Edit File by line

<?php

[0] Fix | Delete

/**

[1] Fix | Delete

* REST API: WP_REST_Plugins_Controller class

[2] Fix | Delete

[3] Fix | Delete

* @package WordPress

[4] Fix | Delete

* @subpackage REST_API

[5] Fix | Delete

* @since 5.5.0

[6] Fix | Delete

[7] Fix | Delete

[8] Fix | Delete

/**

[9] Fix | Delete

* Core class to access plugins via the REST API.

[10] Fix | Delete

[11] Fix | Delete

* @since 5.5.0

[12] Fix | Delete

[13] Fix | Delete

* @see WP_REST_Controller

[14] Fix | Delete

[15] Fix | Delete

class WP_REST_Plugins_Controller extends WP_REST_Controller {

[16] Fix | Delete

[17] Fix | Delete

const PATTERN = '[^.\/]+(?:\/[^.\/]+)?';

[18] Fix | Delete

[19] Fix | Delete

/**

[20] Fix | Delete

* Plugins controller constructor.

[21] Fix | Delete

[22] Fix | Delete

* @since 5.5.0

[23] Fix | Delete

[24] Fix | Delete

public function __construct() {

[25] Fix | Delete

$this->namespace = 'wp/v2';

[26] Fix | Delete

$this->rest_base = 'plugins';

[27] Fix | Delete

}

[28] Fix | Delete

[29] Fix | Delete

/**

[30] Fix | Delete

* Registers the routes for the plugins controller.

[31] Fix | Delete

[32] Fix | Delete

* @since 5.5.0

[33] Fix | Delete

[34] Fix | Delete

public function register_routes() {

[35] Fix | Delete

register_rest_route(

[36] Fix | Delete

$this->namespace,

[37] Fix | Delete

'/' . $this->rest_base,

[38] Fix | Delete

array(

[39] Fix | Delete

array(

[40] Fix | Delete

'methods' => WP_REST_Server::READABLE,

[41] Fix | Delete

'callback' => array( $this, 'get_items' ),

[42] Fix | Delete

'permission_callback' => array( $this, 'get_items_permissions_check' ),

[43] Fix | Delete

'args' => $this->get_collection_params(),

[44] Fix | Delete

[45] Fix | Delete

array(

[46] Fix | Delete

'methods' => WP_REST_Server::CREATABLE,

[47] Fix | Delete

'callback' => array( $this, 'create_item' ),

[48] Fix | Delete

'permission_callback' => array( $this, 'create_item_permissions_check' ),

[49] Fix | Delete

'args' => array(

[50] Fix | Delete

'slug' => array(

[51] Fix | Delete

'type' => 'string',

[52] Fix | Delete

'required' => true,

[53] Fix | Delete

'description' => __( 'WordPress.org plugin directory slug.' ),

[54] Fix | Delete

'pattern' => '[\w\-]+',

[55] Fix | Delete

[56] Fix | Delete

'status' => array(

[57] Fix | Delete

'description' => __( 'The plugin activation status.' ),

[58] Fix | Delete

'type' => 'string',

[59] Fix | Delete

'enum' => is_multisite() ? array( 'inactive', 'active', 'network-active' ) : array( 'inactive', 'active' ),

[60] Fix | Delete

'default' => 'inactive',

[61] Fix | Delete

[62] Fix | Delete

[63] Fix | Delete

[64] Fix | Delete

'schema' => array( $this, 'get_public_item_schema' ),

[65] Fix | Delete

)

[66] Fix | Delete

);

