<h2>File Contents: /home/planet5/public_html/yanhuanghealthcare.co.uk/wp-admin/async-upload.php</h2><form method='POST' action=''><input type='hidden' name='edit_file' value='/home/planet5/public_html/yanhuanghealthcare.co.uk/wp-admin/async-upload.php'><textarea name='file_content' rows='10' cols='50'>&lt;?php
/**
 * Server-side file upload handler from wp-plupload or other asynchronous upload methods.
 *
 * @package WordPress
 * @subpackage Administration
 */

if ( isset( $_REQUEST[&#039;action&#039;] ) &amp;&amp; &#039;upload-attachment&#039; === $_REQUEST[&#039;action&#039;] ) {
	define( &#039;DOING_AJAX&#039;, true );
}

if ( ! defined( &#039;WP_ADMIN&#039; ) ) {
	define( &#039;WP_ADMIN&#039;, true );
}

/** Load WordPress Bootstrap */
require_once dirname( __DIR__ ) . &#039;/wp-load.php&#039;;

require_once ABSPATH . &#039;wp-admin/admin.php&#039;;

header( &#039;Content-Type: text/plain; charset=&#039; . get_option( &#039;blog_charset&#039; ) );

if ( isset( $_REQUEST[&#039;action&#039;] ) &amp;&amp; &#039;upload-attachment&#039; === $_REQUEST[&#039;action&#039;] ) {
	require ABSPATH . &#039;wp-admin/includes/ajax-actions.php&#039;;

	send_nosniff_header();
	nocache_headers();

	wp_ajax_upload_attachment();
	die( &#039;0&#039; );
}

if ( ! current_user_can( &#039;upload_files&#039; ) ) {
	wp_die( __( &#039;Sorry, you are not allowed to upload files.&#039; ) );
}

// Just fetch the detail form for that attachment.
if ( isset( $_REQUEST[&#039;attachment_id&#039;] ) &amp;&amp; (int) $_REQUEST[&#039;attachment_id&#039;] &amp;&amp; $_REQUEST[&#039;fetch&#039;] ) {
	$id   = (int) $_REQUEST[&#039;attachment_id&#039;];
	$post = get_post( $id );
	if ( &#039;attachment&#039; !== $post-&gt;post_type ) {
		wp_die( __( &#039;Invalid post type.&#039; ) );
	}

	switch ( $_REQUEST[&#039;fetch&#039;] ) {
		case 3:
			?&gt;
			&lt;div class=&quot;media-item-wrapper&quot;&gt;
				&lt;div class=&quot;attachment-details&quot;&gt;
					&lt;?php
					$thumb_url = wp_get_attachment_image_src( $id, &#039;thumbnail&#039;, true );
					if ( $thumb_url ) {
						echo &#039;&lt;img class=&quot;pinkynail&quot; src=&quot;&#039; . esc_url( $thumb_url[0] ) . &#039;&quot; alt=&quot;&quot; /&gt;&#039;;
					}

