| 1 | 
        
            2
         | 
        
            Manuela
         | 
        <?php
  | 
      
      
        | 2 | 
        
         | 
        
         | 
        /**
  | 
      
      
        | 3 | 
        
         | 
        
         | 
         *
  | 
      
      
        | 4 | 
        
         | 
        
         | 
         * @category        admin
  | 
      
      
        | 5 | 
        
         | 
        
         | 
         * @package         media
  | 
      
      
        | 6 | 
        
         | 
        
         | 
         * @author          WebsiteBaker Project
  | 
      
      
        | 7 | 
        
         | 
        
         | 
         * @copyright       Ryan Djurovich
  | 
      
      
        | 8 | 
        
         | 
        
         | 
         * @copyright       WebsiteBaker Org. e.V.
  | 
      
      
        | 9 | 
        
         | 
        
         | 
         * @link            http://websitebaker.org/
  | 
      
      
        | 10 | 
        
         | 
        
         | 
         * @license         http://www.gnu.org/licenses/gpl.html
  | 
      
      
        | 11 | 
        
         | 
        
         | 
         * @platform        WebsiteBaker 2.8.3
  | 
      
      
        | 12 | 
        
         | 
        
         | 
         * @requirements    PHP 5.3.6 and higher
  | 
      
      
        | 13 | 
        
         | 
        
         | 
         * @version         $Id$
  | 
      
      
        | 14 | 
        
         | 
        
         | 
         * @filesource      $HeadURL$
  | 
      
      
        | 15 | 
        
         | 
        
         | 
         * @lastmodified    $Date$
  | 
      
      
        | 16 | 
        
         | 
        
         | 
         *
  | 
      
      
        | 17 | 
        
         | 
        
         | 
         */
  | 
      
      
        | 18 | 
        
         | 
        
         | 
        
  | 
      
      
        | 19 | 
        
         | 
        
         | 
        require(dirname(dirname(__DIR__)).'/config.php');
  | 
      
      
        | 20 | 
        
         | 
        
         | 
        
  | 
      
      
        | 21 | 
        
         | 
        
         | 
        // Create admin object
  | 
      
      
        | 22 | 
        
         | 
        
         | 
        require_once(WB_PATH.'/framework/class.admin.php');
  | 
      
      
        | 23 | 
        
         | 
        
         | 
        $admin = new admin('Media', 'media_rename', false);
 | 
      
      
        | 24 | 
        
         | 
        
         | 
        
  | 
      
      
        | 25 | 
        
         | 
        
         | 
        // Include the WB functions file
  | 
      
      
        | 26 | 
        
         | 
        
         | 
        require_once(WB_PATH.'/framework/functions.php');
  | 
      
      
        | 27 | 
        
         | 
        
         | 
        
  | 
      
      
        | 28 | 
        
         | 
        
         | 
        // Get the current dir
  | 
      
      
        | 29 | 
        
         | 
        
         | 
        $directory = $admin->get_get('dir');
 | 
      
      
        | 30 | 
        
         | 
        
         | 
        $directory = ($directory == '/') ?  '' : $directory;
  | 
      
      
        | 31 | 
        
         | 
        
         | 
        
  | 
      
      
        | 32 | 
        
         | 
        
         | 
        $dirlink = 'browse.php?dir='.$directory;
  | 
      
      
        | 33 | 
        
         | 
        
         | 
        $rootlink = 'browse.php?dir=';
  | 
      
      
        | 34 | 
        
         | 
        
         | 
        // $file_id = intval($admin->get_get('id'));
 | 
      
      
        | 35 | 
        
         | 
        
         | 
        
  | 
      
      
        | 36 | 
        
         | 
        
         | 
        // first Check to see if it contains ..
  | 
      
      
        | 37 | 
        
         | 
        
         | 
        if (!check_media_path($directory)) {
 | 
      
      
        | 38 | 
        
         | 
        
         | 
            $admin->print_error($MESSAGE['MEDIA_DIR_DOT_DOT_SLASH'],$rootlink, false);
  | 
      
      
        | 39 | 
        
         | 
        
         | 
        }
  | 
      
      
        | 40 | 
        
         | 
        
         | 
        
  | 
      
      
        | 41 | 
        
         | 
        
         | 
        // Get the temp id
  | 
      
      
        | 42 | 
        
         | 
        
         | 
        $file_id = intval($admin->checkIDKEY('id', false, $_SERVER['REQUEST_METHOD']))-1;
 | 
      
