2013-08-27 12:39:09 -04:00
|
|
|
<?php
|
|
|
|
/**
|
2014-10-16 15:34:17 -04:00
|
|
|
* Class for generating SQL clauses that filter a primary query according to date.
|
2013-08-27 12:39:09 -04:00
|
|
|
*
|
2016-05-02 00:00:28 -04:00
|
|
|
* WP_Date_Query is a helper that allows primary query classes, such as WP_Query, to filter
|
|
|
|
* their results by date columns, by generating `WHERE` subclauses to be attached to the
|
|
|
|
* primary SQL query string.
|
2013-08-27 12:39:09 -04:00
|
|
|
*
|
2014-10-16 16:12:18 -04:00
|
|
|
* Attempting to filter by an invalid date value (eg month=13) will generate SQL that will
|
|
|
|
* return no results. In these cases, a _doing_it_wrong() error notice is also thrown.
|
2016-05-02 00:00:28 -04:00
|
|
|
* See WP_Date_Query::validate_date_values().
|
2014-10-16 16:12:18 -04:00
|
|
|
*
|
2015-04-12 17:29:32 -04:00
|
|
|
* @link https://codex.wordpress.org/Function_Reference/WP_Query Codex page.
|
2013-08-27 12:39:09 -04:00
|
|
|
*
|
|
|
|
* @since 3.7.0
|
|
|
|
*/
|
|
|
|
class WP_Date_Query {
|
|
|
|
/**
|
2014-10-16 15:34:17 -04:00
|
|
|
* Array of date queries.
|
|
|
|
*
|
2016-05-02 00:00:28 -04:00
|
|
|
* See WP_Date_Query::__construct() for information on date query arguments.
|
2013-08-27 12:39:09 -04:00
|
|
|
*
|
|
|
|
* @since 3.7.0
|
|
|
|
* @access public
|
|
|
|
* @var array
|
|
|
|
*/
|
|
|
|
public $queries = array();
|
|
|
|
|
|
|
|
/**
|
2014-10-16 15:34:17 -04:00
|
|
|
* The default relation between top-level queries. Can be either 'AND' or 'OR'.
|
2013-08-27 12:39:09 -04:00
|
|
|
*
|
|
|
|
* @since 3.7.0
|
|
|
|
* @access public
|
|
|
|
* @var string
|
|
|
|
*/
|
|
|
|
public $relation = 'AND';
|
|
|
|
|
|
|
|
/**
|
|
|
|
* The column to query against. Can be changed via the query arguments.
|
|
|
|
*
|
|
|
|
* @since 3.7.0
|
|
|
|
* @access public
|
|
|
|
* @var string
|
|
|
|
*/
|
|
|
|
public $column = 'post_date';
|
|
|
|
|
|
|
|
/**
|
|
|
|
* The value comparison operator. Can be changed via the query arguments.
|
|
|
|
*
|
|
|
|
* @since 3.7.0
|
|
|
|
* @access public
|
|
|
|
* @var array
|
|
|
|
*/
|
|
|
|
public $compare = '=';
|
|
|
|
|
2014-10-16 15:34:17 -04:00
|
|
|
/**
|
|
|
|
* Supported time-related parameter keys.
|
|
|
|
*
|
|
|
|
* @since 4.1.0
|
|
|
|
* @access public
|
|
|
|
* @var array
|
|
|
|
*/
|
2014-10-31 23:24:21 -04:00
|
|
|
public $time_keys = array( 'after', 'before', 'year', 'month', 'monthnum', 'week', 'w', 'dayofyear', 'day', 'dayofweek', 'dayofweek_iso', 'hour', 'minute', 'second' );
|
2014-10-16 15:34:17 -04:00
|
|
|
|
2013-08-27 12:39:09 -04:00
|
|
|
/**
|
2013-10-24 18:58:12 -04:00
|
|
|
* Constructor.
|
|
|
|
*
|
2015-02-05 01:17:21 -05:00
|
|
|
* Time-related parameters that normally require integer values ('year', 'month', 'week', 'dayofyear', 'day',
|
|
|
|
* 'dayofweek', 'dayofweek_iso', 'hour', 'minute', 'second') accept arrays of integers for some values of
|
|
|
|
* 'compare'. When 'compare' is 'IN' or 'NOT IN', arrays are accepted; when 'compare' is 'BETWEEN' or 'NOT
|
|
|
|
* BETWEEN', arrays of two valid values are required. See individual argument descriptions for accepted values.
|
|
|
|
*
|
2014-06-30 21:18:15 -04:00
|
|
|
* @since 3.7.0
|
|
|
|
* @since 4.0.0 The $inclusive logic was updated to include all times within the date range.
|
2014-10-31 23:24:21 -04:00
|
|
|
* @since 4.1.0 Introduced 'dayofweek_iso' time type parameter.
|
2014-10-16 15:34:17 -04:00
|
|
|
* @access public
|
2014-06-30 21:18:15 -04:00
|
|
|
*
|
2013-10-24 18:58:12 -04:00
|
|
|
* @param array $date_query {
|
2014-10-16 15:34:17 -04:00
|
|
|
* Array of date query clauses.
|
2013-10-24 18:58:12 -04:00
|
|
|
*
|
|
|
|
* @type array {
|
|
|
|
* @type string $column Optional. The column to query against. If undefined, inherits the value of
|
2015-02-05 01:17:21 -05:00
|
|
|
* the `$default_column` parameter. Accepts 'post_date', 'post_date_gmt',
|
|
|
|
* 'post_modified','post_modified_gmt', 'comment_date', 'comment_date_gmt'.
|
|
|
|
* Default 'post_date'.
|
|
|
|
* @type string $compare Optional. The comparison operator. Accepts '=', '!=', '>', '>=', '<', '<=',
|
|
|
|
* 'IN', 'NOT IN', 'BETWEEN', 'NOT BETWEEN'. Default '='.
|
|
|
|
* @type string $relation Optional. The boolean relationship between the date queries. Accepts 'OR' or 'AND'.
|
|
|
|
* Default 'OR'.
|
2013-10-24 18:58:12 -04:00
|
|
|
* @type array {
|
2014-11-01 00:31:22 -04:00
|
|
|
* Optional. An array of first-order clause parameters, or another fully-formed date query.
|
|
|
|
*
|
2015-02-05 01:17:21 -05:00
|
|
|
* @type string|array $before {
|
|
|
|
* Optional. Date to retrieve posts before. Accepts `strtotime()`-compatible string,
|
|
|
|
* or array of 'year', 'month', 'day' values.
|
2013-10-24 18:58:12 -04:00
|
|
|
*
|
|
|
|
* @type string $year The four-digit year. Default empty. Accepts any four-digit year.
|
|
|
|
* @type string $month Optional when passing array.The month of the year.
|
|
|
|
* Default (string:empty)|(array:1). Accepts numbers 1-12.
|
|
|
|
* @type string $day Optional when passing array.The day of the month.
|
|
|
|
* Default (string:empty)|(array:1). Accepts numbers 1-31.
|
|
|
|
* }
|
2015-02-05 01:17:21 -05:00
|
|
|
* @type string|array $after {
|
|
|
|
* Optional. Date to retrieve posts after. Accepts `strtotime()`-compatible string,
|
|
|
|
* or array of 'year', 'month', 'day' values.
|
2013-08-27 12:39:09 -04:00
|
|
|
*
|
2015-02-05 01:17:21 -05:00
|
|
|
* @type string $year The four-digit year. Accepts any four-digit year. Default empty.
|
|
|
|
* @type string $month Optional when passing array. The month of the year. Accepts numbers 1-12.
|
|
|
|
* Default (string:empty)|(array:12).
|
|
|
|
* @type string $day Optional when passing array.The day of the month. Accepts numbers 1-31.
|
|
|
|
* Default (string:empty)|(array:last day of month).
|
2013-10-24 18:58:12 -04:00
|
|
|
* }
|
2015-02-05 01:17:21 -05:00
|
|
|
* @type string $column Optional. Used to add a clause comparing a column other than the
|
|
|
|
* column specified in the top-level `$column` parameter. Accepts
|
|
|
|
* 'post_date', 'post_date_gmt', 'post_modified', 'post_modified_gmt',
|
|
|
|
* 'comment_date', 'comment_date_gmt'. Default is the value of
|
|
|
|
* top-level `$column`.
