OSDN Git Service

fix typo
[nucleus-jp/nucleus-jp-ancient.git] / utf8 / nucleus / media.php
1 <?php
2 /*
3  * Nucleus: PHP/MySQL Weblog CMS (http://nucleuscms.org/)
4  * Copyright (C) 2002-2009 The Nucleus Group
5  *
6  * This program is free software; you can redistribute it and/or
7  * modify it under the terms of the GNU General Public License
8  * as published by the Free Software Foundation; either version 2
9  * of the License, or (at your option) any later version.
10  * (see nucleus/documentation/index.html#license for more info)
11  */
12 /**
13  * Media popup window for Nucleus
14  *
15  * Purpose:
16  *   - can be openen from an add-item form or bookmarklet popup
17  *   - shows a list of recent files, allowing browsing, search and
18  *     upload of new files
19  *   - close the popup by selecting a file in the list. The file gets
20  *     passed through to the add-item form (linkto, popupimg or inline img)
21  *
22  * @license http://nucleuscms.org/license.txt GNU General Public License
23  * @copyright Copyright (C) 2002-2009 The Nucleus Group
24  * @version $Id$
25  * $NucleusJP: media.php,v 1.8.2.1 2007/09/07 07:36:44 kimitake Exp $
26  *
27  */
28
29 $CONF = array();\r
30 \r
31 // defines how much media items will be shown per page. You can override this\r
32 // in config.php if you like. (changing it in config.php instead of here will\r
33 // allow your settings to be kept even after a Nucleus upgrade)\r
34 $CONF['MediaPerPage'] = 10;\r
35 \r
36 // include all classes and config data\r
37 require('../config.php');\r
38 include($DIR_LIBS . 'MEDIA.php');       // media classes\r
39 \r
40 sendContentType('application/xhtml+xml', 'media');\r
41 \r
42 // user needs to be logged in to use this\r
43 if (!$member->isLoggedIn()) {\r
44         media_loginAndPassThrough();\r
45         exit;\r
46 }\r
47 \r
48 // check if member is on at least one teamlist\r
49 $query = 'SELECT * FROM ' . sql_table('team'). ' WHERE tmember=' . $member->getID();\r
50 $teams = mysql_query($query);\r
51 if (mysql_num_rows($teams) == 0)\r
52         media_doError(_ERROR_DISALLOWEDUPLOAD);\r
53 \r
54 // get action\r
55 $action = requestVar('action');\r
56 if ($action == '')\r
57         $action = 'selectmedia';\r
58 \r
59 // check ticket\r
60 $aActionsNotToCheck = array('selectmedia', _MEDIA_FILTER_APPLY, _MEDIA_COLLECTION_SELECT);\r
61 if (!in_array($action, $aActionsNotToCheck))\r
62 {\r
63         if (!$manager->checkTicket())\r
64                 media_doError(_ERROR_BADTICKET);\r
65 }\r
66 \r
67 \r
68 switch($action) {\r
69         case 'chooseupload':\r
70         case _MEDIA_UPLOAD_TO:\r
71         case _MEDIA_UPLOAD_NEW:\r
72                 if (!$member->isAdmin() and $CONF['AllowUpload'] != true) {\r
73                         media_doError(_ERROR_DISALLOWED);\r
74                 } else {\r
75                         media_choose();\r
76                 }\r
77                 break;\r
78         case 'uploadfile':\r
79                 if (!$member->isAdmin() and $CONF['AllowUpload'] != true) {\r
80                         media_doError(_ERROR_DISALLOWED);\r
81                 } else {\r
82                         media_upload();\r
83                 }\r
84                 break;\r
85         case _MEDIA_FILTER_APPLY:\r
86         case 'selectmedia':\r
87         case _MEDIA_COLLECTION_SELECT:\r
88         default:\r
89                 media_select();\r
90                 break;\r
91 }\r
92 \r
93 // select a file\r
94 function media_select() {\r
95         global $member, $CONF, $DIR_MEDIA, $manager;\r
96 \r
97         // show 10 files + navigation buttons\r
98         // show msg when no files\r
99         // show upload form\r
100         // files sorted according to last modification date\r
101 \r
102         // currently selected collection\r
103         $currentCollection = requestVar('collection');\r
104         if (!$currentCollection || !@is_dir($DIR_MEDIA . $currentCollection))\r
105                 $currentCollection = $member->getID();\r
106 \r
