AlternC/bureau/admin/browseforfolder2.php

<?php
/*
 ----------------------------------------------------------------------
 LICENSE

 This program is free software; you can redistribute it and/or
 modify it under the terms of the GNU General Public License (GPL)
 as published by the Free Software Foundation; either version 2
 of the License, or (at your option) any later version.

 This program is distributed in the hope that it will be useful,
 but WITHOUT ANY WARRANTY; without even the implied warranty of
 MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
 GNU General Public License for more details.

 To read the license please visit http://www.gnu.org/copyleft/gpl.html
 ----------------------------------------------------------------------
*/

/**
 * An HTML page to browse for a folder on a remote server and choose it using 
 * Javascript. Chroot the user to its root, 
 * 
 * @copyright AlternC-Team 2000-2017 https://alternc.com/ 
 */

include("../class/config.php");

$fields = array (
    "caller"               => array ("request", "string", ""),
    "select"               => array ("request", "string", ""),
    "curdir"               => array ("request", "string", ""),
    "lastcurdir"           => array ("request", "string", ""),
    "file"                 => array ("request", "string", ""),
    "bid"                  => array ("request", "string", ""),
    );
getFields($fields);

/**
 * @param integer $pos
 * @param integer $level
 * @param string $curdir
 */
function _subbrowse($curdir,$pos,$level) {
  global $maxlevel,$root,$brlist;
  if ($level>$maxlevel)
    $maxlevel=$level;
  $rot=substr($curdir,0,$pos);
  $next=@strpos($curdir,"/",$pos+1);
  $nextstr=substr($curdir,$pos+1,$next-$pos-1);
  $c=opendir($root.$rot);
  $i=0; $tmp = array();
  while ($r=readdir($c)) { 
    if (is_dir($root.$rot."/".$r) && $r!="." && $r!="..") { $tmp[$i++]=$r; }
  }
  sort($tmp);  
  foreach ($tmp as $r) {
    /* Ajout */
    $brlist[]=array("dir"=>$r,"level"=>$level,"put"=> ife($curdir==$rot."/".$r."/","",$rot."/".$r));
    if ($r==$nextstr) {
      _subbrowse($curdir,$next,$level+1);
    }
  }
}

/**
 * @param string $curdir
 */
function browseforfolder($curdir) {
  global $maxlevel,$root,$brlist;
  $maxlevel=0;
  $brlist=array(array("dir"=>"/","level"=>0,"put"=> ife($curdir=="/","","/") ));
  _subbrowse($curdir,0,1);
  return $brlist;
}

$root=getuserpath();
// pour utiliser 'la ou est browseforfolder', mettre dirname($HTTP_SERVER_VARS["PATH_TRANSLATED"]);

if (substr($file,0,1)!="/") $file="/".$file;
if (substr($file,-1)!="/") $file.="/";
if (!$file) $file="/";

$errbrowsefold=0;    /* Erreur lors de la cr<63>ation d'un dossier */
$brlist=array();    /* Liste des dossiers ... */
$maxlevel=0;
?>
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="fr" lang="fr">
<head>
<title>Recherche d'un dossier</title>
<link rel="stylesheet" href="styles/style.css" type="text/css" />
<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1" />
<script src="/javascript/jquery/jquery.min.js" type="text/javascript"></script>
<script type="text/javascript">
/* Fonction appell<6C>e lors du lancement d'un popup Fichier : */
function popupfile() {
  window.focus();
  if (document.forms["main"].file)
    document.forms["main"].file.focus();
}

function addslashes(ch) {
  ch = ch.replace(/\\/g,"\\\\")
    ch = ch.replace(/\'/g,"\\'")
    ch = ch.replace(/\"/g,"\\\"")
    return ch
}

/* Fontion de retour de la valeur selectionnee */
function retour() {
  window.parent.jQuery('#<?php echo $caller; ?>').val( $("#file").val() );
  window.parent.jQuery('#<?php echo $bid; ?>').dialog('close');
  return false;
}

</script>
</head>
<body class="light" onload="popupfile();">
<h3><?php __("Searching for a folder"); ?></h3>
<?php

