wordpress-develop/tests/phpunit/tests/ajax/Autosave.php

<?php

/**
 * Admin ajax functions to be tested
 */
require_once( ABSPATH . 'wp-admin/includes/ajax-actions.php' );

/**
 * Testing ajax save draft functionality
 *
 * @package    WordPress
 * @subpackage UnitTests
 * @since      3.4.0
 * @group      ajax
 */
class Tests_Ajax_Autosave extends WP_Ajax_UnitTestCase {

	/**
	 * Post
	 * @var mixed
	 */
	protected $_post = null;

	protected static $admin_id = 0;
	protected static $editor_id = 0;
	protected static $post;
	protected static $post_id;
	protected static $user_ids = array();

	public static function wpSetUpBeforeClass( $factory ) {
		self::$user_ids[] = self::$admin_id = $factory->user->create( array( 'role' => 'administrator' ) );
		self::$user_ids[] = self::$editor_id = $factory->user->create( array( 'role' => 'editor' ) );

		self::$post_id = $factory->post->create( array( 'post_status' => 'draft' ) );
		self::$post = get_post( self::$post_id );
	}

	public static function wpTearDownAfterClass() {
		foreach ( self::$user_ids as $user_id ) {
			self::delete_user( $user_id );
		}

		wp_delete_post( self::$post_id, true );
	}

	/**
	 * Set up the test fixture
	 */
	public function setUp() {
		parent::setUp();
		// Set a user so the $post has 'post_author'
		wp_set_current_user( self::$admin_id );
	}

	/**
	 * Test autosaving a post
	 * @return void
	 */
	public function test_autosave_post() {
		// The original post_author
		wp_set_current_user( self::$admin_id );

		// Set up the $_POST request
		$md5 = md5( uniqid() );
		$_POST = array(
			'action' =>	'heartbeat',
			'_nonce' => wp_create_nonce( 'heartbeat-nonce' ),
			'data' => array(
				'wp_autosave' => array(
				    'post_id'       => self::$post_id,
				    '_wpnonce'      => wp_create_nonce( 'update-post_' . self::$post->ID ),
				    'post_content'  => self::$post->post_content . PHP_EOL . $md5,
					'post_type'     => 'post',
				),
			),
		);

		// Make the request
		try {
			$this->_handleAjax( 'heartbeat' );
		} catch ( WPAjaxDieContinueException $e ) {
			unset( $e );
		}

		// Get the response, it is in heartbeat's response
		$response = json_decode( $this->_last_response, true );

		// Ensure everything is correct
		$this->assertNotEmpty( $response['wp_autosave'] );
		$this->assertTrue( $response['wp_autosave']['success'] );

		// Check that the edit happened
		$post = get_post( self::$post_id );
		$this->assertGreaterThanOrEqual( 0, strpos( self::$post->post_content, $md5 ) );
	}

	/**
	 * Test autosaving a locked post
	 * @return void
	 */
	public function test_autosave_locked_post() {
		// Lock the post to another user
		wp_set_current_user( self::$editor_id );
		wp_set_post_lock( self::$post_id );

		wp_set_current_user( self::$admin_id );

		// Ensure post is locked
		$this->assertEquals( self::$editor_id, wp_check_post_lock( self::$post_id ) );

		// Set up the $_POST request
		$md5 = md5( uniqid() );
		$_POST = array(
			'action' =>	'heartbeat',
			'_nonce' => wp_create_nonce( 'heartbeat-nonce' ),
			'data' => array(
				'wp_autosave' => array(
				    'post_id'       => self::$post_id,
				    '_wpnonce'      => wp_create_nonce( 'update-post_' . self::$post_id ),
				    'post_content'  => self::$post->post_content . PHP_EOL . $md5,
					'post_type'     => 'post',
				),
			),
		);

		// Make the request
		try {
			$this->_handleAjax( 'heartbeat' );
		} catch ( WPAjaxDieContinueException $e ) {
			unset( $e );
		}

		$response = json_decode( $this->_last_response, true );

		// Ensure everything is correct
		$this->assertNotEmpty( $response['wp_autosave'] );
		$this->assertTrue( $response['wp_autosave']['success'] );

		// Check that the original post was NOT edited
		$post = get_post( self::$post_id );
		$this->assertFalse( strpos( $post->post_content, $md5 ) );

		// Check if the autosave post was created
		$autosave = wp_get_post_autosave( self::$post_id, get_current_user_id() );
		$this->assertNotEmpty( $autosave );
		$this->assertGreaterThanOrEqual( 0, strpos( $autosave->post_content, $md5 ) );
	}

	/**
	 * Test with an invalid nonce
	 * @return void
	 */
	public function test_with_invalid_nonce( ) {

		wp_set_current_user( self::$admin_id );

		// Set up the $_POST request
		$_POST = array(
			'action' =>	'heartbeat',
			'_nonce' => wp_create_nonce( 'heartbeat-nonce' ),
			'data' => array(
				'wp_autosave' => array(
				    'post_id'  => self::$post_id,
				    '_wpnonce' => substr( md5( uniqid() ), 0, 10 ),
				),
			),
		);

		// Make the request
		try {
			$this->_handleAjax( 'heartbeat' );
		} catch ( WPAjaxDieContinueException $e ) {
			unset( $e );
		}

		$response = json_decode( $this->_last_response, true );

		$this->assertNotEmpty( $response['wp_autosave'] );
		$this->assertFalse( $response['wp_autosave']['success'] );
	}
}