Online FTP Interface PHP

SUBMITTED BY: Guest

DATE: July 23, 2014, 1:09 p.m.

FORMAT: Text only

SIZE: 19.5 kB

Raw Download

HITS: 1152

Report
  1. <?php
  2. /*
  3. Copyright (C) 2002 Edwin van Wijk, webftp@v-wijk.net
  5. This program is free software; you can redistribute it and/or
  6. modify it under the terms of the GNU General Public License
  7. as published by the Free Software Foundation; either version 2
  8. of the License, or (at your option) any later version.
  10. This program is distributed in the hope that it will be useful,
  11. but WITHOUT ANY WARRANTY; without even the implied warranty of
  12. MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
  13. GNU General Public License for more details.
  15. You should have received a copy of the GNU General Public License
  16. along with this program; if not, write to the Free Software
  17. Foundation, Inc., 59 Temple Place - Suite 330, Boston, MA 02111-1307, USA.
  18. */
  20. $downloadDir = "/tmp/";
  21. $unzipCommand = "sudo -u $user /usr/bin/unzip";
  22. $port=22;
  24. function del_recursive($currentDir,$connection,$file){
  25. //echo "entering $currentDir/$file<BR>";
  26. if ($lista = @ftp_nlist($connection, "$file")){
  27. for ($x=0;$x<count($lista);$x++){
  28. //echo "tryng to delete $lista[$x]<BR>";
  29. if (!@ftp_delete($connection, "$lista[$x]"))
  30. del_recursive($currentDir,$connection,$lista[$x]);
  31. }
  32. @ftp_rmdir($connection, "$file");
  33. }
  34. }
  36. include("parser.inc.php");
  38. session_start();
  40. $HPV = $HTTP_POST_VARS;
  42. // Get the POST, GET and SESSION variables (if register_globals=off (PHP4.2.1+))
  43. // It's a bit of a dirty hack but variables are sometimes GET and sometimes POST variables
  44. $mode=(isset($HPV['mode']))?$HPV['mode']:$HTTP_GET_VARS['mode'];
  45. $action=(isset($HPV['action']))?$HPV['action']:$HTTP_GET_VARS['action'];
  46. $currentDir=(isset($HPV['currentDir']))?$HPV['currentDir']:$HTTP_GET_VARS['currentDir'];
  47. $file=(isset($HPV['file']))?$HPV['file']:$HTTP_GET_VARS['file'];
  48. $file2=(isset($HPV['file2']))?$HPV['file2']:$HTTP_GET_VARS['file2'];
  49. $permissions=(isset($HPV['permissions']))?$HPV['permissions']:$HTTP_GET_VARS['permissions'];
  50. $directory=(isset($HPV['directory']))?$HPV['directory']:$HTTP_GET_VARS['directory']; $MAX_FILE_SIZE=(isset($HPV['MAX_FILE_SIZE']))?$HPV['MAX_FILE_SIZE']:$HTTP_GET_VARS['MAX_FILE_SIZE'];
  51. $logoff=(isset($HPV['logoff']))?$HPV['logoff']:$HTTP_GET_VARS['logoff'];
  53. if(isset($HTTP_SESSION_VARS['server'])) {
  54. $server=$HTTP_SESSION_VARS['server'];
  55. $user=$HTTP_SESSION_VARS['user'];
  56. $password=$HTTP_SESSION_VARS['password'];
  57. $port=$HTTP_SESSION_VARS['port'];
  58. } else {
  59. $server=$HTTP_POST_VARS['server'];
  60. $user=$HTTP_POST_VARS['user'];
  61. $password=$HTTP_POST_VARS['password'];
  62. $port=$HTTP_POST_VARS['port'];
  63. }
  66. if (isset($logoff))
  67. {
  68. session_unregister('server');
  69. session_unregister('user');
  70. session_unregister('password');
  71. session_unregister('port');
  72. unset($server);
  73. unset($user);
  74. unset($password);
  75. unset($port);
  76. session_destroy();
  77. }
  79. if (isset($server))
  80. {
  81. session_register('server', $server);
  82. session_register('user', $user);
  83. session_register('password', $password);
  84. session_register('port', $port);
  86. // $connection = @ftp_connect($server);
  87. $connection = @ftp_connect($server, $port);
  88. $loggedOn = @ftp_login($connection, $user, $password);
  89. $systype = @ftp_systype($connection);
  91. if(!isset($mode))
  92. {
  93. $mode=1; //(FTP_ASCII = 0; FTP_BINARY=1)
  94. }
  95. if ($loggedOn)
  96. {
  97. if (isset($currentDir))
  98. {
  99. ftp_chdir($connection, $currentDir);
  100. }
  101. $currentDir = ftp_pwd($connection);
  102. $msg = "Current directory = $currentDir";
  103. // what to do now ???
