mirror of
https://github.com/gosticks/wordpress-develop.git
synced 2026-09-08 18:10:20 +00:00
Gary Pendergast
8f95800d52
WordPress' code just... wasn't. This is now dealt with. Props jrf, pento, netweb, GaryJ, jdgrimes, westonruter, Greg Sherwood from PHPCS, and everyone who's ever contributed to WPCS and PHPCS. Fixes #41057. git-svn-id: https://develop.svn.wordpress.org/trunk@42343 602fd350-edb4-49c9-b593-d223f7449a82
352 lines
9.9 KiB
PHP
352 lines
9.9 KiB
PHP
<?php
|
|
|
|
/**
|
|
* Admin ajax functions to be tested
|
|
*/
|
|
require_once( ABSPATH . 'wp-admin/includes/ajax-actions.php' );
|
|
|
|
/**
|
|
* Testing ajax comment functionality
|
|
*
|
|
* @package WordPress
|
|
* @subpackage UnitTests
|
|
* @since 3.4.0
|
|
* @group ajax
|
|
*/
|
|
class Tests_Ajax_DeleteComment extends WP_Ajax_UnitTestCase {
|
|
|
|
/**
|
|
* List of comments
|
|
*
|
|
* @var array
|
|
*/
|
|
protected static $comments = array();
|
|
|
|
/**
|
|
* ID of a post.
|
|
*
|
|
* @var int
|
|
*/
|
|
protected static $post_id;
|
|
|
|
public static function wpSetUpBeforeClass( $factory ) {
|
|
self::$post_id = $factory->post->create();
|
|
|
|
$comment_ids = $factory->comment->create_post_comments( self::$post_id, 8 );
|
|
self::$comments = array_map( 'get_comment', $comment_ids );
|
|
}
|
|
|
|
/**
|
|
* Clear the POST actions in between requests
|
|
*/
|
|
protected function _clear_post_action() {
|
|
unset( $_POST['trash'] );
|
|
unset( $_POST['untrash'] );
|
|
unset( $_POST['spam'] );
|
|
unset( $_POST['unspam'] );
|
|
unset( $_POST['delete'] );
|
|
$this->_last_response = '';
|
|
}
|
|
|
|
/*
|
|
* Test prototype
|
|
*/
|
|
|
|
/**
|
|
* Test as a privilged user (administrator)
|
|
* Expects test to pass
|
|
*
|
|
* @param mixed $comment Comment object
|
|
* @param string action trash, untrash, etc.
|
|
* @return void
|
|
*/
|
|
public function _test_as_admin( $comment, $action ) {
|
|
|
|
// Reset request
|
|
$this->_clear_post_action();
|
|
|
|
// Become an administrator
|
|
$this->_setRole( 'administrator' );
|
|
|
|
// Set up a default request
|
|
$_POST['id'] = $comment->comment_ID;
|
|
$_POST['_ajax_nonce'] = wp_create_nonce( 'delete-comment_' . $comment->comment_ID );
|
|
$_POST[ $action ] = 1;
|
|
$_POST['_total'] = count( self::$comments );
|
|
$_POST['_per_page'] = 100;
|
|
$_POST['_page'] = 1;
|
|
$_POST['_url'] = admin_url( 'edit-comments.php' );
|
|
|
|
// Make the request
|
|
try {
|
|
$this->_handleAjax( 'delete-comment' );
|
|
} catch ( WPAjaxDieContinueException $e ) {
|
|
unset( $e );
|
|
}
|
|
|
|
// Get the response
|
|
$xml = simplexml_load_string( $this->_last_response, 'SimpleXMLElement', LIBXML_NOCDATA );
|
|
|
|
// Ensure everything is correct
|
|
$this->assertEquals( $comment->comment_ID, (string) $xml->response[0]->comment['id'] );
|
|
$this->assertEquals( 'delete-comment_' . $comment->comment_ID, (string) $xml->response['action'] );
|
|
$this->assertGreaterThanOrEqual( time() - 10, (int) $xml->response[0]->comment[0]->supplemental[0]->time[0] );
|
|
$this->assertLessThanOrEqual( time(), (int) $xml->response[0]->comment[0]->supplemental[0]->time[0] );
|
|
|
|
// trash, spam, delete should make the total go down
|
|
if ( in_array( $action, array( 'trash', 'spam', 'delete' ) ) ) {
|
|
$total = $_POST['_total'] - 1;
|
|
|
|
// unspam, untrash should make the total go up
|
|
} elseif ( in_array( $action, array( 'untrash', 'unspam' ) ) ) {
|
|
$total = $_POST['_total'] + 1;
|
|
}
|
|
|
|
// The total is calculated based on a page break -OR- a random number. Let's look for both possible outcomes
|
|
$comment_count = wp_count_comments( 0 );
|
|
$recalc_total = $comment_count->total_comments;
|
|
|
|
// Check for either possible total
|
|
$message = sprintf( 'returned value: %1$d $total: %2$d $recalc_total: %3$d', (int) $xml->response[0]->comment[0]->supplemental[0]->total[0], $total, $recalc_total );
|
|
$this->assertTrue( in_array( (int) $xml->response[0]->comment[0]->supplemental[0]->total[0], array( $total, $recalc_total ) ), $message );
|
|
}
|
|
|
|
/**
|
|
* Test as a non-privileged user (subscriber)
|
|
* Expects test to fail
|
|
*
|
|
* @param mixed $comment Comment object
|
|
* @param string action trash, untrash, etc.
