[Summary view] [Print] [Text view]

   1  <?php
   2  /**
   3   * Privacy tools, Erase Personal Data screen.
   4   *
   5   * @package WordPress
   6   * @subpackage Administration
   7   */
   8  
   9  /** WordPress Administration Bootstrap */
  10  require_once  __DIR__ . '/admin.php';
  11  
  12  if ( ! current_user_can( 'erase_others_personal_data' ) || ! current_user_can( 'delete_users' ) ) {
  13      wp_die( __( 'Sorry, you are not allowed to erase personal data on this site.' ) );
  14  }
  15  
  16  // Contextual help - choose Help on the top right of admin panel to preview this.
  17  get_current_screen()->add_help_tab(
  18      array(
  19          'id'      => 'overview',
  20          'title'   => __( 'Overview' ),
  21          'content' =>
  22                      '<p>' . __( 'This screen is where you manage requests to erase personal data.' ) . '</p>' .
  23                      '<p>' . __( 'Privacy Laws around the world require businesses and online services to delete, anonymize, or forget the data they collect about an individual. The rights those laws enshrine are sometimes called the "Right to be Forgotten".' ) . '</p>' .
  24                      '<p>' . __( 'The tool associates data stored in WordPress with a supplied email address, including profile data and comments.' ) . '</p>' .
  25                      '<p><strong>' . __( 'Note: As this tool only gathers data from WordPress and participating plugins, you may need to do more to comply with erasure requests. For example, you are also responsible for ensuring that data collected by or stored with the 3rd party services your organization uses gets deleted.' ) . '</strong></p>',
  26      )
  27  );
  28  
  29  get_current_screen()->add_help_tab(
  30      array(
  31          'id'      => 'default-data',
  32          'title'   => __( 'Default Data' ),
  33          'content' =>
  34                      '<p>' . __( 'WordPress collects (but <em>never</em> publishes) a limited amount of data from logged-in users but then deletes it or anonymizes it. That data can include: ' ) . '</p>' .
  35                      '<p>' . __( '<strong>Profile Information</strong> &mdash; user email address, username, display name, nickname, first name, last name, description/bio, and registration date.' ) . '</p>' .
  36                      '<p>' . __( '<strong>Community Events Location</strong> &mdash; The IP Address of the user which is used for the Upcoming Community Events shown in the dashboard widget.' ) . '</p>' .
  37                      '<p>' . __( '<strong>Session Tokens</strong> &mdash; User login information, IP Addresses, Expiration Date, User Agent (Browser/OS), and Last Login.' ) . '</p>' .
  38                      '<p>' . __( '<strong>Comments</strong> &mdash; WordPress does not delete comments. The software does anonymize (but, again, <em>never</em> publishes) the associated Email Address, IP Address, and User Agent (Browser/OS).' ) . '</p>' .
  39                      '<p>' . __( '<strong>Media</strong> &mdash; A list of URLs for all media file uploads made by the user.' ) . '</p>',
  40      )
  41  );
  42  
  43  $privacy_policy_guide = '<p>' . sprintf(
  44      /* translators: %s: URL to Privacy Policy Guide screen. */
  45      __( 'If you are not sure, check the plugin documentation or contact the plugin author to see if the plugin collects data and if it supports the Data Eraser tool. This information may be available in the <a href="%s">Privacy Policy Guide</a>.' ),
  46      admin_url( 'options-privacy.php?tab=policyguide' )
  47  ) . '</p>';
  48  
  49  get_current_screen()->add_help_tab(
  50      array(
  51          'id'      => 'plugin-data',
  52          'title'   => __( 'Plugin Data' ),
  53          'content' =>
  54                      '<p>' . __( 'Many plugins may collect or store personal data either in the WordPress database or remotely. Any Erase Personal Data request should delete data from plugins as well.' ) . '</p>' .
  55                      '<p>' . __( 'If you are a plugin author, you can <a href="https://developer.wordpress.org/plugins/privacy/adding-the-personal-data-eraser-to-your-plugin/" target="_blank">learn more about how to add support for the Personal Data Eraser to a plugin here</a>.' ) . '</p>' .
  56                      $privacy_policy_guide,
  57      )
  58  );
  59  
  60  get_current_screen()->set_help_sidebar(
  61      '<p><strong>' . __( 'For more information:' ) . '</strong></p>' .
  62      '<p>' . __( '<a href="https://wordpress.org/support/article/tools-erase-personal-data-screen/">Documentation on Erase Personal Data</a>' ) . '</p>' .
