736 lines
32 KiB
PHP
736 lines
32 KiB
PHP
<?php
|
|
|
|
if (IN_serendipity !== true) {
|
|
die ("Don't hack!");
|
|
}
|
|
|
|
if (!serendipity_checkPermission('adminImages')) {
|
|
return;
|
|
}
|
|
|
|
$data = array();
|
|
|
|
if (!is_object($serendipity['smarty'])) {
|
|
serendipity_smarty_init();
|
|
}
|
|
|
|
switch ($serendipity['GET']['adminAction']) {
|
|
|
|
case 'doSync':
|
|
$data['case_doSync'] = true;
|
|
$data['perm_adminImagesSync'] = true;
|
|
// I don't know how it could've changed, but let's be safe.
|
|
if (!serendipity_checkPermission('adminImagesSync')) {
|
|
$data['perm_adminImagesSync'] = false;
|
|
break;
|
|
}
|
|
|
|
if (function_exists('set_time_limit')) {
|
|
@set_time_limit(0);
|
|
}
|
|
@ignore_user_abort();
|
|
|
|
$deleteThumbs = false;
|
|
if (isset($serendipity['POST']['deleteThumbs'])) {
|
|
switch ($serendipity['POST']['deleteThumbs'])
|
|
{
|
|
case 'yes':
|
|
$deleteThumbs = true;
|
|
break;
|
|
case 'check':
|
|
$deleteThumbs = 'checksize';
|
|
break;
|
|
}
|
|
}
|
|
|
|
$i = serendipity_syncThumbs($deleteThumbs);
|
|
$data['print_SYNC_DONE'] = sprintf(SYNC_DONE, $i);
|
|
flush();
|
|
|
|
$i = serendipity_generateThumbs();
|
|
$data['print_RESIZE_DONE'] = sprintf(RESIZE_DONE, $i);
|
|
flush();
|
|
break;
|
|
|
|
case 'doDelete':
|
|
if (!serendipity_checkFormToken() || !serendipity_checkPermission('adminImagesDelete')) {
|
|
break;
|
|
}
|
|
|
|
$messages = array();
|
|
$data['case_do_delete'] = true;
|
|
$messages[] = serendipity_deleteImage($serendipity['GET']['fid']);
|
|
$messages[] = sprintf(RIP_ENTRY, $serendipity['GET']['fid']);
|
|
|
|
$data['showML'] = showMediaLibrary();
|
|
$data['messages'] = $messages;
|
|
unset($messages);
|
|
break;
|
|
|
|
|
|
case 'doMultiDelete':
|
|
if (!serendipity_checkFormToken() || !serendipity_checkPermission('adminImagesDelete')) {
|
|
break;
|
|
}
|
|
|
|
$messages = array();
|
|
$parts = explode(',', $serendipity['GET']['id']);
|
|
$data['case_do_multidelete'] = true;
|
|
foreach($parts AS $id) {
|
|
$id = (int)$id;
|
|
if ($id > 0) {
|
|
$image = serendipity_fetchImageFromDatabase($id);
|
|
$messages[] = serendipity_deleteImage((int)$id);
|
|
$messages[] = sprintf(RIP_ENTRY, $image['id'] . ' - ' . serendipity_specialchars($image['realname']));
|
|
}
|
|
}
|
|
$data['showML'] = showMediaLibrary();
|
|
$data['messages'] = $messages;
|
|
unset($messages);
|
|
break;
|
|
|
|
case 'delete':
|
|
$file = serendipity_fetchImageFromDatabase($serendipity['GET']['fid']);
|
|
|
|
if (!is_array($file) || !serendipity_checkPermission('adminImagesDelete') || (!serendipity_checkPermission('adminImagesMaintainOthers') && $file['authorid'] != '0' && $file['authorid'] != $serendipity['authorid'])) {
|
|
return;
|
|
}
|
|
|
|
$data['case_delete'] = true;
|
|
if (!isset($serendipity['adminFile'])) {
|
|
$serendipity['adminFile'] = 'serendipity_admin.php';
|
|
}
|
|
$abortLoc = $serendipity['serendipityHTTPPath'] . $serendipity['adminFile'] . '?serendipity[adminModule]=images';
|
|
$newLoc = $abortLoc . '&serendipity[adminAction]=doDelete&serendipity[fid]=' . (int)$serendipity['GET']['fid'] . '&' . serendipity_setFormToken('url');
|
|
$data['file'] = $file['name'] . '.' . $file['extension'];
|
|
$data['abortLoc'] = $abortLoc;
|
|
$data['newLoc'] = $newLoc;
|
|
break;
|
|
|
|
case 'multidelete':
|
|
if (!serendipity_checkFormToken() || !is_array($serendipity['POST']['multiDelete'])) {
|
|
break;
|
|
}
|
|
|
|
$ids = '';
|
|
$data['rip_image'] = array();
|
|
$data['case_multidelete'] = true;