|
|
|
|
* @type string $compare Optional. The comparison operator. Accepts '=', '!=', '>', '>=',
|
|
|
|
* '<', '<=', 'IN', 'NOT IN', 'BETWEEN', 'NOT BETWEEN'. 'IN',
|
|
|
|
* 'NOT IN', 'BETWEEN', and 'NOT BETWEEN'. Comparisons support
|
|
|
|
* arrays in some time-related parameters. Default '='.
|
2014-10-31 23:29:21 -04:00
|
|
|
* @type bool $inclusive Optional. Include results from dates specified in 'before' or
|
|
|
|
* 'after'. Default false.
|
2015-02-05 01:17:21 -05:00
|
|
|
* @type int|array $year Optional. The four-digit year number. Accepts any four-digit year
|
|
|
|
* or an array of years if `$compare` supports it. Default empty.
|
|
|
|
* @type int|array $month Optional. The two-digit month number. Accepts numbers 1-12 or an
|
|
|
|
* array of valid numbers if `$compare` supports it. Default empty.
|
|
|
|
* @type int|array $week Optional. The week number of the year. Accepts numbers 0-53 or an
|
|
|
|
* array of valid numbers if `$compare` supports it. Default empty.
|
|
|
|
* @type int|array $dayofyear Optional. The day number of the year. Accepts numbers 1-366 or an
|
|
|
|
* array of valid numbers if `$compare` supports it.
|
|
|
|
* @type int|array $day Optional. The day of the month. Accepts numbers 1-31 or an array
|
|
|
|
* of valid numbers if `$compare` supports it. Default empty.
|
|
|
|
* @type int|array $dayofweek Optional. The day number of the week. Accepts numbers 1-7 (1 is
|
|
|
|
* Sunday) or an array of valid numbers if `$compare` supports it.
|
|
|
|
* Default empty.
|
|
|
|
* @type int|array $dayofweek_iso Optional. The day number of the week (ISO). Accepts numbers 1-7
|
|
|
|
* (1 is Monday) or an array of valid numbers if `$compare` supports it.
|
|
|
|
* Default empty.
|
|
|
|
* @type int|array $hour Optional. The hour of the day. Accepts numbers 0-23 or an array
|
|
|
|
* of valid numbers if `$compare` supports it. Default empty.
|
|
|
|
* @type int|array $minute Optional. The minute of the hour. Accepts numbers 0-60 or an array
|
|
|
|
* of valid numbers if `$compare` supports it. Default empty.
|
|
|
|
* @type int|array $second Optional. The second of the minute. Accepts numbers 0-60 or an
|
|
|
|
* array of valid numbers if `$compare` supports it. Default empty.
|
2013-10-24 18:58:12 -04:00
|
|
|
* }
|
|
|
|
* }
|
|
|
|
* }
|
|
|
|
* @param array $default_column Optional. Default column to query against. Default 'post_date'.
|
|
|
|
* Accepts 'post_date', 'post_date_gmt', 'post_modified', 'post_modified_gmt',
|
|
|
|
* 'comment_date', 'comment_date_gmt'.
|
2013-08-27 12:39:09 -04:00
|
|
|
*/
|
2014-05-19 13:30:17 -04:00
|
|
|
public function __construct( $date_query, $default_column = 'post_date' ) {
|
2013-08-27 12:39:09 -04:00
|
|
|
|
Grouped backports to the 4.6 branch.
- Posts, Post types: Apply KSES to post-by-email content,
- General: Validate host on "Are you sure?" screen,
- Posts, Post types: Remove emails from post-by-email logs,
- Pings/trackbacks: Apply KSES to all trackbacks,
- Comments: Apply kses when editing comments,
- Customize: Escape blogname option in underscores templates,
- Mail: Reset PHPMailer properties between use,
- Query: Validate relation in `WP_Date_Query`,
- Widgets: Escape RSS error messages for display.
Merges [54521], [54522], [54523], [54525], [54526], [54527], [54529], [54530], [54541] to the 4.6 branch.
Props voldemortensen, johnbillion, paulkevan, peterwilsoncc, xknown, dd32, audrasjb, martinkrcho, davidbaumwald, tykoted, johnjamesjacoby, ehtis, matveb, talldanwp.
Built from https://develop.svn.wordpress.org/branches/4.6@54561
git-svn-id: http://core.svn.wordpress.org/branches/4.6@54116 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2022-10-17 14:04:22 -04:00
|
|
|
if ( isset( $date_query['relation'] ) ) {
|
|
|
|
$this->relation = $this->sanitize_relation( $date_query['relation'] );
|
2014-10-16 15:34:17 -04:00
|
|
|
} else {
|
2013-08-27 12:39:09 -04:00
|
|
|
$this->relation = 'AND';
|
2014-10-16 15:34:17 -04:00
|
|
|
}
|
|
|
|
|
|
|
|
if ( ! is_array( $date_query ) ) {
|
|
|
|
return;
|
|
|
|
}
|
2013-08-27 12:39:09 -04:00
|
|
|
|
2014-10-16 15:34:17 -04:00
|
|
|
// Support for passing time-based keys in the top level of the $date_query array.
|
|
|
|
if ( ! isset( $date_query[0] ) && ! empty( $date_query ) ) {
|
|
|
|
$date_query = array( $date_query );
|
|
|
|
}
|
|
|
|
|
|
|
|
if ( empty( $date_query ) ) {
|
|
|
|
return;
|
|
|
|
}
|
|
|
|
|
|
|
|
if ( ! empty( $date_query['column'] ) ) {
|
|
|
|
$date_query['column'] = esc_sql( $date_query['column'] );
|
|
|
|
} else {
|
|
|
|
$date_query['column'] = esc_sql( $default_column );
|
|
|
|
}
|
2013-08-27 12:39:09 -04:00
|
|
|
|
|
|
|
$this->column = $this->validate_column( $this->column );
|
|
|
|
|
|
|
|
$this->compare = $this->get_compare( $date_query );
|
|
|
|
|
2014-10-16 15:34:17 -04:00
|
|
|
$this->queries = $this->sanitize_query( $date_query );
|
|
|
|
}
|
2013-08-27 12:39:09 -04:00
|
|
|
|
2014-10-16 15:34:17 -04:00
|
|
|
/**
|
|
|
|
* Recursive-friendly query sanitizer.
|
|
|
|
*
|
|
|
|
* Ensures that each query-level clause has a 'relation' key, and that
|
|
|
|
* each first-order clause contains all the necessary keys from
|
2014-11-28 06:26:23 -05:00
|
|
|
* `$defaults`.
|
2014-10-16 15:34:17 -04:00
|
|
|
*
|
|
|
|
* @since 4.1.0
|
|
|
|
* @access public
|
|
|
|
*
|
2014-11-30 20:34:24 -05:00
|
|
|
* @param array $queries
|
|
|
|
* @param array $parent_query
|
|
|
|
*
|
2014-10-16 15:34:17 -04:00
|
|
|
* @return array Sanitized queries.
|
|
|
|
*/
|
|
|
|
public function sanitize_query( $queries, $parent_query = null ) {
|
|
|
|
$cleaned_query = array();
|
|
|
|
|
|
|
|
$defaults = array(
|
|
|
|
'column' => 'post_date',
|
|
|
|
'compare' => '=',
|
|
|
|
'relation' => 'AND',
|
|
|
|
);
|
|
|
|
|
|
|
|
// Numeric keys should always have array values.
|
|
|
|
foreach ( $queries as $qkey => $qvalue ) {
|
|
|
|
if ( is_numeric( $qkey ) && ! is_array( $qvalue ) ) {
|
|
|
|
unset( $queries[ $qkey ] );
|
|
|
|
}
|
|
|
|
}
|
|
|
|
|
|
|
|
// Each query should have a value for each default key. Inherit from the parent when possible.
|
|
|
|
foreach ( $defaults as $dkey => $dvalue ) {
|
|
|
|
if ( isset( $queries[ $dkey ] ) ) {
|
2013-08-27 12:39:09 -04:00
|
|
|
continue;
|
2014-10-16 15:34:17 -04:00
|
|
|
}
|
2013-08-27 12:39:09 -04:00
|
|
|
|
2014-10-16 15:34:17 -04:00
|
|
|
if ( isset( $parent_query[ $dkey ] ) ) {
|
|
|
|
$queries[ $dkey ] = $parent_query[ $dkey ];
|
|
|
|
} else {
|
|
|
|
$queries[ $dkey ] = $dvalue;
|
|
|
|
}
|
2013-08-27 12:39:09 -04:00
|
|
|
}
|
2014-10-16 15:34:17 -04:00
|
|
|
|
2014-10-16 16:12:18 -04:00
|
|
|
// Validate the dates passed in the query.
|
|
|
|
if ( $this->is_first_order_clause( $queries ) ) {
|
|
|
|
$this->validate_date_values( $queries );
|
|
|
|
}
|
|
|
|
|
Grouped backports to the 4.6 branch.
