First commit

2025-02-28 08:45:43 +01:00
commit 1f4e772600
1122 changed files with 74621 additions and 0 deletions
--- a/cms/plugins/filebrowser/admin.php
+++ b/cms/plugins/filebrowser/admin.php
@ -0,0 +1,101 @@
+<?php
+
+if (!defined('CMSIMPLE_VERSION') || preg_match('#/filebrowser/admin.php#i',$_SERVER['SCRIPT_NAME'])) 
+{
+    die('no direct access');
+}
+
+/* utf-8 marker: äöü */
+
+if (!$adm || $cf['filebrowser']['external']) {
+    return true;
+}
+
+initvar('filebrowser');
+
+function filebrowserSafeQS($querystring)
+{
+	return(htmlspecialchars(strip_tags($querystring), ENT_QUOTES, 'UTF-8'));
+}
+
+if ($filebrowser) {
+    $plugin = basename(dirname(__FILE__));
+    $plugin = basename(dirname(__FILE__), "/");
+	$o .= '<div class="plugintext">
+<div class="plugineditcaption">
+Filebrowser for CMSimple
+</div>
+<hr />
+<p>' . $tx['message']['plugin_standard1'] . '</p><p>' . $tx['message']['plugin_standard2'] . ' <a href="./?file=config&amp;action=array"><b>' . $tx['filetype']['config'] . '</b></a></p>
+<hr />
+<p>Author: <a href="http://zeichenkombinat.de/" target="_blank">Martin Damken</a></p>
+<p>Adapted for CMSimple 4.0 and higher by <a href="http://www.ge-webdesign.de/" target="_blank">ge-webdesign.de</a></p>
+</div>';
+    return;
+}
+
+if(!($images || $downloads || $userfiles || $media)) {
+	return true;
+}
+
+if(isset($_GET['subdir']) && strstr($_GET['subdir'],'userfiles/images/')) {
+	$f = 'images';
+}
+
+if(isset($_GET['subdir']) && strstr($_GET['subdir'],'userfiles/downloads/')) {
+	$f = 'downloads';
+}
+
+if(isset($_GET['subdir']) && strstr($_GET['subdir'],'userfiles/media/')) {
+	$f = 'media';
+}
+
+if($userfiles && $f != 'images' && $f != 'downloads' && $f != 'media'){$f = 'userfiles';}
+
+$browser = $_SESSION['fb_browser'];
+define('CMSIMPLE_FB_PATH', $pth['folder']['plugins'] . 'filebrowser/');
+$hjs .= '<script type="text/javascript" src="' . CMSIMPLE_FB_PATH . 'js/filebrowser.js"></script>';
+
+$subdir = isset($_GET['subdir']) ? str_replace(array('..', '.'), '', $_GET['subdir']) : '';
+
+if (strpos($subdir, $browser->baseDirectories['userfiles']) !== 0) {
+    $subdir = $browser->baseDirectories[$f];
+}
+
+$browser->baseDirectory = $browser->baseDirectories['userfiles'];
+$browser->currentDirectory = filebrowserSafeQS(rtrim($subdir, '/')) . '/';
+$browser->linkType = $f;
+$browser->setLinkParams('userfiles');
+
+if (isset($_POST['deleteFile']) && isset($_POST['file'])) {
+	csrfProtection();
+    $browser->deleteFile($_POST['file']);
+}
+if (isset($_POST['deleteFolder']) && isset($_POST['folder'])) {
+	csrfProtection();
+    $browser->deleteFolder($_POST['folder']);
+}
+if (isset($_POST['upload'])) {
+	csrfProtection();
+    $browser->uploadFile();
+}
+if (isset($_POST['createFolder'])) {
+	csrfProtection();
+    $browser->createFolder();
+}
+if (isset($_POST['renameFile'])) {
+	csrfProtection();
+    $browser->renameFile();
+}
+
+$browser->readDirectory();
+
+$o .= $browser->render('cmsbrowser');
+
+$f = 'filebrowser';
+$images = $downloads = $userfiles = $media = false;
+/*
+ * EOF filebrowser/admin.php
+ */
+ 
+?>