← All changes | modules/stats.php +1025 -752 14.2.2 → 7.2 View file →

		@@ -1,7 +1,7 @@
1	1	<?php
2	2	/**
3		- * Module Name: Jetpack Stats
	3	+ * Module Name: Site Stats
4	4	* Module Description: Collect valuable traffic stats and insights.
5	5	* Sort Order: 1
6	6	* Recommendation Order: 2
7	7	* First Introduced: 1.1
		@@ -6,43 +6,22 @@
6	6	* Recommendation Order: 2
7	7	* First Introduced: 1.1
8	8	* Requires Connection: Yes
9	9	* Auto Activate: Yes
10		- * Module Tags: Jetpack Stats, Site Stats, Recommended
	10	+ * Module Tags: Site Stats, Recommended
11	11	* Feature: Engagement
12	12	* Additional Search Queries: statistics, tracking, analytics, views, traffic, stats
13	13	*
14		- * @package automattic/jetpack
	14	+ * @package Jetpack
15	15	*/
16	16
17		-use Automattic\Jetpack\Admin_UI\Admin_Menu;
18		-use Automattic\Jetpack\Connection\Client;
19		-use Automattic\Jetpack\Connection\Manager as Connection_Manager;
20		-use Automattic\Jetpack\Connection\XMLRPC_Async_Call;
21		-use Automattic\Jetpack\Redirect;
22		-use Automattic\Jetpack\Stats\Main as Stats;
23		-use Automattic\Jetpack\Stats\Options as Stats_Options;
24		-use Automattic\Jetpack\Stats\Tracking_Pixel as Stats_Tracking_Pixel;
25		-use Automattic\Jetpack\Stats\WPCOM_Stats;
26		-use Automattic\Jetpack\Stats\XMLRPC_Provider as Stats_XMLRPC;
27		-use Automattic\Jetpack\Stats_Admin\Dashboard as Stats_Dashboard;
28		-use Automattic\Jetpack\Stats_Admin\Main as Stats_Main;
29		-use Automattic\Jetpack\Status\Host;
30		-use Automattic\Jetpack\Tracking;
31		-
32		-if ( defined( 'STATS_DASHBOARD_SERVER' ) ) {
	17	+if ( defined( 'STATS_VERSION' ) ) {
33	18	return;
34	19	}
35	20
36		-define( 'STATS_DASHBOARD_SERVER', 'dashboard.wordpress.com' );
	21	+define( 'STATS_VERSION', '9' );
	22	+defined( 'STATS_DASHBOARD_SERVER' ) or define( 'STATS_DASHBOARD_SERVER', 'dashboard.wordpress.com' );
37	23
38		-/**
39		- * Stats content markers.
40		- * Used to test for content vs script when parsing server-generated HTML.
41		- */
42		-const STATS_BODY_MARKER = '<div id="statchart"';
43		-const STATS_CONTENT_MARKER = '<div class="gotonewdash">';
44		-
45	24	add_action( 'jetpack_modules_loaded', 'stats_load' );
46	25
47	26	/**
48	27	* Load Stats.
		@@ -51,41 +30,92 @@
51	30	* @return void
52	31	*/
53	32	function stats_load() {
54	33	Jetpack::enable_module_configurable( __FILE__ );
	34	+ Jetpack::module_configuration_load( __FILE__, 'stats_configuration_load' );
	35	+ Jetpack::module_configuration_head( __FILE__, 'stats_configuration_head' );
	36	+ Jetpack::module_configuration_screen( __FILE__, 'stats_configuration_screen' );
55	37
56		- // Only run the callback for those who can see the stats.
57		- if ( is_user_logged_in() && current_user_can( 'view_stats' ) ) {
58		- add_action( 'admin_head', 'stats_admin_bar_head', 100 );
59		- add_action( 'wp_head', 'stats_admin_bar_head', 100 );
	38	+ // Generate the tracking code after wp() has queried for posts.
	39	+ add_action( 'template_redirect', 'stats_template_redirect', 1 );
	40	+
	41	+ add_action( 'wp_head', 'stats_admin_bar_head', 100 );
	42	+
	43	+ add_action( 'wp_head', 'stats_hide_smile_css' );
	44	+
	45	+ add_action( 'jetpack_admin_menu', 'stats_admin_menu' );
	46	+
	47	+ // Map stats caps.
	48	+ add_filter( 'map_meta_cap', 'stats_map_meta_caps', 10, 3 );
	49	+
	50	+ if ( isset( $_GET['oldwidget'] ) ) {
	51	+ // Old one.
	52	+ add_action( 'wp_dashboard_setup', 'stats_register_dashboard_widget' );
	53	+ } else {
	54	+ add_action( 'admin_init', 'stats_merged_widget_admin_init' );
60	55	}
61	56
62		- add_action( 'jetpack_admin_menu', 'stats_admin_menu' );
	57	+ add_filter( 'jetpack_xmlrpc_methods', 'stats_xmlrpc_methods' );
63	58
64	59	add_filter( 'pre_option_db_version', 'stats_ignore_db_version' );
65	60
66		- // Add an icon to see stats in WordPress.com for a particular post.
	61	+ // Add an icon to see stats in WordPress.com for a particular post
67	62	add_action( 'admin_print_styles-edit.php', 'jetpack_stats_load_admin_css' );
68	63	add_filter( 'manage_posts_columns', 'jetpack_stats_post_table' );
69	64	add_filter( 'manage_pages_columns', 'jetpack_stats_post_table' );
70	65	add_action( 'manage_posts_custom_column', 'jetpack_stats_post_table_cell', 10, 2 );
71	66	add_action( 'manage_pages_custom_column', 'jetpack_stats_post_table_cell', 10, 2 );
72		- // Filter for adding the Jetpack plugin version to tracking stats.
73		- add_filter( 'stats_array', 'filter_stats_array_add_jp_version' );
	67	+}
74	68
75		- require_once __DIR__ . '/stats/class-jetpack-stats-upgrade-nudges.php';
76		- add_action( 'updating_jetpack_version', array( 'Jetpack_Stats_Upgrade_Nudges', 'unset_nudges_setting' ) );
	69	+/**
	70	+ * Delay conditional for current_user_can to after init.
	71	+ *
	72	+ * @access public
	73	+ * @return void
	74	+ */
	75	+function stats_merged_widget_admin_init() {
	76	+ if ( current_user_can( 'view_stats' ) ) {
	77	+ add_action( 'load-index.php', 'stats_enqueue_dashboard_head' );
	78	+ add_action( 'wp_dashboard_setup', 'stats_register_widget_control_callback' ); // Hacky but works.
	79	+ add_action( 'jetpack_dashboard_widget', 'stats_jetpack_dashboard_widget' );
	80	+ }
77	81	}
78	82
79	83	/**
	84	+ * Enqueue Stats Dashboard
	85	+ *
	86	+ * @access public
	87	+ * @return void
	88	+ */
	89	+function stats_enqueue_dashboard_head() {
	90	+ add_action( 'admin_head', 'stats_dashboard_head' );
	91	+}
	92	+
	93	+/**
80	94	* Checks if filter is set and dnt is enabled.
81	95	*
82		- * @deprecated 11.5
83	96	* @return bool
84	97	*/
85	98	function jetpack_is_dnt_enabled() {
86		- _deprecated_function( __METHOD__, 'jetpack-11.5', 'Automattic\Jetpack\Stats\Main::jetpack_is_dnt_enabled' );
87		- return Stats::jetpack_is_dnt_enabled();
	99	+ /**
	100	+ * Filter the option which decides honor DNT or not.
	101	+ *
	102	+ * @module stats
	103	+ * @since 6.1.0
	104	+ *
	105	+ * @param bool false Honors DNT for clients who don't want to be tracked. Defaults to false. Set to true to enable.
	106	+ */
	107	+ if ( false === apply_filters( 'jetpack_honor_dnt_header_for_stats', false ) ) {
	108	+ return false;
	109	+ }
	110	+
	111	+ foreach ( $_SERVER as $name => $value ) {
	112	+ if ( 'http_dnt' == strtolower( $name ) && 1 == $value ) {
	113	+ return true;
	114	+ }
	115	+ }
	116	+
	117	+ return false;
88	118	}
89	119
90	120	/**
91	121	* Prevent sparkline img requests being redirected to upgrade.php.
		@@ -97,10 +127,10 @@
97	127	*/
98	128	function stats_ignore_db_version( $version ) {
99	129	if (
100	130	is_admin() &&
101		- isset( $_GET['page'] ) && 'stats' === $_GET['page'] && // phpcs:ignore WordPress.Security.NonceVerification.Recommended
102		- isset( $_GET['chart'] ) && strpos( $_GET['chart'], 'admin-bar-hours' ) === 0 // phpcs:ignore WordPress.Security.NonceVerification.Recommended, WordPress.Security.ValidatedSanitizedInput
	131	+ isset( $_GET['page'] ) && 'stats' === $_GET['page'] &&
	132	+ isset( $_GET['chart'] ) && strpos($_GET['chart'], 'admin-bar-hours') === 0
103	133	) {
104	134	global $wp_db_version;
105	135	return $wp_db_version;
106	136	}
		@@ -109,10 +139,8 @@
109	139
110	140	/**
111	141	* Maps view_stats cap to read cap as needed.
112	142	*
113		- * @deprecated 11.5
114		- *
115	143	* @access public
116	144	* @param mixed $caps Caps.
117	145	* @param mixed $cap Cap.
118	146	* @param mixed $user_id User ID.
		@@ -118,107 +146,278 @@
118	146	* @param mixed $user_id User ID.
119	147	* @return array Possibly mapped capabilities for meta capability.
120	148	*/
121	149	function stats_map_meta_caps( $caps, $cap, $user_id ) {
122		- _deprecated_function( __METHOD__, 'jetpack-11.5', 'Automattic\Jetpack\Stats\Main::map_meta_caps' );
123		- return Stats::map_meta_caps( $caps, $cap, $user_id );
	150	+ // Map view_stats to exists.
	151	+ if ( 'view_stats' === $cap ) {
	152	+ $user = new WP_User( $user_id );
	153	+ $user_role = array_shift( $user->roles );
	154	+ $stats_roles = stats_get_option( 'roles' );
	155	+
	156	+ // Is the users role in the available stats roles?
	157	+ if ( is_array( $stats_roles ) && in_array( $user_role, $stats_roles ) ) {
	158	+ $caps = array( 'read' );
	159	+ }
	160	+ }
	161	+
	162	+ return $caps;
124	163	}
125	164
126	165	/**
127	166	* Stats Template Redirect.
128	167	*
129		- * @deprecated 11.5
130	168	* @access public
131	169	* @return void
132	170	*/
133	171	function stats_template_redirect() {
134		- _deprecated_function( __METHOD__, 'jetpack-11.5', 'Automattic\Jetpack\Stats\Main::template_redirect' );
135		- Stats::template_redirect();
	172	+ global $current_user, $rendered_stats_footer;
	173	+
	174	+ if ( is_feed() || is_robots() || is_trackback() || is_preview() || jetpack_is_dnt_enabled() ) {
	175	+ return;
	176	+ }
	177	+
	178	+ // Should we be counting this user's views?
	179	+ if ( ! empty( $current_user->ID ) ) {
	180	+ $count_roles = stats_get_option( 'count_roles' );
	181	+ if ( ! is_array( $count_roles ) || ! array_intersect( $current_user->roles, $count_roles ) ) {
	182	+ return;
	183	+ }
	184	+ }
	185	+
	186	+ add_action( 'wp_footer', 'stats_footer', 101 );
	187	+ add_action( 'wp_head', 'stats_add_shutdown_action' );
	188	+
	189	+ $rendered_stats_footer = false;
136	190	}
137	191
	192	+
138	193	/**
139	194	* Stats Build View Data.
140	195	*
141		- * @deprecated 11.5
142	196	* @access public
143		- * @return array
	197	+ * @return array.
144	198	*/
145	199	function stats_build_view_data() {
146		- _deprecated_function( __METHOD__, 'jetpack-11.5', 'Automattic\Jetpack\Stats\Tracking_Pixel::build_view_data' );
147		- return Stats_Tracking_Pixel::build_view_data();
	200	+ global $wp_the_query;
	201	+
	202	+ $blog = Jetpack_Options::get_option( 'id' );
	203	+ $tz = get_option( 'gmt_offset' );
	204	+ $v = 'ext';
	205	+ $blog_url = wp_parse_url( site_url() );
	206	+ $srv = $blog_url['host'];
	207	+ $j = sprintf( '%s:%s', JETPACK__API_VERSION, JETPACK__VERSION );
	208	+ if ( $wp_the_query->is_single || $wp_the_query->is_page || $wp_the_query->is_posts_page ) {
	209	+ // Store and reset the queried_object and queried_object_id
	210	+ // Otherwise, redirect_canonical() will redirect to home_url( '/' ) for show_on_front = page sites where home_url() is not all lowercase.
	211	+ // Repro:
	212	+ // 1. Set home_url = https://ExamPle.com/
	213	+ // 2. Set show_on_front = page
	214	+ // 3. Set page_on_front = something
	215	+ // 4. Visit https://example.com/ !
	216	+ $queried_object = ( isset( $wp_the_query->queried_object ) ) ? $wp_the_query->queried_object : null;
	217	+ $queried_object_id = ( isset( $wp_the_query->queried_object_id ) ) ? $wp_the_query->queried_object_id : null;
	218	+ $post = $wp_the_query->get_queried_object_id();
	219	+ $wp_the_query->queried_object = $queried_object;
	220	+ $wp_the_query->queried_object_id = $queried_object_id;
	221	+ } else {
	222	+ $post = '0';
	223	+ }
	224	+
	225	+ return compact( 'v', 'j', 'blog', 'post', 'tz', 'srv' );
148	226	}
149	227
150	228	/**
	229	+ * Stats Add Shutdown Action.
	230	+ *
	231	+ * @access public
	232	+ * @return void
	233	+ */
	234	+function stats_add_shutdown_action() {
	235	+ // Just in case wp_footer isn't in your theme.
	236	+ add_action( 'shutdown', 'stats_footer', 101 );
	237	+}
	238	+
	239	+/**
	240	+ * Stats Footer.
	241	+ *
	242	+ * @access public
	243	+ * @return void
	244	+ */
	245	+function stats_footer() {
	246	+ global $rendered_stats_footer;
	247	+
	248	+ if ( ! $rendered_stats_footer ) {
	249	+ $data = stats_build_view_data();
	250	+ if ( Jetpack_AMP_Support::is_amp_request() ) {
	251	+ stats_render_amp_footer( $data );
	252	+ } else {
	253	+ stats_render_footer( $data );
	254	+ }
	255	+ $rendered_stats_footer = true;
	256	+ }
	257	+}
	258	+
	259	+function stats_render_footer( $data ) {
	260	+ $script = 'https://stats.wp.com/e-' . gmdate( 'YW' ) . '.js';
	261	+ $data_stats_array = stats_array( $data );
	262	+
	263	+ $stats_footer = <<<END
	264	+<script type='text/javascript' src='{$script}' async='async' defer='defer'></script>
	265	+<script type='text/javascript'>
	266	+ _stq = window._stq || [];
	267	+ _stq.push([ 'view', {{$data_stats_array}} ]);
	268	+ _stq.push([ 'clickTrackerInit', '{$data['blog']}', '{$data['post']}' ]);
	269	+</script>
	270	+
	271	+END;
	272	+ print $stats_footer;
	273	+}
	274	+
	275	+function stats_render_amp_footer( $data ) {
	276	+ $data['host'] = isset( $_SERVER['HTTP_HOST'] ) ? sanitize_text_field( wp_unslash( $_SERVER['HTTP_HOST'] ) ) : ''; // input var ok.
