Completed
Push — update/connection-url-track ( c0bb7e...4281d0 )
by
unknown
19:23 queued 09:51
created

class.jetpack.php (5 issues)

Upgrade to new PHP Analysis Engine

These results are based on our legacy PHP analysis, consider migrating to our new PHP analysis engine instead. Learn more

1
<?php
2
3
/*
4
Options:
5
jetpack_options (array)
6
	An array of options.
7
	@see Jetpack_Options::get_option_names()
8
9
jetpack_register (string)
10
	Temporary verification secrets.
11
12
jetpack_activated (int)
13
	1: the plugin was activated normally
14
	2: the plugin was activated on this site because of a network-wide activation
15
	3: the plugin was auto-installed
16
	4: the plugin was manually disconnected (but is still installed)
17
18
jetpack_active_modules (array)
19
	Array of active module slugs.
20
21
jetpack_do_activate (bool)
22
	Flag for "activating" the plugin on sites where the activation hook never fired (auto-installs)
23
*/
24
25
class Jetpack {
26
	public $xmlrpc_server = null;
27
28
	private $xmlrpc_verification = null;
29
30
	public $HTTP_RAW_POST_DATA = null; // copy of $GLOBALS['HTTP_RAW_POST_DATA']
31
32
	/**
33
	 * @var array The handles of styles that are concatenated into jetpack.css
34
	 */
35
	public $concatenated_style_handles = array(
36
		'jetpack-carousel',
37
		'grunion.css',
38
		'the-neverending-homepage',
39
		'jetpack_likes',
40
		'jetpack_related-posts',
41
		'sharedaddy',
42
		'jetpack-slideshow',
43
		'presentations',
44
		'jetpack-subscriptions',
45
		'tiled-gallery',
46
		'widget-conditions',
47
		'jetpack_display_posts_widget',
48
		'gravatar-profile-widget',
49
		'widget-grid-and-list',
50
		'jetpack-widgets',
51
		'goodreads-widget',
52
		'jetpack_social_media_icons_widget',
53
	);
54
55
	public $plugins_to_deactivate = array(
56
		'stats'               => array( 'stats/stats.php', 'WordPress.com Stats' ),
57
		'shortlinks'          => array( 'stats/stats.php', 'WordPress.com Stats' ),
58
		'sharedaddy'          => array( 'sharedaddy/sharedaddy.php', 'Sharedaddy' ),
59
		'twitter-widget'      => array( 'wickett-twitter-widget/wickett-twitter-widget.php', 'Wickett Twitter Widget' ),
60
		'after-the-deadline'  => array( 'after-the-deadline/after-the-deadline.php', 'After The Deadline' ),
61
		'contact-form'        => array( 'grunion-contact-form/grunion-contact-form.php', 'Grunion Contact Form' ),
62
		'contact-form'        => array( 'mullet/mullet-contact-form.php', 'Mullet Contact Form' ),
63
		'custom-css'          => array( 'safecss/safecss.php', 'WordPress.com Custom CSS' ),
64
		'random-redirect'     => array( 'random-redirect/random-redirect.php', 'Random Redirect' ),
65
		'videopress'          => array( 'video/video.php', 'VideoPress' ),
66
		'widget-visibility'   => array( 'jetpack-widget-visibility/widget-visibility.php', 'Jetpack Widget Visibility' ),
67
		'widget-visibility'   => array( 'widget-visibility-without-jetpack/widget-visibility-without-jetpack.php', 'Widget Visibility Without Jetpack' ),
68
		'sharedaddy'          => array( 'jetpack-sharing/sharedaddy.php', 'Jetpack Sharing' ),
69
		'omnisearch'          => array( 'jetpack-omnisearch/omnisearch.php', 'Jetpack Omnisearch' ),
70
		'gravatar-hovercards' => array( 'jetpack-gravatar-hovercards/gravatar-hovercards.php', 'Jetpack Gravatar Hovercards' ),
71
		'latex'               => array( 'wp-latex/wp-latex.php', 'WP LaTeX' )
72
	);
73
74
	public $capability_translations = array(
75
		'administrator' => 'manage_options',
76
		'editor'        => 'edit_others_posts',
77
		'author'        => 'publish_posts',
78
		'contributor'   => 'edit_posts',
79
		'subscriber'    => 'read',
80
	);
81
82
	/**
83
	 * Map of modules that have conflicts with plugins and should not be auto-activated
84
	 * if the plugins are active.  Used by filter_default_modules
85
	 *
86
	 * Plugin Authors: If you'd like to prevent a single module from auto-activating,
87
	 * change `module-slug` and add this to your plugin:
88
	 *
89
	 * add_filter( 'jetpack_get_default_modules', 'my_jetpack_get_default_modules' );
90
	 * function my_jetpack_get_default_modules( $modules ) {
91
	 *     return array_diff( $modules, array( 'module-slug' ) );
92
	 * }
93
	 *
94
	 * @var array
95
	 */
96
	private $conflicting_plugins = array(
97
		'comments'          => array(
98
			'Intense Debate'                       => 'intensedebate/intensedebate.php',
99
			'Disqus'                               => 'disqus-comment-system/disqus.php',
100
			'Livefyre'                             => 'livefyre-comments/livefyre.php',
101
			'Comments Evolved for WordPress'       => 'gplus-comments/comments-evolved.php',
102
			'Google+ Comments'                     => 'google-plus-comments/google-plus-comments.php',
103
			'WP-SpamShield Anti-Spam'              => 'wp-spamshield/wp-spamshield.php',
104
		),
105
		'contact-form'      => array(
106
			'Contact Form 7'                       => 'contact-form-7/wp-contact-form-7.php',
107
			'Gravity Forms'                        => 'gravityforms/gravityforms.php',
108
			'Contact Form Plugin'                  => 'contact-form-plugin/contact_form.php',
109
			'Easy Contact Forms'                   => 'easy-contact-forms/easy-contact-forms.php',
110
			'Fast Secure Contact Form'             => 'si-contact-form/si-contact-form.php',
111
		),
112
		'minileven'         => array(
113
			'WPtouch'                              => 'wptouch/wptouch.php',
114
		),
115
		'latex'             => array(
116
			'LaTeX for WordPress'                  => 'latex/latex.php',
117
			'Youngwhans Simple Latex'              => 'youngwhans-simple-latex/yw-latex.php',
118
			'Easy WP LaTeX'                        => 'easy-wp-latex-lite/easy-wp-latex-lite.php',
119
			'MathJax-LaTeX'                        => 'mathjax-latex/mathjax-latex.php',
120
			'Enable Latex'                         => 'enable-latex/enable-latex.php',
121
			'WP QuickLaTeX'                        => 'wp-quicklatex/wp-quicklatex.php',
122
		),
123
		'protect'           => array(
124
			'Limit Login Attempts'                 => 'limit-login-attempts/limit-login-attempts.php',
125
			'Captcha'                              => 'captcha/captcha.php',
126
			'Brute Force Login Protection'         => 'brute-force-login-protection/brute-force-login-protection.php',
127
			'Login Security Solution'              => 'login-security-solution/login-security-solution.php',
128
			'WPSecureOps Brute Force Protect'      => 'wpsecureops-bruteforce-protect/wpsecureops-bruteforce-protect.php',
129
			'BulletProof Security'                 => 'bulletproof-security/bulletproof-security.php',
130
			'SiteGuard WP Plugin'                  => 'siteguard/siteguard.php',
131
			'Security-protection'                  => 'security-protection/security-protection.php',
132
			'Login Security'                       => 'login-security/login-security.php',
133
			'Botnet Attack Blocker'                => 'botnet-attack-blocker/botnet-attack-blocker.php',
134
			'Wordfence Security'                   => 'wordfence/wordfence.php',
135
			'All In One WP Security & Firewall'    => 'all-in-one-wp-security-and-firewall/wp-security.php',
136
			'iThemes Security'                     => 'better-wp-security/better-wp-security.php',
137
		),
138
		'random-redirect'   => array(
139
			'Random Redirect 2'                    => 'random-redirect-2/random-redirect.php',
140
		),
141
		'related-posts'     => array(
142
			'YARPP'                                => 'yet-another-related-posts-plugin/yarpp.php',
143
			'WordPress Related Posts'              => 'wordpress-23-related-posts-plugin/wp_related_posts.php',
144
			'nrelate Related Content'              => 'nrelate-related-content/nrelate-related.php',
145
			'Contextual Related Posts'             => 'contextual-related-posts/contextual-related-posts.php',
146
			'Related Posts for WordPress'          => 'microkids-related-posts/microkids-related-posts.php',
147
			'outbrain'                             => 'outbrain/outbrain.php',
148
			'Shareaholic'                          => 'shareaholic/shareaholic.php',
149
			'Sexybookmarks'                        => 'sexybookmarks/shareaholic.php',
150
		),
151
		'sharedaddy'        => array(
152
			'AddThis'                              => 'addthis/addthis_social_widget.php',
153
			'Add To Any'                           => 'add-to-any/add-to-any.php',
154
			'ShareThis'                            => 'share-this/sharethis.php',
155
			'Shareaholic'                          => 'shareaholic/shareaholic.php',
156
		),
157
		'verification-tools' => array(
158
			'WordPress SEO by Yoast'               => 'wordpress-seo/wp-seo.php',
159
			'WordPress SEO Premium by Yoast'       => 'wordpress-seo-premium/wp-seo-premium.php',
160
			'All in One SEO Pack'                  => 'all-in-one-seo-pack/all_in_one_seo_pack.php',
161
		),
162
		'widget-visibility' => array(
163
			'Widget Logic'                         => 'widget-logic/widget_logic.php',
164
			'Dynamic Widgets'                      => 'dynamic-widgets/dynamic-widgets.php',
165
		),
166
		'sitemaps' => array(
167
			'Google XML Sitemaps'                  => 'google-sitemap-generator/sitemap.php',
168
			'Better WordPress Google XML Sitemaps' => 'bwp-google-xml-sitemaps/bwp-simple-gxs.php',
169
			'Google XML Sitemaps for qTranslate'   => 'google-xml-sitemaps-v3-for-qtranslate/sitemap.php',
170
			'XML Sitemap & Google News feeds'      => 'xml-sitemap-feed/xml-sitemap.php',
171
			'Google Sitemap by BestWebSoft'        => 'google-sitemap-plugin/google-sitemap-plugin.php',
172
			'WordPress SEO by Yoast'               => 'wordpress-seo/wp-seo.php',
173
			'WordPress SEO Premium by Yoast'       => 'wordpress-seo-premium/wp-seo-premium.php',
174
			'All in One SEO Pack'                  => 'all-in-one-seo-pack/all_in_one_seo_pack.php',
175
			'Sitemap'                              => 'sitemap/sitemap.php',
176
			'Simple Wp Sitemap'                    => 'simple-wp-sitemap/simple-wp-sitemap.php',
177
			'Simple Sitemap'                       => 'simple-sitemap/simple-sitemap.php',
178
			'XML Sitemaps'                         => 'xml-sitemaps/xml-sitemaps.php',
179
			'MSM Sitemaps'                         => 'msm-sitemap/msm-sitemap.php',
180
		),
181
	);
182
183
	/**
184
	 * Plugins for which we turn off our Facebook OG Tags implementation.
185
	 *
186
	 * Note: WordPress SEO by Yoast and WordPress SEO Premium by Yoast automatically deactivate
187
	 * Jetpack's Open Graph tags via filter when their Social Meta modules are active.
188
	 *
189
	 * Plugin authors: If you'd like to prevent Jetpack's Open Graph tag generation in your plugin, you can do so via this filter:
190
	 * add_filter( 'jetpack_enable_open_graph', '__return_false' );
191
	 */
192
	private $open_graph_conflicting_plugins = array(
193
		'2-click-socialmedia-buttons/2-click-socialmedia-buttons.php',
194
		                                                         // 2 Click Social Media Buttons
195
		'add-link-to-facebook/add-link-to-facebook.php',         // Add Link to Facebook
196
		'add-meta-tags/add-meta-tags.php',                       // Add Meta Tags
197
		'easy-facebook-share-thumbnails/esft.php',               // Easy Facebook Share Thumbnail
198
		'facebook/facebook.php',                                 // Facebook (official plugin)
199
		'facebook-awd/AWD_facebook.php',                         // Facebook AWD All in one
200
		'facebook-featured-image-and-open-graph-meta-tags/fb-featured-image.php',
201
		                                                         // Facebook Featured Image & OG Meta Tags
202
		'facebook-meta-tags/facebook-metatags.php',              // Facebook Meta Tags
203
		'wonderm00ns-simple-facebook-open-graph-tags/wonderm00n-open-graph.php',
204
		                                                         // Facebook Open Graph Meta Tags for WordPress
205
		'facebook-revised-open-graph-meta-tag/index.php',        // Facebook Revised Open Graph Meta Tag
206
		'facebook-thumb-fixer/_facebook-thumb-fixer.php',        // Facebook Thumb Fixer
207
		'facebook-and-digg-thumbnail-generator/facebook-and-digg-thumbnail-generator.php',
208
		                                                         // Fedmich's Facebook Open Graph Meta
209
		'header-footer/plugin.php',                              // Header and Footer
210
		'network-publisher/networkpub.php',                      // Network Publisher
211
		'nextgen-facebook/nextgen-facebook.php',                 // NextGEN Facebook OG
212
		'social-networks-auto-poster-facebook-twitter-g/NextScripts_SNAP.php',
213
		                                                         // NextScripts SNAP
214
		'opengraph/opengraph.php',                               // Open Graph
215
		'open-graph-protocol-framework/open-graph-protocol-framework.php',
216
		                                                         // Open Graph Protocol Framework
217
		'seo-facebook-comments/seofacebook.php',                 // SEO Facebook Comments
218
		'seo-ultimate/seo-ultimate.php',                         // SEO Ultimate
219
		'sexybookmarks/sexy-bookmarks.php',                      // Shareaholic
220
		'shareaholic/sexy-bookmarks.php',                        // Shareaholic
221
		'sharepress/sharepress.php',                             // SharePress
222
		'simple-facebook-connect/sfc.php',                       // Simple Facebook Connect
223
		'social-discussions/social-discussions.php',             // Social Discussions
224
		'social-sharing-toolkit/social_sharing_toolkit.php',     // Social Sharing Toolkit
225
		'socialize/socialize.php',                               // Socialize
226
		'only-tweet-like-share-and-google-1/tweet-like-plusone.php',
227
		                                                         // Tweet, Like, Google +1 and Share
228
		'wordbooker/wordbooker.php',                             // Wordbooker
229
		'wpsso/wpsso.php',                                       // WordPress Social Sharing Optimization
230
		'wp-caregiver/wp-caregiver.php',                         // WP Caregiver
231
		'wp-facebook-like-send-open-graph-meta/wp-facebook-like-send-open-graph-meta.php',
232
		                                                         // WP Facebook Like Send & Open Graph Meta
233
		'wp-facebook-open-graph-protocol/wp-facebook-ogp.php',   // WP Facebook Open Graph protocol
234
		'wp-ogp/wp-ogp.php',                                     // WP-OGP
235
		'zoltonorg-social-plugin/zosp.php',                      // Zolton.org Social Plugin
236
		'wp-fb-share-like-button/wp_fb_share-like_widget.php'    // WP Facebook Like Button
237
	);
238
239
	/**
240
	 * Plugins for which we turn off our Twitter Cards Tags implementation.
241
	 */
242
	private $twitter_cards_conflicting_plugins = array(
243
	//	'twitter/twitter.php',                       // The official one handles this on its own.
244
	//	                                             // https://github.com/twitter/wordpress/blob/master/src/Twitter/WordPress/Cards/Compatibility.php
245
		'eewee-twitter-card/index.php',              // Eewee Twitter Card
246
		'ig-twitter-cards/ig-twitter-cards.php',     // IG:Twitter Cards
247
		'jm-twitter-cards/jm-twitter-cards.php',     // JM Twitter Cards
248
		'kevinjohn-gallagher-pure-web-brilliants-social-graph-twitter-cards-extention/kevinjohn_gallagher___social_graph_twitter_output.php',
249
		                                             // Pure Web Brilliant's Social Graph Twitter Cards Extension
250
		'twitter-cards/twitter-cards.php',           // Twitter Cards
251
		'twitter-cards-meta/twitter-cards-meta.php', // Twitter Cards Meta
252
		'wp-twitter-cards/twitter_cards.php',        // WP Twitter Cards
253
	);
254
255
	/**
256
	 * Message to display in admin_notice
257
	 * @var string
258
	 */
259
	public $message = '';
260
261
	/**
262
	 * Error to display in admin_notice
263
	 * @var string
264
	 */
265
	public $error = '';
266
267
	/**
268
	 * Modules that need more privacy description.
269
	 * @var string
270
	 */
271
	public $privacy_checks = '';
272
273
	/**
274
	 * Stats to record once the page loads
275
	 *
276
	 * @var array
277
	 */
278
	public $stats = array();
279
280
	/**
281
	 * Allows us to build a temporary security report
282
	 *
283
	 * @var array
284
	 */
285
	static $security_report = array();
286
287
	/**
288
	 * Jetpack_Sync object
289
	 */
290
	public $sync;
291
292
	/**
293
	 * Verified data for JSON authorization request
294
	 */
295
	public $json_api_authorization_request = array();
296
297
	/**
298
	 * Holds the singleton instance of this class
299
	 * @since 2.3.3
300
	 * @var Jetpack
301
	 */
302
	static $instance = false;
303
304
	/**
305
	 * Singleton
306
	 * @static
307
	 */
308
	public static function init() {
309
		if ( ! self::$instance ) {
310
			if ( did_action( 'plugins_loaded' ) )
311
				self::plugin_textdomain();
312
			else
313
				add_action( 'plugins_loaded', array( __CLASS__, 'plugin_textdomain' ), 99 );
314
315
			self::$instance = new Jetpack;
316
317
			self::$instance->plugin_upgrade();
318
319
			add_action( 'init', array( __CLASS__, 'perform_security_reporting' ) );
320
321
		}
322
323
		return self::$instance;
324
	}
325
326
	/**
327
	 * Must never be called statically
328
	 */
329
	function plugin_upgrade() {
330
		if ( Jetpack::is_active() ) {
331
			list( $version ) = explode( ':', Jetpack_Options::get_option( 'version' ) );
332
			if ( JETPACK__VERSION != $version ) {
333
334
				// Check which active modules actually exist and remove others from active_modules list
335
				$unfiltered_modules = Jetpack::get_active_modules();
336
				$modules = array_filter( $unfiltered_modules, array( 'Jetpack', 'is_module' ) );
337
				if ( array_diff( $unfiltered_modules, $modules ) ) {
338
					Jetpack_Options::update_option( 'active_modules', $modules );
339
				}
340
341
				add_action( 'init', array( __CLASS__, 'activate_new_modules' ) );
342
				/**
343
				 * Fires when synchronizing all registered options and constants.
344
				 *
345
				 * @since 3.3.0
346
				 */
347
				do_action( 'jetpack_sync_all_registered_options' );
348
			}
349
		}
350
	}
351
352
	static function activate_manage( ) {
353
354
		if ( did_action( 'init' ) || current_filter() == 'init' ) {
355
			self::activate_module( 'manage', false, false );
356
		} else if ( !  has_action( 'init' , array( __CLASS__, 'activate_manage' ) ) ) {
357
			add_action( 'init', array( __CLASS__, 'activate_manage' ) );
358
		}
359
360
	}
361
362
	/**
363
	 * Constructor.  Initializes WordPress hooks
364
	 */
365
	private function __construct() {
366
		/*
367
		 * Check for and alert any deprecated hooks
368
		 */
369
		add_action( 'init', array( $this, 'deprecated_hooks' ) );
370
371
		/*
372
		 * Do things that should run even in the network admin
373
		 * here, before we potentially fail out.
374
		 */
375
		add_filter( 'jetpack_require_lib_dir', array( $this, 'require_lib_dir' ) );
376
377
		/**
378
		 * We need sync object even in Multisite mode
379
		 */
380
		$this->sync = new Jetpack_Sync;
381
382
		/**
383
		 * Trigger a wp_version sync when updating WP versions
384
		 **/
385
		add_action( 'upgrader_process_complete', array( 'Jetpack', 'update_get_wp_version' ), 10, 2 );
386
		$this->sync->mock_option( 'wp_version', array( 'Jetpack', 'get_wp_version' ) );
387
388
		add_action( 'init', array( $this, 'sync_update_data') );
389
		add_action( 'init', array( $this, 'sync_theme_data' ) );
390
391
		/*
392
		 * Load things that should only be in Network Admin.
393
		 *
394
		 * For now blow away everything else until a more full
395
		 * understanding of what is needed at the network level is
396
		 * available
397
		 */
398
		if( is_multisite() ) {
399
			Jetpack_Network::init();
400
401
			// Only sync this info if we are on a multi site
402
			// @since  3.7
403
			$this->sync->mock_option( 'network_name', array( 'Jetpack', 'network_name' ) );
404
			$this->sync->mock_option( 'network_allow_new_registrations', array( 'Jetpack', 'network_allow_new_registrations' ) );
405
			$this->sync->mock_option( 'network_add_new_users', array( 'Jetpack', 'network_add_new_users' ) );
406
			$this->sync->mock_option( 'network_site_upload_space', array( 'Jetpack', 'network_site_upload_space' ) );
407
			$this->sync->mock_option( 'network_upload_file_types', array( 'Jetpack', 'network_upload_file_types' ) );
408
			$this->sync->mock_option( 'network_enable_administration_menus', array( 'Jetpack', 'network_enable_administration_menus' ) );
409
410
			if( is_network_admin() ) {
411
				// Sync network site data if it is updated or not.
412
				add_action( 'update_wpmu_options', array( $this, 'update_jetpack_network_settings' ) );
413
				return; // End here to prevent single site actions from firing
414
			}
415
		}
416
417
418
		$theme_slug = get_option( 'stylesheet' );
419
420
421
		// Modules should do Jetpack_Sync::sync_options( __FILE__, $option, ... ); instead
422
		// We access the "internal" method here only because the Jetpack object isn't instantiated yet
423
		$this->sync->options(
424
			JETPACK__PLUGIN_DIR . 'jetpack.php',
425
			'home',
426
			'siteurl',
427
			'blogname',
428
			'gmt_offset',
429
			'timezone_string',
430
			'security_report',
431
			'stylesheet',
432
			"theme_mods_{$theme_slug}",
433
			'jetpack_sync_non_public_post_stati',
434
			'jetpack_options',
435
			'site_icon', // (int) - ID of core's Site Icon attachment ID
436
			'default_post_format',
437
			'default_category',
438
			'large_size_w',
439
			'large_size_h',
440
			'thumbnail_size_w',
441
			'thumbnail_size_h',
442
			'medium_size_w',
443
			'medium_size_h',
444
			'thumbnail_crop',
445
			'image_default_link_type'
446
		);
447
448
		foreach( Jetpack_Options::get_option_names( 'non-compact' ) as $option ) {
449
			$this->sync->options( __FILE__, 'jetpack_' . $option );
450
		}
451
452
		/**
453
		 * Sometimes you want to sync data to .com without adding options to .org sites.
454
		 * The mock option allows you to do just that.
455
		 */
456
		$this->sync->mock_option( 'is_main_network',   array( $this, 'is_main_network_option' ) );
457
		$this->sync->mock_option( 'is_multi_site', array( $this, 'is_multisite' ) );
458
		$this->sync->mock_option( 'main_network_site', array( $this, 'jetpack_main_network_site_option' ) );
459
		$this->sync->mock_option( 'single_user_site', array( 'Jetpack', 'is_single_user_site' ) );
460
		$this->sync->mock_option( 'stat_data', array( $this, 'get_stat_data' ) );
461
462
		$this->sync->mock_option( 'has_file_system_write_access', array( 'Jetpack', 'file_system_write_access' ) );
463
		$this->sync->mock_option( 'is_version_controlled', array( 'Jetpack', 'is_version_controlled' ) );
464
		$this->sync->mock_option( 'max_upload_size', 'wp_max_upload_size' );
465
		$this->sync->mock_option( 'content_width', array( 'Jetpack', 'get_content_width' ) );
466
467
		/**
468
		 * Trigger an update to the main_network_site when we update the blogname of a site.
469
		 *
470
		 */
471
		add_action( 'update_option_siteurl', array( $this, 'update_jetpack_main_network_site_option' ) );
472
473
		add_action( 'update_option', array( $this, 'log_settings_change' ), 10, 3 );
474
475
		// Update the settings everytime the we register a new user to the site or we delete a user.
476
		add_action( 'user_register', array( $this, 'is_single_user_site_invalidate' ) );
477
		add_action( 'deleted_user', array( $this, 'is_single_user_site_invalidate' ) );
478
479
		// Unlink user before deleting the user from .com
480
		add_action( 'deleted_user', array( $this, 'unlink_user' ), 10, 1 );
481
		add_action( 'remove_user_from_blog', array( $this, 'unlink_user' ), 10, 1 );
482
483
		if ( defined( 'XMLRPC_REQUEST' ) && XMLRPC_REQUEST && isset( $_GET['for'] ) && 'jetpack' == $_GET['for'] ) {
484
			@ini_set( 'display_errors', false ); // Display errors can cause the XML to be not well formed.
485
486
			require_once JETPACK__PLUGIN_DIR . 'class.jetpack-xmlrpc-server.php';
487
			$this->xmlrpc_server = new Jetpack_XMLRPC_Server();
488
489
			$this->require_jetpack_authentication();
490
491
			if ( Jetpack::is_active() ) {
492
				// Hack to preserve $HTTP_RAW_POST_DATA
493
				add_filter( 'xmlrpc_methods', array( $this, 'xmlrpc_methods' ) );
494
495
				$signed = $this->verify_xml_rpc_signature();
496
				if ( $signed && ! is_wp_error( $signed ) ) {
497
					// The actual API methods.
498
					add_filter( 'xmlrpc_methods', array( $this->xmlrpc_server, 'xmlrpc_methods' ) );
499
				} else {
500
					add_filter( 'xmlrpc_methods', '__return_empty_array' );
501
				}
502
			} else {
503
				// The bootstrap API methods.
504
				add_filter( 'xmlrpc_methods', array( $this->xmlrpc_server, 'bootstrap_xmlrpc_methods' ) );
505
			}
506
507
			// Now that no one can authenticate, and we're whitelisting all XML-RPC methods, force enable_xmlrpc on.
508
			add_filter( 'pre_option_enable_xmlrpc', '__return_true' );
509
		} elseif ( is_admin() && isset( $_POST['action'] ) && 'jetpack_upload_file' == $_POST['action'] ) {
510
			$this->require_jetpack_authentication();
511
			$this->add_remote_request_handlers();
512
		} else {
513
			if ( Jetpack::is_active() ) {
514
				add_action( 'login_form_jetpack_json_api_authorization', array( &$this, 'login_form_json_api_authorization' ) );
515
				add_filter( 'xmlrpc_methods', array( $this, 'public_xmlrpc_methods' ) );
516
			}
517
		}
518
519
		if ( Jetpack::is_active() ) {
520
			Jetpack_Heartbeat::init();
521
		}
522
523
		add_action( 'jetpack_clean_nonces', array( 'Jetpack', 'clean_nonces' ) );
524
		if ( ! wp_next_scheduled( 'jetpack_clean_nonces' ) ) {
525
			wp_schedule_event( time(), 'hourly', 'jetpack_clean_nonces' );
526
		}
527
528
		add_filter( 'xmlrpc_blog_options', array( $this, 'xmlrpc_options' ) );
529
530
		add_action( 'admin_init', array( $this, 'admin_init' ) );
531
		add_action( 'admin_init', array( $this, 'dismiss_jetpack_notice' ) );
532
533
		add_filter( 'admin_body_class', array( $this, 'admin_body_class' ) );
534
535
		add_action( 'wp_dashboard_setup', array( $this, 'wp_dashboard_setup' ) );
536
		// Filter the dashboard meta box order to swap the new one in in place of the old one.
537
		add_filter( 'get_user_option_meta-box-order_dashboard', array( $this, 'get_user_option_meta_box_order_dashboard' ) );
538
539
		add_action( 'wp_ajax_jetpack-sync-reindex-trigger', array( $this, 'sync_reindex_trigger' ) );
540
		add_action( 'wp_ajax_jetpack-sync-reindex-status', array( $this, 'sync_reindex_status' ) );
541
542
		// Jump Start AJAX callback function
543
		add_action( 'wp_ajax_jetpack_jumpstart_ajax',  array( $this, 'jetpack_jumpstart_ajax_callback' ) );
544
		add_action( 'update_option', array( $this, 'jumpstart_has_updated_module_option' ) );
545
546
		// Identity Crisis AJAX callback function
547
		add_action( 'wp_ajax_jetpack_resolve_identity_crisis', array( $this, 'resolve_identity_crisis_ajax_callback' ) );
548
549
		// JITM AJAX callback function
550
		add_action( 'wp_ajax_jitm_ajax',  array( $this, 'jetpack_jitm_ajax_callback' ) );
551
552
		add_action( 'wp_ajax_jetpack_admin_ajax',          array( $this, 'jetpack_admin_ajax_callback' ) );
553
		add_action( 'wp_ajax_jetpack_admin_ajax_refresh',  array( $this, 'jetpack_admin_ajax_refresh_data' ) );
554
555
		// Universal ajax callback for all tracking events triggered via js
556
		add_action( 'wp_ajax_jetpack_tracks', array( $this, 'jetpack_admin_ajax_tracks_callback' ) );
557
558
		add_action( 'wp_loaded', array( $this, 'register_assets' ) );
559
		add_action( 'wp_enqueue_scripts', array( $this, 'devicepx' ) );
560
		add_action( 'customize_controls_enqueue_scripts', array( $this, 'devicepx' ) );
561
		add_action( 'admin_enqueue_scripts', array( $this, 'devicepx' ) );
562
563
		add_action( 'jetpack_activate_module', array( $this, 'activate_module_actions' ) );
564
565
		add_action( 'plugins_loaded', array( $this, 'extra_oembed_providers' ), 100 );
566
567
		add_action( 'jetpack_notices', array( $this, 'show_development_mode_notice' ) );
568
569
		/**
570
		 * These actions run checks to load additional files.
571
		 * They check for external files or plugins, so they need to run as late as possible.
572
		 */
573
		add_action( 'wp_head', array( $this, 'check_open_graph' ),       1 );
574
		add_action( 'plugins_loaded', array( $this, 'check_twitter_tags' ),     999 );
575
		add_action( 'plugins_loaded', array( $this, 'check_rest_api_compat' ), 1000 );
576
577
		add_filter( 'plugins_url',      array( 'Jetpack', 'maybe_min_asset' ),     1, 3 );
578
		add_filter( 'style_loader_tag', array( 'Jetpack', 'maybe_inline_style' ), 10, 2 );
579
580
		add_filter( 'map_meta_cap', array( $this, 'jetpack_custom_caps' ), 1, 4 );
581
582
		add_filter( 'jetpack_get_default_modules', array( $this, 'filter_default_modules' ) );
583
		add_filter( 'jetpack_get_default_modules', array( $this, 'handle_deprecated_modules' ), 99 );
584
585
		// A filter to control all just in time messages
586
		add_filter( 'jetpack_just_in_time_msgs', '__return_true' );
587
588
		/**
589
		 * This is the hack to concatinate all css files into one.
590
		 * For description and reasoning see the implode_frontend_css method
591
		 *
592
		 * Super late priority so we catch all the registered styles
593
		 */
594
		if( !is_admin() ) {
595
			add_action( 'wp_print_styles', array( $this, 'implode_frontend_css' ), -1 ); // Run first
596
			add_action( 'wp_print_footer_scripts', array( $this, 'implode_frontend_css' ), -1 ); // Run first to trigger before `print_late_styles`
597
		}
598
599
		// Sync Core Icon: Detect changes in Core's Site Icon and make it syncable.
600
		add_action( 'add_option_site_icon',    array( $this, 'jetpack_sync_core_icon' ) );
601
		add_action( 'update_option_site_icon', array( $this, 'jetpack_sync_core_icon' ) );
602
		add_action( 'delete_option_site_icon', array( $this, 'jetpack_sync_core_icon' ) );
603
		add_action( 'jetpack_heartbeat',       array( $this, 'jetpack_sync_core_icon' ) );
604
605
	}
606
607
	/*
608
	 * Make sure any site icon added to core can get
609
	 * synced back to dotcom, so we can display it there.
610
	 */
611
	function jetpack_sync_core_icon() {
612
		if ( function_exists( 'get_site_icon_url' ) ) {
613
			$url = get_site_icon_url();
614
		} else {
615
			return;
616
		}
617
618
		require_once( JETPACK__PLUGIN_DIR . 'modules/site-icon/site-icon-functions.php' );
619
		// If there's a core icon, maybe update the option.  If not, fall back to Jetpack's.
620
		if ( ! empty( $url ) && $url !== jetpack_site_icon_url() ) {
621
			// This is the option that is synced with dotcom
622
			Jetpack_Options::update_option( 'site_icon_url', $url );
623
		} else if ( empty( $url ) && did_action( 'delete_option_site_icon' ) ) {
624
			Jetpack_Options::delete_option( 'site_icon_url' );
625
		}
626
	}
627
628
	function jetpack_admin_ajax_tracks_callback() {
629
		// Check for nonce
630
		if ( ! isset( $_REQUEST['tracksNonce'] ) || ! wp_verify_nonce( $_REQUEST['tracksNonce'], 'jp-tracks-ajax-nonce' ) ) {
631
			wp_die( 'Permissions check failed.' );
632
		}
633
634
		if ( ! isset( $_REQUEST['tracksEventName'] ) || ! isset( $_REQUEST['tracksEventType'] )  ) {
635
			wp_die( 'No valid event name or type.' );
636
		}
637
638
		$tracks_data = array();
639
		if ( 'click' === $_REQUEST['tracksEventType'] && isset( $_REQUEST['tracksEventProp'] ) ) {
640
			$tracks_data = array( 'clicked' => $_REQUEST['tracksEventProp'] );
641
		}
642
643
		JetpackTracking::record_user_event( $_REQUEST['tracksEventName'], $tracks_data );
644
		wp_send_json_success();
645
		wp_die();
646
	}
647
648
	function jetpack_admin_ajax_callback() {
649
		// Check for nonce
650 View Code Duplication
		if ( ! isset( $_REQUEST['adminNonce'] ) || ! wp_verify_nonce( $_REQUEST['adminNonce'], 'jetpack-admin-nonce' ) || ! current_user_can( 'jetpack_manage_modules' ) ) {
651
			wp_die( 'permissions check failed' );
652
		}
653
654
		if ( isset( $_REQUEST['toggleModule'] ) && 'nux-toggle-module' == $_REQUEST['toggleModule'] ) {
655
			$slug = $_REQUEST['thisModuleSlug'];
656
657
			if ( ! in_array( $slug, Jetpack::get_available_modules() ) ) {
658
				wp_die( 'That is not a Jetpack module slug' );
659
			}
660
661
			if ( Jetpack::is_module_active( $slug ) ) {
662
				Jetpack::deactivate_module( $slug );
663
			} else {
664
				Jetpack::activate_module( $slug, false, false );
665
			}
666
667
			$modules = Jetpack_Admin::init()->get_modules();
668
			echo json_encode( $modules[ $slug ] );
669
670
			exit;
671
		}
672
673
		wp_die();
674
	}
675
676
	/*
677
	 * Sometimes we need to refresh the data,
678
	 * especially if the page is visited via a 'history'
679
	 * event like back/forward
680
	 */
681
	function jetpack_admin_ajax_refresh_data() {
682
		// Check for nonce
683 View Code Duplication
		if ( ! isset( $_REQUEST['adminNonce'] ) || ! wp_verify_nonce( $_REQUEST['adminNonce'], 'jetpack-admin-nonce' ) ) {
684
			wp_die( 'permissions check failed' );
685
		}
686
687
		if ( isset( $_REQUEST['refreshData'] ) && 'refresh' == $_REQUEST['refreshData'] ) {
688
			$modules = Jetpack_Admin::init()->get_modules();
689
			echo json_encode( $modules );
690
			exit;
691
		}
692
693
		wp_die();
694
	}
695
696
	/**
697
	 * The callback for the Jump Start ajax requests.
698
	 */
699
	function jetpack_jumpstart_ajax_callback() {
700
		// Check for nonce
701
		if ( ! isset( $_REQUEST['jumpstartNonce'] ) || ! wp_verify_nonce( $_REQUEST['jumpstartNonce'], 'jetpack-jumpstart-nonce' ) )
702
			wp_die( 'permissions check failed' );
703
704
		if ( isset( $_REQUEST['jumpStartActivate'] ) && 'jump-start-activate' == $_REQUEST['jumpStartActivate'] ) {
705
			// Update the jumpstart option
706
			if ( 'new_connection' === Jetpack_Options::get_option( 'jumpstart' ) ) {
707
				Jetpack_Options::update_option( 'jumpstart', 'jumpstart_activated' );
708
			}
709
710
			// Loops through the requested "Jump Start" modules, and activates them.
711
			// Custom 'no_message' state, so that no message will be shown on reload.
712
			$modules = $_REQUEST['jumpstartModSlug'];
713
			$module_slugs = array();
714
			foreach( $modules as $module => $value ) {
715
				$module_slugs[] = $value['module_slug'];
716
			}
717
718
			// Check for possible conflicting plugins
719
			$module_slugs_filtered = $this->filter_default_modules( $module_slugs );
720
721
			foreach ( $module_slugs_filtered as $module_slug ) {
722
				Jetpack::log( 'activate', $module_slug );
723
				Jetpack::activate_module( $module_slug, false, false );
724
				Jetpack::state( 'message', 'no_message' );
725
			}
726
727
			// Set the default sharing buttons and set to display on posts if none have been set.
728
			$sharing_services = get_option( 'sharing-services' );
729
			$sharing_options  = get_option( 'sharing-options' );
730
			if ( empty( $sharing_services['visible'] ) ) {
731
				// Default buttons to set
732
				$visible = array(
733
					'twitter',
734
					'facebook',
735
					'google-plus-1',
736
				);
737
				$hidden = array();
738
739
				// Set some sharing settings
740
				$sharing = new Sharing_Service();
741
				$sharing_options['global'] = array(
742
					'button_style'  => 'icon',
743
					'sharing_label' => $sharing->default_sharing_label,
744
					'open_links'    => 'same',
745
					'show'          => array( 'post' ),
746
					'custom'        => isset( $sharing_options['global']['custom'] ) ? $sharing_options['global']['custom'] : array()
747
				);
748
749
				update_option( 'sharing-options', $sharing_options );
750
751
				// Send a success response so that we can display an error message.
752
				$success = update_option( 'sharing-services', array( 'visible' => $visible, 'hidden' => $hidden ) );
753
				echo json_encode( $success );
754
				exit;
755
			}
756
757
		} elseif ( isset( $_REQUEST['disableJumpStart'] ) && true == $_REQUEST['disableJumpStart'] ) {
758
			// If dismissed, flag the jumpstart option as such.
759
			// Send a success response so that we can display an error message.
760
			if ( 'new_connection' === Jetpack_Options::get_option( 'jumpstart' ) ) {
761
				$success = Jetpack_Options::update_option( 'jumpstart', 'jumpstart_dismissed' );
762
				echo json_encode( $success );
763
				exit;
764
			}
765
766
		} elseif ( isset( $_REQUEST['jumpStartDeactivate'] ) && 'jump-start-deactivate' == $_REQUEST['jumpStartDeactivate'] ) {
767
768
			// FOR TESTING ONLY
769
			// @todo remove
770
			$modules = (array) $_REQUEST['jumpstartModSlug'];
771
			foreach( $modules as $module => $value ) {
772
				if ( !in_array( $value['module_slug'], Jetpack::get_default_modules() ) ) {
773
					Jetpack::log( 'deactivate', $value['module_slug'] );
774
					Jetpack::deactivate_module( $value['module_slug'] );
775
					Jetpack::state( 'message', 'no_message' );
776
				} else {
777
					Jetpack::log( 'activate', $value['module_slug'] );
778
					Jetpack::activate_module( $value['module_slug'], false, false );
779
					Jetpack::state( 'message', 'no_message' );
780
				}
781
			}
782
783
			Jetpack_Options::update_option( 'jumpstart', 'new_connection' );
784
			echo "reload the page";
785
		}
786
787
		wp_die();
788
	}
789
790
	/**
791
	 * The callback for the JITM ajax requests.
792
	 */
793
	function jetpack_jitm_ajax_callback() {
794
		// Check for nonce
795
		if ( ! isset( $_REQUEST['jitmNonce'] ) || ! wp_verify_nonce( $_REQUEST['jitmNonce'], 'jetpack-jitm-nonce' ) ) {
796
			wp_die( 'Module activation failed due to lack of appropriate permissions' );
797
		}
798
		if ( isset( $_REQUEST['jitmActionToTake'] ) && 'activate' == $_REQUEST['jitmActionToTake'] ) {
799
			$module_slug = $_REQUEST['jitmModule'];
800
			Jetpack::log( 'activate', $module_slug );
801
			Jetpack::activate_module( $module_slug, false, false );
802
			Jetpack::state( 'message', 'no_message' );
803
804
			//A Jetpack module is being activated through a JITM, track it
805
			$this->stat( 'jitm', $module_slug.'-activated-' . JETPACK__VERSION );
806
			$this->do_stats( 'server_side' );
807
808
			wp_send_json_success();
809
		}
810
		if ( isset( $_REQUEST['jitmActionToTake'] ) && 'dismiss' == $_REQUEST['jitmActionToTake'] ) {
811
			// get the hide_jitm options array
812
			$jetpack_hide_jitm = Jetpack_Options::get_option( 'hide_jitm' );
813
			$module_slug = $_REQUEST['jitmModule'];
814
815
			if( ! $jetpack_hide_jitm ) {
816
				$jetpack_hide_jitm = array(
817
					$module_slug => 'hide'
818
				);
819
			} else {
820
				$jetpack_hide_jitm[$module_slug] = 'hide';
821
			}
822
823
			Jetpack_Options::update_option( 'hide_jitm', $jetpack_hide_jitm );
824
825
			//jitm is being dismissed forever, track it
826
			$this->stat( 'jitm', $module_slug.'-dismissed-' . JETPACK__VERSION );
827
			$this->do_stats( 'server_side' );
828
829
			wp_send_json_success();
830
		}
831 View Code Duplication
		if ( isset( $_REQUEST['jitmActionToTake'] ) && 'launch' == $_REQUEST['jitmActionToTake'] ) {
832
			$module_slug = $_REQUEST['jitmModule'];
833
834
			// User went to WordPress.com, track this
835
			$this->stat( 'jitm', $module_slug.'-wordpress-tools-' . JETPACK__VERSION );
836
			$this->do_stats( 'server_side' );
837
838
			wp_send_json_success();
839
		}
840 View Code Duplication
		if ( isset( $_REQUEST['jitmActionToTake'] ) && 'viewed' == $_REQUEST['jitmActionToTake'] ) {
841
			$track = $_REQUEST['jitmModule'];
842
843
			// User is viewing JITM, track it.
844
			$this->stat( 'jitm', $track . '-viewed-' . JETPACK__VERSION );
845
			$this->do_stats( 'server_side' );
846
847
			wp_send_json_success();
848
		}
849
	}
850
851
	/**
852
	 * If there are any stats that need to be pushed, but haven't been, push them now.
853
	 */
854
	function __destruct() {
855
		if ( ! empty( $this->stats ) ) {
856
			$this->do_stats( 'server_side' );
857
		}
858
	}
859
860
	function jetpack_custom_caps( $caps, $cap, $user_id, $args ) {
861
		switch( $cap ) {
862
			case 'jetpack_connect' :
863
			case 'jetpack_reconnect' :
864
				if ( Jetpack::is_development_mode() ) {
865
					$caps = array( 'do_not_allow' );
866
					break;
867
				}
868
				/**
869
				 * Pass through. If it's not development mode, these should match disconnect.
870
				 * Let users disconnect if it's development mode, just in case things glitch.
871
				 */
872
			case 'jetpack_disconnect' :
873
				/**
874
				 * In multisite, can individual site admins manage their own connection?
875
				 *
876
				 * Ideally, this should be extracted out to a separate filter in the Jetpack_Network class.
877
				 */
878
				if ( is_multisite() && ! is_super_admin() && is_plugin_active_for_network( 'jetpack/jetpack.php' ) ) {
879
					if ( ! Jetpack_Network::init()->get_option( 'sub-site-connection-override' ) ) {
880
						/**
881
						 * We need to update the option name -- it's terribly unclear which
882
						 * direction the override goes.
883
						 *
884
						 * @todo: Update the option name to `sub-sites-can-manage-own-connections`
885
						 */
886
						$caps = array( 'do_not_allow' );
887
						break;
888
					}
889
				}
890
891
				$caps = array( 'manage_options' );
892
				break;
893
			case 'jetpack_manage_modules' :
894
			case 'jetpack_activate_modules' :
895
			case 'jetpack_deactivate_modules' :
896
				$caps = array( 'manage_options' );
897
				break;
898
			case 'jetpack_configure_modules' :
899
				$caps = array( 'manage_options' );
900
				break;
901
			case 'jetpack_network_admin_page':
902
			case 'jetpack_network_settings_page':
903
				$caps = array( 'manage_network_plugins' );
904
				break;
905
			case 'jetpack_network_sites_page':
906
				$caps = array( 'manage_sites' );
907
				break;
908
			case 'jetpack_admin_page' :
909
				if ( Jetpack::is_development_mode() ) {
910
					$caps = array( 'manage_options' );
911
					break;
912
				}
913
914
				// Don't ever show to subscribers, but allow access to the page if they're trying to unlink.
915
				if ( ! current_user_can( 'edit_posts' ) ) {
916
					if ( isset( $_GET['redirect'] ) && 'sub-unlink' == $_GET['redirect'] ) {
917
						// We need this in order to unlink the user.
918
						$this->admin_page_load();
919
					}
920
					if ( ! wp_verify_nonce( 'jetpack-unlink' ) ) {
921
						$caps = array( 'do_not_allow' );
922
						break;
923
					}
924
				}
925
926
				if ( ! self::is_active() && ! current_user_can( 'jetpack_connect' ) ) {
927
					$caps = array( 'do_not_allow' );
928
					break;
929
				}
930
				/**
931
				 * Pass through. If it's not development mode, these should match the admin page.
932
				 * Let users disconnect if it's development mode, just in case things glitch.
933
				 */
934
			case 'jetpack_connect_user' :
935
				if ( Jetpack::is_development_mode() ) {
936
					$caps = array( 'do_not_allow' );
937
					break;
938
				}
939
				$caps = array( 'read' );
940
				break;
941
		}
942
		return $caps;
943
	}
944
945
	function require_jetpack_authentication() {
946
		// Don't let anyone authenticate
947
		$_COOKIE = array();
948
		remove_all_filters( 'authenticate' );
949
950
		/**
951
		 * For the moment, remove Limit Login Attempts if its xmlrpc for Jetpack.
952
		 * If Limit Login Attempts is installed as a mu-plugin, it can occasionally
953
		 * generate false-positives.
954
		 */
955
		remove_filter( 'wp_login_failed', 'limit_login_failed' );
956
957
		if ( Jetpack::is_active() ) {
958
			// Allow Jetpack authentication
959
			add_filter( 'authenticate', array( $this, 'authenticate_jetpack' ), 10, 3 );
960
		}
961
	}
962
963
	/**
964
	 * Load language files
965
	 */
966
	public static function plugin_textdomain() {
967
		// Note to self, the third argument must not be hardcoded, to account for relocated folders.
968
		load_plugin_textdomain( 'jetpack', false, dirname( plugin_basename( JETPACK__PLUGIN_FILE ) ) . '/languages/' );
969
	}
970
971
	/**
972
	 * Register assets for use in various modules and the Jetpack admin page.
973
	 *
974
	 * @uses wp_script_is, wp_register_script, plugins_url
975
	 * @action wp_loaded
976
	 * @return null
977
	 */
978
	public function register_assets() {
979
		if ( ! wp_script_is( 'spin', 'registered' ) ) {
980
			wp_register_script( 'spin', plugins_url( '_inc/spin.js', JETPACK__PLUGIN_FILE ), false, '1.3' );
981
		}
982
983 View Code Duplication
		if ( ! wp_script_is( 'jquery.spin', 'registered' ) ) {
984
			wp_register_script( 'jquery.spin', plugins_url( '_inc/jquery.spin.js', JETPACK__PLUGIN_FILE ) , array( 'jquery', 'spin' ), '1.3' );
985
		}
986
987 View Code Duplication
		if ( ! wp_script_is( 'jetpack-gallery-settings', 'registered' ) ) {
988
			wp_register_script( 'jetpack-gallery-settings', plugins_url( '_inc/gallery-settings.js', JETPACK__PLUGIN_FILE ), array( 'media-views' ), '20121225' );
989
		}
990
991 View Code Duplication
		if ( ! wp_script_is( 'jetpack-twitter-timeline', 'registered' ) ) {
992
			wp_register_script( 'jetpack-twitter-timeline', plugins_url( '_inc/twitter-timeline.js', JETPACK__PLUGIN_FILE ) , array( 'jquery' ), '3.10', true );
993
		}
994
995
		if ( ! wp_script_is( 'jetpack-facebook-embed', 'registered' ) ) {
996
			wp_register_script( 'jetpack-facebook-embed', plugins_url( '_inc/facebook-embed.js', __FILE__ ), array( 'jquery' ), null, true );
997
998
			/** This filter is documented in modules/sharedaddy/sharing-sources.php */
999
			$fb_app_id = apply_filters( 'jetpack_sharing_facebook_app_id', '249643311490' );
1000
			if ( ! is_numeric( $fb_app_id ) ) {
1001
				$fb_app_id = '';
1002
			}
1003
			wp_localize_script(
1004
				'jetpack-facebook-embed',
1005
				'jpfbembed',
1006
				array(
1007
					'appid' => $fb_app_id,
1008
					'locale' => $this->get_locale(),
1009
				)
1010
			);
1011
		}
1012
1013
		/**
1014
		 * As jetpack_register_genericons is by default fired off a hook,
1015
		 * the hook may have already fired by this point.
1016
		 * So, let's just trigger it manually.
1017
		 */
1018
		require_once( JETPACK__PLUGIN_DIR . '_inc/genericons.php' );
1019
		jetpack_register_genericons();
1020
1021 View Code Duplication
		if ( ! wp_style_is( 'jetpack-icons', 'registered' ) )
1022
			wp_register_style( 'jetpack-icons', plugins_url( 'css/jetpack-icons.min.css', JETPACK__PLUGIN_FILE ), false, JETPACK__VERSION );
1023
	}
1024
1025
	/**
1026
	 * Guess locale from language code.
1027
	 *
1028
	 * @param string $lang Language code.
1029
	 * @return string|bool
1030
	 */
1031 View Code Duplication
	function guess_locale_from_lang( $lang ) {
1032
		if ( 'en' === $lang || 'en_US' === $lang || ! $lang ) {
1033
			return 'en_US';
1034
		}
1035
1036
		if ( ! class_exists( 'GP_Locales' ) ) {
1037
			if ( ! defined( 'JETPACK__GLOTPRESS_LOCALES_PATH' ) || ! file_exists( JETPACK__GLOTPRESS_LOCALES_PATH ) ) {
1038
				return false;
1039
			}
1040
1041
			require JETPACK__GLOTPRESS_LOCALES_PATH;
1042
		}
1043
1044
		if ( defined( 'IS_WPCOM' ) && IS_WPCOM ) {
1045
			// WP.com: get_locale() returns 'it'
1046
			$locale = GP_Locales::by_slug( $lang );
1047
		} else {
1048
			// Jetpack: get_locale() returns 'it_IT';
1049
			$locale = GP_Locales::by_field( 'facebook_locale', $lang );
1050
		}
1051
1052
		if ( ! $locale ) {
1053
			return false;
1054
		}
1055
1056
		if ( empty( $locale->facebook_locale ) ) {
1057
			if ( empty( $locale->wp_locale ) ) {
1058
				return false;
1059
			} else {
1060
				// Facebook SDK is smart enough to fall back to en_US if a
1061
				// locale isn't supported. Since supported Facebook locales
1062
				// can fall out of sync, we'll attempt to use the known
1063
				// wp_locale value and rely on said fallback.
1064
				return $locale->wp_locale;
1065
			}
1066
		}
1067
1068
		return $locale->facebook_locale;
1069
	}
1070
1071
	/**
1072
	 * Get the locale.
1073
	 *
1074
	 * @return string|bool
1075
	 */
1076
	function get_locale() {
1077
		$locale = $this->guess_locale_from_lang( get_locale() );
1078
1079
		if ( ! $locale ) {
1080
			$locale = 'en_US';
1081
		}
1082
1083
		return $locale;
1084
	}
1085
1086
	/**
1087
	 * Device Pixels support
1088
	 * This improves the resolution of gravatars and wordpress.com uploads on hi-res and zoomed browsers.
1089
	 */
1090
	function devicepx() {
1091
		if ( Jetpack::is_active() ) {
1092
			wp_enqueue_script( 'devicepx', set_url_scheme( 'http://s0.wp.com/wp-content/js/devicepx-jetpack.js' ), array(), gmdate( 'oW' ), true );
1093
		}
1094
	}
1095
1096
	/*
1097
	 * Returns the location of Jetpack's lib directory. This filter is applied
1098
	 * in require_lib().
1099
	 *
1100
	 * @filter require_lib_dir
1101
	 */
1102
	function require_lib_dir() {
1103
		return JETPACK__PLUGIN_DIR . '_inc/lib';
1104
	}
1105
1106
	/**
1107
	 * Return the network_site_url so that .com knows what network this site is a part of.
1108
	 * @param  bool $option
1109
	 * @return string
1110
	 */
1111
	public function jetpack_main_network_site_option( $option ) {
1112
		return network_site_url();
1113
	}
1114
	/**
1115
	 * Network Name.
1116
	 */
1117
	static function network_name( $option = null ) {
1118
		global $current_site;
1119
		return $current_site->site_name;
1120
	}
1121
	/**
1122
	 * Does the network allow new user and site registrations.
1123
	 * @return string
1124
	 */
1125
	static function network_allow_new_registrations( $option = null ) {
1126
		return ( in_array( get_site_option( 'registration' ), array('none', 'user', 'blog', 'all' ) ) ? get_site_option( 'registration') : 'none' );
