wnross/clouddesk
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Initial Commit

Browse Source
This commit is contained in:
rick
2024-02-08 12:07:49 -07:00
parent 5813b1109f
commit 43077b57ed
5471 changed files with 682195 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
uploader/index.html
View File
uploader/uploader.php
+139
View File
@@ -0,0 +1,139 @@
<?php
/*===============================================*\
|| ############################################# ||
|| # JAKWEB.CH / Version 2.0 # ||
|| # ----------------------------------------- # ||
|| # Copyright 2021 JAKWEB All Rights Reserved # ||
|| ############################################# ||
\*===============================================*/
if (!file_exists('../config.php')) die('[uploader.php] config.php not found');
require_once '../config.php';
// Import the language file
if ($BT_LANGUAGE && file_exists(APP_PATH.'lang/'.strtolower($BT_LANGUAGE).'.php')) {
include_once(APP_PATH.'lang/'.strtolower($BT_LANGUAGE).'.php');
} else {
include_once(APP_PATH.'lang/'.JAK_LANG.'.php');
}
// The new file upload stuff
if (!empty($_FILES['uploadpp']['name']) && isset($_REQUEST['customer']) && !empty($_REQUEST['customer'])) {
$filename = strtolower($_FILES['uploadpp']['name']); // original filename
$ls_xtension = pathinfo($filename);
// Check if the extension is valid
$allowedf = explode(',', JAK_ALLOWED_FILES);
if (in_array(".".$ls_xtension['extension'], $allowedf)) {
// if mime type is valid
$mime_type = jak_mime_content_type($_FILES['uploadpp']['name'], $ls_xtension['extension']);
if ($mime_type) {
// Get the maximum upload or set to 2
$postmax = (ini_get('post_max_size') ? filter_var(ini_get('post_max_size'), FILTER_SANITIZE_NUMBER_INT) : "2");
if ($_FILES['uploadpp']['size'] <= ($postmax * 1000000)) {
// first get the target path
$targetPathd = CLIENT_UPLOAD_DIR.'/'.$opcacheid.'/user/';
$targetPath = str_replace("//", "/", $targetPathd);
// Create the target path
if (!is_dir($targetPath)) mkdir($targetPath, 0755, true);
$tempFile = $_FILES['uploadpp']['tmp_name'];
$name_space = explode(".", $_FILES["uploadpp"]["name"]);
// Keep the file name but sanitized
$fileName = mb_ereg_replace("([^\w\s\d\-_~,;\[\]\(\).])", '', $name_space[0]);
$fileName = mb_ereg_replace("([\.]{2,})", '', $fileName);
$fileName = preg_replace('/\s+/', '_', $fileName);
$ufile = 'uc_'.str_replace('.', '_', microtime(true)).'_'.$fileName. '.' . end($name_space);
$targetFile = str_replace('//','/',$targetPath).$ufile;
$origPath = '/'.$opcacheid.'/user/';
// write the correct format
$message = $origPath.$ufile.':#:'.$ufile.':#:'.$mime_type;
// Let's make sure we have an active chat and it is available
$cudetails = jak_string_encrypt_decrypt($_REQUEST['customer'], false);
// Let's explode the string (0 = convid, 1 = uniqueid, 2 = userid, 3 = name, 4 = email, 5 = phone, 6 = avatar)
$cudetails = explode(":#:", $cudetails);
if (isset($cudetails[0]) && is_numeric($cudetails[0])) {
// Move file
move_uploaded_file($tempFile, $targetFile);
$jakdb->insert("transcript", [
"name" => $cudetails[3],
"message" => $message,
"user" => $cudetails[2],
"convid" => $cudetails[0],
"class" => "download",
"time" => $jakdb->raw("NOW()")]);
$jakdb->update("checkstatus", ["newo" => 1, "typec" => 0], ["convid" => $cudetails[0]]);
// success
$msg = $jkl['s'];
} else {
$msg = $jkl['e8'];
}
} else {
$msg = $jkl['e9'];
}
} else {
$msg = $jkl['e13'];
}
} else {
$msg = $jkl['e13'];
}
switch ($_FILES['uploadpp']['error'])
{
case 0:
//$msg = "No Error"; // comment this out if you don't want a message to appear on success.
