root/trunk/wp-admin/admin-ajax.php

<?php
/**
 * WordPress AJAX Process Execution.
 *
 * @package WordPress
 * @subpackage Administration
 */

/**
 * Executing AJAX process.
 *
 * @since unknown
 */
define('DOING_AJAX', true);
define('WP_ADMIN', true);

require_once('../wp-load.php');
require_once('includes/admin.php');

if ( ! is_user_logged_in() ) {

    if ( $_POST['action'] == 'autosave' ) {
        $id = isset($_POST['post_ID'])? (int) $_POST['post_ID'] : 0;

        if ( ! $id )
            die('-1');

        $message = sprintf( __('<strong>ALERT: You are logged out!</strong> Could not save draft. <a href="%s" target="blank">Please log in again.</a>'), wp_login_url() );
            $x = new WP_Ajax_Response( array(
                'what' => 'autosave',
                'id' => $id,
                'data' => $message
            ) );
            $x->send();
    }

    die('-1');
}

if ( isset( $_GET['action'] ) ) :
switch ( $action = $_GET['action'] ) :
case 'ajax-tag-search' :
    if ( !current_user_can( 'manage_categories' ) )
        die('-1');

    $s = $_GET['q']; // is this slashed already?

    if ( false !== strpos( $s, ',' ) ) {
        $s = explode( ',', $s );
        $s = $s[count( $s ) - 1];
    }
    $s = trim( $s );
    if ( strlen( $s ) < 2 )
        die; // require 2 chars for matching
    $results = $wpdb->get_col( "SELECT t.name FROM $wpdb->term_taxonomy AS tt INNER JOIN $wpdb->terms AS t ON tt.term_id = t.term_id WHERE tt.taxonomy = 'post_tag' AND t.name LIKE ('%". $s . "%')" );
    echo join( $results, "\n" );
    die;
    break;
default :
    do_action( 'wp_ajax_' . $_GET['action'] );
    die('0');
    break;
endswitch;
endif;

$id = isset($_POST['id'])? (int) $_POST['id'] : 0;
switch ( $action = $_POST['action'] ) :
case 'delete-comment' :
    check_ajax_referer( "delete-comment_$id" );
    if ( !$comment = get_comment( $id ) )
        die('1');
    if ( !current_user_can( 'edit_post', $comment->comment_post_ID ) )
        die('-1');

    if ( isset($_POST['spam']) && 1 == $_POST['spam'] ) {
        if ( 'spam' == wp_get_comment_status( $comment->comment_ID ) )
            die('1');
        $r = wp_set_comment_status( $comment->comment_ID, 'spam' );
    } else {
        $r = wp_delete_comment( $comment->comment_ID );
    }

    die( $r ? '1' : '0' );
    break;
case 'delete-cat' :
    check_ajax_referer( "delete-category_$id" );
    if ( !current_user_can( 'manage_categories' ) )
        die('-1');

    $cat = get_category( $id );
    if ( !$cat || is_wp_error( $cat ) )
        die('1');

    if ( wp_delete_category( $id ) )
        die('1');
    else
        die('0');
    break;
case 'delete-tag' :
    check_ajax_referer( "delete-tag_$id" );
    if ( !current_user_can( 'manage_categories' ) )
        die('-1');

    $tag = get_term( $id, 'post_tag' );
    if ( !$tag || is_wp_error( $tag ) )
        die('1');

    if ( wp_delete_term($id, 'post_tag'))
        die('1');
    else
        die('0');
    break;
case 'delete-link-cat' :
    check_ajax_referer( "delete-link-category_$id" );
    if ( !current_user_can( 'manage_categories' ) )
        die('-1');

    $cat = get_term( $id, 'link_category' );
    if ( !$cat || is_wp_error( $cat ) )
        die('1');

    $cat_name = get_term_field('name', $id, 'link_category');

    // Don't delete the default cats.
    if ( $id == get_option('default_link_category') ) {
        $x = new WP_AJAX_Response( array(
            'what' => 'link-cat',
            'id' => $id,
            'data' => new WP_Error( 'default-link-cat', sprintf(__("Can&#8217;t delete the <strong>%s</strong> category: this is the default one"), $cat_name) )
        ) );
        $x->send();
    }

