408 lines
14 KiB
PHP
408 lines
14 KiB
PHP
<?php
|
|
/**
|
|
* Generic JSON-based updater for ROBOTSTXT plugins.
|
|
*
|
|
* This file is designed to be copied to any ROBOTSTXT plugin.
|
|
* It auto-configures itself by reading the plugin headers.
|
|
*
|
|
* @package ROBOTSTXT
|
|
* @version 1.0.0
|
|
*/
|
|
|
|
if ( ! defined( 'ABSPATH' ) ) {
|
|
exit;
|
|
}
|
|
|
|
// phpcs:disable WordPress.NamingConventions.PrefixAllGlobals.NonPrefixedClassFound -- Shared generic updater library, intentionally unprefixed.
|
|
if ( ! class_exists( 'Robotstxt_Updater' ) ) {
|
|
/**
|
|
* Class Robotstxt_Updater
|
|
*
|
|
* Generic updater that works with any plugin.
|
|
* Reads plugin headers and constructs update URL automatically.
|
|
*/
|
|
class Robotstxt_Updater {
|
|
// phpcs:enable WordPress.NamingConventions.PrefixAllGlobals.NonPrefixedClassFound
|
|
|
|
/**
|
|
* Plugin file path.
|
|
*
|
|
* @var string
|
|
*/
|
|
private string $plugin_file_path;
|
|
|
|
/**
|
|
* Plugin basename (e.g., 'my-plugin/my-plugin.php').
|
|
*
|
|
* @var string
|
|
*/
|
|
private string $plugin_basename;
|
|
|
|
/**
|
|
* Plugin slug (directory name).
|
|
*
|
|
* @var string
|
|
*/
|
|
private string $plugin_slug;
|
|
|
|
/**
|
|
* Remote JSON URL.
|
|
*
|
|
* @var string
|
|
*/
|
|
private string $json_url;
|
|
|
|
/**
|
|
* Cache key.
|
|
*
|
|
* @var string
|
|
*/
|
|
private string $cache_key;
|
|
|
|
/**
|
|
* Plugin headers.
|
|
*
|
|
* @var array<string, bool|string>
|
|
*/
|
|
private array $plugin_data;
|
|
|
|
/**
|
|
* Initialize the updater.
|
|
*
|
|
* Usage in your main plugin file:
|
|
* require_once __DIR__ . '/robotstxt-updater.php';
|
|
* Robotstxt_Updater::init( __FILE__ );
|
|
*
|
|
* @param string $plugin_file_path Absolute path to the main plugin file.
|
|
*/
|
|
public static function init( string $plugin_file_path ): void {
|
|
$instance = new self( $plugin_file_path );
|
|
$instance->register();
|
|
}
|
|
|
|
/**
|
|
* Constructor.
|
|
*
|
|
* @param string $plugin_file_path Absolute path to the main plugin file.
|
|
*/
|
|
private function __construct( string $plugin_file_path ) {
|
|
$this->plugin_file_path = $plugin_file_path;
|
|
$this->plugin_basename = plugin_basename( $plugin_file_path );
|
|
$this->plugin_slug = dirname( $this->plugin_basename );
|
|
$this->plugin_data = $this->get_plugin_data();
|
|
$this->json_url = $this->build_json_url();
|
|
$this->cache_key = 'robotstxt_updater_' . md5( $this->plugin_basename );
|
|
}
|
|
|
|
/**
|
|
* Register WordPress hooks.
|
|
*/
|
|
private function register(): void {
|
|
add_filter( 'pre_set_site_transient_update_plugins', array( $this, 'inject_update_info' ) );
|
|
add_filter( 'plugins_api', array( $this, 'provide_plugin_details' ), 10, 3 );
|
|
add_action( 'admin_init', array( $this, 'handle_cache_clear' ) );
|
|
add_action( 'robotstxt_updater_clear_cache', array( $this, 'clear_cache' ) );
|
|
}
|
|
|
|
/**
|
|
* Get plugin headers.
|
|
*
|
|
* @return array<string, bool|string> Plugin data.
|
|
*/
|
|
private function get_plugin_data(): array {
|
|
if ( ! function_exists( 'get_plugin_data' ) ) {
|
|
require_once ABSPATH . 'wp-admin/includes/plugin.php';
|
|
}
|
|
|
|
return get_plugin_data( $this->plugin_file_path, false, false );
|
|
}
|
|
|
|
/**
|
|
* Build JSON URL from plugin headers.
|
|
*
|
|
* Tries to use "Gitea Plugin URI" header to construct the URL.
|
|
* Falls back to Plugin URI if Gitea URI is not available.
