upload.php

   1 <?php
   2 include("inc.php");
   3
   4 if (file_exists('install.php')
   5 or file_exists('update.php')
   6 or file_exists('update_content.php'))
   7         {
   8         header("location: ".$settings['forum_address']."service.php");
   9         die("<a href=\"service.php\">further...</a>");
  10         }
  11
  12 if ($settings['upload_images']!=1) die('This feature is not activated.');
  13
  14 $uploaded_images_path = 'img/uploaded/';
  15 $images_per_page = 30;
  16
  17 function resize($uploaded_file, $file, $new_width, $new_height, $compression=80) {
  18
  19 if (file_exists($file))
  20         {
  21         @chmod($file, 0777);
  22         @unlink($file);
  23         }
  24
  25 $image_info = getimagesize($uploaded_file);
  26
  27 if (!is_array($image_info) || $image_info[2] != 1 && $image_info[2] != 2 && $image_info[2] != 3) $error = true;
  28 if (empty($error))
  29         {
  30         if($image_info[2]==1) // GIF
  31                 {
  32                 $current_image = @ImageCreateFromGIF($uploaded_file) or $error = true;
  33                 if (empty($error)) $new_image = @ImageCreate($new_width,$new_height) or $error = true;
  34                 if (empty($error)) @ImageCopyResampled($new_image,$current_image,0,0,0,0,$new_width,$new_height,$image_info[0],$image_info[1]) or $error=true;
  35                 if (empty($error)) @ImageGIF($new_image, $file) or $error = true;
  36                 }
  37         else if ($image_info[2]==2) // JPG
  38                 {
  39                 $current_image = @ImageCreateFromJPEG($uploaded_file) or $error = true;
  40                 if (empty($error)) $new_image=@imagecreatetruecolor($new_width,$new_height) or $error = true;
  41                 if (empty($error)) @ImageCopyResampled($new_image,$current_image,0,0,0,0,$new_width,$new_height,$image_info[0],$image_info[1]) or $error = true;
  42                 if (empty($error)) @ImageJPEG($new_image, $file, $compression) or $error = true;
  43                 }
  44         else if($image_info[2]==3) // PNG
  45                 {
  46                 $current_image=ImageCreateFromPNG($uploaded_file) or $error = true;
  47                 if (empty($error)) $new_image=imagecreatetruecolor($new_width,$new_height) or $error = true;
  48                 if (empty($error)) ImageCopyResampled($new_image,$current_image,0,0,0,0,$new_width,$new_height,$image_info[0],$image_info[1]) or $error = true;
  49                 if (empty($error)) ImagePNG($new_image, $file) or $error = $true;
  50                 }
  51         }
  52
  53 if (empty($error)) return true;
  54 else return false;
  55 }
  56
  57 $action = (isset($_GET['action'])) ? $_GET['action'] : 'upload';
  58
  59 $lang['upload_exp'] = str_replace("[width]", $settings['upload_max_img_width'], $lang['upload_exp']);
  60 $lang['upload_exp'] = str_replace("[height]", $settings['upload_max_img_height'], $lang['upload_exp']);
  61 $lang['upload_exp'] = str_replace("[size]", $settings['upload_max_img_size'], $lang['upload_exp']);
  62
  63 if (isset($_FILES['probe']) && $_FILES['probe']['size'] != 0 && !$_FILES['probe']['error'])
  64         {
  65         unset($errors);
  66         $image_info = getimagesize($_FILES['probe']['tmp_name']);
  67         if (!is_array($image_info)
  68                 || ($image_info[2] != 1
  69                 && $image_info[2] != 2
  70                 && $image_info[2] != 3))
  71                 {
  72                 $errors[] = $lang['invalid_file_format'];
  73                 }
  74         if (empty($errors))
  75                 {
  76                 if ($_FILES['probe']['size'] > $settings['upload_max_img_size']*1000
  77                         || $image_info[0] > $settings['upload_max_img_width']
  78                         || $image_info[1] > $settings['upload_max_img_height'])
  79                         {
  80                         $compression = 10;
  81                         $width=$image_info[0];
  82                         $height=$image_info[1];
  83                         if ($width >= $height)
  84                                 {
  85                                 $new_width = $settings['upload_max_img_width'];
  86                                 $new_height = intval($height*$new_width/$width);
  87                                 }
  88                         else
  89                                 {
  90                                 $new_height = $settings['upload_max_img_height'];
  91                                 $new_width = intval($width*$new_height/$height);
  92                                 }
  93                         $img_tmp_name = uniqid(rand()).'.tmp';
  94
  95                         for ($compression = 100; $compression>9; $compression=$compression-10)
  96                                 {
  97                                 if (!resize($_FILES['probe']['tmp_name'], $uploaded_images_path.$img_tmp_name, $new_width, $new_height, $compression))
