Automattic /
jetpack
These results are based on our legacy PHP analysis, consider migrating to our new PHP analysis engine instead. Learn more
| 1 | <?php |
||
| 3416 | */ |
||
| 3417 | public static function get_log( $event = false, $num = false ) { |
||
| 3418 | if ( $event && ! is_string( $event ) ) { |
||
| 3419 | return new WP_Error( __( 'First param must be string or empty', 'jetpack' ) ); |
||
|
|
|||
| 3420 | } |
||
| 3421 | |||
| 3422 | if ( $num && ! is_numeric( $num ) ) { |
||
| 3423 | return new WP_Error( __( 'Second param must be numeric or empty', 'jetpack' ) ); |
||
| 3424 | } |
||
| 3425 | |||
| 3426 | $entire_log = Jetpack_Options::get_option( 'log', array() ); |
||
| 3634 | $response = $this->upload_handler( true ); |
||
| 3635 | break; |
||
| 3636 | default : |
||
| 3637 | $response = new Jetpack_Error( 'unknown_handler', 'Unknown Handler', 400 ); |
||
| 3638 | break; |
||
| 3639 | } |
||
| 3640 | |||
| 3641 | if ( ! $response ) { |
||
| 3642 | $response = new Jetpack_Error( 'unknown_error', 'Unknown Error', 400 ); |
||
| 3643 | } |
||
| 3644 | |||
| 3645 | if ( is_wp_error( $response ) ) { |
||
| 3646 | $status_code = $response->get_error_data(); |
||
| 3647 | $error = $response->get_error_code(); |
||
| 3648 | $error_description = $response->get_error_message(); |
||
| 3649 | |||
| 3650 | if ( ! is_int( $status_code ) ) { |
||
| 3651 | $status_code = 400; |
||
| 3674 | */ |
||
| 3675 | function upload_handler( $update_media_item = false ) { |
||
| 3676 | if ( 'POST' !== strtoupper( $_SERVER['REQUEST_METHOD'] ) ) { |
||
| 3677 | return new Jetpack_Error( 405, get_status_header_desc( 405 ), 405 ); |
||
| 3678 | } |
||
| 3679 | |||
| 3680 | $user = wp_authenticate( '', '' ); |
||
| 3681 | if ( ! $user || is_wp_error( $user ) ) { |
||
| 3682 | return new Jetpack_Error( 403, get_status_header_desc( 403 ), 403 ); |
||
| 3683 | } |
||
| 3684 | |||
| 3685 | wp_set_current_user( $user->ID ); |
||
| 3686 | |||
| 3687 | if ( ! current_user_can( 'upload_files' ) ) { |
||
| 3688 | return new Jetpack_Error( 'cannot_upload_files', 'User does not have permission to upload files', 403 ); |
||
| 3689 | } |
||
| 3690 | |||
| 3691 | if ( empty( $_FILES ) ) { |
||
| 3692 | return new Jetpack_Error( 'no_files_uploaded', 'No files were uploaded: nothing to process', 400 ); |
||
| 3693 | } |
||
| 3694 | |||
| 3695 | foreach ( array_keys( $_FILES ) as $files_key ) { |
||
| 3696 | if ( ! isset( $_POST["_jetpack_file_hmac_{$files_key}"] ) ) { |
||
| 3697 | return new Jetpack_Error( 'missing_hmac', 'An HMAC for one or more files is missing', 400 ); |
||
| 3698 | } |
||
| 3699 | } |
||
| 3700 | |||
| 3702 | |||
| 3703 | $token = Jetpack_Data::get_access_token( get_current_user_id() ); |
||
| 3704 | if ( ! $token || is_wp_error( $token ) ) { |
||
| 3705 | return new Jetpack_Error( 'unknown_token', 'Unknown Jetpack token', 403 ); |
||
| 3706 | } |
||
| 3707 | |||
| 3708 | $uploaded_files = array(); |
||
| 3730 | |||
| 3731 | if ( $update_media_item ) { |
||
| 3732 | if ( ! isset( $post_id ) || $post_id === 0 ) { |
||
| 3733 | return new Jetpack_Error( 'invalid_input', 'Media ID must be defined.', 400 ); |
||
| 3734 | } |
||
| 3735 | |||
| 3736 | $media_array = $_FILES['media']; |
||
