<?php

/**

 * Media Library administration panel.

 *

 * @package WordPress

 * @subpackage Administration

 */

/** WordPress Administration Bootstrap */

require_once('admin.php');

wp_enqueue_script( 'wp-ajax-response' );

wp_enqueue_script( 'jquery-ui-draggable' );

if (!current_user_can('upload_files'))

	wp_die(__('You do not have permission to upload files.'));

if ( isset($_GET['find_detached'] ) ) {

	check_admin_referer('bulk-media');

	if ( ! current_user_can('edit_posts') )

		wp_die( __('You are not allowed to scan for lost attachments.') );

	$all_posts = $wpdb->get_col("SELECT ID FROM $wpdb->posts WHERE post_type = 'post' OR post_type = 'page'");

	$all_att = $wpdb->get_results("SELECT ID, post_parent FROM $wpdb->posts WHERE post_type = 'attachment'");

	$lost = array();

	foreach ( (array) $all_att as $att ) {

		if ( $att->post_parent > 0 && ! in_array($att->post_parent, $all_posts) )

			$lost[] = $att->ID;

	}

	$_GET['detached'] = 1;

} elseif ( isset($_GET['found_post_id']) && isset($_GET['media']) ) {

	check_admin_referer('bulk-media');

	if ( ! ( $parent_id = (int) $_GET['found_post_id'] ) )

		return;

	$parent = &get_post($parent_id);

	if ( !current_user_can('edit_post', $parent_id) )

		wp_die( __('You are not allowed to edit this post.') );

	$attach = array();

	foreach( (array) $_GET['media'] as $att_id ) {

		$att_id = (int) $att_id;

		if ( !current_user_can('edit_post', $att_id) )

			continue;

		$attach[] = $att_id;

	}

	if ( ! empty($attach) ) {

		$attach = implode(',', $attach);

		$attached = $wpdb->query( $wpdb->prepare("UPDATE $wpdb->posts SET post_parent = %d WHERE post_type = 'attachment' AND ID IN ($attach)", $parent_id) );

	}

	if ( isset($attached) ) {

		$location = 'upload.php';

		if ( $referer = wp_get_referer() ) {

			if ( false !== strpos($referer, 'upload.php') )

				$location = $referer;

		}

		$location = add_query_arg( array( 'detached' => 1, 'attached' => $attached ) , $location );

		wp_redirect($location);

		exit;

	}

} elseif ( isset($_GET['action']) && isset($_GET['media']) && ( -1 != $_GET['action'] || -1 != $_GET['action2'] ) ) {

	check_admin_referer('bulk-media');

	$doaction = ( -1 != $_GET['action'] ) ? $_GET['action'] : $_GET['action2'];

	if ( 'delete' == $doaction ) {

		foreach( (array) $_GET['media'] as $post_id_del ) {

			$post_del = & get_post($post_id_del);

			if ( !current_user_can('delete_post', $post_id_del) )

				wp_die( __('You are not allowed to delete this post.') );

			if ( $post_del->post_type == 'attachment' )

				if ( ! wp_delete_attachment($post_id_del) )

					wp_die( __('Error in deleting...') );

		}

		$location = 'upload.php';

		if ( $referer = wp_get_referer() ) {

			if ( false !== strpos($referer, 'upload.php') )

				$location = $referer;

		}

		$location = add_query_arg('message', 2, $location);

		$location = remove_query_arg('posted', $location);

		wp_redirect($location);

		exit;

	}

} elseif ( isset($_GET['_wp_http_referer']) && ! empty($_GET['_wp_http_referer']) ) {

	 wp_redirect( remove_query_arg( array('_wp_http_referer', '_wpnonce'), stripslashes($_SERVER['REQUEST_URI']) ) );

	 exit;

}

$title = __('Media Library');

$parent_file = 'upload.php';

if ( ! isset( $_GET['paged'] ) || $_GET['paged'] < 1 )

	$_GET['paged'] = 1;

if ( isset($_GET['detached']) ) {

	if ( !empty($lost) ) {

		$start = ( $_GET['paged'] - 1 ) * 50;

		$page_links_total = ceil(count($lost) / 50);

		$lost = implode(',', $lost);

		$orphans = $wpdb->get_results( "SELECT * FROM $wpdb->posts WHERE post_type = 'attachment' AND ID IN ($lost) LIMIT $start, 50" );

	} else {

		$start = ( $_GET['paged'] - 1 ) * 25;

