quarantine: family=uploader-dropper (62 fájl)
vhost: clusers.cadline.hu rel_path: clusers/.svn/text-base/user_new_submit.php.svn-base result: quarantined evidence_sha256: 6967d992a9ea9a197dc185dbf43a0d871dba4c5a5c5224ed9b4841f4f11080aa timestamp: 20260718T160424Z finding_ref: 6508 vhost: clusers.cadline.hu rel_path: clusers/user_new_submit.php result: quarantined evidence_sha256: c854211bdbab6a57eb1562aabaa7db338500c4ca11e6dcb72da03358512ec67c timestamp: 20260718T160424Z finding_ref: 6332 vhost: clusers.cadline.hu rel_path: clusers_eng/.svn/text-base/user_new_submit.php.svn-base result: quarantined evidence_sha256: 501b60e0a1a8e89628300b2cf2d62f9523647767288e0b9deb24269bb8f5ecd8 timestamp: 20260718T160424Z finding_ref: 6285 vhost: clusers.cadline.hu rel_path: clusers_eng/user_new_submit.php result: quarantined evidence_sha256: c40d074909d6576b4de42a69c47ad3d0a5ab0d303ce9eb5636d3eeee294d072e timestamp: 20260718T160424Z finding_ref: 6116 vhost: clusers.cadline.hu rel_path: clusers_spa/user_new_submit.php result: quarantined evidence_sha256: b64f6aad0a0107ce36748f719ccf5e7ce36e35a80375b51b2c490d46f5c930bc timestamp: 20260718T160424Z finding_ref: 5931 vhost: clusers.cadline.hu rel_path: editcrm/user_new_submit.php result: quarantined evidence_sha256: b64f6aad0a0107ce36748f719ccf5e7ce36e35a80375b51b2c490d46f5c930bc timestamp: 20260718T160424Z finding_ref: 6103 vhost: crm.cadline.hu rel_path: public/application/helpers/sajatfeltolto.php result: quarantined evidence_sha256: 4b99ac9759922b713dde14d6d6968d578f2bf1f464ca5f92d99f880954981808 timestamp: 20260718T160424Z finding_ref: 5913 vhost: dev.cadline.hu rel_path: php7_update/crm.cadline.hu/application/helpers/sajatfeltolto.php result: quarantined evidence_sha256: 4b99ac9759922b713dde14d6d6968d578f2bf1f464ca5f92d99f880954981808 timestamp: 20260718T160424Z finding_ref: 6761 vhost: dev.cadline.hu rel_path: php7_update/partners.archlinexp.com/application/controllers/admin.php result: quarantined evidence_sha256: 6478891d9ef465846f47f196bec45855da4d86e3d617207348b2549de69ca732 timestamp: 20260718T160424Z finding_ref: 6772 vhost: dev.cadline.hu rel_path: php7_update/partners.archlinexp.com/application/controllers/collection.php result: quarantined evidence_sha256: 623c2d631d8e875f065612f01001082802e2cd4c3088640d3d6c393dec3782dd timestamp: 20260718T160424Z finding_ref: 6765 vhost: dev.cadline.hu rel_path: php7_update/partners.archlinexp.com/application/controllers/forum.php result: quarantined evidence_sha256: 3412487058a8a6bf79254df2d86f5cbf06b8c96adc9b26e645dd537b80ff13db timestamp: 20260718T160424Z finding_ref: 6769 vhost: dev.cadline.hu rel_path: php7_update/partners.archlinexp.com/application/controllers/forum.php~ result: quarantined evidence_sha256: 8a8870bd25fea815ae45a267b82e968b5bbafafac66a0b2bc83b949439403312 timestamp: 20260718T160424Z finding_ref: 6766 vhost: dev.cadline.hu rel_path: php7_update/partners.archlinexp.com/application/controllers/groups.php result: quarantined evidence_sha256: cce23a7e4244cfd82817f25ec0dbb697c22cb1c92425334ee2d163d0e290d921 timestamp: 20260718T160424Z finding_ref: 6774 vhost: dev.cadline.hu rel_path: php7_update/partners.archlinexp.com/application/controllers/objects.php result: quarantined evidence_sha256: 38a24706801b0127273d0776f59e480f1d75b681cbd700038140fef397226303 timestamp: 20260718T160424Z finding_ref: 6767 vhost: dev.cadline.hu rel_path: php7_update/partners.archlinexp.com/application/controllers/projects.php result: quarantined evidence_sha256: 2860e757380bcee28db11d0edb77d54d6a4940c76661d6c71f5ebddfd22f6616 timestamp: 20260718T160424Z finding_ref: 6770 vhost: dev.cadline.hu rel_path: php7_update/partners.archlinexp.com/application/controllers/testforum.php result: quarantined evidence_sha256: 6eb44fd9b69b4cf5a4b0cb71210bb47fab65e8d04ad69b568c640e878cd52986 timestamp: 20260718T160424Z finding_ref: 6773 vhost: dev.cadline.hu rel_path: php7_update/partners.archlinexp.com/application/helpers/sajatfeltolto.php result: quarantined evidence_sha256: 75359fbae41809f21d9fb056c84ae525b579ad78f2e688033c3ac583b9dba833 timestamp: 20260718T160424Z finding_ref: 6831 vhost: dev.cadline.hu rel_path: php7_update/partners.archlinexp.com/application/views/objects/submit.php result: quarantined evidence_sha256: 2cc8c8932a3a8f6e5137226df6e6b6e04836874f611f9b1ca366a0c3b96915ff timestamp: 20260718T160424Z finding_ref: 6801 vhost: dev.cadline.hu rel_path: php7_update/partners.archlinexp.com/application/views/projects/submit.php result: quarantined evidence_sha256: a60aa86f2aafb6a1fbfab05e06f158279b701126547b74e6c4d96599a487c7dc timestamp: 20260718T160424Z finding_ref: 6802 vhost: dev.cadline.hu rel_path: php7_update/partners.archlinexp.com/public/order/nonpro.php result: quarantined evidence_sha256: c1a490b958a2c4c3b108788f5a11b1d2271539b2a3127ed3af5c04b1032f72a7 timestamp: 20260718T160424Z finding_ref: 6884 vhost: dev.cadline.hu rel_path: php7_update/partners.archlinexp.com/public/order/szerver.php result: quarantined evidence_sha256: b86dc1faaa6db4787cd84016f05a9789aa2fe331c0dc9f5c1110fc49faba4187 timestamp: 20260718T160424Z finding_ref: 6885 vhost: dev.cadline.hu rel_path: php7_update/partners.archlinexp.com/public/order/szerver2.php result: quarantined evidence_sha256: fbffb453e8e48ee0a2888583a65ff6aac1315ae8843ea81088960b49bf93d099 timestamp: 20260718T160424Z finding_ref: 6883 vhost: dev.cadline.hu rel_path: php7_update/sub.archline.hu/components/com_showroom/views/upload/view.html.php result: quarantined evidence_sha256: be23b29230dc83d9194c6b3047dec8b7693d8ff582880de84399d41e57a968e7 timestamp: 20260718T160424Z finding_ref: 6888 vhost: dev.cadline.hu rel_path: tcexam/admin/code/tce_functions_upload.php result: quarantined evidence_sha256: 526624f3cb1ffec1b482de63aac1ef343a36c7670eac72d45397d47813cfe5fc timestamp: 20260718T160424Z finding_ref: 6922 vhost: partners.archlinexp.com rel_path: application/controllers/admin.php result: quarantined evidence_sha256: 2bd1ff9d0a4f74d48be91709e433f190bbd91cbc65ab251c0daeba252573af55 timestamp: 20260718T160424Z finding_ref: 5316 vhost: partners.archlinexp.com rel_path: application/controllers/collection.php result: quarantined evidence_sha256: 24937d9c44f51eb173223c5cf5271f02869850ac07a2b8bb03c83845a57666be timestamp: 20260718T160424Z finding_ref: 5309 vhost: partners.archlinexp.com rel_path: application/controllers/forum.php result: quarantined evidence_sha256: dc04c2be6ceb85d87c001033e28d9f26e7f0aaff3ca367ba58b66202ac951087 timestamp: 20260718T160424Z finding_ref: 5313 vhost: partners.archlinexp.com rel_path: application/controllers/forum.php~ result: quarantined evidence_sha256: bc5530aba3a1c3ad0e26f50d32bdd4e9e4e9cd9ed3b5985e87dba6f7d7fc936c timestamp: 20260718T160424Z finding_ref: 5310 vhost: partners.archlinexp.com rel_path: application/controllers/groups.php result: quarantined evidence_sha256: fdcb90729c1adf9157b1bab5c026f02b89deb9a847ebb04809ad4676527d6387 timestamp: 20260718T160424Z finding_ref: 5318 vhost: partners.archlinexp.com rel_path: application/controllers/objects.php result: quarantined evidence_sha256: b6f11c4b3be5f7f0a5a2e18c82cf8861937fdbc3ee9b317d03ec4ec923cdaf5f timestamp: 20260718T160424Z finding_ref: 5311 vhost: partners.archlinexp.com rel_path: application/controllers/projects.php result: quarantined evidence_sha256: b42c1a5d2f1fefe1598248fc7213915e840173c5196c1022ec40dde2d01446a6 timestamp: 20260718T160424Z finding_ref: 5314 vhost: partners.archlinexp.com rel_path: application/controllers/testforum.php result: quarantined evidence_sha256: b56e2ebdd92c705cfee85f13a961ad4cc6a3811524f511e5f65b6bc0d7218fa2 timestamp: 20260718T160424Z finding_ref: 5317 vhost: partners.archlinexp.com rel_path: application/helpers/sajatfeltolto.php result: quarantined evidence_sha256: 75359fbae41809f21d9fb056c84ae525b579ad78f2e688033c3ac583b9dba833 timestamp: 20260718T160424Z finding_ref: 5375 vhost: partners.archlinexp.com rel_path: application/views/objects/submit.php result: quarantined evidence_sha256: 79a5a4a225083fadcdbfd71ac01d201e386ec1aa5535726917d9c555dc8534d0 timestamp: 20260718T160424Z finding_ref: 5345 vhost: partners.archlinexp.com rel_path: application/views/projects/submit.php result: quarantined evidence_sha256: 26abc82bae9ad062f66a6fc78021fdb126eebc56d1b77527148c2773cf5c0c44 timestamp: 20260718T160424Z finding_ref: 5346 vhost: partners.archlinexp.com rel_path: public/order/nonpro.php result: quarantined evidence_sha256: ced4101b56c89a10905dec6c040e30953f093bea56cbbe66c970826ce31c9411 timestamp: 20260718T160424Z finding_ref: 5431 vhost: partners.archlinexp.com rel_path: public/order/szerver.php result: quarantined evidence_sha256: 7b8dee9c5d3bc7610ae0983b64bf14ed45468a114c644cee34849d503c6dc9d7 timestamp: 20260718T160424Z finding_ref: 5432 vhost: partners.archlinexp.com rel_path: public/order/szerver2.php result: quarantined evidence_sha256: e719641444395e6412e4bbe9a2c485ebfa20efc84d340c4b6ae2f6561a1f7464 timestamp: 20260718T160424Z finding_ref: 5430 vhost: partners.archlinexp.com rel_path: public/order/uploadDocument.php result: quarantined evidence_sha256: caff146c66537fbbb7dbafe119045537ba0005db4a102c720ad6b5ff674b0eb6 timestamp: 20260718T160424Z finding_ref: 5429 vhost: partners.archlinexp.com rel_path: public/resourcemanager/uploader.php result: quarantined evidence_sha256: fdf26f52fcd52019b8c9a16ea80bbd34be04fb1ab65aa63ecae7c11cb53e0c80 timestamp: 20260718T160424Z finding_ref: 5428 vhost: tcexam.archline.hu rel_path: admin/code/tce_functions_upload.php result: quarantined evidence_sha256: 73b304e867c9d32a20013d492c8d8d2614acd86580427b378b1be524576311e5 timestamp: 20260718T160424Z finding_ref: 4830 vhost: www.cadline.hu rel_path: application/controllers/admin.php result: quarantined evidence_sha256: dc2640ce42b3227552feacd9dc8b9d0ae32c0f0343d66c75c9ddad0ba3b6af38 timestamp: 20260718T160424Z finding_ref: 5450 vhost: www.cadline.hu rel_path: application/controllers/collection.php result: quarantined evidence_sha256: a592d4c5753ffc7aa532296c9a64057714541e62efed7eca8e368d52343d1606 timestamp: 20260718T160424Z finding_ref: 5443 vhost: www.cadline.hu rel_path: application/controllers/forum.php result: quarantined evidence_sha256: 9ff320957968cee7484108a7546a4ac2b6bf092fff325c7327b312ab382d632b timestamp: 20260718T160424Z finding_ref: 5447 vhost: www.cadline.hu rel_path: application/controllers/forum.php~ result: quarantined evidence_sha256: bc5530aba3a1c3ad0e26f50d32bdd4e9e4e9cd9ed3b5985e87dba6f7d7fc936c timestamp: 20260718T160424Z finding_ref: 5444 vhost: www.cadline.hu rel_path: application/controllers/groups.php result: quarantined evidence_sha256: fdcb90729c1adf9157b1bab5c026f02b89deb9a847ebb04809ad4676527d6387 timestamp: 20260718T160424Z finding_ref: 5452 vhost: www.cadline.hu rel_path: application/controllers/objects.php result: quarantined evidence_sha256: b6f11c4b3be5f7f0a5a2e18c82cf8861937fdbc3ee9b317d03ec4ec923cdaf5f timestamp: 20260718T160424Z finding_ref: 5445 vhost: www.cadline.hu rel_path: application/controllers/projects.php result: quarantined evidence_sha256: b42c1a5d2f1fefe1598248fc7213915e840173c5196c1022ec40dde2d01446a6 timestamp: 20260718T160424Z finding_ref: 5448 vhost: www.cadline.hu rel_path: application/controllers/testforum.php result: quarantined evidence_sha256: b56e2ebdd92c705cfee85f13a961ad4cc6a3811524f511e5f65b6bc0d7218fa2 timestamp: 20260718T160424Z finding_ref: 5451 vhost: www.cadline.hu rel_path: application/helpers/sajatfeltolto.php result: quarantined evidence_sha256: 75359fbae41809f21d9fb056c84ae525b579ad78f2e688033c3ac583b9dba833 timestamp: 20260718T160424Z finding_ref: 5509 vhost: www.cadline.hu rel_path: application/views/objects/submit.php result: quarantined evidence_sha256: 79a5a4a225083fadcdbfd71ac01d201e386ec1aa5535726917d9c555dc8534d0 timestamp: 20260718T160424Z finding_ref: 5479 vhost: www.cadline.hu rel_path: application/views/projects/submit.php result: quarantined evidence_sha256: 26abc82bae9ad062f66a6fc78021fdb126eebc56d1b77527148c2773cf5c0c44 timestamp: 20260718T160424Z finding_ref: 5480 vhost: www.cadline.hu rel_path: public/mysqldumper/filemanagement.php result: quarantined evidence_sha256: 435dd6ab5a4b1cbdf6b39ce78a24b58045bdcbdb8e60504d730d7b7c9dce506a timestamp: 20260718T160424Z finding_ref: 5643 vhost: www.cadline.hu rel_path: public/mysqldumper/install.php result: quarantined evidence_sha256: 92387c48234e05c051bf4eba14fbecd2d9d4ccb6075078c00239bd187a8eecfd timestamp: 20260718T160424Z finding_ref: 5644 vhost: www.cadline.hu rel_path: public/resourcemanager/uploader.php result: quarantined evidence_sha256: fdf26f52fcd52019b8c9a16ea80bbd34be04fb1ab65aa63ecae7c11cb53e0c80 timestamp: 20260718T160424Z finding_ref: 5573 vhost: www.cadline.hu rel_path: public/swf/upload/upload-file.php result: quarantined evidence_sha256: 38f4abfe83820372777b81204184f90f3a03d7f16f2889897dc4ddb60b9d6bf1 timestamp: 20260718T160424Z finding_ref: 5868 vhost: www.cadline.hu rel_path: public/tcexam/admin/code/tce_functions_upload.php result: quarantined evidence_sha256: 73b304e867c9d32a20013d492c8d8d2614acd86580427b378b1be524576311e5 timestamp: 20260718T160424Z finding_ref: 5901 vhost: www.cadline.hu rel_path: public/tikiwiki/tiki-edit_article.php result: quarantined evidence_sha256: d046d94287a9f324665227b4dd88c9e5716ae4352a779f73fc172dd8b2e347eb timestamp: 20260718T160424Z finding_ref: 5658 vhost: www.cadline.hu rel_path: public/tikiwiki/tiki-edit_submission.php result: quarantined evidence_sha256: e8b3d1e22d261471ddd27360235923ef4093f918a38cb2e53e3906f35cc593ad timestamp: 20260718T160424Z finding_ref: 5659 vhost: www.cadline.hu rel_path: public/tikiwiki/tiki-editpage.php result: quarantined evidence_sha256: 0e43540567d88d028ff7d535b8d628a0387a94d94c349bfe88cc38c700064811 timestamp: 20260718T160424Z finding_ref: 5661 vhost: www.cadline.hu rel_path: public/tikiwiki/tiki-map_upload.php result: quarantined evidence_sha256: 15f06e8e4479abe0c9919e2347cafaf02e3926fcc983ed0d6501db43aeb2641b timestamp: 20260718T160424Z finding_ref: 5663 vhost: www.cadline.hu rel_path: public/tikiwiki/tiki-webmail.php result: quarantined evidence_sha256: 3e3c705ec10920aa496c8ff0a3324165a5045306b530359f18f02b538dc7977f timestamp: 20260718T160424Z finding_ref: 5660
This commit is contained in:
imrcli-remediator
parent
e792fd3172
commit
31ebdf84fa
@ -0,0 +1,122 @@
|
|||||||
|
<?php
|
||||||
|
//============================================================+
|
||||||
|
// File name : tce_functions_upload.php
|
||||||
|
// Begin : 2001-11-19
|
||||||
|
// Last Update : 2010-09-21
|
||||||
|
//
|
||||||
|
// Description : Upload functions.
|
||||||
|
//
|
||||||
|
// Author: Nicola Asuni
|
||||||
|
//
|
||||||
|
// (c) Copyright:
|
||||||
|
// Nicola Asuni
|
||||||
|
// Tecnick.com LTD
|
||||||
|
// Manor Coach House, Church Hill
|
||||||
|
// Aldershot, Hants, GU12 4RQ
|
||||||
|
// UK
|
||||||
|
// www.tecnick.com
|
||||||
|
// info@tecnick.com
|
||||||
|
//
|
||||||
|
// License:
|
||||||
|
// Copyright (C) 2004-2010 Nicola Asuni - Tecnick.com LTD
|
||||||
|
//
|
||||||
|
// This program is free software: you can redistribute it and/or modify
|
||||||
|
// it under the terms of the GNU Affero General Public License as
|
||||||
|
// published by the Free Software Foundation, either version 3 of the
|
||||||
|
// License, or (at your option) any later version.
|
||||||
|
//
|
||||||
|
// This program is distributed in the hope that it will be useful,
|
||||||
|
// but WITHOUT ANY WARRANTY; without even the implied warranty of
|
||||||
|
// MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
||||||
|
// GNU Affero General Public License for more details.
|
||||||
|
//
|
||||||
|
// You should have received a copy of the GNU Affero General Public License
|
||||||
|
// along with this program. If not, see <http://www.gnu.org/licenses/>.
|
||||||
|
//
|
||||||
|
// Additionally, you can't remove, move or hide the original TCExam logo,
|
||||||
|
// copyrights statements and links to Tecnick.com and TCExam websites.
|
||||||
|
//
|
||||||
|
// See LICENSE.TXT file for more information.
|
||||||
|
//============================================================+
|
||||||
|
|
||||||
|
/**
|
||||||
|
* @file
|
||||||
|
* Functions to upload files.
|
||||||
|
* @package com.tecnick.tcexam.admin
|
||||||
|
* @author Nicola Asuni
|
||||||
|
* @since 2001-11-19
|
||||||
|
*/
|
||||||
|
|
||||||
|
/**
|
||||||
|
* Check if the uploaded file extension is allowed.
|
||||||
|
* @author Nicola Asuni
|
||||||
|
* @since 2001-11-19
|
||||||
|
* @param $filename (string) the filename
|
||||||
|
* @return true in case of allowed file type, false otherwise
|
||||||
|
*/
|
||||||
|
function F_is_allowed_upload($filename) {
|
||||||
|
if (!defined('K_ALLOWED_UPLOAD_EXTENSIONS')) {
|
||||||
|
return false;
|
||||||
|
}
|
||||||
|
$allowed_extensions = unserialize(K_ALLOWED_UPLOAD_EXTENSIONS);
|
||||||
|
$path_parts = pathinfo($filename);
|
||||||
|
if (in_array(strtolower($path_parts['extension']), $allowed_extensions)) {
|
||||||
|
return true;
|
||||||
|
}
|
||||||
|
return false;
|
||||||
|
}
|
||||||
|
|
||||||
|
/**
|
||||||
|
* Uploads image file to the server.
|
||||||
|
* @author Nicola Asuni
|
||||||
|
* @since 2010-06-12
|
||||||
|
* @param $fieldname (string) form field name containing the source file path
|
||||||
|
* @param $uploaddir (string) upload directory
|
||||||
|
* @return mixed file name or false in case of error
|
||||||
|
*/
|
||||||
|
function F_upload_file($fieldname, $uploaddir) {
|
||||||
|
global $l;
|
||||||
|
require_once('../config/tce_config.php');
|
||||||
|
// sanitize file name
|
||||||
|
$filename = preg_replace('/[\s]/', '_', $_FILES[$fieldname]['name']);
|
||||||
|
$filename = preg_replace('/[^a-zA-Z0-9_\.\-]/', '', $filename);
|
||||||
|
$filepath = $uploaddir.$filename;
|
||||||
|
if (F_is_allowed_upload($filename) AND move_uploaded_file($_FILES[$fieldname]['tmp_name'], $filepath)) {
|
||||||
|
F_print_error('MESSAGE', htmlspecialchars($filename).': '.$l['m_upload_yes']);
|
||||||
|
return $filename;
|
||||||
|
}
|
||||||
|
F_print_error('ERROR', htmlspecialchars($filename).': '.$l['m_upload_not'].'');
|
||||||
|
return FALSE;
|
||||||
|
}
|
||||||
|
|
||||||
|
/**
|
||||||
|
* returns the file size in bytes
|
||||||
|
* @author Nicola Asuni
|
||||||
|
* @since 2001-11-19
|
||||||
|
* @param $filetocheck (string) file to check (local path or URL)
|
||||||
|
* @return mixed file size in bytes or false in case of error
|
||||||
|
*/
|
||||||
|
function F_read_file_size($filetocheck) {
|
||||||
|
global $l;
|
||||||
|
require_once('../config/tce_config.php');
|
||||||
|
$filesize = 0;
|
||||||
|
if($fp = fopen($filetocheck, 'rb')) {
|
||||||
|
$s_array = fstat($fp);
|
||||||
|
if($s_array['size']) {
|
||||||
|
$filesize = $s_array['size'];
|
||||||
|
} else {//read size from remote file (very slow function)
|
||||||
|
while(!feof($fp)) {
|
||||||
|
$content = fread($fp, 1);
|
||||||
|
$filesize++;
|
||||||
|
}
|
||||||
|
}
|
||||||
|
fclose($fp);
|
||||||
|
return($filesize);
|
||||||
|
}
|
||||||
|
F_print_error('ERROR', basename($filetocheck).': '.$l['m_openfile_not']);
|
||||||
|
return FALSE;
|
||||||
|
}
|
||||||
|
|
||||||
|
//============================================================+
|
||||||
|
// END OF FILE
|
||||||
|
//============================================================+
|
||||||
@ -0,0 +1,15 @@
|
|||||||
|
{
|
||||||
|
"finding_ref": "4830",
|
||||||
|
"log_excerpt": "[quarantine] tcexam.archline.hu:admin/code/tce_functions_upload.php -> quarantined (dest=/var/lib/web-hids/quarantine/var/www/hosting/archline.hu/tcexam/admin/code/tce_functions_upload.php)",
|
||||||
|
"original_sha256": "73b304e867c9d32a20013d492c8d8d2614acd86580427b378b1be524576311e5",
|
||||||
|
"original_stat": {
|
||||||
|
"gid": 30037,
|
||||||
|
"mtime": 1599048198,
|
||||||
|
"size": 3943,
|
||||||
|
"uid": 11669
|
||||||
|
},
|
||||||
|
"rel_path": "admin/code/tce_functions_upload.php",
|
||||||
|
"result": "quarantined",
|
||||||
|
"timestamp": "20260718T160424Z",
|
||||||
|
"vhost": "tcexam.archline.hu"
|
||||||
|
}
|
||||||
File diff suppressed because it is too large
Load Diff
@ -0,0 +1,15 @@
|
|||||||
|
{
|
||||||
|
"finding_ref": "5316",
|
||||||
|
"log_excerpt": "[quarantine] partners.archlinexp.com:application/controllers/admin.php -> quarantined (dest=/var/lib/web-hids/quarantine/var/www/hosting/archlinexp.com/partners/application/controllers/admin.php)",
|
||||||
|
"original_sha256": "2bd1ff9d0a4f74d48be91709e433f190bbd91cbc65ab251c0daeba252573af55",
|
||||||
|
"original_stat": {
|
||||||
|
"gid": 30037,
|
||||||
|
"mtime": 1739518151,
|
||||||
|
"size": 143599,
|
||||||
|
"uid": 11669
|
||||||
|
},
|
||||||
|
"rel_path": "application/controllers/admin.php",
|
||||||
|
"result": "quarantined",
|
||||||
|
"timestamp": "20260718T160424Z",
|
||||||
|
"vhost": "partners.archlinexp.com"
|
||||||
|
}
|
||||||
File diff suppressed because it is too large
Load Diff
@ -0,0 +1,15 @@
|
|||||||
|
{
|
||||||
|
"finding_ref": "5309",
|
||||||
|
"log_excerpt": "[quarantine] partners.archlinexp.com:application/controllers/collection.php -> quarantined (dest=/var/lib/web-hids/quarantine/var/www/hosting/archlinexp.com/partners/application/controllers/collection.php)",
|
||||||
|
"original_sha256": "24937d9c44f51eb173223c5cf5271f02869850ac07a2b8bb03c83845a57666be",
|
||||||
|
"original_stat": {
|
||||||
|
"gid": 30037,
|
||||||
|
"mtime": 1423824406,
|
||||||
|
"size": 42503,
|
||||||
|
"uid": 11669
|
||||||
|
},
|
||||||
|
"rel_path": "application/controllers/collection.php",
|
||||||
|
"result": "quarantined",
|
||||||
|
"timestamp": "20260718T160424Z",
|
||||||
|
"vhost": "partners.archlinexp.com"
|
||||||
|
}
|
||||||
File diff suppressed because it is too large
Load Diff
@ -0,0 +1,15 @@
|
|||||||
|
{
|
||||||
|
"finding_ref": "5313",
|
||||||
|
"log_excerpt": "[quarantine] partners.archlinexp.com:application/controllers/forum.php -> quarantined (dest=/var/lib/web-hids/quarantine/var/www/hosting/archlinexp.com/partners/application/controllers/forum.php)",
|
||||||
|
"original_sha256": "dc04c2be6ceb85d87c001033e28d9f26e7f0aaff3ca367ba58b66202ac951087",
|
||||||
|
"original_stat": {
|
||||||
|
"gid": 30037,
|
||||||
|
"mtime": 1553076035,
|
||||||
|
"size": 79090,
|
||||||
|
"uid": 11669
|
||||||
|
},
|
||||||
|
"rel_path": "application/controllers/forum.php",
|
||||||
|
"result": "quarantined",
|
||||||
|
"timestamp": "20260718T160424Z",
|
||||||
|
"vhost": "partners.archlinexp.com"
|
||||||
|
}
|
||||||
File diff suppressed because it is too large
Load Diff
@ -0,0 +1,15 @@
|
|||||||
|
{
|
||||||
|
"finding_ref": "5310",
|
||||||
|
"log_excerpt": "[quarantine] partners.archlinexp.com:application/controllers/forum.php~ -> quarantined (dest=/var/lib/web-hids/quarantine/var/www/hosting/archlinexp.com/partners/application/controllers/forum.php~)",
|
||||||
|
"original_sha256": "bc5530aba3a1c3ad0e26f50d32bdd4e9e4e9cd9ed3b5985e87dba6f7d7fc936c",
|
||||||
|
"original_stat": {
|
||||||
|
"gid": 30037,
|
||||||
|
"mtime": 1404821325,
|
||||||
|
"size": 80439,
|
||||||
|
"uid": 11669
|
||||||
|
},
|
||||||
|
"rel_path": "application/controllers/forum.php~",
|
||||||
|
"result": "quarantined",
|
||||||
|
"timestamp": "20260718T160424Z",
|
||||||
|
"vhost": "partners.archlinexp.com"
|
||||||
|
}
|
||||||
@ -0,0 +1,340 @@
|
|||||||
|
<?php
|
||||||
|
class Groups extends Controller
|
||||||
|
{
|
||||||
|
function Groups()
|
||||||
|
{
|
||||||
|
parent::Controller();
|
||||||
|
$this->lang->load('site', $this->muser->user['lang']);
|
||||||
|
$this->load->model('mgroups');
|
||||||
|
}
|
||||||
|
|
||||||
|
|
||||||
|
function index()
|
||||||
|
{
|
||||||
|
$this->kategoria();
|
||||||
|
}
|
||||||
|
|
||||||
|
function upload(){
|
||||||
|
if(hun())
|
||||||
|
$data['title'] = 'ARCHLine.XP Új Csoport';
|
||||||
|
else
|
||||||
|
$data['title'] = 'ARCHLine.XP New Group';
|
||||||
|
|
||||||
|
if($this->uri->segment(3)=="java"){
|
||||||
|
$data['tartalom']='groups/java';
|
||||||
|
}
|
||||||
|
else if($this->uri->segment(3)=="simple"){
|
||||||
|
$data['tartalom']='groups/simple';
|
||||||
|
}
|
||||||
|
else{
|
||||||
|
$data['tartalom']='groups/upload';
|
||||||
|
}
|
||||||
|
$data['csik']=array('home','groups');
|
||||||
|
$data['javascript'] = array('onUploadFinished','dl_select');
|
||||||
|
$data['kategoriak'] = $this->muser->get_kategoriak('group');
|
||||||
|
|
||||||
|
$this->load->view('site',$data);
|
||||||
|
}
|
||||||
|
|
||||||
|
function uploadnew(){
|
||||||
|
redirect('/collection/upload/'.$this->uri->segment(3).'/group');
|
||||||
|
|
||||||
|
if(hun())
|
||||||
|
$data['title'] = 'ARCHLine.XP Új Csoport';
|
||||||
|
else
|
||||||
|
$data['title'] = 'ARCHLine.XP New Group';
|
||||||
|
|
||||||
|
if($this->uri->segment(3)!=""/* && $this->uri->segment(4)!=""*/){
|
||||||
|
$data["fajl"] = $this->uri->segment(3);
|
||||||
|
|
||||||
|
$data["eredeti"] = $this->uri->segment(4);
|
||||||
|
|
||||||
|
|
||||||
|
$fajlnev = '/home/vendeg/'.$this->uri->segment(3);
|
||||||
|
$fa = fopen( $fajlnev, "r" ) or die("Upload error"); //or die("$fajlnev nem nyithato meg");
|
||||||
|
$ol = fgets( $fa, 1024);
|
||||||
|
$adatok = explode("#",$ol);
|
||||||
|
// if( count($adatok) == 5){
|
||||||
|
$lang = $this->muser->user['lang'];
|
||||||
|
$honnan = "/home/vendeg/".$adatok[2];
|
||||||
|
$kepnev = time()."_".$adatok[3];
|
||||||
|
$ide= "public/img/groups/".$lang."/".$kepnev;
|
||||||
|
//$ide= "public/img/groups/temp/".$kepnev;
|
||||||
|
if( copy($honnan,$ide) ){
|
||||||
|
$adatok[3] = $ide;
|
||||||
|
}else{
|
||||||
|
$adatok[3] = "";
|
||||||
|
}
|
||||||
|
|
||||||
|
|
||||||
|
$data["fajl"] = $adatok[0];
|
||||||
|
$data["eredeti"] = $adatok[1];
|
||||||
|
$data["vendegkep"] = $adatok[2];
|
||||||
|
$data["kepalap"] = $adatok[3];
|
||||||
|
$data["cim"] = $adatok[4];
|
||||||
|
|
||||||
|
|
||||||
|
// $kepresz = substr($data["kepalap"],0,18);
|
||||||
|
// print "rész: ".$kepresz.$lang."/".$data["kepalap"];
|
||||||
|
|
||||||
|
// }
|
||||||
|
fclose($fa);
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
$data['tartalom']='groups/uploadnew';
|
||||||
|
}else{
|
||||||
|
redirect('groups/upload');
|
||||||
|
}
|
||||||
|
|
||||||
|
$data['csik']=array('home','groups');
|
||||||
|
$data['javascript'] = array('objfeltoltes');
|
||||||
|
|
||||||
|
$data['kategoriak'] = $this->muser->get_kategoriak('group');
|
||||||
|
|
||||||
|
$this->load->view('site',$data);
|
||||||
|
}
|
||||||
|
|
||||||
|
function simple(){
|
||||||
|
if(hun())
|
||||||
|
$data['title'] = 'ARCHLine.XP Új Csoport';
|
||||||
|
else
|
||||||
|
$data['title'] = 'ARCHLine.XP New Group';
|
||||||
|
$data['tartalom']='groups/simple';
|
||||||
|
$data['csik']=array('home','groups');
|
||||||
|
|
||||||
|
$this->load->view('site',$data);
|
||||||
|
}
|
||||||
|
|
||||||
|
function kat(){
|
||||||
|
|
||||||
|
if(hun())
|
||||||
|
$data['title'] = 'ARCHLine.XP Csoportok';
|
||||||
|
else
|
||||||
|
$data['title'] = 'ARCHLine.XP Groups';
|
||||||
|
|
||||||
|
$data['tartalom']='groups/kat';
|
||||||
|
$data['csik']=array('home','groups');
|
||||||
|
$data['javascript']=array('dl_select');
|
||||||
|
|
||||||
|
if(!$this->uri->segment(3))
|
||||||
|
$kat = 2;
|
||||||
|
else
|
||||||
|
$kat = $this->uri->segment(3);
|
||||||
|
$csoportok = $this->mgroups->get_bykat($kat);
|
||||||
|
$data['groups']=$csoportok;
|
||||||
|
|
||||||
|
$data['kategoriak'] = $this->muser->get_kategoriak('group');
|
||||||
|
|
||||||
|
$data['aktiv']=$kat;
|
||||||
|
$this->load->view('site',$data);
|
||||||
|
}
|
||||||
|
|
||||||
|
function kategoria(){
|
||||||
|
if(hun())
|
||||||
|
$data['title'] = 'ARCHLine.XP Csoportok';
|
||||||
|
else
|
||||||
|
$data['title'] = 'ARCHLine.XP Groups';
|
||||||
|
|
||||||
|
$data['tartalom']='groups/kat';
|
||||||
|
$data['csik']=array('home','groups');
|
||||||
|
$data['javascript']=array('dl_select');
|
||||||
|
|
||||||
|
if(!$this->uri->segment(3) || !( $this->muser->letezokategoria($this->uri->segment(3),'group') ) )
|
||||||
|
$kat = 20;
|
||||||
|
else
|
||||||
|
$kat = $this->uri->segment(3);
|
||||||
|
|
||||||
|
redirect("/collection/kategoria/".$kat);
|
||||||
|
|
||||||
|
$data['groups']=$this->mgroups->get_bykategoria($kat);
|
||||||
|
|
||||||
|
$kategoriak = $this->muser->get_kategoriak('group');
|
||||||
|
$kategoriak = $this->mgroups->get_darab($kategoriak);
|
||||||
|
|
||||||
|
$data['kategoriak'] = $kategoriak;
|
||||||
|
|
||||||
|
$data['aktiv']=$kat;
|
||||||
|
|
||||||
|
$data['title'] .= " - " . $this->muser->get_katName($kat);
|
||||||
|
|
||||||
|
$this->load->view('site',$data);
|
||||||
|
}
|
||||||
|
|
||||||
|
function submit(){
|
||||||
|
$lang = $this->muser->user['lang'];
|
||||||
|
$tempFolder = "/home/vendeg/"; //ide másolja az FTP applet a fájlt
|
||||||
|
$storeFolder = "/home/cadline/public_html/website/public/groups/".$lang."/"; //mi itt szeretnénk tárolni
|
||||||
|
$error = "";
|
||||||
|
$kep = "";
|
||||||
|
$link = "public/groups/".$lang."/";
|
||||||
|
|
||||||
|
// ha java-val:
|
||||||
|
if( isset($_POST["tempFilenameField"]) ){
|
||||||
|
$tempFilename = $_POST["tempFilenameField"]; //ezen a néven kerül feltöltésre a fájl (pl. 123456.file)
|
||||||
|
$originalFilename = $_POST["originalFilenameField"]; //ez volt az eredeti neve (pl. szoveg.doc)
|
||||||
|
$storeFilename = time()."_".$originalFilename; //ezen a neven taroljuk mi (pl. 2347686323_szoveg.doc)
|
||||||
|
|
||||||
|
|
||||||
|
$storePath = $storeFolder.$storeFilename;
|
||||||
|
$tempPath = $tempFolder.$tempFilename;
|
||||||
|
|
||||||
|
if ((strlen($tempFilename) < 3) || (strlen($originalFilename) < 3)){
|
||||||
|
die ("Hibás fáljnevek!");
|
||||||
|
$error .= "hiba";
|
||||||
|
}
|
||||||
|
|
||||||
|
if (!copy($tempPath,$storePath)){
|
||||||
|
$error .= "nem másoltam.<br>mit: ".$tempPath.", hova: ".$storePath;
|
||||||
|
}else{
|
||||||
|
$link .= $storeFilename;
|
||||||
|
$prSize = 6500;
|
||||||
|
$prSize = filesize($storePath); //??