|
|
foreach($serendipity['POST']['multiDelete'] AS $idx => $id) {
|
|
$ids .= (int)$id . ',';
|
|
$image = serendipity_fetchImageFromDatabase($id);
|
|
$data['rip_image'][] = sprintf(DELETE_SURE, $image['id'] . ' - ' . serendipity_specialchars($image['realname']));
|
|
}
|
|
if (!isset($serendipity['adminFile'])) {
|
|
$serendipity['adminFile'] = 'serendipity_admin.php';
|
|
}
|
|
$abortLoc = $serendipity['serendipityHTTPPath'] . $serendipity['adminFile'] . '?serendipity[adminModule]=images';
|
|
$newLoc = $serendipity['serendipityHTTPPath'] . $serendipity['adminFile'] . '?' . serendipity_setFormToken('url') . '&serendipity[action]=admin&serendipity[adminModule]=images&serendipity[adminAction]=doMultiDelete&serendipity[id]=' . $ids;
|
|
$data['case_confirm_deletion'] = true;
|
|
$data['abortLoc'] = $abortLoc;
|
|
$data['newLoc'] = $newLoc;
|
|
break;
|
|
|
|
case 'rename':
|
|
$data['case_rename'] = true;
|
|
$serendipity['GET']['fid'] = (int)$serendipity['GET']['fid'];
|
|
$file = serendipity_fetchImageFromDatabase($serendipity['GET']['fid']);
|
|
$serendipity['GET']['newname'] = serendipity_uploadSecure($serendipity['GET']['newname'], true);
|
|
|
|
if (!is_array($file) || !serendipity_checkFormToken() || !serendipity_checkPermission('adminImagesDelete') || (!serendipity_checkPermission('adminImagesMaintainOthers') && $file['authorid'] != '0' && $file['authorid'] != $serendipity['authorid'])) {
|
|
return;
|
|
}
|
|
|
|
if (!serendipity_moveMediaDirectory(null, $serendipity['GET']['newname'], 'file', $serendipity['GET']['fid'], $file)) {
|
|
$data['go_back'] = true;
|
|
break;
|
|
}
|
|
break;
|
|
|
|
case 'properties':
|
|
$data['case_properties'] = true;
|
|
$new_media = array(array('image_id' => $serendipity['GET']['fid']));
|
|
echo serendipity_showPropertyForm($new_media);
|
|
break;
|
|
|
|
case 'add':
|
|
if (!serendipity_checkFormToken() || !serendipity_checkPermission('adminImagesAdd')) {
|
|
return;
|
|
}
|
|
$data['case_add'] = true;
|
|
$messages = array();
|
|
if ($serendipity['POST']['adminSubAction'] == 'properties') {
|
|
$properties = serendipity_parsePropertyForm();
|
|
$image_id = $properties['image_id'];
|
|
$created_thumbnail = true;
|
|
$data['showML'] = showMediaLibrary($messages, true);
|
|
break;
|
|
}
|
|
|
|
$messages[] = '<span class="image_add">' . ADDING_IMAGE . '</span>';
|
|
|
|
$authorid = 0; // Only use access-control based on media directories, not images themselves
|
|
|
|
$new_media = array();
|
|
|
|
$serendipity['POST']['imageurl'] = serendipity_specialchars($serendipity['POST']['imageurl']);
|
|
|
|
// First find out whether to fetch a file or accept an upload
|
|
if ($serendipity['POST']['imageurl'] != '' && $serendipity['POST']['imageurl'] != 'http://') {
|
|
if (!empty($serendipity['POST']['target_filename'][2])) {
|
|
// Faked hidden form 2 when submitting with JavaScript
|
|
$tfile = $serendipity['POST']['target_filename'][2];
|
|
$tindex = 2;
|
|
} elseif (!empty($serendipity['POST']['target_filename'][1])) {
|
|
// Fallback key when not using JavaScript
|
|
$tfile = $serendipity['POST']['target_filename'][1];
|
|
$tindex = 1;
|
|
} else {
|
|
$tfile = $serendipity['POST']['imageurl'];
|
|
$tindex = 1;
|
|
}
|
|
|
|
$tfile = serendipity_uploadSecure(basename($tfile));
|
|
|
|
if (serendipity_isActiveFile($tfile)) {
|
|
$messages[] = sprintf(ERROR_FILE_FORBIDDEN, $tfile);
|
|
break;
|
|
}
|
|
|
|
$serendipity['POST']['target_directory'][$tindex] = serendipity_uploadSecure($serendipity['POST']['target_directory'][$tindex], true, true);
