WordPress 4.7

[autoinstalls/wordpress.git] / wp-admin / includes / plugin-install.php

diff --git a/wp-admin/includes/plugin-install.php b/wp-admin/includes/plugin-install.php
index 71cc36dc6bd8871a1ed06ff9f0dd08acc38a6d24..0d932c2618cafc494153d1bf2d3ef3ea0ad1879b 100644 (file)
--- a/wp-admin/includes/plugin-install.php
+++ b/wp-admin/includes/plugin-install.php
@@ -7,53 +7,201 @@
  */
 
 /**
  */
 
 /**

- * Retrieve plugin installer pages from WordPress Plugins API.
+ * Retrieves plugin installer pages from the WordPress.org Plugins API.

  *
  * It is possible for a plugin to override the Plugin API result with three
  * filters. Assume this is for plugins, which can extend on the Plugin Info to
  *
  * It is possible for a plugin to override the Plugin API result with three
  * filters. Assume this is for plugins, which can extend on the Plugin Info to

- * offer more choices. This is very powerful and must be used with care, when
+ * offer more choices. This is very powerful and must be used with care when

  * overriding the filters.
  *
  * overriding the filters.
  *

- * The first filter, 'plugins_api_args', is for the args and gives the action as
- * the second parameter. The hook for 'plugins_api_args' must ensure that an
- * object is returned.
+ * The first filter, {@see 'plugins_api_args'}, is for the args and gives the action
+ * as the second parameter. The hook for {@see 'plugins_api_args'} must ensure that
+ * an object is returned.

  *
  *

- * The second filter, 'plugins_api', is the result that would be returned.
+ * The second filter, {@see 'plugins_api'}, allows a plugin to override the WordPress.org
+ * Plugin Install API entirely. If `$action` is 'query_plugins' or 'plugin_information',
+ * an object MUST be passed. If `$action` is 'hot_tags' or 'hot_categories', an array MUST
+ * be passed.
+ *
+ * Finally, the third filter, {@see 'plugins_api_result'}, makes it possible to filter the
+ * response object or array, depending on the `$action` type.
+ *
+ * Supported arguments per action:
+ *
+ * | Argument Name        | query_plugins | plugin_information | hot_tags | hot_categories |
+ * | -------------------- | :-----------: | :----------------: | :------: | :------------: |
+ * | `$slug`              | No            |  Yes               | No       | No             |
+ * | `$per_page`          | Yes           |  No                | No       | No             |
+ * | `$page`              | Yes           |  No                | No       | No             |
+ * | `$number`            | No            |  No                | Yes      | Yes            |
+ * | `$search`            | Yes           |  No                | No       | No             |
+ * | `$tag`               | Yes           |  No                | No       | No             |
+ * | `$author`            | Yes           |  No                | No       | No             |
+ * | `$user`              | Yes           |  No                | No       | No             |
+ * | `$browse`            | Yes           |  No                | No       | No             |
+ * | `$locale`            | Yes           |  Yes               | No       | No             |
+ * | `$installed_plugins` | Yes           |  No                | No       | No             |
+ * | `$is_ssl`            | Yes           |  Yes               | No       | No             |
+ * | `$fields`            | Yes           |  Yes               | No       | No             |

  *
  * @since 2.7.0
  *
  *
  * @since 2.7.0
  *

- * @param string $action
- * @param array|object $args Optional. Arguments to serialize for the Plugin Info API.
- * @return object plugins_api response object on success, WP_Error on failure.
+ * @param string       $action API action to perform: 'query_plugins', 'plugin_information',
+ *                             'hot_tags' or 'hot_categories'.
+ * @param array|object $args   {
+ *     Optional. Array or object of arguments to serialize for the Plugin Info API.
+ *
+ *     @type string  $slug              The plugin slug. Default empty.
+ *     @type int     $per_page          Number of plugins per page. Default 24.
+ *     @type int     $page              Number of current page. Default 1.
+ *     @type int     $number            Number of tags or categories to be queried.
+ *     @type string  $search            A search term. Default empty.
+ *     @type string  $tag               Tag to filter plugins. Default empty.
+ *     @type string  $author            Username of an plugin author to filter plugins. Default empty.
+ *     @type string  $user              Username to query for their favorites. Default empty.
+ *     @type string  $browse            Browse view: 'popular', 'new', 'beta', 'recommended'.
+ *     @type string  $locale            Locale to provide context-sensitive results. Default is the value
+ *                                      of get_locale().
+ *     @type string  $installed_plugins Installed plugins to provide context-sensitive results.
+ *     @type bool    $is_ssl            Whether links should be returned with https or not. Default false.
+ *     @type array   $fields            {
+ *         Array of fields which should or should not be returned.
+ *
+ *         @type bool $short_description Whether to return the plugin short description. Default true.
+ *         @type bool $description       Whether to return the plugin full description. Default false.
+ *         @type bool $sections          Whether to return the plugin readme sections: description, installation,
+ *                                       FAQ, screenshots, other notes, and changelog. Default false.
+ *         @type bool $tested            Whether to return the 'Compatible up to' value. Default true.
+ *         @type bool $requires          Whether to return the required WordPress version. Default true.
+ *         @type bool $rating            Whether to return the rating in percent and total number of ratings.
+ *                                       Default true.
+ *         @type bool $ratings           Whether to return the number of rating for each star (1-5). Default true.
+ *         @type bool $downloaded        Whether to return the download count. Default true.
+ *         @type bool $downloadlink      Whether to return the download link for the package. Default true.
+ *         @type bool $last_updated      Whether to return the date of the last update. Default true.
+ *         @type bool $added             Whether to return the date when the plugin was added to the wordpress.org
+ *                                       repository. Default true.
+ *         @type bool $tags              Whether to return the assigned tags. Default true.
+ *         @type bool $compatibility     Whether to return the WordPress compatibility list. Default true.
+ *         @type bool $homepage          Whether to return the plugin homepage link. Default true.
+ *         @type bool $versions          Whether to return the list of all available versions. Default false.
+ *         @type bool $donate_link       Whether to return the donation link. Default true.
+ *         @type bool $reviews           Whether to return the plugin reviews. Default false.
+ *         @type bool $banners           Whether to return the banner images links. Default false.
+ *         @type bool $icons             Whether to return the icon links. Default false.
+ *         @type bool $active_installs   Whether to return the number of active installs. Default false.
+ *         @type bool $group             Whether to return the assigned group. Default false.
+ *         @type bool $contributors      Whether to return the list of contributors. Default false.
+ *     }
+ * }
+ * @return object|array|WP_Error Response object or array on success, WP_Error on failure. See the
+ *         {@link https://developer.wordpress.org/reference/functions/plugins_api/ function reference article}
+ *         for more information on the make-up of possible return values depending on the value of `$action`.

