data('widget-document-root');
$root = !empty($root) ? ': '.$root.')':'';
$widget->title = 'Mes documents'.$root;
ob_start();
require_once(__DIR__.SLASH.'widget.php');
$widget->content = ob_get_clean();
echo json_encode($widget);
break;
case 'document_widget_configure_save':
Action::write(function(&$response){
global $myUser,$_;
require_once(PLUGIN_PATH.'dashboard'.SLASH.'DashboardWidget.class.php');
User::check_access('document','configure');
$widget = DashboardWidget::getById($_['id']);
$widget->data('widget-document-tree',$_['widget-document-tree']);
$widget->data('widget-document-detail',$_['widget-document-detail']);
$widget->data('widget-document-search',$_['widget-document-search']);
$root = str_replace(array('./','../'),'',$_['widget-document-root']);
$widget->data('widget-document-root',$root);
$widget->save();
});
break;
case 'document_widget_configure':
global $myUser;
require_once(PLUGIN_PATH.'dashboard'.SLASH.'DashboardWidget.class.php');
$widget = DashboardWidget::current();
ob_start();
require_once(__DIR__.SLASH.'widget.configure.php');
$content = ob_get_clean();
echo $content ;
break;
case 'document_embedded':
Action::write(function(&$response){
Plugin::addCss("/css/main.css");
Plugin::addJs("/js/main.js");
ob_start();
global $myUser,$_;
$embedded = true;
//l'ui de la ged prend en entrée / quel que soit l'os
if(isset($_['data']['root'])) $_['data']['root'] = str_replace('\\', '/', $_['data']['root']);
require_once(__DIR__.SLASH.'page.list.php');
$response['html'] = ob_get_clean();
});
break;
case 'document_folder_create':
Action::write(function(&$response){
global $myUser,$_,$conf;
User::check_access('document','edit');
require_once(__DIR__.SLASH.'Element.class.php');
$path = str_replace('/',SLASH,$_['path']);
$path = Element::root().$path;
if(!document_check_element_name(htmlspecialchars_decode(html_entity_decode($_['folder']), ENT_QUOTES))) throw new Exception("Caractères interdits : \\/:*?\"<>|");
if(strlen($_['folder']) > 80) throw new Exception("Taille maximale autorisée de 80 caractères.");
Element::addFolder($path);
if($conf->get('document_enable_logs')) Log::put("Création d'un dossier : ".$path,'document');
});
break;
/** ELEMENT **/
//Récuperation d'une liste de element
case 'document_element_search':
Action::write(function(&$response){
global $myUser,$_,$conf;
User::check_access('document','read');
require_once(__DIR__.SLASH.'Element.class.php');
//recherche par libellé
if(!empty($_['keyword'])){
$query = 'SELECT * FROM {{table}} WHERE 1';
$data = $elements = array();
$query .= ' AND label LIKE ?';
$data[] = '%'.$_['keyword'].'%';
$folder = isset($_['folder']) && !empty($_['folder']) ? $_['folder'] : '.';
if(isset($_['folder']) && !empty($_['folder']))
$query .= ' AND `path` LIKE "'.$_['folder'].'%'.'"';
//Tri des colonnes
if(isset($_['sort'])) sort_secure_query($_['sort'],array('label','creator','size'),$query,$data);
$response['qry'] = $query;
foreach (Element::staticQuery($query,$data,true) as $element) {
// Check pour ne pas faire ressortir le dossier lui même
if ($element->path == $folder) continue;
$elemPath =str_replace(SLASH.'.'.SLASH,SLASH,Element::root().$element->path) ;
$line = Element::fromPath($elemPath);
$line->path = rtrim($line->path, SLASH);
$osPath = Element::root().str_replace('/',SLASH,$line->path);
if(!file_exists($osPath)){
Element::deleteById($line->id);
continue;
}
$row = $line->toArray();
$row['updatedRelative'] = relative_time($line->updated);
$row['sizeReadable'] = $row['type'] == 'directory' ? $line->childNumber.' élements' : readable_size($line->size);
