wp-admin/plugins.php

   1 <?php
   2 /**
   3  * Plugins administration panel.
   4  *
   5  * @package WordPress
   6  * @subpackage Administration
   7  */
   8
   9 /** WordPress Administration Bootstrap */
  10 require_once('./admin.php');
  11
  12 if ( is_multisite() ) {
  13         $menu_perms = get_site_option( 'menu_items', array() );
  14
  15         if ( empty( $menu_perms['plugins'] ) && ! is_super_admin() )
  16                 wp_die( __( 'Cheatin&#8217; uh?' ) );
  17 }
  18
  19 if ( !current_user_can('activate_plugins') )
  20         wp_die( __( 'You do not have sufficient permissions to manage plugins for this site.' ) );
  21
  22 $wp_list_table = _get_list_table('WP_Plugins_List_Table');
  23 $pagenum = $wp_list_table->get_pagenum();
  24
  25 $action = $wp_list_table->current_action();
  26
  27 $plugin = isset($_REQUEST['plugin']) ? $_REQUEST['plugin'] : '';
  28 $s = isset($_REQUEST['s']) ? $_REQUEST['s'] : '';
  29
  30 // Clean up request URI from temporary args for screen options/paging uri's to work as expected.
  31 $_SERVER['REQUEST_URI'] = remove_query_arg(array('error', 'deleted', 'activate', 'activate-multi', 'deactivate', 'deactivate-multi', '_error_nonce'), $_SERVER['REQUEST_URI']);
  32
  33 if ( $action ) {
  34         $network_wide = false;
  35         if ( ( isset( $_GET['networkwide'] ) || 'network-activate-selected' == $action ) && is_multisite() && current_user_can( 'manage_network_plugins' ) )
  36                 $network_wide = true;
  37
  38         switch ( $action ) {
  39                 case 'activate':
  40                         if ( ! current_user_can('activate_plugins') )
  41                                 wp_die(__('You do not have sufficient permissions to activate plugins for this site.'));
  42
  43                         check_admin_referer('activate-plugin_' . $plugin);
  44
  45                         $result = activate_plugin($plugin, self_admin_url('plugins.php?error=true&plugin=' . $plugin), $network_wide);
  46                         if ( is_wp_error( $result ) ) {
  47                                 if ( 'unexpected_output' == $result->get_error_code() ) {
  48                                         $redirect = self_admin_url('plugins.php?error=true&charsout=' . strlen($result->get_error_data()) . '&plugin=' . $plugin . "&plugin_status=$status&paged=$page&s=$s");
  49                                         wp_redirect(add_query_arg('_error_nonce', wp_create_nonce('plugin-activation-error_' . $plugin), $redirect));
  50                                         exit;
  51                                 } else {
  52                                         wp_die($result);
  53                                 }
  54                         }
  55
  56                         $recent = (array)get_option('recently_activated');
  57                         if ( isset($recent[ $plugin ]) ) {
  58                                 unset($recent[ $plugin ]);
  59                                 update_option('recently_activated', $recent);
  60                         }
  61                         if ( isset($_GET['from']) && 'import' == $_GET['from'] ) {
  62                                 wp_redirect( self_admin_url("import.php?import=" . str_replace('-importer', '', dirname($plugin))) ); // overrides the ?error=true one above and redirects to the Imports page, striping the -importer suffix
  63                         } else {
  64                                 wp_redirect( self_admin_url("plugins.php?activate=true&plugin_status=$status&paged=$page&s=$s") ); // overrides the ?error=true one above
  65                         }
  66                         exit;
  67                         break;
  68                 case 'activate-selected':
  69                 case 'network-activate-selected':
  70                         if ( ! current_user_can('activate_plugins') )
  71                                 wp_die(__('You do not have sufficient permissions to activate plugins for this site.'));
  72
  73                         check_admin_referer('bulk-plugins');
  74
  75                         $plugins = isset( $_POST['checked'] ) ? (array) $_POST['checked'] : array();
  76
  77                         // Only activate plugins which are not already active.
