+
+
+ post_type )->public ) {
+ $preview_link = set_url_scheme( add_query_arg( 'preview', 'true', get_permalink( $post->ID ) ) );
- if ( 'page' == $post->post_type ) {
- if ( !current_user_can('edit_page', $post_ID) )
- wp_die(__('You are not allowed to edit this page.'));
- } else {
- if ( !current_user_can('edit_post', $post_ID) )
- wp_die(__('You are not allowed to edit this post.'));
- }
+ if ( 'publish' == $post->post_status || $user->ID != $post->post_author ) {
+ // Latest content is in autosave
+ $nonce = wp_create_nonce( 'post_preview_' . $post->ID );
+ $preview_link = add_query_arg( array( 'preview_id' => $post->ID, 'preview_nonce' => $nonce ), $preview_link );
+ }
+ } else {
+ $preview_link = '';
+ }
- if ( 'draft' == $post->post_status ) {
- $id = edit_post();
- } else { // Non drafts are not overwritten. The autosave is stored in a special post revision.
- $id = wp_create_post_autosave( $post->ID );
- if ( ! is_wp_error($id) )
- $id = $post->ID;
- }
+ /** This filter is documented in wp-admin/includes/meta-boxes.php */
+ $preview_link = apply_filters( 'preview_post_link', $preview_link, $post );
+
+ /**
+ * Filter whether to allow the post lock to be overridden.
+ *
+ * Returning a falsey value to the filter will disable the ability
+ * to override the post lock.
+ *
+ * @since 3.6.0
+ *
+ * @param bool $override Whether to allow overriding post locks. Default true.
+ * @param WP_Post $post Post object.
+ * @param WP_User $user User object.
+ */
+ $override = apply_filters( 'override_post_lock', true, $post, $user );
+ $tab_last = $override ? '' : ' wp-tab-last';
+
+ ?>
+
+
ID, 64 ); ?>
+
+ display_name ) );
+ ?>
+
+
+
+
+
+
+ get_error_message() );
+ // Allow plugins to prevent some users overriding the post lock
+ if ( $override ) {
+ ?>
+
+
+
+
+ 'true', 'preview_id' => $id, 'preview_nonce' => $nonce ), get_permalink($id) );
+ ?>
+
+
+
+
+
+
+
+
+
+
+
+
+
+ 'url'.
- It adds the plugin's name to TinyMCE's plugins init and the call to PluginManager to load the plugin.
- The url should be absolute and should include the js file name to be loaded. Example:
- array( 'myplugin' => 'http://my-site.com/wp-content/plugins/myfolder/mce_plugin.js' )
- If the plugin uses a button, it should be added with one of the "$mce_buttons" filters.
- */
- $mce_external_plugins = apply_filters('mce_external_plugins', array());
+ $post_data = _wp_translate_postdata( true, $post_data );
+ if ( is_wp_error( $post_data ) )
+ return $post_data;
- $ext_plugins = "\n";
- if ( ! empty($mce_external_plugins) ) {
+ $post_author = get_current_user_id();
- /*
- The following filter loads external language files for TinyMCE plugins.
- It takes an associative array 'plugin_name' => 'path', where path is the
- include path to the file. The language file should follow the same format as
- /tinymce/langs/wp-langs.php and should define a variable $strings that
- holds all translated strings.
- When this filter is not used, the function will try to load {mce_locale}.js.
- If that is not found, en.js will be tried next.
- */
- $mce_external_languages = apply_filters('mce_external_languages', array());
-
- $loaded_langs = array();
- $strings = '';
-
- if ( ! empty($mce_external_languages) ) {
- foreach ( $mce_external_languages as $name => $path ) {
- if ( @is_file($path) && @is_readable($path) ) {
- include_once($path);
- $ext_plugins .= $strings . "\n";
- $loaded_langs[] = $name;
- }
- }
+ // Store one autosave per author. If there is already an autosave, overwrite it.
+ if ( $old_autosave = wp_get_post_autosave( $post_id, $post_author ) ) {
+ $new_autosave = _wp_post_revision_fields( $post_data, true );
+ $new_autosave['ID'] = $old_autosave->ID;
+ $new_autosave['post_author'] = $post_author;
+
+ // If the new autosave has the same content as the post, delete the autosave.
+ $post = get_post( $post_id );
+ $autosave_is_different = false;
+ foreach ( array_intersect( array_keys( $new_autosave ), array_keys( _wp_post_revision_fields() ) ) as $field ) {
+ if ( normalize_whitespace( $new_autosave[ $field ] ) != normalize_whitespace( $post->$field ) ) {
+ $autosave_is_different = true;
+ break;
}
+ }
- foreach ( $mce_external_plugins as $name => $url ) {
-
- if ( is_ssl() ) $url = str_replace('http://', 'https://', $url);
-
- $plugins[] = '-' . $name;
+ if ( ! $autosave_is_different ) {
+ wp_delete_post_revision( $old_autosave->ID );
+ return 0;
+ }
- $plugurl = dirname($url);
- $strings = $str1 = $str2 = '';
- if ( ! in_array($name, $loaded_langs) ) {
- $path = str_replace( WP_PLUGIN_URL, '', $plugurl );
- $path = WP_PLUGIN_DIR . $path . '/langs/';
+ /**
+ * Fires before an autosave is stored.
