9ff50bd47d
LCARS is a template for the GetSimple CMS that mimics the monitor appearance in the television series Star Trek: The Next Generation
323 lines
11 KiB
PHP
323 lines
11 KiB
PHP
<?php
|
|
/**
|
|
* Upload Files
|
|
*
|
|
* Displays and uploads files to the website
|
|
*
|
|
* @package GetSimple
|
|
* @subpackage Files
|
|
* @todo Remove relative paths
|
|
*/
|
|
|
|
// Setup inclusions
|
|
$load['plugin'] = true;
|
|
include('inc/common.php');
|
|
login_cookie_check();
|
|
|
|
$dirsSorted=null;$filesSorted=null;$foldercount=null;
|
|
|
|
if (isset($_GET['path']) && !empty($_GET['path'])) {
|
|
$path = str_replace('../','', $_GET['path']);
|
|
$path = tsl("../data/uploads/".$path);
|
|
// die if path is outside of uploads
|
|
if(!path_is_safe($path,GSDATAUPLOADPATH)) die();
|
|
$subPath = str_replace('../','', $_GET['path']);
|
|
$subFolder = tsl($subPath);
|
|
} else {
|
|
$path = "../data/uploads/";
|
|
$subPath = '';
|
|
$subFolder = '';
|
|
}
|
|
|
|
// check if host uses Linux (used for displaying permissions
|
|
$isUnixHost = (strtoupper(substr(PHP_OS, 0, 3)) === 'WIN' ? false : true);
|
|
|
|
// if a file was uploaded
|
|
if (isset($_FILES['file'])) {
|
|
$uploadsCount = count($_FILES['file']['name']);
|
|
if($uploadsCount > 0) {
|
|
$errors = array();
|
|
$messages = array();
|
|
for ($i=0; $i < $uploadsCount; $i++) {
|
|
if ($_FILES["file"]["error"][$i] > 0) {
|
|
$errors[] = i18n_r('ERROR_UPLOAD');
|
|
} else {
|
|
|
|
//set variables
|
|
$count = '1';
|
|
$base = clean_img_name(to7bit($_FILES["file"]["name"][$i]));
|
|
$file_loc = $path . $base;
|
|
|
|
//prevent overwriting
|
|
while ( file_exists($file_loc) ) {
|
|
$file_loc = $path . $count.'-'. $base;
|
|
$base = $count.'-'. $base;
|
|
$count++;
|
|
}
|
|
|
|
//validate file
|
|
if (validate_safe_file($_FILES["file"]["tmp_name"][$i], $_FILES["file"]["name"][$i], $_FILES["file"]["type"][$i])) {
|
|
move_uploaded_file($_FILES["file"]["tmp_name"][$i], $file_loc);
|
|
if (defined('GSCHMOD')) {
|
|
chmod($file_loc, GSCHMOD);
|
|
} else {
|
|
chmod($file_loc, 0644);
|
|
}
|
|
exec_action('file-uploaded');
|
|
|
|
// generate thumbnail
|
|
require_once('inc/imagemanipulation.php');
|
|
genStdThumb($subFolder,$base);
|
|
$messages[] = i18n_r('FILE_SUCCESS_MSG').': <a href="'. $SITEURL .'data/uploads/'.$subFolder.$base.'">'. $SITEURL .'data/uploads/'.$subFolder.$base.'</a>';
|
|
} else {
|
|
$messages[] = $_FILES["file"]["name"][$i] .' - '.i18n_r('ERROR_UPLOAD');
|
|
}
|
|
|
|
//successfull message
|
|
|
|
}
|
|
}
|
|
// after uploading all files process messages
|
|
if(sizeof($messages) != 0) {
|
|
foreach($messages as $msg) {
|
|
$success = $msg.'<br />';
|
|
}
|
|
}
|
|
if(sizeof($errors) != 0) {
|
|
foreach($errors as $msg) {
|
|
$error = $msg.'<br />';
|
|
}
|
|
}
|
|
}
|
|
}
|