	277	+ $data['rand'] = 'RANDOM'; // AMP placeholder.
	278	+ $data['ref'] = 'DOCUMENT_REFERRER'; // AMP placeholder.
	279	+ $data = array_map( 'rawurlencode', $data );
	280	+ $pixel_url = add_query_arg( $data, 'https://pixel.wp.com/g.gif' );
	281	+
	282	+ ?>
	283	+ <amp-pixel src="<?php echo esc_url( $pixel_url ); ?>"></amp-pixel>
	284	+ <?php
	285	+}
	286	+
	287	+/**
151	288	* Stats Get Options.
152	289	*
153		- * @deprecated 11.5
154		- *
155	290	* @access public
156		- * @return array
	291	+ * @return array.
157	292	*/
158	293	function stats_get_options() {
159		- _deprecated_function( __METHOD__, 'jetpack-11.5', 'Automattic\Jetpack\Stats\Options::get_options' );
160		- return Stats_Options::get_options();
	294	+ $options = get_option( 'stats_options' );
	295	+
	296	+ if ( ! isset( $options['version'] ) || $options['version'] < STATS_VERSION ) {
	297	+ $options = stats_upgrade_options( $options );
	298	+ }
	299	+
	300	+ return $options;
161	301	}
162	302
163	303	/**
164	304	* Get Stats Options.
165	305	*
166		- * @deprecated 11.5
167		- *
168	306	* @access public
169	307	* @param mixed $option Option.
170		- * @return mixed|null
	308	+ * @return mixed|null.
171	309	*/
172	310	function stats_get_option( $option ) {
173		- _deprecated_function( __METHOD__, 'jetpack-11.5', 'Automattic\Jetpack\Stats\Options::get_option' );
174		- return Stats_Options::get_option( $option );
	311	+ $options = stats_get_options();
	312	+
	313	+ if ( 'blog_id' === $option ) {
	314	+ return Jetpack_Options::get_option( 'id' );
	315	+ }
	316	+
	317	+ if ( isset( $options[ $option ] ) ) {
	318	+ return $options[ $option ];
	319	+ }
	320	+
	321	+ return null;
175	322	}
176	323
177	324	/**
178	325	* Stats Set Options.
179	326	*
180		- * @deprecated 11.5
181		- *
182	327	* @access public
183	328	* @param mixed $option Option.
184	329	* @param mixed $value Value.
185		- * @return bool
	330	+ * @return bool.
186	331	*/
187	332	function stats_set_option( $option, $value ) {
188		- _deprecated_function( __METHOD__, 'jetpack-11.5', 'Automattic\Jetpack\Stats\Options::set_option' );
189		- return Stats_Options::set_option( $option, $value );
	333	+ $options = stats_get_options();
	334	+
	335	+ $options[ $option ] = $value;
	336	+
	337	+ return stats_set_options( $options );
190	338	}
191	339
192	340	/**
193	341	* Stats Set Options.
194	342	*
195		- * @deprecated 11.5
196		- *
197	343	* @access public
198	344	* @param mixed $options Options.
199	345	* @return bool
200	346	*/
201	347	function stats_set_options( $options ) {
202		- _deprecated_function( __METHOD__, 'jetpack-11.5', 'Automattic\Jetpack\Stats\Options::set_options' );
203		- return Stats_Options::set_options( $options );
	348	+ return update_option( 'stats_options', $options );
204	349	}
205	350
206	351	/**
207	352	* Stats Upgrade Options.
208	353	*
209		- * @deprecated 11.5
210		- *
211	354	* @access public
212	355	* @param mixed $options Options.
213	356	* @return array|bool
214	357	*/
215	358	function stats_upgrade_options( $options ) {
216		- _deprecated_function( __METHOD__, 'jetpack-11.5', 'Automattic\Jetpack\Stats\Options::upgrade_options' );
217		- return Stats_Options::upgrade_options( $options );
	359	+ $defaults = array(
	360	+ 'admin_bar' => true,
	361	+ 'roles' => array( 'administrator' ),
	362	+ 'count_roles' => array(),
	363	+ 'blog_id' => Jetpack_Options::get_option( 'id' ),
	364	+ 'do_not_track' => true, // @todo
	365	+ 'hide_smile' => true,
	366	+ );
	367	+
	368	+ if ( isset( $options['reg_users'] ) ) {
	369	+ if ( ! function_exists( 'get_editable_roles' ) ) {
	370	+ require_once ABSPATH . 'wp-admin/includes/user.php';
	371	+ }
	372	+ if ( $options['reg_users'] ) {
	373	+ $options['count_roles'] = array_keys( get_editable_roles() );
	374	+ }
	375	+ unset( $options['reg_users'] );
	376	+ }
	377	+
	378	+ if ( is_array( $options ) && ! empty( $options ) ) {
	379	+ $new_options = array_merge( $defaults, $options );
	380	+ } else { $new_options = $defaults;
	381	+ }
	382	+
	383	+ $new_options['version'] = STATS_VERSION;
	384	+
	385	+ if ( ! stats_set_options( $new_options ) ) {
	386	+ return false;
	387	+ }
	388	+
	389	+ stats_update_blog();
	390	+
	391	+ return $new_options;
218	392	}
219	393
220	394	/**
	395	+ * Stats Array.
	396	+ *
	397	+ * @access public
	398	+ * @param mixed $kvs KVS.
	399	+ * @return array
	400	+ */
	401	+function stats_array( $kvs ) {
	402	+ /**
	403	+ * Filter the options added to the JavaScript Stats tracking code.
	404	+ *
	405	+ * @module stats
	406	+ *
	407	+ * @since 1.1.0
	408	+ *
	409	+ * @param array $kvs Array of options about the site and page you're on.
	410	+ */
	411	+ $kvs = apply_filters( 'stats_array', $kvs );
	412	+ $kvs = array_map( 'addslashes', $kvs );
	413	+ foreach ( $kvs as $k => $v ) {
	414	+ $jskvs[] = "$k:'$v'";
	415	+ }
	416	+ return join( ',', $jskvs );
	417	+}
	418	+
	419	+/**
221	420	* Admin Pages.
222	421	*
223	422	* @access public
224	423	* @return void
		@@ -227,10 +426,10 @@
227	426	global $pagenow;
228	427
229	428	// If we're at an old Stats URL, redirect to the new one.
230	429	// Don't even bother with caps, menu_page_url(), etc. Just do it.
231		- if ( 'index.php' === $pagenow && isset( $_GET['page'] ) && 'stats' === $_GET['page'] ) { // phpcs:ignore WordPress.Security.NonceVerification.Recommended
232		- $redirect_url = str_replace( array( '/wp-admin/index.php?', '/wp-admin/?' ), '/wp-admin/admin.php?', isset( $_SERVER['REQUEST_URI'] ) ? filter_var( wp_unslash( $_SERVER['REQUEST_URI'] ) ) : null );
	430	+ if ( 'index.php' === $pagenow && isset( $_GET['page'] ) && 'stats' === $_GET['page'] ) {
	431	+ $redirect_url = str_replace( array( '/wp-admin/index.php?', '/wp-admin/?' ), '/wp-admin/admin.php?', $_SERVER['REQUEST_URI'] );
233	432	$relative_pos = strpos( $redirect_url, '/wp-admin/' );
234	433	if ( false !== $relative_pos ) {
235	434	wp_safe_redirect( admin_url( substr( $redirect_url, $relative_pos + 10 ) ) );
236	435	exit;
		@@ -236,28 +435,10 @@
236	435	exit;
237	436	}
238	437	}
239	438
240		- // phpcs:ignore WordPress.Security.NonceVerification.Recommended
241		- if ( ! ( new Host() )->is_woa_site() && isset( $_GET['enable_new_stats'] ) && '1' === $_GET['enable_new_stats'] ) {
242		- // Passing true enables Odyssey Stats.
243		- // We're ignorning the return value for now.
244		- Stats_Main::update_new_stats_status( true );
245		- }
246		-
247		- // phpcs:ignore WordPress.Security.NonceVerification.Recommended
248		- if ( ! Stats_Options::get_option( 'enable_odyssey_stats' ) || isset( $_GET['noheader'] ) ) {
249		- // Show old Jetpack Stats interface for:
250		- // - When the "enable_odyssey_stats" option is disabled.
251		- // - When being shown in the adminbar outside of wp-admin.
252		- $hook = Admin_Menu::add_menu( __( 'Stats', 'jetpack' ), __( 'Stats', 'jetpack' ), 'view_stats', 'stats', 'jetpack_admin_ui_stats_report_page_wrapper' );
253		- add_action( "load-$hook", 'stats_reports_load' );
254		- } else {
255		- // Enable the new Odyssey Stats experience.
256		- $stats_dashboard = new Stats_Dashboard();
257		- $hook = Admin_Menu::add_menu( __( 'Stats', 'jetpack' ), __( 'Stats', 'jetpack' ), 'view_stats', 'stats', array( $stats_dashboard, 'render' ), 1 );
258		- add_action( "load-$hook", array( $stats_dashboard, 'admin_init' ) );
259		- }
	439	+ $hook = add_submenu_page( 'jetpack', __( 'Site Stats', 'jetpack' ), __( 'Site Stats', 'jetpack' ), 'view_stats', 'stats', 'jetpack_admin_ui_stats_report_page_wrapper' );
	440	+ add_action( "load-$hook", 'stats_reports_load' );
260	441	}
261	442
262	443	/**
263	444	* Stats Admin Path.
		@@ -275,11 +456,8 @@
275	456	* @access public
276	457	* @return void
277	458	*/
278	459	function stats_reports_load() {
279		- require_once __DIR__ . '/stats/class-jetpack-stats-upgrade-nudges.php';
280		- Jetpack_Stats_Upgrade_Nudges::init();
281		-
282	460	wp_enqueue_script( 'jquery' );
283	461	wp_enqueue_script( 'postbox' );
284	462	wp_enqueue_script( 'underscore' );
285	463
		@@ -285,57 +463,24 @@
285	463
286	464	Jetpack_Admin_Page::load_wrapper_styles();
287	465	add_action( 'admin_print_styles', 'stats_reports_css' );
288	466
289		- if ( ! empty( $_GET['nojs'] ) ) { // phpcs:ignore WordPress.Security.NonceVerification.Recommended
	467	+ if ( isset( $_GET['nojs'] ) && $_GET['nojs'] ) {
290	468	$parsed = wp_parse_url( admin_url() );
291	469	// Remember user doesn't want JS.
292		- setcookie( 'stnojs', '1', time() + 172800, $parsed['path'], COOKIE_DOMAIN, is_ssl(), true ); // 2 days.
	470	+ setcookie( 'stnojs', '1', time() + 172800, $parsed['path'] ); // 2 days.
293	471	}
294	472
295		- if ( ! empty( $_COOKIE['stnojs'] ) ) {
	473	+ if ( isset( $_COOKIE['stnojs'] ) && $_COOKIE['stnojs'] ) {
296	474	// Detect if JS is on. If so, remove cookie so next page load is via JS.
297	475	add_action( 'admin_print_footer_scripts', 'stats_js_remove_stnojs_cookie' );
298		- } elseif ( ! isset( $_GET['noheader'] ) && empty( $_GET['nojs'] ) ) { // phpcs:ignore WordPress.Security.NonceVerification.Recommended
	476	+ } else if ( ! isset( $_GET['noheader'] ) && empty( $_GET['nojs'] ) ) {
299	477	// Normal page load. Load page content via JS.
300		- add_action( 'admin_print_footer_scripts', 'stats_script_dismiss_nudge_handler' );
	478	+ add_action( 'admin_print_footer_scripts', 'stats_js_load_page_via_ajax' );
301	479	}
302	480	}
303	481
304	482	/**
305		- * JavaScript to dismiss the Odyssey nudge.
306		- *
307		- * @access public
308		- * @return void
309		- */
310		-function stats_script_dismiss_nudge_handler() {
311		- ?>
312		- <script type="text/javascript">
313		- function stats_odyssey_dismiss_nudge() {
314		- // Hide the nudge UI, effectively dismissing it.
315		- var element = document.getElementById( "stats-odyssey-nudge-main" );
316		- element.classList.toggle( "is-hidden" );
317		- // Send an AJAX request.
318		- // Note we can provide a 'postponed_for' parameter to set the delay.
319		- // Without a parameter it defaults to 30 days which is what we want here.
320		- let nonce = <?php echo wp_json_encode( wp_create_nonce( 'wp_rest' ) ); ?>;
321		- let url = <?php echo wp_json_encode( rest_url( '/jetpack/v4/stats-app/stats/notices' ) ); ?>;
322		- let data = {
323		- id: 'opt_in_new_stats',
324		- status: 'postponed',
325		- };
326		- jQuery.ajax({
327		- type: "POST",
328		- url: url,
329		- data: data,
330		- headers: { "x-wp-nonce": nonce },
331		- });
332		- }
333		- </script>
334		- <?php
335		-}
336		-
337		-/**
338	483	* Stats Reports CSS.
339	484	*
340	485	* @access public
341	486	* @return void
		@@ -340,19 +485,28 @@
340	485	* @access public
341	486	* @return void
342	487	*/
343	488	function stats_reports_css() {
344		- ?>
	489	+?>
345	490	<style type="text/css">
346		-#jp-stats-wrap, #jp-stats-report-bottom {
	491	+#jp-stats-wrap {
347	492	max-width: 1040px;
348	493	margin: 0 auto;
349	494	overflow: hidden;
350	495	}
	496	+
	497	+#stats-loading-wrap p {
	498	+ text-align: center;
	499	+ font-size: 2em;
	500	+ margin: 7.5em 15px 0 0;
	501	+ height: 64px;
	502	+ line-height: 64px;
	503	+}
351	504	</style>
352		- <?php
	505	+<?php
353	506	}
354	507
	508	+
355	509	/**
356	510	* Detect if JS is on. If so, remove cookie so next page load is via JS.
