<?php
/*
    FileTToy
    ========
    (C/W) CI:A - Certus In Audio [http://certus.in/]

    A very, very, ..., simple script to manage files in one specific directory.

    Sometimes we all need a simple/basic script to upload, rename and delete
    files in one specific folder. Here it is... This is one of the simplest
    script ever (for managing files, indeed). ;-)

    It is nasty and dirty written, but it does its duty - not very hard and
    even not very strong or stable or ... on a beautiful way. But it does.

    It is just a SCRIPT EXAMPLE, and maybe you will find it useful.
    Feel free to use it (on your own risk, for sure).

    HAVE FUN! :-D

    Sourced by CI:A - Certus In Audio [http://certus.in/].
*/

$GLOBALS[ 'arrConfig' ] = array();
$GLOBALS[ 'arrConfig' ][ 'bAllowGuests' ] = false;
$GLOBALS[ 'arrConfig' ][ 'bHideScriptInList' ] = true;
$GLOBALS[ 'arrConfig' ][ 'bHideDotFilesInList' ] = true;
$GLOBALS[ 'arrConfig' ][ 'strFilesDir' ] = getScriptPath() . './';
$GLOBALS[ 'arrConfig' ][ 'strScriptName' ] = basename( getScriptPath() );

function getScriptPath()
{
    return realpath( dirname( $_SERVER[ 'SCRIPT_FILENAME' ] ) . '/' ) . '/';
}

function doExit( $intErrorCode = null , $strErrorText = null )
{
    $intErrorCode = ( is_integer( $intErrorCode ) ) ? $intErrorCode : 0;
    $strErrorText = ( is_string( $strErrorText ) ) ? $strErrorText : '';
    header( 'Content-Type: text/plain' );
    echo '! (#' . $intErrorCode . ') : ' . $strErrorText;
    exit( $intErrorCode );
    return $intErrorCode;
}

function loadConfigurationData()
{
    $bFound = false;
    $strCFL = getScriptPath();
    $strCFP = basename( $_SERVER[ 'SCRIPT_FILENAME' ] ) . '.';
    $arrFL = scandir( $strCFL );
    $arrCfgD = array();
    foreach( $arrFL as $strCF )
    {
        if( is_file( $strCFL . $strCF ) )
        {
            if( substr( $strCF , 0 , strlen( $strCFP ) ) === $strCFP )
            {
                $arrCfgD = parse_ini_file( $strCFL . $strCF ,
                                           true ,
                                           INI_SCANNER_TYPED );
                $bFound = true;
                break;
            }
        }
    }
    if( ! $bFound )
    {
        $arrCfgD = $GLOBALS[ 'arrConfig' ];
        $arrCfgD[ 'users' ][ 'admin' ] =
            substr( str_shuffle( md5( date( 'U' ) ) ) , 0 , 5 );
        saveINIFile( $strCFP . rand( 1000000000 , 9999999999 ) . '.ini' ,
                     $arrCfgD );
    }
    $GLOBALS[ 'arrConfig' ] = $arrCfgD;
    return $arrCfgD;
}

function saveINIFile( $strFileName , $arrData )
{
    $arrOD = array();
    foreach( $arrData as $strKey => $mxValue )
    {
        if( is_array( $mxValue ) )
        {
            $arrOD[] = '[' . $strKey . ']';
            foreach( $mxValue as $strSubKey => $mxSubValue )
            {
                $arrOD[] = $strSubKey . ' = ' . ( is_numeric( $mxSubValue )
                                                ? $mxSubValue
                                                : '"' . $mxSubValue . '"' );
            }
        }
        else
        {
            $arrOD[] = $strKey . ' = ' . ( is_numeric( $mxValue )
                                         ? $mxValue
                                         : '"' . $mxValue . '"' );
        }
    }
    return ( file_put_contents( $strFileName ,
                                implode( PHP_EOL , $arrOD ) ,
                                LOCK_EX ) !== false )
           ? true
           : false;
}

function sendHTTPHeadersNoBrowserCache()
{
    header( 'Cache-Control: no-store, no-cache, must-revalidate, max-age=0' );
    header( 'Cache-Control: post-check=0, pre-check=0' , false );
    header( 'Pragma: no-cache' );
    return true;
}

