<?php

[0] Fix | Delete

/**

[1] Fix | Delete

* REST API Themes Controller

[2] Fix | Delete

*

[3] Fix | Delete

* Handles requests to /themes

[4] Fix | Delete

*/

[5] Fix | Delete

[6] Fix | Delete

namespace Automattic\WooCommerce\Admin\API;

[7] Fix | Delete

[8] Fix | Delete

defined( 'ABSPATH' ) || exit;

[9] Fix | Delete

[10] Fix | Delete

use Automattic\WooCommerce\Admin\Overrides\ThemeUpgrader;

[11] Fix | Delete

use Automattic\WooCommerce\Admin\Overrides\ThemeUpgraderSkin;

[12] Fix | Delete

[13] Fix | Delete

/**

[14] Fix | Delete

* Themes controller.

[15] Fix | Delete

*

[16] Fix | Delete

* @internal

[17] Fix | Delete

* @extends WC_REST_Data_Controller

[18] Fix | Delete

*/

[19] Fix | Delete

class Themes extends \WC_REST_Data_Controller {

[20] Fix | Delete

/**

[21] Fix | Delete

* Endpoint namespace.

[22] Fix | Delete

*

[23] Fix | Delete

* @var string

[24] Fix | Delete

*/

[25] Fix | Delete

protected $namespace = 'wc-admin';

[26] Fix | Delete

[27] Fix | Delete

/**

[28] Fix | Delete

* Route base.

[29] Fix | Delete

*

[30] Fix | Delete

* @var string

[31] Fix | Delete

*/

[32] Fix | Delete

protected $rest_base = 'themes';

[33] Fix | Delete

[34] Fix | Delete

/**

[35] Fix | Delete

* Register routes.

[36] Fix | Delete

*/

[37] Fix | Delete

public function register_routes() {

[38] Fix | Delete

register_rest_route(

[39] Fix | Delete

$this->namespace,

[40] Fix | Delete

'/' . $this->rest_base,

[41] Fix | Delete

array(

[42] Fix | Delete

array(

[43] Fix | Delete

'methods' => \WP_REST_Server::EDITABLE,

[44] Fix | Delete

'callback' => array( $this, 'upload_theme' ),

[45] Fix | Delete

'permission_callback' => array( $this, 'upload_theme_permissions_check' ),

[46] Fix | Delete

'args' => $this->get_collection_params(),

[47] Fix | Delete

),

[48] Fix | Delete

'schema' => array( $this, 'get_public_item_schema' ),

[49] Fix | Delete

)

[50] Fix | Delete

);

[51] Fix | Delete

}

[52] Fix | Delete

[53] Fix | Delete

/**

[54] Fix | Delete

* Check whether a given request has permission to edit upload plugins/themes.

[55] Fix | Delete

*

[56] Fix | Delete

* @param WP_REST_Request $request Full details about the request.

[57] Fix | Delete

* @return WP_Error|boolean

[58] Fix | Delete

*/

[59] Fix | Delete

public function upload_theme_permissions_check( $request ) {

[60] Fix | Delete

if ( ! current_user_can( 'upload_themes' ) ) {

[61] Fix | Delete

return new \WP_Error( 'woocommerce_rest_cannot_view', __( 'Sorry, you are not allowed to install themes on this site.', 'woocommerce' ), array( 'status' => rest_authorization_required_code() ) );

[62] Fix | Delete

}

[63] Fix | Delete

[64] Fix | Delete

return true;

[65] Fix | Delete

}

[66] Fix | Delete

[67] Fix | Delete

/**

[68] Fix | Delete

* Upload and install a theme.

[69] Fix | Delete

*

[70] Fix | Delete

* @param WP_REST_Request $request Request data.

