xXx

Hexid M1n1 5h3ll MobiLe

C:/Abyss Web Server/htdocs/motorsport/twg/admin/upload/_[ Writable ]

File:C:/Abyss Web Server/htdocs/motorsport/twg/admin/upload/tfu_file.php

<?php
/**
 * TWG Flash uploader 2.7.4
 *
 * Copyright (c) 2004-2008 TinyWebGallery
 * written by Michael Dempfle
 *
 *    This file does all file functions of TFU
 *
 *    If an image was detected: jpj, png or gif the images are resized to fit in
 *    the preview box (90 x 55). For all other files no image is returned!
 *
 *    Authentification is done by the session $_SESSION["TFU_LOGIN"]. you can set
 *    this in the tfu_config.php or implement your own way!
 */
define('_VALID_TWG', '42');

if (isset($_GET['TFUSESSID'])) { // this is a workaround if you set php_flag session.use_trans_sid=off + a workaround for some servers that don't handle sessions correctly if you open 2 instances of TFU
  session_id($_GET['TFUSESSID']);
}
session_start();

include dirname(__FILE__) . '/tfu_helper.php';
restore_temp_session();

// twg - change
include realpath(dirname(__FILE__) . '/../_include/twg_session.php');
// twg - change

if (isset($_SESSION['TFU_LOGIN']) && isset($_SESSION['TFU_RN']) && isset($_GET['tfu_rn']) && ($_SESSION['TFU_RN'] == parseInputParameter($_GET['tfu_rn'])) ) { //
	$dir = getCurrentDir();
	// if you have more complex filenames you can use the index
	$action = parseInputParameter($_GET['action']);
	if (isset($_GET['index'])) {
	   if (isset($_GET['copyfolder']) && ($_GET['copyfolder'] == "true")) {
		  $file = ""; // not needed for this task
		} else {
		  $file = getFileName($dir); // returns an array if more than one is selected!
		}
			if ($action == 'rename') { // rename a file
        if ($_SESSION['TFU_ENABLE_FILE_RENAME'] != 'true') {
          echo 'This action is not enabled!';
          exit(0);
        }
        $newName = parseInputParameterFile(trim(basename(' ' . $_GET['newfilename']))); // fixes that file can be renamed to an upper dir.
			  if ($_SESSION['TFU_KEEP_FILE_EXTENSION'] == 'true') {
          $newNameEx = getExtension($newName);
          $fileEx = getExtension($file);
          if ($newNameEx != $fileEx) {
             echo 'This action is not allowed. Changing file extensions is disabled because of security issues!'; 
             exit(0);
          }
        }
				if ($fix_utf8 == '') {
					$newName = $dir . '/' . utf8_decode($newName);
				} else {
					$newName = $dir . '/' . iconv('UTF-8', $fix_utf8, $newName);
				}
				if (!file_exists($newName)) {
					if (is_writeable($file)) {
						$result = @rename($file, $newName);
						if ($result) {
							echo '&result=true';
						} else {
							echo '&result=false';
						}
					} else {
						echo '&result=perm';
					}
				} else {
					echo '&result=exists';
				}
			} else if ($action == 'delete') { // delete a file
			  // first we check if delete is enabled!
		    if ($_SESSION['TFU_SHOW_DELETE'] != 'true') {
          echo 'This action is not enabled!';
          exit(0);
        }
				if (is_tfu_deletable($file)) {
					set_error_handler('on_error_no_output');
					@chmod($file , 0777);
					set_error_handler('on_error');
					$result = @unlink($file);
					if ($result) {
					    // twg - change
					    resetSessionCache();
					    // twg - change
						echo '&result=true';
					} else {
						echo '&result=false';
					}
				} else {
					echo '&result=perm';
				}
			} else if ($action == 'xdelete') { // delete several files!
			  // first we check if delete is enabled!
		    if ($_SESSION['TFU_SHOW_DELETE'] != 'true') {
          echo 'This action is not enabled!';
          exit(0);
        }
				$deleted = 0;
				$perm = 0;
				$notdel = 0;
				foreach ($file as $ff) {
					if (is_tfu_deletable($ff)) {
						set_error_handler('on_error_no_output');
						@chmod($ff , 0777);
						set_error_handler('on_error');
						$result = @unlink($ff);
						if ($result) {
						    // twg - change
						    resetSessionCache();
						    // twg - change
						    $deleted++;
						} else {
							$notdel++;
						}
					} else {
						$perm++;
					}
				}
				
				echo '&result=multiple&nr_del=' . $deleted . '&nr_perm='. $perm. '&nr_not_del=' .$notdel;
	