|
||||||
|
$this->kep(&$kep);
|
||||||
|
}
|
||||||
|
|
||||||
|
}
|
||||||
|
// ha egyszerusitve:
|
||||||
|
else if ($_FILES["originalFilenameField"]["error"]==0){
|
||||||
|
|
||||||
|
$storeFolder = "public/groups/".$lang."/";
|
||||||
|
$storeFilename= $storeFolder.time()."_". $_FILES["originalFilenameField"]["name"];
|
||||||
|
|
||||||
|
$tempFilename = $_FILES["originalFilenameField"]["tmp_name"];
|
||||||
|
|
||||||
|
if (copy($_FILES["originalFilenameField"]["tmp_name"],$storeFilename)){
|
||||||
|
$prFile = $storeFilename;
|
||||||
|
$prSize = $_FILES['originalFilenameField']['size'];
|
||||||
|
}else{
|
||||||
|
$prFile = "NULL";
|
||||||
|
$error .= "<br />nem másoltam.<br>ezt: ".$_FILES["originalFilenameField"]["tmp_name"].", ide: ".$storeFilename;
|
||||||
|
}
|
||||||
|
$originalFilename = $_FILES["originalFilenameField"]["name"];
|
||||||
|
$storePath = $storeFilename;
|
||||||
|
|
||||||
|
$this->kep(&$kep);
|
||||||
|
|
||||||
|
$link = $storeFilename;
|
||||||
|
|
||||||
|
}else{
|
||||||
|
$error = "nincs csoport fajl";
|
||||||
|
}
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
// Felvétel az adatbázisba
|
||||||
|
if(!$error){
|
||||||
|
$ujgr->email = $_POST["projectEmailField"];
|
||||||
|
$ujgr->title = $_POST["projhectNameField"];
|
||||||
|
$ujgr->meret = $prSize;
|
||||||
|
$ujgr->datum = date('Y-m-d H:i:s',time());
|
||||||
|
$ujgr->nyelv = $lang;
|
||||||
|
$ujgr->kep = $kep;
|
||||||
|
$ujgr->kategoria = $_POST["kategoria"];
|
||||||
|
$ujgr->text = $_POST["projectDescriptionField"];
|
||||||
|
$ujgr->group = $link;
|
||||||
|
$ujgr->szerzo = $_POST["SzerzoField"];
|
||||||
|
|
||||||
|
if( $_POST["kategoria"] > 20 )
|
||||||
|
$ujgr->kat_id = $_POST["kategoria"];
|
||||||
|
else
|
||||||
|
$ujgr->kat_id = "";
|
||||||
|
|
||||||
|
$this->mgroups->newgroup($ujgr);
|
||||||
|
|
||||||
|
//print "<br /> <b>Új csoport felvéve!</b>";
|
||||||
|
}else{
|
||||||
|
//print "<br /> <b>Nem került új csoport az adatbázisba!</b>";
|
||||||
|
//print $error;
|
||||||
|
}
|
||||||
|
|
||||||
|
//ha nem volt print:
|
||||||
|
redirect('groups/kategoria/'.$_POST["kategoria"]);
|
||||||
|
}
|
||||||
|
|
||||||
|
function submitnew(){
|
||||||
|
$lang = $this->muser->user['lang'];
|
||||||
|
$tempFolder = "/home/vendeg/"; //ide másolja az FTP applet a fájlt
|
||||||
|
$storeFolder = "/home/cadline/public_html/website/public/groups/".$lang."/"; //mi itt szeretnénk tárolni
|
||||||
|
$error = "";
|
||||||
|
$kep = "";
|
||||||
|
|
||||||
|
$fajlnev = $_POST["originalFilenameField"]; // ez van a vendegnel
|
||||||
|
$fajlnev2 = $_POST["eredetinev"]; // ez legyen a publicban
|
||||||
|
$fajl = $tempFolder.$fajlnev;
|
||||||
|
|
||||||
|
$ido = time();
|
||||||
|
|
||||||
|
$storeFilename= $storeFolder.$ido."_".$fajlnev2;
|
||||||
|
|
||||||
|
|
||||||
|
if (copy($fajl,$storeFilename)){
|
||||||
|
$prFile = $storeFilename;
|
||||||
|
$prSize = filesize($storeFilename);
|
||||||
|
// print " Sikerült a másolás! ";
|
||||||
|
}else{
|
||||||
|
$prFile = "NULL";
|
||||||
|
$error .= "Nem másoltam át a fájlt.<br />Mit: ".$fajlnev.", Hova: ".$fajlnev2;
|
||||||
|
}
|
||||||
|
|
||||||
|
$link = "public/groups/".$lang."/".$ido."_".$fajlnev2;
|
||||||
|
|
||||||
|
$kep = $_POST["kepalap"];
|
||||||
|
$this->kep(&$kep);
|
||||||
|
|
||||||
|
|
||||||
|
// új kategória felvétele, ha megadták
|
||||||
|
if( $_POST["ujkat"] != "" ){
|
||||||
|
if(hun()){
|
||||||
|
$nevhun = $_POST["ujkat"];
|
||||||
|
$neveng = "";
|
||||||
|
}else{
|
||||||
|
$nevhun = "";
|
||||||
|
$neveng = $_POST["ujkat"];
|
||||||
|
}
|
||||||
|
|
||||||
|
$kat_id = $this->muser->new_kategoria('group',$nevhun,$neveng);
|
||||||
|
}else{
|
||||||
|
$kat_id = $_POST["kategoria"];
|
||||||
|
}
|
||||||
|
|
||||||
|
|
||||||
|
// Felvétel az adatbázisba
|
||||||
|
if(!$error){
|
||||||
|
$ujgr->email = $_POST["projectEmailField"];
|
||||||
|
$ujgr->title = $_POST["projhectNameField"];
|
||||||
|
$ujgr->meret = $prSize;
|
||||||
|
$ujgr->datum = date('Y-m-d H:i:s',time());
|
||||||
|
$ujgr->nyelv = $lang;
|
||||||
|
$ujgr->kep = $kep;
|
||||||
|
$ujgr->kategoria = $_POST["kategoria"];
|
||||||
|
$ujgr->text = $_POST["projectDescriptionField"];
|
||||||
|
$ujgr->group = $link;
|
||||||
|
$ujgr->szerzo = $_POST["SzerzoField"];
|
||||||
|
$ujgr->kat_id = $kat_id;
|
||||||
|
|
||||||
|
$this->mgroups->newgroup($ujgr);
|
||||||
|
|
||||||
|
}
|
||||||
|
|
||||||
|
//ha nem volt print:
|
||||||
|
redirect('groups/kategoria/'.$kat_id);
|
||||||
|
}
|
||||||
|
|
||||||
|
function kep(&$kep){
|
||||||
|
if ($_FILES["kep"]["error"]==0){
|
||||||
|
$lang = $this->muser->user['lang'];
|
||||||
|
$kepnev = time()."_". $_FILES["kep"]["name"];
|
||||||
|
$ide= "public/img/groups/".$lang."/".$kepnev;
|
||||||
|
if (copy($_FILES["kep"]["tmp_name"],$ide)){
|
||||||
|
$kep = $ide;
|
||||||
|
$prSize = $_FILES['kep']['size'];
|
||||||
|
}else{
|
||||||
|
$prFile = "NULL";
|
||||||
|
}
|
||||||
|
}
|
||||||
|
}
|
||||||
|
|
||||||
|
}
|
||||||
|
|
||||||
|
?>
|
||||||
@ -0,0 +1,15 @@
|
|||||||
|
{
|
||||||
|
"finding_ref": "5318",
|
||||||
|
"log_excerpt": "[quarantine] partners.archlinexp.com:application/controllers/groups.php -> quarantined (dest=/var/lib/web-hids/quarantine/var/www/hosting/archlinexp.com/partners/application/controllers/groups.php)",
|
||||||
|
"original_sha256": "fdcb90729c1adf9157b1bab5c026f02b89deb9a847ebb04809ad4676527d6387",
|
||||||
|
"original_stat": {
|
||||||
|
"gid": 30037,
|
||||||
|
"mtime": 1396359077,
|
||||||
|
"size": 8872,
|
||||||
|
"uid": 11669
|
||||||
|
},
|
||||||
|
"rel_path": "application/controllers/groups.php",
|
||||||
|
"result": "quarantined",
|
||||||
|
"timestamp": "20260718T160424Z",
|
||||||
|
"vhost": "partners.archlinexp.com"
|
||||||
|
}
|
||||||
@ -0,0 +1,429 @@
|
|||||||
|
<?php
|
||||||
|
class Objects extends Controller
|
||||||
|
{
|
||||||
|
function Objects()
|
||||||
|
{
|
||||||
|
parent::Controller();
|
||||||
|
$this->lang->load('site', $this->muser->user['lang']);
|
||||||
|
$this->load->model('mobjects');
|
||||||
|
}
|
||||||
|
|
||||||
|
function index()
|
||||||
|
{
|
||||||
|
$this->kategoria();
|
||||||
|
}
|
||||||
|
|
||||||
|
function upload(){
|
||||||
|
if(hun())
|
||||||
|
$data['title'] = 'ARCHLine.XP Új Objektum';
|
||||||
|
else
|
||||||
|
$data['title'] = 'ARCHLine.XP New Object';
|
||||||
|
|
||||||
|
if($this->uri->segment(3)=="java"){
|
||||||
|
$data['tartalom']='objects/java';
|
||||||
|
}
|
||||||
|
else if($this->uri->segment(3)=="simple"){
|
||||||
|
$data['tartalom']='objects/simple';
|
||||||
|
}
|
||||||
|
else{
|
||||||
|
$data['tartalom']='objects/upload';
|
||||||
|
}
|
||||||
|
$data['csik']=array('home','objects');
|
||||||
|
$data['javascript'] = array('onUploadFinished');
|
||||||
|
$data['kategoriak'] = $this->muser->get_kategoriak('object');
|
||||||
|
|
||||||
|
$this->load->view('site',$data);
|
||||||
|
}
|
||||||
|
|
||||||
|
function uploadnew(){
|
||||||
|
redirect('/collection/upload/'.$this->uri->segment(3).'/object');
|
||||||
|
|
||||||
|
if(hun()){
|
||||||
|
$data['title'] = 'ARCHLine.XP Új Objektum';
|
||||||
|
$data['feltetel'] = $this->mpages->get_row(572);
|
||||||
|
}
|
||||||
|
else{
|
||||||
|
$data['title'] = 'ARCHLine.XP New Object';
|
||||||
|
$data['feltetel'] = $this->mpages->get_row(571);
|
||||||
|
}
|
||||||
|
|
||||||
|
if($this->uri->segment(3)!=""/* && $this->uri->segment(4)!=""*/){
|
||||||
|
$data["fajl"] = $this->uri->segment(3);
|
||||||
|
$data["eredeti"] = $this->uri->segment(4);
|
||||||
|
|
||||||
|
/* szövegfájl átadással */
|
||||||
|
if(/*eng()*/true){
|
||||||
|
$fajlnev = '/home/vendeg/'.$this->uri->segment(3);
|
||||||
|
$fa = fopen( $fajlnev, "r" ) or die("Upload error");
|
||||||
|
$ol = fgets( $fa, 1024);
|
||||||
|
$adatok = explode("#",$ol);
|
||||||
|
// if( count($adatok) == 5){
|
||||||
|
$lang = $this->muser->user['lang'];
|
||||||
|
$honnan = "/home/vendeg/".$adatok[2];
|
||||||
|
$kepnev = time()."_".$adatok[3];
|
||||||
|
$ide= "public/img/objects/".$lang."/".$kepnev;
|
||||||
|
//$ide= "public/img/objects/temp/".$kepnev;
|
||||||
|
if( copy($honnan,$ide) ){
|
||||||
|
$adatok[3] = $ide;
|
||||||
|
}else{
|
||||||
|
$adatok[3] = "";
|
||||||
|
}
|
||||||
|
|
||||||
|
|
||||||
|
$data["fajl"] = $adatok[0];
|
||||||
|
$data["eredeti"] = $adatok[1];
|
||||||
|
$data["vendegkep"] = $adatok[2];
|
||||||
|
$data["kepalap"] = $adatok[3];
|
||||||
|
$data["cim"] = $adatok[4];
|
||||||
|
|
||||||
|
// echo(unicode_encode($data["fajl"], 'UTF-8'));
|
||||||
|
//print_r($data);
|
||||||
|
// }
|
||||||
|
fclose($fa);
|
||||||
|
}
|
||||||
|
|
||||||
|
}else{
|
||||||
|
redirect('objects/upload');
|
||||||
|
}
|
||||||
|
|
||||||
|
$data['tartalom']='objects/uploadnew';
|
||||||
|
$data['csik']=array('home','objects');
|
||||||
|
$data['javascript'] = array('objfeltoltes');
|
||||||
|
$data['kategoriak'] = $this->muser->get_kategoriak('object');
|
||||||
|
|
||||||
|
//print_r($data);
|
||||||
|
|
||||||
|
$this->load->view('site_upload',$data);
|
||||||
|
}
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
function upload2(){
|
||||||
|
redirect("collection/upload/".$this->uri->segment(3)."/object");
|
||||||
|
|
||||||
|
/*if(hun()){
|
||||||
|
$data['title'] = 'ARCHLine.XP Új Objektum';
|
||||||
|
$data['feltetel'] = $this->mpages->get_row(572);
|
||||||
|
}
|
||||||
|
else{
|
||||||
|
$data['title'] = 'ARCHLine.XP New Object';
|
||||||
|
$data['feltetel'] = $this->mpages->get_row(571);
|
||||||
|
}
|
||||||
|
|
||||||
|
if($this->uri->segment(3)!=""){
|
||||||
|
$data["fajl"] = $this->uri->segment(3);
|
||||||
|
$data["eredeti"] = $this->uri->segment(4);
|
||||||
|
|
||||||
|
/* szövegfájl átadással */
|
||||||
|
/*$fajlnev = '/home/vendeg/'.$this->uri->segment(3);
|
||||||
|
$fa = fopen( $fajlnev, "r" ) or die("Upload error");
|
||||||
|
$ol = fgets( $fa, 1024);
|
||||||
|
$adatok = explode("#",$ol);
|
||||||
|
$lang = $this->muser->user['lang'];
|
||||||
|
$honnan = "/home/vendeg/".$adatok[2];
|
||||||
|
$kepnev = time()."_".$adatok[3];
|
||||||
|
$ide= "public/img/objects/".$lang."/".$kepnev;
|
||||||
|
if( copy($honnan,$ide) ){
|
||||||
|
$adatok[3] = $ide;
|
||||||
|
}else{
|
||||||
|
$adatok[3] = "";
|
||||||
|
}
|
||||||
|
|
||||||
|
|
||||||
|
$data["fajl"] = $adatok[0];
|
||||||
|
$data["eredeti"] = $adatok[1];
|
||||||
|
$data["vendegkep"] = $adatok[2];
|
||||||
|
$data["kepalap"] = $adatok[3];
|
||||||
|
$data["cim"] = $adatok[4];
|
||||||
|
|
||||||
|
fclose($fa);
|
||||||
|
|
||||||
|
}else{
|
||||||
|
redirect('objects/upload');
|
||||||
|
}
|
||||||
|
|
||||||
|
$data['tartalom']='objects/uploadnew';
|
||||||
|
$data['javascript'] = array('objfeltoltes');
|
||||||
|
$data['kategoriak'] = $this->muser->get_kategoriak('object');
|
||||||
|
|
||||||
|
$this->load->view('site_upload',$data);*/
|
||||||
|
}
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
function simple(){
|
||||||
|
if(hun())
|
||||||
|
$data['title'] = 'ARCHLine.XP Új Objektum';
|
||||||
|
else
|
||||||
|
$data['title'] = 'ARCHLine.XP New Object';
|
||||||
|
$data['tartalom']='objects/simple';
|
||||||
|
$data['csik']=array('home','objects');
|
||||||
|
|
||||||
|
$this->load->view('site',$data);
|
||||||
|
}
|
||||||
|
|
||||||
|
function kat(){
|
||||||
|
|
||||||
|
if(hun())
|
||||||
|
$data['title'] = 'ARCHLine.XP Objektumok';
|
||||||
|
else
|
||||||
|
$data['title'] = 'ARCHLine.XP Objects';
|
||||||
|
|
||||||
|
$data['tartalom']='objects/kat';
|
||||||
|
$data['csik']=array('home','objects');
|
||||||
|
$data['javascript']=array('dl_select');
|
||||||
|
|
||||||
|
if(!$this->uri->segment(3))
|
||||||
|
$kat = 2;
|
||||||
|
else
|
||||||
|
$kat = $this->uri->segment(3);
|
||||||
|
|
||||||
|
$data['objects']=$this->mobjects->get_bykat($kat);
|
||||||
|
|
||||||
|
//$nyelv = $this->muser->user['lang'];
|
||||||
|
|
||||||
|
$data['kategoriak'] = $this->muser->get_kategoriak('object');
|
||||||
|
|
||||||
|
$data['aktiv']=$kat;
|
||||||
|
$this->load->view('site',$data);
|
||||||
|
|
||||||
|
}
|
||||||
|
|
||||||
|
function kategoria(){
|
||||||
|
if(hun())
|
||||||
|
$data['title'] = 'ARCHLine.XP Objektumok';
|
||||||
|
else
|
||||||
|
$data['title'] = 'ARCHLine.XP Objects';
|
||||||
|
|
||||||
|
$data['tartalom']='objects/kat';
|
||||||
|
$data['csik']=array('home','objects');
|
||||||
|
$data['javascript']=array('dl_select','objfeltoltes');
|
||||||
|
|
||||||
|
if( !$this->uri->segment(3) || !( $this->muser->letezokategoria($this->uri->segment(3),'object') ))
|
||||||
|
$kat = 26;
|
||||||
|
else
|
||||||
|
$kat = $this->uri->segment(3);
|
||||||
|
|
||||||
|
|
||||||
|
redirect("/collection/kategoria/".$kat);
|
||||||
|
|
||||||
|
$data['objects']=$this->mobjects->get_bykategoria($kat);
|
||||||
|
|
||||||
|
|
||||||
|
$kategoriak = $this->muser->get_kategoriak('object');
|
||||||
|
$kategoriak = $this->mobjects->get_darab($kategoriak);
|
||||||
|
|
||||||
|
$data['kategoriak'] = $kategoriak;
|
||||||
|
//$data['kategoriak'] = $this->muser->get_kategoriak('object');
|
||||||
|
|
||||||
|
$data['aktiv']=$kat;
|
||||||
|
$data['title'] .= " - " . $this->muser->get_katName($kat);
|
||||||
|
|
||||||
|
$this->load->view('site',$data);
|
||||||
|
}
|
||||||
|
|
||||||
|
function get()
|
||||||
|
{
|
||||||
|
$download_id = $this->uri->segment(3);
|
||||||
|
if(!$download_id || !is_numeric($download_id))
|
||||||
|
{
|
||||||
|
show_404();
|
||||||
|
}
|
||||||
|
|
||||||
|
$record = $this->mobjects->get_row($download_id);
|
||||||
|
if(!$record)
|
||||||
|
{
|
||||||
|
show_404();
|
||||||
|
}
|
||||||
|
|
||||||
|
redirect($record->object);
|
||||||
|
}
|
||||||
|
|
||||||
|
function submit(){
|
||||||
|
$lang = $this->muser->user['lang'];
|
||||||
|
$tempFolder = "/home/vendeg/"; //ide másolja az FTP applet a fájlt
|
||||||
|
$storeFolder = "/home/cadline/public_html/website/public/objects/".$lang."/"; //mi itt szeretnénk tárolni
|
||||||
|
$error = "";
|
||||||
|
$kep = "";
|
||||||
|
$link = "public/objects/".$lang."/";
|
||||||
|
|
||||||
|
// ha java-val:
|
||||||
|
if( isset($_POST["tempFilenameField"]) ){
|
||||||
|
$tempFilename = $_POST["tempFilenameField"]; //ezen a néven kerül feltöltésre a fájl (pl. 123456.file)
|
||||||
|
$originalFilename = $_POST["originalFilenameField"]; //ez volt az eredeti neve (pl. szoveg.doc)
|
||||||
|
$storeFilename = time()."_".$originalFilename; //ezen a neven taroljuk mi (pl. 2347686323_szoveg.doc)
|
||||||
|
|
||||||
|
|
||||||
|
$storePath = $storeFolder.$storeFilename;
|
||||||
|
$tempPath = $tempFolder.$tempFilename;
|
||||||
|
|
||||||
|
if ((strlen($tempFilename) < 3) || (strlen($originalFilename) < 3)){
|
||||||
|
die ("Hibás fáljnevek!");
|
||||||
|
$error .= "hiba";
|
||||||
|
}
|
||||||
|
|
||||||
|
//chmod($tempPath,0777);
|
||||||
|
if (!copy($tempPath,$storePath)){
|
||||||
|
//if (!rename($tempPath,$storePath)){
|
||||||
|
// print "Nem sikerül a helyére másolni a feltöltött fájlt!<br />";
|
||||||
|
$error .= "hiba";
|
||||||
|
}else{
|
||||||
|
// print "<h1>Sikeres feltöltés ($originalFilename)</h1>";
|
||||||
|
//$storeFilename = $storePath;
|
||||||
|
$link .= $storeFilename;
|
||||||
|
$prSize = 6500;
|
||||||
|
$prSize = filesize($storePath); //??
|
||||||
|
$this->kep(&$kep);
|
||||||
|
}
|
||||||
|
|
||||||
|
}
|
||||||
|
// ha egyszerusitve:
|
||||||
|
else if ($_FILES["originalFilenameField"]["error"]==0){
|
||||||
|
|
||||||
|
$storeFolder = "public/objects/".$lang."/";
|
||||||
|
$storeFilename= $storeFolder.time()."_". $_FILES["originalFilenameField"]["name"];
|
||||||
|
|
||||||
|
$tempFilename = $_FILES["originalFilenameField"]["tmp_name"];
|
||||||
|
|
||||||
|
if (copy($_FILES["originalFilenameField"]["tmp_name"],$storeFilename)){
|
||||||
|
$prFile = $storeFilename;
|
||||||
|
$prSize = $_FILES['originalFilenameField']['size'];
|
||||||
|
}else{
|
||||||
|
$prFile = "NULL";
|
||||||
|
$error .= "hiba..";
|
||||||
|
}
|
||||||
|
$originalFilename = $_FILES["originalFilenameField"]["name"];
|
||||||
|
$storePath = $storeFilename;
|
||||||
|
|
||||||
|
$this->kep(&$kep);
|
||||||
|
|
||||||
|
$link = $storeFilename;
|
||||||
|
|
||||||
|
}else{
|
||||||
|
$error = "nincs objektum fajl";
|
||||||
|
}
|
||||||
|
|
||||||
|
|
||||||
|
// Felvétel az adatbázisba
|
||||||
|
if(!$error){
|
||||||
|
$ujpr->email = $_POST["projectEmailField"];
|
||||||
|
$ujpr->title = $_POST["projhectNameField"];
|
||||||
|
$ujpr->meret = $prSize;
|
||||||
|
$ujpr->datum = date('Y-m-d H:i:s',time());
|
||||||
|
$ujpr->nyelv = $lang;
|
||||||
|
$ujpr->kep = $kep;
|
||||||
|
$ujpr->kategoria = $_POST["kategoria"];
|
||||||
|
$ujpr->text = $_POST["projectDescriptionField"];
|
||||||
|
$ujpr->object = $link;
|
||||||
|
$ujpr->szerzo = $_POST["SzerzoField"];
|
||||||
|
$ujpr->kat_id = $_POST["kategoria"];
|
||||||
|
|
||||||
|
$this->mobjects->newobject($ujpr);
|
||||||
|
|
||||||
|
//print "<br /> <b>Új projekt felvéve</b>";
|
||||||
|
}else{
|
||||||
|
//print "<br /> <b>Nem került adat az adatbázisba</b>";
|
||||||
|
}
|
||||||
|
|
||||||
|
//ha nem volt print:
|
||||||
|
redirect('objects/kategoria/'.$_POST["kategoria"]);
|
||||||
|
}
|
||||||
|
|
||||||
|
function submitnew(){
|
||||||
|
$lang = $this->muser->user['lang'];
|
||||||
|
$tempFolder = "/home/vendeg/"; //ide másolja az FTP applet a fájlt
|
||||||
|
$storeFolder = "/home/cadline/public_html/website/public/objects/".$lang."/"; //mi itt szeretnénk tárolni
|
||||||
|
$error = "";
|
||||||
|
$kep = "";
|
||||||
|
|
||||||
|
$fajlnev = $_POST["originalFilenameField"]; // ez van a vendegnel
|
||||||
|
$fajlnev2 = $_POST["eredetinev"]; // ez legyen a publicban
|
||||||
|
$fajl = $tempFolder.$fajlnev;
|
||||||
|
|
||||||
|
$ido = time();
|
||||||
|
|
||||||
|
$storeFilename= $storeFolder.$ido."_".$fajlnev2;
|
||||||
|
|
||||||
|
|
||||||
|
if (copy($fajl,$storeFilename)){
|
||||||
|
$prFile = $storeFilename;
|
||||||
|
$prSize = filesize($storeFilename);
|
||||||
|
}else{
|
||||||
|
$prFile = "NULL";
|
||||||
|
$error .= "Nem másoltam át a fájlt<br /> vendegben: ".$fajlnev." publicba: ".$fajlnev2;
|
||||||
|
}
|
||||||
|
|
||||||
|
$link = "public/objects/".$lang."/".$ido."_".$fajlnev2;
|
||||||
|
|
||||||
|
$kep = $_POST["kepalap"];
|
||||||
|
$this->kep(&$kep);
|
||||||
|
|
||||||
|
|
||||||
|
// új kategória felvétele, ha megadták
|
||||||
|
if( $_POST["ujkat"] != "" ){
|
||||||
|
if(hun()){
|
||||||
|
$nevhun = $_POST["ujkat"];
|
||||||
|
$neveng = "";
|
||||||
|
}else{
|
||||||
|
$nevhun = "";
|
||||||
|
$neveng = $_POST["ujkat"];
|
||||||
|
}
|
||||||
|
|
||||||
|
$kat_id = $this->muser->new_kategoria('object',$nevhun,$neveng);
|
||||||
|
}else{
|
||||||
|
$kat_id = $_POST["kategoria"];
|
||||||
|
}
|
||||||
|
|
||||||
|
|
||||||
|
// Felvétel az adatbázisba
|
||||||
|
if(!$error){
|
||||||
|
$ujpr->email = $_POST["projectEmailField"];
|
||||||
|
$ujpr->title = $_POST["projhectNameField"];
|
||||||
|
$ujpr->meret = $prSize;
|
||||||
|
$ujpr->datum = date('Y-m-d H:i:s',time());
|
||||||
|
$ujpr->nyelv = $lang;
|
||||||
|
$ujpr->kep = $kep;
|
||||||
|
$ujpr->kategoria = $_POST["kategoria"];
|
||||||
|
$ujpr->text = $_POST["projectDescriptionField"];
|
||||||
|
$ujpr->object = $link;
|
||||||
|
$ujpr->szerzo = $_POST["SzerzoField"];
|
||||||
|
$ujpr->kat_id = $kat_id;
|
||||||
|
|
||||||
|
$this->mobjects->newobject($ujpr);
|
||||||
|
|
||||||
|
//print "<br /> <b>Új projekt felvéve</b>";
|
||||||
|
}else{
|
||||||
|
//print "<br /> <b>Nem került adat az adatbázisba</b>";
|
||||||
|
//print $error;
|
||||||
|
}
|
||||||
|
|
||||||
|
//ha nem volt print:
|
||||||
|
redirect('objects/kategoria/'.$kat_id);
|
||||||
|
}
|
||||||
|
|
||||||
|
function kep(&$kep){
|
||||||
|
if ($_FILES["kep"]["error"]==0){
|
||||||
|
$lang = $this->muser->user['lang'];
|
||||||
|
$kepnev = time()."_". $_FILES["kep"]["name"];
|
||||||
|
$ide= "public/img/objects/".$lang."/".$kepnev;
|
||||||
|
if (copy($_FILES["kep"]["tmp_name"],$ide)){
|
||||||
|
$kep = $ide;
|
||||||
|
$prSize = $_FILES['kep']['size'];
|
||||||
|
//print " Sikerült a képmásolás! ";
|
||||||
|
}else{
|
||||||
|
$prFile = "NULL";
|
||||||
|
//print " Nem sikerült a képet felmásolni! ";
|
||||||
|
}
|
||||||
|
}
|
||||||
|
}
|
||||||
|
|
||||||
|
}
|
||||||
|
|
||||||
|
?>
|
||||||
@ -0,0 +1,15 @@
|
|||||||
|
{
|
||||||
|
"finding_ref": "5311",
|
||||||
|
"log_excerpt": "[quarantine] partners.archlinexp.com:application/controllers/objects.php -> quarantined (dest=/var/lib/web-hids/quarantine/var/www/hosting/archlinexp.com/partners/application/controllers/objects.php)",
|
||||||
|
"original_sha256": "b6f11c4b3be5f7f0a5a2e18c82cf8861937fdbc3ee9b317d03ec4ec923cdaf5f",
|
||||||
|
"original_stat": {
|
||||||
|
"gid": 30037,
|
||||||
|
"mtime": 1396359078,
|
||||||
|
"size": 11000,
|
||||||
|
"uid": 11669
|
||||||
|
},
|
||||||
|
"rel_path": "application/controllers/objects.php",
|
||||||
|
"result": "quarantined",
|
||||||
|
"timestamp": "20260718T160424Z",
|
||||||
|
"vhost": "partners.archlinexp.com"
|
||||||
|
}
|
||||||
@ -0,0 +1,445 @@
|
|||||||
|
<?php
|
||||||
|
class Projects extends Controller
|
||||||
|
{
|
||||||
|
function Projects()
|
||||||
|
{
|
||||||
|
parent::Controller();
|
||||||
|
|
||||||
|
$this->lang->load('site', $this->muser->user['lang']);
|
||||||
|
|
||||||
|
$this->load->model('mprojects');
|
||||||
|
}
|
||||||
|
|
||||||
|
function index()
|
||||||
|
{
|
||||||
|
$this->kategoria();
|
||||||
|
}
|
||||||
|
|
||||||
|
function supportupload(){
|
||||||
|
include('application/helpers/sajatfeltolto.php');
|
||||||
|
|
||||||
|
$guid = $this->uri->segment(4);
|
||||||
|
$sorozatszam = $this->uri->segment(3);
|
||||||
|
|
||||||
|
print_r($this->uri->segments);
|
||||||
|
|
||||||
|
print "guid: ".$guid."<br> sorozatszam: ".$sorozatszam;
|
||||||
|
|
||||||
|
if( !$guid || !$sorozatszam ){
|
||||||
|
$record->osztaly = "projects";
|
||||||
|
$record->fv = "supportupload";
|
||||||
|
$record->hiba = "Hiányzó guid vagy sorozatszám:\n".$guid."\n".$sorozatszam;
|
||||||
|
$record->datum = date('Y-m-d H:i:s',time());
|
||||||
|
$this->db->insert('a_hibak',$record);
|
||||||
|
|
||||||
|
return;
|
||||||
|
}
|
||||||
|
|
||||||
|
$honnan = '/home/vendeg/support/'.$guid;
|
||||||
|
$hova = 'public/ugyfelupload/'.$sorozatszam;
|
||||||
|
|
||||||
|
if( !file_exists($honnan) && file_exists($honnan."=") )
|
||||||
|
$honnan .= "=";
|
||||||
|
elseif( !file_exists($honnan) && file_exists($honnan."==") )
|
||||||
|
$honnan .= "==";
|
||||||
|
|
||||||
|
|
||||||
|
if(!is_dir($hova)){
|
||||||
|
mkdir($hova,0777);
|
||||||
|
exec("chmod 777 /var/www/hosting/cadline.hu/www/".$hova);
|
||||||
|
}
|
||||||
|
$hova .= "/".trim(base64_decode($guid),"=");;
|
||||||
|
|
||||||
|
if( athelyez($honnan,$hova) ){
|
||||||
|
exec("chmod 777 /var/www/hosting/cadline.hu/www/".$hova);
|
||||||
|
}
|
||||||
|
else{
|
||||||
|
// sikertelen masolas
|
||||||
|
|
||||||
|
$record->osztaly = "projects";
|
||||||
|
$record->fv = "supportupload";
|
||||||
|
$record->hiba = "Másolás hiba, honnan:".$honnan."\nhova: ".$hova;
|
||||||
|
$record->datum = date('Y-m-d H:i:s',time());
|
||||||
|
$this->db->insert('a_hibak',$record);
|
||||||
|
}
|
||||||
|
|
||||||
|
}
|
||||||
|
|
||||||
|
function upload(){
|
||||||
|
if(hun())
|
||||||
|
$data['title'] = 'ARCHLine.XP Új Projekt';
|
||||||
|
else
|
||||||
|
$data['title'] = 'ARCHLine.XP New Project';
|
||||||
|
|
||||||
|
if($this->uri->segment(3)=="java"){
|
||||||
|
$data['tartalom']='projects/java';
|
||||||
|
}
|
||||||
|
else if($this->uri->segment(3)=="simple"){
|
||||||
|
$data['tartalom']='projects/simple';
|
||||||
|
}
|
||||||
|
else{
|
||||||
|
$data['tartalom']='projects/upload';
|
||||||
|
}
|
||||||
|
|
||||||
|
$data['kategoriak'] = $this->muser->get_kategoriak('project');
|
||||||
|
|
||||||
|
$data['csik']=array('home','projects');
|
||||||
|
$data['javascript'] = array('onUploadFinished');
|
||||||
|
|
||||||
|
$this->load->view('site',$data);
|
||||||
|
}
|
||||||
|
|
||||||
|
function uploadnew(){
|
||||||
|
redirect('/collection/upload/'.$this->uri->segment(3).'/project');
|
||||||
|
|
||||||
|
if(hun()){
|
||||||
|
$data['title'] = 'ARCHLine.XP Új Projekt';
|
||||||
|
$data['feltetel'] = $this->mpages->get_row(572);
|
||||||
|
}
|
||||||
|
else{
|
||||||
|
$data['title'] = 'ARCHLine.XP New Project';
|
||||||
|
$data['feltetel'] = $this->mpages->get_row(571);
|
||||||
|
}
|
||||||
|
|
||||||
|
|
||||||
|
if($this->uri->segment(3)!=""){
|
||||||
|
$data["fajl"] = $this->uri->segment(3);
|
||||||
|
$data["eredeti"] = $this->uri->segment(4);
|
||||||
|
|
||||||
|
|
||||||
|
$fajlnev = '/home/vendeg/'.$this->uri->segment(3);
|
||||||
|
$fa = fopen( $fajlnev, "r" ) or die("Upload error");
|
||||||
|
$ol = fgets( $fa, 1024);
|
||||||
|
$adatok = explode("#",$ol);
|
||||||
|
// if( count($adatok) == 5){
|
||||||
|
$lang = $this->muser->user['lang'];
|
||||||
|
$honnan = "/home/vendeg/".$adatok[2];
|
||||||
|
$kepnev = time()."_".$adatok[3];
|
||||||
|
$ide= "public/img/projects/".$lang."/".$kepnev;
|
||||||
|
//$ide= "public/img/projects/temp/".$kepnev;
|
||||||
|
if( copy($honnan,$ide) ){
|
||||||
|
$adatok[3] = $ide;
|
||||||
|
}else{
|
||||||
|
$adatok[3] = "";
|
||||||
|
}
|
||||||
|
|
||||||
|
|
||||||
|
$data["fajl"] = $adatok[0];
|
||||||
|
$data["eredeti"] = $adatok[1];
|
||||||
|
$data["vendegkep"] = $adatok[2];
|
||||||
|
$data["kepalap"] = $adatok[3];
|
||||||
|
$data["cim"] = $adatok[4];
|
||||||
|
|
||||||
|
// }
|
||||||
|
fclose($fa);
|
||||||
|
|
||||||
|
|
||||||
|
$data['tartalom']='projects/uploadnew';
|
||||||
|
}else{
|
||||||
|
redirect('projects/upload');
|
||||||
|
}
|
||||||
|
|
||||||
|
$data['kategoriak'] = $this->muser->get_kategoriak('project');
|
||||||
|
|
||||||
|
$data['javascript'] = array('objfeltoltes');
|
||||||
|
|
||||||
|
$this->load->view('site_upload',$data);
|
||||||
|
}
|
||||||
|
|
||||||
|
function simple(){
|
||||||
|
if(hun())
|
||||||
|
$data['title'] = 'ARCHLine.XP Új Projekt';
|
||||||
|
else
|
||||||
|
$data['title'] = 'ARCHLine.XP New Project';
|
||||||
|
$data['tartalom']='projects/simple';
|
||||||
|
$data['csik']=array('home','projects');
|
||||||
|
|
||||||
|
$this->load->view('site',$data);
|
||||||
|
}
|
||||||
|
|
||||||
|
function cadline(){
|
||||||
|
$data['title'] = 'ARCHLine.XP Projektek szerkesztése';
|
||||||
|
$data['tartalom']='projects/cadline';
|
||||||
|
$data['csik']=array('home','projects');
|
||||||
|
|
||||||
|
//$projects = $this->mprojects->get_all();
|
||||||
|
//$data['projects'] = $projects;
|
||||||
|
|
||||||
|
$this->load->view('site',$data);
|
||||||
|
}
|
||||||
|
|
||||||
|
function kat(){
|
||||||
|
|
||||||
|
if(hun())
|
||||||
|
$data['title'] = 'ARCHLine.XP Projektek';
|
||||||
|
else
|
||||||
|
$data['title'] = 'ARCHLine.XP Projects';
|
||||||
|
|
||||||
|
$data['tartalom']='projects/kat';
|
||||||
|
$data['csik']=array('home','projects');
|
||||||
|
$data['javascript']=array('dl_select');
|
||||||
|
|
||||||
|
if(!$this->uri->segment(3) || !is_numeric($this->uri->segment(3)))
|
||||||
|
$kat = 6;
|
||||||
|
else
|
||||||
|
$kat = $this->uri->segment(3);
|
||||||
|
|
||||||
|
$projektek = $this->mprojects->get_bykat($kat);
|
||||||
|
$data['projects']=$projektek;
|
||||||
|
|
||||||
|
$data['kategoriak'] = $this->muser->get_kategoriak('project');
|
||||||
|
|
||||||
|
$data['aktiv']=$kat;
|
||||||
|
$this->load->view('site',$data);
|
||||||
|
}
|
||||||
|
|
||||||
|
function kategoria(){
|
||||||
|
redirect("/collection/kategoria/1");
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
if(hun())
|
||||||
|
$data['title'] = 'ARCHLine.XP Projektek';
|
||||||
|
else
|
||||||
|
$data['title'] = 'ARCHLine.XP Projects';
|
||||||
|
|
||||||
|
$data['tartalom']='projects/kat';
|
||||||
|
$data['csik']=array('home','projects');
|
||||||
|
$data['javascript']=array('dl_select','objfeltoltes');
|
||||||
|
|
||||||
|
if(!$this->uri->segment(3) || !( $this->muser->letezokategoria($this->uri->segment(3),'project') ) )
|
||||||
|
$kat = 1;
|
||||||
|
else
|
||||||
|
$kat = $this->uri->segment(3);
|
||||||
|
|
||||||
|
|
||||||
|
$data['projects']=$this->mprojects->get_bykategoria($kat);
|
||||||
|
|
||||||
|
$kategoriak = $this->muser->get_kategoriak('project');
|
||||||
|
$kategoriak = $this->mprojects->get_darab($kategoriak);
|
||||||
|
|
||||||
|
$data['kategoriak'] = $kategoriak;
|
||||||
|
|
||||||
|
$data['aktiv']=$kat;
|
||||||
|
|
||||||
|
$data['title'] .= " - " . $this->muser->get_katName($kat);
|
||||||
|
|
||||||
|
$this->load->view('site',$data);
|
||||||
|
}
|
||||||
|
|
||||||
|
function get()
|
||||||
|
{
|
||||||
|
$download_id = $this->uri->segment(3);
|
||||||
|
if(!$download_id || !is_numeric($download_id))
|
||||||
|
{
|
||||||
|
show_404();
|
||||||
|
}
|
||||||
|
|
||||||
|
$record = $this->mprojects->get_row($download_id);
|
||||||
|
if(!$record)
|
||||||
|
{
|
||||||
|
show_404();
|
||||||
|
}
|
||||||
|
|
||||||
|
redirect($record->project);
|
||||||
|
}
|
||||||
|
|
||||||
|
function submit(){
|
||||||
|
$lang = $this->muser->user['lang'];
|
||||||
|
$tempFolder = "/home/vendeg/"; //ide másolja az FTP applet a fájlt
|
||||||
|
$storeFolder = "/home/cadline/public_html/website/public/projects/".$lang."/"; //mi itt szeretnénk tárolni
|
||||||
|
$error = "";
|
||||||
|
$kep = "";
|
||||||
|
$link = "public/projects/".$lang."/";
|
||||||
|
|
||||||
|
// ha java-val:
|
||||||
|
if( isset($_POST["tempFilenameField"]) ){
|
||||||
|
$tempFilename = $_POST["tempFilenameField"]; //ezen a néven kerül feltöltésre a fájl (pl. 123456.file)
|
||||||
|
$originalFilename = $_POST["originalFilenameField"]; //ez volt az eredeti neve (pl. szoveg.doc)
|
||||||
|
$storeFilename = time()."_".$originalFilename; //ezen a neven taroljuk mi (pl. 2347686323_szoveg.doc)
|
||||||
|
|
||||||
|
|
||||||
|
$storePath = $storeFolder.$storeFilename;
|
||||||
|
$tempPath = $tempFolder.$tempFilename;
|
||||||
|
|
||||||
|
if ((strlen($tempFilename) < 3) || (strlen($originalFilename) < 3)){
|
||||||
|
die ("Hibás fáljnevek!");
|
||||||
|
$error .= "hiba";
|
||||||
|
}
|
||||||
|
|
||||||
|
//chmod($tempPath,0777);
|
||||||
|
if (!copy($tempPath,$storePath)){
|
||||||
|
//if (!rename($tempPath,$storePath)){
|
||||||
|
// print "Nem sikerül a helyére másolni a feltöltött fájlt!<br />";
|
||||||
|
$error .= "hiba";
|
||||||
|
}else{
|
||||||
|
// print "<h1>Sikeres feltöltés ($originalFilename)</h1>";
|
||||||
|
//$storeFilename = $storePath;
|
||||||
|
$link .= $storeFilename;
|
||||||
|
$prSize = 6500;
|
||||||
|
$prSize = filesize($storePath); //??
