コード例 #1
0
ファイル: mygalleryadmin.php プロジェクト: noikiy/owaspbwa
function deletemygallery($mygallery_id)
{
    global $table_prefix, $wpdb, $mg_options;
    // used variables
    $mypictures = array();
    $mypath = ABSPATH . $mg_options[gallerybasepath];
    // get all picture_ids from the gallery -  needs test if files and folders exist
    $thepictures = $wpdb->get_results('SELECT * FROM ' . $table_prefix . 'mypictures,' . $table_prefix . 'mygprelation,' . $table_prefix . 'mygallery WHERE ' . $table_prefix . 'mypictures.id = ' . $table_prefix . 'mygprelation.pid AND ' . $table_prefix . 'mygprelation.gid = ' . $table_prefix . 'mygallery.id AND ' . $table_prefix . 'mygallery.id = "' . $mygallery_id . '"');
    if (is_array($thepictures)) {
        foreach ($thepictures as $tmp) {
            array_push($mypictures, $tmp->pid);
        }
    }
    // delete all pictures
    deltesomepictures($mypictures);
    // delete gallery
    $mygallery_name = getgalleryname($mygallery_id);
    $wpdb->query('DELETE FROM ' . $table_prefix . 'mygallery WHERE id = ' . $mygallery_id);
    // unlink directories
    @rmdir($mypath . $mygallery_name . '/tumbs');
    @rmdir($mypath . $mygallery_name);
}
コード例 #2
0
ファイル: mygallerymain.php プロジェクト: noikiy/owaspbwa
function createmygallery()
{
    global $table_prefix, $wpdb, $allowedfiletypes;
    // used variables
    $mg_options = get_option('mygalleryoptions');
    $myaction = $_POST[myaction];
    $shrinkfit = $mg_options[shrinkfit];
    $uploadfile = $_FILES;
    $mypath = ABSPATH . $mg_options[gallerybasepath];
    $scalethumb = $mg_options[scalethumb];
    $datasource = $_POST[datasource];
    $picturefolder = $_POST[picturefolder];
    $newgallery = $_POST[newgallery];
    $allowedfiletypes = $mg_options[allowedfiletypes];
    $mywebserver_mod = ini_get('safe_mode');
    if ($_POST[galleryselect]) {
        $zipdir = $mypath . getgalleryname($_POST[galleryselect]);
    }
    $mygallery_id = $_POST[galleryselect];
    if ($myaction and $datasource != 4) {
        switch ($datasource) {
            case 1:
                // a zipfile for a new gallery was uploaded
                $my_zipfile = $uploadfile['zipfile']['tmp_name'];
                $my_zipname = $uploadfile['zipfile']['name'];
                // check if there is a file
                if (!$my_zipfile) {
                    return '<div class="updated"><p><strong>' . __('No file was submitted', 'myGallery') . '.</strong></p></div>';
                }
                // check if file is a zip file
                $my_extension = strtolower(end(explode('.', $uploadfile['zipfile']['name'])));
                if ($my_extension != 'zip') {
                    return '<div class="updated"><p><strong>' . __('Uploaded file was no zip file', 'myGallery') . '!</strong></p></div>';
                }
                // make new directory an get the name - convert upercase and spaces
                $zipdir = $mypath . preg_replace("/(\\s+)/", '-', strtolower(strtok($my_zipname, '.')));
                $zipdirname = preg_replace("/(\\s+)/", '-', strtolower(strtok($my_zipname, '.')));
                // check if directory exists
                if (!is_dir($zipdir)) {
                    @mkdir("{$zipdir}", directory_permissions) or die('<div class="updated"><p><strong>' . __('Unable to create directory ', 'myGallery') . $zipdir . '!</strong></p></div>');
                } else {
                    return '<div class="updated"><p><strong>' . __('Directory', 'myGallery') . ' ' . $zipdirname . ' ' . __('exists', 'myGallery') . '!</strong></p></div>';
                }
                // unzip the file
                exec("unzip -j {$my_zipfile} -d {$zipdir}") or die('<div class="updated"><p><strong>' . __('Unable to unzip!', 'myGallery') . '</strong></p></div>');
                // change rights and delete tmp-file
