root/trunk/wp-admin/admin-ajax.php

<?php
/**
 * WordPress AJAX Process Execution.
 *
 * @package WordPress
 * @subpackage Administration
 */

/**
 * Executing AJAX process.
 *
 * @since unknown
 */
define('DOING_AJAX', true);
define('WP_ADMIN', true);

require_once('../wp-load.php');
require_once('includes/admin.php');

if ( !is_user_logged_in() )
    die('-1');

if ( isset($_GET['action']) && 'ajax-tag-search' == $_GET['action'] ) {
    if ( !current_user_can( 'manage_categories' ) )
        die('-1');

    $s = $_GET['q']; // is this slashed already?

    if ( false !== strpos( $s, ',' ) ) {
        $s = explode( ',', $s );
        $s = $s[count( $s ) - 1];
    }
    $s = trim( $s );
    if ( strlen( $s ) < 2 )
     die; // require 2 chars for matching
    $results = $wpdb->get_col( "SELECT name FROM $wpdb->terms WHERE name LIKE ('%". $s . "%')" );
    echo join( $results, "\n" );
    die;
}

$id = isset($_POST['id'])? (int) $_POST['id'] : 0;
switch ( $action = $_POST['action'] ) :
case 'delete-comment' :
    check_ajax_referer( "delete-comment_$id" );
    if ( !$comment = get_comment( $id ) )
        die('1');
    if ( !current_user_can( 'edit_post', $comment->comment_post_ID ) )
        die('-1');

    if ( isset($_POST['spam']) && 1 == $_POST['spam'] ) {
        if ( 'spam' == wp_get_comment_status( $comment->comment_ID ) )
            die('1');
        $r = wp_set_comment_status( $comment->comment_ID, 'spam' );
    } else {
        $r = wp_delete_comment( $comment->comment_ID );
    }

    die( $r ? '1' : '0' );
    break;
case 'delete-cat' :
    check_ajax_referer( "delete-category_$id" );
    if ( !current_user_can( 'manage_categories' ) )
        die('-1');

    $cat = get_category( $id );
    if ( !$cat || is_wp_error( $cat ) )
        die('1');

    if ( wp_delete_category( $id ) )
        die('1');
    else
        die('0');
    break;
case 'delete-tag' :
    check_ajax_referer( "delete-tag_$id" );
    if ( !current_user_can( 'manage_categories' ) )
        die('-1');

    $tag = get_term( $id, 'post_tag' );
    if ( !$tag || is_wp_error( $tag ) )
        die('1');

    if ( wp_delete_term($id, 'post_tag'))
        die('1');
    else
        die('0');
    break;
case 'delete-link-cat' :
    check_ajax_referer( "delete-link-category_$id" );
    if ( !current_user_can( 'manage_categories' ) )
        die('-1');

    $cat = get_term( $id, 'link_category' );
    if ( !$cat || is_wp_error( $cat ) )
        die('1');

    $cat_name = get_term_field('name', $id, 'link_category');

    // Don't delete the default cats.
    if ( $id == get_option('default_link_category') ) {
        $x = new WP_AJAX_Response( array(
            'what' => 'link-cat',
            'id' => $id,
            'data' => new WP_Error( 'default-link-cat', sprintf(__("Can&#8217;t delete the <strong>%s</strong> category: this is the default one"), $cat_name) )
        ) );
        $x->send();
    }

    $r = wp_delete_term($id, 'link_category');
    if ( !$r )
        die('0');
    if ( is_wp_error($r) ) {
        $x = new WP_AJAX_Response( array(
            'what' => 'link-cat',
            'id' => $id,
            'data' => $r
        ) );
        $x->send();
    }
    die('1');
    break;
case 'delete-link' :
    check_ajax_referer( "delete-bookmark_$id" );
    if ( !current_user_can( 'manage_links' ) )
        die('-1');

