Changeset 3628743 for social-engine/trunk/classes/rest.php

Timestamp:

07/30/2026 02:10:55 PM (3 months ago)

Author:

TigrouMeow

Message:

Version 0.9.1.

File:

• social-engine/trunk/classes/rest.php (modified) (2 diffs)

social-engine/trunk/classes/rest.php

@@ -136 +136 @@
                         register_rest_route( $this->namespace, '/publish_now', array(
                                 'methods' => 'POST',
-                                'permission_callback' => '__return_true',
+                                'permission_callback' => array( $this->core, 'can_access_features' ),
                                 'callback' => array( $this, 'rest_publish_now' )
                         ) );
@@ -815 +815 @@
                 }
 
+                $post_id = absint( $post_id );
+                $post = get_post( $post_id );
+
+                if ( !$post ) {
+                        return new WP_REST_Response([
+                                'success' => false,
+                                'message' => 'The post could not be found for the provided post id.',
+                        ], 404 );
+                }
+
+                if ( $post->post_type !== $this->core->get_social_post_type() ) {
+                        return new WP_REST_Response([
+                                'success' => false,
+                                'message' => 'The post exists but is not a social post (invalid post type).',
+                        ], 400 );
+                }
+
+                if ( !$this->core->can_access_moderation_features() ) {
+                        return new WP_REST_Response([
+                                'success' => false,
+                                'message' => 'Only an administrator or editor can publish this post.',
+                        ], 403 );
+                }
+
                 $thumbnail_ids = json_decode( get_post_meta( $post_id, 'sclegn_thumbnails', true ) ) ?? [];
                 $allowd_mimes = array_unique( array_values( $this->core->get_allowed_thumbnail_mimes() ) );