| 0,0 → 1,2634 |
|---|
| <?php |
| |
| /*************************************************************************** |
| AutoIndex PHP Script, by Justin Hagstrom |
| ------------------- |
| |
| filename : index.php |
| version : 1.5.2 |
| date : January 04, 2005 |
| |
| copyright : Copyright (C) 2002-2005 Justin Hagstrom |
| license : GNU General Public License (GPL) |
| |
| website & forum : http://autoindex.sourceforge.net |
| e-mail : JustinHagstrom [at] yahoo [dot] com |
| |
| |
| AutoIndex PHP Script is free software; you can redistribute it and/or modify |
| it under the terms of the GNU General Public License as published by |
| the Free Software Foundation; either version 2 of the License, or |
| (at your option) any later version. |
| |
| AutoIndex PHP Script is distributed in the hope that it will be useful, |
| but WITHOUT ANY WARRANTY; without even the implied warranty of |
| MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the |
| GNU General Public License for more details. |
| |
| You should have received a copy of the GNU General Public License |
| along with this program; if not, write to the Free Software |
| Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA 02111-1307 USA |
| |
| ***************************************************************************/ |
| |
| //some basic compatibility for PHP 4.0.x |
| if (!isset($_GET)) { $_GET = &$HTTP_GET_VARS; } |
| if (!isset($_POST)) { $_POST = &$HTTP_POST_VARS; } |
| if (!isset($_SESSION)) { $_SESSION = &$HTTP_SESSION_VARS; } |
| if (!isset($_SERVER)) { $_SERVER = &$HTTP_SERVER_VARS; } |
| if (!isset($_COOKIE)) { $_COOKIE = &$HTTP_COOKIE_VARS; } |
| if (!isset($_FILES)) { $_FILES = &$HTTP_POST_FILES; } |
| |
| /* OPTIONAL SETTINGS */ |
| |
| $stored_config = 'AutoIndex.conf.php'; |
| $config_generator = 'config.php'; |
| |
| $date_format = 'Y-M-d'; //see http://php.net/date |
| |
| /* END OPTIONAL SETTINGS */ |
| |
| |
| function get_microtime() |
| { |
| list($usec, $sec) = explode(' ', microtime()); |
| return ((float)$usec + (float)$sec); |
| } |
| $start_time = get_microtime(); |
| |
| session_name('AutoIndex'); |
| session_start(); |
| |
| if (@get_magic_quotes_gpc()) |
| //remove any slashes added by the "magic quotes" setting |
| { |
| $_GET = array_map('stripslashes', $_GET); |
| $_POST = array_map('stripslashes', $_POST); |
| } |
| @set_magic_quotes_runtime(0); |
| |
| if (ini_get('zlib.output_compression') == '1') |
| //compensate for compressed output set in php.ini |
| { |
| header('Content-Encoding: gzip'); |
| } |
| |
| define('VERSION', '1.5.2'); |
| |
| //now we need to include either the stored settings, or the config generator |
| if (@is_file($stored_config)) |
| { |
| if (!@include($stored_config)) |
| { |
| die("<p>Error including file <em>$stored_config</em></p>"); |
| } |
| } |
| else if (@is_file($config_generator)) |
| { |
| define('CONFIG', true); |
| if (!@include($config_generator)) |
| { |
| die("<p>Error including file <em>$config_generator</em></p>"); |
| } |
| die(); |
| } |
| else |
| { |
| die("<p>Error: Neither <em>$config_generator</em> nor <em>$stored_config</em> could be found.</p>"); |
| } |
| |
| $this_file = (($index == '') ? $_SERVER['PHP_SELF'] : $index); |
| $this_file .= ((strpos($this_file, '?') !== false) ? '&' : '?'); |
| $referrer = (isset($_SERVER['HTTP_REFERER']) ? $_SERVER['HTTP_REFERER'] : 'N/A'); |
| |
| //make sure all the variables are set correctly from the stored settings |
| $config_vars = array('base_dir', 'icon_path', 'stylesheet', 'use_login_system', |
| 'allow_uploads', 'must_login_to_download', 'user_list', 'allow_file_overwrites', |
| 'log_file', 'dont_log_these_ips', 'download_count', 'links_file', 'lang', |
| 'sub_folder_access', 'index', 'hidden_files', 'show_only_these_files', |
| 'force_download', 'bandwidth_limit', 'anti_leech', 'enable_searching', |
| 'show_dir_size', 'folder_expansion', 'show_folder_count', 'banned_list', |
| 'md5_show', 'header', 'footer', 'header_per_folder', 'footer_per_folder', |
| 'description_file', 'thumbnail_height', 'path_to_language_files', 'days_new', |
| 'select_language', 'show_type_column', 'show_size_column', 'show_date_column'); |
| foreach ($config_vars as $this_var) |
| { |
| if (!isset($$this_var)) |
| { |
| die("<p>Error: AutoIndex is not configured properly. |
| <br />The variable <strong>$this_var</strong> is not set.</p> |
| <p>Delete <em>$stored_config</em> and then run <em>$config_generator</em>.</p>"); |
| } |
| } |
| |
| //find the language the script should be displayed in |
| if ($select_language && isset($_GET['lang']) |
| && preg_match('/^[a-z]{2}(_[a-z]{2})?$/i', $_GET['lang']) |
| && @is_file($path_to_language_files.$_GET['lang'].'.php')) |
| { |
| $_SESSION['lang'] = $_GET['lang']; |
| } |
| else if (!isset($_SESSION['lang'])) |
| { |
| $_SESSION['lang'] = $lang; |
| } |
| @include($path_to_language_files.$_SESSION['lang'].'.php'); |
| |
| if (!isset($words)) |
| { |
| die('<p>Error: You need to include a language.php file that has the variable $words. |
| <br />Check the $lang and $path_to_language_files variables.</p>'); |
| } |
| |
| $global_user_list = ($use_login_system ? @file($user_list) : array()); |
| if ($global_user_list === false) |
| { |
| die("<p>Could not open file <strong>$user_list</strong></p>"); |
| } |
| |
| function translate_uri($uri) |
| //rawurlencodes $uri, but not any slashes |
| { |
| $uri = rawurlencode(str_replace('\\', '/', $uri)); |
| return str_replace(rawurlencode('/'), '/', $uri); |
| } |
| |
| function get_basename($fn) |
| //returns everything after the slash, or the original string if there is no slash |
| { |
| return basename(str_replace('\\', '/', $fn)); |
| } |
| |
| function match_in_array($string, &$array) |
| //returns true if $string matches anything in the array |
| { |
| $string = get_basename($string); |
| static $replace = array( |
| '\*' => '[^\/]*', |
| '\+' => '[^\/]+', |
| '\?' => '[^\/]?'); |
| foreach ($array as $m) |
| { |
| if (preg_match('/^'.strtr(preg_quote(get_basename($m), '/'), $replace).'$/i', $string)) |
| { |
| return true; |
| } |
| } |
| return false; |
| } |
| |
| function check_login($user, $pass) |
| { |
| global $global_user_list; |
| foreach ($global_user_list as $look) |
| { |
| if ((strcasecmp(substr(rtrim($look), 33), $user) === 0) |
| && (strcasecmp(substr(rtrim($look), 0, 32), $pass) === 0)) |
| { |
| return true; |
| } |
| } |
| return false; |
| } |
| |
| function logged_in() |
| { |
| return (isset($_SESSION['user'], $_SESSION['pass']) && |
| check_login($_SESSION['user'], $_SESSION['pass'])); |
| } |
| |
| function is_user_admin($user) |
| { |
| global $global_user_list; |
| foreach ($global_user_list as $look) |
| { |
| if (strcasecmp($user, substr(rtrim($look), 33)) === 0) |
| { |
| return (substr($look, 32, 1) === '1'); |
| } |
| } |
| return false; |
| } |
| |
| function is_admin() |
| { |
| return is_user_admin($_SESSION['user']); |
| } |
| |
| function is_hidden($fn, $is_file = true) |
| //looks at $hidden_files and $show_only_these_files to see if $fn is hidden |
| { |
| if ($fn == '') |
| { |
| return true; |
| } |
| global $use_login_system; |
| if ($use_login_system && logged_in() && is_admin()) |
| //allow admins to view hidden files |
| { |
| return false; |
| } |
| global $hidden_files, $show_only_these_files; |
| if ($is_file && count($show_only_these_files)) |
| { |
| return (!match_in_array($fn, $show_only_these_files)); |
| } |
| if (!count($hidden_files)) |
| { |
| return false; |
| } |
| return match_in_array($fn, $hidden_files); |
| } |
| |
| function eval_dir($d) |
| //check $d for "bad" things, and deal with ".." |
| { |
| $d = str_replace('\\', '/', $d); |
| if ($d == '' || $d == '/') |
| { |
| return ''; |
| } |
| $dirs = explode('/', $d); |
| for ($i=0; $i<count($dirs); $i++) |
| { |
| if ($dirs[$i] == '.' || is_hidden($dirs[$i], false)) |
| { |
| array_splice($dirs, $i, 1); |
| $i--; |
| } |
| else if (preg_match('/^\.\./', $dirs[$i])) //if it starts with two dots |
| { |
| array_splice($dirs, $i-1, 2); |
| $i = -1; |
| } |
| } |
| $new_dir = implode('/', $dirs); |
| if ($new_dir == '' || $new_dir == '/') |
| { |
| return ''; |
| } |
| if ($d{0} == '/' && $new_dir{0} != '/') |
| { |
| $new_dir = '/'.$new_dir; |
| } |
| if (preg_match('#/$#', $d) && !preg_match('#/$#', $new_dir)) |
| { |
| $new_dir .= '/'; |
| } |
| else if (is_hidden(get_basename($d))) |
| { |
| return ''; |
| } |
| return $new_dir; |
| } |
| |
| //get the user defined variables that are in the URL |
| $subdir = (isset($_GET['dir']) ? eval_dir(rawurldecode($_GET['dir'])) : ''); |
| $file_dl = (isset($_GET['file']) ? rawurldecode($_GET['file']) : ''); |
| $search = (isset($_GET['search']) ? $_GET['search'] : ''); |
| $search_mode = (isset($_GET['searchMode']) ? $_GET['searchMode'] : ''); |
| while (preg_match('#\\\\|/$#', $file_dl)) |
| { |
| $file_dl = substr($file_dl, 0, -1); |
| } |
| $file_dl = eval_dir($file_dl); |
| |
| if (!@is_dir($base_dir)) |
| { |
| die('<p>Error: <em>'.htmlentities($base_dir) |
| .'</em> is not a valid directory.<br />Check the $base_dir variable.</p>'); |
| } |
| |
| if (!$sub_folder_access || $subdir == '/') |
| { |
| $subdir = ''; |
| } |
| else if (preg_match('#[^/\\\\]$#', $subdir)) |
| { |
| $subdir .= '/'; //add a slash to the end if there isn't one |
| } |
| |
| $dir = $base_dir.$subdir; |
| |
| //this will be displayed before any HTML output |
| $html_heading = ''; |
| |
| if ($index == '') |
| { |
| $html_heading .= '<?xml version="1.0" encoding="UTF-8"?> |
| <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.1//EN" "http://www.w3.org/TR/xhtml11/DTD/xhtml11.dtd"> |
| <html xmlns="http://www.w3.org/1999/xhtml" xml:lang="'.$_SESSION['lang'].'"> |
| <head>'; |
| } |
| if ($stylesheet != '') |
| { |
| $html_heading .= "\n<link rel=\"stylesheet\" href=\"$stylesheet\" type=\"text/css\" title=\"AutoIndex Default\" />\n"; |
| } |
| if ($index == '') |
| { |
| $html_heading .= "\n<title>".$words['index of'].' '.htmlentities($dir) |
| ."</title>\n\n</head><body class='autoindex_body'>\n\n"; |
| } |
| |
| function show_header() |
| { |
| global $header, $header_per_folder, $dir; |
| if ($header != '') |
| { |
| if ($header_per_folder) |
| { |
| $header = $dir.$header; |
| } |
| if (@is_readable($header)) |
| { |
| include($header); |
| } |
| } |
| } |
| |
| function show_footer() |
| { |
| global $footer, $footer_per_folder, $dir; |
| if ($footer != '') |
| { |
| if ($footer_per_folder) |
| { |
| $footer = $dir.$footer; |
| } |
| if (@is_readable($footer)) |
| { |
| include($footer); |
| } |
| } |
| } |
