Index: profiles/default/default.profile =================================================================== RCS file: /cvs/drupal/drupal/profiles/default/default.profile,v retrieving revision 1.12 diff -u -p -r1.12 default.profile --- profiles/default/default.profile 16 May 2007 13:45:17 -0000 1.12 +++ profiles/default/default.profile 29 Jun 2007 08:05:39 -0000 @@ -8,7 +8,7 @@ * An array of modules to be enabled. */ function default_profile_modules() { - return array('color', 'comment', 'help', 'taxonomy', 'dblog'); + return array('color', 'comment', 'help', 'taxonomy', 'dblog', 'update'); } /** Index: modules/update/update-rtl.css =================================================================== RCS file: modules/update/update-rtl.css diff -N modules/update/update-rtl.css --- /dev/null 1 Jan 1970 00:00:00 -0000 +++ modules/update/update-rtl.css 29 Jun 2007 08:05:39 -0000 @@ -0,0 +1,31 @@ +/* $Id: update-rtl.css,v 1.1 2007/06/28 20:38:26 dww Exp $ */ + +.update .project { + padding-right: .25em; +} + +.update .version-status { + float: left; + padding-left: 10px; +} + +.update .version-status .icon { + padding-right: .5em; +} + +.update table.version .version-title { + padding-left: 1em; +} + +.update table.version .version-details { + padding-left: .5em; +} + +.update table.version .version-links { + text-align: left; + padding-left: 1em; +} + +.update-settings tr.update-settings-label td.update-settings-label { + padding: 0 2em 0 0; +} Index: modules/update/update.css =================================================================== RCS file: modules/update/update.css diff -N modules/update/update.css --- /dev/null 1 Jan 1970 00:00:00 -0000 +++ modules/update/update.css 29 Jun 2007 08:05:39 -0000 @@ -0,0 +1,110 @@ +/* $Id: update.css,v 1.5 2007/06/28 20:38:26 dww Exp $ */ +.update .project { + font-weight: bold; + font-size: 110%; + padding-left: .25em; /* LTR */ + height: 22px; +} + +.update .version-status { + float: right; /* LTR */ + padding-right: 10px; /* LTR */ + font-size: 110%; + height: 20px; +} + +.update .version-status .icon { + padding-left: .5em; /* LTR */ +} + +.update .info { + margin: 0; + padding: 1em 1em .25em 1em; +} + +.update tr td { + border-top: 1px solid #ccc; + border-bottom: 1px solid #ccc; +} + +.update tr.error { + background: #fcc; +} + +.update tr.error .version-recommended { + background: #fdd; +} + +.update tr.ok { + background: #dfd; +} + +.update tr.warning { + background: #ffd; +} + +.update tr.warning .version-recommended { + background: #ffe; +} + +.current-version, .new-version { + direction: ltr; /* Note: version numbers should always be LTR. */ +} + + +table.update, +.update table.version { + width: 100%; + margin-top: .5em; +} + +.update table.version tbody { + border: none; +} + +.update table.version tr, +.update table.version td { + line-height: .9em; + padding: 0; + margin: 0; + border: none; +} + +.update table.version .version-title { + padding-left: 1em; /* LTR */ + width: 14em; +} + +.update table.version .version-details { + padding-right: .5em; /* LTR */ +} + +.update table.version .version-links { + text-align: right; /* LTR */ + padding-right: 1em; /* LTR */ +} + +.update table.version-security .version-title { + color: #970F00; +} + +.update table.version-recommended-strong .version-title { + font-weight: bold; +} + +.update .security-error { + font-weight: bold; + color: #970F00; +} + +.update-settings .form-select { + width: 12em; +} + +.update-settings tr.update-settings-label td.update-settings-label { + font-size: 70%; + font-weight: bold; + background: #ddd; + color: #666; + padding: 0 0 0 2em; /* LTR */ +} Index: modules/update/update.info =================================================================== RCS file: modules/update/update.info diff -N modules/update/update.info --- /dev/null 1 Jan 1970 00:00:00 -0000 +++ modules/update/update.info 29 Jun 2007 08:05:39 -0000 @@ -0,0 +1,6 @@ +; $Id: update.info,v 1.3 2007/06/28 02:20:47 dww Exp $ +name = Update status +description = Checks the status of available updates for Drupal and your installed modules and themes. +version = VERSION +package = Core - optional +core = 6.x Index: modules/update/update.module =================================================================== RCS file: modules/update/update.module diff -N modules/update/update.module --- /dev/null 1 Jan 1970 00:00:00 -0000 +++ modules/update/update.module 29 Jun 2007 08:05:39 -0000 @@ -0,0 +1,243 @@ +'. t('Here you can find information about available updates for your installed modules and themes. Note that each module or theme is part of a "project", which may or may not have the same name, and might include multiple modules or themes within it.') .'

'; + + case 'admin/logs/updates/settings': + return '

'. t('Here you can configure what kinds of available updates for your installed modules and themes should be marked as an error on the !status_report, the !modules_page, and the !themes_page, along with other related settings.', array('!status_report' => l(t('status report'), 'admin/logs/status'), '!modules_page' => l(t('modules page'), 'admin/build/modules'), '!themes_page' => l(t('themes page'), 'admin/build/themes'))) .'

'; + + case 'admin/build/themes': + case 'admin/build/modules': + include_once './includes/install.inc'; + $status = update_requirements('runtime'); + foreach (array('core', 'contrib') as $report_type) { + $type = 'update_'. $report_type; + if (isset($status[$type]['severity'])) { + if ($status[$type]['severity'] == REQUIREMENT_ERROR) { + drupal_set_message($status[$type]['description'], 'error'); + } + elseif ($status[$type]['severity'] == REQUIREMENT_WARNING) { + drupal_set_message($status[$type]['description']); + } + } + } + return '

'. t('See the !available_updates page for information on installed modules and themes with new versions released.', array('!available_updates' => l(t('available updates'), 'admin/logs/updates'))) .'