1127
	}
1128
	/**
1129
	 * Does the network allow admins to add new users.
1130
	 * @return boolian
1131
	 */
1132
	static function network_add_new_users( $option = null ) {
1133
		return (bool) get_site_option( 'add_new_users' );
1134
	}
1135
	/**
1136
	 * File upload psace left per site in MB.
1137
	 *  -1 means NO LIMIT.
1138
	 * @return number
1139
	 */
1140
	static function network_site_upload_space( $option = null ) {
1141
		// value in MB
1142
		return ( get_site_option( 'upload_space_check_disabled' ) ? -1 : get_space_allowed() );
1143
	}
1144
1145
	/**
1146
	 * Network allowed file types.
1147
	 * @return string
1148
	 */
1149
	static function network_upload_file_types( $option = null ) {
1150
		return get_site_option( 'upload_filetypes', 'jpg jpeg png gif' );
1151
	}
1152
1153
	/**
1154
	 * Maximum file upload size set by the network.
1155
	 * @return number
1156
	 */
1157
	static function network_max_upload_file_size( $option = null ) {
1158
		// value in KB
1159
		return get_site_option( 'fileupload_maxk', 300 );
1160
	}
1161
1162
	/**
1163
	 * Lets us know if a site allows admins to manage the network.
1164
	 * @return array
1165
	 */
1166
	static function network_enable_administration_menus( $option = null ) {
1167
		return get_site_option( 'menu_items' );
1168
	}
1169
1170
	/**
1171
	 * Return whether we are dealing with a multi network setup or not.
1172
	 * The reason we are type casting this is because we want to avoid the situation where
1173
	 * the result is false since when is_main_network_option return false it cases
1174
	 * the rest the get_option( 'jetpack_is_multi_network' ); to return the value that is set in the
1175
	 * database which could be set to anything as opposed to what this function returns.
1176
	 * @param  bool  $option
1177
	 *
1178
	 * @return boolean
1179
	 */
1180
	public function is_main_network_option( $option ) {
1181
		// return '1' or ''
1182
		return (string) (bool) Jetpack::is_multi_network();
1183
	}
1184
1185
	/**
1186
	 * Return true if we are with multi-site or multi-network false if we are dealing with single site.
1187
	 *
1188
	 * @param  string  $option
1189
	 * @return boolean
1190
	 */
1191
	public function is_multisite( $option ) {
1192
		return (string) (bool) is_multisite();
1193
	}
1194
1195
	/**
1196
	 * Implemented since there is no core is multi network function
1197
	 * Right now there is no way to tell if we which network is the dominant network on the system
1198
	 *
1199
	 * @since  3.3
1200
	 * @return boolean
1201
	 */
1202
	public static function is_multi_network() {
1203
		global  $wpdb;
1204
1205
		// if we don't have a multi site setup no need to do any more
1206
		if ( ! is_multisite() ) {
1207
			return false;
1208
		}
1209
1210
		$num_sites = $wpdb->get_var( "SELECT COUNT(*) FROM {$wpdb->site}" );
1211
		if ( $num_sites > 1 ) {
1212
			return true;
1213
		} else {
1214
			return false;
1215
		}
1216
	}
1217
1218
	/**
1219
	 * Trigger an update to the main_network_site when we update the siteurl of a site.
1220
	 * @return null
1221
	 */
1222
	function update_jetpack_main_network_site_option() {
1223
		// do_action( 'add_option_$option', '$option', '$value-of-the-option' );
1224
		/**
1225
		 * Fires when the site URL is updated.
1226
		 * Determines if the site is the main site of a Mulitiste network.
1227
		 *
1228
		 * @since 3.3.0
1229
		 *
1230
		 * @param string jetpack_main_network_site.
1231
		 * @param string network_site_url() Site URL for the "main" site of the current Multisite network.
1232
		 */
1233
		do_action( 'add_option_jetpack_main_network_site', 'jetpack_main_network_site', network_site_url() );
1234
		/**
1235
		 * Fires when the site URL is updated.
1236
		 * Determines if the is part of a multi network.
1237
		 *
1238
		 * @since 3.3.0
1239
		 *
1240
		 * @param string jetpack_is_main_network.
1241
		 * @param bool Jetpack::is_multi_network() Is the site part of a multi network.
1242
		 */
1243
		do_action( 'add_option_jetpack_is_main_network', 'jetpack_is_main_network', (string) (bool) Jetpack::is_multi_network() );
1244
		/**
1245
		 * Fires when the site URL is updated.
1246
		 * Determines if the site is part of a multisite network.
1247
		 *
1248
		 * @since 3.4.0
1249
		 *
1250
		 * @param string jetpack_is_multi_site.
1251
		 * @param bool is_multisite() Is the site part of a mutlisite network.
1252
		 */
1253
		do_action( 'add_option_jetpack_is_multi_site', 'jetpack_is_multi_site', (string) (bool) is_multisite() );
1254
	}
1255
	/**
1256
	 * Triggered after a user updates the network settings via Network Settings Admin Page
1257
	 *
1258
	 */
1259
	function update_jetpack_network_settings() {
1260
		// Only sync this info for the main network site.
1261
		do_action( 'add_option_jetpack_network_name', 'jetpack_network_name', Jetpack::network_name() );
1262
		do_action( 'add_option_jetpack_network_allow_new_registrations', 'jetpack_network_allow_new_registrations', Jetpack::network_allow_new_registrations() );
1263
		do_action( 'add_option_jetpack_network_add_new_users', 'jetpack_network_add_new_users', Jetpack::network_add_new_users() );
1264
		do_action( 'add_option_jetpack_network_site_upload_space', 'jetpack_network_site_upload_space', Jetpack::network_site_upload_space() );
1265
		do_action( 'add_option_jetpack_network_upload_file_types', 'jetpack_network_upload_file_types', Jetpack::network_upload_file_types() );
1266
		do_action( 'add_option_jetpack_network_enable_administration_menus', 'jetpack_network_enable_administration_menus', Jetpack::network_enable_administration_menus() );
1267
1268
	}
1269
1270
	/**
1271
	 * Get back if the current site is single user site.
1272
	 *
1273
	 * @return bool
1274
	 */
1275
	public static function is_single_user_site() {
1276
1277
		$user_query = new WP_User_Query( array(
1278
			'blog_id' => get_current_blog_id(),
1279
			'fields'  => 'ID',
1280
			'number' => 2
1281
		) );
1282
		return 1 === (int) $user_query->get_total();
1283
	}
1284
1285
	/**
1286
	 * Returns true if the site has file write access false otherwise.
1287
	 * @return string ( '1' | '0' )
1288
	 **/
1289
	public static function file_system_write_access() {
1290
		if ( ! function_exists( 'get_filesystem_method' ) ) {
1291
			require_once( ABSPATH . 'wp-admin/includes/file.php' );
1292
		}
1293
1294
		require_once( ABSPATH . 'wp-admin/includes/template.php' );
1295
1296
		$filesystem_method = get_filesystem_method();
1297
		if ( $filesystem_method === 'direct' ) {
1298
			return 1;
1299
		}
1300
1301
		ob_start();
1302
		$filesystem_credentials_are_stored = request_filesystem_credentials( self_admin_url() );
1303
		ob_end_clean();
1304
		if ( $filesystem_credentials_are_stored ) {
1305
			return 1;
1306
		}
1307
		return 0;
1308
	}
1309
1310
	/**
1311
	 * Finds out if a site is using a version control system.
1312
	 * @return string ( '1' | '0' )
1313
	 **/
1314
	public static function is_version_controlled() {
1315
1316
		if ( !class_exists( 'WP_Automatic_Updater' ) ) {
1317
			require_once( ABSPATH . 'wp-admin/includes/class-wp-upgrader.php' );
1318
		}
1319
		$updater = new WP_Automatic_Updater();
1320
		$is_version_controlled = strval( $updater->is_vcs_checkout( $context = ABSPATH ) );
1321
		// transients should not be empty
1322
		if ( empty( $is_version_controlled ) ) {
1323
			$is_version_controlled = '0';
1324
		}
1325
		return $is_version_controlled;
1326
	}
1327
1328
	/**
1329
	 * Determines whether the current theme supports featured images or not.
1330
	 * @return string ( '1' | '0' )
1331
	 */
1332
	public static function featured_images_enabled() {
1333
		return current_theme_supports( 'post-thumbnails' ) ? '1' : '0';
1334
	}
1335
1336
	/*
1337
	 * Sync back wp_version
1338
	 */
1339
	public static function get_wp_version() {
1340
		global $wp_version;
1341
		return $wp_version;
1342
	}
1343
1344
	/**
1345
	 * Keeps wp_version in sync with .com when WordPress core updates
1346
	 **/
1347
	public static function update_get_wp_version( $update, $meta_data ) {
1348
		if ( 'update' === $meta_data['action'] && 'core' === $meta_data['type'] ) {
1349
			/** This action is documented in wp-includes/option.php */
1350
			/**
1351
			 * This triggers the sync for the jetpack version
1352
			 * See Jetpack_Sync options method for more info.
1353
			 */
1354
			do_action( 'add_option_jetpack_wp_version', 'jetpack_wp_version', (string) Jetpack::get_wp_version() );
1355
		}
1356
	}
1357
1358
	/**
1359
	 * Triggers a sync of update counts and update details
1360
	 */
1361
	function sync_update_data() {
1362
		// Anytime WordPress saves update data, we'll want to sync update data
1363
		add_action( 'set_site_transient_update_plugins', array( 'Jetpack', 'refresh_update_data' ) );
1364
		add_action( 'set_site_transient_update_themes', array( 'Jetpack', 'refresh_update_data' ) );
1365
		add_action( 'set_site_transient_update_core', array( 'Jetpack', 'refresh_update_data' ) );
1366
		// Anytime a connection to jetpack is made, sync the update data
1367
		add_action( 'jetpack_site_registered', array( 'Jetpack', 'refresh_update_data' ) );
1368
		// Anytime the Jetpack Version changes, sync the the update data
1369
		add_action( 'updating_jetpack_version', array( 'Jetpack', 'refresh_update_data' ) );
1370
1371
		if ( current_user_can( 'update_core' ) && current_user_can( 'update_plugins' ) && current_user_can( 'update_themes' ) ) {
1372
			$this->sync->mock_option( 'updates', array( 'Jetpack', 'get_updates' ) );
1373
		}
1374
1375
		$this->sync->mock_option( 'update_details', array( 'Jetpack', 'get_update_details' ) );
1376
	}
1377
1378
	/**
1379
	 * Triggers a sync of information specific to the current theme.
1380
	 */
1381
	function sync_theme_data() {
1382
		add_action( 'switch_theme', array( 'Jetpack', 'refresh_theme_data' ) );
1383
		$this->sync->mock_option( 'featured_images_enabled', array( 'Jetpack', 'featured_images_enabled' ) );
1384
	}
1385
1386
	/**
1387
	 * jetpack_updates is saved in the following schema:
1388
	 *
1389
	 * array (
1390
	 *      'plugins'                       => (int) Number of plugin updates available.
1391
	 *      'themes'                        => (int) Number of theme updates available.
1392
	 *      'wordpress'                     => (int) Number of WordPress core updates available.
1393
	 *      'translations'                  => (int) Number of translation updates available.
1394
	 *      'total'                         => (int) Total of all available updates.
1395
	 *      'wp_update_version'             => (string) The latest available version of WordPress, only present if a WordPress update is needed.
1396
	 * )
1397
	 * @return array
1398
	 */
1399
	public static function get_updates() {
1400
		$update_data = wp_get_update_data();
1401
1402
		// Stores the individual update counts as well as the total count.
1403
		if ( isset( $update_data['counts'] ) ) {
1404
			$updates = $update_data['counts'];
1405
		}
1406
1407
		// If we need to update WordPress core, let's find the latest version number.
1408 View Code Duplication
		if ( ! empty( $updates['wordpress'] ) ) {
1409
			$cur = get_preferred_from_update_core();
1410
			if ( isset( $cur->response ) && 'upgrade' === $cur->response ) {
1411
				$updates['wp_update_version'] = $cur->current;
1412
			}
1413
		}
1414
		return isset( $updates ) ? $updates : array();
1415
	}
1416
1417
	public static function get_update_details() {
1418
		$update_details = array(
1419
			'update_core' => get_site_transient( 'update_core' ),
1420
			'update_plugins' => get_site_transient( 'update_plugins' ),
1421
			'update_themes' => get_site_transient( 'update_themes' ),
1422
		);
1423
		return $update_details;
1424
	}
1425
1426
	public static function refresh_update_data() {
1427
		if ( current_user_can( 'update_core' ) && current_user_can( 'update_plugins' ) && current_user_can( 'update_themes' ) ) {
1428
			/**
1429
			 * Fires whenever the amount of updates needed for a site changes.
1430
			 * Syncs an array that includes the number of theme, plugin, and core updates available, as well as the latest core version available.
1431
			 *
1432
			 * @since 3.7.0
1433
			 *
1434
			 * @param string jetpack_updates
1435
			 * @param array Update counts calculated by Jetpack::get_updates
1436
			 */
1437
			do_action( 'add_option_jetpack_updates', 'jetpack_updates', Jetpack::get_updates() );
1438
		}
1439
		/**
1440
		 * Fires whenever the amount of updates needed for a site changes.
1441
		 * Syncs an array of core, theme, and plugin data, and which of each is out of date
1442
		 *
1443
		 * @since 3.7.0
1444
		 *
1445
		 * @param string jetpack_update_details
1446
		 * @param array Update details calculated by Jetpack::get_update_details
1447
		 */
1448
		do_action( 'add_option_jetpack_update_details', 'jetpack_update_details', Jetpack::get_update_details() );
1449
	}
1450
1451
	public static function refresh_theme_data() {
1452
		/**
1453
		 * Fires whenever a theme change is made.
1454
		 *
1455
		 * @since 3.8.1
1456
		 *
1457
		 * @param string featured_images_enabled
1458
		 * @param boolean Whether featured images are enabled or not
1459
		 */
1460
		do_action( 'add_option_jetpack_featured_images_enabled', 'jetpack_featured_images_enabled', Jetpack::featured_images_enabled() );
1461
	}
1462
1463
	/**
1464
	 * Invalides the transient as well as triggers the update of the mock option.
1465
	 *
1466
	 * @return null
1467
	 */
1468
	function is_single_user_site_invalidate() {
1469
		/**
1470
		 * Fires when a user is added or removed from a site.
1471
		 * Determines if the site is a single user site.
1472
		 *
1473
		 * @since 3.4.0
1474
		 *
1475
		 * @param string jetpack_single_user_site.
1476
		 * @param bool Jetpack::is_single_user_site() Is the current site a single user site.
1477
		 */
1478
		do_action( 'update_option_jetpack_single_user_site', 'jetpack_single_user_site', (bool) Jetpack::is_single_user_site() );
1479
	}
1480
1481
	/**
1482
	 * Is Jetpack active?
1483
	 */
1484
	public static function is_active() {
1485
		return (bool) Jetpack_Data::get_access_token( JETPACK_MASTER_USER );
1486
	}
1487
1488
	/**
1489
	 * Is Jetpack in development (offline) mode?
1490
	 */
1491
	public static function is_development_mode() {
1492
		$development_mode = false;
1493
1494
		if ( defined( 'JETPACK_DEV_DEBUG' ) ) {
1495
			$development_mode = JETPACK_DEV_DEBUG;
1496
		}
1497
1498
		elseif ( site_url() && false === strpos( site_url(), '.' ) ) {
1499
			$development_mode = true;
1500
		}
1501
		/**
1502
		 * Filters Jetpack's development mode.
1503
		 *
1504
		 * @see http://jetpack.com/support/development-mode/
1505
		 *
1506
		 * @since 2.2.1
1507
		 *
1508
		 * @param bool $development_mode Is Jetpack's development mode active.
1509
		 */
1510
		return apply_filters( 'jetpack_development_mode', $development_mode );
1511
	}
1512
1513
	/**
1514
	* Get Jetpack development mode notice text and notice class.
1515
	*
1516
	* Mirrors the checks made in Jetpack::is_development_mode
1517
	*
1518
	*/
1519
	public static function show_development_mode_notice() {
1520
		if ( Jetpack::is_development_mode() ) {
1521
			if ( defined( 'JETPACK_DEV_DEBUG' ) && JETPACK_DEV_DEBUG ) {
1522
				$notice = sprintf(
1523
					/* translators: %s is a URL */
1524
					__( 'In <a href="%s" target="_blank">Development Mode</a>, via the JETPACK_DEV_DEBUG constant being defined in wp-config.php or elsewhere.', 'jetpack' ),
1525
					'http://jetpack.com/support/development-mode/'
1526
				);
1527
			} elseif ( site_url() && false === strpos( site_url(), '.' ) ) {
1528
				$notice = sprintf(
1529
					/* translators: %s is a URL */
1530
					__( 'In <a href="%s" target="_blank">Development Mode</a>, via site URL lacking a dot (e.g. http://localhost).', 'jetpack' ),
1531
					'http://jetpack.com/support/development-mode/'
1532
				);
1533
			} else {
1534
				$notice = sprintf(
1535
					/* translators: %s is a URL */
1536
					__( 'In <a href="%s" target="_blank">Development Mode</a>, via the jetpack_development_mode filter.', 'jetpack' ),
1537
					'http://jetpack.com/support/development-mode/'
1538
				);
1539
			}
1540
1541
			echo '<div class="updated" style="border-color: #f0821e;"><p>' . $notice . '</p></div>';
1542
		}
1543
1544
		// Throw up a notice if using a development version and as for feedback.
1545
		if ( Jetpack::is_development_version() ) {
1546
			/* translators: %s is a URL */
1547
			$notice = sprintf( __( 'You are currently running a development version of Jetpack. <a href="%s" target="_blank">Submit your feedback</a>', 'jetpack' ), 'https://jetpack.com/contact-support/beta-group/' );
1548
1549
			echo '<div class="updated" style="border-color: #f0821e;"><p>' . $notice . '</p></div>';
1550
		}
1551
		// Throw up a notice if using staging mode
1552
		if ( Jetpack::is_staging_site() ) {
1553
			/* translators: %s is a URL */
1554
			$notice = sprintf( __( 'You are running Jetpack on a <a href="%s" target="_blank">staging server</a>.', 'jetpack' ), 'https://jetpack.com/support/staging-sites/' );
1555
1556
			echo '<div class="updated" style="border-color: #f0821e;"><p>' . $notice . '</p></div>';
1557
		}
1558
	}
1559
1560
	/**
1561
	 * Whether Jetpack's version maps to a public release, or a development version.
1562
	 */
1563
	public static function is_development_version() {
1564
		return ! preg_match( '/^\d+(\.\d+)+$/', JETPACK__VERSION );
1565
	}
1566
1567
	/**
1568
	 * Is a given user (or the current user if none is specified) linked to a WordPress.com user?
1569
	 */
1570
	public static function is_user_connected( $user_id = false ) {
1571
		$user_id = false === $user_id ? get_current_user_id() : absint( $user_id );
1572
		if ( ! $user_id ) {
1573
			return false;
1574
		}
1575
		return (bool) Jetpack_Data::get_access_token( $user_id );
1576
	}
1577
1578
	/**
1579
	 * Get the wpcom user data of the current|specified connected user.
1580
	 */
1581 View Code Duplication
	public static function get_connected_user_data( $user_id = null ) {
1582
		if ( ! $user_id ) {
1583
			$user_id = get_current_user_id();
1584
		}
1585
		Jetpack::load_xml_rpc_client();
1586
		$xml = new Jetpack_IXR_Client( array(
1587
			'user_id' => $user_id,
1588
		) );
1589
		$xml->query( 'wpcom.getUser' );
1590
		if ( ! $xml->isError() ) {
1591
			return $xml->getResponse();
1592
		}
1593
		return false;
1594
	}
1595
1596
	/**
1597
	 * Get the wpcom email of the current|specified connected user.
1598
	 */
1599 View Code Duplication
	public static function get_connected_user_email( $user_id = null ) {
1600
		if ( ! $user_id ) {
1601
			$user_id = get_current_user_id();
1602
		}
1603
		Jetpack::load_xml_rpc_client();
1604
		$xml = new Jetpack_IXR_Client( array(
1605
			'user_id' => $user_id,
1606
		) );
1607
		$xml->query( 'wpcom.getUserEmail' );
1608
		if ( ! $xml->isError() ) {
1609
			return $xml->getResponse();
1610
		}
1611
		return false;
1612
	}
1613
1614
	/**
1615
	 * Get the wpcom email of the master user.
1616
	 */
1617
	public static function get_master_user_email() {
1618
		$master_user_id = Jetpack_Options::get_option( 'master_user' );
1619
		if ( $master_user_id ) {
1620
			return self::get_connected_user_email( $master_user_id );
1621
		}
1622
		return '';
1623
	}
1624
1625
	function current_user_is_connection_owner() {
1626
		$user_token = Jetpack_Data::get_access_token( JETPACK_MASTER_USER );
1627
		return $user_token && is_object( $user_token ) && isset( $user_token->external_user_id ) && get_current_user_id() === $user_token->external_user_id;
1628
	}
1629
1630
	/**
1631
	 * Add any extra oEmbed providers that we know about and use on wpcom for feature parity.
1632
	 */
1633
	function extra_oembed_providers() {
1634
		// Cloudup: https://dev.cloudup.com/#oembed
1635
		wp_oembed_add_provider( 'https://cloudup.com/*' , 'https://cloudup.com/oembed' );
1636
		wp_oembed_add_provider( 'https://me.sh/*', 'https://me.sh/oembed?format=json' );
1637
		wp_oembed_add_provider( '#https?://(www\.)?gfycat\.com/.*#i', 'https://api.gfycat.com/v1/oembed', true );
1638
		wp_oembed_add_provider( '#https?://[^.]+\.(wistia\.com|wi\.st)/(medias|embed)/.*#', 'https://fast.wistia.com/oembed', true );
1639
		wp_oembed_add_provider( '#https?://sketchfab\.com/.*#i', 'https://sketchfab.com/oembed', true );
1640
	}
1641
1642
	/**
1643
	 * Synchronize connected user role changes
1644
	 */
1645
	function user_role_change( $user_id ) {
1646
		if ( Jetpack::is_active() && Jetpack::is_user_connected( $user_id ) ) {
1647
			$current_user_id = get_current_user_id();
1648
			wp_set_current_user( $user_id );
1649
			$role = $this->translate_current_user_to_role();
1650
			$signed_role = $this->sign_role( $role );
1651
			wp_set_current_user( $current_user_id );
1652
1653
			$master_token   = Jetpack_Data::get_access_token( JETPACK_MASTER_USER );
1654
			$master_user_id = absint( $master_token->external_user_id );
1655
1656
			if ( ! $master_user_id )
1657
				return; // this shouldn't happen
1658
1659
			Jetpack::xmlrpc_async_call( 'jetpack.updateRole', $user_id, $signed_role );
1660
			//@todo retry on failure
1661
1662
			//try to choose a new master if we're demoting the current one
1663
			if ( $user_id == $master_user_id && 'administrator' != $role ) {
1664
				$query = new WP_User_Query(
1665
					array(
1666
						'fields'  => array( 'id' ),
1667
						'role'    => 'administrator',
1668
						'orderby' => 'id',
1669
						'exclude' => array( $master_user_id ),
1670
					)
1671
				);
1672
				$new_master = false;
1673
				foreach ( $query->results as $result ) {
1674
					$uid = absint( $result->id );
1675
					if ( $uid && Jetpack::is_user_connected( $uid ) ) {
1676
						$new_master = $uid;
1677
						break;
1678
					}
1679
				}
1680
1681
				if ( $new_master ) {
1682
					Jetpack_Options::update_option( 'master_user', $new_master );
1683
				}
1684
				// else disconnect..?
1685
			}
1686
		}
1687
	}
1688
1689
	/**
1690
	 * Loads the currently active modules.
1691
	 */
1692
	public static function load_modules() {
1693
		if ( ! self::is_active() && !self::is_development_mode() ) {
1694
			if ( ! is_multisite() || ! get_site_option( 'jetpack_protect_active' ) ) {
1695
				return;
1696
			}
1697
		}
1698
1699
		$version = Jetpack_Options::get_option( 'version' );
1700 View Code Duplication
		if ( ! $version ) {
1701
			$version = $old_version = JETPACK__VERSION . ':' . time();
1702
			/** This action is documented in class.jetpack.php */
1703
			do_action( 'updating_jetpack_version', $version, false );
1704
			Jetpack_Options::update_options( compact( 'version', 'old_version' ) );
1705
		}
1706
		list( $version ) = explode( ':', $version );
1707
1708
		$modules = array_filter( Jetpack::get_active_modules(), array( 'Jetpack', 'is_module' ) );
1709
1710
		$modules_data = array();
1711
1712
		// Don't load modules that have had "Major" changes since the stored version until they have been deactivated/reactivated through the lint check.
1713
		if ( version_compare( $version, JETPACK__VERSION, '<' ) ) {
1714
			$updated_modules = array();
1715
			foreach ( $modules as $module ) {
1716
				$modules_data[ $module ] = Jetpack::get_module( $module );
1717
				if ( ! isset( $modules_data[ $module ]['changed'] ) ) {
1718
					continue;
1719
				}
1720
1721
				if ( version_compare( $modules_data[ $module ]['changed'], $version, '<=' ) ) {
1722
					continue;
1723
				}
1724
1725
				$updated_modules[] = $module;
1726
			}
1727
1728
			$modules = array_diff( $modules, $updated_modules );
1729
		}
1730
1731
		$is_development_mode = Jetpack::is_development_mode();
1732
1733
		foreach ( $modules as $index => $module ) {
1734
			// If we're in dev mode, disable modules requiring a connection
1735
			if ( $is_development_mode ) {
1736
				// Prime the pump if we need to
1737
				if ( empty( $modules_data[ $module ] ) ) {
1738
					$modules_data[ $module ] = Jetpack::get_module( $module );
1739
				}
1740
				// If the module requires a connection, but we're in local mode, don't include it.
1741
				if ( $modules_data[ $module ]['requires_connection'] ) {
1742
					continue;
1743
				}
1744
			}
1745
1746
			if ( did_action( 'jetpack_module_loaded_' . $module ) ) {
1747
				continue;
1748
			}
1749
1750
			if ( ! @include( Jetpack::get_module_path( $module ) ) ) {
1751
				unset( $modules[ $index ] );
1752
				Jetpack_Options::update_option( 'active_modules', array_values( $modules ) );
1753
				continue;
1754
			}
1755
1756
			/**
1757
			 * Fires when a specific module is loaded.
1758
			 * The dynamic part of the hook, $module, is the module slug.
1759
			 *
1760
			 * @since 1.1.0
1761
			 */
1762
			do_action( 'jetpack_module_loaded_' . $module );
1763
		}
1764
1765
		/**
1766
		 * Fires when all the modules are loaded.
1767
		 *
1768
		 * @since 1.1.0
1769
		 */
1770
		do_action( 'jetpack_modules_loaded' );
1771
1772
		// Load module-specific code that is needed even when a module isn't active. Loaded here because code contained therein may need actions such as setup_theme.
1773
		if ( Jetpack::is_active() || Jetpack::is_development_mode() )
1774
			require_once( JETPACK__PLUGIN_DIR . 'modules/module-extras.php' );
1775
	}
1776
1777
	/**
1778
	 * Check if Jetpack's REST API compat file should be included
1779
	 * @action plugins_loaded
1780
	 * @return null
1781
	 */
1782
	public function check_rest_api_compat() {
1783
		/**
1784
		 * Filters the list of REST API compat files to be included.
1785
		 *
1786
		 * @since 2.2.5
1787
		 *
1788
		 * @param array $args Array of REST API compat files to include.
1789
		 */
1790
		$_jetpack_rest_api_compat_includes = apply_filters( 'jetpack_rest_api_compat', array() );
1791
1792
		if ( function_exists( 'bbpress' ) )
1793
			$_jetpack_rest_api_compat_includes[] = JETPACK__PLUGIN_DIR . 'class.jetpack-bbpress-json-api-compat.php';
1794
1795
		foreach ( $_jetpack_rest_api_compat_includes as $_jetpack_rest_api_compat_include )
1796
			require_once $_jetpack_rest_api_compat_include;
1797
	}
1798
1799
	/**
1800
	 * Gets all plugins currently active in values, regardless of whether they're
1801
	 * traditionally activated or network activated.
1802
	 *
1803
	 * @todo Store the result in core's object cache maybe?
1804
	 */
1805
	public static function get_active_plugins() {
1806
		$active_plugins = (array) get_option( 'active_plugins', array() );
1807
1808
		if ( is_multisite() ) {
1809
			// Due to legacy code, active_sitewide_plugins stores them in the keys,
1810
			// whereas active_plugins stores them in the values.
1811
			$network_plugins = array_keys( get_site_option( 'active_sitewide_plugins', array() ) );
1812
			if ( $network_plugins ) {
1813
				$active_plugins = array_merge( $active_plugins, $network_plugins );
1814
			}
1815
		}
1816
1817
		sort( $active_plugins );
1818
1819
		return array_unique( $active_plugins );
1820
	}
1821
1822
	/**
1823
	 * Gets and parses additional plugin data to send with the heartbeat data
1824
	 *
1825
	 * @since 3.8.1
1826
	 *
1827
	 * @return array Array of plugin data
1828
	 */
1829
	public static function get_parsed_plugin_data() {
1830
		if ( ! function_exists( 'get_plugins' ) ) {
1831
			require_once( ABSPATH . 'wp-admin/includes/plugin.php' );
1832
		}
1833
		$all_plugins    = get_plugins();
1834
		$active_plugins = Jetpack::get_active_plugins();
1835
1836
		$plugins = array();
1837
		foreach ( $all_plugins as $path => $plugin_data ) {
1838
			$plugins[ $path ] = array(
1839
					'is_active' => in_array( $path, $active_plugins ),
1840
					'file'      => $path,
1841
					'name'      => $plugin_data['Name'],
1842
					'version'   => $plugin_data['Version'],
1843
					'author'    => $plugin_data['Author'],
1844
			);
1845
		}
1846
1847
		return $plugins;
1848
	}
1849
1850
	/**
1851
	 * Gets and parses theme data to send with the heartbeat data
1852
	 *
1853
	 * @since 3.8.1
1854
	 *
1855
	 * @return array Array of theme data
1856
	 */
1857
	public static function get_parsed_theme_data() {
1858
		$all_themes = wp_get_themes( array( 'allowed' => true ) );
1859
		$header_keys = array( 'Name', 'Author', 'Version', 'ThemeURI', 'AuthorURI', 'Status', 'Tags' );
1860
1861
		$themes = array();
1862
		foreach ( $all_themes as $slug => $theme_data ) {
1863
			$theme_headers = array();
1864
			foreach ( $header_keys as $header_key ) {
1865
				$theme_headers[ $header_key ] = $theme_data->get( $header_key );
1866
			}
1867
1868
			$themes[ $slug ] = array(
1869
					'is_active_theme' => $slug == wp_get_theme()->get_template(),
1870
					'slug' => $slug,
1871
					'theme_root' => $theme_data->get_theme_root_uri(),
1872
					'parent' => $theme_data->parent(),
1873
					'headers' => $theme_headers
1874
			);
1875
		}
1876
1877
		return $themes;
1878
	}
1879
1880
	/**
1881
	 * Checks whether a specific plugin is active.
1882
	 *
1883
	 * We don't want to store these in a static variable, in case
1884
	 * there are switch_to_blog() calls involved.
1885
	 */
1886
	public static function is_plugin_active( $plugin = 'jetpack/jetpack.php' ) {
1887
		return in_array( $plugin, self::get_active_plugins() );
1888
	}
1889
1890
	/**
1891
	 * Check if Jetpack's Open Graph tags should be used.
1892
	 * If certain plugins are active, Jetpack's og tags are suppressed.
1893
	 *
1894
	 * @uses Jetpack::get_active_modules, add_filter, get_option, apply_filters
1895
	 * @action plugins_loaded
1896
	 * @return null
1897
	 */
1898
	public function check_open_graph() {
1899
		if ( in_array( 'publicize', Jetpack::get_active_modules() ) || in_array( 'sharedaddy', Jetpack::get_active_modules() ) ) {
1900
			add_filter( 'jetpack_enable_open_graph', '__return_true', 0 );
1901
		}
1902
1903
		$active_plugins = self::get_active_plugins();
1904
1905
		if ( ! empty( $active_plugins ) ) {
1906
			foreach ( $this->open_graph_conflicting_plugins as $plugin ) {
1907
				if ( in_array( $plugin, $active_plugins ) ) {
1908
					add_filter( 'jetpack_enable_open_graph', '__return_false', 99 );
1909
					break;
1910
				}
1911
			}
1912
		}
1913
1914
		/**
1915
		 * Allow the addition of Open Graph Meta Tags to all pages.
1916
		 *
1917
		 * @since 2.0.3
1918
		 *
1919
		 * @param bool false Should Open Graph Meta tags be added. Default to false.
1920
		 */
1921
		if ( apply_filters( 'jetpack_enable_open_graph', false ) ) {
1922
			require_once JETPACK__PLUGIN_DIR . 'functions.opengraph.php';
1923
		}
1924
	}
1925
1926
	/**
1927
	 * Check if Jetpack's Twitter tags should be used.
1928
	 * If certain plugins are active, Jetpack's twitter tags are suppressed.
1929
	 *
1930
	 * @uses Jetpack::get_active_modules, add_filter, get_option, apply_filters
1931
	 * @action plugins_loaded
1932
	 * @return null
1933
	 */
1934
	public function check_twitter_tags() {
1935
1936
		$active_plugins = self::get_active_plugins();
1937
1938
		if ( ! empty( $active_plugins ) ) {
1939
			foreach ( $this->twitter_cards_conflicting_plugins as $plugin ) {
1940
				if ( in_array( $plugin, $active_plugins ) ) {
1941
					add_filter( 'jetpack_disable_twitter_cards', '__return_true', 99 );
1942
					break;
1943
				}
1944
			}
1945
		}
1946
1947
		/**
1948
		 * Allow Twitter Card Meta tags to be disabled.
1949
		 *
1950
		 * @since 2.6.0
1951
		 *
1952
		 * @param bool true Should Twitter Card Meta tags be disabled. Default to true.
1953
		 */
1954
		if ( apply_filters( 'jetpack_disable_twitter_cards', true ) ) {
1955
			require_once JETPACK__PLUGIN_DIR . 'class.jetpack-twitter-cards.php';
1956
		}
1957
	}
1958
1959
1960
1961
1962
	/*
1963
	 *
1964
	 * Jetpack Security Reports
1965
	 *
1966
	 * Allowed types: login_form, backup, file_scanning, spam
1967
	 *
1968
	 * Args for login_form and spam: 'blocked'=>(int)(optional), 'status'=>(string)(ok, warning, error), 'message'=>(optional, disregarded if status is ok, allowed tags: a, em, strong)
1969
	 *
1970
	 * Args for backup and file_scanning: 'last'=>(timestamp)(optional), 'next'=>(timestamp)(optional), 'status'=>(string)(ok, warning, error), 'message'=>(optional, disregarded if status is ok, allowed tags: a, em, strong)
1971
	 *
1972
	 *
1973
	 * Example code to submit a security report:
1974
	 *
1975
	 *  function akismet_submit_jetpack_security_report() {
1976
	 *  	Jetpack::submit_security_report( 'spam', __FILE__, $args = array( 'blocked' => 138284, status => 'ok' ) );
1977
	 *  }
1978
	 *  add_action( 'jetpack_security_report', 'akismet_submit_jetpack_security_report' );
1979
	 *
1980
	 */
1981
1982
1983
	/**
1984
	 * Calls for security report submissions.
1985
	 *
1986
	 * @return null
1987
	 */
1988
	public static function perform_security_reporting() {
1989
		$no_check_needed = get_site_transient( 'security_report_performed_recently' );
1990
1991
		if ( $no_check_needed ) {
1992
			return;
1993
		}
1994
1995
		/**
1996
		 * Fires before a security report is created.
1997
		 *
1998
		 * @since 3.4.0
1999
		 */
2000
		do_action( 'jetpack_security_report' );
2001
2002
		Jetpack_Options::update_option( 'security_report', self::$security_report );
2003
		set_site_transient( 'security_report_performed_recently', 1, 15 * MINUTE_IN_SECONDS );
2004
	}
2005
2006
	/**
2007
	 * Allows plugins to submit security reports.
2008
 	 *
2009
	 * @param string  $type         Report type (login_form, backup, file_scanning, spam)
2010
	 * @param string  $plugin_file  Plugin __FILE__, so that we can pull plugin data
2011
	 * @param array   $args         See definitions above
2012
	 */
2013
	public static function submit_security_report( $type = '', $plugin_file = '', $args = array() ) {
2014
2015
		if( !doing_action( 'jetpack_security_report' ) ) {
2016
			return new WP_Error( 'not_collecting_report', 'Not currently collecting security reports.  Please use the jetpack_security_report hook.' );
2017
		}
2018
2019
		if( !is_string( $type ) || !is_string( $plugin_file ) ) {
2020
			return new WP_Error( 'invalid_security_report', 'Invalid Security Report' );
2021
		}
2022
2023
		if( !function_exists( 'get_plugin_data' ) ) {
2024
			include( ABSPATH . 'wp-admin/includes/plugin.php' );
2025
		}
2026
2027
		//Get rid of any non-allowed args
2028
		$args = array_intersect_key( $args, array_flip( array( 'blocked', 'last', 'next', 'status', 'message' ) ) );
2029
2030
		$plugin = get_plugin_data( $plugin_file );
2031
2032
		if ( !$plugin['Name'] ) {
2033
			return new WP_Error( 'security_report_missing_plugin_name', 'Invalid Plugin File Provided' );
2034
		}
2035
2036
		// Sanitize everything to make sure we're not syncing something wonky
2037
		$type = sanitize_key( $type );
2038
2039
		$args['plugin'] = $plugin;
2040
2041
		// Cast blocked, last and next as integers.
2042
		// Last and next should be in unix timestamp format
2043
		if ( isset( $args['blocked'] ) ) {
2044
			$args['blocked'] = (int) $args['blocked'];
2045
		}
2046
		if ( isset( $args['last'] ) ) {
2047
			$args['last'] = (int) $args['last'];
2048
		}
2049
		if ( isset( $args['next'] ) ) {
2050
			$args['next'] = (int) $args['next'];
2051
		}
2052
		if ( !in_array( $args['status'], array( 'ok', 'warning', 'error' ) ) ) {
2053
			$args['status'] = 'ok';
2054
		}
2055
		if ( isset( $args['message'] ) ) {
2056
2057
			if( $args['status'] == 'ok' ) {
2058
				unset( $args['message'] );
2059
			}
2060
2061
			$allowed_html = array(
2062
			    'a' => array(
2063
			        'href' => array(),
2064
			        'title' => array()
2065
			    ),
2066
			    'em' => array(),
2067
			    'strong' => array(),
2068
			);
2069
2070
			$args['message'] = wp_kses( $args['message'], $allowed_html );
2071
		}
2072
2073
		$plugin_name = $plugin[ 'Name' ];
2074
2075
		self::$security_report[ $type ][ $plugin_name ] = $args;
2076
	}
2077
2078
	/**
2079
	 * Collects a new report if needed, then returns it.
2080
	 */
2081
	public function get_security_report() {
2082
		self::perform_security_reporting();
2083
		return Jetpack_Options::get_option( 'security_report' );
2084
	}
2085
2086
2087
/* Jetpack Options API */
2088
2089
	public static function get_option_names( $type = 'compact' ) {
2090
		return Jetpack_Options::get_option_names( $type );
2091
	}
2092
2093
	/**
2094
	 * Returns the requested option.  Looks in jetpack_options or jetpack_$name as appropriate.
2095
 	 *
2096
	 * @param string $name    Option name
2097
	 * @param mixed  $default (optional)
2098
	 */
2099
	public static function get_option( $name, $default = false ) {
2100
		return Jetpack_Options::get_option( $name, $default );
2101
	}
2102
2103
	/**
2104
	* Stores two secrets and a timestamp so WordPress.com can make a request back and verify an action
2105
	* Does some extra verification so urls (such as those to public-api, register, etc) can't just be crafted
2106
	* $name must be a registered option name.
2107
	*/
2108
	public static function create_nonce( $name ) {
2109
		$secret = wp_generate_password( 32, false ) . ':' . wp_generate_password( 32, false ) . ':' . ( time() + 600 );
2110
2111
		Jetpack_Options::update_option( $name, $secret );
2112
		@list( $secret_1, $secret_2, $eol ) = explode( ':', Jetpack_Options::get_option( $name ) );
2113
		if ( empty( $secret_1 ) || empty( $secret_2 ) || $eol < time() )
2114
			return new Jetpack_Error( 'missing_secrets' );
2115
2116
		return array(
2117
			'secret_1' => $secret_1,
2118
			'secret_2' => $secret_2,
2119
			'eol'      => $eol,
2120
		);
2121
	}
2122
2123
	/**
2124
	 * Updates the single given option.  Updates jetpack_options or jetpack_$name as appropriate.
2125
 	 *
2126
	 * @deprecated 3.4 use Jetpack_Options::update_option() instead.
2127
	 * @param string $name  Option name
2128
	 * @param mixed  $value Option value
2129
	 */
2130
	public static function update_option( $name, $value ) {
2131
		_deprecated_function( __METHOD__, 'jetpack-3.4', 'Jetpack_Options::update_option()' );
2132
		return Jetpack_Options::update_option( $name, $value );
2133
	}
2134
2135
	/**
2136
	 * Updates the multiple given options.  Updates jetpack_options and/or jetpack_$name as appropriate.
2137
 	 *
2138
	 * @deprecated 3.4 use Jetpack_Options::update_options() instead.
2139
	 * @param array $array array( option name => option value, ... )
2140
	 */
2141
	public static function update_options( $array ) {
2142
		_deprecated_function( __METHOD__, 'jetpack-3.4', 'Jetpack_Options::update_options()' );
2143
		return Jetpack_Options::update_options( $array );
2144
	}
2145
2146
	/**
2147
	 * Deletes the given option.  May be passed multiple option names as an array.
2148
	 * Updates jetpack_options and/or deletes jetpack_$name as appropriate.
2149
	 *
2150
	 * @deprecated 3.4 use Jetpack_Options::delete_option() instead.
2151
	 * @param string|array $names
2152
	 */
2153
	public static function delete_option( $names ) {
2154
		_deprecated_function( __METHOD__, 'jetpack-3.4', 'Jetpack_Options::delete_option()' );
2155
		return Jetpack_Options::delete_option( $names );
2156
	}
2157
2158
	/**
2159
	 * Enters a user token into the user_tokens option
2160
	 *
2161
	 * @param int $user_id
2162
	 * @param string $token
2163
	 * return bool
2164
	 */
2165
	public static function update_user_token( $user_id, $token, $is_master_user ) {
2166
		// not designed for concurrent updates
2167
		$user_tokens = Jetpack_Options::get_option( 'user_tokens' );
2168
		if ( ! is_array( $user_tokens ) )
2169
			$user_tokens = array();
2170
		$user_tokens[$user_id] = $token;
2171
		if ( $is_master_user ) {
2172
			$master_user = $user_id;
2173
			$options     = compact( 'user_tokens', 'master_user' );
2174
		} else {
2175
			$options = compact( 'user_tokens' );
2176
		}
2177
		return Jetpack_Options::update_options( $options );
2178
	}
2179
2180
	/**
2181
	 * Returns an array of all PHP files in the specified absolute path.
2182
	 * Equivalent to glob( "$absolute_path/*.php" ).
2183
	 *
2184
	 * @param string $absolute_path The absolute path of the directory to search.
2185
	 * @return array Array of absolute paths to the PHP files.
2186
	 */
2187
	public static function glob_php( $absolute_path ) {
2188
		if ( function_exists( 'glob' ) ) {
2189
			return glob( "$absolute_path/*.php" );
2190
		}
2191
2192
		$absolute_path = untrailingslashit( $absolute_path );
2193
		$files = array();
2194
		if ( ! $dir = @opendir( $absolute_path ) ) {
2195
			return $files;
2196
		}
2197
2198
		while ( false !== $file = readdir( $dir ) ) {
2199
			if ( '.' == substr( $file, 0, 1 ) || '.php' != substr( $file, -4 ) ) {
2200
				continue;
2201
			}
2202
2203
			$file = "$absolute_path/$file";
2204
2205
			if ( ! is_file( $file ) ) {
2206
				continue;
2207
			}
2208
2209
			$files[] = $file;
2210
		}
2211
2212
		closedir( $dir );
2213
2214
		return $files;
2215
	}
2216
2217
	public static function activate_new_modules( $redirect = false ) {
2218
		if ( ! Jetpack::is_active() && ! Jetpack::is_development_mode() ) {
2219
			return;
2220
		}
2221
2222
		$jetpack_old_version = Jetpack_Options::get_option( 'version' ); // [sic]
2223 View Code Duplication
		if ( ! $jetpack_old_version ) {
2224
			$jetpack_old_version = $version = $old_version = '1.1:' . time();
2225
			/** This action is documented in class.jetpack.php */
2226
			do_action( 'updating_jetpack_version', $version, false );
2227
			Jetpack_Options::update_options( compact( 'version', 'old_version' ) );
2228
		}
2229
2230
		list( $jetpack_version ) = explode( ':', $jetpack_old_version ); // [sic]
2231
2232
		if ( version_compare( JETPACK__VERSION, $jetpack_version, '<=' ) ) {
2233
			return;
2234
		}
2235
2236
		$active_modules     = Jetpack::get_active_modules();
2237
		$reactivate_modules = array();
2238
		foreach ( $active_modules as $active_module ) {
2239
			$module = Jetpack::get_module( $active_module );
2240
			if ( ! isset( $module['changed'] ) ) {
2241
				continue;
2242
			}
2243
2244
			if ( version_compare( $module['changed'], $jetpack_version, '<=' ) ) {
2245
				continue;
2246
			}
2247
2248
			$reactivate_modules[] = $active_module;
2249
			Jetpack::deactivate_module( $active_module );
2250
		}
2251
2252
		$new_version = JETPACK__VERSION . ':' . time();
2253
		/** This action is documented in class.jetpack.php */
2254
		do_action( 'updating_jetpack_version', $new_version, $jetpack_old_version );
2255
		Jetpack_Options::update_options(
2256
			array(
2257
				'version'     => $new_version,
2258
				'old_version' => $jetpack_old_version,
2259
			)
2260
		);
2261
2262
		Jetpack::state( 'message', 'modules_activated' );
2263
		Jetpack::activate_default_modules( $jetpack_version, JETPACK__VERSION, $reactivate_modules );
2264
2265
		if ( $redirect ) {
2266
			$page = 'jetpack'; // make sure we redirect to either settings or the jetpack page
2267
			if ( isset( $_GET['page'] ) && in_array( $_GET['page'], array( 'jetpack', 'jetpack_modules' ) ) ) {
2268
				$page = $_GET['page'];
2269
			}
2270
2271
			wp_safe_redirect( Jetpack::admin_url( 'page=' . $page ) );
2272
			exit;
2273
		}
2274
	}
2275
2276
	/**
2277
	 * List available Jetpack modules. Simply lists .php files in /modules/.
2278
	 * Make sure to tuck away module "library" files in a sub-directory.
2279
	 */
2280
	public static function get_available_modules( $min_version = false, $max_version = false ) {
2281
		static $modules = null;
2282
2283
		if ( ! isset( $modules ) ) {
2284
			$available_modules_option = Jetpack_Options::get_option( 'available_modules', array() );
2285
			// Use the cache if we're on the front-end and it's available...
2286
			if ( ! is_admin() && ! empty( $available_modules_option[ JETPACK__VERSION ] ) ) {
2287
				$modules = $available_modules_option[ JETPACK__VERSION ];
2288
			} else {
2289
				$files = Jetpack::glob_php( JETPACK__PLUGIN_DIR . 'modules' );
2290
2291
				$modules = array();
2292
2293
				foreach ( $files as $file ) {
2294
					if ( ! $headers = Jetpack::get_module( $file ) ) {
2295
						continue;
2296
					}
2297
2298
					$modules[ Jetpack::get_module_slug( $file ) ] = $headers['introduced'];
2299
				}
2300
2301
				Jetpack_Options::update_option( 'available_modules', array(
2302
					JETPACK__VERSION => $modules,
2303
				) );
2304
			}
2305
		}
2306
2307
		/**
2308
		 * Filters the array of modules available to be activated.
2309
		 *
2310
		 * @since 2.4.0
2311
		 *
2312
		 * @param array $modules Array of available modules.
2313
		 * @param string $min_version Minimum version number required to use modules.
2314
		 * @param string $max_version Maximum version number required to use modules.
2315
		 */
2316
		$mods = apply_filters( 'jetpack_get_available_modules', $modules, $min_version, $max_version );
2317
2318
		if ( ! $min_version && ! $max_version ) {
2319
			return array_keys( $mods );
2320
		}
2321
2322
		$r = array();
2323
		foreach ( $mods as $slug => $introduced ) {
2324
			if ( $min_version && version_compare( $min_version, $introduced, '>=' ) ) {
2325
				continue;
2326
			}
2327
2328
			if ( $max_version && version_compare( $max_version, $introduced, '<' ) ) {
2329
				continue;
2330
			}
2331
2332
			$r[] = $slug;
2333
		}
2334
2335
		return $r;
2336
	}
2337
2338
	/**
2339
	 * Default modules loaded on activation.
2340
	 */
2341
	public static function get_default_modules( $min_version = false, $max_version = false ) {
2342
		$return = array();
2343
2344
		foreach ( Jetpack::get_available_modules( $min_version, $max_version ) as $module ) {
2345
			$module_data = Jetpack::get_module( $module );
2346
2347
			switch ( strtolower( $module_data['auto_activate'] ) ) {
2348
				case 'yes' :
2349
					$return[] = $module;
2350
					break;
2351
				case 'public' :
2352
					if ( Jetpack_Options::get_option( 'public' ) ) {
2353
						$return[] = $module;
2354
					}
2355
					break;
2356
				case 'no' :
2357
				default :
2358
					break;
2359
			}
2360
		}
2361
		/**
2362
		 * Filters the array of default modules.
2363
		 *
2364
		 * @since 2.5.0
2365
		 *
2366
		 * @param array $return Array of default modules.
2367
		 * @param string $min_version Minimum version number required to use modules.
2368
		 * @param string $max_version Maximum version number required to use modules.
2369
		 */
2370
		return apply_filters( 'jetpack_get_default_modules', $return, $min_version, $max_version );
2371
	}
2372
2373
	/**
2374
	 * Checks activated modules during auto-activation to determine
2375
	 * if any of those modules are being deprecated.  If so, close
2376
	 * them out, and add any replacement modules.
2377
	 *
2378
	 * Runs at priority 99 by default.
2379
	 *
2380
	 * This is run late, so that it can still activate a module if
2381
	 * the new module is a replacement for another that the user
2382
	 * currently has active, even if something at the normal priority
2383
	 * would kibosh everything.
2384
	 *
2385
	 * @since 2.6
2386
	 * @uses jetpack_get_default_modules filter
2387
	 * @param array $modules
2388
	 * @return array
2389
	 */
2390
	function handle_deprecated_modules( $modules ) {
2391
		$deprecated_modules = array(
2392
			'debug'            => null,  // Closed out and moved to ./class.jetpack-debugger.php
2393
			'wpcc'             => 'sso', // Closed out in 2.6 -- SSO provides the same functionality.
2394
			'gplus-authorship' => null,  // Closed out in 3.2 -- Google dropped support.
2395
		);
2396
2397
		// Don't activate SSO if they never completed activating WPCC.
2398
		if ( Jetpack::is_module_active( 'wpcc' ) ) {
2399
			$wpcc_options = Jetpack_Options::get_option( 'wpcc_options' );
2400
			if ( empty( $wpcc_options ) || empty( $wpcc_options['client_id'] ) || empty( $wpcc_options['client_id'] ) ) {
2401
				$deprecated_modules['wpcc'] = null;
2402
			}
2403
		}
2404
2405
		foreach ( $deprecated_modules as $module => $replacement ) {
2406
			if ( Jetpack::is_module_active( $module ) ) {
2407
				self::deactivate_module( $module );
2408
				if ( $replacement ) {
2409
					$modules[] = $replacement;
2410
				}
2411
			}
2412
		}
2413
2414
		return array_unique( $modules );
2415
	}
2416
2417
	/**
2418
	 * Checks activated plugins during auto-activation to determine
2419
	 * if any of those plugins are in the list with a corresponding module
2420
	 * that is not compatible with the plugin. The module will not be allowed
2421
	 * to auto-activate.
2422
	 *
2423
	 * @since 2.6
2424
	 * @uses jetpack_get_default_modules filter
2425
	 * @param array $modules
2426
	 * @return array
2427
	 */
2428
	function filter_default_modules( $modules ) {
2429
2430
		$active_plugins = self::get_active_plugins();
2431
2432
		if ( ! empty( $active_plugins ) ) {
2433
2434
			// For each module we'd like to auto-activate...
2435
			foreach ( $modules as $key => $module ) {
2436
				// If there are potential conflicts for it...
2437
				if ( ! empty( $this->conflicting_plugins[ $module ] ) ) {
2438
					// For each potential conflict...
2439
					foreach ( $this->conflicting_plugins[ $module ] as $title => $plugin ) {
2440
						// If that conflicting plugin is active...
2441
						if ( in_array( $plugin, $active_plugins ) ) {
2442
							// Remove that item from being auto-activated.
2443
							unset( $modules[ $key ] );
2444
						}
2445
					}
2446
				}
2447
			}
2448
		}
2449
2450
		return $modules;
2451
	}
2452
2453
	/**
2454
	 * Extract a module's slug from its full path.
2455
	 */
2456
	public static function get_module_slug( $file ) {
2457