  63      '<p>' . __( '<a href="https://wordpress.org/support/">Support</a>' ) . '</p>'
  64  );
  65  
  66  // Handle list table actions.
  67  _wp_personal_data_handle_actions();
  68  
  69  // Cleans up failed and expired requests before displaying the list table.
  70  _wp_personal_data_cleanup_requests();
  71  
  72  wp_enqueue_script( 'privacy-tools' );
  73  
  74  add_screen_option(
  75      'per_page',
  76      array(
  77          'default' => 20,
  78          'option'  => 'remove_personal_data_requests_per_page',
  79      )
  80  );
  81  
  82  $_list_table_args = array(
  83      'plural'   => 'privacy_requests',
  84      'singular' => 'privacy_request',
  85  );
  86  
  87  $requests_table = _get_list_table( 'WP_Privacy_Data_Removal_Requests_List_Table', $_list_table_args );
  88  
  89  $requests_table->screen->set_screen_reader_content(
  90      array(
  91          'heading_views'      => __( 'Filter erase personal data list' ),
  92          'heading_pagination' => __( 'Erase personal data list navigation' ),
  93          'heading_list'       => __( 'Erase personal data list' ),
  94      )
  95  );
  96  
  97  $requests_table->process_bulk_action();
  98  $requests_table->prepare_items();
  99  
 100  require_once ABSPATH . 'wp-admin/admin-header.php';
 101  ?>
 102  
 103  <div class="wrap nosubsub">
 104      <h1><?php esc_html_e( 'Erase Personal Data' ); ?></h1>
 105      <p><?php _e( 'This tool helps site owners comply with local laws and regulations by deleting or anonymizing known data for a given user.' ); ?></p>
 106      <hr class="wp-header-end" />
 107  
 108      <?php settings_errors(); ?>
 109  
 110      <form action="<?php echo esc_url( admin_url( 'erase-personal-data.php' ) ); ?>" method="post" class="wp-privacy-request-form">
 111          <h2><?php esc_html_e( 'Add Data Erasure Request' ); ?></h2>
 112          <div class="wp-privacy-request-form-field">
 113              <table class="form-table">
 114                  <tr>
 115                      <th scope="row">
 116                          <label for="username_or_email_for_privacy_request"><?php esc_html_e( 'Username or email address' ); ?></label>
 117                      </th>
 118                      <td>
 119                          <input type="text" required class="regular-text ltr" id="username_or_email_for_privacy_request" name="username_or_email_for_privacy_request" />
 120                      </td>
 121                  </tr>
 122                  <tr>
 123                      <th scope="row">
 124                          <?php _e( 'Confirmation email' ); ?>
 125                      </th>
 126                      <td>
 127                          <label for="send_confirmation_email">
 128                              <input type="checkbox" name="send_confirmation_email" id="send_confirmation_email" value="1" checked="checked" />
 129                              <?php _e( 'Send personal data erasure confirmation email.' ); ?>
 130                          </label>
 131                      </td>
 132                  </tr>
 133              </table>
 134              <p class="submit">
 135                  <?php submit_button( __( 'Send Request' ), 'secondary', 'submit', false ); ?>
 136              </p>
 137          </div>
 138          <?php wp_nonce_field( 'personal-data-request' ); ?>
 139          <input type="hidden" name="action" value="add_remove_personal_data_request" />
 140          <input type="hidden" name="type_of_action" value="remove_personal_data" />
 141      </form>
 142      <hr />
 143  
 144      <?php $requests_table->views(); ?>
 145  
 146      <form class="search-form wp-clearfix">
 147          <?php $requests_table->search_box( __( 'Search Requests' ), 'requests' ); ?>
 148          <input type="hidden" name="filter-status" value="<?php echo isset( $_REQUEST['filter-status'] ) ? esc_attr( sanitize_text_field( $_REQUEST['filter-status'] ) ) : ''; ?>" />
 149          <input type="hidden" name="orderby" value="<?php echo isset( $_REQUEST['orderby'] ) ? esc_attr( sanitize_text_field( $_REQUEST['orderby'] ) ) : ''; ?>" />
 150          <input type="hidden" name="order" value="<?php echo isset( $_REQUEST['order'] ) ? esc_attr( sanitize_text_field( $_REQUEST['order'] ) ) : ''; ?>" />
 151      </form>
 152  
 153      <form method="post">
 154          <?php
 155          $requests_table->display();
 156          $requests_table->embed_scripts();
 157          ?>
 158      </form>
 159  </div>
 160  
 161  <?php
 162  require_once ABSPATH . 'wp-admin/admin-footer.php';