Changeset 30354 for trunk/src/wp-admin/async-upload.php

Timestamp:

11/16/2014 05:46:35 AM (10 years ago)

Author:

johnbillion

Message:

Add some specific JSON responses when there are user permission errors for AJAX file uploads. Replace some usage of wp_json_encode() with wp_send_json_*().

See #25849
Props gcorne

File:

• trunk/src/wp-admin/async-upload.php (modified) (2 diffs)

trunk/src/wp-admin/async-upload.php

@@ -33 +33 @@
 require_once( ABSPATH . 'wp-admin/admin.php' );
 
-if ( !current_user_can('upload_files') )
-    wp_die(__('You do not have permission to upload files.'));
-
-header('Content-Type: text/html; charset=' . get_option('blog_charset'));
-
 if ( isset( $_REQUEST['action'] ) && 'upload-attachment' === $_REQUEST['action'] ) {
     include( ABSPATH . 'wp-admin/includes/ajax-actions.php' );
@@ -47 +42 @@
     die( '0' );
 }
+
+if ( ! current_user_can( 'upload_files' ) ) {
+    wp_die( __( 'You do not have permission to upload files.' ) );
+}
+
+header( 'Content-Type: text/html; charset=' . get_option( 'blog_charset' ) );
 
 // just fetch the detail form for that attachment