static function process_files()
 {
     $files = array();
     $data = $_FILES["file"];
     foreach (array_keys($data["name"]) as $filenum) {
         if ($data["error"][$filenum] == "0" and $data["size"][$filenum] != 0) {
             if ($data["name"][$filenum] == "") {
                 $data["name"][$filenum] = "default";
             }
             list($target, $filename) = sys_build_filename($data["name"][$filenum]);
             dirs_checkdir($target);
             $target .= $_SESSION["username"] . "__" . $filename;
             if (move_uploaded_file($data["tmp_name"][$filenum], $target)) {
                 $files[] = $target;
             } else {
                 @unlink($data["tmp_name"][$filenum]);
             }
         } else {
             if ($data["error"][$filenum] != UPLOAD_ERR_NO_FILE) {
                 $filename = $data["name"][$filenum];
                 switch ($data["error"][$filenum]) {
                     case UPLOAD_ERR_FORM_SIZE:
                         $message = "{t}file is too big. Please upload a smaller one.{/t} (" . $filename . ")";
                         break;
                     case UPLOAD_ERR_INI_SIZE:
                         $message = "{t}file is too big. Please change upload_max_filesize, post_max_size in your php.ini{/t} (" . $filename . ") (upload_max_filesize=" . @ini_get("upload_max_filesize") . ", post_max_size=" . @ini_get("post_max_size") . ")";
                         break;
                     case UPLOAD_ERR_PARTIAL:
                         $message = "{t}file was uploaded partially.{/t} {t}Please upload again.{/t} (" . $filename . ")";
                         break;
                     case UPLOAD_ERR_NO_FILE:
                         $message = "{t}No file was uploaded{/t} {t}Please upload again.{/t} (" . $filename . ")";
                         break;
                     case UPLOAD_ERR_NO_TMP_DIR:
                         $message = "{t}missing a temporary folder.{/t} {t}Please upload again.{/t} (" . $filename . ")";
                         break;
                     case UPLOAD_ERR_CANT_WRITE:
                         $message = "{t}Failed to write file to disk.{/t} {t}Please upload again.{/t} (" . $filename . ")";
                         break;
                     default:
                         $message = "{t}Please upload again.{/t} (" . $filename . ")";
                         break;
                 }
                 setup::out("{t}Upload failed{/t}: " . q($message));
             }
         }
     }
     return $files;
 }
Exemple #2
0
 private static function _processfiles($sgsml, $field_name, $id)
 {
     $error = array();
     $field = $sgsml->fields[$field_name];
     $fieldname = "form_" . md5($id) . $field_name;
     $displayname = isset($field["DISPLAYNAME"]) ? $field["DISPLAYNAME"] : $field["NAME"];
     if (!isset($_REQUEST[$fieldname])) {
         $_REQUEST[$fieldname] = array();
     }
     if (isset($_REQUEST[$fieldname . "_cust"]) and is_array($_REQUEST[$fieldname . "_cust"])) {
         foreach ($_REQUEST[$fieldname . "_cust"] as $url) {
             if ($url == "" or !preg_match("|^https?://.+|i", $url)) {
                 continue;
             }
             $_REQUEST[$fieldname][] = $url;
         }
     }
     if (isset($_FILES[$fieldname]) and is_array($_FILES[$fieldname])) {
         $data = $_FILES[$fieldname];
         foreach (array_keys($data["name"]) as $filenum) {
             if ($data["error"][$filenum] == "0" and $data["size"][$filenum] != 0) {
                 if ($data["name"][$filenum] == "") {
                     $data["name"][$filenum] = "default";
                 }
                 list($target, $filename) = sys_build_filename($data["name"][$filenum]);
                 dirs_checkdir($target);
                 $target .= $_SESSION["username"] . "__" . $filename;
                 if (move_uploaded_file($data["tmp_name"][$filenum], $target)) {
                     $_REQUEST[$fieldname][] = $target;
                 } else {
                     @unlink($data["tmp_name"][$filenum]);
                 }
             } else {
                 if ($data["error"][$filenum] != UPLOAD_ERR_NO_FILE) {
                     $filename = $data["name"][$filenum];
                     switch ($data["error"][$filenum]) {
                         case UPLOAD_ERR_FORM_SIZE:
                             $message = "{t}file is too big. Please upload a smaller one.{/t} (" . $filename . ")";
                             break;
                         case UPLOAD_ERR_INI_SIZE:
