diff options
Diffstat (limited to 'www/crm/wp-admin/includes/class-wp-site-health.php')
| -rw-r--r-- | www/crm/wp-admin/includes/class-wp-site-health.php | 1990 |
1 files changed, 1990 insertions, 0 deletions
diff --git a/www/crm/wp-admin/includes/class-wp-site-health.php b/www/crm/wp-admin/includes/class-wp-site-health.php new file mode 100644 index 00000000..12e12735 --- /dev/null +++ b/www/crm/wp-admin/includes/class-wp-site-health.php @@ -0,0 +1,1990 @@ +<?php +/** + * Class for looking up a site's health based on a user's WordPress environment. + * + * @package WordPress + * @subpackage Site_Health + * @since 5.2.0 + */ + +class WP_Site_Health { + private $mysql_min_version_check; + private $mysql_rec_version_check; + + public $is_mariadb = false; + private $mysql_server_version = ''; + private $health_check_mysql_required_version = '5.5'; + private $health_check_mysql_rec_version = ''; + + public $schedules; + public $crons; + public $last_missed_cron = null; + + /** + * WP_Site_Health constructor. + * + * @since 5.2.0 + */ + public function __construct() { + $this->prepare_sql_data(); + + add_filter( 'admin_body_class', array( $this, 'admin_body_class' ) ); + + add_action( 'admin_enqueue_scripts', array( $this, 'enqueue_scripts' ) ); + } + + /** + * Enqueues the site health scripts. + * + * @since 5.2.0 + */ + public function enqueue_scripts() { + $screen = get_current_screen(); + if ( 'site-health' !== $screen->id ) { + return; + } + + $health_check_js_variables = array( + 'screen' => $screen->id, + 'nonce' => array( + 'site_status' => wp_create_nonce( 'health-check-site-status' ), + 'site_status_result' => wp_create_nonce( 'health-check-site-status-result' ), + ), + 'site_status' => array( + 'direct' => array(), + 'async' => array(), + 'issues' => array( + 'good' => 0, + 'recommended' => 0, + 'critical' => 0, + ), + ), + ); + + $issue_counts = get_transient( 'health-check-site-status-result' ); + + if ( false !== $issue_counts ) { + $issue_counts = json_decode( $issue_counts ); + + $health_check_js_variables['site_status']['issues'] = $issue_counts; + } + + if ( 'site-health' === $screen->id && ! isset( $_GET['tab'] ) ) { + $tests = WP_Site_Health::get_tests(); + + // Don't run https test on localhost + if ( 'localhost' === preg_replace( '|https?://|', '', get_site_url() ) ) { + unset( $tests['direct']['https_status'] ); + } + + foreach ( $tests['direct'] as $test ) { + if ( is_string( $test['test'] ) ) { + $test_function = sprintf( + 'get_test_%s', + $test['test'] + ); + + if ( method_exists( $this, $test_function ) && is_callable( array( $this, $test_function ) ) ) { + $health_check_js_variables['site_status']['direct'][] = call_user_func( array( $this, $test_function ) ); + continue; + } + } + + if ( is_callable( $test['test'] ) ) { + $health_check_js_variables['site_status']['direct'][] = call_user_func( $test['test'] ); + } + } + + foreach ( $tests['async'] as $test ) { + if ( is_string( $test['test'] ) ) { + $health_check_js_variables['site_status']['async'][] = array( + 'test' => $test['test'], + 'completed' => false, + ); + } + } + } + + wp_localize_script( 'site-health', 'SiteHealth', $health_check_js_variables ); + } + + /** + * Run the SQL version checks. + * + * These values are used in later tests, but the part of preparing them is more easily managed early + * in the class for ease of access and discovery. + * + * @since 5.2.0 + * + * @global wpdb $wpdb WordPress database abstraction object. + */ + private function prepare_sql_data() { + global $wpdb; + + if ( method_exists( $wpdb, 'db_version' ) ) { + if ( $wpdb->use_mysqli ) { + // phpcs:ignore WordPress.DB.RestrictedFunctions.mysql_mysqli_get_server_info + $mysql_server_type = mysqli_get_server_info( $wpdb->dbh ); + } else { + // phpcs:ignore WordPress.DB.RestrictedFunctions.mysql_mysql_get_server_info + $mysql_server_type = mysql_get_server_info( $wpdb->dbh ); + } + + $this->mysql_server_version = $wpdb->get_var( 'SELECT VERSION()' ); + } + + $this->health_check_mysql_rec_version = '5.6'; + + if ( stristr( $mysql_server_type, 'mariadb' ) ) { + $this->is_mariadb = true; + $this->health_check_mysql_rec_version = '10.0'; + } + + $this->mysql_min_version_check = version_compare( '5.5', $this->mysql_server_version, '<=' ); + $this->mysql_rec_version_check = version_compare( $this->health_check_mysql_rec_version, $this->mysql_server_version, '<=' ); + } + + /** + * Test if `wp_version_check` is blocked. + * + * It's possible to block updates with the `wp_version_check` filter, but this can't be checked during an + * AJAX call, as the filter is never introduced then. + * + * This filter overrides a normal page request if it's made by an admin through the AJAX call with the + * right query argument to check for this. + * + * @since 5.2.0 + */ + public function check_wp_version_check_exists() { + if ( ! is_admin() || ! is_user_logged_in() || ! current_user_can( 'update_core' ) || ! isset( $_GET['health-check-test-wp_version_check'] ) ) { + return; + } + + echo ( has_filter( 'wp_version_check', 'wp_version_check' ) ? 'yes' : 'no' ); + + die(); + } + + /** + * Tests for WordPress version and outputs it. + * + * Gives various results depending on what kind of updates are available, if any, to encourage the + * user to install security updates as a priority. + * + * @since 5.2.0 + * + * @return array The test result. + */ + public function get_test_wordpress_version() { + $result = array( + 'label' => '', + 'status' => '', + 'badge' => array( + 'label' => __( 'Performance' ), + 'color' => 'blue', + ), + 'description' => '', + 'actions' => '', + 'test' => 'wordpress_version', + ); + + $core_current_version = get_bloginfo( 'version' ); + $core_updates = get_core_updates(); + + if ( ! is_array( $core_updates ) ) { + $result['status'] = 'recommended'; + + $result['label'] = sprintf( + // translators: %s: Your current version of WordPress. + __( 'WordPress version %s' ), + $core_current_version + ); + + $result['description'] = sprintf( + '<p>%s</p>', + __( 'We were unable to check if any new versions of WordPress are available.' ) + ); + + $result['actions'] = sprintf( + '<a href="%s">%s</a>', + esc_url( admin_url( 'update-core.php?force-check=1' ) ), + __( 'Check for updates manually' ) + ); + } else { + foreach ( $core_updates as $core => $update ) { + if ( 'upgrade' === $update->response ) { + $current_version = explode( '.', $core_current_version ); + $new_version = explode( '.', $update->version ); + + $current_major = $current_version[0] . '.' . $current_version[1]; + $new_major = $new_version[0] . '.' . $new_version[1]; + + $result['label'] = sprintf( + // translators: %s: The latest version of WordPress available. + __( 'WordPress update available (%s)' ), + $update->version + ); + + $result['actions'] = sprintf( + '<a href="%s">%s</a>', + esc_url( admin_url( 'update-core.php' ) ), + __( 'Install the latest version of WordPress' ) + ); + + if ( $current_major !