959 lines
36 KiB
PHP
959 lines
36 KiB
PHP
<?php
|
|
|
|
// Pandora FMS - http://pandorafms.com
|
|
// ==================================================
|
|
// Copyright (c) 2005-2021 Artica Soluciones Tecnologicas
|
|
// Please see http://pandorafms.org for full contribution list
|
|
// This program is free software; you can redistribute it and/or
|
|
// modify it under the terms of the GNU Lesser General Public License
|
|
// as published by the Free Software Foundation; version 2
|
|
// This program is distributed in the hope that it will be useful,
|
|
// but WITHOUT ANY WARRANTY; without even the implied warranty of
|
|
// MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
|
// GNU General Public License for more details.
|
|
|
|
/**
|
|
* @package Include
|
|
* @subpackage Filemanager
|
|
*/
|
|
|
|
/**
|
|
* #@+
|
|
* Constants
|
|
*/
|
|
define('MIME_UNKNOWN', 0);
|
|
define('MIME_DIR', 1);
|
|
define('MIME_IMAGE', 2);
|
|
define('MIME_ZIP', 3);
|
|
define('MIME_TEXT', 4);
|
|
/*
|
|
#@-
|
|
*/
|
|
|
|
if (!function_exists('mime_content_type')) {
|
|
|
|
|
|
/**
|
|
* Gets the MIME type of a file.
|
|
*
|
|
* Help function in case mime_magic is not loaded on PHP.
|
|
*
|
|
* @param string Filename to get MIME type.
|
|
*
|
|
* @return The MIME type of the file.
|
|
*/
|
|
function mime_content_type($filename)
|
|
{
|
|
$mime_types = [
|
|
'txt' => 'text/plain',
|
|
'htm' => 'text/html',
|
|
'html' => 'text/html',
|
|
'php' => 'text/html',
|
|
'css' => 'text/css',
|
|
'js' => 'application/javascript',
|
|
'json' => 'application/json',
|
|
'xml' => 'application/xml',
|
|
'swf' => 'application/x-shockwave-flash',
|
|
'flv' => 'video/x-flv',
|
|
// images
|
|
'png' => 'image/png',
|
|
'jpe' => 'image/jpeg',
|
|
'jpeg' => 'image/jpeg',
|
|
'jpg' => 'image/jpeg',
|
|
'gif' => 'image/gif',
|
|
'bmp' => 'image/bmp',
|
|
'ico' => 'image/vnd.microsoft.icon',
|
|
'tiff' => 'image/tiff',
|
|
'tif' => 'image/tiff',
|
|
'svg' => 'image/svg+xml',
|
|
'svgz' => 'image/svg+xml',
|
|
// archives
|
|
'zip' => 'application/zip',
|
|
'rar' => 'application/x-rar-compressed',
|
|
'exe' => 'application/x-msdownload',
|
|
'msi' => 'application/x-msdownload',
|
|
'cab' => 'application/vnd.ms-cab-compressed',
|
|
'gz' => 'application/x-gzip',
|
|
'gz' => 'application/x-bzip2',
|
|
// audio/video
|
|
'mp3' => 'audio/mpeg',
|
|
'qt' => 'video/quicktime',
|
|
'mov' => 'video/quicktime',
|
|
// adobe
|
|
'pdf' => 'application/pdf',
|
|
'psd' => 'image/vnd.adobe.photoshop',
|
|
'ai' => 'application/postscript',
|
|
'eps' => 'application/postscript',
|
|
'ps' => 'application/postscript',
|
|
// ms office
|
|
'doc' => 'application/msword',
|
|
'rtf' => 'application/rtf',
|
|
'xls' => 'application/vnd.ms-excel',
|
|
'ppt' => 'application/vnd.ms-powerpoint',
|
|
// open office
|
|
'odt' => 'application/vnd.oasis.opendocument.text',
|
|
'ods' => 'application/vnd.oasis.opendocument.spreadsheet',
|
|
];
|
|
|
|
$ext_fields = explode('.', $filename);
|
|
$ext = array_pop($ext_fields);
|
|
$ext = strtolower($ext);
|
|
if (array_key_exists($ext, $mime_types)) {
|
|
return $mime_types[$ext];
|
|
} else if (function_exists('finfo_open')) {
|
|
$finfo = finfo_open(FILEINFO_MIME);
|
|
$mimetype = finfo_file($finfo, $filename);
|
|
finfo_close($finfo);
|
|
return $mimetype;
|
|
} else {
|
|
error_log('Warning: Cannot find finfo_open function. Fileinfo extension is not enabled. Please add "extension=fileinfo.so" or "extension=fileinfo.dll" in your php.ini');