break;
case 1:
$msg = "The file is bigger than this PHP installation allows";
break;
case 2:
$msg = "The file is bigger than this form allows";
break;
case 3:
$msg = "Only part of the file was uploaded";
break;
case 4:
$msg = "No file was uploaded";
break;
case 6:
$msg = "Missing a temporary folder";
break;
case 7:
$msg = "Failed to write file to disk";
break;
case 8:
$msg = "File upload stopped by extension";
break;
default:
$msg = "unknown error ".$_FILES['uploadpp']['error'];
break;
}
if ($msg) {
$stringData = $msg;
} else {
$stringData = $jkl['s']; // This is required for onComplete to fire on Mac OSX
}
echo $stringData;
}
?>
uploader/uploadero.php
+130
View File
@@ -0,0 +1,130 @@
<?php
/*===============================================*\
|| ############################################# ||
|| # JAKWEB.CH / Version 1.2 # ||
|| # ----------------------------------------- # ||
|| # Copyright 2021 JAKWEB All Rights Reserved # ||
|| ############################################# ||
\*===============================================*/
if (!file_exists('../config.php')) die('[uploader.php] config.php not found');
require_once '../config.php';
if(!isset($_SESSION['jak_lcp_idhash'])) die("Nothing to see here");
// Import the language file
if (isset($_REQUEST["operatorLanguage"]) && file_exists(APP_PATH.'lang/'.strtolower($_REQUEST["operatorLanguage"]).'.php')) {
include_once(APP_PATH.'lang/'.strtolower($_REQUEST["operatorLanguage"]).'.php');
} else {
include_once(APP_PATH.'lang/'.JAK_LANG.'.php');
}
// The new file upload stuff
if (!empty($_FILES['uploadpp']['name']) && is_numeric($_REQUEST["convID"])) {
$filename = strtolower($_FILES['uploadpp']['name']); // original filename
$ls_xtension = pathinfo($filename);
// Check if the extension is valid
$allowedf = explode(',', JAK_ALLOWEDO_FILES);
if (in_array(".".$ls_xtension['extension'], $allowedf)) {
// if mime type is valid
$mime_type = jak_mime_content_type($_FILES['uploadpp']['name'], $ls_xtension['extension']);
if ($mime_type) {
// Get the maximum upload or set to 2
$postmax = (ini_get('post_max_size') ? filter_var(ini_get('post_max_size'), FILTER_SANITIZE_NUMBER_INT) : "2");
if ($_FILES['uploadpp']['size'] <= ($postmax * 1000000)) {
// first get the target path
$targetPathd = CLIENT_UPLOAD_DIR.'/'.$opcacheid.'/operator/';
$targetPath = str_replace("//", "/", $targetPathd);
// Create the target path
if (!is_dir($targetPath)) mkdir($targetPath, 0755, true);
// rename the file
$tempFile = $_FILES['uploadpp']['tmp_name'];
$name_space = explode(".", $_FILES["uploadpp"]["name"]);
// Keep the file name but sanitized
$fileName = mb_ereg_replace("([^\w\s\d\-_~,;\[\]\(\).])", '', $name_space[0]);
$fileName = mb_ereg_replace("([\.]{2,})", '', $fileName);
$fileName = preg_replace('/\s+/', '_', $fileName);
$ufile = 'oc_'.str_replace('.', '_', microtime(true)).'_'.$fileName. '.' . end($name_space);
$targetFile = str_replace('//','/',$targetPath).$ufile;
$origPath = '/'.$opcacheid.'/operator/';
// write the correct format
$message = $origPath.$ufile.':#:'.$ufile.':#:'.$mime_type;
// Move file
move_uploaded_file($tempFile, $targetFile);
$jakdb->insert("transcript", [
"name" => $_REQUEST['operatorNameU'],
"message" => $message,
"user" => $_REQUEST['userIDU'],
"operatorid" => $_REQUEST['userIDU'],
"convid" => $_REQUEST['convID'],
"class" => "download",
"time" => $jakdb->raw("NOW()")]);
$jakdb->update("checkstatus", ["newc" => 1, "typeo" => 0], ["convid" => $_REQUEST['convID']]);
} else {
$msg = $jkl['e9'];
}
} else {
$msg = $jkl['e13'];
}
} else {
$msg = $jkl['e13'];
}
switch ($_FILES['uploadpp']['error'])
{
case 0:
//$msg = "No Error"; // comment this out if you don't want a message to appear on success.
