PluginProbe
Jetpack – WP Security, Backup, Speed, & Growth / 16.2
Jetpack – WP Security, Backup, Speed, & Growth v16.2
16.3-a.1 16.2 16.2-beta 12.0.3 12.1.3 12.2.3 12.3.2 12.4.2 12.5.2 12.6.4 12.7.3 12.8.3 12.9.5 13.0.2 13.1.5 13.2.4 13.3.3 13.4.5 13.5.2 13.6.2 13.7.2 13.8.3 13.9.2 14.0.1 14.1.1 All 503 releases
← All changes | class.jetpack.php +1096 -1169 12.9.5 → 16.2 View file →
@@ -6,20 +6,19 @@
6 6 *
7 7 * @package automattic/jetpack
8 8 */
9 9
10 +use Automattic\Jetpack\Activity_Log\Jetpack_Activity_Log as Activity_Log_Init;
10 11 use Automattic\Jetpack\Assets;
11 -use Automattic\Jetpack\Assets\Logo as Jetpack_Logo;
12 12 use Automattic\Jetpack\Boost_Speed_Score\Speed_Score;
13 13 use Automattic\Jetpack\Config;
14 +use Automattic\Jetpack\Connection\Authorize_Json_Api;
14 15 use Automattic\Jetpack\Connection\Client;
15 -use Automattic\Jetpack\Connection\Initial_State as Connection_Initial_State;
16 16 use Automattic\Jetpack\Connection\Manager as Connection_Manager;
17 -use Automattic\Jetpack\Connection\Nonce_Handler;
18 17 use Automattic\Jetpack\Connection\Rest_Authentication as Connection_Rest_Authentication;
19 18 use Automattic\Jetpack\Connection\Secrets;
20 19 use Automattic\Jetpack\Connection\Tokens;
21 -use Automattic\Jetpack\Connection\Utils as Connection_Utils;
20 +use Automattic\Jetpack\Connection\Webhooks\Authorize_Redirect;
22 21 use Automattic\Jetpack\Constants;
23 22 use Automattic\Jetpack\CookieState;
24 23 use Automattic\Jetpack\Current_Plan as Jetpack_Plan;
25 24 use Automattic\Jetpack\Device_Detection\User_Agent_Info;
@@ -24,15 +23,22 @@
24 23 use Automattic\Jetpack\Current_Plan as Jetpack_Plan;
25 24 use Automattic\Jetpack\Device_Detection\User_Agent_Info;
26 25 use Automattic\Jetpack\Errors;
27 26 use Automattic\Jetpack\Files;
27 +use Automattic\Jetpack\Heartbeat;
28 28 use Automattic\Jetpack\Identity_Crisis;
29 +use Automattic\Jetpack\Import\Main as Import_Main;
29 30 use Automattic\Jetpack\Licensing;
30 31 use Automattic\Jetpack\Modules;
31 32 use Automattic\Jetpack\My_Jetpack\Initializer as My_Jetpack_Initializer;
33 +use Automattic\Jetpack\Newsletter\Reader_Link;
32 34 use Automattic\Jetpack\Paths;
35 +use Automattic\Jetpack\Plugin\Deprecate;
33 36 use Automattic\Jetpack\Plugin\Tracking as Plugin_Tracking;
37 +use Automattic\Jetpack\Podcast\Podcast;
34 38 use Automattic\Jetpack\Redirect;
39 +use Automattic\Jetpack\Scan_Page\Jetpack_Scan as Scan_Page_Init;
40 +use Automattic\Jetpack\SEO\Initializer as Jetpack_SEO_Initializer;
35 41 use Automattic\Jetpack\Status;
36 42 use Automattic\Jetpack\Status\Host;
37 43 use Automattic\Jetpack\Status\Visitor;
38 44 use Automattic\Jetpack\Sync\Actions as Sync_Actions;
@@ -39,9 +45,14 @@
39 45 use Automattic\Jetpack\Sync\Health;
40 46 use Automattic\Jetpack\Sync\Sender;
41 47 use Automattic\Jetpack\Terms_Of_Service;
42 48 use Automattic\Jetpack\Tracking;
49 +use Automattic\Woocommerce_Analytics;
43 50
51 +if ( ! defined( 'ABSPATH' ) ) {
52 + exit( 0 );
53 +}
54 +
44 55 /*
45 56 Options:
46 57 jetpack_options (array)
47 58 An array of options.
@@ -69,79 +80,25 @@
69 80 * The Jetpack class.
70 81 */
71 82 class Jetpack {
72 83 /**
73 - * XMLRPC server instance.
84 + * Marks that the durable Jetpack SEO module-state options have been reconciled against
85 + * the site's module configuration, so the repair runs at most once.
74 86 *
75 - * @var null|Jetpack_XMLRPC_Server XMLRPC server used by Jetpack.
76 - */
77 - public $xmlrpc_server = null;
78 -
79 - /**
80 - * List of Jetpack modules that have CSS that gets concatenated into jetpack.css.
87 + * {@see self::reconcile_seo_module_state_options()}
81 88 *
82 - * See $concatenated_style_handles for the list of handles,
83 - * and the implode_frontend_css method for more details.
89 + * @since 16.1
84 90 *
85 - * When updating this list, make sure to update $concatenated_style_handles as well.
86 - *
87 - * @var array List of Jetpack modules.
91 + * @var string
88 92 */
89 - public $modules_with_concatenated_css = array(
90 - 'carousel',
91 - 'contact-form',
92 - 'infinite-scroll',
93 - 'likes',
94 - 'related-posts',
95 - 'sharedaddy',
96 - 'shortcodes',
97 - 'subscriptions',
98 - 'tiled-gallery',
99 - 'widgets',
100 - );
93 + const SEO_MODULE_STATE_RECONCILED_OPTION = 'jetpack_seo_module_state_reconciled';
101 94
102 95 /**
103 - * The handles of styles that are concatenated into jetpack.css.
96 + * XMLRPC server instance.
104 97 *
105 - * When making changes to that list,
106 - * you must also update concat_list in tools/webpack.config.css.js,
107 - * and to $modules_with_concatenated_css if necessary.
108 - *
109 - * @var array The handles of styles that are concatenated into jetpack.css.
98 + * @var null|Jetpack_XMLRPC_Server XMLRPC server used by Jetpack.
110 99 */
111 - public $concatenated_style_handles = array(
112 - 'jetpack-carousel-swiper-css',
113 - 'jetpack-carousel',
114 - 'grunion.css',
115 - 'the-neverending-homepage',
116 - 'jetpack_likes',
117 - 'jetpack_related-posts',
118 - 'sharedaddy',
119 - 'jetpack-slideshow',
120 - 'presentations',
121 - 'quiz',
122 - 'jetpack-subscriptions',
123 - 'jetpack-responsive-videos',
124 - 'jetpack-social-menu',
125 - 'tiled-gallery',
126 - 'jetpack_display_posts_widget',
127 - 'gravatar-profile-widget',
128 - 'goodreads-widget',
129 - 'jetpack_social_media_icons_widget',
130 - 'jetpack-top-posts-widget',
131 - 'jetpack_image_widget',
132 - 'jetpack-my-community-widget',
133 - 'jetpack-authors-widget',
134 - 'wordads',
135 - 'eu-cookie-law-style',
136 - 'flickr-widget-style',
137 - 'jetpack-search-widget',
138 - 'jetpack-simple-payments-widget-style',
139 - 'jetpack-widget-social-icons-styles',
140 - 'wpcom_instagram_widget',
141 - 'milestone-widget',
142 - 'subscribe-modal-css',
143 - );
100 + public $xmlrpc_server = null;
144 101
145 102 /**
146 103 * Contains all assets that have had their URL rewritten to minified versions.
147 104 *
@@ -158,11 +115,8 @@
158 115 'contact-form' => array(
159 116 array( 'grunion-contact-form/grunion-contact-form.php', 'Grunion Contact Form' ),
160 117 array( 'mullet/mullet-contact-form.php', 'Mullet Contact Form' ),
161 118 ),
162 - 'custom-css' => array(
163 - array( 'safecss/safecss.php', 'WordPress.com Custom CSS' ),
164 - ),
165 119 'gravatar-hovercards' => array(
166 120 array( 'jetpack-gravatar-hovercards/gravatar-hovercards.php', 'Jetpack Gravatar Hovercards' ),
167 121 ),
168 122 'latex' => array(
@@ -333,9 +287,8 @@
333 287 * Graph tags via filter when their Social Meta modules are active:
334 288 *
335 289 * - All in One SEO Pack, All in one SEO Pack Pro
336 290 * - WordPress SEO by Yoast, WordPress SEO Premium by Yoast
337 - * - SEOPress, SEOPress Pro
338 291 *
339 292 * Plugin authors: If you'd like to prevent Jetpack's Open Graph tag generation in your plugin, you can do so via this filter:
340 293 * add_filter( 'jetpack_enable_open_graph', '__return_false' );
341 294 *
@@ -378,8 +331,10 @@
378 331 'wp-caregiver/wp-caregiver.php', // WP Caregiver.
379 332 'wp-facebook-like-send-open-graph-meta/wp-facebook-like-send-open-graph-meta.php', // WP Facebook Like Send & Open Graph Meta.
380 333 'wp-facebook-open-graph-protocol/wp-facebook-ogp.php', // WP Facebook Open Graph protocol.
381 334 'wp-ogp/wp-ogp.php', // WP-OGP.
335 + 'wp-seopress/seopress.php', // SEOPress.
336 + 'wp-seopress-pro/seopress-pro.php', // SEOPress Pro.
382 337 'zoltonorg-social-plugin/zosp.php', // Zolton.org Social Plugin.
383 338 'wp-fb-share-like-button/wp_fb_share-like_widget.php', // WP Facebook Like Button.
384 339 'open-graph-metabox/open-graph-metabox.php', // Open Graph Metabox.
385 340 'seo-by-rank-math/rank-math.php', // Rank Math.
@@ -446,8 +401,10 @@
446 401
447 402 /**
448 403 * Verified data for JSON authorization request
449 404 *
405 + * @deprecated 13.4
406 + *
450 407 * @var array
451 408 */
452 409 public $json_api_authorization_request = array();
453 410
@@ -488,8 +445,16 @@
488 445 */
489 446 public static $instance = false;
490 447
491 448 /**
449 + * Resolved answer for `is_premium_analytics_enabled()`, or null before the first call.
450 + *
451 + * @since 16.1
452 + * @var bool|null
453 + */
454 + private static $premium_analytics_enabled = null;
455 +
456 + /**
492 457 * Singleton
493 458 *
494 459 * @static
495 460 */
@@ -529,9 +494,9 @@
529 494 if ( array_diff( $unfiltered_modules, $modules ) ) {
530 495 self::update_active_modules( $modules );
531 496 }
532 497
533 - add_action( 'init', array( __CLASS__, 'activate_new_modules' ) );
498 + self::register_upgrade_init_hooks();
534 499
535 500 // Upgrade to 4.3.0.
536 501 if ( Jetpack_Options::get_option( 'identity_crisis_whitelist' ) ) {
537 502 Jetpack_Options::delete_option( 'identity_crisis_whitelist' );
@@ -586,8 +551,13 @@
586 551 Jetpack_Options::delete_option( 'autoupdate_plugins' );
587 552 } // Should we have some type of fallback if something fails here?
588 553 }
589 554
555 + // Set the newsletter send default option for existing sites.
556 + if ( false === get_option( 'wpcom_newsletter_send_default' ) ) {
557 + add_option( 'wpcom_newsletter_send_default', 1 );
558 + }
559 +
590 560 if ( did_action( 'wp_loaded' ) ) {
591 561 self::upgrade_on_load();
592 562 } else {
593 563 add_action(
@@ -621,9 +591,8 @@
621 591 }
622 592
623 593 if (
624 594 class_exists( 'Jetpack_Sitemap_Manager' )
625 - && version_compare( JETPACK__VERSION, '5.3', '>=' )
626 595 ) {
627 596 do_action( 'jetpack_sitemaps_purge_data' );
628 597 }
629 598
@@ -638,9 +607,9 @@
638 607 * Also fires Action hooks for each newly activated and deactivated module.
639 608 *
640 609 * @param array $modules Array of active modules to be saved in options.
641 610 *
642 - * @return $success bool true for success, false for failure.
611 + * @return bool $success true for success, false for failure.
643 612 */
644 613 public static function update_active_modules( $modules ) {
645 614 return ( new Modules() )->update_active( $modules );
646 615 }
@@ -694,41 +663,17 @@
694 663 add_action( 'network_plugin_loaded', array( $this, 'add_configure_hook' ), 90 );
695 664 add_action( 'mu_plugin_loaded', array( $this, 'add_configure_hook' ), 90 );
696 665 add_action( 'plugins_loaded', array( $this, 'late_initialization' ), 90 );
697 666
698 - add_action( 'jetpack_verify_signature_error', array( $this, 'track_xmlrpc_error' ) );
699 -
700 - add_filter(
701 - 'jetpack_signature_check_token',
702 - array( __CLASS__, 'verify_onboarding_token' ),
703 - 10,
704 - 3
705 - );
706 -
707 667 /**
708 668 * Prepare Gutenberg Editor functionality
669 + *
670 + * The hooks previously here have been moved to modules/blocks.php but leaving this here pending
671 + * a longer investigation to see if code is expecting the Gutenberg class to always be available.
709 672 */
710 673 require_once JETPACK__PLUGIN_DIR . 'class.jetpack-gutenberg.php';
711 - add_action( 'plugins_loaded', array( 'Jetpack_Gutenberg', 'load_independent_blocks' ) );
712 - add_action( 'plugins_loaded', array( 'Jetpack_Gutenberg', 'load_block_editor_extensions' ), 9 );
713 - /**
714 - * We've switched from enqueue_block_editor_assets to enqueue_block_assets in WP-Admin because the assets with the former are loaded on the main site-editor.php.
715 - *
716 - * With the latter, the assets are now loaded in the SE iframe; the implementation is now faster because Gutenberg doesn't need to inject the assets in the iframe on client-side.
717 - */
718 - if ( is_admin() ) {
719 - add_action( 'enqueue_block_assets', array( 'Jetpack_Gutenberg', 'enqueue_block_editor_assets' ) );
720 - } else {
721 - add_action( 'enqueue_block_editor_assets', array( 'Jetpack_Gutenberg', 'enqueue_block_editor_assets' ) );
722 - }
723 - add_filter( 'render_block', array( 'Jetpack_Gutenberg', 'display_deprecated_block_message' ), 10, 2 );
724 -
725 674 add_action( 'set_user_role', array( $this, 'maybe_clear_other_linked_admins_transient' ), 10, 3 );
726 675
727 - // Unlink user before deleting the user from WP.com.
728 - add_action( 'deleted_user', array( $this, 'disconnect_user' ), 10, 1 );
729 - add_action( 'remove_user_from_blog', array( $this, 'disconnect_user' ), 10, 1 );
730 -
731 676 add_action( 'jetpack_event_log', array( 'Jetpack', 'log' ), 10, 2 );
732 677
733 678 add_filter( 'login_url', array( $this, 'login_url' ), 10, 2 );
734 679 add_action( 'login_init', array( $this, 'login_init' ) );
@@ -735,8 +680,13 @@
735 680
736 681 // Set up the REST authentication hooks.
737 682 Connection_Rest_Authentication::init();
738 683
684 + // Register Jetpack-specific connection tests (sync health, etc.) with the connection
685 + // package's health test suite. This runs on all requests (not just admin), because
686 + // the connection/test REST endpoint can be called outside admin context.
687 + add_action( 'jetpack_connection_tests_loaded', array( $this, 'register_jetpack_connection_tests' ) );
688 +
739 689 add_action( 'admin_init', array( $this, 'admin_init' ) );
740 690 add_action( 'admin_init', array( $this, 'dismiss_jetpack_notice' ) );
741 691
742 692 add_filter( 'admin_body_class', array( $this, 'admin_body_class' ), 20 );
@@ -750,12 +700,8 @@
750 700
751 701 // Returns HTTPS support status.
752 702 add_action( 'wp_ajax_jetpack-recheck-ssl', array( $this, 'ajax_recheck_ssl' ) );
753 703
754 - add_action( 'wp_ajax_jetpack_connection_banner', array( $this, 'jetpack_connection_banner_callback' ) );
755 -
756 - add_action( 'wp_ajax_jetpack_recommendations_banner', array( 'Jetpack_Recommendations_Banner', 'ajax_callback' ) );
757 -
758 704 add_action( 'wp_loaded', array( $this, 'register_assets' ) );
759 705
760 706 /**
761 707 * These actions run checks to load additional files.
@@ -773,29 +719,8 @@
773 719
774 720 add_filter( 'jetpack_get_default_modules', array( $this, 'filter_default_modules' ) );
775 721 add_filter( 'jetpack_get_default_modules', array( $this, 'handle_deprecated_modules' ), 99 );
776 722
777 - require_once JETPACK__PLUGIN_DIR . 'class-jetpack-pre-connection-jitms.php';
778 - $jetpack_jitm_messages = ( new Jetpack_Pre_Connection_JITMs() );
779 - add_filter( 'jetpack_pre_connection_jitms', array( $jetpack_jitm_messages, 'add_pre_connection_jitms' ) );
780 -
781 - /*
782 - * If enabled, point edit post, page, and comment links to Calypso instead of WP-Admin.
783 - * We should make sure to only do this for front end links.
784 - */
785 - if ( self::get_option( 'edit_links_calypso_redirect' ) && ! is_admin() ) {
786 - add_filter( 'get_edit_post_link', array( $this, 'point_edit_post_links_to_calypso' ), 1, 2 );
787 - add_filter( 'get_edit_comment_link', array( $this, 'point_edit_comment_links_to_calypso' ), 1 );
788 -
789 - /*
790 - * We'll shortcircuit wp_notify_postauthor and wp_notify_moderator pluggable functions
791 - * so they point moderation links on emails to Calypso.
792 - */
793 - require_once JETPACK__PLUGIN_DIR . '_inc/lib/functions.wp-notify.php';
794 - add_filter( 'comment_notification_recipients', 'jetpack_notify_postauthor', 1, 2 );
795 - add_filter( 'notify_moderator', 'jetpack_notify_moderator', 1, 2 );
796 - }
797 -
798 723 add_action(
799 724 'plugins_loaded',
800 725 function () {
801 726 if ( User_Agent_Info::is_mobile_app() ) {
@@ -806,18 +731,10 @@
806 731
807 732 // Update the site's Jetpack plan and products from API on heartbeats.
808 733 add_action( 'jetpack_heartbeat', array( Jetpack_Plan::class, 'refresh_from_wpcom' ) );
809 734
810 - /**
811 - * This is the hack to concatenate all css files into one.
812 - * For description and reasoning see the implode_frontend_css method.
813 - *
814 - * Super late priority so we catch all the registered styles.
815 - */
816 - if ( ! is_admin() ) {
817 - add_action( 'wp_print_styles', array( $this, 'implode_frontend_css' ), -1 ); // Run first.
818 - add_action( 'wp_print_footer_scripts', array( $this, 'implode_frontend_css' ), -1 ); // Run first to trigger before `print_late_styles`.
819 - }
735 + // The Connection package fetches the site record for `jetpack/v4/site`; reuse it to refresh the plan.
736 + add_action( 'jetpack_site_data_fetched', array( Jetpack_Plan::class, 'update_from_site_record' ) );
820 737
821 738 // Actually push the stats on shutdown.
822 739 if ( ! has_action( 'shutdown', array( $this, 'push_stats' ) ) ) {
823 740 add_action( 'shutdown', array( $this, 'push_stats' ) );
@@ -825,8 +742,10 @@
825 742
826 743 // After a successful connection.
827 744 add_action( 'jetpack_site_registered', array( $this, 'activate_default_modules_on_site_register' ) );
828 745 add_action( 'jetpack_site_registered', array( $this, 'handle_unique_registrations_stats' ) );
746 + add_action( 'jetpack_site_registered', array( Reader_Link::class, 'activate_on_connection' ), 9 );
747 + add_action( 'jetpack_site_registered', array( \Automattic\Jetpack\Reprint_Export\Reprint_Exporter::class, 'discard_credentials' ) );
829 748
830 749 // Actions for Manager::authorize().
831 750 add_action( 'jetpack_authorize_starting', array( $this, 'authorize_starting' ) );
832 751 add_action( 'jetpack_authorize_ending_linked', array( $this, 'authorize_ending_linked' ) );
@@ -831,8 +750,9 @@
831 750 add_action( 'jetpack_authorize_starting', array( $this, 'authorize_starting' ) );
832 751 add_action( 'jetpack_authorize_ending_linked', array( $this, 'authorize_ending_linked' ) );
833 752 add_action( 'jetpack_authorize_ending_authorized', array( $this, 'authorize_ending_authorized' ) );
834 753
754 + Jetpack_Client_Server::init();
835 755 add_action( 'jetpack_client_authorize_error', array( Jetpack_Client_Server::class, 'client_authorize_error' ) );
836 756 add_filter( 'jetpack_client_authorize_already_authorized_url', array( Jetpack_Client_Server::class, 'client_authorize_already_authorized_url' ) );
837 757 add_action( 'jetpack_client_authorize_processing', array( Jetpack_Client_Server::class, 'client_authorize_processing' ) );
838 758 add_filter( 'jetpack_client_authorize_fallback_url', array( Jetpack_Client_Server::class, 'client_authorize_fallback_url' ) );
@@ -837,9 +757,9 @@
837 757 add_action( 'jetpack_client_authorize_processing', array( Jetpack_Client_Server::class, 'client_authorize_processing' ) );
838 758 add_filter( 'jetpack_client_authorize_fallback_url', array( Jetpack_Client_Server::class, 'client_authorize_fallback_url' ) );
839 759
840 760 // Filters for the Manager::get_token() urls and request body.
841 - add_filter( 'jetpack_token_redirect_url', array( __CLASS__, 'filter_connect_redirect_url' ) );
761 + add_filter( 'jetpack_token_redirect_url', array( Authorize_Redirect::class, 'filter_connect_redirect_url' ) );
842 762 add_filter( 'jetpack_token_request_body', array( __CLASS__, 'filter_token_request_body' ) );
843 763
844 764 // Filter for the `jetpack/v4/connection/data` API response.
845 765 add_filter( 'jetpack_current_user_connection_data', array( __CLASS__, 'filter_jetpack_current_user_connection_data' ) );
@@ -867,11 +787,143 @@
867 787 add_filter( 'jetpack_partner_coupon_products', array( $this, 'get_partner_coupon_product_descriptions' ) );
868 788
869 789 // Actions for conditional recommendations.
