Ticket #7860: 7860.diff

core/credits/index.php

@@ -43 +43 @@
         header( 'HTTP/1.0 400 Bad Request', true, 400 );
         die( 'Bad request.' );
 }
 
 $locale = false;
 // Convert a locale from a WP locale to a GP locale.
 if ( ( isset( $_GET['locale'] ) && 'en_US' != $_GET['locale'] ) || ( 'cli' == php_sapi_name() && isset( $argv[2] ) ) ) {
         require GLOTPRESS_LOCALES_PATH;
 
         $gp_locale = GP_Locales::by_field( 'wp_locale', isset( $argv[2] ) ? $argv[2] : $_GET['locale'] );
         if ( $gp_locale ) {
                 $locale = $gp_locale;
         }
 }
 
-$credits = WP_Credits::factory( $version, $locale );
+$wp_branch = 6.8; // Default output to 6.8
+if ( preg_match( '#WordPress/([1-9][0-9]*\.[0-9])#i', $_SERVER['HTTP_USER_AGENT'], $matches ) ) {
+        $wp_branch = (float) $matches[1];
+}
+$hash = 'sha256';
+if ( $wp_branch < 6.8 ) {
+        $hash = 'md5';
+}
+
+$credits = WP_Credits::factory( $version, $locale, $hash );
 $credits->execute();
 
 if ( 'cli' == php_sapi_name() )
         echo "\n";
 

core/credits/wp-credits.php

@@ -52 +52 @@
                 '5.5' => '2020-03-04 00:00:00',
                 '5.6' => '2020-07-28 00:00:00',
                 '5.7' => '2020-11-21 00:00:00',
                 '5.8' => '2020-02-24 00:00:00',
                 '5.9' => '2021-06-30 00:00:00',
                 '6.0' => '2022-01-04 00:00:00',
                 '6.1' => '2022-05-03 00:00:00',
                 '6.2' => '2022-10-18 00:00:00',
                 '6.3' => '2023-03-10 00:00:00',
                 '6.4' => '2023-07-19 00:00:00',
                 '6.5' => '2023-10-17 00:00:00',
                 '6.6' => '2024-03-05 00:00:00',
                 '6.7' => '2024-06-26 00:00:00',
         );
 
-        final public static function factory( $version, $gp_locale ) {
+        final public static function factory( $version, $gp_locale, $hash = 'sha256' ) {
                 $branch = intval( str_replace( '.', '', self::calculate_branch( $version ) ) );
                 $file = dirname( __FILE__ ) . '/wp-' . $branch . '.php';
                 if ( file_exists( $file ) ) {
                         require_once $file;
                         $class = 'WP_' . $branch . '_Credits';
-                        $credits = new $class( $version, $gp_locale );
+                        $credits = new $class( $version, $gp_locale, $hash );
                         return $credits;
                 } elseif ( version_compare( $branch, WP_CORE_STABLE_BRANCH, '>' ) ) {
                         // Grab latest cycle listed.
                         $cycles = self::$cycle_dates;
                         end( $cycles );
                         $branch = str_replace( '.', '', key( $cycles ) );
                         $file = dirname( __FILE__ ) . '/wp-' . $branch . '.php';
                         if ( file_exists( $file ) ) {
                                 require_once $file;
                                 $class = 'WP_' . $branch . '_Credits';
-                                $credits = new $class( WP_CORE_STABLE_BRANCH, $gp_locale );
+                                $credits = new $class( WP_CORE_STABLE_BRANCH, $gp_locale, $hash );
                                 return $credits;
                         }
                 }
                 die();
         }
 
-        private function __construct( $version, $gp_locale ) {
+        private function __construct( $version, $gp_locale, $hash ) {
                 // Don't reinitialize the object cache if the class is used in WordPress context.
                 if ( ! function_exists( 'wp_using_ext_object_cache' ) || ! wp_using_ext_object_cache() ) {
                         wp_cache_init();
                 }
 