107         // avoid directory travarsal and accessing invalid directory\r
108         if (!MEDIA::isValidCollection($currentCollection)) media_doError(_ERROR_DISALLOWED);\r
109 \r
110         media_head();\r
111 \r
112         // get collection list\r
113         $collections = MEDIA::getCollectionList();\r
114 \r
115         if (sizeof($collections) > 1) {\r
116         ?>\r
117                 <form method="post" action="media.php"><div>\r
118                         <label for="media_collection"><?php echo htmlspecialchars(_MEDIA_COLLECTION_LABEL)?></label>\r
119                         <select name="collection" id="media_collection">\r
120                                 <?php                                   foreach ($collections as $dirname => $description) {\r
121                                                 echo '<option value="',htmlspecialchars($dirname),'"';\r
122                                                 if ($dirname == $currentCollection) {\r
123                                                         echo ' selected="selected"';\r
124                                                 }\r
125                                                 echo '>',htmlspecialchars($description),'</option>';\r
126                                         }\r
127                                 ?>\r
128                         </select>\r
129                         <input type="submit" name="action" value="<?php echo htmlspecialchars(_MEDIA_COLLECTION_SELECT) ?>" title="<?php echo htmlspecialchars(_MEDIA_COLLECTION_TT)?>" />\r
130                         <input type="submit" name="action" value="<?php echo htmlspecialchars(_MEDIA_UPLOAD_TO) ?>" title="<?php echo htmlspecialchars(_MEDIA_UPLOADLINK) ?>" />\r
131                         <?php $manager->addTicketHidden() ?>\r
132                 </div></form>\r
133         <?php   } else {\r
134         ?>\r
135                 <form method="post" action="media.php" style="float:right"><div>\r
136                         <input type="hidden" name="collection" value="<?php echo htmlspecialchars($currentCollection)?>" />\r
137                         <input type="submit" name="action" value="<?php echo htmlspecialchars(_MEDIA_UPLOAD_NEW) ?>" title="<?php echo htmlspecialchars(_MEDIA_UPLOADLINK) ?>" />\r
138                         <?php $manager->addTicketHidden() ?>\r
139                 </div></form>\r
140         <?php   } // if sizeof\r
141 \r
142         $filter = requestVar('filter');\r
143         $offset = intRequestVar('offset');\r
144         $arr = MEDIA::getMediaListByCollection($currentCollection, $filter);\r
145 \r
146         ?>\r
147                 <form method="post" action="media.php"><div>\r
148                         <label for="media_filter"><?php echo htmlspecialchars(_MEDIA_FILTER_LABEL)?></label>\r
149                         <input id="media_filter" type="text" name="filter" value="<?php echo htmlspecialchars($filter)?>" />\r
150                         <input type="submit" name="action" value="<?php echo htmlspecialchars(_MEDIA_FILTER_APPLY) ?>" />\r
151                         <input type="hidden" name="collection" value="<?php echo htmlspecialchars($currentCollection)?>" />\r
152                         <input type="hidden" name="offset" value="<?php echo intval($offset)?>" />\r
153                 </div></form>\r
154 \r
155         <?php\r
156 \r
157         ?>\r
158                 <table width="100%">\r
159                 <caption><?php echo _MEDIA_COLLECTION_LABEL . htmlspecialchars($collections[$currentCollection])?></caption>\r
160                 <tr>\r
161                  <th><?php echo _MEDIA_MODIFIED?></th><th><?php echo _MEDIA_FILENAME?></th><th><?php echo _MEDIA_DIMENSIONS?></th>\r
162                 </tr>\r
163 \r
164         <?php\r
165 \r
166         if (sizeof($arr)>0) {\r
167 \r
168                 if (($offset + $CONF['MediaPerPage']) >= sizeof($arr))\r
169                         $offset = sizeof($arr) - $CONF['MediaPerPage'];\r
170 \r
171                 if ($offset < 0) $offset = 0;\r