| 4003 | Jetpack::maybe_set_version_option(); |
||
| 4004 | $registered = Jetpack::try_registration(); |
||
| 4005 | if ( is_wp_error( $registered ) ) { |
||
| 4006 | $error = $registered->get_error_code(); |
||
| 4007 | Jetpack::state( 'error', $error ); |
||
| 4008 | Jetpack::state( 'error', $registered->get_error_message() ); |
||
| 4009 | |||
| 4010 | /** |
||
| 4011 | * Jetpack registration Error. |
||
| 4903 | $secrets = self::connection()->get_secrets( $action, $user_id ); |
||
| 4904 | |||
| 4905 | if ( Connection_Manager::SECRETS_MISSING === $secrets ) { |
||
| 4906 | return new WP_Error( 'verify_secrets_missing', 'Verification secrets not found' ); |
||
| 4907 | } |
||
| 4908 | |||
| 4909 | if ( Connection_Manager::SECRETS_EXPIRED === $secrets ) { |
||
| 4910 | return new WP_Error( 'verify_secrets_expired', 'Verification took too long' ); |
||
| 4911 | } |
||
| 4912 | |||
| 4913 | return $secrets; |
||
| 4979 | **/ |
||
| 4980 | public function validate_remote_register_response( $response ) { |
||
| 4981 | if ( is_wp_error( $response ) ) { |
||
| 4982 | return new Jetpack_Error( 'register_http_request_failed', $response->get_error_message() ); |
||
| 4983 | } |
||
| 4984 | |||
| 4985 | $code = wp_remote_retrieve_response_code( $response ); |
||
| 4991 | |||
| 4992 | $code_type = intval( $code / 100 ); |
||
| 4993 | if ( 5 == $code_type ) { |
||
| 4994 | return new Jetpack_Error( 'wpcom_5??', sprintf( __( 'Error Details: %s', 'jetpack' ), $code ), $code ); |
||
| 4995 | } elseif ( 408 == $code ) { |
||
| 4996 | return new Jetpack_Error( 'wpcom_408', sprintf( __( 'Error Details: %s', 'jetpack' ), $code ), $code ); |
||
| 4997 | } elseif ( ! empty( $registration_response->error ) ) { |
||
| 4998 | if ( 'xml_rpc-32700' == $registration_response->error && ! function_exists( 'xml_parser_create' ) ) { |
||
| 4999 | $error_description = __( "PHP's XML extension is not available. Jetpack requires the XML extension to communicate with WordPress.com. Please contact your hosting provider to enable PHP's XML extension.", 'jetpack' ); |
||
| 5001 | $error_description = isset( $registration_response->error_description ) ? sprintf( __( 'Error Details: %s', 'jetpack' ), (string) $registration_response->error_description ) : ''; |
||
| 5002 | } |
||
| 5003 | |||
| 5004 | return new Jetpack_Error( (string) $registration_response->error, $error_description, $code ); |
||
| 5005 | } elseif ( 200 != $code ) { |
||
| 5006 | return new Jetpack_Error( 'wpcom_bad_response', sprintf( __( 'Error Details: %s', 'jetpack' ), $code ), $code ); |
||
| 5007 | } |
||
| 5008 | |||
| 5009 | // Jetpack ID error block |
||
| 5010 | if ( empty( $registration_response->jetpack_id ) ) { |
||
| 5011 | return new Jetpack_Error( 'jetpack_id', sprintf( __( 'Error Details: Jetpack ID is empty. Do not publicly post this error message! %s', 'jetpack' ), $entity ), $entity ); |
||
| 5012 | } elseif ( ! is_scalar( $registration_response->jetpack_id ) ) { |
||
| 5013 | return new Jetpack_Error( 'jetpack_id', sprintf( __( 'Error Details: Jetpack ID is not a scalar. Do not publicly post this error message! %s', 'jetpack' ) , $entity ), $entity ); |
||
| 5014 | } elseif ( preg_match( '/[^0-9]/', $registration_response->jetpack_id ) ) { |