357	511	*
358	512	* @access public
		@@ -359,26 +513,46 @@
359	513	* @return void
360	514	*/
361	515	function stats_js_remove_stnojs_cookie() {
362	516	$parsed = wp_parse_url( admin_url() );
363		- ?>
	517	+?>
364	518	<script type="text/javascript">
365	519	/* <![CDATA[ */
366	520	document.cookie = 'stnojs=0; expires=Wed, 9 Mar 2011 16:55:50 UTC; path=<?php echo esc_js( $parsed['path'] ); ?>';
367	521	/* ]]> */
368	522	</script>
369		- <?php
	523	+<?php
370	524	}
371	525
372	526	/**
373		- * Jetpack Admin Page Wrapper.
	527	+ * Normal page load. Load page content via JS.
	528	+ *
	529	+ * @access public
	530	+ * @return void
374	531	*/
375		-function jetpack_admin_ui_stats_report_page_wrapper() {
376		- if ( ! isset( $_GET['noheader'] ) && empty( $_GET['nojs'] ) && empty( $_COOKIE['stnojs'] ) ) { // phpcs:ignore WordPress.Security.NonceVerification.Recommended
	532	+function stats_js_load_page_via_ajax() {
	533	+?>
	534	+<script type="text/javascript">
	535	+/* <![CDATA[ */
	536	+if ( -1 == document.location.href.indexOf( 'noheader' ) ) {
	537	+ jQuery( function( $ ) {
	538	+ $.get( document.location.href + '&noheader', function( responseText ) {
	539	+ $( '#stats-loading-wrap' ).replaceWith( responseText );
	540	+ } );
	541	+ } );
	542	+}
	543	+/* ]]> */
	544	+</script>
	545	+<?php
	546	+}
	547	+
	548	+function jetpack_admin_ui_stats_report_page_wrapper() {
	549	+ if( ! isset( $_GET['noheader'] ) && empty( $_GET['nojs'] ) && empty( $_COOKIE['stnojs'] ) ) {
377	550	Jetpack_Admin_Page::wrap_ui( 'stats_reports_page', array( 'is-wide' => true ) );
378	551	} else {
379	552	stats_reports_page();
380	553	}
	554	+
381	555	}
382	556
383	557	/**
384	558	* Stats Report Page.
		@@ -386,162 +560,62 @@
386	560	* @access public
387	561	* @param bool $main_chart_only (default: false) Main Chart Only.
388	562	*/
389	563	function stats_reports_page( $main_chart_only = false ) {
390		- if ( isset( $_GET['dashboard'] ) ) { // phpcs:ignore WordPress.Security.NonceVerification.Recommended
391		- stats_dashboard_widget_content();
392		- exit; // @phan-suppress-current-line PhanPluginUnreachableCode -- Safer to include it even though stats_dashboard_widget_content() never returns.
	564	+
	565	+ if ( isset( $_GET['dashboard'] ) ) {
	566	+ return stats_dashboard_widget_content();
393	567	}
394	568
395		- $blog_id = Stats_Options::get_option( 'blog_id' );
396		- $learn_url = Redirect::get_url( 'jetpack-stats-learn-more' );
397		- $redirect_url = admin_url( 'admin.php?page=stats&enable_new_stats=1' );
398		- $stats_bg_url = plugins_url( 'images/odyssey-upgrade/background.png', JETPACK__PLUGIN_FILE );
399		- $stats_bg_gradient_url = plugins_url( 'images/odyssey-upgrade/gradient.png', JETPACK__PLUGIN_FILE );
	569	+ $blog_id = stats_get_option( 'blog_id' );
	570	+ $domain = Jetpack::build_raw_urls( get_home_url() );
400	571
401		- if ( ! $main_chart_only && ! isset( $_GET['noheader'] ) ) { // phpcs:ignore WordPress.Security.NonceVerification.Recommended
402		- ?>
	572	+ $jetpack_admin_url = admin_url() . 'admin.php?page=jetpack';
403	573
404		- <style>
405		- .stats-odyssey-notice {
406		- display: flex;
407		- font-size: var( --font-body );
	574	+ if ( ! $main_chart_only && ! isset( $_GET['noheader'] ) && empty( $_GET['nojs'] ) && empty( $_COOKIE['stnojs'] ) ) {
	575	+ $nojs_url = add_query_arg( 'nojs', '1' );
	576	+ $http = is_ssl() ? 'https' : 'http';
	577	+ // Loading message. No JS fallback message.
	578	+?>
408	579
409		- border: 1px solid var( --jp-gray-5 );
410		- border-left-color: var( --jp-black );
411		- border-left-width: 6px;
412		- border-radius: 4px;
413		-
414		- margin-top: 24px;
415		- background: white;
416		- position: relative;
417		- }
418		- .stats-odyssey-notice--content__highlighted {
419		- border-left-color: var( --jp-red );
420		- }
421		- .stats-odyssey-notice--content {
422		- padding: 24px 0 24px 30px;
423		- font-size: 2em;
424		- width: 100%;
425		- }
426		- .stats-odyssey-notice--content-header {
427		- font-size: 24px;
428		- line-height: 32px;
429		- margin: 0;
430		- margin-bottom: 8px;
431		- }
432		- .stats-odyssey-notice--content-text {
433		- font-size: 16px;
434		- margin: 0;
435		- }
436		- .stats-odyssey-notice--image-container {
437		- background-image: url("<?php echo esc_url( $stats_bg_url ); ?>"), url("<?php echo esc_url( $stats_bg_gradient_url ); ?>");
438		- background-size: cover;
439		- padding-right: 28px;
440		- width: 100%;
441		- }
442		- .stats-odyssey-notice--close-button {
443		- position: absolute;
444		- top: 1rem;
445		- right: 1rem;
446		- background-color: transparent;
447		- border: none;
448		- cursor: pointer;
449		- }
450		- .stats-odyssey-notice--action-bar {
451		- display: flex;
452		- align-items: center;
453		- margin-top: 24px;
454		- }
455		- .stats-odyssey-notice--primary-button {
456		- margin-right: 18px;
457		- padding-left: 20px;
458		- padding-right: 20px;
459		- font-size: 16px;
460		- border-color: black;
461		- background-color: black;
462		- }
463		- .stats-odyssey-notice--primary-button:hover {
464		- border-color: #3c434a;
465		- background-color: #3c434a;
466		- }
467		- .is-primary-link {
468		- color: white;
469		- text-decoration: none;
470		- }
471		- .is-primary-link:active {
472		- color: white;
473		- }
474		- .is-primary-link:focus {
475		- color: white;
476		- box-shadow: none;
477		- outline: none;
478		- }
479		- .is-primary-link:hover {
480		- color: white;
481		- }
482		- .is-secondary-link {
483		- color: black;
484		- font-size: var( --font-body );
485		- }
486		- .is-secondary-link:hover {
487		- color: black;
488		- }
489		- .is-hidden {
490		- display: none;
491		- }
492		- </style>
493	580	<div id="jp-stats-wrap">
494	581	<div class="wrap">
495		- <h1><?php esc_html_e( 'Jetpack Stats', 'jetpack' ); ?>
496		- <?php
497		- if ( current_user_can( 'jetpack_manage_modules' ) ) :
498		- $i18n_headers = jetpack_get_module_i18n( 'stats' );
499		- ?>
500		- <a
501		- style="font-size:13px;"
502		- href="<?php echo esc_url( admin_url( 'admin.php?page=jetpack#/settings?term=' . rawurlencode( $i18n_headers['name'] ) ) ); ?>"
503		- >
504		- <?php esc_html_e( 'Configure', 'jetpack' ); ?>
505		- </a>
506		- <?php
507		- endif;
508		-
509		- ?>
510		- </h2>
	582	+ <h2><?php esc_html_e( 'Site Stats', 'jetpack' ); ?> <?php if ( current_user_can( 'jetpack_manage_modules' ) ) : ?><a style="font-size:13px;" href="<?php echo esc_url( admin_url( 'admin.php?page=jetpack&configure=stats' ) ); ?>"><?php esc_html_e( 'Configure', 'jetpack' ); ?></a><?php endif; ?></h2>
511	583	</div>
512		- <div class="wrap">
513		- <div class="stats-odyssey-notice stats-odyssey-notice--content__highlighted">
514		- <div class="stats-odyssey-notice--content">
515		- <h2 class="stats-odyssey-notice--content-header"><?php esc_html_e( 'Deprecated Jetpack Stats Experience', 'jetpack' ); ?></h2>
516		- <p class="stats-odyssey-notice--content-text"><?php esc_html_e( 'The old Jetpack Stats has been deprecated. Please click the button to enable the new experience.', 'jetpack' ); ?></p>
517		- <div class="stats-odyssey-notice--action-bar">
518		- <button class="dops-button stats-odyssey-notice--primary-button">
519		- <a class="is-primary-link" href="<?php echo esc_url( $redirect_url ); ?>"><?php esc_html_e( 'Switch to new Stats', 'jetpack' ); ?></a>
520		- </button>
521		- <a class="is-secondary-link" href="<?php echo esc_url( $learn_url ); ?>" rel="noopener noreferrer" target="_blank"><?php esc_html_e( 'Learn about Stats', 'jetpack' ); ?> <svg xmlns="http://www.w3.org/2000/svg" style="vertical-align: middle;" viewBox="0 0 24 24" width="16" height="16" aria-hidden="true" focusable="false"><path d="M18.2 17c0 .7-.6 1.2-1.2 1.2H7c-.7 0-1.2-.6-1.2-1.2V7c0-.7.6-1.2 1.2-1.2h3.2V4.2H7C5.5 4.2 4.2 5.5 4.2 7v10c0 1.5 1.2 2.8 2.8 2.8h10c1.5 0 2.8-1.2 2.8-2.8v-3.6h-1.5V17zM14.9 3v1.5h3.7l-6.4 6.4 1.1 1.1 6.4-6.4v3.7h1.5V3h-6.3z"></path></svg></a>
522		- </div>
523		- </div>
524		- <div class="stats-odyssey-notice--image-container"></div>
525		- </div>
	584	+ <div id="stats-loading-wrap" class="wrap">
	585	+ <p class="hide-if-no-js"><img width="32" height="32" alt="<?php esc_attr_e( 'Loading&hellip;', 'jetpack' ); ?>" src="<?php
	586	+ echo esc_url(
	587	+ /**
	588	+ * Sets external resource URL.
	589	+ *
	590	+ * @module stats
	591	+ *
	592	+ * @since 1.4.0
	593	+ *
	594	+ * @param string $args URL of external resource.
	595	+ */
	596	+ apply_filters( 'jetpack_static_url', "{$http}://en.wordpress.com/i/loading/loading-64.gif" )
	597	+ ); ?>" /></p>
	598	+ <p style="font-size: 11pt; margin: 0;"><a href="https://wordpress.com/stats/<?php echo esc_attr( $domain ); ?>" target="_blank"><?php esc_html_e( 'View stats on WordPress.com right now', 'jetpack' ); ?></a></p>
	599	+ <p class="hide-if-js"><?php esc_html_e( 'Your Site Stats work better with JavaScript enabled.', 'jetpack' ); ?><br />
	600	+ <a href="<?php echo esc_url( $nojs_url ); ?>"><?php esc_html_e( 'View Site Stats without JavaScript', 'jetpack' ); ?></a>.</p>
526	601	</div>
527		- <p></p>
528	602	</div>
529		- <?php
	603	+<?php
530	604	return;
531	605	}
532	606
533		- $day = isset( $_GET['day'] ) && preg_match( '/^\d{4}-\d{2}-\d{2}$/', $_GET['day'] ) ? $_GET['day'] : false; // phpcs:ignore WordPress.Security.NonceVerification.Recommended, WordPress.Security.ValidatedSanitizedInput
534		- $q = array(
	607	+ $day = isset( $_GET['day'] ) && preg_match( '/^\d{4}-\d{2}-\d{2}$/', $_GET['day'] ) ? $_GET['day'] : false;
	608	+ $q = array(
535	609	'noheader' => 'true',
536		- 'proxy' => '',
537		- 'page' => 'stats',
538		- 'day' => $day,
539		- 'blog' => $blog_id,
540		- 'charset' => get_option( 'blog_charset' ),
541		- 'color' => get_user_option( 'admin_color' ),
542		- 'ssl' => is_ssl(),
543		- 'j' => sprintf( '%s:%s', JETPACK__API_VERSION, JETPACK__VERSION ),
	610	+ 'proxy' => '',
	611	+ 'page' => 'stats',
	612	+ 'day' => $day,
	613	+ 'blog' => $blog_id,
	614	+ 'charset' => get_option( 'blog_charset' ),
	615	+ 'color' => get_user_option( 'admin_color' ),
	616	+ 'ssl' => is_ssl(),
	617	+ 'j' => sprintf( '%s:%s', JETPACK__API_VERSION, JETPACK__VERSION ),
544	618	);
545	619	if ( get_locale() !== 'en_US' ) {
546	620	$q['jp_lang'] = get_locale();
547	621	}
		@@ -546,89 +620,101 @@
546	620	$q['jp_lang'] = get_locale();
547	621	}
548	622	// Only show the main chart, without extra header data, or metaboxes.
