<?php

/**

 * Plugins administration panel.

 *

 * @package WordPress

 * @subpackage Administration

 */

/** WordPress Administration Bootstrap */

require_once __DIR__ . '/admin.php';

if ( ! current_user_can( 'activate_plugins' ) ) {

	wp_die( __( 'Sorry, you are not allowed to manage plugins for this site.' ) );

}

$wp_list_table = _get_list_table( 'WP_Plugins_List_Table' );

$pagenum       = $wp_list_table->get_pagenum();

$action = $wp_list_table->current_action();

$plugin = isset( $_REQUEST['plugin'] ) ? wp_unslash( $_REQUEST['plugin'] ) : '';

$s      = isset( $_REQUEST['s'] ) ? urlencode( wp_unslash( $_REQUEST['s'] ) ) : '';

// Clean up request URI from temporary args for screen options/paging uri's to work as expected.

$query_args_to_remove = array(

	'error',

	'deleted',

	'activate',

	'activate-multi',

	'deactivate',

	'deactivate-multi',

	'enabled-auto-update',

	'disabled-auto-update',

	'enabled-auto-update-multi',

	'disabled-auto-update-multi',

	'_error_nonce',

);

$_SERVER['REQUEST_URI'] = remove_query_arg( $query_args_to_remove, $_SERVER['REQUEST_URI'] );

wp_enqueue_script( 'updates' );

if ( $action ) {

	switch ( $action ) {

		case 'activate':

			if ( ! current_user_can( 'activate_plugin', $plugin ) ) {

				wp_die( __( 'Sorry, you are not allowed to activate this plugin.' ) );

			}

			if ( is_multisite() && ! is_network_admin() && is_network_only_plugin( $plugin ) ) {

				wp_redirect( self_admin_url( "plugins.php?plugin_status=$status&paged=$page&s=$s" ) );

				exit;

			}

			check_admin_referer( 'activate-plugin_' . $plugin );

			$result = activate_plugin( $plugin, self_admin_url( 'plugins.php?error=true&plugin=' . urlencode( $plugin ) ), is_network_admin() );

			if ( is_wp_error( $result ) ) {

				if ( 'unexpected_output' === $result->get_error_code() ) {

					$redirect = self_admin_url( 'plugins.php?error=true&charsout=' . strlen( $result->get_error_data() ) . '&plugin=' . urlencode( $plugin ) . "&plugin_status=$status&paged=$page&s=$s" );

					wp_redirect( add_query_arg( '_error_nonce', wp_create_nonce( 'plugin-activation-error_' . $plugin ), $redirect ) );

					exit;

				} else {

					wp_die( $result );

				}

			}

			if ( ! is_network_admin() ) {

				$recent = (array) get_option( 'recently_activated' );

				unset( $recent[ $plugin ] );

				update_option( 'recently_activated', $recent );

			} else {

				$recent = (array) get_site_option( 'recently_activated' );

				unset( $recent[ $plugin ] );

				update_site_option( 'recently_activated', $recent );

			}

			if ( isset( $_GET['from'] ) && 'import' === $_GET['from'] ) {

				// Overrides the ?error=true one above and redirects to the Imports page, stripping the -importer suffix.

				wp_redirect( self_admin_url( 'import.php?import=' . str_replace( '-importer', '', dirname( $plugin ) ) ) );

			} elseif ( isset( $_GET['from'] ) && 'press-this' === $_GET['from'] ) {

				wp_redirect( self_admin_url( 'press-this.php' ) );

			} else {

				// Overrides the ?error=true one above.

				wp_redirect( self_admin_url( "plugins.php?activate=true&plugin_status=$status&paged=$page&s=$s" ) );

			}

			exit;

		case 'activate-selected':

			if ( ! current_user_can( 'activate_plugins' ) ) {

				wp_die( __( 'Sorry, you are not allowed to activate plugins for this site.' ) );

			}

			check_admin_referer( 'bulk-plugins' );

			$plugins = isset( $_POST['checked'] ) ? (array) wp_unslash( $_POST['checked'] ) : array();

			if ( is_network_admin() ) {

				foreach ( $plugins as $i => $plugin ) {

					// Only activate plugins which are not already network activated.

					if ( is_plugin_active_for_network( $plugin ) ) {

						unset( $plugins[ $i ] );

					}

				}

			} else {

				foreach ( $plugins as $i => $plugin ) {

					// Only activate plugins which are not already active and are not network-only when on Multisite.

					if ( is_plugin_active( $plugin ) || ( is_multisite() && is_network_only_plugin( $plugin ) ) ) {

						unset( $plugins[ $i ] );

					}

					// Only activate plugins which the user can activate.

					if ( ! current_user_can( 'activate_plugin', $plugin ) ) {

						unset( $plugins[ $i ] );

					}

				}

			}

			if ( empty( $plugins ) ) {

				wp_redirect( self_admin_url( "plugins.php?plugin_status=$status&paged=$page&s=$s" ) );

				exit;

