nsinnovations/fusionpbx
2
0
Fork 0
mirror of https://github.com/fusionpbx/fusionpbx.git synced 2026-01-24 01:18:27 +00:00
Code Issues Packages Projects Releases Wiki Activity

Update and rename folderdelete.php to folder_delete.php

Browse Source
This commit is contained in:
FusionPBX
2019-08-21 01:22:17 -06:00
committed by GitHub
parent 1a88ca61a7
commit 026c3958c3
1 changed files with 4 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

98
app/edit/folder_delete.php Normal file
View File

@@ -0,0 +1,98 @@
<?php
/*
FusionPBX
Version: MPL 1.1
The contents of this file are subject to the Mozilla Public License Version
1.1 (the "License"); you may not use this file except in compliance with
the License. You may obtain a copy of the License at
http://www.mozilla.org/MPL/
Software distributed under the License is distributed on an "AS IS" basis,
WITHOUT WARRANTY OF ANY KIND, either express or implied. See the License
for the specific language governing rights and limitations under the
License.
The Original Code is FusionPBX
The Initial Developer of the Original Code is
Mark J Crane <markjcrane@fusionpbx.com>
Portions created by the Initial Developer are Copyright (C) 2008-2019
the Initial Developer. All Rights Reserved.
Contributor(s):
Mark J Crane <markjcrane@fusionpbx.com>
*/
//disable this feature
exit;
//includes
include "root.php";
require_once "resources/require.php";
require_once "resources/check_auth.php";
//check the permissions
if (permission_exists('script_editor_save')) {
//access granted
}
else {
echo "access denied";
exit;
}
//set the variables
$folder = $_GET["folder"];
$folder = str_replace ("\\", "/", $folder);
//delete the directory
if (strlen($folder) > 0 && isset($_POST['token'])) {
//compare the tokens
$key_name = '/app/edit/folder_delete';
$hash = hash_hmac('sha256', $key_name, $_SESSION['keys'][$key_name]);
if (!hash_equals($hash, $_POST['token'])) {
echo "access denied";
exit;
}
//delete the folder
rmdir($folder); //, 0700
header("Location: file_options.php");
}
else {
//create the token
$key_name = '/app/edit/folder_delete';
$_SESSION['keys'][$key_name] = bin2hex(random_bytes(32));
$_SESSION['token'] = hash_hmac('sha256', $key_name, $_SESSION['keys'][$key_name]);
//display form
require_once "header.php";
echo "<br>";
echo "<div align='left'>";
echo " <form method='POST' action=''>";
echo " <table>";
echo " <tr>";
echo " <td>".$text['label-path']."</td>";
echo " </tr>";
echo " <tr>";
echo " <td>".$folder."</td>";
echo " </tr>";
echo " </table>";
echo " <br />";
echo " <table>";
echo " <tr>";
echo " <td colspan='1' align='right'>";
echo " <input type='hidden' name='folder' value='$folder'>";
echo " <input type='hidden' name='token' id='token' value='". $_SESSION['token']. "'>";
echo " <input type='submit' value='".$text['button-del-dir']."'>";
echo " </td>";
echo " </tr>";
echo " </table>";
echo " </form>";
echo "</div>";
//include the footer
require_once "footer.php";
}
?>