<?php

$config = include 'config/config.php';

require_once 'include/utils.php';

if ($_SESSION['RF']["verify"] != "RESPONSIVEfilemanager") {
    response(trans('forbidden').AddErrorLocation())->send();
    exit;
}
$languages = include 'lang/languages.php';

if (isset($_SESSION['RF']['language']) && file_exists('lang/' . basename($_SESSION['RF']['language']) . '.php')) {
    if (array_key_exists($_SESSION['RF']['language'], $languages)) {
        include 'lang/' . basename($_SESSION['RF']['language']) . '.php';
    } else {
        response(trans('Lang_Not_Found').AddErrorLocation())->send();
        exit;
    }
} else {
    response(trans('Lang_Not_Found').AddErrorLocation())->send();
    exit;
}


//check $_GET['file']
if (isset($_GET['file']) && !checkRelativePath($_GET['file'])) {
    response(trans('wrong path').AddErrorLocation())->send();
    exit;
}

//check $_POST['file']
if(isset($_POST['path']) && !checkRelativePath($_POST['path'])) {
    response(trans('wrong path').AddErrorLocation())->send();
    exit;
}


$ftp = ftp_con($config);

if (isset($_GET['action'])) {
    switch ($_GET['action']) {
        case 'new_file_form':
            echo trans('Filename') . ': <input type="text" id="create_text_file_name" style="height:30px"> <select id="create_text_file_extension" style="margin:0;width:100px;">';
            foreach ($config['editable_text_file_exts'] as $ext) {
                echo '<option value=".'.$ext.'">.'.$ext.'</option>';
            }
            echo '</select><br><hr><textarea id="textfile_create_area" style="width:100%;height:150px;"></textarea>';
        break;

        case 'view':
            if (isset($_GET['type'])) {
                $_SESSION['RF']["view_type"] = $_GET['type'];
            } else {
                response(trans('view type number missing').AddErrorLocation())->send();
                exit;
            }
            break;

        case 'filter':
            if (isset($_GET['type'])) {
                if (isset($config['remember_text_filter']) && $config['remember_text_filter']) {
                    $_SESSION['RF']["filter"] = $_GET['type'];
                }
            } else {
                response(trans('view type number missing').AddErrorLocation())->send();
                exit;
            }
            break;

        case 'sort':
            if (isset($_GET['sort_by'])) {
                $_SESSION['RF']["sort_by"] = $_GET['sort_by'];
            }

			if (isset($_GET['descending']))
			{
				$_SESSION['RF']["descending"] = $_GET['descending'];
			}
			break;
		case 'save_img':
			$info = pathinfo($_POST['name']);
            $image_data = $_POST['url'];
            $ext = strtolower($info['extension']);

            if (preg_match('/^data:image\/(\w+);base64,/', $image_data, $type)) {
                $image_data = substr($image_data, strpos($image_data, ',') + 1);
                $type = strtolower($type[1]); // jpg, png, gif
                
                // Images get some additional checks
                if (!in_array($type, ['gif', 'jpg', 'jpeg', 'jpe', 'png', 'webp'], TRUE)) 
                {
                    response('File type not allowed')->send();
                    exit;
                }
                
                if (!in_array($ext, ['gif', 'jpg', 'jpeg', 'jpe', 'png', 'webp'], TRUE)) 
                {
                    response('Extension not allowed')->send();
                    exit;
                }                                

                $image_data = base64_decode($image_data);

                if ($image_data === false) {
                    response(trans('TUI_Decode_Failed').AddErrorLocation())->send();
                exit;
                }
            } else {
                response(trans('').AddErrorLocation())->send();
                exit;
            }

            if ($image_data === false) {
                response(trans('').AddErrorLocation())->send();
                exit;
            }

            if (!checkresultingsize(strlen($image_data))) {
                response(sprintf(trans('max_size_reached'), $config['MaxSizeTotal']).AddErrorLocation())->send();
                exit;
            }
            if ($ftp) {
                $temp = tempnam('/tmp', 'RF');
                unlink($temp);
                $temp .=".".substr(strrchr($_POST['url'], '.'), 1);                
                file_put_contents($temp, $image_data);
                if (@getimagesize($temp) === FALSE) {                    
                    unlink($temp);
                    log_message('error', 'remove attacker file '.$temp);
                    exit;
                }

