Meta Box

Hi, I've just tested the plugin and it works fine to me. Here is the video I made for that:

https://youtu.be/YMjAIZLUeF4

Update 1: I replied too fast. I didn't notice you were talking about custom table. Let me check that again.

Update 2: I've just pushed a fix to the plugin here. Can you please try it?

Hi Jefferson,

We have 2 extensions for front-end forms: MB Frontend Submission (for submitting posts) and MB User Profile (for editing user details). If your forms have some similarity, then you can use them.

Hi @Jefferson, I've fixed this bug here. Please try it.

Sorry, please try this code for the 2nd step:

add_filter( 'do_shortcode_tag', function ( $output, $tag, $attr ) {
    if ( $tag !== 'mb_frontend_form' || $attr['id'] !== 'my_form' ) {
        return $output;
    }

    // Check if current user is the post author.
    $post_id = filter_input( INPUT_GET, 'rwmb-post-id', FILTER_SANITIZE_NUMBER_INT );
    if ( ! $post_id ) {
        return $output;
    }
    $post = get_post( $post_id );
    if ( $post->post_author != get_current_user_id() ) {
        return 'You are not allowed to edit this post';
    }

    return $output;
}, 10, 3 );

If you try to edit the existing posts, then only admin can edit them. Because their post author is the admin (technically when submitting posts, the plugin doesn't set the post author, and that falls back to the admin).

This code will work with new submitted posts, where the code in the step 1 sets the proper post author.

For the existing posts, you need to set the post author manually. Then the code will work properly.

Hi @ecurtain,

Can you try the latest version on Github? I've fixed that here.

Hi,

This is an interesting question. After checking around, this is the solution I found:

Step 1: set the post author when submitting

add_filter( 'rwmb_frontend_insert_post_data', function( $data, $config ) {
    if ( $config['id'] !== 'my_form' || ! is_user_logged_in() ) {
        return $data;
    }

    // Set current post ID as the author of the post.
    $data['post_author'] = get_current_user_id();
    return $data;
}, 10, 2 );

Step 2: check if the current user is the post author

add_filter( 'do_shortcode_tag', function ( $output, $tag, $attr ) {
    if ( $tag !== 'mb_frontend_form' || $attr['id'] !== 'my_form' ) {
        return $output;
    }

    // Check if current user is the post author.
    $post_id = filter_input( INPUT_GET, 'rwmb-post-id', FILTER_SANITIZE_NUMBER_INT );
    $post = get_post( $post_id );
    if ( $post->post_author != get_current_user_id() ) {
        return 'You are not allowed to edit this post';
    }

    return $output;
}, 10, 3 );