1 | <?php |
||||
2 | |||||
3 | require_once 'globals.php'; |
||||
4 | debug('upload.php: begin'); |
||||
5 | |||||
6 | // This action requires an authorized user. |
||||
7 | require_once 'auth.php'; |
||||
8 | |||||
9 | if (empty($_FILES)) { |
||||
10 | $error = 99; |
||||
11 | $filename = 'unknown'; |
||||
12 | } else { |
||||
13 | $error = $_FILES['file']['error']; |
||||
14 | $filename = $_FILES['file']['name']; |
||||
15 | } |
||||
16 | |||||
17 | if (!is_dir(CONFIG_UPLOAD_DIR)) { |
||||
18 | /* Target directory is missing, so create it now. */ |
||||
19 | mkdir(CONFIG_UPLOAD_DIR, 0755, true); |
||||
20 | } |
||||
21 | |||||
22 | if ($error == UPLOAD_ERR_OK || $error == "downloaded_from_url") { |
||||
23 | # All uploaded files are collected in the upload directory. |
||||
24 | # If necessary, an index is added to get a unique filename. |
||||
25 | $tempFile = $_FILES['file']['tmp_name']; |
||||
26 | $targetFile = CONFIG_UPLOAD_DIR . "/$filename"; |
||||
27 | $index = 0; |
||||
28 | $fparts = pathinfo($filename); |
||||
29 | $fname = $fparts['filename']; |
||||
30 | $ftype = null; |
||||
31 | if (isset($fparts['extension'])) { |
||||
32 | $ftype = $fparts['extension']; |
||||
33 | } |
||||
34 | while (file_exists($targetFile)) { |
||||
35 | $index++; |
||||
36 | if ($ftype) { |
||||
37 | $targetFile = CONFIG_UPLOAD_DIR . "/$fname-$index.$ftype"; |
||||
38 | } else { |
||||
39 | $targetFile = CONFIG_UPLOAD_DIR . "/$fname-$index"; |
||||
40 | } |
||||
41 | } |
||||
42 | debug("upload.php: '$tempFile' to '$targetFile'"); |
||||
43 | if (is_uploaded_file($tempFile)) { |
||||
44 | move_uploaded_file($tempFile, $targetFile); |
||||
45 | } elseif ($error == "downloaded_from_url") { |
||||
46 | rename($tempFile, $targetFile); |
||||
47 | } else { |
||||
48 | trace("upload.php: upload failed!"); |
||||
49 | } |
||||
50 | } else { |
||||
51 | // Support localisation. |
||||
52 | require_once 'i12n.php'; |
||||
53 | |||||
54 | $targetFile = CONFIG_UPLOAD_DIR . "/error.html"; |
||||
55 | $f = fopen($targetFile, 'w'); |
||||
56 | if ($f) { |
||||
0 ignored issues
–
show
introduced
by
![]() |
|||||
57 | switch ($error) { |
||||
58 | case UPLOAD_ERR_INI_SIZE: |
||||
59 | $message = addslashes(__("This file is too large.")); |
||||
0 ignored issues
–
show
The function
__ was not found. Maybe you did not declare it correctly or list all dependencies?
(
Ignorable by Annotation
)
If this is a false-positive, you can also ignore this issue in your code via the
![]() |
|||||
60 | break; |
||||
61 | case UPLOAD_ERR_FORM_SIZE: |
||||
62 | $message = addslashes(__("Large files are not supported.")); |
||||
63 | break; |
||||
64 | case UPLOAD_ERR_PARTIAL: |
||||
65 | $message = addslashes(__("File was only partially uploaded.")); |
||||
66 | break; |
||||
67 | default: |
||||
68 | $message = sprintf(addslashes(__("Error code %s.")), $error); |
||||
69 | break; |
||||
70 | } |
||||
71 | fprintf($f, "<!DOCTYPE HTML PUBLIC \"-//W3C//DTD HTML 4.01//EN\""); |
||||
72 | fprintf($f, "\"http://www.w3.org/TR/html4/strict.dtd\">"); |
||||
73 | fprintf($f, "<html>\n"); |
||||
74 | fprintf($f, "<head>\n"); |
||||
75 | fprintf($f, "<meta http-equiv=\"Content-Type\" content=\"text/html; charset=utf-8\">\n"); |
||||
76 | fprintf($f, "<title>Error</title>\n"); |
||||
77 | fprintf($f, "</head>\n"); |
||||
78 | fprintf($f, "<body>\n"); |
||||
79 | fprintf($f, "<p>\n"); |
||||
80 | fprintf( |
||||
81 | $f, |
||||
82 | addslashes(__("File '%s' cannot be shown.")) . "<br>\n%s\n", |
||||
83 | $filename, |
||||
84 | $message |
||||
85 | ); |
||||
86 | fprintf($f, "</p>\n"); |
||||
87 | fprintf($f, "</body>\n"); |
||||
88 | fprintf($f, "</html>\n"); |
||||
89 | fclose($f); |
||||
90 | } |
||||
91 | $targetFile = "file:///$targetFile"; |
||||
92 | } |
||||
93 | |||||
94 | // create window object and send to nuc |
||||
95 | |||||
96 | $dt = new DateTime(); |
||||
97 | $date = $dt->format('Y-m-d H:i:s'); |
||||
98 | |||||
99 | $window = array( |
||||
100 | "id" => "", |
||||
101 | "win_id" => "", |
||||
102 | "name" => "", |
||||
103 | "state" => "", |
||||
104 | "file" => $targetFile, |
||||
105 | "userid" => "", |
||||
106 | "date" => $date); |
||||
107 | |||||
108 | //echo "<body onLoad=\"sendToNuc('newWindow=".serialize($window)."')\" /></body>"; |
||||
109 | |||||
110 | $serializedWindow = serialize($window); |
||||
111 | |||||
112 | $sw = urlencode($serializedWindow); |
||||
113 | // Get cURL resource |
||||
114 | $curl = curl_init(); |
||||
115 | // Set some options - we are passing in a useragent too here |
||||
116 | curl_setopt_array($curl, array( |
||||
117 | CURLOPT_RETURNTRANSFER => 1, |
||||
118 | CURLOPT_URL => CONFIG_CONTROL_FILE . '?newWindow=' . $sw, |
||||
119 | CURLOPT_USERAGENT => 'PalMA cURL Request' |
||||
120 | )); |
||||
121 | // Send the request & save response to $resp |
||||
122 | $resp = curl_exec($curl); |
||||
123 | // Close request to clear up some resources |
||||
124 | curl_close($curl); |
||||
125 | |||||
126 | debug("upload.php: upload closed, result='$resp'"); |
||||
127 |