/var/www/wordpress/wp-admin/includes/admin.php
/var/www/wordpress/wp-admin/includes/bookmark.php
/var/www/wordpress/wp-admin/includes/class-ftp-pure.php
/var/www/wordpress/wp-admin/includes/class-ftp-sockets.php
/var/www/wordpress/wp-admin/includes/class-ftp.php
/var/www/wordpress/wp-admin/includes/class-pclzip.php
/var/www/wordpress/wp-admin/includes/class-wp-filesystem-base.php
/var/www/wordpress/wp-admin/includes/class-wp-filesystem-direct.php
/var/www/wordpress/wp-admin/includes/class-wp-filesystem-ftpext.php
/var/www/wordpress/wp-admin/includes/class-wp-filesystem-ftpsockets.php
/var/www/wordpress/wp-admin/includes/class-wp-filesystem-ssh2.php
/var/www/wordpress/wp-admin/includes/class-wp-importer.php
/var/www/wordpress/wp-admin/includes/class-wp-upgrader.php
/var/www/wordpress/wp-admin/includes/comment.php
/var/www/wordpress/wp-admin/includes/continents-cities.php
/var/www/wordpress/wp-admin/includes/dashboard.php
/var/www/wordpress/wp-admin/includes/deprecated.php
/var/www/wordpress/wp-admin/includes/export.php
/var/www/wordpress/wp-admin/includes/file.php
/var/www/wordpress/wp-admin/includes/image-edit.php
/var/www/wordpress/wp-admin/includes/image.php
/var/www/wordpress/wp-admin/includes/import.php
/var/www/wordpress/wp-admin/includes/manifest.php
/var/www/wordpress/wp-admin/includes/media.php
/var/www/wordpress/wp-admin/includes/meta-boxes.php
/var/www/wordpress/wp-admin/includes/misc.php
/var/www/wordpress/wp-admin/includes/ms-deprecated.php
/var/www/wordpress/wp-admin/includes/ms.php
/var/www/wordpress/wp-admin/includes/nav-menu.php
/var/www/wordpress/wp-admin/includes/plugin-install.php
#CodeDescriptions
1<?php
2/**
3 * WordPress Plugin Install Administration API
4 *
5 * @package WordPress
6 * @subpackage Administration
7 */
8
9/**
10 * Retrieve plugin installer pages from WordPress Plugins API.
11 *
12 * It is possible for a plugin to override the Plugin API result with three
13 * filters. Assume this is for plugins, which can extend on the Plugin Info to
14 * offer more choices. This is very powerful and must be used with care, when
15 * overridding the filters.
16 *
17 * The first filter, 'plugins_api_args', is for the args and gives the action as
18 * the second parameter. The hook for 'plugins_api_args' must ensure that an
19 * object is returned.
20 *
21 * The second filter, 'plugins_api', is the result that would be returned.
22 *
23 * @since 2.7.0
24 *
25 * @param string $action
26 * @param array|object $args Optional. Arguments to serialize for the Plugin Info API.
27 * @return object plugins_api response object on success, WP_Error on failure.
28 */
29function plugins_api($action, $args = null) {
30
31 if ( is_array($args) )
32 $args = (object)$args;
33
34 if ( !isset($args->per_page) )
35 $args->per_page = 24;
36
37 // Allows a plugin to override the WordPress.org API entirely.
38 // Use the filter 'plugins_api_result' to mearly add results.
39 // Please ensure that a object is returned from the following filters.
40 $args = apply_filters('plugins_api_args', $args, $action);
41 $res = apply_filters('plugins_api', false, $action, $args);
42
43 if ( false === $res ) {
44 $request = wp_remote_post('http://api.wordpress.org/plugins/info/1.0/', array( 'timeout' => 15, 'body' => array('action' => $action, 'request' => serialize($args))) );
45 if ( is_wp_error($request) ) {
46 $res = new WP_Error('plugins_api_failed', __('An Unexpected HTTP Error occurred during the API request.'), $request->get_error_message() );
47 } else {
48 $res = unserialize($request['body']);//Possible Control Flow
49 if ( false === $res )
50 $res = new WP_Error('plugins_api_failed', __('An unknown error occurred.'), $request['body']);
51 }
52 } elseif ( !is_wp_error($res) ) {
53 $res->external = true;
54 }
55
56 return apply_filters('plugins_api_result', $res, $action, $args);
57}
58
59/**
60 * Retrieve popular WordPress plugin tags.
61 *
62 * @since 2.7.0
63 *
64 * @param array $args
65 * @return array
66 */
67function install_popular_tags( $args = array() ) {
68 if ( ! ($cache = wp_cache_get('popular_tags', 'api')) && ! ($cache = get_option('wporg_popular_tags')) )
69 add_option('wporg_popular_tags', array(), '', 'no'); ///No autoload.
70
71 if ( $cache && $cache->timeout + 3 * 60 * 60 > time() )
72 return $cache->cached;
73
74 $tags = plugins_api('hot_tags', $args);
75
76 if ( is_wp_error($tags) )
77 return $tags;
78
79 $cache = (object) array('timeout' => time(), 'cached' => $tags);
80
81 update_option('wporg_popular_tags', $cache);
82 wp_cache_set('popular_tags', $cache, 'api');
83
84 return $tags;
85}
86add_action('install_plugins_search', 'install_search', 10, 1);
87
88/**
89 * Display search results and display as tag cloud.