|
|
$target = $serendipity['serendipityPath'] . $serendipity['uploadPath'] . $serendipity['POST']['target_directory'][$tindex] . $tfile;
|
|
|
|
if (!serendipity_checkDirUpload($serendipity['POST']['target_directory'][$tindex])) {
|
|
$messages[] = PERM_DENIED;
|
|
return;
|
|
}
|
|
|
|
$realname = $tfile;
|
|
if (file_exists($target)) {
|
|
$messages[] = '(' . $target . ') ' . ERROR_FILE_EXISTS_ALREADY . '';
|
|
$realname = serendipity_imageAppend($tfile, $target, $serendipity['serendipityPath'] . $serendipity['uploadPath'] . $serendipity['POST']['target_directory'][$tindex]);
|
|
}
|
|
|
|
require_once S9Y_PEAR_PATH . 'HTTP/Request.php';
|
|
$options = array('allowRedirects' => true, 'maxRedirects' => 5);
|
|
serendipity_plugin_api::hook_event('backend_http_request', $options, 'image');
|
|
serendipity_request_start();
|
|
$req = new HTTP_Request($serendipity['POST']['imageurl'], $options);
|
|
// Try to get the URL
|
|
|
|
if (PEAR::isError($req->sendRequest()) || $req->getResponseCode() != '200') {
|
|
$messages[] = sprintf(REMOTE_FILE_NOT_FOUND, $serendipity['POST']['imageurl']);
|
|
} else {
|
|
// Fetch file
|
|
$fContent = $req->getResponseBody();
|
|
|
|
if ($serendipity['POST']['imageimporttype'] == 'hotlink') {
|
|
$tempfile = $serendipity['serendipityPath'] . $serendipity['uploadPath'] . '/hotlink_' . time();
|
|
$fp = fopen($tempfile, 'w');
|
|
fwrite($fp, $fContent);
|
|
fclose($fp);
|
|
|
|
$image_id = @serendipity_insertHotlinkedImageInDatabase($tfile, $serendipity['POST']['imageurl'], $authorid, null, $tempfile);
|
|
$messages[] = sprintf( HOTLINK_DONE , $serendipity['POST']['imageurl'] , $tfile .'');
|
|
serendipity_plugin_api::hook_event('backend_image_addHotlink', $tempfile);
|
|
} else {
|
|
$fp = fopen($target, 'w');
|
|
fwrite($fp, $fContent);
|
|
fclose($fp);
|
|
|
|
$messages[] = sprintf(FILE_FETCHED , $serendipity['POST']['imageurl'] , $tfile);
|
|
|
|
if (serendipity_checkMediaSize($target)) {
|
|
$thumbs = array(array(
|
|
'thumbSize' => $serendipity['thumbSize'],
|
|
'thumb' => $serendipity['thumbSuffix']
|
|
));
|
|
serendipity_plugin_api::hook_event('backend_media_makethumb', $thumbs);
|
|
|
|
foreach($thumbs as $thumb) {
|
|
// Create thumbnail
|
|
if ( $created_thumbnail = serendipity_makeThumbnail($tfile, $serendipity['POST']['target_directory'][$tindex], $thumb['thumbSize'], $thumb['thumb']) ) {
|
|
$messages[] = THUMB_CREATED_DONE . '';
|
|
}
|
|
}
|
|
|
|
// Insert into database
|
|
$image_id = serendipity_insertImageInDatabase($tfile, $serendipity['POST']['target_directory'][$tindex], $authorid, null, $realname);
|
|
serendipity_plugin_api::hook_event('backend_image_add', $target);
|
|
$new_media[] = array(
|
|
'image_id' => $image_id,
|
|
'target' => $target,
|
|
'created_thumbnail' => $created_thumbnail
|
|
);
|
|
}
|
|
}
|
|
serendipity_request_end();
|
|
}
|
|
} else {
|
|
if (!is_array($_FILES['serendipity']['name']['userfile'])) {
|
|
break;
|
|
}
|
|
|
|
foreach($_FILES['serendipity']['name']['userfile'] AS $idx => $uploadfiles) {
|
|
if (! is_array($uploadfiles)) {
|
|
$uploadfiles = array($uploadfiles);
|
|
}
|
|
$uploadFileCounter=-1;
|
|
foreach($uploadfiles AS $uploadfile) {
|
|
$uploadFileCounter++;
|
|
$target_filename = $serendipity['POST']['target_filename'][$idx];
|
|
$uploadtmp = $_FILES['serendipity']['tmp_name']['userfile'][$idx];
|
|
if (is_array($uploadtmp)) {
|
|
$uploadtmp = $uploadtmp[$uploadFileCounter];
|
|
}
|
|
if (!empty($target_filename)) {
