|
1
|
[//lasso
|
|
2
|
/*
|
|
3
|
* FCKeditor - The text editor for Internet - http://www.fckeditor.net
|
|
4
|
* Copyright (C) 2003-2009 Frederico Caldeira Knabben
|
|
5
|
*
|
|
6
|
* == BEGIN LICENSE ==
|
|
7
|
*
|
|
8
|
* Licensed under the terms of any of the following licenses at your
|
|
9
|
* choice:
|
|
10
|
*
|
|
11
|
* - GNU General Public License Version 2 or later (the "GPL")
|
|
12
|
* http://www.gnu.org/licenses/gpl.html
|
|
13
|
*
|
|
14
|
* - GNU Lesser General Public License Version 2.1 or later (the "LGPL")
|
|
15
|
* http://www.gnu.org/licenses/lgpl.html
|
|
16
|
*
|
|
17
|
* - Mozilla Public License Version 1.1 or later (the "MPL")
|
|
18
|
* http://www.mozilla.org/MPL/MPL-1.1.html
|
|
19
|
*
|
|
20
|
* == END LICENSE ==
|
|
21
|
*
|
|
22
|
* This is the "File Uploader" for Lasso.
|
|
23
|
*/
|
|
24
|
|
|
25
|
/*.....................................................................
|
|
26
|
Include global configuration. See config.lasso for details.
|
|
27
|
*/
|
|
28
|
include('config.lasso');
|
|
29
|
|
|
30
|
|
|
31
|
/*.....................................................................
|
|
32
|
Convert query string parameters to variables and initialize output.
|
|
33
|
*/
|
|
34
|
var(
|
|
35
|
'Type' = (Encode_HTML: action_param('Type')),
|
|
36
|
'CurrentFolder' = "/",
|
|
37
|
'ServerPath' = action_param('ServerPath'),
|
|
38
|
'NewFile' = null,
|
|
39
|
'NewFileName' = string,
|
|
40
|
'OrigFilePath' = string,
|
|
41
|
'NewFilePath' = string,
|
|
42
|
'errorNumber' = 0,
|
|
43
|
'customMsg' = ''
|
|
44
|
);
|
|
45
|
|
|
46
|
$Type == '' ? $Type = 'File';
|
|
47
|
|
|
48
|
|
|
49
|
/*.....................................................................
|
|
50
|
Calculate the path to the current folder.
|
|
51
|
*/
|
|
52
|
$ServerPath == '' ? $ServerPath = $config->find('UserFilesPath');
|
|
53
|
|
|
54
|
var('currentFolderURL' = $ServerPath
|
|
55
|
+ $config->find('Subdirectories')->find(action_param('Type'))
|
|
56
|
+ $CurrentFolder
|
|
57
|
);
|
|
58
|
|
|
59
|
$currentFolderURL = string_replace($currentFolderURL, -find='//', -replace='/');
|
|
60
|
|
|
61
|
/*.....................................................................
|
|
62
|
Custom tag sets the HTML response.
|
|
63
|
*/
|
|
64
|
|
|
65
|
define_tag(
|
|
66
|
'sendresults',
|
|
67
|
-namespace='fck_',
|
|
68
|
-priority='replace',
|
|
69
|
-required='errorNumber',
|
|
70
|
-type='integer',
|
|
71
|
-optional='fileUrl',
|
|
72
|
-type='string',
|
|
73
|
-optional='fileName',
|
|
74
|
-type='string',
|
|
75
|
-optional='customMsg',
|
|
76
|
-type='string',
|
|
77
|
-description='Sets the HTML response for the FCKEditor Quick Upload feature.'
|
|
78
|
);
|
|
79
|
|
|
80
|
$__html_reply__ = '<script type="text/javascript">';
|
|
81
|
|
|
82
|
// Minified version of the document.domain automatic fix script (#1919).
|
|
83
|
// The original script can be found at _dev/domain_fix_template.js
|
|
84
|
// Note: in Lasso replace \ with \\
|
|
85
|
$__html_reply__ = $__html_reply__ + "(function(){var d=document.domain;while (true){try{var A=window.parent.document.domain;break;}catch(e) {};d=d.replace(/.*?(?:\\.|$)/,'');if (d.length==0) break;try{document.domain=d;}catch (e){break;}}})();";
|
|
86
|
|
|
87
|
$__html_reply__ = $__html_reply__ + '\
|
|
88
|
window.parent.OnUploadCompleted(' + #errorNumber + ',"'
|
|
89
|
+ string_replace((Encode_HTML: #fileUrl), -find='"', -replace='\\"') + '","'
|
|
90
|
+ string_replace((Encode_HTML: #fileUrl->split('/')->last), -find='"', -replace='\\"') + '","'
|
|
91
|
+ string_replace((Encode_HTML: #customMsg), -find='"', -replace='\\"') + '");
|
|
92
|
</script>
|
|
93
|
';
|
|
94
|
/define_tag;
|
|
95
|
|
|
96
|
if($CurrentFolder->(Find: '..') || (String_FindRegExp: $CurrentFolder, -Find='(/\\.)|(//)|[\\\\:\\*\\?\\""\\<\\>\\|]|\\000|[\u007F]|[\u0001-\u001F]'));
|
|
97
|
$errorNumber = 102;
|
|
98
|
/if;
|
|
99
|
|
|
100
|
if($config->find('Enabled'));
|
|
101
|
/*.................................................................
