Subversion Repositories svnkaklik

<?php

/*************************************************************

*  TorrentFlux - PHP Torrent Manager

*  www.torrentflux.com

**************************************************************/

/*

    This file is part of TorrentFlux.

    TorrentFlux is free software; you can redistribute it and/or modify

    it under the terms of the GNU General Public License as published by

    the Free Software Foundation; either version 2 of the License, or

    (at your option) any later version.

    TorrentFlux is distributed in the hope that it will be useful,

    but WITHOUT ANY WARRANTY; without even the implied warranty of

    MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the

    GNU General Public License for more details.

    You should have received a copy of the GNU General Public License

    along with TorrentFlux; if not, write to the Free Software

    Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA  02111-1307  USA

*/

include_once("config.php");

include_once("functions.php");

checkUserPath();

// Setup some defaults if they are not set.

$del = getRequestVar('del');

$down = getRequestVar('down');

$tar = getRequestVar('tar');

$dir = stripslashes(urldecode(getRequestVar('dir')));

// Are we to delete something?

if ($del != "")

{

    $current = "";

    // The following lines of code were suggested by Jody Steele jmlsteele@stfu.ca

    // this is so only the owner of the file(s) or admin can delete

    if(IsAdmin($cfg["user"]) || preg_match("/^" . $cfg["user"] . "/",$del))

    {

        // Yes, then delete it

        // we need to strip slashes twice in some circumstances

        // Ex.  If we are trying to delete test/tester's file/test.txt

        //    $del will be "test/tester\\\'s file/test.txt"

        //    one strip will give us "test/tester\'s file/test.txt

        //    the second strip will give us the correct

        //        "test/tester's file/test.txt"

        $del = stripslashes(stripslashes($del));

        if (!ereg("(\.\.\/)", $del))

        {

            avddelete($cfg["path"].$del);

            $arTemp = explode("/", $del);

            if (count($arTemp) > 1)

            {

                array_pop($arTemp);

                $current = implode("/", $arTemp);

            }

            AuditAction($cfg["constants"]["fm_delete"], $del);

        }

        else

        {

            AuditAction($cfg["constants"]["error"], "ILLEGAL DELETE: ".$cfg['user']." tried to delete ".$del);

        }

    }

    else

    {

        AuditAction($cfg["constants"]["error"], "ILLEGAL DELETE: ".$cfg['user']." tried to delete ".$del);

    }

    header("Location: dir.php?dir=".urlencode($current));

}

// Are we to download something?

if ($down != "" && $cfg["enable_file_download"])

{

    $current = "";

    // Yes, then download it

    // we need to strip slashes twice in some circumstances

    // Ex.  If we are trying to download test/tester's file/test.txt

    // $down will be "test/tester\\\'s file/test.txt"

    // one strip will give us "test/tester\'s file/test.txt

    // the second strip will give us the correct

    //  "test/tester's file/test.txt"

    $down = stripslashes(stripslashes($down));

    if (!ereg("(\.\.\/)", $down))

    {

        $path = $cfg["path"].$down;

        $p = explode(".", $path);

        $pc = count($p);

        $f = explode("/", $path);

        $file = array_pop($f);

        $arTemp = explode("/", $down);

        if (count($arTemp) > 1)

        {

            array_pop($arTemp);

            $current = implode("/", $arTemp);

        }

        if (file_exists($path))

        {

            header("Content-type: application/octet-stream\n");

            header("Content-disposition: attachment; filename=\"".$file."\"\n");

            header("Content-transfer-encoding: binary\n");

            header("Content-length: " . file_size($path) . "\n");

            // write the session to close so you can continue to browse on the site.

            session_write_close("TorrentFlux");

            //$fp = fopen($path, "r");

            $fp = popen("cat \"$path\"", "r");

            fpassthru($fp);

            pclose($fp);

            AuditAction($cfg["constants"]["fm_download"], $down);

            exit();

        }

        else

        {

            AuditAction($cfg["constants"]["error"], "File Not found for download: ".$cfg['user']." tried to download ".$down);