'; + } +} + +/** + * Implementation of hook_menu(). + */ +function update_menu() { + $items = array(); + + $items['admin/logs/updates'] = array( + 'title' => 'Available updates', + 'description' => 'Get a status report about available updates for your installed modules and themes.', + 'page callback' => 'update_status', + 'access arguments' => array('administer site configuration'), + 'file' => 'update.report.inc', + 'weight' => 10, + ); + $items['admin/logs/updates/list'] = array( + 'title' => 'List', + 'page callback' => 'update_status', + 'access arguments' => array('administer site configuration'), + 'file' => 'update.report.inc', + 'type' => MENU_DEFAULT_LOCAL_TASK, + ); + $items['admin/logs/updates/settings'] = array( + 'title' => 'Settings', + 'page callback' => 'drupal_get_form', + 'page arguments' => array('update_settings'), + 'access arguments' => array('administer site configuration'), + 'file' => 'update.settings.inc', + 'type' => MENU_LOCAL_TASK, + ); + $items['admin/logs/updates/force-check'] = array( + 'title' => 'Manual update check', + 'page callback' => 'update_force_status', + 'access arguments' => array('administer site configuration'), + 'file' => 'update.fetch.inc', + 'type' => MENU_CALLBACK, + ); + + return $items; +} + +/** + * Implementation of the hook_theme() registry. + */ +function update_theme() { + return array( + 'update_settings' => array( + 'arguments' => array('form' => NULL), + ), + 'update_report' => array( + 'arguments' => array('data' => NULL), + ), + 'update_version' => array( + 'arguments' => array('version' => NULL, 'tag' => NULL, 'class' => NULL), + ), + ); +} + +/** + * Implementation of hook_requirements + */ +function update_requirements($phase, $plaintext = FALSE) { + if ($phase == 'runtime') { + $requirements['update_core']['title'] = t('Drupal core update status'); + $error_level = variable_get('update_error_threshold', 'all'); + $see_more = $plaintext ? '' : ' '. t('See the !available_updates page for more information.', array('!available_updates' => l(t('available updates'), 'admin/logs/updates'))); + if ($avail = update_get_available(FALSE)) { + include_once './modules/update/update.compare.inc'; + $data = update_calculate_project_data($avail); + switch ($data['drupal']['status']) { + case UPDATE_NOT_CURRENT: + $requirements['update_core']['value'] = t('Out of date (version @version available)', array('@version' => $data['drupal']['recommended'])); + $requirements['update_core']['severity'] = $error_level == 'all' ? REQUIREMENT_ERROR : REQUIREMENT_WARNING; + $requirements['update_drupal']['description'] = t('There are updates available for your version of Drupal. To ensure the proper functioning of your site, you should update as soon as possible.') . $see_more; + break; + + case UPDATE_NOT_SECURE: + $requirements['update_core']['value'] = t('Not secure! (version @version available)', array('@version' => $data['drupal']['recommended'])); + $requirements['update_core']['severity'] = REQUIREMENT_ERROR; + $requirements['update_core']['description'] = t('There is a security update available for your version of Drupal. To ensure the security of your server, you should update immediately.') . $see_more; + break; + + default: + $requirements['update_core']['value'] = t('Up to date'); + break; + } + // We don't want to check drupal a second time. + unset($data['drupal']); + $not_current = FALSE; + if (!empty($data)) { + $requirements['update_contrib']['title'] = t('Module and theme update status'); + // Default to being current until we see otherwise. + $requirements['update_contrib']['value'] = t('Up to date'); + foreach (array_keys($data) as $project) { + if (isset($avail[$project])) { + if ($data[$project]['status'] == UPDATE_NOT_SECURE) { + $requirements['update_contrib']['value'] = t('Not secure!'); + $requirements['update_contrib']['severity'] = REQUIREMENT_ERROR; + $requirements['update_contrib']['description'] = t('There are security updates available for one or more of your modules or themes. To ensure the security of your server, you should update immediately.') . $see_more; + break; + } + elseif ($data[$project]['status'] == UPDATE_NOT_CURRENT) { + $not_current = TRUE; + } + } + } + if (!isset($requirements['update_contrib']['severity']) && $not_current) { + $requirements['update_contrib']['severity'] = $error_level == 'all' ? REQUIREMENT_ERROR : REQUIREMENT_WARNING; + $requirements['update_contrib']['value'] = t('Out of date'); + $requirements['update_contrib']['description'] = t('There are updates available for one or more of your modules or themes. To ensure the proper functioning of your site, you should update as soon as possible.') . $see_more; + } + } + } + else { + $requirements['update_core']['value'] = t('No update data available'); + $requirements['update_core']['severity'] = REQUIREMENT_WARNING; + $requirements['update_core']['description'] = _update_no_data(); + } + return $requirements; + } +} + +/** + * Implementation of hook_cron(). + */ +function update_cron() { + $frequency = variable_get('update_check_frequency', 'daily'); + $interval = 60 * 60 * 24 * ($frequency == 'weekly' ? 7 : 1); + if (time() - variable_get('update_last_check', 0) > $interval) { + update_refresh(); + _update_cron_notify(); + } +} + +/** + * Implementation of hook_form_alter(). + * + * Adds a submit handler to the system modules and themes forms, so that if a + * site admin saves either form, we invalidate the cache of available updates. + * + * @see update_invalidate_cache() + */ +function update_form_alter(&$form, $form_state, $form_id) { + if ($form_id == 'system_modules' || $form_id == 'system_themes' ) { + $form['#submit'][] = 'update_invalidate_cache'; + } +} + +/** + * Prints a warning message when there is no data about available updates. + */ +function _update_no_data() { + $destination = drupal_get_destination(); + return t('No information is available about potential new releases for currently installed modules and themes. To check for updates, you may need to !run_cron or you can !check_manually. Please note that checking for available updates can take a long time, so please be patient.', array( + '!run_cron' => l(t('run cron'), 'admin/logs/status/run-cron', array('query' => $destination)), + '!check_manually' => l(t('check manually'), 