break;
case 1:
$msg = "The file is bigger than this PHP installation allows";
break;
case 2:
$msg = "The file is bigger than this form allows";
break;
case 3:
$msg = "Only part of the file was uploaded";
break;
case 4:
$msg = "No file was uploaded";
break;
case 6:
$msg = "Missing a temporary folder";
break;
case 7:
$msg = "Failed to write file to disk";
break;
case 8:
$msg = "File upload stopped by extension";
break;
default:
$msg = "unknown error ".$_FILES['uploadpp']['error'];
break;
}
if (isset($msg) && !empty($msg)) {
$stringData = $msg;
} else {
$stringData = $jkl['s']; // This is required for onComplete to fire on Mac OSX
}
} else {
$stringData = "error";
}
echo $stringData;
?>
uploader/uploadert.php
+157
View File
@@ -0,0 +1,157 @@
<?php
/*===============================================*\
|| ############################################# ||
|| # JAKWEB.CH / Version 1.2 # ||
|| # ----------------------------------------- # ||
|| # Copyright 2021 JAKWEB All Rights Reserved # ||
|| ############################################# ||
\*===============================================*/
if (!file_exists('../config.php')) die('[uploader.php] config.php not found');
require_once '../config.php';
if(!JAK_USERISLOGGED) die("Nothing to see here");
if (!$jakosub['files']) die("Nothing to see here");
// Import the language file
if ($BT_LANGUAGE && file_exists(APP_PATH.'lang/'.strtolower($BT_LANGUAGE).'.php')) {
include_once(APP_PATH.'lang/'.strtolower($BT_LANGUAGE).'.php');
} else {
include_once(APP_PATH.'lang/'.JAK_LANG.'.php');
}
if (JAK_CLIENTID == $_REQUEST['userIDC'] || JAK_USERID == $_REQUEST['userIDU']) {
// The new file upload stuff
if (!empty($_FILES['uploadpp']['name']) && is_numeric($_REQUEST["ticketId"])) {
// Ticket ID
$ticketid = $_REQUEST['ticketId'];
$filename = strtolower($_FILES['uploadpp']['name']); // original filename
$ls_xtension = pathinfo($filename);
// Check if the extension is valid
$allowedf = explode(',', JAK_ALLOWED_FILES);
if (in_array(".".$ls_xtension['extension'], $allowedf)) {
// if mime type is valid
$mime_type = jak_mime_content_type($_FILES['uploadpp']['name'], $ls_xtension['extension']);
if ($mime_type) {
// Get the maximum upload or set to 2
$postmax = (ini_get('post_max_size') ? filter_var(ini_get('post_max_size'), FILTER_SANITIZE_NUMBER_INT) : "2");
if ($_FILES['uploadpp']['size'] <= ($postmax * 1000000)) {
// first get the target path
$targetPathd = CLIENT_UPLOAD_DIR.'/'.$opcacheid.'/support/'.$ticketid.'/';
$targetPath = str_replace("//", "/", $targetPathd);
// Create the target path
if (!is_dir($targetPath)) mkdir($targetPath, 0755, true);
$tempFile = $_FILES['uploadpp']['tmp_name'];
$name_space = explode(".", $_FILES["uploadpp"]["name"]);
// Keep the file name but sanitized
$fileName = mb_ereg_replace("([^\w\s\d\-_~,;\[\]\(\).])", '', $name_space[0]);
$fileName = mb_ereg_replace("([\.]{2,})", '', $fileName);
$fileName = preg_replace('/\s+/', '_', $fileName);
$ufile = 'u_'.str_replace('.', '_', microtime(true)).'_'.$fileName. '.' . end($name_space);
// The path to upload
$targetFile = str_replace('//', '/', $targetPath).$ufile;
// The path to show
$targetShow = jak_encrypt_decrypt(str_replace('//', '/', '/'.$opcacheid.'/support/'.$ticketid.'/').$ufile.':#:'.$ufile.':#:'.$mime_type);
// Check if the file is an image
if(@is_array(getimagesize($tempFile))){
$isimage = 1;
} else {
$isimage = 0;
}
// Move file
$upfilesize = 0;
if (move_uploaded_file($tempFile, $targetFile)) {
// Update counter on ticket
if (file_exists($targetFile)) {
$jakdb->update("support_tickets", ["attachments[+]" => 1], ["id" => $ticketid]);
// Now we update the answer table so we can have it in the conversation.
