Add Media button in the post editor.', 'jetpack' ); ?>
is_connection_owner( $user_id ) )
return true;
/**
* The access setting can be set by the connection owner, to allow sets
* of operations to other site users. Each access value corresponds to
* an array of things they can do.
*/
$options = $this->get_options();
$map = array(
'read' => array( 'read_videos' ),
'edit' => array( 'read_videos', 'edit_videos' ),
'delete' => array( 'read_videos', 'edit_videos', 'delete_videos' ),
);
if ( ! array_key_exists( $options['access'], $map ) )
return false;
if ( ! in_array( $cap, $map[ $options['access'] ] ) && 'upload_videos' != $cap )
return false;
// Additional and intrenal caps checks
if ( ! user_can( $user_id, 'upload_files' ) )
return false;
if ( 'edit_videos' == $cap && ! user_can( $user_id, 'edit_others_posts' ) )
return false;
if ( 'delete_videos' == $cap && ! user_can( $user_id, 'delete_others_posts' ) )
return false;
if ( 'upload_videos' == $cap && ! $options['allow-upload'] )
return false;
return true;
}
/**
* Returns true if the provided user is the Jetpack connection owner.
*/
function is_connection_owner( $user_id = false ) {
if ( ! $user_id )
$user_id = get_current_user_id();
$user_token = Jetpack_Data::get_access_token( JETPACK_MASTER_USER );
return $user_token && is_object( $user_token ) && isset( $user_token->external_user_id ) && $user_id === $user_token->external_user_id;
}
/**
* Our custom AJAX callback for the query-attachments action
* used in the media modal. By-passed if not for VideoPress.
*/
function wp_ajax_query_attachments() {
// Watch for VideoPress calls
if ( ! isset( $_POST['query']['videopress'] ) )
return;
if ( ! $this->can( 'read_videos' ) )
return wp_send_json_error( 'permission denied' );
// Get and sanitize query arguments.
$query_args = $this->sanitize_wp_query_args( $_POST['query'] );
// Fire a remote WP_Query
$result = $this->query( 'jetpack.vpQuery', $query_args );
if ( is_wp_error( $result ) )
return wp_send_json_error( 'xml rpc request error' );
$items = $result;
foreach ( $items as $key => $item ) {
// Check local permissions
if ( ! $this->can( 'edit_videos' ) )
unset( $item['vp_nonces']['update'] );
if ( ! $this->can( 'delete_videos' ) )
unset( $item['vp_nonces']['delete'] );
// Add a second pair of nonces for the .org blog.
$item['nonces'] = array();
if ( ! empty( $item['vp_nonces']['update'] ) )
$item['nonces']['update'] = wp_create_nonce( 'update-videopress-post_' . $item['id'] );
if ( ! empty( $item['vp_nonces']['delete'] ) )
$item['nonces']['delete'] = wp_create_nonce( 'delete-videopress-post_' . $item['id'] );
$item['vp_embed'] = videopress_shortcode_callback( array(
$item['vp_guid'],
'autoplay' => true,
'flashonly' => true,
'w' => 440,
) );
$items[ $key ] = $item;
}
wp_send_json_success( $items );
}
/**
* Sanitize user-provided WP_Query arguments
*
* These might be sent to the VideoPress server, for a remote WP_Query
* call so let's make sure they're sanitized and safe to send.
*/
function sanitize_wp_query_args( $args ) {
$args = shortcode_atts( array(
'posts_per_page' => 40,
'orderby' => 'date',
'order' => 'desc',
'paged' => 1,
's' => '',
), (array) $args, 'wpvideo' );
$args['posts_per_page'] = absint( $args['posts_per_page'] );
$args['orderby'] = strtolower( $args['orderby'] );
$args['orderby'] = ( in_array( $args['orderby'], array( 'date' ) ) ) ? $args['orderby'] : 'date';
$args['order'] = strtolower( $args['order'] );
$args['order'] = ( in_array( $args['order'], array( 'asc', 'desc' ) ) ) ? $args['order'] : 'desc';
$args['paged'] = absint( $args['paged'] );
$args['s'] = sanitize_text_field( $args['s'] );
return $args;
}
/**
* Custom AJAX callback for the save-attachment action. If the request was
* not for a VideoPress object, core's fallback action will kick in.