		$orphans = $wpdb->get_results( "SELECT SQL_CALC_FOUND_ROWS * FROM $wpdb->posts WHERE post_type = 'attachment' AND post_parent < 1 LIMIT $start, 25" );

		$page_links_total = ceil($wpdb->get_var( "SELECT FOUND_ROWS()" ) / 25);

	}

	$post_mime_types = array(

				'image' => array(__('Images'), __('Manage Images'), _n_noop('Image (%s)', 'Images (%s)')),

				'audio' => array(__('Audio'), __('Manage Audio'), _n_noop('Audio (%s)', 'Audio (%s)')),

				'video' => array(__('Video'), __('Manage Video'), _n_noop('Video (%s)', 'Video (%s)')),

			);

	$post_mime_types = apply_filters('post_mime_types', $post_mime_types);

	$avail_post_mime_types = get_available_post_mime_types('attachment');

	if ( isset($_GET['post_mime_type']) && !array_intersect( (array) $_GET['post_mime_type'], array_keys($post_mime_types) ) )

		unset($_GET['post_mime_type']);

} else {

	list($post_mime_types, $avail_post_mime_types) = wp_edit_attachments_query();

}

wp_enqueue_script('media');

require_once('admin-header.php'); ?>

<?php

if ( isset($_GET['posted']) && (int) $_GET['posted'] ) {

	$_GET['message'] = '1';

	$_SERVER['REQUEST_URI'] = remove_query_arg(array('posted'), $_SERVER['REQUEST_URI']);

}

if ( isset($_GET['attached']) && (int) $_GET['attached'] ) {

	$attached = (int) $_GET['attached'];

	$message = sprintf( _n('Reattached %d attachment', 'Reattached %d attachments', $attached), $attached );

	$_SERVER['REQUEST_URI'] = remove_query_arg(array('attached'), $_SERVER['REQUEST_URI']);

}

$messages[1] = __('Media attachment updated.');

$messages[2] = __('Media deleted.');

$messages[3] = __('Error saving media attachment.');

if ( isset($_GET['message']) && (int) $_GET['message'] ) {

	$message = $messages[$_GET['message']];

	$_SERVER['REQUEST_URI'] = remove_query_arg(array('message'), $_SERVER['REQUEST_URI']);

}

?>

<?php do_action('restrict_manage_posts'); ?>

<div class="wrap">

<?php screen_icon(); ?>

<h2><?php echo esc_html( $title );

if ( isset($_GET['s']) && $_GET['s'] )

	printf( '<span class="subtitle">' . __('Search results for &#8220;%s&#8221;') . '</span>', esc_html( get_search_query() ) ); ?>

</h2>

<?php

if ( isset($message) ) { ?>

<div id="message" class="updated fade"><p><?php echo $message; ?></p></div>

<?php

}

?>

<ul class="subsubsub">

<?php

$type_links = array();

$_num_posts = (array) wp_count_attachments();

$_total_posts = array_sum( $_num_posts );

$matches = wp_match_mime_types(array_keys($post_mime_types), array_keys($_num_posts));

foreach ( $matches as $type => $reals )

	foreach ( $reals as $real )

		$num_posts[$type] = ( isset( $num_posts[$type] ) ) ? $num_posts[$type] + $_num_posts[$real] : $_num_posts[$real];

$class = empty($_GET['post_mime_type']) && ! isset($_GET['detached']) ? ' class="current"' : '';

$type_links[] = "<li><a href='upload.php'$class>" . sprintf( _nx( 'All <span class="count">(%s)</span>', 'All <span class="count">(%s)</span>', $_total_posts, 'uploaded files' ), number_format_i18n( $_total_posts ) ) . '</a>';

foreach ( $post_mime_types as $mime_type => $label ) {

	$class = '';

	if ( !wp_match_mime_types($mime_type, $avail_post_mime_types) )

		continue;

	if ( !empty($_GET['post_mime_type']) && wp_match_mime_types($mime_type, $_GET['post_mime_type']) )

		$class = ' class="current"';

	$type_links[] = "<li><a href='upload.php?post_mime_type=$mime_type'$class>" . sprintf( _n( $label[2][0], $label[2][1], $num_posts[$mime_type] ), number_format_i18n( $num_posts[$mime_type] )) . '</a>';

}

$class = isset($_GET['detached']) ? ' class="current"' : '';