|
|
return 'unknown';
|
|
}
|
|
}
|
|
|
|
|
|
}
|
|
|
|
global $config;
|
|
|
|
|
|
function upload_file($upload_file_or_zip, $default_real_directory)
|
|
{
|
|
global $config;
|
|
|
|
$homedir_filemanager = trim($config['homedir']);
|
|
$sec2 = get_parameter('sec2');
|
|
|
|
if ($sec2 == 'enterprise/godmode/agentes/collections' || $sec2 == 'advanced/collections') {
|
|
$homedir_filemanager .= '/attachment/collection/';
|
|
}
|
|
|
|
$config['filemanager'] = [];
|
|
$config['filemanager']['correct_upload_file'] = 0;
|
|
$config['filemanager']['message'] = null;
|
|
|
|
check_login();
|
|
|
|
if (! check_acl($config['id_user'], 0, 'AW')) {
|
|
db_pandora_audit('ACL Violation', 'Trying to access File manager');
|
|
include 'general/noaccess.php';
|
|
return;
|
|
}
|
|
|
|
if ($upload_file_or_zip) {
|
|
$decompress = get_parameter('decompress');
|
|
if (!$decompress) {
|
|
$upload_file = true;
|
|
$upload_zip = false;
|
|
} else {
|
|
$upload_file = false;
|
|
$upload_zip = true;
|
|
}
|
|
} else {
|
|
$upload_file = (bool) get_parameter('upload_file');
|
|
$upload_zip = (bool) get_parameter('upload_zip');
|
|
}
|
|
|
|
// Upload file
|
|
if ($upload_file) {
|
|
if (isset($_FILES['file']) && $_FILES['file']['name'] != '') {
|
|
$filename = $_FILES['file']['name'];
|
|
$filesize = $_FILES['file']['size'];
|
|
$real_directory = io_safe_output((string) get_parameter('real_directory'));
|
|
$directory = io_safe_output((string) get_parameter('directory'));
|
|
$umask = io_safe_output((string) get_parameter('umask', ''));
|
|
|
|
if (strpos($real_directory, $default_real_directory) !== 0) {
|
|
// Perform security check to determine whether received upload directory is part of the default path for caller uploader and user is not trying to access an external path (avoid execution of PHP files in directories that are not explicitly controlled by corresponding .htaccess).
|
|
ui_print_error_message(__('Security error'));
|
|
} else {
|
|
// Copy file to directory and change name
|
|
if ($directory == '') {
|
|
$nombre_archivo = $real_directory.'/'.$filename;
|
|
} else {
|
|
$nombre_archivo = $homedir_filemanager.'/'.$directory.'/'.$filename;
|
|
}
|
|
|
|
if (! @copy($_FILES['file']['tmp_name'], $nombre_archivo)) {
|
|
$config['filemanager']['message'] = ui_print_error_message(__('Upload error'));
|
|
} else {
|
|
if ($umask !== '') {
|
|
chmod($nombre_archivo, $umask);
|
|
}
|
|
|
|
$config['filemanager']['correct_upload_file'] = 1;
|
|
ui_print_success_message(__('Upload correct'));
|
|
|
|
// Delete temporal file
|
|
unlink($_FILES['file']['tmp_name']);
|
|
}
|
|
}
|
|
}
|
|
}
|
|
|
|
// Upload zip
|
|
if ($upload_zip) {
|
|
if (isset($_FILES['file']) && $_FILES['file']['name'] != '') {
|
|
$filename = $_FILES['file']['name'];
|
|
$filesize = $_FILES['file']['size'];
|
|
$real_directory = (string) get_parameter('real_directory');
|
|
$real_directory = io_safe_output($real_directory);
|
|
$directory = (string) get_parameter('directory');
|
|
$directory = io_safe_output($directory);
|
|
|
|
if (strpos($real_directory, $default_real_directory) !== 0) {
|
|
// Perform security check to determine whether received upload directory is part of the default path for caller uploader and user is not trying to access an external path (avoid execution of PHP files in directories that are not explicitly controlled by corresponding .htaccess).