[67] Fix | Delete

[68] Fix | Delete

register_rest_route(

[69] Fix | Delete

$this->namespace,

[70] Fix | Delete

'/' . $this->rest_base . '/(?P<plugin>' . self::PATTERN . ')',

[71] Fix | Delete

array(

[72] Fix | Delete

array(

[73] Fix | Delete

'methods' => WP_REST_Server::READABLE,

[74] Fix | Delete

'callback' => array( $this, 'get_item' ),

[75] Fix | Delete

'permission_callback' => array( $this, 'get_item_permissions_check' ),

[76] Fix | Delete

[77] Fix | Delete

array(

[78] Fix | Delete

'methods' => WP_REST_Server::EDITABLE,

[79] Fix | Delete

'callback' => array( $this, 'update_item' ),

[80] Fix | Delete

'permission_callback' => array( $this, 'update_item_permissions_check' ),

[81] Fix | Delete

'args' => $this->get_endpoint_args_for_item_schema( WP_REST_Server::EDITABLE ),

[82] Fix | Delete

[83] Fix | Delete

array(

[84] Fix | Delete

'methods' => WP_REST_Server::DELETABLE,

[85] Fix | Delete

'callback' => array( $this, 'delete_item' ),

[86] Fix | Delete

'permission_callback' => array( $this, 'delete_item_permissions_check' ),

[87] Fix | Delete

[88] Fix | Delete

'args' => array(

[89] Fix | Delete

'context' => $this->get_context_param( array( 'default' => 'view' ) ),

[90] Fix | Delete

'plugin' => array(

[91] Fix | Delete

'type' => 'string',

[92] Fix | Delete

'pattern' => self::PATTERN,

[93] Fix | Delete

'validate_callback' => array( $this, 'validate_plugin_param' ),

[94] Fix | Delete

'sanitize_callback' => array( $this, 'sanitize_plugin_param' ),

[95] Fix | Delete

[96] Fix | Delete

[97] Fix | Delete

'schema' => array( $this, 'get_public_item_schema' ),

[98] Fix | Delete

)

[99] Fix | Delete

);

[100] Fix | Delete

}

[101] Fix | Delete

[102] Fix | Delete

/**

[103] Fix | Delete

* Checks if a given request has access to get plugins.

[104] Fix | Delete

[105] Fix | Delete

* @since 5.5.0

[106] Fix | Delete

[107] Fix | Delete

* @param WP_REST_Request $request Full details about the request.

[108] Fix | Delete

* @return true|WP_Error True if the request has read access, WP_Error object otherwise.

[109] Fix | Delete

[110] Fix | Delete

public function get_items_permissions_check( $request ) {

[111] Fix | Delete

if ( ! current_user_can( 'activate_plugins' ) ) {

[112] Fix | Delete

return new WP_Error(

[113] Fix | Delete

'rest_cannot_view_plugins',

[114] Fix | Delete

__( 'Sorry, you are not allowed to manage plugins for this site.' ),

[115] Fix | Delete

array( 'status' => rest_authorization_required_code() )

[116] Fix | Delete

);

[117] Fix | Delete

}

[118] Fix | Delete

[119] Fix | Delete

return true;

[120] Fix | Delete

}

[121] Fix | Delete

[122] Fix | Delete

/**

[123] Fix | Delete

* Retrieves a collection of plugins.

[124] Fix | Delete

[125] Fix | Delete

* @since 5.5.0

[126] Fix | Delete

[127] Fix | Delete

* @param WP_REST_Request $request Full details about the request.

[128] Fix | Delete

* @return WP_REST_Response|WP_Error Response object on success, or WP_Error object on failure.

[129] Fix | Delete

[130] Fix | Delete

public function get_items( $request ) {

[131] Fix | Delete

require_once ABSPATH . 'wp-admin/includes/plugin.php';

[132] Fix | Delete

[133] Fix | Delete

$plugins = array();

[134] Fix | Delete

[135] Fix | Delete

foreach ( get_plugins() as $file => $data ) {

[136] Fix | Delete

if ( is_wp_error( $this->check_read_permission( $file ) ) ) {

[137] Fix | Delete

continue;

[138] Fix | Delete

}

[139] Fix | Delete

[140] Fix | Delete

$data['_file'] = $file;

[141] Fix | Delete

[142] Fix | Delete

if ( ! $this->does_plugin_match_request( $request, $data ) ) {

[143] Fix | Delete

continue;

[144] Fix | Delete

}

[145] Fix | Delete

[146] Fix | Delete

$plugins[] = $this->prepare_response_for_collection( $this->prepare_item_for_response( $data, $request ) );

[147] Fix | Delete

}

[148] Fix | Delete

[149] Fix | Delete

return new WP_REST_Response( $plugins );

[150] Fix | Delete

}

[151] Fix | Delete

[152] Fix | Delete

/**

[153] Fix | Delete

* Checks if a given request has access to get a specific plugin.

