2006-03-29 01:51:55 +00:00
< ? php
2008-08-11 20:26:31 +00:00
/**
* WordPress AJAX Process Execution .
*
* @ package WordPress
* @ subpackage Administration
*/
/**
* Executing AJAX process .
*
2010-09-05 02:45:39 +00:00
* @ since 2.1 . 0
2008-08-11 20:26:31 +00:00
*/
2008-01-04 23:34:33 +00:00
define ( 'DOING_AJAX' , true );
2008-09-10 22:47:03 +00:00
define ( 'WP_ADMIN' , true );
2008-01-04 23:34:33 +00:00
2010-02-17 12:26:47 +00:00
if ( ! isset ( $_REQUEST [ 'action' ] ) )
die ( '-1' );
2010-09-10 17:02:55 +00:00
require_once ( '../wp-load.php' );
2010-04-18 06:14:45 +00:00
require_once ( './includes/admin.php' );
2009-01-18 05:40:40 +00:00
@ header ( 'Content-Type: text/html; charset=' . get_option ( 'blog_charset' ));
2010-02-25 21:41:33 +00:00
send_nosniff_header ();
2006-03-29 01:51:55 +00:00
2009-02-22 06:58:26 +00:00
do_action ( 'admin_init' );
2008-10-16 21:59:06 +00:00
if ( ! is_user_logged_in () ) {
2010-02-17 12:26:47 +00:00
if ( isset ( $_POST [ 'action' ] ) && $_POST [ 'action' ] == 'autosave' ) {
2008-10-16 21:59:06 +00:00
$id = isset ( $_POST [ 'post_ID' ]) ? ( int ) $_POST [ 'post_ID' ] : 0 ;
if ( ! $id )
die ( '-1' );
2010-01-21 21:37:43 +00:00
$message = sprintf ( __ ( '<strong>ALERT: You are logged out!</strong> Could not save draft. <a href="%s" target="_blank">Please log in again.</a>' ), wp_login_url () );
2010-02-17 12:26:47 +00:00
$x = new WP_Ajax_Response ( array (
'what' => 'autosave' ,
'id' => $id ,
'data' => $message
) );
$x -> send ();
2008-10-16 21:59:06 +00:00
}
2010-02-17 12:26:47 +00:00
if ( ! empty ( $_REQUEST [ 'action' ] ) )
2009-07-06 16:55:07 +00:00
do_action ( 'wp_ajax_nopriv_' . $_REQUEST [ 'action' ] );
2009-03-05 21:43:35 +00:00
2006-03-29 01:51:55 +00:00
die ( '-1' );
2008-10-16 21:59:06 +00:00
}
2006-03-29 01:51:55 +00:00
2008-10-22 17:15:19 +00:00
if ( isset ( $_GET [ 'action' ] ) ) :
switch ( $action = $_GET [ 'action' ] ) :
2010-08-11 21:54:51 +00:00
case 'fetch-list' :
2011-01-11 20:03:50 +00:00
$list_class = $_GET [ 'list_args' ][ 'class' ];
check_ajax_referer ( " fetch-list- $list_class " , '_ajax_fetch_list_nonce' );
2011-11-03 23:00:46 +00:00
$current_screen = convert_to_screen ( $_GET [ 'list_args' ][ 'screen' ][ 'id' ] );
2010-11-08 10:21:34 +00:00
2010-12-20 13:30:39 +00:00
define ( 'WP_NETWORK_ADMIN' , $current_screen -> is_network );
define ( 'WP_USER_ADMIN' , $current_screen -> is_user );
2011-01-18 11:06:22 +00:00
$wp_list_table = _get_list_table ( $list_class );
2010-10-25 02:58:25 +00:00
if ( ! $wp_list_table )
die ( '0' );
2010-08-11 21:54:51 +00:00
2010-12-16 09:18:28 +00:00
if ( ! $wp_list_table -> ajax_user_can () )
die ( '-1' );
2010-10-25 02:58:25 +00:00
$wp_list_table -> ajax_response ();
2010-08-11 21:54:51 +00:00
2010-10-25 02:58:25 +00:00
die ( '0' );
2010-08-11 21:54:51 +00:00
break ;
2008-10-22 17:15:19 +00:00
case 'ajax-tag-search' :
2010-12-07 18:59:25 +00:00
if ( isset ( $_GET [ 'tax' ] ) ) {
$taxonomy = sanitize_key ( $_GET [ 'tax' ] );
$tax = get_taxonomy ( $taxonomy );
if ( ! $tax )
die ( '0' );
if ( ! current_user_can ( $tax -> cap -> assign_terms ) )
die ( '-1' );
} else {
die ( '0' );
}
2008-01-03 01:34:11 +00:00
2011-01-11 20:15:25 +00:00
$s = stripslashes ( $_GET [ 'q' ] );
2009-02-01 09:45:24 +00:00
2008-08-27 20:47:01 +00:00
if ( false !== strpos ( $s , ',' ) ) {
2008-08-09 05:36:14 +00:00
$s = explode ( ',' , $s );
$s = $s [ count ( $s ) - 1 ];
2008-06-30 00:04:22 +00:00
}
$s = trim ( $s );
if ( strlen ( $s ) < 2 )
2008-11-12 05:02:58 +00:00
die ; // require 2 chars for matching
2008-12-18 19:12:26 +00:00
2011-01-11 20:15:25 +00:00
$results = $wpdb -> get_col ( $wpdb -> prepare ( " SELECT t.name FROM $wpdb->term_taxonomy AS tt INNER JOIN $wpdb->terms AS t ON tt.term_id = t.term_id WHERE tt.taxonomy = %s AND t.name LIKE (%s) " , $taxonomy , '%' . like_escape ( $s ) . '%' ) );
2008-12-18 19:12:26 +00:00
2008-01-03 01:34:11 +00:00
echo join ( $results , " \n " );
die ;
2008-10-22 17:15:19 +00:00
break ;
2009-01-14 14:18:51 +00:00
case 'wp-compression-test' :
if ( ! current_user_can ( 'manage_options' ) )
die ( '-1' );
2009-02-01 09:45:24 +00:00
if ( ini_get ( 'zlib.output_compression' ) || 'ob_gzhandler' == ini_get ( 'output_handler' ) ) {
2009-02-18 23:38:11 +00:00
update_site_option ( 'can_compress_scripts' , 0 );
2009-02-01 09:45:24 +00:00
die ( '0' );
}
if ( isset ( $_GET [ 'test' ]) ) {
header ( 'Expires: Wed, 11 Jan 1984 05:00:00 GMT' );
header ( 'Last-Modified: ' . gmdate ( 'D, d M Y H:i:s' ) . ' GMT' );
header ( 'Cache-Control: no-cache, must-revalidate, max-age=0' );
header ( 'Pragma: no-cache' );
header ( 'Content-Type: application/x-javascript; charset=UTF-8' );
$force_gzip = ( defined ( 'ENFORCE_GZIP' ) && ENFORCE_GZIP );
$test_str = '"wpCompressionTest Lorem ipsum dolor sit amet consectetuer mollis sapien urna ut a. Eu nonummy condimentum fringilla tempor pretium platea vel nibh netus Maecenas. Hac molestie amet justo quis pellentesque est ultrices interdum nibh Morbi. Cras mattis pretium Phasellus ante ipsum ipsum ut sociis Suspendisse Lorem. Ante et non molestie. Porta urna Vestibulum egestas id congue nibh eu risus gravida sit. Ac augue auctor Ut et non a elit massa id sodales. Elit eu Nulla at nibh adipiscing mattis lacus mauris at tempus. Netus nibh quis suscipit nec feugiat eget sed lorem et urna. Pellentesque lacus at ut massa consectetuer ligula ut auctor semper Pellentesque. Ut metus massa nibh quam Curabitur molestie nec mauris congue. Volutpat molestie elit justo facilisis neque ac risus Ut nascetur tristique. Vitae sit lorem tellus et quis Phasellus lacus tincidunt nunc Fusce. Pharetra wisi Suspendisse mus sagittis libero lacinia Integer consequat ac Phasellus. Et urna ac cursus tortor aliquam Aliquam amet tellus volutpat Vestibulum. Justo interdum condimentum In augue congue tellus sollicitudin Quisque quis nibh."' ;
if ( 1 == $_GET [ 'test' ] ) {
echo $test_str ;
die ;
} elseif ( 2 == $_GET [ 'test' ] ) {
2009-11-19 09:46:07 +00:00
if ( ! isset ( $_SERVER [ 'HTTP_ACCEPT_ENCODING' ]) )
die ( '-1' );
2010-02-14 02:27:19 +00:00
if ( false !== stripos ( $_SERVER [ 'HTTP_ACCEPT_ENCODING' ], 'deflate' ) && function_exists ( 'gzdeflate' ) && ! $force_gzip ) {
2009-02-01 09:45:24 +00:00
header ( 'Content-Encoding: deflate' );
$out = gzdeflate ( $test_str , 1 );
2010-02-14 02:27:19 +00:00
} elseif ( false !== stripos ( $_SERVER [ 'HTTP_ACCEPT_ENCODING' ], 'gzip' ) && function_exists ( 'gzencode' ) ) {
2009-02-01 09:45:24 +00:00
header ( 'Content-Encoding: gzip' );
$out = gzencode ( $test_str , 1 );
} else {
die ( '-1' );
}
echo $out ;
die ;
} elseif ( 'no' == $_GET [ 'test' ] ) {
2009-02-18 23:38:11 +00:00
update_site_option ( 'can_compress_scripts' , 0 );
2009-02-01 09:45:24 +00:00
} elseif ( 'yes' == $_GET [ 'test' ] ) {
2009-02-18 23:38:11 +00:00
update_site_option ( 'can_compress_scripts' , 1 );
2009-02-01 09:45:24 +00:00
}
2009-01-14 14:18:51 +00:00
}
2009-02-01 09:45:24 +00:00
2009-01-14 14:18:51 +00:00
die ( '0' );
break ;
2009-09-24 01:54:07 +00:00
case 'imgedit-preview' :
2009-09-10 22:07:33 +00:00
$post_id = intval ( $_GET [ 'postid' ]);
if ( empty ( $post_id ) || ! current_user_can ( 'edit_post' , $post_id ) )
die ( '-1' );
check_ajax_referer ( " image_editor- $post_id " );
include_once ( ABSPATH . 'wp-admin/includes/image-edit.php' );
2010-04-27 01:05:58 +00:00
if ( ! stream_preview_image ( $post_id ) )
2009-09-10 22:07:33 +00:00
die ( '-1' );
die ();
break ;
2010-04-27 01:05:58 +00:00
case 'menu-quick-search' :
2010-05-12 19:19:57 +00:00
if ( ! current_user_can ( 'edit_theme_options' ) )
2010-04-27 01:05:58 +00:00
die ( '-1' );
2010-05-03 20:26:11 +00:00
2010-04-27 01:05:58 +00:00
require_once ABSPATH . 'wp-admin/includes/nav-menu.php' ;
_wp_ajax_menu_quick_search ( $_REQUEST );
exit ;
break ;
2009-10-13 17:04:22 +00:00
case 'oembed-cache' :
$return = ( $wp_embed -> cache_oembed ( $_GET [ 'post' ] ) ) ? '1' : '0' ;
die ( $return );
break ;
2008-10-22 17:15:19 +00:00
default :
do_action ( 'wp_ajax_' . $_GET [ 'action' ] );
die ( '0' );
break ;
endswitch ;
endif ;
2008-01-03 01:34:11 +00:00
2008-12-14 12:13:30 +00:00
/**
* Sends back current comment total and new page links if they need to be updated .
*
* Contrary to normal success AJAX response ( " 1 " ), die with time () on success .
