diff -r 34716fd837a4 -r be944660c56a wp/wp-admin/async-upload.php --- a/wp/wp-admin/async-upload.php Tue Dec 15 15:52:01 2020 +0100 +++ b/wp/wp-admin/async-upload.php Wed Sep 21 18:19:35 2022 +0200 @@ -39,8 +39,8 @@ } // Just fetch the detail form for that attachment. -if ( isset( $_REQUEST['attachment_id'] ) && intval( $_REQUEST['attachment_id'] ) && $_REQUEST['fetch'] ) { - $id = intval( $_REQUEST['attachment_id'] ); +if ( isset( $_REQUEST['attachment_id'] ) && (int) $_REQUEST['attachment_id'] && $_REQUEST['fetch'] ) { + $id = (int) $_REQUEST['attachment_id']; $post = get_post( $id ); if ( 'attachment' !== $post->post_type ) { wp_die( __( 'Invalid post type.' ) ); @@ -48,20 +48,40 @@ switch ( $_REQUEST['fetch'] ) { case 3: - $thumb_url = wp_get_attachment_image_src( $id, 'thumbnail', true ); - if ( $thumb_url ) { - echo ''; - } - if ( current_user_can( 'edit_post', $id ) ) { - echo '' . _x( 'Edit', 'media item' ) . ''; - } else { - echo '' . _x( 'Success', 'media item' ) . ''; - } + ?> +
+
+ '; + } - // Title shouldn't ever be empty, but use filename just in case. - $file = get_attached_file( $post->ID ); - $title = $post->post_title ? $post->post_title : wp_basename( $file ); - echo '
' . esc_html( wp_html_excerpt( $title, 60, '…' ) ) . '
'; + // Title shouldn't ever be empty, but use filename just in case. + $file = get_attached_file( $post->ID ); + $file_url = wp_get_attachment_url( $post->ID ); + $title = $post->post_title ? $post->post_title : wp_basename( $file ); + ?> +
+ + +
+
+
+ + + + + ' . _x( 'Edit', 'media item' ) . ''; + } else { + echo '' . _x( 'Success', 'media item' ) . ''; + } + ?> +
+
+