PluginProbe
Jetpack – WP Security, Backup, Speed, & Growth / 16.3-a.1
Jetpack – WP Security, Backup, Speed, & Growth v16.3-a.1
16.3-a.3 16.3-a.1 16.2 16.2-beta 12.0.3 12.1.3 12.2.3 12.3.2 12.4.2 12.5.2 12.6.4 12.7.3 12.8.3 12.9.5 13.0.2 13.1.5 13.2.4 13.3.3 13.4.5 13.5.2 13.6.2 13.7.2 13.8.3 13.9.2 14.0.1 All 504 releases
← All changes | _inc/lib/core-api/class.jetpack-core-api-module-endpoints.php +242 -285 12.0.3 → 16.3-a.1 View file →
@@ -5,9 +5,9 @@
5 5 * @package automattic/jetpack
6 6 */
7 7
8 8 use Automattic\Jetpack\Connection\REST_Connector;
9 -use Automattic\Jetpack\Plugins_Installer;
9 +use Automattic\Jetpack\Current_Plan as Jetpack_Plan;
10 10 use Automattic\Jetpack\Stats\WPCOM_Stats;
11 11 use Automattic\Jetpack\Stats_Admin\Main as Stats_Admin_Main;
12 12 use Automattic\Jetpack\Status;
13 13 use Automattic\Jetpack\Waf\Brute_Force_Protection\Brute_Force_Protection;
@@ -12,13 +12,16 @@
12 12 use Automattic\Jetpack\Status;
13 13 use Automattic\Jetpack\Waf\Brute_Force_Protection\Brute_Force_Protection;
14 14 use Automattic\Jetpack\Waf\Brute_Force_Protection\Brute_Force_Protection_Shared_Functions;
15 15
16 +if ( ! defined( 'ABSPATH' ) ) {
17 + exit( 0 );
18 +}
19 +
16 20 /**
17 21 * This is the base class for every Core API endpoint Jetpack uses.
18 22 */
19 -class Jetpack_Core_API_Module_Toggle_Endpoint
20 - extends Jetpack_Core_API_XMLRPC_Consumer_Endpoint {
23 +class Jetpack_Core_API_Module_Toggle_Endpoint extends Jetpack_Core_API_XMLRPC_Consumer_Endpoint {
21 24
22 25 /**
23 26 * Check if the module requires the site to be publicly accessible from WPCOM.
24 27 * If the site meets this requirement, the module is activated. Otherwise an error is returned.
@@ -195,11 +198,11 @@
195 198 * @return bool|Array|WP_Error a resulting value or object, or an error.
196 199 */
197 200 public function process( $request ) {
198 201 if ( 'GET' === $request->get_method() ) {
199 - return $this->get_modules( $request );
202 + return $this->get_modules();
200 203 } else {
201 - return $this->activate_modules( $request );
204 + return static::activate_modules( $request );
202 205 }
203 206 }
204 207
205 208 /**
@@ -283,9 +286,9 @@
283 286 $activated_last = array_pop( $activated );
284 287 $activated_text = $activated_count > 1 ? sprintf(
285 288 /* Translators: first variable is a list followed by the last item, which is the second variable. Example: dog, cat and bird. */
286 289 __( '%1$s and %2$s', 'jetpack' ),
287 - join( ', ', $activated ),
290 + implode( ', ', $activated ),
288 291 $activated_last
289 292 ) : $activated_last;
290 293
291 294 $error = sprintf(
@@ -300,9 +303,9 @@
300 303 $failed_last = array_pop( $failed );
301 304 $failed_text = $failed_count > 1 ? sprintf(
302 305 /* Translators: first variable is a list followed by the last item, which is the second variable. Example: dog, cat and bird. */
303 306 __( '%1$s and %2$s', 'jetpack' ),
304 - join( ', ', $failed ),
307 + implode( ', ', $failed ),
305 308 $failed_last
306 309 ) : $failed_last;
307 310
308 311 $error = sprintf(
@@ -402,14 +405,19 @@
402 405 $module['activated'] = false;
403 406 }
404 407
405 408 $i18n = jetpack_get_module_i18n( $request['slug'] );
406 - if ( isset( $module['name'] ) ) {
407 - $module['name'] = $i18n['name'];
409 + if ( $i18n ) {
410 + if ( isset( $module['name'] ) ) {
411 + $module['name'] = $i18n['name'];
412 + }
413 + if ( isset( $module['description'] ) ) {
414 + $module['description'] = $i18n['description'];
415 + $module['short_description'] = $i18n['description'];
416 + }
408 417 }
409 - if ( isset( $module['description'] ) ) {
410 - $module['description'] = $i18n['description'];
411 - $module['short_description'] = $i18n['description'];
418 + if ( isset( $module['module_tags'] ) ) {
419 + $module['module_tags'] = array_map( 'jetpack_get_module_i18n_tag', $module['module_tags'] );
412 420 }
413 421
414 422 return Jetpack_Core_Json_Api_Endpoints::prepare_modules_for_response( $module );
415 423 }
@@ -444,14 +452,18 @@
444 452 $response[ $module ] = Jetpack::is_module_active( $module );
445 453 }
446 454 }
447 455
448 - $settings = Jetpack_Core_Json_Api_Endpoints::get_updateable_data_list( 'settings' );
456 + $settings = Jetpack_Core_Json_Api_Endpoints::filter_options_for_response(
457 + Jetpack_Core_Json_Api_Endpoints::get_updateable_data_list( 'settings' )
458 + );
449 459