  */
  */

-function plugins_api($action, $args = null) {
+function plugins_api( $action, $args = array() ) {

 
 

-       if ( is_array($args) )
-               $args = (object)$args;
+       if ( is_array( $args ) ) {
+               $args = (object) $args;
+       }

 
 

-       if ( !isset($args->per_page) )
+       if ( ! isset( $args->per_page ) ) {

                $args->per_page = 24;
                $args->per_page = 24;

+       }

 
 

-       // Allows a plugin to override the WordPress.org API entirely.
-       // Use the filter 'plugins_api_result' to merely add results.
-       // Please ensure that a object is returned from the following filters.
-       $args = apply_filters('plugins_api_args', $args, $action);
-       $res = apply_filters('plugins_api', false, $action, $args);
+       if ( ! isset( $args->locale ) ) {
+               $args->locale = get_user_locale();
+       }
+
+       /**
+        * Filters the WordPress.org Plugin Install API arguments.
+        *
+        * Important: An object MUST be returned to this filter.
+        *
+        * @since 2.7.0
+        *
+        * @param object $args   Plugin API arguments.
+        * @param string $action The type of information being requested from the Plugin Install API.
+        */
+       $args = apply_filters( 'plugins_api_args', $args, $action );
+
+       /**
+        * Filters the response for the current WordPress.org Plugin Install API request.
+        *
+        * Passing a non-false value will effectively short-circuit the WordPress.org API request.
+        *
+        * If `$action` is 'query_plugins' or 'plugin_information', an object MUST be passed.
+        * If `$action` is 'hot_tags' or 'hot_categories', an array should be passed.
+        *
+        * @since 2.7.0
+        *
+        * @param false|object|array $result The result object or array. Default false.
+        * @param string             $action The type of information being requested from the Plugin Install API.
+        * @param object             $args   Plugin API arguments.
+        */
+       $res = apply_filters( 'plugins_api', false, $action, $args );

 
        if ( false === $res ) {
 
        if ( false === $res ) {

-               $request = wp_remote_post('http://api.wordpress.org/plugins/info/1.0/', array( 'timeout' => 15, 'body' => array('action' => $action, 'request' => serialize($args))) );
+               $url = $http_url = 'http://api.wordpress.org/plugins/info/1.0/';
+               if ( $ssl = wp_http_supports( array( 'ssl' ) ) )
+                       $url = set_url_scheme( $url, 'https' );
+
+               $http_args = array(
+                       'timeout' => 15,
+                       'body' => array(
+                               'action' => $action,
+                               'request' => serialize( $args )
+                       )
+               );
+               $request = wp_remote_post( $url, $http_args );
+
+               if ( $ssl && is_wp_error( $request ) ) {
+                       trigger_error(
+                               sprintf(
+                                       /* translators: %s: support forums URL */
+                                       __( 'An unexpected error occurred. Something may be wrong with WordPress.org or this server&#8217;s configuration. If you continue to have problems, please try the <a href="%s">support forums</a>.' ),
+                                       __( 'https://wordpress.org/support/' )
+                               ) . ' ' . __( '(WordPress could not establish a secure connection to WordPress.org. Please contact your server administrator.)' ),
+                               headers_sent() || WP_DEBUG ? E_USER_WARNING : E_USER_NOTICE
+                       );
+                       $request = wp_remote_post( $http_url, $http_args );
+               }
+

                if ( is_wp_error($request) ) {
                if ( is_wp_error($request) ) {

-                       $res = new WP_Error('plugins_api_failed', __('An Unexpected HTTP Error occurred during the API request.'), $request->get_error_message() );
+                       $res = new WP_Error( 'plugins_api_failed',
+                               sprintf(
+                                       /* translators: %s: support forums URL */
+                                       __( 'An unexpected error occurred. Something may be wrong with WordPress.org or this server&#8217;s configuration. If you continue to have problems, please try the <a href="%s">support forums</a>.' ),
+                                       __( 'https://wordpress.org/support/' )
+                               ),
+                               $request->get_error_message()
+                       );

                } else {
                } else {

-                       $res = unserialize( wp_remote_retrieve_body( $request ) );
-                       if ( false === $res )
-                               $res = new WP_Error('plugins_api_failed', __('An unknown error occurred.'), wp_remote_retrieve_body( $request ) );
+                       $res = maybe_unserialize( wp_remote_retrieve_body( $request ) );
+                       if ( ! is_object( $res ) && ! is_array( $res ) ) {
+                               $res = new WP_Error( 'plugins_api_failed',
+                                       sprintf(
+                                               /* translators: %s: support forums URL */
+                                               __( 'An unexpected error occurred. Something may be wrong with WordPress.org or this server&#8217;s configuration. If you continue to have problems, please try the <a href="%s">support forums</a>.' ),
+                                               __( 'https://wordpress.org/support/' )
+                                       ),
+                                       wp_remote_retrieve_body( $request )
+                               );
+                       }

                }
        } elseif ( !is_wp_error($res) ) {
                $res->external = true;
        }
 
                }
        } elseif ( !is_wp_error($res) ) {
                $res->external = true;
        }
 

-       return apply_filters('plugins_api_result', $res, $action, $args);
+       /**
+        * Filters the Plugin Install API response results.
+        *
+        * @since 2.7.0
+        *
+        * @param object|WP_Error $res    Response object or WP_Error.
+        * @param string          $action The type of information being requested from the Plugin Install API.
+        * @param object          $args   Plugin API arguments.
+        */
+       return apply_filters( 'plugins_api_result', $res, $action, $args );

 }
 
 /**
 }
 
 /**


@@ -74,21 +222,23 @@ function install_popular_tags( $args = array() ) {
        if ( is_wp_error($tags) )
                return $tags;
 
        if ( is_wp_error($tags) )
                return $tags;
 