			} else if ($action == 'copymove') { // copy move files!
			  // first we check if delete is enabled!
		    if ($_SESSION['TFU_ENABLE_FILE_COPYMOVE'] != 'true' && $_SESSION['TFU_ENABLE_FOLDER_COPYMOVE'] != 'true') {
          echo 'This action is not enabled!';
          exit(0);
        }
				$done = 0;
				$total = 0;
				$error = 0;
				$exists = 0;
				$overwrite = parseInputParameter($_GET['overwrite']); 
				$folder = getDestinationFolder( parseInputParameter($_GET['target']));
				$dest_folder = $folder . '/' . basename($dir); 
				if  ($_GET['copyfolder'] == 'true') {
				  if ($folder == $dir) {
				    $error = 1;
				  } else if (strpos ($folder,$dir) !== false) {
				    $error = 2;
				  } else if ($overwrite == 'false' && file_exists($dest_folder)) {
				    $error = 3;
				  } else {
				    if (@rename($dir, $dest_folder)) {
					  $done=1;
					  $upperdir = substr($dir, 0, strrpos ($dir, "/"));
            $_SESSION['TFU_DIR'] = $upperdir;  
					} else {
					  $error=4; 
					}
				  }  
				} else {
					foreach ($file as $ff) {
						$total++;						
						$dest = $folder . '/' . basename($ff);
						if ($_GET['type'] == 'c') {
						 	if ($folder == $dir) {
							  $u_file=get_unique_filename($folder,basename($ff));
							  $dest = $folder . "/" .$u_file;
							}
							if (file_exists($dest) && $overwrite == 'false') { // if file exists and not overwrite = error
								 $exists++; 
							} else {
							    if ($ff == $dest) {
                    $nr = 2;
                    $dest = $folder . '/Copy of ' . basename($ff);
                    while (file_exists($dest)) {
                      $dest = $folder . '/Copy ('.$nr++.') of ' . basename($ff);
                    }
                  }
							    if (@copy($ff, $dest)) {
								  $done++;
								} else {
								  $error++;
								}
							} 
						} else {
						   if ($ff != $dest) {
    							if (file_exists($dest) && $overwrite) {
    							  @unlink($dest);
    							}
    							if (!file_exists($dest)) {
    								if (@rename($ff, $dest)) {
    								  $done++;
    								} else {
    								  $error++; 
    								}
								}
							}
						}
					}
				}
				echo  '&total='.$total.'&ok=' . $done . '&error=' . $error . '&exists=' . $exists ;
			} else if ($action == 'preview') { // preview image
				// we store the url of the last preview image in the session - use it if you need it ;).
				// we generate thumbs for jpge,png and gif!
				if (preg_match("/.*\.(j|J)(p|P)(e|E){0,1}(g|G)$/", $file) ||
						preg_match("/.*\.(p|P)(n|N)(g|G)$/", $file) ||
						preg_match("/.*\.(g|G)(i|I)(f|F)$/", $file)) {
					if (isset($_GET['big'])) {
						send_thumb($file, 90, 440, 280); // big preview 4x bigger!
					} else {
						send_thumb($file, 90, 80, 55); // small preview
					}
				} else {
					return; // we return nothing if no image.
				}
      } else if ($action == 'info') { // get infos about a file
				unset($_SESSION['TFU_LAST_UPLOADS']);
				$_SESSION['TFU_LAST_PREVIEW'] = fixUrl(getRootUrl() . $file);
				echo '&size=' . filesize($file);
				// we check if the image can be resized
				if (is_supported_tfu_image($file)) {
					set_error_handler('on_error_no_output'); // is needed because error are most likly but we don't care about fields we don't even know
					$oldsize = @getimagesize($file);
					set_error_handler('on_error');
					if ($oldsize) {
						if (isMemoryOk($oldsize, "")) {
						    echo '&hasPreview=true&tfu_x=' . $oldsize[0] . '&tfu_y=' . $oldsize[1] ; // has preview!
						} else {
							echo '&hasPreview=error'; // too big! - same error massage as hasPreview=false
						}
						return;
					} 
				 echo '&hasPreview=false'; // no image!
				}
			}  else if ($action == 'text') { // get infos about a file		
			
			  if (is_writable($file)) {
          echo '&writeable=true';
        } else {
          echo '&writeable=false';
        } 
        echo '&data=';
				$enc = 'UTF-8';
				$format = 'UNIX';
				$fp = fopen($file, 'rb');
				$content = fread ($fp, filesize ($file));
				// we replace \r with nothing
				$content_new = str_replace("\r","", $content);
				if ($content_new != $content) {
           $format = 'DOS';
        }
        if (!seems_utf8($content_new)) {
				  $content_new = cp1252_to_utf8($content_new); 
				  $enc = 'ANSI';
				}
				echo  urlencode($content_new);
				echo '&encoding=' . $enc;
				echo '&format=' . $format;
				fclose($fp);
			}  else if ($action == 'savetext') { // save a textfile
				$content = urldecode($_POST['data']);
        if ($_POST['encoding'] == 'ANSI') {
           $content = utf8_to_cp1252($content);  
        }
        if ($_POST['format'] == 'DOS') {
           $content = preg_replace("/\r\n|\r|\n/", chr(13).chr(10), $content);
        } else {
           $content = preg_replace("/\r\n|\r|\n/", chr(10), $content);
        }
        // now we write the file again
        $file_local = fopen($file, 'w');
        if (getExtension($file)== 'php') { // we remove leading and trailing spaces returns if it is a php file!
         $content = trim($content);
        }
        fputs($file_local, $content); 
        fclose($file_local);
			} else if ($action == 'download') { // download a file - we set the header !
        if ($_SESSION['TFU_ENABLE_FILE_DOWNLOAD'] == 'false') {
          echo 'This action is not enabled!';
          exit(0);
        }		  
        header('Content-type: application/octet-stream');
			  header('Content-disposition: attachment; filename='.basename($file));
				header('Content-Length: '.filesize($file));
			  header('Pragma: no-cache');
        header('Expires: 0');
				$fp = fopen($file, 'rb');
				while ($content = fread($fp, 8192 * 128)) { //
					print $content;
				}
				fclose($fp);
			}
	} else if ($action == 'uploadcheck') {
     if (isset($_SESSION['TFU_UPLOAD_REMAINING'])) {
        echo '&uploadcheck=' . $_SESSION['TFU_UPLOAD_REMAINING'];
	} else {
        echo '&uploadcheck=0';
      }
      return;
  } else  {
		echo '&result=index';
	}
	store_temp_session();
} else {
	echo 'Not logged in!';
}
?>

Your Access Expired	Date. in : 05-11-2025
Regist : 09-12-2024	Expired : 01-12-2027