Changeset 6213
- Timestamp:
- 10/09/07 22:49:42 (10 months ago)
- Files:
-
- trunk/wp-admin/admin-ajax.php (modified) (16 diffs)
- trunk/wp-admin/categories.php (modified) (1 diff)
- trunk/wp-admin/edit-category-form.php (modified) (2 diffs)
- trunk/wp-admin/edit-comments.php (modified) (5 diffs)
- trunk/wp-admin/edit-form-advanced.php (modified) (1 diff)
- trunk/wp-admin/edit-link-form.php (modified) (1 diff)
- trunk/wp-admin/edit-pages.php (modified) (3 diffs)
- trunk/wp-admin/edit-post-rows.php (modified) (2 diffs)
- trunk/wp-admin/edit.php (modified) (3 diffs)
- trunk/wp-admin/includes/post.php (modified) (1 diff)
- trunk/wp-admin/includes/template.php (modified) (8 diffs)
- trunk/wp-admin/js/cat.js (modified) (1 diff)
- trunk/wp-admin/js/categories.js (modified) (1 diff)
- trunk/wp-admin/js/custom-fields.js (modified) (1 diff)
- trunk/wp-admin/js/edit-comments.js (modified) (1 diff)
- trunk/wp-admin/js/edit-posts.js (added)
- trunk/wp-admin/js/link-cat.js (modified) (1 diff)
- trunk/wp-admin/js/users.js (modified) (1 diff)
- trunk/wp-admin/link-add.php (modified) (1 diff)
- trunk/wp-admin/link-manager.php (modified) (5 diffs)
- trunk/wp-admin/page.php (modified) (1 diff)
- trunk/wp-admin/post.php (modified) (1 diff)
- trunk/wp-admin/users.php (modified) (3 diffs)
- trunk/wp-admin/wp-admin.css (modified) (1 diff)
- trunk/wp-includes/classes.php (modified) (3 diffs)
- trunk/wp-includes/pluggable.php (modified) (1 diff)
- trunk/wp-includes/script-loader.php (modified) (2 diffs)
Legend:
- Unmodified
- Added
- Removed
- Modified
- Copied
- Moved
trunk/wp-admin/admin-ajax.php
r6125 r6213 5 5 define('DOING_AJAX', true); 6 6 7 check_ajax_referer();8 7 if ( !is_user_logged_in() ) 9 8 die('-1'); … … 12 11 add_action( 'shutdown', 'get_out_now', -1 ); 13 12 14 function wp_ajax_meta_row( $pid, $mid, $key, $value ) {15 $value = attribute_escape($value);16 $key_js = addslashes(wp_specialchars($key, 'double'));17 $key = attribute_escape($key);18 $r .= "<tr id='meta-$mid'><td valign='top'>";19 $r .= "<input name='meta[$mid][key]' tabindex='6' onkeypress='return killSubmit(\"theList.ajaxUpdater('meta','meta-$mid');\",event);' type='text' size='20' value='$key' />";20 $r .= "</td><td><textarea name='meta[$mid][value]' tabindex='6' rows='2' cols='30'>$value</textarea></td><td align='center'>";21 $r .= "<input name='updatemeta' type='button' class='updatemeta' tabindex='6' value='".attribute_escape(__('Update'))."' onclick='return theList.ajaxUpdater('meta','meta-$mid');' /><br />";22 $r .= "<input name='deletemeta[$mid]' type='submit' onclick=\"return deleteSomething( 'meta', $mid, '";23 $r .= js_escape(sprintf(__("You are about to delete the '%s' custom field on this post.\n'OK' to delete, 'Cancel' to stop."), $key_js));24 $r .= "' );\" class='deletemeta' tabindex='6' value='".attribute_escape(__('Delete'))."' /></td></tr>";25 return $r;26 }27 28 13 $id = (int) $_POST['id']; 29 switch ( $_POST['action'] ) : 14 switch ( $action = $_POST['action'] ) : 15 case 'add-post' : 16 check_ajax_referer( 'add-post' ); 17 add_filter( 'post_limits', $limit_filter = create_function( '$a', '$b = split(" ",$a); if ( !isset($b[2]) ) return $a; $start = intval(trim($b[1])) / 20 * 15; if ( !is_int($start) ) return $a; $start += intval(trim($b[2])) - 1; return "LIMIT $start, 1";' ) ); 18 wp_edit_posts_query( '_POST' ); 19 $posts_columns = wp_manage_posts_columns(); 20 ob_start(); 21 include( 'edit-post-rows.php' ); 22 $data = ob_get_contents(); 23 ob_end_clean(); 24 if ( !preg_match('|<tbody.+?>(.+)</tbody>|s', $data, $matches) ) 25 my_dump($data); 26 $data = trim($matches[1]); 27 $x = new WP_Ajax_Response( array( 'what' => 'post', 'id' => $id, 'data' => $data ) ); 28 $x->send(); 29 break; 30 30 case 'delete-comment' : 31 check_ajax_referer( "delete-comment_$id" ); 31 32 if ( !$comment = get_comment( $id ) ) 32 33 die('0'); … … 34 35 die('-1'); 35 36 36 if ( wp_delete_comment( $comment->comment_ID ) ) 37 if ( isset($_POST['spam']) && 1 == $_POST['spam'] ) 38 $r = wp_set_comment_status( $comment->comment_ID, 'spam' ); 39 else 40 $r = wp_delete_comment( $comment->comment_ID ); 41 42 die( $r ? '1' : '0' ); 43 break; 44 case 'delete-cat' : 45 check_ajax_referer( "delete-category_$id" ); 46 if ( !current_user_can( 'manage_categories' ) ) 47 die('-1'); 48 49 if ( wp_delete_category( $id ) ) 37 50 die('1'); 38 51 else die('0'); 39 52 break; 40 case 'delete-comment-as-spam' : 41 if ( !$comment = get_comment( $id ) ) 42 die('0'); 43 if ( !current_user_can( 'edit_post', $comment->comment_post_ID ) ) 44 die('-1'); 45 46 if ( wp_set_comment_status( $comment->comment_ID, 'spam' ) ) 53 case 'delete-link' : 54 check_ajax_referer( "delete-bookmark_$id" ); 55 if ( !current_user_can( 'manage_links' ) ) 56 die('-1'); 57 58 if ( wp_delete_link( $id ) ) 47 59 die('1'); 48 60 else die('0'); 49 61 break; 50 case 'delete-cat' :51 if ( !current_user_can( 'manage_categories' ) )52 die('-1');53 54 if ( wp_delete_category( $id ) )55 die('1');56 else die('0');57 break;58 case 'delete-link' :59 if ( !current_user_can( 'manage_links' ) )60 die('-1');61 62 if ( wp_delete_link( $id ) )63 die('1');64 else die('0');65 break;66 62 case 'delete-meta' : 63 check_ajax_referer( 'change_meta' ); 67 64 if ( !