90 *
91 * @since 2.7.0
92 *
93 * @param string $page
94 */
95function install_search($page) {
96 $type = isset($_REQUEST['type']) ? stripslashes( $_REQUEST['type'] ) : '';
97 $term = isset($_REQUEST['s']) ? stripslashes( $_REQUEST['s'] ) : '';
98
99 $args = array();
100
101 switch( $type ){
102 case 'tag':
103 $args['tag'] = sanitize_title_with_dashes($term);
104 break;
105 case 'term':
106 $args['search'] = $term;
107 break;
108 case 'author':
109 $args['author'] = $term;
110 break;
111 }
112
113 $args['page'] = $page;
114
115 $api = plugins_api('query_plugins', $args);
116
117 if ( is_wp_error($api) )
118 wp_die($api);
119
120 add_action('install_plugins_table_header', 'install_search_form');
121
122 display_plugins_table($api->plugins, $api->info['page'], $api->info['pages']);
123
124 return;
125}
126
127add_action('install_plugins_dashboard', 'install_dashboard');
128function install_dashboard() {
129 ?>
130 <p><?php _e('Plugins extend and expand the functionality of WordPress. You may automatically install plugins from the <a href="http://wordpress.org/extend/plugins/">WordPress Plugin Directory</a> or upload a plugin in .zip format via this page.') ?></p>
131
132 <h4><?php _e('Search') ?></h4>
133 <p class="install-help"><?php _e('Search for plugins by keyword, author, or tag.') ?></p>
134 <?php install_search_form(); ?>
135
136 <h4><?php _e('Popular tags') ?></h4>
137 <p class="install-help"><?php _e('You may also browse based on the most popular tags in the Plugin Directory:') ?></p>
138 <?php
139
140 $api_tags = install_popular_tags();
141
142 echo '<p class="popular-tags">';
143 if ( is_wp_error($api_tags) ) {
144 echo $api_tags->get_error_message();//Cross Site Scripting
145 } else {
146 //Set up the tags in a way which can be interprated by wp_generate_tag_cloud()
147 $tags = array();
148 foreach ( (array)$api_tags as $tag )
149 $tags[ $tag['name'] ] = (object) array(
150 'link' => esc_url( admin_url('plugin-install.php?tab=search&type=tag&s=' . urlencode($tag['name'])) ),
151 'name' => $tag['name'],
152 'id' => sanitize_title_with_dashes($tag['name']),
153 'count' => $tag['count'] );
154 echo wp_generate_tag_cloud($tags, array( 'single_text' => __('%d plugin'), 'multiple_text' => __('%d plugins') ) );
155 }
156 echo '</p><br class="clear" />';
157}
158
159/**
160 * Display search form for searching plugins.
161 *
162 * @since 2.7.0
163 */
164function install_search_form(){
165 $type = isset($_REQUEST['type']) ? stripslashes( $_REQUEST['type'] ) : '';
166 $term = isset($_REQUEST['s']) ? stripslashes( $_REQUEST['s'] ) : '';
167
168 ?><form id="search-plugins" method="post" action="<?php echo admin_url('plugin-install.php?tab=search'); ?>">
169 <select name="type" id="typeselector">
170 <option value="term"<?php selected('term', $type) ?>><?php _e('Term'); ?></option>
171 <option value="author"<?php selected('author', $type) ?>><?php _e('Author'); ?></option>
172 <option value="tag"<?php selected('tag', $type) ?>><?php _ex('Tag', 'Plugin Installer'); ?></option>
173 </select>
174 <input type="text" name="s" value="<?php echo esc_attr($term) ?>" />
175 <label class="screen-reader-text" for="plugin-search-input"><?php _e('Search Plugins'); ?></label>
176 <input type="submit" id="plugin-search-input" name="search" value="<?php esc_attr_e('Search Plugins'); ?>" class="button" />
177 </form><?php
178}
179
180add_action('install_plugins_featured', 'install_featured', 10, 1);
181/**
182 * Display featured plugins.
183 *
184 * @since 2.7.0
185 *
186 * @param string $page
187 */
188function install_featured($page = 1) {
189 $args = array('browse' => 'featured', 'page' => $page);
190 $api = plugins_api('query_plugins', $args);
191 if ( is_wp_error($api) )
192 wp_die($api->get_error_message() . '</p> <p class="hide-if-no-js"><a href="#" onclick="document.location.reload(); return false;">' . __('Try again') . '</a>');
193 display_plugins_table($api->plugins, $api->info['page'], $api->info['pages']);
194}
195
196add_action('install_plugins_popular', 'install_popular', 10, 1);
197/**
198 * Display popular plugins.
199 *
200 * @since 2.7.0
201 *
202 * @param string $page
203 */
204function install_popular($page = 1) {
205 $args = array('browse' => 'popular', 'page' => $page);
206 $api = plugins_api('query_plugins', $args);
207 if ( is_wp_error($api) )
208 wp_die($api->get_error_message() . '</p> <p class="hide-if-no-js"><a href="#" onclick="document.location.reload(); return false;">' . __('Try again') . '</a>');
209 display_plugins_table($api->plugins, $api->info['page'], $api->info['pages']);
210}
211
212add_action('install_plugins_upload', 'install_plugins_upload', 10, 1);
213/**
214 * Upload from zip
215 * @since 2.8.0
216 *
217 * @param string $page
218 */
219function install_plugins_upload( $page = 1 ) {
220?>
221 <h4><?php _e('Install a plugin in .zip format') ?></h4>
222 <p class="install-help"><?php _e('If you have a plugin in a .zip format, you may install it by uploading it here.') ?></p>
223 <form method="post" enctype="multipart/form-data" action="<?php echo admin_url('update.php?action=upload-plugin') ?>">
224 <?php wp_nonce_field( 'plugin-upload') ?>
225 <label class="screen-reader-text" for="pluginzip"><?php _e('Plugin zip file'); ?></label>
226 <input type="file" id="pluginzip" name="pluginzip" />
227 <input type="submit" class="button" value="<?php esc_attr_e('Install Now') ?>" />
228 </form>
229<?php
230}
231
232add_action('install_plugins_new', 'install_new', 10, 1);
233/**
234 * Display new plugins.
