Opal-Estate-Pro/inc/api/functions.php
2019-11-11 15:15:28 +07:00

245 lines
8.0 KiB
PHP

<?php
/**
* Check permissions of posts on REST API.
*
* @param string $post_type Post type.
* @param string $context Request context.
* @param int $object_id Post ID.
* @return bool
*/
function opalestate_rest_check_post_permissions( $post_type, $context = 'read', $object_id = 0 ) {
$contexts = [
'read' => 'read_private_posts',
'create' => 'publish_posts',
'edit' => 'edit_post',
'delete' => 'delete_post',
'batch' => 'edit_others_posts',
];
if ( 'revision' === $post_type ) {
$permission = false;
} else {
$cap = $contexts[ $context ];
$post_type_object = get_post_type_object( $post_type );
$permission = current_user_can( $post_type_object->cap->$cap, $object_id );
}
return apply_filters( 'opalestate_rest_check_permissions', $permission, $context, $object_id, $post_type );
}
/**
* Check permissions of users on REST API.
*
* @param string $context Request context.
* @param int $object_id Post ID.
* @return bool
*/
function opalestate_rest_check_user_permissions( $context = 'read', $object_id = 0 ) {
$contexts = [
'read' => 'list_users',
'create' => 'promote_users', // Check if current user can create users, opalestate managers are not allowed to create users.
'edit' => 'edit_users',
'delete' => 'delete_users',
'batch' => 'promote_users',
];
// Check to allow opalestate_managers to manage only agents or agencies.
if ( in_array( $context, [ 'edit', 'delete' ], true ) && opalestate_current_user_has_role( 'opalestate_manager' ) ) {
$permission = false;
$user_data = get_userdata( $object_id );
$opalestate_manager_editable_roles = apply_filters( 'opalestate_manager_editable_roles', [ 'opalestate_agent', 'opalestate_agency' ] );
if ( isset( $user_data->roles ) ) {
$can_manage_users = array_intersect( $user_data->roles, array_unique( $opalestate_manager_editable_roles ) );
// Check if Opalestate Manager can edit agent | agency or with the is same opalestate manager.
if ( 0 < count( $can_manage_users ) || intval( $object_id ) === intval( get_current_user_id() ) ) {
$permission = current_user_can( $contexts[ $context ], $object_id );
}
}
} else {
$permission = current_user_can( $contexts[ $context ], $object_id );
}
return apply_filters( 'opalestate_rest_check_permissions', $permission, $context, $object_id, 'user' );
}
/**
* Return the user data for the given consumer_key.
*
* @param string $consumer_key Consumer key.
* @return array
*/
function opalestate_get_user_data_by_consumer_key( $consumer_key ) {
global $wpdb;
$consumer_key = opalestate_api_hash( sanitize_text_field( $consumer_key ) );
$user = $wpdb->get_row(
$wpdb->prepare(
"
SELECT key_id, user_id, permissions, consumer_key, consumer_secret, nonces
FROM {$wpdb->prefix}opalestate_api_keys
WHERE consumer_key = %s
",
$consumer_key
)
);
return $user;
}
/**
* The opalestate_property post object, generate the data for the API output
*
* @param object $property_info The Download Post Object
*
* @return array Array of post data to return back in the API
*
*/
function opalestate_api_get_property_data( $property_info ) {
$property['id'] = $property_info->ID;
$property['name'] = $property_info->post_title;
$property['slug'] = $property_info->post_name;
$property['created_date'] = $property_info->post_date;
$property['modified_date'] = $property_info->post_modified;
$property['status'] = $property_info->post_status;
$property['permalink'] = html_entity_decode( $property_info->guid );
$property['content'] = $property_info->post_content;
$property['thumbnail'] = wp_get_attachment_url( get_post_thumbnail_id( $property_info->ID ) );
$data = opalesetate_property( $property_info->ID );