		return str_replace( '.php', '', basename( $file ) );
2458
	}
2459
2460
	/**
2461
	 * Generate a module's path from its slug.
2462
	 */
2463
	public static function get_module_path( $slug ) {
2464
		return JETPACK__PLUGIN_DIR . "modules/$slug.php";
2465
	}
2466
2467
	/**
2468
	 * Load module data from module file. Headers differ from WordPress
2469
	 * plugin headers to avoid them being identified as standalone
2470
	 * plugins on the WordPress plugins page.
2471
	 */
2472
	public static function get_module( $module ) {
2473
		$headers = array(
2474
			'name'                      => 'Module Name',
2475
			'description'               => 'Module Description',
2476
			'jumpstart_desc'            => 'Jumpstart Description',
2477
			'sort'                      => 'Sort Order',
2478
			'recommendation_order'      => 'Recommendation Order',
2479
			'introduced'                => 'First Introduced',
2480
			'changed'                   => 'Major Changes In',
2481
			'deactivate'                => 'Deactivate',
2482
			'free'                      => 'Free',
2483
			'requires_connection'       => 'Requires Connection',
2484
			'auto_activate'             => 'Auto Activate',
2485
			'module_tags'               => 'Module Tags',
2486
			'feature'                   => 'Feature',
2487
			'additional_search_queries' => 'Additional Search Queries',
2488
		);
2489
2490
		$file = Jetpack::get_module_path( Jetpack::get_module_slug( $module ) );
2491
2492
		$mod = Jetpack::get_file_data( $file, $headers );
2493
		if ( empty( $mod['name'] ) ) {
2494
			return false;
2495
		}
2496
2497
		$mod['sort']                    = empty( $mod['sort'] ) ? 10 : (int) $mod['sort'];
2498
		$mod['recommendation_order']    = empty( $mod['recommendation_order'] ) ? 20 : (int) $mod['recommendation_order'];
2499
		$mod['deactivate']              = empty( $mod['deactivate'] );
2500
		$mod['free']                    = empty( $mod['free'] );
2501
		$mod['requires_connection']     = ( ! empty( $mod['requires_connection'] ) && 'No' == $mod['requires_connection'] ) ? false : true;
2502
2503
		if ( empty( $mod['auto_activate'] ) || ! in_array( strtolower( $mod['auto_activate'] ), array( 'yes', 'no', 'public' ) ) ) {
2504
			$mod['auto_activate'] = 'No';
2505
		} else {
2506
			$mod['auto_activate'] = (string) $mod['auto_activate'];
2507
		}
2508
2509
		if ( $mod['module_tags'] ) {
2510
			$mod['module_tags'] = explode( ',', $mod['module_tags'] );
2511
			$mod['module_tags'] = array_map( 'trim', $mod['module_tags'] );
2512
			$mod['module_tags'] = array_map( array( __CLASS__, 'translate_module_tag' ), $mod['module_tags'] );
2513
		} else {
2514
			$mod['module_tags'] = array( self::translate_module_tag( 'Other' ) );
2515
		}
2516
2517
		if ( $mod['feature'] ) {
2518
			$mod['feature'] = explode( ',', $mod['feature'] );
2519
			$mod['feature'] = array_map( 'trim', $mod['feature'] );
2520
		} else {
2521
			$mod['feature'] = array( self::translate_module_tag( 'Other' ) );
2522
		}
2523
2524
		/**
2525
		 * Filters the feature array on a module.
2526
		 *
2527
		 * This filter allows you to control where each module is filtered: Recommended,
2528
		 * Jumpstart, and the default "Other" listing.
2529
		 *
2530
		 * @since 3.5.0
2531
		 *
2532
		 * @param array   $mod['feature'] The areas to feature this module:
2533
		 *     'Jumpstart' adds to the "Jumpstart" option to activate many modules at once.
2534
		 *     'Recommended' shows on the main Jetpack admin screen.
2535
		 *     'Other' should be the default if no other value is in the array.
2536
		 * @param string  $module The slug of the module, e.g. sharedaddy.
2537
		 * @param array   $mod All the currently assembled module data.
2538
		 */
2539
		$mod['feature'] = apply_filters( 'jetpack_module_feature', $mod['feature'], $module, $mod );
2540
2541
		/**
2542
		 * Filter the returned data about a module.
2543
		 *
2544
		 * This filter allows overriding any info about Jetpack modules. It is dangerous,
2545
		 * so please be careful.
2546
		 *
2547
		 * @since 3.6.0
2548
		 *
2549
		 * @param array   $mod    The details of the requested module.
2550
		 * @param string  $module The slug of the module, e.g. sharedaddy
2551
		 * @param string  $file   The path to the module source file.
2552
		 */
2553
		return apply_filters( 'jetpack_get_module', $mod, $module, $file );
2554
	}
2555
2556
	/**
2557
	 * Like core's get_file_data implementation, but caches the result.
2558
	 */
2559
	public static function get_file_data( $file, $headers ) {
2560
		//Get just the filename from $file (i.e. exclude full path) so that a consistent hash is generated
2561
		$file_name = basename( $file );
2562
		$file_data_option = Jetpack_Options::get_option( 'file_data', array() );
2563
		$key              = md5( $file_name . serialize( $headers ) );
2564
		$refresh_cache    = is_admin() && isset( $_GET['page'] ) && 'jetpack' === substr( $_GET['page'], 0, 7 );
2565
2566
		// If we don't need to refresh the cache, and already have the value, short-circuit!
2567
		if ( ! $refresh_cache && isset( $file_data_option[ JETPACK__VERSION ][ $key ] ) ) {
2568
			return $file_data_option[ JETPACK__VERSION ][ $key ];
2569
		}
2570
2571
		$data = get_file_data( $file, $headers );
2572
2573
		// Strip out any old Jetpack versions that are cluttering the option.
2574
		$file_data_option = array_intersect_key( (array) $file_data_option, array( JETPACK__VERSION => null ) );
2575
		$file_data_option[ JETPACK__VERSION ][ $key ] = $data;
2576
		Jetpack_Options::update_option( 'file_data', $file_data_option );
2577
2578
		return $data;
2579
	}
2580
2581
	/**
2582
	 * Return translated module tag.
2583
	 *
2584
	 * @param string $tag Tag as it appears in each module heading.
2585
	 *
2586
	 * @return mixed
2587
	 */
2588
	public static function translate_module_tag( $tag ) {
2589
		return jetpack_get_module_i18n_tag( $tag );
2590
	}
2591
2592
	/**
2593
	 * Return module name translation. Uses matching string created in modules/module-headings.php.
2594
	 *
2595
	 * @since 3.9.2
2596
	 *
2597
	 * @param array $modules
2598
	 *
2599
	 * @return string|void
2600
	 */
2601
	public static function get_translated_modules( $modules ) {
2602
		foreach ( $modules as $index => $module ) {
2603
			$i18n_module = jetpack_get_module_i18n( $module['module'] );
2604
			if ( isset( $module['name'] ) ) {
2605
				$modules[ $index ]['name'] = $i18n_module['name'];
2606
			}
2607
			if ( isset( $module['description'] ) ) {
2608
				$modules[ $index ]['description'] = $i18n_module['description'];
2609
				$modules[ $index ]['short_description'] = $i18n_module['description'];
2610
			}
2611
		}
2612
		return $modules;
2613
	}
2614
2615
	/**
2616
	 * Get a list of activated modules as an array of module slugs.
2617
	 */
2618
	public static function get_active_modules() {
2619
		$active = Jetpack_Options::get_option( 'active_modules' );
2620
		if ( ! is_array( $active ) )
2621
			$active = array();
2622
		if ( is_admin() && ( class_exists( 'VaultPress' ) || function_exists( 'vaultpress_contact_service' ) ) ) {
2623
			$active[] = 'vaultpress';
2624
		} else {
2625
			$active = array_diff( $active, array( 'vaultpress' ) );
2626
		}
2627
2628
		//If protect is active on the main site of a multisite, it should be active on all sites.
2629
		if ( ! in_array( 'protect', $active ) && is_multisite() && get_site_option( 'jetpack_protect_active' ) ) {
2630
			$active[] = 'protect';
2631
		}
2632
2633
		return array_unique( $active );
2634
	}
2635
2636
	/**
2637
	 * Check whether or not a Jetpack module is active.
2638
	 *
2639
	 * @param string $module The slug of a Jetpack module.
2640
	 * @return bool
2641
	 *
2642
	 * @static
2643
	 */
2644
	public static function is_module_active( $module ) {
2645
		return in_array( $module, self::get_active_modules() );
2646
	}
2647
2648
	public static function is_module( $module ) {
2649
		return ! empty( $module ) && ! validate_file( $module, Jetpack::get_available_modules() );
2650
	}
2651
2652
	/**
2653
	 * Catches PHP errors.  Must be used in conjunction with output buffering.
2654
	 *
2655
	 * @param bool $catch True to start catching, False to stop.
2656
	 *
2657
	 * @static
2658
	 */
2659
	public static function catch_errors( $catch ) {
2660
		static $display_errors, $error_reporting;
2661
2662
		if ( $catch ) {
2663
			$display_errors  = @ini_set( 'display_errors', 1 );
2664
			$error_reporting = @error_reporting( E_ALL );
2665
			add_action( 'shutdown', array( 'Jetpack', 'catch_errors_on_shutdown' ), 0 );
2666
		} else {
2667
			@ini_set( 'display_errors', $display_errors );
2668
			@error_reporting( $error_reporting );
2669
			remove_action( 'shutdown', array( 'Jetpack', 'catch_errors_on_shutdown' ), 0 );
2670
		}
2671
	}
2672
2673
	/**
2674
	 * Saves any generated PHP errors in ::state( 'php_errors', {errors} )
2675
	 */
2676
	public static function catch_errors_on_shutdown() {
2677
		Jetpack::state( 'php_errors', ob_get_clean() );
2678
	}
2679
2680
	public static function activate_default_modules( $min_version = false, $max_version = false, $other_modules = array() ) {
2681
		$jetpack = Jetpack::init();
2682
2683
		$modules = Jetpack::get_default_modules( $min_version, $max_version );
2684
		$modules = array_merge( $other_modules, $modules );
2685
2686
		// Look for standalone plugins and disable if active.
2687
2688
		$to_deactivate = array();
2689
		foreach ( $modules as $module ) {
2690
			if ( isset( $jetpack->plugins_to_deactivate[$module] ) ) {
2691
				$to_deactivate[$module] = $jetpack->plugins_to_deactivate[$module];
2692
			}
2693
		}
2694
2695
		$deactivated = array();
2696
		foreach ( $to_deactivate as $module => $deactivate_me ) {
2697
			list( $probable_file, $probable_title ) = $deactivate_me;
2698
			if ( Jetpack_Client_Server::deactivate_plugin( $probable_file, $probable_title ) ) {
2699
				$deactivated[] = $module;
2700
			}
2701
		}
2702
2703
		if ( $deactivated ) {
2704
			Jetpack::state( 'deactivated_plugins', join( ',', $deactivated ) );
2705
2706
			$url = add_query_arg(
2707
				array(
2708
					'action'   => 'activate_default_modules',
2709
					'_wpnonce' => wp_create_nonce( 'activate_default_modules' ),
2710
				),
2711
				add_query_arg( compact( 'min_version', 'max_version', 'other_modules' ), Jetpack::admin_url( 'page=jetpack' ) )
2712
			);
2713
			wp_safe_redirect( $url );
2714
			exit;
2715
		}
2716
2717
		/**
2718
		 * Fires before default modules are activated.
2719
		 *
2720
		 * @since 1.9.0
2721
		 *
2722
		 * @param string $min_version Minimum version number required to use modules.
2723
		 * @param string $max_version Maximum version number required to use modules.
2724
		 * @param array $other_modules Array of other modules to activate alongside the default modules.
2725
		 */
2726
		do_action( 'jetpack_before_activate_default_modules', $min_version, $max_version, $other_modules );
2727
2728
		// Check each module for fatal errors, a la wp-admin/plugins.php::activate before activating
2729
		Jetpack::restate();
2730
		Jetpack::catch_errors( true );
2731
2732
		$active = Jetpack::get_active_modules();
2733
2734
		foreach ( $modules as $module ) {
2735
			if ( did_action( "jetpack_module_loaded_$module" ) ) {
2736
				$active[] = $module;
2737
				Jetpack_Options::update_option( 'active_modules', array_unique( $active ) );
2738
				continue;
2739
			}
2740
2741
			if ( in_array( $module, $active ) ) {
2742
				$module_info = Jetpack::get_module( $module );
2743
				if ( ! $module_info['deactivate'] ) {
2744
					$state = in_array( $module, $other_modules ) ? 'reactivated_modules' : 'activated_modules';
2745 View Code Duplication
					if ( $active_state = Jetpack::state( $state ) ) {
2746
						$active_state = explode( ',', $active_state );
2747
					} else {
2748
						$active_state = array();
2749
					}
2750
					$active_state[] = $module;
2751
					Jetpack::state( $state, implode( ',', $active_state ) );
2752
				}
2753
				continue;
2754
			}
2755
2756
			$file = Jetpack::get_module_path( $module );
2757
			if ( ! file_exists( $file ) ) {
2758
				continue;
2759
			}
2760
2761
			// we'll override this later if the plugin can be included without fatal error
2762
			wp_safe_redirect( Jetpack::admin_url( 'page=jetpack' ) );
2763
			Jetpack::state( 'error', 'module_activation_failed' );
2764
			Jetpack::state( 'module', $module );
2765
			ob_start();
2766
			require $file;
2767
			/**
2768
			 * Fires when a specific module is activated.
2769
			 *
2770
			 * @since 1.9.0
2771
			 *
2772
			 * @param string $module Module slug.
2773
			 */
2774
			do_action( 'jetpack_activate_module', $module );
2775
			$active[] = $module;
2776
			$state    = in_array( $module, $other_modules ) ? 'reactivated_modules' : 'activated_modules';
2777 View Code Duplication
			if ( $active_state = Jetpack::state( $state ) ) {
2778
				$active_state = explode( ',', $active_state );
2779
			} else {
2780
				$active_state = array();
2781
			}
2782
			$active_state[] = $module;
2783
			Jetpack::state( $state, implode( ',', $active_state ) );
2784
			Jetpack_Options::update_option( 'active_modules', array_unique( $active ) );
2785
			ob_end_clean();
2786
		}
2787
		Jetpack::state( 'error', false );
2788
		Jetpack::state( 'module', false );
2789
		Jetpack::catch_errors( false );
2790
		/**
2791
		 * Fires when default modules are activated.
2792
		 *
2793
		 * @since 1.9.0
2794
		 *
2795
		 * @param string $min_version Minimum version number required to use modules.
2796
		 * @param string $max_version Maximum version number required to use modules.
2797
		 * @param array $other_modules Array of other modules to activate alongside the default modules.
2798
		 */
2799
		do_action( 'jetpack_activate_default_modules', $min_version, $max_version, $other_modules );
2800
	}
2801
2802
	public static function activate_module( $module, $exit = true, $redirect = true ) {
2803
		/**
2804
		 * Fires before a module is activated.
2805
		 *
2806
		 * @since 2.6.0
2807
		 *
2808
		 * @param string $module Module slug.
2809
		 * @param bool $exit Should we exit after the module has been activated. Default to true.
2810
		 * @param bool $redirect Should the user be redirected after module activation? Default to true.
2811
		 */
2812
		do_action( 'jetpack_pre_activate_module', $module, $exit, $redirect );
2813
2814
		$jetpack = Jetpack::init();
2815
2816
		if ( ! strlen( $module ) )
2817
			return false;
2818
2819
		if ( ! Jetpack::is_module( $module ) )
2820
			return false;
2821
2822
		// If it's already active, then don't do it again
2823
		$active = Jetpack::get_active_modules();
2824
		foreach ( $active as $act ) {
2825
			if ( $act == $module )
2826
				return true;
2827
		}
2828
2829
		$module_data = Jetpack::get_module( $module );
2830
2831
		if ( ! Jetpack::is_active() ) {
2832
			if ( !Jetpack::is_development_mode() )
2833
				return false;
2834
2835
			// If we're not connected but in development mode, make sure the module doesn't require a connection
2836
			if ( Jetpack::is_development_mode() && $module_data['requires_connection'] )
2837
				return false;
2838
		}
2839
2840
		// Check and see if the old plugin is active
2841
		if ( isset( $jetpack->plugins_to_deactivate[ $module ] ) ) {
2842
			// Deactivate the old plugin
2843
			if ( Jetpack_Client_Server::deactivate_plugin( $jetpack->plugins_to_deactivate[ $module ][0], $jetpack->plugins_to_deactivate[ $module ][1] ) ) {
2844
				// If we deactivated the old plugin, remembere that with ::state() and redirect back to this page to activate the module
2845
				// We can't activate the module on this page load since the newly deactivated old plugin is still loaded on this page load.
2846
				Jetpack::state( 'deactivated_plugins', $module );
2847
				wp_safe_redirect( add_query_arg( 'jetpack_restate', 1 ) );
2848
				exit;
2849
			}
2850
		}
2851
2852
		// Check the file for fatal errors, a la wp-admin/plugins.php::activate
2853
		Jetpack::state( 'module', $module );
2854
		Jetpack::state( 'error', 'module_activation_failed' ); // we'll override this later if the plugin can be included without fatal error
2855
2856
		Jetpack::catch_errors( true );
2857
		ob_start();
2858
		require Jetpack::get_module_path( $module );
2859
		/** This action is documented in class.jetpack.php */
2860
		do_action( 'jetpack_activate_module', $module );
2861
		$active[] = $module;
2862
		Jetpack_Options::update_option( 'active_modules', array_unique( $active ) );
2863
		Jetpack::state( 'error', false ); // the override
2864
		Jetpack::state( 'message', 'module_activated' );
2865
		Jetpack::state( 'module', $module );
2866
		ob_end_clean();
2867
		Jetpack::catch_errors( false );
2868
2869
		// A flag for Jump Start so it's not shown again. Only set if it hasn't been yet.
2870 View Code Duplication
		if ( 'new_connection' === Jetpack_Options::get_option( 'jumpstart' ) ) {
2871
			Jetpack_Options::update_option( 'jumpstart', 'jetpack_action_taken' );
2872
2873
			//Jump start is being dismissed send data to MC Stats
2874
			$jetpack->stat( 'jumpstart', 'manual,'.$module );
2875
2876
			$jetpack->do_stats( 'server_side' );
2877
		}
2878
2879
		if ( $redirect ) {
2880
			wp_safe_redirect( Jetpack::admin_url( 'page=jetpack' ) );
2881
		}
2882
		if ( $exit ) {
2883
			exit;
2884
		}
2885
		return true;
2886
	}
2887
2888
	function activate_module_actions( $module ) {
2889
		/**
2890
		 * Fires when a module is activated.
2891
		 * The dynamic part of the filter, $module, is the module slug.
2892
		 *
2893
		 * @since 1.9.0
2894
		 *
2895
		 * @param string $module Module slug.
2896
		 */
2897
		do_action( "jetpack_activate_module_$module", $module );
2898
2899
		$this->sync->sync_all_module_options( $module );
2900
	}
2901
2902
	public static function deactivate_module( $module ) {
2903
		/**
2904
		 * Fires when a module is deactivated.
2905
		 *
2906
		 * @since 1.9.0
2907
		 *
2908
		 * @param string $module Module slug.
2909
		 */
2910
		do_action( 'jetpack_pre_deactivate_module', $module );
2911
2912
		$jetpack = Jetpack::init();
2913
2914
		$active = Jetpack::get_active_modules();
2915
		$new    = array_filter( array_diff( $active, (array) $module ) );
2916
2917
		/**
2918
		 * Fires when a module is deactivated.
2919
		 * The dynamic part of the filter, $module, is the module slug.
2920
		 *
2921
		 * @since 1.9.0
2922
		 *
2923
		 * @param string $module Module slug.
2924
		 */
2925
		do_action( "jetpack_deactivate_module_$module", $module );
2926
2927
		// A flag for Jump Start so it's not shown again.
2928 View Code Duplication
		if ( 'new_connection' === Jetpack_Options::get_option( 'jumpstart' ) ) {
2929
			Jetpack_Options::update_option( 'jumpstart', 'jetpack_action_taken' );
2930
2931
			//Jump start is being dismissed send data to MC Stats
2932
			$jetpack->stat( 'jumpstart', 'manual,deactivated-'.$module );
2933
2934
			$jetpack->do_stats( 'server_side' );
2935
		}
2936
2937
		return Jetpack_Options::update_option( 'active_modules', array_unique( $new ) );
2938
	}
2939
2940
	public static function enable_module_configurable( $module ) {
2941
		$module = Jetpack::get_module_slug( $module );
2942
		add_filter( 'jetpack_module_configurable_' . $module, '__return_true' );
2943
	}
2944
2945
	public static function module_configuration_url( $module ) {
2946
		$module = Jetpack::get_module_slug( $module );
2947
		return Jetpack::admin_url( array( 'page' => 'jetpack', 'configure' => $module ) );
2948
	}
2949
2950
	public static function module_configuration_load( $module, $method ) {
2951
		$module = Jetpack::get_module_slug( $module );
2952
		add_action( 'jetpack_module_configuration_load_' . $module, $method );
2953
	}
2954
2955
	public static function module_configuration_head( $module, $method ) {
2956
		$module = Jetpack::get_module_slug( $module );
2957
		add_action( 'jetpack_module_configuration_head_' . $module, $method );
2958
	}
2959
2960
	public static function module_configuration_screen( $module, $method ) {
2961
		$module = Jetpack::get_module_slug( $module );
2962
		add_action( 'jetpack_module_configuration_screen_' . $module, $method );
2963
	}
2964
2965
	public static function module_configuration_activation_screen( $module, $method ) {
2966
		$module = Jetpack::get_module_slug( $module );
2967
		add_action( 'display_activate_module_setting_' . $module, $method );
2968
	}
2969
2970
/* Installation */
2971
2972
	public static function bail_on_activation( $message, $deactivate = true ) {
2973
?>
2974
<!doctype html>
2975
<html>
2976
<head>
2977
<meta charset="<?php bloginfo( 'charset' ); ?>">
2978
<style>
2979
* {
2980
	text-align: center;
2981
	margin: 0;
2982
	padding: 0;
2983
	font-family: "Lucida Grande",Verdana,Arial,"Bitstream Vera Sans",sans-serif;
2984
}
2985
p {
2986
	margin-top: 1em;
2987
	font-size: 18px;
2988
}
2989
</style>
2990
<body>
2991
<p><?php echo esc_html( $message ); ?></p>
2992
</body>
2993
</html>
2994
<?php
2995
		if ( $deactivate ) {
2996
			$plugins = get_option( 'active_plugins' );
2997
			$jetpack = plugin_basename( JETPACK__PLUGIN_DIR . 'jetpack.php' );
2998
			$update  = false;
2999
			foreach ( $plugins as $i => $plugin ) {
3000
				if ( $plugin === $jetpack ) {
3001
					$plugins[$i] = false;
3002
					$update = true;
3003
				}
3004
			}
3005
3006
			if ( $update ) {
3007
				update_option( 'active_plugins', array_filter( $plugins ) );
3008
			}
3009
		}
3010
		exit;
3011
	}
3012
3013
	/**
3014
	 * Attached to activate_{ plugin_basename( __FILES__ ) } by register_activation_hook()
3015
	 * @static
3016
	 */
3017
	public static function plugin_activation( $network_wide ) {
3018
		Jetpack_Options::update_option( 'activated', 1 );
3019
3020
		if ( version_compare( $GLOBALS['wp_version'], JETPACK__MINIMUM_WP_VERSION, '<' ) ) {
3021
			Jetpack::bail_on_activation( sprintf( __( 'Jetpack requires WordPress version %s or later.', 'jetpack' ), JETPACK__MINIMUM_WP_VERSION ) );
3022
		}
3023
3024
		if ( $network_wide )
3025
			Jetpack::state( 'network_nag', true );
3026
3027
		Jetpack::plugin_initialize();
3028
	}
3029
	/**
3030
	 * Runs before bumping version numbers up to a new version
3031
	 * @param  (string) $version    Version:timestamp
3032
	 * @param  (string) $old_version Old Version:timestamp or false if not set yet.
3033
	 * @return null              [description]
3034
	 */
3035
	public static function do_version_bump( $version, $old_version ) {
3036
3037
		if ( ! $old_version ) { // For new sites
3038
			// Setting up jetpack manage
3039
			Jetpack::activate_manage();
3040
		}
3041
	}
3042
3043
	/**
3044
	 * Sets the internal version number and activation state.
3045
	 * @static
3046
	 */
3047
	public static function plugin_initialize() {
3048
		if ( ! Jetpack_Options::get_option( 'activated' ) ) {
3049
			Jetpack_Options::update_option( 'activated', 2 );
3050
		}
3051
3052 View Code Duplication
		if ( ! Jetpack_Options::get_option( 'version' ) ) {
3053
			$version = $old_version = JETPACK__VERSION . ':' . time();
3054
			/** This action is documented in class.jetpack.php */
3055
			do_action( 'updating_jetpack_version', $version, false );
3056
			Jetpack_Options::update_options( compact( 'version', 'old_version' ) );
3057
		}
3058
3059
		Jetpack::load_modules();
3060
3061
		Jetpack_Options::delete_option( 'do_activate' );
3062
	}
3063
3064
	/**
3065
	 * Removes all connection options
3066
	 * @static
3067
	 */
3068
	public static function plugin_deactivation( ) {
3069
		require_once( ABSPATH . '/wp-admin/includes/plugin.php' );
3070
		if( is_plugin_active_for_network( 'jetpack/jetpack.php' ) ) {
3071
			Jetpack_Network::init()->deactivate();
3072
		} else {
3073
			Jetpack::disconnect( false );
3074
			//Jetpack_Heartbeat::init()->deactivate();
3075
		}
3076
	}
3077
3078
	/**
3079
	 * Disconnects from the Jetpack servers.
3080
	 * Forgets all connection details and tells the Jetpack servers to do the same.
3081
	 * @static
3082
	 */
3083
	public static function disconnect( $update_activated_state = true ) {
3084
		wp_clear_scheduled_hook( 'jetpack_clean_nonces' );
3085
		Jetpack::clean_nonces( true );
3086
3087
		Jetpack::load_xml_rpc_client();
3088
		$xml = new Jetpack_IXR_Client();
3089
		$xml->query( 'jetpack.deregister' );
3090
3091
		Jetpack_Options::delete_option(
3092
			array(
3093
				'register',
3094
				'blog_token',
3095
				'user_token',
3096
				'user_tokens',
3097
				'master_user',
3098
				'time_diff',
3099
				'fallback_no_verify_ssl_certs',
3100
			)
3101
		);
3102
3103
		if ( $update_activated_state ) {
3104
			Jetpack_Options::update_option( 'activated', 4 );
3105
		}
3106
3107
		$jetpack_unique_connection = Jetpack_Options::get_option( 'unique_connection' );
3108
		// Check then record unique disconnection if site has never been disconnected previously
3109
		if ( -1 == $jetpack_unique_connection['disconnected'] ) {
3110
			$jetpack_unique_connection['disconnected'] = 1;
3111
		}
3112
		else {
3113
			if ( 0 == $jetpack_unique_connection['disconnected'] ) {
3114
				//track unique disconnect
3115
				$jetpack = Jetpack::init();
3116
3117
				$jetpack->stat( 'connections', 'unique-disconnect' );
3118
				$jetpack->do_stats( 'server_side' );
3119
			}
3120
			// increment number of times disconnected
3121
			$jetpack_unique_connection['disconnected'] += 1;
3122
		}
3123
3124
		Jetpack_Options::update_option( 'unique_connection', $jetpack_unique_connection );
3125
3126
		// Disable the Heartbeat cron
3127
		Jetpack_Heartbeat::init()->deactivate();
3128
	}
3129
3130
	/**
3131
	 * Unlinks the current user from the linked WordPress.com user
3132
	 */
3133
	public static function unlink_user( $user_id = null ) {
3134
		if ( ! $tokens = Jetpack_Options::get_option( 'user_tokens' ) )
3135
			return false;
3136
3137
		$user_id = empty( $user_id ) ? get_current_user_id() : intval( $user_id );
3138
3139
		if ( Jetpack_Options::get_option( 'master_user' ) == $user_id )
3140
			return false;
3141
3142
		if ( ! isset( $tokens[ $user_id ] ) )
3143
			return false;
3144
3145
		Jetpack::load_xml_rpc_client();
3146
		$xml = new Jetpack_IXR_Client( compact( 'user_id' ) );
3147
		$xml->query( 'jetpack.unlink_user', $user_id );
3148
3149
		unset( $tokens[ $user_id ] );
3150
3151
		Jetpack_Options::update_option( 'user_tokens', $tokens );
3152
3153
		return true;
3154
	}
3155
3156
	/**
3157
	 * Attempts Jetpack registration.  If it fail, a state flag is set: @see ::admin_page_load()
3158
	 */
3159
	public static function try_registration() {
3160
		// Let's get some testing in beta versions and such.
3161
		if ( self::is_development_version() && defined( 'PHP_URL_HOST' ) ) {
3162
			// Before attempting to connect, let's make sure that the domains are viable.
3163
			$domains_to_check = array_unique( array(
3164
				'siteurl' => parse_url( get_site_url(), PHP_URL_HOST ),
3165
				'homeurl' => parse_url( get_home_url(), PHP_URL_HOST ),
3166
			) );
3167
			foreach ( $domains_to_check as $domain ) {
3168
				$result = Jetpack_Data::is_usable_domain( $domain );
3169
				if ( is_wp_error( $result ) ) {
3170
					return $result;
3171
				}
3172
			}
3173
		}
3174
3175
		$result = Jetpack::register();
3176
3177
		// If there was an error with registration and the site was not registered, record this so we can show a message.
3178
		if ( ! $result || is_wp_error( $result ) ) {
3179
			return $result;
3180
		} else {
3181
			return true;
3182
		}
3183
	}
3184
3185
	/**
3186
	 * Tracking an internal event log. Try not to put too much chaff in here.
3187
	 *
3188
	 * [Everyone Loves a Log!](https://www.youtube.com/watch?v=2C7mNr5WMjA)
3189
	 */
3190
	public static function log( $code, $data = null ) {
3191
		// only grab the latest 200 entries
3192
		$log = array_slice( Jetpack_Options::get_option( 'log', array() ), -199, 199 );
3193
3194
		// Append our event to the log
3195
		$log_entry = array(
3196
			'time'    => time(),
3197
			'user_id' => get_current_user_id(),
3198
			'blog_id' => Jetpack_Options::get_option( 'id' ),
3199
			'code'    => $code,
3200
		);
3201
		// Don't bother storing it unless we've got some.
3202
		if ( ! is_null( $data ) ) {
3203
			$log_entry['data'] = $data;
3204
		}
3205
		$log[] = $log_entry;
3206
3207
		// Try add_option first, to make sure it's not autoloaded.
3208
		// @todo: Add an add_option method to Jetpack_Options
3209
		if ( ! add_option( 'jetpack_log', $log, null, 'no' ) ) {
3210
			Jetpack_Options::update_option( 'log', $log );
3211
		}
3212
3213
		/**
3214
		 * Fires when Jetpack logs an internal event.
3215
		 *
3216
		 * @since 3.0.0
3217
		 *
3218
		 * @param array $log_entry {
3219
		 *	Array of details about the log entry.
3220
		 *
3221
		 *	@param string time Time of the event.
3222
		 *	@param int user_id ID of the user who trigerred the event.
3223
		 *	@param int blog_id Jetpack Blog ID.
3224
		 *	@param string code Unique name for the event.
3225
		 *	@param string data Data about the event.
3226
		 * }
3227
		 */
3228
		do_action( 'jetpack_log_entry', $log_entry );
3229
	}
3230
3231
	/**
3232
	 * Get the internal event log.
3233
	 *
3234
	 * @param $event (string) - only return the specific log events
3235
	 * @param $num   (int)    - get specific number of latest results, limited to 200
3236
	 *
3237
	 * @return array of log events || WP_Error for invalid params
3238
	 */
3239
	public static function get_log( $event = false, $num = false ) {
3240
		if ( $event && ! is_string( $event ) ) {
3241
			return new WP_Error( __( 'First param must be string or empty', 'jetpack' ) );
3242
		}
3243
3244
		if ( $num && ! is_numeric( $num ) ) {
3245
			return new WP_Error( __( 'Second param must be numeric or empty', 'jetpack' ) );
3246
		}
3247
3248
		$entire_log = Jetpack_Options::get_option( 'log', array() );
3249
3250
		// If nothing set - act as it did before, otherwise let's start customizing the output
3251
		if ( ! $num && ! $event ) {
3252
			return $entire_log;
3253
		} else {
3254
			$entire_log = array_reverse( $entire_log );
3255
		}
3256
3257
		$custom_log_output = array();
3258
3259
		if ( $event ) {
3260
			foreach ( $entire_log as $log_event ) {
3261
				if ( $event == $log_event[ 'code' ] ) {
3262
					$custom_log_output[] = $log_event;
3263
				}
3264
			}
3265
		} else {
3266
			$custom_log_output = $entire_log;
3267
		}
3268
3269
		if ( $num ) {
3270
			$custom_log_output = array_slice( $custom_log_output, 0, $num );
3271
		}
3272
3273
		return $custom_log_output;
3274
	}
3275
3276
	/**
3277
	 * Log modification of important settings.
3278
	 */
3279
	public static function log_settings_change( $option, $old_value, $value ) {
3280
		switch( $option ) {
3281
			case 'jetpack_sync_non_public_post_stati':
3282
				self::log( $option, $value );
3283
				break;
3284
		}
3285
	}
3286
3287
	/**
3288
	 * Return stat data for WPCOM sync
3289
	 */
3290
	function get_stat_data() {
3291
		$heartbeat_data = Jetpack_Heartbeat::generate_stats_array();
3292
		$additional_data = $this->get_additional_stat_data();
3293
3294
		return json_encode( array_merge( $heartbeat_data, $additional_data ) );
3295
	}
3296
3297
	/**
3298
	 * Get additional stat data to sync to WPCOM
3299
	 */
3300
	function get_additional_stat_data( $prefix = '' ) {
3301
		$return["{$prefix}themes"]         = Jetpack::get_parsed_theme_data();
3302
		$return["{$prefix}plugins-extra"]  = Jetpack::get_parsed_plugin_data();
3303
		$return["{$prefix}users"]          = count_users();
3304
		$return["{$prefix}site-count"]     = 0;
3305
		if ( function_exists( 'get_blog_count' ) ) {
3306
			$return["{$prefix}site-count"] = get_blog_count();
3307
		}
3308
		return $return;
3309
	}
3310
3311
	/* Admin Pages */
3312
3313
	function admin_init() {
3314
		// If the plugin is not connected, display a connect message.
3315
		if (
3316
			// the plugin was auto-activated and needs its candy
3317
			Jetpack_Options::get_option( 'do_activate' )
3318
		||
3319
			// the plugin is active, but was never activated.  Probably came from a site-wide network activation
3320
			! Jetpack_Options::get_option( 'activated' )
3321
		) {
3322
			Jetpack::plugin_initialize();
3323
		}
3324
3325
		if ( ! Jetpack::is_active() && ! Jetpack::is_development_mode() ) {
3326
			if ( 4 != Jetpack_Options::get_option( 'activated' ) ) {
3327
				// Show connect notice on dashboard and plugins pages
3328
				add_action( 'load-index.php', array( $this, 'prepare_connect_notice' ) );
3329
				add_action( 'load-plugins.php', array( $this, 'prepare_connect_notice' ) );
3330
			}
3331
		} elseif ( false === Jetpack_Options::get_option( 'fallback_no_verify_ssl_certs' ) ) {
3332
			// Upgrade: 1.1 -> 1.1.1
3333
			// Check and see if host can verify the Jetpack servers' SSL certificate
3334
			$args = array();
3335
			Jetpack_Client::_wp_remote_request(
3336
				Jetpack::fix_url_for_bad_hosts( Jetpack::api_url( 'test' ) ),
3337
				$args,
3338
				true
3339
			);
3340
		} else {
3341
			// Show the notice on the Dashboard only for now
3342
3343
			add_action( 'load-index.php', array( $this, 'prepare_manage_jetpack_notice' ) );
3344
3345
			// Identity crisis notices
3346
			add_action( 'jetpack_notices', array( $this, 'alert_identity_crisis' ) );
3347
		}
3348
3349
		// If the plugin has just been disconnected from WP.com, show the survey notice
3350
		if ( isset( $_GET['disconnected'] ) && 'true' === $_GET['disconnected'] ) {
3351
			add_action( 'jetpack_notices', array( $this, 'disconnect_survey_notice' ) );
3352
		}
3353
3354
		if ( current_user_can( 'manage_options' ) && 'ALWAYS' == JETPACK_CLIENT__HTTPS && ! self::permit_ssl() ) {
3355
			add_action( 'admin_notices', array( $this, 'alert_required_ssl_fail' ) );
3356
		}
3357
3358
		add_action( 'load-plugins.php', array( $this, 'intercept_plugin_error_scrape_init' ) );
3359
		add_action( 'admin_enqueue_scripts', array( $this, 'admin_menu_css' ) );
3360
		add_filter( 'plugin_action_links_' . plugin_basename( JETPACK__PLUGIN_DIR . 'jetpack.php' ), array( $this, 'plugin_action_links' ) );
3361
3362
		if ( Jetpack::is_active() || Jetpack::is_development_mode() ) {
3363
			// Artificially throw errors in certain whitelisted cases during plugin activation
3364
			add_action( 'activate_plugin', array( $this, 'throw_error_on_activate_plugin' ) );
3365
3366
			// Kick off synchronization of user role when it changes
3367
			add_action( 'set_user_role', array( $this, 'user_role_change' ) );
3368
		}
3369
3370
		// Jetpack Manage Activation Screen from .com
3371
		Jetpack::module_configuration_activation_screen( 'manage', array( $this, 'manage_activate_screen' ) );
3372
	}
3373
3374
	function admin_body_class( $admin_body_class = '' ) {
3375
		$classes = explode( ' ', trim( $admin_body_class ) );
3376
3377
		$classes[] = self::is_active() ? 'jetpack-connected' : 'jetpack-disconnected';
3378
3379
		$admin_body_class = implode( ' ', array_unique( $classes ) );
3380
		return " $admin_body_class ";
3381
	}
3382
3383
	static function add_jetpack_pagestyles( $admin_body_class = '' ) {
3384
		return $admin_body_class . ' jetpack-pagestyles ';
3385
	}
3386
3387
	function prepare_connect_notice() {
3388
		add_action( 'admin_print_styles', array( $this, 'admin_banner_styles' ) );
3389
3390
		add_action( 'admin_notices', array( $this, 'admin_connect_notice' ) );
3391
3392
		if ( Jetpack::state( 'network_nag' ) )
3393
			add_action( 'network_admin_notices', array( $this, 'network_connect_notice' ) );
3394
	}
3395
	/**
3396
	 * Call this function if you want the Big Jetpack Manage Notice to show up.
3397
	 *
3398
	 * @return null
3399
	 */
3400
	function prepare_manage_jetpack_notice() {
3401
3402
		add_action( 'admin_print_styles', array( $this, 'admin_banner_styles' ) );
3403
		add_action( 'admin_notices', array( $this, 'admin_jetpack_manage_notice' ) );
3404
	}
3405
3406
	function manage_activate_screen() {
3407
		include ( JETPACK__PLUGIN_DIR . 'modules/manage/activate-admin.php' );
3408
	}
3409
	/**
3410
	 * Sometimes a plugin can activate without causing errors, but it will cause errors on the next page load.
3411
	 * This function artificially throws errors for such cases (whitelisted).
3412
	 *
3413
	 * @param string $plugin The activated plugin.
3414
	 */
3415
	function throw_error_on_activate_plugin( $plugin ) {
3416
		$active_modules = Jetpack::get_active_modules();
3417
3418
		// The Shortlinks module and the Stats plugin conflict, but won't cause errors on activation because of some function_exists() checks.
3419
		if ( function_exists( 'stats_get_api_key' ) && in_array( 'shortlinks', $active_modules ) ) {
3420
			$throw = false;
3421
3422
			// Try and make sure it really was the stats plugin
3423
			if ( ! class_exists( 'ReflectionFunction' ) ) {
3424
				if ( 'stats.php' == basename( $plugin ) ) {
3425
					$throw = true;
3426
				}
3427
			} else {
3428
				$reflection = new ReflectionFunction( 'stats_get_api_key' );
3429
				if ( basename( $plugin ) == basename( $reflection->getFileName() ) ) {
3430
					$throw = true;
3431
				}
3432
			}
3433
3434
			if ( $throw ) {
3435
				trigger_error( sprintf( __( 'Jetpack contains the most recent version of the old &#8220;%1$s&#8221; plugin.', 'jetpack' ), 'WordPress.com Stats' ), E_USER_ERROR );
3436
			}
3437
		}
3438
	}
3439
3440
	function intercept_plugin_error_scrape_init() {
3441
		add_action( 'check_admin_referer', array( $this, 'intercept_plugin_error_scrape' ), 10, 2 );
3442
	}
3443
3444
	function intercept_plugin_error_scrape( $action, $result ) {
3445
		if ( ! $result ) {
3446
			return;
3447
		}
3448
3449
		foreach ( $this->plugins_to_deactivate as $deactivate_me ) {
3450
			if ( "plugin-activation-error_{$deactivate_me[0]}" == $action ) {
3451
				Jetpack::bail_on_activation( sprintf( __( 'Jetpack contains the most recent version of the old &#8220;%1$s&#8221; plugin.', 'jetpack' ), $deactivate_me[1] ), false );
3452
			}
3453
		}
3454
	}
3455
3456
	function add_remote_request_handlers() {
3457
		add_action( 'wp_ajax_nopriv_jetpack_upload_file', array( $this, 'remote_request_handlers' ) );
3458
	}
3459
3460
	function remote_request_handlers() {
3461
		switch ( current_filter() ) {
3462
		case 'wp_ajax_nopriv_jetpack_upload_file' :
3463
			$response = $this->upload_handler();
3464
			break;
3465
		default :
3466
			$response = new Jetpack_Error( 'unknown_handler', 'Unknown Handler', 400 );
3467
			break;
3468
		}
3469
3470
		if ( ! $response ) {
3471
			$response = new Jetpack_Error( 'unknown_error', 'Unknown Error', 400 );
3472
		}
3473
3474
		if ( is_wp_error( $response ) ) {
3475
			$status_code       = $response->get_error_data();
3476
			$error             = $response->get_error_code();
3477
			$error_description = $response->get_error_message();
3478
3479
			if ( ! is_int( $status_code ) ) {
3480
				$status_code = 400;
3481
			}
3482
3483
			status_header( $status_code );
3484
			die( json_encode( (object) compact( 'error', 'error_description' ) ) );
3485
		}
3486
3487
		status_header( 200 );
3488
		if ( true === $response ) {
3489
			exit;
3490
		}
3491
3492
		die( json_encode( (object) $response ) );
3493
	}
3494
3495
	function upload_handler() {
3496
		if ( 'POST' !== strtoupper( $_SERVER['REQUEST_METHOD'] ) ) {
3497
			return new Jetpack_Error( 405, get_status_header_desc( 405 ), 405 );
3498
		}
3499
3500
		$user = wp_authenticate( '', '' );
3501
		if ( ! $user || is_wp_error( $user ) ) {
3502
			return new Jetpack_Error( 403, get_status_header_desc( 403 ), 403 );
3503
		}
3504
3505
		wp_set_current_user( $user->ID );
3506
3507
		if ( ! current_user_can( 'upload_files' ) ) {
3508
			return new Jetpack_Error( 'cannot_upload_files', 'User does not have permission to upload files', 403 );
3509
		}
3510
3511
		if ( empty( $_FILES ) ) {
3512
			return new Jetpack_Error( 'no_files_uploaded', 'No files were uploaded: nothing to process', 400 );
3513
		}
3514
3515
		foreach ( array_keys( $_FILES ) as $files_key ) {
3516
			if ( ! isset( $_POST["_jetpack_file_hmac_{$files_key}"] ) ) {
3517
				return new Jetpack_Error( 'missing_hmac', 'An HMAC for one or more files is missing', 400 );
3518
			}
3519
		}
3520
3521
		$media_keys = array_keys( $_FILES['media'] );
3522
3523
		$token = Jetpack_Data::get_access_token( get_current_user_id() );
3524
		if ( ! $token || is_wp_error( $token ) ) {
3525
			return new Jetpack_Error( 'unknown_token', 'Unknown Jetpack token', 403 );
3526
		}
3527
3528
		$uploaded_files = array();
3529
		$global_post    = isset( $GLOBALS['post'] ) ? $GLOBALS['post'] : null;
3530
		unset( $GLOBALS['post'] );
3531
		foreach ( $_FILES['media']['name'] as $index => $name ) {
3532
			$file = array();
3533
			foreach ( $media_keys as $media_key ) {
3534
				$file[$media_key] = $_FILES['media'][$media_key][$index];
3535
			}
3536
3537
			list( $hmac_provided, $salt ) = explode( ':', $_POST['_jetpack_file_hmac_media'][$index] );
3538
3539
			$hmac_file = hash_hmac_file( 'sha1', $file['tmp_name'], $salt . $token->secret );
3540
			if ( $hmac_provided !== $hmac_file ) {
3541
				$uploaded_files[$index] = (object) array( 'error' => 'invalid_hmac', 'error_description' => 'The corresponding HMAC for this file does not match' );
3542
				continue;
3543
			}
3544
3545
			$_FILES['.jetpack.upload.'] = $file;
3546
			$post_id = isset( $_POST['post_id'][$index] ) ? absint( $_POST['post_id'][$index] ) : 0;
3547
			if ( ! current_user_can( 'edit_post', $post_id ) ) {
3548
				$post_id = 0;
3549
			}
3550
			$attachment_id = media_handle_upload(
3551
				'.jetpack.upload.',
3552
				$post_id,
3553
				array(),
3554
				array(
3555
					'action' => 'jetpack_upload_file',
3556
				)
3557
			);
3558
3559
			if ( ! $attachment_id ) {
3560
				$uploaded_files[$index] = (object) array( 'error' => 'unknown', 'error_description' => 'An unknown problem occurred processing the upload on the Jetpack site' );
3561
			} elseif ( is_wp_error( $attachment_id ) ) {
3562
				$uploaded_files[$index] = (object) array( 'error' => 'attachment_' . $attachment_id->get_error_code(), 'error_description' => $attachment_id->get_error_message() );
3563
			} else {
3564
				$attachment = get_post( $attachment_id );
3565
				$uploaded_files[$index] = (object) array(
3566
					'id'   => (string) $attachment_id,
3567
					'file' => $attachment->post_title,
3568
					'url'  => wp_get_attachment_url( $attachment_id ),
3569
					'type' => $attachment->post_mime_type,
3570
					'meta' => wp_get_attachment_metadata( $attachment_id ),
3571
				);
3572
			}
3573
		}
3574
		if ( ! is_null( $global_post ) ) {
3575
			$GLOBALS['post'] = $global_post;
3576
		}
3577
3578
		return $uploaded_files;
3579
	}
3580
3581
	/**
3582
	 * Add help to the Jetpack page
3583
	 *
3584
	 * @since Jetpack (1.2.3)
3585
	 * @return false if not the Jetpack page
3586
	 */
3587
	function admin_help() {
3588
		$current_screen = get_current_screen();
3589
3590
		// Overview
3591
		$current_screen->add_help_tab(
3592
			array(
3593
				'id'		=> 'home',
3594
				'title'		=> __( 'Home', 'jetpack' ),
3595
				'content'	=>
3596
					'<p><strong>' . __( 'Jetpack by WordPress.com', 'jetpack' ) . '</strong></p>' .
3597
					'<p>' . __( 'Jetpack supercharges your self-hosted WordPress site with the awesome cloud power of WordPress.com.', 'jetpack' ) . '</p>' .
3598
					'<p>' . __( 'On this page, you are able to view the modules available within Jetpack, learn more about them, and activate or deactivate them as needed.', 'jetpack' ) . '</p>',
3599
			)
3600
		);
3601
3602
		// Screen Content
3603
		if ( current_user_can( 'manage_options' ) ) {
3604
			$current_screen->add_help_tab(
3605
				array(
3606
					'id'		=> 'settings',
3607
					'title'		=> __( 'Settings', 'jetpack' ),
3608
					'content'	=>
3609
						'<p><strong>' . __( 'Jetpack by WordPress.com',                                              'jetpack' ) . '</strong></p>' .
3610
						'<p>' . __( 'You can activate or deactivate individual Jetpack modules to suit your needs.', 'jetpack' ) . '</p>' .
3611
						'<ol>' .
3612
							'<li>' . __( 'Each module has an Activate or Deactivate link so you can toggle one individually.',														'jetpack' ) . '</li>' .
3613
							'<li>' . __( 'Using the checkboxes next to each module, you can select multiple modules to toggle via the Bulk Actions menu at the top of the list.',	'jetpack' ) . '</li>' .
3614
						'</ol>' .
3615
						'<p>' . __( 'Using the tools on the right, you can search for specific modules, filter by module categories or which are active, or change the sorting order.', 'jetpack' ) . '</p>'
3616
				)
3617
			);
3618
		}
3619
3620
		// Help Sidebar
3621
		$current_screen->set_help_sidebar(
3622
			'<p><strong>' . __( 'For more information:', 'jetpack' ) . '</strong></p>' .
3623
			'<p><a href="http://jetpack.com/faq/" target="_blank">'     . __( 'Jetpack FAQ',     'jetpack' ) . '</a></p>' .
3624
			'<p><a href="http://jetpack.com/support/" target="_blank">' . __( 'Jetpack Support', 'jetpack' ) . '</a></p>' .
3625
			'<p><a href="' . Jetpack::admin_url( array( 'page' => 'jetpack-debugger' )  ) .'">' . __( 'Jetpack Debugging Center', 'jetpack' ) . '</a></p>'
3626
		);
3627
	}
3628
3629
	function admin_menu_css() {
3630
		wp_enqueue_style( 'jetpack-icons' );
3631
	}
3632
3633
	function admin_menu_order() {
3634
		return true;
3635
	}
3636
3637 View Code Duplication
	function jetpack_menu_order( $menu_order ) {
3638
		$jp_menu_order = array();
3639
3640
		foreach ( $menu_order as $index => $item ) {
3641
			if ( $item != 'jetpack' ) {
3642
				$jp_menu_order[] = $item;
3643
			}
3644
3645
			if ( $index == 0 ) {
3646
				$jp_menu_order[] = 'jetpack';
3647
			}
3648
		}
3649
3650
		return $jp_menu_order;
3651
	}
3652
3653
	function admin_head() {
3654 View Code Duplication
		if ( isset( $_GET['configure'] ) && Jetpack::is_module( $_GET['configure'] ) && current_user_can( 'manage_options' ) )
3655
			/** This action is documented in class.jetpack-admin-page.php */
3656
			do_action( 'jetpack_module_configuration_head_' . $_GET['configure'] );
3657
	}
3658
3659
	function admin_banner_styles() {
3660
		$min = ( defined( 'SCRIPT_DEBUG' ) && SCRIPT_DEBUG ) ? '' : '.min';
3661
3662
		wp_enqueue_style( 'jetpack', plugins_url( "css/jetpack-banners{$min}.css", JETPACK__PLUGIN_FILE ), false, JETPACK__VERSION . '-20121016' );
3663
		wp_style_add_data( 'jetpack', 'rtl', 'replace' );
3664
		wp_style_add_data( 'jetpack', 'suffix', $min );
3665
	}
3666
3667
	function admin_scripts() {
3668
		wp_enqueue_script( 'jetpack-js', plugins_url( '_inc/jp.js', JETPACK__PLUGIN_FILE ), array( 'jquery', 'wp-util' ), JETPACK__VERSION . '-20121111' );
3669
		wp_localize_script(
3670
			'jetpack-js',
3671
			'jetpackL10n',
3672
			array(
3673
				'ays_disconnect' => "This will deactivate all Jetpack modules.\nAre you sure you want to disconnect?",
3674
				'ays_unlink'     => "This will prevent user-specific modules such as Publicize, Notifications and Post By Email from working.\nAre you sure you want to unlink?",
3675
				'ays_dismiss'    => "This will deactivate Jetpack.\nAre you sure you want to deactivate Jetpack?",
3676
			)
3677
		);
3678
		add_action( 'admin_footer', array( $this, 'do_stats' ) );
3679
	}
3680
3681
	function plugin_action_links( $actions ) {
3682
3683
		$jetpack_home = array( 'jetpack-home' => sprintf( '<a href="%s">%s</a>', Jetpack::admin_url( 'page=jetpack' ), __( 'Jetpack', 'jetpack' ) ) );
3684
3685
		if( current_user_can( 'jetpack_manage_modules' ) && ( Jetpack::is_active() || Jetpack::is_development_mode() ) ) {
3686
			return array_merge(
3687
				$jetpack_home,
3688
				array( 'settings' => sprintf( '<a href="%s">%s</a>', Jetpack::admin_url( 'page=jetpack_modules' ), __( 'Settings', 'jetpack' ) ) ),
3689
				array( 'support' => sprintf( '<a href="%s">%s</a>', Jetpack::admin_url( 'page=jetpack-debugger '), __( 'Support', 'jetpack' ) ) ),
3690
				$actions
3691
				);
3692
			}
3693
3694
		return array_merge( $jetpack_home, $actions );
3695
	}
3696
3697
	function admin_connect_notice() {
3698
		// Don't show the connect notice anywhere but the plugins.php after activating
3699
		$current = get_current_screen();
3700
		if ( 'plugins' !== $current->parent_base )
3701
			return;
3702
3703
		if ( ! current_user_can( 'jetpack_connect' ) )
3704
			return;
3705
3706
		$dismiss_and_deactivate_url = wp_nonce_url( Jetpack::admin_url( '?page=jetpack&jetpack-notice=dismiss' ), 'jetpack-deactivate' );
3707
		?>
3708
		<div id="message" class="updated jetpack-message jp-banner" style="display:block !important;">
3709
			<a class="jp-banner__dismiss" href="<?php echo esc_url( $dismiss_and_deactivate_url ); ?>" title="<?php esc_attr_e( 'Dismiss this notice and deactivate Jetpack.', 'jetpack' ); ?>"></a>
3710
			<?php if ( in_array( Jetpack_Options::get_option( 'activated' ) , array( 1, 2, 3 ) ) ) : ?>
3711
				<div class="jp-banner__content is-connection">
3712
					<h2><?php _e( 'Your Jetpack is almost ready!', 'jetpack' ); ?></h2>
3713
					<p><?php _e( 'Connect now to enable features like Stats, Likes, and Social Sharing.', 'jetpack' ); ?></p>
3714
				</div>
3715
				<div class="jp-banner__action-container is-connection">
3716
						<a href="<?php echo $this->build_connect_url( false, false, 'banner' ) ?>" class="jp-banner__button" id="wpcom-connect"><?php _e( 'Connect to WordPress.com', 'jetpack' ); ?></a>
0 ignored issues
show
'banner' is of type string, but the function expects a boolean.