450 460 if ( ! function_exists( 'is_plugin_active' ) ) {
451 461 require_once ABSPATH . 'wp-admin/includes/plugin.php';
452 462 }
453 463
464 + $response['categories'] = get_categories( array( 'get' => 'all' ) );
465 +
454 466 foreach ( $settings as $setting => $properties ) {
455 467 switch ( $setting ) {
456 468 case 'lang_id':
457 469 if ( ! current_user_can( 'install_languages' ) ) {
@@ -480,24 +492,8 @@
480 492 $response[ $setting ] = class_exists( 'Akismet' ) ? Akismet::get_api_key() : '';
481 493 }
482 494 break;
483 495
484 - case 'onboarding':
485 - $business_address = get_option( 'jpo_business_address' );
486 - $business_address = is_array( $business_address ) ? array_map( array( $this, 'decode_special_characters' ), $business_address ) : $business_address;
487 -
488 - $response[ $setting ] = array(
489 - 'siteTitle' => $this->decode_special_characters( get_option( 'blogname' ) ),
490 - 'siteDescription' => $this->decode_special_characters( get_option( 'blogdescription' ) ),
491 - 'siteType' => get_option( 'jpo_site_type' ),
492 - 'homepageFormat' => get_option( 'jpo_homepage_format' ),
493 - 'addContactForm' => (int) get_option( 'jpo_contact_page' ),
494 - 'businessAddress' => $business_address,
495 - 'installWooCommerce' => is_plugin_active( 'woocommerce/woocommerce.php' ),
496 - 'stats' => Jetpack::is_connection_ready() && Jetpack::is_module_active( 'stats' ),
497 - );
498 - break;
499 -
500 496 case 'search_auto_config':
501 497 // Only writable.
502 498 $response[ $setting ] = 1;
503 499 break;
@@ -502,9 +498,10 @@
502 498 $response[ $setting ] = 1;
503 499 break;
504 500
505 501 default:
506 - $response[ $setting ] = Jetpack_Core_Json_Api_Endpoints::cast_value( get_option( $setting ), $settings[ $setting ] );
502 + $default = $settings[ $setting ]['default'] ?? false;
503 + $response[ $setting ] = Jetpack_Core_Json_Api_Endpoints::cast_value( get_option( $setting, $default ), $settings[ $setting ] );
507 504 break;
508 505 }
509 506 }
510 507
@@ -509,25 +506,23 @@
509 506 }
510 507
511 508 $response['akismet'] = is_plugin_active( 'akismet/akismet.php' );
512 509
510 + require_once JETPACK__PLUGIN_DIR . '/modules/memberships/class-jetpack-memberships.php';
511 + if ( class_exists( 'Jetpack_Memberships' ) ) {
512 + $response['newsletter_has_active_plan'] = count( Jetpack_Memberships::get_all_newsletter_plan_ids( false ) ) > 0;
513 + }
514 +
515 + // Make sure we are returning a consistent type
516 + if ( ! class_exists( 'Jetpack_Newsletter_Category_Helper' ) ) {
517 + require_once JETPACK__PLUGIN_DIR . '_inc/lib/class-jetpack-newsletter-category-helper.php';
518 + }
519 + $response['wpcom_newsletter_categories'] = Jetpack_Newsletter_Category_Helper::get_category_ids();
520 +
513 521 return rest_ensure_response( $response );
514 522 }
515 523
516 524 /**
517 - * Decode the special HTML characters in a certain value.
518 - *
519 - * @since 5.8
520 - *
521 - * @param string $value Value to decode.
522 - *
523 - * @return string Value with decoded HTML characters.
524 - */
525 - private function decode_special_characters( $value ) {
526 - return (string) htmlspecialchars_decode( $value, ENT_QUOTES );
527 - }
528 -
529 - /**
530 525 * If it's a valid Jetpack module and configuration parameters have been sent, update it.
531 526 *
532 527 * @since 4.3.0
533 528 *
@@ -536,9 +531,9 @@
536 531 *
537 532 * @type string $slug Module slug.
538 533 * }
539 534 *
540 - * @return bool|WP_Error True if module was updated. Otherwise, a WP_Error instance with the corresponding error.
535 + * @return bool|WP_REST_Response|WP_Error True or a WP_REST_Response if module was updated. Otherwise, a WP_Error instance with the corresponding error.
541 536 */
542 537 public function update_data( $request ) {
543 538
544 539 // If it's null, we're trying to update many module options from different modules.
@@ -558,9 +553,9 @@
558 553 }
559 554
560 555 /*
561 556 * Get parameters to update the module.
562 - * We can not simply use $request->get_params() because when we registered this route,
557 + * We cannot simply use $request->get_params() because when we registered this route,
563 558 * we are adding the entire output of Jetpack_Core_Json_Api_Endpoints::get_updateable_data_list()
564 559 * to the current request object's params. We are interested in body of the actual request.
