1 | <?php
|
---|
2 | /**
|
---|
3 | * Accepts file uploads from swfupload or other asynchronous upload methods.
|
---|
4 | *
|
---|
5 | * @package WordPress
|
---|
6 | * @subpackage Administration
|
---|
7 | */
|
---|
8 |
|
---|
9 | define('WP_ADMIN', true);
|
---|
10 |
|
---|
11 | if ( defined('ABSPATH') )
|
---|
12 | require_once(ABSPATH . 'wp-load.php');
|
---|
13 | else
|
---|
14 | require_once('../wp-load.php');
|
---|
15 |
|
---|
16 | // Flash often fails to send cookies with the POST or upload, so we need to pass it in GET or POST instead
|
---|
17 | if ( is_ssl() && empty($_COOKIE[SECURE_AUTH_COOKIE]) && !empty($_REQUEST['auth_cookie']) )
|
---|
18 | $_COOKIE[SECURE_AUTH_COOKIE] = $_REQUEST['auth_cookie'];
|
---|
19 | elseif ( empty($_COOKIE[AUTH_COOKIE]) && !empty($_REQUEST['auth_cookie']) )
|
---|
20 | $_COOKIE[AUTH_COOKIE] = $_REQUEST['auth_cookie'];
|
---|
21 | unset($current_user);
|
---|
22 | require_once('admin.php');
|
---|
23 |
|
---|
24 | header('Content-Type: text/plain; charset=' . get_option('blog_charset'));
|
---|
25 |
|
---|
26 | if ( !current_user_can('upload_files') )
|
---|
27 | wp_die(__('You do not have permission to upload files.'));
|
---|
28 |
|
---|
29 | // just fetch the detail form for that attachment
|
---|
30 | if ( isset($_REQUEST['attachment_id']) && ($id = intval($_REQUEST['attachment_id'])) && $_REQUEST['fetch'] ) {
|
---|
31 | if ( 2 == $_REQUEST['fetch'] ) {
|
---|
32 | add_filter('attachment_fields_to_edit', 'media_single_attachment_fields_to_edit', 10, 2);
|
---|
33 | echo get_media_item($id, array( 'send' => false, 'delete' => true ));
|
---|
34 | } else {
|
---|
35 | add_filter('attachment_fields_to_edit', 'media_post_single_attachment_fields_to_edit', 10, 2);
|
---|
36 | echo get_media_item($id);
|
---|
37 | }
|
---|
38 | exit;
|
---|
39 | }
|
---|
40 |
|
---|
41 | check_admin_referer('media-form');
|
---|
42 |
|
---|
43 | $id = media_handle_upload('async-upload', $_REQUEST['post_id']);
|
---|
44 | if (is_wp_error($id)) {
|
---|
45 | echo '<div id="media-upload-error">'.esc_html($id->get_error_message()).'</div>';
|
---|
46 | exit;
|
---|
47 | }
|
---|
48 |
|
---|
49 | if ( $_REQUEST['short'] ) {
|
---|
50 | // short form response - attachment ID only
|
---|
51 | echo $id;
|
---|
52 | }
|
---|
53 | else {
|
---|
54 | // long form response - big chunk o html
|
---|
55 | $type = $_REQUEST['type'];
|
---|
56 | echo apply_filters("async_upload_{$type}", $id);
|
---|
57 | }
|
---|
58 |
|
---|
59 | ?>
|
---|