/** * Validate a request argument based on details registered to the route. * * @param mixed $value * @param WP_REST_Request $request * @param string $param * @return WP_Error|boolean */ function rest_validate_request_arg($value, $request, $param) { $attributes = $request->get_attributes(); if (!isset($attributes['args'][$param]) || !is_array($attributes['args'][$param])) { return true; } $args = $attributes['args'][$param]; if (!empty($args['enum'])) { if (!in_array($value, $args['enum'])) { /* translators: 1: parameter 2: arguments */ return new WP_Error('rest_invalid_param', sprintf(__('%1$s is not one of %2$s', 'woocommerce'), $param, implode(', ', $args['enum']))); } } if ('integer' === $args['type'] && !is_numeric($value)) { /* translators: 1: parameter 2: integer type */ return new WP_Error('rest_invalid_param', sprintf(__('%1$s is not of type %2$s', 'woocommerce'), $param, 'integer')); } if ('boolean' === $args['type'] && !rest_is_boolean($value)) { /* translators: 1: parameter 2: boolean type */ return new WP_Error('rest_invalid_param', sprintf(__('%1$s is not of type %2$s', 'woocommerce'), $value, 'boolean')); } if ('string' === $args['type'] && !is_string($value)) { /* translators: 1: parameter 2: string type */ return new WP_Error('rest_invalid_param', sprintf(__('%1$s is not of type %2$s', 'woocommerce'), $param, 'string')); } if (isset($args['format'])) { switch ($args['format']) { case 'date-time': if (!rest_parse_date($value)) { return new WP_Error('rest_invalid_date', __('The date you provided is invalid.', 'woocommerce')); } break; case 'email': if (!is_email($value)) { return new WP_Error('rest_invalid_email', __('The email address you provided is invalid.', 'woocommerce')); } break; case 'ipv4': if (!rest_is_ip_address($value)) { /* translators: %s: IP address */ return new WP_Error('rest_invalid_param', sprintf(__('%s is not a valid IP address.', 'woocommerce'), $value)); } break; } } if (in_array($args['type'], array('numeric', 'integer')) && (isset($args['minimum']) || isset($args['maximum']))) { if (isset($args['minimum']) && !isset($args['maximum'])) { if (!empty($args['exclusiveMinimum']) && $value <= $args['minimum']) { return new WP_Error('rest_invalid_param', sprintf(__('%1$s must be greater than %2$d (exclusive)', 'woocommerce'), $param, $args['minimum'])); } elseif (empty($args['exclusiveMinimum']) && $value < $args['minimum']) { return new WP_Error('rest_invalid_param', sprintf(__('%1$s must be greater than %2$d (inclusive)', 'woocommerce'), $param, $args['minimum'])); } } elseif (isset($args['maximum']) && !isset($args['minimum'])) { if (!empty($args['exclusiveMaximum']) && $value >= $args['maximum']) { return new WP_Error('rest_invalid_param', sprintf(__('%1$s must be less than %2$d (exclusive)', 'woocommerce'), $param, $args['maximum'])); } elseif (empty($args['exclusiveMaximum']) && $value > $args['maximum']) { return new WP_Error('rest_invalid_param', sprintf(__('%1$s must be less than %2$d (inclusive)', 'woocommerce'), $param, $args['maximum'])); } } elseif (isset($args['maximum']) && isset($args['minimum'])) { if (!empty($args['exclusiveMinimum']) && !empty($args['exclusiveMaximum'])) { if ($value >= $args['maximum'] || $value <= $args['minimum']) { return new WP_Error('rest_invalid_param', sprintf(__('%1$s must be between %2$d (exclusive) and %3$d (exclusive)', 'woocommerce'), $param, $args['minimum'], $args['maximum'])); } } elseif (empty($args['exclusiveMinimum']) && !empty($args['exclusiveMaximum'])) { if ($value >= $args['maximum'] || $value < $args['minimum']) { return new WP_Error('rest_invalid_param', sprintf(__('%1$s must be between %2$d (inclusive) and %3$d (exclusive)', 'woocommerce'), $param, $args['minimum'], $args['maximum'])); } } elseif (!empty($args['exclusiveMinimum']) && empty($args['exclusiveMaximum'])) { if ($value > $args['maximum'] || $value <= $args['minimum']) { return new WP_Error('rest_invalid_param', sprintf(__('%1$s must be between %2$d (exclusive) and %3$d (inclusive)', 'woocommerce'), $param, $args['minimum'], $args['maximum'])); } } elseif (empty($args['exclusiveMinimum']) && empty($args['exclusiveMaximum'])) { if ($value > $args['maximum'] || $value < $args['minimum']) { return new WP_Error('rest_invalid_param', sprintf(__('%1$s must be between %2$d (inclusive) and %3$d (inclusive)', 'woocommerce'), $param, $args['minimum'], $args['maximum'])); } } } } return true; }