|
|
ui_print_error_message(__('Security error'));
|
|
} else {
|
|
// Copy file to directory and change name
|
|
if ($directory == '') {
|
|
$nombre_archivo = $real_directory.'/'.$filename;
|
|
} else {
|
|
$nombre_archivo = $homedir_filemanager.'/'.$directory.'/'.$filename;
|
|
}
|
|
|
|
if (! @copy($_FILES['file']['tmp_name'], $nombre_archivo)) {
|
|
ui_print_error_message(__('Attach error'));
|
|
} else {
|
|
// Delete temporal file
|
|
unlink($_FILES['file']['tmp_name']);
|
|
|
|
// Extract the zip file
|
|
$zip = new ZipArchive;
|
|
$pathname = $homedir_filemanager.'/'.$directory.'/';
|
|
|
|
if ($zip->open($nombre_archivo) === true) {
|
|
$zip->extractTo($pathname);
|
|
unlink($nombre_archivo);
|
|
}
|
|
|
|
ui_print_success_message(__('Upload correct'));
|
|
$config['filemanager']['correct_upload_file'] = 1;
|
|
}
|
|
}
|
|
}
|
|
}
|
|
}
|
|
|
|
|
|
if (isset($_SERVER['CONTENT_LENGTH'])) {
|
|
// Control the max_post_size exceed
|
|
if (intval($_SERVER['CONTENT_LENGTH']) > 0 && empty($_POST) and empty($_FILES)) {
|
|
$config['filemanager']['correct_upload_file'] = 0;
|
|
$config['filemanager']['message'] = ui_print_error_message(__('File size seems to be too large. Please check your php.ini configuration or contact with the administrator'), '', true);
|
|
}
|
|
}
|
|
|
|
|
|
function create_text_file($default_real_directory)
|
|
{
|
|
global $config;
|
|
|
|
$homedir_filemanager = trim($config['homedir']);
|
|
$sec2 = get_parameter('sec2');
|
|
|
|
if ($sec2 == 'enterprise/godmode/agentes/collections' || $sec2 == 'advanced/collections') {
|
|
$homedir_filemanager .= '/attachment/collection/';
|
|
}
|
|
|
|
$config['filemanager'] = [];
|
|
$config['filemanager']['correct_upload_file'] = 0;
|
|
$config['filemanager']['message'] = null;
|
|
|
|
check_login();
|
|
|
|
if (! check_acl($config['id_user'], 0, 'AW')) {
|
|
db_pandora_audit('ACL Violation', 'Trying to access File manager');
|
|
include 'general/noaccess.php';
|
|
return;
|
|
}
|
|
|
|
$filename = io_safe_output(get_parameter('name_file'));
|
|
|
|
if ($filename != '') {
|
|
$real_directory = (string) get_parameter('real_directory');
|
|
$real_directory = io_safe_output($real_directory);
|
|
$directory = (string) get_parameter('directory');
|
|
$directory = io_safe_output($directory);
|
|
$umask = (string) get_parameter('umask', '');
|
|
|
|
if (strpos($real_directory, $default_real_directory) !== 0) {
|
|
// Perform security check to determine whether received upload directory is part of the default path for caller uploader and user is not trying to access an external path (avoid execution of PHP files in directories that are not explicitly controlled by corresponding .htaccess).
|
|
ui_print_error_message(__('Security error'));
|
|
} else {
|
|
if ($directory == '') {
|
|
$nombre_archivo = $real_directory.'/'.$filename;
|
|
} else {
|
|
$nombre_archivo = $homedir_filemanager.'/'.$directory.'/'.$filename;
|
|
}
|
|
|
|
if (! @touch($nombre_archivo)) {
|
|
$config['filemanager']['message'] = ui_print_error_message(__('Error creating file'));
|
|
} else {
|
|
if ($umask !== '') {
|
|
chmod($nombre_archivo, $umask);
|
|
}
|
|
|
|
ui_print_success_message(__('Upload correct'));
|
|
|
|
$config['filemanager']['correct_upload_file'] = 1;
|
|
}
|
|
}
|
|
} else {
|
|
ui_print_error_message(__('Error creating file with empty name'));
|
|
}
|
|
}
|
|
|
|
|
|
$homedir_filemanager = trim($config['homedir']);
|
|
$sec2 = get_parameter('sec2');
|
|
if ($sec2 == 'enterprise/godmode/agentes/collections' || $sec2 == 'advanced/collections') {
|
|
$homedir_filemanager .= '/attachment/collection/';
|
|
}
|
|
|
|
// CREATE DIR
|
|
$create_dir = (bool) get_parameter('create_dir');
|
|
if ($create_dir) {
|
|
global $config;
|
|
|
|
$config['filemanager'] = [];
|
|
$config['filemanager']['correct_create_dir'] = 0;
|
|
$config['filemanager']['message'] = null;
|
|
|
|
$directory = (string) get_parameter('directory', '/');
|
|
$directory = io_safe_output($directory);
|
|
$hash = get_parameter('hash', '');
|
|
$testHash = md5($directory.$config['dbpass']);
|
|
|
|
if ($hash != $testHash) {
|
|
ui_print_error_message(__('Security error.'));
|
|
} else {
|
|
$dirname = (string) get_parameter('dirname');
|
|
$dirname = io_safe_output($dirname);
|
|
|
|
if ($dirname != '') {
|
|
@mkdir(
|
|
$homedir_filemanager.'/'.$directory.'/'.$dirname
|
|
);
|
|
$config['filemanager']['message'] = ui_print_success_message(__('Directory created'), '', true);
|
|
|
|
$config['filemanager']['correct_create_dir'] = 1;
|
|
} else {
|
|
$config['filemanager']['message'] = ui_print_error_message(__('Error creating file with empty name'), '', true);
|
|
}
|
|
}
|
|
}
|
|
|
|
// DELETE FILE OR DIR
|
|
$delete_file = (bool) get_parameter('delete_file');
|
|
if ($delete_file) {
|
|
global $config;
|
|
|
|
$config['filemanager'] = [];
|
|
$config['filemanager']['delete'] = 0;
|
|
$config['filemanager']['message'] = null;
|
|
|
|
$filename = (string) get_parameter('filename');
|
|
$filename = io_safe_output($filename);
|
|
$hash = get_parameter('hash', '');
|
|
$testHash = md5($filename.$config['dbpass']);
|
|
|
|
if ($hash != $testHash) {
|
|
$config['filemanager']['message'] = ui_print_error_message(__('Security error'), '', true);
|
|
} else {
|
|
$config['filemanager']['message'] = ui_print_success_message(__('Deleted'), '', true);
|
|
|
|
if (is_dir($filename)) {
|
|
if (rmdir($filename)) {
|
|
$config['filemanager']['delete'] = 1;
|
|
} else {
|
|
$config['filemanager']['delete'] = 0;
|
|
}
|
|
} else {
|
|
if (unlink($filename)) {
|
|
$config['filemanager']['delete'] = 1;
|
|
} else {
|
|
$config['filemanager']['delete'] = 0;
|
|
}
|
|
}
|
|
|
|
if ($config['filemanager']['delete'] == 0) {
|
|
$config['filemanager']['message'] = ui_print_error_message(__('Deleted'), '', true);
|
|
}
|
|
}
|
|
}
|
|
|
|
|
|
/**
|
|
* Recursive delete directory and empty or not directory.