*
* @ since 2.7
*
* @ param int $comment_id
* @ return die
*/
2011-01-22 18:47:42 +00:00
function _wp_ajax_delete_comment_response ( $comment_id , $delta = - 1 ) {
2008-12-14 12:13:30 +00:00
$total = ( int ) @ $_POST [ '_total' ];
$per_page = ( int ) @ $_POST [ '_per_page' ];
$page = ( int ) @ $_POST [ '_page' ];
2009-05-18 16:00:33 +00:00
$url = esc_url_raw ( @ $_POST [ '_url' ] );
2009-04-27 18:36:27 +00:00
// JS didn't send us everything we need to know. Just die with success message
2008-12-14 12:13:30 +00:00
if ( ! $total || ! $per_page || ! $page || ! $url )
die ( ( string ) time () );
2011-01-22 18:47:42 +00:00
$total += $delta ;
if ( $total < 0 )
2008-12-14 12:13:30 +00:00
$total = 0 ;
2011-01-22 18:47:42 +00:00
// Only do the expensive stuff on a page-break, and about 1 other time per page
if ( 0 == $total % $per_page || 1 == mt_rand ( 1 , $per_page ) ) {
$post_id = 0 ;
$status = 'total_comments' ; // What type of comment count are we looking for?
$parsed = parse_url ( $url );
if ( isset ( $parsed [ 'query' ] ) ) {
parse_str ( $parsed [ 'query' ], $query_vars );
if ( ! empty ( $query_vars [ 'comment_status' ] ) )
$status = $query_vars [ 'comment_status' ];
if ( ! empty ( $query_vars [ 'p' ] ) )
$post_id = ( int ) $query_vars [ 'p' ];
}
2008-12-14 12:13:30 +00:00
2011-01-22 18:47:42 +00:00
$comment_count = wp_count_comments ( $post_id );
if ( isset ( $comment_count -> $status ) ) // We're looking for a known type of comment count
$total = $comment_count -> $status ;
// else use the decremented value from above
2008-12-14 12:13:30 +00:00
}
$time = time (); // The time since the last comment count
$x = new WP_Ajax_Response ( array (
'what' => 'comment' ,
'id' => $comment_id , // here for completeness - not used
'supplemental' => array (
2011-01-22 18:47:42 +00:00
'total_items_i18n' => sprintf ( _n ( '1 item' , '%s items' , $total ), number_format_i18n ( $total ) ),
'total_pages' => ceil ( $total / $per_page ),
'total_pages_i18n' => number_format_i18n ( ceil ( $total / $per_page ) ),
2008-12-14 12:13:30 +00:00
'total' => $total ,
'time' => $time
)
) );
$x -> send ();
}
2010-01-22 19:30:05 +00:00
function _wp_ajax_add_hierarchical_term () {
$action = $_POST [ 'action' ];
$taxonomy = get_taxonomy ( substr ( $action , 4 ));
2010-05-26 04:55:21 +00:00
check_ajax_referer ( $action , '_ajax_nonce-add-' . $taxonomy -> name );
2010-05-13 04:10:17 +00:00
if ( ! current_user_can ( $taxonomy -> cap -> edit_terms ) )
2010-01-22 19:30:05 +00:00
die ( '-1' );
$names = explode ( ',' , $_POST [ 'new' . $taxonomy -> name ]);
$parent = isset ( $_POST [ 'new' . $taxonomy -> name . '_parent' ]) ? ( int ) $_POST [ 'new' . $taxonomy -> name . '_parent' ] : 0 ;
if ( 0 > $parent )
$parent = 0 ;
if ( $taxonomy -> name == 'category' )
$post_category = isset ( $_POST [ 'post_category' ]) ? ( array ) $_POST [ 'post_category' ] : array ();
else
$post_category = ( isset ( $_POST [ 'tax_input' ]) && isset ( $_POST [ 'tax_input' ][ $taxonomy -> name ]) ) ? ( array ) $_POST [ 'tax_input' ][ $taxonomy -> name ] : array ();
$checked_categories = array_map ( 'absint' , ( array ) $post_category );
$popular_ids = wp_popular_terms_checklist ( $taxonomy -> name , 0 , 10 , false );
foreach ( $names as $cat_name ) {
$cat_name = trim ( $cat_name );
$category_nicename = sanitize_title ( $cat_name );
if ( '' === $category_nicename )
continue ;
2010-06-11 15:53:41 +00:00
if ( ! ( $cat_id = term_exists ( $cat_name , $taxonomy -> name , $parent )) ) {
2010-01-22 19:30:05 +00:00
$new_term = wp_insert_term ( $cat_name , $taxonomy -> name , array ( 'parent' => $parent ));
$cat_id = $new_term [ 'term_id' ];
}
$checked_categories [] = $cat_id ;
if ( $parent ) // Do these all at once in a second
continue ;
$category = get_term ( $cat_id , $taxonomy -> name );
ob_start ();
wp_terms_checklist ( 0 , array ( 'taxonomy' => $taxonomy -> name , 'descendants_and_self' => $cat_id , 'selected_cats' => $checked_categories , 'popular_cats' => $popular_ids ));
$data = ob_get_contents ();
ob_end_clean ();
$add = array (
'what' => $taxonomy -> name ,
'id' => $cat_id ,
'data' => str_replace ( array ( " \n " , " \t " ), '' , $data ),
'position' => - 1
);
}
if ( $parent ) { // Foncy - replace the parent and all its children
$parent = get_term ( $parent , $taxonomy -> name );
$term_id = $parent -> term_id ;
while ( $parent -> parent ) { // get the top parent
$parent = & get_term ( $parent -> parent , $taxonomy -> name );
if ( is_wp_error ( $parent ) )
break ;
$term_id = $parent -> term_id ;
}
ob_start ();
wp_terms_checklist ( 0 , array ( 'taxonomy' => $taxonomy -> name , 'descendants_and_self' => $term_id , 'selected_cats' => $checked_categories , 'popular_cats' => $popular_ids ));
$data = ob_get_contents ();
ob_end_clean ();
$add = array (
'what' => $taxonomy -> name ,
'id' => $term_id ,
'data' => str_replace ( array ( " \n " , " \t " ), '' , $data ),
'position' => - 1
);
}
ob_start ();
2010-05-14 00:34:04 +00:00
wp_dropdown_categories ( array (
'taxonomy' => $taxonomy -> name , 'hide_empty' => 0 , 'name' => 'new' . $taxonomy -> name . '_parent' , 'orderby' => 'name' ,
'hierarchical' => 1 , 'show_option_none' => '— ' . $taxonomy -> labels -> parent_item . ' —'
) );
2010-01-22 19:30:05 +00:00
$sup = ob_get_contents ();
ob_end_clean ();
$add [ 'supplemental' ] = array ( 'newcat_parent' => $sup );
$x = new WP_Ajax_Response ( $add );
$x -> send ();
}
2008-02-22 17:43:56 +00:00
$id = isset ( $_POST [ 'id' ]) ? ( int ) $_POST [ 'id' ] : 0 ;
2007-10-09 22:49:42 +00:00
switch ( $action = $_POST [ 'action' ] ) :
2008-12-14 12:13:30 +00:00
case 'delete-comment' : // On success, die with time() instead of 1
2006-03-29 01:51:55 +00:00
if ( ! $comment = get_comment ( $id ) )
2008-12-14 12:13:30 +00:00
die ( ( string ) time () );
2011-07-11 21:48:43 +00:00
if ( ! current_user_can ( 'edit_comment' , $comment -> comment_ID ) )
2006-03-29 01:51:55 +00:00
die ( '-1' );
2009-10-08 08:24:59 +00:00
check_ajax_referer ( " delete-comment_ $id " );
$status = wp_get_comment_status ( $comment -> comment_ID );
2011-01-22 18:47:42 +00:00
$delta = - 1 ;
2009-07-30 13:39:34 +00:00
if ( isset ( $_POST [ 'trash' ]) && 1 == $_POST [ 'trash' ] ) {
2009-10-08 08:24:59 +00:00
if ( 'trash' == $status )
2009-07-30 13:39:34 +00:00
die ( ( string ) time () );
$r = wp_trash_comment ( $comment -> comment_ID );
} elseif ( isset ( $_POST [ 'untrash' ]) && 1 == $_POST [ 'untrash' ] ) {
2009-10-08 08:24:59 +00:00
if ( 'trash' != $status )
die ( ( string ) time () );
2009-07-30 13:39:34 +00:00
$r = wp_untrash_comment ( $comment -> comment_ID );
2011-01-22 18:47:42 +00:00
if ( ! isset ( $_POST [ 'comment_status' ] ) || $_POST [ 'comment_status' ] != 'trash' ) // undo trash, not in trash
$delta = 1 ;
2009-07-30 13:39:34 +00:00
} elseif ( isset ( $_POST [ 'spam' ]) && 1 == $_POST [ 'spam' ] ) {
2009-10-08 08:24:59 +00:00
if ( 'spam' == $status )
2008-12-14 12:13:30 +00:00
die ( ( string ) time () );
2009-11-27 10:34:09 +00:00
$r = wp_spam_comment ( $comment -> comment_ID );
} elseif ( isset ( $_POST [ 'unspam' ]) && 1 == $_POST [ 'unspam' ] ) {
if ( 'spam' != $status )
die ( ( string ) time () );
$r = wp_unspam_comment ( $comment -> comment_ID );
2011-01-22 18:47:42 +00:00
if ( ! isset ( $_POST [ 'comment_status' ] ) || $_POST [ 'comment_status' ] != 'spam' ) // undo spam, not in spam
$delta = 1 ;
2009-10-08 08:24:59 +00:00
} elseif ( isset ( $_POST [ 'delete' ]) && 1 == $_POST [ 'delete' ] ) {
2009-07-30 13:39:34 +00:00
$r = wp_delete_comment ( $comment -> comment_ID );
2009-10-08 08:24:59 +00:00
} else {
die ( '-1' );
2008-07-09 02:00:21 +00:00
}
2009-10-08 08:24:59 +00:00
2008-12-14 12:13:30 +00:00
if ( $r ) // Decide if we need to send back '1' or a more complicated response including page links and comment counts
2011-01-22 18:47:42 +00:00
_wp_ajax_delete_comment_response ( $comment -> comment_ID , $delta );
2008-12-14 12:13:30 +00:00
die ( '0' );
2006-03-29 01:51:55 +00:00
break ;
2008-01-25 19:29:01 +00:00
case 'delete-tag' :
2009-07-01 08:12:39 +00:00
$tag_id = ( int ) $_POST [ 'tag_ID' ];
check_ajax_referer ( " delete-tag_ $tag_id " );
2008-01-25 19:29:01 +00:00
2009-07-01 08:12:39 +00:00
$taxonomy = ! empty ( $_POST [ 'taxonomy' ]) ? $_POST [ 'taxonomy' ] : 'post_tag' ;
2010-01-26 11:32:04 +00:00
