gTxt('private'),
0 => gTxt('public')
);
global $file_statuses;
$file_statuses = array(
2 => gTxt('hidden'),
3 => gTxt('pending'),
4 => gTxt('live'),
);
if ($event == 'file') {
require_privs('file');
if(!$step or !in_array($step, array('file_change_max_size','file_change_pageby','file_db_add','file_multi_edit','file_edit','file_insert','file_list','file_replace','file_save','file_reset_count','file_create'))){
file_list();
} else $step();
}
// -------------------------------------------------------------
function file_list($message = '')
{
global $txpcfg, $extensions, $file_base_path, $file_statuses, $file_list_pageby;
pagetop(gTxt('file'), $message);
extract($txpcfg);
extract(gpsa(array('page', 'sort', 'dir', 'crit', 'search_method')));
if (!is_dir($file_base_path) or !is_writeable($file_base_path))
{
echo graf(
gTxt('file_dir_not_writeable', array('{filedir}' => $file_base_path))
, ' id="warning"');
}
else
{
$existing_files = get_filenames();
if (count($existing_files) > 0)
{
echo form(
eInput('file').
sInput('file_create').
graf(gTxt('existing_file').sp.selectInput('filename', $existing_files, '', 1).sp.
fInput('submit', '', gTxt('Create'), 'smallerbox'))
, 'text-align: center;');
}
echo file_upload_form(gTxt('upload_file'), 'upload', 'file_insert');
}
$dir = ($dir == 'desc') ? 'desc' : 'asc';
switch ($sort)
{
case 'id':
$sort_sql = 'id '.$dir;
break;
case 'description':
$sort_sql = 'description '.$dir.', filename desc';
break;
case 'category':
$sort_sql = 'category '.$dir.', filename desc';
break;
case 'downloads':
$sort_sql = 'downloads '.$dir.', filename desc';
break;
default:
$sort = 'filename';
$sort_sql = 'filename '.$dir;
break;
}
$switch_dir = ($dir == 'desc') ? 'asc' : 'desc';
$criteria = 1;
if ($search_method and $crit)
{
$crit_escaped = doSlash($crit);
$critsql = array(
'id' => "ID in ('" .join("','", do_list($crit_escaped)). "')",
'filename' => "filename like '%$crit_escaped%'",
'description' => "description like '%$crit_escaped%'",
'category' => "category like '%$crit_escaped%'"
);
if (array_key_exists($search_method, $critsql))
{
$criteria = $critsql[$search_method];
$limit = 500;
}
else
{
$search_method = '';
$crit = '';
}
}
else
{
$search_method = '';
$crit = '';
}
$total = safe_count('txp_file', "$criteria");
if ($total < 1)
{
if ($criteria != 1)
{
echo n.file_search_form($crit, $search_method).
n.graf(gTxt('no_results_found'), ' class="indicator"');
}
else
{
echo n.graf(gTxt('no_files_recorded'), ' class="indicator"');
}
return;
}
$limit = max($file_list_pageby, 15);
list($page, $offset, $numPages) = pager($total, $limit, $page);
echo file_search_form($crit, $search_method);
$rs = safe_rows_start('*', 'txp_file', "$criteria order by $sort_sql limit $offset, $limit");
if ($rs)
{
echo ''.
nav_form('file', $page, $numPages, $sort, $dir, $crit, $search_method).