|
|
102
|
Process an uploaded file.
|
|
103
|
*/
|
|
104
|
inline($connection);
|
|
105
|
/*.............................................................
|
|
106
|
Was a file actually uploaded?
|
|
107
|
*/
|
|
108
|
if($errorNumber != '102');
|
|
109
|
file_uploads->size ? $NewFile = file_uploads->get(1) | $errorNumber = 202;
|
|
110
|
/if;
|
|
111
|
|
|
112
|
if($errorNumber == 0);
|
|
113
|
/*.........................................................
|
|
114
|
Split the file's extension from the filename in order
|
|
115
|
to follow the API's naming convention for duplicate
|
|
116
|
files. (Test.txt, Test(1).txt, Test(2).txt, etc.)
|
|
117
|
*/
|
|
118
|
$NewFileName = $NewFile->find('OrigName');
|
|
119
|
$NewFileName = (String_ReplaceRegExp: $NewFileName, -find='\\\\|\\/|\\||\\:|\\?|\\*|"|<|>|\\000|[\u007F]|[\u0001-\u001F]', -replace='_');
|
|
120
|
$NewFileName = (String_ReplaceRegExp: $NewFileName, -find='\\.(?![^.]*$)', -replace='_');
|
|
121
|
$OrigFilePath = $currentFolderURL + $NewFileName;
|
|
122
|
$NewFilePath = $OrigFilePath;
|
|
123
|
local('fileExtension') = '.' + $NewFile->find('OrigExtension');
|
|
124
|
local('shortFileName') = $NewFileName->removetrailing(#fileExtension)&;
|
|
125
|
|
|
126
|
|
|
127
|
/*.........................................................
|
|
128
|
Make sure the file extension is allowed.
|
|
129
|
*/
|
|
130
|
|
|
131
|
local('allowedExt') = $config->find('AllowedExtensions')->find($Type);
|
|
132
|
local('deniedExt') = $config->find('DeniedExtensions')->find($Type);
|
|
133
|
if($allowedExt->Size > 0 && $allowedExt !>> $NewFile->find('OrigExtension'));
|
|
134
|
$errorNumber = 202;
|
|
135
|
else($deniedExt->Size > 0 && $deniedExt >> $NewFile->find('OrigExtension'));
|
|
136
|
$errorNumber = 202;
|
|
137
|
else;
|
|
138
|
/*.....................................................
|
|
139
|
Rename the target path until it is unique.
|
|
140
|
*/
|
|
141
|
while(file_exists($NewFilePath));
|
|
142
|
$NewFileName = #shortFileName + '(' + loop_count + ')' + #fileExtension;
|
|
143
|
$NewFilePath = $currentFolderURL + $NewFileName;
|
|
144
|
/while;
|
|
145
|
|
|
146
|
|
|
147
|
/*.....................................................
|
|
148
|
Copy the uploaded file to its final location.
|
|
149
|
*/
|
|
150
|
file_copy($NewFile->find('path'), $NewFilePath);
|
|
151
|
|
|
152
|
|
|
153
|
/*.....................................................
|
|
154
|
Set the error code for the response.
|
|
155
|
*/
|
|
156
|
select(file_currenterror( -errorcode));
|
|
157
|
case(0);
|
|
158
|
$OrigFilePath != $NewFilePath ? $errorNumber = 201;
|
|
159
|
case;
|
|
160
|
$errorNumber = 202;
|
|
161
|
/select;
|
|
162
|
/if;
|
|
163
|
/if;
|
|
164
|
if ($errorNumber != 0 && $errorNumber != 201);
|
|
165
|
$NewFilePath = "";
|
|
166
|
/if;
|
|
167
|
/inline;
|
|
168
|
else;
|
|
169
|
$errorNumber = 1;
|
|
170
|
$customMsg = 'This file uploader is disabled. Please check the "editor/filemanager/upload/lasso/config.lasso" file.';
|
|
171
|
/if;
|
|
172
|
|
|
173
|
fck_sendresults(
|
|
174
|
-errorNumber=$errorNumber,
|
|
175
|
-fileUrl=$NewFilePath,
|
|
176
|
-customMsg=$customMsg
|
|
177
|
);
|
|
178
|
]
|