$row['updatedReadable'] = day_name(date('N',$line->updated)).' '. date('d ',$line->updated).month_name(date('m',$line->updated)).date(' Y à H:i',$line->updated);
$row['thumbnail'] = $line->thumbnail();
$row['icon'] = $line->icon();
$row['childNumber'] = $line->childNumber;
$elements[] = $row;
}
$response['rows'] = $elements;
//recherche par arborescence
}else{
if(isset($_['folder']) && !empty($_['folder'])){
$folder = str_replace('/',SLASH,$_['folder']);
}else {
$folder = '.';
if(isset($_['root'])) $folder = str_replace('/',SLASH,$_['root']);
}
$response['rows'] = array();
$scanned = Element::root().$folder.SLASH.'*';
//L'ui ne traite que les / quel que soit l'os
foreach (Element::browse($scanned) as $line) {
$line->path = str_replace('\\', '/', $line->path);
$row = $line->toArray();
$row['updatedRelative'] = relative_time($line->updated);
$row['sizeReadable'] = $row['type'] == 'directory' ? $line->childNumber.' élements' : readable_size($line->size);
$row['updatedReadable'] = day_name(date('N',$line->updated)).' '. date('d ',$line->updated).month_name(date('m',$line->updated)).date(' Y à H:i',$line->updated);
$row['thumbnail'] = $line->thumbnail();
$row['icon'] = $line->icon();
$row['childNumber'] = $line->childNumber;
$response['rows'][] = $row;
}
//tri du résultat si demandé
if(isset($_['sort'])){
$direction = $_['sort']['sort'] == 'asc' ? 1:-1 ;
//le in_array permet de s'assurer qu'une colonne triable est spécifiée
$attribute = in_array($_['sort']['column'],array('label','size','creator','updated'))? $_['sort']['column']: 'label';
usort($response['rows'],function($a,$b) use($attribute,$direction){
if($a[$attribute] > $b[$attribute]) return 1*$direction;
if($a[$attribute] < $b[$attribute]) return -1*$direction;
if($a[$attribute] == $b[$attribute]) return 0;
});
}
if($conf->get('document_enable_logs_verbose')) Log::put('Ouverture du dossier '.str_replace(array('/','\\',SLASH.'.'.SLASH.'*'),array(SLASH,SLASH,''),$scanned).' ','document');
}
});
break;
case 'document_element_preview':
Action::write(function(&$response){
global $myUser,$_;
User::check_access('document','read');
require_once(__DIR__.SLASH.'Element.class.php');
//l'ui ne renvois que les /, on les convertis par le separateur de l'os
$_['path'] = str_replace('/', SLASH, $_['path']);
$path = str_replace(SLASH.'.'.SLASH,SLASH,Element::root().$_['path']);
$osPath = File::convert_decoding($path);
if(!file_exists($osPath)) throw new Exception('Cet élément a peut-être été modifié ou déplacé par quelqu\'un d\'autre. Rafraîchissez la page et réessayez.');
$element = Element::fromPath($path);
//L'ui ne traite que les / quel que soit l'os
$element->path = str_replace('\\', '/', $element->path);
$row = $element->toArray();
$row['updatedRelative'] = relative_time($element->updated);
$row['sizeReadable'] = readable_size($element->size);
$row['updatedReadable'] = day_name(date('N',$element->updated)).' '. date('d ',$element->updated).month_name(date('m',$element->updated)).date(' Y à H:i',$element->updated);
$row['thumbnail'] = $element->thumbnail();
$row['icon'] = $element->icon();
$row['childNumber'] = $element->childNumber;
$response['row'] = $row;
});
break;
case 'document_properties_show':
Action::write(function(&$response){
global $myUser,$_;
User::check_access('document','read');
require_once(__DIR__.SLASH.'Element.class.php');
$element = Element::provide();
$element->path = str_replace('\\', '/', $element->path);
$row = $element->toArray();
$row['createdLabel'] = date('d/m/Y H:i',$element->updated);