    $link = get_bookmark( $id );
    if ( !$link || is_wp_error( $link ) )
        die('1');

    if ( wp_delete_link( $id ) )
        die('1');
    else
        die('0');
    break;
case 'delete-meta' :
    check_ajax_referer( "delete-meta_$id" );
    if ( !$meta = get_post_meta_by_id( $id ) )
        die('1');

    if ( !current_user_can( 'edit_post', $meta->post_id ) )
        die('-1');
    if ( delete_meta( $meta->meta_id ) )
        die('1');
    die('0');
    break;
case 'delete-post' :
    check_ajax_referer( "{$action}_$id" );
    if ( !current_user_can( 'delete_post', $id ) )
        die('-1');

    if ( !get_post( $id ) )
        die('1');

    if ( wp_delete_post( $id ) )
        die('1');
    else
        die('0');
    break;
case 'delete-page' :
    check_ajax_referer( "{$action}_$id" );
    if ( !current_user_can( 'delete_page', $id ) )
        die('-1');

    if ( !get_page( $id ) )
        die('1');

    if ( wp_delete_post( $id ) )
        die('1');
    else
        die('0');
    break;
case 'dim-comment' :
    if ( !$comment = get_comment( $id ) )
        die('0');

    if ( !current_user_can( 'edit_post', $comment->comment_post_ID ) )
        die('-1');
    if ( !current_user_can( 'moderate_comments' ) )
        die('-1');

    $current = wp_get_comment_status( $comment->comment_ID );
    if ( $_POST['new'] == $current )
        die('1');

    if ( in_array( $current, array( 'unapproved', 'spam' ) ) ) {
        check_ajax_referer( "approve-comment_$id" );
        if ( wp_set_comment_status( $comment->comment_ID, 'approve' ) )
            die('1');
    } else {
        check_ajax_referer( "unapprove-comment_$id" );
        if ( wp_set_comment_status( $comment->comment_ID, 'hold' ) )
            die('1');
    }
    die('0');
    break;
case 'add-category' : // On the Fly
    check_ajax_referer( $action );
    if ( !current_user_can( 'manage_categories' ) )
        die('-1');
    $names = explode(',', $_POST['newcat']);
    if ( 0 > $parent = (int) $_POST['newcat_parent'] )
        $parent = 0;
    $post_category = isset($_POST['post_category'])? (array) $_POST['post_category'] : array();
    $checked_categories = array_map( 'absint', (array) $post_category );
    $popular_ids = isset( $_POST['popular_ids'] ) ?
            array_map( 'absint', explode( ',', $_POST['popular_ids'] ) ) :
            false;

    $x = new WP_Ajax_Response();
    foreach ( $names as $cat_name ) {
        $cat_name = trim($cat_name);
        $category_nicename = sanitize_title($cat_name);
        if ( '' === $category_nicename )
            continue;
        $cat_id = wp_create_category( $cat_name, $parent );
        $checked_categories[] = $cat_id;
        if ( $parent ) // Do these all at once in a second
            continue;
        $category = get_category( $cat_id );
        ob_start();
            wp_category_checklist( 0, $cat_id, $checked_categories, $popular_ids );
        $data = ob_get_contents();
        ob_end_clean();
        $x->add( array(
            'what' => 'category',
            'id' => $cat_id,
            'data' => $data,
            'position' => -1
        ) );
    }
    if ( $parent ) { // Foncy - replace the parent and all its children
        $parent = get_category( $parent );
        ob_start();
            dropdown_categories( 0, $parent );
        $data = ob_get_contents();
        ob_end_clean();
        $x->add( array(
            'what' => 'category',
            'id' => $parent->term_id,
            'old_id' => $parent->term_id,
            'data' => $data,
            'position' => -1
        ) );

    }
    $x->send();
    break;
case 'add-link-category' : // On the Fly
    check_ajax_referer( $action );
    if ( !current_user_can( 'manage_categories' ) )
        die('-1');
    $names = explode(',', $_POST['newcat']);
    $x = new WP_Ajax_Response();
    foreach ( $names as $cat_name ) {
        $cat_name = trim($cat_name);
        $slug = sanitize_title($cat_name);
        if ( '' === $slug )
            continue;
        if ( !$cat_id = is_term( $cat_name, 'link_category' ) ) {
            $cat_id = wp_insert_term( $cat_name, 'link_category' );
        }
        $cat_id = $cat_id['term_id'];
        $cat_name = wp_specialchars(stripslashes($cat_name));
        $x->add( array(
            'what' => 'link-category',
            'id' => $cat_id,
            'data' => "<li id='link-category-$cat_id'><label for='in-link-category-$cat_id' class='selectit'><input value='$cat_id' type='checkbox' checked='checked' name='link_category[]' id='in-link-category-$cat_id'/> $cat_name</label></li>",
            'position' => -1
        ) );
    }
    $x->send();
    break;
case 'add-cat' : // From Manage->Categories
    check_ajax_referer( 'add-category' );
    if ( !current_user_can( 'manage_categories' ) )
        die('-1');

