?? GreyFile

?? GreyFile — Mystic File Browser

Current path: home/webdevt/prestashop17/admin7261/filemanager/

?? Go up: /home/webdevt/prestashop17/admin7261

?? Editing: ajax_calls.php

<?php

include 'config/config.php';

if ($_SESSION['verify'] != 'RESPONSIVEfilemanager') {
    die('Forbidden');
}

include 'include/utils.php';

if (isset($_GET['action'])) {
    switch ($_GET['action']) {
        case 'view':
            if (isset($_GET['type'])) {
                $_SESSION['view_type'] = $_GET['type'];
            } else {
                die('view type number missing');
            }

break;
        case 'sort':
            if (isset($_GET['sort_by'])) {
                $_SESSION['sort_by'] = $_GET['sort_by'];
            }
            if (isset($_GET['descending'])) {
                $_SESSION['descending'] = $_GET['descending'] === 'true';
            }

break;
        case 'save_img':
            $info = pathinfo($_POST['name']);

$filename = $_POST['name'];
            $path_pos = $_POST['path'];

if (preg_match('/\.{1,2}[\/|\\\]/', $path_pos) !== 0
                || $filename !== fix_filename($filename, $transliteration)
                || !in_array(strtolower($info['extension']), array('jpg', 'jpeg', 'png'))
                || strpos($_POST['url'], 'http://featherfiles.aviary.com/') !== 0
                || !isset($info['extension'])

) {
                die('wrong data');
            }

$image_data = get_file_by_url($_POST['url']);

$tmp = tempnam(sys_get_temp_dir(), 'img');
            file_put_contents($tmp, $image_data);
            $mime = mime_content_type($tmp);
            unlink($tmp);

if (!in_array($mime, $mime_img)) {
                die('wrong data');
            }

if ($image_data === false) {
                die('file could not be loaded');
            }

$put_contents_path = $current_path;

if (isset($_POST['path'])) {
                $put_contents_path .= str_replace("\0", "", $_POST['path']);
            }

if (isset($_POST['name'])) {
                $put_contents_path .= str_replace("\0", "", $_POST['name']);
            }

file_put_contents($put_contents_path, $image_data);
            //new thumb creation
            //try{
            create_img_gd($current_path.$_POST['path'].$_POST['name'], $thumbs_base_path.$_POST['path'].$_POST['name'], 122, 91);
            new_thumbnails_creation($current_path.$_POST['path'], $current_path.$_POST['path'].$_POST['name'], $_POST['name'], $current_path, $relative_image_creation, $relative_path_from_current_pos, $relative_image_creation_name_to_prepend, $relative_image_creation_name_to_append, $relative_image_creation_width, $relative_image_creation_height, $fixed_image_creation, $fixed_path_from_filemanager, $fixed_image_creation_name_to_prepend, $fixed_image_creation_to_append, $fixed_image_creation_width, $fixed_image_creation_height);
            /*} catch (Exception $e) {
            $src_thumb=$mini_src="";
            }*/
            break;
        case 'extract':
            if (strpos($_POST['path'], '/') === 0 || strpos($_POST['path'], '../') !== false || strpos($_POST['path'], './') === 0) {
                die('wrong path');
            }
            $path = $current_path.$_POST['path'];
            $info = pathinfo($path);
            $base_folder = $current_path.fix_dirname($_POST['path']).'/';
            switch ($info['extension']) {
                case 'zip':
                    $zip = new ZipArchive();
                    if ($zip->open($path) === true) {
                        //make all the folders
                        for ($i = 0; $i < $zip->numFiles; $i++) {
                            $OnlyFileName = $zip->getNameIndex($i);
                            $FullFileName = $zip->statIndex($i);
                            if ($FullFileName['name'][strlen($FullFileName['name']) - 1] == '/') {
                                create_folder($base_folder.$FullFileName['name']);
                            }
                        }
                        //unzip into the folders
                        for ($i = 0; $i < $zip->numFiles; $i++) {
                            $OnlyFileName = $zip->getNameIndex($i);
                            $FullFileName = $zip->statIndex($i);

if (!($FullFileName['name'][strlen($FullFileName['name']) - 1] == '/')) {
                                $fileinfo = pathinfo($OnlyFileName);
                                if (in_array(strtolower($fileinfo['extension']), $ext)) {
                                    copy('zip://'.$path.'#'.$OnlyFileName, $base_folder.$FullFileName['name']);
                                }
                            }
                        }
                        $zip->close();
                    } else {
                        echo 'failed to open file';
                    }

break;
                case 'gz':
                    $p = new PharData($path);
                    $p->decompress(); // creates files.tar
                    break;
                case 'tar':
                    // unarchive from the tar
                    $phar = new PharData($path);
                    $phar->decompressFiles();
                    $files = array();
                    check_files_extensions_on_phar($phar, $files, '', $ext);
                    $phar->extractTo($current_path.fix_dirname($_POST['path']).'/', $files, true);

break;
            }

break;
        case 'media_preview':

