0
*/
define('DEV', 0);
define('VERSION', '1.5.6');
define('CODEMIRROR_PATH', dirname(realpath($_SERVER['SCRIPT_FILENAME'])) . '/_cm');
$pathRegEx = SanitizePath ? '/\.\.|\/\/|\/$|^\/|^$/' : '//';
$path = preg_match($pathRegEx, isset($_GET['path'])) ? '.' : $_GET['path'];
$pathURL = escape($path);
$pathHTML = htmlspecialchars($path);
$pafm = basename($_SERVER['SCRIPT_NAME']);
$redir = $pafm . '?path=' . $pathURL; //$pafm is prefixed for safari (still relavent?)
$codeMirrorModes = array('html', 'md', 'js', 'php', 'css', 'py', 'rb'); //TODO: complete array
$maxUpload = min(return_bytes(ini_get('post_max_size')), return_bytes(ini_get('upload_max_filesize')));
$dirContents = array('folders' => array(), 'files' => array());
$footer = 'pafm v'.VERSION.' by mustafa';
/*
* A warning is issued when the timezone is not set
*/
date_default_timezone_set('America/Chicago');
/*
* resource retrieval
*/
$_R_HEADERS = array('js' => 'text/javascript', 'css' => 'text/css', 'png' => 'image/png', 'gif' => 'image/gif');
$_R = array();
$_R['js'] = 'function $(a){return document.getElementById(a)}var popup,fOp,edit,upload,__AJAX_ACTIVE,__CODEMIRROR,__CODEMIRROR_MODE,__CODEMIRROR_LOADED,__CODEMIRROR_PATH="_cm",__CODEMIRROR_MODES={html:"htmlmixed",js:"javascript",py:"python",rb:"ruby",md:"markdown"};function ajax(b,g,e,c,a,d){__AJAX_ACTIVE=true;if(!a){json2markup(["div",{attributes:{id:"ajaxOverlay"}},"img",{attributes:{src:"?r=images/ajax.gif",id:"ajaxImg",title:"Loading",alt:"Loading"}}],document.body);$("ajaxOverlay").style.height=document.body.offsetHeight+"px";fade($("ajaxOverlay"),0,6,25,"in")}var f=window.ActiveXObject?new ActiveXObject("MSXML2.XMLHTTP.3.0"):new XMLHttpRequest();d&&f.upload.addEventListener("progress",d,false);f.open(g,b,true);f.onreadystatechange=function(){if(f.readyState!=4){return}__AJAX_ACTIVE=false;a||fade($("ajaxOverlay"),6,0,25,"out",function(){document.body.removeChild($("ajaxOverlay"));document.body.removeChild($("ajaxImg"))});if(f.status==200||f.statusText=="OK"){if(f.responseText=="Please refresh the page and login"){alert(f.responseText)}else{c(f.responseText)}}else{alert("AJAX request unsuccessful.\nStatus Code: "+f.status+"\nStatus Text: "+f.statusText+"\nParameters: "+b)}f=null};if(g.toLowerCase()=="post"&&!a){f.setRequestHeader("Content-Type","application/x-www-form-urlencoded;charset=UTF-8")}f.send(e)}function json2markup(c,g){var b=0,a=c.length,d,f,e;for(;b=g}}if(b){e.style[d?"opacity":"filter"]=d?f/10:"alpha(opacity="+f*10+")"}else{clearInterval(a);if(i){i()}}},c)}popup={init:function(e,b){json2markup(["div",{attributes:{id:"popOverlay"},events:{click:popup.close}}],document.body);json2markup(["div",{attributes:{id:"popup"}},["div",{attributes:{id:"head"}},["a",{attributes:{id:"x",href:"#"},events:{click:function(g){popup.close();g.preventDefault?g.preventDefault():g.returnValue=false}},text:"[x]"},"span",{text:e}],"div",{attributes:{id:"body"}}]],document.body);var f=$("popup"),d=$("popOverlay"),a=$("x"),c;json2markup(b,$("body"));if(c=$("moveListUL")){if(c.offsetHeight>(document.body.offsetHeight-150)){c.style.height=document.body.offsetHeight-150+"px"}}f.style.marginTop="-"+parseInt(f.offsetHeight)/2+"px";f.style.marginLeft="-"+parseInt(f.offsetWidth)/2+"px";fade(d,0,6,25,"in");document.onkeydown=function(g){if((g||window.event).keyCode==27){popup.close();return