|
|
*
|
|
* @return string JSON URL.
|
|
*/
|
|
private function build_json_url(): string {
|
|
// Try Gitea Plugin URI (format: "OWNER/REPO" or full URL).
|
|
if ( ! empty( $this->plugin_data['Gitea Plugin URI'] ) && is_string( $this->plugin_data['Gitea Plugin URI'] ) ) {
|
|
$gitea_uri = $this->plugin_data['Gitea Plugin URI'];
|
|
|
|
// If it's already a full URL, use it.
|
|
if ( str_starts_with( $gitea_uri, 'http' ) ) {
|
|
// Extract base URL and construct JSON path.
|
|
return rtrim( $gitea_uri, '/' ) . '/raw/branch/main/update.json';
|
|
}
|
|
|
|
// If it's in format "OWNER/REPO", construct full URL.
|
|
if ( preg_match( '#^[^/]+/[^/]+$#', $gitea_uri ) ) {
|
|
return "https://git.robotstxt.es/{$gitea_uri}/raw/branch/main/update.json";
|
|
}
|
|
}
|
|
|
|
// Fallback: try to extract from Plugin URI.
|
|
if ( ! empty( $this->plugin_data['PluginURI'] ) && is_string( $this->plugin_data['PluginURI'] ) ) {
|
|
$plugin_uri = $this->plugin_data['PluginURI'];
|
|
if ( str_contains( $plugin_uri, 'git.robotstxt.es' ) ) {
|
|
return rtrim( $plugin_uri, '/' ) . '/raw/branch/main/update.json';
|
|
}
|
|
}
|
|
|
|
// Last resort: construct from plugin slug.
|
|
return "https://git.robotstxt.es/ROBOTSTXT/{$this->plugin_slug}/raw/branch/main/update.json";
|
|
}
|
|
|
|
/**
|
|
* Inject update info into WP's plugin update transient.
|
|
*
|
|
* @param mixed $transient The update_plugins transient.
|
|
*
|
|
* @return stdClass The modified transient.
|
|
*/
|
|
public function inject_update_info( $transient ): stdClass {
|
|
if ( ! ( $transient instanceof stdClass ) ) {
|
|
$transient = new stdClass();
|
|
}
|
|
|
|
if ( empty( $transient->checked ) || ! is_array( $transient->checked ) ) {
|
|
return $transient;
|
|
}
|
|
|
|
if ( empty( $transient->checked[ $this->plugin_basename ] ) ) {
|
|
return $transient;
|
|
}
|
|
|
|
$current_version_raw = $transient->checked[ $this->plugin_basename ];
|
|
$current_version = is_string( $current_version_raw ) ? $current_version_raw : '';
|
|
$remote = $this->get_remote_data();
|
|
|
|
if ( empty( $remote['version'] ) || empty( $remote['download_url'] ) ) {
|
|
return $transient;
|
|
}
|
|
|
|
if ( ! $this->is_compatible( $remote ) ) {
|
|
return $transient;
|
|
}
|
|
|
|
$remote_version = is_string( $remote['version'] ) ? $remote['version'] : '';
|
|
|
|
if ( version_compare( $remote_version, $current_version, '>' ) ) {
|
|
$plugin_uri = isset( $this->plugin_data['PluginURI'] ) && is_string( $this->plugin_data['PluginURI'] ) ? $this->plugin_data['PluginURI'] : '';
|
|
|
|
$update = (object) array(
|
|
'slug' => isset( $remote['slug'] ) && is_string( $remote['slug'] ) ? $remote['slug'] : $this->plugin_slug,
|
|
'plugin' => $this->plugin_basename,
|
|
'new_version' => $remote_version,
|
|
'url' => isset( $remote['homepage'] ) && is_string( $remote['homepage'] ) ? $remote['homepage'] : $plugin_uri,
|
|
'package' => is_string( $remote['download_url'] ) ? $remote['download_url'] : '',
|
|
'tested' => isset( $remote['tested'] ) && is_string( $remote['tested'] ) ? $remote['tested'] : '',
|
|
'requires' => isset( $remote['requires'] ) && is_string( $remote['requires'] ) ? $remote['requires'] : '',
|
|
'requires_php' => isset( $remote['requires_php'] ) && is_string( $remote['requires_php'] ) ? $remote['requires_php'] : '',
|
|
);
|
|
|
|
if ( ! property_exists( $transient, 'response' ) || ! is_array( $transient->response ) ) {
|
|
$transient->response = array();
|
|
}
|
|
|
|
$transient->response[ $this->plugin_basename ] = $update;
|
|
}
|
|
|
|
return $transient;
|
|
}
|
|
|
|
/**
|
|
* Provide "View details" modal content.