== $new_major ) { + // This is a major version mismatch. + $result['status'] = 'recommended'; + $result['description'] = sprintf( + '<p>%s</p>', + __( 'A new version of WordPress is available.' ) + ); + } else { + // This is a minor version, sometimes considered more critical. + $result['status'] = 'critical'; + $result['badge']['label'] = __( 'Security' ); + $result['description'] = sprintf( + '<p>%s</p>', + __( 'A new minor update is available for your site. Because minor updates often address security, it’s important to install them.' ) + ); + } + } else { + $result['status'] = 'good'; + $result['label'] = sprintf( + // translators: %s: The current version of WordPress installed on this site. + __( 'Your WordPress version is up to date (%s)' ), + $core_current_version + ); + + $result['description'] = sprintf( + '<p>%s</p>', + __( 'You are currently running the latest version of WordPress available, keep it up!' ) + ); + } + } + } + + return $result; + } + + /** + * Test if plugins are outdated, or unnecessary. + * + * The tests checks if your plugins are up to date, and encourages you to remove any that are not in use. + * + * @since 5.2.0 + * + * @return array The test result. + */ + public function get_test_plugin_version() { + $result = array( + 'label' => __( 'Your plugins are up to date' ), + 'status' => 'good', + 'badge' => array( + 'label' => __( 'Security' ), + 'color' => 'blue', + ), + 'description' => sprintf( + '<p>%s</p>', + __( 'Plugins extend your site’s functionality with things like contact forms, ecommerce and much more. That means they have deep access to your site, so it’s vital to keep them up to date.' ) + ), + 'actions' => sprintf( + '<p><a href="%s">%s</a></p>', + esc_url( admin_url( 'plugins.php' ) ), + __( 'Manage your plugins' ) + ), + 'test' => 'plugin_version', + ); + + $plugins = get_plugins(); + $plugin_updates = get_plugin_updates(); + + $plugins_have_updates = false; + $plugins_active = 0; + $plugins_total = 0; + $plugins_need_update = 0; + + // Loop over the available plugins and check their versions and active state. + foreach ( $plugins as $plugin_path => $plugin ) { + $plugins_total++; + + if ( is_plugin_active( $plugin_path ) ) { + $plugins_active++; + } + + $plugin_version = $plugin['Version']; + + if ( array_key_exists( $plugin_path, $plugin_updates ) ) { + $plugins_need_update++; + $plugins_have_updates = true; + } + } + + // Add a notice if there are outdated plugins. + if ( $plugins_need_update > 0 ) { + $result['status'] = 'critical'; + + $result['label'] = __( 'You have plugins waiting to be updated' ); + + $result['description'] .= sprintf( + '<p>%s</p>', + sprintf( + /* translators: %d: The number of outdated plugins. */ + _n( + 'Your site has %d plugin waiting to be updated.', + 'Your site has %d plugins waiting to be updated.', + $plugins_need_update + ), + $plugins_need_update + ) + ); + + $result['actions'] .= sprintf( + '<p><a href="%s">%s</a></p>', + esc_url( network_admin_url( 'plugins.php?plugin_status=upgrade' ) ), + __( 'Update your plugins' ) + ); + } else { + if ( 1 === $plugins_active ) { + $result['description'] .= sprintf( + '<p>%s</p>', + __( 'Your site has 1 active plugin, and it is up to date.' ) + ); + } else { + $result['description'] .= sprintf( + '<p>%s</p>', + sprintf( + /* translators: %d: The number of active plugins. */ + _n( + 'Your site has %d active plugin, and it is up to date.', + 'Your site has %d active plugins, and they are all up to date.', + $plugins_active + ), + $plugins_active + ) + ); + } + } + + // Check if there are inactive plugins. + if ( $plugins_total > $plugins_active && ! is_multisite() ) { + $unused_plugins = $plugins_total - $plugins_active; + + $result['status'] = 'recommended'; + + $result['label'] = __( 'You should remove inactive plugins' ); + + $result['description'] .= sprintf( + '<p>%s %s</p>', + sprintf( + /* translators: %d: The number of inactive plugins. */ + _n( + 'Your site has %d inactive plugin.', + 'Your site has %d inactive plugins.', + $unused_plugins + ), + $unused_plugins + ), + __( 'Inactive plugins are tempting targets for attackers. If you’re not going to use a plugin, we recommend you remove it.' ) + ); + + $result['actions'] .= sprintf( + '<p><a href="%s">%s</a></p>', + esc_url( admin_url( 'plugins.php?plugin_status=inactive' ) ), + __( 'Manage inactive plugins' ) + ); + } + + return $result; + } + + /** + * Test if themes are outdated, or unnecessary. + * + * The tests checks if your site has a default theme (to fall back on if there is a need), if your themes + * are up to date and, finally, encourages you to remove any themes that are not needed. + * + * @since 5.2.0 + * + * @return array The test results. + */ + public function get_test_theme_version() { + $result = array( + 'label' => __( 'Your themes are up to date' ), + 'status' => 'good', + 'badge' => array( + 'label' => __( 'Security' ), + 'color' => 'blue', + ), + 'description' => sprintf( + '<p>%s</p>', + __( 'Themes add your site’s look and feel. It’s important to keep them up to date, to stay consistent with your brand and keep your site secure.' ) + ), + 'actions' => sprintf( + '<p><a href="%s">%s</a></p>', + esc_url( admin_url( 'themes.php' ) ), + __( 'Manage your themes' ) + ), + 'test' => 'theme_version', + ); + + $theme_updates = get_theme_updates(); + + $themes_total = 0; + $themes_need_updates = 0; + $themes_inactive = 0; + + // This value is changed during processing to determine how many themes are considered a reasonable amount. + $allowed_theme_count = 1; + + $has_default_theme = false; + $has_unused_themes = false; + $show_unused_themes = true; + $using_default_theme = false; + + // Populate a list of all themes available in the install. + $all_themes = wp_get_themes(); + $active_theme = wp_get_theme(); + + foreach ( $all_themes as $theme_slug => $theme ) { + $themes_total++; + + if ( WP_DEFAULT_THEME === $theme_slug ) { + $has_default_theme = true; + + if ( get_stylesheet() === $theme_slug ) { + $using_default_theme = true; + } + } + + if ( array_key_exists( $theme_slug, $theme_updates ) ) { + $themes_need_updates++; + } + } + + // If this is a child theme, increase the allowed theme count by one, to account for the parent. + if ( $active_theme->parent() ) { + $allowed_theme_count++; + + if ( $active_theme->get_template() === WP_DEFAULT_THEME ) { + $using_default_theme = true; + } + } + + // If there's a default theme installed and not in use, we count that as allowed as well. + if ( $has_default_theme && ! $using_default_theme ) { + $allowed_theme_count++; + } + + if ( $themes_total > $allowed_theme_count ) { + $has_unused_themes = true; + $themes_inactive = ( $themes_total - $allowed_theme_count ); + } + + // Check if any themes need to be updated. + if ( $themes_need_updates > 0 ) { + $result['status'] = 'critical'; + + $result['label'] = __( 'You have themes waiting to be updated' ); + + $result['description'] .= sprintf( + '<p>%s</p>', + sprintf( + /* translators: %d: The number of outdated themes. */ + _n( + 'Your site has %d theme waiting to be updated.', + 'Your site has %d themes waiting to be updated.', + $themes_need_updates + ), + $themes_need_updates + ) + ); + } else { + // Give positive feedback about the site being good about keeping things up to date. + if ( 1 === $themes_total ) { + $result['description'] .= sprintf( + '<p>%s</p>', + __( 'Your site has 1 installed theme, and it is up to date.' ) + ); + } else { + $result['description'] .