                             $message = "{t}file is too big. Please change upload_max_filesize, post_max_size in your php.ini{/t} (" . $filename . ") (upload_max_filesize=" . @ini_get("upload_max_filesize") . ", post_max_size=" . @ini_get("post_max_size") . ")";
                             break;
                         case UPLOAD_ERR_PARTIAL:
                             $message = "{t}file was uploaded partially.{/t} {t}Please upload again.{/t} (" . $filename . ")";
                             break;
                         case UPLOAD_ERR_NO_FILE:
                             $message = "{t}No file was uploaded{/t} {t}Please upload again.{/t} (" . $filename . ")";
                             break;
                         case UPLOAD_ERR_NO_TMP_DIR:
                             $message = "{t}missing a temporary folder.{/t} {t}Please upload again.{/t} (" . $filename . ")";
                             break;
                         case UPLOAD_ERR_CANT_WRITE:
                             $message = "{t}Failed to write file to disk.{/t} {t}Please upload again.{/t} (" . $filename . ")";
                             break;
                         default:
                             $message = "{t}Please upload again.{/t} (" . $filename . ")";
                             break;
                     }
                     $error[] = array($displayname, "{t}Upload failed{/t}: " . $message);
                 }
             }
         }
     }
     if (!empty($field["SIMPLE_SIZE"]) and count($_REQUEST[$fieldname]) > $field["SIMPLE_SIZE"]) {
         $error[] = array($displayname, "{t}maximum number of files exceeded.{/t} (" . $field["SIMPLE_SIZE"] . ")");
     }
     return $error;
 }
 private static function _paste_item_copyfile($file, $id, $tname)
 {
     list($target, $filename) = sys_build_filename(modify::basename($file), $tname);
     dirs_checkdir($target);
     $target .= sys_get_pathnum($id) . "/";
     dirs_checkdir($target);
     $target .= $id . $filename;
     copy($file, $target);
     return $target;
 }
Exemple #4
0
 static function getfile_upload($filename)
 {
     list($target, $filename) = sys_build_filename($filename);
     dirs_checkdir($target);
     $target .= $_SESSION["username"] . "__" . $filename;
     if ($fp = fopen("php://input", "r") and $ft = fopen($target, "w")) {
         while (!feof($fp)) {
             fwrite($ft, fread($fp, 1024));
         }
         fclose($ft);
         fclose($fp);
         return $target;
     }
     return "";
 }
function _upload_create_file($db_path, $target_lnk, $path, $filename)
{
    list($id, $left, $unused) = _upload_process_folder_string($db_path . "/");
    if ($left != 0 or $id == 0) {
        sys_error("path not found", "409 Conflict");
    }
    $ftype = db_select_value("simple_sys_tree", "ftype", "id=@id@", array("id" => $id));
    if (db_get_right($id, "write") and !empty($ftype) and $ftype == "files") {
        list($target, $a_filename) = sys_build_filename($filename, "simple_files");
        dirs_checkdir($target);
        $target .= sys_get_pathnum($id) . "/";
        dirs_checkdir($target);
        $target .= md5($id) . $a_filename;
        if ($fp = fopen("php://input", "r") and $ft = fopen($target, "wb")) {
            while (!feof($fp)) {
                fwrite($ft, fread($fp, 8192));
            }
            fclose($fp);
            fclose($ft);
            $a_id = sql_genID("simple_files") * 100;
            $data = array("id" => $a_id, "folder" => $id, "dsize" => filesize($target), "filedata" => "|" . $target . "|", "filename" => $filename, "rread_users" => "|anonymous|", "rwrite_users" => "|anonymous|", "history" => t("{t}Item created by %s at %s{/t}", $_SESSION["username"], sys_date(t("{t}m/d/y g:i:s a{/t}"))) . "\n");
            $error_sql = db_insert("simple_files", $data);
            if ($error_sql == "") {
                db_update_treesize("simple_files", $id);
                $fields = array("filename" => "text", "filedata" => "files", "folder" => "id", "id" => "id");
                db_search_update("simple_files", $a_id, array(), $fields);
                sys_log_stat("new_records", 1);
                file_put_contents($target_lnk, $path . "/" . $a_id . "_0__" . $filename . "\n" . $target, LOCK_EX);
                _upload_success();
            }
        }
    }
    sys_error("cant write new", "403 Forbidden");
}
 static function copyfiles_totemp($value)
 {
     if ($value == "" or !file_exists($value)) {
         return "";
     }
     list($target, $filename) = sys_build_filename(self::basename($value));
     dirs_checkdir($target);
     $target .= $_SESSION["username"] . "__" . $filename;
     if (copy($value, $target)) {
         return $target;
     } else {
         return "";
     }
 }