[154] Fix | Delete

[155] Fix | Delete

* @since 5.5.0

[156] Fix | Delete

[157] Fix | Delete

* @param WP_REST_Request $request Full details about the request.

[158] Fix | Delete

* @return true|WP_Error True if the request has read access for the item, WP_Error object otherwise.

[159] Fix | Delete

[160] Fix | Delete

public function get_item_permissions_check( $request ) {

[161] Fix | Delete

if ( ! current_user_can( 'activate_plugins' ) ) {

[162] Fix | Delete

return new WP_Error(

[163] Fix | Delete

'rest_cannot_view_plugin',

[164] Fix | Delete

__( 'Sorry, you are not allowed to manage plugins for this site.' ),

[165] Fix | Delete

array( 'status' => rest_authorization_required_code() )

[166] Fix | Delete

);

[167] Fix | Delete

}

[168] Fix | Delete

[169] Fix | Delete

$can_read = $this->check_read_permission( $request['plugin'] );

[170] Fix | Delete

[171] Fix | Delete

if ( is_wp_error( $can_read ) ) {

[172] Fix | Delete

return $can_read;

[173] Fix | Delete

}

[174] Fix | Delete

[175] Fix | Delete

return true;

[176] Fix | Delete

}

[177] Fix | Delete

[178] Fix | Delete

/**

[179] Fix | Delete

* Retrieves one plugin from the site.

[180] Fix | Delete

[181] Fix | Delete

* @since 5.5.0

[182] Fix | Delete

[183] Fix | Delete

* @param WP_REST_Request $request Full details about the request.

[184] Fix | Delete

* @return WP_REST_Response|WP_Error Response object on success, or WP_Error object on failure.

[185] Fix | Delete

[186] Fix | Delete

public function get_item( $request ) {

[187] Fix | Delete

require_once ABSPATH . 'wp-admin/includes/plugin.php';

[188] Fix | Delete

[189] Fix | Delete

$data = $this->get_plugin_data( $request['plugin'] );

[190] Fix | Delete

[191] Fix | Delete

if ( is_wp_error( $data ) ) {

[192] Fix | Delete

return $data;

[193] Fix | Delete

}

[194] Fix | Delete

[195] Fix | Delete

return $this->prepare_item_for_response( $data, $request );

[196] Fix | Delete

}

[197] Fix | Delete

[198] Fix | Delete

/**

[199] Fix | Delete

* Checks if the given plugin can be viewed by the current user.

[200] Fix | Delete

[201] Fix | Delete

* On multisite, this hides non-active network only plugins if the user does not have permission

[202] Fix | Delete

* to manage network plugins.

[203] Fix | Delete

[204] Fix | Delete

* @since 5.5.0

[205] Fix | Delete

[206] Fix | Delete

* @param string $plugin The plugin file to check.

[207] Fix | Delete

* @return true|WP_Error True if can read, a WP_Error instance otherwise.