||
| 5015 | return new Jetpack_Error( 'jetpack_id', sprintf( __( 'Error Details: Jetpack ID begins with a numeral. Do not publicly post this error message! %s', 'jetpack' ) , $entity ), $entity ); |
||
| 5016 | } |
||
| 5017 | |||
| 5018 | return $registration_response; |
||
| 5031 | empty( $secrets['secret_2'] ) || |
||
| 5032 | empty( $secrets['exp'] ) |
||
| 5033 | ) { |
||
| 5034 | return new Jetpack_Error( 'missing_secrets' ); |
||
| 5035 | } |
||
| 5036 | |||
| 5037 | // better to try (and fail) to set a higher timeout than this system |
||
| 5083 | if ( is_wp_error( $registration_details ) ) { |
||
| 5084 | return $registration_details; |
||
| 5085 | } elseif ( ! $registration_details ) { |
||
| 5086 | return new Jetpack_Error( 'unknown_error', __( 'Unknown error registering your Jetpack site', 'jetpack' ), wp_remote_retrieve_response_code( $response ) ); |
||
| 5087 | } |
||
| 5088 | |||
| 5089 | View Code Duplication | if ( empty( $registration_details->jetpack_secret ) || ! is_string( $registration_details->jetpack_secret ) ) { |
|
| 5090 | return new Jetpack_Error( 'jetpack_secret', '', wp_remote_retrieve_response_code( $response ) ); |
||
| 5091 | } |
||
| 5092 | |||
| 5093 | if ( isset( $registration_details->jetpack_public ) ) { |
||
| 5220 | || |
||
| 5221 | empty( $version ) || strval( JETPACK__API_VERSION ) !== $version |
||
| 5222 | ) { |
||
| 5223 | return new WP_Error( 'malformed_token', 'Malformed token in request', compact( 'signature_details' ) ); |
||
| 5224 | } |
||
| 5225 | |||
| 5226 | if ( '0' === $user_id ) { |
||
| 5229 | } else { |
||
| 5230 | $token_type = 'user'; |
||
| 5231 | if ( empty( $user_id ) || ! ctype_digit( $user_id ) ) { |
||
| 5232 | return new WP_Error( 'malformed_user_id', 'Malformed user_id in request', compact( 'signature_details' ) ); |
||
| 5233 | } |
||
| 5234 | $user_id = (int) $user_id; |
||
| 5235 | |||
| 5236 | $user = new WP_User( $user_id ); |
||
| 5237 | if ( ! $user || ! $user->exists() ) { |
||
| 5238 | return new WP_Error( 'unknown_user', sprintf( 'User %d does not exist', $user_id ), compact( 'signature_details' ) ); |
||
| 5239 | } |
||
| 5240 | } |
||
| 5241 | |||
| 5242 | $token = Jetpack_Data::get_access_token( $user_id, $token_key, false ); |
||
| 5243 | if ( is_wp_error( $token ) ) { |
||
| 5244 | $token->add_data( compact( 'signature_details' ) ); |
||
| 5245 | return $token; |
||
| 5246 | } elseif ( ! $token ) { |
||
| 5247 | return new WP_Error( 'unknown_token', sprintf( 'Token %s:%s:%d does not exist', $token_key, $version, $user_id ), compact( 'signature_details' ) ); |
||
| 5248 | } |
||
| 5249 | |||
| 5250 | $jetpack_signature = new Jetpack_Signature( $token->secret, (int) Jetpack_Options::get_option( 'time_diff' ) ); |
||
| 5280 | $signature_details['url'] = $jetpack_signature->current_request_url; |
||
| 5281 | |||
| 5282 | if ( ! $signature ) { |
||
| 5283 | return new WP_Error( 'could_not_sign', 'Unknown signature error', compact( 'signature_details' ) ); |
||
| 5284 | } else if ( is_wp_error( $signature ) ) { |
||
| 5285 | return $signature; |
||
| 5286 | } |
||
| 5290 | |||
| 5291 | // Use up the nonce regardless of whether the signature matches. |
||
| 5292 | if ( ! $this->add_nonce( $timestamp, $nonce ) ) { |