565 560 * This may be JSON:
566 561 */
@@ -645,13 +640,22 @@
645 640 if ( ! $updated ) {
646 641 $not_updated[ $option ] = $error;
647 642 }
648 643
644 + if ( $updated ) {
645 + // Return the module state.
646 + $response[ $option ] = $value;
647 + }
648 +
649 649 // Remove module from list so we don't go through it again.
650 650 unset( $params[ $option ] );
651 651 }
652 652 }
653 653
654 + if ( ! class_exists( 'Jetpack_Newsletter_Category_Helper' ) ) {
655 + require_once JETPACK__PLUGIN_DIR . '_inc/lib/class-jetpack-newsletter-category-helper.php';
656 + }
657 +
654 658 foreach ( $params as $option => $value ) {
655 659
656 660 // Used if there was an error. Can be overwritten with specific error messages.
657 661 $error = '';
@@ -661,8 +665,14 @@
661 665
662 666 // Get option attributes, including the group it belongs to.
663 667 $option_attrs = $options[ $option ];
664 668
669 + // Everything outside the Post by Email group requires the admin capability.
670 + if ( 'post-by-email' !== $option_attrs['jp_group'] && ! current_user_can( 'jetpack_configure_modules' ) ) {
671 + $not_updated[ $option ] = REST_Connector::get_user_permissions_error_msg();
672 + continue;
673 + }
674 +
665 675 // If this is a module option and the related module isn't active for any reason, continue with the next one.
666 676 if ( 'settings' !== $option_attrs['jp_group'] ) {
667 677 if ( ! Jetpack::is_module( $option_attrs['jp_group'] ) ) {
668 678 $not_updated[ $option ] = esc_html__( 'The requested Jetpack module was not found.', 'jetpack' );
@@ -713,8 +723,13 @@
713 723 $updated = get_option( 'WPLANG' ) === $language ? true : update_option( 'WPLANG', $language );
714 724 break;
715 725
716 726 case 'monitor_receive_notifications':
727 + if ( ! class_exists( 'Jetpack_Monitor' ) ) {
728 + $updated = false;
729 + break;
730 + }
731 +
717 732 $monitor = new Jetpack_Monitor();
718 733
719 734 // If we got true as response, consider it done.
720 735 $updated = true === $monitor->update_option_receive_jetpack_monitor_notification( $value );
@@ -720,8 +735,13 @@
720 735 $updated = true === $monitor->update_option_receive_jetpack_monitor_notification( $value );
721 736 break;
722 737
723 738 case 'post_by_email_address':
739 + if ( ! class_exists( 'Jetpack_Post_By_Email' ) ) {
740 + $updated = false;
741 + break;
742 + }
743 +
724 744 $result = Jetpack_Post_By_Email::init()->process_api_request( $value );
725 745
726 746 // If we got an email address (create or regenerate) or 1 (delete), consider it done.
727 747 if ( is_string( $result ) && preg_match( '/[a-z0-9][email protected]/', $result ) ) {
@@ -742,9 +762,9 @@
742 762 $result = false;
743 763 }
744 764
745 765 // If we got one of Protect keys, consider it done.
746 - if ( preg_match( '/[a-z0-9]{40,}/i', $result ) ) {
766 + if ( is_string( $result ) && preg_match( '/[a-z0-9]{40,}/i', $result ) ) {
747 767 $response[ $option ] = $result;
748 768 $updated = true;
749 769 }
750 770 break;
@@ -808,8 +828,17 @@
808 828 ? update_option( 'verification_services_codes', $grouped_options )
809 829 : true;
810 830 break;
811 831
832 + case Jetpack_SEO_Utils::FRONT_PAGE_META_OPTION:
833 + Jetpack_SEO_Utils::update_front_page_meta_description( $value );
834 + $response[ $option ] = Jetpack_SEO_Utils::get_front_page_meta_description();
835 + // The helper returns an empty string for a successful clear or
836 + // same-value write, so use its authoritative getter for the response
837 + // and treat every valid request reaching this switch as handled.
838 + $updated = true;
839 + break;
840 +
812 841 case 'sharing_services':
813 842 if ( ! class_exists( 'Sharing_Service' ) && ! include_once JETPACK__PLUGIN_DIR . 'modules/sharedaddy/sharing-service.php' ) {
814 843 break;
815 844 }
@@ -957,26 +986,37 @@
957 986 ? update_option( $option, (bool) $value )
958 987 : true;
959 988 break;
960 989
961 - case 'onboarding':
962 - require_once JETPACK__PLUGIN_DIR . '_inc/lib/widgets.php';
963 - // Break apart and set Jetpack onboarding options.
964 - $result = $this->process_onboarding( (array) $value );
965 - if ( empty( $result ) ) {
966 - $updated = true;
967 - } else {
968 - $error = sprintf(
969 - /* Translators: placeholder is a list of error codes. */
970 - esc_html__( 'Onboarding failed to process: %s', 'jetpack' ),
971 - $result
972 - );
973 - $updated = false;
974 - }
990 + case 'jetpack_subscriptions_reply_to':
991 + // If option value was the same, consider it done.