                $ftp->put($config['ftp_base_folder'].$config['upload_dir'] . $_POST['path'] . $_POST['name'], $temp, FTP_BINARY);

                create_img($temp, $temp, 122, 91);
                $ftp->put($config['ftp_base_folder'].$config['ftp_thumbs_dir']. $_POST['path'] . $_POST['name'], $temp, FTP_BINARY);

                unlink($temp);
            } else {
                $pathFileName = $config['current_path'] . $_POST['path'] . $_POST['name'];
                file_put_contents($pathFileName, $image_data);
                if (@getimagesize($pathFileName) === FALSE) {
                    log_message('error', 'remove attacker file '.$pathFileName);
                    unlink($pathFileName);
                    exit;
                }
                create_img($pathFileName, $config['thumbs_base_path'].$_POST['path'].$_POST['name'], 122, 91);
                // TODO something with this function cause its blowing my mind
                new_thumbnails_creation(
                    $config['current_path'].$_POST['path'],
                    $config['current_path'].$_POST['path'].$_POST['name'],
                    $_POST['name'],
                    $config['current_path'],
                    $config
                );
            }
            break;

        case 'extract':
            if (!$config['extract_files']) {
                response(trans('wrong action').AddErrorLocation())->send();
            }
            if ($ftp) {
                $path = $config['ftp_base_url'].$config['upload_dir'] . $_POST['path'];
                $base_folder = $config['ftp_base_url'].$config['upload_dir'] . fix_dirname($_POST['path']) . "/";
            } else {
                $path = $config['current_path'] . $_POST['path'];
                $base_folder = $config['current_path'] . fix_dirname($_POST['path']) . "/";
            }

            $info = pathinfo($path);

            if ($ftp) {
                $tempDir = tempdir();
                $temp = tempnam($tempDir, 'RF');
                unlink($temp);
                $temp .= "." . $info['extension'];
                $handle = fopen($temp, "w");
                fwrite($handle, file_get_contents($path));
                fclose($handle);
                $path = $temp;
                $base_folder = $tempDir . "/";
            }

            $info = pathinfo($path);

            switch ($info['extension']) {
                case "zip":
                    $zip = new ZipArchive;
                    if ($zip->open($path) === true) {
                        //get total size
                        $sizeTotalFinal = 0;
                        for ($i = 0; $i < $zip->numFiles; $i++) {
                            $aStat = $zip->statIndex($i);
                            $sizeTotalFinal += $aStat['size'];
                        }
                        if (!checkresultingsize($sizeTotalFinal)) {
                            response(sprintf(trans('max_size_reached'), $config['MaxSizeTotal']).AddErrorLocation())->send();
                            exit;
                        }

                        //make all the folders and unzip into the folders
                        for ($i = 0; $i < $zip->numFiles; $i++) {
                            $FullFileName = $zip->statIndex($i);

                            if (checkRelativePath($FullFileName['name'])) {
                                if (substr($FullFileName['name'], -1, 1) == "/") {
                                    create_folder($base_folder . $FullFileName['name']);
                                }

                                if (substr($FullFileName['name'], -1, 1) != "/") {
                                    $fileinfo = pathinfo($FullFileName['name']);
                                    if (in_array(strtolower($fileinfo['extension']), $config['ext'])) {
                                        copy('zip://' . $path . '#' . $FullFileName['name'], $base_folder . $FullFileName['name']);
                                    }
                                }
                            }
                        }
                        $zip->close();
                    } else {
                        response(trans('Zip_No_Extract').AddErrorLocation())->send();
                        exit;
                    }

                    break;

                case "gz":
                    // No resulting size pre-control available
                    $p = new PharData($path);
                    $p->decompress(); // creates files.tar
                    break;

                case "tar":
                    // No resulting size pre-control available
                    // unarchive from the tar
                    $phar = new PharData($path);
                    $phar->decompressFiles();
                    $files = [];
                    check_files_extensions_on_phar($phar, $files, '', $config);
                    $phar->extractTo($base_folder, $files, true);
                    break;

                default:
                    response(trans('Zip_Invalid').AddErrorLocation())->send();
                    exit;
            }

            if ($ftp) {
                unlink($path);
                $ftp->putAll($base_folder, "/".$config['ftp_base_folder'] . $config['upload_dir'] . fix_dirname($_POST['path']), FTP_BINARY);
                deleteDir($base_folder);
            }