|
||||||
|
$this->kep(&$kep);
|
||||||
|
}
|
||||||
|
|
||||||
|
}
|
||||||
|
// ha egyszerűsítve:
|
||||||
|
else if ($_FILES["originalFilenameField"]["error"]==0){
|
||||||
|
|
||||||
|
$storeFolder = "public/projects/".$lang."/";
|
||||||
|
$storeFilename= $storeFolder.time()."_". $_FILES["originalFilenameField"]["name"];
|
||||||
|
|
||||||
|
$tempFilename = $_FILES["originalFilenameField"]["tmp_name"];
|
||||||
|
|
||||||
|
if (copy($_FILES["originalFilenameField"]["tmp_name"],$storeFilename)){
|
||||||
|
$prFile = $storeFilename;
|
||||||
|
$prSize = $_FILES['originalFilenameField']['size'];
|
||||||
|
}else{
|
||||||
|
$prFile = "NULL";
|
||||||
|
$error .= "hiba..";
|
||||||
|
}
|
||||||
|
$originalFilename = $_FILES["originalFilenameField"]["name"];
|
||||||
|
$storePath = $storeFilename;
|
||||||
|
|
||||||
|
$this->kep(&$kep);
|
||||||
|
|
||||||
|
$link = $storeFilename;
|
||||||
|
|
||||||
|
}else{
|
||||||
|
$error = "nincs projekt fajl";
|
||||||
|
}
|
||||||
|
|
||||||
|
|
||||||
|
// Felvétel az adatbázisba
|
||||||
|
if(!$error){
|
||||||
|
$ujpr->email = $_POST["projectEmailField"];
|
||||||
|
$ujpr->title = $_POST["projhectNameField"];
|
||||||
|
$ujpr->meret = $prSize;
|
||||||
|
$ujpr->datum = date('Y-m-d H:i:s',time());
|
||||||
|
$ujpr->nyelv = $lang;
|
||||||
|
$ujpr->kep = $kep;
|
||||||
|
$ujpr->kategoria = $_POST["kategoria"];
|
||||||
|
$ujpr->text = $_POST["projectDescriptionField"];
|
||||||
|
$ujpr->project = $link;
|
||||||
|
$ujpr->szerzo = $_POST["SzerzoField"];
|
||||||
|
$ujpr->kat_id = $_POST["kategoria"];
|
||||||
|
|
||||||
|
$this->mprojects->newproject($ujpr);
|
||||||
|
|
||||||
|
//print "<br /> <b>Új projekt felvéve</b>";
|
||||||
|
}else{
|
||||||
|
//print "<br /> <b>Nem került adat az adatbázisba</b>";
|
||||||
|
}
|
||||||
|
|
||||||
|
//ha nem volt print:
|
||||||
|
redirect('projects/kategoria/'.$_POST["kategoria"]);
|
||||||
|
}
|
||||||
|
|
||||||
|
|
||||||
|
function submitnew(){
|
||||||
|
$lang = $this->muser->user['lang'];
|
||||||
|
$tempFolder = "/home/vendeg/"; //ide másolja a program a fájlt
|
||||||
|
$storeFolder = "/home/cadline/public_html/website/public/projects/".$lang."/"; //mi itt szeretnénk tárolni
|
||||||
|
$error = "";
|
||||||
|
$kep = "";
|
||||||
|
|
||||||
|
|
||||||
|
$fajlnev = $_POST["originalFilenameField"]; // ez van a vendegnel
|
||||||
|
//$fajlnev2 = $_POST["eredetinev"]; // ez legyen a publicban
|
||||||
|
//$fajlnev2 = $this->ekezet($_POST["eredetinev"]); // ez legyen a publicban
|
||||||
|
|
||||||
|
|
||||||
|
$fajlnev2 = $_POST["originalFilenameField"]; // ez legyen a publicban
|
||||||
|
$parameterbe = $_POST["eredetinev"]; // ez a név jelenik meg a letöltéskor az url-ben, paraméterként
|
||||||
|
|
||||||
|
|
||||||
|
$fajl = $tempFolder.$fajlnev;
|
||||||
|
|
||||||
|
$link = "public/projects/".$lang."/".$fajl;
|
||||||
|
|
||||||
|
$storeFolder = "public/projects/".$lang."/";
|
||||||
|
$storeFilename= $storeFolder.time()."_".$fajlnev2;
|
||||||
|
|
||||||
|
if (copy($fajl,$storeFilename)){
|
||||||
|
$prFile = $storeFilename;
|
||||||
|
$prSize = filesize($storeFilename);
|
||||||
|
$kep = $_POST["kepalap"];
|
||||||
|
$this->kep(&$kep);
|
||||||
|
}else{
|
||||||
|
$prFile = "NULL";
|
||||||
|
$error .= "Nem másoltam át a fájlt<br /> vendegben: ".$fajlnev." publicba: ".$fajlnev2;
|
||||||
|
}
|
||||||
|
$originalFilename = $_FILES["originalFilenameField"]["name"];
|
||||||
|
$storePath = $storeFilename;
|
||||||
|
|
||||||
|
|
||||||
|
$link = $storeFilename;
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
// új kategória felvétele, ha megadták
|
||||||
|
if( $_POST["ujkat"] != "" ){
|
||||||
|
if(hun()){
|
||||||
|
$nevhun = $_POST["ujkat"];
|
||||||
|
$neveng = "";
|
||||||
|
}else{
|
||||||
|
$nevhun = "";
|
||||||
|
$neveng = $_POST["ujkat"];
|
||||||
|
}
|
||||||
|
|
||||||
|
$kat_id = $this->muser->new_kategoria('project',$nevhun,$neveng);
|
||||||
|
}else{
|
||||||
|
$kat_id = $_POST["kategoria"];
|
||||||
|
}
|
||||||
|
|
||||||
|
|
||||||
|
// Felvétel az adatbázisba
|
||||||
|
if(!$error){
|
||||||
|
$ujpr->email = $_POST["projectEmailField"];
|
||||||
|
$ujpr->title = $_POST["projhectNameField"];
|
||||||
|
$ujpr->meret = $prSize;
|
||||||
|
$ujpr->datum = date('Y-m-d H:i:s',time());
|
||||||
|
$ujpr->nyelv = $lang;
|
||||||
|
$ujpr->kep = $kep;
|
||||||
|
$ujpr->kategoria = $kat_id;
|
||||||
|
$ujpr->text = $_POST["projectDescriptionField"];
|
||||||
|
$ujpr->project = $link;
|
||||||
|
$ujpr->eredeti = $parameterbe;
|
||||||
|
$ujpr->szerzo = $_POST["SzerzoField"];
|
||||||
|
$ujpr->kat_id = $kat_id;
|
||||||
|
|
||||||
|
$this->mprojects->newproject($ujpr);
|
||||||
|
|
||||||
|
// print "<br /> <b>Új projekt felvéve</b>";
|
||||||
|
// print_r($ujpr);
|
||||||
|
}else{
|
||||||
|
//print "<br /> <b>Nem került adat az adatbázisba</b>";
|
||||||
|
//print $error;
|
||||||
|
}
|
||||||
|
|
||||||
|
//ha nem volt print:
|
||||||
|
redirect('projects/kategoria/'.$kat_id);
|
||||||
|
}
|
||||||
|
|
||||||
|
function ekezet($input){
|
||||||
|
$mit = array("/á/", "/Á/", "/é/", "/É/", "/í/", "/Í/", "/ö/", "/Ö/", "/ő/", "/Ő/", "/ó/", "/Ó/", "/ú/", "/Ú/", "/ü/", "/Ü/", "/ű/", "/Ű/", "/ /");
|
||||||
|
$mire = array("a", "A", "e", "E", "i", "I", "o", "O", "o", "O", "o", "O", "u", "U", "u", "U", "u", "U", "_");
|
||||||
|
$output = preg_replace($mit, $mire, $input);
|
||||||
|
return $output;
|
||||||
|
}
|
||||||
|
|
||||||
|
function kep(&$kep){
|
||||||
|
if ($_FILES["kep"]["error"]==0){
|
||||||
|
$lang = $this->muser->user['lang'];
|
||||||
|
$kepnev = time()."_". $_FILES["kep"]["name"];
|
||||||
|
$ide= "public/img/projects/".$lang."/".$kepnev;
|
||||||
|
if (copy($_FILES["kep"]["tmp_name"],$ide)){
|
||||||
|
$kep = $ide;
|
||||||
|
}
|
||||||
|
}
|
||||||
|
}
|
||||||
|
|
||||||
|
|
||||||
|
}
|
||||||
|
|
||||||
|
?>
|
||||||
@ -0,0 +1,15 @@
|
|||||||
|
{
|
||||||
|
"finding_ref": "5314",
|
||||||
|
"log_excerpt": "[quarantine] partners.archlinexp.com:application/controllers/projects.php -> quarantined (dest=/var/lib/web-hids/quarantine/var/www/hosting/archlinexp.com/partners/application/controllers/projects.php)",
|
||||||
|
"original_sha256": "b42c1a5d2f1fefe1598248fc7213915e840173c5196c1022ec40dde2d01446a6",
|
||||||
|
"original_stat": {
|
||||||
|
"gid": 30037,
|
||||||
|
"mtime": 1396359078,
|
||||||
|
"size": 11689,
|
||||||
|
"uid": 11669
|
||||||
|
},
|
||||||
|
"rel_path": "application/controllers/projects.php",
|
||||||
|
"result": "quarantined",
|
||||||
|
"timestamp": "20260718T160424Z",
|
||||||
|
"vhost": "partners.archlinexp.com"
|
||||||
|
}
|
||||||
File diff suppressed because it is too large
Load Diff
@ -0,0 +1,15 @@
|
|||||||
|
{
|
||||||
|
"finding_ref": "5317",
|
||||||
|
"log_excerpt": "[quarantine] partners.archlinexp.com:application/controllers/testforum.php -> quarantined (dest=/var/lib/web-hids/quarantine/var/www/hosting/archlinexp.com/partners/application/controllers/testforum.php)",
|
||||||
|
"original_sha256": "b56e2ebdd92c705cfee85f13a961ad4cc6a3811524f511e5f65b6bc0d7218fa2",
|
||||||
|
"original_stat": {
|
||||||
|
"gid": 30037,
|
||||||
|
"mtime": 1396359078,
|
||||||
|
"size": 69757,
|
||||||
|
"uid": 11669
|
||||||
|
},
|
||||||
|
"rel_path": "application/controllers/testforum.php",
|
||||||
|
"result": "quarantined",
|
||||||
|
"timestamp": "20260718T160424Z",
|
||||||
|
"vhost": "partners.archlinexp.com"
|
||||||
|
}
|
||||||
@ -0,0 +1,102 @@
|
|||||||
|
<?php
|
||||||
|
|
||||||
|
function feltolt($mezo,$hova,$fajlnev,$ekezet=false){
|
||||||
|
if($_FILES[$mezo]["error"]==0){
|
||||||
|
|
||||||
|
if($ekezet===true)
|
||||||
|
$fajlnev = ekezet($fajlnev);
|
||||||
|
elseif($ekezet=="irasjel")
|
||||||
|
$fajlnev = irasjel($fajlnev);
|
||||||
|
|
||||||
|
$ide= $hova.$fajlnev;
|
||||||
|
$kep = false;
|
||||||
|
if( file_exists($ide) ){
|
||||||
|
$x = explode('.', $fajlnev);
|
||||||
|
$ext = end($x);
|
||||||
|
|
||||||
|
$alap = substr($fajlnev,0,-(strlen($ext)+1));
|
||||||
|
|
||||||
|
for ($i = 1; $i < 100; $i++){
|
||||||
|
if ( !file_exists($hova.$alap.$i.".".$ext)){
|
||||||
|
$fajlnev = $alap.$i.".".$ext;
|
||||||
|
$ide= $hova.$fajlnev;
|
||||||
|
break;
|
||||||
|
}
|
||||||
|
}
|
||||||
|
}
|
||||||
|
if (copy($_FILES[$mezo]["tmp_name"],$ide)){
|
||||||
|
$kep = $ide;
|
||||||
|
}else{
|
||||||
|
$kep = false;
|
||||||
|
}
|
||||||
|
|
||||||
|
|
||||||
|
return $kep;
|
||||||
|
}
|
||||||
|
|
||||||
|
return false;
|
||||||
|
}
|
||||||
|
|
||||||
|
function ekezet($input){
|
||||||
|
$mit = array("/á/", "/Á/", "/é/", "/É/", "/í/", "/Í/", "/ö/", "/Ö/", "/ő/", "/Ő/", "/ó/", "/Ó/", "/ú/", "/Ú/", "/ü/", "/Ü/", "/ű/", "/Ű/", "/ /");
|
||||||
|
$mire = array("a", "A", "e", "E", "i", "I", "o", "O", "o", "O", "o", "O", "u", "U", "u", "U", "u", "U", "_");
|
||||||
|
$output = preg_replace($mit, $mire, $input);
|
||||||
|
return $output;
|
||||||
|
}
|
||||||
|
|
||||||
|
function irasjel($input){
|
||||||
|
$mit = array("/ /", "/'/", '/"/', "/,/","/\//");
|
||||||
|
$mire = array("_", "", "", "_", "_");
|
||||||
|
$output = preg_replace($mit, $mire, $input);
|
||||||
|
return $output;
|
||||||
|
}
|
||||||
|
|
||||||
|
function athelyez($honnan,$hova,$ekezet=false){
|
||||||
|
if($ekezet)
|
||||||
|
$hova = ekezet($hova);
|
||||||
|
|
||||||
|
$fajl = false;
|
||||||
|
|
||||||
|
if( file_exists($hova) ){
|
||||||
|
$x = explode('.', $hova);
|
||||||
|
$ext = end($x);
|
||||||
|
|
||||||
|
$alap = substr($hova,0,-(strlen($ext)+1));
|
||||||
|
|
||||||
|
for ($i = 1; $i < 100; $i++){
|
||||||
|
if ( !file_exists($alap.$i.".".$ext)){
|
||||||
|
$hova = $alap.$i.".".$ext;
|
||||||
|
break;
|
||||||
|
}
|
||||||
|
}
|
||||||
|
}
|
||||||
|
|
||||||
|
if(copy($honnan,$hova)){
|
||||||
|
$fajl = $hova;
|
||||||
|
exec("rm ".$honnan);
|
||||||
|
}else{
|
||||||
|
$fajl = false;
|
||||||
|
}
|
||||||
|
|
||||||
|
|
||||||
|
return $fajl;
|
||||||
|
}
|
||||||
|
|
||||||
|
function urlazon($input){
|
||||||
|
// szóköz csere + kisbetű
|
||||||
|
$subject = str_replace(' ','-',strtolower($input));
|
||||||
|
|
||||||
|
// magyar ékezetek cseréje
|
||||||
|
$subject = ekezet($subject);
|
||||||
|
|
||||||
|
$pattern = '/[-_a-z1-9]*/';
|
||||||
|
preg_match_all($pattern, $subject, $matches, PREG_OFFSET_CAPTURE);
|
||||||
|
$ret = "";
|
||||||
|
foreach($matches[0] as $m)
|
||||||
|
if($m[0])
|
||||||
|
$ret .= $m[0];
|
||||||
|
|
||||||
|
return $ret;
|
||||||
|
}
|
||||||
|
|
||||||
|
?>
|
||||||
@ -0,0 +1,15 @@
|
|||||||
|
{
|
||||||
|
"finding_ref": "5375",
|
||||||
|
"log_excerpt": "[quarantine] partners.archlinexp.com:application/helpers/sajatfeltolto.php -> quarantined (dest=/var/lib/web-hids/quarantine/var/www/hosting/archlinexp.com/partners/application/helpers/sajatfeltolto.php)",
|
||||||
|
"original_sha256": "75359fbae41809f21d9fb056c84ae525b579ad78f2e688033c3ac583b9dba833",
|
||||||
|
"original_stat": {
|
||||||
|
"gid": 30037,
|
||||||
|
"mtime": 1403182246,
|
||||||
|
"size": 2184,
|
||||||
|
"uid": 11669
|
||||||
|
},
|
||||||
|
"rel_path": "application/helpers/sajatfeltolto.php",
|
||||||
|
"result": "quarantined",
|
||||||
|
"timestamp": "20260718T160424Z",
|
||||||
|
"vhost": "partners.archlinexp.com"
|
||||||
|
}
|
||||||
@ -0,0 +1,69 @@
|
|||||||
|
<?php
|
||||||
|
|
||||||
|
$tempFolder = "/"; //ide másolja az FTP applet a fájlt
|
||||||
|
$storeFolder = "/home/cadline/public_html/website/public/objects/"; //mi itt szeretnénk tárolni
|
||||||
|
|
||||||
|
// ha java-val:
|
||||||
|
if( isset($_POST["tempFilenameField"]) ){
|
||||||
|
$tempFilename = $_POST["tempFilenameField"]; //ezen a néven kerül feltöltésre a fájl (pl. 123456.file)
|
||||||
|
$originalFilename = $_POST["originalFilenameField"]; //ez volt az eredeti neve (pl. szoveg.doc)
|
||||||
|
$storeFilena me = time()."_".$originalFilename; //ezen a neven taroljuk mi (pl. 2347686323_szoveg.doc)
|
||||||
|
}
|
||||||
|
// ha egyszerűsítve:
|
||||||
|
else if ($_FILES["originalFilenameField"]["error"]==0){
|
||||||
|
|
||||||
|
$feltolt_konyvtar = $storeFolder;
|
||||||
|
|
||||||
|
$storeFilename=time()."_". $_FILES["originalFilenameField"]["name"];
|
||||||
|
|
||||||
|
$error = "";
|
||||||
|
/* Kiterjesztés ellenőrzése
|
||||||
|
|
||||||
|
$mi = $_FILES['originalFilenameField']['name']."$";
|
||||||
|
|
||||||
|
$mire = "\.bmp|\.jpg|\.jpeg|\.png|\.gif|\.tif|\.BMP|\.JPG|\.PNG|\.GIF";
|
||||||
|
if( !(ereg( $mire , $mi )) ){
|
||||||
|
$error .= "Hibás fájl kiterjesztés, elfogadott kiterjesztések: .bmp, .jpg, .png, .gif<br />";
|
||||||
|
}*/
|
||||||
|
|
||||||
|
else if( $this->input->post('hsz') != "" && !$error){
|
||||||
|
if (copy($_FILES["originalFilenameField"]["tmp_name"],$storeFilename)){
|
||||||
|
$prFile = $storeFilename;
|
||||||
|
$mit = $storeFolder."/".$kep;
|
||||||
|
chmod($mit,0777);
|
||||||
|
$prSize = $_FILES['originalFilenameField']['size'];
|
||||||
|
$tempFilename = $_FILES["originalFilenameField"]["tmp_name"];
|
||||||
|
}else{
|
||||||
|
$prFile = "NULL";
|
||||||
|
}
|
||||||
|
}
|
||||||
|
}
|
||||||
|
|
||||||
|
|
||||||
|
$tempPath= $tempFolder.$tempFilename;
|
||||||
|
$storePath = $storeFolder.$storeFilename;
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
//DEBUG:
|
||||||
|
print "<pre>";
|
||||||
|
print_r ($_POST);
|
||||||
|
print "tempFilename: <b>$tempFilename</b>\n";
|
||||||
|
print "originalFilename: <b>$originalFilename</b>\n";
|
||||||
|
print "storedFilename: <b>$storedFilename</b>\n";
|
||||||
|
print "tempFolder: <b>$tempFolder</b>\n";
|
||||||
|
print "storeFolder: <b>$storeFolder</b>\n";
|
||||||
|
print "tempPath: <b>$tempPath</b>\n";
|
||||||
|
print "storePath: <b>$storePath</b>\n";
|
||||||
|
|
||||||
|
print "</pre>";
|
||||||
|
|
||||||
|
if ((strlen($tempFilename) < 3) || (strlen($originalFilename) < 3))
|
||||||
|
die ("Hibás fáljnevek!");
|
||||||
|
|
||||||
|
if (!rename($tempPath,$storePath))
|
||||||
|
die ("Nem sikerül a helyére másolni a feltöltött fájlt!");
|
||||||
|
|
||||||
|
print "<h1>Sikeres feltöltés ($originalFilename)</h1>";
|
||||||
|
|
||||||
|
?>
|
||||||
@ -0,0 +1,15 @@
|
|||||||
|
{
|
||||||
|
"finding_ref": "5345",
|
||||||
|
"log_excerpt": "[quarantine] partners.archlinexp.com:application/views/objects/submit.php -> quarantined (dest=/var/lib/web-hids/quarantine/var/www/hosting/archlinexp.com/partners/application/views/objects/submit.php)",
|
||||||
|
"original_sha256": "79a5a4a225083fadcdbfd71ac01d201e386ec1aa5535726917d9c555dc8534d0",
|
||||||
|
"original_stat": {
|
||||||
|
"gid": 30037,
|
||||||
|
"mtime": 1396359082,
|
||||||
|
"size": 2174,
|
||||||
|
"uid": 11669
|
||||||
|
},
|
||||||
|
"rel_path": "application/views/objects/submit.php",
|
||||||
|
"result": "quarantined",
|
||||||
|
"timestamp": "20260718T160424Z",
|
||||||
|
"vhost": "partners.archlinexp.com"
|
||||||
|
}
|
||||||
@ -0,0 +1,69 @@
|
|||||||
|
<?php
|
||||||
|
|
||||||
|
$tempFolder = "/"; //ide másolja az FTP applet a fájlt
|
||||||
|
$storeFolder = "/home/cadline/public_html/website/public/projects/"; //mi itt szeretnénk tárolni
|
||||||
|
|
||||||
|
// ha java-val:
|
||||||
|
if( isset($_POST["tempFilenameField"]) ){
|
||||||
|
$tempFilename = $_POST["tempFilenameField"]; //ezen a néven kerül feltöltésre a fájl (pl. 123456.file)
|
||||||
|
$originalFilename = $_POST["originalFilenameField"]; //ez volt az eredeti neve (pl. szoveg.doc)
|
||||||
|
$storeFilename = time()."_".$originalFilename; //ezen a neven taroljuk mi (pl. 2347686323_szoveg.doc)
|
||||||
|
}
|
||||||
|
// ha egyszerűsítve:
|
||||||
|
else if ($_FILES["originalFilenameField"]["error"]==0){
|
||||||
|
|
||||||
|
$feltolt_konyvtar = $storeFolder;
|
||||||
|
|
||||||
|
$storeFilename=time()."_". $_FILES["originalFilenameField"]["name"];
|
||||||
|
|
||||||
|
$error = "";
|
||||||
|
/* Kiterjesztés ellenőrzése
|
||||||
|
|
||||||
|
$mi = $_FILES['originalFilenameField']['name']."$";
|
||||||
|
|
||||||
|
$mire = "\.bmp|\.jpg|\.jpeg|\.png|\.gif|\.tif|\.BMP|\.JPG|\.PNG|\.GIF";
|
||||||
|
if( !(ereg( $mire , $mi )) ){
|
||||||
|
$error .= "Hibás fájl kiterjesztés, elfogadott kiterjesztések: .bmp, .jpg, .png, .gif<br />";
|
||||||
|
}*/
|
||||||
|
|
||||||
|
else if( $this->input->post('hsz') != "" && !$error){
|
||||||
|
if (copy($_FILES["originalFilenameField"]["tmp_name"],$storeFilename)){
|
||||||
|
$prFile = $storeFilename;
|
||||||
|
$mit = $storeFolder."/".$kep;
|
||||||
|
chmod($mit,0777);
|
||||||
|
$prSize = $_FILES['originalFilenameField']['size'];
|
||||||
|
$tempFilename = $_FILES["originalFilenameField"]["tmp_name"];
|
||||||
|
}else{
|
||||||
|
$prFile = "NULL";
|
||||||
|
}
|
||||||
|
}
|
||||||
|
}
|
||||||
|
|
||||||
|
|
||||||
|
$tempPath= $tempFolder.$tempFilename;
|
||||||
|
$storePath = $storeFolder.$storeFilename;
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
//DEBUG:
|
||||||
|
print "<pre>";
|
||||||
|
print_r ($_POST);
|
||||||
|
print "tempFilename: <b>$tempFilename</b>\n";
|
||||||
|
print "originalFilename: <b>$originalFilename</b>\n";
|
||||||
|
print "storedFilename: <b>$storedFilename</b>\n";
|
||||||
|
print "tempFolder: <b>$tempFolder</b>\n";
|
||||||
|
print "storeFolder: <b>$storeFolder</b>\n";
|
||||||
|
print "tempPath: <b>$tempPath</b>\n";
|
||||||
|
print "storePath: <b>$storePath</b>\n";
|
||||||
|
|
||||||
|
print "</pre>";
|
||||||
|
|
||||||
|
if ((strlen($tempFilename) < 3) || (strlen($originalFilename) < 3))
|
||||||
|
die ("Hibás fáljnevek!");
|
||||||
|
|
||||||
|
if (!rename($tempPath,$storePath))
|
||||||
|
die ("Nem sikerül a helyére másolni a feltöltött fájlt!");
|
||||||
|
|
||||||
|
print "<h1>Sikeres feltöltés ($originalFilename)</h1>";
|
||||||
|
|
||||||
|
?>
|
||||||
@ -0,0 +1,15 @@
|
|||||||
|
{
|
||||||
|
"finding_ref": "5346",
|
||||||
|
"log_excerpt": "[quarantine] partners.archlinexp.com:application/views/projects/submit.php -> quarantined (dest=/var/lib/web-hids/quarantine/var/www/hosting/archlinexp.com/partners/application/views/projects/submit.php)",
|
||||||
|
"original_sha256": "26abc82bae9ad062f66a6fc78021fdb126eebc56d1b77527148c2773cf5c0c44",
|
||||||
|
"original_stat": {
|
||||||
|
"gid": 30037,
|
||||||
|
"mtime": 1396359083,
|
||||||
|
"size": 2173,
|
||||||
|
"uid": 11669
|
||||||
|
},
|
||||||
|
"rel_path": "application/views/projects/submit.php",
|
||||||
|
"result": "quarantined",
|
||||||
|
"timestamp": "20260718T160424Z",
|
||||||
|
"vhost": "partners.archlinexp.com"
|
||||||
|
}
|
||||||
120
var/www/hosting/archlinexp.com/partners/public/order/nonpro.php
Normal file
120
var/www/hosting/archlinexp.com/partners/public/order/nonpro.php
Normal file
@ -0,0 +1,120 @@
|
|||||||
|
<?php
|
||||||
|
if(isset($_POST) == true) {
|
||||||
|
require_once("hivasok.php");
|
||||||
|
|
||||||
|
$config['db_host']='localhost';
|
||||||
|
$config['db_user']='cadline';
|
||||||
|
$config['db_pass']='Shea6hoo';
|
||||||
|
$config['db_name']='cl_hlusers';
|
||||||
|
|
||||||
|
$msh = new hivasok();
|
||||||
|
$msh->init($config['db_host'], $config['db_name'], $config['db_user'], $config['db_pass']);
|
||||||
|
$cntry = $_POST['orszag'];
|
||||||
|
|
||||||
|
|
||||||
|
//Utolsó order Number
|
||||||
|
$msh->query("SELECT `order` FROM `o_orders` WHERE `country` = '{$cntry}' ORDER BY `id` DESC limit 1");
|
||||||
|
$order=$msh->fetchNext();
|
||||||
|
$orderNumber = $order['order'];
|
||||||
|
// Majd a rákövetkező, ez kerül be adatbázisba
|
||||||
|
$kezdo = strpos($orderNumber, "-")+1;
|
||||||
|
$veg = strpos($orderNumber, "/")-2;
|
||||||
|
$szam = (int)substr($orderNumber, $kezdo, $veg)+1;
|
||||||
|
$prOrderNumber = "E-".$szam."/".date("Y");
|
||||||
|
|
||||||
|
$msh->query("SELECT `ctrNameEng` FROM `countries` WHERE `ctrID` = '{$cntry}'");
|
||||||
|
$ctryName = $msh->fetchNext();
|
||||||
|
$orszagNev = $ctryName['ctrNameEng'];
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
//Fájlnév
|
||||||
|
// $temp = explode(".", $_FILES["file"]["name"]); <-- Ha megváltozik a fájl neve, akkor a kiterjesztés itt lesz
|
||||||
|
// $fileName = $fajlNev.'.'.end($temp);
|
||||||
|
|
||||||
|
$fileName = $_FILES["file"]["name"];
|
||||||
|
|
||||||
|
//Célmappa
|
||||||
|
$targetDir = "../../";
|
||||||
|
$targetFilePath = $targetDir.$fileName;
|
||||||
|
|
||||||
|
// Engedélyezett fájlkiterjesztések
|
||||||
|
$fileType = pathinfo($targetFilePath,PATHINFO_EXTENSION);
|
||||||
|
$allowTypes = array('jpg', 'png', 'jpeg', 'gif', 'pdf', 'docx', 'doc', 'txt', 'bmp');
|
||||||
|
|
||||||
|
if (in_array($fileType, $allowTypes)) {
|
||||||
|
// Feltöltés a szerverre
|
||||||
|
if (move_uploaded_file($_FILES["file"]["tmp_name"], $targetFilePath)) {
|
||||||
|
// $eredmeny['sikeres'] = "Sikeres felöltés";
|
||||||
|
}
|
||||||
|
else {
|
||||||
|
$eredmeny['hiba'] = "Error in file uploading";
|
||||||
|
echo json_encode($eredmeny);
|
||||||
|
return false;
|
||||||
|
}
|
||||||
|
}
|
||||||
|
else {
|
||||||
|
$eredmeny['hiba'] = "Unknown file extension";
|
||||||
|
echo json_encode($eredmeny);
|
||||||
|
return false;
|
||||||
|
}
|
||||||
|
|
||||||
|
|
||||||
|
//recipient
|
||||||
|
$to = 'office@cadline.hu';
|
||||||
|
//sender
|
||||||
|
$from = 'partnering@archlinexp.com';
|
||||||
|
$fromName = 'ARCHLineXP Retail Store Enrollment Certification';
|
||||||
|
|
||||||
|
//email subject
|
||||||
|
$subject = 'Attachment for order: '.$orszagNev.' '.$prOrderNumber.' Non-profit';
|
||||||
|
|
||||||
|
//attachment file path
|
||||||
|
$file = $targetFilePath;
|
||||||
|
|
||||||
|
//email body content
|
||||||
|
$htmlContent = '<h1>Enrollment Certification</h1>';
|
||||||
|
|
||||||
|
//header for sender info
|
||||||
|
$headers = "From: $fromName"." <".$from.">";
|
||||||
|
|
||||||
|
//boundary
|
||||||
|
$semi_rand = md5(time());
|
||||||
|
$mime_boundary = "==Multipart_Boundary_x{$semi_rand}x";
|
||||||
|
|
||||||
|
//headers for attachment
|
||||||
|
$headers .= "\nMIME-Version: 1.0\n" . "Content-Type: multipart/mixed;\n" . " boundary=\"{$mime_boundary}\"";
|
||||||
|
|
||||||
|
//multipart boundary
|
||||||
|
$message = "--{$mime_boundary}\n" . "Content-Type: text/html; charset=\"UTF-8\"\n" .
|
||||||
|
"Content-Transfer-Encoding: 7bit\n\n" . $htmlContent . "\n\n";
|
||||||
|
|
||||||
|
//preparing attachment
|
||||||
|
if(!empty($file) > 0){
|
||||||
|
if(is_file($file)){
|
||||||
|
$message .= "--{$mime_boundary}\n";
|
||||||
|
$fp = @fopen($file,"rb");
|
||||||
|
$data = @fread($fp,filesize($file));
|
||||||
|
|
||||||
|
@fclose($fp);
|
||||||
|
$data = chunk_split(base64_encode($data));
|
||||||
|
$message .= "Content-Type: application/octet-stream; name=\"".basename($file)."\"\n" .
|
||||||
|
"Content-Description: ".basename($files[$i])."\n" .
|
||||||
|
"Content-Disposition: attachment;\n" . " filename=\"".basename($file)."\"; size=".filesize($file).";\n" .
|
||||||
|
"Content-Transfer-Encoding: base64\n\n" . $data . "\n\n";
|
||||||
|
}
|
||||||
|
}
|
||||||
|
// $message .= "--{$mime_boundary}--";
|
||||||
|
$returnpath = "-f" . $from;
|
||||||
|
|
||||||
|
//send email
|
||||||
|
if ($cntry != '37')
|
||||||
|
$mail = @mail($to, $subject, $message, $headers, $returnpath);
|
||||||
|
|
||||||
|
//email sending status
|
||||||
|
// echo $mail?"<h1>Mail sent.</h1>":"<h1>Mail sending failed.</h1>";
|
||||||
|
|
||||||
|
unlink($targetFilePath);
|
||||||
|
|
||||||
|
}
|
||||||
|
?>
|
||||||
@ -0,0 +1,15 @@
|
|||||||
|
{
|
||||||
|
"finding_ref": "5431",
|
||||||
|
"log_excerpt": "[quarantine] partners.archlinexp.com:public/order/nonpro.php -> quarantined (dest=/var/lib/web-hids/quarantine/var/www/hosting/archlinexp.com/partners/public/order/nonpro.php)",
|
||||||
|
"original_sha256": "ced4101b56c89a10905dec6c040e30953f093bea56cbbe66c970826ce31c9411",
|
||||||
|
"original_stat": {
|
||||||
|
"gid": 30037,
|
||||||
|
"mtime": 1639468483,
|
||||||
|
"size": 4119,
|
||||||
|
"uid": 11669
|
||||||
|
},
|
||||||
|
"rel_path": "public/order/nonpro.php",
|
||||||
|
"result": "quarantined",
|
||||||
|
"timestamp": "20260718T160424Z",
|
||||||
|
"vhost": "partners.archlinexp.com"
|
||||||
|
}
|
||||||
2255
var/www/hosting/archlinexp.com/partners/public/order/szerver.php
Normal file
2255
var/www/hosting/archlinexp.com/partners/public/order/szerver.php
Normal file
File diff suppressed because it is too large
Load Diff
@ -0,0 +1,15 @@
|
|||||||
|
{
|
||||||
|
"finding_ref": "5432",
|
||||||
|
"log_excerpt": "[quarantine] partners.archlinexp.com:public/order/szerver.php -> quarantined (dest=/var/lib/web-hids/quarantine/var/www/hosting/archlinexp.com/partners/public/order/szerver.php)",
|
||||||
|
"original_sha256": "7b8dee9c5d3bc7610ae0983b64bf14ed45468a114c644cee34849d503c6dc9d7",
|
||||||
|
"original_stat": {
|
||||||
|
"gid": 30037,
|
||||||
|
"mtime": 1649056601,
|
||||||
|
"size": 110825,
|
||||||
|
"uid": 12425
|
||||||
|
},
|
||||||
|
"rel_path": "public/order/szerver.php",
|
||||||
|
"result": "quarantined",
|
||||||
|
"timestamp": "20260718T160424Z",
|
||||||
|
"vhost": "partners.archlinexp.com"
|
||||||
|
}
|
||||||
1553
var/www/hosting/archlinexp.com/partners/public/order/szerver2.php
Normal file
1553
var/www/hosting/archlinexp.com/partners/public/order/szerver2.php
Normal file
File diff suppressed because it is too large
Load Diff
@ -0,0 +1,15 @@
|
|||||||
|
{
|
||||||
|
"finding_ref": "5430",
|
||||||
|
"log_excerpt": "[quarantine] partners.archlinexp.com:public/order/szerver2.php -> quarantined (dest=/var/lib/web-hids/quarantine/var/www/hosting/archlinexp.com/partners/public/order/szerver2.php)",
|
||||||
|
"original_sha256": "e719641444395e6412e4bbe9a2c485ebfa20efc84d340c4b6ae2f6561a1f7464",
|
||||||
|
"original_stat": {
|
||||||
|
"gid": 30037,
|
||||||
|
"mtime": 1643362537,
|
||||||
|
"size": 75233,
|
||||||
|
"uid": 12425
|
||||||
|
},
|
||||||
|
"rel_path": "public/order/szerver2.php",
|
||||||
|
"result": "quarantined",
|
||||||
|
"timestamp": "20260718T160424Z",
|
||||||
|
"vhost": "partners.archlinexp.com"
|
||||||
|
}
|
||||||
@ -0,0 +1,123 @@
|
|||||||
|
<?php
|
||||||
|
if (isset($_POST) == true) {
|
||||||
|
require_once("hivasok.php");
|
||||||
|
|
||||||
|
$config['db_host'] = 'localhost';
|
||||||
|
$config['db_user'] = 'cadline';
|
||||||
|
$config['db_pass'] = 'Shea6hoo';
|
||||||
|
$config['db_name'] = 'cl_hlusers';
|
||||||
|
|
||||||
|
$msh = new hivasok();
|
||||||
|
$msh->init($config['db_host'], $config['db_name'], $config['db_user'], $config['db_pass']);
|
||||||
|
|
||||||
|
$cntry = $_POST['orszag'];
|
||||||
|
$email = $_POST['email'];
|
||||||
|
|
||||||
|
$felhasznalo = "SELECT `nUserID` FROM `u_emails` WHERE `email` = '".$email."' limit 1";
|
||||||
|
$msh->query($felhasznalo);
|
||||||
|
$felh = $msh->fetchNext();
|
||||||
|
$user = $felh['nUserID'];
|
||||||
|
|
||||||
|
$msh->query("SELECT `order` FROM `o_orders` WHERE `country` = '{$cntry}' ORDER BY `id` DESC limit 1");
|
||||||
|
$order=$msh->fetchNext();
|
||||||
|
$orderNumber = $order['order'];
|
||||||
|
|
||||||
|
$kezdo = strpos($orderNumber, "-")+1;
|
||||||
|
$veg = strpos($orderNumber, "/")-2;
|
||||||
|
$szam = (int)substr($orderNumber, $kezdo, $veg);
|
||||||
|
$prOrderNumber = "E-".$szam."/".date("Y");
|
||||||
|
|
||||||
|
$msh->query("SELECT `ctrNameEng` FROM `countries` WHERE `ctrID` = '{$cntry}'");
|
||||||
|
$ctryName = $msh->fetchNext();
|
||||||
|
$orszagNev = $ctryName['ctrNameEng'];
|
||||||
|
|
||||||
|
$fileName = $_FILES["file"]["name"];
|
||||||
|
$targetDir = "../../";
|
||||||
|
$targetFilePath = $targetDir.$fileName;
|
||||||
|
|
||||||
|
$fileType = pathinfo($targetFilePath, PATHINFO_EXTENSION);
|
||||||
|
$allowTypes = array('jpg', 'png', 'jpeg', 'gif', 'pdf', 'docx', 'doc', 'txt', 'bmp');
|
||||||
|
|
||||||
|
if (in_array($fileType, $allowTypes)) {
|
||||||
|
if (!move_uploaded_file($_FILES["file"]["tmp_name"], $targetFilePath)) {
|
||||||
|
$eredmeny['hiba'] = "Error in file uploading";
|
||||||
|
echo json_encode($eredmeny);
|
||||||
|
return false;
|
||||||
|
}
|
||||||
|
} else {
|
||||||
|
$eredmeny['hiba'] = "Unknown file extension";
|
||||||
|
echo json_encode($eredmeny);
|
||||||
|
return false;
|
||||||
|
}
|
||||||
|
|
||||||
|
$to = 'office@cadline.hu';
|
||||||
|
$from = 'partnering@archlinexp.com';
|
||||||
|
$fromName = 'ARCHLineXP Retail Store';
|
||||||
|
$subject = 'Attachment for order: '.$orszagNev.' '.$prOrderNumber;
|
||||||
|
$file = $targetFilePath;
|
||||||
|
$htmlContent = '<h1>'.$_POST['file_info'].'</h1>';
|
||||||
|
$headers = "From: $fromName"." <".$from.">";
|
||||||
|
$semi_rand = md5(time());
|
||||||
|
$mime_boundary = "==Multipart_Boundary_x{$semi_rand}x";
|
||||||
|
|
||||||
|
$headers .= "\nMIME-Version: 1.0\n" . "Content-Type: multipart/mixed;\n" . " boundary=\"{$mime_boundary}\"";
|
||||||
|
$message = "--{$mime_boundary}\n" . "Content-Type: text/html; charset=\"UTF-8\"\n" .
|
||||||
|
"Content-Transfer-Encoding: 7bit\n\n" . $htmlContent . "\n\n";
|
||||||
|
|
||||||
|
if (!empty($file) > 0){
|
||||||
|
if(is_file($file)){
|
||||||
|
$message .= "--{$mime_boundary}\n";
|
||||||
|
$fp = @fopen($file,"rb");
|
||||||
|
$data = @fread($fp,filesize($file));
|
||||||
|
|
||||||
|
@fclose($fp);
|
||||||
|
$data = chunk_split(base64_encode($data));
|
||||||
|
$message .= "Content-Type: application/octet-stream; name=\"".basename($file)."\"\n" .
|
||||||
|
"Content-Description: ".basename($files[$i])."\n" .
|
||||||
|
"Content-Disposition: attachment;\n" . " filename=\"".basename($file)."\"; size=".filesize($file).";\n" .
|
||||||
|
"Content-Transfer-Encoding: base64\n\n" . $data . "\n\n";
|
||||||
|
}
|
||||||
|
}
|
||||||
|
|
||||||
|
$returnpath = "-f" . $from;
|
||||||
|
|
||||||
|
if ($cntry != '37') {
|
||||||
|
$mail = @mail($to, $subject, $message, $headers, $returnpath);
|
||||||
|
}
|
||||||
|
|
||||||
|
if (function_exists('curl_file_create')) {
|
||||||
|
$cFile = curl_file_create($file, $_FILES[$name]['type'], basename($file));
|
||||||
|
|
||||||
|
$post = [
|
||||||
|
'file_content' => $cFile,
|
||||||
|
'action' => 'uploadFile',
|
||||||
|
'nUserID' => $user,
|
||||||
|
'file_info' => $_POST['file_info']
|
||||||
|
];
|
||||||
|
|
||||||
|
$login = 'mate.nagy@cadline.hu';
|
||||||
|
$password = 'Mng67otf';
|
||||||
|
$url = 'https://crm.cadline.hu/imre.php';
|
||||||
|
$ch = curl_init();
|
||||||
|
|
||||||
|
curl_setopt($ch, CURLOPT_URL,$url);
|
||||||
|
curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, 0);
|
||||||
|
curl_setopt($ch, CURLOPT_FOLLOWLOCATION, true);
|
||||||
|
curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);
|
||||||
|
curl_setopt($ch, CURLOPT_POSTFIELDS, $post);
|
||||||
|
curl_setopt($ch, CURLOPT_HTTPAUTH, CURLAUTH_BASIC);
|
||||||
|
curl_setopt($ch, CURLOPT_USERPWD, "$login:$password");
|
||||||
|
|
||||||
|
$result = curl_exec($ch);
|
||||||
|
|
||||||
|
curl_close($ch);
|
||||||
|
|
||||||
|
|
||||||
|
$eredmeny['sikeres'] = 'true';
|
||||||
|
}
|
||||||
|
|
||||||
|
unlink($targetFilePath);
|
||||||
|
|
||||||
|
echo json_encode($eredmeny);
|
||||||
|
}
|
||||||
|
?>
|
||||||
@ -0,0 +1,15 @@
|
|||||||
|
{
|
||||||
|
"finding_ref": "5429",
|
||||||
|
"log_excerpt": "[quarantine] partners.archlinexp.com:public/order/uploadDocument.php -> quarantined (dest=/var/lib/web-hids/quarantine/var/www/hosting/archlinexp.com/partners/public/order/uploadDocument.php)",
|
||||||
|
"original_sha256": "caff146c66537fbbb7dbafe119045537ba0005db4a102c720ad6b5ff674b0eb6",
|
||||||
|
"original_stat": {
|
||||||
|
"gid": 30037,
|
||||||
|
"mtime": 1639492644,
|
||||||
|
"size": 4443,
|
||||||
|
"uid": 12425
|
||||||
|
},
|
||||||
|
"rel_path": "public/order/uploadDocument.php",
|
||||||
|
"result": "quarantined",
|
||||||
|
"timestamp": "20260718T160424Z",
|
||||||
|
"vhost": "partners.archlinexp.com"
|
||||||
|
}
|
||||||
@ -0,0 +1,31 @@
|
|||||||
|
<?php
|
||||||
|
|
||||||
|
function renderUploadForm() {
|
||||||
|
$output = '<form enctype="multipart/form-data" action="index.php" method="POST">';
|
||||||
|
$output .= 'Here you can upload your translation files: <input name="uploaded_file" type="file"/>';
|
||||||
|
$output .= '<input type="submit" value="Upload" />';
|
||||||
|
$output .= '</form>';
|
||||||
|
return $output;
|
||||||
|
}
|
||||||
|
|
||||||
|
function processUpload($dir) {
|
||||||
|
if (!isset ($_FILES['uploaded_file']))
|
||||||
|
return "";
|
||||||
|
|
||||||
|
$path_parts = pathinfo($_FILES['uploaded_file']['name']);
|
||||||
|
/*if (($path_parts['filename'] != "TranslatPopMenu") && ($path_parts['filename'] != "TranslatMapMenu")
|
||||||
|
&& ($path_parts['filename'] != "TranslatInterface") && ($path_parts['filename'] != "TranslatStamp"))
|
||||||
|
return "<span class=errormessage>WARNING! The file hasn't been uploaded yet. Use the TranslatInterface.xxx, TranslatStamp.xxx, TranslatPopMenu.xxx or TranslatMapMenu.xxx file names, where xxx is the language code like 'hun'. The names are case-sensitive.</span>";
|
||||||
|
*/
|
||||||
|
|
||||||
|
if ($path_parts['filename'] != "Translat_Int" && $path_parts['filename'] != "TranslatePG")
|
||||||
|
return "<span class=errormessage>WARNING! The file hasn't been uploaded yet. Use the Translat_Int.xxx file name, where xxx is the language code like 'hun'. The names are case-sensitive.</span>";
|
||||||
|
|
||||||
|
$targetpath = $dir ."/". basename( $_FILES['uploaded_file']['name']) ;
|
||||||
|
|
||||||
|
if(move_uploaded_file($_FILES['uploaded_file']['tmp_name'], $targetpath))
|
||||||
|
return "The file ". basename( $_FILES['uploaded_file']['name']). " has been uploaded";
|
||||||
|
else
|
||||||
|
return "Sorry, there was a problem uploading your file.";
|
||||||
|
}
|
||||||
|
?>
|
||||||
@ -0,0 +1,15 @@
|
|||||||
|
{
|
||||||
|
"finding_ref": "5428",
|
||||||
|
"log_excerpt": "[quarantine] partners.archlinexp.com:public/resourcemanager/uploader.php -> quarantined (dest=/var/lib/web-hids/quarantine/var/www/hosting/archlinexp.com/partners/public/resourcemanager/uploader.php)",
|
||||||
|
"original_sha256": "fdf26f52fcd52019b8c9a16ea80bbd34be04fb1ab65aa63ecae7c11cb53e0c80",
|
||||||
|
"original_stat": {
|
||||||
|
"gid": 30037,
|
||||||
|
"mtime": 1460976582,
|
||||||
|
"size": 1572,
|
||||||
|
"uid": 11669
|
||||||
|
},
|
||||||
|
"rel_path": "public/resourcemanager/uploader.php",
|
||||||
|
"result": "quarantined",
|
||||||
|
"timestamp": "20260718T160424Z",
|
||||||
|
"vhost": "partners.archlinexp.com"
|
||||||
|
}
|
||||||
@ -0,0 +1,97 @@
|
|||||||
|
<?php
|
||||||
|
// @ Add or modify a record to the user
|
||||||
|
// @ in: $in_nUserID - mindex of user if NULL INSERT INTO
|
||||||
|
?>
|
||||||
|
<?php include("inc_variables.php");?>
|
||||||
|
<?php include("inc_functions.php");?>
|
||||||
|
<?php include("inc_functions_users.php");?>
|
||||||
|
<?php
|
||||||
|
|
||||||
|
$target_path = 'images/users/';
|
||||||
|
$target_path = $target_path . basename( $_FILES['Picture']['name']);
|
||||||
|
|
||||||
|
foreach($_POST as $key => $p)
|
||||||
|
$$key = $p;
|
||||||
|
|
||||||
|
if($_FILES['Picture']['name']!='' && move_uploaded_file($_FILES['Picture']['tmp_name'], $target_path))
|
||||||
|
$Picture = $target_path;
|
||||||
|
else
|
||||||
|
$Picture = '';
|
||||||
|
|
||||||
|
if( !isset($Save) ){
|
||||||
|
if( isset( $in_nUserID )&& $in_nUserID>0)
|
||||||
|
cl_redirect("user_detail.php?in_nUserID=$in_nUserID");
|
||||||
|
exit;
|
||||||
|
}
|
||||||
|
|
||||||
|
$connection = cl_connect();
|
||||||
|
cl_select($connection);
|
||||||
|
// @ Modify?
|
||||||
|
if( $in_nUserID != NULL ){
|
||||||
|
if( strcmp($County,$lang_automata)==0)
|
||||||
|
$County = cl_get_state($City);
|
||||||
|
|
||||||
|
$EMail = str_replace(',', ';', $EMail);
|
||||||
|
|
||||||
|
$query = "UPDATE $g_table_users SET
|
||||||
|
strName='$Name',
|
||||||
|
strCompany='$Company',
|
||||||
|
strTel='$Tel',
|
||||||
|
strMobil='$Mobil',
|
||||||
|
strFax='$Fax',
|
||||||
|
strEMail='$EMail',
|
||||||
|
strCounty='$County',
|
||||||
|
strZip='$Zip',
|
||||||
|
strCity='$City',
|
||||||
|
strStreet='$Street',
|
||||||
|
strInfo='$Info',
|
||||||
|
strWeb='$Web',
|
||||||
|
strSkype='$Skype',";
|
||||||
|
|
||||||
|
if($Picture_del != 1)
|
||||||
|
$Picture == '' ? '' : $query .= "strPicture='$Picture',";
|
||||||
|
else
|
||||||
|
$query .= 'strPicture=null,';
|
||||||
|
|
||||||
|
$query .= "nManagerID='$NManagerID',
|
||||||
|
nIsCommendatory='$NIsCommendatory',
|
||||||
|
nCommendatoryID='$NCommendatoryID',
|
||||||
|
strInvoiceAddress='$StrInvoiceAddress',
|
||||||
|
strTaxNumber='$StrTaxNumber',
|
||||||
|
strCompanyNumber='$StrCompanyNumber',
|
||||||
|
strBankNumber='$StrBankNumber',
|
||||||
|
nUserProf='$Profession'
|
||||||
|
WHERE nUserID=$in_nUserID";
|
||||||
|
cl_query($query);
|
||||||
|
cl_redirect("user_detail.php?in_nUserID=$in_nUserID");
|
||||||
|
}else{
|
||||||
|
$nUserID = cl_get_user_id($Name,$City,$Street);
|
||||||
|
|
||||||
|
if( $nUserID>0 ){
|
||||||
|
echo $exists_user."<BR>";
|
||||||
|
cl_redirect("users_page.php",false);
|
||||||
|
}else{
|
||||||
|
if( strcmp($County,$lang_automata)==0)
|
||||||
|
$County = cl_get_state($City);
|
||||||
|
|
||||||
|
$EMail = str_replace(',', ';', $EMail);
|
||||||
|
|
||||||
|
$query = "INSERT INTO $g_table_users
|
||||||
|
(strName, strCompany, strTel, strMobil, strFax, strEMail, strCounty, strZip, strCity, strStreet, strInfo, strWeb, strSkype, nManagerID,
|
||||||
|
nIsCommendatory,nCommendatoryID,strInvoiceAddress,strTaxNumber,strCompanyNumber,strBankNumber,nUserProf";
|
||||||
|
$Picture == '' ? '' : $query .= ',strPicture';
|
||||||
|
$query .= ")";
|
||||||
|
|
||||||
|
$query .= " VALUES('$Name','$Company','$Tel','$Mobil','$Fax','$EMail','$County','$Zip','$City','$Street','$Info','$Web','$Skype','$NManagerID','$NIsCommendatory','$NCommendatoryID','$StrInvoiceAddress','$StrTaxNumber','$StrCompanyNumber','$StrBankNumber', '$Profession'";
|
||||||
|
|
||||||
|
$Picture == '' ? '' : $query .= ",'$Picture'";
|
||||||
|
|
||||||
|
$query .= ")";
|
||||||
|
cl_query($query);
|
||||||
|
$UserID=mysql_insert_id();
|
||||||
|
cl_redirect("user_detail.php?in_nUserID=$UserID");
|
||||||
|
}
|
||||||
|
}
|
||||||
|
cl_close( $connection );
|
||||||
|
exit;
|
||||||
|
?>
|
||||||
@ -0,0 +1,15 @@
|
|||||||
|
{
|
||||||
|
"finding_ref": "6508",
|
||||||
|
"log_excerpt": "[quarantine] clusers.cadline.hu:clusers/.svn/text-base/user_new_submit.php.svn-base -> quarantined (dest=/var/lib/web-hids/quarantine/var/www/hosting/cadline.hu/clusers/clusers/.svn/text-base/user_new_submit.php.svn-base)",
|
||||||
|
"original_sha256": "6967d992a9ea9a197dc185dbf43a0d871dba4c5a5c5224ed9b4841f4f11080aa",
|
||||||
|
"original_stat": {
|
||||||
|
"gid": 30037,
|
||||||
|
"mtime": 1265662389,
|
||||||
|
"size": 3080,
|
||||||
|
"uid": 11669
|
||||||
|
},
|
||||||
|
"rel_path": "clusers/.svn/text-base/user_new_submit.php.svn-base",
|
||||||
|
"result": "quarantined",
|
||||||
|
"timestamp": "20260718T160424Z",
|
||||||
|
"vhost": "clusers.cadline.hu"
|
||||||
|
}
|
||||||
208
var/www/hosting/cadline.hu/clusers/clusers/user_new_submit.php
Normal file
208
var/www/hosting/cadline.hu/clusers/clusers/user_new_submit.php
Normal file
@ -0,0 +1,208 @@
|
|||||||
|
<?php
|
||||||
|
// @ Add or modify a record to the user
|
||||||
|
// @ in: $in_nUserID - mindex of user if NULL INSERT INTO
|
||||||
|
?>
|
||||||
|
<?php include("inc_variables.php");?>
|
||||||
|
<?php include("inc_functions.php");?>
|
||||||
|
<?php include("inc_functions_users.php");?>
|
||||||
|
<?php
|
||||||
|
|
||||||
|
$target_path = 'images/users/';
|
||||||
|
$target_path = $target_path . basename( $_FILES['Picture']['name']);
|
||||||
|
|
||||||
|
foreach($_POST as $key => $p)
|
||||||
|
$$key = $p;
|
||||||
|
|
||||||
|
if($_FILES['Picture']['name']!='' && move_uploaded_file($_FILES['Picture']['tmp_name'], $target_path))
|
||||||
|
$Picture = $target_path;
|
||||||
|
else
|
||||||
|
$Picture = '';
|
||||||
|
|
||||||
|
if( !isset($Save) ){
|
||||||
|
if( isset( $in_nUserID )&& $in_nUserID>0)
|
||||||
|
cl_redirect("user_detail.php?in_nUserID=$in_nUserID");
|
||||||
|
else
|
||||||
|
cl_redirect("users_page.php");
|
||||||
|
exit;
|
||||||
|
}
|
||||||
|
|
||||||
|
$connection = cl_connect();
|
||||||
|
cl_select($connection);
|
||||||
|
// @ Modify?
|
||||||
|
if( $in_nUserID != NULL ){
|
||||||
|
if( strcmp($County,$lang_automata)==0)
|
||||||
|
$County = cl_get_state($City);
|
||||||
|
|
||||||
|
$emails = $_POST['EMail'];
|
||||||
|
|
||||||
|
$old_default_email = trim(getDefaultEmail($in_nUserID));
|
||||||
|
|
||||||
|
// nem töröljük az eddig használt logint ...
|
||||||
|
/* if(check_forum_existance($old_default_email) && $emails[0] != $old_default_email){
|
||||||
|
//UpdateForumUser($in_nUserID, $old_default_email, $emails[0]);
|
||||||
|
}
|
||||||
|
*/
|
||||||
|
|
||||||
|
$old_login = trim(getForumLogin($in_nUserID));
|
||||||
|
|
||||||
|
|
||||||
|
/*
|
||||||
|
if(check_forum_existance_by_nUserID($in_nUserID) && trim($emails[0]) != $old_default_email && trim($emails[0]) != ""){
|
||||||
|
//UpdateForumUserByNUserID($in_nUserID, $old_login, $emails[0]);
|
||||||
|
$mailresz = explode('@',$emails[0]);
|
||||||
|
$jelszo = trim($mailresz[0]);
|
||||||
|
InsertUserToForum2($in_nUserID, md5($jelszo), trim($emails[0]), $Name, trim($emails[0]));
|
||||||
|
}*/
|
||||||
|
|
||||||
|
// minden e-mail címmel be lehessen lépni ..
