/
file.php
executable file
·128 lines (102 loc) · 4.77 KB
/
file.php
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
<?php
/*
You may not change or alter any portion of this comment or credits
of supporting developers from this source code or any supporting source code
which is considered copyrighted (c) material of the original comment or credit authors.
This program is distributed in the hope that it will be useful,
but WITHOUT ANY WARRANTY; without even the implied warranty of
MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.
*/
/**
* @copyright The XUUPS Project http://sourceforge.net/projects/xuups/
* @license http://www.fsf.org/copyleft/gpl.html GNU public license
* @package Publisher
* @since 1.0
* @author trabis <lusopoemas@gmail.com>
* @author The SmartFactory <www.smartfactory.ca>
* @version $Id$
*/
include_once dirname(__FILE__) . '/header.php';
xoops_loadLanguage('admin', PUBLISHER_DIRNAME);
$op = PublisherRequest::getString('op');
$fileid = PublisherRequest::getInt('fileid');
if ($fileid == 0) {
redirect_header("index.php", 2, _MD_PUBLISHER_NOITEMSELECTED);
exit();
}
$fileObj = $publisher->getHandler('file')->get($fileid);
// if the selected item was not found, exit
if (!$fileObj) {
redirect_header("index.php", 1, _NOPERM);
exit();
}
$itemObj = $publisher->getHandler('item')->get($fileObj->getVar('itemid'));
// if the user does not have permission to modify this file, exit
if (!(publisher_userIsAdmin() || publisher_userIsModerator($itemObj) || (is_object($xoopsUser) && $fileObj->getVar('uid') == $xoopsUser->getVar('uid')))) {
redirect_header("index.php", 1, _NOPERM);
exit();
}
/* -- Available operations -- */
switch ($op) {
case "default":
case "mod":
include_once XOOPS_ROOT_PATH . '/header.php';
include_once XOOPS_ROOT_PATH . '/class/xoopsformloader.php';
// FILES UPLOAD FORM
$files_form = $fileObj->getForm();
$files_form->display();
break;
case "modify":
$fileid = isset($_POST['fileid']) ? intval($_POST['fileid']) : 0;
// Creating the file object
if ($fileid != 0) {
$fileObj = $publisher->getHandler('file')->get($fileid);
} else {
redirect_header("index.php", 1, _NOPERM);
exit();
}
// Putting the values in the file object
$fileObj->setVar('name', PublisherRequest::getString('name'));
$fileObj->setVar('description', PublisherRequest::getString('description'));
$fileObj->setVar('status', PublisherRequest::getInt('file_status'));
// attach file if any
if (isset($_FILES['item_upload_file']) && $_FILES['item_upload_file']['name'] != "") {
$oldfile = $fileObj->getFilePath();
// Get available mimetypes for file uploading
$allowed_mimetypes = $publisher->getHandler('mimetype')->getArrayByType();
// TODO : display the available mimetypes to the user
$errors = array();
if ($publisher->getConfig('perm_upload') && is_uploaded_file($_FILES['item_upload_file']['tmp_name'])) {
if ($fileObj->checkUpload('item_upload_file', $allowed_mimetypes, $errors)) {
if ($fileObj->storeUpload('item_upload_file', $allowed_mimetypes, $errors)) {
unlink($oldfile);
}
}
}
}
if (!$publisher->getHandler('file')->insert($fileObj)) {
redirect_header('item.php?itemid=' . $fileObj->itemid(), 3, _AM_PUBLISHER_FILE_EDITING_ERROR . publisher_formatErrors($fileObj->getErrors()));
exit;
}
redirect_header('item.php?itemid=' . $fileObj->itemid(), 2, _AM_PUBLISHER_FILE_EDITING_SUCCESS);
exit();
break;
case "del":
$confirm = isset($_POST['confirm']) ? $_POST['confirm'] : 0;
if ($confirm) {
if (!$publisher->getHandler('file')->delete($fileObj)) {
redirect_header('item.php?itemid=' . $fileObj->itemid(), 2, _AM_PUBLISHER_FILE_DELETE_ERROR);
exit;
}
redirect_header('item.php?itemid=' . $fileObj->itemid(), 2, sprintf(_AM_PUBLISHER_FILEISDELETED, $fileObj->name()));
exit();
} else {
// no confirm: show deletion condition
include_once XOOPS_ROOT_PATH . '/header.php';
xoops_confirm(array('op' => 'del', 'fileid' => $fileObj->fileid(), 'confirm' => 1, 'name' => $fileObj->name()), 'file.php', _AM_PUBLISHER_DELETETHISFILE . " <br />" . $fileObj->name() . " <br /> <br />", _AM_PUBLISHER_DELETE);
include_once XOOPS_ROOT_PATH . '/footer.php';
}
exit();
break;
}
include_once XOOPS_ROOT_PATH . '/footer.php';