Automattic /
jetpack
These results are based on our legacy PHP analysis, consider migrating to our new PHP analysis engine instead. Learn more
| 1 | <?php |
||
| 1087 | if ( is_user_logged_in() ) { |
||
| 1088 | if ( $post_status_obj->protected ) { |
||
| 1089 | if ( ! current_user_can( 'edit_post', $post->ID ) ) { |
||
| 1090 | return new WP_Error( 'unauthorized', 'User cannot view post', 403 ); |
||
|
|
|||
| 1091 | } |
||
| 1092 | } elseif ( $post_status_obj->private ) { |
||
| 1093 | if ( ! current_user_can( 'read_post', $post->ID ) ) { |
||
| 1094 | return new WP_Error( 'unauthorized', 'User cannot view post', 403 ); |
||
| 1095 | } |
||
| 1096 | } elseif ( in_array( $post->post_status, array( 'inherit', 'trash' ) ) ) { |
||
| 1097 | if ( ! current_user_can( 'edit_post', $post->ID ) ) { |
||
| 1098 | return new WP_Error( 'unauthorized', 'User cannot view post', 403 ); |
||
| 1099 | } |
||
| 1100 | } elseif ( 'auto-draft' === $post->post_status ) { |
||
| 1101 | // allow auto-drafts |
||
| 1102 | } else { |
||
| 1103 | return new WP_Error( 'unauthorized', 'User cannot view post', 403 ); |
||
| 1104 | } |
||
| 1105 | } else { |
||
| 1106 | return new WP_Error( 'unauthorized', 'User cannot view post', 403 ); |
||
| 1107 | } |
||
| 1108 | } |
||
| 1109 | |||
| 1122 | ! apply_filters( |
||
| 1123 | 'wpcom_json_api_user_can_view_post', |
||
| 1124 | current_user_can( 'read_post', $post->ID ), |
||
| 1125 | $post |
||
| 1126 | ) |
||
| 1127 | ) { |
||
| 1128 | return new WP_Error( |
||
| 1129 | 'unauthorized', |
||
| 1130 | 'User cannot view post', |
||
| 1131 | array( |
||
| 1132 | 'status_code' => 403, |
||
| 1137 | |||
| 1138 | View Code Duplication | if ( strlen( $post->post_password ) && ! current_user_can( 'edit_post', $post->ID ) ) { |
|
| 1139 | return new WP_Error( |
||
| 1140 | 'unauthorized', |
||
| 1141 | 'User cannot view password protected post', |
||
| 1142 | array( |
||
| 1143 | 'status_code' => 403, |
||
| 1198 | * @param bool false Is the current site a Jetpack site. Default to false. |
||
| 1199 | * @param int get_current_blog_id() Blog ID. |
||
| 1200 | */ |
||
| 1201 | $is_jetpack = true === apply_filters( 'is_jetpack_site', false, get_current_blog_id() ); |
||
| 1202 | $post_id = $author->ID; |
||
| 1203 | if ( $is_jetpack && ( defined( 'IS_WPCOM' ) && IS_WPCOM ) ) { |
||
| 1204 | $ID = get_post_meta( $post_id, '_jetpack_post_author_external_id', true ); |
||
| 1282 | $media_item = get_post( $media_id ); |
||
| 1283 | |||
| 1284 | if ( ! $media_item || is_wp_error( $media_item ) ) { |
||
| 1285 | return new WP_Error( 'unknown_media', 'Unknown Media', 404 ); |
||
| 1286 | } |
||
| 1287 | |||
| 1288 | $response = array( |
||
| 1320 | } |
||
| 1321 | |||
| 1322 | if ( ! $media_item || is_wp_error( $media_item ) ) { |
||
| 1323 | return new WP_Error( 'unknown_media', 'Unknown Media', 404 ); |
||
| 1324 | } |
||
| 1325 | |||
| 1326 | $attachment_file = get_attached_file( $media_item->ID ); |
||
| 1365 | * @param array $metadata['sizes'] Array of thumbnail sizes available for a given attachment ID. |
||
| 1366 | * @param string $media_id Attachment ID. |
||
| 1367 | */ |
||
| 1368 | $sizes = apply_filters( 'rest_api_thumbnail_sizes', $metadata['sizes'], $media_item->ID ); |
||
| 1369 | View Code Duplication | if ( is_array( $sizes ) ) { |
|
| 1370 | foreach ( $sizes as $size => $size_details ) { |
||
| 1371 | $response['thumbnails'][ $size ] = dirname( $response['URL'] ) . '/' . $size_details['file']; |