870 790 add_action( 'plugins_loaded', array( 'Jetpack_Recommendations', 'init_conditional_recommendation_actions' ) );
791 +
792 + // Add 5-star
793 + add_filter( 'plugin_row_meta', array( $this, 'add_5_star_review_link' ), 10, 2 );
794 + add_action( 'init', array( Deprecate::class, 'instance' ) );
795 +
796 + // Register Jetpack module management abilities (WordPress Abilities API, WP 6.9+).
797 + \Automattic\Jetpack\Plugin\Abilities\Modules_Abilities::init();
798 +
799 + // Register Connection abilities (WordPress Abilities API, WP 6.9+). Scoped to the
800 + // Jetpack plugin for now: the Connection package no longer auto-wires these, so
801 + // connection-only consumers (Boost, Protect, Search, etc.) do not register them yet.
802 + \Automattic\Jetpack\Connection\Abilities\Connection_Abilities::init();
871 803 }
872 804
873 805 /**
806 + * Whether the current request should eagerly initialize the admin/REST-only
807 + * packages (the Import package and My Jetpack) now, at `plugins_loaded` time.
808 + *
809 + * Returns true for admin, cron, POST, and WP-CLI requests — the contexts,
810 + * knowable this early, where those packages have work to do. Returns false
811 + * for a plain front-end GET *and* for a REST request: the two can't be told
812 + * apart yet (this runs before `rest_api_init`), so callers defer the REST
813 + * case by initializing the package on `rest_api_init` instead, while a plain
814 + * page view never fires that hook and so loads nothing. This keeps
815 + * admin/REST-only PHP out of opcache on the front-end GET hot path.
816 + *
817 + * No in-repo code depends on the deferral. The one externally observable
818 + * change is timing: the packages' documented init hooks
819 + * (`jetpack_import_initialized`, `jetpack_feature_import_enabled`, and
820 + * `my_jetpack_init`) no longer fire on a plain front-end GET — they fire on
821 + * the admin, cron, POST, WP-CLI, and REST requests where the packages load.
822 + *
823 + * @return bool
824 + */
825 + private static function should_eager_load_packages() {
826 + $is_post_request = isset( $_SERVER['REQUEST_METHOD'] ) && 'POST' === strtoupper( sanitize_text_field( wp_unslash( $_SERVER['REQUEST_METHOD'] ) ) );
827 + $is_wp_cli = Constants::is_true( 'WP_CLI' );
828 +
829 + return is_admin() || wp_doing_cron() || $is_post_request || $is_wp_cli;
830 + }
831 +
832 + /**
833 + * Configure the Import package from a deferred hook.
834 + *
835 + * The eager path uses Config::ensure( 'import' ), but the deferred REST path
836 + * runs after Config::on_plugins_loaded() has already processed its feature
837 + * flags, so it needs a hookable bootstrap callback. Preserve Config's
838 + * feature-enabled action for hook consumers.
839 + *
840 + * @since 16.0
841 + *
842 + * @return void
843 + */
844 + public static function configure_import_package() {
845 + if ( class_exists( Import_Main::class ) ) {
846 + Import_Main::configure();
847 +
848 + if ( ! did_action( 'jetpack_feature_import_enabled' ) ) {
849 + do_action( 'jetpack_feature_import_enabled' );
850 + }
851 + }
852 + }
853 +
854 + /**
855 + * Whether the bundled Stats v2 dashboard is enabled.
856 + *
857 + * Stats v2 (formerly "Premium Analytics") ships with the plugin behind this
858 + * flag while it rolls out (WOOA7S-1595). When enabled it adds its own admin
859 + * menu alongside the existing Stats UI; it never replaces or hides the
860 + * legacy Stats menu, admin-bar entries, post-list column, or WP dashboard
861 + * widget. The Stats module's tracking is unaffected either way, and Stats v2
862 + * reads what that module collects, so while the module is off the plugin
863 + * answers false here before even reading the flag.
864 + *
865 + * The package has to be loadable for this to be true, so a site with the
866 + * flag on but a missing package answers false here and never adds the
867 + * Stats v2 menu (a warning is logged instead).
868 + *
869 + * @since 16.1
870 + *
871 + * @return bool
872 + */
873 + public static function is_premium_analytics_enabled() {
874 + if ( null !== self::$premium_analytics_enabled ) {
875 + return self::$premium_analytics_enabled;
876 + }
877 +
878 + if ( ! self::is_module_active( 'stats' ) ) {
879 + self::$premium_analytics_enabled = false;
880 + return false;
881 + }
882 +
883 + /**
884 + * Filters whether the bundled Premium Analytics dashboard is enabled.
885 + *
886 + * Resolved once, from `Jetpack::configure()` on `plugins_loaded`, and only
887 + * while the Stats module is active. Register this from a mu-plugin or a
888 + * plugin's main file — a callback added on `plugins_loaded` or later runs
889 + * too late to be seen.
890 + *
891 + * @since 16.1
892 + *
893 + * @param bool $enabled Defaults to the `jetpack_premium_analytics_enabled` option (false).
894 + */
895 + $flag = (bool) apply_filters( 'jetpack_premium_analytics_enabled', (bool) get_option( 'jetpack_premium_analytics_enabled' ) );
896 +
897 + self::$premium_analytics_enabled = $flag && class_exists( 'Automattic\Jetpack\PremiumAnalytics\Analytics' );
898 +
899 + if ( $flag && ! self::$premium_analytics_enabled ) {
900 + wp_trigger_error(
901 + __METHOD__,
902 + 'The jetpack_premium_analytics_enabled flag is on but the Premium Analytics package is not loadable; keeping the Stats UI in place.'
903 + );
904 + }
905 +
906 + return self::$premium_analytics_enabled;
907 + }
908 +
909 + /**
910 + * Expose the setting that turns the Premium Analytics dashboard on and off.
911 + *
912 + * Deliberately not behind is_premium_analytics_enabled(): this is the setting that flips that
913 + * check, so it has to answer while the dashboard is still off.
914 + *
915 + * @since 16.2
916 + *
917 + * @return void
918 + */
919 + public static function register_premium_analytics_enablement_setting() {
920 + if ( class_exists( 'Automattic\Jetpack\PremiumAnalytics\Enablement_Setting' ) ) {
921 + \Automattic\Jetpack\PremiumAnalytics\Enablement_Setting::register();
922 + }
923 + }
924 +
925 + /**
874 926 * Before everything else starts getting initalized, we need to initialize Jetpack using the
875 927 * Config object.
876 928 */
877 929 public function configure() {
@@ -880,13 +932,10 @@
880 932 foreach (
881 933 array(
882 934 'jitm',
883 935 'sync',
936 + 'account_protection',
884 937 'waf',
885 - 'videopress',
886 - 'stats',
887 - 'stats_admin',
888 - 'import',
889 938 )
890 939 as $feature
891 940 ) {
892 941 $config->ensure( $feature );
@@ -891,8 +940,103 @@
891 940 ) {
892 941 $config->ensure( $feature );
893 942 }
894 943
944 + // Enable the VideoPress admin UI (the "Jetpack > VideoPress" dashboard) inside the
945 + // Jetpack plugin, mirroring the standalone Jetpack VideoPress plugin. The dashboard
946 + // only renders when the VideoPress module is active (Status::is_active()); when it
947 + // is not, the menu item links to the My Jetpack interstitial to activate it.
948 + $config->ensure( 'videopress', array( 'admin_ui' => true ) );
949 +
950 + /*
951 + * The Import package only registers `jetpack/v4/import` REST routes — it
952 + * does nothing when rendering a front-end page — so gate its `ensure()`
953 + * to keep its PHP out of opcache on the front-end GET hot path. It still
954 + * loads on admin, cron, POST, and WP-CLI requests, and on `rest_api_init`
955 + * for REST: a REST request can't be identified yet at `plugins_loaded`
956 + * (this runs before `Config::on_plugins_loaded`, and `rest_api_init`
957 + * fires later), so it is initialized directly when that hook fires, while
958 + * a plain page view never fires it and so loads nothing.
959 + *
960 + * JITM stays eager (above): unlike Import, its `register()` adds a
961 + * `jetpack_sync_before_send_updated_option` filter that records the
962 + * `jetpack_last_plugin_sync` transient, and a Jetpack Sync send can fire
963 + * on a plain front-end GET — including the dedicated-sync `spawn-sync`
964 + * GET, which runs on `init` and exits before `rest_api_init`. Deferring
965 + * JITM would skip that bookkeeping and leave its message cache stale after
966 + * a plugin change, so it loads on every request as before.
967 + */
968 + if ( self::should_eager_load_packages() ) {
969 + $config->ensure( 'import' );
970 + } else {
971 + add_action(
972 + 'rest_api_init',
973 + array( __CLASS__, 'configure_import_package' ),
974 + 0
975 + );
976 + }
977 +
978 + /*
979 + * The Stats and Stats Admin packages only do work when the Stats module
980 + * is active (the front-end tracking pixel) or on wp-admin, REST, cron,
981 + * POST, and WP-CLI requests: the Stats dashboard page, the stats /
982 + * stats-app REST endpoints (which the block editor also calls for
983 + * email-open rates), the transient-cleanup cron, the connection
984 + * package's package-version tracker (which runs on POSTs and reads the
985 + * `jetpack_package_versions` filter that Stats registers), and CLI
986 + * introspection such as the heartbeat inspector. On a plain front-end
987 + * GET page view with the module off they are inert: the pixel
988 + * short-circuits on `Stats\Main::should_track()` and every other entry
989 + * point only hooks rest_api_init, admin, cron, the POST-only tracker, or
990 + * is reached through WP-CLI.
991 + * Skip loading them — and eagerly constructing the Stats Admin REST
992 + * controller — on that hot path to keep their PHP out of opcache, but
993 + * keep loading them everywhere else exactly as before so the stats REST
994 + * permission mapping (view_stats, registered by Stats\Main), the
995 + * editor's stats-app calls, the cleanup cron, and the package-version
996 + * tracker are all unchanged.
997 + *
998 + * REST requests are not yet identifiable here (REST_REQUEST is defined
999 + * after plugins_loaded), so defer those to rest_api_init. Call the
1000 + * package initializers directly rather than `$config->ensure()`: ensure()
1001 + * only flags a feature for `Config::on_plugins_loaded()` (plugins_loaded
1002 + * priority 2), which has already run by the time rest_api_init fires.
1003 + * Priority 0 runs before each package's own priority-10 route
1004 + * registration, so their routes still register within the same dispatch.
1005 + * A plain page view never fires rest_api_init, so the packages stay
1006 + * unloaded there. See JETPACK-1747.
1007 + */
1008 + $is_post_request = isset( $_SERVER['REQUEST_METHOD'] ) && 'POST' === $_SERVER['REQUEST_METHOD'];
1009 + $is_wp_cli = defined( 'WP_CLI' ) && WP_CLI;
1010 +
1011 + if ( self::is_module_active( 'stats' ) || is_admin() || wp_doing_cron() || $is_post_request || $is_wp_cli ) {
1012 + $config->ensure( 'stats' );
1013 + $config->ensure( 'stats_admin' );
1014 + } else {
1015 + add_action(
1016 + 'rest_api_init',
1017 + static function () {
1018 + if ( class_exists( 'Automattic\Jetpack\Stats\Main' ) ) {
1019 + \Automattic\Jetpack\Stats\Main::init();
1020 + }
1021 + if ( class_exists( 'Automattic\Jetpack\Stats_Admin\Main' ) ) {
1022 + \Automattic\Jetpack\Stats_Admin\Main::init();
1023 + }
1024 + },
1025 + 0
1026 + );
1027 + }
1028 +
1029 + // Stats v2 (WOOA7S-1595). Unlike Stats above it cannot be deferred when enabled — see
1030 + // Analytics::init() for why, and for why it takes no menu_title here.
1031 + if ( self::is_premium_analytics_enabled() ) {
1032 + \Automattic\Jetpack\PremiumAnalytics\Analytics::init();
1033 + }
1034 +
1035 + // Outside the check above on purpose — see Enablement_Setting. Deferred like Stats, to keep
1036 + // the autoload off the front-end hot path.
1037 + add_action( 'rest_api_init', array( __CLASS__, 'register_premium_analytics_enablement_setting' ), 0 );
1038 +
895 1039 $config->ensure(
896 1040 'connection',
897 1041 array(
898 1042 'slug' => 'jetpack',
@@ -910,12 +1054,8 @@
910 1054 );
911 1055
912 1056 $config->ensure( 'search' );
913 1057
914 - if ( defined( 'ENABLE_WORDADS_SHARED_UI' ) && ENABLE_WORDADS_SHARED_UI ) {
915 - $config->ensure( 'wordads' );
916 - }
917 -
918 1058 if ( ! $this->connection_manager ) {
919 1059 $this->connection_manager = new Connection_Manager( 'jetpack' );
920 1060 }
921 1061
@@ -923,8 +1063,10 @@
923 1063 if ( $modules->is_active( 'publicize' ) && $this->connection_manager->has_connected_user() ) {
924 1064 $config->ensure( 'publicize' );
925 1065 }
926 1066
1067 + add_action( 'jetpack_initialize_tracking', array( $this, 'initialize_tracking' ) );
1068 +
927 1069 /*
928 1070 * Load things that should only be in Network Admin.
929 1071 *
930 1072 * For now blow away everything else until a more full
@@ -939,8 +1081,9 @@
939 1081 $is_connection_ready = self::is_connection_ready();
940 1082
941 1083 if ( $is_connection_ready ) {
942 1084 add_action( 'login_form_jetpack_json_api_authorization', array( $this, 'login_form_json_api_authorization' ) );
1085 + $this->run_initialize_tracking_action();
943 1086
944 1087 Jetpack_Heartbeat::init();
945 1088 if ( self::is_module_active( 'stats' ) && self::is_module_active( 'search' ) ) {
946 1089 require_once JETPACK__PLUGIN_DIR . '_inc/lib/class.jetpack-search-performance-logger.php';
@@ -945,8 +1088,19 @@
945 1088 if ( self::is_module_active( 'stats' ) && self::is_module_active( 'search' ) ) {
946 1089 require_once JETPACK__PLUGIN_DIR . '_inc/lib/class.jetpack-search-performance-logger.php';
947 1090 Jetpack_Search_Performance_Logger::init();
948 1091 }
1092 + } else {
1093 + add_action( 'jetpack_agreed_to_terms_of_service', array( $this, 'run_initialize_tracking_action' ) );
1094 + add_action( 'rest_api_init', array( $this, 'run_initialize_tracking_action' ) );
1095 + add_filter(
1096 + 'xmlrpc_methods',
1097 + function ( $methods ) {
1098 + $this->run_initialize_tracking_action();
1099 + return $methods;
1100 + },
1101 + 1
1102 + );
949 1103 }
950 1104
951 1105 // Initialize remote file upload request handlers.
952 1106 $this->add_remote_request_handlers();
@@ -956,20 +1110,10 @@
956 1110 */
957 1111 if ( $is_connection_ready ) {
958 1112 require_once JETPACK__PLUGIN_DIR . '_inc/lib/class.jetpack-iframe-embed.php';
959 1113 add_action( 'init', array( 'Jetpack_Iframe_Embed', 'init' ), 9, 0 );
960 - require_once JETPACK__PLUGIN_DIR . '_inc/lib/class.jetpack-keyring-service-helper.php';
961 - add_action( 'init', array( 'Jetpack_Keyring_Service_Helper', 'init' ), 9, 0 );
1114 + add_action( 'rest_api_init', array( $this, 'maybe_initialize_rest_jsonapi' ) );
962 1115 }
963 -
964 - if ( ( new Tracking( 'jetpack', $this->connection_manager ) )->should_enable_tracking( new Terms_Of_Service(), new Status() ) ) {
965 - add_action( 'init', array( new Plugin_Tracking(), 'init' ) );
966 - } else {
967 - /**
968 - * Initialize tracking right after the user agrees to the terms of service.
969 - */
970 - add_action( 'jetpack_agreed_to_terms_of_service', array( new Plugin_Tracking(), 'init' ) );
971 - }
972 1116 }
973 1117
974 1118 /**
975 1119 * Runs on plugins_loaded. Use this to add code that needs to be executed later than other
@@ -977,16 +1121,59 @@
977 1121 *
978 1122 * @action plugins_loaded
979 1123 */
980 1124 public function late_initialization() {
981 - add_action( 'plugins_loaded', array( 'Jetpack', 'load_modules' ), 100 );
1125 + add_action( 'after_setup_theme', array( 'Jetpack', 'load_modules' ), -2 );
982 1126
983 - My_Jetpack_Initializer::init();
1127 + /*
1128 + * My Jetpack is a wp-admin dashboard. Its Initializer::init() only wires
1129 + * up admin-menu, admin_init, and rest_api_init surfaces — and eagerly
1130 + * loads every product class (backup, boost, protect, …) just to register
1131 + * admin plugin-action links — so none of it is needed on a plain
1132 + * front-end GET page view. (The pieces that do immediate work, e.g.
1133 + * Connection REST authentication and Licensing, are already initialized
1134 + * unconditionally in Jetpack's constructor, so they are unaffected here.)
1135 + *
1136 + * Gate the call to the request types where My Jetpack actually does work.
1137 + * REST can't be detected yet at plugins_loaded, so initialize on
1138 + * rest_api_init for that branch; a plain page view never fires it, so My
1139 + * Jetpack stays unloaded there.
1140 + */
1141 + if ( self::should_eager_load_packages() ) {
1142 + My_Jetpack_Initializer::init();
1143 + } else {
1144 + add_action( 'rest_api_init', array( My_Jetpack_Initializer::class, 'init' ), 0 );
1145 + }
984 1146
985 - // Initialize Boost Speed Score
986 - $modules = Jetpack_Boost_Modules::init();
987 - new Speed_Score( $modules, 'jetpack-dashboard' );
1147 + Activity_Log_Init::initialize();
1148 + Scan_Page_Init::initialize();
1149 + Jetpack_SEO_Initializer::init();
988 1150
1151 + if ( ( new Modules() )->is_active( 'podcast' ) ) {
1152 + Podcast::init();
1153 + }
1154 +
1155 + /*
1156 + * Initialize Boost Speed Score. It only does work on REST requests (the
1157 + * dashboard speed-score endpoints) and on a few Jetpack Boost lifecycle
1158 + * actions, so defer constructing it — and loading the boost-speed-score
1159 + * package classes — until one of those hooks actually fires instead of on
1160 + * every request. Priority 0 ensures the object's own callbacks (added in
1161 + * its constructor at the default priority) still run for the firing hook.
1162 + */
1163 + $initialize_speed_score = static function () {
1164 + static $initialized = false;
1165 + if ( $initialized ) {
1166 + return;
1167 + }
1168 + $initialized = true;
1169 + new Speed_Score( array(), 'jetpack-dashboard' );
1170 + };
1171 + add_action( 'rest_api_init', $initialize_speed_score, 0 );
1172 + add_action( 'jetpack_boost_deactivate', $initialize_speed_score, 0 );
1173 + add_action( 'jetpack_boost_environment_changed', $initialize_speed_score, 0 );
1174 + add_action( 'handle_environment_change', $initialize_speed_score, 0 );
1175 +
989 1176 /**
990 1177 * Fires when Jetpack is fully loaded and ready. This is the point where it's safe
991 1178 * to instantiate classes from packages and namespaces that are managed by the Jetpack Autoloader.
992 1179 *
@@ -1024,8 +1211,10 @@
1024 1211
1025 1212 /**
1026 1213 * Redirect edit post links to Calypso.
1027 1214 *
1215 + * @deprecated since 13.9
1216 + *
1028 1217 * @param string $default_url Post edit URL.
1029 1218 * @param int $post_id Post ID.
1030 1219 *
1031 1220 * @return string
@@ -1030,8 +1219,10 @@
1030 1219 *
1031 1220 * @return string
1032 1221 */
1033 1222 public function point_edit_post_links_to_calypso( $default_url, $post_id ) {
1223 + _deprecated_function( __METHOD__, '13.9' );
1224 +
1034 1225 $post = get_post( $post_id );
1035 1226
1036 1227 if ( empty( $post ) ) {
1037 1228 return $default_url;
@@ -1062,13 +1253,17 @@
1062 1253
1063 1254 /**
1064 1255 * Redirect edit comment links to Calypso.
1065 1256 *
1257 + * @deprecated since 13.9
1258 + *
1066 1259 * @param string $url Comment edit URL.
1067 1260 *
1068 1261 * @return string
1069 1262 */
1070 1263 public function point_edit_comment_links_to_calypso( $url ) {
1264 + _deprecated_function( __METHOD__, '13.9' );
1265 +
1071 1266 // Take the `query` key value from the URL, and parse its parts to the $query_args. `amp;c` matches the comment ID.
1072 1267 $query_args = null;
1073 1268 wp_parse_str( wp_parse_url( $url, PHP_URL_QUERY ), $query_args );
1074 1269
@@ -1087,9 +1282,8 @@
1087 1282 *
1088 1283 * @return array list of callables.
1089 1284 */
1090 1285 public function filter_sync_callable_whitelist( $callables ) {
1091 -
1092 1286 // Jetpack Functions.
1093 1287 $jetpack_callables = array(
1094 1288 'single_user_site' => array( 'Jetpack', 'is_single_user_site' ),
1095 1289 'updates' => array( 'Jetpack', 'get_updates' ),
@@ -1094,23 +1288,9 @@
1094 1288 'single_user_site' => array( 'Jetpack', 'is_single_user_site' ),
1095 1289 'updates' => array( 'Jetpack', 'get_updates' ),
1096 1290 'available_jetpack_blocks' => array( 'Jetpack_Gutenberg', 'get_availability' ), // Includes both Gutenberg blocks *and* plugins.
1097 1291 );
1098 - $callables = array_merge( $callables, $jetpack_callables );
1099 -
1100 - // Jetpack_SSO_Helpers.
1101 - if ( include_once JETPACK__PLUGIN_DIR . 'modules/sso/class.jetpack-sso-helpers.php' ) {
1102 - $sso_helpers = array(
1103 - 'sso_is_two_step_required' => array( 'Jetpack_SSO_Helpers', 'is_two_step_required' ),
1104 - 'sso_should_hide_login_form' => array( 'Jetpack_SSO_Helpers', 'should_hide_login_form' ),
1105 - 'sso_match_by_email' => array( 'Jetpack_SSO_Helpers', 'match_by_email' ),
1106 - 'sso_new_user_override' => array( 'Jetpack_SSO_Helpers', 'new_user_override' ),
1107 - 'sso_bypass_default_login_form' => array( 'Jetpack_SSO_Helpers', 'bypass_login_forward_wpcom' ),
1108 - );
1109 - $callables = array_merge( $callables, $sso_helpers );
1110 - }
1111 -
1112 - return $callables;
1292 + return array_merge( $callables, $jetpack_callables );
1113 1293 }
1114 1294
1115 1295 /**
1116 1296 * Extend Sync multisite callables with Jetpack Plugin functions.