172 \r
173                 $idxStart = $offset;\r
174                 $idxEnd = $offset + $CONF['MediaPerPage'];\r
175                 $idxNext = $idxEnd;\r
176                 $idxPrev = $idxStart - $CONF['MediaPerPage'];\r
177 \r
178                 if ($idxPrev < 0) $idxPrev = 0;\r
179 \r
180                 if ($idxEnd > sizeof($arr))\r
181                         $idxEnd = sizeof($arr);\r
182 \r
183                 for($i=$idxStart;$i<$idxEnd;$i++) {\r
184                         $obj = $arr[$i];\r
185                         $filename = $DIR_MEDIA . $currentCollection . '/' . $obj->filename;\r
186 \r
187                         $old_level = error_reporting(0);\r
188                         $size = @GetImageSize($filename);\r
189                         error_reporting($old_level);\r
190                         $width = $size[0];\r
191                         $height = $size[1];\r
192                         $filetype = $size[2];\r
193 \r
194                         echo "<tr>";\r
195                         echo "<td>". date("Y-m-d",$obj->timestamp) ."</td>";\r
196 \r
197                         // strings for javascript\r
198                         $jsCurrentCollection = str_replace("'","\\'",$currentCollection);\r
199                         $jsFileName = str_replace("'","\\'",$obj->filename);\r
200 \r
201                         if ($filetype != 0) {\r
202                                 // image (gif/jpg/png/swf)\r
203                                 echo "<td><a href=\"media.php\" onclick=\"chooseImage('", htmlspecialchars($jsCurrentCollection), "','", htmlspecialchars($jsFileName), "',"\r
204                                                            . "'", htmlspecialchars($width), "','" , htmlspecialchars($height), "'"\r
205                                                            . ")\" title=\"" . htmlspecialchars($obj->filename). "\">"\r
206                                                            . htmlspecialchars(shorten($obj->filename,25,'...'))\r
207                                                            ."</a>";\r
208                                 echo ' (<a href="', htmlspecialchars($CONF['MediaURL'] . $currentCollection . '/' . $obj->filename), '" onclick="window.open(this.href); return false;" title="',htmlspecialchars(_MEDIA_VIEW_TT),'">',_MEDIA_VIEW,'</a>)';\r
209                                 echo "</td>";\r
210                         } else {\r
211                                 // no image (e.g. mpg)\r
212                                 echo "<td><a href='media.php' onclick=\"chooseOther('" , htmlspecialchars($jsCurrentCollection), "','", htmlspecialchars($jsFileName), "'"\r
213                                                            . ")\" title=\"" . htmlspecialchars($obj->filename). "\">"\r
214                                                            . htmlspecialchars(shorten($obj->filename,30,'...'))\r
215                                                            ."</a></td>";\r
216 \r
217                         }\r
218                         echo '<td>' , htmlspecialchars($width) , 'x' , htmlspecialchars($height) , '</td>';\r
219                         echo '</tr>';\r
220                 }\r
221         } // if (sizeof($arr)>0)\r
222         ?>\r
223 \r
224                 </table>\r
225         <?php\r
226         if ($idxStart > 0)\r
227                 echo "<a href='media.php?offset=$idxPrev&amp;collection=".urlencode($currentCollection)."'>". _LISTS_PREV."</a> ";\r
228         if ($idxEnd < sizeof($arr))\r
229                 echo "<a href='media.php?offset=$idxNext&amp;collection=".urlencode($currentCollection)."'>". _LISTS_NEXT."</a> ";\r
230 \r
231         ?>\r
232                 <input id="typeradio0" type="radio" name="typeradio" onclick="setType(0);" checked="checked" /><label for="typeradio0"><?php echo _MEDIA_INLINE?></label>\r
233                 <input id="typeradio1" type="radio" name="typeradio" onclick="setType(1);" /><label for="typeradio1"><?php echo _MEDIA_POPUP?></label>\r
