Automattic /
jetpack
These results are based on our legacy PHP analysis, consider migrating to our new PHP analysis engine instead. Learn more
| 1 | <?php |
||
| 283 | * |
||
| 284 | * @var array |
||
| 285 | */ |
||
| 286 | static $security_report = array(); |
||
|
|
|||
| 287 | |||
| 288 | /** |
||
| 289 | * Jetpack_Sync object |
||
| 2563 | // We can't activate the module on this page load since the newly deactivated old plugin is still loaded on this page load. |
||
| 2564 | Jetpack::state( 'deactivated_plugins', $module ); |
||
| 2565 | wp_safe_redirect( add_query_arg( 'jetpack_restate', 1 ) ); |
||
| 2566 | exit; |
||
| 2567 | } |
||
| 2568 | } |
||
| 2569 | |||
| 2598 | wp_safe_redirect( Jetpack::admin_url( 'page=jetpack' ) ); |
||
| 2599 | } |
||
| 2600 | if ( $exit ) { |
||
| 2601 | exit; |
||
| 2602 | } |
||
| 2603 | return true; |
||
| 2604 | } |
||
| 3203 | case 'wp_ajax_nopriv_jetpack_upload_file' : |
||
| 3204 | $response = $this->upload_handler(); |
||
| 3205 | break; |
||
| 3206 | default : |
||
| 3207 | $response = new Jetpack_Error( 'unknown_handler', 'Unknown Handler', 400 ); |
||
| 3208 | break; |
||
| 3209 | } |
||
| 3689 | if ( isset( $_GET['notes_iframe'] ) ) |
||
| 3690 | $connect_url .= '¬es_iframe'; |
||
| 3691 | wp_redirect( $connect_url ); |
||
| 3692 | exit; |
||
| 3693 | } else { |
||
| 3694 | if ( ! isset( $_GET['calypso_env'] ) ) { |
||
| 3695 | Jetpack::state( 'message', 'already_authorized' ); |
||
| 3709 | if ( Jetpack::is_active() && Jetpack::is_user_connected() ) { |
||
| 3710 | Jetpack::state( 'message', 'already_authorized' ); |
||
| 3711 | wp_safe_redirect( Jetpack::admin_url() ); |
||
| 3712 | exit; |
||
| 3713 | } |
||
| 3714 | Jetpack::log( 'authorize' ); |
||
| 3715 | $client_server = new Jetpack_Client_Server; |
||
| 3716 | $client_server->client_authorize(); |
||
| 3717 | exit; |
||
| 3718 | case 'register' : |
||
| 3719 | if ( ! current_user_can( 'jetpack_connect' ) ) { |
||
| 3720 | $error = 'cheatin'; |
||
| 3733 | $from = isset( $_GET['from'] ) ? $_GET['from'] : false; |
||
| 3734 | |||
| 3735 | wp_redirect( $this->build_connect_url( true, false, $from ) ); |
||
| 3736 | exit; |
||
| 3737 | case 'activate' : |
||
| 3738 | if ( ! current_user_can( 'jetpack_activate_modules' ) ) { |
||
| 3739 | $error = 'cheatin'; |
||
| 3746 | Jetpack::activate_module( $module ); |
||
| 3747 | // The following two lines will rarely happen, as Jetpack::activate_module normally exits at the end. |
||
| 3748 | wp_safe_redirect( Jetpack::admin_url( 'page=jetpack' ) ); |
||
| 3749 | exit; |
||
| 3750 | case 'activate_default_modules' : |
||
| 3751 | check_admin_referer( 'activate_default_modules' ); |
||
| 3752 | Jetpack::log( 'activate_default_modules' ); |
||
| 3756 | $other_modules = isset( $_GET['other_modules'] ) && is_array( $_GET['other_modules'] ) ? $_GET['other_modules'] : array(); |
||
