#[AllowDynamicProperties]

class wp_xmlrpc_server extends IXR_Server {

/**

public $methods;

/**

public $blog_options;

/**

public $error;

/**

protected $auth_failed = false;

/**

private $is_enabled;

/**

public function __construct() {

$this->methods = array(

// WordPress API.

'wp.getUsersBlogs' => 'this:wp_getUsersBlogs',

'wp.newPost' => 'this:wp_newPost',

'wp.editPost' => 'this:wp_editPost',

'wp.deletePost' => 'this:wp_deletePost',

'wp.getPost' => 'this:wp_getPost',

'wp.getPosts' => 'this:wp_getPosts',

'wp.newTerm' => 'this:wp_newTerm',

'wp.editTerm' => 'this:wp_editTerm',

'wp.deleteTerm' => 'this:wp_deleteTerm',

'wp.getTerm' => 'this:wp_getTerm',

'wp.getTerms' => 'this:wp_getTerms',

'wp.getTaxonomy' => 'this:wp_getTaxonomy',

'wp.getTaxonomies' => 'this:wp_getTaxonomies',

'wp.getUser' => 'this:wp_getUser',

'wp.getUsers' => 'this:wp_getUsers',

'wp.getProfile' => 'this:wp_getProfile',

'wp.editProfile' => 'this:wp_editProfile',

'wp.getPage' => 'this:wp_getPage',

'wp.getPages' => 'this:wp_getPages',

'wp.newPage' => 'this:wp_newPage',

'wp.deletePage' => 'this:wp_deletePage',

'wp.editPage' => 'this:wp_editPage',

'wp.getPageList' => 'this:wp_getPageList',

'wp.getAuthors' => 'this:wp_getAuthors',

'wp.getCategories' => 'this:mw_getCategories', // Alias.

'wp.getTags' => 'this:wp_getTags',

'wp.newCategory' => 'this:wp_newCategory',

'wp.deleteCategory' => 'this:wp_deleteCategory',

'wp.suggestCategories' => 'this:wp_suggestCategories',

'wp.uploadFile' => 'this:mw_newMediaObject', // Alias.

'wp.deleteFile' => 'this:wp_deletePost', // Alias.

'wp.getCommentCount' => 'this:wp_getCommentCount',

'wp.getPostStatusList' => 'this:wp_getPostStatusList',

'wp.getPageStatusList' => 'this:wp_getPageStatusList',

'wp.getPageTemplates' => 'this:wp_getPageTemplates',

'wp.getOptions' => 'this:wp_getOptions',

'wp.setOptions' => 'this:wp_setOptions',

'wp.getComment' => 'this:wp_getComment',

'wp.getComments' => 'this:wp_getComments',

'wp.deleteComment' => 'this:wp_deleteComment',

'wp.editComment' => 'this:wp_editComment',

'wp.newComment' => 'this:wp_newComment',

'wp.getCommentStatusList' => 'this:wp_getCommentStatusList',

'wp.getMediaItem' => 'this:wp_getMediaItem',

'wp.getMediaLibrary' => 'this:wp_getMediaLibrary',

'wp.getPostFormats' => 'this:wp_getPostFormats',

'wp.getPostType' => 'this:wp_getPostType',

'wp.getPostTypes' => 'this:wp_getPostTypes',

'wp.getRevisions' => 'this:wp_getRevisions',

'wp.restoreRevision' => 'this:wp_restoreRevision',

// Blogger API.

'blogger.getUsersBlogs' => 'this:blogger_getUsersBlogs',

'blogger.getUserInfo' => 'this:blogger_getUserInfo',

'blogger.getPost' => 'this:blogger_getPost',

'blogger.getRecentPosts' => 'this:blogger_getRecentPosts',

'blogger.newPost' => 'this:blogger_newPost',

'blogger.editPost' => 'this:blogger_editPost',

'blogger.deletePost' => 'this:blogger_deletePost',

// MetaWeblog API (with MT extensions to structs).

