thePlatform-proxy.php

<?php

/* thePlatform Video Manager Wordpress Plugin
  Copyright (C) 2013-2015 thePlatform, LLC

  This program is free software; you can redistribute it and/or modify
  it under the terms of the GNU General Public License as published by
  the Free Software Foundation; either version 2 of the License, or
  (at your option) any later version.

  This program is distributed in the hope that it will be useful,
  but WITHOUT ANY WARRANTY; without even the implied warranty of
  MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
  GNU General Public License for more details.

  You should have received a copy of the GNU General Public License along
  with this program; if not, write to the Free Software Foundation, Inc.,
  51 Franklin Street, Fifth Floor, Boston, MA 02110-1301 USA. */

if ( ! defined( 'ABSPATH' ) ) {
	exit;
}

/**
 * This class is responsible for proxying API calls from the UI to PHP
 */
class ThePlatform_Proxy {

	private $tp_api;

	function __construct() {
		add_action( 'wp_ajax_publish_media', array( $this, 'publish_media' ) );
		add_action( 'wp_ajax_revoke_media', array( $this, 'revoke_media' ) );
		add_action( 'wp_ajax_theplatform_edit', array( $this, 'edit_media' ) );

		add_action( 'wp_ajax_get_categories', array( $this, 'get_categories' ) );
		add_action( 'wp_ajax_get_videos', array( $this, 'get_videos' ) );
		add_action( 'wp_ajax_get_video_count', array( $this, 'get_video_count' ) );
		add_action( 'wp_ajax_get_video_by_id', array( $this, 'get_video_by_id' ) );
		add_action( 'wp_ajax_get_profile_results', array( $this, 'get_profile_results' ) );
		add_action( 'wp_ajax_generate_thumbnail', array( $this, 'generate_thumbnail' ) );
		add_action( 'wp_ajax_initialize_media_upload', array( $this, 'initialize_media_upload' ) );
		add_action( 'wp_ajax_set_thumbnail', array( $this, 'set_thumbnail_ajax' ) );

		add_action( 'wp_ajax_verify_account', array( $this, 'verify_account_settings_ajax' ) );
	}

	private function get_api() {
		if ( ! isset( $this->tp_api ) ) {
			require_once( dirname( __FILE__ ) . '/thePlatform-API.php' );

			$this->tp_api = new ThePlatform_API();
		}

		return $this->tp_api;
	}

	private function check_nonce_and_permissions( $action = "", $capability = TP_EDITOR_CAP ) {
		if ( empty( $action ) ) {
			check_admin_referer( 'theplatform-ajax-nonce' );
		} else {
			check_admin_referer( 'theplatform-ajax-nonce-' . $action );
		}

		switch ( $capability ) {
			case TP_ADMIN_CAP:
				$capability_default = TP_ADMIN_DEFAULT_CAP;
				break;
			case TP_EDITOR_CAP:
				$capability_default = TP_EDITOR_DEFAULT_CAP;
				break;
			case TP_UPLOADER_CAP:
				$capability_default = TP_UPLOADER_DEFAULT_CAP;
				break;
			default:
				$capability_default = TP_EDITOR_CAP;
				break;
		}
		$tp_capability = apply_filters( $capability, $capability_default );
		if ( ! current_user_can( $tp_capability ) ) {
			wp_die( 'You do not have sufficient permissions to modify mpx Media' );
		}
	}

	private function check_theplatform_proxy_response( $response, $returnsValue = false ) {

		// Check if we got an error back and return it
		if ( is_wp_error( $response ) ) {
			wp_send_json_error( $response->get_error_message() );
		}

		if ( isset( $response['data'] ) && $response['data'] === false ) {
			wp_send_json_error( $response['status']['http_code'] );
		}

		$responseBody = wp_remote_retrieve_body( $response );

		// This AJAX call should not return a value, in this case we send a json error with the body to the UI
		if ( ! $returnsValue && ! empty( $responseBody ) ) {
			wp_send_json_error( $this->get_api()->decode_json_from_server( $response, false ) );
		}

