Merged in bugfix/HOR-2783 (pull request #5463)

HOR-2783

Approved-by: Julio Cesar Laura Avendaño
This commit is contained in:
Roly
2017-02-23 19:50:32 +00:00
committed by Julio Cesar Laura Avendaño
2 changed files with 121 additions and 136 deletions

View File

@@ -1,19 +1,20 @@
<?php
sleep( 1 );
global $RBAC;
if ( $RBAC->userCanAccess('PM_FACTORY') == 1) {
if (isset( $_SESSION['processes_upload'] )) {
$form = $_SESSION['processes_upload'];
G::LoadClass('processes');
$app = new Processes();
if (!$app->processExists($form['PRO_UID'])) {
$result = 0;
$msg = G::LoadTranslation('ID_PROCESS_UID_NOT_DEFINED');
echo "{'result': $result, 'msg':'$msg'}";
die;
}
sleep(1);
global $RBAC;
if ($RBAC->userCanAccess('PM_FACTORY') == 1) {
if (isset($_SESSION['processes_upload'])) {
$form = $_SESSION['processes_upload'];
G::LoadClass('processes');
$app = new Processes();
if (!$app->processExists($form['PRO_UID'])) {
$result = 0;
$msg = G::LoadTranslation('ID_PROCESS_UID_NOT_DEFINED');
echo "{'result': $result, 'msg':'$msg'}";
die;
}
switch ($form['MAIN_DIRECTORY']) {
case 'mailTemplates':
case 'mailTemplates':
$sDirectory = PATH_DATA_MAILTEMPLATES . $form['PRO_UID'] . PATH_SEP . ($form['CURRENT_DIRECTORY'] != '' ? $form['CURRENT_DIRECTORY'] . PATH_SEP : '');
break;
case 'public':
@@ -22,18 +23,29 @@ if ( $RBAC->userCanAccess('PM_FACTORY') == 1) {
default:
die();
break;
}
}
}
if ($_FILES['form']['error'] == "0") {
G::uploadFile( $_FILES['form']['tmp_name'], $sDirectory, $_FILES['form']['name'] );
$msg = "Uploaded (" . (round( (filesize( $sDirectory . $_FILES['form']['name'] ) / 1024) * 10 ) / 10) . " kb)";
$fileName = $_FILES['form']['name'];
$canUploadPhpFile = true;
$extension = pathinfo($fileName, PATHINFO_EXTENSION);
if (\Bootstrap::getDisablePhpUploadExecution() === 1 && $extension === 'php') {
$message = \G::LoadTranslation('THE_UPLOAD_OF_PHP_FILES_WAS_DISABLED');
\Bootstrap::registerMonologPhpUploadExecution('phpUpload', 550, $message, $fileName);
$canUploadPhpFile = false;
}
if ($_FILES['form']['error'] == "0" && $canUploadPhpFile) {
G::uploadFile($_FILES['form']['tmp_name'], $sDirectory, $fileName);
$msg = "Uploaded (" . (round((filesize($sDirectory . $fileName) / 1024) * 10) / 10) . " kb)";
$result = 1;
//echo $sDirectory.$_FILES['form']['name'];
} else {
$msg = "Failed";
if ($canUploadPhpFile === false) {
$msg = $message;
}
$result = 0;
}
echo "{'result': $result, 'msg':'$msg'}";
echo "{'result': $result, 'msg':'$msg'}";
}