549	623	$q['main_chart_only'] = $main_chart_only;
550		- $args = array(
551		- 'view' => array( 'referrers', 'postviews', 'searchterms', 'clicks', 'post', 'table' ),
552		- 'numdays' => 'int',
553		- 'day' => 'date',
554		- 'unit' => array( '1', '7', '31', 'human' ),
555		- 'humanize' => array( 'true' ),
556		- 'num' => 'int',
557		- 'summarize' => null,
558		- 'post' => 'int',
559		- 'width' => 'int',
560		- 'height' => 'int',
561		- 'data' => 'data',
562		- 'blog_subscribers' => 'int',
	624	+ $args = array(
	625	+ 'view' => array( 'referrers', 'postviews', 'searchterms', 'clicks', 'post', 'table' ),
	626	+ 'numdays' => 'int',
	627	+ 'day' => 'date',
	628	+ 'unit' => array( 1, 7, 31, 'human' ),
	629	+ 'humanize' => array( 'true' ),
	630	+ 'num' => 'int',
	631	+ 'summarize' => null,
	632	+ 'post' => 'int',
	633	+ 'width' => 'int',
	634	+ 'height' => 'int',
	635	+ 'data' => 'data',
	636	+ 'blog_subscribers' => 'int',
563	637	'comment_subscribers' => null,
564		- 'type' => array( 'wpcom', 'email', 'pending' ),
565		- 'pagenum' => 'int',
566		- 'masterbar' => null,
	638	+ 'type' => array( 'wpcom', 'email', 'pending' ),
	639	+ 'pagenum' => 'int',
567	640	);
568	641	foreach ( $args as $var => $vals ) {
569		- if ( ! isset( $_REQUEST[ $var ] ) ) { // phpcs:ignore WordPress.Security.NonceVerification.Recommended
	642	+ if ( ! isset( $_REQUEST[$var] ) )
570	643	continue;
571		- }
572		- $val = wp_unslash( $_REQUEST[ $var ] ); // phpcs:ignore WordPress.Security.NonceVerification.Recommended, WordPress.Security.ValidatedSanitizedInput.InputNotSanitized
573	644	if ( is_array( $vals ) ) {
574		- if ( in_array( $val, $vals, true ) ) {
575		- $q[ $var ] = $val;
576		- }
	645	+ if ( in_array( $_REQUEST[$var], $vals ) )
	646	+ $q[$var] = $_REQUEST[$var];
577	647	} elseif ( 'int' === $vals ) {
578		- $q[ $var ] = (int) $val;
	648	+ $q[$var] = intval( $_REQUEST[$var] );
579	649	} elseif ( 'date' === $vals ) {
580		- if ( preg_match( '/^\d{4}-\d{2}-\d{2}$/', $val ) ) {
581		- $q[ $var ] = $val;
582		- }
	650	+ if ( preg_match( '/^\d{4}-\d{2}-\d{2}$/', $_REQUEST[$var] ) )
	651	+ $q[$var] = $_REQUEST[$var];
583	652	} elseif ( null === $vals ) {
584		- $q[ $var ] = '';
	653	+ $q[$var] = '';
585	654	} elseif ( 'data' === $vals ) {
586		- if ( str_starts_with( $val, 'index.php' ) ) {
587		- $q[ $var ] = $val;
588		- }
	655	+ if ( 'index.php' === substr( $_REQUEST[$var], 0, 9 ) )
	656	+ $q[$var] = $_REQUEST[$var];
589	657	}
590	658	}
591	659
592		- $url = 'https://' . STATS_DASHBOARD_SERVER . '/wp-admin/index.php';
593		- if ( isset( $_GET['chart'] ) ) { // phpcs:ignore WordPress.Security.NonceVerification.Recommended
594		- if ( preg_match( '/^[a-z0-9-]+$/', $_GET['chart'] ) ) { // phpcs:ignore WordPress.Security.NonceVerification.Recommended, WordPress.Security.ValidatedSanitizedInput
595		- $chart = sanitize_title( $_GET['chart'] ); // phpcs:ignore WordPress.Security.NonceVerification.Recommended, WordPress.Security.ValidatedSanitizedInput
596		- $url = 'https://' . STATS_DASHBOARD_SERVER . "/wp-includes/charts/{$chart}.php";
	660	+ if ( isset( $_GET['chart'] ) ) {
	661	+ if ( preg_match( '/^[a-z0-9-]+$/', $_GET['chart'] ) ) {
	662	+ $chart = sanitize_title( $_GET['chart'] );
	663	+ $url = 'https://' . STATS_DASHBOARD_SERVER . "/wp-includes/charts/{$chart}.php";
597	664	}
	665	+ } else {
	666	+ $url = 'https://' . STATS_DASHBOARD_SERVER . "/wp-admin/index.php";
598	667	}
599	668
600		- $url = add_query_arg( $q, $url );
601		- $method = 'GET';
	669	+ $url = add_query_arg( $q, $url );
	670	+ $method = 'GET';
602	671	$timeout = 90;
603		- $user_id = 0; // Means use the blog token.
	672	+ $user_id = JETPACK_MASTER_USER; // means send the wp.com user_id
604	673
605		- $get = Client::remote_request( compact( 'url', 'method', 'timeout', 'user_id' ) );
	674	+ $get = Jetpack_Client::remote_request( compact( 'url', 'method', 'timeout', 'user_id' ) );
606	675	$get_code = wp_remote_retrieve_response_code( $get );
607		- if ( is_wp_error( $get ) || ( 2 !== (int) ( $get_code / 100 ) && 304 !== $get_code ) || empty( $get['body'] ) ) {
	676	+ if ( is_wp_error( $get ) || ( 2 !== intval( $get_code / 100 ) && 304 !== $get_code ) || empty( $get['body'] ) ) {
608	677	stats_print_wp_remote_error( $get, $url );
609		- } elseif ( ! empty( $get['headers']['content-type'] ) ) {
610		- $type = $get['headers']['content-type'];
611		- if ( str_starts_with( $type, 'image' ) ) {
612		- $img = $get['body'];
613		- header( 'Content-Type: ' . $type );
614		- header( 'Content-Length: ' . strlen( $img ) );
615		- echo $img; // phpcs:ignore WordPress.Security.EscapeOutput.OutputNotEscaped
616		- die();
	678	+ } else {
	679	+ if ( ! empty( $get['headers']['content-type'] ) ) {
	680	+ $type = $get['headers']['content-type'];
	681	+ if ( substr( $type, 0, 5 ) === 'image' ) {
	682	+ $img = $get['body'];
	683	+ header( 'Content-Type: ' . $type );
	684	+ header( 'Content-Length: ' . strlen( $img ) );
	685	+ echo $img;
	686	+ die();
	687	+ }
617	688	}
	689	+ $body = stats_convert_post_titles( $get['body'] );
	690	+ $body = stats_convert_chart_urls( $body );
	691	+ $body = stats_convert_image_urls( $body );
	692	+ $body = stats_convert_admin_urls( $body );
	693	+ echo $body;
618	694	}
619	695
620		- if ( isset( $_GET['page'] ) && 'stats' === $_GET['page'] && ! isset( $_GET['chart'] ) ) { // phpcs:ignore WordPress.Security.NonceVerification.Recommended
621		- $tracking = new Tracking();
622		- $tracking->record_user_event( 'wpa_page_view', array( 'path' => 'old_stats' ) );
	696	+ if ( isset( $_GET['page'] ) && 'stats' === $_GET['page'] && ! isset( $_GET['chart'] ) ) {
	697	+ JetpackTracking::record_user_event( 'wpa_page_view', array( 'path' => 'old_stats' ) );
623	698	}
624	699
625		- if ( isset( $_GET['noheader'] ) ) { // phpcs:ignore WordPress.Security.NonceVerification.Recommended
	700	+ if ( isset( $_GET['noheader'] ) ) {
626	701	die;
627	702	}
628	703	}
629	704
630	705	/**
	706	+ * Stats Convert Admin Urls.
	707	+ *
	708	+ * @access public
	709	+ * @param mixed $html HTML.
	710	+ * @return string
	711	+ */
	712	+function stats_convert_admin_urls( $html ) {
	713	+ return str_replace( 'index.php?page=stats', 'admin.php?page=stats', $html );
	714	+}
	715	+
	716	+/**
631	717	* Stats Convert Image URLs.
632	718	*
633	719	* @access public
634	720	* @param mixed $html HTML.
		@@ -634,9 +720,9 @@
634	720	* @param mixed $html HTML.
635	721	* @return string
636	722	*/
637	723	function stats_convert_image_urls( $html ) {
638		- $url = set_url_scheme( 'https://' . STATS_DASHBOARD_SERVER );
	724	+ $url = set_url_scheme( 'https://' . STATS_DASHBOARD_SERVER );
639	725	$html = preg_replace( '|(["\'])(/i/stats.+)\\1|', '$1' . $url . '$2$1', $html );
640	726	return $html;
641	727	}
642	728
		@@ -644,9 +730,9 @@
644	730	* Callback for preg_replace_callback used in stats_convert_chart_urls()
645	731	*
646	732	* @since 5.6.0
647	733	*
648		- * @param array $matches The matches resulting from the preg_replace_callback call.
	734	+ * @param array $matches The matches resulting from the preg_replace_callback call.
649	735	* @return string The admin url for the chart.
650	736	*/
651	737	function jetpack_stats_convert_chart_urls_callback( $matches ) {
652	738	// If there is a query string, change the beginning '?' to a '&' so it fits into the middle of this query string.
		@@ -683,12 +769,12 @@
683	769	return $html;
684	770	}
685	771	$posts = get_posts(
686	772	array(
687		- 'include' => implode( ',', $matches[1] ),
688		- 'post_type' => 'any',
689		- 'post_status' => 'any',
690		- 'numberposts' => -1,
	773	+ 'include' => implode( ',', $matches[1] ),
	774	+ 'post_type' => 'any',
	775	+ 'post_status' => 'any',
	776	+ 'numberposts' => -1,
691	777	'suppress_filters' => false,
692	778	)
693	779	);
694	780	foreach ( $posts as $post ) {
		@@ -707,25 +793,130 @@
707	793	*/
708	794	function stats_convert_post_title( $matches ) {
709	795	global $stats_posts;
710	796	$post_id = $matches[1];
711		- if ( isset( $stats_posts[ $post_id ] ) ) {
	797	+ if ( isset( $stats_posts[$post_id] ) )
712	798	return '<a href="' . get_permalink( $post_id ) . '" target="_blank">' . get_the_title( $post_id ) . '</a>';
	799	+ return $matches[0];
	800	+}
	801	+
	802	+/**
	803	+ * Stats Configuration Load.
	804	+ *
	805	+ * @access public
	806	+ * @return void
	807	+ */
	808	+function stats_configuration_load() {
	809	+ if ( isset( $_POST['action'] ) && 'save_options' === $_POST['action'] && $_POST['_wpnonce'] === wp_create_nonce( 'stats' ) ) {
	810	+ $options = stats_get_options();
	811	+ $options['admin_bar'] = isset( $_POST['admin_bar'] ) && $_POST['admin_bar'];
	812	+ $options['hide_smile'] = isset( $_POST['hide_smile'] ) && $_POST['hide_smile'];
	813	+
	814	+ $options['roles'] = array( 'administrator' );
	815	+ foreach ( get_editable_roles() as $role => $details ) {
	816	+ if ( isset( $_POST["role_$role"] ) && $_POST["role_$role"] ) {
	817	+ $options['roles'][] = $role;
	818	+ }
	819	+ }
	820	+
	821	+ $options['count_roles'] = array();
	822	+ foreach ( get_editable_roles() as $role => $details ) {
	823	+ if ( isset( $_POST["count_role_$role"] ) && $_POST["count_role_$role"] ) {
	824	+ $options['count_roles'][] = $role;
	825	+ }
	826	+ }
	827	+
	828	+ stats_set_options( $options );
	829	+ stats_update_blog();
	830	+ Jetpack::state( 'message', 'module_configured' );
	831	+ wp_safe_redirect( Jetpack::module_configuration_url( 'stats' ) );
	832	+ exit;
713	833	}
714		- return $matches[0];
715	834	}
716	835
717	836	/**
718		- * CSS to hide the tracking pixel smiley.
719		- * It is now hidden for everyone (used to be visible if you had set the hide_smile option).
	837	+ * Stats Configuration Head.
720	838	*
721	839	* @access public
722	840	* @return void
723	841	*/
	842	+function stats_configuration_head() {
	843	+?>
	844	+ <style type="text/css">
	845	+ #statserror {
	846	+ border: 1px solid #766;
	847	+ background-color: #d22;
	848	+ padding: 1em 3em;
	849	+ }
	850	+ .stats-smiley {
	851	+ vertical-align: 1px;
	852	+ }
	853	+ </style>
	854	+ <?php
	855	+}
	856	+
	857	+/**
	858	+ * Stats Configuration Screen.
	859	+ *
	860	+ * @access public
	861	+ * @return void
	862	+ */
	863	+function stats_configuration_screen() {
	864	+ $options = stats_get_options();
	865	+?>
	866	+ <div class="narrow">
	867	+ <p><?php printf( __( 'Visit <a href="%s">Site Stats</a> to see your stats.', 'jetpack' ), esc_url( menu_page_url( 'stats', false ) ) ); ?></p>
	868	+ <form method="post">
	869	+ <input type='hidden' name='action' value='save_options' />
	870	+ <?php wp_nonce_field( 'stats' ); ?>
	871	+ <table id="menu" class="form-table">
	872	+ <tr valign="top"><th scope="row"><label for="admin_bar"><?php esc_html_e( 'Admin bar' , 'jetpack' ); ?></label></th>
	873	+ <td><label><input type='checkbox'<?php checked( $options['admin_bar'] ); ?> name='admin_bar' id='admin_bar' /> <?php esc_html_e( 'Put a chart showing 48 hours of views in the admin bar.', 'jetpack' ); ?></label></td></tr>
	874	+ <tr valign="top"><th scope="row"><?php esc_html_e( 'Registered users', 'jetpack' ); ?></th>
	875	+ <td>
	876	+ <?php esc_html_e( "Count the page views of registered users who are logged in.", 'jetpack' ); ?><br/>
	877	+ <?php
	878	+ $count_roles = stats_get_option( 'count_roles' );
	879	+ foreach ( get_editable_roles() as $role => $details ) {
	880	+?>
	881	+ <label><input type='checkbox' name='count_role_<?php echo $role; ?>'<?php checked( in_array( $role, $count_roles ) ); ?> /> <?php echo translate_user_role( $details['name'] ); ?></label><br/>
	882	+ <?php
	883	+ }
	884	+?>
	885	+ </td></tr>
	886	+ <tr valign="top"><th scope="row"><?php esc_html_e( 'Smiley' , 'jetpack' ); ?></th>
	887	+ <td><label><input type='checkbox'<?php checked( isset( $options['hide_smile'] ) && $options['hide_smile'] ); ?> name='hide_smile' id='hide_smile' /> <?php esc_html_e( 'Hide the stats smiley face image.', 'jetpack' ); ?></label><br /> <span class="description"><?php echo wp_kses( __( 'The image helps collect stats and <strong>makes the world a better place</strong> but should still work when hidden', 'jetpack' ), array( 'strong' => array() ) ); ?> <img class="stats-smiley" alt="<?php esc_attr_e( 'Smiley face', 'jetpack' ); ?>" src="<?php echo esc_url( plugins_url( 'images/stats-smiley.gif', dirname( __FILE__ ) ) ); ?>" width="6" height="5" /></span></td></tr>
	888	+ <tr valign="top"><th scope="row"><?php esc_html_e( 'Report visibility' , 'jetpack' ); ?></th>
	889	+ <td>
	890	+ <?php esc_html_e( 'Select the roles that will be able to view stats reports.', 'jetpack' ); ?><br/>
	891	+ <?php
	892	+ $stats_roles = stats_get_option( 'roles' );
	893	+ foreach ( get_editable_roles() as $role => $details ) {
	894	+?>
	895	+ <label><input type='checkbox' <?php if ( 'administrator' === $role ) echo "disabled='disabled' "; ?>name='role_<?php echo $role; ?>'<?php checked( 'administrator' === $role || in_array( $role, $stats_roles ) ); ?> /> <?php echo translate_user_role( $details['name'] ); ?></label><br/>
	896	+ <?php
	897	+ }
	898	+?>
	899	+ </td></tr>
	900	+ </table>
	901	+ <p class="submit"><input type='submit' class='button-primary' value='<?php echo esc_attr( __( 'Save configuration', 'jetpack' ) ); ?>' /></p>
	902	+ </form>
	903	+ </div>
	904	+ <?php
	905	+}
	906	+
	907	+/**
	908	+ * Stats Hide Smile.
	909	+ *
	910	+ * @access public
	911	+ * @return void
	912	+ */
724	913	function stats_hide_smile_css() {
725		- ?>
726		-<style>img#wpstats{display:none}</style>
727		- <?php
	914	+ $options = stats_get_options();
	915	+ if ( isset( $options['hide_smile'] ) && $options['hide_smile'] ) {
	916	+?>
	917	+<style type='text/css'>img#wpstats{display:none}</style><?php
	918	+ }
728	919	}
729	920
730	921	/**
731	922	* Stats Admin Bar Head.