    $r = wp_delete_term($id, 'link_category');
    if ( !$r )
        die('0');
    if ( is_wp_error($r) ) {
        $x = new WP_AJAX_Response( array(
            'what' => 'link-cat',
            'id' => $id,
            'data' => $r
        ) );
        $x->send();
    }
    die('1');
    break;
case 'delete-link' :
    check_ajax_referer( "delete-bookmark_$id" );
    if ( !current_user_can( 'manage_links' ) )
        die('-1');

    $link = get_bookmark( $id );
    if ( !$link || is_wp_error( $link ) )
        die('1');

    if ( wp_delete_link( $id ) )
        die('1');
    else
        die('0');
    break;
case 'delete-meta' :
    check_ajax_referer( "delete-meta_$id" );
    if ( !$meta = get_post_meta_by_id( $id ) )
        die('1');

    if ( !current_user_can( 'edit_post', $meta->post_id ) )
        die('-1');
    if ( delete_meta( $meta->meta_id ) )
        die('1');
    die('0');
    break;
case 'delete-post' :
    check_ajax_referer( "{$action}_$id" );
    if ( !current_user_can( 'delete_post', $id ) )
        die('-1');

    if ( !get_post( $id ) )
        die('1');

    if ( wp_delete_post( $id ) )
        die('1');
    else
        die('0');
    break;
case 'delete-page' :
    check_ajax_referer( "{$action}_$id" );
    if ( !current_user_can( 'delete_page', $id ) )
        die('-1');

    if ( !get_page( $id ) )
        die('1');

    if ( wp_delete_post( $id ) )
        die('1');
    else
        die('0');
    break;
case 'dim-comment' :
    if ( !$comment = get_comment( $id ) )
        die('0');

    if ( !current_user_can( 'edit_post', $comment->comment_post_ID ) )
        die('-1');
    if ( !current_user_can( 'moderate_comments' ) )
        die('-1');

    $current = wp_get_comment_status( $comment->comment_ID );
    if ( $_POST['new'] == $current )
        die('1');

    if ( in_array( $current, array( 'unapproved', 'spam' ) ) ) {
        check_ajax_referer( "approve-comment_$id" );
        if ( wp_set_comment_status( $comment->comment_ID, 'approve' ) )
            die('1');
    } else {
        check_ajax_referer( "unapprove-comment_$id" );
        if ( wp_set_comment_status( $comment->comment_ID, 'hold' ) )
            die('1');
    }
    die('0');
    break;
case 'add-category' : // On the Fly
    check_ajax_referer( $action );
    if ( !current_user_can( 'manage_categories' ) )
        die('-1');
    $names = explode(',', $_POST['newcat']);
    if ( 0 > $parent = (int) $_POST['newcat_parent'] )
        $parent = 0;
    $post_category = isset($_POST['post_category'])? (array) $_POST['post_category'] : array();
    $checked_categories = array_map( 'absint', (array) $post_category );
    $popular_ids = isset( $_POST['popular_ids'] ) ?
            array_map( 'absint', explode( ',', $_POST['popular_ids'] ) ) :
            false;

    $x = new WP_Ajax_Response();
    foreach ( $names as $cat_name ) {
        $cat_name = trim($cat_name);
        $category_nicename = sanitize_title($cat_name);
        if ( '' === $category_nicename )
            continue;
        $cat_id = wp_create_category( $cat_name, $parent );
        $checked_categories[] = $cat_id;
        if ( $parent ) // Do these all at once in a second
            continue;
        $category = get_category( $cat_id );
        ob_start();
            wp_category_checklist( 0, $cat_id, $checked_categories, $popular_ids );
        $data = ob_get_contents();
        ob_end_clean();
        $x->add( array(
            'what' => 'category',
            'id' => $cat_id,
            'data' => $data,
            'position' => -1
        ) );
    }
    if ( $parent ) { // Foncy - replace the parent and all its children
        $parent = get_category( $parent );
        ob_start();
            dropdown_categories( 0, $parent );
        $data = ob_get_contents();
        ob_end_clean();
        $x->add( array(
            'what' => 'category',
            'id' => $parent->term_id,
            'old_id' => $parent->term_id,
            'data' => $data,
            'position' => -1
        ) );

