<?php
/**
 * @package ACF
 * @author  WP Engine
 *
 * © 2026 Advanced Custom Fields (ACF®). All rights reserved.
 * "ACF" is a trademark of WP Engine.
 * Licensed under the GNU General Public License v2 or later.
 * https://www.gnu.org/licenses/gpl-2.0.html
 */

if ( ! defined( 'ABSPATH' ) ) {
	exit; // Exit if accessed directly
}

if ( ! class_exists( 'ACF_Ajax_Upgrade' ) ) :

	class ACF_Ajax_Upgrade extends ACF_Ajax {

		/** @var string The AJAX action name */
		var $action = 'acf/ajax/upgrade';

		/**
		 * Returns the response data to sent back.
		 *
		 * @since 5.7.2
		 *
		 * @param array $request The request args.
		 * @return boolean|WP_Error True if successful, or WP_Error on failure.
		 */
		public function get_response( $request ) {
			if ( ! current_user_can( acf_get_setting( 'capability' ) ) ) {
				return new WP_Error( 'upgrade_error', __( 'Sorry, you do not have permission to do that.', 'acf' ) );
			}

			// Switch blog.
			$switched = false;
			if ( isset( $request['blog_id'] ) ) {
				if ( ! is_super_admin() ) {
					return new WP_Error( 'upgrade_error', __( 'Sorry, you do not have permission to do that.', 'acf' ) );
				}

				$blog_id = absint( $request['blog_id'] );
				if ( ! $blog_id || ! get_site( $blog_id ) ) {
					return new WP_Error( 'upgrade_error', __( 'Invalid site ID.', 'acf' ) );
				}

				switch_to_blog( $blog_id );
				$switched = true;
			}

			// Bail early if no upgrade available.
			if ( ! acf_has_upgrade() ) {
				if ( $switched ) {
					restore_current_blog();
				}
				return new WP_Error( 'upgrade_error', __( 'No updates available.', 'acf' ) );
			}

			// Listen for output.
			ob_start();

			// Run upgrades.
			acf_upgrade_all();

			// Store output.
			$error = ob_get_clean();

			if ( $switched ) {
				restore_current_blog();
			}

			// Return error or success.
			if ( $error ) {
				return new WP_Error( 'upgrade_error', $error );
			}

			return true;
		}
	}

	acf_new_instance( 'ACF_Ajax_Upgrade' );
endif; // class_exists check