Ticket #21397: 21397.6.diff

wp-includes/class-wp-xmlrpc-server.php

@@ -82 +82 @@
                         'wp.getPostFormats'     => 'this:wp_getPostFormats',
                         'wp.getPostType'                => 'this:wp_getPostType',
                         'wp.getPostTypes'               => 'this:wp_getPostTypes',
+                        'wp.getRevisions'               => 'this:wp_getRevisions',
+                        'wp.restoreRevision'    => 'this:wp_restoreRevision',
 
                         // Blogger API
                         'blogger.getUsersBlogs' => 'this:blogger_getUsersBlogs',
@@ -1255 +1257 @@
 
                 $post = get_post( $post_id, ARRAY_A );
 
+                if ( isset( $content_struct['only_if_modified_since'] ) ) {
+                        // if there's a newer revision, return an error
+                        if ( mysql2date( 'U', $post['post_modified_gmt'] ) > $content_struct['only_if_no_new_revision']->getTimestamp() ) {
+                                return new IXR_Error( 409, __( 'There is a revision of this post that is more recent' ) );
+                        }
+                }
+
                 if ( empty( $post['ID'] ) )
                         return new IXR_Error( 404, __( 'Invalid post ID.' ) );
 
@@ -3482 +3491 @@
                 return $struct;
         }
 
+        /**
+         * Retrieve revisions for a specific post.
+         *
+         * @since 3.5.0
+         *
+         * The optional $fields parameter specifies what fields will be included
+         * in the response array.
+         *
+         * @uses wp_get_post_revisions()
+         * @see wp_getPost() for more on $fields
+         *
+         * @param array $args Method parameters. Contains:
+         *  - int     $blog_id
+         *  - string  $username
+         *  - string  $password
+         *  - int     $post_id
+         *  - array   $fields
+         * @return array contains a collection of posts.
+         */
+        function wp_getRevisions( $args ) {
+                if ( ! $this->minimum_args( $args, 4 ) )
+                        return $this->error;
+
+                $this->escape( $args );
+
+                $blog_id    = (int) $args[0];
+                $username   = $args[1];
+                $password   = $args[2];
+                $post_id    = (int) $args[3];
+
+                if ( isset( $args[4] ) )
+                        $fields = $args[4];
+                else
+                        $fields = apply_filters( 'xmlrpc_default_revision_fields', array( 'post_date', 'post_date_gmt' ), 'wp.getRevisions' );
+
+                if ( ! $user = $this->login( $username, $password ) )
+                        return $this->error;
+
+                do_action( 'xmlrpc_call', 'wp.getRevisions' );
+
+                if ( ! current_user_can( 'edit_post', $post_id ) )
+                        return new IXR_Error( 401, __( 'Sorry, you are not allowed to edit posts in this post type' ) );
+
+                if ( ! $post = get_post( $post_id ) )
+                        return new IXR_Error( 403, __( 'Invalid post ID' ) );
+
+                // Revisions disabled and we're not looking at an autosave
+                if ( ! WP_POST_REVISIONS || ! post_type_supports( $post->post_type, 'revisions') )
+                        return new IXR_Error( 401, __( 'Sorry, revisions is disabled for this post type.' ) );
+
+                $revisions = wp_get_post_revisions( $post_id );
+
+                if ( ! $revisions )
+                        return array();
+
+                $struct = array();
+
+                foreach ( $revisions as $revision ) {
+                        if ( ! current_user_can( 'read_post', $revision->ID ) )
+                                continue;
+
+                        // Skip all autosave posts
+                        if ( wp_is_post_autosave( $revision ) )
+                                continue;
+
+                        $struct[] = $this->_prepare_post( get_object_vars( $revision ), $fields );
+                }
+
+                return $struct;
+        }
+
+        /**
+         * Restore a post revision
+         *
+         * @since 3.5.0
+         *
+         * @uses wp_restore_post_revision()
+         *
+         * @param array $args Method parameters. Contains:
+         *  - int     $blog_id
+         *  - string  $username
+         *  - string  $password
+         *  - int     $post_id
+         * @return bool false if there was an error restoring, true if success.
+         */
+        function wp_restoreRevision( $args ) {
+                if ( ! $this->minimum_args( $args, 3 ) )
+                        return $this->error;
+
+                $this->escape( $args );
+
+                $blog_id     = (int) $args[0];
+                $username    = $args[1];
+                $password    = $args[2];
+                $revision_id = (int) $args[3];
+
+                if ( ! $user = $this->login( $username, $password ) )
+                        return $this->error;
+
+                do_action( 'xmlrpc_call', 'wp.restoreRevision' );
+
+                if ( ! $revision = wp_get_post_revision( $revision_id ) )
+                        return new IXR_Error( 403, __( 'Invalid post ID' ));
+
+                if ( ! current_user_can( 'edit_post', $revision->post_parent ) )
+                        return new IXR_Error( 401, __( 'Sorry, you are not allowed to edit this post.' ) );
+
+                if ( ! $post = get_post( $revision->post_parent ) )
+                        return new IXR_Error( 401, __( 'Sorry, the post that belongs to this revision is removed' ) );
+
+                // Revisions disabled and we're not looking at an autosave
+                if ( ( ! WP_POST_REVISIONS || ! post_type_supports( $post->post_type, 'revisions') ) && ! wp_is_post_autosave( $revision ) )
+                        return new IXR_Error( 401, __( 'Sorry, revisions is disabled for this post type.' ) );
+
+                $post = wp_restore_post_revision( $post_id );
+
+                return (bool)$post;
+        }
+
         /* Blogger API functions.
          * specs on http://plant.blogger.com/api and http://groups.yahoo.com/group/bloggerDev/
          */