wip

Author: JanJakes

components/Blueprints/BlueprintParser.php

@@ -417,7 +417,14 @@ private function buildPluginStep( $plugin ): array {
             $plugin = [ 'source' => $plugin ];
         }
 
-        $error = $this->validateDataSource( $plugin['source'], 'wp-content/plugins/*' );
+        $source = $plugin['source'];
+        $error  = $this->validateDataSource( $source, 'wp-content/plugins/*' );
+        if ( null === $error ) {
+            if ( str_ends_with( $source, '.php' ) ) {
+                $error = $this->validatePluginFile( $source );
+            }
+        }
+
         return [
             'key'    => 'plugins',
             'name'   => 'installPlugin',
@@ -554,6 +561,43 @@ private function validateDataSource( string $source, string $allowed_pattern ):
         return null;
     }
 
+    /**
+     * Validate a plugin file as per WordPress plugin requirements.
+     *
+     * The implementation mirrors "get_file_data()" from WordPress core.
+     *
+     * @param string $source The path to the plugin file.
+     * @return string|null   An error message if the plugin file is invalid, or null if it is valid.
+     */
+    private function validatePluginFile( string $source ): ?string {
+        $root = $this->configuration->getTargetSiteRoot();
+        $file = rtrim( $root, '/' ) . ltrim( $source, '.' );
+
+    	// Pull only the first 8 KB of the file in.
+        $file_data = file_get_contents( $file, false, null, 0, 8 * 1024 );
+        if ( false === $file_data ) {
+            $file_data = '';
+        }
+
+        // Make sure we catch CR-only line endings.
+        $file_data = str_replace( "\r", "\n", $file_data );
+
+        // We only need to check for the plugin name header.
+        $all_headers = array( 'Name' => 'Plugin Name' );
+        foreach ( $all_headers as $field => $regex ) {
+            if ( preg_match( '/^(?:[ \t]*<\?php)?[ \t\/*#@]*' . preg_quote( $regex, '/' ) . ':(.*)$/mi', $file_data, $match ) && $match[1] ) {
+                $all_headers[ $field ] = $match[1];
+            } else {
+                $all_headers[ $field ] = '';
+            }
+        }
+
+        if ( empty( $all_headers['Name'] ) ) {
+            return 'Invalid plugin file. Missing "Plugin Name" header.';
+        }
+        return null;
+    }
+
     /**
      * Detect on which line a top-level JSON key is defined in the input string.
      * This is a simple helper that only supports top-level keys in a top-level