- - - - - - [?relogin=">logout] + - + - + + + [] -ANYPORTAL(php) Site Manager - + +Document Manager , based on ANYPORTAL(php) Site Manager + © 1999 by ANYPORTAL, © 2000 by d@nger.org, -© 2000 by DbP +© 2000-2002 by DbP
$fromdir / $fromfile -> $todir / $tofile\n\n"; +# print "$fromdir / $fromfile -> $todir / $tofile\n\n"; try_rename("$fromdir/$fromfile","$todir/$tofile"); try_dir("$todir/.log"); @@ -1117,6 +1162,7 @@ $log=fopen("$gblFsRoot/.changelog","a+"); if (substr($target,0,strlen($gblFsRoot)) == $gblFsRoot) $target=substr($target,strlen($gblFsRoot),strlen($target)-strlen($gblFsRoot)); + $msg=str_replace("\t"," ",$msg); fputs($log,time()."\t$target\t$GLOBALS[gblUserName]\t$msg\n"); fclose($log); @@ -1128,7 +1174,11 @@ if (!file_exists("$gblFsRoot/.changelog")) return; $log=fopen("$gblFsRoot/.changelog","r"); $logarr = array(); - while($line = fgetcsv($log,255,"\t")) { + while($line = fgetcsv($log,512,"\t")) { + while (sizeof($line) > 4) { + $tmp = array_pop($line); + $line.=" $tmp"; + } if ($day!=1 || ($day==1 && (time()-$line[0] < 24*60*60))) { array_unshift($logarr,array($line[0],$line[1],$line[2],$line[3])); } @@ -1150,6 +1200,34 @@ ////////////////////////////////////////////////////////////////// +function Download($path) { + global $HTTP_USER_AGENT; + $file=basename($path); + $size = filesize($path); + //header("Content-Type: application/octet-stream"); + header("Content-Type: application/force-download"); + header("Content-Length: $size"); + // IE5.5 just downloads index.php if we don't do this + if(preg_match("/MSIE 5.5/", $HTTP_USER_AGENT)) { + header("Content-Disposition: filename=$file"); + } else { + header("Content-Disposition: attachment; filename=$file"); + } + header("Content-Transfer-Encoding: binary"); + $fh = fopen($path, "r"); + fpassthru($fh); +} + + +////////////////////////////////////////////////////////////////// + +function chopsl($path) { + if (substr($path,strlen($path)-1,1) == "/") $path=substr($path,0,strlen($path)-1); + $path=str_replace("//","/",$path); + return $path; +} + +////////////////////////////////////////////////////////////////// // MAIN PROGRAM // ============ // query parameters: capital letters @@ -1164,45 +1242,43 @@ // forks before authentication: style sheet and hash // creation if password not yet set. - if ($STYLE == "get") { CSS() ; exit ; } + if (isset($STYLE) && $STYLE == "get") { CSS() ; exit ; } - $htusers_file=dirname($SCRIPT_FILENAME)."/.htusers"; - if (! file_exists($htusers_file)) { - if (is_writeable(dirname($SCRIPT_FILENAME))) { - $htusers=fopen($htusers_file,"a+"); - fputs($htusers,"# Change owner of $htusers_file to root !!\n"); - fputs($htusers,"demo:full name:[md5_hash|auth_*]:e-mail\n"); - fclose($htusers); - Error("Proto user file created!","Please edit $htusers_file and set it correct permissions (not writable by web server as it is now!). You can add users using adduser.pl script!"); - exit; - } else { - Error("Can't create proto user file!","Please make directory ".dirname($htusers_file)." writable or create .htusers file by hand using adduser.pl script!"); - exit; - } + $fsScriptDir = dirname($SCRIPT_FILENAME) ; + // i.e. /home/httpd/html/docman + + // read user-defined configuration + if (file_exists("$fsScriptDir/.docman.conf")) { + include("$fsScriptDir/.docman.conf"); } - $htusers=fopen($htusers_file,"r"); - while($user = fgetcsv($htusers,255,":")) { - if ($user[0] == $GLOBALS["PHP_AUTH_USER"]) { - $gblUserName=$user[1]; - $gblPw=$user[2]; - if (substr($gblPw,0,5) == "auth_" && file_exists("$gblIncDir/$gblPw.php")) { - require("$gblIncDir/$gblPw.php"); - if ($gblPw($user)) { - $gblPw=md5($PHP_AUTH_USER.