|
|
*
|
|
* @param string $dir The dir to deletete
|
|
*/
|
|
function filemanager_delete_directory($dir)
|
|
{
|
|
// Windows compatibility
|
|
$dir = str_replace('\\', '/', $dir);
|
|
|
|
if ($handle = opendir($dir)) {
|
|
while (false !== ($file = readdir($handle))) {
|
|
if (($file != '.') && ($file != '..')) {
|
|
if (is_dir($dir.$file)) {
|
|
if (!rmdir($dir.$file)) {
|
|
filemanager_delete_directory($dir.$file.'/');
|
|
}
|
|
} else {
|
|
unlink($dir.$file);
|
|
}
|
|
}
|
|
}
|
|
|
|
closedir($handle);
|
|
rmdir($dir);
|
|
}
|
|
}
|
|
|
|
|
|
/**
|
|
* Read a directory recursibly and return a array with the files with
|
|
* the absolute path and relative
|
|
*
|
|
* @param string $dir absoute dir to scan
|
|
* @param string $relative_path Relative path to scan, by default ''
|
|
*
|
|
* @return array The files in the dirs, empty array for empty dir of files.
|
|
*/
|
|
function filemanager_read_recursive_dir($dir, $relative_path='', $add_empty_dirs=false)
|
|
{
|
|
$return = [];
|
|
|
|
// Windows compatibility
|
|
$dir = str_replace('\\', '/', $dir);
|
|
$relative_path = str_replace('\\', '/', $relative_path);
|
|
|
|
if ($handle = opendir($dir)) {
|
|
while (false !== ($entry = readdir($handle))) {
|
|
if (($entry != '.') && ($entry != '..')) {
|
|
if (is_dir($dir.$entry)) {
|
|
$return[] = [
|
|
'relative' => $relative_path.$entry,
|
|
'absolute' => $dir.$entry,
|
|
'dir' => true,
|
|
];
|
|
|
|
$return = array_merge(
|
|
$return,
|
|
filemanager_read_recursive_dir(
|
|
$dir.$entry.'/',
|
|
$relative_path.$entry.'/',
|
|
'',
|
|
$add_empty_dirs
|
|
)
|
|
);
|
|
} else {
|
|
$return[] = [
|
|
'relative' => $relative_path.$entry,
|
|
'absolute' => $dir.$entry,
|
|
'dir' => false,
|
|
];
|
|
}
|
|
}
|
|
}
|
|
|
|
closedir($handle);
|
|
}
|
|
|
|
return $return;
|
|
}
|
|
|
|
|
|
/**
|
|
* The main function to show the directories and files.
|
|
*
|
|
* @param string $real_directory The string of dir as realpath.
|
|
* @param string $relative_directory The string of dir as relative path.
|
|
* @param string $url The url to set in the forms and some links in the explorer.
|
|
* @param string $father The directory father don't navigate bottom this.
|
|
* @param boolean $editor The flag to set the edition of text files.
|
|
* @param string $url_file The url to put in the files instead the default. By default empty string and use the url of filemanager.
|
|
* @param boolean $download_button The flag to show download button, by default false.
|
|
* @param string $umask The umask as hex values to set the new files or updload.
