PluginProbe
Jetpack – WP Security, Backup, Speed, & Growth / 16.3-a.7
Jetpack – WP Security, Backup, Speed, & Growth v16.3-a.7
16.3-a.5 16.3-a.7 16.3-a.3 16.3-a.1 16.2 16.2-beta 12.0.3 12.1.3 12.2.3 12.3.2 12.4.2 12.5.2 12.6.4 12.7.3 12.8.3 12.9.5 13.0.2 13.1.5 13.2.4 13.3.3 13.4.5 13.5.2 13.6.2 13.7.2 13.8.3 All 506 releases
← All changes | class.jetpack.php +1033 -1174 12.5.2 → 16.3-a.7 View file →
@@ -7,33 +7,38 @@
7 7 * @package automattic/jetpack
8 8 */
9 9
10 10 use Automattic\Jetpack\Assets;
11 -use Automattic\Jetpack\Assets\Logo as Jetpack_Logo;
12 11 use Automattic\Jetpack\Boost_Speed_Score\Speed_Score;
13 12 use Automattic\Jetpack\Config;
13 +use Automattic\Jetpack\Connection\Authorize_Json_Api;
14 14 use Automattic\Jetpack\Connection\Client;
15 -use Automattic\Jetpack\Connection\Initial_State as Connection_Initial_State;
16 15 use Automattic\Jetpack\Connection\Manager as Connection_Manager;
17 -use Automattic\Jetpack\Connection\Nonce_Handler;
18 16 use Automattic\Jetpack\Connection\Rest_Authentication as Connection_Rest_Authentication;
19 17 use Automattic\Jetpack\Connection\Secrets;
20 18 use Automattic\Jetpack\Connection\Tokens;
21 -use Automattic\Jetpack\Connection\Utils as Connection_Utils;
19 +use Automattic\Jetpack\Connection\Webhooks\Authorize_Redirect;
22 20 use Automattic\Jetpack\Constants;
23 21 use Automattic\Jetpack\CookieState;
24 22 use Automattic\Jetpack\Current_Plan as Jetpack_Plan;
25 23 use Automattic\Jetpack\Device_Detection\User_Agent_Info;
26 24 use Automattic\Jetpack\Errors;
25 +use Automattic\Jetpack\Feature_Policy;
27 26 use Automattic\Jetpack\Files;
27 +use Automattic\Jetpack\Heartbeat;
28 28 use Automattic\Jetpack\Identity_Crisis;
29 +use Automattic\Jetpack\Import\Main as Import_Main;
29 30 use Automattic\Jetpack\Licensing;
30 31 use Automattic\Jetpack\Modules;
31 32 use Automattic\Jetpack\My_Jetpack\Initializer as My_Jetpack_Initializer;
32 -use Automattic\Jetpack\Partner;
33 +use Automattic\Jetpack\Newsletter\Reader_Link;
33 34 use Automattic\Jetpack\Paths;
35 +use Automattic\Jetpack\Plugin\Deprecate;
34 36 use Automattic\Jetpack\Plugin\Tracking as Plugin_Tracking;
37 +use Automattic\Jetpack\Podcast\Podcast;
35 38 use Automattic\Jetpack\Redirect;
39 +use Automattic\Jetpack\Scan_Page\Jetpack_Scan as Scan_Page_Init;
40 +use Automattic\Jetpack\SEO\Initializer as Jetpack_SEO_Initializer;
36 41 use Automattic\Jetpack\Status;
37 42 use Automattic\Jetpack\Status\Host;
38 43 use Automattic\Jetpack\Status\Visitor;
39 44 use Automattic\Jetpack\Sync\Actions as Sync_Actions;
@@ -40,9 +45,14 @@
40 45 use Automattic\Jetpack\Sync\Health;
41 46 use Automattic\Jetpack\Sync\Sender;
42 47 use Automattic\Jetpack\Terms_Of_Service;
43 48 use Automattic\Jetpack\Tracking;
49 +use Automattic\Woocommerce_Analytics;
44 50
51 +if ( ! defined( 'ABSPATH' ) ) {
52 + exit( 0 );
53 +}
54 +
45 55 /*
46 56 Options:
47 57 jetpack_options (array)
48 58 An array of options.
@@ -77,49 +87,8 @@
77 87 */
78 88 public $xmlrpc_server = null;
79 89
80 90 /**
81 - * The handles of styles that are concatenated into jetpack.css.
82 - *
83 - * When making changes to that list, you must also update concat_list in tools/webpack.config.css.js.
84 - *
85 - * @var array The handles of styles that are concatenated into jetpack.css.
86 - */
87 - public $concatenated_style_handles = array(
88 - 'jetpack-carousel-swiper-css',
89 - 'jetpack-carousel',
90 - 'grunion.css',
91 - 'the-neverending-homepage',
92 - 'jetpack_likes',
93 - 'jetpack_related-posts',
94 - 'sharedaddy',
95 - 'jetpack-slideshow',
96 - 'presentations',
97 - 'quiz',
98 - 'jetpack-subscriptions',
99 - 'jetpack-responsive-videos',
100 - 'jetpack-social-menu',
101 - 'tiled-gallery',
102 - 'jetpack_display_posts_widget',
103 - 'gravatar-profile-widget',
104 - 'goodreads-widget',
105 - 'jetpack_social_media_icons_widget',
106 - 'jetpack-top-posts-widget',
107 - 'jetpack_image_widget',
108 - 'jetpack-my-community-widget',
109 - 'jetpack-authors-widget',
110 - 'wordads',
111 - 'eu-cookie-law-style',
112 - 'flickr-widget-style',
113 - 'jetpack-search-widget',
114 - 'jetpack-simple-payments-widget-style',
115 - 'jetpack-widget-social-icons-styles',
116 - 'wpcom_instagram_widget',
117 - 'milestone-widget',
118 - 'subscribe-modal-css',
119 - );
120 -
121 - /**
122 91 * Contains all assets that have had their URL rewritten to minified versions.
123 92 *
124 93 * @var array
125 94 */
@@ -134,11 +103,8 @@
134 103 'contact-form' => array(
135 104 array( 'grunion-contact-form/grunion-contact-form.php', 'Grunion Contact Form' ),
136 105 array( 'mullet/mullet-contact-form.php', 'Mullet Contact Form' ),
137 106 ),
138 - 'custom-css' => array(
139 - array( 'safecss/safecss.php', 'WordPress.com Custom CSS' ),
140 - ),
141 107 'gravatar-hovercards' => array(
142 108 array( 'jetpack-gravatar-hovercards/gravatar-hovercards.php', 'Jetpack Gravatar Hovercards' ),
143 109 ),
144 110 'latex' => array(
@@ -299,13 +265,8 @@
299 265 'MSM Sitemaps' => 'msm-sitemap/msm-sitemap.php',
300 266 'Rank Math' => 'seo-by-rank-math/rank-math.php',
301 267 'Slim SEO' => 'slim-seo/slim-seo.php',
302 268 ),
303 - 'lazy-images' => array(
304 - 'Lazy Load' => 'lazy-load/lazy-load.php',
305 - 'BJ Lazy Load' => 'bj-lazy-load/bj-lazy-load.php',
306 - 'Lazy Load by WP Rocket' => 'rocket-lazy-load/rocket-lazy-load.php',
307 - ),
308 269 );
309 270
310 271 /**
311 272 * Plugins for which we turn off our Facebook OG Tags implementation.
@@ -314,9 +275,8 @@
314 275 * Graph tags via filter when their Social Meta modules are active:
315 276 *
316 277 * - All in One SEO Pack, All in one SEO Pack Pro
317 278 * - WordPress SEO by Yoast, WordPress SEO Premium by Yoast
318 - * - SEOPress, SEOPress Pro
319 279 *
320 280 * Plugin authors: If you'd like to prevent Jetpack's Open Graph tag generation in your plugin, you can do so via this filter:
321 281 * add_filter( 'jetpack_enable_open_graph', '__return_false' );
322 282 *
@@ -359,8 +319,10 @@
359 319 'wp-caregiver/wp-caregiver.php', // WP Caregiver.
360 320 'wp-facebook-like-send-open-graph-meta/wp-facebook-like-send-open-graph-meta.php', // WP Facebook Like Send & Open Graph Meta.
361 321 'wp-facebook-open-graph-protocol/wp-facebook-ogp.php', // WP Facebook Open Graph protocol.
362 322 'wp-ogp/wp-ogp.php', // WP-OGP.
323 + 'wp-seopress/seopress.php', // SEOPress.
324 + 'wp-seopress-pro/seopress-pro.php', // SEOPress Pro.
363 325 'zoltonorg-social-plugin/zosp.php', // Zolton.org Social Plugin.
364 326 'wp-fb-share-like-button/wp_fb_share-like_widget.php', // WP Facebook Like Button.
365 327 'open-graph-metabox/open-graph-metabox.php', // Open Graph Metabox.
366 328 'seo-by-rank-math/rank-math.php', // Rank Math.
@@ -427,8 +389,10 @@
427 389
428 390 /**
429 391 * Verified data for JSON authorization request
430 392 *
393 + * @deprecated 13.4
394 + *
431 395 * @var array
432 396 */
433 397 public $json_api_authorization_request = array();
434 398
@@ -469,8 +433,16 @@
469 433 */
470 434 public static $instance = false;
471 435
472 436 /**
437 + * Resolved answer for `is_premium_analytics_enabled()`, or null before the first call.
438 + *
439 + * @since 16.1
440 + * @var bool|null
441 + */
442 + private static $premium_analytics_enabled = null;
443 +
444 + /**
473 445 * Singleton
474 446 *
475 447 * @static
476 448 */
@@ -510,9 +482,9 @@
510 482 if ( array_diff( $unfiltered_modules, $modules ) ) {
511 483 self::update_active_modules( $modules );
512 484 }
513 485
514 - add_action( 'init', array( __CLASS__, 'activate_new_modules' ) );
486 + self::register_upgrade_init_hooks();
515 487
516 488 // Upgrade to 4.3.0.
517 489 if ( Jetpack_Options::get_option( 'identity_crisis_whitelist' ) ) {
518 490 Jetpack_Options::delete_option( 'identity_crisis_whitelist' );
@@ -567,8 +539,16 @@
567 539 Jetpack_Options::delete_option( 'autoupdate_plugins' );
568 540 } // Should we have some type of fallback if something fails here?
569 541 }
570 542
543 + // Set the newsletter send default option for existing sites.
544 + if ( false === get_option( 'wpcom_newsletter_send_default' ) ) {
545 + add_option( 'wpcom_newsletter_send_default', 1 );
546 + }
547 +
548 + // Its handler went with the Recommendations assistant.
549 + wp_clear_scheduled_hook( 'jetpack_recommend_videopress' );
550 +
571 551 if ( did_action( 'wp_loaded' ) ) {
572 552 self::upgrade_on_load();
573 553 } else {
574 554 add_action(
@@ -602,9 +582,8 @@
602 582 }
603 583
604 584 if (
605 585 class_exists( 'Jetpack_Sitemap_Manager' )
606 - && version_compare( JETPACK__VERSION, '5.3', '>=' )
607 586 ) {
608 587 do_action( 'jetpack_sitemaps_purge_data' );
609 588 }
610 589
@@ -619,9 +598,9 @@
619 598 * Also fires Action hooks for each newly activated and deactivated module.
620 599 *
621 600 * @param array $modules Array of active modules to be saved in options.
622 601 *
623 - * @return $success bool true for success, false for failure.
602 + * @return bool $success true for success, false for failure.
624 603 */
625 604 public static function update_active_modules( $modules ) {
626 605 return ( new Modules() )->update_active( $modules );
627 606 }
@@ -651,10 +630,10 @@
651 630 sort( $taken_priorities );
652 631
653 632 $first_priority = array_shift( $taken_priorities );
654 633
655 - if ( defined( 'PHP_INT_MAX' ) && $first_priority <= - PHP_INT_MAX ) {
656 - $new_priority = - PHP_INT_MAX;
634 + if ( $first_priority <= PHP_INT_MIN ) {
635 + $new_priority = PHP_INT_MIN;
657 636 } else {
658 637 $new_priority = $first_priority - 1;
659 638 }
660 639
@@ -675,32 +654,17 @@
675 654 add_action( 'network_plugin_loaded', array( $this, 'add_configure_hook' ), 90 );
676 655 add_action( 'mu_plugin_loaded', array( $this, 'add_configure_hook' ), 90 );
677 656 add_action( 'plugins_loaded', array( $this, 'late_initialization' ), 90 );
678 657
679 - add_action( 'jetpack_verify_signature_error', array( $this, 'track_xmlrpc_error' ) );
680 -
681 - add_filter(
682 - 'jetpack_signature_check_token',
683 - array( __CLASS__, 'verify_onboarding_token' ),
684 - 10,
685 - 3
686 - );
687 -
688 658 /**
689 659 * Prepare Gutenberg Editor functionality
660 + *
661 + * The hooks previously here have been moved to modules/blocks.php but leaving this here pending
662 + * a longer investigation to see if code is expecting the Gutenberg class to always be available.
690 663 */
691 664 require_once JETPACK__PLUGIN_DIR . 'class.jetpack-gutenberg.php';
692 - add_action( 'plugins_loaded', array( 'Jetpack_Gutenberg', 'load_independent_blocks' ) );
693 - add_action( 'plugins_loaded', array( 'Jetpack_Gutenberg', 'load_block_editor_extensions' ), 9 );
694 - add_action( 'enqueue_block_editor_assets', array( 'Jetpack_Gutenberg', 'enqueue_block_editor_assets' ) );
695 - add_filter( 'render_block', array( 'Jetpack_Gutenberg', 'display_deprecated_block_message' ), 10, 2 );
696 -
697 665 add_action( 'set_user_role', array( $this, 'maybe_clear_other_linked_admins_transient' ), 10, 3 );
698 666
699 - // Unlink user before deleting the user from WP.com.
700 - add_action( 'deleted_user', array( $this, 'disconnect_user' ), 10, 1 );
701 - add_action( 'remove_user_from_blog', array( $this, 'disconnect_user' ), 10, 1 );
702 -
703 667 add_action( 'jetpack_event_log', array( 'Jetpack', 'log' ), 10, 2 );
704 668
705 669 add_filter( 'login_url', array( $this, 'login_url' ), 10, 2 );
706 670 add_action( 'login_init', array( $this, 'login_init' ) );
@@ -707,8 +671,13 @@
707 671
708 672 // Set up the REST authentication hooks.
709 673 Connection_Rest_Authentication::init();
710 674
675 + // Register Jetpack-specific connection tests (sync health, etc.) with the connection
676 + // package's health test suite. This runs on all requests (not just admin), because
677 + // the connection/test REST endpoint can be called outside admin context.
678 + add_action( 'jetpack_connection_tests_loaded', array( $this, 'register_jetpack_connection_tests' ) );
679 +
711 680 add_action( 'admin_init', array( $this, 'admin_init' ) );
712 681 add_action( 'admin_init', array( $this, 'dismiss_jetpack_notice' ) );
713 682
714 683 add_filter( 'admin_body_class', array( $this, 'admin_body_class' ), 20 );
@@ -722,12 +691,8 @@
722 691
723 692 // Returns HTTPS support status.
724 693 add_action( 'wp_ajax_jetpack-recheck-ssl', array( $this, 'ajax_recheck_ssl' ) );
725 694
726 - add_action( 'wp_ajax_jetpack_connection_banner', array( $this, 'jetpack_connection_banner_callback' ) );
727 -
728 - add_action( 'wp_ajax_jetpack_recommendations_banner', array( 'Jetpack_Recommendations_Banner', 'ajax_callback' ) );
729 -
730 695 add_action( 'wp_loaded', array( $this, 'register_assets' ) );
731 696
732 697 /**
733 698 * These actions run checks to load additional files.
@@ -745,29 +710,8 @@
745 710
746 711 add_filter( 'jetpack_get_default_modules', array( $this, 'filter_default_modules' ) );
747 712 add_filter( 'jetpack_get_default_modules', array( $this, 'handle_deprecated_modules' ), 99 );
748 713
749 - require_once JETPACK__PLUGIN_DIR . 'class-jetpack-pre-connection-jitms.php';
750 - $jetpack_jitm_messages = ( new Jetpack_Pre_Connection_JITMs() );
751 - add_filter( 'jetpack_pre_connection_jitms', array( $jetpack_jitm_messages, 'add_pre_connection_jitms' ) );
752 -
753 - /*
754 - * If enabled, point edit post, page, and comment links to Calypso instead of WP-Admin.
755 - * We should make sure to only do this for front end links.
756 - */
757 - if ( self::get_option( 'edit_links_calypso_redirect' ) && ! is_admin() ) {
758 - add_filter( 'get_edit_post_link', array( $this, 'point_edit_post_links_to_calypso' ), 1, 2 );
759 - add_filter( 'get_edit_comment_link', array( $this, 'point_edit_comment_links_to_calypso' ), 1 );
760 -
761 - /*
762 - * We'll shortcircuit wp_notify_postauthor and wp_notify_moderator pluggable functions
763 - * so they point moderation links on emails to Calypso.
764 - */
765 - require_once JETPACK__PLUGIN_DIR . '_inc/lib/functions.wp-notify.php';
766 - add_filter( 'comment_notification_recipients', 'jetpack_notify_postauthor', 1, 2 );
767 - add_filter( 'notify_moderator', 'jetpack_notify_moderator', 1, 2 );
768 - }
769 -
770 714 add_action(
771 715 'plugins_loaded',
772 716 function () {
773 717 if ( User_Agent_Info::is_mobile_app() ) {
@@ -778,18 +722,10 @@
778 722
779 723 // Update the site's Jetpack plan and products from API on heartbeats.
780 724 add_action( 'jetpack_heartbeat', array( Jetpack_Plan::class, 'refresh_from_wpcom' ) );
781 725
782 - /**
783 - * This is the hack to concatenate all css files into one.
784 - * For description and reasoning see the implode_frontend_css method.
785 - *
786 - * Super late priority so we catch all the registered styles.
787 - */
788 - if ( ! is_admin() ) {
789 - add_action( 'wp_print_styles', array( $this, 'implode_frontend_css' ), -1 ); // Run first.
790 - add_action( 'wp_print_footer_scripts', array( $this, 'implode_frontend_css' ), -1 ); // Run first to trigger before `print_late_styles`.
791 - }
726 + // The Connection package fetches the site record for `jetpack/v4/site`; reuse it to refresh the plan.
727 + add_action( 'jetpack_site_data_fetched', array( Jetpack_Plan::class, 'update_from_site_record' ) );
792 728
793 729 // Actually push the stats on shutdown.
794 730 if ( ! has_action( 'shutdown', array( $this, 'push_stats' ) ) ) {
795 731 add_action( 'shutdown', array( $this, 'push_stats' ) );
@@ -797,8 +733,10 @@
797 733
798 734 // After a successful connection.
799 735 add_action( 'jetpack_site_registered', array( $this, 'activate_default_modules_on_site_register' ) );
800 736 add_action( 'jetpack_site_registered', array( $this, 'handle_unique_registrations_stats' ) );
737 + add_action( 'jetpack_site_registered', array( Reader_Link::class, 'activate_on_connection' ), 9 );
738 + add_action( 'jetpack_site_registered', array( \Automattic\Jetpack\Reprint_Export\Reprint_Exporter::class, 'discard_credentials' ) );
801 739
802 740 // Actions for Manager::authorize().
803 741 add_action( 'jetpack_authorize_starting', array( $this, 'authorize_starting' ) );
804 742 add_action( 'jetpack_authorize_ending_linked', array( $this, 'authorize_ending_linked' ) );
@@ -803,8 +741,9 @@
803 741 add_action( 'jetpack_authorize_starting', array( $this, 'authorize_starting' ) );
804 742 add_action( 'jetpack_authorize_ending_linked', array( $this, 'authorize_ending_linked' ) );
805 743 add_action( 'jetpack_authorize_ending_authorized', array( $this, 'authorize_ending_authorized' ) );
806 744
745 + Jetpack_Client_Server::init();
807 746 add_action( 'jetpack_client_authorize_error', array( Jetpack_Client_Server::class, 'client_authorize_error' ) );
808 747 add_filter( 'jetpack_client_authorize_already_authorized_url', array( Jetpack_Client_Server::class, 'client_authorize_already_authorized_url' ) );
809 748 add_action( 'jetpack_client_authorize_processing', array( Jetpack_Client_Server::class, 'client_authorize_processing' ) );
810 749 add_filter( 'jetpack_client_authorize_fallback_url', array( Jetpack_Client_Server::class, 'client_authorize_fallback_url' ) );
@@ -809,9 +748,9 @@
809 748 add_action( 'jetpack_client_authorize_processing', array( Jetpack_Client_Server::class, 'client_authorize_processing' ) );
810 749 add_filter( 'jetpack_client_authorize_fallback_url', array( Jetpack_Client_Server::class, 'client_authorize_fallback_url' ) );
811 750
812 751 // Filters for the Manager::get_token() urls and request body.
813 - add_filter( 'jetpack_token_redirect_url', array( __CLASS__, 'filter_connect_redirect_url' ) );
752 + add_filter( 'jetpack_token_redirect_url', array( Authorize_Redirect::class, 'filter_connect_redirect_url' ) );
814 753 add_filter( 'jetpack_token_request_body', array( __CLASS__, 'filter_token_request_body' ) );
815 754
816 755 // Filter for the `jetpack/v4/connection/data` API response.
817 756 add_filter( 'jetpack_current_user_connection_data', array( __CLASS__, 'filter_jetpack_current_user_connection_data' ) );
@@ -832,18 +771,185 @@
832 771 // Make resources use static domain when possible.
833 772 add_filter( 'jetpack_static_url', array( 'Automattic\\Jetpack\\Assets', 'staticize_subdomain' ) );
834 773
835 774 // Validate the domain names in Jetpack development versions.
836 - add_action( 'jetpack_pre_register', array( get_called_class(), 'registration_check_domains' ) );
775 + add_action( 'jetpack_pre_register', array( static::class, 'registration_check_domains' ) );
837 776
838 777 // Register product descriptions for partner coupon usage.
839 778 add_filter( 'jetpack_partner_coupon_products', array( $this, 'get_partner_coupon_product_descriptions' ) );
840 779
841 - // Actions for conditional recommendations.
842 - add_action( 'plugins_loaded', array( 'Jetpack_Recommendations', 'init_conditional_recommendation_actions' ) );
780 + // Add 5-star
781 + add_filter( 'plugin_row_meta', array( $this, 'add_5_star_review_link' ), 10, 2 );
782 + add_action( 'init', array( Deprecate::class, 'instance' ) );
783 +
784 + // Register Jetpack module management abilities (WordPress Abilities API, WP 6.9+).
785 + \Automattic\Jetpack\Plugin\Abilities\Modules_Abilities::init();
786 +
787 + // Register Connection abilities (WordPress Abilities API, WP 6.9+). Scoped to the
788 + // Jetpack plugin for now: the Connection package no longer auto-wires these, so
789 + // connection-only consumers (Boost, Protect, Search, etc.) do not register them yet.
790 + \Automattic\Jetpack\Connection\Abilities\Connection_Abilities::init();
843 791 }
844 792
845 793 /**
794 + * Whether the current request should eagerly initialize the admin/REST-only
795 + * packages (the Import package and My Jetpack) now, at `plugins_loaded` time.
796 + *
797 + * Returns true for admin, cron, POST, and WP-CLI requests — the contexts,
798 + * knowable this early, where those packages have work to do. Returns false
799 + * for a plain front-end GET *and* for a REST request: the two can't be told
800 + * apart yet (this runs before `rest_api_init`), so callers defer the REST
801 + * case by initializing the package on `rest_api_init` instead, while a plain
802 + * page view never fires that hook and so loads nothing. This keeps
803 + * admin/REST-only PHP out of opcache on the front-end GET hot path.
804 + *
805 + * No in-repo code depends on the deferral. The one externally observable
806 + * change is timing: the packages' documented init hooks
807 + * (`jetpack_import_initialized`, `jetpack_feature_import_enabled`, and
808 + * `my_jetpack_init`) no longer fire on a plain front-end GET — they fire on
809 + * the admin, cron, POST, WP-CLI, and REST requests where the packages load.
810 + *
811 + * @return bool
812 + */
813 + private static function should_eager_load_packages() {
814 + $is_post_request = isset( $_SERVER['REQUEST_METHOD'] ) && 'POST' === strtoupper( sanitize_text_field( wp_unslash( $_SERVER['REQUEST_METHOD'] ) ) );
815 + $is_wp_cli = Constants::is_true( 'WP_CLI' );
816 +
817 + return is_admin() || wp_doing_cron() || $is_post_request || $is_wp_cli;
818 + }
819 +
820 + /**
821 + * Configure the Import package from a deferred hook.
822 + *
823 + * The eager path uses Config::ensure( 'import' ), but the deferred REST path
824 + * runs after Config::on_plugins_loaded() has already processed its feature
825 + * flags, so it needs a hookable bootstrap callback. Preserve Config's
826 + * feature-enabled action for hook consumers.
827 + *
828 + * @since 16.0
829 + *
830 + * @return void
831 + */
832 + public static function configure_import_package() {
833 + if ( class_exists( Import_Main::class ) ) {
834 + Import_Main::configure();
835 +
836 + if ( ! did_action( 'jetpack_feature_import_enabled' ) ) {
837 + do_action( 'jetpack_feature_import_enabled' );
838 + }
839 + }
840 + }
841 +
842 + /**
843 + * Enable the bundled Backup dashboard.
844 + *
845 + * The standalone plugin initializes the package first, so with both active this is a no-op.
846 + *
847 + * @return void
848 + */
849 + public static function configure_backup_package() {
850 + // Not offered on multisite, which the Backup package does not support, or without a
851 + // connected owner, since buying and managing backups needs a linked account.
852 + if ( is_multisite() || ! self::is_connection_ready() || ! self::connection()->has_connected_owner() ) {
853 + return;
854 + }
855 +
856 + /**
857 + * Filters whether the Jetpack plugin offers its bundled Backup dashboard.
858 + *
859 + * Resolved at the earliest `plugins_loaded` priority, so hook it from a mu-plugin.
860 + *
861 + * @since 16.3
862 + *
863 + * @param bool $enabled Whether to initialize the bundled Backup dashboard. Default true.
864 + */
865 + if ( ! apply_filters( 'jetpack_backup_dashboard_enabled', true ) ) {
866 + return;
867 + }
868 +
869 + $backup = 'Automattic\\Jetpack\\Backup\\V0005\\Jetpack_Backup';
870 +
871 + // An older package would take over the connection (see Jetpack_Backup::DEFAULT_INIT_OPTIONS);
872 + // only the standalone plugin ships one that old, and it draws its own menu.
873 + if ( ! class_exists( $backup ) || ! defined( $backup . '::DEFAULT_INIT_OPTIONS' ) ) {
874 + return;
875 + }
876 +
877 + $backup::initialize( array( 'manage_connection' => false ) );
878 + }
879 +
880 + /**
881 + * Whether the bundled Stats v2 dashboard is enabled.
882 + *
883 + * Stats v2 (formerly "Premium Analytics") ships with the plugin behind this
884 + * flag while it rolls out (WOOA7S-1595). When enabled it adds its own admin
885 + * menu alongside the existing Stats UI; it never replaces or hides the
886 + * legacy Stats menu, admin-bar entries, post-list column, or WP dashboard
887 + * widget. The Stats module's tracking is unaffected either way, and Stats v2
888 + * reads what that module collects, so while the module is off the plugin
889 + * answers false here before even reading the flag.
890 + *
891 + * The package has to be loadable for this to be true, so a site with the
892 + * flag on but a missing package answers false here and never adds the
893 + * Stats v2 menu (a warning is logged instead).
894 + *
895 + * @since 16.1
896 + *
897 + * @return bool
898 + */
899 + public static function is_premium_analytics_enabled() {
900 + if ( null !== self::$premium_analytics_enabled ) {
901 + return self::$premium_analytics_enabled;
902 + }
903 +
904 + if ( ! self::is_module_active( 'stats' ) ) {
905 + self::$premium_analytics_enabled = false;
906 + return false;
907 + }
908 +
909 + /**
910 + * Filters whether the bundled Premium Analytics dashboard is enabled.
911 + *
912 + * Resolved once, from `Jetpack::configure()` on `plugins_loaded`, and only
913 + * while the Stats module is active. Register this from a mu-plugin or a
914 + * plugin's main file — a callback added on `plugins_loaded` or later runs
915 + * too late to be seen.
916 + *
917 + * @since 16.1
918 + *
919 + * @param bool $enabled Defaults to the `jetpack_premium_analytics_enabled` option (false).
920 + */
921 + $flag = (bool) apply_filters( 'jetpack_premium_analytics_enabled', (bool) get_option( 'jetpack_premium_analytics_enabled' ) );
922 +
923 + self::$premium_analytics_enabled = $flag && class_exists( 'Automattic\Jetpack\PremiumAnalytics\Analytics' );
924 +
925 + if ( $flag && ! self::$premium_analytics_enabled ) {
926 + wp_trigger_error(
927 + __METHOD__,
928 + 'The jetpack_premium_analytics_enabled flag is on but the Premium Analytics package is not loadable; keeping the Stats UI in place.'
929 + );
930 + }
931 +
932 + return self::$premium_analytics_enabled;
933 + }
934 +
935 + /**
936 + * Expose the setting that turns the Premium Analytics dashboard on and off.
937 + *
938 + * Deliberately not behind is_premium_analytics_enabled(): this is the setting that flips that
939 + * check, so it has to answer while the dashboard is still off.
940 + *
941 + * @since 16.2
942 + *
943 + * @return void
944 + */
945 + public static function register_premium_analytics_enablement_setting() {
946 + if ( class_exists( 'Automattic\Jetpack\PremiumAnalytics\Enablement_Setting' ) ) {
947 + \Automattic\Jetpack\PremiumAnalytics\Enablement_Setting::register();
948 + }
949 + }
950 +
951 + /**
846 952 * Before everything else starts getting initalized, we need to initialize Jetpack using the
847 953 * Config object.
848 954 */
849 955 public function configure() {
@@ -852,13 +958,10 @@
852 958 foreach (
853 959 array(
854 960 'jitm',
855 961 'sync',
962 + 'account_protection',
856 963 'waf',
857 - 'videopress',
858 - 'stats',
859 - 'stats_admin',
860 - 'import',
861 964 )
862 965 as $feature
863 966 ) {
864 967 $config->ensure( $feature );
@@ -863,8 +966,110 @@
863 966 ) {
864 967 $config->ensure( $feature );
865 968 }
866 969
970 + // Enable the VideoPress admin UI (the "Jetpack > VideoPress" dashboard) inside the
971 + // Jetpack plugin, mirroring the standalone Jetpack VideoPress plugin. The dashboard
972 + // only renders when the VideoPress module is active (Status::is_active()); when it
973 + // is not, the menu item links to the My Jetpack interstitial to activate it.
974 + $config->ensure( 'videopress', array( 'admin_ui' => true ) );
975 +
976 + // The Backup dashboard is only an admin menu and REST routes, so it is deferred like Import below.
977 + if ( self::should_eager_load_packages() ) {
978 + self::configure_backup_package();
979 + } else {
980 + add_action( 'rest_api_init', array( __CLASS__, 'configure_backup_package' ), 0 );
981 + }
982 +
983 + /*
984 + * The Import package only registers `jetpack/v4/import` REST routes — it
985 + * does nothing when rendering a front-end page — so gate its `ensure()`
986 + * to keep its PHP out of opcache on the front-end GET hot path. It still
987 + * loads on admin, cron, POST, and WP-CLI requests, and on `rest_api_init`
988 + * for REST: a REST request can't be identified yet at `plugins_loaded`
989 + * (this runs before `Config::on_plugins_loaded`, and `rest_api_init`
990 + * fires later), so it is initialized directly when that hook fires, while
991 + * a plain page view never fires it and so loads nothing.
992 + *
993 + * JITM stays eager (above): unlike Import, its `register()` adds a
994 + * `jetpack_sync_before_send_updated_option` filter that records the
995 + * `jetpack_last_plugin_sync` transient, and a Jetpack Sync send can fire
996 + * on a plain front-end GET — including the dedicated-sync `spawn-sync`
997 + * GET, which runs on `init` and exits before `rest_api_init`. Deferring
998 + * JITM would skip that bookkeeping and leave its message cache stale after
999 + * a plugin change, so it loads on every request as before.
1000 + */
1001 + if ( self::should_eager_load_packages() ) {
1002 + $config->ensure( 'import' );
1003 + } else {
1004 + add_action(
1005 + 'rest_api_init',
1006 + array( __CLASS__, 'configure_import_package' ),
1007 + 0
1008 + );
1009 + }
1010 +
1011 + /*
1012 + * The Stats and Stats Admin packages only do work when the Stats module
1013 + * is active (the front-end tracking pixel) or on wp-admin, REST, cron,
1014 + * POST, and WP-CLI requests: the Stats dashboard page, the stats /
1015 + * stats-app REST endpoints (which the block editor also calls for
1016 + * email-open rates), the transient-cleanup cron, the connection
1017 + * package's package-version tracker (which runs on POSTs and reads the
1018 + * `jetpack_package_versions` filter that Stats registers), and CLI
1019 + * introspection such as the heartbeat inspector. On a plain front-end
1020 + * GET page view with the module off they are inert: the pixel
1021 + * short-circuits on `Stats\Main::should_track()` and every other entry
1022 + * point only hooks rest_api_init, admin, cron, the POST-only tracker, or
1023 + * is reached through WP-CLI.
1024 + * Skip loading them — and eagerly constructing the Stats Admin REST
1025 + * controller — on that hot path to keep their PHP out of opcache, but
1026 + * keep loading them everywhere else exactly as before so the stats REST
1027 + * permission mapping (view_stats, registered by Stats\Main), the
1028 + * editor's stats-app calls, the cleanup cron, and the package-version
1029 + * tracker are all unchanged.
1030 + *
1031 + * REST requests are not yet identifiable here (REST_REQUEST is defined
1032 + * after plugins_loaded), so defer those to rest_api_init. Call the
1033 + * package initializers directly rather than `$config->ensure()`: ensure()
1034 + * only flags a feature for `Config::on_plugins_loaded()` (plugins_loaded
1035 + * priority 2), which has already run by the time rest_api_init fires.
1036 + * Priority 0 runs before each package's own priority-10 route
1037 + * registration, so their routes still register within the same dispatch.
1038 + * A plain page view never fires rest_api_init, so the packages stay
1039 + * unloaded there. See JETPACK-1747.
1040 + */
1041 + $is_post_request = isset( $_SERVER['REQUEST_METHOD'] ) && 'POST' === $_SERVER['REQUEST_METHOD'];
1042 + $is_wp_cli = defined( 'WP_CLI' ) && WP_CLI;
1043 +
1044 + if ( self::is_module_active( 'stats' ) || is_admin() || wp_doing_cron() || $is_post_request || $is_wp_cli ) {
1045 + $config->ensure( 'stats' );
1046 + $config->ensure( 'stats_admin' );
1047 + } else {
1048 + add_action(
1049 + 'rest_api_init',
1050 + static function () {
1051 + if ( class_exists( 'Automattic\Jetpack\Stats\Main' ) ) {
1052 + \Automattic\Jetpack\Stats\Main::init();
1053 + }
1054 + if ( class_exists( 'Automattic\Jetpack\Stats_Admin\Main' ) ) {
1055 + \Automattic\Jetpack\Stats_Admin\Main::init();
1056 + }
1057 + },
1058 + 0
1059 + );
1060 + }
1061 +
1062 + // Stats v2 (WOOA7S-1595). Unlike Stats above it cannot be deferred when enabled — see
1063 + // Analytics::init() for why, and for why it takes no menu_title here.
1064 + if ( self::is_premium_analytics_enabled() ) {
1065 + \Automattic\Jetpack\PremiumAnalytics\Analytics::init();
1066 + }
1067 +
1068 + // Outside the check above on purpose — see Enablement_Setting. Deferred like Stats, to keep
1069 + // the autoload off the front-end hot path.
1070 + add_action( 'rest_api_init', array( __CLASS__, 'register_premium_analytics_enablement_setting' ), 0 );
1071 +
867 1072 $config->ensure(
868 1073 'connection',
869 1074 array(
870 1075 'slug' => 'jetpack',
@@ -882,12 +1087,8 @@
882 1087 );
883 1088
884 1089 $config->ensure( 'search' );
885 1090
886 - if ( defined( 'ENABLE_WORDADS_SHARED_UI' ) && ENABLE_WORDADS_SHARED_UI ) {
887 - $config->ensure( 'wordads' );
888 - }
889 -
890 1091 if ( ! $this->connection_manager ) {
891 1092 $this->connection_manager = new Connection_Manager( 'jetpack' );
892 1093 }
893 1094
@@ -895,8 +1096,10 @@
895 1096 if ( $modules->is_active( 'publicize' ) && $this->connection_manager->has_connected_user() ) {
896 1097 $config->ensure( 'publicize' );
897 1098 }
898 1099
1100 + add_action( 'jetpack_initialize_tracking', array( $this, 'initialize_tracking' ) );
1101 +
899 1102 /*
900 1103 * Load things that should only be in Network Admin.
901 1104 *
902 1105 * For now blow away everything else until a more full
@@ -911,8 +1114,9 @@
911 1114 $is_connection_ready = self::is_connection_ready();
912 1115
913 1116 if ( $is_connection_ready ) {
914 1117 add_action( 'login_form_jetpack_json_api_authorization', array( $this, 'login_form_json_api_authorization' ) );
1118 + $this->run_initialize_tracking_action();
915 1119
916 1120 Jetpack_Heartbeat::init();
917 1121 if ( self::is_module_active( 'stats' ) && self::is_module_active( 'search' ) ) {
918 1122 require_once JETPACK__PLUGIN_DIR . '_inc/lib/class.jetpack-search-performance-logger.php';
@@ -917,8 +1121,19 @@
917 1121 if ( self::is_module_active( 'stats' ) && self::is_module_active( 'search' ) ) {
918 1122 require_once JETPACK__PLUGIN_DIR . '_inc/lib/class.jetpack-search-performance-logger.php';
919 1123 Jetpack_Search_Performance_Logger::init();
920 1124 }
1125 + } else {
1126 + add_action( 'jetpack_agreed_to_terms_of_service', array( $this, 'run_initialize_tracking_action' ) );
1127 + add_action( 'rest_api_init', array( $this, 'run_initialize_tracking_action' ) );
1128 + add_filter(
1129 + 'xmlrpc_methods',
1130 + function ( $methods ) {
1131 + $this->run_initialize_tracking_action();
1132 + return $methods;
1133 + },
1134 + 1
1135 + );
921 1136 }
922 1137
923 1138 // Initialize remote file upload request handlers.
924 1139 $this->add_remote_request_handlers();
@@ -928,20 +1143,10 @@
928 1143 */
929 1144 if ( $is_connection_ready ) {
930 1145 require_once JETPACK__PLUGIN_DIR . '_inc/lib/class.jetpack-iframe-embed.php';
931 1146 add_action( 'init', array( 'Jetpack_Iframe_Embed', 'init' ), 9, 0 );
932 - require_once JETPACK__PLUGIN_DIR . '_inc/lib/class.jetpack-keyring-service-helper.php';
933 - add_action( 'init', array( 'Jetpack_Keyring_Service_Helper', 'init' ), 9, 0 );
1147 + add_action( 'rest_api_init', array( $this, 'maybe_initialize_rest_jsonapi' ) );
934 1148 }
935 -
936 - if ( ( new Tracking( 'jetpack', $this->connection_manager ) )->should_enable_tracking( new Terms_Of_Service(), new Status() ) ) {
937 - add_action( 'init', array( new Plugin_Tracking(), 'init' ) );
938 - } else {
939 - /**
940 - * Initialize tracking right after the user agrees to the terms of service.
941 - */
942 - add_action( 'jetpack_agreed_to_terms_of_service', array( new Plugin_Tracking(), 'init' ) );
943 - }
944 1149 }
945 1150
946 1151 /**
947 1152 * Runs on plugins_loaded. Use this to add code that needs to be executed later than other
@@ -949,17 +1154,58 @@
949 1154 *
950 1155 * @action plugins_loaded
951 1156 */
952 1157 public function late_initialization() {
953 - add_action( 'plugins_loaded', array( 'Jetpack', 'load_modules' ), 100 );
1158 + add_action( 'after_setup_theme', array( 'Jetpack', 'load_modules' ), -2 );
954 1159
955 - Partner::init();
956 - My_Jetpack_Initializer::init();
1160 + /*
1161 + * My Jetpack is a wp-admin dashboard. Its Initializer::init() only wires
1162 + * up admin-menu, admin_init, and rest_api_init surfaces — and eagerly
1163 + * loads every product class (backup, boost, protect, …) just to register
1164 + * admin plugin-action links — so none of it is needed on a plain
1165 + * front-end GET page view. (The pieces that do immediate work, e.g.
1166 + * Connection REST authentication and Licensing, are already initialized
1167 + * unconditionally in Jetpack's constructor, so they are unaffected here.)
1168 + *
1169 + * Gate the call to the request types where My Jetpack actually does work.
1170 + * REST can't be detected yet at plugins_loaded, so initialize on
1171 + * rest_api_init for that branch; a plain page view never fires it, so My
1172 + * Jetpack stays unloaded there.
1173 + */
1174 + if ( self::should_eager_load_packages() ) {
1175 + My_Jetpack_Initializer::init();
1176 + } else {
1177 + add_action( 'rest_api_init', array( My_Jetpack_Initializer::class, 'init' ), 0 );
1178 + }
957 1179
958 - // Initialize Boost Speed Score
959 - $modules = Jetpack_Boost_Modules::init();
960 - new Speed_Score( $modules, 'jetpack-dashboard' );
1180 + Scan_Page_Init::initialize();
1181 + Jetpack_SEO_Initializer::init();
961 1182
1183 + if ( ( new Modules() )->is_active( 'podcast' ) ) {
1184 + Podcast::init();
1185 + }
1186 +
1187 + /*
1188 + * Initialize Boost Speed Score. It only does work on REST requests (the
1189 + * dashboard speed-score endpoints) and on a few Jetpack Boost lifecycle
1190 + * actions, so defer constructing it — and loading the boost-speed-score
1191 + * package classes — until one of those hooks actually fires instead of on
1192 + * every request. Priority 0 ensures the object's own callbacks (added in
1193 + * its constructor at the default priority) still run for the firing hook.
1194 + */
1195 + $initialize_speed_score = static function () {
1196 + static $initialized = false;
1197 + if ( $initialized ) {
1198 + return;
1199 + }
1200 + $initialized = true;
1201 + new Speed_Score( array(), 'jetpack-dashboard' );
1202 + };
1203 + add_action( 'rest_api_init', $initialize_speed_score, 0 );
1204 + add_action( 'jetpack_boost_deactivate', $initialize_speed_score, 0 );
1205 + add_action( 'jetpack_boost_environment_changed', $initialize_speed_score, 0 );
1206 + add_action( 'handle_environment_change', $initialize_speed_score, 0 );
1207 +
962 1208 /**
963 1209 * Fires when Jetpack is fully loaded and ready. This is the point where it's safe
964 1210 * to instantiate classes from packages and namespaces that are managed by the Jetpack Autoloader.
965 1211 *
@@ -997,8 +1243,10 @@
997 1243
998 1244 /**
999 1245 * Redirect edit post links to Calypso.
1000 1246 *
1247 + * @deprecated since 13.9
1248 + *
1001 1249 * @param string $default_url Post edit URL.
1002 1250 * @param int $post_id Post ID.
1003 1251 *
1004 1252 * @return string
@@ -1003,8 +1251,10 @@
1003 1251 *
1004 1252 * @return string
1005 1253 */
1006 1254 public function point_edit_post_links_to_calypso( $default_url, $post_id ) {
1255 + _deprecated_function( __METHOD__, '13.9' );
1256 +
1007 1257 $post = get_post( $post_id );
1008 1258
1009 1259 if ( empty( $post ) ) {
1010 1260 return $default_url;
@@ -1035,13 +1285,17 @@
1035 1285
1036 1286 /**
1037 1287 * Redirect edit comment links to Calypso.
1038 1288 *
1289 + * @deprecated since 13.9
1290 + *
1039 1291 * @param string $url Comment edit URL.
1040 1292 *
1041 1293 * @return string
1042 1294 */
1043 1295 public function point_edit_comment_links_to_calypso( $url ) {
1296 + _deprecated_function( __METHOD__, '13.9' );
1297 +
1044 1298 // Take the `query` key value from the URL, and parse its parts to the $query_args. `amp;c` matches the comment ID.
1045 1299 $query_args = null;
1046 1300 wp_parse_str( wp_parse_url( $url, PHP_URL_QUERY ), $query_args );
1047 1301
@@ -1060,30 +1314,16 @@
1060 1314 *
1061 1315 * @return array list of callables.
1062 1316 */
1063 1317 public function filter_sync_callable_whitelist( $callables ) {
1064 -
1065 1318 // Jetpack Functions.
1066 1319 $jetpack_callables = array(
1067 1320 'single_user_site' => array( 'Jetpack', 'is_single_user_site' ),
1068 1321 'updates' => array( 'Jetpack', 'get_updates' ),
1069 1322 'available_jetpack_blocks' => array( 'Jetpack_Gutenberg', 'get_availability' ), // Includes both Gutenberg blocks *and* plugins.
1323 + 'theme_styles' => array( 'Automattic\\Jetpack\\Plugin\\Theme_Styles_Sync', 'get_theme_styles' ),
1070 1324 );
1071 - $callables = array_merge( $callables, $jetpack_callables );
1072 -
1073 - // Jetpack_SSO_Helpers.
1074 - if ( include_once JETPACK__PLUGIN_DIR . 'modules/sso/class.jetpack-sso-helpers.php' ) {
1075 - $sso_helpers = array(
1076 - 'sso_is_two_step_required' => array( 'Jetpack_SSO_Helpers', 'is_two_step_required' ),
1077 - 'sso_should_hide_login_form' => array( 'Jetpack_SSO_Helpers', 'should_hide_login_form' ),
1078 - 'sso_match_by_email' => array( 'Jetpack_SSO_Helpers', 'match_by_email' ),
1079 - 'sso_new_user_override' => array( 'Jetpack_SSO_Helpers', 'new_user_override' ),
1080 - 'sso_bypass_default_login_form' => array( 'Jetpack_SSO_Helpers', 'bypass_login_forward_wpcom' ),
1081 - );
1082 - $callables = array_merge( $callables, $sso_helpers );
1083 - }
1084 -
1085 - return $callables;
1325 + return array_merge( $callables, $jetpack_callables );
1086 1326 }
1087 1327
1088 1328 /**
1089 1329 * Extend Sync multisite callables with Jetpack Plugin functions.
@@ -1108,41 +1348,8 @@
1108 1348 return $callables;
1109 1349 }
1110 1350
1111 1351 /**
1112 - * Deprecated
1113 - * Please use Automattic\Jetpack\JITMS\JITM::jetpack_track_last_sync_callback instead.
1114 - *
1115 - * @param array $params The action parameters.
1116 - *
1117 - * @deprecated since 9.8.
1118 - */
1119 - public function jetpack_track_last_sync_callback( $params ) {
1120 - _deprecated_function( __METHOD__, 'jetpack-9.8', '\Automattic\Jetpack\JITMS\JITM->jetpack_track_last_sync_callback' );
1121 - return Automattic\Jetpack\JITMS\JITM::get_instance()->jetpack_track_last_sync_callback( $params );
1122 - }
1123 -
1124 - /**
1125 - * Jetpack Connection banner callback function.
1126 - *
1127 - * @return void
1128 - */
1129 - public function jetpack_connection_banner_callback() {
1130 - check_ajax_referer( 'jp-connection-banner-nonce', 'nonce' );
1131 -
1132 - // Disable the banner dismiss functionality if the pre-connection prompt helpers filter is set.
1133 - if (
1134 - isset( $_REQUEST['dismissBanner'] ) &&
1135 - ! Jetpack_Connection_Banner::force_display()
1136 - ) {
1137 - Jetpack_Options::update_option( 'dismissed_connection_banner', 1 );
1138 - wp_send_json_success();
1139 - }
1140 -
1141 - wp_die();
1142 - }
1143 -
1144 - /**
1145 1352 * If there are any stats that need to be pushed, but haven't been, push them now.
1146 1353 */
1147 1354 public function push_stats() {
1148 1355 if ( ! empty( $this->stats ) ) {
@@ -1157,16 +1364,8 @@
1157 1364 * @param string $cap Capability name.
1158 1365 */
1159 1366 public function jetpack_custom_caps( $caps, $cap ) {
1160 1367 switch ( $cap ) {
1161 - case 'jetpack_manage_modules':
1162 - case 'jetpack_activate_modules':
1163 - case 'jetpack_deactivate_modules':
1164 - $caps = array( 'manage_options' );
1165 - break;
1166 - case 'jetpack_configure_modules':
1167 - $caps = array( 'manage_options' );
1168 - break;
1169 1368 case 'jetpack_manage_autoupdates':
1170 1369 $caps = array(
1171 1370 'manage_options',
1172 1371 'update_plugins',
@@ -1184,9 +1383,9 @@
1184 1383 if ( $is_offline_mode ) {
1185 1384 $caps = array( 'manage_options' );
1186 1385 break;
1187 1386 } else {
1188 - $caps = array( 'read' );
1387 + $caps = array( 'edit_posts' );
1189 1388 }
1190 1389 break;
1191 1390 }
1192 1391 return $caps;
@@ -1345,9 +1544,9 @@
1345 1544 }
1346 1545 /**
1347 1546 * Does the network allow admins to add new users.
1348 1547 *
1349 - * @return boolian
1548 + * @return bool
1350 1549 */
1351 1550 public static function network_add_new_users() {
1352 1551 return (bool) get_site_option( 'add_new_users' );
1353 1552 }
@@ -1354,9 +1553,9 @@
1354 1553 /**
1355 1554 * File upload psace left per site in MB.
1356 1555 * -1 means NO LIMIT.
1357 1556 *
1358 - * @return number
1557 + * @return int
1359 1558 */
1360 1559 public static function network_site_upload_space() {
1361 1560 // value in MB.
1362 1561 return ( get_site_option( 'upload_space_check_disabled' ) ? -1 : get_space_allowed() );
@@ -1373,9 +1572,9 @@
1373 1572
1374 1573 /**
1375 1574 * Maximum file upload size set by the network.
1376 1575 *
1377 - * @return number
1576 + * @return int
1378 1577 */
1379 1578 public static function network_max_upload_file_size() {
1380 1579 // value in KB.
1381 1580 return get_site_option( 'fileupload_maxk', 300 );
@@ -1534,9 +1733,9 @@
1534 1733 }
1535 1734 return 0;
1536 1735 }
1537 1736
1538 -// phpcs:disable WordPress.WP.CapitalPDangit.Misspelled
1737 + // phpcs:disable WordPress.WP.CapitalPDangit.MisspelledInComment
1539 1738 /**
1540 1739 * Gets updates and stores in jetpack_updates.
1541 1740 *
1542 1741 * The jetpack_updates option is saved in the following schema:
@@ -1552,8 +1751,9 @@
1552 1751 *
1553 1752 * @return array
1554 1753 */
1555 1754 public static function get_updates() {
1755 + $updates = array();
1556 1756 $update_data = wp_get_update_data();
1557 1757
1558 1758 // Stores the individual update counts as well as the total count.
1559 1759 if ( isset( $update_data['counts'] ) ) {
@@ -1566,11 +1766,11 @@
1566 1766 if ( isset( $cur->response ) && 'upgrade' === $cur->response ) {
1567 1767 $updates['wp_update_version'] = $cur->current;
1568 1768 }
1569 1769 }
1570 - return isset( $updates ) ? $updates : array();
1770 + return $updates;
1571 1771 }
1572 - // phpcs:enable
1772 + // phpcs:enable WordPress.WP.CapitalPDangit.MisspelledInComment
1573 1773
1574 1774 /**
1575 1775 * Get update details for core, plugins, and themes.
1576 1776 *
@@ -1628,44 +1828,8 @@
1628 1828 return apply_filters( 'jetpack_is_connection_ready', self::connection()->is_connected(), self::connection() );
1629 1829 }
1630 1830
1631 1831 /**
1632 - * Deprecated: Is Jetpack in development (offline) mode?
1633 - *
1634 - * This static method is being left here intentionally without the use of _deprecated_function(), as other plugins
1635 - * and themes still use it, and we do not want to flood them with notices.
1636 - *
1637 - * Please use Automattic\Jetpack\Status()->is_offline_mode() instead.
1638 - *
1639 - * @deprecated since 8.0.
1640 - */
1641 - public static function is_development_mode() {
1642 - _deprecated_function( __METHOD__, 'jetpack-8.0', '\Automattic\Jetpack\Status->is_offline_mode' );
1643 - return ( new Status() )->is_offline_mode();
1644 - }
1645 -
1646 - /**
1647 - * Whether the site is currently onboarding or not.
1648 - * A site is considered as being onboarded if it currently has an onboarding token.
1649 - *
1650 - * @since 5.8
1651 - * @deprecated Use \Automattic\Jetpack\Status()->is_onboarding()
1652 - *
1653 - * @access public
1654 - * @static
1655 - *
1656 - * @return bool True if the site is currently onboarding, false otherwise
1657 - */
1658 - public static function is_onboarding() {
1659 - _deprecated_function( __METHOD__, 'jetpack-10.9', 'Automattic\\Jetpack\\Status\\is_onboarding' );
1660 -
1661 - if ( ! method_exists( 'Automattic\Jetpack\Status', 'is_onboarding' ) ) {
1662 - return Jetpack_Options::get_option( 'onboarding' ) !== false;
1663 - }
1664 - return ( new Status() )->is_onboarding();
1665 - }
1666 -
1667 - /**
1668 1832 * Determines reason for Jetpack offline mode.
1669 1833 */
1670 1834 public static function development_mode_trigger_text() {
1671 1835 $status = new Status();
@@ -1679,11 +1843,10 @@
1679 1843 } elseif ( defined( 'WP_LOCAL_DEV' ) && WP_LOCAL_DEV ) {
1680 1844 $notice = __( 'The WP_LOCAL_DEV constant is defined in wp-config.php or elsewhere.', 'jetpack' );
1681 1845 } elseif ( $status->is_local_site() ) {
1682 1846 $notice = __( 'The site URL is a known local development environment URL (e.g. http://localhost).', 'jetpack' );
1683 - /** This filter is documented in packages/status/src/class-status.php */
1684 - } elseif ( has_filter( 'jetpack_development_mode' ) && apply_filters( 'jetpack_development_mode', false ) ) { // This is a deprecated filter name.
1685 - $notice = __( 'The jetpack_development_mode filter is set to true.', 'jetpack' );
1847 + } elseif ( get_option( 'jetpack_offline_mode' ) ) {
1848 + $notice = __( 'The jetpack_offline_mode option is set to true.', 'jetpack' );
1686 1849 } else {
1687 1850 $notice = __( 'The jetpack_offline_mode filter is set to true.', 'jetpack' );
1688 1851 }
1689 1852
@@ -1698,9 +1861,9 @@
1698 1861 if ( ( new Status() )->is_offline_mode() ) {
1699 1862 $notice = sprintf(
1700 1863 /* translators: %s is a URL */
1701 1864 __( 'In <a href="%s" target="_blank">Offline Mode</a>:', 'jetpack' ),
1702 - Redirect::get_url( 'jetpack-support-development-mode' )
1865 + esc_url( Redirect::get_url( 'jetpack-support-development-mode' ) )
1703 1866 );
1704 1867
1705 1868 $notice .= ' ' . self::development_mode_trigger_text();
1706 1869
@@ -1709,19 +1872,12 @@
1709 1872
1710 1873 // Throw up a notice if using a development version and as for feedback.
1711 1874 if ( self::is_development_version() ) {
1712 1875 /* translators: %s is a URL */
1713 - $notice = sprintf( __( 'You are currently running a development version of Jetpack. <a href="%s" target="_blank">Submit your feedback</a>', 'jetpack' ), Redirect::get_url( 'jetpack-contact-support-beta-group' ) );
1876 + $notice = sprintf( __( 'You are currently running a development version of Jetpack. <a href="%s" target="_blank">Submit your feedback</a>', 'jetpack' ), esc_url( Redirect::get_url( 'jetpack-contact-support-beta-group' ) ) );
1714 1877
1715 1878 echo '<div class="updated" style="border-color: #f0821e;"><p>' . $notice . '</p></div>'; // phpcs:ignore WordPress.Security.EscapeOutput.OutputNotEscaped -- All provided text.
1716 1879 }
1717 - // Throw up a notice if using staging mode.
1718 - if ( ( new Status() )->is_staging_site() ) {
1719 - /* translators: %s is a URL */
1720 - $notice = sprintf( __( 'You are running Jetpack on a <a href="%s" target="_blank">staging server</a>.', 'jetpack' ), Redirect::get_url( 'jetpack-support-staging-sites' ) );
1721 -
1722 - echo '<div class="updated" style="border-color: #f0821e;"><p>' . $notice . '</p></div>'; // phpcs:ignore WordPress.Security.EscapeOutput.OutputNotEscaped -- All provided text.
1723 - }
1724 1880 }
1725 1881
1726 1882 /**
1727 1883 * Whether Jetpack's version maps to a public release, or a development version.
@@ -1742,28 +1898,8 @@
1742 1898 );
1743 1899 }
1744 1900
1745 1901 /**
1746 - * Is a given user (or the current user if none is specified) linked to a WordPress.com user?
1747 - *
1748 - * @param int $user_id User ID or will use get_current_user_id if false/not provided.
1749 - */
1750 - public static function is_user_connected( $user_id = false ) {
1751 - _deprecated_function( __METHOD__, 'jetpack-9.5', 'Automattic\\Jetpack\\Connection\\Manager\\is_user_connected' );
1752 - return self::connection()->is_user_connected( $user_id );
1753 - }
1754 -
1755 - /**
1756 - * Get the wpcom user data of the current|specified connected user.
1757 - *
1758 - * @param null|int $user_id User ID or will use get_current_user_id if null.
1759 - */
1760 - public static function get_connected_user_data( $user_id = null ) {
1761 - _deprecated_function( __METHOD__, 'jetpack-9.5', 'Automattic\\Jetpack\\Connection\\Manager\\get_connected_user_data' );
1762 - return self::connection()->get_connected_user_data( $user_id );
1763 - }
1764 -
1765 - /**
1766 1902 * Get the wpcom email of the current|specified connected user.
1767 1903 *
1768 1904 * @param null|int $user_id User ID or will use get_current_user_id if null.
1769 1905 */
@@ -1815,18 +1951,11 @@
1815 1951 */
1816 1952 public static function load_modules() {
1817 1953 $status = new Status();
1818 1954
1819 - if ( method_exists( $status, 'is_onboarding' ) ) {
1820 - $is_onboarding = $status->is_onboarding();
1821 - } else {
1822 - $is_onboarding = self::is_onboarding();
1823 - }
1824 -
1825 1955 if (
1826 1956 ! self::is_connection_ready()
1827 1957 && ! $status->is_offline_mode()
1828 - && ! $is_onboarding
1829 1958 && (
1830 1959 ! is_multisite()
1831 1960 || ! get_site_option( 'jetpack_protect_active' )
1832 1961 )
@@ -1947,22 +2076,14 @@
1947 2076 *
1948 2077 * @todo Store the result in core's object cache maybe?
1949 2078 */
1950 2079 public static function get_active_plugins() {
1951 - $active_plugins = (array) get_option( 'active_plugins', array() );
1952 -
1953 - if ( is_multisite() ) {
1954 - // Due to legacy code, active_sitewide_plugins stores them in the keys,
1955 - // whereas active_plugins stores them in the values.
1956 - $network_plugins = array_keys( get_site_option( 'active_sitewide_plugins', array() ) );
1957 - if ( $network_plugins ) {
1958 - $active_plugins = array_merge( $active_plugins, $network_plugins );
1959 - }
2080 + // Older Connection copies can load first and lack this method.
2081 + if ( ! method_exists( Heartbeat::class, 'get_active_plugins' ) ) {
2082 + return array();
1960 2083 }
1961 2084
1962 - sort( $active_plugins );
1963 -
1964 - return array_unique( $active_plugins );
2085 + return Heartbeat::get_active_plugins();
1965 2086 }
1966 2087
1967 2088 /**
1968 2089 * Gets and parses additional plugin data to send with the heartbeat data
@@ -2100,8 +2221,10 @@
2100 2221 *
2101 2222 * @param bool true Should Twitter Card Meta tags be disabled. Default to true.
2102 2223 */
2103 2224 if ( ! apply_filters( 'jetpack_disable_twitter_cards', false ) ) {
2225 + // @todo Remove this require once the deprecated Jetpack_Twitter_Cards wrapper has been removed.
2226 + // Twitter Cards functionality now lives in the jetpack-post-media package (Automattic\Jetpack\Post_Media\Twitter_Cards).
2104 2227 require_once JETPACK__PLUGIN_DIR . 'class.jetpack-twitter-cards.php';
2105 2228 }
2106 2229 }
2107 2230
@@ -2204,9 +2327,9 @@
2204 2327 if ( isset( $_GET['page'] ) && in_array( $_GET['page'], array( 'jetpack', 'jetpack_modules' ), true ) ) { // phpcs:ignore WordPress.Security.NonceVerification.Recommended -- we're not changing the site.
2205 2328 $page = sanitize_text_field( wp_unslash( $_GET['page'] ) ); // phpcs:ignore WordPress.Security.NonceVerification.Recommended -- we're not changing the site.
2206 2329 }
2207 2330 wp_safe_redirect( self::admin_url( 'page=' . rawurlencode( $page ) ) );
2208 - exit;
2331 + exit( 0 );
2209 2332 }
2210 2333 }
2211 2334
2212 2335 /**
@@ -2253,8 +2376,12 @@
2253 2376 default:
2254 2377 break;
2255 2378 }
2256 2379 }
2380 + if ( method_exists( Feature_Policy::class, 'ensure_hooks' ) ) {
2381 + Feature_Policy::ensure_hooks();
2382 + }
2383 +
2257 2384 /**
2258 2385 * Filters the array of default modules.
2259 2386 *
2260 2387 * @since 2.5.0
@@ -2286,12 +2413,14 @@
2286 2413 * @return array
2287 2414 */
2288 2415 public function handle_deprecated_modules( $modules ) {
2289 2416 $deprecated_modules = array(
2290 - 'debug' => null, // Closed out and moved to the debugger library.
2291 - 'wpcc' => 'sso', // Closed out in 2.6 -- SSO provides the same functionality.
2292 - 'gplus-authorship' => null, // Closed out in 3.2 -- Google dropped support.
2293 - 'minileven' => null, // Closed out in 8.3 -- Responsive themes are common now, and so is AMP.
2417 + 'debug' => null, // Closed out and moved to the debugger library.
2418 + 'wpcc' => 'sso', // Closed out in 2.6 -- SSO provides the same functionality.
2419 + 'gplus-authorship' => null, // Closed out in 3.2 -- Google dropped support.
2420 + 'minileven' => null, // Closed out in 8.3 -- Responsive themes are common now, and so is AMP.
2421 + 'lazy-images' => null, // Closed out in 12.8 -- WordPress core now has native lazy loading.
2422 + 'enhanced-distribution' => null, // Closed out in 13.3 -- WP.com is winding down the firehose.
2294 2423 );
2295 2424
2296 2425 // Don't activate SSO if they never completed activating WPCC.
2297 2426 if ( self::is_module_active( 'wpcc' ) ) {
@@ -2345,8 +2474,17 @@
2345 2474 }
2346 2475 }
2347 2476 }
2348 2477
2478 + // Special case to convert block setting to a block module.
2479 + $block_key = array_search( 'blocks', $modules, true );
2480 + if ( $block_key !== false ) { // Only care if 'blocks' made it through the previous filters.
2481 + $block_option = get_option( 'jetpack_blocks_disabled', null );
2482 + if ( $block_option ) {
2483 + unset( $modules[ $block_key ] );
2484 + }
2485 + }
2486 +
2349 2487 return $modules;
2350 2488 }
2351 2489
2352 2490 /**
@@ -2403,23 +2541,30 @@
2403 2541
2404 2542 /**
2405 2543 * Return module name translation. Uses matching string created in modules/module-headings.php.
2406 2544 *
2545 + * The module list is globbed from `modules/` at runtime, so a module can be listed with no
2546 + * entry in that generated file. Fall back to the untranslated header rather than overwriting
2547 + * it with the null `jetpack_get_module_i18n()` returns for an unknown slug.
2548 + *
2407 2549 * @since 3.9.2
2408 2550 *
2409 2551 * @param array $modules Array of Jetpack modules.
2410 2552 *
2411 - * @return string|void
2553 + * @return array
2412 2554 */
2413 2555 public static function get_translated_modules( $modules ) {
2414 2556 foreach ( $modules as $index => $module ) {
2415 2557 $i18n_module = jetpack_get_module_i18n( $module['module'] );
2416 - if ( isset( $module['name'] ) ) {
2417 - $modules[ $index ]['name'] = $i18n_module['name'];
2558 + $name = $i18n_module['name'] ?? null;
2559 + $description = $i18n_module['description'] ?? null;
2560 +
2561 + if ( null !== $name && isset( $module['name'] ) ) {
2562 + $modules[ $index ]['name'] = $name;
2418 2563 }
2419 - if ( isset( $module['description'] ) ) {
2420 - $modules[ $index ]['description'] = $i18n_module['description'];
2421 - $modules[ $index ]['short_description'] = $i18n_module['description'];
2564 + if ( null !== $description && isset( $module['description'] ) ) {
2565 + $modules[ $index ]['description'] = $description;
2566 + $modules[ $index ]['short_description'] = $description;
2422 2567 }
2423 2568 if ( isset( $module['module_tags'] ) ) {
2424 2569 $modules[ $index ]['module_tags'] = array_map( 'jetpack_get_module_i18n_tag', $module['module_tags'] );
2425 2570 }
@@ -2459,20 +2604,28 @@
2459 2604
2460 2605 /**
2461 2606 * Catches PHP errors. Must be used in conjunction with output buffering.
2462 2607 *
2608 + * @deprecated since 13.5
2463 2609 * @param bool $catch True to start catching, False to stop.
2464 2610 *
2465 2611 * @static
2612 + * @deprecated 13.5
2613 + * @see \Automattic\Jetpack\Errors
2466 2614 */
2467 2615 public static function catch_errors( $catch ) {
2616 + _deprecated_function( __METHOD__, '13.5' );
2617 + // @phan-suppress-next-line PhanDeprecatedClass
2468 2618 return ( new Errors() )->catch_errors( $catch );
2469 2619 }
2470 2620
2471 2621 /**
2472 2622 * Saves any generated PHP errors in ::state( 'php_errors', {errors} )
2623 + *
2624 + * @deprecated since 13.5
2473 2625 */
2474 2626 public static function catch_errors_on_shutdown() {
2627 + _deprecated_function( __METHOD__, '13.5' );
2475 2628 self::state( 'php_errors', self::alias_directories( ob_get_clean() ) );
2476 2629 }
2477 2630
2478 2631 /**
@@ -2576,9 +2729,9 @@
2576 2729 ),
2577 2730 add_query_arg( compact( 'min_version', 'max_version', 'other_modules' ), self::admin_url( 'page=jetpack' ) )
2578 2731 );
2579 2732 wp_safe_redirect( $url );
2580 - exit;
2733 + exit( 0 );
2581 2734 }
2582 2735 }
2583 2736
2584 2737 /**
@@ -2596,9 +2749,8 @@
2596 2749
2597 2750 // Check each module for fatal errors, a la wp-admin/plugins.php::activate before activating.
2598 2751 if ( $send_state_messages ) {
2599 2752 self::restate();
2600 - self::catch_errors( true );
2601 2753 }
2602 2754
2603 2755 $active = self::get_active_modules();
2604 2756
@@ -2666,10 +2818,8 @@
2666 2818 if ( $send_state_messages ) {
2667 2819 self::state( 'error', false );
2668 2820 self::state( 'module', false );
2669 2821 }
2670 -
2671 - self::catch_errors( false );
2672 2822 /**
2673 2823 * Fires when default modules are activated.
2674 2824 *
2675 2825 * @since 1.9.0
@@ -2727,9 +2877,9 @@
2727 2877 * @return string $url module configuration URL.
2728 2878 */
2729 2879 public static function module_configuration_url( $module ) {
2730 2880 $module = self::get_module_slug( $module );
2731 - $default_url = self::admin_url() . "#/settings?term=$module";
2881 + $default_url = self::admin_url( array( 'page' => 'jetpack-settings' ) ) . "#/settings?term=$module";
2732 2882 /**
2733 2883 * Allows to modify configure_url of specific module to be able to redirect to some custom location.
2734 2884 *
2735 2885 * @since 6.9.0
@@ -2747,9 +2897,9 @@
2747 2897 *
2748 2898 * @param string $message Error message.
2749 2899 * @param bool $deactivate Deactivate Jetpack or not.
2750 2900 *
2751 - * @return void
2901 + * @return never
2752 2902 */
2753 2903 public static function bail_on_activation( $message, $deactivate = true ) {
2754 2904 ?>
2755 2905 <!doctype html>
@@ -2787,9 +2937,9 @@
2787 2937 if ( $update ) {
2788 2938 update_option( 'active_plugins', array_filter( $plugins ) );
2789 2939 }
2790 2940 }
2791 - exit;
2941 + exit( 0 );
2792 2942 }
2793 2943
2794 2944 /**
2795 2945 * Attached to activate_{ plugin_basename( __FILES__ ) } by register_activation_hook()
@@ -2814,12 +2964,18 @@
2814 2964 update_option( 'jetpack_activation_source', self::get_activation_source( wp_get_referer() ) );
2815 2965
2816 2966 Health::on_jetpack_activated();
2817 2967
2968 + \Automattic\Jetpack\Reprint_Export\Reprint_Exporter::discard_credentials();
2969 +
2818 2970 if ( self::is_connection_ready() && method_exists( 'Automattic\Jetpack\Sync\Actions', 'do_only_first_initial_sync' ) ) {
2819 2971 Sync_Actions::do_only_first_initial_sync();
2820 2972 }
2821 2973
2974 + if ( ! defined( 'WC_ANALYTICS' ) && class_exists( 'Automattic\Woocommerce_Analytics' ) ) {
2975 + Woocommerce_Analytics::maybe_add_proxy_speed_module();
2976 + }
2977 +
2822 2978 self::plugin_initialize();
2823 2979 }
2824 2980
2825 2981 /**
@@ -2854,9 +3010,9 @@
2854 3010
2855 3011 if ( $plugins_path === $referer['path'] ) {
2856 3012 $source_type = 'list';
2857 3013 } elseif ( $plugins_install_path === $referer['path'] ) {
2858 - $tab = isset( $query_parts['tab'] ) ? $query_parts['tab'] : 'featured';
3014 + $tab = $query_parts['tab'] ?? 'featured';
2859 3015 switch ( $tab ) {
2860 3016 case 'popular':
2861 3017 $source_type = 'popular';
2862 3018 break;
@@ -2866,10 +3022,10 @@
2866 3022 case 'favorites':
2867 3023 $source_type = 'favorites';
2868 3024 break;
2869 3025 case 'search':
2870 - $source_type = 'search-' . ( isset( $query_parts['type'] ) ? $query_parts['type'] : 'term' );
2871 - $source_query = isset( $query_parts['s'] ) ? $query_parts['s'] : null;
3026 + $source_type = 'search-' . ( $query_parts['type'] ?? 'term' );
3027 + $source_query = $query_parts['s'] ?? null;
2872 3028 break;
2873 3029 default:
2874 3030 $source_type = 'featured';
2875 3031 }
@@ -2878,29 +3034,171 @@
2878 3034 return array( $source_type, $source_query );
2879 3035 }
2880 3036
2881 3037 /**
2882 - * Runs before bumping version numbers up to a new version
3038 + * Runs before bumping version numbers up to a new version.
2883 3039 *
2884 - * @param string $version Version:timestamp.
3040 + * Only ever registered the hooks for the release post update modal, which has been removed.
3041 + * No longer hooked to `updating_jetpack_version`.
3042 + *
3043 + * @deprecated 16.2
3044 + *
3045 + * @param string $version Version:timestamp.
2885 3046 * @param string $old_version Old Version:timestamp or false if not set yet.
2886 3047 */
2887 - public static function do_version_bump( $version, $old_version ) {
2888 - if ( $old_version ) { // For existing Jetpack installations.
2889 - add_action( 'admin_enqueue_scripts', __CLASS__ . '::enqueue_block_style' );
3048 + public static function do_version_bump( $version, $old_version ) { // phpcs:ignore VariableAnalysis.CodeAnalysis.VariableAnalysis.UnusedVariable -- Signature preserved for the deprecation shim.
3049 + _deprecated_function( __METHOD__, 'jetpack-16.2' );
3050 + }
2890 3051
2891 - // If a front end page is visited after the update, the 'wp' action will fire.
2892 - add_action( 'wp', 'Jetpack::set_update_modal_display' );
3052 + /**
3053 + * Enables the Newsletter (subscriptions) module for existing sites now that it is a default-on module.
3054 + *
3055 + * Fresh installs receive the module via its "Auto Activate: Yes" header, so this only handles sites
3056 + * upgrading from a version where the module defaulted off. It runs once per site (guarded by the
3057 + * subscriptions_default_on_migrated option). Fresh installs are marked as migrated immediately so the
3058 + * migration never runs for them. After it has run, the user's choice to deactivate the module again
3059 + * (for example from the My Jetpack Products page) is respected and never reverted.
3060 + *
3061 + * The module requires a connection, so on a disconnected site the migration is deferred without setting
3062 + * the guard, allowing a later version bump to retry once the site is connected.
3063 + *
3064 + * @param string $version New Jetpack version:timestamp.
3065 + * @param string|false $old_version Previous Jetpack version:timestamp, or false on a fresh install.
3066 + */
3067 + public static function activate_subscriptions_module_for_existing_sites( $version, $old_version ) {
3068 + if ( get_option( 'jetpack_subscriptions_default_on_migrated' ) ) {
3069 + return;
3070 + }
2893 3071
2894 - // If an admin page is visited after the update, the 'current_screen' action will fire.
2895 - add_action( 'current_screen', 'Jetpack::set_update_modal_display' );
3072 + // Fresh installs get the module via its "Auto Activate: Yes" header. Mark them as migrated so a
3073 + // later opt-out is never reverted by the existing-site path on a subsequent version bump.
3074 + if ( ! $old_version ) {
3075 + update_option( 'jetpack_subscriptions_default_on_migrated', true );
3076 + return;
2896 3077 }
3078 +
3079 + if ( ! self::is_connection_ready() ) {
3080 + return;
3081 + }
3082 +
3083 + // Mark as migrated only once the module is active, so a transient activation failure is retried on
3084 + // a later version bump rather than being silently skipped.
3085 + if ( self::is_module_active( 'subscriptions' ) || self::activate_module( 'subscriptions', false, false ) ) {
3086 + update_option( 'jetpack_subscriptions_default_on_migrated', true );
3087 + }
2897 3088 }
2898 3089
2899 3090 /**
3091 + * Option flag that records the AI master-switch opt-out reconciliation has run,
3092 + * so it never runs twice.
3093 + *
3094 + * @var string
3095 + */
3096 + const AI_MASTER_OPTOUT_MIGRATED_OPTION = 'jetpack_ai_master_optout_migrated';
3097 +
3098 + /**
3099 + * Register the on-upgrade init hooks whose relative ORDER matters, extracted so
3100 + * the ordering can be asserted in tests without invoking plugin_upgrade() (whose
3101 + * guards make it unreliable to trigger under test). activate_new_modules()
3102 + * (init, default priority 10) auto-activates "Auto Activate: Yes" modules
3103 + * including the `ai` master; reconcile_ai_master_optout() must run at a LATER
3104 + * priority to honor an explicit AI opt-out.
3105 + *
3106 + * @return void
3107 + */
3108 + public static function register_upgrade_init_hooks() {
3109 + add_action( 'init', array( __CLASS__, 'activate_new_modules' ) );
3110 + add_action( 'init', array( __CLASS__, 'reconcile_ai_master_optout' ), 20 );
3111 + }
3112 +
3113 + /**
3114 + * Preserves an explicit Jetpack AI opt-out when the `ai` module becomes the site-wide
3115 + * master switch off WordPress.com Simple (self-hosted and Atomic).
3116 + *
3117 + * The `ai` module is "Auto Activate: Yes", so on upgrade {@see self::activate_new_modules()}
3118 + * turns it on for connected sites — the desired default-on / auto-enable-on-connection
3119 + * behavior, which this method deliberately leaves alone. The one case it corrects is a site
3120 + * that had explicitly disabled Jetpack AI (the `jetpack_ai_enabled` option present and falsey)
3121 + * before the module shipped: that opt-out must survive the module becoming the master, so the
3122 + * module is deactivated for exactly those sites. An absent or truthy option is left untouched.
3123 + *
3124 + * Ordering is the whole point. `activate_new_modules()` is hooked on `init` at priority 10 and
3125 + * auto-activates the module there; this method is hooked on `init` at priority 20 (see
3126 + * {@see self::plugin_upgrade()}), so it runs AFTER the auto-activation and its deactivation is
3127 + * the final state. A version-guarded block that ran inline during `plugins_loaded` would be
3128 + * undone by the later auto-activation, which is why this is a late-init hook rather than an
3129 + * inline upgrade step.
3130 + *
3131 + * WordPress.com Simple never runs modules — the option stays the master there — so this is a
3132 + * no-op on Simple. The {@see self::AI_MASTER_OPTOUT_MIGRATED_OPTION} flag makes it run exactly
3133 + * once, which matters because off-Simple the option is no longer the master after this runs:
3134 + * a stale falsey option must not keep re-deactivating a module the user later turns back on.
3135 + *
3136 + * @return void
3137 + */
3138 + public static function reconcile_ai_master_optout() {
3139 + if ( get_option( self::AI_MASTER_OPTOUT_MIGRATED_OPTION ) ) {
3140 + return;
3141 + }
3142 +
3143 + // Simple keeps the `jetpack_ai_enabled` option as the master; modules don't run there.
3144 + if ( ( new Host() )->is_wpcom_simple() ) {
3145 + return;
3146 + }
3147 +
3148 + // A sentinel default distinguishes an absent option (leave auto-activation alone) from one
3149 + // explicitly stored falsey (an opt-out to preserve).
3150 + $stored = get_option( 'jetpack_ai_enabled', 'not-set' );
3151 + if ( 'not-set' !== $stored && ! (bool) $stored ) {
3152 + ( new Modules() )->deactivate( 'ai' );
3153 + }
3154 +
3155 + update_option( self::AI_MASTER_OPTOUT_MIGRATED_OPTION, true );
3156 + }
3157 +
3158 + /**
3159 + * Deletes obsolete SEO module-state options without changing module activation.
3160 + *
3161 + * @since 16.3
3162 + */
3163 + public static function cleanup_seo_module_state_options() {
3164 + delete_option( 'jetpack_seo_sitemap_enabled' );
3165 + delete_option( 'jetpack_seo_canonical_urls_enabled' );
3166 + delete_option( 'jetpack_seo_module_state_reconciled' );
3167 + }
3168 +
3169 + /**
3170 + * Seeds the Jetpack SEO discoverability cohort once, so the new SEO surface is
3171 + * auto-discoverable on fresh installs but opt-in on existing ones (JETPACK-1700).
3172 + *
3173 + * Hooked on `updating_jetpack_version`, which fires on every install including the
3174 + * first — with `$old_version === false` on a brand-new site (the same signal
3175 + * {@see self::activate_subscriptions_module_for_existing_sites()} keys off). Fresh
3176 + * installs are seeded visible; existing installs are seeded hidden and opt in later
3177 + * via the legacy Traffic page or My Jetpack. `add_option()` makes this seed-once: it
3178 + * never overrides a value a later opt-in (or opt-out) has set. WordPress.com sites
3179 + * ignore this option entirely (always visible) — see
3180 + * {@see \Automattic\Jetpack\SEO\Initializer::is_seo_surface_visible()}.
3181 + *
3182 + * @param string $version The new Jetpack version (unused).
3183 + * @param string|false $old_version The previous version, or false on a fresh install.
3184 + */
3185 + public static function seed_seo_visibility_cohort( $version, $old_version ) {
3186 + add_option( Jetpack_SEO_Initializer::VISIBILITY_OPTION, ! $old_version );
3187 + }
3188 +
3189 + /**
2900 3190 * Sets the display_update_modal state.
3191 + *
3192 + * The release post update modal that read this state has been removed. The write is kept so the
3193 + * method still behaves as documented for the deprecation window. When this is deleted, also drop
3194 + * the matching `display_update_modal` guard in Automattic\Jetpack\CookieState::should_set_cookie(),
3195 + * which exists only to keep this key out of the cookie on the Jetpack admin screen.
3196 + *
3197 + * @deprecated 16.2
2901 3198 */
2902 3199 public static function set_update_modal_display() {
3200 + _deprecated_function( __METHOD__, 'jetpack-16.2' );
2903 3201 self::state( 'display_update_modal', true );
2904 3202 }
2905 3203
2906 3204 /**
@@ -2905,11 +3203,16 @@
2905 3203
2906 3204 /**
2907 3205 * Enqueues the block library styles.
2908 3206 *
3207 + * Only ever used by the release post update modal, which has been removed.
3208 + *
3209 + * @deprecated 16.2
3210 + *
2909 3211 * @param string $hook The current admin page.
2910 3212 */
2911 3213 public static function enqueue_block_style( $hook ) {
3214 + _deprecated_function( __METHOD__, 'jetpack-16.2' );
2912 3215 if ( 'toplevel_page_jetpack' === $hook ) {
2913 3216 wp_enqueue_style( 'wp-block-library' );
2914 3217 }
2915 3218 }
@@ -2938,9 +3241,8 @@
2938 3241
2939 3242 self::load_modules();
2940 3243
2941 3244 Jetpack_Options::delete_option( 'do_activate' );
2942 - Jetpack_Options::delete_option( 'dismissed_connection_banner' );
2943 3245 }
2944 3246
2945 3247 /**
2946 3248 * Handles the activation of the default modules depending on the current state of the site:
@@ -2999,8 +3301,12 @@
2999 3301 add_filter( 'jetpack_update_activated_state_on_disconnect', '__return_false' );
3000 3302 self::disconnect();
3001 3303 Jetpack_Options::delete_option( 'version' );
3002 3304 }
3305 +
3306 + if ( ! defined( 'WC_ANALYTICS' ) && class_exists( 'Automattic\Woocommerce_Analytics' ) ) {
3307 + Woocommerce_Analytics::maybe_remove_proxy_speed_module();
3308 + }
3003 3309 }
3004 3310
3005 3311 /**
3006 3312 * Set activated option to 4 on jetpack_idc_disconnect action.
@@ -3028,9 +3334,9 @@
3028 3334 $connection->remove_connection( ! Identity_Crisis::validate_sync_error_idc_option() );
3029 3335 }
3030 3336
3031 3337 /**
3032 - * Happens after a successfull disconnection.
3338 + * Happens after a successful disconnection.
3033 3339 *
3034 3340 * @static
3035 3341 */
3036 3342 public static function jetpack_site_disconnected() {
@@ -3035,8 +3341,10 @@
3035 3341 */
3036 3342 public static function jetpack_site_disconnected() {
3037 3343 Identity_Crisis::clear_all_idc_options();
3038 3344
3345 + \Automattic\Jetpack\Reprint_Export\Reprint_Exporter::discard_credentials();
3346 +
3039 3347 // Delete all the sync related data. Since it could be taking up space.
3040 3348 Sender::get_instance()->uninstall();
3041 3349
3042 3350 /**
@@ -3053,10 +3361,13 @@
3053 3361 }
3054 3362 }
3055 3363
3056 3364 /**
3057 - * Disconnects the user
3365 + * Disconnects the user.
3058 3366 *
3367 + * @deprecated 13.4
3368 + * @see \Automattic\Jetpack\Connection\Manager::disconnect_user()
3369 + *
3059 3370 * @param int $user_id The user ID to disconnect.
3060 3371 */
3061 3372 public function disconnect_user( $user_id ) {
3062 3373 $this->connection_manager->disconnect_user( $user_id );
@@ -3062,21 +3373,8 @@
3062 3373 $this->connection_manager->disconnect_user( $user_id );
3063 3374 }
3064 3375
3065 3376 /**
3066 - * Attempts Jetpack registration. If it fail, a state flag is set: @see ::admin_page_load()
3067 - *
3068 - * @deprecated since Jetpack 9.7.0
3069 - * @see Automattic\Jetpack\Connection\Manager::try_registration()
3070 - *
3071 - * @return bool|WP_Error
3072 - */
3073 - public static function try_registration() {
3074 - _deprecated_function( __METHOD__, 'jetpack-9.7', 'Automattic\\Jetpack\\Connection\\Manager::try_registration' );
3075 - return static::connection()->try_registration();
3076 - }
3077 -
3078 - /**
3079 3377 * Checking the domain names in beta versions.
3080 3378 * If this is a development version, before attempting to connect, let's make sure that the domains are viable.
3081 3379 *
3082 3380 * @param null|\WP_Error $error The domain validation error, or `null` if everything's fine.
@@ -3083,9 +3381,9 @@
3083 3381 *
3084 3382 * @return null|\WP_Error The domain validation error, or `null` if everything's fine.
3085 3383 */
3086 3384 public static function registration_check_domains( $error ) {
3087 - if ( static::is_development_version() && defined( 'PHP_URL_HOST' ) ) {
3385 + if ( static::is_development_version() ) {
3088 3386 $domains_to_check = array_unique(
3089 3387 array(
3090 3388 'siteurl' => wp_parse_url( get_site_url(), PHP_URL_HOST ),
3091 3389 'homeurl' => wp_parse_url( get_home_url(), PHP_URL_HOST ),
@@ -3110,10 +3408,17 @@
3110 3408 * @param mixed $code Error code to log.
3111 3409 * @param mixed $data Data to log.
3112 3410 */
3113 3411 public static function log( $code, $data = null ) {
3412 +
3413 + $raw_log = Jetpack_Options::get_option( 'log', array() );
3414 + // This can be modified by the `jetpack_options` filter, so abort if we don't have an array.
3415 + if ( ! is_array( $raw_log ) ) {
3416 + return;
3417 + }
3418 +
3114 3419 // only grab the latest 200 entries.
3115 - $log = array_slice( Jetpack_Options::get_option( 'log', array() ), -199, 199 );
3420 + $log = array_slice( $raw_log, -199, 199 );
3116 3421
3117 3422 // Append our event to the log.
3118 3423 $log_entry = array(
3119 3424 'time' => time(),
@@ -3213,8 +3518,15 @@
3213 3518
3214 3519 /**
3215 3520 * Return stat data for WPCOM sync.
3216 3521 *
3522 + * The Sync stats module was this method's last caller and moved to the Connection package's
3523 + * `Heartbeat::generate_stats_array()`, which assembles the heartbeat data through the
3524 + * `jetpack_heartbeat_stats_array` filter. Note the package method does not include the extended
3525 + * data from `get_additional_stat_data()`, so callers relying on `$extended` need to add it themselves.
3526 + *
3527 + * @deprecated 16.2
3528 + *
3217 3529 * @param bool $encode JSON encode the result.
3218 3530 * @param bool $extended Adds additional stats data.
3219 3531 *
3220 3532 * @return array|string Stats data. Array if $encode is false. JSON-encoded string is $encode is true.
@@ -3219,10 +3531,15 @@
3219 3531 *
3220 3532 * @return array|string Stats data. Array if $encode is false. JSON-encoded string is $encode is true.
3221 3533 */
3222 3534 public static function get_stat_data( $encode = true, $extended = true ) {
3223 - $data = Jetpack_Heartbeat::generate_stats_array();
3535 + _deprecated_function( __METHOD__, 'jetpack-16.2', 'Automattic\\Jetpack\\Heartbeat::generate_stats_array' );
3224 3536
3537 + $env_stats = method_exists( Heartbeat::class, 'get_environment_stats' )
3538 + ? Heartbeat::get_environment_stats()
3539 + : array();
3540 + $data = array_merge( Jetpack_Heartbeat::generate_stats_array(), $env_stats );
3541 +
3225 3542 if ( $extended ) {
3226 3543 $additional_data = self::get_additional_stat_data();
3227 3544 $data = array_merge( $data, $additional_data );
3228 3545 }
@@ -3227,9 +3544,9 @@
3227 3544 $data = array_merge( $data, $additional_data );
3228 3545 }
3229 3546
3230 3547 if ( $encode ) {
3231 - return wp_json_encode( $data );
3548 + return wp_json_encode( $data, JSON_UNESCAPED_SLASHES );
3232 3549 }
3233 3550
3234 3551 return $data;
3235 3552 }
@@ -3301,23 +3618,24 @@
3301 3618 $fallback_no_verify_ssl_certs = Jetpack_Options::get_option( 'fallback_no_verify_ssl_certs' );
3302 3619 /** Already documented in automattic/jetpack-connection::src/class-client.php */
3303 3620 $client_verify_ssl_certs = apply_filters( 'jetpack_client_verify_ssl_certs', false );
3304 3621
3305 - if ( ! $is_offline_mode ) {
3306 - Jetpack_Connection_Banner::init();
3307 - Jetpack_Connection_Widget::init();
3308 - }
3622 + // Run post-activation actions if needed.
3623 + $this->plugin_post_activation();
3309 3624
3310 3625 if ( ( self::is_connection_ready() || $is_offline_mode ) && false === $fallback_no_verify_ssl_certs && ! $client_verify_ssl_certs ) {
3311 3626 // Upgrade: 1.1 -> 1.1.1
3312 3627 // Check and see if host can verify the Jetpack servers' SSL certificate.
3313 3628 $args = array();
3629 + // @phan-suppress-next-line PhanAccessMethodInternal -- Phan is correct, but the usage is intentional.
3314 3630 Client::_wp_remote_request( self::connection()->api_url( 'test' ), $args, true );
3315 3631 }
3316 3632
3317 - Jetpack_Recommendations_Banner::init();
3318 -
3319 - if ( current_user_can( 'manage_options' ) && ! self::permit_ssl() ) {
3633 + if (
3634 + current_user_can( 'manage_options' )
3635 + && ! self::permit_ssl()
3636 + && ! $is_offline_mode
3637 + ) {
3320 3638 add_action( 'jetpack_notices', array( $this, 'alert_auto_ssl_fail' ) );
3321 3639 }
3322 3640
3323 3641 add_action( 'load-plugins.php', array( $this, 'intercept_plugin_error_scrape_init' ) );
@@ -3326,12 +3644,8 @@
3326 3644 if ( ! ( is_multisite() && is_plugin_active_for_network( 'jetpack/jetpack.php' ) && ! is_network_admin() ) ) {
3327 3645 add_action( 'admin_enqueue_scripts', array( $this, 'deactivate_dialog' ) );
3328 3646 }
3329 3647
3330 - if ( isset( $_COOKIE['jetpackState']['display_update_modal'] ) ) {
3331 - add_action( 'admin_enqueue_scripts', __CLASS__ . '::enqueue_block_style' );
3332 - }
3333 -
3334 3648 add_filter( 'plugin_action_links_' . plugin_basename( JETPACK__PLUGIN_DIR . 'jetpack.php' ), array( $this, 'plugin_action_links' ) );
3335 3649
3336 3650 if ( self::is_connection_ready() || $is_offline_mode ) {
3337 3651 // Artificially throw errors in certain specific cases during plugin activation.
@@ -3336,13 +3650,8 @@
3336 3650 if ( self::is_connection_ready() || $is_offline_mode ) {
3337 3651 // Artificially throw errors in certain specific cases during plugin activation.
3338 3652 add_action( 'activate_plugin', array( $this, 'throw_error_on_activate_plugin' ) );
3339 3653 }
3340 -
3341 - // Add custom column in wp-admin/users.php to show whether user is linked.
3342 - add_filter( 'manage_users_columns', array( $this, 'jetpack_icon_user_connected' ) );
3343 - add_action( 'manage_users_custom_column', array( $this, 'jetpack_show_user_connected_icon' ), 10, 3 );
3344 - add_action( 'admin_print_styles', array( $this, 'jetpack_user_col_style' ) );
3345 3654 }
3346 3655
3347 3656 /**
3348 3657 * Adds body classes.
@@ -3375,8 +3684,9 @@
3375 3684 * Sometimes a plugin can activate without causing errors, but it will cause errors on the next page load.
3376 3685 * This function artificially throws errors for such cases (per a specific list).
3377 3686 *
3378 3687 * @param string $plugin The activated plugin.
3688 + * @throws RuntimeException If a conflicting plugin is detected.
3379 3689 */
3380 3690 public function throw_error_on_activate_plugin( $plugin ) {
3381 3691 $active_modules = self::get_active_modules();
3382 3692
@@ -3389,8 +3699,9 @@
3389 3699 if ( 'stats.php' === basename( $plugin ) ) {
3390 3700 $throw = true;
3391 3701 }
3392 3702 } else {
3703 + // @phan-suppress-next-line PhanUndeclaredFunctionInCallable -- Checked above. See also https://github.com/phan/phan/issues/1204.
3393 3704 $reflection = new ReflectionFunction( 'stats_get_api_key' );
3394 3705 if ( basename( $plugin ) === basename( $reflection->getFileName() ) ) {
3395 3706 $throw = true;
3396 3707 }
@@ -3397,9 +3708,9 @@
3397 3708 }
3398 3709
3399 3710 if ( $throw ) {
3400 3711 /* translators: Plugin name to deactivate. */
3401 - trigger_error( sprintf( esc_html__( 'Jetpack contains the most recent version of the old &#8220;%1$s&#8221; plugin.', 'jetpack' ), 'WordPress.com Stats' ), E_USER_ERROR ); // phpcs:ignore WordPress.PHP.DevelopmentFunctions.error_log_trigger_error
3712 + throw new RuntimeException( sprintf( __( 'Jetpack contains the most recent version of the old "%1$s" plugin.', 'jetpack' ), 'WordPress.com Stats' ) );
3402 3713 }
3403 3714 }
3404 3715 }
3405 3716
@@ -3481,8 +3792,9 @@
3481 3792 /**
3482 3793 * Handler for Jetpack remote file uploads.
3483 3794 *
3484 3795 * @access public
3796 + * @return never
3485 3797 */
3486 3798 public function remote_request_handlers() {
3487 3799 switch ( current_filter() ) {
3488 3800 case 'wp_ajax_nopriv_jetpack_upload_file':
@@ -3509,18 +3821,17 @@
3509 3821 if ( ! is_int( $status_code ) ) {
3510 3822 $status_code = 400;
3511 3823 }
3512 3824
3513 - status_header( $status_code );
3514 - die( wp_json_encode( (object) compact( 'error', 'error_description' ) ) );
3825 + wp_send_json( (object) compact( 'error', 'error_description' ), $status_code, JSON_UNESCAPED_SLASHES );
3515 3826 }
3516 3827
3517 - status_header( 200 );
3518 3828 if ( true === $response ) {
3519 - exit;
3829 + status_header( 200 );
3830 + exit( 0 );
3520 3831 }
3521 3832
3522 - die( wp_json_encode( (object) $response ) );
3833 + wp_send_json( (object) $response, 200, JSON_UNESCAPED_SLASHES );
3523 3834 }
3524 3835
3525 3836 /**
3526 3837 * Uploads a file gotten from the global $_FILES.
@@ -3528,9 +3839,9 @@
3528 3839 * the attachment file of the media item (gotten through of the post_id)
3529 3840 * will be updated instead of add a new one.
3530 3841 *
3531 3842 * @param boolean $update_media_item - update media attachment.
3532 - * @return array - An array describing the uploadind files process.
3843 + * @return array|WP_Error - An array describing the uploading files process.
3533 3844 */
3534 3845 public function upload_handler( $update_media_item = false ) {
3535 3846 if ( isset( $_SERVER['REQUEST_METHOD'] ) && 'POST' !== strtoupper( sanitize_text_field( wp_unslash( $_SERVER['REQUEST_METHOD'] ) ) ) ) {
3536 3847 return new WP_Error( 405, get_status_header_desc( 405 ), 405 );
@@ -3581,9 +3892,9 @@
3581 3892 return new WP_Error( 'handler_cannot_upload', __( 'The upload handler cannot upload files', 'jetpack' ), 400 );
3582 3893 }
3583 3894
3584 3895 $uploaded_files = array();
3585 - $global_post = isset( $GLOBALS['post'] ) ? $GLOBALS['post'] : null;
3896 + $global_post = $GLOBALS['post'] ?? null;
3586 3897 unset( $GLOBALS['post'] );
3587 3898 if ( empty( $_FILES['media']['name'] ) ) {
3588 3899 // Nothing to process, just return.
3589 3900 return $uploaded_files;
@@ -3590,9 +3901,9 @@
3590 3901 }
3591 3902 foreach ( $_FILES['media']['name'] as $index => $name ) { // phpcs:ignore WordPress.Security.ValidatedSanitizedInput.MissingUnslash, WordPress.Security.ValidatedSanitizedInput.InputNotSanitized -- As above, unslash sniff is wrong. Validation should happen below.
3592 3903 $file = array();
3593 3904 foreach ( $media_keys as $media_key ) {
3594 - $file[ $media_key ] = isset( $_FILES['media'][ $media_key ][ $index ] ) ? $_FILES['media'][ $media_key ][ $index ] : null; // phpcs:ignore WordPress.Security.ValidatedSanitizedInput.MissingUnslash, WordPress.Security.ValidatedSanitizedInput.InputNotSanitized -- As above, the unslash sniff is wrong.
3905 + $file[ $media_key ] = $_FILES['media'][ $media_key ][ $index ] ?? null; // phpcs:ignore WordPress.Security.ValidatedSanitizedInput.MissingUnslash,,WordPress.Security.NonceVerification.Missing,WordPress.Security.ValidatedSanitizedInput.InputNotSanitized -- As above, the unslash sniff is wrong.
3595 3906 }
3596 3907
3597 3908 list( $hmac_provided, $salt ) = isset( $_POST['_jetpack_file_hmac_media'][ $index ] ) ? explode( ':', filter_var( wp_unslash( $_POST['_jetpack_file_hmac_media'][ $index ] ) ) ) : array( 'no', '' ); // phpcs:ignore WordPress.Security.NonceVerification.Missing -- Nonce should have been checked by the caller.
3598 3909
@@ -3638,9 +3949,9 @@
3638 3949 'type' => (string) $edited_media_item->post_mime_type,
3639 3950 'meta' => (array) wp_get_attachment_metadata( $post_id ),
3640 3951 );
3641 3952
3642 - return (array) array( $response );
3953 + return array( $response );
3643 3954 }
3644 3955
3645 3956 $attachment_id = media_handle_upload(
3646 3957 '.jetpack.upload.',
@@ -3679,67 +3990,8 @@
3679 3990 return $uploaded_files;
3680 3991 }
3681 3992
3682 3993 /**
3683 - * Add help to the Jetpack page
3684 - *
3685 - * @since Jetpack (1.2.3)
3686 - * @return void
3687 - */
3688 - public function admin_help() {
3689 - $current_screen = get_current_screen();
3690 -
3691 - // Overview.
3692 - $current_screen->add_help_tab(
3693 - array(
3694 - 'id' => 'home',
3695 - 'title' => __( 'Home', 'jetpack' ),
3696 - 'content' =>
3697 - '<p><strong>' . __( 'Jetpack', 'jetpack' ) . '</strong></p>' .
3698 - '<p>' . __( 'Jetpack supercharges your self-hosted WordPress site with the awesome cloud power of WordPress.com.', 'jetpack' ) . '</p>' .
3699 - '<p>' . __( 'On this page, you are able to view the modules available within Jetpack, learn more about them, and activate or deactivate them as needed.', 'jetpack' ) . '</p>',
3700 - )
3701 - );
3702 -
3703 - // Screen Content.
3704 - if ( current_user_can( 'manage_options' ) ) {
3705 - $current_screen->add_help_tab(
3706 - array(
3707 - 'id' => 'settings',
3708 - 'title' => __( 'Settings', 'jetpack' ),
3709 - 'content' =>
3710 - '<p><strong>' . __( 'Jetpack', 'jetpack' ) . '</strong></p>' .
3711 - '<p>' . __( 'You can activate or deactivate individual Jetpack modules to suit your needs.', 'jetpack' ) . '</p>' .
3712 - '<ol>' .
3713 - '<li>' . __( 'Each module has an Activate or Deactivate link so you can toggle one individually.', 'jetpack' ) . '</li>' .
3714 - '<li>' . __( 'Using the checkboxes next to each module, you can select multiple modules to toggle via the Bulk Actions menu at the top of the list.', 'jetpack' ) . '</li>' .
3715 - '</ol>' .
3716 - '<p>' . __( 'Using the tools on the right, you can search for specific modules, filter by module categories or which are active, or change the sorting order.', 'jetpack' ) . '</p>',
3717 - )
3718 - );
3719 - }
3720 -
3721 - // Help Sidebar.
3722 - $support_url = Redirect::get_url( 'jetpack-support' );
3723 - $faq_url = Redirect::get_url( 'jetpack-faq' );
3724 - $current_screen->set_help_sidebar(
3725 - '<p><strong>' . __( 'For more information:', 'jetpack' ) . '</strong></p>' .
3726 - '<p><a href="' . $faq_url . '" rel="noopener noreferrer" target="_blank">' . __( 'Jetpack FAQ', 'jetpack' ) . '</a></p>' .
3727 - '<p><a href="' . $support_url . '" rel="noopener noreferrer" target="_blank">' . __( 'Jetpack Support', 'jetpack' ) . '</a></p>' .
3728 - '<p><a href="' . self::admin_url( array( 'page' => 'jetpack-debugger' ) ) . '">' . __( 'Jetpack Debugging Center', 'jetpack' ) . '</a></p>'
3729 - );
3730 - }
3731 -
3732 - /**
3733 - * Enqueues the jetpack-icons style.
3734 - *
3735 - * @return void
3736 - */
3737 - public function admin_menu_css() {
3738 - wp_enqueue_style( 'jetpack-icons' );
3739 - }
3740 -
3741 - /**
3742 3994 * Add action links for the Jetpack plugin.
3743 3995 *
3744 3996 * @param array $actions Plugin actions.
3745 3997 *
@@ -3745,14 +3997,11 @@
3745 3997 *
3746 3998 * @return array
3747 3999 */
3748 4000 public function plugin_action_links( $actions ) {
3749 - $support_link = ( new Host() )->is_woa_site() ? 'https://wordpress.com/help/contact/' : self::admin_url( 'page=jetpack-debugger' );
3750 -
3751 4001 if ( current_user_can( 'jetpack_manage_modules' ) && ( self::is_connection_ready() || ( new Status() )->is_offline_mode() ) ) {
3752 4002 return array_merge(
3753 - array( 'settings' => sprintf( '<a href="%s">%s</a>', self::admin_url( 'page=jetpack#/settings' ), __( 'Settings', 'jetpack' ) ) ),
3754 - array( 'support' => sprintf( '<a href="%s">%s</a>', $support_link, __( 'Support', 'jetpack' ) ) ),
4003 + array( 'settings' => sprintf( '<a href="%s">%s</a>', esc_url( self::admin_url( 'page=jetpack-settings#/settings' ) ), __( 'Settings', 'jetpack' ) ) ),
3755 4004 $actions
3756 4005 );
3757 4006 }
3758 4007
@@ -3759,53 +4008,8 @@
3759 4008 return $actions;
3760 4009 }
3761 4010
3762 4011 /**
3763 - * Add an activation modal to the plugins page and the main dashboard.
3764 - *
3765 - * @param string $hook The current admin page.
3766 - *
3767 - * @return void
3768 - */
3769 - public function activate_dialog( $hook ) {
3770 - /*
3771 - * We do not need it on other plugin pages,
3772 - * or when Jetpack is already connected.
3773 - */
3774 - if (
3775 - ! in_array( $hook, array( 'plugins.php', 'index.php' ), true )
3776 - || self::is_connection_ready()
3777 - ) {
3778 - return;
3779 - }
3780 -
3781 - // add an activation script that will pick up deactivation actions for the Jetpack plugin.
3782 - Assets::register_script(
3783 - 'jetpack-full-activation-modal-js',
3784 - '_inc/build/activation-modal.js',
3785 - JETPACK__PLUGIN_FILE,
3786 - array(
3787 - 'enqueue' => true,
3788 - 'in_footer' => true,
3789 - 'textdomain' => 'jetpack',
3790 - 'dependencies' => array(
3791 - 'wp-polyfill',
3792 - 'wp-components',
3793 - ),
3794 - )
3795 - );
3796 -
3797 - // Add objects to be passed to the initial state of the app.
3798 - // Use wp_add_inline_script instead of wp_localize_script, see https://core.trac.wordpress.org/ticket/25280.
3799 - wp_add_inline_script( 'jetpack-full-activation-modal-js', 'var Initial_State=JSON.parse(decodeURIComponent("' . rawurlencode( wp_json_encode( Jetpack_Redux_State_Helper::get_minimal_state() ) ) . '"));', 'before' );
3800 -
3801 - // Adds Connection package initial state.
3802 - Connection_Initial_State::render_script( 'jetpack-full-activation-modal-js' );
3803 -
3804 - add_action( 'admin_notices', array( $this, 'jetpack_plugin_portal_containers' ) );
3805 - }
3806 -
3807 - /**
3808 4012 * Adds the deactivation warning modal for Jetpack.
3809 4013 *
3810 4014 * @param string $hook The current admin page.
3811 4015 *
@@ -3825,14 +4029,10 @@
3825 4029 'jetpack-plugins-page-js',
3826 4030 '_inc/build/plugins-page.js',
3827 4031 JETPACK__PLUGIN_FILE,
3828 4032 array(
3829 - 'in_footer' => true,
3830 - 'textdomain' => 'jetpack',
3831 - 'dependencies' => array(
3832 - 'wp-polyfill',
3833 - 'wp-components',
3834 - ),
4033 + 'in_footer' => true,
4034 + 'textdomain' => 'jetpack',
3835 4035 )
3836 4036 );
3837 4037 Assets::enqueue_script( 'jetpack-plugins-page-js' );
3838 4038
@@ -3837,9 +4037,9 @@
3837 4037 Assets::enqueue_script( 'jetpack-plugins-page-js' );
3838 4038
3839 4039 // Add objects to be passed to the initial state of the app.
3840 4040 // Use wp_add_inline_script instead of wp_localize_script, see https://core.trac.wordpress.org/ticket/25280.
3841 - wp_add_inline_script( 'jetpack-plugins-page-js', 'var Initial_State=JSON.parse(decodeURIComponent("' . rawurlencode( wp_json_encode( Jetpack_Redux_State_Helper::get_minimal_state() ) ) . '"));', 'before' );
4041 + wp_add_inline_script( 'jetpack-plugins-page-js', 'var Initial_State=' . wp_json_encode( Jetpack_Redux_State_Helper::get_plugins_page_state(), JSON_UNESCAPED_SLASHES | JSON_HEX_TAG | JSON_HEX_AMP ) . ';', 'before' );
3842 4042
3843 4043 add_action( 'admin_footer', array( $this, 'jetpack_plugin_portal_containers' ) );
3844 4044 }
3845 4045 }
@@ -3888,9 +4088,9 @@
3888 4088 // @todo provide way to go to specific calypso env.
3889 4089 self::get_calypso_host() . 'jetpack/connect'
3890 4090 )
3891 4091 );
3892 - exit;
4092 + exit( 0 );
3893 4093 }
3894 4094 }
3895 4095
3896 4096 /*
@@ -3925,8 +4125,28 @@
3925 4125 * Done!
3926 4126 */
3927 4127
3928 4128 /**
4129 + * Build the user-facing description stored alongside a registration error code.
4130 + *
4131 + * @since 16.2
4132 + *
4133 + * @param string $error_code The WP_Error code.
4134 + * @param string $message The WP_Error message.
4135 + * @return string The description, empty when the message is not user-facing copy.
4136 + */
4137 + public static function get_registration_error_description( $error_code, $message ) {
4138 + // Manager::validate_remote_register_response() does not always put user-facing copy in the
4139 + // message slot: wpcom_5??, wpcom_408 and wpcom_bad_response store the HTTP status there,
4140 + // and jetpack_id stores the raw response body, which can also overflow the state cookie.
4141 + if ( 'jetpack_id' === $error_code || is_numeric( $message ) ) {
4142 + return '';
4143 + }
4144 +
4145 + return mb_substr( (string) $message, 0, 250 );
4146 + }
4147 +
4148 + /**
3929 4149 * Handles the page load events for the Jetpack admin page
3930 4150 */
3931 4151 public function admin_page_load() {
3932 4152 $error = false;
@@ -3962,10 +4182,11 @@
3962 4182 $registered = static::connection()->try_registration();
3963 4183 if ( is_wp_error( $registered ) ) {
3964 4184 $error = $registered->get_error_code();
3965 4185 self::state( 'error', $error );
3966 - self::state( 'error', $registered->get_error_message() );
3967 4186
4187 + self::state( 'error_description', self::get_registration_error_description( $error, $registered->get_error_message() ) );
4188 +
3968 4189 /**
3969 4190 * Jetpack registration Error.
3970 4191 *
3971 4192 * @since 7.5.0
@@ -3989,12 +4210,8 @@
3989 4210 do_action( 'jetpack_connection_register_success', $from );
3990 4211
3991 4212 $url = $this->build_connect_url( true, $redirect, $from );
3992 4213
3993 - if ( ! empty( $_GET['onboarding'] ) ) {
3994 - $url = add_query_arg( 'onboarding', rawurlencode_deep( wp_unslash( $_GET['onboarding'] ) ), $url ); // phpcs:ignore WordPress.Security.ValidatedSanitizedInput.InputNotSanitized
3995 - }
3996 -
3997 4214 if ( ! empty( $_GET['auth_approved'] ) && 'true' === $_GET['auth_approved'] ) {
3998 4215 $url = add_query_arg( 'auth_approved', 'true', $url );
3999 4216 }
4000 4217
@@ -3999,9 +4216,9 @@
3999 4216 }
4000 4217
4001 4218 add_filter( 'allowed_redirect_hosts', array( Host::class, 'allow_wpcom_environments' ) );
4002 4219 wp_safe_redirect( $url );
4003 - exit;
4220 + exit( 0 );
4004 4221 case 'activate':
4005 4222 if ( ! current_user_can( 'jetpack_activate_modules' ) ) {
4006 4223 $error = 'cheatin';
4007 4224 break;
@@ -4015,9 +4232,9 @@
4015 4232 self::state( 'error', sprintf( __( 'Could not activate %s', 'jetpack' ), $module ) );
4016 4233 }
4017 4234 // The following two lines will rarely happen, as Jetpack::activate_module normally exits at the end.
4018 4235 wp_safe_redirect( self::admin_url( 'page=jetpack' ) );
4019 - exit;
4236 + exit( 0 );
4020 4237 case 'activate_default_modules':
4021 4238 check_admin_referer( 'activate_default_modules' );
4022 4239 self::log( 'activate_default_modules' );
4023 4240 self::restate();
@@ -4025,9 +4242,9 @@
4025 4242 $max_version = isset( $_GET['max_version'] ) ? sanitize_text_field( wp_unslash( $_GET['max_version'] ) ) : false;
4026 4243 $other_modules = isset( $_GET['other_modules'] ) && is_array( $_GET['other_modules'] ) ? array_map( 'sanitize_text_field', wp_unslash( $_GET['other_modules'] ) ) : array();
4027 4244 self::activate_default_modules( $min_version, $max_version, $other_modules );
4028 4245 wp_safe_redirect( self::admin_url( 'page=jetpack' ) );
4029 - exit;
4246 + exit( 0 );
4030 4247 case 'disconnect':
4031 4248 if ( ! current_user_can( 'jetpack_disconnect' ) ) {
4032 4249 $error = 'cheatin';
4033 4250 break;
@@ -4036,9 +4253,9 @@
4036 4253 check_admin_referer( 'jetpack-disconnect' );
4037 4254 self::log( 'disconnect' );
4038 4255 self::disconnect();
4039 4256 wp_safe_redirect( self::admin_url( 'disconnected=true' ) );
4040 - exit;
4257 + exit( 0 );
4041 4258 case 'reconnect':
4042 4259 if ( ! current_user_can( 'jetpack_reconnect' ) ) {
4043 4260 $error = 'cheatin';
4044 4261 break;
@@ -4049,9 +4266,9 @@
4049 4266 self::disconnect();
4050 4267
4051 4268 add_filter( 'allowed_redirect_hosts', array( Host::class, 'allow_wpcom_environments' ) );
4052 4269 wp_safe_redirect( $this->build_connect_url( true, false, 'reconnect' ) );
4053 - exit;
4270 + exit( 0 );
4054 4271 case 'deactivate':
4055 4272 if ( ! current_user_can( 'jetpack_deactivate_modules' ) ) {
4056 4273 $error = 'cheatin';
4057 4274 break;
@@ -4065,9 +4282,9 @@
4065 4282 self::state( 'message', 'module_deactivated' );
4066 4283 }
4067 4284 self::state( 'module', $modules );
4068 4285 wp_safe_redirect( self::admin_url( 'page=jetpack' ) );
4069 - exit;
4286 + exit( 0 );
4070 4287 case 'unlink':
4071 4288 $redirect = isset( $_GET['redirect'] ) ? sanitize_text_field( wp_unslash( $_GET['redirect'] ) ) : '';
4072 4289 check_admin_referer( 'jetpack-unlink' );
4073 4290 self::log( 'unlink' );
@@ -4077,32 +4294,9 @@
4077 4294 wp_safe_redirect( admin_url() );
4078 4295 } else {
4079 4296 wp_safe_redirect( self::admin_url( array( 'page' => rawurlencode( $redirect ) ) ) );
4080 4297 }
4081 - exit;
4082 - case 'onboard':
4083 - if ( ! current_user_can( 'manage_options' ) ) {
4084 - wp_safe_redirect( self::admin_url( 'page=jetpack' ) );
4085 - } else {
4086 - self::create_onboarding_token();
4087 - $url = $this->build_connect_url( true );
4088 -
4089 - $token = Jetpack_Options::get_option( 'onboarding' );
4090 -
4091 - if ( false !== ( $token ) ) {
4092 - $url = add_query_arg( 'onboarding', $token, $url );
4093 - }
4094 -
4095 - $calypso_env = ( new Host() )->get_calypso_env();
4096 - if ( ! empty( $calypso_env ) ) {
4097 - $url = add_query_arg( 'calypso_env', $calypso_env, $url );
4098 - }
4099 -
4100 - add_filter( 'allowed_redirect_hosts', array( Host::class, 'allow_wpcom_environments' ) );
4101 - wp_safe_redirect( $url );
4102 - exit;
4103 - }
4104 - exit;
4298 + exit( 0 );
4105 4299 default:
4106 4300 /**
4107 4301 * Fires when a Jetpack admin page is loaded with an unrecognized parameter.
4108 4302 *
@@ -4118,9 +4312,10 @@
4118 4312 if ( ! $error ) {
4119 4313 self::activate_new_modules( true );
4120 4314 }
4121 4315
4122 - $message_code = self::state( 'message' );
4316 + $activated_manage = false;
4317 + $message_code = self::state( 'message' );
4123 4318 if ( self::state( 'optin-manage' ) ) {
4124 4319 $activated_manage = $message_code;
4125 4320 $message_code = 'jetpack-manage';
4126 4321 }
@@ -4294,17 +4489,19 @@
4294 4489 count( $privacy_checks ),
4295 4490 '%1$s = deactivation URL, %2$s = "Deactivate {list of Jetpack module/feature names}',
4296 4491 'jetpack'
4297 4492 ),
4298 - wp_nonce_url(
4299 - self::admin_url(
4300 - array(
4301 - 'page' => 'jetpack',
4302 - 'action' => 'deactivate',
4303 - 'module' => rawurlencode( $module_slugs ),
4304 - )
4305 - ),
4306 - "jetpack_deactivate-$module_slugs"
4493 + esc_url(
4494 + wp_nonce_url(
4495 + self::admin_url(
4496 + array(
4497 + 'page' => 'jetpack',
4498 + 'action' => 'deactivate',
4499 + 'module' => rawurlencode( $module_slugs ),
4500 + )
4501 + ),
4502 + "jetpack_deactivate-$module_slugs"
4503 + )
4307 4504 ),
4308 4505 esc_attr( wp_kses( wp_sprintf( _x( 'Deactivate %l', '%l = list of Jetpack module/feature names', 'jetpack' ), $module_names ), array() ) )
4309 4506 ),
4310 4507 array(
@@ -4322,37 +4519,8 @@
4322 4519 endif;
4323 4520 }
4324 4521
4325 4522 /**
4326 - * We can't always respond to a signed XML-RPC request with a
4327 - * helpful error message. In some circumstances, doing so could
4328 - * leak information.
4329 - *
4330 - * Instead, track that the error occurred via a Jetpack_Option,
4331 - * and send that data back in the heartbeat.
4332 - * All this does is increment a number, but it's enough to find
4333 - * trends.
4334 - *
4335 - * @param WP_Error $xmlrpc_error The error produced during
4336 - * signature validation.
4337 - */
4338 - public function track_xmlrpc_error( $xmlrpc_error ) {
4339 - $code = is_wp_error( $xmlrpc_error )
4340 - ? $xmlrpc_error->get_error_code()
4341 - : 'should-not-happen';
4342 -
4343 - $xmlrpc_errors = Jetpack_Options::get_option( 'xmlrpc_errors', array() );
4344 - if ( isset( $xmlrpc_errors[ $code ] ) && $xmlrpc_errors[ $code ] ) {
4345 - // No need to update the option if we already have
4346 - // this code stored.
4347 - return;
4348 - }
4349 - $xmlrpc_errors[ $code ] = true;
4350 -
4351 - Jetpack_Options::update_option( 'xmlrpc_errors', $xmlrpc_errors, false );
4352 - }
4353 -
4354 - /**
4355 4523 * Initialize the jetpack stats instance only when needed
4356 4524 *
4357 4525 * @return void
4358 4526 */
@@ -4475,9 +4643,9 @@
4475 4643 return $this->build_connect_url( $raw, $redirect, $from, true );
4476 4644 }
4477 4645 }
4478 4646
4479 - $url = $this->build_authorize_url( $redirect );
4647 + $url = ( new Authorize_Redirect( static::connection() ) )->build_authorize_url( $redirect );
4480 4648 }
4481 4649
4482 4650 if ( $from ) {
4483 4651 $url = add_query_arg( 'from', $from, $url );
@@ -4502,66 +4670,30 @@
4502 4670 * @param null $deprecated Deprecated since Jetpack 10.9.
4503 4671 *
4504 4672 * @todo Update default value for redirect since the called function expects a string.
4505 4673 *
4674 + * @deprecated 13.4
4675 + *
4506 4676 * @return mixed|void
4507 4677 */
4508 4678 public static function build_authorize_url( $redirect = false, $deprecated = null ) { // phpcs:ignore VariableAnalysis.CodeAnalysis.VariableAnalysis.UnusedVariable
4679 + _deprecated_function( __METHOD__, 'jetpack-13.4', 'Authorize_Redirect::build_authorize_url' );
4509 4680
4510 - add_filter( 'jetpack_connect_request_body', array( __CLASS__, 'filter_connect_request_body' ) );
4511 - add_filter( 'jetpack_connect_redirect_url', array( __CLASS__, 'filter_connect_redirect_url' ) );
4512 -
4513 - $c8n = self::connection();
4514 - $url = $c8n->get_authorization_url( wp_get_current_user(), $redirect );
4515 -
4516 - remove_filter( 'jetpack_connect_request_body', array( __CLASS__, 'filter_connect_request_body' ) );
4517 - remove_filter( 'jetpack_connect_redirect_url', array( __CLASS__, 'filter_connect_redirect_url' ) );
4518 -
4519 - /**
4520 - * Filter the URL used when authorizing a user to a WordPress.com account.
4521 - *
4522 - * @since 8.9.0
4523 - *
4524 - * @param string $url Connection URL.
4525 - */
4526 - return apply_filters( 'jetpack_build_authorize_url', $url );
4681 + return ( new Authorize_Redirect( static::connection() ) )->build_authorize_url( $redirect );
4527 4682 }
4528 4683
4529 4684 /**
4530 4685 * Filters the connection URL parameter array.
4531 4686 *
4687 + * @deprecated 13.4
4688 + *
4532 4689 * @param array $args default URL parameters used by the package.
4533 4690 * @return array the modified URL arguments array.
4534 4691 */
4535 4692 public static function filter_connect_request_body( $args ) {
4536 - if (
4537 - Constants::is_defined( 'JETPACK__GLOTPRESS_LOCALES_PATH' )
4538 - && include_once Constants::get_constant( 'JETPACK__GLOTPRESS_LOCALES_PATH' )
4539 - ) {
4540 - $gp_locale = GP_Locales::by_field( 'wp_locale', get_locale() );
4541 - $args['locale'] = isset( $gp_locale ) && isset( $gp_locale->slug )
4542 - ? $gp_locale->slug
4543 - : '';
4544 - }
4693 + _deprecated_function( __METHOD__, 'jetpack-13.4', 'Authorize_Redirect::filter_connect_request_body' );
4545 4694
4546 - $tracking = new Tracking();
4547 - $tracks_identity = $tracking->tracks_get_identity( $args['state'] );
4548 -
4549 - $args = array_merge(
4550 - $args,
4551 - array(
4552 - '_ui' => $tracks_identity['_ui'],
4553 - '_ut' => $tracks_identity['_ut'],
4554 - )
4555 - );
4556 -
4557 - $calypso_env = ( new Host() )->get_calypso_env();
4558 -
4559 - if ( ! empty( $calypso_env ) ) {
4560 - $args['calypso_env'] = $calypso_env;
4561 - }
4562 -
4563 - return $args;
4695 + return Authorize_Redirect::filter_connect_request_body( $args );
4564 4696 }
4565 4697
4566 4698 /**
4567 4699 * Filters the `jetpack/v4/connection/data` API response of the Connection package in order to
@@ -4598,41 +4730,19 @@
4598 4730 return $current_user_connection_data;
4599 4731 }
4600 4732
4601 4733 /**
4602 - * Filters the URL that will process the connection data. It can be different from the URL
4603 - * that we send the user to after everything is done.
4604 - *
4605 - * @param String $processing_url the default redirect URL used by the package.
4606 - * @return String the modified URL.
4607 - *
4608 - * @deprecated since Jetpack 9.5.0
4609 - */
4610 - public static function filter_connect_processing_url( $processing_url ) {
4611 - _deprecated_function( __METHOD__, 'jetpack-9.5' );
4612 -
4613 - $processing_url = admin_url( 'admin.php?page=jetpack' ); // Making PHPCS happy.
4614 - return $processing_url;
4615 - }
4616 -
4617 - /**
4618 4734 * Filters the redirection URL that is used for connect requests. The redirect
4619 4735 * URL should return the user back to the Jetpack console.
4620 4736 *
4737 + * @deprecated 13.4
4738 + *
4621 4739 * @param String $redirect the default redirect URL used by the package.
4622 4740 * @return String the modified URL.
4623 4741 */
4624 4742 public static function filter_connect_redirect_url( $redirect ) {
4625 - $jetpack_admin_page = esc_url_raw( admin_url( 'admin.php?page=jetpack' ) );
4626 - $redirect = $redirect
4627 - ? wp_validate_redirect( esc_url_raw( $redirect ), $jetpack_admin_page )
4628 - : $jetpack_admin_page;
4629 -
4630 - if ( isset( $_REQUEST['is_multisite'] ) ) { // phpcs:ignore WordPress.Security.NonceVerification.Recommended -- not making a site change here.
4631 - $redirect = Jetpack_Network::init()->get_url( 'network_admin_page' );
4632 - }
4633 -
4634 - return $redirect;
4743 + _deprecated_function( __METHOD__, 'jetpack-13.4', 'Authorize_Redirect::filter_connect_redirect_url' );
4744 + return Authorize_Redirect::filter_connect_redirect_url( $redirect );
4635 4745 }
4636 4746
4637 4747 /**
4638 4748 * This action fires at the beginning of the Manager::authorize method.
@@ -4696,11 +4806,8 @@
4696 4806 *
4697 4807 * @param array $data The request data.
4698 4808 */
4699 4809 public static function authorize_ending_authorized( $data ) {
4700 - // If this site has been through the Jetpack Onboarding flow, delete the onboarding token.
4701 - self::invalidate_onboarding_token();
4702 -
4703 4810 // If redirect_uri is SSO, ensure SSO module is enabled.
4704 4811 parse_str( wp_parse_url( $data['redirect_uri'], PHP_URL_QUERY ), $redirect_options );
4705 4812
4706 4813 /** This filter is documented in class.jetpack-cli.php */
@@ -4824,13 +4931,9 @@
4824 4931 *
4825 4932 * @return int 0 if the same sort or (+/-) to indicate which is greater.
4826 4933 */
4827 4934 public static function sort_modules( $a, $b ) {
4828 - if ( $a['sort'] === $b['sort'] ) {
4829 - return 0;
4830 - }
4831 -
4832 - return ( $a['sort'] < $b['sort'] ) ? -1 : 1;
4935 + return $a['sort'] <=> $b['sort'];
4833 4936 }
4834 4937
4835 4938 /**
4836 4939 * Recheck SSL status for use via an AJAX call.
@@ -4844,10 +4947,12 @@
4844 4947 $result = self::permit_ssl( true );
4845 4948 wp_send_json(
4846 4949 array(
4847 4950 'enabled' => $result,
4848 - 'message' => get_transient( 'jetpack_https_test_message' ),
4849 - )
4951 + 'message' => self::get_ssl_test_message(),
4952 + ),
4953 + null, // @phan-suppress-current-line PhanTypeMismatchArgumentProbablyReal -- It takes null, but its phpdoc only says int.
4954 + JSON_UNESCAPED_SLASHES
4850 4955 );
4851 4956 }
4852 4957
4853 4958 /* Client API */
@@ -4854,8 +4959,10 @@
4854 4959
4855 4960 /**
4856 4961 * Verify the onboarding token.
4857 4962 *
4963 + * @deprecated since 13.9
4964 + *
4858 4965 * @param array $token_data Token data.
4859 4966 * @param string $token Token value.
4860 4967 * @param string $request_data JSON-encoded request data.
4861 4968 *
@@ -4861,8 +4968,9 @@
4861 4968 *
4862 4969 * @return mixed
4863 4970 */
4864 4971 public static function verify_onboarding_token( $token_data, $token, $request_data ) {
4972 + _deprecated_function( __METHOD__, '13.9' );
4865 4973 // Default to a blog token.
4866 4974 $token_type = 'blog';
4867 4975
4868 4976 // Let's see if this is onboarding. In such case, use user token type and the provided user id.
@@ -4890,9 +4998,9 @@
4890 4998 $jp_user = get_user_by( 'email', $jpo_user );
4891 4999 if ( is_a( $jp_user, 'WP_User' ) ) {
4892 5000 wp_set_current_user( $jp_user->ID );
4893 5001 $user_can = is_multisite()
4894 - ? current_user_can_for_blog( get_current_blog_id(), 'manage_options' )
5002 + ? current_user_can_for_site( get_current_blog_id(), 'manage_options' )
4895 5003 : current_user_can( 'manage_options' );
4896 5004 if ( $user_can ) {
4897 5005 $token_type = 'user';
4898 5006 $token->external_user_id = $jp_user->ID;
@@ -4909,11 +5017,13 @@
4909 5017
4910 5018 /**
4911 5019 * Create a random secret for validating onboarding payload
4912 5020 *
5021 + * @deprecated since 13.9
4913 5022 * @return string Secret token
4914 5023 */
4915 5024 public static function create_onboarding_token() {
5025 + _deprecated_function( __METHOD__, '13.9' );
4916 5026 $token = Jetpack_Options::get_option( 'onboarding' );
4917 5027 if ( false === ( $token ) ) {
4918 5028 $token = wp_generate_password( 32, false );
4919 5029 Jetpack_Options::update_option( 'onboarding', $token );
@@ -4924,11 +5034,13 @@
4924 5034
4925 5035 /**
4926 5036 * Remove the onboarding token
4927 5037 *
5038 + * @deprecated since 13.9
4928 5039 * @return bool True on success, false on failure
4929 5040 */
4930 5041 public static function invalidate_onboarding_token() {
5042 + _deprecated_function( __METHOD__, '13.9' );
4931 5043 return Jetpack_Options::delete_option( 'onboarding' );
4932 5044 }
4933 5045
4934 5046 /**
@@ -4933,8 +5045,10 @@
4933 5045
4934 5046 /**
4935 5047 * Validate an onboarding token for a specific action
4936 5048 *
5049 + * @deprecated since 13.9
5050 + *
4937 5051 * @param string $token Onboarding token.
4938 5052 * @param string $action Action name.
4939 5053 *
4940 5054 * @return boolean True if token/action pair is accepted, false if not
@@ -4939,8 +5053,9 @@
4939 5053 *
4940 5054 * @return boolean True if token/action pair is accepted, false if not
4941 5055 */
4942 5056 public static function validate_onboarding_token_action( $token, $action ) {
5057 + _deprecated_function( __METHOD__, '13.9' );
4943 5058 // Compare tokens, bail if tokens do not match.
4944 5059 if ( ! hash_equals( $token, Jetpack_Options::get_option( 'onboarding' ) ) ) {
4945 5060 return false;
4946 5061 }
@@ -4966,39 +5081,41 @@
4966 5081 * @return boolean
4967 5082 * @since 2.3.3
4968 5083 */
4969 5084 public static function permit_ssl( $force_recheck = false ) {
4970 - // Do some fancy tests to see if ssl is being supported.
4971 - if ( ! $force_recheck ) {
4972 - $ssl = get_transient( 'jetpack_https_test' );
5085 + if ( ! method_exists( Heartbeat::class, 'permit_ssl' ) ) {
5086 + // Skip the SSL-fail notice when the check cannot run.
5087 + return true;
4973 5088 }
4974 5089
4975 - if ( $force_recheck || false === $ssl ) {
4976 - $message = '';
4977 - if ( 'https' !== substr( JETPACK__API_BASE, 0, 5 ) ) {
4978 - $ssl = 0;
4979 - } else {
4980 - $ssl = 1;
5090 + return Heartbeat::permit_ssl( $force_recheck );
5091 + }
4981 5092
4982 - if ( ! wp_http_supports( array( 'ssl' => true ) ) ) {
4983 - $ssl = 0;
4984 - $message = __( 'WordPress reports no SSL support', 'jetpack' );
4985 - } else {
4986 - $response = wp_remote_get( JETPACK__API_BASE . 'test/1/' );
4987 - if ( is_wp_error( $response ) ) {
4988 - $ssl = 0;
4989 - $message = __( 'WordPress reports no SSL support', 'jetpack' );
4990 - } elseif ( 'OK' !== wp_remote_retrieve_body( $response ) ) {
4991 - $ssl = 0;
4992 - $message = __( 'Response was not OK: ', 'jetpack' ) . wp_remote_retrieve_body( $response );
4993 - }
4994 - }
4995 - }
4996 - set_transient( 'jetpack_https_test', $ssl, DAY_IN_SECONDS );
4997 - set_transient( 'jetpack_https_test_message', $message, DAY_IN_SECONDS );
5093 + /**
5094 + * Returns a localized message describing the last SSL connectivity failure, if any.
5095 + *
5096 + * The Connection package's canonical SSL check stores a neutral reason code; this maps it to
5097 + * a translated, `jetpack`-domain message for display in the admin notice and AJAX recheck.
5098 + *
5099 + * @since 16.1
5100 + *
5101 + * @return string The localized message, or an empty string when there is no failure.
5102 + */
5103 + public static function get_ssl_test_message() {
5104 + if ( ! method_exists( Heartbeat::class, 'get_ssl_test_error' ) ) {
5105 + return '';
4998 5106 }
4999 5107
5000 - return (bool) $ssl;
5108 + $error = Heartbeat::get_ssl_test_error();
5109 +
5110 + switch ( $error['code'] ) {
5111 + case 'no_ssl_support':
5112 + return __( 'WordPress reports no SSL support', 'jetpack' );
5113 + case 'bad_response':
5114 + return __( 'Response was not OK: ', 'jetpack' ) . $error['detail'];
5115 + default:
5116 + return '';
5117 + }
5001 5118 }
5002 5119
5003 5120 /**
5004 5121 * Displays an admin_notice, alerting the user that outbound SSL isn't working.
@@ -5017,9 +5134,9 @@
5017 5134 <p><?php esc_html_e( 'Your site could not connect to WordPress.com via HTTPS. This could be due to any number of reasons, including faulty SSL certificates, misconfigured or missing SSL libraries, or network issues.', 'jetpack' ); ?></p>
5018 5135 <p>
5019 5136 <?php esc_html_e( 'Jetpack will re-test for HTTPS support once a day, but you can click here to try again immediately: ', 'jetpack' ); ?>
5020 5137 <a href="#" id="jetpack-recheck-ssl-button"><?php esc_html_e( 'Try again', 'jetpack' ); ?></a>
5021 - <span id="jetpack-recheck-ssl-output"><?php echo esc_html( get_transient( 'jetpack_https_test_message' ) ); ?></span>
5138 + <span id="jetpack-recheck-ssl-output"><?php echo esc_html( self::get_ssl_test_message() ); ?></span>
5022 5139 </p>
5023 5140 <p>
5024 5141 <?php
5025 5142 printf(
@@ -5038,18 +5155,18 @@
5038 5155 <script type="text/javascript">
5039 5156 jQuery( document ).ready( function( $ ) {
5040 5157 $( '#jetpack-recheck-ssl-button' ).click( function( e ) {
5041 5158 var $this = $( this );
5042 - $this.html( <?php echo wp_json_encode( __( 'Checking', 'jetpack' ) ); ?> );
5159 + $this.html( <?php echo wp_json_encode( esc_html__( 'Checking', 'jetpack' ), JSON_UNESCAPED_SLASHES | JSON_HEX_TAG | JSON_HEX_AMP ); ?> );
5043 5160 $( '#jetpack-recheck-ssl-output' ).html( '' );
5044 5161 e.preventDefault();
5045 - var data = { action: 'jetpack-recheck-ssl', 'ajax-nonce': <?php echo wp_json_encode( $ajax_nonce ); ?> };
5162 + var data = { action: 'jetpack-recheck-ssl', 'ajax-nonce': <?php echo wp_json_encode( $ajax_nonce, JSON_UNESCAPED_SLASHES | JSON_HEX_TAG | JSON_HEX_AMP ); ?> };
5046 5163 $.post( ajaxurl, data )
5047 5164 .done( function( response ) {
5048 5165 if ( response.enabled ) {
5049 5166 $( '#jetpack-ssl-warning' ).hide();
5050 5167 } else {
5051 - this.html( <?php echo wp_json_encode( __( 'Try again', 'jetpack' ) ); ?> );
5168 + this.html( <?php echo wp_json_encode( esc_html__( 'Try again', 'jetpack' ), JSON_UNESCAPED_SLASHES | JSON_HEX_TAG | JSON_HEX_AMP ); ?> );
5052 5169 $( '#jetpack-recheck-ssl-output' ).html( 'SSL Failed: ' + response.message );
5053 5170 }
5054 5171 }.bind( $this ) );
5055 5172 } );
@@ -5075,26 +5192,8 @@
5075 5192 return $jetpack->connection_manager;
5076 5193 }
5077 5194
5078 5195 /**
5079 - * Creates two secret tokens and the end of life timestamp for them.
5080 - *
5081 - * Note these tokens are unique per call, NOT static per site for connecting.
5082 - *
5083 - * @deprecated 9.5 Use Automattic\Jetpack\Connection\Secrets->generate() instead.
5084 - *
5085 - * @since 2.6
5086 - * @param String $action The action name.
5087 - * @param Integer $user_id The user identifier.
5088 - * @param Integer $exp Expiration time in seconds.
5089 - * @return array
5090 - */
5091 - public static function generate_secrets( $action, $user_id = false, $exp = 600 ) {
5092 - _deprecated_function( __METHOD__, 'jetpack-9.5', 'Automattic\\Jetpack\\Connection\\Secrets->generate' );
5093 - return self::connection()->generate_secrets( $action, $user_id, $exp );
5094 - }
5095 -
5096 - /**
5097 5196 * Get verification secrets.
5098 5197 *
5099 5198 * @param string $action Action name.
5100 5199 * @param int $user_id User ID.
@@ -5115,35 +5214,8 @@
5115 5214 return $secrets;
5116 5215 }
5117 5216
5118 5217 /**
5119 - * Register a connection.
5120 - *
5121 - * @deprecated Jetpack 9.7.0
5122 - * @see Automattic\Jetpack\Connection\Manager::try_registration()
5123 - *
5124 - * @return bool|WP_Error
5125 - */
5126 - public static function register() {
5127 - _deprecated_function( __METHOD__, 'jetpack-9.7', 'Automattic\\Jetpack\\Connection\\Manager::try_registration' );
5128 - return static::connection()->try_registration( false );
5129 - }
5130 -
5131 - /**
5132 - * Filters the registration request body to include tracking properties.
5133 - *
5134 - * @deprecated Jetpack 9.7.0
5135 - * @see Automattic\Jetpack\Connection\Utils::filter_register_request_body()
5136 - *
5137 - * @param array $properties Token request properties.
5138 - * @return array amended properties.
5139 - */
5140 - public static function filter_register_request_body( $properties ) {
5141 - _deprecated_function( __METHOD__, 'jetpack-9.7', 'Automattic\\Jetpack\\Connection\\Utils::filter_register_request_body' );
5142 - return Connection_Utils::filter_register_request_body( $properties );
5143 - }
5144 -
5145 - /**
5146 5218 * Filters the token request body to include tracking properties.
5147 5219 *
5148 5220 * @param array $properties Token request properties.
5149 5221 *
@@ -5164,9 +5236,9 @@
5164 5236
5165 5237 /**
5166 5238 * If the db version is showing something other that what we've got now, bump it to current.
5167 5239 *
5168 - * @return bool: True if the option was incorrect and updated, false if nothing happened.
5240 + * @return bool True if the option was incorrect and updated, false if nothing happened.
5169 5241 */
5170 5242 public static function maybe_set_version_option() {
5171 5243 list( $version ) = explode( ':', Jetpack_Options::get_option( 'version' ) );
5172 5244 if ( JETPACK__VERSION !== $version ) {
@@ -5184,21 +5256,8 @@
5184 5256
5185 5257 /* Client Server API */
5186 5258
5187 5259 /**
5188 - * Loads the Jetpack XML-RPC client.
5189 - * No longer necessary, as the XML-RPC client will be automagically loaded.
5190 - *
5191 - * Note: we cannot remove this function yet as it is used in this plugin:
5192 - * https://wordpress.org/plugins/jetpack-subscription-form/
5193 - *
5194 - * @deprecated since 7.7.0
5195 - */
5196 - public static function load_xml_rpc_client() {
5197 - _deprecated_function( __METHOD__, 'jetpack-7.7' );
5198 - }
5199 -
5200 - /**
5201 5260 * State is passed via cookies from one request to the next, but never to subsequent requests.
5202 5261 * SET: state( $key, $value );
5203 5262 * GET: $value = state( $key );
5204 5263 *
@@ -5272,20 +5331,8 @@
5272 5331
5273 5332 self::state( 'privacy_checks', $privacy_checks );
5274 5333 }
5275 5334
5276 - /**
5277 - * Serve a WordPress.com static resource via a randomized wp.com subdomain.
5278 - *
5279 - * @deprecated 9.3.0 Use Assets::staticize_subdomain.
5280 - *
5281 - * @param string $url WordPress.com static resource URL.
5282 - */
5283 - public static function staticize_subdomain( $url ) {
5284 - _deprecated_function( __METHOD__, 'jetpack-9.3.0', 'Automattic\Jetpack\Assets::staticize_subdomain' );
5285 - return Assets::staticize_subdomain( $url );
5286 - }
5287 -
5288 5335 /* JSON API Authorization */
5289 5336
5290 5337 /**
5291 5338 * Handles the login action for Authorizing the JSON API
@@ -5290,13 +5337,14 @@
5290 5337 /**
5291 5338 * Handles the login action for Authorizing the JSON API
5292 5339 */
5293 5340 public function login_form_json_api_authorization() {
5294 - $this->verify_json_api_authorization_request();
5341 + $authorize_json_api = new Authorize_Json_Api();
5342 + $authorize_json_api->verify_json_api_authorization_request();
5295 5343
5296 - add_action( 'wp_login', array( $this, 'store_json_api_authorization_token' ), 10, 2 );
5344 + add_action( 'wp_login', array( $authorize_json_api, 'store_json_api_authorization_token' ), 10, 2 );
5297 5345
5298 - add_action( 'login_message', array( $this, 'login_message_json_api_authorization' ) );
5346 + add_action( 'login_message', array( $authorize_json_api, 'login_message_json_api_authorization' ) );
5299 5347 add_action( 'login_form', array( $this, 'preserve_action_in_login_form_for_json_api_authorization' ) );
5300 5348 add_filter( 'site_url', array( $this, 'post_login_form_to_signed_url' ), 10, 3 );
5301 5349 }
5302 5350
@@ -5334,16 +5382,17 @@
5334 5382
5335 5383 /**
5336 5384 * If someone logs in to approve API access, store the Access Code in usermeta.
5337 5385 *
5386 + * @deprecated 13.4
5387 + *
5338 5388 * @param string $user_login Unused.
5339 5389 * @param WP_User $user User logged in.
5340 5390 */
5341 5391 public function store_json_api_authorization_token( $user_login, $user ) {
5342 - add_filter( 'login_redirect', array( $this, 'add_token_to_login_redirect_json_api_authorization' ), 10, 3 );
5343 - add_filter( 'allowed_redirect_hosts', array( $this, 'allow_wpcom_public_api_domain' ) );
5344 - $token = wp_generate_password( 32, false );
5345 - update_user_meta( $user->ID, 'jetpack_json_api_' . $this->json_api_authorization_request['client_id'], $token );
5392 + _deprecated_function( __METHOD__, 'jetpack-13.4', 'Automattic\\Jetpack\\Connection\\Authorize_Json_Api::store_json_api_authorization_token' );
5393 +
5394 + return ( new Authorize_Json_Api() )->store_json_api_authorization_token( $user_login, $user );
5346 5395 }
5347 5396
5348 5397 /**
5349 5398 * Add public-api.wordpress.com to the safe redirect allowed list - only added when someone allows API access.
@@ -5349,23 +5398,29 @@
5349 5398 * Add public-api.wordpress.com to the safe redirect allowed list - only added when someone allows API access.
5350 5399 *
5351 5400 * To be used with a filter of allowed domains for a redirect.
5352 5401 *
5402 + * @deprecated 13.4
5403 + *
5353 5404 * @param array $domains Allowed WP.com Environments.
5354 5405 */
5355 5406 public function allow_wpcom_public_api_domain( $domains ) {
5356 - $domains[] = 'public-api.wordpress.com';
5357 - return $domains;
5407 + _deprecated_function( __METHOD__, 'jetpack-13.4', 'Automattic\\Jetpack\\Status\\Host::allow_wpcom_public_api_domain' );
5408 +
5409 + return Host::allow_wpcom_public_api_domain( $domains );
5358 5410 }
5359 5411
5360 5412 /**
5361 5413 * Check if the redirect is encoded.
5362 5414 *
5415 + * @deprecated 13.4
5416 + *
5363 5417 * @param string $redirect_url Redirect URL.
5364 5418 *
5365 5419 * @return bool If redirect has been encoded.
5366 5420 */
5367 5421 public static function is_redirect_encoded( $redirect_url ) {
5422 + _deprecated_function( __METHOD__, 'jetpack-13.4' );
5368 5423 return preg_match( '/https?%3A%2F%2F/i', $redirect_url ) > 0;
5369 5424 }
5370 5425
5371 5426 /**
@@ -5383,8 +5438,10 @@
5383 5438
5384 5439 /**
5385 5440 * Add the Access Code details to the public-api.wordpress.com redirect.
5386 5441 *
5442 + * @deprecated 13.4
5443 + *
5387 5444 * @param string $redirect_to URL.
5388 5445 * @param string $original_redirect_to URL.
5389 5446 * @param WP_User $user WP_User for the redirect.
5390 5447 *
@@ -5390,23 +5447,18 @@
5390 5447 *
5391 5448 * @return string
5392 5449 */
5393 5450 public function add_token_to_login_redirect_json_api_authorization( $redirect_to, $original_redirect_to, $user ) {
5394 - return add_query_arg(
5395 - urlencode_deep(
5396 - array(
5397 - 'jetpack-code' => get_user_meta( $user->ID, 'jetpack_json_api_' . $this->json_api_authorization_request['client_id'], true ),
5398 - 'jetpack-user-id' => (int) $user->ID,
5399 - 'jetpack-state' => $this->json_api_authorization_request['state'],
5400 - )
5401 - ),
5402 - $redirect_to
5403 - );
5451 + _deprecated_function( __METHOD__, 'jetpack-13.4', 'Automattic\\Jetpack\\Connection\\Authorize_Json_Api::add_token_to_login_redirect_json_api_authorization' );
5452 +
5453 + return ( new Authorize_Json_Api() )->add_token_to_login_redirect_json_api_authorization( $redirect_to, $original_redirect_to, $user );
5404 5454 }
5405 5455
5406 5456 /**
5407 5457 * Verifies the request by checking the signature
5408 5458 *
5459 + * @deprecated 13.4
5460 + *
5409 5461 * @since 4.6.0 Method was updated to use `$_REQUEST` instead of `$_GET` and `$_POST`. Method also updated to allow
5410 5462 * passing in an `$environment` argument that overrides `$_REQUEST`. This was useful for integrating with SSO.
5411 5463 *
5412 5464 * @param null|array $environment Value to override $_REQUEST.
@@ -5411,194 +5463,24 @@
5411 5463 *
5412 5464 * @param null|array $environment Value to override $_REQUEST.
5413 5465 */
5414 5466 public function verify_json_api_authorization_request( $environment = null ) {
5415 - $environment = $environment === null
5416 - ? $_REQUEST // phpcs:ignore WordPress.Security.NonceVerification.Recommended -- nonce verification handled later in function.
5417 - : $environment;
5467 + _deprecated_function( __METHOD__, 'jetpack-13.4', 'Automattic\\Jetpack\\Connection\\Authorize_Json_Api::verify_json_api_authorization_request' );
5418 5468
5419 - list( $env_token,, $env_user_id ) = explode( ':', $environment['token'] );
5420 - $token = ( new Tokens() )->get_access_token( $env_user_id, $env_token );
5421 - if ( ! $token || empty( $token->secret ) ) {
5422 - wp_die( esc_html__( 'You must connect your Jetpack plugin to WordPress.com to use this feature.', 'jetpack' ) );
5423 - }
5424 -
5425 - $die_error = __( 'Someone may be trying to trick you into giving them access to your site. Or it could be you just encountered a bug :). Either way, please close this window.', 'jetpack' );
5426 -
5427 - // Host has encoded the request URL, probably as a result of a bad http => https redirect.
5428 - if ( self::is_redirect_encoded( esc_url_raw( wp_unslash( $_GET['redirect_to'] ) ) ) ) { // phpcs:ignore WordPress.Security.NonceVerification.Recommended, WordPress.Security.ValidatedSanitizedInput.InputNotValidated -- no site changes, we're erroring out.
5429 - /**
5430 - * Jetpack authorisation request Error.
5431 - *
5432 - * @since 7.5.0
5433 - */
5434 - do_action( 'jetpack_verify_api_authorization_request_error_double_encode' );
5435 - $die_error = sprintf(
5436 - /* translators: %s is a URL */
5437 - __( 'Your site is incorrectly double-encoding redirects from http to https. This is preventing Jetpack from authenticating your connection. Please visit our <a href="%s">support page</a> for details about how to resolve this.', 'jetpack' ),
5438 - Redirect::get_url( 'jetpack-support-double-encoding' )
5439 - );
5440 - }
5441 -
5442 - $jetpack_signature = new Jetpack_Signature( $token->secret, (int) Jetpack_Options::get_option( 'time_diff' ) );
5443 -
5444 - if ( isset( $environment['jetpack_json_api_original_query'] ) ) {
5445 - $signature = $jetpack_signature->sign_request(
5446 - $environment['token'],
5447 - $environment['timestamp'],
5448 - $environment['nonce'],
5449 - '',
5450 - 'GET',
5451 - $environment['jetpack_json_api_original_query'],
5452 - null,
5453 - true
5454 - );
5455 - } else {
5456 - $signature = $jetpack_signature->sign_current_request(
5457 - array(
5458 - 'body' => null,
5459 - 'method' => 'GET',
5460 - )
5461 - );
5462 - }
5463 -
5464 - if ( ! $signature ) {
5465 - wp_die(
5466 - wp_kses(
5467 - $die_error,
5468 - array(
5469 - 'a' => array(
5470 - 'href' => array(),
5471 - ),
5472 - )
5473 - )
5474 - );
5475 - } elseif ( is_wp_error( $signature ) ) {
5476 - wp_die(
5477 - wp_kses(
5478 - $die_error,
5479 - array(
5480 - 'a' => array(
5481 - 'href' => array(),
5482 - ),
5483 - )
5484 - )
5485 - );
5486 - } elseif ( ! hash_equals( $signature, $environment['signature'] ) ) {
5487 - if ( is_ssl() ) {
5488 - // If we signed an HTTP request on the Jetpack Servers, but got redirected to HTTPS by the local blog, check the HTTP signature as well.
5489 - $signature = $jetpack_signature->sign_current_request(
5490 - array(
5491 - 'scheme' => 'http',
5492 - 'body' => null,
5493 - 'method' => 'GET',
5494 - )
5495 - );
5496 - if ( ! $signature || is_wp_error( $signature ) || ! hash_equals( $signature, $environment['signature'] ) ) {
5497 - wp_die(
5498 - wp_kses(
5499 - $die_error,
5500 - array(
5501 - 'a' => array(
5502 - 'href' => array(),
5503 - ),
5504 - )
5505 - )
5506 - );
5507 - }
5508 - } else {
5509 - wp_die(
5510 - wp_kses(
5511 - $die_error,
5512 - array(
5513 - 'a' => array(
5514 - 'href' => array(),
5515 - ),
5516 - )
5517 - )
5518 - );
5519 - }
5520 - }
5521 -
5522 - $timestamp = (int) $environment['timestamp'];
5523 - $nonce = stripslashes( (string) $environment['nonce'] );
5524 -
5525 - if ( ! $this->connection_manager ) {
5526 - $this->connection_manager = new Connection_Manager();
5527 - }
5528 -
5529 - if ( ! ( new Nonce_Handler() )->add( $timestamp, $nonce ) ) {
5530 - // De-nonce the nonce, at least for 5 minutes.
5531 - // We have to reuse this nonce at least once (used the first time when the initial request is made, used a second time when the login form is POSTed).
5532 - $old_nonce_time = get_option( "jetpack_nonce_{$timestamp}_{$nonce}" );
5533 - if ( $old_nonce_time < time() - 300 ) {
5534 - wp_die( esc_html__( 'The authorization process expired. Please go back and try again.', 'jetpack' ) );
5535 - }
5536 - }
5537 -
5538 - $data = json_decode( base64_decode( stripslashes( $environment['data'] ) ) ); // phpcs:ignore WordPress.PHP.DiscouragedPHPFunctions.obfuscation_base64_decode
5539 - $data_filters = array(
5540 - 'state' => 'opaque',
5541 - 'client_id' => 'int',
5542 - 'client_title' => 'string',
5543 - 'client_image' => 'url',
5544 - );
5545 -
5546 - foreach ( $data_filters as $key => $sanitation ) {
5547 - if ( ! isset( $data->$key ) ) {
5548 - wp_die(
5549 - wp_kses(
5550 - $die_error,
5551 - array(
5552 - 'a' => array(
5553 - 'href' => array(),
5554 - ),
5555 - )
5556 - )
5557 - );
5558 - }
5559 -
5560 - switch ( $sanitation ) {
5561 - case 'int':
5562 - $this->json_api_authorization_request[ $key ] = (int) $data->$key;
5563 - break;
5564 - case 'opaque':
5565 - $this->json_api_authorization_request[ $key ] = (string) $data->$key;
5566 - break;
5567 - case 'string':
5568 - $this->json_api_authorization_request[ $key ] = wp_kses( (string) $data->$key, array() );
5569 - break;
5570 - case 'url':
5571 - $this->json_api_authorization_request[ $key ] = esc_url_raw( (string) $data->$key );
5572 - break;
5573 - }
5574 - }
5575 -
5576 - if ( empty( $this->json_api_authorization_request['client_id'] ) ) {
5577 - wp_die(
5578 - wp_kses(
5579 - $die_error,
5580 - array(
5581 - 'a' => array(
5582 - 'href' => array(),
5583 - ),
5584 - )
5585 - )
5586 - );
5587 - }
5469 + return ( new Authorize_Json_Api() )->verify_json_api_authorization_request( $environment );
5588 5470 }
5589 5471
5590 5472 /**
5591 5473 * HTML for the JSON API authorization notice.
5592 5474 *
5475 + * @deprecated 13.4
5476 + *
5593 5477 * @return string
5594 5478 */
5595 5479 public function login_message_json_api_authorization() {
5596 - return '<p class="message">' . sprintf(
5597 - /* translators: Name/image of the client requesting authorization */
5598 - esc_html__( '%s wants to access your site’s data. Log in to authorize that access.', 'jetpack' ),
5599 - '<strong>' . esc_html( $this->json_api_authorization_request['client_title'] ) . '</strong>'
5600 - ) . '<img src="' . esc_url( $this->json_api_authorization_request['client_image'] ) . '" /></p>';
5480 + _deprecated_function( __METHOD__, 'jetpack-13.4', 'Automattic\\Jetpack\\Connection\\Authorize_Json_Api::login_message_json_api_authorization' );
5481 +
5482 + return ( new Authorize_Json_Api() )->login_message_json_api_authorization();
5601 5483 }
5602 5484
5603 5485 /**
5604 5486 * Get $content_width, but with a <s>twist</s> filter.
@@ -5642,32 +5524,23 @@
5642 5524
5643 5525 /**
5644 5526 * Checks if the site is currently in an identity crisis.
5645 5527 *
5528 + * Now delegates to the Connection package so this matches what the heartbeat itself reports.
5529 + * Note the package guards on `Connection\Manager::is_connected()` where this used to guard on
5530 + * `Jetpack::is_connection_ready()`, so the `jetpack_is_connection_ready` filter no longer applies.
5531 + *
5532 + * @deprecated 16.2
5533 + *
5646 5534 * @return array|bool Array of options that are in a crisis, or false if everything is OK.
5647 5535 */
5648 5536 public static function check_identity_crisis() {
5649 - if ( ! self::is_connection_ready() || ( new Status() )->is_offline_mode() || ! Identity_Crisis::validate_sync_error_idc_option() ) {
5650 - return false;
5651 - }
5537 + _deprecated_function( __METHOD__, 'jetpack-16.2', 'Automattic\\Jetpack\\Identity_Crisis::check_identity_crisis' );
5652 5538
5653 - return Jetpack_Options::get_option( 'sync_error_idc' );
5539 + return Identity_Crisis::check_identity_crisis();
5654 5540 }
5655 5541
5656 5542 /**
5657 - * Checks whether the sync_error_idc option is valid or not, and if not, will do cleanup.
5658 - *
5659 - * @since 4.4.0
5660 - * @since 5.4.0 Do not call get_sync_error_idc_option() unless site is in IDC
5661 - *
5662 - * @return bool
5663 - */
5664 - public static function validate_sync_error_idc_option() {
5665 - _deprecated_function( __METHOD__, 'jetpack-9.8', '\\Automattic\\Jetpack\\Identity_Crisis::validate_sync_error_idc_option' );
5666 - return Identity_Crisis::validate_sync_error_idc_option();
5667 - }
5668 -
5669 - /**
5670 5543 * Normalizes a url by doing three things:
5671 5544 * - Strips protocol
5672 5545 * - Strips www
5673 5546 * - Adds a trailing slash
@@ -5688,35 +5561,8 @@
5688 5561 return $url;
5689 5562 }
5690 5563
5691 5564 /**
5692 - * Gets the value that is to be saved in the jetpack_sync_error_idc option.
5693 - *
5694 - * @since 4.4.0
5695 - * @since 5.4.0 Add transient since home/siteurl retrieved directly from DB
5696 - * @deprecated 9.8.0 Use \\Automattic\\Jetpack\\Identity_Crisis::get_sync_error_idc_option
5697 - *
5698 - * @param array $response HTTP response.
5699 - * @return array Array of the local urls, wpcom urls, and error code
5700 - */
5701 - public static function get_sync_error_idc_option( $response = array() ) {
5702 - _deprecated_function( __METHOD__, 'jetpack-9.8', '\\Automattic\\Jetpack\\Identity_Crisis::get_sync_error_idc_option' );
5703 - return Identity_Crisis::get_sync_error_idc_option( $response );
5704 - }
5705 -
5706 - /**
5707 - * Returns the value of the jetpack_sync_idc_optin filter, or constant.
5708 - * If set to true, the site will be put into staging mode.
5709 - *
5710 - * @since 4.3.2
5711 - * @return bool
5712 - */
5713 - public static function sync_idc_optin() {
5714 - _deprecated_function( __METHOD__, 'jetpack-9.8', '\\Automattic\\Jetpack\\Identity_Crisis::sync_idc_optin' );
5715 - return Identity_Crisis::sync_idc_optin();
5716 - }
5717 -
5718 - /**
5719 5565 * Maybe Use a .min.css stylesheet, maybe not.
5720 5566 *
5721 5567 * Hooks onto `plugins_url` filter at priority 1, and accepts all 3 args.
5722 5568 *
@@ -5737,9 +5583,9 @@
5737 5583 // Strip out the abspath.
5738 5584 $base = dirname( plugin_basename( $plugin ) );
5739 5585
5740 5586 // Short out on non-Jetpack assets.
5741 - if ( 'jetpack/' !== substr( $base, 0, 8 ) ) {
5587 + if ( ! str_starts_with( $base, 'jetpack/' ) ) {
5742 5588 return $url;
5743 5589 }
5744 5590
5745 5591 // File name parsing.
@@ -5779,15 +5625,15 @@
5779 5625 *
5780 5626 * @return mixed
5781 5627 */
5782 5628 public static function set_suffix_on_min( $src, $handle ) {
5783 - if ( false === strpos( $src, '.min.css' ) ) {
5629 + if ( ! is_string( $src ) || ! str_contains( $src, '.min.css' ) ) {
5784 5630 return $src;
5785 5631 }
5786 5632
5787 5633 if ( ! empty( self::$min_assets ) ) {
5788 5634 foreach ( self::$min_assets as $file => $path ) {
5789 - if ( false !== strpos( $src, $file ) ) {
5635 + if ( str_contains( $src, $file ) ) {
5790 5636 wp_style_add_data( $handle, 'suffix', '.min' );
5791 5637 return $src;
5792 5638 }
5793 5639 }
@@ -5817,8 +5663,10 @@
5817 5663 *
5818 5664 * Data passed in with the $data parameter will be available in the
5819 5665 * template file as $data['value']
5820 5666 *
5667 + * @html-template-var array $data
5668 + *
5821 5669 * @param string $template - Template file to load.