  98                                         {
  99                                         $file_size = @filesize($uploaded_images_path.$img_tmp_name);
 100                                         break;
 101                                         }
 102                                 $file_size = @filesize($uploaded_images_path.$img_tmp_name);
 103                                 if ($image_info[2]!=2 && $file_size > $settings['upload_max_img_size']*1000) break;
 104                                 if ($file_size <= $settings['upload_max_img_size']*1000) break;
 105                                 }
 106                         if ($file_size > $settings['upload_max_img_size']*1000)
 107                                 {
 108                                 $file_too_large_dump = str_replace("[width]",$image_info[0],$lang['file_too_large']);
 109                                 $file_too_large_dump = str_replace("[height]",$image_info[1],$file_too_large_dump);
 110                                 $file_too_large_dump = str_replace("[size]",number_format($_FILES['probe']['size']/1000,0,",",""),$file_too_large_dump);
 111                                 $errors[] = $file_too_large_dump;
 112                                 }
 113                         if (isset($errors))
 114                                 {
 115                                 if (file_exists($uploaded_images_path.$img_tmp_name))
 116                                         {
 117                                         @chmod($uploaded_images_path.$img_tmp_name, 0777);
 118                                         @unlink($uploaded_images_path.$img_tmp_name);
 119                                         }
 120                                 }
 121                         }
 122                 }
 123
 124         if (empty($errors))
 125                 {
 126                 $nr = 0;
 127                 switch($image_info[2])
 128                         {
 129                         case 1:
 130                                 for(;;) { $nr++; if (!file_exists($uploaded_images_path."image".$nr.".gif")) break; }
 131                                 $filename = "image".$nr.".gif";
 132                         break;
 133                         case 2:
 134                                 for(;;) { $nr++; if (!file_exists($uploaded_images_path."image".$nr.".jpg")) break; }
 135                                 $filename = "image".$nr.".jpg";
 136                         break;
 137                         case 3:
 138                                 for(;;) { $nr++; if (!file_exists($uploaded_images_path."image".$nr.".png")) break; }
 139                                 $filename = "image".$nr.".png";
 140                         break;
 141                         }
 142                 if (isset($img_tmp_name))
 143                         {
 144                         @rename($uploaded_images_path.$img_tmp_name, $uploaded_images_path.$filename) or $errors[] = $lang['upload_error'];
 145                         $image_manipulated = str_replace('[width]',$new_width,$lang['image_manipulated']);
 146                         $image_manipulated = str_replace('[height]',$new_height,$image_manipulated);
 147                         $image_manipulated = str_replace("[size]",number_format($file_size/1000,0,",",""),$image_manipulated);
 148                         }
 149                 else
 150                         {
 151                         @move_uploaded_file($_FILES['probe']['tmp_name'], $uploaded_images_path.$filename) or $errors[] = $lang['upload_error'];
 152                         }
 153                 }
 154         if (empty($errors))
 155                 {
 156                 @chmod($uploaded_images_path.$filename, 0644);
 157                 $action = 'uploaded';
 158                 }
 159         else $action = 'upload';
 160         }
 161
 162 if (empty($errors))
 163         {
 164         if (isset($_FILES['probe']['error']))
 165                 {
 166                 $errors[] = str_replace('[maximum_file_size]',ini_get('upload_max_filesize'),$lang['upload_error_2']);
 167                 }
 168         }
 169
 170 if(isset($_GET['uploaded_image_selected']))
 171         {
 172         $filename = $_GET['uploaded_image_selected'];
 173         $action = 'uploaded';
 174         }
 175
 176 ?><!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
 177 <html>
 178 <head>
 179 <meta http-equiv="content-type" content="text/html; charset=UTF-8" />
 180 <title><?php echo strip_tags($lang['upload_image_title']); ?></title>
 181 <style type="text/css">
 182 <!--
 183 body {
 184 font-family:Verdana,Helvetica,sans-serif;
 185 color:#000;
 186 font-size:13px;
 187 background:#fff;
 188 margin:0;
 189 padding:20px;
 190 }
 191 h1 {
 192 margin:0 0 20px 0;
 193 font-size:18px;
 194 font-weight:bold;
 195 }
 196 .caution {
 197 color:red;
 198 font-weight:bold;
 199 }
 200 a:link {
 201 color:#00c;
 202 text-decoration:none;
 203 }
 204 a:visited {
 205 color:#00c;