      
        | 43 | 
        
         | 
        
         | 
        if ($file_id===false) {
 | 
      
      
        | 44 | 
        
         | 
        
         | 
            $admin->print_error($MESSAGE['GENERIC_SECURITY_ACCESS'],$dirlink, false);
  | 
      
      
        | 45 | 
        
         | 
        
         | 
        }
  | 
      
      
        | 46 | 
        
         | 
        
         | 
        
  | 
      
      
        | 47 | 
        
         | 
        
         | 
        $DIR  = array();
  | 
      
      
        | 48 | 
        
         | 
        
         | 
        $FILE = array();
  | 
      
      
        | 49 | 
        
         | 
        
         | 
        // Get home folder not to show
  | 
      
      
        | 50 | 
        
         | 
        
         | 
        $home_folders = get_home_folders();
  | 
      
      
        | 51 | 
        
         | 
        
         | 
        // Check for potentially malicious files
  | 
      
      
        | 52 | 
        
         | 
        
         | 
        $forbidden_file_types  = preg_replace( '/\s*[,;\|#]\s*/','|',RENAME_FILES_ON_UPLOAD);
  | 
      
      
        | 53 | 
        
         | 
        
         | 
        // Figure out what folder name the temp id is
  | 
      
      
        | 54 | 
        
         | 
        
         | 
        if($handle = opendir(WB_PATH.MEDIA_DIRECTORY.'/'.$directory)) {
 | 
      
      
        | 55 | 
        
         | 
        
         | 
            // Loop through the files and dirs an add to list
  | 
      
      
        | 56 | 
        
         | 
        
         | 
           while (false !== ($file = readdir($handle))) {
 | 
      
      
        | 57 | 
        
         | 
        
         | 
                $info = pathinfo($file);
  | 
      
      
        | 58 | 
        
         | 
        
         | 
                $ext = isset($info['extension']) ? $info['extension'] : '';
  | 
      
      
        | 59 | 
        
         | 
        
         | 
                if(substr($file, 0, 1) != '.' AND $file != '.svn' AND $file != 'index.php') {
 | 
      
      
        | 60 | 
        
         | 
        
         | 
                    if( !preg_match('/'.$forbidden_file_types.'$/i', $ext) ) {
 | 
      
      
        | 61 | 
        
         | 
        
         | 
                        if(is_dir(WB_PATH.MEDIA_DIRECTORY.$directory.'/'.$file)) {
 | 
      
      
        | 62 | 
        
         | 
        
         | 
                            if(!isset($home_folders[$directory.'/'.$file])) {
 | 
      
      
        | 63 | 
        
         | 
        
         | 
                                $DIR[] = $file;
  | 
      
      
        | 64 | 
        
         | 
        
         | 
                            }
  | 
      
      
        | 65 | 
        
         | 
        
         | 
                        } else {
 | 
      
      
        | 66 | 
        
         | 
        
         | 
                            $FILE[] = $file;
  | 
      
      
        | 67 | 
        
         | 
        
         | 
                        }
  | 
      
      
        | 68 | 
        
         | 
        
         | 
                    }
  | 
      
      
        | 69 | 
        
         | 
        
         | 
                }
  | 
      
      
        | 70 | 
        
         | 
        
         | 
            }
  | 
      
      
        | 71 | 
        
         | 
        
         | 
        closedir($handle);
  | 
      
      
        | 72 | 
        
         | 
        
         | 
        }
  | 
      
      
        | 73 | 
        
         | 
        
         | 
        
  | 
      
      
        | 74 | 
        
         | 
        
         | 
            $iSortFlags = ((version_compare(PHP_VERSION, '5.4.0', '<'))?SORT_REGULAR:SORT_NATURAL|SORT_FLAG_CASE);
  | 
      
      
        | 75 | 
        
         | 
        
         | 
            sort($DIR, $iSortFlags);
  | 
      
      
        | 76 | 
        
         | 
        
         | 
            sort($FILE, $iSortFlags);
  | 
      
      
        | 77 | 
        
         | 
        
         | 
            $aListDir = array_merge($DIR,$FILE);
  | 
      
      
        | 78 | 
        
         | 
        
         | 
            $temp_id = 0;
  | 
      
      
        | 79 | 
        
         | 
        
         | 
            if(isset($aListDir)) {
 | 
      
      
        | 80 | 
        
         | 
        
         | 
                foreach($aListDir AS $name)
  | 
      
      
        | 81 | 
        
         | 
        
         | 
                {
 | 
      
      
        | 82 | 
        
         | 
        
         | 
                    if(!isset($rename_file)&& ($file_id == $temp_id)) {
 | 
      
      
        | 83 | 
        
         | 
        
         | 
                        $rename_file = $name;
  | 
      
      
        | 84 | 
        
         | 
        
         | 
                        $type = is_dir(WB_PATH.MEDIA_DIRECTORY.$directory.'/'.$rename_file)?'folder':'file';
  | 
      