= sprintf( + '<p>%s</p>', + sprintf( + /* translators: %d: The number of themes. */ + _n( + 'Your site has %d installed theme, and it is up to date.', + 'Your site has %d installed themes, and they are all up to date.', + $themes_total + ), + $themes_total + ) + ); + } + } + + if ( $has_unused_themes && $show_unused_themes && ! is_multisite() ) { + + // This is a child theme, so we want to be a bit more explicit in our messages. + if ( $active_theme->parent() ) { + // Recommend removing inactive themes, except a default theme, your current one, and the parent theme. + $result['status'] = 'recommended'; + + $result['label'] = __( 'You should remove inactive themes' ); + + if ( $using_default_theme ) { + $result['description'] .= sprintf( + '<p>%s %s</p>', + sprintf( + /* translators: %d: The number of inactive themes. */ + _n( + 'Your site has %d inactive theme.', + 'Your site has %d inactive themes.', + $themes_inactive + ), + $themes_inactive + ), + sprintf( + /* translators: 1: The currently active theme. 2: The active theme's parent theme. */ + __( 'To enhance your site’s security, we recommend you remove any themes you’re not using. You should keep your current theme, %1$s, and %2$s, its parent theme.' ), + $active_theme->name, + $active_theme->parent()->name + ) + ); + } else { + $result['description'] .= sprintf( + '<p>%s %s</p>', + sprintf( + /* translators: %d: The number of inactive themes. */ + _n( + 'Your site has %d inactive theme.', + 'Your site has %d inactive themes.', + $themes_inactive + ), + $themes_inactive + ), + sprintf( + /* translators: 1: The default theme for WordPress. 2: The currently active theme. 3: The active theme's parent theme. */ + __( 'To enhance your site’s security, we recommend you remove any themes you’re not using. You should keep %1$s, the default WordPress theme, %2$s, your current theme, and %3$s, its parent theme.' ), + WP_DEFAULT_THEME, + $active_theme->name, + $active_theme->parent()->name + ) + ); + } + } else { + // Recommend removing all inactive themes. + $result['status'] = 'recommended'; + + $result['label'] = __( 'You should remove inactive themes' ); + + if ( $using_default_theme ) { + $result['description'] .= sprintf( + '<p>%s %s</p>', + sprintf( + /* translators: 1: The amount of inactive themes. 2: The currently active theme. */ + _n( + 'Your site has %1$d inactive theme, other than %2$s, your active theme.', + 'Your site has %1$d inactive themes, other than %2$s, your active theme.', + $themes_inactive + ), + $themes_inactive, + $active_theme->name + ), + __( 'We recommend removing any unused themes to enhance your site’s security.' ) + ); + } else { + $result['description'] .= sprintf( + '<p>%s %s</p>', + sprintf( + /* translators: 1: The amount of inactive themes. 2: The default theme for WordPress. 3: The currently active theme. */ + _n( + 'Your site has %1$d inactive theme, other than %2$s, the default WordPress theme, and %3$s, your active theme.', + 'Your site has %1$d inactive themes, other than %2$s, the default WordPress theme, and %3$s, your active theme.', + $themes_inactive + ), + $themes_inactive, + WP_DEFAULT_THEME, + $active_theme->name + ), + __( 'We recommend removing any unused themes to enhance your site’s security.' ) + ); + } + } + } + + // If not default Twenty* theme exists. + if ( ! $has_default_theme ) { + $result['status'] = 'recommended'; + + $result['label'] = __( 'Have a default theme available' ); + + $result['description'] .= sprintf( + '<p>%s</p>', + __( 'Your site does not have any default theme. Default themes are used by WordPress automatically if anything is wrong with your normal theme.' ) + ); + } + + return $result; + } + + /** + * Test if the supplied PHP version is supported. + * + * @since 5.2.0 + * + * @return array The test results. + */ + public function get_test_php_version() { + $response = wp_check_php_version(); + + $result = array( + 'label' => sprintf( + // translators: %s: The current PHP version. + __( 'PHP is up to date (%s)' ), + PHP_VERSION + ), + 'status' => 'good', + 'badge' => array( + 'label' => __( 'Performance' ), + 'color' => 'blue', + ), + 'description' => sprintf( + '<p>%s</p>', + __( 'PHP is the programming language we use to build and maintain WordPress. Newer versions of PHP are both faster and more secure, so updating will have a positive effect on your site’s performance.' ) + ), + 'actions' => sprintf( + '<p><a href="%s" target="_blank" rel="noopener noreferrer">%s <span class="screen-reader-text">%s</span><span aria-hidden="true" class="dashicons dashicons-external"></span></a></p>', + esc_url( wp_get_update_php_url() ), + __( 'Learn more about updating PHP' ), + /* translators: accessibility text */ + __( '(opens in a new tab)' ) + ), + 'test' => 'php_version', + ); + + // PHP is up to date. + if ( ! $response || version_compare( PHP_VERSION, $response['recommended_version'], '>=' ) ) { + return $result; + } + + // The PHP version is older than the recommended version, but still acceptable. + if ( $response['is_supported'] ) { + $result['label'] = __( 'We recommend that you update PHP' ); + $result['status'] = 'recommended'; + + return $result; + } + + // The PHP version is only receiving security fixes. + if ( $response['is_secure'] ) { + $result['label'] = __( 'Your PHP version should be updated' ); + $result['status'] = 'recommended'; + + return $result; + } + + // Anything no longer secure must be updated. + $result['label'] = __( 'Your PHP version requires an update' ); + $result['status'] = 'critical'; + $result['badge']['label'] = __( 'Security' ); + + return $result; + } + + /** + * Check if the passed extension or function are available. + * + * Make the check for available PHP modules into a simple boolean operator for a cleaner test runner. + * + * @since 5.2.0 + * + * @param string $extension Optional. The extension name to test. Default null. + * @param string $function Optional. The function name to test. Default null. + * + * @return bool Whether or not the extension and function are available. + */ + private function test_php_extension_availability( $extension = null, $function = null ) { + // If no extension or function is passed, claim to fail testing, as we have nothing to test against. + if ( ! $extension && ! $function ) { + return false; + } + + if ( $extension && ! extension_loaded( $extension ) ) { + return false; + } + if ( $function && ! function_exists( $function ) ) { + return false; + } + + return true; + } + + /** + * Test if required PHP modules are installed on the host. + * + * This test builds on the recommendations made by the WordPress Hosting Team + * as seen at https://make.wordpress.org/hosting/handbook/handbook/server-environment/#php-extensions + * + * @since 5.2.0 + * + * @return array + */ + public function get_test_php_extensions() { + $result = array( + 'label' => __( 'Required and recommended modules are installed' ), + 'status' => 'good', + 'badge' => array( + 'label' => __( 'Performance' ), + 'color' => 'blue', + ), + 'description' => sprintf( + '<p>%s</p><p>%s</p>', + __( 'PHP modules perform most of the tasks on the server that make your site run. Any changes to these must be made by your server administrator.' ), + sprintf( + /* translators: 1: Link to the hosting group page about recommended PHP modules. 2: Additional link attributes. 