Use check_ajax_referer() instead of check_admin_referer() for AJAX requests in media form handling.

[khushipatel15]

This patch replaces the use of check_admin_referer( 'media-form' ) with check_ajax_referer( 'media-form' ) in the relevant media-handling code to better align with AJAX request security practices in WordPress.

The check_ajax_referer() function is specifically intended for verifying nonces on AJAX requests and provides a more appropriate response structure for such scenarios. It also ensures compatibility with how WordPress handles wp_die() in AJAX contexts, where it returns a -1 response instead of rendering an HTML error page.

[khushipatel15]

This patch shows use of ajax reference.

[narenin]

Hi @khushipatel15

Thanks for the patch.

But check_admin_referer() also ensures intent by verifying that a user was referred from another admin page with correct security nonce, so in this case we are also checking the nonce.