Hi Byron,

I posted this in the comments on smashly.net, but I wasn't sure if you check it anymore with the forums - sorry for hte duplicate post.

I decided tackle the request to allow users to delete their own images.

Basically, I created a custom shortcode in PS called [delete_image] that I can use in the custom layout. The shortcode compares the current user ID to the image contributor ID (all authenticated users are contributors). If they match, then I place a delete button in the custom layout below the image. The link invokes the bwbpsModerateImage() function, using the ‘bury’ action.

This works great when I’m logged in as the admin, but when I log in as the contributor, I get the error: ‘Failed due to security: invalid nonce’. Obviously a security issue with contributors or level_1 deleting an image that is their own.

Any ideas how I can modify to allow the contributors to delete their own images before or after they have been approved?

Thanks,

Lee

Hi Byron,

For some reason, it just won't allow a particular user to delete any image they uploaded unless it is the admin account. Could it be a folder or database permissions issue? (using WAMP in my dev environment).

In my custom shortcode in bwbps-layout.php, I'm executing:

onclick='bwbpsModerateImage(\"bury\",($image[image_id]));'

As I mentioned above, it seems to send -1 for 'data' to the bwbpsModerateSuccess() function when a contributor user tries to delete and gets stuck here with the invalid nonce error.

I tried creating a copy of the bwbpsModerateImage() function and renamed it to bwbpsUserModerateImage() and changed the url: in the ajax call to url: bwbpsAjaxUserURL. (also changed the "bury" action to both myaction = "userdelete" and myaction = "userdeletewithpost". Neither worked).

I am by no means an expert at JavaScript or PHP, but I get by. All of this works when the authenticated user is the admin account, just not when the contributors are logged in. Any other suggestions that I could try?

Thanks,

Lee

I'm also interested in this. I've got this plugin working perfectly - everything is great - except the one missing delete image by a user.

Hi,

I have made a page where the users can see their pictures and can delete them too. This is how I did it:

In bwbps-layout.php I created a custom shortcode called [allow_delete_images]:

case '[allow_delete_images]':
    $nonce = wp_create_nonce('bwb_upload_photos');
    global $current_user;
    get_currentuserinfo();
    if ((int)$image['user_id'] == $current_user->ID)
       $ret = "<input type='button' value='Eliminar' onclick='bwbpsModerateImageLaVoz(\"burybyuser\",(".$image['psimageID']."),\"\",\"".$nonce."\")'>";
    else
       $ret = "";
    break;

This code call a Javascript function that I have added to bwbps.js. This function is like bwbpsModerateImage function but it receives the nonce param that will be used in the ajax call. This is the code of bwbpsModerateImageLaVoz function:

function bwbpsModerateImageLaVoz(action, image_id, post_id, nonce)
{
    var imgid = parseInt('' + image_id);
    var myaction = false;
    var actiontext = "";
    var postid = parseInt('' + post_id);
    var img_id_text = " (image id: " + imgid + ")";
    var sendMsg = jQuery("#ps_mod_send_msg").attr('checked') ? 1 : 0;
    var modMsg = '';
    var confirmOn = true;

    switch (action) {
        case 'burybyuser' :
            myaction = 'userdeletewithpost';
            actiontext = "eliminar esta fotografía (Nota: al eliminar esta fotografía la eliminará también de la galería a la que pertenezca.) ";

            if( sendMsg && !confirm('Is Rejection Moderation Message correct?\n\n ' + jQuery("#").val() )){

                return;
            } else {
                if( sendMsg ){
                    modMsg = jQuery("#ps_mod_reject_msg").val();
                }
            }
            break;
    }

    if(!myaction){ alert('Invalid action.'); return false;}
    if(confirmOn){
        if(!confirm('¿Desea ' + actiontext + '?')){ return false;}
    }

    var _moderate_nonce = nonce;
    var image_caption = '';
    var image_url = "";
    var image_tags = "";
    var meta_data = "";
    var file_url = "";
    var image_seq = "";
    var image_post_id = 0;

    try{
        $j('#ps_savemsg').show();
    }catch(err){}
$j.ajax({
	type: 'POST',
	url: bwbpsAjaxUserURL,
	data: { 'action': myaction,
       'image_id': imgid,
       '_ajax_nonce' : _moderate_nonce,
       'image_caption' : image_caption,
       'image_url' : image_url,
       'image_tags' : image_tags,
       'meta_data' : meta_data,
       'file_url' : file_url,
       'seq' : image_seq,
       'post_id' : postid,
       'image_post_id' : image_post_id,
       'mod_msg' : modMsg,
       'send_msg' : sendMsg
       },
		dataType: 'json',
		success: function(data) {
			bwbpsModerateSuccess(data, imgid);
		}
	});

Sorry for my bad english :S

Hope it helps!

hi! bumping this to see if allowing users to delete their own images ever made it into a release? THANK YOU!

awesome, thank you!!!