|
||||||
|
if(check_forum_existance_by_nUserID($in_nUserID) && trim($emails[0]) != ""){
|
||||||
|
foreach($emails as $email){
|
||||||
|
if( !check_forum_login_existance($email) && trim($email) != ""){
|
||||||
|
$mailresz = explode('@',$email);
|
||||||
|
$jelszo = trim($mailresz[0]);
|
||||||
|
InsertUserToForum2($in_nUserID, md5($jelszo), trim($email), $Name, trim($email));
|
||||||
|
}
|
||||||
|
}
|
||||||
|
}
|
||||||
|
|
||||||
|
UpdateForumName($in_nUserID, $Name);
|
||||||
|
|
||||||
|
DeleteUserEmails($in_nUserID);
|
||||||
|
UpdateUserEmails($emails, $in_nUserID);
|
||||||
|
|
||||||
|
$Web = webcimme($Web);
|
||||||
|
if($Esely == ""){
|
||||||
|
$Esely = 'NULL';
|
||||||
|
}
|
||||||
|
|
||||||
|
$query = "UPDATE $g_table_users SET
|
||||||
|
strName = '$Name',
|
||||||
|
strCompany = '$Company',
|
||||||
|
strTel = '$Tel',
|
||||||
|
strMobil = '$Mobil',
|
||||||
|
strFax = '$Fax',
|
||||||
|
strCounty = '$County',
|
||||||
|
nCtrID = {$nCtrID},
|
||||||
|
strZip = '$Zip',
|
||||||
|
strCity = '$City',
|
||||||
|
strStreet = '$Street',
|
||||||
|
strInfo = '$Info',
|
||||||
|
nEsely = {$Esely},
|
||||||
|
strWeb = '$Web',
|
||||||
|
strSkype = '$Skype',";
|
||||||
|
|
||||||
|
if($Picture_del != 1)
|
||||||
|
$Picture == '' ? '' : $query .= "strPicture='$Picture',";
|
||||||
|
else
|
||||||
|
$query .= 'strPicture = NULL,';
|
||||||
|
|
||||||
|
$query .= "nManagerID = {$NManagerID},";
|
||||||
|
$query .= !is_numeric($NIsCommendatory) ? "nIsCommendatory = NULL," : "nIsCommendatory = {$NIsCommendatory},";
|
||||||
|
$query .= "nCommendatoryID = {$NCommendatoryID},
|
||||||
|
strInvoiceAddress = '$StrInvoiceAddress',
|
||||||
|
strTaxNumber = '$StrTaxNumber',
|
||||||
|
strCompanyNumber = '$StrCompanyNumber',
|
||||||
|
strBankNumber = '$StrBankNumber',
|
||||||
|
nUserProf = {$Profession}
|
||||||
|
WHERE nUserID = $in_nUserID";
|
||||||
|
//die($query);
|
||||||
|
cl_query($query);
|
||||||
|
|
||||||
|
|
||||||
|
$elozoertekesites = cl_query(" SELECT * FROM cl_ertekesites WHERE nUserID=$in_nUserID");
|
||||||
|
$elozoertekesitesrow = mysql_fetch_array($elozoertekesites, MYSQL_ASSOC);
|
||||||
|
|
||||||
|
if( $elozoertekesitesrow['nUserID'] == "" && ($leiras!="" || $kezzel!="" || $vasarlas!="") ){
|
||||||
|
$query4 = "INSERT INTO `cl_ertekesites` (`nUserID`, `leiras`, `kezzel`, `vasarlas`) VALUES ";
|
||||||
|
$query4 .= "({$in_nUserID}, '{$leiras}', '{$kezzel}', '{$vasarlas}')";
|
||||||
|
|
||||||
|
cl_query($query4);
|
||||||
|
}elseif( $elozoertekesitesrow['nUserID'] != "" ){
|
||||||
|
$query2 = "UPDATE cl_ertekesites SET
|
||||||
|
leiras = '".$leiras."',
|
||||||
|
kezzel = '".$kezzel."',
|
||||||
|
vasarlas = '".$vasarlas."'";
|
||||||
|
$query2 .= " WHERE nUserID=$in_nUserID";
|
||||||
|
|
||||||
|
cl_query($query2);
|
||||||
|
}
|
||||||
|
|
||||||
|
// új esemény ha változott a vásárlási ido
|
||||||
|
if( ($elozoertekesitesrow['vasarlas'] == "" || $elozoertekesitesrow['vasarlas'] != $vasarlas ) && ( $vasarlas != 0 && $vasarlas != "") ){
|
||||||
|
$idopont = date("Y-m-d",time()+(60*60*24*30*$vasarlas));
|
||||||
|
$query3 = "INSERT INTO `cl_Messages` (`nUserID`, `nManagerID`, `dateSend`, `strTopic`, `strMsg`, `bFlag`) VALUES ";
|
||||||
|
$query3 .= "({$in_nUserID}, '{$NManagerID}', '{$idopont}', 'Program vasarlasi terv', 'Program vasarlasi terv, az ertekesitesi adatok alapjan', '0')";
|
||||||
|
|
||||||
|
cl_query($query3);
|
||||||
|
}
|
||||||
|
|
||||||
|
|
||||||
|
cl_redirect("user_detail.php?in_nUserID=$in_nUserID");
|
||||||
|
}else{
|
||||||
|
// $nUserID = cl_get_user_id($Name,$/*$City,$Street*/);
|
||||||
|
foreach($_POST['EMail'] as $email){
|
||||||
|
$nUserID = cl_get_user_id($Name,$email);
|
||||||
|
if( $nUserID>0 && is_numeric($nUserID) )
|
||||||
|
break;
|
||||||
|
}
|
||||||
|
|
||||||
|
if( $nUserID>0 && is_numeric($nUserID) ){
|
||||||
|
echo $exists_user."<BR>Felhasználó: <a href='https://clusers.cadline.hu/clusers/user_detail.php?in_nUserID=".$nUserID."'>".$nUserID."</a><BR>";
|
||||||
|
cl_redirect("users_page.php",false);
|
||||||
|
}else{
|
||||||
|
if( strcmp($County,$lang_automata)==0)
|
||||||
|
$County = cl_get_state($City);
|
||||||
|
|
||||||
|
$EMails = $_POST['EMail'];
|
||||||
|
if($Esely == ""){
|
||||||
|
$Esely = 'NULL';
|
||||||
|
}
|
||||||
|
|
||||||
|
$query = "INSERT INTO $g_table_users
|
||||||
|
(strName, strCompany, strTel, strMobil, strFax, strCounty, strZip, strCity, strStreet, strInfo, strWeb, strSkype, nManagerID,
|
||||||
|
nIsCommendatory,nCommendatoryID,strInvoiceAddress,strTaxNumber,strCompanyNumber,strBankNumber,nUserProf,nEsely";
|
||||||
|
$Picture == '' ? '' : $query .= ',strPicture';
|
||||||
|
$query .= ")";
|
||||||
|
|
||||||
|
$query .= " VALUES('$Name','$Company','$Tel','$Mobil','$Fax','$County','$Zip','$City','$Street','$Info','$Web','$Skype','$NManagerID','$NIsCommendatory','$NCommendatoryID','$StrInvoiceAddress','$StrTaxNumber','$StrCompanyNumber','$StrBankNumber', '$Profession', $Esely";
|
||||||
|
|
||||||
|
$Picture == '' ? '' : $query .= ",'$Picture'";
|
||||||
|
|
||||||
|
$query .= ")";
|
||||||
|
cl_query($query);
|
||||||
|
$UserID=mysql_insert_id();
|
||||||
|
|
||||||
|
$query = "INSERT INTO `cl_users_emails` (`nUserID`, `email`, `default`) VALUES ";
|
||||||
|
|
||||||
|
$default = 1;
|
||||||
|
foreach($EMails as $email){
|
||||||
|
$query .= "({$UserID}, '{$email}', {$default}),";
|
||||||
|
$default = 0;
|
||||||
|
}
|
||||||
|
|
||||||
|
$query = rtrim($query, ',');
|
||||||
|
|
||||||
|
cl_query($query);
|
||||||
|
|
||||||
|
|
||||||
|
$query4 = "INSERT INTO `cl_ertekesites` (`nUserID`, `leiras`, `kezzel`, `vasarlas`) VALUES ";
|
||||||
|
$query4 .= "({$UserID}, '{$leiras}', '{$kezzel}', '{$vasarlas}')";
|
||||||
|
|
||||||
|
cl_query($query4);
|
||||||
|
|
||||||
|
// új esemény ha van vásárlási ido
|
||||||
|
if( $vasarlas != 0 && $vasarlas != "" ){
|
||||||
|
$idopont = date("Y-m-d",time()+(60*60*24*30*$vasarlas));
|
||||||
|
$query3 = "INSERT INTO `cl_Messages` (`nUserID`, `nManagerID`, `dateSend`, `strTopic`, `strMsg`, `bFlag`) VALUES ";
|
||||||
|
$query3 .= "({$in_nUserID}, '{$NManagerID}', '{$idopont}', 'Program vasarlasi terv', 'Program vasarlasi terv (ertekesitesi adatok alapjan)', '0')";
|
||||||
|
|
||||||
|
cl_query($query3);
|
||||||
|
}
|
||||||
|
|
||||||
|
|
||||||
|
cl_redirect("user_detail.php?in_nUserID=$UserID");
|
||||||
|
}
|
||||||
|
}
|
||||||
|
cl_close( $connection );
|
||||||
|
exit;
|
||||||
|
?>
|
||||||
@ -0,0 +1,15 @@
|
|||||||
|
{
|
||||||
|
"finding_ref": "6332",
|
||||||
|
"log_excerpt": "[quarantine] clusers.cadline.hu:clusers/user_new_submit.php -> quarantined (dest=/var/lib/web-hids/quarantine/var/www/hosting/cadline.hu/clusers/clusers/user_new_submit.php)",
|
||||||
|
"original_sha256": "c854211bdbab6a57eb1562aabaa7db338500c4ca11e6dcb72da03358512ec67c",
|
||||||
|
"original_stat": {
|
||||||
|
"gid": 30037,
|
||||||
|
"mtime": 1326097782,
|
||||||
|
"size": 7645,
|
||||||
|
"uid": 11669
|
||||||
|
},
|
||||||
|
"rel_path": "clusers/user_new_submit.php",
|
||||||
|
"result": "quarantined",
|
||||||
|
"timestamp": "20260718T160424Z",
|
||||||
|
"vhost": "clusers.cadline.hu"
|
||||||
|
}
|
||||||
@ -0,0 +1,100 @@
|
|||||||
|
<?php
|
||||||
|
// @ Add or modify a record to the user
|
||||||
|
// @ in: $in_nUserID - mindex of user if NULL INSERT INTO
|
||||||
|
?>
|
||||||
|
<?php include("inc_variables.php");?>
|
||||||
|
<?php include("inc_functions.php");?>
|
||||||
|
<?php include("inc_functions_users.php");?>
|
||||||
|
<?php
|
||||||
|
|
||||||
|
$target_path = 'images/users/';
|
||||||
|
$target_path = $target_path . basename( $_FILES['Picture']['name']);
|
||||||
|
|
||||||
|
foreach($_POST as $key => $p)
|
||||||
|
$$key = $p;
|
||||||
|
|
||||||
|
if($_FILES['Picture']['name']!='' && move_uploaded_file($_FILES['Picture']['tmp_name'], $target_path))
|
||||||
|
$Picture = $target_path;
|
||||||
|
else
|
||||||
|
$Picture = '';
|
||||||
|
|
||||||
|
if( !isset($Save) ){
|
||||||
|
if( isset( $in_nUserID )&& $in_nUserID>0)
|
||||||
|
cl_redirect("user_detail.php?in_nUserID=$in_nUserID");
|
||||||
|
exit;
|
||||||
|
}
|
||||||
|
|
||||||
|
$connection = cl_connect();
|
||||||
|
cl_select($connection);
|
||||||
|
|
||||||
|
// @ Modify?
|
||||||
|
if( $in_nUserID != NULL ){
|
||||||
|
|
||||||
|
$EMail = str_replace(',', ';', $EMail);
|
||||||
|
|
||||||
|
$query = "UPDATE $g_table_users SET
|
||||||
|
strName='$Name',
|
||||||
|
strCompany='$Company',
|
||||||
|
strTel='$Tel',
|
||||||
|
strMobil='$Mobil',
|
||||||
|
strFax='$Fax',
|
||||||
|
strEMail='$EMail',
|
||||||
|
nCtrID='$Country',
|
||||||
|
nRegionID='$Region',
|
||||||
|
nOrgID='$Organization',
|
||||||
|
strZip='$Zip',
|
||||||
|
strCity='$City',
|
||||||
|
strStreet='$Street',
|
||||||
|
strInfo='$Info',
|
||||||
|
strWeb='$Web',
|
||||||
|
strSkype='$Skype',
|
||||||
|
nManagerID='$NManagerID',
|
||||||
|
nIsCommendatory='$NIsCommendatory',
|
||||||
|
nCommendatoryID='$NCommendatoryID',
|
||||||
|
strInvoiceAddress='$StrInvoiceAddress',
|
||||||
|
strTaxNumber='$StrTaxNumber',
|
||||||
|
strCompanyNumber='$StrCompanyNumber',
|
||||||
|
strBankNumber='$StrBankNumber',
|
||||||
|
nUserProf='$Profession'";
|
||||||
|
|
||||||
|
if($Picture_del != 1)
|
||||||
|
$Picture == '' ? '' : $query .= ", strPicture='$Picture'";
|
||||||
|
else
|
||||||
|
$query .= ', strPicture=null';
|
||||||
|
|
||||||
|
$query .= " WHERE nUserID=$in_nUserID";
|
||||||
|
|
||||||
|
cl_query($query);
|
||||||
|
cl_redirect("user_detail.php?in_nUserID=$in_nUserID");
|
||||||
|
}else{
|
||||||
|
$nUserID = cl_get_user_id($Name,$City,$Street);
|
||||||
|
|
||||||
|
if( $nUserID>0 ){
|
||||||
|
echo $exists_user."<BR>";
|
||||||
|
cl_redirect("users_page.php",false);
|
||||||
|
}else{
|
||||||
|
|
||||||
|
$EMail = str_replace(',', ';', $EMail);
|
||||||
|
|
||||||
|
$query = "INSERT INTO $g_table_users
|
||||||
|
(strName, strCompany, strTel, strMobil, strFax, strEMail, nCtrID, nRegionID, nOrgID, strZip, strCity, strStreet, strInfo, strWeb, strSkype, nManagerID,
|
||||||
|
nIsCommendatory,nCommendatoryID,strInvoiceAddress,strTaxNumber,strCompanyNumber,strBankNumber,nUserProf";
|
||||||
|
$Picture == '' ? '' : $query .= ',strPicture';
|
||||||
|
|
||||||
|
$query .= ")";
|
||||||
|
|
||||||
|
$query .= " VALUES('$Name','$Company','$Tel','$Mobil','$Fax','$EMail','$Country','$Region','$Organization','$Zip','$City','$Street','$Info','$Web','$Skype','$NManagerID',
|
||||||
|
'$NIsCommendatory','$NCommendatoryID','$StrInvoiceAddress','$StrTaxNumber','$StrCompanyNumber','$StrBankNumber', '$Profession'";
|
||||||
|
|
||||||
|
$Picture == '' ? '' : $query .= ",'$Picture'";
|
||||||
|
|
||||||
|
$query .= ")";
|
||||||
|
|
||||||
|
cl_query($query);
|
||||||
|
$UserID=mysql_insert_id();
|
||||||
|
cl_redirect("user_detail.php?in_nUserID=$UserID");
|
||||||
|
}
|
||||||
|
}
|
||||||
|
cl_close( $connection );
|
||||||
|
exit;
|
||||||
|
?>
|
||||||
@ -0,0 +1,15 @@
|
|||||||
|
{
|
||||||
|
"finding_ref": "6285",
|
||||||
|
"log_excerpt": "[quarantine] clusers.cadline.hu:clusers_eng/.svn/text-base/user_new_submit.php.svn-base -> quarantined (dest=/var/lib/web-hids/quarantine/var/www/hosting/cadline.hu/clusers/clusers_eng/.svn/text-base/user_new_submit.php.svn-base)",
|
||||||
|
"original_sha256": "501b60e0a1a8e89628300b2cf2d62f9523647767288e0b9deb24269bb8f5ecd8",
|
||||||
|
"original_stat": {
|
||||||
|
"gid": 30037,
|
||||||
|
"mtime": 1265662473,
|
||||||
|
"size": 3081,
|
||||||
|
"uid": 11669
|
||||||
|
},
|
||||||
|
"rel_path": "clusers_eng/.svn/text-base/user_new_submit.php.svn-base",
|
||||||
|
"result": "quarantined",
|
||||||
|
"timestamp": "20260718T160424Z",
|
||||||
|
"vhost": "clusers.cadline.hu"
|
||||||
|
}
|
||||||
@ -0,0 +1,198 @@
|
|||||||
|
<?php
|
||||||
|
// @ Add or modify a record to the user
|
||||||
|
// @ in: $in_nUserID - mindex of user if NULL INSERT INTO
|
||||||
|
?>
|
||||||
|
<?php include("inc_variables.php");?>
|
||||||
|
<?php include("inc_functions.php");?>
|
||||||
|
<?php include("inc_functions_users.php");?>
|
||||||
|
<?php
|
||||||
|
|
||||||
|
$target_path = 'images/users2/';
|
||||||
|
$target_path = $target_path . basename( $_FILES['Picture']['name']);
|
||||||
|
|
||||||
|
foreach($_POST as $key => $p)
|
||||||
|
$$key = $p;
|
||||||
|
|
||||||
|
if($_FILES['Picture']['name']!='' && move_uploaded_file($_FILES['Picture']['tmp_name'], $target_path))
|
||||||
|
$Picture = $target_path;
|
||||||
|
else
|
||||||
|
$Picture = '';
|
||||||
|
|
||||||
|
if( !isset($Save) ){
|
||||||
|
if( isset( $in_nUserID )&& $in_nUserID>0)
|
||||||
|
cl_redirect("user_detail.php?in_nUserID=$in_nUserID");
|
||||||
|
exit;
|
||||||
|
}
|
||||||
|
|
||||||
|
$connection = cl_connect();
|
||||||
|
cl_select($connection);
|
||||||
|
|
||||||
|
// @ Modify?
|
||||||
|
if( $in_nUserID != NULL ){
|
||||||
|
|
||||||
|
//$EMail = str_replace(',', ';', $EMail);
|
||||||
|
$emails = $_POST['EMail'];
|
||||||
|
|
||||||
|
$old_default_email = getDefaultEmail($in_nUserID);
|
||||||
|
|
||||||
|
|
||||||
|
if(check_forum_existance($old_default_email) && $emails[0] != $old_default_email){
|
||||||
|
// UpdateForumUser($in_nUserID, $old_default_email, $emails[0]);
|
||||||
|
}
|
||||||
|
|
||||||
|
$old_login = getForumLogin($in_nUserID);
|
||||||
|
|
||||||
|
/* if(check_forum_existance_by_nUserID($in_nUserID) && $emails[0] != $old_login && trim($emails[0]) != ""){
|
||||||
|
// UpdateForumUserByNUserID($in_nUserID, $old_login, $emails[0]);
|
||||||
|
$mailresz = explode('@',$emails[0]);
|
||||||
|
$jelszo = $mailresz[0];
|
||||||
|
InsertUserToForum2($in_nUserID, md5($jelszo), $emails[0], $Name, $emails[0]);
|
||||||
|
}*/
|
||||||
|
|
||||||
|
// minden e-mail címmel be lehessen lépni ..
|
||||||
|
if(check_forum_existance_by_nUserID($in_nUserID) && trim($emails[0]) != ""){
|
||||||
|
foreach($emails as $email){
|
||||||
|
if( !check_forum_existance($email) && trim($email) != ""){
|
||||||
|
$mailresz = explode('@',$email);
|
||||||
|
$jelszo = trim($mailresz[0]);
|
||||||
|
InsertUserToForum2($in_nUserID, md5($jelszo), trim($email), $Name, trim($email));
|
||||||
|
}
|
||||||
|
}
|
||||||
|
}
|
||||||
|
|
||||||
|
UpdateForumName($in_nUserID, $Name);
|
||||||
|
|
||||||
|
DeleteUserEmails($in_nUserID);
|
||||||
|
UpdateUserEmails($emails, $in_nUserID);
|
||||||
|
|
||||||
|
if($Esely == ""){
|
||||||
|
$Esely = 'NULL';
|
||||||
|
}
|
||||||
|
|
||||||
|
$query = "UPDATE $g_table_users SET
|
||||||
|
strName='$Name',
|
||||||
|
strCompany='$Company',
|
||||||
|
strTel='$Tel',
|
||||||
|
strMobil='$Mobil',
|
||||||
|
strFax='$Fax',
|
||||||
|
strEMail='$EMail',
|
||||||
|
nCtrID='$Country',
|
||||||
|
nRegionID='$Region',
|
||||||
|
nOrgID='$Organization',
|
||||||
|
strZip='$Zip',
|
||||||
|
strCity='$City',
|
||||||
|
strStreet='$Street',
|
||||||
|
strInfo='$Info',
|
||||||
|
nEsely = {$Esely},
|
||||||
|
strWeb='$Web',
|
||||||
|
strSkype='$Skype',
|
||||||
|
nManagerID='$NManagerID',
|
||||||
|
nIsCommendatory='$NIsCommendatory',
|
||||||
|
nCommendatoryID='$NCommendatoryID',
|
||||||
|
strInvoiceAddress='$StrInvoiceAddress',
|
||||||
|
strTaxNumber='$StrTaxNumber',
|
||||||
|
strCompanyNumber='$StrCompanyNumber',
|
||||||
|
strBankNumber='$StrBankNumber',
|
||||||
|
nUserProf='$Profession'";
|
||||||
|
|
||||||
|
if($Picture_del != 1)
|
||||||
|
$Picture == '' ? '' : $query .= ", strPicture='$Picture'";
|
||||||
|
else
|
||||||
|
$query .= ', strPicture=null';
|
||||||
|
|
||||||
|
$query .= " WHERE nUserID=$in_nUserID";
|
||||||
|
|
||||||
|
|
||||||
|
$elozoertekesites = cl_query(" SELECT * FROM cl_ertekesites WHERE nUserID=$in_nUserID");
|
||||||
|
$elozoertekesitesrow = mysql_fetch_array($elozoertekesites, MYSQL_ASSOC);
|
||||||
|
|
||||||
|
if( $elozoertekesitesrow['nUserID'] == "" && ($leiras!="" || $kezzel!="" || $vasarlas!="") ){
|
||||||
|
$query4 = "INSERT INTO `cl_ertekesites` (`nUserID`, `leiras`, `kezzel`, `vasarlas`) VALUES ";
|
||||||
|
$query4 .= "({$in_nUserID}, '{$leiras}', '{$kezzel}', '{$vasarlas}')";
|
||||||
|
|
||||||
|
cl_query($query4);
|
||||||
|
}elseif( $elozoertekesitesrow['nUserID'] != "" ){
|
||||||
|
$query2 = "UPDATE cl_ertekesites SET
|
||||||
|
leiras = '".$leiras."',
|
||||||
|
kezzel = '".$kezzel."',
|
||||||
|
vasarlas = '".$vasarlas."'";
|
||||||
|
$query2 .= " WHERE nUserID=$in_nUserID";
|
||||||
|
|
||||||
|
cl_query($query2);
|
||||||
|
}
|
||||||
|
|
||||||
|
// új üzenet ha változott a vásárlási ido
|
||||||
|
if( ($elozoertekesitesrow['vasarlas'] == "" || $elozoertekesitesrow['vasarlas'] != $vasarlas ) && ( $vasarlas != 0 && $vasarlas != "") ){
|
||||||
|
$idopont = date("Y-m-d",time()+(60*60*24*30*$vasarlas));
|
||||||
|
$query3 = "INSERT INTO `cl_Messages` (`nUserID`, `nManagerID`, `dateSend`, `strTopic`, `strMsg`, `bFlag`) VALUES ";
|
||||||
|
$query3 .= "({$in_nUserID}, '{$NManagerID}', '{$idopont}', 'Program vasarlasi terv', 'Program vasarlasi terv, az ertekesitesi adatok alapjan', '0')";
|
||||||
|
|
||||||
|
cl_query($query3);
|
||||||
|
}
|
||||||
|
|
||||||
|
cl_query($query);
|
||||||
|
|
||||||
|
cl_redirect("user_detail.php?in_nUserID=$in_nUserID");
|
||||||
|
}else{
|
||||||
|
$nUserID = cl_get_user_id($Name,$City,$Street);
|
||||||
|
|
||||||
|
if( $nUserID>0 ){
|
||||||
|
echo $exists_user."<BR>";
|
||||||
|
cl_redirect("users_page.php",false);
|
||||||
|
}else{
|
||||||
|
|
||||||
|
$EMail = str_replace(',', ';', $EMail);
|
||||||
|
$EMails = $_POST['EMail'];
|
||||||
|
|
||||||
|
$query = "INSERT INTO $g_table_users
|
||||||
|
(strName, strCompany, strTel, strMobil, strFax, strEMail, nCtrID, nRegionID, nOrgID, strZip, strCity, strStreet, strInfo, strWeb, strSkype, nManagerID,
|
||||||
|
nIsCommendatory,nCommendatoryID,strInvoiceAddress,strTaxNumber,strCompanyNumber,strBankNumber,nUserProf";
|
||||||
|
$Picture == '' ? '' : $query .= ',strPicture';
|
||||||
|
|
||||||
|
$query .= ")";
|
||||||
|
|
||||||
|
$query .= " VALUES('$Name','$Company','$Tel','$Mobil','$Fax','$EMail','$Country','$Region','$Organization','$Zip','$City','$Street','$Info','$Web','$Skype','$NManagerID',
|
||||||
|
'$NIsCommendatory','$NCommendatoryID','$StrInvoiceAddress','$StrTaxNumber','$StrCompanyNumber','$StrBankNumber', '$Profession'";
|
||||||
|
|
||||||
|
$Picture == '' ? '' : $query .= ",'$Picture'";
|
||||||
|
|
||||||
|
$query .= ")";
|
||||||
|
|
||||||
|
cl_query($query);
|
||||||
|
|
||||||
|
$UserID=mysql_insert_id();
|
||||||
|
|
||||||
|
$query = "INSERT INTO `cl_users_emails` (`nUserID`, `email`, `default`) VALUES ";
|
||||||
|
|
||||||
|
$default = 1;
|
||||||
|
foreach($EMails as $email){
|
||||||
|
$query .= "({$UserID}, '{$email}', {$default}),";
|
||||||
|
$default = 0;
|
||||||
|
}
|
||||||
|
|
||||||
|
$query = rtrim($query, ',');
|
||||||
|
|
||||||
|
cl_query($query);
|
||||||
|
|
||||||
|
|
||||||
|
$query4 = "INSERT INTO `cl_ertekesites` (`nUserID`, `leiras`, `kezzel`, `vasarlas`) VALUES ";
|
||||||
|
$query4 .= "({$UserID}, '{$leiras}', '{$kezzel}', '{$vasarlas}')";
|
||||||
|
|
||||||
|
cl_query($query4);
|
||||||
|
|
||||||
|
// új esemény ha változott a vásárlási ido
|
||||||
|
if( $vasarlas != 0 && $vasarlas != "" ){
|
||||||
|
$idopont = date("Y-m-d",time()+(60*60*24*30*$vasarlas));
|
||||||
|
$query3 = "INSERT INTO `cl_Messages` (`nUserID`, `nManagerID`, `dateSend`, `strTopic`, `strMsg`, `bFlag`) VALUES ";
|
||||||
|
$query3 .= "({$in_nUserID}, '{$NManagerID}', '{$idopont}', 'Program vasarlasi terv', 'Program vasarlasi terv (ertekesitesi adatok alapjan)', '0')";
|
||||||
|
|
||||||
|
cl_query($query3);
|
||||||
|
}
|
||||||
|
|
||||||
|
|
||||||
|
cl_redirect("user_detail.php?in_nUserID=$UserID");
|
||||||
|
}
|
||||||
|
}
|
||||||
|
cl_close( $connection );
|
||||||
|
exit;
|
||||||
|
?>
|
||||||
@ -0,0 +1,15 @@
|
|||||||
|
{
|
||||||
|
"finding_ref": "6116",
|
||||||
|
"log_excerpt": "[quarantine] clusers.cadline.hu:clusers_eng/user_new_submit.php -> quarantined (dest=/var/lib/web-hids/quarantine/var/www/hosting/cadline.hu/clusers/clusers_eng/user_new_submit.php)",
|
||||||
|
"original_sha256": "c40d074909d6576b4de42a69c47ad3d0a5ab0d303ce9eb5636d3eeee294d072e",
|
||||||
|
"original_stat": {
|
||||||
|
"gid": 30037,
|
||||||
|
"mtime": 1358760970,
|
||||||
|
"size": 7036,
|
||||||
|
"uid": 11669
|
||||||
|
},
|
||||||
|
"rel_path": "clusers_eng/user_new_submit.php",
|
||||||
|
"result": "quarantined",
|
||||||
|
"timestamp": "20260718T160424Z",
|
||||||
|
"vhost": "clusers.cadline.hu"
|
||||||
|
}
|
||||||
@ -0,0 +1,104 @@
|
|||||||
|
<?php
|
||||||
|
// @ Add or modify a record to the user
|
||||||
|
// @ in: $in_nUserID - mindex of user if NULL INSERT INTO
|
||||||
|
?>
|
||||||
|
<?php include("inc_variables.php");?>
|
||||||
|
<?php include("inc_functions.php");?>
|
||||||
|
<?php include("inc_functions_users.php");?>
|
||||||
|
<?php
|
||||||
|
|
||||||
|
$target_path = 'images/users/';
|
||||||
|
$target_path = $target_path . basename( $_FILES['Picture']['name']);
|
||||||
|
|
||||||
|
foreach($_POST as $key => $p)
|
||||||
|
$$key = $p;
|
||||||
|
|
||||||
|
if($_FILES['Picture']['name']!='' && move_uploaded_file($_FILES['Picture']['tmp_name'], $target_path))
|
||||||
|
$Picture = $target_path;
|
||||||
|
else
|
||||||
|
$Picture = '';
|
||||||
|
|
||||||
|
if( !isset($Save) ){
|
||||||
|
if( isset( $in_nUserID )&& $in_nUserID>0)
|
||||||
|
cl_redirect("user_detail.php?in_nUserID=$in_nUserID");
|
||||||
|
exit;
|
||||||
|
}
|
||||||
|
|
||||||
|
$connection = cl_connect();
|
||||||
|
cl_select($connection);
|
||||||
|
|
||||||
|
// @ Modify?
|
||||||
|
if( $in_nUserID != NULL ){
|
||||||
|
|
||||||
|
$EMail = str_replace(',', ';', $EMail);
|
||||||
|
if($Esely == ""){
|
||||||
|
$Esely = 'NULL';
|
||||||
|
}
|
||||||
|
|
||||||
|
$query = "UPDATE $g_table_users SET
|
||||||
|
strName='$Name',
|
||||||
|
strCompany='$Company',
|
||||||
|
strTel='$Tel',
|
||||||
|
strMobil='$Mobil',
|
||||||
|
strFax='$Fax',
|
||||||
|
strEMail='$EMail',
|
||||||
|
nCtrID='$Country',
|
||||||
|
nRegionID='$Region',
|
||||||
|
nOrgID='$Organization',
|
||||||
|
strZip='$Zip',
|
||||||
|
strCity='$City',
|
||||||
|
strStreet='$Street',
|
||||||
|
strInfo='$Info',
|
||||||
|
nEsely = {$Esely},
|
||||||
|
strWeb='$Web',
|
||||||
|
strSkype='$Skype',
|
||||||
|
nManagerID='$NManagerID',
|
||||||
|
nIsCommendatory='$NIsCommendatory',
|
||||||
|
nCommendatoryID='$NCommendatoryID',
|
||||||
|
strInvoiceAddress='$StrInvoiceAddress',
|
||||||
|
strTaxNumber='$StrTaxNumber',
|
||||||
|
strCompanyNumber='$StrCompanyNumber',
|
||||||
|
strBankNumber='$StrBankNumber',
|
||||||
|
nUserProf='$Profession'";
|
||||||
|
|
||||||
|
if($Picture_del != 1)
|
||||||
|
$Picture == '' ? '' : $query .= ", strPicture='$Picture'";
|
||||||
|
else
|
||||||
|
$query .= ', strPicture=null';
|
||||||
|
|
||||||
|
$query .= " WHERE nUserID=$in_nUserID";
|
||||||
|
|
||||||
|
cl_query($query);
|
||||||
|
cl_redirect("user_detail.php?in_nUserID=$in_nUserID");
|
||||||
|
}else{
|
||||||
|
$nUserID = cl_get_user_id($Name,$City,$Street);
|
||||||
|
|
||||||
|
if( $nUserID>0 ){
|
||||||
|
echo $exists_user."<BR>";
|
||||||
|
cl_redirect("users_page.php",false);
|
||||||
|
}else{
|
||||||
|
|
||||||
|
$EMail = str_replace(',', ';', $EMail);
|
||||||
|
|
||||||
|
$query = "INSERT INTO $g_table_users
|
||||||
|
(strName, strCompany, strTel, strMobil, strFax, strEMail, nCtrID, nRegionID, nOrgID, strZip, strCity, strStreet, strInfo, strWeb, strSkype, nManagerID,
|
||||||
|
nIsCommendatory,nCommendatoryID,strInvoiceAddress,strTaxNumber,strCompanyNumber,strBankNumber,nUserProf";
|
||||||
|
$Picture == '' ? '' : $query .= ',strPicture';
|
||||||
|
|
||||||
|
$query .= ")";
|
||||||
|
|
||||||
|
$query .= " VALUES('$Name','$Company','$Tel','$Mobil','$Fax','$EMail','$Country','$Region','$Organization','$Zip','$City','$Street','$Info','$Web','$Skype','$NManagerID',
|
||||||
|
'$NIsCommendatory','$NCommendatoryID','$StrInvoiceAddress','$StrTaxNumber','$StrCompanyNumber','$StrBankNumber', '$Profession'";
|
||||||
|
|
||||||
|
$Picture == '' ? '' : $query .= ",'$Picture'";
|
||||||
|
|
||||||
|
$query .= ")";
|
||||||
|
|
||||||
|
cl_query($query);
|
||||||
|
$UserID=mysql_insert_id();
|
||||||
|
cl_redirect("user_detail.php?in_nUserID=$UserID");
|
||||||
|
}
|
||||||
|
}
|
||||||
|
cl_close( $connection );
|
||||||
|
exit;
|
||||||
|
?>
|
||||||
@ -0,0 +1,15 @@
|
|||||||
|
{
|
||||||
|
"finding_ref": "5931",
|
||||||
|
"log_excerpt": "[quarantine] clusers.cadline.hu:clusers_spa/user_new_submit.php -> quarantined (dest=/var/lib/web-hids/quarantine/var/www/hosting/cadline.hu/clusers/clusers_spa/user_new_submit.php)",
|
||||||
|
"original_sha256": "b64f6aad0a0107ce36748f719ccf5e7ce36e35a80375b51b2c490d46f5c930bc",
|
||||||
|
"original_stat": {
|
||||||
|
"gid": 30037,
|
||||||
|
"mtime": 1321522580,
|
||||||
|
"size": 3160,
|
||||||
|
"uid": 11669
|
||||||
|
},
|
||||||
|
"rel_path": "clusers_spa/user_new_submit.php",
|
||||||
|
"result": "quarantined",
|
||||||
|
"timestamp": "20260718T160424Z",
|
||||||
|
"vhost": "clusers.cadline.hu"
|
||||||
|
}
|
||||||
104
var/www/hosting/cadline.hu/clusers/editcrm/user_new_submit.php
Normal file
104
var/www/hosting/cadline.hu/clusers/editcrm/user_new_submit.php
Normal file
@ -0,0 +1,104 @@
|
|||||||
|
<?php
|
||||||
|
// @ Add or modify a record to the user
|
||||||
|
// @ in: $in_nUserID - mindex of user if NULL INSERT INTO
|
||||||
|
?>
|
||||||
|
<?php include("inc_variables.php");?>
|
||||||
|
<?php include("inc_functions.php");?>
|
||||||
|
<?php include("inc_functions_users.php");?>
|
||||||
|
<?php
|
||||||
|
|
||||||
|
$target_path = 'images/users/';
|
||||||
|
$target_path = $target_path . basename( $_FILES['Picture']['name']);
|
||||||
|
|
||||||
|
foreach($_POST as $key => $p)
|
||||||
|
$$key = $p;
|
||||||
|
|
||||||
|
if($_FILES['Picture']['name']!='' && move_uploaded_file($_FILES['Picture']['tmp_name'], $target_path))
|
||||||
|
$Picture = $target_path;
|
||||||
|
else
|
||||||
|
$Picture = '';
|
||||||
|
|
||||||
|
if( !isset($Save) ){
|
||||||
|
if( isset( $in_nUserID )&& $in_nUserID>0)
|
||||||
|
cl_redirect("user_detail.php?in_nUserID=$in_nUserID");
|
||||||
|
exit;
|
||||||
|
}
|
||||||
|
|
||||||
|
$connection = cl_connect();
|
||||||
|
cl_select($connection);
|
||||||
|
|
||||||
|
// @ Modify?
|
||||||
|
if( $in_nUserID != NULL ){
|
||||||
|
|
||||||
|
$EMail = str_replace(',', ';', $EMail);
|
||||||
|
if($Esely == ""){
|
||||||
|
$Esely = 'NULL';
|
||||||
|
}
|
||||||
|
|
||||||
|
$query = "UPDATE $g_table_users SET
|
||||||
|
strName='$Name',
|
||||||
|
strCompany='$Company',
|
||||||
|
strTel='$Tel',
|
||||||
|
strMobil='$Mobil',
|
||||||
|
strFax='$Fax',
|
||||||
|
strEMail='$EMail',
|
||||||
|
nCtrID='$Country',
|
||||||
|
nRegionID='$Region',
|
||||||
|
nOrgID='$Organization',
|
||||||
|
strZip='$Zip',
|
||||||
|
strCity='$City',
|
||||||
|
strStreet='$Street',
|
||||||
|
strInfo='$Info',
|
||||||
|
nEsely = {$Esely},
|
||||||
|
strWeb='$Web',
|
||||||
|
strSkype='$Skype',
|
||||||
|
nManagerID='$NManagerID',
|
||||||
|
nIsCommendatory='$NIsCommendatory',
|
||||||
|
nCommendatoryID='$NCommendatoryID',
|
||||||
|
strInvoiceAddress='$StrInvoiceAddress',
|
||||||
|
strTaxNumber='$StrTaxNumber',
|
||||||
|
strCompanyNumber='$StrCompanyNumber',
|
||||||
|
strBankNumber='$StrBankNumber',
|
||||||
|
nUserProf='$Profession'";
|
||||||
|
|
||||||
|
if($Picture_del != 1)
|
||||||
|
$Picture == '' ? '' : $query .= ", strPicture='$Picture'";
|
||||||
|
else
|
||||||
|
$query .= ', strPicture=null';
|
||||||
|
|
||||||
|
$query .= " WHERE nUserID=$in_nUserID";
|
||||||
|
|
||||||
|
cl_query($query);
|
||||||
|
cl_redirect("user_detail.php?in_nUserID=$in_nUserID");
|
||||||
|
}else{
|
||||||
|
$nUserID = cl_get_user_id($Name,$City,$Street);
|
||||||
|
|
||||||
|
if( $nUserID>0 ){
|
||||||
|
echo $exists_user."<BR>";
|
||||||
|
cl_redirect("users_page.php",false);
|
||||||
|
}else{
|
||||||
|
|
||||||
|
$EMail = str_replace(',', ';', $EMail);
|
||||||
|
|
||||||
|
$query = "INSERT INTO $g_table_users
|
||||||
|
(strName, strCompany, strTel, strMobil, strFax, strEMail, nCtrID, nRegionID, nOrgID, strZip, strCity, strStreet, strInfo, strWeb, strSkype, nManagerID,
|
||||||
|
nIsCommendatory,nCommendatoryID,strInvoiceAddress,strTaxNumber,strCompanyNumber,strBankNumber,nUserProf";
|
||||||
|
$Picture == '' ? '' : $query .= ',strPicture';
|
||||||
|
|
||||||
|
$query .= ")";
|
||||||
|
|
||||||
|
$query .= " VALUES('$Name','$Company','$Tel','$Mobil','$Fax','$EMail','$Country','$Region','$Organization','$Zip','$City','$Street','$Info','$Web','$Skype','$NManagerID',
|
||||||
|
'$NIsCommendatory','$NCommendatoryID','$StrInvoiceAddress','$StrTaxNumber','$StrCompanyNumber','$StrBankNumber', '$Profession'";
|
||||||
|
|
||||||
|
$Picture == '' ? '' : $query .= ",'$Picture'";
|
||||||
|
|
||||||
|
$query .= ")";
|
||||||
|
|
||||||
|
cl_query($query);
|
||||||
|
$UserID=mysql_insert_id();
|
||||||
|
cl_redirect("user_detail.php?in_nUserID=$UserID");
|
||||||
|
}
|
||||||
|
}
|
||||||
|
cl_close( $connection );
|
||||||
|
exit;
|
||||||
|
?>
|
||||||
@ -0,0 +1,15 @@
|
|||||||
|
{
|
||||||
|
"finding_ref": "6103",
|
||||||
|
"log_excerpt": "[quarantine] clusers.cadline.hu:editcrm/user_new_submit.php -> quarantined (dest=/var/lib/web-hids/quarantine/var/www/hosting/cadline.hu/clusers/editcrm/user_new_submit.php)",
|
||||||
|
"original_sha256": "b64f6aad0a0107ce36748f719ccf5e7ce36e35a80375b51b2c490d46f5c930bc",
|
||||||
|
"original_stat": {
|
||||||
|
"gid": 30037,
|
||||||
|
"mtime": 1326726740,
|
||||||
|
"size": 3160,
|
||||||
|
"uid": 11669
|
||||||
|
},
|
||||||
|
"rel_path": "editcrm/user_new_submit.php",
|
||||||
|
"result": "quarantined",
|
||||||
|
"timestamp": "20260718T160424Z",
|
||||||
|
"vhost": "clusers.cadline.hu"
|
||||||
|
}
|
||||||
@ -0,0 +1,84 @@
|
|||||||
|
<?php
|
||||||
|
function feltolt($mezo, $hova, $fajlnev, $ekezet = false)
|
||||||
|
{
|
||||||
|
if ($_FILES[$mezo]["error"] == 0) {
|
||||||
|
if ($ekezet) $fajlnev = ekezet($fajlnev);
|
||||||
|
|
||||||
|
$ide = $hova.$fajlnev;
|
||||||
|
$kep = false;
|
||||||
|
|
||||||
|
if (file_exists($ide)) {
|
||||||
|
$x = explode('.', $fajlnev);
|
||||||
|
$ext = end($x);
|
||||||
|
|
||||||
|
$alap = substr($fajlnev, 0, -(strlen($ext)+1));
|
||||||
|
|
||||||
|
for ($i = 1; $i < 100; $i++) {
|
||||||
|
if (!file_exists($hova.$alap.$i.".".$ext)) {
|
||||||
|
$fajlnev = $alap.$i.".".$ext;
|
||||||
|
$ide = $hova.$fajlnev;
|
||||||
|
break;
|
||||||
|
}
|
||||||
|
}
|
||||||
|
}
|
||||||
|
|
||||||
|
if (copy($_FILES[$mezo]["tmp_name"], $ide)) $kep = $ide;
|
||||||
|
else $kep = false;
|
||||||
|
|
||||||
|
return $kep;
|
||||||
|
}
|
||||||
|
return false;
|
||||||
|
}
|
||||||
|
|
||||||
|
function ekezet($input)
|
||||||
|
{
|
||||||
|
$mit = array("/á/", "/Á/", "/é/", "/É/", "/í/", "/Í/", "/ö/", "/Ö/", "/ő/", "/Ő/", "/ó/", "/Ó/", "/ú/", "/Ú/", "/ü/", "/Ü/", "/ű/", "/Ű/", "/ /");
|
||||||
|
$mire = array("a", "A", "e", "E", "i", "I", "o", "O", "o", "O", "o", "O", "u", "U", "u", "U", "u", "U", "_");
|
||||||
|
$output = preg_replace($mit, $mire, $input);
|
||||||
|
return $output;
|
||||||
|
}
|
||||||
|
|
||||||
|
function athelyez($honnan, $hova, $ekezet = false)
|
||||||
|
{
|
||||||
|
if ($ekezet) $hova = ekezet($hova);
|
||||||
|
|
||||||
|
$fajl = false;
|
||||||
|
|
||||||
|
if (file_exists($hova)) {
|
||||||
|
$x = explode('.', $hova);
|
||||||
|
$ext = end($x);
|
||||||
|
|
||||||
|
$alap = substr($hova, 0, -(strlen($ext)+1));
|
||||||
|
|
||||||
|
for ($i = 1; $i < 100; $i++){
|
||||||
|
if (!file_exists($alap.$i.".".$ext)) {
|
||||||
|
$hova = $alap.$i.".".$ext;
|
||||||
|
break;
|
||||||
|
}
|
||||||
|
}
|
||||||
|
}
|
||||||
|
|
||||||
|
if (copy($honnan,$hova)) {
|
||||||
|
$fajl = $hova;
|
||||||
|
exec("rm ".$honnan);
|
||||||
|
} else $fajl = false;
|
||||||
|
|
||||||
|
return $fajl;
|
||||||
|
}
|
||||||
|
|
||||||
|
function urlazon($input)
|
||||||
|
{
|
||||||
|
// szóköz csere + kisbetű
|
||||||
|
$subject = str_replace(' ', '-', strtolower($input));
|
||||||
|
|
||||||
|
// magyar ékezetek cseréje
|
||||||
|
$subject = ekezet($subject);
|
||||||
|
|
||||||
|
$pattern = '/[-_a-z1-9]*/';
|
||||||
|
preg_match_all($pattern, $subject, $matches, PREG_OFFSET_CAPTURE);
|
||||||
|
$ret = "";
|
||||||
|
foreach($matches[0] as $m) if($m[0]) $ret .= $m[0];
|
||||||
|
|
||||||
|
return $ret;
|
||||||
|
}
|
||||||
|
?>
|
||||||
@ -0,0 +1,15 @@
|
|||||||
|
{
|
||||||
|
"finding_ref": "5913",
|
||||||
|
"log_excerpt": "[quarantine] crm.cadline.hu:public/application/helpers/sajatfeltolto.php -> quarantined (dest=/var/lib/web-hids/quarantine/var/www/hosting/cadline.hu/crm/public/application/helpers/sajatfeltolto.php)",
|
||||||
|
"original_sha256": "4b99ac9759922b713dde14d6d6968d578f2bf1f464ca5f92d99f880954981808",
|
||||||
|
"original_stat": {
|
||||||
|
"gid": 30037,
|
||||||
|
"mtime": 1592828664,
|
||||||
|
"size": 1901,
|
||||||
|
"uid": 11669
|
||||||
|
},
|
||||||
|
"rel_path": "public/application/helpers/sajatfeltolto.php",
|
||||||
|
"result": "quarantined",
|
||||||
|
"timestamp": "20260718T160424Z",
|
||||||
|
"vhost": "crm.cadline.hu"
|
||||||
|
}
|
||||||
@ -0,0 +1,84 @@
|
|||||||
|
<?php
|
||||||
|
function feltolt($mezo, $hova, $fajlnev, $ekezet = false)
|
||||||
|
{
|
||||||
|
if ($_FILES[$mezo]["error"] == 0) {
|
||||||
|
if ($ekezet) $fajlnev = ekezet($fajlnev);
|
||||||
|
|
||||||
|
$ide = $hova.$fajlnev;
|
||||||
|
$kep = false;
|
||||||
|
|
||||||
|
if (file_exists($ide)) {
|
||||||
|
$x = explode('.', $fajlnev);
|
||||||
|
$ext = end($x);
|
||||||
|
|
||||||
|
$alap = substr($fajlnev, 0, -(strlen($ext)+1));
|
||||||
|
|
||||||
|
for ($i = 1; $i < 100; $i++) {
|
||||||
|
if (!file_exists($hova.$alap.$i.".".$ext)) {
|
||||||
|
$fajlnev = $alap.$i.".".$ext;
|
||||||
|
$ide = $hova.$fajlnev;
|
||||||
|
break;
|
||||||
|
}
|
||||||
|
}
|
||||||
|
}
|
||||||
|
|
||||||
|
if (copy($_FILES[$mezo]["tmp_name"], $ide)) $kep = $ide;
|
||||||
|
else $kep = false;
|
||||||
|
|
||||||
|
return $kep;
|
||||||
|
}
|
||||||
|
return false;
|
||||||
|
}
|
||||||
|
|
||||||
|
function ekezet($input)
|
||||||
|
{
|
||||||
|
$mit = array("/á/", "/Á/", "/é/", "/É/", "/í/", "/Í/", "/ö/", "/Ö/", "/ő/", "/Ő/", "/ó/", "/Ó/", "/ú/", "/Ú/", "/ü/", "/Ü/", "/ű/", "/Ű/", "/ /");
|
||||||
|
$mire = array("a", "A", "e", "E", "i", "I", "o", "O", "o", "O", "o", "O", "u", "U", "u", "U", "u", "U", "_");
|
||||||
|
$output = preg_replace($mit, $mire, $input);
|
||||||
|
return $output;
|
||||||
|
}
|
||||||
|
|
||||||
|
function athelyez($honnan, $hova, $ekezet = false)
|
||||||
|
{
|
||||||
|
if ($ekezet) $hova = ekezet($hova);
|
||||||
|
|
||||||
|
$fajl = false;
|
||||||
|
|
||||||
|
if (file_exists($hova)) {
|
||||||
|
$x = explode('.', $hova);
|
||||||
|
$ext = end($x);
|
||||||
|
|
||||||
|
$alap = substr($hova, 0, -(strlen($ext)+1));
|
||||||
|
|
||||||
|
for ($i = 1; $i < 100; $i++){
|
||||||
|
if (!file_exists($alap.$i.".".$ext)) {
|
||||||
|
$hova = $alap.$i.".".$ext;
|
||||||
|
break;
|
||||||
|
}
|
||||||
|
}
|
||||||
|
}
|
||||||
|
|
||||||
|
if (copy($honnan,$hova)) {
|
||||||
|
$fajl = $hova;
|
||||||
|
exec("rm ".$honnan);
|
||||||
|
} else $fajl = false;
|
||||||
|
|
||||||
|
return $fajl;
|
||||||
|
}
|
||||||
|
|
||||||
|
function urlazon($input)
|
||||||
|
{
|
||||||
|
// szóköz csere + kisbetű
|
||||||
|
$subject = str_replace(' ', '-', strtolower($input));
|
||||||
|
|
||||||
|
// magyar ékezetek cseréje
|
||||||
|
$subject = ekezet($subject);
|
||||||
|
|
||||||
|
$pattern = '/[-_a-z1-9]*/';
|
||||||
|
preg_match_all($pattern, $subject, $matches, PREG_OFFSET_CAPTURE);
|
||||||
|
$ret = "";
|
||||||
|
foreach($matches[0] as $m) if($m[0]) $ret .= $m[0];
|
||||||
|
|
||||||
|
return $ret;
|
||||||
|
}
|
||||||
|
?>
|
||||||
@ -0,0 +1,15 @@
|
|||||||
|
{
|
||||||
|
"finding_ref": "6761",
|
||||||
|
"log_excerpt": "[quarantine] dev.cadline.hu:php7_update/crm.cadline.hu/application/helpers/sajatfeltolto.php -> quarantined (dest=/var/lib/web-hids/quarantine/var/www/hosting/cadline.hu/dev/php7_update/crm.cadline.hu/application/helpers/sajatfeltolto.php)",
|
||||||
|
"original_sha256": "4b99ac9759922b713dde14d6d6968d578f2bf1f464ca5f92d99f880954981808",
|
||||||
|
"original_stat": {
|
||||||
|
"gid": 30037,
|
||||||
|
"mtime": 1593413345,
|
||||||
|
"size": 1901,
|
||||||
|
"uid": 12425
|
||||||
|
},
|
||||||
|
"rel_path": "php7_update/crm.cadline.hu/application/helpers/sajatfeltolto.php",
|
||||||
|
"result": "quarantined",
|
||||||
|
"timestamp": "20260718T160424Z",
|
||||||
|
"vhost": "dev.cadline.hu"
|
||||||
|
}
|
||||||
File diff suppressed because it is too large
Load Diff
@ -0,0 +1,15 @@
|
|||||||
|
{
|
||||||
|
"finding_ref": "6772",
|
||||||
|
"log_excerpt": "[quarantine] dev.cadline.hu:php7_update/partners.archlinexp.com/application/controllers/admin.php -> quarantined (dest=/var/lib/web-hids/quarantine/var/www/hosting/cadline.hu/dev/php7_update/partners.archlinexp.com/application/controllers/admin.php)",
|
||||||
|
"original_sha256": "6478891d9ef465846f47f196bec45855da4d86e3d617207348b2549de69ca732",
|
||||||
|
"original_stat": {
|
||||||
|
"gid": 30037,
|
||||||
|
"mtime": 1595502767,
|
||||||
|
"size": 148157,
|
||||||
|
"uid": 12425
|
||||||
|
},
|
||||||
|
"rel_path": "php7_update/partners.archlinexp.com/application/controllers/admin.php",
|
||||||
|
"result": "quarantined",
|
||||||
|
"timestamp": "20260718T160424Z",
|
||||||
|
"vhost": "dev.cadline.hu"
|
||||||
|
}
|
||||||
File diff suppressed because it is too large
Load Diff
@ -0,0 +1,15 @@
|
|||||||
|
{
|
||||||
|
"finding_ref": "6765",
|
||||||
|
"log_excerpt": "[quarantine] dev.cadline.hu:php7_update/partners.archlinexp.com/application/controllers/collection.php -> quarantined (dest=/var/lib/web-hids/quarantine/var/www/hosting/cadline.hu/dev/php7_update/partners.archlinexp.com/application/controllers/collection.php)",
|
||||||
|
"original_sha256": "623c2d631d8e875f065612f01001082802e2cd4c3088640d3d6c393dec3782dd",
|
||||||
|
"original_stat": {
|
||||||
|
"gid": 30037,
|
||||||
|
"mtime": 1595502744,
|
||||||
|
"size": 41801,
|
||||||
|
"uid": 12425
|
||||||
|
},
|
||||||
|
"rel_path": "php7_update/partners.archlinexp.com/application/controllers/collection.php",
|
||||||
|
"result": "quarantined",
|
||||||
|
"timestamp": "20260718T160424Z",
|
||||||
|
"vhost": "dev.cadline.hu"
|
||||||
|
}
|
||||||
File diff suppressed because it is too large
Load Diff
@ -0,0 +1,15 @@
|
|||||||
|
{
|
||||||
|
"finding_ref": "6769",
|
||||||
|
"log_excerpt": "[quarantine] dev.cadline.hu:php7_update/partners.archlinexp.com/application/controllers/forum.php -> quarantined (dest=/var/lib/web-hids/quarantine/var/www/hosting/cadline.hu/dev/php7_update/partners.archlinexp.com/application/controllers/forum.php)",
