: str_replace(): Passing null to parameter #2 ($replace) of type array|string is deprecated in
* Popup Maker Extension Updater
* @copyright Copyright (c) 2023, Code Atlantic LLC
// Exit if accessed directly.
defined( 'ABSPATH' ) || exit;
* Allows paid/commercial extensions to update from our own servers.
* Note for wordpress.org admins. This is not called in the free hosted version and is simply used for hooking in addons to one update system rather than including it in each plugin.
* @author Easy Digital Downloads
class PUM_Extension_Updater {
* Array of plugin api data.
private $plugin_file = '';
private $wp_override = false;
* Failed request cache key.
private $failed_request_cache_key;
* @uses plugin_basename()
* @param string $_api_url The URL pointing to the custom API endpoint.
* @param string $_plugin_file Path to the plugin file.
* @param array $_api_data Optional data to send with API calls.
public function __construct( $_api_url, $_plugin_file, $_api_data = null ) {
$this->api_url = trailingslashit( $_api_url );
$this->api_data = $_api_data;
$this->plugin_file = $_plugin_file;
$this->name = plugin_basename( $_plugin_file );
$this->slug = basename( $_plugin_file, '.php' );
$this->version = $_api_data['version'];
$this->wp_override = isset( $_api_data['wp_override'] ) ? (bool) $_api_data['wp_override'] : false;
$this->beta = ! empty( $this->api_data['beta'] ) ? true : false;
$this->failed_request_cache_key = 'edd_sl_failed_http_' . md5( $this->api_url );
$edd_plugin_data[ $this->slug ] = $this->api_data;
* Fires after the $edd_plugin_data is setup.
* @param array $edd_plugin_data Array of EDD SL plugin data.
do_action( 'post_edd_sl_plugin_updater_setup', $edd_plugin_data );
* Set up WordPress filters to hook into WP's update process.
add_filter( 'pre_set_site_transient_update_plugins', [ $this, 'check_update' ] );
add_filter( 'plugins_api', [ $this, 'plugins_api_filter' ], 10, 3 );
add_action( 'after_plugin_row', [ $this, 'show_update_notification' ], 10, 2 );
add_action( 'admin_init', [ $this, 'show_changelog' ] );
* Check for Updates at the defined API endpoint and modify the update array.
* This function dives into the update API just when WordPress creates its update array,
* then adds a custom API call and injects the custom plugin data retrieved from the API.
* It is reassembled from parts of the native WordPress plugin update code.
* See wp-includes/update.php line 121 for the original wp_update_plugins() function.
* @param array $_transient_data Update array build by WordPress.
* @return array Modified update array with custom plugin data.
public function check_update( $_transient_data ) {
if ( ! is_object( $_transient_data ) ) {
$_transient_data = new stdClass();
if ( ! empty( $_transient_data->response ) && ! empty( $_transient_data->response[ $this->name ] ) && false === $this->wp_override ) {
$current = $this->get_repo_api_data();
if ( false !== $current && is_object( $current ) && isset( $current->new_version ) ) {
if ( version_compare( $this->version, $current->new_version, '<' ) ) {
$_transient_data->response[ $this->name ] = $current;
// Populating the no_update information is required to support auto-updates in WordPress 5.5.
$_transient_data->no_update[ $this->name ] = $current;
$_transient_data->last_checked = time();
$_transient_data->checked[ $this->name ] = $this->version;
* Get repo API data from store.
public function get_repo_api_data() {
$version_info = $this->get_cached_version_info();
if ( false === $version_info ) {
$version_info = $this->api_request(
// This is required for your plugin to support auto-updates in WordPress 5.5.
$version_info->plugin = $this->name;
$version_info->id = $this->name;
$version_info->tested = $this->get_tested_version( $version_info );
$this->set_version_info_cache( $version_info );
* Gets the plugin's tested version.