$PHP_AUTH_PW); - } else { - $gblPw="error".md5($PHP_AUTH_USER.$PHP_AUTH_PW); - } - } - $gblEmail=$user[3]; - continue ; - } + + // where do we get users from? + if (file_exists("$gblIncDir/$gblUsers.php")) { + include("$gblIncDir/$gblUsers.php"); + } else { + Error("Configuration error","Can't find user handling module at $gblIncDir/$gblUsers.php ! Please fix $fsScriptDir/.docman.conf"); + } + + // if no password, or empty password logout + if ( + isset($PHP_AUTH_USER) && ( + !isset($relogin) || ( + isset($relogin) && $relogin != md5($PHP_AUTH_USER.$PHP_AUTH_PW) + ) + ) && ( + $PHP_AUTH_PW == "" || !isset($PHP_AUTH_PW) + ) && !isset($force_login) + ) { + StartHTML("Logout completed","Your login credentials has been erased") ; + EndHTML() ; + exit ; } - fclose($htusers); // authentication failure if ( md5($PHP_AUTH_USER.$PHP_AUTH_PW) != $gblPw || - isset($relogin) && $gblPw == $relogin ) { - header("WWW-authenticate: basic realm=\"$HTTP_HOST\"") ; + isset($relogin) && $gblPw == $relogin) { + $realm="$HTTP_HOST"; + header("WWW-authenticate: basic realm=\"$realm\"") ; header("HTTP/1.0 401 Unauthorized") ; NoEntry() ; exit ; @@ -1229,9 +1305,6 @@ $relScriptDir = dirname($SCRIPT_NAME) ; // i.e. /docman - $fsScriptDir = dirname($SCRIPT_FILENAME) ; - // i.e. /home/httpd/html/docman - // start on server root // $gblFsRoot = substr($fsScriptDir,0, strlen($fsScriptDir)-strlen($relScriptDir)) ; // or on script root @@ -1250,9 +1323,6 @@ $FN=stripSlashes($FN); - if (file_exists("$fsScriptDir/.docman.conf")) { - include("$fsScriptDir/.docman.conf"); - } switch ($POSTACTION) { case "UPLOAD" : @@ -1431,6 +1501,7 @@ // $A=Co : checkout file $D/$F // $A=Ci : checkin file $D/$F // $A=V : view file (do nothing except log) + // $A=I : include file .$F.php from $gblFsRoot // default : display directory $D switch ($A) { @@ -1457,8 +1528,7 @@ case "Co" : // checkout Lock("$gblFsRoot/$relDir/$F"); - header("Content-Disposition: attachment; filename=$F" ); - Header("Location: $webRoot".urlpath("$relDir/$F")); + Download("$gblFsRoot/$relDir/$F"); exit; case "Ci" : $F=stripSlashes($F); @@ -1474,8 +1544,12 @@ case "V" : // view LogIt("$gblFsRoot/$relDir/$F","viewed"); - header("Content-Disposition: attachment; filename=$F" ); - Header("Location: $webRoot".urlpath("$relDir/$F")); + if ($gblForceDownload) { + Download("$gblFsRoot/$relDir/$F"); + } else { + header("Content-Disposition: attachment; filename=$F" ); + Header("Location: $webRoot".urlpath("$relDir/$F")); + } exit; case "Ch" : StartHTML("(File changes)","All changes chronologicaly..."); @@ -1487,6 +1561,19 @@ DisplayChangeLog(1); EndHTML() ; exit; + case "I" : + $F=stripSlashes($F); + $inc_file="${gblFsRoot}/.${F}.php"; + if (!isset($F) || $F == "" || !file_exists($inc_file)) Error("Fatal error $inc_file"); // can't find file to include + if (!is_readable($inc_file)) + Error("Read access to include file denied",".${F}.php"); + $text = "Your include file should define \$text variable which holds this text and \$title variable which is page title"; + $title = "You should define \$title variable with page title"; + include($inc_file); + StartHTML($title, $text) ; + print "".GifIcon(up)." Back to front page."; + EndHTML() ; + exit ; } // default: display directory $relDir