$tax = get_taxonomy ( $taxonomy );
2010-05-13 04:10:17 +00:00
if ( ! current_user_can ( $tax -> cap -> delete_terms ) )
2010-01-26 11:32:04 +00:00
die ( '-1' );
2009-02-12 00:00:01 +00:00
2009-07-01 08:12:39 +00:00
$tag = get_term ( $tag_id , $taxonomy );
2008-07-09 02:00:21 +00:00
if ( ! $tag || is_wp_error ( $tag ) )
die ( '1' );
2009-07-01 08:12:39 +00:00
if ( wp_delete_term ( $tag_id , $taxonomy ))
2008-01-25 19:29:01 +00:00
die ( '1' );
2008-07-09 02:00:21 +00:00
else
die ( '0' );
2008-01-25 19:29:01 +00:00
break ;
2006-03-29 01:51:55 +00:00
case 'delete-link' :
2007-10-09 22:49:42 +00:00
check_ajax_referer ( " delete-bookmark_ $id " );
2006-03-29 01:51:55 +00:00
if ( ! current_user_can ( 'manage_links' ) )
die ( '-1' );
2008-07-09 02:00:21 +00:00
$link = get_bookmark ( $id );
if ( ! $link || is_wp_error ( $link ) )
die ( '1' );
2006-03-29 01:51:55 +00:00
if ( wp_delete_link ( $id ) )
die ( '1' );
2008-07-09 02:00:21 +00:00
else
die ( '0' );
2006-03-29 01:51:55 +00:00
break ;
case 'delete-meta' :
2008-03-22 08:15:48 +00:00
check_ajax_referer ( " delete-meta_ $id " );
2011-07-20 22:04:35 +00:00
if ( ! $meta = get_metadata_by_mid ( 'post' , $id ) )
2008-07-09 02:00:21 +00:00
die ( '1' );
2011-07-20 22:04:35 +00:00
if ( is_protected_meta ( $meta -> meta_key , 'post' ) || ! current_user_can ( 'delete_post_meta' , $meta -> post_id , $meta -> meta_key ) )
2006-03-29 01:51:55 +00:00
die ( '-1' );
if ( delete_meta ( $meta -> meta_id ) )
die ( '1' );
die ( '0' );
break ;
case 'delete-post' :
2007-10-09 22:49:42 +00:00
check_ajax_referer ( " { $action } _ $id " );
2006-03-29 01:51:55 +00:00
if ( ! current_user_can ( 'delete_post' , $id ) )
die ( '-1' );
2008-07-09 02:00:21 +00:00
if ( ! get_post ( $id ) )
die ( '1' );
2006-03-29 01:51:55 +00:00
if ( wp_delete_post ( $id ) )
die ( '1' );
2007-10-09 22:49:42 +00:00
else
die ( '0' );
2006-03-29 01:51:55 +00:00
break ;
2009-08-19 08:35:24 +00:00
case 'trash-post' :
2009-10-30 07:09:55 +00:00
case 'untrash-post' :
2009-08-19 08:35:24 +00:00
check_ajax_referer ( " { $action } _ $id " );
if ( ! current_user_can ( 'delete_post' , $id ) )
die ( '-1' );
if ( ! get_post ( $id ) )
die ( '1' );
2009-10-30 07:09:55 +00:00
if ( 'trash-post' == $action )
$done = wp_trash_post ( $id );
2009-08-19 08:35:24 +00:00
else
2009-10-30 07:09:55 +00:00
$done = wp_untrash_post ( $id );
if ( $done )
die ( '1' );
die ( '0' );
2009-08-19 08:35:24 +00:00
break ;
2006-03-29 01:51:55 +00:00
case 'delete-page' :
2007-10-09 22:49:42 +00:00
check_ajax_referer ( " { $action } _ $id " );
2006-03-29 01:51:55 +00:00
if ( ! current_user_can ( 'delete_page' , $id ) )
die ( '-1' );
2008-07-09 02:00:21 +00:00
if ( ! get_page ( $id ) )
die ( '1' );
2006-03-29 01:51:55 +00:00
if ( wp_delete_post ( $id ) )
die ( '1' );
2008-07-09 02:00:21 +00:00
else
die ( '0' );
2006-03-29 01:51:55 +00:00
break ;
2008-12-14 12:13:30 +00:00
case 'dim-comment' : // On success, die with time() instead of 1
2009-03-02 21:48:37 +00:00
if ( ! $comment = get_comment ( $id ) ) {
$x = new WP_Ajax_Response ( array (
'what' => 'comment' ,
'id' => new WP_Error ( 'invalid_comment' , sprintf ( __ ( 'Comment %d does not exist' ), $id ))
) );
$x -> send ();
}
2008-07-09 02:00:21 +00:00
2011-07-11 21:48:43 +00:00
if ( ! current_user_can ( 'edit_comment' , $comment -> comment_ID ) && ! current_user_can ( 'moderate_comments' ) )
2006-03-29 01:51:55 +00:00
die ( '-1' );
2008-07-09 02:00:21 +00:00
$current = wp_get_comment_status ( $comment -> comment_ID );
if ( $_POST [ 'new' ] == $current )
2008-12-14 12:13:30 +00:00
die ( ( string ) time () );
2008-07-09 02:00:21 +00:00
2009-10-08 08:24:59 +00:00
check_ajax_referer ( " approve-comment_ $id " );
if ( in_array ( $current , array ( 'unapproved' , 'spam' ) ) )
2009-03-02 21:48:37 +00:00
$result = wp_set_comment_status ( $comment -> comment_ID , 'approve' , true );
2009-10-08 08:24:59 +00:00
else
2009-03-02 21:48:37 +00:00
$result = wp_set_comment_status ( $comment -> comment_ID , 'hold' , true );
2009-10-08 08:24:59 +00:00
2009-03-02 21:48:37 +00:00
if ( is_wp_error ( $result ) ) {
$x = new WP_Ajax_Response ( array (
'what' => 'comment' ,
'id' => $result
) );
$x -> send ();
}
// Decide if we need to send back '1' or a more complicated response including page links and comment counts
_wp_ajax_delete_comment_response ( $comment -> comment_ID );
2008-12-14 12:13:30 +00:00
die ( '0' );
2006-03-29 01:51:55 +00:00
break ;
2007-06-02 02:53:09 +00:00
case 'add-link-category' : // On the Fly
2007-10-09 22:49:42 +00:00
check_ajax_referer ( $action );
2007-06-02 02:53:09 +00:00
if ( ! current_user_can ( 'manage_categories' ) )
die ( '-1' );
$names = explode ( ',' , $_POST [ 'newcat' ]);
$x = new WP_Ajax_Response ();
foreach ( $names as $cat_name ) {
$cat_name = trim ( $cat_name );
2007-11-01 06:23:16 +00:00
$slug = sanitize_title ( $cat_name );
if ( '' === $slug )
continue ;
2010-06-11 15:53:41 +00:00
if ( ! $cat_id = term_exists ( $cat_name , 'link_category' ) ) {
2007-06-02 02:53:09 +00:00
$cat_id = wp_insert_term ( $cat_name , 'link_category' );
}
2007-10-09 22:49:42 +00:00
$cat_id = $cat_id [ 'term_id' ];
2009-05-18 15:11:07 +00:00
$cat_name = esc_html ( stripslashes ( $cat_name ));
2007-06-02 02:53:09 +00:00
$x -> add ( array (
'what' => 'link-category' ,
'id' => $cat_id ,
2009-05-05 19:43:53 +00:00
'data' => " <li id='link-category- $cat_id '><label for='in-link-category- $cat_id ' class='selectit'><input value=' " . esc_attr ( $cat_id ) . " ' type='checkbox' checked='checked' name='link_category[]' id='in-link-category- $cat_id '/> $cat_name </label></li> " ,
2007-10-09 22:49:42 +00:00
'position' => - 1
2007-06-02 02:53:09 +00:00
) );
}
$x -> send ();
break ;
2010-08-11 21:54:51 +00:00
case 'add-tag' :
2011-05-23 23:33:30 +00:00
check_ajax_referer ( 'add-tag' , '_wpnonce_add-tag' );
2010-06-27 01:05:53 +00:00
$post_type = ! empty ( $_POST [ 'post_type' ]) ? $_POST [ 'post_type' ] : 'post' ;
2009-07-01 08:12:39 +00:00
$taxonomy = ! empty ( $_POST [ 'taxonomy' ]) ? $_POST [ 'taxonomy' ] : 'post_tag' ;
2010-01-26 11:32:04 +00:00
$tax = get_taxonomy ( $taxonomy );
2010-05-13 04:10:17 +00:00
if ( ! current_user_can ( $tax -> cap -> edit_terms ) )
2010-01-26 11:32:04 +00:00
die ( '-1' );
2010-08-11 21:54:51 +00:00
$x = new WP_Ajax_Response ();
2009-07-01 08:12:39 +00:00
$tag = wp_insert_term ( $_POST [ 'tag-name' ], $taxonomy , $_POST );
2008-01-25 19:29:01 +00:00
2009-07-01 08:12:39 +00:00
if ( ! $tag || is_wp_error ( $tag ) || ( ! $tag = get_term ( $tag [ 'term_id' ], $taxonomy )) ) {
2010-12-02 23:30:21 +00:00
$message = __ ( 'An error has occurred. Please reload the page and try again.' );
2010-02-13 05:40:47 +00:00
if ( is_wp_error ( $tag ) && $tag -> get_error_message () )
$message = $tag -> get_error_message ();
$x -> add ( array (
'what' => 'taxonomy' ,
'data' => new WP_Error ( 'error' , $message )
) );
$x -> send ();
2008-01-25 19:29:01 +00:00
}
2010-11-14 18:19:45 +00:00
set_current_screen ( $_POST [ 'screen' ] );
2010-06-09 16:52:25 +00:00
2011-01-18 11:06:22 +00:00
$wp_list_table = _get_list_table ( 'WP_Terms_List_Table' );
2010-08-11 21:54:51 +00:00
2010-01-24 11:00:27 +00:00
$level = 0 ;
if ( is_taxonomy_hierarchical ( $taxonomy ) ) {
2010-09-18 19:30:53 +00:00
$level = count ( get_ancestors ( $tag -> term_id , $taxonomy ) );
ob_start ();
$wp_list_table -> single_row ( $tag , $level );
$noparents = ob_get_clean ();
2010-04-25 07:35:16 +00:00
}
2010-09-18 19:30:53 +00:00
ob_start ();
$wp_list_table -> single_row ( $tag );
$parents = ob_get_clean ();
2010-02-13 05:40:47 +00:00
$x -> add ( array (
'what' => 'taxonomy' ,
'supplemental' => compact ( 'parents' , 'noparents' )
) );
$x -> add ( array (
'what' => 'term' ,
'position' => $level ,
2010-12-12 10:29:19 +00:00
'supplemental' => ( array ) $tag
2010-02-13 05:40:47 +00:00
) );
$x -> send ();
2008-01-25 19:29:01 +00:00
break ;
2008-11-04 23:15:59 +00:00
case 'get-tagcloud' :
2010-12-07 18:59:25 +00:00
if ( isset ( $_POST [ 'tax' ] ) ) {
$taxonomy = sanitize_key ( $_POST [ 'tax' ] );
$tax = get_taxonomy ( $taxonomy );
if ( ! $tax )
die ( '0' );
if ( ! current_user_can ( $tax -> cap -> assign_terms ) )
die ( '-1' );
} else {
2008-12-18 19:12:26 +00:00
die ( '0' );
2010-12-07 18:59:25 +00:00
}
2009-02-01 09:45:24 +00:00