'admin/logs/updates/force-check', array('query' => $destination)), + )); +} + +/** + * Internal helper to try to get the update information from the cache + * if possible, and to refresh the cache when necessary. + * + * @param $refresh + * Boolean to indicate if this method should refresh the cache automatically + * if there's no data. + */ +function update_get_available($refresh = FALSE) { + $avail = array(); + if (($cache = cache_get('update_info', 'cache')) + && $cache->expire > time()) { + $avail = $cache->data; + } + elseif ($refresh) { + $avail = update_refresh(); + } + return $avail; +} + +/** + * Invalidates any cached data relating to update status. + */ +function update_invalidate_cache() { + cache_clear_all('update_info', 'cache'); +} + +/** + * Wrapper to load the include file and then refresh the release data. + */ +function update_refresh() { + include_once './modules/update/update.fetch.inc'; + _update_refresh(); +} Index: modules/update/update.report.inc =================================================================== RCS file: modules/update/update.report.inc diff -N modules/update/update.report.inc --- /dev/null 1 Jan 1970 00:00:00 -0000 +++ modules/update/update.report.inc 29 Jun 2007 08:05:39 -0000 @@ -0,0 +1,223 @@ +'. t('Last checked: ') . ($last ? format_date($last) : t('Never')); + $output .= ' '. l(t('Check manually'), 'admin/logs/updates/force-check') .'

'; + + if (!is_array($data)) { + $output .= '

'. $data .'

'; + return $output; + } + + $header = array(); + $rows = array(); + + $error_level = variable_get('update_error_threshold', 'all'); + + foreach ($data as $project) { + switch ($project['status']) { + case UPDATE_CURRENT: + $class = 'ok'; + $icon = theme('image', 'misc/watchdog-ok.png'); + break; + case UPDATE_NOT_SECURE: + case UPDATE_NOT_CURRENT: + if ($error_level == 'all' + || $project['status'] == UPDATE_NOT_SECURE) { + $class = 'error'; + $icon = theme('image', 'misc/watchdog-error.png'); + break; + } + // Otherwise, deliberate no break and use the warning class/icon. + default: + $class = 'warning'; + $icon = theme('image', 'misc/watchdog-warning.png'); + break; + } + + $row = '
'; + switch ($project['status']) { + case UPDATE_CURRENT: + $row .= t('Up to date'); + break; + case UPDATE_NOT_SECURE: + $row .= ''; + $row .= t('Security update required!'); + $row .= ''; + break; + case UPDATE_NOT_CURRENT: + if ($error_level == 'all') { + $row .= t('Update available'); + break; + } + // Otherwise, deliberate no break and just ignore this project. + $project['reason'] = t('Not a security update'); + default: + $row .= t('Ignored'); + $row .= ' ('. $project['reason'] .')'; + break; + } + $row .= ''. $icon .''; + $row .= "
\n"; + + $row .= '
'; + if (isset($project['title'])) { + if (isset($project['link'])) { + $row .= l($project['title'], $project['link']); + } + else { + $row .= check_plain($project['title']); + } + } + else { + $row .= check_plain($project['name']); + } + $row .= ' '. check_plain($project['existing_version']); + if ($project['install_type'] == 'dev' && !empty($project['datestamp'])) { + $row .= ' ('. format_date($project['datestamp'], 'custom', 'Y-M-d') .') '; + } + $row .= "
\n"; + + $row .= "
\n"; + + if (isset($project['recommended'])) { + if ($project['status'] != UPDATE_CURRENT || $project['existing_version'] != $project['recommended']) { + + // First, figure out what to recommend. + // If there's only 1 security update and it has the same version we're + // recommending, give it the same CSS class as if it was recommended, + // but don't print out a separate "Recommended" line for this project. + if (!empty($project['security updates']) && count($project['security updates']) == 1 && $project['security updates'][0]['version'] == $project['recommended']) { + $security_class = ' version-recommended version-recommended-strong'; + } + else { + $security_class = ''; + $version_class = 'version-recommended'; + // Apply an extra class if we're displaying both a recommended + // version and anything else for an extra visual hint. + if ($project['recommended'] != $project['latest_version'] + || !empty($project['also']) + || ($project['install_type'] == 'dev' + && $project['latest_version'] != $project['dev_version'] + && $project['recommended'] != $project['dev_version']) + || (isset($project['security updates'][0]) + && $project['recommended'] != $project['security updates'][0]) + ) { + $version_class .= ' version-recommended-strong'; + } + $row .= theme('update_version', $project['releases'][$project['recommended']], t('Recommended version:'), $version_class); + } + + // Now, print any security updates. + if (!empty($project['security updates'])) { + foreach ($project['security updates'] as $security_update) { + $row .= theme('update_version', $security_update, t('Security update:'), 'version-security'. $security_class); + } + } + } + + if ($project['recommended'] != $project['latest_version']) { + $row .= theme('update_version', $project['releases'][$project['latest_version']], t('Latest version:'), 'version-latest'); + } + if ($project['install_type'] == 'dev' + && $project['status'] != UPDATE_CURRENT + && $project['recommended'] != $project['dev_version']) { + $row .= theme('update_version', $project['releases'][$project['dev_version']], t('Development version:'), 'version-latest'); + } + } + + if (isset($project['also'])) { + foreach ($project['also'] as $also) { + $row .= theme('update_version', $project['releases'][$also], t('Also available:'), 'version-also-available'); + } + } + + $row .= "
\n"; // versions div. + + $row .= "
\n"; + if (!empty($project['notes'])) { + $row .= '
'; + $row .= t('Administrator note: %notes', array('%notes' => $project['notes'])); + $row .= "
\n"; + } + + $row .= '
'; + sort($project['includes']); + $row .= t('Includes: %includes', array('%includes' => implode(', ', $project['includes']))); + $row .= "
\n"; + + $row .= "
\n"; // info div. + + if (!isset($rows[$project['project_type']])) { + $rows[$project['project_type']] = array(); + } + $rows[$project['project_type']][] = array( + 'class' => $class, + 'data' => array($row), + ); + } + + $project_types = array( + 'core' => t('Drupal core'), + 'module' => t('Modules'), + 'theme' => t('Themes'), + ); + foreach ($project_types as $type_name => $type_label) { + if (!empty($rows[$type_name])) { + $output .= "\n

". $type_label ."

