Breaking News: Grepper is joining You.com. Read the official announcement!

wordpress restrict image upload by user php site:wordpress.stackexchange.com

Ivan Londono answered on August 25, 2022 Popularity 1/10 Helpfulness 1/10

answer wordpress restrict image upload by user php site:wordpress.stackexchange.com

wordpress restrict image upload by user php site:wordpress.stackexchange.com

Comment

/*
The code checks that the user has rights to upload files (1). 
Then checks for the post_id and retrieves the Post(3,4). 
Then limits the customisation to our custom post type (5). 
Then, we needed only listings authors to modify the listings, 
so the code limits modifications to the post author only(6). 
Only display images, as we need them for a gallery(7). 
No private image(8), 
no images from other posts(9) and 
no other user images(10).

That’s it. Copy, paste to a functions.php file for the code to work
*/
add_filter( 'ajax_query_attachments_args', 'filter_query_attachments_args' );

function filter_query_attachments_args( $query ) {
	// 1. Only users with access
	if ( ! current_user_can( 'upload_files' ) ) {
		wp_send_json_error();
	}

	// 2. No manipulation for admins.
	// After all they have access to all images.
	if ( current_user_can( 'administrator' ) ) {
		return $query;
	}

	// 3. No images, if the post_id is not provided
	if ( ! isset( $_REQUEST['post_id'] ) ) {
		wp_send_json_error();
	}

	// 4. No images, if you are not the post type manager or author
	$post = get_post( (int) $_REQUEST['post_id'] );
	if ( ! $post instanceof \WP_Post ) {
		return $query;
	}

	// 5. You can also restrict the changes to your custom post type
	if ( 'listing' != $post->post_type ) {
		// Only filter for our custom post types
		return $query;
	}

	// 6. Allow only post authors to open the uploader
	$current_user = wp_get_current_user();
	if ( $current_user->ID != $post->post_author ) {
		wp_send_json_error();
	}
	
	// 7. Filter to display only images
	$query['post_mime_type'] = array(
		'image/gif',
		'image/jpeg',
		'image/png',
		'image/bmp',
		'image/tiff',
		'image/x-icon'
	);

	// 8. Don't show private images
	$query['post_status'] = 'inherit';

	// 9. Filter to display only the images attached to the post
	$query['post_parent'] = $post->ID;

	// 10. Filter to display only the user uploaded image
	$query['author'] = $current_user->ID;

	return $query;
}

Popularity 1/10 Helpfulness 1/10 Language php

Source: Grepper

Tags: image-upload php restrict wordpress

Link to this answer
Share Copy Link

Contributed on Aug 25 2022

Ivan Londono

0 Answers Avg Quality 2/10

wordpress restrict image upload by user php site:wordpress.stackexchange.com

Contents

More Related Answers

wordpress restrict image upload by user php site:wordpress.stackexchange.com

Grepper

Documentation

Social

Legal

Contact

Oops, You will need to install Grepper and log-in to perform this action.