Sourcecode of the Spootle Jirafeau instance
You can not select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
This repo is archived. You can view files and clone it, but cannot push or open issues/pull-requests.
 
 
 
 

290 lines
11 KiB

<?php
/*
* Jirafeau, your web file repository
* Copyright (C) 2015 Jerome Jutteau <jerome@jutteau.fr>
*
* This program is free software: you can redistribute it and/or modify
* it under the terms of the GNU Affero General Public License as
* published by the Free Software Foundation, either version 3 of the
* License, or (at your option) any later version.
*
* This program is distributed in the hope that it will be useful,
* but WITHOUT ANY WARRANTY; without even the implied warranty of
* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
* GNU Affero General Public License for more details.
*
* You should have received a copy of the GNU Affero General Public License
* along with this program. If not, see <http://www.gnu.org/licenses/>.
*/
session_start();
define('JIRAFEAU_ROOT', dirname(__FILE__) . '/');
require(JIRAFEAU_ROOT . 'lib/settings.php');
require(JIRAFEAU_ROOT . 'lib/functions.php');
require(JIRAFEAU_ROOT . 'lib/lang.php');
/* Check if installation is OK. */
if (file_exists(JIRAFEAU_ROOT . 'install.php')
&& !file_exists(JIRAFEAU_ROOT . 'lib/config.local.php')) {
header('Location: install.php');
exit;
}
/* If called from CLI, no password or graphical interface */
if (php_sapi_name() == "cli") {
if ($cfg['installation_done'] == false) {
die("Installation not completed yet.\n");
}
if ((count($argv)>1) && $argv[1]=="clean_expired") {
$total = jirafeau_admin_clean();
echo "$total expired files deleted.\n";
} elseif ((count($argv)>1) && $argv[1]=="clean_async") {
$total = jirafeau_admin_clean_async();
echo "$total old unfinished transfers deleted.\n";
} else {
die("No command found. Should be admin.php <clean_expired|clean_async>.\n");
}
} else {
/* Disable admin interface if we have a empty admin password. */
if (empty($cfg['admin_password']) && empty($cfg['admin_http_auth_user'])) {
require(JIRAFEAU_ROOT . 'lib/template/header.php');
echo '<div class="error"><p>'.
t('NO_ADMIN') .
'</p></div>';
require(JIRAFEAU_ROOT.'lib/template/footer.php');
exit;
}
/* Unlog if asked. */
if (jirafeau_admin_session_logged() && isset($_POST['action']) && (strcmp($_POST['action'], 'logout') == 0)) {
jirafeau_admin_session_end();
}
if (!jirafeau_admin_session_logged()) {
/* Test HTTP authentification. */
if (!empty($cfg['admin_http_auth_user']) &&
$cfg['admin_http_auth_user'] == $_SERVER['PHP_AUTH_USER']) {
jirafeau_admin_session_start();
}
/* Test web password authentification. */
elseif (!empty($cfg['admin_password']) && isset($_POST['admin_password'])) {
if ($cfg['admin_password'] === hash('sha256', $_POST['admin_password'])) {
jirafeau_admin_session_start();
} else {
require(JIRAFEAU_ROOT . 'lib/template/header.php');
echo '<div class="error"><p>'. t('BAD_PSW') . '</p></div>';
require(JIRAFEAU_ROOT.'lib/template/footer.php');
exit;
}
}
/* Admin password prompt form. */
else {
require(JIRAFEAU_ROOT . 'lib/template/header.php'); ?>
<form method="post" class="form login">
<fieldset>
<table>
<tr>
<td class = "label"><label for = "enter_password">
<?php echo t('ADMIN_PSW') . ':'; ?></label>
</td>
</tr>
<tr>
<td class = "field"><input type = "password"
name = "admin_password" id = "admin_password"
size = "40" />
</td>
</tr>
<tr class = "nav">
<td class = "nav next">
<input type = "submit" name = "key" value =
"<?php echo t('LOGIN'); ?>" />
</td>
</tr>
</table>
</fieldset>
</form>
<?php
require(JIRAFEAU_ROOT.'lib/template/footer.php');
exit;
}
}
/* Operations may take a long time.
* Be sure PHP's safe mode is off.
*/
@set_time_limit(0);
/* Show admin interface if not downloading a file. */
if (!(isset($_POST['action']) && strcmp($_POST['action'], 'download') == 0)) {
require(JIRAFEAU_ROOT . 'lib/template/header.php'); ?><h2><?php echo t('ADMIN_INTERFACE'); ?></h2><?php
?><h2>(version <?php echo JIRAFEAU_VERSION ?>)</h2><?php
?><div id = "admin">
<fieldset><legend><?php echo t('ACTIONS'); ?></legend>
<table>
<form method="post">
<tr>
<input type = "hidden" name = "action" value = "clean"/>
<?php echo jirafeau_admin_csrf_field() ?>
<td class = "info">
