1
0
mirror of https://github.com/e107inc/e107.git synced 2025-01-17 20:58:30 +01:00
php-e107/e107_admin/filemanager.php

460 lines
12 KiB
PHP

<?php
/*
* e107 website system
*
* Copyright (C) 2008-2009 e107 Inc (e107.org)
* Released under the terms and conditions of the
* GNU General Public License (http://www.gnu.org/licenses/gpl.txt)
*
*
*
* $Source: /cvs_backup/e107_0.8/e107_admin/filemanager.php,v $
* $Revision$
* $Date$
* $Author$
*/
require_once("../class2.php");
if (!getperms("6"))
{
e107::redirect('admin');
exit;
}
include_lan(e_LANGUAGEDIR.e_LANGUAGE.'/admin/lan_'.e_PAGE);
$e_sub_cat = 'filemanage';
require_once("auth.php");
require_once(e_HANDLER.'upload_handler.php');
$frm = e107::getForm();
$mes = e107::getMessage();
$pubfolder = (str_replace("../","",e_QUERY) == str_replace("../","",e_UPLOAD)) ? TRUE : FALSE;
$imagedir = e_IMAGE."filemanager/";
$message = '';
$dir_options[0] = FMLAN_47;
$dir_options[1] = FMLAN_35;
$dir_options[2] = FMLAN_40;
$adchoice[0] = e_UPLOAD;
$adchoice[1] = e_FILE;
$adchoice[2] = e_IMAGE."newspost_images/";
$path = str_replace("../", "", e_QUERY);
if (!$path)
{
$path = str_replace("../", "", $adchoice[0]);
}
if($path == "/")
{
$path = $adchoice[0];
echo "<b>Debug</b> ".$path." <br />";
}
// ===============================================
if (isset($_POST['deleteconfirm']))
{
$deleteList = array();
$moveList = array();
foreach($_POST['deleteconfirm'] as $key=>$delfile)
{
// check for delete.
if (isset($_POST['selectedfile'][$key]) && isset($_POST['deletefiles']))
{
if (!$_POST['ac'] == md5(ADMINPWCHANGE))
{
exit;
}
$destination_file = e_BASE.$delfile;
if (@unlink($destination_file))
{
//$message .= FMLAN_26." '".$destination_file."' ".FMLAN_27.".<br />";
$mes->addSuccess(LAN_DELETED.": <br />.".$destination_file."<br />");
$deleteList[] = $destination_file;
}
else
{
//$message .= FMLAN_28." '".$destination_file."'.<br />";
$mes->addError(LAN_DELETED_FAILED.": <br />.".$destination_file."<br />");
}
}
// check for move to downloads or downloadimages.
if (isset($_POST['selectedfile'][$key]) && (isset($_POST['movetodls'])) )
{
$newfile = str_replace($path,"",$delfile);
// Move file to whatever folder.
if (isset($_POST['movetodls']))
{
$newpath = $_POST['movepath'];
if (rename(e_BASE.$delfile,$newpath.$newfile))
{
//$message .= FMLAN_38." ".$newpath.$newfile."<br />";
$mes->addSuccess(FMLAN_38.":".$newpath.$newfile);
$moveList[] = e_BASE.$delfile.'=>'.$newpath.$newfile;
}
else
{
//$message .= FMLAN_39." ".$newpath.$newfile."<br />";
$mes->addError((!is_writable($newpath)) ? $newpath.LAN_NOTWRITABLE : ""); // TODO check if this message actually works
}
}
}
}
if (count($deleteList))
{
e107::getLog()->add('FILEMAN_01',implode('[!br!]',$deleteList),E_LOG_INFORMATIVE,'');
}
if (count($moveList))
{
e107::getLog()->add('FILEMAN_02',implode('[!br!]',$moveList),E_LOG_INFORMATIVE,'');
}
}
if (isset($_POST['upload']))
{
if (!$_POST['ac'] == md5(ADMINPWCHANGE))
{
exit;
}
$uploadList = array();
require_once(e_HANDLER.'upload_handler.php');
$files = $_FILES['file_userfile'];
$spacer = '';
foreach($files['name'] as $key => $name)
{
if ($name)
{
if ($files['error'][$key])
{
//$message .= $spacer.FMLAN_10.' '.$files['error'][$key].': '.$name;
$mes->addError($files['error'][$key].': '.$name);
}
elseif ($files['size'][$key])
{
$uploaded = file_upload(e_BASE.$_POST['upload_dir'][$key]);
if (($uploaded === FALSE) || !is_array($uploaded))
{
//$message .= $spacer.FMLAN_51.$name; // FIXME
$mes->addError($name);
$spacer = '<br />';
}
else
{
foreach ($uploaded as $k => $inf)
{
if ($inf['error'] == 0)
{
$uploadList[] = $_POST['upload_dir'][$key].$uploaded[0]['name'];
}
else
{ // Most likely errors trapped earlier.
