diff options
| author | Charles Cabergs <me@cacharle.xyz> | 2020-07-27 10:05:23 +0200 |
|---|---|---|
| committer | Charles Cabergs <me@cacharle.xyz> | 2020-07-27 10:05:23 +0200 |
| commit | 5bf66662a9bdd62c5bccab15e607cd95cfb8fcab (patch) | |
| tree | 39a1a4629749056191c05dfd899f931701b7acf3 /srcs/wordpress/wp-includes/rest-api/endpoints/class-wp-rest-comments-controller.php | |
| parent | 5afd237bbd22028b85532b8c0b3fcead49a00764 (diff) | |
| download | ft_server-master.tar.gz ft_server-master.tar.bz2 ft_server-master.zip | |
Removed wordpress and phpmyadmin, my server doesn't handle it well and it brings shame on my famillyHEADmaster
Diffstat (limited to 'srcs/wordpress/wp-includes/rest-api/endpoints/class-wp-rest-comments-controller.php')
| -rw-r--r-- | srcs/wordpress/wp-includes/rest-api/endpoints/class-wp-rest-comments-controller.php | 1710 |
1 files changed, 0 insertions, 1710 deletions
diff --git a/srcs/wordpress/wp-includes/rest-api/endpoints/class-wp-rest-comments-controller.php b/srcs/wordpress/wp-includes/rest-api/endpoints/class-wp-rest-comments-controller.php deleted file mode 100644 index 376959a..0000000 --- a/srcs/wordpress/wp-includes/rest-api/endpoints/class-wp-rest-comments-controller.php +++ /dev/null @@ -1,1710 +0,0 @@ -<?php -/** - * REST API: WP_REST_Comments_Controller class - * - * @package WordPress - * @subpackage REST_API - * @since 4.7.0 - */ - -/** - * Core controller used to access comments via the REST API. - * - * @since 4.7.0 - * - * @see WP_REST_Controller - */ -class WP_REST_Comments_Controller extends WP_REST_Controller { - - /** - * Instance of a comment meta fields object. - * - * @since 4.7.0 - * @var WP_REST_Comment_Meta_Fields - */ - protected $meta; - - /** - * Constructor. - * - * @since 4.7.0 - */ - public function __construct() { - $this->namespace = 'wp/v2'; - $this->rest_base = 'comments'; - - $this->meta = new WP_REST_Comment_Meta_Fields(); - } - - /** - * Registers the routes for the objects of the controller. - * - * @since 4.7.0 - */ - public function register_routes() { - - register_rest_route( - $this->namespace, - '/' . $this->rest_base, - array( - array( - 'methods' => WP_REST_Server::READABLE, - 'callback' => array( $this, 'get_items' ), - 'permission_callback' => array( $this, 'get_items_permissions_check' ), - 'args' => $this->get_collection_params(), - ), - array( - 'methods' => WP_REST_Server::CREATABLE, - 'callback' => array( $this, 'create_item' ), - 'permission_callback' => array( $this, 'create_item_permissions_check' ), - 'args' => $this->get_endpoint_args_for_item_schema( WP_REST_Server::CREATABLE ), - ), - 'schema' => array( $this, 'get_public_item_schema' ), - ) - ); - - register_rest_route( - $this->namespace, - '/' . $this->rest_base . '/(?P<id>[\d]+)', - array( - 'args' => array( - 'id' => array( - 'description' => __( 'Unique identifier for the object.' ), - 'type' => 'integer', - ), - ), - array( - 'methods' => WP_REST_Server::READABLE, - 'callback' => array( $this, 'get_item' ), - 'permission_callback' => array( $this, 'get_item_permissions_check' ), - 'args' => array( - 'context' => $this->get_context_param( array( 'default' => 'view' ) ), - 'password' => array( - 'description' => __( 'The password for the parent post of the comment (if the post is password protected).' ), - 'type' => 'string', - ), - ), - ), - array( - 'methods' => WP_REST_Server::EDITABLE, - 'callback' => array( $this, 'update_item' ), - 'permission_callback' => array( $this, 'update_item_permissions_check' ), - 'args' => $this->get_endpoint_args_for_item_schema( WP_REST_Server::EDITABLE ), - ), - array( - 'methods' => WP_REST_Server::DELETABLE, - 'callback' => array( $this, 'delete_item' ), - 'permission_callback' => array( $this, 'delete_item_permissions_check' ), - 'args' => array( - 'force' => array( - 'type' => 'boolean', - 'default' => false, - 'description' => __( 'Whether to bypass trash and force deletion.' ), - ), - 'password' => array( - 'description' => __( 'The password for the parent post of the comment (if the post is password protected).' ), - 'type' => 'string', - ), - ), - ), - 'schema' => array( $this, 'get_public_item_schema' ), - ) - ); - } - - /** - * Checks if a given request has access to read