It seems like the type of the argument is not accepted by the function/method which you are calling.

In some cases, in particular if PHP’s automatic type-juggling kicks in this might be fine. In other cases, however this might be a bug.

We suggest to add an explicit type cast like in the following example:

function acceptsInteger($int) { }

$x = '123'; // string "123"

// Instead of
acceptsInteger($x);

// we recommend to use
acceptsInteger((integer) $x);
Loading history...
3717
				</div>
3718 View Code Duplication
			<?php else : ?>
3719
				<div class="jp-banner__content">
3720
					<h2><?php _e( 'Jetpack is installed!', 'jetpack' ) ?></h2>
3721
					<p><?php _e( 'It\'s ready to bring awesome, WordPress.com cloud-powered features to your site.', 'jetpack' ) ?></p>
3722
				</div>
3723
				<div class="jp-banner__action-container">
3724
					<a href="<?php echo Jetpack::admin_url() ?>" class="jp-banner__button" id="wpcom-connect"><?php _e( 'Learn More', 'jetpack' ); ?></a>
3725
				</div>
3726
			<?php endif; ?>
3727
		</div>
3728
3729
		<?php
3730
	}
3731
3732
	/**
3733
	 * This is the first banner
3734
	 * It should be visible only to user that can update the option
3735
	 * Are not connected
3736
	 *
3737
	 * @return null
3738
	 */
3739
	function admin_jetpack_manage_notice() {
3740
		$screen = get_current_screen();
3741
3742
		// Don't show the connect notice on the jetpack settings page.
3743
		if ( ! in_array( $screen->base, array( 'dashboard' ) ) || $screen->is_network || $screen->action )
3744
			return;
3745
3746
		// Only show it if don't have the managment option set.
3747
		// And not dismissed it already.
3748
		if ( ! $this->can_display_jetpack_manage_notice() || Jetpack_Options::get_option( 'dismissed_manage_banner' ) ) {
3749
			return;
3750
		}
3751
3752
		$opt_out_url = $this->opt_out_jetpack_manage_url();
3753
		$opt_in_url  = $this->opt_in_jetpack_manage_url();
3754
		/**
3755
		 * I think it would be great to have different wordsing depending on where you are
3756
		 * for example if we show the notice on dashboard and a different one if we show it on Plugins screen
3757
		 * etc..
3758
		 */
3759
3760
		?>
3761
		<div id="message" class="updated jetpack-message jp-banner is-opt-in" style="display:block !important;">
3762
			<a class="jp-banner__dismiss" href="<?php echo esc_url( $opt_out_url ); ?>" title="<?php esc_attr_e( 'Dismiss this notice for now.', 'jetpack' ); ?>"></a>
3763
			<div class="jp-banner__content">
3764
				<h2><?php esc_html_e( 'New in Jetpack: Centralized Site Management', 'jetpack' ); ?></h2>
3765
				<p><?php printf( __( 'Manage multiple sites from one dashboard at wordpress.com/sites. Enabling allows all existing, connected Administrators to modify your site from WordPress.com. <a href="%s" target="_blank">Learn More</a>.', 'jetpack' ), 'http://jetpack.com/support/site-management' ); ?></p>
3766
			</div>
3767
			<div class="jp-banner__action-container is-opt-in">
3768
				<a href="<?php echo esc_url( $opt_in_url ); ?>" class="jp-banner__button" id="wpcom-connect"><?php _e( 'Activate now', 'jetpack' ); ?></a>
3769
			</div>
3770
		</div>
3771
		<?php
3772
	}
3773
3774
	/**
3775
	 * Returns the url that the user clicks to remove the notice for the big banner
3776
	 * @return (string)
3777
	 */
3778
	function opt_out_jetpack_manage_url() {
3779
		$referer = '&_wp_http_referer=' . add_query_arg( '_wp_http_referer', null );
3780
		return wp_nonce_url( Jetpack::admin_url( 'jetpack-notice=jetpack-manage-opt-out' . $referer ), 'jetpack_manage_banner_opt_out' );
3781
	}
3782
	/**
3783
	 * Returns the url that the user clicks to opt in to Jetpack Manage
3784
	 * @return (string)
3785
	 */
3786
	function opt_in_jetpack_manage_url() {
3787
		return wp_nonce_url( Jetpack::admin_url( 'jetpack-notice=jetpack-manage-opt-in' ), 'jetpack_manage_banner_opt_in' );
3788
	}
3789
3790
	function opt_in_jetpack_manage_notice() {
3791
		?>
3792
		<div class="wrap">
3793
			<div id="message" class="jetpack-message is-opt-in">
3794
				<?php echo sprintf( __( '<p><a href="%1$s" title="Opt in to WordPress.com Site Management" >Activate Site Management</a> to manage multiple sites from our centralized dashboard at wordpress.com/sites. <a href="%2$s" target="_blank">Learn more</a>.</p><a href="%1$s" class="jp-button">Activate Now</a>', 'jetpack' ), $this->opt_in_jetpack_manage_url(), 'http://jetpack.com/support/site-management' ); ?>
3795
			</div>
3796
		</div>
3797
		<?php
3798
3799
	}
3800
	/**
3801
	 * Determines whether to show the notice of not true = display notice
3802
	 * @return (bool)
3803
	 */
3804
	function can_display_jetpack_manage_notice() {
3805
		// never display the notice to users that can't do anything about it anyways
3806
		if( ! current_user_can( 'jetpack_manage_modules' ) )
3807
			return false;
3808
3809
		// don't display if we are in development more
3810
		if( Jetpack::is_development_mode() ) {
3811
			return false;
3812
		}
3813
		// don't display if the site is private
3814
		if(  ! Jetpack_Options::get_option( 'public' ) )
3815
			return false;
3816
3817
		/**
3818
		 * Should the Jetpack Remote Site Management notice be displayed.
3819
		 *
3820
		 * @since 3.3.0
3821
		 *
3822
		 * @param bool ! self::is_module_active( 'manage' ) Is the Manage module inactive.
3823
		 */
3824
		return apply_filters( 'can_display_jetpack_manage_notice', ! self::is_module_active( 'manage' ) );
3825
	}
3826
3827
	function network_connect_notice() {
3828
		?>
3829
		<div id="message" class="updated jetpack-message">
3830
			<div class="squeezer">
3831
				<h2><?php _e( '<strong>Jetpack is activated!</strong> Each site on your network must be connected individually by an admin on that site.', 'jetpack' ) ?></h2>
3832
			</div>
3833
		</div>
3834
		<?php
3835
	}
3836
3837
	public static function jetpack_comment_notice() {
3838
		if ( in_array( 'comments', Jetpack::get_active_modules() ) ) {
3839
			return '';
3840
		}
3841
3842
		$jetpack_old_version = explode( ':', Jetpack_Options::get_option( 'old_version' ) );
3843
		$jetpack_new_version = explode( ':', Jetpack_Options::get_option( 'version' ) );
3844
3845
		if ( $jetpack_old_version ) {
3846
			if ( version_compare( $jetpack_old_version[0], '1.4', '>=' ) ) {
3847
				return '';
3848
			}
3849
		}
3850
3851
		if ( $jetpack_new_version ) {
3852
			if ( version_compare( $jetpack_new_version[0], '1.4-something', '<' ) ) {
3853
				return '';
3854
			}
3855
		}
3856
3857
		return '<br /><br />' . sprintf(
3858
			__( 'Jetpack now includes Comments, which enables your visitors to use their WordPress.com, Twitter, or Facebook accounts when commenting on your site. To activate Comments, <a href="%s">%s</a>.', 'jetpack' ),
3859
			wp_nonce_url(
3860
				Jetpack::admin_url(
3861
					array(
3862
						'page'   => 'jetpack',
3863
						'action' => 'activate',
3864
						'module' => 'comments',
3865
					)
3866
				),
3867
				'jetpack_activate-comments'
3868
			),
3869
			__( 'click here', 'jetpack' )
3870
		);
3871
	}
3872
3873
	/**
3874
	 * Show the survey link when the user has just disconnected Jetpack.
3875
	 */
3876
	function disconnect_survey_notice() {
3877
		?>
3878
		<div class="wrap">
3879
			<div id="message" class="jetpack-message stay-visible">
3880
				<div class="squeezer">
3881
					<h2>
3882
						<?php _e( 'You have successfully disconnected Jetpack.', 'jetpack' ); ?>
3883
						<br />
3884
						<?php echo sprintf(
3885
							__( 'Would you tell us why? Just <a href="%1$s" target="%2$s">answering two simple questions</a> would help us improve Jetpack.', 'jetpack' ),
3886
							'https://jetpack.com/survey-disconnected/',
3887
							'_blank'
3888
						); ?>
3889
					</h2>
3890
				</div>
3891
			</div>
3892
		</div>
3893
		<?php
3894
	}
3895
3896
	/*
3897
	 * Registration flow:
3898
	 * 1 - ::admin_page_load() action=register
3899
	 * 2 - ::try_registration()
3900
	 * 3 - ::register()
3901
	 *     - Creates jetpack_register option containing two secrets and a timestamp
3902
	 *     - Calls https://jetpack.wordpress.com/jetpack.register/1/ with
3903
	 *       siteurl, home, gmt_offset, timezone_string, site_name, secret_1, secret_2, site_lang, timeout, stats_id
3904
	 *     - That request to jetpack.wordpress.com does not immediately respond.  It first makes a request BACK to this site's
3905
	 *       xmlrpc.php?for=jetpack: RPC method: jetpack.verifyRegistration, Parameters: secret_1
3906
	 *     - The XML-RPC request verifies secret_1, deletes both secrets and responds with: secret_2
3907
	 *     - https://jetpack.wordpress.com/jetpack.register/1/ verifies that XML-RPC response (secret_2) then finally responds itself with
3908
	 *       jetpack_id, jetpack_secret, jetpack_public
3909
	 *     - ::register() then stores jetpack_options: id => jetpack_id, blog_token => jetpack_secret
3910
	 * 4 - redirect to https://jetpack.wordpress.com/jetpack.authorize/1/
3911
	 * 5 - user logs in with WP.com account
3912
	 * 6 - redirect to this site's wp-admin/index.php?page=jetpack&action=authorize with
3913
	 *     code <-- OAuth2 style authorization code
3914
	 * 7 - ::admin_page_load() action=authorize
3915
	 * 8 - Jetpack_Client_Server::authorize()
3916
	 * 9 - Jetpack_Client_Server::get_token()
3917
	 * 10- GET https://jetpack.wordpress.com/jetpack.token/1/ with
3918
	 *     client_id, client_secret, grant_type, code, redirect_uri:action=authorize, state, scope, user_email, user_login
3919
	 * 11- which responds with
3920
	 *     access_token, token_type, scope
3921
	 * 12- Jetpack_Client_Server::authorize() stores jetpack_options: user_token => access_token.$user_id
3922
	 * 13- Jetpack::activate_default_modules()
3923
	 *     Deactivates deprecated plugins
3924
	 *     Activates all default modules
3925
	 *     Catches errors: redirects to wp-admin/index.php?page=jetpack state:error=something
3926
	 * 14- redirect to this site's wp-admin/index.php?page=jetpack with state:message=authorized
3927
	 *     Done!
3928
	 */
3929
3930
	/**
3931
	 * Handles the page load events for the Jetpack admin page
3932
	 */
3933
	function admin_page_load() {
3934
		$error = false;
3935
3936
		// Make sure we have the right body class to hook stylings for subpages off of.
3937
		add_filter( 'admin_body_class', array( __CLASS__, 'add_jetpack_pagestyles' ) );
3938
3939
		if ( ! empty( $_GET['jetpack_restate'] ) ) {
3940
			// Should only be used in intermediate redirects to preserve state across redirects
3941
			Jetpack::restate();
3942
		}
3943
3944
		if ( isset( $_GET['connect_url_redirect'] ) ) {
3945
			// User clicked in the iframe to link their accounts
3946
			if ( ! Jetpack::is_user_connected() ) {
3947
				$connect_url = $this->build_connect_url( true, false, 'iframe' );
0 ignored issues
show
'iframe' is of type string, but the function expects a boolean.

It seems like the type of the argument is not accepted by the function/method which you are calling.

In some cases, in particular if PHP’s automatic type-juggling kicks in this might be fine. In other cases, however this might be a bug.

We suggest to add an explicit type cast like in the following example:

function acceptsInteger($int) { }

$x = '123'; // string "123"

// Instead of
acceptsInteger($x);

// we recommend to use
acceptsInteger((integer) $x);
Loading history...
3948
				if ( isset( $_GET['notes_iframe'] ) )
3949
					$connect_url .= '&notes_iframe';
3950
				wp_redirect( $connect_url );
3951
				exit;
3952
			} else {
3953
				Jetpack::state( 'message', 'already_authorized' );
3954
				wp_safe_redirect( Jetpack::admin_url() );
3955
				exit;
3956
			}
3957
		}
3958
3959
3960
		if ( isset( $_GET['action'] ) ) {
3961
			switch ( $_GET['action'] ) {
3962
			case 'authorize' :
3963
				if ( Jetpack::is_active() && Jetpack::is_user_connected() ) {
3964
					Jetpack::state( 'message', 'already_authorized' );
3965
					wp_safe_redirect( Jetpack::admin_url() );
3966
					exit;
3967
				}
3968
				Jetpack::log( 'authorize' );
3969
				$client_server = new Jetpack_Client_Server;
3970
				$client_server->authorize();
3971
				exit;
3972
			case 'register' :
3973
				if ( ! current_user_can( 'jetpack_connect' ) ) {
3974
					$error = 'cheatin';
3975
					break;
3976
				}
3977
				check_admin_referer( 'jetpack-register' );
3978
				Jetpack::log( 'register' );
3979
				Jetpack::maybe_set_version_option();
3980
				$registered = Jetpack::try_registration();
3981
				if ( is_wp_error( $registered ) ) {
3982
					$error = $registered->get_error_code();
3983
					Jetpack::state( 'error_description', $registered->get_error_message() );
3984
					break;
3985
				}
3986
3987
				wp_redirect( $this->build_connect_url( true, false, 'error-desc' ) );
0 ignored issues
show
'error-desc' is of type string, but the function expects a boolean.

It seems like the type of the argument is not accepted by the function/method which you are calling.

In some cases, in particular if PHP’s automatic type-juggling kicks in this might be fine. In other cases, however this might be a bug.

We suggest to add an explicit type cast like in the following example:

function acceptsInteger($int) { }

$x = '123'; // string "123"

// Instead of
acceptsInteger($x);

// we recommend to use
acceptsInteger((integer) $x);
Loading history...
3988
				exit;
3989
			case 'activate' :
3990
				if ( ! current_user_can( 'jetpack_activate_modules' ) ) {
3991
					$error = 'cheatin';
3992
					break;
3993
				}
3994
3995
				$module = stripslashes( $_GET['module'] );
3996
				check_admin_referer( "jetpack_activate-$module" );
3997
				Jetpack::log( 'activate', $module );
3998
				Jetpack::activate_module( $module );
3999
				// The following two lines will rarely happen, as Jetpack::activate_module normally exits at the end.
4000
				wp_safe_redirect( Jetpack::admin_url( 'page=jetpack' ) );
4001
				exit;
4002
			case 'activate_default_modules' :
4003
				check_admin_referer( 'activate_default_modules' );
4004
				Jetpack::log( 'activate_default_modules' );
4005
				Jetpack::restate();
4006
				$min_version   = isset( $_GET['min_version'] ) ? $_GET['min_version'] : false;
4007
				$max_version   = isset( $_GET['max_version'] ) ? $_GET['max_version'] : false;
4008
				$other_modules = isset( $_GET['other_modules'] ) && is_array( $_GET['other_modules'] ) ? $_GET['other_modules'] : array();
4009
				Jetpack::activate_default_modules( $min_version, $max_version, $other_modules );
4010
				wp_safe_redirect( Jetpack::admin_url( 'page=jetpack' ) );
4011
				exit;
4012
			case 'disconnect' :
4013
				if ( ! current_user_can( 'jetpack_disconnect' ) ) {
4014
					$error = 'cheatin';
4015
					break;
4016
				}
4017
4018
				check_admin_referer( 'jetpack-disconnect' );
4019
				Jetpack::log( 'disconnect' );
4020
				Jetpack::disconnect();
4021
				wp_safe_redirect( Jetpack::admin_url( 'disconnected=true' ) );
4022
				exit;
4023
			case 'reconnect' :
4024
				if ( ! current_user_can( 'jetpack_reconnect' ) ) {
4025
					$error = 'cheatin';
4026
					break;
4027
				}
4028
4029
				check_admin_referer( 'jetpack-reconnect' );
4030
				Jetpack::log( 'reconnect' );
4031
				$this->disconnect();
4032
				wp_redirect( $this->build_connect_url( true, false, 'reconnect' ) );
0 ignored issues
show
'reconnect' is of type string, but the function expects a boolean.

It seems like the type of the argument is not accepted by the function/method which you are calling.

In some cases, in particular if PHP’s automatic type-juggling kicks in this might be fine. In other cases, however this might be a bug.

We suggest to add an explicit type cast like in the following example:

function acceptsInteger($int) { }

$x = '123'; // string "123"

// Instead of
acceptsInteger($x);