|
// if creating new folder
|
|
if (isset($_GET['newfolder'])) {
|
|
|
|
// check for csrf
|
|
if (!defined('GSNOCSRF') || (GSNOCSRF == FALSE) ) {
|
|
$nonce = $_GET['nonce'];
|
|
if(!check_nonce($nonce, "createfolder")) {
|
|
die("CSRF detected!");
|
|
}
|
|
}
|
|
|
|
$newfolder = $_GET['newfolder'];
|
|
// check for invalid chars
|
|
$cleanname = clean_url(to7bit(strippath($newfolder), "UTF-8"));
|
|
if (file_exists($path.$cleanname) || $cleanname=='') {
|
|
$error = i18n_r('ERROR_FOLDER_EXISTS');
|
|
} else {
|
|
if (defined('GSCHMOD')) {
|
|
$chmod_value = GSCHMOD;
|
|
} else {
|
|
$chmod_value = 0755;
|
|
}
|
|
if (mkdir($path . $cleanname, $chmod_value)) {
|
|
//create folder for thumbnails
|
|
$thumbFolder = GSTHUMBNAILPATH.$subFolder.$cleanname;
|
|
if (!(file_exists($thumbFolder))) { mkdir($thumbFolder, $chmod_value); }
|
|
$success = sprintf(i18n_r('FOLDER_CREATED'), $cleanname);
|
|
} else {
|
|
$error = i18n_r('ERROR_CREATING_FOLDER');
|
|
}
|
|
}
|
|
}
|
|
|
|
get_template('header', cl($SITENAME).' » '.i18n_r('FILE_MANAGEMENT'));
|
|
|
|
?>
|
|
|
|
<?php include('template/include-nav.php'); ?>
|
|
|
|
<div class="bodycontent clearfix">
|
|
<div id="maincontent">
|
|
<div class="main" >
|
|
<h3 class="floated"><?php echo i18n('UPLOADED_FILES'); ?><span id="filetypetoggle"> / <?php echo i18n('SHOW_ALL'); ?></span></h3>
|
|
<div id="file_load">
|
|
<?php
|
|
$count="0";
|
|
$dircount="0";
|
|
$counter = "0";
|
|
$totalsize = 0;
|
|
$filesArray = array();
|
|
$dirsArray = array();
|
|
|
|
$filenames = getFiles($path);
|
|
|
|
if (count($filenames) != 0) {
|
|
foreach ($filenames as $file) {
|
|
if ($file == "." || $file == ".." || $file == ".htaccess" || $file == "index.php"){
|
|
// not a upload file
|
|
} elseif (is_dir($path . $file)) {
|
|
$dirsArray[$dircount]['name'] = $file;
|
|
clearstatcache();
|
|
$ss = @stat($path . $file);
|
|
$dirsArray[$dircount]['date'] = @date('M j, Y',$ss['ctime']);
|
|
$dircount++;
|
|
} else {
|
|
$filesArray[$count]['name'] = $file;
|
|
$ext = substr($file, strrpos($file, '.') + 1);
|
|
$extention = get_FileType($ext);
|
|
$filesArray[$count]['type'] = $extention;
|
|
clearstatcache();
|
|
$ss = @stat($path . $file);
|
|
$filesArray[$count]['date'] = @date('M j, Y',$ss['ctime']);
|
|
$filesArray[$count]['size'] = fSize($ss['size']);
|
|
$totalsize = $totalsize + $ss['size'];
|
|
$count++;
|
|
}
|
|
}
|
|
$filesSorted = subval_sort($filesArray,'name');
|
|
$dirsSorted = subval_sort($dirsArray,'name');
|
|
}
|
|
echo '<div class="edit-nav" >';
|
|
echo '<select id="imageFilter">';
|
|
echo '<option value="All">'.i18n_r('SHOW_ALL').'</option>';
|
|
if (count($filesSorted) > 0) {
|
|
foreach ($filesSorted as $filter) {
|
|
$filterArr[] = $filter['type'];
|
|
}
|
|
if (count($filterArr) != 0) {
|
|