-       set_site_transient('poptags_' . $key, $tags, 10800); // 3 * 60 * 60 = 10800
+       set_site_transient( 'poptags_' . $key, $tags, 3 * HOUR_IN_SECONDS );

 
        return $tags;
 }
 
 
        return $tags;
 }
 

+/**
+ * @since 2.7.0
+ */

 function install_dashboard() {
        ?>
 function install_dashboard() {
        ?>

-       <p><?php printf( __( 'Plugins extend and expand the functionality of WordPress. You may automatically install plugins from the <a href="http://wordpress.org/extend/plugins/">WordPress Plugin Directory</a> or upload a plugin in .zip format via <a href="%s">this page</a>.' ), self_admin_url( 'plugin-install.php?tab=upload' ) ); ?></p>
+       <p><?php printf( __( 'Plugins extend and expand the functionality of WordPress. You may automatically install plugins from the <a href="%1$s">WordPress Plugin Directory</a> or upload a plugin in .zip format by clicking the button at the top of this page.' ), __( 'https://wordpress.org/plugins/' ) ); ?></p>

 
 

-       <h4><?php _e('Search') ?></h4>
-       <p class="install-help"><?php _e('Search for plugins by keyword, author, or tag.') ?></p>
-       <?php install_search_form(); ?>
+       <?php display_plugins_table(); ?>

 
 

-       <h4><?php _e('Popular tags') ?></h4>
-       <p class="install-help"><?php _e('You may also browse based on the most popular tags in the Plugin Directory:') ?></p>
+       <div class="plugins-popular-tags-wrapper">
+       <h2><?php _e( 'Popular tags' ) ?></h2>
+       <p><?php _e( 'You may also browse based on the most popular tags in the Plugin Directory:' ) ?></p>

        <?php
 
        $api_tags = install_popular_tags();
        <?php
 
        $api_tags = install_popular_tags();


@@ -99,93 +249,154 @@ function install_dashboard() {
        } else {
                //Set up the tags in a way which can be interpreted by wp_generate_tag_cloud()
                $tags = array();
        } else {
                //Set up the tags in a way which can be interpreted by wp_generate_tag_cloud()
                $tags = array();

-               foreach ( (array)$api_tags as $tag )
-                       $tags[ $tag['name'] ] = (object) array(
-                                                                       'link' => esc_url( self_admin_url('plugin-install.php?tab=search&type=tag&s=' . urlencode($tag['name'])) ),
-                                                                       'name' => $tag['name'],
-                                                                       'id' => sanitize_title_with_dashes($tag['name']),
-                                                                       'count' => $tag['count'] );
+               foreach ( (array) $api_tags as $tag ) {
+                       $url = self_admin_url( 'plugin-install.php?tab=search&type=tag&s=' . urlencode( $tag['name'] ) );
+                       $data = array(
+                               'link' => esc_url( $url ),
+                               'name' => $tag['name'],
+                               'slug' => $tag['slug'],
+                               'id' => sanitize_title_with_dashes( $tag['name'] ),
+                               'count' => $tag['count']
+                       );
+                       $tags[ $tag['name'] ] = (object) $data;
+               }

                echo wp_generate_tag_cloud($tags, array( 'single_text' => __('%s plugin'), 'multiple_text' => __('%s plugins') ) );
        }
                echo wp_generate_tag_cloud($tags, array( 'single_text' => __('%s plugin'), 'multiple_text' => __('%s plugins') ) );
        }

-       echo '</p><br class="clear" />';
+       echo '</p><br class="clear" /></div>';

 }
 }

-add_action('install_plugins_dashboard', 'install_dashboard');

 
 /**
 
 /**

- * Display search form for searching plugins.
+ * Displays a search form for searching plugins.

  *
  * @since 2.7.0
  *
  * @since 2.7.0

+ * @since 4.6.0 The `$type_selector` parameter was deprecated.
+ *
+ * @param bool $deprecated Not used.

  */
  */

-function install_search_form(){
-       $type = isset($_REQUEST['type']) ? stripslashes( $_REQUEST['type'] ) : '';
-       $term = isset($_REQUEST['s']) ? stripslashes( $_REQUEST['s'] ) : '';
-
-       ?><form id="search-plugins" method="get" action="">
+function install_search_form( $deprecated = true ) {
+       $type = isset( $_REQUEST['type'] ) ? wp_unslash( $_REQUEST['type'] ) : 'term';
+       $term = isset( $_REQUEST['s'] ) ? wp_unslash( $_REQUEST['s'] ) : '';
+       ?><form class="search-form search-plugins" method="get">

                <input type="hidden" name="tab" value="search" />
                <input type="hidden" name="tab" value="search" />

+               <label class="screen-reader-text" for="typeselector"><?php _e( 'Search plugins by:' ); ?></label>

                <select name="type" id="typeselector">
                <select name="type" id="typeselector">

-                       <option value="term"<?php selected('term', $type) ?>><?php _e('Term'); ?></option>
-                       <option value="author"<?php selected('author', $type) ?>><?php _e('Author'); ?></option>
-                       <option value="tag"<?php selected('tag', $type) ?>><?php _ex('Tag', 'Plugin Installer'); ?></option>
+                       <option value="term"<?php selected( 'term', $type ); ?>><?php _e( 'Keyword' ); ?></option>
+                       <option value="author"<?php selected( 'author', $type ); ?>><?php _e( 'Author' ); ?></option>
+                       <option value="tag"<?php selected( 'tag', $type ); ?>><?php _ex( 'Tag', 'Plugin Installer' ); ?></option>

                </select>
                </select>

-               <input type="text" name="s" value="<?php echo esc_attr($term) ?>" />
-               <label class="screen-reader-text" for="plugin-search-input"><?php _e('Search Plugins'); ?></label>
-               <?php submit_button( __( 'Search Plugins' ), 'button', 'plugin-search-input', false ); ?>
+               <label><span class="screen-reader-text"><?php _e( 'Search Plugins' ); ?></span>
+                       <input type="search" name="s" value="<?php echo esc_attr( $term ) ?>" class="wp-filter-search" placeholder="<?php esc_attr_e( 'Search plugins...' ); ?>" />
+               </label>
+               <?php submit_button( __( 'Search Plugins' ), 'hide-if-js', false, false, array( 'id' => 'search-submit' ) ); ?>

        </form><?php
 }
 
 /**
  * Upload from zip
  * @since 2.8.0
        </form><?php
 }
 
 /**
  * Upload from zip
  * @since 2.8.0

- *
- * @param string $page

  */
  */

-function install_plugins_upload( $page = 1 ) {
+function install_plugins_upload() {