'metaWeblog.newPost' => 'this:mw_newPost',

'metaWeblog.editPost' => 'this:mw_editPost',

'metaWeblog.getPost' => 'this:mw_getPost',

'metaWeblog.getRecentPosts' => 'this:mw_getRecentPosts',

'metaWeblog.getCategories' => 'this:mw_getCategories',

'metaWeblog.newMediaObject' => 'this:mw_newMediaObject',

/*

'metaWeblog.deletePost' => 'this:blogger_deletePost',

'metaWeblog.getUsersBlogs' => 'this:blogger_getUsersBlogs',

// MovableType API.

'mt.getCategoryList' => 'this:mt_getCategoryList',

'mt.getRecentPostTitles' => 'this:mt_getRecentPostTitles',

'mt.getPostCategories' => 'this:mt_getPostCategories',

'mt.setPostCategories' => 'this:mt_setPostCategories',

'mt.supportedMethods' => 'this:mt_supportedMethods',

'mt.supportedTextFilters' => 'this:mt_supportedTextFilters',

'mt.getTrackbackPings' => 'this:mt_getTrackbackPings',

'mt.publishPost' => 'this:mt_publishPost',

// Pingback.

'pingback.ping' => 'this:pingback_ping',

'pingback.extensions.getPingbacks' => 'this:pingback_extensions_getPingbacks',

'demo.sayHello' => 'this:sayHello',

'demo.addTwoNumbers' => 'this:addTwoNumbers',

);

$this->initialise_blog_option_info();

/**

$this->methods = apply_filters( 'xmlrpc_methods', $this->methods );

$this->set_is_enabled();

}

/**

private function set_is_enabled() {

/*

/** This filter is documented in wp-includes/option.php */

$is_enabled = apply_filters( 'pre_option_enable_xmlrpc', false, 'enable_xmlrpc', false );

if ( false === $is_enabled ) {

/** This filter is documented in wp-includes/option.php */

$is_enabled = apply_filters( 'option_enable_xmlrpc', true, 'enable_xmlrpc' );

}

/**

$this->is_enabled = apply_filters( 'xmlrpc_enabled', $is_enabled );

}

/**

public function __call( $name, $arguments ) {

if ( '_multisite_getUsersBlogs' === $name ) {

return $this->_multisite_getUsersBlogs( ...$arguments );

}

return false;

}

/**

public function serve_request() {

$this->IXR_Server( $this->methods );

}

/**

public function sayHello() {

return 'Hello!';

}

/**

public function addTwoNumbers( $args ) {

if ( ! is_array( $args ) || count( $args ) !== 2 || ! is_int( $args[0] ) || ! is_int( $args[1] ) ) {

$this->error = new IXR_Error( 400, __( 'Invalid arguments passed to this XML-RPC method. Requires two integers.' ) );

return $this->error;

}

$number1 = $args[0];

$number2 = $args[1];

return $number1 + $number2;

}

/**

public function login(

$username,

#[\SensitiveParameter]

$password

) {

if ( ! $this->is_enabled ) {

$this->error = new IXR_Error( 405, __( 'XML-RPC services are disabled on this site.' ) );

return false;

}

if ( $this->auth_failed ) {

$user = new WP_Error( 'login_prevented' );

} else {

$user = wp_authenticate( $username, $password );

}

if ( is_wp_error( $user ) ) {

$this->error = new IXR_Error( 403, __( 'Incorrect username or password.' ) );

// Flag that authentication has failed once on this wp_xmlrpc_server instance.