$filterArray = array_unique($filterArr);
|
|
$filterArray = subval_sort($filterArray,'type');
|
|
foreach ($filterArray as $type) {
|
|
|
|
# check for image type
|
|
if (strstr($type, ' Images')) {
|
|
$typeCleaned = 'Images';
|
|
$typeCleaned_2 = str_replace(' Images', '', $type);
|
|
} else {
|
|
$typeCleaned = $type;
|
|
$typeCleaned_2 = $type;
|
|
}
|
|
|
|
echo '<option value="'.$typeCleaned.'">'.$typeCleaned_2.'</option>';
|
|
}
|
|
}
|
|
}
|
|
echo '</select><div class="clear" ></div></div>';
|
|
|
|
|
|
$pathParts = explode("/",$subPath);
|
|
$urlPath = null;
|
|
|
|
echo '<div class="h5 clearfix"><div class="crumbs">/ <a href="upload.php">uploads</a> / ';
|
|
|
|
foreach ($pathParts as $pathPart){
|
|
if ($pathPart!=''){
|
|
$urlPath .= $pathPart.'/';
|
|
|
|
echo '<a href="?path='.$urlPath.'">'.$pathPart.'</a> / ';
|
|
}
|
|
}
|
|
echo '</div> <div id="new-folder">
|
|
<a href="#" id="createfolder">'.i18n_r('CREATE_FOLDER').'</a>
|
|
<form action="upload.php"> <input type="hidden" name="path" value="'.$subPath.'" /><input type="hidden" name="nonce" value="'. get_nonce("createfolder") .'" /><input type="text" class="text" name="newfolder" id="foldername" /> <input type="submit" class="submit" value="'.i18n_r('CREATE_FOLDER').'" /> <a href="#" class="cancel">'.i18n_r('CANCEL').'</a></form>
|
|
</div></div>';
|
|
|
|
|
|
|
|
echo '<table class="highlight" id="imageTable">';
|
|
echo '<tr><th class="imgthumb" ></th><th>'.i18n_r('FILE_NAME').'</th>';
|
|
echo '<th style="text-align:right;">'.i18n_r('FILE_SIZE').'</th>';
|
|
if (isDebug()){
|
|
echo '<th style="text-align:right;">'.i18n_r('PERMS').'</th>';
|
|
}
|
|
echo '<th style="text-align:right;">'.i18n_r('DATE').'</th>';
|
|
echo '<th><!-- actions --></th></tr>';
|
|
if (count($dirsSorted) != 0) {
|
|
$foldercount = 0;
|
|
foreach ($dirsSorted as $upload) {
|
|
|
|
# check to see if folder is empty
|
|
$directory_delete = null;
|
|
if ( check_empty_folder($path.$upload['name']) ) {
|
|
$directory_delete = '<a class="delconfirm" title="'.i18n_r('DELETE_FOLDER').': '. rawurlencode($upload['name']) .'" href="deletefile.php?path='.$urlPath.'&folder='. rawurlencode($upload['name']) . '&nonce='.get_nonce("delete", "deletefile.php").'">×</a>';
|
|
}
|
|
$directory_size = '<span>'.folder_items($path.$upload['name']).' '.i18n_r('ITEMS').'</span>';
|
|
|
|
echo '<tr class="All folder '.$upload['name'].'" >';
|
|
echo '<td class="imgthumb" ></td><td>';
|
|
|
|
$adm = substr($path . rawurlencode($upload['name']) , 16);
|
|
echo '<img src="template/images/folder.png" width="11" /> <a href="upload.php?path='.$adm.'" ><strong>'.htmlspecialchars($upload['name']).'</strong></a></td>';
|
|
echo '<td style="width:80px;text-align:right;" ><span>'.$directory_size.'</span></td>';
|
|
|
|
// get the file permissions.