		$parsedResponse = $this->get_api()->decode_json_from_server( $response, false );

		wp_send_json_success( $parsedResponse );
	}

	public function publish_media() {
		$this->check_nonce_and_permissions( $_POST['action'] );
		$this->get_api()->publish_media_ajax();
	}

	public function revoke_media() {
		$this->check_nonce_and_permissions( $_POST['action'] );
		$this->get_api()->revoke_media_ajax();
	}

	public function get_categories() {
		$this->check_nonce_and_permissions( $_POST['action'] );
		$this->get_api()->get_categories_ajax();
	}

	public function get_videos() {
		$this->check_nonce_and_permissions( $_POST['action'] );
		$this->get_api()->get_videos_ajax();
	}

	public function get_video_count() {
		$this->check_nonce_and_permissions( $_POST['action'] );
		$this->get_api()->get_video_count_ajax();
	}

	public function get_video_by_id() {
		$this->check_nonce_and_permissions( $_POST['action'] );
		$this->get_api()->get_video_by_id_ajax();
	}

	public function get_profile_results() {
		$this->check_nonce_and_permissions( $_POST['action'] );
		$this->get_api()->get_profile_results_ajax();
	}

	public function generate_thumbnail() {
		$this->check_nonce_and_permissions( $_POST['action'] );
		$this->get_api()->generate_thumbnail_ajax();
	}

	public function initialize_media_upload() {
		$this->check_nonce_and_permissions( $_POST['action'], TP_UPLOADER_CAP );
		$this->get_api()->initialize_media_upload_ajax();
	}

	public function edit_media() {
		$this->check_nonce_and_permissions( $_POST['action'] );
		$this->get_api()->update_media_ajax();
	}

	/**
	 * Ajax callback to initiate the change of a Post default thumbnail
	 * @return string HTML code to update the Post page to display the new thumbnail
	 */
	public function set_thumbnail_ajax() {
		$this->check_nonce_and_permissions( $_POST['action'] );

		global $post_ID;

		if ( ! isset( $_POST['id'] ) ) {
			wp_send_json_error( "Post ID not found" );
		}

		$post_ID = intval( $_POST['id'] );

		if ( ! $post_ID ) {
			wp_send_json_error( "Illegal Post ID" );
		}

		$url = isset( $_POST['img'] ) ? $_POST['img'] : '';

		$thumbnail_id = $this->set_thumbnail( esc_url_raw( $url ), $post_ID );

		if ( $thumbnail_id !== false ) {
			set_post_thumbnail( $post_ID, $thumbnail_id );
			wp_send_json_success( _wp_post_thumbnail_html( $thumbnail_id, $post_ID ) );
		}

		//TODO: Better error
		wp_send_json_error( "Something went wrong" );
	}

	/**
	 * Change the provided Post ID default thumbnail
	 *
	 * @param string $url Link to the image URL
	 * @param int $post_id WordPress Post ID to apply the change to
	 *
	 * @return int The newly created WordPress Thumbnail ID
	 */
	public function set_thumbnail( $url, $post_id ) {
		$file = download_url( esc_url_raw( $url ) );

		preg_match( '/[^\?]+\.(jpg|JPG|jpe|JPE|jpeg|JPEG|gif|GIF|png|PNG)/', $url, $matches );
		$file_array['name']     = basename( $matches[0] );
		$file_array['tmp_name'] = $file;

		if ( is_wp_error( $file ) ) {
			unlink( $file_array['tmp_name'] );

			return false;
		}

		$thumbnail_id = media_handle_sideload( $file_array, $post_id );

		if ( is_wp_error( $thumbnail_id ) ) {
			unlink( $file_array['tmp_name'] );

			return false;
		}

		return $thumbnail_id;
	}

	/**
	 *    AJAX callback for account verification button
	 */
	function verify_account_settings_ajax() {
		$this->check_nonce_and_permissions( $_POST['action'], TP_ADMIN_CAP );

		$this->get_api();

		$hash = $_POST['auth_hash'];

		$response = ThePlatform_API_HTTP::get( TP_API_SIGNIN_URL, array( 'headers' => array( 'Authorization' => 'Basic ' . $hash ) ) );

		$data = $this->get_api()->decode_json_from_server( $response );

		if ( array_key_exists( 'success', $data ) && $data['success'] == false ) {
			wp_send_json_error( "Unable to verify account" );
		}

		wp_send_json_success( "Account Verified" );
	}
}

new ThePlatform_Proxy();