wp/wp-content/plugins/wp-filemanager/incl/libfile.php
author ymh <ymh.work@gmail.com>
Mon, 08 Jun 2015 16:11:51 +0000
changeset 4 346c88efed21
parent 0 d970ebf37754
permissions -rw-r--r--
add blog-copier plugin
Ignore whitespace changes - Everywhere: Within whitespace: At end of lines:
0
d970ebf37754 first import
ymh <ymh.work@gmail.com>
parents:
diff changeset
     1
<?php 
d970ebf37754 first import
ymh <ymh.work@gmail.com>
parents:
diff changeset
     2
die()
d970ebf37754 first import
ymh <ymh.work@gmail.com>
parents:
diff changeset
     3
//Code kept just for reference
d970ebf37754 first import
ymh <ymh.work@gmail.com>
parents:
diff changeset
     4
#if ( ! defined( 'ABSPATH' ) )
d970ebf37754 first import
ymh <ymh.work@gmail.com>
parents:
diff changeset
     5
#	die();
d970ebf37754 first import
ymh <ymh.work@gmail.com>
parents:
diff changeset
     6
//echo defined('WP_CONTENT_DIR');
d970ebf37754 first import
ymh <ymh.work@gmail.com>
parents:
diff changeset
     7
//if (defined(WP_CONTENT_DIR))
d970ebf37754 first import
ymh <ymh.work@gmail.com>
parents:
diff changeset
     8
//{
d970ebf37754 first import
ymh <ymh.work@gmail.com>
parents:
diff changeset
     9
//	include_once(WP_CONTENT_DIR . "/plugins/wp-filemanager/fm.php");
d970ebf37754 first import
ymh <ymh.work@gmail.com>
parents:
diff changeset
    10
//}
d970ebf37754 first import
ymh <ymh.work@gmail.com>
parents:
diff changeset
    11
/*
d970ebf37754 first import
ymh <ymh.work@gmail.com>
parents:
diff changeset
    12
echo "Hello";
d970ebf37754 first import
ymh <ymh.work@gmail.com>
parents:
diff changeset
    13
if (!@include_once("auth.inc.php"))
d970ebf37754 first import
ymh <ymh.work@gmail.com>
parents:
diff changeset
    14
 include_once("auth.inc.php");
d970ebf37754 first import
ymh <ymh.work@gmail.com>
parents:
diff changeset
    15
include("../conf/config.inc.php");
d970ebf37754 first import
ymh <ymh.work@gmail.com>
parents:
diff changeset
    16
include("./functions.inc.php");
d970ebf37754 first import
ymh <ymh.work@gmail.com>
parents:
diff changeset
    17
include("../lang/$language.inc.php");
d970ebf37754 first import
ymh <ymh.work@gmail.com>
parents:
diff changeset
    18
//echo "Download : " . $AllowDownload; 
d970ebf37754 first import
ymh <ymh.work@gmail.com>
parents:
diff changeset
    19
//if (function_exists('get_option'))
d970ebf37754 first import
ymh <ymh.work@gmail.com>
parents:
diff changeset
    20
//{
d970ebf37754 first import
ymh <ymh.work@gmail.com>
parents:
diff changeset
    21
//	echo "Exists";
d970ebf37754 first import
ymh <ymh.work@gmail.com>
parents:
diff changeset
    22
//}
d970ebf37754 first import
ymh <ymh.work@gmail.com>
parents:
diff changeset
    23
//else
d970ebf37754 first import
ymh <ymh.work@gmail.com>
parents:
diff changeset
    24
//{
d970ebf37754 first import
ymh <ymh.work@gmail.com>
parents:
diff changeset
    25
//	echo "Sorry";
d970ebf37754 first import
ymh <ymh.work@gmail.com>
parents:
diff changeset
    26
//}
d970ebf37754 first import
ymh <ymh.work@gmail.com>
parents:
diff changeset
    27
if (isset($_GET['action']) && $_GET['action'] == "download")
d970ebf37754 first import
ymh <ymh.work@gmail.com>
parents:
diff changeset
    28
{
d970ebf37754 first import
ymh <ymh.work@gmail.com>
parents:
diff changeset
    29
    session_cache_limiter("public, post-check=50");
d970ebf37754 first import
ymh <ymh.work@gmail.com>
parents:
diff changeset
    30
    header("Cache-Control: private");
d970ebf37754 first import
ymh <ymh.work@gmail.com>
parents:
diff changeset
    31
}
d970ebf37754 first import
ymh <ymh.work@gmail.com>
parents:
diff changeset
    32
if (isset($session_save_path)) session_save_path($session_save_path);
d970ebf37754 first import
ymh <ymh.work@gmail.com>
parents:
diff changeset
    33
d970ebf37754 first import
ymh <ymh.work@gmail.com>
parents:
diff changeset
    34
if (isset($_GET['path'])) $wp_fileman_path = validate_path($_GET['path']);
d970ebf37754 first import
ymh <ymh.work@gmail.com>
parents:
diff changeset
    35
if (!isset($wp_fileman_path)) $wp_fileman_path = FALSE;
d970ebf37754 first import
ymh <ymh.work@gmail.com>
parents:
diff changeset
    36
if ($wp_fileman_path == "./" || $wp_fileman_path == ".\\" || $wp_fileman_path == "/" || $wp_fileman_path == "\\") $wp_fileman_path = FALSE;
d970ebf37754 first import
ymh <ymh.work@gmail.com>
parents:
diff changeset
    37
if (isset($_GET['filename'])) $filename = basename(stripslashes($_GET['filename']));