|
||||||
|
"original_sha256": "3412487058a8a6bf79254df2d86f5cbf06b8c96adc9b26e645dd537b80ff13db",
|
||||||
|
"original_stat": {
|
||||||
|
"gid": 30037,
|
||||||
|
"mtime": 1595506267,
|
||||||
|
"size": 77534,
|
||||||
|
"uid": 12425
|
||||||
|
},
|
||||||
|
"rel_path": "php7_update/partners.archlinexp.com/application/controllers/forum.php",
|
||||||
|
"result": "quarantined",
|
||||||
|
"timestamp": "20260718T160424Z",
|
||||||
|
"vhost": "dev.cadline.hu"
|
||||||
|
}
|
||||||
File diff suppressed because it is too large
Load Diff
@ -0,0 +1,15 @@
|
|||||||
|
{
|
||||||
|
"finding_ref": "6766",
|
||||||
|
"log_excerpt": "[quarantine] dev.cadline.hu:php7_update/partners.archlinexp.com/application/controllers/forum.php~ -> quarantined (dest=/var/lib/web-hids/quarantine/var/www/hosting/cadline.hu/dev/php7_update/partners.archlinexp.com/application/controllers/forum.php~)",
|
||||||
|
"original_sha256": "8a8870bd25fea815ae45a267b82e968b5bbafafac66a0b2bc83b949439403312",
|
||||||
|
"original_stat": {
|
||||||
|
"gid": 30037,
|
||||||
|
"mtime": 1595501926,
|
||||||
|
"size": 78866,
|
||||||
|
"uid": 12425
|
||||||
|
},
|
||||||
|
"rel_path": "php7_update/partners.archlinexp.com/application/controllers/forum.php~",
|
||||||
|
"result": "quarantined",
|
||||||
|
"timestamp": "20260718T160424Z",
|
||||||
|
"vhost": "dev.cadline.hu"
|
||||||
|
}
|
||||||
@ -0,0 +1,340 @@
|
|||||||
|
<?php
|
||||||
|
class Groups extends Controller
|
||||||
|
{
|
||||||
|
function __construct()
|
||||||
|
{
|
||||||
|
parent::Controller();
|
||||||
|
$this->lang->load('site', $this->muser->user['lang']);
|
||||||
|
$this->load->model('mgroups');
|
||||||
|
}
|
||||||
|
|
||||||
|
|
||||||
|
function index()
|
||||||
|
{
|
||||||
|
$this->kategoria();
|
||||||
|
}
|
||||||
|
|
||||||
|
function upload(){
|
||||||
|
if(hun())
|
||||||
|
$data['title'] = 'ARCHLine.XP Új Csoport';
|
||||||
|
else
|
||||||
|
$data['title'] = 'ARCHLine.XP New Group';
|
||||||
|
|
||||||
|
if($this->uri->segment(3)=="java"){
|
||||||
|
$data['tartalom']='groups/java';
|
||||||
|
}
|
||||||
|
else if($this->uri->segment(3)=="simple"){
|
||||||
|
$data['tartalom']='groups/simple';
|
||||||
|
}
|
||||||
|
else{
|
||||||
|
$data['tartalom']='groups/upload';
|
||||||
|
}
|
||||||
|
$data['csik']=array('home','groups');
|
||||||
|
$data['javascript'] = array('onUploadFinished','dl_select');
|
||||||
|
$data['kategoriak'] = $this->muser->get_kategoriak('group');
|
||||||
|
|
||||||
|
$this->load->view('site',$data);
|
||||||
|
}
|
||||||
|
|
||||||
|
function uploadnew(){
|
||||||
|
redirect('/collection/upload/'.$this->uri->segment(3).'/group');
|
||||||
|
|
||||||
|
if(hun())
|
||||||
|
$data['title'] = 'ARCHLine.XP Új Csoport';
|
||||||
|
else
|
||||||
|
$data['title'] = 'ARCHLine.XP New Group';
|
||||||
|
|
||||||
|
if($this->uri->segment(3)!=""/* && $this->uri->segment(4)!=""*/){
|
||||||
|
$data["fajl"] = $this->uri->segment(3);
|
||||||
|
|
||||||
|
$data["eredeti"] = $this->uri->segment(4);
|
||||||
|
|
||||||
|
|
||||||
|
$fajlnev = '/home/vendeg/'.$this->uri->segment(3);
|
||||||
|
$fa = fopen( $fajlnev, "r" ) or die("Upload error"); //or die("$fajlnev nem nyithato meg");
|
||||||
|
$ol = fgets( $fa, 1024);
|
||||||
|
$adatok = explode("#",$ol);
|
||||||
|
// if( count($adatok) == 5){
|
||||||
|
$lang = $this->muser->user['lang'];
|
||||||
|
$honnan = "/home/vendeg/".$adatok[2];
|
||||||
|
$kepnev = time()."_".$adatok[3];
|
||||||
|
$ide= "public/img/groups/".$lang."/".$kepnev;
|
||||||
|
//$ide= "public/img/groups/temp/".$kepnev;
|
||||||
|
if( copy($honnan,$ide) ){
|
||||||
|
$adatok[3] = $ide;
|
||||||
|
}else{
|
||||||
|
$adatok[3] = "";
|
||||||
|
}
|
||||||
|
|
||||||
|
|
||||||
|
$data["fajl"] = $adatok[0];
|
||||||
|
$data["eredeti"] = $adatok[1];
|
||||||
|
$data["vendegkep"] = $adatok[2];
|
||||||
|
$data["kepalap"] = $adatok[3];
|
||||||
|
$data["cim"] = $adatok[4];
|
||||||
|
|
||||||
|
|
||||||
|
// $kepresz = substr($data["kepalap"],0,18);
|
||||||
|
// print "rész: ".$kepresz.$lang."/".$data["kepalap"];
|
||||||
|
|
||||||
|
// }
|
||||||
|
fclose($fa);
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
$data['tartalom']='groups/uploadnew';
|
||||||
|
}else{
|
||||||
|
redirect('groups/upload');
|
||||||
|
}
|
||||||
|
|
||||||
|
$data['csik']=array('home','groups');
|
||||||
|
$data['javascript'] = array('objfeltoltes');
|
||||||
|
|
||||||
|
$data['kategoriak'] = $this->muser->get_kategoriak('group');
|
||||||
|
|
||||||
|
$this->load->view('site',$data);
|
||||||
|
}
|
||||||
|
|
||||||
|
function simple(){
|
||||||
|
if(hun())
|
||||||
|
$data['title'] = 'ARCHLine.XP Új Csoport';
|
||||||
|
else
|
||||||
|
$data['title'] = 'ARCHLine.XP New Group';
|
||||||
|
$data['tartalom']='groups/simple';
|
||||||
|
$data['csik']=array('home','groups');
|
||||||
|
|
||||||
|
$this->load->view('site',$data);
|
||||||
|
}
|
||||||
|
|
||||||
|
function kat(){
|
||||||
|
|
||||||
|
if(hun())
|
||||||
|
$data['title'] = 'ARCHLine.XP Csoportok';
|
||||||
|
else
|
||||||
|
$data['title'] = 'ARCHLine.XP Groups';
|
||||||
|
|
||||||
|
$data['tartalom']='groups/kat';
|
||||||
|
$data['csik']=array('home','groups');
|
||||||
|
$data['javascript']=array('dl_select');
|
||||||
|
|
||||||
|
if(!$this->uri->segment(3))
|
||||||
|
$kat = 2;
|
||||||
|
else
|
||||||
|
$kat = $this->uri->segment(3);
|
||||||
|
$csoportok = $this->mgroups->get_bykat($kat);
|
||||||
|
$data['groups']=$csoportok;
|
||||||
|
|
||||||
|
$data['kategoriak'] = $this->muser->get_kategoriak('group');
|
||||||
|
|
||||||
|
$data['aktiv']=$kat;
|
||||||
|
$this->load->view('site',$data);
|
||||||
|
}
|
||||||
|
|
||||||
|
function kategoria(){
|
||||||
|
if(hun())
|
||||||
|
$data['title'] = 'ARCHLine.XP Csoportok';
|
||||||
|
else
|
||||||
|
$data['title'] = 'ARCHLine.XP Groups';
|
||||||
|
|
||||||
|
$data['tartalom']='groups/kat';
|
||||||
|
$data['csik']=array('home','groups');
|
||||||
|
$data['javascript']=array('dl_select');
|
||||||
|
|
||||||
|
if(!$this->uri->segment(3) || !( $this->muser->letezokategoria($this->uri->segment(3),'group') ) )
|
||||||
|
$kat = 20;
|
||||||
|
else
|
||||||
|
$kat = $this->uri->segment(3);
|
||||||
|
|
||||||
|
redirect("/collection/kategoria/".$kat);
|
||||||
|
|
||||||
|
$data['groups']=$this->mgroups->get_bykategoria($kat);
|
||||||
|
|
||||||
|
$kategoriak = $this->muser->get_kategoriak('group');
|
||||||
|
$kategoriak = $this->mgroups->get_darab($kategoriak);
|
||||||
|
|
||||||
|
$data['kategoriak'] = $kategoriak;
|
||||||
|
|
||||||
|
$data['aktiv']=$kat;
|
||||||
|
|
||||||
|
$data['title'] .= " - " . $this->muser->get_katName($kat);
|
||||||
|
|
||||||
|
$this->load->view('site',$data);
|
||||||
|
}
|
||||||
|
|
||||||
|
function submit(){
|
||||||
|
$lang = $this->muser->user['lang'];
|
||||||
|
$tempFolder = "/home/vendeg/"; //ide másolja az FTP applet a fájlt
|
||||||
|
$storeFolder = "/home/cadline/public_html/website/public/groups/".$lang."/"; //mi itt szeretnénk tárolni
|
||||||
|
$error = "";
|
||||||
|
$kep = "";
|
||||||
|
$link = "public/groups/".$lang."/";
|
||||||
|
|
||||||
|
// ha java-val:
|
||||||
|
if( isset($_POST["tempFilenameField"]) ){
|
||||||
|
$tempFilename = $_POST["tempFilenameField"]; //ezen a néven kerül feltöltésre a fájl (pl. 123456.file)
|
||||||
|
$originalFilename = $_POST["originalFilenameField"]; //ez volt az eredeti neve (pl. szoveg.doc)
|
||||||
|
$storeFilename = time()."_".$originalFilename; //ezen a neven taroljuk mi (pl. 2347686323_szoveg.doc)
|
||||||
|
|
||||||
|
|
||||||
|
$storePath = $storeFolder.$storeFilename;
|
||||||
|
$tempPath = $tempFolder.$tempFilename;
|
||||||
|
|
||||||
|
if ((strlen($tempFilename) < 3) || (strlen($originalFilename) < 3)){
|
||||||
|
die ("Hibás fáljnevek!");
|
||||||
|
$error .= "hiba";
|
||||||
|
}
|
||||||
|
|
||||||
|
if (!copy($tempPath,$storePath)){
|
||||||
|
$error .= "nem másoltam.<br>mit: ".$tempPath.", hova: ".$storePath;
|
||||||
|
}else{
|
||||||
|
$link .= $storeFilename;
|
||||||
|
$prSize = 6500;
|
||||||
|
$prSize = filesize($storePath); //??
|
||||||
|
$this->kep($kep);
|
||||||
|
}
|
||||||
|
|
||||||
|
}
|
||||||
|
// ha egyszerusitve:
|
||||||
|
else if ($_FILES["originalFilenameField"]["error"]==0){
|
||||||
|
|
||||||
|
$storeFolder = "public/groups/".$lang."/";
|
||||||
|
$storeFilename= $storeFolder.time()."_". $_FILES["originalFilenameField"]["name"];
|
||||||
|
|
||||||
|
$tempFilename = $_FILES["originalFilenameField"]["tmp_name"];
|
||||||
|
|
||||||
|
if (copy($_FILES["originalFilenameField"]["tmp_name"],$storeFilename)){
|
||||||
|
$prFile = $storeFilename;
|
||||||
|
$prSize = $_FILES['originalFilenameField']['size'];
|
||||||
|
}else{
|
||||||
|
$prFile = "NULL";
|
||||||
|
$error .= "<br />nem másoltam.<br>ezt: ".$_FILES["originalFilenameField"]["tmp_name"].", ide: ".$storeFilename;
|
||||||
|
}
|
||||||
|
$originalFilename = $_FILES["originalFilenameField"]["name"];
|
||||||
|
$storePath = $storeFilename;
|
||||||
|
|
||||||
|
$this->kep($kep);
|
||||||
|
|
||||||
|
$link = $storeFilename;
|
||||||
|
|
||||||
|
}else{
|
||||||
|
$error = "nincs csoport fajl";
|
||||||
|
}
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
// Felvétel az adatbázisba
|
||||||
|
if(!$error){
|
||||||
|
$ujgr->email = $_POST["projectEmailField"];
|
||||||
|
$ujgr->title = $_POST["projhectNameField"];
|
||||||
|
$ujgr->meret = $prSize;
|
||||||
|
$ujgr->datum = date('Y-m-d H:i:s',time());
|
||||||
|
$ujgr->nyelv = $lang;
|
||||||
|
$ujgr->kep = $kep;
|
||||||
|
$ujgr->kategoria = $_POST["kategoria"];
|
||||||
|
$ujgr->text = $_POST["projectDescriptionField"];
|
||||||
|
$ujgr->group = $link;
|
||||||
|
$ujgr->szerzo = $_POST["SzerzoField"];
|
||||||
|
|
||||||
|
if( $_POST["kategoria"] > 20 )
|
||||||
|
$ujgr->kat_id = $_POST["kategoria"];
|
||||||
|
else
|
||||||
|
$ujgr->kat_id = "";
|
||||||
|
|
||||||
|
$this->mgroups->newgroup($ujgr);
|
||||||
|
|
||||||
|
//print "<br /> <b>Új csoport felvéve!</b>";
|
||||||
|
}else{
|
||||||
|
//print "<br /> <b>Nem került új csoport az adatbázisba!</b>";
|
||||||
|
//print $error;
|
||||||
|
}
|
||||||
|
|
||||||
|
//ha nem volt print:
|
||||||
|
redirect('groups/kategoria/'.$_POST["kategoria"]);
|
||||||
|
}
|
||||||
|
|
||||||
|
function submitnew(){
|
||||||
|
$lang = $this->muser->user['lang'];
|
||||||
|
$tempFolder = "/home/vendeg/"; //ide másolja az FTP applet a fájlt
|
||||||
|
$storeFolder = "/home/cadline/public_html/website/public/groups/".$lang."/"; //mi itt szeretnénk tárolni
|
||||||
|
$error = "";
|
||||||
|
$kep = "";
|
||||||
|
|
||||||
|
$fajlnev = $_POST["originalFilenameField"]; // ez van a vendegnel
|
||||||
|
$fajlnev2 = $_POST["eredetinev"]; // ez legyen a publicban
|
||||||
|
$fajl = $tempFolder.$fajlnev;
|
||||||
|
|
||||||
|
$ido = time();
|
||||||
|
|
||||||
|
$storeFilename= $storeFolder.$ido."_".$fajlnev2;
|
||||||
|
|
||||||
|
|
||||||
|
if (copy($fajl,$storeFilename)){
|
||||||
|
$prFile = $storeFilename;
|
||||||
|
$prSize = filesize($storeFilename);
|
||||||
|
// print " Sikerült a másolás! ";
|
||||||
|
}else{
|
||||||
|
$prFile = "NULL";
|
||||||
|
$error .= "Nem másoltam át a fájlt.<br />Mit: ".$fajlnev.", Hova: ".$fajlnev2;
|
||||||
|
}
|
||||||
|
|
||||||
|
$link = "public/groups/".$lang."/".$ido."_".$fajlnev2;
|
||||||
|
|
||||||
|
$kep = $_POST["kepalap"];
|
||||||
|
$this->kep($kep);
|
||||||
|
|
||||||
|
|
||||||
|
// új kategória felvétele, ha megadták
|
||||||
|
if( $_POST["ujkat"] != "" ){
|
||||||
|
if(hun()){
|
||||||
|
$nevhun = $_POST["ujkat"];
|
||||||
|
$neveng = "";
|
||||||
|
}else{
|
||||||
|
$nevhun = "";
|
||||||
|
$neveng = $_POST["ujkat"];
|
||||||
|
}
|
||||||
|
|
||||||
|
$kat_id = $this->muser->new_kategoria('group',$nevhun,$neveng);
|
||||||
|
}else{
|
||||||
|
$kat_id = $_POST["kategoria"];
|
||||||
|
}
|
||||||
|
|
||||||
|
|
||||||
|
// Felvétel az adatbázisba
|
||||||
|
if(!$error){
|
||||||
|
$ujgr->email = $_POST["projectEmailField"];
|
||||||
|
$ujgr->title = $_POST["projhectNameField"];
|
||||||
|
$ujgr->meret = $prSize;
|
||||||
|
$ujgr->datum = date('Y-m-d H:i:s',time());
|
||||||
|
$ujgr->nyelv = $lang;
|
||||||
|
$ujgr->kep = $kep;
|
||||||
|
$ujgr->kategoria = $_POST["kategoria"];
|
||||||
|
$ujgr->text = $_POST["projectDescriptionField"];
|
||||||
|
$ujgr->group = $link;
|
||||||
|
$ujgr->szerzo = $_POST["SzerzoField"];
|
||||||
|
$ujgr->kat_id = $kat_id;
|
||||||
|
|
||||||
|
$this->mgroups->newgroup($ujgr);
|
||||||
|
|
||||||
|
}
|
||||||
|
|
||||||
|
//ha nem volt print:
|
||||||
|
redirect('groups/kategoria/'.$kat_id);
|
||||||
|
}
|
||||||
|
|
||||||
|
function kep(&$kep){
|
||||||
|
if ($_FILES["kep"]["error"]==0){
|
||||||
|
$lang = $this->muser->user['lang'];
|
||||||
|
$kepnev = time()."_". $_FILES["kep"]["name"];
|
||||||
|
$ide= "public/img/groups/".$lang."/".$kepnev;
|
||||||
|
if (copy($_FILES["kep"]["tmp_name"],$ide)){
|
||||||
|
$kep = $ide;
|
||||||
|
$prSize = $_FILES['kep']['size'];
|
||||||
|
}else{
|
||||||
|
$prFile = "NULL";
|
||||||
|
}
|
||||||
|
}
|
||||||
|
}
|
||||||
|
|
||||||
|
}
|
||||||
|
|
||||||
|
?>
|
||||||
@ -0,0 +1,15 @@
|
|||||||
|
{
|
||||||
|
"finding_ref": "6774",
|
||||||
|
"log_excerpt": "[quarantine] dev.cadline.hu:php7_update/partners.archlinexp.com/application/controllers/groups.php -> quarantined (dest=/var/lib/web-hids/quarantine/var/www/hosting/cadline.hu/dev/php7_update/partners.archlinexp.com/application/controllers/groups.php)",
|
||||||
|
"original_sha256": "cce23a7e4244cfd82817f25ec0dbb697c22cb1c92425334ee2d163d0e290d921",
|
||||||
|
"original_stat": {
|
||||||
|
"gid": 30037,
|
||||||
|
"mtime": 1595502796,
|
||||||
|
"size": 8688,
|
||||||
|
"uid": 12425
|
||||||
|
},
|
||||||
|
"rel_path": "php7_update/partners.archlinexp.com/application/controllers/groups.php",
|
||||||
|
"result": "quarantined",
|
||||||
|
"timestamp": "20260718T160424Z",
|
||||||
|
"vhost": "dev.cadline.hu"
|
||||||
|
}
|
||||||
@ -0,0 +1,429 @@
|
|||||||
|
<?php
|
||||||
|
class Objects extends Controller
|
||||||
|
{
|
||||||
|
function __construct()
|
||||||
|
{
|
||||||
|
parent::Controller();
|
||||||
|
$this->lang->load('site', $this->muser->user['lang']);
|
||||||
|
$this->load->model('mobjects');
|
||||||
|
}
|
||||||
|
|
||||||
|
function index()
|
||||||
|
{
|
||||||
|
$this->kategoria();
|
||||||
|
}
|
||||||
|
|
||||||
|
function upload(){
|
||||||
|
if(hun())
|
||||||
|
$data['title'] = 'ARCHLine.XP Új Objektum';
|
||||||
|
else
|
||||||
|
$data['title'] = 'ARCHLine.XP New Object';
|
||||||
|
|
||||||
|
if($this->uri->segment(3)=="java"){
|
||||||
|
$data['tartalom']='objects/java';
|
||||||
|
}
|
||||||
|
else if($this->uri->segment(3)=="simple"){
|
||||||
|
$data['tartalom']='objects/simple';
|
||||||
|
}
|
||||||
|
else{
|
||||||
|
$data['tartalom']='objects/upload';
|
||||||
|
}
|
||||||
|
$data['csik']=array('home','objects');
|
||||||
|
$data['javascript'] = array('onUploadFinished');
|
||||||
|
$data['kategoriak'] = $this->muser->get_kategoriak('object');
|
||||||
|
|
||||||
|
$this->load->view('site',$data);
|
||||||
|
}
|
||||||
|
|
||||||
|
function uploadnew(){
|
||||||
|
redirect('/collection/upload/'.$this->uri->segment(3).'/object');
|
||||||
|
|
||||||
|
if(hun()){
|
||||||
|
$data['title'] = 'ARCHLine.XP Új Objektum';
|
||||||
|
$data['feltetel'] = $this->mpages->get_row(572);
|
||||||
|
}
|
||||||
|
else{
|
||||||
|
$data['title'] = 'ARCHLine.XP New Object';
|
||||||
|
$data['feltetel'] = $this->mpages->get_row(571);
|
||||||
|
}
|
||||||
|
|
||||||
|
if($this->uri->segment(3)!=""/* && $this->uri->segment(4)!=""*/){
|
||||||
|
$data["fajl"] = $this->uri->segment(3);
|
||||||
|
$data["eredeti"] = $this->uri->segment(4);
|
||||||
|
|
||||||
|
/* szövegfájl átadással */
|
||||||
|
if(/*eng()*/true){
|
||||||
|
$fajlnev = '/home/vendeg/'.$this->uri->segment(3);
|
||||||
|
$fa = fopen( $fajlnev, "r" ) or die("Upload error");
|
||||||
|
$ol = fgets( $fa, 1024);
|
||||||
|
$adatok = explode("#",$ol);
|
||||||
|
// if( count($adatok) == 5){
|
||||||
|
$lang = $this->muser->user['lang'];
|
||||||
|
$honnan = "/home/vendeg/".$adatok[2];
|
||||||
|
$kepnev = time()."_".$adatok[3];
|
||||||
|
$ide= "public/img/objects/".$lang."/".$kepnev;
|
||||||
|
//$ide= "public/img/objects/temp/".$kepnev;
|
||||||
|
if( copy($honnan,$ide) ){
|
||||||
|
$adatok[3] = $ide;
|
||||||
|
}else{
|
||||||
|
$adatok[3] = "";
|
||||||
|
}
|
||||||
|
|
||||||
|
|
||||||
|
$data["fajl"] = $adatok[0];
|
||||||
|
$data["eredeti"] = $adatok[1];
|
||||||
|
$data["vendegkep"] = $adatok[2];
|
||||||
|
$data["kepalap"] = $adatok[3];
|
||||||
|
$data["cim"] = $adatok[4];
|
||||||
|
|
||||||
|
// echo(unicode_encode($data["fajl"], 'UTF-8'));
|
||||||
|
//print_r($data);
|
||||||
|
// }
|
||||||
|
fclose($fa);
|
||||||
|
}
|
||||||
|
|
||||||
|
}else{
|
||||||
|
redirect('objects/upload');
|
||||||
|
}
|
||||||
|
|
||||||
|
$data['tartalom']='objects/uploadnew';
|
||||||
|
$data['csik']=array('home','objects');
|
||||||
|
$data['javascript'] = array('objfeltoltes');
|
||||||
|
$data['kategoriak'] = $this->muser->get_kategoriak('object');
|
||||||
|
|
||||||
|
//print_r($data);
|
||||||
|
|
||||||
|
$this->load->view('site_upload',$data);
|
||||||
|
}
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
function upload2(){
|
||||||
|
redirect("collection/upload/".$this->uri->segment(3)."/object");
|
||||||
|
|
||||||
|
/*if(hun()){
|
||||||
|
$data['title'] = 'ARCHLine.XP Új Objektum';
|
||||||
|
$data['feltetel'] = $this->mpages->get_row(572);
|
||||||
|
}
|
||||||
|
else{
|
||||||
|
$data['title'] = 'ARCHLine.XP New Object';
|
||||||
|
$data['feltetel'] = $this->mpages->get_row(571);
|
||||||
|
}
|
||||||
|
|
||||||
|
if($this->uri->segment(3)!=""){
|
||||||
|
$data["fajl"] = $this->uri->segment(3);
|
||||||
|
$data["eredeti"] = $this->uri->segment(4);
|
||||||
|
|
||||||
|
/* szövegfájl átadással */
|
||||||
|
/*$fajlnev = '/home/vendeg/'.$this->uri->segment(3);
|
||||||
|
$fa = fopen( $fajlnev, "r" ) or die("Upload error");
|
||||||
|
$ol = fgets( $fa, 1024);
|
||||||
|
$adatok = explode("#",$ol);
|
||||||
|
$lang = $this->muser->user['lang'];
|
||||||
|
$honnan = "/home/vendeg/".$adatok[2];
|
||||||
|
$kepnev = time()."_".$adatok[3];
|
||||||
|
$ide= "public/img/objects/".$lang."/".$kepnev;
|
||||||
|
if( copy($honnan,$ide) ){
|
||||||
|
$adatok[3] = $ide;
|
||||||
|
}else{
|
||||||
|
$adatok[3] = "";
|
||||||
|
}
|
||||||
|
|
||||||
|
|
||||||
|
$data["fajl"] = $adatok[0];
|
||||||
|
$data["eredeti"] = $adatok[1];
|
||||||
|
$data["vendegkep"] = $adatok[2];
|
||||||
|
$data["kepalap"] = $adatok[3];
|
||||||
|
$data["cim"] = $adatok[4];
|
||||||
|
|
||||||
|
fclose($fa);
|
||||||
|
|
||||||
|
}else{
|
||||||
|
redirect('objects/upload');
|
||||||
|
}
|
||||||
|
|
||||||
|
$data['tartalom']='objects/uploadnew';
|
||||||
|
$data['javascript'] = array('objfeltoltes');
|
||||||
|
$data['kategoriak'] = $this->muser->get_kategoriak('object');
|
||||||
|
|
||||||
|
$this->load->view('site_upload',$data);*/
|
||||||
|
}
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
function simple(){
|
||||||
|
if(hun())
|
||||||
|
$data['title'] = 'ARCHLine.XP Új Objektum';
|
||||||
|
else
|
||||||
|
$data['title'] = 'ARCHLine.XP New Object';
|
||||||
|
$data['tartalom']='objects/simple';
|
||||||
|
$data['csik']=array('home','objects');
|
||||||
|
|
||||||
|
$this->load->view('site',$data);
|
||||||
|
}
|
||||||
|
|
||||||
|
function kat(){
|
||||||
|
|
||||||
|
if(hun())
|
||||||
|
$data['title'] = 'ARCHLine.XP Objektumok';
|
||||||
|
else
|
||||||
|
$data['title'] = 'ARCHLine.XP Objects';
|
||||||
|
|
||||||
|
$data['tartalom']='objects/kat';
|
||||||
|
$data['csik']=array('home','objects');
|
||||||
|
$data['javascript']=array('dl_select');
|
||||||
|
|
||||||
|
if(!$this->uri->segment(3))
|
||||||
|
$kat = 2;
|
||||||
|
else
|
||||||
|
$kat = $this->uri->segment(3);
|
||||||
|
|
||||||
|
$data['objects']=$this->mobjects->get_bykat($kat);
|
||||||
|
|
||||||
|
//$nyelv = $this->muser->user['lang'];
|
||||||
|
|
||||||
|
$data['kategoriak'] = $this->muser->get_kategoriak('object');
|
||||||
|
|
||||||
|
$data['aktiv']=$kat;
|
||||||
|
$this->load->view('site',$data);
|
||||||
|
|
||||||
|
}
|
||||||
|
|
||||||
|
function kategoria(){
|
||||||
|
if(hun())
|
||||||
|
$data['title'] = 'ARCHLine.XP Objektumok';
|
||||||
|
else
|
||||||
|
$data['title'] = 'ARCHLine.XP Objects';
|
||||||
|
|
||||||
|
$data['tartalom']='objects/kat';
|
||||||
|
$data['csik']=array('home','objects');
|
||||||
|
$data['javascript']=array('dl_select','objfeltoltes');
|
||||||
|
|
||||||
|
if( !$this->uri->segment(3) || !( $this->muser->letezokategoria($this->uri->segment(3),'object') ))
|
||||||
|
$kat = 26;
|
||||||
|
else
|
||||||
|
$kat = $this->uri->segment(3);
|
||||||
|
|
||||||
|
|
||||||
|
redirect("/collection/kategoria/".$kat);
|
||||||
|
|
||||||
|
$data['objects']=$this->mobjects->get_bykategoria($kat);
|
||||||
|
|
||||||
|
|
||||||
|
$kategoriak = $this->muser->get_kategoriak('object');
|
||||||
|
$kategoriak = $this->mobjects->get_darab($kategoriak);
|
||||||
|
|
||||||
|
$data['kategoriak'] = $kategoriak;
|
||||||
|
//$data['kategoriak'] = $this->muser->get_kategoriak('object');
|
||||||
|
|
||||||
|
$data['aktiv']=$kat;
|
||||||
|
$data['title'] .= " - " . $this->muser->get_katName($kat);
|
||||||
|
|
||||||
|
$this->load->view('site',$data);
|
||||||
|
}
|
||||||
|
|
||||||
|
function get()
|
||||||
|
{
|
||||||
|
$download_id = $this->uri->segment(3);
|
||||||
|
if(!$download_id || !is_numeric($download_id))
|
||||||
|
{
|
||||||
|
show_404();
|
||||||
|
}
|
||||||
|
|
||||||
|
$record = $this->mobjects->get_row($download_id);
|
||||||
|
if(!$record)
|
||||||
|
{
|
||||||
|
show_404();
|
||||||
|
}
|
||||||
|
|
||||||
|
redirect($record->object);
|
||||||
|
}
|
||||||
|
|
||||||
|
function submit(){
|
||||||
|
$lang = $this->muser->user['lang'];
|
||||||
|
$tempFolder = "/home/vendeg/"; //ide másolja az FTP applet a fájlt
|
||||||
|
$storeFolder = "/home/cadline/public_html/website/public/objects/".$lang."/"; //mi itt szeretnénk tárolni
|
||||||
|
$error = "";
|
||||||
|
$kep = "";
|
||||||
|
$link = "public/objects/".$lang."/";
|
||||||
|
|
||||||
|
// ha java-val:
|
||||||
|
if( isset($_POST["tempFilenameField"]) ){
|
||||||
|
$tempFilename = $_POST["tempFilenameField"]; //ezen a néven kerül feltöltésre a fájl (pl. 123456.file)
|
||||||
|
$originalFilename = $_POST["originalFilenameField"]; //ez volt az eredeti neve (pl. szoveg.doc)
|
||||||
|
$storeFilename = time()."_".$originalFilename; //ezen a neven taroljuk mi (pl. 2347686323_szoveg.doc)
|
||||||
|
|
||||||
|
|
||||||
|
$storePath = $storeFolder.$storeFilename;
|
||||||
|
$tempPath = $tempFolder.$tempFilename;
|
||||||
|
|
||||||
|
if ((strlen($tempFilename) < 3) || (strlen($originalFilename) < 3)){
|
||||||
|
die ("Hibás fáljnevek!");
|
||||||
|
$error .= "hiba";
|
||||||
|
}
|
||||||
|
|
||||||
|
//chmod($tempPath,0777);
|
||||||
|
if (!copy($tempPath,$storePath)){
|
||||||
|
//if (!rename($tempPath,$storePath)){
|
||||||
|
// print "Nem sikerül a helyére másolni a feltöltött fájlt!<br />";
|
||||||
|
$error .= "hiba";
|
||||||
|
}else{
|
||||||
|
// print "<h1>Sikeres feltöltés ($originalFilename)</h1>";
|
||||||
|
//$storeFilename = $storePath;
|
||||||
|
$link .= $storeFilename;
|
||||||
|
$prSize = 6500;
|
||||||
|
$prSize = filesize($storePath); //??
|
||||||
|
$this->kep($kep);
|
||||||
|
}
|
||||||
|
|
||||||
|
}
|
||||||
|
// ha egyszerusitve:
|
||||||
|
else if ($_FILES["originalFilenameField"]["error"]==0){
|
||||||
|
|
||||||
|
$storeFolder = "public/objects/".$lang."/";
|
||||||
|
$storeFilename= $storeFolder.time()."_". $_FILES["originalFilenameField"]["name"];
|
||||||
|
|
||||||
|
$tempFilename = $_FILES["originalFilenameField"]["tmp_name"];
|
||||||
|
|
||||||
|
if (copy($_FILES["originalFilenameField"]["tmp_name"],$storeFilename)){
|
||||||
|
$prFile = $storeFilename;
|
||||||
|
$prSize = $_FILES['originalFilenameField']['size'];
|
||||||
|
}else{
|
||||||
|
$prFile = "NULL";
|
||||||
|
$error .= "hiba..";
|
||||||
|
}
|
||||||
|
$originalFilename = $_FILES["originalFilenameField"]["name"];
|
||||||
|
$storePath = $storeFilename;
|
||||||
|
|
||||||
|
$this->kep($kep);
|
||||||
|
|
||||||
|
$link = $storeFilename;
|
||||||
|
|
||||||
|
}else{
|
||||||
|
$error = "nincs objektum fajl";
|
||||||
|
}
|
||||||
|
|
||||||
|
|
||||||
|
// Felvétel az adatbázisba
|
||||||
|
if(!$error){
|
||||||
|
$ujpr->email = $_POST["projectEmailField"];
|
||||||
|
$ujpr->title = $_POST["projhectNameField"];
|
||||||
|
$ujpr->meret = $prSize;
|
||||||
|
$ujpr->datum = date('Y-m-d H:i:s',time());
|
||||||
|
$ujpr->nyelv = $lang;
|
||||||
|
$ujpr->kep = $kep;
|
||||||
|
$ujpr->kategoria = $_POST["kategoria"];
|
||||||
|
$ujpr->text = $_POST["projectDescriptionField"];
|
||||||
|
$ujpr->object = $link;
|
||||||
|
$ujpr->szerzo = $_POST["SzerzoField"];
|
||||||
|
$ujpr->kat_id = $_POST["kategoria"];
|
||||||
|
|
||||||
|
$this->mobjects->newobject($ujpr);
|
||||||
|
|
||||||
|
//print "<br /> <b>Új projekt felvéve</b>";
|
||||||
|
}else{
|
||||||
|
//print "<br /> <b>Nem került adat az adatbázisba</b>";
|
||||||
|
}
|
||||||
|
|
||||||
|
//ha nem volt print:
|
||||||
|
redirect('objects/kategoria/'.$_POST["kategoria"]);
|
||||||
|
}
|
||||||
|
|
||||||
|
function submitnew(){
|
||||||
|
$lang = $this->muser->user['lang'];
|
||||||
|
$tempFolder = "/home/vendeg/"; //ide másolja az FTP applet a fájlt
|
||||||
|
$storeFolder = "/home/cadline/public_html/website/public/objects/".$lang."/"; //mi itt szeretnénk tárolni
|
||||||
|
$error = "";
|
||||||
|
$kep = "";
|
||||||
|
|
||||||
|
$fajlnev = $_POST["originalFilenameField"]; // ez van a vendegnel
|
||||||
|
$fajlnev2 = $_POST["eredetinev"]; // ez legyen a publicban
|
||||||
|
$fajl = $tempFolder.$fajlnev;
|
||||||
|
|
||||||
|
$ido = time();
|
||||||
|
|
||||||
|
$storeFilename= $storeFolder.$ido."_".$fajlnev2;
|
||||||
|
|
||||||
|
|
||||||
|
if (copy($fajl,$storeFilename)){
|
||||||
|
$prFile = $storeFilename;
|
||||||
|
$prSize = filesize($storeFilename);
|
||||||
|
}else{
|
||||||
|
$prFile = "NULL";
|
||||||
|
$error .= "Nem másoltam át a fájlt<br /> vendegben: ".$fajlnev." publicba: ".$fajlnev2;
|
||||||
|
}
|
||||||
|
|
||||||
|
$link = "public/objects/".$lang."/".$ido."_".$fajlnev2;
|
||||||
|
|
||||||
|
$kep = $_POST["kepalap"];
|
||||||
|
$this->kep($kep);
|
||||||
|
|
||||||
|
|
||||||
|
// új kategória felvétele, ha megadták
|
||||||
|
if( $_POST["ujkat"] != "" ){
|
||||||
|
if(hun()){
|
||||||
|
$nevhun = $_POST["ujkat"];
|
||||||
|
$neveng = "";
|
||||||
|
}else{
|
||||||
|
$nevhun = "";
|
||||||
|
$neveng = $_POST["ujkat"];
|
||||||
|
}
|
||||||
|
|
||||||
|
$kat_id = $this->muser->new_kategoria('object',$nevhun,$neveng);
|
||||||
|
}else{
|
||||||
|
$kat_id = $_POST["kategoria"];
|
||||||
|
}
|
||||||
|
|
||||||
|
|
||||||
|
// Felvétel az adatbázisba
|
||||||
|
if(!$error){
|
||||||
|
$ujpr->email = $_POST["projectEmailField"];
|
||||||
|
$ujpr->title = $_POST["projhectNameField"];
|
||||||
|
$ujpr->meret = $prSize;
|
||||||
|
$ujpr->datum = date('Y-m-d H:i:s',time());
|
||||||
|
$ujpr->nyelv = $lang;
|
||||||
|
$ujpr->kep = $kep;
|
||||||
|
$ujpr->kategoria = $_POST["kategoria"];
|
||||||
|
$ujpr->text = $_POST["projectDescriptionField"];
|
||||||
|
$ujpr->object = $link;
|
||||||
|
$ujpr->szerzo = $_POST["SzerzoField"];
|
||||||
|
$ujpr->kat_id = $kat_id;
|
||||||
|
|
||||||
|
$this->mobjects->newobject($ujpr);
|
||||||
|
|
||||||
|
//print "<br /> <b>Új projekt felvéve</b>";
|
||||||
|
}else{
|
||||||
|
//print "<br /> <b>Nem került adat az adatbázisba</b>";
|
||||||
|
//print $error;
|
||||||
|
}
|
||||||
|
|
||||||
|
//ha nem volt print:
|
||||||
|
redirect('objects/kategoria/'.$kat_id);
|
||||||
|
}
|
||||||
|
|
||||||
|
function kep(&$kep){
|
||||||
|
if ($_FILES["kep"]["error"]==0){
|
||||||
|
$lang = $this->muser->user['lang'];
|
||||||
|
$kepnev = time()."_". $_FILES["kep"]["name"];
|
||||||
|
$ide= "public/img/objects/".$lang."/".$kepnev;
|
||||||
|
if (copy($_FILES["kep"]["tmp_name"],$ide)){
|
||||||
|
$kep = $ide;
|
||||||
|
$prSize = $_FILES['kep']['size'];
|
||||||
|
//print " Sikerült a képmásolás! ";
|
||||||
|
}else{
|
||||||
|
$prFile = "NULL";
|
||||||
|
//print " Nem sikerült a képet felmásolni! ";
|
||||||
|
}
|
||||||
|
}
|
||||||
|
}
|
||||||
|
|
||||||
|
}
|
||||||
|
|
||||||
|
?>
|
||||||
@ -0,0 +1,15 @@
|
|||||||
|
{
|
||||||
|
"finding_ref": "6767",
|
||||||
|
"log_excerpt": "[quarantine] dev.cadline.hu:php7_update/partners.archlinexp.com/application/controllers/objects.php -> quarantined (dest=/var/lib/web-hids/quarantine/var/www/hosting/cadline.hu/dev/php7_update/partners.archlinexp.com/application/controllers/objects.php)",
|
||||||
|
"original_sha256": "38a24706801b0127273d0776f59e480f1d75b681cbd700038140fef397226303",
|
||||||
|
"original_stat": {
|
||||||
|
"gid": 30037,
|
||||||
|
"mtime": 1595502815,
|
||||||
|
"size": 10787,
|
||||||
|
"uid": 12425
|
||||||
|
},
|
||||||
|
"rel_path": "php7_update/partners.archlinexp.com/application/controllers/objects.php",
|
||||||
|
"result": "quarantined",
|
||||||
|
"timestamp": "20260718T160424Z",
|
||||||
|
"vhost": "dev.cadline.hu"
|
||||||
|
}
|
||||||
@ -0,0 +1,445 @@
|
|||||||
|
<?php
|
||||||
|
class Projects extends Controller
|
||||||
|
{
|
||||||
|
function __construct()
|
||||||
|
{
|
||||||
|
parent::Controller();
|
||||||
|
|
||||||
|
$this->lang->load('site', $this->muser->user['lang']);
|
||||||
|
|
||||||
|
$this->load->model('mprojects');
|
||||||
|
}
|
||||||
|
|
||||||
|
function index()
|
||||||
|
{
|
||||||
|
$this->kategoria();
|
||||||
|
}
|
||||||
|
|
||||||
|
function supportupload(){
|
||||||
|
include('application/helpers/sajatfeltolto.php');
|
||||||
|
|
||||||
|
$guid = $this->uri->segment(4);
|
||||||
|
$sorozatszam = $this->uri->segment(3);
|
||||||
|
|
||||||
|
print_r($this->uri->segments);
|
||||||
|
|
||||||
|
print "guid: ".$guid."<br> sorozatszam: ".$sorozatszam;
|
||||||
|
|
||||||
|
if( !$guid || !$sorozatszam ){
|
||||||
|
$record->osztaly = "projects";
|
||||||
|
$record->fv = "supportupload";
|
||||||
|
$record->hiba = "Hiányzó guid vagy sorozatszám:\n".$guid."\n".$sorozatszam;
|
||||||
|
$record->datum = date('Y-m-d H:i:s',time());
|
||||||
|
$this->db->insert('a_hibak',$record);
|
||||||
|
|
||||||
|
return;
|
||||||
|
}
|
||||||
|
|
||||||
|
$honnan = '/home/vendeg/support/'.$guid;
|
||||||
|
$hova = 'public/ugyfelupload/'.$sorozatszam;
|
||||||
|
|
||||||
|
if( !file_exists($honnan) && file_exists($honnan."=") )
|
||||||
|
$honnan .= "=";
|
||||||
|
elseif( !file_exists($honnan) && file_exists($honnan."==") )
|
||||||
|
$honnan .= "==";
|
||||||
|
|
||||||
|
|
||||||
|
if(!is_dir($hova)){
|
||||||
|
mkdir($hova,0777);
|
||||||
|
exec("chmod 777 /var/www/hosting/cadline.hu/www/".$hova);
|
||||||
|
}
|
||||||
|
$hova .= "/".trim(base64_decode($guid),"=");;
|
||||||
|
|
||||||
|
if( athelyez($honnan,$hova) ){
|
||||||
|
exec("chmod 777 /var/www/hosting/cadline.hu/www/".$hova);
|
||||||
|
}
|
||||||
|
else{
|
||||||
|
// sikertelen masolas
|
||||||
|
|
||||||
|
$record->osztaly = "projects";
|
||||||
|
$record->fv = "supportupload";
|
||||||
|
$record->hiba = "Másolás hiba, honnan:".$honnan."\nhova: ".$hova;
|
||||||
|
$record->datum = date('Y-m-d H:i:s',time());
|
||||||
|
$this->db->insert('a_hibak',$record);
|
||||||
|
}
|
||||||
|
|
||||||
|
}
|
||||||
|
|
||||||
|
function upload(){
|
||||||
|
if(hun())
|
||||||
|
$data['title'] = 'ARCHLine.XP Új Projekt';
|
||||||
|
else
|
||||||
|
$data['title'] = 'ARCHLine.XP New Project';
|
||||||
|
|
||||||
|
if($this->uri->segment(3)=="java"){
|
||||||
|
$data['tartalom']='projects/java';
|
||||||
|
}
|
||||||
|
else if($this->uri->segment(3)=="simple"){
|
||||||
|
$data['tartalom']='projects/simple';
|
||||||
|
}
|
||||||
|
else{
|
||||||
|
$data['tartalom']='projects/upload';
|
||||||
|
}
|
||||||
|
|
||||||
|
$data['kategoriak'] = $this->muser->get_kategoriak('project');
|
||||||
|
|
||||||
|
$data['csik']=array('home','projects');
|
||||||
|
$data['javascript'] = array('onUploadFinished');
|
||||||
|
|
||||||
|
$this->load->view('site',$data);
|
||||||
|
}
|
||||||
|
|
||||||
|
function uploadnew(){
|
||||||
|
redirect('/collection/upload/'.$this->uri->segment(3).'/project');
|
||||||
|
|
||||||
|
if(hun()){
|
||||||
|
$data['title'] = 'ARCHLine.XP Új Projekt';
|
||||||
|
$data['feltetel'] = $this->mpages->get_row(572);
|
||||||
|
}
|
||||||
|
else{
|
||||||
|
$data['title'] = 'ARCHLine.XP New Project';
|
||||||
|
$data['feltetel'] = $this->mpages->get_row(571);
|
||||||
|
}
|
||||||
|
|
||||||
|
|
||||||
|
if($this->uri->segment(3)!=""){
|
||||||
|
$data["fajl"] = $this->uri->segment(3);
|
||||||
|
$data["eredeti"] = $this->uri->segment(4);
|
||||||
|
|
||||||
|
|
||||||
|
$fajlnev = '/home/vendeg/'.$this->uri->segment(3);
|
||||||
|
$fa = fopen( $fajlnev, "r" ) or die("Upload error");
|
||||||
|
$ol = fgets( $fa, 1024);
|
||||||
|
$adatok = explode("#",$ol);
|
||||||
|
// if( count($adatok) == 5){
|
||||||
|
$lang = $this->muser->user['lang'];
|
||||||
|
$honnan = "/home/vendeg/".$adatok[2];
|
||||||
|
$kepnev = time()."_".$adatok[3];
|
||||||
|
$ide= "public/img/projects/".$lang."/".$kepnev;
|
||||||
|
//$ide= "public/img/projects/temp/".$kepnev;
|
||||||
|
if( copy($honnan,$ide) ){
|
||||||
|
$adatok[3] = $ide;
|
||||||
|
}else{
|
||||||
|
$adatok[3] = "";
|
||||||
|
}
|
||||||
|
|
||||||
|
|
||||||
|
$data["fajl"] = $adatok[0];
|
||||||
|
$data["eredeti"] = $adatok[1];
|
||||||
|
$data["vendegkep"] = $adatok[2];
|
||||||
|
$data["kepalap"] = $adatok[3];
|
||||||
|
$data["cim"] = $adatok[4];
|
||||||
|
|
||||||
|
// }
|
||||||
|
fclose($fa);
|
||||||
|
|
||||||
|
|
||||||
|
$data['tartalom']='projects/uploadnew';
|
||||||
|
}else{
|
||||||
|
redirect('projects/upload');
|
||||||
|
}
|
||||||
|
|
||||||
|
$data['kategoriak'] = $this->muser->get_kategoriak('project');
|
||||||
|
|
||||||
|
$data['javascript'] = array('objfeltoltes');
|
||||||
|
|
||||||
|
$this->load->view('site_upload',$data);
|
||||||
|
}
|
||||||
|
|
||||||
|
function simple(){
|
||||||
|
if(hun())
|
||||||
|
$data['title'] = 'ARCHLine.XP Új Projekt';
|
||||||
|
else
|
||||||
|
$data['title'] = 'ARCHLine.XP New Project';
|
||||||
|
$data['tartalom']='projects/simple';
|
||||||
|
$data['csik']=array('home','projects');
|
||||||
|
|
||||||
|
$this->load->view('site',$data);
|
||||||
|
}
|
||||||
|
|
||||||
|
function cadline(){
|
||||||
|
$data['title'] = 'ARCHLine.XP Projektek szerkesztése';
|
||||||
|
$data['tartalom']='projects/cadline';
|
||||||
|
$data['csik']=array('home','projects');
|
||||||
|
|
||||||
|
//$projects = $this->mprojects->get_all();
|
||||||
|
//$data['projects'] = $projects;
|
||||||
|
|
||||||
|
$this->load->view('site',$data);
|
||||||
|
}
|
||||||
|
|
||||||
|
function kat(){
|
||||||
|
|
||||||
|
if(hun())
|
||||||
|
$data['title'] = 'ARCHLine.XP Projektek';
|
||||||
|
else
|
||||||
|
$data['title'] = 'ARCHLine.XP Projects';
|
||||||
|
|
||||||
|
$data['tartalom']='projects/kat';
|
||||||
|
$data['csik']=array('home','projects');
|
||||||
|
$data['javascript']=array('dl_select');
|
||||||
|
|
||||||
|
if(!$this->uri->segment(3) || !is_numeric($this->uri->segment(3)))
|
||||||
|
$kat = 6;
|
||||||
|
else
|
||||||
|
$kat = $this->uri->segment(3);
|
||||||
|
|
||||||
|
$projektek = $this->mprojects->get_bykat($kat);
|
||||||
|
$data['projects']=$projektek;
|
||||||
|
|
||||||
|
$data['kategoriak'] = $this->muser->get_kategoriak('project');
|
||||||
|
|
||||||
|
$data['aktiv']=$kat;
|
||||||
|
$this->load->view('site',$data);
|
||||||
|
}
|
||||||
|
|
||||||
|
function kategoria(){
|
||||||
|
redirect("/collection/kategoria/1");
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
if(hun())
|
||||||
|
$data['title'] = 'ARCHLine.XP Projektek';
|
||||||
|
else
|
||||||
|
$data['title'] = 'ARCHLine.XP Projects';
|
||||||
|
|
||||||
|
$data['tartalom']='projects/kat';
|
||||||
|
$data['csik']=array('home','projects');
|
||||||
|
$data['javascript']=array('dl_select','objfeltoltes');
|
||||||
|
|
||||||
|
if(!$this->uri->segment(3) || !( $this->muser->letezokategoria($this->uri->segment(3),'project') ) )
|
||||||
|
$kat = 1;
|
||||||
|
else
|
||||||
|
$kat = $this->uri->segment(3);
|
||||||
|
|
||||||
|
|
||||||
|
$data['projects']=$this->mprojects->get_bykategoria($kat);
|
||||||
|
|
||||||
|
$kategoriak = $this->muser->get_kategoriak('project');
|
||||||
|
$kategoriak = $this->mprojects->get_darab($kategoriak);
|
||||||
|
|
||||||
|
$data['kategoriak'] = $kategoriak;
|
||||||
|
|
||||||
|
$data['aktiv']=$kat;
|
||||||
|
|
||||||
|
$data['title'] .= " - " . $this->muser->get_katName($kat);
|
||||||
|
|
||||||
|
$this->load->view('site',$data);
|
||||||
|
}
|
||||||
|
|
||||||
|
function get()
|
||||||
|
{
|
||||||
|
$download_id = $this->uri->segment(3);
|
||||||
|
if(!$download_id || !is_numeric($download_id))
|
||||||
|
{
|
||||||
|
show_404();
|
||||||
|
}
|
||||||
|
|
||||||
|
$record = $this->mprojects->get_row($download_id);
|
||||||
|
if(!$record)
|
||||||
|
{
|
||||||
|
show_404();
|
||||||
|
}
|
||||||
|
|
||||||
|
redirect($record->project);
|
||||||
|
}
|
||||||
|
|
||||||
|
function submit(){
|
||||||
|
$lang = $this->muser->user['lang'];
|
||||||
|
$tempFolder = "/home/vendeg/"; //ide másolja az FTP applet a fájlt
|
||||||
|
$storeFolder = "/home/cadline/public_html/website/public/projects/".$lang."/"; //mi itt szeretnénk tárolni
|
||||||
|
$error = "";
|
||||||
|
$kep = "";
|
||||||
|
$link = "public/projects/".$lang."/";
|
||||||
|
|
||||||
|
// ha java-val:
|
||||||
|
if( isset($_POST["tempFilenameField"]) ){
|
||||||
|
$tempFilename = $_POST["tempFilenameField"]; //ezen a néven kerül feltöltésre a fájl (pl. 123456.file)
|
||||||
|
$originalFilename = $_POST["originalFilenameField"]; //ez volt az eredeti neve (pl. szoveg.doc)
|
||||||
|
$storeFilename = time()."_".$originalFilename; //ezen a neven taroljuk mi (pl. 2347686323_szoveg.doc)
|
||||||
|
|
||||||
|
|
||||||
|
$storePath = $storeFolder.$storeFilename;
|
||||||
|
$tempPath = $tempFolder.$tempFilename;
|
||||||
|
|
||||||
|
if ((strlen($tempFilename) < 3) || (strlen($originalFilename) < 3)){
|
||||||
|
die ("Hibás fáljnevek!");
|
||||||
|
$error .= "hiba";
|
||||||
|
}
|
||||||
|
|
||||||
|
//chmod($tempPath,0777);
|
||||||
|
if (!copy($tempPath,$storePath)){
|
||||||
|
//if (!rename($tempPath,$storePath)){
|
||||||
|
// print "Nem sikerül a helyére másolni a feltöltött fájlt!<br />";
|
||||||
|
$error .= "hiba";
|
||||||
|
}else{
|
||||||
|
// print "<h1>Sikeres feltöltés ($originalFilename)</h1>";
|
||||||
|
//$storeFilename = $storePath;
|
||||||
|
$link .= $storeFilename;
|
||||||
|
$prSize = 6500;
|
||||||
|
$prSize = filesize($storePath); //??