3: Accessibility text. */ + __( 'The WordPress Hosting Team maintains a list of those modules, both recommended and required, in <a href="%1$s" %2$s>the team handbook%3$s</a>.' ), + /* translators: Localized team handbook, if one exists. */ + esc_url( __( 'https://make.wordpress.org/hosting/handbook/handbook/server-environment/#php-extensions' ) ), + 'target="_blank" rel="noopener noreferrer"', + sprintf( + ' <span class="screen-reader-text">%s</span><span aria-hidden="true" class="dashicons dashicons-external"></span>', + /* translators: accessibility text */ + __( '(opens in a new tab)' ) + ) + ) + ), + 'actions' => '', + 'test' => 'php_extensions', + ); + + $modules = array( + 'bcmath' => array( + 'function' => 'bcadd', + 'required' => false, + ), + 'curl' => array( + 'function' => 'curl_version', + 'required' => false, + ), + 'exif' => array( + 'function' => 'exif_read_data', + 'required' => false, + ), + 'filter' => array( + 'function' => 'filter_list', + 'required' => false, + ), + 'fileinfo' => array( + 'function' => 'finfo_file', + 'required' => false, + ), + 'mod_xml' => array( + 'extension' => 'libxml', + 'required' => false, + ), + 'mysqli' => array( + 'function' => 'mysqli_connect', + 'required' => false, + ), + 'libsodium' => array( + 'function' => 'sodium_compare', + 'required' => false, + 'php_bundled_version' => '7.2.0', + ), + 'openssl' => array( + 'function' => 'openssl_encrypt', + 'required' => false, + ), + 'pcre' => array( + 'function' => 'preg_match', + 'required' => false, + ), + 'imagick' => array( + 'extension' => 'imagick', + 'required' => false, + ), + 'gd' => array( + 'extension' => 'gd', + 'required' => false, + 'fallback_for' => 'imagick', + ), + 'mcrypt' => array( + 'extension' => 'mcrypt', + 'required' => false, + 'fallback_for' => 'libsodium', + ), + 'xmlreader' => array( + 'extension' => 'xmlreader', + 'required' => false, + 'fallback_for' => 'xml', + ), + 'zlib' => array( + 'extension' => 'zlib', + 'required' => false, + 'fallback_for' => 'zip', + ), + ); + + /** + * An array representing all the modules we wish to test for. + * + * @since 5.2.0 + * + * @param array $modules { + * An associated array of modules to test for. + * + * array $module { + * An associated array of module properties used during testing. + * One of either `$function` or `$extension` must be provided, or they will fail by default. + * + * string $function Optional. A function name to test for the existence of. + * string $extension Optional. An extension to check if is loaded in PHP. + * bool $required Is this a required feature or not. + * string $fallback_for Optional. The module this module replaces as a fallback. + * } + * } + */ + $modules = apply_filters( 'site_status_test_php_modules', $modules ); + + $failures = array(); + + foreach ( $modules as $library => $module ) { + $extension = ( isset( $module['extension'] ) ? $module['extension'] : null ); + $function = ( isset( $module['function'] ) ? $module['function'] : null ); + + // If this module is a fallback for another function, check if that other function passed. + if ( isset( $module['fallback_for'] ) ) { + /* + * If that other function has a failure, mark this module as required for normal operations. + * If that other function hasn't failed, skip this test as it's only a fallback. + */ + if ( isset( $failures[ $module['fallback_for'] ] ) ) { + $module['required'] = true; + } else { + continue; + } + } + + if ( ! $this->test_php_extension_availability( $extension, $function ) && ( ! isset( $module['php_bundled_version'] ) || version_compare( PHP_VERSION, $module['php_bundled_version'], '<' ) ) ) { + if ( $module['required'] ) { + $result['status'] = 'critical'; + + $class = 'error'; + $screen_reader = __( 'Error' ); + $message = sprintf( + /* translators: %s: The module name. */ + __( 'The required module, %s, is not installed, or has been disabled.' ), + $library + ); + } else { + $class = 'warning'; + $screen_reader = __( 'Warning' ); + $message = sprintf( + /* translators: %s: The module name. */ + __( 'The optional module, %s, is not installed, or has been disabled.' ), + $library + ); + } + + if ( ! $module['required'] && 'good' === $result['status'] ) { + $result['status'] = 'recommended'; + } + + $failures[ $library ] = "<span class='dashicons $class'><span class='screen-reader-text'>$screen_reader</span></span> $message"; + } + } + + if ( ! empty( $failures ) ) { + $output = '<ul>'; + + foreach ( $failures as $failure ) { + $output .= sprintf( + '<li>%s</li>', + $failure + ); + } + + $output .= '</ul>'; + } + + if ( 'good' !== $result['status'] ) { + if ( 'recommended' === $result['status'] ) { + $result['label'] = __( 'One or more recommended modules are missing' ); + } + if ( 'critical' === $result['status'] ) { + $result['label'] = __( 'One or more required modules are missing' ); + } + + $result['description'] .= sprintf( + '<p>%s</p>', + $output + ); + } + + return $result; + } + + /** + * Test if the SQL server is up to date. + * + * @since 5.2.0 + * + * @return array The test results. + */ + public function get_test_sql_server() { + $result = array( + 'label' => __( 'SQL server is up to date' ), + 'status' => 'good', + 'badge' => array( + 'label' => __( 'Performance' ), + 'color' => 'blue', + ), + 'description' => sprintf( + '<p>%s</p>', + __( 'The SQL server is a required piece of software for the database WordPress uses to store all your site’s content and settings.' ) + ), + 'actions' => sprintf( + '<p><a href="%s" target="_blank" rel="noopener noreferrer">%s <span class="screen-reader-text">%s</span><span aria-hidden="true" class="dashicons dashicons-external"></span></a></p>', + /* translators: Localized version of WordPress requirements if one exists. */ + esc_url( __( 'https://wordpress.org/about/requirements/' ) ), + __( 'Read more about what WordPress requires to run.' ), + /* translators: accessibility text */ + __( '(opens in a new tab)' ) + ), + 'test' => 'sql_server', + ); + + $db_dropin = file_exists( WP_CONTENT_DIR . '/db.php' ); + + if ( ! $this->mysql_rec_version_check ) { + $result['status'] = 'recommended'; + + $result['label'] = __( 'Outdated SQL server' ); + + $result['description'] .= sprintf( + '<p>%s</p>', + sprintf( + /* translators: 1: The database engine in use (MySQL or MariaDB). 2: Database server recommended version number. */ + __( 'For optimal performance and security reasons, we recommend running %1$s version %2$s or higher. Contact your web hosting company to correct this.' ), + ( $this->is_mariadb ? 'MariaDB' : 'MySQL' ), + $this->health_check_mysql_rec_version + ) + ); + } + + if ( ! $this->mysql_min_version_check ) { + $result['status'] = 'critical'; + + $result['label'] = __( 'Severely outdated SQL server' ); + $result['badge']['label'] = __( 'Security' ); + + $result['description'] .= sprintf( + '<p>%s</p>', + sprintf( + /* translators: 1: The database engine in use (MySQL or MariaDB). 2: Database server minimum version number. */ + __( 'WordPress requires %1$s version %2$s or higher. Contact your web hosting company to correct this.' ), + ( $this->is_mariadb ? 'MariaDB' : 'MySQL' ), + $this->health_check_mysql_required_version + ) + ); + } + + if ( $db_dropin ) { + $result['description'] .