                 $this->version = $version;
                 $this->branch  = self::calculate_branch( $this->version );
+                $this->hash    = $hash;
                 if ( $gp_locale ) {
                         $this->set_locale_data( $gp_locale );
                 }
         }
 
         private function cache_set( $key, $value ) {
                 if ( self::$set_cache ) {
                         return wp_cache_set( $key, $value, self::cache_group, self::cache_life );
                 }
                 return false;
         }
 
         private function cache_get( $key ) {
                 if ( self::$use_cache ) {
                         return wp_cache_get( $key, self::cache_group );
@@ -209 +210 @@
         private function _grab_validators( $gp_locale, $path ) {
                 global $wpdb;
                 $users = $this->grab_validators( $gp_locale, $path );
 
                 if ( ! $users )
                         return array();
 
                 $validator_data = $wpdb->get_results( "SELECT user_nicename, display_name, user_email FROM $wpdb->users WHERE ID IN (" . implode( ',', $users ) . ")" );
 
                 $validators = array();
 
                 foreach ( $validator_data as $user ) {
                         if ( $user->user_nicename == 'nacin' ) // I stopped taking Spanish in 11th grade, don't show me as a validator when I'm testing things.
                                 continue;
                         if ( $user->display_name && $user->display_name != $user->user_nicename && false === strpos( $user->display_name , '?') )
-                                $validators[ $user->user_nicename ] = array( $this->_encode( $user->display_name ), md5( $user->user_email ), $user->user_nicename );
+                                $validators[ $user->user_nicename ] = array( $this->_encode( $user->display_name ), $this->hash( $user->user_email ), $user->user_nicename );
                         else
-                                $validators[ $user->user_nicename ] = array( $user->user_nicename, md5( $user->user_email ), $user->user_nicename );
+                                $validators[ $user->user_nicename ] = array( $user->user_nicename, $this->hash( $user->user_email ), $user->user_nicename );
                 }
 
                 return $validators;
         }
 
         protected function grab_validators( $gp_locale, $path ) {
                 global $wpdb;
 
                 $path = 'wp/' . $path;
                 $path = like_escape( $path ) . '%';
 
                 $project_ids = $wpdb->get_col( "SELECT `id` FROM `translate_projects` WHERE ( `path` LIKE '$path' OR `path` = 'wp' ) AND `active` = 1" ); // Project validators
                 if ( ! $project_ids ) {
                         $project_ids = array();
                 }
@@ -287 +288 @@
                 if ( isset( $this->groups ) )
                         return $this->groups;
 
                 $groups = $this->groups();
                 $fetch_emails_from_user_cache = $fetch_emails_from_db = array();
 
                 foreach ( $groups as $group_slug => $group_data ) {
                         if ( 'list' == $group_data['type'] )
                                 continue;
                         foreach ( $group_data['data'] as $k => $person ) {
                                 $person = (array) $person;
                                 $new_data = array( 'name' => $person[0], 'hash' => '', 'username' => $k, 'title' => '' );
                                 $this->names_in_groups[] = strtolower( $k );
 
                                 if ( ! empty( $person[2] ) ) {
-                                        // array( 'Andrew Nacin', 'Lead Developer', 'md5 hash' )
+                                        // array( 'Andrew Nacin', 'Lead Developer', 'gravatar hash' )
                                         $new_data['title'] = $person[1];
                                         $new_data['hash'] = $person[2];
                                 } elseif ( empty( $person[1] ) ) {
                                         // array( 'Andrew Nacin' )
                                         $fetch_emails_from_user_cache[ $k ] = $group_slug;
-                                } elseif ( strlen( $person[1] ) === 32 && preg_match('/^[a-f0-9]{32}$/', $person[1] ) ) {
-                                        // array( 'Andrew Nacin', 'md5 hash' )
+                                } elseif ( $this->is_hashed( $person[1] ) ) {
+                                        // array( 'Andrew Nacin', 'gravatar hash' )
                                         $new_data['hash'] = $person[1];
                                 } else {
                                         // array( 'Andrew Nacin', 'Lead Developer' )
                                         $new_data['title'] = $person[1];
                                         $fetch_emails_from_user_cache[ $k ] = $group_slug;
                                 }
 