| |
| function show_login_box() |
| { |
| global $this_file, $subdir, $icon_path; |
| $sd = translate_uri($subdir); |
| echo '<p /><table border="0" cellpadding="8" cellspacing="0"> |
| <tr class="paragraph"><td class="default_td"><img src="', $icon_path, |
| '/login.png" width="12" height="14" alt="Login" /> Login:', |
| "\n<form method='post' action='{$this_file}dir=$sd'> |
| <table><tr class=\"paragraph\"><td>Username:</td> |
| <td><input type='text' name='user' /> |
| </td></tr><tr class=\"paragraph\"><td>Password:</td> |
| <td><input type='password' name='pass' /></td></tr></table> |
| <p><input class='button' type='submit' value='Login' /></p> |
| </form></td></tr></table>"; |
| } |
| |
| function show_search_box() |
| { |
| global $index, $search, $words, $search_mode, $this_file, $subdir, $icon_path; |
| echo '<p /><table border="0" cellpadding="8" cellspacing="0"> |
| <tr class="paragraph"><td class="default_td"><img src="', $icon_path, |
| '/search.png" width="16" height="16" alt="', $words['search'], '" /> ', |
| $words['search'], ":<br /><form method='get' action='$this_file'> |
| <p><input type='text' name='search' value='$search' />\n"; |
| if ($index != '' && strpos($index, '?') !== false) |
| { |
| $id_temp = explode('=', $index, 2); |
| $id_temp[0] = substr(strstr($id_temp[0], '?'), 1); |
| echo "<input type='hidden' name='$id_temp[0]' value='$id_temp[1]' />"; |
| } |
| echo "\n<input type='hidden' name='dir' value='", translate_uri($subdir), |
| "' /><br /><select name='searchMode'>\n"; |
| $search_modes = array($words['files'] => 'f', $words['folders'] => 'd', $words['both'] => 'fd'); |
| foreach ($search_modes as $key => $element) |
| { |
| $sel = (($search_mode == $element) ? ' selected="selected"' : ''); |
| echo "\t<option$sel value='$element'>$key</option>\n"; |
| } |
| echo "</select><input type='submit' value='", $words['search'], |
| '\' class="button" /></p></form></td></tr></table>'; |
| } |
| |
| function is_username($user) |
| { |
| global $html_heading, $global_user_list; |
| foreach ($global_user_list as $look) |
| { |
| if (strcasecmp($user, substr(rtrim($look), 33)) === 0) |
| { |
| return true; |
| } |
| } |
| return false; |
| } |
| |
| function num_admins() |
| //returns the number of accounts with admin rights |
| { |
| global $html_heading, $global_user_list; |
| $num = 0; |
| foreach ($global_user_list as $look) |
| { |
| if (substr($look, 32, 1) === '1') |
| { |
| $num++; |
| } |
| } |
| return $num; |
| } |
| |
| function get_filesize($size) |
| //give a size in bytes, and this will return the appropriate measurement format |
| { |
| $size = max(0, $size); |
| static $u = array(' B', 'KB', 'MB', 'GB'); |
| for ($i=0; $size >= 1024 && $i < 4; $i++) |
| { |
| $size /= 1024; |
| } |
| return number_format($size, 1).' '.$u[$i]; |
| } |
| |
| function ext($fn) |
| //return the lowercase file extension of $fn, not including the leading dot |
| { |
| $fn = get_basename($fn); |
| return (strpos($fn, '.') ? strtolower(substr(strrchr($fn, '.'), 1)) : ''); |
| } |
| |
| function get_all_files($path) |
| //returns an array of every file in $path, including folders (except ./ and ../) |
| { |
| $list = array(); |
| if (($hndl = @opendir($path)) === false) |
| { |
| return $list; |
| } |
| while (($file=readdir($hndl)) !== false) |
| { |
| if ($file != '.' && $file != '..') |
| { |
| $list[] = $file; |
| } |
| } |
| closedir($hndl); |
| return $list; |
| } |
| |
| function get_file_list($path) |
| //returns a sorted array of filenames. Filters out "bad" files |
| { |
| global $sub_folder_access, $links_file; |
| $f = $d = array(); |
| foreach (get_all_files($path) as $name) |
| { |
| if ($sub_folder_access && @is_dir($path.$name) && !is_hidden($name, false)) |
| { |
| $d[] = $name; |
| } |
| else if (@is_file($path.$name) && !is_hidden($name, true)) |
| { |
| $f[] = $name; |
| } |
| } |
| if ($links_file != '' && ($links = @file($path.$links_file))) |
| { |
| foreach ($links as $name) |
| { |
| $p = strpos($name, '|'); |
| $f[] = (($p === false) ? rtrim($name).'|' : substr(rtrim($name), 0, $p).'|'); |
| } |
| } |
| natcasesort($d); |
| natcasesort($f); |
| return array_merge($d, $f); |
| } |
| |
| function dir_size($dir) |
| //returns the total size of a directory (recursive) in bytes |
| { |
| $totalsize = 0; |
| foreach (get_file_list($dir) as $name) |
| { |
| $totalsize += (@is_dir($dir.$name) ? dir_size("$dir$name/") : (int)@filesize($dir.$name)); |
| } |
| return $totalsize; |
| } |
| |
| function match_filename($filename, $string) |
| { |
| if (preg_match_all('/(?<=")[^"]+(?=")|[^ "]+/', $string, $matches)) |
| { |
| foreach ($matches[0] as $w) |
| { |
| if (preg_match('#[^/\.]+#', $w) && stristr($filename, $w)) |
| { |
| return true; |
| } |
| } |
| } |
| return false; |
| } |
| |
| function search_dir($sdir, $string) |
| //returns files/folders (recursive) in $sdir that contain $string |
| { |
| global $search_mode; |
| //search_mode: d=folders, f=files, fd=both |
| |
| $found = array(); |
| $list = get_file_list($sdir); |
| $d = count($list); |
| for ($i=0; $i<$d; $i++) |
| { |
| $full_name = $sdir.$list[$i]; |
| if (stristr($search_mode, 'f') && (@is_file($full_name) || preg_match('/\|$/', $list[$i])) && match_filename($list[$i], $string)) |
| { |
| $found[] = $full_name; |
| } |
| else if (@is_dir($full_name)) |
| { |
| if (stristr($search_mode, 'd') && match_filename($list[$i], $string)) |
| { |
| $found[] = $full_name; |
| } |
| $found = array_merge($found, search_dir($full_name.'/', $string)); |
| } |
| } |
| return $found; |
| } |
| |
| function add_num_to_array($num, &$array) |
| { |
| isset($array[$num]) ? $array[$num]++ : $array[$num] = 1; |
| } |
| |
| function mkdir_recursive($path) |
| { |
| if (@is_dir($path)) |
| { |
| return true; |
| } |
| if (!mkdir_recursive(dirname($path))) |
| { |
| return false; |
| } |
| return @mkdir($path, 0755); |
| } |
| |
| function rmdir_recursive($path) |
| { |
| if (!preg_match('#/$#', $path)) |
| { |
| $path .= '/'; |
| } |
| foreach (get_all_files($path) as $file) |
| { |
| if ($file == '' || $file == '.' || $file == '..') |
| { |
| continue; |
| } |
| if (@is_dir("$path$file/")) |
| { |
| rmdir_recursive("$path$file/"); |
| } |
| else |
| { |
| @unlink($path . $file); |
| } |
| } |
| return @rmdir($path); |
| } |
| |
| function num_files($dir) |
| //returns the number of files in $dir (recursive) |
| { |
| $count = 0; |
| if (!preg_match('#/$#', $dir)) |
| { |
| $dir .= '/'; |
| } |
| $list = get_file_list($dir); |
| $d = count($list); |
| for ($i=0; $i<$d; $i++) |
| { |
| $count += (@is_dir($dir.$list[$i]) ? num_files($dir.$list[$i]) : 1); |
| } |
| return $count; |
| } |
| |
| function redirect($site) |
| { |
| header("Location: $site"); |
| die('<p>Redirection header could not be sent.<br />' |
| ."Continue here: <a href=\"$site\">$site</a></p>"); |
| } |
| |
| function find_mime_type($ext) |
| { |
| static $mime_types = array( |
| 'application/andrew-inset' => array('ez'), |
| 'application/mac-binhex40' => array('hqx'), |
| 'application/mac-compactpro' => array('cpt'), |
| 'application/mathml+xml' => array('mathml'), |
| 'application/msword' => array('doc'), |
| 'application/octet-stream' => array('bin', 'dms', 'lha', |
| 'lzh', 'exe', 'class', 'so', 'dll', 'dmg'), |
| 'application/oda' => array('oda'), |
| 'application/ogg' => array('ogg'), |
| 'application/pdf' => array('pdf'), |
| 'application/postscript' => array('ai', 'eps', 'ps'), |
| 'application/rdf+xml' => array('rdf'), |
| 'application/smil' => array('smi', 'smil'), |
| 'application/srgs' => array('gram'), |
| 'application/srgs+xml' => array('grxml'), |
| 'application/vnd.mif' => array('mif'), |
| 'application/vnd.mozilla.xul+xml' => array('xul'), |
| 'application/vnd.ms-excel' => array('xls'), |
| 'application/vnd.ms-powerpoint' => array('ppt'), |
| 'application/vnd.wap.wbxml' => array('wbxml'), |
| 'application/vnd.wap.wmlc' => array('wmlc'), |
| 'application/vnd.wap.wmlscriptc' => array('wmlsc'), |
| 'application/voicexml+xml' => array('vxml'), |
| 'application/x-bcpio' => array('bcpio'), |
| 'application/x-cdlink' => array('vcd'), |
| 'application/x-chess-pgn' => array('pgn'), |
| 'application/x-cpio' => array('cpio'), |
| 'application/x-csh' => array('csh'), |
| 'application/x-director' => array('dcr', 'dir', 'dxr'), |
| 'application/x-dvi' => array('dvi'), |
| 'application/x-futuresplash' => array('spl'), |
| 'application/x-gtar' => array('gtar'), |
| 'application/x-hdf' => array('hdf'), |
| 'application/x-javascript' => array('js'), |
| 'application/x-koan' => array('skp', 'skd', 'skt', 'skm'), |
| 'application/x-latex' => array('latex'), |
| 'application/x-netcdf' => array('nc', 'cdf'), |
| 'application/x-sh' => array('sh'), |
| 'application/x-shar' => array('shar'), |
| 'application/x-shockwave-flash' => array('swf'), |
| 'application/x-stuffit' => array('sit'), |
| 'application/x-sv4cpio' => array('sv4cpio'), |
| 'application/x-sv4crc' => array('sv4crc'), |
| 'application/x-tar' => array('tar'), |
| 'application/x-tcl' => array('tcl'), |
| 'application/x-tex' => array('tex'), |
| 'application/x-texinfo' => array('texinfo', 'texi'), |
| 'application/x-troff' => array('t', 'tr', 'roff'), |
| 'application/x-troff-man' => array('man'), |
| 'application/x-troff-me' => array('me'), |
| 'application/x-troff-ms' => array('ms'), |
| 'application/x-ustar' => array('ustar'), |
| 'application/x-wais-source' => array('src'), |
| 'application/xhtml+xml' => array('xhtml', 'xht'), |
| 'application/xslt+xml' => array('xslt'), |
| 'application/xml' => array('xml', 'xsl'), |
| 'application/xml-dtd' => array('dtd'), |
| 'application/zip' => array('zip'), |
| 'audio/basic' => array('au', 'snd'), |
| 'audio/midi' => array('mid', 'midi', 'kar'), |
| 'audio/mpeg' => array('mpga', 'mp2', 'mp3'), |
| 'audio/x-aiff' => array('aif', 'aiff', 'aifc'), |
| 'audio/x-mpegurl' => array('m3u'), |
| 'audio/x-pn-realaudio' => array('ram', 'ra'), |
| 'application/vnd.rn-realmedia' => array('rm'), |
| 'audio/x-wav' => array('wav'), |
| 'chemical/x-pdb' => array('pdb'), |
| 'chemical/x-xyz' => array('xyz'), |
| 'image/bmp' => array('bmp'), |
| 'image/cgm' => array('cgm'), |
| 'image/gif' => array('gif'), |
| 'image/ief' => array('ief'), |
| 'image/jpeg' => array('jpeg', 'jpg', 'jpe'), |
| 'image/png' => array('png'), |
| 'image/svg+xml' => array('svg'), |
| 'image/tiff' => array('tiff', 'tif'), |
| 'image/vnd.djvu' => array('djvu', 'djv'), |
| 'image/vnd.wap.wbmp' => array('wbmp'), |
| 'image/x-cmu-raster' => array('ras'), |
| 'image/x-icon' => array('ico'), |
