Tiny File Manager

Back Back Up Advanced Editor

<?php

$version = "1.8.8";

require("config.php");

ini_set('max_execution_time', $maxExecTime);
ini_set('memory_limit', $maxFileSize);

header("X-Frame-Options: SAMEORIGIN");

error_reporting(0);
saveFtpDetailsCookie();
startSession();

# SET FOLDERS

$templates_dir = "templates";
$languages_dir = "languages";

# INCLUDE LANGUAGE FILE

if ($_SESSION["lang"] == "" || isset($_POST["lang"]))
    setLangFile();

include($languages_dir . "/en_us.php");
include($languages_dir . "/" . $_SESSION["lang"]);

# SET VARS

// Check for AJAX post
    if ($_POST["ftpAction"] != "" || $_GET["ftpAction"] != "")
        $ajaxRequest = 1;
    else
        $ajaxRequest = 0;

# LOAD CONTENT
    // These check vars are set in the "SET VARS" section
    if ($ftpAction == "download" || $ftpAction == "download_zip" || $ftpAction == "iframe_upload" || $ftpAction == "editProcess") 
    {
    
        echo "<script>alert(' INIT1 ')</script>";
    
    } 
    
    else 
    {
        if ($ajaxRequest == 0) 
        {
            echo "<script>alert(' INIT2 ')</script>";
            checkLogOut();
            displayHeader();
        }
    
        // Attempt to login with session or post vars
        attemptLogin();
    
        // Check referer
        if (checkReferer() == 1) 
        {
        
            // Display content when logged in
            if ($_SESSION["loggedin"] == 1) 
            {
            
                echo "<script>alert(' INIT3 ')</script>";

if ($ajaxRequest == 0) 
                {
                    echo "<script>alert(' INIT3 - AJAX 1 ')</script>";
                    displayFormStart();
                   
                   
                }
            
                
            
                // Display folder/file listing
                displayFiles();

if ($ajaxRequest == 0) 
                {
                    echo "<script>alert(' INIT3 - AJAX 2 ')</script>";

loadJsLangVars();
                  
                    
                    displayFormEnd();
                    
                }

}
        
            if ($ajaxRequest == 0) 
            {
                echo "<script>alert(' INIT3 - AJAX 3 ')</script>";
                // Include the footer
                displayFooter();
            }
               
        }
    }

// Close FTP connection
    @ftp_close($conn_id);

/*************************************************************/

# FUNCTIONS

function startSession()
{

global $sessionName;

// Only change session name if session.auto_start is not 1, and session name is valid
    if (!ini_get("session.auto_start") || ini_get("session.auto_start") == "0")
        session_name(preg_match('/^[0-9]*[A-Za-z][A-Za-z0-9]*$/', $sessionName) ? $sessionName : "monstaftp");
    
    @session_start();
    
    $session_keys = array("user_ip", "loggedin",
        "lang", "win_lin", "ip_check", "login_error", "login_fails", "login_lockout",
        "ftp_ssl", "ftp_host", "ftp_user", "ftp_pass", "ftp_port", "ftp_pasv",
        "interface", "dir_current", "dir_history", "clipboard_chmod", "clipboard_files",
        "clipboard_folders", "clipboard_rename", "copy",
        "errors", "upload_limit", "domain", "filesCharSet",
    );
    
    foreach($session_keys as $session_key) {
        if (!isset($_SESSION[$session_key]))
            $_SESSION[$session_key] = ''; // avoid a lot of "undefined index"
    }

}

function displayHeader()
{
?>
<!DOCTYPE html>
<html>
<head>
    <title>Monsta FTP</title>
    <link href="css/style.css?<?php echo date("U"); ?>" rel="stylesheet" type="text/css">
    <link href="css/colors.css?<?php echo date("U"); ?>" rel="stylesheet" type="text/css">
    <meta http-equiv="Content-Type" content="text/html; charset=utf-8">
</head>
<body

<?php
    if ($_POST["login"] == 1) 
    {
        ?>
        onresize="setFileWindowSize('ajaxContentWindow',0,0);"
        <?php
    }
?>>

<?php
}

function displayFooter()
{
?>
</body>
</html>
<?php
}

<div align="center">
    <div id="loginForm" align="left">
        <div id="loginFormTitle">Monsta FTP</div>
            <div id="loginFormContent">