pageby_form('file', $file_list_pageby);
}
}
// -------------------------------------------------------------
function file_search_form($crit, $method)
{
$methods = array(
'id' => gTxt('ID'),
'filename' => gTxt('file_name'),
'description' => gTxt('description'),
'category' => gTxt('file_category')
);
return search_form('file', 'file_list', $crit, $methods, $method, 'filename');
}
// -------------------------------------------------------------
function file_multiedit_form($page, $sort, $dir, $crit, $search_method)
{
$methods = array(
'changecategory' => gTxt('changecategory'),
'delete' => gTxt('delete'),
);
return event_multiedit_form('file', $methods, $page, $sort, $dir, $crit, $search_method);
}
// -------------------------------------------------------------
function file_multi_edit()
{
$selected = ps('selected');
if (!$selected or !is_array($selected))
{
return file_list();
}
$selected = array_map('assert_int', $selected);
$method = ps('edit_method');
$changed = array();
if ($method == 'delete')
{
return file_delete($selected);
}
if ($method == 'changecategory')
{
foreach ($selected as $id)
{
if (safe_update('txp_file', "category = '".doSlash(ps('category'))."'", "id = $id"))
{
$changed[] = $id;
}
}
}
if ($changed)
{
update_lastmod();
return file_list(gTxt('file_updated', array('{name}' => join(', ', $changed))));
}
return file_list();
}
// -------------------------------------------------------------
function file_edit($message = '', $id = '')
{
global $txpcfg, $file_base_path, $levels, $file_statuses;
pagetop(gTxt('file'), $message);
extract(gpsa(array('name', 'category', 'permissions', 'description', 'sort', 'dir', 'page', 'crit', 'search_method', 'publish_now')));
if (!$id)
{
$id = gps('id');
}
$id = assert_int($id);
$categories = getTree('root', 'file');
$rs = safe_row('*, unix_timestamp(created) as created, unix_timestamp(modified) as modified', 'txp_file', "id = $id");
if ($rs)
{
extract($rs);
if ($permissions=='') $permissions='-1';
$file_exists = file_exists(build_file_path($file_base_path,$filename));
$replace = ($file_exists) ? tr(td(file_upload_form(gTxt('replace_file'),'upload','file_replace',$id))) : '';
$existing_files = get_filenames();
$condition = '';
$condition .= ($file_exists)?gTxt('file_status_ok'):gTxt('file_status_missing');
$condition .= '';
$downloadlink = ($file_exists)?make_download_link($id, htmlspecialchars($filename),$filename):htmlspecialchars($filename);
$created =
n.graf(checkbox('publish_now', '1', $publish_now, '', 'publish_now').'').
n.graf(gTxt('or_publish_at').sp.popHelp('timestamp')).
n.graf(gtxt('date').sp.
tsi('year', '%Y', $rs['created']).' / '.
tsi('month', '%m', $rs['created']).' / '.
tsi('day', '%d', $rs['created'])
).
n.graf(gTxt('time').sp.
tsi('hour', '%H', $rs['created']).' : '.
tsi('minute', '%M', $rs['created']).' : '.
tsi('second', '%S', $rs['created'])
);
$form = '';
if ($file_exists) {
$form = tr(
td(
form(
graf(gTxt('file_category').br.treeSelectInput('category',
$categories,$category)) .
// graf(gTxt('permissions').br.selectInput('perms',$levels,$permissions)).
graf(gTxt('description').br.text_area('description','100','400',$description)) .
fieldset(radio_list('status', $file_statuses, $status, 4), gTxt('status'), 'file-status').
fieldset($created, gTxt('timestamp'), 'file-created').
graf(fInput('submit','',gTxt('save'))) .
eInput('file') .
sInput('file_save').
hInput('filename', $filename).
hInput('id', $id) .
hInput('sort', $sort).
hInput('dir', $dir).
hInput('page', $page).
hInput('crit', $crit).
hInput('search_method', $search_method)
)
)
);
} else {
$form = tr(
tda(
hed(gTxt('file_relink'),3).
file_upload_form(gTxt('upload_file'),'upload','file_replace',$id).
form(
graf(gTxt('existing_file').' '.
selectInput('filename',$existing_files,"",1).
fInput('submit','',gTxt('Save'),'smallerbox').
eInput('file').
sInput('file_save').
hInput('id',$id).
hInput('category',$category).
hInput('perms',($permissions=='-1') ? '' : $permissions).
hInput('description',$description).
hInput('status',$status).
hInput('sort', $sort).
hInput('dir', $dir).
hInput('page', $page).
hInput('crit', $crit).
hInput('search_method', $search_method)
)
),
' colspan="4" style="border:0"'
)
);
}
echo startTable('list'),
tr(
td(
graf(gTxt('file_status').br.$condition) .
graf(gTxt('file_name').br.$downloadlink) .