false}}},close:function(){if(__AJAX_ACTIVE){return}if($("popup")){var a=$("popOverlay");fade(a,6,0,25,"out",function(){document.body.removeChild(a)});document.body.removeChild($("popup"))}document.onkeydown=null}};fOp={rename:function(a,b){popup.init("Rename:",["form",{attributes:{action:"?do=rename&subject="+a+"&path="+b,method:"post"}},["input",{attributes:{title:"Rename To",type:"text",name:"rename",value:a}},"input",{attributes:{title:"Ok",type:"submit",value:"\u2713"}}]])},create:function(a,b){popup.init("Create "+a+":",["form",{attributes:{method:"post",action:"?do=create&path="+b}},["input",{attributes:{title:"Filename",type:"text",name:a}},"input",{attributes:{title:"Ok",type:"submit",value:"\u2713"}}]])},chmod:function(c,b,a){popup.init("Chmod "+unescape(b)+":",["form",{attributes:{method:"post",action:"?do=chmod&subject="+b+"&path="+c}},["input",{attributes:{title:"chmod",type:"text",name:"mod",value:a}},"input",{attributes:{title:"Ok",type:"submit",value:"\u2713"}}]])},copy:function(a,b){popup.init("Copy "+unescape(a)+":",["form",{attributes:{method:"post",action:"?do=copy&subject="+a+"&path="+b}},["input",{attributes:{title:"copy to",type:"text",name:"name",value:"copy-"+a}},"input",{attributes:{title:"Ok",type:"submit",value:"\u2713"}}]])},moveList:function(a,b,c){ajax(("?do=moveList&subject="+a+"&path="+b+"&to="+c),"get",null,function(e){if(!$("popup")){popup.init("Move "+unescape(a)+" to:",Function("return "+e)())}else{var g=$("popup"),d=$("x"),f;$("body").innerHTML="";json2markup(Function("return "+e)(),$("body"));if(window.ActiveXObject){d.style.right=d.parentNode.offsetLeft+3}if((f=$("moveListUL")).offsetHeight>(document.body.offsetHeight-150)){f.style.height=document.body.offsetHeight-150+"px"}g.style.marginTop="-"+parseInt(g.offsetHeight)/2+"px";g.style.marginLeft="-"+parseInt(g.offsetWidth)/2+"px"}})},remoteCopy:function(a){popup.init("Remote Copy:",["form",{attributes:{method:"post",action:"?do=remoteCopy&path="+a}},["legend",{text:"Location: "},["input",{attributes:{title:"Remote Copy",type:"text",name:"location"},events:{change:function(b){$("remoteCopyName").value=this.value.substring(this.value.lastIndexOf("/")+1)}}}],"legend",{text:"Name: "},["input",{attributes:{id:"remoteCopyName",title:"Name",type:"text",name:"name"}}],"input",{attributes:{title:"Ok",type:"submit",value:"\u2713"}}]])}};edit={init:function(b,c,d,a){__CODEMIRROR_MODE=d;json2markup(["div",{attributes:{id:"editOverlay"}}],document.body);$("editOverlay").style.height=document.body.offsetHeight+"px";json2markup(["div",{attributes:{id:"ea"}},["textarea",{attributes:{id:"ta",rows:"30",cols:"90"}},"br",{},"input",{attributes:{type:"text",value:unescape(b),readonly:""}},"input",{attributes:{type:"button",value:"CodeMirror"},events:{click:function(){if(a){edit.codeMirrorLoad()}else{if(confirm("Install CodeMirror?")){ajax("?do=installCodeMirror","get",null,function(e){if(e==""){edit.codeMirrorLoad()}else{alert("Install failed. Manually upload CodeMirror and place it in _codemirror, in the same directory as pafm")}})}}this.disabled=true}}},"input",{attributes:{type:"button",value:"Save",id:"save"},events:{click:function(){edit.save(b,c)}}},"input",{attributes:{type:"button",value:"Exit",id:"exit"},events:{click:function(){edit.exit(b,c)}}},"span",{attributes:{id:"editMsg"}}]],document.body);document.onkeydown=function(f){if((f||window.event).keyCode==27){edit.exit(b,c);return false}};ajax("?do=readFile&path="+c+"&subject="+b,"get",null,function(e){$("ta").value=e});location="#header"},codeMirrorLoad:function(){if(!