 206 text-decoration:none;
 207 }
 208 a:focus, a:hover {
 209 color:#00f;
 210 text-decoration:underline;
 211 }
 212 -->
 213 </style>
 214 <script type="text/javascript">/* <![CDATA[ */
 215
 216 function insertCode(code) {
 217
 218 if (!code) code = "";
 219
 220 if (opener) {
 221         // get the textarea of the main document and focus the element
 222         var input = opener.document.getElementById("text");
 223         input.focus();
 224         var txtLen = input.value.length;
 225         // for IE
 226         if (typeof document.selection != 'undefined')
 227                 {
 228                 /*
 229                 the following code for MSIE is adapted from http://the-stickman.com/web-development/javascript/finding-selection-cursor-position-in-a-textarea-in-internet-explorer/
 230
 231                 it is licensed unter the terms of the MIT-license
 232                 see: http://www.opensource.org/licenses/mit-license.php
 233                 Copyright (c) <year> <copyright holders>
 234
 235                 Permission is hereby granted, free of charge, to any person obtaining
 236                 a copy of this software and associated documentation files (the "Software"),
 237                 to deal in the Software without restriction, including without limitation
 238                 the rights to use, copy, modify, merge, publish, distribute, sublicense,
 239                 and/or sell copies of the Software, and to permit persons to whom
 240                 the Software is furnished to do so, subject to the following conditions:
 241
 242                 The above copyright notice and this permission notice shall be included
 243                 in all copies or substantial portions of the Software.
 244
 245                 THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS
 246                 OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
 247                 FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL
 248                 THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES
 249                 OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE,
 250                 ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE
 251                 OR OTHER DEALINGS IN THE SOFTWARE.
 252                 */
 253                 // The current selection
 254                 var range = opener.document.selection.createRange();
 255                 // We'll use this as a 'dummy'
 256                 var stored_range = range.duplicate();
 257                 // Select all text
 258                 stored_range.moveToElementText(input);
 259                 // Now move 'dummy' end point to end point of original range
 260                 stored_range.setEndPoint( 'EndToEnd', range );
 261                 // Now we can calculate start and end points
 262                 var position = input.selectionStart = stored_range.text.length - range.text.length;
 263 //      input.selectionEnd = input.selectionStart + range.text.length;
 264
 265                 var txtbefore = input.value.substring(0,position);
 266                 var txtafter = input.value.substring(position, txtLen);
 267                 input.value = txtbefore + code + txtafter;
 268                 }
 269         // for Mozilla
 270         else if ((typeof input.selectionStart) != 'undefined')
 271                 {
 272                 var selEnd = input.selectionEnd;
 273                 var txtbefore = input.value.substring(0,selEnd);
 274                 var txtafter =  input.value.substring(selEnd, txtLen);
 275                 var oldScrollTop = input.scrollTop;
 276                 input.value = txtbefore + code + txtafter;
 277                 input.selectionStart = txtbefore.length + code.length;
 278                 input.selectionEnd = txtbefore.length + code.length;
 279                 input.scrollTop = oldScrollTop;
 280                 }
 281         else
 282                 {
 283                 input.value += code;
 284                 }
 285         input.focus();
 286         self.close();
 287         }
 288 }
 289
 290 /* ]]> */
 291 </script>
 292 </head>
 293 <body>
 294 <h1><?php $lang['upload_image_title']; ?></h1>
 295 <?php
 296 switch($action)
 297         {
 298         case 'upload':
 299                 if(isset($errors))
 300                         {
 301                         echo errorMessages($errors);
 302                         }
 303                 echo '<p>'.$lang['upload_exp'].'</p>'."\n";
 304                 echo '<form action="'.$_SERVER['SCRIPT_NAME'].'" method="post" '."\n";
 305                 echo 'enctype="multipart/form-data"><input type="file" name="probe" />'."\n";
 306                 echo '<input type="submit" value="'.outputLangDebugInAttributes($lang['upload_subm_button']).'">'."\n";
 307                 echo '</form>'."\n";
 308                 echo '<p>[ <a href="'.$_SERVER['PHP_SELF'].'?action=show_uploaded_images">';
 309                 echo $lang['available_images'].'</a> ]</p>'."\n";
