upload.php

泛微协同办公系统标准版E-office V5.5的源代码内含泛微办公系统V5.5自动注册文件。

<?php

function rolesuffix( $suffix )
{
	$role = "JPG|BMP|PNG|GIF";
	$pos = strpos( $role, strtoupper( $suffix ) );
	if ( $pos === false )
	{
		return false;
	}
	return true;
}

function limitsize( $size )
{
	$limit = 2097152;
	if ( $limit < $size )
	{
		return false;
	}
	return true;
}

function last_index_of( $sub_str, $instr )
{
	if ( strstr( $instr, $sub_str ) != "" )
	{
		return strlen( $instr ) - strpos( strrev( $instr ), $sub_str );
	}
	return -1;
}

function filetypepic( $sFileName )
{
	$sFileName = strtoupper( $sFileName );
	preg_match( "/\\.([a-zA-Z]{2,4})\$/", $sFileName, $sExt );
	switch ( $sExt[1] )
	{
	case "TXT" :
		$sPicName = "txt.gif";
		break;
	case "CHM" :
	case "HLP" :
		$sPicName = "hlp.gif";
		break;
	case "DOC" :
		$sPicName = "doc.gif";
		break;
	case "PDF" :
		$sPicName = "pdf.gif";
		break;
	case "MDB" :
		$sPicName = "mdb.gif";
		break;
	case "GIF" :
	case "JPG" :
	case "PNG" :
	case "BMP" :
		$sPicName = "pic.gif";
		break;
	case "ASP" :
	case "JSP" :
	case "JS" :
	case "PHP" :
	case "ASPX" :
		$sPicName = "code.gif";
		break;
	case "HTM" :
	case "HTML" :
	case "SHTML" :
		$sPicName = "htm.gif";
		break;
	case "ZIP" :
	case "RAR" :
		$sPicName = "zip.gif";
		break;
	case "EXE" :
		$sPicName = "exe.gif";
		break;
	case "AVI" :
	case "MPG" :
	case "MPEG" :
	case "ASF" :
		$sPicName = "mp.gif";
		break;
	case "RA" :
	case "RM" :
		$sPicName = "rm.gif";
		break;
	case "MID" :
	case "WAV" :
	case "MP3" :
	case "MIDI" :
		$sPicName = "audio.gif";
		break;
	case "XLS" :
		$sPicName = "xls.gif";
		break;
	case "PPT" :
	case "PPS" :
		$sPicName = "ppt.gif";
		break;
	default :
		$sPicName = "unknow.gif";
	}
	return "theme/max/attach/".$sPicName;
}

function isdir( $fix_dir, $create_dir = "" )
{
	if ( $create_dir != "" )
	{
		$dir_y = $fix_dir.date( "Y", strtotime( $create_dir ) );
		$dir_m = $dir_y."/".date( "m", strtotime( $create_dir ) );
		$dir_d = $dir_m."/".date( "d", strtotime( $create_dir ) );
	}
	else
	{
		$dir_y = $fix_dir.date( "Y" );
		$dir_m = $dir_y."/".date( "m" );
		$dir_d = $dir_m."/".date( "d" );
	}
	if ( !is_dir( $dir_y ) )
	{
		mkdir( $dir_y, 511 );
		chown( $dir_y, "nobody" );
	}
	if ( !is_dir( $dir_m ) )
	{
		mkdir( $dir_m, 511 );
		chown( $dir_m, "nobody" );
	}
	if ( !is_dir( $dir_d ) )
	{
		mkdir( $dir_d, 511 );
		chown( $dir_d, "nobody" );
	}
	$re_dir = $dir_d;
	return $re_dir."/";
}

function isname( $fix = "", $id, $subfix = "html" )
{
	if ( intval( $id ) < 0 )
	{
		return false;
	}
	$id = trim( $id );
	$str = $fix.$id;
	$filename = md5( $str ).".".$subfix;
	return $filename;
}

include_once( "inc/conn.php" );
$tmroot = get_cfg_var( "doc_root" );
define( "ROOT_PATH", $tmroot."/" );
define( "UPLOAD_DIR", ROOT_PATH."attachment/editor/" );
$rooturl = "http://".$_SERVER['HTTP_HOST']."/";
$uploaddir = isdir( UPLOAD_DIR, $create_dir = "" );
if ( $uploadfile != "" )
{
	$oldFileName = $_FILES['uploadfile']['name'];
	preg_match( "/\\.([a-zA-Z]{2,4})\$/", $oldFileName, $arrayT );
	$suffix = $arrayT[1];
	$fileSize = $_FILES['uploadfile']['size'];
	if ( !rolesuffix( $suffix ) )
	{
		$errmsg = "上传的文件不是图形文件！";
		header( "location:img.php?errmsg=".$errmsg );
		exit( );
	}
	if ( !limitsize( $fileSize ) )
	{
		$errmsg = "上传的文件超过2M！";
		header( "location:img.php?errmsg=".$errmsg );
		exit( );
	}
	$fileType = $_FILES['uploadfile']['type'];
	$pos = last_index_of( ".", $_FILES['uploadfile']['name'] );
	$GLOBALS['_FILES']['uploadfile']['name'] = substr( $_FILES['uploadfile']['name'], $pos - 1 );
	$sNewFileName = time( ).$_FILES['uploadfile']['name'];
	move_uploaded_file( $_FILES['uploadfile']['tmp_name'], $uploaddir.$sNewFileName );
}
$strFileURL = $uploaddir.$sNewFileName;
$nowdatetime = date( "Y-m-d H:i:s" );
$iconURL = filetypepic( $sNewFileName );
$filenote = $_REQUEST['filenote'];
$fileRelativeUrl = str_replace( ROOT_PATH, "", $strFileURL );
$fileAbsUrl = $rooturl.$fileRelativeUrl;
$sql = "\r\n       INSERT INTO editor_attachment\r\n\t      (EA_NAME,EA_DATETIME,EA_SIZE,EA_URL,EA_SUFFIX,EA_TYPE,EA_OLDNAME,EA_ICON,EA_NOTE) \r\n\t\t  VALUES \r\n\t\t  ('{$sNewFileName}','{$nowdatetime}','{$fileSize}','{$fileAbsUrl}','{$suffix}','{$fileType}','{$oldFileName}','{$iconURL}','{$filenote}')\r\n       ";
exequery( $connection, $sql );
$keylink = "img.php?iurl=".$fileAbsUrl;
header( "location:".$keylink );
?>