X-Git-Url: https://scripts.mit.edu/gitweb/autoinstalls/wordpress.git/blobdiff_plain/6c8f14c09105d0afa4c1574215c59b5021040e76..c55863f11e8589bf8d4a5698bf15752406654f1c:/wp-admin/admin-ajax.php diff --git a/wp-admin/admin-ajax.php b/wp-admin/admin-ajax.php index 716e384d..b220d332 100644 --- a/wp-admin/admin-ajax.php +++ b/wp-admin/admin-ajax.php @@ -38,6 +38,7 @@ require_once( ABSPATH . 'wp-admin/includes/ajax-actions.php' ); send_nosniff_header(); nocache_headers(); +/** This action is documented in wp-admin/admin.php */ do_action( 'admin_init' ); $core_actions_get = array( @@ -56,7 +57,7 @@ $core_actions_post = array( 'save-widget', 'set-post-thumbnail', 'date_format', 'time_format', 'wp-fullscreen-save-post', 'wp-remove-post-lock', 'dismiss-wp-pointer', 'upload-attachment', 'get-attachment', 'query-attachments', 'save-attachment', 'save-attachment-compat', 'send-link-to-editor', - 'send-attachment-to-editor', 'save-attachment-order', + 'send-attachment-to-editor', 'save-attachment-order', 'heartbeat', 'get-revision-diffs', ); // Register core Ajax calls. @@ -66,12 +67,28 @@ if ( ! empty( $_GET['action'] ) && in_array( $_GET['action'], $core_actions_get if ( ! empty( $_POST['action'] ) && in_array( $_POST['action'], $core_actions_post ) ) add_action( 'wp_ajax_' . $_POST['action'], 'wp_ajax_' . str_replace( '-', '_', $_POST['action'] ), 1 ); -add_action( 'wp_ajax_nopriv_autosave', 'wp_ajax_nopriv_autosave', 1 ); - -if ( is_user_logged_in() ) - do_action( 'wp_ajax_' . $_REQUEST['action'] ); // Authenticated actions -else - do_action( 'wp_ajax_nopriv_' . $_REQUEST['action'] ); // Non-admin actions - +add_action( 'wp_ajax_nopriv_heartbeat', 'wp_ajax_nopriv_heartbeat', 1 ); + +if ( is_user_logged_in() ) { + /** + * Fires authenticated AJAX actions for logged-in users. + * + * The dynamic portion of the hook name, $_REQUEST['action'], + * refers to the name of the AJAX action callback being fired. + * + * @since 2.1.0 + */ + do_action( 'wp_ajax_' . $_REQUEST['action'] ); +} else { + /** + * Fires non-authenticated AJAX actions for logged-out users. + * + * The dynamic portion of the hook name, $_REQUEST['action'], + * refers to the name of the AJAX action callback being fired. + * + * @since 2.8.0 + */ + do_action( 'wp_ajax_nopriv_' . $_REQUEST['action'] ); +} // Default status die( '0' );