Automattic /
jetpack
These results are based on our legacy PHP analysis, consider migrating to our new PHP analysis engine instead. Learn more
| 1 | <?php |
||
| 601 | } |
||
| 602 | |||
| 603 | if ( defined( 'XMLRPC_REQUEST' ) && XMLRPC_REQUEST && isset( $_GET['for'] ) && 'jetpack' == $_GET['for'] ) { |
||
| 604 | @ini_set( 'display_errors', false ); // Display errors can cause the XML to be not well formed. |
||
|
|
|||
| 605 | |||
| 606 | require_once JETPACK__PLUGIN_DIR . 'class.jetpack-xmlrpc-server.php'; |
||
| 607 | $this->xmlrpc_server = new Jetpack_XMLRPC_Server(); |
||
| 1782 | } |
||
| 1783 | |||
| 1784 | function current_user_is_connection_owner() { |
||
| 1785 | $user_token = Jetpack_Data::get_access_token( JETPACK_MASTER_USER ); |
||
| 1786 | return $user_token && is_object( $user_token ) && isset( $user_token->external_user_id ) && get_current_user_id() === $user_token->external_user_id; |
||
| 1787 | } |
||
| 1788 | |||
| 5024 | **/ |
||
| 5025 | public function validate_remote_register_response( $response ) { |
||
| 5026 | if ( is_wp_error( $response ) ) { |
||
| 5027 | return new Jetpack_Error( 'register_http_request_failed', $response->get_error_message() ); |
||
| 5028 | } |
||
| 5029 | |||
| 5030 | $code = wp_remote_retrieve_response_code( $response ); |
||
| 5036 | |||
| 5037 | $code_type = intval( $code / 100 ); |
||
| 5038 | if ( 5 == $code_type ) { |
||
| 5039 | return new Jetpack_Error( 'wpcom_5??', sprintf( __( 'Error Details: %s', 'jetpack' ), $code ), $code ); |
||
| 5040 | } elseif ( 408 == $code ) { |
||
| 5041 | return new Jetpack_Error( 'wpcom_408', sprintf( __( 'Error Details: %s', 'jetpack' ), $code ), $code ); |
||
| 5042 | } elseif ( ! empty( $registration_response->error ) ) { |
||
| 5043 | if ( 'xml_rpc-32700' == $registration_response->error && ! function_exists( 'xml_parser_create' ) ) { |
||
| 5044 | $error_description = __( "PHP's XML extension is not available. Jetpack requires the XML extension to communicate with WordPress.com. Please contact your hosting provider to enable PHP's XML extension.", 'jetpack' ); |
||
| 5046 | $error_description = isset( $registration_response->error_description ) ? sprintf( __( 'Error Details: %s', 'jetpack' ), (string) $registration_response->error_description ) : ''; |
||
| 5047 | } |
||
| 5048 | |||
| 5049 | return new Jetpack_Error( (string) $registration_response->error, $error_description, $code ); |
||
| 5050 | } elseif ( 200 != $code ) { |
||
| 5051 | return new Jetpack_Error( 'wpcom_bad_response', sprintf( __( 'Error Details: %s', 'jetpack' ), $code ), $code ); |
||
| 5052 | } |
||
| 5053 | |||
| 5054 | // Jetpack ID error block |
||
| 5055 | if ( empty( $registration_response->jetpack_id ) ) { |
||
| 5056 | return new Jetpack_Error( 'jetpack_id', sprintf( __( 'Error Details: Jetpack ID is empty. Do not publicly post this error message! %s', 'jetpack' ), $entity ), $entity ); |
||
| 5057 | } elseif ( ! is_scalar( $registration_response->jetpack_id ) ) { |
||
| 5058 | return new Jetpack_Error( 'jetpack_id', sprintf( __( 'Error Details: Jetpack ID is not a scalar. Do not publicly post this error message! %s', 'jetpack' ) , $entity ), $entity ); |
||
| 5059 | } elseif ( preg_match( '/[^0-9]/', $registration_response->jetpack_id ) ) { |
||
| 5060 | return new Jetpack_Error( 'jetpack_id', sprintf( __( 'Error Details: Jetpack ID begins with a numeral. Do not publicly post this error message! %s', 'jetpack' ) , $entity ), $entity ); |
||
| 5061 | } |
||
| 5062 | |||
| 5063 | return $registration_response; |
||
| 5076 | empty( $secrets['secret_2'] ) || |
||
| 5077 | empty( $secrets['exp'] ) |
||
| 5078 | ) { |
