first commit
This commit is contained in:
52
stud/FCKeditor/editor/filemanager/upload/php/config.php
Normal file
52
stud/FCKeditor/editor/filemanager/upload/php/config.php
Normal file
@ -0,0 +1,52 @@
|
||||
<?php
|
||||
/*
|
||||
* FCKeditor - The text editor for internet
|
||||
* Copyright (C) 2003-2006 Frederico Caldeira Knabben
|
||||
*
|
||||
* Licensed under the terms of the GNU Lesser General Public License:
|
||||
* http://www.opensource.org/licenses/lgpl-license.php
|
||||
*
|
||||
* For further information visit:
|
||||
* http://www.fckeditor.net/
|
||||
*
|
||||
* "Support Open Source software. What about a donation today?"
|
||||
*
|
||||
* File Name: config.php
|
||||
* Configuration file for the PHP File Uploader.
|
||||
*
|
||||
* File Authors:
|
||||
* Frederico Caldeira Knabben (fredck@fckeditor.net)
|
||||
*/
|
||||
|
||||
global $Config ;
|
||||
|
||||
// SECURITY: You must explicitelly enable this "uploader".
|
||||
$Config['Enabled'] = false ;
|
||||
|
||||
// Set if the file type must be considere in the target path.
|
||||
// Ex: /UserFiles/Image/ or /UserFiles/File/
|
||||
$Config['UseFileType'] = false ;
|
||||
|
||||
// Path to uploaded files relative to the document root.
|
||||
$Config['UserFilesPath'] = '/UserFiles/' ;
|
||||
|
||||
// Fill the following value it you prefer to specify the absolute path for the
|
||||
// user files directory. Usefull if you are using a virtual directory, symbolic
|
||||
// link or alias. Examples: 'C:\\MySite\\UserFiles\\' or '/root/mysite/UserFiles/'.
|
||||
// Attention: The above 'UserFilesPath' must point to the same directory.
|
||||
$Config['UserFilesAbsolutePath'] = '' ;
|
||||
|
||||
// Due to security issues with Apache modules, it is reccomended to leave the
|
||||
// following setting enabled.
|
||||
$Config['ForceSingleExtension'] = true ;
|
||||
|
||||
$Config['AllowedExtensions']['File'] = array() ;
|
||||
$Config['DeniedExtensions']['File'] = array('php','php2','php3','php4','php5','phtml','pwml','inc','asp','aspx','ascx','jsp','cfm','cfc','pl','bat','exe','com','dll','vbs','js','reg','cgi') ;
|
||||
|
||||
$Config['AllowedExtensions']['Image'] = array('jpg','gif','jpeg','png') ;
|
||||
$Config['DeniedExtensions']['Image'] = array() ;
|
||||
|
||||
$Config['AllowedExtensions']['Flash'] = array('swf','fla') ;
|
||||
$Config['DeniedExtensions']['Flash'] = array() ;
|
||||
|
||||
?>
|
120
stud/FCKeditor/editor/filemanager/upload/php/upload.php
Normal file
120
stud/FCKeditor/editor/filemanager/upload/php/upload.php
Normal file
@ -0,0 +1,120 @@
|
||||
<?php
|
||||
/*
|
||||
* FCKeditor - The text editor for internet
|
||||
* Copyright (C) 2003-2006 Frederico Caldeira Knabben
|
||||
*
|
||||
* Licensed under the terms of the GNU Lesser General Public License:
|
||||
* http://www.opensource.org/licenses/lgpl-license.php
|
||||
*
|
||||
* For further information visit:
|
||||
* http://www.fckeditor.net/
|
||||
*
|
||||
* "Support Open Source software. What about a donation today?"
|
||||
*
|
||||
* File Name: upload.php
|
||||
* This is the "File Uploader" for PHP.
|
||||
*
|
||||
* File Authors:
|
||||
* Frederico Caldeira Knabben (fredck@fckeditor.net)
|
||||
*/
|
||||
|
||||
require('config.php') ;
|
||||
require('util.php') ;
|
||||
|
||||
// This is the function that sends the results of the uploading process.
|
||||
function SendResults( $errorNumber, $fileUrl = '', $fileName = '', $customMsg = '' )
|
||||
{
|
||||
echo '<script type="text/javascript">' ;
|
||||
echo 'window.parent.OnUploadCompleted(' . $errorNumber . ',"' . str_replace( '"', '\\"', $fileUrl ) . '","' . str_replace( '"', '\\"', $fileName ) . '", "' . str_replace( '"', '\\"', $customMsg ) . '") ;' ;
|
||||
echo '</script>' ;
|
||||
exit ;
|
||||
}
|
||||
|
||||
// Check if this uploader has been enabled.
|
||||
if ( !$Config['Enabled'] )
|
||||
SendResults( '1', '', '', 'This file uploader is disabled. Please check the "editor/filemanager/upload/php/config.php" file' ) ;
|
||||
|
||||
// Check if the file has been correctly uploaded.
|
||||
if ( !isset( $_FILES['NewFile'] ) || is_null( $_FILES['NewFile']['tmp_name'] ) || $_FILES['NewFile']['name'] == '' )
|
||||
SendResults( '202' ) ;
|
||||
|
||||
// Get the posted file.
|
||||
$oFile = $_FILES['NewFile'] ;
|
||||
|
||||
// Get the uploaded file name extension.