__CODEMIRROR_LOADED){json2markup(["script",{attributes:{src:__CODEMIRROR_PATH+"/cm.js",type:"text/javascript"},events:{load:function(){__CODEMIRROR_LOADED=true;edit.codeMirrorLoad()}}},"link",{attributes:{rel:"stylesheet",href:__CODEMIRROR_PATH+"/cm.css"}},],document.getElementsByTagName("head")[0])}else{var a=__CODEMIRROR_MODES[__CODEMIRROR_MODE]||__CODEMIRROR_MODE;__CODEMIRROR=CodeMirror.fromTextArea($("ta"),{lineNumbers:true});__CODEMIRROR.setOption("mode",a)}},save:function(b,c){__CODEMIRROR&&__CODEMIRROR.save();$("editMsg").innerHTML=null;var a="data="+encodeURIComponent($("ta").value);ajax("?do=saveEdit&subject="+b+"&path="+c,"post",a,function(d){$("editMsg").className=d!="Saved"?"failed":"succeeded";$("editMsg").innerHTML=d});window.__FILESAVED=true},exit:function(a,b){if(window.__FILESAVED){ajax("?do=getfs&path="+b+"&subject="+a,"get",null,function(e){var g=$("dirList").getElementsByTagName("li"),d=unescape(a),f=0,c=g.length;for(;f'.$message;
}
function getFs($file){
if (filesize($file) <= 1024)
return filesize($file).' B';
elseif (filesize($file) <= 1024000)
return round(filesize($file)/1024, 2).' KB';
else
return round(filesize($file)/1024000, 2).' MB';
}
function rrd($dir){
$handle = opendir($dir);
while (($dirItem = readdir($handle)) !== false) {
if($dirItem == '.' || $dirItem == '..')
continue;
$path = $dir.'/'.$dirItem;
is_dir($path) ? rrd($path) : unlink($path);
}
closedir($handle);
return rmdir($dir);
}
function pathCrumbs(){
global $pathHTML, $pathURL;
$crumbs = explode('/', $pathHTML);
$crumbsLink = explode('/', $pathURL);
for ($i = 0; $i < count($crumbs); $i++) {
$slash = $i ? '/' : null;
$pathSplit = $slash . escape($crumbs[$i]);
$crumb = '' . ($i === 0 ? 'root' : $crumbs[$i]) . ' /' . "\n";
}
return $crumb;
}
//authorize functions
function doAuth(){
global $do, $pathURL, $footer;
if ($do == 'login' || $do == 'logout')
return; //TODO: login/logout take place here
if ($do && isset($_SESSION['pwd']) && $_SESSION['pwd'] != PASSWORD)
exit('Please refresh the page and login');
if (isset($_SESSION['pwd']) && $_SESSION['pwd'] != PASSWORD)
exit ('
Log In | pafm
');
}
function doLogin($pwd){
if ($pwd == PASSWORD)
$_SESSION['pwd'] = PASSWORD;
else
return refresh('Password is incorrect');
redirect();
}
function doLogout(){
session_destroy();
redirect();
}
//fOp functions
function doCreate($file, $folder, $path){
if (isNull($file) && isNull($folder))
return refresh('A filename has not been entered');
$invalidChars = strpos(PHP_OS, 'WIN') !== false ? '/\\|\/|:|\*|\?|\"|\<|\>|\|/' : '/\//';
if (preg_match($invalidChars, $file ? $file : $folder))
return refresh('Filename contains invalid characters');
if (!isNull($file) && !file_exists($path.'/'.$file))
fclose(fopen($path.'/'.$file, 'w'));
elseif (!isNull($folder) && !file_exists($path.'/'.$folder))
mkdir($path.'/'.$folder);
else
return refresh(htmlspecialchars($file).htmlspecialchars($folder).' already exists');
redirect();
}
function installCodeMirror(){
mkdir(CODEMIRROR_PATH);
//TODO: checksum
copy('http://cloud.github.com/downloads/mustafa0x/pafm/_codemirror.js', CODEMIRROR_PATH . '/cm.js');
copy('http://cloud.github.com/downloads/mustafa0x/pafm/_codemirror.css', CODEMIRROR_PATH . '/cm.css');