|
|
$tfile = $target_filename;
|
|
} elseif (!empty($uploadfile)) {
|
|
$tfile = $uploadfile;
|
|
} else {
|
|
// skip empty array
|
|
continue;
|
|
}
|
|
|
|
$tfile = serendipity_uploadSecure(basename($tfile));
|
|
|
|
if (serendipity_isActiveFile($tfile)) {
|
|
$messages[] = ERROR_FILE_FORBIDDEN .' '. $tfile;
|
|
continue;
|
|
}
|
|
|
|
$serendipity['POST']['target_directory'][$idx] = serendipity_uploadSecure($serendipity['POST']['target_directory'][$idx], true, true);
|
|
|
|
if (!serendipity_checkDirUpload($serendipity['POST']['target_directory'][$idx])) {
|
|
$messages[] = PERM_DENIED;
|
|
continue;
|
|
}
|
|
|
|
$target = $serendipity['serendipityPath'] . $serendipity['uploadPath'] . $serendipity['POST']['target_directory'][$idx] . $tfile;
|
|
|
|
$realname = $tfile;
|
|
if (file_exists($target)) {
|
|
$messages[] = '(' . $target . ') ' . ERROR_FILE_EXISTS_ALREADY;
|
|
$realname = serendipity_imageAppend($tfile, $target, $serendipity['serendipityPath'] . $serendipity['uploadPath'] . $serendipity['POST']['target_directory'][$idx]);
|
|
}
|
|
|
|
// Accept file
|
|
if (is_uploaded_file($uploadtmp) && serendipity_checkMediaSize($uploadtmp) && move_uploaded_file($uploadtmp, $target)) {
|
|
$messages[] = sprintf( FILE_UPLOADED , $uploadfile , $target);
|
|
@umask(0000);
|
|
@chmod($target, 0664);
|
|
|
|
$thumbs = array(array(
|
|
'thumbSize' => $serendipity['thumbSize'],
|
|
'thumb' => $serendipity['thumbSuffix']
|
|
));
|
|
serendipity_plugin_api::hook_event('backend_media_makethumb', $thumbs);
|
|
|
|
foreach($thumbs as $thumb) {
|
|
// Create thumbnail
|
|
if ( $created_thumbnail = serendipity_makeThumbnail($tfile, $serendipity['POST']['target_directory'][$idx], $thumb['thumbSize'], $thumb['thumb']) ) {
|
|
$messages[] = THUMB_CREATED_DONE;
|
|
}
|
|
}
|
|
|
|
// Insert into database
|
|
$image_id = serendipity_insertImageInDatabase($tfile, $serendipity['POST']['target_directory'][$idx], $authorid, null, $realname);
|
|
serendipity_plugin_api::hook_event('backend_image_add', $target, $created_thumbnail);
|
|
$new_media[] = array(
|
|
'image_id' => $image_id,
|
|
'target' => $target,
|
|
'created_thumbnail' => $created_thumbnail
|
|
);
|
|
} else {
|
|
// necessary for the ajax-uplaoder to show upload errors
|
|
header("Internal Server Error", true, 500);
|
|
$messages[] = ERROR_UNKNOWN_NOUPLOAD;
|
|
}
|
|
}
|
|
}
|
|
}
|
|
|
|
if (isset($_REQUEST['go_properties'])) {
|
|
echo serendipity_showPropertyForm($new_media);
|
|
} else {
|
|
$hidden = array(
|
|
'author' => $serendipity['serendipityUser'],
|
|
'authorid' => $serendipity['authorid']
|
|
);
|
|
|
|
foreach($new_media AS $nm) {
|
|
serendipity_insertMediaProperty('base_hidden', '', $nm['image_id'], $hidden);
|
|
}
|
|
$data['showML'] = showMediaLibrary(null, true);
|
|
}
|
|
$data['messages'] = $messages;
|
|
break;
|
|
|
|
|
|
case 'directoryDoDelete':
|
|
if (!serendipity_checkFormToken() || !serendipity_checkPermission('adminImagesDirectories')) {
|
|
return;
|
|
}
|
|
|
|
$data['case_directoryDoDelete'] = true;
|
|
$new_dir = serendipity_uploadSecure($serendipity['GET']['dir'], true);
|
|
if (is_dir($serendipity['serendipityPath'] . $serendipity['uploadPath'] . $new_dir)) {
|
|
if (!is_writable($serendipity['serendipityPath'] . $serendipity['uploadPath'] . $new_dir)) {
|
|
$data['print_DIRECTORY_WRITE_ERROR'] = sprintf(DIRECTORY_WRITE_ERROR, $new_dir);
|
|
} else {
|
|
ob_start();
|
|
// Directory exists and is writable. Now dive within subdirectories and kill 'em all.