\n"; + $output .= theme('table', $header, $rows[$type_name], array('class' => 'update')); + } + } + drupal_add_css(drupal_get_path('module', 'update') .'/update.css'); + return $output; +} + +function theme_update_version($version, $tag, $class) { + $output = ''; + $output .= ''; + $output .= ''; + $output .= '\n"; + $output .= '\n"; + $output .= ''; + $output .= ''; + $output .= "
'. $tag ."'; + $output .= l($version['version'], $version['release_link']); + $output .= ' ('. format_date($version['date'], 'custom', 'Y-M-d') .') '; + $output .= "
\n"; + return $output; +} Index: modules/update/update.settings.inc =================================================================== RCS file: modules/update/update.settings.inc diff -N modules/update/update.settings.inc --- /dev/null 1 Jan 1970 00:00:00 -0000 +++ modules/update/update.settings.inc 29 Jun 2007 08:05:39 -0000 @@ -0,0 +1,233 @@ + TRUE); + + include_once './modules/update/update.compare.inc'; + $data = update_calculate_project_data($avail); + $form['data'] = array('#type' => 'value', '#value' => $data); + $form['avail'] = array('#type' => 'value', '#value' => $avail); + + $form['update_check_frequency'] = array( + '#type' => 'radios', + '#title' => t('Check for updates'), + '#default_value' => variable_get('update_check_frequency', 'daily'), + '#options' => array( + 'daily' => t('Daily'), + 'weekly' => t('Weekly'), + ), + '#description' => t('Select how frequently you want to automatically check for new releases of your currently installed modules and themes.'), + ); + + $form['update_error_threshold'] = array( + '#type' => 'radios', + '#title' => t('Error threshold'), + '#default_value' => variable_get('update_error_threshold', 'all'), + '#options' => array( + 'all' => t('All newer releases'), + 'security' => t('Only security updates'), + ), + '#description' => t('Select what kinds of available updates should be marked as an error on your site.'), + ); + + $form['update_usage_stats'] = array( + '#type' => 'radios', + '#title' => t('Allow anonymous usage reporting'), + '#default_value' => variable_get('update_usage_stats', 1), + '#options' => array('1' => t('Enabled'), '0' => t('Disabled')), + '#description' => t('When your site checks for available updates, the Drupal project can collect anonymous statistics about which modules and themes are in use. No information that can be used to identify your site is saved, only an anonymous key and the specific modules and themes enabled, so there is no need to be concerned about security or privacy. These statistics will be used to improve the quality of Drupal contributions. However, you can disable reporting if you do not wish to provide this information.'), + ); + + $notify_emails = variable_get('update_notify_emails', array()); + $form['update_notify_emails'] = array( + '#type' => 'textarea', + '#title' => t('E-mail addresses to notify when updates are available'), + '#rows' => 4, + '#default_value' => implode("\n", $notify_emails), + '#description' => t('Whenever your site checks for available updates and finds new releases, it can automatically send e-mails to a list of users. This works in conjunction with the %error_threshold setting, so the site will only send e-mails for available updates that are considered an error. Put each address on a separate line with no extra punctuation. If blank, no e-mails will be sent.', array('%error_threshold' => t('error threshold'))), + ); + + $form['update_project_help'] = array( + '#value' => t('These settings allow you to control if a certain project, or even a specific release of that project, should be ignored by the available updates report. For each project, you can select if it should always warn you about a newer release, never warn you (ignore the project completely), or ignore a specific available release you do not want to upgrade to. You can also specify a note explaining why you are ignoring a specific project or version, and that will be displayed on the available updates report.'), + ); + + foreach ($data as $key => $project) { + if (isset($avail[$key])) { + if (!isset($values[$key])) { + $values[$key] = array( + 'check' => 'always', + 'notes' => '', + ); + } + + $options = array(); + $options['always'] = t('Always'); + if (isset($project['recommended'])) { + $options[$project['recommended']] = t('Ignore @version', array('@version' => $project['recommended'])); + } + $options['never'] = t('Never'); + + $form['update_project_settings'][$key]['check'] = array( + '#type' => 'select', + '#options' => $options, + '#default_value' => $values[$key]['check'], + ); + $form['update_project_settings'][$key]['notes'] = array( + '#type' => 'textfield', + '#size' => 50, + '#default_value' => $values[$key]['notes'], + ); + } + } + $form = system_settings_form($form); + unset($form['#theme']); + unset($form['#submit']); + $form['#validate'][] = 'update_settings_validate'; + } + else { + $form['error'] = array( + '#value' => theme('update_report', _update_no_data()) + ); + } + drupal_add_css(drupal_get_path('module', 'update') .'/update.css'); + return $form; +} + +function theme_update_settings($form) { + if (isset($form['error'])) { + return drupal_render($form); + } + + $output = ''; + $output .= drupal_render($form['update_check_frequency']); + $output .= drupal_render($form['update_error_threshold']); + $output .