dbxe
/
fusionpbx
2
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Update filedelete.php

This commit is contained in:
FusionPBX 2019-07-08 22:31:06 -06:00 committed by GitHub
parent 039769868c
commit b6be273a8a
1 changed files with 74 additions and 53 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

127
app/edit/filedelete.php
View File

@ -17,73 +17,94 @@
The Initial Developer of the Original Code is The Initial Developer of the Original Code is
Mark J Crane <markjcrane@fusionpbx.com> Mark J Crane <markjcrane@fusionpbx.com>
Portions created by the Initial Developer are Copyright (C) 2008-2012 Portions created by the Initial Developer are Copyright (C) 2008-2019
the Initial Developer. All Rights Reserved. the Initial Developer. All Rights Reserved.
Contributor(s): Contributor(s):
Mark J Crane <markjcrane@fusionpbx.com> Mark J Crane <markjcrane@fusionpbx.com>
James Rose <james.o.rose@gmail.com> James Rose <james.o.rose@gmail.com>
*/ */
include "root.php";
require_once "resources/require.php"; //includes
require_once "resources/check_auth.php"; include "root.php";
if (permission_exists('script_editor_save')) { require_once "resources/require.php";
//access granted require_once "resources/check_auth.php";
}
else { //check permissions
echo "access denied"; if (permission_exists('script_editor_save')) {
exit; //access granted
} }
else {
echo "access denied";
exit;
}
//add multi-lingual support //add multi-lingual support
$language = new text; $language = new text;
$text = $language->get(); $text = $language->get();
$folder = $_GET["folder"]; //set the variabls
$folder = str_replace ("\\", "/", $folder); $folder = $_REQUEST["folder"];
if (substr($folder, -1) != "/") { $folder = $folder.'/'; } $folder = str_replace ("\\", "/", $folder);
$file = $_GET["file"]; $folder = realpath($folder);
$file = $_REQUEST["file"];
if (strlen($folder) > 0 && strlen($file) > 0) { //delete the file or show the html form
unlink($folder.$file); if (strlen($folder) > 0 && strlen($file) > 0 && isset($_POST['token'])) {
header("Location: fileoptions.php"); //compare the tokens
} $key_name = '/app/edit/file_delete';
else { $hash = hash_hmac('sha256', $key_name, $_SESSION['keys'][$key_name]);
//display form if (!hash_equals($hash, $_POST['token'])) {
require_once "header.php"; echo "access denied";
echo "<br>"; exit;
echo "<div align='left'>"; }
echo "<form method='get' action=''>";
echo "<table>";
echo " <tr>";
echo " <td>".$text['label-path']."</td>";
echo " </tr>";
echo " <tr>";
echo " <td>".$folder.$file."</td>";
echo " </tr>";
echo "</table>";
echo "<br />"; //delete the file
unlink($folder.'/'.$file);
echo "<table>"; //redirect the browser
echo " <tr>"; header("Location: fileoptions.php");
echo " <td>".$text['label-file-name']."</td>"; }
echo " </tr>"; else {
//create the token
$key_name = '/app/edit/file_delete';
$_SESSION['keys'][$key_name] = bin2hex(random_bytes(32));
$_SESSION['token'] = hash_hmac('sha256', $key_name, $_SESSION['keys'][$key_name]);
echo " <tr>"; //display form
echo " <td><input type='text' name='file' value=''></td>"; require_once "header.php";
echo " </tr>"; echo "<br>";
echo "<div align='left'>";
echo " <form method='POST' action=''>";
echo " <table>";
echo " <tr>";
echo " <td>".$text['label-path']."</td>";
echo " </tr>";
echo " <tr>";
echo " <td>".$folder."</td>";
echo " </tr>";
echo " </table>";
echo " <br />";
echo " <table>";
echo " <tr>";
echo " <td>".$text['label-file-name']."</td>";
echo " </tr>";
echo " <tr>";
echo " <td><input type='text' name='file' value='".$file."'></td>";
echo " </tr>";
echo " <tr>";
echo " <td colspan='1' align='right'>";
echo " <input type='hidden' name='folder' value='$folder'>";
echo " <input type='hidden' name='token' id='token' value='". $_SESSION['token']. "'>";
echo " <input type='submit' value='".$text['button-del-file']."'>";
echo " </td>";
echo " </tr>";
echo " </table>";
echo " </form>";
echo "</div>";
echo " <tr>"; //include the footer
echo " <td colspan='1' align='right'>"; require_once "footer.php";
echo " <input type='hidden' name='folder' value='$folder'>"; }
echo " <input type='submit' value='".$text['button-new-file']."'>";
echo " </td>";
echo " </tr>";
echo "</table>";
echo "</form>";
echo "</div>";
require_once "footer.php"; ?>
}
?>