jetpack / modules / stats.php

stats.php in Jetpack – WP Security, Backup, Speed, & Growth 7.1.1, at modules/stats.php

1,843 lines 50.1 KB

Raw Download Zip

1	<?php
2	/**
3	* Module Name: Site Stats
4	* Module Description: Collect valuable traffic stats and insights.
5	* Sort Order: 1
6	* Recommendation Order: 2
7	* First Introduced: 1.1
8	* Requires Connection: Yes
9	* Auto Activate: Yes
10	* Module Tags: Site Stats, Recommended
11	* Feature: Engagement
12	* Additional Search Queries: statistics, tracking, analytics, views, traffic, stats
13	*
14	* @package Jetpack
15	*/
16
17	if ( defined( 'STATS_VERSION' ) ) {
18	return;
19	}
20
21	define( 'STATS_VERSION', '9' );
22	defined( 'STATS_DASHBOARD_SERVER' ) or define( 'STATS_DASHBOARD_SERVER', 'dashboard.wordpress.com' );
23
24	add_action( 'jetpack_modules_loaded', 'stats_load' );
25
26	/**
27	* Load Stats.
28	*
29	* @access public
30	* @return void
31	*/
32	function stats_load() {
33	Jetpack::enable_module_configurable( __FILE__ );
34	Jetpack::module_configuration_load( __FILE__, 'stats_configuration_load' );
35	Jetpack::module_configuration_head( __FILE__, 'stats_configuration_head' );
36	Jetpack::module_configuration_screen( __FILE__, 'stats_configuration_screen' );
37
38	// Generate the tracking code after wp() has queried for posts.
39	add_action( 'template_redirect', 'stats_template_redirect', 1 );
40
41	add_action( 'wp_head', 'stats_admin_bar_head', 100 );
42
43	add_action( 'wp_head', 'stats_hide_smile_css' );
44
45	add_action( 'jetpack_admin_menu', 'stats_admin_menu' );
46
47	// Map stats caps.
48	add_filter( 'map_meta_cap', 'stats_map_meta_caps', 10, 3 );
49
50	if ( isset( $_GET['oldwidget'] ) ) {
51	// Old one.
52	add_action( 'wp_dashboard_setup', 'stats_register_dashboard_widget' );
53	} else {
54	add_action( 'admin_init', 'stats_merged_widget_admin_init' );
55	}
56
57	add_filter( 'jetpack_xmlrpc_methods', 'stats_xmlrpc_methods' );
58
59	add_filter( 'pre_option_db_version', 'stats_ignore_db_version' );
60
61	// Add an icon to see stats in WordPress.com for a particular post
62	add_action( 'admin_print_styles-edit.php', 'jetpack_stats_load_admin_css' );
63	add_filter( 'manage_posts_columns', 'jetpack_stats_post_table' );
64	add_filter( 'manage_pages_columns', 'jetpack_stats_post_table' );
65	add_action( 'manage_posts_custom_column', 'jetpack_stats_post_table_cell', 10, 2 );
66	add_action( 'manage_pages_custom_column', 'jetpack_stats_post_table_cell', 10, 2 );
67	}
68
69	/**
70	* Delay conditional for current_user_can to after init.
71	*
72	* @access public
73	* @return void
74	*/
75	function stats_merged_widget_admin_init() {
76	if ( current_user_can( 'view_stats' ) ) {
77	add_action( 'load-index.php', 'stats_enqueue_dashboard_head' );
78	add_action( 'wp_dashboard_setup', 'stats_register_widget_control_callback' ); // Hacky but works.
79	add_action( 'jetpack_dashboard_widget', 'stats_jetpack_dashboard_widget' );
80	}
81	}
82
83	/**
84	* Enqueue Stats Dashboard
85	*
86	* @access public
87	* @return void
88	*/
89	function stats_enqueue_dashboard_head() {
90	add_action( 'admin_head', 'stats_dashboard_head' );
91	}
92
93	/**
94	* Checks if filter is set and dnt is enabled.
95	*
96	* @return bool
97	*/
98	function jetpack_is_dnt_enabled() {
99	/**
100	* Filter the option which decides honor DNT or not.
101	*
102	* @module stats
103	* @since 6.1.0
104	*
105	* @param bool false Honors DNT for clients who don't want to be tracked. Defaults to false. Set to true to enable.
106	*/
107	if ( false === apply_filters( 'jetpack_honor_dnt_header_for_stats', false ) ) {
108	return false;
109	}
110
111	foreach ( $_SERVER as $name => $value ) {
112	if ( 'http_dnt' == strtolower( $name ) && 1 == $value ) {
113	return true;
114	}
115	}
116
117	return false;
118	}
119
120	/**
121	* Prevent sparkline img requests being redirected to upgrade.php.
122	* See wp-admin/admin.php where it checks $wp_db_version.
123	*
124	* @access public
125	* @param mixed $version Version.
126	* @return string $version.
127	*/
128	function stats_ignore_db_version( $version ) {
129	if (
130	is_admin() &&
131	isset( $_GET['page'] ) && 'stats' === $_GET['page'] &&
132	isset( $_GET['chart'] ) && strpos($_GET['chart'], 'admin-bar-hours') === 0
133	) {
134	global $wp_db_version;
135	return $wp_db_version;
136	}
137	return $version;
138	}
139
140	/**
141	* Maps view_stats cap to read cap as needed.
142	*
143	* @access public
144	* @param mixed $caps Caps.
145	* @param mixed $cap Cap.
146	* @param mixed $user_id User ID.
147	* @return array Possibly mapped capabilities for meta capability.
148	*/
149	function stats_map_meta_caps( $caps, $cap, $user_id ) {
150	// Map view_stats to exists.
151	if ( 'view_stats' === $cap ) {
152	$user = new WP_User( $user_id );
153	$user_role = array_shift( $user->roles );
154	$stats_roles = stats_get_option( 'roles' );
155
156	// Is the users role in the available stats roles?
157	if ( is_array( $stats_roles ) && in_array( $user_role, $stats_roles ) ) {
158	$caps = array( 'read' );
159	}
160	}
161
162	return $caps;
163	}
164
165	/**
166	* Stats Template Redirect.
167	*
168	* @access public
169	* @return void
170	*/
171	function stats_template_redirect() {
172	global $current_user, $rendered_stats_footer;
173
174	if ( is_feed() \|\| is_robots() \|\| is_trackback() \|\| is_preview() \|\| jetpack_is_dnt_enabled() ) {
175	return;
176	}
177
178	// Should we be counting this user's views?
179	if ( ! empty( $current_user->ID ) ) {
180	$count_roles = stats_get_option( 'count_roles' );
181	if ( ! is_array( $count_roles ) \|\| ! array_intersect( $current_user->roles, $count_roles ) ) {
182	return;
183	}
184	}
185
186	add_action( 'wp_footer', 'stats_footer', 101 );
187	add_action( 'wp_head', 'stats_add_shutdown_action' );
188
189	$rendered_stats_footer = false;
190	}
191
192
193	/**
194	* Stats Build View Data.
195	*
196	* @access public
197	* @return array.
198	*/
199	function stats_build_view_data() {
200	global $wp_the_query;
201
202	$blog = Jetpack_Options::get_option( 'id' );
203	$tz = get_option( 'gmt_offset' );
204	$v = 'ext';
205	$blog_url = parse_url( site_url() );
206	$srv = $blog_url['host'];
207	$j = sprintf( '%s:%s', JETPACK__API_VERSION, JETPACK__VERSION );
208	if ( $wp_the_query->is_single \|\| $wp_the_query->is_page \|\| $wp_the_query->is_posts_page ) {
209	// Store and reset the queried_object and queried_object_id
210	// Otherwise, redirect_canonical() will redirect to home_url( '/' ) for show_on_front = page sites where home_url() is not all lowercase.
211	// Repro:
212	// 1. Set home_url = https://ExamPle.com/
213	// 2. Set show_on_front = page
214	// 3. Set page_on_front = something
215	// 4. Visit https://example.com/ !
216	$queried_object = ( isset( $wp_the_query->queried_object ) ) ? $wp_the_query->queried_object : null;
217	$queried_object_id = ( isset( $wp_the_query->queried_object_id ) ) ? $wp_the_query->queried_object_id : null;
218	$post = $wp_the_query->get_queried_object_id();
219	$wp_the_query->queried_object = $queried_object;
220	$wp_the_query->queried_object_id = $queried_object_id;
221	} else {
222	$post = '0';
223	}
224
225	return compact( 'v', 'j', 'blog', 'post', 'tz', 'srv' );
226	}
227
228	/**
229	* Stats Add Shutdown Action.
230	*
231	* @access public
232	* @return void
233	*/
234	function stats_add_shutdown_action() {
235	// Just in case wp_footer isn't in your theme.