235 *
236 * @since 2.7.0
237 *
238 * @param string $page
239 */
240function install_new($page = 1) {
241 $args = array('browse' => 'new', 'page' => $page);
242 $api = plugins_api('query_plugins', $args);
243 if ( is_wp_error($api) )
244 wp_die($api->get_error_message() . '</p> <p class="hide-if-no-js"><a href="#" onclick="document.location.reload(); return false;">' . __('Try again') . '</a>');
245 display_plugins_table($api->plugins, $api->info['page'], $api->info['pages']);
246}
247add_action('install_plugins_updated', 'install_updated', 10, 1);
248
249
250/**
251 * Display recently updated plugins.
252 *
253 * @since 2.7.0
254 *
255 * @param string $page
256 */
257function install_updated($page = 1) {
258 $args = array('browse' => 'updated', 'page' => $page);
259 $api = plugins_api('query_plugins', $args);
260 if ( is_wp_error($api) )
261 wp_die($api->get_error_message() . '</p> <p class="hide-if-no-js"><a href="#" onclick="document.location.reload(); return false;">' . __('Try again') . '</a>');
262 display_plugins_table($api->plugins, $api->info['page'], $api->info['pages']);
263}
264
265/**
266 * Display plugin content based on plugin list.
267 *
268 * @since 2.7.0
269 *
270 * @param array $plugins List of plugins.
271 * @param string $page
272 * @param int $totalpages Number of pages.
273 */
274function display_plugins_table($plugins, $page = 1, $totalpages = 1){
275 $type = isset($_REQUEST['type']) ? stripslashes( $_REQUEST['type'] ) : '';
276 $term = isset($_REQUEST['s']) ? stripslashes( $_REQUEST['s'] ) : '';
277
278 $plugins_allowedtags = array('a' => array('href' => array(),'title' => array(), 'target' => array()),
279 'abbr' => array('title' => array()),'acronym' => array('title' => array()),
280 'code' => array(), 'pre' => array(), 'em' => array(),'strong' => array(),
281 'ul' => array(), 'ol' => array(), 'li' => array(), 'p' => array(), 'br' => array());
282
283?>
284 <div class="tablenav">
285 <div class="alignleft actions">
286 <?php do_action('install_plugins_table_header'); ?>
287 </div>
288 <?php
289 $url = esc_url($_SERVER['REQUEST_URI']);
290 if ( ! empty($term) )
291 $url = add_query_arg('s', $term, $url);
292 if ( ! empty($type) )
293 $url = add_query_arg('type', $type, $url);
294
295 $page_links = paginate_links( array(
296 'base' => add_query_arg('paged', '%#%', $url),
297 'format' => '',
298 'prev_text' => __('«'),
299 'next_text' => __('»'),
300 'total' => $totalpages,
301 'current' => $page
302 ));
303
304 if ( $page_links )
305 echo "\t\t<div class='tablenav-pages'>$page_links</div>";
306?>
307 <br class="clear" />
308 </div>
309 <table class="widefat" id="install-plugins" cellspacing="0">
310 <thead>
311 <tr>
312 <th scope="col" class="name"><?php _e('Name'); ?></th>
313 <th scope="col" class="num"><?php _e('Version'); ?></th>
314 <th scope="col" class="num"><?php _e('Rating'); ?></th>
315 <th scope="col" class="desc"><?php _e('Description'); ?></th>
316 </tr>
317 </thead>
318
319 <tfoot>
320 <tr>
321 <th scope="col" class="name"><?php _e('Name'); ?></th>
322 <th scope="col" class="num"><?php _e('Version'); ?></th>
323 <th scope="col" class="num"><?php _e('Rating'); ?></th>
324 <th scope="col" class="desc"><?php _e('Description'); ?></th>
325 </tr>
326 </tfoot>
327
328 <tbody class="plugins">
329 <?php
330 if ( empty($plugins) )
331 echo '<tr><td colspan="5">', __('No plugins match your request.'), '</td></tr>';
332
333 foreach ( (array) $plugins as $plugin ){
334 if ( is_object($plugin) )
335 $plugin = (array) $plugin;
336
337 $title = wp_kses($plugin['name'], $plugins_allowedtags);
338 //Limit description to 400char, and remove any HTML.
339 $description = strip_tags($plugin['description']);
340 if ( strlen($description) > 400 )
341 $description = mb_substr($description, 0, 400) . '…';
342 //remove any trailing entities
343 $description = preg_replace('/&[^;\s]{0,6}$/', '', $description);
344 //strip leading/trailing & multiple consecutive lines
345 $description = trim($description);
346 $description = preg_replace("|(\r?\n)+|", "\n", $description);
347 //\n => <br>
348 $description = nl2br($description);
349 $version = wp_kses($plugin['version'], $plugins_allowedtags);
350
351 $name = strip_tags($title . ' ' . $version);
352
353 $author = $plugin['author'];
354 if ( ! empty($plugin['author']) )
355 $author = ' <cite>' . sprintf( __('By %s'), $author ) . '.</cite>';
356
357 $author = wp_kses($author, $plugins_allowedtags);
358
359 $action_links = array();
360 $action_links[] = '<a href="' . admin_url('plugin-install.php?tab=plugin-information&plugin=' . $plugin['slug'] .
361 '&TB_iframe=true&width=600&height=550') . '" class="thickbox" title="' .
