/plugins/editors/fckeditor/editor/filemanager/connectors/php/commands.php

https://github.com/shafiqissani/Jewelery-Ecommerce- · PHP · 273 lines · 188 code · 48 blank · 37 comment · 44 complexity · ac09ad520f7a13afc02665b77fa2cfa2 MD5 · raw file

  1. <?php
  2. /*
  3. * FCKeditor - The text editor for Internet - http://www.fckeditor.net
  4. * Copyright (C) 2003-2009 Frederico Caldeira Knabben
  5. *
  6. * == BEGIN LICENSE ==
  7. *
  8. * Licensed under the terms of any of the following licenses at your
  9. * choice:
  10. *
  11. * - GNU General Public License Version 2 or later (the "GPL")
  12. * http://www.gnu.org/licenses/gpl.html
  13. *
  14. * - GNU Lesser General Public License Version 2.1 or later (the "LGPL")
  15. * http://www.gnu.org/licenses/lgpl.html
  16. *
  17. * - Mozilla Public License Version 1.1 or later (the "MPL")
  18. * http://www.mozilla.org/MPL/MPL-1.1.html
  19. *
  20. * == END LICENSE ==
  21. *
  22. * This is the File Manager Connector for PHP.
  23. */
  24. function GetFolders( $resourceType, $currentFolder )
  25. {
  26. // Map the virtual path to the local server path.
  27. $sServerDir = ServerMapFolder( $resourceType, $currentFolder, 'GetFolders' ) ;
  28. // Array that will hold the folders names.
  29. $aFolders = array() ;
  30. $oCurrentFolder = opendir( $sServerDir ) ;
  31. while ( $sFile = readdir( $oCurrentFolder ) )
  32. {
  33. if ( $sFile != '.' && $sFile != '..' && is_dir( $sServerDir . $sFile ) )
  34. $aFolders[] = '<Folder name="' . ConvertToXmlAttribute( $sFile ) . '" />' ;
  35. }
  36. closedir( $oCurrentFolder ) ;
  37. // Open the "Folders" node.
  38. echo "<Folders>" ;
  39. natcasesort( $aFolders ) ;
  40. foreach ( $aFolders as $sFolder )
  41. echo $sFolder ;
  42. // Close the "Folders" node.
  43. echo "</Folders>" ;
  44. }
  45. function GetFoldersAndFiles( $resourceType, $currentFolder )
  46. {
  47. // Map the virtual path to the local server path.
  48. $sServerDir = ServerMapFolder( $resourceType, $currentFolder, 'GetFoldersAndFiles' ) ;
  49. // Arrays that will hold the folders and files names.
  50. $aFolders = array() ;
  51. $aFiles = array() ;
  52. $oCurrentFolder = opendir( $sServerDir ) ;
  53. while ( $sFile = readdir( $oCurrentFolder ) )
  54. {
  55. if ( $sFile != '.' && $sFile != '..' )
  56. {
  57. if ( is_dir( $sServerDir . $sFile ) )
  58. $aFolders[] = '<Folder name="' . ConvertToXmlAttribute( $sFile ) . '" />' ;
  59. else
  60. {
  61. $iFileSize = @filesize( $sServerDir . $sFile ) ;
  62. if ( !$iFileSize ) {
  63. $iFileSize = 0 ;
  64. }
  65. if ( $iFileSize > 0 )
  66. {
  67. $iFileSize = round( $iFileSize / 1024 ) ;
  68. if ( $iFileSize < 1 ) $iFileSize = 1 ;
  69. }
  70. $aFiles[] = '<File name="' . ConvertToXmlAttribute( $sFile ) . '" size="' . $iFileSize . '" />' ;
  71. }
  72. }
  73. }
  74. // Send the folders
  75. natcasesort( $aFolders ) ;
  76. echo '<Folders>' ;
  77. foreach ( $aFolders as $sFolder )
  78. echo $sFolder ;
  79. echo '</Folders>' ;
  80. // Send the files
  81. natcasesort( $aFiles ) ;
  82. echo '<Files>' ;
  83. foreach ( $aFiles as $sFiles )
  84. echo $sFiles ;
  85. echo '</Files>' ;
  86. }
  87. function CreateFolder( $resourceType, $currentFolder )
  88. {
  89. if (!isset($_GET)) {
  90. global $_GET;
  91. }
  92. $sErrorNumber = '0' ;
  93. $sErrorMsg = '' ;
  94. if ( isset( $_GET['NewFolderName'] ) )
  95. {
  96. $sNewFolderName = $_GET['NewFolderName'] ;
  97. $sNewFolderName = SanitizeFolderName( $sNewFolderName ) ;
  98. if ( strpos( $sNewFolderName, '..' ) !== FALSE )
  99. $sErrorNumber = '102' ; // Invalid folder name.
  100. else
  101. {
  102. // Map the virtual path to the local server path of the current folder.