236	add_action( 'shutdown', 'stats_footer', 101 );
237	}
238
239	/**
240	* Stats Footer.
241	*
242	* @access public
243	* @return void
244	*/
245	function stats_footer() {
246	global $rendered_stats_footer;
247
248	if ( ! $rendered_stats_footer ) {
249	$data = stats_build_view_data();
250	if ( Jetpack_AMP_Support::is_amp_request() ) {
251	stats_render_amp_footer( $data );
252	} else {
253	stats_render_footer( $data );
254	}
255	$rendered_stats_footer = true;
256	}
257	}
258
259	function stats_render_footer( $data ) {
260	$script = 'https://stats.wp.com/e-' . gmdate( 'YW' ) . '.js';
261	$data_stats_array = stats_array( $data );
262
263	$stats_footer = <<<END
264	<script type='text/javascript' src='{$script}' async='async' defer='defer'></script>
265	<script type='text/javascript'>
266	_stq = window._stq \|\| [];
267	_stq.push([ 'view', {{$data_stats_array}} ]);
268	_stq.push([ 'clickTrackerInit', '{$data['blog']}', '{$data['post']}' ]);
269	</script>
270
271	END;
272	print $stats_footer;
273	}
274
275	function stats_render_amp_footer( $data ) {
276	$data['host'] = isset( $_SERVER['HTTP_HOST'] ) ? sanitize_text_field( wp_unslash( $_SERVER['HTTP_HOST'] ) ) : ''; // input var ok.
277	$data['rand'] = 'RANDOM'; // AMP placeholder.
278	$data['ref'] = 'DOCUMENT_REFERRER'; // AMP placeholder.
279	$data = array_map( 'rawurlencode', $data );
280	$pixel_url = add_query_arg( $data, 'https://pixel.wp.com/g.gif' );
281
282	?>
283	<amp-pixel src="<?php echo esc_url( $pixel_url ); ?>"></amp-pixel>
284	<?php
285	}
286
287	/**
288	* Stats Get Options.
289	*
290	* @access public
291	* @return array.
292	*/
293	function stats_get_options() {
294	$options = get_option( 'stats_options' );
295
296	if ( ! isset( $options['version'] ) \|\| $options['version'] < STATS_VERSION ) {
297	$options = stats_upgrade_options( $options );
298	}
299
300	return $options;
301	}
302
303	/**
304	* Get Stats Options.
305	*
306	* @access public
307	* @param mixed $option Option.
308	* @return mixed\|null.
309	*/
310	function stats_get_option( $option ) {
311	$options = stats_get_options();
312
313	if ( 'blog_id' === $option ) {
314	return Jetpack_Options::get_option( 'id' );
315	}
316
317	if ( isset( $options[ $option ] ) ) {
318	return $options[ $option ];
319	}
320
321	return null;
322	}
323
324	/**
325	* Stats Set Options.
326	*
327	* @access public
328	* @param mixed $option Option.
329	* @param mixed $value Value.
330	* @return bool.
331	*/
332	function stats_set_option( $option, $value ) {
333	$options = stats_get_options();
334
335	$options[ $option ] = $value;
336
337	return stats_set_options( $options );
338	}
339
340	/**
341	* Stats Set Options.
342	*
343	* @access public
344	* @param mixed $options Options.
345	* @return bool
346	*/
347	function stats_set_options( $options ) {
348	return update_option( 'stats_options', $options );
349	}
350
351	/**
352	* Stats Upgrade Options.
353	*
354	* @access public
355	* @param mixed $options Options.
356	* @return array\|bool
357	*/
358	function stats_upgrade_options( $options ) {
359	$defaults = array(
360	'admin_bar' => true,
361	'roles' => array( 'administrator' ),
362	'count_roles' => array(),
363	'blog_id' => Jetpack_Options::get_option( 'id' ),
364	'do_not_track' => true, // @todo
365	'hide_smile' => true,
366	);
367
368	if ( isset( $options['reg_users'] ) ) {
369	if ( ! function_exists( 'get_editable_roles' ) ) {
370	require_once ABSPATH . 'wp-admin/includes/user.php';
371	}
372	if ( $options['reg_users'] ) {
373	$options['count_roles'] = array_keys( get_editable_roles() );
374	}
375	unset( $options['reg_users'] );
376	}
377
378	if ( is_array( $options ) && ! empty( $options ) ) {
379	$new_options = array_merge( $defaults, $options );
380	} else { $new_options = $defaults;
381	}
382
383	$new_options['version'] = STATS_VERSION;
384
385	if ( ! stats_set_options( $new_options ) ) {
386	return false;
387	}
388
389	stats_update_blog();
390
391	return $new_options;
392	}
393
394	/**
395	* Stats Array.
396	*
397	* @access public
398	* @param mixed $kvs KVS.
399	* @return array
400	*/
401	function stats_array( $kvs ) {
402	/**
403	* Filter the options added to the JavaScript Stats tracking code.
404	*
405	* @module stats
406	*
407	* @since 1.1.0
408	*
409	* @param array $kvs Array of options about the site and page you're on.
410	*/
411	$kvs = apply_filters( 'stats_array', $kvs );
412	$kvs = array_map( 'addslashes', $kvs );
413	foreach ( $kvs as $k => $v ) {
414	$jskvs[] = "$k:'$v'";
415	}
416	return join( ',', $jskvs );
417	}
418
419	/**
420	* Admin Pages.
421	*
422	* @access public
423	* @return void
424	*/
425	function stats_admin_menu() {
426	global $pagenow;
427
428	// If we're at an old Stats URL, redirect to the new one.
429	// Don't even bother with caps, menu_page_url(), etc. Just do it.
430	if ( 'index.php' === $pagenow && isset( $_GET['page'] ) && 'stats' === $_GET['page'] ) {
431	$redirect_url = str_replace( array( '/wp-admin/index.php?', '/wp-admin/?' ), '/wp-admin/admin.php?', $_SERVER['REQUEST_URI'] );
432	$relative_pos = strpos( $redirect_url, '/wp-admin/' );
433	if ( false !== $relative_pos ) {
434	wp_safe_redirect( admin_url( substr( $redirect_url, $relative_pos + 10 ) ) );
435	exit;
436	}
437	}
438
439	$hook = add_submenu_page( 'jetpack', __( 'Site Stats', 'jetpack' ), __( 'Site Stats', 'jetpack' ), 'view_stats', 'stats', 'jetpack_admin_ui_stats_report_page_wrapper' );
440	add_action( "load-$hook", 'stats_reports_load' );
441	}
442
443	/**
444	* Stats Admin Path.
445	*
446	* @access public
447	* @return string
448	*/
449	function stats_admin_path() {
450	return Jetpack::module_configuration_url( __FILE__ );
451	}
452
453	/**
454	* Stats Reports Load.
455	*
456	* @access public
457	* @return void
458	*/
459	function stats_reports_load() {
460	wp_enqueue_script( 'jquery' );
461	wp_enqueue_script( 'postbox' );
462	wp_enqueue_script( 'underscore' );
463
464	Jetpack_Admin_Page::load_wrapper_styles();
465	add_action( 'admin_print_styles', 'stats_reports_css' );
466
467	if ( isset( $_GET['nojs'] ) && $_GET['nojs'] ) {
468	$parsed = parse_url( admin_url() );
469	// Remember user doesn't want JS.
470	setcookie( 'stnojs', '1', time() + 172800, $parsed['path'] ); // 2 days.
471	}
472
473	if ( isset( $_COOKIE['stnojs'] ) && $_COOKIE['stnojs'] ) {
474	// Detect if JS is on. If so, remove cookie so next page load is via JS.
475	add_action( 'admin_print_footer_scripts', 'stats_js_remove_stnojs_cookie' );
476	} else if ( ! isset( $_GET['noheader'] ) && empty( $_GET['nojs'] ) ) {
477	// Normal page load. Load page content via JS.
478	add_action( 'admin_print_footer_scripts', 'stats_js_load_page_via_ajax' );
479	}
480	}
481
482	/**
483	* Stats Reports CSS.
484	*
485	* @access public
486	* @return void
487	*/
488	function stats_reports_css() {
489	?>
490	<style type="text/css">
491	#jp-stats-wrap {
492	max-width: 1040px;
493	margin: 0 auto;
494	overflow: hidden;
495	}
496
497	#stats-loading-wrap p {
498	text-align: center;
499	font-size: 2em;
500	margin: 7.5em 15px 0 0;
501	height: 64px;
502	line-height: 64px;
503	}
504	</style>
505	<?php
506	}
507
508
509	/**
510	* Detect if JS is on. If so, remove cookie so next page load is via JS.