}
function doUpload($path){
if (!$_FILES)
return refresh('$_FILES array can not be read. Check file size limits and the max execution time limit.');
$uploadErrors = array(null, 'The uploaded file exceeds the upload_max_filesize directive in php.ini.', 'The uploaded file exceeds the MAX_FILE_SIZE directive that was specified in the HTML form.', 'The uploaded file was only partially uploaded.', 'No file was uploaded.', 'Missing a temporary folder.', 'Failed to write file to disk.', 'File upload stopped by extension.');
$l = count($_FILES['file']['name']);
for ($i = 0; $i < $l; $i++) { //FIXME: this loop is no longer relavent
if ($_FILES['file']['error'][$i]) {
if ($uploadErrors[$_FILES['file']['error'][$i]])
return refresh($uploadErrors[$_FILES['file']['error'][$i]] . ' Please see File Upload Error Messages');
else
return refresh('Unknown error occurred. Please see File Upload Error Messages');
}
if (!is_file($_FILES['file']['tmp_name'][$i]))
return refresh($_FILES['file']['name'][$i] . ' could not be uploaded. Possible causes could be the post_max_size and memory_limit directives in php.ini.');
if (!is_uploaded_file($_FILES['file']['tmp_name'][$i]))
return refresh(basename($_FILES['file']['name'][$i]) . ' is not a POST-uploaded file');
if (!move_uploaded_file($_FILES['file']['tmp_name'][$i], $path . '/' . basename($_FILES['file']['name'][$i])))
$fail = true;
}
return $fail ? 'One or more files could not be moved.' : $_FILES['file']['name'][0] . ' uploaded';
}
function doChmod($subject, $path, $mod){
if (isNull($mod))
return refresh('chmod field is empty');
chmod($path . '/' . $subject, octdec(strlen($mod) == 3 ? 0 . $mod : $mod));
redirect();
}
function doExtract($subject, $path){
global $subjectHTML;
switch (zipSupport()) {
case 'function':
if (!is_resource($zip = zip_open($path.'/'.$subject)))
return refresh($subjectHTML . ' could not be read for extracting');
while ($zip_entry = zip_read($zip)){
zip_entry_open($zip, $zip_entry);
if (substr(zip_entry_name($zip_entry), -1) == '/') {
$zdir = substr(zip_entry_name($zip_entry), 0, -1);
if (file_exists($path.'/'.$zdir))
return refresh(htmlspecialchars($zdir) . ' exists!');
mkdir($path.'/'.$zdir);
}
else {
$fopen = fopen($path.'/'.zip_entry_name($zip_entry), "w");
//TODO: file-exists check
fwrite($fopen, zip_entry_read($zip_entry, zip_entry_filesize($zip_entry)), zip_entry_filesize($zip_entry));
}
zip_entry_close($zip_entry);
}
zip_close($zip);
break;
case 'class':
$zip = new ZipArchive();
if ($zip->open($path.'/'.$subject) !== true)
return refresh($subjectHTML . ' could not be read for extracting');
$zip->extractTo($path);
$zip->close();
break;
case 'exec':
shell_exec('unzip ' . escapeshellarg($path.'/'.$subject));
}
redirect();
}
function doReadFile($subject, $path){
return file_get_contents($path.'/'.$subject);
}
function doCopy($subject, $path){
if (isNull($subject, $path))
return refresh('Values could not be read');
$name = $_POST['name'];
//TODO: more var checks
if(!copy($path . '/' . $subject, $path.'/'.$name))
return refresh($subject.' could not be copied to '.$name);
redirect();
}
function doRemoteCopy($path){
$location = $_POST['location'];
$name = $_POST['name'];
if (isNull($path, $location, $name))
return refresh('Values could not be read');
if(!copy($location, $path.'/'.$name)) //TODO: more checks of what location is