			break;
		case 'media_preview':
			if(isset($_GET['file'])){
				$_GET['file'] = sanitize($_GET['file']);
			}
			if(isset($_GET['title'])){
				$_GET['title'] = sanitize($_GET['title']);
			}
			if($ftp){
				$preview_file = $config['ftp_base_url'].$config['upload_dir'] . $_GET['file'];
			}else{
				$preview_file = $config['current_path'] . $_GET["file"];
			}
			$info = pathinfo($preview_file);
			ob_start();
			?>
			<div id="jp_container_1" class="jp-video" style="margin:0 auto;">
				<div class="jp-type-single">
				<div id="jquery_jplayer_1" class="jp-jplayer"></div>
				<div class="jp-gui">
					<div class="jp-video-play">
					<a href="javascript:;" class="jp-video-play-icon" tabindex="1">play</a>
					</div>
					<div class="jp-interface">
					<div class="jp-progress">
						<div class="jp-seek-bar">
						<div class="jp-play-bar"></div>
						</div>
					</div>
					<div class="jp-current-time"></div>
					<div class="jp-duration"></div>
					<div class="jp-controls-holder">
						<ul class="jp-controls">
						<li><a href="javascript:;" class="jp-play" tabindex="1">play</a></li>
						<li><a href="javascript:;" class="jp-pause" tabindex="1">pause</a></li>
						<li><a href="javascript:;" class="jp-stop" tabindex="1">stop</a></li>
						<li><a href="javascript:;" class="jp-mute" tabindex="1" title="mute">mute</a></li>
						<li><a href="javascript:;" class="jp-unmute" tabindex="1" title="unmute">unmute</a></li>
						<li><a href="javascript:;" class="jp-volume-max" tabindex="1" title="max volume">max volume</a></li>
						</ul>
						<div class="jp-volume-bar">
						<div class="jp-volume-bar-value"></div>
						</div>
						<ul class="jp-toggles">
						<li><a href="javascript:;" class="jp-full-screen" tabindex="1" title="full screen">full screen</a></li>
						<li><a href="javascript:;" class="jp-restore-screen" tabindex="1" title="restore screen">restore screen</a></li>
						<li><a href="javascript:;" class="jp-repeat" tabindex="1" title="repeat">repeat</a></li>
						<li><a href="javascript:;" class="jp-repeat-off" tabindex="1" title="repeat off">repeat off</a></li>
						</ul>
					</div>
					<div class="jp-title" style="display:none;">
						<ul>
						<li></li>
						</ul>
					</div>
					</div>
				</div>
				<div class="jp-no-solution">
					<span>Update Required</span>
					To play the media you will need to either update your browser to a recent version or update your <a href="https://get.adobe.com/flashplayer/" target="_blank">Flash plugin</a>.
				</div>
				</div>
			</div>
			<?php if (in_array(strtolower($info['extension']), $config['ext_music'])) {
       ?>

            <script type="text/javascript">
                $(document).ready(function () {

                    $("#jquery_jplayer_1").jPlayer({
                        ready: function () {
                            $(this).jPlayer("setMedia", {
                                title: "<?php 
       ?>",
                                mp3: "<?php 
       echo $preview_file;
       ?>",
                                m4a: "<?php 
       echo $preview_file;
       ?>",
                                oga: "<?php 
       echo $preview_file;
       ?>",
                                wav: "<?php 
       echo $preview_file;
       ?>"
                            });
                        },
                        swfPath: "js",
                        solution: "html,flash",
                        supplied: "mp3, m4a, midi, mid, oga,webma, ogg, wav",
                        smoothPlayBar: true,
                        keyEnabled: false
                    });
                });
            </script>

            <?php 
   } elseif (in_array(strtolower($info['extension']), $config['ext_video'])) {
       ?>

            <script type="text/javascript">
                $(document).ready(function () {

                    $("#jquery_jplayer_1").jPlayer({
                        ready: function () {
                            $(this).jPlayer("setMedia", {
                                title: "<?php 
       ?>",
                                m4v: "<?php 
       echo $preview_file;
       ?>",
                                ogv: "<?php 
       echo $preview_file;
       ?>",
                                flv: "<?php 
       echo $preview_file;
       ?>"
                            });
                        },
                        swfPath: "js",
                        solution: "html,flash",
                        supplied: "mp4, m4v, ogv, flv, webmv, webm",
                        smoothPlayBar: true,
                        keyEnabled: false
                    });