$row['updatedLabel'] = date('d/m/Y H:i',$element->updated);
$bundle = base64_encode(json_encode(array(
'root' => $element->path,
'folder' => '',
)));
$row['rootUrl'] = ROOT_URL.'/index.php?module=document&data='.$bundle;
$response['row'] = $row;
});
break;
case 'document_element_execute':
global $myUser,$_,$conf;
User::check_access('document','read');
require_once(__DIR__.SLASH.'Element.class.php');
$isopath = Element::root().base64_decode(rawurldecode($_['path']));
$utf8Path = utf8_encode($isopath);
$osPath = strtoupper(substr(PHP_OS, 0, 3)) === 'WIN' ? $isopath : $utf8Path;
$stream = Element::download($utf8Path);
$name = mt_basename($utf8Path);
$mime = 'application/octet-stream';
if(is_dir($osPath)){
$mime = 'application/zip';
$name .= '.zip';
}
if($conf->get('document_enable_logs_verbose')) Log::put('Téléchargement de '.$utf8Path,'document');
File::downloadStream($stream, $name, $mime);
break;
case 'document_element_move':
Action::write(function(&$response){
global $myUser,$_,$conf;
User::check_access('document','edit');
require_once(__DIR__.SLASH.'Element.class.php');
//l'ui ne renvois que les /, on les convertis par le separateur de l'os
$_['from'] = str_replace('/', SLASH, $_['from']);
$_['to'] = str_replace('/', SLASH, $_['to']);
$from = Element::root().$_['from'];
$osFrom = File::convert_decoding($from);
if(!file_exists($osFrom)) throw new Exception('Cet élément a peut-être été modifié ou déplacé par quelqu\'un d\'autre. Rafraîchissez la page et réessayez.');
//if($_['to']=='.') $_['to'] = '';
$to = Element::root().$_['to'];
$osTo = File::convert_decoding($to);
if(!is_dir($osTo)) return;
if(!document_check_element_name(basename(htmlspecialchars_decode(html_entity_decode($to), ENT_QUOTES)))) throw new Exception("Caractères interdits : \\/:*?\"<>|");
$to .= SLASH.basename($from);
$element = Element::move($from,$to);
$response['element'] = $element;
if($conf->get('document_enable_logs')) Log::put('Déplacement de '.$from.' dans '.$to,'document');
});
break;
case 'document_element_rename':
Action::write(function(&$response){
global $myUser,$_,$conf;
User::check_access('document','edit');
require_once(__DIR__.SLASH.'Element.class.php');
//les exception vides reset le champ de l'ui sans afficher d'erreur
if(!isset($_['label']) || empty($_['label'])) throw new Exception("Le nom ne dois pas être vide");
if(strlen($_['label']) > 80) throw new Exception("Taille maximale autorisée de 80 caractères.");
//l'ui ne renvois que les /, on les convertis par le separateur de l'os
$_['path'] = str_replace('/', SLASH, $_['path']);
$from = Element::root().$_['path'];
$fromOs = File::convert_decoding($from);
if(!file_exists($fromOs)) throw new Exception('Cet élément a peut-être été modifié ou déplacé par quelqu\'un d\'autre. Rafraîchissez la page et réessayez.');
if(is_dir($fromOs) && substr($_['label'], -1,1)=='.') throw new Exception("Les dossiers ne peuvent pas terminer par un .");
$to = dirname($from).SLASH.$_['label'];
if(file_exists($to)) throw new Exception('Action impossible, un élément existe déjà avec ce nom.');
if(!document_check_element_name(htmlspecialchars_decode(html_entity_decode($_['label']), ENT_QUOTES))) throw new Exception("Caractères interdits : \\/:*?\"<>|");
$element = Element::move($from,$to);
if(!$element) throw new Exception("Erreur lors de la récuperation de l'élement renommé", 500);
$element->path = str_replace('\\', '/', $element->path);
$response['element'] = $element;
if($conf->get('document_enable_logs') ) Log::put('Renommage de l\'élément : '.$from.' en '.$to,'document');
});
break;
case 'document_element_delete':