234         <?php\r
235         media_foot();\r
236 \r
237 \r
238 }\r
239 \r
240 /**\r
241   * Shows a screen where you can select the file to upload\r
242   */\r
243 function media_choose() {\r
244         global $CONF, $member, $manager;\r
245 \r
246         $currentCollection = requestVar('collection');\r
247 \r
248         $collections = MEDIA::getCollectionList();\r
249 \r
250         media_head();\r
251         ?>\r
252         <h1><?php echo _UPLOAD_TITLE?></h1>\r
253 \r
254         <p><?php echo _UPLOAD_MSG?></p>\r
255 \r
256         <form method="post" enctype="multipart/form-data" action="media.php">\r
257         <div>\r
258           <input type="hidden" name="action" value="uploadfile" />\r
259           <?php $manager->addTicketHidden() ?>\r
260           <input type="hidden" name="MAX_FILE_SIZE" value="<?php echo $CONF['MaxUploadSize']?>" />\r
261           File:\r
262           <br />\r
263           <input name="uploadfile" type="file" size="40" />\r
264         <?php           if (sizeof($collections) > 1) {\r
265         ?>\r
266                 <br /><br /><label for="upload_collection">Collection:</label>\r
267                 <br /><select name="collection" id="upload_collection">\r
268                         <?php                           foreach ($collections as $dirname => $description) {\r
269                                         echo '<option value="',htmlspecialchars($dirname),'"';\r
270                                         if ($dirname == $currentCollection) {\r
271                                                 echo ' selected="selected"';\r
272                                         }\r
273                                         echo '>',htmlspecialchars($description),'</option>';\r
274                                 }\r
275                         ?>\r
276                 </select>\r
277         <?php           } else {\r
278         ?>\r
279                 <input name="collection" type="hidden" value="<?php echo htmlspecialchars(requestVar('collection'))?>" />\r
280         <?php           } // if sizeof\r
281         ?>\r
282           <br /><br />\r
283           <input type="submit" value="<?php echo _UPLOAD_BUTTON?>" />\r
284         </div>\r
285         </form>\r
286 \r
287         <?php\r
288         media_foot();\r
289 }\r
290 \r
291 \r
292 /**\r
293   * accepts a file for upload\r
294   */\r
295 function media_upload() {\r
296         global $DIR_MEDIA, $member, $CONF;\r
297 \r
298         $uploadInfo = postFileInfo('uploadfile');\r
299 \r
300         $filename = $uploadInfo['name'];\r
301         $filetype = $uploadInfo['type'];\r
302         $filesize = $uploadInfo['size'];\r
303         $filetempname = $uploadInfo['tmp_name'];\r
304         $fileerror = intval($uploadInfo['error']);\r
305 \r
306         switch ($fileerror)\r
307         {\r
308                 case 0: // = UPLOAD_ERR_OK\r
309                         break;\r
310                 case 1: // = UPLOAD_ERR_INI_SIZE\r
311                 case 2: // = UPLOAD_ERR_FORM_SIZE\r
312                         media_doError(_ERROR_FILE_TOO_BIG);\r
313                 case 3: // = UPLOAD_ERR_PARTIAL\r
314                 case 4: // = UPLOAD_ERR_NO_FILE\r
315                 case 6: // = UPLOAD_ERR_NO_TMP_DIR\r
316                 case 7: // = UPLOAD_ERR_CANT_WRITE\r
317                 default:\r
318                         // include error code for debugging\r
319                         // (see http://www.php.net/manual/en/features.file-upload.errors.php)\r
320                         media_doError(_ERROR_BADREQUEST . ' (' . $fileerror . ')');\r
321         }\r
322 \r
323         if ($filesize > $CONF['MaxUploadSize'])\r
324                 media_doError(_ERROR_FILE_TOO_BIG);\r
325 \r
326         // check file type against allowed types\r
327         $ok = 0;\r
328         $allowedtypes = explode (',', $CONF['AllowedTypes']);\r
329         foreach ( $allowedtypes as $type )\r
330                 if (eregi("\." .$type. "$",$filename)) $ok = 1;\r