$type_links[] = '<li><a href="upload.php?detached=1"' . $class . '>' . __('Unattached') . '</a>';

echo implode( " |</li>\n", $type_links) . '</li>';

unset($type_links);

?>

</ul>

<form class="search-form" action="" method="get">

<p class="search-box">

	<label class="screen-reader-text" for="media-search-input"><?php _e( 'Search Media' ); ?>:</label>

	<input type="text" id="media-search-input" name="s" value="<?php the_search_query(); ?>" />

	<input type="submit" value="<?php esc_attr_e( 'Search Media' ); ?>" class="button" />

</p>

</form>

<form id="posts-filter" action="" method="get">

<div class="tablenav">

<?php

if ( ! isset($page_links_total) )

	$page_links_total =  $wp_query->max_num_pages;

$page_links = paginate_links( array(

	'base' => add_query_arg( 'paged', '%#%' ),

	'format' => '',

	'prev_text' => __('«'),

	'next_text' => __('»'),

	'total' => $page_links_total,

	'current' => $_GET['paged']

));

if ( $page_links ) : ?>

<div class="tablenav-pages"><?php $page_links_text = sprintf( '<span class="displaying-num">' . __( 'Displaying %s&#8211;%s of %s' ) . '</span>%s',

	number_format_i18n( ( $_GET['paged'] - 1 ) * $wp_query->query_vars['posts_per_page'] + 1 ),

	number_format_i18n( min( $_GET['paged'] * $wp_query->query_vars['posts_per_page'], $wp_query->found_posts ) ),

	number_format_i18n( $wp_query->found_posts ),

	$page_links

); echo $page_links_text; ?></div>

<?php endif; ?>

<div class="alignleft actions">

<select name="action" class="select-action">

<option value="-1" selected="selected"><?php _e('Bulk Actions'); ?></option>

<option value="delete"><?php _e('Delete'); ?></option>

<?php if ( isset($orphans) ) { ?>

<option value="attach"><?php _e('Attach to a post'); ?></option>

<?php } ?>

</select>

<input type="submit" value="<?php esc_attr_e('Apply'); ?>" name="doaction" id="doaction" class="button-secondary action" />

<?php wp_nonce_field('bulk-media'); ?>

<?php

if ( ! is_singular() && ! isset($_GET['detached']) ) {

	$arc_query = "SELECT DISTINCT YEAR(post_date) AS yyear, MONTH(post_date) AS mmonth FROM $wpdb->posts WHERE post_type = 'attachment' ORDER BY post_date DESC";

	$arc_result = $wpdb->get_results( $arc_query );

	$month_count = count($arc_result);

	if ( $month_count && !( 1 == $month_count && 0 == $arc_result[0]->mmonth ) ) : ?>

<select name='m'>

<option<?php selected( @$_GET['m'], 0 ); ?> value='0'><?php _e('Show all dates'); ?></option>

<?php

foreach ($arc_result as $arc_row) {

	if ( $arc_row->yyear == 0 )

		continue;

	$arc_row->mmonth = zeroise( $arc_row->mmonth, 2 );

	if ( $arc_row->yyear . $arc_row->mmonth == $_GET['m'] )

		$default = ' selected="selected"';

	else

		$default = '';

	echo "<option$default value='" . esc_attr("$arc_row->yyear$arc_row->mmonth") . "'>";

	echo $wp_locale->get_month($arc_row->mmonth) . " $arc_row->yyear";

	echo "</option>\n";

}

?>

</select>

<?php endif; // month_count ?>

<input type="submit" id="post-query-submit" value="<?php esc_attr_e('Filter'); ?>" class="button-secondary" />

<?php } // ! is_singular ?>

<?php if ( isset($_GET['detached']) ) { ?>

	<input type="submit" id="find_detached" name="find_detached" value="<?php esc_attr_e('Scan for lost attachments'); ?>" class="button-secondary" />

<?php } ?>

</div>

<br class="clear" />

</div>

<div class="clear"></div>

<?php if ( isset($orphans) ) { ?>

<table class="widefat" cellspacing="0">

<thead>

<tr>

	<th scope="col" class="check-column"><input type="checkbox" /></th>

	<th scope="col"></th>

	<th scope="col"><?php /* translators: column name in media */ echo _x('Media', 'media column name'); ?></th>

	<th scope="col"><?php /* translators: column name in media */ echo _x('Author', 'media column name'); ?></th>