graf(gTxt('file_download_count').br.$downloads)
)
),
$form,
$replace,
endTable();
}
}
// -------------------------------------------------------------
function file_db_add($filename,$category,$permissions,$description,$size)
{
$rs = safe_insert("txp_file",
"filename = '$filename',
category = '$category',
permissions = '$permissions',
description = '$description',
size = '$size',
created = now(),
modified = now()
");
if ($rs) {
$GLOBALS['ID'] = mysql_insert_id( );
return $GLOBALS['ID'];
}
return false;
}
// -------------------------------------------------------------
function file_create()
{
global $txpcfg,$extensions,$txp_user,$file_base_path;
extract($txpcfg);
extract(doSlash(gpsa(array('filename','category','permissions','description'))));
$size = filesize(build_file_path($file_base_path,$filename));
$id = file_db_add($filename,$category,$permissions,$description, $size);
if($id === false){
file_list(gTxt('file_upload_failed').' (db_add)');
} else {
$newpath = build_file_path($file_base_path,trim($filename));
if (is_file($newpath)) {
file_set_perm($newpath);
file_list(gTxt('linked_to_file').' '.$filename);
} else {
file_list(gTxt('file_not_found').' '.$filename);
}
}
}
// -------------------------------------------------------------
function file_insert()
{
global $txpcfg,$extensions,$txp_user,$file_base_path,$file_max_upload_size;
extract($txpcfg);
extract(doSlash(gpsa(array('category','permissions','description'))));
$name = file_get_uploaded_name();
$file = file_get_uploaded();
if ($file === false) {
// could not get uploaded file
file_list(gTxt('file_upload_failed') ." $name - ".upload_get_errormsg($_FILES['thefile']['error']));
return;
}
$size = filesize($file);
if ($file_max_upload_size < $size) {
unlink($file);
file_list(gTxt('file_upload_failed') ." $name - ".upload_get_errormsg(UPLOAD_ERR_FORM_SIZE));
return;
}
// Remove control characters and " * \ : < > ? / |
// Remove duplicate dots and any leading or trailing dots/spaces
$newname = preg_replace('/[\x00-\x1f\x22\x2a\x2f\x3a\x3c\x3e\x3f\x5c\x7c\x7f]+/', '', $name);
$newname = preg_replace('/[.]{2,}/', '.', trim($newname, '. '));
$newpath = build_file_path($file_base_path, $newname);
if (!is_file($newname)) {
$id = file_db_add($newname,$category,$permissions,$description,$size);
if(!$id){
file_list(gTxt('file_upload_failed').' (db_add)');
} else {
$id = assert_int($id);
if(!shift_uploaded_file($file, $newpath)) {
safe_delete("txp_file","id = $id");
safe_alter("txp_file", "auto_increment=$id");
if ( isset( $GLOBALS['ID'])) unset( $GLOBALS['ID']);
file_list($newpath.' '.gTxt('upload_dir_perms'));
// clean up file
} else {
file_set_perm($newpath);
$message = gTxt('file_uploaded', array('{name}' => htmlspecialchars($newname)));
file_edit($message, $id);
}
}
}
else
{
$message = gTxt('file_already_exists', array('{name}' => $newname));
file_list($message);
}
}
// -------------------------------------------------------------
function file_replace()
{
global $txpcfg,$extensions,$txp_user,$file_base_path;
extract($txpcfg);
$id = assert_int(gps('id'));
$rs = safe_row('filename','txp_file',"id = $id");
if (!$rs) {
file_list(messenger(gTxt('invalid_id'),$id,''));
return;
}
extract($rs);
$file = file_get_uploaded();
$name = file_get_uploaded_name();
if ($file === false) {
// could not get uploaded file
file_list(gTxt('file_upload_failed') ." $name ".upload_get_errormsg($_FILES['thefile']['error']));
return;
}
if (!$filename) {
file_list(gTxt('invalid_filename'));
} else {
$newpath = build_file_path($file_base_path,$filename);
if (is_file($newpath)) {
rename($newpath,$newpath.'.tmp');
}
if(!shift_uploaded_file($file, $newpath)) {
safe_delete("txp_file","id = $id");
file_list($newpath.sp.gTxt('upload_dir_perms'));
// rename tmp back
rename($newpath.'.tmp',$newpath);
// remove tmp upload
unlink($file);
} else {
file_set_perm($newpath);
if ($size = filesize($newpath))
safe_update('txp_file', 'size = '.$size.', modified = now()', 'id = '.$id);
$message = gTxt('file_uploaded', array('{name}' => htmlspecialchars($name)));
file_edit($message, $id);
// clean up old
if (is_file($newpath.'.tmp'))
unlink($newpath.'.tmp');
}
}
}
// -------------------------------------------------------------
function file_reset_count()
{
extract(doSlash(gpsa(array('id','filename','category','description'))));
if ($id) {
$id = assert_int($id);
if (safe_update('txp_file','downloads = 0',"id = $id")) {
file_edit(gTxt('reset_file_count_success'),$id);
}
} else {
file_list(gTxt('reset_file_count_failure'));
}
}
// -------------------------------------------------------------
function file_save()
{
global $file_base_path;