= drupal_render($form['update_notify_emails']); + + $header = array( + array('data' => t('Project'), 'class' => 'update-project'), + array('data' => t('Warn if out of date'), 'class' => 'update-status'), + array('data' => t('Notes'), 'class' => 'update-notes'), + ); + + $data = $form['data']['#value']; + $avail = $form['avail']['#value']; + + $rows = array(); + foreach ($data as $key => $project) { + if (isset($avail[$key])) { + $row = array(); + $row[] = array( + 'class' => 'update-project', + 'data' => check_plain($avail[$key]['title']), + ); + $row[] = array( + 'class' => 'update-status', + 'data' => drupal_render($form['update_project_settings'][$key]['check']), + ); + $row[] = array( + 'class' => 'update-notes', + 'data' => drupal_render($form['update_project_settings'][$key]['notes']), + ); + if (!isset($rows[$project['project_type']])) { + $rows[$project['project_type']] = array(); + } + $rows[$project['project_type']][] = $row; + } + } + $split_rows = array(); + $project_types = array( + 'core' => t('Drupal core'), + 'module' => t('Modules'), + 'theme' => t('Themes') + ); + foreach ($project_types as $type_name => $type_label) { + if (!empty($rows[$type_name])) { + $split_rows[] = array( + 'class' => 'update-settings-label', + 'data' => array( + array( + 'class' => 'update-settings-label', + 'data' => $type_label, + 'colspan' => 3, + ), + ), + ); + $split_rows = array_merge($split_rows, $rows[$type_name]); + } + } + $output .= theme('table', $header, $split_rows, array('class' => 'update-settings')); + $output .= '
'; + $output .= drupal_render($form['update_project_help']); + $output .= '
'; + + $output .= drupal_render($form['update_usage_stats']); + $output .= drupal_render($form); + return $output; +} + +/** + * Validates the update settings form. + * + * Ensures that the email addresses are valid and properly formatted. + */ +function update_settings_validate($form, &$form_state) { + if (!empty($form_state['values']['update_notify_emails'])) { + $valid = array(); + $invalid = array(); + foreach (explode("\n", trim($form_state['values']['update_notify_emails'])) as $email) { + $email = trim($email); + if (!empty($email)) { + if (valid_email_address($email)) { + $valid[] = $email; + } + else { + $invalid[] = $email; + } + } + } + if (empty($invalid)) { + $form_state['notify_emails'] = $valid; + } + elseif (count($invalid) == 1) { + form_set_error('update_notify_emails', t('%email is not a valid e-mail address.', array('%email' => reset($invalid)))); + } + else { + form_set_error('update_notify_emails', t('%emails are not valid e-mail addresses.', array('%email' => implode(', ', $invalid)))); + } + } +} + +/** + * Submit handler for the settings tab. + */ +function update_settings_submit($form, $form_state) { + $op = $form_state['values']['op']; + + if ($op == t('Reset to defaults')) { + unset($form_state['notify_emails']); + } + else { + if (empty($form_state['notify_emails'])) { + variable_del('update_notify_emails'); + } + else { + variable_set('update_notify_emails', $form_state['notify_emails']); + } + unset($form_state['notify_emails']); + unset($form_state['values']['update_notify_emails']); + } + system_settings_form_submit($form, $form_state); +} Index: modules/update/update.fetch.inc =================================================================== RCS file: modules/update/update.fetch.inc diff -N modules/update/update.fetch.inc --- /dev/null 1 Jan 1970 00:00:00 -0000 +++ modules/update/update.fetch.inc 29 Jun 2007 08:05:39 -0000 @@ -0,0 +1,212 @@ + $project) { + $url = _update_build_fetch_url($project, $site_key); + $xml = drupal_http_request($url); + $data[] = $xml->data; + } + + if ($data) { + $parser = new update_xml_parser; + $avail = $parser->parse($data); + cache_set('update_info', $avail, 'cache', time() + (60 * 60 * 24)); + variable_set('update_last_check', time()); + watchdog('update', t('Fetched data on all available new releases and updates.'), WATCHDOG_NOTICE, l('view', 'admin/logs/updates')); + } + return $avail; +} + +/** + * Generates the URL to fetch information about project updates. + * + * This figures out the right URL to use, based on the project's .info file + * and the global defaults. Appends optional query arguments when the site is + * configured to report usage stats. + * + * @param $project + * The array of project information from update_get_projects(). + * @param $site_key + * The anonymous site key hash (optional). + * + * @see update_refresh() + * @see update_get_projects() + */ +function _update_build_fetch_url($project, $site_key = '') { + if (!isset($project['info']['project status url'])) { + $project['info']['project status url'] = UPDATE_DEFAULT_URL; + } + $name = $project['name']; + $url = $project['info']['project status url']; + $url .= '/'. $name .'/'. DRUPAL_CORE_COMPATIBILITY; + if (!empty($site_key)) { + $url .= (strpos($url, '?') === TRUE) ? '&' : '?'; + $url .= 'site_key='; + $url .= drupal_urlencode($site_key); + if (!empty($project['info']['version'])) { + $url .= '&version='; + $url .= drupal_urlencode($project['info']['version']); + } + } + return $url; +} + +/** + * Perform any notifications that should be done once cron fetches new data. + * + * This method checks the status of the site using the new data and depending + * on the configuration of the site, notifys administrators via email if there + * are new releases or missing security updates. + * + * @see update_requirements() + */ +function _update_cron_notify() { + $status = update_requirements('runtime', $plaintext = TRUE); + $body = ''; + foreach (array('core', 'contrib') as $report_type) { + $type = 'update_'. $report_type; + if (isset($status[$type]['severity']) + && $status[$type]['severity'] == REQUIREMENT_ERROR) { + $body .= empty($body) ? '' : "\n\n"; + $body .= wordwrap($status[$type]['description'], 70); + } + } + if (!empty($body)) { + $notify_list = variable_get('update_notify_emails', ''); + if (!empty($notify_list)) { + $body .= "\n\n"; + $body .= t('See the available updates page for more information:') ."\n"; + $body .= url('admin/logs/updates', NULL, NULL, TRUE) ."