* @param object $version_info The plugin's version info.
private function get_tested_version( $version_info ) {
// There is no tested version.
if ( empty( $version_info->tested ) ) {
// Strip off extra version data so the result is x.y or x.y.z.
list( $current_wp_version ) = explode( '-', get_bloginfo( 'version' ) );
// The tested version is greater than or equal to the current WP version, no need to do anything.
if ( version_compare( $version_info->tested, $current_wp_version, '>=' ) ) {
return $version_info->tested;
$current_version_parts = explode( '.', $current_wp_version );
$tested_parts = explode( '.', $version_info->tested );
// The current WordPress version is x.y.z, so update the tested version to match it.
if ( isset( $current_version_parts[2] ) && $current_version_parts[0] === $tested_parts[0] && $current_version_parts[1] === $tested_parts[1] ) {
$tested_parts[2] = $current_version_parts[2];
return implode( '.', $tested_parts );
* Show the update notification on multisite subsites.
* @param string $file Plugin file.
* @param array $plugin Plugin data.
public function show_update_notification( $file, $plugin ) {
// Return early if in the network admin, or if this is not a multisite install.
if ( is_network_admin() || ! is_multisite() ) {
// Allow single site admins to see that an update is available.
if ( ! current_user_can( 'activate_plugins' ) ) {
if ( $this->name !== $file ) {
// Do not print any message if update does not exist.
$update_cache = get_site_transient( 'update_plugins' );
if ( ! isset( $update_cache->response[ $this->name ] ) ) {
if ( ! is_object( $update_cache ) ) {
$update_cache = new stdClass();
$update_cache->response[ $this->name ] = $this->get_repo_api_data();
// Return early if this plugin isn't in the transient->response or if the site is running the current or newer version of the plugin.
if ( empty( $update_cache->response[ $this->name ] ) || version_compare( $this->version, $update_cache->response[ $this->name ]->new_version, '>=' ) ) {
'<tr class="plugin-update-tr %3$s" id="%1$s-update" data-slug="%1$s" data-plugin="%2$s">',
in_array( $this->name, $this->get_active_plugins(), true ) ? 'active' : 'inactive'
echo '<td colspan="3" class="plugin-update colspanchange">';
echo '<div class="update-message notice inline notice-warning notice-alt"><p>';
if ( ! empty( $update_cache->response[ $this->name ]->sections->changelog ) ) {
$changelog_link = add_query_arg(
'edd_sl_action' => 'view_plugin_changelog',
'plugin' => rawurlencode( $this->name ),
'slug' => rawurlencode( $this->slug ),
self_admin_url( 'index.php' )
$update_link = add_query_arg(
'action' => 'upgrade-plugin',
'plugin' => rawurlencode( $this->name ),
self_admin_url( 'update.php' )
/* translators: the plugin name. */
esc_html__( 'There is a new version of %1$s available.', 'popup-maker' ),
esc_html( $plugin['Name'] )
if ( ! current_user_can( 'update_plugins' ) ) {
esc_html_e( 'Contact your network administrator to install the update.', 'popup-maker' );
} elseif ( empty( $update_cache->response[ $this->name ]->package ) && ! empty( $changelog_link ) ) {
/* translators: 1. opening anchor tag, do not translate 2. the new plugin version 3. closing anchor tag, do not translate. */
wp_kses_post( __( '%1$sView version %2$s details%3$s.', 'popup-maker' ) ),
'<a target="_blank" class="thickbox open-plugin-details-modal" href="' . esc_url( $changelog_link ) . '">',
esc_html( $update_cache->response[ $this->name ]->new_version ),
} elseif ( ! empty( $changelog_link ) ) {
/* translators: 1. opening anchor tag, do not translate 2. the new plugin version 3. closing anchor tag, do not translate 4. opening anchor tag, do not translate 5. closing anchor tag, do not translate</a>. */
wp_kses_post( __( '%1$sView version %2$s details%3$s or %4$supdate now%5$s.', 'popup-maker' ) ),
'<a target="_blank" class="thickbox open-plugin-details-modal" href="' . esc_url( $changelog_link ) . '">',
esc_html( $update_cache->response[ $this->name ]->new_version ),
'<a target="_blank" class="update-link" href="' . esc_url( wp_nonce_url( $update_link, 'upgrade-plugin_' . $file ) ) . '">',
'<a target="_blank" class="update-link" href="' . esc_url( wp_nonce_url( $update_link, 'upgrade-plugin_' . $file ) ) . '">',
esc_html__( 'Update now.', 'popup-maker' ),
// phpcs:ignore WordPress.NamingConventions.ValidHookName.UseUnderscores
do_action( "in_plugin_update_message-{$file}", $plugin, $plugin );
echo '</p></div></td></tr>';
* Gets the plugins active in a multisite network.