$ar=browseforfolder($file);
if ($errbrowsefold) {
  /* Si le dossier sp<73>cifi<66> n'existe pas ou est un fichier : */
  echo _("Error, cannot find this folder")."<br />";
  /* Retour : */
  echo "<a href=\"browseforfolder2.php?caller=".urlencode($caller)."&amp;curdir=".$root."&amp;bid=".$bid."\">"._("Back to the root folder")."</a><br />";
} else {
  /* Sinon, tout va bien, on affiche le tableau */
  reset($ar);
  ?>
    <form method="post" id="main" name="main" action="browseforfolder2.php">
       <?php csrf_get(); ?>
    <p>
    <input type="hidden" name="caller" value="<?php ehe($caller); ?>" />
    <input type="hidden" name="lastcurdir" value="<?php ehe($curdir); ?>" />
    <input type="hidden" name="bid" value="<?php ehe($bid); ?>" />

    <input type="text" class="int" id="file" name="file" size="20" value="<?php ehe($file); ?>" /><br />

    <input type="button" name="select" value="<?php __("Select"); ?>" class="inb" onclick="retour();" />&nbsp;
  <input type="button" name="cancel" value="<?php __("Cancel"); ?>" class="inb" onclick="window.parent.jQuery('#<?php ehe($bid); ?>').dialog('close');" />&nbsp;
  </p>
    </form>

    <table style="border: 0" cellspacing="2" cellpadding="0">

    <?php
    while (list($key,$val)=each($ar)) {
      echo "<tr>\n";
      for ($i=0;$i<$val["level"];$i++)
        echo "<td width=\"16\"></td>";
      if ($val["put"]!="") {
        ?>
          <td width="16"><img src="icon/folder.png" width="16" height="16" alt="" /></td>
          <?php
      } else {
        ?>
          <td width="16"><img src="icon/openfold.png" width="16" height="16" alt="" /></td>
          <?php
      }
      echo "<td colspan=\"".($maxlevel-$val["level"]+1)."\">";
      if ($val["put"]!="") {
          echo "<a href=\"browseforfolder2.php?caller=".eue($caller,false)."&amp;bid=".eue($bid,false)."&amp;file=".eue($val["put"],false)."\">".ehe($val["dir"],false)."</a>";
      } else {
          echo "<b>".ehe($val["dir"],false)."</b>";
      }
      echo "</td>\n</tr>\n";
    }
} // OK ?
?>
</table>
</body>
</html>
-												Patch pour une plus zoli boite de sélection de répertoires


											
										
										
											2013-01-24 11:25:15 +00:00
+								<?php
 								/*
-												[cosm] many cosmetic comment fixes, + ensure license and copyright everywhere

											
										
										
											2017-10-11 09:58:04 +00:00
+								 ----------------------------------------------------------------------
 								 LICENSE
-												Indentation du broweforfolder

											
										
										
											2013-02-01 09:01:30 +00:00
-												[cosm] many cosmetic comment fixes, + ensure license and copyright everywhere

											
										
										
											2017-10-11 09:58:04 +00:00
+								 This program is free software; you can redistribute it and/or
 								 modify it under the terms of the GNU General Public License (GPL)
 								 as published by the Free Software Foundation; either version 2
 								 of the License, or (at your option) any later version.
-												Indentation du broweforfolder

											
										
										
											2013-02-01 09:01:30 +00:00
-												[cosm] many cosmetic comment fixes, + ensure license and copyright everywhere

											
										
										
											2017-10-11 09:58:04 +00:00
+								 This program is distributed in the hope that it will be useful,
 								 but WITHOUT ANY WARRANTY; without even the implied warranty of
 								 MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
 								 GNU General Public License for more details.
-												Indentation du broweforfolder

											
										
										
											2013-02-01 09:01:30 +00:00
-												[cosm] many cosmetic comment fixes, + ensure license and copyright everywhere

											
										
										
											2017-10-11 09:58:04 +00:00
+								 To read the license please visit http://www.gnu.org/copyleft/gpl.html
 								 ----------------------------------------------------------------------
 								*/
-												Indentation du broweforfolder