|
||||
$sFileName = $oFile['name'] ;
|
||||
|
||||
// Replace dots in the name with underscores (only one dot can be there... security issue).
|
||||
if ( $Config['ForceSingleExtension'] )
|
||||
$sFileName = preg_replace( '/\\.(?![^.]*$)/', '_', $sFileName ) ;
|
||||
|
||||
$sOriginalFileName = $sFileName ;
|
||||
|
||||
// Get the extension.
|
||||
$sExtension = substr( $sFileName, ( strrpos($sFileName, '.') + 1 ) ) ;
|
||||
$sExtension = strtolower( $sExtension ) ;
|
||||
|
||||
// The the file type (from the QueryString, by default 'File').
|
||||
$sType = isset( $_GET['Type'] ) ? $_GET['Type'] : 'File' ;
|
||||
|
||||
// Check if it is an allowed type.
|
||||
if ( !in_array( $sType, array('File','Image','Flash','Media') ) )
|
||||
SendResults( 1, '', '', 'Invalid type specified' ) ;
|
||||
|
||||
// Get the allowed and denied extensions arrays.
|
||||
$arAllowed = $Config['AllowedExtensions'][$sType] ;
|
||||
$arDenied = $Config['DeniedExtensions'][$sType] ;
|
||||
|
||||
// Check if it is an allowed extension.
|
||||
if ( ( count($arAllowed) > 0 && !in_array( $sExtension, $arAllowed ) ) || ( count($arDenied) > 0 && in_array( $sExtension, $arDenied ) ) )
|
||||
SendResults( '202' ) ;
|
||||
|
||||
$sErrorNumber = '0' ;
|
||||
$sFileUrl = '' ;
|
||||
|
||||
// Initializes the counter used to rename the file, if another one with the same name already exists.
|
||||
$iCounter = 0 ;
|
||||
|
||||
// Get the target directory.
|
||||
if ( isset( $Config['UserFilesAbsolutePath'] ) && strlen( $Config['UserFilesAbsolutePath'] ) > 0 )
|
||||
$sServerDir = $Config['UserFilesAbsolutePath'] ;
|
||||
else
|
||||
$sServerDir = GetRootPath() . $Config["UserFilesPath"] ;
|
||||
|
||||
if ( $Config['UseFileType'] )
|
||||
$sServerDir .= $sType . '/' ;
|
||||
|
||||
while ( true )
|
||||
{
|
||||
// Compose the file path.
|
||||
$sFilePath = $sServerDir . $sFileName ;
|
||||
|
||||
// If a file with that name already exists.
|
||||
if ( is_file( $sFilePath ) )
|
||||
{
|
||||
$iCounter++ ;
|
||||
$sFileName = RemoveExtension( $sOriginalFileName ) . '(' . $iCounter . ').' . $sExtension ;
|
||||
$sErrorNumber = '201' ;
|
||||
}
|
||||
else
|
||||
{
|
||||
move_uploaded_file( $oFile['tmp_name'], $sFilePath ) ;
|
||||
|
||||
if ( is_file( $sFilePath ) )
|
||||
{
|
||||
$oldumask = umask(0) ;
|
||||
chmod( $sFilePath, 0777 ) ;
|
||||
umask( $oldumask ) ;
|
||||
}
|
||||
|
||||
if ( $Config['UseFileType'] )
|
||||
$sFileUrl = $Config["UserFilesPath"] . $sType . '/' . $sFileName ;
|
||||
else
|
||||
$sFileUrl = $Config["UserFilesPath"] . $sFileName ;
|
||||
|
||||
break ;
|
||||
}
|
||||
}
|
||||
|
||||
SendResults( $sErrorNumber, $sFileUrl, $sFileName ) ;
|
||||
?>
|
36
stud/FCKeditor/editor/filemanager/upload/php/util.php
Normal file
36
stud/FCKeditor/editor/filemanager/upload/php/util.php
Normal file
@ -0,0 +1,36 @@
|
||||
<?php
|
||||
/*
|
||||
* FCKeditor - The text editor for internet
|
||||
* Copyright (C) 2003-2006 Frederico Caldeira Knabben
|
||||
*
|
||||
* Licensed under the terms of the GNU Lesser General Public License:
|
||||
* http://www.opensource.org/licenses/lgpl-license.php
|
||||
*
|
||||
* For further information visit:
|
||||
* http://www.fckeditor.net/
|
||||
*
|
||||
* "Support Open Source software. What about a donation today?"
|
||||
*
|
||||
* File Name: util.php
|
||||
* This is the File Manager Connector for ASP.
|
||||
*
|
||||
* File Authors:
|
||||
* Frederico Caldeira Knabben (fredck@fckeditor.net)
|
||||
*/
|
||||
|
||||
function RemoveExtension( $fileName )
|
||||
{
|
||||
return substr( $fileName, 0, strrpos( $fileName, '.' ) ) ;
|
||||
}
|
||||
|
||||
function GetRootPath()
|
||||
{
|
||||
$sRealPath = realpath( './' ) ;
|
||||
|
||||
$sSelfPath = $_SERVER['PHP_SELF'] ;
|
||||
$sSelfPath = substr( $sSelfPath, 0, strrpos( $sSelfPath, '/' ) ) ;
|
||||
|
||||
return substr( $sRealPath, 0, strlen( $sRealPath ) - strlen( $sSelfPath ) ) ;
|
||||
}
|
||||
|
||||
?>
|
Reference in New Issue
Block a user