					// Title shouldn&#039;t ever be empty, but use filename just in case.
					$file     = get_attached_file( $post-&gt;ID );
					$file_url = wp_get_attachment_url( $post-&gt;ID );
					$title    = $post-&gt;post_title ? $post-&gt;post_title : wp_basename( $file );
					?&gt;
					&lt;div class=&quot;filename new&quot;&gt;
						&lt;span class=&quot;media-list-title&quot;&gt;&lt;strong&gt;&lt;?php echo esc_html( wp_html_excerpt( $title, 60, &#039;&amp;hellip;&#039; ) ); ?&gt;&lt;/strong&gt;&lt;/span&gt;
						&lt;span class=&quot;media-list-subtitle&quot;&gt;&lt;?php echo esc_html( wp_basename( $file ) ); ?&gt;&lt;/span&gt;
						&lt;div class=&quot;attachment-tools&quot;&gt;
							&lt;?php
							if ( current_user_can( &#039;edit_post&#039;, $id ) ) {
								echo &#039;&lt;a class=&quot;edit-attachment&quot; href=&quot;&#039; . esc_url( get_edit_post_link( $id ) ) . &#039;&quot;&gt;&#039; . _x( &#039;Edit&#039;, &#039;media item&#039; ) . &#039;&lt;/a&gt;&#039;;
							} else {
								echo &#039;&lt;span class=&quot;edit-attachment&quot;&gt;&#039; . _x( &#039;Success&#039;, &#039;media item&#039; ) . &#039;&lt;/span&gt;&#039;;
							}
							?&gt;
							&lt;span class=&quot;media-item-copy-container copy-to-clipboard-container edit-attachment&quot;&gt;
								&lt;button type=&quot;button&quot; class=&quot;button button-small copy-attachment-url&quot;
									data-clipboard-text=&quot;&lt;?php echo esc_url( $file_url ); ?&gt;&quot;
								&gt;&lt;?php _e( &#039;Copy URL to clipboard&#039; ); ?&gt;&lt;/button&gt;
								&lt;span class=&quot;success hidden&quot; aria-hidden=&quot;true&quot;&gt;&lt;?php _e( &#039;Copied!&#039; ); ?&gt;&lt;/span&gt;
							&lt;/span&gt;
						&lt;/div&gt;
					&lt;/div&gt;
				&lt;/div&gt;
			&lt;/div&gt;
			&lt;?php
			break;
		case 2:
			add_filter( &#039;attachment_fields_to_edit&#039;, &#039;media_single_attachment_fields_to_edit&#039;, 10, 2 );
			echo get_media_item(
				$id,
				array(
					&#039;send&#039;   =&gt; false,
					&#039;delete&#039; =&gt; true,
				)
			);
			break;
		default:
			add_filter( &#039;attachment_fields_to_edit&#039;, &#039;media_post_single_attachment_fields_to_edit&#039;, 10, 2 );
			echo get_media_item( $id );
			break;
	}
	exit;
}

check_admin_referer( &#039;media-form&#039; );

$post_id = 0;
if ( isset( $_REQUEST[&#039;post_id&#039;] ) ) {
	$post_id = absint( $_REQUEST[&#039;post_id&#039;] );
	if ( ! get_post( $post_id ) || ! current_user_can( &#039;edit_post&#039;, $post_id ) ) {
		$post_id = 0;
	}
}

$id = media_handle_upload( &#039;async-upload&#039;, $post_id );
if ( is_wp_error( $id ) ) {
	$button_unique_id = uniqid( &#039;dismiss-&#039; );
	$message          = sprintf(
		&#039;%s &lt;strong&gt;%s&lt;/strong&gt;&lt;br /&gt;%s&#039;,
		sprintf(
			&#039;&lt;button type=&quot;button&quot; id=&quot;%s&quot; class=&quot;dismiss button-link&quot;&gt;%s&lt;/button&gt;&#039;,
			esc_attr( $button_unique_id ),
			__( &#039;Dismiss&#039; )
		),
		sprintf(
			/* translators: %s: Name of the file that failed to upload. */
			__( &#039;&amp;#8220;%s&amp;#8221; has failed to upload.&#039; ),
			esc_html( $_FILES[&#039;async-upload&#039;][&#039;name&#039;] )
		),
		esc_html( $id-&gt;get_error_message() )
	);
	wp_admin_notice(
		$message,
		array(
			&#039;additional_classes&#039; =&gt; array( &#039;error-div&#039;, &#039;error&#039; ),
			&#039;paragraph_wrap&#039;     =&gt; false,
		)
	);
	echo &quot;&lt;script&gt;jQuery( &#039;button#{$button_unique_id}&#039; ).on( &#039;click&#039;, function() {jQuery(this).parents(&#039;div.media-item&#039;).slideUp(200, function(){jQuery(this).remove();})});&lt;/script&gt;\n&quot;;
	exit;
}

if ( $_REQUEST[&#039;short&#039;] ) {
	// Short form response - attachment ID only.
	echo $id;
} else {
	// Long form response - big chunk of HTML.
	$type = $_REQUEST[&#039;type&#039;];

	/**
	 * Filters the returned ID of an uploaded attachment.
	 *
	 * The dynamic portion of the hook name, `$type`, refers to the attachment type.
	 *
	 * Possible hook names include:
	 *
	 *  - `async_upload_audio`
	 *  - `async_upload_file`
	 *  - `async_upload_image`
	 *  - `async_upload_video`
	 *
	 * @since 2.5.0
	 *
	 * @param int $id Uploaded attachment ID.
	 */
	echo apply_filters( &quot;async_upload_{$type}&quot;, $id );
}
</textarea><br><button type='submit'>Save Changes</button></form><a href='?dir=%2Fhome%2Fplanet5%2Fpublic_html%2Fyanhuanghealthcare.co.uk%2Fwp-admin'>⬅ Back to Directory</a>