wp_ajax_install_plugin()

Uses · 19

• check_ajax_referer()Verifies the Ajax request to prevent processing requests external of the blog.
• wp_send_json_error()Sends a JSON response back to an Ajax request, indicating failure.
• __()Retrieves the translation of $text.
• sanitize_key()Sanitizes a string key.
• wp_unslash()Removes slashes from a string or recursively removes slashes from strings within an array.
• current_user_can()Returns whether the current user has the specified capability.
• plugins_api()Retrieves plugin installer pages from the WordPress.org Plugins API.
• is_wp_error()Checks whether the given variable is a WordPress Error.
• esc_html()Escaping for HTML blocks.
• install_plugin_install_status()Determines the status we can perform on a plugin.
• admin_url()Retrieves the URL to the admin area for the current site.
• network_admin_url()Retrieves the URL to the admin area for the network.

Source

View on Trac ↗View on GitHub ↗

4449function wp_ajax_install_plugin() {4450	check_ajax_referer( 'updates' );4451 4452	if ( empty( $_POST['slug'] ) ) {4453		wp_send_json_error(4454			array(4455				'slug'         => '',4456				'errorCode'    => 'no_plugin_specified',4457				'errorMessage' => __( 'No plugin specified.' ),4458			)4459		);4460	}4461 4462	$status = array(4463		'install' => 'plugin',4464		'slug'    => sanitize_key( wp_unslash( $_POST['slug'] ) ),4465	);4466 4467	if ( ! current_user_can( 'install_plugins' ) ) {4468		$status['errorMessage'] = __( 'Sorry, you are not allowed to install plugins on this site.' );4469		wp_send_json_error( $status );4470	}4471 4472	require_once ABSPATH . 'wp-admin/includes/class-wp-upgrader.php';4473	require_once ABSPATH . 'wp-admin/includes/plugin-install.php';4474 4475	$api = plugins_api(4476		'plugin_information',4477		array(4478			'slug'   => sanitize_key( wp_unslash( $_POST['slug'] ) ),4479			'fields' => array(4480				'sections' => false,4481			),4482		)4483	);4484 4485	if ( is_wp_error( $api ) ) {4486		$status['errorMessage'] = $api->get_error_message();4487		wp_send_json_error( $status );4488	}4489 4490	$status['pluginName'] = $api->name;4491 4492	$skin     = new WP_Ajax_Upgrader_Skin();4493	$upgrader = new Plugin_Upgrader( $skin );4494	$result   = $upgrader->install( $api->download_link );4495 4496	if ( defined( 'WP_DEBUG' ) && WP_DEBUG ) {4497		$status['debug'] = $skin->get_upgrade_messages();4498	}4499 4500	if ( is_wp_error( $result ) ) {4501		$status['errorCode']    = $result->get_error_code();4502		$status['errorMessage'] = $result->get_error_message();4503		wp_send_json_error( $status );4504	} elseif ( is_wp_error( $skin->result ) ) {4505		$status['errorCode']    = $skin->result->get_error_code();4506		$status['errorMessage'] = $skin->result->get_error_message();4507		wp_send_json_error( $status );4508	} elseif ( $skin->get_errors()->has_errors() ) {4509		$status['errorMessage'] = $skin->get_error_messages();4510		wp_send_json_error( $status );4511	} elseif ( is_null( $result ) ) {4512		global $wp_filesystem;4513 4514		$status['errorCode']    = 'unable_to_connect_to_filesystem';4515		$status['errorMessage'] = __( 'Unable to connect to the filesystem. Please confirm your credentials.' );4516 4517		// Pass through the error from WP_Filesystem if one was raised.4518		if ( $wp_filesystem instanceof WP_Filesystem_Base && is_wp_error( $wp_filesystem->errors ) && $wp_filesystem->errors->has_errors() ) {4519			$status['errorMessage'] = esc_html( $wp_filesystem->errors->get_error_message() );4520		}4521 4522		wp_send_json_error( $status );4523	}4524 4525	$install_status = install_plugin_install_status( $api );4526	$pagenow        = isset( $_POST['pagenow'] ) ? sanitize_key( $_POST['pagenow'] ) : '';4527 4528	// If installation request is coming from import page, do not return network activation link.

History

Introduced in 4.6.0. Unchanged from 6.7.7 through 7.1.0.

1. 6.7.7
2. 6.8.8
3. 6.9.7
4. 7.0.4
5. 7.1.0

Signature, return type and hooks compared across 5 parsed releases.

About this page

Parsed data

Generated from the wordpress-develop 6.8.8 tag, from src/wp-admin/includes/ajax-actions.php, and regenerated for each WordPress release so it tracks the code rather than a snapshot of it.

Corrections

Something wrong on this page? Report it and it gets fixed in the next regeneration.