extract(doSlash(gpsa(array('id', 'filename', 'category', 'description', 'status', 'publish_now', 'year', 'month', 'day', 'hour', 'minute', 'second'))));
$id = assert_int($id);
$permissions = gps('perms');
if (is_array($permissions)) {
asort($permissions);
$permissions = implode(",",$permissions);
}
$perms = doSlash($permissions);
$old_filename = fetch('filename','txp_file','id',$id);
if ($old_filename != false && strcmp($old_filename, $filename) != 0)
{
$old_path = build_file_path($file_base_path,$old_filename);
$new_path = build_file_path($file_base_path,$filename);
if (file_exists($old_path) && shift_uploaded_file($old_path, $new_path) === false)
{
$message = gTxt('file_cannot_rename', array('{name}' => $filename));
return file_list($message);
}
else
{
file_set_perm($new_path);
}
}
$created_ts = @safe_strtotime($year.'-'.$month.'-'.$day.' '.$hour.':'.$minute.':'.$second);
if ($publish_now)
$created = 'now()';
elseif ($created_ts > 0)
$created = "from_unixtime('".$created_ts."')";
else
$created = '';
$size = filesize(build_file_path($file_base_path,$filename));
$rs = safe_update('txp_file', "
filename = '$filename',
category = '$category',
permissions = '$perms',
description = '$description',
status = '$status',
size = '$size',
modified = now()"
.($created ? ", created = $created" : '')
, "id = $id");
if (!$rs)
{
// update failed, rollback name
if (shift_uploaded_file($new_path, $old_path) === false)
{
$message = gTxt('file_unsynchronized', array('{name}' => $filename));
return file_list($message);
}
else
{
$message = gTxt('file_not_updated', array('{name}' => $filename));
return file_list($message);
}
}
$message = gTxt('file_updated', array('{name}' => $filename));
file_list($message);
}
// -------------------------------------------------------------
function file_delete($ids = array())
{
global $file_base_path;
$ids = $ids ? array_map('assert_int', $ids) : array(assert_int(ps('id')));
$fail = array();
$rs = safe_rows_start('id, filename', 'txp_file', 'id IN ('.join(',', $ids).')');
if ($rs)
{
while ($a = nextRow($rs))
{
extract($a);
$filepath = build_file_path($file_base_path, $filename);
$rsd = safe_delete('txp_file', "id = $id");
$ul = false;
if ($rsd && is_file($filepath))
{
$ul = unlink($filepath);
}
if (!$rsd or !$ul)
{
$fail[] = $id;
}
}
if ($fail)
{
file_list(messenger(gTxt('file_delete_failed'), join(', ', $fail), ''));
}
else
{
file_list(gTxt('file_deleted', array('{name}' => join(', ', $ids))));
}
}
else
{
file_list(messenger(gTxt('file_not_found'), join(', ', $ids), ''));
}
}
// -------------------------------------------------------------
function file_get_uploaded_name()
{
return $_FILES['thefile']['name'];
}
// -------------------------------------------------------------
function file_get_uploaded()
{
return get_uploaded_file($_FILES['thefile']['tmp_name']);
}
// -------------------------------------------------------------
function file_set_perm($file)
{
return @chmod($file,0644);
}
// -------------------------------------------------------------
function file_upload_form($label,$pophelp,$step,$id='')
{
global $file_max_upload_size;
if (!$file_max_upload_size || intval($file_max_upload_size)==0) $file_max_upload_size = 2*(1024*1024);
$max_file_size = (intval($file_max_upload_size) == 0) ? '': intval($file_max_upload_size);
return upload_form($label, $pophelp, $step, 'file', $id, $max_file_size);
}
// -------------------------------------------------------------
function file_change_pageby()
{
event_change_pageby('file');
file_list();
}
// -------------------------------------------------------------
function file_change_max_size()
{
// DEPRECATED function; removed old code
file_list();
}
// -------------------------------------------------------------
function make_download_link($id, $label = '', $filename = '')
{
$label = ($label) ? $label : gTxt('download');
$url = filedownloadurl($id, $filename);
return ''.$label.'';
}
// -------------------------------------------------------------
function get_filenames()
{
global $file_base_path;
$dirlist = array();
if (!is_dir($file_base_path))
return $dirlist;
if (chdir($file_base_path)) {
if (function_exists('glob'))
$g_array = glob("*.*");
else {
$dh = opendir($file_base_path);
$g_array = array();
while (false !== ($filename = readdir($dh))) {
$g_array[] = $filename;
}
closedir($dh);
}
if ($g_array) {
foreach ($g_array as $filename) {
if (is_file($filename)) {
$dirlist[$filename] = $filename;
}
}
}
}
$files = array();
$rs = safe_rows("filename", "txp_file", "1=1");
if ($rs) {
foreach ($rs as $a) {
$files[$a['filename']] = $a['filename'];
}
}
return array_diff($dirlist,$files);
}
?>