|
|
*/
|
|
function filemanager_file_explorer(
|
|
$real_directory,
|
|
$relative_directory,
|
|
$url,
|
|
$father='',
|
|
$editor=false,
|
|
$readOnly=false,
|
|
$url_file='',
|
|
$download_button=false,
|
|
$umask='',
|
|
$homedir_filemanager=false
|
|
) {
|
|
global $config;
|
|
|
|
// Windows compatibility
|
|
$real_directory = str_replace('\\', '/', $real_directory);
|
|
$relative_directory = str_replace('\\', '/', $relative_directory);
|
|
$father = str_replace('\\', '/', $father);
|
|
|
|
if ($homedir_filemanager === false) {
|
|
$homedir_filemanager = $config['homedir'];
|
|
}
|
|
|
|
$hack_metaconsole = '';
|
|
if (defined('METACONSOLE')) {
|
|
$hack_metaconsole = '../../';
|
|
}
|
|
|
|
?>
|
|
<script type="text/javascript">
|
|
function show_form_create_folder() {
|
|
actions_dialog('create_folder');
|
|
$("#create_folder").css("display", "block");
|
|
check_opened_dialog('create_folder');
|
|
}
|
|
|
|
function show_create_text_file() {
|
|
actions_dialog('create_text_file');
|
|
$("#create_text_file").css("display", "block");
|
|
check_opened_dialog('create_text_file');
|
|
}
|
|
|
|
function show_upload_file() {
|
|
actions_dialog('upload_file');
|
|
$("#upload_file").css("display", "block");
|
|
check_opened_dialog('upload_file');
|
|
}
|
|
|
|
function check_opened_dialog(check_opened){
|
|
if(check_opened !== 'create_folder'){
|
|
if (($("#create_folder").hasClass("ui-dialog-content") && $('#create_folder').dialog('isOpen') === true)) {
|
|
$('#create_folder').dialog('close');
|
|
}
|
|
}
|
|
|
|
if(check_opened !== 'create_text_file'){
|
|
if (($("#create_text_file").hasClass("ui-dialog-content") && $('#create_text_file').dialog('isOpen') === true)) {
|
|
$('#create_text_file').dialog('close');
|
|
}
|
|
}
|
|
if(check_opened !== 'upload_file'){
|
|
if (($("#upload_file").hasClass("ui-dialog-content") && $('#upload_file').dialog('isOpen')) === true) {
|
|
$('#upload_file').dialog('close');
|
|
}
|
|
}
|
|
}
|
|
|
|
function actions_dialog(action){
|
|
$('.'+action).addClass('file_table_modal_active');
|
|
var title_action ='';
|
|
switch (action) {
|
|
case 'create_folder':
|
|
title_action = "<?php echo __('Create a Directory'); ?>";
|
|
break;
|
|
|
|
case 'create_text_file':
|
|
title_action = "<?php echo __('Create a Text'); ?>";
|
|
break;
|
|
|
|
case 'upload_file':
|
|
title_action = "<?php echo __('Upload Files'); ?>";
|
|
break;
|
|
|
|
default:
|
|
break;
|
|
}
|
|
|
|
$('#'+action)
|
|
.dialog({
|
|
title: title_action,
|
|
resizable: true,
|
|
draggable: true,
|
|
modal: true,
|
|
overlay: {
|
|
opacity: 0.5,
|
|
background: "black"
|
|
},
|
|
width: 500,
|
|
minWidth: 500,
|
|
minHeight: 210,
|
|
maxWidth: 800,
|
|
maxHeight: 300,
|
|
close: function () {
|
|
$('.'+action).removeClass('file_table_modal_active');
|
|
}
|
|
}).show();
|
|
}
|
|
</script>
|
|
<?php
|
|
// List files
|
|
if (! is_dir($real_directory)) {
|
|
echo __('Directory %s doesn\'t exist!', $relative_directory);
|
|
return;
|
|
}
|
|
|
|
$files = filemanager_list_dir($real_directory);
|
|
|
|
if (!empty($files)) {
|
|
$table = new stdClass();
|
|
$table->width = '100%';
|
|
$table->id = 'table_filemanager';
|
|
if (!defined('METACONSOLE')) {
|
|
$table->class = 'info_table';
|
|
$table->title = '<span>'.__('Index of %s', $relative_directory).'</span>';
|
|
}
|
|
|
|
if (defined('METACONSOLE')) {
|
|
$table->class = 'databox_tactical';
|
|
$table->title = '<span>'.__('Index of %s', $relative_directory).'</span>';
|
|
}
|
|
|
|
$table->colspan = [];
|
|
$table->data = [];
|
|
$table->head = [];
|
|
$table->size = [];
|
|
|
|
$table->align[1] = 'left';
|
|
$table->align[2] = 'left';
|
|
$table->align[3] = 'left';
|
|
$table->align[4] = 'left';
|
|
|
|
$table->size[0] = '24px';
|
|
|
|
$table->head[0] = '';
|
|
$table->head[1] = __('Name');
|
|
$table->head[2] = __('Last modification');
|
|
$table->head[3] = __('Size');
|
|
$table->head[4] = __('Actions');
|
|
|
|
$prev_dir = explode('/', $relative_directory);
|
|
$prev_dir_str = '';
|
|
for ($i = 0; $i < (count($prev_dir) - 1); $i++) {
|
|
$prev_dir_str .= $prev_dir[$i];
|
|
if ($i < (count($prev_dir) - 2)) {
|
|
