dbxe
/
fusionpbx
2
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Update file_save.php

This commit is contained in:
FusionPBX 2019-08-21 05:06:01 -06:00 committed by GitHub
parent 2ea4eed72c
commit d2fcc4091c
1 changed files with 89 additions and 25 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

114
app/edit/file_save.php
View File

@ -51,34 +51,98 @@
exit; exit;
} }
//run the code if file path exists //get the directory
$file_path = $_POST["filepath"]; if (!isset($_SESSION)) { session_start(); }
if ($file_path != '') { switch ($_SESSION["app"]["edit"]["dir"]) {
try { case 'scripts':
//save file content $edit_directory = $_SESSION['switch']['scripts']['dir'];
$file_path = realpath($file_path); break;
$file_path = str_replace ('//', '/', $file_path); case 'php':
$file_path = str_replace ("\\", "/", $file_path); $edit_directory = $_SERVER["DOCUMENT_ROOT"].'/'.PROJECT_PATH;
if (file_exists($file_path)) { break;
$handle = fopen($file_path, 'wb'); case 'grammer':
if (!$handle) { $edit_directory = $_SESSION['switch']['grammar']['dir'];
throw new Exception('Write Failed - Check File Owner & Permissions'); break;
case 'provision':
switch (PHP_OS) {
case "Linux":
if (file_exists('/etc/fusionpbx/resources/templates/provision')) {
$edit_directory = '/etc/fusionpbx/resources/templates/provision';
} }
fwrite($handle, $_POST["content"]); else {
fclose($handle); $edit_directory = $_SERVER["DOCUMENT_ROOT"].PROJECT_PATH."/resources/templates/provision/";
} }
break;
//set the reload_xml value to true case "FreeBSD":
$_SESSION["reload_xml"] = true; if (file_exists('/usr/local/etc/fusionpbx/resources/templates/provision')) {
$edit_directory = $_SERVER["DOCUMENT_ROOT"].PROJECT_PATH."/resources/templates/provision/";
//alert user of success }
echo "Changes Saved"; else {
} $edit_directory = $_SERVER["DOCUMENT_ROOT"].PROJECT_PATH."/resources/templates/provision/";
catch(Exception $e) { }
//alert error break;
echo $e->getMessage(); case "NetBSD":
$edit_directory = $_SERVER["DOCUMENT_ROOT"].PROJECT_PATH."/resources/templates/provision/";
break;
case "OpenBSD":
$edit_directory = $_SERVER["DOCUMENT_ROOT"].PROJECT_PATH."/resources/templates/provision/";
break;
default:
$edit_directory = $_SERVER["DOCUMENT_ROOT"].PROJECT_PATH."/resources/templates/provision/";
}
break;
case 'xml':
$edit_directory = $_SESSION['switch']['conf']['dir'];
break;
}
if (!isset($edit_directory)) {
foreach ($_SESSION['editor']['path'] as $path) {
if ($_SESSION["app"]["edit"]["dir"] == $path) {
$edit_directory = $path;
break;
}
} }
}
//set the file variable
$file_path = $_POST["filepath"];
//remove attempts to change the directory
$file_path = str_replace('..', '', $file_path);
$file_path = str_replace ("\\", "/", $file_path);
//break the path into an array
$path_array = pathinfo($file_path);
$path_prefix = substr($path_array['dirname'], 0, strlen($edit_directory));
//validate the path
if ($path_prefix == $edit_directory) {
if ($file_path != '') {
try {
//save file content
$file_path = realpath($file_path);
$file_path = str_replace ('//', '/', $file_path);
$file_path = str_replace ("\\", "/", $file_path);
if (file_exists($file_path)) {
$handle = fopen($file_path, 'wb');
if (!$handle) {
throw new Exception('Write Failed - Check File Owner & Permissions');
}
fwrite($handle, $_POST["content"]);
fclose($handle);
}
//set the reload_xml value to true
$_SESSION["reload_xml"] = true;
//alert user of success
echo "Changes Saved";
}
catch(Exception $e) {
//alert error
echo $e->getMessage();
}
}
} }
?> ?>