//$message .= $spacer.FMLAN_10.' '.$inf['error'].' ('.$inf['message'].'): '.$inf['rawname']; // FIXME
$mes->addError($inf['error'].' ('.$inf['message'].'): '.$inf['rawname']);
}
$spacer = '<br />';
}
}
}
}
}
if (count($uploadList))
{
e107::getLog()->add('FILEMAN_03',implode('[!br!]',$uploadList),E_LOG_INFORMATIVE,'');
}
}
$ns->tablerender($caption, $mes->render() . $text);
/*
if ($message)
{
$ns->tablerender("", "<div style=\"text-align:center\"><b>".$message."</b></div>");
}
*/
if (strpos(e_QUERY, ".") && !is_dir(realpath(e_BASE.$path)))
{
echo "
<div>
<iframe style='width:99%' src='".e_BASE.e_QUERY."' height='300' scrolling='yes'>asdas</iframe>
</div>
";
if (!strpos(e_QUERY, "/"))
{
$path = "";
}
else
{
$path = substr($path, 0, strrpos(substr($path, 0, -1), "/"))."/";
}
}
$files = array();
$dirs = array();
$path = explode("?", $path);
$path = $path[0];
$path = explode(".. ", $path);
$path = $path[0];
if ($handle = opendir(e_BASE.$path))
{
while (false !== ($file = readdir($handle))) {
if ($file != "." && $file != "..") {
if (getenv('windir') && is_file(e_BASE.$path."\\".$file)) {
if (is_file(e_BASE.$path."\\".$file)) {
$files[] = $file;
} else {
$dirs[] = $file;
}
} else {
if (is_file(e_BASE.$path."/".$file)) {
$files[] = $file;
} else {
$dirs[] = $file;
}
}
}
}
}
closedir($handle);
if (count($files) != 0) {
sort($files);
}
if (count($dirs) != 0) {
sort($dirs);
}
if (count($files) == 1) {
$cstr = FMLAN_12;
} else {
$cstr = FMLAN_13;
}
if (count($dirs) == 1) {
$dstr = FMLAN_14;
} else {
$dstr = FMLAN_15;
}
$pathd = $path;
$text = "
<form method='post' action='".e_SELF."?".e_QUERY."'>
<div class='buttons-bar left'>
".FMLAN_32."
<select name='admin_choice' class='tbox' onchange=\"location.href=this.options[selectedIndex].value\">";
foreach($dir_options as $key=>$opt){
$select = (str_replace("../","",$adchoice[$key]) == e_QUERY) ? "selected='selected'" : "";
$text .= "<option value='".e_SELF."?".str_replace("../","",$adchoice[$key])."' $select>".$opt."</option>";
}
$text .= "</select>
</div>
</form>
";
// $ns->tablerender(FMLAN_34, $text);
// Get largest allowable file upload
$max_file_size = get_user_max_upload();
if ($path != e_FILE) {
if (substr_count($path, "/") == 1) {
//$pathup = e_SELF;
$pathup = '';
} else {
$pathup = "<a class='action' href='".e_SELF."?".substr($path, 0, strrpos(substr($path, 0, -1), "/"))."/'><img class='icon S24' src='".$imagedir."updir.png' alt='".FMLAN_30."' /></a>";
}
}
$text .= "
<form enctype='multipart/form-data' action='".e_SELF.(e_QUERY ? "?".e_QUERY : "")."' method='post'>
<fieldset id='core-filemanager'>
<legend class='e-hideme'>XX</legend>
<table class='table adminlist'>
<colgroup>
<col style='width: 5%' />
<col style='width: 40%' />
<col style='width: 20%' />
<col style='width: 15%' />
</colgroup>
<thead>
<tr>
<th class='center'>
".$pathup."