 ?>
 ?>

-       <h4><?php _e('Install a plugin in .zip format') ?></h4>
-       <p class="install-help"><?php _e('If you have a plugin in a .zip format, you may install it by uploading it here.') ?></p>
-       <form method="post" enctype="multipart/form-data" action="<?php echo self_admin_url('update.php?action=upload-plugin') ?>">
-               <?php wp_nonce_field( 'plugin-upload') ?>
-               <label class="screen-reader-text" for="pluginzip"><?php _e('Plugin zip file'); ?></label>
+<div class="upload-plugin">
+       <p class="install-help"><?php _e('If you have a plugin in a .zip format, you may install it by uploading it here.'); ?></p>
+       <form method="post" enctype="multipart/form-data" class="wp-upload-form" action="<?php echo self_admin_url('update.php?action=upload-plugin'); ?>">
+               <?php wp_nonce_field( 'plugin-upload' ); ?>
+               <label class="screen-reader-text" for="pluginzip"><?php _e( 'Plugin zip file' ); ?></label>

                <input type="file" id="pluginzip" name="pluginzip" />
                <input type="file" id="pluginzip" name="pluginzip" />

-               <input type="submit" class="button" value="<?php esc_attr_e('Install Now') ?>" />
+               <?php submit_button( __( 'Install Now' ), '', 'install-plugin-submit', false ); ?>

        </form>
        </form>

+</div>

 <?php
 }
 <?php
 }

-add_action('install_plugins_upload', 'install_plugins_upload', 10, 1);
+
+/**
+ * Show a username form for the favorites page
+ * @since 3.5.0
+ *
+ */
+function install_plugins_favorites_form() {
+       $user   = get_user_option( 'wporg_favorites' );
+       $action = 'save_wporg_username_' . get_current_user_id();
+       ?>
+       <p class="install-help"><?php _e( 'If you have marked plugins as favorites on WordPress.org, you can browse them here.' ); ?></p>
+       <form method="get">
+               <input type="hidden" name="tab" value="favorites" />
+               <p>
+                       <label for="user"><?php _e( 'Your WordPress.org username:' ); ?></label>
+                       <input type="search" id="user" name="user" value="<?php echo esc_attr( $user ); ?>" />
+                       <input type="submit" class="button" value="<?php esc_attr_e( 'Get Favorites' ); ?>" />
+                       <input type="hidden" id="wporg-username-nonce" name="_wpnonce" value="<?php echo esc_attr( wp_create_nonce( $action ) ); ?>" />
+               </p>
+       </form>
+       <?php
+}

 
 /**
  * Display plugin content based on plugin list.
  *
  * @since 2.7.0
 
 /**
  * Display plugin content based on plugin list.
  *
  * @since 2.7.0

+ *
+ * @global WP_List_Table $wp_list_table

  */
 function display_plugins_table() {
        global $wp_list_table;
 
  */
 function display_plugins_table() {
        global $wp_list_table;
 

-       $wp_list_table->display();
+       switch ( current_filter() ) {
+               case 'install_plugins_favorites' :
+                       if ( empty( $_GET['user'] ) && ! get_user_option( 'wporg_favorites' ) ) {
+                               return;
+                       }
+                       break;
+               case 'install_plugins_recommended' :
+                       echo '<p>' . __( 'These suggestions are based on the plugins you and other users have installed.' ) . '</p>';
+                       break;
+               case 'install_plugins_beta' :
+                       printf(
+                               '<p>' . __( 'You are using a development version of WordPress. These feature plugins are also under development. <a href="%s">Learn more</a>.' ) . '</p>',
+                               'https://make.wordpress.org/core/handbook/about/release-cycle/features-as-plugins/'
+                       );
+                       break;
+       }
+
+       ?>
+       <form id="plugin-filter" method="post">
+               <?php $wp_list_table->display(); ?>
+       </form>
+       <?php

 }
 }

-add_action('install_plugins_search', 'display_plugins_table');
-add_action('install_plugins_featured', 'display_plugins_table');
-add_action('install_plugins_popular', 'display_plugins_table');
-add_action('install_plugins_new', 'display_plugins_table');
-add_action('install_plugins_updated', 'display_plugins_table');

 
 /**
  * Determine the status we can perform on a plugin.
  *
  * @since 3.0.0
 
 /**
  * Determine the status we can perform on a plugin.
  *
  * @since 3.0.0

+ *
+ * @param  array|object $api  Data about the plugin retrieved from the API.
+ * @param  bool         $loop Optional. Disable further loops. Default false.
+ * @return array {
+ *     Plugin installation status data.
+ *
+ *     @type string $status  Status of a plugin. Could be one of 'install', 'update_available', 'latest_installed' or 'newer_installed'.
+ *     @type string $url     Plugin installation URL.
+ *     @type string $version The most recent version of the plugin.
+ *     @type string $file    Plugin filename relative to the plugins directory.
+ * }

  */
 function install_plugin_install_status($api, $loop = false) {
  */
 function install_plugin_install_status($api, $loop = false) {

-       // this function is called recursively, $loop prevents further loops.
+       // This function is called recursively, $loop prevents further loops.

        if ( is_array($api) )
                $api = (object) $api;
 
        if ( is_array($api) )
                $api = (object) $api;
 

-       //Default to a "new" plugin
+       // Default to a "new" plugin

        $status = 'install';
        $url = false;
        $status = 'install';
        $url = false;

+       $update_file = false;

 
 

-       //Check to see if this plugin is known to be installed, and has an update awaiting it.
+       /*
+        * Check to see if this plugin is known to be installed,
+        * and has an update awaiting it.
+        */

        $update_plugins = get_site_transient('update_plugins');
        $update_plugins = get_site_transient('update_plugins');

-       if ( is_object( $update_plugins ) ) {
+       if ( isset( $update_plugins->response ) ) {

                foreach ( (array)$update_plugins->response as $file => $plugin ) {
                        if ( $plugin->slug === $api->slug ) {
                                $status = 'update_available';
                foreach ( (array)$update_plugins->response as $file => $plugin ) {
                        if ( $plugin->slug === $api->slug ) {
                                $status = 'update_available';


@@ -199,13 +410,15 @@ function install_plugin_install_status($api, $loop = false) {
        }
 
        if ( 'install' == $status ) {
        }
 
        if ( 'install' == $status ) {

-               if ( is_dir( WP_PLUGIN_DIR  . '/' . $api->slug ) ) {
+               if ( is_dir( WP_PLUGIN_DIR . '/' . $api->slug ) ) {