// we recommend to use
acceptsInteger((integer) $x);
Loading history...
4033
				exit;
4034 View Code Duplication
			case 'deactivate' :
4035
				if ( ! current_user_can( 'jetpack_deactivate_modules' ) ) {
4036
					$error = 'cheatin';
4037
					break;
4038
				}
4039
4040
				$modules = stripslashes( $_GET['module'] );
4041
				check_admin_referer( "jetpack_deactivate-$modules" );
4042
				foreach ( explode( ',', $modules ) as $module ) {
4043
					Jetpack::log( 'deactivate', $module );
4044
					Jetpack::deactivate_module( $module );
4045
					Jetpack::state( 'message', 'module_deactivated' );
4046
				}
4047
				Jetpack::state( 'module', $modules );
4048
				wp_safe_redirect( Jetpack::admin_url( 'page=jetpack' ) );
4049
				exit;
4050
			case 'unlink' :
4051
				$redirect = isset( $_GET['redirect'] ) ? $_GET['redirect'] : '';
4052
				check_admin_referer( 'jetpack-unlink' );
4053
				Jetpack::log( 'unlink' );
4054
				$this->unlink_user();
4055
				Jetpack::state( 'message', 'unlinked' );
4056
				if ( 'sub-unlink' == $redirect ) {
4057
					wp_safe_redirect( admin_url() );
4058
				} else {
4059
					wp_safe_redirect( Jetpack::admin_url( array( 'page' => $redirect ) ) );
4060
				}
4061
				exit;
4062
			default:
4063
				/**
4064
				 * Fires when a Jetpack admin page is loaded with an unrecognized parameter.
4065
				 *
4066
				 * @since 2.6.0
4067
				 *
4068
				 * @param string sanitize_key( $_GET['action'] ) Unrecognized URL parameter.
4069
				 */
4070
				do_action( 'jetpack_unrecognized_action', sanitize_key( $_GET['action'] ) );
4071
			}
4072
		}
4073
4074
		if ( ! $error = $error ? $error : Jetpack::state( 'error' ) ) {
4075
			self::activate_new_modules( true );
4076
		}
4077
4078
		switch ( $error ) {
4079
		case 'cheatin' :
4080
			$this->error = __( 'Cheatin&#8217; uh?', 'jetpack' );
4081
			break;
4082
		case 'access_denied' :
4083
			$this->error = __( 'You need to authorize the Jetpack connection between your site and WordPress.com to enable the awesome features.', 'jetpack' );
4084
			break;
4085
		case 'wrong_state' :
4086
			$this->error = __( 'Don&#8217;t cross the streams!  You need to stay logged in to your WordPress blog while you authorize Jetpack.', 'jetpack' );
4087
			break;
4088
		case 'invalid_client' :
4089
			// @todo re-register instead of deactivate/reactivate
4090
			$this->error = __( 'Return to sender.  Whoops! It looks like you got the wrong Jetpack in the mail; deactivate then reactivate the Jetpack plugin to get a new one.', 'jetpack' );
4091
			break;
4092
		case 'invalid_grant' :
4093
			$this->error = __( 'Wrong size.  Hm&#8230; it seems your Jetpack doesn&#8217;t quite fit.  Have you lost weight? Click &#8220;Connect to WordPress.com&#8221; again to get your Jetpack adjusted.', 'jetpack' );
4094
			break;
4095
		case 'site_inaccessible' :
4096
		case 'site_requires_authorization' :
4097
			$this->error = sprintf( __( 'Your website needs to be publicly accessible to use Jetpack: %s', 'jetpack' ), "<code>$error</code>" );
4098
			break;
4099
		case 'module_activation_failed' :
4100
			$module = Jetpack::state( 'module' );
4101
			if ( ! empty( $module ) && $mod = Jetpack::get_module( $module ) ) {
4102
				$this->error = sprintf( __( '%s could not be activated because it triggered a <strong>fatal error</strong>. Perhaps there is a conflict with another plugin you have installed?', 'jetpack' ), $mod['name'] );
4103
				if ( isset( $this->plugins_to_deactivate[$module] ) ) {
4104
					$this->error .= ' ' . sprintf( __( 'Do you still have the %s plugin installed?', 'jetpack' ), $this->plugins_to_deactivate[$module][1] );
4105
				}
4106
			} else {
4107
				$this->error = __( 'Module could not be activated because it triggered a <strong>fatal error</strong>. Perhaps there is a conflict with another plugin you have installed?', 'jetpack' );
4108
			}
4109
			if ( $php_errors = Jetpack::state( 'php_errors' ) ) {
4110
				$this->error .= "<br />\n";
4111
				$this->error .= $php_errors;
4112
			}
4113
			break;
4114
		case 'master_user_required' :
4115
			$module = Jetpack::state( 'module' );
4116
			$module_name = '';
4117
			if ( ! empty( $module ) && $mod = Jetpack::get_module( $module ) ) {
4118
				$module_name = $mod['name'];
4119
			}
4120
4121
			$master_user = Jetpack_Options::get_option( 'master_user' );
4122
			$master_userdata = get_userdata( $master_user ) ;
4123
			if ( $master_userdata ) {
4124
				if ( ! in_array( $module, Jetpack::get_active_modules() ) ) {
4125
					$this->error = sprintf( __( '%s was not activated.' , 'jetpack' ), $module_name );
4126
				} else {
4127
					$this->error = sprintf( __( '%s was not deactivated.' , 'jetpack' ), $module_name );
4128
				}
4129
				$this->error .= '  ' . sprintf( __( 'This module can only be altered by %s, the user who initiated the Jetpack connection on this site.' , 'jetpack' ), esc_html( $master_userdata->display_name ) );
4130
4131
			} else {
4132
				$this->error = sprintf( __( 'Only the user who initiated the Jetpack connection on this site can toggle %s, but that user no longer exists. This should not happen.', 'jetpack' ), $module_name );
4133
			}
4134
			break;
4135
		case 'not_public' :
4136
			$this->error = __( '<strong>Your Jetpack has a glitch.</strong> Connecting this site with WordPress.com is not possible. This usually means your site is not publicly accessible (localhost).', 'jetpack' );
4137
			break;
4138
		case 'wpcom_408' :
4139
		case 'wpcom_5??' :
4140
		case 'wpcom_bad_response' :
4141
		case 'wpcom_outage' :
4142
			$this->error = __( 'WordPress.com is currently having problems and is unable to fuel up your Jetpack.  Please try again later.', 'jetpack' );
4143
			break;
4144
		case 'register_http_request_failed' :
4145
		case 'token_http_request_failed' :
4146
			$this->error = sprintf( __( 'Jetpack could not contact WordPress.com: %s.  This usually means something is incorrectly configured on your web host.', 'jetpack' ), "<code>$error</code>" );
4147
			break;
4148
		default :
4149
			if ( empty( $error ) ) {
4150
				break;
4151
			}
4152
			$error = trim( substr( strip_tags( $error ), 0, 20 ) );
4153
			// no break: fall through
4154
		case 'no_role' :
4155
		case 'no_cap' :
4156
		case 'no_code' :
4157
		case 'no_state' :
4158
		case 'invalid_state' :
4159
		case 'invalid_request' :
4160
		case 'invalid_scope' :
4161
		case 'unsupported_response_type' :
4162
		case 'invalid_token' :
4163
		case 'no_token' :
4164
		case 'missing_secrets' :
4165
		case 'home_missing' :
4166
		case 'siteurl_missing' :
4167
		case 'gmt_offset_missing' :
4168
		case 'site_name_missing' :
4169
		case 'secret_1_missing' :
4170
		case 'secret_2_missing' :
4171
		case 'site_lang_missing' :
4172
		case 'home_malformed' :
4173
		case 'siteurl_malformed' :
4174
		case 'gmt_offset_malformed' :
4175
		case 'timezone_string_malformed' :
4176
		case 'site_name_malformed' :
4177
		case 'secret_1_malformed' :
4178
		case 'secret_2_malformed' :
4179
		case 'site_lang_malformed' :
4180
		case 'secrets_mismatch' :
4181
		case 'verify_secret_1_missing' :
4182
		case 'verify_secret_1_malformed' :
4183
		case 'verify_secrets_missing' :
4184
		case 'verify_secrets_mismatch' :
4185
			$error = esc_html( $error );
4186
			$this->error = sprintf( __( '<strong>Your Jetpack has a glitch.</strong>  We&#8217;re sorry for the inconvenience. Please try again later, if the issue continues please contact support with this message: %s', 'jetpack' ), "<code>$error</code>" );
4187
			if ( ! Jetpack::is_active() ) {
4188
				$this->error .= '<br />';
4189
				$this->error .= sprintf( __( 'Try connecting again.', 'jetpack' ) );
4190
			}
4191
			break;
4192
		}
4193
4194
		$message_code = Jetpack::state( 'message' );
4195
4196
		$active_state = Jetpack::state( 'activated_modules' );
4197
		if ( ! empty( $active_state ) ) {
4198
			$available    = Jetpack::get_available_modules();
4199
			$active_state = explode( ',', $active_state );
4200
			$active_state = array_intersect( $active_state, $available );
4201
			if ( count( $active_state ) ) {
4202
				foreach ( $active_state as $mod ) {
4203
					$this->stat( 'module-activated', $mod );
4204
				}
4205
			} else {
4206
				$active_state = false;
4207
			}
4208
		}
4209
		if( Jetpack::state( 'optin-manage' ) ) {
4210
			$activated_manage = $message_code;
4211
			$message_code = 'jetpack-manage';
4212
4213
		}
4214
		switch ( $message_code ) {
4215
		case 'modules_activated' :
4216
			$this->message = sprintf(
4217
				__( 'Welcome to <strong>Jetpack %s</strong>!', 'jetpack' ),
4218
				JETPACK__VERSION
4219
			);
4220
4221
			if ( $active_state ) {
4222
				$titles = array();
4223 View Code Duplication
				foreach ( $active_state as $mod ) {
4224
					if ( $mod_headers = Jetpack::get_module( $mod ) ) {
4225
						$titles[] = '<strong>' . preg_replace( '/\s+(?![^<>]++>)/', '&nbsp;', $mod_headers['name'] ) . '</strong>';
4226
					}
4227
				}
4228
				if ( $titles ) {
4229
					$this->message .= '<br /><br />' . wp_sprintf( __( 'The following new modules have been activated: %l.', 'jetpack' ), $titles );
4230
				}
4231
			}
4232
4233
			if ( $reactive_state = Jetpack::state( 'reactivated_modules' ) ) {
4234
				$titles = array();
4235 View Code Duplication
				foreach ( explode( ',',  $reactive_state ) as $mod ) {
4236
					if ( $mod_headers = Jetpack::get_module( $mod ) ) {
4237
						$titles[] = '<strong>' . preg_replace( '/\s+(?![^<>]++>)/', '&nbsp;', $mod_headers['name'] ) . '</strong>';
4238
					}
4239
				}
4240
				if ( $titles ) {
4241
					$this->message .= '<br /><br />' . wp_sprintf( __( 'The following modules have been updated: %l.', 'jetpack' ), $titles );
4242
				}
4243
			}
4244
4245
			$this->message .= Jetpack::jetpack_comment_notice();
4246
			break;
4247
		case 'jetpack-manage':
4248
			$this->message = '<strong>' . sprintf( __( 'You are all set! Your site can now be managed from <a href="%s" target="_blank">wordpress.com/sites</a>.', 'jetpack' ), 'https://wordpress.com/sites' ) . '</strong>';
4249
			if ( $activated_manage ) {
4250
				$this->message .= '<br /><strong>' . __( 'Manage has been activated for you!', 'jetpack'  ) . '</strong>';
4251
			}
4252
			break;
4253
		case 'module_activated' :
4254
			if ( $module = Jetpack::get_module( Jetpack::state( 'module' ) ) ) {
4255
				$this->message = sprintf( __( '<strong>%s Activated!</strong> You can deactivate at any time by clicking the Deactivate link next to each module.', 'jetpack' ), $module['name'] );
4256
				$this->stat( 'module-activated', Jetpack::state( 'module' ) );
4257
			}
4258
			break;
4259
4260
		case 'module_deactivated' :
4261
			$modules = Jetpack::state( 'module' );
4262
			if ( ! $modules ) {
4263
				break;
4264
			}
4265
4266
			$module_names = array();
4267
			foreach ( explode( ',', $modules ) as $module_slug ) {
4268
				$module = Jetpack::get_module( $module_slug );
4269
				if ( $module ) {
4270
					$module_names[] = $module['name'];
4271
				}
4272
4273
				$this->stat( 'module-deactivated', $module_slug );
4274
			}
4275
4276
			if ( ! $module_names ) {
4277
				break;
4278
			}
4279
4280
			$this->message = wp_sprintf(
4281
				_nx(
4282
					'<strong>%l Deactivated!</strong> You can activate it again at any time using the activate link next to each module.',
4283
					'<strong>%l Deactivated!</strong> You can activate them again at any time using the activate links next to each module.',
4284
					count( $module_names ),
4285
					'%l = list of Jetpack module/feature names',
4286
					'jetpack'
4287
				),
4288
				$module_names
4289
			);
4290
			break;
4291
4292
		case 'module_configured' :
4293
			$this->message = __( '<strong>Module settings were saved.</strong> ', 'jetpack' );
4294
			break;
4295
4296
		case 'already_authorized' :
4297
			$this->message = __( '<strong>Your Jetpack is already connected.</strong> ', 'jetpack' );
4298
			break;
4299
4300
		case 'authorized' :
4301
			$this->message  = __( '<strong>You&#8217;re fueled up and ready to go, Jetpack is now active.</strong> ', 'jetpack' );
4302
			$this->message .= Jetpack::jetpack_comment_notice();
4303
			break;
4304
4305
		case 'linked' :
4306
			$this->message  = __( '<strong>You&#8217;re fueled up and ready to go.</strong> ', 'jetpack' );
4307
			$this->message .= Jetpack::jetpack_comment_notice();
4308
			break;
4309
4310
		case 'unlinked' :
4311
			$user = wp_get_current_user();
4312
			$this->message = sprintf( __( '<strong>You have unlinked your account (%s) from WordPress.com.</strong>', 'jetpack' ), $user->user_login );
4313
			break;
4314
4315
		case 'switch_master' :
4316
			global $current_user;
4317
			$is_master_user = $current_user->ID == Jetpack_Options::get_option( 'master_user' );
4318
			$master_userdata = get_userdata( Jetpack_Options::get_option( 'master_user' ) );
4319
			if ( $is_master_user ) {
4320
				$this->message = __( 'You have successfully set yourself as Jetpack’s primary user.', 'jetpack' );
4321
			} else {
4322
				$this->message = sprintf( _x( 'You have successfully set %s as Jetpack’s primary user.', '%s is a username', 'jetpack' ), $master_userdata->user_login );
4323
			}
4324
			break;
4325
		}
4326
4327
		$deactivated_plugins = Jetpack::state( 'deactivated_plugins' );
4328
4329
		if ( ! empty( $deactivated_plugins ) ) {
4330
			$deactivated_plugins = explode( ',', $deactivated_plugins );
4331
			$deactivated_titles  = array();
4332
			foreach ( $deactivated_plugins as $deactivated_plugin ) {
4333
				if ( ! isset( $this->plugins_to_deactivate[$deactivated_plugin] ) ) {
4334
					continue;
4335
				}
4336
4337
				$deactivated_titles[] = '<strong>' . str_replace( ' ', '&nbsp;', $this->plugins_to_deactivate[$deactivated_plugin][1] ) . '</strong>';
4338
			}
4339
4340
			if ( $deactivated_titles ) {
4341
				if ( $this->message ) {
4342
					$this->message .= "<br /><br />\n";
4343
				}
4344
4345
				$this->message .= wp_sprintf(
4346
					_n(
4347
						'Jetpack contains the most recent version of the old %l plugin.',
4348
						'Jetpack contains the most recent versions of the old %l plugins.',
4349
						count( $deactivated_titles ),
4350
						'jetpack'
4351
					),
4352
					$deactivated_titles
4353
				);
4354
4355
				$this->message .= "<br />\n";
4356
4357
				$this->message .= _n(
4358
					'The old version has been deactivated and can be removed from your site.',
4359
					'The old versions have been deactivated and can be removed from your site.',
4360
					count( $deactivated_titles ),
4361
					'jetpack'
4362
				);
4363
			}
4364
		}
4365
4366
		$this->privacy_checks = Jetpack::state( 'privacy_checks' );
4367
4368
		if ( $this->message || $this->error || $this->privacy_checks || $this->can_display_jetpack_manage_notice() ) {
4369
			add_action( 'jetpack_notices', array( $this, 'admin_notices' ) );
4370
		}
4371
4372 View Code Duplication
		if ( isset( $_GET['configure'] ) && Jetpack::is_module( $_GET['configure'] ) && current_user_can( 'manage_options' ) ) {
4373
			/**
4374
			 * Fires when a module configuration page is loaded.
4375
			 * The dynamic part of the hook is the configure parameter from the URL.
4376
			 *
4377
			 * @since 1.1.0
4378
			 */
4379
			do_action( 'jetpack_module_configuration_load_' . $_GET['configure'] );
4380
		}
4381
4382
		add_filter( 'jetpack_short_module_description', 'wptexturize' );
4383
	}
4384
4385
	function admin_notices() {
4386
4387
		if ( $this->error ) {
4388
?>
4389
<div id="message" class="jetpack-message jetpack-err">
4390
	<div class="squeezer">
4391
		<h2><?php echo wp_kses( $this->error, array( 'code' => true, 'strong' => true, 'br' => true, 'b' => true ) ); ?></h2>
4392
<?php	if ( $desc = Jetpack::state( 'error_description' ) ) : ?>
4393
		<p><?php echo esc_html( stripslashes( $desc ) ); ?></p>
4394
<?php	endif; ?>
4395
	</div>
4396
</div>
4397
<?php
4398
		}
4399
4400
		if ( $this->message ) {
4401
?>
4402
<div id="message" class="jetpack-message">
4403
	<div class="squeezer">
4404
		<h2><?php echo wp_kses( $this->message, array( 'strong' => array(), 'a' => array( 'href' => true ), 'br' => true ) ); ?></h2>
4405
	</div>
4406
</div>
4407
<?php
4408
		}
4409
4410
		if ( $this->privacy_checks ) :
4411
			$module_names = $module_slugs = array();
4412
4413
			$privacy_checks = explode( ',', $this->privacy_checks );
4414
			$privacy_checks = array_filter( $privacy_checks, array( 'Jetpack', 'is_module' ) );
4415
			foreach ( $privacy_checks as $module_slug ) {
4416
				$module = Jetpack::get_module( $module_slug );
4417
				if ( ! $module ) {
4418
					continue;
4419
				}
4420
4421
				$module_slugs[] = $module_slug;
4422
				$module_names[] = "<strong>{$module['name']}</strong>";
4423
			}
4424
4425
			$module_slugs = join( ',', $module_slugs );
4426
?>
4427
<div id="message" class="jetpack-message jetpack-err">
4428
	<div class="squeezer">
4429
		<h2><strong><?php esc_html_e( 'Is this site private?', 'jetpack' ); ?></strong></h2><br />
4430
		<p><?php
4431
			echo wp_kses(
4432
				wptexturize(
4433
					wp_sprintf(
4434
						_nx(
4435
							"Like your site's RSS feeds, %l allows access to your posts and other content to third parties.",
4436
							"Like your site's RSS feeds, %l allow access to your posts and other content to third parties.",
4437
							count( $privacy_checks ),
4438
							'%l = list of Jetpack module/feature names',
4439
							'jetpack'
4440
						),
4441
						$module_names
4442
					)
4443
				),
4444
				array( 'strong' => true )
4445
			);
4446
4447
			echo "\n<br />\n";
4448
4449
			echo wp_kses(
4450
				sprintf(
4451
					_nx(
4452
						'If your site is not publicly accessible, consider <a href="%1$s" title="%2$s">deactivating this feature</a>.',
4453
						'If your site is not publicly accessible, consider <a href="%1$s" title="%2$s">deactivating these features</a>.',
4454
						count( $privacy_checks ),
4455
						'%1$s = deactivation URL, %2$s = "Deactivate {list of Jetpack module/feature names}',
4456
						'jetpack'
4457
					),
4458
					wp_nonce_url(
4459
						Jetpack::admin_url(
4460
							array(
4461
								'page'   => 'jetpack',
4462
								'action' => 'deactivate',
4463
								'module' => urlencode( $module_slugs ),
4464
							)
4465
						),
4466
						"jetpack_deactivate-$module_slugs"
4467
					),
4468
					esc_attr( wp_kses( wp_sprintf( _x( 'Deactivate %l', '%l = list of Jetpack module/feature names', 'jetpack' ), $module_names ), array() ) )
4469
				),
4470
				array( 'a' => array( 'href' => true, 'title' => true ) )
4471
			);
4472
		?></p>
4473
	</div>
4474
</div>
4475
<?php endif;
4476
	// only display the notice if the other stuff is not there
4477
	if( $this->can_display_jetpack_manage_notice() && !  $this->error && ! $this->message && ! $this->privacy_checks ) {
4478
		if( isset( $_GET['page'] ) && 'jetpack' != $_GET['page'] )
4479
			$this->opt_in_jetpack_manage_notice();
4480
		}
4481
	}
4482
4483
	/**
4484
	 * Record a stat for later output.  This will only currently output in the admin_footer.
4485
	 */
4486
	function stat( $group, $detail ) {
4487
		if ( ! isset( $this->stats[ $group ] ) )
4488
			$this->stats[ $group ] = array();
4489
		$this->stats[ $group ][] = $detail;
4490
	}
4491
4492
	/**
4493
	 * Load stats pixels. $group is auto-prefixed with "x_jetpack-"
4494
	 */
4495
	function do_stats( $method = '' ) {
4496
		if ( is_array( $this->stats ) && count( $this->stats ) ) {
4497
			foreach ( $this->stats as $group => $stats ) {
4498
				if ( is_array( $stats ) && count( $stats ) ) {
4499
					$args = array( "x_jetpack-{$group}" => implode( ',', $stats ) );
4500
					if ( 'server_side' === $method ) {
4501
						self::do_server_side_stat( $args );
4502
					} else {
4503
						echo '<img src="' . esc_url( self::build_stats_url( $args ) ) . '" width="1" height="1" style="display:none;" />';
4504
					}
4505
				}
4506
				unset( $this->stats[ $group ] );
4507
			}
4508
		}
4509
	}
4510
4511
	/**
4512
	 * Runs stats code for a one-off, server-side.
4513
	 *
4514
	 * @param $args array|string The arguments to append to the URL. Should include `x_jetpack-{$group}={$stats}` or whatever we want to store.
4515
	 *
4516
	 * @return bool If it worked.
4517
	 */
4518
	static function do_server_side_stat( $args ) {
4519
		$response = wp_remote_get( esc_url_raw( self::build_stats_url( $args ) ) );
4520
		if ( is_wp_error( $response ) )
4521
			return false;
4522
4523
		if ( 200 !== wp_remote_retrieve_response_code( $response ) )
4524
			return false;
4525
4526
		return true;
4527
	}
4528
4529
	/**
4530
	 * Builds the stats url.
4531
	 *
4532
	 * @param $args array|string The arguments to append to the URL.
4533
	 *
4534
	 * @return string The URL to be pinged.
4535
	 */
4536
	static function build_stats_url( $args ) {
4537
		$defaults = array(
4538
			'v'    => 'wpcom2',
4539
			'rand' => md5( mt_rand( 0, 999 ) . time() ),
4540
		);
4541
		$args     = wp_parse_args( $args, $defaults );
4542
		/**
4543
		 * Filter the URL used as the Stats tracking pixel.
4544
		 *
4545
		 * @since 2.3.2
4546
		 *
4547
		 * @param string $url Base URL used as the Stats tracking pixel.
4548
		 */
4549
		$base_url = apply_filters(
4550
			'jetpack_stats_base_url',
4551
			set_url_scheme( 'http://pixel.wp.com/g.gif' )
4552
		);
4553
		$url      = add_query_arg( $args, $base_url );
4554
		return $url;
4555
	}
4556
4557
	function translate_current_user_to_role() {
4558
		foreach ( $this->capability_translations as $role => $cap ) {
4559
			if ( current_user_can( $role ) || current_user_can( $cap ) ) {
4560
				return $role;
4561
			}
4562
		}
4563
4564
		return false;
4565
	}
4566
4567
	function translate_role_to_cap( $role ) {
4568
		if ( ! isset( $this->capability_translations[$role] ) ) {
4569
			return false;
4570
		}
4571
4572
		return $this->capability_translations[$role];
4573
	}
4574
4575
	function sign_role( $role ) {
4576
		if ( ! $user_id = (int) get_current_user_id() ) {
4577
			return false;
4578
		}
4579
4580
		$token = Jetpack_Data::get_access_token();
4581
		if ( ! $token || is_wp_error( $token ) ) {
4582
			return false;
4583
		}
4584
4585
		return $role . ':' . hash_hmac( 'md5', "{$role}|{$user_id}", $token->secret );
4586
	}
4587
4588
	function build_connect_url( $raw = false, $redirect = false, $from = false ) {
4589
		if ( ! Jetpack_Options::get_option( 'blog_token' ) || ! Jetpack_Options::get_option( 'id' ) ) {
4590
			$url = Jetpack::nonce_url_no_esc( Jetpack::admin_url( 'action=register' ), 'jetpack-register' );
4591
			if( is_network_admin() ) {
4592
			    $url = add_query_arg( 'is_multisite', network_admin_url(
4593
			    'admin.php?page=jetpack-settings' ), $url );
4594
			}
4595
		} else {
4596
			$role = $this->translate_current_user_to_role();
4597
			$signed_role = $this->sign_role( $role );
4598
4599
			$user = wp_get_current_user();
4600
4601
			$redirect = $redirect ? esc_url_raw( $redirect ) : '';
4602
4603
			if( isset( $_REQUEST['is_multisite'] ) ) {
4604
				$redirect = Jetpack_Network::init()->get_url( 'network_admin_page' );
4605
			}
4606
4607
			$args = urlencode_deep(
4608
				array(
4609
					'response_type' => 'code',
4610
					'client_id'     => Jetpack_Options::get_option( 'id' ),
4611
					'redirect_uri'  => add_query_arg(
4612
						array(
4613
							'action'   => 'authorize',
4614
							'_wpnonce' => wp_create_nonce( "jetpack-authorize_{$role}_{$redirect}" ),
4615
							'redirect' => $redirect ? urlencode( $redirect ) : false,
4616
						),
4617
						menu_page_url( 'jetpack', false )
4618
					),
4619
					'state'         => $user->ID,
4620
					'scope'         => $signed_role,
4621
					'user_email'    => $user->user_email,
4622
					'user_login'    => $user->user_login,
4623
					'is_active'     => Jetpack::is_active(),
4624
					'jp_version'    => JETPACK__VERSION,
4625
				)
4626
			);
4627
4628
			$url = add_query_arg( $args, Jetpack::api_url( 'authorize' ) );
4629
		}
4630
4631
		if ( $from ) {
4632
			$url = add_query_arg( 'from', $from, $url );
4633
		}
4634
		return $raw ? $url : esc_url( $url );
4635
	}
4636
4637
	function build_reconnect_url( $raw = false ) {
4638
		$url = wp_nonce_url( Jetpack::admin_url( 'action=reconnect' ), 'jetpack-reconnect' );
4639
		return $raw ? $url : esc_url( $url );
4640
	}
4641
4642
	public static function admin_url( $args = null ) {
4643
		$args = wp_parse_args( $args, array( 'page' => 'jetpack' ) );
4644
		$url = add_query_arg( $args, admin_url( 'admin.php' ) );
4645
		return $url;
4646
	}
4647
4648
	public static function nonce_url_no_esc( $actionurl, $action = -1, $name = '_wpnonce' ) {
4649
		$actionurl = str_replace( '&amp;', '&', $actionurl );
4650
		return add_query_arg( $name, wp_create_nonce( $action ), $actionurl );
4651
	}
4652
4653
	function dismiss_jetpack_notice() {
4654
4655
		if ( ! isset( $_GET['jetpack-notice'] ) ) {
4656
			return;
4657
		}
4658
4659
		switch( $_GET['jetpack-notice'] ) {
4660
			case 'dismiss':
4661
				if ( check_admin_referer( 'jetpack-deactivate' ) && ! is_plugin_active_for_network( plugin_basename( JETPACK__PLUGIN_DIR . 'jetpack.php' ) ) ) {
4662
4663
					require_once ABSPATH . 'wp-admin/includes/plugin.php';
4664
					deactivate_plugins( JETPACK__PLUGIN_DIR . 'jetpack.php', false, false );
4665
					wp_safe_redirect( admin_url() . 'plugins.php?deactivate=true&plugin_status=all&paged=1&s=' );
4666
				}
4667
				break;
4668 View Code Duplication
			case 'jetpack-manage-opt-out':
4669
4670
				if ( check_admin_referer( 'jetpack_manage_banner_opt_out' ) ) {
4671
					// Don't show the banner again
4672
4673
					Jetpack_Options::update_option( 'dismissed_manage_banner', true );
4674
					// redirect back to the page that had the notice
4675
					if ( wp_get_referer() ) {
4676
						wp_safe_redirect( wp_get_referer() );
4677
					} else {
4678
						// Take me to Jetpack
4679
						wp_safe_redirect( admin_url( 'admin.php?page=jetpack' ) );
4680
					}
4681
				}
4682
				break;
4683 View Code Duplication
			case 'jetpack-protect-multisite-opt-out':
4684
4685
				if ( check_admin_referer( 'jetpack_protect_multisite_banner_opt_out' ) ) {
4686
					// Don't show the banner again
4687
4688
					update_site_option( 'jetpack_dismissed_protect_multisite_banner', true );
4689
					// redirect back to the page that had the notice
4690
					if ( wp_get_referer() ) {
4691
						wp_safe_redirect( wp_get_referer() );
4692
					} else {
4693
						// Take me to Jetpack
4694
						wp_safe_redirect( admin_url( 'admin.php?page=jetpack' ) );
4695
					}
4696
				}
4697
				break;
4698
			case 'jetpack-manage-opt-in':
4699
				if ( check_admin_referer( 'jetpack_manage_banner_opt_in' ) ) {
4700
					// This makes sure that we are redirect to jetpack home so that we can see the Success Message.
4701
4702
					$redirection_url = Jetpack::admin_url();
4703
					remove_action( 'jetpack_pre_activate_module',   array( Jetpack_Admin::init(), 'fix_redirect' ) );
4704
4705
					// Don't redirect form the Jetpack Setting Page
4706
					$referer_parsed = parse_url ( wp_get_referer() );
4707
					// check that we do have a wp_get_referer and the query paramater is set orderwise go to the Jetpack Home
4708
					if ( isset( $referer_parsed['query'] ) && false !== strpos( $referer_parsed['query'], 'page=jetpack_modules' ) ) {
4709
						// Take the user to Jetpack home except when on the setting page
4710
						$redirection_url = wp_get_referer();
4711
						add_action( 'jetpack_pre_activate_module',   array( Jetpack_Admin::init(), 'fix_redirect' ) );
4712
					}
4713
					// Also update the JSON API FULL MANAGEMENT Option
4714
					Jetpack::activate_module( 'manage', false, false );
4715
4716
					// Special Message when option in.
4717
					Jetpack::state( 'optin-manage', 'true' );
4718
					// Activate the Module if not activated already
4719
4720
					// Redirect properly
4721
					wp_safe_redirect( $redirection_url );
4722
4723
				}
4724
				break;
4725
		}
4726
	}
4727
4728
	function debugger_page() {
4729
		nocache_headers();
4730
		if ( ! current_user_can( 'manage_options' ) ) {
4731
			die( '-1' );
4732
		}
4733
		Jetpack_Debugger::jetpack_debug_display_handler();
4734
		exit;
4735
	}
4736
4737
	public static function admin_screen_configure_module( $module_id ) {
4738
4739
		// User that doesn't have 'jetpack_configure_modules' will never end up here since Jetpack Landing Page woun't let them.
4740
		if ( ! in_array( $module_id, Jetpack::get_active_modules() ) && current_user_can( 'manage_options' ) ) {
4741
			if ( has_action( 'display_activate_module_setting_' . $module_id ) ) {
4742
				/**
4743
				 * Fires to diplay a custom module activation screen.
4744
				 *
4745
				 * To add a module actionation screen use Jetpack::module_configuration_activation_screen method.
4746
				 * Example: Jetpack::module_configuration_activation_screen( 'manage', array( $this, 'manage_activate_screen' ) );
4747
				 *
4748
				 * @module manage
4749
				 *
4750
				 * @since 3.8.0
4751
				 *
4752
				 * @param int $module_id Module ID.
4753
				 */
4754
				do_action( 'display_activate_module_setting_' . $module_id );
4755
			} else {
4756
				self::display_activate_module_link( $module_id );
4757
			}
4758
4759
			return false;
4760
		} ?>
4761
4762
		<div id="jp-settings-screen" style="position: relative">
4763
			<h3>
4764
			<?php
4765
				$module = Jetpack::get_module( $module_id );
4766
				echo '<a href="' . Jetpack::admin_url( 'page=jetpack_modules' ) . '">' . __( 'Jetpack by WordPress.com', 'jetpack' ) . '</a> &rarr; ';
4767
				printf( __( 'Configure %s', 'jetpack' ), $module['name'] );
4768
			?>
4769
			</h3>
4770
			<?php
4771
				/**
4772
				 * Fires within the displayed message when a feature configuation is updated.
4773
				 *
4774
				 * @since 3.4.0
4775
				 *
4776
				 * @param int $module_id Module ID.
4777
				 */
4778
				do_action( 'jetpack_notices_update_settings', $module_id );
4779
				/**
4780
				 * Fires when a feature configuation screen is loaded.
4781
				 * The dynamic part of the hook, $module_id, is the module ID.
4782
				 *
4783
				 * @since 1.1.0
4784
				 */
4785
				do_action( 'jetpack_module_configuration_screen_' . $module_id );
4786
			?>
4787
		</div><?php
4788
	}
4789
4790
	/**
4791
	 * Display link to activate the module to see the settings screen.
4792
	 * @param  string $module_id
4793
	 * @return null
4794
	 */
4795
	public static function display_activate_module_link( $module_id ) {
4796
4797
		$info =  Jetpack::get_module( $module_id );
4798
		$extra = '';
4799
		$activate_url = wp_nonce_url(
4800
				Jetpack::admin_url(
4801
					array(
4802
						'page'   => 'jetpack',
4803
						'action' => 'activate',
4804
						'module' => $module_id,
4805
					)
4806
				),
4807
				"jetpack_activate-$module_id"
4808
			);
4809
4810
		?>
4811
4812
		<div class="wrap configure-module">
4813
			<div id="jp-settings-screen">
4814
				<?php
4815
				if ( $module_id == 'json-api' ) {
4816
4817
					$info['name'] = esc_html__( 'Activate Site Management and JSON API', 'jetpack' );
4818
4819
					$activate_url = Jetpack::init()->opt_in_jetpack_manage_url();
4820
4821
					$info['description'] = sprintf( __( 'Manage your multiple Jetpack sites from our centralized dashboard at wordpress.com/sites. <a href="%s" target="_blank">Learn more</a>.', 'jetpack' ), 'http://jetpack.com/support/site-management' );
4822
4823
					// $extra = __( 'To use Site Management, you need to first activate JSON API to allow remote management of your site. ', 'jetpack' );
4824
				} ?>
4825
4826
				<h3><?php echo esc_html( $info['name'] ); ?></h3>
4827
				<div class="narrow">
4828
					<p><?php echo  $info['description']; ?></p>
4829
					<?php if( $extra ) { ?>
4830
					<p><?php echo esc_html( $extra ); ?></p>
4831
					<?php } ?>
4832
					<p>
4833
						<?php
4834
						if( wp_get_referer() ) {
4835
							printf( __( '<a class="button-primary" href="%s">Activate Now</a> or <a href="%s" >return to previous page</a>.', 'jetpack' ) , $activate_url, wp_get_referer() );
4836
						} else {
4837
							printf( __( '<a class="button-primary" href="%s">Activate Now</a>', 'jetpack' ) , $activate_url  );
4838
						} ?>
4839
					</p>
4840
				</div>
4841
4842
			</div>
4843
		</div>
4844
4845
		<?php
4846
	}
4847
4848
	public static function sort_modules( $a, $b ) {
4849
		if ( $a['sort'] == $b['sort'] )
4850
			return 0;
4851
4852
		return ( $a['sort'] < $b['sort'] ) ? -1 : 1;
4853
	}
4854
4855 View Code Duplication
	function sync_reindex_trigger() {
4856
		if ( $this->current_user_is_connection_owner() && current_user_can( 'manage_options' ) ) {
4857
			echo json_encode( $this->sync->reindex_trigger() );
4858
		} else {
4859
			echo '{"status":"ERROR"}';
4860
		}
4861
		exit;
4862
	}
4863
4864 View Code Duplication
	function sync_reindex_status(){
4865
		if ( $this->current_user_is_connection_owner() && current_user_can( 'manage_options' ) ) {
4866
			echo json_encode( $this->sync->reindex_status() );
4867
		} else {
4868
			echo '{"status":"ERROR"}';
4869
		}
4870
		exit;
4871
	}
4872
4873
/* Client API */
4874
4875
	/**
4876
	 * Returns the requested Jetpack API URL
4877
	 *
4878
	 * @return string
4879
	 */
4880
	public static function api_url( $relative_url ) {
4881
		return trailingslashit( JETPACK__API_BASE . $relative_url  ) . JETPACK__API_VERSION . '/';
4882
	}
4883
4884
	/**
4885
	 * Some hosts disable the OpenSSL extension and so cannot make outgoing HTTPS requsets
4886
	 */
4887
	public static function fix_url_for_bad_hosts( $url ) {
4888
		if ( 0 !== strpos( $url, 'https://' ) ) {
4889
			return $url;
4890
		}
4891
4892
		switch ( JETPACK_CLIENT__HTTPS ) {
4893
			case 'ALWAYS' :
4894
				return $url;
4895
			case 'NEVER' :
4896
				return set_url_scheme( $url, 'http' );
4897
			// default : case 'AUTO' :
4898
		}
4899
4900
		// Yay! Your host is good!
4901
		if ( self::permit_ssl() && wp_http_supports( array( 'ssl' => true ) ) ) {
4902
			return $url;
4903
		}
4904
4905
		// Boo! Your host is bad and makes Jetpack cry!
4906
		return set_url_scheme( $url, 'http' );
4907
	}
4908
4909
	/**
4910
	 * Checks to see if the URL is using SSL to connect with Jetpack
4911
	 *
4912
	 * @since 2.3.3
4913
	 * @return boolean
4914
	 */
4915
	public static function permit_ssl( $force_recheck = false ) {
4916
		// Do some fancy tests to see if ssl is being supported
4917
		if ( $force_recheck || false === ( $ssl = get_transient( 'jetpack_https_test' ) ) ) {
4918
			if ( 'https' !== substr( JETPACK__API_BASE, 0, 5 ) ) {
4919
				$ssl = 0;
4920
			} else {
4921
				switch ( JETPACK_CLIENT__HTTPS ) {
4922
					case 'NEVER':
4923
						$ssl = 0;
4924
						break;
4925
					case 'ALWAYS':
4926
					case 'AUTO':
4927
					default:
4928
						$ssl = 1;
4929
						break;
4930
				}
4931
4932
				// If it's not 'NEVER', test to see
4933
				if ( $ssl ) {
4934
					$response = wp_remote_get( JETPACK__API_BASE . 'test/1/' );
4935
					if ( is_wp_error( $response ) || ( 'OK' !== wp_remote_retrieve_body( $response ) ) ) {
4936
						$ssl = 0;
4937
					}
4938
				}
4939
			}
4940
			set_transient( 'jetpack_https_test', $ssl, DAY_IN_SECONDS );
4941
		}
4942
4943
		return (bool) $ssl;
4944
	}
4945
4946
	/*
4947
	 * Displays an admin_notice, alerting the user to their JETPACK_CLIENT__HTTPS constant being 'ALWAYS' but SSL isn't working.
4948
	 */
4949
	public function alert_required_ssl_fail() {
4950
		if ( ! current_user_can( 'manage_options' ) )
4951
			return;
4952
		?>
4953
4954
		<div id="message" class="error jetpack-message jp-identity-crisis">
4955
			<div class="jp-banner__content">
4956
				<h2><?php _e( 'Something is being cranky!', 'jetpack' ); ?></h2>
4957
				<p><?php _e( 'Your site is configured to only permit SSL connections to Jetpack, but SSL connections don\'t seem to be functional!', 'jetpack' ); ?></p>
4958
			</div>
4959
		</div>
4960
4961
		<?php
4962
	}
4963
4964
	/**
4965
	 * Returns the Jetpack XML-RPC API
4966
	 *
4967
	 * @return string
4968
	 */
4969
	public static function xmlrpc_api_url() {
4970
		$base = preg_replace( '#(https?://[^?/]+)(/?.*)?$#', '\\1', JETPACK__API_BASE );
4971
		return untrailingslashit( $base ) . '/xmlrpc.php';
4972
	}
4973
4974
	/**
4975
	 * Creates two secret tokens and the end of life timestamp for them.
4976
	 *
4977
	 * Note these tokens are unique per call, NOT static per site for connecting.
4978
	 *
4979
	 * @since 2.6
4980
	 * @return array
4981
	 */
4982
	public function generate_secrets() {
4983
	    $secrets = array(
4984
		wp_generate_password( 32, false ), // secret_1
4985
		wp_generate_password( 32, false ), // secret_2
4986
		( time() + 600 ), // eol ( End of Life )
4987
	    );
4988
4989
	    return $secrets;
4990
	}
4991
4992
	/**
4993
	 * Builds the timeout limit for queries talking with the wpcom servers.
4994
	 *
4995
	 * Based on local php max_execution_time in php.ini
4996
	 *
4997
	 * @since 2.6
4998
	 * @return int
4999
	 **/
5000
	public function get_remote_query_timeout_limit() {
5001
	    $timeout = (int) ini_get( 'max_execution_time' );
5002
	    if ( ! $timeout ) // Ensure exec time set in php.ini
5003
		$timeout = 30;
5004
	    return intval( $timeout / 2 );
5005
	}
5006
5007
5008
	/**
5009
	 * Takes the response from the Jetpack register new site endpoint and
5010
	 * verifies it worked properly.
5011
	 *
5012
	 * @since 2.6
5013
	 * @return true or Jetpack_Error
5014
	 **/
5015
	public function validate_remote_register_response( $response ) {
5016
	    	if ( is_wp_error( $response ) ) {
5017
			return new Jetpack_Error( 'register_http_request_failed', $response->get_error_message() );
5018
		}
5019
5020
		$code   = wp_remote_retrieve_response_code( $response );
5021
		$entity = wp_remote_retrieve_body( $response );
5022
		if ( $entity )
5023
			$json = json_decode( $entity );
5024
		else
5025
			$json = false;
5026
5027
		$code_type = intval( $code / 100 );
5028
		if ( 5 == $code_type ) {
5029
			return new Jetpack_Error( 'wpcom_5??', sprintf( __( 'Error Details: %s', 'jetpack' ), $code ), $code );
