<?php

/**

 * Atom Publishing Protocol support for WordPress

 *

 * @author Original by Elias Torres <http://torrez.us/archives/2006/08/31/491/>

 * @author Modified by Dougal Campbell <http://dougal.gunters.org/>

 * @version 1.0.5-dc

 */

/**

 * WordPress is handling an Atom Publishing Protocol request.

 *

 * @var bool

 */

define('APP_REQUEST', true);

/** Set up WordPress environment */

require_once('./wp-load.php');

/** Post Template API */

require_once(ABSPATH . WPINC . '/post-template.php');

/** Atom Publishing Protocol Class */

require_once(ABSPATH . WPINC . '/atomlib.php');

/** Feed Handling API */

require_once(ABSPATH . WPINC . '/feed.php');

/** Admin Image API for metadata updating */

require_once(ABSPATH . '/wp-admin/includes/image.php');

$_SERVER['PATH_INFO'] = preg_replace( '/.*\/wp-app\.php/', '', $_SERVER['REQUEST_URI'] );

/**

 * Whether to enable Atom Publishing Protocol Logging.

 *

 * @name app_logging

 * @var int|bool

 */

$app_logging = 0;

/**

 * Whether to always authenticate user. Permanently set to true.

 *

 * @name always_authenticate

 * @var int|bool

 * @todo Should be an option somewhere

 */

$always_authenticate = 1;

/**

 * Writes logging info to a file.

 *

 * @since 2.2.0

 * @uses $app_logging

 * @package WordPress

 * @subpackage Logging

 *

 * @param string $label Type of logging

 * @param string $msg Information describing logging reason.

 */

function log_app($label,$msg) {

	global $app_logging;

	if ($app_logging) {

		$fp = fopen( 'wp-app.log', 'a+');

		$date = gmdate( 'Y-m-d H:i:s' );

		fwrite($fp, "\n\n$date - $label\n$msg\n");

		fclose($fp);

	}

}

if ( !function_exists('wp_set_current_user') ) :

/**

 * @ignore

 */

function wp_set_current_user($id, $name = '') {

	global $current_user;

	if ( isset($current_user) && ($id == $current_user->ID) )

		return $current_user;

	$current_user = new WP_User($id, $name);

	return $current_user;

}

endif;

/**

 * Filter to add more post statuses.

 *

 * @since 2.2.0

 *

 * @param string $where SQL statement to filter.

 * @return string Filtered SQL statement with added post_status for where clause.

 */

function wa_posts_where_include_drafts_filter($where) {

	$where = str_replace("post_status = 'publish'","post_status = 'publish' OR post_status = 'future' OR post_status = 'draft' OR post_status = 'inherit'", $where);

	return $where;

}

add_filter('posts_where', 'wa_posts_where_include_drafts_filter');

/**

 * WordPress AtomPub API implementation.

 *

 * @package WordPress

 * @subpackage Publishing

 * @since 2.2.0

 */

class AtomServer {

	/**

	 * ATOM content type.

	 *

	 * @since 2.2.0

	 * @var string

	 */

	var $ATOM_CONTENT_TYPE = 'application/atom+xml';

	/**

	 * Categories ATOM content type.

	 *

	 * @since 2.2.0

	 * @var string

	 */

	var $CATEGORIES_CONTENT_TYPE = 'application/atomcat+xml';

	/**

	 * Service ATOM content type.

	 *

	 * @since 2.3.0

	 * @var string

	 */

	var $SERVICE_CONTENT_TYPE = 'application/atomsvc+xml';

	/**

	 * ATOM XML namespace.

	 *

	 * @since 2.3.0

	 * @var string

	 */

	var $ATOM_NS = 'http://www.w3.org/2005/Atom';

	/**

	 * ATOMPUB XML namespace.

	 *

	 * @since 2.3.0

	 * @var string

	 */

	var $ATOMPUB_NS = 'http://www.w3.org/2007/app';

	/**

	 * Entries path.

	 *

	 * @since 2.2.0

	 * @var string

	 */

	var $ENTRIES_PATH = "posts";

	/**

	 * Categories path.