  104. if(isset($action)) {
  105. switch ($action) {
  106. case "chmod": // Change permissions
  107. if(@ftp_site($connection, "chmod $permissions $file"))
  108. {
  109. $msg= "File permission changed.";
  110. } else
  111. {
  112. $msg= "Could not change permissions for " . $file;
  113. }
  114. break;
  115. case "cd": // Change directory
  116. //First try : normal directory
  117. if(@ftp_chdir($connection, $currentDir . "/" . $file))
  118. {
  119. $currentDir = @ftp_pwd($connection);
  120. $msg = "Current directory = " . $currentDir;
  121. }
  122. elseif(@ftp_chdir($connection, $file)) // Symbolic link directory
  123. {
  124. $currentDir = @ftp_pwd($connection);
  125. $msg = "Current directory = " . $currentDir;
  126. }
  127. else // link to a file so let's retrieve this...
  128. {
  129. header("Content-disposition: attachment; filename=\"$file\"");
  130. header("Content-type: application/octetstream");
  131. header("Pragma: ");
  132. header("Cache-Control: cache");
  133. header("Expires: 0");
  135. //Determine original filename
  136. $filearray = explode("/",$file);
  137. $file = $filearray[sizeof($filearray)-1];
  138. $msg = $file;
  140. $fp = fopen($downloadDir . $file, "w");
  141. if(!@ftp_fget($connection,$fp,"$file",$mode))
  142. {
  143. fclose($fp);
  144. exit;
  145. }
  146. fclose($fp);
  147. $data = readfile($downloadDir . $file);
  148. $i=0;
  149. while ($data[$i] != "")
  150. {
  151. echo $data[$i];
  152. $i++;
  153. }
  154. unlink($downloadDir . $file);
  155. exit;
  157. }
  158. break;
  159. case "get": // Download file
  160. header("Content-disposition: attachment; filename=\"$file\"");
  161. header("Content-type: application/octetstream");
  162. header("Pragma: ");
  163. header("Cache-Control: cache");
  164. header("Expires: 0");
  166. $fp = fopen($downloadDir . $file, "w");
  167. ftp_fget($connection,$fp,"$file",$mode) OR DIE("Error downloading file");
  168. fclose($fp);
  169. $data = readfile($downloadDir . $file);
  170. $i=0;
  171. while ($data[$i] != "")
  172. {
  173. echo $data[$i];
  174. $i++;
  175. }
  176. unlink($downloadDir . $file);
  177. exit;
  178. break;
  179. case "put": // Upload file
  180. if($file_size > $MAX_FILE_SIZE)
  181. {
  182. $msg = "<BFile size too big!</B> (max. " . $MAX_FILE_SIZE . "bytes)<P>";
  183. }
  184. else
  185. {
  186. if(file_exists($HTTP_POST_FILES['file']['tmp_name']))
  187. {
  188. if ($mode==1)
  189. {
  190. ftp_put($connection, $currentDir . "/" . $HTTP_POST_FILES['file']['name'], $HTTP_POST_FILES['file']['tmp_name'], 1);
  191. }
  192. else
  193. {
  194. ftp_put($connection, $currentDir . "/" . $HTTP_POST_FILES['file']['name'], $HTTP_POST_FILES['file']['tmp_name'], 0);
  195. }
  196. unlink($HTTP_POST_FILES['file']['tmp_name']);
  197. }
  198. else
  199. {
  200. $msg = "File could not be uploaded.";
  201. }
