<?php

/**

 * WordPress Post Administration API.

 *

 * @package WordPress

 * @subpackage Administration

 */

/**

 * Rename $_POST data from form names to DB post columns.

 *

 * Manipulates $_POST directly.

 *

 * @package WordPress

 * @since 2.6.0

 *

 * @param bool $update Are we updating a pre-existing post?

 * @param post_data array Array of post data. Defaults to the contents of $_POST.

 * @return object|bool WP_Error on failure, true on success.

 */

function _wp_translate_postdata( $update = false, $post_data = null ) {

	if ( empty($post_data) )

		$post_data = &$_POST;

	if ( $update )

		$post_data['ID'] = (int) $post_data['post_ID'];

	$post_data['post_content'] = isset($post_data['content']) ? $post_data['content'] : '';

	$post_data['post_excerpt'] = isset($post_data['excerpt']) ? $post_data['excerpt'] : '';

	$post_data['post_parent'] = isset($post_data['parent_id'])? $post_data['parent_id'] : '';

	if ( isset($post_data['trackback_url']) )

		$post_data['to_ping'] = $post_data['trackback_url'];

	if (!empty ( $post_data['post_author_override'] ) ) {

		$post_data['post_author'] = (int) $post_data['post_author_override'];

	} else {

		if (!empty ( $post_data['post_author'] ) ) {

			$post_data['post_author'] = (int) $post_data['post_author'];

		} else {

			$post_data['post_author'] = (int) $post_data['user_ID'];

		}

	}

	if ( isset($post_data['user_ID']) && ($post_data['post_author'] != $post_data['user_ID']) ) {

		if ( 'page' == $post_data['post_type'] ) {

			if ( !current_user_can( 'edit_others_pages' ) ) {

				return new WP_Error( 'edit_others_pages', $update ?

					__( 'You are not allowed to edit pages as this user.' ) :

					__( 'You are not allowed to create pages as this user.' )

				);

			}

		} else {

			if ( !current_user_can( 'edit_others_posts' ) ) {

				return new WP_Error( 'edit_others_posts', $update ?

					__( 'You are not allowed to edit posts as this user.' ) :

					__( 'You are not allowed to post as this user.' )

				);

			}

		}

	}

	// What to do based on which button they pressed

	if ( isset($post_data['saveasdraft']) && '' != $post_data['saveasdraft'] )

		$post_data['post_status'] = 'draft';

	if ( isset($post_data['saveasprivate']) && '' != $post_data['saveasprivate'] )

		$post_data['post_status'] = 'private';

	if ( isset($post_data['publish']) && ( '' != $post_data['publish'] ) && ( $post_data['post_status'] != 'private' ) )

		$post_data['post_status'] = 'publish';

	if ( isset($post_data['advanced']) && '' != $post_data['advanced'] )

		$post_data['post_status'] = 'draft';

	if ( isset($post_data['pending']) && '' != $post_data['pending'] )

		$post_data['post_status'] = 'pending';

	$previous_status = get_post_field('post_status',  isset($post_data['ID']) ? $post_data['ID'] : $post_data['temp_ID']);

	// Posts 'submitted for approval' present are submitted to $_POST the same as if they were being published.

	// Change status from 'publish' to 'pending' if user lacks permissions to publish or to resave published posts.

	if ( 'page' == $post_data['post_type'] ) {

		$publish_cap = 'publish_pages';

		$edit_cap = 'edit_published_pages';

	} else {

		$publish_cap = 'publish_posts';

		$edit_cap = 'edit_published_posts';

	}

	if ( isset($post_data['post_status']) && ('publish' == $post_data['post_status'] && !current_user_can( $publish_cap )) )

		if ( $previous_status != 'publish' || !current_user_can( $edit_cap ) )

			$post_data['post_status'] = 'pending';

	if ( ! isset($post_data['post_status']) )

		$post_data['post_status'] = $previous_status;

	if (!isset( $post_data['comment_status'] ))

		$post_data['comment_status'] = 'closed';

	if (!isset( $post_data['ping_status'] ))

		$post_data['ping_status'] = 'closed';

	foreach ( array('aa', 'mm', 'jj', 'hh', 'mn') as $timeunit ) {

		if ( !empty( $post_data['hidden_' . $timeunit] ) && $post_data['hidden_' . $timeunit] != $post_data[$timeunit] ) {

			$post_data['edit_date'] = '1';

			break;

		}

	}

	if ( !empty( $post_data['edit_date'] ) ) {

		$aa = $post_data['aa'];

		$mm = $post_data['mm'];

		$jj = $post_data['jj'];

		$hh = $post_data['hh'];

		$mn = $post_data['mn'];

		$ss = $post_data['ss'];

		$aa = ($aa <= 0 ) ? date('Y') : $aa;