= sprintf( + '<p>%s</p>', + wp_kses( + sprintf( + /* translators: 1: The name of the drop-in. 2: The name of the database engine. */ + __( 'You are using a %1$s drop-in which might mean that a %2$s database is not being used.' ), + '<code>wp-content/db.php</code>', + ( $this->is_mariadb ? 'MariaDB' : 'MySQL' ) + ), + array( + 'code' => true, + ) + ) + ); + } + + return $result; + } + + /** + * Test if the database server is capable of using utf8mb4. + * + * @since 5.2.0 + * + * @return array The test results. + */ + public function get_test_utf8mb4_support() { + global $wpdb; + + $result = array( + 'label' => __( 'UTF8MB4 is supported' ), + 'status' => 'good', + 'badge' => array( + 'label' => __( 'Performance' ), + 'color' => 'blue', + ), + 'description' => sprintf( + '<p>%s</p>', + __( 'UTF8MB4 is a database storage attribute that makes sure your site can store non-English text and other strings (for instance emoticons) without unexpected problems.' ) + ), + 'actions' => '', + 'test' => 'utf8mb4_support', + ); + + if ( ! $this->is_mariadb ) { + if ( version_compare( $this->mysql_server_version, '5.5.3', '<' ) ) { + $result['status'] = 'recommended'; + + $result['label'] = __( 'utf8mb4 requires a MySQL update' ); + + $result['description'] .= sprintf( + '<p>%s</p>', + sprintf( + /* translators: %s: Version number. */ + __( 'WordPress’ utf8mb4 support requires MySQL version %s or greater. Please contact your server administrator.' ), + '5.5.3' + ) + ); + } else { + $result['description'] .= sprintf( + '<p>%s</p>', + __( 'Your MySQL version supports utf8mb4.' ) + ); + } + } else { // MariaDB introduced utf8mb4 support in 5.5.0 + if ( version_compare( $this->mysql_server_version, '5.5.0', '<' ) ) { + $result['status'] = 'recommended'; + + $result['label'] = __( 'utf8mb4 requires a MariaDB update' ); + + $result['description'] .= sprintf( + '<p>%s</p>', + sprintf( + /* translators: %s: Version number. */ + __( 'WordPress’ utf8mb4 support requires MariaDB version %s or greater. Please contact your server administrator.' ), + '5.5.0' + ) + ); + } else { + $result['description'] .= sprintf( + '<p>%s</p>', + __( 'Your MariaDB version supports utf8mb4.' ) + ); + } + } + + if ( $wpdb->use_mysqli ) { + // phpcs:ignore WordPress.DB.RestrictedFunctions.mysql_mysqli_get_client_info + $mysql_client_version = mysqli_get_client_info(); + } else { + // phpcs:ignore WordPress.DB.RestrictedFunctions.mysql_mysql_get_client_info + $mysql_client_version = mysql_get_client_info(); + } + + /* + * libmysql has supported utf8mb4 since 5.5.3, same as the MySQL server. + * mysqlnd has supported utf8mb4 since 5.0.9. + */ + if ( false !== strpos( $mysql_client_version, 'mysqlnd' ) ) { + $mysql_client_version = preg_replace( '/^\D+([\d.]+).*/', '$1', $mysql_client_version ); + if ( version_compare( $mysql_client_version, '5.0.9', '<' ) ) { + $result['status'] = 'recommended'; + + $result['label'] = __( 'utf8mb4 requires a newer client library' ); + + $result['description'] .= sprintf( + '<p>%s</p>', + sprintf( + /* translators: 1: Name of the library, 2: Number of version. */ + __( 'WordPress’ utf8mb4 support requires MySQL client library (%1$s) version %2$s or newer. Please contact your server administrator.' ), + 'mysqlnd', + '5.0.9' + ) + ); + } + } else { + if ( version_compare( $mysql_client_version, '5.5.3', '<' ) ) { + $result['status'] = 'recommended'; + + $result['label'] = __( 'utf8mb4 requires a newer client library' ); + + $result['description'] .= sprintf( + '<p>%s</p>', + sprintf( + /* translators: 1: Name of the library, 2: Number of version. */ + __( 'WordPress’ utf8mb4 support requires MySQL client library (%1$s) version %2$s or newer. Please contact your server administrator.' ), + 'libmysql', + '5.5.3' + ) + ); + } + } + + return $result; + } + + /** + * Test if the site can communicate with WordPress.org. + * + * @since 5.2.0 + * + * @return array The test results. + */ + public function get_test_dotorg_communication() { + $result = array( + 'label' => __( 'Can communicate with WordPress.org' ), + 'status' => '', + 'badge' => array( + 'label' => __( 'Security' ), + 'color' => 'blue', + ), + 'description' => sprintf( + '<p>%s</p>', + __( 'Communicating with the WordPress servers is used to check for new versions, and to both install and update WordPress core, themes or plugins.' ) + ), + 'actions' => '', + 'test' => 'dotorg_communication', + ); + + $wp_dotorg = wp_remote_get( + 'https://api.wordpress.org', + array( + 'timeout' => 10, + ) + ); + if ( ! is_wp_error( $wp_dotorg ) ) { + $result['status'] = 'good'; + } else { + $result['status'] = 'critical'; + + $result['label'] = __( 'Could not reach WordPress.org' ); + + $result['description'] .= sprintf( + '<p>%s</p>', + sprintf( + '<span class="error"><span class="screen-reader-text">%s</span></span> %s', + __( 'Error' ), + sprintf( + /* translators: 1: The IP address WordPress.org resolves to. 2: The error returned by the lookup. */ + __( 'Your site is unable to reach WordPress.org at %1$s, and returned the error: %2$s' ), + gethostbyname( 'api.wordpress.org' ), + $wp_dotorg->get_error_message() + ) + ) + ); + + $result['actions'] = sprintf( + '<p><a href="%s" target="_blank" rel="noopener noreferrer">%s <span class="screen-reader-text">%s</span><span aria-hidden="true" class="dashicons dashicons-external"></span></a></p>', + /* translators: Localized Support reference. */ + esc_url( __( 'https://wordpress.org/support' ) ), + __( 'Get help resolving this issue.' ), + /* translators: accessibility text */ + __( '(opens in a new tab)' ) + ); + } + + return $result; + } + + /** + * Test if debug information is enabled. + * + * When WP_DEBUG is enabled, errors and information may be disclosed to site visitors, or it may be + * logged to a publicly accessible file. + * + * Debugging is also frequently left enabled after looking for errors on a site, as site owners do + * not understand the implications of this. + * + * @since 5.2.0 + * + * @return array The test results. + */ + public function get_test_is_in_debug_mode() { + $result = array( + 'label' => __( 'Your site is not set to output debug information' ), + 'status' => 'good', + 'badge' => array( + 'label' => __( 'Security' ), + 'color' => 'blue', + ), + 'description' => sprintf( + '<p>%s</p>', + __( 'Debug mode is often enabled to gather more details about an error or site failure, but may contain sensitive information which should not be available on a publicly available website.' ) + ), + 'actions' => sprintf( + '<p><a href="%s" target="_blank" rel="noopener noreferrer">%s <span class="screen-reader-text">%s</span><span aria-hidden="true" class="dashicons dashicons-external"></span></a></p>', + /* translators: Documentation explaining debugging in WordPress. */ + esc_url( __( 'https://wordpress.org/support/article/debugging-in-wordpress/' ) ), + __( 'Read about debugging in WordPress.' ), + /* translators: accessibility text */ + __( '(opens in a new tab)' ) + ), + 'test' => 'is_in_debug_mode', + ); + + if ( defined( 'WP_DEBUG' ) && WP_DEBUG ) { + if ( defined( 'WP_DEBUG_LOG' ) && WP_DEBUG_LOG ) { + $result['label'] = __( 'Your site is set to log errors to a potentially public file.' ); + + $result['status'] = 'critical'; + + $result['description'] .