||
| 5079 | return new Jetpack_Error( 'missing_secrets' ); |
||
| 5080 | } |
||
| 5081 | |||
| 5082 | // better to try (and fail) to set a higher timeout than this system |
||
| 5129 | if ( is_wp_error( $registration_details ) ) { |
||
| 5130 | return $registration_details; |
||
| 5131 | } elseif ( ! $registration_details ) { |
||
| 5132 | return new Jetpack_Error( 'unknown_error', __( 'Unknown error registering your Jetpack site', 'jetpack' ), wp_remote_retrieve_response_code( $response ) ); |
||
| 5133 | } |
||
| 5134 | |||
| 5135 | View Code Duplication | if ( empty( $registration_details->jetpack_secret ) || ! is_string( $registration_details->jetpack_secret ) ) { |
|
| 5136 | return new Jetpack_Error( 'jetpack_secret', '', wp_remote_retrieve_response_code( $response ) ); |
||
| 5137 | } |
||
| 5138 | |||
| 5139 | if ( isset( $registration_details->jetpack_public ) ) { |
||
| 5161 | */ |
||
| 5162 | do_action( 'jetpack_site_registered', $registration_details->jetpack_id, $registration_details->jetpack_secret, $jetpack_public ); |
||
| 5163 | |||
| 5164 | $jetpack = Jetpack::init(); |
||
| 5165 | |||
| 5166 | return true; |
||
| 5167 | } |
||
| 5275 | } else { |
||
| 5276 | $token_type = 'user'; |
||
| 5277 | if ( empty( $user_id ) || ! ctype_digit( $user_id ) ) { |
||
| 5278 | return new WP_Error( 'malformed_user_id', 'Malformed user_id in request', compact( 'signature_details' ) ); |
||
| 5279 | } |
||
| 5280 | $user_id = (int) $user_id; |
||
| 5281 | |||
| 5282 | $user = new WP_User( $user_id ); |
||
| 5283 | if ( ! $user || ! $user->exists() ) { |
||
| 5284 | return new WP_Error( 'unknown_user', sprintf( 'User %d does not exist', $user_id ), compact( 'signature_details' ) ); |
||
| 5285 | } |
||
| 5286 | } |
||
| 5287 | |||
| 5288 | $token = Jetpack_Data::get_access_token( $user_id, $token_key, false ); |
||
| 5289 | if ( is_wp_error( $token ) ) { |
||
| 5290 | $token->add_data( compact( 'signature_details' ) ); |
||
| 5291 | return $token; |
||
| 5292 | } elseif ( ! $token ) { |
||
| 5293 | return new WP_Error( 'unknown_token', sprintf( 'Token %s:%s:%d does not exist', $token_key, $version, $user_id ), compact( 'signature_details' ) ); |
||
| 5294 | } |
||
| 5295 | |||
| 5296 | $jetpack_signature = new Jetpack_Signature( $token->secret, (int) Jetpack_Options::get_option( 'time_diff' ) ); |
||
| 5326 | $signature_details['url'] = $jetpack_signature->current_request_url; |
||
| 5327 | |||
| 5328 | if ( ! $signature ) { |
||
| 5329 | return new WP_Error( 'could_not_sign', 'Unknown signature error', compact( 'signature_details' ) ); |
||
| 5330 | } else if ( is_wp_error( $signature ) ) { |
||
| 5331 | return $signature; |
||
| 5332 | } |
||
| 5336 | |||
| 5337 | // Use up the nonce regardless of whether the signature matches. |
||
| 5338 | if ( ! $this->add_nonce( $timestamp, $nonce ) ) { |
||
| 5339 | return new WP_Error( 'invalid_nonce', 'Could not add nonce', compact( 'signature_details' ) ); |
||
| 5340 | } |
||
| 5341 | |||
| 5342 | // Be careful about what you do with this debugging data. |
||
| 5345 | $signature_details['expected'] = $signature; |
||
| 5346 | |||
| 5347 | if ( ! hash_equals( $signature, $_GET['signature'] ) ) { |
||
| 5348 | return new WP_Error( 'signature_mismatch', 'Signature mismatch', compact( 'signature_details' ) ); |
||
| 5349 | } |
||
| 5350 | |||
| 5351 | // Let's see if this is onboarding. In such case, use user token type and the provided user id. |
||
| 7189 |
Michael D Adams
Ben Lobaugh
Daniel Walmsley
georgestephanis
Mikael Korpela
Loading history...
If you suppress an error, we recommend checking for the error condition explicitly: