class.jetpack-client-server.php — Jetpack – WP Security, Backup, Speed, & Growth 3.7.5

jetpack / class.jetpack-client-server.php

jetpack Last commit date

class.jetpack-client-server.php

261 lines

1	<?php
2
3	/**
4	* Client = Plugin
5	* Client Server = API Methods the Plugin must respond to
6	*/
7	class Jetpack_Client_Server {
8
9	function authorize() {
10	$data = stripslashes_deep( $_GET );
11	$args = array();
12	$redirect = isset( $data['redirect'] ) ? esc_url_raw( (string) $data['redirect'] ) : '';
13
14	$jetpack_unique_connection = Jetpack_Options::get_option( 'unique_connection' );
15	// Checking if site has been active/connected previously before recording unique connection
16	if ( ! $jetpack_unique_connection ) {
17	// jetpack_unique_connection option has never been set
18	$jetpack_unique_connection = array(
19	'connected' => 0,
20	'disconnected' => 0,
21	'version' => '3.6.1'
22	);
23
24	update_option( 'jetpack_unique_connection', $jetpack_unique_connection );
25
26	//track unique connection
27	$jetpack = Jetpack::init();
28
29	$jetpack->stat( 'connections', 'unique-connection' );
30	$jetpack->do_stats( 'server_side' );
31	}
32
33	// increment number of times connected
34	$jetpack_unique_connection['connected'] += 1;
35	Jetpack_Options::update_option( 'unique_connection', $jetpack_unique_connection );
36
37	do {
38	$jetpack = $this->get_jetpack();
39	$role = $jetpack->translate_current_user_to_role();
40
41	if ( !$role ) {
42	Jetpack::state( 'error', 'no_role' );
43	break;
44	}
45
46	$cap = $jetpack->translate_role_to_cap( $role );
47	if ( !$cap ) {
48	Jetpack::state( 'error', 'no_cap' );
49	break;
50	}
51
52	$this->check_admin_referer( "jetpack-authorize_{$role}_{$redirect}" );
53
54	if ( !empty( $data['error'] ) ) {
55	Jetpack::state( 'error', $data['error'] );
56	break;
57	}
58
59	if ( empty( $data['state'] ) ) {
60	Jetpack::state( 'error', 'no_state' );
61	break;
62	}
63
64	if ( !ctype_digit( $data['state'] ) ) {
65	Jetpack::state( 'error', 'invalid_state' );
66	break;
67	}
68
69	$current_user_id = get_current_user_id();
70	if ( $current_user_id != $data['state'] ) {
71	Jetpack::state( 'error', 'wrong_state' );
72	break;
73	}
74
75	if ( empty( $data['code'] ) ) {
76	Jetpack::state( 'error', 'no_code' );
77	break;
78	}
79
80	$token = $this->get_token( $data );
81
82	if ( is_wp_error( $token ) ) {
83	if ( $error = $token->get_error_code() )
84	Jetpack::state( 'error', $error );
85	else
86	Jetpack::state( 'error', 'invalid_token' );
87
88	Jetpack::state( 'error_description', $token->get_error_message() );
89
90	break;
91	}
92
93	if ( !$token ) {
94	Jetpack::state( 'error', 'no_token' );
95	break;
96	}
97
98	$is_master_user = ! Jetpack::is_active();
99
100	Jetpack::update_user_token( $current_user_id, sprintf( '%s.%d', $token, $current_user_id ), $is_master_user );
101
102
103	if ( $is_master_user ) {
104	Jetpack::state( 'message', 'authorized' );
105	} else {
106	Jetpack::state( 'message', 'linked' );
107	// Don't activate anything since we are just connecting a user.
108	break;
109	}
110
111	if ( $active_modules = Jetpack_Options::get_option( 'active_modules' ) ) {
112	Jetpack_Options::delete_option( 'active_modules' );
113
114	Jetpack::activate_default_modules( 999, 1, $active_modules );
115	} else {
116	Jetpack::activate_default_modules();
117	}
118
119	// Sync all registers options and constants
120	/** This action is documented in class.jetpack.php */
121	do_action( 'jetpack_sync_all_registered_options' );
122
123	// Start nonce cleaner
124	wp_clear_scheduled_hook( 'jetpack_clean_nonces' );
125	wp_schedule_event( time(), 'hourly', 'jetpack_clean_nonces' );
126	} while ( false );
127
128	if ( wp_validate_redirect( $redirect ) ) {
129	$this->wp_safe_redirect( $redirect );
130	} else {
131	$this->wp_safe_redirect( Jetpack::admin_url() );
132	}
133
134	$this->do_exit();
135	}
136
137	public static function deactivate_plugin( $probable_file, $probable_title ) {
138	include_once( ABSPATH . 'wp-admin/includes/plugin.php' );
