file.php

一款开源的sns系统源码 安装简单

		$query = "
			SELECT *
			FROM " . $db->prefix . "_file
			WHERE webspace_id=" . $_REQUEST['ws'] . " AND
			file_md5_name='" . $temp[0] . "'"
		;
	
		$result = $db->Execute($query);
		
		if (isset($result[0]['file_id']) && isset($result[0]['file_type']) && in_array($result[0]['file_type'], array('image/gif', 'image/jpeg', 'image/png'))) {
			
			$image_size = @getimagesize($core_config['file']['dir'] . "files/" . $result[0]['file_md5_name']);
			
			$result[0]['file_width'] = $image_size[0];
			$result[0]['file_height'] = $image_size[1];
			$result[0]['file_md5_name'] .= '_' . $result[0]['file_type'];
			$result[0]['local_path'] = 'components/core/relay/get_file.php?file=' . $result[0]['file_md5_name'];
	
			if (substr($_SERVER["HTTP_HOST"], -1, 1) == "/") {
				$server_path = 'http://' . substr($_SERVER["HTTP_HOST"], 0, -1);
			}
			else {
				$server_path = 'http://' . $_SERVER["HTTP_HOST"];
			}
	
			$result[0]['global_path'] = $server_path . dirname($_SERVER['PHP_SELF']) . '/' . $result[0]['local_path'];
			
			$body->set('file_image', $result[0]);
		}
	}
	elseif (isset($_POST['delete_file']) && !empty($_POST['file_id'])) {
		
		// We need to see if the file is there
		$query = "
			SELECT *
			FROM " . $db->prefix . "_file
			WHERE file_id=" . $_POST['file_id'] . " AND 
			webspace_id=" . $_REQUEST['ws']
		;
	
		$result = $db->Execute($query);
		
		if (isset($result[0]) && isset($result[0]['file_id'])) {
			
			$temp = $result[0]['file_md5_name'];
			if (is_file($core_config['file']['dir'] . "files/" . $temp)) {
				if (@unlink($core_config['file']['dir'] . "files/" . $temp)) {
					if (is_file($core_config['file']['dir'] . "thumbs/" . $temp . '_t')) {
						@unlink($core_config['file']['dir'] . "thumbs/" . $temp . '_t');
					}
					
					// remove the entry from the database
					$query = "
						DELETE
						FROM " . $db->prefix . "_file
						WHERE file_id=" . $result[0]['file_id']
					;
					
					$db->Execute($query);
				}
			}
			else {
				$GLOBALS['am_error_log'][] = array('file_not_deleted');
			}
		}
		else {
			$GLOBALS['am_error_log'][] = array('file_not_deleted_database');
		}
	}
	elseif (isset($_POST['delete_files']) && !empty($_POST['delete_file'])) {
		
		$query = "
			SELECT *
			FROM " . $db->prefix . "_file
			WHERE file_id in (" . implode(', ', array_keys($_POST['delete_file'])) . ")"
		;
		
		$result = $db->Execute($query);
		
		if (isset($result[0])) {
			foreach($result as $r):
				if (is_file($core_config['file']['dir'] . $r['file_md5_name'])) {
					@unlink ($core_config['file']['dir'] . $r['file_md5_name']);
				}
				
				if (is_file($core_config['file']['dir'] . "thumbs/" . $r['file_md5_name'] . '_t')) {
					@unlink ($core_config['file']['dir'] . "thumbs/" . $r['file_md5_name'] . '_t');
				}
			endforeach;
		}
		else {
			$GLOBALS['am_error_log'][] = array('files_not_deleted');
		}
		
		
		$query = "
			DELETE
			FROM " . $db->prefix . "_file
			WHERE webspace_id=" . $_REQUEST['ws'] . " AND
			file_id IN (" . implode(', ', array_keys($_POST['delete_file'])) . ")"
		;
		
		$db->Execute($query);
	}
	
	$output_files = array();
	