|
||||||
|
$this->kep($kep);
|
||||||
|
}
|
||||||
|
|
||||||
|
}
|
||||||
|
// ha egyszerűsítve:
|
||||||
|
else if ($_FILES["originalFilenameField"]["error"]==0){
|
||||||
|
|
||||||
|
$storeFolder = "public/projects/".$lang."/";
|
||||||
|
$storeFilename= $storeFolder.time()."_". $_FILES["originalFilenameField"]["name"];
|
||||||
|
|
||||||
|
$tempFilename = $_FILES["originalFilenameField"]["tmp_name"];
|
||||||
|
|
||||||
|
if (copy($_FILES["originalFilenameField"]["tmp_name"],$storeFilename)){
|
||||||
|
$prFile = $storeFilename;
|
||||||
|
$prSize = $_FILES['originalFilenameField']['size'];
|
||||||
|
}else{
|
||||||
|
$prFile = "NULL";
|
||||||
|
$error .= "hiba..";
|
||||||
|
}
|
||||||
|
$originalFilename = $_FILES["originalFilenameField"]["name"];
|
||||||
|
$storePath = $storeFilename;
|
||||||
|
|
||||||
|
$this->kep($kep);
|
||||||
|
|
||||||
|
$link = $storeFilename;
|
||||||
|
|
||||||
|
}else{
|
||||||
|
$error = "nincs projekt fajl";
|
||||||
|
}
|
||||||
|
|
||||||
|
|
||||||
|
// Felvétel az adatbázisba
|
||||||
|
if(!$error){
|
||||||
|
$ujpr->email = $_POST["projectEmailField"];
|
||||||
|
$ujpr->title = $_POST["projhectNameField"];
|
||||||
|
$ujpr->meret = $prSize;
|
||||||
|
$ujpr->datum = date('Y-m-d H:i:s',time());
|
||||||
|
$ujpr->nyelv = $lang;
|
||||||
|
$ujpr->kep = $kep;
|
||||||
|
$ujpr->kategoria = $_POST["kategoria"];
|
||||||
|
$ujpr->text = $_POST["projectDescriptionField"];
|
||||||
|
$ujpr->project = $link;
|
||||||
|
$ujpr->szerzo = $_POST["SzerzoField"];
|
||||||
|
$ujpr->kat_id = $_POST["kategoria"];
|
||||||
|
|
||||||
|
$this->mprojects->newproject($ujpr);
|
||||||
|
|
||||||
|
//print "<br /> <b>Új projekt felvéve</b>";
|
||||||
|
}else{
|
||||||
|
//print "<br /> <b>Nem került adat az adatbázisba</b>";
|
||||||
|
}
|
||||||
|
|
||||||
|
//ha nem volt print:
|
||||||
|
redirect('projects/kategoria/'.$_POST["kategoria"]);
|
||||||
|
}
|
||||||
|
|
||||||
|
|
||||||
|
function submitnew(){
|
||||||
|
$lang = $this->muser->user['lang'];
|
||||||
|
$tempFolder = "/home/vendeg/"; //ide másolja a program a fájlt
|
||||||
|
$storeFolder = "/home/cadline/public_html/website/public/projects/".$lang."/"; //mi itt szeretnénk tárolni
|
||||||
|
$error = "";
|
||||||
|
$kep = "";
|
||||||
|
|
||||||
|
|
||||||
|
$fajlnev = $_POST["originalFilenameField"]; // ez van a vendegnel
|
||||||
|
//$fajlnev2 = $_POST["eredetinev"]; // ez legyen a publicban
|
||||||
|
//$fajlnev2 = $this->ekezet($_POST["eredetinev"]); // ez legyen a publicban
|
||||||
|
|
||||||
|
|
||||||
|
$fajlnev2 = $_POST["originalFilenameField"]; // ez legyen a publicban
|
||||||
|
$parameterbe = $_POST["eredetinev"]; // ez a név jelenik meg a letöltéskor az url-ben, paraméterként
|
||||||
|
|
||||||
|
|
||||||
|
$fajl = $tempFolder.$fajlnev;
|
||||||
|
|
||||||
|
$link = "public/projects/".$lang."/".$fajl;
|
||||||
|
|
||||||
|
$storeFolder = "public/projects/".$lang."/";
|
||||||
|
$storeFilename= $storeFolder.time()."_".$fajlnev2;
|
||||||
|
|
||||||
|
if (copy($fajl,$storeFilename)){
|
||||||
|
$prFile = $storeFilename;
|
||||||
|
$prSize = filesize($storeFilename);
|
||||||
|
$kep = $_POST["kepalap"];
|
||||||
|
$this->kep($kep);
|
||||||
|
}else{
|
||||||
|
$prFile = "NULL";
|
||||||
|
$error .= "Nem másoltam át a fájlt<br /> vendegben: ".$fajlnev." publicba: ".$fajlnev2;
|
||||||
|
}
|
||||||
|
$originalFilename = $_FILES["originalFilenameField"]["name"];
|
||||||
|
$storePath = $storeFilename;
|
||||||
|
|
||||||
|
|
||||||
|
$link = $storeFilename;
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
// új kategória felvétele, ha megadták
|
||||||
|
if( $_POST["ujkat"] != "" ){
|
||||||
|
if(hun()){
|
||||||
|
$nevhun = $_POST["ujkat"];
|
||||||
|
$neveng = "";
|
||||||
|
}else{
|
||||||
|
$nevhun = "";
|
||||||
|
$neveng = $_POST["ujkat"];
|
||||||
|
}
|
||||||
|
|
||||||
|
$kat_id = $this->muser->new_kategoria('project',$nevhun,$neveng);
|
||||||
|
}else{
|
||||||
|
$kat_id = $_POST["kategoria"];
|
||||||
|
}
|
||||||
|
|
||||||
|
|
||||||
|
// Felvétel az adatbázisba
|
||||||
|
if(!$error){
|
||||||
|
$ujpr->email = $_POST["projectEmailField"];
|
||||||
|
$ujpr->title = $_POST["projhectNameField"];
|
||||||
|
$ujpr->meret = $prSize;
|
||||||
|
$ujpr->datum = date('Y-m-d H:i:s',time());
|
||||||
|
$ujpr->nyelv = $lang;
|
||||||
|
$ujpr->kep = $kep;
|
||||||
|
$ujpr->kategoria = $kat_id;
|
||||||
|
$ujpr->text = $_POST["projectDescriptionField"];
|
||||||
|
$ujpr->project = $link;
|
||||||
|
$ujpr->eredeti = $parameterbe;
|
||||||
|
$ujpr->szerzo = $_POST["SzerzoField"];
|
||||||
|
$ujpr->kat_id = $kat_id;
|
||||||
|
|
||||||
|
$this->mprojects->newproject($ujpr);
|
||||||
|
|
||||||
|
// print "<br /> <b>Új projekt felvéve</b>";
|
||||||
|
// print_r($ujpr);
|
||||||
|
}else{
|
||||||
|
//print "<br /> <b>Nem került adat az adatbázisba</b>";
|
||||||
|
//print $error;
|
||||||
|
}
|
||||||
|
|
||||||
|
//ha nem volt print:
|
||||||
|
redirect('projects/kategoria/'.$kat_id);
|
||||||
|
}
|
||||||
|
|
||||||
|
function ekezet($input){
|
||||||
|
$mit = array("/á/", "/Á/", "/é/", "/É/", "/í/", "/Í/", "/ö/", "/Ö/", "/ő/", "/Ő/", "/ó/", "/Ó/", "/ú/", "/Ú/", "/ü/", "/Ü/", "/ű/", "/Ű/", "/ /");
|
||||||
|
$mire = array("a", "A", "e", "E", "i", "I", "o", "O", "o", "O", "o", "O", "u", "U", "u", "U", "u", "U", "_");
|
||||||
|
$output = preg_replace($mit, $mire, $input);
|
||||||
|
return $output;
|
||||||
|
}
|
||||||
|
|
||||||
|
function kep(&$kep){
|
||||||
|
if ($_FILES["kep"]["error"]==0){
|
||||||
|
$lang = $this->muser->user['lang'];
|
||||||
|
$kepnev = time()."_". $_FILES["kep"]["name"];
|
||||||
|
$ide= "public/img/projects/".$lang."/".$kepnev;
|
||||||
|
if (copy($_FILES["kep"]["tmp_name"],$ide)){
|
||||||
|
$kep = $ide;
|
||||||
|
}
|
||||||
|
}
|
||||||
|
}
|
||||||
|
|
||||||
|
|
||||||
|
}
|
||||||
|
|
||||||
|
?>
|
||||||
@ -0,0 +1,15 @@
|
|||||||
|
{
|
||||||
|
"finding_ref": "6770",
|
||||||
|
"log_excerpt": "[quarantine] dev.cadline.hu:php7_update/partners.archlinexp.com/application/controllers/projects.php -> quarantined (dest=/var/lib/web-hids/quarantine/var/www/hosting/cadline.hu/dev/php7_update/partners.archlinexp.com/application/controllers/projects.php)",
|
||||||
|
"original_sha256": "2860e757380bcee28db11d0edb77d54d6a4940c76661d6c71f5ebddfd22f6616",
|
||||||
|
"original_stat": {
|
||||||
|
"gid": 30037,
|
||||||
|
"mtime": 1595502831,
|
||||||
|
"size": 11456,
|
||||||
|
"uid": 12425
|
||||||
|
},
|
||||||
|
"rel_path": "php7_update/partners.archlinexp.com/application/controllers/projects.php",
|
||||||
|
"result": "quarantined",
|
||||||
|
"timestamp": "20260718T160424Z",
|
||||||
|
"vhost": "dev.cadline.hu"
|
||||||
|
}
|
||||||
File diff suppressed because it is too large
Load Diff
@ -0,0 +1,15 @@
|
|||||||
|
{
|
||||||
|
"finding_ref": "6773",
|
||||||
|
"log_excerpt": "[quarantine] dev.cadline.hu:php7_update/partners.archlinexp.com/application/controllers/testforum.php -> quarantined (dest=/var/lib/web-hids/quarantine/var/www/hosting/cadline.hu/dev/php7_update/partners.archlinexp.com/application/controllers/testforum.php)",
|
||||||
|
"original_sha256": "6eb44fd9b69b4cf5a4b0cb71210bb47fab65e8d04ad69b568c640e878cd52986",
|
||||||
|
"original_stat": {
|
||||||
|
"gid": 30037,
|
||||||
|
"mtime": 1595503925,
|
||||||
|
"size": 68322,
|
||||||
|
"uid": 12425
|
||||||
|
},
|
||||||
|
"rel_path": "php7_update/partners.archlinexp.com/application/controllers/testforum.php",
|
||||||
|
"result": "quarantined",
|
||||||
|
"timestamp": "20260718T160424Z",
|
||||||
|
"vhost": "dev.cadline.hu"
|
||||||
|
}
|
||||||
@ -0,0 +1,102 @@
|
|||||||
|
<?php
|
||||||
|
|
||||||
|
function feltolt($mezo,$hova,$fajlnev,$ekezet=false){
|
||||||
|
if($_FILES[$mezo]["error"]==0){
|
||||||
|
|
||||||
|
if($ekezet===true)
|
||||||
|
$fajlnev = ekezet($fajlnev);
|
||||||
|
elseif($ekezet=="irasjel")
|
||||||
|
$fajlnev = irasjel($fajlnev);
|
||||||
|
|
||||||
|
$ide= $hova.$fajlnev;
|
||||||
|
$kep = false;
|
||||||
|
if( file_exists($ide) ){
|
||||||
|
$x = explode('.', $fajlnev);
|
||||||
|
$ext = end($x);
|
||||||
|
|
||||||
|
$alap = substr($fajlnev,0,-(strlen($ext)+1));
|
||||||
|
|
||||||
|
for ($i = 1; $i < 100; $i++){
|
||||||
|
if ( !file_exists($hova.$alap.$i.".".$ext)){
|
||||||
|
$fajlnev = $alap.$i.".".$ext;
|
||||||
|
$ide= $hova.$fajlnev;
|
||||||
|
break;
|
||||||
|
}
|
||||||
|
}
|
||||||
|
}
|
||||||
|
if (copy($_FILES[$mezo]["tmp_name"],$ide)){
|
||||||
|
$kep = $ide;
|
||||||
|
}else{
|
||||||
|
$kep = false;
|
||||||
|
}
|
||||||
|
|
||||||
|
|
||||||
|
return $kep;
|
||||||
|
}
|
||||||
|
|
||||||
|
return false;
|
||||||
|
}
|
||||||
|
|
||||||
|
function ekezet($input){
|
||||||
|
$mit = array("/á/", "/Á/", "/é/", "/É/", "/í/", "/Í/", "/ö/", "/Ö/", "/ő/", "/Ő/", "/ó/", "/Ó/", "/ú/", "/Ú/", "/ü/", "/Ü/", "/ű/", "/Ű/", "/ /");
|
||||||
|
$mire = array("a", "A", "e", "E", "i", "I", "o", "O", "o", "O", "o", "O", "u", "U", "u", "U", "u", "U", "_");
|
||||||
|
$output = preg_replace($mit, $mire, $input);
|
||||||
|
return $output;
|
||||||
|
}
|
||||||
|
|
||||||
|
function irasjel($input){
|
||||||
|
$mit = array("/ /", "/'/", '/"/', "/,/","/\//");
|
||||||
|
$mire = array("_", "", "", "_", "_");
|
||||||
|
$output = preg_replace($mit, $mire, $input);
|
||||||
|
return $output;
|
||||||
|
}
|
||||||
|
|
||||||
|
function athelyez($honnan,$hova,$ekezet=false){
|
||||||
|
if($ekezet)
|
||||||
|
$hova = ekezet($hova);
|
||||||
|
|
||||||
|
$fajl = false;
|
||||||
|
|
||||||
|
if( file_exists($hova) ){
|
||||||
|
$x = explode('.', $hova);
|
||||||
|
$ext = end($x);
|
||||||
|
|
||||||
|
$alap = substr($hova,0,-(strlen($ext)+1));
|
||||||
|
|
||||||
|
for ($i = 1; $i < 100; $i++){
|
||||||
|
if ( !file_exists($alap.$i.".".$ext)){
|
||||||
|
$hova = $alap.$i.".".$ext;
|
||||||
|
break;
|
||||||
|
}
|
||||||
|
}
|
||||||
|
}
|
||||||
|
|
||||||
|
if(copy($honnan,$hova)){
|
||||||
|
$fajl = $hova;
|
||||||
|
exec("rm ".$honnan);
|
||||||
|
}else{
|
||||||
|
$fajl = false;
|
||||||
|
}
|
||||||
|
|
||||||
|
|
||||||
|
return $fajl;
|
||||||
|
}
|
||||||
|
|
||||||
|
function urlazon($input){
|
||||||
|
// szóköz csere + kisbetű
|
||||||
|
$subject = str_replace(' ','-',strtolower($input));
|
||||||
|
|
||||||
|
// magyar ékezetek cseréje
|
||||||
|
$subject = ekezet($subject);
|
||||||
|
|
||||||
|
$pattern = '/[-_a-z1-9]*/';
|
||||||
|
preg_match_all($pattern, $subject, $matches, PREG_OFFSET_CAPTURE);
|
||||||
|
$ret = "";
|
||||||
|
foreach($matches[0] as $m)
|
||||||
|
if($m[0])
|
||||||
|
$ret .= $m[0];
|
||||||
|
|
||||||
|
return $ret;
|
||||||
|
}
|
||||||
|
|
||||||
|
?>
|
||||||
@ -0,0 +1,15 @@
|
|||||||
|
{
|
||||||
|
"finding_ref": "6831",
|
||||||
|
"log_excerpt": "[quarantine] dev.cadline.hu:php7_update/partners.archlinexp.com/application/helpers/sajatfeltolto.php -> quarantined (dest=/var/lib/web-hids/quarantine/var/www/hosting/cadline.hu/dev/php7_update/partners.archlinexp.com/application/helpers/sajatfeltolto.php)",
|
||||||
|
"original_sha256": "75359fbae41809f21d9fb056c84ae525b579ad78f2e688033c3ac583b9dba833",
|
||||||
|
"original_stat": {
|
||||||
|
"gid": 30037,
|
||||||
|
"mtime": 1403182246,
|
||||||
|
"size": 2184,
|
||||||
|
"uid": 12425
|
||||||
|
},
|
||||||
|
"rel_path": "php7_update/partners.archlinexp.com/application/helpers/sajatfeltolto.php",
|
||||||
|
"result": "quarantined",
|
||||||
|
"timestamp": "20260718T160424Z",
|
||||||
|
"vhost": "dev.cadline.hu"
|
||||||
|
}
|
||||||
@ -0,0 +1,69 @@
|
|||||||
|
<?php
|
||||||
|
|
||||||
|
$tempFolder = "/"; //ide másolja az FTP applet a fájlt
|
||||||
|
$storeFolder = "/home/cadline/public_html/website/public/objects/"; //mi itt szeretnénk tárolni
|
||||||
|
|
||||||
|
// ha java-val:
|
||||||
|
if( isset($_POST["tempFilenameField"]) ){
|
||||||
|
$tempFilename = $_POST["tempFilenameField"]; //ezen a néven kerül feltöltésre a fájl (pl. 123456.file)
|
||||||
|
$originalFilename = $_POST["originalFilenameField"]; //ez volt az eredeti neve (pl. szoveg.doc)
|
||||||
|
$storeFilename = time()."_".$originalFilename; //ezen a neven taroljuk mi (pl. 2347686323_szoveg.doc)
|
||||||
|
}
|
||||||
|
// ha egyszerűsítve:
|
||||||
|
else if ($_FILES["originalFilenameField"]["error"]==0){
|
||||||
|
|
||||||
|
$feltolt_konyvtar = $storeFolder;
|
||||||
|
|
||||||
|
$storeFilename=time()."_". $_FILES["originalFilenameField"]["name"];
|
||||||
|
|
||||||
|
$error = "";
|
||||||
|
/* Kiterjesztés ellenőrzése
|
||||||
|
|
||||||
|
$mi = $_FILES['originalFilenameField']['name']."$";
|
||||||
|
|
||||||
|
$mire = "\.bmp|\.jpg|\.jpeg|\.png|\.gif|\.tif|\.BMP|\.JPG|\.PNG|\.GIF";
|
||||||
|
if( !(ereg( $mire , $mi )) ){
|
||||||
|
$error .= "Hibás fájl kiterjesztés, elfogadott kiterjesztések: .bmp, .jpg, .png, .gif<br />";
|
||||||
|
}*/
|
||||||
|
|
||||||
|
}elseif( $this->input->post('hsz') != "" && !$error){
|
||||||
|
if (copy($_FILES["originalFilenameField"]["tmp_name"],$storeFilename)){
|
||||||
|
$prFile = $storeFilename;
|
||||||
|
$mit = $storeFolder."/".$kep;
|
||||||
|
chmod($mit,0777);
|
||||||
|
$prSize = $_FILES['originalFilenameField']['size'];
|
||||||
|
$tempFilename = $_FILES["originalFilenameField"]["tmp_name"];
|
||||||
|
}else{
|
||||||
|
$prFile = "NULL";
|
||||||
|
}
|
||||||
|
}
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
$tempPath= $tempFolder.$tempFilename;
|
||||||
|
$storePath = $storeFolder.$storeFilename;
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
//DEBUG:
|
||||||
|
print "<pre>";
|
||||||
|
print_r ($_POST);
|
||||||
|
print "tempFilename: <b>$tempFilename</b>\n";
|
||||||
|
print "originalFilename: <b>$originalFilename</b>\n";
|
||||||
|
print "storedFilename: <b>$storedFilename</b>\n";
|
||||||
|
print "tempFolder: <b>$tempFolder</b>\n";
|
||||||
|
print "storeFolder: <b>$storeFolder</b>\n";
|
||||||
|
print "tempPath: <b>$tempPath</b>\n";
|
||||||
|
print "storePath: <b>$storePath</b>\n";
|
||||||
|
|
||||||
|
print "</pre>";
|
||||||
|
|
||||||
|
if ((strlen($tempFilename) < 3) || (strlen($originalFilename) < 3))
|
||||||
|
die ("Hibás fáljnevek!");
|
||||||
|
|
||||||
|
if (!rename($tempPath,$storePath))
|
||||||
|
die ("Nem sikerül a helyére másolni a feltöltött fájlt!");
|
||||||
|
|
||||||
|
print "<h1>Sikeres feltöltés ($originalFilename)</h1>";
|
||||||
|
|
||||||
|
?>
|
||||||
@ -0,0 +1,15 @@
|
|||||||
|
{
|
||||||
|
"finding_ref": "6801",
|
||||||
|
"log_excerpt": "[quarantine] dev.cadline.hu:php7_update/partners.archlinexp.com/application/views/objects/submit.php -> quarantined (dest=/var/lib/web-hids/quarantine/var/www/hosting/cadline.hu/dev/php7_update/partners.archlinexp.com/application/views/objects/submit.php)",
|
||||||
|
"original_sha256": "2cc8c8932a3a8f6e5137226df6e6b6e04836874f611f9b1ca366a0c3b96915ff",
|
||||||
|
"original_stat": {
|
||||||
|
"gid": 30037,
|
||||||
|
"mtime": 1595503557,
|
||||||
|
"size": 2155,
|
||||||
|
"uid": 12425
|
||||||
|
},
|
||||||
|
"rel_path": "php7_update/partners.archlinexp.com/application/views/objects/submit.php",
|
||||||
|
"result": "quarantined",
|
||||||
|
"timestamp": "20260718T160424Z",
|
||||||
|
"vhost": "dev.cadline.hu"
|
||||||
|
}
|
||||||
@ -0,0 +1,68 @@
|
|||||||
|
<?php
|
||||||
|
|
||||||
|
$tempFolder = "/"; //ide másolja az FTP applet a fájlt
|
||||||
|
$storeFolder = "/home/cadline/public_html/website/public/projects/"; //mi itt szeretnénk tárolni
|
||||||
|
|
||||||
|
// ha java-val:
|
||||||
|
if( isset($_POST["tempFilenameField"]) ){
|
||||||
|
$tempFilename = $_POST["tempFilenameField"]; //ezen a néven kerül feltöltésre a fájl (pl. 123456.file)
|
||||||
|
$originalFilename = $_POST["originalFilenameField"]; //ez volt az eredeti neve (pl. szoveg.doc)
|
||||||
|
$storeFilename = time()."_".$originalFilename; //ezen a neven taroljuk mi (pl. 2347686323_szoveg.doc)
|
||||||
|
}
|
||||||
|
// ha egyszerűsítve:
|
||||||
|
else if ($_FILES["originalFilenameField"]["error"]==0){
|
||||||
|
|
||||||
|
$feltolt_konyvtar = $storeFolder;
|
||||||
|
|
||||||
|
$storeFilename=time()."_". $_FILES["originalFilenameField"]["name"];
|
||||||
|
|
||||||
|
$error = "";
|
||||||
|
/* Kiterjesztés ellenőrzése
|
||||||
|
|
||||||
|
$mi = $_FILES['originalFilenameField']['name']."$";
|
||||||
|
|
||||||
|
$mire = "\.bmp|\.jpg|\.jpeg|\.png|\.gif|\.tif|\.BMP|\.JPG|\.PNG|\.GIF";
|
||||||
|
if( !(ereg( $mire , $mi )) ){
|
||||||
|
$error .= "Hibás fájl kiterjesztés, elfogadott kiterjesztések: .bmp, .jpg, .png, .gif<br />";
|
||||||
|
}*/
|
||||||
|
|
||||||
|
}elseif( $this->input->post('hsz') != "" && !$error){
|
||||||
|
if (copy($_FILES["originalFilenameField"]["tmp_name"],$storeFilename)){
|
||||||
|
$prFile = $storeFilename;
|
||||||
|
$mit = $storeFolder."/".$kep;
|
||||||
|
chmod($mit,0777);
|
||||||
|
$prSize = $_FILES['originalFilenameField']['size'];
|
||||||
|
$tempFilename = $_FILES["originalFilenameField"]["tmp_name"];
|
||||||
|
}else{
|
||||||
|
$prFile = "NULL";
|
||||||
|
}
|
||||||
|
}
|
||||||
|
|
||||||
|
|
||||||
|
$tempPath= $tempFolder.$tempFilename;
|
||||||
|
$storePath = $storeFolder.$storeFilename;
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
//DEBUG:
|
||||||
|
print "<pre>";
|
||||||
|
print_r ($_POST);
|
||||||
|
print "tempFilename: <b>$tempFilename</b>\n";
|
||||||
|
print "originalFilename: <b>$originalFilename</b>\n";
|
||||||
|
print "storedFilename: <b>$storedFilename</b>\n";
|
||||||
|
print "tempFolder: <b>$tempFolder</b>\n";
|
||||||
|
print "storeFolder: <b>$storeFolder</b>\n";
|
||||||
|
print "tempPath: <b>$tempPath</b>\n";
|
||||||
|
print "storePath: <b>$storePath</b>\n";
|
||||||
|
|
||||||
|
print "</pre>";
|
||||||
|
|
||||||
|
if ((strlen($tempFilename) < 3) || (strlen($originalFilename) < 3))
|
||||||
|
die ("Hibás fáljnevek!");
|
||||||
|
|
||||||
|
if (!rename($tempPath,$storePath))
|
||||||
|
die ("Nem sikerül a helyére másolni a feltöltött fájlt!");
|
||||||
|
|
||||||
|
print "<h1>Sikeres feltöltés ($originalFilename)</h1>";
|
||||||
|
|
||||||
|
?>
|
||||||
@ -0,0 +1,15 @@
|
|||||||
|
{
|
||||||
|
"finding_ref": "6802",
|
||||||
|
"log_excerpt": "[quarantine] dev.cadline.hu:php7_update/partners.archlinexp.com/application/views/projects/submit.php -> quarantined (dest=/var/lib/web-hids/quarantine/var/www/hosting/cadline.hu/dev/php7_update/partners.archlinexp.com/application/views/projects/submit.php)",
|
||||||
|
"original_sha256": "a60aa86f2aafb6a1fbfab05e06f158279b701126547b74e6c4d96599a487c7dc",
|
||||||
|
"original_stat": {
|
||||||
|
"gid": 30037,
|
||||||
|
"mtime": 1595503586,
|
||||||
|
"size": 2155,
|
||||||
|
"uid": 12425
|
||||||
|
},
|
||||||
|
"rel_path": "php7_update/partners.archlinexp.com/application/views/projects/submit.php",
|
||||||
|
"result": "quarantined",
|
||||||
|
"timestamp": "20260718T160424Z",
|
||||||
|
"vhost": "dev.cadline.hu"
|
||||||
|
}
|
||||||
@ -0,0 +1,119 @@
|
|||||||
|
<?php
|
||||||
|
if(isset($_POST) == true) {
|
||||||
|
require_once("hivasok.php");
|
||||||
|
|
||||||
|
$config['db_host']='localhost';
|
||||||
|
$config['db_user']='cadline';
|
||||||
|
$config['db_pass']='Shea6hoo';
|
||||||
|
$config['db_name']='cl_hlusers';
|
||||||
|
|
||||||
|
$msh = new hivasok();
|
||||||
|
$msh->init($config['db_host'], $config['db_name'], $config['db_user'], $config['db_pass']);
|
||||||
|
$cntry = $_POST['orszag'];
|
||||||
|
|
||||||
|
|
||||||
|
//Utolsó order Number
|
||||||
|
$msh->query("SELECT `order` FROM `o_orders` WHERE `country` = '{$cntry}' ORDER BY `id` DESC limit 1");
|
||||||
|
$order=$msh->fetchNext();
|
||||||
|
$orderNumber = $order['order'];
|
||||||
|
// Majd a rákövetkező, ez kerül be adatbázisba
|
||||||
|
$kezdo = strpos($orderNumber, "-")+1;
|
||||||
|
$veg = strpos($orderNumber, "/")-2;
|
||||||
|
$szam = (int)substr($orderNumber, $kezdo, $veg)+1;
|
||||||
|
$prOrderNumber = "E-".$szam."/".date("Y");
|
||||||
|
|
||||||
|
$msh->query("SELECT `ctrNameEng` FROM `countries` WHERE `ctrID` = '{$cntry}'");
|
||||||
|
$ctryName = $msh->fetchNext();
|
||||||
|
$orszagNev = $ctryName['ctrNameEng'];
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
//Fájlnév
|
||||||
|
// $temp = explode(".", $_FILES["file"]["name"]); <-- Ha megváltozik a fájl neve, akkor a kiterjesztés itt lesz
|
||||||
|
// $fileName = $fajlNev.'.'.end($temp);
|
||||||
|
|
||||||
|
$fileName = $_FILES["file"]["name"];
|
||||||
|
|
||||||
|
//Célmappa
|
||||||
|
$targetDir = "../../";
|
||||||
|
$targetFilePath = $targetDir.$fileName;
|
||||||
|
|
||||||
|
// Engedélyezett fájlkiterjesztések
|
||||||
|
$fileType = pathinfo($targetFilePath,PATHINFO_EXTENSION);
|
||||||
|
$allowTypes = array('jpg', 'png', 'jpeg', 'gif', 'pdf', 'docx', 'doc', 'txt', 'bmp');
|
||||||
|
|
||||||
|
if (in_array($fileType, $allowTypes)) {
|
||||||
|
// Feltöltés a szerverre
|
||||||
|
if (move_uploaded_file($_FILES["file"]["tmp_name"], $targetFilePath)) {
|
||||||
|
// $eredmeny['sikeres'] = "Sikeres felöltés";
|
||||||
|
}
|
||||||
|
else {
|
||||||
|
$eredmeny['hiba'] = "Error in file uploading";
|
||||||
|
echo json_encode($eredmeny);
|
||||||
|
return false;
|
||||||
|
}
|
||||||
|
}
|
||||||
|
else {
|
||||||
|
$eredmeny['hiba'] = "Unknown file extension";
|
||||||
|
echo json_encode($eredmeny);
|
||||||
|
return false;
|
||||||
|
}
|
||||||
|
|
||||||
|
|
||||||
|
//recipient
|
||||||
|
$to = 'office@cadline.hu';
|
||||||
|
//sender
|
||||||
|
$from = 'partnering@archlinexp.com';
|
||||||
|
$fromName = 'ARCHLineXP Retail Store Enrollment Certification';
|
||||||
|
|
||||||
|
//email subject
|
||||||
|
$subject = 'Attachment for order: '.$orszagNev.' '.$prOrderNumber.' Non-profit';
|
||||||
|
|
||||||
|
//attachment file path
|
||||||
|
$file = $targetFilePath;
|
||||||
|
|
||||||
|
//email body content
|
||||||
|
$htmlContent = '<h1>Enrollment Certification</h1>';
|
||||||
|
|
||||||
|
//header for sender info
|
||||||
|
$headers = "From: $fromName"." <".$from.">";
|
||||||
|
|
||||||
|
//boundary
|
||||||
|
$semi_rand = md5(time());
|
||||||
|
$mime_boundary = "==Multipart_Boundary_x{$semi_rand}x";
|
||||||
|
|
||||||
|
//headers for attachment
|
||||||
|
$headers .= "\nMIME-Version: 1.0\n" . "Content-Type: multipart/mixed;\n" . " boundary=\"{$mime_boundary}\"";
|
||||||
|
|
||||||
|
//multipart boundary
|
||||||
|
$message = "--{$mime_boundary}\n" . "Content-Type: text/html; charset=\"UTF-8\"\n" .
|
||||||
|
"Content-Transfer-Encoding: 7bit\n\n" . $htmlContent . "\n\n";
|
||||||
|
|
||||||
|
//preparing attachment
|
||||||
|
if(!empty($file) > 0){
|
||||||
|
if(is_file($file)){
|
||||||
|
$message .= "--{$mime_boundary}\n";
|
||||||
|
$fp = @fopen($file,"rb");
|
||||||
|
$data = @fread($fp,filesize($file));
|
||||||
|
|
||||||
|
@fclose($fp);
|
||||||
|
$data = chunk_split(base64_encode($data));
|
||||||
|
$message .= "Content-Type: application/octet-stream; name=\"".basename($file)."\"\n" .
|
||||||
|
"Content-Description: ".basename($files[$i])."\n" .
|
||||||
|
"Content-Disposition: attachment;\n" . " filename=\"".basename($file)."\"; size=".filesize($file).";\n" .