[71] Fix | Delete

* @return WP_Error|WP_REST_Response

[72] Fix | Delete

*/

[73] Fix | Delete

public function upload_theme( $request ) {

[74] Fix | Delete

if (

[75] Fix | Delete

! isset( $_FILES['pluginzip'] ) || ! isset( $_FILES['pluginzip']['tmp_name'] ) || ! is_uploaded_file( $_FILES['pluginzip']['tmp_name'] ) || ! is_file( $_FILES['pluginzip']['tmp_name'] ) ) { // phpcs:ignore WordPress.Security.ValidatedSanitizedInput.MissingUnslash, WordPress.Security.ValidatedSanitizedInput.InputNotSanitized

[76] Fix | Delete

return new \WP_Error( 'woocommerce_rest_invalid_file', __( 'Specified file failed upload test.', 'woocommerce' ) );

[77] Fix | Delete

}

[78] Fix | Delete

[79] Fix | Delete

include_once ABSPATH . 'wp-admin/includes/file.php';

[80] Fix | Delete

include_once ABSPATH . '/wp-admin/includes/admin.php';

[81] Fix | Delete

include_once ABSPATH . '/wp-admin/includes/theme-install.php';

[82] Fix | Delete

include_once ABSPATH . '/wp-admin/includes/theme.php';

[83] Fix | Delete

include_once ABSPATH . '/wp-admin/includes/class-wp-upgrader.php';

[84] Fix | Delete

include_once ABSPATH . '/wp-admin/includes/class-theme-upgrader.php';

[85] Fix | Delete

[86] Fix | Delete

$_GET['package'] = true;

[87] Fix | Delete

$file_upload = new \File_Upload_Upgrader( 'pluginzip', 'package' );

[88] Fix | Delete

$upgrader = new ThemeUpgrader( new ThemeUpgraderSkin() );

[89] Fix | Delete

$install = $upgrader->install( $file_upload->package );

[90] Fix | Delete

[91] Fix | Delete

if ( $install || is_wp_error( $install ) ) {

[92] Fix | Delete

$file_upload->cleanup();

[93] Fix | Delete

}

[94] Fix | Delete

[95] Fix | Delete

if ( ! is_wp_error( $install ) && isset( $install['destination_name'] ) ) {

[96] Fix | Delete

$theme = $install['destination_name'];

[97] Fix | Delete

$result = array(

[98] Fix | Delete

'status' => 'success',

[99] Fix | Delete

'message' => $upgrader->strings['process_success'],

[100] Fix | Delete

'theme' => $theme,

[101] Fix | Delete

);

[102] Fix | Delete

[103] Fix | Delete

/**

[104] Fix | Delete

* Fires when a theme is successfully installed.

[105] Fix | Delete

*

[106] Fix | Delete

* @param string $theme The theme name.

[107] Fix | Delete

*/

[108] Fix | Delete

do_action( 'woocommerce_theme_installed', $theme );

[109] Fix | Delete

} else {

[110] Fix | Delete

if ( is_wp_error( $install ) && $install->get_error_code() ) {

[111] Fix | Delete

$error_message = isset( $upgrader->strings[ $install->get_error_code() ] ) ? $upgrader->strings[ $install->get_error_code() ] : $install->get_error_data();

[112] Fix | Delete

} else {

[113] Fix | Delete

$error_message = $upgrader->strings['process_failed'];

[114] Fix | Delete

}

[115] Fix | Delete

[116] Fix | Delete

$result = array(

[117] Fix | Delete

'status' => 'error',

[118] Fix | Delete

'message' => $error_message,

[119] Fix | Delete

);

[120] Fix | Delete

}

[121] Fix | Delete

[122] Fix | Delete

$response = $this->prepare_item_for_response( $result, $request );

[123] Fix | Delete

$data = $this->prepare_response_for_collection( $response );

[124] Fix | Delete

[125] Fix | Delete

return rest_ensure_response( $data );

[126] Fix | Delete

}

[127] Fix | Delete

[128] Fix | Delete

[129] Fix | Delete

/**

[130] Fix | Delete

* Prepare the data object for response.

[131] Fix | Delete

*

[132] Fix | Delete

* @param object $item Data object.