$clientid = 0;
if (isset($_REQUEST['userIDC']) && is_numeric($_REQUEST['userIDC'])) $clientid = $_REQUEST['userIDC'];
$jakdb->insert("ticket_answers", ["ticketid" => $ticketid,
"clientid" => $clientid,
"content" => $ufile,
"file" => 1,
"lastedit" => $jakdb->raw("NOW()"),
"sent" => $jakdb->raw("NOW()")]);
// Get the file size
$upfilesize = sprintf($jkl['hd140'], human_filesize($targetFile));
// success
$msg = '{"status":"'.$jkl['s'].'", "filepath": "'.$targetShow.'", "filename": "'.$ufile.'", "isimage": '.$isimage.', "filesize": "'.$upfilesize.'"}'; // return json
}
}
} else {
$msg = $jkl['hd88'];
}
} else {
$msg = $jkl['hd89'];
}
} else {
$msg = $jkl['hd89'];
}
switch ($_FILES['uploadpp']['error'])
{
case 0:
//$msg = "No Error"; // comment this out if you don't want a message to appear on success.
break;
case 1:
$msg = "The file is bigger than this PHP installation allows";
break;
case 2:
$msg = "The file is bigger than this form allows";
break;
case 3:
$msg = "Only part of the file was uploaded";
break;
case 4:
$msg = "No file was uploaded";
break;
case 6:
$msg = "Missing a temporary folder";
break;
case 7:
$msg = "Failed to write file to disk";
break;
case 8:
$msg = "File upload stopped by extension";
break;
default:
$msg = "unknown error ".$_FILES['uploadpp']['error'];
break;
}
if (isset($msg) && !empty($msg)) {
$stringData = $msg;
}
} else {
$stringData = "error";
}
} else {
$stringData = "error";
}
echo $stringData;
?>
uploader/uploaderto.php
+146
View File
@@ -0,0 +1,146 @@
<?php
/*===============================================*\
|| ############################################# ||
|| # JAKWEB.CH / Version 1.2 # ||
|| # ----------------------------------------- # ||
|| # Copyright 2021 JAKWEB All Rights Reserved # ||
|| ############################################# ||
\*===============================================*/
if (!file_exists('../config.php')) die('[uploader.php] config.php not found');
require_once '../config.php';
if(!isset($_SESSION['jak_lcp_idhash'])) die("Nothing to see here");
// Import the language file
if (isset($_REQUEST["operatorLanguage"]) && file_exists(APP_PATH.'lang/'.strtolower($_REQUEST["operatorLanguage"]).'.php')) {
include_once(APP_PATH.'lang/'.strtolower($_REQUEST["operatorLanguage"]).'.php');
} else {
include_once(APP_PATH.'lang/'.JAK_LANG.'.php');
}
// The new file upload stuff
if (!empty($_FILES['uploadpp']['name']) && is_numeric($_REQUEST["ticketId"])) {
// Ticket ID
$ticketid = $_REQUEST['ticketId'];
$filename = strtolower($_FILES['uploadpp']['name']); // original filename
$ls_xtension = pathinfo($filename);
// Check if the extension is valid
$allowedf = explode(',', JAK_ALLOWEDO_FILES);
if (in_array(".".$ls_xtension['extension'], $allowedf)) {
// if mime type is valid
$mime_type = jak_mime_content_type($_FILES['uploadpp']['name'], $ls_xtension['extension']);
if ($mime_type) {
// Get the maximum upload or set to 2
