Edit File by line

<?php

[0] Fix | Delete

/**

[1] Fix | Delete

* Confirms that the activation key that is sent in an email after a user signs

[2] Fix | Delete

* up for a new site matches the key for that user and then displays confirmation.

[3] Fix | Delete

[4] Fix | Delete

* @package WordPress

[5] Fix | Delete

[6] Fix | Delete

[7] Fix | Delete

define( 'WP_INSTALLING', true );

[8] Fix | Delete

[9] Fix | Delete

/** Sets up the WordPress Environment. */

[10] Fix | Delete

require __DIR__ . '/wp-load.php';

[11] Fix | Delete

[12] Fix | Delete

require __DIR__ . '/wp-blog-header.php';

[13] Fix | Delete

[14] Fix | Delete

if ( ! is_multisite() ) {

[15] Fix | Delete

wp_redirect( wp_registration_url() );

[16] Fix | Delete

die();

[17] Fix | Delete

}

[18] Fix | Delete

[19] Fix | Delete

$valid_error_codes = array( 'already_active', 'blog_taken' );

[20] Fix | Delete

[21] Fix | Delete

list( $activate_path ) = explode( '?', wp_unslash( $_SERVER['REQUEST_URI'] ) );

[22] Fix | Delete

$activate_cookie = 'wp-activate-' . COOKIEHASH;

[23] Fix | Delete

[24] Fix | Delete

$key = '';

[25] Fix | Delete

$result = null;

[26] Fix | Delete

[27] Fix | Delete

if ( isset( $_GET['key'] ) && isset( $_POST['key'] ) && $_GET['key'] !== $_POST['key'] ) {

[28] Fix | Delete

wp_die( __( 'A key value mismatch has been detected. Please follow the link provided in your activation email.' ), __( 'An error occurred during the activation' ), 400 );

[29] Fix | Delete

} elseif ( ! empty( $_GET['key'] ) ) {

[30] Fix | Delete

$key = sanitize_text_field( $_GET['key'] );

[31] Fix | Delete

} elseif ( ! empty( $_POST['key'] ) ) {

[32] Fix | Delete

$key = sanitize_text_field( $_POST['key'] );

[33] Fix | Delete

}

[34] Fix | Delete

[35] Fix | Delete

if ( $key ) {

[36] Fix | Delete

$redirect_url = remove_query_arg( 'key' );

[37] Fix | Delete

[38] Fix | Delete

if ( remove_query_arg( false ) !== $redirect_url ) {

[39] Fix | Delete

setcookie( $activate_cookie, $key, 0, $activate_path, COOKIE_DOMAIN, is_ssl(), true );

[40] Fix | Delete

wp_safe_redirect( $redirect_url );

[41] Fix | Delete

exit;

[42] Fix | Delete

} else {

[43] Fix | Delete

$result = wpmu_activate_signup( $key );

[44] Fix | Delete

}

[45] Fix | Delete

}

[46] Fix | Delete

[47] Fix | Delete

if ( null === $result && isset( $_COOKIE[ $activate_cookie ] ) ) {

[48] Fix | Delete

$key = $_COOKIE[ $activate_cookie ];

[49] Fix | Delete

$result = wpmu_activate_signup( $key );

[50] Fix | Delete

setcookie( $activate_cookie, ' ', time() - YEAR_IN_SECONDS, $activate_path, COOKIE_DOMAIN, is_ssl(), true );

[51] Fix | Delete

}

[52] Fix | Delete

[53] Fix | Delete

if ( null === $result || ( is_wp_error( $result ) && 'invalid_key' === $result->get_error_code() ) ) {

[54] Fix | Delete

status_header( 404 );

[55] Fix | Delete

} elseif ( is_wp_error( $result ) ) {

[56] Fix | Delete

$error_code = $result->get_error_code();

[57] Fix | Delete

[58] Fix | Delete

if ( ! in_array( $error_code, $valid_error_codes, true ) ) {

[59] Fix | Delete

status_header( 400 );

[60] Fix | Delete

}

[61] Fix | Delete

}

[62] Fix | Delete

[63] Fix | Delete

nocache_headers();

[64] Fix | Delete

[65] Fix | Delete

// Fix for page title.

[66] Fix | Delete

$wp_query->is_404 = false;

[67] Fix | Delete

[68] Fix | Delete

/**

[69] Fix | Delete

* Fires before the Site Activation page is loaded.