Action::write(function(&$response){
global $myUser,$_,$conf;
User::check_access('document','delete');
require_once(__DIR__.SLASH.'Element.class.php');
//l'ui ne renvois que les /, on les convertis par le separateur de l'os
$path = Element::root().str_replace('/', SLASH,$_['path']);
$osPath = File::convert_decoding($path);
if(!file_exists($osPath)) throw new Exception('Cet élément a peut-être été modifié ou déplacé par quelqu\'un d\'autre. Rafraîchissez la page et réessayez.');
Element::remove($path);
$extension = getExt($path);
if( in_array($extension, array('jpg','jpeg','png','gif','bmp'))) {
$thumbname = str_replace(array('\\'),array('/'),$_['path']);
$thumbpath = Element::root().'.thumbnails'.SLASH.base64_encode($thumbname).'.'.$extension;
if(file_exists($thumbpath)) unlink($thumbpath);
}
if($conf->get('document_enable_logs')) Log::put("Suppression d'un élément : ".$path,'document');
});
break;
//edition d'un fichier (chargement)
case 'document_element_edit':
Action::write(function(&$response){
global $myUser,$_,$conf;
User::check_access('document','edit');
require_once(__DIR__.SLASH.'Element.class.php');
if(!isset($_['path'])) throw new Exception("Veuillez spécifier le chemin du fichier");
$path = str_replace(array('..'),'',$_['path']);
$path = Element::root().$path;
$osPath = File::convert_decoding($path);
if(!file_exists($osPath)) throw new Exception("Impossible de trouver le fichier, peut être a t-il été supprimé entree temps, veuillez recharger la page.");
$response['path'] = $path;
$response['label'] = mt_basename($path);
$response['content'] = Element::download($path);
});
break;
//edition d'un fichier (sauvegarde)
case 'document_element_save':
Action::write(function(&$response){
global $myUser,$_,$conf;
User::check_access('document','edit');
require_once(__DIR__.SLASH.'Element.class.php');
if(!isset($_['label'])) throw new Exception("Veuillez spécifier le nom du fichier");
$label = str_replace(array('..','/','\\'),'',$_['label']);
$path = Element::root().$_['path'].SLASH;
$osPath = File::convert_decoding($path);
$content = html_entity_decode($_['content']);
$maxSize = $conf->get('document_allowed_size');
$extensions = explode(',',str_replace(' ', '', $conf->get('document_allowed_extensions')));
$extension = getExt($_['label']);
if(strlen($content) > $maxSize) throw new Exception("Taille du fichier ".$_['label']." trop grande, taille maximum :".readable_size($maxSize).' ('.$maxSize.' octets)');
if(!in_array($extension , $extensions)) throw new Exception("Extension '".$extension."' du fichier ".$_['label']." non permise, autorisé :".implode(', ',$extensions));
$filePath = $path.$_['label'];
Element::addFile($filePath,$content);
});
break;
//upload d'un fichier
case 'document_element_upload':
Action::write(function(&$response){
global $myUser,$_,$conf;
User::check_access('document','edit');
require_once(__DIR__.SLASH.'Element.class.php');
$response['sort'] = $_['sort'];
if(empty($_FILES)) throw new Exception("Aucun document à importer");
$path = Element::root().$_['path'].SLASH;
$osPath = File::convert_decoding($path);
if(!file_exists($osPath)) throw new Exception("Dossier ".$osPath." introuvable");
$maxSize = $conf->get('document_allowed_size');
$extensions = explode(',',str_replace(' ', '', $conf->get('document_allowed_extensions')));
$extension = getExt($_FILES['file']['name'][0]);
if($_FILES['file']['size'][0] > $maxSize) throw new Exception("Taille du fichier ".$_FILES['file']['name'][0]." trop grande, taille maximum :".readable_size($maxSize).' ('.$maxSize.' octets)');