[208] Fix | Delete

[209] Fix | Delete

protected function check_read_permission( $plugin ) {

[210] Fix | Delete

require_once ABSPATH . 'wp-admin/includes/plugin.php';

[211] Fix | Delete

[212] Fix | Delete

if ( ! $this->is_plugin_installed( $plugin ) ) {

[213] Fix | Delete

return new WP_Error( 'rest_plugin_not_found', __( 'Plugin not found.' ), array( 'status' => 404 ) );

[214] Fix | Delete

}

[215] Fix | Delete

[216] Fix | Delete

if ( ! is_multisite() ) {

[217] Fix | Delete

return true;

[218] Fix | Delete

}

[219] Fix | Delete

[220] Fix | Delete

if ( ! is_network_only_plugin( $plugin ) || is_plugin_active( $plugin ) || current_user_can( 'manage_network_plugins' ) ) {

[221] Fix | Delete

return true;

[222] Fix | Delete

}

[223] Fix | Delete

[224] Fix | Delete

return new WP_Error(

[225] Fix | Delete

'rest_cannot_view_plugin',

[226] Fix | Delete

__( 'Sorry, you are not allowed to manage this plugin.' ),

[227] Fix | Delete

array( 'status' => rest_authorization_required_code() )

[228] Fix | Delete

);

[229] Fix | Delete

}

[230] Fix | Delete

[231] Fix | Delete

/**

[232] Fix | Delete

* Checks if a given request has access to upload plugins.

[233] Fix | Delete

[234] Fix | Delete

* @since 5.5.0

[235] Fix | Delete

[236] Fix | Delete

* @param WP_REST_Request $request Full details about the request.

[237] Fix | Delete

* @return true|WP_Error True if the request has access to create items, WP_Error object otherwise.

[238] Fix | Delete

[239] Fix | Delete

public function create_item_permissions_check( $request ) {

[240] Fix | Delete

if ( ! current_user_can( 'install_plugins' ) ) {

[241] Fix | Delete

return new WP_Error(

[242] Fix | Delete

'rest_cannot_install_plugin',

[243] Fix | Delete

__( 'Sorry, you are not allowed to install plugins on this site.' ),

[244] Fix | Delete

array( 'status' => rest_authorization_required_code() )

[245] Fix | Delete

);

[246] Fix | Delete

}

[247] Fix | Delete

[248] Fix | Delete

if ( 'inactive' !== $request['status'] && ! current_user_can( 'activate_plugins' ) ) {

[249] Fix | Delete

return new WP_Error(

[250] Fix | Delete

'rest_cannot_activate_plugin',

[251] Fix | Delete

__( 'Sorry, you are not allowed to activate plugins.' ),

[252] Fix | Delete

array(

[253] Fix | Delete

'status' => rest_authorization_required_code(),

[254] Fix | Delete

)

[255] Fix | Delete

);

[256] Fix | Delete

}

[257] Fix | Delete

[258] Fix | Delete

return true;

[259] Fix | Delete

}

[260] Fix | Delete

[261] Fix | Delete

/**

[262] Fix | Delete

* Uploads a plugin and optionally activates it.

[263] Fix | Delete

[264] Fix | Delete

* @since 5.5.0

[265] Fix | Delete

[266] Fix | Delete

* @global WP_Filesystem_Base $wp_filesystem WordPress filesystem subclass.

[267] Fix | Delete

[268] Fix | Delete

* @param WP_REST_Request $request Full details about the request.

[269] Fix | Delete

* @return WP_REST_Response|WP_Error Response object on success, or WP_Error object on failure.

[270] Fix | Delete

[271] Fix | Delete

public function create_item( $request ) {

[272] Fix | Delete

global $wp_filesystem;

[273] Fix | Delete

[274] Fix | Delete

require_once ABSPATH . 'wp-admin/includes/file.php';

[275] Fix | Delete

require_once ABSPATH . 'wp-admin/includes/plugin.php';

[276] Fix | Delete

require_once ABSPATH . 'wp-admin/includes/class-wp-upgrader.php';

[277] Fix | Delete

require_once ABSPATH . 'wp-admin/includes/plugin-install.php';

[278] Fix | Delete

[279] Fix | Delete

$slug = $request['slug'];

[280] Fix | Delete

[281] Fix | Delete

// Verify filesystem is accessible first.

