diff options
Diffstat (limited to 'mod/filestorage.php')
| -rw-r--r-- | mod/filestorage.php | 167 |
1 files changed, 0 insertions, 167 deletions
diff --git a/mod/filestorage.php b/mod/filestorage.php deleted file mode 100644 index 1feffa9ee..000000000 --- a/mod/filestorage.php +++ /dev/null @@ -1,167 +0,0 @@ -<?php -/** - * @file mod/filestorage.php - * - */ - -require_once('include/attach.php'); - -/** - * - * @param object &$a - */ -function filestorage_post(&$a) { - - $channel_id = ((x($_POST, 'uid')) ? intval($_POST['uid']) : 0); - - if((! $channel_id) || (! local_channel()) || ($channel_id != local_channel())) { - notice( t('Permission denied.') . EOL); - return; - } - - $recurse = ((x($_POST, 'recurse')) ? intval($_POST['recurse']) : 0); - $resource = ((x($_POST, 'filehash')) ? notags($_POST['filehash']) : ''); - $notify = ((x($_POST, 'notify')) ? intval($_POST['notify']) : 0); - - if(! $resource) { - notice(t('Item not found.') . EOL); - return; - } - - $channel = App::get_channel(); - - $acl = new Zotlabs\Access\AccessList($channel); - $acl->set_from_array($_REQUEST); - $x = $acl->get(); - - $cloudPath = get_parent_cloudpath($channel_id, $channel['channel_address'], $resource); - - //get the object before permissions change so we can catch eventual former allowed members - $object = get_file_activity_object($channel_id, $resource, $cloudPath); - - attach_change_permissions($channel_id, $resource, $x['allow_cid'], $x['allow_gid'], $x['deny_cid'], $x['deny_gid'], $recurse); - - file_activity($channel_id, $object, $x['allow_cid'], $x['allow_gid'], $x['deny_cid'], $x['deny_gid'], 'post', $notify); - - goaway($cloudPath); -} - -function filestorage_content(&$a) { - - if(argc() > 1) - $which = argv(1); - else { - notice( t('Requested profile is not available.') . EOL ); - App::$error = 404; - return; - } - - $r = q("select * from channel where channel_address = '%s'", - dbesc($which) - ); - if($r) { - $channel = $r[0]; - $owner = intval($r[0]['channel_id']); - } - - $observer = App::get_observer(); - $ob_hash = (($observer) ? $observer['xchan_hash'] : ''); - - $perms = get_all_perms($owner, $ob_hash); - - if(! $perms['view_storage']) { - notice( t('Permission denied.') . EOL); - return; - } - - // Since we have ACL'd files in the wild, but don't have ACL here yet, we - // need to return for anyone other than the owner, despite the perms check for now. - - $is_owner = (((local_channel()) && ($owner == local_channel())) ? true : false); - if(! $is_owner) { - info( t('Permission Denied.') . EOL ); - return; - } - - if(argc() > 3 && argv(3) === 'delete') { - if(! $perms['write_storage']) { - notice( t('Permission denied.') . EOL); - return; - } - - $file = intval(argv(2)); - $r = q("SELECT hash FROM attach WHERE id = %d AND uid = %d LIMIT 1", - dbesc($file), - intval($owner) - ); - if(! $r) { - notice( t('File not found.') . EOL); - goaway(z_root() . '/cloud/' . $which); - } - - $f = $r[0]; - $channel = App::get_channel(); - - $parentpath = get_parent_cloudpath($channel['channel_id'], $channel['channel_address'], $f['hash']); - - attach_delete($owner, $f['hash']); - - goaway($parentpath); - } - - if(argc() > 3 && argv(3) === 'edit') { - require_once('include/acl_selectors.php'); - if(! $perms['write_storage']) { - notice( t('Permission denied.') . EOL); - return; - } - $file = intval(argv(2)); - - $r = q("select id, uid, folder, filename, revision, flags, is_dir, os_storage, hash, allow_cid, allow_gid, deny_cid, deny_gid from attach where id = %d and uid = %d limit 1", - intval($file), - intval($owner) - ); - - $f = $r[0]; - $channel = App::get_channel(); - - $cloudpath = get_cloudpath($f) . (intval($f['is_dir']) ? '?f=&davguest=1' : ''); - $parentpath = get_parent_cloudpath($channel['channel_id'], $channel['channel_address'], $f['hash']); - - $aclselect_e = populate_acl($f, false); - $is_a_dir = (intval($f['is_dir']) ? true : false); - - $lockstate = (($f['allow_cid'] || $f['allow_gid'] || $f['deny_cid'] || $f['deny_gid']) ? 'lock' : 'unlock'); - - // Encode path that is used for link so it's a valid URL - // Keep slashes as slashes, otherwise mod_rewrite doesn't work correctly - $encoded_path = str_replace('%2F', '/', rawurlencode($cloudpath)); - - $o = replace_macros(get_markup_template('attach_edit.tpl'), array( - '$header' => t('Edit file permissions'), - '$file' => $f, - '$cloudpath' => z_root() . '/' . $encoded_path, - '$parentpath' => $parentpath, - '$uid' => $channel['channel_id'], - '$channelnick' => $channel['channel_address'], - '$permissions' => t('Permissions'), - '$aclselect' => $aclselect_e, - '$lockstate' => $lockstate, - '$permset' => t('Set/edit permissions'), - '$recurse' => array('recurse', t('Include all files and sub folders'), 0, '', array(t('No'), t('Yes'))), - '$backlink' => t('Return to file list'), - '$isadir' => $is_a_dir, - '$cpdesc' => t('Copy/paste this code to attach file to a post'), - '$cpldesc' => t('Copy/paste this URL to link file from a web page'), - '$submit' => t('Submit'), - '$attach_btn_title' => t('Share this file'), - '$link_btn_title' => t('Show URL to this file'), - '$notify' => array('notify', t('Notify your contacts about this file'), 0, '', array(t('No'), t('Yes'))) - )); - - echo $o; - killme(); - } - - goaway(z_root() . '/cloud/' . $which); -} |