Hacked By AnonymousFox
home/missmand/public_html/js/filemanager/upload.php 0000644 00000013545 15177306354 0016517 0 ustar 00 <?php
if (!isset($config)){
$config = include 'config/config.php';
//TODO switch to array
extract($config, EXTR_OVERWRITE);
}
include 'include/utils.php';
if ($_SESSION['RF']["verify"] != "RESPONSIVEfilemanager")
{
response(trans('forbiden').AddErrorLocation(), 403)->send();
exit;
}
include 'include/mime_type_lib.php';
if (isset($_POST['path']))
{
$storeFolder = $_POST['path'];
$storeFolderThumb = $_POST['path_thumb'];
}
else
{
$storeFolder = $current_path.$_POST["fldr"]; // correct for when IE is in Compatibility mode
$storeFolderThumb = $thumbs_base_path.$_POST["fldr"];
}
$path_pos = strpos($storeFolder,$current_path);
$thumb_pos = strpos($storeFolderThumb,$thumbs_base_path);
if ($path_pos!==0
|| $thumb_pos !==0
|| strpos($storeFolderThumb,'../',strlen($thumbs_base_path)) !== FALSE
|| strpos($storeFolderThumb,'./',strlen($thumbs_base_path)) !== FALSE
|| strpos($storeFolder,'../',strlen($current_path)) !== FALSE
|| strpos($storeFolder,'./',strlen($current_path)) !== FALSE )
{
response(trans('wrong path'.AddErrorLocation()))->send();
exit;
}
$path = $storeFolder;
$cycle = TRUE;
$max_cycles = 50;
$i = 0;
while ($cycle && $i < $max_cycles)
{
$i++;
if ($path == $current_path) $cycle = FALSE;
if (file_exists($path."config.php"))
{
require_once $path."config.php";
$cycle = FALSE;
}
$path = fix_dirname($path).'/';
}
if ( ! empty($_FILES))
{
$info = pathinfo($_FILES['file']['name']);
$mime_type = get_file_mime_type($_FILES['file']['tmp_name']);
$extension = get_extension_from_mime($mime_type);
if($extension==='' || $extension=='so'){
$extension = $info['extension'];
}
if (in_array(fix_strtolower($extension), $ext))
{
$tempFile = $_FILES['file']['tmp_name'];
$targetPath = $storeFolder;
$targetPathThumb = $storeFolderThumb;
$_FILES['file']['name'] = fix_filename($info['filename'].".".$extension,$transliteration,$convert_spaces, $replace_with);
// LowerCase
if ($lower_case)
{
$_FILES['file']['name'] = fix_strtolower($_FILES['file']['name']);
}
// Gen. new file name if exists
if (file_exists($targetPath.$_FILES['file']['name']))
{
$i = 1;
$info = pathinfo($_FILES['file']['name']);
// append number
while(file_exists($targetPath.$info['filename']."_".$i.".".$extension)) {
$i++;
}
$_FILES['file']['name'] = $info['filename']."_".$i.".".$extension;
}
$targetFile = $targetPath. $_FILES['file']['name'];
$targetFileThumb = $targetPathThumb. $_FILES['file']['name'];
// check if image (and supported)
if (in_array(fix_strtolower($extension),$ext_img)) $is_img=TRUE;
else $is_img=FALSE;
if (!checkresultingsize($_FILES['file']['size'])) {
response(sprintf(trans('max_size_reached'),$MaxSizeTotal).AddErrorLocation(), 406)->send();
exit;
}
// upload
move_uploaded_file($tempFile,$targetFile);
chmod($targetFile, 0755);
if ($is_img)
{
$memory_error = FALSE;
if ( ! create_img($targetFile, $targetFileThumb, 122, 91))
{
$memory_error = FALSE;
}
else
{
// TODO something with this long function baaaah...