$meta = get_post_meta_by_id( $id ) ) 68 65 die('0'); … … 74 71 break; 75 72 case 'delete-post' : 73 check_ajax_referer( "{$action}_$id" ); 76 74 if ( !current_user_can( 'delete_post', $id ) ) 77 75 die('-1'); … … 79 77 if ( wp_delete_post( $id ) ) 80 78 die('1'); 81 else die('0'); 79 else 80 die('0'); 82 81 break; 83 82 case 'delete-page' : 83 check_ajax_referer( "{$action}_$id" ); 84 84 if ( !current_user_can( 'delete_page', $id ) ) 85 85 die('-1'); … … 98 98 99 99 if ( 'unapproved' == wp_get_comment_status($comment->comment_ID) ) { 100 check_ajax_referer( "approve-comment_$id" ); 100 101 if ( wp_set_comment_status( $comment->comment_ID, 'approve' ) ) 101 102 die('1'); 102 103 } else { 104 check_ajax_referer( "unapprove-comment_$id" ); 103 105 if ( wp_set_comment_status( $comment->comment_ID, 'hold' ) ) 104 106 die('1'); … … 107 109 break; 108 110 case 'add-category' : // On the Fly 111 check_ajax_referer( $action ); 109 112 if ( !current_user_can( 'manage_categories' ) ) 110 113 die('-1'); … … 121 124 'what' => 'category', 122 125 'id' => $cat_id, 123 'data' => "<li id='category-$cat_id'><label for='in-category-$cat_id' class='selectit'><input value='$cat_id' type='checkbox' checked='checked' name='post_category[]' id='in-category-$cat_id'/> $cat_name</label></li>" 126 'data' => "<li id='category-$cat_id'><label for='in-category-$cat_id' class='selectit'><input value='$cat_id' type='checkbox' checked='checked' name='post_category[]' id='in-category-$cat_id'/> $cat_name</label></li>", 127 'position' => -1 124 128 ) ); 125 129 } … … 127 131 break; 128 132 case 'add-link-category' : // On the Fly 133 check_ajax_referer( $action ); 129 134 if ( !current_user_can( 'manage_categories' ) ) 130 135 die('-1'); … … 137 142 if ( !$cat_id = is_term( $cat_name, 'link_category' ) ) { 138 143 $cat_id = wp_insert_term( $cat_name, 'link_category' ); 139 $cat_id = $cat_id['term_id'];140 144 } 145 $cat_id = $cat_id['term_id']; 141 146 $cat_name = wp_specialchars(stripslashes($cat_name)); 142 147 $x->add( array( 143 148 'what' => 'link-category', 144 149 'id' => $cat_id, 145 'data' => "<li id='link-category-$cat_id'><label for='in-link-category-$cat_id' class='selectit'><input value='$cat_id' type='checkbox' checked='checked' name='link_category[]' id='in-link-category-$cat_id'/> $cat_name</label></li>" 150 'data' => "<li id='link-category-$cat_id'><label for='in-link-category-$cat_id' class='selectit'><input value='$cat_id' type='checkbox' checked='checked' name='link_category[]' id='in-link-category-$cat_id'/> $cat_name</label></li>", 151 'position' => -1 146 152 ) ); 147 153 } … … 149 155 break; 150 156 case 'add-cat' : // From Manage->Categories 157 check_ajax_referer( 'add-category' ); 151 158 if ( !current_user_can( 'manage_categories' ) ) 152 159 die('-1'); … … 156 163 die('0'); 157 164 $level = 0; 158 $cat_full_name = $cat-> cat_name;165 $cat_full_name = $cat->name; 159 166 $_cat = $cat; 160 while ( $_cat-> category_parent ) {161 $_cat = get_category( $_cat-> category_parent );162 $cat_full_name = $_cat-> cat_name . ' — ' . $cat_full_name;167 while ( $_cat->parent ) { 168 $_cat = get_category( $_cat->parent ); 169 $cat_full_name = $_cat->name . ' — ' . $cat_full_name; 163 170 $level++; 164 171 } … … 167 174 $x = new WP_Ajax_Response( array( 168 175 'what' => 'cat', 169 'id' => $cat-> cat_ID,176 'id' => $cat->term_id, 170 177 'data' => _cat_row( $cat, $level, $cat_full_name ), 171 'supplemental' => array('name' => $cat_full_name, 'show-link' => sprintf(__( 'Category <a href="#%s">%s</a> added' ), "cat-$cat-> cat_ID", $cat_full_name))178 'supplemental' => array('name' => $cat_full_name, 'show-link' => sprintf(__( 'Category <a href="#%s">%s</a> added' ), "cat-$cat->term_id", $cat_full_name)) 172 179 ) ); 173 180 $x->send(); 174 181 break; 175 182 case 'add-comment' : 183 check_ajax_referer( $action ); 176 184 if ( !current_user_can( 'edit_post', $id ) ) 177 185 die('-1'); 178 186 $search = isset($_POST['s']) ? $_POST['s'] : false; 179 $start = isset($_POST['page']) ? intval($_POST['page']) * 25 : 25;187 $start = isset($_POST['page']) ? intval($_POST['page']) * 25 - 1: 24; 180 188 181 189 list($comments, $total) = _wp_get_comment_list( $search, $start, 1 ); … … 199 207 break; 200 208 case 'add-meta' : 201 if ( !current_user_can( 'edit_post', $id ) ) 202 die('-1'); 203 if ( $id < 0 ) { 204 $now = current_time('timestamp', 1); 205 if ( $pid = wp_insert_post( array( 206 'post_title' => sprintf('Draft created on %s at %s', date(get_option('date_format'), $now), date(get_option('time_format'), $now)) 207 ) ) ) { 208 if ( is_wp_error( $pid ) ) 209 return $pid; 210 $mid = add_meta( $pid ); 209 check_ajax_referer( 'change_meta' ); 210 $c = 0; 211 $pid = (int) $_POST['post_id']; 212 if ( isset($_POST['addmeta']) ) { 213 if ( !current_user_can( 'edit_post', $pid ) ) 214 die('-1'); 215 if ( $pid < 0 ) { 216 $now = current_time('timestamp', 1); 217 if ( $pid = wp_insert_post( array( 218 'post_title' => sprintf('Draft created on %s at %s', date(get_option('date_format'), $now), date(get_option('time_format'), $now)) 219 ) ) ) { 220 if ( is_wp_error( $pid ) ) { 221 $x = new WP_Ajax_Response( array( 222 'what' => 'meta', 223 'data' => $pid 224 ) ); 225 $x->send(); 226 } 227 $mid = add_meta( $pid ); 228 } else { 229 die('0'); 230 } 231 } else if ( !