function getHTTPAuth( $arrUserData , $strAuthRealm = null )
{
    if( ! is_string( $strAuthRealm ) )
    {
        $strAuthRealm = $_SERVER[ 'HTTP_HOST' ];
    }
    if( ! isset( $_SERVER[ 'PHP_AUTH_USER' ] ) )
    {
        header( 'Content-Type: text/plain; charset=utf-8' );
        header( 'Cache-Control: no-cache, must-revalidate, ' .
                'post-check=0, pre-check=0, private' );
        header( 'Expires: Sat, 26 Jul 1997 05:00:00 GMT' );
        header( 'Pragma: no-cache, public' );
        header( 'Last-Modified: ' . gmdate( 'D, d M Y H:i:s' ) . ' GMT' );
        header( 'WWW-Authenticate: Basic realm="' . $strAuthRealm . '"' );
        header( 'HTTP/1.0 401 Unauthorized' );
        echo 'HTTP/1.0 401 Unauthorized';
        exit;
    }
    else
    {
        $_SERVER[ 'PHP_AUTH_USER' ] =
            basename( strtolower( trim( $_SERVER[ 'PHP_AUTH_USER' ] ) ) );
        $_SERVER[ 'PHP_AUTH_PW' ] =
            basename( trim( $_SERVER[ 'PHP_AUTH_PW' ] ) );
        foreach( $arrUserData as $strUserName => $strUserPassword )
        {
            $strUserName = basename( strtolower( trim( $strUserName ) ) );
            $strUserPassword = basename( trim( $strUserPassword ) );
            if( ( $_SERVER[ 'PHP_AUTH_USER' ] === $strUserName ) &&
                ( $_SERVER[ 'PHP_AUTH_PW' ] === $strUserPassword ) )
            {
                return array( $strUserName , $strUserPassword );
            }
        }
        header( 'Content-Type: text/plain; charset=utf-8' );
        header( 'Cache-Control: no-cache, must-revalidate, ' .
                'post-check=0, pre-check=0, private' );
        header( 'Expires: Sat, 26 Jul 1997 05:00:00 GMT' );
        header( 'Pragma: no-cache, public' );
        header( 'Last-Modified: ' . gmdate( 'D, d M Y H:i:s' ) . ' GMT' );
        header( 'WWW-Authenticate: Basic realm="' . $strAuthRealm . '"' );
        header( 'HTTP/1.0 401 Unauthorized' );
        echo 'HTTP/1.0 401 Unauthorized';
        exit;
    }
    return null;
}

function isLoggedIn()
{
    if( isset( $_REQUEST[ 'login' ] ) )
    {
        $arrR = getHTTPAuth( $GLOBALS[ 'arrConfig' ][ 'users' ] );
    }
    if( ( isset( $GLOBALS[ 'arrConfig' ]
                         [ 'users' ]
                         [ $_SERVER[ 'PHP_AUTH_USER' ] ] ) ) &&
        ( $GLOBALS
              [ 'arrConfig' ]
              [ 'users' ]
              [ $_SERVER[ 'PHP_AUTH_USER' ] ] === $_SERVER[ 'PHP_AUTH_PW' ] ) )
    {
        return true;
    }
    return false;
}

function getWebBaseURL()
{
    return 'http' . ( ( isset( $_SERVER[ 'HTTPS' ] ) ) ? 's' : '' ) .
           '://' . $_SERVER[ 'HTTP_HOST' ] .
           dirname( $_SERVER[ 'SCRIPT_NAME' ] ) . '/';
}

function getWebFullURL()
{
    $strPS = '';
    $arrA = func_get_args();
    if( ( is_array( $arrA ) ) && ( count( $arrA ) > 0 ) )
    {
        $strPS .= '?';
        foreach( $arrA as $mxCA )
        {
            if( is_array( $mxCA ) )
            {
                $strCK = key( $mxCA );
                $strPS .= $strCK;
                $strPS .= ( isset( $mxCA[ $strCK ] ) )
                          ? '=' . urlencode( $mxCA[ $strCK ] )
                          : '';
            }
            else
            {
                $strPS .= $mxCA;
            }
            $strPS .= '&';
        }
        $strPS = substr( $strPS , 0 , -1 );
    }
    return 'http' . ( ( isset( $_SERVER[ 'HTTPS' ] ) ) ? 's' : '' ) .
           '://' . $_SERVER[ 'HTTP_HOST' ] .
           $_SERVER[ 'SCRIPT_NAME' ] . $strPS;
}