|
|
*
|
|
* @param false|object|array<mixed> $result The result object or array.
|
|
* @param string $action The type of information being requested.
|
|
* @param object $args Plugin API arguments.
|
|
*
|
|
* @return false|object|array<mixed> The plugin information object or false.
|
|
*/
|
|
public function provide_plugin_details( $result, string $action, object $args ) {
|
|
if ( 'plugin_information' !== $action ) {
|
|
return $result;
|
|
}
|
|
|
|
if ( empty( $args->slug ) || $args->slug !== $this->plugin_slug ) {
|
|
return $result;
|
|
}
|
|
|
|
$remote = $this->get_remote_data();
|
|
|
|
if ( empty( $remote['version'] ) ) {
|
|
return $result;
|
|
}
|
|
|
|
$plugin_name = isset( $remote['name'] ) && is_string( $remote['name'] ) ? $remote['name'] : ( isset( $this->plugin_data['Name'] ) && is_string( $this->plugin_data['Name'] ) ? $this->plugin_data['Name'] : $this->plugin_slug );
|
|
$plugin_slug = isset( $remote['slug'] ) && is_string( $remote['slug'] ) ? $remote['slug'] : $this->plugin_slug;
|
|
$plugin_version = is_string( $remote['version'] ) ? $remote['version'] : '';
|
|
$plugin_author = isset( $remote['author'] ) && is_string( $remote['author'] ) ? $remote['author'] : ( isset( $this->plugin_data['Author'] ) && is_string( $this->plugin_data['Author'] ) ? $this->plugin_data['Author'] : '' );
|
|
$plugin_homepage = isset( $remote['homepage'] ) && is_string( $remote['homepage'] ) ? $remote['homepage'] : ( isset( $this->plugin_data['PluginURI'] ) && is_string( $this->plugin_data['PluginURI'] ) ? $this->plugin_data['PluginURI'] : '' );
|
|
$plugin_requires = isset( $remote['requires'] ) && is_string( $remote['requires'] ) ? $remote['requires'] : '';
|
|
$plugin_tested = isset( $remote['tested'] ) && is_string( $remote['tested'] ) ? $remote['tested'] : '';
|
|
$plugin_requires_php = isset( $remote['requires_php'] ) && is_string( $remote['requires_php'] ) ? $remote['requires_php'] : '';
|
|
$plugin_description = isset( $remote['description'] ) && is_string( $remote['description'] ) ? $remote['description'] : ( isset( $this->plugin_data['Description'] ) && is_string( $this->plugin_data['Description'] ) ? $this->plugin_data['Description'] : '' );
|
|
$plugin_changelog = isset( $remote['changelog'] ) && is_string( $remote['changelog'] ) ? $remote['changelog'] : '';
|
|
$plugin_download = isset( $remote['download_url'] ) && is_string( $remote['download_url'] ) ? $remote['download_url'] : '';
|
|
|
|
return (object) array(
|
|
'name' => $plugin_name,
|
|
'slug' => $plugin_slug,
|
|
'version' => $plugin_version,
|
|
'author' => $plugin_author,
|
|
'homepage' => $plugin_homepage,
|
|
'requires' => $plugin_requires,
|
|
'tested' => $plugin_tested,
|
|
'requires_php' => $plugin_requires_php,
|
|
'sections' => array(
|
|
'description' => $plugin_description,
|
|
'changelog' => $plugin_changelog,
|
|
),
|
|
'download_link' => $plugin_download,
|
|
);
|
|
}
|
|
|
|
/**
|
|
* Get remote data with caching and HMAC signature verification.
|
|
*
|
|
* @return array<string, mixed> Remote data.
|
|
*/
|
|
private function get_remote_data(): array {
|
|
$cached = get_site_transient( $this->cache_key );
|
|
|
|
// Verify HMAC signature if AUTH_SALT is defined and cache has signature.
|
|
if ( false !== $cached && defined( 'AUTH_SALT' ) && '' !== AUTH_SALT ) {
|
|
if ( is_array( $cached ) && isset( $cached['signature'], $cached['data'] ) ) {
|
|
$expected_sig = hash_hmac( 'sha256', $this->cache_key . serialize( $cached['data'] ), AUTH_SALT );
|
|
|
|
$cached_sig = is_string( $cached['signature'] ) ? $cached['signature'] : '';
|
|
|
|
if ( hash_equals( $expected_sig, $cached_sig ) ) {
|
|
// Signature valid, return data.
|
|
return is_array( $cached['data'] ) ? $cached['data'] : array();
|
|
}
|
|
|
|
// Signature invalid, delete corrupted cache.