if(!in_array($extension , $extensions)) throw new Exception("Extension '".$extension."' du fichier ".$_FILES['file']['name'][0]." non permise, autorisé :".implode(', ',$extensions));
if($_['method'] == 'paste') $_FILES['file']['name'][0] = 'presse papier '.date('d-m-Y H-i-s').'.'.$extension;
$filePath = $path.$_FILES['file']['name'][0];
if(!file_exists($_FILES['file']['tmp_name'][0])) throw new Exception("Fichier temporaire n°".$_['sort']." inexistant, verifiez la clause upload_max_size de PHP.");
Element::addFile($filePath,file_get_contents($_FILES['file']['tmp_name'][0]));
if($conf->get('document_enable_logs')) Log::put("Upload d'un élément : ".$filePath,'document');
});
break;
//Sauvegarde des configurations de document
case 'document_setting_save':
Action::write(function(&$response){
global $myUser,$_,$conf;
User::check_access('document','configure');
foreach(Configuration::setting('document') as $key=>$value){
if(!is_array($value)) continue;
$allowed[] = $key;
}
foreach ($_['fields'] as $key => $value)
if(in_array($key, $allowed)) $conf->put($key,$value);
});
break;
/** ELEMENTRIGHT **/
//Récuperation d'une liste de elementright
case 'document_right_search':
Action::write(function(&$response){
global $myUser,$_;
User::check_access('document','read');
require_once(__DIR__.SLASH.'ElementRight.class.php');
$rights = ElementRight::loadAll(array('element'=>$_['id']));
foreach($rights as $right){
if($right->entity =='rank'){
$rank = Rank::getById($right->uid);
if(!$rank) continue;
$right->uid = $rank->label.' (rang)';
}
$row = $right->toArray();
if($row['read'] == 0) unset($row['read']);
if($row['edit'] == 0) unset($row['edit']);
if($row['recursive'] == 0) unset($row['recursive']);
$response['rows'][] = $row;
}
});
break;
//Ajout ou modification d'élément elementright
case 'document_right_save':
Action::write(function(&$response){
global $myUser,$_;
User::check_access('document','edit');
require_once(__DIR__.SLASH.'ElementRight.class.php');
require_once(__DIR__.SLASH.'Element.class.php');
if(!isset($_['uid']) || empty($_['uid'])) throw new Exception("UID de partage non spécifié");
$element = Element::provide('element');
if(!$element) throw new Exception("Cet élément n'existe pas",404);
if($element->creator != $myUser->login && !$myUser->can('document','configure') && !$myUser->superadmin) throw new Exception("Vous n'êtes pas propriétaire de cet élement",403);
$item = ElementRight::provide();
$item->element = $element->id;
$item->recursive = isset($_['recursive']) ? $_['recursive'] : 0 ;
$item->edit = isset($_['edit']) ? $_['edit'] : 0 ;
$item->read = isset($_['read']) ? $_['read'] : 0 ;
$item->uid = $_['uid'];
$item->entity = is_numeric($_['uid']) ? 'rank' : 'user';
//supression des anciens droits sur le même couple element / utilisateur si existants
ElementRight::delete(array('element'=>$item->element,'entity'=>$item->entity,'uid'=>$item->uid));
$item->save();
});
break;
//Suppression d'élement elementright
case 'document_right_delete':
Action::write(function(&$response){
global $myUser,$_;
User::check_access('document','delete');
require_once(__DIR__.SLASH.'ElementRight.class.php');
require_once(__DIR__.SLASH.'Element.class.php');
$right = ElementRight::provide('id',1);
$element = $right->join('element');
if(!$element) throw new Exception("Cet élément n'existe pas",404);
if($element->creator != $myUser->login && !$myUser->can('document','configure') && !$myUser->superadmin) throw new Exception("Vous n'etes pas propriétaire de cet élement",403);
ElementRight::deleteById($right->id);
});
break;
}
?>