| 'image/x-portable-anymap' => array('pnm'), |
| 'image/x-portable-bitmap' => array('pbm'), |
| 'image/x-portable-graymap' => array('pgm'), |
| 'image/x-portable-pixmap' => array('ppm'), |
| 'image/x-rgb' => array('rgb'), |
| 'image/x-xbitmap' => array('xbm'), |
| 'image/x-xpixmap' => array('xpm'), |
| 'image/x-xwindowdump' => array('xwd'), |
| 'model/iges' => array('igs', 'iges'), |
| 'model/mesh' => array('msh', 'mesh', 'silo'), |
| 'model/vrml' => array('wrl', 'vrml'), |
| 'text/calendar' => array('ics', 'ifb'), |
| 'text/css' => array('css'), |
| 'text/html' => array('html', 'htm'), |
| 'text/plain' => array('asc', 'txt'), |
| 'text/richtext' => array('rtx'), |
| 'text/rtf' => array('rtf'), |
| 'text/sgml' => array('sgml', 'sgm'), |
| 'text/tab-separated-values' => array('tsv'), |
| 'text/vnd.wap.wml' => array('wml'), |
| 'text/vnd.wap.wmlscript' => array('wmls'), |
| 'text/x-setext' => array('etx'), |
| 'video/mpeg' => array('mpeg', 'mpg', 'mpe'), |
| 'video/quicktime' => array('qt', 'mov'), |
| 'video/vnd.mpegurl' => array('mxu', 'm4u'), |
| 'video/x-msvideo' => array('avi'), |
| 'video/x-sgi-movie' => array('movie'), |
| 'x-conference/x-cooltalk' => array('ice') |
| ); |
| foreach ($mime_types as $mime_type => $exts) |
| { |
| if (in_array($ext, $exts)) |
| { |
| return $mime_type; |
| } |
| } |
| return 'text/plain'; |
| } |
| |
| function icon($ext) |
| //find the appropriate icon depending on the extension (returns a link to the image file) |
| { |
| global $icon_path; |
| if ($icon_path == '') |
| { |
| return ''; |
| } |
| if ($ext == '') |
| { |
| $icon = 'generic'; |
| } |
| else |
| { |
| $icon = 'unknown'; |
| static $icon_types = array( |
| 'binary' => array('bat', 'bin', 'com', 'dmg', 'dms', 'exe', 'msi', |
| 'msp', 'pif', 'pyd', 'scr', 'so'), |
| 'binhex' => array('hqx'), |
| 'cd' => array('bwi', 'bws', 'bwt', 'ccd', 'cdi', 'cue', 'img', |
| 'iso', 'mdf', 'mds', 'nrg', 'nri', 'sub', 'vcd'), |
| 'comp' => array('cfg', 'conf', 'inf', 'ini', 'log', 'nfo', 'reg'), |
| 'compressed' => array('7z', 'a', 'ace', 'ain', 'alz', 'amg', 'arc', |
| 'ari', 'arj', 'bh', 'bz', 'bz2', 'cab', 'deb', 'dz', 'gz', |
| 'io', 'ish', 'lha', 'lzh', 'lzs', 'lzw', 'lzx', 'msx', 'pak', |
| 'rar', 'rpm', 'sar', 'sea', 'sit', 'taz', 'tbz', 'tbz2', |
| 'tgz', 'tz', 'tzb', 'uc2', 'xxe', 'yz', 'z', 'zip', 'zoo'), |
| 'dll' => array('386', 'db', 'dll', 'ocx', 'sdb', 'vxd'), |
| 'doc' => array('abw', 'ans', 'chm', 'cwk', 'dif', 'doc', 'dot', |
| 'mcw', 'msw', 'pdb', 'psw', 'rtf', 'rtx', 'sdw', 'stw', 'sxw', |
| 'vor', 'wk4', 'wkb', 'wpd', 'wps', 'wpw', 'wri', 'wsd'), |
| 'image' => array('adc', 'art', 'bmp', 'cgm', 'dib', 'gif', 'ico', |
| 'ief', 'jfif', 'jif', 'jp2', 'jpc', 'jpe', 'jpeg', 'jpg', 'jpx', |
| 'mng', 'pcx', 'png', 'psd', 'psp', 'swc', 'sxd', 'tga', |
| 'tif', 'tiff', 'wmf', 'wpg', 'xcf', 'xif', 'yuv'), |
| 'java' => array('class', 'jar', 'jav', 'java', 'jtk'), |
| 'js' => array('ebs', 'js', 'jse', 'vbe', 'vbs', 'wsc', 'wsf', |
| 'wsh'), |
| 'key' => array('aex', 'asc', 'gpg', 'key', 'pgp', 'ppk'), |
| 'mov' => array('amc', 'dv', 'm4v', 'mac', 'mov', 'mp4v', 'mpg4', |
| 'pct', 'pic', 'pict', 'pnt', 'pntg', 'qpx', 'qt', 'qti', |
| 'qtif', 'qtl', 'qtp', 'qts', 'qtx'), |
| 'movie' => array('asf', 'asx', 'avi', 'div', 'divx', 'dvi', 'm1v', |
| 'm2v', 'mkv', 'movie', 'mp2v', 'mpa', 'mpe', 'mpeg', 'mpg', |
| 'mps', 'mpv', 'mpv2', 'ogm', 'ram', 'rmvb', 'rnx', 'rp', 'rv', |
| 'vivo', 'vob', 'wmv', 'xvid'), |
| 'pdf' => array('edn', 'fdf', 'pdf', 'pdp', 'pdx'), |
| 'php' => array('inc', 'php', 'php3', 'php4', 'php5', 'phps', |
| 'phtml'), |
| 'ppt' => array('emf', 'pot', 'ppa', 'pps', 'ppt', 'sda', 'sdd', |
| 'shw', 'sti', 'sxi'), |
| 'ps' => array('ai', 'eps', 'ps'), |
| 'sound' => array('aac', 'ac3', 'aif', 'aifc', 'aiff', 'ape', 'apl', |
| 'au', 'ay', 'bonk', 'cda', 'cdda', 'cpc', 'fla', 'flac', |
| 'gbs', 'gym', 'hes', 'iff', 'it', 'itz', 'kar', 'kss', 'la', |
| 'lpac', 'lqt', 'm4a', 'm4p', 'mdz', 'mid', 'midi', 'mka', |
| 'mo3', 'mod', 'mp+', 'mp1', 'mp2', 'mp3', 'mp4', 'mpc', |
| 'mpga', 'mpm', 'mpp', 'nsf', 'oda', 'ofr', 'ogg', 'pac', 'pce', |
| 'pcm', 'psf', 'psf2', 'ra', 'rm', 'rmi', 'rmjb', 'rmm', 'sb', |
| 'shn', 'sid', 'snd', 'spc', 'spx', 'svx', 'tfm', 'tfmx', |
| 'voc', 'vox', 'vqf', 'wav', 'wave', 'wma', 'wv', 'wvx', 'xa', |
| 'xm', 'xmz'), |
| 'tar' => array('gtar', 'tar'), |
| 'text' => array('c', 'cc', 'cp', 'cpp', 'cxx', 'diff', 'h', 'hpp', |
| 'hxx', 'm3u', 'md5', 'patch', 'pls', 'py', 'sfv', 'sh', |
| 'txt'), |
| 'uu' => array('uu', 'uud', 'uue'), |
| 'web' => array('asa', 'asp', 'aspx', 'cfm', 'cgi', 'css', 'dhtml', |
| 'dtd', 'grxml', 'htc', 'htm', 'html', 'htt', 'htx', 'jsp', 'lnk', |
| 'mathml', 'mht', 'mhtml', 'perl', 'pl', 'plg', 'rss', 'shtm', |
| 'shtml', 'stm', 'swf', 'tpl', 'wbxml', 'xht', 'xhtml', 'xml', |
| 'xsl', 'xslt', 'xul'), |
| 'xls' => array('csv', 'dbf', 'prn', 'pxl', 'sdc', 'slk', 'stc', 'sxc', |
| 'xla', 'xlb', 'xlc', 'xld', 'xlr', 'xls', 'xlt', 'xlw')); |
| foreach ($icon_types as $png_name => $exts) |
| { |
| if (in_array($ext, $exts)) |
| { |
| $icon = $png_name; |
| break; |
| } |
| } |
| } |
| return "<img alt=\"[$ext]\" height=\"16\" width=\"16\" src=\"$icon_path/$icon.png\" /> "; |
| } |
| |
| function display_thumbnail($file, $thumbnail_height) |
| { |
| global $html_heading; |
| if (!@is_file($file)) |
| { |
| header('HTTP/1.0 404 Not Found'); |
| die("$html_heading<p>File not found: <em>".htmlentities($file).'</em></p>'); |
| } |
| switch (ext($file)) |
| { |
| case 'gif': |
| $src = @imagecreatefromgif($file); |
| break; |
| case 'jpeg': |
| case 'jpg': |
| case 'jpe': |
| $src = @imagecreatefromjpeg($file); |
| break; |
| case 'png': |
| $src = @imagecreatefrompng($file); |
| break; |
| default: |
| die("$html_heading<p>Unsupported file extension.</p>"); |
| } |
| if ($src === false) |
| { |
| die("$html_heading<p>Unsupported image type.</p>"); |
| } |
| |
| header('Content-Type: image/jpeg'); |
| header('Cache-Control: public, max-age=3600, must-revalidate'); |
| header('Expires: '.gmdate('D, d M Y H:i:s', time()+3600).' GMT'); |
| $src_height = imagesy($src); |
| if ($src_height <= $thumbnail_height) |
| { |
| imagejpeg($src, '', 95); |
| } |
| else |
| { |
| $src_width = imagesx($src); |
| $thumb_width = $thumbnail_height * ($src_width / $src_height); |
| $thumb = imagecreatetruecolor($thumb_width, $thumbnail_height); |
| imagecopyresampled($thumb, $src, 0, 0, 0, 0, $thumb_width, |
| $thumbnail_height, $src_width, $src_height); |
| imagejpeg($thumb); |
| imagedestroy($thumb); |
| } |
| imagedestroy($src); |
| die(); |
| } |
| |
| function edit_description($fn, &$desc) |
| //edits a file's description |
| { |
| global $description_file, $html_heading; |
| if ($description_file == '') |
| { |
| return; |
| } |
| $wrote = false; |
| $l = @file($description_file) or $l = array(); |
| $h = @fopen($description_file, 'wb') or die("$html_heading<p>Cannot open description file for writing.</p>"); |
| $count_num = count($l); |
| for ($i=0; $i<$count_num; $i++) |
| { |
| $items = explode('|', rtrim($l[$i]), 2); |
| if (count($items) === 2 && $fn == $items[0]) |
| { |
| fwrite($h, "$fn|$desc\n"); |
| $wrote = true; |
| } |
| else |
| { |
| fwrite($h, $l[$i]); |
| } |
| } |
| if (!$wrote && $desc != '') |
| { |
| fwrite($h, "$fn|$desc\n"); |
| } |
| fclose($h); |
| } |
| |
| function add_to_file($item, $outfile) |
| { |
| global $html_heading; |
| $counted = false; |
| if ($l = @file($outfile)) |
| { |
| $count_num = count($l); |
| for ($i=0; $i<$count_num; $i++) |
| { |
| $thisc = rtrim($l[$i]); |
| if ($item == substr($thisc, 0, strpos($thisc, '|'))) |
| { |
| $counted = true; |
| break; |
| } |
| } |
| } |
| if ($counted) |
| { |
| $w = @fopen($outfile, 'wb') or die("$html_heading<p>Could not open <em>$outfile</em> file for writing.</p>"); |
| for ($i=0; $i<$count_num; $i++) |
| { |
| $items = explode('|', rtrim($l[$i]), 2); |
| if (count($items) === 2 && $items[0] == $item) |
| { |
| $nc = $items[1] + 1; |
| fwrite($w, "$item|$nc\n"); |
| } |
| else |
| { |
| fwrite($w, $l[$i]); |
| } |
| } |
| } |
| else |
| { |
| $w = @fopen($outfile, 'ab') or die("$html_heading<p>Could not open <em>$outfile</em> file for writing.</p>"); |
| fwrite($w, "$item|1\n"); |
| } |
| fclose($w); |
| } |
| |
| function get_stored_info($item, $filename) |
| { |
| if ($contents = @file($filename)) |
| { |
| $count_num = count($contents); |
| for ($i=0; $i<$count_num; $i++) |
| { |
| $items = explode('|', rtrim($contents[$i]), 2); |
| if (count($items) === 2 && $item == $items[0]) |
| { |
| return $items[1]; |
| } |
| } |
| } |
| return ''; |
| } |
| |
| function table_heading($title, $sortMode, $tooltip) |
| { |
| global $this_file, $subdir; |
| echo "\n<th class='default_th'><a class='black_link' title=\"$tooltip\" href=\"", |
| $this_file, 'dir=', translate_uri($subdir), '&sort=', |
| (($_SESSION['sort'] == 'a' && $_SESSION['sortMode'] == $sortMode) ? 'd' : 'a'), |
| '&sortMode=', $sortMode, '">', $title, '</a></th>'; |
| } |
| |
| //find and store the user's IP address and hostname: |
| $ip = (isset($_SERVER['REMOTE_ADDR']) ? $_SERVER['REMOTE_ADDR'] : 'N/A'); |
| if (isset($_SESSION['host'])) |
| { |
| $host = $_SESSION['host']; |
| } |
| else |
| { |
| $_SESSION['host'] = $host = @gethostbyaddr($ip); |
| } |
| |
| if ($banned_list != '' && ($b_list = @file($banned_list))) |
| //make sure the IP or hostname is not banned |
| { |
| for ($i=0; $i<count($b_list); $i++) |
| { |
| $b_list[$i] = rtrim($b_list[$i]); |
| } |
| if (match_in_array($ip, $b_list) || match_in_array($host, $b_list)) |
| { |
| echo $html_heading; |
| show_header(); |
| echo '<p>Sorry, the administrator has blocked your IP address or hostname.</p>'; |
| show_footer(); |
| die(); |
| } |
| } |
| |
| function ok_to_log() |
| //returns true if the ip or hostname is not in $dont_log_these_ips |
| { |
| global $ip, $host, $dont_log_these_ips; |
| return (!(match_in_array($ip, $dont_log_these_ips) || |
| ($host != 'N/A' && match_in_array($host, $dont_log_these_ips)))); |
| } |
| |
| if ($use_login_system && isset($_POST['user'], $_POST['pass']) |
| && $_POST['user'] != '' && $_POST['pass'] != '') |
| //check login |
| { |
| if (check_login($_POST['user'], md5($_POST['pass']))) |
| { |
| if ($log_file != '' && ok_to_log()) |
| { |
| if ($write = @fopen($log_file, 'ab')) |
| { |
| fwrite($write, date($date_format)."\t".date('H:i:s') |
| ."\t$ip\t$host\t$referrer\t$dir\tSuccessful Login (username: " |
| .$_POST['user'].")\n"); |
| fclose($write); |
| } |
| } |
| $_SESSION['user'] = $_POST['user']; |
| $_SESSION['pass'] = md5($_POST['pass']); |
