* * This program is free software; you can redistribute it and/or modify * it under the terms of the GNU General Public License as published by * the Free Software Foundation; either version 2 of the License, or * (at your option) any later version. * * This program is distributed in the hope that it will be useful, * but WITHOUT ANY WARRANTY; without even the implied warranty of * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the * GNU General Public License for more details. * * You should have received a copy of the GNU General Public License * along with this program; if not, write to the Free Software * Foundation, Inc., 59 Temple Place - Suite 330, Boston, MA 02111-1307, USA. */ /** * \file htdocs/core/ajax/ajaxdirtree.php * \ingroup ecm * \brief This script returns content of a directory for filetree * \version $Id: ajaxFileTree.php,v 1.8 2011/07/06 17:03:41 eldy Exp $ */ // This script is called with a POST method. // Directory to scan (full path) is inside POST['dir']. if (! defined('NOTOKENRENEWAL')) define('NOTOKENRENEWAL',1); // Disables token renewal //if (! defined('NOREQUIRETRAN')) define('NOREQUIRETRAN','1'); if (! defined('NOREQUIREMENU')) define('NOREQUIREMENU','1'); if (! defined('NOREQUIREHTML')) define('NOREQUIREHTML','1'); if (! defined('NOREQUIREAJAX')) define('NOREQUIREAJAX','1'); $res=@include("../../main.inc.php"); include_once(DOL_DOCUMENT_ROOT.'/core/lib/files.lib.php'); include_once(DOL_DOCUMENT_ROOT.'/core/lib/treeview.lib.php'); include_once(DOL_DOCUMENT_ROOT.'/core/class/html.form.class.php'); include_once(DOL_DOCUMENT_ROOT."/ecm/class/ecmdirectory.class.php"); $openeddir = GETPOST('openeddir'); $modulepart= GETPOST('modulepart'); $selecteddir = urldecode(GETPOST('dir')); // relative patch. We must keep the urldecode here because para comes from jqueyrFileTree that url encode it. if ($selecteddir != '/') $selecteddir = preg_replace('/\/$/','',$selecteddir); // We removed last '/' except if it is '/' $langs->load("ecm"); // Define selecteddir (fullpath). if ($modulepart == 'ecm') $fullpathselecteddir=$conf->ecm->dir_output.'/'.($selecteddir != '/' ? $selecteddir : ''); // Security: // On interdit les remontees de repertoire ainsi que les pipe dans // les noms de fichiers. if (preg_match('/\.\./',$fullpathselecteddir) || preg_match('/[<>|]/',$fullpathselecteddir)) { dol_syslog("Refused to deliver file ".$original_file); // Do no show plain path in shown error message dol_print_error(0,$langs->trans("ErrorFileNameInvalid",GETPOST("file"))); exit; } // Check permissions if ($modulepart == 'ecm') { if (! $user->rights->ecm->read) accessforbidden(); } /* * View */ $userstatic=new User($db); $form=new Form($db); $ecmdirstatic = new EcmDirectory($db); // Load full tree. We will use it to define nbofsubdir and nboffilesinsubdir if (empty($sqltree)) $sqltree=$ecmdirstatic->get_full_arbo(0); // Try to find key into $sqltree $current_ecmdir_id=-1; foreach($sqltree as $keycursor => $val) { //print $val['fullrelativename']." == ".$selecteddir; if ($val['fullrelativename'] == $selecteddir) { $current_ecmdir_id = $keycursor; } } //var_dump($sqltree); if( file_exists($fullpathselecteddir) ) { $files = @scandir($fullpathselecteddir); if ($files) { natcasesort($files); if( count($files) > 2 ) /* The 2 accounts for . and .. */ { echo "\n"; } } else print "PermissionDenied"; } // This ajax service is called only when a directory $selecteddir is opened but not closed. //print ''; if (is_object($db)) $db->close(); ?>