return refresh($location . ' could not be copied to '. ($path . '/' . $name));
redirect();
}
function doMove($subject, $path){
global $pathHTML, $subjectHTML, $to, $toHTML;
if (isNull($subject, $path, $to))
return refresh('Values could not be read');
if ($path == $to)
return refresh('The source and destination are the same');
if (array_search($subject, explode('/', $to)) == array_search($subject, explode('/', $path . '/' . $subject)))
return refresh($toHTML . ' is a subfolder of ' . $pathHTML);
if (file_exists($to.'/'.$subject))
return refresh($subjectHTML . ' exists in ' . $toHTML);
rename($path . '/' . $subject, $to.'/'.$subject);
redirect();
}
function doRename($subject, $path){
$rename = $_POST['rename'];
if (isNull($subject, $rename))
return refresh('Values could not be read');
if (file_exists($path.'/'.$rename))
return refresh(htmlspecialchars($rename) . ' exists, please choose another name');
rename($path.'/'.$subject, $path.'/'.$rename);
redirect();
}
function doDelete($subject, $path){
global $subjectHTML;
$fullPath = $path .'/'. $subject;
if (isNull($subject, $path))
return refresh('Values could not be read');
if (!file_exists($fullPath))
return refresh($subjectHTML . ' doesn\'t exist');
if (is_file($fullPath))
if (!unlink($fullPath))
return refresh($subjectHTML . ' could not be removed');
if (is_dir($fullPath))
if (!rrd($fullPath))
return refresh($subjectHTML . ' could not be removed');
redirect();
}
function doSaveEdit($subject, $path){
global $subjectHTML;
$data = get_magic_quotes_gpc() ? stripslashes($_POST['data']) : $_POST['data'];
if (!is_file($path .'/'. $subject))
return 'Error: ' . $subjectHTML . ' is not a valid file';
if (isNull($data))
return 'Error: There is nothing to save';
if (!($openf = fopen($path .'/'. $subject, 'w')))
return $subject . ' could not be opened';
fwrite($openf, $data);
fclose($openf);
return 'Saved';
}
function moveList($subject, $path){
global $pathURL, $pathHTML, $subjectURL, $subjectHTML, $to, $toURL, $toHTML;
if (isNull($subject, $path, $to))
return refresh('Values could not be read');
$return = '["div",
{
attributes : {
"id" : "movelist"
}
},
[
"span",
{
attributes : {
"class" : "pathCrumbs"
}
},
[
';
$crumbs = explode('/', $toHTML);
$crumbsLink = explode('/', $toURL);
for ($i = 0; $i < count($crumbs); $i++) {
$slash = $i ? '/' : null;
$pathSplit .= $slash . $crumbsLink[$i];
$return .= ($i ? ',' : null) . '"a",
{
attributes : {
"href" : "#",
"title" : "Go to ' . $crumbs[$i] . '"
},
events : {
click : function(e){
fOp.moveList("'.$subjectURL.'", "'.$pathURL.'", "'.$pathSplit.'");
e.preventDefault ? e.preventDefault() : e.returnValue = false;
}
},
text : "' . ($i ? $crumbs[$i] : 'root') . '",
postText : " / "
}';
}
$return .= '
],
"ul",
{
attributes : {
"id" : "moveListUL"
}
}';
$j = 0;
$handle = opendir($to);
while (($dirItem = readdir($handle)) !== false) {
$fullPath = $to.'/'.$dirItem;
if (!is_dir($fullPath) || $dirItem == '.' || $dirItem == '..')
continue;
$fullPathURL = escape($fullPath);
$dirItemHTML = htmlspecialchars($dirItem);
$return .= ',
[
"li",
{},
[
"a",
{
attributes : {
"href" : "#"
},
events : {
click : function(e){
fOp.moveList("'.$subjectURL.'", "'.$pathURL.'", "'.$fullPathURL.'");
e.preventDefault ? e.preventDefault() : e.returnValue = false;
}
}
},
[
"img",
{
attributes : {
"src" : "'. (DEV ? 'pafm-files/' : '?r=') .'images/odir.png",
"title" : "Open '.$dirItemHTML.'"
