wp_ajax_save_attachment()

Ajax handler for updating attachment attributes.

Source

File: wp-admin/includes/ajax-actions.php 

function wp_ajax_save_attachment() {
	if ( ! isset( $_REQUEST['id'] ) || ! isset( $_REQUEST['changes'] ) )
		wp_send_json_error();

	if ( ! $id = absint( $_REQUEST['id'] ) )
		wp_send_json_error();

	check_ajax_referer( 'update-post_' . $id, 'nonce' );

	if ( ! current_user_can( 'edit_post', $id ) )
		wp_send_json_error();

	$changes = $_REQUEST['changes'];
	$post    = get_post( $id, ARRAY_A );

	if ( 'attachment' != $post['post_type'] )
		wp_send_json_error();

	if ( isset( $changes['parent'] ) )
		$post['post_parent'] = $changes['parent'];

	if ( isset( $changes['title'] ) )
		$post['post_title'] = $changes['title'];

	if ( isset( $changes['caption'] ) )
		$post['post_excerpt'] = $changes['caption'];

	if ( isset( $changes['description'] ) )
		$post['post_content'] = $changes['description'];

	if ( MEDIA_TRASH && isset( $changes['status'] ) )
		$post['post_status'] = $changes['status'];

	if ( isset( $changes['alt'] ) ) {
		$alt = wp_unslash( $changes['alt'] );
		if ( $alt != get_post_meta( $id, '_wp_attachment_image_alt', true ) ) {
			$alt = wp_strip_all_tags( $alt, true );
			update_post_meta( $id, '_wp_attachment_image_alt', wp_slash( $alt ) );
		}
	}

	if ( wp_attachment_is( 'audio', $post['ID'] ) ) {
		$changed = false;
		$id3data = wp_get_attachment_metadata( $post['ID'] );
		if ( ! is_array( $id3data ) ) {
			$changed = true;
			$id3data = array();
		}
		foreach ( wp_get_attachment_id3_keys( (object) $post, 'edit' ) as $key => $label ) {
			if ( isset( $changes[ $key ] ) ) {
				$changed = true;
				$id3data[ $key ] = sanitize_text_field( wp_unslash( $changes[ $key ] ) );
			}
		}

		if ( $changed ) {
			wp_update_attachment_metadata( $id, $id3data );
		}
	}

	if ( MEDIA_TRASH && isset( $changes['status'] ) && 'trash' === $changes['status'] ) {
		wp_delete_post( $id );
	} else {
		wp_update_post( $post );
	}

	wp_send_json_success();
}

Expand Source Code View on GitHub

Related

Uses

Uses
Uses Description
wp-includes/media.php: wp_get_attachment_id3_keys()

Returns useful keys to use to lookup data from an attachment’s stored metadata.
wp-includes/pluggable.php: check_ajax_referer()

Verifies the Ajax request to prevent processing requests external of the blog.
wp-includes/capabilities.php: current_user_can()

Whether the current user has a specific capability.
wp-includes/post.php: wp_attachment_is()

Verifies an attachment is of a given type.
wp-includes/post.php: wp_get_attachment_metadata()

Retrieve attachment meta field for attachment ID.
wp-includes/post.php: wp_update_attachment_metadata()

Update metadata for an attachment.
wp-includes/post.php: wp_update_post()

Update a post with new post data.
wp-includes/post.php: wp_delete_post()

Trash or delete a post or page.
wp-includes/post.php: update_post_meta()

Update post meta field based on post ID.
wp-includes/post.php: get_post_meta()

Retrieve post meta field for a post.
wp-includes/post.php: get_post()

Retrieves post data given a post ID or post object.
wp-includes/formatting.php: wp_unslash()

Remove slashes from a string or array of strings.
wp-includes/formatting.php: wp_slash()

Add slashes to a string or array of strings.
wp-includes/formatting.php: wp_strip_all_tags()

Properly strip all HTML tags including script and style
wp-includes/formatting.php: sanitize_text_field()

Sanitizes a string from user input or from the database.
wp-includes/functions.php: absint()

Convert a value to non-negative integer.
wp-includes/functions.php: wp_send_json_error()

Send a JSON response back to an Ajax request, indicating failure.
wp-includes/functions.php: wp_send_json_success()

Send a JSON response back to an Ajax request, indicating success.
Show 13 more uses Hide more uses

Changelog

Changelog
Version Description
WP-3.5.0 Introduced.