|
|
* @return void
|
|
*/
|
|
public function _test_as_subscriber( $comment, $action ) {
|
|
|
|
// Reset request
|
|
$this->_clear_post_action();
|
|
|
|
// Become a subscriber
|
|
$this->_setRole( 'subscriber' );
|
|
|
|
// Set up the $_POST request
|
|
$_POST['id'] = $comment->comment_ID;
|
|
$_POST['_ajax_nonce'] = wp_create_nonce( 'delete-comment_' . $comment->comment_ID );
|
|
$_POST[ $action ] = 1;
|
|
$_POST['_total'] = count( self::$comments );
|
|
$_POST['_per_page'] = 100;
|
|
$_POST['_page'] = 1;
|
|
$_POST['_url'] = admin_url( 'edit-comments.php' );
|
|
|
|
// Make the request
|
|
$this->setExpectedException( 'WPAjaxDieStopException', '-1' );
|
|
$this->_handleAjax( 'delete-comment' );
|
|
}
|
|
|
|
|
|
/**
|
|
* Test with a bad nonce
|
|
* Expects test to fail
|
|
*
|
|
* @param mixed $comment Comment object
|
|
* @param string action trash, untrash, etc.
|
|
* @return void
|
|
*/
|
|
public function _test_with_bad_nonce( $comment, $action ) {
|
|
|
|
// Reset request
|
|
$this->_clear_post_action();
|
|
|
|
// Become a subscriber
|
|
$this->_setRole( 'administrator' );
|
|
|
|
// Set up the $_POST request
|
|
$_POST['id'] = $comment->comment_ID;
|
|
$_POST['_ajax_nonce'] = wp_create_nonce( uniqid() );
|
|
$_POST[ $action ] = 1;
|
|
$_POST['_total'] = count( self::$comments );
|
|
$_POST['_per_page'] = 100;
|
|
$_POST['_page'] = 1;
|
|
$_POST['_url'] = admin_url( 'edit-comments.php' );
|
|
|
|
// Make the request
|
|
$this->setExpectedException( 'WPAjaxDieStopException', '-1' );
|
|
$this->_handleAjax( 'delete-comment' );
|
|
}
|
|
|
|
/**
|
|
* Test with a bad id
|
|
* Expects test to fail
|
|
*
|
|
* @param mixed $comment Comment object
|
|
* @param string action trash, untrash, etc.
|
|
* @return void
|
|
*/
|
|
public function _test_with_bad_id( $comment, $action ) {
|
|
|
|
// Reset request
|
|
$this->_clear_post_action();
|
|
|
|
// Become a subscriber
|
|
$this->_setRole( 'administrator' );
|
|
|
|
// Set up the $_POST request
|
|
$_POST['id'] = 12346789;
|
|
$_POST['_ajax_nonce'] = wp_create_nonce( 'delete-comment_12346789' );
|
|
$_POST[ $action ] = 1;
|
|
$_POST['_total'] = count( self::$comments );
|
|
$_POST['_per_page'] = 100;
|
|
$_POST['_page'] = 1;
|
|
$_POST['_url'] = admin_url( 'edit-comments.php' );
|
|
|
|
// Make the request, look for a timestamp in the exception
|
|
try {
|
|
$this->_handleAjax( 'delete-comment' );
|
|
$this->fail( 'Expected exception: WPAjaxDieStopException' );
|
|
} catch ( WPAjaxDieStopException $e ) {
|
|
$this->assertEquals( 10, strlen( $e->getMessage() ) );
|
|
$this->assertTrue( is_numeric( $e->getMessage() ) );
|
|
} catch ( Exception $e ) {
|
|
$this->fail( 'Unexpected exception type: ' . get_class( $e ) );
|
|
}
|
|
}
|
|
|
|
/**
|
|
* Test doubling the action (e.g. trash a trashed comment)
|
|
* Expects test to fail
|
|
*
|
|
* @param mixed $comment Comment object
|
|
* @param string action trash, untrash, etc.