2008-12-18 19:12:26 +00:00
$tags = get_terms ( $taxonomy , array ( 'number' => 45 , 'orderby' => 'count' , 'order' => 'DESC' ) );
2008-12-09 18:03:31 +00:00
2010-12-07 18:59:25 +00:00
if ( empty ( $tags ) )
2010-03-01 21:04:37 +00:00
die ( isset ( $tax -> no_tagcloud ) ? $tax -> no_tagcloud : __ ( 'No tags found!' ) );
2008-12-09 18:03:31 +00:00
2010-12-07 18:59:25 +00:00
if ( is_wp_error ( $tags ) )
die ( $tags -> get_error_message () );
2008-12-30 18:04:52 +00:00
2008-11-04 23:15:59 +00:00
foreach ( $tags as $key => $tag ) {
$tags [ $key ] -> link = '#' ;
$tags [ $key ] -> id = $tag -> term_id ;
}
2009-05-02 18:43:04 +00:00
// We need raw tag names here, so don't filter the output
$return = wp_generate_tag_cloud ( $tags , array ( 'filter' => 0 ) );
2008-11-04 23:15:59 +00:00
if ( empty ( $return ) )
die ( '0' );
2008-12-09 18:03:31 +00:00
2008-11-04 23:15:59 +00:00
echo $return ;
2008-12-09 18:03:31 +00:00
2008-11-04 23:15:59 +00:00
exit ;
break ;
2008-10-17 09:44:22 +00:00
case 'get-comments' :
check_ajax_referer ( $action );
2010-11-14 18:19:45 +00:00
set_current_screen ( 'edit-comments' );
2011-01-18 11:06:22 +00:00
$wp_list_table = _get_list_table ( 'WP_Post_Comments_List_Table' );
2010-09-18 17:46:29 +00:00
2010-11-29 20:15:04 +00:00
if ( ! current_user_can ( 'edit_post' , $post_id ) )
die ( '-1' );
2010-08-22 11:22:46 +00:00
$wp_list_table -> prepare_items ();
2008-10-17 09:44:22 +00:00
2010-08-22 11:22:46 +00:00
if ( ! $wp_list_table -> has_items () )
2008-10-17 09:44:22 +00:00
die ( '1' );
$x = new WP_Ajax_Response ();
2011-05-12 05:50:53 +00:00
ob_start ();
2010-08-22 11:22:46 +00:00
foreach ( $wp_list_table -> items as $comment ) {
2011-10-19 16:41:26 +00:00
if ( ! current_user_can ( 'edit_comment' , $comment -> comment_ID ) )
2011-07-11 21:48:43 +00:00
continue ;
2008-10-17 09:44:22 +00:00
get_comment ( $comment );
2011-05-12 05:50:53 +00:00
$wp_list_table -> single_row ( $comment );
2008-10-17 09:44:22 +00:00
}
2011-05-12 05:50:53 +00:00
$comment_list_item = ob_get_contents ();
ob_end_clean ();
2008-10-17 09:44:22 +00:00
$x -> add ( array (
'what' => 'comments' ,
'data' => $comment_list_item
) );
$x -> send ();
break ;
2008-08-24 06:56:22 +00:00
case 'replyto-comment' :
2010-05-26 04:55:21 +00:00
check_ajax_referer ( $action , '_ajax_nonce-replyto-comment' );
2008-08-24 06:56:22 +00:00
2010-11-08 23:07:37 +00:00
set_current_screen ( 'edit-comments' );
2008-08-24 06:56:22 +00:00
$comment_post_ID = ( int ) $_POST [ 'comment_post_ID' ];
if ( ! current_user_can ( 'edit_post' , $comment_post_ID ) )
die ( '-1' );
$status = $wpdb -> get_var ( $wpdb -> prepare ( " SELECT post_status FROM $wpdb->posts WHERE ID = %d " , $comment_post_ID ) );
if ( empty ( $status ) )
die ( '1' );
2009-12-14 03:03:58 +00:00
elseif ( in_array ( $status , array ( 'draft' , 'pending' , 'trash' ) ) )
2011-09-30 17:18:35 +00:00
die ( __ ( 'ERROR: you are replying to a comment on a draft post.' ) );
2008-08-24 06:56:22 +00:00
$user = wp_get_current_user ();
if ( $user -> ID ) {
$comment_author = $wpdb -> escape ( $user -> display_name );
$comment_author_email = $wpdb -> escape ( $user -> user_email );
$comment_author_url = $wpdb -> escape ( $user -> user_url );
2008-10-08 01:18:16 +00:00
$comment_content = trim ( $_POST [ 'content' ]);
2011-10-01 00:19:07 +00:00
if ( current_user_can ( 'unfiltered_html' ) ) {
if ( wp_create_nonce ( 'unfiltered-html-comment' ) != $_POST [ '_wp_unfiltered_html_comment' ] ) {
2008-08-24 06:56:22 +00:00
kses_remove_filters (); // start with a clean slate
kses_init_filters (); // set up the filters
}
}
} else {
die ( __ ( 'Sorry, you must be logged in to reply to a comment.' ) );
}
if ( '' == $comment_content )
2011-09-30 17:18:35 +00:00
die ( __ ( 'ERROR: please type a comment.' ) );
2008-08-24 06:56:22 +00:00
$comment_parent = absint ( $_POST [ 'comment_ID' ]);
2011-06-01 19:23:19 +00:00
$comment_auto_approved = false ;
2008-08-24 06:56:22 +00:00
$commentdata = compact ( 'comment_post_ID' , 'comment_author' , 'comment_author_email' , 'comment_author_url' , 'comment_content' , 'comment_type' , 'comment_parent' , 'user_ID' );
$comment_id = wp_new_comment ( $commentdata );
$comment = get_comment ( $comment_id );
if ( ! $comment ) die ( '1' );
2011-05-07 04:56:00 +00:00
$position = ( isset ( $_POST [ 'position' ]) && ( int ) $_POST [ 'position' ] ) ? ( int ) $_POST [ 'position' ] : '-1' ;
2008-08-24 06:56:22 +00:00
2011-06-01 19:23:19 +00:00
// automatically approve parent comment
if ( ! empty ( $_POST [ 'approve_parent' ]) ) {
$parent = get_comment ( $comment_parent );
if ( $parent && $parent -> comment_approved === '0' && $parent -> comment_post_ID == $comment_post_ID ) {
if ( wp_set_comment_status ( $parent -> comment_ID , 'approve' ) )
$comment_auto_approved = true ;
}
}
2008-08-24 06:56:22 +00:00
ob_start ();
2010-12-14 15:07:43 +00:00
if ( 'dashboard' == $_REQUEST [ 'mode' ] ) {
2008-10-08 23:32:34 +00:00
require_once ( ABSPATH . 'wp-admin/includes/dashboard.php' );
2010-09-18 17:46:29 +00:00
_wp_dashboard_recent_comments_row ( $comment );
2008-10-08 23:32:34 +00:00
} else {
2010-12-22 19:03:43 +00:00
if ( 'single' == $_REQUEST [ 'mode' ] ) {
2011-01-18 11:06:22 +00:00
$wp_list_table = _get_list_table ( 'WP_Post_Comments_List_Table' );
2011-01-06 04:11:14 +00:00
} else {
2011-01-18 11:06:22 +00:00
$wp_list_table = _get_list_table ( 'WP_Comments_List_Table' );
2010-12-22 19:03:43 +00:00
}
2010-09-18 17:46:29 +00:00
$wp_list_table -> single_row ( $comment );
2008-10-08 23:32:34 +00:00
}
2008-08-24 06:56:22 +00:00
$comment_list_item = ob_get_contents ();
ob_end_clean ();
2011-05-07 04:56:00 +00:00
$response = array (
2008-08-24 06:56:22 +00:00
'what' => 'comment' ,
'id' => $comment -> comment_ID ,
'data' => $comment_list_item ,
'position' => $position
2011-05-07 04:56:00 +00:00
);
2011-06-01 19:23:19 +00:00
if ( $comment_auto_approved )
$response [ 'supplemental' ] = array ( 'parent_approved' => $parent -> comment_ID );
2011-05-07 04:56:00 +00:00
$x = new WP_Ajax_Response ();
$x -> add ( $response );
2008-10-08 01:18:16 +00:00
$x -> send ();
break ;
case 'edit-comment' :
2010-05-26 04:55:21 +00:00
check_ajax_referer ( 'replyto-comment' , '_ajax_nonce-replyto-comment' );
2008-10-08 01:18:16 +00:00
2010-11-19 09:34:21 +00:00
set_current_screen ( 'edit-comments' );
2011-07-11 21:48:43 +00:00
$comment_id = ( int ) $_POST [ 'comment_ID' ];
if ( ! current_user_can ( 'edit_comment' , $comment_id ) )
2008-10-08 01:18:16 +00:00
die ( '-1' );
if ( '' == $_POST [ 'content' ] )
2011-09-30 17:18:35 +00:00
die ( __ ( 'ERROR: please type a comment.' ) );
2008-10-08 01:18:16 +00:00
$_POST [ 'comment_status' ] = $_POST [ 'status' ];
edit_comment ();
$position = ( isset ( $_POST [ 'position' ]) && ( int ) $_POST [ 'position' ]) ? ( int ) $_POST [ 'position' ] : '-1' ;
2010-09-18 17:46:29 +00:00
$comments_status = isset ( $_POST [ 'comments_listing' ]) ? $_POST [ 'comments_listing' ] : '' ;
2008-10-08 01:18:16 +00:00
2010-09-18 17:46:29 +00:00
$checkbox = ( isset ( $_POST [ 'checkbox' ]) && true == $_POST [ 'checkbox' ] ) ? 1 : 0 ;
2011-01-18 11:06:22 +00:00
$wp_list_table = _get_list_table ( $checkbox ? 'WP_Comments_List_Table' : 'WP_Post_Comments_List_Table' );
2008-10-08 01:18:16 +00:00
ob_start ();
2010-09-18 17:46:29 +00:00
$wp_list_table -> single_row ( get_comment ( $comment_id ) );
2008-10-08 01:18:16 +00:00
$comment_list_item = ob_get_contents ();
ob_end_clean ();
2010-08-11 21:54:51 +00:00
$x = new WP_Ajax_Response ();
2008-10-08 01:18:16 +00:00
$x -> add ( array (
'what' => 'edit_comment' ,
'id' => $comment -> comment_ID ,
'data' => $comment_list_item ,
'position' => $position
));
2007-03-27 21:20:16 +00:00
$x -> send ();
break ;
2010-04-27 01:05:58 +00:00
case 'add-menu-item' :
2010-05-12 19:19:57 +00:00
if ( ! current_user_can ( 'edit_theme_options' ) )
2010-04-27 01:05:58 +00:00
die ( '-1' );
2010-05-18 14:51:15 +00:00
check_ajax_referer ( 'add-menu_item' , 'menu-settings-column-nonce' );
2010-04-27 01:05:58 +00:00
require_once ABSPATH . 'wp-admin/includes/nav-menu.php' ;
2010-11-17 18:47:34 +00:00
// For performance reasons, we omit some object properties from the checklist.
2010-10-30 18:21:23 +00:00
// The following is a hacky way to restore them when adding non-custom items.