[70] Fix | Delete

[71] Fix | Delete

* @since 3.0.0

[72] Fix | Delete

[73] Fix | Delete

do_action( 'activate_header' );

[74] Fix | Delete

[75] Fix | Delete

/**

[76] Fix | Delete

* Adds an action hook specific to this page.

[77] Fix | Delete

[78] Fix | Delete

* Fires on {@see 'wp_head'}.

[79] Fix | Delete

[80] Fix | Delete

* @since MU (3.0.0)

[81] Fix | Delete

[82] Fix | Delete

function do_activate_header() {

[83] Fix | Delete

/**

[84] Fix | Delete

* Fires within the `<head>` section of the Site Activation page.

[85] Fix | Delete

[86] Fix | Delete

* Fires on the {@see 'wp_head'} action.

[87] Fix | Delete

[88] Fix | Delete

* @since 3.0.0

[89] Fix | Delete

[90] Fix | Delete

do_action( 'activate_wp_head' );

[91] Fix | Delete

}

[92] Fix | Delete

add_action( 'wp_head', 'do_activate_header' );

[93] Fix | Delete

[94] Fix | Delete

/**

[95] Fix | Delete

* Loads styles specific to this page.

[96] Fix | Delete

[97] Fix | Delete

* @since MU (3.0.0)

[98] Fix | Delete

[99] Fix | Delete

function wpmu_activate_stylesheet() {

[100] Fix | Delete

[101] Fix | Delete

[102] Fix | Delete

.wp-activate-container { width: 90%; margin: 0 auto; }

[103] Fix | Delete

.wp-activate-container form { margin-top: 2em; }

[104] Fix | Delete

#submit, #key { width: 100%; font-size: 24px; box-sizing: border-box; }

[105] Fix | Delete

#language { margin-top: 0.5em; }

[106] Fix | Delete

.wp-activate-container .error { background: #f66; color: #333; }

[107] Fix | Delete

span.h3 { padding: 0 8px; font-size: 1.3em; font-weight: 600; }

[108] Fix | Delete

</style>

[109] Fix | Delete

<?php

[110] Fix | Delete

}

[111] Fix | Delete

add_action( 'wp_head', 'wpmu_activate_stylesheet' );

[112] Fix | Delete

add_action( 'wp_head', 'wp_strict_cross_origin_referrer' );

[113] Fix | Delete

add_filter( 'wp_robots', 'wp_robots_sensitive_page' );

[114] Fix | Delete

[115] Fix | Delete

get_header( 'wp-activate' );

[116] Fix | Delete

[117] Fix | Delete

$blog_details = get_site();

[118] Fix | Delete

[119] Fix | Delete

[120] Fix | Delete

[121] Fix | Delete

[122] Fix | Delete

<?php if ( ! $key ) { ?>

[123] Fix | Delete

[124] Fix | Delete

[125] Fix | Delete

<form name="activateform" id="activateform" method="post" action="<?php echo esc_url( network_site_url( $blog_details->path . 'wp-activate.php' ) ); ?>">

[126] Fix | Delete

<p>

[127] Fix | Delete

[128] Fix | Delete

[129] Fix | Delete

</p>

[130] Fix | Delete

[131] Fix | Delete

[132] Fix | Delete

</p>

[133] Fix | Delete

</form>

[134] Fix | Delete

[135] Fix | Delete

<?php

[136] Fix | Delete

} else {

[137] Fix | Delete

if ( is_wp_error( $result ) && in_array( $result->get_error_code(), $valid_error_codes, true ) ) {

[138] Fix | Delete

$signup = $result->get_error_data();

[139] Fix | Delete

[140] Fix | Delete

[141] Fix | Delete

<?php

[142] Fix | Delete

echo '<p class="lead-in">';

[143] Fix | Delete

if ( '' === $signup->domain . $signup->path ) {

[144] Fix | Delete

printf(

[145] Fix | Delete

/* translators: 1: Login URL, 2: Username, 3: User email address, 4: Lost password URL. */

[146] Fix | Delete

__( 'Your account has been activated. You may now <a href="%1$s">log in</a> to the site using your chosen username of “%2$s”. Please check your email inbox at %3$s for your password and login instructions. If you do not receive an email, please check your junk or spam folder. If you still do not receive an email within an hour, you can <a href="%4$s">reset your password</a>.' ),

