X-Git-Url: https://scripts.mit.edu/gitweb/autoinstalls/wordpress.git/blobdiff_plain/0f29eadd474473203a1182f52af1aa82721cecbd..refs/tags/wordpress-3.3.1-scripts:/wp-admin/post.php diff --git a/wp-admin/post.php b/wp-admin/post.php index 44a3ea2d..c3bca702 100644 --- a/wp-admin/post.php +++ b/wp-admin/post.php @@ -1,443 +1,265 @@ post_type; + $post_type_object = get_post_type_object( $post_type ); +} + +/** + * Redirect to previous page. + * + * @param int $post_id Optional. Post ID. + */ +function redirect_post($post_id = '') { + if ( isset($_POST['save']) || isset($_POST['publish']) ) { + $status = get_post_status( $post_id ); + + if ( isset( $_POST['publish'] ) ) { + switch ( $status ) { + case 'pending': + $message = 8; + break; + case 'future': + $message = 9; + break; + default: + $message = 6; } } else { - $$wpvar = $_POST["$wpvar"]; + $message = 'draft' == $status ? 10 : 1; } + + $location = add_query_arg( 'message', $message, get_edit_post_link( $post_id, 'url' ) ); + } elseif ( isset($_POST['addmeta']) && $_POST['addmeta'] ) { + $location = add_query_arg( 'message', 2, wp_get_referer() ); + $location = explode('#', $location); + $location = $location[0] . '#postcustom'; + } elseif ( isset($_POST['deletemeta']) && $_POST['deletemeta'] ) { + $location = add_query_arg( 'message', 3, wp_get_referer() ); + $location = explode('#', $location); + $location = $location[0] . '#postcustom'; + } elseif ( 'post-quickpress-save-cont' == $_POST['action'] ) { + $location = "post.php?action=edit&post=$post_id&message=7"; + } else { + $location = add_query_arg( 'message', 4, get_edit_post_link( $post_id, 'url' ) ); } -} -if (isset($_POST['deletepost'])) { -$action = "delete"; + wp_redirect( apply_filters( 'redirect_post_location', $location, $post_id ) ); + exit; } -// Fix submenu highlighting for pages. -if ( isset($_REQUEST['post']) && 'static' == get_post_status($_REQUEST['post']) ) - $submenu_file = 'page-new.php'; - -$editing = true; +if ( isset( $_POST['deletepost'] ) ) + $action = 'delete'; +elseif ( isset($_POST['wp-preview']) && 'dopreview' == $_POST['wp-preview'] ) + $action = 'preview'; + +$sendback = wp_get_referer(); +if ( ! $sendback || + strpos( $sendback, 'post.php' ) !== false || + strpos( $sendback, 'post-new.php' ) !== false ) { + $sendback = admin_url( 'edit.php' ); + $sendback .= ( ! empty( $post_type ) ) ? '?post_type=' . $post_type : ''; +} else { + $sendback = remove_query_arg( array('trashed', 'untrashed', 'deleted', 'ids'), $sendback ); +} switch($action) { +case 'postajaxpost': case 'post': - check_admin_referer('add-post'); - - $post_ID = write_post(); - - // Redirect. - if (!empty($_POST['mode'])) { - switch($_POST['mode']) { - case 'bookmarklet': - $location = $_POST['referredby']; - break; - case 'sidebar': - $location = 'sidebar.php?a=b'; - break; - default: - $location = 'post.php'; - break; - } +case 'post-quickpress-publish': +case 'post-quickpress-save': + check_admin_referer('add-' . $post_type); + + if ( 'post-quickpress-publish' == $action ) + $_POST['publish'] = 'publish'; // tell write_post() to publish + + if ( 'post-quickpress-publish' == $action || 'post-quickpress-save' == $action ) { + $_POST['comment_status'] = get_option('default_comment_status'); + $_POST['ping_status'] = get_option('default_ping_status'); + $post_id = edit_post(); } else { - $location = "post.php?posted=$post_ID"; + $post_id = 'postajaxpost' == $action ? edit_post() : write_post(); } - if ( 'static' == $_POST['post_status'] ) - $location = "page-new.php?saved=$post_ID"; - - if ( isset($_POST['save']) ) - $location = "post.php?action=edit&post=$post_ID"; + if ( 0 === strpos( $action, 'post-quickpress' ) ) { + $_POST['post_ID'] = $post_id; + // output the quickpress dashboard widget + require_once(ABSPATH . 'wp-admin/includes/dashboard.php'); + wp_dashboard_quick_press(); + exit; + } - wp_redirect($location); + redirect_post($post_id); exit(); break; case 'edit': - $title = __('Edit'); - - require_once('admin-header.php'); + $editing = true; - $post_ID = $p = (int) $_GET['post']; + if ( empty( $post_id ) ) { + wp_redirect( admin_url('post.php') ); + exit(); + } - if ( !current_user_can('edit_post', $post_ID) ) - die ( __('You are not allowed to edit this post.') ); + $p = $post_id; - $post = get_post_to_edit($post_ID); - - if ($post->post_status == 'static') - include('edit-page-form.php'); - else - include('edit-form-advanced.php'); + if ( empty($post->ID) ) + wp_die( __('You attempted to edit an item that doesn’t exist. Perhaps it was deleted?') ); - ?> -
-