2010-10-30 22:41:52 +00:00
$menu_items_data = array ();
foreach ( ( array ) $_POST [ 'menu-item' ] as $menu_item_data ) {
if (
2010-11-17 18:47:34 +00:00
! empty ( $menu_item_data [ 'menu-item-type' ] ) &&
2010-10-30 22:41:52 +00:00
'custom' != $menu_item_data [ 'menu-item-type' ] &&
! empty ( $menu_item_data [ 'menu-item-object-id' ] )
) {
switch ( $menu_item_data [ 'menu-item-type' ] ) {
case 'post_type' :
$_object = get_post ( $menu_item_data [ 'menu-item-object-id' ] );
break ;
2010-10-30 00:13:45 +00:00
2010-10-30 22:41:52 +00:00
case 'taxonomy' :
2010-11-17 18:47:34 +00:00
$_object = get_term ( $menu_item_data [ 'menu-item-object-id' ], $menu_item_data [ 'menu-item-object' ] );
2010-10-30 22:41:52 +00:00
break ;
}
2010-10-30 00:13:45 +00:00
2010-11-17 18:47:34 +00:00
$_menu_items = array_map ( 'wp_setup_nav_menu_item' , array ( $_object ) );
2010-10-30 22:41:52 +00:00
$_menu_item = array_shift ( $_menu_items );
2010-10-30 00:13:45 +00:00
2010-10-30 22:41:52 +00:00
// Restore the missing menu item properties
$menu_item_data [ 'menu-item-description' ] = $_menu_item -> description ;
}
2010-11-17 18:47:34 +00:00
2010-10-30 22:41:52 +00:00
$menu_items_data [] = $menu_item_data ;
2010-11-17 18:47:34 +00:00
}
2010-10-30 18:21:23 +00:00
2010-10-30 00:13:45 +00:00
$item_ids = wp_save_nav_menu_items ( 0 , $menu_items_data );
2010-05-27 22:22:09 +00:00
if ( is_wp_error ( $item_ids ) )
die ( '-1' );
2010-05-03 20:26:11 +00:00
2010-04-27 01:05:58 +00:00
foreach ( ( array ) $item_ids as $menu_item_id ) {
$menu_obj = get_post ( $menu_item_id );
if ( ! empty ( $menu_obj -> ID ) ) {
2010-05-28 20:41:39 +00:00
$menu_obj = wp_setup_nav_menu_item ( $menu_obj );
$menu_obj -> label = $menu_obj -> title ; // don't show "(pending)" in ajax-added items
$menu_items [] = $menu_obj ;
2010-04-27 01:05:58 +00:00
}
}
if ( ! empty ( $menu_items ) ) {
$args = array (
'after' => '' ,
'before' => '' ,
'link_after' => '' ,
'link_before' => '' ,
2010-05-03 20:26:11 +00:00
'walker' => new Walker_Nav_Menu_Edit ,
2010-04-27 01:05:58 +00:00
);
echo walk_nav_menu_tree ( $menu_items , 0 , ( object ) $args );
}
break ;
2006-03-29 01:51:55 +00:00
case 'add-meta' :
2010-05-26 04:55:21 +00:00
check_ajax_referer ( 'add-meta' , '_ajax_nonce-add-meta' );
2007-10-09 22:49:42 +00:00
$c = 0 ;
$pid = ( int ) $_POST [ 'post_id' ];
2010-05-25 15:32:57 +00:00
$post = get_post ( $pid );
2008-03-25 01:42:38 +00:00
if ( isset ( $_POST [ 'metakeyselect' ]) || isset ( $_POST [ 'metakeyinput' ]) ) {
2007-10-09 22:49:42 +00:00
if ( ! current_user_can ( 'edit_post' , $pid ) )
die ( '-1' );
2009-04-16 21:55:35 +00:00
if ( isset ( $_POST [ 'metakeyselect' ]) && '#NONE#' == $_POST [ 'metakeyselect' ] && empty ( $_POST [ 'metakeyinput' ]) )
2007-11-01 06:23:16 +00:00
die ( '1' );
2010-05-25 15:32:57 +00:00
if ( $post -> post_status == 'auto-draft' ) {
$save_POST = $_POST ; // Backup $_POST
$_POST = array (); // Make it empty for edit_post()
$_POST [ 'action' ] = 'draft' ; // Warning fix
$_POST [ 'post_ID' ] = $pid ;
$_POST [ 'post_type' ] = $post -> post_type ;
$_POST [ 'post_status' ] = 'draft' ;
2007-10-09 22:49:42 +00:00
$now = current_time ( 'timestamp' , 1 );
2010-05-25 15:32:57 +00:00
$_POST [ 'post_title' ] = sprintf ( 'Draft created on %s at %s' , date ( get_option ( 'date_format' ), $now ), date ( get_option ( 'time_format' ), $now ));
if ( $pid = edit_post () ) {
2007-10-09 22:49:42 +00:00
if ( is_wp_error ( $pid ) ) {
$x = new WP_Ajax_Response ( array (
'what' => 'meta' ,
'data' => $pid
) );
$x -> send ();
}
2010-05-25 15:32:57 +00:00
$_POST = $save_POST ; // Now we can restore original $_POST again
2009-04-20 10:58:50 +00:00
if ( ! $mid = add_meta ( $pid ) )
2009-04-16 21:55:35 +00:00
die ( __ ( 'Please provide a custom field value.' ));
2007-10-09 22:49:42 +00:00
} else {
die ( '0' );
}
} else if ( ! $mid = add_meta ( $pid ) ) {
2009-04-16 21:55:35 +00:00
die ( __ ( 'Please provide a custom field value.' ));
2007-10-09 22:49:42 +00:00
}
2006-09-02 17:03:57 +00:00
2011-07-20 22:04:35 +00:00
$meta = get_metadata_by_mid ( 'post' , $mid );
2007-10-09 22:49:42 +00:00
$pid = ( int ) $meta -> post_id ;
$meta = get_object_vars ( $meta );
$x = new WP_Ajax_Response ( array (
'what' => 'meta' ,
'id' => $mid ,
'data' => _list_meta_row ( $meta , $c ),
'position' => 1 ,
'supplemental' => array ( 'postid' => $pid )
) );
2010-02-28 07:12:05 +00:00
} else { // Update?
2011-10-31 19:46:10 +00:00
$mid = ( int ) key ( $_POST [ 'meta' ] );
2011-08-03 19:14:06 +00:00
$key = stripslashes ( $_POST [ 'meta' ][ $mid ][ 'key' ] );
$value = stripslashes ( $_POST [ 'meta' ][ $mid ][ 'value' ] );
2010-04-24 03:53:47 +00:00
if ( '' == trim ( $key ) )
die ( __ ( 'Please provide a custom field name.' ));
if ( '' == trim ( $value ) )
die ( __ ( 'Please provide a custom field value.' ));
2011-08-03 19:14:06 +00:00
if ( ! $meta = get_metadata_by_mid ( 'post' , $mid ) )
2007-10-09 22:49:42 +00:00
die ( '0' ); // if meta doesn't exist
2011-07-21 19:32:12 +00:00
if ( is_protected_meta ( $meta -> meta_key , 'post' ) || is_protected_meta ( $key , 'post' ) ||
! current_user_can ( 'edit_post_meta' , $meta -> post_id , $meta -> meta_key ) ||
! current_user_can ( 'edit_post_meta' , $meta -> post_id , $key ) )
2011-05-22 23:19:42 +00:00
die ( '-1' );
2011-08-03 19:14:06 +00:00
if ( $meta -> meta_value != $value || $meta -> meta_key != $key ) {
if ( ! $u = update_metadata_by_mid ( 'post' , $mid , $value , $key ) )
2009-06-26 06:19:54 +00:00
die ( '0' ); // We know meta exists; we also know it's unchanged (or DB error, in which case there are bigger problems).
}
2009-04-20 10:58:50 +00:00
2006-09-13 21:39:53 +00:00
$x = new WP_Ajax_Response ( array (
'what' => 'meta' ,
2007-10-09 22:49:42 +00:00
'id' => $mid , 'old_id' => $mid ,
'data' => _list_meta_row ( array (
'meta_key' => $key ,
'meta_value' => $value ,
'meta_id' => $mid
), $c ),
'position' => 0 ,
2006-09-13 21:39:53 +00:00
'supplemental' => array ( 'postid' => $meta -> post_id )
) );
2006-03-29 01:51:55 +00:00
}
2007-10-09 22:49:42 +00:00
$x -> send ();
2006-03-29 01:51:55 +00:00
break ;
2006-04-02 00:31:26 +00:00
case 'add-user' :
2007-10-09 22:49:42 +00:00
check_ajax_referer ( $action );
2012-01-05 21:02:42 +00:00
if ( ! current_user_can ( 'create_users' ) )
2006-04-02 00:31:26 +00:00
die ( '-1' );
2012-01-05 21:02:42 +00:00
if ( ! $user_id = edit_user () ) {
2006-04-02 00:31:26 +00:00
die ( '0' );
2012-01-05 21:02:42 +00:00
} elseif ( is_wp_error ( $user_id ) ) {
2007-11-01 06:23:16 +00:00
$x = new WP_Ajax_Response ( array (
'what' => 'user' ,
'id' => $user_id
) );
$x -> send ();
2006-04-02 00:31:26 +00:00
}
2006-12-01 23:00:04 +00:00
$user_object = new WP_User ( $user_id );
2007-10-09 22:49:42 +00:00
2011-01-18 11:06:22 +00:00
$wp_list_table = _get_list_table ( 'WP_Users_List_Table' );
2010-08-11 21:54:51 +00:00
2006-09-13 21:39:53 +00:00
$x = new WP_Ajax_Response ( array (
'what' => 'user' ,
'id' => $user_id ,
2010-08-22 11:22:46 +00:00
'data' => $wp_list_table -> single_row ( $user_object , '' , $user_object -> roles [ 0 ] ),
2007-10-09 22:49:42 +00:00
'supplemental' => array (
'show-link' => sprintf ( __ ( 'User <a href="#%s">%s</a> added' ), " user- $user_id " , $user_object -> user_login ),
'role' => $user_object -> roles [ 0 ]
)
2006-09-13 21:39:53 +00:00
) );
$x -> send ();
2006-04-02 00:31:26 +00:00
break ;
2007-01-18 03:32:54 +00:00
case 'autosave' : // The name of this action is hardcoded in edit_post()
2008-04-18 23:38:21 +00:00
define ( 'DOING_AUTOSAVE' , true );
2008-05-08 17:25:07 +00:00
$nonce_age = check_ajax_referer ( 'autosave' , 'autosavenonce' );
2008-02-29 09:51:36 +00:00
2006-08-11 03:54:45 +00:00
$_POST [ 'post_category' ] = explode ( " , " , $_POST [ 'catslist' ]);
2010-01-15 23:49:09 +00:00
if ( $_POST [ 'post_type' ] == 'page' || empty ( $_POST [ 'post_category' ]) )
2007-02-27 15:24:54 +00:00
unset ( $_POST [ 'post_category' ]);
2008-02-29 09:51:36 +00:00
$do_autosave = ( bool ) $_POST [ 'autosave' ];
$do_lock = true ;
2011-04-16 02:37:44 +00:00
$data = $alert = '' ;
2009-03-13 03:53:39 +00:00
/* translators: draft saved date format, see http://php.net/date */
$draft_saved_date_format = __ ( 'g:i:s a' );
2010-04-19 15:08:48 +00:00
/* translators: %s: date and time */
2010-01-21 21:37:43 +00:00
$message = sprintf ( __ ( 'Draft saved at %s.' ), date_i18n ( $draft_saved_date_format ) );
2008-02-29 09:51:36 +00:00
$supplemental = array ();
2009-10-11 11:26:59 +00:00
if ( isset ( $login_grace_period ) )
2011-05-07 03:26:23 +00:00
$alert .= sprintf ( __ ( 'Your login has expired. Please open a new browser window and <a href="%s" target="_blank">log in again</a>. ' ), add_query_arg ( 'interim-login' , 1 , wp_login_url () ) );
2008-02-29 09:51:36 +00:00
2008-05-08 17:25:07 +00:00
$id = $revision_id = 0 ;
2010-02-06 10:07:57 +00:00
$post_ID = ( int ) $_POST [ 'post_ID' ];
$_POST [ 'ID' ] = $post_ID ;
$post = get_post ( $post_ID );
if ( 'auto-draft' == $post -> post_status )
2008-05-08 17:25:07 +00:00
$_POST [ 'post_status' ] = 'draft' ;
2008-02-29 09:51:36 +00:00
2010-02-06 10:07:57 +00:00
if ( $last = wp_check_post_lock ( $post -> ID ) ) {
$do_autosave = $do_lock = false ;
2008-02-29 09:51:36 +00:00
2010-02-06 10:07:57 +00:00
$last_user = get_userdata ( $last );
$last_user_name = $last_user ? $last_user -> display_name : __ ( 'Someone' );
2011-04-16 02:37:44 +00:00
$data = __ ( 'Autosave disabled.' );
2008-05-08 17:25:07 +00:00
2010-02-06 10:07:57 +00:00
$supplemental [ 'disable_autosave' ] = 'disable' ;
2011-04-16 02:37:44 +00:00
$alert .= sprintf ( __ ( '%s is currently editing this article. If you update it, you will overwrite the changes.' ), esc_html ( $last_user_name ) );
2010-02-06 10:07:57 +00:00
}
if ( 'page' == $post -> post_type ) {
if ( ! current_user_can ( 'edit_page' , $post_ID ) )
die ( __ ( 'You are not allowed to edit this page.' ));
} else {
if ( ! current_user_can ( 'edit_post' , $post_ID ) )
die ( __ ( 'You are not allowed to edit this post.' ));
}
if ( $do_autosave ) {
// Drafts and auto-drafts are just overwritten by autosave
if ( 'auto-draft' == $post -> post_status || 'draft' == $post -> post_status ) {
$id = edit_post ();
2011-12-13 23:45:31 +00:00
} else { // Non drafts are not overwritten. The autosave is stored in a special post revision.