  78                         $check = $network_wide ? 'is_plugin_active_for_network' : 'is_plugin_active';
  79                         foreach ( $plugins as $i => $plugin )
  80                                 if ( $check( $plugin ) )
  81                                         unset( $plugins[ $i ] );
  82
  83                         if ( empty($plugins) ) {
  84                                 wp_redirect( self_admin_url("plugins.php?plugin_status=$status&paged=$page&s=$s") );
  85                                 exit;
  86                         }
  87
  88                         activate_plugins($plugins, self_admin_url('plugins.php?error=true'), $network_wide);
  89
  90                         $recent = (array)get_option('recently_activated');
  91                         foreach ( $plugins as $plugin => $time)
  92                                 if ( isset($recent[ $plugin ]) )
  93                                         unset($recent[ $plugin ]);
  94
  95                         update_option('recently_activated', $recent);
  96
  97                         wp_redirect( self_admin_url("plugins.php?activate-multi=true&plugin_status=$status&paged=$page&s=$s") );
  98                         exit;
  99                         break;
 100                 case 'update-selected' :
 101
 102                         check_admin_referer( 'bulk-plugins' );
 103
 104                         if ( isset( $_GET['plugins'] ) )
 105                                 $plugins = explode( ',', $_GET['plugins'] );
 106                         elseif ( isset( $_POST['checked'] ) )
 107                                 $plugins = (array) $_POST['checked'];
 108                         else
 109                                 $plugins = array();
 110
 111                         $title = __( 'Update Plugins' );
 112                         $parent_file = 'plugins.php';
 113
 114                         require_once(ABSPATH . 'wp-admin/admin-header.php');
 115
 116                         echo '<div class="wrap">';
 117                         screen_icon();
 118                         echo '<h2>' . esc_html( $title ) . '</h2>';
 119
 120
 121                         $url = self_admin_url('update.php?action=update-selected&amp;plugins=' . urlencode( join(',', $plugins) ));
 122                         $url = wp_nonce_url($url, 'bulk-update-plugins');
 123
 124                         echo "<iframe src='$url' style='width: 100%; height:100%; min-height:850px;'></iframe>";
 125                         echo '</div>';
 126                         require_once(ABSPATH . 'wp-admin/admin-footer.php');
 127                         exit;
 128                         break;
 129                 case 'error_scrape':
 130                         if ( ! current_user_can('activate_plugins') )
 131                                 wp_die(__('You do not have sufficient permissions to activate plugins for this site.'));
 132
 133                         check_admin_referer('plugin-activation-error_' . $plugin);
 134
 135                         $valid = validate_plugin($plugin);
 136                         if ( is_wp_error($valid) )
 137                                 wp_die($valid);
 138
 139                         if ( ! WP_DEBUG ) {
 140                                 if ( defined('E_RECOVERABLE_ERROR') )
 141                                         error_reporting(E_CORE_ERROR | E_CORE_WARNING | E_COMPILE_ERROR | E_ERROR | E_WARNING | E_PARSE | E_USER_ERROR | E_USER_WARNING | E_RECOVERABLE_ERROR);
 142                                 else
 143                                         error_reporting(E_CORE_ERROR | E_CORE_WARNING | E_COMPILE_ERROR | E_ERROR | E_WARNING | E_PARSE | E_USER_ERROR | E_USER_WARNING);
 144                         }
 145
 146                         @ini_set('display_errors', true); //Ensure that Fatal errors are displayed.
 147                         // Go back to "sandbox" scope so we get the same errors as before
 148                         function plugin_sandbox_scrape( $plugin ) {
 149                                 include( WP_PLUGIN_DIR . '/' . $plugin );
 150                         }
 151                         plugin_sandbox_scrape( $plugin );
 152                         do_action('activate_' . $plugin);
 153                         exit;
 154                         break;
 155                 case 'deactivate':
 156                         if ( ! current_user_can('activate_plugins') )
 157                                 wp_die(__('You do not have sufficient permissions to deactivate plugins for this site.'));
 158
 159                         check_admin_referer('deactivate-plugin_' . $plugin);
 160                         deactivate_plugins($plugin);
 161                         update_option('recently_activated', array($plugin => time()) + (array)get_option('recently_activated'));
 162                         if ( headers_sent() )
 163                                 echo "<meta http-equiv='refresh' content='" . esc_attr( "0;url=plugins.php?deactivate=true&plugin_status=$status&paged=$page&s=$s" ) . "' />";
 164                         else
 165                                 wp_redirect( self_admin_url("plugins.php?deactivate=true&plugin_status=$status&paged=$page&s=$s") );
 166                         exit;
 167                         break;
 168                 case 'deactivate-selected':
 169                         if ( ! current_user_can('activate_plugins') )
 170                                 wp_die(__('You do not have sufficient permissions to deactivate plugins for this site.'));
 171
 172                         check_admin_referer('bulk-plugins');
 173
 174                         $plugins = isset( $_POST['checked'] ) ? (array) $_POST['checked'] : array();
 175                         $plugins = array_filter($plugins, 'is_plugin_active'); //Do not deactivate plugins which are already deactivated.
