin-bottom: 0;
+}
+
+.update-nag-core-insecure a {
+        color: #fff;
+        text-decoration: underline;
 }
 

branches/4.0/src/wp-admin/includes/update.php

@@ -206 +206 @@
 
         if ( current_user_can('update_core') ) {
-                $msg = sprintf( __('<a href="http://codex.wordpress.org/Version_%1$s">WordPress %1$s</a> is available! <a href="%2$s">Please update now</a>.'), $cur->current, network_admin_url( 'update-core.php' ) );
+                $msg       = sprintf( __('<a href="http://codex.wordpress.org/Version_%1$s">WordPress %1$s</a> is available! <a href="%2$s">Please update now</a>.'), $cur->current, network_admin_url( 'update-core.php' ) );
+                $msg_line2 = sprintf(
+                        /* translators: 1: WordPress version number, 2: Link to update WordPress */
+                        __( 'Important! Your version of WordPress (%1$s) is no longer supported, you will not receive any security updates for your website. To keep your site secure, please <a href="%2$s">update to the latest version of WordPress</a>.' ),
+                        get_bloginfo( 'version', 'display' ),
+                        network_admin_url( 'update-core.php' )
+                );
         } else {
-                $msg = sprintf( __('<a href="http://codex.wordpress.org/Version_%1$s">WordPress %1$s</a> is available! Please notify the site administrator.'), $cur->current );
-        }
-        echo "<div class='update-nag'>$msg</div>";
+                $msg       = sprintf( __('<a href="http://codex.wordpress.org/Version_%1$s">WordPress %1$s</a> is available! Please notify the site administrator.'), $cur->current );
+                $msg_line2 = sprintf(
+                        /* translators: 1: WordPress version number, 2: Link to update WordPress */
+                        __( 'Important! Your version of WordPress (%1$s) is no longer supported, you will not receive any security updates for your website. To keep your site secure, please <a href="%2$s">update to the latest version of WordPress</a>.' ),
+                        get_bloginfo( 'version', 'display' ),
+                        __( 'https://wordpress.org/download/' )
+                );
+        }
+        echo "<div class='update-nag update-nag-core-insecure'><p>$msg</p><p>$msg_line2</p></div>";
 }
 add_action( 'admin_notices', 'update_nag', 3 );