<?php
        if ($_SESSION["login_error"] != "") 
        {
?>

<?php
        }
?>

<?php
        if ($ftpHost == "") 
        {
?>
<?php
            echo $lang_ftp_host;
?>:
<br><input type="text" name="ftp_host" value="<?php
            echo sanitizeStrTrim($ftp_host);
?>" size="30" class="<?php
            if ($posted == 1 && $ftp_host == "")
                echo "bgFormError";
?>">

<?php echo $lang_port; ?>: <input type="text" name="ftp_port" 
value="<?php  echo sanitizeStrTrim($ftp_port); ?>" size="3" class="<?php if ($posted == 1 && $ftp_port == "") echo "bgFormError"; ?>" tabindex="-1"> 
<p>
<?php
        }
?>

<?php
        echo $lang_username;
?>:
<br>

<input type="text" name="ftp_user" value="<?php  echo sanitizeStrTrim($ftp_user); ?>" size="30" 
    class="<?php if ($posted == 1 && $ftp_user == "")
            echo "bgFormError";
    ?>">

<p><?php
        echo $lang_password;
?>:
<br><input type="password" name="ftp_pass" value="<?php
        echo sanitizeStrTrim($ftp_pass);
?>" size="30" class="<?php
        if ($posted == 1 && $ftp_pass == "")
            echo "bgFormError";
?>" autocomplete="off">

<p><input type="submit" value="<?php
        echo $lang_btn_login;
?>" id="btnLogin">

<?php
        if ($ftpHost == "") 
        {
?>
<p><input type="checkbox" name="ftp_pasv" value="1" <?php
            if ($ftp_pasv == 1)
                echo "checked";
?> tabindex="-1"> <?php
            echo $lang_passive_mode;
?>
<?php
            if (function_exists('ftp_ssl_connect')) 
            {
?>
<p><input type="checkbox" name="ftp_ssl" value="1" <?php
            if ($ftp_ssl == 1)
                echo "checked";
?> tabindex="-1"> <?php
            echo $lang_ftp_ssl;
?>
<?php
            }
        }
?>
<?php
        if ($showLockSess == 1) 
        {
?>
<p><input type="checkbox" name="ip_check" value="1" <?php
        if ($ip_check == 1)
            echo "checked";
?> tabindex="-1"> <?php
        echo $lang_ip_check;
?>
<?php
}
?>
<?php
        if ($showAdvOption == 1) 
        {
?>
<p><input type="checkbox" name="interface" value="adv" <?php
        if ($interface == "adv" || $interface == "")
            echo "checked";
?> tabindex="-1"> <?php
        echo $lang_adv_interface;
?>
<?php
} else {
?>
<input type="hidden" name="interface" value="">
<?php
}
?>
<p><input type="checkbox" name="login_save" value="1" <?php
        if ($login_save == 1)
            echo "checked";
?> tabindex="-1"> <?php
        echo $lang_save_login;
?>

<?php
        echo displayLangSelect($_SESSION["lang"]);
?>
        </div>
    </div>
</div>

</form>

<?php
        // Reset error
        $_SESSION["login_error"] = "";
    }
}

function displayFormStart()
{
?>
<form method="post" action="?" enctype="multipart/form-data" name="ftpActionForm" id="ftpActionForm">
<?php
}

function displayFormEnd()
{
?>
</form>
<?php
}

function displayFiles()
{
    
     echo "Zoulou";
?>
    <div class="floatRight">
    <input type="button" value="<?php echo "Logout"; ?>" onClick="actionFunctionLogout();" 
    class="<?php echo adjustButtonWidth("Exit..."); ?> ">
    </div>
    
<?php

f_display();
}

function adjustButtonWidth($str)
{
    
    if (strlen(utf8_decode($str)) > 12)
        return "inputButtonNf";
    else
        return "inputButton";
}

function getPlatform()
{
    global $conn_id;
    
    if ($_SESSION["win_lin"] == "") 
    {
        
        $type = ftp_systype($conn_id);
    
        if (preg_match("/unix/i", $type, $matches))
            $win_lin = "lin";
        if (preg_match("/windows/i", $type, $matches))
            $win_lin = "win";
        
