文件操作 - RestAPI.php

文件: /home/www/public/wp-content/plugins/tutor/classes/RestAPI.php

编辑文件内容

<?php //phpcs:ignore WordPress.Files.FileName.NotHyphenatedLowercase
/**
 * RestAPI class
 *
 * @package Tutor\API
 * @author Themeum <support@themeum.com>
 * @link https://themeum.com
 * @since 1.5.0
 */

namespace TUTOR;

if ( ! defined( 'ABSPATH' ) ) {
	exit;
}

/**
 * Initialize REST API
 *
 * @since 1.5.0
 */
class RestAPI {

/**
	 * Custom validation trait
	 */
	use Custom_Validation;

/**
	 * API namespace
	 *
	 * @var string
	 */
	private $namespace = 'tutor/v1';

/**
	 * Course post type
	 *
	 * @var string
	 */
	protected $course_post_type;

/**
	 * Plugin dir Path
	 *
	 * @var string
	 */
	private $path;

/**
	 * Course Object
	 *
	 * @var object
	 */
	private $course_obj;

/**
	 * Topic Object
	 *
	 * @var object
	 */
	private $topic_obj;

/**
	 * Lesson Object
	 *
	 * @var object
	 */
	private $lesson_obj;

/**
	 * Announcement Object
	 *
	 * @var object
	 */
	private $announcement_obj;

/**
	 * Quiz Object
	 *
	 * @var object
	 */
	private $quiz_obj;

/**
	 * Author Object
	 *
	 * @var object
	 */
	private $author_obj;

/**
	 * Rating Object
	 *
	 * @var object
	 */
	private $rating_obj;

/**
	 * Manage dependencies
	 *
	 * @since 1.5.0
	 */
	public function __construct() {

$this->path = plugin_dir_path( TUTOR_FILE );

spl_autoload_register( array( $this, 'loader' ) );

$this->course_obj       = new REST_Course();
		$this->topic_obj        = new REST_Topic();
		$this->lesson_obj       = new REST_Lesson();
		$this->announcement_obj = new REST_Course_Announcement();
		$this->quiz_obj         = new REST_Quiz();
		$this->author_obj       = new REST_Author();
		$this->rating_obj       = new REST_Rating();

add_action( 'rest_api_init', array( $this, 'init_routes' ) );
		add_filter( 'rest_request_before_callbacks', array( $this, 'check_permission' ), 10, 3 );
	}

/**
	 * Check permission before dispatching REST request.
	 *
	 * @todo will remove and prevent by capability where needed.
	 *
	 * @since 4.0.1
	 *
	 * @param mixed            $response response.
	 * @param mixed            $handler handler.
	 * @param \WP_REST_Request $request request.
	 *
	 * @return mixed|\WP_Error
	 */
	public function check_permission( $response, $handler, $request ) {
		$id            = absint( $request['id'] );
		$method        = $request->get_method();
		$write_methods = array( 'POST', 'PUT', 'PATCH', 'DELETE' );
		$is_write      = in_array( $method, $write_methods, true );

if ( ! $id ) {
			return $response;
		}

$post = get_post( $id );

if ( ! $post ) {
			return $response;
		}

$post_types = array(
			tutor()->course_post_type,
			tutor()->bundle_post_type,
		);

if ( ! in_array( $post->post_type, $post_types, true ) ) {
			return $response;
		}

// Prevent write actions which are only allowed for author.
		if ( $is_write && ! current_user_can( 'edit_post', $id ) ) {
			return new \WP_Error(
				'rest_forbidden',
				tutor_utils()->error_message(),
				array( 'status' => rest_authorization_required_code() )
			);
		}

// Prevent access to non-publish posts, only author can access.
		if ( 'publish' !== $post->post_status && ! current_user_can( 'edit_post', $id ) ) {
			return new \WP_Error(
				'rest_forbidden',
				tutor_utils()->error_message(),
				array( 'status' => rest_authorization_required_code() )
			);
		}

return $response;
	}

/**
	 * Class loading
	 *
	 * @since 1.5.0
	 *
	 * @param string $class_name class name to load.
	 *
	 * @return void
	 */
	private function loader( $class_name ) {
		if ( ! class_exists( $class_name ) ) {
			$class_name = preg_replace(
				array( '/([a-z])([A-Z])/', '/\\\/' ),
				array( '$1$2', DIRECTORY_SEPARATOR ),
				$class_name
			);

$class_name = str_replace( 'TUTOR' . DIRECTORY_SEPARATOR, 'restapi' . DIRECTORY_SEPARATOR, $class_name );
			$file_name  = $this->path . $class_name . '.php';

if ( file_exists( $file_name ) ) {
				require_once $file_name;
			}
		}
	}

/**
	 * Initialize routes
	 *
	 * @since 1.5.0
	 *
	 * @return void
	 */
	public function init_routes() {
		// Courses.
		register_rest_route(
			$this->namespace,
			'/courses',
			array(
				'methods'             => 'GET',
				'callback'            => array(
					$this->course_obj,
					'course',
				),
				'permission_callback' => array( RestAuth::class, 'process_api_request' ),
			)
		);