||
| 1483 | $taxonomy = get_term_by( 'slug', $taxonomy_id, $taxonomy_type ); |
||
| 1484 | // keep updating this function |
||
| 1485 | if ( ! $taxonomy || is_wp_error( $taxonomy ) ) { |
||
| 1486 | return new WP_Error( 'unknown_taxonomy', 'Unknown taxonomy', 404 ); |
||
| 1487 | } |
||
| 1488 | |||
| 1489 | return $this->format_taxonomy( $taxonomy, $taxonomy_type, $context ); |
||
| 1495 | case 'edit': |
||
| 1496 | $tax = get_taxonomy( $taxonomy_type ); |
||
| 1497 | if ( ! current_user_can( $tax->cap->edit_terms ) ) { |
||
| 1498 | return new WP_Error( 'unauthorized', 'User cannot edit taxonomy', 403 ); |
||
| 1499 | } |
||
| 1500 | break; |
||
| 1501 | case 'display': |
||
| 1502 | View Code Duplication | if ( -1 == get_option( 'blog_public' ) && ! current_user_can( 'read' ) ) { |
|
| 1503 | return new WP_Error( 'unauthorized', 'User cannot view taxonomy', 403 ); |
||
| 1504 | } |
||
| 1505 | break; |
||
| 1506 | default: |
||
| 1507 | return new WP_Error( 'invalid_context', 'Invalid API CONTEXT', 400 ); |
||
| 1508 | } |
||
| 1509 | |||
| 1510 | $response = array(); |
||
| 1802 | add_filter( 'upload_mimes', array( $this, 'allow_video_uploads' ) ); |
||
| 1803 | |||
| 1804 | $media_ids = $errors = array(); |
||
| 1805 | $user_can_upload_files = current_user_can( 'upload_files' ) || $this->api->is_authorized_with_upload_token(); |
||
| 1806 | $media_attrs = array_values( $media_attrs ); // reset the keys |
||
| 1807 | $i = 0; |
||
| 1808 | |||
| 1811 | foreach ( $media_files as $media_item ) { |
||
| 1812 | $_FILES['.api.media.item.'] = $media_item; |
||
| 1813 | View Code Duplication | if ( ! $user_can_upload_files ) { |
|
| 1814 | $media_id = new WP_Error( 'unauthorized', 'User cannot upload media.', 403 ); |
||
| 1815 | } else { |
||
| 1816 | if ( $force_parent_id ) { |
||
| 1817 | $parent_id = absint( $force_parent_id ); |
||
| 1839 | if ( ! empty( $media_urls ) ) { |
||
| 1840 | foreach ( $media_urls as $url ) { |
||
| 1841 | View Code Duplication | if ( ! $user_can_upload_files ) { |
|
| 1842 | $media_id = new WP_Error( 'unauthorized', 'User cannot upload media.', 403 ); |
||
| 1843 | } else { |
||
| 1844 | if ( $force_parent_id ) { |
||
| 1845 | $parent_id = absint( $force_parent_id ); |
||
| 1946 | // see if WordPress supports this file as an image. If neither, then it is not supported. |
||
| 1947 | View Code Duplication | if ( ! $this->is_file_supported_for_sideloading( $tmp ) || 'image' === $type && ! file_is_displayable_image( $tmp ) ) { |
|
| 1948 | @unlink( $tmp ); |
||
| 1949 | return new WP_Error( 'invalid_input', 'Invalid file type.', 403 ); |
||
| 1950 | } |
||
| 1951 | |||
| 1952 | // emulate a $_FILES entry |
||
| 1953 | $file_array = array( |
||
| 1954 | 'name' => basename( wp_parse_url( $url, PHP_URL_PATH ) ), |
||
| 1955 | 'tmp_name' => $tmp, |
||
| 1956 | ); |
||
| 1957 | |||
| 2150 |
skeltoac
Brandon Kraft
Justin Shreve
Joey Kudish
Jeremy Herve
Miguel Lezama
Drew Butler
Igor Zinovyev
Michael D Adams
Loading history...
This check compares calls to functions or methods with their respective definitions. If the call has more arguments than are defined, it raises an issue.
If a function is defined several times with a different number of parameters, the check may pick up the wrong definition and report false positives. One codebase where this has been known to happen is Wordpress.
In this case you can add the
@ignorePhpDoc annotation to the duplicate definition and it will be ignored.