		$mm = ($mm <= 0 ) ? date('n') : $mm;

		$jj = ($jj > 31 ) ? 31 : $jj;

		$jj = ($jj <= 0 ) ? date('j') : $jj;

		$hh = ($hh > 23 ) ? $hh -24 : $hh;

		$mn = ($mn > 59 ) ? $mn -60 : $mn;

		$ss = ($ss > 59 ) ? $ss -60 : $ss;

		$post_data['post_date'] = sprintf( "%04d-%02d-%02d %02d:%02d:%02d", $aa, $mm, $jj, $hh, $mn, $ss );

		$post_data['post_date_gmt'] = get_gmt_from_date( $post_data['post_date'] );

	}

	return $post_data;

}

/**

 * Update an existing post with values provided in $_POST.

 *

 * @since unknown

 *

 * @param array $post_data Optional.

 * @return int Post ID.

 */

function edit_post( $post_data = null ) {

	if ( empty($post_data) )

		$post_data = &$_POST;

	$post_ID = (int) $post_data['post_ID'];

	if ( 'page' == $post_data['post_type'] ) {

		if ( !current_user_can( 'edit_page', $post_ID ) )

			wp_die( __('You are not allowed to edit this page.' ));

	} else {

		if ( !current_user_can( 'edit_post', $post_ID ) )

			wp_die( __('You are not allowed to edit this post.' ));

	}

	// Autosave shouldn't save too soon after a real save

	if ( 'autosave' == $post_data['action'] ) {

		$post =& get_post( $post_ID );

		$now = time();

		$then = strtotime($post->post_date_gmt . ' +0000');

		$delta = AUTOSAVE_INTERVAL / 2;

		if ( ($now - $then) < $delta )

			return $post_ID;

	}

	$post_data = _wp_translate_postdata( true, $post_data );

	if ( is_wp_error($post_data) )

		wp_die( $post_data->get_error_message() );

	if ( isset($post_data['visibility']) ) {

		switch ( $post_data['visibility'] ) {

			case 'public' :

				$post_data['post_password'] = '';

				break;

			case 'password' :

				unset( $post_data['sticky'] );

				break;

			case 'private' :

				$post_data['post_status'] = 'private';

				$post_data['post_password'] = '';

				unset( $post_data['sticky'] );

				break;

		}

	}

	// Meta Stuff

	if ( isset($post_data['meta']) && $post_data['meta'] ) {

		foreach ( $post_data['meta'] as $key => $value )

			update_meta( $key, $value['key'], $value['value'] );

	}

	if ( isset($post_data['deletemeta']) && $post_data['deletemeta'] ) {

		foreach ( $post_data['deletemeta'] as $key => $value )

			delete_meta( $key );

	}

	add_meta( $post_ID );

	wp_update_post( $post_data );

	// Reunite any orphaned attachments with their parent

	if ( !$draft_ids = get_user_option( 'autosave_draft_ids' ) )

		$draft_ids = array();

	if ( $draft_temp_id = (int) array_search( $post_ID, $draft_ids ) )

		_relocate_children( $draft_temp_id, $post_ID );

	// Now that we have an ID we can fix any attachment anchor hrefs

	_fix_attachment_links( $post_ID );

	wp_set_post_lock( $post_ID, $GLOBALS['current_user']->ID );

	if ( current_user_can( 'edit_others_posts' ) ) {

		if ( !empty($post_data['sticky']) )

			stick_post($post_ID);

		else

			unstick_post($post_ID);

	}

	return $post_ID;

}

/**

 * {@internal Missing Short Description}}

 *

 * Updates all bulk edited posts/pages, adding (but not removing) tags and

 * categories. Skips pages when they would be their own parent or child.

 *

 * @since unknown

 *

 * @return array

 */

function bulk_edit_posts( $post_data = null ) {

	global $wpdb;

	if ( empty($post_data) )

		$post_data = &$_POST;

	if ( isset($post_data['post_type']) && 'page' == $post_data['post_type'] ) {

		if ( ! current_user_can( 'edit_pages' ) )

			wp_die( __('You are not allowed to edit pages.') );

	} else {

		if ( ! current_user_can( 'edit_posts' ) )

			wp_die( __('You are not allowed to edit posts.') );

	}

	$post_IDs = array_map( 'intval', (array) $post_data['post'] );

	$reset = array( 'post_author', 'post_status', 'post_password', 'post_parent', 'page_template', 'comment_status', 'ping_status', 'keep_private', 'tags_input', 'post_category', 'sticky' );

	foreach ( $reset as $field ) {

		if ( isset($post_data[$field]) && ( '' == $post_data[$field] || -1 == $post_data[$field] ) )

			unset($post_data[$field]);

