DonationActions.php
1 year ago
Endpoint.php
1 year ago
ListDonations.php
1 year ago
SwitchDonationView.php
4 years ago
Endpoint.php
87 lines
| 1 | <?php |
| 2 | |
| 3 | namespace Give\Donations\Endpoints; |
| 4 | |
| 5 | use Give\API\RestRoute; |
| 6 | use WP_Error; |
| 7 | use WP_REST_Request; |
| 8 | |
| 9 | abstract class Endpoint implements RestRoute |
| 10 | { |
| 11 | /** |
| 12 | * @var string |
| 13 | */ |
| 14 | protected $endpoint; |
| 15 | |
| 16 | /** |
| 17 | * @param string $value |
| 18 | * @since 2.20.0 |
| 19 | * |
| 20 | * @return bool |
| 21 | */ |
| 22 | public function validateInt($value) |
| 23 | { |
| 24 | return filter_var($value, FILTER_VALIDATE_INT); |
| 25 | } |
| 26 | |
| 27 | /** |
| 28 | * @param string $param |
| 29 | * @param WP_REST_Request $request |
| 30 | * @param string $key |
| 31 | * @since 2.20.0 |
| 32 | * |
| 33 | * @return bool |
| 34 | */ |
| 35 | public function validateDate($param, $request, $key) |
| 36 | { |
| 37 | // Check that date is valid, and formatted YYYY-MM-DD |
| 38 | if (substr_count($param, '-') !== 2) return false; |
| 39 | list($year, $month, $day) = array_map('intval', explode('-', $param)); |
| 40 | $valid = checkdate($month, $day, $year); |
| 41 | |
| 42 | // If checking end date, check that it is after start date |
| 43 | if ('end' === $key) { |
| 44 | $start = date_create($request->get_param('start')); |
| 45 | $end = date_create($request->get_param('end')); |
| 46 | $valid = $start <= $end ? $valid : false; |
| 47 | } |
| 48 | |
| 49 | return $valid; |
| 50 | } |
| 51 | |
| 52 | /** |
| 53 | * Check user permissions |
| 54 | * @since 4.3.1 update permissions |
| 55 | * @since 2.20.0 |
| 56 | * |
| 57 | * @return bool|WP_Error |
| 58 | */ |
| 59 | public function permissionsCheck() |
| 60 | { |
| 61 | if (current_user_can('manage_options') || current_user_can('edit_give_payments')) { |
| 62 | return true; |
| 63 | } |
| 64 | |
| 65 | return new WP_Error( |
| 66 | 'rest_forbidden', |
| 67 | esc_html__("You don't have permission to view Donations", 'give'), |
| 68 | ['status' => $this->authorizationStatusCode()] |
| 69 | ); |
| 70 | } |
| 71 | |
| 72 | /** |
| 73 | * Sets up the proper HTTP status code for authorization. |
| 74 | * @since 2.20.0 |
| 75 | * |
| 76 | * @return int |
| 77 | */ |
| 78 | public function authorizationStatusCode() |
| 79 | { |
| 80 | if (is_user_logged_in()) { |
| 81 | return 403; |
| 82 | } |
| 83 | |
| 84 | return 401; |
| 85 | } |
| 86 | } |
| 87 |