- Posts, Post types: Apply KSES to post-by-email content,
- General: Validate host on "Are you sure?" screen,
- Posts, Post types: Remove emails from post-by-email logs,
- Pings/trackbacks: Apply KSES to all trackbacks,
- Comments: Apply kses when editing comments,
- Customize: Escape blogname option in underscores templates,
- Mail: Reset PHPMailer properties between use,
- Query: Validate relation in `WP_Date_Query`,
- Widgets: Escape RSS error messages for display.
Merges [54521], [54522], [54523], [54525], [54526], [54527], [54529], [54530], [54541] to the 4.6 branch.
Props voldemortensen, johnbillion, paulkevan, peterwilsoncc, xknown, dd32, audrasjb, martinkrcho, davidbaumwald, tykoted, johnjamesjacoby, ehtis, matveb, talldanwp.
Built from https://develop.svn.wordpress.org/branches/4.6@54561
git-svn-id: http://core.svn.wordpress.org/branches/4.6@54116 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2022-10-17 14:04:22 -04:00
|
|
|
// Sanitize the relation parameter.
|
|
|
|
$queries['relation'] = $this->sanitize_relation( $queries['relation'] );
|
|
|
|
|
2014-10-16 15:34:17 -04:00
|
|
|
foreach ( $queries as $key => $q ) {
|
|
|
|
if ( ! is_array( $q ) || in_array( $key, $this->time_keys, true ) ) {
|
|
|
|
// This is a first-order query. Trust the values and sanitize when building SQL.
|
|
|
|
$cleaned_query[ $key ] = $q;
|
|
|
|
} else {
|
|
|
|
// Any array without a time key is another query, so we recurse.
|
|
|
|
$cleaned_query[] = $this->sanitize_query( $q, $queries );
|
|
|
|
}
|
|
|
|
}
|
|
|
|
|
|
|
|
return $cleaned_query;
|
|
|
|
}
|
|
|
|
|
|
|
|
/**
|
|
|
|
* Determine whether this is a first-order clause.
|
|
|
|
*
|
|
|
|
* Checks to see if the current clause has any time-related keys.
|
|
|
|
* If so, it's first-order.
|
|
|
|
*
|
|
|
|
* @param array $query Query clause.
|
|
|
|
* @return bool True if this is a first-order clause.
|
|
|
|
*/
|
|
|
|
protected function is_first_order_clause( $query ) {
|
|
|
|
$time_keys = array_intersect( $this->time_keys, array_keys( $query ) );
|
|
|
|
return ! empty( $time_keys );
|
2013-08-27 12:39:09 -04:00
|
|
|
}
|
|
|
|
|
|
|
|
/**
|
|
|
|
* Determines and validates what comparison operator to use.
|
|
|
|
*
|
|
|
|
* @since 3.7.0
|
|
|
|
* @access public
|
|
|
|
*
|
2014-10-16 15:34:17 -04:00
|
|
|
* @param array $query A date query or a date subquery.
|
|
|
|
* @return string The comparison operator.
|
2013-08-27 12:39:09 -04:00
|
|
|
*/
|
|
|
|
public function get_compare( $query ) {
|
|
|
|
if ( ! empty( $query['compare'] ) && in_array( $query['compare'], array( '=', '!=', '>', '>=', '<', '<=', 'IN', 'NOT IN', 'BETWEEN', 'NOT BETWEEN' ) ) )
|
|
|
|
return strtoupper( $query['compare'] );
|
|
|
|
|
|
|
|
return $this->compare;
|
|
|
|
}
|
|
|
|
|
2014-10-16 16:12:18 -04:00
|
|
|
/**
|
|
|
|
* Validates the given date_query values and triggers errors if something is not valid.
|
|
|
|
*
|
|
|
|
* Note that date queries with invalid date ranges are allowed to
|
|
|
|
* continue (though of course no items will be found for impossible dates).
|
|
|
|
* This method only generates debug notices for these cases.
|
|
|
|
*
|
|
|
|
* @since 4.1.0
|
|
|
|
* @access public
|
|
|
|
*
|
|
|
|
* @param array $date_query The date_query array.
|
|
|
|
* @return bool True if all values in the query are valid, false if one or more fail.
|
|
|
|
*/
|
|
|
|
public function validate_date_values( $date_query = array() ) {
|
|
|
|
if ( empty( $date_query ) ) {
|
|
|
|
return false;
|
|
|
|
}
|
|
|
|
|
|
|
|
$valid = true;
|
|
|
|
|
|
|
|
/*
|
|
|
|
* Validate 'before' and 'after' up front, then let the
|
|
|
|
* validation routine continue to be sure that all invalid
|
|
|
|
* values generate errors too.
|
|
|
|
*/
|
|
|
|
if ( array_key_exists( 'before', $date_query ) && is_array( $date_query['before'] ) ){
|
|
|
|
$valid = $this->validate_date_values( $date_query['before'] );
|
|
|
|
}
|
|
|
|
|
|
|
|
if ( array_key_exists( 'after', $date_query ) && is_array( $date_query['after'] ) ){
|
|
|
|
$valid = $this->validate_date_values( $date_query['after'] );
|
|
|
|
}
|
|
|
|
|
|
|
|
// Array containing all min-max checks.
|
|
|
|
$min_max_checks = array();
|
|
|
|
|
|
|
|
// Days per year.
|
|
|
|
if ( array_key_exists( 'year', $date_query ) ) {
|
2015-01-14 11:51:24 -05:00
|
|
|
/*
|
|
|
|
* If a year exists in the date query, we can use it to get the days.
|
|
|
|
* If multiple years are provided (as in a BETWEEN), use the first one.
|
|
|
|
*/
|
|
|
|
if ( is_array( $date_query['year'] ) ) {
|
|
|
|
$_year = reset( $date_query['year'] );
|
|
|
|
} else {
|
|
|
|
$_year = $date_query['year'];
|
|
|
|
}
|
|
|
|
|
|
|
|
$max_days_of_year = date( 'z', mktime( 0, 0, 0, 12, 31, $_year ) ) + 1;
|
2014-10-16 16:12:18 -04:00
|
|
|
} else {
|
|
|
|
// otherwise we use the max of 366 (leap-year)
|
|
|
|
$max_days_of_year = 366;
|
|
|
|
}
|
|
|
|
|
|
|
|
$min_max_checks['dayofyear'] = array(
|
|
|
|
'min' => 1,
|
|
|
|
'max' => $max_days_of_year
|
|
|
|
);
|
|
|
|
|
|
|
|
// Days per week.
|
|
|
|
$min_max_checks['dayofweek'] = array(
|
|
|
|
'min' => 1,
|
|
|
|
'max' => 7
|
|
|
|
);
|
|
|
|
|
2014-10-31 23:24:21 -04:00
|
|
|
// Days per week.
|
|
|
|
$min_max_checks['dayofweek_iso'] = array(
|
|
|
|
'min' => 1,
|
|
|
|
'max' => 7
|
|
|
|
);
|
|
|
|
|
2014-10-16 16:12:18 -04:00
|
|
|
// Months per year.
|
|
|
|
$min_max_checks['month'] = array(
|
|
|
|
'min' => 1,
|
|
|
|
'max' => 12
|
|
|
|
);
|
|
|
|
|
|
|
|
// Weeks per year.
|
2015-01-14 11:51:24 -05:00
|
|
|
if ( isset( $_year ) ) {
|
2015-08-28 21:47:21 -04:00
|
|
|
/*
|
|
|
|
* If we have a specific year, use it to calculate number of weeks.
|
|
|
|
* Note: the number of weeks in a year is the date in which Dec 28 appears.