    }
    $x->send();
    break;
case 'add-link-category' : // On the Fly
    check_ajax_referer( $action );
    if ( !current_user_can( 'manage_categories' ) )
        die('-1');
    $names = explode(',', $_POST['newcat']);
    $x = new WP_Ajax_Response();
    foreach ( $names as $cat_name ) {
        $cat_name = trim($cat_name);
        $slug = sanitize_title($cat_name);
        if ( '' === $slug )
            continue;
        if ( !$cat_id = is_term( $cat_name, 'link_category' ) ) {
            $cat_id = wp_insert_term( $cat_name, 'link_category' );
        }
        $cat_id = $cat_id['term_id'];
        $cat_name = wp_specialchars(stripslashes($cat_name));
        $x->add( array(
            'what' => 'link-category',
            'id' => $cat_id,
            'data' => "<li id='link-category-$cat_id'><label for='in-link-category-$cat_id' class='selectit'><input value='$cat_id' type='checkbox' checked='checked' name='link_category[]' id='in-link-category-$cat_id'/> $cat_name</label></li>",
            'position' => -1
        ) );
    }
    $x->send();
    break;
case 'add-cat' : // From Manage->Categories
    check_ajax_referer( 'add-category' );
    if ( !current_user_can( 'manage_categories' ) )
        die('-1');

    if ( '' === trim($_POST['cat_name']) ) {
        $x = new WP_Ajax_Response( array(
            'what' => 'cat',
            'id' => new WP_Error( 'cat_name', __('You did not enter a category name.') )
        ) );
        $x->send();
    }

    if ( category_exists( trim( $_POST['cat_name'] ) ) ) {
        $x = new WP_Ajax_Response( array(
            'what' => 'cat',
            'id' => new WP_Error( 'cat_exists', __('The category you are trying to create already exists.'), array( 'form-field' => 'cat_name' ) ),
        ) );
        $x->send();
    }

    $cat = wp_insert_category( $_POST, true );

    if ( is_wp_error($cat) ) {
        $x = new WP_Ajax_Response( array(
            'what' => 'cat',
            'id' => $cat
        ) );
        $x->send();
    }

    if ( !$cat || (!$cat = get_category( $cat )) )
        die('0');

    $level = 0;
    $cat_full_name = $cat->name;
    $_cat = $cat;
    while ( $_cat->parent ) {
        $_cat = get_category( $_cat->parent );
        $cat_full_name = $_cat->name . ' &#8212; ' . $cat_full_name;
        $level++;
    }
    $cat_full_name = attribute_escape($cat_full_name);

    $x = new WP_Ajax_Response( array(
        'what' => 'cat',
        'id' => $cat->term_id,
        'position' => -1,
        'data' => _cat_row( $cat, $level, $cat_full_name ),
        'supplemental' => array('name' => $cat_full_name, 'show-link' => sprintf(__( 'Category <a href="#%s">%s</a> added' ), "cat-$cat->term_id", $cat_full_name))
    ) );
    $x->send();
    break;
case 'add-link-cat' : // From Blogroll -> Categories
    check_ajax_referer( 'add-link-category' );
    if ( !current_user_can( 'manage_categories' ) )
        die('-1');

    if ( '' === trim($_POST['name']) ) {
        $x = new WP_Ajax_Response( array(
            'what' => 'link-cat',
            'id' => new WP_Error( 'name', __('You did not enter a category name.') )
        ) );
        $x->send();
    }

    $r = wp_insert_term($_POST['name'], 'link_category', $_POST );
    if ( is_wp_error( $r ) ) {
        $x = new WP_AJAX_Response( array(
            'what' => 'link-cat',
            'id' => $r
        ) );
        $x->send();
    }

    extract($r, EXTR_SKIP);

    if ( !$link_cat = link_cat_row( $term_id ) )
        die('0');