	}

	if ( isset($post_data['post_category']) ) {

		if ( is_array($post_data['post_category']) && ! empty($post_data['post_category']) )

			$new_cats = array_map( 'absint', $post_data['post_category'] );

		else

			unset($post_data['post_category']);

	}

	if ( isset($post_data['tags_input']) ) {

		$new_tags = preg_replace( '/\s*,\s*/', ',', rtrim( trim($post_data['tags_input']), ' ,' ) );

		$new_tags = explode(',', $new_tags);

	}

	if ( isset($post_data['post_parent']) && ($parent = (int) $post_data['post_parent']) ) {

		$pages = $wpdb->get_results("SELECT ID, post_parent FROM $wpdb->posts WHERE post_type = 'page'");

		$children = array();

		for ( $i = 0; $i < 50 && $parent > 0; $i++ ) {

			$children[] = $parent;

			foreach ( $pages as $page ) {

				if ( $page->ID == $parent ) {

					$parent = $page->post_parent;

					break;

				}

			}

		}

	}

	$updated = $skipped = $locked = array();

	foreach ( $post_IDs as $post_ID ) {

		if ( isset($children) && in_array($post_ID, $children) ) {

			$skipped[] = $post_ID;

			continue;

		}

		if ( wp_check_post_lock( $post_ID ) ) {

			$locked[] = $post_ID;

			continue;

		}

		if ( isset($new_cats) ) {

			$cats = (array) wp_get_post_categories($post_ID);

			$post_data['post_category'] = array_unique( array_merge($cats, $new_cats) );

		}

		if ( isset($new_tags) ) {

			$tags = wp_get_post_tags($post_ID, array('fields' => 'names'));

			$post_data['tags_input'] = array_unique( array_merge($tags, $new_tags) );

		}

		$post_data['ID'] = $post_ID;

		$updated[] = wp_update_post( $post_data );

		if ( current_user_can( 'edit_others_posts' ) && isset( $post_data['sticky'] ) ) {

			if ( 'sticky' == $post_data['sticky'] )

				stick_post( $post_ID );

			else

				unstick_post( $post_ID );

		}

	}

	return array( 'updated' => $updated, 'skipped' => $skipped, 'locked' => $locked );

}

/**

 * Default post information to use when populating the "Write Post" form.

 *

 * @since unknown

 *

 * @return unknown

 */

function get_default_post_to_edit() {

	if ( !empty( $_REQUEST['post_title'] ) )

		$post_title = esc_html( stripslashes( $_REQUEST['post_title'] ));

	else if ( !empty( $_REQUEST['popuptitle'] ) ) {

		$post_title = esc_html( stripslashes( $_REQUEST['popuptitle'] ));

		$post_title = funky_javascript_fix( $post_title );

	} else {

		$post_title = '';

	}

	$post_content = '';

	if ( !empty( $_REQUEST['content'] ) )

		$post_content = esc_html( stripslashes( $_REQUEST['content'] ));

	else if ( !empty( $post_title ) ) {

		$text       = esc_html( stripslashes( urldecode( $_REQUEST['text'] ) ) );

		$text       = funky_javascript_fix( $text);

		$popupurl   = esc_url($_REQUEST['popupurl']);

		$post_content = '<a href="'.$popupurl.'">'.$post_title.'</a>'."\n$text";

	}

	if ( !empty( $_REQUEST['excerpt'] ) )

		$post_excerpt = esc_html( stripslashes( $_REQUEST['excerpt'] ));

	else

		$post_excerpt = '';

	$post->ID = 0;

	$post->post_name = '';

	$post->post_author = '';

	$post->post_date = '';

	$post->post_date_gmt = '';

	$post->post_password = '';

	$post->post_status = 'draft';

	$post->post_type = 'post';

	$post->to_ping = '';

	$post->pinged = '';

	$post->comment_status = get_option( 'default_comment_status' );

	$post->ping_status = get_option( 'default_ping_status' );

	$post->post_pingback = get_option( 'default_pingback_flag' );

	$post->post_category = get_option( 'default_category' );

	$post->post_content = apply_filters( 'default_content', $post_content);

	$post->post_title = apply_filters( 'default_title', $post_title );

	$post->post_excerpt = apply_filters( 'default_excerpt', $post_excerpt);

	$post->page_template = 'default';

	$post->post_parent = 0;

	$post->menu_order = 0;

	return $post;

}

/**

 * {@internal Missing Short Description}}

 *

 * @since unknown

 *

 * @return unknown

 */

function get_default_page_to_edit() {

	$page = get_default_post_to_edit();

	$page->post_type = 'page';

	return $page;

}

/**

 * Get an existing post and format it for editing.

 *

 * @since unknown

 *

 * @param unknown_type $id

 * @return unknown

 */

function get_post_to_edit( $id ) {