endpoint, [ [ 'methods' => WP_REST_Server::DELETABLE, 'callback' => [$this, 'handleRequest'], 'permission_callback' => function () { return UserPermissions::events()->canDelete(); }, ], 'args' => [ 'ids' => [ 'type' => 'string', 'required' => true, 'validate_callback' => function ($ids) { foreach ($this->splitString($ids) as $id) { if ( ! filter_var($id, FILTER_VALIDATE_INT)) { return false; } } return true; }, ], ], ] ); } /** * @since 4.14.0 update permission capability to use facade * @since 3.6.0 * @throws Exception */ public function handleRequest(WP_REST_Request $request): WP_Rest_Response { $ids = $this->splitString($request->get_param('ids')); $errors = []; $successes = []; foreach ($ids as $id) { $event = give(EventRepository::class)->getById($id); if ( ! $event) { $errors[] = $id; continue; } $soldTicketsCount = $event->eventTickets()->count() ?? 0; if ($soldTicketsCount > 0) { $errors[] = $id; continue; } $eventDeleted = give(EventRepository::class)->getById($id)->delete(); $eventDeleted ? $successes[] = $id : $errors[] = $id; } return new WP_REST_Response(array('errors' => $errors, 'successes' => $successes)); } /** * Split string * * @since 3.6.0 * * @return string[] */ protected function splitString(string $ids): array { if (strpos($ids, ',')) { return array_map('trim', explode(',', $ids)); } return [trim($ids)]; } }