* A simple set of functions to check our version 1.0 update service.
* Check WordPress version against the newest version.
* The WordPress version, PHP version, and locale is sent.
* Checks against the WordPress server at api.wordpress.org. Will only check
* if WordPress isn't installing.
* @global string $wp_version Used to check against the newest WordPress version.
* @global wpdb $wpdb WordPress database abstraction object.
* @global string $wp_local_package Locale code of the package.
* @param array $extra_stats Extra statistics to report to the WordPress.org API.
* @param bool $force_check Whether to bypass the transient cache and force a fresh update check. Defaults to false, true if $extra_stats is set.
function wp_version_check( $extra_stats = array(), $force_check = false ) {
global $wpdb, $wp_local_package;
// Include an unmodified $wp_version.
require ABSPATH . WPINC . '/version.php';
$php_version = phpversion();
$current = get_site_transient( 'update_core' );
$translations = wp_get_installed_translations( 'core' );
// Invalidate the transient when $wp_version changes.
if ( is_object( $current ) && $wp_version !== $current->version_checked ) {
if ( ! is_object( $current ) ) {
$current->updates = array();
$current->version_checked = $wp_version;
if ( ! empty( $extra_stats ) ) {
// Wait 1 minute between multiple version check requests.
$timeout = MINUTE_IN_SECONDS;
$time_not_changed = isset( $current->last_checked ) && $timeout > ( time() - $current->last_checked );
if ( ! $force_check && $time_not_changed ) {
* Filters the locale requested for WordPress core translations.
* @param string $locale Current locale.
$locale = apply_filters( 'core_version_check_locale', get_locale() );
// Update last_checked for current to prevent multiple blocking requests if request hangs.
$current->last_checked = time();
set_site_transient( 'update_core', $current );
if ( method_exists( $wpdb, 'db_version' ) ) {
$mysql_version = preg_replace( '/[^0-9.].*/', '', $wpdb->db_version() );
$user_count = get_user_count();
$num_blogs = get_blog_count();
$wp_install = network_site_url();
$user_count = count_users();
$user_count = $user_count['total_users'];
$wp_install = home_url( '/' );
'version' => $wp_version,
'mysql' => $mysql_version,
'local_package' => isset( $wp_local_package ) ? $wp_local_package : '',
'multisite_enabled' => $multisite_enabled,
'initial_db_version' => get_site_option( 'initial_db_version' ),
* Filters the query arguments sent as part of the core version check.
* WARNING: Changing this data may result in your site not receiving security updates.
* Please exercise extreme caution.
* Version check query arguments.
* @type string $version WordPress version number.
* @type string $php PHP version number.
* @type string $locale The locale to retrieve updates for.
* @type string $mysql MySQL version number.
* @type string $local_package The value of the $wp_local_package global, when set.
* @type int $blogs Number of sites on this WordPress installation.
* @type int $users Number of users on this WordPress installation.
* @type int $multisite_enabled Whether this WordPress installation uses Multisite.
* @type int $initial_db_version Database version of WordPress at time of installation.
$query = apply_filters( 'core_version_check_query_args', $query );
'translations' => wp_json_encode( $translations ),
if ( is_array( $extra_stats ) ) {
$post_body = array_merge( $post_body, $extra_stats );
// Allow for WP_AUTO_UPDATE_CORE to specify beta/RC/development releases.