| unset($_POST['pass'], $_POST['user']); |
| redirect($this_file.'dir='.translate_uri($subdir)); |
| } |
| else |
| { |
| echo '<h3>Invalid Login.</h3>'; |
| if ($log_file != '' && ok_to_log()) |
| { |
| if ($write = @fopen($log_file, 'ab')) |
| { |
| fwrite($write, date($date_format)."\t".date('H:i:s') |
| ."\t$ip\t$host\t$referrer\t$dir\tInvalid Login (username: " |
| .$_POST['user'].")\n"); |
| fclose($write); |
| } |
| } |
| sleep(1); //"freeze" the script for a second to prevent brute force attacks |
| } |
| } |
| |
| if ($use_login_system && $must_login_to_download && !logged_in()) |
| //must login to download |
| { |
| echo $html_heading; |
| show_header(); |
| echo '<p>You must login to download and view files.</p>'; |
| show_login_box(); |
| show_footer(); |
| die(); |
| } |
| |
| if ($md5_show && isset($_GET['md5'])) |
| { |
| $file = $dir.eval_dir(rawurldecode($_GET['md5'])); |
| if (!@is_file($file)) |
| { |
| header('HTTP/1.0 404 Not Found'); |
| die($html_heading.'<p>Error: file does not exist.</p>'); |
| } |
| $size = (int)@filesize($file); |
| if ($size <= 0 || $size/1048576 > $md5_show) |
| { |
| die($html_heading.'<p><strong>Error</strong>: empty file, or file too big to find the md5sum of (according to the $md5_show variable).</p>'); |
| } |
| die(md5_file($file)); |
| } |
| |
| if ($thumbnail_height > 0 && isset($_GET['thumbnail']) && $_GET['thumbnail'] != '') |
| { |
| $file = $dir.eval_dir(rawurldecode($_GET['thumbnail'])); |
| display_thumbnail($file, $thumbnail_height); |
| } |
| |
| if (isset($_GET['sort'])) |
| { |
| $_SESSION['sort'] = $_GET['sort']; |
| } |
| else if (!isset($_SESSION['sort'])) |
| { |
| //'a' is ascending, 'd' is descending |
| $_SESSION['sort'] = 'a'; |
| } |
| |
| if (isset($_GET['sortMode'])) |
| { |
| $_SESSION['sortMode'] = $_GET['sortMode']; |
| } |
| else if (!isset($_SESSION['sortMode'])) |
| { |
| /* |
| * 'f' is filename |
| * 't' is filetype |
| * 'h' is downloads (hits) |
| * 's' is size |
| * 'm' is date (modified) |
| * 'd' is description |
| */ |
| $_SESSION['sortMode'] = 'f'; |
| } |
| |
| //size of the "chunks" that are read at a time from the file (when $force_download is on) |
| $speed = ($bandwidth_limit ? $bandwidth_limit : 8); |
| |
| if ($folder_expansion) |
| { |
| if (!isset($_SESSION['expanded'])) |
| { |
| $_SESSION['expanded'] = array(); |
| } |
| if (isset($_GET['expand']) && $_GET['expand'] != '') |
| { |
| $temp = $dir.eval_dir(rawurldecode($_GET['expand'])); |
| if (@is_dir($temp) && !in_array($temp, $_SESSION['expanded'])) |
| { |
| $_SESSION['expanded'][] = $temp; |
| } |
| } |
| if (isset($_GET['collapse']) && $_GET['collapse'] != '') |
| { |
| $temp = $dir.eval_dir(rawurldecode($_GET['collapse'])); |
| if (in_array($temp, $_SESSION['expanded'])) |
| { |
| array_splice($_SESSION['expanded'], array_search($temp, $_SESSION['expanded']), 1); |
| } |
| } |
| } |
| |
| if ($allow_uploads && (!$use_login_system || logged_in())) |
| //upload a file |
| { |
| if ($count_files = count($_FILES)) |
| { |
| echo $html_heading; |
| show_header(); |
| $uploaded_files = $errors = ''; |
| for ($i=0; $i<$count_files; $i++) |
| { |
| $filename = get_basename($_FILES[$i]['name']); |
| if ($filename == '') |
| { |
| continue; |
| } |
| if (is_hidden($filename)) |
| { |
| $errors .= "<li>$filename [filename is listed as a hidden file]</li>"; |
| continue; |
| } |
| $filepath = $base_dir.eval_dir(rawurldecode($_POST['dir'])); |
| $fullpathname = realpath($filepath).'/'.$filename; |
| if (!$allow_file_overwrites && @file_exists($fullpathname)) |
| { |
| $errors .= "<li>$filename [file already exists]</li>"; |
| } |
| else if (@move_uploaded_file($_FILES[$i]['tmp_name'], $fullpathname)) |
| { |
| @chmod($fullpathname, 0644); |
| $uploaded_files .= "<li>$filename</li>"; |
| if ($log_file != '' && ok_to_log() && ($write = @fopen($log_file, 'ab'))) |
| { |
| fwrite($write, date($date_format)."\t".date('H:i:s') |
| . "\t$ip\t$host\t$referrer\t$dir\tFile uploaded: $filepath$filename\n"); |
| fclose($write); |
| } |
| } |
| else |
| { |
| $errors .= "<li>$filename</li>"; |
| } |
| } |
| if ($errors == '') |
| { |
| $errors = '<br />[None]'; |
| } |
| if ($uploaded_files == '') |
| { |
| $uploaded_files = '<br />[None]'; |
| } |
| echo "<p><strong>Uploaded files</strong>: $uploaded_files</p><p><strong>Failed files</strong>: $errors</p>", |
| '<p><a class="default_a" href="', $this_file, 'dir=', |
| $_POST['dir'], '">Continue.</a></p>'; |
| show_footer(); |
| die(); |
| } |
| else if (isset($_POST['numUpload'])) |
| { |
| echo $html_heading; |
| show_header(); |
| echo "<table border='0' cellpadding='8' cellspacing='0'><tr class='paragraph'><td class='default_td'> |
| <form enctype='multipart/form-data' action='$this_file' method='post'> |
| <input type='hidden' name='dir' value='", $_POST['dir'], "' />\n"; |
| $num = (int)$_POST['numUpload']; |
| for ($i=0; $i<$num; $i++) |
| { |
| $n = $i + 1; |
| echo "\t\t{$words['file']} $n : <input name='$i' type='file' /><br />\n"; |
| } |
| echo '<p><input class="button" type="submit" value="Upload Files" /> |
| </p></form></td></tr></table>'; |
| show_footer(); |
| die(); |
| } |
| } |
| |
| if ($use_login_system && logged_in() && is_admin()) |
| { |
| $con = '<p><a class="default_a" href="'.$this_file.'dir=' |
| .translate_uri($subdir).'">Continue.</a></p>'; |
| |
| if (isset($_GET['getcreate'])) |
| { |
| echo $html_heading; |
| show_header(); |
| echo "<table border='0' cellpadding='8' cellspacing='0'><tr class='paragraph'><td class='default_td'> |
| Enter the name of the folder you would like to create: |
| <form method='get' action='$this_file'> |
| <input type='hidden' name='dir' value='", translate_uri($subdir), "' />"; |
| if ($index != '' && strpos($index, '?') !== false) |
| { |
| $id_temp = explode('=', $index, 2); |
| $id_temp[0] = substr(strstr($id_temp[0], '?'), 1); |
| echo "<input type='hidden' name='$id_temp[0]' value='$id_temp[1]' />"; |
| } |
| echo '<p><input type="text" name="create" /></p> |
| <p><input class="button" type="submit" value="Create" /></p> |
| </form></td></tr></table>'; |
| show_footer(); |
| die(); |
| } |
| else if (isset($_GET['create']) && $_GET['create'] != '') |
| { |
| $p = $dir.eval_dir($_GET['create']); |
| $msg = (@file_exists($p) ? 'Folder already exists: ' : (mkdir_recursive($p) ? 'Folder successfully created: ' : 'Could not create folder: ')); |
| echo $html_heading; |
| show_header(); |
| echo $msg, htmlentities($p), $con; |
| show_footer(); |
| die(); |
| } |
| else if ($description_file != '' && isset($_GET['descFile']) && $_GET['descFile'] != '') |
| { |
| if (isset($_GET['desc'])) |
| { |
| $desc = trim(rawurldecode($_GET['desc'])); |
| $descFile = trim(rawurldecode($_GET['descFile'])); |
| edit_description($dir.$descFile, $desc); |
| } |
| else |
| { |
| $filen = rawurldecode($_GET['descFile']); |
| echo $html_heading; |
| show_header(); |
| echo "<table border='0' cellpadding='8' cellspacing='0'> |
| <tr class='paragraph'><td class='default_td'> |
| Enter the new description for the file <em>$filen</em>: |
| <form method='get' action='$this_file'> |
| <input type='hidden' name='dir' value='", translate_uri($subdir), "' /> |
| <input type='hidden' name='descFile' value='", translate_uri($filen), '\' />'; |
| if ($index != '' && strpos($index, '?') !== false) |
| { |
| $id_temp = explode('=', $index, 2); |
| $id_temp[0] = substr(strstr($id_temp[0], '?'), 1); |
| echo "<input type='hidden' name='$id_temp[0]' value='$id_temp[1]' />"; |
| } |
| echo '<p><input type="text" name="desc" size="50" value="', |
| get_stored_info($dir.$filen, $description_file), '" /></p> |
| <p><input class="button" type="submit" value="Change" /></p> |
| </form></td></tr></table>'; |
| show_footer(); |
| die(); |
| } |
| } |
| else if (isset($_GET['edit_links'])) |
| { |
| echo $html_heading; |
| show_header(); |
| echo '<table border="0" cellpadding="8" cellspacing="0"> |
| <tr class="paragraph"><td class="default_td">'; |
| if ($links_file == '') |
| { |
| echo '<p>The link system is not in use.<br />To turn it on, set the $links_file variable.</p>'; |
| } |
| else if (isset($_GET['link'], $_GET['name']) && $_GET['link'] != '') |
| { |
| if ($handle = @fopen($dir.$links_file, 'ab')) |
| { |
| fwrite($handle, $_GET['link'].'|'.$_GET['name']."\n"); |
| fclose($handle); |
| echo '<p>Link added.</p>'; |
| } |
| else |
| { |
| echo '<p>Could not open links_file for writing.</p>'; |
| } |
| } |
| else if (isset($_GET['remove'])) |
| { |
| if (($list = @file($dir.$links_file)) && ($handle = @fopen($dir.$links_file, 'wb'))) |
| { |
| for ($i=0; $i<count($list); $i++) |
| { |
| if (rtrim($list[$i]) != rtrim($_GET['remove'])) |
| { |
| fwrite($handle, $list[$i]); |
| } |
| } |
| fclose($handle); |
| echo '<p>Link removed.</p>'; |
| } |
| else |
| { |
| echo '<p>Could not open links_file.</p>'; |
| } |
| } |
| else |
| { |
| echo '<h3>Add a new link:</h3><div class"small">for the directory <em>', htmlentities($dir), |
| "</em></div><form method='get' action='$this_file'>", |
| '<input type="hidden" name="dir" value="', translate_uri($subdir), |
| '" /><p>URL: <input type="text" name="link" size="40" value="http://" /> |
| <br />Name: <input type="text" name="name" size="35" /> |
| <br /><span class="small">(Leave "name" blank for the URL itself to be shown.)</span></p>'; |
| if ($index != '' && strpos($index, '?') !== false) |
| { |
| $id_temp = explode('=', $index, 2); |
| $id_temp[0] = substr(strstr($id_temp[0], '?'), 1); |
| echo "<input type='hidden' name='$id_temp[0]' value='$id_temp[1]' />"; |
| } |
| echo '<input type="hidden" name="edit_links" value="true" /> |
| <p><input class="button" type="submit" value="Add" /></p></form></td></tr></table></p>', |
| '<p><table border="0" cellpadding="8" cellspacing="0"><tr class="paragraph"><td class="default_td">', |
| '<h3>Remove a link:</h3>', "<form method='get' action='$this_file'>"; |
| if ($index != '' && strpos($index, '?') !== false) |
| { |
| $id_temp = explode('=', $index, 2); |
| $id_temp[0] = substr(strstr($id_temp[0], '?'), 1); |
| echo "<input type='hidden' name='$id_temp[0]' value='$id_temp[1]' />"; |
| } |
| echo '<input type="hidden" name="dir" value="', translate_uri($subdir), '" />', |
| '<input type="hidden" name="edit_links" value="true" />'; |
| $list = @file($dir.$links_file) or $list = array(); |
| echo '<select name="remove">'; |
| for ($i=0; $i<count($list); $i++) |
| { |
| echo '<option>'.$list[$i].'</option>'; |
| } |
| echo '</select><p><input class="button" type="submit" value="Delete" /></form></p>'; |
| } |