if( ! new_thumbnails_creation($targetPath,$targetFile,$_FILES['file']['name'],$current_path,$relative_image_creation,$relative_path_from_current_pos,$relative_image_creation_name_to_prepend,$relative_image_creation_name_to_append,$relative_image_creation_width,$relative_image_creation_height,$relative_image_creation_option,$fixed_image_creation,$fixed_path_from_filemanager,$fixed_image_creation_name_to_prepend,$fixed_image_creation_to_append,$fixed_image_creation_width,$fixed_image_creation_height,$fixed_image_creation_option))
{
$memory_error = FALSE;
}
else
{
$imginfo = getimagesize($targetFile);
$srcWidth = $imginfo[0];
$srcHeight = $imginfo[1];
// resize images if set
if ($image_resizing)
{
if ($image_resizing_width == 0) // if width not set
{
if ($image_resizing_height == 0)
{
$image_resizing_width = $srcWidth;
$image_resizing_height = $srcHeight;
}
else
{
$image_resizing_width = $image_resizing_height*$srcWidth/$srcHeight;
}
}
elseif ($image_resizing_height == 0) // if height not set
{
$image_resizing_height = $image_resizing_width*$srcHeight/$srcWidth;
}
// new dims and create
$srcWidth = $image_resizing_width;
$srcHeight = $image_resizing_height;
create_img($targetFile, $targetFile, $image_resizing_width, $image_resizing_height, $image_resizing_mode);
}
//max resizing limit control
$resize = FALSE;
if ($image_max_width != 0 && $srcWidth > $image_max_width && $image_resizing_override === FALSE)
{
$resize = TRUE;
$srcWidth = $image_max_width;
if ($image_max_height == 0) $srcHeight = $image_max_width*$srcHeight/$srcWidth;
}
if ($image_max_height != 0 && $srcHeight > $image_max_height && $image_resizing_override === FALSE){
$resize = TRUE;
$srcHeight = $image_max_height;
if ($image_max_width == 0) $srcWidth = $image_max_height*$srcWidth/$srcHeight;
}
if ($resize) create_img($targetFile, $targetFile, $srcWidth, $srcHeight, $image_max_mode);
}
}
// not enough memory
if ($memory_error)
{
unlink($targetFile);
response(trans("Not enought Memory").AddErrorLocation(), 406)->send();
exit();
}
}
echo $_FILES['file']['name'];
}
else // file ext. is not in the allowed list
{
response(trans("Error_extension").AddErrorLocation(), 406)->send();
exit();
}
}
else // no files to upload
{
response(trans("no file").AddErrorLocation(), 405)->send();
exit();
}
// redirect
if (isset($_POST['submit']))
{
$query = http_build_query(array(
'type' => $_POST['type'],
'lang' => $_POST['lang'],
'popup' => $_POST['popup'],
'field_id' => $_POST['field_id'],
'fldr' => $_POST['fldr'],
));
header("location: dialog.php?" . $query);
}
home/missmand/public_html/learning/maia/upload.php 0000644 00000003111 15200041407 0016301 0 ustar 00 <?php
header('Content-type: application/json');
// Create function to set http response code.
if (!function_exists('http_response_code'))
{
function http_response_code($newcode = NULL)
{
static $code = 200;
if($newcode !== NULL)
{
header('X-PHP-Response-Code: '.$newcode, true, $newcode);
if(!headers_sent())
$code = $newcode;
}
return $code;
}
}
if(!isset($_FILES["sound"])) {
http_response_code(404);
die();
}
$error = NULL;
$target_dir = "../file/audio/";
$target_filename = time() . '-' . basename($_FILES["sound"]["name"]);
$target_file = __DIR__ . '/' . $target_dir . $target_filename;
$soundFileType = strtolower(pathinfo($target_file,PATHINFO_EXTENSION));
// Check if file already exists
if (file_exists($target_file)) {
$error = "Sorry, file already exists.";
}
// Check file size 50MB
if ($_FILES["sound"]["size"] > 50000000) {
$error = "file is too large";
}
// Allow certain file formats
if($soundFileType != "mp3") {
$error = "File format not supported";
}
// Check if $uploadOk is set to 0 by an error
if ($error != NULL) {
http_response_code(500);
echo json_encode(array("error"=>$error));
// if everything is ok, try to upload file
} else {
if (move_uploaded_file($_FILES["sound"]["tmp_name"], $target_file)) {
http_response_code(200);
echo json_encode(array("error"=>$error, "file"=> $target_filename));
} else {
http_response_code(500);
echo json_encode(array("error"=>'Error while uploading the file'));
}
}
?>
Hacked By AnonymousFox1.0, Coded By AnonymousFox