Beispiel #1
0
    $tpl->display();
} else {
    $is_admin = AppContext::get_current_user()->check_level(User::ADMIN_LEVEL);
    $tpl = new FileTemplate('user/upload.tpl');
    //Gestion des erreurs.
    $array_error = array('e_upload_invalid_format', 'e_upload_max_weight', 'e_upload_error', 'e_upload_php_code', 'e_upload_failed_unwritable', 'e_unlink_disabled', 'e_max_data_reach');
    if (in_array($get_error, $array_error)) {
        $tpl->put('message_helper', MessageHelper::display($LANG[$get_error], MessageHelper::WARNING));
    }
    if ($get_error == 'incomplete') {
        $tpl->put('message_helper', MessageHelper::display($LANG['e_incomplete'], MessageHelper::NOTICE));
    }
    if (isset($LANG[$get_l_error])) {
        $tpl->put('message_helper', MessageHelper::display($LANG[$get_l_error], MessageHelper::WARNING));
    }
    $tpl->put_all(array('POPUP' => $popup, 'C_TINYMCE_EDITOR' => AppContext::get_current_user()->get_editor() == 'TinyMCE', 'C_DISPLAY_CLOSE_BUTTON' => $display_close_button, 'FIELD' => $field, 'FOLDER_ID' => !empty($folder) ? $folder : '0', 'USER_ID' => AppContext::get_current_user()->get_id(), 'URL' => $folder > 0 ? Uploads::get_url($folder, '', '&amp;' . $popup) : '', 'L_CONFIRM_DEL_FILE' => $LANG['confim_del_file'], 'L_CONFIRM_DEL_FOLDER' => $LANG['confirm_del_folder'], 'L_CONFIRM_EMPTY_FOLDER' => $LANG['confirm_empty_folder'], 'L_FOLDER_ALREADY_EXIST' => LangLoader::get_message('element.already_exists', 'status-messages-common'), 'L_FOLDER_FORBIDDEN_CHARS' => $LANG['folder_forbidden_chars'], 'L_FILES_MANAGEMENT' => $LANG['files_management'], 'L_FILES_ACTION' => $LANG['files_management'], 'L_CONFIG_FILES' => $LANG['files_config'], 'L_ADD_FILES' => $LANG['file_add'], 'L_ROOT' => $LANG['root'], 'L_NAME' => $LANG['name'], 'L_SIZE' => $LANG['size'], 'L_MOVETO' => $LANG['moveto'], 'L_DATA' => $LANG['data'], 'L_FOLDER_SIZE' => $LANG['folder_size'], 'L_FOLDERS' => $LANG['folders'], 'L_FOLDER_NEW' => $LANG['folder_new'], 'L_FOLDER_CONTENT' => $LANG['folder_content'], 'L_FOLDER_UP' => $LANG['folders_up'], 'L_FILES' => $LANG['files'], 'L_DELETE' => LangLoader::get_message('delete', 'common'), 'L_EMPTY' => $LANG['empty'], 'L_UPLOAD' => $LANG['upload'], 'L_URL' => $LANG['url'], 'U_ROOT' => '<a href="upload.php?' . $popup . '">' . AppContext::get_current_user()->get_display_name() . '</a>/'));
    list($total_folder_size, $total_files, $total_directories) = array(0, 0, 0);
    //Affichage des dossiers
    $result = PersistenceContext::get_querier()->select("SELECT id, name, id_parent, user_id\n\tFROM " . DB_TABLE_UPLOAD_CAT . "\n\tWHERE id_parent = :id_parent AND user_id = :user_id\n\tORDER BY name", array('id_parent' => $folder, 'user_id' => AppContext::get_current_user()->get_id()));
    while ($row = $result->fetch()) {
        $name_cut = strlen(TextHelper::html_entity_decode($row['name'])) > 22 ? TextHelper::htmlentities(substr(TextHelper::html_entity_decode($row['name']), 0, 22)) . '...' : $row['name'];
        $tpl->assign_block_vars('folder', array('ID' => $row['id'], 'NAME' => $name_cut, 'RENAME_FOLDER' => '<span id="fhref' . $row['id'] . '"><a href="javascript:display_rename_folder(\'' . $row['id'] . '\', \'' . addslashes($row['name']) . '\', \'' . addslashes($name_cut) . '\');" title="' . LangLoader::get_message('edit', 'common') . '" class="fa fa-edit"></a></span>', 'MOVE' => '<a href="javascript:upload_display_block(' . $row['id'] . ');" onmouseover="upload_hide_block(' . $row['id'] . ', 1);" onmouseout="upload_hide_block(' . $row['id'] . ', 0);" class="fa fa-move" title="' . $LANG['moveto'] . '"></a>', 'U_MOVE' => url('.php?movefd=' . $row['id'] . '&amp;f=' . $folder . $popup), 'L_TYPE_DEL_FOLDER' => $LANG['del_folder']));