        }

    }

    else

    {

        AuditAction($cfg["constants"]["error"], "ILLEGAL DOWNLOAD: ".$cfg['user']." tried to download ".$down);

    }

    header("Location: dir.php?dir=".urlencode($current));

}

// Are we to download something?

if ($tar != "" && $cfg["enable_file_download"])

{

    $current = "";

    // Yes, then tar and download it

    // we need to strip slashes twice in some circumstances

    // Ex.  If we are trying to download test/tester's file/test.txt

    // $down will be "test/tester\\\'s file/test.txt"

    // one strip will give us "test/tester\'s file/test.txt

    // the second strip will give us the correct

    //  "test/tester's file/test.txt"

    $tar = stripslashes(stripslashes($tar));

    if (!ereg("(\.\.\/)", $tar))

    {

        // This prevents the script from getting killed off when running lengthy tar jobs.

        ini_set("max_execution_time", 3600);

        $tar = $cfg["path"].$tar;

        $arTemp = explode("/", $tar);

        if (count($arTemp) > 1)

        {

            array_pop($arTemp);

            $current = implode("/", $arTemp);

        }

        // Find out if we're really trying to access a file within the

        // proper directory structure. Sadly, this way requires that $cfg["path"]

        // is a REAL path, not a symlinked one. Also check if $cfg["path"] is part

        // of the REAL path.

        if (is_dir($tar))

        {

            $sendname = basename($tar);

            switch ($cfg["package_type"])

            {

                Case "tar":

                    $command = "tar cf - \"".addslashes($sendname)."\"";

                    break;

                Case "zip":

                    $command = "zip -0r - \"".addslashes($sendname)."\"";

                    break;

                default:

                    $cfg["package_type"] = "tar";

                    $command = "tar cf - \"".addslashes($sendname)."\"";

                    break;

            }

            // HTTP/1.0

            header("Pragma: no-cache");

            header("Content-Description: File Transfer");

            header("Content-Type: application/force-download");

            header('Content-Disposition: attachment; filename="'.$sendname.'.'.$cfg["package_type"].'"');

            // write the session to close so you can continue to browse on the site.

            session_write_close("TorrentFlux");

            // Make it a bit easier for tar/zip.

            chdir(dirname($tar));

            passthru($command);

            AuditAction($cfg["constants"]["fm_download"], $sendname.".".$cfg["package_type"]);

            exit();

        }

        else

        {

            AuditAction($cfg["constants"]["error"], "Illegal download: ".$cfg['user']." tried to download ".$tar);

        }

    }

    else

    {

        AuditAction($cfg["constants"]["error"], "ILLEGAL TAR DOWNLOAD: ".$cfg['user']." tried to download ".$tar);

    }

    header("Location: dir.php?dir=".urlencode($current));

}

if ($dir == "")

{

    unset($dir);

}

if (isset($dir))

{

    if (ereg("(\.\.)", $dir))

    {

        unset($dir);

    }

    else

    {

        $dir = $dir."/";

    }

}

DisplayHead(_DIRECTORYLIST);

?>

<script language="JavaScript">

function MakeTorrent(name_file)

{

    window.open (name_file,'_blank','toolbar=no,location=no,directories=no,status=no,menubar=no,scrollbars=yes,resizable=no,width=600,height=430')

}

function ConfirmDelete(file)

{

    return confirm("<?php echo _ABOUTTODELETE ?>: " + file)

}

</script>

<?php

displayDriveSpaceBar(getDriveSpace($cfg["path"]));

echo "<br>";

if(!isset($dir)) $dir = "";

ListDirectory($cfg["path"].$dir);

DisplayFoot();

//**************************************************************************

// ListDirectory()

// This method reads files and directories in the specified path and

// displayes them.

function ListDirectory($dirName)

{

    global $dir, $cfg;

    $bgLight = $cfg["bgLight"];

    $bgDark = $cfg["bgDark"];

    $entrys = array();

    $bg = $bgLight;

    $dirName = stripslashes($dirName);

    if (isset($dir))