function doHTMLURL( $strI )
{
    return ( is_string( $strI ) ) ? str_ireplace( '&' , '&amp;' , $strI ) : '';
}

loadConfigurationData();
sendHTTPHeadersNoBrowserCache();
if( ! isLoggedIn() )
{
    if( ! $GLOBALS[ 'arrConfig' ][ 'bAllowGuests' ] )
    {
        header( 'Content-Type: text/plain; charset=utf-8' );
        doExit( 1020 , 'No guest access allowed' );
    }
}
header( 'Content-Type: text/html; charset=utf-8' );
if( ! is_dir( $GLOBALS[ 'arrConfig' ][ 'strFilesDir' ] ) )
{
    if( mkdir( $GLOBALS[ 'arrConfig' ][ 'strFilesDir' ] ) === false )
    {
        doExit( 1010 , '"' . $GLOBALS[ 'arrConfig' ][ 'strFilesDir' ] .
                '" does not exist/is not a directory and cannot be created' );
    }
}
if( isset( $_FILES[ 'ufile' ] ) )
{
    if( ! isLoggedIn() )
    {
        exit;
    }
    move_uploaded_file( $_FILES[ 'ufile' ][ 'tmp_name' ] ,
                        $GLOBALS[ 'arrConfig' ][ 'strFilesDir' ] .
                        basename( $_FILES[ 'ufile' ][ 'name' ] ) );
}
if( isset( $_REQUEST[ 'cmd' ] ) )
{
    if( ! isLoggedIn() )
    {
        exit;
    }
    if( ( $_REQUEST[ 'cmd' ] === 'delete' ) &&
        ( isset( $_REQUEST[ 'file' ] ) ) &&
        ( is_file( $GLOBALS[ 'arrConfig' ][ 'strFilesDir' ] .
                   $_REQUEST[ 'file' ] ) ) )
    {
        file_put_contents( $GLOBALS[ 'arrConfig' ][ 'strFilesDir' ] .
                           $_REQUEST[ 'file' ] ,
                           '' ,
                           LOCK_EX );
        unlink( $GLOBALS[ 'arrConfig' ][ 'strFilesDir' ] .
                $_REQUEST[ 'file' ] );
    }
    if( ( $_REQUEST[ 'cmd' ] === 'rename' ) &&
        ( isset( $_REQUEST[ 'file' ] ) ) &&
        ( is_file( $GLOBALS[ 'arrConfig' ][ 'strFilesDir' ] .
                   $_REQUEST[ 'file' ] ) ) )
    {
        if( isset( $_REQUEST[ 'newname' ] ) )
        {
            rename( $GLOBALS[ 'arrConfig' ][ 'strFilesDir' ] .
                    $_REQUEST[ 'file' ] ,
                    $GLOBALS[ 'arrConfig' ][ 'strFilesDir' ] .
                    trim( strip_tags( basename( $_REQUEST[ 'newname' ] ) ) ) );
        }
    }
}
if( isset( $_REQUEST[ 'logout' ] ) )
{
    header( 'Location: ' .
            str_ireplace( '://' , '://logout@' , getWebBaseURL() ) );
    exit;
}
?>
<!DOCTYPE html>
<html xmlns="http://www.w3.org/1999/xhtml" lang="en">
    <head>
        <meta charset="utf-8">
        <meta name="viewport" content="width=device-width,initial-scale=1.0">
        <style>
        <!--
            html,body
            {
                width:100%;
                height:100%;
            }
            body
            {
                padding:0px;
                margin:0px;
                border:0px;
                font-family:Verdana,'Lucida Sans Unicode',Arial,Helvetica,sans-serif;
                font-size:101%;
                color:#000000;
                background-color:#FFFFFF;
            }
            a
            {
                color:#153060;
                text-decoration:none;
            }
            .table_main
            {
                width:100%;
                background-color:#000000;
            }
            .td_heading
            {
                text-align:center;
                font-size:1.2em;
                font-weight:bold;
                font-style:italic;
                background-color:#D0D0D0;
            }
            .td_files_h
            {
                width:99%;
                text-align:left;
                font-size:0.9em;
                font-weight:bold;
                background-color:#E0E0E0;
            }
            .td_options_h
            {
                width:1%;
                text-align:center;
                font-size:0.9em;
                font-weight:bold;
                background-color:#E0E0E0;
            }
            .td_files
            {
                width:99%;
                text-align:left;
                font-size:0.8em;
                background-color:#F0F0F0;
            }
            .td_options
            {
                width:1%;
                text-align:center;