@@ -1135,41 +1315,8 @@
1135 1315 return $callables;
1136 1316 }
1137 1317
1138 1318 /**
1139 - * Deprecated
1140 - * Please use Automattic\Jetpack\JITMS\JITM::jetpack_track_last_sync_callback instead.
1141 - *
1142 - * @param array $params The action parameters.
1143 - *
1144 - * @deprecated since 9.8.
1145 - */
1146 - public function jetpack_track_last_sync_callback( $params ) {
1147 - _deprecated_function( __METHOD__, 'jetpack-9.8', '\Automattic\Jetpack\JITMS\JITM->jetpack_track_last_sync_callback' );
1148 - return Automattic\Jetpack\JITMS\JITM::get_instance()->jetpack_track_last_sync_callback( $params );
1149 - }
1150 -
1151 - /**
1152 - * Jetpack Connection banner callback function.
1153 - *
1154 - * @return void
1155 - */
1156 - public function jetpack_connection_banner_callback() {
1157 - check_ajax_referer( 'jp-connection-banner-nonce', 'nonce' );
1158 -
1159 - // Disable the banner dismiss functionality if the pre-connection prompt helpers filter is set.
1160 - if (
1161 - isset( $_REQUEST['dismissBanner'] ) &&
1162 - ! Jetpack_Connection_Banner::force_display()
1163 - ) {
1164 - Jetpack_Options::update_option( 'dismissed_connection_banner', 1 );
1165 - wp_send_json_success();
1166 - }
1167 -
1168 - wp_die();
1169 - }
1170 -
1171 - /**
1172 1319 * If there are any stats that need to be pushed, but haven't been, push them now.
1173 1320 */
1174 1321 public function push_stats() {
1175 1322 if ( ! empty( $this->stats ) ) {
@@ -1184,16 +1331,8 @@
1184 1331 * @param string $cap Capability name.
1185 1332 */
1186 1333 public function jetpack_custom_caps( $caps, $cap ) {
1187 1334 switch ( $cap ) {
1188 - case 'jetpack_manage_modules':
1189 - case 'jetpack_activate_modules':
1190 - case 'jetpack_deactivate_modules':
1191 - $caps = array( 'manage_options' );
1192 - break;
1193 - case 'jetpack_configure_modules':
1194 - $caps = array( 'manage_options' );
1195 - break;
1196 1335 case 'jetpack_manage_autoupdates':
1197 1336 $caps = array(
1198 1337 'manage_options',
1199 1338 'update_plugins',
@@ -1211,9 +1350,9 @@
1211 1350 if ( $is_offline_mode ) {
1212 1351 $caps = array( 'manage_options' );
1213 1352 break;
1214 1353 } else {
1215 - $caps = array( 'read' );
1354 + $caps = array( 'edit_posts' );
1216 1355 }
1217 1356 break;
1218 1357 }
1219 1358 return $caps;
@@ -1372,9 +1511,9 @@
1372 1511 }
1373 1512 /**
1374 1513 * Does the network allow admins to add new users.
1375 1514 *
1376 - * @return boolian
1515 + * @return bool
1377 1516 */
1378 1517 public static function network_add_new_users() {
1379 1518 return (bool) get_site_option( 'add_new_users' );
1380 1519 }
@@ -1381,9 +1520,9 @@
1381 1520 /**
1382 1521 * File upload psace left per site in MB.
1383 1522 * -1 means NO LIMIT.
1384 1523 *
1385 - * @return number
1524 + * @return int
1386 1525 */
1387 1526 public static function network_site_upload_space() {
1388 1527 // value in MB.
1389 1528 return ( get_site_option( 'upload_space_check_disabled' ) ? -1 : get_space_allowed() );
@@ -1400,9 +1539,9 @@
1400 1539
1401 1540 /**
1402 1541 * Maximum file upload size set by the network.
1403 1542 *
1404 - * @return number
1543 + * @return int
1405 1544 */
1406 1545 public static function network_max_upload_file_size() {
1407 1546 // value in KB.
1408 1547 return get_site_option( 'fileupload_maxk', 300 );
@@ -1656,44 +1795,8 @@
1656 1795 return apply_filters( 'jetpack_is_connection_ready', self::connection()->is_connected(), self::connection() );
1657 1796 }
1658 1797
1659 1798 /**
1660 - * Deprecated: Is Jetpack in development (offline) mode?
1661 - *
1662 - * This static method is being left here intentionally without the use of _deprecated_function(), as other plugins
1663 - * and themes still use it, and we do not want to flood them with notices.
1664 - *
1665 - * Please use Automattic\Jetpack\Status()->is_offline_mode() instead.
1666 - *
1667 - * @deprecated since 8.0.
1668 - */
1669 - public static function is_development_mode() {
1670 - _deprecated_function( __METHOD__, 'jetpack-8.0', '\Automattic\Jetpack\Status->is_offline_mode' );
1671 - return ( new Status() )->is_offline_mode();
1672 - }
1673 -
1674 - /**
1675 - * Whether the site is currently onboarding or not.
1676 - * A site is considered as being onboarded if it currently has an onboarding token.
1677 - *
1678 - * @since 5.8
1679 - * @deprecated Use \Automattic\Jetpack\Status()->is_onboarding()
1680 - *
1681 - * @access public
1682 - * @static
1683 - *
1684 - * @return bool True if the site is currently onboarding, false otherwise
1685 - */
1686 - public static function is_onboarding() {
1687 - _deprecated_function( __METHOD__, 'jetpack-10.9', 'Automattic\\Jetpack\\Status\\is_onboarding' );
1688 -
1689 - if ( ! method_exists( 'Automattic\Jetpack\Status', 'is_onboarding' ) ) {
1690 - return Jetpack_Options::get_option( 'onboarding' ) !== false;
1691 - }
1692 - return ( new Status() )->is_onboarding();
1693 - }
1694 -
1695 - /**
1696 1799 * Determines reason for Jetpack offline mode.
1697 1800 */
1698 1801 public static function development_mode_trigger_text() {
1699 1802 $status = new Status();
@@ -1707,11 +1810,10 @@
1707 1810 } elseif ( defined( 'WP_LOCAL_DEV' ) && WP_LOCAL_DEV ) {
1708 1811 $notice = __( 'The WP_LOCAL_DEV constant is defined in wp-config.php or elsewhere.', 'jetpack' );
1709 1812 } elseif ( $status->is_local_site() ) {
1710 1813 $notice = __( 'The site URL is a known local development environment URL (e.g. http://localhost).', 'jetpack' );
1711 - /** This filter is documented in packages/status/src/class-status.php */
1712 - } elseif ( has_filter( 'jetpack_development_mode' ) && apply_filters( 'jetpack_development_mode', false ) ) { // This is a deprecated filter name.
1713 - $notice = __( 'The jetpack_development_mode filter is set to true.', 'jetpack' );
1814 + } elseif ( get_option( 'jetpack_offline_mode' ) ) {
1815 + $notice = __( 'The jetpack_offline_mode option is set to true.', 'jetpack' );
1714 1816 } else {
1715 1817 $notice = __( 'The jetpack_offline_mode filter is set to true.', 'jetpack' );
1716 1818 }
1717 1819
@@ -1741,15 +1843,8 @@
1741 1843 $notice = sprintf( __( 'You are currently running a development version of Jetpack. <a href="%s" target="_blank">Submit your feedback</a>', 'jetpack' ), esc_url( Redirect::get_url( 'jetpack-contact-support-beta-group' ) ) );
1742 1844
1743 1845 echo '<div class="updated" style="border-color: #f0821e;"><p>' . $notice . '</p></div>'; // phpcs:ignore WordPress.Security.EscapeOutput.OutputNotEscaped -- All provided text.
1744 1846 }
1745 - // Throw up a notice if using staging mode.
1746 - if ( ( new Status() )->is_staging_site() ) {
1747 - /* translators: %s is a URL */
1748 - $notice = sprintf( __( 'You are running Jetpack on a <a href="%s" target="_blank">staging server</a>.', 'jetpack' ), esc_url( Redirect::get_url( 'jetpack-support-staging-sites' ) ) );
1749 -
1750 - echo '<div class="updated" style="border-color: #f0821e;"><p>' . $notice . '</p></div>'; // phpcs:ignore WordPress.Security.EscapeOutput.OutputNotEscaped -- All provided text.
1751 - }
1752 1847 }
1753 1848
1754 1849 /**
1755 1850 * Whether Jetpack's version maps to a public release, or a development version.
@@ -1770,28 +1865,8 @@
1770 1865 );
1771 1866 }
1772 1867
1773 1868 /**
1774 - * Is a given user (or the current user if none is specified) linked to a WordPress.com user?
1775 - *
1776 - * @param int $user_id User ID or will use get_current_user_id if false/not provided.
1777 - */
1778 - public static function is_user_connected( $user_id = false ) {
1779 - _deprecated_function( __METHOD__, 'jetpack-9.5', 'Automattic\\Jetpack\\Connection\\Manager\\is_user_connected' );
1780 - return self::connection()->is_user_connected( $user_id );
1781 - }
1782 -
1783 - /**
1784 - * Get the wpcom user data of the current|specified connected user.
1785 - *
1786 - * @param null|int $user_id User ID or will use get_current_user_id if null.
1787 - */
1788 - public static function get_connected_user_data( $user_id = null ) {
1789 - _deprecated_function( __METHOD__, 'jetpack-9.5', 'Automattic\\Jetpack\\Connection\\Manager\\get_connected_user_data' );
1790 - return self::connection()->get_connected_user_data( $user_id );
1791 - }
1792 -
1793 - /**
1794 1869 * Get the wpcom email of the current|specified connected user.
1795 1870 *
1796 1871 * @param null|int $user_id User ID or will use get_current_user_id if null.
1797 1872 */
@@ -1843,18 +1918,11 @@
1843 1918 */
1844 1919 public static function load_modules() {
1845 1920 $status = new Status();
1846 1921
1847 - if ( method_exists( $status, 'is_onboarding' ) ) {
1848 - $is_onboarding = $status->is_onboarding();
1849 - } else {
1850 - $is_onboarding = self::is_onboarding();
1851 - }
1852 -
1853 1922 if (
1854 1923 ! self::is_connection_ready()
1855 1924 && ! $status->is_offline_mode()
1856 - && ! $is_onboarding
1857 1925 && (
1858 1926 ! is_multisite()
1859 1927 || ! get_site_option( 'jetpack_protect_active' )
1860 1928 )
@@ -1975,22 +2043,10 @@
1975 2043 *
1976 2044 * @todo Store the result in core's object cache maybe?
1977 2045 */
1978 2046 public static function get_active_plugins() {
1979 - $active_plugins = (array) get_option( 'active_plugins', array() );
1980 -
1981 - if ( is_multisite() ) {
1982 - // Due to legacy code, active_sitewide_plugins stores them in the keys,
1983 - // whereas active_plugins stores them in the values.
1984 - $network_plugins = array_keys( get_site_option( 'active_sitewide_plugins', array() ) );
1985 - if ( $network_plugins ) {
1986 - $active_plugins = array_merge( $active_plugins, $network_plugins );
1987 - }
1988 - }
1989 -
1990 - sort( $active_plugins );
1991 -
1992 - return array_unique( $active_plugins );
2047 + // Delegates to the canonical implementation in the Connection package.
2048 + return Heartbeat::get_active_plugins();
1993 2049 }
1994 2050
1995 2051 /**
1996 2052 * Gets and parses additional plugin data to send with the heartbeat data
@@ -2128,8 +2184,10 @@
2128 2184 *
2129 2185 * @param bool true Should Twitter Card Meta tags be disabled. Default to true.
2130 2186 */
2131 2187 if ( ! apply_filters( 'jetpack_disable_twitter_cards', false ) ) {
2188 + // @todo Remove this require once the deprecated Jetpack_Twitter_Cards wrapper has been removed.
2189 + // Twitter Cards functionality now lives in the jetpack-post-media package (Automattic\Jetpack\Post_Media\Twitter_Cards).
2132 2190 require_once JETPACK__PLUGIN_DIR . 'class.jetpack-twitter-cards.php';
2133 2191 }
2134 2192 }
2135 2193
@@ -2232,9 +2290,9 @@
2232 2290 if ( isset( $_GET['page'] ) && in_array( $_GET['page'], array( 'jetpack', 'jetpack_modules' ), true ) ) { // phpcs:ignore WordPress.Security.NonceVerification.Recommended -- we're not changing the site.
2233 2291 $page = sanitize_text_field( wp_unslash( $_GET['page'] ) ); // phpcs:ignore WordPress.Security.NonceVerification.Recommended -- we're not changing the site.
2234 2292 }
2235 2293 wp_safe_redirect( self::admin_url( 'page=' . rawurlencode( $page ) ) );
2236 - exit;
2294 + exit( 0 );
2237 2295 }
2238 2296 }
2239 2297
2240 2298 /**
@@ -2314,12 +2372,14 @@
2314 2372 * @return array
2315 2373 */
2316 2374 public function handle_deprecated_modules( $modules ) {
2317 2375 $deprecated_modules = array(
2318 - 'debug' => null, // Closed out and moved to the debugger library.
2319 - 'wpcc' => 'sso', // Closed out in 2.6 -- SSO provides the same functionality.
2320 - 'gplus-authorship' => null, // Closed out in 3.2 -- Google dropped support.
2321 - 'minileven' => null, // Closed out in 8.3 -- Responsive themes are common now, and so is AMP.
2376 + 'debug' => null, // Closed out and moved to the debugger library.
2377 + 'wpcc' => 'sso', // Closed out in 2.6 -- SSO provides the same functionality.
2378 + 'gplus-authorship' => null, // Closed out in 3.2 -- Google dropped support.
2379 + 'minileven' => null, // Closed out in 8.3 -- Responsive themes are common now, and so is AMP.
2380 + 'lazy-images' => null, // Closed out in 12.8 -- WordPress core now has native lazy loading.
2381 + 'enhanced-distribution' => null, // Closed out in 13.3 -- WP.com is winding down the firehose.
2322 2382 );
2323 2383
2324 2384 // Don't activate SSO if they never completed activating WPCC.
2325 2385 if ( self::is_module_active( 'wpcc' ) ) {
@@ -2373,8 +2433,17 @@
2373 2433 }
2374 2434 }
2375 2435 }
2376 2436
2437 + // Special case to convert block setting to a block module.
2438 + $block_key = array_search( 'blocks', $modules, true );
2439 + if ( $block_key !== false ) { // Only care if 'blocks' made it through the previous filters.
2440 + $block_option = get_option( 'jetpack_blocks_disabled', null );
2441 + if ( $block_option ) {
2442 + unset( $modules[ $block_key ] );
2443 + }
2444 + }
2445 +
2377 2446 return $modules;
2378 2447 }
2379 2448
2380 2449 /**
@@ -2487,20 +2556,28 @@
2487 2556
2488 2557 /**
2489 2558 * Catches PHP errors. Must be used in conjunction with output buffering.
2490 2559 *
2560 + * @deprecated since 13.5
2491 2561 * @param bool $catch True to start catching, False to stop.
2492 2562 *
2493 2563 * @static
2564 + * @deprecated 13.5
2565 + * @see \Automattic\Jetpack\Errors
2494 2566 */
2495 2567 public static function catch_errors( $catch ) {
2568 + _deprecated_function( __METHOD__, '13.5' );
2569 + // @phan-suppress-next-line PhanDeprecatedClass
2496 2570 return ( new Errors() )->catch_errors( $catch );
2497 2571 }
2498 2572
2499 2573 /**
2500 2574 * Saves any generated PHP errors in ::state( 'php_errors', {errors} )
2575 + *
2576 + * @deprecated since 13.5
2501 2577 */
2502 2578 public static function catch_errors_on_shutdown() {
2579 + _deprecated_function( __METHOD__, '13.5' );
2503 2580 self::state( 'php_errors', self::alias_directories( ob_get_clean() ) );
2504 2581 }
2505 2582
2506 2583 /**
@@ -2604,9 +2681,9 @@
2604 2681 ),
2605 2682 add_query_arg( compact( 'min_version', 'max_version', 'other_modules' ), self::admin_url( 'page=jetpack' ) )
2606 2683 );
2607 2684 wp_safe_redirect( $url );
2608 - exit;
2685 + exit( 0 );
2609 2686 }
2610 2687 }
2611 2688
2612 2689 /**
@@ -2624,9 +2701,8 @@
2624 2701
2625 2702 // Check each module for fatal errors, a la wp-admin/plugins.php::activate before activating.
2626 2703 if ( $send_state_messages ) {
2627 2704 self::restate();
2628 - self::catch_errors( true );
2629 2705 }
2630 2706
2631 2707 $active = self::get_active_modules();
2632 2708
@@ -2694,10 +2770,8 @@
2694 2770 if ( $send_state_messages ) {
2695 2771 self::state( 'error', false );
2696 2772 self::state( 'module', false );
2697 2773 }
2698 -
2699 - self::catch_errors( false );
2700 2774 /**
2701 2775 * Fires when default modules are activated.
2702 2776 *
2703 2777 * @since 1.9.0
@@ -2775,9 +2849,9 @@
2775 2849 *
2776 2850 * @param string $message Error message.
2777 2851 * @param bool $deactivate Deactivate Jetpack or not.
2778 2852 *
2779 - * @return void
2853 + * @return never
2780 2854 */
2781 2855 public static function bail_on_activation( $message, $deactivate = true ) {
2782 2856 ?>
2783 2857 <!doctype html>
@@ -2815,9 +2889,9 @@
2815 2889 if ( $update ) {
2816 2890 update_option( 'active_plugins', array_filter( $plugins ) );
2817 2891 }
2818 2892 }
2819 - exit;
2893 + exit( 0 );
2820 2894 }
2821 2895
2822 2896 /**
2823 2897 * Attached to activate_{ plugin_basename( __FILES__ ) } by register_activation_hook()
@@ -2842,12 +2916,18 @@
2842 2916 update_option( 'jetpack_activation_source', self::get_activation_source( wp_get_referer() ) );
2843 2917
2844 2918 Health::on_jetpack_activated();
2845 2919
2920 + \Automattic\Jetpack\Reprint_Export\Reprint_Exporter::discard_credentials();
2921 +
2846 2922 if ( self::is_connection_ready() && method_exists( 'Automattic\Jetpack\Sync\Actions', 'do_only_first_initial_sync' ) ) {
2847 2923 Sync_Actions::do_only_first_initial_sync();
2848 2924 }
2849 2925
2926 + if ( ! defined( 'WC_ANALYTICS' ) && class_exists( 'Automattic\Woocommerce_Analytics' ) ) {
2927 + Woocommerce_Analytics::maybe_add_proxy_speed_module();
2928 + }
2929 +
2850 2930 self::plugin_initialize();
2851 2931 }
2852 2932
2853 2933 /**
@@ -2882,9 +2962,9 @@
2882 2962
2883 2963 if ( $plugins_path === $referer['path'] ) {
2884 2964 $source_type = 'list';
2885 2965 } elseif ( $plugins_install_path === $referer['path'] ) {
2886 - $tab = isset( $query_parts['tab'] ) ? $query_parts['tab'] : 'featured';
2966 + $tab = $query_parts['tab'] ?? 'featured';
2887 2967 switch ( $tab ) {
2888 2968 case 'popular':
2889 2969 $source_type = 'popular';
2890 2970 break;
@@ -2894,10 +2974,10 @@
2894 2974 case 'favorites':
2895 2975 $source_type = 'favorites';
2896 2976 break;
2897 2977 case 'search':
2898 - $source_type = 'search-' . ( isset( $query_parts['type'] ) ? $query_parts['type'] : 'term' );
2899 - $source_query = isset( $query_parts['s'] ) ? $query_parts['s'] : null;
2978 + $source_type = 'search-' . ( $query_parts['type'] ?? 'term' );
2979 + $source_query = $query_parts['s'] ?? null;
2900 2980 break;
2901 2981 default:
2902 2982 $source_type = 'featured';
2903 2983 }
@@ -2906,29 +2986,351 @@
2906 2986 return array( $source_type, $source_query );
2907 2987 }
2908 2988
2909 2989 /**
2910 - * Runs before bumping version numbers up to a new version
2990 + * Runs before bumping version numbers up to a new version.
2911 2991 *
2912 - * @param string $version Version:timestamp.
2992 + * Only ever registered the hooks for the release post update modal, which has been removed.
2993 + * No longer hooked to `updating_jetpack_version`.
2994 + *
2995 + * @deprecated 16.2
2996 + *
2997 + * @param string $version Version:timestamp.
2913 2998 * @param string $old_version Old Version:timestamp or false if not set yet.
2914 2999 */
2915 - public static function do_version_bump( $version, $old_version ) {
2916 - if ( $old_version ) { // For existing Jetpack installations.
2917 - add_action( 'admin_enqueue_scripts', __CLASS__ . '::enqueue_block_style' );
3000 + public static function do_version_bump( $version, $old_version ) { // phpcs:ignore VariableAnalysis.CodeAnalysis.VariableAnalysis.UnusedVariable -- Signature preserved for the deprecation shim.
3001 + _deprecated_function( __METHOD__, 'jetpack-16.2' );
3002 + }
2918 3003
2919 - // If a front end page is visited after the update, the 'wp' action will fire.
2920 - add_action( 'wp', 'Jetpack::set_update_modal_display' );
3004 + /**
3005 + * Enables the Newsletter (subscriptions) module for existing sites now that it is a default-on module.
3006 + *
3007 + * Fresh installs receive the module via its "Auto Activate: Yes" header, so this only handles sites
3008 + * upgrading from a version where the module defaulted off. It runs once per site (guarded by the
3009 + * subscriptions_default_on_migrated option). Fresh installs are marked as migrated immediately so the
3010 + * migration never runs for them. After it has run, the user's choice to deactivate the module again
3011 + * (for example from the My Jetpack Products page) is respected and never reverted.
3012 + *
3013 + * The module requires a connection, so on a disconnected site the migration is deferred without setting
3014 + * the guard, allowing a later version bump to retry once the site is connected.
3015 + *
3016 + * @param string $version New Jetpack version:timestamp.
3017 + * @param string|false $old_version Previous Jetpack version:timestamp, or false on a fresh install.
