nsinnovations/fusionpbx
2
0
Fork 0
mirror of https://github.com/fusionpbx/fusionpbx.git synced 2026-01-06 11:43:50 +00:00
Code Issues Packages Projects Releases Wiki Activity

Update and rename foldernew.php to folder_new.php

Browse Source
This commit is contained in:
FusionPBX
2019-08-21 01:23:42 -06:00
committed by GitHub
parent 92b3aa2380
commit 9b68784c07
1 changed files with 5 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

115
app/edit/folder_new.php Normal file
View File

@@ -0,0 +1,115 @@
<?php
/*
FusionPBX
Version: MPL 1.1
The contents of this file are subject to the Mozilla Public License Version
1.1 (the "License"); you may not use this file except in compliance with
the License. You may obtain a copy of the License at
http://www.mozilla.org/MPL/
Software distributed under the License is distributed on an "AS IS" basis,
WITHOUT WARRANTY OF ANY KIND, either express or implied. See the License
for the specific language governing rights and limitations under the
License.
The Original Code is FusionPBX
The Initial Developer of the Original Code is
Mark J Crane <markjcrane@fusionpbx.com>
Portions created by the Initial Developer are Copyright (C) 2008-2019
the Initial Developer. All Rights Reserved.
Contributor(s):
Mark J Crane <markjcrane@fusionpbx.com>
James Rose <james.o.rose@gmail.com>
*/
//disable this feature
exit;
//includes
include "root.php";
require_once "resources/require.php";
require_once "resources/check_auth.php";
//check permissions
if (permission_exists('script_editor_save')) {
//access granted
}
else {
echo "access denied";
exit;
}
//add multi-lingual support
$language = new text;
$text = $language->get();
//preparing the directory
$folder = $_REQUEST["folder"];
$folder = str_replace ("\\", "/", $folder);
$foldername = $_REQUEST["foldername"];
//create the directory or show the html form
if (strlen($folder) > 0 && strlen($foldername) > 0) {
//compare the tokens
$key_name = '/app/edit/folder_new';
$hash = hash_hmac('sha256', $key_name, $_SESSION['keys'][$key_name]);
if (!hash_equals($hash, $_POST['token'])) {
echo "access denied";
exit;
}
//create new folder
mkdir($folder.'/'.$foldername); //, 0700
header("Location: file_options.php");
}
else {
//create a token
$key_name = '/app/edit/folder_new';
$_SESSION['keys'][$key_name] = bin2hex(random_bytes(32));
$_SESSION['token'] = hash_hmac('sha256', $key_name, $_SESSION['keys'][$key_name]);
//display the html form
require_once "header.php";
echo "<br>";
echo "<div align='left'>";
echo "<form method='POST' action=''>";
echo "<table>";
echo " <tr>";
echo " <td>".$text['label-path']."</td>";
echo " </tr>";
echo " <tr>";
echo " <td>".$folder."</td>";
echo " </tr>";
echo "</table>";
echo "<br />";
echo "<table>";
echo " <tr>";
echo " <td>".$text['label-folder-name']."</td>";
echo " </tr>";
echo " <tr>";
echo " <td><input type='text' name='foldername' value=''></td>";
echo " </tr>";
echo " <tr>";
echo " <td colspan='1' align='right'>";
echo " <input type='hidden' name='folder' value='$folder'>";
echo " <input type='hidden' name='token' id='token' value='". $_SESSION['token']. "'>";
echo " <input type='button' value='".$text['button-back']."' onclick='history.back()'><input type='submit' value='".$text['button-new-folder']."'>";
echo " </td>";
echo " </tr>";
echo "</table>";
echo "</form>";
echo "</div>";
require_once "footer.php";
}
?>