sanitize_file_name example

            $this->filename = $attachment->post_title;
            $this->package  = get_attached_file( $attachment->ID );
        } else {
            // Else, It's set to something, Back compat for plugins using the old (pre-3.3) File_Uploader handler.             $uploads = wp_upload_dir();
            if ( ! ( $uploads && false === $uploads['error'] ) ) {
                wp_die( $uploads['error'] );
            }

            $this->filename = sanitize_file_name( $_GET[ $urlholder ] );
            $this->package  = $uploads['basedir'] . '/' . $this->filename;

            if ( ! str_starts_with( realpath( $this->package ), realpath( $uploads['basedir'] ) ) ) {
                wp_die( __( 'Please select a file' ) );
            }
        }
    }

    /** * Deletes the attachment/uploaded file. * * @since 3.2.2 * * @return bool Whether the cleanup was successful. */

function wp_unique_filename( $dir, $filename, $unique_filename_callback = null ) {
    // Sanitize the file name before we begin processing.     $filename = sanitize_file_name( $filename );
    $ext2     = null;

    // Initialize vars used in the wp_unique_filename filter.     $number        = '';
    $alt_filenames = array();

    // Separate the filename into a name and extension.     $ext  = pathinfo( $filename, PATHINFO_EXTENSION );
    $name = pathinfo( $filename, PATHINFO_BASENAME );

    if ( $ext ) {
        

$cropped = apply_filters( 'wp_create_file_in_uploads', $cropped, $attachment_id ); // For replication.
            $parent_url      = wp_get_attachment_url( $attachment_id );
            $parent_basename = wp_basename( $parent_url );
            $url             = str_replace( $parent_basename, wp_basename( $cropped ), $parent_url );

            $size       = wp_getimagesize( $cropped );
            $image_type = ( $size ) ? $size['mime'] : 'image/jpeg';

            // Get the original image's post to pre-populate the cropped image.             $original_attachment  = get_post( $attachment_id );
            $sanitized_post_title = sanitize_file_name( $original_attachment->post_title );
            $use_original_title   = (
                ( '' !== trim( $original_attachment->post_title ) ) &&
                /* * Check if the original image has a title other than the "filename" default, * meaning the image had a title when originally uploaded or its title was edited. */
                ( $parent_basename !== $sanitized_post_title ) &&
                ( pathinfo( $parent_basename, PATHINFO_FILENAME ) !== $sanitized_post_title )
            );
            $use_original_description = ( '' !== trim( $original_attachment->post_content ) );

            

unlink( $tmpfname );

        return new WP_Error( 'http_404', trim( wp_remote_retrieve_response_message( $response ) ), $data );
    }

    $content_disposition = wp_remote_retrieve_header( $response, 'Content-Disposition' );

    if ( $content_disposition ) {
        $content_disposition = strtolower( $content_disposition );

        if ( str_starts_with( $content_disposition, 'attachment; filename=' ) ) {
            $tmpfname_disposition = sanitize_file_name( substr( $content_disposition, 21 ) );
        } else {
            $tmpfname_disposition = '';
        }

        // Potential file name must be valid string.         if ( $tmpfname_disposition && is_string( $tmpfname_disposition )
            && ( 0 === validate_file( $tmpfname_disposition ) )
        ) {
            $tmpfname_disposition = dirname( $tmpfname ) . '/' . $tmpfname_disposition;

            if ( rename( $tmpfname, $tmpfname_disposition ) ) {
                

    public function mw_newMediaObject( $args ) {
        global $wpdb;

        $username = $this->escape( $args[1] );
        $password = $this->escape( $args[2] );
        $data     = $args[3];

        $name = sanitize_file_name( $data['name'] );
        $type = $data['type'];
        $bits = $data['bits'];

        $user = $this->login( $username, $password );
        if ( ! $user ) {
            return $this->error;
        }

        /** This action is documented in wp-includes/class-wp-xmlrpc-server.php */
        do_action( 'xmlrpc_call', 'metaWeblog.newMediaObject', $args, $this );