Changeset 1534

Timestamp:

05/02/2015 12:51:04 AM (9 years ago)

Author:

iandunn

Message:

WordCamp JSON API: Allow post__in for unauthenticated sessions queries.

Normally post__in is not a valid query var for unauthenticated users, but if it's left out then the query for sessions returns all available posts, rather than the filtered list that was intended.

Fixes #1009

File:

• sites/trunk/wordcamp.org/public_html/wp-content/mu-plugins/wcorg-json-api.php (modified) (2 diffs)

sites/trunk/wordcamp.org/public_html/wp-content/mu-plugins/wcorg-json-api.php

@@ -235 +235 @@
 
     if ( $session_ids ) {
+        add_filter( 'json_query_vars', 'wcorg_json_allow_post_in' );
         $sessions = $wp_json_posts->get_posts(
             array(
@@ -245 +246 @@
             'wcb_session'
         );
+        remove_filter( 'json_query_vars', 'wcorg_json_allow_post_in' );
     }
 
     return $sessions;
+}
+
+/**
+ * Allow the `post_in` query var in `WP_JSON_Posts::get_post()` queries, even if the user is unauthenticated.
+ *
+ * @param array $query_vars
+ *
+ * @return array
+ */
+function wcorg_json_allow_post_in( $query_vars ) {
+    $query_vars[] = 'post__in';
+
+    return $query_vars;
 }