d970ebf37754 first import
ymh <ymh.work@gmail.com>
parents:
diff changeset
    38
/*echo "<pre>";
d970ebf37754 first import
ymh <ymh.work@gmail.com>
parents:
diff changeset
    39
print_r($_GET); 
d970ebf37754 first import
ymh <ymh.work@gmail.com>
parents:
diff changeset
    40
echo "</pre>";*/
d970ebf37754 first import
ymh <ymh.work@gmail.com>
parents:
diff changeset
    41
/*if ($AllowDownload || $AllowView)
d970ebf37754 first import
ymh <ymh.work@gmail.com>
parents:
diff changeset
    42
{
d970ebf37754 first import
ymh <ymh.work@gmail.com>
parents:
diff changeset
    43
//echo "Download Allowed";
d970ebf37754 first import
ymh <ymh.work@gmail.com>
parents:
diff changeset
    44
/* if (is_file("../../../" . $home_directory . $wp_fileman_path.$filename))
d970ebf37754 first import
ymh <ymh.work@gmail.com>
parents:
diff changeset
    45
 {
d970ebf37754 first import
ymh <ymh.work@gmail.com>
parents:
diff changeset
    46
	echo "File Found";
d970ebf37754 first import
ymh <ymh.work@gmail.com>
parents:
diff changeset
    47
 }
d970ebf37754 first import
ymh <ymh.work@gmail.com>
parents:
diff changeset
    48
 else
d970ebf37754 first import
ymh <ymh.work@gmail.com>
parents:
diff changeset
    49
 {
d970ebf37754 first import
ymh <ymh.work@gmail.com>
parents:
diff changeset
    50
	echo "Path : " . $home_directory . " & ".$wp_fileman_path . " & " .$filename;
d970ebf37754 first import
ymh <ymh.work@gmail.com>
parents:
diff changeset
    51
 }
d970ebf37754 first import
ymh <ymh.work@gmail.com>
parents:
diff changeset
    52
 */
d970ebf37754 first import
ymh <ymh.work@gmail.com>
parents:
diff changeset
    53
 /*if (isset($_GET['filename']) && isset($_GET['action']) && is_file($home_directory.$wp_fileman_path.$filename) || is_file("../../../".$home_directory.$wp_fileman_path.$filename))
d970ebf37754 first import
ymh <ymh.work@gmail.com>
parents:
diff changeset
    54
 {
d970ebf37754 first import
ymh <ymh.work@gmail.com>
parents:
diff changeset
    55
// echo "file found";
d970ebf37754 first import
ymh <ymh.work@gmail.com>
parents:
diff changeset
    56
	if (is_file($home_directory.$wp_fileman_path.$filename) && !strstr($home_directory, "./") && !strstr($home_directory, ".\\"))
d970ebf37754 first import
ymh <ymh.work@gmail.com>
parents:
diff changeset
    57
   $fullpath = $home_directory.$wp_fileman_path.$filename;
d970ebf37754 first import
ymh <ymh.work@gmail.com>
parents:
diff changeset
    58
  else if (is_file("../../../".$home_directory.$wp_fileman_path.$filename))
d970ebf37754 first import
ymh <ymh.work@gmail.com>
parents:
diff changeset
    59
   $fullpath = "../../../".$home_directory.$wp_fileman_path.$filename;
d970ebf37754 first import
ymh <ymh.work@gmail.com>
parents:
diff changeset
    60
//echo $fullpath;
d970ebf37754 first import
ymh <ymh.work@gmail.com>
parents:
diff changeset
    61
  if (!$AllowDownload && $AllowView && !is_viewable_file($filename))
d970ebf37754 first import
ymh <ymh.work@gmail.com>
parents:
diff changeset
    62
  {
d970ebf37754 first import
ymh <ymh.work@gmail.com>
parents:
diff changeset
    63
   print "<font color='#CC0000'>$StrAccessDenied</font>";
d970ebf37754 first import
ymh <ymh.work@gmail.com>
parents:
diff changeset
    64
   exit();
d970ebf37754 first import
ymh <ymh.work@gmail.com>
parents:
diff changeset
    65
  }
d970ebf37754 first import
ymh <ymh.work@gmail.com>
parents:
diff changeset
    66
  header("Content-Type: ".get_mimetype($filename));
d970ebf37754 first import
ymh <ymh.work@gmail.com>
parents:
diff changeset
    67
  header("Content-Length: ".filesize($fullpath));
d970ebf37754 first import
ymh <ymh.work@gmail.com>
parents:
diff changeset
    68
  if ($_GET['action'] == "download");
d970ebf37754 first import
ymh <ymh.work@gmail.com>
parents:
diff changeset
    69
   header("Content-Disposition: attachment; filename=$filename");
d970ebf37754 first import
ymh <ymh.work@gmail.com>
parents:
diff changeset
    70
  readfile($fullpath);
d970ebf37754 first import
ymh <ymh.work@gmail.com>
parents:
diff changeset
    71
 }
d970ebf37754 first import
ymh <ymh.work@gmail.com>
parents:
diff changeset
    72
 else
d970ebf37754 first import
ymh <ymh.work@gmail.com>
parents:
diff changeset
    73
  print "<font color='#CC0000'>$StrDownloadFail</font>";
d970ebf37754 first import
ymh <ymh.work@gmail.com>
parents:
diff changeset
    74
}*/
d970ebf37754 first import
ymh <ymh.work@gmail.com>
parents:
diff changeset
    75
?>