|
|
delete_site_transient( $this->cache_key );
|
|
$cached = false;
|
|
}
|
|
}
|
|
|
|
// If no valid cache, fetch fresh data.
|
|
if ( false === $cached ) {
|
|
$remote = $this->fetch_json();
|
|
|
|
// Store with HMAC signature if AUTH_SALT is available.
|
|
if ( defined( 'AUTH_SALT' ) && '' !== AUTH_SALT ) {
|
|
$payload = array(
|
|
'data' => $remote,
|
|
'timestamp' => time(),
|
|
'signature' => hash_hmac( 'sha256', $this->cache_key . serialize( $remote ), AUTH_SALT ),
|
|
);
|
|
set_site_transient( $this->cache_key, $payload, 6 * HOUR_IN_SECONDS );
|
|
} else {
|
|
// Fallback to standard caching.
|
|
set_site_transient( $this->cache_key, $remote, 6 * HOUR_IN_SECONDS );
|
|
}
|
|
|
|
return $remote;
|
|
}
|
|
|
|
// Legacy cache format without signature (backward compatibility).
|
|
return is_array( $cached ) ? $cached : array();
|
|
}
|
|
|
|
/**
|
|
* Fetch JSON from remote URL.
|
|
*
|
|
* @return array<string, mixed> Decoded JSON data.
|
|
*/
|
|
private function fetch_json(): array {
|
|
$response = wp_remote_get(
|
|
$this->json_url,
|
|
array(
|
|
'timeout' => 10,
|
|
'headers' => array(
|
|
'Accept' => 'application/json',
|
|
),
|
|
)
|
|
);
|
|
|
|
if ( is_wp_error( $response ) ) {
|
|
return array();
|
|
}
|
|
|
|
$code = (int) wp_remote_retrieve_response_code( $response );
|
|
if ( $code < 200 || $code >= 300 ) {
|
|
return array();
|
|
}
|
|
|
|
$body = wp_remote_retrieve_body( $response );
|
|
$data = json_decode( $body, true );
|
|
|
|
return is_array( $data ) ? $data : array();
|
|
}
|
|
|
|
/**
|
|
* Check compatibility.
|
|
*
|
|
* @param array<string, mixed> $remote Remote data.
|
|
*
|
|
* @return bool True if compatible.
|
|
*/
|
|
private function is_compatible( array $remote ): bool {
|
|
if ( ! empty( $remote['requires_php'] ) && is_string( $remote['requires_php'] ) ) {
|
|
if ( version_compare( PHP_VERSION, $remote['requires_php'], '<' ) ) {
|
|
return false;
|
|
}
|
|
}
|
|
|
|
if ( ! empty( $remote['requires'] ) && is_string( $remote['requires'] ) ) {
|
|
if ( version_compare( get_bloginfo( 'version' ), $remote['requires'], '<' ) ) {
|
|
return false;
|
|
}
|
|
}
|
|
|
|
return true;
|
|
}
|
|
|
|
/**
|
|
* Handle manual cache clear via URL parameter.
|
|
*/
|
|
public function handle_cache_clear(): void {
|
|
// Check if this is a cache clear request first.
|
|
$clear_cache = filter_input( INPUT_GET, 'robotstxt_clear_update_cache', FILTER_UNSAFE_RAW );
|
|
if ( null === $clear_cache ) {
|
|
return;
|
|
}
|
|
|
|
// This is a cache clear request - now verify nonce.
|
|
$nonce_raw = filter_input( INPUT_GET, '_wpnonce', FILTER_UNSAFE_RAW );
|
|
$nonce = $nonce_raw ? sanitize_text_field( wp_unslash( $nonce_raw ) ) : '';
|
|
|
|
if ( ! wp_verify_nonce( $nonce, 'robotstxt_clear_update_cache' ) ) {
|
|
wp_die( esc_html__( 'Security check failed', 'two-factor-extended' ) );
|
|
}
|
|
|
|
// Check permissions.
|
|
if ( ! current_user_can( 'update_plugins' ) ) {
|
|
wp_die( esc_html__( 'You do not have sufficient permissions to access this page.', 'two-factor-extended' ) );
|
|
}
|
|
|
|
$this->clear_cache();
|
|
wp_safe_redirect( remove_query_arg( array( 'robotstxt_clear_update_cache', '_wpnonce' ) ) );
|
|
exit;
|
|
}
|
|
|
|
/**
|
|
* Clear update cache.
|
|
*/
|
|
public function clear_cache(): void {
|
|
delete_site_transient( $this->cache_key );
|
|
delete_site_transient( 'update_plugins' );
|
|
}
|
|
}
|
|
}
|