nsinnovations/fusionpbx
2
0
Fork 0
mirror of https://github.com/fusionpbx/fusionpbx.git synced 2026-01-06 11:43:50 +00:00
Code Issues Packages Projects Releases Wiki Activity

Update and rename filenew.php to file_new.php

Browse Source
This commit is contained in:
FusionPBX
2019-08-21 01:29:02 -06:00
committed by GitHub
parent 0ca6d166bb
commit 6255b175b4
1 changed files with 0 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

119
app/edit/file_new.php Normal file
View File

@@ -0,0 +1,119 @@
<?php
/*
FusionPBX
Version: MPL 1.1
The contents of this file are subject to the Mozilla Public License Version
1.1 (the "License"); you may not use this file except in compliance with
the License. You may obtain a copy of the License at
http://www.mozilla.org/MPL/
Software distributed under the License is distributed on an "AS IS" basis,
WITHOUT WARRANTY OF ANY KIND, either express or implied. See the License
for the specific language governing rights and limitations under the
License.
The Original Code is FusionPBX
The Initial Developer of the Original Code is
Mark J Crane <markjcrane@fusionpbx.com>
Portions created by the Initial Developer are Copyright (C) 2008-2019
the Initial Developer. All Rights Reserved.
Contributor(s):
Mark J Crane <markjcrane@fusionpbx.com>
James Rose <james.o.rose@gmail.com>
*/
//disable this feature
exit;
//includes
include "root.php";
require_once "resources/require.php";
require_once "resources/check_auth.php";
//check permissions
if (permission_exists('script_editor_save')) {
//access granted
}
else {
echo "access denied";
exit;
}
//add multi-lingual support
$language = new text;
$text = $language->get();
//handle the directory and file
$folder = $_REQUEST["folder"];
$folder = str_replace ("\\", "/", $folder);
if (substr($folder, -1) != "/") { $folder = $folder.'/'; }
$file = $_REQUEST["file"];
//write the file or show the html form
if (strlen($folder) > 0 && strlen($file) > 0) {
//compare the tokens
$key_name = '/app/edit/file_new';
$hash = hash_hmac('sha256', $key_name, $_SESSION['keys'][$key_name]);
if (!hash_equals($hash, $_POST['token'])) {
echo "access denied";
exit;
}
//create new file
$handle = fopen($folder.$file, 'wb') or die("Error!!");
$content = "<?php\n\n?>";
fwrite($handle, $content);
fclose($handle);
header("Location: file_options.php");
}
else {
//create a token
$key_name = '/app/edit/file_new';
$_SESSION['keys'][$key_name] = bin2hex(random_bytes(32));
$_SESSION['token'] = hash_hmac('sha256', $key_name, $_SESSION['keys'][$key_name]);
//include the header
require_once "header.php";
//show the content
echo "<br>";
echo "<div align='left'>";
echo "<form method='POST' action=''>";
echo "<table>";
echo " <tr>";
echo " <td>Path:</td>";
echo " </tr>";
echo " <tr>";
echo " <td>".$folder.$file."</td>";
echo " </tr>";
echo "</table>";
echo "<br />";
echo "<table>";
echo " <tr>";
echo " <td>".$text['label-file-name']."</td>";
echo " </tr>";
echo " <tr>";
echo " <td><input type='text' name='file' value=''></td>";
echo " </tr>";
echo " <tr>";
echo " <td colspan='1' align='right'>";
echo " <input type='hidden' name='folder' value='$folder'>";
echo " <input type='hidden' name='token' id='token' value='". $_SESSION['token']. "'>";
echo " <input type='button' value='".$text['button-back']."' onclick='history.back()'><input type='submit' value='".$text['button-new-file']."'>";
echo " </td>";
echo " </tr>";
echo "</table>";
echo "</form>";
echo "</div>";
require_once "footer.php";
}
?>