| echo '</p></td></tr></table>', $con; |
| show_footer(); |
| die(); |
| } |
| else if (isset($_GET['copyFile'], $_GET['protocol'])) |
| { |
| echo $html_heading; |
| show_header(); |
| if ($_GET['copyFile'] == '') |
| { |
| echo '<p>Please go back and enter a file to copy.</p>', $con; |
| show_footer(); |
| die(); |
| } |
| $remote = $_GET['protocol'].$_GET['copyFile']; |
| $local = $dir.get_basename($remote); |
| if (!$allow_file_overwrites && @file_exists($local)) |
| { |
| echo "File already exists: <em>$local</em>$con"; |
| show_footer(); |
| die(); |
| } |
| $r = @fopen($remote, 'rb') or die("<p>Cannot open remote file for reading: <em>$remote</em></p>$con"); |
| $l = @fopen($local, 'wb') or die("<p>Cannot open local file for writing: <em>$local</em></p>$con"); |
| while (true) |
| { |
| $temp = fread($r, 8192); |
| if ($temp === '') |
| { |
| break; |
| } |
| fwrite($l, $temp); |
| } |
| fclose($l); |
| fclose($r); |
| echo "<p>Remote file <em>$remote</em> successfully copied to <em>$local</em></p>$con"; |
| show_footer(); |
| die(); |
| } |
| else if (isset($_GET['copyURL'])) |
| { |
| echo $html_heading; |
| show_header(); |
| echo "<table border='0' cellpadding='8' cellspacing='0'> |
| <tr class='paragraph'><td class='default_td'> |
| Enter the name of the remote file you would like to copy: |
| <form method='get' action='$this_file'> |
| <input type='hidden' name='dir' value='", translate_uri($subdir), "' />"; |
| if ($index != '' && strpos($index, '?') !== false) |
| { |
| $id_temp = explode('=', $index, 2); |
| $id_temp[0] = substr(strstr($id_temp[0], '?'), 1); |
| echo "<input type='hidden' name='$id_temp[0]' value='$id_temp[1]' />"; |
| } |
| echo '<p><input type="radio" name="protocol" value="http://" checked="checked" />http:// |
| <br /><input type="radio" name="protocol" value="ftp://" />ftp:// |
| <input type="text" name="copyFile" /></p> |
| <p><input class="button" type="submit" value="Copy" /></p> |
| </form></td></tr></table>'; |
| show_footer(); |
| die(); |
| } |
| else if (isset($_GET['rename']) && $_GET['rename'] != '') |
| { |
| echo $html_heading; |
| show_header(); |
| echo '<table border="0" cellpadding="8" cellspacing="0"> |
| <tr class="paragraph"><td class="default_td">'; |
| $p = $dir.eval_dir(rawurldecode($_GET['rename'])); |
| if (isset($_GET['newName']) && $_GET['newName'] != '') |
| { |
| $new_name = $dir.eval_dir(rawurldecode($_GET['newName'])); |
| if ($p == $new_name) |
| { |
| $msg = 'The filename is unchanged for '; |
| } |
| else if (@rename($p, $new_name)) |
| { |
| $msg = 'Rename successful for '; |
| if ($download_count != '') |
| { |
| $l = @file($download_count) or $l = array(); |
| if ($h = @fopen($download_count, 'wb')) |
| { |
| for ($i=0; $i<count($l); $i++) |
| { |
| $regex = '/^'.preg_quote($p, '/').'/'; |
| fwrite($h, preg_replace($regex, $new_name, $l[$i])); |
| } |
| fclose($h); |
| } |
| } |
| if ($description_file != '') |
| { |
| $l = @file($description_file) or $l = array(); |
| if ($h = @fopen($description_file, 'wb')) |
| { |
| for ($i=0; $i<count($l); $i++) |
| { |
| $regex = '/^'.preg_quote($p, '/').'/'; |
| fwrite($h, preg_replace($regex, $new_name, $l[$i])); |
| } |
| fclose($h); |
| } |
| } |
| } |
| else |
| { |
| $msg = 'Rename failed for '; |
| } |
| echo $msg, htmlentities($p), $con, '</td></tr></table>'; |
| show_footer(); |
| die(); |
| } |
| echo '<p>Renaming <em>', htmlentities($p), "</em></p><p>New Filename: |
| <br /><span class='small'>(you can also move the file by specifying a path)</span> |
| </p><form method='get' action='$this_file'> |
| <input type='hidden' name='dir' value='", translate_uri($subdir), "' /> |
| <input type='hidden' name='rename' value='", translate_uri($_GET['rename']), '\' />'; |
| if ($index != '' && strpos($index, '?') !== false) |
| { |
| $id_temp = explode('=', $index, 2); |
| $id_temp[0] = substr(strstr($id_temp[0], '?'), 1); |
| echo "<input type='hidden' name='$id_temp[0]' value='$id_temp[1]' />"; |
| } |
| echo '<input type="text" name="newName" size="40" value="', $_GET['rename'], '" /> |
| <p><input class="button" type="submit" value="Rename" /></p></form></td></tr></table>'; |
| show_footer(); |
| die(); |
| } |
| else if (isset($_GET['delete']) && $_GET['delete'] != '') |
| { |
| echo $html_heading; |
| show_header(); |
| echo '<table border="0" cellpadding="8" cellspacing="0"> |
| <tr class="paragraph"><td class="default_td">'; |
| $_GET['delete'] = rawurldecode($_GET['delete']); |
| $p = $dir.eval_dir($_GET['delete']); |
| if (isset($_GET['sure'])) //delete the file |
| { |
| if (@is_dir($p)) |
| { |
| $msg = (rmdir_recursive($p) ? 'Folder successfully deleted: ' |
| : 'Could not delete folder: '); |
| } |
| else if (@is_file($p)) |
| { |
| $msg = (@unlink($p) ? 'File successfully deleted: ' |
| : 'Could not delete file: '); |
| } |
| else |
| { |
| $msg = 'File or folder does not exist: '; |
| } |
| } |
| else //ask user for confirmation |
| { |
| $msg = 'Are you sure you want to delete <em>'; |
| $con = '</em><p><a class="default_a" href="'.$this_file.'dir=' |
| .translate_uri($subdir).'&delete='.translate_uri($_GET['delete']) |
| .'&sure=true">Yes, delete it.</a></p><p><a class="default_a" href="' |
| .$this_file.'dir='.translate_uri($subdir).'">No, go back.</a></p>'; |
| } |
| echo $msg, htmlentities($p), $con, '</td></tr></table>'; |
| show_footer(); |
| die(); |
| } |
| else if (isset($_GET['config'])) |
| { |
| if (@is_file($config_generator)) |
| { |
| define('CONFIG', true); |
| if (!@include($config_generator)) |
| { |
| die("$html_heading<p>Error including file <em>$config_generator</em></p>"); |
| } |
| die(); |
| } |
| else |
| { |
| die("$html_heading<p>File <em>$config_generator</em> not found.</p>"); |
| } |
| } |
| else if (isset($_GET['edit_ban'])) |
| { |
| echo $html_heading; |
| show_header(); |
| echo '<table border="0" cellpadding="8" cellspacing="0"> |
| <tr class="paragraph"><td class="default_td">'; |
| if ($banned_list == '') |
| { |
| echo '<p>The banning system is not in use.<br />To turn it on, set the $banned_list variable.</p>'; |
| } |
| else if (isset($_GET['add_ban'])) |
| { |
| if ($handle = @fopen($banned_list, 'ab')) |
| { |
| fwrite($handle, $_GET['add_ban']."\n"); |
| fclose($handle); |
| echo '<p>Ban added.</p>'; |
| } |
| else |
| { |
| echo '<p>Could not open ban_list file for writing.</p>'; |
| } |
| } |
| else if (isset($_GET['del_ban'])) |
| { |
| $del_ban = rtrim($_GET['del_ban']); |
| if (($list = @file($banned_list)) && ($handle = @fopen($banned_list, 'wb'))) |
| { |
| for ($i=0; $i<count($list); $i++) |
| { |
| if (rtrim($list[$i]) != $del_ban) |
| { |
| fwrite($handle, $list[$i]); |
| } |
| } |
| fclose($handle); |
| echo '<p>Ban removed.</p>'; |
| } |
| else |
| { |
| echo '<p>Could not open ban_list file.</p>'; |
| } |
| } |
| else |
| { |
| echo '<h3>Add a new ban:</h3>', |
| "<form method='get' action='$this_file'>", |
| 'IP address or hostname: <input type="text" name="add_ban" size="35" /> |
| <br /><span class="small">You can use wildcards if you want (*, ?, +)</span></p>'; |
| if ($index != '' && strpos($index, '?') !== false) |
| { |
| $id_temp = explode('=', $index, 2); |
| $id_temp[0] = substr(strstr($id_temp[0], '?'), 1); |
| echo "<input type='hidden' name='$id_temp[0]' value='$id_temp[1]' />"; |
| } |
| echo '<input type="hidden" name="edit_ban" value="true" /> |
| <p><input class="button" type="submit" value="Add" /></p></form></td></tr></table></p>', |
| '<table border="0" cellpadding="8" cellspacing="0"><tr class="paragraph"><td class="default_td">', |
| '<h3>Remove a ban:</h3>'."<form method='get' action='$this_file'>"; |
| if ($index != '' && strpos($index, '?') !== false) |
| { |
| $id_temp = explode('=', $index, 2); |
| $id_temp[0] = substr(strstr($id_temp[0], '?'), 1); |
| echo "<input type='hidden' name='$id_temp[0]' value='$id_temp[1]' />"; |
| } |
| echo '<input type="hidden" name="edit_ban" value="true" />'; |
| $list = @file($banned_list) or $list = array(); |
| echo '<select name="del_ban">'; |
| for ($i=0; $i<count($list); $i++) |
| { |
| echo '<option>'.$list[$i].'</option>'; |
| } |
| echo '</select><p><input class="button" type="submit" value="Remove" /></form>'; |
| } |
| echo '</p></td></tr></table>', $con; |
| show_footer(); |
| die(); |
| } |
| } |
| |
| function get_change_color($num) |
| { |
| if ($num > 0) |
| { |
| return '<span style="color: #00FF00;">+'; |
| } |
| if ($num < 0) |
| { |
| return '<span style="color: #FF0000;">'; |
| } |
| return '<span style="color: #000000;">'; |
| } |
| |
| if ($use_login_system && isset($_GET['log'])) |
| //logfile viewer |
| { |
| echo $html_heading; |
| show_header(); |
| if (!logged_in() || !is_admin()) |
| { |
| echo '<p>You must be logged in as an admin to access this page.</p>'; |
| } |
| else if ($log_file == '') |
| { |
| echo '<p>The logging system is not in use. |
| <br />To turn it on, set the $log_file variable.</p>'; |
| } |
| else if (isset($_GET['view'])) |
| { |
| $log = @file($log_file) or die("Cannot open log file: <em>$log_file</em>"); |
| $count_log = count($log); |
| $max_to_display = (int)$_GET['view']; |
| $num = (($max_to_display == 0) ? $count_log : min($max_to_display, $count_log)); |
| echo "<p>Last $num log entries (of $count_log".')</p><table width="100%"><tr> |
| <th class="default_th"> </th><th class="default_th">Date</th> |
| <th class="default_th">Time</th><th class="default_th">IP</th> |
| <th class="default_th">Hostname</th><th class="default_th">Referrer</th> |
| <th class="default_th">File/Folder Viewed</th><th class="default_th">Other</th></tr>'; |
| for ($i=0; $i<$num; $i++) |
| { |
| $entries = explode("\t", rtrim($log[$count_log-$i-1])); |
| $num_entries = count($entries); |
| if ($num_entries > 5) |
| { |
| echo "\n<tr class=", (($i % 2) ? '"dark_row">' : '"light_row">'), |
| '<td class="default_td"><strong>', ($i + 1), '</strong></td>'; |
| for ($j=0; $j<$num_entries; $j++) |
| { |
| echo '<td class="default_td">', (($j == 4 && $entries[4] != 'N/A') ? |
| '<a class="default_a" href="'.$entries[$j].'">'.htmlentities($entries[$j]).'</a>' : |
| htmlentities($entries[$j])).'</td>'; |
| } |
| if ($num_entries === 6) |
| { |
| echo '<td class="default_td"> </td>'; |
| } |
| echo '</tr>'; |
| } |
| } |
| echo '</table>'; |
| } |
| else if (isset($_GET['stats'])) |
| { |
| if (!@include($path_to_language_files.'country_codes.php')) |
| { |
| die("<p>File not found: <em>{$path_to_language_files}country_codes.php</em></p>"); |
| } |
| $extensions = $dates = $unique_hits = $countries = array(); |
| $total_hits = 0; |
