Changeset 21896

Timestamp:

09/18/2012 07:06:27 PM (12 years ago)

Author:

nacin

Message:

Allow wp.uploadFile to upload the attachment to a post. props djzone, josephscott, maxcutler. fixes #13917.

File:

• trunk/wp-includes/class-wp-xmlrpc-server.php (modified) (1 diff)

trunk/wp-includes/class-wp-xmlrpc-server.php

@@ -4895 +4895 @@
         }
         // Construct the attachment array
-        // attach to post_id 0
         $post_id = 0;
+        if ( ! empty( $data['post_id'] ) ) {
+            $post_id = (int) $data['post_id'];
+
+            if ( ! current_user_can( 'edit_post', $post_id ) )
+                return new IXR_Error( 401, __( 'Sorry, you cannot edit this post.' ) );
+        }
         $attachment = array(
             'post_title' => $name,