$mid = add_meta( $pid ) ) { 232 die('0'); 211 233 } 212 else 213 die('0'); 214 } else if ( !$mid = add_meta( $id ) ) { 215 die('0'); 216 } 217 218 $meta = get_post_meta_by_id( $mid ); 219 $key = $meta->meta_key; 220 $value = $meta->meta_value; 221 $pid = (int) $meta->post_id; 222 223 $x = new WP_Ajax_Response( array( 224 'what' => 'meta', 225 'id' => $mid, 226 'data' => wp_ajax_meta_row( $pid, $mid, $key, $value ), 227 'supplemental' => array('postid' => $pid) 228 ) ); 229 $x->send(); 230 break; 231 case 'update-meta' : 232 $mid = (int) array_pop(array_keys($_POST['meta'])); 233 $key = $_POST['meta'][$mid]['key']; 234 $value = $_POST['meta'][$mid]['value']; 235 if ( !$meta = get_post_meta_by_id( $mid ) ) 236 die('0'); // if meta doesn't exist 237 if ( !current_user_can( 'edit_post', $meta->post_id ) ) 238 die('-1'); 239 if ( $u = update_meta( $mid, $key, $value ) ) { 234 235 $meta = get_post_meta_by_id( $mid ); 236 $pid = (int) $meta->post_id; 237 $meta = get_object_vars( $meta ); 238 $x = new WP_Ajax_Response( array( 239 'what' => 'meta', 240 'id' => $mid, 241 'data' => _list_meta_row( $meta, $c ), 242 'position' => 1, 243 'supplemental' => array('postid' => $pid) 244 ) ); 245 } else { 246 $mid = (int) array_pop(array_keys($_POST['meta'])); 247 $key = $_POST['meta'][$mid]['key']; 248 $value = $_POST['meta'][$mid]['value']; 249 if ( !$meta = get_post_meta_by_id( $mid ) ) 250 die('0'); // if meta doesn't exist 251 if ( !current_user_can( 'edit_post', $meta->post_id ) ) 252 die('-1'); 253 if ( !$u = update_meta( $mid, $key, $value ) ) 254 die('1'); // We know meta exists; we also know it's unchanged (or DB error, in which case there are bigger problems). 240 255 $key = stripslashes($key); 241 256 $value = stripslashes($value); 242 257 $x = new WP_Ajax_Response( array( 243 258 'what' => 'meta', 244 'id' => $mid, 245 'data' => wp_ajax_meta_row( $meta->post_id, $mid, $key, $value ), 259 'id' => $mid, 'old_id' => $mid, 260 'data' => _list_meta_row( array( 261 'meta_key' => $key, 262 'meta_value' => $value, 263 'meta_id' => $mid 264 ), $c ), 265 'position' => 0, 246 266 'supplemental' => array('postid' => $meta->post_id) 247 267 ) ); 248 $x->send(); 249 } 250 die('1'); // We know meta exists; we also know it's unchanged (or DB error, in which case there are bigger problems). 268 } 269 $x->send(); 251 270 break; 252 271 case 'add-user' : 272 check_ajax_referer( $action ); 253 273 if ( !current_user_can('edit_users') ) 254 274 die('-1'); … … 262 282 } 263 283 $user_object = new WP_User( $user_id ); 284 264 285 $x = new WP_Ajax_Response( array( 265 286 'what' => 'user', 266 287 'id' => $user_id, 267 288 'data' => user_row( $user_object ), 268 'supplemental' => array('show-link' => sprintf(__( 'User <a href="#%s">%s</a> added' ), "user-$user_id", $user_object->user_login)) 289 'supplemental' => array( 290 'show-link' => sprintf(__( 'User <a href="#%s">%s</a> added' ), "user-$user_id", $user_object->user_login), 291 'role' => $user_object->roles[0] 292 ) 269 293 ) ); 270 294 $x->send(); 271 295 break; 272 296 case 'autosave' : // The name of this action is hardcoded in edit_post() 297 check_ajax_referer( $action ); 273 298 $_POST['post_content'] = $_POST['content']; 274 299 $_POST['post_excerpt'] = $_POST['excerpt']; … … 301 326 break; 302 327 case 'autosave-generate-nonces' : 328 check_ajax_referer( $action ); 303 329 $ID = (int) $_POST['post_ID']; 304 330 if($_POST['post_type'] == 'post') { trunk/wp-admin/categories.php
r6163 r6213 100 100 </tr> 101 101 </thead> 102 <tbody id="the-list" >102 <tbody id="the-list" class="list:cat"> 103 103 <?php 104 104 cat_rows(); trunk/wp-admin/edit-category-form.php
r6026 r6213 10 10 $heading = __('Add Category'); 11 11 $submit_text = __('Add Category »'); 12 $form = '<form name="addcat" id="addcat" method="post" action="categories.php" >';12 $form = '<form name="addcat" id="addcat" method="post" action="categories.php" class="add:the-list:">'; 13 13 $action = 'addcat'; 14 14 $nonce_action = 'add-category'; … … 44 44 </tr> 45 45 </table> 46 <p class="submit"><input type="submit" name="submit" value="<?php echo $submit_text ?>" /></p>46 <p class="submit"><input type="submit" class="add:the-list:cat:addcat" name="submit" value="<?php echo $submit_text ?>" /></p> 47 47 <?php do_action('edit_category_form', $category); ?> 48 48 </form> trunk/wp-admin/edit-comments.php