|
|
serendipity_killPath($serendipity['serendipityPath'] . $serendipity['uploadPath'], $new_dir, (isset($serendipity['POST']['nuke']) ? true : false));
|
|
$data['ob_serendipity_killPath'] = ob_get_contents();
|
|
ob_end_clean();
|
|
}
|
|
} else {
|
|
$data['print_ERROR_NO_DIRECTORY'] = sprintf(ERROR_NO_DIRECTORY, $new_dir);
|
|
}
|
|
|
|
serendipity_plugin_api::hook_event('backend_directory_delete', $new_dir);
|
|
break;
|
|
|
|
case 'directoryEdit':
|
|
if (!serendipity_checkPermission('adminImagesDirectories')) {
|
|
return;
|
|
}
|
|
|
|
$data['case_directoryEdit'] = true;
|
|
$use_dir = serendipity_uploadSecure($serendipity['GET']['dir']);
|
|
$checkpath = array(
|
|
array(
|
|
'relpath' => $use_dir
|
|
)
|
|
);
|
|
|
|
if (!serendipity_directoryACL($checkpath, 'write')) {
|
|
return;
|
|
}
|
|
|
|
if (!empty($serendipity['POST']['save'])) {
|
|
$newDir = serendipity_uploadSecure(serendipity_makeFilename($serendipity['POST']['newDir']));
|
|
$oldDir = serendipity_uploadSecure($serendipity['POST']['oldDir']);
|
|
|
|
if ($oldDir != $newDir) {
|
|
//is this possible?
|
|
ob_start();
|
|
serendipity_moveMediaDirectory($oldDir, $newDir);
|
|
$data['ob_serendipity_moveMediaDirectory'] = ob_get_contents();
|
|
ob_end_clean();
|
|
$use_dir = $newDir;
|
|
}
|
|
serendipity_ACLGrant(0, 'directory', 'read', $serendipity['POST']['read_authors'], $use_dir);
|
|
serendipity_ACLGrant(0, 'directory', 'write', $serendipity['POST']['write_authors'], $use_dir);
|
|
$data['print_SETTINGS_SAVED_AT'] = sprintf(SETTINGS_SAVED_AT, serendipity_strftime('%H:%M:%S'));
|
|
}
|
|
|
|
$groups = serendipity_getAllGroups();
|
|
$read_groups = serendipity_ACLGet(0, 'directory', 'read', $use_dir);
|
|
$write_groups = serendipity_ACLGet(0, 'directory', 'write', $use_dir);
|
|
|
|
if (!empty($serendipity['POST']['update_children'])) {
|
|
$dir_list = serendipity_traversePath($serendipity['serendipityPath'] . $serendipity['uploadPath'], $use_dir, true, NULL, 1, NULL, 'write', NULL);
|
|
foreach($dir_list AS $f => $dir) {
|
|
// Apply parent ACL to children.
|
|
serendipity_ACLGrant(0, 'directory', 'read', $serendipity['POST']['read_authors'], $dir['relpath']);
|
|
serendipity_ACLGrant(0, 'directory', 'write', $serendipity['POST']['write_authors'], $dir['relpath']);
|
|
}
|
|
}
|
|
$data['groups'] = $groups;
|
|
$data['use_dir'] = $use_dir;
|
|
$data['formtoken'] = serendipity_setFormToken();
|
|
$data['dir'] = serendipity_specialchars($serendipity['GET']['dir']);
|
|
$data['rgroups'] = (isset($read_groups[0]) ? true : false);
|
|
$data['wgroups'] = (isset($write_groups[0]) ? true : false);
|
|
$data['read_groups'] = $read_groups;
|
|
$data['write_groups'] = $write_groups;
|
|
break;
|
|
|
|
case 'directoryDelete':
|
|
if (!serendipity_checkPermission('adminImagesDirectories')) {
|
|
return;
|
|
}
|
|
$data['case_directoryDelete'] = true;
|
|
$data['dir'] = serendipity_specialchars($serendipity['GET']['dir']);
|
|
$data['formtoken'] = serendipity_setFormToken();
|
|
$data['basename_dir'] = basename(serendipity_specialchars($serendipity['GET']['dir']));
|
|
break;
|
|
|
|
case 'directoryDoCreate':
|
|
if (!serendipity_checkFormToken() || !serendipity_checkPermission('adminImagesDirectories')) {
|
|
return;
|
|
}
|
|
|
|
$data['case_directoryDoCreate'] = true;
|
|
$new_dir = serendipity_uploadSecure($serendipity['POST']['parent'] . '/' . serendipity_makeFilename($serendipity['POST']['name']), true);
|
|
$new_dir = str_replace(array('..', '//'), array('', '/'), $new_dir);
|
|
|
|
$nd = $serendipity['serendipityPath'] . $serendipity['uploadPath'] . $new_dir;
|
|
serendipity_plugin_api::hook_event('backend_directory_create', $nd);
|
|
|
|
/* TODO: check if directory already exist */
|
|
if (is_dir($nd) || @mkdir($nd)) {
|
|
$data['print_DIRECTORY_CREATED'] = sprintf(DIRECTORY_CREATED, $serendipity['POST']['name']);
|
|
@umask(0000);
|
|
@chmod($serendipity['serendipityPath'] . $serendipity['uploadPath'] . $new_dir, 0777);
|
|
|
|
// Apply parent ACL to new child.
