prevents debug users from exploring system's directory structure
* ex: $root = $_SERVER['DOCUMENT_ROOT'];
*/
function path($dir) {
return mb_substr($dir,-1)=='/' ? $dir : $dir.'/';
}
function is_top($dir) {
global $root;
return strlen($dir)>strlen($root);
}
function is_low($dir) {
global $root;
return substr($dir,0,strlen($root))==$root;
}
$root = path(realpath($_POST['root']));
if (!$root) exit("ERROR: Root filesystem directory not set in jqueryFileTree.php");
$docroot = '/usr/local/emhttp';
require_once "$docroot/webGui/include/Secure.php";
$rootdir = path(realpath($_POST['dir']));
$filters = (array)($_POST['filter']);
$match = unbundle($_POST['match']);
$checkbox = $_POST['multiSelect']=='true' ? "" : "";
echo "";
if ($_POST['show_parent']=='true' && is_top($rootdir)) echo "- $checkbox..
";
if (is_low($rootdir) && is_dir($rootdir)) {
$names = array_filter(scandir($rootdir),function($n){return $n!='.' && $n!='..';});
if (count($names)) {
natcasesort($names);
foreach ($names as $dir) if (is_dir($rootdir.$dir)) {
$htmlRel = htmlspecialchars($rootdir.$dir);
$htmlName = htmlspecialchars(mb_strlen($dir)<=33 ? $dir : mb_substr($dir,0,33).'...');
echo "- $checkbox$htmlName
";
}
foreach ($names as $file) if (is_file($rootdir.$file)) {
$htmlRel = htmlspecialchars($rootdir.$file);
$htmlName = htmlspecialchars($file);
$ext = mb_strtolower(pathinfo($file)['extension']);
foreach ($filters as $filter) if (empty($filter)||$ext==$filter) {
if (empty($match)||preg_match("/$match/",$file)) echo "- $checkbox$htmlName
";
}
}
}
}
echo "
";
?>