$prev_dir_str .= '/';
|
|
}
|
|
}
|
|
|
|
if (($prev_dir_str != '') && ($father != $relative_directory)) {
|
|
$table->data[0][0] = html_print_image('images/go_previous.png', true);
|
|
$table->data[0][1] = '<a href="'.$url.'&directory='.$prev_dir_str.'&hash2='.md5($prev_dir_str.$config['dbpass']).'">';
|
|
$table->data[0][1] .= __('Parent directory');
|
|
$table->data[0][1] .= '</a>';
|
|
|
|
$table->colspan[0][1] = 5;
|
|
}
|
|
|
|
foreach ($files as $fileinfo) {
|
|
$fileinfo['realpath'] = str_replace('\\', '/', $fileinfo['realpath']);
|
|
$relative_path = str_replace($_SERVER['DOCUMENT_ROOT'], '', $fileinfo['realpath']);
|
|
|
|
$data = [];
|
|
|
|
switch ($fileinfo['mime']) {
|
|
case MIME_DIR:
|
|
$data[0] = html_print_image('images/mimetypes/directory.png', true, ['title' => __('Directory')]);
|
|
break;
|
|
|
|
case MIME_IMAGE:
|
|
$data[0] = html_print_image('images/mimetypes/image.png', true, ['title' => __('Image')]);
|
|
break;
|
|
|
|
case MIME_ZIP:
|
|
$data[0] = html_print_image('images/mimetypes/zip.png', true, ['title' => __('Compressed file')]);
|
|
break;
|
|
|
|
case MIME_TEXT:
|
|
$data[0] = html_print_image('images/mimetypes/text.png', true, ['title' => __('Text file')]);
|
|
break;
|
|
|
|
case MIME_UNKNOWN:
|
|
if ($fileinfo['size'] == 0) {
|
|
if ((strstr($fileinfo['name'], '.txt') !== false) || (strstr($fileinfo['name'], '.conf') !== false) || (strstr($fileinfo['name'], '.sql') !== false) || (strstr($fileinfo['name'], '.pl') !== false)) {
|
|
$fileinfo['mime'] = MIME_TEXT;
|
|
$data[0] = html_print_image('images/mimetypes/text.png', true, ['title' => __('Text file')]);
|
|
} else {
|
|
// unknow
|
|
$data[0] = '';
|
|
}
|
|
} else {
|
|
// pdf
|
|
$data[0] = '';
|
|
}
|
|
break;
|
|
|
|
default:
|
|
$data[0] = html_print_image('images/mimetypes/unknown.png', true, ['title' => __('Unknown')]);
|
|
break;
|
|
}
|
|
|
|
if ($fileinfo['is_dir']) {
|
|
$data[1] = '<a href="'.$url.'&directory='.$relative_directory.'/'.$fileinfo['name'].'&hash2='.md5($relative_directory.'/'.$fileinfo['name'].$config['dbpass']).'">'.$fileinfo['name'].'</a>';
|
|
} else if (!empty($url_file)) {
|
|
// Set the custom url file
|
|
$url_file_clean = str_replace('[FILE_FULLPATH]', $fileinfo['realpath'], $url_file);
|
|
|
|
$data[1] = '<a href="'.$url_file_clean.'">'.$fileinfo['name'].'</a>';
|
|
} else {
|
|
$filename = base64_encode($relative_directory.'/'.$fileinfo['name']);
|
|
$hash = md5($filename.$config['dbpass']);
|
|
$data[1] = '<a href="'.$hack_metaconsole.'include/get_file.php?file='.urlencode($filename).'&hash='.$hash.'">'.$fileinfo['name'].'</a>';
|
|
}
|
|
|
|
// Notice that uploaded php files could be dangerous
|
|
if (pathinfo($fileinfo['realpath'], PATHINFO_EXTENSION) == 'php'
|
|
&& (is_readable($fileinfo['realpath']) || is_executable($fileinfo['realpath']))
|
|
) {
|
|
$error_message = __('This file could be executed by any user');
|
|
$error_message .= '. '.__('Make sure it can\'t perform dangerous tasks');
|
|
$data[1] = '<span class="error forced_title" data-title="'.$error_message.'" data-use_title_for_force_title="1">'.$data[1].'</span>';
|
|
}
|
|
|
|
$data[2] = ui_print_timestamp(
|
|
$fileinfo['last_modified'],
|
|
true,
|
|
['prominent' => true]
|
|
);
|
|
if ($fileinfo['is_dir']) {
|
|
$data[3] = '';
|
|
} else {
|
|
$data[3] = ui_format_filesize($fileinfo['size']);
|
|
}
|
|
|
|
// Actions buttons
|
|
// Delete button
|
|
$data[4] = '';
|
|
$data[4] .= '<span style="display: flex">';
|
|
$typefile = array_pop(explode('.', $fileinfo['name']));
|
|
if (is_writable($fileinfo['realpath'])
|
|
&& (! is_dir($fileinfo['realpath']) || count(scandir($fileinfo['realpath'])) < 3) && (!$readOnly)
|
|
) {
|
|
$data[4] .= '<form method="post" action="'.$url.'" style="">';
|
|
$data[4] .= '<input type="image" class="invert_filter" src="images/cross.png" onClick="if (!confirm(\' '.__('Are you sure?').'\')) return false;">';
|
|
$data[4] .= html_print_input_hidden('filename', $fileinfo['realpath'], true);
|
|
$data[4] .= html_print_input_hidden('hash', md5($fileinfo['realpath'].$config['dbpass']), true);
|
|
$data[4] .= html_print_input_hidden('delete_file', 1, true);