5030
		} elseif ( 408 == $code ) {
5031
			return new Jetpack_Error( 'wpcom_408', sprintf( __( 'Error Details: %s', 'jetpack' ), $code ), $code );
5032
		} elseif ( ! empty( $json->error ) ) {
5033
			$error_description = isset( $json->error_description ) ? sprintf( __( 'Error Details: %s', 'jetpack' ), (string) $json->error_description ) : '';
5034
			return new Jetpack_Error( (string) $json->error, $error_description, $code );
5035
		} elseif ( 200 != $code ) {
5036
			return new Jetpack_Error( 'wpcom_bad_response', sprintf( __( 'Error Details: %s', 'jetpack' ), $code ), $code );
5037
		}
5038
5039
		// Jetpack ID error block
5040
		if ( empty( $json->jetpack_id ) ) {
5041
			return new Jetpack_Error( 'jetpack_id', sprintf( __( 'Error Details: Jetpack ID is empty. Do not publicly post this error message! %s', 'jetpack' ), $entity ), $entity );
5042
		} elseif ( ! is_scalar( $json->jetpack_id ) ) {
5043
			return new Jetpack_Error( 'jetpack_id', sprintf( __( 'Error Details: Jetpack ID is not a scalar. Do not publicly post this error message! %s', 'jetpack' ) , $entity ), $entity );
5044
		} elseif ( preg_match( '/[^0-9]/', $json->jetpack_id ) ) {
5045
			return new Jetpack_Error( 'jetpack_id', sprintf( __( 'Error Details: Jetpack ID begins with a numeral. Do not publicly post this error message! %s', 'jetpack' ) , $entity ), $entity );
5046
		}
5047
5048
	    return true;
5049
	}
5050
	/**
5051
	 * @return bool|WP_Error
5052
	 */
5053
	public static function register() {
5054
		add_action( 'pre_update_jetpack_option_register', array( 'Jetpack_Options', 'delete_option' ) );
5055
		$secrets = Jetpack::init()->generate_secrets();
5056
5057
		Jetpack_Options::update_option( 'register', $secrets[0] . ':' . $secrets[1] . ':' . $secrets[2] );
5058
5059
		@list( $secret_1, $secret_2, $secret_eol ) = explode( ':', Jetpack_Options::get_option( 'register' ) );
5060
		if ( empty( $secret_1 ) || empty( $secret_2 ) || empty( $secret_eol ) || $secret_eol < time() ) {
5061
			return new Jetpack_Error( 'missing_secrets' );
5062
		}
5063
5064
		$timeout = Jetpack::init()->get_remote_query_timeout_limit();
5065
5066
		$gmt_offset = get_option( 'gmt_offset' );
5067
		if ( ! $gmt_offset ) {
5068
			$gmt_offset = 0;
5069
		}
5070
5071
		$stats_options = get_option( 'stats_options' );
5072
		$stats_id = isset($stats_options['blog_id']) ? $stats_options['blog_id'] : null;
5073
5074
		$args = array(
5075
			'method'  => 'POST',
5076
			'body'    => array(
5077
				'siteurl'         => site_url(),
5078
				'home'            => home_url(),
5079
				'gmt_offset'      => $gmt_offset,
5080
				'timezone_string' => (string) get_option( 'timezone_string' ),
5081
				'site_name'       => (string) get_option( 'blogname' ),
5082
				'secret_1'        => $secret_1,
5083
				'secret_2'        => $secret_2,
5084
				'site_lang'       => get_locale(),
5085
				'timeout'         => $timeout,
5086
				'stats_id'        => $stats_id,
5087
			),
5088
			'headers' => array(
5089
				'Accept' => 'application/json',
5090
			),
5091
			'timeout' => $timeout,
5092
		);
5093
		$response = Jetpack_Client::_wp_remote_request( Jetpack::fix_url_for_bad_hosts( Jetpack::api_url( 'register' ) ), $args, true );
5094
5095
5096
		// Make sure the response is valid and does not contain any Jetpack errors
5097
		$valid_response = Jetpack::init()->validate_remote_register_response( $response );
5098
		if( is_wp_error( $valid_response ) || !$valid_response ) {
5099
		    return $valid_response;
5100
		}
5101
5102
		// Grab the response values to work with
5103
		$code   = wp_remote_retrieve_response_code( $response );
5104
		$entity = wp_remote_retrieve_body( $response );
5105
5106
		if ( $entity )
5107
			$json = json_decode( $entity );
5108
		else
5109
			$json = false;
5110
5111 View Code Duplication
		if ( empty( $json->jetpack_secret ) || ! is_string( $json->jetpack_secret ) )
5112
			return new Jetpack_Error( 'jetpack_secret', '', $code );
5113
5114
		if ( isset( $json->jetpack_public ) ) {
5115
			$jetpack_public = (int) $json->jetpack_public;
5116
		} else {
5117
			$jetpack_public = false;
5118
		}
5119
5120
		Jetpack_Options::update_options(
5121
			array(
5122
				'id'         => (int)    $json->jetpack_id,
5123
				'blog_token' => (string) $json->jetpack_secret,
5124
				'public'     => $jetpack_public,
5125
			)
5126
		);
5127
5128
		/**
5129
		 * Fires when a site is registered on WordPress.com.
5130
		 *
5131
		 * @since 3.7.0
5132
		 *
5133
		 * @param int $json->jetpack_id Jetpack Blog ID.
5134
		 * @param string $json->jetpack_secret Jetpack Blog Token.
5135
		 * @param int|bool $jetpack_public Is the site public.
5136
		 */
5137
		do_action( 'jetpack_site_registered', $json->jetpack_id, $json->jetpack_secret, $jetpack_public );
5138
5139
		// Initialize Jump Start for the first and only time.
5140
		if ( ! Jetpack_Options::get_option( 'jumpstart' ) ) {
5141
			Jetpack_Options::update_option( 'jumpstart', 'new_connection' );
5142
5143
			$jetpack = Jetpack::init();
5144
5145
			$jetpack->stat( 'jumpstart', 'unique-views' );
5146
			$jetpack->do_stats( 'server_side' );
5147
		};
5148
5149
		return true;
5150
	}
5151
5152
	/**
5153
	 * If the db version is showing something other that what we've got now, bump it to current.
5154
	 *
5155
	 * @return bool: True if the option was incorrect and updated, false if nothing happened.
5156
	 */
5157
	public static function maybe_set_version_option() {
5158
		list( $version ) = explode( ':', Jetpack_Options::get_option( 'version' ) );
5159
		if ( JETPACK__VERSION != $version ) {
5160
			Jetpack_Options::update_option( 'version', JETPACK__VERSION . ':' . time() );
5161
			return true;
5162
		}
5163
		return false;
5164
	}
5165
5166
/* Client Server API */
5167
5168
	/**
5169
	 * Loads the Jetpack XML-RPC client
5170
	 */
5171
	public static function load_xml_rpc_client() {
5172
		require_once ABSPATH . WPINC . '/class-IXR.php';
5173
		require_once JETPACK__PLUGIN_DIR . 'class.jetpack-ixr-client.php';
5174
	}
5175
5176
	function verify_xml_rpc_signature() {
5177
		if ( $this->xmlrpc_verification ) {
5178
			return $this->xmlrpc_verification;
5179
		}
5180
5181
		// It's not for us
5182
		if ( ! isset( $_GET['token'] ) || empty( $_GET['signature'] ) ) {
5183
			return false;
5184
		}
5185
5186
		@list( $token_key, $version, $user_id ) = explode( ':', $_GET['token'] );
5187
		if (
5188
			empty( $token_key )
5189
		||
5190
			empty( $version ) || strval( JETPACK__API_VERSION ) !== $version
5191
		) {
5192
			return false;
5193
		}
5194
5195
		if ( '0' === $user_id ) {
5196
			$token_type = 'blog';
5197
			$user_id = 0;
5198
		} else {
5199
			$token_type = 'user';
5200
			if ( empty( $user_id ) || ! ctype_digit( $user_id ) ) {
5201
				return false;
5202
			}
5203
			$user_id = (int) $user_id;
5204
5205
			$user = new WP_User( $user_id );
5206
			if ( ! $user || ! $user->exists() ) {
5207
				return false;
5208
			}
5209
		}
5210
5211
		$token = Jetpack_Data::get_access_token( $user_id );
5212
		if ( ! $token ) {
5213
			return false;
5214
		}
5215
5216
		$token_check = "$token_key.";
5217
		if ( ! hash_equals( substr( $token->secret, 0, strlen( $token_check ) ), $token_check ) ) {
5218
			return false;
5219
		}
5220
5221
		require_once JETPACK__PLUGIN_DIR . 'class.jetpack-signature.php';
5222
5223
		$jetpack_signature = new Jetpack_Signature( $token->secret, (int) Jetpack_Options::get_option( 'time_diff' ) );
5224
		if ( isset( $_POST['_jetpack_is_multipart'] ) ) {
5225
			$post_data   = $_POST;
5226
			$file_hashes = array();
5227
			foreach ( $post_data as $post_data_key => $post_data_value ) {
5228
				if ( 0 !== strpos( $post_data_key, '_jetpack_file_hmac_' ) ) {
5229
					continue;
5230
				}
5231
				$post_data_key = substr( $post_data_key, strlen( '_jetpack_file_hmac_' ) );
5232
				$file_hashes[$post_data_key] = $post_data_value;
5233
			}
5234
5235
			foreach ( $file_hashes as $post_data_key => $post_data_value ) {
5236
				unset( $post_data["_jetpack_file_hmac_{$post_data_key}"] );
5237
				$post_data[$post_data_key] = $post_data_value;
5238
			}
5239
5240
			ksort( $post_data );
5241
5242
			$body = http_build_query( stripslashes_deep( $post_data ) );
5243
		} elseif ( is_null( $this->HTTP_RAW_POST_DATA ) ) {
5244
			$body = file_get_contents( 'php://input' );
5245
		} else {
5246
			$body = null;
5247
		}
5248
		$signature = $jetpack_signature->sign_current_request(
5249
			array( 'body' => is_null( $body ) ? $this->HTTP_RAW_POST_DATA : $body, )
5250
		);
5251
5252
		if ( ! $signature ) {
5253
			return false;
5254
		} else if ( is_wp_error( $signature ) ) {
5255
			return $signature;
5256
		} else if ( ! hash_equals( $signature, $_GET['signature'] ) ) {
5257
			return false;
5258
		}
5259
5260
		$timestamp = (int) $_GET['timestamp'];
5261
		$nonce     = stripslashes( (string) $_GET['nonce'] );
5262
5263
		if ( ! $this->add_nonce( $timestamp, $nonce ) ) {
5264
			return false;
5265
		}
5266
5267
		$this->xmlrpc_verification = array(
5268
			'type'    => $token_type,
5269
			'user_id' => $token->external_user_id,
5270
		);
5271
5272
		return $this->xmlrpc_verification;
5273
	}
5274
5275
	/**
5276
	 * Authenticates XML-RPC and other requests from the Jetpack Server
5277
	 */
5278
	function authenticate_jetpack( $user, $username, $password ) {
5279
		if ( is_a( $user, 'WP_User' ) ) {
5280
			return $user;
5281
		}
5282
5283
		$token_details = $this->verify_xml_rpc_signature();
5284
5285
		if ( ! $token_details || is_wp_error( $token_details ) ) {
5286
			return $user;
5287
		}
5288
5289
		if ( 'user' !== $token_details['type'] ) {
5290
			return $user;
5291
		}
5292
5293
		if ( ! $token_details['user_id'] ) {
5294
			return $user;
5295
		}
5296
5297
		nocache_headers();
5298
5299
		return new WP_User( $token_details['user_id'] );
5300
	}
5301
5302
	function add_nonce( $timestamp, $nonce ) {
5303
		global $wpdb;
5304
		static $nonces_used_this_request = array();
5305
5306
		if ( isset( $nonces_used_this_request["$timestamp:$nonce"] ) ) {
5307
			return $nonces_used_this_request["$timestamp:$nonce"];
5308
		}
5309
5310
		// This should always have gone through Jetpack_Signature::sign_request() first to check $timestamp an $nonce
5311
		$timestamp = (int) $timestamp;
5312
		$nonce     = esc_sql( $nonce );
5313
5314
		// Raw query so we can avoid races: add_option will also update
5315
		$show_errors = $wpdb->show_errors( false );
5316
5317
		$old_nonce = $wpdb->get_row(
5318
			$wpdb->prepare( "SELECT * FROM `$wpdb->options` WHERE option_name = %s", "jetpack_nonce_{$timestamp}_{$nonce}" )
5319
		);
5320
5321
		if ( is_null( $old_nonce ) ) {
5322
			$return = $wpdb->query(
5323
				$wpdb->prepare(
5324
					"INSERT INTO `$wpdb->options` (`option_name`, `option_value`, `autoload`) VALUES (%s, %s, %s)",
5325
					"jetpack_nonce_{$timestamp}_{$nonce}",
5326
					time(),
5327
					'no'
5328
				)
5329
			);
5330
		} else {
5331
			$return = false;
5332
		}
5333
5334
		$wpdb->show_errors( $show_errors );
5335
5336
		$nonces_used_this_request["$timestamp:$nonce"] = $return;
5337
5338
		return $return;
5339
	}
5340
5341
	/**
5342
	 * In some setups, $HTTP_RAW_POST_DATA can be emptied during some IXR_Server paths since it is passed by reference to various methods.
5343
	 * Capture it here so we can verify the signature later.
5344
	 */
5345
	function xmlrpc_methods( $methods ) {
5346
		$this->HTTP_RAW_POST_DATA = $GLOBALS['HTTP_RAW_POST_DATA'];
5347
		return $methods;
5348
	}
5349
5350
	function public_xmlrpc_methods( $methods ) {
5351
		if ( array_key_exists( 'wp.getOptions', $methods ) ) {
5352
			$methods['wp.getOptions'] = array( $this, 'jetpack_getOptions' );
5353
		}
5354
		return $methods;
5355
	}
5356
5357
	function jetpack_getOptions( $args ) {
5358
		global $wp_xmlrpc_server;
5359
5360
		$wp_xmlrpc_server->escape( $args );
5361
5362
		$username	= $args[1];
5363
		$password	= $args[2];
5364
5365
		if ( !$user = $wp_xmlrpc_server->login($username, $password) ) {
5366
			return $wp_xmlrpc_server->error;
5367
		}
5368
5369
		$options = array();
5370
		$user_data = $this->get_connected_user_data();
5371
		if ( is_array( $user_data ) ) {
5372
			$options['jetpack_user_id'] = array(
5373
				'desc'          => __( 'The WP.com user ID of the connected user', 'jetpack' ),
5374
				'readonly'      => true,
5375
				'value'         => $user_data['ID'],
5376
			);
5377
			$options['jetpack_user_login'] = array(
5378
				'desc'          => __( 'The WP.com username of the connected user', 'jetpack' ),
5379
				'readonly'      => true,
5380
				'value'         => $user_data['login'],
5381
			);
5382
			$options['jetpack_user_email'] = array(
5383
				'desc'          => __( 'The WP.com user email of the connected user', 'jetpack' ),
5384
				'readonly'      => true,
5385
				'value'         => $user_data['email'],
5386
			);
5387
			$options['jetpack_user_site_count'] = array(
5388
				'desc'          => __( 'The number of sites of the connected WP.com user', 'jetpack' ),
5389
				'readonly'      => true,
5390
				'value'         => $user_data['site_count'],
5391
			);
5392
		}
5393
		$wp_xmlrpc_server->blog_options = array_merge( $wp_xmlrpc_server->blog_options, $options );
5394
		$args = stripslashes_deep( $args );
5395
		return $wp_xmlrpc_server->wp_getOptions( $args );
5396
	}
5397
5398
	function xmlrpc_options( $options ) {
5399
		$jetpack_client_id = false;
5400
		if ( self::is_active() ) {
5401
			$jetpack_client_id = Jetpack_Options::get_option( 'id' );
5402
		}
5403
		$options['jetpack_version'] = array(
5404
				'desc'          => __( 'Jetpack Plugin Version', 'jetpack' ),
5405
				'readonly'      => true,
5406
				'value'         => JETPACK__VERSION,
5407
		);
5408
5409
		$options['jetpack_client_id'] = array(
5410
				'desc'          => __( 'The Client ID/WP.com Blog ID of this site', 'jetpack' ),
5411
				'readonly'      => true,
5412
				'value'         => $jetpack_client_id,
5413
		);
5414
		return $options;
5415
	}
5416
5417
	public static function clean_nonces( $all = false ) {
5418
		global $wpdb;
5419
5420
		$sql = "DELETE FROM `$wpdb->options` WHERE `option_name` LIKE %s";
5421
		if ( method_exists ( $wpdb , 'esc_like' ) ) {
5422
			$sql_args = array( $wpdb->esc_like( 'jetpack_nonce_' ) . '%' );
5423
		} else {
5424
			$sql_args = array( like_escape( 'jetpack_nonce_' ) . '%' );
5425
		}
5426
5427
		if ( true !== $all ) {
5428
			$sql .= ' AND CAST( `option_value` AS UNSIGNED ) < %d';
5429
			$sql_args[] = time() - 3600;
5430
		}
5431
5432
		$sql .= ' ORDER BY `option_id` LIMIT 100';
5433
5434
		$sql = $wpdb->prepare( $sql, $sql_args );
5435
5436
		for ( $i = 0; $i < 1000; $i++ ) {
5437
			if ( ! $wpdb->query( $sql ) ) {
5438
				break;
5439
			}
5440
		}
5441
	}
5442
5443
	/**
5444
	 * State is passed via cookies from one request to the next, but never to subsequent requests.
5445
	 * SET: state( $key, $value );
5446
	 * GET: $value = state( $key );
5447
	 *
5448
	 * @param string $key
5449
	 * @param string $value
5450
	 * @param bool $restate private
5451
	 */
5452
	public static function state( $key = null, $value = null, $restate = false ) {
5453
		static $state = array();
5454
		static $path, $domain;
5455
		if ( ! isset( $path ) ) {
5456
			require_once( ABSPATH . 'wp-admin/includes/plugin.php' );
5457
			$admin_url = Jetpack::admin_url();
5458
			$bits      = parse_url( $admin_url );
5459
5460
			if ( is_array( $bits ) ) {
5461
				$path   = ( isset( $bits['path'] ) ) ? dirname( $bits['path'] ) : null;
5462
				$domain = ( isset( $bits['host'] ) ) ? $bits['host'] : null;
5463
			} else {
5464
				$path = $domain = null;
5465
			}
5466
		}
5467
5468
		// Extract state from cookies and delete cookies
5469
		if ( isset( $_COOKIE[ 'jetpackState' ] ) && is_array( $_COOKIE[ 'jetpackState' ] ) ) {
5470
			$yum = $_COOKIE[ 'jetpackState' ];
5471
			unset( $_COOKIE[ 'jetpackState' ] );
5472
			foreach ( $yum as $k => $v ) {
5473
				if ( strlen( $v ) )
5474
					$state[ $k ] = $v;
5475
				setcookie( "jetpackState[$k]", false, 0, $path, $domain );
5476
			}
5477
		}
5478
5479
		if ( $restate ) {
5480
			foreach ( $state as $k => $v ) {
5481
				setcookie( "jetpackState[$k]", $v, 0, $path, $domain );
5482
			}
5483
			return;
5484
		}
5485
5486
		// Get a state variable
5487
		if ( isset( $key ) && ! isset( $value ) ) {
5488
			if ( array_key_exists( $key, $state ) )
5489
				return $state[ $key ];
5490
			return null;
5491
		}
5492
5493
		// Set a state variable
5494
		if ( isset ( $key ) && isset( $value ) ) {
5495
			if( is_array( $value ) && isset( $value[0] ) ) {
5496
				$value = $value[0];
5497
			}
5498
			$state[ $key ] = $value;
5499
			setcookie( "jetpackState[$key]", $value, 0, $path, $domain );
5500
		}
5501
	}
5502
5503
	public static function restate() {
5504
		Jetpack::state( null, null, true );
5505
	}
5506
5507
	public static function check_privacy( $file ) {
5508
		static $is_site_publicly_accessible = null;
5509
5510
		if ( is_null( $is_site_publicly_accessible ) ) {
5511
			$is_site_publicly_accessible = false;
5512
5513
			Jetpack::load_xml_rpc_client();
5514
			$rpc = new Jetpack_IXR_Client();
5515
5516
			$success = $rpc->query( 'jetpack.isSitePubliclyAccessible', home_url() );
5517
			if ( $success ) {
5518
				$response = $rpc->getResponse();
5519
				if ( $response ) {
5520
					$is_site_publicly_accessible = true;
5521
				}
5522
			}
5523
5524
			Jetpack_Options::update_option( 'public', (int) $is_site_publicly_accessible );
5525
		}
5526
5527
		if ( $is_site_publicly_accessible ) {
5528
			return;
5529
		}
5530
5531
		$module_slug = self::get_module_slug( $file );
5532
5533
		$privacy_checks = Jetpack::state( 'privacy_checks' );
5534
		if ( ! $privacy_checks ) {
5535
			$privacy_checks = $module_slug;
5536
		} else {
5537
			$privacy_checks .= ",$module_slug";
5538
		}
5539
5540
		Jetpack::state( 'privacy_checks', $privacy_checks );
5541
	}
5542
5543
	/**
5544
	 * Helper method for multicall XMLRPC.
5545
	 */
5546
	public static function xmlrpc_async_call() {
5547
		global $blog_id;
5548
		static $clients = array();
5549
5550
		$client_blog_id = is_multisite() ? $blog_id : 0;
5551
5552
		if ( ! isset( $clients[$client_blog_id] ) ) {
5553
			Jetpack::load_xml_rpc_client();
5554
			$clients[$client_blog_id] = new Jetpack_IXR_ClientMulticall( array( 'user_id' => JETPACK_MASTER_USER, ) );
5555
			if ( function_exists( 'ignore_user_abort' ) ) {
5556
				ignore_user_abort( true );
5557
			}
5558
			add_action( 'shutdown', array( 'Jetpack', 'xmlrpc_async_call' ) );
5559
		}
5560
5561
		$args = func_get_args();
5562
5563
		if ( ! empty( $args[0] ) ) {
5564
			call_user_func_array( array( $clients[$client_blog_id], 'addCall' ), $args );
5565
		} elseif ( is_multisite() ) {
5566
			foreach ( $clients as $client_blog_id => $client ) {
5567
				if ( ! $client_blog_id || empty( $client->calls ) ) {
5568
					continue;
5569
				}
5570
5571
				$switch_success = switch_to_blog( $client_blog_id, true );
5572
				if ( ! $switch_success ) {
5573
					continue;
5574
				}
5575
5576
				flush();
5577
				$client->query();
5578
5579
				restore_current_blog();
5580
			}
5581
		} else {
5582
			if ( isset( $clients[0] ) && ! empty( $clients[0]->calls ) ) {
5583
				flush();
5584
				$clients[0]->query();
5585
			}
5586
		}
5587
	}
5588
5589
	public static function staticize_subdomain( $url ) {
5590
5591
		// Extract hostname from URL
5592
		$host = parse_url( $url, PHP_URL_HOST );
5593
5594
		// Explode hostname on '.'
5595
		$exploded_host = explode( '.', $host );
5596
5597
		// Retrieve the name and TLD
5598
		if ( count( $exploded_host ) > 1 ) {
5599
			$name = $exploded_host[ count( $exploded_host ) - 2 ];
5600
			$tld = $exploded_host[ count( $exploded_host ) - 1 ];
5601
			// Rebuild domain excluding subdomains
5602
			$domain = $name . '.' . $tld;
5603
		} else {
5604
			$domain = $host;
5605
		}
5606
		// Array of Automattic domains
5607
		$domain_whitelist = array( 'wordpress.com', 'wp.com' );
5608
5609
		// Return $url if not an Automattic domain
5610
		if ( ! in_array( $domain, $domain_whitelist ) ) {
5611
			return $url;
5612
		}
5613
5614
		if ( is_ssl() ) {
5615
			return preg_replace( '|https?://[^/]++/|', 'https://s-ssl.wordpress.com/', $url );
5616
		}
5617
5618
		srand( crc32( basename( $url ) ) );
5619
		$static_counter = rand( 0, 2 );
5620
		srand(); // this resets everything that relies on this, like array_rand() and shuffle()
5621
5622
		return preg_replace( '|://[^/]+?/|', "://s$static_counter.wp.com/", $url );
5623
	}
5624
5625
/* JSON API Authorization */
5626
5627
	/**
5628
	 * Handles the login action for Authorizing the JSON API
5629
	 */
5630
	function login_form_json_api_authorization() {
5631
		$this->verify_json_api_authorization_request();
5632
5633
		add_action( 'wp_login', array( &$this, 'store_json_api_authorization_token' ), 10, 2 );
5634
5635
		add_action( 'login_message', array( &$this, 'login_message_json_api_authorization' ) );
5636
		add_action( 'login_form', array( &$this, 'preserve_action_in_login_form_for_json_api_authorization' ) );
5637
		add_filter( 'site_url', array( &$this, 'post_login_form_to_signed_url' ), 10, 3 );
5638
	}
5639
5640
	// Make sure the login form is POSTed to the signed URL so we can reverify the request
5641
	function post_login_form_to_signed_url( $url, $path, $scheme ) {
5642
		if ( 'wp-login.php' !== $path || ( 'login_post' !== $scheme && 'login' !== $scheme ) ) {
5643
			return $url;
5644
		}
5645
5646
		$parsed_url = parse_url( $url );
5647
		$url = strtok( $url, '?' );
5648
		$url = "$url?{$_SERVER['QUERY_STRING']}";
5649
		if ( ! empty( $parsed_url['query'] ) )
5650
			$url .= "&{$parsed_url['query']}";
5651
5652
		return $url;
5653
	}
5654
5655
	// Make sure the POSTed request is handled by the same action
5656
	function preserve_action_in_login_form_for_json_api_authorization() {
5657
		echo "<input type='hidden' name='action' value='jetpack_json_api_authorization' />\n";
5658
		echo "<input type='hidden' name='jetpack_json_api_original_query' value='" . esc_url( set_url_scheme( $_SERVER['HTTP_HOST'] . $_SERVER['REQUEST_URI'] ) ) . "' />\n";
5659
	}
5660
5661
	// If someone logs in to approve API access, store the Access Code in usermeta
5662
	function store_json_api_authorization_token( $user_login, $user ) {
5663
		add_filter( 'login_redirect', array( &$this, 'add_token_to_login_redirect_json_api_authorization' ), 10, 3 );
5664
		add_filter( 'allowed_redirect_hosts', array( &$this, 'allow_wpcom_public_api_domain' ) );
5665
		$token = wp_generate_password( 32, false );
5666
		update_user_meta( $user->ID, 'jetpack_json_api_' . $this->json_api_authorization_request['client_id'], $token );
5667
	}
5668
5669
	// Add public-api.wordpress.com to the safe redirect whitelist - only added when someone allows API access
5670
	function allow_wpcom_public_api_domain( $domains ) {
5671
		$domains[] = 'public-api.wordpress.com';
5672
		return $domains;
5673
	}
5674
5675
	// Add the Access Code details to the public-api.wordpress.com redirect
5676
	function add_token_to_login_redirect_json_api_authorization( $redirect_to, $original_redirect_to, $user ) {
5677
		return add_query_arg(
5678
			urlencode_deep(
5679
				array(
5680
					'jetpack-code'    => get_user_meta( $user->ID, 'jetpack_json_api_' . $this->json_api_authorization_request['client_id'], true ),
5681
					'jetpack-user-id' => (int) $user->ID,
5682
					'jetpack-state'   => $this->json_api_authorization_request['state'],
5683
				)
5684
			),
5685
			$redirect_to
5686
		);
5687
	}
5688
5689
	// Verifies the request by checking the signature
5690
	function verify_json_api_authorization_request() {
5691
		require_once JETPACK__PLUGIN_DIR . 'class.jetpack-signature.php';
5692
5693
		$token = Jetpack_Data::get_access_token( JETPACK_MASTER_USER );
5694
		if ( ! $token || empty( $token->secret ) ) {
5695
			wp_die( __( 'You must connect your Jetpack plugin to WordPress.com to use this feature.' , 'jetpack' ) );
5696
		}
5697
5698
		$die_error = __( 'Someone may be trying to trick you into giving them access to your site.  Or it could be you just encountered a bug :).  Either way, please close this window.', 'jetpack' );
5699
5700
		$jetpack_signature = new Jetpack_Signature( $token->secret, (int) Jetpack_Options::get_option( 'time_diff' ) );
5701
5702
		if ( isset( $_POST['jetpack_json_api_original_query'] ) ) {
5703
			$signature = $jetpack_signature->sign_request( $_GET['token'], $_GET['timestamp'], $_GET['nonce'], '', 'GET', $_POST['jetpack_json_api_original_query'], null, true );
5704
		} else {
5705
			$signature = $jetpack_signature->sign_current_request( array( 'body' => null, 'method' => 'GET' ) );
5706
		}
5707
5708
		if ( ! $signature ) {
5709
			wp_die( $die_error );
5710
		} else if ( is_wp_error( $signature ) ) {
5711
			wp_die( $die_error );
5712
		} else if ( $signature !== $_GET['signature'] ) {
5713
			if ( is_ssl() ) {
5714
				// If we signed an HTTP request on the Jetpack Servers, but got redirected to HTTPS by the local blog, check the HTTP signature as well
5715
				$signature = $jetpack_signature->sign_current_request( array( 'scheme' => 'http', 'body' => null, 'method' => 'GET' ) );
5716
				if ( ! $signature || is_wp_error( $signature ) || $signature !== $_GET['signature'] ) {
5717
					wp_die( $die_error );
5718
				}
5719
			} else {
5720
				wp_die( $die_error );
5721
			}
5722
		}
5723
5724
		$timestamp = (int) $_GET['timestamp'];
5725
		$nonce     = stripslashes( (string) $_GET['nonce'] );
5726
5727
		if ( ! $this->add_nonce( $timestamp, $nonce ) ) {
5728
			// De-nonce the nonce, at least for 5 minutes.
5729
			// We have to reuse this nonce at least once (used the first time when the initial request is made, used a second time when the login form is POSTed)
5730
			$old_nonce_time = get_option( "jetpack_nonce_{$timestamp}_{$nonce}" );
5731
			if ( $old_nonce_time < time() - 300 ) {
5732
				wp_die( __( 'The authorization process expired.  Please go back and try again.' , 'jetpack' ) );
5733
			}
5734
		}
5735
5736
		$data = json_decode( base64_decode( stripslashes( $_GET['data'] ) ) );
5737
		$data_filters = array(
5738
			'state'        => 'opaque',
5739
			'client_id'    => 'int',
5740
			'client_title' => 'string',
5741
			'client_image' => 'url',
5742
		);
5743
5744
		foreach ( $data_filters as $key => $sanitation ) {
5745
			if ( ! isset( $data->$key ) ) {
5746
				wp_die( $die_error );
5747
			}
5748
5749
			switch ( $sanitation ) {
5750
			case 'int' :
5751
				$this->json_api_authorization_request[$key] = (int) $data->$key;
5752
				break;
5753
			case 'opaque' :
5754
				$this->json_api_authorization_request[$key] = (string) $data->$key;
5755
				break;
5756
			case 'string' :
5757
				$this->json_api_authorization_request[$key] = wp_kses( (string) $data->$key, array() );
5758
				break;
5759
			case 'url' :
5760
				$this->json_api_authorization_request[$key] = esc_url_raw( (string) $data->$key );
5761
				break;
5762
			}
5763
		}
5764
5765
		if ( empty( $this->json_api_authorization_request['client_id'] ) ) {
5766
			wp_die( $die_error );
5767
		}
5768
	}
5769
5770
	function login_message_json_api_authorization( $message ) {
5771
		return '<p class="message">' . sprintf(
5772
			esc_html__( '%s wants to access your site&#8217;s data.  Log in to authorize that access.' , 'jetpack' ),
5773
			'<strong>' . esc_html( $this->json_api_authorization_request['client_title'] ) . '</strong>'
5774
		) . '<img src="' . esc_url( $this->json_api_authorization_request['client_image'] ) . '" /></p>';
5775
	}
5776
5777
	/**
5778
	 * Get $content_width, but with a <s>twist</s> filter.
5779
	 */
5780
	public static function get_content_width() {
5781
		$content_width = isset( $GLOBALS['content_width'] ) ? $GLOBALS['content_width'] : false;
5782
		/**
5783
		 * Filter the Content Width value.
5784
		 *
5785
		 * @since 2.2.3
5786
		 *
5787
		 * @param string $content_width Content Width value.
5788
		 */
5789
		return apply_filters( 'jetpack_content_width', $content_width );
5790
	}
5791
5792
	/**
5793
	 * Centralize the function here until it gets added to core.
5794
	 *
5795
	 * @param int|string|object $id_or_email A user ID,  email address, or comment object
5796
	 * @param int $size Size of the avatar image
5797
	 * @param string $default URL to a default image to use if no avatar is available
5798
	 * @param bool $force_display Whether to force it to return an avatar even if show_avatars is disabled
5799
	 *
5800
	 * @return array First element is the URL, second is the class.
5801
	 */
5802
	public static function get_avatar_url( $id_or_email, $size = 96, $default = '', $force_display = false ) {
5803
		// Don't bother adding the __return_true filter if it's already there.
5804
		$has_filter = has_filter( 'pre_option_show_avatars', '__return_true' );
5805
5806
		if ( $force_display && ! $has_filter )
5807
			add_filter( 'pre_option_show_avatars', '__return_true' );
5808
5809
		$avatar = get_avatar( $id_or_email, $size, $default );
5810
5811
		if ( $force_display && ! $has_filter )
5812
			remove_filter( 'pre_option_show_avatars', '__return_true' );
5813
5814
		// If no data, fail out.
5815
		if ( is_wp_error( $avatar ) || ! $avatar )
5816
			return array( null, null );
5817
5818
		// Pull out the URL.  If it's not there, fail out.
5819
		if ( ! preg_match( '/src=["\']([^"\']+)["\']/', $avatar, $url_matches ) )
5820
			return array( null, null );
5821
		$url = wp_specialchars_decode( $url_matches[1], ENT_QUOTES );
5822
5823
		// Pull out the class, but it's not a big deal if it's missing.
5824
		$class = '';
5825
		if ( preg_match( '/class=["\']([^"\']+)["\']/', $avatar, $class_matches ) )
5826
			$class = wp_specialchars_decode( $class_matches[1], ENT_QUOTES );
5827
5828
		return array( $url, $class );
5829
	}
5830
5831
	/**
5832
	 * Pings the WordPress.com Mirror Site for the specified options.
5833
	 *
5834
	 * @param string|array $option_names The option names to request from the WordPress.com Mirror Site
5835
	 *
5836
	 * @return array An associative array of the option values as stored in the WordPress.com Mirror Site
5837
	 */
5838
	public function get_cloud_site_options( $option_names ) {
5839
		$option_names = array_filter( (array) $option_names, 'is_string' );
5840
5841
		Jetpack::load_xml_rpc_client();
5842
		$xml = new Jetpack_IXR_Client( array( 'user_id' => JETPACK_MASTER_USER, ) );
5843
		$xml->query( 'jetpack.fetchSiteOptions', $option_names );
5844
		if ( $xml->isError() ) {
5845
			return array(
5846
				'error_code' => $xml->getErrorCode(),
5847
				'error_msg'  => $xml->getErrorMessage(),
5848
			);
5849
		}
5850
		$cloud_site_options = $xml->getResponse();
5851
5852
		return $cloud_site_options;
5853
	}
5854
5855
	/**
5856
	 * Fetch the filtered array of options that we should compare to determine an identity crisis.
5857
	 *
5858
	 * @return array An array of options to check.
5859
	 */
5860
	public static function identity_crisis_options_to_check() {
5861
		$options = array(
5862
			'siteurl',
5863
			'home',
5864
		);
5865
		/**
5866
		 * Filter the options that we should compare to determine an identity crisis.
5867
		 *
5868
		 * @since 2.5.0
5869
		 *
5870
		 * @param array $options Array of options to compare to determine an identity crisis.
5871
		 */
5872
		return apply_filters( 'jetpack_identity_crisis_options_to_check', $options );
5873
	}
5874
5875
	/**
5876
	 * Checks to make sure that local options have the same values as remote options.  Will cache the results for up to 24 hours.
5877
	 *
5878
	 * @param bool $force_recheck Whether to ignore any cached transient and manually re-check.
5879
	 *
5880
	 * @return array An array of options that do not match.  If everything is good, it will evaluate to false.
5881
	 */
5882
	public static function check_identity_crisis( $force_recheck = false ) {
5883
		if ( ! Jetpack::is_active() || Jetpack::is_development_mode() || Jetpack::is_staging_site() )
5884
			return false;
5885
5886
		if ( $force_recheck || false === ( $errors = get_transient( 'jetpack_has_identity_crisis' ) ) ) {
5887
			$options_to_check = self::identity_crisis_options_to_check();
5888
			$cloud_options = Jetpack::init()->get_cloud_site_options( $options_to_check );
5889
			$errors        = array();
5890
5891
			foreach ( $cloud_options as $cloud_key => $cloud_value ) {
5892
5893
				// If it's not the same as the local value...
5894
				if ( $cloud_value !== get_option( $cloud_key ) ) {
5895
5896
					// Break out if we're getting errors.  We are going to check the error keys later when we alert.
5897
					if ( 'error_code' == $cloud_key ) {
5898
						$errors[ $cloud_key ] = $cloud_value;
5899
						break;
5900
					}
5901
5902
					$parsed_cloud_value = parse_url( $cloud_value );
5903
					// If the current options is an IP address
5904
					if ( filter_var( $parsed_cloud_value['host'], FILTER_VALIDATE_IP ) ) {
5905
						// Give the new value a Jetpack to fly in to the clouds
5906
						Jetpack::resolve_identity_crisis( $cloud_key );
5907
						continue;
5908
					}
5909
5910
					// And it's not been added to the whitelist...
5911
					if ( ! self::is_identity_crisis_value_whitelisted( $cloud_key, $cloud_value ) ) {
5912
						/*
5913
						 * This should be a temporary hack until a cleaner solution is found.
5914
						 *
5915
						 * The siteurl and home can be set to use http in General > Settings
5916
						 * however some constants can be defined that can force https in wp-admin
5917
						 * when this happens wpcom can confuse wporg with a fake identity
5918
						 * crisis with a mismatch of http vs https when it should be allowed.
5919
						 * we need to check that here.
5920
						 *
5921
						 * @see https://github.com/Automattic/jetpack/issues/1006
5922
						 */
5923
						if ( ( 'home' == $cloud_key || 'siteurl' == $cloud_key )
5924
							&& ( substr( $cloud_value, 0, 8 ) == "https://" )
5925
							&& Jetpack::init()->is_ssl_required_to_visit_site() ) {
5926
							// Ok, we found a mismatch of http and https because of wp-config, not an invalid url
5927
							continue;
5928
						}
5929
5930
5931
						// Then kick an error!
5932
						$errors[ $cloud_key ] = $cloud_value;
5933
					}
5934
				}
5935
			}
5936
		}
5937
5938
		/**
5939
		 * Filters the errors returned when checking for an Identity Crisis.
5940
		 *
5941
		 * @since 2.3.2
5942
		 *
5943
		 * @param array $errors Array of Identity Crisis errors.
5944
		 * @param bool $force_recheck Ignore any cached transient and manually re-check. Default to false.
5945
		 */
5946
		return apply_filters( 'jetpack_has_identity_crisis', $errors, $force_recheck );
5947
	}
5948
5949
	/*
5950
	 * Resolve ID crisis
5951
	 *
5952
	 * If the URL has changed, but the rest of the options are the same (i.e. blog/user tokens)
5953
	 * The user has the option to update the shadow site with the new URL before a new
5954
	 * token is created.
5955
	 *
5956
	 * @param $key : Which option to sync.  null defautlts to home and siteurl
5957
	 */
5958
	public static function resolve_identity_crisis( $key = null ) {
5959
		if ( $key ) {
5960
			$identity_options = array( $key );
5961
		} else {
5962
			$identity_options = self::identity_crisis_options_to_check();
5963
		}
5964
5965
		if ( is_array( $identity_options ) ) {
5966
			foreach( $identity_options as $identity_option ) {
5967
				Jetpack_Sync::sync_options( __FILE__, $identity_option );
5968
5969
				/**
5970
				 * Fires when a shadow site option is updated.
5971
				 * These options are updated via the Identity Crisis UI.
5972
				 * $identity_option is the option that gets updated.
5973
				 *
5974
				 * @since 3.7.0
5975
				 */
5976
				do_action( "update_option_{$identity_option}" );
5977
			}
5978
		}
5979
	}
5980
5981
	/*
5982
	 * Whitelist URL
5983
	 *
5984
	 * Ignore the URL differences between the blog and the shadow site.
5985
	 */
5986
	public static function whitelist_current_url() {
5987
		$options_to_check = Jetpack::identity_crisis_options_to_check();
5988
		$cloud_options = Jetpack::init()->get_cloud_site_options( $options_to_check );
5989
5990
		foreach ( $cloud_options as $cloud_key => $cloud_value ) {
5991
			Jetpack::whitelist_identity_crisis_value( $cloud_key, $cloud_value );
5992
		}
5993
	}
5994
5995
	/*
5996
	 * Ajax callbacks for ID crisis resolutions
5997
	 *
5998
	 * Things that could happen here:
5999
	 *  - site_migrated : Update the URL on the shadow blog to match new domain
6000
	 *  - whitelist     : Ignore the URL difference
6001
	 *  - default       : Error message
6002
	 */
6003
	public static function resolve_identity_crisis_ajax_callback() {
6004
		check_ajax_referer( 'resolve-identity-crisis', 'ajax-nonce' );
6005
6006
		switch ( $_POST[ 'crisis_resolution_action' ] ) {
6007
			case 'site_migrated':
6008
				Jetpack::resolve_identity_crisis();
6009
				echo 'resolved';
6010
				break;
6011
6012
			case 'whitelist':
6013
				Jetpack::whitelist_current_url();
6014
				echo 'whitelisted';
6015
				break;
6016
6017
			case 'reset_connection':
6018
				// Delete the options first so it doesn't get confused which site to disconnect dotcom-side
6019
				Jetpack_Options::delete_option(
6020
					array(
6021
						'register',
6022
						'blog_token',
6023
						'user_token',
6024
						'user_tokens',
6025
						'master_user',
6026
						'time_diff',
6027
						'fallback_no_verify_ssl_certs',
6028
						'id',
6029
					)
6030
				);
6031
				delete_transient( 'jetpack_has_identity_crisis' );
6032
6033
				echo 'reset-connection-success';
6034
				break;
6035
6036
			default:
6037
				echo 'missing action';
6038
				break;
6039
		}
6040
6041
		wp_die();
6042
	}
6043
6044
	/**
6045
	 * Adds a value to the whitelist for the specified key.
6046
	 *
6047
	 * @param string $key The option name that we're whitelisting the value for.
6048
	 * @param string $value The value that we're intending to add to the whitelist.
6049
	 *
6050