                });
            </script>

            <?php 
   }

            $content = ob_get_clean();

            response($content)->send();
            exit;
        case 'copy_cut':
            if ($_POST['sub_action'] != 'copy' && $_POST['sub_action'] != 'cut') {
                response(trans('wrong sub-action').AddErrorLocation())->send();
                exit;
            }

            if (trim($_POST['path']) == '') {
                response(trans('no path').AddErrorLocation())->send();
                exit;
            }

            $msg_sub_action = ($_POST['sub_action'] == 'copy' ? trans('Copy') : trans('Cut'));
            $path = $config['current_path'] . $_POST['path'];

            if (is_dir($path)) {
                // can't copy/cut dirs
                if ($config['copy_cut_dirs'] === false) {
                    response(sprintf(trans('Copy_Cut_Not_Allowed'), $msg_sub_action, trans('Folders')).AddErrorLocation())->send();
                    exit;
                }
                [$sizeFolderToCopy, $fileNum, $foldersCount] = folder_info($path, false);
                // size over limit
                if ($config['copy_cut_max_size'] !== false && is_int($config['copy_cut_max_size']) && ($config['copy_cut_max_size'] * 1024 * 1024) < $sizeFolderToCopy) {
                    response(sprintf(trans('Copy_Cut_Size_Limit'), $msg_sub_action, $config['copy_cut_max_size']).AddErrorLocation())->send();
                    exit;
                }
                // file count over limit
                if ($config['copy_cut_max_count'] !== false && is_int($config['copy_cut_max_count']) && $config['copy_cut_max_count'] < $fileNum) {
                    response(sprintf(trans('Copy_Cut_Count_Limit'), $msg_sub_action, $config['copy_cut_max_count']).AddErrorLocation())->send();
                    exit;
                }
                if (!checkresultingsize($sizeFolderToCopy)) {
                    response(sprintf(trans('max_size_reached'), $config['MaxSizeTotal']).AddErrorLocation())->send();
                    exit;
                }
            } elseif ($config['copy_cut_files'] === false) {
                // can't copy/cut files
                response(sprintf(trans('Copy_Cut_Not_Allowed'), $msg_sub_action, trans('Files')).AddErrorLocation())->send();
                exit;
            }

            $_SESSION['RF']['clipboard']['path'] = $_POST['path'];
            $_SESSION['RF']['clipboard_action'] = $_POST['sub_action'];
            break;
        case 'clear_clipboard':
            $_SESSION['RF']['clipboard'] = null;
            $_SESSION['RF']['clipboard_action'] = null;
            break;
        case 'chmod':
            response(sprintf(trans('File_Permission_Not_Allowed'), (is_dir($path) ? trans('Folders') : trans('Files')), 403))->send();
            exit;
        case 'get_lang':
            if (! file_exists('lang/languages.php')) {
                response(trans('Lang_Not_Found').AddErrorLocation())->send();
                exit;
            }

            $languages = include 'lang/languages.php';
            if (! isset($languages) || ! is_array($languages)) {
                response(trans('Lang_Not_Found').AddErrorLocation())->send();
                exit;
            }

            $curr = $_SESSION['RF']['language'];

            $ret = '<select id="new_lang_select">';
            foreach ($languages as $code => $name) {
                $ret .= '<option value="' . $code . '"' . ($code == $curr ? ' selected' : '') . '>' . $name . '</option>';
            }
            $ret .= '</select>';

            response($ret)->send();
            exit;
        case 'change_lang':
            $choosen_lang = (empty($_POST['choosen_lang']))? "en_EN":$_POST['choosen_lang'];

            if (array_key_exists($choosen_lang, $languages)) {
                if (! file_exists('lang/' . $choosen_lang . '.php')) {
                    response(trans('Lang_Not_Found').AddErrorLocation())->send();
                    exit;
                }
                $_SESSION['RF']['language'] = $choosen_lang;
            }

            break;
        case 'cad_preview':
            if ($ftp) {
                $selected_file = $config['ftp_base_url'].$config['upload_dir'] . $_GET['file'];
            } else {
                $selected_file = $config['current_path'] . $_GET['file'];

                if (! file_exists($selected_file)) {
                    response(trans('File_Not_Found').AddErrorLocation())->send();
                    exit;
                }
            }
            if ($ftp) {
                $url_file = $selected_file;
            } else {
                $url_file = $config['base_url'] . $config['upload_dir'] . str_replace($config['current_path'], '', $_GET["file"]);
            }