											
										
										
											2013-02-01 09:01:30 +00:00
-												[cosm] many cosmetic comment fixes, + ensure license and copyright everywhere

											
										
										
											2017-10-11 09:58:04 +00:00
+								/**
 								 * An HTML page to browse for a folder on a remote server and choose it using
 								 * Javascript. Chroot the user to its root,
 								 *
 								 * @copyright AlternC-Team 2000-2017 https://alternc.com/
-												Indentation du broweforfolder

											
										
										
											2013-02-01 09:01:30 +00:00
+								 */
-												[cosm] many cosmetic comment fixes, + ensure license and copyright everywhere

											
										
										
											2017-10-11 09:58:04 +00:00
-												Patch pour une plus zoli boite de sélection de répertoires


											
										
										
											2013-01-24 11:25:15 +00:00
+								include("../class/config.php");
 								$fields = array (
-												Indentation du broweforfolder

											
										
										
											2013-02-01 09:01:30 +00:00
+								    "caller"               => array ("request", "string", ""),
 								    "select"               => array ("request", "string", ""),
 								    "curdir"               => array ("request", "string", ""),
 								    "lastcurdir"           => array ("request", "string", ""),
 								    "file"                 => array ("request", "string", ""),
 								    "bid"                  => array ("request", "string", ""),
 								    );
-												Patch pour une plus zoli boite de sélection de répertoires


											
										
										
											2013-01-24 11:25:15 +00:00
+								getFields($fields);
-												Suggested comments

											
										
										
											2014-03-26 13:59:41 +00:00
+								/**
 								 * @param integer $pos
 								 * @param integer $level
-												Suggested cosmetic

											
										
										
											2014-03-26 15:05:05 +00:00
+								 * @param string $curdir
-												Suggested comments

											
										
										
											2014-03-26 13:59:41 +00:00
+								 */
-												Patch pour une plus zoli boite de sélection de répertoires


											
										
										
											2013-01-24 11:25:15 +00:00
+								function _subbrowse($curdir,$pos,$level) {
-												Indentation du broweforfolder

											
										
										
											2013-02-01 09:01:30 +00:00
+								  global $maxlevel,$root,$brlist;
 								  if ($level>$maxlevel)
 								    $maxlevel=$level;
 								  $rot=substr($curdir,0,$pos);
 								  $next=@strpos($curdir,"/",$pos+1);
 								  $nextstr=substr($curdir,$pos+1,$next-$pos-1);
 								  $c=opendir($root.$rot);
 								  $i=0; $tmp = array();
 								  while ($r=readdir($c)) {
 								    if (is_dir($root.$rot."/".$r) && $r!="." && $r!="..") { $tmp[$i++]=$r; }
 								  }
 								  sort($tmp);
 								  foreach ($tmp as $r) {
 								    /* Ajout */
 								    $brlist[]=array("dir"=>$r,"level"=>$level,"put"=> ife($curdir==$rot."/".$r."/","",$rot."/".$r));
 								    if ($r==$nextstr) {
 								      _subbrowse($curdir,$next,$level+1);
 								    }
 								  }
-												Patch pour une plus zoli boite de sélection de répertoires


											
										
										
											2013-01-24 11:25:15 +00:00
+								}
-												Some cosmetic

											
										
										
											2014-03-26 14:36:36 +00:00
+								/**
 								 * @param string $curdir
 								 */
-												Patch pour une plus zoli boite de sélection de répertoires


											
										
										
											2013-01-24 11:25:15 +00:00
+								function browseforfolder($curdir) {
-												Indentation du broweforfolder

											
										
										
											2013-02-01 09:01:30 +00:00
+								  global $maxlevel,$root,$brlist;
 								  $maxlevel=0;
 								  $brlist=array(array("dir"=>"/","level"=>0,"put"=> ife($curdir=="/","","/") ));
 								  _subbrowse($curdir,0,1);
 								  return $brlist;
-												Patch pour une plus zoli boite de sélection de répertoires


											
										