2010-02-06 10:07:57 +00:00
$revision_id = wp_create_post_autosave ( $post -> ID );
if ( is_wp_error ( $revision_id ) )
$id = $revision_id ;
else
$id = $post -> ID ;
2008-03-03 20:58:06 +00:00
}
2010-02-06 10:07:57 +00:00
$data = $message ;
} else {
2011-09-18 23:23:39 +00:00
if ( ! empty ( $_POST [ 'auto_draft' ] ) )
2010-02-06 10:07:57 +00:00
$id = 0 ; // This tells us it didn't actually save
else
$id = $post -> ID ;
2006-08-11 03:54:45 +00:00
}
2008-02-29 09:51:36 +00:00
2011-09-27 20:52:07 +00:00
if ( $do_lock && empty ( $_POST [ 'auto_draft' ] ) && $id && is_numeric ( $id ) ) {
$lock_result = wp_set_post_lock ( $id );
$supplemental [ 'active-post-lock' ] = implode ( ':' , $lock_result );
}
2008-02-29 09:51:36 +00:00
2008-03-18 04:59:54 +00:00
if ( $nonce_age == 2 ) {
2008-03-18 02:43:20 +00:00
$supplemental [ 'replace-autosavenonce' ] = wp_create_nonce ( 'autosave' );
2008-03-18 04:59:54 +00:00
$supplemental [ 'replace-getpermalinknonce' ] = wp_create_nonce ( 'getpermalink' );
$supplemental [ 'replace-samplepermalinknonce' ] = wp_create_nonce ( 'samplepermalink' );
$supplemental [ 'replace-closedpostboxesnonce' ] = wp_create_nonce ( 'closedpostboxes' );
2011-09-29 21:39:55 +00:00
$supplemental [ 'replace-_ajax_linking_nonce' ] = wp_create_nonce ( 'internal-linking' );
2008-03-18 04:59:54 +00:00
if ( $id ) {
if ( $_POST [ 'post_type' ] == 'post' )
$supplemental [ 'replace-_wpnonce' ] = wp_create_nonce ( 'update-post_' . $id );
elseif ( $_POST [ 'post_type' ] == 'page' )
$supplemental [ 'replace-_wpnonce' ] = wp_create_nonce ( 'update-page_' . $id );
}
}
2008-03-18 02:43:20 +00:00
2011-04-16 02:37:44 +00:00
if ( ! empty ( $alert ) )
$supplemental [ 'alert' ] = $alert ;
2008-02-29 09:51:36 +00:00
$x = new WP_Ajax_Response ( array (
'what' => 'autosave' ,
'id' => $id ,
'data' => $id ? $data : '' ,
'supplemental' => $supplemental
) );
$x -> send ();
break ;
2008-01-09 17:46:13 +00:00
case 'closed-postboxes' :
2008-02-08 19:57:50 +00:00
check_ajax_referer ( 'closedpostboxes' , 'closedpostboxesnonce' );
2010-04-11 02:41:40 +00:00
$closed = isset ( $_POST [ 'closed' ] ) ? explode ( ',' , $_POST [ 'closed' ]) : array ();
$closed = array_filter ( $closed );
$hidden = isset ( $_POST [ 'hidden' ] ) ? explode ( ',' , $_POST [ 'hidden' ]) : array ();
$hidden = array_filter ( $hidden );
2009-02-24 02:37:22 +00:00
$page = isset ( $_POST [ 'page' ] ) ? $_POST [ 'page' ] : '' ;
2011-09-12 21:48:44 +00:00
if ( $page != sanitize_key ( $page ) )
die ( '0' );
2009-02-24 02:37:22 +00:00
if ( ! $user = wp_get_current_user () )
2009-04-27 18:36:27 +00:00
die ( '-1' );
2009-02-24 02:37:22 +00:00
2008-08-22 18:58:42 +00:00
if ( is_array ( $closed ) )
2010-04-16 17:39:24 +00:00
update_user_option ( $user -> ID , " closedpostboxes_ $page " , $closed , true );
2009-02-24 02:37:22 +00:00
2009-04-13 03:39:46 +00:00
if ( is_array ( $hidden ) ) {
2010-03-22 19:56:16 +00:00
$hidden = array_diff ( $hidden , array ( 'submitdiv' , 'linksubmitdiv' , 'manage-menu' , 'create-menu' ) ); // postboxes that are always shown
2010-04-16 17:44:38 +00:00
update_user_option ( $user -> ID , " metaboxhidden_ $page " , $hidden , true );
2009-04-13 03:39:46 +00:00
}
2009-02-24 02:37:22 +00:00
die ( '1' );
break ;
2008-09-11 01:46:30 +00:00
case 'hidden-columns' :
2009-04-05 08:25:10 +00:00
check_ajax_referer ( 'screen-options-nonce' , 'screenoptionnonce' );
2009-02-24 02:37:22 +00:00
$hidden = isset ( $_POST [ 'hidden' ] ) ? $_POST [ 'hidden' ] : '' ;
2008-09-11 01:46:30 +00:00
$hidden = explode ( ',' , $_POST [ 'hidden' ] );
2009-02-24 02:37:22 +00:00
$page = isset ( $_POST [ 'page' ] ) ? $_POST [ 'page' ] : '' ;
2011-09-12 21:48:44 +00:00
if ( $page != sanitize_key ( $page ) )
die ( '0' );
2009-02-24 02:37:22 +00:00
if ( ! $user = wp_get_current_user () )
2009-04-27 18:36:27 +00:00
die ( '-1' );
2009-02-24 02:37:22 +00:00
2008-09-11 01:46:30 +00:00
if ( is_array ( $hidden ) )
2010-04-25 15:59:03 +00:00
update_user_option ( $user -> ID , " manage { $page } columnshidden " , $hidden , true );
2009-02-24 02:37:22 +00:00
2011-10-19 16:41:26 +00:00
die ( '1' );
break ;
case 'update-welcome-panel' :
check_ajax_referer ( 'welcome-panel-nonce' , 'welcomepanelnonce' );
if ( ! current_user_can ( 'edit_theme_options' ) )
die ( '-1' );
2011-11-23 18:30:45 +00:00
update_user_meta ( get_current_user_id (), 'show_welcome_panel' , empty ( $_POST [ 'visible' ] ) ? 0 : 1 );
2011-10-19 16:41:26 +00:00
2009-02-24 02:37:22 +00:00
die ( '1' );
break ;
2010-05-26 14:49:43 +00:00
case 'menu-get-metabox' :
if ( ! current_user_can ( 'edit_theme_options' ) )
die ( '-1' );
require_once ABSPATH . 'wp-admin/includes/nav-menu.php' ;
if ( isset ( $_POST [ 'item-type' ] ) && 'post_type' == $_POST [ 'item-type' ] ) {
$type = 'posttype' ;
$callback = 'wp_nav_menu_item_post_type_meta_box' ;
$items = ( array ) get_post_types ( array ( 'show_in_nav_menus' => true ), 'object' );
} elseif ( isset ( $_POST [ 'item-type' ] ) && 'taxonomy' == $_POST [ 'item-type' ] ) {
$type = 'taxonomy' ;
$callback = 'wp_nav_menu_item_taxonomy_meta_box' ;
$items = ( array ) get_taxonomies ( array ( 'show_ui' => true ), 'object' );
}
if ( ! empty ( $_POST [ 'item-object' ] ) && isset ( $items [ $_POST [ 'item-object' ]] ) ) {
$item = apply_filters ( 'nav_menu_meta_box_object' , $items [ $_POST [ 'item-object' ] ] );
ob_start ();
call_user_func_array ( $callback , array (
null ,
array (
'id' => 'add-' . $item -> name ,
'title' => $item -> labels -> name ,
'callback' => $callback ,
'args' => $item ,
)
));
2010-06-02 20:04:07 +00:00
2010-05-26 14:49:43 +00:00
$markup = ob_get_clean ();
2010-06-02 20:04:07 +00:00
2010-05-26 14:49:43 +00:00
echo json_encode ( array (
'replace-id' => $type . '-' . $item -> name ,
'markup' => $markup ,
));
}
exit ;
break ;
2010-04-27 01:05:58 +00:00
case 'menu-quick-search' :
2010-05-12 19:19:57 +00:00
if ( ! current_user_can ( 'edit_theme_options' ) )
2010-04-27 01:05:58 +00:00
die ( '-1' );
2010-05-03 20:26:11 +00:00
2010-04-27 01:05:58 +00:00
require_once ABSPATH . 'wp-admin/includes/nav-menu.php' ;
_wp_ajax_menu_quick_search ( $_REQUEST );
2010-10-24 02:58:42 +00:00
exit ;
break ;
case 'wp-link-ajax' :
2011-01-11 20:03:50 +00:00
check_ajax_referer ( 'internal-linking' , '_ajax_linking_nonce' );
2010-11-18 07:59:05 +00:00
$args = array ();
2010-11-19 05:31:07 +00:00
if ( isset ( $_POST [ 'search' ] ) )
$args [ 's' ] = stripslashes ( $_POST [ 'search' ] );
2010-11-18 07:59:05 +00:00
$args [ 'pagenum' ] = ! empty ( $_POST [ 'page' ] ) ? absint ( $_POST [ 'page' ] ) : 1 ;
2011-08-03 10:19:00 +00:00
require ( ABSPATH . WPINC . '/class-wp-editor.php' );
2011-11-23 19:06:52 +00:00
$results = _WP_Editors :: wp_link_query ( $args );
2010-11-18 07:59:05 +00:00
if ( ! isset ( $results ) )
die ( '0' );
echo json_encode ( $results );
echo " \n " ;
2010-11-17 18:47:34 +00:00
2010-04-27 01:05:58 +00:00
exit ;
break ;
2010-05-17 23:58:56 +00:00
case 'menu-locations-save' :
if ( ! current_user_can ( 'edit_theme_options' ) )
die ( '-1' );
2010-05-18 15:16:58 +00:00
check_ajax_referer ( 'add-menu_item' , 'menu-settings-column-nonce' );
2010-05-20 22:43:14 +00:00
if ( ! isset ( $_POST [ 'menu-locations' ] ) )
2010-05-17 23:58:56 +00:00
die ( '0' );
2010-07-22 07:00:22 +00:00
set_theme_mod ( 'nav_menu_locations' , array_map ( 'absint' , $_POST [ 'menu-locations' ] ) );
2010-05-17 23:58:56 +00:00
die ( '1' );
break ;
2009-02-24 02:37:22 +00:00
case 'meta-box-order' :
check_ajax_referer ( 'meta-box-order' );
$order = isset ( $_POST [ 'order' ] ) ? ( array ) $_POST [ 'order' ] : false ;
2011-08-25 22:55:39 +00:00
$page_columns = isset ( $_POST [ 'page_columns' ] ) ? $_POST [ 'page_columns' ] : 'auto' ;
if ( $page_columns != 'auto' )
$page_columns = ( int ) $page_columns ;
2009-02-24 02:37:22 +00:00
$page = isset ( $_POST [ 'page' ] ) ? $_POST [ 'page' ] : '' ;
2011-09-12 21:48:44 +00:00
if ( $page != sanitize_key ( $page ) )
die ( '0' );
2009-02-24 02:37:22 +00:00
if ( ! $user = wp_get_current_user () )
2009-04-27 18:36:27 +00:00
die ( '-1' );
2009-02-24 02:37:22 +00:00
if ( $order )
2010-04-25 15:59:03 +00:00
update_user_option ( $user -> ID , " meta-box-order_ $page " , $order , true );
2009-02-24 02:37:22 +00:00
if ( $page_columns )
2010-04-25 15:59:03 +00:00
update_user_option ( $user -> ID , " screen_layout_ $page " , $page_columns , true );
2009-02-24 02:37:22 +00:00
die ( '1' );
break ;
2008-02-21 06:19:46 +00:00
case 'get-permalink' :
check_ajax_referer ( 'getpermalink' , 'getpermalinknonce' );
$post_id = isset ( $_POST [ 'post_id' ]) ? intval ( $_POST [ 'post_id' ]) : 0 ;