= sprintf( + '<p>%s</p>', + sprintf( + /* translators: %s: WP_DEBUG_LOG */ + __( 'The value, %s, has been added to this website’s configuration file. This means any errors on the site will be written to a file which is potentially available to normal users.' ), + '<code>WP_DEBUG_LOG</code>' + ) + ); + } + + if ( defined( 'WP_DEBUG_DISPLAY' ) && WP_DEBUG_DISPLAY ) { + $result['label'] = __( 'Your site is set to display errors to site visitors' ); + + $result['status'] = 'critical'; + + $result['description'] .= sprintf( + '<p>%s</p>', + sprintf( + /* translators: 1: WP_DEBUG_DISPLAY, 2: WP_DEBUG */ + __( 'The value, %1$s, has either been enabled by %2$s or added to your configuration file. This will make errors display on the front end of your site.' ), + '<code>WP_DEBUG_DISPLAY</code>', + '<code>WP_DEBUG</code>' + ) + ); + } + } + + return $result; + } + + /** + * Test if your site is serving content over HTTPS. + * + * Many sites have varying degrees of HTTPS support, the most common of which is sites that have it + * enabled, but only if you visit the right site address. + * + * @since 5.2.0 + * + * @return array The test results. + */ + public function get_test_https_status() { + $result = array( + 'label' => __( 'Your website is using an active HTTPS connection.' ), + 'status' => 'good', + 'badge' => array( + 'label' => __( 'Security' ), + 'color' => 'blue', + ), + 'description' => sprintf( + '<p>%s</p>', + __( 'An HTTPS connection is needed for many features on the web today, it also gains the trust of your visitors by helping to protecting their online privacy.' ) + ), + 'actions' => sprintf( + '<p><a href="%s" target="_blank" rel="noopener noreferrer">%s <span class="screen-reader-text">%s</span><span aria-hidden="true" class="dashicons dashicons-external"></span></a></p>', + /* translators: Documentation explaining HTTPS and why it should be used. */ + esc_url( __( 'https://wordpress.org/support/article/why-should-i-use-https/' ) ), + __( 'Read more about why you should use HTTPS' ), + /* translators: accessibility text */ + __( '(opens in a new tab)' ) + ), + 'test' => 'https_status', + ); + + if ( is_ssl() ) { + $wp_url = get_bloginfo( 'wpurl' ); + $site_url = get_bloginfo( 'url' ); + + if ( 'https' !== substr( $wp_url, 0, 5 ) || 'https' !== substr( $site_url, 0, 5 ) ) { + $result['status'] = 'recommended'; + + $result['label'] = __( 'Only parts of your site are using HTTPS' ); + + $result['description'] = sprintf( + '<p>%s</p>', + sprintf( + /* translators: %s: URL to Settings > General to change options. */ + __( 'You are accessing this website using HTTPS, but your <a href="%s">WordPress Address</a> is not set up to use HTTPS by default.' ), + esc_url( admin_url( 'options-general.php' ) ) + ) + ); + + $result['actions'] .= sprintf( + '<p><a href="%s">%s</a></p>', + esc_url( admin_url( 'options-general.php' ) ), + __( 'Update your site addresses' ) + ); + } + } else { + $result['status'] = 'recommended'; + + $result['label'] = __( 'Your site does not use HTTPS' ); + } + + return $result; + } + + /** + * Check if the HTTP API can handle SSL/TLS requests. + * + * @since 5.2.0 + * + * @return array The test results. + */ + public function get_test_ssl_support() { + $result = array( + 'label' => '', + 'status' => '', + 'badge' => array( + 'label' => __( 'Security' ), + 'color' => 'blue', + ), + 'description' => sprintf( + '<p>%s</p>', + __( 'Securely communicating between servers are needed for transactions such as fetching files, conducting sales on store sites, and much more.' ) + ), + 'actions' => '', + 'test' => 'ssl_support', + ); + + $supports_https = wp_http_supports( array( 'ssl' ) ); + + if ( $supports_https ) { + $result['status'] = 'good'; + + $result['label'] = __( 'Your site can communicate securely with other services' ); + } else { + $result['status'] = 'critical'; + + $result['label'] = __( 'Your site is unable to communicate securely with other services' ); + + $result['description'] .= sprintf( + '<p>%s</p>', + __( 'Talk to your web host about OpenSSL support for PHP.' ) + ); + } + + return $result; + } + + /** + * Test if scheduled events run as intended. + * + * If scheduled events are not running, this may indicate something with WP_Cron is not working as intended, + * or that there are orphaned events hanging around from older code. + * + * @since 5.2.0 + * + * @return array The test results. + */ + public function get_test_scheduled_events() { + $result = array( + 'label' => __( 'Scheduled events are running' ), + 'status' => 'good', + 'badge' => array( + 'label' => __( 'Performance' ), + 'color' => 'blue', + ), + 'description' => sprintf( + '<p>%s</p>', + __( 'Scheduled events are what periodically looks for updates to plugins, themes and WordPress itself. It is also what makes sure scheduled posts are published on time. It may also be used by various plugins to make sure that planned actions are executed.' ) + ), + 'actions' => '', + 'test' => 'scheduled_events', + ); + + $this->wp_schedule_test_init(); + + if ( is_wp_error( $this->has_missed_cron() ) ) { + $result['status'] = 'critical'; + + $result['label'] = __( 'It was not possible to check your scheduled events' ); + + $result['description'] = sprintf( + '<p>%s</p>', + sprintf( + /* translators: %s: The error message returned while from the cron scheduler. */ + __( 'While trying to test your site’s scheduled events, the following error was returned: %s' ), + $this->has_missed_cron()->get_error_message() + ) + ); + } else { + if ( $this->has_missed_cron() ) { + $result['status'] = 'recommended'; + + $result['label'] = __( 'A scheduled event has failed' ); + + $result['description'] = sprintf( + '<p>%s</p>', + sprintf( + /* translators: %s: The name of the failed cron event. */ + __( 'The scheduled event, %s, failed to run. Your site still works, but this may indicate that scheduling posts or automated updates may not work as intended.' ), + $this->last_missed_cron + ) + ); + } + } + + return $result; + } + + /** + * Test if WordPress can run automated background updates. + * + * Background updates in WordPress are primarily used for minor releases and security updates. It's important + * to either have these working, or be aware that they are intentionally disabled for whatever reason. + * + * @since 5.2.0 + * + * @return array The test results. + */ + public function get_test_background_updates() { + $result = array( + 'label' => __( 'Background updates are working' ), + 'status' => 'good', + 'badge' => array( + 'label' => __( 'Security' ), + 'color' => 'blue', + ), + 'description' => sprintf( + '<p>%s</p>', + __( 'Background updates ensure that WordPress can auto-update if a security update is released for the version you are currently using.' ) + ), + 'actions' => '', + 'test' => 'background_updates', + ); + + if ( ! class_exists( 'WP_Site_Health_Auto_Updates' ) ) { + require_once( ABSPATH . 