5822 5670 * @param array $data - Any data to pass along to the template.
5823 5671 * @return boolean - If template file was found.
5824 5672 **/
@@ -5836,8 +5684,19 @@
5836 5684 return false;
5837 5685 }
5838 5686
5839 5687 /**
5688 + * Register Jetpack-specific tests on the connection package's health test suite.
5689 + *
5690 + * @param \Automattic\Jetpack\Connection\Connection_Health_Tests $connection_tests The test suite instance.
5691 + */
5692 + public function register_jetpack_connection_tests( $connection_tests ) {
5693 + require_once JETPACK__PLUGIN_DIR . '_inc/lib/debugger/class-jetpack-cxn-tests.php';
5694 + $jetpack_tests = new Jetpack_Cxn_Tests();
5695 + $jetpack_tests->register_tests_on( $connection_tests );
5696 + }
5697 +
5698 + /**
5840 5699 * Throws warnings for deprecated hooks to be removed from Jetpack that cannot remain in the original place in the code.
5841 5700 */
5842 5701 public function deprecated_hooks() {
5843 5702 $filter_deprecated_list = array(
@@ -5964,13 +5823,8 @@
5964 5823 'jetpack_cache_plans' => array(
5965 5824 'replacement' => null,
5966 5825 'version' => 'jetpack-6.1.0',
5967 5826 ),
5968 -
5969 - 'jetpack_lazy_images_skip_image_with_atttributes' => array(
5970 - 'replacement' => 'jetpack_lazy_images_skip_image_with_attributes',
5971 - 'version' => 'jetpack-6.5.0',
5972 - ),
5973 5827 'jetpack_enable_site_verification' => array(
5974 5828 'replacement' => null,
5975 5829 'version' => 'jetpack-6.5.0',
5976 5830 ),
@@ -6054,8 +5908,22 @@
6054 5908 'jetpack_are_blogging_prompts_enabled' => array(
6055 5909 'replacement' => null,
6056 5910 'version' => 'jetpack-11.8.0',
6057 5911 ),
5912 + 'jetpack_subscriptions_modal_enabled' => array(
5913 + 'replacement' => null,
5914 + 'version' => 'jetpack-12.7.0',
5915 + ),
5916 + 'jetpack_pre_connection_prompt_helpers' => array(
5917 + 'replacement' => null,
5918 + 'version' => 'jetpack-13.2.0',
5919 + ),
5920 + 'jetpack_contact_form_use_package' => array(
5921 + 'replacement' => null,
5922 + 'version' => 'jetpack-13.4.0',
5923 + ),
5924 + // jetpack_implode_frontend_css has been removed, but is not listed here. The updated behavior is exactly the only use of the filter.
5925 + // We can reassess formally deprecating it here later; for now, it would be noise with no functional difference.
6058 5926 );
6059 5927
6060 5928 foreach ( $filter_deprecated_list as $tag => $args ) {
6061 5929 if ( has_filter( $tag ) ) {
@@ -6158,9 +6026,9 @@
6158 6026 foreach ( $matches as $match ) {
6159 6027 $url = trim( $match['path'], "'\" \t" );
6160 6028
6161 6029 // If this is a data url, we don't want to mess with it.
6162 - if ( 'data:' === substr( $url, 0, 5 ) ) {
6030 + if ( str_starts_with( $url, 'data:' ) ) {
6163 6031 continue;
6164 6032 }
6165 6033
6166 6034 // If this is an absolute or protocol-agnostic url,
@@ -6186,113 +6054,8 @@
6186 6054 return $css;
6187 6055 }
6188 6056
6189 6057 /**
6190 - * This methods removes all of the registered css files on the front end
6191 - * from Jetpack in favor of using a single file. In effect "imploding"
6192 - * all the files into one file.
6193 - *
6194 - * Pros:
6195 - * - Uses only ONE css asset connection instead of 15
6196 - * - Saves a minimum of 56k
6197 - * - Reduces server load
6198 - * - Reduces time to first painted byte
6199 - *
6200 - * Cons:
6201 - * - Loads css for ALL modules. However all selectors are prefixed so it
6202 - * should not cause any issues with themes.
6203 - * - Plugins/themes dequeuing styles no longer do anything. See
6204 - * jetpack_implode_frontend_css filter for a workaround
6205 - *
6206 - * For some situations developers may wish to disable css imploding and
6207 - * instead operate in legacy mode where each file loads seperately and
6208 - * can be edited individually or dequeued. This can be accomplished with
6209 - * the following line:
6210 - *
6211 - * add_filter( 'jetpack_implode_frontend_css', '__return_false' );
6212 - *
6213 - * @param bool $travis_test Is this a test run.
6214 - *
6215 - * @since 3.2
6216 - */
6217 - public function implode_frontend_css( $travis_test = false ) {
6218 - $do_implode = true;
6219 - if ( defined( 'SCRIPT_DEBUG' ) && SCRIPT_DEBUG ) {
6220 - $do_implode = false;
6221 - }
6222 -
6223 - // Do not implode CSS when the page loads via the AMP plugin.
6224 - if ( class_exists( Jetpack_AMP_Support::class ) && Jetpack_AMP_Support::is_amp_request() ) {
6225 - $do_implode = false;
6226 - }
6227 -
6228 - /**
6229 - * Allow CSS to be concatenated into a single jetpack.css file.
6230 - *
6231 - * @since 3.2.0
6232 - *
6233 - * @param bool $do_implode Should CSS be concatenated? Default to true.
6234 - */
6235 - $do_implode = apply_filters( 'jetpack_implode_frontend_css', $do_implode );
6236 -
6237 - // Do not use the imploded file when default behavior was altered through the filter.
6238 - if ( ! $do_implode ) {
6239 - return;
6240 - }
6241 -
6242 - // We do not want to use the imploded file in dev mode, or if not connected.
6243 - if ( ( new Status() )->is_offline_mode() || ! self::is_connection_ready() ) {
6244 - if ( ! $travis_test ) {
6245 - return;
6246 - }
6247 - }
6248 -
6249 - // Do not use the imploded file if sharing css was dequeued via the sharing settings screen.
6250 - if ( get_option( 'sharedaddy_disable_resources' ) ) {
6251 - return;
6252 - }
6253 -
6254 - /*
6255 - * Now we assume Jetpack is connected and able to serve the single
6256 - * file.
6257 - *
6258 - * In the future there will be a check here to serve the file locally
6259 - * or potentially from the Jetpack CDN
6260 - *
6261 - * For now:
6262 - * - Enqueue a single imploded css file
6263 - * - Zero out the style_loader_tag for the bundled ones
6264 - * - Be happy, drink scotch
6265 - */
6266 -
6267 - add_filter( 'style_loader_tag', array( $this, 'concat_remove_style_loader_tag' ), 10, 2 );
6268 -
6269 - $version = self::is_development_version() ? filemtime( JETPACK__PLUGIN_DIR . 'css/jetpack.css' ) : JETPACK__VERSION;
6270 -
6271 - wp_enqueue_style( 'jetpack_css', plugins_url( 'css/jetpack.css', __FILE__ ), array(), $version );
6272 - wp_style_add_data( 'jetpack_css', 'rtl', 'replace' );
6273 - }
6274 -
6275 - /**
6276 - * Removes styles that are part of concatenated group.
6277 - *
6278 - * @param string $tag Style tag.
6279 - * @param string $handle Style handle.
6280 - *
6281 - * @return string
6282 - */
6283 - public function concat_remove_style_loader_tag( $tag, $handle ) {
6284 - if ( in_array( $handle, $this->concatenated_style_handles, true ) ) {
6285 - $tag = '';
6286 - if ( defined( 'WP_DEBUG' ) && WP_DEBUG ) {
6287 - $tag = '<!-- `' . esc_html( $handle ) . "` is included in the concatenated jetpack.css -->\r\n";
6288 - }
6289 - }
6290 -
6291 - return $tag;
6292 - }
6293 -
6294 - /**
6295 6058 * Check the heartbeat data
6296 6059 *
6297 6060 * Organizes the heartbeat data by severity. For example, if the site
6298 6061 * is in an ID crisis, it will be in the $filtered_data['bad'] array.
@@ -6304,9 +6067,23 @@
6304 6067 *
6305 6068 * $return array $filtered_data
6306 6069 */
6307 6070 public static function jetpack_check_heartbeat_data() {
6308 - $raw_data = Jetpack_Heartbeat::generate_stats_array();
6071 + /*
6072 + * Site environment stats (incl. wp-version/php-version checked below) now live in the Connection package,
6073 + * and the IDC stat is contributed by the Connection package's `jetpack_heartbeat_stats_array` filter
6074 + * callback. We rebuild the stat here rather than running that filter: the filter's callbacks have side
6075 + * effects (Connection\Manager::add_stats_to_heartbeat() consumes and deletes the `xmlrpc_errors` option)
6076 + * and return non-scalar values, neither of which is appropriate for this read-only diagnostic.
6077 + */
6078 + $env_stats = method_exists( Heartbeat::class, 'get_environment_stats' )
6079 + ? Heartbeat::get_environment_stats()
6080 + : array();
6081 + $raw_data = array_merge(
6082 + Jetpack_Heartbeat::generate_stats_array(),
6083 + $env_stats,
6084 + array( 'identitycrisis' => Identity_Crisis::check_identity_crisis() ? 'yes' : 'no' )
6085 + );
6309 6086
6310 6087 $good = array();
6311 6088 $caution = array();
6312 6089 $bad = array();
@@ -6372,23 +6149,8 @@
6372 6149 return Jetpack_Options::get_options_for_reset();
6373 6150 }
6374 6151
6375 6152 /**
6376 - * Strip http:// or https:// from a url, replaces forward slash with ::,
6377 - * so we can bring them directly to their site in calypso.
6378 - *
6379 - * @deprecated 9.2.0 Use Automattic\Jetpack\Status::get_site_suffix
6380 - *
6381 - * @param string $url URL.
6382 - * @return string url without the guff.
6383 - */
6384 - public static function build_raw_urls( $url ) {
6385 - _deprecated_function( __METHOD__, 'jetpack-9.2.0', 'Automattic\Jetpack\Status::get_site_suffix' );
6386 -
6387 - return ( new Status() )->get_site_suffix( $url );
6388 - }
6389 -
6390 - /**
6391 6153 * Get the user's meta box order.
6392 6154 *
6393 6155 * @param array $sorted Value for the user's option.
6394 6156 * @return mixed
@@ -6398,9 +6160,9 @@
6398 6160 return $sorted;
6399 6161 }
6400 6162
6401 6163 foreach ( $sorted as $box_context => $ids ) {
6402 - if ( false === strpos( $ids, 'dashboard_stats' ) ) {
6164 + if ( ! str_contains( $ids, 'dashboard_stats' ) ) {
6403 6165 // If the old id isn't anywhere in the ids, don't bother exploding and fail out.
6404 6166 continue;
6405 6167 }
6406 6168
@@ -6417,68 +6179,9 @@
6417 6179 }
6418 6180
6419 6181 return $sorted;
6420 6182 }
6421 -
6422 6183 /**
6423 - * Adds a "blank" column in the user admin table to display indication of user connection.
6424 - *
6425 - * @param array $columns User list table columns.
6426 - *
6427 - * @return array
6428 - */
6429 - public function jetpack_icon_user_connected( $columns ) {
6430 - $columns['user_jetpack'] = '';
6431 - return $columns;
6432 - }
6433 -
6434 - /**
6435 - * Show Jetpack icon if the user is linked.
6436 - *
6437 - * @param string $val HTML for the icon.
6438 - * @param string $col User list table column.
6439 - * @param int $user_id User ID.
6440 - *
6441 - * @return string
6442 - */
6443 - public function jetpack_show_user_connected_icon( $val, $col, $user_id ) {
6444 - if ( 'user_jetpack' === $col && self::connection()->is_user_connected( $user_id ) ) {
6445 - $jetpack_logo = new Jetpack_Logo();
6446 - $emblem_html = sprintf(
6447 - '<a title="%1$s" class="jp-emblem-user-admin">%2$s</a>',
6448 - esc_attr__( 'This user is linked and ready to fly with Jetpack.', 'jetpack' ),
6449 - $jetpack_logo->get_jp_emblem()
6450 - );
6451 - return $emblem_html;
6452 - }
6453 -
6454 - return $val;
6455 - }
6456 -
6457 - /**
6458 - * Style the Jetpack user column
6459 - */
6460 - public function jetpack_user_col_style() {
6461 - global $current_screen;
6462 - if ( ! empty( $current_screen->base ) && 'users' === $current_screen->base ) {
6463 - ?>
6464 - <style>
6465 - .fixed .column-user_jetpack {
6466 - width: 21px;
6467 - }
6468 - .jp-emblem-user-admin svg {
6469 - width: 20px;
6470 - height: 20px;
6471 - }
6472 - .jp-emblem-user-admin path {
6473 - fill: #069e08;
6474 - }
6475 - </style>
6476 - <?php
6477 - }
6478 - }
6479 -
6480 - /**
6481 6184 * Checks if Akismet is active and working.
6482 6185 *
6483 6186 * We dropped support for Akismet 3.0 with Jetpack 6.1.1 while introducing a check for an Akismet valid key
6484 6187 * that implied usage of methods present since more recent version.
@@ -6639,13 +6342,20 @@
6639 6342 }
6640 6343 }
6641 6344
6642 6345 /**
6643 - * Returns a boolean for whether backups UI should be displayed or not.
6346 + * Whether UI for backups should be displayed.
6644 6347 *
6348 + * On WPCom platforms this is gated on the backups-self-serve site feature.
6349 + * On self-hosted Jetpack sites it falls back to the jetpack_show_backups filter.
6350 + *
6645 6351 * @return bool Should backups UI be displayed?
6646 6352 */
6647 6353 public static function show_backups_ui() {
6354 + if ( ( new \Automattic\Jetpack\Status\Host() )->is_wpcom_platform() ) {
6355 + return function_exists( 'wpcom_site_has_feature' ) && wpcom_site_has_feature( 'backups-self-serve' );
6356 + }
6357 +
6648 6358 /**
6649 6359 * Whether UI for backups should be displayed.
6650 6360 *
6651 6361 * @since 6.5.0
@@ -6655,8 +6365,24 @@
6655 6365 return self::is_plugin_active( 'vaultpress/vaultpress.php' ) || apply_filters( 'jetpack_show_backups', true );
6656 6366 }
6657 6367
6658 6368 /**
6369 + * Whether UI for security scanning should be displayed.
6370 + *
6371 + * On WPCom platforms this is gated on the scan-self-serve site feature.
6372 + * On self-hosted Jetpack sites it always returns true.
6373 + *
6374 + * @return bool Should scan UI be displayed?
6375 + */
6376 + public static function show_scan_ui() {
6377 + if ( ( new \Automattic\Jetpack\Status\Host() )->is_wpcom_platform() ) {
6378 + return function_exists( 'wpcom_site_has_feature' ) && wpcom_site_has_feature( 'scan-self-serve' );
6379 + }
6380 +
6381 + return true;
6382 + }
6383 +
6384 + /**
6659 6385 * Clean leftoveruser meta.
6660 6386 *
6661 6387 * Delete Jetpack-related user meta when it is no longer needed.
6662 6388 *
@@ -6728,8 +6454,40 @@
6728 6454 'url' => Redirect::get_url( 'jetpack-faq-backup-disclaimer' ),
6729 6455 ),
6730 6456 );
6731 6457
6458 + $products['creator'] = array(
6459 + 'title' => __( 'Jetpack Creator', 'jetpack' ),
6460 + 'slug' => 'jetpack_creator_yearly',
6461 + 'description' => __( 'Craft stunning content, boost your subscriber base, and monetize your online presence.', 'jetpack' ),
6462 + 'show_promotion' => true,
6463 + 'discount_percent' => 50,
6464 + 'included_in_plans' => array( 'complete' ),
6465 + 'features' => array(
6466 + _x( 'Unlimited subscriber imports', 'Creator Product Feature', 'jetpack' ),
6467 + _x( 'Earn more from your content', 'Creator Product Feature', 'jetpack' ),
6468 + _x( 'Accept payments with PayPal', 'Creator Product Feature', 'jetpack' ),
6469 + _x( 'Increase earnings with WordAds', 'Creator Product Feature', 'jetpack' ),
6470 + ),
6471 + );
6472 +
6473 + $products['growth'] = array(
6474 + 'title' => __( 'Jetpack Growth', 'jetpack' ),
6475 + 'slug' => 'jetpack_growth_yearly',
6476 + 'description' => __( 'Essential tools to help you grow your audience, track visitor engagement, and turn leads into loyal customers and advocates.', 'jetpack' ),
6477 + 'show_promotion' => true,
6478 + 'discount_percent' => 50,
6479 + 'included_in_plans' => array( 'complete' ),
6480 + 'features' => array(
6481 + _x( 'Jetpack Social', 'Growth Product Feature', 'jetpack' ),
6482 + _x( 'Jetpack Stats (10K site views, upgradeable)', 'Growth Product Feature', 'jetpack' ),
6483 + _x( 'Unlimited subscriber imports', 'Growth Product Feature', 'jetpack' ),
6484 + _x( 'Earn more from your content', 'Growth Product Feature', 'jetpack' ),
6485 + _x( 'Accept payments with PayPal', 'Growth Product Feature', 'jetpack' ),
6486 + _x( 'Increase earnings with WordAds', 'Growth Product Feature', 'jetpack' ),
6487 + ),
6488 + );
6489 +
6732 6490 $products['scan'] = array(
6733 6491 'title' => __( 'Jetpack Scan', 'jetpack' ),
6734 6492 'slug' => 'jetpack_scan',
6735 6493 'description' => __( 'Automatic scanning and one-click fixes keep your site one step ahead of security threats and malware.', 'jetpack' ),
@@ -6759,9 +6517,9 @@
6759 6517 ),
6760 6518 );
6761 6519
6762 6520 $products['akismet'] = array(
6763 - 'title' => __( 'Akismet Anti-Spam', 'jetpack' ),
6521 + 'title' => __( 'Akismet Anti-spam', 'jetpack' ),
6764 6522 'slug' => 'jetpack_anti_spam',
6765 6523 'description' => __( 'Save time and get better responses by automatically blocking spam from your comments and forms.', 'jetpack' ),
6766 6524 'show_promotion' => true,
6767 6525 'discount_percent' => 50,
@@ -6855,5 +6613,106 @@
6855 6613
6856 6614 return true;
6857 6615 }
6858 6616
6617 + /**
6618 + * Add 5-star review link on the Jetpack Plugin meta, in the plugins list table (on the plugins page).
6619 + *
6620 + * @param array $plugin_meta An array of the plugin's metadata.
6621 + * @param string $plugin_file Path to the plugin file.
6622 + *
6623 + * @return array $plugin_meta An array of the plugin's metadata.
6624 + */
6625 + public function add_5_star_review_link( $plugin_meta, $plugin_file ) {
6626 + if ( $plugin_file !== 'jetpack/jetpack.php' ) {
6627 + return $plugin_meta;
6628 + }
6629 +
6630 + $u = get_current_user_id();
6631 + $site = get_site_url();
6632 +
6633 + $plugin_meta[] = '<a href="https://jetpack.com/redirect?source=jetpack-plugin-review&site=' . esc_attr( $site ) . '&u=' . esc_attr( $u ) . '" target="_blank" rel="noopener noreferrer" title="' . esc_attr__( 'Rate Jetpack on WordPress.org', 'jetpack' ) . '" style="color: #ffb900">'
6634 + . str_repeat( '<span class="dashicons dashicons-star-filled" style="font-size: 16px; width:16px; height: 16px"></span>', 5 )
6635 + . '</a>';
6636 +
6637 + return $plugin_meta;
6638 + }
6639 +
6640 + /**
6641 + * Lazy instantiation of the Plugin_Tracking object.
6642 + *
6643 + * @since 13.9
6644 + *
6645 + * @return void
6646 + */
6647 + public function initialize_tracking() {
6648 + if ( did_action( 'jetpack_initialize_tracking' ) > 1 ) {
6649 + // Only need to run once.
6650 + return;
6651 + }
6652 +
6653 + if ( ( new Tracking( 'jetpack', $this->connection_manager ) )->should_enable_tracking( new Terms_Of_Service(), new Status() ) || static::is_connection_ready() ) {
6654 + ( new Plugin_Tracking() )->init();
6655 + }
6656 + }
6657 +
6658 + /**
6659 + * Run the "initialize tracking" hook.
6660 + *
6661 + * @since 13.9
6662 + */
6663 + public function run_initialize_tracking_action() {
6664 + /**
6665 + * Fires when the tracking needs to be initialized.
6666 + * Doesn't necessarily mean that will actually happen, depends if the 'jetpack_tos_agreed' option is set.
6667 + *
6668 + * @since 13.9
6669 + */
6670 + do_action( 'jetpack_initialize_tracking' );
6671 + }
6672 +
6673 + /**
6674 + * Initialize REST jsonAPI if needed.
6675 + *
6676 + * @return void
6677 + */
6678 + public function maybe_initialize_rest_jsonapi() {
6679 + // phpcs:ignore WordPress.Security.NonceVerification.Recommended
6680 + if ( ! empty( $_GET['jsonapi'] ) && ( ! defined( 'IS_WPCOM' ) || ! IS_WPCOM ) ) {
6681 + require_once ABSPATH . 'wp-admin/includes/admin.php'; // JSON API relies on WP functionality not autoloaded in REST.
6682 +
6683 + define( 'WPCOM_JSON_API__BASE', 'public-api.wordpress.com/rest/v1' );
6684 + require_once JETPACK__PLUGIN_DIR . 'class.json-api-endpoints.php';
6685 + }
6686 + }
6687 +
6688 + /**
6689 + * Run plugin post-activation actions if we need to.
6690 + *
6691 + * @return void
6692 + */
6693 + private function plugin_post_activation() {
6694 + if ( ( new Status() )->is_offline_mode() ) {
6695 + return;
6696 + }
6697 +
6698 + if ( get_transient( 'activated_jetpack' ) ) {
6699 + delete_transient( 'activated_jetpack' );
6700 +
6701 + if ( ( new Host() )->is_woa_site() ) {
6702 + $redirect_url = static::admin_url( 'page=jetpack' );
6703 + } elseif ( is_network_admin() ) {
6704 + $redirect_url = admin_url( 'network/admin.php?page=jetpack' );
6705 + } elseif ( get_transient( 'my_jetpack_product_activated' ) ) {
6706 + // don't redirect if this is an activation that just came from My Jetpack
6707 + // My Jetpack has its own set of post-activation redirects
6708 + return;
6709 + } elseif ( My_Jetpack_Initializer::should_initialize() ) {
6710 + $redirect_url = static::admin_url( 'page=my-jetpack' );
6711 + } else {
6712 + $redirect_url = static::admin_url( 'page=jetpack' );
6713 + }
6714 +
6715 + wp_safe_redirect( $redirect_url );
6716 + }
6717 + }
6859 6718 }