  202. }
  203. break;
  204. case "deldir"; // Delete directory
  205. if(@ftp_rmdir($connection, "$file"))
  206. {
  207. $msg = "$file deleted";
  208. }
  209. else
  210. {
  211. //Verify if has files inside and if so, call recursive del
  212. if ($lista = @ftp_nlist($connection, "$currentDir/$file")){
  213. del_recursive($currentDir,$connection,$file);
  214. $msg = "Directory $currentDir/$file deleted";
  215. }
  216. else $msg = "Could not delete $file";
  217. }
  218. break;
  219. case "delfile"; // Delete file
  220. if(@ftp_delete($connection, "$file"))
  221. {
  222. $msg = "$file deleted";
  223. }
  224. else
  225. {
  226. $msg = "Could not delete $file";
  227. }
  228. break;
  229. case "rename"; // Rename file
  230. if(@ftp_rename($connection, "$file", "$file2"))
  231. {
  232. $msg = "$file renamed to $file2";
  233. }
  234. else
  235. {
  236. $msg = "Could not rename $file to $file2";
  237. }
  238. break;
  239. case "createdir": // Create a new directory
  240. if(@ftp_mkdir($connection, "$file"))
  241. {
  242. $msg = "$file created";
  243. }
  244. else
  245. {
  246. $msg = "Could not create $file";
  247. }
  248. break;
  249. case "unzipfile";
  250. $filens = str_replace(" ","\\ ",$file);
  252. if (exec("$unzipCommand $currentDir/$filens -d $currentDir/"))
  253. {
  254. $msg = "$file unziped";
  255. } else {
  256. $msg = "Could not unzip the file";
  257. }
  258. break;
  259. }
  260. }
  261. ?>
  262. <HTML>
  263. <HEAD>
  264. <LINK REL=StyleSheet HREF="style/cm.css" TITLE=Contemporary TYPE="text/css">
  265. <SCRIPT LANGUAGE="JavaScript" SRC="include/script.js"></SCRIPT>
  266. </HEAD>
  267. <BODY>
  268. <TABLE BORDER=0 CELLPADDING=2 CELLSPACING=0 WIDTH='100%'>
  269. <TR>
  270. <TD CLASS=menu>
  271. <?php if($loggedOn) { ?>
  272. [&nbsp;&nbsp;<A CLASS=menu HREF="<?=$PHP_SELF;?>?logoff=true">Log off</A>&nbsp;&nbsp;
  273. |&nbsp;&nbsp;<A CLASS=menu HREF="javascript:changeMode('0')">ASCII Mode</A>&nbsp;&nbsp;
  274. |&nbsp;&nbsp;<A CLASS=menu HREF="javascript:changeMode('1')">Binary Mode</A>&nbsp;&nbsp;
  275. ]
  276. <?php } else { ?>
  277. [&nbsp;&nbsp;<A CLASS=menu HREF="<?=$PHP_SELF;?>?logoff=true">Retry</A>&nbsp;&nbsp;]
  278. <?php } ?>
  279. </TD>
  280. <TD CLASS=menu ALIGN=RIGHT>
  281. <FORM METHOD=POST NAME="currentMode">
  282. Current MODE :<INPUT TYPE='text' NAME='showmode' VALUE='<?=$mode==1?"FTP_BINARY":"FTP_ASCII";?>' STYLE='border: none; background-color: #cfcfbb; text-align: right; size:200px;' ALIGN=RIGHT></TD>
  283. </FORM>
  284. </TR>
  285. <TR><TD><?=$msg;?></TD><TD ALIGN=RIGHT><?php print ($loggedOn)?"Connected to $server:$port ($systype)":"Not connected";?></TD></TR>
  286. </TABLE>
  288. <FORM NAME="actionform" METHOD=POST ACTION='<?=$PHP_SELF;?>'>
  289. <INPUT TYPE='hidden' NAME='action' VALUE=''>
  290. <INPUT TYPE='hidden' NAME='currentDir' VALUE='<?=$currentDir;?>'>