$gallery = $data->get_gallery();
$gallery_count = $data->get_gallery_count();
$gallery_data = [];
if ( $gallery_count ) {
foreach ( $gallery as $id => $url ) {
$gallery_data[] = [
'id' => $id,
'url' => $url,
];
}
}
$property['gallery'] = $gallery_data;
$property['price'] = opalestate_price_format( $data->get_price() );
$property['saleprice'] = opalestate_price_format( $data->get_sale_price() );
$property['before_price_label'] = $data->get_before_price_label();
$property['price_label'] = $data->get_price_label();
$property['featured'] = $data->is_featured();
$property['map'] = $data->get_map();
$property['address'] = $data->get_address();
$property['short_info'] = $data->get_meta_shortinfo();
$property['full_info'] = $data->get_meta_fullinfo();
$property['video'] = $data->get_video_url();
$property['virtual_tour'] = $data->get_virtual_tour();
$property['attachments'] = $data->get_attachments();
$property['floor_plans'] = $data->get_floor_plans();
$property['statuses'] = $data->get_status();
$property['labels'] = $data->get_labels();
$property['locations'] = $data->get_locations();
$property['facilities'] = $data->get_facilities();
$amenities = $data->get_amenities();
$amenities_result = [];
if ( $amenities ) {
foreach ( $amenities as $amenity ) {
$value = has_term( $amenity->term_id, 'opalestate_amenities', $property_info->ID );
$amenity->value = $value;
$amenities_result[] = $amenity;
}
}
$property['amenities'] = $amenities_result;
$property['types'] = $data->get_types_tax();
$property['author_type'] = $data->get_author_type();
$property['author_data'] = $data->get_author_link_data();
$limit = opalestate_get_option( 'single_views_statistics_limit', 8 );
$stats = new Opalestate_View_Stats( $data->get_id(), $limit );
$array_label = json_encode( $stats->get_traffic_labels() );
$array_values = json_encode( $stats->get_traffic_data_accordion() );
$property['view_stats'] = [
'labels' => $array_label,
'values' => $array_values,
];
return apply_filters( 'opalestate_api_get_property_data', $property );
}
/**
* The opalestate_property post object, generate the data for the API output
*
* @param object $property_info The Download Post Object
*
* @return array Array of post data to return back in the API
* @since 1.0
*
*/
function opalestate_api_parse_property_meta_key() {
$request = [
'name' => '',
'status' => '',
'content' => '',
'thumbnail' => '',
'gallery' => '',
'price' => '',
'saleprice' => '',
'before_price_label' => '',
'price_label' => '',
'featured' => '',
'map' => '',
'address' => '',
'video' => '',
'virtual_tour' => '',
'attachments' => '',
'floor_plans' => '',
'statuses' => '',
'labels' => '',
'locations' => '',
'facilities' => '',
'amenities' => '',
'types' => '',
];
return apply_filters( 'opalestate_api_parse_property_meta_key', $request );
}
/**
* Generate a rand hash.
*
* @return string
*/
function opalestate_rand_hash() {
if ( ! function_exists( 'openssl_random_pseudo_bytes' ) ) {
return sha1( wp_rand() );
}
return bin2hex( openssl_random_pseudo_bytes( 20 ) ); // @codingStandardsIgnoreLine
}
/**
* Opalestate API - Hash.
*
* @param string $data Message to be hashed.
* @return string
*/
function opalestate_api_hash( $data ) {
return hash_hmac( 'sha256', $data, 'estate-api' );
}
/**
* Encodes a value according to RFC 3986.
* Supports multidimensional arrays.
*
* @param string|array $value The value to encode.
* @return string|array Encoded values.
*/
function opalestate_rest_urlencode_rfc3986( $value ) {
if ( is_array( $value ) ) {
return array_map( 'opalestate_rest_urlencode_rfc3986', $value );
}
return str_replace( [ '+', '%7E' ], [ ' ', '~' ], rawurlencode( $value ) );
}