|
|
if ($isUnixHost && isDebug() && function_exists('posix_getpwuid')) {
|
|
$filePerms = substr(sprintf('%o', fileperms($path.$upload['name'])), -4);
|
|
$fileOwner = posix_getpwuid(fileowner($path.$upload['name']));
|
|
echo '<td style="width:70px;text-align:right;"><span>'.$fileOwner['name'].'/'.$filePerms.'</span></td>';
|
|
}
|
|
|
|
echo '<td style="width:85px;text-align:right;" ><span>'. shtDate($upload['date']) .'</span></td>';
|
|
echo '<td class="delete" >'.$directory_delete.'</td>';
|
|
echo '</tr>';
|
|
$foldercount++;
|
|
}
|
|
}
|
|
if (count($filesSorted) != 0) {
|
|
foreach ($filesSorted as $upload) {
|
|
$counter++;
|
|
if ($upload['type'] == i18n_r('IMAGES') .' Images') {
|
|
$cclass = 'iimage';
|
|
} else {
|
|
$cclass = '';
|
|
}
|
|
echo '<tr class="All '.$upload['type'].' '.$cclass.'" >';
|
|
echo '<td class="imgthumb" >';
|
|
if ($upload['type'] == i18n_r('IMAGES') .' Images') {
|
|
$gallery = 'rel=" facybox_i"';
|
|
$pathlink = 'image.php?i='.rawurlencode($upload['name']).'&path='.$subPath;
|
|
$thumbLink = $urlPath.'thumbsm.'.$upload['name'];
|
|
$thumbLinkEncoded = $urlPath.'thumbsm.'.rawurlencode($upload['name']);
|
|
if (file_exists(GSTHUMBNAILPATH.$thumbLink)) {
|
|
$imgSrc='<img src="../data/thumbs/'. $thumbLinkEncoded .'" />';
|
|
} else {
|
|
$imgSrc='<img src="inc/thumb.php?src='. $urlPath . rawurlencode($upload['name']) .'&dest='. $thumbLinkEncoded .'&f=1" />';
|
|
}
|
|
echo '<a href="'. $path . rawurlencode($upload['name']) .'" title="'. rawurlencode($upload['name']) .'" rel=" facybox_i" >'.$imgSrc.'</a>';
|
|
} else {
|
|
$gallery = '';
|
|
$controlpanel = '';
|
|
$pathlink = $path . $upload['name'];
|
|
}
|
|
echo '</td><td><a title="'.i18n_r('VIEW_FILE').': '. htmlspecialchars($upload['name']) .'" href="'. $pathlink .'" class="primarylink">'.htmlspecialchars($upload['name']) .'</a></td>';
|
|
echo '<td style="width:80px;text-align:right;" ><span>'. $upload['size'] .'</span></td>';
|
|
|
|
|
|
// get the file permissions.
|
|
if ($isUnixHost && isDebug() && function_exists('posix_getpwuid')) {
|
|
$filePerms = substr(sprintf('%o', fileperms($path.$upload['name'])), -4);
|
|
$fileOwner = posix_getpwuid(fileowner($path.$upload['name']));
|
|
echo '<td style="width:70px;text-align:right;"><span>'.$fileOwner['name'].'/'.$filePerms.'</span></td>';
|
|
}
|
|
|
|
echo '<td style="width:85px;text-align:right;" ><span>'. shtDate($upload['date']) .'</span></td>';
|
|
echo '<td class="delete" ><a class="delconfirm" title="'.i18n_r('DELETE_FILE').': '. htmlspecialchars($upload['name']) .'" href="deletefile.php?file='. rawurlencode($upload['name']) . '&path=' . $urlPath . '&nonce='.get_nonce("delete", "deletefile.php").'">×</a></td>';
|
|
echo '</tr>';
|
|
|
|
}
|
|
}
|
|
exec_action('file-extras');
|
|
echo '</table>';
|
|
|
|
if ($counter > 0) {
|
|
$sizedesc = '('. fSize($totalsize) .')';
|
|
} else {
|
|
$sizedesc = '';
|
|
}
|
|
$totalcount = (int)$counter+(int)$foldercount;
|
|
echo '<p><em><b><span id="pg_counter">'. $totalcount .'</span></b> '.i18n_r('TOTAL_FILES').' '.$sizedesc.'</em></p>';
|
|
?>
|
|
</div>
|
|
</div>
|
|
</div>
|
|
|
|
<div id="sidebar" >
|
|
<?php include('template/sidebar-files.php'); ?>
|
|
</div>
|
|
|
|
</div>
|
|
<?php get_template('footer'); ?>
|