comments. - * - * @since 4.7.0 - * - * @param WP_REST_Request $request Full details about the request. - * @return WP_Error|bool True if the request has read access, error object otherwise. - */ - public function get_items_permissions_check( $request ) { - - if ( ! empty( $request['post'] ) ) { - foreach ( (array) $request['post'] as $post_id ) { - $post = get_post( $post_id ); - - if ( ! empty( $post_id ) && $post && ! $this->check_read_post_permission( $post, $request ) ) { - return new WP_Error( 'rest_cannot_read_post', __( 'Sorry, you are not allowed to read the post for this comment.' ), array( 'status' => rest_authorization_required_code() ) ); - } elseif ( 0 === $post_id && ! current_user_can( 'moderate_comments' ) ) { - return new WP_Error( 'rest_cannot_read', __( 'Sorry, you are not allowed to read comments without a post.' ), array( 'status' => rest_authorization_required_code() ) ); - } - } - } - - if ( ! empty( $request['context'] ) && 'edit' === $request['context'] && ! current_user_can( 'moderate_comments' ) ) { - return new WP_Error( 'rest_forbidden_context', __( 'Sorry, you are not allowed to edit comments.' ), array( 'status' => rest_authorization_required_code() ) ); - } - - if ( ! current_user_can( 'edit_posts' ) ) { - $protected_params = array( 'author', 'author_exclude', 'author_email', 'type', 'status' ); - $forbidden_params = array(); - - foreach ( $protected_params as $param ) { - if ( 'status' === $param ) { - if ( 'approve' !== $request[ $param ] ) { - $forbidden_params[] = $param; - } - } elseif ( 'type' === $param ) { - if ( 'comment' !== $request[ $param ] ) { - $forbidden_params[] = $param; - } - } elseif ( ! empty( $request[ $param ] ) ) { - $forbidden_params[] = $param; - } - } - - if ( ! empty( $forbidden_params ) ) { - return new WP_Error( - 'rest_forbidden_param', - /* translators: %s: List of forbidden parameters. */ - sprintf( __( 'Query parameter not permitted: %s' ), implode( ', ', $forbidden_params ) ), - array( 'status' => rest_authorization_required_code() ) - ); - } - } - - return true; - } - - /** - * Retrieves a list of comment items. - * - * @since 4.7.0 - * - * @param WP_REST_Request $request Full details about the request. - * @return WP_Error|WP_REST_Response Response object on success, or error object on failure. - */ - public function get_items( $request ) { - - // Retrieve the list of registered collection query parameters. - $registered = $this->get_collection_params(); - - /* - * This array defines mappings between public API query parameters whose - * values are accepted as-passed, and their internal WP_Query parameter - * name equivalents (some are the same). Only values which are also - * present in $registered will be set. - */ - $parameter_mappings = array( - 'author' => 'author__in', - 'author_email' => 'author_email', - 'author_exclude' => 'author__not_in', - 'exclude' => 'comment__not_in', - 'include' => 'comment__in', - 'offset' => 'offset', - 'order' => 'order', - 'parent' => 'parent__in', - 'parent_exclude' => 'parent__not_in', - 'per_page' => 'number', - 'post' => 'post__in', - 'search' => 'search', - 'status' => 'status', - 'type' => 'type', - ); - - $prepared_args = array(); - - /* - * For each known parameter which is both registered and present in the request, - * set the parameter's value on the query $prepared_args. - */ - foreach ( $parameter_mappings as $api_param => $wp_param ) { - if ( isset( $registered[ $api_param ], $request[ $api_param ] ) ) { - $prepared_args[ $wp_param ] = $request[ $api_param ]; - } - } - - // Ensure certain parameter values default to empty strings. - foreach ( array( 'author_email', 'search' ) as $param ) { - if ( ! isset( $prepared_args[ $param ] ) ) { - $prepared_args[ $param ] = ''; - } - } - - if ( isset( $registered['orderby'] ) ) { - $prepared_args['orderby'] = $this->normalize_query_param( $request['orderby'] ); - } - - $prepared_args['no_found_rows'] = false; - - $prepared_args['date_query'] = array(); - - // Set before into date query. Date query must be specified as an array of an array. - if ( isset( $registered['before'], $request['before'] ) ) { - $prepared_args['date_query'][0]['before'] = $request['before']; - } - - // Set after into date query. Date query must be