1:   2:   3:   4:   5:   6:   7:   8:   9:  10:  11:  12:  13:  14:  15:  16:  17:  18:  19:  20:  21:  22:  23:  24:  25:  26:  27:  28:  29:  30:  31:  32:  33:  34:  35:  36:  37:  38:  39:  40:  41:  42:  43:  44:  45:  46:  47:  48:  49:  50:  51:  52:  53:  54:  55:  56:  57:  58:  59:  60:  61:  62:  63:  64:  65:  66:  67:  68:  69:  70:  71:  72:  73:  74:  75:  76:  77:  78:  79:  80:  81:  82:  83:  84:  85:  86:  87:  88:  89:  90:  91:  92:  93:  94:  95:  96:  97:  98:  99: 100: 101: 102: 103: 104: 105: 106: 107: 108: 109: 110: 111: 112: 113: 114: 115: 116: 117: 118: 119: 120: 121: 122: 123: 124: 125: 126: 127: 128: 129: 130: 131: 132: 133: 134: 135: 136: 137: 138: 139: 140: 141: 142: 143: 144: 145: 146: 147: 148: 149: 150: 151: 152: 153: 154: 155: 156: 157: 158: 159: 160: 161: 162: 163: 164: 165: 166: 167: 168: 169: 170: 171: 172: 173: 174: 175: 176: 177: 178: 179: 180: 181: 182: 183: 184: 185: 186: 187: 188: 189: 190: 191: 192: 193: 194: 195: 196: 197: 198: 199: 200: 201: 202: 203: 204: 205: 206: 207: 208: 209: 210: 211: 212: 213: 214: 215: 216: 217: 218: 219: 220: 221: 222: 223: 224: 225: 226: 227: 228: 229: 

<?php

namespace WPGMZA;

/**
 * This class facilitates all communication between the client and any server side modules which can be interacted with through the WordPress REST API.
 */
class RestAPI extends Factory
{
    /**
     * @const The plugins REST API namespace
     */
    const NS = 'wpgmza/v1';
    
    /**
     * Constructor
     */
    public function __construct()
    {
        add_action('wp_enqueue_scripts', array($this, 'onEnqueueScripts'));
        add_action('admin_enqueue_scripts', array($this, 'onEnqueueScripts'));
        add_action('enqueue_block_assets', array($this, 'onEnqueueScripts'));
        
        add_action('rest_api_init', array($this, 'onRestAPIInit'));
    }
    
    /**
     * Enqueues the wp-api script, required to use the Rest API client side.
     * @return void
     */
    public function onEnqueueScripts()
    {
        wp_enqueue_script('wp-api');
    }
    
    /**
     * Callback for the rest_api_init action, this function registers the plugins REST API routes.
     * @return void
     */
    public function onRestAPIInit()
    {
        register_rest_route(RestAPI::NS, '/maps(\/\d+)?/', array(
            'methods'               => 'GET',
            'callback'              => array($this, 'maps')
        ));
        
        register_rest_route(RestAPI::NS, '/markers(\/\d+)?/', array(
            'methods'               => array('GET'),
            'callback'              => array($this, 'markers')
        ));
        
        register_rest_route(RestAPI::NS, '/markers(\/\d+)?/', array(
            'methods'               => 'DELETE',
            'callback'              => array($this, 'markers'),
            'permission_callback'   => function() {
                return current_user_can('administrator');
            }
        ));
        
        register_rest_route(RestAPI::NS, '/datatables/', array(
            'methods'               => array('GET', 'POST'),
            'callback'              => array($this, 'datatables')
        ));
    }
    
    public function maps($request)
    {
        global $wpdb;
        global $WPGMZA_TABLE_NAME_MAPS;
        
        $route = $request->get_route();
        
        switch($_SERVER['REQUEST_METHOD'])
        {
            case 'GET':
                if(preg_match('#/wpgmza/v1/markers/(\d+)#', $route, $m))
                {
                    $map = Map::createInstance($m[1]);
                    return $map;
                }
                