<?php echo t('CLEAN_EXPIRED'); ?>
</td>
<td></td>
<td>
<input type = "submit" value = "<?php echo t('CLEAN'); ?>" />
</td>
</tr>
</form>
<form method="post">
<tr>
<input type = "hidden" name = "action" value = "clean_async"/>
<?php echo jirafeau_admin_csrf_field() ?>
<td class = "info">
<?php echo t('CLEAN_INCOMPLETE'); ?>
</td>
<td></td>
<td>
<input type = "submit" value = "<?php echo t('CLEAN'); ?>" />
</td>
</tr>
</form>
<form method="post">
<tr>
<input type = "hidden" name = "action" value = "list"/>
<?php echo jirafeau_admin_csrf_field() ?>
<td class = "info">
<?php echo t('LS_FILES'); ?>
</td>
<td></td>
<td>
<input type = "submit" value = "<?php echo t('LIST'); ?>" />
</td>
</tr>
</form>
<form method="post">
<tr>
<input type = "hidden" name = "action" value = "size"/>
<?php echo jirafeau_admin_csrf_field() ?>
<td class = "info">
<?php echo t('SIZE_DATA'); ?>
</td>
<td></td>
<td>
<input type = "submit" value = "<?php echo t('SIZE'); ?>" />
</td>
</tr>
</form>
<form method="post">
<tr>
<input type = "hidden" name = "action" value = "search_by_name"/>
<?php echo jirafeau_admin_csrf_field() ?>
<td class = "info">
<?php echo t('SEARCH_NAME'); ?>
</td>
<td>
<input type = "text" name = "name" id = "name"/>
</td>
<td>
<input type = "submit" value = "<?php echo t('SEARCH'); ?>" />
</td>
</tr>
</form>
<form method="post">
<tr>
<input type = "hidden" name = "action" value = "search_by_file_hash"/>
<?php echo jirafeau_admin_csrf_field() ?>
<td class = "info">
<?php echo t('SEARH_BY_HASH'); ?>
</td>
<td>
<input type = "text" name = "hash" id = "hash"/>
</td>
<td>
<input type = "submit" value = "<?php echo t('SEARCH'); ?>" />
</td>
</tr>
</form>
<form method="post">
<tr>
<input type = "hidden" name = "action" value = "search_link"/>
<?php echo jirafeau_admin_csrf_field() ?>
<td class = "info">
<?php echo t('SEARCH_LINK'); ?>
</td>
<td>
<input type = "text" name = "link" id = "link"/>
</td>
<td>
<input type = "submit" value = "<?php echo t('SEARCH'); ?>" />
</td>
</tr>
</form>
</table>
<form method="post">
<input type = "hidden" name = "action" value = "logout" />
<?php echo jirafeau_admin_csrf_field() ?>
<input type = "submit" value = "<?php echo t('LOGOUT'); ?>" />
</form>
</fieldset></div><?php
}
/* Check for actions */
if (isset($_POST['action'])) {
if (strcmp($_POST['action'], 'clean') == 0) {
$total = jirafeau_admin_clean();
echo '<div class="message">' . NL;
echo '<p>';
echo t('CLEANED_FILES_CNT') . ' : ' . $total;
echo '</p></div>';
} elseif (strcmp($_POST['action'], 'clean_async') == 0) {
$total = jirafeau_admin_clean_async();
echo '<div class="message">' . NL;
echo '<p>';
echo t('CLEANED_FILES_CNT') . ' : ' . $total;
echo '</p></div>';
} elseif (strcmp($_POST['action'], 'size') == 0) {
$size = jirafeau_dir_size($cfg['var_root']);
$human_size = jirafeau_human_size($size);
echo '<div class="message">' . NL;
echo '<p>' . t('SIZE_DATA') . ': ' . $human_size .'</p>';
echo '</div>';
} elseif (strcmp($_POST['action'], 'list') == 0) {
jirafeau_admin_list("", "", "");
} elseif (strcmp($_POST['action'], 'search_by_name') == 0) {
jirafeau_admin_list($_POST['name'], "", "");
} elseif (strcmp($_POST['action'], 'search_by_file_hash') == 0) {
jirafeau_admin_list("", $_POST['hash'], "");
} elseif (strcmp($_POST['action'], 'search_link') == 0) {
jirafeau_admin_list("", "", $_POST['link']);
} elseif (strcmp($_POST['action'], 'delete_link') == 0) {
jirafeau_delete_link($_POST['link']);
echo '<div class="message">' . NL;
echo '<p>' . t('LINK_DELETED') . '</p></div>';
} elseif (strcmp($_POST['action'], 'delete_file') == 0) {
$count = jirafeau_delete_file($_POST['hash']);
echo '<div class="message">' . NL;
echo '<p>' . t('DELETED_LINKS') . ' : ' . $count . '</p></div>';
} elseif (strcmp($_POST['action'], 'download') == 0) {
$l = jirafeau_get_link($_POST['link']);
if (!count($l)) {
return;
}
$p = s2p($l['hash']);
header('Content-Length: ' . $l['file_size']);
header('Content-Type: ' . $l['mime_type']);
header('Content-Disposition: attachment; filename="' .
$l['file_name'] . '"');
if (file_exists(VAR_FILES . $p . $l['hash'])) {
$r = fopen(VAR_FILES . $p . $l['hash'], 'r');
while (!feof($r)) {
print fread($r, 1024);
}
fclose($r);
}
exit;
}
}
require(JIRAFEAU_ROOT.'lib/template/footer.php');
}
?>