r6026 r6213 103 103 $start = " start='$offset'"; 104 104 105 echo "<ol id='the-comment-list' class=' commentlist' $start>\n";105 echo "<ol id='the-comment-list' class='list:comment commentlist' $start>\n"; 106 106 $i = 0; 107 107 foreach ( $comments as $comment ) { … … 113 113 if ( $extra_comments ) : ?> 114 114 <div id="extra-comments" style="display:none"> 115 < ul id="the-extra-comment-list" class="commentlist">115 <ol id="the-extra-comment-list" class="list:comment commentlist" style="color:red"> 116 116 <?php 117 117 foreach ( $extra_comments as $comment ) { 118 118 get_comment( $comment ); // Cache it 119 _wp_comment_list_item( $comment->comment_ID, ++$i ); 120 } 121 ?> 122 </ul> 119 _wp_comment_list_item( $comment->comment_ID, 0 ); 120 } 121 ?> 122 </ol> 123 <form action="" method="get" id="get-extra-comments" class="add:the-extra-comment-list:"> 124 <input type="hidden" name="page" value="<?php echo $page; ?>" /> 125 <input type="hidden" name="s" value="<?php echo attribute_escape(@$_GET['s']); ?>" /> 126 <?php wp_nonce_field( 'add-comment', '_ajax_nonce', false ); ?> 123 127 </div> 124 128 <?php endif; // $extra_comments ?> … … 150 154 <th scope="col" colspan="3" style="text-align: center">' . __('Actions') . '</th> 151 155 </tr> 152 </thead>'; 156 </thead> 157 <tbody id="the-comment-list" class="list:comment">'; 153 158 foreach ($comments as $comment) { 154 159 $post = get_post($comment->comment_post_ID); … … 160 165 <tr id="comment-<?php echo $comment->comment_ID; ?>" class='<?php echo $class; ?>'> 161 166 <td style="text-align: center"><?php if ( current_user_can('edit_post', $comment->comment_post_ID) ) { ?><input type="checkbox" name="delete_comments[]" value="<?php echo $comment->comment_ID; ?>" /><?php } ?></td> 162 <td ><?php comment_author_link() ?></td>167 <td class="comment-author"><?php comment_author_link() ?></td> 163 168 <td><?php comment_author_email_link() ?></td> 164 169 <td><a href="edit-comments.php?s=<?php comment_author_IP() ?>&mode=edit"><?php comment_author_IP() ?></a></td> … … 174 179 echo "<a href='comment.php?action=editcomment&c=$comment->comment_ID' class='edit'>" . __('Edit') . "</a>"; } ?></td> 175 180 <td><?php if ( current_user_can('edit_post', $comment->comment_post_ID) ) { 176 echo "<a href=\"comment.php?action=deletecomment&p=".$comment->comment_post_ID."&c=".$comment->comment_ID."\" onclick=\"return deleteSomething( 'comment', $comment->comment_ID, '" . js_escape(sprintf(__("You are about to delete this comment by '%s'. \n 'Cancel' to stop, 'OK' to delete."), $comment->comment_author )) . "', theCommentList );\" class='delete'>" . __('Delete') . "</a> "; 181 $url = clean_url( wp_nonce_url( "comment.php?action=deletecomment&p=$comment->comment_post_ID&c=$comment->comment_ID", "delete-comment_$comment->comment_ID" ) ); 182 echo "<a href='$url' class='delete:the-comment-list:comment-$comment->comment_ID delete'>" . __('Delete') . "</a> "; 177 183 } ?></td> 178 184 </tr> 179 185 <?php 180 186 } // end foreach 181 ?></table> 187 ?></tbody> 188 </table> 182 189 <p class="submit"><input type="submit" name="delete_button" class="delete" value="<?php _e('Delete Checked Comments »') ?>" onclick="var numchecked = getNumChecked(document.getElementById('deletecomments')); if(numchecked < 1) { alert('<?php echo js_escape(__("Please select some comments to delete")); ?>'); return false } return confirm('<?php echo sprintf(js_escape(__("You are about to delete %s comments permanently \n 'Cancel' to stop, 'OK' to delete.")), "' + numchecked + '"); ?>')" /> 183 190 <input type="submit" name="spam_button" value="<?php _e('Mark Checked Comments as Spam »') ?>" onclick="var numchecked = getNumChecked(document.getElementById('deletecomments')); if(numchecked < 1) { alert('<?php echo js_escape(__("Please select some comments to mark as spam")); ?>'); return false } return confirm('<?php echo sprintf(js_escape(__("You are about to mark %s comments as spam \n 'Cancel' to stop, 'OK' to mark as spam.")), "' + numchecked + '"); ?>')" /></p> trunk/wp-admin/edit-form-advanced.php
r6123 r6213 75 75 <h3 class="dbx-handle"><?php _e('Categories') ?></h3> 76 76 <div class="dbx-content"> 77 <p id="jaxcat">< /p>78 <ul id="categorychecklist" ><?php dropdown_categories(); ?></ul></div>77 <p id="jaxcat"><?php wp_nonce_field( 'add-category', '_ajax_nonce', false ); ?></p> 78 <ul id="categorychecklist" class="list:category"><?php dropdown_categories(); ?></ul></div> 79 79 </fieldset> 80 80 trunk/wp-admin/edit-link-form.php
r5826 r6213 43 43 <h3 class="dbx-handle"><?php _e('Categories') ?></h3> 44 44 <div class="dbx-content"> 45 <p id="jaxcat">< /p>46 <ul id=" linkcategorychecklist"><?php dropdown_link_categories(get_option('default_link_category')); ?></ul>45 <p id="jaxcat"><?php wp_nonce_field( 'add-link-category', '_ajax_nonce', false ); ?></p> 46 <ul id="categorychecklist" class="list:link-category"><?php dropdown_link_categories(get_option('default_link_category')); ?></ul> 47 47 </div> 48 48 </fieldset> trunk/wp-admin/edit-pages.php