      
        | 85 | 
        
         | 
        
         | 
                    }
  | 
      
      
        | 86 | 
        
         | 
        
         | 
                    $temp_id++;
  | 
      
      
        | 87 | 
        
         | 
        
         | 
                }
  | 
      
      
        | 88 | 
        
         | 
        
         | 
            }
  | 
      
      
        | 89 | 
        
         | 
        
         | 
        /*
  | 
      
      
        | 90 | 
        
         | 
        
         | 
        print '<pre  class="mod-pre rounded">function <span>'.__FUNCTION__.'( '.$file_id.'=='.$temp_id.' );</span>  filename: <span>'.basename(__FILE__).'</span>  line: '.__LINE__.' -> <br />';
  | 
      
      
        | 91 | 
        
         | 
        
         | 
        print_r( $rename_file.' '.$type ); print '</pre>'; flush (); //  ob_flush();;sleep(10); die();
  | 
      
      
        | 92 | 
        
         | 
        
         | 
        print '<pre  class="mod-pre rounded">function <span>'.__FUNCTION__.'( '.' );</span>  filename: <span>'.basename(__FILE__).'</span>  line: '.__LINE__.' -> <br />';
  | 
      
      
        | 93 | 
        
         | 
        
         | 
        print_r( $aListDir ); print '</pre>'; flush (); //  ob_flush();;sleep(10); die();
  | 
      
      
        | 94 | 
        
         | 
        
         | 
        */
  | 
      
      
        | 95 | 
        
         | 
        
         | 
        
  | 
      
      
        | 96 | 
        
         | 
        
         | 
        if(!isset($rename_file)) {
 | 
      
      
        | 97 | 
        
         | 
        
         | 
            $admin->print_error($MESSAGE['MEDIA_FILE_NOT_FOUND'], $dirlink, false);
  | 
      
      
        | 98 | 
        
         | 
        
         | 
        }
  | 
      
      
        | 99 | 
        
         | 
        
         | 
        
  | 
      
      
        | 100 | 
        
         | 
        
         | 
        $sExtension = '';
  | 
      
      
        | 101 | 
        
         | 
        
         | 
        $sBasename = $rename_file;
  | 
      
      
        | 102 | 
        
         | 
        
         | 
        preg_match (
  | 
      
      
        | 103 | 
        
         | 
        
         | 
            '/^(?:.*?[\/])?([^\/]*?)\.([^\.]*)$/iU',
  | 
      
      
        | 104 | 
        
         | 
        
         | 
            str_replace('\\', '/', $rename_file),
 | 
      
      
        | 105 | 
        
         | 
        
         | 
            $aMatches
  | 
      
      
        | 106 | 
        
         | 
        
         | 
        );
  | 
      
      
        | 107 | 
        
         | 
        
         | 
        if (sizeof($aMatches) == 3) {
 | 
      
      
        | 108 | 
        
         | 
        
         | 
            $sBasename  = $aMatches[1];
  | 
      
      
        | 109 | 
        
         | 
        
         | 
            $sExtension = $aMatches[2];
  | 
      
      
        | 110 | 
        
         | 
        
         | 
        }
  | 
      
      
        | 111 | 
        
         | 
        
         | 
        
  | 
      
      
        | 112 | 
        
         | 
        
         | 
        // Setup template object, parse vars to it, then parse it
  | 
      
      
        | 113 | 
        
         | 
        
         | 
        // Create new template object
  | 
      
      
        | 114 | 
        
         | 
        
         | 
        $template = new Template(dirname($admin->correct_theme_source('media_rename.htt')));
 | 
      