                        $installed_plugin = get_plugins('/' . $api->slug);
                        if ( empty($installed_plugin) ) {
                                if ( current_user_can('install_plugins') )
                                        $url = wp_nonce_url(self_admin_url('update.php?action=install-plugin&plugin=' . $api->slug), 'install-plugin_' . $api->slug);
                        } else {
                        $installed_plugin = get_plugins('/' . $api->slug);
                        if ( empty($installed_plugin) ) {
                                if ( current_user_can('install_plugins') )
                                        $url = wp_nonce_url(self_admin_url('update.php?action=install-plugin&plugin=' . $api->slug), 'install-plugin_' . $api->slug);
                        } else {

-                               $key = array_shift( $key = array_keys($installed_plugin) ); //Use the first plugin regardless of the name, Could have issues for multiple-plugins in one directory if they share different version numbers
+                               $key = array_keys( $installed_plugin );
+                               $key = reset( $key ); //Use the first plugin regardless of the name, Could have issues for multiple-plugins in one directory if they share different version numbers
+                               $update_file = $api->slug . '/' . $key;

                                if ( version_compare($api->version, $installed_plugin[ $key ]['Version'], '=') ){
                                        $status = 'latest_installed';
                                } elseif ( version_compare($api->version, $installed_plugin[ $key ]['Version'], '<') ) {
                                if ( version_compare($api->version, $installed_plugin[ $key ]['Version'], '=') ){
                                        $status = 'latest_installed';
                                } elseif ( version_compare($api->version, $installed_plugin[ $key ]['Version'], '<') ) {


@@ -227,145 +440,274 @@ function install_plugin_install_status($api, $loop = false) {
                }
        }
        if ( isset($_GET['from']) )
                }
        }
        if ( isset($_GET['from']) )

-               $url .= '&amp;from=' . urlencode(stripslashes($_GET['from']));
+               $url .= '&amp;from=' . urlencode( wp_unslash( $_GET['from'] ) );

 
 

-       return compact('status', 'url', 'version');
+       $file = $update_file;
+       return compact( 'status', 'url', 'version', 'file' );

 }
 
 /**
  * Display plugin information in dialog box form.
  *
  * @since 2.7.0
 }
 
 /**
  * Display plugin information in dialog box form.
  *
  * @since 2.7.0

+ *
+ * @global string $tab

  */
 function install_plugin_information() {
        global $tab;
 
  */
 function install_plugin_information() {
        global $tab;
 

-       $api = plugins_api('plugin_information', array('slug' => stripslashes( $_REQUEST['plugin'] ) ));
+       if ( empty( $_REQUEST['plugin'] ) ) {
+               return;
+       }
+
+       $api = plugins_api( 'plugin_information', array(
+               'slug' => wp_unslash( $_REQUEST['plugin'] ),
+               'is_ssl' => is_ssl(),
+               'fields' => array(
+                       'banners' => true,
+                       'reviews' => true,
+                       'downloaded' => false,
+                       'active_installs' => true
+               )
+       ) );
+
+       if ( is_wp_error( $api ) ) {
+               wp_die( $api );
+       }

 
 

-       if ( is_wp_error($api) )
-               wp_die($api);
+       $plugins_allowedtags = array(
+               'a' => array( 'href' => array(), 'title' => array(), 'target' => array() ),
+               'abbr' => array( 'title' => array() ), 'acronym' => array( 'title' => array() ),
+               'code' => array(), 'pre' => array(), 'em' => array(), 'strong' => array(),
+               'div' => array( 'class' => array() ), 'span' => array( 'class' => array() ),
+               'p' => array(), 'ul' => array(), 'ol' => array(), 'li' => array(),
+               'h1' => array(), 'h2' => array(), 'h3' => array(), 'h4' => array(), 'h5' => array(), 'h6' => array(),
+               'img' => array( 'src' => array(), 'class' => array(), 'alt' => array() )
+       );
+
+       $plugins_section_titles = array(
+               'description'  => _x( 'Description',  'Plugin installer section title' ),
+               'installation' => _x( 'Installation', 'Plugin installer section title' ),
+               'faq'          => _x( 'FAQ',          'Plugin installer section title' ),
+               'screenshots'  => _x( 'Screenshots',  'Plugin installer section title' ),
+               'changelog'    => _x( 'Changelog',    'Plugin installer section title' ),
+               'reviews'      => _x( 'Reviews',      'Plugin installer section title' ),
+               'other_notes'  => _x( 'Other Notes',  'Plugin installer section title' )
+       );
+
+       // Sanitize HTML
+       foreach ( (array) $api->sections as $section_name => $content ) {
+               $api->sections[$section_name] = wp_kses( $content, $plugins_allowedtags );
+       }

 
 

-       $plugins_allowedtags = array('a' => array('href' => array(), 'title' => array(), 'target' => array()),
-                                                               'abbr' => array('title' => array()), 'acronym' => array('title' => array()),
-                                                               'code' => array(), 'pre' => array(), 'em' => array(), 'strong' => array(),
-                                                               'div' => array(), 'p' => array(), 'ul' => array(), 'ol' => array(), 'li' => array(),
-                                                               'h1' => array(), 'h2' => array(), 'h3' => array(), 'h4' => array(), 'h5' => array(), 'h6' => array(),
-                                                               'img' => array('src' => array(), 'class' => array(), 'alt' => array()));
-       //Sanitize HTML
-       foreach ( (array)$api->sections as $section_name => $content )
-               $api->sections[$section_name] = wp_kses($content, $plugins_allowedtags);

        foreach ( array( 'version', 'author', 'requires', 'tested', 'homepage', 'downloaded', 'slug' ) as $key ) {
        foreach ( array( 'version', 'author', 'requires', 'tested', 'homepage', 'downloaded', 'slug' ) as $key ) {

-               if ( isset( $api->$key ) )
+               if ( isset( $api->$key ) ) {

                        $api->$key = wp_kses( $api->$key, $plugins_allowedtags );
                        $api->$key = wp_kses( $api->$key, $plugins_allowedtags );