|
|
* @return void
|
|
*/
|
|
public function _test_double_action( $comment, $action ) {
|
|
|
|
// Reset request
|
|
$this->_clear_post_action();
|
|
|
|
// Become a subscriber
|
|
$this->_setRole( 'administrator' );
|
|
|
|
// Set up the $_POST request
|
|
$_POST['id'] = $comment->comment_ID;
|
|
$_POST['_ajax_nonce'] = wp_create_nonce( 'delete-comment_' . $comment->comment_ID );
|
|
$_POST[ $action ] = 1;
|
|
$_POST['_total'] = count( self::$comments );
|
|
$_POST['_per_page'] = 100;
|
|
$_POST['_page'] = 1;
|
|
$_POST['_url'] = admin_url( 'edit-comments.php' );
|
|
|
|
// Make the request
|
|
try {
|
|
$this->_handleAjax( 'delete-comment' );
|
|
} catch ( WPAjaxDieContinueException $e ) {
|
|
unset( $e );
|
|
}
|
|
$this->_last_response = '';
|
|
|
|
// Force delete the comment
|
|
if ( 'delete' == $action ) {
|
|
wp_delete_comment( $comment->comment_ID, true );
|
|
}
|
|
|
|
// Make the request again, look for a timestamp in the exception
|
|
try {
|
|
$this->_handleAjax( 'delete-comment' );
|
|
$this->fail( 'Expected exception: WPAjaxDieStopException' );
|
|
} catch ( WPAjaxDieStopException $e ) {
|
|
$this->assertEquals( 10, strlen( $e->getMessage() ) );
|
|
$this->assertTrue( is_numeric( $e->getMessage() ) );
|
|
} catch ( Exception $e ) {
|
|
$this->fail( 'Unexpected exception type: ' . get_class( $e ) );
|
|
}
|
|
}
|
|
|
|
/**
|
|
* Delete a comment as an administrator (expects success)
|
|
*
|
|
* @return void
|
|
*/
|
|
public function test_ajax_comment_trash_actions_as_administrator() {
|
|
// Test trash/untrash
|
|
$this->_test_as_admin( self::$comments[0], 'trash' );
|
|
$this->_test_as_admin( self::$comments[0], 'untrash' );
|
|
|
|
// Test spam/unspam
|
|
$this->_test_as_admin( self::$comments[1], 'spam' );
|
|
$this->_test_as_admin( self::$comments[1], 'unspam' );
|
|
|
|
// Test delete
|
|
$this->_test_as_admin( self::$comments[2], 'delete' );
|
|
}
|
|
|
|
/**
|
|
* Delete a comment as a subscriber (expects permission denied)
|
|
*
|
|
* @return void
|
|
*/
|
|
public function test_ajax_comment_trash_actions_as_subscriber() {
|
|
// Test trash/untrash
|
|
$this->_test_as_subscriber( self::$comments[0], 'trash' );
|
|
$this->_test_as_subscriber( self::$comments[0], 'untrash' );
|
|
|
|
// Test spam/unspam
|
|
$this->_test_as_subscriber( self::$comments[1], 'spam' );
|
|
$this->_test_as_subscriber( self::$comments[1], 'unspam' );
|
|
|
|
// Test delete
|
|
$this->_test_as_subscriber( self::$comments[2], 'delete' );
|
|
}
|
|
|
|
/**
|
|
* Delete a comment with no id
|
|
*
|
|
* @return void
|
|
*/
|
|
public function test_ajax_trash_comment_no_id() {
|
|
// Test trash/untrash
|
|
$this->_test_as_admin( self::$comments[0], 'trash' );
|
|
$this->_test_as_admin( self::$comments[0], 'untrash' );
|
|
|
|
// Test spam/unspam
|
|
$this->_test_as_admin( self::$comments[1], 'spam' );
|
|
$this->_test_as_admin( self::$comments[1], 'unspam' );
|
|
|
|
// Test delete
|
|
$this->_test_as_admin( self::$comments[2], 'delete' );
|
|
}
|
|
|
|
/**
|
|
* Delete a comment with a bad nonce
|
|
*
|
|
* @return void
|
|
*/
|
|
public function test_ajax_trash_comment_bad_nonce() {
|
|
// Test trash/untrash
|
|
$this->_test_with_bad_nonce( self::$comments[0], 'trash' );
|
|
$this->_test_with_bad_nonce( self::$comments[0], 'untrash' );
|
|
|
|
// Test spam/unspam
|
|
$this->_test_with_bad_nonce( self::$comments[1], 'spam' );
|
|
$this->_test_with_bad_nonce( self::$comments[1], 'unspam' );
|
|
|
|
// Test delete
|
|
$this->_test_with_bad_nonce( self::$comments[2], 'delete' );
|
|
}
|
|
|
|
/**
|
|
* Test trashing an already trashed comment, etc.
|
|
*
|
|
* @return void
|
|
*/
|
|
public function test_ajax_trash_double_action() {
|
|
// Test trash/untrash
|
|
$this->_test_double_action( self::$comments[0], 'trash' );
|
|
$this->_test_double_action( self::$comments[0], 'untrash' );
|
|
|
|
// Test spam/unspam
|
|
$this->_test_double_action( self::$comments[1], 'spam' );
|
|
$this->_test_double_action( self::$comments[1], 'unspam' );
|
|
|
|
// Test delete
|
|
$this->_test_double_action( self::$comments[2], 'delete' );
|
|
}
|
|
}
|