$this->auth_failed = true;

/**

$this->error = apply_filters( 'xmlrpc_login_error', $this->error, $user );

return false;

}

wp_set_current_user( $user->ID );

return $user;

}

/**

public function login_pass_ok(

$username,

#[\SensitiveParameter]

$password

) {

return (bool) $this->login( $username, $password );

}

/**

public function escape( &$data ) {

if ( ! is_array( $data ) ) {

return wp_slash( $data );

}

foreach ( $data as &$v ) {

if ( is_array( $v ) ) {

$this->escape( $v );

} elseif ( ! is_object( $v ) ) {

$v = wp_slash( $v );

}

}

return null;

}

/**

public function error( $error, $message = false ) {

// Accepts either an error object or an error code and message

if ( $message && ! is_object( $error ) ) {

$error = new IXR_Error( $error, $message );

}

if ( ! $this->is_enabled ) {

status_header( $error->code );

}

$this->output( $error->getXml() );

}

/**

public function get_custom_fields( $post_id ) {

$post_id = (int) $post_id;

$custom_fields = array();

foreach ( (array) has_meta( $post_id ) as $meta ) {

// Don't expose protected fields.

if ( ! current_user_can( 'edit_post_meta', $post_id, $meta['meta_key'] ) ) {

continue;

}

$custom_fields[] = array(

'id' => $meta['meta_id'],

'key' => $meta['meta_key'],

'value' => $meta['meta_value'],

);

}

return $custom_fields;

}

/**

public function set_custom_fields( $post_id, $fields ) {

$post_id = (int) $post_id;

foreach ( (array) $fields as $meta ) {

if ( isset( $meta['id'] ) ) {

$meta['id'] = (int) $meta['id'];

$pmeta = get_metadata_by_mid( 'post', $meta['id'] );

if ( ! $pmeta || (int) $pmeta->post_id !== $post_id ) {

continue;

}

if ( isset( $meta['key'] ) ) {

$meta['key'] = wp_unslash( $meta['key'] );

if ( $meta['key'] !== $pmeta->meta_key ) {

continue;

}

$meta['value'] = wp_unslash( $meta['value'] );

if ( current_user_can( 'edit_post_meta', $post_id, $meta['key'] ) ) {

update_metadata_by_mid( 'post', $meta['id'], $meta['value'] );

}

} elseif ( current_user_can( 'delete_post_meta', $post_id, $pmeta->meta_key ) ) {

delete_metadata_by_mid( 'post', $meta['id'] );

}

} elseif ( current_user_can( 'add_post_meta', $post_id, wp_unslash( $meta['key'] ) ) ) {

add_post_meta( $post_id, $meta['key'], $meta['value'] );

}

}

}

/**

public function get_term_custom_fields( $term_id ) {

$term_id = (int) $term_id;

$custom_fields = array();

foreach ( (array) has_term_meta( $term_id ) as $meta ) {

if ( ! current_user_can( 'edit_term_meta', $term_id ) ) {

continue;

}

$custom_fields[] = array(

'id' => $meta['meta_id'],

'key' => $meta['meta_key'],

'value' => $meta['meta_value'],

);

}

return $custom_fields;

}

/**

public function set_term_custom_fields( $term_id, $fields ) {

$term_id = (int) $term_id;

foreach ( (array) $fields as $meta ) {

if ( isset( $meta['id'] ) ) {

$meta['id'] = (int) $meta['id'];

$pmeta = get_metadata_by_mid( 'term', $meta['id'] );

if ( isset( $meta['key'] ) ) {

$meta['key'] = wp_unslash( $meta['key'] );

if ( $meta['key'] !== $pmeta->meta_key ) {

continue;

}

$meta['value'] = wp_unslash( $meta['value'] );

if ( current_user_can( 'edit_term_meta', $term_id ) ) {

update_metadata_by_mid( 'term', $meta['id'], $meta['value'] );

}

} elseif ( current_user_can( 'delete_term_meta', $term_id ) ) {

delete_metadata_by_mid( 'term', $meta['id'] );

}

} elseif ( current_user_can( 'add_term_meta', $term_id ) ) {

add_term_meta( $term_id, $meta['key'], $meta['value'] );

}

}

}

/**

public function initialise_blog_option_info() {

$this->blog_options = array(

// Read-only options.