  291. <INPUT TYPE='hidden' NAME='file' VALUE=''>
  292. <INPUT TYPE='hidden' NAME='file2' VALUE=''>
  293. <INPUT TYPE='hidden' NAME='permissions' VALUE=''>
  294. <INPUT TYPE='hidden' NAME='mode' VALUE='<?=$mode;?>' STYLE='border: none; background-color: #EFEFEF;'>
  295. </FORM>
  296. <HR>
  298. <TABLE CELLPADDING=2 CELLSPACING=0>
  299. <TR>
  300. <!-- Goto directory -->
  301. <FORM NAME='cdDirect' METHOD=POST ACTION='<?=$PHP_SELF;?>'>
  302. <INPUT TYPE='hidden' NAME='action' VALUE='cd'>
  303. <INPUT TYPE='hidden' NAME='currentDir' VALUE='<?=$currentDir;?>'>
  304. <TD VALIGN=TOP>
  305. <INPUT TYPE="text" NAME="file" VALUE="">
  306. </TD>
  307. <TD VALIGN=TOP>
  308. <INPUT TYPE="SUBMIT" VALUE="Go to Directory" STYLE='width=120;'>
  309. </TD>
  310. </FORM>
  311. </TR>
  312. <TR>
  313. <!-- Create directory -->
  314. <FORM METHOD=POST NAME='dirinput' ACTION="<?=$PHP_SELF;?>">
  315. <TD VALIGN=TOP>
  316. <INPUT TYPE="text" NAME="directory" VALUE="">
  317. </TD>
  318. <TD VALIGN=TOP>
  319. <INPUT TYPE="BUTTON" VALUE="Create Directory" OnClick='javascript:createDirectory(dirinput.directory.value)' STYLE='width=120;'>
  320. </TD>
  321. </FORM>
  322. </TR>
  323. <TR>
  324. <FORM NAME='putForm' ENCTYPE="multipart/form-data" METHOD=POST ACTION="<?=$PHP_SELF;?>">
  325. <INPUT TYPE="hidden" NAME="action" VALUE="put">
  326. <INPUT TYPE='hidden' NAME='currentDir' VALUE='<?=$currentDir;?>'>
  327. <INPUT TYPE="hidden" NAME="MAX_FILE_SIZE" VALUE="2000000">
  328. <INPUT TYPE='hidden' NAME='mode' VALUE='<?=$mode;?>'>
  329. <TD VALIGN=TOP>
  330. <INPUT TYPE="file" NAME="file" STYLE="width:250px;">
  331. </TD>
  332. <TD VALIGN=TOP>
  333. <INPUT TYPE="SUBMIT" VALUE="Upload file" STYLE='width=120;'>
  334. </TD>
  335. </FORM>
  336. </TR>
  337. </TABLE>
  338. <HR>
  339. <P>
  340. <?php
  341. $list=Array();
  342. $list=ftp_rawlist($connection, "");
  343. ?>
  344. <TABLE>
  345. <TR>
  346. <TD><IMG SRC="img/parent.gif" HEIGHT=20 WIDTH=20 ALIGN=TOP></TD>
  347. <TD ALIGN=LEFT COLSPAN=7><A HREF='javascript:submitForm("cd","..")'>..</A></TD>
  348. </TR>
  349. <?php
  350. $list = parse_ftp_rawlist($list, $systype);
  351. if (is_array($list))
  352. {
  353. // Directories
  354. foreach($list as $myDir)
  355. {
  356. if ($myDir["is_dir"]==1)
  357. {
  358. $fileAction = "cd";
  359. $fileName = $myDir["name"];
  360. print "<TR>\n";
  361. print "<TD><IMG SRC=img/folder.gif ALIGN=TOP></TD>\n";
  362. print "<TD><A HREF='javascript:submitForm(\"cd\",\"". $fileName . "\")'>". $myDir["name"] . "</A></TD>\n";
  363. print "<TD ALIGN=RIGHT>". $myDir["size"] . "</TD>\n";
  364. print "<TD>". $myDir["date"] . "</TD>\n";
  365. print "<TD>". $myDir["perms"] . "</TD>\n";
  366. print "<TD>". $myDir["user"] . "</TD>\n";
  367. print "<TD>". $myDir["group"] . "</TD>\n";