$postmax = (ini_get('post_max_size') ? filter_var(ini_get('post_max_size'), FILTER_SANITIZE_NUMBER_INT) : "2");
if ($_FILES['uploadpp']['size'] <= ($postmax * 1000000)) {
// first get the target path
$targetPathd = CLIENT_UPLOAD_DIR.'/'.$opcacheid.'/support/'.$ticketid.'/';
$targetPath = str_replace("//", "/", $targetPathd);
// Create the target path
if (!is_dir($targetPath)) mkdir($targetPath, 0755, true);
$tempFile = $_FILES['uploadpp']['tmp_name'];
$name_space = explode(".", $_FILES["uploadpp"]["name"]);
// Keep the file name but sanitized
$fileName = mb_ereg_replace("([^\w\s\d\-_~,;\[\]\(\).])", '', $name_space[0]);
$fileName = mb_ereg_replace("([\.]{2,})", '', $fileName);
$fileName = preg_replace('/\s+/', '_', $fileName);
$ufile = 'o_'.str_replace('.', '_', microtime(true)).'_'.$fileName. '.' . end($name_space);
// The path to upload
$targetFile = str_replace('//', '/', $targetPath).$ufile;
// The path to show
$targetShow = jak_encrypt_decrypt(str_replace('//', '/', '/'.$opcacheid.'/support/'.$ticketid.'/').$ufile.':#:'.$ufile.':#:'.$mime_type);
// Check if the file is an image
if(@is_array(getimagesize($tempFile))){
$isimage = 1;
} else {
$isimage = 0;
}
// Delete path
$delpath = str_replace('uploader/', '', JAK_rewrite::jakParseurl(JAK_OPERATOR_LOC, 'support', 'deletef', $ticketid, $ufile));
// Move file
if (move_uploaded_file($tempFile, $targetFile)) {
// Update counter on ticket
if (file_exists($targetFile)) $jakdb->update("support_tickets", ["attachments[+]" => 1], ["id" => $ticketid]);
// Now we update the answer table so we can have it in the conversation.
$jakdb->insert("ticket_answers", ["ticketid" => $ticketid,
"operatorid" => JAK_USERID,
"content" => $ufile,
"file" => 1,
"lastedit" => $jakdb->raw("NOW()"),
"sent" => $jakdb->raw("NOW()")]);
// success
$msg = '{"status":"'.$jkl['s'].'", "filepath": "'.$targetShow.'", "filename": "'.$ufile.'", "isimage": '.$isimage.', "delpath": "'.$delpath.'"}';
}
} else {
$msg = $jkl['hd219'];
}
} else {
$msg = $jkl['e13'];
}
} else {
$msg = $jkl['e13'];
}
switch ($_FILES['uploadpp']['error'])
{
case 0:
//$msg = "No Error"; // comment this out if you don't want a message to appear on success.
break;
case 1:
$msg = "The file is bigger than this PHP installation allows";
break;
case 2:
$msg = "The file is bigger than this form allows";
break;
case 3:
$msg = "Only part of the file was uploaded";
break;
case 4:
$msg = "No file was uploaded";
break;
case 6:
$msg = "Missing a temporary folder";
break;
case 7:
$msg = "Failed to write file to disk";
break;
case 8:
$msg = "File upload stopped by extension";
break;
default:
$msg = "unknown error ".$_FILES['uploadpp']['error'];
break;
}
if (isset($msg) && !empty($msg)) {
$stringData = $msg;
} else {
$stringData = '{"status":"'.$jkl['s'].'", "filepath": "'.$targetShow.'", "filename": "'.$ufile.'", "isimage": '.$isimage.', "delpath": "'.$delpath.'"}'; // return json
}
} else {
$stringData = "error";
}
echo $stringData;
?>