<?php

[0] Fix | Delete

/**

[1] Fix | Delete

* WordPress Generic Request (POST/GET) Handler

[2] Fix | Delete

*

[3] Fix | Delete

* Intended for form submission handling in themes and plugins.

[4] Fix | Delete

*

[5] Fix | Delete

* @package WordPress

[6] Fix | Delete

* @subpackage Administration

[7] Fix | Delete

*/

[8] Fix | Delete

[9] Fix | Delete

/** We are located in WordPress Administration Screens */

[10] Fix | Delete

if ( ! defined( 'WP_ADMIN' ) ) {

[11] Fix | Delete

define( 'WP_ADMIN', true );

[12] Fix | Delete

}

[13] Fix | Delete

[14] Fix | Delete

/** Load WordPress Bootstrap */

[15] Fix | Delete

require_once dirname( __DIR__ ) . '/wp-load.php';

[16] Fix | Delete

[17] Fix | Delete

/** Allow for cross-domain requests (from the front end). */

[18] Fix | Delete

send_origin_headers();

[19] Fix | Delete

[20] Fix | Delete

require_once ABSPATH . 'wp-admin/includes/admin.php';

[21] Fix | Delete

[22] Fix | Delete

nocache_headers();

[23] Fix | Delete

[24] Fix | Delete

/** This action is documented in wp-admin/admin.php */

[25] Fix | Delete

do_action( 'admin_init' );

[26] Fix | Delete

[27] Fix | Delete

$action = ! empty( $_REQUEST['action'] ) ? sanitize_text_field( $_REQUEST['action'] ) : '';

[28] Fix | Delete

[29] Fix | Delete

// Reject invalid parameters.

[30] Fix | Delete

if ( ! is_scalar( $action ) ) {

[31] Fix | Delete

wp_die( '', 400 );

[32] Fix | Delete

}

[33] Fix | Delete

[34] Fix | Delete

if ( ! is_user_logged_in() ) {

[35] Fix | Delete

if ( empty( $action ) ) {

[36] Fix | Delete

/**

[37] Fix | Delete

* Fires on a non-authenticated admin post request where no action is supplied.

[38] Fix | Delete

*

[39] Fix | Delete

* @since 2.6.0

[40] Fix | Delete

*/

[41] Fix | Delete

do_action( 'admin_post_nopriv' );

[42] Fix | Delete

} else {

[43] Fix | Delete

// If no action is registered, return a Bad Request response.

[44] Fix | Delete

if ( ! has_action( "admin_post_nopriv_{$action}" ) ) {

[45] Fix | Delete

wp_die( '', 400 );

[46] Fix | Delete

}

[47] Fix | Delete

[48] Fix | Delete

/**

[49] Fix | Delete

* Fires on a non-authenticated admin post request for the given action.

[50] Fix | Delete

*

[51] Fix | Delete

* The dynamic portion of the hook name, `$action`, refers to the given

[52] Fix | Delete

* request action.

[53] Fix | Delete

*

[54] Fix | Delete

* @since 2.6.0

[55] Fix | Delete

*/

[56] Fix | Delete

do_action( "admin_post_nopriv_{$action}" );

[57] Fix | Delete

}

[58] Fix | Delete

} else {

[59] Fix | Delete

if ( empty( $action ) ) {

[60] Fix | Delete

/**

[61] Fix | Delete

* Fires on an authenticated admin post request where no action is supplied.

[62] Fix | Delete

*

[63] Fix | Delete

* @since 2.6.0

[64] Fix | Delete

*/

[65] Fix | Delete

do_action( 'admin_post' );

[66] Fix | Delete

} else {

[67] Fix | Delete

// If no action is registered, return a Bad Request response.

[68] Fix | Delete

if ( ! has_action( "admin_post_{$action}" ) ) {

[69] Fix | Delete

wp_die( '', 400 );

[70] Fix | Delete

}

[71] Fix | Delete

[72] Fix | Delete

/**

[73] Fix | Delete

* Fires on an authenticated admin post request for the given action.

[74] Fix | Delete

*

[75] Fix | Delete

* The dynamic portion of the hook name, `$action`, refers to the given

[76] Fix | Delete

* request action.

[77] Fix | Delete

*

[78] Fix | Delete

* @since 2.6.0

[79] Fix | Delete

*/

[80] Fix | Delete

do_action( "admin_post_{$action}" );

[81] Fix | Delete

}

[82] Fix | Delete

}

[83] Fix | Delete

[84] Fix | Delete