 310         break;
 311         case 'uploaded':
 312                 if (isset($_FILES['probe']))
 313                         {
 314                         if(isset($image_manipulated))
 315                                 {
 316                                 echo '<p>'.$image_manipulated.'</p>'."\n";
 317                                 }
 318                         else
 319                                 {
 320                                 echo '<p>'.$lang['upload_successful'].'</p>'."\n";
 321                                 }
 322                         }
 323                 echo '<img src="img/uploaded/'.$filename.'" alt="" height="100" border="1">'."\n";
 324                 echo '<p>'.$lang['paste_image'].'</p>'."\n";
 325                 echo '<p><button style="width:25px; height:25px;" title="'.outputLangDebugInAttributes($lang['insert_image_normal']);
 326                 echo '" onclick="insertCode(\'[img]'.$uploaded_images_path.$filename.'[/img]\');';
 327                 echo '"><img src="img/img_normal.png" alt="'.outputLangDebugInAttributes($lang['insert_image_normal']);
 328                 echo '" width="11" height="11" /></button>&nbsp;<button style="width:25px; height:25px;"';
 329                 echo ' title="'.outputLangDebugInAttributes($lang['insert_image_left']).'" onclick="insertCode(\'[img|left]';
 330                 echo $uploaded_images_path.$filename.'[/img]\');"><img';
 331                 echo ' src="img/img_left.png" alt="'.outputLangDebugInAttributes($lang['insert_image_left']).'" width="11" height="11"';
 332                 echo ' /></button>&nbsp;<button style="width:25px; height:25px;" title="';
 333                 echo outputLangDebugInAttributes($lang['insert_image_right']).'" onclick="insertCode(\'[img|right]';
 334                 echo $uploaded_images_path.$filename.'[/img]\');"><img';
 335                 echo ' src="img/img_right.png" alt="'.outputLangDebugInAttributes($lang['insert_image_right']).'" width="11"';
 336                 echo ' height="11" /></button></p>'."\n";
 337         break;
 338         case 'show_uploaded_images':
 339                 $p = isset($_GET['p']) ? intval($_GET['p']) : 1;
 340                 $c=0;
 341                 $handle = opendir($uploaded_images_path);
 342                 while ($file = readdir($handle))
 343                         {
 344                         if (preg_match('/\.jpg$/i', $file)
 345                                 || preg_match('/\.png$/i', $file)
 346                                 || preg_match('/\.gif$/i', $file))
 347                                 {
 348                                 $images[] = $file;
 349                                 }
 350                         }
 351                 closedir($handle);
 352                 if (isset($images))
 353                         {
 354                         $images_count = count($images);
 355                         $show_images_from = $p * $images_per_page - $images_per_page;
 356                         $show_images_to =   $p * $images_per_page;
 357                         if ($show_images_to>$images_count) $show_images_to = $images_count;
 358                         }
 359                 else
 360                         {
 361                         $images_count = 0;
 362                         }
 363                 echo '<p>';
 364                 if ($p>1)
 365                         {
 366                         $pageDown = $p - 1;
 367                         echo '[ <a href="'.$_SERVER['SCRIPT_NAME'].'?action=show_uploaded_images';
 368                         echo '&amp;p='.$pageDown.'">&laquo;</a> ] ';
 369                         }
 370                 if ($p*$images_per_page < $images_count)
 371                         {
 372                         $pageUp = $p + 1;
 373                         echo '[ <a href="'.$_SERVER['SCRIPT_NAME'].'?action=show_uploaded_images';
 374                         echo '&amp;p='.$pageUp.'">&raquo;</a> ] ';
 375                         }
 376                 echo '<hr /><p>';
 377                 if ($images_count > 0)
 378                         {
 379                         for ($i=$show_images_from; $i<$show_images_to; $i++)
 380                                 {
 381                                 echo '<a href="'.$_SERVER['SCRIPT_NAME'].'?uploaded_image_selected=';
 382                                 echo $images[$i].'"><img style="margin: 0px 15px 15px 0px;" src="';
 383                                 echo $uploaded_images_path.$images[$i].'" alt="'.$images[$i];
 384                                 echo '" height="100" border="0"></a>'."\n";
 385                                 }
 386                         }
 387                 else
 388                         {
 389                         echo '<i>'.$lang['no_images'].'</i>';
 390                         }
 391                 echo '</p>'."\n";
 392         break;
 393         }
 394 ?></body>
 395 </html>