362 esc_attr( sprintf( __( 'More information about %s' ), $name ) ) . '">' . __('Details') . '</a>';
363
364 if ( current_user_can('install_plugins') || current_user_can('update_plugins') ) {
365 $status = install_plugin_install_status($plugin);
366
367 switch ( $status['status'] ) {
368 case 'install':
369 if ( $status['url'] )
370 $action_links[] = '<a class="install-now" href="' . $status['url'] . '" title="' . esc_attr( sprintf( __( 'Install %s' ), $name ) ) . '">' . __('Install Now') . '</a>';
371 break;
372 case 'update_available':
373 if ( $status['url'] )
374 $action_links[] = '<a href="' . $status['url'] . '" title="' . esc_attr( sprintf( __( 'Update to version %s' ), $status['version'] ) ) . '">' . sprintf( __('Update Now'), $status['version'] ) . '</a>';
375 break;
376 case 'latest_installed':
377 case 'newer_installed':
378 $action_links[] = '<span title="' . esc_attr__( 'This plugin is already installed and is up to date' ) . ' ">' . __('Installed') . '</span>';
379 break;
380 }
381 }
382
383 $action_links = apply_filters( 'plugin_install_action_links', $action_links, $plugin );
384 ?>
385 <tr>
386 <td class="name"><strong><?php echo $title; ?></strong>//Cross Site Scripting
387 <div class="action-links"><?php if ( !empty($action_links) ) echo implode(' | ', $action_links); ?></div>
388 </td>
389 <td class="vers"><?php echo $version; ?></td>//Cross Site Scripting
390 <td class="vers">
391 <div class="star-holder" title="<?php printf(_n('(based on %s rating)', '(based on %s ratings)', $plugin['num_ratings']), number_format_i18n($plugin['num_ratings'])) ?>">
392 <div class="star star-rating" style="width: <?php echo esc_attr($plugin['rating']) ?>px"></div>
393 <div class="star star5"><img src="<?php echo admin_url('images/star.gif'); ?>" alt="<?php _e('5 stars') ?>" /></div>
394 <div class="star star4"><img src="<?php echo admin_url('images/star.gif'); ?>" alt="<?php _e('4 stars') ?>" /></div>
395 <div class="star star3"><img src="<?php echo admin_url('images/star.gif'); ?>" alt="<?php _e('3 stars') ?>" /></div>
396 <div class="star star2"><img src="<?php echo admin_url('images/star.gif'); ?>" alt="<?php _e('2 stars') ?>" /></div>
397 <div class="star star1"><img src="<?php echo admin_url('images/star.gif'); ?>" alt="<?php _e('1 star') ?>" /></div>
398 </div>
399 </td>
400 <td class="desc"><?php echo $description, $author; ?></td>//Cross Site Scripting
401 </tr>
402 <?php
403 }
404 ?>
405 </tbody>
406 </table>
407
408 <div class="tablenav">
409 <?php if ( $page_links )
410 echo "\t\t<div class='tablenav-pages'>$page_links</div>"; ?>
411 <br class="clear" />
412 </div>
413
414<?php
415}
416
417add_action('install_plugins_pre_plugin-information', 'install_plugin_information');
418
419/**
420 * Determine the status we can perform on a plugin.
421 *
422 * @since 3.0.0
423 */
424function install_plugin_install_status($api, $loop = false) {
425 // this function is called recursivly, $loop prevents futhur loops.
426 if ( is_array($api) )
427 $api = (object) $api;
428
429 //Default to a "new" plugin
430 $status = 'install';
431 $url = false;
432
433 //Check to see if this plugin is known to be installed, and has an update awaiting it.
434 $update_plugins = get_site_transient('update_plugins');
435 if ( is_object( $update_plugins ) ) {
436 foreach ( (array)$update_plugins->response as $file => $plugin ) {
437 if ( $plugin->slug === $api->slug ) {
438 $status = 'update_available';
439 $update_file = $file;//Arbitrary file disclosing
440 $version = $plugin->new_version;
441 if ( current_user_can('update_plugins') )
442 $url = wp_nonce_url(admin_url('update.php?action=upgrade-plugin&plugin=' . $update_file), 'upgrade-plugin_' . $update_file);
443 break;
444 }
445 }
446 }
447
448 if ( 'install' == $status ) {
449 if ( is_dir( WP_PLUGIN_DIR . '/' . $api->slug ) ) {
450 $installed_plugin = get_plugins('/' . $api->slug);
451 if ( empty($installed_plugin) ) {
452 if ( current_user_can('install_plugins') )
453 $url = wp_nonce_url(admin_url('update.php?action=install-plugin&plugin=' . $api->slug), 'install-plugin_' . $api->slug);
454 } else {
455 $key = array_shift( $key = array_keys($installed_plugin) ); //Use the first plugin regardless of the name, Could have issues for multiple-plugins in one directory if they share different version numbers
456 if ( version_compare($api->version, $installed_plugin[ $key ]['Version'], '=') ){
457 $status = 'latest_installed';
458 } elseif ( version_compare($api->version, $installed_plugin[ $key ]['Version'], '<') ) {
459 $status = 'newer_installed';
460 $version = $installed_plugin[ $key ]['Version'];
461 } else {
462 //If the above update check failed, Then that probably means that the update checker has out-of-date information, force a refresh
463 if ( ! $loop ) {
464 delete_site_transient('update_plugins');
465 wp_update_plugins();
466 return install_plugin_install_status($api, true);
467 }
468 }
469 }
470 } else {
471 // "install" & no directory with that slug
472 if ( current_user_can('install_plugins') )
473 $url = wp_nonce_url(admin_url('update.php?action=install-plugin&plugin=' . $api->slug), 'install-plugin_' . $api->slug);
474 }
475 }
476 if ( isset($_GET['from']) )
477 $url .= '&from=' . urlencode(stripslashes($_GET['from']));
478
479 return compact('status', 'url', 'version');
480}
481
482/**
483 * Display plugin information in dialog box form.