'wp-admin/includes/class-wp-site-health-auto-updates.php' ); + } + + // Run the auto-update tests in a separate class, + // as there are many considerations to be made. + $automatic_updates = new WP_Site_Health_Auto_Updates(); + $tests = $automatic_updates->run_tests(); + + $output = '<ul>'; + + foreach ( $tests as $test ) { + $severity_string = __( 'Passed' ); + + if ( 'fail' === $test->severity ) { + $result['label'] = __( 'Background updates are not working as expected' ); + + $result['status'] = 'critical'; + + $severity_string = __( 'Error' ); + } + + if ( 'warning' === $test->severity && 'good' === $result['status'] ) { + $result['label'] = __( 'Background updates may not be working properly' ); + + $result['status'] = 'recommended'; + + $severity_string = __( 'Warning' ); + } + + $output .= sprintf( + '<li><span class="dashicons %s"><span class="screen-reader-text">%s</span></span> %s</li>', + esc_attr( $test->severity ), + $severity_string, + $test->description + ); + } + + $output .= '</ul>'; + + if ( 'good' !== $result['status'] ) { + $result['description'] .= sprintf( + '<p>%s</p>', + $output + ); + } + + return $result; + } + + /** + * Test if loopbacks work as expected. + * + * A loopback is when WordPress queries itself, for example to start a new WP_Cron instance, or when editing a + * plugin or theme. This has shown itself to be a recurring issue as code can very easily break this interaction. + * + * @since 5.2.0 + * + * @return array The test results. + */ + public function get_test_loopback_requests() { + $result = array( + 'label' => __( 'Your site can perform loopback requests' ), + 'status' => 'good', + 'badge' => array( + 'label' => __( 'Performance' ), + 'color' => 'blue', + ), + 'description' => sprintf( + '<p>%s</p>', + __( 'Loopback requests are used to run scheduled events, and are also used by the built-in editors for themes and plugins to verify code stability.' ) + ), + 'actions' => '', + 'test' => 'loopback_requests', + ); + + $check_loopback = $this->can_perform_loopback(); + + $result['status'] = $check_loopback->status; + + if ( 'good' !== $check_loopback->status ) { + $result['label'] = __( 'Your site could not complete a loopback request' ); + + $result['description'] .= sprintf( + '<p>%s</p>', + $check_loopback->message + ); + } + + return $result; + } + + /** + * Test if HTTP requests are blocked. + * + * It's possible to block all outgoing communication (with the possibility of whitelisting hosts) via the + * HTTP API. This may create problems for users as many features are running as services these days. + * + * @since 5.2.0 + * + * @return array The test results. + */ + public function get_test_http_requests() { + $result = array( + 'label' => __( 'HTTP requests seem to be working as expected' ), + 'status' => 'good', + 'badge' => array( + 'label' => __( 'Performance' ), + 'color' => 'blue', + ), + 'description' => sprintf( + '<p>%s</p>', + __( 'It is possible for site maintainers to block all, or some, communication to other sites and services. If set up incorrectly, this may prevent plugins and themes from working as intended.' ) + ), + 'actions' => '', + 'test' => 'http_requests', + ); + + $blocked = false; + $hosts = array(); + + if ( defined( 'WP_HTTP_BLOCK_EXTERNAL' ) && WP_HTTP_BLOCK_EXTERNAL ) { + $blocked = true; + } + + if ( defined( 'WP_ACCESSIBLE_HOSTS' ) ) { + $hosts = explode( ',', WP_ACCESSIBLE_HOSTS ); + } + + if ( $blocked && 0 === sizeof( $hosts ) ) { + $result['status'] = 'critical'; + + $result['label'] = __( 'HTTP requests are blocked' ); + + $result['description'] .= sprintf( + '<p>%s</p>', + sprintf( + /* translators: %s: Name of the constant used. */ + __( 'HTTP requests have been blocked by the %s constant, with no allowed hosts.' ), + '<code>WP_HTTP_BLOCK_EXTERNAL</code>' + ) + ); + } + + if ( $blocked && 0 < sizeof( $hosts ) ) { + $result['status'] = 'recommended'; + + $result['label'] = __( 'HTTP requests are partially blocked' ); + + $result['description'] .= sprintf( + '<p>%s</p>', + sprintf( + /* translators: 1: Name of the constant used. 2: List of hostnames whitelisted. */ + __( 'HTTP requests have been blocked by the %1$s constant, with some hosts whitelisted: %2$s.' ), + '<code>WP_HTTP_BLOCK_EXTERNAL</code>', + implode( ',', $hosts ) + ) + ); + } + + return $result; + } + + /** + * Test if the REST API is accessible. + * + * Various security measures may block the REST API from working, or it may have been disabled in general. + * This is required for the new block editor to work, so we explicitly test for this. + * + * @since 5.2.0 + * + * @return array The test results. + */ + public function get_test_rest_availability() { + $result = array( + 'label' => __( 'The REST API is available' ), + 'status' => 'good', + 'badge' => array( + 'label' => __( 'Performance' ), + 'color' => 'blue', + ), + 'description' => sprintf( + '<p>%s</p>', + __( 'The REST API is one way WordPress, and other applications, communicate with the server. One example is the block editor screen, which relies on this to display, and save, your posts and pages.' ) + ), + 'actions' => '', + 'test' => 'rest_availability', + ); + + $cookies = wp_unslash( $_COOKIE ); + $timeout = 10; + $headers = array( + 'Cache-Control' => 'no-cache', + 'X-WP-Nonce' => wp_create_nonce( 'wp_rest' ), + ); + + // Include Basic auth in loopback requests. + if ( isset( $_SERVER['PHP_AUTH_USER'] ) && isset( $_SERVER['PHP_AUTH_PW'] ) ) { + $headers['Authorization'] = 'Basic ' . base64_encode( wp_unslash( $_SERVER['PHP_AUTH_USER'] ) . ':' . wp_unslash( $_SERVER['PHP_AUTH_PW'] ) ); + } + + $url = rest_url( 'wp/v2/types/post' ); + + // The context for this is editing with the new block editor. + $url = add_query_arg( + array( + 'context' => 'edit', + ), + $url + ); + + $r = wp_remote_get( $url, compact( 'cookies', 'headers', 'timeout' ) ); + + if ( is_wp_error( $r ) ) { + $result['status'] = 'critical'; + + $result['label'] = __( 'The REST API encountered an error' ); + + $result['description'] .= sprintf( + '<p>%s</p>', + sprintf( + '%s<br>%s', + __( 'The REST API request failed due to an error.' ), + sprintf( + /* translators: 1: The HTTP response code. 2: The error message returned. */ + __( 'Error: [%1$s] %2$s' ), + wp_remote_retrieve_response_code( $r ), + $r->get_error_message() + ) + ) + ); + } elseif ( 200 !== wp_remote_retrieve_response_code( $r ) ) { + $result['status'] = 'recommended'; + + $result['label'] = __( 'The REST API encountered an unexpected result' ); + + $result['description'] .= sprintf( + '<p>%s</p>', + sprintf( + /* translators: 1: The HTTP response code returned. 2: The error message returned. */ + __( 'The REST API call gave the following unexpected result: (%1$d) %2$s.' ), + wp_remote_retrieve_response_code( $r ), + wp_remote_retrieve_body( $r ) + ) + ); + } else { + $json = json_decode( wp_remote_retrieve_body( $r ), true ); + + if ( false !== $json && ! isset( $json['capabilities'] ) ) { + $result['status'] = 'recommended'; + + $result['label'] = __( 'The REST API did not behave correctly' ); + + $result['description'] .