        $_SESSION["win_lin"] = $win_lin;
    }
}

function openFolder()
{
    
}

function checkLogOut()
{
    
    if ($_GET["logout"] == 1)
        logOut();
}

function logOut()
{
    
    $_SESSION["user_ip"]           = "";
    $_SESSION["loggedin"]          = "";
    $_SESSION["win_lin"]           = "";
    $_SESSION["login_error"]       = "";
    $_SESSION["login_fails"]       = "";
    $_SESSION["login_lockout"]     = "";
    $_SESSION["ftp_host"]          = "";
    $_SESSION["ftp_user"]          = "";
    $_SESSION["ftp_pass"]          = "";
    $_SESSION["ftp_port"]          = "";
    $_SESSION["ftp_pasv"]          = "";
    $_SESSION["interface"]         = "";
    $_SESSION["dir_current"]       = "";
    $_SESSION["dir_history"]       = "";
    $_SESSION["clipboard_chmod"]   = "";
    $_SESSION["clipboard_files"]   = "";
    $_SESSION["clipboard_folders"] = "";
    $_SESSION["clipboard_rename"]  = "";
    $_SESSION["copy"]              = "";
    $_SESSION["errors"]            = "";
    $_SESSION["upload_limit"]      = "";
    
    session_destroy();
}

function downloadFile()
{

}

function quotesEscape($str, $type)
{
    
   
}

function displayPopupOpen($resize, $width, $height, $isError, $title)
{
    
    // Set default sizes of exceeded
    if ($resize == 1) {
        
        if ($width < 400)
            $width = 400;
        
        if ($height > 400)
            $height = 400;
    }
    
    $windowWidth  = $_POST["windowWidth"];
    $windowHeight = $_POST["windowHeight"];
    
    // Center window
    if ($windowWidth > 0)
        $left = round(($windowWidth - $width) / 2 - 15); // -15 for H padding
    else
        $left = 250;
    
    if ($windowHeight > 0)
        $top = round(($_POST["windowHeight"] - $height) / 2 - 50);
    else
        $top = 250;
    
    echo "<div id=\"blackOutDiv\">";
    echo "<div id=\"popupFrame\" style=\"left: " . $left . "px; top: " . $top . "px; width: " . $width . "px;\">";
    
    if ($isError == 1)
        $divId = "popupHeaderError";
    else
        $divId = "popupHeaderAction";
    
    echo "<div id=\"" . $divId . "\">";
    echo $title;
    echo "</div>";
    
    if ($isError == 1)
        $divId = "popupBodyError";
    else
        $divId = "popupBodyAction";
    
    echo "<div id=\"" . $divId . "\" style=\"height: " . $height . "px;\">";
}

function displayPopupClose($isError, $vars, $btnCancel)
{
    
    global $lang_btn_ok;
    global $lang_btn_cancel;
    
    echo "</div>";
    
    if ($isError == 1)
        $divId = "popupFooterError";
    else
        $divId = "popupFooterAction";
    
    echo "<div id=\"" . $divId . "\">";
    
    // OK button
    if ($vars != "")
        echo "<input type=\"button\" class=\"popUpBtn\" value=\"" . $lang_btn_ok . "\" onClick=\"processForm('" . $vars . "'); activateActionButtons(0,0);\"> ";
    
    // Cancel button
    if ($btnCancel == 1)
        echo "<input type=\"button\" class=\"popUpBtn\" value=\"" . $lang_btn_cancel . "\" onClick=\"ajaxAbort(); processForm('&ftpAction=openFolder');\"> ";
    
    echo "</div>";
    
    echo "</div>";
    echo "</div>";
}

function loadJsLangVars()
{
    global $languages_dir;
    
    // Include language file again to save listing globals
    //$langFileArray = getFileArray("languages");
    
    include($languages_dir . "/en_us.php");
    
    //if (in_array($_SESSION["lang"], $langFileArray))
    include($languages_dir . "/" . $_SESSION["lang"]);

var upload_limit = '<?php
    echo $_SESSION["upload_limit"];
?>';
</script>
<?php
}

function sessionExpired($message)
{
    
    global $lang_title_ended;
    global $lang_btn_login;
    