+               }

        }
 
        }
 

-       $section = isset($_REQUEST['section']) ? stripslashes( $_REQUEST['section'] ) : 'description'; //Default to the Description tab, Do not translate, API returns English.
-       if ( empty($section) || ! isset($api->sections[ $section ]) )
-               $section = array_shift( $section_titles = array_keys((array)$api->sections) );
+       $_tab = esc_attr( $tab );

 
 

-       iframe_header( __('Plugin Install') );
-       echo "<div id='$tab-header'>\n";
-       echo "<ul id='sidemenu'>\n";
-       foreach ( (array)$api->sections as $section_name => $content ) {
+       $section = isset( $_REQUEST['section'] ) ? wp_unslash( $_REQUEST['section'] ) : 'description'; // Default to the Description tab, Do not translate, API returns English.
+       if ( empty( $section ) || ! isset( $api->sections[ $section ] ) ) {
+               $section_titles = array_keys( (array) $api->sections );
+               $section = reset( $section_titles );
+       }
+
+       iframe_header( __( 'Plugin Install' ) );

 
 

-               $title = $section_name;
-               $title = ucwords(str_replace('_', ' ', $title));
+       $_with_banner = '';

 
 

-               $class = ( $section_name == $section ) ? ' class="current"' : '';
+       if ( ! empty( $api->banners ) && ( ! empty( $api->banners['low'] ) || ! empty( $api->banners['high'] ) ) ) {
+               $_with_banner = 'with-banner';
+               $low  = empty( $api->banners['low'] ) ? $api->banners['high'] : $api->banners['low'];
+               $high = empty( $api->banners['high'] ) ? $api->banners['low'] : $api->banners['high'];
+               ?>
+               <style type="text/css">
+                       #plugin-information-title.with-banner {
+                               background-image: url( <?php echo esc_url( $low ); ?> );
+                       }
+                       @media only screen and ( -webkit-min-device-pixel-ratio: 1.5 ) {
+                               #plugin-information-title.with-banner {
+                                       background-image: url( <?php echo esc_url( $high ); ?> );
+                               }
+                       }
+               </style>
+               <?php
+       }
+
+       echo '<div id="plugin-information-scrollable">';
+       echo "<div id='{$_tab}-title' class='{$_with_banner}'><div class='vignette'></div><h2>{$api->name}</h2></div>";
+       echo "<div id='{$_tab}-tabs' class='{$_with_banner}'>\n";
+
+       foreach ( (array) $api->sections as $section_name => $content ) {
+               if ( 'reviews' === $section_name && ( empty( $api->ratings ) || 0 === array_sum( (array) $api->ratings ) ) ) {
+                       continue;
+               }
+
+               if ( isset( $plugins_section_titles[ $section_name ] ) ) {
+                       $title = $plugins_section_titles[ $section_name ];
+               } else {
+                       $title = ucwords( str_replace( '_', ' ', $section_name ) );
+               }
+
+               $class = ( $section_name === $section ) ? ' class="current"' : '';

                $href = add_query_arg( array('tab' => $tab, 'section' => $section_name) );
                $href = add_query_arg( array('tab' => $tab, 'section' => $section_name) );

-               $href = esc_url($href);
-               $san_title = esc_attr(sanitize_title_with_dashes($title));
-               echo "\t<li><a name='$san_title' target='' href='$href'$class>$title</a></li>\n";
+               $href = esc_url( $href );
+               $san_section = esc_attr( $section_name );
+               echo "\t<a name='$san_section' href='$href' $class>$title</a>\n";

        }
        }

-       echo "</ul>\n";
+

        echo "</div>\n";
        echo "</div>\n";

+

        ?>
        ?>

-       <div class="alignright fyi">
-               <?php if ( ! empty($api->download_link) && ( current_user_can('install_plugins') || current_user_can('update_plugins') ) ) : ?>
-               <p class="action-button">
-               <?php
-               $status = install_plugin_install_status($api);
-               switch ( $status['status'] ) {
-                       case 'install':
-                               if ( $status['url'] )
-                                       echo '<a href="' . $status['url'] . '" target="_parent">' . __('Install Now') . '</a>';
-                               break;
-                       case 'update_available':
-                               if ( $status['url'] )
-                                       echo '<a href="' . $status['url'] . '" target="_parent">' . __('Install Update Now') .'</a>';
-                               break;
-                       case 'newer_installed':
-                               echo '<a>' . sprintf(__('Newer Version (%s) Installed'), $status['version']) . '</a>';
-                               break;
-                       case 'latest_installed':
-                               echo '<a>' . __('Latest Version Installed') . '</a>';
-                               break;
-               }
-               ?>
-               </p>
-               <?php endif; ?>
-               <h2 class="mainheader"><?php /* translators: For Your Information */ _e('FYI') ?></h2>
+<div id="<?php echo $_tab; ?>-content" class='<?php echo $_with_banner; ?>'>
+       <div class="fyi">

