ajax_calls.php | searchcode

/admin228c4ef56/filemanager/ajax_calls.php

https://gitlab.com/staging06/myproject
PHP | 253 lines | 224 code | 21 blank | 8 comment | 36 complexity | 82d57fe3b7cebaefd1816e4dea69d92b MD5 | raw file

<?php

include('config/config.php');

if ($_SESSION['verify'] != 'RESPONSIVEfilemanager') {
    die('forbiden');
}

include('include/utils.php');

if (isset($_GET['action'])) {
    switch ($_GET['action']) {
        case 'view':
            if (isset($_GET['type'])) {
                $_SESSION['view_type'] = $_GET['type'];
            } else {
                die('view type number missing');
            }
            break;
        case 'sort':
            if (isset($_GET['sort_by'])) {
                $_SESSION['sort_by'] = $_GET['sort_by'];
            }
            if (isset($_GET['descending'])) {
                $_SESSION['descending'] = $_GET['descending'] === 'true';
            }
            break;
        case 'image_size':
            if (realpath(dirname(_PS_ROOT_DIR_.$_POST['path'])) != realpath(_PS_ROOT_DIR_.$upload_dir)) {
                die();
            }
            $pos = strpos($_POST['path'], $upload_dir);
            if ($pos !== false) {
                $info = getimagesize(substr_replace($_POST['path'], $current_path, $pos, strlen($upload_dir)));
                echo json_encode($info);
            }

            break;
        case 'save_img':
            $info = pathinfo($_POST['name']);
            if (strpos($_POST['path'], '/') === 0
                || strpos($_POST['path'], '../') !== false
                || strpos($_POST['path'], './') === 0
                || strpos($_POST['url'], 'http://featherfiles.aviary.com/') !== 0
                || $_POST['name'] != fix_filename($_POST['name'], $transliteration)
                || !in_array(strtolower($info['extension']), array('jpg', 'jpeg', 'png'))
            ) {
                die('wrong data');
            }
            $image_data = get_file_by_url($_POST['url']);
            if ($image_data === false) {
                die('file could not be loaded');
            }

            $put_contents_path = $current_path;

            if (isset($_POST['path'])) {
                $put_contents_path .= str_replace("\0", "", $_POST['path']);
            }

            if (isset($_POST['name'])) {
                $put_contents_path .= str_replace("\0", "", $_POST['name']);
            }

            file_put_contents($put_contents_path, $image_data);
            //new thumb creation
            //try{
            create_img_gd($current_path.$_POST['path'].$_POST['name'], $thumbs_base_path.$_POST['path'].$_POST['name'], 122, 91);
            new_thumbnails_creation($current_path.$_POST['path'], $current_path.$_POST['path'].$_POST['name'], $_POST['name'], $current_path, $relative_image_creation, $relative_path_from_current_pos, $relative_image_creation_name_to_prepend, $relative_image_creation_name_to_append, $relative_image_creation_width, $relative_image_creation_height, $fixed_image_creation, $fixed_path_from_filemanager, $fixed_image_creation_name_to_prepend, $fixed_image_creation_to_append, $fixed_image_creation_width, $fixed_image_creation_height);
            /*} catch (Exception $e) {
            $src_thumb=$mini_src="";
            }*/
            break;
        case 'extract':
            if (strpos($_POST['path'], '/') === 0 || strpos($_POST['path'], '../') !== false || strpos($_POST['path'], './') === 0) {
                die('wrong path');
            }
            $path = $current_path.$_POST['path'];
            $info = pathinfo($path);
            $base_folder = $current_path.fix_dirname($_POST['path']).'/';
            switch ($info['extension']) {
                case 'zip':
                    $zip = new ZipArchive;
                    if ($zip->open($path) === true) {
                        //make all the folders
                        for ($i = 0; $i < $zip->numFiles; $i++) {
                            $OnlyFileName = $zip->getNameIndex($i);
                            $FullFileName = $zip->statIndex($i);
                            if ($FullFileName['name'][strlen($FullFileName['name']) - 1] == '/') {
                                create_folder($base_folder.$FullFileName['name']);
                            }
                        }
                        //unzip into the folders
                        for ($i = 0; $i < $zip->numFiles; $i++) {
                            $OnlyFileName = $zip->getNameIndex($i);
                            $FullFileName = $zip->statIndex($i);