\n\n"; + $subject = t('New release(s) available for !site_name', array('!site_name' => variable_get('site_name', 'Drupal'))); + $from = variable_get('site_mail', ini_get('sendmail_from')); + foreach ($notify_list as $target) { + drupal_mail('update-status', $target, $subject, $body, $from); + } + } + } +} + +/** + * XML Parser object to read Drupal's release history info files. + * This uses PHP4's lame XML parsing, but it works. + */ +class update_xml_parser { + var $projects = array(); + var $current_project; + var $current_release; + var $current_term; + var $current_tag; + var $current_object; + + /** + * Parse an array of XML data files. + */ + function parse($data) { + foreach ($data as $datum) { + $parser = xml_parser_create(); + xml_set_object($parser, $this); + xml_set_element_handler($parser, 'start', 'end'); + xml_set_character_data_handler($parser, "data"); + xml_parse($parser, $datum); + xml_parser_free($parser); + } + return $this->projects; + } + + function start($parser, $name, $attr) { + $this->current_tag = $name; + switch ($name) { + case 'PROJECT': + unset($this->current_object); + $this->current_project = array(); + $this->current_object = &$this->current_project; + break; + case 'RELEASE': + unset($this->current_object); + $this->current_release = array(); + $this->current_object = &$this->current_release; + break; + case 'TERM': + unset($this->current_object); + $this->current_term = array(); + $this->current_object = &$this->current_term; + break; + } + } + + function end($parser, $name) { + switch ($name) { + case 'PROJECT': + unset($this->current_object); + $this->projects[$this->current_project['short_name']] = $this->current_project; + $this->current_project = array(); + break; + case 'RELEASE': + unset($this->current_object); + $this->current_project['releases'][$this->current_release['version']] = $this->current_release; + break; + case 'RELEASES': + $this->current_object = &$this->current_project; + break; + case 'TERM': + unset($this->current_object); + $term_name = $this->current_term['name']; + if (!isset($this->current_release['terms'])) { + $this->current_release['terms'] = array(); + } + if (!isset($this->current_release['terms'][$term_name])) { + $this->current_release['terms'][$term_name] = array(); + } + $this->current_release['terms'][$term_name][] = $this->current_term['value']; + break; + case 'TERMS': + $this->current_object = &$this->current_release; + break; + default: + $this->current_object[strtolower($this->current_tag)] = trim($this->current_object[strtolower($this->current_tag)]); + $this->current_tag = ''; + } + } + + function data($parser, $data) { + if ($this->current_tag && !in_array($this->current_tag, array('PROJECT', 'RELEASE', 'RELEASES', 'TERM', 'TERMS'))) { + $tag = strtolower($this->current_tag); + if (isset($this->current_object[$tag])) { + $this->current_object[$tag] .= $data; + } + else { + $this->current_object[$tag] = $data; + } + } + } +} Index: modules/update/update.compare.inc =================================================================== RCS file: modules/update/update.compare.inc diff -N modules/update/update.compare.inc --- /dev/null 1 Jan 1970 00:00:00 -0000 +++ modules/update/update.compare.inc 29 Jun 2007 08:05:40 -0000 @@ -0,0 +1,407 @@ +status)) { + // Skip disabled modules or themes. + continue; + } + + // Skip if the .info file is broken. + if (empty($file->info)) { + continue; + } + + // If the .info doesn't define the 'project', try to figure it out. + if (!isset($file->info['project'])) { + $file->info['project'] = update_get_project($file); + } + + if (!isset($projects[$file->info['project']])) { + // Only process this if we haven't done this project, since a single + // project can have multiple modules or themes. + $projects[$file->info['project']] = array( + 'name' => $file->info['project'], + 'info' => $file->info, + 'datestamp' => isset($file->info['datestamp']) ? $file->info['datestamp'] : 0, + 'includes' => array($file->name => $file->info['name']), + 'project_type' => $file->info['project'] == 'drupal' ? 'core' : $project_type, + ); + } + else { + $projects[$file->info['project']]['includes'][$file->name] = $file->info['name']; + } + } +} + +/** + * Given a $file object (as returned by system_get_files_database()), figure + * out what project it belongs to. + * + * @see system_get_files_database() + */ +function update_get_project($file) { + $project = ''; + if (isset($file->info['project'])) { + $project = $file->info['project']; + } + elseif (isset($file->info['package']) + && (strpos($file->info['package'], 'Core -') !== FALSE)) { + $project = 'drupal'; + } + elseif (in_array($file->name, array('bluemarine', 'chameleon', 'garland', 'marvin', 'minnelli', 'pushbutton'))) { + // Unfortunately, there's no way to tell if a theme is part of core, + // so we must hard-code a list here. + $project = 'drupal'; + } + else { + // This isn't part of core, so guess the project from the directory. + $last = ''; + foreach (array_reverse(explode('/', $file->filename)) as $dir) { + if ($dir == 'modules' || $dir == 'themes') { + break; + } + $last = $dir; + } + if ($last) { + $project = $last; + } + else { + continue; + } + } + return $project; +} + +/** + * Process the list of projects on the system to figure out the currently + * installed versions, and other information that is required before we can + * compare against the available releases to produce the status report. + * + * @param $projects + * Array of project information from update_get_projects(). + */ +function update_process_project_info(&$projects) { + foreach ($projects as $key => $project) { + // Assume an official release until we see otherwise. + $install_type = 'official'; + + $info = $project['info']; + + if (isset($info['version'])) { + // Check for development snapshots + if (preg_match('@(dev|HEAD)@', $info['version'])) { + $install_type = 'dev'; + } + + // Figure out what the currently installed major version is. We need + // to handle both contribution (e.g. "5.x-1.3", major = 1) and core + // (e.g. "5.1", major = 5) version strings. + $matches = array(); + if (preg_match('/^(\d+\.x-)?