511	*
512	* @access public
513	* @return void
514	*/
515	function stats_js_remove_stnojs_cookie() {
516	$parsed = parse_url( admin_url() );
517	?>
518	<script type="text/javascript">
519	/* <![CDATA[ */
520	document.cookie = 'stnojs=0; expires=Wed, 9 Mar 2011 16:55:50 UTC; path=<?php echo esc_js( $parsed['path'] ); ?>';
521	/* ]]> */
522	</script>
523	<?php
524	}
525
526	/**
527	* Normal page load. Load page content via JS.
528	*
529	* @access public
530	* @return void
531	*/
532	function stats_js_load_page_via_ajax() {
533	?>
534	<script type="text/javascript">
535	/* <![CDATA[ */
536	if ( -1 == document.location.href.indexOf( 'noheader' ) ) {
537	jQuery( function( $ ) {
538	$.get( document.location.href + '&noheader', function( responseText ) {
539	$( '#stats-loading-wrap' ).replaceWith( responseText );
540	} );
541	} );
542	}
543	/* ]]> */
544	</script>
545	<?php
546	}
547
548	function jetpack_admin_ui_stats_report_page_wrapper() {
549	if( ! isset( $_GET['noheader'] ) && empty( $_GET['nojs'] ) && empty( $_COOKIE['stnojs'] ) ) {
550	Jetpack_Admin_Page::wrap_ui( 'stats_reports_page', array( 'is-wide' => true ) );
551	} else {
552	stats_reports_page();
553	}
554
555	}
556
557	/**
558	* Stats Report Page.
559	*
560	* @access public
561	* @param bool $main_chart_only (default: false) Main Chart Only.
562	*/
563	function stats_reports_page( $main_chart_only = false ) {
564
565	if ( isset( $_GET['dashboard'] ) ) {
566	return stats_dashboard_widget_content();
567	}
568
569	$blog_id = stats_get_option( 'blog_id' );
570	$domain = Jetpack::build_raw_urls( get_home_url() );
571
572	$jetpack_admin_url = admin_url() . 'admin.php?page=jetpack';
573
574	if ( ! $main_chart_only && ! isset( $_GET['noheader'] ) && empty( $_GET['nojs'] ) && empty( $_COOKIE['stnojs'] ) ) {
575	$nojs_url = add_query_arg( 'nojs', '1' );
576	$http = is_ssl() ? 'https' : 'http';
577	// Loading message. No JS fallback message.
578	?>
579
580	<div id="jp-stats-wrap">
581	<div class="wrap">
582	<h2><?php esc_html_e( 'Site Stats', 'jetpack' ); ?> <?php if ( current_user_can( 'jetpack_manage_modules' ) ) : ?><a style="font-size:13px;" href="<?php echo esc_url( admin_url( 'admin.php?page=jetpack&configure=stats' ) ); ?>"><?php esc_html_e( 'Configure', 'jetpack' ); ?></a><?php endif; ?></h2>
583	</div>
584	<div id="stats-loading-wrap" class="wrap">
585	<p class="hide-if-no-js"><img width="32" height="32" alt="<?php esc_attr_e( 'Loading…', 'jetpack' ); ?>" src="<?php
586	echo esc_url(
587	/**
588	* Sets external resource URL.
589	*
590	* @module stats
591	*
592	* @since 1.4.0
593	*
594	* @param string $args URL of external resource.
595	*/
596	apply_filters( 'jetpack_static_url', "{$http}://en.wordpress.com/i/loading/loading-64.gif" )
597	); ?>" /></p>
598	<p style="font-size: 11pt; margin: 0;"><a href="https://wordpress.com/stats/<?php echo esc_attr( $domain ); ?>" target="_blank"><?php esc_html_e( 'View stats on WordPress.com right now', 'jetpack' ); ?></a></p>
599	<p class="hide-if-js"><?php esc_html_e( 'Your Site Stats work better with JavaScript enabled.', 'jetpack' ); ?><br />
600	<a href="<?php echo esc_url( $nojs_url ); ?>"><?php esc_html_e( 'View Site Stats without JavaScript', 'jetpack' ); ?></a>.</p>
601	</div>
602	</div>
603	<?php
604	return;
605	}
606
607	$day = isset( $_GET['day'] ) && preg_match( '/^\d{4}-\d{2}-\d{2}$/', $_GET['day'] ) ? $_GET['day'] : false;
608	$q = array(
609	'noheader' => 'true',
610	'proxy' => '',
611	'page' => 'stats',
612	'day' => $day,
613	'blog' => $blog_id,
614	'charset' => get_option( 'blog_charset' ),
615	'color' => get_user_option( 'admin_color' ),
616	'ssl' => is_ssl(),
617	'j' => sprintf( '%s:%s', JETPACK__API_VERSION, JETPACK__VERSION ),
618	);
619	if ( get_locale() !== 'en_US' ) {
620	$q['jp_lang'] = get_locale();
621	}
622	// Only show the main chart, without extra header data, or metaboxes.
623	$q['main_chart_only'] = $main_chart_only;
624	$args = array(
625	'view' => array( 'referrers', 'postviews', 'searchterms', 'clicks', 'post', 'table' ),
626	'numdays' => 'int',
627	'day' => 'date',
628	'unit' => array( 1, 7, 31, 'human' ),
629	'humanize' => array( 'true' ),
630	'num' => 'int',
631	'summarize' => null,
632	'post' => 'int',
633	'width' => 'int',
634	'height' => 'int',
635	'data' => 'data',
636	'blog_subscribers' => 'int',
637	'comment_subscribers' => null,
638	'type' => array( 'wpcom', 'email', 'pending' ),
639	'pagenum' => 'int',
640	);
641	foreach ( $args as $var => $vals ) {
642	if ( ! isset( $_REQUEST[$var] ) )
643	continue;
644	if ( is_array( $vals ) ) {
645	if ( in_array( $_REQUEST[$var], $vals ) )
646	$q[$var] = $_REQUEST[$var];
647	} elseif ( 'int' === $vals ) {
648	$q[$var] = intval( $_REQUEST[$var] );
649	} elseif ( 'date' === $vals ) {
650	if ( preg_match( '/^\d{4}-\d{2}-\d{2}$/', $_REQUEST[$var] ) )
651	$q[$var] = $_REQUEST[$var];
652	} elseif ( null === $vals ) {
653	$q[$var] = '';
654	} elseif ( 'data' === $vals ) {
655	if ( 'index.php' === substr( $_REQUEST[$var], 0, 9 ) )
656	$q[$var] = $_REQUEST[$var];
657	}
658	}
659
660	if ( isset( $_GET['chart'] ) ) {
661	if ( preg_match( '/^[a-z0-9-]+$/', $_GET['chart'] ) ) {
662	$chart = sanitize_title( $_GET['chart'] );
663	$url = 'https://' . STATS_DASHBOARD_SERVER . "/wp-includes/charts/{$chart}.php";
664	}
665	} else {
666	$url = 'https://' . STATS_DASHBOARD_SERVER . "/wp-admin/index.php";
667	}
668
669	$url = add_query_arg( $q, $url );
670	$method = 'GET';
671	$timeout = 90;
672	$user_id = JETPACK_MASTER_USER; // means send the wp.com user_id
673
674	$get = Jetpack_Client::remote_request( compact( 'url', 'method', 'timeout', 'user_id' ) );
675	$get_code = wp_remote_retrieve_response_code( $get );
676	if ( is_wp_error( $get ) \|\| ( 2 !== intval( $get_code / 100 ) && 304 !== $get_code ) \|\| empty( $get['body'] ) ) {
677	stats_print_wp_remote_error( $get, $url );
678	} else {
679	if ( ! empty( $get['headers']['content-type'] ) ) {
680	$type = $get['headers']['content-type'];
681	if ( substr( $type, 0, 5 ) === 'image' ) {
682	$img = $get['body'];
683	header( 'Content-Type: ' . $type );
684	header( 'Content-Length: ' . strlen( $img ) );
685	echo $img;
686	die();
687	}
688	}
689	$body = stats_convert_post_titles( $get['body'] );
690	$body = stats_convert_chart_urls( $body );
691	$body = stats_convert_image_urls( $body );
692	$body = stats_convert_admin_urls( $body );
693	echo $body;
694	}
695
696	if ( isset( $_GET['page'] ) && 'stats' === $_GET['page'] && ! isset( $_GET['chart'] ) ) {
697	JetpackTracking::record_user_event( 'wpa_page_view', array( 'path' => 'old_stats' ) );
698	}
699
700	if ( isset( $_GET['noheader'] ) ) {
701	die;
702	}
703	}
704
705	/**
706	* Stats Convert Admin Urls.
707	*
708	* @access public
709	* @param mixed $html HTML.
710	* @return string
711	*/
712	function stats_convert_admin_urls( $html ) {
713	return str_replace( 'index.php?page=stats', 'admin.php?page=stats', $html );
714	}
715
716	/**
717	* Stats Convert Image URLs.