    $title = $lang_title_ended;
    
    displayPopupOpen(1, 200, 90, 1, $title);
    
    echo $message;
    
    echo "<p><input type=\"button\" id=\"btnLogin\" value=\"" . $lang_btn_login . "\" onClick=\"document.location.href='?openFolder=" . rawurlencode($_POST["openFolder"]) . "'\">";
    
    displayPopupClose(1, "", 0);
}

function sanitizeStr($str)
{
    
    $str = str_replace("&", "&amp;", $str);
    $str = str_replace('"', '&quot;', $str);
    $str = str_replace("<", "&lt;", $str);
    $str = str_replace(">", "&gt;", $str);
    
    return $str;
}

function sanitizeStrTrim($str)
{
    
    return sanitizeStr(trim($str));
}

function checkFileInclude($file_check,$dir)
{
    $file_found = 0;

if (is_dir($dir)) 
    {
        if ($dh = opendir($dir))
        {
            while (($file = readdir($dh)) !== false && $file_found == 0) 
            {
                if ($file != "." && $file != "..") 
                {
                    if ($file == $file_check)
                        $file_found = 1;
                }
            }
            closedir($dh);
        }
    }
    
    return $file_found;        
}

/***************************************************************/

function getFtpRawList($folder_path)
{

// Because ftp_rawlist() doesn't support folders with spaces in
    // their names, it is neccessary to first change into the directory.
    
    global $conn_id;
    global $lang_folder_cant_access;
    
    $isError = 0;
    
    if (!@ftp_chdir($conn_id, $folder_path)) {
        if (checkFirstCharTilde($folder_path) == 1) {
            if (!@ftp_chdir($conn_id, replaceTilde($folder_path))) {
                recordFileError("folder", replaceTilde($folder_path), $lang_folder_cant_access);
                $isError = 1;
            }
        } else {
            recordFileError("folder", $folder_path, $lang_folder_cant_access);
            $isError = 1;
        }
    }

if ($isError == 0)
        return ftp_rawlist($conn_id, ".");
}

function checkFirstCharTilde($str)
{
    
    if (substr($str, 0, 1) == "~")
        return 1;
    else
        return 0;
}

function replaceTilde($str)
{
    
    $str = str_replace("~", "/", $str);
    $str = str_replace("//", "/", $str);
    
    return $str;
}

function recordFileError($str, $file_name, $error)
{
    
    $_SESSION["errors"][] = str_replace("[" . $str . "]", "<strong>" . sanitizeStr($file_name) . "</strong>", $error);
}

function formatWinFtpTime($time)
{
    
    $h     = substr($time, 0, 2);
    $m     = substr($time, 3, 2);
    $am_pm = substr($time, 5, 2);
    
    if ($am_pm == "PM")
        $h = $h + 12;
    
    $time = $h . ":" . $m;
    
    return $time;
}

// Display Links
        if ($action == "linkAction")
            $html .= "<div class=\"width100pc\"><a href=\"#\" id=\"folder" . $i . "\" onClick=\"openThisFolder('" . rawurlencode($file_path) . "',1)\" onContextMenu=\"\" draggable=\"false\">" . str_replace(" ","&nbsp;",sanitizeStr($file)) . "</a></div>";
        
        // Display files
        if ($action == "fileAction")
            $html .= "<a href=\"?dl=" . rawurlencode($file_path) . "\" id=\"file" . $i . "\" target=\"ajaxIframe\" onContextMenu=\"selectFile(this.id,1); displayContextMenu(event,'" . rawurlencode($file_path) . "',''," . assignWinLinNum() . ")\" draggable=\"true\" onDragStart=\"selectFile(this.id,1); setDragFile('" . rawurlencode($file_path) . "','')\">" . str_replace(" ","&nbsp;",sanitizeStr($file)) . "</a>";
         
        $html .= "</td>";
        $html .= "<td>" . formatFileSize($size) . "</td>";
        $html .= "<td>" . $date . "</td>";
        $html .= "<td>" . $time . "</td>";
        
        if ($_SESSION["interface"] == "adv" && ($_SESSION["win_lin"] == "lin" || $_SESSION["win_lin"] == "mac")) {
            $html .= "<td>" . $user . "</td>";
            $html .= "<td>" . $group . "</td>";
            $html .= "<td>" . $perms . "</td>";
        }
        
        $html .= "</tr>";
        
        $i++;
    }
    
    return $html;
}

function displayAjaxIframe()
{
?>
<iframe name="ajaxIframe" id="ajaxIframe" width="0" height="0" style="display:none;visibility:hidden;border:0"></iframe>
<?php
}

function loadAjax()
{
?>
<script type="text/javascript" src="ajax.js?<?php echo date("U"); ?>" charset="utf-8"></script>
<?php
}

function actionFunctionLogout() 
{
    document.location.href = '?logout=1'
}

</script>