|
|
|
|
$relative_dir = str_replace($homedir_filemanager, '', str_replace('\\', '/', dirname($fileinfo['realpath'])));
|
|
|
|
if ($relative_dir[0] == '/') {
|
|
$relative_dir = substr($relative_dir, 1);
|
|
}
|
|
|
|
$hash2 = md5($relative_dir.$config['dbpass']);
|
|
|
|
$data[4] .= html_print_input_hidden('directory', $relative_dir, true);
|
|
$data[4] .= html_print_input_hidden('hash2', $hash2, true);
|
|
$data[4] .= '</form>';
|
|
|
|
if (($editor) && (!$readOnly)) {
|
|
if (($typefile != 'bin') && ($typefile != 'pdf') && ($typefile != 'png') && ($typefile != 'jpg')
|
|
&& ($typefile != 'iso') && ($typefile != 'docx') && ($typefile != 'doc') && ($fileinfo['mime'] != MIME_DIR)
|
|
) {
|
|
$hash = md5($fileinfo['realpath'].$config['dbpass']);
|
|
$data[4] .= "<a style='vertical-align: top;' href='$url&edit_file=1&hash=".$hash.'&location_file='.$fileinfo['realpath']."' style='float: left;'>".html_print_image('images/edit.png', true, ['style' => 'margin-top: 2px;', 'title' => __('Edit file')]).'</a>';
|
|
}
|
|
}
|
|
}
|
|
|
|
if ((!$fileinfo['is_dir']) && ($download_button)) {
|
|
$filename = base64_encode($fileinfo['name']);
|
|
$hash = md5($filename.$config['dbpass']);
|
|
$data[4] .= '<a href="include/get_file.php?file='.urlencode($filename).'&hash='.$hash.'" style="vertical-align: 25%;">';
|
|
$data[4] .= html_print_image('images/file.png', true);
|
|
$data[4] .= '</a>';
|
|
}
|
|
|
|
$data[4] .= '</span>';
|
|
|
|
array_push($table->data, $data);
|
|
}
|
|
} else {
|
|
ui_print_info_message(
|
|
[
|
|
'no_close' => true,
|
|
'message' => __('No files or directories to show.'),
|
|
]
|
|
);
|
|
}
|
|
|
|
if (!$readOnly) {
|
|
if (is_writable($real_directory)) {
|
|
// The buttons to make actions
|
|
$tabs_dialog = '<ul id="file_table_modal">
|
|
<li class="create_folder">
|
|
<a href="javascript: show_form_create_folder();">'.html_print_image(
|
|
'images/create_directory.png',
|
|
true,
|
|
[
|
|
'title' => __('Create directory'),
|
|
'class' => 'invert_filter',
|
|
]
|
|
).'<span>'.__('Create a Directory').'</span>
|
|
</a>
|
|
</li>
|
|
<li class="create_text_file">
|
|
<a href="javascript: show_create_text_file();">'.html_print_image(
|
|
'images/create_file.png',
|
|
true,
|
|
[
|
|
'title' => __('Create a Text'),
|
|
'class' => 'invert_filter',
|
|
]
|
|
).'<span>'.__('Create a Text').'</span>
|
|
</a>
|
|
</li>
|
|
<li class="upload_file">
|
|
<a href="javascript: show_upload_file();">'.html_print_image(
|
|
'images/upload_file.png',
|
|
true,
|
|
[
|
|
'title' => __('Upload Files'),
|
|
'class' => 'invert_filter',
|
|
]
|
|
).'<span>'.__('Upload Files').'</span>
|
|
</a>
|
|
</li></ul>';
|
|
|
|
echo '<div id="create_folder" class="invisible">'.$tabs_dialog.'
|
|
<form method="post" action="'.$url.'">'.html_print_input_text('dirname', '', '', 30, 255, true).html_print_submit_button(__('Create'), 'crt', false, 'class="sub next"', true).html_print_input_hidden('directory', $relative_directory, true).html_print_input_hidden('create_dir', 1, true).html_print_input_hidden('hash', md5($relative_directory.$config['dbpass']), true).html_print_input_hidden('hash2', md5($relative_directory.$config['dbpass']), true).'</form></div>';
|
|
|
|
echo '<div id="upload_file" class="invisible"> '.$tabs_dialog.'
|
|
<form method="post" action="'.$url.'" enctype="multipart/form-data">'.ui_print_help_tip(__('The zip upload in this dir, easy to upload multiple files.'), true).html_print_input_file('file', true, false).html_print_input_hidden('umask', $umask, true).html_print_checkbox('decompress', 1, false, true).__('Decompress').html_print_submit_button(__('Go'), 'go', false, 'class="sub next"', true).html_print_input_hidden('real_directory', $real_directory, true).html_print_input_hidden('directory', $relative_directory, true).html_print_input_hidden('hash', md5($real_directory.$relative_directory.$config['dbpass']), true).html_print_input_hidden('hash2', md5($relative_directory.$config['dbpass']), true).html_print_input_hidden('upload_file_or_zip', 1, true).'</form></div>';
|
|
|
|
echo ' <div id="create_text_file" class="invisible">'.$tabs_dialog.'