718	*
719	* @access public
720	* @param mixed $html HTML.
721	* @return string
722	*/
723	function stats_convert_image_urls( $html ) {
724	$url = set_url_scheme( 'https://' . STATS_DASHBOARD_SERVER );
725	$html = preg_replace( '\|(["\'])(/i/stats.+)\\1\|', '$1' . $url . '$2$1', $html );
726	return $html;
727	}
728
729	/**
730	* Callback for preg_replace_callback used in stats_convert_chart_urls()
731	*
732	* @since 5.6.0
733	*
734	* @param array $matches The matches resulting from the preg_replace_callback call.
735	* @return string The admin url for the chart.
736	*/
737	function jetpack_stats_convert_chart_urls_callback( $matches ) {
738	// If there is a query string, change the beginning '?' to a '&' so it fits into the middle of this query string.
739	return 'admin.php?page=stats&noheader&chart=' . $matches[1] . str_replace( '?', '&', $matches[2] );
740	}
741
742	/**
743	* Stats Convert Chart URLs.
744	*
745	* @access public
746	* @param mixed $html HTML.
747	* @return string
748	*/
749	function stats_convert_chart_urls( $html ) {
750	$html = preg_replace_callback(
751	'\|https?://[-.a-z0-9]+/wp-includes/charts/([-.a-z0-9]+).php(\??)\|',
752	'jetpack_stats_convert_chart_urls_callback',
753	$html
754	);
755	return $html;
756	}
757
758	/**
759	* Stats Convert Post Title HTML
760	*
761	* @access public
762	* @param mixed $html HTML.
763	* @return string
764	*/
765	function stats_convert_post_titles( $html ) {
766	global $stats_posts;
767	$pattern = "<span class='post-(\d+)-link'>.*?</span>";
768	if ( ! preg_match_all( "!$pattern!", $html, $matches ) ) {
769	return $html;
770	}
771	$posts = get_posts(
772	array(
773	'include' => implode( ',', $matches[1] ),
774	'post_type' => 'any',
775	'post_status' => 'any',
776	'numberposts' => -1,
777	'suppress_filters' => false,
778	)
779	);
780	foreach ( $posts as $post ) {
781	$stats_posts[ $post->ID ] = $post;
782	}
783	$html = preg_replace_callback( "!$pattern!", 'stats_convert_post_title', $html );
784	return $html;
785	}
786
787	/**
788	* Stats Convert Post Title Matches.
789	*
790	* @access public
791	* @param mixed $matches Matches.
792	* @return string
793	*/
794	function stats_convert_post_title( $matches ) {
795	global $stats_posts;
796	$post_id = $matches[1];
797	if ( isset( $stats_posts[$post_id] ) )
798	return '<a href="' . get_permalink( $post_id ) . '" target="_blank">' . get_the_title( $post_id ) . '</a>';
799	return $matches[0];
800	}
801
802	/**
803	* Stats Configuration Load.
804	*
805	* @access public
806	* @return void
807	*/
808	function stats_configuration_load() {
809	if ( isset( $_POST['action'] ) && 'save_options' === $_POST['action'] && $_POST['_wpnonce'] === wp_create_nonce( 'stats' ) ) {
810	$options = stats_get_options();
811	$options['admin_bar'] = isset( $_POST['admin_bar'] ) && $_POST['admin_bar'];
812	$options['hide_smile'] = isset( $_POST['hide_smile'] ) && $_POST['hide_smile'];
813
814	$options['roles'] = array( 'administrator' );
815	foreach ( get_editable_roles() as $role => $details ) {
816	if ( isset( $_POST["role_$role"] ) && $_POST["role_$role"] ) {
817	$options['roles'][] = $role;
818	}
819	}
820
821	$options['count_roles'] = array();
822	foreach ( get_editable_roles() as $role => $details ) {
823	if ( isset( $_POST["count_role_$role"] ) && $_POST["count_role_$role"] ) {
824	$options['count_roles'][] = $role;
825	}
826	}
827
828	stats_set_options( $options );
829	stats_update_blog();
830	Jetpack::state( 'message', 'module_configured' );
831	wp_safe_redirect( Jetpack::module_configuration_url( 'stats' ) );
832	exit;
833	}
834	}
835
836	/**
837	* Stats Configuration Head.
838	*
839	* @access public
840	* @return void
841	*/
842	function stats_configuration_head() {
843	?>
844	<style type="text/css">
845	#statserror {
846	border: 1px solid #766;
847	background-color: #d22;
848	padding: 1em 3em;
849	}
850	.stats-smiley {
851	vertical-align: 1px;
852	}
853	</style>
854	<?php
855	}
856
857	/**
858	* Stats Configuration Screen.
859	*
860	* @access public
861	* @return void
862	*/
863	function stats_configuration_screen() {
864	$options = stats_get_options();
865	?>
866	<div class="narrow">
867	<p><?php printf( __( 'Visit <a href="%s">Site Stats</a> to see your stats.', 'jetpack' ), esc_url( menu_page_url( 'stats', false ) ) ); ?></p>
868	<form method="post">
869	<input type='hidden' name='action' value='save_options' />
870	<?php wp_nonce_field( 'stats' ); ?>
871	<table id="menu" class="form-table">
872	<tr valign="top"><th scope="row"><label for="admin_bar"><?php esc_html_e( 'Admin bar' , 'jetpack' ); ?></label></th>
873	<td><label><input type='checkbox'<?php checked( $options['admin_bar'] ); ?> name='admin_bar' id='admin_bar' /> <?php esc_html_e( 'Put a chart showing 48 hours of views in the admin bar.', 'jetpack' ); ?></label></td></tr>
874	<tr valign="top"><th scope="row"><?php esc_html_e( 'Registered users', 'jetpack' ); ?></th>
875	<td>
876	<?php esc_html_e( "Count the page views of registered users who are logged in.", 'jetpack' ); ?><br/>
877	<?php
878	$count_roles = stats_get_option( 'count_roles' );
879	foreach ( get_editable_roles() as $role => $details ) {
880	?>
881	<label><input type='checkbox' name='count_role_<?php echo $role; ?>'<?php checked( in_array( $role, $count_roles ) ); ?> /> <?php echo translate_user_role( $details['name'] ); ?></label><br/>
882	<?php
883	}
884	?>
885	</td></tr>
886	<tr valign="top"><th scope="row"><?php esc_html_e( 'Smiley' , 'jetpack' ); ?></th>
887	<td><label><input type='checkbox'<?php checked( isset( $options['hide_smile'] ) && $options['hide_smile'] ); ?> name='hide_smile' id='hide_smile' /> <?php esc_html_e( 'Hide the stats smiley face image.', 'jetpack' ); ?></label><br /> <span class="description"><?php echo wp_kses( __( 'The image helps collect stats and <strong>makes the world a better place</strong> but should still work when hidden', 'jetpack' ), array( 'strong' => array() ) ); ?> <img class="stats-smiley" alt="<?php esc_attr_e( 'Smiley face', 'jetpack' ); ?>" src="<?php echo esc_url( plugins_url( 'images/stats-smiley.gif', dirname( __FILE__ ) ) ); ?>" width="6" height="5" /></span></td></tr>
888	<tr valign="top"><th scope="row"><?php esc_html_e( 'Report visibility' , 'jetpack' ); ?></th>
889	<td>
890	<?php esc_html_e( 'Select the roles that will be able to view stats reports.', 'jetpack' ); ?><br/>
891	<?php
892	$stats_roles = stats_get_option( 'roles' );
893	foreach ( get_editable_roles() as $role => $details ) {
894	?>
895	<label><input type='checkbox' <?php if ( 'administrator' === $role ) echo "disabled='disabled' "; ?>name='role_<?php echo $role; ?>'<?php checked( 'administrator' === $role \|\| in_array( $role, $stats_roles ) ); ?> /> <?php echo translate_user_role( $details['name'] ); ?></label><br/>
896	<?php
897	}
898	?>
899	</td></tr>
900	</table>
901	<p class="submit"><input type='submit' class='button-primary' value='<?php echo esc_attr( __( 'Save configuration', 'jetpack' ) ); ?>' /></p>
902	</form>
903	</div>
904	<?php
905	}
906
907	/**
908	* Stats Hide Smile.
909	*
910	* @access public
911	* @return void
912	*/
913	function stats_hide_smile_css() {
914	$options = stats_get_options();
915	if ( isset( $options['hide_smile'] ) && $options['hide_smile'] ) {
916	?>
917	<style type='text/css'>img#wpstats{display:none}</style><?php
918	}
919	}
920
921	/**
922	* Stats Admin Bar Head.