992 + require_once JETPACK__PLUGIN_DIR . 'modules/subscriptions/class-settings.php';
993 + $sub_value = Automattic\Jetpack\Modules\Subscriptions\Settings::is_valid_reply_to( $value )
994 + ? $value
995 + : Automattic\Jetpack\Modules\Subscriptions\Settings::$default_reply_to;
996 +
997 + $updated = (string) get_option( $option ) !== (string) $sub_value ? update_option( $option, $sub_value ) : true;
975 998 break;
999 + case 'jetpack_subscriptions_from_name':
1000 + // If option value was the same, consider it done.
1001 + $sub_value = sanitize_text_field( $value );
1002 + $updated = (string) get_option( $option ) !== (string) $sub_value ? update_option( $option, $sub_value ) : true;
1003 + break;
976 1004
977 1005 case 'stb_enabled':
978 1006 case 'stc_enabled':
1007 + case 'sm_enabled':
1008 + case 'jetpack_subscribe_overlay_enabled':
1009 + case 'jetpack_subscribe_floating_button_enabled':
1010 + case 'wpcom_newsletter_categories_enabled':
1011 + case 'wpcom_featured_image_in_email':
1012 + case 'jetpack_gravatar_in_email':
1013 + case 'jetpack_author_in_email':
1014 + case 'jetpack_post_date_in_email':
1015 + case 'wpcom_subscription_emails_use_excerpt':
1016 + case 'jetpack_subscriptions_subscribe_post_end_enabled':
1017 + case 'jetpack_subscriptions_login_navigation_enabled':
1018 + case 'jetpack_subscriptions_subscribe_navigation_enabled':
979 1019 // Convert the false value to 0. This allows the option to be updated if it doesn't exist yet.
980 1020 $sub_value = $value ? $value : 0;
981 1021 $updated = (string) get_option( $option ) !== (string) $sub_value ? update_option( $option, $sub_value ) : true;
982 1022 break;
@@ -984,11 +1024,128 @@
984 1024 case 'jetpack_blocks_disabled':
985 1025 $updated = (bool) get_option( $option ) !== (bool) $value ? update_option( $option, (bool) $value ) : true;
986 1026 break;
987 1027
1028 + case 'subscription_options':
1029 + if ( ! is_array( $value ) ) {
1030 + break;
1031 + }
1032 +
1033 + $allowed_keys = array( 'invitation', 'comment_follow', 'welcome', 'subscribe_modal_heading', 'free_tier_description', 'hide_free_tier' );
1034 + $filtered_value = array_filter(
1035 + $value,
1036 + function ( $key ) use ( $allowed_keys ) {
1037 + return in_array( $key, $allowed_keys, true );
1038 + },
1039 + ARRAY_FILTER_USE_KEY
1040 + );
1041 +
1042 + if ( empty( $filtered_value ) ) {
1043 + break;
1044 + }
1045 +
1046 + // `hide_free_tier` is a boolean flag, so pull it out before the HTML
1047 + // sanitization below (which expects strings). Sanitize it with
1048 + // rest_sanitize_boolean() so stringy booleans (e.g. "false", "0")
1049 + // are interpreted correctly rather than being treated as truthy by a
1050 + // plain `! empty()`.
1051 + $has_hide_free_tier = array_key_exists( 'hide_free_tier', $filtered_value );
1052 + $hide_free_tier = $has_hide_free_tier && rest_sanitize_boolean( $filtered_value['hide_free_tier'] );
1053 + unset( $filtered_value['hide_free_tier'] );
1054 +
1055 + array_walk_recursive(
1056 + $filtered_value,
1057 + function ( &$value ) {
1058 + $value = wp_kses(
1059 + $value,
1060 + array(
1061 + 'ul' => array(),
1062 + 'li' => array(),
1063 + 'p' => array(),
1064 + 'strong' => array(),
1065 + 'ol' => array(),
1066 + 'em' => array(),
1067 + 'a' => array(
1068 + 'href' => array(),
1069 + ),
1070 + )
1071 + );
1072 + }
1073 + );
1074 +
1075 + // Normalize whitespace-only `subscribe_modal_heading` input to empty so
1076 + // the modal template's `empty()` fallback fires. PHP's `empty()` treats
1077 + // `" "` as non-empty, which would otherwise render a blank heading.
1078 + if ( isset( $filtered_value['subscribe_modal_heading'] ) ) {
1079 + $filtered_value['subscribe_modal_heading'] = trim( $filtered_value['subscribe_modal_heading'] );
1080 + }
1081 +
1082 + // The free tier description is stored as plain markdown source, so strip
1083 + // all HTML and cap its length to match the paid-tier description field.
1084 + // WordPress core guarantees mb_substr() (polyfilled in wp-includes/compat.php
1085 + // when the mbstring extension is unavailable), so it's safe to use directly.
1086 + // A JSON payload could supply a non-scalar (array/object) for this field,
1087 + // which would fatal in wp_kses()/mb_substr() on PHP 8+, so drop invalid values.