  368. print "<TD><A HREF='javascript:Confirmation(\"" . $PHP_SELF . "?action=deldir&file=". $myDir["name"] . "&currentDir=". $currentDir . "\")'><IMG SRC=img/delete.gif BORDER=0 ALT=\"Delete\"></A></TD>\n";
  369. print "<TD><A HREF='javascript:renameFile(\"" . $myDir["name"] . "\")'><IMG SRC=img/rename.gif BORDER=0 ALT=\"Rename\"></A></TD>\n";
  370. print "<TD>";
  371. print "<A HREF='javascript:;' OnClick='window.open(\"setpermission.php?file=" . $fileName . "&perms=" . $myDir["perms"] . "\",\"permissions\",\"width=250,height=150,scrollbars=no,menubar=no,status=yes,directories=no,location=no\")'><IMG SRC='img/settings.gif' WIDTH='20' HEIGHT='20' BORDER=0 ALT='Change permissions'></A>";
  372. print "</TD>\n";
  373. print "</TR>\n";
  374. }
  375. }
  377. // Links
  378. foreach($list as $myDir)
  379. {
  380. if ($myDir["is_link"]==1)
  381. {
  382. $fileAction = "cd";
  383. $fileName = $myDir["target"];
  384. print "<TR>\n";
  385. print "<TD><IMG SRC=img/link.gif ALIGN=TOP></TD>\n";
  386. print "<TD><A HREF='javascript:submitForm(\"cd\",\"". $fileName . "\")'>". $myDir["name"] . "</A></TD>\n";
  387. print "<TD ALIGN=RIGHT>". $myDir["size"] . "</TD>\n";
  388. print "<TD>". $myDir["date"] . "</TD>\n";
  389. print "<TD>". $myDir["perms"] . "</TD>\n";
  390. print "<TD>". $myDir["user"] . "</TD>\n";
  391. print "<TD>". $myDir["group"] . "</TD>\n";
  392. print "<TD><A HREF='javascript:Confirmation(\"" . $PHP_SELF . "?action=deldir&file=". $myDir["name"] . "&currentDir=". $currentDir . "\")'><IMG SRC=img/delete.gif BORDER=0 ALT=\"Delete\"></A></TD>\n";
  393. print "<TD><A HREF='javascript:renameFile(\"" . $myDir["name"] . "\")'><IMG SRC=img/rename.gif BORDER=0 ALT=\"Rename\"></A></TD>\n";
  394. print "<TD>";
  395. print "Symbolic link to ". $myDir["target"];
  396. print "</TD>\n";
  397. print "</TR>\n";
  398. }
  399. }
  401. // Files
  402. foreach($list as $myDir)
  403. {
  404. if ($myDir["is_link"]!=1 && $myDir["is_dir"]!=1)
  405. {
  406. $fileAction = "get";
  407. $fileName = $myDir["name"];
  408. print "<TR>\n";
  409. print "<TD><IMG SRC=img/file.gif ALIGN=TOP></TD>\n";
  410. print "<TD><A HREF='javascript:submitForm(\"get\",\"". $fileName . "\")'>". $myDir["name"] . "</A></TD>\n";
  411. print "<TD ALIGN=RIGHT>". $myDir["size"] . "</TD>\n";
  412. print "<TD>". $myDir["date"] . "</TD>\n";
  413. print "<TD>" . $myDir["perms"] . "</TD>\n";
  414. print "<TD>". $myDir["user"] . "</TD>\n";
  415. print "<TD>". $myDir["group"] . "</TD>\n";
  416. print "<TD><A HREF='javascript:Confirmation(\"" . $PHP_SELF . "?action=delfile&file=". $myDir["name"] . "&currentDir=". $currentDir . "\")'><IMG SRC=img/delete.gif BORDER=0 ALT=\"Delete\"></A></TD>\n";
  417. print "<TD><A HREF='javascript:renameFile(\"" . $myDir["name"] . "\")'><IMG SRC=img/rename.gif BORDER=0 ALT=\"Rename\"></A></TD>\n";
  418. print "<TD>";
