wordpress-develop/tests/phpunit/tests/ajax/Autosave.php

<?php

/**
 * Admin Ajax functions to be tested.
 */
require_once ABSPATH . 'wp-admin/includes/ajax-actions.php';

/**
 * Testing Ajax save draft functionality.
 *
 * @package    WordPress
 * @subpackage UnitTests
 * @since      3.4.0
 * @group      ajax
 */
class Tests_Ajax_Autosave extends WP_Ajax_UnitTestCase {

	/**
	 * Post
	 *
	 * @var mixed
	 */
	protected $_post = null;

	protected static $admin_id  = 0;
	protected static $editor_id = 0;
	protected static $post;
	protected static $post_id;
	protected static $user_ids = array();

	public static function wpSetUpBeforeClass( $factory ) {
		self::$admin_id   = $factory->user->create( array( 'role' => 'administrator' ) );
		self::$user_ids[] = self::$admin_id;
		self::$editor_id  = $factory->user->create( array( 'role' => 'editor' ) );
		self::$user_ids[] = self::$editor_id;

		self::$post_id = $factory->post->create( array( 'post_status' => 'draft' ) );
		self::$post    = get_post( self::$post_id );
	}

	/**
	 * Sets up the test fixture.
	 */
	public function setUp() {
		parent::setUp();
		// Set a user so the $post has 'post_author'.
		wp_set_current_user( self::$admin_id );
	}

	/**
	 * Tests autosaving a post.
	 */
	public function test_autosave_post() {
		// The original post_author.
		wp_set_current_user( self::$admin_id );

		// Set up the $_POST request.
		$md5   = md5( uniqid() );
		$_POST = array(
			'action' => 'heartbeat',
			'_nonce' => wp_create_nonce( 'heartbeat-nonce' ),
			'data'   => array(
				'wp_autosave' => array(
					'post_id'      => self::$post_id,
					'_wpnonce'     => wp_create_nonce( 'update-post_' . self::$post->ID ),
					'post_content' => self::$post->post_content . PHP_EOL . $md5,
					'post_type'    => 'post',
				),
			),
		);

		// Make the request.
		try {
			$this->_handleAjax( 'heartbeat' );
		} catch ( WPAjaxDieContinueException $e ) {
			unset( $e );
		}

		// Get the response, it is in heartbeat's response.
		$response = json_decode( $this->_last_response, true );

		// Ensure everything is correct.
		$this->assertNotEmpty( $response['wp_autosave'] );
		$this->assertTrue( $response['wp_autosave']['success'] );

		// Check that the edit happened.
		$post = get_post( self::$post_id );
		$this->assertGreaterThanOrEqual( 0, strpos( self::$post->post_content, $md5 ) );
	}

	/**
	 * Tests autosaving a locked post.
	 */
	public function test_autosave_locked_post() {
		// Lock the post to another user.
		wp_set_current_user( self::$editor_id );
		wp_set_post_lock( self::$post_id );

		wp_set_current_user( self::$admin_id );

		// Ensure post is locked.
		$this->assertEquals( self::$editor_id, wp_check_post_lock( self::$post_id ) );

		// Set up the $_POST request.
		$md5   = md5( uniqid() );
		$_POST = array(
			'action' => 'heartbeat',
			'_nonce' => wp_create_nonce( 'heartbeat-nonce' ),
			'data'   => array(
				'wp_autosave' => array(
					'post_id'      => self::$post_id,
					'_wpnonce'     => wp_create_nonce( 'update-post_' . self::$post_id ),
					'post_content' => self::$post->post_content . PHP_EOL . $md5,
					'post_type'    => 'post',
				),
			),
		);

		// Make the request.
		try {
			$this->_handleAjax( 'heartbeat' );
		} catch ( WPAjaxDieContinueException $e ) {
			unset( $e );
		}

		$response = json_decode( $this->_last_response, true );

		// Ensure everything is correct.
		$this->assertNotEmpty( $response['wp_autosave'] );
		$this->assertTrue( $response['wp_autosave']['success'] );

		// Check that the original post was NOT edited.
		$post = get_post( self::$post_id );
		$this->assertFalse( strpos( $post->post_content, $md5 ) );

		// Check if the autosave post was created.
		$autosave = wp_get_post_autosave( self::$post_id, get_current_user_id() );
		$this->assertNotEmpty( $autosave );
		$this->assertGreaterThanOrEqual( 0, strpos( $autosave->post_content, $md5 ) );
	}

	/**
	 * Tests with an invalid nonce.
	 */
	public function test_with_invalid_nonce() {

		wp_set_current_user( self::$admin_id );

		// Set up the $_POST request.
		$_POST = array(
			'action' => 'heartbeat',
			'_nonce' => wp_create_nonce( 'heartbeat-nonce' ),
			'data'   => array(
				'wp_autosave' => array(
					'post_id'  => self::$post_id,
					'_wpnonce' => substr( md5( uniqid() ), 0, 10 ),
				),
			),
		);

		// Make the request.
		try {
			$this->_handleAjax( 'heartbeat' );
		} catch ( WPAjaxDieContinueException $e ) {
			unset( $e );
		}

		$response = json_decode( $this->_last_response, true );

		$this->assertNotEmpty( $response['wp_autosave'] );
		$this->assertFalse( $response['wp_autosave']['success'] );
	}
}