3018 + */
3019 + public static function activate_subscriptions_module_for_existing_sites( $version, $old_version ) {
3020 + if ( get_option( 'jetpack_subscriptions_default_on_migrated' ) ) {
3021 + return;
3022 + }
2921 3023
2922 - // If an admin page is visited after the update, the 'current_screen' action will fire.
2923 - add_action( 'current_screen', 'Jetpack::set_update_modal_display' );
3024 + // Fresh installs get the module via its "Auto Activate: Yes" header. Mark them as migrated so a
3025 + // later opt-out is never reverted by the existing-site path on a subsequent version bump.
3026 + if ( ! $old_version ) {
3027 + update_option( 'jetpack_subscriptions_default_on_migrated', true );
3028 + return;
2924 3029 }
3030 +
3031 + if ( ! self::is_connection_ready() ) {
3032 + return;
3033 + }
3034 +
3035 + // Mark as migrated only once the module is active, so a transient activation failure is retried on
3036 + // a later version bump rather than being silently skipped.
3037 + if ( self::is_module_active( 'subscriptions' ) || self::activate_module( 'subscriptions', false, false ) ) {
3038 + update_option( 'jetpack_subscriptions_default_on_migrated', true );
3039 + }
2925 3040 }
2926 3041
2927 3042 /**
3043 + * Option flag that records the AI master-switch opt-out reconciliation has run,
3044 + * so it never runs twice.
3045 + *
3046 + * @var string
3047 + */
3048 + const AI_MASTER_OPTOUT_MIGRATED_OPTION = 'jetpack_ai_master_optout_migrated';
3049 +
3050 + /**
3051 + * Register the on-upgrade init hooks whose relative ORDER matters, extracted so
3052 + * the ordering can be asserted in tests without invoking plugin_upgrade() (whose
3053 + * guards make it unreliable to trigger under test). activate_new_modules()
3054 + * (init, default priority 10) auto-activates "Auto Activate: Yes" modules
3055 + * including the `ai` master; reconcile_ai_master_optout() must run at a LATER
3056 + * priority to honor an explicit AI opt-out.
3057 + *
3058 + * @return void
3059 + */
3060 + public static function register_upgrade_init_hooks() {
3061 + add_action( 'init', array( __CLASS__, 'activate_new_modules' ) );
3062 + add_action( 'init', array( __CLASS__, 'reconcile_ai_master_optout' ), 20 );
3063 + }
3064 +
3065 + /**
3066 + * Preserves an explicit Jetpack AI opt-out when the `ai` module becomes the site-wide
3067 + * master switch off WordPress.com Simple (self-hosted and Atomic).
3068 + *
3069 + * The `ai` module is "Auto Activate: Yes", so on upgrade {@see self::activate_new_modules()}
3070 + * turns it on for connected sites — the desired default-on / auto-enable-on-connection
3071 + * behavior, which this method deliberately leaves alone. The one case it corrects is a site
3072 + * that had explicitly disabled Jetpack AI (the `jetpack_ai_enabled` option present and falsey)
3073 + * before the module shipped: that opt-out must survive the module becoming the master, so the
3074 + * module is deactivated for exactly those sites. An absent or truthy option is left untouched.
3075 + *
3076 + * Ordering is the whole point. `activate_new_modules()` is hooked on `init` at priority 10 and
3077 + * auto-activates the module there; this method is hooked on `init` at priority 20 (see
3078 + * {@see self::plugin_upgrade()}), so it runs AFTER the auto-activation and its deactivation is
3079 + * the final state. A version-guarded block that ran inline during `plugins_loaded` would be
3080 + * undone by the later auto-activation, which is why this is a late-init hook rather than an
3081 + * inline upgrade step.
3082 + *
3083 + * WordPress.com Simple never runs modules — the option stays the master there — so this is a
3084 + * no-op on Simple. The {@see self::AI_MASTER_OPTOUT_MIGRATED_OPTION} flag makes it run exactly
3085 + * once, which matters because off-Simple the option is no longer the master after this runs:
3086 + * a stale falsey option must not keep re-deactivating a module the user later turns back on.
3087 + *
3088 + * @return void
3089 + */
3090 + public static function reconcile_ai_master_optout() {
3091 + if ( get_option( self::AI_MASTER_OPTOUT_MIGRATED_OPTION ) ) {
3092 + return;
3093 + }
3094 +
3095 + // Simple keeps the `jetpack_ai_enabled` option as the master; modules don't run there.
3096 + if ( ( new Host() )->is_wpcom_simple() ) {
3097 + return;
3098 + }
3099 +
3100 + // A sentinel default distinguishes an absent option (leave auto-activation alone) from one
3101 + // explicitly stored falsey (an opt-out to preserve).
3102 + $stored = get_option( 'jetpack_ai_enabled', 'not-set' );
3103 + if ( 'not-set' !== $stored && ! (bool) $stored ) {
3104 + ( new Modules() )->deactivate( 'ai' );
3105 + }
3106 +
3107 + update_option( self::AI_MASTER_OPTOUT_MIGRATED_OPTION, true );
3108 + }
3109 +
3110 + /**
3111 + * Whether a module should be recorded as active in its durable Jetpack SEO option.
3112 + *
3113 + * Permanent module overrides are part of the site's configuration, so the normal
3114 + * filtered module state is authoritative. The exception is wpcomsh's private-site
3115 + * callback, which temporarily suppresses `sitemaps` on Atomic sites without changing
3116 + * the site's configured state. Evaluate the module state with only that callback
3117 + * disabled.
3118 + *
3119 + * The hook is cloned before removing the callback so its ordering remains unchanged for
3120 + * the rest of the request. `$available_only` is false because these migrations can run
3121 + * after the standalone module file has been removed.
3122 + *
3123 + * WordPress.com Simple keeps module state outside this site's options table, so its
3124 + * normal filtered read remains authoritative.
3125 + *
3126 + * @since 16.1
3127 + *
3128 + * @param string $module Module slug.
3129 + * @return bool Whether the module should be recorded as active.
3130 + */
3131 + private static function is_module_active_for_seo_option( $module ) {
3132 + $modules = new Modules();
3133 +
3134 + if ( ( new Host() )->is_wpcom_simple() ) {
3135 + return $modules->is_active( $module, false );
3136 + }
3137 +
3138 + global $wp_filter;
3139 +
3140 + $hook_name = 'jetpack_active_modules';
3141 + $private_site_callback = '\Private_Site\filter_jetpack_active_modules';
3142 + $callback_priority = has_filter( $hook_name, $private_site_callback );
3143 +
3144 + if ( false === $callback_priority ) {
3145 + return $modules->is_active( $module, false );
3146 + }
3147 +
3148 + $original_hook = $wp_filter[ $hook_name ];
3149 + // phpcs:ignore WordPress.WP.GlobalVariablesOverride.Prohibited -- Use an isolated hook copy without changing callback order.
3150 + $wp_filter[ $hook_name ] = clone $original_hook;
3151 + remove_filter( $hook_name, $private_site_callback, $callback_priority );
3152 +
3153 + try {
3154 + return $modules->is_active( $module, false );
3155 + } finally {
3156 + // phpcs:ignore WordPress.WP.GlobalVariablesOverride.Prohibited -- Restore the untouched original hook.
3157 + $wp_filter[ $hook_name ] = $original_hook;
3158 + }
3159 + }
3160 +
3161 + /**
3162 + * Records whether the standalone Sitemaps module is active so the setting survives
3163 + * the module's removal.
3164 + *
3165 + * The Jetpack SEO product reads the {@see Jetpack_SEO_Initializer::SITEMAP_ENABLED_OPTION}
3166 + * option instead of the `sitemaps` module's active state. Module-active state is
3167 + * filtered against the modules present on disk, so once the standalone module is
3168 + * removed it would read as inactive even for sites that had it on. This one-time
3169 + * migration captures the configured module state — which persists regardless of
3170 + * whether the module file is present — into the durable option.
3171 + *
3172 + * Deliberately non-destructive: it never touches generated sitemap data
3173 + * (`jp_sitemap*` posts), the `jetpack-sitemap-state` option, sitemap settings, or the
3174 + * `jp_sitemap_cron_hook` cron, so no regeneration is triggered. `add_option()` only
3175 + * seeds when the option is absent, so it is safe to run on every version bump and
3176 + * never reverts a value the user has since set.
3177 + *
3178 + * Hooked on `updating_jetpack_version`; the version arguments are not needed because
3179 + * `add_option()` provides the run-once guard.
3180 + */
3181 + public static function migrate_sitemaps_module_to_seo_option() {
3182 + // Ignore wpcomsh's temporary private-site suppression while preserving permanent
3183 + // module overrides. {@see self::is_module_active_for_seo_option()}.
3184 + $sitemaps_active = self::is_module_active_for_seo_option( 'sitemaps' );
3185 +
3186 + add_option( Jetpack_SEO_Initializer::SITEMAP_ENABLED_OPTION, $sitemaps_active );
3187 + }
3188 +
3189 + /**
3190 + * Keeps the Jetpack SEO sitemap option in sync with the legacy `sitemaps` module
3191 + * while both still exist.
3192 + *
3193 + * Hooked to the module's activate/deactivate actions, so toggling sitemaps from any
3194 + * surface (the legacy Traffic settings, the SEO Settings tab, or WP-CLI) keeps the
3195 + * durable {@see Jetpack_SEO_Initializer::SITEMAP_ENABLED_OPTION} option current. The
3196 + * actions fire after `active_modules` is updated, so the configured state already
3197 + * reflects the new choice. Ignore temporary private-site suppression without bypassing
3198 + * permanent module overrides. Removed alongside the module itself.
3199 + */
3200 + public static function sync_seo_sitemap_option() {
3201 + update_option( Jetpack_SEO_Initializer::SITEMAP_ENABLED_OPTION, self::is_module_active_for_seo_option( 'sitemaps' ) );
3202 + }
3203 +
3204 + /**
3205 + * Records whether the standalone Canonical URLs module is active so the setting survives
3206 + * the module's removal.
3207 + *
3208 + * The Jetpack SEO product reads the {@see Jetpack_SEO_Initializer::CANONICAL_ENABLED_OPTION}
3209 + * option instead of the `canonical-urls` module's active state. Module-active state is
3210 + * filtered against the modules present on disk, so once the standalone module is
3211 + * removed it would read as inactive even for sites that had it on. This one-time
3212 + * migration captures the configured module state — which persists regardless of
3213 + * whether the module file is present — into the durable option.
3214 + *
3215 + * Deliberately non-destructive: `add_option()` only seeds when the option is absent, so
3216 + * it is safe to run on every version bump and never reverts a value the user has since
3217 + * set.
3218 + *
3219 + * Hooked on `updating_jetpack_version`; the version arguments are not needed because
3220 + * `add_option()` provides the run-once guard.
3221 + */
3222 + public static function migrate_canonical_urls_module_to_seo_option() {
3223 + $canonical_active = self::is_module_active_for_seo_option( 'canonical-urls' );
3224 +
3225 + add_option( Jetpack_SEO_Initializer::CANONICAL_ENABLED_OPTION, $canonical_active );
3226 + }
3227 +
3228 + /**
3229 + * Keeps the Jetpack SEO canonical-urls option in sync with the legacy `canonical-urls`
3230 + * module while both still exist.
3231 + *
3232 + * Hooked to the module's activate/deactivate actions, so toggling canonical URLs from any
3233 + * surface (the legacy Traffic settings, the SEO Settings tab, or WP-CLI) keeps the
3234 + * durable {@see Jetpack_SEO_Initializer::CANONICAL_ENABLED_OPTION} option current. The
3235 + * actions fire after `active_modules` is updated, so the configured state already
3236 + * reflects the new choice. Permanent module overrides remain authoritative. Removed
3237 + * alongside the module itself.
3238 + */
3239 + public static function sync_seo_canonical_urls_option() {
3240 + update_option( Jetpack_SEO_Initializer::CANONICAL_ENABLED_OPTION, self::is_module_active_for_seo_option( 'canonical-urls' ) );
3241 + }
3242 +
3243 + /**
3244 + * Repairs durable SEO module-state options that the first pass of the migration seeded
3245 + * from a filtered read.
3246 + *
3247 + * Jetpack 16.0 seeded {@see Jetpack_SEO_Initializer::SITEMAP_ENABLED_OPTION} and
3248 + * {@see Jetpack_SEO_Initializer::CANONICAL_ENABLED_OPTION} through
3249 + * {@see Modules::is_active()}, which passes the `jetpack_active_modules` filter. A site
3250 + * that was private at the time therefore recorded `sitemaps` as off even though the user
3251 + * had it on, and because the migration seeds with `add_option()` the value was never
3252 + * revisited — making the site public again did not restore the setting.
3253 + *
3254 + * This runs once and rewrites both options from the site's configured module state,
3255 + * including permanent module overrides. That is safe against a choice the user has made
3256 + * since: every surface that toggles these settings (the legacy Traffic page, the SEO
3257 + * Settings tab, WP-CLI) goes through {@see Modules::activate()}/{@see Modules::deactivate()},
3258 + * so the module state and durable option are already in agreement wherever the original
3259 + * migration got it right.
3260 + *
3261 + * Idempotent: the marker is written with `add_option()`, so reruns on later version bumps
3262 + * are no-ops. Like the migrations it seeds from, it touches no sitemap data or cron state.
3263 + *
3264 + * @since 16.1
3265 + */
3266 + public static function reconcile_seo_module_state_options() {
3267 + if ( get_option( self::SEO_MODULE_STATE_RECONCILED_OPTION ) ) {
3268 + return;
3269 + }
3270 +
3271 + update_option( Jetpack_SEO_Initializer::SITEMAP_ENABLED_OPTION, self::is_module_active_for_seo_option( 'sitemaps' ) );
3272 + update_option( Jetpack_SEO_Initializer::CANONICAL_ENABLED_OPTION, self::is_module_active_for_seo_option( 'canonical-urls' ) );
3273 +
3274 + add_option( self::SEO_MODULE_STATE_RECONCILED_OPTION, true );
3275 + }
3276 +
3277 + /**
3278 + * Wires up the migration + sync hooks that keep the durable Jetpack SEO module-state
3279 + * options ({@see Jetpack_SEO_Initializer::SITEMAP_ENABLED_OPTION} /
3280 + * {@see Jetpack_SEO_Initializer::CANONICAL_ENABLED_OPTION}) seeded and in sync with their
3281 + * legacy modules. Called once from `load-jetpack.php`.
3282 + *
3283 + * Extracted from file scope so the wiring is unit-testable (file-scope `add_action()`
3284 + * calls run during bootstrap and can't be exercised by a test). Removed alongside the
3285 + * modules in the deferred post-convergence follow-up that absorbs them into Jetpack SEO.
3286 + */
3287 + public static function register_seo_module_migration_hooks() {
3288 + add_action( 'updating_jetpack_version', array( 'Jetpack', 'migrate_sitemaps_module_to_seo_option' ) );
3289 + add_action( 'jetpack_activate_module_sitemaps', array( 'Jetpack', 'sync_seo_sitemap_option' ) );
3290 + add_action( 'jetpack_deactivate_module_sitemaps', array( 'Jetpack', 'sync_seo_sitemap_option' ) );
3291 +
3292 + add_action( 'updating_jetpack_version', array( 'Jetpack', 'migrate_canonical_urls_module_to_seo_option' ) );
3293 + add_action( 'jetpack_activate_module_canonical-urls', array( 'Jetpack', 'sync_seo_canonical_urls_option' ) );
3294 + add_action( 'jetpack_deactivate_module_canonical-urls', array( 'Jetpack', 'sync_seo_canonical_urls_option' ) );
3295 +
3296 + // Runs after both migrations above (default priority, registered last) so a freshly
3297 + // seeded site is already correct and the reconciliation is a no-op there.
3298 + add_action( 'updating_jetpack_version', array( 'Jetpack', 'reconcile_seo_module_state_options' ) );
3299 + }
3300 +
3301 + /**
3302 + * Seeds the Jetpack SEO discoverability cohort once, so the new SEO surface is
3303 + * auto-discoverable on fresh installs but opt-in on existing ones (JETPACK-1700).
3304 + *
3305 + * Hooked on `updating_jetpack_version`, which fires on every install including the
3306 + * first — with `$old_version === false` on a brand-new site (the same signal
3307 + * {@see self::activate_subscriptions_module_for_existing_sites()} keys off). Fresh
3308 + * installs are seeded visible; existing installs are seeded hidden and opt in later
3309 + * via the legacy Traffic page or My Jetpack. `add_option()` makes this seed-once: it
3310 + * never overrides a value a later opt-in (or opt-out) has set. WordPress.com sites
3311 + * ignore this option entirely (always visible) — see
3312 + * {@see \Automattic\Jetpack\SEO\Initializer::is_seo_surface_visible()}.
3313 + *
3314 + * @param string $version The new Jetpack version (unused).
3315 + * @param string|false $old_version The previous version, or false on a fresh install.
3316 + */
3317 + public static function seed_seo_visibility_cohort( $version, $old_version ) {
3318 + add_option( Jetpack_SEO_Initializer::VISIBILITY_OPTION, ! $old_version );
3319 + }
3320 +
3321 + /**
2928 3322 * Sets the display_update_modal state.
3323 + *
3324 + * The release post update modal that read this state has been removed. The write is kept so the
3325 + * method still behaves as documented for the deprecation window. When this is deleted, also drop
3326 + * the matching `display_update_modal` guard in Automattic\Jetpack\CookieState::should_set_cookie(),
3327 + * which exists only to keep this key out of the cookie on the Jetpack admin screen.
3328 + *
3329 + * @deprecated 16.2
2929 3330 */
2930 3331 public static function set_update_modal_display() {
3332 + _deprecated_function( __METHOD__, 'jetpack-16.2' );
2931 3333 self::state( 'display_update_modal', true );
2932 3334 }
2933 3335
2934 3336 /**
@@ -2933,11 +3335,16 @@
2933 3335
2934 3336 /**
2935 3337 * Enqueues the block library styles.
2936 3338 *
3339 + * Only ever used by the release post update modal, which has been removed.
3340 + *
3341 + * @deprecated 16.2
3342 + *
2937 3343 * @param string $hook The current admin page.
2938 3344 */
2939 3345 public static function enqueue_block_style( $hook ) {
3346 + _deprecated_function( __METHOD__, 'jetpack-16.2' );
2940 3347 if ( 'toplevel_page_jetpack' === $hook ) {
2941 3348 wp_enqueue_style( 'wp-block-library' );
2942 3349 }
2943 3350 }
@@ -2966,9 +3373,8 @@
2966 3373
2967 3374 self::load_modules();
2968 3375
2969 3376 Jetpack_Options::delete_option( 'do_activate' );
2970 - Jetpack_Options::delete_option( 'dismissed_connection_banner' );
2971 3377 }
2972 3378
2973 3379 /**
2974 3380 * Handles the activation of the default modules depending on the current state of the site:
@@ -3027,8 +3433,12 @@
3027 3433 add_filter( 'jetpack_update_activated_state_on_disconnect', '__return_false' );
3028 3434 self::disconnect();
3029 3435 Jetpack_Options::delete_option( 'version' );
3030 3436 }
3437 +
3438 + if ( ! defined( 'WC_ANALYTICS' ) && class_exists( 'Automattic\Woocommerce_Analytics' ) ) {
3439 + Woocommerce_Analytics::maybe_remove_proxy_speed_module();
3440 + }
3031 3441 }
3032 3442
3033 3443 /**
3034 3444 * Set activated option to 4 on jetpack_idc_disconnect action.
@@ -3056,9 +3466,9 @@
3056 3466 $connection->remove_connection( ! Identity_Crisis::validate_sync_error_idc_option() );
3057 3467 }
3058 3468
3059 3469 /**
3060 - * Happens after a successfull disconnection.
3470 + * Happens after a successful disconnection.
3061 3471 *
3062 3472 * @static
3063 3473 */
3064 3474 public static function jetpack_site_disconnected() {
@@ -3063,8 +3473,10 @@
3063 3473 */
3064 3474 public static function jetpack_site_disconnected() {
3065 3475 Identity_Crisis::clear_all_idc_options();
3066 3476
3477 + \Automattic\Jetpack\Reprint_Export\Reprint_Exporter::discard_credentials();
3478 +
3067 3479 // Delete all the sync related data. Since it could be taking up space.
3068 3480 Sender::get_instance()->uninstall();
3069 3481
3070 3482 /**
@@ -3081,10 +3493,13 @@
3081 3493 }
3082 3494 }
3083 3495
3084 3496 /**
3085 - * Disconnects the user
3497 + * Disconnects the user.
3086 3498 *
3499 + * @deprecated 13.4
3500 + * @see \Automattic\Jetpack\Connection\Manager::disconnect_user()
3501 + *
3087 3502 * @param int $user_id The user ID to disconnect.
3088 3503 */
3089 3504 public function disconnect_user( $user_id ) {
3090 3505 $this->connection_manager->disconnect_user( $user_id );
@@ -3090,21 +3505,8 @@
3090 3505 $this->connection_manager->disconnect_user( $user_id );
3091 3506 }
3092 3507
3093 3508 /**
3094 - * Attempts Jetpack registration. If it fail, a state flag is set: @see ::admin_page_load()
3095 - *
3096 - * @deprecated since Jetpack 9.7.0
3097 - * @see Automattic\Jetpack\Connection\Manager::try_registration()
3098 - *
3099 - * @return bool|WP_Error
3100 - */
3101 - public static function try_registration() {
3102 - _deprecated_function( __METHOD__, 'jetpack-9.7', 'Automattic\\Jetpack\\Connection\\Manager::try_registration' );
3103 - return static::connection()->try_registration();
3104 - }
3105 -
3106 - /**
3107 3509 * Checking the domain names in beta versions.
3108 3510 * If this is a development version, before attempting to connect, let's make sure that the domains are viable.
3109 3511 *
3110 3512 * @param null|\WP_Error $error The domain validation error, or `null` if everything's fine.
@@ -3138,10 +3540,17 @@
3138 3540 * @param mixed $code Error code to log.
3139 3541 * @param mixed $data Data to log.
3140 3542 */
3141 3543 public static function log( $code, $data = null ) {
3544 +
3545 + $raw_log = Jetpack_Options::get_option( 'log', array() );
3546 + // This can be modified by the `jetpack_options` filter, so abort if we don't have an array.
3547 + if ( ! is_array( $raw_log ) ) {
3548 + return;
3549 + }
3550 +
3142 3551 // only grab the latest 200 entries.
