WP_Customize_Manager::handle_load_themes_request()

Compatibility

Present in every tracked release (6.7.7 to 7.1.0), and compiles on PHP 7.4 through 8.6-dev.

Performance profile

How much work a call to WP_Customize_Manager::handle_load_themes_request() does, and what it touches: the algorithmic scaling, the Zend instruction count per call across PHP versions, the hooks it hands control to, and the core code that calls it. Measured from the compiled opcodes, not a stopwatch, so every number is identical on any machine running the same PHP version, and every function in core is ranked by cost.

Cost class

Expensive

Reaches an outbound HTTP request via wp_remote_get().

Scaling

Scales with input

The body loops, so the work grows with how much data it finds.

Instructions

57–152

Executed per call on PHP 8.5, depending on the branch taken. The body compiles to 315.

Plugin surface

1 hook

Third-party callbacks on 'customize_load_themes' run inside this call, and their cost is not bounded by anything here.

Called by

0

Nothing in core calls this; the cost is only what you spend yourself.

What it touches

• hookthird-party callbacksapply_filters()called directly
• transienttransientget_site_transient()one call below WP_Customize_Manager::handle_load_themes_request()
• optionnetwork optionget_site_option()one call below WP_Customize_Manager::handle_load_themes_request()
• httpoutbound HTTP requestwp_remote_get()one call below WP_Customize_Manager::handle_load_themes_request()

Further down the call graph this can also reach cache, query and serialize. Those are the worst case, several calls deep and usually down an error path, not what a normal call pays.

What one call costs · 89 distinct outcomes

One number would be a lie: the work depends on which branch runs. These are every distinct cost WP_Customize_Manager::handle_load_themes_request() can have, taken from its control-flow graph on PHP 8.5.

This body has more branch combinations than are worth enumerating, so the table covers the outcomes found first rather than every one that exists.

Hooks and filters fired · 1

One hook fires while WP_Customize_Manager::handle_load_themes_request() runs, in this order:

1. 1
   apply_filters( customize_load_themes )filterline 5987 (+158 into the body)

   Filters the theme data loaded in the customizer.

Uses · 23

• check_ajax_referer()Verifies the Ajax request to prevent processing requests external of the blog.
• current_user_can()Returns whether the current user has the specified capability.
• wp_die()Kills WordPress execution and displays HTML page with an error message.
• wp_send_json_error()Sends a JSON response back to an Ajax request, indicating failure.
• sanitize_key()Sanitizes a string key.
• sanitize_text_field()Sanitizes a string from user input or from the database.
• wp_unslash()Removes slashes from a string or recursively removes slashes from strings within an array.
• absint()Converts a value to non-negative integer.
• wp_prepare_themes_for_js()Prepares themes for JavaScript.
• themes_api()Retrieves theme installer pages from the WordPress.org Themes API.
• is_wp_error()Checks whether the given variable is a WordPress Error.
• wp_get_themes()Returns an array of WP_Theme objects based on the arguments.

Source code

View on Trac ↗View on GitHub ↗

5829	public function handle_load_themes_request() {5830		check_ajax_referer( 'switch_themes', 'nonce' );5831 5832		if ( ! current_user_can( 'switch_themes' ) ) {5833			wp_die( -1 );5834		}5835 5836		if ( empty( $_POST['theme_action'] ) ) {5837			wp_send_json_error( 'missing_theme_action' );5838		}5839		$theme_action = sanitize_key( $_POST['theme_action'] );5840		$themes       = array();5841		$args         = array();5842 5843		// Define query filters based on user input.5844		if ( ! array_key_exists( 'search', $_POST ) ) {5845			$args['search'] = '';5846		} else {5847			$args['search'] = sanitize_text_field( wp_unslash( $_POST['search'] ) );5848		}5849 5850		if ( ! array_key_exists( 'tags', $_POST ) ) {5851			$args['tag'] = '';5852		} else {5853			$args['tag'] = array_map( 'sanitize_text_field', wp_unslash( (array) $_POST['tags'] ) );5854		}5855 5856		if ( ! array_key_exists( 'page', $_POST ) ) {5857			$args['page'] = 1;5858		} else {5859			$args['page'] = absint( $_POST['page'] );5860		}5861 5862		require_once ABSPATH . 'wp-admin/includes/theme.php';5863 5864		if ( 'installed' === $theme_action ) {5865 5866			// Load all installed themes from wp_prepare_themes_for_js().5867			$themes = array( 'themes' => array() );5868			foreach ( wp_prepare_themes_for_js() as $theme ) {5869				$theme['type']      = 'installed';5870				$theme['active']    = ( isset( $_POST['customized_theme'] ) && $_POST['customized_theme'] === $theme['id'] );5871				$themes['themes'][] = $theme;5872			}5873		} elseif ( 'wporg' === $theme_action ) {5874 5875			// Load WordPress.org themes from the .org API and normalize data to match installed theme objects.5876			if ( ! current_user_can( 'install_themes' ) ) {5877				wp_die( -1 );5878			}5879 5880			// Arguments for all queries.5881			$wporg_args = array(5882				'per_page' => 100,5883				'fields'   => array(5884					'reviews_url' => true, // Explicitly request the reviews URL to be linked from the customizer.5885				),5886			);5887 5888			$args = array_merge( $wporg_args, $args );5889 5890			if ( '' === $args['search'] && '' === $args['tag'] ) {5891				$args['browse'] = 'new'; // Sort by latest themes by default.5892			}5893 5894			// Load themes from the .org API.5895			$themes = themes_api( 'query_themes', $args );5896			if ( is_wp_error( $themes ) ) {5897				wp_send_json_error();5898			}5899 5900			// This list matches the allowed tags in wp-admin/includes/theme-install.php.5901			$themes_allowedtags                     = array_fill_keys(5902				array( 'a', 'abbr', 'acronym', 'code', 'pre', 'em', 'strong', 'div', 'p', 'ul', 'ol', 'li', 'h1', 'h2', 'h3', 'h4', 'h5', 'h6', 'img' ),5903				array()5904			);5905			$themes_allowedtags['a']                = array_fill_keys( array( 'href', 'title', 'target' ), true );5906			$themes_allowedtags['acronym']['title'] = true;5907			$themes_allowedtags['abbr']['title']    = true;5908			$themes_allowedtags['img']              = array_fill_keys( array( 'src', 'class', 'alt' ), true );

Changelog

Introduced in 4.9.0. One change between 6.7.7 and 7.1.0.

1. 6.7.7
2. 6.8.8
3. 6.9.7
4. 7.0.4
5. 7.1.0

Signature, return type and hooks compared across 5 parsed releases.

About this page

Parsed data

Generated from the wordpress-develop 6.7.7 tag, from src/wp-includes/class-wp-customize-manager.php, and regenerated for each WordPress release so it tracks the code rather than a snapshot of it.

Corrections

Something wrong on this page? Report it and it gets fixed in the next regeneration.