		@@ -733,29 +924,22 @@
733	924	* @access public
734	925	* @return void
735	926	*/
736	927	function stats_admin_bar_head() {
737		- // Let's not show the stats admin bar to users who are not logged in.
738		- if ( ! is_user_logged_in() ) {
	928	+ if ( ! stats_get_option( 'admin_bar' ) )
739	929	return;
740		- }
741	930
742		- if ( ! Stats_Options::get_option( 'admin_bar' ) ) {
	931	+ if ( ! current_user_can( 'view_stats' ) )
743	932	return;
744		- }
745	933
746		- if ( ! current_user_can( 'view_stats' ) ) {
747		- return;
748		- }
749		-
750	934	if ( ! is_admin_bar_showing() ) {
751	935	return;
752	936	}
753	937
754	938	add_action( 'admin_bar_menu', 'stats_admin_bar_menu', 100 );
755		- ?>
	939	+?>
756	940
757		-<style data-ampdevmode type='text/css'>
	941	+<style type='text/css'>
758	942	#wpadminbar .quicklinks li#wp-admin-bar-stats {
759	943	height: 32px;
760	944	}
761	945	#wpadminbar .quicklinks li#wp-admin-bar-stats a {
		@@ -778,35 +962,12 @@
778	962	max-width: none;
779	963	border: none;
780	964	}
781	965	</style>
782		- <?php
	966	+<?php
783	967	}
784	968
785	969	/**
786		- * Gets the image source of the given stats chart.
787		- *
788		- * @param string $chart Name of the chart.
789		- * @param array $args Extra list of argument to use in the image source.
790		- * @return string An image source.
791		- */
792		-function stats_get_image_chart_src( $chart, $args = array() ) {
793		- $url = add_query_arg( 'page', 'stats', admin_url( 'admin.php' ) );
794		-
795		- return add_query_arg(
796		- array_merge(
797		- array(
798		- 'noheader' => '',
799		- 'proxy' => '',
800		- 'chart' => $chart,
801		- ),
802		- $args
803		- ),
804		- $url
805		- );
806		-}
807		-
808		-/**
809	970	* Stats AdminBar.
810	971	*
811	972	* @access public
812	973	* @param mixed $wp_admin_bar WPAdminBar.
		@@ -812,67 +973,130 @@
812	973	* @param mixed $wp_admin_bar WPAdminBar.
813	974	* @return void
814	975	*/
815	976	function stats_admin_bar_menu( &$wp_admin_bar ) {
816		- $img_src = esc_attr( stats_get_image_chart_src( 'admin-bar-hours-scale' ) );
817		- $img_src_2x = esc_attr( stats_get_image_chart_src( 'admin-bar-hours-scale-2x' ) );
818		- $alt = esc_attr( __( 'Stats', 'jetpack' ) );
819		- $title = esc_attr( __( 'Views over 48 hours. Click for more Jetpack Stats.', 'jetpack' ) );
	977	+ $url = add_query_arg( 'page', 'stats', admin_url( 'admin.php' ) ); // no menu_page_url() blog-side.
820	978
	979	+ $img_src = esc_attr( add_query_arg( array( 'noheader' => '', 'proxy' => '', 'chart' => 'admin-bar-hours-scale' ), $url ) );
	980	+ $img_src_2x = esc_attr( add_query_arg( array( 'noheader' => '', 'proxy' => '', 'chart' => 'admin-bar-hours-scale-2x' ), $url ) );
	981	+
	982	+ $alt = esc_attr( __( 'Stats', 'jetpack' ) );
	983	+
	984	+ $title = esc_attr( __( 'Views over 48 hours. Click for more Site Stats.', 'jetpack' ) );
	985	+
821	986	$menu = array(
822		- 'id' => 'stats',
823		- 'href' => add_query_arg( 'page', 'stats', admin_url( 'admin.php' ) ), // no menu_page_url() blog-side.
824		- 'title' => "<div><img src='$img_src' srcset='$img_src 1x, $img_src_2x 2x' width='112' height='24' alt='$alt' title='$title'></div>",
	987	+ 'id' => 'stats',
	988	+ 'href' => $url,
825	989	);
	990	+ if ( Jetpack_AMP_Support::is_amp_request() ) {
	991	+ $menu['title'] = "<amp-img src='$img_src_2x' width=112 height=24 layout=fixed alt='$alt' title='$title'></amp-img>";
	992	+ } else {
	993	+ $menu['title'] = "<div><script type='text/javascript'>var src;if(typeof(window.devicePixelRatio)=='undefined'||window.devicePixelRatio<2){src='$img_src';}else{src='$img_src_2x';}document.write('<img src=\''+src+'\' alt=\'$alt\' title=\'$title\' />');</script></div>";
	994	+ }
826	995
827	996	$wp_admin_bar->add_menu( $menu );
828	997	}
829	998
830	999	/**
831		- *
832		- * Deprecated. The stats module should not update blog details. This is handled by Sync.
833		- *
834	1000	* Stats Update Blog.
835	1001	*
836	1002	* @access public
837	1003	* @return void
838		- *
839		- * @deprecated since 10.3.
840	1004	*/
841	1005	function stats_update_blog() {
842		- _deprecated_function( __METHOD__, 'jetpack-10.3' );
843		- XMLRPC_Async_Call::add_call( 'jetpack.updateBlog', 0, stats_get_blog() );
	1006	+ Jetpack::xmlrpc_async_call( 'jetpack.updateBlog', stats_get_blog() );
844	1007	}
845	1008
846	1009	/**
847	1010	* Stats Get Blog.
848	1011	*
849		- * @deprecated 11.5
	1012	+ * @access public
	1013	+ * @return string
	1014	+ */
	1015	+function stats_get_blog() {
	1016	+ $home = parse_url( trailingslashit( get_option( 'home' ) ) );
	1017	+ $blog = array(
	1018	+ 'host' => $home['host'],
	1019	+ 'path' => $home['path'],
	1020	+ 'blogname' => get_option( 'blogname' ),
	1021	+ 'blogdescription' => get_option( 'blogdescription' ),
	1022	+ 'siteurl' => get_option( 'siteurl' ),
	1023	+ 'gmt_offset' => get_option( 'gmt_offset' ),
	1024	+ 'timezone_string' => get_option( 'timezone_string' ),
	1025	+ 'stats_version' => STATS_VERSION,
	1026	+ 'stats_api' => 'jetpack',
	1027	+ 'page_on_front' => get_option( 'page_on_front' ),
	1028	+ 'permalink_structure' => get_option( 'permalink_structure' ),
	1029	+ 'category_base' => get_option( 'category_base' ),
	1030	+ 'tag_base' => get_option( 'tag_base' ),
	1031	+ );
	1032	+ $blog = array_merge( stats_get_options(), $blog );
	1033	+ unset( $blog['roles'], $blog['blog_id'] );
	1034	+ return stats_esc_html_deep( $blog );
	1035	+}
	1036	+
	1037	+/**
	1038	+ * Modified from stripslashes_deep()
850	1039	*
851	1040	* @access public
	1041	+ * @param mixed $value Value.
852	1042	* @return string
853	1043	*/
854		-function stats_get_blog() {
855		- _deprecated_function( __METHOD__, 'jetpack-11.5' );
856		- return Stats_XMLRPC::init()->get_blog();
	1044	+function stats_esc_html_deep( $value ) {
	1045	+ if ( is_array( $value ) ) {
	1046	+ $value = array_map( 'stats_esc_html_deep', $value );
	1047	+ } elseif ( is_object( $value ) ) {
	1048	+ $vars = get_object_vars( $value );
	1049	+ foreach ( $vars as $key => $data ) {
	1050	+ $value->{$key} = stats_esc_html_deep( $data );
	1051	+ }
	1052	+ } elseif ( is_string( $value ) ) {
	1053	+ $value = esc_html( $value );
	1054	+ }
	1055	+
	1056	+ return $value;
857	1057	}
858	1058
859	1059	/**
	1060	+ * Stats xmlrpc_methods function.
	1061	+ *
	1062	+ * @access public
	1063	+ * @param mixed $methods Methods.
	1064	+ * @return array
	1065	+ */
	1066	+function stats_xmlrpc_methods( $methods ) {
	1067	+ $my_methods = array(
	1068	+ 'jetpack.getBlog' => 'stats_get_blog',
	1069	+ );
	1070	+
	1071	+ return array_merge( $methods, $my_methods );
	1072	+}
	1073	+
	1074	+/**
	1075	+ * Register Stats Dashboard Widget.
	1076	+ *
	1077	+ * @access public
	1078	+ * @return void
	1079	+ */
	1080	+function stats_register_dashboard_widget() {
	1081	+ if ( ! current_user_can( 'view_stats' ) )
	1082	+ return;
	1083	+
	1084	+ // With wp_dashboard_empty: we load in the content after the page load via JS.
	1085	+ wp_add_dashboard_widget( 'dashboard_stats', __( 'Site Stats', 'jetpack' ), 'wp_dashboard_empty', 'stats_dashboard_widget_control' );
	1086	+
	1087	+ add_action( 'admin_head', 'stats_dashboard_head' );
	1088	+}
	1089	+
	1090	+/**
860	1091	* Stats Dashboard Widget Options.
861	1092	*
862		- * TODO: This should be moved into class-jetpack-stats-dashboard-widget.php.
863		- *
864	1093	* @access public
865	1094	* @return array
866	1095	*/
867	1096	function stats_dashboard_widget_options() {
868		- $defaults = array(
869		- 'chart' => 1,
870		- 'top' => 1,
871		- 'search' => 7,
872		- );
873		- $options = get_option( 'stats_dashboard_widget' );
874		- if ( ( ! $options ) || ! is_array( $options ) ) {
	1097	+ $defaults = array( 'chart' => 1, 'top' => 1, 'search' => 7 );
	1098	+ if ( ( ! $options = get_option( 'stats_dashboard_widget' ) ) || ! is_array( $options ) ) {
875	1099	$options = array();
876	1100	}
877	1101
878	1102	// Ignore obsolete option values.
		@@ -877,97 +1101,65 @@
877	1101
878	1102	// Ignore obsolete option values.
879	1103	$intervals = array( 1, 7, 31, 90, 365 );
880	1104	foreach ( array( 'top', 'search' ) as $key ) {
881		- if ( isset( $options[ $key ] ) && ! in_array( (int) $options[ $key ], $intervals, true ) ) {
	1105	+ if ( isset( $options[ $key ] ) && ! in_array( $options[ $key ], $intervals ) ) {
882	1106	unset( $options[ $key ] );
883	1107	}
884	1108	}
885	1109
886		- return array_merge( $defaults, $options );
	1110	+ return array_merge( $defaults, $options );
887	1111	}
888	1112
889	1113	/**
890	1114	* Stats Dashboard Widget Control.
891	1115	*
892		- * TODO: This should be moved into class-jetpack-stats-dashboard-widget.php.
893		- *
894	1116	* @access public
895	1117	* @return void
896	1118	*/
897	1119	function stats_dashboard_widget_control() {
898		- stats_dashboard_widget_controls_handle_submission();
899	1120	$periods = array(
900		- '1' => __( 'day', 'jetpack' ),
901		- '7' => __( 'week', 'jetpack' ),
	1121	+ '1' => __( 'day', 'jetpack' ),
	1122	+ '7' => __( 'week', 'jetpack' ),
902	1123	'31' => __( 'month', 'jetpack' ),
903	1124	);
904	1125	$intervals = array(
905		- '1' => __( 'the past day', 'jetpack' ),
906		- '7' => __( 'the past week', 'jetpack' ),
907		- '31' => __( 'the past month', 'jetpack' ),
908		- '90' => __( 'the past quarter', 'jetpack' ),
	1126	+ '1' => __( 'the past day', 'jetpack' ),
	1127	+ '7' => __( 'the past week', 'jetpack' ),
	1128	+ '31' => __( 'the past month', 'jetpack' ),
	1129	+ '90' => __( 'the past quarter', 'jetpack' ),
909	1130	'365' => __( 'the past year', 'jetpack' ),
910	1131	);
911		- stats_dashboard_widget_controls_html( $intervals, $periods, stats_dashboard_widget_options() );
912		-}
913		-
914		-/**
915		- * Handle widget controls form submission.
916		- *
917		- * TODO: This should be moved into class-jetpack-stats-dashboard-widget.php.
918		- *
919		- * @access public
920		- * @return void
921		- */
922		-function stats_dashboard_widget_controls_handle_submission() {
923		- $options = stats_dashboard_widget_options();
924	1132	$defaults = array(
925		- 'top' => 1,
	1133	+ 'top' => 1,
926	1134	'search' => 7,
927	1135	);
928	1136
929		- // Check if the correct form was submitted.
930		- if ( isset( $_POST['stats_id'] ) && 'dashboard_stats' === $_POST['stats_id'] ) {
931		- // Perform nonce verification.
932		- if (
933		- isset( $_POST['dashboard-widget-nonce'] ) &&
934		- wp_verify_nonce( filter_var( wp_unslash( $_POST['dashboard-widget-nonce'] ) ), 'edit-dashboard-widget_dashboard_stats' )
935		- ) {
936		- // Update options.
937		- $options['chart'] = isset( $_POST['chart'] ) ? (int) $_POST['chart'] : 1;
938		- foreach ( array( 'top', 'search' ) as $key ) {
939		- $options[ $key ] = isset( $_POST[ $key ] ) ? (int) $_POST[ $key ] : $defaults[ $key ];
	1137	+ $options = stats_dashboard_widget_options();
	1138	+
	1139	+ if ( 'post' === strtolower( $_SERVER['REQUEST_METHOD'] ) && isset( $_POST['widget_id'] ) && 'dashboard_stats' === $_POST['widget_id'] ) {
	1140	+ if ( isset( $periods[ $_POST['chart'] ] ) ) {
	1141	+ $options['chart'] = $_POST['chart'];
	1142	+ }
	1143	+ foreach ( array( 'top', 'search' ) as $key ) {
	1144	+ if ( isset( $intervals[ $_POST[ $key ] ] ) ) {
	1145	+ $options[ $key ] = $_POST[ $key ];
	1146	+ } else { $options[ $key ] = $defaults[ $key ];
940	1147	}
941		- update_option( 'stats_dashboard_widget', $options );
942	1148	}
	1149	+ update_option( 'stats_dashboard_widget', $options );
943	1150	}
944		-}
945		-
946		-/**
947		- * Output HTML for widget controls.
948		- *
949		- * @param array $intervals Array of intervals.
950		- * @param array $periods Array of periods.
951		- * @param array $options Array of options.
952		- *
953		- * TODO: This should be moved into class-jetpack-stats-dashboard-widget.php.