    {

        //setup default parent directory URL

        $parentURL = "dir.php";

        //get the real parentURL

        if (preg_match("/^(.+)\/.+$/",$dir,$matches) == 1)

        {

            $parentURL="dir.php?dir=" . urlencode($matches[1]);

        }

        echo "<a href=\"" . $parentURL . "\"><img src=\"images/up_dir.gif\" width=16 height=16 title=\""._BACKTOPARRENT."\" border=0>["._BACKTOPARRENT."]</a>";

    }

    echo "<table cellpadding=2 width=740>";

    $handle = opendir($dirName);

    while($entry = readdir($handle))

    {

        $entrys[] = $entry;

    }

    natsort($entrys);

    foreach($entrys as $entry)

    {

        if ($entry != "." && $entry != ".." && substr($entry, 0, 1) != ".")

        {

            if (@is_dir($dirName.$entry))

            {

                echo "<tr bgcolor=\"".$bg."\"><td><a href=\"dir.php?dir=".urlencode($dir.$entry)."\"><img src=\"images/folder2.gif\" width=\"16\" height=\"16\" title=\"".$entry."\" border=\"0\" align=\"absmiddle\">".$entry."</a></td>";

                echo "<td>&nbsp;</td>";

                echo "<td>&nbsp;</td>";

                echo "<td align=\"right\">";

                if ($cfg["enable_maketorrent"])

                {

                    echo "<a href=\"JavaScript:MakeTorrent('maketorrent.php?path=".urlencode($dir.$entry)."')\"><img src=\"images/make.gif\" width=16 height=16 title=\"Make Torrent\" border=0></a>";

                }

                if ($cfg["enable_file_download"])

                {

                    echo "<a href=\"dir.php?tar=".urlencode($dir.$entry)."\"><img src=\"images/tar_down.gif\" width=16 height=16 title=\"Download as ".$cfg["package_type"]."\" border=0></a>";

                }

                // The following lines of code were suggested by Jody Steele jmlsteele@stfu.ca

                // this is so only the owner of the file(s) or admin can delete

                // only give admins and users who "own" this directory

                // the ability to delete sub directories

                if(IsAdmin($cfg["user"]) || preg_match("/^" . $cfg["user"] . "/",$dir))

                {

                    echo "<a href=\"dir.php?del=".urlencode($dir.$entry)."\" onclick=\"return ConfirmDelete('".addslashes($entry)."')\"><img src=\"images/delete_on.gif\" width=16 height=16 title=\""._DELETE."\" border=0></a>";

                }

                else

                {

                    echo " ";

                }

                echo "</td></tr>\n";

                if ($bg == $bgLight)

                {

                    $bg = $bgDark;

                }

                else

                {

                    $bg = $bgLight;

                }

            }

            else

            {

                // Do nothing

            }

        }

    }

    closedir($handle);

    $entrys = array();

    $handle = opendir($dirName);

    while($entry = readdir($handle))

    {

        $entrys[] = $entry;

    }

    natsort($entrys);

    foreach($entrys as $entry)

    {

        if ($entry != "." && $entry != "..")

        {

            if (@is_dir($dirName.$entry))

            {

                // Do nothing

            }

            else

            {

                $arStat = @lstat($dirName.$entry);

                $arStat[7] = ( $arStat[7] == 0 )? file_size( $dirName . $entry ) : $arStat[7];

                if (array_key_exists(10,$arStat))

                {

                        $timeStamp = $arStat[10];

                }

                else

                {

                    $timeStamp = "";

                }

                $fileSize = number_format(($arStat[7])/1024);

                // Code added by Remko Jantzen to assign an icon per file-type. But when not

                // available all stays the same.

