X-Git-Url: https://git.p6c8.net/jirafeau_project.git/blobdiff_plain/3b097eba6400cac6e9f5d6b230a33f2783b38e5b..bb66972d3753749163458c7d50b084bc9b219c9a:/index.php?ds=sidebyside diff --git a/index.php b/index.php old mode 100755 new mode 100644 index 5f7f6ff..5a2c926 --- a/index.php +++ b/index.php @@ -20,46 +20,133 @@ */ define ('JIRAFEAU_ROOT', dirname (__FILE__) . '/'); -require (JIRAFEAU_ROOT . 'lib/config.php'); +require (JIRAFEAU_ROOT . 'lib/config.original.php'); require (JIRAFEAU_ROOT . 'lib/settings.php'); require (JIRAFEAU_ROOT . 'lib/functions.php'); require (JIRAFEAU_ROOT . 'lib/lang.php'); require (JIRAFEAU_ROOT . 'lib/template/header.php'); -check_errors (); +check_errors ($cfg); if (has_error ()) { show_errors (); require (JIRAFEAU_ROOT . 'lib/template/footer.php'); exit; } + +/* Check if user is allowed to upload. */ +if (!jirafeau_challenge_upload_ip ($cfg, get_ip_address($cfg))) +{ + echo '

' . t('Access denied') . '

'; + require (JIRAFEAU_ROOT.'lib/template/footer.php'); + exit; +} + +/* Ask password if upload password is set. */ +if (jirafeau_has_upload_password ($cfg)) +{ + session_start(); + + /* Unlog if asked. */ + if (isset ($_POST['action']) && (strcmp ($_POST['action'], 'logout') == 0)) + session_unset (); + + /* Auth. */ + if (isset ($_POST['upload_password'])) + { + if (jirafeau_challenge_upload_password ($cfg, $_POST['upload_password'])) + { + $_SESSION['upload_auth'] = true; + $_SESSION['user_upload_password'] = $_POST['upload_password']; + } + else + { + $_SESSION['admin_auth'] = false; + echo '

' . t('Wrong password.') . '

'; + require (JIRAFEAU_ROOT.'lib/template/footer.php'); + exit; + } + } + + /* Show auth page. */ + if (!isset ($_SESSION['upload_auth']) || $_SESSION['upload_auth'] != true) + { + ?> +
+
+ + + + + + + + + +
+ +
+
+
+
-

- : -
- -
-

+

+

- : -
- -

- -

- : -

+ +

+

+
+ + +
+

:

+

+
+ + +
+

:

+

+
+ +
+

:

+

+
+ +
+

:

+

+

-

+ +
+
+

+
+
+
@@ -67,12 +154,9 @@ if (has_error ())

+ onchange="control_selected_file_size(, '')"/>

- +
@@ -86,16 +170,54 @@ if (has_error ()) + + 0) + { + echo '

' . t ('File size is limited to'); + echo " " . $cfg['maximal_upload_size'] . " MB

"; + } + ?> +

+ + + + + " method = "post"> + + + + +