[Summary view] [Print] [Text view]

   1  <?php
   2  /**
   3   * Edit post administration panel.
   4   *
   5   * Manage Post actions: post, edit, delete, etc.
   6   *
   7   * @package WordPress
   8   * @subpackage Administration
   9   */
  10  
  11  /** WordPress Administration Bootstrap */
  12  require_once ('./admin.php');
  13  
  14  $parent_file = 'edit.php';
  15  $submenu_file = 'edit.php';
  16  
  17  wp_reset_vars(array('action', 'safe_mode', 'withcomments', 'posts', 'content', 'edited_post_title', 'comment_error', 'profile', 'trackback_url', 'excerpt', 'showcomments', 'commentstart', 'commentend', 'commentorder'));
  18  
  19  if ( isset( $_GET['post'] ) )
  20       $post_id = $post_ID = (int) $_GET['post'];
  21  elseif ( isset( $_POST['post_ID'] ) )
  22       $post_id = $post_ID = (int) $_POST['post_ID'];
  23  else
  24       $post_id = $post_ID = 0;
  25  
  26  $post = $post_type = $post_type_object = null;
  27  
  28  if ( $post_id )
  29      $post = get_post( $post_id );
  30  
  31  if ( $post ) {
  32      $post_type = $post->post_type;
  33      $post_type_object = get_post_type_object( $post_type );
  34  }
  35  
  36  /**
  37   * Redirect to previous page.
  38   *
  39   * @param int $post_id Optional. Post ID.
  40   */
  41  function redirect_post($post_id = '') {
  42      if ( isset($_POST['save']) || isset($_POST['publish']) ) {
  43          $status = get_post_status( $post_id );
  44  
  45          if ( isset( $_POST['publish'] ) ) {
  46              switch ( $status ) {
  47                  case 'pending':
  48                      $message = 8;
  49                      break;
  50                  case 'future':
  51                      $message = 9;
  52                      break;
  53                  default:
  54                      $message = 6;
  55              }
  56          } else {
  57                  $message = 'draft' == $status ? 10 : 1;
  58          }
  59  
  60          $location = add_query_arg( 'message', $message, get_edit_post_link( $post_id, 'url' ) );
  61      } elseif ( isset($_POST['addmeta']) && $_POST['addmeta'] ) {
  62          $location = add_query_arg( 'message', 2, wp_get_referer() );
  63          $location = explode('#', $location);
  64          $location = $location[0] . '#postcustom';
  65      } elseif ( isset($_POST['deletemeta']) && $_POST['deletemeta'] ) {
  66          $location = add_query_arg( 'message', 3, wp_get_referer() );
  67          $location = explode('#', $location);
  68          $location = $location[0] . '#postcustom';
  69      } elseif ( 'post-quickpress-save-cont' == $_POST['action'] ) {
  70          $location = "post.php?action=edit&post=$post_id&message=7";
  71      } else {
  72          $location = add_query_arg( 'message', 4, get_edit_post_link( $post_id, 'url' ) );
  73      }
  74  
  75      wp_redirect( apply_filters( 'redirect_post_location', $location, $post_id ) );
  76      exit;
  77  }
  78  
  79  if ( isset( $_POST['deletepost'] ) )
  80      $action = 'delete';
  81  elseif ( isset($_POST['wp-preview']) && 'dopreview' == $_POST['wp-preview'] )
  82      $action = 'preview';
  83  
  84  $sendback = wp_get_referer();
  85  if ( ! $sendback ||
  86       strpos( $sendback, 'post.php' ) !== false ||
  87       strpos( $sendback, 'post-new.php' ) !== false ) {
  88      $sendback = admin_url( 'edit.php' );
  89      $sendback .= ( ! empty( $post_type ) ) ? '?post_type=' . $post_type : '';
  90  } else {
  91      $sendback = remove_query_arg( array('trashed', 'untrashed', 'deleted', 'ids'), $sendback );
  92  }
  93  
  94  switch($action) {
  95  case 'postajaxpost':
  96  case 'post':
  97  case 'post-quickpress-publish':
  98  case 'post-quickpress-save':
  99      check_admin_referer('add-' . $post_type);
 100  
 101      if ( 'post-quickpress-publish' == $action )
 102          $_POST['publish'] = 'publish'; // tell write_post() to publish
 103  
 104      if ( 'post-quickpress-publish' == $action || 'post-quickpress-save' == $action ) {
 105          $_POST['comment_status'] = get_option('default_comment_status');
 106          $_POST['ping_status'] = get_option('default_ping_status');
 107          $post_id = edit_post();
 108      } else {
 109          $post_id = 'postajaxpost' == $action ? edit_post() : write_post();
 110      }
 111  
 112      if ( 0 === strpos( $action, 'post-quickpress' ) ) {
 113          $_POST['post_ID'] = $post_id;
 114          // output the quickpress dashboard widget
 115          require_once (ABSPATH . 'wp-admin/includes/dashboard.php');
 116          wp_dashboard_quick_press();
 117          exit;
 118      }
 119  
 120      redirect_post($post_id);
 121      exit();
 122      break;
 123  
 124  case 'edit':
 125      $editing = true;
 126  
 127      if ( empty( $post_id ) ) {
 128          wp_redirect( admin_url('post.php') );