1088 + if ( isset( $filtered_value['free_tier_description'] ) ) {
1089 + if ( is_scalar( $filtered_value['free_tier_description'] ) ) {
1090 + $filtered_value['free_tier_description'] = mb_substr( wp_kses( (string) $filtered_value['free_tier_description'], array() ), 0, 500 );
1091 + } else {
1092 + unset( $filtered_value['free_tier_description'] );
1093 + }
1094 + }
1095 +
1096 + if ( $has_hide_free_tier ) {
1097 + $filtered_value['hide_free_tier'] = $hide_free_tier;
1098 + }
1099 +
1100 + $old_subscription_options = get_option( 'subscription_options' );
1101 + if ( ! is_array( $old_subscription_options ) ) {
1102 + $old_subscription_options = array();
1103 + }
1104 + $new_subscription_options = array_merge( $old_subscription_options, $filtered_value );
1105 + $updated = true;
1106 +
1107 + if ( serialize( $old_subscription_options ) === serialize( $new_subscription_options ) ) { // phpcs:ignore WordPress.PHP.DiscouragedPHPFunctions.serialize_serialize
1108 + break; // This prevents the option update to fail when the values are the same.
1109 + }
1110 +
1111 + if ( ! update_option( $option, $new_subscription_options ) ) {
1112 + $updated = false;
1113 + $error = esc_html__( 'Subscription Options failed to process.', 'jetpack' );
1114 + }
1115 + break;
1116 +
1117 + case Jetpack_Newsletter_Category_Helper::NEWSLETTER_CATEGORIES_OPTION:
1118 + if ( ! is_array( $value ) || empty( $value ) ) {
1119 + $updated = true;
1120 + break;
1121 + }
1122 +
1123 + // If we are already current, do nothing
1124 + $current_value = Jetpack_Newsletter_Category_Helper::get_category_ids();
1125 + if ( $value === $current_value ) {
1126 + $updated = true;
1127 + break;
1128 + }
1129 +
1130 + if ( Jetpack_Newsletter_Category_Helper::save_category_ids( $value ) ) {
1131 + $updated = true;
1132 + } else {
1133 + $updated = false;
1134 + $error = esc_html__( 'Newsletter category did not update.', 'jetpack' );
1135 + }
1136 +
1137 + break;
1138 +
988 1139 default:
989 - // If option value was the same, consider it done.
990 - $updated = get_option( $option ) != $value // phpcs:ignore Universal.Operators.StrictComparisons.LooseNotEqual -- ensure we support scalars or strings saved by update_option.
1140 + // Boolean values are stored as 1 or 0.
1141 + if ( isset( $options[ $option ]['type'] ) && 'boolean' === $options[ $option ]['type'] ) {
1142 + $value = (int) $value;
1143 + }
1144 +
1145 + // If option value was the same as it's current value, or it's default, consider it done.
1146 + $default = $options[ $option ]['default'] ?? false;
1147 + $updated = get_option( $option, $default ) != $value // phpcs:ignore Universal.Operators.StrictComparisons.LooseNotEqual -- ensure we support scalars or strings saved by update_option.
991 1148 ? update_option( $option, $value )
992 1149 : true;
993 1150 break;
994 1151 }
@@ -1009,9 +1166,9 @@
1009 1166 if ( $invalid_count > 0 ) {
1010 1167 $error = sprintf(
1011 1168 /* Translators: the plural variable is a comma-separated list. Example: dog, cat, bird. */
1012 1169 _n( 'Invalid option: %s.', 'Invalid options: %s.', $invalid_count, 'jetpack' ),
1013 - join( ', ', $invalid )
1170 + implode( ', ', $invalid )
1014 1171 );
1015 1172 }
1016 1173 if ( $not_updated_count > 0 ) {
1017 1174 $not_updated_messages = array();
@@ -1028,9 +1185,9 @@
1028 1185 if ( ! empty( $error ) ) {
1029 1186 $error .= ' ';
1030 1187 }
1031 1188 if ( ! empty( $not_updated_messages ) ) {
1032 - $error .= ' ' . join( '. ', $not_updated_messages );
1189 + $error .= ' ' . implode( '. ', $not_updated_messages );
1033 1190 }
1034 1191 }
1035 1192 // There was an error because some options were updated but others were invalid or failed to update.
1036 1193 return new WP_Error( 'some_updated', esc_html( $error ), array( 'status' => 400 ) );
@@ -1041,218 +1198,30 @@
1041 1198 * Perform tasks in the site based on onboarding choices.
1042 1199 *
1043 1200 * @since 5.4.0
1044 1201 *
1202 + * @deprecated since 13.9
1203 + *
1045 1204 * @param array $data Onboarding choices made by user.
1046 1205 *
1047 1206 * @return string Result of onboarding processing and, if there is one, an error message.
1048 1207 */
1049 - private function process_onboarding( $data ) {
1050 - if ( isset( $data['end'] ) && $data['end'] ) {
1051 - return Jetpack::invalidate_onboarding_token()
1052 - ? ''
1053 - : esc_html__( "The onboarding token couldn't be deleted.", 'jetpack' );
1054 - }
1055 -
1056 - $error = array();
1057 -
1058 - if ( ! empty( $data['siteTitle'] ) ) {
1059 - // If option value was the same, consider it done.