139	if ( is_plugin_active( $probable_file ) ) {
140	deactivate_plugins( $probable_file );
141	return 1;
142	} else {
143	// If the plugin is not in the usual place, try looking through all active plugins.
144	$active_plugins = Jetpack::get_active_plugins();
145	foreach ( $active_plugins as $plugin ) {
146	$data = get_plugin_data( WP_PLUGIN_DIR . '/' . $plugin );
147	if ( $data['Name'] == $probable_title ) {
148	deactivate_plugins( $plugin );
149	return 1;
150	}
151	}
152	}
153
154	return 0;
155	}
156
157	/**
158	* @return object\|WP_Error
159	*/
160	function get_token( $data ) {
161	$jetpack = $this->get_jetpack();
162	$role = $jetpack->translate_current_user_to_role();
163
164	if ( !$role ) {
165	return new Jetpack_Error( 'role', __( 'An administrator for this blog must set up the Jetpack connection.', 'jetpack' ) );
166	}
167
168	$client_secret = Jetpack_Data::get_access_token();
169	if ( !$client_secret ) {
170	return new Jetpack_Error( 'client_secret', __( 'You need to register your Jetpack before connecting it.', 'jetpack' ) );
171	}
172
173	$redirect = isset( $data['redirect'] ) ? esc_url_raw( (string) $data['redirect'] ) : '';
174
175	$body = array(
176	'client_id' => Jetpack_Options::get_option( 'id' ),
177	'client_secret' => $client_secret->secret,
178	'grant_type' => 'authorization_code',
179	'code' => $data['code'],
180	'redirect_uri' => add_query_arg( array(
181	'action' => 'authorize',
182	'_wpnonce' => wp_create_nonce( "jetpack-authorize_{$role}_{$redirect}" ),
183	'redirect' => $redirect ? urlencode( $redirect ) : false,
184	), menu_page_url( 'jetpack', false ) ),
185	);
186
187	$args = array(
188	'method' => 'POST',
189	'body' => $body,
190	'headers' => array(
191	'Accept' => 'application/json',
192	),
193	);
194	$response = Jetpack_Client::_wp_remote_request( Jetpack::fix_url_for_bad_hosts( Jetpack::api_url( 'token' ) ), $args );
195
196	if ( is_wp_error( $response ) ) {
197	return new Jetpack_Error( 'token_http_request_failed', $response->get_error_message() );
198	}
199
200	$code = wp_remote_retrieve_response_code( $response );
201	$entity = wp_remote_retrieve_body( $response );
202
203	if ( $entity )
204	$json = json_decode( $entity );
205	else
206	$json = false;
207
208	if ( 200 != $code \|\| !empty( $json->error ) ) {
209	if ( empty( $json->error ) )
210	return new Jetpack_Error( 'unknown', '', $code );
211
212	$error_description = isset( $json->error_description ) ? sprintf( __( 'Error Details: %s', 'jetpack' ), (string) $json->error_description ) : '';
213
214	return new Jetpack_Error( (string) $json->error, $error_description, $code );
215	}
216
217	if ( empty( $json->access_token ) \|\| !is_scalar( $json->access_token ) ) {
218	return new Jetpack_Error( 'access_token', '', $code );
219	}
220
221	if ( empty( $json->token_type ) \|\| 'X_JETPACK' != strtoupper( $json->token_type ) ) {
222	return new Jetpack_Error( 'token_type', '', $code );
223	}
224
225	if ( empty( $json->scope ) ) {
226	return new Jetpack_Error( 'scope', 'No Scope', $code );
227	}
228	@list( $role, $hmac ) = explode( ':', $json->scope );
229	if ( empty( $role ) \|\| empty( $hmac ) ) {
230	return new Jetpack_Error( 'scope', 'Malformed Scope', $code );
231	}
232	if ( $jetpack->sign_role( $role ) !== $json->scope ) {
233	return new Jetpack_Error( 'scope', 'Invalid Scope', $code );
234	}
235
236	if ( !$cap = $jetpack->translate_role_to_cap( $role ) )
237	return new Jetpack_Error( 'scope', 'No Cap', $code );
238	if ( !current_user_can( $cap ) )
239	return new Jetpack_Error( 'scope', 'current_user_cannot', $code );
240
241	return (string) $json->access_token;
242	}
243
244	public function get_jetpack() {
245	return Jetpack::init();
246	}
247
248	public function check_admin_referer( $action ) {
249	return check_admin_referer( $action );
250	}
251
252	public function wp_safe_redirect( $redirect ) {
253	return wp_safe_redirect( $redirect );
254	}
255
256	public function do_exit() {
257	exit;
258	}
259
260	}
261