0)
{
$dir_number = mysql_result($result, 0); //directory number for the project or pupil
unset ($query);
unset ($result);
// Path to user files relative to the document root.
$user_path .= "/" . $studentpages . "/" . $dir_number;
$_SESSION['user_media_path'] = $studentpages . "/" . $dir_number;
}
}
elseif (($_SESSION['user_type'] == '20') OR ($_SESSION['user_type'] == '22') OR ($_SESSION['user_type'] == '21'))
{
//we have admin users in S@S admin , present the media directory.
$user_path .= "/media";
$_SESSION['user_media_path'] = "media";
}
else
{
exit; //we don't have a session
}
$query = "SELECT name FROM $table_users WHERE id = '$_SESSION[userid]'";
$result = mysql_query($query) or die_script(mysql_error());
$user_name = mysql_result($result, 0);
//load language file
$query = "SELECT config_value FROM $table_configuration WHERE config_key = 'language'";
$result = mysql_query($query) or die_script(mysql_error());
$language = mysql_result($result, 0);
include ("../../../../../languages/$language/$language.php");
if (IsSet ($_GET['opendir']))
{
$user_path = $user_path . $_GET['opendir'] . "/";
$opendir = $_GET['opendir'];
if (strpos($opendir, "../") !== false)
{
die("Hacking attempt");
}
$prev_opendir = dir_name($opendir); //previous opened directory
$_SESSION['opendir'] = $_GET['opendir']; //this session var is used by browser.php
}
else
{
$opendir = ""; //make sure its cleared
}
if (IsSet ($_GET['delete_file']))
{
$delete_file = $_GET['delete_file'];
if (strpos($delete_file, "../") !== false)
{
die("Hacking attempt");
}
$file = $sas_basedir . $user_path . $delete_file;
if (file_exists($file)) //if file exists, delete it.
{
unlink($file);
}
$thumbfile = $sas_basedir . $user_path . 'zz_thumb_' . $delete_file;
if (file_exists($thumbfile)) //if thumb exists, delete it.
{
unlink($thumbfile);
}
}
if (substr($user_path, -2) == "//") //prevent double slash
{
$user_path = substr($user_path, 0, -1);
}
?>
<?PHP echo $sas_lang['insert_picture'] ?>
| " . $sas_lang['username'] . ": " . $user_name . " - " . $sas_lang['directory'] . " " . $user_path . " |
\n";
//define arrays were file and directories are stored
$files = array ();
$dirs = array ();
if ($dh = opendir($sas_basedir . $user_path))
{
while (($filename = readdir($dh)) !== false) //read the directory via file handle
{
if (($filename != ".") && ($filename != "..")) //skip those
{
if (is_dir($sas_basedir . $user_path . "$filename")) //is entry a directory
{
array_push($dirs, $filename);
}
else //entry is a file
{
$lastdot = strrpos($filename, ".");
$ext = (($lastdot !== false) ? (substr($filename, $lastdot +1)) : "");
$hide = false;
for ($j = 0; $j < sizeof($hide_files); $j++)
$hide = (ereg($hide_files[$j], $filename) ? true : $hide);
if ((in_array(strtolower($ext), $allowed_extensions)) AND (!$hide)) //allowed file type and not hidden
{
array_push($files, $filename);
}
}
}
}
closedir($dh);
}
//sort the dirs and files arrays
$array_lowercase = array_map('strtolower', $dirs);
array_multisort($array_lowercase, SORT_ASC, SORT_STRING, $dirs);
$array_lowercase = array_map('strtolower', $files);
array_multisort($array_lowercase, SORT_ASC, SORT_STRING, $files);
//list the directories
$i = 0;
if (($_GET['opendir'] != "/") AND ($_GET['opendir'] != ""))
{
//create a return icon for previous directory
print "
![](\"graphics/previous.png\")
" . $sas_lang['goback'] . " .. | \n";
$i++;
}
foreach ($dirs as $value) //list the directory array
{
if ($_GET['opendir'] != "/")
{
$path = $_GET[opendir] . "/" . $value;
}
else
{
$path = $value;
}
if (substr($path, 0, 1) != "/") //check if first pos is a slash, if not add it.
{
$path = "/" . $path;
}
print "
![](\"graphics/folder.gif\")
" . $value . " | \n";
$i++;
if ($i == 5)
{
print "
";
$i = 0;
}
}
// print empty cells if needed.
for ($k = $i; $k <= 4; $k++)
{
echo "| | ";
}
if ($i < 4)
{
print "
";
}
//list the files
$i = 0;
print "";
foreach ($files as $value) //list the files array
{
$tmp = explode(".", $value); //get the picture extention.
