source: sandbox/filemanager/inc/upload.php @ 1804

<?php
require_once '../../header.session.inc.php';

/* This single file is used to increase upload_max_filesize and post_max_size using .htaccess*/
if(!isset($GLOBALS['phpgw_info'])){
        $GLOBALS['phpgw_info']['flags'] = array(
                'currentapp' => 'filemanager',
                'nonavbar'   => true,
                'noheader'   => true
        );
}
require_once '../../header.inc.php';

$bo = CreateObject('filemanager.bofilemanager');

$c = CreateObject('phpgwapi.config','filemanager');
$c->read_repository();
$current_config = $c->config_data;
$upload_max_size = $current_config['filemanager_Max_file_size'];
$path = base64_decode($_POST['path']);
$show_upload_boxes = count($_FILES['upload_file']['name'])-1;

/* Its much faster test all files only one time */
if(strlen($current_config['filemanager_antivirus_command']) > 0)
{
        $command = "nice -n19 ".$current_config['filemanager_antivirus_command'];
        for($i = 0; $i != $show_upload_boxes; $i++)
                $command .= " ".$_FILES['upload_file']['tmp_name'][$i];
        $return=0;
        exec("bash -c ".escapeshellcmd(escapeshellarg($command)),$output,$return);
        if ($return == 1)
        {
                $_SESSION['response'] = serialize(array(0 => lang('Error:').lang('One of the files sent was considered infected')));
                return;
        }
}

if($path != '/')
        for($i = 0; $i != $show_upload_boxes; $i++)
        {
                if($badchar = $bo->bad_chars($_FILES['upload_file']['name'][$i], True, True))
                {
                        $return[] = lang('Error:').lang('File names cannot contain "%1"', $badchar);
                        continue;
                }

                # Check to see if the file exists in the database, and get its info at the same time
                $ls_array = $bo->vfs->ls(array(
                        'string'=> $path . '/' . $_FILES['upload_file']['name'][$i],
                        'relatives'     => array(RELATIVE_NONE),
                        'checksubdirs'  => False,
                        'nofiles'       => True
                ));

                $fileinfo = $ls_array[0];

                if($fileinfo['name'])
                {
                        if($fileinfo['mime_type'] == 'Directory')
                        {
                                $return[] = lang('Error:').lang('Cannot replace %1 because it is a directory', $fileinfo['name']);
                                continue;
                        }
                }

                if ($_FILES['upload_file']['size'][$i] > ($upload_max_size*1024*1024))
                {
                        $return[] = lang('The size of %1 has exceded the limit: %2', $_FILES['upload_file']['name'][$i], $upload_max_size);
                        continue;
                }
                elseif($_FILES['upload_file']['size'][$i] > 0)
                {
                        if($fileinfo['name'] && $fileinfo['deleteable'] != 'N')
                        {
                                $tmp_arr=array(
                                        'string'=> $_FILES['upload_file']['name'][$i],
                                        'relatives'     => array(RELATIVE_ALL),
                                        'attributes'    => array(
                                                'owner_id' => $bo->userinfo['username'],
                                                'modifiedby_id' => $bo->userinfo['username'],
                                                'modified' => $now,
                                                'size' => $_FILES['upload_file']['size'][$i],
                                                'mime_type' => $_FILES['upload_file']['type'][$i],
                                                'deleteable' => 'Y',
                                                'comment' => stripslashes($_POST['upload_comment'][$i])
                                        )
                                );
                                $bo->vfs->set_attributes($tmp_arr);

                                $tmp_arr=array(
                                        'from'  => $_FILES['upload_file']['tmp_name'][$i],
                                        'to'    => lang('new')."_".$_FILES['upload_file']['name'][$i],
                                        'relatives'     => array(RELATIVE_NONE|VFS_REAL, RELATIVE_ALL)
                                );
                                $bo->vfs->cp($tmp_arr);
                        }
                        else
                        {

                                if ($bo->vfs->cp(array(
                                        'from'=> $_FILES['upload_file']['tmp_name'][$i],
                                        'to'=> $_FILES['upload_file']['name'][$i],
                                        'relatives'     => array(RELATIVE_NONE|VFS_REAL, RELATIVE_ALL)
                                )))
                                        $bo->vfs->set_attributes(array(
                                                'string'=> $_FILES['upload_file']['name'][$i],
                                                'relatives'     => array(RELATIVE_ALL),
                                                'attributes'=> array(
                                                'mime_type' => $_FILES['upload_file']['type'][$i],
                                                'comment' => stripslashes($_POST['upload_comment'][$i])
                                        )
                                ));
                                else{
                                        $return[] = lang('Error:').lang('Your quota has exceeded the limit');
                                        return false;
                                }

                        }
                }
                elseif($_FILES['upload_file']['name'][$i])
                {
                        $bo->vfs->touch(array(
                                'string'=> $_FILES['upload_file']['name'][$i],
                                'relatives'     => array(RELATIVE_ALL)
                        ));

                        $bo->vfs->set_attributes(array(
                                'string'=> $_FILES['upload_file']['name'][$i],
                                'relatives'     => array(RELATIVE_ALL),
                                'attributes'=> array(
                                        'mime_type' => $_FILES['upload_file']['type'][$i],
                                        'comment' => stripslashes($_POST['upload_comment'][$i])
                                )
                        ));

                }
        }
        if (count($return) > 0)
                $_SESSION['response'] = serialize($return);
        else
                 $_SESSION['response'] = serialize( array( 0 => 'Ok' ) );
?>