<!-- <a href='filemanager.php'><img src='".$imagedir."home.png' alt='".FMLAN_16."' /></a> -->
<input type='hidden' name='MAX_FILE_SIZE' value='{$max_file_size}' />
</th>
<th class='center'>".LAN_SIZE."</th>
<th class='center'>".FMLAN_18."</th>
<th class='center'>".FMLAN_19."</th>
</tr>
</thead>
<tbody>
";
$c = 0;
while ($dirs[$c]) {
$dirsize = dirsize($path.$dirs[$c]);
$el_id = str_replace(array('/','_',' ','\\'),'-',$path.$dirs[$c]);
if (FILE_UPLOADS && is_writable(e_BASE.$path.$dirs[$c])) {
$up_button = $frm->admin_button('erquest', FMLAN_21, 'action', '', array('id'=>false, 'other'=>"onclick='e107Helper.toggle(\"{$el_id}\")'"));
} else {
$up_button = "&nbsp;leave_32.png";
}
//FIXME - upload link not working, raplace with image
$text .= "
<tr>
<td class='center middle'><a href='#{$el_id}' class='e-expandit'>upload</a></td>
<td>
<a class='action' href='".e_SELF."?".$path.$dirs[$c]."/'><img class='icon action S16' src='".$imagedir."folder.png' alt='".$dirs[$c]." ".FMLAN_31."' /></a>
<a href='".e_SELF."?".$path.$dirs[$c]."/'>".$dirs[$c]."</a>
<div class='e-hideme' id='{$el_id}'>
<div class='field-spacer'>".$frm->file('file_userfile[]', array('id'=>false, 'size'=>'20')).$frm->admin_button('upload', FMLAN_22, '', '', array('id'=>false))."</div>
<input type='hidden' name='upload_dir[]' value='".$path.$dirs[$c]."' />
</div>
</td>
<td class='right'>".$dirsize."</td>
<td class='right'>&nbsp;</td>
</tr>
";
$c++;
}
$c = 0;
while ($files[$c])
{
$img = strtolower(substr(strrchr($files[$c], "."), 1, 3));
if (!$img || !preg_match("/css|exe|gif|htm|jpg|js|php|png|txt|xml|zip/i", $img))
{
$img = "def";
}
$size = eHelper::parseMemorySize(filesize(e_BASE.$path."/".$files[$c]));
$gen = new convert;
$filedate = e107::getDate()->convert_date(filemtime(e_BASE.$path."/".$files[$c]), "forum");
$text .= "
<tr>
<td class='center middle autocheck'>
".$frm->checkbox("selectedfile[$c]", 1, false, array('id'=>false))."
<input type='hidden' name='deleteconfirm[$c]' value='".$path.$files[$c]."' />
</td>
<td>
<img class='icon' src='".$imagedir.$img.".png' alt='".$files[$c]."' />
<a href='".e_SELF."?".$path.$files[$c]."'>".$files[$c]."</a>
</td>
<td class='right'>".$size."</td>
<td class='right'>".$filedate."</td>
</tr>
";
$c++;
}
$text .= "
</tbody>
</table>
<div class='buttons-bar left'>
".$frm->admin_button('check_all', 'jstarget:selectedfile', 'action', LAN_CHECKALL, array('id'=>false))."
".$frm->admin_button('uncheck_all', 'jstarget:selectedfile', 'action', LAN_UNCHECKALL, array('id'=>false))."
";
if ($pubfolder || e_QUERY == ""){
require_once(e_HANDLER."file_class.php");
$fl = new e_file;
$dl_dirlist = $fl->get_dirs(e_DOWNLOAD);
$movechoice = array();
$movechoice[] = e_DOWNLOAD;
foreach($dl_dirlist as $dirs){
$movechoice[] = e_DOWNLOAD.$dirs."/";
}
sort($movechoice);
$movechoice[] = e_FILE."downloadimages/";
if(e_QUERY != str_replace("../","",e_UPLOAD)){
$movechoice[] = e_UPLOAD;
}
if(e_QUERY != str_replace("../","",e_FILE."downloadthumbs/")){
$movechoice[] = e_FILE."downloadthumbs/";
}
if(e_QUERY != str_replace("../","",e_FILE."misc/")){
$movechoice[] = e_FILE."misc/";
}
if(e_QUERY != str_replace("../","",e_IMAGE)){
$movechoice[] = e_IMAGE;
}
if(e_QUERY != str_replace("../","",e_IMAGE."newspost_images/")){
$movechoice[] = e_IMAGE."newspost_images/";
}
//FIXME - form elements
$text .= FMLAN_48."&nbsp;<select class='tbox' name='movepath'>\n";
foreach($movechoice as $paths){
$text .= "<option value='$paths'>".str_replace("../","",$paths)."</option>\n";
}
$text .= "</select>".$frm->admin_button('movetodls', FMLAN_50, 'move', '', array('other' => "onclick=\"return e107Helper.confirm('".$tp->toJS(FMLAN_49)."') \""));
}
$text .= "
".$frm->admin_button('deletefiles', FMLAN_43, 'delete', '', array('title' => $tp->toJS(FMLAN_46)))."
<input type='hidden' name='ac' value='".md5(ADMINPWCHANGE)."' />
</div>
</fieldset>
</form>
";
$ns->tablerender(FMLAN_29.": <b>root/".$pathd."</b>&nbsp;&nbsp;[ ".count($dirs)." ".$dstr.", ".count($files)." ".$cstr." ]", $text);
function dirsize($dir)
{
global $e107;
$_SERVER["DOCUMENT_ROOT"].e_HTTP.$dir;
$dh = @opendir($_SERVER["DOCUMENT_ROOT"].e_HTTP.$dir);
$size = 0;
while ($file = @readdir($dh)) {
if ($file != "." and $file != "..") {
$path = $dir."/".$file;
if (is_file($_SERVER["DOCUMENT_ROOT"].e_HTTP.$path)) {
$size += filesize($_SERVER["DOCUMENT_ROOT"].e_HTTP.$path);
} else {
$size += dirsize($path."/");
}
}
}
@closedir($dh);
return $e107->parseMemorySize($size);
}
require_once("footer.php");
?>