From 7964b5efae56d256c2af43738ba81d97242dc937 Mon Sep 17 00:00:00 2001 From: Tommy Date: Sat, 4 Feb 2012 15:58:07 -0600 Subject: [PATCH] init commit --- .gitignore | 1 + onefilecms.php | 519 ++++++++++++++++++++++++++++++++++++++++++++++++ readme.markdown | 3 + 3 files changed, 523 insertions(+) create mode 100644 .gitignore create mode 100644 onefilecms.php create mode 100644 readme.markdown diff --git a/.gitignore b/.gitignore new file mode 100644 index 0000000..b1dd607 --- /dev/null +++ b/.gitignore @@ -0,0 +1 @@ +onefilecms2.esproj \ No newline at end of file diff --git a/onefilecms.php b/onefilecms.php new file mode 100644 index 0000000..0b6d51d --- /dev/null +++ b/onefilecms.php @@ -0,0 +1,519 @@ +OneFileCMS."; +$config_disabled = "bmp,ico,gif,jpg,png,psd,zip"; +$config_excluded = "onefilecms.php,favicon,.htaccess"; + +$version = "1.1.4"; // ONEFILECMS_BEGIN + +if( phpversion() < '5.0.0' ) { exit("OneFileCMS requires PHP5 to operate. Please contact your host to upgrade your PHP installation."); }; + +function getmicrotime() { list($usec, $sec) = explode(" ", microtime()); return ((float)$usec + (float)$sec); } +$starttime = getmicrotime(); + +session_start(); +if (isset($_POST["onefilecms_username"])) { $_SESSION['onefilecms_username'] = $_POST["onefilecms_username"]; } +if (isset($_POST["onefilecms_password"])) { $_SESSION['onefilecms_password'] = $_POST["onefilecms_password"]; } +if (($_SESSION['onefilecms_username'] == $config_username) and ($_SESSION['onefilecms_password'] == $config_password || md5($_SESSION['onefilecms_password']) == $config_password)) { + $_SESSION['onefilecms_valid'] = "1"; +} else { + $_SESSION['onefilecms_valid'] = "0"; + if ($_GET["p"] !== "login") { header("Location: ".$_SERVER["php_self"]."?p=login"); } +} + +global $pagetitle; $pagetitle = "/"; +if ((isset($_GET["i"])) && ($_GET["i"] !== "")) { $pagetitle = "/".$_GET["i"]."/"; } +global $page; $page = "index"; +if (isset($_GET["p"])) { + // redirect on invalid page attempts + if (!in_array(strtolower($_GET["p"]), array( + "copy","delete","error","deletefolder","edit","folder","index","login","logout","new","other","rename","renamefolder","upload" + ))) { header("Location: /"); exit(); } + $page = $_GET["p"]; +} +if ($_GET["p"] == "other") {$pagetitle = "Other"; } +if ($_GET["p"] == "login") {$pagetitle = "Log In"; } +if ($_GET["p"] == "logout") {$pagetitle = "Log Out"; $_SESSION['onefilecms_valid'] = "0"; session_destroy(); } +if ($_GET["i"] == "") { unset($_GET["i"]); } + +// entitize get params +foreach ($_GET as $name => $value) { + $_GET[$name] = htmlentities($value); +} + +// COPY FILE +if (isset($_GET["c"])) { + $filename = $_GET["c"]; $pagetitle = "Copy “".$filename."”"; $page = "copy"; +} + +if (isset($_POST["copy_filename"]) && $_SESSION['onefilecms_valid'] = "1" && $_POST["sessionid"] == session_id()) { + $old_filename = $_POST["old_filename"]; + $filename = $_POST["copy_filename"]; + copy($old_filename, $filename); + $message = $old_filename." copied successfully to ".$filename."."; +} + +// DELETE FILE +if (isset($_GET["d"])) { + $filename = $_GET["d"]; + $pagetitle = "Delete “".$filename."”"; + $page = "delete"; +} +if (isset($_POST["delete_filename"]) && $_SESSION['onefilecms_valid'] = "1" && $_POST["sessionid"] == session_id()) { + $filename = $_POST["delete_filename"]; + unlink($filename); + $message = $filename." successfully deleted."; +} + +// DELETE FOLDER +if ($_GET["p"] == "deletefolder") { + $pagetitle = "Delete Folder “".$_GET["i"]."”"; +} +if (isset($_POST["delete_foldername"]) && $_SESSION['onefilecms_valid'] = "1" && $_POST["sessionid"] == session_id()) { + $foldername = $_POST["delete_foldername"]; + if (@rmdir($foldername)) { + $message = $foldername." successfully deleted."; + } else { + $message = "That folder is not empty."; + } +} + +// EDIT +if (isset($_POST["filename"]) && $_SESSION['onefilecms_valid'] = "1" && $_POST["sessionid"] == session_id()) { + $filename = $_POST["filename"]; + $content = stripslashes($_POST["content"]); + $fp = @fopen($filename, "w"); + if ($fp) { + fwrite($fp, $content); + fclose($fp); + } + $message = $filename." saved successfully."; +} +if (isset($_GET["f"])) { + $filename = stripslashes($_GET["f"]); + if (file_exists($filename)) { + $page = "edit"; + $pagetitle = "Edit “".$filename."”"; + $fp = @fopen($filename, "r"); + if (filesize($filename) !== 0) { + $loadcontent = fread($fp, filesize($filename)); + $loadcontent = htmlspecialchars($loadcontent); + } + fclose($fp); + } else { + $page = "error"; + unset ($filename); + $message = "File does not exist."; + } +} +// NEW FILE +if ($_GET["p"] == "new") {$pagetitle = "New File"; } +if (isset($_POST["new_filename"]) && $_SESSION['onefilecms_valid'] = "1" && $_POST["sessionid"] == session_id()) { + $filename = $_POST["new_filename"]; + if (file_exists($filename)) { + $message = $filename." not created. A file with that name already exists."; + } else { + $handle = fopen($filename, 'w') or die("can't open file"); + fclose($handle); + $message = $filename." created successfully."; + } +} +// NEW FOLDER +if ($_GET["p"] == "folder") {$pagetitle = "New Folder"; } +if (isset($_POST["new_folder"]) && $_SESSION['onefilecms_valid'] = "1" && $_POST["sessionid"] == session_id()) { + $foldername = $_POST["new_folder"]; + if (!is_dir($foldername)) { + mkdir($foldername); + $message = $foldername." created successfully."; + } else { + $message = "A folder by that name already exists."; + } +} +// RENAME FILE +if (isset($_GET["r"])) { + $filename = $_GET["r"]; + $pagetitle = "Rename “".$filename."”"; + $page = "rename"; +} +if (isset($_POST["rename_filename"]) && $_SESSION['onefilecms_valid'] = "1" && $_POST["sessionid"] == session_id()) { + $old_filename = $_POST["old_filename"]; + $filename = $_POST["rename_filename"]; + rename($old_filename, $filename); + $message = $old_filename." successfully renamed to ".$filename."."; +} +// RENAME FOLDER +if ($_GET["p"] == "renamefolder") {$pagetitle = "Rename Folder “".$_GET["i"]."”"; } +if (isset($_POST["rename_foldername"]) && $_SESSION['onefilecms_valid'] = "1" && $_POST["sessionid"] == session_id()) { + $old_foldername = $_POST["old_foldername"]; + $foldername = $_POST["rename_foldername"]; + if (rename($old_foldername, $foldername)) { + $message = $old_foldername." unsuccessfully renamed to ".$foldername."."; + } else { + $message = "There was an error. Try again and/or contact your admin."; + } +} +// UPLOAD FILE +if ($_GET["p"] == "upload") {$pagetitle = "Upload File"; } +if (isset($_FILES['upload_filename']['name']) && $_SESSION['onefilecms_valid'] = "1" && $_POST["sessionid"] == session_id()) { + $filename = $_FILES['upload_filename']['name']; + $destination = $_POST["upload_destination"]; + if(move_uploaded_file($_FILES['upload_filename']['tmp_name'], + $destination.basename($filename))) { + $message = basename($filename)." uploaded successfully to ".$destination."."; + } else{ + $message = "There was an error. Try again and/or contact your admin."; + } +} + +?> + + + + +<?php echo $config_title; ?> - <?php echo $pagetitle; ?> + + + + + +
+ +
+