specified as an array of an array. - if ( isset( $registered['after'], $request['after'] ) ) { - $prepared_args['date_query'][0]['after'] = $request['after']; - } - - if ( isset( $registered['page'] ) && empty( $request['offset'] ) ) { - $prepared_args['offset'] = $prepared_args['number'] * ( absint( $request['page'] ) - 1 ); - } - - /** - * Filters arguments, before passing to WP_Comment_Query, when querying comments via the REST API. - * - * @since 4.7.0 - * - * @link https://developer.wordpress.org/reference/classes/wp_comment_query/ - * - * @param array $prepared_args Array of arguments for WP_Comment_Query. - * @param WP_REST_Request $request The current request. - */ - $prepared_args = apply_filters( 'rest_comment_query', $prepared_args, $request ); - - $query = new WP_Comment_Query; - $query_result = $query->query( $prepared_args ); - - $comments = array(); - - foreach ( $query_result as $comment ) { - if ( ! $this->check_read_permission( $comment, $request ) ) { - continue; - } - - $data = $this->prepare_item_for_response( $comment, $request ); - $comments[] = $this->prepare_response_for_collection( $data ); - } - - $total_comments = (int) $query->found_comments; - $max_pages = (int) $query->max_num_pages; - - if ( $total_comments < 1 ) { - // Out-of-bounds, run the query again without LIMIT for total count. - unset( $prepared_args['number'], $prepared_args['offset'] ); - - $query = new WP_Comment_Query; - $prepared_args['count'] = true; - - $total_comments = $query->query( $prepared_args ); - $max_pages = ceil( $total_comments / $request['per_page'] ); - } - - $response = rest_ensure_response( $comments ); - $response->header( 'X-WP-Total', $total_comments ); - $response->header( 'X-WP-TotalPages', $max_pages ); - - $base = add_query_arg( urlencode_deep( $request->get_query_params() ), rest_url( sprintf( '%s/%s', $this->namespace, $this->rest_base ) ) ); - - if ( $request['page'] > 1 ) { - $prev_page = $request['page'] - 1; - - if ( $prev_page > $max_pages ) { - $prev_page = $max_pages; - } - - $prev_link = add_query_arg( 'page', $prev_page, $base ); - $response->link_header( 'prev', $prev_link ); - } - - if ( $max_pages > $request['page'] ) { - $next_page = $request['page'] + 1; - $next_link = add_query_arg( 'page', $next_page, $base ); - - $response->link_header( 'next', $next_link ); - } - - return $response; - } - - /** - * Get the comment, if the ID is valid. - * - * @since 4.7.2 - * - * @param int $id Supplied ID. - * @return WP_Comment|WP_Error Comment object if ID is valid, WP_Error otherwise. - */ - protected function get_comment( $id ) { - $error = new WP_Error( 'rest_comment_invalid_id', __( 'Invalid comment ID.' ), array( 'status' => 404 ) ); - if ( (int) $id <= 0 ) { - return $error; - } - - $id = (int) $id; - $comment = get_comment( $id ); - if ( empty( $comment ) ) { - return $error; - } - - if ( ! empty( $comment->comment_post_ID ) ) { - $post = get_post( (int) $comment->comment_post_ID ); - if ( empty( $post ) ) { - return new WP_Error( 'rest_post_invalid_id', __( 'Invalid post ID.' ), array( 'status' => 404 ) ); - } - } - - return $comment; - } - - /** - * Checks if a given request has access to read the comment. - * - * @since 4.7.0 - * - * @param WP_REST_Request $request Full details about the request. - * @return WP_Error|bool True if the request has read access for the item, error object otherwise. - */ - public function get_item_permissions_check( $request ) { - $comment = $this->get_comment( $request['id'] ); - if ( is_wp_error( $comment ) ) { - return $comment; - } - - if ( ! empty( $request['context'] ) && 'edit' === $request['context'] && ! current_user_can( 'moderate_comments' ) ) { - return new WP_Error( 'rest_forbidden_context', __( 'Sorry, you are not allowed to edit comments.' ), array( 'status' => rest_authorization_required_code() ) ); - } - - $post = get_post( $comment->comment_post_ID ); - - if ( ! $this->check_read_permission( $comment, $request ) ) { - return new WP_Error( 'rest_cannot_read', __( 'Sorry, you are not allowed to read this comment.' ), array( 'status' => rest_authorization_required_code() ) ); - } - - if ( $post && ! $this->check_read_post_permission( $post, $request ) ) { - return new WP_Error( 'rest_cannot_read_post', __( 