mirror of
https://gh.wpcy.net/https://github.com/superdav42/wp-update-server-plugin.git
synced 2026-07-14 13:42:22 +08:00
Enable automatic updates for WordPress plugins sold as Woocommerce downloadable products
21e011921d
The vendored yahnis-elsts/wp-update-server library calls glob() with GLOB_BRACE | GLOB_NOESCAPE. GLOB_BRACE is not defined on PHP builds linked against musl libc (Alpine, the official static FrankenPHP releases). In PHP 8 this triggers a fatal 'Uncaught Error: Undefined constant GLOB_BRACE' in Wpup_UpdateServer::findFirstAsset() every time the update API tries to resolve a plugin banner or icon asset. Add a Composer patch (via cweagans/composer-patches) that switches to runtime feature detection: when GLOB_BRACE is available, behaviour is identical; when it is missing, fall back to one glob() call per extension and merge the results. The patched UpdateServer.php is also committed so existing deployments (which ship vendor/ as-is) pick up the fix without re-running composer install. An equivalent upstream PR is being submitted to YahnisElsts/wp-update-server. |
||
|---|---|---|
| .agents | ||
| assets | ||
| inc | ||
| patches | ||
| templates | ||
| todo | ||
| vendor | ||
| .gitignore | ||
| AGENTS.md | ||
| composer.json | ||
| composer.lock | ||
| LICENSE | ||
| phpstan.neon.dist | ||
| README.md | ||
| TODO.md | ||
| wp-cli.yml | ||
| wp-update-server-plugin.php | ||
WP Update Server Plugin
This project creates an update server to enable automatic updates for WordPress plugins which are Woocommerce downloadable products.
Requires
- Woocommerce
- WP OAuth Server
Features
Telemetry Dashboard
Opt-in telemetry from Ultimate Multisite installations. Tracks PHP/WP/plugin versions, network types, active addons, and error reports.
Site Discovery (Network Health)
Background scraper that discovers network health signals from domains found via passive install tracking. Runs daily via WP-Cron and processes up to 20 domains per batch.
What it detects:
- Whether the site is live (HTTP 2xx)
- Whether it is a production domain (not staging/dev/local)
- SSL/HTTPS availability
- Presence of a checkout or registration page (UM shortcodes/blocks)
- Estimated subsite count (subdirectory path probing + HTML signals)
- Network type: subdomain vs subdirectory
- Ultimate Multisite version (from asset URLs or meta tags)
Health score (0–100):
| Signal | Points |
|---|---|
| Site is live | +20 |
| Production domain | +15 |
| Has SSL | +10 |
| Has checkout page | +15 |
| Detected subsites > 5 | +20 |
| Detected subsites > 50 | +10 |
| UM version fingerprinted | +10 |
Privacy and ethics:
- Only scrapes publicly accessible pages (homepage,
/register/) - Respects
robots.txt— skips sites that disallowUltimateMultisiteBot - User-Agent:
UltimateMultisiteBot/1.0 (+https://ultimatemultisite.com/bot) - 10-second timeout per request; unresponsive sites are marked
failedand retried next run - Stores only aggregate signals, not page content
Dashboard answers:
- How many production networks have 10+ subsites?
- How many networks have a checkout page (are selling to customers)?
- Distribution of health scores across all discovered domains