'software_name' => array(

'desc' => __( 'Software Name' ),

'readonly' => true,

'value' => 'WordPress',

),

'software_version' => array(

'desc' => __( 'Software Version' ),

'readonly' => true,

'value' => get_bloginfo( 'version' ),

),

'blog_url' => array(

'desc' => __( 'WordPress Address (URL)' ),

'readonly' => true,

'option' => 'siteurl',

),

'home_url' => array(

'desc' => __( 'Site Address (URL)' ),

'readonly' => true,

'option' => 'home',

),

'login_url' => array(

'desc' => __( 'Login Address (URL)' ),

'readonly' => true,

'value' => wp_login_url(),

),

'admin_url' => array(

'desc' => __( 'The URL to the admin area' ),

'readonly' => true,

'value' => get_admin_url(),

),

'image_default_link_type' => array(

'desc' => __( 'Image default link type' ),

'readonly' => true,

'option' => 'image_default_link_type',

),

'image_default_size' => array(

'desc' => __( 'Image default size' ),

'readonly' => true,

'option' => 'image_default_size',

),

'image_default_align' => array(

'desc' => __( 'Image default align' ),

'readonly' => true,

'option' => 'image_default_align',

),

'template' => array(

'desc' => __( 'Template' ),

'readonly' => true,

'option' => 'template',

),

'stylesheet' => array(

'desc' => __( 'Stylesheet' ),

'readonly' => true,

'option' => 'stylesheet',

),

'post_thumbnail' => array(

'desc' => __( 'Post Thumbnail' ),

'readonly' => true,

'value' => current_theme_supports( 'post-thumbnails' ),

),

// Updatable options.

'time_zone' => array(

'desc' => __( 'Time Zone' ),

'readonly' => false,

'option' => 'gmt_offset',

),

'blog_title' => array(

'desc' => __( 'Site Title' ),

'readonly' => false,

'option' => 'blogname',

),

'blog_tagline' => array(

'desc' => __( 'Site Tagline' ),

'readonly' => false,

'option' => 'blogdescription',

),

'date_format' => array(

'desc' => __( 'Date Format' ),

'readonly' => false,

'option' => 'date_format',

),

'time_format' => array(

'desc' => __( 'Time Format' ),

'readonly' => false,

'option' => 'time_format',

),

'users_can_register' => array(

'desc' => __( 'Allow new users to sign up' ),

'readonly' => false,

'option' => 'users_can_register',

),

'thumbnail_size_w' => array(

'desc' => __( 'Thumbnail Width' ),

'readonly' => false,

'option' => 'thumbnail_size_w',

),

'thumbnail_size_h' => array(

'desc' => __( 'Thumbnail Height' ),

'readonly' => false,

'option' => 'thumbnail_size_h',

),

'thumbnail_crop' => array(

'desc' => __( 'Crop thumbnail to exact dimensions' ),

'readonly' => false,

'option' => 'thumbnail_crop',

),

'medium_size_w' => array(

'desc' => __( 'Medium size image width' ),

'readonly' => false,

'option' => 'medium_size_w',

),

'medium_size_h' => array(

'desc' => __( 'Medium size image height' ),

'readonly' => false,

'option' => 'medium_size_h',

),

'medium_large_size_w' => array(

'desc' => __( 'Medium-Large size image width' ),

'readonly' => false,

'option' => 'medium_large_size_w',

),

'medium_large_size_h' => array(

'desc' => __( 'Medium-Large size image height' ),

'readonly' => false,

'option' => 'medium_large_size_h',

),

'large_size_w' => array(

'desc' => __( 'Large size image width' ),

'readonly' => false,

'option' => 'large_size_w',

),

'large_size_h' => array(

'desc' => __( 'Large size image height' ),

'readonly' => false,

'option' => 'large_size_h',

),

'default_comment_status' => array(

'desc' => __( 'Allow people to submit comments on new posts.' ),

'readonly' => false,

'option' => 'default_comment_status',

),

'default_ping_status' => array(

'desc' => __( 'Allow link notifications from other blogs (pingbacks and trackbacks) on new posts.' ),

'readonly' => false,

'option' => 'default_ping_status',

),

);

