ave-cms/admin/browser.php

<?php

	/**
	 * AVE.cms
	 *
	 * @package AVE.cms
	 * @version 3.x
	 * @filesource
	 * @copyright © 2007-2014 AVE.cms, http://www.ave-cms.ru
	 *
	 * @license GPL v.2
	 */

	if (! defined('ACP') || !check_permission('mediapool_int'))
	{
		header('Location:index.php');
		exit;
	}

	global $AVE_DB, $AVE_Template;

	ob_start();
	ob_implicit_flush(0);

	$_REQUEST['onlycontent'] = 1;

	$max_size = 128; // максимальный размер миниатюры
	$thumb_size = '-t' . $max_size . 'x' . $max_size; // формат миниатюр
	$images_ext =  array('jpg', 'jpeg', 'png', 'gif', 'JPG', 'JPEG', 'PNG', 'GIF');

	$upload_path = BASE_DIR . '/' . UPLOAD_DIR;

	$lang = empty($_SESSION['admin_language'])
		? 'ru'
		: $_SESSION['admin_language'];

	$AVE_Template = new AVE_Template(BASE_DIR . '/admin/templates/browser');
	$AVE_Template->config_load(BASE_DIR . '/admin/lang/' . $lang . '/main.txt');
	$AVE_Template->assign('tpl_dir', 'templates/');
	$AVE_Template->assign('ABS_PATH', '../');

	if (! isset($_REQUEST['action']))
		$_REQUEST['action'] = '';

	switch ($_REQUEST['action'])
	{
		case 'list':
			$dir = (empty($_REQUEST['dir'])
				|| strpos($_REQUEST['dir'], '..') !== false
				|| strpos($_REQUEST['dir'], '//') !== false) ? '/' : $_REQUEST['dir'];

			$path = $upload_path . (is_dir($upload_path . $dir) ? $dir : '/');

			$new_dir = $path . (isset($_REQUEST['newdir']) ? $_REQUEST['newdir'] : '');
			$new_dir_rezult = (!is_dir($new_dir) && !mkdir($new_dir, 0777));

			$skip_entry = array(THUMBNAIL_DIR, 'recycled', 'index.php');

			$dirs = array();
			$files = array();

			$d = @dir($path);

			while (false !== ($entry = @$d->read()))
			{
				if (in_array($entry, $skip_entry) || $entry{0} === '.')
					continue;

				if (is_dir($path . $entry))
				{
					$dirs[$entry] = 'index.php?do=browser&type=' . $_REQUEST['type']
						. '&amp;action=list&amp;dir=' . $dir . $entry . '/';
				}
				else
				{
					$nameParts = explode('.', $entry);
					$ext = strtolower(end($nameParts));

					$file['icon'] = file_exists("templates/images/mediapool/{$ext}.gif") ? $ext : 'attach';
					$file['filesize'] = @round(@filesize($path . $entry)/1024, 2);
					$file['moddate'] = date("d.m.y, H:i", @filemtime($path . $entry));

					if (in_array($ext, $images_ext))
					{
						$nameParts[count($nameParts)-2] .= $thumb_size;
						$file['bild'] = '/' . UPLOAD_DIR . $dir . THUMBNAIL_DIR . '/' . implode('.', $nameParts);
					}
					else
					{
						$file['bild'] = 'templates/images/file.gif';
					}

					$files[$entry] = $file;
				}
			}

			$d->close();

			ksort($dirs);
			ksort($files);

			$AVE_Template->assign('new_dir_rezult', $new_dir_rezult);
			$AVE_Template->assign('recycled', strpos($dir, '/recycled/') === 0);
			$AVE_Template->assign('dirs', $dirs);
			$AVE_Template->assign('files', $files);
			$AVE_Template->assign('max_size', $max_size);
			$AVE_Template->assign('dir', $dir);
			$AVE_Template->assign('dirup', rtrim(dirname($dir), '\\/') . '/');
			$AVE_Template->assign('mediapath', UPLOAD_DIR);

			$AVE_Template->display('browser.tpl');
			break;

		case 'upload':
			if (check_permission('mediapool_add'))
			{
				$AVE_Template->display('browser_upload.tpl');
			}
			else
			{
				echo '<script type="text/javascript">window.close();</script>';
			}
			break;

		case 'upload2':
			header('Location:index.php?do=browser&type=image&target=' . $_REQUEST['target'] . '&tval=/' . UPLOAD_DIR . $_REQUEST['tval']);
			break;

		case 'delfile':
			if (check_permission('mediapool_del'))
			{
				if (empty($_REQUEST['file']) || empty($_REQUEST['dir']))
					exit(0);

				$file_name = basename($_REQUEST['file']);

				$del_file = $upload_path . $_REQUEST['dir'] . $file_name;
				if (strpos($del_file, '..') !== false || !is_file($del_file)) exit(0);

				$recycled_path = $upload_path . '/recycled/';
				if (!is_dir($recycled_path) && !mkdir($recycled_path)) exit(0);

				do {$nameParts = explode('.', $file_name);
					$nameParts[count($nameParts)-2] .= '-' . uniqid(rand());
					$recycled_file_name = implode('.', $nameParts);
				} while (file_exists($recycled_path . $recycled_file_name));

				@copy($del_file, $recycled_path . $recycled_file_name);

				if (@unlink($del_file))
				{
					$nameParts = explode('.', $file_name);
					$ext = strtolower(end($nameParts));
					if (in_array($ext, $images_ext))
					{
						$nameParts[count($nameParts)-2] .= $thumb_size;
						@unlink($upload_path . $_REQUEST['dir'] . THUMBNAIL_DIR . '/' . implode('.', $nameParts));
					}

					reportLog($_SESSION['user_name'] . ' - удалил файл ('
						. UPLOAD_DIR . $_REQUEST['dir'] . $file_name  . ')');
				}
			}

			echo	'<script type="text/javascript">
						parent.frames[\'zf\'].location.href="index.php?do=browser&type=', $_REQUEST['type'], '&action=list&dir=', $_REQUEST['dir'], '";
					</script>';
			break;

		default:

			@list($target, $target_id) = explode('__', $_REQUEST['target']);

			$tval = '/';

			if (!empty($_REQUEST['tval']) && 0 === strpos($_REQUEST['tval'], '/' . UPLOAD_DIR . '/'))
			{
				if (is_dir(BASE_DIR . '/' . $_REQUEST['tval'])) {
					$tval = rtrim(substr($_REQUEST['tval'], strlen('/' . UPLOAD_DIR)), '\\/') . '/';
				}

				if (is_file(BASE_DIR . '/' . $_REQUEST['tval'])) {
					$tval = rtrim(dirname(substr($_REQUEST['tval'], strlen('/' . UPLOAD_DIR))), '\\/') . '/';
				}
			}

			$AVE_Template->assign('dir', $tval);
			$AVE_Template->assign('target', $target);
			$AVE_Template->assign('target_id', $target_id);
			$AVE_Template->assign('cppath', substr($_SERVER['PHP_SELF'], 0, -18));
			$AVE_Template->assign('mediapath', UPLOAD_DIR);

			$AVE_Template->display('browser_2frames.tpl');
			break;
	}

	$out = ob_get_clean();

	echo $out;

?>