[147] Fix | Delete

esc_url( network_site_url( $blog_details->path . 'wp-login.php', 'login' ) ),

[148] Fix | Delete

esc_html( $signup->user_login ),

[149] Fix | Delete

esc_html( $signup->user_email ),

[150] Fix | Delete

esc_url( wp_lostpassword_url() )

[151] Fix | Delete

);

[152] Fix | Delete

} else {

[153] Fix | Delete

printf(

[154] Fix | Delete

/* translators: 1: Site URL, 2: Username, 3: User email address, 4: Lost password URL. */

[155] Fix | Delete

__( 'Your site at %1$s is active. You may now log in to your site using your chosen username of “%2$s”. Please check your email inbox at %3$s for your password and login instructions. If you do not receive an email, please check your junk or spam folder. If you still do not receive an email within an hour, you can <a href="%4$s">reset your password</a>.' ),

[156] Fix | Delete

sprintf( '<a href="http://%1$s">%1$s</a>', esc_url( $signup->domain . $blog_details->path ) ),

[157] Fix | Delete

esc_html( $signup->user_login ),

[158] Fix | Delete

esc_html( $signup->user_email ),

[159] Fix | Delete

esc_url( wp_lostpassword_url() )

[160] Fix | Delete

);

[161] Fix | Delete

}

[162] Fix | Delete

echo '</p>';

[163] Fix | Delete

} elseif ( null === $result || is_wp_error( $result ) ) {

[164] Fix | Delete

[165] Fix | Delete

[166] Fix | Delete

<?php if ( is_wp_error( $result ) ) : ?>

[167] Fix | Delete

<p><?php echo esc_html( $result->get_error_message() ); ?></p>

[168] Fix | Delete

<?php endif; ?>

[169] Fix | Delete

<?php

[170] Fix | Delete

} else {

[171] Fix | Delete

$url = isset( $result['blog_id'] ) ? esc_url( get_home_url( (int) $result['blog_id'] ) ) : '';

[172] Fix | Delete

$user = get_userdata( (int) $result['user_id'] );

[173] Fix | Delete

[174] Fix | Delete

[175] Fix | Delete

[176] Fix | Delete

[177] Fix | Delete

<p><span class="h3"><?php _e( 'Username:' ); ?></span> <?php echo esc_html( $user->user_login ); ?></p>

[178] Fix | Delete

[179] Fix | Delete

</div>

[180] Fix | Delete

[181] Fix | Delete

<?php

[182] Fix | Delete

if ( $url && network_home_url( '', 'http' ) !== $url ) :

[183] Fix | Delete

switch_to_blog( (int) $result['blog_id'] );

[184] Fix | Delete

$login_url = wp_login_url();

[185] Fix | Delete

restore_current_blog();

[186] Fix | Delete

[187] Fix | Delete

[188] Fix | Delete

<?php

[189] Fix | Delete

/* translators: 1: Site URL, 2: Login URL. */

[190] Fix | Delete

printf( __( 'Your account is now activated. <a href="%1$s">View your site</a> or <a href="%2$s">Log in</a>' ), esc_url( $url ), esc_url( $login_url ) );

[191] Fix | Delete

[192] Fix | Delete

</p>

[193] Fix | Delete

<?php else : ?>

[194] Fix | Delete

[195] Fix | Delete

<?php

[196] Fix | Delete

printf(

[197] Fix | Delete

/* translators: 1: Login URL, 2: Network home URL. */

[198] Fix | Delete

__( 'Your account is now activated. <a href="%1$s">Log in</a> or go back to the <a href="%2$s">homepage</a>.' ),

[199] Fix | Delete

esc_url( network_site_url( $blog_details->path . 'wp-login.php', 'login' ) ),

[200] Fix | Delete

esc_url( network_home_url( $blog_details->path ) )

[201] Fix | Delete

);

[202] Fix | Delete

[203] Fix | Delete

</p>

[204] Fix | Delete

<?php

[205] Fix | Delete

endif;

[206] Fix | Delete

}

[207] Fix | Delete

}

[208] Fix | Delete

[209] Fix | Delete

</div>

[210] Fix | Delete

</div>

[211] Fix | Delete

<?php

[212] Fix | Delete

get_footer( 'wp-activate' );

[213] Fix | Delete

[214] Fix | Delete