	 *

	 * @since 2.2.0

	 * @var string

	 */

	var $CATEGORIES_PATH = "categories";

	/**

	 * Media path.

	 *

	 * @since 2.2.0

	 * @var string

	 */

	var $MEDIA_PATH = "attachments";

	/**

	 * Entry path.

	 *

	 * @since 2.2.0

	 * @var string

	 */

	var $ENTRY_PATH = "post";

	/**

	 * Service path.

	 *

	 * @since 2.2.0

	 * @var string

	 */

	var $SERVICE_PATH = "service";

	/**

	 * Media single path.

	 *

	 * @since 2.2.0

	 * @var string

	 */

	var $MEDIA_SINGLE_PATH = "attachment";

	/**

	 * ATOMPUB parameters.

	 *

	 * @since 2.2.0

	 * @var array

	 */

	var $params = array();

	/**

	 * Supported ATOMPUB media types.

	 *

	 * @since 2.3.0

	 * @var array

	 */

	var $media_content_types = array('image/*','audio/*','video/*');

	/**

	 * ATOMPUB content type(s).

	 *

	 * @since 2.2.0

	 * @var array

	 */

	var $atom_content_types = array('application/atom+xml');

	/**

	 * ATOMPUB methods.

	 *

	 * @since 2.2.0

	 * @var unknown_type

	 */

	var $selectors = array();

	/**

	 * Whether to do output.

	 *

	 * Support for head.

	 *

	 * @since 2.2.0

	 * @var bool

	 */

	var $do_output = true;

	/**

	 * PHP4 constructor - Sets up object properties.

	 *

	 * @since 2.2.0

	 * @return AtomServer

	 */

	function AtomServer() {

		$this->script_name = array_pop(explode('/',$_SERVER['SCRIPT_NAME']));

		$this->app_base = get_bloginfo('url') . '/' . $this->script_name . '/';

		if ( isset($_SERVER['HTTPS']) && strtolower($_SERVER['HTTPS']) == 'on' ) {

			$this->app_base = preg_replace( '/^http:\/\//', 'https://', $this->app_base );

		}

		$this->selectors = array(

			'@/service$@' =>

				array('GET' => 'get_service'),

			'@/categories$@' =>

				array('GET' => 'get_categories_xml'),

			'@/post/(\d+)$@' =>

				array('GET' => 'get_post',

						'PUT' => 'put_post',

						'DELETE' => 'delete_post'),

			'@/posts/?(\d+)?$@' =>

				array('GET' => 'get_posts',

						'POST' => 'create_post'),

			'@/attachments/?(\d+)?$@' =>

				array('GET' => 'get_attachment',

						'POST' => 'create_attachment'),

			'@/attachment/file/(\d+)$@' =>

				array('GET' => 'get_file',

						'PUT' => 'put_file',

						'DELETE' => 'delete_file'),

			'@/attachment/(\d+)$@' =>

				array('GET' => 'get_attachment',

						'PUT' => 'put_attachment',

						'DELETE' => 'delete_attachment'),

		);

	}

	/**

	 * Handle ATOMPUB request.

	 *

	 * @since 2.2.0

	 */

	function handle_request() {

		global $always_authenticate;

		if( !empty( $_SERVER['ORIG_PATH_INFO'] ) )

			$path = $_SERVER['ORIG_PATH_INFO'];

		else

			$path = $_SERVER['PATH_INFO'];

		$method = $_SERVER['REQUEST_METHOD'];

		log_app('REQUEST',"$method $path\n================");

		$this->process_conditionals();

		//$this->process_conditionals();

		// exception case for HEAD (treat exactly as GET, but don't output)

		if($method == 'HEAD') {

			$this->do_output = false;

			$method = 'GET';

		}

		// redirect to /service in case no path is found.

		if(strlen($path) == 0 || $path == '/') {

			$this->redirect($this->get_service_url());

		}

		// check to see if AtomPub is enabled

		if( !get_option( 'enable_app' ) )

			$this->forbidden( sprintf( __( 'AtomPub services are disabled on this blog.  An admin user can enable them at %s' ), admin_url('options-writing.php') ) );

		// dispatch

		foreach($this->selectors as $regex => $funcs) {

			if(preg_match($regex, $path, $matches)) {

			if(isset($funcs[$method])) {

				// authenticate regardless of the operation and set the current

				// user. each handler will decide if auth is required or not.

				if(!$this->authenticate()) {

					if ($always_authenticate) {

						$this->auth_required('Credentials required.');

					}

				}

				array_shift($matches);

				call_user_func_array(array(&$this,$funcs[$method]), $matches);

				exit();

			} else {

				// only allow what we have handlers for...