'Sorry, you are not allowed to read the post for this comment.' ), array( 'status' => rest_authorization_required_code() ) ); - } - - return true; - } - - /** - * Retrieves a comment. - * - * @since 4.7.0 - * - * @param WP_REST_Request $request Full details about the request. - * @return WP_Error|WP_REST_Response Response object on success, or error object on failure. - */ - public function get_item( $request ) { - $comment = $this->get_comment( $request['id'] ); - if ( is_wp_error( $comment ) ) { - return $comment; - } - - $data = $this->prepare_item_for_response( $comment, $request ); - $response = rest_ensure_response( $data ); - - return $response; - } - - /** - * Checks if a given request has access to create a comment. - * - * @since 4.7.0 - * - * @param WP_REST_Request $request Full details about the request. - * @return WP_Error|bool True if the request has access to create items, error object otherwise. - */ - public function create_item_permissions_check( $request ) { - if ( ! is_user_logged_in() ) { - if ( get_option( 'comment_registration' ) ) { - return new WP_Error( 'rest_comment_login_required', __( 'Sorry, you must be logged in to comment.' ), array( 'status' => 401 ) ); - } - - /** - * Filter whether comments can be created without authentication. - * - * Enables creating comments for anonymous users. - * - * @since 4.7.0 - * - * @param bool $allow_anonymous Whether to allow anonymous comments to - * be created. Default `false`. - * @param WP_REST_Request $request Request used to generate the - * response. - */ - $allow_anonymous = apply_filters( 'rest_allow_anonymous_comments', false, $request ); - if ( ! $allow_anonymous ) { - return new WP_Error( 'rest_comment_login_required', __( 'Sorry, you must be logged in to comment.' ), array( 'status' => 401 ) ); - } - } - - // Limit who can set comment `author`, `author_ip` or `status` to anything other than the default. - if ( isset( $request['author'] ) && get_current_user_id() !== $request['author'] && ! current_user_can( 'moderate_comments' ) ) { - return new WP_Error( - 'rest_comment_invalid_author', - /* translators: %s: Request parameter. */ - sprintf( __( "Sorry, you are not allowed to edit '%s' for comments." ), 'author' ), - array( 'status' => rest_authorization_required_code() ) - ); - } - - if ( isset( $request['author_ip'] ) && ! current_user_can( 'moderate_comments' ) ) { - if ( empty( $_SERVER['REMOTE_ADDR'] ) || $request['author_ip'] !== $_SERVER['REMOTE_ADDR'] ) { - return new WP_Error( - 'rest_comment_invalid_author_ip', - /* translators: %s: Request parameter. */ - sprintf( __( "Sorry, you are not allowed to edit '%s' for comments." ), 'author_ip' ), - array( 'status' => rest_authorization_required_code() ) - ); - } - } - - if ( isset( $request['status'] ) && ! current_user_can( 'moderate_comments' ) ) { - return new WP_Error( - 'rest_comment_invalid_status', - /* translators: %s: Request parameter. */ - sprintf( __( "Sorry, you are not allowed to edit '%s' for comments." ), 'status' ), - array( 'status' => rest_authorization_required_code() ) - ); - } - - if ( empty( $request['post'] ) ) { - return new WP_Error( 'rest_comment_invalid_post_id', __( 'Sorry, you are not allowed to create this comment without a post.' ), array( 'status' => 403 ) ); - } - - $post = get_post( (int) $request['post'] ); - if ( ! $post ) { - return new WP_Error( 'rest_comment_invalid_post_id', __( 'Sorry, you are not allowed to create this comment without a post.' ), array( 'status' => 403 ) ); - } - - if ( 'draft' === $post->post_status ) { - return new WP_Error( 'rest_comment_draft_post', __( 'Sorry, you are not allowed to create a comment on this post.' ), array( 'status' => 403 ) ); - } - - if ( 'trash' === $post->post_status ) { - return new WP_Error( 'rest_comment_trash_post', __( 'Sorry, you are not allowed to create a comment on this post.' ), array( 'status' => 403 ) ); - } - - if ( ! $this->check_read_post_permission( $post, $request ) ) { - return new WP_Error( 'rest_cannot_read_post', __( 'Sorry, you are not allowed to read the post for this comment.' ), array( 'status' => rest_authorization_required_code() ) ); - } - - if ( ! comments_open( $post->ID ) ) { - return new WP_Error( 