    if ( '' === trim($_POST['cat_name']) ) {
        $x = new WP_Ajax_Response( array(
            'what' => 'cat',
            'id' => new WP_Error( 'cat_name', __('You did not enter a category name.') )
        ) );
        $x->send();
    }

    if ( category_exists( trim( $_POST['cat_name'] ) ) ) {
        $x = new WP_Ajax_Response( array(
            'what' => 'cat',
            'id' => new WP_Error( 'cat_exists', __('The category you are trying to create already exists.'), array( 'form-field' => 'cat_name' ) ),
        ) );
        $x->send();
    }

    $cat = wp_insert_category( $_POST, true );

    if ( is_wp_error($cat) ) {
        $x = new WP_Ajax_Response( array(
            'what' => 'cat',
            'id' => $cat
        ) );
        $x->send();
    }

    if ( !$cat || (!$cat = get_category( $cat )) )
        die('0');

    $level = 0;
    $cat_full_name = $cat->name;
    $_cat = $cat;
    while ( $_cat->parent ) {
        $_cat = get_category( $_cat->parent );
        $cat_full_name = $_cat->name . ' &#8212; ' . $cat_full_name;
        $level++;
    }
    $cat_full_name = attribute_escape($cat_full_name);

    $x = new WP_Ajax_Response( array(
        'what' => 'cat',
        'id' => $cat->term_id,
        'data' => _cat_row( $cat, $level, $cat_full_name ),
        'supplemental' => array('name' => $cat_full_name, 'show-link' => sprintf(__( 'Category <a href="#%s">%s</a> added' ), "cat-$cat->term_id", $cat_full_name))
    ) );
    $x->send();
    break;
case 'add-link-cat' : // From Blogroll -> Categories
    check_ajax_referer( 'add-link-category' );
    if ( !current_user_can( 'manage_categories' ) )
        die('-1');

    if ( '' === trim($_POST['name']) ) {
        $x = new WP_Ajax_Response( array(
            'what' => 'link-cat',
            'id' => new WP_Error( 'name', __('You did not enter a category name.') )
        ) );
        $x->send();
    }

    $r = wp_insert_term($_POST['name'], 'link_category', $_POST );
    if ( is_wp_error( $r ) ) {
        $x = new WP_AJAX_Response( array(
            'what' => 'link-cat',
            'id' => $r
        ) );
        $x->send();
    }

    extract($r, EXTR_SKIP);

    if ( !$link_cat = link_cat_row( $term_id ) )
        die('0');

    $x = new WP_Ajax_Response( array(
        'what' => 'link-cat',
        'id' => $term_id,
        'data' => $link_cat
    ) );
    $x->send();
    break;
case 'add-tag' : // From Manage->Tags
    check_ajax_referer( 'add-tag' );
    if ( !current_user_can( 'manage_categories' ) )
        die('-1');

    if ( '' === trim($_POST['name']) ) {
        $x = new WP_Ajax_Response( array(
            'what' => 'tag',
            'id' => new WP_Error( 'name', __('You did not enter a tag name.') )
        ) );
        $x->send();
    }

    $tag = wp_insert_term($_POST['name'], 'post_tag', $_POST );

    if ( is_wp_error($tag) ) {
        $x = new WP_Ajax_Response( array(
            'what' => 'tag',
            'id' => $tag
        ) );
        $x->send();
    }

    if ( !$tag || (!$tag = get_term( $tag['term_id'], 'post_tag' )) )
        die('0');

    $tag_full_name = $tag->name;
    $tag_full_name = attribute_escape($tag_full_name);