			}

			activate_plugins( $plugins, self_admin_url( 'plugins.php?error=true' ), is_network_admin() );

			if ( ! is_network_admin() ) {

				$recent = (array) get_option( 'recently_activated' );

			} else {

				$recent = (array) get_site_option( 'recently_activated' );

			}

			foreach ( $plugins as $plugin ) {

				unset( $recent[ $plugin ] );

			}

			if ( ! is_network_admin() ) {

				update_option( 'recently_activated', $recent );

			} else {

				update_site_option( 'recently_activated', $recent );

			}

			wp_redirect( self_admin_url( "plugins.php?activate-multi=true&plugin_status=$status&paged=$page&s=$s" ) );

			exit;

		case 'update-selected':

			check_admin_referer( 'bulk-plugins' );

			if ( isset( $_GET['plugins'] ) ) {

				$plugins = explode( ',', wp_unslash( $_GET['plugins'] ) );

			} elseif ( isset( $_POST['checked'] ) ) {

				$plugins = (array) wp_unslash( $_POST['checked'] );

			} else {

				$plugins = array();

			}

			// Used in the HTML title tag.

			$title       = __( 'Update Plugins' );

			$parent_file = 'plugins.php';

			wp_enqueue_script( 'updates' );

			require_once ABSPATH . 'wp-admin/admin-header.php';

			echo '<div class="wrap">';

			echo '<h1>' . esc_html( $title ) . '</h1>';

			$url = self_admin_url( 'update.php?action=update-selected&plugins=' . urlencode( implode( ',', $plugins ) ) );

			$url = wp_nonce_url( $url, 'bulk-update-plugins' );

			echo "<iframe src='$url' style='width: 100%; height:100%; min-height:850px;'></iframe>";

			echo '</div>';

			require_once ABSPATH . 'wp-admin/admin-footer.php';

			exit;

		case 'error_scrape':

			if ( ! current_user_can( 'activate_plugin', $plugin ) ) {

				wp_die( __( 'Sorry, you are not allowed to activate this plugin.' ) );

			}

			check_admin_referer( 'plugin-activation-error_' . $plugin );

			$valid = validate_plugin( $plugin );

			if ( is_wp_error( $valid ) ) {

				wp_die( $valid );

			}

			if ( ! WP_DEBUG ) {

				error_reporting( E_CORE_ERROR | E_CORE_WARNING | E_COMPILE_ERROR | E_ERROR | E_WARNING | E_PARSE | E_USER_ERROR | E_USER_WARNING | E_RECOVERABLE_ERROR );

			}

			ini_set( 'display_errors', true ); // Ensure that fatal errors are displayed.

			// Go back to "sandbox" scope so we get the same errors as before.

			plugin_sandbox_scrape( $plugin );

			/** This action is documented in wp-admin/includes/plugin.php */

			do_action( "activate_{$plugin}" );

			exit;

		case 'deactivate':

			if ( ! current_user_can( 'deactivate_plugin', $plugin ) ) {

				wp_die( __( 'Sorry, you are not allowed to deactivate this plugin.' ) );

			}

			check_admin_referer( 'deactivate-plugin_' . $plugin );

			if ( ! is_network_admin() && is_plugin_active_for_network( $plugin ) ) {

				wp_redirect( self_admin_url( "plugins.php?plugin_status=$status&paged=$page&s=$s" ) );

				exit;

			}

			deactivate_plugins( $plugin, false, is_network_admin() );

			if ( ! is_network_admin() ) {

				update_option( 'recently_activated', array( $plugin => time() ) + (array) get_option( 'recently_activated' ) );

			} else {

				update_site_option( 'recently_activated', array( $plugin => time() ) + (array) get_site_option( 'recently_activated' ) );

			}

			if ( headers_sent() ) {

				echo "<meta http-equiv='refresh' content='" . esc_attr( "0;url=plugins.php?deactivate=true&plugin_status=$status&paged=$page&s=$s" ) . "' />";

			} else {

				wp_redirect( self_admin_url( "plugins.php?deactivate=true&plugin_status=$status&paged=$page&s=$s" ) );

			}

			exit;

		case 'deactivate-selected':

			if ( ! current_user_can( 'deactivate_plugins' ) ) {

				wp_die( __( 'Sorry, you are not allowed to deactivate plugins for this site.' ) );

			}

			check_admin_referer( 'bulk-plugins' );

			$plugins = isset( $_POST['checked'] ) ? (array) wp_unslash( $_POST['checked'] ) : array();

			// Do not deactivate plugins which are already deactivated.

			if ( is_network_admin() ) {

				$plugins = array_filter( $plugins, 'is_plugin_active_for_network' );

			} else {

				$plugins = array_filter( $plugins, 'is_plugin_active' );