- -
- cap->edit_post, $post_id) ) + wp_die( __('You are not allowed to edit this item.') ); -case 'editattachment': - $post_id = (int) $_POST['post_ID']; + if ( 'trash' == $post->post_status ) + wp_die( __('You can’t edit this item because it is in the Trash. Please restore it and try again.') ); - check_admin_referer('update-attachment_' . $post_id); - - // Don't let these be changed - unset($_POST['guid']); - $_POST['post_status'] = 'attachment'; + if ( null == $post_type_object ) + wp_die( __('Unknown post type.') ); - // Update the thumbnail filename - $oldmeta = $newmeta = get_post_meta($post_id, '_wp_attachment_metadata', true); - $newmeta['thumb'] = $_POST['thumb']; - - if ( '' !== $oldmeta ) - update_post_meta($post_id, '_wp_attachment_metadata', $newmeta, $oldmeta); - else - add_post_meta($post_id, '_wp_attachment_metadata', $newmeta); - -case 'editpost': - $post_ID = (int) $_POST['post_ID']; - check_admin_referer('update-post_' . $post_ID); - - $post_ID = edit_post(); - - $referredby = ''; - if ( !empty($_POST['referredby']) ) - $referredby = preg_replace('|https?://[^/]+|i', '', $_POST['referredby']); - $referer = preg_replace('|https?://[^/]+|i', '', wp_get_referer()); - - if ($_POST['save']) { - $location = wp_get_referer(); - } elseif ($_POST['updatemeta']) { - $location = wp_get_referer() . '&message=2#postcustom'; - } elseif ($_POST['deletemeta']) { - $location = wp_get_referer() . '&message=3#postcustom'; - } elseif (!empty($referredby) && $referredby != $referer) { - $location = $_POST['referredby']; - if ( $_POST['referredby'] == 'redo' ) - $location = get_permalink( $post_ID ); - } elseif ($action == 'editattachment') { - $location = 'attachments.php'; + $post_type = $post->post_type; + if ( 'post' == $post_type ) { + $parent_file = "edit.php"; + $submenu_file = "edit.php"; + $post_new_file = "post-new.php"; } else { - $location = 'post.php'; + if ( isset( $post_type_object ) && $post_type_object->show_in_menu && $post_type_object->show_in_menu !== true ) + $parent_file = $post_type_object->show_in_menu; + else + $parent_file = "edit.php?post_type=$post_type"; + $submenu_file = "edit.php?post_type=$post_type"; + $post_new_file = "post-new.php?post_type=$post_type"; } - wp_redirect($location); // Send user on their way while we keep working - - exit(); - break; - -case 'delete': - $post_id = (isset($_GET['post'])) ? intval($_GET['post']) : intval($_POST['post_ID']); - - $post = & get_post($post_id); - if ( 'static' == $post->post_status ) - check_admin_referer('delete-page_' . $post_id); - else - check_admin_referer('delete-post_' . $post_id); - - if ( !current_user_can('edit_post', $post_id) ) - die( __('You are not allowed to delete this post.') ); - - if ( $post->post_status == 'attachment' ) { - if ( ! wp_delete_attachment($post_id) ) - die( __('Error in deleting...') ); + if ( $last = wp_check_post_lock( $post->ID ) ) { + add_action('admin_notices', '_admin_notice_post_locked' ); } else { - if ( !wp_delete_post($post_id) ) - die( __('Error in deleting...') ); + $active_post_lock = wp_set_post_lock( $post->ID ); + wp_enqueue_script('autosave'); } - $sendback = wp_get_referer(); - if ( 'static' == $post->post_status ) - $sendback = get_option('siteurl') . '/wp-admin/edit-pages.php'; - elseif ( strstr($sendback, 'post.php') ) - $sendback = get_option('siteurl') .'/wp-admin/post.php'; - elseif ( strstr($sendback, 'attachments.php') ) - $sendback = get_option('siteurl') .'/wp-admin/attachments.php'; - wp_redirect($sendback); - break; - -case 'editcomment': - $title = __('Edit Comment'); - $parent_file = 'edit.php'; - require_once ('admin-header.php'); - - get_currentuserinfo(); - - $comment = (int) $_GET['comment']; - - if ( ! $comment = get_comment($comment) ) - die(sprintf(__('Oops, no comment with this ID. Go back!'), 'javascript:history.go(-1)')); - - if ( !current_user_can('edit_post', $comment->comment_post_ID) ) - die( __('You are not allowed to edit comments on this post.') ); + $title = $post_type_object->labels->edit_item; + $post = get_post_to_edit($post_id); - $comment = get_comment_to_edit($comment); + if ( post_type_supports($post_type, 'comments') ) { + wp_enqueue_script('admin-comments'); + enqueue_comment_hotkeys_js(); + } - include('edit-form-comment.php'); + include('./edit-form-advanced.php'); break; -case 'confirmdeletecomment': - - require_once('./admin-header.php'); - - $comment = (int) $_GET['comment']; - $p = (int) $_GET['p']; - - if ( ! $comment = get_comment_to_edit($comment) ) - die(sprintf(__('Oops, no comment with this ID. Go back!'), 'edit.php')); - - if ( !current_user_can('edit_post', $comment->comment_post_ID) ) - die( __('You are not allowed to delete comments on this post.') ); - - echo "
\n"; - echo "