|
|
<form method="post" action="'.$url.'">'.html_print_input_text('name_file', '', '', 30, 50, true).html_print_submit_button(__('Create'), 'create', false, 'class="sub next"', true).html_print_input_hidden('real_directory', $real_directory, true).html_print_input_hidden('directory', $relative_directory, true).html_print_input_hidden('hash', md5($real_directory.$relative_directory.$config['dbpass']), true).html_print_input_hidden('umask', $umask, true).html_print_input_hidden('create_text_file', 1, true).'</form></div>';
|
|
|
|
echo "<div style='width: ".$table->width.";' class='file_table_buttons'>";
|
|
|
|
echo "<a href='javascript: show_form_create_folder();'>";
|
|
echo html_print_image(
|
|
'images/create_directory.png',
|
|
true,
|
|
[
|
|
'title' => __('Create directory'),
|
|
'class' => 'invert_filter',
|
|
]
|
|
);
|
|
echo '</a>';
|
|
|
|
echo "<a href='javascript: show_create_text_file();'>";
|
|
echo html_print_image(
|
|
'images/create_file.png',
|
|
true,
|
|
[
|
|
'title' => __('Create text'),
|
|
'class' => 'invert_filter',
|
|
]
|
|
);
|
|
echo '</a>';
|
|
|
|
echo "<a href='javascript: show_upload_file();'>";
|
|
echo html_print_image(
|
|
'images/upload_file.png',
|
|
true,
|
|
[
|
|
'title' => __('Upload file/s'),
|
|
'class' => 'invert_filter',
|
|
]
|
|
);
|
|
echo '</a>';
|
|
|
|
echo '</div>';
|
|
} else {
|
|
echo "<div style='text-align: right; width: ".$table->width."; color:#AC4444; margin-bottom:10px;'>";
|
|
echo "<image src='images/info.png' />".__('The directory is read-only');
|
|
echo '</div>';
|
|
}
|
|
}
|
|
|
|
html_print_table($table);
|
|
}
|
|
|
|
|
|
/**
|
|
* Check if a directory is writable.
|
|
*
|
|
* @param string Directory path to check.
|
|
* @param bool If set, it will try to make the directory writeable if it's not.
|
|
*
|
|
* @param bool Wheter the directory is writeable or not.
|
|
*/
|
|
function filemanager_get_file_info($filepath)
|
|
{
|
|
global $config;
|
|
|
|
$realpath = realpath($filepath);
|
|
$filepath = str_replace('\\', '/', $filepath);
|
|
// Windows compatibility
|
|
$info = [
|
|
'mime' => MIME_UNKNOWN,
|
|
'mime_extend' => mime_content_type($filepath),
|
|
'link' => 0,
|
|
'is_dir' => false,
|
|
'name' => basename($realpath),
|
|
'url' => str_replace('//', '/', $config['homeurl'].str_ireplace($config['homedir'], '', $realpath)),
|
|
'realpath' => $realpath,
|
|
'size' => filesize($realpath),
|
|
'last_modified' => filemtime($realpath),
|
|
];
|
|
|
|
$zip_mimes = [
|
|
'application/zip',
|
|
'application/x-rar-compressed',
|
|
'application/x-gzip',
|
|
'application/x-bzip2',
|
|
];
|
|
if (is_dir($filepath)) {
|
|
$info['mime'] = MIME_DIR;
|
|
$info['is_dir'] = true;
|
|
$info['size'] = 0;
|
|
} else if (strpos($info['mime_extend'], 'image') !== false) {
|
|
$info['mime'] = MIME_IMAGE;
|
|
} else if (in_array($info['mime_extend'], $zip_mimes)) {
|
|
$info['mime'] = MIME_ZIP;
|
|
} else if (strpos($info['mime_extend'], 'text') !== false) {
|
|
$info['mime'] = MIME_TEXT;
|
|
}
|
|
|
|
return $info;
|
|
}
|
|
|
|
|
|
/**
|
|
* Check if a directory is writable.
|
|
*
|
|
* @param string Directory path to check.
|
|
* @param bool If set, it will try to make the directory writeable if it's not.
|
|
*
|
|
* @param bool Wheter the directory is writeable or not.
|
|
*/
|
|
function filemanager_list_dir($dirpath)
|
|
{
|
|
$dirpath = str_replace('\\', '/', $dirpath);
|
|
// Windows compatibility
|
|
$files = [];
|
|
$dirs = [];
|
|
$dir = opendir($dirpath);
|
|
while ($file = @readdir($dir)) {
|
|
// Ignore hidden files
|
|
if ($file[0] == '.') {
|
|
continue;
|
|
}
|
|
|
|
$info = filemanager_get_file_info($dirpath.'/'.$file);
|
|
if ($info['is_dir']) {
|
|
$dirs[$file] = $info;
|
|
} else {
|
|
$files[$file] = $info;
|
|
}
|
|
}
|
|
|
|
ksort($files);
|
|
ksort($dirs);
|
|
closedir($dir);
|
|
|
|
return array_merge($dirs, $files);
|
|
}
|