288 lines
7.7 KiB
PHP
288 lines
7.7 KiB
PHP
<?php
|
|
/**
|
|
* Plugin installer action
|
|
*
|
|
* NOTE: Currently this class is used only for deactivating the legacy extension plugins.
|
|
*
|
|
* Class file for installing plugins from the repo.
|
|
*
|
|
* @since 4.0.1
|
|
* @package wsal
|
|
*/
|
|
|
|
declare(strict_types=1);
|
|
|
|
namespace WSAL\Actions;
|
|
|
|
use WSAL\Helpers\WP_Helper;
|
|
use WSAL\Helpers\Plugins_Helper;
|
|
|
|
// Exit if accessed directly.
|
|
if ( ! defined( 'ABSPATH' ) ) {
|
|
exit;
|
|
}
|
|
|
|
if ( ! class_exists( '\WSAL\Actions\Plugin_Installer' ) ) {
|
|
|
|
/**
|
|
* Class to handle the installation and activation of plugins.
|
|
*
|
|
* @since 4.0.1
|
|
*/
|
|
class Plugin_Installer {
|
|
|
|
/**
|
|
* Register the ajax action.
|
|
*
|
|
* @method register
|
|
*
|
|
* @since 4.0.1
|
|
*/
|
|
public static function init() {
|
|
\add_action( 'wp_ajax_wsal_run_addon_install', array( __CLASS__, 'run_addon_install' ) );
|
|
}
|
|
|
|
/**
|
|
* Run the installer.
|
|
*
|
|
* @method run_addon_install
|
|
*
|
|
* @since 4.0.1
|
|
*/
|
|
public static function run_addon_install() {
|
|
\check_ajax_referer( 'wsal-install-addon' );
|
|
|
|
// Verify user has permission to install and activate plugins.
|
|
if ( ! \current_user_can( 'install_plugins' ) || ! \current_user_can( 'activate_plugins' ) ) {
|
|
\wp_send_json_error(
|
|
array(
|
|
'message' => esc_html__( 'You do not have permission to install plugins.', 'wp-security-audit-log' ),
|
|
)
|
|
);
|
|
}
|
|
|
|
$predefined_plugins = Plugins_Helper::get_installable_plugins();
|
|
|
|
// Setup empties to avoid errors.
|
|
$plugin_zip = '';
|
|
$plugin_slug = '';
|
|
|
|
if ( ! ( isset( $_POST['addon_for'] ) && is_array( $predefined_plugins ) ) ) {
|
|
// no 'addon_for' passed, check for a zip and slug.
|
|
$plugin_zip = ( isset( $_POST['plugin_url'] ) ) ? esc_url_raw( wp_unslash( $_POST['plugin_url'] ) ) : '';
|
|
$plugin_slug = ( isset( $_POST['plugin_slug'] ) ) ? sanitize_textarea_field( wp_unslash( $_POST['plugin_slug'] ) ) : '';
|
|
} else {
|
|
/*
|
|
* Key POSTed as an 'addon_for', try get the zip and slug.
|
|
*
|
|
* @since 4.0.2
|
|
*/
|
|
$addon = sanitize_text_field( wp_unslash( $_POST['addon_for'] ) );
|
|
$addon = apply_filters( 'wsal_modify_predefined_plugin_slug', $addon );
|
|
|
|
foreach ( $predefined_plugins as $plugin ) {
|
|
if ( strtolower( $plugin['addon_for'] ) === $addon ) {
|
|
$plugin_zip = $plugin['plugin_url'];
|
|
$plugin_slug = $plugin['plugin_slug'];
|
|
}
|
|
}
|
|
}
|
|
|
|
// validate that the plugin is in the allowed list, or it is our helper plugin with external libraries.
|
|
$valid = false;
|
|
$helper_plugin_installation = 'wsal-external-libraries/wsal-external-libraries.php' === $plugin_slug;
|
|
if ( $helper_plugin_installation ) {
|
|
$valid = true;
|
|
} else {
|
|
foreach ( $predefined_plugins as $plugin ) {
|
|
// if we have a valid plugin then break.
|
|
if ( $valid ) {
|
|
break;
|
|
}
|
|
|
|
$valid = $plugin_zip === $plugin['plugin_url'] && $plugin_slug === $plugin['plugin_slug'];
|
|
}
|
|
}
|
|
|
|
// bail early if we didn't get a valid url and slug to install.
|
|
if ( ! $valid ) {
|
|
\wp_send_json_error(
|
|
array(
|
|
'message' => esc_html__( 'Tried to install a zip or slug that was not in the allowed list', 'wp-security-audit-log' ),
|
|
)
|
|
);
|
|
}
|
|
|
|
// Check if the plugin is installed.
|
|
if ( self::is_plugin_installed( $plugin_slug ) ) {
|
|
// If plugin is installed but not active, activate it.
|
|
if ( ! WP_Helper::is_plugin_active( $plugin_zip ) ) {
|
|
self::run_activate( $plugin_slug );
|
|
self::activate( $plugin_zip );
|
|
$result = 'activated';
|
|
} else {
|
|
$result = 'already_installed';
|
|
}
|
|
} else {
|
|
// No plugin found or plugin not present to be activated, so lets install it.
|
|
self::install_plugin( $plugin_zip );
|
|
self::run_activate( $plugin_slug );
|
|
self::activate( $plugin_zip );
|
|
$result = 'success';
|
|
}
|
|
|
|
// If we're installing our helper plugin, we also need to delete the nudge to install the helper plugin.