|
|
|
|
*/
|
|
|
|
$week_count = date( 'W', mktime( 0, 0, 0, 12, 28, $_year ) );
|
2014-10-16 16:12:18 -04:00
|
|
|
|
|
|
|
} else {
|
|
|
|
// Otherwise set the week-count to a maximum of 53.
|
|
|
|
$week_count = 53;
|
|
|
|
}
|
|
|
|
|
|
|
|
$min_max_checks['week'] = array(
|
|
|
|
'min' => 1,
|
|
|
|
'max' => $week_count
|
|
|
|
);
|
|
|
|
|
|
|
|
// Days per month.
|
|
|
|
$min_max_checks['day'] = array(
|
|
|
|
'min' => 1,
|
|
|
|
'max' => 31
|
|
|
|
);
|
|
|
|
|
|
|
|
// Hours per day.
|
|
|
|
$min_max_checks['hour'] = array(
|
2015-01-20 14:13:22 -05:00
|
|
|
'min' => 0,
|
2014-10-16 16:12:18 -04:00
|
|
|
'max' => 23
|
|
|
|
);
|
|
|
|
|
|
|
|
// Minutes per hour.
|
|
|
|
$min_max_checks['minute'] = array(
|
|
|
|
'min' => 0,
|
|
|
|
'max' => 59
|
|
|
|
);
|
|
|
|
|
|
|
|
// Seconds per minute.
|
|
|
|
$min_max_checks['second'] = array(
|
|
|
|
'min' => 0,
|
|
|
|
'max' => 59
|
|
|
|
);
|
|
|
|
|
|
|
|
// Concatenate and throw a notice for each invalid value.
|
|
|
|
foreach ( $min_max_checks as $key => $check ) {
|
|
|
|
if ( ! array_key_exists( $key, $date_query ) ) {
|
|
|
|
continue;
|
|
|
|
}
|
|
|
|
|
2015-01-14 11:51:24 -05:00
|
|
|
// Throw a notice for each failing value.
|
|
|
|
foreach ( (array) $date_query[ $key ] as $_value ) {
|
|
|
|
$is_between = $_value >= $check['min'] && $_value <= $check['max'];
|
|
|
|
|
2015-01-20 14:13:22 -05:00
|
|
|
if ( ! is_numeric( $_value ) || ! $is_between ) {
|
2015-01-14 11:51:24 -05:00
|
|
|
$error = sprintf(
|
|
|
|
/* translators: Date query invalid date message: 1: invalid value, 2: type of value, 3: minimum valid value, 4: maximum valid value */
|
|
|
|
__( 'Invalid value %1$s for %2$s. Expected value should be between %3$s and %4$s.' ),
|
|
|
|
'<code>' . esc_html( $_value ) . '</code>',
|
|
|
|
'<code>' . esc_html( $key ) . '</code>',
|
|
|
|
'<code>' . esc_html( $check['min'] ) . '</code>',
|
|
|
|
'<code>' . esc_html( $check['max'] ) . '</code>'
|
|
|
|
);
|
|
|
|
|
|
|
|
_doing_it_wrong( __CLASS__, $error, '4.1.0' );
|
|
|
|
|
|
|
|
$valid = false;
|
|
|
|
}
|
2014-10-16 16:12:18 -04:00
|
|
|
}
|
|
|
|
}
|
|
|
|
|
|
|
|
// If we already have invalid date messages, don't bother running through checkdate().
|
|
|
|
if ( ! $valid ) {
|
|
|
|
return $valid;
|
|
|
|
}
|
|
|
|
|
|
|
|
$day_month_year_error_msg = '';
|
|
|
|
|
|
|
|
$day_exists = array_key_exists( 'day', $date_query ) && is_numeric( $date_query['day'] );
|
|
|
|
$month_exists = array_key_exists( 'month', $date_query ) && is_numeric( $date_query['month'] );
|
|
|
|
$year_exists = array_key_exists( 'year', $date_query ) && is_numeric( $date_query['year'] );
|
|
|
|
|
|
|
|
if ( $day_exists && $month_exists && $year_exists ) {
|
|
|
|
// 1. Checking day, month, year combination.
|
2014-12-05 21:29:24 -05:00
|
|
|
if ( ! wp_checkdate( $date_query['month'], $date_query['day'], $date_query['year'], sprintf( '%s-%s-%s', $date_query['year'], $date_query['month'], $date_query['day'] ) ) ) {
|
2014-10-16 16:12:18 -04:00
|
|
|
/* translators: 1: year, 2: month, 3: day of month */
|
|
|
|
$day_month_year_error_msg = sprintf(
|
2014-11-11 08:24:24 -05:00
|
|
|
__( 'The following values do not describe a valid date: year %1$s, month %2$s, day %3$s.' ),
|
|
|
|
'<code>' . esc_html( $date_query['year'] ) . '</code>',
|
|
|
|
'<code>' . esc_html( $date_query['month'] ) . '</code>',
|
|
|
|
'<code>' . esc_html( $date_query['day'] ) . '</code>'
|
2014-10-16 16:12:18 -04:00
|
|
|
);
|
|
|
|
|
|
|
|
$valid = false;
|
|
|
|
}
|
|
|
|
|
2015-01-08 02:05:25 -05:00
|
|
|
} elseif ( $day_exists && $month_exists ) {
|
2014-10-16 16:12:18 -04:00
|
|
|
/*
|
|
|
|
* 2. checking day, month combination
|
|
|
|
* We use 2012 because, as a leap year, it's the most permissive.
|
|
|
|
*/
|
2014-12-05 21:29:24 -05:00
|
|
|
if ( ! wp_checkdate( $date_query['month'], $date_query['day'], 2012, sprintf( '2012-%s-%s', $date_query['month'], $date_query['day'] ) ) ) {
|
2014-10-16 16:12:18 -04:00
|
|
|
/* translators: 1: month, 2: day of month */
|
|
|
|
$day_month_year_error_msg = sprintf(
|
2014-12-05 21:38:22 -05:00
|
|
|
__( 'The following values do not describe a valid date: month %1$s, day %2$s.' ),
|
|
|
|
'<code>' . esc_html( $date_query['month'] ) . '</code>',
|
|
|
|
'<code>' . esc_html( $date_query['day'] ) . '</code>'
|
2014-10-16 16:12:18 -04:00
|
|
|
);
|
|
|
|
|
|
|
|
$valid = false;
|
|
|
|
}
|
|
|
|
}
|
|
|
|
|
|
|
|
if ( ! empty( $day_month_year_error_msg ) ) {
|
|
|
|
_doing_it_wrong( __CLASS__, $day_month_year_error_msg, '4.1.0' );
|
|
|
|
}
|
|
|
|
|
|
|
|
return $valid;
|
|
|
|
}
|
|
|
|
|
2013-08-27 12:39:09 -04:00
|
|
|
/**
|
|
|
|
* Validates a column name parameter.
|
|
|
|
*
|
2014-10-16 21:20:21 -04:00
|
|
|
* Column names without a table prefix (like 'post_date') are checked against a whitelist of
|
|
|
|
* known tables, and then, if found, have a table prefix (such as 'wp_posts.') prepended.
|
|
|
|
* Prefixed column names (such as 'wp_posts.post_date') bypass this whitelist check,
|
|
|
|
* and are only sanitized to remove illegal characters.
|
|
|
|
*
|
2013-08-27 12:39:09 -04:00
|
|
|
* @since 3.7.0
|
|
|
|
* @access public
|
|
|
|
*
|
|
|
|
* @param string $column The user-supplied column name.
|
|
|
|
* @return string A validated column name value.
|
|
|
|
*/
|
|
|
|
public function validate_column( $column ) {
|
2014-10-16 21:20:21 -04:00
|
|
|
global $wpdb;
|
|
|
|
|
2013-10-24 18:58:12 -04:00
|
|
|
$valid_columns = array(
|
|
|
|
'post_date', 'post_date_gmt', 'post_modified',
|
2014-10-16 21:37:18 -04:00
|
|
|
'post_modified_gmt', 'comment_date', 'comment_date_gmt',
|
2016-05-20 18:04:27 -04:00
|
|
|
'user_registered', 'registered', 'last_updated',
|
2013-10-24 18:58:12 -04:00
|
|
|
);
|
2013-08-27 12:39:09 -04:00
|
|
|
|
2014-10-16 21:20:21 -04:00
|
|
|
// Attempt to detect a table prefix.