954		- *
955		- * @access public
956		- * @return void
957		- */
958		-function stats_dashboard_widget_controls_html( $intervals, $periods, $options ) {
959		- ?>
	1151	+?>
960	1152	<p>
961		- <label for="chart"><?php esc_html_e( 'Chart stats by', 'jetpack' ); ?></label>
	1153	+ <label for="chart"><?php esc_html_e( 'Chart stats by' , 'jetpack' ); ?></label>
962	1154	<select id="chart" name="chart">
963	1155	<?php
964	1156	foreach ( $periods as $val => $label ) {
965		- ?>
966		- <option value="<?php echo esc_attr( $val ); ?>"<?php selected( $val, $options['chart'] ); ?>><?php echo esc_html( $label ); ?></option>
	1157	+?>
	1158	+ <option value="<?php echo $val; ?>"<?php selected( $val, $options['chart'] ); ?>><?php echo esc_html( $label ); ?></option>
967	1159	<?php
968	1160	}
969		- ?>
	1161	+?>
970	1162	</select>.
971	1163	</p>
972	1164
973	1165	<p>
		@@ -974,13 +1166,13 @@
974	1166	<label for="top"><?php esc_html_e( 'Show top posts over', 'jetpack' ); ?></label>
975	1167	<select id="top" name="top">
976	1168	<?php
977	1169	foreach ( $intervals as $val => $label ) {
978		- ?>
979		- <option value="<?php echo esc_attr( $val ); ?>"<?php selected( $val, $options['top'] ); ?>><?php echo esc_html( $label ); ?></option>
	1170	+?>
	1171	+ <option value="<?php echo $val; ?>"<?php selected( $val, $options['top'] ); ?>><?php echo esc_html( $label ); ?></option>
980	1172	<?php
981	1173	}
982		- ?>
	1174	+?>
983	1175	</select>.
984	1176	</p>
985	1177
986	1178	<p>
		@@ -987,13 +1179,13 @@
987	1179	<label for="search"><?php esc_html_e( 'Show top search terms over', 'jetpack' ); ?></label>
988	1180	<select id="search" name="search">
989	1181	<?php
990	1182	foreach ( $intervals as $val => $label ) {
991		- ?>
992		- <option value="<?php echo esc_attr( $val ); ?>"<?php selected( $val, $options['search'] ); ?>><?php echo esc_html( $label ); ?></option>
	1183	+?>
	1184	+ <option value="<?php echo $val; ?>"<?php selected( $val, $options['search'] ); ?>><?php echo esc_html( $label ); ?></option>
993	1185	<?php
994	1186	}
995		- ?>
	1187	+?>
996	1188	</select>.
997	1189	</p>
998	1190	<?php
999	1191	}
		@@ -1000,53 +1192,207 @@
1000	1192
1001	1193	/**
1002	1194	* Jetpack Stats Dashboard Widget.
1003	1195	*
1004		- * TODO: This should be moved into class-jetpack-stats-dashboard-widget.php.
1005		- *
1006	1196	* @access public
1007	1197	* @return void
1008	1198	*/
1009	1199	function stats_jetpack_dashboard_widget() {
1010		- ?>
	1200	+?>
1011	1201	<form id="stats_dashboard_widget_control" action="<?php echo esc_url( admin_url() ); ?>" method="post">
1012	1202	<?php stats_dashboard_widget_control(); ?>
1013	1203	<?php wp_nonce_field( 'edit-dashboard-widget_dashboard_stats', 'dashboard-widget-nonce' ); ?>
1014		- <input type="hidden" name="stats_id" value="dashboard_stats" />
	1204	+ <input type="hidden" name="widget_id" value="dashboard_stats" />
1015	1205	<?php submit_button( __( 'Submit', 'jetpack' ) ); ?>
1016	1206	</form>
1017		- <button type="button" class="handlediv js-toggle-stats_dashboard_widget_control" aria-expanded="true">
1018		- <span class="screen-reader-text"><?php esc_html_e( 'Configure', 'jetpack' ); ?></span>
1019		- <span class="toggle-indicator" aria-hidden="true"></span>
1020		- </button>
1021		- <div id="dashboard_stats" class="is-loading">
	1207	+ <span class="js-toggle-stats_dashboard_widget_control">
	1208	+ <?php esc_html_e( 'Configure', 'jetpack' ); ?>
	1209	+ </span>
	1210	+ <div id="dashboard_stats">
1022	1211	<div class="inside">
1023	1212	<div style="height: 250px;"></div>
1024	1213	</div>
1025	1214	</div>
	1215	+ <script>
	1216	+ jQuery(document).ready(function($){
	1217	+ var $toggle = $('.js-toggle-stats_dashboard_widget_control');
	1218	+
	1219	+ $toggle.parent().prev().append( $toggle );
	1220	+ $toggle.show().click(function(e){
	1221	+ e.preventDefault();
	1222	+ e.stopImmediatePropagation();
	1223	+ $(this).parent().toggleClass('controlVisible');
	1224	+ $('#stats_dashboard_widget_control').slideToggle();
	1225	+ });
	1226	+ });
	1227	+ </script>
	1228	+ <style>
	1229	+ .js-toggle-stats_dashboard_widget_control {
	1230	+ display: none;
	1231	+ float: right;
	1232	+ margin-top: 0.2em;
	1233	+ font-weight: 400;
	1234	+ color: #444;
	1235	+ font-size: .8em;
	1236	+ text-decoration: underline;
	1237	+ cursor: pointer;
	1238	+ }
	1239	+ #stats_dashboard_widget_control {
	1240	+ display: none;
	1241	+ padding: 0 10px;
	1242	+ overflow: hidden;
	1243	+ }
	1244	+ #stats_dashboard_widget_control .button-primary {
	1245	+ float: right;
	1246	+ }
	1247	+ #dashboard_stats {
	1248	+ box-sizing: border-box;
	1249	+ width: 100%;
	1250	+ padding: 0 10px;
	1251	+ }
	1252	+ </style>
1026	1253	<?php
1027	1254	}
1028	1255
1029	1256	/**
	1257	+ * Register Stats Widget Control Callback.
	1258	+ *
	1259	+ * @access public
	1260	+ * @return void
	1261	+ */
	1262	+function stats_register_widget_control_callback() {
	1263	+ $GLOBALS['wp_dashboard_control_callbacks']['dashboard_stats'] = 'stats_dashboard_widget_control';
	1264	+}
	1265	+
	1266	+/**
	1267	+ * JavaScript and CSS for dashboard widget.
	1268	+ *
	1269	+ * @access public
	1270	+ * @return void
	1271	+ */
	1272	+function stats_dashboard_head() { ?>
	1273	+<script type="text/javascript">
	1274	+/* <![CDATA[ */
	1275	+jQuery( function($) {
	1276	+ var dashStats = jQuery( '#dashboard_stats div.inside' );
	1277	+
	1278	+ if ( dashStats.find( '.dashboard-widget-control-form' ).length ) {
	1279	+ return;
	1280	+ }
	1281	+
	1282	+ if ( ! dashStats.length ) {
	1283	+ dashStats = jQuery( '#dashboard_stats div.dashboard-widget-content' );
	1284	+ var h = parseInt( dashStats.parent().height() ) - parseInt( dashStats.prev().height() );
	1285	+ var args = 'width=' + dashStats.width() + '&height=' + h.toString();
	1286	+ } else {
	1287	+ if ( jQuery('#dashboard_stats' ).hasClass('postbox') ) {
	1288	+ var args = 'width=' + ( dashStats.prev().width() * 2 ).toString();
	1289	+ } else {
	1290	+ var args = 'width=' + ( dashStats.width() * 2 ).toString();
	1291	+ }
	1292	+ }
	1293	+
	1294	+ dashStats
	1295	+ .not( '.dashboard-widget-control' )
	1296	+ .load( 'admin.php?page=stats&noheader&dashboard&' + args );
	1297	+
	1298	+ jQuery( window ).one( 'resize', function() {
	1299	+ jQuery( '#stat-chart' ).css( 'width', 'auto' );
	1300	+ } );
	1301	+} );
	1302	+/* ]]> */
	1303	+</script>
	1304	+<style type="text/css">
	1305	+/* <![CDATA[ */
	1306	+#stat-chart {
	1307	+ background: none !important;
	1308	+}
	1309	+#dashboard_stats .inside {
	1310	+ margin: 10px 0 0 0 !important;
	1311	+}
	1312	+#dashboard_stats #stats-graph {
	1313	+ margin: 0;
	1314	+}
	1315	+#stats-info {
	1316	+ border-top: 1px solid #dfdfdf;
	1317	+ margin: 7px -10px 0 -10px;
	1318	+ padding: 10px;
	1319	+ background: #fcfcfc;
	1320	+ -moz-box-shadow:inset 0 1px 0 #fff;
	1321	+ -webkit-box-shadow:inset 0 1px 0 #fff;
	1322	+ box-shadow:inset 0 1px 0 #fff;
	1323	+ overflow: hidden;
	1324	+ border-radius: 0 0 2px 2px;
	1325	+ -webkit-border-radius: 0 0 2px 2px;
	1326	+ -moz-border-radius: 0 0 2px 2px;
	1327	+ -khtml-border-radius: 0 0 2px 2px;
	1328	+}
	1329	+#stats-info #top-posts, #stats-info #top-search {
	1330	+ float: left;
	1331	+ width: 50%;
	1332	+}
	1333	+#stats-info #top-posts {
	1334	+ padding-right: 3%;
	1335	+}
	1336	+#top-posts .stats-section-inner p {
	1337	+ white-space: nowrap;
	1338	+ overflow: hidden;
	1339	+}
	1340	+#top-posts .stats-section-inner p a {
	1341	+ overflow: hidden;
	1342	+ text-overflow: ellipsis;
	1343	+}
	1344	+#stats-info div#active {
	1345	+ border-top: 1px solid #dfdfdf;
	1346	+ margin: 0 -10px;
	1347	+ padding: 10px 10px 0 10px;
	1348	+ -moz-box-shadow:inset 0 1px 0 #fff;
	1349	+ -webkit-box-shadow:inset 0 1px 0 #fff;
	1350	+ box-shadow:inset 0 1px 0 #fff;
	1351	+ overflow: hidden;
	1352	+}
	1353	+#top-search p {
	1354	+ color: #999;
	1355	+}
	1356	+#stats-info h3 {
	1357	+ font-size: 1em;
	1358	+ margin: 0 0 .5em 0 !important;
	1359	+}
	1360	+#stats-info p {
	1361	+ margin: 0 0 .25em;
	1362	+ color: #999;
	1363	+}
	1364	+#stats-info p.widget-loading {
	1365	+ margin: 1em 0 0;
	1366	+ color: #333;
	1367	+}
	1368	+#stats-info p a {
	1369	+ display: block;
	1370	+}
	1371	+#stats-info p a.button {
	1372	+ display: inline;
	1373	+}
	1374	+/* ]]> */
	1375	+</style>
	1376	+<?php
	1377	+}
	1378	+
	1379	+/**
1030	1380	* Stats Dashboard Widget Content.
1031	1381	*
1032		- * TODO: This should be moved into class-jetpack-stats-dashboard-widget.php.
1033		- *
1034	1382	* @access public
1035		- * @return never
	1383	+ * @return void
1036	1384	*/
1037	1385	function stats_dashboard_widget_content() {
1038		- $width = isset( $_GET['width'] ) ? intval( $_GET['width'] ) / 2 : null; // phpcs:ignore WordPress.Security.NonceVerification.Recommended
1039		- $height = isset( $_GET['height'] ) ? intval( $_GET['height'] ) - 36 : null; // phpcs:ignore WordPress.Security.NonceVerification.Recommended
1040		- if ( ! $width || $width < 250 ) {
	1386	+ if ( ! isset( $_GET['width'] ) || ( ! $width = (int) ( $_GET['width'] / 2 ) ) || $width < 250 ) {
1041	1387	$width = 370;
1042	1388	}
1043		- if ( ! $height || $height < 230 ) {
	1389	+ if ( ! isset( $_GET['height'] ) || ( ! $height = (int) $_GET['height'] - 36 ) || $height < 230 ) {
1044	1390	$height = 180;
1045	1391	}
1046	1392
1047		- $_width = $width - 5;
1048		- $_height = $height - 5;
	1393	+ $_width = $width - 5;
	1394	+ $_height = $height - ( $GLOBALS['is_winIE'] ? 16 : 5 ); // Hack!
1049	1395
1050	1396	$options = stats_dashboard_widget_options();
1051	1397	$blog_id = Jetpack_Options::get_option( 'id' );
1052	1398
		@@ -1051,50 +1397,48 @@
1051	1397	$blog_id = Jetpack_Options::get_option( 'id' );
1052	1398
1053	1399	$q = array(
1054	1400	'noheader' => 'true',
1055		- 'proxy' => '',
1056		- 'blog' => $blog_id,
1057		- 'page' => 'stats',
1058		- 'chart' => '',
1059		- 'unit' => $options['chart'],
1060		- 'color' => get_user_option( 'admin_color' ),
1061		- 'width' => $_width,
1062		- 'height' => $_height,
1063		- 'ssl' => is_ssl(),
1064		- 'j' => sprintf( '%s:%s', JETPACK__API_VERSION, JETPACK__VERSION ),
	1401	+ 'proxy' => '',
	1402	+ 'blog' => $blog_id,
	1403	+ 'page' => 'stats',
	1404	+ 'chart' => '',
	1405	+ 'unit' => $options['chart'],
	1406	+ 'color' => get_user_option( 'admin_color' ),
	1407	+ 'width' => $_width,
	1408	+ 'height' => $_height,
	1409	+ 'ssl' => is_ssl(),
	1410	+ 'j' => sprintf( '%s:%s', JETPACK__API_VERSION, JETPACK__VERSION ),
1065	1411	);
1066	1412
1067		- $url = 'https://' . STATS_DASHBOARD_SERVER . '/wp-admin/index.php';
	1413	+ $url = 'https://' . STATS_DASHBOARD_SERVER . "/wp-admin/index.php";
1068	1414
1069		- $url = add_query_arg( $q, $url );
1070		- $method = 'GET';
	1415	+ $url = add_query_arg( $q, $url );
	1416	+ $method = 'GET';
1071	1417	$timeout = 90;
1072		- $user_id = 0; // Means use the blog token.