" class="">

+ +
+ Visit Site | + ">Index | + ?p=logout">Log Out +
+ +
+ +

+

Copy “”

+

Existing files with the same filename are automatically overwritten... Be careful!

+
"> + +

+ + + +

+

+ + " /> +

+

+
+ +

Delete “”

+

Are you sure?

+
"> + +

+ + + '" /> +

+
+ +

Delete Folder “”

+

Folders have to be empty before they can be deleted.

+
"> + +

+ " /> + + '" /> +

+
+ +

Edit “”

+ ?i=" class="back">Back +
?f="> + + +

+ +

+

+ + +

+ + +

+

+ + + ?r='" /> + ?d='" /> + ?c='" /> +

+
+

File Size: kb - + Last Updated:

+
+
+
+ +

+

+ + ?i=" class="folder">.. / + + ?i=" class="folder"> + +

+
+ +

+ ?p=new&i=" class="new">New File + ?p=folder&i=" class="newfolder">New Folder + ?p=deletefolder&i=" class="deletefolder">Delete Folder + ?p=renamefolder&i=" class="renamefolder">Rename Folder + ?p=upload&i=" class="upload">Upload File + ?p=other" class="other">Other +

+ +

Log In

+
"> +

+

+

+

Hint:

+

+
+ +

Log Out

+

You have successfully been logged out and may close this window.

+ +

New File

+

Existing files with the same name will not be overwritten.

+
"> + +

+ " />

+

+
+ +

New Folder

+

Existing folders with the same name will not be overwritten.

+
"> + +

+ " />

+

+
+ +

Other

+

Check for Updates

+

Future versions of OneFileCMS will have a one-click upgrade process. For now, though, you have to click this link. You are using version .

+

Want some good Karma?

+

Let people know you use OneFileCMS by putting this in your footer:

+ 
This site powered by <a href="http://onefilecms.com/">OneFileCMS</a>.
+

Admin Link

+

Add this to your footer (or something) for lazy/forgetful admins. They'll still have to know the username and password, of course.

+ 
[<a href="">Admin</a>]
+ +

Password Hash

+

By the way, MD5 hash of your currently configured password is: + + +

Rename “”

+

Existing files with the same filename are automatically overwritten... Be + careful!

+

To move a file, preface its name with the folder's name, as in + "foldername/filename.txt." The folder must already exist.

+
"> + +

+

+

+
+ +

Rename Folder “”

+
"> + +

" />" class="textinput" disabled="disabled" />

+

" />

+

+
+ +

Upload

+
" method="post"> + + +

" + class="textinput" />

+

+

+

+
+ + +
+

Rendered in milliseconds.

+
+ +
+ + + + + + + \ No newline at end of file diff --git a/readme.markdown b/readme.markdown new file mode 100644 index 0000000..b4a894c --- /dev/null +++ b/readme.markdown @@ -0,0 +1,3 @@ +# OneFileCMS + +.... \ No newline at end of file