				$this->not_allowed(array_keys($funcs));

			}

			}

		}

		// oops, nothing found

		$this->not_found();

	}

	/**

	 * Retrieve XML for ATOMPUB service.

	 *

	 * @since 2.2.0

	 */

	function get_service() {

		log_app('function','get_service()');

		if( !current_user_can( 'edit_posts' ) )

			$this->auth_required( __( 'Sorry, you do not have the right to access this blog.' ) );

		$entries_url = esc_attr($this->get_entries_url());

		$categories_url = esc_attr($this->get_categories_url());

		$media_url = esc_attr($this->get_attachments_url());

		foreach ($this->media_content_types as $med) {

			$accepted_media_types = $accepted_media_types . "<accept>" . $med . "</accept>";

		}

		$atom_prefix="atom";

		$atom_blogname=get_bloginfo('name');

		$service_doc = <<<EOD

<service xmlns="$this->ATOMPUB_NS" xmlns:$atom_prefix="$this->ATOM_NS">

  <workspace>

    <$atom_prefix:title>$atom_blogname Workspace</$atom_prefix:title>

    <collection href="$entries_url">

      <$atom_prefix:title>$atom_blogname Posts</$atom_prefix:title>

      <accept>$this->ATOM_CONTENT_TYPE;type=entry</accept>

      <categories href="$categories_url" />

    </collection>

    <collection href="$media_url">

      <$atom_prefix:title>$atom_blogname Media</$atom_prefix:title>

      $accepted_media_types

    </collection>

  </workspace>

</service>

EOD;

		$this->output($service_doc, $this->SERVICE_CONTENT_TYPE);

	}

	/**

	 * Retrieve categories list in XML format.

	 *

	 * @since 2.2.0

	 */

	function get_categories_xml() {

		log_app('function','get_categories_xml()');

		if( !current_user_can( 'edit_posts' ) )

			$this->auth_required( __( 'Sorry, you do not have the right to access this blog.' ) );

		$home = esc_attr(get_bloginfo_rss('home'));

		$categories = "";

		$cats = get_categories("hierarchical=0&hide_empty=0");

		foreach ((array) $cats as $cat) {

			$categories .= "    <category term=\"" . esc_attr($cat->name) .  "\" />\n";

}

		$output = <<<EOD

<app:categories xmlns:app="$this->ATOMPUB_NS"

	xmlns="$this->ATOM_NS"

	fixed="yes" scheme="$home">

	$categories

</app:categories>

EOD;

	$this->output($output, $this->CATEGORIES_CONTENT_TYPE);

}

	/**

	 * Create new post.

	 *

	 * @since 2.2.0

	 */

	function create_post() {

		global $blog_id, $user_ID;

		$this->get_accepted_content_type($this->atom_content_types);

		$parser = new AtomParser();

		if(!$parser->parse()) {

			$this->client_error();

		}

		$entry = array_pop($parser->feed->entries);

		log_app('Received entry:', print_r($entry,true));

		$catnames = array();

		foreach($entry->categories as $cat)

			array_push($catnames, $cat["term"]);

		$wp_cats = get_categories(array('hide_empty' => false));

		$post_category = array();

		foreach($wp_cats as $cat) {

			if(in_array($cat->name, $catnames))

				array_push($post_category, $cat->term_id);

		}

		$publish = (isset($entry->draft) && trim($entry->draft) == 'yes') ? false : true;

		$cap = ($publish) ? 'publish_posts' : 'edit_posts';

		if(!current_user_can($cap))

			$this->auth_required(__('Sorry, you do not have the right to edit/publish new posts.'));