 129          exit();
 130      }
 131  
 132      $p = $post_id;
 133  
 134      if ( empty($post->ID) )
 135          wp_die( __('You attempted to edit an item that doesn&#8217;t exist. Perhaps it was deleted?') );
 136  
 137      if ( null == $post_type_object )
 138          wp_die( __('Unknown post type.') );
 139  
 140      if ( !current_user_can($post_type_object->cap->edit_post, $post_id) )
 141          wp_die( __('You are not allowed to edit this item.') );
 142  
 143      if ( 'trash' == $post->post_status )
 144          wp_die( __('You can&#8217;t edit this item because it is in the Trash. Please restore it and try again.') );
 145  
 146      $post_type = $post->post_type;
 147      if ( 'post' == $post_type ) {
 148          $parent_file = "edit.php";
 149          $submenu_file = "edit.php";
 150          $post_new_file = "post-new.php";
 151      } else {
 152          if ( isset( $post_type_object ) && $post_type_object->show_in_menu && $post_type_object->show_in_menu !== true )
 153              $parent_file = $post_type_object->show_in_menu;
 154          else
 155              $parent_file = "edit.php?post_type=$post_type";
 156          $submenu_file = "edit.php?post_type=$post_type";
 157          $post_new_file = "post-new.php?post_type=$post_type";
 158      }
 159  
 160      if ( $last = wp_check_post_lock( $post->ID ) ) {
 161          add_action('admin_notices', '_admin_notice_post_locked' );
 162      } else {
 163          $active_post_lock = wp_set_post_lock( $post->ID );
 164          wp_enqueue_script('autosave');
 165      }
 166  
 167      $title = $post_type_object->labels->edit_item;
 168      $post = get_post_to_edit($post_id);
 169  
 170      if ( post_type_supports($post_type, 'comments') ) {
 171          wp_enqueue_script('admin-comments');
 172          enqueue_comment_hotkeys_js();
 173      }
 174  
 175      include ('./edit-form-advanced.php');
 176  
 177      break;
 178  
 179  case 'editattachment':
 180      check_admin_referer('update-attachment_' . $post_id);
 181  
 182      // Don't let these be changed
 183      unset($_POST['guid']);
 184      $_POST['post_type'] = 'attachment';
 185  
 186      // Update the thumbnail filename
 187      $newmeta = wp_get_attachment_metadata( $post_id, true );
 188      $newmeta['thumb'] = $_POST['thumb'];
 189  
 190      wp_update_attachment_metadata( $post_id, $newmeta );
 191  
 192  case 'editpost':
 193      check_admin_referer('update-' . $post_type . '_' . $post_id);
 194  
 195      $post_id = edit_post();
 196  
 197      redirect_post($post_id); // Send user on their way while we keep working
 198  
 199      exit();
 200      break;
 201  
 202  case 'trash':
 203      check_admin_referer('trash-' . $post_type . '_' . $post_id);
 204  
 205      $post = & get_post($post_id);
 206  
 207      if ( !current_user_can($post_type_object->cap->delete_post, $post_id) )
 208          wp_die( __('You are not allowed to move this item to the Trash.') );
 209  
 210      if ( ! wp_trash_post($post_id) )
 211          wp_die( __('Error in moving to Trash.') );
 212  
 213      wp_redirect( add_query_arg( array('trashed' => 1, 'ids' => $post_id), $sendback ) );
 214      exit();
 215      break;
 216  
 217  case 'untrash':
 218      check_admin_referer('untrash-' . $post_type . '_' . $post_id);
 219  
 220      if ( !current_user_can($post_type_object->cap->delete_post, $post_id) )
 221          wp_die( __('You are not allowed to move this item out of the Trash.') );
 222  
 223      if ( ! wp_untrash_post($post_id) )
 224          wp_die( __('Error in restoring from Trash.') );
 225  
 226      wp_redirect( add_query_arg('untrashed', 1, $sendback) );
 227      exit();
 228      break;
 229  
 230  case 'delete':
 231      check_admin_referer('delete-' . $post_type . '_' . $post_id);
 232  
 233      if ( !current_user_can($post_type_object->cap->delete_post, $post_id) )
 234          wp_die( __('You are not allowed to delete this item.') );
 235  
 236      $force = !EMPTY_TRASH_DAYS;
 237      if ( $post->post_type == 'attachment' ) {
 238          $force = ( $force || !MEDIA_TRASH );
 239          if ( ! wp_delete_attachment($post_id, $force) )
 240              wp_die( __('Error in deleting.') );
 241      } else {
 242          if ( !wp_delete_post($post_id, $force) )
 243              wp_die( __('Error in deleting.') );
 244      }
 245  
 246      wp_redirect( add_query_arg('deleted', 1, $sendback) );
 247      exit();
 248      break;
 249  
 250  case 'preview':
 251      check_admin_referer( 'autosave', 'autosavenonce' );
 252  
 253      $url = post_preview();
 254  
 255      wp_redirect($url);
 256      exit();
 257      break;
 258  
 259  default:
 260      wp_redirect( admin_url('edit.php') );
 261      exit();
 262      break;
 263  } // end switch
 264  include ('./admin-footer.php');