diff -r 34716fd837a4 -r be944660c56a wp/wp-admin/async-upload.php
--- a/wp/wp-admin/async-upload.php Tue Dec 15 15:52:01 2020 +0100
+++ b/wp/wp-admin/async-upload.php Wed Sep 21 18:19:35 2022 +0200
@@ -39,8 +39,8 @@
}
// Just fetch the detail form for that attachment.
-if ( isset( $_REQUEST['attachment_id'] ) && intval( $_REQUEST['attachment_id'] ) && $_REQUEST['fetch'] ) {
- $id = intval( $_REQUEST['attachment_id'] );
+if ( isset( $_REQUEST['attachment_id'] ) && (int) $_REQUEST['attachment_id'] && $_REQUEST['fetch'] ) {
+ $id = (int) $_REQUEST['attachment_id'];
$post = get_post( $id );
if ( 'attachment' !== $post->post_type ) {
wp_die( __( 'Invalid post type.' ) );
@@ -48,20 +48,40 @@
switch ( $_REQUEST['fetch'] ) {
case 3:
- $thumb_url = wp_get_attachment_image_src( $id, 'thumbnail', true );
- if ( $thumb_url ) {
- echo '';
- }
- if ( current_user_can( 'edit_post', $id ) ) {
- echo '' . _x( 'Edit', 'media item' ) . '';
- } else {
- echo ' ';
- }
+ ?>
+