This repository has been archived on 2024-04-08. You can view files and clone it, but cannot push or open issues or pull requests.
khosb/modules/file/file.inc.php

492 lines
12 KiB
PHP
Raw Normal View History

<?php
/**
* AgileBill - Open Billing Software
*
* This body of work is free software; you can redistribute it and/or
* modify it under the terms of the Open AgileBill License
* License as published at http://www.agileco.com/agilebill/license1-4.txt
*
* For questions, help, comments, discussion, etc., please join the
* Agileco community forums at http://forum.agileco.com/
*
* @link http://www.agileco.com/
* @copyright 2004-2008 Agileco, LLC.
* @license http://www.agileco.com/agilebill/license1-4.txt
* @author Tony Landis <tony@agileco.com>
* @package AgileBill
* @version 1.4.93
*/
class file
{
# Open the constructor for this mod
function file()
{
# name of this module:
$this->module = "file";
# location of the construct XML file:
$this->xml_construct = PATH_MODULES . "" . $this->module . "/" . $this->module . "_construct.xml";
# open the construct file for parsing
$C_xml = new CORE_xml;
$construct = $C_xml->xml_to_array($this->xml_construct);
$this->method = $construct["construct"]["method"];
$this->trigger = $construct["construct"]["trigger"];
$this->field = $construct["construct"]["field"];
$this->table = $construct["construct"]["table"];
$this->module = $construct["construct"]["module"];
$this->cache = $construct["construct"]["cache"];
$this->order_by = $construct["construct"]["order_by"];
$this->limit = $construct["construct"]["limit"];
}
##############################
## LIST AUTH FILES ##
##############################
function file_list($VAR)
{
global $smarty;
if(!isset($VAR['id']))
{
global $C_debug;
$smarty->assign('file_display', false);
return false;
}
### Check if user is auth for the selected category:
$db = &DB();
$sql = 'SELECT *
FROM ' . AGILE_DB_PREFIX . 'file WHERE
site_id = ' . $db->qstr(DEFAULT_SITE) . ' AND
file_category_id = ' . $db->qstr($VAR['id']) . ' AND
status = ' . $db->qstr('1') .'
ORDER BY sort_order,date_orig,name';
$result = $db->Execute($sql);
if($result->RecordCount() == 0)
{
$smarty->assign('file_display', false);
return false;
}
global $C_auth;
$ii = 0;
while(!$result->EOF)
{
@$arr = unserialize($result->fields['group_avail']);
$this_show = false;
for($i=0; $i<count($arr); $i++)
{
if($C_auth->auth_group_by_id($arr[$i]))
{
$this_show = true;
$i=count($arr);
}
}
if($this_show)
{
$start = $result->fields['date_start'];
$expire= $result->fields['date_expire'];
### Check that it is not expired
if (( $start == "0" || $start <= time()+2 ) &&
( $expire == "0" || $expire >= time() ) )
{
$arr_smarty[] = Array (
'id' => $result->fields['id'],
'name' => $result->fields['name'],
'description' => $result->fields['description'],
'size' => $result->fields['type'],
'size' => $result->fields['size']
);
$ii++;
}
}
$result->MoveNext();
}
if($ii == "0")
{
$smarty->assign('file_display', false);
return false;
}
else
{
$smarty->assign('file_display', true);
$smarty->assign('file_results', $arr_smarty);
return true;
}
}
##############################
## GET AUTH CATEGORIES ##
##############################
function category_list($VAR)
{
/* check if current session is authorized for any ticket departments..
and return true/false...
*/
global $smarty;
$db = &DB();
$sql = 'SELECT id,name,group_avail FROM ' . AGILE_DB_PREFIX . 'file_category WHERE
site_id = ' . $db->qstr(DEFAULT_SITE) . ' AND
status = ' . $db->qstr('1') .'