	// fetch the files (image) for this webspace
	$query = "
		SELECT *
		FROM " . $db->prefix . "_file
		WHERE webspace_id=" . $_REQUEST['ws'] . " AND
		file_type LIKE 'image/%'
		ORDER BY file_create_datetime DESC"
	;
	
	$result = $db->Execute($query);
	
	if (isset($result)) {
		$output_files['images'] = $result;
	
		foreach ($output_files['images'] as $key => $i):
			$output_files['images'][$key]['file_md5_name'] .= '_' . $i['file_type'];
		endforeach;
	}
	else {
		$GLOBALS['am_error_log'][] = "error 6";
	}
	
	// fetch the files (application) for this webspace
	$query = "
		SELECT *
		FROM " . $db->prefix . "_file
		WHERE webspace_id=" . $_REQUEST['ws'] . " AND
		(file_type LIKE 'application/%' OR file_type LIKE 'text/%')"
	;
	
	if (isset($_REQUEST['sort_by']) && !empty($_REQUEST['sort_by'])) {
		$query .= " ORDER BY " . $_REQUEST['sort_by'];
		
		if (isset($_REQUEST['desc']) && $_REQUEST['desc'] == 1) {
			$query .= " DESC";
		}
	}
	else {
		$query .= " ORDER BY file_create_datetime DESC";
	}
	
	$result = $db->Execute($query);
	
	if (isset($result)) {
		$output_files['application'] = $result;
	
		foreach($output_files['application'] as $key => $i):
			$output_files['application'][$key]['file_md5_name'] .= '_' . $i['file_type'];
			$output_files['application'][$key]['local_path'] = 'components/core/relay/get_file.php?file=' . $i['file_md5_name'] . '_' . $i['file_type'];
			$output_files['application'][$key]['global_path'] = 'http://' . $_SERVER["HTTP_HOST"] . dirname($_SERVER['PHP_SELF']) . '/' . $output_files['application'][$key]['local_path'];
		endforeach;
	}
	else {
		$GLOBALS['am_error_log'][] = "error 9";
	}
	
	// fetch the files (video) for this webspace
	$query = "
		SELECT *
		FROM " . $db->prefix . "_file
		WHERE webspace_id=" . $output_webspace['webspace_id'] . " AND
		file_type LIKE 'video/%'
		ORDER BY file_create_datetime DESC"
	;
	
	$result = $db->Execute($query);
	
	if (isset($result)) {
		$output_files['video'] = $result;
	
		foreach($output_files['video'] as $key => $i):
			$output_files['video'][$key]['file_md5_name'] .= '_' . $i['file_type'];
		endforeach;
	}
	else {
		$GLOBALS['am_error_log'][] = "error 9";
	}
	
	
	
	if (!empty($output_files)) {
		$body->set('files', $output_files);
	}
	
	
	// file statistics
	$allocation = array();
	$allocation['allocation'] = 0;
	$allocation['allocation_used'] = 0;
	
	$query = "
		SELECT webspace_allocation
		FROM " . $db->prefix . "_webspace
		WHERE webspace_id=" . $_REQUEST['ws']
	;
	
	$result = $db->Execute($query);
	
	if (isset($result[0])) {
		$allocation['allocation'] = $result[0]['webspace_allocation'];
	}
	
	$query = "
		SELECT SUM(f.file_size) AS allocation_used
		FROM " . $db->prefix . "_file f
		WHERE f.webspace_id=" . $_REQUEST['ws']
	;
	
	$result = $db->Execute($query);
	
	if (isset($result[0])) {
		$allocation['allocation_used'] = $result[0]['allocation_used'];
	}
	
	$body->set('file_statistics', $allocation);
}
else { // no permission to be here
	header("Location: index.php?ws=" . $_REQUEST['ws']);
	exit;
}
	

function validateMimeType($mimes, $mime_type) {

	foreach($mimes as $m) {
		if ($m['mime'] == $mime_type) {
			return 1;
		}
	}
	return 0;
}

?>