| $h = @fopen($log_file, 'rb') or die("<p>Cannot open log file: <em>$log_file</em></p>"); |
| while (!feof($h)) |
| { |
| $entries = explode("\t", rtrim(fgets($h, 1024))); |
| if (count($entries) > 5) |
| { |
| //find the number of unique visits |
| if ($entries[5] == $base_dir) |
| { |
| $total_hits++; |
| if (!in_array($entries[3], $unique_hits)) |
| { |
| $unique_hits[] = htmlentities($entries[3]); |
| } |
| |
| //find country codes by hostnames |
| $cc = ext($entries[3]); |
| if (preg_match('/^[a-z]+$/i', $cc)) |
| { |
| add_num_to_array($cc, $countries); |
| } |
| |
| //find the dates of the visits |
| add_num_to_array($entries[0], $dates); |
| } |
| |
| //find file extensions |
| else if (($ext = ext($entries[5])) && preg_match('/^[\w-]+$/', $ext)) |
| { |
| add_num_to_array($ext, $extensions); |
| } |
| } |
| } |
| fclose($h); |
| $num_days = count($dates); |
| $avg = round($total_hits/$num_days); |
| |
| echo '<table width="40%"><tr><th class="default_th"> </th> |
| <th class="default_th">Total</th><th class="default_th">Daily</th></tr>', |
| "<tr class='light_row'><td class='default_td'>Hits</td> |
| <td class='default_td'>$total_hits</td><td class='default_td'>$avg", |
| '</td></tr><tr class="light_row"><td class="default_td">Unique Hits</td> |
| <td class="default_td">'.count($unique_hits).'</td><td class="default_td">', |
| round(count($unique_hits)/$num_days), |
| '</td></tr></table><p>Percent Unique: ', |
| number_format(count($unique_hits)/$total_hits*100, 1), '</p>'; |
| |
| arsort($extensions); |
| arsort($countries); |
| |
| $date_nums = array_values($dates); |
| echo '<p /><table width="75%" border="0"><tr><th class="default_th">Date</th> |
| <th class="default_th">Hits That Day</th><th class="default_th">Change From Previous Day</th> |
| <th class="default_th">Difference From Average ('.$avg.')</th></tr>'; |
| $i = 0; |
| foreach ($dates as $day => $num) |
| { |
| $diff = $num - $avg; |
| $change = (($i > 0) ? ($num - $date_nums[$i-1]) : 0); |
| $change_color = get_change_color($change); |
| $diff_color = get_change_color($diff); |
| |
| $class = (($i++ % 2) ? 'dark_row' : 'light_row'); |
| echo "<tr class='$class'><td class='default_td'>$day</td> |
| <td class='default_td'>$num</td> |
| <td class='default_td'>$change_color$change</span></td> |
| <td class='default_td'>$diff_color$diff</span></td></tr>"; |
| } |
| |
| echo '</table><p /><table width="75%" border="0"> |
| <tr><th class="default_th">Downloads based on file extensions</th> |
| <th class="default_th">Total</th><th class="default_th">Daily</th></tr>'; |
| $i = 0; |
| foreach ($extensions as $ext => $num) |
| { |
| $class = (($i++ % 2) ? 'dark_row' : 'light_row'); |
| echo "<tr class='$class'><td class='default_td'>$ext</td> |
| <td class='default_td'>$num</td><td class='default_td'>", |
| number_format($num/$num_days, 1), '</td></tr>'; |
| } |
| |
| echo '</table><p /><table width="75%" border="0"><tr> |
| <th class="default_th">Hostname ISP extension</th> |
| <th class="default_th">Total</th><th class="default_th">Daily</th></tr>'; |
| $i = 0; |
| foreach ($countries as $c => $num) |
| { |
| $c_code = (isset($country_codes[strtolower($c)]) ? ' <span class="small">('.$country_codes[strtolower($c)].')</span>' : ''); |
| $class = (($i++ % 2) ? 'dark_row' : 'light_row'); |
| echo "<tr class='$class'><td class='default_td'>$c{$c_code}</td><td class='default_td'>$num</td><td class='default_td'>", |
| number_format($num / $num_days, 1), "</td></tr>\n"; |
| } |
| echo '</table>'; |
| } |
| else |
| { |
| echo '<table border="0" cellpadding="8" cellspacing="0"> |
| <tr class="paragraph"><td class="default_td">' |
| ."<form method='get' action='$this_file'> |
| <input type='hidden' name='log' value='true' />"; |
| if ($index != '' && strpos($index, '?') !== false) |
| { |
| $id_temp = explode('=', $index, 2); |
| $id_temp[0] = substr(strstr($id_temp[0], '?'), 1); |
| echo "<input type='hidden' name='$id_temp[0]' value='$id_temp[1]' />"; |
| } |
| echo '<p>List the latest <input type="text" size="2" name="view" /> enties in the log file (0 to view all).<input class="button" type="submit" value="Go" /></p></form> |
| <p>or <a class="default_a" href="', $this_file, 'log=true&stats=true">view statistics</a>.</p></td></tr></table>'; |
| } |
| echo '<p><a class="default_a" href="', $this_file, '">Continue.</a></p>'; |
| show_footer(); |
| die(); |
| } |
| |
| if ($use_login_system && (isset($_POST['admin']) || isset($_GET['admin']))) |
| //user admin section |
| { |
| echo $html_heading; |
| show_header(); |
| if (!logged_in() || !is_admin()) |
| { |
| echo '<p>You must be logged in as an admin to access this page.</p>'; |
| } |
| else if (isset($_POST['username'], $_POST['password1'], $_POST['password2'], $_POST['admin'])) |
| { |
| $pwd_reg_exp = '^[A-Za-z0-9_-]+$'; |
| if (strlen($_POST['password1']) < 6) |
| { |
| echo '<p>Password must be at least 6 characters long.</p>'; |
| } |
| else if (!ereg($pwd_reg_exp, $_POST['username'])) |
| { |
| echo 'The username must only contain alpha-numeric characters, underscores, or dashes.', |
| '<br /><span class="small">It must match the regular expression: <strong>', |
| htmlentities($pwd_reg_exp), '</strong></span>'; |
| } |
| else if ($_POST['password1'] != $_POST['password2']) |
| { |
| echo '<p>Passwords do not match.</p>'; |
| } |
| else if (is_username($_POST['username'])) |
| { |
| echo '<p>That username already exists.</p>'; |
| } |
| else |
| { |
| $handle = @fopen($user_list, 'ab') or die("<p>Could not open file <em>$user_list</em> for writing.</p>"); |
| fwrite($handle, md5($_POST['password1']).$_POST['admin'].$_POST['username']."\n"); |
| fclose($handle); |
| echo '<p>User added. <a class="default_a" href="', $this_file, '">Continue.</a></p>'; |
| } |
| } |
| else if (isset($_POST['deluser'], $_POST['doit'])) |
| { |
| if ($_POST['doit']) |
| { |
| if (is_user_admin($_POST['deluser']) && num_admins() < 2) |
| { |
| echo '<p>You cannot remove this user because it is the only admin. |
| <br />Create another user with admin rights, then delete this user.</p> |
| <p><a class="default_a" href="', $this_file, '">Continue.</a></p>'; |
| } |
| else |
| { |
| $handle = @fopen($user_list, 'wb') or die("<p>Could not open file <strong>$user_list</strong> for writing.</p>"); |
| foreach ($global_user_list as $look) |
| { |
| if (strcasecmp($_POST['deluser'], substr(rtrim($look), 33)) !== 0) |
| { |
| fwrite($handle, $look); |
| } |
| } |
| fclose($handle); |
| echo '<p>User <strong>'.$_POST['deluser'].'</strong> has been removed. <a class="default_a" href="' |
| .$this_file.'">Continue.</a></p>'; |
| } |
| } |
| else |
| { |
| echo '<table border="0" cellpadding="8" cellspacing="0"><tr class="paragraph"><td class="default_td">', |
| 'Are you sure you want to remove <strong>', $_POST['deluser'], "</strong>?<p><form method='post' action='$this_file'>", |
| '<input type="hidden" name="doit" value="1" /><input type="hidden" name="admin" value="true" /><input type="hidden" name="deluser" value="', |
| $_POST['deluser'], '" /><input class="button" type="submit" value="Yes, do it." />', |
| '</form></td></tr></table>'; |
| } |
| } |
| else |
| { |
| echo " |
| <table border='0' cellpadding='8' cellspacing='0'> |
| <tr class='paragraph'><td class='default_td'> |
| <h3>Add a user:</h3> |
| <form method='post' action='$this_file'> |
| <p><input type='hidden' name='admin' value='true' /> |
| Username: <input type='text' name='username' /> |
| <br />Password: <input type='password' name='password1' /> |
| <br />Password: <input type='password' name='password2' /> |
| <br />Is Admin?: <select name='admin'> |
| <option selected='selected' value='0'>No</option> |
| <option value='1'>Yes</option></select></p> |
| <p><input class='button' type='submit' value='Add User' /></p> |
| </form></td></tr></table> |
| |
| <p /><table border='0' cellpadding='8' cellspacing='0'> |
| <tr class='paragraph'><td class='default_td'> |
| <h3>Delete a user:</h3> |
| <form method='post' action='$this_file'> |
| <p><input type='hidden' name='admin' value='true' /> |
| Select user to delete: <select name='deluser'>"; |
| foreach ($global_user_list as $look) |
| { |
| echo '<option>', substr($look, 33), '</option>'; |
| } |
| echo '</select><input type="hidden" name="doit" value="0" /></p> |
| <p><input class="button" type="submit" value="Delete" /></p></form> |
| </td></tr></table>'; |
| } |
| show_footer(); |
| die(); |
| } |
| else if ($use_login_system && isset($_GET['logout'])) |
| //logout |
| { |
| session_unset(); |
| session_destroy(); |
| redirect($this_file); |
| } |
| else if ($use_login_system && (isset($_POST['passwd']) || isset($_GET['passwd']))) |
| //change password |
| { |
| echo $html_heading; |
| show_header(); |
| if (!logged_in()) |
| { |
| echo '<p>You must login to access this page.</p>'; |
| } |
| else if (isset($_POST['oldpass'], $_POST['newpass1'], $_POST['newpass2'])) |
| { |
| if (strlen($_POST['newpass1']) < 6) |
| { |
| echo '<p>New password too short (must be at least 6 characters).</p>'; |
| } |
| else if ($_POST['newpass1'] != $_POST['newpass2']) |
| { |
| echo '<p>New passwords do not match.</p>'; |
| } |
| else if (check_login($_SESSION['user'], md5($_POST['oldpass']))) |
| { |
| $handle = @fopen($user_list, 'wb') or die("<p>Could not open file <strong>$user_list</strong> for writing.</p>"); |
| foreach ($global_user_list as $look) |
| { |
| fwrite($handle, ((strcasecmp($_SESSION['user'] , substr(rtrim($look), 33)) === 0) ? |
| md5($_POST['newpass1']).substr($look, 32) : $look)); |
| } |
| fclose($handle); |
| echo '<p>Password for <strong>'.$_SESSION['user'].'</strong> has been changed.<p>You must now <a class="default_a" href="' |
| .$this_file.'">logout</a>.</p>'; |
| } |
| else |
| { |
| echo '<p>Incorrect old password.</p>'; |
| } |
| } |
| else |
| { |
| echo "<table border='0' cellpadding='8' cellspacing='0'> |
| <tr class='paragraph'><td class='default_td'> |
| <form method='post' action='$this_file'> |
| <input type='hidden' name='passwd' value='true' /> |
| Old Password: <input type='password' name='oldpass' /> |
| <br />New Password: <input type='password' name='newpass1' /> |
| <br />New Password: <input type='password' name='newpass2' /> |
| <p><input class='button' type='submit' value='Change Password' /> |
| </form></td></tr></table>"; |
| } |
| show_footer(); |
| die(); |
| } |
| |
| $total_bytes = 0; |
| |
| if ($links_file != '' && isset($_GET['link'])) |
| //redirect to a link |
| { |
| if (ok_to_log()) |
| { |
| if ($log_file != '') |
| { |
| if ($write = @fopen($log_file, 'ab')) |
| { |