3143 - $log = array_slice( Jetpack_Options::get_option( 'log', array() ), -199, 199 );
3552 + $log = array_slice( $raw_log, -199, 199 );
3144 3553
3145 3554 // Append our event to the log.
3146 3555 $log_entry = array(
3147 3556 'time' => time(),
@@ -3241,8 +3650,15 @@
3241 3650
3242 3651 /**
3243 3652 * Return stat data for WPCOM sync.
3244 3653 *
3654 + * The Sync stats module was this method's last caller and moved to the Connection package's
3655 + * `Heartbeat::generate_stats_array()`, which assembles the heartbeat data through the
3656 + * `jetpack_heartbeat_stats_array` filter. Note the package method does not include the extended
3657 + * data from `get_additional_stat_data()`, so callers relying on `$extended` need to add it themselves.
3658 + *
3659 + * @deprecated 16.2
3660 + *
3245 3661 * @param bool $encode JSON encode the result.
3246 3662 * @param bool $extended Adds additional stats data.
3247 3663 *
3248 3664 * @return array|string Stats data. Array if $encode is false. JSON-encoded string is $encode is true.
@@ -3247,10 +3663,13 @@
3247 3663 *
3248 3664 * @return array|string Stats data. Array if $encode is false. JSON-encoded string is $encode is true.
3249 3665 */
3250 3666 public static function get_stat_data( $encode = true, $extended = true ) {
3251 - $data = Jetpack_Heartbeat::generate_stats_array();
3667 + _deprecated_function( __METHOD__, 'jetpack-16.2', 'Automattic\\Jetpack\\Heartbeat::generate_stats_array' );
3252 3668
3669 + // Site environment stats now live in the Connection package; merge them with the Jetpack-specific stats.
3670 + $data = array_merge( Jetpack_Heartbeat::generate_stats_array(), Heartbeat::get_environment_stats() );
3671 +
3253 3672 if ( $extended ) {
3254 3673 $additional_data = self::get_additional_stat_data();
3255 3674 $data = array_merge( $data, $additional_data );
3256 3675 }
@@ -3255,9 +3674,9 @@
3255 3674 $data = array_merge( $data, $additional_data );
3256 3675 }
3257 3676
3258 3677 if ( $encode ) {
3259 - return wp_json_encode( $data );
3678 + return wp_json_encode( $data, JSON_UNESCAPED_SLASHES );
3260 3679 }
3261 3680
3262 3681 return $data;
3263 3682 }
@@ -3329,23 +3748,24 @@
3329 3748 $fallback_no_verify_ssl_certs = Jetpack_Options::get_option( 'fallback_no_verify_ssl_certs' );
3330 3749 /** Already documented in automattic/jetpack-connection::src/class-client.php */
3331 3750 $client_verify_ssl_certs = apply_filters( 'jetpack_client_verify_ssl_certs', false );
3332 3751
3333 - if ( ! $is_offline_mode ) {
3334 - Jetpack_Connection_Banner::init();
3335 - Jetpack_Connection_Widget::init();
3336 - }
3752 + // Run post-activation actions if needed.
3753 + $this->plugin_post_activation();
3337 3754
3338 3755 if ( ( self::is_connection_ready() || $is_offline_mode ) && false === $fallback_no_verify_ssl_certs && ! $client_verify_ssl_certs ) {
3339 3756 // Upgrade: 1.1 -> 1.1.1
3340 3757 // Check and see if host can verify the Jetpack servers' SSL certificate.
3341 3758 $args = array();
3759 + // @phan-suppress-next-line PhanAccessMethodInternal -- Phan is correct, but the usage is intentional.
3342 3760 Client::_wp_remote_request( self::connection()->api_url( 'test' ), $args, true );
3343 3761 }
3344 3762
3345 - Jetpack_Recommendations_Banner::init();
3346 -
3347 - if ( current_user_can( 'manage_options' ) && ! self::permit_ssl() ) {
3763 + if (
3764 + current_user_can( 'manage_options' )
3765 + && ! self::permit_ssl()
3766 + && ! $is_offline_mode
3767 + ) {
3348 3768 add_action( 'jetpack_notices', array( $this, 'alert_auto_ssl_fail' ) );
3349 3769 }
3350 3770
3351 3771 add_action( 'load-plugins.php', array( $this, 'intercept_plugin_error_scrape_init' ) );
@@ -3354,12 +3774,8 @@
3354 3774 if ( ! ( is_multisite() && is_plugin_active_for_network( 'jetpack/jetpack.php' ) && ! is_network_admin() ) ) {
3355 3775 add_action( 'admin_enqueue_scripts', array( $this, 'deactivate_dialog' ) );
3356 3776 }
3357 3777
3358 - if ( isset( $_COOKIE['jetpackState']['display_update_modal'] ) ) {
3359 - add_action( 'admin_enqueue_scripts', __CLASS__ . '::enqueue_block_style' );
3360 - }
3361 -
3362 3778 add_filter( 'plugin_action_links_' . plugin_basename( JETPACK__PLUGIN_DIR . 'jetpack.php' ), array( $this, 'plugin_action_links' ) );
3363 3779
3364 3780 if ( self::is_connection_ready() || $is_offline_mode ) {
3365 3781 // Artificially throw errors in certain specific cases during plugin activation.
@@ -3364,13 +3780,8 @@
3364 3780 if ( self::is_connection_ready() || $is_offline_mode ) {
3365 3781 // Artificially throw errors in certain specific cases during plugin activation.
3366 3782 add_action( 'activate_plugin', array( $this, 'throw_error_on_activate_plugin' ) );
3367 3783 }
3368 -
3369 - // Add custom column in wp-admin/users.php to show whether user is linked.
3370 - add_filter( 'manage_users_columns', array( $this, 'jetpack_icon_user_connected' ) );
3371 - add_action( 'manage_users_custom_column', array( $this, 'jetpack_show_user_connected_icon' ), 10, 3 );
3372 - add_action( 'admin_print_styles', array( $this, 'jetpack_user_col_style' ) );
3373 3784 }
3374 3785
3375 3786 /**
3376 3787 * Adds body classes.
@@ -3403,8 +3814,9 @@
3403 3814 * Sometimes a plugin can activate without causing errors, but it will cause errors on the next page load.
3404 3815 * This function artificially throws errors for such cases (per a specific list).
3405 3816 *
3406 3817 * @param string $plugin The activated plugin.
3818 + * @throws RuntimeException If a conflicting plugin is detected.
3407 3819 */
3408 3820 public function throw_error_on_activate_plugin( $plugin ) {
3409 3821 $active_modules = self::get_active_modules();
3410 3822
@@ -3417,8 +3829,9 @@
3417 3829 if ( 'stats.php' === basename( $plugin ) ) {
3418 3830 $throw = true;
3419 3831 }
3420 3832 } else {
3833 + // @phan-suppress-next-line PhanUndeclaredFunctionInCallable -- Checked above. See also https://github.com/phan/phan/issues/1204.
3421 3834 $reflection = new ReflectionFunction( 'stats_get_api_key' );
3422 3835 if ( basename( $plugin ) === basename( $reflection->getFileName() ) ) {
3423 3836 $throw = true;
3424 3837 }
@@ -3425,9 +3838,9 @@
3425 3838 }
3426 3839
3427 3840 if ( $throw ) {
3428 3841 /* translators: Plugin name to deactivate. */
3429 - trigger_error( sprintf( esc_html__( 'Jetpack contains the most recent version of the old &#8220;%1$s&#8221; plugin.', 'jetpack' ), 'WordPress.com Stats' ), E_USER_ERROR ); // phpcs:ignore WordPress.PHP.DevelopmentFunctions.error_log_trigger_error
3842 + throw new RuntimeException( sprintf( __( 'Jetpack contains the most recent version of the old "%1$s" plugin.', 'jetpack' ), 'WordPress.com Stats' ) );
3430 3843 }
3431 3844 }
3432 3845 }
3433 3846
@@ -3509,8 +3922,9 @@
3509 3922 /**
3510 3923 * Handler for Jetpack remote file uploads.
3511 3924 *
3512 3925 * @access public
3926 + * @return never
3513 3927 */
3514 3928 public function remote_request_handlers() {
3515 3929 switch ( current_filter() ) {
3516 3930 case 'wp_ajax_nopriv_jetpack_upload_file':
@@ -3537,18 +3951,17 @@
3537 3951 if ( ! is_int( $status_code ) ) {
3538 3952 $status_code = 400;
3539 3953 }
3540 3954
3541 - status_header( $status_code );
3542 - die( wp_json_encode( (object) compact( 'error', 'error_description' ) ) );
3955 + wp_send_json( (object) compact( 'error', 'error_description' ), $status_code, JSON_UNESCAPED_SLASHES );
3543 3956 }
3544 3957
3545 - status_header( 200 );
3546 3958 if ( true === $response ) {
3547 - exit;
3959 + status_header( 200 );
3960 + exit( 0 );
3548 3961 }
3549 3962
3550 - die( wp_json_encode( (object) $response ) );
3963 + wp_send_json( (object) $response, 200, JSON_UNESCAPED_SLASHES );
3551 3964 }
3552 3965
3553 3966 /**
3554 3967 * Uploads a file gotten from the global $_FILES.
@@ -3556,9 +3969,9 @@
3556 3969 * the attachment file of the media item (gotten through of the post_id)
3557 3970 * will be updated instead of add a new one.
3558 3971 *
3559 3972 * @param boolean $update_media_item - update media attachment.
3560 - * @return array - An array describing the uploadind files process.
3973 + * @return array|WP_Error - An array describing the uploading files process.
3561 3974 */
3562 3975 public function upload_handler( $update_media_item = false ) {
3563 3976 if ( isset( $_SERVER['REQUEST_METHOD'] ) && 'POST' !== strtoupper( sanitize_text_field( wp_unslash( $_SERVER['REQUEST_METHOD'] ) ) ) ) {
3564 3977 return new WP_Error( 405, get_status_header_desc( 405 ), 405 );
@@ -3609,9 +4022,9 @@
3609 4022 return new WP_Error( 'handler_cannot_upload', __( 'The upload handler cannot upload files', 'jetpack' ), 400 );
3610 4023 }
3611 4024
3612 4025 $uploaded_files = array();
3613 - $global_post = isset( $GLOBALS['post'] ) ? $GLOBALS['post'] : null;
4026 + $global_post = $GLOBALS['post'] ?? null;
3614 4027 unset( $GLOBALS['post'] );
3615 4028 if ( empty( $_FILES['media']['name'] ) ) {
3616 4029 // Nothing to process, just return.
3617 4030 return $uploaded_files;
@@ -3618,9 +4031,9 @@
3618 4031 }
3619 4032 foreach ( $_FILES['media']['name'] as $index => $name ) { // phpcs:ignore WordPress.Security.ValidatedSanitizedInput.MissingUnslash, WordPress.Security.ValidatedSanitizedInput.InputNotSanitized -- As above, unslash sniff is wrong. Validation should happen below.
3620 4033 $file = array();
3621 4034 foreach ( $media_keys as $media_key ) {
3622 - $file[ $media_key ] = isset( $_FILES['media'][ $media_key ][ $index ] ) ? $_FILES['media'][ $media_key ][ $index ] : null; // phpcs:ignore WordPress.Security.ValidatedSanitizedInput.MissingUnslash, WordPress.Security.ValidatedSanitizedInput.InputNotSanitized -- As above, the unslash sniff is wrong.
4035 + $file[ $media_key ] = $_FILES['media'][ $media_key ][ $index ] ?? null; // phpcs:ignore WordPress.Security.ValidatedSanitizedInput.MissingUnslash,,WordPress.Security.NonceVerification.Missing,WordPress.Security.ValidatedSanitizedInput.InputNotSanitized -- As above, the unslash sniff is wrong.
3623 4036 }
3624 4037
3625 4038 list( $hmac_provided, $salt ) = isset( $_POST['_jetpack_file_hmac_media'][ $index ] ) ? explode( ':', filter_var( wp_unslash( $_POST['_jetpack_file_hmac_media'][ $index ] ) ) ) : array( 'no', '' ); // phpcs:ignore WordPress.Security.NonceVerification.Missing -- Nonce should have been checked by the caller.
3626 4039
@@ -3666,9 +4079,9 @@
3666 4079 'type' => (string) $edited_media_item->post_mime_type,
3667 4080 'meta' => (array) wp_get_attachment_metadata( $post_id ),
3668 4081 );
3669 4082
3670 - return (array) array( $response );
4083 + return array( $response );
3671 4084 }
3672 4085
3673 4086 $attachment_id = media_handle_upload(
3674 4087 '.jetpack.upload.',
@@ -3707,67 +4120,8 @@
3707 4120 return $uploaded_files;
3708 4121 }
3709 4122
3710 4123 /**
3711 - * Add help to the Jetpack page
3712 - *
3713 - * @since Jetpack (1.2.3)
3714 - * @return void
3715 - */
3716 - public function admin_help() {
3717 - $current_screen = get_current_screen();
3718 -
3719 - // Overview.
3720 - $current_screen->add_help_tab(
3721 - array(
3722 - 'id' => 'home',
3723 - 'title' => __( 'Home', 'jetpack' ),
3724 - 'content' =>
3725 - '<p><strong>' . __( 'Jetpack', 'jetpack' ) . '</strong></p>' .
3726 - '<p>' . __( 'Jetpack supercharges your self-hosted WordPress site with the awesome cloud power of WordPress.com.', 'jetpack' ) . '</p>' .
3727 - '<p>' . __( 'On this page, you are able to view the modules available within Jetpack, learn more about them, and activate or deactivate them as needed.', 'jetpack' ) . '</p>',
3728 - )
3729 - );
3730 -
3731 - // Screen Content.
3732 - if ( current_user_can( 'manage_options' ) ) {
3733 - $current_screen->add_help_tab(
3734 - array(
3735 - 'id' => 'settings',
3736 - 'title' => __( 'Settings', 'jetpack' ),
3737 - 'content' =>
3738 - '<p><strong>' . __( 'Jetpack', 'jetpack' ) . '</strong></p>' .
3739 - '<p>' . __( 'You can activate or deactivate individual Jetpack modules to suit your needs.', 'jetpack' ) . '</p>' .
3740 - '<ol>' .
3741 - '<li>' . __( 'Each module has an Activate or Deactivate link so you can toggle one individually.', 'jetpack' ) . '</li>' .
3742 - '<li>' . __( 'Using the checkboxes next to each module, you can select multiple modules to toggle via the Bulk Actions menu at the top of the list.', 'jetpack' ) . '</li>' .
3743 - '</ol>' .
3744 - '<p>' . __( 'Using the tools on the right, you can search for specific modules, filter by module categories or which are active, or change the sorting order.', 'jetpack' ) . '</p>',
3745 - )
3746 - );
3747 - }
3748 -
3749 - // Help Sidebar.
3750 - $support_url = Redirect::get_url( 'jetpack-support' );
3751 - $faq_url = Redirect::get_url( 'jetpack-faq' );
3752 - $current_screen->set_help_sidebar(
3753 - '<p><strong>' . __( 'For more information:', 'jetpack' ) . '</strong></p>' .
3754 - '<p><a href="' . esc_url( $faq_url ) . '" rel="noopener noreferrer" target="_blank">' . __( 'Jetpack FAQ', 'jetpack' ) . '</a></p>' .
3755 - '<p><a href="' . esc_url( $support_url ) . '" rel="noopener noreferrer" target="_blank">' . __( 'Jetpack Support', 'jetpack' ) . '</a></p>' .
3756 - '<p><a href="' . esc_url( self::admin_url( array( 'page' => 'jetpack-debugger' ) ) ) . '">' . __( 'Jetpack Debugging Center', 'jetpack' ) . '</a></p>'
3757 - );
3758 - }
3759 -
3760 - /**
3761 - * Enqueues the jetpack-icons style.
3762 - *
3763 - * @return void
3764 - */
3765 - public function admin_menu_css() {
3766 - wp_enqueue_style( 'jetpack-icons' );
3767 - }
3768 -
3769 - /**
3770 4124 * Add action links for the Jetpack plugin.
3771 4125 *
3772 4126 * @param array $actions Plugin actions.
3773 4127 *
@@ -3773,14 +4127,11 @@
3773 4127 *
3774 4128 * @return array
3775 4129 */
3776 4130 public function plugin_action_links( $actions ) {
3777 - $support_link = ( new Host() )->is_woa_site() ? 'https://wordpress.com/help/contact/' : self::admin_url( 'page=jetpack-debugger' );
3778 -
3779 4131 if ( current_user_can( 'jetpack_manage_modules' ) && ( self::is_connection_ready() || ( new Status() )->is_offline_mode() ) ) {
3780 4132 return array_merge(
3781 4133 array( 'settings' => sprintf( '<a href="%s">%s</a>', esc_url( self::admin_url( 'page=jetpack#/settings' ) ), __( 'Settings', 'jetpack' ) ) ),
3782 - array( 'support' => sprintf( '<a href="%s">%s</a>', esc_url( $support_link ), __( 'Support', 'jetpack' ) ) ),
3783 4134 $actions
3784 4135 );
3785 4136 }
3786 4137
@@ -3787,53 +4138,8 @@
3787 4138 return $actions;
3788 4139 }
3789 4140
3790 4141 /**
3791 - * Add an activation modal to the plugins page and the main dashboard.
3792 - *
3793 - * @param string $hook The current admin page.
3794 - *
3795 - * @return void
3796 - */
3797 - public function activate_dialog( $hook ) {
3798 - /*
3799 - * We do not need it on other plugin pages,
3800 - * or when Jetpack is already connected.
3801 - */
3802 - if (
3803 - ! in_array( $hook, array( 'plugins.php', 'index.php' ), true )
3804 - || self::is_connection_ready()
3805 - ) {
3806 - return;
3807 - }
3808 -
3809 - // add an activation script that will pick up deactivation actions for the Jetpack plugin.
3810 - Assets::register_script(
3811 - 'jetpack-full-activation-modal-js',
3812 - '_inc/build/activation-modal.js',
3813 - JETPACK__PLUGIN_FILE,
3814 - array(
3815 - 'enqueue' => true,
3816 - 'in_footer' => true,
3817 - 'textdomain' => 'jetpack',
3818 - 'dependencies' => array(
3819 - 'wp-polyfill',
3820 - 'wp-components',
3821 - ),
3822 - )
3823 - );
3824 -
3825 - // Add objects to be passed to the initial state of the app.
3826 - // Use wp_add_inline_script instead of wp_localize_script, see https://core.trac.wordpress.org/ticket/25280.
3827 - wp_add_inline_script( 'jetpack-full-activation-modal-js', 'var Initial_State=JSON.parse(decodeURIComponent("' . rawurlencode( wp_json_encode( Jetpack_Redux_State_Helper::get_minimal_state() ) ) . '"));', 'before' );
3828 -
3829 - // Adds Connection package initial state.
3830 - Connection_Initial_State::render_script( 'jetpack-full-activation-modal-js' );
3831 -
3832 - add_action( 'admin_notices', array( $this, 'jetpack_plugin_portal_containers' ) );
3833 - }
3834 -
3835 - /**
3836 4142 * Adds the deactivation warning modal for Jetpack.
3837 4143 *
3838 4144 * @param string $hook The current admin page.
3839 4145 *
@@ -3853,14 +4159,10 @@
3853 4159 'jetpack-plugins-page-js',
3854 4160 '_inc/build/plugins-page.js',
3855 4161 JETPACK__PLUGIN_FILE,
3856 4162 array(
3857 - 'in_footer' => true,
3858 - 'textdomain' => 'jetpack',
3859 - 'dependencies' => array(
3860 - 'wp-polyfill',
3861 - 'wp-components',
3862 - ),
4163 + 'in_footer' => true,
4164 + 'textdomain' => 'jetpack',
3863 4165 )
3864 4166 );
3865 4167 Assets::enqueue_script( 'jetpack-plugins-page-js' );
3866 4168
@@ -3865,9 +4167,9 @@
3865 4167 Assets::enqueue_script( 'jetpack-plugins-page-js' );
3866 4168
3867 4169 // Add objects to be passed to the initial state of the app.
3868 4170 // Use wp_add_inline_script instead of wp_localize_script, see https://core.trac.wordpress.org/ticket/25280.
3869 - wp_add_inline_script( 'jetpack-plugins-page-js', 'var Initial_State=JSON.parse(decodeURIComponent("' . rawurlencode( wp_json_encode( Jetpack_Redux_State_Helper::get_minimal_state() ) ) . '"));', 'before' );
4171 + wp_add_inline_script( 'jetpack-plugins-page-js', 'var Initial_State=' . wp_json_encode( Jetpack_Redux_State_Helper::get_minimal_state(), JSON_UNESCAPED_SLASHES | JSON_HEX_TAG | JSON_HEX_AMP ) . ';', 'before' );
3870 4172
3871 4173 add_action( 'admin_footer', array( $this, 'jetpack_plugin_portal_containers' ) );
3872 4174 }
3873 4175 }
@@ -3916,9 +4218,9 @@
3916 4218 // @todo provide way to go to specific calypso env.
3917 4219 self::get_calypso_host() . 'jetpack/connect'
3918 4220 )
3919 4221 );
3920 - exit;
4222 + exit( 0 );
3921 4223 }
3922 4224 }
3923 4225
3924 4226 /*
@@ -3953,8 +4255,28 @@
3953 4255 * Done!
3954 4256 */
3955 4257
3956 4258 /**
4259 + * Build the user-facing description stored alongside a registration error code.
4260 + *
4261 + * @since 16.2
4262 + *
4263 + * @param string $error_code The WP_Error code.
4264 + * @param string $message The WP_Error message.
4265 + * @return string The description, empty when the message is not user-facing copy.
4266 + */
4267 + public static function get_registration_error_description( $error_code, $message ) {
4268 + // Manager::validate_remote_register_response() does not always put user-facing copy in the
4269 + // message slot: wpcom_5??, wpcom_408 and wpcom_bad_response store the HTTP status there,
4270 + // and jetpack_id stores the raw response body, which can also overflow the state cookie.
4271 + if ( 'jetpack_id' === $error_code || is_numeric( $message ) ) {
4272 + return '';
4273 + }
4274 +
4275 + return mb_substr( (string) $message, 0, 250 );
4276 + }
4277 +
4278 + /**
3957 4279 * Handles the page load events for the Jetpack admin page
3958 4280 */
3959 4281 public function admin_page_load() {
3960 4282 $error = false;
@@ -3990,10 +4312,11 @@
3990 4312 $registered = static::connection()->try_registration();
3991 4313 if ( is_wp_error( $registered ) ) {
3992 4314 $error = $registered->get_error_code();
3993 4315 self::state( 'error', $error );
3994 - self::state( 'error', $registered->get_error_message() );
3995 4316
4317 + self::state( 'error_description', self::get_registration_error_description( $error, $registered->get_error_message() ) );
4318 +
3996 4319 /**
3997 4320 * Jetpack registration Error.
