Ticket #28205: 28205.diff

src/wp-includes/class-wp-xmlrpc-server.php

@@ -66 +66 @@
                         'wp.deleteCategory'             => 'this:wp_deleteCategory',
                         'wp.suggestCategories'  => 'this:wp_suggestCategories',
                         'wp.uploadFile'                 => 'this:mw_newMediaObject',    // Alias
+                        'wp.sideloadFile'               => 'this:wp_sideloadFile',
                         'wp.getCommentCount'    => 'this:wp_getCommentCount',
                         'wp.getPostStatusList'  => 'this:wp_getPostStatusList',
                         'wp.getPageStatusList'  => 'this:wp_getPageStatusList',
@@ -3900 +3901 @@
                 return (bool) $post;
         }
 
+        /**
+         * Sideload a remote file.
+         *
+         * Useful for hosts with small MAX_POST_SIZE configurations.
+         *
+         * @since 4.0.0
+         *
+         * @param array $args Method parameters.
+         * @return array
+         */
+        function wp_sideloadFile( $args ) {
+                $blog_ID  = (int) $args[0];
+                $username = $this->escape( $args[1] );
+                $password = $this->escape( $args[2] );
+                $data     = $args[3];
+
+                $url      = esc_url_raw( $data['url'] );
+                $md5      = isset( $data['md5'] ) ? $data['md5'] : null;
+                $post_id  = isset( $data['post_id'] ) ? (int) $data['post_id'] : 0;
+                $desc     = isset( $data['desc'] ) ? $data['desc'] : null;
+                // @todo: Add overwrite handling?
+
+                if ( ! $user = $this->login( $username, $password ) ) {
+                        return $this->error;
+                }
+
+                /** This action is documented in wp-includes/class-wp-xmlrpc-server.php */
+                do_action( 'xmlrpc_call', 'wp.sideloadMediaObject' );
+
+                if ( ! current_user_can( 'upload_files' ) ) {
+                        $this->error = new IXR_Error( 401, __( 'You do not have permission to upload files.' ) );
+                        return $this->error;
+                }
+
+                if ( empty( $url ) ) {
+                        $this->error = new IXR_Error( 400, __( 'Missing URL.' ) );
+                        return $this->error;
+                }
+
+                // Set variables for storage
+                // fix file filename for query strings
+                $file_array['name'] = basename( parse_url( $url, PHP_URL_PATH ) );
+
+                if ( ! $file_array['name'] ) {
+                        $this->error = new IXR_Error( 400, __( 'Could not parse filename from url.' ) );
+                        return $this->error;
+                }
+
+                // Download file to temp location
+                $file_array['tmp_name'] = download_url( $url );
+
+                // If error storing temporarily, return an error.
+                if ( is_wp_error( $file_array['tmp_name'] ) ) {
+                        $this->error = new IXR_Error( 400, __( 'Could not download file.' ) );
+                        return $this->error;
+                }
+
+                if ( $md5 && md5_file( $file_array['tmp_name'] ) !== $md5 ) {
+                        @unlink( $file_array['tmp_name'] );
+                        $this->error = new IXR_Error( 400, __( 'File did not match md5 hash.' ) );
+                        return $this->error;
+                }
+
+                // do the validation and storage stuff
+                $id = media_handle_sideload( $file_array, $post_id, $desc );
+
+                // If error storing permanently, unlink
+                if ( is_wp_error( $id ) ) {
+                        @unlink( $file_array['tmp_name'] );
+                        $this->error = new IXR_Error( 400, __( 'Could not handle the sideload.' ) );
+                        return $this->error;
+                }
+
+                $struct = array(
+                        'id'  => $id,
+                        'url' => wp_get_attachment_url( $id ),
+                );
+
+                return $struct;
+        }
+
         /* Blogger API functions.
          * specs on http://plant.blogger.com/api and http://groups.yahoo.com/group/bloggerDev/
          */