484 *
485 * @since 2.7.0
486 */
487function install_plugin_information() {
488 global $tab;
489
490 $api = plugins_api('plugin_information', array('slug' => stripslashes( $_REQUEST['plugin'] ) ));
491
492 if ( is_wp_error($api) )
493 wp_die($api);
494
495 $plugins_allowedtags = array('a' => array('href' => array(), 'title' => array(), 'target' => array()),
496 'abbr' => array('title' => array()), 'acronym' => array('title' => array()),
497 'code' => array(), 'pre' => array(), 'em' => array(), 'strong' => array(),
498 'div' => array(), 'p' => array(), 'ul' => array(), 'ol' => array(), 'li' => array(),
499 'h1' => array(), 'h2' => array(), 'h3' => array(), 'h4' => array(), 'h5' => array(), 'h6' => array(),
500 'img' => array('src' => array(), 'class' => array(), 'alt' => array()));
501 //Sanitize HTML
502 foreach ( (array)$api->sections as $section_name => $content )
503 $api->sections[$section_name] = wp_kses($content, $plugins_allowedtags);
504 foreach ( array('version', 'author', 'requires', 'tested', 'homepage', 'downloaded', 'slug') as $key )
505 $api->$key = wp_kses($api->$key, $plugins_allowedtags);
506
507 $section = isset($_REQUEST['section']) ? stripslashes( $_REQUEST['section'] ) : 'description'; //Default to the Description tab, Do not translate, API returns English.
508 if ( empty($section) || ! isset($api->sections[ $section ]) )
509 $section = array_shift( $section_titles = array_keys((array)$api->sections) );
510
511 iframe_header( __('Plugin Install') );
512 echo "<div id='$tab-header'>\n";
513 echo "<ul id='sidemenu'>\n";
514 foreach ( (array)$api->sections as $section_name => $content ) {
515
516 $title = $section_name;
517 $title = ucwords(str_replace('_', ' ', $title));
518
519 $class = ( $section_name == $section ) ? ' class="current"' : '';
520 $href = add_query_arg( array('tab' => $tab, 'section' => $section_name) );
521 $href = esc_url($href);
522 $san_title = esc_attr(sanitize_title_with_dashes($title));
523 echo "\t<li><a name='$san_title' target='' href='$href'$class>$title</a></li>\n";
524 }
525 echo "</ul>\n";
526 echo "</div>\n";
527 ?>
528 <div class="alignright fyi">
529 <?php if ( ! empty($api->download_link) && ( current_user_can('install_plugins') || current_user_can('update_plugins') ) ) : ?>
530 <p class="action-button">
531 <?php
532 $status = install_plugin_install_status($api);
533 switch ( $status['status'] ) {
534 case 'install':
535 if ( $status['url'] )
536 echo '<a href="' . $status['url'] . '" target="_parent">' . __('Install Now') . '</a>';
537 break;
538 case 'update_available':
539 if ( $status['url'] )
540 echo '<a href="' . $status['url'] . '" target="_parent">' . __('Install Update Now') .'</a>';
541 break;
542 case 'newer_installed':
543 echo '<a>' . sprintf(__('Newer Version (%s) Installed'), $status['version']) . '</a>';
544 break;
545 case 'latest_installed':
546 echo '<a>' . __('Latest Version Installed') . '</a>';
547 break;
548 }
549 ?>
550 </p>
551 <?php endif; ?>
552 <h2 class="mainheader"><?php /* translators: For Your Information */ _e('FYI') ?></h2>
553 <ul>
554<?php if ( ! empty($api->version) ) : ?>
555 <li><strong><?php _e('Version:') ?></strong> <?php echo $api->version ?></li>
556<?php endif; if ( ! empty($api->author) ) : ?>
557 <li><strong><?php _e('Author:') ?></strong> <?php echo links_add_target($api->author, '_blank') ?></li>
558<?php endif; if ( ! empty($api->last_updated) ) : ?>
559 <li><strong><?php _e('Last Updated:') ?></strong> <span title="<?php echo $api->last_updated ?>"><?php
560 printf( __('%s ago'), human_time_diff(strtotime($api->last_updated)) ) ?></span></li>
561<?php endif; if ( ! empty($api->requires) ) : ?>
562 <li><strong><?php _e('Requires WordPress Version:') ?></strong> <?php printf(__('%s or higher'), $api->requires) ?></li>
563<?php endif; if ( ! empty($api->tested) ) : ?>
564 <li><strong><?php _e('Compatible up to:') ?></strong> <?php echo $api->tested ?></li>
565<?php endif; if ( ! empty($api->downloaded) ) : ?>
566 <li><strong><?php _e('Downloaded:') ?></strong> <?php printf(_n('%s time', '%s times', $api->downloaded), number_format_i18n($api->downloaded)) ?></li>
567<?php endif; if ( ! empty($api->slug) && empty($api->external) ) : ?>
568 <li><a target="_blank" href="http://wordpress.org/extend/plugins/<?php echo $api->slug ?>/"><?php _e('WordPress.org Plugin Page »') ?></a></li>//Cross Site Scripting
569<?php endif; if ( ! empty($api->homepage) ) : ?>
570 <li><a target="_blank" href="<?php echo $api->homepage ?>"><?php _e('Plugin Homepage »') ?></a></li>//Cross Site Scripting
571<?php endif; ?>
572 </ul>
573 <?php if ( ! empty($api->rating) ) : ?>
574 <h2><?php _e('Average Rating') ?></h2>
575 <div class="star-holder" title="<?php printf(_n('(based on %s rating)', '(based on %s ratings)', $api->num_ratings), number_format_i18n($api->num_ratings)); ?>">
576 <div class="star star-rating" style="width: <?php echo esc_attr($api->rating) ?>px"></div>