				$plugins = array_diff( $plugins, array_filter( $plugins, 'is_plugin_active_for_network' ) );

				foreach ( $plugins as $i => $plugin ) {

					// Only deactivate plugins which the user can deactivate.

					if ( ! current_user_can( 'deactivate_plugin', $plugin ) ) {

						unset( $plugins[ $i ] );

					}

				}

			}

			if ( empty( $plugins ) ) {

				wp_redirect( self_admin_url( "plugins.php?plugin_status=$status&paged=$page&s=$s" ) );

				exit;

			}

			deactivate_plugins( $plugins, false, is_network_admin() );

			$deactivated = array();

			foreach ( $plugins as $plugin ) {

				$deactivated[ $plugin ] = time();

			}

			if ( ! is_network_admin() ) {

				update_option( 'recently_activated', $deactivated + (array) get_option( 'recently_activated' ) );

			} else {

				update_site_option( 'recently_activated', $deactivated + (array) get_site_option( 'recently_activated' ) );

			}

			wp_redirect( self_admin_url( "plugins.php?deactivate-multi=true&plugin_status=$status&paged=$page&s=$s" ) );

			exit;

		case 'delete-selected':

			if ( ! current_user_can( 'delete_plugins' ) ) {

				wp_die( __( 'Sorry, you are not allowed to delete plugins for this site.' ) );

			}

			check_admin_referer( 'bulk-plugins' );

			// $_POST = from the plugin form; $_GET = from the FTP details screen.

			$plugins = isset( $_REQUEST['checked'] ) ? (array) wp_unslash( $_REQUEST['checked'] ) : array();

			if ( empty( $plugins ) ) {

				wp_redirect( self_admin_url( "plugins.php?plugin_status=$status&paged=$page&s=$s" ) );

				exit;

			}

			$plugins = array_filter( $plugins, 'is_plugin_inactive' ); // Do not allow to delete activated plugins.

			if ( empty( $plugins ) ) {

				wp_redirect( self_admin_url( "plugins.php?error=true&main=true&plugin_status=$status&paged=$page&s=$s" ) );

				exit;

			}

			// Bail on all if any paths are invalid.

			// validate_file() returns truthy for invalid files.

			$invalid_plugin_files = array_filter( $plugins, 'validate_file' );

			if ( $invalid_plugin_files ) {

				wp_redirect( self_admin_url( "plugins.php?plugin_status=$status&paged=$page&s=$s" ) );

				exit;

			}

			require ABSPATH . 'wp-admin/update.php';

			$parent_file = 'plugins.php';

			if ( ! isset( $_REQUEST['verify-delete'] ) ) {

				wp_enqueue_script( 'jquery' );

				require_once ABSPATH . 'wp-admin/admin-header.php';

				?>

				<div class="wrap">

				<?php

				$plugin_info              = array();

				$have_non_network_plugins = false;

				foreach ( (array) $plugins as $plugin ) {

					$plugin_slug = dirname( $plugin );

					if ( '.' === $plugin_slug ) {

						$data = get_plugin_data( WP_PLUGIN_DIR . '/' . $plugin );

						if ( $data ) {

							$plugin_info[ $plugin ]                     = $data;

							$plugin_info[ $plugin ]['is_uninstallable'] = is_uninstallable_plugin( $plugin );

							if ( ! $plugin_info[ $plugin ]['Network'] ) {

								$have_non_network_plugins = true;

							}

						}

					} else {

						// Get plugins list from that folder.

						$folder_plugins = get_plugins( '/' . $plugin_slug );

						if ( $folder_plugins ) {

							foreach ( $folder_plugins as $plugin_file => $data ) {

								$plugin_info[ $plugin_file ]                     = _get_plugin_data_markup_translate( $plugin_file, $data );

								$plugin_info[ $plugin_file ]['is_uninstallable'] = is_uninstallable_plugin( $plugin );

								if ( ! $plugin_info[ $plugin_file ]['Network'] ) {

									$have_non_network_plugins = true;

								}

							}

						}

					}

				}

				$plugins_to_delete = count( $plugin_info );

				?>

				<?php if ( 1 === $plugins_to_delete ) : ?>

					<h1><?php _e( 'Delete Plugin' ); ?></h1>

					<p><?php _e( 'You are about to remove the following plugin:' ); ?></p>

				<?php else : ?>

					<h1><?php _e( 'Delete Plugins' ); ?></h1>

					<p><?php _e( 'You are about to remove the following plugins:' ); ?></p>

				<?php endif; ?>

					<ul class="ul-disc">

						<?php

						$data_to_delete = false;

						foreach ( $plugin_info as $plugin ) {

							if ( $plugin['is_uninstallable'] ) {

								/* translators: 1: Plugin name, 2: Plugin author. */

								echo '<li>', sprintf( __( '%1$s by %2$s (will also <strong>delete its data</strong>)' ), '<strong>' . $plugin['Name'] . '</strong>', '<em>' . $plugin['AuthorName'] . '</em>' ), '</li>';