1060 - if ( ! (
1061 - update_option( 'blogname', $data['siteTitle'] )
1062 - || get_option( 'blogname' ) === $data['siteTitle']
1063 - ) ) {
1064 - $error[] = 'siteTitle';
1065 - }
1066 - }
1067 -
1068 - if ( isset( $data['siteDescription'] ) ) {
1069 - // If option value was the same, consider it done.
1070 - if ( ! (
1071 - update_option( 'blogdescription', $data['siteDescription'] )
1072 - || get_option( 'blogdescription' ) === $data['siteDescription']
1073 - ) ) {
1074 - $error[] = 'siteDescription';
1075 - }
1076 - }
1077 -
1078 - $site_title = get_option( 'blogname' );
1079 - $author = get_current_user_id() || 1;
1080 -
1081 - if ( ! empty( $data['siteType'] ) ) {
1082 - if ( ! (
1083 - update_option( 'jpo_site_type', $data['siteType'] )
1084 - || get_option( 'jpo_site_type' ) === $data['siteType']
1085 - ) ) {
1086 - $error[] = 'siteType';
1087 - }
1088 - }
1089 -
1090 - if ( isset( $data['homepageFormat'] ) ) {
1091 - /*
1092 - * If $data['homepageFormat'] is 'posts',
1093 - * we have nothing to do since it's WordPress' default
1094 - * if it exists, just update
1095 - */
1096 - $homepage_format = get_option( 'jpo_homepage_format' );
1097 - if ( ! $homepage_format || $homepage_format !== $data['homepageFormat'] ) {
1098 - if ( 'page' === $data['homepageFormat'] ) {
1099 - if ( ! (
1100 - update_option( 'show_on_front', 'page' )
1101 - || get_option( 'show_on_front' ) === 'page'
1102 - ) ) {
1103 - $error[] = 'homepageFormat';
1104 - }
1105 -
1106 - $home = wp_insert_post(
1107 - array(
1108 - 'post_type' => 'page',
1109 - /* translators: this references the home page of a site, also called front page. */
1110 - 'post_title' => esc_html_x( 'Home Page', 'The home page of a website.', 'jetpack' ),
1111 - 'post_content' => sprintf(
1112 - /* Translators: placeholder is the site title. */
1113 - esc_html__( 'Welcome to %s.', 'jetpack' ),
1114 - $site_title
1115 - ),
1116 - 'post_status' => 'publish',
1117 - 'post_author' => $author,
1118 - )
1119 - );
1120 - if ( 0 === $home ) {
1121 - $error[] = 'home insert: 0';
1122 - } elseif ( is_wp_error( $home ) ) {
1123 - $error[] = 'home creation: ' . $home->get_error_message();
1124 - }
1125 - if ( ! (
1126 - update_option( 'page_on_front', $home )
1127 - || get_option( 'page_on_front' ) === $home
1128 - ) ) {
1129 -
1130 - $error[] = 'home set';
1131 - }
1132 -
1133 - $blog = wp_insert_post(
1134 - array(
1135 - 'post_type' => 'page',
1136 - /* translators: this references the page where blog posts are listed. */
1137 - 'post_title' => esc_html_x( 'Blog', 'The blog of a website.', 'jetpack' ),
1138 - 'post_content' => sprintf(
1139 - /* Translators: placeholder is the site title. */
1140 - esc_html__( 'These are the latest posts in %s.', 'jetpack' ),
1141 - $site_title
1142 - ),
1143 - 'post_status' => 'publish',
1144 - 'post_author' => $author,
1145 - )
1146 - );
1147 - if ( 0 === $blog ) {
1148 - $error[] = 'blog insert: 0';
1149 - } elseif ( is_wp_error( $blog ) ) {
1150 - $error[] = 'blog creation: ' . $blog->get_error_message();
1151 - }
1152 - if ( ! (
1153 - update_option( 'page_for_posts', $blog )
1154 - || get_option( 'page_for_posts' ) === $blog
1155 - ) ) {
1156 - $error[] = 'blog set';
1157 - }
1158 - } else {
1159 - $front_page = get_option( 'page_on_front' );
1160 - $posts_page = get_option( 'page_for_posts' );
1161 - if ( $posts_page && get_post( $posts_page ) ) {
1162 - wp_delete_post( $posts_page );
1163 - }
1164 - if ( $front_page && get_post( $front_page ) ) {
1165 - wp_delete_post( $front_page );
1166 - }
1167 - update_option( 'show_on_front', 'posts' );
1168 - }
1169 - }
1170 - update_option( 'jpo_homepage_format', $data['homepageFormat'] );
1171 - }
1172 -
1173 - // Setup contact page and add a form and/or business info.