/**

$this->blog_options = apply_filters( 'xmlrpc_blog_options', $this->blog_options );

}

/**

public function wp_getUsersBlogs( $args ) {

if ( ! $this->minimum_args( $args, 2 ) ) {

return $this->error;

}

// If this isn't on WPMU then just use blogger_getUsersBlogs().

if ( ! is_multisite() ) {

array_unshift( $args, 1 );

return $this->blogger_getUsersBlogs( $args );

}

$this->escape( $args );

$username = $args[0];

$password = $args[1];

$user = $this->login( $username, $password );

if ( ! $user ) {

return $this->error;

}

/**

do_action( 'xmlrpc_call', 'wp.getUsersBlogs', $args, $this );

$blogs = (array) get_blogs_of_user( $user->ID );

$struct = array();

$primary_blog_id = 0;

$active_blog = get_active_blog_for_user( $user->ID );

if ( $active_blog ) {

$primary_blog_id = (int) $active_blog->blog_id;

}

$current_network_id = get_current_network_id();

foreach ( $blogs as $blog ) {

// Don't include blogs that aren't hosted at this site.

if ( $blog->site_id !== $current_network_id ) {

continue;

}

$blog_id = $blog->userblog_id;

switch_to_blog( $blog_id );

$is_admin = current_user_can( 'manage_options' );

$is_primary = ( (int) $blog_id === $primary_blog_id );

$struct[] = array(

'isAdmin' => $is_admin,

'isPrimary' => $is_primary,

'url' => home_url( '/' ),

'blogid' => (string) $blog_id,

'blogName' => get_option( 'blogname' ),

'xmlrpc' => site_url( 'xmlrpc.php', 'rpc' ),

);

restore_current_blog();

}

return $struct;

}

/**

protected function minimum_args( $args, $count ) {

if ( ! is_array( $args ) || count( $args ) < $count ) {

$this->error = new IXR_Error( 400, __( 'Insufficient arguments passed to this XML-RPC method.' ) );

return false;

}

return true;

}

/**

protected function _prepare_taxonomy( $taxonomy, $fields ) {

$_taxonomy = array(

'name' => $taxonomy->name,

'label' => $taxonomy->label,

'hierarchical' => (bool) $taxonomy->hierarchical,

'public' => (bool) $taxonomy->public,

'show_ui' => (bool) $taxonomy->show_ui,

'_builtin' => (bool) $taxonomy->_builtin,

);

if ( in_array( 'labels', $fields, true ) ) {

$_taxonomy['labels'] = (array) $taxonomy->labels;

}

if ( in_array( 'cap', $fields, true ) ) {

$_taxonomy['cap'] = (array) $taxonomy->cap;

}

if ( in_array( 'menu', $fields, true ) ) {

$_taxonomy['show_in_menu'] = (bool) $taxonomy->show_in_menu;

}

if ( in_array( 'object_type', $fields, true ) ) {

$_taxonomy['object_type'] = array_unique( (array) $taxonomy->object_type );

}

/**

return apply_filters( 'xmlrpc_prepare_taxonomy', $_taxonomy, $taxonomy, $fields );

}

/**

protected function _prepare_term( $term ) {

$_term = $term;

if ( ! is_array( $_term ) ) {

$_term = get_object_vars( $_term );

}

// For integers which may be larger than XML-RPC supports ensure we return strings.

$_term['term_id'] = (string) $_term['term_id'];

$_term['term_group'] = (string) $_term['term_group'];

$_term['term_taxonomy_id'] = (string) $_term['term_taxonomy_id'];

$_term['parent'] = (string) $_term['parent'];

// Count we are happy to return as an integer because people really shouldn't use terms that much.

$_term['count'] = (int) $_term['count'];

// Get term meta.

