Changeset 54901 for branches/3.7/src/wp-admin/includes/update.php

Timestamp:

11/29/2022 10:05:16 PM (2 years ago)

Author:

peterwilsoncc

Message:

Security: Replace update nag to indicate end of support.

Replace update nag in WordPress 3.7 to indicate users need to update to a newer version of WordPress in order to continue receiving security updates.

Props peterwilsoncc, audrasjb.
Fixes #56786 for the 3.7 branch.

File:

• branches/3.7/src/wp-admin/includes/update.php (modified) (1 diff)

branches/3.7/src/wp-admin/includes/update.php

@@ -211 +211 @@
 
     if ( current_user_can('update_core') ) {
-        $msg = sprintf( __('<a href="http://codex.wordpress.org/Version_%1$s">WordPress %1$s</a> is available! <a href="%2$s">Please update now</a>.'), $cur->current, network_admin_url( 'update-core.php' ) );
+        $msg       = sprintf( __('<a href="http://codex.wordpress.org/Version_%1$s">WordPress %1$s</a> is available! <a href="%2$s">Please update now</a>.'), $cur->current, network_admin_url( 'update-core.php' ) );
+        $msg_line2 = sprintf(
+            /* translators: 1: WordPress version number, 2: Link to update WordPress */
+            __( 'Important! Your version of WordPress (%1$s) is no longer supported, you will not receive any security updates for your website. To keep your site secure, please <a href="%2$s">update to the latest version of WordPress</a>.' ),
+            get_bloginfo( 'version', 'display' ),
+            network_admin_url( 'update-core.php' )
+        );
     } else {
-        $msg = sprintf( __('<a href="http://codex.wordpress.org/Version_%1$s">WordPress %1$s</a> is available! Please notify the site administrator.'), $cur->current );
-    }
-    echo "<div class='update-nag'>$msg</div>";
+        $msg       = sprintf( __('<a href="http://codex.wordpress.org/Version_%1$s">WordPress %1$s</a> is available! Please notify the site administrator.'), $cur->current );
+        $msg_line2 = sprintf(
+            /* translators: 1: WordPress version number, 2: Link to update WordPress */
+            __( 'Important! Your version of WordPress (%1$s) is no longer supported, you will not receive any security updates for your website. To keep your site secure, please <a href="%2$s">update to the latest version of WordPress</a>.' ),
+            get_bloginfo( 'version', 'display' ),
+            __( 'https://wordpress.org/download/' )
+        );
+    }
+    echo "<div class='update-nag update-nag-core-insecure'><p>$msg</p><p>$msg_line2</p></div>";
 }
 add_action( 'admin_notices', 'update_nag', 3 );