Changeset 10641 for trunk/wp-admin/admin-ajax.php
- Timestamp:
- 02/24/2009 02:37:22 AM (17 years ago)
- File:
-
- 1 edited
-
trunk/wp-admin/admin-ajax.php (modified) (2 diffs)
Legend:
- Unmodified
- Added
- Removed
-
trunk/wp-admin/admin-ajax.php
r10622 r10641 950 950 case 'closed-postboxes' : 951 951 check_ajax_referer( 'closedpostboxes', 'closedpostboxesnonce' ); 952 $closed = isset( $_POST['closed'] ) ? $_POST['closed'] : '';952 $closed = isset( $_POST['closed'] ) ? $_POST['closed'] : ''; 953 953 $closed = explode( ',', $_POST['closed'] ); 954 $hidden = isset( $_POST['hidden'] ) ? $_POST['hidden'] : '';954 $hidden = isset( $_POST['hidden'] ) ? $_POST['hidden'] : ''; 955 955 $hidden = explode( ',', $_POST['hidden'] ); 956 $page = isset( $_POST['page'] )? $_POST['page'] : ''; 957 if ( !preg_match( '/^[a-z-_]+$/', $page ) ) { 956 $page = isset( $_POST['page'] ) ? $_POST['page'] : ''; 957 958 if ( !preg_match( '/^[a-z_-]+$/', $page ) ) 958 959 die(-1); 959 } 960 $current_user = wp_get_current_user(); 960 961 if ( ! $user = wp_get_current_user() ) 962 die(-1); 963 961 964 if ( is_array($closed) ) 962 update_usermeta($current_user->ID, 'closedpostboxes_'.$page, $closed); 965 update_usermeta($user->ID, 'closedpostboxes_'.$page, $closed); 966 963 967 if ( is_array($hidden) ) 964 update_usermeta($current_user->ID, 'meta-box-hidden_'.$page, $hidden); 965 break; 968 update_usermeta($user->ID, 'meta-box-hidden_'.$page, $hidden); 969 970 die('1'); 971 break; 966 972 case 'hidden-columns' : 967 973 check_ajax_referer( 'hiddencolumns', 'hiddencolumnsnonce' ); 968 $hidden = isset( $_POST['hidden'] ) ? $_POST['hidden'] : '';974 $hidden = isset( $_POST['hidden'] ) ? $_POST['hidden'] : ''; 969 975 $hidden = explode( ',', $_POST['hidden'] ); 970 $page = isset( $_POST['page'] )? $_POST['page'] : ''; 971 if ( !preg_match( '/^[a-z_-]+$/', $page ) ) { 976 $page = isset( $_POST['page'] ) ? $_POST['page'] : ''; 977 978 if ( !preg_match( '/^[a-z_-]+$/', $page ) ) 972 979 die(-1); 973 } 974 $current_user = wp_get_current_user(); 980 981 if ( ! $user = wp_get_current_user() ) 982 die(-1); 983 975 984 if ( is_array($hidden) ) 976 update_usermeta($current_user->ID, "manage-$page-columns-hidden", $hidden); 977 break; 985 update_usermeta($user->ID, "manage-$page-columns-hidden", $hidden); 986 987 die('1'); 988 break; 989 case 'meta-box-order': 990 check_ajax_referer( 'meta-box-order' ); 991 $order = isset( $_POST['order'] ) ? (array) $_POST['order'] : false; 992 $page_columns = isset( $_POST['page_columns'] ) ? (int) $_POST['page_columns'] : 0; 993 $page = isset( $_POST['page'] ) ? $_POST['page'] : ''; 994 995 if ( !preg_match( '/^[a-z_-]+$/', $page ) ) 996 die(-1); 997 998 if ( ! $user = wp_get_current_user() ) 999 die(-1); 1000 1001 if ( $order ) 1002 update_user_option($user->ID, "meta-box-order_$page", $order); 1003 1004 if ( $page_columns ) 1005 update_usermeta($user->ID, "screen_layout_$page", $page_columns); 1006 1007 die('1'); 1008 break; 978 1009 case 'get-permalink': 979 1010 check_ajax_referer( 'getpermalink', 'getpermalinknonce' ); … … 1106 1137 1107 1138 exit; 1108 break;1109 case 'meta-box-order':1110 check_ajax_referer( 'meta-box-order' );1111 update_user_option( $GLOBALS['current_user']->ID, "meta-box-order_$_POST[page]", $_POST['order'] );1112 die('1');1113 1139 break; 1114 1140 case 'find_posts':
Note: See TracChangeset
for help on using the changeset viewer.