Changeset 62662

Timestamp:

07/08/2026 02:58:30 AM (5 weeks ago)

Author:

westonruter

Message:

Privacy: Clean up expired personal data requests via cron.

Introduce wp_schedule_personal_data_cleanup_requests() to schedule a daily cron event which marks expired request-pending personal data requests as request-failed. Previously this cleanup only ran when an administrator visited the Export or Erase Personal Data screens.

Also fix _wp_personal_data_cleanup_requests() to query the local-time post_modified column instead of post_modified_gmt, since WP_Date_Query resolves relative date strings like "24 hours ago" in the site's timezone; comparing the GMT column against that local threshold shifted the expiry window by the site's UTC offset.

Developed in ​https://github.com/WordPress/wordpress-develop/pull/12049.
Follow-up to r43011.

Props masteradhoc, nimeshatxecurify, desrosj, mukesh27, audrasjb, khokansardar, westonruter.
See #44500.
Fixes #44498.

Location:

trunk

Files:

• src/wp-admin/includes/privacy-tools.php (modified) (1 diff)
• src/wp-includes/default-filters.php (modified) (1 diff)
• src/wp-includes/functions.php (modified) (1 diff)
• tests/phpunit/tests/privacy/wpPersonalDataCleanupRequests.php (added)

trunk/src/wp-admin/includes/privacy-tools.php

@@ -205 +205 @@
                         'date_query'     => array(
                                 array(
-                                        'column' => 'post_modified_gmt',
+                                        /*
+                                         * The local-time column must be used here, not post_modified_gmt:
+                                         * WP_Date_Query resolves relative date strings like "N seconds ago"
+                                         * in the site's timezone, so comparing against the GMT column would
+                                         * shift the expiry window by the site's UTC offset.
+                                         */
+                                        'column' => 'post_modified',
                                         'before' => $expires . ' seconds ago',
                                 ),

trunk/src/wp-includes/default-filters.php

@@ -465 +465 @@
 add_action( 'init', 'wp_schedule_delete_old_privacy_export_files' );
 add_action( 'wp_privacy_delete_old_export_files', 'wp_privacy_delete_old_export_files' );
+add_action( 'init', 'wp_schedule_personal_data_cleanup_requests' );
+add_action( 'wp_privacy_personal_data_cleanup_requests', 'wp_privacy_personal_data_cleanup_requests' );
 
 // Cron tasks.

trunk/src/wp-includes/functions.php

@@ -8509 +8509 @@
 
 /**
+ * Schedules a WP-Cron job to clean up personal data requests.
+ *
+ * @since 7.1.0
+ *
+ * @see wp_privacy_personal_data_cleanup_requests()
+ */
+function wp_schedule_personal_data_cleanup_requests(): void {
+        if ( wp_installing() ) {
+                return;
+        }
+
+        if ( ! wp_next_scheduled( 'wp_privacy_personal_data_cleanup_requests' ) ) {
+                wp_schedule_event( time(), 'daily', 'wp_privacy_personal_data_cleanup_requests' );
+        }
+}
+
+/**
+ * Fires the personal data cleanup requests handler during cron.
+ *
+ * Loads the admin privacy tools file if needed (e.g. during cron, where
+ * wp-admin/includes/privacy-tools.php is not loaded automatically).
+ *
+ * @since 7.1.0
+ */
+function wp_privacy_personal_data_cleanup_requests(): void {
+        if ( ! function_exists( '_wp_personal_data_cleanup_requests' ) ) {
+                require_once ABSPATH . 'wp-admin/includes/privacy-tools.php';
+        }
+        _wp_personal_data_cleanup_requests();
+}
+
+/**
  * Cleans up export files older than three days old.
  *