r6034 r6213 3 3 $title = __('Pages'); 4 4 $parent_file = 'edit.php'; 5 wp_enqueue_script( ' listman' );5 wp_enqueue_script( 'wp-lists' ); 6 6 require_once('admin-header.php'); 7 7 … … 21 21 22 22 ?> 23 23 <script> 24 /* <![CDATA[ */ 25 jQuery(function($){$('#the-list').wpList();}); 26 /* ]]> */ 27 </script> 24 28 <div class="wrap"> 25 26 29 <h2><?php 27 30 // Use $_GET instead of is_ since they can override each other … … 82 85 </tr> 83 86 </thead> 84 <tbody id="the-list" >87 <tbody id="the-list" class="list:page"> 85 88 <?php page_rows(0, 0, $posts, $all); ?> 86 89 </tbody> trunk/wp-admin/edit-post-rows.php
r6041 r6213 9 9 </tr> 10 10 </thead> 11 <tbody id="the-list" >11 <tbody id="the-list" class="list:post"> 12 12 <?php 13 $i_post = 0; 13 14 if ( have_posts() ) { 14 15 $bgcolor = ''; 15 16 add_filter('the_title','wp_specialchars'); 16 while (have_posts()) : the_post(); 17 $class = ('alternate' == $class) ? '' : 'alternate'; 17 while (have_posts()) : the_post(); $i_post++; 18 if ( 16 == $i_post ) 19 echo "\t</tbody>\n\t<tbody id='the-extra-list' class='list:post' style='color: red'>\n"; // Hack! 20 $class = ( $i_post > 15 || 'alternate' == $class) ? '' : 'alternate'; 18 21 global $current_user; 19 22 $post_owner = ( $current_user->ID == $post->post_author ? 'self' : 'other' ); … … 91 94 case 'control_delete': 92 95 ?> 93 <td><?php if ( current_user_can('delete_post',$post->ID) ) { echo "<a href='" . wp_nonce_url("post.php?action=delete&post=$id", 'delete-post_' . $post->ID) . "' class='delete ' onclick=\"return deleteSomething( 'post', " . $id . ", '" . js_escape(sprintf(__("You are about to delete this post '%s'.\n'OK' to delete, 'Cancel' to stop."), get_the_title())) . "' );\">" . __('Delete') . "</a>"; } ?></td>96 <td><?php if ( current_user_can('delete_post',$post->ID) ) { echo "<a href='" . wp_nonce_url("post.php?action=delete&post=$id", 'delete-post_' . $post->ID) . "' class='delete:the-list:post-$post->ID delete'>" . __('Delete') . "</a>"; } ?></td> 94 97 <?php 95 98 break; trunk/wp-admin/edit.php
r6154 r6213 4 4 $title = __('Posts'); 5 5 $parent_file = 'edit.php'; 6 wp_enqueue_script( 1 == $_GET['c'] ? 'admin-comments' : 'listman' ); 6 wp_enqueue_script( 'admin-posts' ); 7 if ( 1 == $_GET['c'] ) 8 wp_enqueue_script( 'admin-comments' ); 7 9 require_once('admin-header.php'); 8 10 9 $_GET['m'] = (int) $_GET['m']; 10 $_GET['cat'] = (int) $_GET['cat']; 11 $post_stati = array( // array( adj, noun ) 12 'publish' => array(__('Published'), __('Published posts')), 13 'future' => array(__('Scheduled'), __('Scheduled posts')), 14 'pending' => array(__('Pending Review'), __('Pending posts')), 15 'draft' => array(__('Draft'), _c('Drafts|manage posts header')), 16 'private' => array(__('Private'), __('Private posts')) 17 ); 18 19 $avail_post_stati = $wpdb->get_col("SELECT DISTINCT post_status FROM $wpdb->posts WHERE post_type = 'post'"); 20 21 $post_status_q = ''; 22 $post_status_label = __('Posts'); 23 if ( isset($_GET['post_status']) && in_array( $_GET['post_status'], array_keys($post_stati) ) ) { 24 $post_status_label = $post_stati[$_GET['post_status']][1]; 25 $post_status_q = '&post_status=' . $_GET['post_status']; 26 } 11 add_filter( 'post_limits', $limit_filter = create_function( '$a', '$b = split(" ",$a); if ( !isset($b[2]) ) return $a; $start = intval(trim($b[1])) / 20 * 15; if ( !is_int($start) ) return $a; return "LIMIT $start, 20";' ) ); 12 list($post_stati, $avail_post_stati) = wp_edit_posts_query(); 13 $wp_query->max_num_pages = ceil( $wp_query->found_posts / 15 ); // We grab 20 but only show 15 ( 5 more for ajax extra ) 27 14 ?> 28 15 … … 31 18 <?php 32 19 33 if ( 'pending' === $_GET['post_status'] ) { 34 $order = 'ASC'; 35 $orderby = 'modified'; 36 } elseif ( 'draft' === $_GET['post_status'] ) { 37 $order = 'DESC'; 38 $orderby = 'modified'; 39 } else { 40 $order = 'DESC'; 41 $orderby = 'date'; 42 } 43 44 wp("what_to_show=posts$post_status_q&posts_per_page=15&order=$order&orderby=$orderby"); 45 46 // define the columns to display, the syntax is 'internal name' => 'display name' 47 $posts_columns = array(); 48 $posts_columns['id'] = '<div style="text-align: center">' . __('ID') . '</div>'; 49 if ( 'draft' === $_GET['post_status'] ) 50 $posts_columns['modified'] = __('Modified'); 51 elseif ( 'pending' === $_GET['post_status'] ) 52 $posts_columns['modified'] = __('Submitted'); 53 else 54 $posts_columns['date'] = __('When'); 55 $posts_columns['title'] = __('Title'); 56 $posts_columns['categories'] = __('Categories'); 57 if ( !in_array($_GET['post_status'], array('pending', 'draft', 'future')) ) 58 $posts_columns['comments'] = '<div style="text-align: center">' . __('Comments') . '</div>'; 59 $posts_columns['author'] = __('Author'); 60 61 $posts_columns = apply_filters('manage_posts_columns', $posts_columns); 62 63 // you can not edit these at the moment 64 $posts_columns['control_view'] = ''; 65 $posts_columns['control_edit'] = ''; 66 $posts_columns['control_delete'] = ''; 20 $posts_columns = wp_manage_posts_columns(); 67 21 68 22 ?> … … 155 109 </fieldset> 156 110 <input type="submit" id="post-query-submit" value="<?php _e('Filter »'); ?>" class="button" /> 111 <?php wp_nonce_field( 'add-post', '_ajax_nonce', false ); ?> 112 <input type="button" id="get-extra-button" class="add:the-extra-list:searchform" style="display:none" /> 157 113 </form> 158 114 trunk/wp-admin/includes/post.php