ORDER BY sort_order,name';
$result = $db->Execute($sql);
if($result->RecordCount() == 0)
{
$smarty->assign('file_category_display', false);
return false;
}
global $C_auth;
$ii = 0;
while(!$result->EOF)
{
@$arr = unserialize($result->fields['group_avail']);
for($i=0; $i<count($arr); $i++)
{
if($C_auth->auth_group_by_id($arr[$i]))
{
### Add to the array
$ii++;
$arr_smarty[] = Array( 'name' => $result->fields['name'],
'id' => $result->fields['id']);
$i=count($arr);
}
}
$result->MoveNext();
}
if($ii == "0")
{
$smarty->assign('file_category_display', false);
return false;
}
else
{
$smarty->assign('file_category_display', true);
$smarty->assign('file_category_results', $arr_smarty);
return true;
}
}
##############################
## DOWNLOAD ##
##############################
function download($VAR)
{
$db = &DB();
$sql = 'SELECT * FROM ' . AGILE_DB_PREFIX . 'file WHERE
site_id = ' . DEFAULT_SITE . ' AND
id = ' . $db->qstr(@$VAR['id']) . ' AND
status = 1';
$result = $db->Execute($sql);
if($result->RecordCount() == 1)
{
$show = true;
### Validate start date
$s = $result->fields['date_start'];
if($s != '' && $s != 0)
if($s > time())
$show = false;
### Validate expire date
$e = $result->fields['date_expire'];
if($e != '' && $e != 0)
if($e < time())
$show = false;
### Validate user group:
if($show) {
global $C_auth;
@$arr = unserialize($result->fields['group_avail']);
$show = false;
for($i=0; $i<count($arr); $i++) {
if($C_auth->auth_group_by_id($arr[$i])) {
$show = true;
break;
}
}
}
### Get the filetype
if($show)
{
$ft = $result->fields['location_type'];
if($ft == 0)
$file = PATH_FILES . 'file_'.$VAR['id'].'.dat';
elseif ($ft == 1)
$file = $result->fields['location'];
elseif ($ft == 2)
$file = $result->fields['location'];
### Open the file
if (@$file=fopen($file, 'r'))
{
### Display the correct headers:
header ("Content-Type: " . $result->fields['type']);
header ("Content-Size: " . $result->fields['size']);
header ("Content-Disposition: inline; filename=" . $result->fields['name']);
fpassthru($file);
exit;
}
}
}
echo 'Sorry, the file does not exist or you are not authorized or your access has expired!';
}
##############################
## ADD ##
##############################
function add($VAR)
{
global $_FILES, $smarty, $C_debug, $C_translate;
if($VAR['file_location_type'] == '') return false;
$lt = $VAR['file_location_type'];
// UPLOADED FILE FROM LOCAL PC
if($lt == 0) {
### Validate the file upoad:
if(!isset($_FILES['upload_file']) || $_FILES['upload_file']['size'] <= 0)
{
global $C_debug;
$C_debug->alert('You must go back and enter a file for upload!');
return;
}
$VAR['file_size'] = $_FILES['upload_file']['size'];
$VAR['file_type'] = $_FILES['upload_file']['type'];
$VAR['file_name'] = $_FILES['upload_file']['name'];
}
// ENTERED URL TO FILE
elseif ($lt == 1) {
### Validate the remote file can be opened and is greater than 0K
$file = $VAR['url_file'];
if(empty($file) || !$fp = fopen ($file, "r")) {
# error
$C_debug->alert( $C_translate->translate('remote_file_err','file','') );
return;
} else {
$VAR['file_location'] = $file;
$fn = explode("/", $file);
$count = count($fn)-1;
$VAR['file_name'] = $fn[$count];
$headers = stream_get_meta_data($fp);
$headers = $headers['wrapper_data'];
for($i=0;$i<count($headers); $i++) {
if(eregi('^Content-Type:', $headers[$i]))
$VAR['file_type'] = eregi_replace('Content-Type: ', '', $headers[$i]);
elseif(eregi('^Content-Length:', $headers[$i]))
$VAR['file_size'] = eregi_replace('Content-Length: ', '', $headers[$i]);
}
}
}
// ENTERED LOCAL FILE
elseif ($lt == 2)
{
@$file = $VAR['local_file'];
if(is_file($file) && is_readable($file))
{
if(ereg("/", $file))