|
|
$array_parent_read = serendipity_ACLGet(0, 'directory', 'read', $serendipity['POST']['parent']);
|
|
$array_parent_write = serendipity_ACLGet(0, 'directory', 'write', $serendipity['POST']['parent']);
|
|
if (!is_array($array_parent_read) || count($array_parent_read) < 1) {
|
|
$parent_read = array(0);
|
|
} else {
|
|
$parent_read = array_keys($array_parent_read);
|
|
}
|
|
if (!is_array($array_parent_write) || count($array_parent_write) < 1) {
|
|
$parent_write = array(0);
|
|
} else {
|
|
$parent_write = array_keys($array_parent_write);
|
|
}
|
|
|
|
serendipity_ACLGrant(0, 'directory', 'read', $parent_read, $new_dir . '/');
|
|
serendipity_ACLGrant(0, 'directory', 'write', $parent_write, $new_dir . '/');
|
|
} else {
|
|
$data['print_DIRECTORY_WRITE_ERROR'] = sprintf(DIRECTORY_WRITE_ERROR, $new_dir);
|
|
}
|
|
|
|
break;
|
|
|
|
case 'directoryCreate':
|
|
case 'directoryCreateSub':
|
|
if (!serendipity_checkPermission('adminImagesDirectories')) {
|
|
return;
|
|
}
|
|
|
|
$folders = serendipity_traversePath(
|
|
$serendipity['serendipityPath'] . $serendipity['uploadPath'],
|
|
'',
|
|
true,
|
|
NULL,
|
|
1,
|
|
NULL,
|
|
'write'
|
|
);
|
|
usort($folders, 'serendipity_sortPath');
|
|
$data['case_directoryCreate'] = true;
|
|
$data['formtoken'] = serendipity_setFormToken();
|
|
$data['folders'] = $folders;
|
|
$data['dir'] = $serendipity['GET']['dir'];
|
|
break;
|
|
|
|
case 'directorySelect':
|
|
if (!serendipity_checkPermission('adminImagesDirectories')) {
|
|
return;
|
|
}
|
|
|
|
$folders = serendipity_traversePath(
|
|
$serendipity['serendipityPath'] . $serendipity['uploadPath'],
|
|
'',
|
|
true,
|
|
NULL,
|
|
1,
|
|
NULL,
|
|
'write'
|
|
);
|
|
usort($folders, 'serendipity_sortPath');
|
|
$data['case_directorySelect'] = true;
|
|
$data['folders'] = $folders;
|
|
break;
|
|
|
|
case 'addSelect':
|
|
if (!serendipity_checkPermission('adminImagesAdd')) {
|
|
return;
|
|
}
|
|
|
|
serendipity_restoreVar($serendipity['COOKIE']['addmedia_directory'], $serendipity['GET']['only_path']);
|
|
$folders = serendipity_traversePath(
|
|
$serendipity['serendipityPath'] . $serendipity['uploadPath'],
|
|
'',
|
|
true,
|
|
NULL,
|
|
1,
|
|
NULL,
|
|
'write'
|
|
);
|
|
usort($folders, 'serendipity_sortPath');
|
|
|
|
$form_hidden = '';
|
|
if (isset($image_selector_addvars) && is_array($image_selector_addvars)) {
|
|
// These variables may come from serendipity_admin_image_selector.php to show embedded upload form
|
|
foreach($image_selector_addvars AS $imgsel_key => $imgsel_val) {
|
|
$form_hidden .= ' <input type="hidden" name="serendipity[' . serendipity_specialchars($imgsel_key) . ']" value="' . serendipity_specialchars($imgsel_val) . '" />' . "\n";
|
|
}
|
|
}
|
|
|
|
$mediaFiles = array(
|
|
'token' => serendipity_setFormToken(),
|
|
'form_hidden' => $form_hidden,
|
|
'folders' => $folders,
|
|
'only_path' => $serendipity['GET']['only_path'],
|
|
'max_file_size' => $serendipity['maxFileSize'],
|
|
'maxImgHeight' => $serendipity['maxImgHeight'],
|
|
'maxImgWidth' => $serendipity['maxImgWidth'],
|
|
'extraParems' => serendipity_generateImageSelectorParems(),
|
|
'manage' => isset($serendipity['GET']['showMediaToolbar']) ? serendipity_db_bool($serendipity['GET']['showMediaToolbar']) : true
|
|
);
|
|
// ToDo later: merge $data and $media
|
|
$serendipity['smarty']->assign('media', $mediaFiles);