// Course details.
		register_rest_route(
			$this->namespace,
			'/courses/(?P<id>\d+)',
			array(
				'methods'             => 'GET',
				'callback'            => array(
					$this->course_obj,
					'course_detail',
				),
				'args'                => array(
					'id' => array(
						'validate_callback' => function ( $param ) {
							return is_numeric( $param );
						},
					),
				),
				'permission_callback' => array( RestAuth::class, 'process_api_request' ),
			)
		);

// Course topic.
		register_rest_route(
			$this->namespace,
			'/topics',
			array(
				'methods'             => 'GET',
				'callback'            => array(
					$this->topic_obj,
					'course_topic',
				),
				'args'                => array(
					'course_id' => array(
						'validate_callback' => function ( $param ) {
							return is_numeric( $param );
						},
					),
				),
				'permission_callback' => array( RestAuth::class, 'process_api_request' ),
			)
		);

// Lesson by topic.
		register_rest_route(
			$this->namespace,
			'/lessons',
			array(
				'methods'             => 'GET',
				'callback'            => array(
					$this->lesson_obj,
					'topic_lesson',
				),
				'args'                => array(
					'topic_id' => array(
						'validate_callback' => function ( $param ) {
							return is_numeric( $param );
						},
					),
				),
				'permission_callback' => array( RestAuth::class, 'process_api_request' ),
			)
		);

// Course announcement by course id.
		register_rest_route(
			$this->namespace,
			'/course-announcement/(?P<id>\d+)',
			array(
				'methods'             => 'GET',
				'callback'            => array(
					$this->announcement_obj,
					'course_announcement',
				),
				'args'                => array(
					'id' => array(
						'validate_callback' => function ( $param ) {
							return is_numeric( $param );
						},
					),
				),
				'permission_callback' => array( RestAuth::class, 'process_api_request' ),
			)
		);

// Quiz by topic id.
		register_rest_route(
			$this->namespace,
			'/quizzes',
			array(
				'methods'             => 'GET',
				'callback'            => array(
					$this->quiz_obj,
					'quiz_with_settings',
				),
				'args'                => array(
					'topic_id' => array(
						'validate_callback' => function ( $param ) {
							return is_numeric( $param );
						},
					),
				),
				'permission_callback' => array( RestAuth::class, 'process_api_request' ),
			)
		);

// Quiz by quiz id.
		register_rest_route(
			$this->namespace,
			'/quizzes/(?P<id>\d+)',
			array(
				'methods'             => 'GET',
				'callback'            => array(
					$this->quiz_obj,
					'get_quiz',
				),
				'args'                => array(
					'id' => array(
						'validate_callback' => function ( $param ) {
							return is_numeric( $param );
						},
					),
				),
				'permission_callback' => array( RestAuth::class, 'process_api_request' ),
			)
		);

// Quiz question answer by quiz id.
		register_rest_route(
			$this->namespace,
			'/quiz-question-answer/(?P<id>\d+)',
			array(
				'methods'             => 'GET',
				'callback'            => array(
					$this->quiz_obj,
					'quiz_question_ans',
				),
				'args'                => array(
					'id' => array(
						'validate_callback' => function ( $param ) {
							return is_numeric( $param );
						},
					),
				),
				'permission_callback' => array( RestAuth::class, 'process_api_request' ),
			)
		);

// Quiz attempt details by quiz id.
		register_rest_route(
			$this->namespace,
			'/quiz-attempt-details/(?P<id>\d+)',
			array(
				'methods'             => 'GET',
				'callback'            => array(
					$this->quiz_obj,
					'quiz_attempt_details',
				),
				'args'                => array(
					'id' => array(
						'validate_callback' => function ( $param ) {
							return is_numeric( $param );
						},
					),
				),
				'permission_callback' => array( RestAuth::class, 'process_api_request' ),
			)
		);

// Author detail by id.
		register_rest_route(
			$this->namespace,
			'/author-information/(?P<id>\d+)',
			array(
				'methods'             => 'GET',
				'callback'            => array(
					$this->author_obj,
					'author_detail',
				),
				'args'                => array(
					'id' => array(
						'validate_callback' => function ( $param ) {
							return is_numeric( $param );
						},
					),
				),
				'permission_callback' => array( RestAuth::class, 'process_api_request' ),
			)
		);

// Reviews by course id.
		register_rest_route(
			$this->namespace,
			'/course-rating/(?P<id>\d+)',
			array(
				'methods'             => 'GET',
				'callback'            => array(
					$this->rating_obj,
					'course_rating',
				),
				'args'                => array(
					'id' => array(
						'validate_callback' => function ( $param ) {
							return is_numeric( $param );
						},
					),
				),
				'permission_callback' => array( RestAuth::class, 'process_api_request' ),
			)
		);

// Get course content by id.
		register_rest_route(
			$this->namespace,
			'/course-contents/(?P<id>\d+)',
			array(
				'methods'             => 'GET',
				'callback'            => array(
					$this->course_obj,
					'course_contents',
				),
				'args'                => array(
					'id' => array(
						'validate_callback' => function ( $param ) {
							return is_numeric( $param );
						},
					),
				),
				'permission_callback' => array( RestAuth::class, 'process_api_request' ),
			)
		);
	}
}

文件操作 - RestAPI.php

文件: /home/www/public/wp-content/plugins/tutor/classes/RestAPI.php

编辑文件内容

修改文件时间

删除文件