$fromdir / $fromfile -> $todir / $tofile\n\n"; try_rename("$fromdir/$fromfile","$todir/$tofile"); try_dir("$todir/.log"); @@ -1117,6 +1162,7 @@ $log=fopen("$gblFsRoot/.changelog","a+"); if (substr($target,0,strlen($gblFsRoot)) == $gblFsRoot) $target=substr($target,strlen($gblFsRoot),strlen($target)-strlen($gblFsRoot)); + $msg=str_replace("\t"," ",$msg); fputs($log,time()."\t$target\t$GLOBALS[gblUserName]\t$msg\n"); fclose($log); @@ -1128,7 +1174,11 @@ if (!file_exists("$gblFsRoot/.changelog")) return; $log=fopen("$gblFsRoot/.changelog","r"); $logarr = array(); - while($line = fgetcsv($log,255,"\t")) { + while($line = fgetcsv($log,512,"\t")) { + while (sizeof($line) > 4) { + $tmp = array_pop($line); + $line.=" $tmp"; + } if ($day!=1 || ($day==1 && (time()-$line[0] < 24*60*60))) { array_unshift($logarr,array($line[0],$line[1],$line[2],$line[3])); } @@ -1150,6 +1200,34 @@ ////////////////////////////////////////////////////////////////// +function Download($path) { + global $HTTP_USER_AGENT; + $file=basename($path); + $size = filesize($path); + //header("Content-Type: application/octet-stream"); + header("Content-Type: application/force-download"); + header("Content-Length: $size"); + // IE5.5 just downloads index.php if we don't do this + if(preg_match("/MSIE 5.5/", $HTTP_USER_AGENT)) { + header("Content-Disposition: filename=$file"); + } else { + header("Content-Disposition: attachment; filename=$file"); + } + header("Content-Transfer-Encoding: binary"); + $fh = fopen($path, "r"); + fpassthru($fh); +} + + +////////////////////////////////////////////////////////////////// + +function chopsl($path) { + if (substr($path,strlen($path)-1,1) == "/") $path=substr($path,0,strlen($path)-1); + $path=str_replace("//","/",$path); + return $path; +} + +////////////////////////////////////////////////////////////////// // MAIN PROGRAM // ============ // query parameters: capital letters @@ -1164,45 +1242,43 @@ // forks before authentication: style sheet and hash // creation if password not yet set. - if ($STYLE == "get") { CSS() ; exit ; } + if (isset($STYLE) && $STYLE == "get") { CSS() ; exit ; } - $htusers_file=dirname($SCRIPT_FILENAME)."/.htusers"; - if (! file_exists($htusers_file)) { - if (is_writeable(dirname($SCRIPT_FILENAME))) { - $htusers=fopen($htusers_file,"a+"); - fputs($htusers,"# Change owner of $htusers_file to root !!\n"); - fputs($htusers,"demo:full name:[md5_hash|auth_*]:e-mail\n"); - fclose($htusers); - Error("Proto user file created!","Please edit $htusers_file and set it correct permissions (not writable by web server as it is now!). You can add users using adduser.pl script!"); - exit; - } else { - Error("Can't create proto user file!","Please make directory ".dirname($htusers_file)." writable or create .htusers file by hand using adduser.pl script!"); - exit; - } + $fsScriptDir = dirname($SCRIPT_FILENAME) ; + // i.e. /home/httpd/html/docman + + // read user-defined configuration + if (file_exists("$fsScriptDir/.docman.conf")) { + include("$fsScriptDir/.docman.conf"); } - $htusers=fopen($htusers_file,"r"); - while($user = fgetcsv($htusers,255,":")) { - if ($user[0] == $GLOBALS["PHP_AUTH_USER"]) { - $gblUserName=$user[1]; - $gblPw=$user[2]; - if (substr($gblPw,0,5) == "auth_" && file_exists("$gblIncDir/$gblPw.php")) { - require("$gblIncDir/$gblPw.php"); - if ($gblPw($user)) { - $gblPw=md5($PHP_AUTH_USER.