331         if (!$ok) media_doError(_ERROR_BADFILETYPE);\r
332 \r
333         if (!is_uploaded_file($filetempname))\r
334                 media_doError(_ERROR_BADREQUEST);\r
335 \r
336         // prefix filename with current date (YYYY-MM-DD-)\r
337         // this to avoid nameclashes\r
338         if ($CONF['MediaPrefix'])\r
339                 $filename = strftime("%Y%m%d-", time()) . $filename;\r
340 \r
341         $collection = requestVar('collection');\r
342         $res = MEDIA::addMediaObject($collection, $filetempname, $filename);\r
343 \r
344         if ($res != '')\r
345                 media_doError($res);\r
346 \r
347         // shows updated list afterwards\r
348         media_select();\r
349 }\r
350 \r
351 function media_loginAndPassThrough() {\r
352         media_head();\r
353         ?>\r
354                 <h1><?php echo _LOGIN_PLEASE?></h1>\r
355 \r
356                 <form method="post" action="media.php">\r
357                 <div>\r
358                         <input name="action" value="login" type="hidden" />\r
359                         <input name="collection" value="<?php echo htmlspecialchars(requestVar('collection'))?>" type="hidden" />\r
360                         <?php echo _LOGINFORM_NAME?>: <input name="login" />\r
361                         <br /><?php echo _LOGINFORM_PWD?>: <input name="password" type="password" />\r
362                         <br /><input type="submit" value="<?php echo _LOGIN?>" />\r
363                 </div>\r
364                 </form>\r
365                 <p><a href="media.php" onclick="window.close();"><?php echo _POPUP_CLOSE?></a></p>\r
366         <?php   media_foot();\r
367         exit;\r
368 }\r
369 \r
370 function media_doError($msg) {\r
371         media_head();\r
372         ?>\r
373         <h1><?php echo _ERROR?></h1>\r
374         <p><?php echo $msg?></p>\r
375         <p><a href="media.php" onclick="history.back()"><?php echo _BACK?></a></p>\r
376         <?php   media_foot();\r
377         exit;\r
378 }\r
379 \r
380 \r
381 function media_head() {\r
382 ?>\r
383         <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">\r
384         <html <?php echo _HTML_XML_NAME_SPACE_AND_LANG_CODE; ?>>\r
385         <head>\r
386                 <meta http-equiv="Content-Type" content="text/html; charset=<?php echo _CHARSET ?>" />\r
387                 <title>Nucleus Media</title>\r
388                 <link rel="stylesheet" type="text/css" href="styles/popups.css" />\r
389                 <script type="text/javascript">\r
390                         var type = 0;\r
391                         function setType(val) { type = val; }\r
392 \r
393                         function chooseImage(collection, filename, width, height) {\r
394                                 window.opener.focus();\r
395                                 window.opener.includeImage(collection,\r
396                                                                                    filename,\r
397                                                                                    type == 0 ? 'inline' : 'popup',\r
398                                                                                    width,\r
399                                                                                    height\r
400                                                                                    );\r
401                                 window.close();\r
402                         }\r
403 \r
404                         function chooseOther(collection, filename) {\r
405                                 window.opener.focus();\r
406                                 window.opener.includeOtherMedia(collection, filename);\r
407                                 window.close();\r
408 \r
409                         }\r
410                 </script>\r
411         </head>\r
412         <body>\r
413 <?php }\r
414 \r
415 function media_foot() {\r
416 ?>\r
417         </body>\r
418         </html>\r
419 <?php }\r
420 \r
421 ?>\r