	 * @return bool Whether the value was added to the whitelist, or false if it was already there.
6051
	 */
6052
	public static function whitelist_identity_crisis_value( $key, $value ) {
6053
		if ( Jetpack::is_identity_crisis_value_whitelisted( $key, $value ) ) {
6054
			return false;
6055
		}
6056
6057
		$whitelist = Jetpack_Options::get_option( 'identity_crisis_whitelist', array() );
6058
		if ( empty( $whitelist[ $key ] ) || ! is_array( $whitelist[ $key ] ) ) {
6059
			$whitelist[ $key ] = array();
6060
		}
6061
		array_push( $whitelist[ $key ], $value );
6062
6063
		Jetpack_Options::update_option( 'identity_crisis_whitelist', $whitelist );
6064
		return true;
6065
	}
6066
6067
	/**
6068
	 * Checks whether a value is already whitelisted.
6069
	 *
6070
	 * @param string $key The option name that we're checking the value for.
6071
	 * @param string $value The value that we're curious to see if it's on the whitelist.
6072
	 *
6073
	 * @return bool Whether the value is whitelisted.
6074
	 */
6075
	public static function is_identity_crisis_value_whitelisted( $key, $value ) {
6076
		$whitelist = Jetpack_Options::get_option( 'identity_crisis_whitelist', array() );
6077
		if ( ! empty( $whitelist[ $key ] ) && is_array( $whitelist[ $key ] ) && in_array( $value, $whitelist[ $key ] ) ) {
6078
			return true;
6079
		}
6080
		return false;
6081
	}
6082
6083
	/**
6084
	 * Checks whether the home and siteurl specifically are whitelisted
6085
	 * Written so that we don't have re-check $key and $value params every time
6086
	 * we want to check if this site is whitelisted, for example in footer.php
6087
	 *
6088
	 * @return bool True = already whitelsisted False = not whitelisted
6089
	 */
6090
	public static function is_staging_site() {
6091
		$is_staging = false;
6092
6093
		$current_whitelist = Jetpack_Options::get_option( 'identity_crisis_whitelist' );
6094
		if ( $current_whitelist ) {
6095
			$options_to_check  = Jetpack::identity_crisis_options_to_check();
6096
			$cloud_options     = Jetpack::init()->get_cloud_site_options( $options_to_check );
6097
6098
			foreach ( $cloud_options as $cloud_key => $cloud_value ) {
6099
				if ( self::is_identity_crisis_value_whitelisted( $cloud_key, $cloud_value ) ) {
6100
					$is_staging = true;
6101
					break;
6102
				}
6103
			}
6104
		}
6105
		$known_staging = array(
6106
			'urls' => array(
6107
				'#\.staging\.wpengine\.com$#i',
6108
				),
6109
			'constants' => array(
6110
				'IS_WPE_SNAPSHOT',
6111
				'JETPACK_STAGING_MODE',
6112
				)
6113
			);
6114
		/**
6115
		 * Filters the flags of known staging sites.
6116
		 *
6117
		 * @since 3.9.0
6118
		 *
6119
		 * @param array $known_staging {
6120
		 *     An array of arrays that each are used to check if the current site is staging.
6121
		 *     @type array $urls      URLs of staging sites in regex to check against site_url.
6122
		 *     @type array $cosntants PHP constants of known staging/developement environments.
6123
		 *  }
6124
		 */
6125
		$known_staging = apply_filters( 'jetpack_known_staging', $known_staging );
6126
6127
		if ( isset( $known_staging['urls'] ) ) {
6128
			foreach ( $known_staging['urls'] as $url ){
6129
				if ( preg_match( $url, site_url() ) ) {
6130
					$is_staging = true;
6131
					break;
6132
				}
6133
			}
6134
		}
6135
6136
		if ( isset( $known_staging['constants'] ) ) {
6137
			foreach ( $known_staging['constants'] as $constant ) {
6138
				if ( defined( $constant ) && constant( $constant ) ) {
6139
					$is_staging = true;
6140
				}
6141
			}
6142
		}
6143
6144
		/**
6145
		 * Filters is_staging_site check.
6146
		 *
6147
		 * @since 3.9.0
6148
		 *
6149
		 * @param bool $is_staging If the current site is a staging site.
6150
		 */
6151
		return apply_filters( 'jetpack_is_staging_site', $is_staging );
6152
	}
6153
6154
	public function identity_crisis_js( $nonce ) {
6155
?>
6156
<script>
6157
(function( $ ) {
6158
	var SECOND_IN_MS = 1000;
6159
6160
	function contactSupport( e ) {
6161
		e.preventDefault();
6162
		$( '.jp-id-crisis-question' ).hide();
6163
		$( '#jp-id-crisis-contact-support' ).show();
6164
	}
6165
6166
	function autodismissSuccessBanner() {
6167
		$( '.jp-identity-crisis' ).fadeOut(600); //.addClass( 'dismiss' );
6168
	}
6169
6170
	var data = { action: 'jetpack_resolve_identity_crisis', 'ajax-nonce': '<?php echo $nonce; ?>' };
6171
6172
	$( document ).ready(function() {
6173
6174
		// Site moved: Update the URL on the shadow blog
6175
		$( '.site-moved' ).click(function( e ) {
6176
			e.preventDefault();
6177
			data.crisis_resolution_action = 'site_migrated';
6178
			$( '#jp-id-crisis-question-1 .spinner' ).show();
6179
			$.post( ajaxurl, data, function() {
6180
				$( '.jp-id-crisis-question' ).hide();
6181
				$( '.banner-title' ).hide();
6182
				$( '#jp-id-crisis-success' ).show();
6183
				setTimeout( autodismissSuccessBanner, 6 * SECOND_IN_MS );
6184
			});
6185
6186
		});
6187
6188
		// URL hasn't changed, next question please.
6189
		$( '.site-not-moved' ).click(function( e ) {
6190
			e.preventDefault();
6191
			$( '.jp-id-crisis-question' ).hide();
6192
			$( '#jp-id-crisis-question-2' ).show();
6193
		});
6194
6195
		// Reset connection: two separate sites.
6196
		$( '.reset-connection' ).click(function( e ) {
6197
			data.crisis_resolution_action = 'reset_connection';
6198
			$.post( ajaxurl, data, function( response ) {
6199
				if ( 'reset-connection-success' === response ) {
6200
					window.location.replace( '<?php echo Jetpack::admin_url(); ?>' );
6201
				}
6202
			});
6203
		});
6204
6205
		// It's a dev environment.  Ignore.
6206
		$( '.is-dev-env' ).click(function( e ) {
6207
			data.crisis_resolution_action = 'whitelist';
6208
			$( '#jp-id-crisis-question-2 .spinner' ).show();
6209
			$.post( ajaxurl, data, function() {
6210
				$( '.jp-id-crisis-question' ).hide();
6211
				$( '.banner-title' ).hide();
6212
				$( '#jp-id-crisis-success' ).show();
6213
				setTimeout( autodismissSuccessBanner, 4 * SECOND_IN_MS );
6214
			});
6215
		});
6216
6217
		$( '.not-reconnecting' ).click(contactSupport);
6218
		$( '.not-staging-or-dev' ).click(contactSupport);
6219
	});
6220
})( jQuery );
6221
</script>
6222
<?php
6223
	}
6224
6225
	/**
6226
	 * Displays an admin_notice, alerting the user to an identity crisis.
6227
	 */
6228
	public function alert_identity_crisis() {
6229
		// @todo temporary killing of feature in 3.8.1 as it revealed a number of scenarios not foreseen.
6230
		if ( ! Jetpack::is_development_version() ) {
6231
			return;
6232
		}
6233
6234
		// @todo temporary copout for dealing with domain mapping
6235
		// @see https://github.com/Automattic/jetpack/issues/2702
6236
		if ( is_multisite() && defined( 'SUNRISE' ) && ! Jetpack::is_development_version() ) {
6237
			return;
6238
		}
6239
6240
		if ( ! current_user_can( 'jetpack_disconnect' ) ) {
6241
			return;
6242
		}
6243
6244
		if ( ! $errors = self::check_identity_crisis() ) {
6245
			return;
6246
		}
6247
6248
		// Only show on dashboard and jetpack pages
6249
		$screen = get_current_screen();
6250
		if ( 'dashboard' !== $screen->base && ! did_action( 'jetpack_notices' ) ) {
6251
			return;
6252
		}
6253
6254
		// Include the js!
6255
		$ajax_nonce = wp_create_nonce( 'resolve-identity-crisis' );
6256
		$this->identity_crisis_js( $ajax_nonce );
6257
6258
		// Include the CSS!
6259
		if ( ! wp_script_is( 'jetpack', 'done' ) ) {
6260
			$this->admin_banner_styles();
6261
		}
6262
6263
		if ( ! array_key_exists( 'error_code', $errors ) ) {
6264
			$key = 'siteurl';
6265
			if ( ! $errors[ $key ] ) {
6266
				$key = 'home';
6267
			}
6268
		} else {
6269
			$key = 'error_code';
6270
			// 401 is the only error we care about.  Any other errors should not trigger the alert.
6271
			if ( 401 !== $errors[ $key ] ) {
6272
				return;
6273
			}
6274
		}
6275
6276
		?>
6277
6278
		<style>
6279
			.jp-identity-crisis .jp-btn-group {
6280
					margin: 15px 0;
6281
				}
6282
			.jp-identity-crisis strong {
6283
					color: #518d2a;
6284
				}
6285
			.jp-identity-crisis.dismiss {
6286
				display: none;
6287
			}
6288
			.jp-identity-crisis .button {
6289
				margin-right: 4px;
6290
			}
6291
		</style>
6292
6293
		<div id="message" class="error jetpack-message jp-identity-crisis stay-visible">
6294
			<div class="service-mark"></div>
6295
			<div class="jp-id-banner__content">
6296
				<!-- <h3 class="banner-title"><?php _e( 'Something\'s not quite right with your Jetpack connection! Let\'s fix that.', 'jetpack' ); ?></h3> -->
6297
6298
				<div class="jp-id-crisis-question" id="jp-id-crisis-question-1">
6299
					<?php
6300
					// 401 means that this site has been disconnected from wpcom, but the remote site still thinks it's connected.
6301
					if ( 'error_code' == $key && '401' == $errors[ $key ] ) : ?>
6302
						<div class="banner-content">
6303
							<p><?php
6304
								/* translators: %s is a URL */
6305
								printf( __( 'Our records show that this site does not have a valid connection to WordPress.com. Please reset your connection to fix this. <a href="%s" target="_blank">What caused this?</a>', 'jetpack' ), 'https://jetpack.com/support/no-valid-wordpress-com-connection/' );
6306
							?></p>
6307
						</div>
6308
						<div class="jp-btn-group">
6309
							<a href="#" class="reset-connection"><?php _e( 'Reset the connection', 'jetpack' ); ?></a>
6310
							<span class="idc-separator">|</span>
6311
							<a href="<?php echo esc_url( wp_nonce_url( Jetpack::admin_url( 'jetpack-notice=dismiss' ), 'jetpack-deactivate' ) ); ?>"><?php _e( 'Deactivate Jetpack', 'jetpack' ); ?></a>
6312
						</div>
6313
					<?php else : ?>
6314
							<div class="banner-content">
6315
							<p><?php printf( __( 'It looks like you may have changed your domain. Is <strong>%1$s</strong> still your site\'s domain, or have you updated it to <strong> %2$s </strong>?', 'jetpack' ), $errors[ $key ], (string) get_option( $key ) ); ?></p>
6316
							</div>
6317
						<div class="jp-btn-group">
6318
							<a href="#" class="regular site-moved"><?php printf( __( '%s is now my domain.', 'jetpack' ), $errors[ $key ] ); ?></a> <span class="idc-separator">|</span> <a href="#" class="site-not-moved" ><?php printf( __( '%s is still my domain.', 'jetpack' ), (string) get_option( $key ) ); ?></a>
6319
							<span class="spinner"></span>
6320
						</div>
6321
					<?php endif ; ?>
6322
				</div>
6323
6324
				<div class="jp-id-crisis-question" id="jp-id-crisis-question-2" style="display: none;">
6325
					<div class="banner-content">
6326
						<p><?php printf(
6327
							/* translators: %1$s, %2$s and %3$s are URLs */
6328
							__(
6329
								'Are <strong> %2$s </strong> and <strong> %1$s </strong> two completely separate websites? If so we should create a new connection, which will reset your followers and linked services. <a href="%3$s"><em>What does this mean?</em></a>',
6330
								'jetpack'
6331
							),
6332
							$errors[ $key ],
6333
							(string) get_option( $key ),
6334
							'https://jetpack.com/support/what-does-resetting-the-connection-mean/'
6335
						); ?></p>
6336
					</div>
6337
					<div class="jp-btn-group">
6338
						<a href="#" class="reset-connection"><?php _e( 'Reset the connection', 'jetpack' ); ?></a> <span class="idc-separator">|</span>
6339
						<a href="#" class="is-dev-env"><?php _e( 'This is a development environment', 'jetpack' ); ?></a> <span class="idc-separator">|</span>
6340
						<a href="https://jetpack.com/contact-support/" class="contact-support"><?php _e( 'Submit a support ticket', 'jetpack' ); ?></a>
6341
						<span class="spinner"></span>
6342
					</div>
6343
				</div>
6344
6345
				<div class="jp-id-crisis-success" id="jp-id-crisis-success" style="display: none;">
6346
					<h3 class="success-notice"><?php printf( __( 'Thanks for taking the time to sort things out. We&#039;ve updated our records accordingly!', 'jetpack' ) ); ?></h3>
6347
				</div>
6348
			</div>
6349
		</div>
6350
6351
		<?php
6352
	}
6353
6354
	/**
6355
	 * Maybe Use a .min.css stylesheet, maybe not.
6356
	 *
6357
	 * Hooks onto `plugins_url` filter at priority 1, and accepts all 3 args.
6358
	 */
6359
	public static function maybe_min_asset( $url, $path, $plugin ) {
6360
		// Short out on things trying to find actual paths.
6361
		if ( ! $path || empty( $plugin ) ) {
6362
			return $url;
6363
		}
6364
6365
		// Strip out the abspath.
6366
		$base = dirname( plugin_basename( $plugin ) );
6367
6368
		// Short out on non-Jetpack assets.
6369
		if ( 'jetpack/' !== substr( $base, 0, 8 ) ) {
6370
			return $url;
6371
		}
6372
6373
		// File name parsing.
6374
		$file              = "{$base}/{$path}";
6375
		$full_path         = JETPACK__PLUGIN_DIR . substr( $file, 8 );
6376
		$file_name         = substr( $full_path, strrpos( $full_path, '/' ) + 1 );
6377
		$file_name_parts_r = array_reverse( explode( '.', $file_name ) );
6378
		$extension         = array_shift( $file_name_parts_r );
6379
6380
		if ( in_array( strtolower( $extension ), array( 'css', 'js' ) ) ) {
6381
			// Already pointing at the minified version.
6382
			if ( 'min' === $file_name_parts_r[0] ) {
6383
				return $url;
6384
			}
6385
6386
			$min_full_path = preg_replace( "#\.{$extension}$#", ".min.{$extension}", $full_path );
6387
			if ( file_exists( $min_full_path ) ) {
6388
				$url = preg_replace( "#\.{$extension}$#", ".min.{$extension}", $url );
6389
			}
6390
		}
6391
6392
		return $url;
6393
	}
6394
6395
	/**
6396
	 * Maybe inlines a stylesheet.
6397
	 *
6398
	 * If you'd like to inline a stylesheet instead of printing a link to it,
6399
	 * wp_style_add_data( 'handle', 'jetpack-inline', true );
6400
	 *
6401
	 * Attached to `style_loader_tag` filter.
6402
	 *
6403
	 * @param string $tag The tag that would link to the external asset.
6404
	 * @param string $handle The registered handle of the script in question.
6405
	 *
6406
	 * @return string
6407
	 */
6408
	public static function maybe_inline_style( $tag, $handle ) {
6409
		global $wp_styles;
6410
		$item = $wp_styles->registered[ $handle ];
6411
6412
		if ( ! isset( $item->extra['jetpack-inline'] ) || ! $item->extra['jetpack-inline'] ) {
6413
			return $tag;
6414
		}
6415
6416
		if ( preg_match( '# href=\'([^\']+)\' #i', $tag, $matches ) ) {
6417
			$href = $matches[1];
6418
			// Strip off query string
6419
			if ( $pos = strpos( $href, '?' ) ) {
6420
				$href = substr( $href, 0, $pos );
6421
			}
6422
			// Strip off fragment
6423
			if ( $pos = strpos( $href, '#' ) ) {
6424
				$href = substr( $href, 0, $pos );
6425
			}
6426
		} else {
6427
			return $tag;
6428
		}
6429
6430
		$plugins_dir = plugin_dir_url( JETPACK__PLUGIN_FILE );
6431
		if ( $plugins_dir !== substr( $href, 0, strlen( $plugins_dir ) ) ) {
6432
			return $tag;
6433
		}
6434
6435
		// If this stylesheet has a RTL version, and the RTL version replaces normal...
6436
		if ( isset( $item->extra['rtl'] ) && 'replace' === $item->extra['rtl'] && is_rtl() ) {
6437
			// And this isn't the pass that actually deals with the RTL version...
6438
			if ( false === strpos( $tag, " id='$handle-rtl-css' " ) ) {
6439
				// Short out, as the RTL version will deal with it in a moment.
6440
				return $tag;
6441
			}
6442
		}
6443
6444
		$file = JETPACK__PLUGIN_DIR . substr( $href, strlen( $plugins_dir ) );
6445
		$css  = Jetpack::absolutize_css_urls( file_get_contents( $file ), $href );
6446
		if ( $css ) {
6447
			$tag = "<!-- Inline {$item->handle} -->\r\n";
6448
			if ( empty( $item->extra['after'] ) ) {
6449
				wp_add_inline_style( $handle, $css );
6450
			} else {
6451
				array_unshift( $item->extra['after'], $css );
6452
				wp_style_add_data( $handle, 'after', $item->extra['after'] );
6453
			}
6454
		}
6455
6456
		return $tag;
6457
	}
6458
6459
	/**
6460
	 * Loads a view file from the views
6461
	 *
6462
	 * Data passed in with the $data parameter will be available in the
6463
	 * template file as $data['value']
6464
	 *
6465
	 * @param string $template - Template file to load
6466
	 * @param array $data - Any data to pass along to the template
6467
	 * @return boolean - If template file was found
6468
	 **/
6469
	public function load_view( $template, $data = array() ) {
6470
		$views_dir = JETPACK__PLUGIN_DIR . 'views/';
6471
6472
		if( file_exists( $views_dir . $template ) ) {
6473
			require_once( $views_dir . $template );
6474
			return true;
6475
		}
6476
6477
		error_log( "Jetpack: Unable to find view file $views_dir$template" );
6478
		return false;
6479
	}
6480
6481
	/**
6482
	 * Sends a ping to the Jetpack servers to toggle on/off remote portions
6483
	 * required by some modules.
6484
	 *
6485
	 * @param string $module_slug
6486
	 */
6487
	public function toggle_module_on_wpcom( $module_slug ) {
6488
		Jetpack::init()->sync->register( 'noop' );
6489
6490
		if ( false !== strpos( current_filter(), 'jetpack_activate_module_' ) ) {
6491
			self::check_privacy( $module_slug );
6492
		}
6493
6494
	}
6495
6496
	/**
6497
	 * Throws warnings for deprecated hooks to be removed from Jetpack
6498
	 */
6499
	public function deprecated_hooks() {
6500
		global $wp_filter;
6501
6502
		/*
6503
		 * Format:
6504
		 * deprecated_filter_name => replacement_name
6505
		 *
6506
		 * If there is no replacement us null for replacement_name
6507
		 */
6508
		$deprecated_list = array(
6509
			'jetpack_bail_on_shortcode' => 'jetpack_shortcodes_to_include',
6510
			'wpl_sharing_2014_1'        => null,
6511
			'jetpack-tools-to-include'  => 'jetpack_tools_to_include',
6512
		);
6513
6514
		// This is a silly loop depth. Better way?
6515
		foreach( $deprecated_list AS $hook => $hook_alt ) {
6516
			if( isset( $wp_filter[ $hook ] ) && is_array( $wp_filter[ $hook ] ) ) {
6517
				foreach( $wp_filter[$hook] AS $func => $values ) {
6518
					foreach( $values AS $hooked ) {
6519
						_deprecated_function( $hook . ' used for ' . $hooked['function'], null, $hook_alt );
6520
					}
6521
				}
6522
			}
6523
		}
6524
	}
6525
6526
	/**
6527
	 * Converts any url in a stylesheet, to the correct absolute url.
6528
	 *
6529
	 * Considerations:
6530
	 *  - Normal, relative URLs     `feh.png`
6531
	 *  - Data URLs                 `data:image/gif;base64,eh129ehiuehjdhsa==`
6532
	 *  - Schema-agnostic URLs      `//domain.com/feh.png`
6533
	 *  - Absolute URLs             `http://domain.com/feh.png`
6534
	 *  - Domain root relative URLs `/feh.png`
6535
	 *
6536
	 * @param $css string: The raw CSS -- should be read in directly from the file.
6537
	 * @param $css_file_url : The URL that the file can be accessed at, for calculating paths from.
6538
	 *
6539
	 * @return mixed|string
6540
	 */
6541
	public static function absolutize_css_urls( $css, $css_file_url ) {
6542
		$pattern = '#url\((?P<path>[^)]*)\)#i';
6543
		$css_dir = dirname( $css_file_url );
6544
		$p       = parse_url( $css_dir );
6545
		$domain  = sprintf(
6546
					'%1$s//%2$s%3$s%4$s',
6547
					isset( $p['scheme'] )           ? "{$p['scheme']}:" : '',
6548
					isset( $p['user'], $p['pass'] ) ? "{$p['user']}:{$p['pass']}@" : '',
6549
					$p['host'],
6550
					isset( $p['port'] )             ? ":{$p['port']}" : ''
6551
				);
6552
6553
		if ( preg_match_all( $pattern, $css, $matches, PREG_SET_ORDER ) ) {
6554
			$find = $replace = array();
6555
			foreach ( $matches as $match ) {
6556
				$url = trim( $match['path'], "'\" \t" );
6557
6558
				// If this is a data url, we don't want to mess with it.
6559
				if ( 'data:' === substr( $url, 0, 5 ) ) {
6560
					continue;
6561
				}
6562
6563
				// If this is an absolute or protocol-agnostic url,
6564
				// we don't want to mess with it.
6565
				if ( preg_match( '#^(https?:)?//#i', $url ) ) {
6566
					continue;
6567
				}
6568
6569
				switch ( substr( $url, 0, 1 ) ) {
6570
					case '/':
6571
						$absolute = $domain . $url;
6572
						break;
6573
					default:
6574
						$absolute = $css_dir . '/' . $url;
6575
				}
6576
6577
				$find[]    = $match[0];
6578
				$replace[] = sprintf( 'url("%s")', $absolute );
6579
			}
6580
			$css = str_replace( $find, $replace, $css );
6581
		}
6582
6583
		return $css;
6584
	}
6585
6586
	/**
6587
	 * This method checks to see if SSL is required by the site in
6588
	 * order to visit it in some way other than only setting the
6589
	 * https value in the home or siteurl values.
6590
	 *
6591
	 * @since 3.2
6592
	 * @return boolean
6593
	 **/
6594
	private function is_ssl_required_to_visit_site() {
6595
		global $wp_version;
6596
		$ssl = is_ssl();
6597
6598
		if ( force_ssl_admin() ) {
6599
			$ssl = true;
6600
		}
6601
		return $ssl;
6602
	}
6603
6604
	/**
6605
	 * This methods removes all of the registered css files on the frontend
6606
	 * from Jetpack in favor of using a single file. In effect "imploding"
6607
	 * all the files into one file.
6608
	 *
6609
	 * Pros:
6610
	 * - Uses only ONE css asset connection instead of 15
6611
	 * - Saves a minimum of 56k
6612
	 * - Reduces server load
6613
	 * - Reduces time to first painted byte
6614
	 *
6615
	 * Cons:
6616
	 * - Loads css for ALL modules. However all selectors are prefixed so it
6617
	 *		should not cause any issues with themes.
6618
	 * - Plugins/themes dequeuing styles no longer do anything. See
6619
	 *		jetpack_implode_frontend_css filter for a workaround
6620
	 *
6621
	 * For some situations developers may wish to disable css imploding and
6622
	 * instead operate in legacy mode where each file loads seperately and
6623
	 * can be edited individually or dequeued. This can be accomplished with
6624
	 * the following line:
6625
	 *
6626
	 * add_filter( 'jetpack_implode_frontend_css', '__return_false' );
6627
	 *
6628
	 * @since 3.2
6629
	 **/
6630
	public function implode_frontend_css( $travis_test = false ) {
6631
		$do_implode = true;
6632
		if ( defined( 'SCRIPT_DEBUG' ) && SCRIPT_DEBUG ) {
6633
			$do_implode = false;
6634
		}
6635
6636
		/**
6637
		 * Allow CSS to be concatenated into a single jetpack.css file.
6638
		 *
6639
		 * @since 3.2.0
6640
		 *
6641
		 * @param bool $do_implode Should CSS be concatenated? Default to true.
6642
		 */
6643
		$do_implode = apply_filters( 'jetpack_implode_frontend_css', $do_implode );
6644
6645
		// Do not use the imploded file when default behaviour was altered through the filter
6646
		if ( ! $do_implode ) {
6647
			return;
6648
		}
6649
6650
		// We do not want to use the imploded file in dev mode, or if not connected
6651
		if ( Jetpack::is_development_mode() || ! self::is_active() ) {
6652
			if ( ! $travis_test ) {
6653
				return;
6654
			}
6655
		}
6656
6657
		// Do not use the imploded file if sharing css was dequeued via the sharing settings screen
6658
		if ( get_option( 'sharedaddy_disable_resources' ) ) {
6659
			return;
6660
		}
6661
6662
		/*
6663
		 * Now we assume Jetpack is connected and able to serve the single
6664
		 * file.
6665
		 *
6666
		 * In the future there will be a check here to serve the file locally
6667
		 * or potentially from the Jetpack CDN
6668
		 *
6669
		 * For now:
6670
		 * - Enqueue a single imploded css file
6671
		 * - Zero out the style_loader_tag for the bundled ones
6672
		 * - Be happy, drink scotch
6673
		 */
6674
6675
		add_filter( 'style_loader_tag', array( $this, 'concat_remove_style_loader_tag' ), 10, 2 );
6676
6677
		$version = Jetpack::is_development_version() ? filemtime( JETPACK__PLUGIN_DIR . 'css/jetpack.css' ) : JETPACK__VERSION;
6678
6679
		wp_enqueue_style( 'jetpack_css', plugins_url( 'css/jetpack.css', __FILE__ ), array(), $version );
6680
		wp_style_add_data( 'jetpack_css', 'rtl', 'replace' );
6681
	}
6682
6683
	function concat_remove_style_loader_tag( $tag, $handle ) {
6684
		if ( in_array( $handle, $this->concatenated_style_handles ) ) {
6685
			$tag = '';
6686
			if ( defined( 'WP_DEBUG' ) && WP_DEBUG ) {
6687
				$tag = "<!-- `" . esc_html( $handle ) . "` is included in the concatenated jetpack.css -->\r\n";
6688
			}
6689
		}
6690
6691
		return $tag;
6692
	}
6693
6694
	/*
6695
	 * Check the heartbeat data
6696
	 *
6697
	 * Organizes the heartbeat data by severity.  For example, if the site
6698
	 * is in an ID crisis, it will be in the $filtered_data['bad'] array.
6699
	 *
6700
	 * Data will be added to "caution" array, if it either:
6701
	 *  - Out of date Jetpack version
6702
	 *  - Out of date WP version
6703
	 *  - Out of date PHP version
6704
	 *
6705
	 * $return array $filtered_data
6706
	 */
6707
	public static function jetpack_check_heartbeat_data() {
6708
		$raw_data = Jetpack_Heartbeat::generate_stats_array();
6709
6710
		$good    = array();
6711
		$caution = array();
6712
		$bad     = array();
6713
6714
		foreach ( $raw_data as $stat => $value ) {
6715
6716
			// Check jetpack version
6717
			if ( 'version' == $stat ) {
6718
				if ( version_compare( $value, JETPACK__VERSION, '<' ) ) {
6719
					$caution[ $stat ] = $value . " - min supported is " . JETPACK__VERSION;
6720
					continue;
6721
				}
6722
			}
6723
6724
			// Check WP version
6725
			if ( 'wp-version' == $stat ) {
6726
				if ( version_compare( $value, JETPACK__MINIMUM_WP_VERSION, '<' ) ) {
6727
					$caution[ $stat ] = $value . " - min supported is " . JETPACK__MINIMUM_WP_VERSION;
6728
					continue;
6729
				}
6730
			}
6731
6732
			// Check PHP version
6733
			if ( 'php-version' == $stat ) {
6734
				if ( version_compare( PHP_VERSION, '5.2.4', '<' ) ) {
6735
					$caution[ $stat ] = $value . " - min supported is 5.2.4";
6736
					continue;
6737
				}
6738
			}
6739
6740
			// Check ID crisis
6741
			if ( 'identitycrisis' == $stat ) {
6742
				if ( 'yes' == $value ) {
6743
					$bad[ $stat ] = $value;
6744
					continue;
6745
				}
6746
			}
6747
6748
			// The rest are good :)
6749
			$good[ $stat ] = $value;
6750
		}
6751
6752
		$filtered_data = array(
6753
			'good'    => $good,
6754
			'caution' => $caution,
6755
			'bad'     => $bad
6756
		);
6757
6758
		return $filtered_data;
6759
	}
6760
6761
6762
	/*
6763
	 * This method is used to organize all options that can be reset
6764
	 * without disconnecting Jetpack.
6765
	 *
6766
	 * It is used in class.jetpack-cli.php to reset options
6767
	 *
6768
	 * @return array of options to delete.
6769
	 */
6770
	public static function get_jetpack_options_for_reset() {
6771
		$jetpack_options            = Jetpack_Options::get_option_names();
6772
		$jetpack_options_non_compat = Jetpack_Options::get_option_names( 'non_compact' );
6773
		$jetpack_options_private    = Jetpack_Options::get_option_names( 'private' );
6774
6775
		$all_jp_options = array_merge( $jetpack_options, $jetpack_options_non_compat, $jetpack_options_private );
6776
6777
		// A manual build of the wp options
6778
		$wp_options = array(
6779
			'sharing-options',
6780
			'disabled_likes',
6781
			'disabled_reblogs',
6782
			'jetpack_comments_likes_enabled',
6783
			'wp_mobile_excerpt',
6784
			'wp_mobile_featured_images',
6785
			'wp_mobile_app_promos',
6786
			'stats_options',
6787
			'stats_dashboard_widget',
6788
			'safecss_preview_rev',
6789
			'safecss_rev',
6790
			'safecss_revision_migrated',
6791
			'nova_menu_order',
6792
			'jetpack_portfolio',
6793
			'jetpack_portfolio_posts_per_page',
6794
			'jetpack_testimonial',
6795
			'jetpack_testimonial_posts_per_page',
6796
			'wp_mobile_custom_css',
6797
			'sharedaddy_disable_resources',
6798
			'sharing-options',
6799
			'sharing-services',
6800
			'site_icon_temp_data',
6801
			'featured-content',
6802
			'site_logo',
6803
		);
6804
6805
		// Flag some Jetpack options as unsafe
6806
		$unsafe_options = array(
6807
			'id',                           // (int)    The Client ID/WP.com Blog ID of this site.
6808
			'master_user',                  // (int)    The local User ID of the user who connected this site to jetpack.wordpress.com.
6809
			'version',                      // (string) Used during upgrade procedure to auto-activate new modules. version:time
6810
			'jumpstart',                    // (string) A flag for whether or not to show the Jump Start.  Accepts: new_connection, jumpstart_activated, jetpack_action_taken, jumpstart_dismissed.
6811
6812
			// non_compact
6813
			'activated',
6814
6815
			// private
6816
			'register',
6817
			'blog_token',                  // (string) The Client Secret/Blog Token of this site.
6818
			'user_token',                  // (string) The User Token of this site. (deprecated)
6819
			'user_tokens'
6820
		);
6821
6822
		// Remove the unsafe Jetpack options
6823
		foreach ( $unsafe_options as $unsafe_option ) {
6824
			if ( false !== ( $key = array_search( $unsafe_option, $all_jp_options ) ) ) {
6825
				unset( $all_jp_options[ $key ] );
6826
			}
6827
		}
6828
6829
		$options = array(
6830
			'jp_options' => $all_jp_options,
6831
			'wp_options' => $wp_options
6832
		);
6833
6834
		return $options;
6835
	}
6836
6837
	/*
6838
	 * Check if an option of a Jetpack module has been updated.
6839
	 *
6840
	 * If any module option has been updated before Jump Start has been dismissed,
6841
	 * update the 'jumpstart' option so we can hide Jump Start.
6842
	 */
6843
	public static function jumpstart_has_updated_module_option( $option_name = '' ) {
6844
		// Bail if Jump Start has already been dismissed
6845
		if ( 'new_connection' !== Jetpack::get_option( 'jumpstart' ) ) {
6846
			return false;
6847
		}
6848
6849
		$jetpack = Jetpack::init();
6850
6851
6852
		// Manual build of module options
6853
		$option_names = self::get_jetpack_options_for_reset();
6854
6855
		if ( in_array( $option_name, $option_names['wp_options'] ) ) {
6856
			Jetpack_Options::update_option( 'jumpstart', 'jetpack_action_taken' );
6857
6858
			//Jump start is being dismissed send data to MC Stats
6859
			$jetpack->stat( 'jumpstart', 'manual,'.$option_name );
6860
6861
			$jetpack->do_stats( 'server_side' );
6862
		}
6863
6864
	}
6865
6866
	/*
6867
	 * Strip http:// or https:// from a url, replaces forward slash with ::,
6868
	 * so we can bring them directly to their site in calypso.
6869
	 *
6870
	 * @param string | url
6871
	 * @return string | url without the guff
6872
	 */
6873
	public static function build_raw_urls( $url ) {
6874
		$strip_http = '/.*?:\/\//i';
6875
		$url = preg_replace( $strip_http, '', $url  );
6876
		$url = str_replace( '/', '::', $url );
6877
		return $url;
6878
	}
6879
6880
	/**
6881
	 * Stores and prints out domains to prefetch for page speed optimization.
6882
	 *
6883
	 * @param mixed $new_urls
6884
	 */
6885
	public static function dns_prefetch( $new_urls = null ) {
6886
		static $prefetch_urls = array();
6887
		if ( empty( $new_urls ) && ! empty( $prefetch_urls ) ) {
6888
			echo "\r\n";
6889
			foreach ( $prefetch_urls as $this_prefetch_url ) {
6890
				printf( "<link rel='dns-prefetch' href='%s'>\r\n", esc_attr( $this_prefetch_url ) );
6891
			}
6892
		} elseif ( ! empty( $new_urls ) ) {
6893
			if ( ! has_action( 'wp_head', array( __CLASS__, __FUNCTION__ ) ) ) {
6894
				add_action( 'wp_head', array( __CLASS__, __FUNCTION__ ) );
6895
			}
6896
			foreach ( (array) $new_urls as $this_new_url ) {
6897
				$prefetch_urls[] = strtolower( untrailingslashit( preg_replace( '#^https?://#i', '//', $this_new_url ) ) );
6898
			}
6899
			$prefetch_urls = array_unique( $prefetch_urls );
6900
		}
6901
	}
6902
6903
	public function wp_dashboard_setup() {
6904
		if ( self::is_active() ) {
6905
			add_action( 'jetpack_dashboard_widget', array( __CLASS__, 'dashboard_widget_footer' ), 999 );
6906
			$widget_title = __( 'Site Stats', 'jetpack' );
6907
		} elseif ( ! self::is_development_mode() && current_user_can( 'jetpack_connect' ) ) {
6908
			add_action( 'jetpack_dashboard_widget', array( $this, 'dashboard_widget_connect_to_wpcom' ) );
6909
			$widget_title = __( 'Please Connect Jetpack', 'jetpack' );
6910
		}
6911
6912
		if ( has_action( 'jetpack_dashboard_widget' ) ) {
6913
			wp_add_dashboard_widget(
6914
				'jetpack_summary_widget',
6915
				$widget_title,
6916
				array( __CLASS__, 'dashboard_widget' )
6917
			);
6918
			wp_enqueue_style( 'jetpack-dashboard-widget', plugins_url( 'css/dashboard-widget.css', JETPACK__PLUGIN_FILE ), array(), JETPACK__VERSION );
6919
6920
			// If we're inactive and not in development mode, sort our box to the top.
6921
			if ( ! self::is_active() && ! self::is_development_mode() ) {
6922
				global $wp_meta_boxes;
6923
6924
				$dashboard = $wp_meta_boxes['dashboard']['normal']['core'];
6925
				$ours      = array( 'jetpack_summary_widget' => $dashboard['jetpack_summary_widget'] );
6926
6927
				$wp_meta_boxes['dashboard']['normal']['core'] = array_merge( $ours, $dashboard );
6928
			}
6929
		}
6930
	}
6931
6932
	/**
6933
	 * @param mixed $result Value for the user's option
6934
	 * @return mixed
6935
	 */
6936
	function get_user_option_meta_box_order_dashboard( $sorted ) {
6937
		if ( ! is_array( $sorted ) ) {
6938
			return $sorted;
6939
		}
6940
6941
		foreach ( $sorted as $box_context => $ids ) {
6942
			if ( false === strpos( $ids, 'dashboard_stats' ) ) {
6943
				// If the old id isn't anywhere in the ids, don't bother exploding and fail out.
6944
				continue;
6945
			}
6946
6947
			$ids_array = explode( ',', $ids );
6948
			$key = array_search( 'dashboard_stats', $ids_array );
6949
6950
			if ( false !== $key ) {
6951
				// If we've found that exact value in the option (and not `google_dashboard_stats` for example)
6952
				$ids_array[ $key ] = 'jetpack_summary_widget';
6953
				$sorted[ $box_context ] = implode( ',', $ids_array );
6954
				// We've found it, stop searching, and just return.
6955
				break;
6956
			}
6957
		}
6958
6959
		return $sorted;
6960
	}
6961
6962
	public static function dashboard_widget() {
6963
		/**
6964
		 * Fires when the dashboard is loaded.
6965
		 *
6966
		 * @since 3.4.0
6967
		 */
6968
		do_action( 'jetpack_dashboard_widget' );
6969
	}
6970
6971
	public static function dashboard_widget_footer() {
6972
		?>
6973
		<footer>
6974
6975
		<div class="protect">
6976
			<?php if ( Jetpack::is_module_active( 'protect' ) ) : ?>
6977
				<h3><?php echo number_format_i18n( get_site_option( 'jetpack_protect_blocked_attempts', 0 ) ); ?></h3>
6978
				<p><?php echo esc_html_x( 'Blocked malicious login attempts', '{#} Blocked malicious login attempts -- number is on a prior line, text is a caption.', 'jetpack' ); ?></p>
6979
			<?php elseif ( current_user_can( 'jetpack_activate_modules' ) && ! self::is_development_mode() ) : ?>
6980
				<a href="<?php echo esc_url( wp_nonce_url( Jetpack::admin_url( array( 'action' => 'activate', 'module' => 'protect' ) ), 'jetpack_activate-protect' ) ); ?>" class="button button-jetpack" title="<?php esc_attr_e( 'Protect helps to keep you secure from brute-force login attacks.', 'jetpack' ); ?>">
6981
					<?php esc_html_e( 'Activate Protect', 'jetpack' ); ?>
6982
				</a>
6983
			<?php else : ?>
6984
				<?php esc_html_e( 'Protect is inactive.', 'jetpack' ); ?>
6985
			<?php endif; ?>
6986
		</div>
6987
6988
		<div class="akismet">
6989
			<?php if ( is_plugin_active( 'akismet/akismet.php' ) ) : ?>
6990
				<h3><?php echo number_format_i18n( get_option( 'akismet_spam_count', 0 ) ); ?></h3>
6991
				<p><?php echo esc_html_x( 'Spam comments blocked by Akismet.', '{#} Spam comments blocked by Akismet -- number is on a prior line, text is a caption.', 'jetpack' ); ?></p>
6992 View Code Duplication
			<?php elseif ( current_user_can( 'activate_plugins' ) && ! is_wp_error( validate_plugin( 'akismet/akismet.php' ) ) ) : ?>
6993
				<a href="<?php echo esc_url( wp_nonce_url( add_query_arg( array( 'action' => 'activate', 'plugin' => 'akismet/akismet.php' ), admin_url( 'plugins.php' ) ), 'activate-plugin_akismet/akismet.php' ) ); ?>" class="button button-jetpack">
6994
					<?php esc_html_e( 'Activate Akismet', 'jetpack' ); ?>
6995
				</a>
6996
			<?php else : ?>
6997
				<p><a href="<?php echo esc_url( 'https://akismet.com/?utm_source=jetpack&utm_medium=link&utm_campaign=Jetpack%20Dashboard%20Widget%20Footer%20Link' ); ?>"><?php esc_html_e( 'Akismet can help to keep your blog safe from spam!', 'jetpack' ); ?></a></p>
6998
			<?php endif; ?>
6999
		</div>
7000
7001
7002 View Code Duplication
		<?php if ( ! current_user_can( 'edit_posts' ) && self::is_user_connected() ) : ?>
7003
			<div style="width: 100%; text-align: center; padding-top: 20px; clear: both;"><a class="button" title="<?php esc_attr_e( 'Unlink your account from WordPress.com', 'jetpack' ); ?>" href="<?php echo esc_url( wp_nonce_url( add_query_arg( array( 'action' => 'unlink', 'redirect' => 'sub-unlink' ), admin_url( 'index.php' ) ), 'jetpack-unlink' ) ); ?>"><?php esc_html_e( 'Unlink your account from WordPress.com', 'jetpack' ); ?></a></div>
7004
		<?php endif; ?>
7005
7006
		</footer>
7007
		<?php
7008
	}
7009
7010
	public function dashboard_widget_connect_to_wpcom() {
7011
		if ( Jetpack::is_active() || Jetpack::is_development_mode() || ! current_user_can( 'jetpack_connect' ) ) {
7012
			return;
7013
		}
7014
		?>
7015
		<div class="wpcom-connect">
7016
			<div class="jp-emblem">
7017
			<svg xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" version="1.1" id="Layer_1" x="0" y="0" viewBox="0 0 172.9 172.9" enable-background="new 0 0 172.9 172.9" xml:space="preserve">
7018
				<path d="M86.4 0C38.7 0 0 38.7 0 86.4c0 47.7 38.7 86.4 86.4 86.4s86.4-38.7 86.4-86.4C172.9 38.7 134.2 0 86.4 0zM83.1 106.6l-27.1-6.9C49 98 45.7 90.1 49.3 84l33.8-58.5V106.6zM124.9 88.9l-33.8 58.5V66.3l27.1 6.9C125.1 74.9 128.4 82.8 124.9 88.9z"/>
7019
			</svg>
7020
			</div>
7021
			<h3><?php esc_html_e( 'Please Connect Jetpack', 'jetpack' ); ?></h3>
7022
			<p><?php echo wp_kses( __( 'Connecting Jetpack will show you <strong>stats</strong> about your traffic, <strong>protect</strong> you from brute force attacks, <strong>speed up</strong> your images and photos, and enable other <strong>traffic and security</strong> features.', 'jetpack' ), 'jetpack' ) ?></p>
7023
7024
			<div class="actions">
7025
				<a href="<?php echo $this->build_connect_url( false, false, 'widget-btn' ); ?>" class="button button-primary">
0 ignored issues
show
'widget-btn' is of type string, but the function expects a boolean.