|
|
$serendipity['smarty']->display(serendipity_getTemplateFile('admin/media_upload.tpl', 'serendipityPath'));
|
|
return;
|
|
|
|
case 'rotateCW':
|
|
$file = serendipity_fetchImageFromDatabase($serendipity['GET']['fid']);
|
|
if (!is_array($file) || !serendipity_checkPermission('adminImagesDelete') || (!serendipity_checkPermission('adminImagesMaintainOthers') && $file['authorid'] != '0' && $file['authorid'] != $serendipity['authorid'])) {
|
|
return;
|
|
}
|
|
|
|
if (empty($serendipity['adminFile_redirect'])) {
|
|
$serendipity['adminFile_redirect'] = serendipity_specialchars($_SERVER['HTTP_REFERER']);
|
|
}
|
|
|
|
$data['case_rotateCW'] = true;
|
|
if (serendipity_rotateImg($serendipity['GET']['fid'], -90)) {
|
|
$data['rotate_img_done'] = true;
|
|
$data['adminFile_redirect'] = $serendipity['adminFile_redirect'];
|
|
}
|
|
break;
|
|
|
|
case 'rotateCCW':
|
|
$file = serendipity_fetchImageFromDatabase($serendipity['GET']['fid']);
|
|
if (!is_array($file) || !serendipity_checkPermission('adminImagesDelete') || (!serendipity_checkPermission('adminImagesMaintainOthers') && $file['authorid'] != '0' && $file['authorid'] != $serendipity['authorid'])) {
|
|
return;
|
|
}
|
|
|
|
if (empty($serendipity['adminFile_redirect'])) {
|
|
$serendipity['adminFile_redirect'] = serendipity_specialchars($_SERVER['HTTP_REFERER']);
|
|
}
|
|
|
|
$data['case_rotateCCW'] = true;
|
|
if (serendipity_rotateImg($serendipity['GET']['fid'], 90)) {
|
|
$data['rotate_img_done'] = true;
|
|
$data['adminFile_redirect'] = $serendipity['adminFile_redirect'];
|
|
}
|
|
break;
|
|
|
|
case 'scale':
|
|
$file = serendipity_fetchImageFromDatabase($serendipity['GET']['fid']);
|
|
|
|
if (!is_array($file) || !serendipity_checkFormToken() || !serendipity_checkPermission('adminImagesDelete') || (!serendipity_checkPermission('adminImagesMaintainOthers') && $file['authorid'] != '0' && $file['authorid'] != $serendipity['authorid'])) {
|
|
return;
|
|
}
|
|
|
|
$data['case_scale'] = true;
|
|
$data['print_SCALING_IMAGE'] = sprintf(
|
|
SCALING_IMAGE,
|
|
$file['path'] . $file['name'] .'.'. $file['extension'],
|
|
(int)$serendipity['GET']['width'],
|
|
(int)$serendipity['GET']['height']
|
|
);
|
|
|
|
$data['print_serendipity_scaleImg'] = serendipity_scaleImg($serendipity['GET']['fid'], $serendipity['GET']['width'], $serendipity['GET']['height']);
|
|
break;
|
|
|
|
case 'scaleSelect':
|
|
$file = serendipity_fetchImageFromDatabase($serendipity['GET']['fid']);
|
|
|
|
if (!is_array($file) || !serendipity_checkPermission('adminImagesDelete') || (!serendipity_checkPermission('adminImagesMaintainOthers') && $file['authorid'] != '0' && $file['authorid'] != $serendipity['authorid'])) {
|
|
return;
|
|
}
|
|
|
|
$data['case_scaleSelect'] = true;
|
|
$s = getimagesize($serendipity['serendipityPath'] . $serendipity['uploadPath'] . $file['path'] . $file['name'] . ($file['extension'] ? '.'. $file['extension'] : ""));
|
|
$data['img_width'] = $s[0];
|
|
$data['img_height'] = $s[1];
|
|
|
|
$data['print_RESIZE_BLAHBLAH'] = sprintf(RESIZE_BLAHBLAH, serendipity_specialchars($serendipity['GET']['fname']));
|
|
$data['print_ORIGINAL_SIZE'] = sprintf(ORIGINAL_SIZE, $s[0],$s[1]);
|
|
$data['formtoken'] = serendipity_setFormToken();
|
|
$data['file'] = $serendipity['uploadHTTPPath'] . $file['path'] . $file['name'] .($file['extension'] ? '.'. $file['extension'] : "");