 176                         if ( empty($plugins) ) {
 177                                 wp_redirect( self_admin_url("plugins.php?plugin_status=$status&paged=$page&s=$s") );
 178                                 exit;
 179                         }
 180
 181                         deactivate_plugins($plugins);
 182
 183                         $deactivated = array();
 184                         foreach ( $plugins as $plugin )
 185                                 $deactivated[ $plugin ] = time();
 186
 187                         update_option('recently_activated', $deactivated + (array)get_option('recently_activated'));
 188                         wp_redirect( self_admin_url("plugins.php?deactivate-multi=true&plugin_status=$status&paged=$page&s=$s") );
 189                         exit;
 190                         break;
 191                 case 'delete-selected':
 192                         if ( ! current_user_can('delete_plugins') )
 193                                 wp_die(__('You do not have sufficient permissions to delete plugins for this site.'));
 194
 195                         check_admin_referer('bulk-plugins');
 196
 197                         //$_POST = from the plugin form; $_GET = from the FTP details screen.
 198                         $plugins = isset( $_REQUEST['checked'] ) ? (array) $_REQUEST['checked'] : array();
 199                         if ( empty( $plugins ) ) {
 200                                 wp_redirect( self_admin_url("plugins.php?plugin_status=$status&paged=$page&s=$s") );
 201                                 exit;
 202                         }
 203
 204                         $plugins = array_filter($plugins, 'is_plugin_inactive'); // Do not allow to delete Activated plugins.
 205                         if ( empty( $plugins ) ) {
 206                                 wp_redirect( self_admin_url( "plugins.php?error=true&main=true&plugin_status=$status&paged=$page&s=$s" ) );
 207                                 exit;
 208                         }
 209
 210                         include(ABSPATH . 'wp-admin/update.php');
 211
 212                         $parent_file = 'plugins.php';
 213
 214                         if ( ! isset($_REQUEST['verify-delete']) ) {
 215                                 wp_enqueue_script('jquery');
 216                                 require_once(ABSPATH . 'wp-admin/admin-header.php');
 217                                 ?>
 218                         <div class="wrap">
 219                                 <?php
 220                                         $files_to_delete = $plugin_info = array();
 221                                         $have_non_network_plugins = false;
 222                                         foreach ( (array) $plugins as $plugin ) {
 223                                                 if ( '.' == dirname($plugin) ) {
 224                                                         $files_to_delete[] = WP_PLUGIN_DIR . '/' . $plugin;
 225                                                         if( $data = get_plugin_data(WP_PLUGIN_DIR . '/' . $plugin) ) {
 226                                                                 $plugin_info[ $plugin ] = $data;
 227                                                                 $plugin_info[ $plugin ]['is_uninstallable'] = is_uninstallable_plugin( $plugin );
 228                                                                 if ( ! $plugin_info[ $plugin ]['Network'] )
 229                                                                         $have_non_network_plugins = true;
 230                                                         }
 231                                                 } else {
 232                                                         // Locate all the files in that folder
 233                                                         $files = list_files( WP_PLUGIN_DIR . '/' . dirname($plugin) );
 234                                                         if ( $files ) {
 235                                                                 $files_to_delete = array_merge($files_to_delete, $files);
 236                                                         }
 237                                                         // Get plugins list from that folder
 238                                                         if ( $folder_plugins = get_plugins( '/' . dirname($plugin)) ) {
 239                                                                 foreach( $folder_plugins as $plugin_file => $data ) {
 240                                                                         $plugin_info[ $plugin_file ] = _get_plugin_data_markup_translate( $plugin_file, $data );
 241                                                                         $plugin_info[ $plugin_file ]['is_uninstallable'] = is_uninstallable_plugin( $plugin );
 242                                                                         if ( ! $plugin_info[ $plugin_file ]['Network'] )
 243                                                                                 $have_non_network_plugins = true;