$fn = explode("/", $file);
else if(ereg("\\", $file))
$fn = explode("\\", $file);
else
$fn[0] = $file;
$count = count($fn)-1;
$VAR['file_name'] = $fn[$count];
$VAR['file_size'] = filesize($file);
$VAR['file_location'] = $file;
include_once(PATH_CORE . 'file_extensions.inc.php');
$ext = new file_extensions;
$VAR['file_type'] = $ext->content_type($file);
}
else
{
$C_debug->alert( $C_translate->translate('local_file_err','file','') );
return;
}
}
else { return false; }
### Create the record
$type = "add";
2009-03-28 05:20:19 +00:00
$this->method["$type"] = explode(",", $this->method["$type"]);
$db = new CORE_database;
$id = $db->add($VAR, $this, $type);
### Copy the uploaded file, or exit if fail:
if($lt == 0) {
if(isset($id) && $id > 0) {
if(!copy($_FILES['upload_file']['tmp_name'], PATH_FILES . 'file_'.$id.'.dat')) {
$C_debug->alert( $C_translate->translate('copy_file_err','file','') );
}
}
unlink($_FILES['upload_file']['tmp_name']);
}
}
##############################
## VIEW ##
##############################
function view($VAR)
{
$type = "view";
2009-03-28 05:20:19 +00:00
$this->method["$type"] = explode(",", $this->method["$type"]);
$db = new CORE_database;
$db->view($VAR, $this, $type);
}
##############################
## UPDATE ##
##############################
function update($VAR)
{
$type = "update";
2009-03-28 05:20:19 +00:00
$this->method["$type"] = explode(",", $this->method["$type"]);
$db = new CORE_database;
$db->update($VAR, $this, $type);
}
##############################
## DELETE ##
##############################
function delete($VAR)
{
$db = &DB();
$id = $this->table . '_id';
# generate the list of ID's
$id_list = '';
$ii=0;
if(isset($VAR["delete_id"]))
{
2009-03-28 05:20:19 +00:00
$id = explode(',',$VAR["delete_id"]);
}
elseif (isset($VAR["id"]))
{
2009-03-28 05:20:19 +00:00
$id = explode(',',$VAR["id"]);
}
for($i=0; $i<count($id); $i++)
{
if($id[$i] != '')
{
if($i == 0)
{
$id_list .= " id = " . $db->qstr($id[$i]) . " ";
$ii++;
}
else
{
$id_list .= " OR id = " . $db->qstr($id[$i]) . " ";
$ii++;
}
}
}
if($ii>0)
{
# generate the full query
$q = "DELETE FROM
".AGILE_DB_PREFIX."$this->table
WHERE
$id_list
AND
site_id = " . DEFAULT_SITE;
$result = $db->Execute($q);
# error reporting
if ($result === false) {
global $C_debug;
$C_debug->error('file.inc.php','delete', $db->ErrorMsg());
} else {
for($i=0; $i<count($id); $i++) {
if($id[$i] != '') {
error_reporting(0);
unlink(PATH_FILES . 'file_'.$id[$i].'.dat');
$error_reporting_eval = 'error_reporting('.ERROR_REPORTING.');';
eval($error_reporting_eval);
}
}
# Alert delete message
global $C_debug, $C_translate;
$C_translate->value["CORE"]["module_name"] = $C_translate->translate('name',$this->module,"");
$message = $C_translate->translate('alert_delete_ids',"CORE","");
$C_debug->alert($message);
}
}
}
##############################
## SEARCH FORM ##
##############################
function search_form($VAR)
{
$type = "search";
2009-03-28 05:20:19 +00:00
$this->method["$type"] = explode(",", $this->method["$type"]);
$db = new CORE_database;
$db->search_form($VAR, $this, $type);
}
##############################
## SEARCH ##
##############################
function search($VAR)
{
$type = "search";
2009-03-28 05:20:19 +00:00
$this->method["$type"] = explode(",", $this->method["$type"]);
$db = new CORE_database;
$db->search($VAR, $this, $type);
}
##############################
## SEARCH SHOW ##
##############################
function search_show($VAR)
{
$type = "search";
2009-03-28 05:20:19 +00:00
$this->method["$type"] = explode(",", $this->method["$type"]);
$db = new CORE_database;
$db->search_show($VAR, $this, $type);
}
}
?>