$PHP_AUTH_PW); - } else { - $gblPw="error".md5($PHP_AUTH_USER.$PHP_AUTH_PW); - } - } - $gblEmail=$user[3]; - continue ; - } + + // where do we get users from? + if (file_exists("$gblIncDir/$gblUsers.php")) { + include("$gblIncDir/$gblUsers.php"); + } else { + Error("Configuration error","Can't find user handling module at $gblIncDir/$gblUsers.php ! Please fix $fsScriptDir/.docman.conf"); + } + + // if no password, or empty password logout + if ( + isset($PHP_AUTH_USER) && ( + !isset($relogin) || ( + isset($relogin) && $relogin != md5($PHP_AUTH_USER.$PHP_AUTH_PW) + ) + ) && ( + $PHP_AUTH_PW == "" || !isset($PHP_AUTH_PW) + ) && !isset($force_login) + ) { + StartHTML("Logout completed","Your login credentials has been erased") ; + EndHTML() ; + exit ; } - fclose($htusers); // authentication failure if ( md5($PHP_AUTH_USER.$PHP_AUTH_PW) != $gblPw || - isset($relogin) && $gblPw == $relogin ) { - header("WWW-authenticate: basic realm=\"$HTTP_HOST\"") ; + isset($relogin) && $gblPw == $relogin) { + $realm="$HTTP_HOST"; + header("WWW-authenticate: basic realm=\"$realm\"") ; header("HTTP/1.0 401 Unauthorized") ; NoEntry() ; exit ; @@ -1229,9 +1305,6 @@ $relScriptDir = dirname($SCRIPT_NAME) ; // i.e. /docman - $fsScriptDir = dirname($SCRIPT_FILENAME) ; - // i.e. /home/httpd/html/docman - // start on server root // $gblFsRoot = substr($fsScriptDir,0, strlen($fsScriptDir)-strlen($relScriptDir)) ; // or on script root @@ -1250,9 +1323,6 @@ $FN=stripSlashes($FN); - if (file_exists("$fsScriptDir/.docman.conf")) { - include("$fsScriptDir/.docman.conf"); - } switch ($POSTACTION) { case "UPLOAD" : @@ -1431,6 +1501,7 @@ // $A=Co : checkout file $D/$F // $A=Ci : checkin file $D/$F // $A=V : view file (do nothing except log) + // $A=I : include file .$F.php from $gblFsRoot // default : display directory $D switch ($A) { @@ -1457,8 +1528,7 @@ case "Co" : // checkout Lock("$gblFsRoot/$relDir/$F"); - header("Content-Disposition: attachment; filename=$F" ); - Header("Location: $webRoot".urlpath("$relDir/$F")); + Download("$gblFsRoot/$relDir/$F"); exit; case "Ci" : $F=stripSlashes($F); @@ -1474,8 +1544,12 @@ case "V" : // view LogIt("$gblFsRoot/$relDir/$F","viewed"); - header("Content-Disposition: attachment; filename=$F" ); - Header("Location: $webRoot".urlpath("$relDir/$F")); + if ($gblForceDownload) { + Download("$gblFsRoot/$relDir/$F"); + } else { + header("Content-Disposition: attachment; filename=$F" ); + Header("Location: $webRoot".urlpath("$relDir/$F")); + } exit; case "Ch" : StartHTML("(File changes)","All changes chronologicaly..."); @@ -1487,6 +1561,19 @@ DisplayChangeLog(1); EndHTML() ; exit; + case "I" : + $F=stripSlashes($F); + $inc_file="${gblFsRoot}/.${F}.php"; + if (!isset($F) || $F == "" || !file_exists($inc_file)) Error("Fatal error $inc_file"); // can't find file to include + if (!is_readable($inc_file)) + Error("Read access to include file denied",".${F}.php"); + $text = "Your include file should define \$text variable which holds this text and \$title variable which is page title"; + $title = "You should define \$title variable with page title"; + include($inc_file); + StartHTML($title, $text) ; + print "".GifIcon(up)." Back to front page."; + EndHTML() ; + exit ; } // default: display directory $relDir
".GifIcon(up)." Back to front page.