      
        | 115 | 
        
         | 
        
         | 
        $template->set_file('page', 'media_rename.htt');
 | 
      
      
        | 116 | 
        
         | 
        
         | 
        $template->set_block('page', 'main_block', 'main');
 | 
      
      
        | 117 | 
        
         | 
        
         | 
        //echo WB_PATH.'/media/'.$directory.'/'.$rename_file;
  | 
      
      
        | 118 | 
        
         | 
        
         | 
        if($type == 'folder') {
 | 
      
      
        | 119 | 
        
         | 
        
         | 
            $template->set_var('DISPlAY_EXTENSION', 'hide');
 | 
      
      
        | 120 | 
        
         | 
        
         | 
            $extension = '';
  | 
      
      
        | 121 | 
        
         | 
        
         | 
        } else {
 | 
      
      
        | 122 | 
        
         | 
        
         | 
            $template->set_var('DISPlAY_EXTENSION', '');
 | 
      
      
        | 123 | 
        
         | 
        
         | 
            $extension = strstr($rename_file, '.');
  | 
      
      
        | 124 | 
        
         | 
        
         | 
        }
  | 
      
      
        | 125 | 
        
         | 
        
         | 
        
  | 
      
      
        | 126 | 
        
         | 
        
         | 
        if($type == 'folder') {
 | 
      
      
        | 127 | 
        
         | 
        
         | 
            $type = $TEXT['FOLDER'];
  | 
      
      
        | 128 | 
        
         | 
        
         | 
        } else {
 | 
      
      
        | 129 | 
        
         | 
        
         | 
            $type = $TEXT['FILE'];
  | 
      
      
        | 130 | 
        
         | 
        
         | 
        }
  | 
      
      
        | 131 | 
        
         | 
        
         | 
        
  | 
      
      
        | 132 | 
        
         | 
        
         | 
        $template->set_var(array(
  | 
      
      
        | 133 | 
        
         | 
        
         | 
                            'THEME_URL' => THEME_URL,
  | 
      
      
        | 134 | 
        
         | 
        
         | 
                            'FILENAME' => $rename_file,
  | 
      
      
        | 135 | 
        
         | 
        
         | 
                            'BASENAME' => $sBasename,
  | 
      
      
        | 136 | 
        
         | 
        
         | 
                            'DIR' => $directory,
  | 
      
      
        | 137 | 
        
         | 
        
         | 
                            'FILE_ID' => $admin->getIDKEY($file_id),
  | 
      
      
        | 138 | 
        
         | 
        
         | 
                            // 'FILE_ID' => $file_id,
  | 
      
      
        | 139 | 
        
         | 
        
         | 
                            'TYPE' => $type,
  | 
      
      
        | 140 | 
        
         | 
        
         | 
                            'EXTENSION' => $sExtension,
  | 
      
      
        | 141 | 
        
         | 
        
         | 
                            'FTAN' => $admin->getFTAN()
  | 
      
      
        | 142 | 
        
         | 
        
         | 
                        )
  | 
      
      
        | 143 | 
        
         | 
        
         | 
                    );
  | 
      
      
        | 144 | 
        
         | 
        
         | 
        
  | 
      
      
        | 145 | 
        
         | 
        
         | 
        
  | 
      
      
        | 146 | 
        
         | 
        
         | 
        // Insert language text and messages
  | 
      
      
        | 147 | 
        
         | 
        
         | 
        $template->set_var(array(
  | 
      
      
        | 148 | 
        
         | 
        
         | 
                            'TEXT_TO' => $TEXT['TO'],
  | 
      
      
        | 149 | 
        
         | 
        
         | 
                            'TEXT_RENAME' => $TEXT['RENAME'],
  | 
      
      
        | 150 | 
        
         | 
        
         | 
                            'TEXT_CANCEL' => $TEXT['CANCEL'],
  | 
      
      
        | 151 | 
        
         | 
        
         | 
                            'TEXT_UP' => $TEXT['UP'],
  | 
      
      
        | 152 | 
        
         | 
        
         | 
                            'TEXT_OVERWRITE_EXISTING' => $TEXT['OVERWRITE_EXISTING']
  | 
      
      
        | 153 | 
        
         | 
        
         | 
                        )
  | 
      
      
        | 154 | 
        
         | 
        
         | 
                    );
  | 
      
      
        | 155 | 
        
         | 
        
         | 
        
  | 
      
      
        | 156 | 
        
         | 
        
         | 
        // Parse template object
  | 
      
      
        | 157 | 
        
         | 
        
         | 
        $template->parse('main', 'main_block', false);
 | 
      
      
        | 158 | 
        
         | 
        
         | 
        $template->pparse('output', 'page');
 |