923	*
924	* @access public
925	* @return void
926	*/
927	function stats_admin_bar_head() {
928	if ( ! stats_get_option( 'admin_bar' ) )
929	return;
930
931	if ( ! current_user_can( 'view_stats' ) )
932	return;
933
934	if ( function_exists( 'is_admin_bar_showing' ) && ! is_admin_bar_showing() ) {
935	return;
936	}
937
938	add_action( 'admin_bar_menu', 'stats_admin_bar_menu', 100 );
939	?>
940
941	<style type='text/css'>
942	#wpadminbar .quicklinks li#wp-admin-bar-stats {
943	height: 32px;
944	}
945	#wpadminbar .quicklinks li#wp-admin-bar-stats a {
946	height: 32px;
947	padding: 0;
948	}
949	#wpadminbar .quicklinks li#wp-admin-bar-stats a div {
950	height: 32px;
951	width: 95px;
952	overflow: hidden;
953	margin: 0 10px;
954	}
955	#wpadminbar .quicklinks li#wp-admin-bar-stats a:hover div {
956	width: auto;
957	margin: 0 8px 0 10px;
958	}
959	#wpadminbar .quicklinks li#wp-admin-bar-stats a img {
960	height: 24px;
961	margin: 4px 0;
962	max-width: none;
963	border: none;
964	}
965	</style>
966	<?php
967	}
968
969	/**
970	* Stats AdminBar.
971	*
972	* @access public
973	* @param mixed $wp_admin_bar WPAdminBar.
974	* @return void
975	*/
976	function stats_admin_bar_menu( &$wp_admin_bar ) {
977	$url = add_query_arg( 'page', 'stats', admin_url( 'admin.php' ) ); // no menu_page_url() blog-side.
978
979	$img_src = esc_attr( add_query_arg( array( 'noheader' => '', 'proxy' => '', 'chart' => 'admin-bar-hours-scale' ), $url ) );
980	$img_src_2x = esc_attr( add_query_arg( array( 'noheader' => '', 'proxy' => '', 'chart' => 'admin-bar-hours-scale-2x' ), $url ) );
981
982	$alt = esc_attr( __( 'Stats', 'jetpack' ) );
983
984	$title = esc_attr( __( 'Views over 48 hours. Click for more Site Stats.', 'jetpack' ) );
985
986	$menu = array(
987	'id' => 'stats',
988	'href' => $url,
989	);
990	if ( Jetpack_AMP_Support::is_amp_request() ) {
991	$menu['title'] = "<amp-img src='$img_src_2x' width=112 height=24 layout=fixed alt='$alt' title='$title'></amp-img>";
992	} else {
993	$menu['title'] = "<div><script type='text/javascript'>var src;if(typeof(window.devicePixelRatio)=='undefined'\|\|window.devicePixelRatio<2){src='$img_src';}else{src='$img_src_2x';}document.write('<img src=\''+src+'\' alt=\'$alt\' title=\'$title\' />');</script></div>";
994	}
995
996	$wp_admin_bar->add_menu( $menu );
997	}
998
999	/**
1000	* Stats Update Blog.
1001	*
1002	* @access public
1003	* @return void
1004	*/
1005	function stats_update_blog() {
1006	Jetpack::xmlrpc_async_call( 'jetpack.updateBlog', stats_get_blog() );
1007	}
1008
1009	/**
1010	* Stats Get Blog.
1011	*
1012	* @access public
1013	* @return string
1014	*/
1015	function stats_get_blog() {
1016	$home = parse_url( trailingslashit( get_option( 'home' ) ) );
1017	$blog = array(
1018	'host' => $home['host'],
1019	'path' => $home['path'],
1020	'blogname' => get_option( 'blogname' ),
1021	'blogdescription' => get_option( 'blogdescription' ),
1022	'siteurl' => get_option( 'siteurl' ),
1023	'gmt_offset' => get_option( 'gmt_offset' ),
1024	'timezone_string' => get_option( 'timezone_string' ),
1025	'stats_version' => STATS_VERSION,
1026	'stats_api' => 'jetpack',
1027	'page_on_front' => get_option( 'page_on_front' ),
1028	'permalink_structure' => get_option( 'permalink_structure' ),
1029	'category_base' => get_option( 'category_base' ),
1030	'tag_base' => get_option( 'tag_base' ),
1031	);
1032	$blog = array_merge( stats_get_options(), $blog );
1033	unset( $blog['roles'], $blog['blog_id'] );
1034	return stats_esc_html_deep( $blog );
1035	}
1036
1037	/**
1038	* Modified from stripslashes_deep()
1039	*
1040	* @access public
1041	* @param mixed $value Value.
1042	* @return string
1043	*/
1044	function stats_esc_html_deep( $value ) {
1045	if ( is_array( $value ) ) {
1046	$value = array_map( 'stats_esc_html_deep', $value );
1047	} elseif ( is_object( $value ) ) {
1048	$vars = get_object_vars( $value );
1049	foreach ( $vars as $key => $data ) {
1050	$value->{$key} = stats_esc_html_deep( $data );
1051	}
1052	} elseif ( is_string( $value ) ) {
1053	$value = esc_html( $value );
1054	}
1055
1056	return $value;
1057	}
1058
1059	/**
1060	* Stats xmlrpc_methods function.
1061	*
1062	* @access public
1063	* @param mixed $methods Methods.
1064	* @return array
1065	*/
1066	function stats_xmlrpc_methods( $methods ) {
1067	$my_methods = array(
1068	'jetpack.getBlog' => 'stats_get_blog',
1069	);
1070
1071	return array_merge( $methods, $my_methods );
1072	}
1073
1074	/**
1075	* Register Stats Dashboard Widget.
1076	*
1077	* @access public
1078	* @return void
1079	*/
1080	function stats_register_dashboard_widget() {
1081	if ( ! current_user_can( 'view_stats' ) )
1082	return;
1083
1084	// With wp_dashboard_empty: we load in the content after the page load via JS.
1085	wp_add_dashboard_widget( 'dashboard_stats', __( 'Site Stats', 'jetpack' ), 'wp_dashboard_empty', 'stats_dashboard_widget_control' );
1086
1087	add_action( 'admin_head', 'stats_dashboard_head' );
1088	}
1089
1090	/**
1091	* Stats Dashboard Widget Options.
1092	*
1093	* @access public
1094	* @return array
1095	*/
1096	function stats_dashboard_widget_options() {
1097	$defaults = array( 'chart' => 1, 'top' => 1, 'search' => 7 );
1098	if ( ( ! $options = get_option( 'stats_dashboard_widget' ) ) \|\| ! is_array( $options ) ) {
1099	$options = array();
1100	}
1101
1102	// Ignore obsolete option values.
1103	$intervals = array( 1, 7, 31, 90, 365 );
1104	foreach ( array( 'top', 'search' ) as $key ) {
1105	if ( isset( $options[ $key ] ) && ! in_array( $options[ $key ], $intervals ) ) {
1106	unset( $options[ $key ] );
1107	}
1108	}
1109
1110	return array_merge( $defaults, $options );
1111	}
1112
1113	/**
1114	* Stats Dashboard Widget Control.
1115	*
1116	* @access public
1117	* @return void
1118	*/
1119	function stats_dashboard_widget_control() {
1120	$periods = array(
1121	'1' => __( 'day', 'jetpack' ),
1122	'7' => __( 'week', 'jetpack' ),
1123	'31' => __( 'month', 'jetpack' ),
1124	);
1125	$intervals = array(
1126	'1' => __( 'the past day', 'jetpack' ),
1127	'7' => __( 'the past week', 'jetpack' ),
1128	'31' => __( 'the past month', 'jetpack' ),
1129	'90' => __( 'the past quarter', 'jetpack' ),
1130	'365' => __( 'the past year', 'jetpack' ),
1131	);
1132	$defaults = array(
1133	'top' => 1,
1134	'search' => 7,
1135	);
1136
1137	$options = stats_dashboard_widget_options();
1138
1139	if ( 'post' === strtolower( $_SERVER['REQUEST_METHOD'] ) && isset( $_POST['widget_id'] ) && 'dashboard_stats' === $_POST['widget_id'] ) {
1140	if ( isset( $periods[ $_POST['chart'] ] ) ) {
1141	$options['chart'] = $_POST['chart'];
1142	}
1143	foreach ( array( 'top', 'search' ) as $key ) {
1144	if ( isset( $intervals[ $_POST[ $key ] ] ) ) {
1145	$options[ $key ] = $_POST[ $key ];
1146	} else { $options[ $key ] = $defaults[ $key ];
1147	}
1148	}
1149	update_option( 'stats_dashboard_widget', $options );
1150	}
1151	?>
1152	<p>
1153	<label for="chart"><?php esc_html_e( 'Chart stats by' , 'jetpack' ); ?></label>
1154	<select id="chart" name="chart">
1155	<?php
1156	foreach ( $periods as $val => $label ) {
1157	?>
1158	<option value="<?php echo $val; ?>"<?php selected( $val, $options['chart'] ); ?>><?php echo esc_html( $label ); ?></option>
1159	<?php
1160	}
1161	?>
1162	</select>.