                <ul>
                <ul>

-<?php if ( ! empty($api->version) ) : ?>
-                       <li><strong><?php _e('Version:') ?></strong> <?php echo $api->version ?></li>
-<?php endif; if ( ! empty($api->author) ) : ?>
-                       <li><strong><?php _e('Author:') ?></strong> <?php echo links_add_target($api->author, '_blank') ?></li>
-<?php endif; if ( ! empty($api->last_updated) ) : ?>
-                       <li><strong><?php _e('Last Updated:') ?></strong> <span title="<?php echo $api->last_updated ?>"><?php
-                                                       printf( __('%s ago'), human_time_diff(strtotime($api->last_updated)) ) ?></span></li>
-<?php endif; if ( ! empty($api->requires) ) : ?>
-                       <li><strong><?php _e('Requires WordPress Version:') ?></strong> <?php printf(__('%s or higher'), $api->requires) ?></li>
-<?php endif; if ( ! empty($api->tested) ) : ?>
-                       <li><strong><?php _e('Compatible up to:') ?></strong> <?php echo $api->tested ?></li>
-<?php endif; if ( ! empty($api->downloaded) ) : ?>
-                       <li><strong><?php _e('Downloaded:') ?></strong> <?php printf(_n('%s time', '%s times', $api->downloaded), number_format_i18n($api->downloaded)) ?></li>
-<?php endif; if ( ! empty($api->slug) && empty($api->external) ) : ?>
-                       <li><a target="_blank" href="http://wordpress.org/extend/plugins/<?php echo $api->slug ?>/"><?php _e('WordPress.org Plugin Page &#187;') ?></a></li>
-<?php endif; if ( ! empty($api->homepage) ) : ?>
-                       <li><a target="_blank" href="<?php echo $api->homepage ?>"><?php _e('Plugin Homepage  &#187;') ?></a></li>
-<?php endif; ?>
+                       <?php if ( ! empty( $api->version ) ) { ?>
+                               <li><strong><?php _e( 'Version:' ); ?></strong> <?php echo $api->version; ?></li>
+                       <?php } if ( ! empty( $api->author ) ) { ?>
+                               <li><strong><?php _e( 'Author:' ); ?></strong> <?php echo links_add_target( $api->author, '_blank' ); ?></li>
+                       <?php } if ( ! empty( $api->last_updated ) ) { ?>
+                               <li><strong><?php _e( 'Last Updated:' ); ?></strong>
+                                       <?php
+                                       /* translators: %s: Time since the last update */
+                                       printf( __( '%s ago' ), human_time_diff( strtotime( $api->last_updated ) ) );
+                                       ?>
+                               </li>
+                       <?php } if ( ! empty( $api->requires ) ) { ?>
+                               <li>
+                                       <strong><?php _e( 'Requires WordPress Version:' ); ?></strong>
+                                       <?php
+                                       /* translators: %s: WordPress version */
+                                       printf( __( '%s or higher' ), $api->requires );
+                                       ?>
+                               </li>
+                       <?php } if ( ! empty( $api->tested ) ) { ?>
+                               <li><strong><?php _e( 'Compatible up to:' ); ?></strong> <?php echo $api->tested; ?></li>
+                       <?php } if ( isset( $api->active_installs ) ) { ?>
+                               <li><strong><?php _e( 'Active Installs:' ); ?></strong> <?php
+                                       if ( $api->active_installs >= 1000000 ) {
+                                               _ex( '1+ Million', 'Active plugin installs' );
+                                       } elseif ( 0 == $api->active_installs ) {
+                                               _ex( 'Less Than 10', 'Active plugin installs' );
+                                       } else {
+                                               echo number_format_i18n( $api->active_installs ) . '+';
+                                       }
+                                       ?></li>
+                       <?php } if ( ! empty( $api->slug ) && empty( $api->external ) ) { ?>
+                               <li><a target="_blank" href="<?php echo __( 'https://wordpress.org/plugins/' ) . $api->slug; ?>/"><?php _e( 'WordPress.org Plugin Page &#187;' ); ?></a></li>
+                       <?php } if ( ! empty( $api->homepage ) ) { ?>
+                               <li><a target="_blank" href="<?php echo esc_url( $api->homepage ); ?>"><?php _e( 'Plugin Homepage &#187;' ); ?></a></li>
+                       <?php } if ( ! empty( $api->donate_link ) && empty( $api->contributors ) ) { ?>
+                               <li><a target="_blank" href="<?php echo esc_url( $api->donate_link ); ?>"><?php _e( 'Donate to this plugin &#187;' ); ?></a></li>
+                       <?php } ?>

                </ul>
                </ul>

-               <?php if ( ! empty($api->rating) ) : ?>
-               <h2><?php _e('Average Rating') ?></h2>
-               <div class="star-holder" title="<?php printf(_n('(based on %s rating)', '(based on %s ratings)', $api->num_ratings), number_format_i18n($api->num_ratings)); ?>">
-                       <div class="star star-rating" style="width: <?php echo esc_attr($api->rating) ?>px"></div>
-                       <div class="star star5"><img src="<?php echo admin_url('images/star.png?v=20110615'); ?>" alt="<?php esc_attr_e('5 stars') ?>" /></div>
-                       <div class="star star4"><img src="<?php echo admin_url('images/star.png?v=20110615'); ?>" alt="<?php esc_attr_e('4 stars') ?>" /></div>
-                       <div class="star star3"><img src="<?php echo admin_url('images/star.png?v=20110615'); ?>" alt="<?php esc_attr_e('3 stars') ?>" /></div>
-                       <div class="star star2"><img src="<?php echo admin_url('images/star.png?v=20110615'); ?>" alt="<?php esc_attr_e('2 stars') ?>" /></div>
-                       <div class="star star1"><img src="<?php echo admin_url('images/star.png?v=20110615'); ?>" alt="<?php esc_attr_e('1 star') ?>" /></div>
-               </div>
-               <small><?php printf(_n('(based on %s rating)', '(based on %s ratings)', $api->num_ratings), number_format_i18n($api->num_ratings)); ?></small>
-               <?php endif; ?>
+               <?php if ( ! empty( $api->rating ) ) { ?>
+                       <h3><?php _e( 'Average Rating' ); ?></h3>
+                       <?php wp_star_rating( array( 'rating' => $api->rating, 'type' => 'percent', 'number' => $api->num_ratings ) ); ?>
+                       <p aria-hidden="true" class="fyi-description"><?php printf( _n( '(based on %s rating)', '(based on %s ratings)', $api->num_ratings ), number_format_i18n( $api->num_ratings ) ); ?></p>
+               <?php }
+
+               if ( ! empty( $api->ratings ) && array_sum( (array) $api->ratings ) > 0 ) { ?>
+                       <h3><?php _e( 'Reviews' ); ?></h3>
+                       <p class="fyi-description"><?php _e( 'Read all reviews on WordPress.org or write your own!' ); ?></p>
+                       <?php
+                       foreach ( $api->ratings as $key => $ratecount ) {
+                               // Avoid div-by-zero.
+                               $_rating = $api->num_ratings ? ( $ratecount / $api->num_ratings ) : 0;
+                               /* translators: 1: number of stars (used to determine singular/plural), 2: number of reviews */
+                               $aria_label = esc_attr( sprintf( _n( 'Reviews with %1$d star: %2$s. Opens in a new window.', 'Reviews with %1$d stars: %2$s. Opens in a new window.', $key ),
+                                       $key,
+                                       number_format_i18n( $ratecount )
+                               ) );
+                               ?>
+                               <div class="counter-container">
+                                               <span class="counter-label"><a href="https://wordpress.org/support/view/plugin-reviews/<?php echo $api->slug; ?>?filter=<?php echo $key; ?>"
+                                                                              target="_blank" aria-label="<?php echo $aria_label; ?>"><?php printf( _n( '%d star', '%d stars', $key ), $key ); ?></a></span>
+                                               <span class="counter-back">
+                                                       <span class="counter-bar" style="width: <?php echo 92 * $_rating; ?>px;"></span>
+                                               </span>
+                                       <span class="counter-count" aria-hidden="true"><?php echo number_format_i18n( $ratecount ); ?></span>
+                               </div>
+                               <?php
+                       }
+               }
+               if ( ! empty( $api->contributors ) ) { ?>
+                       <h3><?php _e( 'Contributors' ); ?></h3>
+                       <ul class="contributors">
+                               <?php
+                               foreach ( (array) $api->contributors as $contrib_username => $contrib_profile ) {
+                                       if ( empty( $contrib_username ) && empty( $contrib_profile ) ) {
+                                               continue;
+                                       }
+                                       if ( empty( $contrib_username ) ) {
+                                               $contrib_username = preg_replace( '/^.+\/(.+)\/?$/', '\1', $contrib_profile );
+                                       }
+                                       $contrib_username = sanitize_user( $contrib_username );
+                                       if ( empty( $contrib_profile ) ) {
+                                               echo "<li><img src='https://wordpress.org/grav-redirect.php?user={$contrib_username}&amp;s=36' width='18' height='18' alt='' />{$contrib_username}</li>";
+                                       } else {
+                                               echo "<li><a href='{$contrib_profile}' target='_blank'><img src='https://wordpress.org/grav-redirect.php?user={$contrib_username}&amp;s=36' width='18' height='18' alt='' />{$contrib_username}</a></li>";
+                                       }
+                               }
+                               ?>
+                       </ul>
+                       <?php if ( ! empty( $api->donate_link ) ) { ?>
+                               <a target="_blank" href="<?php echo esc_url( $api->donate_link ); ?>"><?php _e( 'Donate to this plugin &#187;' ); ?></a>
+                       <?php } ?>
+               <?php } ?>