|
|
break;
|
|
|
|
case 'choose':
|
|
$file = serendipity_fetchImageFromDatabase($serendipity['GET']['fid']);
|
|
$media['file'] = &$file;
|
|
if (!is_array($file)) {
|
|
$media['perm_denied'] = true;
|
|
break;
|
|
}
|
|
|
|
serendipity_prepareMedia($file);
|
|
|
|
$media['file']['props'] =& serendipity_fetchMediaProperties((int)$serendipity['GET']['fid']);
|
|
serendipity_plugin_api::hook_event('media_getproperties_cached', $media['file']['props']['base_metadata'], $media['file']['realfile']);
|
|
|
|
if ($file['is_image']) {
|
|
$file['finishJSFunction'] = $file['origfinishJSFunction'] = 'serendipity.serendipity_imageSelector_done(\'' . serendipity_specialchars($serendipity['GET']['textarea']) . '\')';
|
|
|
|
if (!empty($serendipity['GET']['filename_only']) && $serendipity['GET']['filename_only'] !== 'true') {
|
|
$file['fast_select'] = true;
|
|
}
|
|
}
|
|
$media = array_merge($serendipity['GET'], $media);
|
|
$serendipity['smarty']->assignByRef('media', $media);
|
|
echo serendipity_smarty_show('admin/media_choose.tpl', $data);
|
|
break;
|
|
|
|
default:
|
|
serendipity_restoreVar($serendipity['COOKIE']['serendipity_only_path'], $serendipity['GET']['only_path']);
|
|
$data['case_default'] = true;
|
|
$data['showML'] = showMediaLibrary();
|
|
break;
|
|
}
|
|
|
|
function showMediaLibrary($messages=false, $addvar_check = false, $smarty_vars = array()) {
|
|
global $serendipity;
|
|
|
|
if (!serendipity_checkPermission('adminImagesView')) {
|
|
return;
|
|
}
|
|
$output = "";
|
|
|
|
// After upload, do not show the list to be able to proceed to
|
|
// media selection.
|
|
if ($addvar_check && !empty($GLOBALS['image_selector_addvars'])) {
|
|
return true;
|
|
}
|
|
|
|
if (!isset($serendipity['thumbPerPage'])) {
|
|
$serendipity['thumbPerPage'] = 2;
|
|
}
|
|
$smarty_vars = array(
|
|
'textarea' => isset($serendipity['GET']['textarea']) ? $serendipity['GET']['textarea'] : false,
|
|
'htmltarget' => isset($serendipity['GET']['htmltarget']) ? $serendipity['GET']['htmltarget'] : '',
|
|
'filename_only' => isset($serendipity['GET']['filename_only']) ? $serendipity['GET']['filename_only'] : false,
|
|
);
|
|
|
|
$show_upload = isset($serendipity['GET']['showUpload']) ? $serendipity['GET']['showUpload'] : false;
|
|
|
|
$output .= serendipity_displayImageList(
|
|
isset($serendipity['GET']['page']) ? $serendipity['GET']['page'] : 1,
|
|
$serendipity['thumbPerPage'],
|
|
isset($serendipity['GET']['showMediaToolbar']) ? serendipity_db_bool($serendipity['GET']['showMediaToolbar']) : true,
|
|
NULL,
|
|
$show_upload,
|
|
NULL,
|
|
$smarty_vars
|
|
);
|
|
return $output;
|
|
}
|
|
|
|
if (! isset($data['showML'])) {
|
|
if (isset($_REQUEST['go_properties'])) {
|
|
$data['showMLbutton'] = true;
|
|
} else {
|
|
// always having the ML available is useful when switching the filter after adding an image, thus being in the add-case
|
|
$data['showML'] = showMediaLibrary();
|
|
}
|
|
}
|
|
|
|
$data['get']['fid'] = $serendipity['GET']['fid']; // don't trust {$smarty.get.vars} if not proofed, as we often change GET vars via serendipty['GET'] by runtime
|
|
$data['get']['only_path'] = $serendipity['GET']['only_path']; // we dont need other GET vars in images.inc.tpl
|
|
|
|
|
|
echo serendipity_smarty_show('admin/images.inc.tpl', $data);
|
|
|
|
/* vim: set sts=4 ts=4 expandtab : */
|