1163	</p>
1164
1165	<p>
1166	<label for="top"><?php esc_html_e( 'Show top posts over', 'jetpack' ); ?></label>
1167	<select id="top" name="top">
1168	<?php
1169	foreach ( $intervals as $val => $label ) {
1170	?>
1171	<option value="<?php echo $val; ?>"<?php selected( $val, $options['top'] ); ?>><?php echo esc_html( $label ); ?></option>
1172	<?php
1173	}
1174	?>
1175	</select>.
1176	</p>
1177
1178	<p>
1179	<label for="search"><?php esc_html_e( 'Show top search terms over', 'jetpack' ); ?></label>
1180	<select id="search" name="search">
1181	<?php
1182	foreach ( $intervals as $val => $label ) {
1183	?>
1184	<option value="<?php echo $val; ?>"<?php selected( $val, $options['search'] ); ?>><?php echo esc_html( $label ); ?></option>
1185	<?php
1186	}
1187	?>
1188	</select>.
1189	</p>
1190	<?php
1191	}
1192
1193	/**
1194	* Jetpack Stats Dashboard Widget.
1195	*
1196	* @access public
1197	* @return void
1198	*/
1199	function stats_jetpack_dashboard_widget() {
1200	?>
1201	<form id="stats_dashboard_widget_control" action="<?php echo esc_url( admin_url() ); ?>" method="post">
1202	<?php stats_dashboard_widget_control(); ?>
1203	<?php wp_nonce_field( 'edit-dashboard-widget_dashboard_stats', 'dashboard-widget-nonce' ); ?>
1204	<input type="hidden" name="widget_id" value="dashboard_stats" />
1205	<?php submit_button( __( 'Submit', 'jetpack' ) ); ?>
1206	</form>
1207	<span class="js-toggle-stats_dashboard_widget_control">
1208	<?php esc_html_e( 'Configure', 'jetpack' ); ?>
1209	</span>
1210	<div id="dashboard_stats">
1211	<div class="inside">
1212	<div style="height: 250px;"></div>
1213	</div>
1214	</div>
1215	<script>
1216	jQuery(document).ready(function($){
1217	var $toggle = $('.js-toggle-stats_dashboard_widget_control');
1218
1219	$toggle.parent().prev().append( $toggle );
1220	$toggle.show().click(function(e){
1221	e.preventDefault();
1222	e.stopImmediatePropagation();
1223	$(this).parent().toggleClass('controlVisible');
1224	$('#stats_dashboard_widget_control').slideToggle();
1225	});
1226	});
1227	</script>
1228	<style>
1229	.js-toggle-stats_dashboard_widget_control {
1230	display: none;
1231	float: right;
1232	margin-top: 0.2em;
1233	font-weight: 400;
1234	color: #444;
1235	font-size: .8em;
1236	text-decoration: underline;
1237	cursor: pointer;
1238	}
1239	#stats_dashboard_widget_control {
1240	display: none;
1241	padding: 0 10px;
1242	overflow: hidden;
1243	}
1244	#stats_dashboard_widget_control .button-primary {
1245	float: right;
1246	}
1247	#dashboard_stats {
1248	box-sizing: border-box;
1249	width: 100%;
1250	padding: 0 10px;
1251	}
1252	</style>
1253	<?php
1254	}
1255
1256	/**
1257	* Register Stats Widget Control Callback.
1258	*
1259	* @access public
1260	* @return void
1261	*/
1262	function stats_register_widget_control_callback() {
1263	$GLOBALS['wp_dashboard_control_callbacks']['dashboard_stats'] = 'stats_dashboard_widget_control';
1264	}
1265
1266	/**
1267	* JavaScript and CSS for dashboard widget.
1268	*
1269	* @access public
1270	* @return void
1271	*/
1272	function stats_dashboard_head() { ?>
1273	<script type="text/javascript">
1274	/* <![CDATA[ */
1275	jQuery( function($) {
1276	var dashStats = jQuery( '#dashboard_stats div.inside' );
1277
1278	if ( dashStats.find( '.dashboard-widget-control-form' ).length ) {
1279	return;
1280	}
1281
1282	if ( ! dashStats.length ) {
1283	dashStats = jQuery( '#dashboard_stats div.dashboard-widget-content' );
1284	var h = parseInt( dashStats.parent().height() ) - parseInt( dashStats.prev().height() );
1285	var args = 'width=' + dashStats.width() + '&height=' + h.toString();
1286	} else {
1287	if ( jQuery('#dashboard_stats' ).hasClass('postbox') ) {
1288	var args = 'width=' + ( dashStats.prev().width() * 2 ).toString();
1289	} else {
1290	var args = 'width=' + ( dashStats.width() * 2 ).toString();
1291	}
1292	}
1293
1294	dashStats
1295	.not( '.dashboard-widget-control' )
1296	.load( 'admin.php?page=stats&noheader&dashboard&' + args );
1297
1298	jQuery( window ).one( 'resize', function() {
1299	jQuery( '#stat-chart' ).css( 'width', 'auto' );
1300	} );
1301	} );
1302	/* ]]> */
1303	</script>
1304	<style type="text/css">
1305	/* <![CDATA[ */
1306	#stat-chart {
1307	background: none !important;
1308	}
1309	#dashboard_stats .inside {
1310	margin: 10px 0 0 0 !important;
1311	}
1312	#dashboard_stats #stats-graph {
1313	margin: 0;
1314	}
1315	#stats-info {
1316	border-top: 1px solid #dfdfdf;
1317	margin: 7px -10px 0 -10px;
1318	padding: 10px;
1319	background: #fcfcfc;
1320	-moz-box-shadow:inset 0 1px 0 #fff;
1321	-webkit-box-shadow:inset 0 1px 0 #fff;
1322	box-shadow:inset 0 1px 0 #fff;
1323	overflow: hidden;
1324	border-radius: 0 0 2px 2px;
1325	-webkit-border-radius: 0 0 2px 2px;
1326	-moz-border-radius: 0 0 2px 2px;
1327	-khtml-border-radius: 0 0 2px 2px;
1328	}
1329	#stats-info #top-posts, #stats-info #top-search {
1330	float: left;
1331	width: 50%;
1332	}
1333	#stats-info #top-posts {
1334	padding-right: 3%;
1335	}
1336	#top-posts .stats-section-inner p {
1337	white-space: nowrap;
1338	overflow: hidden;
1339	}
1340	#top-posts .stats-section-inner p a {
1341	overflow: hidden;
1342	text-overflow: ellipsis;
1343	}
1344	#stats-info div#active {
1345	border-top: 1px solid #dfdfdf;
1346	margin: 0 -10px;
1347	padding: 10px 10px 0 10px;
1348	-moz-box-shadow:inset 0 1px 0 #fff;
1349	-webkit-box-shadow:inset 0 1px 0 #fff;
1350	box-shadow:inset 0 1px 0 #fff;
1351	overflow: hidden;
1352	}
1353	#top-search p {
1354	color: #999;
1355	}
1356	#stats-info h3 {
1357	font-size: 1em;
1358	margin: 0 0 .5em 0 !important;
1359	}
1360	#stats-info p {
1361	margin: 0 0 .25em;
1362	color: #999;
1363	}
1364	#stats-info p.widget-loading {
1365	margin: 1em 0 0;
1366	color: #333;
1367	}
1368	#stats-info p a {
1369	display: block;
1370	}
1371	#stats-info p a.button {
1372	display: inline;
1373	}
1374	/* ]]> */
1375	</style>
1376	<?php
1377	}
1378
1379	/**
1380	* Stats Dashboard Widget Content.
1381	*
1382	* @access public
1383	* @return void
1384	*/
1385	function stats_dashboard_widget_content() {
1386	if ( ! isset( $_GET['width'] ) \|\| ( ! $width = (int) ( $_GET['width'] / 2 ) ) \|\| $width < 250 ) {
1387	$width = 370;
1388	}
1389	if ( ! isset( $_GET['height'] ) \|\| ( ! $height = (int) $_GET['height'] - 36 ) \|\| $height < 230 ) {
1390	$height = 180;
1391	}
1392
1393	$_width = $width - 5;
1394	$_height = $height - ( $GLOBALS['is_winIE'] ? 16 : 5 ); // Hack!