r6125 r6213 469 469 } 470 470 471 function wp_edit_posts_query( $q = '_GET' ) { 472 global $wpdb; 473 $$q['m'] = (int) $$q['m']; 474 $$q['cat'] = (int) $$q['cat']; 475 $post_stati = array( // array( adj, noun ) 476 'draft' => array(__('Draft'), _c('Drafts|manage posts header')), 477 'future' => array(__('Scheduled'), __('Scheduled posts')), 478 'pending' => array(__('Pending Review'), __('Pending posts')), 479 'private' => array(__('Private'), __('Private posts')), 480 'publish' => array(__('Published'), __('Published posts')) 481 ); 482 483 $avail_post_stati = $wpdb->get_col("SELECT DISTINCT post_status FROM $wpdb->posts WHERE post_type = 'post'"); 484 485 $post_status_q = ''; 486 $post_status_label = _c('Posts|manage posts header'); 487 if ( isset($$q['post_status']) && in_array( $$q['post_status'], array_keys($post_stati) ) ) { 488 $post_status_label = $post_stati[$$q['post_status']][1]; 489 $post_status_q = '&post_status=' . $$q['post_status']; 490 } 491 492 if ( 'pending' === $$q['post_status'] ) { 493 $order = 'ASC'; 494 $orderby = 'modified'; 495 } elseif ( 'draft' === $$q['post_status'] ) { 496 $order = 'DESC'; 497 $orderby = 'modified'; 498 } else { 499 $order = 'DESC'; 500 $orderby = 'date'; 501 } 502 503 wp("what_to_show=posts$post_status_q&posts_per_page=20&order=$order&orderby=$orderby"); 504 505 return array($post_stati, $avail_post_stati); 506 } 507 471 508 ?> trunk/wp-admin/includes/template.php
r6193 r6213 42 42 43 43 if ( $category->term_id != $default_cat_id ) 44 $edit .= "<td><a href='" . wp_nonce_url( "categories.php?action=delete&cat_ID=$category->term_id", 'delete-category_' . $category->term_id ) . "' onclick=\"return deleteSomething( 'cat', $category->term_id, '" . js_escape(sprintf( __("You are about to delete the category '%s'.\nAll posts that were only assigned to this category will be assigned to the '%s' category.\nAll links that were only assigned to this category will be assigned to the '%s' category.\n'OK' to delete, 'Cancel' to stop." ), $category->name, get_catname( $default_cat_id ), get_catname( $default_link_cat_id ) )) . "' );\" class='delete'>".__( 'Delete' )."</a>";44 $edit .= "<td><a href='" . wp_nonce_url( "categories.php?action=delete&cat_ID=$category->term_id", 'delete-category_' . $category->term_id ) . "' class='delete:the-list:cat-$category->term_id delete'>".__( 'Delete' )."</a>"; 45 45 else 46 46 $edit .= "<td style='text-align:center'>".__( "Default" ); … … 165 165 } 166 166 167 // define the columns to display, the syntax is 'internal name' => 'display name' 168 function wp_manage_posts_columns() { 169 $posts_columns = array(); 170 $posts_columns['id'] = '<div style="text-align: center">' . __('ID') . '</div>'; 171 if ( 'draft' === $_GET['post_status'] ) 172 $posts_columns['modified'] = __('Modified'); 173 elseif ( 'pending' === $_GET['post_status'] ) 174 $posts_columns['modified'] = __('Submitted'); 175 else 176 $posts_columns['date'] = __('When'); 177 $posts_columns['title'] = __('Title'); 178 $posts_columns['categories'] = __('Categories'); 179 if ( !in_array($_GET['post_status'], array('pending', 'draft', 'future')) ) 180 $posts_columns['comments'] = '<div style="text-align: center">' . __('Comments') . '</div>'; 181 $posts_columns['author'] = __('Author'); 182 $posts_columns = apply_filters('manage_posts_columns', $posts_columns); 183 184 // you can not edit these at the moment 185 $posts_columns['control_view'] = ''; 186 $posts_columns['control_edit'] = ''; 187 $posts_columns['control_delete'] = ''; 188 189 return $posts_columns; 190 } 191 167 192 function page_rows( $parent = 0, $level = 0, $pages = 0, $hierarchy = true ) { 168 193 global $wpdb, $class, $post; … … 191 216 <td><?php the_author() ?></td> 192 217 <td><?php if ( '0000-00-00 00:00:00' ==$post->post_modified ) _e('Unpublished'); else echo mysql2date( __('Y-m-d g:i a'), $post->post_modified ); ?></td> 193 <td><a href="<?php the_permalink(); ?>" rel="permalink" class="view"><?php _e( 'View' ); ?></a></td>218 <td><a href="<?php the_permalink(); ?>" rel="permalink" class="view"><?php _e( 'View' ); ?></a></td> 194 219 <td><?php if ( current_user_can( 'edit_page', $id ) ) { echo "<a href='page.php?action=edit&post=$id' class='edit'>" . __( 'Edit' ) . "</a>"; } ?