我已经注册了一个新的rest路由到现有的数据库表wpso\\U messages。我能够创建一个get\\u回调函数，从数据库中获取所有数据。

我想添加一个POST请求功能，它允许我通过rest api向wpso\\U消息表引入新的数据行。如何做到这一点，有什么建议吗？

下面是我注册rest路由和get\\u回调的代码：

<?php



function get_wp_query() {
    global $wpdb;
    $rows = $wpdb->get_results("SELECT * FROM wpso_messages");
    foreach( $rows as $index => $row ) {
    
           $user_from_id = $rows[$index]->user_from; 
           $user_to_id = $rows[$index]->user_to; 
           $rows[$index]->username_from = get_user_by(\'id\', $user_from_id)->display_name;
           $rows[$index]->username_to = get_user_by(\'id\', $user_to_id)->display_name;
    }
    return $rows;
};
add_action( \'rest_api_init\', function () {
    register_rest_route( \'wp/v2\', \'messages\', array(
        \'methods\' => \'GET\',
        \'callback\' => \'get_wp_query\'
        ) );
    } );

对于POST请求，下面是一个输入json的示例，用于在wpso\\U消息表中创建新条目：

{"user_from": "82", "user_to": "1", "message": "Iam interested to bid", "listing_id": "22775"}

基于Sally C.J答案的最终解决方案：请注意，它包括一些检查，例如用户ID是否有效以及json正文中的键值是否在SQL数据库列中。

#GET request function

function get_wp_query() {
    global $wpdb;
    $rows = $wpdb->get_results("SELECT * FROM wpso_messages");
    foreach( $rows as $index => $row ) {
    
           $user_from_id = $rows[$index]->user_from; 
           $user_to_id = $rows[$index]->user_to; 
           $rows[$index]->username_from = get_user_by(\'id\', $user_from_id)->display_name;
           $rows[$index]->username_to = get_user_by(\'id\', $user_to_id)->display_name;
           $rows[$index]->author= array(\'Welcome\'=>\'Home\');
    }
    return $rows;
};

#POST request arguments validation

function my_create_item_args() {
    return array(
        \'user_from\' => array(
            \'required\'          => true,
            \'validate_callback\' => function ( $param ) {
                return is_numeric( $param );
            },
        ),
        \'user_to\' => array(
            \'required\'          => true,
            \'validate_callback\' => function ( $param ) {
                return is_numeric( $param );
            },
        ),
        \'message\'   => array(
            \'required\'          => true,
            \'sanitize_callback\' => function ( $param ) {
                // this allows basic HTML tags like <strong> and <em>
                #return wp_filter_kses( $param );

                // this allows line breaks, but strips all HTML tags
                return sanitize_textarea_field( $param );
            },
        ),
        \'listing_id\' => array(
            \'required\'          => true,
            \'validate_callback\' => function ( $param ) {
                return is_numeric( $param );
            },
        ),
        \'\'
        // ... other args.
    );
}

#Post request function
function post_function( WP_REST_Request $request ) {



    #getting json body
    $body = $request->get_json_params();
    
    #checking if there is an invalid entry otherwise it wont be processed (example unseen)
    $valid_entries=["user_from","message","user_to","listing_id","seen"];
    foreach( $body as $keysx1=>$valuesx1 ) {
        if (in_array($keysx1, $valid_entries, true)) {
        
        } else {
        return new WP_Error( \'invalid entry\', __($keysx1 . \' is an invalid entry\'), array( \'status\' => 400 ) );
        }
    }
    
    #######Checking users
    $users = get_users();
    foreach( $users as $user ) {
        // get user names from the object and add them to the array
        $useridlist[] = $user->id;
    }
    $userfromx1=$body[\'user_from\'];
    $usertox1=$body[\'user_to\'];
    #Checking sender and reciever are not same
    if ($userfromx1!=$usertox1) {
        
        } else {
        return new WP_Error( \'invalid message\', __(\'Sender and reciever cant be same\'), array( \'status\' => 400 ) );
        }
    #Checking userto and userfrom are in users list
    if (in_array($userfromx1, $useridlist, true)) {
        
        } else {
        return new WP_Error( \'invalid user id\', __(\'user id specified in user_from is invalid\'), array( \'status\' => 400 ) );
        }
    
    if (in_array($usertox1, $useridlist, true)) {
        
        } else {
        return new WP_Error( \'invalid user id\', __(\'user id specified in user_to is invalid\'), array( \'status\' => 400 ) );
        }
    
    global $wpdb;
    $body["created_at"] = current_time(\'mysql\');
    $wpdb->insert(\'wpso_messages\', $body);  
    return $body;

}

add_action( \'rest_api_init\', function () {
    register_rest_route( \'my-plugin/v1\', \'messages\', array(array(
        \'methods\' => \'GET\',
        \'callback\' => \'get_wp_query\'
        ),
        array(
        \'methods\'  => \'POST\',
        \'callback\' => \'post_function\',
        \'args\'                => my_create_item_args(),
        \'permission_callback\' => function () {
        // This is just an example of checking the user\'s permissions..
        return current_user_can( \'edit_posts\' );
    },)));
    });

// I intentionally used my-plugin as the vendor name, and not "wp". See the
// "Additional Notes" at the bottom in my answer.
register_rest_route( \'my-plugin/v2\', \'messages\', array(
    // Endpoint 1 - list items.
    array(
        \'methods\'  => \'GET\',
        \'callback\' => \'get_wp_query\',
        // ... other args.
    ),

    // Endpoint 2 - create items.
    array(
        \'methods\'  => \'POST\',
        \'callback\' => \'my_create_item\',
        // ... other args.
    )
) );

function my_create_item( WP_REST_Request $request ) {
    // your code here...
}