2008-02-21 17:08:06 +00:00
die ( add_query_arg ( array ( 'preview' => 'true' ), get_permalink ( $post_id )));
2008-02-21 06:19:46 +00:00
break ;
2008-01-17 16:51:32 +00:00
case 'sample-permalink' :
2008-02-11 17:40:16 +00:00
check_ajax_referer ( 'samplepermalink' , 'samplepermalinknonce' );
2008-01-17 16:51:32 +00:00
$post_id = isset ( $_POST [ 'post_id' ]) ? intval ( $_POST [ 'post_id' ]) : 0 ;
2008-03-05 22:09:28 +00:00
$title = isset ( $_POST [ 'new_title' ]) ? $_POST [ 'new_title' ] : '' ;
2010-04-18 01:46:28 +00:00
$slug = isset ( $_POST [ 'new_slug' ]) ? $_POST [ 'new_slug' ] : null ;
2008-03-05 22:09:28 +00:00
die ( get_sample_permalink_html ( $post_id , $title , $slug ));
2008-01-17 16:51:32 +00:00
break ;
2008-09-10 22:47:03 +00:00
case 'inline-save' :
2008-09-21 19:45:45 +00:00
check_ajax_referer ( 'inlineeditnonce' , '_inline_edit' );
2008-10-05 04:43:52 +00:00
if ( ! isset ( $_POST [ 'post_ID' ]) || ! ( $post_ID = ( int ) $_POST [ 'post_ID' ] ) )
2008-09-17 11:32:33 +00:00
exit ;
2008-09-25 13:42:34 +00:00
2008-10-05 04:43:52 +00:00
if ( 'page' == $_POST [ 'post_type' ] ) {
if ( ! current_user_can ( 'edit_page' , $post_ID ) )
die ( __ ( 'You are not allowed to edit this page.' ) );
} else {
if ( ! current_user_can ( 'edit_post' , $post_ID ) )
die ( __ ( 'You are not allowed to edit this post.' ) );
}
2010-11-14 18:19:45 +00:00
set_current_screen ( $_POST [ 'screen' ] );
2010-01-22 18:27:54 +00:00
2008-10-05 04:43:52 +00:00
if ( $last = wp_check_post_lock ( $post_ID ) ) {
2008-09-25 13:42:34 +00:00
$last_user = get_userdata ( $last );
$last_user_name = $last_user ? $last_user -> display_name : __ ( 'Someone' );
2009-05-18 15:11:07 +00:00
printf ( $_POST [ 'post_type' ] == 'page' ? __ ( 'Saving is disabled: %s is currently editing this page.' ) : __ ( 'Saving is disabled: %s is currently editing this post.' ), esc_html ( $last_user_name ) );
2008-09-25 13:42:34 +00:00
exit ;
}
2008-10-05 04:43:52 +00:00
$data = & $_POST ;
2009-05-24 23:47:49 +00:00
2008-10-05 04:43:52 +00:00
$post = get_post ( $post_ID , ARRAY_A );
2009-05-15 20:05:52 +00:00
$post = add_magic_quotes ( $post ); //since it is from db
2009-05-24 23:47:49 +00:00
2008-10-05 04:43:52 +00:00
$data [ 'content' ] = $post [ 'post_content' ];
$data [ 'excerpt' ] = $post [ 'post_excerpt' ];
// rename
$data [ 'user_ID' ] = $GLOBALS [ 'user_ID' ];
2008-11-15 12:04:38 +00:00
if ( isset ( $data [ 'post_parent' ]) )
$data [ 'parent_id' ] = $data [ 'post_parent' ];
2008-10-05 04:43:52 +00:00
// status
2008-11-15 12:04:38 +00:00
if ( isset ( $data [ 'keep_private' ]) && 'private' == $data [ 'keep_private' ] )
2008-10-05 04:43:52 +00:00
$data [ 'post_status' ] = 'private' ;
else
$data [ 'post_status' ] = $data [ '_status' ];
if ( empty ( $data [ 'comment_status' ]) )
$data [ 'comment_status' ] = 'closed' ;
if ( empty ( $data [ 'ping_status' ]) )
$data [ 'ping_status' ] = 'closed' ;
// update the post
edit_post ();
2011-01-18 11:06:22 +00:00
$wp_list_table = _get_list_table ( 'WP_Posts_List_Table' );
2010-08-11 21:54:51 +00:00
$mode = $_POST [ 'post_view' ];
2010-08-22 11:22:46 +00:00
$wp_list_table -> display_rows ( array ( get_post ( $_POST [ 'post_ID' ] ) ) );
2008-10-05 04:43:52 +00:00
exit ;
break ;
case 'inline-save-tax' :
check_ajax_referer ( 'taxinlineeditnonce' , '_inline_edit' );
2010-12-16 09:18:28 +00:00
$taxonomy = sanitize_key ( $_POST [ 'taxonomy' ] );
$tax = get_taxonomy ( $taxonomy );
if ( ! $tax )
die ( '0' );
2010-11-14 18:08:25 +00:00
2010-12-16 09:18:28 +00:00
if ( ! current_user_can ( $tax -> cap -> edit_terms ) )
die ( '-1' );
2010-01-26 22:49:05 +00:00
2010-12-16 09:18:28 +00:00
set_current_screen ( 'edit-' . $taxonomy );
2011-01-18 11:06:22 +00:00
$wp_list_table = _get_list_table ( 'WP_Terms_List_Table' );
2008-10-05 04:43:52 +00:00
if ( ! isset ( $_POST [ 'tax_ID' ]) || ! ( $id = ( int ) $_POST [ 'tax_ID' ] ) )
2008-11-29 13:03:03 +00:00
die ( - 1 );
2008-10-05 04:43:52 +00:00
2010-08-11 21:54:51 +00:00
$tag = get_term ( $id , $taxonomy );
$_POST [ 'description' ] = $tag -> description ;
2008-10-05 04:43:52 +00:00
2010-08-11 21:54:51 +00:00
$updated = wp_update_term ( $id , $taxonomy , $_POST );
if ( $updated && ! is_wp_error ( $updated ) ) {
$tag = get_term ( $updated [ 'term_id' ], $taxonomy );
if ( ! $tag || is_wp_error ( $tag ) ) {
if ( is_wp_error ( $tag ) && $tag -> get_error_message () )
die ( $tag -> get_error_message () );
die ( __ ( 'Item not updated.' ) );
}
2010-06-14 23:39:35 +00:00
2010-09-18 19:30:53 +00:00
echo $wp_list_table -> single_row ( $tag );
2010-08-11 21:54:51 +00:00
} else {
if ( is_wp_error ( $updated ) && $updated -> get_error_message () )
die ( $updated -> get_error_message () );
die ( __ ( 'Item not updated.' ) );
2008-10-05 04:43:52 +00:00
}
exit ;
2008-09-21 19:45:45 +00:00
break ;
2008-09-16 04:24:28 +00:00
case 'find_posts' :
check_ajax_referer ( 'find-posts' );
if ( empty ( $_POST [ 'ps' ]) )
exit ;
2010-05-25 02:18:07 +00:00
if ( ! empty ( $_POST [ 'post_type' ]) && in_array ( $_POST [ 'post_type' ], get_post_types () ) )
$what = $_POST [ 'post_type' ];
else
$what = 'post' ;
2008-09-16 04:24:28 +00:00
$s = stripslashes ( $_POST [ 'ps' ]);
preg_match_all ( '/".*?("|$)|((?<=[\\s",+])|^)[^\\s",+]+/' , $s , $matches );
2009-10-18 11:50:59 +00:00
$search_terms = array_map ( '_search_terms_tidy' , $matches [ 0 ]);
2008-09-16 04:24:28 +00:00
$searchand = $search = '' ;
2009-11-17 03:08:38 +00:00
foreach ( ( array ) $search_terms as $term ) {
2010-12-16 14:22:41 +00:00
$term = esc_sql ( like_escape ( $term ) );
2008-09-16 04:24:28 +00:00
$search .= " { $searchand } (( $wpdb->posts .post_title LIKE '% { $term } %') OR ( $wpdb->posts .post_content LIKE '% { $term } %')) " ;
$searchand = ' AND ' ;
}
2010-12-16 14:22:41 +00:00
$term = esc_sql ( like_escape ( $s ) );
2008-09-16 04:24:28 +00:00
if ( count ( $search_terms ) > 1 && $search_terms [ 0 ] != $s )
$search .= " OR ( $wpdb->posts .post_title LIKE '% { $term } %') OR ( $wpdb->posts .post_content LIKE '% { $term } %') " ;
2009-11-17 03:08:38 +00:00
$posts = $wpdb -> get_results ( " SELECT ID, post_title, post_status, post_date FROM $wpdb->posts WHERE post_type = ' $what ' AND post_status IN ('draft', 'publish') AND ( $search ) ORDER BY post_date_gmt DESC LIMIT 50 " );
2008-09-16 04:24:28 +00:00
2010-05-25 02:18:07 +00:00
if ( ! $posts ) {
$posttype = get_post_type_object ( $what );
exit ( $posttype -> labels -> not_found );
}
2008-09-16 04:24:28 +00:00
2009-11-17 03:08:38 +00:00
$html = '<table class="widefat" cellspacing="0"><thead><tr><th class="found-radio"><br /></th><th>' . __ ( 'Title' ) . '</th><th>' . __ ( 'Date' ) . '</th><th>' . __ ( 'Status' ) . '</th></tr></thead><tbody>' ;
2008-09-16 04:24:28 +00:00
foreach ( $posts as $post ) {
switch ( $post -> post_status ) {
case 'publish' :
case 'private' :
$stat = __ ( 'Published' );
break ;
case 'future' :
$stat = __ ( 'Scheduled' );
break ;
case 'pending' :
$stat = __ ( 'Pending Review' );
break ;
case 'draft' :
2009-11-17 03:08:38 +00:00
$stat = __ ( 'Draft' );
2008-09-16 04:24:28 +00:00
break ;
}
2008-10-05 04:43:52 +00:00
2008-09-16 04:24:28 +00:00
if ( '0000-00-00 00:00:00' == $post -> post_date ) {
$time = '' ;
} else {
2009-03-13 03:53:39 +00:00
/* translators: date format in table columns, see http://php.net/date */
2008-09-16 04:24:28 +00:00
$time = mysql2date ( __ ( 'Y/m/d' ), $post -> post_date );
}
2009-05-05 19:43:53 +00:00
$html .= '<tr class="found-posts"><td class="found-radio"><input type="radio" id="found-' . $post -> ID . '" name="found_post_id" value="' . esc_attr ( $post -> ID ) . '"></td>' ;
2009-05-18 15:11:07 +00:00
$html .= '<td><label for="found-' . $post -> ID . '">' . esc_html ( $post -> post_title ) . '</label></td><td>' . esc_html ( $time ) . '</td><td>' . esc_html ( $stat ) . '</td></tr>' . " \n \n " ;
2008-09-16 04:24:28 +00:00
}
$html .= '</tbody></table>' ;
$x = new WP_Ajax_Response ();
$x -> add ( array (
'what' => $what ,
'data' => $html
));
$x -> send ();
2008-08-20 21:42:31 +00:00
break ;
2009-04-11 14:37:24 +00:00
case 'widgets-order' :
check_ajax_referer ( 'save-sidebar-widgets' , 'savewidgets' );
2010-05-12 19:19:57 +00:00
if ( ! current_user_can ( 'edit_theme_options' ) )
2009-04-11 14:37:24 +00:00
die ( '-1' );
unset ( $_POST [ 'savewidgets' ], $_POST [ 'action' ] );
2009-04-13 16:20:58 +00:00
// save widgets order for all sidebars
if ( is_array ( $_POST [ 'sidebars' ]) ) {
$sidebars = array ();
foreach ( $_POST [ 'sidebars' ] as $key => $val ) {
$sb = array ();
if ( ! empty ( $val ) ) {
2009-04-11 14:37:24 +00:00
$val = explode ( ',' , $val );
