Wallogit.com
2017 © Pedro Peláez
WordPress Plugin Update Server
Custom update API package for WordPress plugins and themes., (*1)
Based on WP Update Server by Yahnis Elsts, (*2)
Provide updates for plugins and themes., (*3)
From the users perspective, the updates work just like they do with plugins and themes listed in the official WordPress.org directory., (*4)
Easy to integrate with existing plugins and themes., (*5)
All it takes is about 5 lines of code. See the plugin update checker and theme update checker docs for details, or just scroll down to the "Getting Started" section for the short version., (*6)
Designed for extensibility., (*7)
Want to secure your upgrade download links? Or use a custom logger or cache? Maybe your plugin doesn't have a standard readme.txt and you'd prefer to load the changelog and other update meta from the database instead? Create your own customized server by extending the Wpup_UpdateServer class. See examples below., (*8)
This part of the setup process is identical for both plugins and themes. For the sake of brevity, I'll describe it from the plugin perspective., (*9)
wp-update-server directory to your site. You can rename it to something else (e.g. updates) if you want. cache and logs subdirectories writable by PHP.packages subdirectory./wp-update-server/?action=get_metadata&slug=plugin-directory-name in your browser. You should see a JSON document containing various information about your plugin (name, version, description and so on).Tip: Use the JSONView extension (Firefox, Chrome) to pretty-print JSON in the browser., (*10)
When creating the Zip file, make sure the plugin files are inside a directory and not at the archive root. For example, lets say you have a plugin called "My Cool Plugin" and it lives inside /wp-content/plugins/my-cool-plugin. The ZIP file should be named my-cool-plugin.zip and it should contain the following:, (*11)
/my-cool-plugin
/css
/js
/another-directory
my-cool-plugin.php
readme.txt
...
If you put everything at the root, update notifications may show up just fine, but you will run into inexplicable problems when you try to install an update because WordPress expects plugin files to be inside a subdirectory., (*12)
See the update checker docs for detailed usage instructions and and examples., (*13)
See the theme update checker docs for information and examples., (*14)
The server logs all API requests to the /logs/request.log file. Each line represents one request and is formatted like this:, (*15)
[timestamp] IP_address action slug installed_version wordpress_version site_url query_string
Missing or inapplicable fields are replaced with a dash "-". The logger extracts the WordPress version and site URL from the "User-Agent" header that WordPress adds to all requests sent via its HTTP API. These fields will not be present if you make an API request via the browser or if the header is removed or overriden by a plugin (some security plugins do that)., (*16)
To customize the way the update server works, create your own server class that extends Wpup_UpdateServer and edit the init script (that's index.php if you're running the server as a standalone app) to load and use the new class., (*17)
For example, lets make a simple modification that disables downloads and removes the download URL from the plugin details returned by the update API. This could serve as a foundation for a custom server that requires authorization to download an update., (*18)
Add a new file MyCustomServer.php to wp-update-server:, (*19)
class MyCustomServer extends Wpup_UpdateServer {
protected function filterMetadata($meta, $request) {
$meta = parent::filterMetadata($meta, $request);
unset($meta['download_url']);
return $meta;
}
protected function actionDownload(Wpup_Request $request) {
$this->exitWithError('Downloads are disabled.', 403);
}
}
Edit index.php to use the new class:, (*20)
require __DIR__ . '/loader.php'; require __DIR__ . '/MyCustomServer.php'; $server = new MyCustomServer(); $server->handleRequest();
While the easiest way to use the update server is to run it as a standalone application, that's not the only way to do it. If you need to, you can also load it as a third-party library and create your own server instance. This lets you filter and modify query arguments before passing them to the server, run it from a WordPress plugin, use your own server class, and so on., (*21)
To run the server from your own application you need to do three things:, (*22)
/wp-update-server/loader.php.Wpup_UpdateServer or a class that extends it.handleRequest($queryParams) method.Here's a basic example plugin that runs the update server from inside WordPress:, (*23)
<?php
/*
Plugin Name: Plugin Update Server
Description: An example plugin that runs the update API.
Version: 1.0
Author: Yahnis Elsts
Author URI: http://w-shadow.com/
*/
class ExamplePlugin {
protected $updateServer;
public function __construct() {
require_once __DIR__ . '/path/to/wp-update-server/loader.php';
$this->updateServer = new Wpup_UpdateServer(home_url('/'));
add_filter('query_vars', array($this, 'addQueryVariables'));
add_action('template_redirect', array($this, 'handleUpdateApiRequest'));
}
public function addQueryVariables($queryVariables) {
$queryVariables = array_merge($queryVariables, array(
'update_action',
'update_slug',
));
return $queryVariables;
}
public function handleUpdateApiRequest() {
if ( get_query_var('update_action') ) {
$this->updateServer->handleRequest(array(
'action' => get_query_var('update_action'),
'slug' => get_query_var('update_slug'),
));
}
}
}
$examplePlugin = new ExamplePlugin();
Note: If you intend to use something like the above in practice, you'll probably want to override Wpup_UpdateServer::generateDownloadUrl() to use your own URL structure or query variable names., (*24)
See this blog post for a high-level overview and some brief examples., (*25)
WordPress Plugin Update Server
MIT
wordpress automatic updates plugin updates theme updates