577 <div class="star star5"><img src="<?php echo admin_url('images/star.gif'); ?>" alt="<?php _e('5 stars') ?>" /></div>
578 <div class="star star4"><img src="<?php echo admin_url('images/star.gif'); ?>" alt="<?php _e('4 stars') ?>" /></div>
579 <div class="star star3"><img src="<?php echo admin_url('images/star.gif'); ?>" alt="<?php _e('3 stars') ?>" /></div>
580 <div class="star star2"><img src="<?php echo admin_url('images/star.gif'); ?>" alt="<?php _e('2 stars') ?>" /></div>
581 <div class="star star1"><img src="<?php echo admin_url('images/star.gif'); ?>" alt="<?php _e('1 star') ?>" /></div>
582 </div>
583 <small><?php printf(_n('(based on %s rating)', '(based on %s ratings)', $api->num_ratings), number_format_i18n($api->num_ratings)); ?></small>
584 <?php endif; ?>
585 </div>
586 <div id="section-holder" class="wrap">
587 <?php
588 if ( !empty($api->tested) && version_compare( substr($GLOBALS['wp_version'], 0, strlen($api->tested)), $api->tested, '>') )
589 echo '<div class="updated"><p>' . __('<strong>Warning:</strong> This plugin has <strong>not been tested</strong> with your current version of WordPress.') . '</p></div>';
590
591 else if ( !empty($api->requires) && version_compare( substr($GLOBALS['wp_version'], 0, strlen($api->requires)), $api->requires, '<') )
592 echo '<div class="updated"><p>' . __('<strong>Warning:</strong> This plugin has <strong>not been marked as compatible</strong> with your version of WordPress.') . '</p></div>';
593
594 foreach ( (array)$api->sections as $section_name => $content ) {
595 $title = $section_name;
596 $title[0] = strtoupper($title[0]);
597 $title = str_replace('_', ' ', $title);
598
599 $content = links_add_base_url($content, 'http://wordpress.org/extend/plugins/' . $api->slug . '/');
600 $content = links_add_target($content, '_blank');
601
602 $san_title = esc_attr(sanitize_title_with_dashes($title));
603
604 $display = ( $section_name == $section ) ? 'block' : 'none';
605
606 echo "\t<div id='section-{$san_title}' class='section' style='display: {$display};'>\n";
607 echo "\t\t<h2 class='long-header'>$title</h2>";//Cross Site Scripting
608 echo $content;//Cross Site Scripting
609 echo "\t</div>\n";
610 }
611 echo "</div>\n";
612
613 iframe_footer();
614 exit;
615}
616
/var/www/wordpress/wp-admin/includes/plugin.php
/var/www/wordpress/wp-admin/includes/post.php
/var/www/wordpress/wp-admin/includes/schema.php
/var/www/wordpress/wp-admin/includes/taxonomy.php
/var/www/wordpress/wp-admin/includes/template.php
/var/www/wordpress/wp-admin/includes/theme-install.php
/var/www/wordpress/wp-admin/includes/theme.php
/var/www/wordpress/wp-admin/includes/update-core.php
/var/www/wordpress/wp-admin/includes/update.php
/var/www/wordpress/wp-admin/includes/upgrade.php
/var/www/wordpress/wp-admin/includes/user.php
/var/www/wordpress/wp-admin/includes/widgets.php
/var/www/wordpress/wp-admin/js/revisions-js.php
/var/www/wordpress/wp-admin/maint/repair.php
/var/www/wordpress/wp-admin/admin-ajax.php
/var/www/wordpress/wp-admin/admin-footer.php
/var/www/wordpress/wp-admin/admin-functions.php
/var/www/wordpress/wp-admin/admin-header.php
/var/www/wordpress/wp-admin/admin-post.php
/var/www/wordpress/wp-admin/admin.php
/var/www/wordpress/wp-admin/async-upload.php
/var/www/wordpress/wp-admin/comment.php
/var/www/wordpress/wp-admin/custom-background.php
/var/www/wordpress/wp-admin/custom-header.php
/var/www/wordpress/wp-admin/edit-attachment-rows.php
/var/www/wordpress/wp-admin/edit-comments.php
/var/www/wordpress/wp-admin/edit-form-advanced.php
/var/www/wordpress/wp-admin/edit-form-comment.php
/var/www/wordpress/wp-admin/edit-link-categories.php
/var/www/wordpress/wp-admin/edit-link-category-form.php
/var/www/wordpress/wp-admin/edit-link-form.php
/var/www/wordpress/wp-admin/edit-post-rows.php
/var/www/wordpress/wp-admin/edit-tag-form.php
/var/www/wordpress/wp-admin/edit-tags.php
/var/www/wordpress/wp-admin/edit.php
/var/www/wordpress/wp-admin/export.php
/var/www/wordpress/wp-admin/gears-manifest.php
/var/www/wordpress/wp-admin/import.php
/var/www/wordpress/wp-admin/index-extra.php
/var/www/wordpress/wp-admin/index.php
/var/www/wordpress/wp-admin/install-helper.php
/var/www/wordpress/wp-admin/install.php
/var/www/wordpress/wp-admin/link-add.php
/var/www/wordpress/wp-admin/link-category.php
/var/www/wordpress/wp-admin/link-manager.php
/var/www/wordpress/wp-admin/link-parse-opml.php
/var/www/wordpress/wp-admin/link.php
/var/www/wordpress/wp-admin/load-scripts.php
/var/www/wordpress/wp-admin/load-styles.php
/var/www/wordpress/wp-admin/media-new.php
/var/www/wordpress/wp-admin/media-upload.php
/var/www/wordpress/wp-admin/media.php
/var/www/wordpress/wp-admin/menu-header.php
/var/www/wordpress/wp-admin/menu.php
/var/www/wordpress/wp-admin/moderation.php
/var/www/wordpress/wp-admin/ms-admin.php
/var/www/wordpress/wp-admin/ms-delete-site.php
/var/www/wordpress/wp-admin/ms-edit.php
/var/www/wordpress/wp-admin/ms-options.php