foreach ( $val as $k => $v ) {
2009-04-13 16:20:58 +00:00
if ( strpos ( $v , 'widget-' ) === false )
continue ;
$sb [ $k ] = substr ( $v , strpos ( $v , '_' ) + 1 );
2009-04-11 14:37:24 +00:00
}
}
2009-04-13 16:20:58 +00:00
$sidebars [ $key ] = $sb ;
2009-04-11 14:37:24 +00:00
}
2009-04-13 16:20:58 +00:00
wp_set_sidebars_widgets ( $sidebars );
die ( '1' );
2009-04-11 14:37:24 +00:00
}
2009-04-13 16:20:58 +00:00
die ( '-1' );
2009-04-11 14:37:24 +00:00
break ;
case 'save-widget' :
check_ajax_referer ( 'save-sidebar-widgets' , 'savewidgets' );
2010-05-12 19:19:57 +00:00
if ( ! current_user_can ( 'edit_theme_options' ) || ! isset ( $_POST [ 'id_base' ]) )
2009-04-11 14:37:24 +00:00
die ( '-1' );
unset ( $_POST [ 'savewidgets' ], $_POST [ 'action' ] );
2009-05-22 12:08:51 +00:00
do_action ( 'load-widgets.php' );
do_action ( 'widgets.php' );
do_action ( 'sidebar_admin_setup' );
2009-04-13 16:20:58 +00:00
$id_base = $_POST [ 'id_base' ];
2009-05-22 12:08:51 +00:00
$widget_id = $_POST [ 'widget-id' ];
2009-04-13 16:20:58 +00:00
$sidebar_id = $_POST [ 'sidebar' ];
2009-05-31 11:34:08 +00:00
$multi_number = ! empty ( $_POST [ 'multi_number' ]) ? ( int ) $_POST [ 'multi_number' ] : 0 ;
$settings = isset ( $_POST [ 'widget-' . $id_base ]) && is_array ( $_POST [ 'widget-' . $id_base ]) ? $_POST [ 'widget-' . $id_base ] : false ;
2010-12-02 23:30:21 +00:00
$error = '<p>' . __ ( 'An error has occurred. Please reload the page and try again.' ) . '</p>' ;
2009-05-22 12:08:51 +00:00
2009-04-11 14:37:24 +00:00
$sidebars = wp_get_sidebars_widgets ();
$sidebar = isset ( $sidebars [ $sidebar_id ]) ? $sidebars [ $sidebar_id ] : array ();
// delete
if ( isset ( $_POST [ 'delete_widget' ]) && $_POST [ 'delete_widget' ] ) {
2009-05-22 12:08:51 +00:00
if ( ! isset ( $wp_registered_widgets [ $widget_id ]) )
2009-05-31 11:34:08 +00:00
die ( $error );
2009-04-11 14:37:24 +00:00
2009-05-22 12:08:51 +00:00
$sidebar = array_diff ( $sidebar , array ( $widget_id ) );
$_POST = array ( 'sidebar' => $sidebar_id , 'widget-' . $id_base => array (), 'the-widget-id' => $widget_id , 'delete_widget' => '1' );
2009-05-31 11:34:08 +00:00
} elseif ( $settings && preg_match ( '/__i__|%i%/' , key ( $settings ) ) ) {
if ( ! $multi_number )
die ( $error );
$_POST [ 'widget-' . $id_base ] = array ( $multi_number => array_shift ( $settings ) );
$widget_id = $id_base . '-' . $multi_number ;
$sidebar [] = $widget_id ;
2009-04-11 14:37:24 +00:00
}
2009-05-22 12:08:51 +00:00
$_POST [ 'widget-id' ] = $sidebar ;
2009-04-11 14:37:24 +00:00
foreach ( ( array ) $wp_registered_widget_updates as $name => $control ) {
2009-05-22 12:08:51 +00:00
2009-04-11 14:37:24 +00:00
if ( $name == $id_base ) {
if ( ! is_callable ( $control [ 'callback' ] ) )
continue ;
ob_start ();
call_user_func_array ( $control [ 'callback' ], $control [ 'params' ] );
ob_end_clean ();
break ;
}
}
2009-05-22 12:08:51 +00:00
if ( isset ( $_POST [ 'delete_widget' ]) && $_POST [ 'delete_widget' ] ) {
$sidebars [ $sidebar_id ] = $sidebar ;
wp_set_sidebars_widgets ( $sidebars );
echo " deleted: $widget_id " ;
die ();
}
2009-05-24 23:47:49 +00:00
2009-05-31 11:34:08 +00:00
if ( ! empty ( $_POST [ 'add_new' ]) )
die ();
if ( $form = $wp_registered_widget_controls [ $widget_id ] )
call_user_func_array ( $form [ 'callback' ], $form [ 'params' ] );
2009-09-10 22:07:33 +00:00
die ();
break ;
2009-09-24 01:54:07 +00:00
case 'image-editor' :
$attachment_id = intval ( $_POST [ 'postid' ]);
if ( empty ( $attachment_id ) || ! current_user_can ( 'edit_post' , $attachment_id ) )
2009-09-10 22:07:33 +00:00
die ( '-1' );
2009-09-24 01:54:07 +00:00
check_ajax_referer ( " image_editor- $attachment_id " );
2009-09-10 22:07:33 +00:00
include_once ( ABSPATH . 'wp-admin/includes/image-edit.php' );
2009-09-24 01:54:07 +00:00
$msg = false ;
switch ( $_POST [ 'do' ] ) {
case 'save' :
$msg = wp_save_image ( $attachment_id );
$msg = json_encode ( $msg );
die ( $msg );
break ;
case 'scale' :
$msg = wp_save_image ( $attachment_id );
break ;
case 'restore' :
$msg = wp_restore_image ( $attachment_id );
break ;
}
2009-09-10 22:07:33 +00:00
2009-09-24 01:54:07 +00:00
wp_image_editor ( $attachment_id , $msg );
2009-05-31 11:34:08 +00:00
die ();
2009-04-11 14:37:24 +00:00
break ;
2009-10-07 22:18:09 +00:00
case 'set-post-thumbnail' :
2010-05-18 22:14:52 +00:00
$post_ID = intval ( $_POST [ 'post_id' ] );
if ( ! current_user_can ( 'edit_post' , $post_ID ) )
2009-10-07 22:18:09 +00:00
die ( '-1' );
$thumbnail_id = intval ( $_POST [ 'thumbnail_id' ] );
2009-10-15 12:57:16 +00:00
2010-05-18 22:14:52 +00:00
check_ajax_referer ( " set_post_thumbnail- $post_ID " );
2010-05-18 22:08:49 +00:00
2009-10-15 12:57:16 +00:00
if ( $thumbnail_id == '-1' ) {
2011-09-24 19:31:38 +00:00
if ( delete_post_thumbnail ( $post_ID ) )
die ( _wp_post_thumbnail_html () );
else
die ( '0' );
2009-10-15 12:57:16 +00:00
}
2010-11-15 17:59:25 +00:00
if ( set_post_thumbnail ( $post_ID , $thumbnail_id ) )
die ( _wp_post_thumbnail_html ( $thumbnail_id ) );
2009-10-07 22:18:09 +00:00
die ( '0' );
2010-04-28 02:04:30 +00:00
break ;
2010-10-08 03:29:57 +00:00
case 'date_format' :
die ( date_i18n ( sanitize_option ( 'date_format' , $_POST [ 'date' ] ) ) );
break ;
case 'time_format' :
die ( date_i18n ( sanitize_option ( 'time_format' , $_POST [ 'date' ] ) ) );
break ;
2011-04-25 01:01:34 +00:00
case 'wp-fullscreen-save-post' :
2011-11-01 21:23:05 +00:00
$post_id = isset ( $_POST [ 'post_ID' ] ) ? ( int ) $_POST [ 'post_ID' ] : 0 ;
2011-04-25 01:01:34 +00:00
2011-11-01 21:23:05 +00:00
$post = $post_type = null ;
if ( $post_id )
$post = get_post ( $post_id );
if ( $post )
$post_type = $post -> post_type ;
elseif ( isset ( $_POST [ 'post_type' ] ) && post_type_exists ( $_POST [ 'post_type' ] ) )
$post_type = $_POST [ 'post_type' ];
2011-04-25 01:01:34 +00:00
check_ajax_referer ( 'update-' . $post_type . '_' . $post_id , '_wpnonce' );
$post_id = edit_post ();
if ( is_wp_error ( $post_id ) ) {
if ( $post_id -> get_error_message () )
$message = $post_id -> get_error_message ();
else
$message = __ ( 'Save failed' );
echo json_encode ( array ( 'message' => $message , 'last_edited' => '' ) );
die ();
} else {
$message = __ ( 'Saved.' );
}
if ( $post ) {
$last_date = mysql2date ( get_option ( 'date_format' ), $post -> post_modified );
$last_time = mysql2date ( get_option ( 'time_format' ), $post -> post_modified );
} else {
$last_date = date_i18n ( get_option ( 'date_format' ) );
$last_time = date_i18n ( get_option ( 'time_format' ) );
}
if ( $last_id = get_post_meta ( $post_id , '_edit_last' , true ) ) {
$last_user = get_userdata ( $last_id );
$last_edited = sprintf ( __ ( 'Last edited by %1$s on %2$s at %3$s' ), esc_html ( $last_user -> display_name ), $last_date , $last_time );
} else {
$last_edited = sprintf ( __ ( 'Last edited on %1$s at %2$s' ), $last_date , $last_time );
}
echo json_encode ( array ( 'message' => $message , 'last_edited' => $last_edited ) );
die ();
break ;
2011-09-27 20:52:07 +00:00
case 'wp-remove-post-lock' :
if ( empty ( $_POST [ 'post_ID' ] ) || empty ( $_POST [ 'active_post_lock' ] ) )
die ( '0' );
$post_id = ( int ) $_POST [ 'post_ID' ];
if ( ! $post = get_post ( $post_id ) )
die ( '0' );
check_ajax_referer ( 'update-' . $post -> post_type . '_' . $post_id );
if ( ! current_user_can ( 'edit_post' , $post_id ) )
die ( '-1' );
$active_lock = array_map ( 'absint' , explode ( ':' , $_POST [ 'active_post_lock' ] ) );
if ( $active_lock [ 1 ] != get_current_user_id () )
die ( '0' );
$new_lock = ( time () - apply_filters ( 'wp_check_post_lock_window' , AUTOSAVE_INTERVAL * 2 ) + 5 ) . ':' . $active_lock [ 1 ];
update_post_meta ( $post_id , '_edit_lock' , $new_lock , implode ( ':' , $active_lock ) );
die ( '1' );
2011-10-10 23:31:36 +00:00
case 'dismiss-wp-pointer' :
$pointer = $_POST [ 'pointer' ];
if ( $pointer != sanitize_key ( $pointer ) )
die ( '0' );
// check_ajax_referer( 'dismiss-pointer_' . $pointer );
2011-11-21 23:04:35 +00:00
$dismissed = array_filter ( explode ( ',' , ( string ) get_user_meta ( get_current_user_id (), 'dismissed_wp_pointers' , true ) ) );
2011-10-10 23:31:36 +00:00
if ( in_array ( $pointer , $dismissed ) )
die ( '0' );
$dismissed [] = $pointer ;
$dismissed = implode ( ',' , $dismissed );
2011-09-27 20:52:07 +00:00
2011-10-10 23:31:36 +00:00
update_user_meta ( get_current_user_id (), 'dismissed_wp_pointers' , $dismissed );
die ( '1' );
break ;
2006-03-29 01:51:55 +00:00
default :
2006-07-25 19:01:52 +00:00
do_action ( 'wp_ajax_' . $_POST [ 'action' ] );
2006-03-29 01:51:55 +00:00
die ( '0' );
break ;
endswitch ;