|
||||||
|
"Content-Transfer-Encoding: base64\n\n" . $data . "\n\n";
|
||||||
|
}
|
||||||
|
}
|
||||||
|
// $message .= "--{$mime_boundary}--";
|
||||||
|
$returnpath = "-f" . $from;
|
||||||
|
|
||||||
|
//send email
|
||||||
|
$mail = @mail($to, $subject, $message, $headers, $returnpath);
|
||||||
|
|
||||||
|
//email sending status
|
||||||
|
// echo $mail?"<h1>Mail sent.</h1>":"<h1>Mail sending failed.</h1>";
|
||||||
|
|
||||||
|
unlink($targetFilePath);
|
||||||
|
|
||||||
|
}
|
||||||
|
?>
|
||||||
@ -0,0 +1,15 @@
|
|||||||
|
{
|
||||||
|
"finding_ref": "6884",
|
||||||
|
"log_excerpt": "[quarantine] dev.cadline.hu:php7_update/partners.archlinexp.com/public/order/nonpro.php -> quarantined (dest=/var/lib/web-hids/quarantine/var/www/hosting/cadline.hu/dev/php7_update/partners.archlinexp.com/public/order/nonpro.php)",
|
||||||
|
"original_sha256": "c1a490b958a2c4c3b108788f5a11b1d2271539b2a3127ed3af5c04b1032f72a7",
|
||||||
|
"original_stat": {
|
||||||
|
"gid": 30037,
|
||||||
|
"mtime": 1593607276,
|
||||||
|
"size": 4090,
|
||||||
|
"uid": 12425
|
||||||
|
},
|
||||||
|
"rel_path": "php7_update/partners.archlinexp.com/public/order/nonpro.php",
|
||||||
|
"result": "quarantined",
|
||||||
|
"timestamp": "20260718T160424Z",
|
||||||
|
"vhost": "dev.cadline.hu"
|
||||||
|
}
|
||||||
File diff suppressed because it is too large
Load Diff
@ -0,0 +1,15 @@
|
|||||||
|
{
|
||||||
|
"finding_ref": "6885",
|
||||||
|
"log_excerpt": "[quarantine] dev.cadline.hu:php7_update/partners.archlinexp.com/public/order/szerver.php -> quarantined (dest=/var/lib/web-hids/quarantine/var/www/hosting/cadline.hu/dev/php7_update/partners.archlinexp.com/public/order/szerver.php)",
|
||||||
|
"original_sha256": "b86dc1faaa6db4787cd84016f05a9789aa2fe331c0dc9f5c1110fc49faba4187",
|
||||||
|
"original_stat": {
|
||||||
|
"gid": 30037,
|
||||||
|
"mtime": 1595243060,
|
||||||
|
"size": 89792,
|
||||||
|
"uid": 12425
|
||||||
|
},
|
||||||
|
"rel_path": "php7_update/partners.archlinexp.com/public/order/szerver.php",
|
||||||
|
"result": "quarantined",
|
||||||
|
"timestamp": "20260718T160424Z",
|
||||||
|
"vhost": "dev.cadline.hu"
|
||||||
|
}
|
||||||
File diff suppressed because it is too large
Load Diff
@ -0,0 +1,15 @@
|
|||||||
|
{
|
||||||
|
"finding_ref": "6883",
|
||||||
|
"log_excerpt": "[quarantine] dev.cadline.hu:php7_update/partners.archlinexp.com/public/order/szerver2.php -> quarantined (dest=/var/lib/web-hids/quarantine/var/www/hosting/cadline.hu/dev/php7_update/partners.archlinexp.com/public/order/szerver2.php)",
|
||||||
|
"original_sha256": "fbffb453e8e48ee0a2888583a65ff6aac1315ae8843ea81088960b49bf93d099",
|
||||||
|
"original_stat": {
|
||||||
|
"gid": 30037,
|
||||||
|
"mtime": 1594129255,
|
||||||
|
"size": 88652,
|
||||||
|
"uid": 12425
|
||||||
|
},
|
||||||
|
"rel_path": "php7_update/partners.archlinexp.com/public/order/szerver2.php",
|
||||||
|
"result": "quarantined",
|
||||||
|
"timestamp": "20260718T160424Z",
|
||||||
|
"vhost": "dev.cadline.hu"
|
||||||
|
}
|
||||||
@ -0,0 +1,235 @@
|
|||||||
|
<?php
|
||||||
|
/*******************************************************************************
|
||||||
|
Az eredti descriptor file felépítése:
|
||||||
|
=====================================
|
||||||
|
$data["file"] = $adatok[0];
|
||||||
|
$data["eredeti"] = $adatok[1];
|
||||||
|
$data["vendegkep"] = $adatok[2];
|
||||||
|
$data["kepalap"] = $adatok[3];
|
||||||
|
$data["cim"] = $adatok[4];
|
||||||
|
$data["cimhun"] = $adatok[5] ? $adatok[5] : $adatok[4];
|
||||||
|
$data["prver"] = ($adatok[6]=="-1") ? "2012" : $adatok[6];
|
||||||
|
|
||||||
|
Pl. (valójában sortörés nélkül van):
|
||||||
|
------------------------------------
|
||||||
|
85151612-3251-2A4C-838D-BDAE5C2ED382.oli#
|
||||||
|
85151612-3251-2A4C-838D-BDAE5C2ED382.oli#
|
||||||
|
3000585D-7B7A-BF4D-A501-3ACDE09CCA31.bmp#
|
||||||
|
3000585D-7B7A-BF4D-A501-3ACDE09CCA31.bmp#
|
||||||
|
Logus_90_Arbore_NA_single (smartshapes(3).oli)#
|
||||||
|
#
|
||||||
|
2011
|
||||||
|
|
||||||
|
Az új descriptor file felépítése:
|
||||||
|
=====================================
|
||||||
|
$data["file"]=$adatok[0],
|
||||||
|
$data["vendegkep"]=$adatok[1],
|
||||||
|
$data["nev_eng"]=$adatok[2],
|
||||||
|
$data["nev_hun"]=$adatok[3],
|
||||||
|
$data["tipus"]=$adatok[4],
|
||||||
|
$data["kategoria"]=$adatok[5],
|
||||||
|
$data["alkategoria"]=$adatok[6],
|
||||||
|
$data["gyarto"]=$adatok[7],
|
||||||
|
$data["prver"]=($adatok[8]=="-1" ? "2012" : $adatok[8]),
|
||||||
|
|
||||||
|
Pl. (valójában sortörés nélkül van):
|
||||||
|
------------------------------------
|
||||||
|
85151612-3251-2A4C-838D-BDAE5C2ED382.oli#
|
||||||
|
3000585D-7B7A-BF4D-A501-3ACDE09CCA31.bmp#
|
||||||
|
brown chair#
|
||||||
|
barna szék#
|
||||||
|
material#
|
||||||
|
Wood#
|
||||||
|
Oak#
|
||||||
|
Marrakesh#
|
||||||
|
-1
|
||||||
|
*******************************************************************************/
|
||||||
|
|
||||||
|
defined('_JEXEC') or die; // No direct access to this file
|
||||||
|
|
||||||
|
jimport('joomla.application.component.view'); // import Joomla view library
|
||||||
|
jimport('joomla.application.module.helper');
|
||||||
|
jimport('joomla.session.session');
|
||||||
|
|
||||||
|
class ShowroomViewUpload extends JViewLegacy
|
||||||
|
{
|
||||||
|
protected $arrAllowedGroups=array(7,8);
|
||||||
|
protected $acceptLang=array('eng'=>'en-GB','hun'=>'hu-HU');
|
||||||
|
protected $defLang='eng';
|
||||||
|
protected $desc=array();
|
||||||
|
protected $data=array();
|
||||||
|
protected $selected_type;
|
||||||
|
protected $selected_manufacture;
|
||||||
|
protected $selected_family;
|
||||||
|
protected $selected_category;
|
||||||
|
protected $selected_subcategory;
|
||||||
|
|
||||||
|
public $pf='ProductsController';
|
||||||
|
|
||||||
|
public function display($tpl = null)
|
||||||
|
{
|
||||||
|
$app=&JFactory::getApplication();
|
||||||
|
$session=&JFactory::getSession();
|
||||||
|
$document=&JFactory::getDocument();
|
||||||
|
$model=$this->getModel();
|
||||||
|
|
||||||
|
if (isset($_GET['lang']))
|
||||||
|
{
|
||||||
|
if (array_key_exists(trim($_GET['lang']), $this->acceptLang)) { $session->set('sr_lang',trim($_GET['lang'])); }
|
||||||
|
else { $session->set('sr_lang',$this->defLang); }
|
||||||
|
}
|
||||||
|
|
||||||
|
if (isset($_GET['file'])) $session->set('sr_file',(trim(addslashes($_GET['file']))=='none' ? '' : trim(addslashes($_GET['file']))));
|
||||||
|
if (isset($_GET['type'])) $session->set('sr_type',(trim(addslashes($_GET['type']))=='none' ? '' : trim(addslashes($_GET['type']))));
|
||||||
|
if (isset($_GET['template']) && trim($_GET['template'])=='blankframe') $session->set('sr_template','blankframe');
|
||||||
|
if (!isset($_SESSION['__default']['sr_lang'])) $session->set('sr_lang',$this->defLang);
|
||||||
|
|
||||||
|
JFactory::getLanguage()->load('com_showroom', JPATH_SITE, $this->acceptLang[$session->get('sr_lang')], true);
|
||||||
|
|
||||||
|
$this->sess=$_SESSION['__default'];
|
||||||
|
$this->types=$this->get('Types');
|
||||||
|
$this->manufactures=$model->getManufactures($this->sess['sr_type']);
|
||||||
|
$this->families=$model->getFamilies($this->sess['sr_type'],$this->sess['sr_manufacture']);
|
||||||
|
$this->family=$model->getFamily(((int)$this->sess["sr_family"]>0 ? $this->sess['sr_family'] : 0));
|
||||||
|
$this->querystring='&lang='.$session->get('sr_lang')
|
||||||
|
.($session->get('sr_template')>'' ? '&template='.$session->get('sr_template') : '')
|
||||||
|
.($session->get('sr_file')>'' ? '&file='.$session->get('sr_file') : '')
|
||||||
|
.($session->get('sr_type')>'' ? '&type='.$session->get('sr_type') : '');
|
||||||
|
|
||||||
|
if ($session->get('sr_file')>"") {
|
||||||
|
$descriptor='/home/vendeg/'.$session->get('sr_file');
|
||||||
|
if (is_file($descriptor))
|
||||||
|
{
|
||||||
|
$this->desc=explode("#",file_get_contents($descriptor));
|
||||||
|
|
||||||
|
if (is_array($this->desc) && count($this->desc)) { foreach ($this->desc as $k=>$v) $this->desc[$k]=trim($v); }
|
||||||
|
|
||||||
|
if ($this->desc[0]==$this->desc[1]) // regi struktura
|
||||||
|
{
|
||||||
|
$this->data=array(
|
||||||
|
"file"=>$this->desc[0],
|
||||||
|
"vendegkep"=>$this->desc[2],
|
||||||
|
"nev_eng"=>$this->desc[4],
|
||||||
|
"nev_hun"=>($this->desc[5] ? $this->desc[5] : $this->desc[4]),
|
||||||
|
"tipus"=>$this->sess['sr_type'],
|
||||||
|
"kategoria"=>"",
|
||||||
|
"alkategoria"=>"",
|
||||||
|
"gyarto"=>"",
|
||||||
|
"prver"=>($this->desc[6]=="-1" ? "2012" : $this->desc[6]),
|
||||||
|
"ifc"=>false
|
||||||
|
);
|
||||||
|
}
|
||||||
|
else // uj struktura
|
||||||
|
{
|
||||||
|
$this->data=array(
|
||||||
|
"file"=>$this->desc[0],
|
||||||
|
"vendegkep"=>$this->desc[1],
|
||||||
|
"nev_eng"=>$this->desc[2],
|
||||||
|
"nev_hun"=>$this->desc[3],
|
||||||
|
"tipus"=>$this->desc[4],
|
||||||
|
"kategoria"=>$this->desc[5],
|
||||||
|
"alkategoria"=>$this->desc[6],
|
||||||
|
"gyarto"=>$this->desc[7],
|
||||||
|
"prver"=>($this->desc[8]=="-1" ? "2012" : $this->desc[8]),
|
||||||
|
"ifc"=>(substr($this->desc[0],-4)==".ifc"?TRUE:FALSE)
|
||||||
|
);
|
||||||
|
}
|
||||||
|
|
||||||
|
if ($this->data['gyarto']>"") { $manufacure=$model->getManufactureByName($this->data['gyarto']); }
|
||||||
|
if ($this->data['kategoria']>"") { $kategoria=$model->getParentByName($this->data['tipus'],$this->data['kategoria']); }
|
||||||
|
if ($this->data['alkategoria']>"" && $kategoria->id>0) { $alkategoria=$model->getSubcatByName($this->data['tipus'],$kategoria->id,$this->data['alkategoria']); }
|
||||||
|
|
||||||
|
$this->selected_type=$this->data['tipus'];
|
||||||
|
$this->selected_manufacture=((int)$manufacure->id>0 ? (int)$manufacure->id : 0);
|
||||||
|
$this->selected_family=$this->sess['sr_family'];
|
||||||
|
$this->selected_category=((int)$kategoria->id>0 ? (int)$kategoria->id : 0);
|
||||||
|
$this->selected_subcategory=((int)$alkategoria->id>0 ? (int)$alkategoria->id : 0);
|
||||||
|
|
||||||
|
// kis kép elhelyezése a végleges helyére
|
||||||
|
$honnan='/home/vendeg/'.$this->data['vendegkep'];
|
||||||
|
$hova=$_SERVER['DOCUMENT_ROOT'].'/public/img/collection/'.$this->data['tipus'];
|
||||||
|
if (!is_dir($hova)) mkdir($hova, 0777);
|
||||||
|
$hova.='/'.$this->data['vendegkep'];
|
||||||
|
if (is_file($honnan) && !is_file($hova)) { copy($honnan,$hova); }
|
||||||
|
|
||||||
|
if (isset($_POST['save']))
|
||||||
|
{
|
||||||
|
$tomb=array(
|
||||||
|
'm_id'=>(int)$_POST['m_id'],
|
||||||
|
'c_id'=>(int)$_POST['c_id'],
|
||||||
|
'struct_id'=>(int)$_POST['subcat'],
|
||||||
|
'title_hun'=>trim(addslashes($_POST['title_hun'])),
|
||||||
|
'title_eng'=>trim(addslashes($_POST['title_eng'])),
|
||||||
|
'desc_hun'=>trim(addslashes($_POST['desc_hun'])),
|
||||||
|
'desc_eng'=>trim(addslashes($_POST['desc_eng'])),
|
||||||
|
'tipus'=>$_POST['tipus'],
|
||||||
|
'fajl'=>$this->data['file'],
|
||||||
|
'version'=>$this->data['prver'],
|
||||||
|
'deleted'=>(isset($_POST['deleted']) ? 0 : 1),
|
||||||
|
);
|
||||||
|
|
||||||
|
// $newID=($this->data['ifc']==FALSE ? $model->saveRecord($tomb) : (int)$_POST['joinID']);
|
||||||
|
$newID=$model->saveRecord($tomb);
|
||||||
|
|
||||||
|
if ((int)$newID>0)
|
||||||
|
{
|
||||||
|
$man=$model->getManufacture($tomb['m_id']);
|
||||||
|
|
||||||
|
// objektum file(ok) elhelyezése a végleges helyére
|
||||||
|
$honnan='/home/vendeg/'.$this->data['file'];
|
||||||
|
$hova=$_SERVER['DOCUMENT_ROOT'].'/public/collection/'.$man->dir;
|
||||||
|
if (!is_dir($hova)) mkdir($hova, 0777);
|
||||||
|
$hova.='/'.$newID;
|
||||||
|
if (!is_dir($hova)) mkdir($hova, 0777);
|
||||||
|
$hova.='/'.$this->data['file'];
|
||||||
|
if (is_file($honnan)) copy($honnan,$hova);
|
||||||
|
|
||||||
|
if ($this->data['ifc']==TRUE)
|
||||||
|
{
|
||||||
|
$honnan='/home/vendeg/'.str_replace(".ifc",".oli",$this->data['file']);
|
||||||
|
$hova=$_SERVER['DOCUMENT_ROOT'].'/public/collection/'.$man->dir.'/'.$newID.'/'.str_replace(".ifc",".oli",$this->data['file']);
|
||||||
|
if (is_file($honnan)) copy($honnan,$hova);
|
||||||
|
}
|
||||||
|
|
||||||
|
// feltöltött kép elhelyezése a végleges helyére
|
||||||
|
if (is_array($_FILES['fileupload']) && !empty($_FILES['fileupload']) && /*$this->data['ifc']==FALSE &&*/ in_array($_FILES['fileupload']['type'],array('image/jpeg','image/jpg')))
|
||||||
|
{
|
||||||
|
$origSize=getimagesize($_FILES['fileupload']['tmp_name']);
|
||||||
|
$hova=$_SERVER['DOCUMENT_ROOT']."/public/img/collection/".$man->dir;
|
||||||
|
if (!is_dir($hova)) mkdir($hova,0777);
|
||||||
|
$hova.="/".$newID;
|
||||||
|
if (!is_dir($hova)) mkdir($hova,0777);
|
||||||
|
if (!is_dir($hova."/orig")) mkdir($hova."/orig",0777);
|
||||||
|
|
||||||
|
$this->make_thumb($_FILES['fileupload']['tmp_name'], $hova.'/zz_big.jpg', (int)round(($origSize[0]/$origSize[1])*400),400);
|
||||||
|
$this->make_thumb($_FILES['fileupload']['tmp_name'], $hova.'/zz_thumb.jpg', (int)round(($origSize[0]/$origSize[1])*120),120);
|
||||||
|
$this->make_thumb($_FILES['fileupload']['tmp_name'], $hova.'/zz_small.jpg', (int)round(($origSize[0]/$origSize[1])*66),66);
|
||||||
|
|
||||||
|
move_uploaded_file($_FILES['fileupload']['tmp_name'], $hova.'/orig/'.$_FILES['fileupload']['name']);
|
||||||
|
}
|
||||||
|
}
|
||||||
|
}
|
||||||
|
}
|
||||||
|
else { print ("descriptor file nem elérhető"); }
|
||||||
|
}
|
||||||
|
|
||||||
|
$this->parents=$model->getParents();
|
||||||
|
$this->subcat=$model->getSubcat($this->selected_category);
|
||||||
|
$app->getPathway()->addItem(JText::_(COM_SHOWROOM_SHOWROOM), '/index.php?option=com_showroom&view=showroom');
|
||||||
|
$app->getPathway()->addItem(JText::_(COM_SHOWROOM_UPLOAD));
|
||||||
|
|
||||||
|
parent::display($tpl);
|
||||||
|
}
|
||||||
|
|
||||||
|
protected function make_thumb($src, $dest, $desired_width,$desired_h)
|
||||||
|
{
|
||||||
|
$source_image=imagecreatefromjpeg($src);
|
||||||
|
$width=imagesx($source_image);
|
||||||
|
$height=imagesy($source_image);
|
||||||
|
$desired_height=$desired_h;
|
||||||
|
$virtual_image=imagecreatetruecolor($desired_width, $desired_height);
|
||||||
|
imagecopyresampled($virtual_image, $source_image, 0, 0, 0, 0, $desired_width, $desired_height, $width, $height);
|
||||||
|
imagejpeg($virtual_image, $dest);
|
||||||
|
}
|
||||||
|
} // end of class
|
||||||
|
?>
|
||||||
@ -0,0 +1,15 @@
|
|||||||
|
{
|
||||||
|
"finding_ref": "6888",
|
||||||
|
"log_excerpt": "[quarantine] dev.cadline.hu:php7_update/sub.archline.hu/components/com_showroom/views/upload/view.html.php -> quarantined (dest=/var/lib/web-hids/quarantine/var/www/hosting/cadline.hu/dev/php7_update/sub.archline.hu/components/com_showroom/views/upload/view.html.php)",
|
||||||
|
"original_sha256": "be23b29230dc83d9194c6b3047dec8b7693d8ff582880de84399d41e57a968e7",
|
||||||
|
"original_stat": {
|
||||||
|
"gid": 30037,
|
||||||
|
"mtime": 1491215591,
|
||||||
|
"size": 10495,
|
||||||
|
"uid": 12425
|
||||||
|
},
|
||||||
|
"rel_path": "php7_update/sub.archline.hu/components/com_showroom/views/upload/view.html.php",
|
||||||
|
"result": "quarantined",
|
||||||
|
"timestamp": "20260718T160424Z",
|
||||||
|
"vhost": "dev.cadline.hu"
|
||||||
|
}
|
||||||
@ -0,0 +1,105 @@
|
|||||||
|
<?php
|
||||||
|
//============================================================+
|
||||||
|
// File name : tce_functions_upload.php
|
||||||
|
// Begin : 2001-11-19
|
||||||
|
// Last Update : 2010-09-21
|
||||||
|
//
|
||||||
|
// Description : Upload functions.
|
||||||
|
//
|
||||||
|
// Author: Nicola Asuni
|
||||||
|
//
|
||||||
|
// (c) Copyright:
|
||||||
|
// Nicola Asuni
|
||||||
|
// Tecnick.com LTD
|
||||||
|
// www.tecnick.com
|
||||||
|
// info@tecnick.com
|
||||||
|
//
|
||||||
|
// License:
|
||||||
|
// Copyright (C) 2004-2010 Nicola Asuni - Tecnick.com LTD
|
||||||
|
// See LICENSE.TXT file for more information.
|
||||||
|
//============================================================+
|
||||||
|
|
||||||
|
/**
|
||||||
|
* @file
|
||||||
|
* Functions to upload files.
|
||||||
|
* @package com.tecnick.tcexam.admin
|
||||||
|
* @author Nicola Asuni
|
||||||
|
* @since 2001-11-19
|
||||||
|
*/
|
||||||
|
|
||||||
|
/**
|
||||||
|
* Check if the uploaded file extension is allowed.
|
||||||
|
* @author Nicola Asuni
|
||||||
|
* @since 2001-11-19
|
||||||
|
* @param $filename (string) the filename
|
||||||
|
* @return true in case of allowed file type, false otherwise
|
||||||
|
*/
|
||||||
|
function F_is_allowed_upload($filename)
|
||||||
|
{
|
||||||
|
if (!defined('K_ALLOWED_UPLOAD_EXTENSIONS')) {
|
||||||
|
return false;
|
||||||
|
}
|
||||||
|
$allowed_extensions = unserialize(K_ALLOWED_UPLOAD_EXTENSIONS);
|
||||||
|
$path_parts = pathinfo($filename);
|
||||||
|
if (in_array(strtolower($path_parts['extension']), $allowed_extensions)) {
|
||||||
|
return true;
|
||||||
|
}
|
||||||
|
return false;
|
||||||
|
}
|
||||||
|
|
||||||
|
/**
|
||||||
|
* Uploads image file to the server.
|
||||||
|
* @author Nicola Asuni
|
||||||
|
* @since 2010-06-12
|
||||||
|
* @param $fieldname (string) form field name containing the source file path
|
||||||
|
* @param $uploaddir (string) upload directory
|
||||||
|
* @return mixed file name or false in case of error
|
||||||
|
*/
|
||||||
|
function F_upload_file($fieldname, $uploaddir)
|
||||||
|
{
|
||||||
|
global $l;
|
||||||
|
require_once('../config/tce_config.php');
|
||||||
|
// sanitize file name
|
||||||
|
$filename = preg_replace('/[\s]/', '_', $_FILES[$fieldname]['name']);
|
||||||
|
$filename = preg_replace('/[^a-zA-Z0-9_\.\-]/', '', $filename);
|
||||||
|
$filepath = $uploaddir.$filename;
|
||||||
|
if (F_is_allowed_upload($filename) and move_uploaded_file($_FILES[$fieldname]['tmp_name'], $filepath)) {
|
||||||
|
F_print_error('MESSAGE', htmlspecialchars($filename).': '.$l['m_upload_yes']);
|
||||||
|
return $filename;
|
||||||
|
}
|
||||||
|
F_print_error('ERROR', htmlspecialchars($filename).': '.$l['m_upload_not'].'');
|
||||||
|
return false;
|
||||||
|
}
|
||||||
|
|
||||||
|
/**
|
||||||
|
* returns the file size in bytes
|
||||||
|
* @author Nicola Asuni
|
||||||
|
* @since 2001-11-19
|
||||||
|
* @param $filetocheck (string) file to check (local path or URL)
|
||||||
|
* @return mixed file size in bytes or false in case of error
|
||||||
|
*/
|
||||||
|
function F_read_file_size($filetocheck)
|
||||||
|
{
|
||||||
|
global $l;
|
||||||
|
require_once('../config/tce_config.php');
|
||||||
|
$filesize = 0;
|
||||||
|
if ($fp = fopen($filetocheck, 'rb')) {
|
||||||
|
$s_array = fstat($fp);
|
||||||
|
if ($s_array['size']) {
|
||||||
|
$filesize = $s_array['size'];
|
||||||
|
} else {//read size from remote file (very slow function)
|
||||||
|
while (!feof($fp)) {
|
||||||
|
$content = fread($fp, 1);
|
||||||
|
$filesize++;
|
||||||
|
}
|
||||||
|
}
|
||||||
|
fclose($fp);
|
||||||
|
return($filesize);
|
||||||
|
}
|
||||||
|
F_print_error('ERROR', basename($filetocheck).': '.$l['m_openfile_not']);
|
||||||
|
return false;
|
||||||
|
}
|
||||||
|
|
||||||
|
//============================================================+
|
||||||
|
// END OF FILE
|
||||||
|
//============================================================+
|
||||||
@ -0,0 +1,15 @@
|
|||||||
|
{
|
||||||
|
"finding_ref": "6922",
|
||||||
|
"log_excerpt": "[quarantine] dev.cadline.hu:tcexam/admin/code/tce_functions_upload.php -> quarantined (dest=/var/lib/web-hids/quarantine/var/www/hosting/cadline.hu/dev/tcexam/admin/code/tce_functions_upload.php)",
|
||||||
|
"original_sha256": "526624f3cb1ffec1b482de63aac1ef343a36c7670eac72d45397d47813cfe5fc",
|
||||||
|
"original_stat": {
|
||||||
|
"gid": 30037,
|
||||||
|
"mtime": 1594883036,
|
||||||
|
"size": 3160,
|
||||||
|
"uid": 12425
|
||||||
|
},
|
||||||
|
"rel_path": "tcexam/admin/code/tce_functions_upload.php",
|
||||||
|
"result": "quarantined",
|
||||||
|
"timestamp": "20260718T160424Z",
|
||||||
|
"vhost": "dev.cadline.hu"
|
||||||
|
}
|
||||||
4757
var/www/hosting/cadline.hu/www/application/controllers/admin.php
Executable file
4757
var/www/hosting/cadline.hu/www/application/controllers/admin.php
Executable file
File diff suppressed because it is too large
Load Diff
@ -0,0 +1,15 @@
|
|||||||
|
{
|
||||||
|
"finding_ref": "5450",
|
||||||
|
"log_excerpt": "[quarantine] www.cadline.hu:application/controllers/admin.php -> quarantined (dest=/var/lib/web-hids/quarantine/var/www/hosting/cadline.hu/www/application/controllers/admin.php)",
|
||||||
|
"original_sha256": "dc2640ce42b3227552feacd9dc8b9d0ae32c0f0343d66c75c9ddad0ba3b6af38",
|
||||||
|
"original_stat": {
|
||||||
|
"gid": 30037,
|
||||||
|
"mtime": 1402653565,
|
||||||
|
"size": 150915,
|
||||||
|
"uid": 11669
|
||||||
|
},
|
||||||
|
"rel_path": "application/controllers/admin.php",
|
||||||
|
"result": "quarantined",
|
||||||
|
"timestamp": "20260718T160424Z",
|
||||||
|
"vhost": "www.cadline.hu"
|
||||||
|
}
|
||||||
1375
var/www/hosting/cadline.hu/www/application/controllers/collection.php
Executable file
1375
var/www/hosting/cadline.hu/www/application/controllers/collection.php
Executable file
File diff suppressed because it is too large
Load Diff
@ -0,0 +1,15 @@
|
|||||||
|
{
|
||||||
|
"finding_ref": "5443",
|
||||||
|
"log_excerpt": "[quarantine] www.cadline.hu:application/controllers/collection.php -> quarantined (dest=/var/lib/web-hids/quarantine/var/www/hosting/cadline.hu/www/application/controllers/collection.php)",
|
||||||
|
"original_sha256": "a592d4c5753ffc7aa532296c9a64057714541e62efed7eca8e368d52343d1606",
|
||||||
|
"original_stat": {
|
||||||
|
"gid": 30037,
|
||||||
|
"mtime": 1396359077,
|
||||||
|
"size": 42192,
|
||||||
|
"uid": 11669
|
||||||
|
},
|
||||||
|
"rel_path": "application/controllers/collection.php",
|
||||||
|
"result": "quarantined",
|
||||||
|
"timestamp": "20260718T160424Z",
|
||||||
|
"vhost": "www.cadline.hu"
|
||||||
|
}
|
||||||
2702
var/www/hosting/cadline.hu/www/application/controllers/forum.php
Executable file
2702
var/www/hosting/cadline.hu/www/application/controllers/forum.php
Executable file
File diff suppressed because it is too large
Load Diff
@ -0,0 +1,15 @@
|
|||||||
|
{
|
||||||
|
"finding_ref": "5447",
|
||||||
|
"log_excerpt": "[quarantine] www.cadline.hu:application/controllers/forum.php -> quarantined (dest=/var/lib/web-hids/quarantine/var/www/hosting/cadline.hu/www/application/controllers/forum.php)",
|
||||||
|
"original_sha256": "9ff320957968cee7484108a7546a4ac2b6bf092fff325c7327b312ab382d632b",
|
||||||
|
"original_stat": {
|
||||||
|
"gid": 30037,
|
||||||
|
"mtime": 1406189075,
|
||||||
|
"size": 83340,
|
||||||
|
"uid": 11669
|
||||||
|
},
|
||||||
|
"rel_path": "application/controllers/forum.php",
|
||||||
|
"result": "quarantined",
|
||||||
|
"timestamp": "20260718T160424Z",
|
||||||
|
"vhost": "www.cadline.hu"
|
||||||
|
}
|
||||||
2602
var/www/hosting/cadline.hu/www/application/controllers/forum.php~
Executable file
2602
var/www/hosting/cadline.hu/www/application/controllers/forum.php~
Executable file
File diff suppressed because it is too large
Load Diff
@ -0,0 +1,15 @@
|
|||||||
|
{
|
||||||
|
"finding_ref": "5444",
|
||||||
|
"log_excerpt": "[quarantine] www.cadline.hu:application/controllers/forum.php~ -> quarantined (dest=/var/lib/web-hids/quarantine/var/www/hosting/cadline.hu/www/application/controllers/forum.php~)",
|
||||||
|
"original_sha256": "bc5530aba3a1c3ad0e26f50d32bdd4e9e4e9cd9ed3b5985e87dba6f7d7fc936c",
|
||||||
|
"original_stat": {
|
||||||
|
"gid": 30037,
|
||||||
|
"mtime": 1404821325,
|
||||||
|
"size": 80439,
|
||||||
|
"uid": 11669
|
||||||
|
},
|
||||||
|
"rel_path": "application/controllers/forum.php~",
|
||||||
|
"result": "quarantined",
|
||||||
|
"timestamp": "20260718T160424Z",
|
||||||
|
"vhost": "www.cadline.hu"
|
||||||
|
}
|
||||||
340
var/www/hosting/cadline.hu/www/application/controllers/groups.php
Executable file
340
var/www/hosting/cadline.hu/www/application/controllers/groups.php
Executable file
@ -0,0 +1,340 @@
|
|||||||
|
<?php
|
||||||
|
class Groups extends Controller
|
||||||
|
{
|
||||||
|
function Groups()
|
||||||
|
{
|
||||||
|
parent::Controller();
|
||||||
|
$this->lang->load('site', $this->muser->user['lang']);
|
||||||
|
$this->load->model('mgroups');
|
||||||
|
}
|
||||||
|
|
||||||
|
|
||||||
|
function index()
|
||||||
|
{
|
||||||
|
$this->kategoria();
|
||||||
|
}
|
||||||
|
|
||||||
|
function upload(){
|
||||||
|
if(hun())
|
||||||
|
$data['title'] = 'ARCHLine.XP Új Csoport';
|
||||||
|
else
|
||||||
|
$data['title'] = 'ARCHLine.XP New Group';
|
||||||
|
|
||||||
|
if($this->uri->segment(3)=="java"){
|
||||||
|
$data['tartalom']='groups/java';
|
||||||
|
}
|
||||||
|
else if($this->uri->segment(3)=="simple"){
|
||||||
|
$data['tartalom']='groups/simple';
|
||||||
|
}
|
||||||
|
else{
|
||||||
|
$data['tartalom']='groups/upload';
|
||||||
|
}
|
||||||
|
$data['csik']=array('home','groups');
|
||||||
|
$data['javascript'] = array('onUploadFinished','dl_select');
|
||||||
|
$data['kategoriak'] = $this->muser->get_kategoriak('group');
|
||||||
|
|
||||||
|
$this->load->view('site',$data);
|
||||||
|
}
|
||||||
|
|
||||||
|
function uploadnew(){
|
||||||
|
redirect('/collection/upload/'.$this->uri->segment(3).'/group');
|
||||||
|
|
||||||
|
if(hun())
|
||||||
|
$data['title'] = 'ARCHLine.XP Új Csoport';
|
||||||
|
else
|
||||||
|
$data['title'] = 'ARCHLine.XP New Group';
|
||||||
|
|
||||||
|
if($this->uri->segment(3)!=""/* && $this->uri->segment(4)!=""*/){
|
||||||
|
$data["fajl"] = $this->uri->segment(3);
|
||||||
|
|
||||||
|
$data["eredeti"] = $this->uri->segment(4);
|
||||||
|
|
||||||
|
|
||||||
|
$fajlnev = '/home/vendeg/'.$this->uri->segment(3);
|
||||||
|
$fa = fopen( $fajlnev, "r" ) or die("Upload error"); //or die("$fajlnev nem nyithato meg");
|
||||||
|
$ol = fgets( $fa, 1024);
|
||||||
|
$adatok = explode("#",$ol);
|
||||||
|
// if( count($adatok) == 5){
|
||||||
|
$lang = $this->muser->user['lang'];
|
||||||
|
$honnan = "/home/vendeg/".$adatok[2];
|
||||||
|
$kepnev = time()."_".$adatok[3];
|
||||||
|
$ide= "public/img/groups/".$lang."/".$kepnev;
|
||||||
|
//$ide= "public/img/groups/temp/".$kepnev;
|
||||||
|
if( copy($honnan,$ide) ){
|
||||||
|
$adatok[3] = $ide;
|
||||||
|
}else{
|
||||||
|
$adatok[3] = "";
|
||||||
|
}
|
||||||
|
|
||||||
|
|
||||||
|
$data["fajl"] = $adatok[0];
|
||||||
|
$data["eredeti"] = $adatok[1];
|
||||||
|
$data["vendegkep"] = $adatok[2];
|
||||||
|
$data["kepalap"] = $adatok[3];
|
||||||
|
$data["cim"] = $adatok[4];
|
||||||
|
|
||||||
|
|
||||||
|
// $kepresz = substr($data["kepalap"],0,18);
|
||||||
|
// print "rész: ".$kepresz.$lang."/".$data["kepalap"];
|
||||||
|
|
||||||
|
// }
|
||||||
|
fclose($fa);
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
$data['tartalom']='groups/uploadnew';
|
||||||
|
}else{
|
||||||
|
redirect('groups/upload');
|
||||||
|
}
|
||||||
|
|
||||||
|
$data['csik']=array('home','groups');
|
||||||
|
$data['javascript'] = array('objfeltoltes');
|
||||||
|
|
||||||
|
$data['kategoriak'] = $this->muser->get_kategoriak('group');
|
||||||
|
|
||||||
|
$this->load->view('site',$data);
|
||||||
|
}
|
||||||
|
|
||||||
|
function simple(){
|
||||||
|
if(hun())
|
||||||
|
$data['title'] = 'ARCHLine.XP Új Csoport';
|
||||||
|
else
|
||||||
|
$data['title'] = 'ARCHLine.XP New Group';
|
||||||
|
$data['tartalom']='groups/simple';
|
||||||
|
$data['csik']=array('home','groups');
|
||||||
|
|
||||||
|
$this->load->view('site',$data);
|
||||||
|
}
|
||||||
|
|
||||||
|
function kat(){
|
||||||
|
|
||||||
|
if(hun())
|
||||||
|
$data['title'] = 'ARCHLine.XP Csoportok';
|
||||||
|
else
|
||||||
|
$data['title'] = 'ARCHLine.XP Groups';
|
||||||
|
|
||||||
|
$data['tartalom']='groups/kat';
|
||||||
|
$data['csik']=array('home','groups');
|
||||||
|
$data['javascript']=array('dl_select');
|
||||||
|
|
||||||
|
if(!$this->uri->segment(3))
|
||||||
|
$kat = 2;
|
||||||
|
else
|
||||||
|
$kat = $this->uri->segment(3);
|
||||||
|
$csoportok = $this->mgroups->get_bykat($kat);
|
||||||
|
$data['groups']=$csoportok;
|
||||||
|
|
||||||
|
$data['kategoriak'] = $this->muser->get_kategoriak('group');
|
||||||
|
|
||||||
|
$data['aktiv']=$kat;
|
||||||
|
$this->load->view('site',$data);
|
||||||
|
}
|
||||||
|
|
||||||
|
function kategoria(){
|
||||||
|
if(hun())
|
||||||
|
$data['title'] = 'ARCHLine.XP Csoportok';
|
||||||
|
else
|
||||||
|
$data['title'] = 'ARCHLine.XP Groups';
|
||||||
|
|
||||||
|
$data['tartalom']='groups/kat';
|
||||||
|
$data['csik']=array('home','groups');
|
||||||
|
$data['javascript']=array('dl_select');
|
||||||
|
|
||||||
|
if(!$this->uri->segment(3) || !( $this->muser->letezokategoria($this->uri->segment(3),'group') ) )
|
||||||
|
$kat = 20;
|
||||||
|
else
|
||||||
|
$kat = $this->uri->segment(3);
|
||||||
|
|
||||||
|
redirect("/collection/kategoria/".$kat);
|
||||||
|
|
||||||
|
$data['groups']=$this->mgroups->get_bykategoria($kat);
|
||||||
|
|
||||||
|
$kategoriak = $this->muser->get_kategoriak('group');
|
||||||
|
$kategoriak = $this->mgroups->get_darab($kategoriak);
|
||||||
|
|
||||||
|
$data['kategoriak'] = $kategoriak;
|
||||||
|
|
||||||
|
$data['aktiv']=$kat;
|
||||||
|
|
||||||
|
$data['title'] .= " - " . $this->muser->get_katName($kat);
|
||||||
|
|
||||||
|
$this->load->view('site',$data);
|
||||||
|
}
|
||||||
|
|
||||||
|
function submit(){
|
||||||
|
$lang = $this->muser->user['lang'];
|
||||||
|
$tempFolder = "/home/vendeg/"; //ide másolja az FTP applet a fájlt
|
||||||
|
$storeFolder = "/home/cadline/public_html/website/public/groups/".$lang."/"; //mi itt szeretnénk tárolni
|
||||||
|
$error = "";
|
||||||
|
$kep = "";
|
||||||
|
$link = "public/groups/".$lang."/";
|
||||||
|
|
||||||
|
// ha java-val:
|
||||||
|
if( isset($_POST["tempFilenameField"]) ){
|
||||||
|
$tempFilename = $_POST["tempFilenameField"]; //ezen a néven kerül feltöltésre a fájl (pl. 123456.file)
|
||||||
|
$originalFilename = $_POST["originalFilenameField"]; //ez volt az eredeti neve (pl. szoveg.doc)
|
||||||
|
$storeFilename = time()."_".$originalFilename; //ezen a neven taroljuk mi (pl. 2347686323_szoveg.doc)
|
||||||
|
|
||||||
|
|
||||||
|
$storePath = $storeFolder.$storeFilename;
|
||||||
|
$tempPath = $tempFolder.$tempFilename;
|
||||||
|
|
||||||
|
if ((strlen($tempFilename) < 3) || (strlen($originalFilename) < 3)){
|
||||||
|
die ("Hibás fáljnevek!");
|
||||||
|
$error .= "hiba";
|
||||||
|
}
|
||||||
|
|
||||||
|
if (!copy($tempPath,$storePath)){
|
||||||
|
$error .= "nem másoltam.<br>mit: ".$tempPath.", hova: ".$storePath;
|
||||||
|
}else{
|
||||||
|
$link .= $storeFilename;
|
||||||
|
$prSize = 6500;
|
||||||
|
$prSize = filesize($storePath); //??
|
||||||
|
$this->kep(&$kep);
|
||||||
|
}
|
||||||
|
|
||||||
|
}
|
||||||
|
// ha egyszerusitve:
|
||||||
|
else if ($_FILES["originalFilenameField"]["error"]==0){
|
||||||
|
|
||||||
|
$storeFolder = "public/groups/".$lang."/";
|
||||||
|
$storeFilename= $storeFolder.time()."_". $_FILES["originalFilenameField"]["name"];
|
||||||
|
|
||||||
|
$tempFilename = $_FILES["originalFilenameField"]["tmp_name"];
|
||||||
|
|
||||||
|
if (copy($_FILES["originalFilenameField"]["tmp_name"],$storeFilename)){
|
||||||
|
$prFile = $storeFilename;
|
||||||
|
$prSize = $_FILES['originalFilenameField']['size'];
|
||||||
|
}else{
|
||||||
|
$prFile = "NULL";
|
||||||
|
$error .= "<br />nem másoltam.<br>ezt: ".$_FILES["originalFilenameField"]["tmp_name"].", ide: ".$storeFilename;
|
||||||
|
}
|
||||||
|
$originalFilename = $_FILES["originalFilenameField"]["name"];
|
||||||
|
$storePath = $storeFilename;
|
||||||
|
|
||||||
|
$this->kep(&$kep);
|
||||||
|
|
||||||
|
$link = $storeFilename;
|
||||||
|
|
||||||
|
}else{
|
||||||
|
$error = "nincs csoport fajl";
|
||||||
|
}
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
// Felvétel az adatbázisba
|
||||||
|
if(!$error){
|
||||||
|
$ujgr->email = $_POST["projectEmailField"];
|
||||||
|
$ujgr->title = $_POST["projhectNameField"];
|
||||||
|
$ujgr->meret = $prSize;
|
||||||
|
$ujgr->datum = date('Y-m-d H:i:s',time());
|
||||||
|
$ujgr->nyelv = $lang;
|
||||||
|
$ujgr->kep = $kep;
|
||||||
|
$ujgr->kategoria = $_POST["kategoria"];
|
||||||
|
$ujgr->text = $_POST["projectDescriptionField"];
|
||||||
|
$ujgr->group = $link;
|
||||||
|
$ujgr->szerzo = $_POST["SzerzoField"];
|
||||||
|
|
||||||
|
if( $_POST["kategoria"] > 20 )
|
||||||
|
$ujgr->kat_id = $_POST["kategoria"];
|
||||||
|
else
|
||||||
|
$ujgr->kat_id = "";
|
||||||
|
|
||||||
|
$this->mgroups->newgroup($ujgr);
|
||||||
|
|
||||||
|
//print "<br /> <b>Új csoport felvéve!</b>";
|
||||||
|
}else{
|
||||||
|
//print "<br /> <b>Nem került új csoport az adatbázisba!</b>";
|
||||||
|
//print $error;
|
||||||
|
}
|
||||||
|
|
||||||
|
//ha nem volt print:
|
||||||
|
redirect('groups/kategoria/'.$_POST["kategoria"]);
|
||||||
|
}
|
||||||
|
|
||||||
|
function submitnew(){
|
||||||
|
$lang = $this->muser->user['lang'];
|
||||||
|
$tempFolder = "/home/vendeg/"; //ide másolja az FTP applet a fájlt
|
||||||
|
$storeFolder = "/home/cadline/public_html/website/public/groups/".$lang."/"; //mi itt szeretnénk tárolni
|
||||||
|
$error = "";
|
||||||
|
$kep = "";
|
||||||
|
|
||||||
|
$fajlnev = $_POST["originalFilenameField"]; // ez van a vendegnel
|
||||||
|
$fajlnev2 = $_POST["eredetinev"]; // ez legyen a publicban
|
||||||
|
$fajl = $tempFolder.$fajlnev;
|
||||||
|
|
||||||
|
$ido = time();
|
||||||
|
|
||||||
|
$storeFilename= $storeFolder.$ido."_".$fajlnev2;
|
||||||
|
|
||||||
|
|
||||||
|
if (copy($fajl,$storeFilename)){
|
||||||
|
$prFile = $storeFilename;
|
||||||
|
$prSize = filesize($storeFilename);
|
||||||
|
// print " Sikerült a másolás! ";
|
||||||
|
}else{
|
||||||
|
$prFile = "NULL";
|
||||||
|
$error .= "Nem másoltam át a fájlt.<br />Mit: ".$fajlnev.", Hova: ".$fajlnev2;
|
||||||
|
}
|
||||||
|
|
||||||
|
$link = "public/groups/".$lang."/".$ido."_".$fajlnev2;
|
||||||
|
|
||||||
|
$kep = $_POST["kepalap"];
|
||||||
|
$this->kep(&$kep);
|
||||||
|
|
||||||
|
|
||||||
|
// új kategória felvétele, ha megadták
|
||||||
|
if( $_POST["ujkat"] != "" ){
|
||||||
|
if(hun()){
|
||||||
|
$nevhun = $_POST["ujkat"];
|
||||||
|
$neveng = "";
|
||||||
|
}else{
|
||||||
|
$nevhun = "";
|
||||||
|
$neveng = $_POST["ujkat"];
|
||||||
|
}
|
||||||
|
|
||||||
|
$kat_id = $this->muser->new_kategoria('group',$nevhun,$neveng);
|
||||||
|
}else{
|
||||||
|
$kat_id = $_POST["kategoria"];
|
||||||
|
}
|
||||||
|
|
||||||
|
|
||||||
|
// Felvétel az adatbázisba
|
||||||
|
if(!$error){
|
||||||
|
$ujgr->email = $_POST["projectEmailField"];
|
||||||
|
$ujgr->title = $_POST["projhectNameField"];
|
||||||
|
$ujgr->meret = $prSize;
|
||||||
|
$ujgr->datum = date('Y-m-d H:i:s',time());
|
||||||
|
$ujgr->nyelv = $lang;
|
||||||
|
$ujgr->kep = $kep;
|
||||||
|
$ujgr->kategoria = $_POST["kategoria"];
|
||||||
|
$ujgr->text = $_POST["projectDescriptionField"];
|
||||||
|
$ujgr->group = $link;
|
||||||
|
$ujgr->szerzo = $_POST["SzerzoField"];
|
||||||
|
$ujgr->kat_id = $kat_id;
|
||||||
|
|
||||||
|
$this->mgroups->newgroup($ujgr);
|
||||||
|
|
||||||
|
}
|
||||||
|
|
||||||
|
//ha nem volt print:
|
||||||
|
redirect('groups/kategoria/'.$kat_id);
|
||||||
|
}
|
||||||
|
|
||||||
|
function kep(&$kep){
|
||||||
|
if ($_FILES["kep"]["error"]==0){
|
||||||
|
$lang = $this->muser->user['lang'];
|
||||||
|
$kepnev = time()."_". $_FILES["kep"]["name"];
|
||||||
|
$ide= "public/img/groups/".$lang."/".$kepnev;
|
||||||
|
if (copy($_FILES["kep"]["tmp_name"],$ide)){
|
||||||
|
$kep = $ide;
|
||||||
|
$prSize = $_FILES['kep']['size'];
|
||||||
|
}else{
|
||||||
|
$prFile = "NULL";
|
||||||
|
}
|
||||||
|
}
|
||||||
|
}
|
||||||
|
|
||||||
|
}
|
||||||
|
|
||||||
|
?>
|
||||||
@ -0,0 +1,15 @@
|
|||||||
|
{
|
||||||
|
"finding_ref": "5452",
|
||||||
|
"log_excerpt": "[quarantine] www.cadline.hu:application/controllers/groups.php -> quarantined (dest=/var/lib/web-hids/quarantine/var/www/hosting/cadline.hu/www/application/controllers/groups.php)",
|
||||||
|
"original_sha256": "fdcb90729c1adf9157b1bab5c026f02b89deb9a847ebb04809ad4676527d6387",
|
||||||
|
"original_stat": {
|
||||||
|
"gid": 30037,
|
||||||
|
"mtime": 1396359077,
|
||||||
|
"size": 8872,
|
||||||
|
"uid": 11669
|
||||||
|
},
|
||||||
|
"rel_path": "application/controllers/groups.php",
|
||||||
|
"result": "quarantined",
|
||||||
|
"timestamp": "20260718T160424Z",
|
||||||
|
"vhost": "www.cadline.hu"
|
||||||
|
}
|
||||||
429
var/www/hosting/cadline.hu/www/application/controllers/objects.php
Executable file
429
var/www/hosting/cadline.hu/www/application/controllers/objects.php
Executable file
@ -0,0 +1,429 @@
|
|||||||
|
<?php
|
||||||
|
class Objects extends Controller
|
||||||
|
{
|
||||||
|
function Objects()
|
||||||
|
{
|
||||||
|
parent::Controller();
|
||||||
|
$this->lang->load('site', $this->muser->user['lang']);
|
||||||
|
$this->load->model('mobjects');
|
||||||
|
}
|
||||||
|
|
||||||
|
function index()
|
||||||
|
{
|
||||||
|
$this->kategoria();
|
||||||
|
}
|
||||||
|
|
||||||
|
function upload(){
|
||||||
|
if(hun())
|
||||||
|
$data['title'] = 'ARCHLine.XP Új Objektum';
|
||||||
|
else
|
||||||
|
$data['title'] = 'ARCHLine.XP New Object';
|
||||||
|
|
||||||
|
if($this->uri->segment(3)=="java"){
|
||||||
|
$data['tartalom']='objects/java';
|
||||||
|
}
|
||||||
|
else if($this->uri->segment(3)=="simple"){
|
||||||
|
$data['tartalom']='objects/simple';
|
||||||
|
}
|
||||||
|
else{
|
||||||
|
$data['tartalom']='objects/upload';
|
||||||
|
}
|
||||||
|
$data['csik']=array('home','objects');
|
||||||
|
$data['javascript'] = array('onUploadFinished');
|
||||||
|
$data['kategoriak'] = $this->muser->get_kategoriak('object');
|
||||||
|
|
||||||
|
$this->load->view('site',$data);
|
||||||
|
}
|
||||||
|
|
||||||
|
function uploadnew(){
|
||||||
|
redirect('/collection/upload/'.$this->uri->segment(3).'/object');
|
||||||
|
|
||||||
|
if(hun()){
|
||||||
|
$data['title'] = 'ARCHLine.XP Új Objektum';
|
||||||
|
$data['feltetel'] = $this->mpages->get_row(572);
|
||||||
|
}
|
||||||
|
else{
|
||||||
|
$data['title'] = 'ARCHLine.XP New Object';
|
||||||
|
$data['feltetel'] = $this->mpages->get_row(571);
|
||||||
|
}
|
||||||
|
|
||||||
|
if($this->uri->segment(3)!=""/* && $this->uri->segment(4)!=""*/){
|
||||||
|
$data["fajl"] = $this->uri->segment(3);
|
||||||
|
$data["eredeti"] = $this->uri->segment(4);
|
||||||
|
|
||||||
|
/* szövegfájl átadással */
|
||||||
|
if(/*eng()*/true){
|
||||||
|
$fajlnev = '/home/vendeg/'.$this->uri->segment(3);
|
||||||
|
$fa = fopen( $fajlnev, "r" ) or die("Upload error");
|
||||||
|
$ol = fgets( $fa, 1024);
|
||||||
|
$adatok = explode("#",$ol);
|
||||||
|
// if( count($adatok) == 5){
|
||||||
|
$lang = $this->muser->user['lang'];
|
||||||
|
$honnan = "/home/vendeg/".$adatok[2];
|
||||||
|
$kepnev = time()."_".$adatok[3];
|
||||||
|
$ide= "public/img/objects/".$lang."/".$kepnev;
|
||||||
|
//$ide= "public/img/objects/temp/".$kepnev;
|
||||||
|
if( copy($honnan,$ide) ){
|
||||||
|
$adatok[3] = $ide;
|
||||||
|
}else{
|
||||||
|
$adatok[3] = "";
|
||||||
|
}
|
||||||
|
|
||||||
|
|
||||||
|
$data["fajl"] = $adatok[0];
|
||||||
|
$data["eredeti"] = $adatok[1];
|
||||||
|
$data["vendegkep"] = $adatok[2];
|
||||||
|
$data["kepalap"] = $adatok[3];
|
||||||
|
$data["cim"] = $adatok[4];
|
||||||
|
|
||||||
|
// echo(unicode_encode($data["fajl"], 'UTF-8'));
|
||||||
|
//print_r($data);
|
||||||
|
// }
|
||||||
|
fclose($fa);
|
||||||
|
}
|
||||||
|
|
||||||
|
}else{
|
||||||
|
redirect('objects/upload');
|
||||||
|
}
|
||||||
|
|
||||||
|
$data['tartalom']='objects/uploadnew';
|
||||||
|
$data['csik']=array('home','objects');
|
||||||
|
$data['javascript'] = array('objfeltoltes');
|
||||||
|
$data['kategoriak'] = $this->muser->get_kategoriak('object');
|
||||||
|
|
||||||
|
//print_r($data);
|
||||||
|
|
||||||
|
$this->load->view('site_upload',$data);
|
||||||
|
}
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
function upload2(){
|
||||||
|
redirect("collection/upload/".$this->uri->segment(3)."/object");
|
||||||
|
|
||||||
|
/*if(hun()){
|
||||||
|
$data['title'] = 'ARCHLine.XP Új Objektum';
|
||||||
|
$data['feltetel'] = $this->mpages->get_row(572);
|
||||||
|
}
|
||||||
|
else{
|
||||||
|
$data['title'] = 'ARCHLine.XP New Object';
|
||||||
|
$data['feltetel'] = $this->mpages->get_row(571);
|
||||||
|
}
|
||||||
|
|
||||||
|
if($this->uri->segment(3)!=""){
|
||||||
|
$data["fajl"] = $this->uri->segment(3);
|
||||||
|
$data["eredeti"] = $this->uri->segment(4);
|
||||||
|
|
||||||
|
/* szövegfájl átadással */
|
||||||
|
/*$fajlnev = '/home/vendeg/'.$this->uri->segment(3);
|
||||||
|
$fa = fopen( $fajlnev, "r" ) or die("Upload error");
|
||||||
|
$ol = fgets( $fa, 1024);
|
||||||
|
$adatok = explode("#",$ol);
|
||||||
|
$lang = $this->muser->user['lang'];
|
||||||
|
$honnan = "/home/vendeg/".$adatok[2];
|
||||||
|
$kepnev = time()."_".$adatok[3];
|
||||||
|
$ide= "public/img/objects/".$lang."/".$kepnev;
|
||||||
|
if( copy($honnan,$ide) ){
|
||||||
|
$adatok[3] = $ide;
|
||||||
|
}else{
|
||||||
|
$adatok[3] = "";
|
||||||
|
}
|
||||||
|
|
||||||
|
|
||||||
|
$data["fajl"] = $adatok[0];
|
||||||
|
$data["eredeti"] = $adatok[1];
|
||||||
|
$data["vendegkep"] = $adatok[2];
|
||||||
|
$data["kepalap"] = $adatok[3];
|
||||||
|
$data["cim"] = $adatok[4];
|
||||||
|
|
||||||
|
fclose($fa);
|
||||||
|
|
||||||
|
}else{
|
||||||
|
redirect('objects/upload');
|
||||||
|
}
|
||||||
|
|
||||||
|
$data['tartalom']='objects/uploadnew';
|
||||||
|
$data['javascript'] = array('objfeltoltes');
|
||||||
|
$data['kategoriak'] = $this->muser->get_kategoriak('object');
|
||||||
|
|
||||||
|
$this->load->view('site_upload',$data);*/
|
||||||
|
}
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
function simple(){
|
||||||
|
if(hun())
|
||||||
|
$data['title'] = 'ARCHLine.XP Új Objektum';
|
||||||
|
else
|
||||||
|
$data['title'] = 'ARCHLine.XP New Object';
|
||||||
|
$data['tartalom']='objects/simple';
|
||||||
|
$data['csik']=array('home','objects');
|
||||||
|
|
||||||
|
$this->load->view('site',$data);
|
||||||
|
}
|
||||||
|
|
||||||
|
function kat(){
|
||||||
|
|
||||||
|
if(hun())
|
||||||
|
$data['title'] = 'ARCHLine.XP Objektumok';
|
||||||
|
else
|
||||||
|
$data['title'] = 'ARCHLine.XP Objects';
|
||||||
|
|
||||||
|
$data['tartalom']='objects/kat';
|
||||||
|
$data['csik']=array('home','objects');
|
||||||
|
$data['javascript']=array('dl_select');
|
||||||
|
|
||||||
|
if(!$this->uri->segment(3))
|
||||||
|
$kat = 2;
|
||||||
|
else
|
||||||
|
$kat = $this->uri->segment(3);
|
||||||
|
|
||||||
|
$data['objects']=$this->mobjects->get_bykat($kat);
|
||||||
|
|
||||||
|
//$nyelv = $this->muser->user['lang'];
|
||||||
|
|
||||||
|
$data['kategoriak'] = $this->muser->get_kategoriak('object');
|
||||||
|
|
||||||
|
$data['aktiv']=$kat;
|
||||||
|
$this->load->view('site',$data);
|
||||||
|
|
||||||
|
}
|
||||||
|
|
||||||
|
function kategoria(){
|
||||||
|
if(hun())
|
||||||
|
$data['title'] = 'ARCHLine.XP Objektumok';
|
||||||
|
else
|
||||||
|
$data['title'] = 'ARCHLine.XP Objects';
|
||||||
|
|
||||||
|
$data['tartalom']='objects/kat';
|
||||||
|
$data['csik']=array('home','objects');
|
||||||
|
$data['javascript']=array('dl_select','objfeltoltes');
|
||||||
|
|
||||||
|
if( !$this->uri->segment(3) || !( $this->muser->letezokategoria($this->uri->segment(3),'object') ))
|
||||||
|
$kat = 26;
|
||||||
|
else
|
||||||
|
$kat = $this->uri->segment(3);
|
||||||
|
|
||||||
|
|
||||||
|
redirect("/collection/kategoria/".$kat);
|
||||||
|
|
||||||
|
$data['objects']=$this->mobjects->get_bykategoria($kat);
|
||||||
|
|
||||||
|
|
||||||
|
$kategoriak = $this->muser->get_kategoriak('object');
|
||||||
|
$kategoriak = $this->mobjects->get_darab($kategoriak);
|
||||||
|
|
||||||
|
$data['kategoriak'] = $kategoriak;
|
||||||
|
//$data['kategoriak'] = $this->muser->get_kategoriak('object');
|
||||||
|
|
||||||
|
$data['aktiv']=$kat;
|
||||||
|
$data['title'] .= " - " . $this->muser->get_katName($kat);
|
||||||
|
|
||||||
|
$this->load->view('site',$data);
|
||||||
|
}
|
||||||
|
|
||||||
|
function get()
|
||||||
|
{
|
||||||
|
$download_id = $this->uri->segment(3);
|
||||||
|
if(!$download_id || !is_numeric($download_id))
|
||||||
|
{
|
||||||
|
show_404();
|
||||||
|
}
|
||||||
|
|
||||||
|
$record = $this->mobjects->get_row($download_id);
|
||||||
|
if(!$record)
|
||||||
|
{
|
||||||
|
show_404();
|
||||||
|
}
|
||||||
|
|
||||||
|
redirect($record->object);
|
||||||
|
}
|
||||||
|
|
||||||
|
function submit(){
|
||||||
|
$lang = $this->muser->user['lang'];
|
||||||
|
$tempFolder = "/home/vendeg/"; //ide másolja az FTP applet a fájlt
|
||||||
|
$storeFolder = "/home/cadline/public_html/website/public/objects/".$lang."/"; //mi itt szeretnénk tárolni
|
||||||
|
$error = "";
|
||||||
|
$kep = "";
|
||||||
|
$link = "public/objects/".$lang."/";
|
||||||
|
|
||||||
|
// ha java-val:
|
||||||
|
if( isset($_POST["tempFilenameField"]) ){
|
||||||
|
$tempFilename = $_POST["tempFilenameField"]; //ezen a néven kerül feltöltésre a fájl (pl. 123456.file)
|
||||||
|
$originalFilename = $_POST["originalFilenameField"]; //ez volt az eredeti neve (pl. szoveg.doc)
|
||||||
|
$storeFilename = time()."_".$originalFilename; //ezen a neven taroljuk mi (pl. 2347686323_szoveg.doc)
|
||||||
|
|
||||||
|
|
||||||
|
$storePath = $storeFolder.$storeFilename;
|
||||||
|
$tempPath = $tempFolder.$tempFilename;
|
||||||
|
|
||||||
|
if ((strlen($tempFilename) < 3) || (strlen($originalFilename) < 3)){
|
||||||
|
die ("Hibás fáljnevek!");
|
||||||
|
$error .= "hiba";
|
||||||
|
}
|
||||||
|
|
||||||
|
//chmod($tempPath,0777);
|
||||||
|
if (!copy($tempPath,$storePath)){
|
||||||
|
//if (!rename($tempPath,$storePath)){
|
||||||
|
// print "Nem sikerül a helyére másolni a feltöltött fájlt!<br />";
|
||||||
|
$error .= "hiba";
|
||||||
|
}else{
|
||||||
|
// print "<h1>Sikeres feltöltés ($originalFilename)</h1>";
|
||||||
|
//$storeFilename = $storePath;
|
||||||
|
$link .= $storeFilename;
|
||||||
|
$prSize = 6500;
|
||||||
|
$prSize = filesize($storePath); //??