                font-size:0.8em;
                white-space:nowrap;
                background-color:#FFFFFF;
            }
            .td_filescount
            {
                text-align:center;
                font-size:0.7em;
                background-color:#E0E0E0;
            }
            .td_fileupload
            {
                text-align:center;
                font-size:0.8em;
                background-color:#F0F0F0;
            }
            .form_info,.form_rename,.form_delete
            {
                border:0px;
                margin:0px;
                padding:0px;
                display:inline;
            }
            .form_info_s
            {
                color:#0000C0;
            }
            .form_rename_s
            {
                color:#909000;
            }
            .form_delete_s
            {
                color:#C00000;
            }
        -->
        </style>
        <title><?php echo $GLOBALS[ 'arrConfig' ][ 'strScriptName' ]; ?></title>
        <meta property="og:locale" content="en_EN">
        <meta property="og:type" content="Website">
        <meta property="og:title" content="<?php echo $GLOBALS[ 'arrConfig' ][ 'strScriptName' ]; ?>">
        <meta property="og:site_name" content="<?php echo $GLOBALS[ 'arrConfig' ][ 'strScriptName' ]; ?>">
        <meta property="og:description" content="<?php echo $GLOBALS[ 'arrConfig' ][ 'strScriptName' ]; ?>">
        <meta name="og:locale" content="en_EN">
        <meta name="og:type" content="Website">
        <meta name="og:title" content="<?php echo $GLOBALS[ 'arrConfig' ][ 'strScriptName' ]; ?>">
        <meta name="og:site_name" content="<?php echo $GLOBALS[ 'arrConfig' ][ 'strScriptName' ]; ?>">
        <meta name="og:description" content="<?php echo $GLOBALS[ 'arrConfig' ][ 'strScriptName' ]; ?>">
    </head>
    <body>
        <?php if( isset( $_REQUEST[ 'info' ] ) ) { ?>
        <table style="width:100%;height:100%;"><tr><td align="center" valign="middle"><form method="post">
            <b>File &quot;<?php echo $_REQUEST[ 'info' ]; ?>&quot;</b><br>
            <pre style="text-align:left;border:0px;margin:0px;padding:0px;">
                Name: <?php echo $_REQUEST[ 'info' ] . PHP_EOL; ?>
                Size: <?php echo filesize( $GLOBALS[ 'arrConfig' ][ 'strFilesDir' ] . $_REQUEST[ 'info' ] ); ?> bytes (<?php echo round( filesize( $GLOBALS[ 'arrConfig' ][ 'strFilesDir' ] . $_REQUEST[ 'info' ] ) / 1024 / 1024 ); ?> Mbytes)
                <?php
                $oFI = finfo_open( FILEINFO_MIME_TYPE );
                echo 'Type: ' . finfo_file( $oFI , $GLOBALS[ 'arrConfig' ][ 'strFilesDir' ] . $_REQUEST[ 'info' ] ) . PHP_EOL;
                finfo_close( $oFI );
                ?>
            </pre>
            <input type="submit" value="Okay, thanks!">
        </form></td></tr></table>
        <?php } elseif ( isset( $_REQUEST[ 'rename' ] ) ) { ?>
        <table style="width:100%;height:100%;"><tr><td align="center" valign="middle"><form method="post">
            <b>Rename file &quot;<?php echo $_REQUEST[ 'rename' ]; ?>&quot;?</b><br>
            <input type="hidden" name="cmd" value="rename">
            <input type="hidden" name="file" value="<?php echo $_REQUEST[ 'rename' ]; ?>">
            <input type="text" name="newname" value="" size="20" maxlength="255">
            <input type="submit" value="Yes, sure!">
            <input type="button" value="No, take me back..." onclick="javascript:document.location='<?php echo getWebFullURL(); ?>';">
        </form></td></tr></table>
        <?php } elseif ( isset( $_REQUEST[ 'delete' ] ) ) { ?>
        <table style="width:100%;height:100%;"><tr><td align="center" valign="middle"><form method="post">
            <b>Delete file &quot;<?php echo $_REQUEST[ 'delete' ]; ?>&quot;?</b><br>
            <input type="hidden" name="cmd" value="delete">
            <input type="hidden" name="file" value="<?php echo $_REQUEST[ 'delete' ]; ?>">
            <input type="submit" value="Yes, sure!">
            <input type="button" value="No, take me back..." onclick="javascript:document.location='<?php echo getWebFullURL(); ?>';">