                @chmod($zipdir, directory_permissions) or die('<div class="updated"><p><strong>' . __('Unable to set permissions for directory ', 'myGallery') . $zipdir . '!</strong></p></div>');
                @unlink($my_zipfile) or die('<div class="updated"><p><strong>' . __('Unable to unlink file ', 'myGallery') . $my_zipfile . '!</strong></p></div>');
                // get pictures in folder
                list($my_images, $mygallery_id) = getpicturesinfolder($zipdirname, $zipdir, 1);
                $message = '<div class="updated"><p><strong>' . __('Gallery is ready!', 'myGallery') . '</strong>  ' . __('Use', 'myGallery') . ' [mygal=' . $zipdirname . '] ' . __('to insert gallery into a page', 'myGallery') . '.</p></div>';
                break;
            case 2:
                // check if a folder name was submitted
                //$picturefolder=preg_replace ("/(\/|)(\[A-Za-z0-9\-]+)(.*|)/", "$2", $picturefolder); // clear folder name
                $picturefolder = preg_match("/[A-Za-z0-9\\-\\_]+/", $picturefolder, $results);
                if (is_array($results)) {
                    $picturefolder = $results[0];
                }
                if (!$picturefolder) {
                    return '<div class="updated"><p><strong>' . __('No folder name submitted', 'myGallery') . '.</strong></p></div>';
                }
                $zipdir = $mypath . $picturefolder;
                // check if directory exists
                if (!is_dir($zipdir)) {
                    return '<div class="updated"><p><strong>' . __('Directory', 'myGallery') . ' </strong>' . $picturefolder . ' <strong>' . __('doesn&#96;t exist', 'myGallery') . '!</strong></p></div>';
                }
                if (!is_dir($zipdir . '/tumbs') and $mywebserver_mod) {
                    return '<div class="updated"><p><strong>' . __('Directory', 'myGallery') . ' </strong>' . $picturefolder . '/tumbs  <strong>' . __('doesn&#96;t exist', 'myGallery') . '!</strong></p></div>';
                }
                // get pictures in folder
                list($my_images, $mygallery_id) = getpicturesinfolder($picturefolder, $zipdir, 0);
                $oldgallery_id = galleryexists($picturefolder);
                if ($oldgallery_id) {
                    $my_old_images = getstoredpics($oldgallery_id);
                    if (is_array($my_old_images) and is_array($my_images)) {
                        $my_images = array_diff($my_images, $my_old_images);
                    }
                }
                $message = '<div class="updated"><p><strong>' . __('Gallery is ready!', 'myGallery') . '</strong>' . __('Use', 'myGallery') . ' [mygal=' . $picturefolder . '] ' . __('to insert gallery into a page', 'myGallery') . '.</p></div>';
                break;
            case 3:
                // get extension of uploaded file
                $my_extension = strtolower(end(explode('.', $uploadfile['picturefile']['name'])));
                if (!$uploadfile['picturefile']['tmp_name']) {
                    return '<div class="updated"><p><strong>' . __('No file was submitted', 'myGallery') . '.</strong></p></div>';
                }
                if (!$zipdir) {
                    return '<div class="updated"><p><strong>' . __('No gallery selected', 'myGallery') . '!</strong></p></div>';
                }
                if ($my_extension == 'zip' and !$mywebserver_mod) {
                    // if file is a zipfile
                    // creat tmp-dir for unzip
                    $tmp_zipdir = $zipdir . '/newpics';
                    @mkdir("{$tmp_zipdir}", directory_permissions) or die('<div class="updated"><p><strong>' . __('Unable to creat temporary directory ', 'myGallery') . $tmp_zipdir . '!</strong></p></div>');
                    @chmod("{$tmp_zipdir}", directory_permissions) or die('<div class="updated"><p><strong>' . __('Unable to set permissions for temporary directory ', 'myGallery') . $tmp_zipdir . '!</strong></p></div>');