|
||||||
|
$this->kep(&$kep);
|
||||||
|
}
|
||||||
|
|
||||||
|
}
|
||||||
|
// ha egyszerusitve:
|
||||||
|
else if ($_FILES["originalFilenameField"]["error"]==0){
|
||||||
|
|
||||||
|
$storeFolder = "public/objects/".$lang."/";
|
||||||
|
$storeFilename= $storeFolder.time()."_". $_FILES["originalFilenameField"]["name"];
|
||||||
|
|
||||||
|
$tempFilename = $_FILES["originalFilenameField"]["tmp_name"];
|
||||||
|
|
||||||
|
if (copy($_FILES["originalFilenameField"]["tmp_name"],$storeFilename)){
|
||||||
|
$prFile = $storeFilename;
|
||||||
|
$prSize = $_FILES['originalFilenameField']['size'];
|
||||||
|
}else{
|
||||||
|
$prFile = "NULL";
|
||||||
|
$error .= "hiba..";
|
||||||
|
}
|
||||||
|
$originalFilename = $_FILES["originalFilenameField"]["name"];
|
||||||
|
$storePath = $storeFilename;
|
||||||
|
|
||||||
|
$this->kep(&$kep);
|
||||||
|
|
||||||
|
$link = $storeFilename;
|
||||||
|
|
||||||
|
}else{
|
||||||
|
$error = "nincs objektum fajl";
|
||||||
|
}
|
||||||
|
|
||||||
|
|
||||||
|
// Felvétel az adatbázisba
|
||||||
|
if(!$error){
|
||||||
|
$ujpr->email = $_POST["projectEmailField"];
|
||||||
|
$ujpr->title = $_POST["projhectNameField"];
|
||||||
|
$ujpr->meret = $prSize;
|
||||||
|
$ujpr->datum = date('Y-m-d H:i:s',time());
|
||||||
|
$ujpr->nyelv = $lang;
|
||||||
|
$ujpr->kep = $kep;
|
||||||
|
$ujpr->kategoria = $_POST["kategoria"];
|
||||||
|
$ujpr->text = $_POST["projectDescriptionField"];
|
||||||
|
$ujpr->object = $link;
|
||||||
|
$ujpr->szerzo = $_POST["SzerzoField"];
|
||||||
|
$ujpr->kat_id = $_POST["kategoria"];
|
||||||
|
|
||||||
|
$this->mobjects->newobject($ujpr);
|
||||||
|
|
||||||
|
//print "<br /> <b>Új projekt felvéve</b>";
|
||||||
|
}else{
|
||||||
|
//print "<br /> <b>Nem került adat az adatbázisba</b>";
|
||||||
|
}
|
||||||
|
|
||||||
|
//ha nem volt print:
|
||||||
|
redirect('objects/kategoria/'.$_POST["kategoria"]);
|
||||||
|
}
|
||||||
|
|
||||||
|
function submitnew(){
|
||||||
|
$lang = $this->muser->user['lang'];
|
||||||
|
$tempFolder = "/home/vendeg/"; //ide másolja az FTP applet a fájlt
|
||||||
|
$storeFolder = "/home/cadline/public_html/website/public/objects/".$lang."/"; //mi itt szeretnénk tárolni
|
||||||
|
$error = "";
|
||||||
|
$kep = "";
|
||||||
|
|
||||||
|
$fajlnev = $_POST["originalFilenameField"]; // ez van a vendegnel
|
||||||
|
$fajlnev2 = $_POST["eredetinev"]; // ez legyen a publicban
|
||||||
|
$fajl = $tempFolder.$fajlnev;
|
||||||
|
|
||||||
|
$ido = time();
|
||||||
|
|
||||||
|
$storeFilename= $storeFolder.$ido."_".$fajlnev2;
|
||||||
|
|
||||||
|
|
||||||
|
if (copy($fajl,$storeFilename)){
|
||||||
|
$prFile = $storeFilename;
|
||||||
|
$prSize = filesize($storeFilename);
|
||||||
|
}else{
|
||||||
|
$prFile = "NULL";
|
||||||
|
$error .= "Nem másoltam át a fájlt<br /> vendegben: ".$fajlnev." publicba: ".$fajlnev2;
|
||||||
|
}
|
||||||
|
|
||||||
|
$link = "public/objects/".$lang."/".$ido."_".$fajlnev2;
|
||||||
|
|
||||||
|
$kep = $_POST["kepalap"];
|
||||||
|
$this->kep(&$kep);
|
||||||
|
|
||||||
|
|
||||||
|
// új kategória felvétele, ha megadták
|
||||||
|
if( $_POST["ujkat"] != "" ){
|
||||||
|
if(hun()){
|
||||||
|
$nevhun = $_POST["ujkat"];
|
||||||
|
$neveng = "";
|
||||||
|
}else{
|
||||||
|
$nevhun = "";
|
||||||
|
$neveng = $_POST["ujkat"];
|
||||||
|
}
|
||||||
|
|
||||||
|
$kat_id = $this->muser->new_kategoria('object',$nevhun,$neveng);
|
||||||
|
}else{
|
||||||
|
$kat_id = $_POST["kategoria"];
|
||||||
|
}
|
||||||
|
|
||||||
|
|
||||||
|
// Felvétel az adatbázisba
|
||||||
|
if(!$error){
|
||||||
|
$ujpr->email = $_POST["projectEmailField"];
|
||||||
|
$ujpr->title = $_POST["projhectNameField"];
|
||||||
|
$ujpr->meret = $prSize;
|
||||||
|
$ujpr->datum = date('Y-m-d H:i:s',time());
|
||||||
|
$ujpr->nyelv = $lang;
|
||||||
|
$ujpr->kep = $kep;
|
||||||
|
$ujpr->kategoria = $_POST["kategoria"];
|
||||||
|
$ujpr->text = $_POST["projectDescriptionField"];
|
||||||
|
$ujpr->object = $link;
|
||||||
|
$ujpr->szerzo = $_POST["SzerzoField"];
|
||||||
|
$ujpr->kat_id = $kat_id;
|
||||||
|
|
||||||
|
$this->mobjects->newobject($ujpr);
|
||||||
|
|
||||||
|
//print "<br /> <b>Új projekt felvéve</b>";
|
||||||
|
}else{
|
||||||
|
//print "<br /> <b>Nem került adat az adatbázisba</b>";
|
||||||
|
//print $error;
|
||||||
|
}
|
||||||
|
|
||||||
|
//ha nem volt print:
|
||||||
|
redirect('objects/kategoria/'.$kat_id);
|
||||||
|
}
|
||||||
|
|
||||||
|
function kep(&$kep){
|
||||||
|
if ($_FILES["kep"]["error"]==0){
|
||||||
|
$lang = $this->muser->user['lang'];
|
||||||
|
$kepnev = time()."_". $_FILES["kep"]["name"];
|
||||||
|
$ide= "public/img/objects/".$lang."/".$kepnev;
|
||||||
|
if (copy($_FILES["kep"]["tmp_name"],$ide)){
|
||||||
|
$kep = $ide;
|
||||||
|
$prSize = $_FILES['kep']['size'];
|
||||||
|
//print " Sikerült a képmásolás! ";
|
||||||
|
}else{
|
||||||
|
$prFile = "NULL";
|
||||||
|
//print " Nem sikerült a képet felmásolni! ";
|
||||||
|
}
|
||||||
|
}
|
||||||
|
}
|
||||||
|
|
||||||
|
}
|
||||||
|
|
||||||
|
?>
|
||||||
@ -0,0 +1,15 @@
|
|||||||
|
{
|
||||||
|
"finding_ref": "5445",
|
||||||
|
"log_excerpt": "[quarantine] www.cadline.hu:application/controllers/objects.php -> quarantined (dest=/var/lib/web-hids/quarantine/var/www/hosting/cadline.hu/www/application/controllers/objects.php)",
|
||||||
|
"original_sha256": "b6f11c4b3be5f7f0a5a2e18c82cf8861937fdbc3ee9b317d03ec4ec923cdaf5f",
|
||||||
|
"original_stat": {
|
||||||
|
"gid": 30037,
|
||||||
|
"mtime": 1396359078,
|
||||||
|
"size": 11000,
|
||||||
|
"uid": 11669
|
||||||
|
},
|
||||||
|
"rel_path": "application/controllers/objects.php",
|
||||||
|
"result": "quarantined",
|
||||||
|
"timestamp": "20260718T160424Z",
|
||||||
|
"vhost": "www.cadline.hu"
|
||||||
|
}
|
||||||
445
var/www/hosting/cadline.hu/www/application/controllers/projects.php
Executable file
445
var/www/hosting/cadline.hu/www/application/controllers/projects.php
Executable file
@ -0,0 +1,445 @@
|
|||||||
|
<?php
|
||||||
|
class Projects extends Controller
|
||||||
|
{
|
||||||
|
function Projects()
|
||||||
|
{
|
||||||
|
parent::Controller();
|
||||||
|
|
||||||
|
$this->lang->load('site', $this->muser->user['lang']);
|
||||||
|
|
||||||
|
$this->load->model('mprojects');
|
||||||
|
}
|
||||||
|
|
||||||
|
function index()
|
||||||
|
{
|
||||||
|
$this->kategoria();
|
||||||
|
}
|
||||||
|
|
||||||
|
function supportupload(){
|
||||||
|
include('application/helpers/sajatfeltolto.php');
|
||||||
|
|
||||||
|
$guid = $this->uri->segment(4);
|
||||||
|
$sorozatszam = $this->uri->segment(3);
|
||||||
|
|
||||||
|
print_r($this->uri->segments);
|
||||||
|
|
||||||
|
print "guid: ".$guid."<br> sorozatszam: ".$sorozatszam;
|
||||||
|
|
||||||
|
if( !$guid || !$sorozatszam ){
|
||||||
|
$record->osztaly = "projects";
|
||||||
|
$record->fv = "supportupload";
|
||||||
|
$record->hiba = "Hiányzó guid vagy sorozatszám:\n".$guid."\n".$sorozatszam;
|
||||||
|
$record->datum = date('Y-m-d H:i:s',time());
|
||||||
|
$this->db->insert('a_hibak',$record);
|
||||||
|
|
||||||
|
return;
|
||||||
|
}
|
||||||
|
|
||||||
|
$honnan = '/home/vendeg/support/'.$guid;
|
||||||
|
$hova = 'public/ugyfelupload/'.$sorozatszam;
|
||||||
|
|
||||||
|
if( !file_exists($honnan) && file_exists($honnan."=") )
|
||||||
|
$honnan .= "=";
|
||||||
|
elseif( !file_exists($honnan) && file_exists($honnan."==") )
|
||||||
|
$honnan .= "==";
|
||||||
|
|
||||||
|
|
||||||
|
if(!is_dir($hova)){
|
||||||
|
mkdir($hova,0777);
|
||||||
|
exec("chmod 777 /var/www/hosting/cadline.hu/www/".$hova);
|
||||||
|
}
|
||||||
|
$hova .= "/".trim(base64_decode($guid),"=");;
|
||||||
|
|
||||||
|
if( athelyez($honnan,$hova) ){
|
||||||
|
exec("chmod 777 /var/www/hosting/cadline.hu/www/".$hova);
|
||||||
|
}
|
||||||
|
else{
|
||||||
|
// sikertelen masolas
|
||||||
|
|
||||||
|
$record->osztaly = "projects";
|
||||||
|
$record->fv = "supportupload";
|
||||||
|
$record->hiba = "Másolás hiba, honnan:".$honnan."\nhova: ".$hova;
|
||||||
|
$record->datum = date('Y-m-d H:i:s',time());
|
||||||
|
$this->db->insert('a_hibak',$record);
|
||||||
|
}
|
||||||
|
|
||||||
|
}
|
||||||
|
|
||||||
|
function upload(){
|
||||||
|
if(hun())
|
||||||
|
$data['title'] = 'ARCHLine.XP Új Projekt';
|
||||||
|
else
|
||||||
|
$data['title'] = 'ARCHLine.XP New Project';
|
||||||
|
|
||||||
|
if($this->uri->segment(3)=="java"){
|
||||||
|
$data['tartalom']='projects/java';
|
||||||
|
}
|
||||||
|
else if($this->uri->segment(3)=="simple"){
|
||||||
|
$data['tartalom']='projects/simple';
|
||||||
|
}
|
||||||
|
else{
|
||||||
|
$data['tartalom']='projects/upload';
|
||||||
|
}
|
||||||
|
|
||||||
|
$data['kategoriak'] = $this->muser->get_kategoriak('project');
|
||||||
|
|
||||||
|
$data['csik']=array('home','projects');
|
||||||
|
$data['javascript'] = array('onUploadFinished');
|
||||||
|
|
||||||
|
$this->load->view('site',$data);
|
||||||
|
}
|
||||||
|
|
||||||
|
function uploadnew(){
|
||||||
|
redirect('/collection/upload/'.$this->uri->segment(3).'/project');
|
||||||
|
|
||||||
|
if(hun()){
|
||||||
|
$data['title'] = 'ARCHLine.XP Új Projekt';
|
||||||
|
$data['feltetel'] = $this->mpages->get_row(572);
|
||||||
|
}
|
||||||
|
else{
|
||||||
|
$data['title'] = 'ARCHLine.XP New Project';
|
||||||
|
$data['feltetel'] = $this->mpages->get_row(571);
|
||||||
|
}
|
||||||
|
|
||||||
|
|
||||||
|
if($this->uri->segment(3)!=""){
|
||||||
|
$data["fajl"] = $this->uri->segment(3);
|
||||||
|
$data["eredeti"] = $this->uri->segment(4);
|
||||||
|
|
||||||
|
|
||||||
|
$fajlnev = '/home/vendeg/'.$this->uri->segment(3);
|
||||||
|
$fa = fopen( $fajlnev, "r" ) or die("Upload error");
|
||||||
|
$ol = fgets( $fa, 1024);
|
||||||
|
$adatok = explode("#",$ol);
|
||||||
|
// if( count($adatok) == 5){
|
||||||
|
$lang = $this->muser->user['lang'];
|
||||||
|
$honnan = "/home/vendeg/".$adatok[2];
|
||||||
|
$kepnev = time()."_".$adatok[3];
|
||||||
|
$ide= "public/img/projects/".$lang."/".$kepnev;
|
||||||
|
//$ide= "public/img/projects/temp/".$kepnev;
|
||||||
|
if( copy($honnan,$ide) ){
|
||||||
|
$adatok[3] = $ide;
|
||||||
|
}else{
|
||||||
|
$adatok[3] = "";
|
||||||
|
}
|
||||||
|
|
||||||
|
|
||||||
|
$data["fajl"] = $adatok[0];
|
||||||
|
$data["eredeti"] = $adatok[1];
|
||||||
|
$data["vendegkep"] = $adatok[2];
|
||||||
|
$data["kepalap"] = $adatok[3];
|
||||||
|
$data["cim"] = $adatok[4];
|
||||||
|
|
||||||
|
// }
|
||||||
|
fclose($fa);
|
||||||
|
|
||||||
|
|
||||||
|
$data['tartalom']='projects/uploadnew';
|
||||||
|
}else{
|
||||||
|
redirect('projects/upload');
|
||||||
|
}
|
||||||
|
|
||||||
|
$data['kategoriak'] = $this->muser->get_kategoriak('project');
|
||||||
|
|
||||||
|
$data['javascript'] = array('objfeltoltes');
|
||||||
|
|
||||||
|
$this->load->view('site_upload',$data);
|
||||||
|
}
|
||||||
|
|
||||||
|
function simple(){
|
||||||
|
if(hun())
|
||||||
|
$data['title'] = 'ARCHLine.XP Új Projekt';
|
||||||
|
else
|
||||||
|
$data['title'] = 'ARCHLine.XP New Project';
|
||||||
|
$data['tartalom']='projects/simple';
|
||||||
|
$data['csik']=array('home','projects');
|
||||||
|
|
||||||
|
$this->load->view('site',$data);
|
||||||
|
}
|
||||||
|
|
||||||
|
function cadline(){
|
||||||
|
$data['title'] = 'ARCHLine.XP Projektek szerkesztése';
|
||||||
|
$data['tartalom']='projects/cadline';
|
||||||
|
$data['csik']=array('home','projects');
|
||||||
|
|
||||||
|
//$projects = $this->mprojects->get_all();
|
||||||
|
//$data['projects'] = $projects;
|
||||||
|
|
||||||
|
$this->load->view('site',$data);
|
||||||
|
}
|
||||||
|
|
||||||
|
function kat(){
|
||||||
|
|
||||||
|
if(hun())
|
||||||
|
$data['title'] = 'ARCHLine.XP Projektek';
|
||||||
|
else
|
||||||
|
$data['title'] = 'ARCHLine.XP Projects';
|
||||||
|
|
||||||
|
$data['tartalom']='projects/kat';
|
||||||
|
$data['csik']=array('home','projects');
|
||||||
|
$data['javascript']=array('dl_select');
|
||||||
|
|
||||||
|
if(!$this->uri->segment(3) || !is_numeric($this->uri->segment(3)))
|
||||||
|
$kat = 6;
|
||||||
|
else
|
||||||
|
$kat = $this->uri->segment(3);
|
||||||
|
|
||||||
|
$projektek = $this->mprojects->get_bykat($kat);
|
||||||
|
$data['projects']=$projektek;
|
||||||
|
|
||||||
|
$data['kategoriak'] = $this->muser->get_kategoriak('project');
|
||||||
|
|
||||||
|
$data['aktiv']=$kat;
|
||||||
|
$this->load->view('site',$data);
|
||||||
|
}
|
||||||
|
|
||||||
|
function kategoria(){
|
||||||
|
redirect("/collection/kategoria/1");
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
if(hun())
|
||||||
|
$data['title'] = 'ARCHLine.XP Projektek';
|
||||||
|
else
|
||||||
|
$data['title'] = 'ARCHLine.XP Projects';
|
||||||
|
|
||||||
|
$data['tartalom']='projects/kat';
|
||||||
|
$data['csik']=array('home','projects');
|
||||||
|
$data['javascript']=array('dl_select','objfeltoltes');
|
||||||
|
|
||||||
|
if(!$this->uri->segment(3) || !( $this->muser->letezokategoria($this->uri->segment(3),'project') ) )
|
||||||
|
$kat = 1;
|
||||||
|
else
|
||||||
|
$kat = $this->uri->segment(3);
|
||||||
|
|
||||||
|
|
||||||
|
$data['projects']=$this->mprojects->get_bykategoria($kat);
|
||||||
|
|
||||||
|
$kategoriak = $this->muser->get_kategoriak('project');
|
||||||
|
$kategoriak = $this->mprojects->get_darab($kategoriak);
|
||||||
|
|
||||||
|
$data['kategoriak'] = $kategoriak;
|
||||||
|
|
||||||
|
$data['aktiv']=$kat;
|
||||||
|
|
||||||
|
$data['title'] .= " - " . $this->muser->get_katName($kat);
|
||||||
|
|
||||||
|
$this->load->view('site',$data);
|
||||||
|
}
|
||||||
|
|
||||||
|
function get()
|
||||||
|
{
|
||||||
|
$download_id = $this->uri->segment(3);
|
||||||
|
if(!$download_id || !is_numeric($download_id))
|
||||||
|
{
|
||||||
|
show_404();
|
||||||
|
}
|
||||||
|
|
||||||
|
$record = $this->mprojects->get_row($download_id);
|
||||||
|
if(!$record)
|
||||||
|
{
|
||||||
|
show_404();
|
||||||
|
}
|
||||||
|
|
||||||
|
redirect($record->project);
|
||||||
|
}
|
||||||
|
|
||||||
|
function submit(){
|
||||||
|
$lang = $this->muser->user['lang'];
|
||||||
|
$tempFolder = "/home/vendeg/"; //ide másolja az FTP applet a fájlt
|
||||||
|
$storeFolder = "/home/cadline/public_html/website/public/projects/".$lang."/"; //mi itt szeretnénk tárolni
|
||||||
|
$error = "";
|
||||||
|
$kep = "";
|
||||||
|
$link = "public/projects/".$lang."/";
|
||||||
|
|
||||||
|
// ha java-val:
|
||||||
|
if( isset($_POST["tempFilenameField"]) ){
|
||||||
|
$tempFilename = $_POST["tempFilenameField"]; //ezen a néven kerül feltöltésre a fájl (pl. 123456.file)
|
||||||
|
$originalFilename = $_POST["originalFilenameField"]; //ez volt az eredeti neve (pl. szoveg.doc)
|
||||||
|
$storeFilename = time()."_".$originalFilename; //ezen a neven taroljuk mi (pl. 2347686323_szoveg.doc)
|
||||||
|
|
||||||
|
|
||||||
|
$storePath = $storeFolder.$storeFilename;
|
||||||
|
$tempPath = $tempFolder.$tempFilename;
|
||||||
|
|
||||||
|
if ((strlen($tempFilename) < 3) || (strlen($originalFilename) < 3)){
|
||||||
|
die ("Hibás fáljnevek!");
|
||||||
|
$error .= "hiba";
|
||||||
|
}
|
||||||
|
|
||||||
|
//chmod($tempPath,0777);
|
||||||
|
if (!copy($tempPath,$storePath)){
|
||||||
|
//if (!rename($tempPath,$storePath)){
|
||||||
|
// print "Nem sikerül a helyére másolni a feltöltött fájlt!<br />";
|
||||||
|
$error .= "hiba";
|
||||||
|
}else{
|
||||||
|
// print "<h1>Sikeres feltöltés ($originalFilename)</h1>";
|
||||||
|
//$storeFilename = $storePath;
|
||||||
|
$link .= $storeFilename;
|
||||||
|
$prSize = 6500;
|
||||||
|
$prSize = filesize($storePath); //??
|
||||||
|
$this->kep(&$kep);
|
||||||
|
}
|
||||||
|
|
||||||
|
}
|
||||||
|
// ha egyszerűsítve:
|
||||||
|
else if ($_FILES["originalFilenameField"]["error"]==0){
|
||||||
|
|
||||||
|
$storeFolder = "public/projects/".$lang."/";
|
||||||
|
$storeFilename= $storeFolder.time()."_". $_FILES["originalFilenameField"]["name"];
|
||||||
|
|
||||||
|
$tempFilename = $_FILES["originalFilenameField"]["tmp_name"];
|
||||||
|
|
||||||
|
if (copy($_FILES["originalFilenameField"]["tmp_name"],$storeFilename)){
|
||||||
|
$prFile = $storeFilename;
|
||||||
|
$prSize = $_FILES['originalFilenameField']['size'];
|
||||||
|
}else{
|
||||||
|
$prFile = "NULL";
|
||||||
|
$error .= "hiba..";
|
||||||
|
}
|
||||||
|
$originalFilename = $_FILES["originalFilenameField"]["name"];
|
||||||
|
$storePath = $storeFilename;
|
||||||
|
|
||||||
|
$this->kep(&$kep);
|
||||||
|
|
||||||
|
$link = $storeFilename;
|
||||||
|
|
||||||
|
}else{
|
||||||
|
$error = "nincs projekt fajl";
|
||||||
|
}
|
||||||
|
|
||||||
|
|
||||||
|
// Felvétel az adatbázisba
|
||||||
|
if(!$error){
|
||||||
|
$ujpr->email = $_POST["projectEmailField"];
|
||||||
|
$ujpr->title = $_POST["projhectNameField"];
|
||||||
|
$ujpr->meret = $prSize;
|
||||||
|
$ujpr->datum = date('Y-m-d H:i:s',time());
|
||||||
|
$ujpr->nyelv = $lang;
|
||||||
|
$ujpr->kep = $kep;
|
||||||
|
$ujpr->kategoria = $_POST["kategoria"];
|
||||||
|
$ujpr->text = $_POST["projectDescriptionField"];
|
||||||
|
$ujpr->project = $link;
|
||||||
|
$ujpr->szerzo = $_POST["SzerzoField"];
|
||||||
|
$ujpr->kat_id = $_POST["kategoria"];
|
||||||
|
|
||||||
|
$this->mprojects->newproject($ujpr);
|
||||||
|
|
||||||
|
//print "<br /> <b>Új projekt felvéve</b>";
|
||||||
|
}else{
|
||||||
|
//print "<br /> <b>Nem került adat az adatbázisba</b>";
|
||||||
|
}
|
||||||
|
|
||||||
|
//ha nem volt print:
|
||||||
|
redirect('projects/kategoria/'.$_POST["kategoria"]);
|
||||||
|
}
|
||||||
|
|
||||||
|
|
||||||
|
function submitnew(){
|
||||||
|
$lang = $this->muser->user['lang'];
|
||||||
|
$tempFolder = "/home/vendeg/"; //ide másolja a program a fájlt
|
||||||
|
$storeFolder = "/home/cadline/public_html/website/public/projects/".$lang."/"; //mi itt szeretnénk tárolni
|
||||||
|
$error = "";
|
||||||
|
$kep = "";
|
||||||
|
|
||||||
|
|
||||||
|
$fajlnev = $_POST["originalFilenameField"]; // ez van a vendegnel
|
||||||
|
//$fajlnev2 = $_POST["eredetinev"]; // ez legyen a publicban
|
||||||
|
//$fajlnev2 = $this->ekezet($_POST["eredetinev"]); // ez legyen a publicban
|
||||||
|
|
||||||
|
|
||||||
|
$fajlnev2 = $_POST["originalFilenameField"]; // ez legyen a publicban
|
||||||
|
$parameterbe = $_POST["eredetinev"]; // ez a név jelenik meg a letöltéskor az url-ben, paraméterként
|
||||||
|
|
||||||
|
|
||||||
|
$fajl = $tempFolder.$fajlnev;
|
||||||
|
|
||||||
|
$link = "public/projects/".$lang."/".$fajl;
|
||||||
|
|
||||||
|
$storeFolder = "public/projects/".$lang."/";
|
||||||
|
$storeFilename= $storeFolder.time()."_".$fajlnev2;
|
||||||
|
|
||||||
|
if (copy($fajl,$storeFilename)){
|
||||||
|
$prFile = $storeFilename;
|
||||||
|
$prSize = filesize($storeFilename);
|
||||||
|
$kep = $_POST["kepalap"];
|
||||||
|
$this->kep(&$kep);
|
||||||
|
}else{
|
||||||
|
$prFile = "NULL";
|
||||||
|
$error .= "Nem másoltam át a fájlt<br /> vendegben: ".$fajlnev." publicba: ".$fajlnev2;
|
||||||
|
}
|
||||||
|
$originalFilename = $_FILES["originalFilenameField"]["name"];
|
||||||
|
$storePath = $storeFilename;
|
||||||
|
|
||||||
|
|
||||||
|
$link = $storeFilename;
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
// új kategória felvétele, ha megadták
|
||||||
|
if( $_POST["ujkat"] != "" ){
|
||||||
|
if(hun()){
|
||||||
|
$nevhun = $_POST["ujkat"];
|
||||||
|
$neveng = "";
|
||||||
|
}else{
|
||||||
|
$nevhun = "";
|
||||||
|
$neveng = $_POST["ujkat"];
|
||||||
|
}
|
||||||
|
|
||||||
|
$kat_id = $this->muser->new_kategoria('project',$nevhun,$neveng);
|
||||||
|
}else{
|
||||||
|
$kat_id = $_POST["kategoria"];
|
||||||
|
}
|
||||||
|
|
||||||
|
|
||||||
|
// Felvétel az adatbázisba
|
||||||
|
if(!$error){
|
||||||
|
$ujpr->email = $_POST["projectEmailField"];
|
||||||
|
$ujpr->title = $_POST["projhectNameField"];
|
||||||
|
$ujpr->meret = $prSize;
|
||||||
|
$ujpr->datum = date('Y-m-d H:i:s',time());
|
||||||
|
$ujpr->nyelv = $lang;
|
||||||
|
$ujpr->kep = $kep;
|
||||||
|
$ujpr->kategoria = $kat_id;
|
||||||
|
$ujpr->text = $_POST["projectDescriptionField"];
|
||||||
|
$ujpr->project = $link;
|
||||||
|
$ujpr->eredeti = $parameterbe;
|
||||||
|
$ujpr->szerzo = $_POST["SzerzoField"];
|
||||||
|
$ujpr->kat_id = $kat_id;
|
||||||
|
|
||||||
|
$this->mprojects->newproject($ujpr);
|
||||||
|
|
||||||
|
// print "<br /> <b>Új projekt felvéve</b>";
|
||||||
|
// print_r($ujpr);
|
||||||
|
}else{
|
||||||
|
//print "<br /> <b>Nem került adat az adatbázisba</b>";
|
||||||
|
//print $error;
|
||||||
|
}
|
||||||
|
|
||||||
|
//ha nem volt print:
|
||||||
|
redirect('projects/kategoria/'.$kat_id);
|
||||||
|
}
|
||||||
|
|
||||||
|
function ekezet($input){
|
||||||
|
$mit = array("/á/", "/Á/", "/é/", "/É/", "/í/", "/Í/", "/ö/", "/Ö/", "/ő/", "/Ő/", "/ó/", "/Ó/", "/ú/", "/Ú/", "/ü/", "/Ü/", "/ű/", "/Ű/", "/ /");
|
||||||
|
$mire = array("a", "A", "e", "E", "i", "I", "o", "O", "o", "O", "o", "O", "u", "U", "u", "U", "u", "U", "_");
|
||||||
|
$output = preg_replace($mit, $mire, $input);
|
||||||
|
return $output;
|
||||||
|
}
|
||||||
|
|
||||||
|
function kep(&$kep){
|
||||||
|
if ($_FILES["kep"]["error"]==0){
|
||||||
|
$lang = $this->muser->user['lang'];
|
||||||
|
$kepnev = time()."_". $_FILES["kep"]["name"];
|
||||||
|
$ide= "public/img/projects/".$lang."/".$kepnev;
|
||||||
|
if (copy($_FILES["kep"]["tmp_name"],$ide)){
|
||||||
|
$kep = $ide;
|
||||||
|
}
|
||||||
|
}
|
||||||
|
}
|
||||||
|
|
||||||
|
|
||||||
|
}
|
||||||
|
|
||||||
|
?>
|
||||||
@ -0,0 +1,15 @@
|
|||||||
|
{
|
||||||
|
"finding_ref": "5448",
|
||||||
|
"log_excerpt": "[quarantine] www.cadline.hu:application/controllers/projects.php -> quarantined (dest=/var/lib/web-hids/quarantine/var/www/hosting/cadline.hu/www/application/controllers/projects.php)",
|
||||||
|
"original_sha256": "b42c1a5d2f1fefe1598248fc7213915e840173c5196c1022ec40dde2d01446a6",
|
||||||
|
"original_stat": {
|
||||||
|
"gid": 30037,
|
||||||
|
"mtime": 1396359078,
|
||||||
|
"size": 11689,
|
||||||
|
"uid": 11669
|
||||||
|
},
|
||||||
|
"rel_path": "application/controllers/projects.php",
|
||||||
|
"result": "quarantined",
|
||||||
|
"timestamp": "20260718T160424Z",
|
||||||
|
"vhost": "www.cadline.hu"
|
||||||
|
}
|
||||||
2367
var/www/hosting/cadline.hu/www/application/controllers/testforum.php
Executable file
2367
var/www/hosting/cadline.hu/www/application/controllers/testforum.php
Executable file
File diff suppressed because it is too large
Load Diff
@ -0,0 +1,15 @@
|
|||||||
|
{
|
||||||
|
"finding_ref": "5451",
|
||||||
|
"log_excerpt": "[quarantine] www.cadline.hu:application/controllers/testforum.php -> quarantined (dest=/var/lib/web-hids/quarantine/var/www/hosting/cadline.hu/www/application/controllers/testforum.php)",
|
||||||
|
"original_sha256": "b56e2ebdd92c705cfee85f13a961ad4cc6a3811524f511e5f65b6bc0d7218fa2",
|
||||||
|
"original_stat": {
|
||||||
|
"gid": 30037,
|
||||||
|
"mtime": 1396359078,
|
||||||
|
"size": 69757,
|
||||||
|
"uid": 11669
|
||||||
|
},
|
||||||
|
"rel_path": "application/controllers/testforum.php",
|
||||||
|
"result": "quarantined",
|
||||||
|
"timestamp": "20260718T160424Z",
|
||||||
|
"vhost": "www.cadline.hu"
|
||||||
|
}
|
||||||
@ -0,0 +1,102 @@
|
|||||||
|
<?php
|
||||||
|
|
||||||
|
function feltolt($mezo,$hova,$fajlnev,$ekezet=false){
|
||||||
|
if($_FILES[$mezo]["error"]==0){
|
||||||
|
|
||||||
|
if($ekezet===true)
|
||||||
|
$fajlnev = ekezet($fajlnev);
|
||||||
|
elseif($ekezet=="irasjel")
|
||||||
|
$fajlnev = irasjel($fajlnev);
|
||||||
|
|
||||||
|
$ide= $hova.$fajlnev;
|
||||||
|
$kep = false;
|
||||||
|
if( file_exists($ide) ){
|
||||||
|
$x = explode('.', $fajlnev);
|
||||||
|
$ext = end($x);
|
||||||
|
|
||||||
|
$alap = substr($fajlnev,0,-(strlen($ext)+1));
|
||||||
|
|
||||||
|
for ($i = 1; $i < 100; $i++){
|
||||||
|
if ( !file_exists($hova.$alap.$i.".".$ext)){
|
||||||
|
$fajlnev = $alap.$i.".".$ext;
|
||||||
|
$ide= $hova.$fajlnev;
|
||||||
|
break;
|
||||||
|
}
|
||||||
|
}
|
||||||
|
}
|
||||||
|
if (copy($_FILES[$mezo]["tmp_name"],$ide)){
|
||||||
|
$kep = $ide;
|
||||||
|
}else{
|
||||||
|
$kep = false;
|
||||||
|
}
|
||||||
|
|
||||||
|
|
||||||
|
return $kep;
|
||||||
|
}
|
||||||
|
|
||||||
|
return false;
|
||||||
|
}
|
||||||
|
|
||||||
|
function ekezet($input){
|
||||||
|
$mit = array("/á/", "/Á/", "/é/", "/É/", "/í/", "/Í/", "/ö/", "/Ö/", "/ő/", "/Ő/", "/ó/", "/Ó/", "/ú/", "/Ú/", "/ü/", "/Ü/", "/ű/", "/Ű/", "/ /");
|
||||||
|
$mire = array("a", "A", "e", "E", "i", "I", "o", "O", "o", "O", "o", "O", "u", "U", "u", "U", "u", "U", "_");
|
||||||
|
$output = preg_replace($mit, $mire, $input);
|
||||||
|
return $output;
|
||||||
|
}
|
||||||
|
|
||||||
|
function irasjel($input){
|
||||||
|
$mit = array("/ /", "/'/", '/"/', "/,/","/\//");
|
||||||
|
$mire = array("_", "", "", "_", "_");
|
||||||
|
$output = preg_replace($mit, $mire, $input);
|
||||||
|
return $output;
|
||||||
|
}
|
||||||
|
|
||||||
|
function athelyez($honnan,$hova,$ekezet=false){
|
||||||
|
if($ekezet)
|
||||||
|
$hova = ekezet($hova);
|
||||||
|
|
||||||
|
$fajl = false;
|
||||||
|
|
||||||
|
if( file_exists($hova) ){
|
||||||
|
$x = explode('.', $hova);
|
||||||
|
$ext = end($x);
|
||||||
|
|
||||||
|
$alap = substr($hova,0,-(strlen($ext)+1));
|
||||||
|
|
||||||
|
for ($i = 1; $i < 100; $i++){
|
||||||
|
if ( !file_exists($alap.$i.".".$ext)){
|
||||||
|
$hova = $alap.$i.".".$ext;
|
||||||
|
break;
|
||||||
|
}
|
||||||
|
}
|
||||||
|
}
|
||||||
|
|
||||||
|
if(copy($honnan,$hova)){
|
||||||
|
$fajl = $hova;
|
||||||
|
exec("rm ".$honnan);
|
||||||
|
}else{
|
||||||
|
$fajl = false;
|
||||||
|
}
|
||||||
|
|
||||||
|
|
||||||
|
return $fajl;
|
||||||
|
}
|
||||||
|
|
||||||
|
function urlazon($input){
|
||||||
|
// szóköz csere + kisbetű
|
||||||
|
$subject = str_replace(' ','-',strtolower($input));
|
||||||
|
|
||||||
|
// magyar ékezetek cseréje
|
||||||
|
$subject = ekezet($subject);
|
||||||
|
|
||||||
|
$pattern = '/[-_a-z1-9]*/';
|
||||||
|
preg_match_all($pattern, $subject, $matches, PREG_OFFSET_CAPTURE);
|
||||||
|
$ret = "";
|
||||||
|
foreach($matches[0] as $m)
|
||||||
|
if($m[0])
|
||||||
|
$ret .= $m[0];
|
||||||
|
|
||||||
|
return $ret;
|
||||||
|
}
|
||||||
|
|
||||||
|
?>
|
||||||
@ -0,0 +1,15 @@
|
|||||||
|
{
|
||||||
|
"finding_ref": "5509",
|
||||||
|
"log_excerpt": "[quarantine] www.cadline.hu:application/helpers/sajatfeltolto.php -> quarantined (dest=/var/lib/web-hids/quarantine/var/www/hosting/cadline.hu/www/application/helpers/sajatfeltolto.php)",
|
||||||
|
"original_sha256": "75359fbae41809f21d9fb056c84ae525b579ad78f2e688033c3ac583b9dba833",
|
||||||
|
"original_stat": {
|
||||||
|
"gid": 30037,
|
||||||
|
"mtime": 1403182246,
|
||||||
|
"size": 2184,
|
||||||
|
"uid": 11669
|
||||||
|
},
|
||||||
|
"rel_path": "application/helpers/sajatfeltolto.php",
|
||||||
|
"result": "quarantined",
|
||||||
|
"timestamp": "20260718T160424Z",
|
||||||
|
"vhost": "www.cadline.hu"
|
||||||
|
}
|
||||||
Some files were not shown because too many files have changed in this diff Show More
Loading…
Reference in New Issue
Block a user