|
|
|
|
if ( false === strpos( $column, '.' ) ) {
|
|
|
|
/**
|
2016-05-22 14:50:28 -04:00
|
|
|
* Filters the list of valid date query columns.
|
2014-10-16 21:20:21 -04:00
|
|
|
*
|
|
|
|
* @since 3.7.0
|
2014-10-16 23:51:20 -04:00
|
|
|
* @since 4.1.0 Added 'user_registered' to the default recognized columns.
|
2014-10-16 21:20:21 -04:00
|
|
|
*
|
|
|
|
* @param array $valid_columns An array of valid date query columns. Defaults
|
2014-11-28 06:29:25 -05:00
|
|
|
* are 'post_date', 'post_date_gmt', 'post_modified',
|
|
|
|
* 'post_modified_gmt', 'comment_date', 'comment_date_gmt',
|
|
|
|
* 'user_registered'
|
2014-10-16 21:20:21 -04:00
|
|
|
*/
|
|
|
|
if ( ! in_array( $column, apply_filters( 'date_query_valid_columns', $valid_columns ) ) ) {
|
|
|
|
$column = 'post_date';
|
|
|
|
}
|
|
|
|
|
|
|
|
$known_columns = array(
|
|
|
|
$wpdb->posts => array(
|
|
|
|
'post_date',
|
|
|
|
'post_date_gmt',
|
|
|
|
'post_modified',
|
|
|
|
'post_modified_gmt',
|
|
|
|
),
|
|
|
|
$wpdb->comments => array(
|
|
|
|
'comment_date',
|
|
|
|
'comment_date_gmt',
|
|
|
|
),
|
2014-10-16 21:37:18 -04:00
|
|
|
$wpdb->users => array(
|
|
|
|
'user_registered',
|
|
|
|
),
|
2016-05-20 18:04:27 -04:00
|
|
|
$wpdb->blogs => array(
|
|
|
|
'registered',
|
|
|
|
'last_updated',
|
|
|
|
),
|
2014-10-16 21:20:21 -04:00
|
|
|
);
|
|
|
|
|
|
|
|
// If it's a known column name, add the appropriate table prefix.
|
|
|
|
foreach ( $known_columns as $table_name => $table_columns ) {
|
|
|
|
if ( in_array( $column, $table_columns ) ) {
|
|
|
|
$column = $table_name . '.' . $column;
|
|
|
|
break;
|
|
|
|
}
|
|
|
|
}
|
|
|
|
|
|
|
|
}
|
|
|
|
|
|
|
|
// Remove unsafe characters.
|
|
|
|
return preg_replace( '/[^a-zA-Z0-9_$\.]/', '', $column );
|
2013-08-27 12:39:09 -04:00
|
|
|
}
|
|
|
|
|
|
|
|
/**
|
2014-10-16 15:34:17 -04:00
|
|
|
* Generate WHERE clause to be appended to a main query.
|
2013-08-27 12:39:09 -04:00
|
|
|
*
|
|
|
|
* @since 3.7.0
|
|
|
|
* @access public
|
|
|
|
*
|
2014-10-16 15:34:17 -04:00
|
|
|
* @return string MySQL WHERE clause.
|
2013-08-27 12:39:09 -04:00
|
|
|
*/
|
|
|
|
public function get_sql() {
|
2014-10-16 15:34:17 -04:00
|
|
|
$sql = $this->get_sql_clauses();
|
2013-08-27 12:39:09 -04:00
|
|
|
|
2014-10-16 15:34:17 -04:00
|
|
|
$where = $sql['where'];
|
2013-08-27 12:39:09 -04:00
|
|
|
|
2013-10-24 18:58:12 -04:00
|
|
|
/**
|
2016-05-22 14:50:28 -04:00
|
|
|
* Filters the date query WHERE clause.
|
2013-10-24 18:58:12 -04:00
|
|
|
*
|
|
|
|
* @since 3.7.0
|
|
|
|
*
|
|
|
|
* @param string $where WHERE clause of the date query.
|
|
|
|
* @param WP_Date_Query $this The WP_Date_Query instance.
|
|
|
|
*/
|
2013-08-27 12:39:09 -04:00
|
|
|
return apply_filters( 'get_date_sql', $where, $this );
|
|
|
|
}
|
|
|
|
|
|
|
|
/**
|
2014-10-16 15:34:17 -04:00
|
|
|
* Generate SQL clauses to be appended to a main query.
|
2013-08-27 12:39:09 -04:00
|
|
|
*
|
2016-05-02 00:00:28 -04:00
|
|
|
* Called by the public WP_Date_Query::get_sql(), this method is abstracted
|
|
|
|
* out to maintain parity with the other Query classes.
|
2014-10-16 15:34:17 -04:00
|
|
|
*
|
|
|
|
* @since 4.1.0
|
|
|
|
* @access protected
|
|
|
|
*
|
|
|
|
* @return array {
|
|
|
|
* Array containing JOIN and WHERE SQL clauses to append to the main query.
|
|
|
|
*
|
|
|
|
* @type string $join SQL fragment to append to the main JOIN clause.
|
|
|
|
* @type string $where SQL fragment to append to the main WHERE clause.
|
|
|
|
* }
|
|
|
|
*/
|
|
|
|
protected function get_sql_clauses() {
|
|
|
|
$sql = $this->get_sql_for_query( $this->queries );
|
|
|
|
|
|
|
|
if ( ! empty( $sql['where'] ) ) {
|
|
|
|
$sql['where'] = ' AND ' . $sql['where'];
|
|
|
|
}
|
|
|
|
|
|
|
|
return $sql;
|
|
|
|
}
|
|
|
|
|
|
|
|
/**
|
|
|
|
* Generate SQL clauses for a single query array.
|
|
|
|
*
|
|
|
|
* If nested subqueries are found, this method recurses the tree to
|
|
|
|
* produce the properly nested SQL.
|
|
|
|
*
|
|
|
|
* @since 4.1.0
|
|
|
|
* @access protected
|
|
|
|
*
|
|
|
|
* @param array $query Query to parse.
|
|
|
|
* @param int $depth Optional. Number of tree levels deep we currently are.
|
2014-11-28 06:26:23 -05:00
|
|
|
* Used to calculate indentation. Default 0.
|
2014-10-16 15:34:17 -04:00
|
|
|
* @return array {
|
|
|
|
* Array containing JOIN and WHERE SQL clauses to append to a single query array.
|
|
|
|
*
|
|
|
|
* @type string $join SQL fragment to append to the main JOIN clause.
|
|
|
|
* @type string $where SQL fragment to append to the main WHERE clause.
|
|
|
|
* }
|
|
|
|
*/
|
|
|
|
protected function get_sql_for_query( $query, $depth = 0 ) {
|
|
|
|
$sql_chunks = array(
|
|
|
|
'join' => array(),
|
|
|
|
'where' => array(),
|
|
|
|
);
|
|
|
|
|
|
|
|
$sql = array(
|
|
|
|
'join' => '',
|
|
|
|
'where' => '',
|
|
|
|
);
|
|
|
|
|
|
|
|
$indent = '';
|
|
|
|
for ( $i = 0; $i < $depth; $i++ ) {
|
|
|
|
$indent .= " ";
|
|
|
|
}
|
|
|
|
|
|
|
|
foreach ( $query as $key => $clause ) {
|
|
|
|
if ( 'relation' === $key ) {
|
|
|
|
$relation = $query['relation'];
|
2015-01-08 02:05:25 -05:00
|
|
|
} elseif ( is_array( $clause ) ) {
|
2014-10-16 15:34:17 -04:00
|
|
|
|
|
|
|
// This is a first-order clause.