 244                                                                 }
 245                                                         }
 246                                                 }
 247                                         }
 248                                         screen_icon();
 249                                         $plugins_to_delete = count( $plugin_info );
 250                                         echo '<h2>' . _n( 'Delete Plugin', 'Delete Plugins', $plugins_to_delete ) . '</h2>';
 251                                 ?>
 252                                 <?php if ( $have_non_network_plugins && is_network_admin() ) : ?>
 253                                 <div class="error"><p><strong><?php _e( 'Caution:' ); ?></strong> <?php echo _n( 'This plugin may be active on other sites in the network.', 'These plugins may be active on other sites in the network.', $plugins_to_delete ); ?></p></div>
 254                                 <?php endif; ?>
 255                                 <p><?php echo _n( 'You are about to remove the following plugin:', 'You are about to remove the following plugins:', $plugins_to_delete ); ?></p>
 256                                         <ul class="ul-disc">
 257                                                 <?php
 258                                                 $data_to_delete = false;
 259                                                 foreach ( $plugin_info as $plugin ) {
 260                                                         if ( $plugin['is_uninstallable'] ) {
 261                                                                 /* translators: 1: plugin name, 2: plugin author */
 262                                                                 echo '<li>', sprintf( __( '<strong>%1$s</strong> by <em>%2$s</em> (will also <strong>delete its data</strong>)' ), esc_html($plugin['Name']), esc_html($plugin['AuthorName']) ), '</li>';
 263                                                                 $data_to_delete = true;
 264                                                         } else {
 265                                                                 /* translators: 1: plugin name, 2: plugin author */
 266                                                                 echo '<li>', sprintf( __('<strong>%1$s</strong> by <em>%2$s</em>' ), esc_html($plugin['Name']), esc_html($plugin['AuthorName']) ), '</li>';
 267                                                         }
 268                                                 }
 269                                                 ?>
 270                                         </ul>
 271                                 <p><?php
 272                                 if ( $data_to_delete )
 273                                         _e('Are you sure you wish to delete these files and data?');
 274                                 else
 275                                         _e('Are you sure you wish to delete these files?');
 276                                 ?></p>
 277                                 <form method="post" action="<?php echo esc_url($_SERVER['REQUEST_URI']); ?>" style="display:inline;">
 278                                         <input type="hidden" name="verify-delete" value="1" />
 279                                         <input type="hidden" name="action" value="delete-selected" />
 280                                         <?php
 281                                                 foreach ( (array) $plugins as $plugin )
 282                                                         echo '<input type="hidden" name="checked[]" value="' . esc_attr($plugin) . '" />';
 283                                         ?>
 284                                         <?php wp_nonce_field('bulk-plugins') ?>
 285                                         <?php submit_button( $data_to_delete ? __( 'Yes, Delete these files and data' ) : __( 'Yes, Delete these files' ), 'button', 'submit', false ); ?>
 286                                 </form>
 287                                 <form method="post" action="<?php echo esc_url(wp_get_referer()); ?>" style="display:inline;">
 288                                         <?php submit_button( __( 'No, Return me to the plugin list' ), 'button', 'submit', false ); ?>
 289                                 </form>
 290
 291                                 <p><a href="#" onclick="jQuery('#files-list').toggle(); return false;"><?php _e('Click to view entire list of files which will be deleted'); ?></a></p>
 292                                 <div id="files-list" style="display:none;">
 293                                         <ul class="code">
 294                                         <?php
 295                                                 foreach ( (array)$files_to_delete as $file )
 296                                                         echo '<li>' . esc_html(str_replace(WP_PLUGIN_DIR, '', $file)) . '</li>';
 297                                         ?>
 298                                         </ul>
 299                                 </div>
