WP_Customize_Manager::save()

Hooks fired · 1

One hook fires while WP_Customize_Manager::save() runs, in this order:

1. 1
   apply_filters( customize_save_response )filterline 2611 (+181 into the body)

   Filters response data for a successful customize_save Ajax request.

Uses · 25

• is_user_logged_in()Determines whether the current visitor is a logged in user.
• wp_send_json_error()Sends a JSON response back to an Ajax request, indicating failure.
• check_ajax_referer()Verifies the Ajax request to prevent processing requests external of the blog.
• current_user_can()Returns whether the current user has the specified capability.
• get_post_type_object()Retrieves a post type object by name.
• wp_unslash()Removes slashes from a string or recursively removes slashes from strings within an array.
• sanitize_text_field()Sanitizes a string from user input or from the database.
• get_post_status_object()Retrieves a post status object by name.
• wp_checkdate()Tests if the supplied date is valid for the Gregorian calendar.
• get_gmt_from_date()Given a date in the timezone of the site, returns that date in UTC.
• wp_check_post_lock()Determines whether the post is currently being edited by another user.
• is_wp_error()Checks whether the given variable is a WordPress Error.

Source

View on Trac ↗View on GitHub ↗

2430	public function save() {2431		if ( ! is_user_logged_in() ) {2432			wp_send_json_error( 'unauthenticated' );2433		}2434 2435		if ( ! $this->is_preview() ) {2436			wp_send_json_error( 'not_preview' );2437		}2438 2439		$action = 'save-customize_' . $this->get_stylesheet();2440		if ( ! check_ajax_referer( $action, 'nonce', false ) ) {2441			wp_send_json_error( 'invalid_nonce' );2442		}2443 2444		$changeset_post_id = $this->changeset_post_id();2445		$is_new_changeset  = empty( $changeset_post_id );2446		if ( $is_new_changeset ) {2447			if ( ! current_user_can( get_post_type_object( 'customize_changeset' )->cap->create_posts ) ) {2448				wp_send_json_error( 'cannot_create_changeset_post' );2449			}2450		} else {2451			if ( ! current_user_can( get_post_type_object( 'customize_changeset' )->cap->edit_post, $changeset_post_id ) ) {2452				wp_send_json_error( 'cannot_edit_changeset_post' );2453			}2454		}2455 2456		if ( ! empty( $_POST['customize_changeset_data'] ) ) {2457			$input_changeset_data = json_decode( wp_unslash( $_POST['customize_changeset_data'] ), true );2458			if ( ! is_array( $input_changeset_data ) ) {2459				wp_send_json_error( 'invalid_customize_changeset_data' );2460			}2461		} else {2462			$input_changeset_data = array();2463		}2464 2465		// Validate title.2466		$changeset_title = null;2467		if ( isset( $_POST['customize_changeset_title'] ) ) {2468			$changeset_title = sanitize_text_field( wp_unslash( $_POST['customize_changeset_title'] ) );2469		}2470 2471		// Validate changeset status param.2472		$is_publish       = null;2473		$changeset_status = null;2474		if ( isset( $_POST['customize_changeset_status'] ) ) {2475			$changeset_status = wp_unslash( $_POST['customize_changeset_status'] );2476			if ( ! get_post_status_object( $changeset_status ) || ! in_array( $changeset_status, array( 'draft', 'pending', 'publish', 'future' ), true ) ) {2477				wp_send_json_error( 'bad_customize_changeset_status', 400 );2478			}2479			$is_publish = ( 'publish' === $changeset_status || 'future' === $changeset_status );2480			if ( $is_publish && ! current_user_can( get_post_type_object( 'customize_changeset' )->cap->publish_posts ) ) {2481				wp_send_json_error( 'changeset_publish_unauthorized', 403 );2482			}2483		}2484 2485		/*2486		 * Validate changeset date param. Date is assumed to be in local time for2487		 * the WP if in MySQL format (YYYY-MM-DD HH:MM:SS). Otherwise, the date2488		 * is parsed with strtotime() so that ISO date format may be supplied2489		 * or a string like "+10 minutes".2490		 */2491		$changeset_date_gmt = null;2492		if ( isset( $_POST['customize_changeset_date'] ) ) {2493			$changeset_date = wp_unslash( $_POST['customize_changeset_date'] );2494			if ( preg_match( '/^\d\d\d\d-\d\d-\d\d \d\d:\d\d:\d\d$/', $changeset_date ) ) {2495				$mm         = substr( $changeset_date, 5, 2 );2496				$jj         = substr( $changeset_date, 8, 2 );2497				$aa         = substr( $changeset_date, 0, 4 );2498				$valid_date = wp_checkdate( $mm, $jj, $aa, $changeset_date );2499				if ( ! $valid_date ) {2500					wp_send_json_error( 'bad_customize_changeset_date', 400 );2501				}2502				$changeset_date_gmt = get_gmt_from_date( $changeset_date );2503			} else {2504				$timestamp = strtotime( $changeset_date );2505				if ( ! $timestamp ) {2506					wp_send_json_error( 'bad_customize_changeset_date', 400 );2507				}2508				$changeset_date_gmt = gmdate( 'Y-m-d H:i:s', $timestamp );2509			}

History

Introduced in 3.4.0. One change between 6.7.7 and 7.1.0.

1. 6.7.7
2. 6.8.8
3. 6.9.7
4. 7.0.4
5. 7.1.0

Signature, return type and hooks compared across 5 parsed releases.

About this page

Parsed data

Generated from the wordpress-develop 6.8.8 tag, from src/wp-includes/class-wp-customize-manager.php, and regenerated for each WordPress release so it tracks the code rather than a snapshot of it.

Corrections

Something wrong on this page? Report it and it gets fixed in the next regeneration.