$ext = array_pop($tmp);
$thumb = FALSE;
if ((strtoupper($ext) == "PNG") or (strtoupper($ext) == "GIF") or (strtoupper($ext) == "JPG"))
{
$image_array = makethumb($value);
$image_file = "/" . $user_path . $image_array[0];
$thumb = $image_array[1];
}
elseif ((strtoupper($ext) == "DOC") or (strtoupper($ext) == "TXT"))
{
$image_file = "graphics/document.jpg";
}
elseif (strtoupper($ext) == "XLS")
{
$image_file = "graphics/spreadsheet.jpg";
}
elseif ((strtoupper($ext) == "SWF") or (strtoupper($ext) == "FLA") or (strtoupper($ext) == "MPG") or (strtoupper($ext) == "AVI") or (strtoupper($ext) == "MPEG"))
{
$image_file = "graphics/video.jpg";
}
elseif (strtoupper($ext) == "PDF")
{
$image_file = "graphics/pdf.jpg";
}
elseif (strtoupper($ext) == "MP3")
{
$image_file = "graphics/sound.jpg";
}
elseif ((strtoupper($ext) == "HTML") or (strtoupper($ext) == "HTM"))
{
$image_file = "graphics/html.jpg";
}
elseif (strtoupper($ext) == "ZIP")
{
$image_file = "graphics/tar.jpg";
}
else
{
$image_file = "graphics/binary.jpg";
}
print "";
if ($thumb == TRUE)
{
print "![\"$value\"](\"" "\\"$value\\"")
\n" . $value . "
";
}
else
{
print "
\n" . $value . "
";
}
if (IsSet ($_GET['opendir'])) //if we are in a subdirectory we need to add it to the link
{
$delete_link = "images.php?opendir=" . $_GET['opendir'] . "&delete_file=" . $value;
}
else
{
$delete_link = "images.php?delete_file=" . $value;
}
print "![\""](\"graphics/delete.gif\" "\\"\"") | \n";
$i++;
if ($i == 5)
{
print "
";
$i = 0;
}
}
if ($i > 0)
{
for ($k = $i; $k <= 4; $k++)
{
echo "| | ";
}
}
if ($i < 4)
{
print "
";
}
print "";
print "
";
function MakeThumb($image)
{
#function to create a thumbnail for faster loading.
global $create_thumbs, $user_path, $sas_basedir;
$thumbfile = $sas_basedir . $user_path . "zz_thumb_" . $image;
if (file_exists($thumbfile))
{
// thumbnail exists just return its name, $thumb is TRUE
return array (
"zz_thumb_" . $image,
TRUE
);
}
if ($create_thumbs == TRUE)
{
if (function_exists('imagecreatetruecolor'))
{
// use gdlib to resize images
$size = getimagesize($sas_basedir . $user_path . $image);
$x = $size[0];
$y = $size[1];
if (($x < 150) AND ($y < 150)) //only make thumb when bigger then 150 pixels
{
return array (
$image,
TRUE
);
}
if ($x < $y)
{
$newy = 96;
$newx = $x / ($y / 96);
}
else
{
$newx = 96;
$newy = $y / ($x / 96);
}
$tmp = explode(".", $image); //get the picture extention.
$ext = array_pop($tmp);
if (strtoupper($ext) == "JPG")
{
$src_img = @imagecreatefromjpeg($sas_basedir . $user_path . $image);
$dst_img = @ImageCreateTrueColor($newx, $newy);
@ imagecopyresampled($dst_img, $src_img, 0, 0, 0, 0, $newx, $newy, $x, $y);
@ imagejpeg($dst_img, $thumbfile, "100");
@ imagedestroy($src_img);
@ imagedestroy($dst_img);
if (file_exists($thumbfile))
{
//we have a thumb, $thumb is TRUE
return array (
"zz_thumb_" . $image,
TRUE
);
}
else
{
//we don't have a thumb, $thumb is FALSE
return array (
$image,
FALSE
);
}
}
elseif (strtoupper($ext) == "PNG")
{
$src_img = @imagecreatefrompng($sas_basedir . $user_path . $image);
$dst_img = @ImageCreateTrueColor($newx, $newy);
@ imagecopyresampled($dst_img, $src_img, 0, 0, 0, 0, $newx, $newy, $x, $y);
@ imagepng($dst_img, $thumbfile, "9"); //changed for php 5.x from 100 -> 9
@ imagedestroy($src_img);
@ imagedestroy($dst_img);
if (file_exists($thumbfile))
{
//we have a thumb, $thumb is TRUE
return array (
"zz_thumb_" . $image,
TRUE
);
}
else
{
//we don't have a thumb, $thumb is FALSE
return array (
$image,
FALSE
);
}
}
elseif (strtoupper($ext) == "GIF")
{
if (function_exists('imagecreatefromgif'))
{
$src_img = @imagecreatefromgif($sas_basedir . $user_path . $image);
$dst_img = @ImageCreateTrueColor($newx, $newy);
@ imagecopyresampled($dst_img, $src_img, 0, 0, 0, 0, $newx, $newy, $x, $y);
@ imagegif($dst_img, $thumbfile, "100");
@ imagedestroy($src_img);
@ imagedestroy($dst_img);
if (file_exists($thumbfile))
{
//we have a thumb, $thumb is TRUE
return array (
"zz_thumb_" . $image,
TRUE
);
}
else
{
//we don't have a thumb, $thumb is FALSE
return array (
$image,
FALSE
);
}
}
}
else
{
//we don't have a thumb, $thumb is FALSE
return array (
$image,
FALSE
);
}
}
else
{
//we don't have a thumb, $thumb is FALSE
return array (
$image,
FALSE
);
}
}
else
{
return array (
$image,
FALSE
);
}
}
function dir_name($dir)
{
# strip the last directory to be able to jump back to the previous directory.
$lastSlash = intval(strrpos($dir, '/'));
if ($lastSlash == 0)
{
return "/";
}
else
return dirname($dir);
}
?>