*/
function wp_ajax_save_attachment() {
if ( ! isset( $_POST['is_videopress'] ) )
return;
if ( ! $this->can( 'edit_videos' ) )
return wp_send_json_error( 'permission denied' );
$post_id = 0;
if ( ! isset( $_POST['id'] ) || ! $post_id = absint( $_POST['id'] ) )
wp_send_json_error();
if ( ! isset( $_POST['vp_nonces']['update'] ) )
wp_send_json_error();
check_ajax_referer( 'update-videopress-post_' . $post_id, 'nonce' );
$changes = ( ! empty( $_POST['changes'] ) ) ? (array) $_POST['changes'] : array();
$changes = shortcode_atts( array(
'title' => null,
'caption' => null,
'description' => null,
'vp_share' => null,
'vp_rating' => null,
), $changes, 'wpvideo' );
if ( ! is_null( $changes['vp_share'] ) )
$changes['vp_share'] = (bool) $changes['vp_share'];
if ( ! is_null( $changes['vp_rating'] ) )
$changes['vp_rating'] = ( array_key_exists( $changes['vp_rating'], $this->get_available_ratings() ) ) ? $changes['vp_rating'] : null;
// Remove null-values
foreach ( $changes as $key => $value )
if ( is_null( $value ) )
unset( $changes[ $key ] );
$result = $this->query( 'jetpack.vpSaveAttachment', array(
'post_id' => $post_id,
'changes' => $changes,
'nonce' => $_POST['vp_nonces']['update'],
) );
if ( is_wp_error( $result ) )
return wp_send_json_error( 'xml rpc request error' );
wp_send_json_success();
}
/**
* Custom AJAX callback for the delete-post action, only for VideoPress objects.
*/
function wp_ajax_delete_post() {
if ( ! isset( $_POST['is_videopress'] ) )
return;
if ( ! $this->can( 'delete_videos' ) )
return wp_send_json_error( 'permission denied' );
$post_id = 0;
if ( ! isset( $_POST['id'] ) || ! $post_id = absint( $_POST['id'] ) )
wp_send_json_error();
if ( ! isset( $_POST['vp_nonces']['delete'] ) )
wp_send_json_error();
check_ajax_referer( 'delete-videopress-post_' . $post_id );
$result = $this->query( 'jetpack.vpDeleteAttachment', array(
'post_id' => $post_id,
'nonce' => $_POST['vp_nonces']['delete'],
) );
if ( is_wp_error( $result ) )
return wp_send_json_error( 'xml rpc request error' );
wp_send_json_success();
}
/**
* Register VideoPress admin scripts.
*/
function enqueue_admin_scripts() {
if ( did_action( 'videopress_enqueue_admin_scripts' ) )
return;
wp_enqueue_script( 'videopress-admin', plugins_url( 'js/videopress-admin.js', __FILE__ ), array( 'jquery', 'media-views', 'media-models' ), $this->version );
wp_enqueue_style( 'videopress-admin', plugins_url( 'videopress-admin.css', __FILE__ ), array(), $this->version );
$caps = array();
foreach( array( 'read_videos', 'edit_videos', 'delete_videos', 'upload_videos' ) as $cap )
$caps[ $cap ] = $this->can( $cap );
$l10n = array(
'selectVideoFile' => __( 'Please select a video file to upload.', 'jetpack' ),
'videoUploading' => __( 'Your video is uploading... Please do not close this window.', 'jetpack' ),
'unknownError' => __( 'An unknown error has occurred. Please try again later.', 'jetpack' ),
'videoUploaded' => __( 'Your video has successfully been uploaded. It will appear in your VideoPress Library shortly.', 'jetpack' ),
'VideoPressLibraryRouter' => __( 'VideoPress Library', 'jetpack' ),
'uploadVideoRouter' => __( 'Upload a Video', 'jetpack' ),
'insertVideoButton' => __( 'Insert Video', 'jetpack' ),
);
wp_localize_script( 'videopress-admin', 'VideoPressAdminSettings', array(
'caps' => $caps,
'l10n' => $l10n,
) );
/**
* Fires after VideoPress scripts are enqueued in the dashboard.
*
* @since 2.5.0
*/
do_action( 'videopress_enqueue_admin_scripts' );
}
/**
* Get an array of available ratings. Keys are options, values are labels.
*/
function get_available_ratings() {
return array(
'G' => 'G',
'PG-13' => 'PG-13',
'R-17' => 'R',
'X-18' => 'X',
);
}
/**
* Additional VideoPress media templates.
*/
function print_media_templates() {
$options = $this->get_options();
?>
get_options();
if ( false === $options['freedom'] )
$options['freedom'] = $videopress_options['freedom'];
$options['hd'] = $videopress_options['hd'];
return $options;
}
}
// Initialize the module.
Jetpack_VideoPress::init();