            $cad_url = urlencode($url_file);
            $cad_html = "<iframe src=\"//sharecad.org/cadframe/load?url=" . $url_file . "\" class=\"google-iframe\" scrolling=\"no\"></iframe>";
            $ret = $cad_html;
            response($ret)->send();
            break;
        case 'get_file': // preview or edit
            $sub_action = $_GET['sub_action'];
            $preview_mode = $_GET["preview_mode"];

            if ($sub_action != 'preview' && $sub_action != 'edit') {
                response(trans('wrong action').AddErrorLocation())->send();
                exit;
            }

            if ($ftp) {
                $selected_file = ($sub_action == 'preview' ? $config['ftp_base_url'].$config['upload_dir'] . $_GET['file'] : $config['ftp_base_url'].$config['upload_dir'] . $_POST['path']);
            } else {
                $selected_file = ($sub_action == 'preview' ? $config['current_path'] . $_GET['file'] : $config['current_path'] . $_POST['path']);

                if (! file_exists($selected_file)) {
                    response(trans('File_Not_Found').AddErrorLocation())->send();
                    exit;
                }
            }

            $info = pathinfo($selected_file);

            if ($preview_mode == 'text') {
                $is_allowed = ($sub_action == 'preview' ? $config['preview_text_files'] : $config['edit_text_files']);
                $allowed_file_exts = ($sub_action == 'preview' ? $config['previewable_text_file_exts'] : $config['editable_text_file_exts']);
            } elseif ($preview_mode == 'google') {
                $is_allowed = $config['googledoc_enabled'];
                $allowed_file_exts = $config['googledoc_file_exts'];
            }

            if (! isset($allowed_file_exts) || ! is_array($allowed_file_exts)) {
                $allowed_file_exts = [];
            }

            if (!isset($info['extension'])) {
                $info['extension']='';
            }
            if (! in_array($info['extension'], $allowed_file_exts)
                || ! isset($is_allowed)
                || $is_allowed === false
                || (!$ftp && ! is_readable($selected_file))
            ) {
                response(sprintf(trans('File_Open_Edit_Not_Allowed'), ($sub_action == 'preview' ? strtolower(trans('Open')) : strtolower(trans('Edit')))).AddErrorLocation())->send();
                exit;
            }
            if ($sub_action == 'preview') {
                if ($preview_mode == 'text') {
                    // get and sanities
                    $data = file_get_contents($selected_file);
                    $data = htmlspecialchars(htmlspecialchars_decode($data));
                    $ret = '';

                    $ret .= '<script src="https://rawgit.com/google/code-prettify/master/loader/run_prettify.js?autoload=true&skin=sunburst"></script>';
                    $ret .= '<?prettify lang='.$info['extension'].' linenums=true?><pre class="prettyprint"><code class="language-'.$info['extension'].'">'.$data.'</code></pre>';
                } elseif ($preview_mode == 'google') {
                    if ($ftp) {
                        $url_file = $selected_file;
                    } else {
                        $url_file = $config['base_url'] . $config['upload_dir'] . str_replace($config['current_path'], '', $_GET["file"]);
                    }

					$googledoc_url = urlencode($url_file);
					$ret = "<iframe src=\"https://docs.google.com/viewer?url=" . $url_file . "&embedded=true\" class=\"google-iframe\"></iframe>";
				}
			}else{
				$data = stripslashes(htmlspecialchars(file_get_contents($selected_file)));
				if(in_array($info['extension'],['html', 'html'])){
					$ret = '<script src="https://cdn.ckeditor.com/ckeditor5/12.1.0/classic/ckeditor.js"></script><textarea id="textfile_edit_area" style="width:100%;height:300px;">'.$data.'</textarea><script>setTimeout(function(){ ClassicEditor.create( document.querySelector( "#textfile_edit_area" )).catch( function(error){ console.error( error ); } );  }, 500);</script>';
				}else{
					$ret = '<textarea id="textfile_edit_area" style="width:100%;height:300px;">'.$data.'</textarea>';
				}

			}

			response($ret)->send();
			exit;
        default:
            response(trans('no action passed').AddErrorLocation())->send();
            exit;
    }
} else {
    response(trans('no action passed').AddErrorLocation())->send();
    exit;
}