/var/www/wordpress/wp-admin/ms-sites.php
/var/www/wordpress/wp-admin/ms-themes.php
/var/www/wordpress/wp-admin/ms-upgrade-network.php
/var/www/wordpress/wp-admin/ms-users.php
/var/www/wordpress/wp-admin/my-sites.php
/var/www/wordpress/wp-admin/nav-menus.php
/var/www/wordpress/wp-admin/network.php
/var/www/wordpress/wp-admin/options-discussion.php
/var/www/wordpress/wp-admin/options-general.php
/var/www/wordpress/wp-admin/options-head.php
/var/www/wordpress/wp-admin/options-media.php
/var/www/wordpress/wp-admin/options-permalink.php
/var/www/wordpress/wp-admin/options-privacy.php
/var/www/wordpress/wp-admin/options-reading.php
/var/www/wordpress/wp-admin/options-writing.php
/var/www/wordpress/wp-admin/options.php
/var/www/wordpress/wp-admin/plugin-editor.php
/var/www/wordpress/wp-admin/plugin-install.php
/var/www/wordpress/wp-admin/plugins.php
/var/www/wordpress/wp-admin/post-new.php
/var/www/wordpress/wp-admin/post.php
/var/www/wordpress/wp-admin/press-this.php
/var/www/wordpress/wp-admin/profile.php
/var/www/wordpress/wp-admin/revision.php
/var/www/wordpress/wp-admin/setup-config.php
/var/www/wordpress/wp-admin/sidebar.php
/var/www/wordpress/wp-admin/theme-editor.php
/var/www/wordpress/wp-admin/theme-install.php
/var/www/wordpress/wp-admin/themes.php
/var/www/wordpress/wp-admin/tools.php
/var/www/wordpress/wp-admin/update-core.php
/var/www/wordpress/wp-admin/update.php
/var/www/wordpress/wp-admin/upgrade-functions.php
/var/www/wordpress/wp-admin/upgrade.php
/var/www/wordpress/wp-admin/upload.php
/var/www/wordpress/wp-admin/user-edit.php
/var/www/wordpress/wp-admin/user-new.php
/var/www/wordpress/wp-admin/users.php
/var/www/wordpress/wp-admin/widgets.php
/var/www/wordpress/wp-content/languages/ru_RU.php
/var/www/wordpress/wp-content/plugins/akismet/akismet.php
/var/www/wordpress/wp-content/plugins/rh/rh.php
/var/www/wordpress/wp-content/plugins/hello.php
/var/www/wordpress/wp-content/plugins/index.php
/var/www/wordpress/wp-content/themes/twentyten/404.php
/var/www/wordpress/wp-content/themes/twentyten/archive.php
/var/www/wordpress/wp-content/themes/twentyten/attachment.php
/var/www/wordpress/wp-content/themes/twentyten/author.php
/var/www/wordpress/wp-content/themes/twentyten/category.php
/var/www/wordpress/wp-content/themes/twentyten/comments.php
/var/www/wordpress/wp-content/themes/twentyten/footer.php
/var/www/wordpress/wp-content/themes/twentyten/functions.php
/var/www/wordpress/wp-content/themes/twentyten/header.php
/var/www/wordpress/wp-content/themes/twentyten/index.php
/var/www/wordpress/wp-content/themes/twentyten/loop.php
/var/www/wordpress/wp-content/themes/twentyten/onecolumn-page.php
/var/www/wordpress/wp-content/themes/twentyten/page.php
/var/www/wordpress/wp-content/themes/twentyten/search.php
/var/www/wordpress/wp-content/themes/twentyten/sidebar-footer.php
/var/www/wordpress/wp-content/themes/twentyten/sidebar.php
/var/www/wordpress/wp-content/themes/twentyten/single.php
/var/www/wordpress/wp-content/themes/twentyten/tag.php
/var/www/wordpress/wp-content/themes/index.php
/var/www/wordpress/wp-content/index.php
/var/www/wordpress/wp-includes/js/tinymce/langs/wp-langs.php
/var/www/wordpress/wp-includes/js/tinymce/plugins/spellchecker/classes/utils/JSON.php
/var/www/wordpress/wp-includes/js/tinymce/plugins/spellchecker/classes/utils/Logger.php
/var/www/wordpress/wp-includes/js/tinymce/plugins/spellchecker/classes/EnchantSpell.php
/var/www/wordpress/wp-includes/js/tinymce/plugins/spellchecker/classes/GoogleSpell.php
/var/www/wordpress/wp-includes/js/tinymce/plugins/spellchecker/classes/PSpell.php
/var/www/wordpress/wp-includes/js/tinymce/plugins/spellchecker/classes/PSpellShell.php
/var/www/wordpress/wp-includes/js/tinymce/plugins/spellchecker/classes/SpellChecker.php
/var/www/wordpress/wp-includes/js/tinymce/plugins/spellchecker/includes/general.php
/var/www/wordpress/wp-includes/js/tinymce/plugins/spellchecker/config.php
/var/www/wordpress/wp-includes/js/tinymce/plugins/spellchecker/rpc.php
/var/www/wordpress/wp-includes/js/tinymce/wp-mce-help.php
/var/www/wordpress/wp-includes/js/tinymce/wp-tinymce.php
/var/www/wordpress/wp-includes/pomo/entry.php
/var/www/wordpress/wp-includes/pomo/mo.php
/var/www/wordpress/wp-includes/pomo/po.php
/var/www/wordpress/wp-includes/pomo/streams.php
/var/www/wordpress/wp-includes/pomo/translations.php
/var/www/wordpress/wp-includes/Text/Diff/Engine/native.php
/var/www/wordpress/wp-includes/Text/Diff/Engine/shell.php
/var/www/wordpress/wp-includes/Text/Diff/Engine/string.php
/var/www/wordpress/wp-includes/Text/Diff/Engine/xdiff.php
/var/www/wordpress/wp-includes/Text/Diff/Renderer/inline.php
/var/www/wordpress/wp-includes/Text/Diff/Renderer.php
/var/www/wordpress/wp-includes/Text/Diff.php
/var/www/wordpress/wp-includes/theme-compat/comments-popup.php
/var/www/wordpress/wp-includes/theme-compat/comments.php
/var/www/wordpress/wp-includes/theme-compat/footer.php