|
|
if ( $helper_plugin_installation ) {
|
|
\WSAL\Helpers\Settings_Helper::delete_option_value( 'show-helper-plugin-needed-nudge' );
|
|
}
|
|
|
|
\wp_send_json( $result );
|
|
}
|
|
|
|
/**
|
|
* Install a plugin given a slug.
|
|
*
|
|
* @param string $plugin_zip URL to the direct zip file.
|
|
*
|
|
* @since 4.0.1
|
|
*/
|
|
public static function install_plugin( $plugin_zip = '' ) {
|
|
// bail early if we don't have a slug to work with.
|
|
if ( empty( $plugin_zip ) ) {
|
|
return;
|
|
}
|
|
// get the core plugin upgrader if not already in the runtime.
|
|
if ( ! class_exists( 'Plugin_Upgrader' ) ) {
|
|
include_once ABSPATH . 'wp-admin/includes/class-wp-upgrader.php';
|
|
}
|
|
// clear the cache so we're using fresh data.
|
|
\wp_cache_flush();
|
|
$upgrader = new \Plugin_Upgrader();
|
|
$install_result = $upgrader->install( $plugin_zip );
|
|
if ( ! $install_result || \is_wp_error( $install_result ) ) {
|
|
if ( \is_wp_error( $install_result ) ) {
|
|
return $install_result->get_error_message();
|
|
}
|
|
die();
|
|
}
|
|
}
|
|
|
|
/**
|
|
* Activates a plugin that is available on the site.
|
|
*
|
|
* @param string $plugin_zip URL to the direct zip file.
|
|
*
|
|
* @return void
|
|
*
|
|
* @since 4.0.1
|
|
*/
|
|
public static function activate( $plugin_zip = '' ) {
|
|
// bail early if we don't have a slug to work with.
|
|
if ( empty( $plugin_zip ) ) {
|
|
return;
|
|
}
|
|
|
|
if ( WP_Helper::is_multisite() ) {
|
|
return;
|
|
}
|
|
|
|
// get core plugin functions if they are not already in runtime.
|
|
if ( ! function_exists( 'activate_plugin' ) ) {
|
|
require_once ABSPATH . 'wp-admin/includes/plugin.php';
|
|
}
|
|
|
|
if ( ! WP_Helper::is_plugin_active( $plugin_zip ) ) {
|
|
\activate_plugin( $plugin_zip );
|
|
}
|
|
}
|
|
|
|
/**
|
|
* Deactivate plugin by given slug
|
|
*
|
|
* @param string $plugin - The slug of the plugin to deactivate.
|
|
*
|
|
* @return boolean
|
|
*
|
|
* @since 4.6.0
|
|
*/
|
|
public static function deactivate_plugin( string $plugin ): bool {
|
|
if ( ! function_exists( 'deactivate_plugins' ) ) {
|
|
require_once ABSPATH . 'wp-admin/includes/plugin.php';
|
|
}
|
|
if ( WP_Helper::is_plugin_active( $plugin ) ) {
|
|
$network_wide = false; // Set to true if you want to deactivate the plugin network-wide (for multisite).
|
|
if ( WP_Helper::is_multisite() ) {
|
|
$network_wide = true;
|
|
}
|
|
|
|
$result = \deactivate_plugins( $plugin, false, $network_wide );
|
|
|
|
// Check if the plugin was deactivated.
|
|
if ( \is_wp_error( $result ) ) {
|
|
return false;
|
|
}
|
|
}
|
|
|
|
return true;
|
|
}
|
|
|
|
/**
|
|
* Activates a plugin that is available on the site.
|
|
*
|
|
* @method run_activate
|
|
* @since 4.0.1
|
|
* @param string $plugin_slug slug for plugin.
|
|
*/
|
|
public static function run_activate( $plugin_slug = '' ) {
|
|
// bail early if we don't have a slug to work with.
|
|
if ( empty( $plugin_slug ) ) {
|
|
return;
|
|
}
|
|
|
|
if ( WP_Helper::is_multisite() ) {
|
|
$current = \get_site_option( 'active_sitewide_plugins' );
|
|
} else {
|
|
$current = \get_option( 'active_plugins' );
|
|
}
|
|
|
|
if ( ! in_array( $plugin_slug, $current, true ) ) {
|
|
if ( WP_Helper::is_multisite() ) {
|
|
$current[] = $plugin_slug;
|
|
\activate_plugin( $plugin_slug, '', true );
|
|
} else {
|
|
$current[] = $plugin_slug;
|
|
\activate_plugin( $plugin_slug );
|
|
}
|
|
}
|
|
return null;
|
|
}
|
|
|
|
/**
|
|
* Check if a plugin is installed.
|
|
*
|
|
* @param string $plugin_slug slug for plugin.
|
|
*
|
|
* @since 4.0.1
|
|
*/
|
|
public static function is_plugin_installed( $plugin_slug = '' ) {
|
|
// bail early if we don't have a slug to work with.
|
|
if ( empty( $plugin_slug ) ) {
|
|
return;
|
|
}
|
|
|
|
// get core plugin functions if not already in the runtime.
|
|
if ( ! function_exists( 'get_plugins' ) ) {
|
|
require_once ABSPATH . 'wp-admin/includes/plugin.php';
|
|
}
|
|
$all_plugins = \get_plugins();
|
|
|
|
// true if plugin is already installed or false if not.
|
|
if ( ! empty( $all_plugins[ $plugin_slug ] ) ) {
|
|
return true;
|
|
} else {
|
|
return false;
|
|
}
|
|
}
|
|
}
|
|
}
|