$_term['custom_fields'] = $this->get_term_custom_fields( $_term['term_id'] );

/**

return apply_filters( 'xmlrpc_prepare_term', $_term, $term );

}

/**

protected function _convert_date( $date ) {

if ( '0000-00-00 00:00:00' === $date ) {

return new IXR_Date( '00000000T00:00:00Z' );

}

return new IXR_Date( mysql2date( 'Ymd\TH:i:s', $date, false ) );

}

/**

protected function _convert_date_gmt( $date_gmt, $date ) {

if ( '0000-00-00 00:00:00' !== $date && '0000-00-00 00:00:00' === $date_gmt ) {

return new IXR_Date( get_gmt_from_date( mysql2date( 'Y-m-d H:i:s', $date, false ), 'Ymd\TH:i:s' ) );

}

return $this->_convert_date( $date_gmt );

}

/**

protected function _prepare_post( $post, $fields ) {

// Holds the data for this post. built up based on $fields.

$_post = array( 'post_id' => (string) $post['ID'] );

// Prepare common post fields.

$post_fields = array(

'post_title' => $post['post_title'],

'post_date' => $this->_convert_date( $post['post_date'] ),

'post_date_gmt' => $this->_convert_date_gmt( $post['post_date_gmt'], $post['post_date'] ),

'post_modified' => $this->_convert_date( $post['post_modified'] ),

'post_modified_gmt' => $this->_convert_date_gmt( $post['post_modified_gmt'], $post['post_modified'] ),

'post_status' => $post['post_status'],

'post_type' => $post['post_type'],

'post_name' => $post['post_name'],

'post_author' => $post['post_author'],

'post_password' => $post['post_password'],

'post_excerpt' => $post['post_excerpt'],

'post_content' => $post['post_content'],

'post_parent' => (string) $post['post_parent'],

'post_mime_type' => $post['post_mime_type'],

'link' => get_permalink( $post['ID'] ),

'guid' => $post['guid'],

'menu_order' => (int) $post['menu_order'],

'comment_status' => $post['comment_status'],

'ping_status' => $post['ping_status'],

'sticky' => ( 'post' === $post['post_type'] && is_sticky( $post['ID'] ) ),

);

// Thumbnail.

$post_fields['post_thumbnail'] = array();

$thumbnail_id = get_post_thumbnail_id( $post['ID'] );

if ( $thumbnail_id ) {

$thumbnail_size = current_theme_supports( 'post-thumbnail' ) ? 'post-thumbnail' : 'thumbnail';

$post_fields['post_thumbnail'] = $this->_prepare_media_item( get_post( $thumbnail_id ), $thumbnail_size );

}

// Consider future posts as published.

if ( 'future' === $post_fields['post_status'] ) {

$post_fields['post_status'] = 'publish';

}

// Fill in blank post format.

$post_fields['post_format'] = get_post_format( $post['ID'] );

if ( empty( $post_fields['post_format'] ) ) {

$post_fields['post_format'] = 'standard';

}

// Merge requested $post_fields fields into $_post.

if ( in_array( 'post', $fields, true ) ) {

$_post = array_merge( $_post, $post_fields );

} else {

$requested_fields = array_intersect_key( $post_fields, array_flip( $fields ) );

$_post = array_merge( $_post, $requested_fields );

}

$all_taxonomy_fields = in_array( 'taxonomies', $fields, true );

if ( $all_taxonomy_fields || in_array( 'terms', $fields, true ) ) {

$post_type_taxonomies = get_object_taxonomies( $post['post_type'], 'names' );

$terms = wp_get_object_terms( $post['ID'], $post_type_taxonomies );

$_post['terms'] = array();

foreach ( $terms as $term ) {

$_post['terms'][] = $this->_prepare_term( $term );

}

}

if ( in_array( 'custom_fields', $fields, true ) ) {

$_post['custom_fields'] = $this->get_custom_fields( $post['ID'] );

}

if ( in_array( 'enclosure', $fields, true ) ) {

$_post['enclosure'] = array();

$enclosures = (array) get_post_meta( $post['ID'], 'enclosure' );

if ( ! empty( $enclosures ) ) {

$encdata = explode( "\n", $enclosures[0] );

$_post['enclosure']['url'] = trim( htmlspecialchars( $encdata[0] ) );