View File

@@ -1,123 +1,96 @@
<html>
<head>
<style>
li {list-style-type: none;margin: 2; padding: 0; }
body{
background:#fff;
}
#uxfiles{
font-size:10px;border-width: 1px; border-style: solid; border-color: #000;
padding:2px;
padding-left:4px;
padding-right:4px;
width:284px;
}
</style>
<script src="/js/jquery/jquery-1.3.2.min.js" type="text/javascript"></script>
<script src="/js/jquery/jquery-ui-1.7.2.custom.min.js" type="text/javascript"></script>
<script type="text/javascript" src="/js/jquery/ajaxupload.3.6.js"></script>
<script type= "text/javascript">
var cClient = window.parent.getBrowserClient();
$(document).ready(function(){
/* example 1 */
var button = $('#button1'), interval;
new AjaxUpload(button,{
action: 'processes_doUpload', // I disabled uploads in this example for security reasons
//action: 'upload.htm',
name: 'form',
onSubmit : function(file, ext){
if(cClient.browser != 'msie'){
$("#uxmsg").html('Uploading...');
$("#uxmsg").fadeIn(2000);
//this.disable();
$('#button1').attr('disabled',true);
} else {
// document.getElementById("uxfiles").style.display = 'block';
//$("#uxmsg").html('Uploading....');
document.getElementById("uxfiles").innerHTML = 'Uploading...';
//document.getElementById("uxfiles").style.display = 'block';
<head>
<style>
li {list-style-type: none;margin: 2; padding: 0; }
body{
background:#fff;
}
if(cClient.browser != 'msie'){
interval = window.setInterval(function(){
var text = button.text();
if (text.length < 13){
button.text(text + '.');
} else {
button.text('Uploading');
}
}, 200);
#uxfiles{
font-size:10px;border-width: 1px; border-style: solid; border-color: #000;
padding:2px;
padding-left:4px;
padding-right:4px;
width:284px;
}
},
onComplete: function(file, response){
parent.xReaload();
if(file.length>24) file = file.substr(0,24) + '..';
resp = eval("("+response+")");
xcolor = resp.result? 'green': red;
if(cClient.browser != 'msie'){
$("#uxmsg").fadeOut(1500, function(){
$("#uxmsg").fadeIn(1100);
$("#uxmsg").html('<font color=black>'+file+'</font> <font color='+xcolor+'>'+resp.msg+'<font>');
});
</style>
<script src="/js/jquery/jquery-1.3.2.min.js" type="text/javascript"></script>
<script src="/js/jquery/jquery-ui-1.7.2.custom.min.js" type="text/javascript"></script>
<script type="text/javascript" src="/js/jquery/ajaxupload.3.6.js"></script>
<script type= "text/javascript">
var cClient = window.parent.getBrowserClient();
$(document).ready(function () {
var button = $('#button1'), interval;
new AjaxUpload(button, {
action: 'processes_doUpload', // I disabled uploads in this example for security reasons
name: 'form',
onSubmit: function (file, ext) {
if (cClient.browser != 'msie') {
$("#uxmsg").html('Uploading...');
$("#uxmsg").fadeIn(2000);
$('#button1').attr('disabled', true);
} else {
document.getElementById("uxfiles").innerHTML = 'Uploading...';
}
if (cClient.browser != 'msie') {
interval = window.setInterval(function () {
var text = button.text();
if (text.length < 13) {
button.text(text + '.');
} else {
button.text('Uploading');
}
}, 200);
}
},
onComplete: function (file, response) {
parent.xReaload();
if (file.length > 24) {
file = file.substr(0, 24) + '..';
}
resp = eval("(" + response + ")");
xcolor = resp.result ? 'green' : 'red';
if (cClient.browser != 'msie') {
$("#uxmsg").fadeOut(1500, function () {
$("#uxmsg").fadeIn(1100);
$("#uxmsg").html('<font color=black>' + file + '</font> <font color=' + xcolor + '>' + resp.msg + '<font>');
});
} else {
document.getElementById("uxfiles").innerHTML = '<font color=black>' + file + '</font> <font color=' + xcolor + '>' + resp.msg + '<font>';
}
button.text('Upload++');
window.clearInterval(interval);
document.getElementById('button1').disabled = false;
$('#button1').attr('disabled', false);
}
});
});
var xclear = function () {
if (cClient.browser != 'msie') {
$("#uxmsg").fadeOut(1500);
} else {
document.getElementById("uxfiles").innerHTML = '<font color=black>'+file+'</font> <font color='+xcolor+'>'+resp.msg+'<font>';
// document.getElementById("uxfiles").style.display = 'block';
$("#uxfiles").html('');
}
button.text('Upload++');
window.clearInterval(interval);
document.getElementById('button1').disabled = false;
$('#button1').attr('disabled',false);
//alert(document.getElementById('button1').id);
//parent.xReaload();
//setTimeout('xclear()', 4000);
}
});
});
var xclear = function(){
if(cClient.browser != 'msie'){
$("#uxmsg").fadeOut(1500);
} else {
$("#uxfiles").html('');
}
}
</script>
</head>
<body>
<table width="99%">
<tbody>
<tr>
<td valign="top">
<li id="e" class="e">
<div class="wrapper">
<table><tr>
<td><input type="button" id="button1" class="button" value="Browse"/></td>
<td><div id="uxfiles">&nbsp;<span id="uxmsg" style="display:none">Select your file</span></div> </td>
</tr></table>
</div>
</li>
</td>
</tr>
</tbody>
</table>
}
</script>
</head>
<body>
<table width="99%">
<tbody>
<tr>
<td valign="top">
<li id="e" class="e">
<div class="wrapper">
<table><tr>
<td><input type="button" id="button1" class="button" value="Browse"/></td>
<td><div id="uxfiles">&nbsp;<span id="uxmsg" style="display:none">Select your file</span></div> </td>
</tr></table>
</div>
</li>
</td>
</tr>
</tbody>
</table>
</div>
</body>