It seems like the type of the argument is not accepted by the function/method which you are calling.

In some cases, in particular if PHP’s automatic type-juggling kicks in this might be fine. In other cases, however this might be a bug.

We suggest to add an explicit type cast like in the following example:

function acceptsInteger($int) { }

$x = '123'; // string "123"

// Instead of
acceptsInteger($x);

// we recommend to use
acceptsInteger((integer) $x);
Loading history...
7026
					<?php esc_html_e( 'Connect Jetpack', 'jetpack' ); ?>
7027
				</a>
7028
			</div>
7029
		</div>
7030
		<?php
7031
	}
7032
7033
	/*
7034
	 * A graceful transition to using Core's site icon.
7035
	 *
7036
	 * All of the hard work has already been done with the image
7037
	 * in all_done_page(). All that needs to be done now is update
7038
	 * the option and display proper messaging.
7039
	 *
7040
	 * @todo remove when WP 4.3 is minimum
7041
	 *
7042
	 * @since 3.6.1
7043
	 *
7044
	 * @return bool false = Core's icon not available || true = Core's icon is available
7045
	 */
7046
	public static function jetpack_site_icon_available_in_core() {
7047
		global $wp_version;
7048
		$core_icon_available = function_exists( 'has_site_icon' ) && version_compare( $wp_version, '4.3-beta' ) >= 0;
7049
7050
		if ( ! $core_icon_available ) {
7051
			return false;
7052
		}
7053
7054
		// No need for Jetpack's site icon anymore if core's is already set
7055
		if ( has_site_icon() ) {
7056
			if ( Jetpack::is_module_active( 'site-icon' ) ) {
7057
				Jetpack::log( 'deactivate', 'site-icon' );
7058
				Jetpack::deactivate_module( 'site-icon' );
7059
			}
7060
			return true;
7061
		}
7062
7063
		// Transfer Jetpack's site icon to use core.
7064
		$site_icon_id = Jetpack::get_option( 'site_icon_id' );
7065
		if ( $site_icon_id ) {
7066
			// Update core's site icon
7067
			update_option( 'site_icon', $site_icon_id );
7068
7069
			// Delete Jetpack's icon option. We still want the blavatar and attached data though.
7070
			delete_option( 'site_icon_id' );
7071
		}
7072
7073
		// No need for Jetpack's site icon anymore
7074
		if ( Jetpack::is_module_active( 'site-icon' ) ) {
7075
			Jetpack::log( 'deactivate', 'site-icon' );
7076
			Jetpack::deactivate_module( 'site-icon' );
7077
		}
7078
7079
		return true;
7080
	}
7081
7082
}
7083