></td> 195 <td><?php if ( current_user_can( 'delete_page', $id ) ) { echo "<a href='" . wp_nonce_url( "page.php?action=delete&post=$id", 'delete-page_' . $id ) . "' class='delete ' onclick=\"return deleteSomething( 'page', " . $id . ", '" . js_escape(sprintf( __("You are about to delete the '%s' page.\n'OK' to delete, 'Cancel' to stop." ), get_the_title() ) ) . "' );\">" . __( 'Delete' ) . "</a>"; } ?></td>220 <td><?php if ( current_user_can( 'delete_page', $id ) ) { echo "<a href='" . wp_nonce_url( "page.php?action=delete&post=$id", 'delete-page_' . $id ) . "' class='delete:the-list:page-$id delete'>" . __( 'Delete' ) . "</a>"; } ?></td> 196 221 </tr> 197 222 … … 263 288 function _wp_comment_list_item( $id, $alt = 0 ) { 264 289 global $authordata, $comment, $wpdb; 265 $id = (int) $id;266 290 $comment =& get_comment( $id ); 291 $id = (int) $comment->comment_ID; 267 292 $class = ''; 268 293 $post = get_post($comment->comment_post_ID); 269 294 $authordata = get_userdata($post->post_author); 270 $comment_status = wp_get_comment_status($ comment->comment_ID);295 $comment_status = wp_get_comment_status($id); 271 296 if ( 'unapproved' == $comment_status ) 272 297 $class .= ' unapproved'; 273 298 if ( $alt % 2 ) 274 299 $class .= ' alternate'; 275 echo "<li id='comment-$ comment->comment_ID' class='$class'>";276 ?> 277 <p><strong ><?php comment_author(); ?></strong> <?php if ($comment->comment_author_email) { ?>| <?php comment_author_email_link() ?> <?php } if ($comment->comment_author_url && 'http://' != $comment->comment_author_url) { ?> | <?php comment_author_url_link() ?> <?php } ?>| <?php _e('IP:') ?> <a href="http://ws.arin.net/cgi-bin/whois.pl?queryinput=<?php comment_author_IP() ?>"><?php comment_author_IP() ?></a></p>300 echo "<li id='comment-$id' class='$class'>"; 301 ?> 302 <p><strong class="comment-author"><?php comment_author(); ?></strong> <?php if ($comment->comment_author_email) { ?>| <?php comment_author_email_link() ?> <?php } if ($comment->comment_author_url && 'http://' != $comment->comment_author_url) { ?> | <?php comment_author_url_link() ?> <?php } ?>| <?php _e('IP:') ?> <a href="http://ws.arin.net/cgi-bin/whois.pl?queryinput=<?php comment_author_IP() ?>"><?php comment_author_IP() ?></a></p> 278 303 279 304 <?php comment_text() ?> … … 282 307 <?php 283 308 if ( current_user_can('edit_post', $comment->comment_post_ID) ) { 284 echo " <a href='comment.php?action=editcomment&c=".$comment->comment_ID."'>" . __('Edit') . '</a>'; 285 echo ' | <a href="' . wp_nonce_url('comment.php?action=deletecomment&p=' . $comment->comment_post_ID . '&c=' . $comment->comment_ID, 'delete-comment_' . $comment->comment_ID) . '" onclick="return deleteSomething( \'comment\', ' . $comment->comment_ID . ', \'' . js_escape(sprintf(__("You are about to delete this comment by '%s'.\n'Cancel' to stop, 'OK' to delete."), $comment->comment_author)) . "', theCommentList );\">" . __('Delete') . '</a> '; 309 echo " <a href='comment.php?action=editcomment&c=$id'>" . __('Edit') . '</a>'; 310 $url = clean_url( wp_nonce_url( "comment.php?action=deletecomment&p=$comment->comment_post_ID&c=$id", "delete-comment_$id" ) ); 311 echo " | <a href='$url' class='delete:the-comment-list:comment-$id'>" . __('Delete') . '</a> '; 286 312 if ( ('none' != $comment_status) && ( current_user_can('moderate_comments') ) ) { 287 echo '<span class="unapprove"> | <a href="' . wp_nonce_url('comment.php?action=unapprovecomment&p=' . $comment->comment_post_ID . '&c=' . $comment->comment_ID, 'unapprove-comment_' . $comment->comment_ID) . '" onclick="return dimSomething( \'comment\', ' . $comment->comment_ID . ', \'unapproved\', theCommentList );">' . __('Unapprove') . '</a> </span>'; 288 echo '<span class="approve"> | <a href="' . wp_nonce_url('comment.php?action=approvecomment&p=' . $comment->comment_post_ID . '&c=' . $comment->comment_ID, 'approve-comment_' . $comment->comment_ID) . '" onclick="return dimSomething( \'comment\', ' . $comment->comment_ID . ', \'unapproved\', theCommentList );">' . __('Approve') . '</a> </span>'; 289 } 290 echo " | <a href=\"" . wp_nonce_url("comment.php?action=deletecomment&dt=spam&p=" . $comment->comment_post_ID . "&c=" . $comment->comment_ID, 'delete-comment_' . $comment->comment_ID) . "\" onclick=\"return deleteSomething( 'comment-as-spam', $comment->comment_ID, '" . js_escape(sprintf(__("You are about to mark as spam this comment by '%s'.\n'Cancel' to stop, 'OK' to mark as spam."), $comment->comment_author)) . "', theCommentList );\">" . __('Spam') . "</a> "; 313 $url = clean_url( wp_nonce_url( "comment.php?action=unapprovecomment&p=$comment->comment_post_ID&c=$id", "unapprove-comment_$id" ) ); 314 echo "<span class='unapprove'> | <a href='$url' class='dim:the-comment-list:comment-$id:unapproved:FF3333'>" . __('Unapprove') . '</a> </span>'; 315 $url = clean_url( wp_nonce_url( "comment.php?action=approvecomment&p=$comment->comment_post_ID&c=$id", "approve-comment_$id" ) ); 316 echo "<span class='approve'> | <a href='$url' class='dim:the-comment-list:comment-$id:unapproved:FFFF33:FFFF33'>" . __('Approve') . '</a> </span>'; 317 } 318 $url = clean_url( wp_nonce_url( "comment.php?action=deletecomment&dt=spam&p=$comment->comment_post_ID&c=$id", "delete-comment_$id" ) ); 319 echo " | <a href='$url' class='delete:the-comment-list:comment-$id::spam=1'>" . __('Spam') . '</a> '; 291 320 } 292 321 $post = get_post($comment->comment_post_ID, OBJECT, 'display'); … … 325 354 // Exit if no meta 326 355 if (!