  419. print "<A HREF='javascript:;' OnClick='window.open(\"setpermission.php?file=" . $fileName . "&perms=" . $myDir["perms"] . "\",\"permissions\",\"width=250,height=150,scrollbars=no,menubar=no,status=yes,directories=no,location=no\")'><IMG SRC='img/settings.gif' WIDTH='20' HEIGHT='20' BORDER=0 ALT='Change permissions'></A>";
  420. print "</TD>\n";
  422. if (strtolower($myDir["extension"]) == "zip")
  423. {
  424. print "<TD><A HREF='javascript:ConfirmationUnzip(\"" . $PHP_SELF . "?action=unzipfile&file=". $myDir["name"] . "&currentDir=". $currentDir . "\")'><IMG SRC=img/zip.gif BORDER=0 ALT=\"Unzip\"></A></TD>\n";
  425. } else {
  426. echo "<TD>&nbsp;</td>";
  427. }
  429. print "</TR>\n";
  430. }
  431. }
  432. }
  433. print " </TABLE>";
  434. }
  435. else
  436. {
  437. if(!isset($msg))
  438. {
  439. $msg = "Could not connect to server $server:$port with user $user<P><A HREF='" . $PHP_SELF . "?logoff=true'>Try again...</A>";
  440. }
  441. ?>
  442. <HTML>
  443. <HEAD>
  444. <LINK REL=StyleSheet HREF="style/cm.css" TITLE=Contemporary TYPE="text/css">
  445. <SCRIPT LANGUAGE="JavaScript" SRC="include/script.js"></SCRIPT>
  446. </HEAD>
  447. <BODY>
  448. <?php
  449. print $msg;
  450. }
  451. }
  452. else // Still need to logon...
  453. {
  454. ?>
  455. <HTML>
  456. <HEAD>
  457. <LINK REL=StyleSheet HREF="style/cm.css" TITLE=Contemporary TYPE="text/css">
  458. <SCRIPT LANGUAGE="JavaScript" SRC="include/script.js"></SCRIPT>
  459. </HEAD>
  460. <BODY>
  461. <TABLE BORDER=0 CELLPADDING=2 CELLSPACING=0 WIDTH='100%'>
  462. <TR>
  463. <TD CLASS=menu>
  464. <B>WebFTP Version 1.4</B>
  465. </TD>
  466. </TR>
  467. </TABLE>
  469. <FORM NAME=logon action='<?=$PHP_SELF;?>' METHOD=POST>
  470. <TABLE>
  471. <TR>
  472. <TD>Server</TD>
  473. <TD><INPUT TYPE=TEXT NAME=server SIZE=18>&nbsp;Port : <INPUT TYPE=TEXT NAME=port SIZE=6 VALUE=21></TD>
  474. </TR>
  475. <TR>
  476. <TD>User</TD>
  477. <TD>
  478. <INPUT TYPE=TEXT NAME=user SIZE=18>
  479. <INPUT TYPE="checkbox" NAME="anonymous" VALUE=1 OnClick="anonymousAccess()"> : Anonymous access
  480. </TD>
  481. </TR>
  482. <TR>
  483. <TD>Password</TD>
  484. <TD><INPUT TYPE=PASSWORD NAME=password SIZE=18></TD>
  485. </TR>
  486. <TR>
  487. <TD COLSPAN=2 ALIGN=CENTER><INPUT TYPE=SUBMIT VALUE="Log on"></TD>
  488. </TR>
  489. </TABLE>
  490. </FORM>
  491. <?php
  492. }
  493. ?>
  494. <P>
  495. <DIV ALIGN=CENTER STYLE='font-family: verdana, arial, sans-serif; font-size:10px'>
  496. <H2>Notice</H2>
  497. WebFTP comes with ABSOLUTELY NO WARRANTY. This is free software, and you are welcome to redistribute it under certain conditions. Read the full GPL license <A HREF="gpl.txt">here</A>
  498. <P>
  499. WebFTP version 1.4 &copy; 2002, <A HREF="http://www.v-wijk.net/modules.php?name=Feedback">Edwin van Wijk</A>, <A HREF="http://www.v-wijk.net">www.v-wijk.net</A>
  500. </DIV>
  501. </BODY>
  502. </HTML>
comments powered by Disqus