/** * Validate a value based on a schema. * * @param mixed $value The value to validate. * @param array $args Schema array to use for validation. * @param string $param The parameter name, used in error messages. * @return true|WP_Error */ function rest_validate_value_from_schema($value, $args, $param = '') { if ('array' === $args['type']) { if (!is_array($value)) { $value = preg_split('/[\\s,]+/', $value); } foreach ($value as $index => $v) { $is_valid = rest_validate_value_from_schema($v, $args['items'], $param . '[' . $index . ']'); if (is_wp_error($is_valid)) { return $is_valid; } } } if (!empty($args['enum'])) { if (!in_array($value, $args['enum'], true)) { return new WP_Error('rest_invalid_param', sprintf(__('%1$s is not one of %2$s.'), $param, implode(', ', $args['enum']))); } } if (in_array($args['type'], array('integer', 'number')) && !is_numeric($value)) { return new WP_Error('rest_invalid_param', sprintf(__('%1$s is not of type %2$s.'), $param, $args['type'])); } if ('integer' === $args['type'] && round(floatval($value)) !== floatval($value)) { return new WP_Error('rest_invalid_param', sprintf(__('%1$s is not of type %2$s.'), $param, 'integer')); } if ('boolean' === $args['type'] && !rest_is_boolean($value)) { return new WP_Error('rest_invalid_param', sprintf(__('%1$s is not of type %2$s.'), $value, 'boolean')); } if ('string' === $args['type'] && !is_string($value)) { return new WP_Error('rest_invalid_param', sprintf(__('%1$s is not of type %2$s.'), $param, 'string')); } if (isset($args['format'])) { switch ($args['format']) { case 'date-time': if (!rest_parse_date($value)) { return new WP_Error('rest_invalid_date', __('The date you provided is invalid.')); } break; case 'email': // is_email() checks for 3 characters (a@b), but // wp_handle_comment_submission() requires 6 characters (a@b.co) // // https://core.trac.wordpress.org/ticket/38506 if (!is_email($value) || strlen($value) < 6) { return new WP_Error('rest_invalid_email', __('The email address you provided is invalid.')); } break; case 'ipv4': if (!rest_is_ip_address($value)) { return new WP_Error('rest_invalid_param', sprintf(__('%s is not a valid IP address.'), $value)); } break; } } if (in_array($args['type'], array('number', 'integer'), true) && (isset($args['minimum']) || isset($args['maximum']))) { if (isset($args['minimum']) && !isset($args['maximum'])) { if (!empty($args['exclusiveMinimum']) && $value <= $args['minimum']) { return new WP_Error('rest_invalid_param', sprintf(__('%1$s must be greater than %2$d (exclusive)'), $param, $args['minimum'])); } elseif (empty($args['exclusiveMinimum']) && $value < $args['minimum']) { return new WP_Error('rest_invalid_param', sprintf(__('%1$s must be greater than %2$d (inclusive)'), $param, $args['minimum'])); } } elseif (isset($args['maximum']) && !isset($args['minimum'])) { if (!empty($args['exclusiveMaximum']) && $value >= $args['maximum']) { return new WP_Error('rest_invalid_param', sprintf(__('%1$s must be less than %2$d (exclusive)'), $param, $args['maximum'])); } elseif (empty($args['exclusiveMaximum']) && $value > $args['maximum']) { return new WP_Error('rest_invalid_param', sprintf(__('%1$s must be less than %2$d (inclusive)'), $param, $args['maximum'])); } } elseif (isset($args['maximum']) && isset($args['minimum'])) { if (!empty($args['exclusiveMinimum']) && !empty($args['exclusiveMaximum'])) { if ($value >= $args['maximum'] || $value <= $args['minimum']) { return new WP_Error('rest_invalid_param', sprintf(__('%1$s must be between %2$d (exclusive) and %3$d (exclusive)'), $param, $args['minimum'], $args['maximum'])); } } elseif (empty($args['exclusiveMinimum']) && !empty($args['exclusiveMaximum'])) { if ($value >= $args['maximum'] || $value < $args['minimum']) { return new WP_Error('rest_invalid_param', sprintf(__('%1$s must be between %2$d (inclusive) and %3$d (exclusive)'), $param, $args['minimum'], $args['maximum'])); } } elseif (!empty($args['exclusiveMinimum']) && empty($args['exclusiveMaximum'])) { if ($value > $args['maximum'] || $value <= $args['minimum']) { return new WP_Error('rest_invalid_param', sprintf(__('%1$s must be between %2$d (exclusive) and %3$d (inclusive)'), $param, $args['minimum'], $args['maximum'])); } } elseif (empty($args['exclusiveMinimum']) && empty($args['exclusiveMaximum'])) { if ($value > $args['maximum'] || $value < $args['minimum']) { return new WP_Error('rest_invalid_param', sprintf(__('%1$s must be between %2$d (inclusive) and %3$d (inclusive)'), $param, $args['minimum'], $args['maximum'])); } } } } return true; }