| 3757 | Jetpack::activate_default_modules( $min_version, $max_version, $other_modules ); |
||
| 3758 | wp_safe_redirect( Jetpack::admin_url( 'page=jetpack' ) ); |
||
| 3759 | exit; |
||
| 3760 | case 'disconnect' : |
||
| 3761 | if ( ! current_user_can( 'jetpack_disconnect' ) ) { |
||
| 3762 | $error = 'cheatin'; |
||
| 3767 | Jetpack::log( 'disconnect' ); |
||
| 3768 | Jetpack::disconnect(); |
||
| 3769 | wp_safe_redirect( Jetpack::admin_url( 'disconnected=true' ) ); |
||
| 3770 | exit; |
||
| 3771 | case 'reconnect' : |
||
| 3772 | if ( ! current_user_can( 'jetpack_reconnect' ) ) { |
||
| 3773 | $error = 'cheatin'; |
||
| 3778 | Jetpack::log( 'reconnect' ); |
||
| 3779 | $this->disconnect(); |
||
| 3780 | wp_redirect( $this->build_connect_url( true, false, 'reconnect' ) ); |
||
| 3781 | exit; |
||
| 3782 | View Code Duplication | case 'deactivate' : |
|
| 3783 | if ( ! current_user_can( 'jetpack_deactivate_modules' ) ) { |
||
| 3784 | $error = 'cheatin'; |
||
| 3794 | } |
||
| 3795 | Jetpack::state( 'module', $modules ); |
||
| 3796 | wp_safe_redirect( Jetpack::admin_url( 'page=jetpack' ) ); |
||
| 3797 | exit; |
||
| 3798 | case 'unlink' : |
||
| 3799 | $redirect = isset( $_GET['redirect'] ) ? $_GET['redirect'] : ''; |
||
| 3800 | check_admin_referer( 'jetpack-unlink' ); |
||
| 3806 | } else { |
||
| 3807 | wp_safe_redirect( Jetpack::admin_url( array( 'page' => $redirect ) ) ); |
||
| 3808 | } |
||
| 3809 | exit; |
||
| 3810 | default: |
||
| 3811 | /** |
||
| 3812 | * Fires when a Jetpack admin page is loaded with an unrecognized parameter. |
||
| 3893 | case 'token_http_request_failed' : |
||
| 3894 | $this->error = sprintf( __( 'Jetpack could not contact WordPress.com: %s. This usually means something is incorrectly configured on your web host.', 'jetpack' ), "<code>$error</code>" ); |
||
| 3895 | break; |
||
| 3896 | default : |
||
| 3897 | if ( empty( $error ) ) { |
||
| 3898 | break; |
||
| 3899 | } |
||
| 3973 | $titles[] = '<strong>' . preg_replace( '/\s+(?![^<>]++>)/', ' ', $mod_headers['name'] ) . '</strong>'; |
||
| 3974 | } |
||
| 3975 | } |
||
| 3976 | if ( $titles ) { |
||
| 3977 | $this->message .= '<br /><br />' . wp_sprintf( __( 'The following new modules have been activated: %l.', 'jetpack' ), $titles ); |
||
| 3978 | } |
||
| 3979 | } |
||
| 3985 | $titles[] = '<strong>' . preg_replace( '/\s+(?![^<>]++>)/', ' ', $mod_headers['name'] ) . '</strong>'; |
||
| 3986 | } |
||
| 3987 | } |
||
| 3988 | if ( $titles ) { |
||
| 3989 | $this->message .= '<br /><br />' . wp_sprintf( __( 'The following modules have been updated: %l.', 'jetpack' ), $titles ); |
||
| 3990 | } |
||
| 3991 | } |
||
| 6795 |
georgestephanis
Sam Hotchkiss
Loading history...
The PSR-2 coding standard requires that all properties in a class have their visibility explicitly declared. If you declare a property using
the property is implicitly global.
To learn more about the PSR-2, please see the PHP-FIG site on the PSR-2.