class-groups.php — Advanced Ads – Ad Manager & AdSense 2.0.24

advanced-ads / includes / rest / class-groups.php

advanced-ads / includes / rest Last commit date

class-groups.php 1 day ago class-onboarding.php 1 year ago class-page-quick-edit.php 1 year ago class-placements.php 1 year ago class-utilities.php 1 year ago

class-groups.php

218 lines

1	<?php
2	/**
3	* Groups Rest route and endpoints
4	*
5	* @package AdvancedAds
6	* @author Advanced Ads <info@wpadvancedads.com>
7	* @since 1.50.0
8	*/
9
10	namespace AdvancedAds\Rest;
11
12	use WP_REST_Server;
13	use AdvancedAds\Constants;
14	use AdvancedAds\Utilities\Conditional;
15	use AdvancedAds\Framework\Interfaces\Routes_Interface;
16
17	defined( 'ABSPATH' ) \|\| exit;
18
19	/**
20	* Rest Groups.
21	*/
22	class Groups implements Routes_Interface {
23	/**
24	* Registers routes with WordPress.
25	*
26	* @return void
27	*/
28	public function register_routes(): void {
29	register_rest_route(
30	Constants::REST_BASE,
31	'/group',
32	[
33	'methods' => WP_REST_Server::ALLMETHODS,
34	'callback' => [ $this, 'call_endpoint' ],
35	'permission_callback' => function () {
36	return Conditional::user_can( 'advanced_ads_edit_ads' );
37	},
38	]
39	);
40	}
41
42	/**
43	* Run a callback depending on the request method.
44	*
45	* @param \WP_REST_Request $request the request.
46	*
47	* @return array
48	*/
49	public function call_endpoint( $request ): array {
50	switch ( $request->get_method() ) {
51	case 'POST':
52	return $this->create( $request );
53	case 'PUT':
54	return $this->update( $request );
55	case 'DELETE':
56	return $this->delete( $request );
57	default:
58	}
59
60	return [ 'error' => esc_html__( 'No endpoint found', 'advanced-ads' ) ];
61	}
62
63	/**
64	* Delete a group
65	*
66	* @param \WP_REST_Request $request the request.
67	*
68	* @return array
69	*/
70	public function delete( $request ): array {
71	$payload = json_decode( $request->get_body(), true );
72
73	if ( ! wp_verify_nonce( $payload['nonce'], "delete-tag_{$payload['id']}" ) ) {
74	return [ 'error' => esc_html__( 'Sorry, you are not allowed to access this feature.', 'advanced-ads' ) ];
75	}
76
77	$group = wp_advads_get_group( $payload['id'] );
78
79	if ( $group ) {
80	$group->delete();
81	}
82
83	return [ 'done' => true ];
84	}
85
86	/**
87	* Create a new group
88	*
89	* @param \WP_REST_Request $request the request.
90	*
91	* @return array
92	*/
93	public function create( $request ): array {
94	$payload = $this->get_payload( $request );
95
96	if ( ! wp_verify_nonce( $payload['nonce'], 'advads-create-group' ) ) {
97	return [ 'error' => esc_html__( 'Invalid nonce', 'advanced-ads' ) ];
98	}
99
100	$group_name = sanitize_text_field( $payload['advads-group-name'] );
101
102	if ( empty( $group_name ) ) {
103	return [ 'reload' => true ];
104	}
105
106	$posted_type = $payload['advads-group-type'] ?? 'default';
107
108	if ( ! wp_advads_has_group_type( $posted_type ) ) {
109	$posted_type = 'default';
110	}
111
112	$group = wp_advads_create_new_group( $posted_type );
113	$group->set_name( sanitize_text_field( wp_unslash( $group_name ) ) );
114	$group->set_type( $posted_type );
115	$group->set_ad_count( 1 );
116	$group->set_options( [] );
117	$group->save();
118
119	return [
120	'action' => 'create',
121	'group_data' => $group->get_data(),
122	];
123	}
124
125	/**
126	* Update an existing group
127	*
128	* @param \WP_REST_Request $request the request.
129	*
130	* @return array
131	*/
132	public function update( $request ): array {
133	$payload = $this->get_payload( $request );
134
135	if ( ! wp_verify_nonce( $payload['nonce'] ?? '', 'advads-update-group' ) ) {
136	return [ 'error' => esc_html__( 'Invalid nonce', 'advanced-ads' ) ];
137	}
138
139	$groups_data = wp_unslash( $payload['advads-groups'] ?? [] );
140	$data = is_array( $groups_data ) ? reset( $groups_data ) : null;
141
142	if ( ! is_array( $data ) ) {
143	return [ 'error' => esc_html__( 'Invalid group data.', 'advanced-ads' ) ];
144	}
145
146	$group = wp_advads_get_group( absint( $data['id'] ?? 0 ) );
147
148	if ( ! $group ) {
149	return [ 'error' => esc_html__( 'Group not found.', 'advanced-ads' ) ];
150	}
151
152	$name = sanitize_text_field( $data['name'] ?? '' );
153
154	if ( '' !== $name ) {
155	$group->set_name( $name );
156	}
157
158	$type = $data['type'] ?? $group->get_type();
159
160	if ( ! wp_advads_has_group_type( $type ) ) {
161	$type = 'default';
162	}
163
164	$group->set_type( $type );
165	$group->set_ad_count( $data['ad_count'] ?? $group->get_ad_count() );
166
167	$options = $data['options'] ?? [];
168	$group->set_options( is_array( $options ) ? $options : [] );
169	$group->set_ad_weights( $this->sanitize_ad_weights( $data['ads'] ?? [] ) );
170	$group->save();
171
172	return [
173	'action' => 'update',
174	'group_data' => $group->get_data(),
175	'reload' => true,
176	];
177	}
178
179	/**
180	* Sanitize ad weights from REST payload.
181	*
182	* @param mixed $ads Raw ads payload.
183	*
184	* @return array<int, int>
185	*/
186	private function sanitize_ad_weights( $ads ): array {
187	if ( ! is_array( $ads ) ) {
188	return [];
189	}
190
191	$weights = [];
192
193	foreach ( $ads as $ad_id => $weight ) {
194	$ad_id = absint( $ad_id );
195
196	if ( $ad_id > 0 ) {
197	$weights[ $ad_id ] = absint( $weight );
198	}
199	}
200
201	return $weights;
202	}
203
204	/**
205	* Get variable serialized with `jQuery.serialize()`
206	*
207	* @param \WP_REST_Request $request the request.
208	*
209	* @return array
210	*/
211	private function get_payload( $request ): array {
212	$body = json_decode( $request->get_body(), JSON_UNESCAPED_UNICODE );
213	parse_str( $body['fields'], $payload );
214
215	return $payload;
216	}
217	}
218