3998 4321 *
3999 4322 * @since 7.5.0
@@ -4017,12 +4340,8 @@
4017 4340 do_action( 'jetpack_connection_register_success', $from );
4018 4341
4019 4342 $url = $this->build_connect_url( true, $redirect, $from );
4020 4343
4021 - if ( ! empty( $_GET['onboarding'] ) ) {
4022 - $url = add_query_arg( 'onboarding', rawurlencode_deep( wp_unslash( $_GET['onboarding'] ) ), $url ); // phpcs:ignore WordPress.Security.ValidatedSanitizedInput.InputNotSanitized
4023 - }
4024 -
4025 4344 if ( ! empty( $_GET['auth_approved'] ) && 'true' === $_GET['auth_approved'] ) {
4026 4345 $url = add_query_arg( 'auth_approved', 'true', $url );
4027 4346 }
4028 4347
@@ -4027,9 +4346,9 @@
4027 4346 }
4028 4347
4029 4348 add_filter( 'allowed_redirect_hosts', array( Host::class, 'allow_wpcom_environments' ) );
4030 4349 wp_safe_redirect( $url );
4031 - exit;
4350 + exit( 0 );
4032 4351 case 'activate':
4033 4352 if ( ! current_user_can( 'jetpack_activate_modules' ) ) {
4034 4353 $error = 'cheatin';
4035 4354 break;
@@ -4043,9 +4362,9 @@
4043 4362 self::state( 'error', sprintf( __( 'Could not activate %s', 'jetpack' ), $module ) );
4044 4363 }
4045 4364 // The following two lines will rarely happen, as Jetpack::activate_module normally exits at the end.
4046 4365 wp_safe_redirect( self::admin_url( 'page=jetpack' ) );
4047 - exit;
4366 + exit( 0 );
4048 4367 case 'activate_default_modules':
4049 4368 check_admin_referer( 'activate_default_modules' );
4050 4369 self::log( 'activate_default_modules' );
4051 4370 self::restate();
@@ -4053,9 +4372,9 @@
4053 4372 $max_version = isset( $_GET['max_version'] ) ? sanitize_text_field( wp_unslash( $_GET['max_version'] ) ) : false;
4054 4373 $other_modules = isset( $_GET['other_modules'] ) && is_array( $_GET['other_modules'] ) ? array_map( 'sanitize_text_field', wp_unslash( $_GET['other_modules'] ) ) : array();
4055 4374 self::activate_default_modules( $min_version, $max_version, $other_modules );
4056 4375 wp_safe_redirect( self::admin_url( 'page=jetpack' ) );
4057 - exit;
4376 + exit( 0 );
4058 4377 case 'disconnect':
4059 4378 if ( ! current_user_can( 'jetpack_disconnect' ) ) {
4060 4379 $error = 'cheatin';
4061 4380 break;
@@ -4064,9 +4383,9 @@
4064 4383 check_admin_referer( 'jetpack-disconnect' );
4065 4384 self::log( 'disconnect' );
4066 4385 self::disconnect();
4067 4386 wp_safe_redirect( self::admin_url( 'disconnected=true' ) );
4068 - exit;
4387 + exit( 0 );
4069 4388 case 'reconnect':
4070 4389 if ( ! current_user_can( 'jetpack_reconnect' ) ) {
4071 4390 $error = 'cheatin';
4072 4391 break;
@@ -4077,9 +4396,9 @@
4077 4396 self::disconnect();
4078 4397
4079 4398 add_filter( 'allowed_redirect_hosts', array( Host::class, 'allow_wpcom_environments' ) );
4080 4399 wp_safe_redirect( $this->build_connect_url( true, false, 'reconnect' ) );
4081 - exit;
4400 + exit( 0 );
4082 4401 case 'deactivate':
4083 4402 if ( ! current_user_can( 'jetpack_deactivate_modules' ) ) {
4084 4403 $error = 'cheatin';
4085 4404 break;
@@ -4093,9 +4412,9 @@
4093 4412 self::state( 'message', 'module_deactivated' );
4094 4413 }
4095 4414 self::state( 'module', $modules );
4096 4415 wp_safe_redirect( self::admin_url( 'page=jetpack' ) );
4097 - exit;
4416 + exit( 0 );
4098 4417 case 'unlink':
4099 4418 $redirect = isset( $_GET['redirect'] ) ? sanitize_text_field( wp_unslash( $_GET['redirect'] ) ) : '';
4100 4419 check_admin_referer( 'jetpack-unlink' );
4101 4420 self::log( 'unlink' );
@@ -4105,32 +4424,9 @@
4105 4424 wp_safe_redirect( admin_url() );
4106 4425 } else {
4107 4426 wp_safe_redirect( self::admin_url( array( 'page' => rawurlencode( $redirect ) ) ) );
4108 4427 }
4109 - exit;
4110 - case 'onboard':
4111 - if ( ! current_user_can( 'manage_options' ) ) {
4112 - wp_safe_redirect( self::admin_url( 'page=jetpack' ) );
4113 - } else {
4114 - self::create_onboarding_token();
4115 - $url = $this->build_connect_url( true );
4116 -
4117 - $token = Jetpack_Options::get_option( 'onboarding' );
4118 -
4119 - if ( false !== ( $token ) ) {
4120 - $url = add_query_arg( 'onboarding', $token, $url );
4121 - }
4122 -
4123 - $calypso_env = ( new Host() )->get_calypso_env();
4124 - if ( ! empty( $calypso_env ) ) {
4125 - $url = add_query_arg( 'calypso_env', $calypso_env, $url );
4126 - }
4127 -
4128 - add_filter( 'allowed_redirect_hosts', array( Host::class, 'allow_wpcom_environments' ) );
4129 - wp_safe_redirect( $url );
4130 - exit;
4131 - }
4132 - exit;
4428 + exit( 0 );
4133 4429 default:
4134 4430 /**
4135 4431 * Fires when a Jetpack admin page is loaded with an unrecognized parameter.
4136 4432 *
@@ -4353,37 +4649,8 @@
4353 4649 endif;
4354 4650 }
4355 4651
4356 4652 /**
4357 - * We can't always respond to a signed XML-RPC request with a
4358 - * helpful error message. In some circumstances, doing so could
4359 - * leak information.
4360 - *
4361 - * Instead, track that the error occurred via a Jetpack_Option,
4362 - * and send that data back in the heartbeat.
4363 - * All this does is increment a number, but it's enough to find
4364 - * trends.
4365 - *
4366 - * @param WP_Error $xmlrpc_error The error produced during
4367 - * signature validation.
4368 - */
4369 - public function track_xmlrpc_error( $xmlrpc_error ) {
4370 - $code = is_wp_error( $xmlrpc_error )
4371 - ? $xmlrpc_error->get_error_code()
4372 - : 'should-not-happen';
4373 -
4374 - $xmlrpc_errors = Jetpack_Options::get_option( 'xmlrpc_errors', array() );
4375 - if ( isset( $xmlrpc_errors[ $code ] ) && $xmlrpc_errors[ $code ] ) {
4376 - // No need to update the option if we already have
4377 - // this code stored.
4378 - return;
4379 - }
4380 - $xmlrpc_errors[ $code ] = true;
4381 -
4382 - Jetpack_Options::update_option( 'xmlrpc_errors', $xmlrpc_errors, false );
4383 - }
4384 -
4385 - /**
4386 4653 * Initialize the jetpack stats instance only when needed
4387 4654 *
4388 4655 * @return void
4389 4656 */
@@ -4506,9 +4773,9 @@
4506 4773 return $this->build_connect_url( $raw, $redirect, $from, true );
4507 4774 }
4508 4775 }
4509 4776
4510 - $url = static::build_authorize_url( $redirect );
4777 + $url = ( new Authorize_Redirect( static::connection() ) )->build_authorize_url( $redirect );
4511 4778 }
4512 4779
4513 4780 if ( $from ) {
4514 4781 $url = add_query_arg( 'from', $from, $url );
@@ -4533,66 +4800,30 @@
4533 4800 * @param null $deprecated Deprecated since Jetpack 10.9.
4534 4801 *
4535 4802 * @todo Update default value for redirect since the called function expects a string.
4536 4803 *
4804 + * @deprecated 13.4
4805 + *
4537 4806 * @return mixed|void
4538 4807 */
4539 4808 public static function build_authorize_url( $redirect = false, $deprecated = null ) { // phpcs:ignore VariableAnalysis.CodeAnalysis.VariableAnalysis.UnusedVariable
4809 + _deprecated_function( __METHOD__, 'jetpack-13.4', 'Authorize_Redirect::build_authorize_url' );
4540 4810
4541 - add_filter( 'jetpack_connect_request_body', array( __CLASS__, 'filter_connect_request_body' ) );
4542 - add_filter( 'jetpack_connect_redirect_url', array( __CLASS__, 'filter_connect_redirect_url' ) );
4543 -
4544 - $c8n = self::connection();
4545 - $url = $c8n->get_authorization_url( wp_get_current_user(), $redirect );
4546 -
4547 - remove_filter( 'jetpack_connect_request_body', array( __CLASS__, 'filter_connect_request_body' ) );
4548 - remove_filter( 'jetpack_connect_redirect_url', array( __CLASS__, 'filter_connect_redirect_url' ) );
4549 -
4550 - /**
4551 - * Filter the URL used when authorizing a user to a WordPress.com account.
4552 - *
4553 - * @since 8.9.0
4554 - *
4555 - * @param string $url Connection URL.
4556 - */
4557 - return apply_filters( 'jetpack_build_authorize_url', $url );
4811 + return ( new Authorize_Redirect( static::connection() ) )->build_authorize_url( $redirect );
4558 4812 }
4559 4813
4560 4814 /**
4561 4815 * Filters the connection URL parameter array.
4562 4816 *
4817 + * @deprecated 13.4
4818 + *
4563 4819 * @param array $args default URL parameters used by the package.
4564 4820 * @return array the modified URL arguments array.
4565 4821 */
4566 4822 public static function filter_connect_request_body( $args ) {
4567 - if (
4568 - Constants::is_defined( 'JETPACK__GLOTPRESS_LOCALES_PATH' )
4569 - && include_once Constants::get_constant( 'JETPACK__GLOTPRESS_LOCALES_PATH' )
4570 - ) {
4571 - $gp_locale = GP_Locales::by_field( 'wp_locale', get_locale() );
4572 - $args['locale'] = isset( $gp_locale ) && isset( $gp_locale->slug )
4573 - ? $gp_locale->slug
4574 - : '';
4575 - }
4823 + _deprecated_function( __METHOD__, 'jetpack-13.4', 'Authorize_Redirect::filter_connect_request_body' );
4576 4824
4577 - $tracking = new Tracking();
4578 - $tracks_identity = $tracking->tracks_get_identity( $args['state'] );
4579 -
4580 - $args = array_merge(
4581 - $args,
4582 - array(
4583 - '_ui' => $tracks_identity['_ui'],
4584 - '_ut' => $tracks_identity['_ut'],
4585 - )
4586 - );
4587 -
4588 - $calypso_env = ( new Host() )->get_calypso_env();
4589 -
4590 - if ( ! empty( $calypso_env ) ) {
4591 - $args['calypso_env'] = $calypso_env;
4592 - }
4593 -
4594 - return $args;
4825 + return Authorize_Redirect::filter_connect_request_body( $args );
4595 4826 }
4596 4827
4597 4828 /**
4598 4829 * Filters the `jetpack/v4/connection/data` API response of the Connection package in order to
@@ -4629,41 +4860,19 @@
4629 4860 return $current_user_connection_data;
4630 4861 }
4631 4862
4632 4863 /**
4633 - * Filters the URL that will process the connection data. It can be different from the URL
4634 - * that we send the user to after everything is done.
4635 - *
4636 - * @param String $processing_url the default redirect URL used by the package.
4637 - * @return String the modified URL.
4638 - *
4639 - * @deprecated since Jetpack 9.5.0
4640 - */
4641 - public static function filter_connect_processing_url( $processing_url ) {
4642 - _deprecated_function( __METHOD__, 'jetpack-9.5' );
4643 -
4644 - $processing_url = admin_url( 'admin.php?page=jetpack' ); // Making PHPCS happy.
4645 - return $processing_url;
4646 - }
4647 -
4648 - /**
4649 4864 * Filters the redirection URL that is used for connect requests. The redirect
4650 4865 * URL should return the user back to the Jetpack console.
4651 4866 *
4867 + * @deprecated 13.4
4868 + *
4652 4869 * @param String $redirect the default redirect URL used by the package.
4653 4870 * @return String the modified URL.
4654 4871 */
4655 4872 public static function filter_connect_redirect_url( $redirect ) {
4656 - $jetpack_admin_page = esc_url_raw( admin_url( 'admin.php?page=jetpack' ) );
4657 - $redirect = $redirect
4658 - ? wp_validate_redirect( esc_url_raw( $redirect ), $jetpack_admin_page )
4659 - : $jetpack_admin_page;
4660 -
4661 - if ( isset( $_REQUEST['is_multisite'] ) ) { // phpcs:ignore WordPress.Security.NonceVerification.Recommended -- not making a site change here.
4662 - $redirect = Jetpack_Network::init()->get_url( 'network_admin_page' );
4663 - }
4664 -
4665 - return $redirect;
4873 + _deprecated_function( __METHOD__, 'jetpack-13.4', 'Authorize_Redirect::filter_connect_redirect_url' );
4874 + return Authorize_Redirect::filter_connect_redirect_url( $redirect );
4666 4875 }
4667 4876
4668 4877 /**
4669 4878 * This action fires at the beginning of the Manager::authorize method.
@@ -4727,11 +4936,8 @@
4727 4936 *
4728 4937 * @param array $data The request data.
4729 4938 */
4730 4939 public static function authorize_ending_authorized( $data ) {
4731 - // If this site has been through the Jetpack Onboarding flow, delete the onboarding token.
4732 - self::invalidate_onboarding_token();
4733 -
4734 4940 // If redirect_uri is SSO, ensure SSO module is enabled.
4735 4941 parse_str( wp_parse_url( $data['redirect_uri'], PHP_URL_QUERY ), $redirect_options );
4736 4942
4737 4943 /** This filter is documented in class.jetpack-cli.php */
@@ -4871,10 +5077,12 @@
4871 5077 $result = self::permit_ssl( true );
4872 5078 wp_send_json(
4873 5079 array(
4874 5080 'enabled' => $result,
4875 - 'message' => get_transient( 'jetpack_https_test_message' ),
4876 - )
5081 + 'message' => self::get_ssl_test_message(),
5082 + ),
5083 + null, // @phan-suppress-current-line PhanTypeMismatchArgumentProbablyReal -- It takes null, but its phpdoc only says int.
5084 + JSON_UNESCAPED_SLASHES
4877 5085 );
4878 5086 }
4879 5087
4880 5088 /* Client API */
@@ -4881,8 +5089,10 @@
4881 5089
4882 5090 /**
4883 5091 * Verify the onboarding token.
4884 5092 *
5093 + * @deprecated since 13.9
5094 + *
4885 5095 * @param array $token_data Token data.
4886 5096 * @param string $token Token value.
4887 5097 * @param string $request_data JSON-encoded request data.
4888 5098 *
@@ -4888,8 +5098,9 @@
4888 5098 *
4889 5099 * @return mixed
4890 5100 */
4891 5101 public static function verify_onboarding_token( $token_data, $token, $request_data ) {
5102 + _deprecated_function( __METHOD__, '13.9' );
4892 5103 // Default to a blog token.
4893 5104 $token_type = 'blog';
4894 5105
4895 5106 // Let's see if this is onboarding. In such case, use user token type and the provided user id.
@@ -4917,9 +5128,9 @@
4917 5128 $jp_user = get_user_by( 'email', $jpo_user );
4918 5129 if ( is_a( $jp_user, 'WP_User' ) ) {
4919 5130 wp_set_current_user( $jp_user->ID );
4920 5131 $user_can = is_multisite()
4921 - ? current_user_can_for_blog( get_current_blog_id(), 'manage_options' )
5132 + ? current_user_can_for_site( get_current_blog_id(), 'manage_options' )
4922 5133 : current_user_can( 'manage_options' );
4923 5134 if ( $user_can ) {
4924 5135 $token_type = 'user';
4925 5136 $token->external_user_id = $jp_user->ID;
@@ -4936,11 +5147,13 @@
4936 5147
4937 5148 /**
4938 5149 * Create a random secret for validating onboarding payload
4939 5150 *
5151 + * @deprecated since 13.9
4940 5152 * @return string Secret token
4941 5153 */
4942 5154 public static function create_onboarding_token() {
5155 + _deprecated_function( __METHOD__, '13.9' );
4943 5156 $token = Jetpack_Options::get_option( 'onboarding' );
4944 5157 if ( false === ( $token ) ) {
4945 5158 $token = wp_generate_password( 32, false );
4946 5159 Jetpack_Options::update_option( 'onboarding', $token );
@@ -4951,11 +5164,13 @@
4951 5164
4952 5165 /**
4953 5166 * Remove the onboarding token
4954 5167 *
5168 + * @deprecated since 13.9
4955 5169 * @return bool True on success, false on failure
4956 5170 */
4957 5171 public static function invalidate_onboarding_token() {
5172 + _deprecated_function( __METHOD__, '13.9' );
4958 5173 return Jetpack_Options::delete_option( 'onboarding' );
4959 5174 }
4960 5175
4961 5176 /**
@@ -4960,8 +5175,10 @@
4960 5175
4961 5176 /**
4962 5177 * Validate an onboarding token for a specific action
4963 5178 *
5179 + * @deprecated since 13.9
5180 + *
4964 5181 * @param string $token Onboarding token.
4965 5182 * @param string $action Action name.
4966 5183 *
4967 5184 * @return boolean True if token/action pair is accepted, false if not
@@ -4966,8 +5183,9 @@
4966 5183 *
4967 5184 * @return boolean True if token/action pair is accepted, false if not
4968 5185 */
4969 5186 public static function validate_onboarding_token_action( $token, $action ) {
5187 + _deprecated_function( __METHOD__, '13.9' );
4970 5188 // Compare tokens, bail if tokens do not match.
4971 5189 if ( ! hash_equals( $token, Jetpack_Options::get_option( 'onboarding' ) ) ) {
4972 5190 return false;
4973 5191 }
@@ -4993,39 +5211,33 @@
4993 5211 * @return boolean
4994 5212 * @since 2.3.3
4995 5213 */
4996 5214 public static function permit_ssl( $force_recheck = false ) {
4997 - // Do some fancy tests to see if ssl is being supported.
4998 - if ( ! $force_recheck ) {
4999 - $ssl = get_transient( 'jetpack_https_test' );
5000 - }
5215 + // Delegates to the canonical SSL check in the Connection package.
5216 + return Heartbeat::permit_ssl( $force_recheck );
5217 + }
5001 5218
5002 - if ( $force_recheck || false === $ssl ) {
5003 - $message = '';
5004 - if ( ! str_starts_with( JETPACK__API_BASE, 'https' ) ) {
5005 - $ssl = 0;
5006 - } else {
5007 - $ssl = 1;
5219 + /**
5220 + * Returns a localized message describing the last SSL connectivity failure, if any.
5221 + *
5222 + * The Connection package's canonical SSL check stores a neutral reason code; this maps it to
5223 + * a translated, `jetpack`-domain message for display in the admin notice and AJAX recheck.
5224 + *
5225 + * @since 16.1
5226 + *
5227 + * @return string The localized message, or an empty string when there is no failure.
5228 + */
5229 + public static function get_ssl_test_message() {
5230 + $error = Heartbeat::get_ssl_test_error();
5008 5231
5009 - if ( ! wp_http_supports( array( 'ssl' => true ) ) ) {
5010 - $ssl = 0;
5011 - $message = __( 'WordPress reports no SSL support', 'jetpack' );
5012 - } else {
5013 - $response = wp_remote_get( JETPACK__API_BASE . 'test/1/' );
5014 - if ( is_wp_error( $response ) ) {
5015 - $ssl = 0;
5016 - $message = __( 'WordPress reports no SSL support', 'jetpack' );
5017 - } elseif ( 'OK' !== wp_remote_retrieve_body( $response ) ) {
5018 - $ssl = 0;
5019 - $message = __( 'Response was not OK: ', 'jetpack' ) . wp_remote_retrieve_body( $response );
5020 - }
5021 - }
5022 - }
5023 - set_transient( 'jetpack_https_test', $ssl, DAY_IN_SECONDS );
5024 - set_transient( 'jetpack_https_test_message', $message, DAY_IN_SECONDS );
5232 + switch ( $error['code'] ) {
5233 + case 'no_ssl_support':
5234 + return __( 'WordPress reports no SSL support', 'jetpack' );
5235 + case 'bad_response':
5236 + return __( 'Response was not OK: ', 'jetpack' ) . $error['detail'];
5237 + default:
5238 + return '';
5025 5239 }
5026 -
5027 - return (bool) $ssl;
5028 5240 }
5029 5241
5030 5242 /**
5031 5243 * Displays an admin_notice, alerting the user that outbound SSL isn't working.