(\d+)\..*$/', $info['version'], $matches)) { + $info['major'] = $matches[2]; + } + elseif (!isset($info['major'])) { + // This would only happen for version strings that don't follow the + // drupal.org convention. We let contribs define "major" in their + // .info in this case, and only if that's missing would we hit this. + $info['major'] = -1; + } + } + else { + // No version info available at all. + $install_type = 'unknown'; + $info['version'] = t('Unknown'); + $info['major'] = -1; + } + + // Finally, save the results we care about into the $projects array. + $projects[$key]['existing_version'] = $info['version']; + $projects[$key]['existing_major'] = $info['major']; + $projects[$key]['install_type'] = $install_type; + unset($projects[$key]['info']); + } +} + +/** + * Given the installed projects and the available release data retrieved from + * remote servers, calculate the current status. + * + * This function is the heart of the update status feature. It iterates over + * every currently installed project, and for each one, decides what major + * release series to consider (the larger of the major version currently + * installed and the default major version specified by the maintainer of that + * project). + * + * Given a target major version, it scans the available releases looking for + * the specific release to recommend (avoiding beta releases and development + * snapshots if possible). This is complicated to describe, but an example + * will help clarify. For the target major version, find the highest patch + * level. If there is a release at that patch level with no extra ("beta", + * etc), then we recommend the release at that patch level with the most + * recent release date. If every release at that patch level has extra (only + * betas), then recommend the latest release from the previous patch + * level. For example: + * + * 1.6-bugfix <-- recommended version because 1.6 already exists. + * 1.6 + * + * or + * + * 1.6-beta + * 1.5 <-- recommended version because no 1.6 exists. + * 1.4 + * + * It also looks for the latest release from the same major version, even a + * beta release, to display to the user as the "Latest version" option. + * Additionally, it finds the latest official release from any higher major + * versions that have been released to provide a set of "Also available" + * options. + * + * Finally, and most importantly, it keeps scanning the release history until + * it gets to the currently installed release, searching for anything marked + * as a security update. If any security updates have been found between the + * recommended release and the installed version, all of the releases that + * included a security fix are recorded so that the site administrator can be + * warned their site is insecure, and links pointing to the release notes for + * each security update can be included (which, in turn, will link to the + * official security announcements for each vulnerability). + * + * This function relies on the fact that the .xml release history data comes + * sorted based on major version and patch level, then finally by release date + * if there are multiple releases such as betas from the same major.patch + * version (e.g. 5.x-1.5-beta1, 5.x-1.5-beta2, and 5.x-1.5). Development + * snapshots for a given major version are always listed last. + * + * @param $avail + * Array of data about available project releases. + * + * @see update_get_available() + * @see update_get_projects() + * @see update_process_project_info() + */ +function update_calculate_project_data($avail) { + $projects = update_get_projects(); + update_process_project_info($projects); + $settings = variable_get('update_project_settings', array()); + foreach ($projects as $project => $project_info) { + if (isset($avail[$project])) { + // Figure out the target major version. + $existing_major = $project_info['existing_major']; + if (isset($avail[$project]['default_major'])) { + $default_major = $avail[$project]['default_major']; + $target_major = max($existing_major, $default_major); + } + else { + $target_major = $existing_major; + } + + // Initialize variables needed to find the recommended version. + $version_patch_changed = ''; + $patch = ''; + + foreach ($avail[$project]['releases'] as $version => $release) { + // Ignore unpublished releases. + if ($release['status'] != 'published') { + continue; + } + + // See if this is a higher major version than our target, and if so, + // record it as an "Also available" release. + if ($release['version_major'] > $target_major) { + if (!isset($avail[$project]['also'])) { + $avail[$project]['also'] = array(); + } + if (!isset($avail[$project]['also'][$release['version_major']])) { + $avail[$project]['also'][$release['version_major']] = $version; + } + // Otherwise, this release can't matter to us, since it's neither + // from the release series we're currently using nor the recommended + // release. We don't even care about security updates for this + // branch, since if a project maintainer puts out a security release + // at a higher major version and not at the lower major version, + // they must change the default major release at the same time, in + // which case we won't hit this code. + continue; + } + + // Look for the 'latest version' if we haven't found it yet. Latest is + // defined as the most recent version for the target major version. + if (!isset($avail[$project]['latest_version']) + && $release['version_major'] == $target_major) { + $avail[$project]['latest_version'] = $version; + } + + // Look for the development snapshot release for this branch. + if (!isset($avail[$project]['dev_version']) + && isset($release['version_extra']) + && $release['version_extra'] == 'dev') { + $avail[$project]['dev_version'] = $version; + } + + // Look