                $image="images/time.gif";

                $imageOption="images/files/".getExtension($entry).".png";

                if (file_exists("./".$imageOption))

                {

                    $image = $imageOption;

                }

                echo "<tr bgcolor=\"".$bg."\">";

                echo "<td>";

                // Can users download files?

                if ($cfg["enable_file_download"])

                {

                    // Yes, let them download

                    echo "<a href=\"dir.php?down=".urlencode($dir.$entry)."\" >";

                    echo "<img src=\"".$image."\" width=\"16\" height=\"16\" alt=\"".$entry."\" border=\"0\"></a>";

                    echo "<a href=\"dir.php?down=".urlencode($dir.$entry)."\" >".$entry."</a>";

                }

                else

                {

                    // No, just show the name

                    echo "<img src=\"".$image."\" width=\"16\" height=\"16\" alt=\"".$entry."\" border=\"0\">";

                    echo $entry;

                }

                echo "</td>";

                echo "<td align=\"right\">".$fileSize." KB</td>";

                echo "<td>".date("m-d-Y g:i a", $timeStamp)."</td>";

                echo "<td align=\"right\">";

                if( $cfg["enable_view_nfo"] && (( substr( strtolower($entry), -4 ) == ".nfo" ) || ( substr( strtolower($entry), -4 ) == ".txt" ))  )

                {

                    echo "<a href=\"viewnfo.php?path=".urlencode(addslashes($dir.$entry))."\"><img src=\"images/view_nfo.gif\" width=16 height=16 title=\"View '$entry'\" border=0></a>";

                }

                if ($cfg["enable_maketorrent"])

                {

                    echo "<a href=\"JavaScript:MakeTorrent('maketorrent.php?path=".urlencode($dir.$entry)."')\"><img src=\"images/make.gif\" width=16 height=16 title=\"Make Torrent\" border=0></a>";

                }

                if ($cfg["enable_file_download"])

                {

                    // Show the download button

                    echo "<a href=\"dir.php?down=".urlencode($dir.$entry)."\" >";

                    echo "<img src=\"images/download_owner.gif\" width=16 height=16 title=\"Download\" border=0>";

                    echo "</a>";

                }

                // The following lines of code were suggested by Jody Steele jmlsteele@stfu.ca

                // this is so only the owner of the file(s) or admin can delete

                // only give admins and users who "own" this directory

                // the ability to delete files

                if(IsAdmin($cfg["user"]) || preg_match("/^" . $cfg["user"] . "/",$dir))

                {

                    echo "<a href=\"dir.php?del=".urlencode($dir.$entry)."\" onclick=\"return ConfirmDelete('".addslashes($entry)."')\"><img src=\"images/delete_on.gif\" width=16 height=16 title=\""._DELETE."\" border=0></a>";

                }

                else

                {

                    echo " ";

                }

                echo "</td></tr>\n";

                if ($bg == $bgLight)

                {

                    $bg = $bgDark;

                }

                else

                {

                    $bg = $bgLight;

                }

            }

        }

    }

    closedir($handle);

    echo "</table>";

}

// ***************************************************************************

// ***************************************************************************

// Checks for the location of the users directory

// If it does not exist, then it creates it.

function checkUserPath()

{

    global $cfg;

    // is there a user dir?

    if (!is_dir($cfg["path"].$cfg["user"]))

    {

        //Then create it

        mkdir($cfg["path"].$cfg["user"], 0777);

    }

}

// This function returns the extension of a given file.

// Where the extension is the part after the last dot.

// When no dot is found the noExtensionFile string is

// returned. This should point to a 'unknown-type' image

// time by default. This string is also returned when the

// file starts with an dot.

function getExtension($fileName)

{

    $noExtensionFile="unknown"; // The return when no extension is found

    //Prepare the loop to find an extension

    $length = -1*(strlen($fileName)); // The maximum negative value for $i

    $i=-1; //The counter which counts back to $length

    //Find the last dot in an string

    while (substr($fileName,$i,1) != "." && $i > $length) {$i -= 1; }

    //Get the extension (with dot)

    $ext = substr($fileName,$i);

    //Decide what to return.

    if (substr($ext,0,1)==".") {$ext = substr($ext,((-1 * strlen($ext))+1)); } else {$ext = $noExtensionFile;}

    //Return the extension

    return strtolower($ext);

}

?>