                    $tmp_zipdir = $tmp_zipdir . '/';
                    $my_zipfile = $uploadfile['picturefile']['tmp_name'];
                    // unzip the file
                    exec("unzip -j {$my_zipfile} -d {$tmp_zipdir}.'/'") or die('<div class="updated"><p><strong>' . __('Unable to unzip!', 'myGallery') . '</strong></p></div>');
                    // delete tmp-file
                    @unlink($my_zipfile) or die('<div class="updated"><p><strong>' . __('Unable to remove file ', 'myGallery') . $my_zipfile . '!</strong></p></div>');
                    // read pictures
                    $my_images = readtmpdir($tmp_zipdir);
                    // compare with pictures in database
                    $myoldpics = getstoredpics($mygallery_id);
                    if (is_array($myoldpics)) {
                        $my_images = array_diff($my_images, $myoldpics);
                    }
                    // move pictures to gallery
                    if (is_array($my_images)) {
                        foreach ($my_images as $mytmpfile) {
                            rename($tmp_zipdir . $mytmpfile, $zipdir . '/' . $mytmpfile);
                        }
                    }
                    // remove double pictures in tmp-folder
                    $trashpics = readtmpdir($tmp_zipdir);
                    if ($trashpics) {
                        if (is_array($trashpics)) {
                            foreach ($trashpics as $tmp) {
                                @unlink($tmp_zipdir . $tmp) or die('<div class="updated"><p><strong>' . __('Unable to remove file ', 'myGallery') . $tmp_zipdir . $tmp . '!</strong></p></div>');
                            }
                        }
                    }
                    // remove tmp-dir
                    @rmdir($tmp_zipdir) or die('<div class="updated"><p><strong>' . __('Unable to unlink directory ', 'myGallery') . $tmp_zipdir . '!</strong></p></div>');
                } else {
                    if (in_array($my_extension, $allowedfiletypes)) {
                        // if file is a single picture
                        // move picture to destination
                        @move_uploaded_file($uploadfile['picturefile']['tmp_name'], $zipdir . '/' . $uploadfile['picturefile']['name']) or die('<div class="updated"><p><strong>' . __('Unable to move file ', 'myGallery') . $uploadfile . '!</strong></p></div>');
                        $my_images = array($uploadfile['picturefile']['name']);
                        if (!$mywebserver_mod) {
                            @chmod($zipdir . '/' . $uploadfile['picturefile']['name'], file_permissions) or die('<div class="updated"><p><strong>' . __('Unable to set permissions for file ', 'myGallery') . $zipdir . '/' . $uploadfile['picturefile']['name'] . '!</strong></p></div>');
                        }
                    } else {
                        // if file was no zip or jpg delete tmp-file
                        if (!$mywebserver_mod) {
                            @unlink($uploadfile['picturefile']['tmp_name']) or die('<div class="updated"><p><strong>' . __('Unable to unlink unsupported file ', 'myGallery') . $uploadfile['picturefile']['tmp_name'] . '!</strong></p></div>');
                        }
                        return '<div class="updated"><p><strong>' . __('Not a supported file format', 'myGallery') . '.</strong></p></div>';
                    }
                }
                $message = '<div class="updated"><p><strong>' . __('Picture(s) added to gallery!', 'myGallery') . '</strong></p></div>';
        }
        // generate thumbnails in new subfolder of the orignal folder - checks if folder exists
        if (!is_dir("{$zipdir}/tumbs") and !$mywebserver_mod) {