 300                         </div>
 301                                 <?php
 302                                 require_once(ABSPATH . 'wp-admin/admin-footer.php');
 303                                 exit;
 304                         } //Endif verify-delete
 305                         $delete_result = delete_plugins($plugins);
 306
 307                         set_transient('plugins_delete_result_' . $user_ID, $delete_result); //Store the result in a cache rather than a URL param due to object type & length
 308                         wp_redirect( self_admin_url("plugins.php?deleted=true&plugin_status=$status&paged=$page&s=$s") );
 309                         exit;
 310                         break;
 311                 case 'clear-recent-list':
 312                         update_option('recently_activated', array());
 313                         break;
 314         }
 315 }
 316
 317 $wp_list_table->prepare_items();
 318
 319 $total_pages = $wp_list_table->get_pagination_arg( 'total_pages' );
 320 if ( $pagenum > $total_pages && $total_pages > 0 ) {
 321         wp_redirect( add_query_arg( 'paged', $total_pages ) );
 322         exit;
 323 }
 324
 325 wp_enqueue_script('plugin-install');
 326 add_thickbox();
 327
 328 add_screen_option( 'per_page', array('label' => _x( 'Plugins', 'plugins per page (screen options)' )) );
 329
 330 add_contextual_help($current_screen,
 331         '<p>' . __('Plugins extend and expand the functionality of WordPress. Once a plugin is installed, you may activate it or deactivate it here.') . '</p>' .
 332         '<p>' . sprintf(__('You can find additional plugins for your site by using the <a href="%1$s">Plugin Browser/Installer</a> functionality or by browsing the <a href="%2$s" target="_blank">WordPress Plugin Directory</a> directly and installing new plugins manually. To manually install a plugin you generally just need to upload the plugin file into your <code>/wp-content/plugins</code> directory. Once a plugin has been installed, you can activate it here.'), 'plugin-install.php', 'http://wordpress.org/extend/plugins/') . '</p>' .
 333         '<p>' . __('Most of the time, plugins play nicely with the core of WordPress and with other plugins. Sometimes, though, a plugin&#8217;s code will get in the way of another plugin, causing compatibility issues. If your site starts doing strange things, this may be the problem. Try deactivating all your plugins and re-activating them in various combinations until you isolate which one(s) caused the issue.') . '</p>' .
 334         '<p>' . sprintf( __('If something goes wrong with a plugin and you can&#8217;t use WordPress, delete or rename that file in the <code>%s</code> directory and it will be automatically deactivated.'), WP_PLUGIN_DIR) . '</p>' .
 335         '<p><strong>' . __('For more information:') . '</strong></p>' .
 336         '<p>' . __('<a href="http://codex.wordpress.org/Managing_Plugins#Plugin_Management" target="_blank">Documentation on Managing Plugins</a>') . '</p>' .
 337         '<p>' . __('<a href="http://wordpress.org/support/" target="_blank">Support Forums</a>') . '</p>'
 338 );
 339
 340 $title = __('Plugins');
 341 $parent_file = 'plugins.php';
 342
 343 require_once(ABSPATH . 'wp-admin/admin-header.php');
 344
 345 $invalid = validate_active_plugins();
 346 if ( !empty($invalid) )
 347         foreach ( $invalid as $plugin_file => $error )
 348                 echo '<div id="message" class="error"><p>' . sprintf(__('The plugin <code>%s</code> has been <strong>deactivated</strong> due to an error: %s'), esc_html($plugin_file), $error->get_error_message()) . '</p></div>';
 349 ?>
 350
 351 <?php if ( isset($_GET['error']) ) :
 352
 353         if ( isset( $_GET['main'] ) )
 354                 $errmsg = __( 'You cannot delete a plugin while it is active on the main site.' );
 355         elseif ( isset($_GET['charsout']) )
 356                 $errmsg = sprintf(__('The plugin generated %d characters of <strong>unexpected output</strong> during activation.  If you notice &#8220;headers already sent&#8221; messages, problems with syndication feeds or other issues, try deactivating or removing this plugin.'), $_GET['charsout']);
 357         else
 358                 $errmsg = __('Plugin could not be activated because it triggered a <strong>fatal error</strong>.');
 359         ?>
 360         <div id="message" class="updated"><p><?php echo $errmsg; ?></p>
 361         <?php
 362                 if ( !isset( $_GET['main'] ) && !isset($_GET['charsout']) && wp_verify_nonce($_GET['_error_nonce'], 'plugin-activation-error_' . $plugin) ) { ?>
 363         <iframe style="border:0" width="100%" height="70px" src="<?php echo 'plugins.php?action=error_scrape&amp;plugin=' . esc_attr($plugin) . '&amp;_wpnonce=' . esc_attr($_GET['_error_nonce']); ?>"></iframe>
 364         <?php
 365                 }
 366         ?>
 367         </div>
 368 <?php elseif ( isset($_GET['deleted']) ) :
 369                 $delete_result = get_transient('plugins_delete_result_'.$user_ID);
 370                 delete_transient('plugins_delete_result'); //Delete it once we're done.
