mirror of
https://github.com/WordPress/WordPress.git
synced 2024-11-15 07:05:37 +01:00
9b67830c05
* XML-RPC: Improve error messages for unprivileged users. * External Libraries: Disable deserialization in Requests_Utility_FilteredIterator * Embeds: Disable embeds on deactivated Multisite sites. * Coding standards: Modify escaping functions to avoid potential false positives. * XML-RPC: Return error message if attachment ID is incorrect. * Upgrade/install: Improve logic check when determining installation status. * Meta: Sanitize meta key before checking protection status. * Themes: Ensure that only privileged users can set a background image when a theme is using the deprecated custom background page. Brings the changes from [49380,49382-49388] to the 4.7 branch. Props xknown, zieladam, peterwilsoncc, whyisjake, desrosj, dd32. Built from https://develop.svn.wordpress.org/branches/4.7@49399 git-svn-id: http://core.svn.wordpress.org/branches/4.7@49158 1a063a9b-81f0-0310-95a4-ce76da25c4cd
85 lines
3.0 KiB
PHP
85 lines
3.0 KiB
PHP
<?php
|
|
/**
|
|
* Manage media uploaded file.
|
|
*
|
|
* There are many filters in here for media. Plugins can extend functionality
|
|
* by hooking into the filters.
|
|
*
|
|
* @package WordPress
|
|
* @subpackage Administration
|
|
*/
|
|
|
|
/** Load WordPress Administration Bootstrap */
|
|
require_once( dirname( __FILE__ ) . '/admin.php' );
|
|
|
|
if (!current_user_can('upload_files'))
|
|
wp_die(__('Sorry, you are not allowed to upload files.'));
|
|
|
|
wp_enqueue_script('plupload-handlers');
|
|
|
|
$post_id = 0;
|
|
if ( isset( $_REQUEST['post_id'] ) ) {
|
|
$post_id = absint( $_REQUEST['post_id'] );
|
|
if ( ! get_post( $post_id ) || ! current_user_can( 'edit_post', $post_id ) )
|
|
$post_id = 0;
|
|
}
|
|
|
|
if ( $_POST ) {
|
|
if ( isset($_POST['html-upload']) && !empty($_FILES) ) {
|
|
check_admin_referer('media-form');
|
|
// Upload File button was clicked
|
|
$upload_id = media_handle_upload( 'async-upload', $post_id );
|
|
if ( is_wp_error( $upload_id ) ) {
|
|
wp_die( $upload_id );
|
|
}
|
|
}
|
|
wp_redirect( admin_url( 'upload.php' ) );
|
|
exit;
|
|
}
|
|
|
|
$title = __('Upload New Media');
|
|
$parent_file = 'upload.php';
|
|
|
|
get_current_screen()->add_help_tab( array(
|
|
'id' => 'overview',
|
|
'title' => __('Overview'),
|
|
'content' =>
|
|
'<p>' . __('You can upload media files here without creating a post first. This allows you to upload files to use with posts and pages later and/or to get a web link for a particular file that you can share. There are three options for uploading files:') . '</p>' .
|
|
'<ul>' .
|
|
'<li>' . __('<strong>Drag and drop</strong> your files into the area below. Multiple files are allowed.') . '</li>' .
|
|
'<li>' . __('Clicking <strong>Select Files</strong> opens a navigation window showing you files in your operating system. Selecting <strong>Open</strong> after clicking on the file you want activates a progress bar on the uploader screen.') . '</li>' .
|
|
'<li>' . __('Revert to the <strong>Browser Uploader</strong> by clicking the link below the drag and drop box.') . '</li>' .
|
|
'</ul>'
|
|
) );
|
|
get_current_screen()->set_help_sidebar(
|
|
'<p><strong>' . __('For more information:') . '</strong></p>' .
|
|
'<p>' . __('<a href="https://codex.wordpress.org/Media_Add_New_Screen">Documentation on Uploading Media Files</a>') . '</p>' .
|
|
'<p>' . __('<a href="https://wordpress.org/support/">Support Forums</a>') . '</p>'
|
|
);
|
|
|
|
require_once( ABSPATH . 'wp-admin/admin-header.php' );
|
|
|
|
$form_class = 'media-upload-form type-form validate';
|
|
|
|
if ( get_user_setting('uploader') || isset( $_GET['browser-uploader'] ) )
|
|
$form_class .= ' html-uploader';
|
|
?>
|
|
<div class="wrap">
|
|
<h1><?php echo esc_html( $title ); ?></h1>
|
|
|
|
<form enctype="multipart/form-data" method="post" action="<?php echo admin_url('media-new.php'); ?>" class="<?php echo esc_attr( $form_class ); ?>" id="file-form">
|
|
|
|
<?php media_upload_form(); ?>
|
|
|
|
<script type="text/javascript">
|
|
var post_id = <?php echo absint( $post_id ); ?>, shortform = 3;
|
|
</script>
|
|
<input type="hidden" name="post_id" id="post_id" value="<?php echo absint( $post_id ); ?>" />
|
|
<?php wp_nonce_field('media-form'); ?>
|
|
<div id="media-items" class="hide-if-no-js"></div>
|
|
</form>
|
|
</div>
|
|
|
|
<?php
|
|
include( ABSPATH . 'wp-admin/admin-footer.php' );
|