class.wpcom-json-api-update-media-endpoint.php — Jetpack – WP Security, Backup, Speed, & Growth 16.1

jetpack / json-endpoints / class.wpcom-json-api-update-media-endpoint.php

jetpack / json-endpoints Last commit date

class.wpcom-json-api-update-media-endpoint.php

136 lines

1	<?php // phpcs:ignore WordPress.Files.FileName.InvalidClassFileName
2	/**
3	* Update media item info endpoint.
4	*
5	* Endpoint: /sites/%s/media/%d
6	*/
7
8	if ( ! defined( 'ABSPATH' ) ) {
9	exit( 0 );
10	}
11
12	new WPCOM_JSON_API_Update_Media_Endpoint(
13	array(
14	'description' => 'Edit basic information about a media item.',
15	'group' => 'media',
16	'stat' => 'media:1:POST',
17	'method' => 'POST',
18	'path' => '/sites/%s/media/%d',
19	'deprecated' => true,
20	'max_version' => '1',
21	'new_version' => '1.1',
22	'path_labels' => array(
23	'$site' => '(int\|string) Site ID or domain',
24	'$media_ID' => '(int) The ID of the media item',
25	),
26
27	'request_format' => array(
28	'title' => '(string) The file name.',
29	'caption' => '(string) File caption.',
30	'description' => '(HTML) Description of the file.',
31	),
32
33	'response_format' => array(
34	'id' => '(int) The ID of the media item',
35	'date' => '(ISO 8601 datetime) The date the media was uploaded',
36	'parent' => '(int) ID of the post this media is attached to',
37	'link' => '(string) URL to the file',
38	'title' => '(string) File name',
39	'caption' => '(string) User provided caption of the file',
40	'description' => '(string) Description of the file',
41	'metadata' => '(array) Array of metadata about the file, such as Exif data or sizes',
42	),
43	'example_request' => 'https://public-api.wordpress.com/rest/v1.1/sites/82974409/media/446',
44	'example_request_data' => array(
45	'headers' => array(
46	'authorization' => 'Bearer YOUR_API_TOKEN',
47	),
48	'body' => array(
49	'title' => 'Updated Title',
50	),
51	),
52	)
53	);
54
55	/**
56	* Update media item info class.
57	*
58	* @phan-constructor-used-for-side-effects
59	*/
60	class WPCOM_JSON_API_Update_Media_Endpoint extends WPCOM_JSON_API_Endpoint {
61	/**
62	* Whether the current user may edit the given media item.
63	*
64	* `upload_files` is a primitive capability and ignores any object passed to it,
65	* so it only tells us the caller may upload something, never that they may edit
66	* this particular item. A missing item is passed through so the caller receives
67	* the endpoint's own 404 rather than a 403. A userless request gets no exemption:
68	* `edit_post` fails closed for user 0 like any other caller.
69	*
70	* Do not move this into a trait: this file instantiates the endpoint above the
71	* class declaration, and `use Trait;` disables PHP early binding, which makes the
72	* file fatal with "Class not found".
73	*
74	* @param int $media_id Media post ID.
75	* @return bool
76	*/
77	protected function current_user_can_edit_media_item( $media_id ) {
78	if ( ! current_user_can( 'upload_files' ) ) {
79	return false;
80	}
81
82	if ( ! get_post( $media_id ) ) {
83	return true;
84	}
85
86	return current_user_can( 'edit_post', $media_id );
87	}
88
89	/**
90	* Update media item info API callback.
91	*
92	* @param string $path API path.
93	* @param int $blog_id Blog ID.
94	* @param int $media_id Media ID.
95	*
96	* @return object\|WP_Error
97	*/
98	public function callback( $path = '', $blog_id = 0, $media_id = 0 ) {
99	$blog_id = $this->api->switch_to_blog_and_validate_user( $this->api->get_blog_id( $blog_id ) );
100	if ( is_wp_error( $blog_id ) ) {
101	return $blog_id;
102	}
103
104	if ( ! $this->current_user_can_edit_media_item( $media_id ) ) {
105	return new WP_Error( 'unauthorized', 'User cannot edit media', 403 );
106	}
107
108	$item = $this->get_media_item( $media_id );
109
110	if ( is_wp_error( $item ) ) {
111	return new WP_Error( 'unknown_media', 'Unknown Media', 404 );
112	}
113
114	$input = $this->input( true );
115	$insert = array();
116
117	if ( ! empty( $input['title'] ) ) {
118	$insert['post_title'] = $input['title'];
119	}
120
121	if ( ! empty( $input['caption'] ) ) {
122	$insert['post_excerpt'] = $input['caption'];
123	}
124
125	if ( ! empty( $input['description'] ) ) {
126	$insert['post_content'] = $input['description'];
127	}
128
129	$insert['ID'] = $media_id;
130	wp_update_post( (object) $insert );
131
132	$item = $this->get_media_item( $media_id );
133	return $item;
134	}
135	}
136