	1418	+ $user_id = JETPACK_MASTER_USER;
1073	1419
1074		- $get = Client::remote_request( compact( 'url', 'method', 'timeout', 'user_id' ) );
	1420	+ $get = Jetpack_Client::remote_request( compact( 'url', 'method', 'timeout', 'user_id' ) );
1075	1421	$get_code = wp_remote_retrieve_response_code( $get );
1076		- if ( is_wp_error( $get ) || ( 2 !== (int) ( $get_code / 100 ) && 304 !== $get_code ) || empty( $get['body'] ) ) {
	1422	+ if ( is_wp_error( $get ) || ( 2 !== intval( $get_code / 100 ) && 304 !== $get_code ) || empty( $get['body'] ) ) {
1077	1423	stats_print_wp_remote_error( $get, $url );
1078	1424	} else {
1079	1425	$body = stats_convert_post_titles( $get['body'] );
1080	1426	$body = stats_convert_chart_urls( $body );
1081	1427	$body = stats_convert_image_urls( $body );
1082		- echo $body; // phpcs:ignore WordPress.Security.EscapeOutput
	1428	+ echo $body;
1083	1429	}
1084	1430
1085	1431	$post_ids = array();
1086	1432
1087		- $csv_end_date = current_time( 'Y-m-d' );
1088		- $csv_args = array(
1089		- 'top' => "&limit=6&end=$csv_end_date",
1090		- 'search' => "&limit=5&end=$csv_end_date",
1091		- );
	1433	+ $csv_end_date = date( 'Y-m-d', current_time( 'timestamp' ) );
	1434	+ $csv_args = array( 'top' => "&limit=8&end=$csv_end_date", 'search' => "&limit=5&end=$csv_end_date" );
	1435	+ /* Translators: Stats dashboard widget postviews list: "$post_title $views Views". */
	1436	+ $printf = __( '%1$s %2$s Views' , 'jetpack' );
1092	1437
1093		- $top_posts = stats_get_csv( 'postviews', "days=$options[top]$csv_args[top]" );
1094		- foreach ( $top_posts as $i => $post ) {
	1438	+ foreach ( $top_posts = stats_get_csv( 'postviews', "days=$options[top]$csv_args[top]" ) as $i => $post ) {
1095	1439	if ( 0 === $post['post_id'] ) {
1096		- unset( $top_posts[ $i ] );
	1440	+ unset( $top_posts[$i] );
1097	1441	continue;
1098	1442	}
1099	1443	$post_ids[] = $post['post_id'];
1100	1444	}
		@@ -1099,13 +1443,12 @@
1099	1443	$post_ids[] = $post['post_id'];
1100	1444	}
1101	1445
1102	1446	// Cache.
1103		- get_posts( array( 'include' => implode( ',', array_unique( $post_ids ) ) ) );
	1447	+ get_posts( array( 'include' => join( ',', array_unique( $post_ids ) ) ) );
1104	1448
1105		- $searches = array();
1106		- $search_terms = stats_get_csv( 'searchterms', "days=$options[search]$csv_args[search]" );
1107		- foreach ( $search_terms as $search_term ) {
	1449	+ $searches = array();
	1450	+ foreach ( $search_terms = stats_get_csv( 'searchterms', "days=$options[search]$csv_args[search]" ) as $search_term ) {
1108	1451	if ( 'encrypted_search_terms' === $search_term['searchterm'] ) {
1109	1452	continue;
1110	1453	}
1111	1454	$searches[] = esc_html( $search_term['searchterm'] );
		@@ -1110,75 +1453,67 @@
1110	1453	}
1111	1454	$searches[] = esc_html( $search_term['searchterm'] );
1112	1455	}
1113	1456
1114		- ?>
	1457	+?>
1115	1458	<div id="stats-info">
1116		- <div id="stats-info-container">
1117		- <div class="stats-info-header">
1118		- <h2><?php esc_html_e( 'Highlights', 'jetpack' ); ?></h2>
1119		- <div class="stats-info-header-right">
1120		- <a href="<?php echo esc_url( admin_url( 'admin.php?page=stats' ) ); ?>" class="button button-primary">
1121		- <?php esc_html_e( 'View detailed stats', 'jetpack' ); ?>
1122		- </a>
1123		- </div>
	1459	+ <div id="top-posts" class='stats-section'>
	1460	+ <div class="stats-section-inner">
	1461	+ <h3 class="heading"><?php esc_html_e( 'Top Posts' , 'jetpack' ); ?></h3>
	1462	+ <?php
	1463	+ if ( empty( $top_posts ) ) {
	1464	+?>
	1465	+ <p class="nothing"><?php esc_html_e( 'Sorry, nothing to report.', 'jetpack' ); ?></p>
	1466	+ <?php
	1467	+ } else {
	1468	+ foreach ( $top_posts as $post ) {
	1469	+ if ( ! get_post( $post['post_id'] ) ) {
	1470	+ continue;
	1471	+ }
	1472	+?>
	1473	+ <p><?php printf(
	1474	+ $printf,
	1475	+ '<a href="' . get_permalink( $post['post_id'] ) . '">' . get_the_title( $post['post_id'] ) . '</a>',
	1476	+ number_format_i18n( $post['views'] )
	1477	+ ); ?></p>
	1478	+ <?php
	1479	+ }
	1480	+ }
	1481	+?>
1124	1482	</div>
1125		- <div class="stats-info-content">
1126		- <div id="top-posts" class="stats-section">
1127		- <div class="stats-section-inner">
1128		- <h3 class="heading"><?php esc_html_e( 'Top Posts', 'jetpack' ); ?></h3>
1129		- <?php
1130		- if ( empty( $top_posts ) ) {
1131		- ?>
1132		- <p class="nothing"><?php esc_html_e( 'Sorry, nothing to report.', 'jetpack' ); ?></p>
1133		- <?php
1134		- } else {
1135		- foreach ( $top_posts as $post ) {
1136		- if ( ! get_post( $post['post_id'] ) ) {
1137		- continue;
1138		- }
1139		- ?>
1140		- <p>
1141		- <?php
1142		- printf(
1143		- esc_html(
1144		- /* Translators: Stats dashboard widget Post list with view count: "Post Title 1 View (or Views if plural)". */
1145		- _n( '%1$s %2$s View', '%1$s %2$s Views', $post['views'], 'jetpack' )
1146		- ),
1147		- '<a href="' . esc_url( get_permalink( $post['post_id'] ) ) . '">' . esc_html( get_the_title( $post['post_id'] ) ) . '</a>',
1148		- esc_html( number_format_i18n( $post['views'] ) )
1149		- );
1150		- ?>
1151		- </p>
1152		- <?php
1153		- }
1154		- }
1155		- ?>
1156		- </div>
1157		- </div>
1158		- <div id="top-search" class="stats-section">
1159		- <div class="stats-section-inner">
1160		- <h3 class="heading"><?php esc_html_e( 'Top Searches', 'jetpack' ); ?></h3>
1161		- <?php
1162		- if ( empty( $searches ) ) {
1163		- ?>
1164		- <p class="nothing"><?php esc_html_e( 'Sorry, nothing to report.', 'jetpack' ); ?></p>
1165		- <?php
1166		- } else {
1167		- foreach ( $searches as $search_term_item ) {
1168		- printf(
1169		- '<p>%s</p>',
1170		- esc_html( $search_term_item )
1171		- );
1172		- }
1173		- }
1174		- ?>
1175		- </div>
1176		- </div>
	1483	+ </div>
	1484	+ <div id="top-search" class='stats-section'>
	1485	+ <div class="stats-section-inner">
	1486	+ <h3 class="heading"><?php esc_html_e( 'Top Searches' , 'jetpack' ); ?></h3>
	1487	+ <?php
	1488	+ if ( empty( $searches ) ) {
	1489	+?>
	1490	+ <p class="nothing"><?php esc_html_e( 'Sorry, nothing to report.', 'jetpack' ); ?></p>
	1491	+ <?php
	1492	+ } else {
	1493	+ foreach ( $searches as $search_term_item ) {
	1494	+ printf(
	1495	+ '<p>%s</p>',
	1496	+ $search_term_item
	1497	+ );
	1498	+ }
	1499	+ }
	1500	+?>
1177	1501	</div>
1178	1502	</div>
1179	1503	</div>
1180		- <?php
	1504	+<div class="clear"></div>
	1505	+<div class="stats-view-all">
	1506	+<?php
	1507	+ printf(
	1508	+ '<a class="button" target="_blank" rel="noopener noreferrer" href="%1$s">%2$s</a>',
	1509	+ esc_url( "https://wordpress.com/stats/day/" . Jetpack::build_raw_urls( get_home_url() ) ),
	1510	+ esc_html__( 'View all stats', 'jetpack' )
	1511	+ );
	1512	+?>
	1513	+</div>
	1514	+<div class="clear"></div>
	1515	+<?php
1181	1516	exit;
1182	1517	}
1183	1518
1184	1519	/**
		@@ -1189,55 +1524,47 @@
1189	1524	* @param mixed $url URL.
1190	1525	* @return void
1191	1526	*/
1192	1527	function stats_print_wp_remote_error( $get, $url ) {
1193		- $state_name = 'stats_remote_error_' . substr( md5( $url ), 0, 8 );
	1528	+ $state_name = 'stats_remote_error_' . substr( md5( $url ), 0, 8 );
1194	1529	$previous_error = Jetpack::state( $state_name );
1195		- $error = md5( wp_json_encode( compact( 'get', 'url' ) ) );
	1530	+ $error = md5( serialize( compact( 'get', 'url' ) ) );
1196	1531	Jetpack::state( $state_name, $error );
1197	1532	if ( $error !== $previous_error ) {
1198		- ?>
1199		- <div class="wrap">
1200		- <p><?php esc_html_e( 'We were unable to get your stats just now. Please reload this page to try again.', 'jetpack' ); ?></p>
1201		- </div>
1202		- <?php
	1533	+?>
	1534	+ <div class="wrap">
	1535	+ <p><?php esc_html_e( 'We were unable to get your stats just now. Please reload this page to try again.', 'jetpack' ); ?></p>
	1536	+ </div>
	1537	+<?php
1203	1538	return;
1204	1539	}
1205		- ?>
	1540	+?>
1206	1541	<div class="wrap">
1207		- <p>
1208		- <?php
1209		- printf(
1210		- /* translators: placeholder is an a href for a support site. */
1211		- esc_html__( 'We were unable to get your stats just now. Please reload this page to try again. If this error persists, please contact %1$s. In your report, please include the information below.', 'jetpack' ),
1212		- sprintf(
1213		- '<a href="https://support.wordpress.com/contact/?jetpack=needs-service">%s</a>',
1214		- esc_html__( 'Jetpack Support', 'jetpack' )
1215		- )
1216		- );
1217		- ?>
1218		- </p>
1219		- <pre class="stats-widget-error">
1220		- User Agent: "<?php echo isset( $_SERVER['HTTP_USER_AGENT'] ) ? esc_html( wp_unslash( $_SERVER['HTTP_USER_AGENT'] ) ) : ''; // phpcs:ignore WordPress.Security.ValidatedSanitizedInput.InputNotSanitized ?>"
1221		- Page URL: "http<?php echo ( is_ssl() ? 's' : '' ) . '://' . esc_html( ( isset( $_SERVER['HTTP_HOST'] ) ? wp_unslash( $_SERVER['HTTP_HOST'] ) : '' ) . ( isset( $_SERVER['REQUEST_URI'] ) ? wp_unslash( $_SERVER['REQUEST_URI'] ) : '' ) ); // phpcs:ignore WordPress.Security.ValidatedSanitizedInput.InputNotSanitized ?>"
1222		- API URL: "<?php echo esc_url( $url ); ?>"
1223		- <?php
1224		- if ( is_wp_error( $get ) ) {
1225		- foreach ( $get->get_error_codes() as $code ) {
1226		- foreach ( $get->get_error_messages( $code ) as $message ) {
1227		- print esc_html( $code ) . ': "' . esc_html( $message ) . '"';
1228		- }
1229		- }
1230		- } else {
1231		- $get_code = wp_remote_retrieve_response_code( $get );
1232		- $content_length = strlen( wp_remote_retrieve_body( $get ) );
1233		- ?>
1234		- Response code: "<?php print esc_html( $get_code ); ?>"
1235		- Content length: "<?php print esc_html( $content_length ); ?>"
1236		- <?php
	1542	+ <p><?php printf( __( 'We were unable to get your stats just now. Please reload this page to try again. If this error persists, please <a href="%1$s" target="_blank">contact support</a>. In your report please include the information below.', 'jetpack' ), 'https://support.wordpress.com/contact/?jetpack=needs-service' ); ?></p>
	1543	+ <pre>
	1544	+ User Agent: "<?php echo esc_html( $_SERVER['HTTP_USER_AGENT'] ); ?>"
	1545	+ Page URL: "http<?php echo (is_ssl()?'s':'') . '://' . esc_html( $_SERVER['HTTP_HOST'] . $_SERVER['REQUEST_URI'] ); ?>"
	1546	+ API URL: "<?php echo esc_url( $url ); ?>"
	1547	+<?php
	1548	+if ( is_wp_error( $get ) ) {
	1549	+ foreach ( $get->get_error_codes() as $code ) {
	1550	+ foreach ( $get->get_error_messages( $code ) as $message ) {
	1551	+?>
	1552	+<?php print $code . ': "' . $message . '"' ?>
	1553	+
	1554	+<?php
1237	1555	}
1238		- ?>
1239		- </pre>
	1556	+ }
	1557	+} else {
	1558	+ $get_code = wp_remote_retrieve_response_code( $get );
	1559	+ $content_length = strlen( wp_remote_retrieve_body( $get ) );
	1560	+?>
	1561	+Response code: "<?php print $get_code ?>"
	1562	+Content length: "<?php print $content_length ?>"
	1563	+
	1564	+<?php
	1565	+}
	1566	+ ?></pre>
1240	1567	</div>
1241	1568	<?php
1242	1569	}
1243	1570
		@@ -1253,9 +1580,8 @@
1253	1580	* @type string $days The length of the desired time frame. Default is 30. Maximum 90 days.
1254	1581	* @type int $limit The maximum number of records to return. Default is 10. Maximum 100.
1255	1582	* @type int $post_id The ID of the post to retrieve stats data for
1256	1583	* @type string $summarize If present, summarizes all matching records. Default Null.
1257		- * @type int $blog_id The WordPress.com blog ID to retrieve stats data for. Default is the current blog.
1258	1584	*
1259	1585	* }
1260	1586	*
1261	1587	* @return array {
		@@ -1271,19 +1597,13 @@
1271	1597	* }
1272	1598	* }
1273	1599	*/
1274	1600	function stats_get_csv( $table, $args = null ) {
1275		- $defaults = array(
1276		- 'end' => false,
1277		- 'days' => false,
1278		- 'limit' => 3,
1279		- 'post_id' => false,
1280		- 'summarize' => '',
1281		- 'blog_id' => Jetpack_Options::get_option( 'id' ),
1282		- );
	1601	+ $defaults = array( 'end' => false, 'days' => false, 'limit' => 3, 'post_id' => false, 'summarize' => '' );
1283	1602
1284		- $args = wp_parse_args( $args, $defaults );
	1603	+ $args = wp_parse_args( $args, $defaults );
1285	1604	$args['table'] = $table;
	1605	+ $args['blog_id'] = Jetpack_Options::get_option( 'id' );
1286	1606
1287	1607	$stats_csv_url = add_query_arg( $args, 'https://stats.wordpress.com/csv.php' );
1288	1608
1289	1609	$key = md5( $stats_csv_url );
		@@ -1304,10 +1624,9 @@
1304	1624	}
1305	1625
1306	1626	$stats_rows = array();
1307	1627	do {
1308		- $stats = stats_get_remote_csv( $stats_csv_url );
1309		- if ( ! $stats ) {
	1628	+ if ( ! $stats = stats_get_remote_csv( $stats_csv_url ) ) {
1310	1629	break;
1311	1630	}
1312	1631
1313	1632	$labels = array_shift( $stats );
		@@ -1347,15 +1666,15 @@
1347	1666	* @param mixed $url URL.