+ *
+ * @since 4.1.0
+ *
+ * @param array $new_autosave Post array - the autosave that is about to be saved.
+ */
+ do_action( 'wp_creating_autosave', $new_autosave );
- if ( function_exists('realpath') )
- $path = trailingslashit( realpath($path) );
+ return wp_update_post( $new_autosave );
+ }
- if ( @is_file($path . $mce_locale . '.js') )
- $strings .= @file_get_contents($path . $mce_locale . '.js') . "\n";
+ // _wp_put_post_revision() expects unescaped.
+ $post_data = wp_unslash( $post_data );
- if ( @is_file($path . $mce_locale . '_dlg.js') )
- $strings .= @file_get_contents($path . $mce_locale . '_dlg.js') . "\n";
+ // Otherwise create the new autosave as a special post revision
+ return _wp_put_post_revision( $post_data, true );
+}
- if ( 'en' != $mce_locale && empty($strings) ) {
- if ( @is_file($path . 'en.js') ) {
- $str1 = @file_get_contents($path . 'en.js');
- $strings .= preg_replace( '/([\'"])en\./', '$1' . $mce_locale . '.', $str1, 1 ) . "\n";
- }
+/**
+ * Save draft or manually autosave for showing preview.
+ *
+ * @package WordPress
+ * @since 2.7.0
+ *
+ * @return str URL to redirect to show the preview
+ */
+function post_preview() {
- if ( @is_file($path . 'en_dlg.js') ) {
- $str2 = @file_get_contents($path . 'en_dlg.js');
- $strings .= preg_replace( '/([\'"])en\./', '$1' . $mce_locale . '.', $str2, 1 ) . "\n";
- }
- }
+ $post_ID = (int) $_POST['post_ID'];
+ $_POST['ID'] = $post_ID;
- if ( ! empty($strings) )
- $ext_plugins .= "\n" . $strings . "\n";
- }
+ if ( ! $post = get_post( $post_ID ) ) {
+ wp_die( __( 'You are not allowed to edit this post.' ) );
+ }
- $ext_plugins .= 'tinyMCEPreInit.load_ext("' . $plugurl . '", "' . $mce_locale . '");' . "\n";
- $ext_plugins .= 'tinymce.PluginManager.load("' . $name . '", "' . $url . '");' . "\n";
- }
- }
+ if ( ! current_user_can( 'edit_post', $post->ID ) ) {
+ wp_die( __( 'You are not allowed to edit this post.' ) );
}
- $plugins = implode($plugins, ',');
+ $is_autosave = false;
- if ( $teeny ) {
- $mce_buttons = apply_filters( 'teeny_mce_buttons', array('bold, italic, underline, blockquote, separator, strikethrough, bullist, numlist,justifyleft, justifycenter, justifyright, undo, redo, link, unlink, fullscreen') );
- $mce_buttons = implode($mce_buttons, ',');
- $mce_buttons_2 = $mce_buttons_3 = $mce_buttons_4 = '';
+ if ( ! wp_check_post_lock( $post->ID ) && get_current_user_id() == $post->post_author && ( 'draft' == $post->post_status || 'auto-draft' == $post->post_status ) ) {
+ $saved_post_id = edit_post();
} else {
- $mce_buttons = apply_filters('mce_buttons', array('bold', 'italic', 'strikethrough', '|', 'bullist', 'numlist', 'blockquote', '|', 'justifyleft', 'justifycenter', 'justifyright', '|', 'link', 'unlink', 'wp_more', '|', 'spellchecker', 'fullscreen', 'wp_adv' ));
- $mce_buttons = implode($mce_buttons, ',');
-
- $mce_buttons_2 = apply_filters('mce_buttons_2', array('formatselect', 'underline', 'justifyfull', 'forecolor', '|', 'pastetext', 'pasteword', 'removeformat', '|', 'media', 'charmap', '|', 'outdent', 'indent', '|', 'undo', 'redo', 'wp_help' ));
- $mce_buttons_2 = implode($mce_buttons_2, ',');
-
- $mce_buttons_3 = apply_filters('mce_buttons_3', array());
- $mce_buttons_3 = implode($mce_buttons_3, ',');
-
- $mce_buttons_4 = apply_filters('mce_buttons_4', array());
- $mce_buttons_4 = implode($mce_buttons_4, ',');
- }
- $no_captions = ( apply_filters( 'disable_captions', '' ) ) ? true : false;
-
- // TinyMCE init settings
- $initArray = array (
- 'mode' => 'none',
- 'onpageload' => 'switchEditors.edInit',
- 'width' => '100%',
- 'theme' => 'advanced',
- 'skin' => 'wp_theme',