for the 'recommended' version if we haven't found it yet (see + // phpdoc at the top of this function for the definition). + if (!isset($avail[$project]['recommended']) + && $release['version_major'] == $target_major + && isset($release['version_patch'])) { + if ($patch != $release['version_patch']) { + $patch = $release['version_patch']; + $version_patch_changed = $release['version']; + } + if (empty($release['version_extra']) && $patch == $release['version_patch']) { + $avail[$project]['recommended'] = $version_patch_changed; + } + } + + // Stop searching once we hit the currently installed version. + if ($projects[$project]['existing_version'] == $version) { + break; + } + + // If we're running a dev snapshot and have a timestamp, stop + // searching for security updates once we hit an official release + // older than what we've got. Allow 100 seconds of leeway to handle + // differences between the datestamp in the .info file and the + // timestamp of the tarball itself (which are usually off by 1 or 2 + // seconds) so that we don't flag that as a new release. + if ($projects[$project]['install_type'] == 'dev') { + if (empty($projects[$project]['datestamp'])) { + // We don't have current timestamp info, so we can't know. + continue; + } + elseif (isset($release['date']) && ($projects[$project]['datestamp'] + 100 > $release['date'])) { + // We're newer than this, so we can skip it. + continue; + } + } + + // See if this release is a security update. + if (isset($release['terms']) + && isset($release['terms']['Release type']) + && in_array('Security update', $release['terms']['Release type'])) { + $projects[$project]['security updates'][] = $release; + } + } + + // If we were unable to find a recommended version, then make the latest + // version the recommended version if possible. + if (!isset($avail[$project]['recommended']) && isset($avail[$project]['latest_version'])) { + $avail[$project]['recommended'] = $avail[$project]['latest_version']; + } + + // If we're running a dev snapshot, compare the date of the dev snapshot + // with the latest official version, and record the absolute latest in + // 'latest_dev' so we can correctly decide if there's a newer release + // than our current snapshot. + if ($projects[$project]['install_type'] == 'dev') { + if (isset($avail[$project]['dev_version']) && $avail[$project]['releases'][$avail[$project]['dev_version']]['date'] > $avail[$project]['releases'][$avail[$project]['latest_version']]['date']) { + $projects[$project]['latest_dev'] = $avail[$project]['dev_version']; + } + else { + $projects[$project]['latest_dev'] = $avail[$project]['latest_version']; + } + } + + // Stash the info about available releases into our $projects array. + $projects[$project] += $avail[$project]; + + // + // Check to see if we need an update or not. + // + + // If we don't know what to recommend, there's nothing much we can + // report, so bail out early. + if (!isset($projects[$project]['recommended'])) { + $projects[$project]['status'] = UPDATE_UNKNOWN; + $projects[$project]['reason'] = t('No available releases found'); + continue; + } + + // First, see if we're not supposed to check due to settings. + if (isset($settings[$project]) && isset($settings[$project]['check']) && + ($settings[$project]['check'] == 'never' || + $settings[$project]['check'] == $avail[$project]['recommended'])) { + $projects[$project]['check'] = FALSE; + $projects[$project]['status'] = UPDATE_NOT_CHECKED; + $projects[$project]['reason'] = t('Settings'); + $projects[$project]['notes'] = $settings[$project]['notes']; + continue; + } + + // Check based upon install type and site-wide error threshold setting. + $error_level = variable_get('update_error_threshold', 'all'); + + switch ($projects[$project]['install_type']) { + case 'official': + if ($projects[$project]['existing_version'] == $projects[$project]['recommended'] || $projects[$project]['existing_version'] == $projects[$project]['latest_version']) { + $projects[$project]['status'] = UPDATE_CURRENT; + } + else { + if (!empty($projects[$project]['security updates'])) { + $projects[$project]['status'] = UPDATE_NOT_SECURE; + } + else { + $projects[$project]['status'] = UPDATE_NOT_CURRENT; + } + } + break; + case 'dev': + if (!empty($projects[$project]['security updates'])) { + $projects[$project]['status'] = UPDATE_NOT_SECURE; + break; + } + + $latest = $avail[$project]['releases'][$projects[$project]['latest_dev']]; + if (empty($projects[$project]['datestamp'])) { + $projects[$project]['status'] = UPDATE_NOT_CHECKED; + $projects[$project]['reason'] = t('No filedate available'); + } + elseif (($projects[$project]['datestamp'] + 100 > $latest['date'])) { + $projects[$project]['status'] = UPDATE_CURRENT; + } + else { + $projects[$project]['status'] = UPDATE_NOT_CURRENT; + } + break; + + default: + $projects[$project]['status'] = UPDATE_UNKNOWN; + $projects[$project]['reason'] = t('Invalid info'); + } + } + else { + $projects[$project]['status'] = UPDATE_UNKNOWN; + $projects[$project]['reason'] = t('No available releases found'); + } + } + return $projects; +} Index: CHANGELOG.txt =================================================================== RCS file: /cvs/drupal/drupal/CHANGELOG.txt,v retrieving revision 1.211 diff -u -p -r1.211 CHANGELOG.txt --- CHANGELOG.txt 22 Jun 2007 05:47:29 -0000 1.211 +++ CHANGELOG.txt 29 Jun 2007 08:05:40 -0000 @@ -60,6 +60,7 @@ Drupal 6.0, xxxx-xx-xx (development vers - Added support for OpenID. - Made user profiles easier to theme by using array rendering and supplying template files. - Added Deletion API to allow modules to alter and respond to any delete operation. +- Added the Update status module to automatically check for available updates and warn sites if they are missing security updates or newer versions. Drupal 5.0, 2007-01-15 ----------------------