            @mkdir("{$zipdir}/tumbs", directory_permissions) or die('<div class="updated"><p><strong>' . __('Unable to creat folder for thumbnails ', 'myGallery') . $zipdir . '/tumbs !</strong></p></div>');
            @chmod("{$zipdir}/tumbs", directory_permissions) or die('<div class="updated"><p><strong>' . __('Unable to set permissions for thumbnail folder ', 'myGallery') . $zipdir . '/tumbs !</strong></p></div>');
        } else {
            if (!is_dir("{$zipdir}/tumbs")) {
                return '<div class="updated"><p><strong>' . __('Create the folder <i>tumbs</i> in your gallery folder first.', 'myGallery') . '.</strong></p></div>';
            }
        }
        if (is_array($my_images)) {
            foreach ($my_images as $stored_file) {
                $my_extension = strtolower(end(explode('.', $stored_file)));
                // put picture in into the database
                $wpdb->query('INSERT INTO ' . $table_prefix . 'mypictures (picturepath) VALUES ("' . $stored_file . '")');
                $mypicture_id = $wpdb->get_var('SELECT LAST_INSERT_ID()');
                $wpdb->query('INSERT INTO ' . $table_prefix . 'mygprelation (gid, pid) VALUES ("' . $mygallery_id . '","' . $mypicture_id . '")');
                // do some other stuff
                generatethumbnail($zipdir, $stored_file, $shrinkfit);
            }
        }
    }
    if ($myaction and $datasource == 4) {
        $newgallery = strtolower(preg_replace("/(\\s+)/", '-', $newgallery));
        //remove spaces, convert to lowercase
        preg_match("/[A-Za-z0-9\\-\\_]+/", $newgallery, $results);
        if (is_array($results)) {
            $newgallery = $results[0];
        }
        //$newgallery=preg_replace ("/(\/|)(\w+)(.*|)/", "$2", $newgallery); // clear folder name from path
        if (!$newgallery) {
            return '<div class="updated"><p><strong>' . __('No valid gallery name!', 'myGallery') . '</strong></p></div>';
        }
        if (is_dir($mypath . $newgallery)) {
            return '<div class="updated"><p><strong>' . __('Directory', 'myGallery') . ' </strong>' . $newgallery . ' <strong>' . __('exists!', 'myGallery') . '</strong></p></div>';
        }
        // create new directories
        @mkdir($mypath . $newgallery, directory_permissions) or die('<div class="updated"><p><strong>' . __('Unable to create directory ', 'myGallery') . $mypath . $newgallery . '!</strong></p></div>');
        @chmod($mypath . $newgallery, directory_permissions) or die('<div class="updated"><p><strong>' . __('Unable to set permissions for directory ', 'myGallery') . $mypath . $newgallery . '!</strong></p></div>');
        @mkdir($mypath . $newgallery . '/tumbs', directory_permissions) or die('<div class="updated"><p><strong>' . __('Unable to create directory ', 'myGallery') . $mypath . $newgallery . '/tumbs !</strong></p></div>');
        chmod($mypath . $newgallery . '/tumbs', directory_permissions) or die('<div class="updated"><p><strong>' . __('Unable to set permissions for directory ', 'myGallery') . $mypath . $newgallery . '/tumbs !</strong></p></div>');
        // add new galery to database
        $message = newgallery($newgallery);
    }
    return $message;
}
コード例 #3
0
function myshowname($mydefault)
{
    global $mg_options;
    if ($_GET['gallery']) {
        $myid = getgalleryid($_GET['gallery']);
        $mystring = getgallerylongname($myid);
        if ($mg_options[longnames] and $mystring) {
            echo $mystring;
        } else {
            echo $_GET['gallery'];
        }
    } else {
        if ($_GET['picture_id']) {
            $myid = getgalleryidformpictureid($_GET['picture_id']);
            $mystring = getgallerylongname($myid);
            if ($mg_options[longnames] and $mystring) {
                echo $mystring;
            } else {
                echo getgalleryname($myid);
            }
        } else {
            echo $mydefault;
        }
    }
}