@@ -5044,9 +5256,9 @@
5044 5256 <p><?php esc_html_e( 'Your site could not connect to WordPress.com via HTTPS. This could be due to any number of reasons, including faulty SSL certificates, misconfigured or missing SSL libraries, or network issues.', 'jetpack' ); ?></p>
5045 5257 <p>
5046 5258 <?php esc_html_e( 'Jetpack will re-test for HTTPS support once a day, but you can click here to try again immediately: ', 'jetpack' ); ?>
5047 5259 <a href="#" id="jetpack-recheck-ssl-button"><?php esc_html_e( 'Try again', 'jetpack' ); ?></a>
5048 - <span id="jetpack-recheck-ssl-output"><?php echo esc_html( get_transient( 'jetpack_https_test_message' ) ); ?></span>
5260 + <span id="jetpack-recheck-ssl-output"><?php echo esc_html( self::get_ssl_test_message() ); ?></span>
5049 5261 </p>
5050 5262 <p>
5051 5263 <?php
5052 5264 printf(
@@ -5065,18 +5277,18 @@
5065 5277 <script type="text/javascript">
5066 5278 jQuery( document ).ready( function( $ ) {
5067 5279 $( '#jetpack-recheck-ssl-button' ).click( function( e ) {
5068 5280 var $this = $( this );
5069 - $this.html( <?php echo wp_json_encode( __( 'Checking', 'jetpack' ) ); ?> );
5281 + $this.html( <?php echo wp_json_encode( esc_html__( 'Checking', 'jetpack' ), JSON_UNESCAPED_SLASHES | JSON_HEX_TAG | JSON_HEX_AMP ); ?> );
5070 5282 $( '#jetpack-recheck-ssl-output' ).html( '' );
5071 5283 e.preventDefault();
5072 - var data = { action: 'jetpack-recheck-ssl', 'ajax-nonce': <?php echo wp_json_encode( $ajax_nonce ); ?> };
5284 + var data = { action: 'jetpack-recheck-ssl', 'ajax-nonce': <?php echo wp_json_encode( $ajax_nonce, JSON_UNESCAPED_SLASHES | JSON_HEX_TAG | JSON_HEX_AMP ); ?> };
5073 5285 $.post( ajaxurl, data )
5074 5286 .done( function( response ) {
5075 5287 if ( response.enabled ) {
5076 5288 $( '#jetpack-ssl-warning' ).hide();
5077 5289 } else {
5078 - this.html( <?php echo wp_json_encode( __( 'Try again', 'jetpack' ) ); ?> );
5290 + this.html( <?php echo wp_json_encode( esc_html__( 'Try again', 'jetpack' ), JSON_UNESCAPED_SLASHES | JSON_HEX_TAG | JSON_HEX_AMP ); ?> );
5079 5291 $( '#jetpack-recheck-ssl-output' ).html( 'SSL Failed: ' + response.message );
5080 5292 }
5081 5293 }.bind( $this ) );
5082 5294 } );
@@ -5102,26 +5314,8 @@
5102 5314 return $jetpack->connection_manager;
5103 5315 }
5104 5316
5105 5317 /**
5106 - * Creates two secret tokens and the end of life timestamp for them.
5107 - *
5108 - * Note these tokens are unique per call, NOT static per site for connecting.
5109 - *
5110 - * @deprecated 9.5 Use Automattic\Jetpack\Connection\Secrets->generate() instead.
5111 - *
5112 - * @since 2.6
5113 - * @param String $action The action name.
5114 - * @param Integer $user_id The user identifier.
5115 - * @param Integer $exp Expiration time in seconds.
5116 - * @return array
5117 - */
5118 - public static function generate_secrets( $action, $user_id = false, $exp = 600 ) {
5119 - _deprecated_function( __METHOD__, 'jetpack-9.5', 'Automattic\\Jetpack\\Connection\\Secrets->generate' );
5120 - return self::connection()->generate_secrets( $action, $user_id, $exp );
5121 - }
5122 -
5123 - /**
5124 5318 * Get verification secrets.
5125 5319 *
5126 5320 * @param string $action Action name.
5127 5321 * @param int $user_id User ID.
@@ -5142,35 +5336,8 @@
5142 5336 return $secrets;
5143 5337 }
5144 5338
5145 5339 /**
5146 - * Register a connection.
5147 - *
5148 - * @deprecated Jetpack 9.7.0
5149 - * @see Automattic\Jetpack\Connection\Manager::try_registration()
5150 - *
5151 - * @return bool|WP_Error
5152 - */
5153 - public static function register() {
5154 - _deprecated_function( __METHOD__, 'jetpack-9.7', 'Automattic\\Jetpack\\Connection\\Manager::try_registration' );
5155 - return static::connection()->try_registration( false );
5156 - }
5157 -
5158 - /**
5159 - * Filters the registration request body to include tracking properties.
5160 - *
5161 - * @deprecated Jetpack 9.7.0
5162 - * @see Automattic\Jetpack\Connection\Utils::filter_register_request_body()
5163 - *
5164 - * @param array $properties Token request properties.
5165 - * @return array amended properties.
5166 - */
5167 - public static function filter_register_request_body( $properties ) {
5168 - _deprecated_function( __METHOD__, 'jetpack-9.7', 'Automattic\\Jetpack\\Connection\\Utils::filter_register_request_body' );
5169 - return Connection_Utils::filter_register_request_body( $properties );
5170 - }
5171 -
5172 - /**
5173 5340 * Filters the token request body to include tracking properties.
5174 5341 *
5175 5342 * @param array $properties Token request properties.
5176 5343 *
@@ -5191,9 +5358,9 @@
5191 5358
5192 5359 /**
5193 5360 * If the db version is showing something other that what we've got now, bump it to current.
5194 5361 *
5195 - * @return bool: True if the option was incorrect and updated, false if nothing happened.
5362 + * @return bool True if the option was incorrect and updated, false if nothing happened.
5196 5363 */
5197 5364 public static function maybe_set_version_option() {
5198 5365 list( $version ) = explode( ':', Jetpack_Options::get_option( 'version' ) );
5199 5366 if ( JETPACK__VERSION !== $version ) {
@@ -5211,21 +5378,8 @@
5211 5378
5212 5379 /* Client Server API */
5213 5380
5214 5381 /**
5215 - * Loads the Jetpack XML-RPC client.
5216 - * No longer necessary, as the XML-RPC client will be automagically loaded.
5217 - *
5218 - * Note: we cannot remove this function yet as it is used in this plugin:
5219 - * https://wordpress.org/plugins/jetpack-subscription-form/
5220 - *
5221 - * @deprecated since 7.7.0
5222 - */
5223 - public static function load_xml_rpc_client() {
5224 - _deprecated_function( __METHOD__, 'jetpack-7.7' );
5225 - }
5226 -
5227 - /**
5228 5382 * State is passed via cookies from one request to the next, but never to subsequent requests.
5229 5383 * SET: state( $key, $value );
5230 5384 * GET: $value = state( $key );
5231 5385 *
@@ -5299,20 +5453,8 @@
5299 5453
5300 5454 self::state( 'privacy_checks', $privacy_checks );
5301 5455 }
5302 5456
5303 - /**
5304 - * Serve a WordPress.com static resource via a randomized wp.com subdomain.
5305 - *
5306 - * @deprecated 9.3.0 Use Assets::staticize_subdomain.
5307 - *
5308 - * @param string $url WordPress.com static resource URL.
5309 - */
5310 - public static function staticize_subdomain( $url ) {
5311 - _deprecated_function( __METHOD__, 'jetpack-9.3.0', 'Automattic\Jetpack\Assets::staticize_subdomain' );
5312 - return Assets::staticize_subdomain( $url );
5313 - }
5314 -
5315 5457 /* JSON API Authorization */
5316 5458
5317 5459 /**
5318 5460 * Handles the login action for Authorizing the JSON API
@@ -5317,13 +5459,14 @@
5317 5459 /**
5318 5460 * Handles the login action for Authorizing the JSON API
5319 5461 */
5320 5462 public function login_form_json_api_authorization() {
5321 - $this->verify_json_api_authorization_request();
5463 + $authorize_json_api = new Authorize_Json_Api();
5464 + $authorize_json_api->verify_json_api_authorization_request();
5322 5465
5323 - add_action( 'wp_login', array( $this, 'store_json_api_authorization_token' ), 10, 2 );
5466 + add_action( 'wp_login', array( $authorize_json_api, 'store_json_api_authorization_token' ), 10, 2 );
5324 5467
5325 - add_action( 'login_message', array( $this, 'login_message_json_api_authorization' ) );
5468 + add_action( 'login_message', array( $authorize_json_api, 'login_message_json_api_authorization' ) );
5326 5469 add_action( 'login_form', array( $this, 'preserve_action_in_login_form_for_json_api_authorization' ) );
5327 5470 add_filter( 'site_url', array( $this, 'post_login_form_to_signed_url' ), 10, 3 );
5328 5471 }
5329 5472
@@ -5361,16 +5504,17 @@
5361 5504
5362 5505 /**
5363 5506 * If someone logs in to approve API access, store the Access Code in usermeta.
5364 5507 *
5508 + * @deprecated 13.4
5509 + *
5365 5510 * @param string $user_login Unused.
5366 5511 * @param WP_User $user User logged in.
5367 5512 */
5368 5513 public function store_json_api_authorization_token( $user_login, $user ) {
5369 - add_filter( 'login_redirect', array( $this, 'add_token_to_login_redirect_json_api_authorization' ), 10, 3 );
5370 - add_filter( 'allowed_redirect_hosts', array( $this, 'allow_wpcom_public_api_domain' ) );
5371 - $token = wp_generate_password( 32, false );
5372 - update_user_meta( $user->ID, 'jetpack_json_api_' . $this->json_api_authorization_request['client_id'], $token );
5514 + _deprecated_function( __METHOD__, 'jetpack-13.4', 'Automattic\\Jetpack\\Connection\\Authorize_Json_Api::store_json_api_authorization_token' );
5515 +
5516 + return ( new Authorize_Json_Api() )->store_json_api_authorization_token( $user_login, $user );
5373 5517 }
5374 5518
5375 5519 /**
5376 5520 * Add public-api.wordpress.com to the safe redirect allowed list - only added when someone allows API access.
@@ -5376,23 +5520,29 @@
5376 5520 * Add public-api.wordpress.com to the safe redirect allowed list - only added when someone allows API access.
5377 5521 *
5378 5522 * To be used with a filter of allowed domains for a redirect.
5379 5523 *
5524 + * @deprecated 13.4
5525 + *
5380 5526 * @param array $domains Allowed WP.com Environments.
5381 5527 */
5382 5528 public function allow_wpcom_public_api_domain( $domains ) {
5383 - $domains[] = 'public-api.wordpress.com';
5384 - return $domains;
5529 + _deprecated_function( __METHOD__, 'jetpack-13.4', 'Automattic\\Jetpack\\Status\\Host::allow_wpcom_public_api_domain' );
5530 +
5531 + return Host::allow_wpcom_public_api_domain( $domains );
5385 5532 }
5386 5533
5387 5534 /**
5388 5535 * Check if the redirect is encoded.
5389 5536 *
5537 + * @deprecated 13.4
5538 + *
5390 5539 * @param string $redirect_url Redirect URL.
5391 5540 *
5392 5541 * @return bool If redirect has been encoded.
5393 5542 */
5394 5543 public static function is_redirect_encoded( $redirect_url ) {
5544 + _deprecated_function( __METHOD__, 'jetpack-13.4' );
5395 5545 return preg_match( '/https?%3A%2F%2F/i', $redirect_url ) > 0;
5396 5546 }
5397 5547
5398 5548 /**
@@ -5410,8 +5560,10 @@
5410 5560
5411 5561 /**
5412 5562 * Add the Access Code details to the public-api.wordpress.com redirect.
5413 5563 *
5564 + * @deprecated 13.4
5565 + *
5414 5566 * @param string $redirect_to URL.
5415 5567 * @param string $original_redirect_to URL.
5416 5568 * @param WP_User $user WP_User for the redirect.
5417 5569 *
@@ -5417,23 +5569,18 @@
5417 5569 *
5418 5570 * @return string
5419 5571 */
5420 5572 public function add_token_to_login_redirect_json_api_authorization( $redirect_to, $original_redirect_to, $user ) {
5421 - return add_query_arg(
5422 - urlencode_deep(
5423 - array(
5424 - 'jetpack-code' => get_user_meta( $user->ID, 'jetpack_json_api_' . $this->json_api_authorization_request['client_id'], true ),
5425 - 'jetpack-user-id' => (int) $user->ID,
5426 - 'jetpack-state' => $this->json_api_authorization_request['state'],
5427 - )
5428 - ),
5429 - $redirect_to
5430 - );
5573 + _deprecated_function( __METHOD__, 'jetpack-13.4', 'Automattic\\Jetpack\\Connection\\Authorize_Json_Api::add_token_to_login_redirect_json_api_authorization' );
5574 +
5575 + return ( new Authorize_Json_Api() )->add_token_to_login_redirect_json_api_authorization( $redirect_to, $original_redirect_to, $user );
5431 5576 }
5432 5577
5433 5578 /**
5434 5579 * Verifies the request by checking the signature
5435 5580 *
5581 + * @deprecated 13.4
5582 + *
5436 5583 * @since 4.6.0 Method was updated to use `$_REQUEST` instead of `$_GET` and `$_POST`. Method also updated to allow
5437 5584 * passing in an `$environment` argument that overrides `$_REQUEST`. This was useful for integrating with SSO.
5438 5585 *
5439 5586 * @param null|array $environment Value to override $_REQUEST.
@@ -5438,194 +5585,24 @@
5438 5585 *
5439 5586 * @param null|array $environment Value to override $_REQUEST.
5440 5587 */
5441 5588 public function verify_json_api_authorization_request( $environment = null ) {
5442 - $environment = $environment === null
5443 - ? $_REQUEST // phpcs:ignore WordPress.Security.NonceVerification.Recommended -- nonce verification handled later in function.
5444 - : $environment;
5589 + _deprecated_function( __METHOD__, 'jetpack-13.4', 'Automattic\\Jetpack\\Connection\\Authorize_Json_Api::verify_json_api_authorization_request' );
5445 5590
5446 - list( $env_token,, $env_user_id ) = explode( ':', $environment['token'] );
5447 - $token = ( new Tokens() )->get_access_token( $env_user_id, $env_token );
5448 - if ( ! $token || empty( $token->secret ) ) {
5449 - wp_die( esc_html__( 'You must connect your Jetpack plugin to WordPress.com to use this feature.', 'jetpack' ) );
5450 - }
5451 -
5452 - $die_error = __( 'Someone may be trying to trick you into giving them access to your site. Or it could be you just encountered a bug :). Either way, please close this window.', 'jetpack' );
5453 -
5454 - // Host has encoded the request URL, probably as a result of a bad http => https redirect.
5455 - if ( self::is_redirect_encoded( esc_url_raw( wp_unslash( $_GET['redirect_to'] ) ) ) ) { // phpcs:ignore WordPress.Security.NonceVerification.Recommended, WordPress.Security.ValidatedSanitizedInput.InputNotValidated -- no site changes, we're erroring out.
5456 - /**
5457 - * Jetpack authorisation request Error.
5458 - *
5459 - * @since 7.5.0
5460 - */
5461 - do_action( 'jetpack_verify_api_authorization_request_error_double_encode' );
5462 - $die_error = sprintf(
5463 - /* translators: %s is a URL */
5464 - __( 'Your site is incorrectly double-encoding redirects from http to https. This is preventing Jetpack from authenticating your connection. Please visit our <a href="%s">support page</a> for details about how to resolve this.', 'jetpack' ),
5465 - esc_url( Redirect::get_url( 'jetpack-support-double-encoding' ) )
5466 - );
5467 - }
5468 -
5469 - $jetpack_signature = new Jetpack_Signature( $token->secret, (int) Jetpack_Options::get_option( 'time_diff' ) );
5470 -
5471 - if ( isset( $environment['jetpack_json_api_original_query'] ) ) {
5472 - $signature = $jetpack_signature->sign_request(
5473 - $environment['token'],
5474 - $environment['timestamp'],
5475 - $environment['nonce'],
5476 - '',
5477 - 'GET',
5478 - $environment['jetpack_json_api_original_query'],
5479 - null,
5480 - true
5481 - );
5482 - } else {
5483 - $signature = $jetpack_signature->sign_current_request(
5484 - array(
5485 - 'body' => null,
5486 - 'method' => 'GET',
5487 - )
5488 - );
5489 - }
5490 -
5491 - if ( ! $signature ) {
5492 - wp_die(
5493 - wp_kses(
5494 - $die_error,
5495 - array(
5496 - 'a' => array(
5497 - 'href' => array(),
5498 - ),
5499 - )
5500 - )
5501 - );
5502 - } elseif ( is_wp_error( $signature ) ) {
5503 - wp_die(
5504 - wp_kses(
5505 - $die_error,
5506 - array(
5507 - 'a' => array(
5508 - 'href' => array(),
5509 - ),
5510 - )
5511 - )
5512 - );
5513 - } elseif ( ! hash_equals( $signature, $environment['signature'] ) ) {
5514 - if ( is_ssl() ) {
5515 - // If we signed an HTTP request on the Jetpack Servers, but got redirected to HTTPS by the local blog, check the HTTP signature as well.
5516 - $signature = $jetpack_signature->sign_current_request(
5517 - array(
5518 - 'scheme' => 'http',
5519 - 'body' => null,
5520 - 'method' => 'GET',
5521 - )
5522 - );
5523 - if ( ! $signature || is_wp_error( $signature ) || ! hash_equals( $signature, $environment['signature'] ) ) {
5524 - wp_die(
5525 - wp_kses(
5526 - $die_error,
5527 - array(
5528 - 'a' => array(
5529 - 'href' => array(),
5530 - ),
5531 - )
5532 - )
5533 - );
5534 - }
5535 - } else {
5536 - wp_die(
5537 - wp_kses(
5538 - $die_error,
5539 - array(
5540 - 'a' => array(
5541 - 'href' => array(),
5542 - ),
5543 - )
5544 - )
5545 - );
5546 - }
5547 - }
5548 -
5549 - $timestamp = (int) $environment['timestamp'];
5550 - $nonce = stripslashes( (string) $environment['nonce'] );
5551 -
5552 - if ( ! $this->connection_manager ) {
5553 - $this->connection_manager = new Connection_Manager();
5554 - }
5555 -
5556 - if ( ! ( new Nonce_Handler() )->add( $timestamp, $nonce ) ) {
5557 - // De-nonce the nonce, at least for 5 minutes.
5558 - // We have to reuse this nonce at least once (used the first time when the initial request is made, used a second time when the login form is POSTed).
5559 - $old_nonce_time = get_option( "jetpack_nonce_{$timestamp}_{$nonce}" );
5560 - if ( $old_nonce_time < time() - 300 ) {
5561 - wp_die( esc_html__( 'The authorization process expired. Please go back and try again.', 'jetpack' ) );
5562 - }
5563 - }
5564 -
5565 - $data = json_decode( base64_decode( stripslashes( $environment['data'] ) ) ); // phpcs:ignore WordPress.PHP.DiscouragedPHPFunctions.obfuscation_base64_decode
5566 - $data_filters = array(
5567 - 'state' => 'opaque',
5568 - 'client_id' => 'int',
5569 - 'client_title' => 'string',
5570 - 'client_image' => 'url',
5571 - );
5572 -
5573 - foreach ( $data_filters as $key => $sanitation ) {
5574 - if ( ! isset( $data->$key ) ) {
5575 - wp_die(
5576 - wp_kses(
5577 - $die_error,
5578 - array(
5579 - 'a' => array(
5580 - 'href' => array(),
5581 - ),
5582 - )
5583 - )
5584 - );
5585 - }
5586 -
5587 - switch ( $sanitation ) {
5588 - case 'int':
5589 - $this->json_api_authorization_request[ $key ] = (int) $data->$key;
5590 - break;
5591 - case 'opaque':
5592 - $this->json_api_authorization_request[ $key ] = (string) $data->$key;
5593 - break;
5594 - case 'string':
5595 - $this->json_api_authorization_request[ $key ] = wp_kses( (string) $data->$key, array() );
5596 - break;
5597 - case 'url':
5598 - $this->json_api_authorization_request[ $key ] = esc_url_raw( (string) $data->$key );
5599 - break;
5600 - }
5601 - }
5602 -
5603 - if ( empty( $this->json_api_authorization_request['client_id'] ) ) {
5604 - wp_die(
5605 - wp_kses(
5606 - $die_error,
5607 - array(
5608 - 'a' => array(
5609 - 'href' => array(),
5610 - ),
5611 - )
5612 - )
5613 - );
5614 - }
5591 + return ( new Authorize_Json_Api() )->verify_json_api_authorization_request( $environment );
5615 5592 }
5616 5593
5617 5594 /**
5618 5595 * HTML for the JSON API authorization notice.
5619 5596 *
5597 + * @deprecated 13.4
5598 + *
5620 5599 * @return string
5621 5600 */
5622 5601 public function login_message_json_api_authorization() {
5623 - return '<p class="message">' . sprintf(
5624 - /* translators: Name/image of the client requesting authorization */
5625 - esc_html__( '%s wants to access your site’s data. Log in to authorize that access.', 'jetpack' ),
5626 - '<strong>' . esc_html( $this->json_api_authorization_request['client_title'] ) . '</strong>'
5627 - ) . '<img src="' . esc_url( $this->json_api_authorization_request['client_image'] ) . '" /></p>';
5602 + _deprecated_function( __METHOD__, 'jetpack-13.4', 'Automattic\\Jetpack\\Connection\\Authorize_Json_Api::login_message_json_api_authorization' );
5603 +
5604 + return ( new Authorize_Json_Api() )->login_message_json_api_authorization();
5628 5605 }
5629 5606
5630 5607 /**
5631 5608 * Get $content_width, but with a <s>twist</s> filter.
@@ -5669,28 +5646,20 @@
5669 5646
5670 5647 /**
5671 5648 * Checks if the site is currently in an identity crisis.
5672 5649 *
5650 + * Now delegates to the Connection package so this matches what the heartbeat itself reports.
5651 + * Note the package guards on `Connection\Manager::is_connected()` where this used to guard on
5652 + * `Jetpack::is_connection_ready()`, so the `jetpack_is_connection_ready` filter no longer applies.
5653 + *
5654 + * @deprecated 16.2
5655 + *
5673 5656 * @return array|bool Array of options that are in a crisis, or false if everything is OK.
5674 5657 */
5675 5658 public static function check_identity_crisis() {
5676 - if ( ! self::is_connection_ready() || ( new Status() )->is_offline_mode() || ! Identity_Crisis::validate_sync_error_idc_option() ) {
5677 - return false;
5678 - }
5679 - return Jetpack_Options::get_option( 'sync_error_idc' );
5680 - }
5659 + _deprecated_function( __METHOD__, 'jetpack-16.2', 'Automattic\\Jetpack\\Identity_Crisis::check_identity_crisis' );
5681 5660
5682 - /**
5683 - * Checks whether the sync_error_idc option is valid or not, and if not, will do cleanup.
5684 - *
5685 - * @since 4.4.0
5686 - * @since 5.4.0 Do not call get_sync_error_idc_option() unless site is in IDC
5687 - *
5688 - * @return bool
5689 - */
5690 - public static function validate_sync_error_idc_option() {
5691 - _deprecated_function( __METHOD__, 'jetpack-9.8', '\\Automattic\\Jetpack\\Identity_Crisis::validate_sync_error_idc_option' );
5692 - return Identity_Crisis::validate_sync_error_idc_option();
5661 + return Identity_Crisis::check_identity_crisis();
5693 5662 }
5694 5663
5695 5664 /**
5696 5665 * Normalizes a url by doing three things:
@@ -5714,35 +5683,8 @@
5714 5683 return $url;
5715 5684 }
5716 5685
5717 5686 /**
5718 - * Gets the value that is to be saved in the jetpack_sync_error_idc option.