'rest_comment_closed', __( 'Sorry, comments are closed for this item.' ), array( 'status' => 403 ) ); - } - - return true; - } - - /** - * Creates a comment. - * - * @since 4.7.0 - * - * @param WP_REST_Request $request Full details about the request. - * @return WP_Error|WP_REST_Response Response object on success, or error object on failure. - */ - public function create_item( $request ) { - if ( ! empty( $request['id'] ) ) { - return new WP_Error( 'rest_comment_exists', __( 'Cannot create existing comment.' ), array( 'status' => 400 ) ); - } - - // Do not allow comments to be created with a non-default type. - if ( ! empty( $request['type'] ) && 'comment' !== $request['type'] ) { - return new WP_Error( 'rest_invalid_comment_type', __( 'Cannot create a comment with that type.' ), array( 'status' => 400 ) ); - } - - $prepared_comment = $this->prepare_item_for_database( $request ); - if ( is_wp_error( $prepared_comment ) ) { - return $prepared_comment; - } - - $prepared_comment['comment_type'] = ''; - - /* - * Do not allow a comment to be created with missing or empty - * comment_content. See wp_handle_comment_submission(). - */ - if ( empty( $prepared_comment['comment_content'] ) ) { - return new WP_Error( 'rest_comment_content_invalid', __( 'Invalid comment content.' ), array( 'status' => 400 ) ); - } - - // Setting remaining values before wp_insert_comment so we can use wp_allow_comment(). - if ( ! isset( $prepared_comment['comment_date_gmt'] ) ) { - $prepared_comment['comment_date_gmt'] = current_time( 'mysql', true ); - } - - // Set author data if the user's logged in. - $missing_author = empty( $prepared_comment['user_id'] ) - && empty( $prepared_comment['comment_author'] ) - && empty( $prepared_comment['comment_author_email'] ) - && empty( $prepared_comment['comment_author_url'] ); - - if ( is_user_logged_in() && $missing_author ) { - $user = wp_get_current_user(); - - $prepared_comment['user_id'] = $user->ID; - $prepared_comment['comment_author'] = $user->display_name; - $prepared_comment['comment_author_email'] = $user->user_email; - $prepared_comment['comment_author_url'] = $user->user_url; - } - - // Honor the discussion setting that requires a name and email address of the comment author. - if ( get_option( 'require_name_email' ) ) { - if ( empty( $prepared_comment['comment_author'] ) || empty( $prepared_comment['comment_author_email'] ) ) { - return new WP_Error( 'rest_comment_author_data_required', __( 'Creating a comment requires valid author name and email values.' ), array( 'status' => 400 ) ); - } - } - - if ( ! isset( $prepared_comment['comment_author_email'] ) ) { - $prepared_comment['comment_author_email'] = ''; - } - - if ( ! isset( $prepared_comment['comment_author_url'] ) ) { - $prepared_comment['comment_author_url'] = ''; - } - - if ( ! isset( $prepared_comment['comment_agent'] ) ) { - $prepared_comment['comment_agent'] = ''; - } - - $check_comment_lengths = wp_check_comment_data_max_lengths( $prepared_comment ); - if ( is_wp_error( $check_comment_lengths ) ) { - $error_code = $check_comment_lengths->get_error_code(); - return new WP_Error( $error_code, __( 'Comment field exceeds maximum length allowed.' ), array( 'status' => 400 ) ); - } - - $prepared_comment['comment_approved'] = wp_allow_comment( $prepared_comment, true ); - - if ( is_wp_error( $prepared_comment['comment_approved'] ) ) { - $error_code = $prepared_comment['comment_approved']->get_error_code(); - $error_message = $prepared_comment['comment_approved']->get_error_message(); - - if ( 'comment_duplicate' === $error_code ) { - return new WP_Error( $error_code, $error_message, array( 'status' => 409 ) ); - } - - if ( 'comment_flood' === $error_code ) { - return new WP_Error( $error_code, $error_message, array( 'status' => 400 ) ); - } - - return $prepared_comment['comment_approved']; - } - - /** - * Filters a comment before it is inserted via the REST API. - * - * Allows modification of the comment right before it is inserted via wp_insert_comment(). - * Returning a WP_Error value from the filter will shortcircuit insertion and allow - * skipping further processing. - * - * @since 4.7.0 - * @since 4.8.0 `$prepared_comment` can now be a WP_Error to shortcircuit insertion. - * - * @param array|WP_Error $prepared_comment The prepared comment data for wp_insert_comment(). - * @param WP_REST_Request $request Request used to insert the comment. - */ - $prepared_comment = apply_filters( 'rest_pre_insert_comment', $prepared_comment, $request ); - if ( is_wp_error( $prepared_comment ) ) { - return $prepared_comment; - } - - $comment_id = wp_insert_comment( wp_filter_comment( wp_slash( (array) $prepared_comment ) ) ); - - if ( ! $comment_id ) { - return new WP_Error( 'rest_comment_failed_create', __( 'Creating comment failed.' ), array( 'status' => 500 ) ); - } - - if ( isset( $request['status'] ) ) { - $this->handle_status_param( $request['status'], $comment_id ); - } - - $comment = get_comment( $comment_id ); - - /** - * Fires after a comment is created or updated via the REST API. - * - * @since 4.7.0 - * - * @param WP_Comment $comment Inserted or updated comment object. - * @param WP_REST_Request $request Request object. - * @param bool $creating True when creating a comment, false - * when updating. - */ - do_action( 'rest_insert_comment', $comment, $request, true ); - - $schema = $this->get_item_schema(); - - if ( ! empty( $schema['properties']['meta'] ) && isset( $request['meta'] ) ) { - $meta_update = $this->meta->update_value( $request['meta'], $comment_id ); - - if ( is_wp_error( $meta_update ) ) { - return $meta_update; - } - } - - $fields_update = $this->update_additional_fields_for_object( $comment, $request ); - - if ( is_wp_error( $fields_update ) ) { - return $fields_update; - } - - $context = current_user_can( 'moderate_comments' ) ? 'edit' : 'view'; - $request->set_param( 'context', $context ); - - /** - * Fires completely after a comment is created or updated via the REST API. - * - * @since 5.0.0 - * - * @param WP_Comment $comment Inserted or updated comment object. - * @param WP_REST_Request $request Request object. - * @param bool $creating True when creating a comment, false - * when updating. - */ - do_action( 'rest_after_insert_comment', $comment, $request, true ); - - $response = $this->prepare_item_for_response( $comment, $request ); - $response = rest_ensure_response( $response ); - - $response->set_status( 201 ); - $response->header( 'Location', rest_url( sprintf( '%s/%s/%d', $this->namespace, $this->rest_base, $comment_id ) ) ); - - return $response; - } - - /** - * Checks if a given REST request has access to update a comment. - * - * @since 4.7.0 - * - * @param WP_REST_Request $request Full details about the request. - * @return WP_Error|bool True if the request has access to update the item, error object otherwise. - */ - public function update_item_permissions_check( $request ) { - $comment = $this->get_comment( $request['id'] ); - if ( is_wp_error( $comment ) ) { - return $comment; - } - - if ( ! $this->check_edit_permission( $comment ) ) { - return new WP_Error( 'rest_cannot_edit', __( 'Sorry, you are not allowed to edit this comment.' ), array( 'status' => rest_authorization_required_code() ) ); - } - - return true; - } - - /** - * Updates a comment. - * - * @since 4.7.0 - * - * @param WP_REST_Request $request Full details about the request. - * @return WP_Error|WP_REST_Response Response object on success, or error object on failure. - */ - public function update_item( $request ) { - $comment = $this->get_comment( $request['id'] ); - if ( is_wp_error( $comment ) ) { - return $comment; - } - - $id = $comment->comment_ID; - - if ( isset( $request['type'] ) && get_comment_type( $id ) !== $request['type'] ) { - return new WP_Error( 'rest_comment_invalid_type', __( 'Sorry, you are not allowed to change the comment type.' ), array( 'status' => 404 ) ); - } - - $prepared_args = $this->prepare_item_for_database( $request ); - - if ( is_wp_error( $prepared_args ) ) { - return $prepared_args; - } - - if ( ! empty( $prepared_args['comment_post_ID'] ) ) { - $post = get_post( $prepared_args['comment_post_ID'] ); - if ( empty( $post ) ) { - return new WP_Error( 'rest_comment_invalid_post_id', __( 'Invalid post ID.' ), array( 'status' => 403 ) ); - } - } - - if ( empty( $prepared_args ) && isset( $request['status'] ) ) { - // Only the comment status is being changed. - $change = $this->handle_status_param( $request['status'], $id ); - - if ( ! $change ) { - return new WP_Error( 'rest_comment_failed_edit', __( 'Updating comment status failed.' ), array( 'status' => 500 ) ); - } - } elseif ( ! empty( $prepared_args ) ) { - if ( is_wp_error( $prepared_args ) ) { - return $prepared_args; - } - - if ( isset( $prepared_args['comment_content'] ) && empty( $prepared_args['comment_content'] ) ) { - return new WP_Error( 'rest_comment_content_invalid', __( 'Invalid comment content.' ), array( 'status' => 400 ) ); - } - - $prepared_args['comment_ID'] = $id; - - $check_comment_lengths = wp_check_comment_data_max_lengths( $prepared_args ); - if ( is_wp_error( $check_comment_lengths ) ) { - $error_code = $check_comment_lengths->get_error_code(); - return new WP_Error( $error_code, __( 'Comment field exceeds maximum length allowed.' ), array( 'status' => 400 ) ); - } - - $updated = wp_update_comment( wp_slash( (array) $prepared_args ) ); - - if ( false === $updated ) { - return new WP_Error( 'rest_comment_failed_edit', __( 'Updating comment failed.' ), array( 'status' => 500 ) ); - } - - if ( isset( $request['status'] ) ) { - $this->handle_status_param( $request['status'], $id ); - } - } - - $comment = get_comment( $id ); - - /** This action is documented in wp-includes/rest-api/endpoints/class-wp-rest-comments-controller.php */ - do_action( 'rest_insert_comment', $comment, $request, false ); - - $schema = $this->get_item_schema(); - - if ( ! empty( $schema['properties']['meta'] ) && isset( $request['meta'] ) ) { - $meta_update = $this->meta->update_value( $request['meta'], $id ); - - if ( is_wp_error( $meta_update ) ) { - return $meta_update; - } - } - - $fields_update = $this->update_additional_fields_for_object( $comment, $request ); - - if ( is_wp_error( $fields_update ) ) { - return $fields_update; - } - - $request->set_param( 'context', 'edit' ); - - /** This action is documented in wp-includes/rest-api/endpoints/class-wp-rest-comments-controller.php */ - do_action( 'rest_after_insert_comment', $comment, $request, false ); - - $response = $this->prepare_item_for_response( $comment, $request ); - - return rest_ensure_response( $response ); - } - - /** - * Checks if a given request has access to delete a comment. - * - * @since 4.7.0 - * - * @param WP_REST_Request $request Full details about the request. - * @return WP_Error|bool True if the request has access to delete the item, error object otherwise. - */ - public function delete_item_permissions_check( $request ) { - $comment = $this->get_comment( $request['id'] ); - if ( is_wp_error( $comment ) ) { - return $comment; - } - - if ( ! $this->check_edit_permission( $comment ) ) { - return new WP_Error( 'rest_cannot_delete', __( 'Sorry, you are not allowed to delete this comment.' ), array( 'status' => rest_authorization_required_code() ) ); - } - return true; - } - - /** - * Deletes a comment. - * - * @since 4.7.0 - * - * @param WP_REST_Request $request Full details about the request. - * @return WP_Error|WP_REST_Response Response object on success, or error object on failure. - */ - public function delete_item( $request ) { - $comment = $this->get_comment( $request['id'] ); - if ( is_wp_error( $comment ) ) { - return $comment; - } - - $force = isset( $request['force'] ) ? (bool) $request['force'] : false; - - /** - * Filters whether a comment can be trashed. - * - * Return false to disable trash support for the post. - * - * @since 4.7.0 - * - * @param bool $supports_trash Whether the post type support trashing. - * @param WP_Post $comment The comment object being considered for trashing support. - */ - $supports_trash = apply_filters( 'rest_comment_trashable', ( EMPTY_TRASH_DAYS > 0 ), $comment ); - - $request->set_param( 'context', 'edit' ); - - if ( $force ) { - $previous = $this->prepare_item_for_response( $comment, $request ); - $result = wp_delete_comment( $comment->comment_ID, true ); - $response = new WP_REST_Response(); - $response->set_data( - array( - 'deleted' => true, - 'previous' => $previous->get_data(), - ) - ); - } else { - // If this type doesn't support trashing, error out. - if ( ! $supports_trash ) { - /* translators: %s: force=true */ - return new WP_Error( 'rest_trash_not_supported', sprintf( __( "The comment does not support trashing. Set '%s' to