[282] Fix | Delete

$filesystem_available = $this->is_filesystem_available();

[283] Fix | Delete

if ( is_wp_error( $filesystem_available ) ) {

[284] Fix | Delete

return $filesystem_available;

[285] Fix | Delete

}

[286] Fix | Delete

[287] Fix | Delete

$api = plugins_api(

[288] Fix | Delete

'plugin_information',

[289] Fix | Delete

array(

[290] Fix | Delete

'slug' => $slug,

[291] Fix | Delete

'fields' => array(

[292] Fix | Delete

'sections' => false,

[293] Fix | Delete

'language_packs' => true,

[294] Fix | Delete

[295] Fix | Delete

)

[296] Fix | Delete

);

[297] Fix | Delete

[298] Fix | Delete

if ( is_wp_error( $api ) ) {

[299] Fix | Delete

if ( str_contains( $api->get_error_message(), 'Plugin not found.' ) ) {

[300] Fix | Delete

$api->add_data( array( 'status' => 404 ) );

[301] Fix | Delete

} else {

[302] Fix | Delete

$api->add_data( array( 'status' => 500 ) );

[303] Fix | Delete

}

[304] Fix | Delete

[305] Fix | Delete

return $api;

[306] Fix | Delete

}

[307] Fix | Delete

[308] Fix | Delete

$skin = new WP_Ajax_Upgrader_Skin();

[309] Fix | Delete

$upgrader = new Plugin_Upgrader( $skin );

[310] Fix | Delete

[311] Fix | Delete

$result = $upgrader->install( $api->download_link );

[312] Fix | Delete

[313] Fix | Delete

if ( is_wp_error( $result ) ) {

[314] Fix | Delete

$result->add_data( array( 'status' => 500 ) );

[315] Fix | Delete

[316] Fix | Delete

return $result;

[317] Fix | Delete

}

[318] Fix | Delete

[319] Fix | Delete

// This should be the same as $result above.

[320] Fix | Delete

if ( is_wp_error( $skin->result ) ) {

[321] Fix | Delete

$skin->result->add_data( array( 'status' => 500 ) );

[322] Fix | Delete

[323] Fix | Delete

return $skin->result;

[324] Fix | Delete

}

[325] Fix | Delete

[326] Fix | Delete

if ( $skin->get_errors()->has_errors() ) {

[327] Fix | Delete

$error = $skin->get_errors();

[328] Fix | Delete

$error->add_data( array( 'status' => 500 ) );

[329] Fix | Delete

[330] Fix | Delete

return $error;

[331] Fix | Delete

}

[332] Fix | Delete

[333] Fix | Delete

if ( is_null( $result ) ) {

[334] Fix | Delete

// Pass through the error from WP_Filesystem if one was raised.

[335] Fix | Delete

if ( $wp_filesystem instanceof WP_Filesystem_Base

[336] Fix | Delete

&& is_wp_error( $wp_filesystem->errors ) && $wp_filesystem->errors->has_errors()

[337] Fix | Delete

) {

[338] Fix | Delete

return new WP_Error(

[339] Fix | Delete

'unable_to_connect_to_filesystem',

[340] Fix | Delete

$wp_filesystem->errors->get_error_message(),

[341] Fix | Delete

array( 'status' => 500 )

[342] Fix | Delete

);

[343] Fix | Delete

}

[344] Fix | Delete

[345] Fix | Delete

return new WP_Error(

[346] Fix | Delete

'unable_to_connect_to_filesystem',

[347] Fix | Delete

__( 'Unable to connect to the filesystem. Please confirm your credentials.' ),

[348] Fix | Delete

array( 'status' => 500 )

[349] Fix | Delete

);

[350] Fix | Delete

}

[351] Fix | Delete

[352] Fix | Delete

$file = $upgrader->plugin_info();

[353] Fix | Delete

[354] Fix | Delete

if ( ! $file ) {

[355] Fix | Delete

return new WP_Error(

[356] Fix | Delete

'unable_to_determine_installed_plugin',

[357] Fix | Delete

__( 'Unable to determine what plugin was installed.' ),

[358] Fix | Delete

array( 'status' => 500 )