        $total_directories++;
    }
    $result->dispose();
    $now = new Date();
    //Affichage des fichiers contenu dans le dossier
    $result = PersistenceContext::get_querier()->select("SELECT up.id, up.name, up.path, up.size, up.type, up.timestamp, m.user_id\n\tFROM " . DB_TABLE_UPLOAD . " up\n\tLEFT JOIN " . DB_TABLE_MEMBER . " m ON m.user_id = up.user_id\n\tWHERE up.idcat = :idcat AND up.user_id = :user_id\n\tORDER BY up.name", array('idcat' => $folder, 'user_id' => AppContext::get_current_user()->get_id()));
    while ($row = $result->fetch()) {
        $name_cut = strlen(TextHelper::html_entity_decode($row['name'])) > 22 ? TextHelper::htmlentities(substr(TextHelper::html_entity_decode($row['name']), 0, 22)) . '...' : $row['name'];
        $get_img_mimetype = Uploads::get_img_mimetype($row['type']);
Beispiel #2
0
    $id_cat = $file_infos['idcat'];
    $file_owner = $file_infos['user_id'];
    if ($file_owner == $User->get_attribute('user_id')) {
        $new_folder_owner = $Sql->query("SELECT user_id FROM " . DB_TABLE_UPLOAD_CAT . " WHERE id = '" . $to . "'", __LINE__, __FILE__);
        if ($new_folder_owner == $User->get_attribute('user_id') || $to == 0) {
            $Sql->query_inject("UPDATE " . DB_TABLE_UPLOAD . " SET idcat = '" . $to . "' WHERE id = '" . $move_file . "'", __LINE__, __FILE__);
            redirect(HOST . DIR . url('/member/upload.php?f=' . $to . '&' . $popup_noamp, '', '&'));
        } else {
            $Errorh->handler('e_auth', E_USER_REDIRECT);
        }
    } else {
        $Errorh->handler('e_auth', E_USER_REDIRECT);
    }
} elseif (!empty($move_folder) || !empty($move_file)) {
    $Template->set_filenames(array('upload_move' => 'member/upload_move.tpl'));
    $Template->assign_vars(array('POPUP' => $popup, 'HEADER' => $header, 'FOOTER' => $footer, 'FIELD' => $field, 'LANG' => get_ulang(), 'FOLDER_ID' => !empty($folder) ? $folder : '0', 'THEME' => get_utheme(), 'LANG' => get_ulang(), 'URL' => '' . trim($Uploads->get_url($folder, '', '&amp;' . $popup), '/'), 'L_FILES_MANAGEMENT' => $LANG['files_management'], 'L_MOVE_TO' => $LANG['moveto'], 'L_ROOT' => $LANG['root'], 'L_URL' => $LANG['url'], 'L_SUBMIT' => $LANG['submit'], 'U_ROOT' => '<a href="upload.php?' . $popup . '">' . $User->get_attribute('login') . '</a>/'));
    if ($get_error == 'folder_contains_folder') {
        $Errorh->handler($LANG['upload_folder_contains_folder'], E_USER_WARNING);
    }
    include_once 'upload_functions.php';
    $cats = array();
    $is_folder = !empty($move_folder);
    if ($is_folder) {
        $folder_info = $Sql->query_array(PREFIX . "upload_cat", "name", "id_parent", "WHERE id = '" . $move_folder . "'", __LINE__, __FILE__);
        $name = $folder_info['name'];
        $id_cat = $folder_info['id_parent'];
        $Template->assign_block_vars('folder', array('NAME' => $name));
        $Template->assign_vars(array('SELECTED_CAT' => $id_cat, 'ID_FILE' => $move_folder, 'TARGET' => url('upload.php?movefd=' . $move_folder . '&amp;f=0&amp;token=' . $Session->get_token() . $popup)));
        $cat_explorer = display_cat_explorer($id_cat, $cats, 1, $User->get_attribute('user_id'));
    } else {
        $info_move = $Sql->query_array(PREFIX . "upload", "path", "name", "type", "size", "idcat", "WHERE id = '" . $move_file . "'", __LINE__, __FILE__);