  103. $sServerDir = ServerMapFolder( $resourceType, $currentFolder, 'CreateFolder' ) ;
  104. if ( is_writable( $sServerDir ) )
  105. {
  106. $sServerDir .= $sNewFolderName ;
  107. $sErrorMsg = CreateServerFolder( $sServerDir ) ;
  108. switch ( $sErrorMsg )
  109. {
  110. case '' :
  111. $sErrorNumber = '0' ;
  112. break ;
  113. case 'Invalid argument' :
  114. case 'No such file or directory' :
  115. $sErrorNumber = '102' ; // Path too long.
  116. break ;
  117. default :
  118. $sErrorNumber = '110' ;
  119. break ;
  120. }
  121. }
  122. else
  123. $sErrorNumber = '103' ;
  124. }
  125. }
  126. else
  127. $sErrorNumber = '102' ;
  128. // Create the "Error" node.
  129. echo '<Error number="' . $sErrorNumber . '" originalDescription="' . ConvertToXmlAttribute( $sErrorMsg ) . '" />' ;
  130. }
  131. function FileUpload( $resourceType, $currentFolder, $sCommand )
  132. {
  133. if (!isset($_FILES)) {
  134. global $_FILES;
  135. }
  136. $sErrorNumber = '0' ;
  137. $sFileName = '' ;
  138. if ( isset( $_FILES['NewFile'] ) && !is_null( $_FILES['NewFile']['tmp_name'] ) )
  139. {
  140. global $Config ;
  141. $oFile = $_FILES['NewFile'] ;
  142. // Map the virtual path to the local server path.
  143. $sServerDir = ServerMapFolder( $resourceType, $currentFolder, $sCommand ) ;
  144. // Get the uploaded file name.
  145. $sFileName = $oFile['name'] ;
  146. $sFileName = SanitizeFileName( $sFileName ) ;
  147. $sOriginalFileName = $sFileName ;
  148. // Get the extension.
  149. $sExtension = substr( $sFileName, ( strrpos($sFileName, '.') + 1 ) ) ;
  150. $sExtension = strtolower( $sExtension ) ;
  151. if ( isset( $Config['SecureImageUploads'] ) )
  152. {
  153. if ( ( $isImageValid = IsImageValid( $oFile['tmp_name'], $sExtension ) ) === false )
  154. {
  155. $sErrorNumber = '202' ;
  156. }
  157. }
  158. if ( isset( $Config['HtmlExtensions'] ) )
  159. {
  160. if ( !IsHtmlExtension( $sExtension, $Config['HtmlExtensions'] ) &&
  161. ( $detectHtml = DetectHtml( $oFile['tmp_name'] ) ) === true )
  162. {
  163. $sErrorNumber = '202' ;
  164. }
  165. }
  166. // Check if it is an allowed extension.
  167. if ( !$sErrorNumber && IsAllowedExt( $sExtension, $resourceType ) )
  168. {
  169. $iCounter = 0 ;
  170. while ( true )
  171. {
  172. $sFilePath = $sServerDir . $sFileName ;
  173. if ( is_file( $sFilePath ) )
  174. {
  175. $iCounter++ ;
  176. $sFileName = RemoveExtension( $sOriginalFileName ) . '(' . $iCounter . ').' . $sExtension ;
  177. $sErrorNumber = '201' ;
  178. }
  179. else
  180. {
  181. move_uploaded_file( $oFile['tmp_name'], $sFilePath ) ;
  182. if ( is_file( $sFilePath ) )
  183. {
  184. if ( isset( $Config['ChmodOnUpload'] ) && !$Config['ChmodOnUpload'] )
  185. {
  186. break ;
  187. }
  188. $permissions = 0777;
  189. if ( isset( $Config['ChmodOnUpload'] ) && $Config['ChmodOnUpload'] )
  190. {
  191. $permissions = $Config['ChmodOnUpload'] ;
  192. }
  193. $oldumask = umask(0) ;
  194. chmod( $sFilePath, $permissions ) ;
  195. umask( $oldumask ) ;
  196. }
  197. break ;
  198. }
  199. }
  200. if ( file_exists( $sFilePath ) )
  201. {
  202. //previous checks failed, try once again
  203. if ( isset( $isImageValid ) && $isImageValid === -1 && IsImageValid( $sFilePath, $sExtension ) === false )
  204. {
  205. @unlink( $sFilePath ) ;
  206. $sErrorNumber = '202' ;
  207. }
  208. else if ( isset( $detectHtml ) && $detectHtml === -1 && DetectHtml( $sFilePath ) === true )
  209. {
  210. @unlink( $sFilePath ) ;
  211. $sErrorNumber = '202' ;
  212. }
  213. }
  214. }
  215. else
  216. $sErrorNumber = '202' ;
  217. }
  218. else
  219. $sErrorNumber = '202' ;
  220. $sFileUrl = CombinePaths( GetResourceTypePath( $resourceType, $sCommand ) , $currentFolder ) ;
  221. $sFileUrl = CombinePaths( $sFileUrl, $sFileName ) ;
  222. SendUploadResults( $sErrorNumber, $sFileUrl, $sFileName ) ;
  223. exit ;
  224. }
  225. ?>