1174 - $contact_page = '';
1175 - if ( ! empty( $data['addContactForm'] ) && ! get_option( 'jpo_contact_page' ) ) {
1176 - $contact_form_module_active = Jetpack::is_module_active( 'contact-form' );
1177 - if ( ! $contact_form_module_active ) {
1178 - $contact_form_module_active = Jetpack::activate_module( 'contact-form', false, false );
1179 - }
1180 -
1181 - if ( $contact_form_module_active ) {
1182 - $contact_page = '[contact-form][contact-field label="' . esc_html__( 'Name', 'jetpack' ) . '" type="name" required="true" /][contact-field label="' . esc_html__( 'Email', 'jetpack' ) . '" type="email" required="true" /][contact-field label="' . esc_html__( 'Website', 'jetpack' ) . '" type="url" /][contact-field label="' . esc_html__( 'Message', 'jetpack' ) . '" type="textarea" /][/contact-form]';
1183 - } else {
1184 - $error[] = 'contact-form activate';
1185 - }
1186 - }
1187 -
1188 - if ( isset( $data['businessPersonal'] ) && 'business' === $data['businessPersonal'] ) {
1189 - $contact_page .= "\n" . join( "\n", $data['businessInfo'] );
1190 - }
1191 -
1192 - if ( ! empty( $contact_page ) ) {
1193 - $form = wp_insert_post(
1194 - array(
1195 - 'post_type' => 'page',
1196 - /* translators: this references a page with contact details and possibly a form. */
1197 - 'post_title' => esc_html_x( 'Contact us', 'Contact page for your website.', 'jetpack' ),
1198 - 'post_content' => esc_html__( 'Send us a message!', 'jetpack' ) . "\n" . $contact_page,
1199 - 'post_status' => 'publish',
1200 - 'post_author' => $author,
1201 - )
1202 - );
1203 - if ( 0 === $form ) {
1204 - $error[] = 'form insert: 0';
1205 - } elseif ( is_wp_error( $form ) ) {
1206 - $error[] = 'form creation: ' . $form->get_error_message();
1207 - } else {
1208 - update_option( 'jpo_contact_page', $form );
1209 - }
1210 - }
1211 -
1212 - if ( isset( $data['businessAddress'] ) ) {
1213 - $handled_business_address = self::handle_business_address( $data['businessAddress'] );
1214 - if ( is_wp_error( $handled_business_address ) ) {
1215 - $error[] = 'BusinessAddress';
1216 - }
1217 - }
1218 -
1219 - if ( ! empty( $data['installWooCommerce'] ) ) {
1220 - $wc_install_result = Plugins_Installer::install_and_activate_plugin( 'woocommerce' );
1221 - delete_transient( '_wc_activation_redirect' ); // Redirecting to WC setup would kill our users' flow.
1222 - if ( is_wp_error( $wc_install_result ) ) {
1223 - $error[] = 'woocommerce installation';
1224 - }
1225 - }
1226 -
1227 - if ( ! empty( $data['stats'] ) ) {
1228 - if ( Jetpack::is_connection_ready() ) {
1229 - $stats_module_active = Jetpack::is_module_active( 'stats' );
1230 - if ( ! $stats_module_active ) {
1231 - $stats_module_active = Jetpack::activate_module( 'stats', false, false );
1232 - }
1233 -
1234 - if ( ! $stats_module_active ) {
1235 - $error[] = 'stats activate';
1236 - }
1237 - } else {
1238 - $error[] = 'stats not connected';
1239 - }
1240 - }
1241 -
1242 - return empty( $error )
1243 - ? ''
1244 - : join( ', ', $error );
1208 + private function process_onboarding( $data ) { // phpcs:ignore VariableAnalysis.CodeAnalysis.VariableAnalysis.UnusedVariable
1209 + _deprecated_function( __METHOD__, '13.9' );
1210 + return '';
1245 1211 }
1246 1212
1247 1213 /**
1248 1214 * Add or update Business Address widget.
1249 1215 *
1216 + * @deprecated since 13.9
1217 + *
1250 1218 * @param array $address Array of business address fields.
1251 1219 *
1252 1220 * @return WP_Error|true True if the data was saved correctly.
1253 1221 */
1254 1222 private static function handle_business_address( $address ) {
1223 + _deprecated_function( __METHOD__, '13.9' );
1255 1224 $first_sidebar = Jetpack_Widgets::get_first_sidebar();
1256 1225
1257 1226 $widgets_module_active = Jetpack::is_module_active( 'widgets' );
1258 1227 if ( ! $widgets_module_active ) {
@@ -1319,9 +1288,9 @@
1319 1288 if ( ! isset( $sidebars_widgets[ $sidebar ] ) ) {
1320 1289 return false;
1321 1290 }
1322 1291 foreach ( $sidebars_widgets[ $sidebar ] as $widget ) {
1323 - if ( strpos( $widget, 'widget_contact_info' ) !== false ) {
1292 + if ( str_contains( $widget, 'widget_contact_info' ) ) {
1324 1293 return true;
1325 1294 }
1326 1295 }
1327 1296 return false;
@@ -1336,13 +1305,8 @@
1336 1305 *
1337 1306 * @return bool
1338 1307 */
1339 1308 public function can_request( $request ) {
1340 - $req_params = $request->get_params();
1341 - if ( ! empty( $req_params['onboarding']['token'] ) && isset( $req_params['rest_route'] ) ) {
1342 - return Jetpack::validate_onboarding_token_action( $req_params['onboarding']['token'], $req_params['rest_route'] );
1343 - }
1344 -
1345 1309 if ( 'GET' === $request->get_method() ) {
1346 1310 return current_user_can( 'jetpack_admin_page' );
1347 1311 } else {
1348 1312 $module = Jetpack_Core_Json_Api_Endpoints::get_module_requested();
@@ -1351,13 +1315,13 @@
1351 1315 if ( ! is_array( $params ) ) {
1352 1316 $params = $request->get_body_params();
1353 1317 }
1354 1318 $options = Jetpack_Core_Json_Api_Endpoints::get_updateable_data_list( $params );
1355 - foreach ( $options as $option => $definition ) {
1356 - if ( in_array( $options[ $option ]['jp_group'], array( 'post-by-email' ), true ) ) {
1357 - $module = $options[ $option ]['jp_group'];
1358 - break;
1359 - }
1319 +
1320 + // The Post by Email gate applies only when the request contains nothing else.