if ( defined( 'WP_AUTO_UPDATE_CORE' )
&& in_array( WP_AUTO_UPDATE_CORE, array( 'beta', 'rc', 'development', 'branch-development' ), true )
$query['channel'] = WP_AUTO_UPDATE_CORE;
$url = 'http://api.wordpress.org/core/version-check/1.7/?' . http_build_query( $query, null, '&' );
$ssl = wp_http_supports( array( 'ssl' ) );
$url = set_url_scheme( $url, 'https' );
$doing_cron = wp_doing_cron();
'timeout' => $doing_cron ? 30 : 3,
'user-agent' => 'WordPress/' . $wp_version . '; ' . home_url( '/' ),
'wp_install' => $wp_install,
'wp_blog' => home_url( '/' ),
$response = wp_remote_post( $url, $options );
if ( $ssl && is_wp_error( $response ) ) {
/* translators: %s: Support forums URL. */
__( 'An unexpected error occurred. Something may be wrong with WordPress.org or this server’s configuration. If you continue to have problems, please try the <a href="%s">support forums</a>.' ),
__( 'https://wordpress.org/support/forums/' )
) . ' ' . __( '(WordPress could not establish a secure connection to WordPress.org. Please contact your server administrator.)' ),
headers_sent() || WP_DEBUG ? E_USER_WARNING : E_USER_NOTICE
$response = wp_remote_post( $http_url, $options );
if ( is_wp_error( $response ) || 200 !== wp_remote_retrieve_response_code( $response ) ) {
$body = trim( wp_remote_retrieve_body( $response ) );
$body = json_decode( $body, true );
if ( ! is_array( $body ) || ! isset( $body['offers'] ) ) {
$offers = $body['offers'];
foreach ( $offers as &$offer ) {
foreach ( $offer as $offer_key => $value ) {
if ( 'packages' === $offer_key ) {
$offer['packages'] = (object) array_intersect_key(
array_map( 'esc_url', $offer['packages'] ),
array_fill_keys( array( 'full', 'no_content', 'new_bundled', 'partial', 'rollback' ), '' )
} elseif ( 'download' === $offer_key ) {
$offer['download'] = esc_url( $value );
$offer[ $offer_key ] = esc_html( $value );
$offer = (object) array_intersect_key(
$updates = new stdClass();
$updates->updates = $offers;
$updates->last_checked = time();
$updates->version_checked = $wp_version;
if ( isset( $body['translations'] ) ) {
$updates->translations = $body['translations'];
set_site_transient( 'update_core', $updates );
if ( ! empty( $body['ttl'] ) ) {
$ttl = (int) $body['ttl'];
if ( $ttl && ( time() + $ttl < wp_next_scheduled( 'wp_version_check' ) ) ) {
// Queue an event to re-run the update check in $ttl seconds.
wp_schedule_single_event( time() + $ttl, 'wp_version_check' );
// Trigger background updates if running non-interactively, and we weren't called from the update handler.
if ( $doing_cron && ! doing_action( 'wp_maybe_auto_update' ) ) {
* Fires during wp_cron, starting the auto-update process.
do_action( 'wp_maybe_auto_update' );
* Checks for available updates to plugins based on the latest versions hosted on WordPress.org.
* Despite its name this function does not actually perform any updates, it only checks for available updates.
* A list of all plugins installed is sent to WP, along with the site locale.
* Checks against the WordPress server at api.wordpress.org. Will only check
* if WordPress isn't installing.
* @global string $wp_version The WordPress version string.
* @param array $extra_stats Extra statistics to report to the WordPress.org API.
function wp_update_plugins( $extra_stats = array() ) {
// Include an unmodified $wp_version.
require ABSPATH . WPINC . '/version.php';
// If running blog-side, bail unless we've not checked in the last 12 hours.
if ( ! function_exists( 'get_plugins' ) ) {
require_once ABSPATH . 'wp-admin/includes/plugin.php';
$plugins = get_plugins();
$translations = wp_get_installed_translations( 'plugins' );
$active = get_option( 'active_plugins', array() );
$current = get_site_transient( 'update_plugins' );
if ( ! is_object( $current ) ) {
$new_option = new stdClass;
$new_option->last_checked = time();
$doing_cron = wp_doing_cron();
// Check for update on a different schedule, depending on the page.
switch ( current_filter() ) {
case 'upgrader_process_complete':
case 'load-update-core.php':
$timeout = MINUTE_IN_SECONDS;
$timeout = HOUR_IN_SECONDS;
$timeout = 2 * HOUR_IN_SECONDS;
$timeout = 12 * HOUR_IN_SECONDS;
$time_not_changed = isset( $current->last_checked ) && $timeout > ( time() - $current->last_checked );
if ( $time_not_changed && ! $extra_stats ) {
foreach ( $plugins as $file => $p ) {
$new_option->checked[ $file ] = $p['Version'];
if ( ! isset( $current->checked[ $file ] ) || (string) $current->checked[ $file ] !== (string) $p['Version'] ) {
if ( isset( $current->response ) && is_array( $current->response ) ) {
foreach ( $current->response as $plugin_file => $update_details ) {
if ( ! isset( $plugins[ $plugin_file ] ) ) {
// Bail if we've checked recently and if nothing has changed.
if ( ! $plugin_changed ) {
// Update last_checked for current to prevent multiple blocking requests if request hangs.
