WordPress/wp-admin/ms-delete-site.php
Felix Arntz 4e167c593d Options, Meta APIs: Explicitly pass $autoload parameter to when potentially adding new options.
It is recommended that for every option it is explicitly set whether to autoload it or not. This changeset updates relevant `update_option()` and `add_option()` calls.

Note that the `$autoload` parameter is only needed for `update_option()` if the option is potentially not present yet, i.e. the call will pass through to `add_option()`. Since WordPress core adds the majority of its options to the database during installation, only `update_option()` calls for dynamically added options need to be modified, which is what this changeset does.

As part of revisiting the autoload values for dynamically added WordPress core options, this changeset modifies some options to no longer be autoloaded, since they are only accessed in a few specific places that are not relevant for a regular request. These options are:
* `recently_activated`
* `_wp_suggested_policy_text_has_changed`
* `{upgradeLock}.lock`
* `dashboard_widget_options`
* `ftp_credentials`
* `adminhash`
* `nav_menu_options`
* `wp_force_deactivated_plugins`
* `delete_blog_hash`
* `allowedthemes`
* `{sessionId}_paused_extensions`
* `recovery_keys`
* `https_detection_errors`
* `fresh_site`

An upgrade routine is present as well that sets those options to no longer autoload for existing sites.

Props pbearne, flixos90, mukesh27, swissspidy, SergeyBiryukov, joemcgill, adamsilverstein.
Fixes #61103.

Built from https://develop.svn.wordpress.org/trunk@58975


git-svn-id: http://core.svn.wordpress.org/trunk@58371 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2024-09-03 18:19:14 +00:00

139 lines
4.2 KiB
PHP

<?php
/**
* Multisite delete site panel.
*
* @package WordPress
* @subpackage Multisite
* @since 3.0.0
*/
require_once __DIR__ . '/admin.php';
if ( ! is_multisite() ) {
wp_die( __( 'Multisite support is not enabled.' ) );
}
if ( ! current_user_can( 'delete_site' ) ) {
wp_die( __( 'Sorry, you are not allowed to delete this site.' ) );
}
if ( isset( $_GET['h'] ) && '' !== $_GET['h'] && false !== get_option( 'delete_blog_hash' ) ) {
if ( hash_equals( get_option( 'delete_blog_hash' ), $_GET['h'] ) ) {
wpmu_delete_blog( get_current_blog_id() );
wp_die(
sprintf(
/* translators: %s: Network title. */
__( 'Thank you for using %s, your site has been deleted. Happy trails to you until we meet again.' ),
get_network()->site_name
)
);
} else {
wp_die( __( 'Sorry, the link you clicked is stale. Please select another option.' ) );
}
}
$blog = get_site();
$user = wp_get_current_user();
// Used in the HTML title tag.
$title = __( 'Delete Site' );
$parent_file = 'tools.php';
require_once ABSPATH . 'wp-admin/admin-header.php';
echo '<div class="wrap">';
echo '<h1>' . esc_html( $title ) . '</h1>';
if ( isset( $_POST['action'] ) && 'deleteblog' === $_POST['action'] && isset( $_POST['confirmdelete'] ) && '1' === $_POST['confirmdelete'] ) {
check_admin_referer( 'delete-blog' );
$hash = wp_generate_password( 20, false );
update_option( 'delete_blog_hash', $hash, false );
$url_delete = esc_url( admin_url( 'ms-delete-site.php?h=' . $hash ) );
$switched_locale = switch_to_locale( get_locale() );
/* translators: Do not translate USERNAME, URL_DELETE, SITENAME, SITEURL: those are placeholders. */
$content = __(
"Howdy ###USERNAME###,
You recently clicked the 'Delete Site' link on your site and filled in a
form on that page.
If you really want to delete your site, click the link below. You will not
be asked to confirm again so only click this link if you are absolutely certain:
###URL_DELETE###
If you delete your site, please consider opening a new site here some time in
the future! (But remember that your current site and username are gone forever.)
Thank you for using the site,
All at ###SITENAME###
###SITEURL###"
);
/**
* Filters the text for the email sent to the site admin when a request to delete a site in a Multisite network is submitted.
*
* @since 3.0.0
*
* @param string $content The email text.
*/
$content = apply_filters( 'delete_site_email_content', $content );
$content = str_replace( '###USERNAME###', $user->user_login, $content );
$content = str_replace( '###URL_DELETE###', $url_delete, $content );
$content = str_replace( '###SITENAME###', get_network()->site_name, $content );
$content = str_replace( '###SITEURL###', network_home_url(), $content );
wp_mail(
get_option( 'admin_email' ),
sprintf(
/* translators: %s: Site title. */
__( '[%s] Delete My Site' ),
wp_specialchars_decode( get_option( 'blogname' ) )
),
$content
);
if ( $switched_locale ) {
restore_previous_locale();
}
?>
<p><?php _e( 'Thank you. Please check your email for a link to confirm your action. Your site will not be deleted until this link is clicked.' ); ?></p>
<?php
} else {
?>
<p>
<?php
printf(
/* translators: %s: Network title. */
__( 'If you do not want to use your %s site any more, you can delete it using the form below. When you click <strong>Delete My Site Permanently</strong> you will be sent an email with a link in it. Click on this link to delete your site.' ),
get_network()->site_name
);
?>
</p>
<p><?php _e( 'Remember, once deleted your site cannot be restored.' ); ?></p>
<form method="post" name="deletedirect">
<?php wp_nonce_field( 'delete-blog' ); ?>
<input type="hidden" name="action" value="deleteblog" />
<p><input id="confirmdelete" type="checkbox" name="confirmdelete" value="1" /> <label for="confirmdelete"><strong>
<?php
printf(
/* translators: %s: Site address. */
__( "I'm sure I want to permanently delete my site, and I am aware I can never get it back or use %s again." ),
$blog->domain . $blog->path
);
?>
</strong></label></p>
<?php submit_button( __( 'Delete My Site Permanently' ) ); ?>
</form>
<?php
}
echo '</div>';
require_once ABSPATH . 'wp-admin/admin-footer.php';