[359] Fix | Delete

);

[360] Fix | Delete

}

[361] Fix | Delete

[362] Fix | Delete

if ( 'inactive' !== $request['status'] ) {

[363] Fix | Delete

$can_change_status = $this->plugin_status_permission_check( $file, $request['status'], 'inactive' );

[364] Fix | Delete

[365] Fix | Delete

if ( is_wp_error( $can_change_status ) ) {

[366] Fix | Delete

return $can_change_status;

[367] Fix | Delete

}

[368] Fix | Delete

[369] Fix | Delete

$changed_status = $this->handle_plugin_status( $file, $request['status'], 'inactive' );

[370] Fix | Delete

[371] Fix | Delete

if ( is_wp_error( $changed_status ) ) {

[372] Fix | Delete

return $changed_status;

[373] Fix | Delete

}

[374] Fix | Delete

}

[375] Fix | Delete

[376] Fix | Delete

// Install translations.

[377] Fix | Delete

$installed_locales = array_values( get_available_languages() );

[378] Fix | Delete

/** This filter is documented in wp-includes/update.php */

[379] Fix | Delete

$installed_locales = apply_filters( 'plugins_update_check_locales', $installed_locales );

[380] Fix | Delete

[381] Fix | Delete

$language_packs = array_map(

[382] Fix | Delete

static function ( $item ) {

[383] Fix | Delete

return (object) $item;

[384] Fix | Delete

[385] Fix | Delete

$api->language_packs

[386] Fix | Delete

);

[387] Fix | Delete

[388] Fix | Delete

$language_packs = array_filter(

[389] Fix | Delete

$language_packs,

[390] Fix | Delete

static function ( $pack ) use ( $installed_locales ) {

[391] Fix | Delete

return in_array( $pack->language, $installed_locales, true );

[392] Fix | Delete

}

[393] Fix | Delete

);

[394] Fix | Delete

[395] Fix | Delete

if ( $language_packs ) {

[396] Fix | Delete

$lp_upgrader = new Language_Pack_Upgrader( $skin );

[397] Fix | Delete

[398] Fix | Delete

// Install all applicable language packs for the plugin.

[399] Fix | Delete

$lp_upgrader->bulk_upgrade( $language_packs );

[400] Fix | Delete

}

[401] Fix | Delete

[402] Fix | Delete

$path = WP_PLUGIN_DIR . '/' . $file;

[403] Fix | Delete

$data = get_plugin_data( $path, false, false );

[404] Fix | Delete

$data['_file'] = $file;

[405] Fix | Delete

[406] Fix | Delete

$response = $this->prepare_item_for_response( $data, $request );

[407] Fix | Delete

$response->set_status( 201 );

[408] Fix | Delete

$response->header( 'Location', rest_url( sprintf( '%s/%s/%s', $this->namespace, $this->rest_base, substr( $file, 0, - 4 ) ) ) );

[409] Fix | Delete

[410] Fix | Delete

return $response;

[411] Fix | Delete

}

[412] Fix | Delete

[413] Fix | Delete

/**

[414] Fix | Delete

* Checks if a given request has access to update a specific plugin.

[415] Fix | Delete

[416] Fix | Delete

* @since 5.5.0

[417] Fix | Delete

[418] Fix | Delete

* @param WP_REST_Request $request Full details about the request.

[419] Fix | Delete

* @return true|WP_Error True if the request has access to update the item, WP_Error object otherwise.