                $ids = $wpdb->get_col("SELECT id FROM $WPGMZA_TABLE_NAME_MAPS WHERE active=0");
                
                $result = array();
                
                if(empty($ids))
                    return $result;
                
                foreach($ids as $id)
                    $result[] = Map::createInstance($id);
                
                return $result;
                
                break;
            
            default:
                return new \WP_Error('wpgmza_invalid_request_method', 'Invalid request method');
                break;
        }
    }
    
    protected function sanitizeFieldNames($fields, $table)
    {
        global $wpdb;
        
        $whitelist = $wpdb->get_col("SHOW COLUMNS FROM $table");
        $result = array();
        
        foreach($fields as $name)
        {
            if(array_search($name, $whitelist) !== false)
                $result[] = $name;
        }
        
        return $result;
    }
    
    /**
     * Callback for the /markers REST API route.
     * @param \WP_REST_Request The REST request.
     * @return mixed Where an ID is specified on the URL, a single marker is returned. Where no ID is specified, an array of all markers are returned.
     */
    public function markers($request)
    {
        global $wpdb;
        global $wpgmza_tblname;
        
        $route = $request->get_route();
        
        switch($_SERVER['REQUEST_METHOD'])
        {
            case 'GET':
                if(preg_match('#/wpgmza/v1/markers/(\d+)#', $route, $m))
                {
                    $marker = Marker::createInstance($m[1]);
                    return $marker;
                }
                
                $fields = null;
                
                if(isset($_GET['fields']) && is_string($_GET['fields']))
                    $fields = explode(',', $_GET['fields']);
                else if(!empty($_GET['fields']))
                    $fields = $_GET['fields'];
                
                if(!empty($fields))
                    $fields = $this->sanitizeFieldNames($fields, $wpgmza_tblname);
                
                if(!empty($_GET['filter']))
                {
                    $filteringParameters = json_decode( stripslashes($_GET['filter']) );
                    
                    $markerFilter = MarkerFilter::createInstance($filteringParameters);
                    
                    foreach($filteringParameters as $key => $value)
                        $markerFilter->{$key} = $value;
                    
                    $results = $markerFilter->getFilteredMarkers($fields);
                }
                else if(!empty($fields))
                {
                    $query = new Query();
                    
                    $query->type = "SELECT";
                    $query->table = $wpgmza_tblname;
                    $query->fields = $fields;
                    
                    $qstr = $query->build();
                    
                    $results = $wpdb->get_results($qstr);
                }
                else if(!$fields)
                {
                    $results = $wpdb->get_results("SELECT * FROM $wpgmza_tblname");
                }
                
                // TODO: Select all custom field data too, in one query, and add that to the marker data in the following loop. Ideally we could add a bulk get function to the CRUD classes which takes IDs?
                // NB: Such a function has been implemented, just need to hook that up
                
                foreach($results as $obj)
                    unset($obj->latlng);
                
                return $results;
                break;
            
            case 'DELETE':
                
                // Workaround for PHP not populating $_REQUEST
                $request = array();
                $body = file_get_contents('php://input');
                parse_str($body, $request);
                
                if(isset($request['id']))
                {
                    $marker = Marker::createInstance($request['id']);
                    $marker->trash();
                }
                
                if(isset($request['ids']))
                    Marker::bulk_trash($request['ids']);
                
                return (object)array(
                    'success' => true
                );
                
                break;
                
            default:
                return new \WP_Error('wpgmza_invalid_request_method', 'Invalid request method');
                break;
        }
        
        
    }
    
    public function datatables()
    {
        $request = $_REQUEST['wpgmzaDataTableRequestData'];
        
        $class = '\\' . stripslashes( $request['phpClass'] );
        
        $instance = $class::createInstance();
        
        if(!($instance instanceof DataTable))
            return WP_Error('wpgmza_invalid_datatable_class', 'Specified PHP class must extend WPGMZA\\DataTable', array('status' => 403));
        
        return $instance->data($request);
    }
}