private function get_active_plugins() {
$active_plugins = (array) get_option( 'active_plugins' );
$active_network_plugins = (array) get_site_option( 'active_sitewide_plugins' );
return array_merge( $active_plugins, array_keys( $active_network_plugins ) );
* Updates information on the "View version x.x details" page with custom data.
* @param mixed $_data Plugin data.
* @param string $_action The type of information being requested from the Plugin Installation API.
* @param object $_args Plugin API arguments.
public function plugins_api_filter( $_data, $_action = '', $_args = null ) {
if ( 'plugin_information' !== $_action ) {
if ( ! isset( $_args->slug ) || ( $_args->slug !== $this->slug ) ) {
// Get the transient where we store the api request for this plugin for 24 hours.
$edd_api_request_transient = $this->get_cached_version_info();
// If we have no transient-saved value, run the API, set a fresh transient with the API value, and return that value too right now.
if ( empty( $edd_api_request_transient ) ) {
$api_response = $this->api_request( 'plugin_information', $to_send );
$this->set_version_info_cache( $api_response );
if ( false !== $api_response ) {
$_data = $edd_api_request_transient;
// Convert sections into an associative array, since we're getting an object, but Core expects an array.
if ( isset( $_data->sections ) && ! is_array( $_data->sections ) ) {
$_data->sections = $this->convert_object_to_array( $_data->sections );
// Convert banners into an associative array, since we're getting an object, but Core expects an array.
if ( isset( $_data->banners ) && ! is_array( $_data->banners ) ) {
$_data->banners = $this->convert_object_to_array( $_data->banners );
// Convert icons into an associative array, since we're getting an object, but Core expects an array.
if ( isset( $_data->icons ) && ! is_array( $_data->icons ) ) {
$_data->icons = $this->convert_object_to_array( $_data->icons );
// Convert contributors into an associative array, since we're getting an object, but Core expects an array.
if ( isset( $_data->contributors ) && ! is_array( $_data->contributors ) ) {
$_data->contributors = $this->convert_object_to_array( $_data->contributors );
if ( ! isset( $_data->plugin ) ) {
$_data->plugin = $this->name;
* Convert some objects to arrays when injecting data into the update API
* Some data like sections, banners, and icons are expected to be an associative array, however due to the JSON
* decoding, they are objects. This method allows us to pass in the object and return an associative array.
* @param stdClass $data The object to convert to an array.
private function convert_object_to_array( $data ) {
if ( ! is_array( $data ) && ! is_object( $data ) ) {
foreach ( $data as $key => $value ) {
$new_data[ $key ] = is_object( $value ) ? $this->convert_object_to_array( $value ) : $value;
* Disable SSL verification in order to prevent download update failures
* @param array $args Args to be passed to wp_remote_get.
* @param string $url Url string.
public function http_request_args( $args, $url ) {
if ( strpos( $url, 'https://' ) !== false && strpos( $url, 'edd_action=package_download' ) ) {
$args['sslverify'] = $this->verify_ssl();
* Calls the API and, if successfull, returns the object delivered by the API.
* @param string $_action The requested action.
* @param array $_data Parameters for the API action.
* @return false|object|void
private function api_request( $_action, $_data ) {
$data = array_merge( $this->api_data, $_data );