$preview_file = $_GET['file'];
            $info = pathinfo($preview_file);
            ?>
			<div id="jp_container_1" class="jp-video " style="margin:0 auto;">
				<div class="jp-type-single">
					<div id="jquery_jplayer_1" class="jp-jplayer"></div>
					<div class="jp-gui">
						<div class="jp-video-play">
							<a href="javascript:;" class="jp-video-play-icon" tabindex="1">play</a>
						</div>
						<div class="jp-interface">
							<div class="jp-progress">
								<div class="jp-seek-bar">
									<div class="jp-play-bar"></div>
								</div>
							</div>
							<div class="jp-current-time"></div>
							<div class="jp-duration"></div>
							<div class="jp-controls-holder">
								<ul class="jp-controls">
									<li><a href="javascript:;" class="jp-play" tabindex="1">play</a></li>
									<li><a href="javascript:;" class="jp-pause" tabindex="1">pause</a></li>
									<li><a href="javascript:;" class="jp-stop" tabindex="1">stop</a></li>
									<li><a href="javascript:;" class="jp-mute" tabindex="1" title="mute">mute</a></li>
									<li><a href="javascript:;" class="jp-unmute" tabindex="1" title="unmute">unmute</a>
									</li>
									<li><a href="javascript:;" class="jp-volume-max" tabindex="1" title="max volume">max
											volume</a></li>
								</ul>
								<div class="jp-volume-bar">
									<div class="jp-volume-bar-value"></div>
								</div>
								<ul class="jp-toggles">
									<li><a href="javascript:;" class="jp-full-screen" tabindex="1" title="full screen">full
											screen</a></li>
									<li>
										<a href="javascript:;" class="jp-restore-screen" tabindex="1" title="restore screen">restore
											screen</a></li>
									<li><a href="javascript:;" class="jp-repeat" tabindex="1" title="repeat">repeat</a>
									</li>
									<li><a href="javascript:;" class="jp-repeat-off" tabindex="1" title="repeat off">repeat
											off</a></li>
								</ul>
							</div>
							<div class="jp-title" style="display:none;">
								<ul>
									<li></li>
								</ul>
							</div>
						</div>
					</div>
					<div class="jp-no-solution">
						<span>Update Required</span>
						To play the media you will need to either update your browser to a recent version or update your
						<a href="http://get.adobe.com/flashplayer/" target="_blank" rel="noopener noreferrer nofollow">Flash plugin</a>.
					</div>
				</div>
			</div>
			<?php
            if (in_array(strtolower($info['extension']), $ext_music)) {
                ?>

$("#jquery_jplayer_1").jPlayer({
							ready: function () {
								$(this).jPlayer("setMedia", {
									title: "<?php Tools::safeOutput($_GET['title']);
                ?>",
									mp3: "<?php echo Tools::safeOutput($preview_file);
                ?>",
									m4a: "<?php echo Tools::safeOutput($preview_file);
                ?>",
									oga: "<?php echo Tools::safeOutput($preview_file);
                ?>",
									wav: "<?php echo Tools::safeOutput($preview_file);
                ?>"
								});
							},
							swfPath: "js",
							solution: "html,flash",
							supplied: "mp3, m4a, midi, mid, oga,webma, ogg, wav",
							smoothPlayBar: true,
							keyEnabled: false
						});
					});
				</script>

<?php

} elseif (in_array(strtolower($info['extension']), $ext_video)) {
                ?>

$("#jquery_jplayer_1").jPlayer({
							ready: function () {
								$(this).jPlayer("setMedia", {
									title: "<?php Tools::safeOutput($_GET['title']);
                ?>",
									m4v: "<?php echo Tools::safeOutput($preview_file);
                ?>",
									ogv: "<?php echo Tools::safeOutput($preview_file);
                ?>"
								});
							},
							swfPath: "js",
							solution: "html,flash",
							supplied: "mp4, m4v, ogv, flv, webmv, webm",
							smoothPlayBar: true,
							keyEnabled: false
						});

});
				</script>

<?php

}

break;
    }
} else {
    die('no action passed');
}
?>

?? config | ??? Delete
?? css | ??? Delete
?? img | ??? Delete
?? include | ??? Delete
?? jPlayer | ??? Delete
?? js | ??? Delete
?? lang | ??? Delete
?? uploader | ??? Delete
?? ajax_calls.php | ?? Edit | ??? Delete
?? dialog.php | ?? Edit | ??? Delete
?? execute.php | ?? Edit | ??? Delete
?? force_download.php | ?? Edit | ??? Delete
?? index.php | ?? Edit | ??? Delete
?? LICENSE | ?? Edit | ??? Delete
?? plugin.js | ?? Edit | ??? Delete
?? plugin.min.js | ?? Edit | ??? Delete
?? upload.php | ?? Edit | ??? Delete