 371
 372                 if ( is_wp_error($delete_result) ) : ?>
 373                 <div id="message" class="updated"><p><?php printf( __('Plugin could not be deleted due to an error: %s'), $delete_result->get_error_message() ); ?></p></div>
 374                 <?php else : ?>
 375                 <div id="message" class="updated"><p><?php _e('The selected plugins have been <strong>deleted</strong>.'); ?></p></div>
 376                 <?php endif; ?>
 377 <?php elseif ( isset($_GET['activate']) ) : ?>
 378         <div id="message" class="updated"><p><?php _e('Plugin <strong>activated</strong>.') ?></p></div>
 379 <?php elseif (isset($_GET['activate-multi'])) : ?>
 380         <div id="message" class="updated"><p><?php _e('Selected plugins <strong>activated</strong>.'); ?></p></div>
 381 <?php elseif ( isset($_GET['deactivate']) ) : ?>
 382         <div id="message" class="updated"><p><?php _e('Plugin <strong>deactivated</strong>.') ?></p></div>
 383 <?php elseif (isset($_GET['deactivate-multi'])) : ?>
 384         <div id="message" class="updated"><p><?php _e('Selected plugins <strong>deactivated</strong>.'); ?></p></div>
 385 <?php elseif ( 'update-selected' == $action ) : ?>
 386         <div id="message" class="updated"><p><?php _e('No out of date plugins were selected.'); ?></p></div>
 387 <?php endif; ?>
 388
 389 <div class="wrap">
 390 <?php screen_icon(); ?>
 391 <h2><?php echo esc_html( $title );
 392 if ( ( ! is_multisite() || is_network_admin() ) && current_user_can('install_plugins') ) { ?>
 393 <a href="<?php echo self_admin_url( 'plugin-install.php' ); ?>" class="button add-new-h2"><?php echo esc_html_x('Add New', 'plugin'); ?></a>
 394 <?php }
 395 if ( $s )
 396         printf( '<span class="subtitle">' . __('Search results for &#8220;%s&#8221;') . '</span>', esc_html( $s ) ); ?>
 397 </h2>
 398
 399 <?php do_action( 'pre_current_active_plugins', $plugins['all'] ) ?>
 400
 401 <?php $wp_list_table->views(); ?>
 402
 403 <form method="post" action="">
 404
 405 <?php $wp_list_table->search_box( __( 'Search Plugins' ), 'plugin' ); ?>
 406
 407 <input type="hidden" name="plugin_status" value="<?php echo esc_attr($status) ?>" />
 408 <input type="hidden" name="paged" value="<?php echo esc_attr($page) ?>" />
 409
 410 <?php
 411 if ( 'mustuse' == $status )
 412         echo '<br class="clear" /><p>' . __( 'Files in the <code>/wp-content/mu-plugins</code> directory are executed automatically.' ) . '</p>';
 413 elseif ( 'dropins' == $status )
 414         echo '<br class="clear" /><p>' . __( 'Drop-ins are advanced plugins in the <code>/wp-content</code> directory that replace WordPress functionality when present.' ) . '</p>';
 415 ?>
 416
 417 <?php $wp_list_table->display(); ?>
 418 </form>
 419
 420 </div>
 421
 422 <?php
 423 include(ABSPATH . 'wp-admin/admin-footer.php');