Tiny File Manager

Back Back Up Advanced Editor

<?php
/***************************************************************
*  Copyright notice
*
*  (c) 2003-2004 Tobias Bender (tobias@phpXplorer.org)
*  All rights reserved
*
*  This script is part of the phpXplorer project. The phpXplorer project is
*  free software; you can redistribute it and/or modify
*  it under the terms of the GNU General Public License as published by
*  the Free Software Foundation; either version 2 of the License, or
*  (at your option) any later version.
*
*  The GNU General Public License can be found at
*  http://www.gnu.org/copyleft/gpl.html.
*  A copy is found in the textfile GPL.txt distributed with these scripts.
*
*  This script is distributed in the hope that it will be useful,
*  but WITHOUT ANY WARRANTY; without even the implied warranty of
*  MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
*  GNU General Public License for more details.
*
*  This copyright notice MUST APPEAR in all copies of the script!
***************************************************************/

require(dirname(__FILE__) . "/defaultActionHead.php");

$fileName = getRequestVar("fileName");
$submitAction = getRequestVar("submitAction");
$submitOverwrite = getRequestVar("submitOverwrite");

# check for url manipulation
if(!(strpos($fileName, "..") === FALSE))
	die($PXP_languages[$PXP_language]['accessDenied'] . " (804)");

$extension = $TP_extensions[basename(dirname($HTTP_SERVER_VARS["PHP_SELF"]))][0];

if(strpos($fileName, "." . $extension) === FALSE)
	$fileName = $fileName . "." . $extension;

$pInfo = checkFilePermissions($fileName);
if(!$pInfo["allowOpen"] or !$pInfo["allowEdit"])
	die($PXP_languages[$PXP_language]["accessDenied"] . " (809)");

if($submitAction != ""){

$bCreateFile = false;

$n = strpos($fileName, "." . $extension) === FALSE ? $currentDir . "/" . $fileName . "." . $extension : $currentDir . "/" . $fileName;

if(file_exists($n)){
		if($submitOverwrite == ""){
			$submitOverwrite = "overwrite";
		}else{
			if($submitOverwrite == "overwriteConfirm")
				$bCreateFile = true;
		}
	}else{
		$bCreateFile = true;
	}
	
	if($bCreateFile){
		if(file_exists("./default.txt")){
			copy("./default.txt", $n);
		}else{
			$handle = fopen($n, "w");
			fclose($handle);
		}
	}
}
?>
<html>
<head>
<title>
<?php echo $PXP_languages[$PXP_language]["createFile"] ?>
</title>
<style type="text/css">
<!--

-->
</style>
<link rel="stylesheet" type="text/css" href="<?php echo $PXP_url ?>/styles/<?php echo $PXP_style ?>/main.css"/>
<script language="JavaScript" type="text/javascript">
<!--

function validate(){
	var f = document.frm1
	if(!f.fileName.value != ""){
		alert("<?php echo $PXP_languages[$PXP_language]['pleaseInsertValue'] ?>")
		f.fileName.focus()
		return false
	}
	
	return true
}

function send(a, overwrite){

if(!validate())
		return false
		
	switchButton()

var f = document.frm1
	f.submitAction.value = a
	
	if(overwrite)
		f.submitOverwrite.value = "overwriteConfirm"

f.submit()
}

function switchButton(){
	var f = document.frm1
	f.btnCreate.disabled = !f.btnCreate.disabled
	f.btnCreateAndEdit.disabled = !f.btnCreateAndEdit.disabled
	f.btnCancel.disabled = !f.btnCancel.disabled
}

<?php
echo $PXP_languages[$PXP_language]["createFile"];

if($extension != "")
  echo ' ("' . $extension . '")';
?>

<?php echo $PXP_languages[$PXP_language]["name"] ?>&nbsp;<input type="text" name="fileName" size="30" value="<?php echo $fileName ?>">

</form>
</body>
</html>