                                 // Temporary:
-                                if ( strlen( $new_data['hash'] ) != 32 || strpos( $new_data['hash'], '@' ) ) {
-                                        $new_data['hash'] = md5( $new_data['hash'] );
+                                if ( ! $this->is_hashed( $new_data['hash'] ) ) {
+                                        $new_data['hash'] = $this->hash( $new_data['hash'] );
                                 }
 
                                 $group_data['data'][ $k ] = array_values( $new_data );
                         }
 
                         $groups[ $group_slug ]['data'] = $group_data['data'];
                 }
 
                 if ( $fetch_emails_from_user_cache ) {
                         foreach ( $fetch_emails_from_user_cache as $username => $group ) {
                                 $user_id = wp_cache_get( $username, 'userlogins' );
                                 if ( $user_id ) {
                                         if ( $user_object = wp_cache_get( $user_id, 'users' ) ) {
-                                                $groups[ $group ]['data'][ $username ][1] = md5( strtolower( $user_object->user_email ) );
+                                                $groups[ $group ]['data'][ $username ][1] = $this->hash( $user_object->user_email );
                                         } else {
                                                 $fetch_emails_from_db[ $username ] = $group;
                                         }
                                 } else {
                                         $fetch_emails_from_db[ $username ] = $group;
                                 }
                         }
                         if ( $fetch_emails_from_db ) {
                                 $fetched = $wpdb->get_results( "SELECT user_login, ID, user_email FROM $wpdb->users WHERE user_login IN ('" . implode( "', '", array_keys( $fetch_emails_from_db ) ) . "')", OBJECT_K );
                                 foreach ( $fetched as $username => $row ) {
-                                        $groups[ $fetch_emails_from_db[ $username ] ]['data'][ $username ][1] = md5( strtolower( $row->user_email ) );
+                                        $groups[ $fetch_emails_from_db[ $username ] ]['data'][ $username ][1] = $this->hash( $row->user_email );
                                         wp_cache_add( $username, $row->ID, 'userlogins' );
                                 }
                         }
                 }
 
                 $this->groups = $groups;
                 return $groups;
         }
 
         private function _props() {
                 global $wpdb;
                 $props = $this->cache_get( 'props-' . $this->version );
                 if ( $props !== false )
                         return $props;
 
@@ -433 +434 @@
                 return compact( 'groups', 'data' );
         }
 
         final public function execute() {
                 $results = $this->get_results();
 
                 if ( 'cli' === php_sapi_name() ) {
                         print_r( $results );
                 } elseif ( defined( 'JSON_RESPONSE' ) && JSON_RESPONSE ) {
                         echo json_encode( $results );
                 } else {
                         echo serialize( $results );
                 }
         }
 
+        private function is_hashed( $maybe_hash ) {
+                if (
+                        ! is_string( $maybe_hash ) ||
+                        str_contains( $maybe_hash, '@' )
+                ) {
+                        return false;
+                }
+
+                switch ( strlen( $maybe_hash ) ) {
+                        case 32:
+                                return preg_match( '/^[a-f0-9]{32}$/', $maybe_hash );
+                        case 64:
+                                return preg_match( '/^[a-f0-9]{64}$/', $maybe_hash );
+                }
+
+                return false;
+        }
+
+        private function hash( $email ) {
+                if ( 'sha256' == $this->hash ) {
+                        return hash( 'sha256', strtolower( $email ) );
+                }
+
+                return md5( strtolower( $email ) );
+        }
+
 }