i'm probably breaking a few common sense rules here.
is there a way to utilize wordpress' bake in attachment file handling for an upload form within a theme template? yes, the front end -- i know.
i’m creating a memorial site and i want people to be able to leave textual photographic "comments" for a dear person our community has lost.
but these aren't wordpress users. they're aunts and kids and everything in between.
these people are not going to be able to figure out WP default media UI and i don't want them having to log in and futz around. too confusing for them. if this weren't such a specific and delicate project, i wouldn't be trying to bend the rules so much.
i understand that i'm opening up security holes by allowing anyone to upload a file, but i think it's somewhat necessary. all uploaded attachments will be "pending." i have both the text and photos set a custom post type, not as comments, so that i can utilize some built in post data.
and it would be great if i could utilize worpdress built in file checking, handling, naming, size... etc. even though the file handling is on the front end.
i thought that perhaps i could use: wp_handle_upload()
by including '../wp-admin/includes/file.php'
but that didn't work. i get a fatal error when i try to include it. is it just TOTALLY against the rules to include admin includes within templates... probably.
i could just do all the file handling myself, but thought perhaps there's a way to utilize wordpress' functionality and that it may be safer.
or are there suggestions on another route i should be going on altogether?
unfortunately this is pretty time sensitive... the memorial service is coming up in a few days.
thank you so much