119 lines
3.0 KiB
PHP
119 lines
3.0 KiB
PHP
<?php
|
|
/*
|
|
FusionPBX
|
|
Version: MPL 1.1
|
|
|
|
The contents of this file are subject to the Mozilla Public License Version
|
|
1.1 (the "License"); you may not use this file except in compliance with
|
|
the License. You may obtain a copy of the License at
|
|
http://www.mozilla.org/MPL/
|
|
|
|
Software distributed under the License is distributed on an "AS IS" basis,
|
|
WITHOUT WARRANTY OF ANY KIND, either express or implied. See the License
|
|
for the specific language governing rights and limitations under the
|
|
License.
|
|
|
|
The Original Code is FusionPBX
|
|
|
|
The Initial Developer of the Original Code is
|
|
Mark J Crane <markjcrane@fusionpbx.com>
|
|
Portions created by the Initial Developer are Copyright (C) 2008-2019
|
|
the Initial Developer. All Rights Reserved.
|
|
|
|
Contributor(s):
|
|
Mark J Crane <markjcrane@fusionpbx.com>
|
|
James Rose <james.o.rose@gmail.com>
|
|
*/
|
|
|
|
//disable this feature
|
|
exit;
|
|
|
|
//includes
|
|
include "root.php";
|
|
require_once "resources/require.php";
|
|
require_once "resources/check_auth.php";
|
|
|
|
//check permissions
|
|
if (permission_exists('edit_save')) {
|
|
//access granted
|
|
}
|
|
else {
|
|
echo "access denied";
|
|
exit;
|
|
}
|
|
|
|
//add multi-lingual support
|
|
$language = new text;
|
|
$text = $language->get();
|
|
|
|
//preparing the directory
|
|
$folder = $_REQUEST["folder"];
|
|
$folder = str_replace ("\\", "/", $folder);
|
|
$foldername = $_REQUEST["foldername"];
|
|
|
|
//create the directory or show the html form
|
|
if (strlen($folder) > 0 && strlen($foldername) > 0) {
|
|
|
|
//compare the tokens
|
|
$key_name = '/app/edit/folder_new';
|
|
$hash = hash_hmac('sha256', $key_name, $_SESSION['keys'][$key_name]);
|
|
if (!hash_equals($hash, $_POST['token'])) {
|
|
echo "access denied";
|
|
exit;
|
|
}
|
|
|
|
//create new folder
|
|
mkdir($folder.'/'.$foldername); //, 0700
|
|
header("Location: file_options.php");
|
|
}
|
|
else {
|
|
|
|
//create a token
|
|
$key_name = '/app/edit/folder_new';
|
|
$_SESSION['keys'][$key_name] = bin2hex(random_bytes(32));
|
|
$_SESSION['token'] = hash_hmac('sha256', $key_name, $_SESSION['keys'][$key_name]);
|
|
|
|
//show the footer
|
|
require_once "header.php";
|
|
|
|
//show the content
|
|
echo "<br>";
|
|
echo "<div align='left'>";
|
|
echo "<form method='POST' action=''>";
|
|
echo "<table>";
|
|
echo " <tr>";
|
|
echo " <td>".$text['label-path']."</td>";
|
|
echo " </tr>";
|
|
echo " <tr>";
|
|
echo " <td>".$folder."</td>";
|
|
echo " </tr>";
|
|
echo "</table>";
|
|
|
|
echo "<br />";
|
|
|
|
echo "<table>";
|
|
echo " <tr>";
|
|
echo " <td>".$text['label-folder-name']."</td>";
|
|
echo " </tr>";
|
|
|
|
echo " <tr>";
|
|
echo " <td><input type='text' name='foldername' value=''></td>";
|
|
echo " </tr>";
|
|
|
|
echo " <tr>";
|
|
echo " <td colspan='1' align='right'>";
|
|
echo " <input type='hidden' name='folder' value='$folder'>";
|
|
echo " <input type='hidden' name='token' id='token' value='". $_SESSION['token']. "'>";
|
|
echo " <input type='button' value='".$text['button-back']."' onclick='history.back()'><input type='submit' value='".$text['button-new-folder']."'>";
|
|
echo " </td>";
|
|
echo " </tr>";
|
|
echo "</table>";
|
|
echo "</form>";
|
|
echo "</div>";
|
|
|
|
//show the footer
|
|
require_once "footer.php";
|
|
}
|
|
|
|
?>
|