" . __('Caution: You are about to delete the following comment:') . "

\n"; - echo "\n"; - echo "\n"; - echo "\n"; - echo "\n"; - echo "\n"; - echo "
" . __('Author:') . "$comment->comment_author
" . __('E-mail:') . "$comment->comment_author_email
". __('URL:') . "$comment->comment_author_url
". __('Comment:') . "$comment->comment_content
\n"; - echo "

" . __('Are you sure you want to do that?') . "

\n"; - - echo "
\n"; - echo "\n"; - echo "\n"; - echo "\n"; - echo "\n"; - wp_nonce_field('delete-comment_' . $comment->comment_ID); - echo ""; - echo "  "; - echo "\n"; - echo "
\n"; - echo "
\n"; - - break; +case 'editattachment': + check_admin_referer('update-attachment_' . $post_id); -case 'deletecomment': - $comment = (int) $_GET['comment']; - check_admin_referer('delete-comment_' . $comment); + // Don't let these be changed + unset($_POST['guid']); + $_POST['post_type'] = 'attachment'; - $p = (int) $_GET['p']; - if (isset($_GET['noredir'])) { - $noredir = true; - } else { - $noredir = false; - } + // Update the thumbnail filename + $newmeta = wp_get_attachment_metadata( $post_id, true ); + $newmeta['thumb'] = $_POST['thumb']; - $postdata = get_post($p) or die(sprintf(__('Oops, no post with this ID. Go back!'), 'edit.php')); + wp_update_attachment_metadata( $post_id, $newmeta ); - if ( ! $comment = get_comment($comment) ) - die(sprintf(__('Oops, no comment with this ID. Go back!'), 'post.php')); +case 'editpost': + check_admin_referer('update-' . $post_type . '_' . $post_id); - if ( !current_user_can('edit_post', $comment->comment_post_ID) ) - die( __('You are not allowed to edit comments on this post.') ); + $post_id = edit_post(); - wp_set_comment_status($comment->comment_ID, "delete"); - do_action('delete_comment', $comment->comment_ID); - - if ((wp_get_referer() != "") && (false == $noredir)) { - wp_redirect(wp_get_referer()); - } else { - wp_redirect(get_settings('siteurl') .'/wp-admin/edit.php?p='.$p.'&c=1#comments'); - } + redirect_post($post_id); // Send user on their way while we keep working + exit(); break; -case 'unapprovecomment': - $comment = (int) $_GET['comment']; - check_admin_referer('unapprove-comment_' . $comment); - - $p = (int) $_GET['p']; - if (isset($_GET['noredir'])) { - $noredir = true; - } else { - $noredir = false; - } - - if ( ! $comment = get_comment($comment) ) - die(sprintf(__('Oops, no comment with this ID. Go back!'), 'edit.php')); +case 'trash': + check_admin_referer('trash-' . $post_type . '_' . $post_id); - if ( !current_user_can('edit_post', $comment->comment_post_ID) ) - die( __('You are not allowed to edit comments on this post, so you cannot disapprove this comment.') ); + $post = & get_post($post_id); - wp_set_comment_status($comment->comment_ID, "hold"); + if ( !current_user_can($post_type_object->cap->delete_post, $post_id) ) + wp_die( __('You are not allowed to move this item to the Trash.') ); - if ((wp_get_referer() != "") && (false == $noredir)) { - wp_redirect(wp_get_referer()); - } else { - wp_redirect(get_settings('siteurl') .'/wp-admin/edit.php?p='.$p.'&c=1#comments'); - } + if ( ! wp_trash_post($post_id) ) + wp_die( __('Error in moving to Trash.') ); + wp_redirect( add_query_arg( array('trashed' => 1, 'ids' => $post_id), $sendback ) ); + exit(); break; -case 'mailapprovecomment': - $comment = (int) $_GET['comment']; - check_admin_referer('approve-comment_' . $comment); +case 'untrash': + check_admin_referer('untrash-' . $post_type . '_' . $post_id); - if ( ! $comment = get_comment($comment) ) - die(sprintf(__('Oops, no comment with this ID. Go back!'), 'edit.php')); - - if ( !current_user_can('edit_post', $comment->comment_post_ID) ) - die( __('You are not allowed to edit comments on this post, so you cannot approve this comment.') ); - - if ('1' != $comment->comment_approved) { - wp_set_comment_status($comment->comment_ID, 'approve'); - if (true == get_option('comments_notify')) - wp_notify_postauthor($comment->comment_ID); - } + if ( !current_user_can($post_type_object->cap->delete_post, $post_id) ) + wp_die( __('You are not allowed to move this item out of the Trash.') ); - wp_redirect(get_option('siteurl') . '/wp-admin/moderation.php?approved=1'); + if ( ! wp_untrash_post($post_id) ) + wp_die( __('Error in restoring from Trash.') ); + wp_redirect( add_query_arg('untrashed', 1, $sendback) ); + exit(); break; -case 'approvecomment': - $comment = (int) $_GET['comment']; - check_admin_referer('approve-comment_' . $comment); - - $p = (int) $_GET['p']; - if (isset($_GET['noredir'])) { - $noredir = true; - } else { - $noredir = false; - } - - if ( ! $comment = get_comment($comment) ) - die(sprintf(__('Oops, no comment with this ID. Go back!'), 'edit.php')); - - if ( !current_user_can('edit_post', $comment->comment_post_ID) ) - die( __('You are not allowed to edit comments on this post, so you cannot approve this comment.') ); - - wp_set_comment_status($comment->comment_ID, "approve"); - if (get_settings("comments_notify") == true) { - wp_notify_postauthor($comment->comment_ID); - } +case 'delete': + check_admin_referer('delete-' . $post_type . '_' . $post_id); + if ( !current_user_can($post_type_object->cap->delete_post, $post_id) ) + wp_die( __('You are not allowed to delete this item.') ); - if ((wp_get_referer() != "") && (false == $noredir)) { - wp_redirect(wp_get_referer()); + $force = !EMPTY_TRASH_DAYS; + if ( $post->post_type == 'attachment' ) { + $force = ( $force || !MEDIA_TRASH ); + if ( ! wp_delete_attachment($post_id, $force) ) + wp_die( __('Error in deleting.') ); } else { - wp_redirect(get_settings('siteurl') .'/wp-admin/edit.php?p='.$p.'&c=1#comments'); + if ( !wp_delete_post($post_id, $force) ) + wp_die( __('Error in deleting.') ); } + wp_redirect( add_query_arg('deleted', 1, $sendback) ); + exit(); break; -case 'editedcomment': +case 'preview': + check_admin_referer( 'autosave', 'autosavenonce' ); - $comment_ID = (int) $_POST['comment_ID']; - $comment_post_ID = (int) $_POST['comment_post_ID']; + $url = post_preview(); - check_admin_referer('update-comment_' . $comment_ID); - - edit_comment(); - - $location = ( empty($_POST['referredby']) ? "edit.php?p=$comment_post_ID&c=1" : $_POST['referredby'] ) . '#comment-' . $comment_ID; - $location = apply_filters('comment_edit_redirect', $location, $comment_ID); - wp_redirect($location); + wp_redirect($url); exit(); break; default: - $title = __('Create New Post'); - require_once ('./admin-header.php'); -?> - -

»

- - -
-

- 15 ) $num_drafts = 15; - for ( $i = 0; $i < $num_drafts; $i++ ) { - $draft = $drafts[$i]; - if ( 0 != $i ) - echo ', '; - $draft->post_title = stripslashes($draft->post_title); - if ( empty($draft->post_title) ) - $draft->post_title = sprintf(__('Post # %s'), $draft->ID); - echo "$draft->post_title"; - } - ?> - - , » - - .

-
- -
-'.__('WordPress bookmarklet').' -

'.__('Right click on the following link and choose "Add to favorites" to create a posting shortcut.').'

'; ?> -

- - - - - - -
-
-
- - - - - - -

-
- -
-

-You can also e-mail the admin to ask for a promotion.
-When you’re promoted, just reload this page and you’ll be able to blog. :)'), get_settings('admin_email')); ?> -

-
- */ -include('admin-footer.php'); +include('./admin-footer.php'); ?>