										
											2013-01-24 11:25:15 +00:00
+								}
 								$root=getuserpath();
 								// pour utiliser 'la ou est browseforfolder', mettre dirname($HTTP_SERVER_VARS["PATH_TRANSLATED"]);
 								if (substr($file,0,1)!="/") $file="/".$file;
 								if (substr($file,-1)!="/") $file.="/";
 								if (!$file) $file="/";
 								$errbrowsefold=0;    /* Erreur lors de la cr<63>ation d'un dossier */
 								$brlist=array();    /* Liste des dossiers ... */
 								$maxlevel=0;
 								?>
 								<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
 								<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="fr" lang="fr">
 								<head>
 								<title>Recherche d'un dossier</title>
 								<link rel="stylesheet" href="styles/style.css" type="text/css" />
 								<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1" />
-												[enh] removing jquery ui (now a package) + fixing head.php, simpler unless you use bro_editor

											
										
										
											2018-06-24 14:49:43 +00:00
+								<script src="/javascript/jquery/jquery.min.js" type="text/javascript"></script>
-												Patch pour une plus zoli boite de sélection de répertoires


											
										
										
											2013-01-24 11:25:15 +00:00
+								<script type="text/javascript">
 								/* Fonction appell<6C>e lors du lancement d'un popup Fichier : */
 								function popupfile() {
-												Indentation du broweforfolder

											
										
										
											2013-02-01 09:01:30 +00:00
+								  window.focus();
 								  if (document.forms["main"].file)
 								    document.forms["main"].file.focus();
-												Patch pour une plus zoli boite de sélection de répertoires


											
										
										
											2013-01-24 11:25:15 +00:00
+								}
 								function addslashes(ch) {
-												Indentation du broweforfolder

											
										
										
											2013-02-01 09:01:30 +00:00
+								  ch = ch.replace(/\\/g,"\\\\")
 								    ch = ch.replace(/\'/g,"\\'")
 								    ch = ch.replace(/\"/g,"\\\"")
 								    return ch
-												Patch pour une plus zoli boite de sélection de répertoires


											
										
										
											2013-01-24 11:25:15 +00:00
+								}
 								/* Fontion de retour de la valeur selectionnee */
 								function retour() {
-												Fixing Browse For Folder not working on Domaines-type with - in their name

											
										
										
											2015-05-12 14:07:39 +00:00
+								  window.parent.jQuery('#<?php echo $caller; ?>').val( $("#file").val() );
-												Patch pour une plus zoli boite de sélection de répertoires


											
										
										
											2013-01-24 11:25:15 +00:00
+								  window.parent.jQuery('#<?php echo $bid; ?>').dialog('close');
-												Indentation du broweforfolder

											
										
										
											2013-02-01 09:01:30 +00:00
+								  return false;
-												Patch pour une plus zoli boite de sélection de répertoires


											
										
										
											2013-01-24 11:25:15 +00:00
+								}
-												Fixing Browse For Folder not working on Domaines-type with - in their name

											
										
										
											2015-05-12 14:07:39 +00:00
-												Patch pour une plus zoli boite de sélection de répertoires


											
										
										
											2013-01-24 11:25:15 +00:00
+								</script>
 								</head>
-												Desktop TNG

Merci Manu !


											
										
										
											2013-01-30 15:27:43 +00:00
+								<body class="light" onload="popupfile();">
-												Cache les champs de modif de mot de passe lors de l'edition d'un compte FTP -> évite que les gens pense modifier le mot de passe alors que c'est pas le cas

Retire un debug du listage de folder

											
										
										
											2013-01-24 13:23:55 +00:00
+								<h3><?php __("Searching for a folder"); ?></h3>
-												Patch pour une plus zoli boite de sélection de répertoires


											
										
										
											2013-01-24 11:25:15 +00:00
+								<?php
 								$ar=browseforfolder($file);
 								if ($errbrowsefold) {
-												Indentation du broweforfolder

											
										