1348	1667	* @return array
1349	1668	*/
1350	1669	function stats_get_remote_csv( $url ) {
1351		- $method = 'GET';
	1670	+ $method = 'GET';
1352	1671	$timeout = 90;
1353		- $user_id = 0; // Blog token.
	1672	+ $user_id = JETPACK_MASTER_USER;
1354	1673
1355		- $get = Client::remote_request( compact( 'url', 'method', 'timeout', 'user_id' ) );
	1674	+ $get = Jetpack_Client::remote_request( compact( 'url', 'method', 'timeout', 'user_id' ) );
1356	1675	$get_code = wp_remote_retrieve_response_code( $get );
1357		- if ( is_wp_error( $get ) || ( 2 !== (int) ( $get_code / 100 ) && 304 !== $get_code ) || empty( $get['body'] ) ) {
	1676	+ if ( is_wp_error( $get ) || ( 2 !== intval( $get_code / 100 ) && 304 !== $get_code ) || empty( $get['body'] ) ) {
1358	1677	return array(); // @todo: return an error?
1359	1678	} else {
1360	1679	return stats_str_getcsv( $get['body'] );
1361	1680	}
		@@ -1361,25 +1680,33 @@
1361	1680	}
1362	1681	}
1363	1682
1364	1683	/**
1365		- * Recursively run str_getcsv on the stats csv.
	1684	+ * Rather than parsing the csv and its special cases, we create a new file and do fgetcsv on it.
1366	1685	*
1367		- * @since 9.7.0 Remove custom handling since str_getcsv is available on all servers running this now.
1368		- *
	1686	+ * @access public
1369	1687	* @param mixed $csv CSV.
1370		- * @return array
	1688	+ * @return array.
1371	1689	*/
1372	1690	function stats_str_getcsv( $csv ) {
1373		- // @todo Correctly handle embedded newlines. Note, despite claims online, `str_getcsv( $csv, "\n" )` does not actually work.
1374		- $lines = explode( "\n", rtrim( $csv, "\n" ) );
1375		- return array_map(
1376		- function ( $line ) {
1377		- // @todo When we drop support for PHP <7.4, consider passing empty-string for `$escape` here for better spec compatibility.
1378		- return str_getcsv( $line, ',', '"', '\\' );
1379		- },
1380		- $lines
1381		- );
	1691	+ if ( function_exists( 'str_getcsv' ) ) {
	1692	+ $lines = str_getcsv( $csv, "\n" ); // phpcs:ignore PHPCompatibility.PHP.NewFunctions.str_getcsvFound
	1693	+ return array_map( 'str_getcsv', $lines );
	1694	+ }
	1695	+ if ( ! $temp = tmpfile() ) { // The tmpfile() automatically unlinks.
	1696	+ return false;
	1697	+ }
	1698	+
	1699	+ $data = array();
	1700	+
	1701	+ fwrite( $temp, $csv, strlen( $csv ) );
	1702	+ fseek( $temp, 0 );
	1703	+ while ( false !== $row = fgetcsv( $temp, 2000 ) ) {
	1704	+ $data[] = $row;
	1705	+ }
	1706	+ fclose( $temp );
	1707	+
	1708	+ return $data;
1382	1709	}
1383	1710
1384	1711	/**
1385	1712	* Abstract out building the rest api stats path.
		@@ -1388,9 +1715,9 @@
1388	1715	* @return string
1389	1716	*/
1390	1717	function jetpack_stats_api_path( $resource = '' ) {
1391	1718	$resource = ltrim( $resource, '/' );
1392		- return sprintf( '/sites/%d/stats/%s', Stats_Options::get_option( 'blog_id' ), $resource );
	1719	+ return sprintf( '/sites/%d/stats/%s', stats_get_option( 'blog_id' ), $resource );
1393	1720	}
1394	1721
1395	1722	/**
1396	1723	* Fetches stats data from the REST API. Caches locally for 5 minutes.
		@@ -1396,54 +1723,60 @@
1396	1723	* Fetches stats data from the REST API. Caches locally for 5 minutes.
1397	1724	*
1398	1725	* @link: https://developer.wordpress.com/docs/api/1.1/get/sites/%24site/stats/
1399	1726	* @access public
1400		- * @deprecated 11.5 Use WPCOM_Stats available methodsinstead.
1401	1727	* @param array $args (default: array()) The args that are passed to the endpoint.
1402	1728	* @param string $resource (default: '') Optional sub-endpoint following /stats/.
1403		- * @return array|WP_Error
	1729	+ * @return array|WP_Error.
1404	1730	*/
1405	1731	function stats_get_from_restapi( $args = array(), $resource = '' ) {
1406		- _deprecated_function( __METHOD__, 'jetpack-11.5', 'Please checkout the methods available in Automattic\Jetpack\Stats\WPCOM_Stats' );
1407	1732	$endpoint = jetpack_stats_api_path( $resource );
1408	1733	$api_version = '1.1';
1409	1734	$args = wp_parse_args( $args, array() );
1410		- $cache_key = md5( implode( '|', array( $endpoint, $api_version, wp_json_encode( $args ) ) ) );
	1735	+ $cache_key = md5( implode( '|', array( $endpoint, $api_version, serialize( $args ) ) ) );
1411	1736
1412		- $transient_name = "jetpack_restapi_stats_cache_{$cache_key}";
	1737	+ // Get cache.
	1738	+ $stats_cache = Jetpack_Options::get_option( 'restapi_stats_cache', array() );
	1739	+ if ( ! is_array( $stats_cache ) ) {
	1740	+ $stats_cache = array();
	1741	+ }
1413	1742
1414		- $stats_cache = get_transient( $transient_name );
1415		-
1416	1743	// Return or expire this key.
1417		- if ( $stats_cache ) {
1418		- $time = key( $stats_cache );
1419		- $data = $stats_cache[ $time ]; // WP_Error or string (JSON encoded object).
1420		-
1421		- if ( is_wp_error( $data ) ) {
1422		- return $data;
	1744	+ if ( isset( $stats_cache[ $cache_key ] ) ) {
	1745	+ $time = key( $stats_cache[ $cache_key ] );
	1746	+ if ( time() - $time < ( 5 * MINUTE_IN_SECONDS ) ) {
	1747	+ $cached_stats = $stats_cache[ $cache_key ][ $time ];
	1748	+ if ( is_wp_error( $cached_stats ) ) {
	1749	+ return $cached_stats;
	1750	+ }
	1751	+ $cached_stats = (object) array_merge( array( 'cached_at' => $time ), (array) $cached_stats );
	1752	+ return $cached_stats;
1423	1753	}
1424		-
1425		- return (object) array_merge( array( 'cached_at' => $time ), (array) json_decode( $data ) );
	1754	+ unset( $stats_cache[ $cache_key ] );
1426	1755	}
1427	1756
1428	1757	// Do the dirty work.
1429		- $response = Client::wpcom_json_api_request_as_blog( $endpoint, $api_version, $args );
	1758	+ $response = Jetpack_Client::wpcom_json_api_request_as_blog( $endpoint, $api_version, $args );
1430	1759	if ( 200 !== wp_remote_retrieve_response_code( $response ) ) {
1431		- // WP_Error.
1432	1760	$data = is_wp_error( $response ) ? $response : new WP_Error( 'stats_error' );
1433		- // WP_Error.
1434		- $return = $data;
1435	1761	} else {
1436		- // string (JSON encoded object).
1437		- $data = wp_remote_retrieve_body( $response );
1438		- // object (rare: null on JSON failure).
1439		- $return = json_decode( $data );
	1762	+ $data = json_decode( wp_remote_retrieve_body( $response ) );
1440	1763	}
1441	1764
1442		- // To reduce size in storage: store with time as key, store JSON encoded data (unless error).
1443		- set_transient( $transient_name, array( time() => $data ), 5 * MINUTE_IN_SECONDS );
	1765	+ // Expire old keys.
	1766	+ foreach ( $stats_cache as $k => $cache ) {
	1767	+ if ( ! is_array( $cache ) || ( 5 * MINUTE_IN_SECONDS ) < time() - key( $cache ) ) {
	1768	+ unset( $stats_cache[ $k ] );
	1769	+ }
	1770	+ }
1444	1771
1445		- return $return;
	1772	+ // Set cache.
	1773	+ $stats_cache[ $cache_key ] = array(
	1774	+ time() => $data,
	1775	+ );
	1776	+ Jetpack_Options::update_option( 'restapi_stats_cache', $stats_cache, false );
	1777	+
	1778	+ return $data;
1446	1779	}
1447	1780
1448	1781	/**
1449	1782	* Load CSS needed for Stats column width in WP-Admin area.
		@@ -1460,9 +1793,9 @@
1460	1793	<?php
1461	1794	}
1462	1795
1463	1796	/**
1464		- * Set header for column that allows to view an entry's stats.
	1797	+ * Set header for column that allows to go to WordPress.com to see an entry's stats.
1465	1798	*
1466	1799	* @param array $columns An array of column names.
1467	1800	*
1468	1801	* @since 4.7.0
		@@ -1468,41 +1801,17 @@
1468	1801	* @since 4.7.0
1469	1802	*
1470	1803	* @return mixed
1471	1804	*/
1472		-function jetpack_stats_post_table( $columns ) {
1473		- /*
1474		- * Stats can be accessed in wp-admin or in Calypso,
1475		- * depending on what version of the stats screen is enabled on your site.
1476		- *
1477		- * In both cases, the user must be allowed to access stats.
1478		- *
1479		- * If the Odyssey Stats experience isn't enabled, the user will need to go to Calypso,
1480		- * so they need to be connected to WordPress.com to be able to access that page.
1481		- */
1482		- if (
1483		- ! current_user_can( 'view_stats' )
1484		- || (
1485		- ! Stats_Options::get_option( 'enable_odyssey_stats' )
1486		- && ! ( new Connection_Manager( 'jetpack' ) )->is_user_connected()
1487		- )
1488		- ) {
	1805	+function jetpack_stats_post_table( $columns ) { // Adds a stats link on the edit posts page
	1806	+ if ( ! current_user_can( 'view_stats' ) || ! Jetpack::is_user_connected() ) {
1489	1807	return $columns;
1490	1808	}
1491		-
1492		- // Array-Fu to add before comments.
1493		- $pos = array_search( 'comments', array_keys( $columns ), true );
1494		-
1495		- // Fallback to the last position if the post type does not support comments.
	1809	+ // Array-Fu to add before comments
	1810	+ $pos = array_search( 'comments', array_keys( $columns ) );
1496	1811	if ( ! is_int( $pos ) ) {
1497		- $pos = count( $columns );
1498		- }
1499		-
1500		- // Final fallback, if the array was malformed by another plugin for example.
1501		- if ( ! is_int( $pos ) ) {
1502	1812	return $columns;
1503	1813	}
1504		-
1505	1814	$chunks = array_chunk( $columns, $pos, true );
1506	1815	$chunks[0]['stats'] = esc_html__( 'Stats', 'jetpack' );
1507	1816
1508	1817	return call_user_func_array( 'array_merge', $chunks );
		@@ -1508,9 +1817,9 @@
1508	1817	return call_user_func_array( 'array_merge', $chunks );
1509	1818	}
1510	1819
1511	1820	/**
1512		- * Set content for cell with link to an entry's stats in Odyssey Stats.
	1821	+ * Set content for cell with link to an entry's stats in WordPress.com.
1513	1822	*
1514	1823	* @param string $column The name of the column to display.
1515	1824	* @param int $post_id The current post ID.
1516	1825	*
		@@ -1518,55 +1827,19 @@
1518	1827	*
1519	1828	* @return mixed
1520	1829	*/
1521	1830	function jetpack_stats_post_table_cell( $column, $post_id ) {
1522		- if ( 'stats' === $column ) {
1523		- if ( 'publish' !== get_post_status( $post_id ) ) {
	1831	+ if ( 'stats' == $column ) {
	1832	+ if ( 'publish' != get_post_status( $post_id ) ) {
1524	1833	printf(
1525	1834	'<span aria-hidden="true">—</span><span class="screen-reader-text">%s</span>',
1526	1835	esc_html__( 'No stats', 'jetpack' )
1527	1836	);
1528	1837	} else {
1529		- // Link to the wp-admin stats page.
1530		- $stats_post_url = admin_url( sprintf( 'admin.php?page=stats#!/stats/post/%d/%d', $post_id, Jetpack_Options::get_option( 'id', 0 ) ) );
1531		- // Unless the user is on a Default style WOA site, in which case link to Calypso.
1532		- if ( ( new Host() )->is_woa_site() && Stats_Options::get_option( 'enable_odyssey_stats' ) && 'wp-admin' !== get_option( 'wpcom_admin_interface' ) ) {
1533		- $stats_post_url = Redirect::get_url(
1534		- 'calypso-stats-post',
1535		- array(
1536		- 'path' => $post_id,
1537		- )
1538		- );
1539		- }
1540		-
1541	1838	printf(
1542	1839	'<a href="%s" title="%s" class="dashicons dashicons-chart-bar" target="_blank"></a>',
1543		- esc_url( $stats_post_url ),
1544		- esc_html__( 'View stats for this post', 'jetpack' )
	1840	+ esc_url( "https://wordpress.com/stats/post/$post_id/" . Jetpack::build_raw_urls( get_home_url() ) ),
	1841	+ esc_html__( 'View stats for this post in WordPress.com', 'jetpack' )
1545	1842	);
1546	1843	}
1547	1844	}
1548		-}
1549		-
1550		-/**
1551		- * Add the Jetpack plugin version to the stats tracking data.
1552		- *
1553		- * @param array $kvs The stats array in key values.
1554		- * @return array
1555		- */
1556		-function filter_stats_array_add_jp_version( $kvs ) {
1557		- $kvs['j'] = sprintf( '%s:%s', JETPACK__API_VERSION, JETPACK__VERSION );
1558		-
1559		- return $kvs;
1560		-}
1561		-
1562		-/**
1563		- * Convert stats array to object after sanity checking the array is valid.
1564		- *
1565		- * @param array $stats_array The stats array.
1566		- * @return WP_Error|Object|null
1567		- */
1568		-function convert_stats_array_to_object( $stats_array ) {
1569		- _deprecated_function( __FUNCTION__, 'jetpack-13.2', 'Automattic\Jetpack\Stats\WPCOM_Stats->convert_stats_array_to_object' );
1570		-
1571		- return ( new WPCOM_Stats() )->convert_stats_array_to_object( $stats_array );
1572	1845	}