Initial Commit
This commit is contained in:
@@ -0,0 +1,139 @@
|
||||
<?php
|
||||
|
||||
/*===============================================*\
|
||||
|| ############################################# ||
|
||||
|| # JAKWEB.CH / Version 2.0 # ||
|
||||
|| # ----------------------------------------- # ||
|
||||
|| # Copyright 2021 JAKWEB All Rights Reserved # ||
|
||||
|| ############################################# ||
|
||||
\*===============================================*/
|
||||
|
||||
if (!file_exists('../config.php')) die('[uploader.php] config.php not found');
|
||||
require_once '../config.php';
|
||||
|
||||
// Import the language file
|
||||
if ($BT_LANGUAGE && file_exists(APP_PATH.'lang/'.strtolower($BT_LANGUAGE).'.php')) {
|
||||
include_once(APP_PATH.'lang/'.strtolower($BT_LANGUAGE).'.php');
|
||||
} else {
|
||||
include_once(APP_PATH.'lang/'.JAK_LANG.'.php');
|
||||
}
|
||||
|
||||
// The new file upload stuff
|
||||
if (!empty($_FILES['uploadpp']['name']) && isset($_REQUEST['customer']) && !empty($_REQUEST['customer'])) {
|
||||
|
||||
$filename = strtolower($_FILES['uploadpp']['name']); // original filename
|
||||
$ls_xtension = pathinfo($filename);
|
||||
|
||||
// Check if the extension is valid
|
||||
$allowedf = explode(',', JAK_ALLOWED_FILES);
|
||||
if (in_array(".".$ls_xtension['extension'], $allowedf)) {
|
||||
|
||||
// if mime type is valid
|
||||
$mime_type = jak_mime_content_type($_FILES['uploadpp']['name'], $ls_xtension['extension']);
|
||||
if ($mime_type) {
|
||||
|
||||
// Get the maximum upload or set to 2
|
||||
$postmax = (ini_get('post_max_size') ? filter_var(ini_get('post_max_size'), FILTER_SANITIZE_NUMBER_INT) : "2");
|
||||
|
||||
if ($_FILES['uploadpp']['size'] <= ($postmax * 1000000)) {
|
||||
|
||||
// first get the target path
|
||||
$targetPathd = CLIENT_UPLOAD_DIR.'/'.$opcacheid.'/user/';
|
||||
$targetPath = str_replace("//", "/", $targetPathd);
|
||||
|
||||
// Create the target path
|
||||
if (!is_dir($targetPath)) mkdir($targetPath, 0755, true);
|
||||
|
||||
$tempFile = $_FILES['uploadpp']['tmp_name'];
|
||||
$name_space = explode(".", $_FILES["uploadpp"]["name"]);
|
||||
// Keep the file name but sanitized
|
||||
$fileName = mb_ereg_replace("([^\w\s\d\-_~,;\[\]\(\).])", '', $name_space[0]);
|
||||
$fileName = mb_ereg_replace("([\.]{2,})", '', $fileName);
|
||||
$fileName = preg_replace('/\s+/', '_', $fileName);
|
||||
$ufile = 'uc_'.str_replace('.', '_', microtime(true)).'_'.$fileName. '.' . end($name_space);
|
||||
|
||||
$targetFile = str_replace('//','/',$targetPath).$ufile;
|
||||
$origPath = '/'.$opcacheid.'/user/';
|
||||
|
||||
// write the correct format
|
||||
$message = $origPath.$ufile.':#:'.$ufile.':#:'.$mime_type;
|
||||
|
||||
// Let's make sure we have an active chat and it is available
|
||||
$cudetails = jak_string_encrypt_decrypt($_REQUEST['customer'], false);
|
||||
|
||||
// Let's explode the string (0 = convid, 1 = uniqueid, 2 = userid, 3 = name, 4 = email, 5 = phone, 6 = avatar)
|
||||
$cudetails = explode(":#:", $cudetails);
|
||||
|
||||
if (isset($cudetails[0]) && is_numeric($cudetails[0])) {
|
||||
|
||||
// Move file
|
||||
move_uploaded_file($tempFile, $targetFile);
|
||||
|
||||
$jakdb->insert("transcript", [
|
||||
"name" => $cudetails[3],
|
||||
"message" => $message,
|
||||
"user" => $cudetails[2],
|
||||
"convid" => $cudetails[0],
|
||||
"class" => "download",
|
||||
"time" => $jakdb->raw("NOW()")]);
|
||||
|
||||
$jakdb->update("checkstatus", ["newo" => 1, "typec" => 0], ["convid" => $cudetails[0]]);
|
||||
|
||||
// success
|
||||
$msg = $jkl['s'];
|
||||
|
||||
} else {
|
||||
$msg = $jkl['e8'];
|
||||
}
|
||||
|
||||
} else {
|
||||
$msg = $jkl['e9'];
|
||||
}
|
||||
|
||||
} else {
|
||||
$msg = $jkl['e13'];
|
||||
}
|
||||
|
||||
} else {
|
||||
$msg = $jkl['e13'];
|
||||
}
|
||||
|
||||
switch ($_FILES['uploadpp']['error'])
|
||||
{
|
||||
case 0:
|
||||
//$msg = "No Error"; // comment this out if you don't want a message to appear on success.
|
||||
break;
|
||||
case 1:
|
||||
$msg = "The file is bigger than this PHP installation allows";
|
||||
break;
|
||||
case 2:
|
||||
$msg = "The file is bigger than this form allows";
|
||||
break;
|
||||
case 3:
|
||||
$msg = "Only part of the file was uploaded";
|
||||
break;
|
||||
case 4:
|
||||
$msg = "No file was uploaded";
|
||||
break;
|
||||
case 6:
|
||||
$msg = "Missing a temporary folder";
|
||||
break;
|
||||
case 7:
|
||||
$msg = "Failed to write file to disk";
|
||||
break;
|
||||
case 8:
|
||||
$msg = "File upload stopped by extension";
|
||||
break;
|
||||
default:
|
||||
$msg = "unknown error ".$_FILES['uploadpp']['error'];
|
||||
break;
|
||||
}
|
||||
|
||||
if ($msg) {
|
||||
$stringData = $msg;
|
||||
} else {
|
||||
$stringData = $jkl['s']; // This is required for onComplete to fire on Mac OSX
|
||||
}
|
||||
echo $stringData;
|
||||
}
|
||||
?>
|
||||
Reference in New Issue
Block a user