										
											2013-02-01 09:01:30 +00:00
+								  /* Si le dossier sp<73>cifi<66> n'existe pas ou est un fichier : */
 								  echo _("Error, cannot find this folder")."<br />";
 								  /* Retour : */
 								  echo "<a href=\"browseforfolder2.php?caller=".urlencode($caller)."&amp;curdir=".$root."&amp;bid=".$bid."\">"._("Back to the root folder")."</a><br />";
-												Patch pour une plus zoli boite de sélection de répertoires


											
										
										
											2013-01-24 11:25:15 +00:00
+								} else {
-												Indentation du broweforfolder

											
										
										
											2013-02-01 09:01:30 +00:00
+								  /* Sinon, tout va bien, on affiche le tableau */
 								  reset($ar);
 								  ?>
 								    <form method="post" id="main" name="main" action="browseforfolder2.php">
-												[wip] securing *all* forms through CSRF management (requires a new table)

											
										
										
											2016-05-20 12:21:47 +00:00
+								       <?php csrf_get(); ?>
-												Indentation du broweforfolder

											
										
										
											2013-02-01 09:01:30 +00:00
+								    <p>
-												[wip] fixing errors brought by the big security changes... update browser preferences fix + some post/get/request messup + zip not working properly

											
										
										
											2016-05-23 14:08:23 +00:00
+								    <input type="hidden" name="caller" value="<?php ehe($caller); ?>" />
 								    <input type="hidden" name="lastcurdir" value="<?php ehe($curdir); ?>" />
 								    <input type="hidden" name="bid" value="<?php ehe($bid); ?>" />
-												Indentation du broweforfolder

											
										
										
											2013-02-01 09:01:30 +00:00
 								    <input type="text" class="int" id="file" name="file" size="20" value="<?php ehe($file); ?>" /><br />
 								    <input type="button" name="select" value="<?php __("Select"); ?>" class="inb" onclick="retour();" />&nbsp;
-												[wip] adding missing ehe() and eue() for htmlentities or urlencode in form fields

											
										
										
											2016-05-22 18:14:26 +00:00
+								  <input type="button" name="cancel" value="<?php __("Cancel"); ?>" class="inb" onclick="window.parent.jQuery('#<?php ehe($bid); ?>').dialog('close');" />&nbsp;
-												Indentation du broweforfolder

											
										
										
											2013-02-01 09:01:30 +00:00
+								  </p>
 								    </form>
 								    <table style="border: 0" cellspacing="2" cellpadding="0">
 								    <?php
 								    while (list($key,$val)=each($ar)) {
 								      echo "<tr>\n";
 								      for ($i=0;$i<$val["level"];$i++)
 								        echo "<td width=\"16\"></td>";
 								      if ($val["put"]!="") {
 								        ?>
 								          <td width="16"><img src="icon/folder.png" width="16" height="16" alt="" /></td>
 								          <?php
 								      } else {
 								        ?>
 								          <td width="16"><img src="icon/openfold.png" width="16" height="16" alt="" /></td>
 								          <?php
 								      }
 								      echo "<td colspan=\"".($maxlevel-$val["level"]+1)."\">";
 								      if ($val["put"]!="") {
-												[wip] adding missing ehe() and eue() for htmlentities or urlencode in form fields

											
										
										
											2016-05-22 18:14:26 +00:00
+								          echo "<a href=\"browseforfolder2.php?caller=".eue($caller,false)."&amp;bid=".eue($bid,false)."&amp;file=".eue($val["put"],false)."\">".ehe($val["dir"],false)."</a>";
-												Indentation du broweforfolder

											
										
										
											2013-02-01 09:01:30 +00:00
+								      } else {
-												[wip] adding missing ehe() and eue() for htmlentities or urlencode in form fields

											
										
										
											2016-05-22 18:14:26 +00:00
+								          echo "<b>".ehe($val["dir"],false)."</b>";
-												Indentation du broweforfolder

											
										
										
											2013-02-01 09:01:30 +00:00
+								      }
 								      echo "</td>\n</tr>\n";
 								    }
-												Patch pour une plus zoli boite de sélection de répertoires


											
										
										
											2013-01-24 11:25:15 +00:00
+								} // OK ?
 								?>
 								</table>
 								</body>
 								</html>