        </div>
        <div id="section-holder" class="wrap">
        <?php
        </div>
        <div id="section-holder" class="wrap">
        <?php

-               if ( !empty($api->tested) && version_compare( substr($GLOBALS['wp_version'], 0, strlen($api->tested)), $api->tested, '>') )
-                       echo '<div class="updated"><p>' . __('<strong>Warning:</strong> This plugin has <strong>not been tested</strong> with your current version of WordPress.') . '</p></div>';
-
-               else if ( !empty($api->requires) && version_compare( substr($GLOBALS['wp_version'], 0, strlen($api->requires)), $api->requires, '<') )
-                       echo '<div class="updated"><p>' . __('<strong>Warning:</strong> This plugin has <strong>not been marked as compatible</strong> with your version of WordPress.') . '</p></div>';
+       $wp_version = get_bloginfo( 'version' );

 
 

-               foreach ( (array)$api->sections as $section_name => $content ) {
-                       $title = $section_name;
-                       $title[0] = strtoupper($title[0]);
-                       $title = str_replace('_', ' ', $title);
+       if ( ! empty( $api->tested ) && version_compare( substr( $wp_version, 0, strlen( $api->tested ) ), $api->tested, '>' ) ) {
+               echo '<div class="notice notice-warning notice-alt"><p>' . __( '<strong>Warning:</strong> This plugin has <strong>not been tested</strong> with your current version of WordPress.' ) . '</p></div>';
+       } elseif ( ! empty( $api->requires ) && version_compare( substr( $wp_version, 0, strlen( $api->requires ) ), $api->requires, '<' ) ) {
+               echo '<div class="notice notice-warning notice-alt"><p>' . __( '<strong>Warning:</strong> This plugin has <strong>not been marked as compatible</strong> with your version of WordPress.' ) . '</p></div>';
+       }

 
 

-                       $content = links_add_base_url($content, 'http://wordpress.org/extend/plugins/' . $api->slug . '/');
-                       $content = links_add_target($content, '_blank');
+       foreach ( (array) $api->sections as $section_name => $content ) {
+               $content = links_add_base_url( $content, 'https://wordpress.org/plugins/' . $api->slug . '/' );
+               $content = links_add_target( $content, '_blank' );

 
 

-                       $san_title = esc_attr(sanitize_title_with_dashes($title));
+               $san_section = esc_attr( $section_name );

 
 

-                       $display = ( $section_name == $section ) ? 'block' : 'none';
+               $display = ( $section_name === $section ) ? 'block' : 'none';

 
 

-                       echo "\t<div id='section-{$san_title}' class='section' style='display: {$display};'>\n";
-                       echo "\t\t<h2 class='long-header'>$title</h2>";
-                       echo $content;
-                       echo "\t</div>\n";
+               echo "\t<div id='section-{$san_section}' class='section' style='display: {$display};'>\n";
+               echo $content;
+               echo "\t</div>\n";
+       }
+       echo "</div>\n";
+       echo "</div>\n";
+       echo "</div>\n"; // #plugin-information-scrollable
+       echo "<div id='$tab-footer'>\n";
+       if ( ! empty( $api->download_link ) && ( current_user_can( 'install_plugins' ) || current_user_can( 'update_plugins' ) ) ) {
+               $status = install_plugin_install_status( $api );
+               switch ( $status['status'] ) {
+                       case 'install':
+                               if ( $status['url'] ) {
+                                       echo '<a data-slug="' . esc_attr( $api->slug ) . '" id="plugin_install_from_iframe" class="button button-primary right" href="' . $status['url'] . '" target="_parent">' . __( 'Install Now' ) . '</a>';
+                               }
+                               break;
+                       case 'update_available':
+                               if ( $status['url'] ) {
+                                       echo '<a data-slug="' . esc_attr( $api->slug ) . '" data-plugin="' . esc_attr( $status['file'] ) . '" id="plugin_update_from_iframe" class="button button-primary right" href="' . $status['url'] . '" target="_parent">' . __( 'Install Update Now' ) .'</a>';
+                               }
+                               break;
+                       case 'newer_installed':
+                               /* translators: %s: Plugin version */
+                               echo '<a class="button button-primary right disabled">' . sprintf( __( 'Newer Version (%s) Installed'), $status['version'] ) . '</a>';
+                               break;
+                       case 'latest_installed':
+                               echo '<a class="button button-primary right disabled">' . __( 'Latest Version Installed' ) . '</a>';
+                               break;

                }
                }

+       }

        echo "</div>\n";
 
        iframe_footer();
        exit;
 }
        echo "</div>\n";
 
        iframe_footer();
        exit;
 }

-add_action('install_plugins_pre_plugin-information', 'install_plugin_information');