| fwrite($write, date($date_format)."\t".date('H:i:s') |
| ."\t$ip\t$host\t$referrer\t" |
| .$_GET['link']."\tLink file\n"); |
| fclose($write); |
| } |
| } |
| if ($download_count != '') |
| { |
| add_to_file($_GET['link'], $download_count); |
| } |
| } |
| redirect($_GET['link']); |
| } |
| |
| if ($file_dl != '') |
| //if the user specified a file to download, download it now |
| { |
| if (!@is_file($dir.$file_dl)) |
| { |
| header('HTTP/1.0 404 Not Found'); |
| echo $html_heading; |
| show_header(); |
| echo '<h3>Error 404: file not found</h3>', |
| htmlentities($dir . $file_dl), ' was not found on this server.'; |
| show_footer(); |
| die(); |
| } |
| |
| if ($anti_leech && !isset($_SESSION['ref']) && ($referrer == 'N/A' || !stristr($referrer, $_SERVER['SERVER_NAME']))) |
| { |
| if ($log_file != '' && ok_to_log()) |
| { |
| if ($write = @fopen($log_file, 'ab')) |
| { |
| fwrite($write, date($date_format)."\t".date('H:i:s') |
| ."\t$ip\t$host\t$referrer\t$dir$file_dl\tLeech Attempt\n"); |
| fclose($write); |
| } |
| } |
| $ref = (($referrer == 'N/A') ? 'typing it in the address bar...' : $referrer); |
| echo $html_heading; |
| show_header(); |
| echo '<h3>This PHP Script has an Anti-Leech feature turned on.<p>Make sure you are accessing this file directly from <a class="default_a" href="http://', |
| $_SERVER['SERVER_NAME'], '">', htmlentities($_SERVER['SERVER_NAME']), '</a></h3>', |
| 'It seems you are trying to get it from <strong>', "$ref</strong><p>Your IP address has been logged.<br />$ip ($host)"; |
| $index_link = 'http://'.$_SERVER['SERVER_NAME'].$this_file.'dir='.translate_uri($subdir); |
| echo '<p>Here is a link to the directory index the file is in:<br /><a class="default_a" href="', |
| $index_link, '">', htmlentities($index_link), '</a></p>'; |
| show_footer(); |
| die(); |
| } |
| |
| if (ok_to_log()) |
| { |
| if ($download_count != '') |
| { |
| add_to_file($dir.$file_dl, $download_count); |
| } |
| if ($log_file != '') |
| { |
| if ($write = @fopen($log_file, 'ab')) |
| { |
| fwrite($write, date($date_format)."\t".date('H:i:s') |
| ."\t$ip\t$host\t$referrer\t$dir$file_dl\n"); |
| fclose($write); |
| } |
| } |
| } |
| |
| if ($force_download) //use php to read the file, and tell the browser to download it |
| { |
| if (!($fn = @fopen($dir.$file_dl, 'rb'))) |
| { |
| die($html_heading.'<h3>Error 401: permission denied</h3> you cannot access <em>' |
| .htmlentities($file_dl).'</em> on this server.'); |
| } |
| $outname = get_basename($file_dl); |
| $size = @filesize($dir.$file_dl); |
| if ($size !== false) |
| { |
| header('Content-Length: '.$size); |
| } |
| header('Content-Type: '.find_mime_type(ext($outname)).'; name="'.$outname.'"'); |
| header('Content-Disposition: attachment; filename="'.$outname.'"'); |
| @set_time_limit(0); |
| while (true) |
| { |
| $temp = @fread($fn, (int)($speed * 1024)); |
| if ($temp === '') |
| { |
| break; |
| } |
| echo $temp; |
| flush(); |
| if ($bandwidth_limit) |
| { |
| sleep(1); |
| } |
| } |
| fclose($fn); |
| die(); |
| } |
| redirect(translate_uri($dir.$file_dl)); |
| } |
| |
| if ($log_file != '' && ok_to_log()) |
| //write to the logfile |
| { |
| if ($write = @fopen($log_file, 'ab')) |
| { |
| $log_str = date($date_format)."\t".date('H:i:s') |
| ."\t$ip\t$host\t$referrer\t$dir"; |
| if ($search != '') |
| { |
| $log_str .= "\tSearch: $search"; |
| } |
| fwrite($write, $log_str."\n"); |
| fclose($write); |
| } |
| else |
| { |
| echo '<p>Error: Could not write to logfile.</p>'; |
| } |
| } |
| |
| if ($anti_leech && !isset($_SESSION['ref'])) |
| { |
| $_SESSION['ref'] = 1; |
| } |
| |
| echo $html_heading; |
| show_header(); |
| |
| if (!@is_dir($dir)) |
| //make sure the subfolder exists |
| { |
| echo '<p><strong>Error: The folder <em>'.htmlentities($dir) |
| .'</em> does not exist.</strong></p>'; |
| $dir = $base_dir; |
| $subdir = ''; |
| } |
| |
| if ($enable_searching && $search != '') |
| //show the results of a search |
| { |
| echo '<table border="0" cellpadding="8" cellspacing="0"> |
| <tr class="paragraph"><td class="default_td"><p><strong>', |
| $words['search results'], '</strong> :<br /><span class="small">for <em>', |
| htmlentities($dir), '</em> and its subdirectories</span></p><p>'; |
| $results = search_dir($dir, $search); |
| natcasesort($results); |
| if ($_SESSION['sort'] == 'd' && $_SESSION['sortMode'] == 'f') |
| { |
| $results = array_reverse($results); |
| } |
| for ($i=0; $i<count($results); $i++) |
| { |
| $file = substr($results[$i], strlen($base_dir)); |
| echo '<a class="default_a" href="'.$this_file; |
| if (is_dir($base_dir.$file)) |
| { |
| echo 'dir='.translate_uri($file).'/">'; |
| if ($icon_path != '') |
| { |
| echo '<img height="16" width="16" alt="[dir]" src="', $icon_path, '/dir.png" /> '; |
| } |
| echo htmlentities($file)."/</a><br />\n"; |
| } |
| else if (preg_match('/\|$/', $file)) |
| { |
| $file = substr($file, 0, -1); |
| $display = get_stored_info($file, $dir.$links_file); |
| if ($display == '') |
| { |
| $display = $file; |
| } |
| echo 'dir=', translate_uri($subdir), '&link=', |
| translate_uri($file), '" title="Link to: ', $file, '">', |
| icon(ext($display)), htmlentities($display), '</a><br />'; |
| } |
| else |
| { |
| echo 'dir=', translate_uri(dirname($file)).'/&file=', |
| translate_uri(get_basename($file)), '">', |
| icon(ext($file)), htmlentities($file), "</a><br />\n"; |
| } |
| } |
| if (!count($results)) |
| { |
| echo '</p><p><strong>[ ', $words['no results'], ' ]</strong></p>'; |
| } |
| echo '</p><p>', $words['end of results'], ' (', count($results), ' ', |
| $words['found'], ')</p></td></tr></table>'; |
| show_search_box(); |
| echo '<p><a class="default_a" href="', $this_file, 'dir=', |
| translate_uri($subdir), '">Go back.</a></p>'; |
| show_footer(); |
| die(); |
| } |
| |
| //path navigation at the top |
| echo '<div>', $words['index of'], ' <a class="default_a" href="', $this_file, |
| 'dir=">', htmlentities(substr(str_replace('/', ' / ', $base_dir), 0, -2)), |
| '</a>/ '; |
| $exploded = explode('/', $subdir); |
| $c = count($exploded) - 1; |
| for ($i=0; $i<$c; $i++) |
| { |
| echo '<a class="default_a" href="', $this_file, 'dir='; |
| for ($j=0; $j<=$i; $j++) |
| { |
| echo translate_uri($exploded[$j]), '/'; |
| } |
| echo '">', htmlentities($exploded[$i]), '</a> / '; |
| } |
| |
| //begin the table |
| echo "</div>\n\n", '<table width="100%" border="0" cellpadding="0" cellspacing="2"><tr>'; |
| table_heading($words['file'], 'f', 'Sort by Filename'); |
| if ($show_type_column) |
| { |
| table_heading('Type', 't', 'Sort by Type'); |
| } |
| if ($download_count != '') |
| { |
| table_heading('Downloads', 'h', 'Sort by Hits'); |
| } |
| if ($show_size_column) |
| { |
| table_heading($words['size'], 's', 'Sort by Size'); |
| } |
| if ($show_date_column) |
| { |
| table_heading($words['modified'], 'm', 'Sort by Date'); |
| } |
| if ($description_file != '') |
| { |
| table_heading('Description', 'd', 'Sort by Description'); |
| } |
| echo '</tr>'; |
| |
| if ($subdir != '') |
| //if they are not in the root folder, have a link to the parent directory |
| { |
| echo '<tr class="light_row"><td class="default_td" colspan="6"><a class="default_a" href="', $this_file, 'dir='; |
| $subdir = substr($subdir, 0, -1); |
| echo translate_uri(substr($subdir, 0, strrpos($subdir,'/'))), '/">'; |
| if ($icon_path != '') |
| { |
| echo "<img height=\"16\" width=\"16\" src=\"$icon_path/back.png\" alt=\"[dir]\" /> "; |
| } |
| echo $words['parent directory'], '</a></td></tr>'; |
| $subdir .= '/'; |
| } |
| |
| flush(); |
| |
| $file_array = get_file_list($dir); |
| $size_array = $date_a_array = $date_m_array = $desc_array = $hit_array = $type_array = array(); |
| |
| $c = count($file_array); |
| for ($i=0; $i<$c; $i++) |
| { |
| $thisf = $dir.$file_array[$i]; |
| if (preg_match('/\|$/', $thisf)) //it is a link |
| { |
| $thisf = substr($thisf, 0, -1); |
| $type_array[] = ($show_type_column ? ext(get_stored_info(substr($file_array[$i], 0, -1), $dir.$links_file)) : ''); |
| $hit_array[] = (($download_count != '' && !@is_dir($thisf)) ? (int)(get_stored_info(substr($file_array[$i], 0, -1), $download_count)) : 0); |
| $date_m_array[] = 'N/A'; |
| $date_a_array[] = 'N/A'; |
| $size_array[] = '[Link]'; |
| } |
| else //it is an actual file or folder |
| { |
| $size_array[] = ($show_size_column ? (@is_dir($thisf) ? ($show_dir_size ? dir_size("$thisf/") : 0) : max((int)@filesize($thisf), 0)) : 0); |
| $type_array[] = (($show_type_column && !@is_dir($thisf)) ? ext($thisf) : ''); |
| $hit_array[] = (($download_count != '' && !@is_dir($thisf)) ? (int)(get_stored_info($thisf, $download_count)) : 0); |
| if ($show_date_column) |
| { |
| $date_m_array[] = filemtime($thisf); |
| $date_a_array[] = fileatime($thisf); |
| } |
| else |
| { |
| $date_m_array[] = 0; |
| $date_a_array[] = 0; |
| } |
| } |
| $desc_array[] = (($description_file == '') ? '' : get_stored_info($thisf, $description_file)); |
| } |
| |
| switch (strtolower($_SESSION['sortMode'])) |
| { |
| case 's': |
| array_multisort($size_array, $file_array, $date_m_array, |
| $date_a_array, $hit_array, $desc_array, $type_array); |
| break; |
| case 'm': |
| array_multisort($date_m_array, $file_array, $size_array, |
| $date_a_array, $hit_array, $desc_array, $type_array); |
| break; |
| case 'd': |
| array_multisort($desc_array, $file_array, $date_m_array, |
| $size_array, $date_a_array, $hit_array, $type_array); |
| break; |
| case 'h': |
| array_multisort($hit_array, $file_array, $date_m_array, |
| $size_array, $date_a_array, $desc_array, $type_array); |
| break; |
| case 't': |
| array_multisort($type_array, $file_array, $hit_array, |
| $date_m_array, $size_array, $date_a_array, $desc_array); |
| } |
| |
| if (strtolower($_SESSION['sort']) === 'd') |
| //if the current sort mode is set to descending, reverse all the arrays |
| { |
| $file_array = array_reverse($file_array); |
| $size_array = array_reverse($size_array); |
| $date_m_array = array_reverse($date_m_array); |
| $date_a_array = array_reverse($date_a_array); |
| $desc_array = array_reverse($desc_array); |
| $hit_array = array_reverse($hit_array); |
| $type_array = array_reverse($type_array); |
| } |
| |
| $folder_count = $file_count = $dl_count = 0; |
| |
| for ($i=0; $i<$c; $i++) |
| //display the list of files |
| { |
| $value = $file_array[$i]; |
| echo "\n<tr class=", (($i % 2 == ($subdir == '')) ? '"dark_row">' : '"light_row">'); |
| |
| //file column |
| echo '<td class="default_td" align="left" valign="top"><a class="default_a" href="', $this_file; |
| $npart = $dir . $value; |