5719 - *
5720 - * @since 4.4.0
5721 - * @since 5.4.0 Add transient since home/siteurl retrieved directly from DB
5722 - * @deprecated 9.8.0 Use \\Automattic\\Jetpack\\Identity_Crisis::get_sync_error_idc_option
5723 - *
5724 - * @param array $response HTTP response.
5725 - * @return array Array of the local urls, wpcom urls, and error code
5726 - */
5727 - public static function get_sync_error_idc_option( $response = array() ) {
5728 - _deprecated_function( __METHOD__, 'jetpack-9.8', '\\Automattic\\Jetpack\\Identity_Crisis::get_sync_error_idc_option' );
5729 - return Identity_Crisis::get_sync_error_idc_option( $response );
5730 - }
5731 -
5732 - /**
5733 - * Returns the value of the jetpack_sync_idc_optin filter, or constant.
5734 - * If set to true, the site will be put into staging mode.
5735 - *
5736 - * @since 4.3.2
5737 - * @return bool
5738 - */
5739 - public static function sync_idc_optin() {
5740 - _deprecated_function( __METHOD__, 'jetpack-9.8', '\\Automattic\\Jetpack\\Identity_Crisis::sync_idc_optin' );
5741 - return Identity_Crisis::sync_idc_optin();
5742 - }
5743 -
5744 - /**
5745 5687 * Maybe Use a .min.css stylesheet, maybe not.
5746 5688 *
5747 5689 * Hooks onto `plugins_url` filter at priority 1, and accepts all 3 args.
5748 5690 *
@@ -5805,9 +5747,9 @@
5805 5747 *
5806 5748 * @return mixed
5807 5749 */
5808 5750 public static function set_suffix_on_min( $src, $handle ) {
5809 - if ( ! str_contains( $src, '.min.css' ) ) {
5751 + if ( ! is_string( $src ) || ! str_contains( $src, '.min.css' ) ) {
5810 5752 return $src;
5811 5753 }
5812 5754
5813 5755 if ( ! empty( self::$min_assets ) ) {
@@ -5843,8 +5785,10 @@
5843 5785 *
5844 5786 * Data passed in with the $data parameter will be available in the
5845 5787 * template file as $data['value']
5846 5788 *
5789 + * @html-template-var array $data
5790 + *
5847 5791 * @param string $template - Template file to load.
5848 5792 * @param array $data - Any data to pass along to the template.
5849 5793 * @return boolean - If template file was found.
5850 5794 **/
@@ -5862,8 +5806,19 @@
5862 5806 return false;
5863 5807 }
5864 5808
5865 5809 /**
5810 + * Register Jetpack-specific tests on the connection package's health test suite.
5811 + *
5812 + * @param \Automattic\Jetpack\Connection\Connection_Health_Tests $connection_tests The test suite instance.
5813 + */
5814 + public function register_jetpack_connection_tests( $connection_tests ) {
5815 + require_once JETPACK__PLUGIN_DIR . '_inc/lib/debugger/class-jetpack-cxn-tests.php';
5816 + $jetpack_tests = new Jetpack_Cxn_Tests();
5817 + $jetpack_tests->register_tests_on( $connection_tests );
5818 + }
5819 +
5820 + /**
5866 5821 * Throws warnings for deprecated hooks to be removed from Jetpack that cannot remain in the original place in the code.
5867 5822 */
5868 5823 public function deprecated_hooks() {
5869 5824 $filter_deprecated_list = array(
@@ -6079,8 +6034,18 @@
6079 6034 'jetpack_subscriptions_modal_enabled' => array(
6080 6035 'replacement' => null,
6081 6036 'version' => 'jetpack-12.7.0',
6082 6037 ),
6038 + 'jetpack_pre_connection_prompt_helpers' => array(
6039 + 'replacement' => null,
6040 + 'version' => 'jetpack-13.2.0',
6041 + ),
6042 + 'jetpack_contact_form_use_package' => array(
6043 + 'replacement' => null,
6044 + 'version' => 'jetpack-13.4.0',
6045 + ),
6046 + // jetpack_implode_frontend_css has been removed, but is not listed here. The updated behavior is exactly the only use of the filter.
6047 + // We can reassess formally deprecating it here later; for now, it would be noise with no functional difference.
6083 6048 );
6084 6049
6085 6050 foreach ( $filter_deprecated_list as $tag => $args ) {
6086 6051 if ( has_filter( $tag ) ) {
@@ -6211,125 +6176,8 @@
6211 6176 return $css;
6212 6177 }
6213 6178
6214 6179 /**
6215 - * This methods removes all of the registered css files on the front end
6216 - * from Jetpack in favor of using a single file. In effect "imploding"
6217 - * all the files into one file.
6218 - *
6219 - * Pros:
6220 - * - Uses only ONE css asset connection instead of 15
6221 - * - Saves a minimum of 56k
6222 - * - Reduces server load
6223 - * - Reduces time to first painted byte
6224 - *
6225 - * Cons:
6226 - * - Loads css for ALL modules. However all selectors are prefixed so it
6227 - * should not cause any issues with themes.
6228 - * - Plugins/themes dequeuing styles no longer do anything. See
6229 - * jetpack_implode_frontend_css filter for a workaround
6230 - *
6231 - * For some situations developers may wish to disable css imploding and
6232 - * instead operate in legacy mode where each file loads seperately and
6233 - * can be edited individually or dequeued. This can be accomplished with
6234 - * the following line:
6235 - *
6236 - * add_filter( 'jetpack_implode_frontend_css', '__return_false' );
6237 - *
6238 - * @param bool $travis_test Is this a test run.
6239 - *
6240 - * @since 3.2
6241 - */
6242 - public function implode_frontend_css( $travis_test = false ) {
6243 - $do_implode = true;
6244 - if ( defined( 'SCRIPT_DEBUG' ) && SCRIPT_DEBUG ) {
6245 - $do_implode = false;
6246 - }
6247 -
6248 - // Do not implode CSS when the page loads via the AMP plugin.
6249 - if ( class_exists( Jetpack_AMP_Support::class ) && Jetpack_AMP_Support::is_amp_request() ) {
6250 - $do_implode = false;
6251 - }
6252 -
6253 - /*
6254 - * Only proceed if at least 2 modules with concatenated CSS are active.
6255 - * There is no point in serving a big concatenated CSS file
6256 - * if there are no features (or only one) that actually need some CSS loaded.
6257 - */
6258 - $active_modules = self::get_active_modules();
6259 - $modules_with_concatenated_css = $this->modules_with_concatenated_css;
6260 - $active_module_with_css_count = count( array_intersect( $active_modules, $modules_with_concatenated_css ) );
6261 - if ( $active_module_with_css_count < 2 ) {
6262 - $do_implode = false;
6263 - }
6264 -
6265 - /**
6266 - * Allow CSS to be concatenated into a single jetpack.css file.
6267 - *
6268 - * @since 3.2.0
6269 - *
6270 - * @param bool $do_implode Should CSS be concatenated? Default to true.
6271 - */
6272 - $do_implode = apply_filters( 'jetpack_implode_frontend_css', $do_implode );
6273 -
6274 - // Do not use the imploded file when default behavior was altered through the filter.
6275 - if ( ! $do_implode ) {
6276 - return;
6277 - }
6278 -
6279 - // We do not want to use the imploded file in dev mode, or if not connected.
6280 - if ( ( new Status() )->is_offline_mode() || ! self::is_connection_ready() ) {
6281 - if ( ! $travis_test ) {
6282 - return;
6283 - }
6284 - }
6285 -
6286 - // Do not use the imploded file if sharing css was dequeued via the sharing settings screen.
6287 - if ( get_option( 'sharedaddy_disable_resources' ) ) {
6288 - return;
6289 - }
6290 -
6291 - /*
6292 - * Now we assume Jetpack is connected and able to serve the single
6293 - * file.
6294 - *
6295 - * In the future there will be a check here to serve the file locally
6296 - * or potentially from the Jetpack CDN
6297 - *
6298 - * For now:
6299 - * - Enqueue a single imploded css file
6300 - * - Zero out the style_loader_tag for the bundled ones
6301 - * - Be happy, drink scotch
6302 - */
6303 -
6304 - add_filter( 'style_loader_tag', array( $this, 'concat_remove_style_loader_tag' ), 10, 2 );
6305 -
6306 - $version = self::is_development_version() ? filemtime( JETPACK__PLUGIN_DIR . 'css/jetpack.css' ) : JETPACK__VERSION;
6307 -
6308 - wp_enqueue_style( 'jetpack_css', plugins_url( 'css/jetpack.css', __FILE__ ), array(), $version );
6309 - wp_style_add_data( 'jetpack_css', 'rtl', 'replace' );
6310 - }
6311 -
6312 - /**
6313 - * Removes styles that are part of concatenated group.
6314 - *
6315 - * @param string $tag Style tag.
6316 - * @param string $handle Style handle.
6317 - *
6318 - * @return string
6319 - */
6320 - public function concat_remove_style_loader_tag( $tag, $handle ) {
6321 - if ( in_array( $handle, $this->concatenated_style_handles, true ) ) {
6322 - $tag = '';
6323 - if ( defined( 'WP_DEBUG' ) && WP_DEBUG ) {
6324 - $tag = '<!-- `' . esc_html( $handle ) . "` is included in the concatenated jetpack.css -->\r\n";
6325 - }
6326 - }
6327 -
6328 - return $tag;
6329 - }
6330 -
6331 - /**
6332 6180 * Check the heartbeat data
6333 6181 *
6334 6182 * Organizes the heartbeat data by severity. For example, if the site
6335 6183 * is in an ID crisis, it will be in the $filtered_data['bad'] array.
@@ -6341,9 +6189,20 @@
6341 6189 *
6342 6190 * $return array $filtered_data
6343 6191 */
6344 6192 public static function jetpack_check_heartbeat_data() {
6345 - $raw_data = Jetpack_Heartbeat::generate_stats_array();
6193 + /*
6194 + * Site environment stats (incl. wp-version/php-version checked below) now live in the Connection package,
6195 + * and the IDC stat is contributed by the Connection package's `jetpack_heartbeat_stats_array` filter
6196 + * callback. We rebuild the stat here rather than running that filter: the filter's callbacks have side
6197 + * effects (Connection\Manager::add_stats_to_heartbeat() consumes and deletes the `xmlrpc_errors` option)
6198 + * and return non-scalar values, neither of which is appropriate for this read-only diagnostic.
6199 + */
6200 + $raw_data = array_merge(
6201 + Jetpack_Heartbeat::generate_stats_array(),
6202 + Heartbeat::get_environment_stats(),
6203 + array( 'identitycrisis' => Identity_Crisis::check_identity_crisis() ? 'yes' : 'no' )
6204 + );
6346 6205
6347 6206 $good = array();
6348 6207 $caution = array();
6349 6208 $bad = array();
@@ -6409,23 +6268,8 @@
6409 6268 return Jetpack_Options::get_options_for_reset();
6410 6269 }
6411 6270
6412 6271 /**
6413 - * Strip http:// or https:// from a url, replaces forward slash with ::,
6414 - * so we can bring them directly to their site in calypso.
6415 - *
6416 - * @deprecated 9.2.0 Use Automattic\Jetpack\Status::get_site_suffix
6417 - *
6418 - * @param string $url URL.
6419 - * @return string url without the guff.
6420 - */
6421 - public static function build_raw_urls( $url ) {
6422 - _deprecated_function( __METHOD__, 'jetpack-9.2.0', 'Automattic\Jetpack\Status::get_site_suffix' );
6423 -
6424 - return ( new Status() )->get_site_suffix( $url );
6425 - }
6426 -
6427 - /**
6428 6272 * Get the user's meta box order.
6429 6273 *
6430 6274 * @param array $sorted Value for the user's option.
6431 6275 * @return mixed
@@ -6454,68 +6298,9 @@
6454 6298 }
6455 6299
6456 6300 return $sorted;
6457 6301 }
6458 -
6459 6302 /**
6460 - * Adds a "blank" column in the user admin table to display indication of user connection.
6461 - *
6462 - * @param array $columns User list table columns.
6463 - *
6464 - * @return array
6465 - */
6466 - public function jetpack_icon_user_connected( $columns ) {
6467 - $columns['user_jetpack'] = '';
6468 - return $columns;
6469 - }
6470 -
6471 - /**
6472 - * Show Jetpack icon if the user is linked.
6473 - *
6474 - * @param string $val HTML for the icon.
6475 - * @param string $col User list table column.
6476 - * @param int $user_id User ID.
6477 - *
6478 - * @return string
6479 - */
6480 - public function jetpack_show_user_connected_icon( $val, $col, $user_id ) {
6481 - if ( 'user_jetpack' === $col && self::connection()->is_user_connected( $user_id ) ) {
6482 - $jetpack_logo = new Jetpack_Logo();
6483 - $emblem_html = sprintf(
6484 - '<a title="%1$s" class="jp-emblem-user-admin">%2$s</a>',
6485 - esc_attr__( 'This user is linked and ready to fly with Jetpack.', 'jetpack' ),
6486 - $jetpack_logo->get_jp_emblem()
6487 - );
6488 - return $emblem_html;
6489 - }
6490 -
6491 - return $val;
6492 - }
6493 -
6494 - /**
6495 - * Style the Jetpack user column
6496 - */
6497 - public function jetpack_user_col_style() {
6498 - global $current_screen;
6499 - if ( ! empty( $current_screen->base ) && 'users' === $current_screen->base ) {
6500 - ?>
6501 - <style>
6502 - .fixed .column-user_jetpack {
6503 - width: 21px;
6504 - }
6505 - .jp-emblem-user-admin svg {
6506 - width: 20px;
6507 - height: 20px;
6508 - }
6509 - .jp-emblem-user-admin path {
6510 - fill: #069e08;
6511 - }
6512 - </style>
6513 - <?php
6514 - }
6515 - }
6516 -
6517 - /**
6518 6303 * Checks if Akismet is active and working.
6519 6304 *
6520 6305 * We dropped support for Akismet 3.0 with Jetpack 6.1.1 while introducing a check for an Akismet valid key
6521 6306 * that implied usage of methods present since more recent version.
@@ -6676,13 +6461,20 @@
6676 6461 }
6677 6462 }
6678 6463
6679 6464 /**
6680 - * Returns a boolean for whether backups UI should be displayed or not.
6465 + * Whether UI for backups should be displayed.
6681 6466 *
6467 + * On WPCom platforms this is gated on the backups-self-serve site feature.
6468 + * On self-hosted Jetpack sites it falls back to the jetpack_show_backups filter.
6469 + *
6682 6470 * @return bool Should backups UI be displayed?
6683 6471 */
6684 6472 public static function show_backups_ui() {
6473 + if ( ( new \Automattic\Jetpack\Status\Host() )->is_wpcom_platform() ) {
6474 + return function_exists( 'wpcom_site_has_feature' ) && wpcom_site_has_feature( 'backups-self-serve' );
6475 + }
6476 +
6685 6477 /**
6686 6478 * Whether UI for backups should be displayed.
6687 6479 *
6688 6480 * @since 6.5.0
@@ -6692,8 +6484,24 @@
6692 6484 return self::is_plugin_active( 'vaultpress/vaultpress.php' ) || apply_filters( 'jetpack_show_backups', true );
6693 6485 }
6694 6486
6695 6487 /**
6488 + * Whether UI for security scanning should be displayed.
6489 + *
6490 + * On WPCom platforms this is gated on the scan-self-serve site feature.
6491 + * On self-hosted Jetpack sites it always returns true.
6492 + *
6493 + * @return bool Should scan UI be displayed?
6494 + */
6495 + public static function show_scan_ui() {
6496 + if ( ( new \Automattic\Jetpack\Status\Host() )->is_wpcom_platform() ) {
6497 + return function_exists( 'wpcom_site_has_feature' ) && wpcom_site_has_feature( 'scan-self-serve' );
6498 + }
6499 +
6500 + return true;
6501 + }
6502 +
6503 + /**
6696 6504 * Clean leftoveruser meta.
6697 6505 *
6698 6506 * Delete Jetpack-related user meta when it is no longer needed.
6699 6507 *
@@ -6780,8 +6588,25 @@
6780 6588 _x( 'Increase earnings with WordAds', 'Creator Product Feature', 'jetpack' ),
6781 6589 ),
6782 6590 );
6783 6591
6592 + $products['growth'] = array(
6593 + 'title' => __( 'Jetpack Growth', 'jetpack' ),
6594 + 'slug' => 'jetpack_growth_yearly',
6595 + 'description' => __( 'Essential tools to help you grow your audience, track visitor engagement, and turn leads into loyal customers and advocates.', 'jetpack' ),
6596 + 'show_promotion' => true,
6597 + 'discount_percent' => 50,
6598 + 'included_in_plans' => array( 'complete' ),
6599 + 'features' => array(
6600 + _x( 'Jetpack Social', 'Growth Product Feature', 'jetpack' ),
6601 + _x( 'Jetpack Stats (10K site views, upgradeable)', 'Growth Product Feature', 'jetpack' ),
6602 + _x( 'Unlimited subscriber imports', 'Growth Product Feature', 'jetpack' ),
6603 + _x( 'Earn more from your content', 'Growth Product Feature', 'jetpack' ),
6604 + _x( 'Accept payments with PayPal', 'Growth Product Feature', 'jetpack' ),
6605 + _x( 'Increase earnings with WordAds', 'Growth Product Feature', 'jetpack' ),
6606 + ),
6607 + );
6608 +
6784 6609 $products['scan'] = array(
6785 6610 'title' => __( 'Jetpack Scan', 'jetpack' ),
6786 6611 'slug' => 'jetpack_scan',
6787 6612 'description' => __( 'Automatic scanning and one-click fixes keep your site one step ahead of security threats and malware.', 'jetpack' ),
@@ -6905,6 +6730,108 @@
6905 6730 return false;
6906 6731 }
6907 6732
6908 6733 return true;
6734 + }
6735 +
6736 + /**
6737 + * Add 5-star review link on the Jetpack Plugin meta, in the plugins list table (on the plugins page).
6738 + *
6739 + * @param array $plugin_meta An array of the plugin's metadata.
6740 + * @param string $plugin_file Path to the plugin file.
6741 + *
6742 + * @return array $plugin_meta An array of the plugin's metadata.
6743 + */
6744 + public function add_5_star_review_link( $plugin_meta, $plugin_file ) {
6745 + if ( $plugin_file !== 'jetpack/jetpack.php' ) {
6746 + return $plugin_meta;
6747 + }
6748 +
6749 + $u = get_current_user_id();
6750 + $site = get_site_url();
6751 +
6752 + $plugin_meta[] = '<a href="https://jetpack.com/redirect?source=jetpack-plugin-review&site=' . esc_attr( $site ) . '&u=' . esc_attr( $u ) . '" target="_blank" rel="noopener noreferrer" title="' . esc_attr__( 'Rate Jetpack on WordPress.org', 'jetpack' ) . '" style="color: #ffb900">'
6753 + . str_repeat( '<span class="dashicons dashicons-star-filled" style="font-size: 16px; width:16px; height: 16px"></span>', 5 )
6754 + . '</a>';
6755 +
6756 + return $plugin_meta;
6757 + }
6758 +
6759 + /**
6760 + * Lazy instantiation of the Plugin_Tracking object.
6761 + *
6762 + * @since 13.9
6763 + *
6764 + * @return void
6765 + */
6766 + public function initialize_tracking() {
6767 + if ( did_action( 'jetpack_initialize_tracking' ) > 1 ) {
6768 + // Only need to run once.
6769 + return;
6770 + }
6771 +
6772 + if ( ( new Tracking( 'jetpack', $this->connection_manager ) )->should_enable_tracking( new Terms_Of_Service(), new Status() ) || static::is_connection_ready() ) {
6773 + ( new Plugin_Tracking() )->init();
6774 + }
6775 + }
6776 +
6777 + /**
6778 + * Run the "initialize tracking" hook.
6779 + *
6780 + * @since 13.9
6781 + */
6782 + public function run_initialize_tracking_action() {
6783 + /**
6784 + * Fires when the tracking needs to be initialized.
6785 + * Doesn't necessarily mean that will actually happen, depends if the 'jetpack_tos_agreed' option is set.
6786 + *
6787 + * @since 13.9
6788 + */
6789 + do_action( 'jetpack_initialize_tracking' );
6790 + }
6791 +
6792 + /**
6793 + * Initialize REST jsonAPI if needed.
6794 + *
6795 + * @return void
6796 + */
6797 + public function maybe_initialize_rest_jsonapi() {
6798 + // phpcs:ignore WordPress.Security.NonceVerification.Recommended
6799 + if ( ! empty( $_GET['jsonapi'] ) && ( ! defined( 'IS_WPCOM' ) || ! IS_WPCOM ) ) {
6800 + require_once ABSPATH . 'wp-admin/includes/admin.php'; // JSON API relies on WP functionality not autoloaded in REST.
6801 +
6802 + define( 'WPCOM_JSON_API__BASE', 'public-api.wordpress.com/rest/v1' );
6803 + require_once JETPACK__PLUGIN_DIR . 'class.json-api-endpoints.php';
6804 + }
6805 + }
6806 +
6807 + /**
6808 + * Run plugin post-activation actions if we need to.
6809 + *
6810 + * @return void
6811 + */
6812 + private function plugin_post_activation() {
6813 + if ( ( new Status() )->is_offline_mode() ) {
6814 + return;
6815 + }
6816 +
6817 + if ( get_transient( 'activated_jetpack' ) ) {
6818 + delete_transient( 'activated_jetpack' );
6819 +
6820 + if ( ( new Host() )->is_woa_site() ) {
6821 + $redirect_url = static::admin_url( 'page=jetpack' );
6822 + } elseif ( is_network_admin() ) {
6823 + $redirect_url = admin_url( 'network/admin.php?page=jetpack' );
6824 + } elseif ( get_transient( 'my_jetpack_product_activated' ) ) {
6825 + // don't redirect if this is an activation that just came from My Jetpack
6826 + // My Jetpack has its own set of post-activation redirects
6827 + return;
6828 + } elseif ( My_Jetpack_Initializer::should_initialize() ) {
6829 + $redirect_url = static::admin_url( 'page=my-jetpack' );
6830 + } else {
6831 + $redirect_url = static::admin_url( 'page=jetpack' );
6832 + }
6833 +
6834 + wp_safe_redirect( $redirect_url );
6835 + }
6909 6836 }
6910 6837 }