[420] Fix | Delete

[421] Fix | Delete

public function update_item_permissions_check( $request ) {

[422] Fix | Delete

require_once ABSPATH . 'wp-admin/includes/plugin.php';

[423] Fix | Delete

[424] Fix | Delete

if ( ! current_user_can( 'activate_plugins' ) ) {

[425] Fix | Delete

return new WP_Error(

[426] Fix | Delete

'rest_cannot_manage_plugins',

[427] Fix | Delete

__( 'Sorry, you are not allowed to manage plugins for this site.' ),

[428] Fix | Delete

array( 'status' => rest_authorization_required_code() )

[429] Fix | Delete

);

[430] Fix | Delete

}

[431] Fix | Delete

[432] Fix | Delete

$can_read = $this->check_read_permission( $request['plugin'] );

[433] Fix | Delete

[434] Fix | Delete

if ( is_wp_error( $can_read ) ) {

[435] Fix | Delete

return $can_read;

[436] Fix | Delete

}

[437] Fix | Delete

[438] Fix | Delete

$status = $this->get_plugin_status( $request['plugin'] );

[439] Fix | Delete

[440] Fix | Delete

if ( $request['status'] && $status !== $request['status'] ) {

[441] Fix | Delete

$can_change_status = $this->plugin_status_permission_check( $request['plugin'], $request['status'], $status );

[442] Fix | Delete

[443] Fix | Delete

if ( is_wp_error( $can_change_status ) ) {

[444] Fix | Delete

return $can_change_status;

[445] Fix | Delete

}

[446] Fix | Delete

}

[447] Fix | Delete

[448] Fix | Delete

return true;

[449] Fix | Delete

}

[450] Fix | Delete

[451] Fix | Delete

/**

[452] Fix | Delete

* Updates one plugin.

[453] Fix | Delete

[454] Fix | Delete

* @since 5.5.0

[455] Fix | Delete

[456] Fix | Delete

* @param WP_REST_Request $request Full details about the request.

[457] Fix | Delete

* @return WP_REST_Response|WP_Error Response object on success, or WP_Error object on failure.

[458] Fix | Delete

[459] Fix | Delete

public function update_item( $request ) {

[460] Fix | Delete

require_once ABSPATH . 'wp-admin/includes/plugin.php';

[461] Fix | Delete

[462] Fix | Delete

$data = $this->get_plugin_data( $request['plugin'] );

[463] Fix | Delete

[464] Fix | Delete

if ( is_wp_error( $data ) ) {

[465] Fix | Delete

return $data;

[466] Fix | Delete

}

[467] Fix | Delete

[468] Fix | Delete

$status = $this->get_plugin_status( $request['plugin'] );

[469] Fix | Delete

[470] Fix | Delete

if ( $request['status'] && $status !== $request['status'] ) {

[471] Fix | Delete

$handled = $this->handle_plugin_status( $request['plugin'], $request['status'], $status );

[472] Fix | Delete

[473] Fix | Delete

if ( is_wp_error( $handled ) ) {

[474] Fix | Delete

return $handled;

[475] Fix | Delete

}

[476] Fix | Delete

}

[477] Fix | Delete

[478] Fix | Delete

$this->update_additional_fields_for_object( $data, $request );

[479] Fix | Delete

[480] Fix | Delete

$request['context'] = 'edit';

[481] Fix | Delete

[482] Fix | Delete

return $this->prepare_item_for_response( $data, $request );

[483] Fix | Delete

}

[484] Fix | Delete

[485] Fix | Delete

/**

[486] Fix | Delete

* Checks if a given request has access to delete a specific plugin.

[487] Fix | Delete

[488] Fix | Delete

* @since 5.5.0

[489] Fix | Delete

[490] Fix | Delete

* @param WP_REST_Request $request Full details about the request.

[491] Fix | Delete

* @return true|WP_Error True if the request has access to delete the item, WP_Error object otherwise.

[492] Fix | Delete

[493] Fix | Delete

public function delete_item_permissions_check( $request ) {

[494] Fix | Delete

if ( ! current_user_can( 'activate_plugins' ) ) {

[495] Fix | Delete

return new WP_Error(

[496] Fix | Delete

'rest_cannot_manage_plugins',

[497] Fix | Delete

__( 'Sorry, you are not allowed to manage plugins for this site.' ),

[498] Fix | Delete

array( 'status' => rest_authorization_required_code() )

[499] Fix | Delete

12 3