                            if (!($FullFileName['name'][strlen($FullFileName['name']) - 1] == '/')) {
                                $fileinfo = pathinfo($OnlyFileName);
                                if (in_array(strtolower($fileinfo['extension']), $ext)) {
                                    copy('zip://'.$path.'#'.$OnlyFileName, $base_folder.$FullFileName['name']);
                                }
                            }
                        }
                        $zip->close();
                    } else {
                        echo 'failed to open file';
                    }
                    break;
                case 'gz':
                    $p = new PharData($path);
                    $p->decompress(); // creates files.tar
                    break;
                case 'tar':
                    // unarchive from the tar
                    $phar = new PharData($path);
                    $phar->decompressFiles();
                    $files = array();
                    check_files_extensions_on_phar($phar, $files, '', $ext);
                    $phar->extractTo($current_path.fix_dirname($_POST['path']).'/', $files, true);

                    break;
            }
            break;
        case 'media_preview':

            $preview_file = $_GET['file'];
            $info = pathinfo($preview_file);
            ?>
			<div id="jp_container_1" class="jp-video " style="margin:0 auto;">
				<div class="jp-type-single">
					<div id="jquery_jplayer_1" class="jp-jplayer"></div>
					<div class="jp-gui">
						<div class="jp-video-play">
							<a href="javascript:;" class="jp-video-play-icon" tabindex="1">play</a>
						</div>
						<div class="jp-interface">
							<div class="jp-progress">
								<div class="jp-seek-bar">
									<div class="jp-play-bar"></div>
								</div>
							</div>
							<div class="jp-current-time"></div>
							<div class="jp-duration"></div>
							<div class="jp-controls-holder">
								<ul class="jp-controls">
									<li><a href="javascript:;" class="jp-play" tabindex="1">play</a></li>
									<li><a href="javascript:;" class="jp-pause" tabindex="1">pause</a></li>
									<li><a href="javascript:;" class="jp-stop" tabindex="1">stop</a></li>
									<li><a href="javascript:;" class="jp-mute" tabindex="1" title="mute">mute</a></li>
									<li><a href="javascript:;" class="jp-unmute" tabindex="1" title="unmute">unmute</a>
									</li>
									<li><a href="javascript:;" class="jp-volume-max" tabindex="1" title="max volume">max
											volume</a></li>
								</ul>
								<div class="jp-volume-bar">
									<div class="jp-volume-bar-value"></div>
								</div>
								<ul class="jp-toggles">
									<li><a href="javascript:;" class="jp-full-screen" tabindex="1" title="full screen">full
											screen</a></li>
									<li>
										<a href="javascript:;" class="jp-restore-screen" tabindex="1" title="restore screen">restore
											screen</a></li>
									<li><a href="javascript:;" class="jp-repeat" tabindex="1" title="repeat">repeat</a>
									</li>
									<li><a href="javascript:;" class="jp-repeat-off" tabindex="1" title="repeat off">repeat
											off</a></li>
								</ul>
							</div>
							<div class="jp-title" style="display:none;">
								<ul>
									<li></li>
								</ul>
							</div>
						</div>
					</div>
					<div class="jp-no-solution">
						<span>Update Required</span>
						To play the media you will need to either update your browser to a recent version or update your
						<a href="http://get.adobe.com/flashplayer/" class="_blank">Flash plugin</a>.
					</div>
				</div>
			</div>
			<?php
            if (in_array(strtolower($info['extension']), $ext_music)) {
                ?>

				<script type="text/javascript">
					$(document).ready(function () {

						$("#jquery_jplayer_1").jPlayer({
							ready: function () {
								$(this).jPlayer("setMedia", {
									title: "<?php Tools::safeOutput($_GET['title']);
                ?>",
									mp3: "<?php echo Tools::safeOutput($preview_file);
                ?>",
									m4a: "<?php echo Tools::safeOutput($preview_file);
                ?>",
									oga: "<?php echo Tools::safeOutput($preview_file);
                ?>",
									wav: "<?php echo Tools::safeOutput($preview_file);
                ?>"
								});
							},
							swfPath: "js",
							solution: "html,flash",
							supplied: "mp3, m4a, midi, mid, oga,webma, ogg, wav",
							smoothPlayBar: true,
							keyEnabled: false
						});
					});
				</script>

			<?php

            } elseif (in_array(strtolower($info['extension']), $ext_video)) {
                ?>

				<script type="text/javascript">
					$(document).ready(function () {

						$("#jquery_jplayer_1").jPlayer({
							ready: function () {
								$(this).jPlayer("setMedia", {
									title: "<?php Tools::safeOutput($_GET['title']);
                ?>",
									m4v: "<?php echo Tools::safeOutput($preview_file);
                ?>",
									ogv: "<?php echo Tools::safeOutput($preview_file);
                ?>"
								});
							},
							swfPath: "js",
							solution: "html,flash",
							supplied: "mp4, m4v, ogv, flv, webmv, webm",
							smoothPlayBar: true,
							keyEnabled: false
						});

					});
				</script>

			<?php

            }
            break;
    }
} else {
    die('no action passed');
}
?>