|
|
|
|
if ( $this->is_first_order_clause( $clause ) ) {
|
|
|
|
$clause_sql = $this->get_sql_for_clause( $clause, $query );
|
|
|
|
|
|
|
|
$where_count = count( $clause_sql['where'] );
|
|
|
|
if ( ! $where_count ) {
|
|
|
|
$sql_chunks['where'][] = '';
|
2015-01-08 02:05:25 -05:00
|
|
|
} elseif ( 1 === $where_count ) {
|
2014-10-16 15:34:17 -04:00
|
|
|
$sql_chunks['where'][] = $clause_sql['where'][0];
|
|
|
|
} else {
|
|
|
|
$sql_chunks['where'][] = '( ' . implode( ' AND ', $clause_sql['where'] ) . ' )';
|
|
|
|
}
|
|
|
|
|
|
|
|
$sql_chunks['join'] = array_merge( $sql_chunks['join'], $clause_sql['join'] );
|
|
|
|
// This is a subquery, so we recurse.
|
|
|
|
} else {
|
|
|
|
$clause_sql = $this->get_sql_for_query( $clause, $depth + 1 );
|
|
|
|
|
|
|
|
$sql_chunks['where'][] = $clause_sql['where'];
|
|
|
|
$sql_chunks['join'][] = $clause_sql['join'];
|
|
|
|
}
|
|
|
|
}
|
|
|
|
}
|
|
|
|
|
|
|
|
// Filter to remove empties.
|
|
|
|
$sql_chunks['join'] = array_filter( $sql_chunks['join'] );
|
|
|
|
$sql_chunks['where'] = array_filter( $sql_chunks['where'] );
|
|
|
|
|
|
|
|
if ( empty( $relation ) ) {
|
|
|
|
$relation = 'AND';
|
|
|
|
}
|
|
|
|
|
|
|
|
// Filter duplicate JOIN clauses and combine into a single string.
|
|
|
|
if ( ! empty( $sql_chunks['join'] ) ) {
|
|
|
|
$sql['join'] = implode( ' ', array_unique( $sql_chunks['join'] ) );
|
|
|
|
}
|
|
|
|
|
|
|
|
// Generate a single WHERE clause with proper brackets and indentation.
|
|
|
|
if ( ! empty( $sql_chunks['where'] ) ) {
|
|
|
|
$sql['where'] = '( ' . "\n " . $indent . implode( ' ' . "\n " . $indent . $relation . ' ' . "\n " . $indent, $sql_chunks['where'] ) . "\n" . $indent . ')';
|
|
|
|
}
|
|
|
|
|
|
|
|
return $sql;
|
|
|
|
}
|
|
|
|
|
|
|
|
/**
|
|
|
|
* Turns a single date clause into pieces for a WHERE clause.
|
|
|
|
*
|
|
|
|
* A wrapper for get_sql_for_clause(), included here for backward
|
|
|
|
* compatibility while retaining the naming convention across Query classes.
|
|
|
|
*
|
|
|
|
* @since 3.7.0
|
|
|
|
* @access protected
|
|
|
|
*
|
|
|
|
* @param array $query Date query arguments.
|
|
|
|
* @return array {
|
|
|
|
* Array containing JOIN and WHERE SQL clauses to append to the main query.
|
|
|
|
*
|
|
|
|
* @type string $join SQL fragment to append to the main JOIN clause.
|
|
|
|
* @type string $where SQL fragment to append to the main WHERE clause.
|
|
|
|
* }
|
2013-08-27 12:39:09 -04:00
|
|
|
*/
|
|
|
|
protected function get_sql_for_subquery( $query ) {
|
2014-10-16 15:34:17 -04:00
|
|
|
return $this->get_sql_for_clause( $query, '' );
|
|
|
|
}
|
|
|
|
|
|
|
|
/**
|
|
|
|
* Turns a first-order date query into SQL for a WHERE clause.
|
|
|
|
*
|
|
|
|
* @since 4.1.0
|
|
|
|
* @access protected
|
|
|
|
*
|
|
|
|
* @param array $query Date query clause.
|
|
|
|
* @param array $parent_query Parent query of the current date query.
|
|
|
|
* @return array {
|
|
|
|
* Array containing JOIN and WHERE SQL clauses to append to the main query.
|
|
|
|
*
|
|
|
|
* @type string $join SQL fragment to append to the main JOIN clause.
|
|
|
|
* @type string $where SQL fragment to append to the main WHERE clause.
|
|
|
|
* }
|
|
|
|
*/
|
|
|
|
protected function get_sql_for_clause( $query, $parent_query ) {
|
2013-08-27 12:39:09 -04:00
|
|
|
global $wpdb;
|
|
|
|
|
2014-10-16 15:34:17 -04:00
|
|
|
// The sub-parts of a $where part.
|
2013-08-27 12:39:09 -04:00
|
|
|
$where_parts = array();
|
|
|
|
|
|
|
|
$column = ( ! empty( $query['column'] ) ) ? esc_sql( $query['column'] ) : $this->column;
|
|
|
|
|
|
|
|
$column = $this->validate_column( $column );
|
|
|
|
|
|
|
|
$compare = $this->get_compare( $query );
|
|
|
|
|
2014-06-30 21:18:15 -04:00
|
|
|
$inclusive = ! empty( $query['inclusive'] );
|
|
|
|
|
|
|
|
// Assign greater- and less-than values.
|
2013-08-27 12:39:09 -04:00
|
|
|
$lt = '<';
|
|
|
|
$gt = '>';
|
2014-06-30 21:18:15 -04:00
|
|
|
|
|
|
|
if ( $inclusive ) {
|
2013-08-27 12:39:09 -04:00
|
|
|
$lt .= '=';
|
|
|
|
$gt .= '=';
|
|
|
|
}
|
|
|
|
|
2014-10-16 15:34:17 -04:00
|
|
|
// Range queries.
|
2013-08-27 12:39:09 -04:00
|
|
|
if ( ! empty( $query['after'] ) )
|
2014-06-30 21:18:15 -04:00
|
|
|
$where_parts[] = $wpdb->prepare( "$column $gt %s", $this->build_mysql_datetime( $query['after'], ! $inclusive ) );
|
2013-08-27 12:39:09 -04:00
|
|
|
|
|
|
|
if ( ! empty( $query['before'] ) )
|
2014-06-30 21:18:15 -04:00
|
|
|
$where_parts[] = $wpdb->prepare( "$column $lt %s", $this->build_mysql_datetime( $query['before'], $inclusive ) );
|
2013-08-27 12:39:09 -04:00
|
|
|
|
2014-10-16 15:34:17 -04:00
|
|
|
// Specific value queries.
|
2013-08-27 12:39:09 -04:00
|
|
|
|
|
|
|
if ( isset( $query['year'] ) && $value = $this->build_value( $compare, $query['year'] ) )
|
|
|
|
$where_parts[] = "YEAR( $column ) $compare $value";
|
|
|
|
|
2015-01-08 02:05:25 -05:00
|
|
|
if ( isset( $query['month'] ) && $value = $this->build_value( $compare, $query['month'] ) ) {
|
2013-08-27 12:39:09 -04:00
|
|
|
$where_parts[] = "MONTH( $column ) $compare $value";
|
2015-01-08 02:05:25 -05:00
|
|
|
} elseif ( isset( $query['monthnum'] ) && $value = $this->build_value( $compare, $query['monthnum'] ) ) {
|
2013-08-27 12:39:09 -04:00
|
|
|
$where_parts[] = "MONTH( $column ) $compare $value";
|
2015-01-08 02:05:25 -05:00
|
|
|
}
|
|
|
|
if ( isset( $query['week'] ) && false !== ( $value = $this->build_value( $compare, $query['week'] ) ) ) {
|
2013-08-27 12:39:09 -04:00
|
|
|
$where_parts[] = _wp_mysql_week( $column ) . " $compare $value";
|
2015-01-08 02:05:25 -05:00
|
|
|
} elseif ( isset( $query['w'] ) && false !== ( $value = $this->build_value( $compare, $query['w'] ) ) ) {
|
2013-08-27 12:39:09 -04:00
|
|
|
$where_parts[] = _wp_mysql_week( $column ) . " $compare $value";
|
2015-01-08 02:05:25 -05:00
|
|
|
}
|
2013-08-27 12:39:09 -04:00
|
|
|
if ( isset( $query['dayofyear'] ) && $value = $this->build_value( $compare, $query['dayofyear'] ) )
|
|
|
|
$where_parts[] = "DAYOFYEAR( $column ) $compare $value";
|
|
|
|
|
|
|
|
if ( isset( $query['day'] ) && $value = $this->build_value( $compare, $query['day'] ) )
|
|
|
|
$where_parts[] = "DAYOFMONTH( $column ) $compare $value";
|
|
|
|
|
|
|
|
if ( isset( $query['dayofweek'] ) && $value = $this->build_value( $compare, $query['dayofweek'] ) )
|
|
|
|
$where_parts[] = "DAYOFWEEK( $column ) $compare $value";
|
|
|
|
|
2014-10-31 23:24:21 -04:00
|
|
|
if ( isset( $query['dayofweek_iso'] ) && $value = $this->build_value( $compare, $query['dayofweek_iso'] ) )
|
|
|
|
$where_parts[] = "WEEKDAY( $column ) + 1 $compare $value";
|
|
|
|
|
2013-08-27 12:39:09 -04:00
|
|
|
if ( isset( $query['hour'] ) || isset( $query['minute'] ) || isset( $query['second'] ) ) {
|
2014-10-16 15:34:17 -04:00
|
|
|
// Avoid notices.