= sprintf( + '<p>%s</p>', + sprintf( + /* translators: %s: the name of the query parameter being tested. */ + __( 'The REST API did not process the %s query parameter correctly.' ), + '<code>context</code>' + ) + ); + } + } + + return $result; + } + + /** + * Return a set of tests that belong to the site status page. + * + * Each site status test is defined here, they may be `direct` tests, that run on page load, or `async` tests + * which will run later down the line via JavaScript calls to improve page performance and hopefully also user + * experiences. + * + * @since 5.2.0 + * + * @return array The list of tests to run. + */ + public static function get_tests() { + $tests = array( + 'direct' => array( + 'wordpress_version' => array( + 'label' => __( 'WordPress Version' ), + 'test' => 'wordpress_version', + ), + 'plugin_version' => array( + 'label' => __( 'Plugin Versions' ), + 'test' => 'plugin_version', + ), + 'theme_version' => array( + 'label' => __( 'Theme Versions' ), + 'test' => 'theme_version', + ), + 'php_version' => array( + 'label' => __( 'PHP Version' ), + 'test' => 'php_version', + ), + 'sql_server' => array( + 'label' => __( 'Database Server version' ), + 'test' => 'sql_server', + ), + 'php_extensions' => array( + 'label' => __( 'PHP Extensions' ), + 'test' => 'php_extensions', + ), + 'utf8mb4_support' => array( + 'label' => __( 'MySQL utf8mb4 support' ), + 'test' => 'utf8mb4_support', + ), + 'https_status' => array( + 'label' => __( 'HTTPS status' ), + 'test' => 'https_status', + ), + 'ssl_support' => array( + 'label' => __( 'Secure communication' ), + 'test' => 'ssl_support', + ), + 'scheduled_events' => array( + 'label' => __( 'Scheduled events' ), + 'test' => 'scheduled_events', + ), + 'http_requests' => array( + 'label' => __( 'HTTP Requests' ), + 'test' => 'http_requests', + ), + 'debug_enabled' => array( + 'label' => __( 'Debugging enabled' ), + 'test' => 'is_in_debug_mode', + ), + ), + 'async' => array( + 'dotorg_communication' => array( + 'label' => __( 'Communication with WordPress.org' ), + 'test' => 'dotorg_communication', + ), + 'background_updates' => array( + 'label' => __( 'Background updates' ), + 'test' => 'background_updates', + ), + 'loopback_requests' => array( + 'label' => __( 'Loopback request' ), + 'test' => 'loopback_requests', + ), + ), + ); + + // Conditionally include REST rules if the function for it exists. + if ( function_exists( 'rest_url' ) ) { + $tests['direct']['rest_availability'] = array( + 'label' => __( 'REST API availability' ), + 'test' => 'rest_availability', + ); + } + + /** + * Add or modify which site status tests are run on a site. + * + * The site health is determined by a set of tests based on best practices from + * both the WordPress Hosting Team, but also web standards in general. + * + * Some sites may not have the same requirements, for example the automatic update + * checks may be handled by a host, and are therefore disabled in core. + * Or maybe you want to introduce a new test, is caching enabled/disabled/stale for example. + * + * Tests may be added either as direct, or asynchronous ones. Any test that may require some time + * to complete should run asynchronously, to avoid extended loading periods within wp-admin. + * + * @since 5.2.0 + * + * @param array $test_type { + * An associative array, where the `$test_type` is either `direct` or + * `async`, to declare if the test should run via AJAX calls after page load. + * + * @type array $identifier { + * `$identifier` should be a unique identifier for the test that should run. + * Plugins and themes are encouraged to prefix test identifiers with their slug + * to avoid any collisions between tests. + * + * @type string $label A friendly label for your test to identify it by. + * @type mixed $test A callable to perform a direct test, or a string AJAX action to be called + * to perform an async test. + * } + * } + */ + $tests = apply_filters( 'site_status_tests', $tests ); + + return $tests; + } + + /** + * Add a class to the body HTML tag. + * + * Filters the body class string for admin pages and adds our own class for easier styling. + * + * @since 5.2.0 + * + * @param string $body_class The body class string. + * @return string The modified body class string. + */ + public function admin_body_class( $body_class ) { + $body_class .= ' site-health'; + + return $body_class; + } + + /** + * Initiate the WP_Cron schedule test cases. + * + * @since 5.2.0 + */ + private function wp_schedule_test_init() { + $this->schedules = wp_get_schedules(); + $this->get_cron_tasks(); + } + + /** + * Populate our list of cron events and store them to a class-wide variable. + * + * @since 5.2.0 + */ + private function get_cron_tasks() { + $cron_tasks = _get_cron_array(); + + if ( empty( $cron_tasks ) ) { + $this->crons = new WP_Error( 'no_tasks', __( 'No scheduled events exist on this site.' ) ); + return; + } + + $this->crons = array(); + + foreach ( $cron_tasks as $time => $cron ) { + foreach ( $cron as $hook => $dings ) { + foreach ( $dings as $sig => $data ) { + + $this->crons[ "$hook-$sig-$time" ] = (object) array( + 'hook' => $hook, + 'time' => $time, + 'sig' => $sig, + 'args' => $data['args'], + 'schedule' => $data['schedule'], + 'interval' => isset( $data['interval'] ) ? $data['interval'] : null, + ); + + } + } + } + } + + /** + * Check if any scheduled tasks have been missed. + * + * Returns a boolean value of `true` if a scheduled task has been missed and ends processing. If the list of + * crons is an instance of WP_Error, return the instance instead of a boolean value. + * + * @since 5.2.0 + * + * @return bool|WP_Error true if a cron was missed, false if it wasn't. WP_Error if the cron is set to that. + */ + public function has_missed_cron() { + if ( is_wp_error( $this->crons ) ) { + return $this->crons; + } + + foreach ( $this->crons as $id => $cron ) { + if ( ( $cron->time - time() ) < 0 ) { + $this->last_missed_cron = $cron->hook; + return true; + } + } + + return false; + } + + /** + * Run a loopback test on our site. + * + * Loopbacks are what WordPress uses to communicate with itself to start up WP_Cron, scheduled posts, + * make sure plugin or theme edits don't cause site failures and similar. + * + * @since 5.2.0 + * + * @return object The test results. + */ + function can_perform_loopback() { + $cookies = wp_unslash( $_COOKIE ); + $timeout = 10; + $headers = array( + 'Cache-Control' => 'no-cache', + ); + + // Include Basic auth in loopback requests. + if ( isset( $_SERVER['PHP_AUTH_USER'] ) && isset( $_SERVER['PHP_AUTH_PW'] ) ) { + $headers['Authorization'] = 'Basic ' . base64_encode( wp_unslash( $_SERVER['PHP_AUTH_USER'] ) . ':' . wp_unslash( $_SERVER['PHP_AUTH_PW'] ) ); + } + + $url = admin_url(); + + $r = wp_remote_get( $url, compact( 'cookies', 'headers', 'timeout' ) ); + + if ( is_wp_error( $r ) ) { + return (object) array( + 'status' => 'critical', + 'message' => sprintf( + '%s<br>%s', + __( 'The loopback request to your site failed, this means features relying on them are not currently working as expected.' ), + sprintf( + // translators: 1: The HTTP response code. 2: The error message returned. + __( 'Error: [%1$s] %2$s' ), + wp_remote_retrieve_response_code( $r ), + $r->get_error_message() + ) + ), + ); + } + + if ( 200 !== wp_remote_retrieve_response_code( $r ) ) { + return (object) array( + 'status' => 'recommended', + 'message' => sprintf( + // translators: %d: The HTTP response code returned. + __( 'The loopback request returned an unexpected http status code, %d, it was not possible to determine if this will prevent features from working as expected.' ), + wp_remote_retrieve_response_code( $r ) + ), + ); + } + + return (object) array( + 'status' => 'good', + 'message' => __( 'The loopback request to your site completed successfully.' ), + ); + } +} |