        </form></td></tr></table>
        <?php } else { ?><table class="table_main">
            <tr>
                <td class="td_heading"><a href="<?php echo doHTMLURL( getWebFullURL() ); ?>" target="_self"><?php echo $GLOBALS[ 'arrConfig' ][ 'strScriptName' ]; ?></a></td>
                <?php if( isLoggedIn() ) { ?>
                <td class="td_heading"><small><a href="<?php echo doHTMLURL( getWebFullURL() ); ?>?logout" target="_self" onclick="javascript:alert( 'You need to close your browser to `logout`...' ); return false;">&#10007;</a></small></td>
                <?php } else { ?>
                <td class="td_heading"><small><a href="<?php echo doHTMLURL( getWebFullURL() ); ?>?login" target="_self">&#10003;</a></small></td>
                <?php } ?>
            </tr>
            <tr>
                <td class="td_files_h">File</td>
                <td class="td_options_h">Options</td>
            </tr><?php
            $strCD = $GLOBALS[ 'arrConfig' ][ 'strFilesDir' ];
            $arrFL = scandir( $strCD );
            $intC = 0;
            foreach( $arrFL as $strCF )
            {
                if( is_file( $strCD . $strCF ) )
                {
                    if( $GLOBALS[ 'arrConfig' ][ 'bHideScriptInList' ] )
                    {
                        if( $strCF === basename( $_SERVER[ 'SCRIPT_FILENAME' ] ) )
                        {
                            continue;
                        }
                        if( substr( $strCF , 0 , strlen( basename( $_SERVER[ 'SCRIPT_FILENAME' ] ) . '.' ) ) === basename( $_SERVER[ 'SCRIPT_FILENAME' ] ) . '.' )
                        {
                            continue;
                        }
                    }
                    if( $GLOBALS[ 'arrConfig' ][ 'bHideDotFilesInList' ] )
                    {
                        if( substr( $strCF , 0 , 1 ) === '.' )
                        {
                            continue;
                        }
                    }
                    $intC++;
                    echo PHP_EOL . '            <tr>';
                    echo '<td class="td_files">';
                    echo '<a href="' . doHTMLURL( getWebBaseURL() ) . basename( $strCD ) . '/' . $strCF . '" target="_blank">' . $strCF . '</a>';
                    echo '</td>';
                    echo '<td class="td_options">';
                    echo '<form class="form_info" method="post">';
                    echo '<input type="hidden" name="info" value="' . $strCF . '">';
                    echo '<input class="form_info_s" type="submit" value="I">';
                    echo '</form>';
                    if( isLoggedIn() )
                    {
                        echo '<form class="form_rename" method="post">';
                        echo '<input type="hidden" name="rename" value="' . $strCF . '">';
                        echo '<input class="form_rename_s" type="submit" value="R">';
                        echo '</form>';
                        echo '<form class="form_delete" method="post">';
                        echo '<input type="hidden" name="delete" value="' . $strCF . '">';
                        echo '<input class="form_delete_s" type="submit" value="D">';
                        echo '</form>';
                    }
                    echo '</td>';
                    echo '</tr>';
                }
            }
            echo PHP_EOL . '            <tr><td class="td_filescount" colspan="2">' . $intC . ' file(s) in directory</td></tr>' . PHP_EOL;
            if( isLoggedIn() )
            {
                echo PHP_EOL . '            <tr><td class="td_fileupload" colspan="2">';
                echo '<form enctype="multipart/form-data" action="' . getWebFullURL() . '" method="post">';
                echo '<input name="ufile" type="file">';
                echo '<input type="submit" value="Upload">';
                echo '</form>';
                echo '</td></tr>' . PHP_EOL . '        ';
            }
        ?></table>
    <?php } ?></body>
</html>