1321 + $groups = array_values( array_unique( array_column( $options, 'jp_group' ) ) );
1322 + if ( array( 'post-by-email' ) === $groups ) {
1323 + $module = 'post-by-email';
1360 1324 }
1361 1325 }
1362 1326 // User is trying to create, regenerate or delete its PbE.
1363 1327 if ( 'post-by-email' === $module ) {
@@ -1373,9 +1337,8 @@
1373 1337 *
1374 1338 * phpcs:disable Generic.Files.OneObjectStructurePerFile.MultipleFound
1375 1339 */
1376 1340 class Jetpack_Core_API_Module_Data_Endpoint {
1377 - // phpcs:disable Generic.Files.OneObjectStructurePerFile.MultipleFound
1378 1341
1379 1342 /**
1380 1343 * Process request and return different data based on the module we are interested in.
1381 1344 *
@@ -1429,9 +1392,9 @@
1429 1392 * @return mixed|WP_Error Number of blocked attempts if protection is enabled. Otherwise, a WP_Error instance with the corresponding error.
1430 1393 */
1431 1394 public function get_protect_data() {
1432 1395 if ( Jetpack::is_module_active( 'protect' ) ) {
1433 - return get_site_option( 'jetpack_protect_blocked_attempts' );
1396 + return (int) get_site_option( 'jetpack_protect_blocked_attempts', 0 );
1434 1397 }
1435 1398
1436 1399 return new WP_Error(
1437 1400 'not_active',
@@ -1564,32 +1527,26 @@
1564 1527 ) {
1565 1528 $range = 'day';
1566 1529 }
1567 1530
1568 - if ( ! function_exists( 'convert_stats_array_to_object' ) ) {
1569 - require_once JETPACK__PLUGIN_DIR . 'modules/stats.php';
1570 - }
1571 -
1572 1531 $wpcom_stats = new WPCOM_Stats();
1573 1532 switch ( $range ) {
1574 1533
1575 1534 // This is always called first on page load.
1576 1535 case 'day':
1577 - $initial_stats = convert_stats_array_to_object( $wpcom_stats->get_stats() );
1536 + $initial_stats = $wpcom_stats->convert_stats_array_to_object( $wpcom_stats->get_stats() );
1578 1537 return rest_ensure_response(
1579 1538 array(
1580 1539 'general' => $initial_stats,
1581 1540
1582 1541 // Build data for 'day' as if it was $wpcom_stats ->get_visits( array( 'unit' => 'day, 'quantity' => 30).
1583 - 'day' => isset( $initial_stats->visits )
1584 - ? $initial_stats->visits
1585 - : array(),
1542 + 'day' => $initial_stats->visits ?? array(),
1586 1543 )
1587 1544 );
1588 1545 case 'week':
1589 1546 return rest_ensure_response(
1590 1547 array(
1591 - 'week' => convert_stats_array_to_object(
1548 + 'week' => $wpcom_stats->convert_stats_array_to_object(
1592 1549 $wpcom_stats->get_visits(
1593 1550 array(
1594 1551 'unit' => 'week',
1595 1552 'quantity' => 14,
@@ -1600,9 +1557,9 @@
1600 1557 );
1601 1558 case 'month':
1602 1559 return rest_ensure_response(
1603 1560 array(
1604 - 'month' => convert_stats_array_to_object(
1561 + 'month' => $wpcom_stats->convert_stats_array_to_object(
1605 1562 $wpcom_stats->get_visits(
1606 1563 array(
1607 1564 'unit' => 'month',
1608 1565 'quantity' => 12,
@@ -1724,11 +1681,11 @@
1724 1681 $last_service = $copy_services[ $last ];
1725 1682 unset( $copy_services[ $last ] );
1726 1683 $message = esc_html(
1727 1684 sprintf(
1728 - /* translators: %1$s is a comma separated list of services, and %2$s is a single service name like Google, Bing, Pinterest, etc. */
1685 + /* translators: %1$s is a comma-separated list of services, and %2$s is a single service name like Google, Bing, Pinterest, etc. */
1729 1686 __( 'Your site is verified with %1$s and %2$s.', 'jetpack' ),
1730 - join( ', ', $copy_services ),
1687 + implode( ', ', $copy_services ),
1731 1688 $last_service
1732 1689 )
1733 1690 );
1734 1691 }