|
2013-08-27 12:39:09 -04:00
|
|
|
foreach ( array( 'hour', 'minute', 'second' ) as $unit ) {
|
2014-10-16 15:34:17 -04:00
|
|
|
if ( ! isset( $query[ $unit ] ) ) {
|
|
|
|
$query[ $unit ] = null;
|
2013-08-27 12:39:09 -04:00
|
|
|
}
|
|
|
|
}
|
|
|
|
|
|
|
|
if ( $time_query = $this->build_time_query( $column, $compare, $query['hour'], $query['minute'], $query['second'] ) ) {
|
|
|
|
$where_parts[] = $time_query;
|
|
|
|
}
|
|
|
|
}
|
|
|
|
|
2014-10-16 15:34:17 -04:00
|
|
|
/*
|
|
|
|
* Return an array of 'join' and 'where' for compatibility
|
|
|
|
* with other query classes.
|
|
|
|
*/
|
|
|
|
return array(
|
|
|
|
'where' => $where_parts,
|
|
|
|
'join' => array(),
|
|
|
|
);
|
2013-08-27 12:39:09 -04:00
|
|
|
}
|
|
|
|
|
|
|
|
/**
|
|
|
|
* Builds and validates a value string based on the comparison operator.
|
|
|
|
*
|
|
|
|
* @since 3.7.0
|
|
|
|
* @access public
|
|
|
|
*
|
|
|
|
* @param string $compare The compare operator to use
|
|
|
|
* @param string|array $value The value
|
2014-11-30 20:34:24 -05:00
|
|
|
* @return string|false|int The value to be used in SQL or false on error.
|
2013-08-27 12:39:09 -04:00
|
|
|
*/
|
|
|
|
public function build_value( $compare, $value ) {
|
|
|
|
if ( ! isset( $value ) )
|
|
|
|
return false;
|
|
|
|
|
|
|
|
switch ( $compare ) {
|
|
|
|
case 'IN':
|
|
|
|
case 'NOT IN':
|
2014-09-30 10:04:18 -04:00
|
|
|
$value = (array) $value;
|
|
|
|
|
|
|
|
// Remove non-numeric values.
|
|
|
|
$value = array_filter( $value, 'is_numeric' );
|
|
|
|
|
|
|
|
if ( empty( $value ) ) {
|
|
|
|
return false;
|
|
|
|
}
|
|
|
|
|
|
|
|
return '(' . implode( ',', array_map( 'intval', $value ) ) . ')';
|
2013-08-27 12:39:09 -04:00
|
|
|
|
|
|
|
case 'BETWEEN':
|
|
|
|
case 'NOT BETWEEN':
|
2014-09-30 10:04:18 -04:00
|
|
|
if ( ! is_array( $value ) || 2 != count( $value ) ) {
|
2013-08-27 12:39:09 -04:00
|
|
|
$value = array( $value, $value );
|
2014-09-30 10:04:18 -04:00
|
|
|
} else {
|
|
|
|
$value = array_values( $value );
|
|
|
|
}
|
|
|
|
|
|
|
|
// If either value is non-numeric, bail.
|
|
|
|
foreach ( $value as $v ) {
|
|
|
|
if ( ! is_numeric( $v ) ) {
|
|
|
|
return false;
|
|
|
|
}
|
|
|
|
}
|
2013-08-27 12:39:09 -04:00
|
|
|
|
|
|
|
$value = array_map( 'intval', $value );
|
|
|
|
|
|
|
|
return $value[0] . ' AND ' . $value[1];
|
|
|
|
|
|
|
|
default;
|
2014-09-30 10:04:18 -04:00
|
|
|
if ( ! is_numeric( $value ) ) {
|
|
|
|
return false;
|
|
|
|
}
|
|
|
|
|
2013-08-27 12:39:09 -04:00
|
|
|
return (int) $value;
|
|
|
|
}
|
|
|
|
}
|
|
|
|
|
|
|
|
/**
|
|
|
|
* Builds a MySQL format date/time based on some query parameters.
|
|
|
|
*
|
|
|
|
* You can pass an array of values (year, month, etc.) with missing parameter values being defaulted to
|
|
|
|
* either the maximum or minimum values (controlled by the $default_to parameter). Alternatively you can
|
2015-12-06 16:50:25 -05:00
|
|
|
* pass a string that will be run through strtotime().
|
2013-08-27 12:39:09 -04:00
|
|
|
*
|
|
|
|
* @since 3.7.0
|
|
|
|
* @access public
|
|
|
|
*
|
2014-10-16 22:28:19 -04:00
|
|
|
* @param string|array $datetime An array of parameters or a strotime() string
|
|
|
|
* @param bool $default_to_max Whether to round up incomplete dates. Supported by values
|
|
|
|
* of $datetime that are arrays, or string values that are a
|
|
|
|
* subset of MySQL date format ('Y', 'Y-m', 'Y-m-d', 'Y-m-d H:i').
|
|
|
|
* Default: false.
|
2013-08-27 12:39:09 -04:00
|
|
|
* @return string|false A MySQL format date/time or false on failure
|
|
|
|
*/
|
|
|
|
public function build_mysql_datetime( $datetime, $default_to_max = false ) {
|
|
|
|
$now = current_time( 'timestamp' );
|
|
|
|
|
|
|
|
if ( ! is_array( $datetime ) ) {
|
2014-10-16 22:28:19 -04:00
|
|
|
|
|
|
|
/*
|
|
|
|
* Try to parse some common date formats, so we can detect
|
|
|
|
* the level of precision and support the 'inclusive' parameter.
|
|
|
|
*/
|
|
|
|
if ( preg_match( '/^(\d{4})$/', $datetime, $matches ) ) {
|
|
|
|
// Y
|
|
|
|
$datetime = array(
|
|
|
|
'year' => intval( $matches[1] ),
|
|
|
|
);
|
|
|
|
|
2015-01-08 02:05:25 -05:00
|
|
|
} elseif ( preg_match( '/^(\d{4})\-(\d{2})$/', $datetime, $matches ) ) {
|
2014-10-16 22:28:19 -04:00
|
|
|
// Y-m
|
|
|
|
$datetime = array(
|
|
|
|
'year' => intval( $matches[1] ),
|
|
|
|
'month' => intval( $matches[2] ),
|
|
|
|
);
|
|
|
|
|
2015-01-08 02:05:25 -05:00
|
|
|
} elseif ( preg_match( '/^(\d{4})\-(\d{2})\-(\d{2})$/', $datetime, $matches ) ) {
|
2014-10-16 22:28:19 -04:00
|
|
|
// Y-m-d
|
|
|
|
$datetime = array(
|
|
|
|
'year' => intval( $matches[1] ),
|
|
|
|
'month' => intval( $matches[2] ),
|
|
|
|
'day' => intval( $matches[3] ),
|
|
|
|
);
|
|
|
|
|
2015-01-08 02:05:25 -05:00
|
|
|
} elseif ( preg_match( '/^(\d{4})\-(\d{2})\-(\d{2}) (\d{2}):(\d{2})$/', $datetime, $matches ) ) {
|
2014-10-16 22:28:19 -04:00
|
|
|
// Y-m-d H:i
|
|
|
|
$datetime = array(
|
|
|
|
'year' => intval( $matches[1] ),
|
|
|
|
'month' => intval( $matches[2] ),
|
|
|
|
'day' => intval( $matches[3] ),
|
|
|
|
'hour' => intval( $matches[4] ),
|
|
|
|
'minute' => intval( $matches[5] ),
|
|
|
|
);
|
|
|
|
}
|
|
|
|
|
|
|
|
// If no match is found, we don't support default_to_max.