/var/www/wordpress/wp-includes/theme-compat/header.php
/var/www/wordpress/wp-includes/theme-compat/sidebar.php
/var/www/wordpress/wp-includes/atomlib.php
/var/www/wordpress/wp-includes/author-template.php
/var/www/wordpress/wp-includes/bookmark-template.php
/var/www/wordpress/wp-includes/bookmark.php
/var/www/wordpress/wp-includes/cache.php
/var/www/wordpress/wp-includes/canonical.php
/var/www/wordpress/wp-includes/capabilities.php
/var/www/wordpress/wp-includes/category-template.php
/var/www/wordpress/wp-includes/category.php
/var/www/wordpress/wp-includes/class-feed.php
/var/www/wordpress/wp-includes/class-http.php
/var/www/wordpress/wp-includes/class-IXR.php
/var/www/wordpress/wp-includes/class-json.php
/var/www/wordpress/wp-includes/class-oembed.php
/var/www/wordpress/wp-includes/class-phpass.php
/var/www/wordpress/wp-includes/class-phpmailer.php
/var/www/wordpress/wp-includes/class-pop3.php
/var/www/wordpress/wp-includes/class-simplepie.php
/var/www/wordpress/wp-includes/class-smtp.php
/var/www/wordpress/wp-includes/class-snoopy.php
/var/www/wordpress/wp-includes/class.wp-dependencies.php
/var/www/wordpress/wp-includes/class.wp-scripts.php
/var/www/wordpress/wp-includes/class.wp-styles.php
/var/www/wordpress/wp-includes/classes.php
/var/www/wordpress/wp-includes/comment-template.php
/var/www/wordpress/wp-includes/comment.php
/var/www/wordpress/wp-includes/compat.php
/var/www/wordpress/wp-includes/cron.php
/var/www/wordpress/wp-includes/default-constants.php
/var/www/wordpress/wp-includes/default-embeds.php
/var/www/wordpress/wp-includes/default-filters.php
/var/www/wordpress/wp-includes/default-widgets.php
/var/www/wordpress/wp-includes/deprecated.php
/var/www/wordpress/wp-includes/feed-atom-comments.php
/var/www/wordpress/wp-includes/feed-atom.php
/var/www/wordpress/wp-includes/feed-rdf.php
/var/www/wordpress/wp-includes/feed-rss.php
/var/www/wordpress/wp-includes/feed-rss2-comments.php
/var/www/wordpress/wp-includes/feed-rss2.php
/var/www/wordpress/wp-includes/feed.php
/var/www/wordpress/wp-includes/formatting.php
/var/www/wordpress/wp-includes/functions.php
/var/www/wordpress/wp-includes/functions.wp-scripts.php
/var/www/wordpress/wp-includes/functions.wp-styles.php
/var/www/wordpress/wp-includes/general-template.php
/var/www/wordpress/wp-includes/http.php
/var/www/wordpress/wp-includes/kses.php
/var/www/wordpress/wp-includes/l10n.php
/var/www/wordpress/wp-includes/link-template.php
/var/www/wordpress/wp-includes/load.php
/var/www/wordpress/wp-includes/locale.php
/var/www/wordpress/wp-includes/media.php
/var/www/wordpress/wp-includes/meta.php
/var/www/wordpress/wp-includes/ms-blogs.php
/var/www/wordpress/wp-includes/ms-default-constants.php
/var/www/wordpress/wp-includes/ms-default-filters.php
/var/www/wordpress/wp-includes/ms-deprecated.php
/var/www/wordpress/wp-includes/ms-files.php
/var/www/wordpress/wp-includes/ms-functions.php
/var/www/wordpress/wp-includes/ms-load.php
/var/www/wordpress/wp-includes/ms-settings.php
/var/www/wordpress/wp-includes/nav-menu-template.php
/var/www/wordpress/wp-includes/nav-menu.php
/var/www/wordpress/wp-includes/pluggable-deprecated.php
/var/www/wordpress/wp-includes/pluggable.php
/var/www/wordpress/wp-includes/plugin.php
/var/www/wordpress/wp-includes/post-template.php
/var/www/wordpress/wp-includes/post-thumbnail-template.php
/var/www/wordpress/wp-includes/post.php
/var/www/wordpress/wp-includes/query.php
/var/www/wordpress/wp-includes/registration-functions.php
/var/www/wordpress/wp-includes/registration.php
/var/www/wordpress/wp-includes/rewrite.php
/var/www/wordpress/wp-includes/rss-functions.php
/var/www/wordpress/wp-includes/rss.php
/var/www/wordpress/wp-includes/script-loader.php
/var/www/wordpress/wp-includes/shortcodes.php
/var/www/wordpress/wp-includes/taxonomy.php
/var/www/wordpress/wp-includes/template-loader.php
/var/www/wordpress/wp-includes/theme.php
/var/www/wordpress/wp-includes/update.php
/var/www/wordpress/wp-includes/user.php
/var/www/wordpress/wp-includes/vars.php
/var/www/wordpress/wp-includes/version.php
/var/www/wordpress/wp-includes/widgets.php
/var/www/wordpress/wp-includes/wp-db.php
/var/www/wordpress/wp-includes/wp-diff.php
/var/www/wordpress/index.php
/var/www/wordpress/wp-activate.php
/var/www/wordpress/wp-app.php
/var/www/wordpress/wp-atom.php
/var/www/wordpress/wp-blog-header.php
/var/www/wordpress/wp-comments-post.php
/var/www/wordpress/wp-commentsrss2.php
/var/www/wordpress/wp-config-sample.php
/var/www/wordpress/wp-cron.php
/var/www/wordpress/wp-feed.php
/var/www/wordpress/wp-links-opml.php
/var/www/wordpress/wp-load.php
/var/www/wordpress/wp-login.php
/var/www/wordpress/wp-mail.php
/var/www/wordpress/wp-pass.php
/var/www/wordpress/wp-rdf.php
/var/www/wordpress/wp-register.php
/var/www/wordpress/wp-rss.php
/var/www/wordpress/wp-rss2.php
/var/www/wordpress/wp-settings.php
/var/www/wordpress/wp-signup.php
/var/www/wordpress/wp-trackback.php
/var/www/wordpress/xmlrpc.php