Ticket #18429: wp.newPost.5.patch

wp-includes/class-wp-xmlrpc-server.php

@@ -64 +64 @@
                         'wp.getMediaItem'               => 'this:wp_getMediaItem',
                         'wp.getMediaLibrary'    => 'this:wp_getMediaLibrary',
                         'wp.getPostFormats'     => 'this:wp_getPostFormats',
+                        'wp.newPost'            => 'this:wp_newPost',
 
                         // Blogger API
                         'blogger.getUsersBlogs' => 'this:blogger_getUsersBlogs',
@@ -1711 +1712 @@
                 return $formats;
         }
 
+        /**
+         * Create a new post
+         * 
+         * Wraps the functionality of wp_insert_post
+         *
+         * The 'content_struct' argument the arguments of wp_insert_post with additional the following:
+         * - sticky
+         * - custom_fields
+         * - terms
+         * - wp_post_format
+         * - enclosure
+         *
+         * @since 3.4
+         *
+         * @param array $args Method parameters. Contains:
+         *  - blog_id
+         *  - username
+         *  - password
+         *  - content_struct
+         * @return int
+         */
+        function wp_newPost( $args ) {
+                $this->escape( $args );
+
+                $blog_id        = (int) $args[0]; // we will support this in the near future
+                $username       = $args[1];
+                $password       = $args[2];
+                $content_struct = $args[3];
+
+                if ( ! $user = $this->login($username, $password) )
+                        return $this->error;
+
+                do_action( 'xmlrpc_call', 'wp.newPost' );
+
+                $defaults = array( 'post_status' => 'draft', 'post_type' => 'post', 'post_author' => 0,
+                        'post_password' => '', 'post_excerpt' => '', 'post_content' => '', 'post_title' => '', 'sticky' => 0 );
+
+                $post_data = wp_parse_args( $content_struct, $defaults );
+
+                $post_type = get_post_type_object( $post_data['post_type'] ); 
+                if( ! ( (bool)$post_type ) ) 
+                        return new IXR_Error( 403, __( 'Invalid post type' ) ); 
+
+                if( ! current_user_can( $post_type->cap->edit_posts ) ) 
+                        return new IXR_Error( 401, __( 'Sorry, you are not allowed to post on this site.' ) ); 
+
+                switch ( $post_data['post_status'] ) { 
+                        case 'draft': 
+                        case 'pending': 
+                                break; 
+                        case 'private': 
+                                if( ! current_user_can( $post_type->cap->publish_posts ) ) 
+                                        return new IXR_Error( 401, __( 'Sorry, you are not allowed to create private posts in this post type' )); 
+                                break; 
+                        case 'publish':
+                        case 'future':
+                                if( ! current_user_can( $post_type->cap->publish_posts ) ) 
+                                        return new IXR_Error( 401, __( 'Sorry, you are not allowed to publish posts in this post type' )); 
+                                break; 
+                        default: 
+                                $post_data['post_status'] = 'draft';
+                        break; 
+                }
+
+                if ( ! empty( $post_data['post_password'] ) && ! current_user_can( $post_type->cap->publish_posts ) )
+                        return new IXR_Error( 401, __( 'Sorry, you are not allowed to create password protected posts in this post type' ) );
+
+
+                $post_data['post_author'] = absint( $post_data['post_author'] );
+                if( ! empty( $post_data['post_author'] ) && $post_data['post_author'] != $user->ID ) {
+                        if( ! current_user_can( $post_type->cap->edit_others_posts ) )
+                                return new IXR_Error( 401, __( 'You are not allowed to create posts as this user.' ) );
+
+                        $author = get_userdata( $post_data['post_author'] );
+
+                        if( ! $author )
+                                return new IXR_Error( 404, __( 'Invalid author ID.' ) ); 
+                }
+                else {
+                        $post_data['post_author'] = $user->ID;
+                }
+
+                if( isset( $post_data['comment_status'] ) )
+                        if( ! post_type_supports( $post_data['post_type'], 'comments' ) || ( $post_data['comment_status'] != 'open' && $post_data['comment_status'] != 'closed' ) )
+                                unset( $post_data['comment_status'] );
+
+                if( isset( $post_data['ping_status'] ) )
+                        if( ! post_type_supports( $post_data['post_type'], 'trackbacks' ) || ( $post_data['ping_status'] != 'open' && $post_data['ping_status'] != 'closed' ) )
+                                unset( $post_data['ping_status'] );
+
+                // Do some timestamp voodoo 
+                if ( ! empty( $post_data['date_created_gmt'] ) ) 
+                        $dateCreated = str_replace( 'Z', '', $post_data['date_created_gmt']->getIso() ) . 'Z'; // We know this is supposed to be GMT, so we're going to slap that Z on there by force 