$current->last_checked = time();
set_site_transient( 'update_plugins', $current );
$to_send = compact( 'plugins', 'active' );
$locales = array_values( get_available_languages() );
* Filters the locales requested for plugin translations.
* @since 4.5.0 The default value of the `$locales` parameter changed to include all locales.
* @param array $locales Plugin locales. Default is all available locales of the site.
$locales = apply_filters( 'plugins_update_check_locales', $locales );
$locales = array_unique( $locales );
// Three seconds, plus one extra second for every 10 plugins.
$timeout = 3 + (int) ( count( $plugins ) / 10 );
'plugins' => wp_json_encode( $to_send ),
'translations' => wp_json_encode( $translations ),
'locale' => wp_json_encode( $locales ),
'all' => wp_json_encode( true ),
'user-agent' => 'WordPress/' . $wp_version . '; ' . home_url( '/' ),
$options['body']['update_stats'] = wp_json_encode( $extra_stats );
$url = 'http://api.wordpress.org/plugins/update-check/1.1/';
$ssl = wp_http_supports( array( 'ssl' ) );
$url = set_url_scheme( $url, 'https' );
$raw_response = wp_remote_post( $url, $options );
if ( $ssl && is_wp_error( $raw_response ) ) {
/* translators: %s: Support forums URL. */
__( 'An unexpected error occurred. Something may be wrong with WordPress.org or this server’s configuration. If you continue to have problems, please try the <a href="%s">support forums</a>.' ),
__( 'https://wordpress.org/support/forums/' )
) . ' ' . __( '(WordPress could not establish a secure connection to WordPress.org. Please contact your server administrator.)' ),
headers_sent() || WP_DEBUG ? E_USER_WARNING : E_USER_NOTICE
$raw_response = wp_remote_post( $http_url, $options );
if ( is_wp_error( $raw_response ) || 200 !== wp_remote_retrieve_response_code( $raw_response ) ) {
$response = json_decode( wp_remote_retrieve_body( $raw_response ), true );
foreach ( $response['plugins'] as &$plugin ) {
$plugin = (object) $plugin;
if ( isset( $plugin->compatibility ) ) {
$plugin->compatibility = (object) $plugin->compatibility;
foreach ( $plugin->compatibility as &$data ) {
foreach ( $response['no_update'] as &$plugin ) {
$plugin = (object) $plugin;
if ( is_array( $response ) ) {
$new_option->response = $response['plugins'];
$new_option->translations = $response['translations'];
// TODO: Perhaps better to store no_update in a separate transient with an expiry?
$new_option->no_update = $response['no_update'];
$new_option->response = array();
$new_option->translations = array();
$new_option->no_update = array();
set_site_transient( 'update_plugins', $new_option );
* Checks for available updates to themes based on the latest versions hosted on WordPress.org.
* Despite its name this function does not actually perform any updates, it only checks for available updates.
* A list of all themes installed is sent to WP, along with the site locale.
* Checks against the WordPress server at api.wordpress.org. Will only check
* if WordPress isn't installing.
* @global string $wp_version The WordPress version string.
* @param array $extra_stats Extra statistics to report to the WordPress.org API.
function wp_update_themes( $extra_stats = array() ) {
// Include an unmodified $wp_version.
require ABSPATH . WPINC . '/version.php';
$installed_themes = wp_get_themes();
$translations = wp_get_installed_translations( 'themes' );
$last_update = get_site_transient( 'update_themes' );
if ( ! is_object( $last_update ) ) {
$last_update = new stdClass;
// Put slug of current theme into request.
$request['active'] = get_option( 'stylesheet' );
foreach ( $installed_themes as $theme ) {
$checked[ $theme->get_stylesheet() ] = $theme->get( 'Version' );
$themes[ $theme->get_stylesheet() ] = array(
'Name' => $theme->get( 'Name' ),
'Title' => $theme->get( 'Name' ),