$meta ) { 327 echo '<tbody id="the-list" ><tr style="display: none;"><td> </td></tr></tbody>'; //TBODY needed for list-manipulation JS356 echo '<tbody id="the-list" class="list:meta"><tr style="display: none;"><td> </td></tr></tbody>'; //TBODY needed for list-manipulation JS 328 357 return; 329 358 } … … 337 366 </tr> 338 367 </thead> 339 <?php 340 $r ="\n\t<tbody id='the-list'>"; 341 foreach ( $meta as $entry ) { 342 ++ $count; 343 if ( $count % 2 ) 344 $style = 'alternate'; 345 else 346 $style = ''; 347 if ('_' == $entry['meta_key'] { 0 } ) 348 $style .= ' hidden'; 349 350 if ( is_serialized( $entry['meta_value'] ) ) { 351 if ( is_serialized_string( $entry['meta_value'] ) ) { 352 // this is a serialized string, so we should display it 353 $entry['meta_value'] = maybe_unserialize( $entry['meta_value'] ); 354 } else { 355 // this is a serialized array/object so we should NOT display it 356 --$count; 357 continue; 358 } 359 } 360 361 $key_js = js_escape( $entry['meta_key'] ); 362 $entry['meta_key'] = attribute_escape($entry['meta_key']); 363 $entry['meta_value'] = attribute_escape($entry['meta_value']); 364 $entry['meta_id'] = (int) $entry['meta_id']; 365 $r .= "\n\t<tr id='meta-{$entry['meta_id']}' class='$style'>"; 366 $r .= "\n\t\t<td valign='top'><input name='meta[{$entry['meta_id']}][key]' tabindex='6' type='text' size='20' value='{$entry['meta_key']}' /></td>"; 367 $r .= "\n\t\t<td><textarea name='meta[{$entry['meta_id']}][value]' tabindex='6' rows='2' cols='30'>{$entry['meta_value']}</textarea></td>"; 368 $r .= "\n\t\t<td align='center'><input name='updatemeta' type='submit' class='updatemeta' tabindex='6' value='".attribute_escape(__( 'Update' ))."' /><br />"; 369 $r .= "\n\t\t<input name='deletemeta[{$entry['meta_id']}]' type='submit' onclick=\"return deleteSomething( 'meta', {$entry['meta_id']}, '"; 370 $r .= js_escape(sprintf( __("You are about to delete the '%s' custom field on this post.\n'OK' to delete, 'Cancel' to stop." ), $key_js ) ); 371 $r .= "' );\" class='deletemeta' tabindex='6' value='".attribute_escape(__( 'Delete' ))."' /></td>"; 372 $r .= "\n\t</tr>"; 373 } 374 echo $r; 368 <tbody id='the-list' class='list:meta'> 369 <?php 370 foreach ( $meta as $entry ) 371 echo _list_meta_row( $entry, $count ); 375 372 echo "\n\t</tbody>"; 373 } 374 375 function _list_meta_row( $entry, &$count ) { 376 $r = ''; 377 ++ $count; 378 if ( $count % 2 ) 379 $style = 'alternate'; 380 else 381 $style = ''; 382 if ('_' == $entry['meta_key'] { 0 } ) 383 $style .= ' hidden'; 384 385 if ( is_serialized( $entry['meta_value'] ) ) { 386 if ( is_serialized_string( $entry['meta_value'] ) ) { 387 // this is a serialized string, so we should display it 388 $entry['meta_value'] = maybe_unserialize( $entry['meta_value'] ); 389 } else { 390 // this is a serialized array/object so we should NOT display it 391 --$count; 392 return; 393 } 394 } 395 396 $key_js = js_escape( $entry['meta_key'] ); 397 $entry['meta_key'] = attribute_escape($entry['meta_key']); 398 $entry['meta_value'] = attribute_escape($entry['meta_value']); 399 $entry['meta_id'] = (int) $entry['meta_id']; 400 $r .= "\n\t<tr id='meta-{$entry['meta_id']}' class='$style'>"; 401 $r .= "\n\t\t<td valign='top'><input name='meta[{$entry['meta_id']}][key]' tabindex='6' type='text' size='20' value='{$entry['meta_key']}' /></td>"; 402 $r .= "\n\t\t<td><textarea name='meta[{$entry['meta_id']}][value]' tabindex='6' rows='2' cols='30'>{$entry['meta_value']}</textarea></td>"; 403 $r .= "\n\t\t<td align='center'><input name='updatemeta' type='submit' tabindex='6' value='".attribute_escape(__( 'Update' ))."' class='add:the-list:meta-{$entry['meta_id']} updatemeta' /><br />"; 404 $r .= "\n\t\t<input name='deletemeta[{$entry['meta_id']}]' type='submit' "; 405 $r .= "class='delete:the-list:meta-{$entry['meta_id']} deletemeta' tabindex='6' value='".attribute_escape(__( 'Delete' ))."' />"; 406 $r .= "<input type='hidden' name='_ajax_nonce' value='$nonce' />"; 407 $r .= "</td>\n\t</tr>"; 408 return $r; 376 409 } 377 410 … … 414 447 </tr> 415 448 449 <tr class="submit"><td colspan="3"> 450 <?php wp_nonce_field( 'change_meta', '_ajax_nonce', false ); ?> 451 <input type="submit" id="addmetasub" name="addmeta" class="add:the-list:newmeta" tabindex="9" value="<?php _e( 'Add Custom Field »' ) ?>" /> 452 </td></tr> 416 453 </table> 417 <p class="submit"><input type="submit" id="updatemetasub" name="updatemeta" tabindex="9" value="<?php _e( 'Add Custom Field »' ) ?>" /></p>418 454 <?php 419 455 trunk/wp-admin/js/cat.js