}
}
],
"a",
{
attributes : {
"href" : "?do=move&subject='.$subjectURL.'&path='.$pathURL.'&to='.$fullPathURL.'",
"title" : "move '.$subject.' to '.$dirItemHTML.'",
"class" : "dir"
},
text : "'.$dirItemHTML.'"
}
]
]';
$j++;
}
if (!$j)
$return .= ',
"b",
{
text : "No directories found"
},
"br",
{},
"br",
{}';
$return .= ',
"a",
{
attributes : {
"href" : "?do=move&subject='.$subjectURL.'&path='.$pathURL.'&to='.$toURL.'",
"id" : "movehere",
"title" : "move here ('.$toHTML.')"
},
text : "move here"
}]
]';
return $return;
}
function getDirContents($path){
global $dirContents;
$dirHandle = opendir($path);
while (($dirItem = readdir($dirHandle)) !== false) {
if ($dirItem == '.' || $dirItem == '..')
continue;
$fullPath = $path.'/'.$dirItem;
$dirContents[is_file($fullPath) ? 'files' : 'folders'][] = $dirItem;
}
closedir($dirHandle);
}
//list directory contents functions
function getDirs($path){
global $dirContents, $pathURL;
if (!($l = count($dirContents['folders'])))
return;
sort($dirContents['folders']); //TODO: Better sort (below also)
for ($i = 0; $i < $l; $i++){
$dirItem = $dirContents['folders'][$i];
$dirItemURL = escape($dirItem);
$dirItemHTML = htmlspecialchars($dirItem);
$fullPath = $path.'/'.$dirItem;
$mod = getmod($path.'/'.$dirItem);
echo ' ' .
"\n\t" . ''.$dirItemHTML.''.
"\n\t" . '' . date('c', filemtime($fullPath)) . '' .
"\n\t" . '' . $mod . '' .
"\n\t" . '' .
"\n\t" . '' .
"\n\t" . '' .
"\n\t" . '' .
"\n \n";
}
}
function getFiles($path){
global $dirContents, $pathURL, $codeMirrorModes;
$filePath = $path == '.' ? '/' : '/' . $path.'/';
if (!($l = count($dirContents['files'])))
return;
sort($dirContents['files']);
$codeMirrorExists = (int)is_dir(CODEMIRROR_PATH);
for ($i = 0; $i < $l; $i++){
$dirItem = $dirContents['files'][$i];
$dirItemURL = escape($dirItem);
$dirItemHTML = htmlspecialchars($dirItem);
$fullPath = $path.'/'.$dirItem;
$mod = getmod($fullPath);
$ext = getExt($dirItem);
echo ' ' .
"\n\t" . ''.$dirItemHTML.'' .
"\n\t" . '' . getfs($path.'/'.$dirItem) . '' .
"\n\t" . '' . $ext . '' .
"\n\t" . '' . date('c', filemtime($fullPath)) . '' .
"\n\t" . '' . $mod . '' .
((zipSupport() && $ext == 'zip')
? "\n\t" . ''
: null) .
(filesize($fullPath) <= (1048576 * MaxEditableSize) ? (in_array($ext, $codeMirrorModes)
? "\n\t" . ''
: "\n\t" . '') : null) .
"\n\t" . '' .
"\n\t" . '' .
"\n\t" . '' .
"\n\t" . '' .
"\n\t" . ''.
"\n \n";
}
}
?>
<?php echo str_replace('www.', null, $_SERVER['HTTP_HOST']); ?> | pafm
-
name
extension
last modified
mode
size
file operations