Automattic /
jetpack
These results are based on our legacy PHP analysis, consider migrating to our new PHP analysis engine instead. Learn more
| 1 | <?php |
||
| 121 | return $blog_id; |
||
| 122 | } |
||
| 123 | if ( ! current_user_can_for_blog( $blog_id, 'list_users' ) ) { |
||
| 124 | return new WP_Error( 'unauthorized', 'User cannot view users for specified site', 403 ); |
||
|
|
|||
| 125 | } |
||
| 126 | |||
| 127 | // Get the user by ID or login |
||
| 129 | $user = get_user_by( $get_by, $user_id ); |
||
| 130 | |||
| 131 | if ( ! $user ) { |
||
| 132 | return new WP_Error( 'unknown_user', 'Unknown user', 404 ); |
||
| 133 | } |
||
| 134 | |||
| 135 | if ( ! is_user_member_of_blog( $user->ID, $blog_id ) ) { |
||
| 136 | return new WP_Error( 'unknown_user_for_site', 'Unknown user for site', 404 ); |
||
| 137 | } |
||
| 138 | |||
| 139 | if ( 'GET' === $this->api->method ) { |
||
| 140 | return $this->get_user( $user->ID ); |
||
| 141 | } else if ( 'POST' === $this->api->method ) { |
||
| 142 | if ( ! current_user_can_for_blog( $blog_id, 'promote_users' ) ) { |
||
| 143 | return new WP_Error( 'unauthorized_no_promote_cap', 'User cannot promote users for specified site', 403 ); |
||
| 144 | } |
||
| 145 | return $this->update_user( $user_id, $blog_id ); |
||
| 146 | } else { |
||
| 147 | return new WP_Error( 'bad_request', 'An unsupported request method was used.' ); |
||
| 148 | } |
||
| 149 | } |
||
| 150 | |||
| 169 | $is_wpcom = defined( 'IS_WPCOM' ) && IS_WPCOM; |
||
| 170 | |||
| 171 | if ( get_current_user_id() == $user_id && isset( $input['roles'] ) ) { |
||
| 172 | return new WP_Error( 'unauthorized', 'You cannot change your own role', 403 ); |
||
| 173 | } |
||
| 174 | |||
| 175 | if ( $is_wpcom && $user_id !== get_current_user_id() && $user_id == wpcom_get_blog_owner( $blog_id ) ) { |
||
| 176 | return new WP_Error( 'unauthorized_edit_owner', 'Current user can not edit blog owner', 403 ); |
||
| 177 | } |
||
| 178 | |||
| 179 | if ( ! $is_wpcom ) { |
||
| 181 | if ( ! is_array( $value ) ) { |
||
| 182 | $value = trim( $value ); |
||
| 183 | } |
||
| 184 | $value = wp_unslash( $value ); |
||
| 185 | switch ( $key ) { |
||
| 186 | case 'first_name': |
||
| 187 | case 'last_name': |
||
| 202 | } else if ( is_string( $input['roles'] ) ) { |
||
| 203 | $user['role'] = $input['roles']; |
||
| 204 | } else { |
||
| 205 | return new WP_Error( 'invalid_input', __( 'The roles property must be a string or an array.', 'jetpack' ), 400 ); |
||
| 206 | } |
||
| 207 | |||
| 208 | $editable_roles = array_keys( get_editable_roles() ); |
||
| 209 | View Code Duplication | if ( ! in_array( $user['role'], $editable_roles ) ) { |
|
| 210 | return new WP_Error( 'invalid_input', sprintf( __( '%s is not a valid role.', 'jetpack' ), $editable_roles ), 400 ); |
||
| 211 | } |
||
| 212 | } |
||
| 213 | |||
| 222 |
Daniel Walmsley
Miguel Lezama
Eric Binnion
Igor Zinovyev
Loading history...
This check compares calls to functions or methods with their respective definitions. If the call has more arguments than are defined, it raises an issue.
If a function is defined several times with a different number of parameters, the check may pick up the wrong definition and report false positives. One codebase where this has been known to happen is Wordpress.
In this case you can add the
@ignorePhpDoc annotation to the duplicate definition and it will be ignored.