	<th scope="col"><?php /* translators: column name in media */ echo _x('Date Added', 'media column name'); ?></th>

</tr>

</thead>

<tfoot>

<tr>

	<th scope="col" class="check-column"><input type="checkbox" /></th>

	<th scope="col"></th>

	<th scope="col"><?php /* translators: column name in media */ echo _x('Media', 'media column name'); ?></th>

	<th scope="col"><?php /* translators: column name in media */ echo _x('Author', 'media column name'); ?></th>

	<th scope="col"><?php /* translators: column name in media */ echo _x('Date Added', 'media column name'); ?></th>

</tr>

</tfoot>

<tbody id="the-list" class="list:post">

<?php

	if ( $orphans ) {

		foreach ( $orphans as $post ) {

			$class = 'alternate' == $class ? '' : 'alternate';

			$att_title = esc_html( _draft_or_post_title($post->ID) );

?>

	<tr id='post-<?php echo $post->ID; ?>' class='<?php echo $class; ?>' valign="top">

		<th scope="row" class="check-column"><input type="checkbox" name="media[]" value="<?php echo esc_attr($post->ID); ?>" /></th>

		<td class="media-icon"><?php

		if ( $thumb = wp_get_attachment_image( $post->ID, array(80, 60), true ) ) { ?>

			<a href="media.php?action=edit&amp;attachment_id=<?php echo $post->ID; ?>" title="<?php echo esc_attr(sprintf(__('Edit &#8220;%s&#8221;'), $att_title)); ?>"><?php echo $thumb; ?></a>

<?php	} ?></td>

		<td class="media column-media"><strong><a href="<?php echo get_edit_post_link( $post->ID ); ?>" title="<?php echo esc_attr(sprintf(__('Edit &#8220;%s&#8221;'), $att_title)); ?>"><?php echo $att_title; ?></a></strong><br />

		<?php echo strtoupper(preg_replace('/^.*?\.(\w+)$/', '$1', get_attached_file($post->ID))); ?>

		<div class="row-actions">

		<?php

		$actions = array();

		if ( current_user_can('edit_post', $post->ID) )

			$actions['edit'] = '<a href="' . get_edit_post_link($post->ID, true) . '">' . __('Edit') . '</a>';

		if ( current_user_can('delete_post', $post->ID) )

			$actions['delete'] = "<a class='submitdelete' href='" . wp_nonce_url("post.php?action=delete&amp;post=$post->ID", 'delete-post_' . $post->ID) . "' onclick=\"if ( confirm('" . esc_js(sprintf( ('draft' == $post->post_status) ? __("You are about to delete this attachment '%s'\n  'Cancel' to stop, 'OK' to delete.") : __("You are about to delete this attachment '%s'\n  'Cancel' to stop, 'OK' to delete."), $post->post_title )) . "') ) { return true;}return false;\">" . __('Delete') . "</a>";

		$actions['view'] = '<a href="' . get_permalink($post->ID) . '" title="' . esc_attr(sprintf(__('View &#8220;%s&#8221;'), $title)) . '" rel="permalink">' . __('View') . '</a>';

		if ( current_user_can('edit_post', $post->ID) )

			$actions['attach'] = '<a href="#the-list" onclick="findPosts.open(\'media[]\',\''.$post->ID.'\');return false;">'.__('Attach').'</a>';

		$actions = apply_filters( 'media_row_actions', $actions, $post );

		$action_count = count($actions);

		$i = 0;

		foreach ( $actions as $action => $link ) {

			++$i;

			( $i == $action_count ) ? $sep = '' : $sep = ' | ';

			echo "<span class='$action'>$link$sep</span>";

		} ?>

		</div></td>

		<td class="author column-author"><?php $author = get_userdata($post->post_author); echo $author->display_name; ?></td>

<?php	if ( '0000-00-00 00:00:00' == $post->post_date && 'date' == $column_name ) {

			$t_time = $h_time = __('Unpublished');

		} else {

			$t_time = get_the_time(__('Y/m/d g:i:s A'));

			$m_time = $post->post_date;

			$time = get_post_time( 'G', true );

			if ( ( abs($t_diff = time() - $time) ) < 86400 ) {

				if ( $t_diff < 0 )

					$h_time = sprintf( __('%s from now'), human_time_diff( $time ) );

				else

					$h_time = sprintf( __('%s ago'), human_time_diff( $time ) );

			} else {

				$h_time = mysql2date(__('Y/m/d'), $m_time);