+                elseif ( ! empty( $post_data['date_created']) ) 
+                        $dateCreated = $post_data['date_created']->getIso(); 
+
+                if ( ! empty( $dateCreated ) ) {
+                        $post_data['post_date'] = get_date_from_gmt( iso8601_to_datetime( $dateCreated ) );
+                        $post_data['post_date_gmt'] = iso8601_to_datetime( $dateCreated, 'GMT' );
+                }
+
+                $sticky = $post_data['sticky'] ? true : false;
+
+                if( $post_data['post_type'] == 'post' && $sticky == true ) {
+                        if( ! current_user_can( $post_type->cap->edit_others_posts ) )
+                                return new IXR_Error( 401, __( 'Sorry, you are not allowed to stick this post.' ) );
+
+                        if( $post_data['post_status'] != 'publish' )
+                                return new IXR_Error( 401, __( 'Only published posts can be made sticky.' ));
+                }
+
+                if( isset( $post_data['tax_input'] ) ) {
+                        if( is_array( $post_data['tax_input'] ) ) {
+                                $post_type_taxonomies = get_object_taxonomies( $post_data['post_type'] );
+                                $terms = $post_data['tax_input'];
+                                $taxonomies = array_keys( $terms );
+
+                                // validating term ids
+                                foreach( $taxonomies as $taxonomy ) {
+                                        if( ! in_array( $taxonomy , $post_type_taxonomies ) )
+                                                return new IXR_Error( 401, __( 'Sorry, one of the given taxonomies is not supported by the post type.' ) );
+
+                                        $taxonomy_obj = get_taxonomy( $taxonomy );
+                                        $terms_names = get_terms( $taxonomy, array( 'fields'=>'names', 'hide_empty' => false ) );
+                                        $terms_int = array_map( 'intval', $terms[ $taxonomy ] );
+
+                                        if( ! current_user_can( $taxonomy_obj->cap->assign_terms ) )
+                                                return new IXR_Error( 401, __( 'Sorry, you are not allowed to assign a term to one of the given taxonomies' ) );
+
+                                        if( ! current_user_can( $taxonomy_obj->cap->edit_terms ) && array_diff( $terms[ $taxonomy ], $terms_names ) )
+                                                return new IXR_Error( 401, __( 'Sorry, you are not allowed to add a term to one of the given taxonomies' ) );
+
+                                        if( ! array_diff( $terms[ $taxonomy ], $terms_int  ) ) {
+                                                $terms[ $taxonomy ] = $terms_int;
+                                        }
+                                        else if( is_taxonomy_hierarchical( $taxonomy ) ) {
+                                                $terms_double = array_diff_key( $terms_names , array_unique( $terms_names ) );
+        
+                                                if( array_diff( $terms[ $taxonomy ], $terms_double ) != $terms[ $taxonomy ] )
+                                                        return new IXR_Error( 401, __( 'Sorry, one of the terms provided exists more then once' ) );
+                                        }
+                                }
+                        }
+
+                        unset( $post_data['tax_input'] );
+                }
+
+                $post_ID = wp_insert_post( $post_data, true );
+
+                if ( is_wp_error( $post_ID ) ) 
+                        return new IXR_Error( 500, $post_ID->get_error_message() ); 
+
+                if ( ! $post_ID ) 
+                        return new IXR_Error( 401, __( 'Sorry, your entry could not be posted. Something wrong happened.' ) );
+
+
+                if( $post_data['post_type'] == 'post' && $sticky == true ) {
+                        stick_post( $post_ID );
+                }
+
+                if( isset ( $post_data['custom_fields'] ) && post_type_supports( $post_data['post_type'], 'custom-fields' ) ) {
+                        $this->set_custom_fields( $post_ID, $post_data['custom_fields'] );
+                }
+
+                // Loop the data that was previous defined 
+                if( isset( $taxonomies, $terms ) ) {
+                        foreach( $taxonomies as $taxonomy ) {
+                                wp_set_object_terms( $post_ID, $terms[ $taxonomy ], $taxonomy );
+                        }
+                }
+
+                if( isset( $post_data['wp_post_format'] ) ) {
+                        set_post_format( $post_ID, $post_data['wp_post_format'] );
+                }
+
+                // Handle enclosures
+                $enclosure = isset( $post_data['enclosure'] ) ? $post_data['enclosure'] : null;
+                $this->add_enclosure_if_new( $post_ID, $enclosure );
+                $this->attach_uploads( $post_ID, $post_data['post_content'] );
+
+                return $post_ID;
+        }
+
         /* Blogger API functions.
          * specs on http://plant.blogger.com/api and http://groups.yahoo.com/group/bloggerDev/
          */