    $x = new WP_Ajax_Response( array(
        'what' => 'tag',
        'id' => $tag->term_id,
        'data' => _tag_row( $tag ),
        'supplemental' => array('name' => $tag_full_name, 'show-link' => sprintf(__( 'Tag <a href="#%s">%s</a> added' ), "tag-$tag->term_id", $tag_full_name))
    ) );
    $x->send();
    break;
case 'add-comment' :
    check_ajax_referer( $action );
    if ( !current_user_can( 'edit_post', $id ) )
        die('-1');
    $search = isset($_POST['s']) ? $_POST['s'] : false;
    $start = isset($_POST['page']) ? intval($_POST['page']) * 25 - 1: 24;
    $status = isset($_POST['comment_status']) ? $_POST['comment_status'] : false;
    $mode = isset($_POST['mode']) ? $_POST['mode'] : 'detail';

    list($comments, $total) = _wp_get_comment_list( $status, $search, $start, 1 );

    if ( get_option('show_avatars') )
        add_filter( 'comment_author', 'floated_admin_avatar' );

    if ( !$comments )
        die('1');
    $x = new WP_Ajax_Response();
    foreach ( (array) $comments as $comment ) {
        get_comment( $comment );
        ob_start();
            _wp_comment_row( $comment->comment_ID, $mode, $status );
            $comment_list_item = ob_get_contents();
        ob_end_clean();
        $x->add( array(
            'what' => 'comment',
            'id' => $comment->comment_ID,
            'data' => $comment_list_item
        ) );
    }
    $x->send();
    break;
case 'replyto-comment' :
    check_ajax_referer( $action );

    $comment_post_ID = (int) $_POST['comment_post_ID'];
    if ( !current_user_can( 'edit_post', $comment_post_ID ) )
        die('-1');

    $status = $wpdb->get_var( $wpdb->prepare("SELECT post_status FROM $wpdb->posts WHERE ID = %d", $comment_post_ID) );

    if ( empty($status) )
        die('1');
    elseif ( in_array($status->post_status, array('draft', 'pending') ) )
        die( __('Error: you are replying to comment on a draft post.') );

    $user = wp_get_current_user();
    if ( $user->ID ) {
        $comment_author       = $wpdb->escape($user->display_name);
        $comment_author_email = $wpdb->escape($user->user_email);
        $comment_author_url   = $wpdb->escape($user->user_url);
        $comment_content      = trim($_POST['content']);
        if ( current_user_can('unfiltered_html') ) {
            if ( wp_create_nonce('unfiltered-html-comment_' . $comment_post_ID) != $_POST['_wp_unfiltered_html_comment'] ) {
                kses_remove_filters(); // start with a clean slate
                kses_init_filters(); // set up the filters
            }
        }
    } else {
        die( __('Sorry, you must be logged in to reply to a comment.') );
    }

    if ( '' == $comment_content )
        die( __('Error: please type a comment.') );

    $comment_parent = absint($_POST['comment_ID']);
    $commentdata = compact('comment_post_ID', 'comment_author', 'comment_author_email', 'comment_author_url', 'comment_content', 'comment_type', 'comment_parent', 'user_ID');

    $comment_id = wp_new_comment( $commentdata );
    $comment = get_comment($comment_id);
    if ( ! $comment ) die('1');

    $modes = array( 'single', 'detail', 'dashboard' );
    $mode = isset($_POST['mode']) && in_array( $_POST['mode'], $modes ) ? $_POST['mode'] : 'detail';
    $position = ( isset($_POST['position']) && (int) $_POST['position']) ? (int) $_POST['position'] : '-1';
    $checkbox = ( isset($_POST['checkbox']) && true == $_POST['checkbox'] ) ? 1 : 0;

    if ( get_option('show_avatars') && 'single' != $mode )
        add_filter( 'comment_author', 'floated_admin_avatar' );

    $x = new WP_Ajax_Response();

    ob_start();
        if ( 'dashboard' == $mode ) {
            require_once( ABSPATH . 'wp-admin/includes/dashboard.php' );
            _wp_dashboard_recent_comments_row( $comment, false );
        } else {
            _wp_comment_row( $comment->comment_ID, $mode, false, $checkbox );
        }