||
| 5293 | return new WP_Error( 'invalid_nonce', 'Could not add nonce', compact( 'signature_details' ) ); |
||
| 5294 | } |
||
| 5295 | |||
| 5296 | // Be careful about what you do with this debugging data. |
||
| 5299 | $signature_details['expected'] = $signature; |
||
| 5300 | |||
| 5301 | if ( ! hash_equals( $signature, $_GET['signature'] ) ) { |
||
| 5302 | return new WP_Error( 'signature_mismatch', 'Signature mismatch', compact( 'signature_details' ) ); |
||
| 5303 | } |
||
| 5304 | |||
| 5305 | // Let's see if this is onboarding. In such case, use user token type and the provided user id. |
||
| 5403 | // needed. |
||
| 5404 | if ( $_SERVER['REQUEST_METHOD'] !== 'GET' && $_SERVER['REQUEST_METHOD'] !== 'POST' ) { |
||
| 5405 | $this->rest_authentication_status = new WP_Error( |
||
| 5406 | 'rest_invalid_request', |
||
| 5407 | __( 'This request method is not supported.', 'jetpack' ), |
||
| 5408 | array( 'status' => 400 ) |
||
| 5409 | ); |
||
| 5411 | } |
||
| 5412 | if ( $_SERVER['REQUEST_METHOD'] !== 'POST' && ! empty( $this->HTTP_RAW_POST_DATA ) ) { |
||
| 5413 | $this->rest_authentication_status = new WP_Error( |
||
| 5414 | 'rest_invalid_request', |
||
| 5415 | __( 'This request method does not support body parameters.', 'jetpack' ), |
||
| 5416 | array( 'status' => 400 ) |
||
| 5417 | ); |
||
| 5433 | |||
| 5434 | // Something else went wrong. Probably a signature error. |
||
| 5435 | $this->rest_authentication_status = new WP_Error( |
||
| 5436 | 'rest_invalid_signature', |
||
| 5437 | __( 'The request is not signed correctly.', 'jetpack' ), |
||
| 5438 | array( 'status' => 400 ) |
||
| 5439 | ); |
||
| 6162 | public static function normalize_url_protocol_agnostic( $url ) { |
||
| 6163 | $parsed_url = wp_parse_url( trailingslashit( esc_url_raw( $url ) ) ); |
||
| 6164 | if ( ! $parsed_url || empty( $parsed_url['host'] ) || empty( $parsed_url['path'] ) ) { |
||
| 6165 | return new WP_Error( 'cannot_parse_url', sprintf( esc_html__( 'Cannot parse URL %s', 'jetpack' ), $url ) ); |
||
| 6166 | } |
||
| 6167 | |||
| 6168 | // Strip www and protocols |
||
| 7074 | if ( $active_modules = Jetpack_Options::get_option( 'active_modules' ) ) { |
||
| 7075 | Jetpack::delete_active_modules(); |
||
| 7076 | |||
| 7077 | Jetpack::activate_default_modules( 999, 1, array_merge( $active_modules, $other_modules ), $redirect_on_activation_error, $send_state_messages ); |
||
| 7078 | } else { |
||
| 7079 | Jetpack::activate_default_modules( false, false, $other_modules, $redirect_on_activation_error, $send_state_messages ); |
||
| 7080 | } |
||
| 7169 |
georgestephanis
Michael D Adams
Ben Lobaugh
dereksmart
Daniel Walmsley
roccotripaldi
Osk
Eric Binnion
Damián Suárez
James Nylen
Loading history...
This check compares calls to functions or methods with their respective definitions. If the call has more arguments than are defined, it raises an issue.
If a function is defined several times with a different number of parameters, the check may pick up the wrong definition and report false positives. One codebase where this has been known to happen is Wordpress.
In this case you can add the
@ignorePhpDoc annotation to the duplicate definition and it will be ignored.