- 'theme_advanced_buttons1' => "$mce_buttons",
- 'theme_advanced_buttons2' => "$mce_buttons_2",
- 'theme_advanced_buttons3' => "$mce_buttons_3",
- 'theme_advanced_buttons4' => "$mce_buttons_4",
- 'language' => "$mce_locale",
- 'spellchecker_languages' => "$mce_spellchecker_languages",
- 'theme_advanced_toolbar_location' => 'top',
- 'theme_advanced_toolbar_align' => 'left',
- 'theme_advanced_statusbar_location' => 'bottom',
- 'theme_advanced_resizing' => true,
- 'theme_advanced_resize_horizontal' => false,
- 'dialog_type' => 'modal',
- 'relative_urls' => false,
- 'remove_script_host' => false,
- 'convert_urls' => false,
- 'apply_source_formatting' => false,
- 'remove_linebreaks' => true,
- 'paste_convert_middot_lists' => true,
- 'paste_remove_spans' => true,
- 'paste_remove_styles' => true,
- 'gecko_spellcheck' => true,
- 'entities' => '38,amp,60,lt,62,gt',
- 'accessibility_focus' => true,
- 'tab_focus' => ':prev,:next',
- 'content_css' => "$mce_css",
- 'save_callback' => 'switchEditors.saveCallback',
- 'wpeditimage_disable_captions' => $no_captions,
- 'plugins' => "$plugins"
- );
+ $is_autosave = true;
- // For people who really REALLY know what they're doing with TinyMCE
- // You can modify initArray to add, remove, change elements of the config before tinyMCE.init
- // Setting "valid_elements", "invalid_elements" and "extended_valid_elements" can be done through "tiny_mce_before_init".
- // Best is to use the default cleanup by not specifying valid_elements, as TinyMCE contains full set of XHTML 1.0.
- if ( $teeny ) {
- $initArray = apply_filters('teeny_mce_before_init', $initArray);
- } else {
- $initArray = apply_filters('tiny_mce_before_init', $initArray);
+ if ( isset( $_POST['post_status'] ) && 'auto-draft' == $_POST['post_status'] )
+ $_POST['post_status'] = 'draft';
+
+ $saved_post_id = wp_create_post_autosave( $post->ID );
}
- $language = $initArray['language'];
+ if ( is_wp_error( $saved_post_id ) )
+ wp_die( $saved_post_id->get_error_message() );
- $ver = apply_filters('tiny_mce_version', '3101');
+ $query_args = array( 'preview' => 'true' );
- if ( 'en' != $language )
- include_once(ABSPATH . WPINC . '/js/tinymce/langs/wp-langs.php');
+ if ( $is_autosave && $saved_post_id ) {
+ $query_args['preview_id'] = $post->ID;
+ $query_args['preview_nonce'] = wp_create_nonce( 'post_preview_' . $post->ID );
- $mce_options = '';
- foreach ( $initArray as $k => $v )
- $mce_options .= $k . ':"' . $v . '", ';
+ if ( isset( $_POST['post_format'] ) )
+ $query_args['post_format'] = empty( $_POST['post_format'] ) ? 'standard' : sanitize_key( $_POST['post_format'] );
+ }
- $mce_options = rtrim( trim($mce_options), '\n\r,' ); ?>
+ $url = add_query_arg( $query_args, get_permalink( $post->ID ) );
-
-
-
-
-
-
-
-
+ $post = get_post( $post_id );
-ID ) ) {
+ return new WP_Error( 'edit_posts', __( 'You are not allowed to edit this item.' ) );
+ }
+
+ if ( 'auto-draft' == $post->post_status )
+ $post_data['post_status'] = 'draft';
+
+ if ( $post_data['post_type'] != 'page' && ! empty( $post_data['catslist'] ) )
+ $post_data['post_category'] = explode( ',', $post_data['catslist'] );
+
+ if ( ! wp_check_post_lock( $post->ID ) && get_current_user_id() == $post->post_author && ( 'auto-draft' == $post->post_status || 'draft' == $post->post_status ) ) {
+ // Drafts and auto-drafts are just overwritten by autosave for the same user if the post is not locked
+ return edit_post( wp_slash( $post_data ) );
+ } else {
+ // Non drafts or other users drafts are not overwritten. The autosave is stored in a special post revision for each user.
+ return wp_create_post_autosave( wp_slash( $post_data ) );
+ }
}
-?>