Ticket #32243: post.diff

post.php

@@ -5330 +5330 @@
  *
  * @see get_private_posts_cap_sql()
  *
- * @param string $post_type   Post type.
+ * @param array  $post_types  Post type(s).
  * @param bool   $full        Optional. Returns a full WHERE statement instead of just
  *                            an 'andalso' term. Default true.
  * @param int    $post_author Optional. Query posts having a single author ID. Default null.
@@ -5338 +5338 @@
  *                            $current_user.  Default false.
  * @return string SQL WHERE code that can be added to a query.
  */
-function get_posts_by_author_sql( $post_type, $full = true, $post_author = null, $public_only = false ) {
+function get_posts_by_author_sql( $post_types, $full = true, $post_author = null, $public_only = false ) {
         global $wpdb;
 
         // Private posts.
-        $post_type_obj = get_post_type_object( $post_type );
+        foreach ($post_types as $post_type) $post_type_obj = get_post_type_object( $post_type );
         if ( ! $post_type_obj )
                 return $full ? 'WHERE 1 = 0' : ' 1 = 0 ';
 
@@ -5358 +5358 @@
         if ( ! $cap = apply_filters( 'pub_priv_sql_capability', '' ) ) {
                 $cap = $post_type_obj->cap->read_private_posts;
         }
+        
+        $post_type_sql = array_fill(0, count($post_types), '%s');
+        $where = '(post_type = '.implode(' OR post_type = ', $post_type_sql).')';
+        $sql = $wpdb->prepare($where, $post_types);
 
-        $sql = $wpdb->prepare( 'post_type = %s', $post_type );
-
         if ( null !== $post_author ) {
                 $sql .= $wpdb->prepare( ' AND post_author = %d', $post_author );
         }
@@ -5369 +5371 @@
         $post_status_sql = "post_status = 'publish'";
         if ( false === $public_only ) {
                 if ( current_user_can( $cap ) ) {
-                        // Does the user have the capability to view private posts? Guess so.
+                        // Does the user have the capability to view private posts (we're only checking for the last post_type, but that's ok)? Guess so.
                         $post_status_sql .= " OR post_status = 'private'";
                 } elseif ( is_user_logged_in() ) {
                         // Users can view their own private posts.