|
|
|
|
if ( ! is_array( $datetime ) ) {
|
|
|
|
// @todo Timezone issues here possibly
|
|
|
|
return gmdate( 'Y-m-d H:i:s', strtotime( $datetime, $now ) );
|
|
|
|
}
|
2013-08-27 12:39:09 -04:00
|
|
|
}
|
|
|
|
|
|
|
|
$datetime = array_map( 'absint', $datetime );
|
|
|
|
|
|
|
|
if ( ! isset( $datetime['year'] ) )
|
|
|
|
$datetime['year'] = gmdate( 'Y', $now );
|
|
|
|
|
|
|
|
if ( ! isset( $datetime['month'] ) )
|
|
|
|
$datetime['month'] = ( $default_to_max ) ? 12 : 1;
|
|
|
|
|
|
|
|
if ( ! isset( $datetime['day'] ) )
|
|
|
|
$datetime['day'] = ( $default_to_max ) ? (int) date( 't', mktime( 0, 0, 0, $datetime['month'], 1, $datetime['year'] ) ) : 1;
|
|
|
|
|
|
|
|
if ( ! isset( $datetime['hour'] ) )
|
|
|
|
$datetime['hour'] = ( $default_to_max ) ? 23 : 0;
|
|
|
|
|
|
|
|
if ( ! isset( $datetime['minute'] ) )
|
|
|
|
$datetime['minute'] = ( $default_to_max ) ? 59 : 0;
|
|
|
|
|
|
|
|
if ( ! isset( $datetime['second'] ) )
|
|
|
|
$datetime['second'] = ( $default_to_max ) ? 59 : 0;
|
|
|
|
|
|
|
|
return sprintf( '%04d-%02d-%02d %02d:%02d:%02d', $datetime['year'], $datetime['month'], $datetime['day'], $datetime['hour'], $datetime['minute'], $datetime['second'] );
|
|
|
|
}
|
|
|
|
|
|
|
|
/**
|
|
|
|
* Builds a query string for comparing time values (hour, minute, second).
|
|
|
|
*
|
|
|
|
* If just hour, minute, or second is set than a normal comparison will be done.
|
|
|
|
* However if multiple values are passed, a pseudo-decimal time will be created
|
|
|
|
* in order to be able to accurately compare against.
|
|
|
|
*
|
|
|
|
* @since 3.7.0
|
|
|
|
* @access public
|
|
|
|
*
|
|
|
|
* @param string $column The column to query against. Needs to be pre-validated!
|
|
|
|
* @param string $compare The comparison operator. Needs to be pre-validated!
|
|
|
|
* @param int|null $hour Optional. An hour value (0-23).
|
|
|
|
* @param int|null $minute Optional. A minute value (0-59).
|
|
|
|
* @param int|null $second Optional. A second value (0-59).
|
|
|
|
* @return string|false A query part or false on failure.
|
|
|
|
*/
|
|
|
|
public function build_time_query( $column, $compare, $hour = null, $minute = null, $second = null ) {
|
|
|
|
global $wpdb;
|
|
|
|
|
|
|
|
// Have to have at least one
|
|
|
|
if ( ! isset( $hour ) && ! isset( $minute ) && ! isset( $second ) )
|
|
|
|
return false;
|
|
|
|
|
|
|
|
// Complex combined queries aren't supported for multi-value queries
|
|
|
|
if ( in_array( $compare, array( 'IN', 'NOT IN', 'BETWEEN', 'NOT BETWEEN' ) ) ) {
|
|
|
|
$return = array();
|
|
|
|
|
|
|
|
if ( isset( $hour ) && false !== ( $value = $this->build_value( $compare, $hour ) ) )
|
|
|
|
$return[] = "HOUR( $column ) $compare $value";
|
|
|
|
|
|
|
|
if ( isset( $minute ) && false !== ( $value = $this->build_value( $compare, $minute ) ) )
|
|
|
|
$return[] = "MINUTE( $column ) $compare $value";
|
|
|
|
|
|
|
|
if ( isset( $second ) && false !== ( $value = $this->build_value( $compare, $second ) ) )
|
|
|
|
$return[] = "SECOND( $column ) $compare $value";
|
|
|
|
|
|
|
|
return implode( ' AND ', $return );
|
|
|
|
}
|
|
|
|
|
|
|
|
// Cases where just one unit is set
|
|
|
|
if ( isset( $hour ) && ! isset( $minute ) && ! isset( $second ) && false !== ( $value = $this->build_value( $compare, $hour ) ) ) {
|
|
|
|
return "HOUR( $column ) $compare $value";
|
|
|
|
} elseif ( ! isset( $hour ) && isset( $minute ) && ! isset( $second ) && false !== ( $value = $this->build_value( $compare, $minute ) ) ) {
|
|
|
|
return "MINUTE( $column ) $compare $value";
|
|
|
|
} elseif ( ! isset( $hour ) && ! isset( $minute ) && isset( $second ) && false !== ( $value = $this->build_value( $compare, $second ) ) ) {
|
|
|
|
return "SECOND( $column ) $compare $value";
|
|
|
|
}
|
|
|
|
|
|
|
|
// Single units were already handled. Since hour & second isn't allowed, minute must to be set.
|
|
|
|
if ( ! isset( $minute ) )
|
|
|
|
return false;
|
|
|
|
|
|
|
|
$format = $time = '';
|
|
|
|
|
|
|
|
// Hour
|
2015-10-09 12:33:25 -04:00
|
|
|
if ( null !== $hour ) {
|
2013-08-27 12:39:09 -04:00
|
|
|
$format .= '%H.';
|
|
|
|
$time .= sprintf( '%02d', $hour ) . '.';
|
|
|
|
} else {
|
|
|
|
$format .= '0.';
|
|
|
|
$time .= '0.';
|
|
|
|
}
|
|
|
|
|
|
|
|
// Minute
|
|
|
|
$format .= '%i';
|
|
|
|
$time .= sprintf( '%02d', $minute );
|
|
|
|
|
|
|
|
if ( isset( $second ) ) {
|
|
|
|
$format .= '%s';
|
|
|
|
$time .= sprintf( '%02d', $second );
|
|
|
|
}
|
|
|
|
|
|
|
|
return $wpdb->prepare( "DATE_FORMAT( $column, %s ) $compare %f", $format, $time );
|
|
|
|
}
|
Grouped backports to the 4.6 branch.
- Posts, Post types: Apply KSES to post-by-email content,
- General: Validate host on "Are you sure?" screen,
- Posts, Post types: Remove emails from post-by-email logs,
- Pings/trackbacks: Apply KSES to all trackbacks,
- Comments: Apply kses when editing comments,
- Customize: Escape blogname option in underscores templates,
- Mail: Reset PHPMailer properties between use,
- Query: Validate relation in `WP_Date_Query`,
- Widgets: Escape RSS error messages for display.
Merges [54521], [54522], [54523], [54525], [54526], [54527], [54529], [54530], [54541] to the 4.6 branch.
Props voldemortensen, johnbillion, paulkevan, peterwilsoncc, xknown, dd32, audrasjb, martinkrcho, davidbaumwald, tykoted, johnjamesjacoby, ehtis, matveb, talldanwp.
Built from https://develop.svn.wordpress.org/branches/4.6@54561
git-svn-id: http://core.svn.wordpress.org/branches/4.6@54116 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2022-10-17 14:04:22 -04:00
|
|
|
|
|
|
|
/**
|
|
|
|
* Sanitizes a 'relation' operator.
|
|
|
|
*
|
|
|
|
* @since 6.0.3
|
|
|
|
*
|
|
|
|
* @param string $relation Raw relation key from the query argument.
|
|
|
|
* @return string Sanitized relation ('AND' or 'OR').
|
|
|
|
*/
|
|
|
|
public function sanitize_relation( $relation ) {
|
|
|
|
if ( 'OR' === strtoupper( $relation ) ) {
|
|
|
|
return 'OR';
|
|
|
|
} else {
|
|
|
|
return 'AND';
|
|
|
|
}
|
|
|
|
}
|
2013-08-27 12:39:09 -04:00
|
|
|
}
|