| if (preg_match('/\|$/', $value)) //it is a link, not an actual file |
| { |
| $value = substr($value, 0, -1); |
| $npart = substr($npart, 0, -1); |
| $display = get_stored_info($value, $dir.$links_file); |
| if ($display == '') |
| { |
| $display = $value; |
| } |
| echo 'dir=', translate_uri($subdir), '&link=', |
| translate_uri($value), '" title="Link to: ', $value, '">', |
| icon(ext($display)), htmlentities($display), '</a>'; |
| } |
| else //it is a real file or folder |
| { |
| if (@is_dir($npart)) |
| { |
| $folder_count++; |
| if ($icon_path != '') |
| { |
| if ($folder_expansion) |
| { |
| $listVal = (in_array($npart, $_SESSION['expanded']) ? 'collapse' : 'expand'); |
| echo 'dir=', translate_uri($subdir), "&$listVal=", translate_uri($value), |
| '"><img height="16" width="16" alt="[dir]" src="', |
| $icon_path.'/dir.png" /></a> ', |
| '<a class="default_a" href="', $this_file, 'dir=', |
| translate_uri($subdir . $value), '/">'; |
| } |
| else |
| { |
| echo 'dir=', translate_uri($subdir . $value), '/">', |
| '<img height="16" width="16" alt="[dir]" src="', $icon_path, '/dir.png" /> '; |
| } |
| } |
| else |
| { |
| echo 'dir=', translate_uri($subdir . $value), '/">'; |
| } |
| echo htmlentities($value).'</a>'; |
| if ($show_folder_count) |
| { |
| $n = num_files($npart); |
| $s = (($n == 1) ? $words['file'] : $words['files']); |
| echo " [$n $s]"; |
| } |
| } |
| else //is a file |
| { |
| $file_count++; |
| echo 'dir=', translate_uri($subdir), '&file=', |
| translate_uri($value), "\">", |
| icon(ext($npart)), htmlentities($value), '</a>'; |
| if ($md5_show && $size_array[$i] > 0 && $size_array[$i] / 1048576 <= $md5_show) |
| { |
| echo ' [<a class="default_a" href="', $this_file, |
| 'dir=', translate_uri($subdir), '&md5=', |
| translate_uri($value), '"><span class="small">get md5sum</span></a>]'; |
| } |
| } |
| if ($use_login_system && logged_in() && is_admin()) |
| { |
| echo ' [<a class="default_a" href="', $this_file, 'dir='.translate_uri($subdir), |
| '&delete=', translate_uri($value), '"><span class="small">delete</span></a>, ', |
| '<a class="default_a" href="', $this_file, 'dir=', translate_uri($subdir), |
| '&rename=', translate_uri($value), '"><span class="small">rename/move</span></a>]'; |
| } |
| $age = (time() - $date_m_array[$i]) / 86400; |
| $age_r = round($age, 1); |
| $s = (($age_r == 1) ? '' : 's'); |
| if ($days_new && $age <= $days_new) |
| { |
| echo (($icon_path == '') ? ' <span class="small" style="color: #FF0000;">[New]</span>' |
| : ' <img alt="'."$age_r day$s".' old" height="14" width="28" src="'.$icon_path.'/new.png" />'); |
| } |
| if ($folder_expansion && @is_dir($npart) && in_array($npart, $_SESSION['expanded'])) |
| { |
| $ex_array = get_file_list($npart.'/'); |
| if ($_SESSION['sort'] == 'd' && $_SESSION['sortMode'] == 'f') |
| { |
| $ex_array = array_reverse($ex_array); |
| } |
| echo '<ul>'; |
| for ($j=0; $j<count($ex_array); $j++) |
| { |
| $element = $ex_array[$j]; |
| echo '<li><a class="default_a" href="'.$this_file |
| .((@is_file("$npart/$element")) ? 'dir='.translate_uri($subdir.$value).'/&file=' |
| .translate_uri($element).'">' : 'dir='.translate_uri("$subdir$value/$element/").'">'); |
| if (@is_file("$npart/$element")) |
| { |
| echo icon(ext($element)); |
| } |
| else if ($icon_path != '') |
| { |
| echo '<img height="16" width="16" alt="[dir]" src="', |
| $icon_path, '/dir.png" /> '; |
| } |
| echo htmlentities($element), "</a></li>\n"; |
| } |
| echo '</ul>'; |
| } |
| } |
| if ($use_login_system && $description_file != '' && logged_in() && is_admin()) |
| //"edit description" link |
| { |
| echo ' [<a class="default_a" href="', $this_file, 'dir=', |
| translate_uri($subdir), '&descFile=', translate_uri($value), |
| '"><span class="small">change description</span></a>]'; |
| } |
| |
| if ($thumbnail_height > 0 && in_array(ext($value), array('png', 'jpg', 'jpeg', 'gif')) && @is_file($npart)) |
| //display the thumbnail image |
| { |
| echo ' <a href="'.$this_file.'dir=', translate_uri($subdir), '&file=', |
| translate_uri($value), '"><img src="', $this_file, |
| 'dir=', translate_uri($subdir), '&thumbnail=', translate_uri($value), |
| '" alt="Thumbnail of ', $value, '" /></a>'; |
| } |
| |
| echo '</td>'; //end filename column |
| |
| //filetype column |
| if ($show_type_column) |
| { |
| echo '<td class="default_td" align="left" valign="top">', |
| (($type_array[$i] == '') ? ' ' : htmlentities($type_array[$i])), '</td>'; |
| } |
| |
| //hits column |
| if ($download_count != '') |
| { |
| $dl_count += $hit_array[$i]; |
| echo '<td class="default_td" align="right" valign="top">', |
| ((!@is_dir($npart)) ? $hit_array[$i] : ' '), '</td>'; |
| } |
| |
| //size column |
| if ($show_size_column) |
| { |
| echo '<td class="default_td" align="right" valign="top">'; |
| $ds = $size_array[$i]; |
| if ($ds === '[Link]') |
| { |
| echo $ds; |
| } |
| else |
| { |
| $total_bytes += $ds; |
| $size_h = get_filesize($ds); |
| echo (@is_dir($npart) ? |
| ($show_dir_size ? "<a title=\"$value/\n".number_format($ds, 0, '.', ',')." bytes ($size_h)\">$size_h</a>" : '[dir]') |
| : "<a title=\"$value\n".number_format($ds, 0, '.', ',')." bytes ($size_h)\">$size_h</a>"); |
| } |
| echo '</td>'; |
| } |
| |
| //date column |
| if ($show_date_column) |
| { |
| echo '<td class="default_td" align="right" valign="top">'; |
| if ($date_a_array[$i] == 'N/A') |
| { |
| echo 'N/A'; |
| } |
| else |
| { |
| $a = date($date_format.' h:i:s A', $date_a_array[$i]); |
| $m = date($date_format.' h:i:s A', $date_m_array[$i]); |
| echo "<a title=\"$value\nLast Modified: $m\nLast Accessed: $a\">", |
| date($date_format, $date_m_array[$i]), '</a>'; |
| } |
| echo '</td>'; |
| } |
| |
| //description column |
| if ($description_file != '') |
| { |
| echo '<td class="default_td" align="left" valign="top">', |
| (($desc_array[$i] != '') ? $desc_array[$i] : ' '), '</td>'; |
| } |
| |
| echo "</tr>\n"; |
| } |
| |
| //footer of the table |
| echo '<tr><th class="default_th"><span class="small">', "\n$file_count ", |
| $words[(($file_count == 1) ? 'file' : 'files')], |
| " - $folder_count ", $words['folders'], '</span></th>'; |
| if ($show_type_column) |
| { |
| echo "<th class='default_th'> </th>"; |
| } |
| if ($download_count != '') |
| { |
| echo "<th class='default_th'><span class='small'>Total: $dl_count</span></th>"; |
| } |
| if ($show_size_column) |
| { |
| echo '<th class="default_th"><span class="small">', $words['total size'], ': <a title="' ,$words['total size'], ":\n", |
| number_format($total_bytes, 0, '.', ','), ' bytes (', get_filesize($total_bytes), ')">', |
| get_filesize($total_bytes), "</a></span></th>\n"; |
| } |
| if ($show_date_column) |
| { |
| echo '<th class="default_th"> </th>'; |
| } |
| if ($description_file != '') |
| { |
| echo '<th class="default_th"> </th>'; |
| } |
| echo '</tr></table><div class="small" style="text-align: right;">Powered by <a class="default_a" href="http://autoindex.sourceforge.net/">AutoIndex PHP Script</a></div>'; |
| /* |
| * We request that you do not remove the link to the AutoIndex website. |
| * This not only gives respect to the large amount of time given freely by the |
| * developer, but also helps build interest, traffic, and use of AutoIndex. |
| */ |
| |
| echo "\n", '<table width="100%" border="0" cellpadding="0" cellspacing="2"> |
| <tr valign="top"><td>'; |
| if ($enable_searching) |
| { |
| show_search_box(); |
| } |
| |
| if ($use_login_system) |
| { |
| if (!logged_in()) |
| { |
| echo '</td><td>'; |
| show_login_box(); |
| } |
| else //show user options |
| { |
| echo '<br /><table border="0" cellpadding="8" cellspacing="0"><tr class="paragraph"><td class="default_td">'; |
| if (is_admin()) |
| { |
| echo '<p><a class="default_a" href="'.$this_file.'config=true">Reconfigure script</a></p>', |
| '<p><a class="default_a" href="'.$this_file.'admin=true">User account management</a>', |
| '<br /><a class="default_a" href="'.$this_file.'log=true">Log file viewer / statistics</a>', |
| '<br /><a class="default_a" href="'.$this_file.'edit_links=true&dir='.translate_uri($subdir).'">Links file editor</a>', |
| '<br /><a class="default_a" href="'.$this_file.'edit_ban=true">Edit ban list</a></p>', |
| '<p><a class="default_a" href="'.$this_file.'getcreate=true&dir='.translate_uri($subdir).'">Create a folder (in current directory)</a>', |
| '<br /><a class="default_a" href="'.$this_file.'copyURL=true&dir='.translate_uri($subdir).'">Copy a remote file (to current directory)</a></p>'; |
| } |
| echo '<p><a class="default_a" href="', $this_file, |
| 'passwd=true">Change password</a><br /><a class="default_a" href="', $this_file, |
| 'logout=true">Log out [ ', $_SESSION['user'], ' ]</a></p></td></tr></table>'; |
| } |
| } |
| echo '</td></tr></table>'; |
| |
| if ($allow_uploads && (!$use_login_system || logged_in())) |
| { |
| echo "<form method='post' action='$this_file'> |
| <input type='hidden' name='dir' value='$subdir' /> |
| Upload <select size='1' name='numUpload'>"; |
| for ($i=1; $i<=10; $i++) |
| { |
| echo "\t<option>$i</option>\n"; |
| } |
| echo '</select> file(s) to this folder <input type="submit" value="Go" /></form>'; |
| } |
| |
| if ($select_language) |
| { |
| echo '<p style="text-align: left;">Select Language:</p>', |
| "<form method='get' action='$this_file'><div><select name='lang'>"; |
| $l = get_all_files($path_to_language_files); |
| sort($l); |
| for ($i=0; $i<count($l); $i++) |
| { |
| if (@is_file($path_to_language_files.$l[$i]) && |
| preg_match('/^[a-z]{2}(_[a-z]{2})?\.php$/i', $l[$i])) |
| { |
| $f = substr(get_basename($l[$i]), 0, -4); |
| $sel = (($f == $_SESSION['lang']) ? ' selected="selected"' : ''); |
| echo "\t<option$sel>$f</option>\n"; |
| } |
| } |
| echo '</select><input type="submit" value="Change" />'; |
| if ($index != '' && strpos($index, '?') !== false) |
| { |
| $id_temp = explode('=', $index, 2); |
| $id_temp[0] = substr(strstr($id_temp[0], '?'), 1); |
| echo "<input type='hidden' name='$id_temp[0]' value='$id_temp[1]' />"; |
| } |
| echo '</div></form>'; |
| } |
| |
| show_footer(); |
| |
| //find time it took for the page to generate, in milliseconds |
| $page_time = round((get_microtime() - $start_time) * 1000, 1); |
| |
| echo ' |
| <!-- |
| |
| Powered by AutoIndex PHP Script (version '.VERSION.') |
| Copyright (C) 2002-2005 Justin Hagstrom |
| http://autoindex.sourceforge.net |
| |
| Page generated in ', $page_time, ' milliseconds. |
| |
| --> |
| '; //We request that you retain the above copyright notice. |
| |
| if ($index == '') |
| { |
| echo '</body></html>'; |
| } |
| |
| ?> |