    $x = new WP_Ajax_Response( array(
        'what' => 'link-cat',
        'id' => $term_id,
        'position' => -1,
        'data' => $link_cat
    ) );
    $x->send();
    break;
case 'add-tag' : // From Manage->Tags
    check_ajax_referer( 'add-tag' );
    if ( !current_user_can( 'manage_categories' ) )
        die('-1');

    if ( '' === trim($_POST['name']) ) {
        $x = new WP_Ajax_Response( array(
            'what' => 'tag',
            'id' => new WP_Error( 'name', __('You did not enter a tag name.') )
        ) );
        $x->send();
    }

    $tag = wp_insert_term($_POST['name'], 'post_tag', $_POST );

    if ( is_wp_error($tag) ) {
        $x = new WP_Ajax_Response( array(
            'what' => 'tag',
            'id' => $tag
        ) );
        $x->send();
    }

    if ( !$tag || (!$tag = get_term( $tag['term_id'], 'post_tag' )) )
        die('0');

    $tag_full_name = $tag->name;
    $tag_full_name = attribute_escape($tag_full_name);

    $x = new WP_Ajax_Response( array(
        'what' => 'tag',
        'id' => $tag->term_id,
        'position' => '-1',
        'data' => _tag_row( $tag ),
        'supplemental' => array('name' => $tag_full_name, 'show-link' => sprintf(__( 'Tag <a href="#%s">%s</a> added' ), "tag-$tag->term_id", $tag_full_name))
    ) );
    $x->send();
    break;
case 'get-tagcloud' :
    if ( !current_user_can( 'manage_categories' ) )
        die('-1');

    $tags = get_tags( array( 'number' => 45, 'orderby' => 'count', 'order' => 'DESC' ) );
    
    if ( empty( $tags ) )
        die('0');
    
    foreach ( $tags as $key => $tag ) {
        $tags[ $key ]->link = '#';
        $tags[ $key ]->id = $tag->term_id;
    }

    $return = wp_generate_tag_cloud( $tags );

    if ( empty($return) )
        die('0');
    
    echo $return;
    
    exit;
    break;
case 'add-comment' :
    check_ajax_referer( $action );
    if ( !current_user_can( 'edit_post', $id ) )
        die('-1');
    $search = isset($_POST['s']) ? $_POST['s'] : false;
    $start = isset($_POST['page']) ? intval($_POST['page']) * 25 - 1: 24;
    $status = isset($_POST['comment_status']) ? $_POST['comment_status'] : false;
    $mode = isset($_POST['mode']) ? $_POST['mode'] : 'detail';

    list($comments, $total) = _wp_get_comment_list( $status, $search, $start, 1 );

    if ( get_option('show_avatars') )
        add_filter( 'comment_author', 'floated_admin_avatar' );

    if ( !$comments )
        die('1');
    $x = new WP_Ajax_Response();
    foreach ( (array) $comments as $comment ) {
        get_comment( $comment );
        ob_start();
            _wp_comment_row( $comment->comment_ID, $mode, $status );
            $comment_list_item = ob_get_contents();
        ob_end_clean();
        $x->add( array(
            'what' => 'comment',
            'id' => $comment->comment_ID,
            'data' => $comment_list_item
        ) );
    }
    $x->send();
    break;
case 'get-comments' :
    check_ajax_referer( $action );

    $post_ID = (int) $_POST['post_ID'];
    if ( !current_user_can( 'edit_post', $post_ID ) )
        die('-1');

    $start = isset($_POST['start']) ? intval($_POST['start']) : 0;
    $num = isset($_POST['num']) ? intval($_POST['num']) : 10;

    list($comments, $total) = _wp_get_comment_list( false, false, $start, $num, $post_ID );

    if ( !$comments )
        die('1');

    $comment_list_item = '';
    $x = new WP_Ajax_Response();
    foreach ( (array) $comments as $comment ) {
        get_comment( $comment );
        ob_start();
            _wp_comment_row( $comment->comment_ID, 'single', false, false );
            $comment_list_item .= ob_get_contents();
        ob_end_clean();
    }
   &n