delete." ), 'force=true' ), array( 'status' => 501 ) ); - } - - if ( 'trash' === $comment->comment_approved ) { - return new WP_Error( 'rest_already_trashed', __( 'The comment has already been trashed.' ), array( 'status' => 410 ) ); - } - - $result = wp_trash_comment( $comment->comment_ID ); - $comment = get_comment( $comment->comment_ID ); - $response = $this->prepare_item_for_response( $comment, $request ); - } - - if ( ! $result ) { - return new WP_Error( 'rest_cannot_delete', __( 'The comment cannot be deleted.' ), array( 'status' => 500 ) ); - } - - /** - * Fires after a comment is deleted via the REST API. - * - * @since 4.7.0 - * - * @param WP_Comment $comment The deleted comment data. - * @param WP_REST_Response $response The response returned from the API. - * @param WP_REST_Request $request The request sent to the API. - */ - do_action( 'rest_delete_comment', $comment, $response, $request ); - - return $response; - } - - /** - * Prepares a single comment output for response. - * - * @since 4.7.0 - * - * @param WP_Comment $comment Comment object. - * @param WP_REST_Request $request Request object. - * @return WP_REST_Response Response object. - */ - public function prepare_item_for_response( $comment, $request ) { - - $fields = $this->get_fields_for_response( $request ); - $data = array(); - - if ( in_array( 'id', $fields, true ) ) { - $data['id'] = (int) $comment->comment_ID; - } - - if ( in_array( 'post', $fields, true ) ) { - $data['post'] = (int) $comment->comment_post_ID; - } - - if ( in_array( 'parent', $fields, true ) ) { - $data['parent'] = (int) $comment->comment_parent; - } - - if ( in_array( 'author', $fields, true ) ) { - $data['author'] = (int) $comment->user_id; - } - - if ( in_array( 'author_name', $fields, true ) ) { - $data['author_name'] = $comment->comment_author; - } - - if ( in_array( 'author_email', $fields, true ) ) { - $data['author_email'] = $comment->comment_author_email; - } - - if ( in_array( 'author_url', $fields, true ) ) { - $data['author_url'] = $comment->comment_author_url; - } - - if ( in_array( 'author_ip', $fields, true ) ) { - $data['author_ip'] = $comment->comment_author_IP; - } - - if ( in_array( 'author_user_agent', $fields, true ) ) { - $data['author_user_agent'] = $comment->comment_agent; - } - - if ( in_array( 'date', $fields, true ) ) { - $data['date'] = mysql_to_rfc3339( $comment->comment_date ); - } - - if ( in_array( 'date_gmt', $fields, true ) ) { - $data['date_gmt'] = mysql_to_rfc3339( $comment->comment_date_gmt ); - } - - if ( in_array( 'content', $fields, true ) ) { - $data['content'] = array( - /** This filter is documented in wp-includes/comment-template.php */ - 'rendered' => apply_filters( 'comment_text', $comment->comment_content, $comment ), - 'raw' => $comment->comment_content, - ); - } - - if ( in_array( 'link', $fields, true ) ) { - $data['link'] = get_comment_link( $comment ); - } - - if ( in_array( 'status', $fields, true ) ) { - $data['status'] = $this->prepare_status_response( $comment->comment_approved ); - } - - if ( in_array( 'type', $fields, true ) ) { - $data['type'] = get_comment_type( $comment->comment_ID ); - } - - if ( in_array( 'author_avatar_urls', $fields, true ) ) { - $data['author_avatar_urls'] = rest_get_avatar_urls( $comment ); - } - - if ( in_array( 'meta', $fields, true ) ) { - $data['meta'] = $this->meta->get_value( $comment->comment_ID, $request ); - } - - $context = ! empty( $request['context'] ) ? $request['context'] : 'view'; - $data = $this->add_additional_fields_to_object( $data, $request ); - $data = $this->filter_response_by_context( $data, $context ); - - // Wrap the data in a response object. - $response = rest_ensure_response( $data ); - - $response->add_links( $this->prepare_links( $comment ) ); - - /** - * Filters a comment returned from the API. - * - * Allows modification of the comment right before it is returned. - * - * @since 4.7.0 - * - * @param WP_REST_Response $response The response object. - * @param WP_Comment $comment The original comment object. - * @param WP_REST_Request $request Request used to generate the response. - */ - return apply_filters( 'rest_prepare_comment', $response, $comment, $request ); - } - - /** - * Prepares links for the request. - * |