1395
1396	$options = stats_dashboard_widget_options();
1397	$blog_id = Jetpack_Options::get_option( 'id' );
1398
1399	$q = array(
1400	'noheader' => 'true',
1401	'proxy' => '',
1402	'blog' => $blog_id,
1403	'page' => 'stats',
1404	'chart' => '',
1405	'unit' => $options['chart'],
1406	'color' => get_user_option( 'admin_color' ),
1407	'width' => $_width,
1408	'height' => $_height,
1409	'ssl' => is_ssl(),
1410	'j' => sprintf( '%s:%s', JETPACK__API_VERSION, JETPACK__VERSION ),
1411	);
1412
1413	$url = 'https://' . STATS_DASHBOARD_SERVER . "/wp-admin/index.php";
1414
1415	$url = add_query_arg( $q, $url );
1416	$method = 'GET';
1417	$timeout = 90;
1418	$user_id = JETPACK_MASTER_USER;
1419
1420	$get = Jetpack_Client::remote_request( compact( 'url', 'method', 'timeout', 'user_id' ) );
1421	$get_code = wp_remote_retrieve_response_code( $get );
1422	if ( is_wp_error( $get ) \|\| ( 2 !== intval( $get_code / 100 ) && 304 !== $get_code ) \|\| empty( $get['body'] ) ) {
1423	stats_print_wp_remote_error( $get, $url );
1424	} else {
1425	$body = stats_convert_post_titles( $get['body'] );
1426	$body = stats_convert_chart_urls( $body );
1427	$body = stats_convert_image_urls( $body );
1428	echo $body;
1429	}
1430
1431	$post_ids = array();
1432
1433	$csv_end_date = date( 'Y-m-d', current_time( 'timestamp' ) );
1434	$csv_args = array( 'top' => "&limit=8&end=$csv_end_date", 'search' => "&limit=5&end=$csv_end_date" );
1435	/* Translators: Stats dashboard widget postviews list: "$post_title $views Views". */
1436	$printf = __( '%1$s %2$s Views' , 'jetpack' );
1437
1438	foreach ( $top_posts = stats_get_csv( 'postviews', "days=$options[top]$csv_args[top]" ) as $i => $post ) {
1439	if ( 0 === $post['post_id'] ) {
1440	unset( $top_posts[$i] );
1441	continue;
1442	}
1443	$post_ids[] = $post['post_id'];
1444	}
1445
1446	// Cache.
1447	get_posts( array( 'include' => join( ',', array_unique( $post_ids ) ) ) );
1448
1449	$searches = array();
1450	foreach ( $search_terms = stats_get_csv( 'searchterms', "days=$options[search]$csv_args[search]" ) as $search_term ) {
1451	if ( 'encrypted_search_terms' === $search_term['searchterm'] ) {
1452	continue;
1453	}
1454	$searches[] = esc_html( $search_term['searchterm'] );
1455	}
1456
1457	?>
1458	<div id="stats-info">
1459	<div id="top-posts" class='stats-section'>
1460	<div class="stats-section-inner">
1461	<h3 class="heading"><?php esc_html_e( 'Top Posts' , 'jetpack' ); ?></h3>
1462	<?php
1463	if ( empty( $top_posts ) ) {
1464	?>
1465	<p class="nothing"><?php esc_html_e( 'Sorry, nothing to report.', 'jetpack' ); ?></p>
1466	<?php
1467	} else {
1468	foreach ( $top_posts as $post ) {
1469	if ( ! get_post( $post['post_id'] ) ) {
1470	continue;
1471	}
1472	?>
1473	<p><?php printf(
1474	$printf,
1475	'<a href="' . get_permalink( $post['post_id'] ) . '">' . get_the_title( $post['post_id'] ) . '</a>',
1476	number_format_i18n( $post['views'] )
1477	); ?></p>
1478	<?php
1479	}
1480	}
1481	?>
1482	</div>
1483	</div>
1484	<div id="top-search" class='stats-section'>
1485	<div class="stats-section-inner">
1486	<h3 class="heading"><?php esc_html_e( 'Top Searches' , 'jetpack' ); ?></h3>
1487	<?php
1488	if ( empty( $searches ) ) {
1489	?>
1490	<p class="nothing"><?php esc_html_e( 'Sorry, nothing to report.', 'jetpack' ); ?></p>
1491	<?php
1492	} else {
1493	foreach ( $searches as $search_term_item ) {
1494	printf(
1495	'<p>%s</p>',
1496	$search_term_item
1497	);
1498	}
1499	}
1500	?>
1501	</div>
1502	</div>
1503	</div>
1504	<div class="clear"></div>
1505	<div class="stats-view-all">
1506	<?php
1507	printf(
1508	'<a class="button" target="_blank" rel="noopener noreferrer" href="%1$s">%2$s</a>',
1509	esc_url( "https://wordpress.com/stats/day/" . Jetpack::build_raw_urls( get_home_url() ) ),
1510	esc_html__( 'View all stats', 'jetpack' )
1511	);
1512	?>
1513	</div>
1514	<div class="clear"></div>
1515	<?php
1516	exit;
1517	}
1518
1519	/**
1520	* Stats Print WP Remote Error.
1521	*
1522	* @access public
1523	* @param mixed $get Get.
1524	* @param mixed $url URL.
1525	* @return void
1526	*/
1527	function stats_print_wp_remote_error( $get, $url ) {
1528	$state_name = 'stats_remote_error_' . substr( md5( $url ), 0, 8 );
1529	$previous_error = Jetpack::state( $state_name );
1530	$error = md5( serialize( compact( 'get', 'url' ) ) );
1531	Jetpack::state( $state_name, $error );
1532	if ( $error !== $previous_error ) {
1533	?>
1534	<div class="wrap">
1535	<p><?php esc_html_e( 'We were unable to get your stats just now. Please reload this page to try again.', 'jetpack' ); ?></p>
1536	</div>
1537	<?php
1538	return;
1539	}
1540	?>
1541	<div class="wrap">
1542	<p><?php printf( __( 'We were unable to get your stats just now. Please reload this page to try again. If this error persists, please <a href="%1$s" target="_blank">contact support</a>. In your report please include the information below.', 'jetpack' ), 'https://support.wordpress.com/contact/?jetpack=needs-service' ); ?></p>
1543	<pre>
1544	User Agent: "<?php echo esc_html( $_SERVER['HTTP_USER_AGENT'] ); ?>"
1545	Page URL: "http<?php echo (is_ssl()?'s':'') . '://' . esc_html( $_SERVER['HTTP_HOST'] . $_SERVER['REQUEST_URI'] ); ?>"
1546	API URL: "<?php echo esc_url( $url ); ?>"
1547	<?php
1548	if ( is_wp_error( $get ) ) {
1549	foreach ( $get->get_error_codes() as $code ) {
1550	foreach ( $get->get_error_messages( $code ) as $message ) {
1551	?>
1552	<?php print $code . ': "' . $message . '"' ?>
1553
1554	<?php
1555	}
1556	}
1557	} else {
1558	$get_code = wp_remote_retrieve_response_code( $get );
1559	$content_length = strlen( wp_remote_retrieve_body( $get ) );
1560	?>
1561	Response code: "<?php print $get_code ?>"
1562	Content length: "<?php print $content_length ?>"
1563
1564	<?php
1565	}
1566	?></pre>
1567	</div>
1568	<?php
1569	}
1570
1571	/**
1572	* Get stats from WordPress.com
1573	*
1574	* @param string $table The stats which you want to retrieve: postviews, or searchterms.
1575	* @param array $args {
1576	* An associative array of arguments.
1577	*
1578	* @type bool $end The last day of the desired time frame. Format is 'Y-m-d' (e.g. 2007-05-01)
1579	* and default timezone is UTC date. Default value is Now.
1580	* @type string $days The length of the desired time frame. Default is 30. Maximum 90 days.
1581	* @type int $limit The maximum number of records to return. Default is 10. Maximum 100.
1582	* @type int $post_id The ID of the post to retrieve stats data for
1583	* @type string $summarize If present, summarizes all matching records. Default Null.
1584	*
1585	* }
1586	*
1587	* @return array {
1588	* An array of post view data, each post as an array
1589	*
1590	* array {
1591	* The post view data for a single post
1592	*
1593	* @type string $post_id The ID of the post
1594	* @type string $post_title The title of the post
1595	* @type string $post_permalink The permalink for the post
1596	* @type string $views The number of views for the post within the $num_days specified
1597	* }
1598	* }
1599	*/
1600	function stats_get_csv( $table, $args = null ) {
1601	$defaults = array( 'end' => false, 'days' => false, 'limit' => 3, 'post_id' => false, 'summarize' => '' );
1602
1603	$args = wp_parse_args( $args, $defaults );
1604	$args['table'] = $table;
1605	$args['blog_id'] = Jetpack_Options::get_option( 'id' );
1606
1607	$stats_csv_url = add_query_arg( $args, 'https://stats.wordpress.com/csv.php' );
1608
1609	$key = md5( $stats_csv_url );
1610
1611	// Get cache.