[133] Fix | Delete

* @param WP_REST_Request $request Request object.

[134] Fix | Delete

* @return WP_REST_Response $response Response data.

[135] Fix | Delete

*/

[136] Fix | Delete

public function prepare_item_for_response( $item, $request ) {

[137] Fix | Delete

$data = $this->add_additional_fields_to_object( $item, $request );

[138] Fix | Delete

$data = $this->filter_response_by_context( $data, 'view' );

[139] Fix | Delete

$response = rest_ensure_response( $data );

[140] Fix | Delete

[141] Fix | Delete

/**

[142] Fix | Delete

* Filter the list returned from the API.

[143] Fix | Delete

*

[144] Fix | Delete

* @param WP_REST_Response $response The response object.

[145] Fix | Delete

* @param array $item The original item.

[146] Fix | Delete

* @param WP_REST_Request $request Request used to generate the response.

[147] Fix | Delete

*/

[148] Fix | Delete

return apply_filters( 'woocommerce_rest_prepare_themes', $response, $item, $request );

[149] Fix | Delete

}

[150] Fix | Delete

[151] Fix | Delete

[152] Fix | Delete

/**

[153] Fix | Delete

* Get the schema, conforming to JSON Schema.

[154] Fix | Delete

*

[155] Fix | Delete

* @return array

[156] Fix | Delete

*/

[157] Fix | Delete

public function get_item_schema() {

[158] Fix | Delete

$schema = array(

[159] Fix | Delete

'$schema' => 'http://json-schema.org/draft-04/schema#',

[160] Fix | Delete

'title' => 'upload_theme',

[161] Fix | Delete

'type' => 'object',

[162] Fix | Delete

'properties' => array(

[163] Fix | Delete

'status' => array(

[164] Fix | Delete

'description' => __( 'Theme installation status.', 'woocommerce' ),

[165] Fix | Delete

'type' => 'string',

[166] Fix | Delete

'context' => array( 'view', 'edit' ),

[167] Fix | Delete

'readonly' => true,

[168] Fix | Delete

),

[169] Fix | Delete

'message' => array(

[170] Fix | Delete

'description' => __( 'Theme installation message.', 'woocommerce' ),

[171] Fix | Delete

'type' => 'string',

[172] Fix | Delete

'context' => array( 'view', 'edit' ),

[173] Fix | Delete

'readonly' => true,

[174] Fix | Delete

),

[175] Fix | Delete

'theme' => array(

[176] Fix | Delete

'description' => __( 'Uploaded theme.', 'woocommerce' ),

[177] Fix | Delete

'type' => 'object',

[178] Fix | Delete

'context' => array( 'view', 'edit' ),

[179] Fix | Delete

'readonly' => true,

[180] Fix | Delete

),

[181] Fix | Delete

),

[182] Fix | Delete

);

[183] Fix | Delete

[184] Fix | Delete

return $this->add_additional_fields_schema( $schema );

[185] Fix | Delete

}

[186] Fix | Delete

[187] Fix | Delete

/**

[188] Fix | Delete

* Get the query params for collections.

[189] Fix | Delete

*

[190] Fix | Delete

* @return array

[191] Fix | Delete

*/

[192] Fix | Delete

public function get_collection_params() {

[193] Fix | Delete

$params = array( 'context' => $this->get_context_param( array( 'default' => 'view' ) ) );

[194] Fix | Delete

$params['pluginzip'] = array(

[195] Fix | Delete

'description' => __( 'A zip file of the theme to be uploaded.', 'woocommerce' ),

[196] Fix | Delete

'type' => 'file',

[197] Fix | Delete

'validate_callback' => 'rest_validate_request_arg',

[198] Fix | Delete

);

[199] Fix | Delete

[200] Fix | Delete

return apply_filters( 'woocommerce_rest_themes_collection_params', $params );

[201] Fix | Delete

}

[202] Fix | Delete

}

[203] Fix | Delete

[204] Fix | Delete