[n7studios]

Summary

Fixes the 3.5.1 search exclusion for Member Content being bypassed

• REST API include (and any post__in query): WordPress ignores post__not_in when post__in is set, so restricted Posts matching only their restricted content were still returned. Excluded Posts are now also excluded via posts_where, which can't be overridden.
• Frontend ?p=<id>&s=<term>: is_search() is false when p is used, so the exclusion didn't run, while WordPress still applied the search term. The exclusion now runs whenever a search term is present.

Testing

• testRESTAPISearchExcludesRestrictedContentMatchesWithInclude: Test /wp/v2/posts and /wp/v2/search with the include parameter don't return a restricted Post when the search only matches restricted content.
• testSearchResultsRestrictedWithPostID: Test ?p=<id>&s=<term> doesn't return a restricted Post when the search only matches restricted content.

Checklist

• I have written a test and included it in this PR
• I have run all tests and they pass
• The code passes when running the PHP CodeSniffer
• Code meets WordPress Coding Standards for PHP, HTML, CSS and JS
• Security and Sanitization requirements have been followed
• I have assigned a reviewer or two to review this PR (if you're not sure who to assign, we can do this step for you)

[github-actions]

WordPress Playground

🚀 Your PR has been built and is ready for testing in WordPress Playground!

Click here to test your changes in WordPress Playground