1612	$stats_cache = get_option( 'stats_cache' );
1613	if ( ! $stats_cache \|\| ! is_array( $stats_cache ) ) {
1614	$stats_cache = array();
1615	}
1616
1617	// Return or expire this key.
1618	if ( isset( $stats_cache[ $key ] ) ) {
1619	$time = key( $stats_cache[ $key ] );
1620	if ( time() - $time < 300 ) {
1621	return $stats_cache[ $key ][ $time ];
1622	}
1623	unset( $stats_cache[ $key ] );
1624	}
1625
1626	$stats_rows = array();
1627	do {
1628	if ( ! $stats = stats_get_remote_csv( $stats_csv_url ) ) {
1629	break;
1630	}
1631
1632	$labels = array_shift( $stats );
1633
1634	if ( 0 === stripos( $labels[0], 'error' ) ) {
1635	break;
1636	}
1637
1638	$stats_rows = array();
1639	for ( $s = 0; isset( $stats[ $s ] ); $s++ ) {
1640	$row = array();
1641	foreach ( $labels as $col => $label ) {
1642	$row[ $label ] = $stats[ $s ][ $col ];
1643	}
1644	$stats_rows[] = $row;
1645	}
1646	} while ( 0 );
1647
1648	// Expire old keys.
1649	foreach ( $stats_cache as $k => $cache ) {
1650	if ( ! is_array( $cache ) \|\| 300 < time() - key( $cache ) ) {
1651	unset( $stats_cache[ $k ] );
1652	}
1653	}
1654
1655	// Set cache.
1656	$stats_cache[ $key ] = array( time() => $stats_rows );
1657	update_option( 'stats_cache', $stats_cache );
1658
1659	return $stats_rows;
1660	}
1661
1662	/**
1663	* Stats get remote CSV.
1664	*
1665	* @access public
1666	* @param mixed $url URL.
1667	* @return array
1668	*/
1669	function stats_get_remote_csv( $url ) {
1670	$method = 'GET';
1671	$timeout = 90;
1672	$user_id = JETPACK_MASTER_USER;
1673
1674	$get = Jetpack_Client::remote_request( compact( 'url', 'method', 'timeout', 'user_id' ) );
1675	$get_code = wp_remote_retrieve_response_code( $get );
1676	if ( is_wp_error( $get ) \|\| ( 2 !== intval( $get_code / 100 ) && 304 !== $get_code ) \|\| empty( $get['body'] ) ) {
1677	return array(); // @todo: return an error?
1678	} else {
1679	return stats_str_getcsv( $get['body'] );
1680	}
1681	}
1682
1683	/**
1684	* Rather than parsing the csv and its special cases, we create a new file and do fgetcsv on it.
1685	*
1686	* @access public
1687	* @param mixed $csv CSV.
1688	* @return array.
1689	*/
1690	function stats_str_getcsv( $csv ) {
1691	if ( function_exists( 'str_getcsv' ) ) {
1692	$lines = str_getcsv( $csv, "\n" ); // phpcs:ignore PHPCompatibility.PHP.NewFunctions.str_getcsvFound
1693	return array_map( 'str_getcsv', $lines );
1694	}
1695	if ( ! $temp = tmpfile() ) { // The tmpfile() automatically unlinks.
1696	return false;
1697	}
1698
1699	$data = array();
1700
1701	fwrite( $temp, $csv, strlen( $csv ) );
1702	fseek( $temp, 0 );
1703	while ( false !== $row = fgetcsv( $temp, 2000 ) ) {
1704	$data[] = $row;
1705	}
1706	fclose( $temp );
1707
1708	return $data;
1709	}
1710
1711	/**
1712	* Abstract out building the rest api stats path.
1713	*
1714	* @param string $resource Resource.
1715	* @return string
1716	*/
1717	function jetpack_stats_api_path( $resource = '' ) {
1718	$resource = ltrim( $resource, '/' );
1719	return sprintf( '/sites/%d/stats/%s', stats_get_option( 'blog_id' ), $resource );
1720	}
1721
1722	/**
1723	* Fetches stats data from the REST API. Caches locally for 5 minutes.
1724	*
1725	* @link: https://developer.wordpress.com/docs/api/1.1/get/sites/%24site/stats/
1726	* @access public
1727	* @param array $args (default: array()) The args that are passed to the endpoint.
1728	* @param string $resource (default: '') Optional sub-endpoint following /stats/.
1729	* @return array\|WP_Error.
1730	*/
1731	function stats_get_from_restapi( $args = array(), $resource = '' ) {
1732	$endpoint = jetpack_stats_api_path( $resource );
1733	$api_version = '1.1';
1734	$args = wp_parse_args( $args, array() );
1735	$cache_key = md5( implode( '\|', array( $endpoint, $api_version, serialize( $args ) ) ) );
1736
1737	// Get cache.
1738	$stats_cache = Jetpack_Options::get_option( 'restapi_stats_cache', array() );
1739	if ( ! is_array( $stats_cache ) ) {
1740	$stats_cache = array();
1741	}
1742
1743	// Return or expire this key.
1744	if ( isset( $stats_cache[ $cache_key ] ) ) {
1745	$time = key( $stats_cache[ $cache_key ] );
1746	if ( time() - $time < ( 5 * MINUTE_IN_SECONDS ) ) {
1747	$cached_stats = $stats_cache[ $cache_key ][ $time ];
1748	$cached_stats = (object) array_merge( array( 'cached_at' => $time ), (array) $cached_stats );
1749	return $cached_stats;
1750	}
1751	unset( $stats_cache[ $cache_key ] );
1752	}
1753
1754	// Do the dirty work.
1755	$response = Jetpack_Client::wpcom_json_api_request_as_blog( $endpoint, $api_version, $args );
1756	if ( 200 !== wp_remote_retrieve_response_code( $response ) ) {
1757	$data = array();
1758	} else {
1759	$data = json_decode( wp_remote_retrieve_body( $response ) );
1760	}
1761
1762	// Expire old keys.
1763	foreach ( $stats_cache as $k => $cache ) {
1764	if ( ! is_array( $cache ) \|\| ( 5 * MINUTE_IN_SECONDS ) < time() - key( $cache ) ) {
1765	unset( $stats_cache[ $k ] );
1766	}
1767	}
1768
1769	// Set cache.
1770	$stats_cache[ $cache_key ] = array(
1771	time() => $data,
1772	);
1773	Jetpack_Options::update_option( 'restapi_stats_cache', $stats_cache, false );
1774
1775	return $data;
1776	}
1777
1778	/**
1779	* Load CSS needed for Stats column width in WP-Admin area.
1780	*
1781	* @since 4.7.0
1782	*/
1783	function jetpack_stats_load_admin_css() {
1784	?>
1785	<style type="text/css">
1786	.fixed .column-stats {
1787	width: 5em;
1788	}
1789	</style>
1790	<?php
1791	}
1792
1793	/**
1794	* Set header for column that allows to go to WordPress.com to see an entry's stats.
1795	*
1796	* @param array $columns An array of column names.
1797	*
1798	* @since 4.7.0
1799	*
1800	* @return mixed
1801	*/
1802	function jetpack_stats_post_table( $columns ) { // Adds a stats link on the edit posts page
1803	if ( ! current_user_can( 'view_stats' ) \|\| ! Jetpack::is_user_connected() ) {
1804	return $columns;
1805	}
1806	// Array-Fu to add before comments
1807	$pos = array_search( 'comments', array_keys( $columns ) );
1808	if ( ! is_int( $pos ) ) {
1809	return $columns;
1810	}
1811	$chunks = array_chunk( $columns, $pos, true );
1812	$chunks[0]['stats'] = esc_html__( 'Stats', 'jetpack' );
1813
1814	return call_user_func_array( 'array_merge', $chunks );
1815	}
1816
1817	/**
1818	* Set content for cell with link to an entry's stats in WordPress.com.
1819	*
1820	* @param string $column The name of the column to display.
1821	* @param int $post_id The current post ID.
1822	*
1823	* @since 4.7.0
1824	*
1825	* @return mixed
1826	*/
1827	function jetpack_stats_post_table_cell( $column, $post_id ) {
1828	if ( 'stats' == $column ) {
1829	if ( 'publish' != get_post_status( $post_id ) ) {
1830	printf(
1831	'<span aria-hidden="true">—</span><span class="screen-reader-text">%s</span>',
1832	esc_html__( 'No stats', 'jetpack' )
1833	);
1834	} else {
1835	printf(
1836	'<a href="%s" title="%s" class="dashicons dashicons-chart-bar" target="_blank"></a>',
1837	esc_url( "https://wordpress.com/stats/post/$post_id/" . Jetpack::build_raw_urls( get_home_url() ) ),
1838	esc_html__( 'View stats for this post in WordPress.com', 'jetpack' )
1839	);
1840	}
1841	}
1842	}
1843