| '; 25 | $html .= ' | Name | '; 26 | $html .= 'Last modified | '; 27 | $html .= 'Size | '; 28 | $html .= '
|---|---|---|---|
 | ';
33 | $html .= 'Parent Directory | '; 34 | $html .= ''; 35 | $html .= ' | '; 36 | $html .= ' |
 | ';
44 | $html .= '' . basename($item->path) . ' | '; 45 | $html .= '' . date('Y-m-d H:i', $item->date) . ' | '; 46 | $html .= '' . ($item->size !== null ? intval($item->size / 1000) . ' KB' : '' ) . ' | '; 47 | $html .= '
103 |
109 |
110 |
111 |
112 |
117 |
--------------------------------------------------------------------------------
/_h5ai/public/images/themes/comity/txt-rust.svg:
--------------------------------------------------------------------------------
1 |
--------------------------------------------------------------------------------
/_h5ai/public/images/themes/comity/ar-rpm.svg:
--------------------------------------------------------------------------------
1 |
--------------------------------------------------------------------------------
/_h5ai/public/images/ui/paypal.svg:
--------------------------------------------------------------------------------
1 |
--------------------------------------------------------------------------------
/_h5ai/private/php/core/class-api.php:
--------------------------------------------------------------------------------
1 | context = $context;
10 | $this->request = $context->get_request();
11 | $this->setup = $context->get_setup();
12 | }
13 |
14 | public function apply() {
15 | $action = $this->request->query('action');
16 | $supported = ['download', 'get', 'login', 'logout'];
17 | Util::json_fail(Util::ERR_UNSUPPORTED, 'unsupported action', !in_array($action, $supported));
18 |
19 | $methodname = 'on_' . $action;
20 | $this->$methodname();
21 | }
22 |
23 | private function on_download() {
24 | Util::json_fail(Util::ERR_DISABLED, 'download disabled', !$this->context->query_option('download.enabled', false));
25 |
26 | $as = $this->request->query('as');
27 | $type = $this->request->query('type');
28 | $base_href = $this->request->query('baseHref');
29 | $hrefs = $this->request->query('hrefs', '');
30 |
31 | $archive = new Archive($this->context);
32 |
33 | set_time_limit(0);
34 | header('Content-Type: application/octet-stream');
35 | header('Content-Disposition: attachment; filename="' . $as . '"');
36 | header('Connection: close');
37 | $ok = $archive->output($type, $base_href, $hrefs);
38 |
39 | Util::json_fail(Util::ERR_FAILED, 'packaging failed', !$ok);
40 | exit;
41 | }
42 |
43 | private function on_get() {
44 | $response = [];
45 |
46 | foreach (['langs', 'options', 'types'] as $name) {
47 | if ($this->request->query_boolean($name, false)) {
48 | $methodname = 'get_' . $name;
49 | $response[$name] = $this->context->$methodname();
50 | }
51 | }
52 |
53 | if ($this->request->query_boolean('setup', false)) {
54 | $response['setup'] = $this->setup->to_jsono($this->context->is_admin());
55 | }
56 |
57 | if ($this->request->query_boolean('theme', false)) {
58 | $theme = new Theme($this->context);
59 | $response['theme'] = $theme->get_icons();
60 | }
61 |
62 | if ($this->request->query('items', false)) {
63 | $href = $this->request->query('items.href');
64 | $what = $this->request->query_numeric('items.what');
65 | $response['items'] = $this->context->get_items($href, $what);
66 | }
67 |
68 | if ($this->request->query('custom', false)) {
69 | Util::json_fail(Util::ERR_DISABLED, 'custom disabled', !$this->context->query_option('custom.enabled', false));
70 | $href = $this->request->query('custom');
71 | $custom = new Custom($this->context);
72 | $response['custom'] = $custom->get_customizations($href);
73 | }
74 |
75 | if ($this->request->query('l10n', false)) {
76 | Util::json_fail(Util::ERR_DISABLED, 'l10n disabled', !$this->context->query_option('l10n.enabled', false));
77 | $iso_codes = $this->request->query_array('l10n');
78 | $iso_codes = array_filter($iso_codes);
79 | $response['l10n'] = $this->context->get_l10n($iso_codes);
80 | }
81 |
82 | if ($this->request->query('search', false)) {
83 | Util::json_fail(Util::ERR_DISABLED, 'search disabled', !$this->context->query_option('search.enabled', false));
84 | $href = $this->request->query('search.href');
85 | $pattern = $this->request->query('search.pattern');
86 | $ignorecase = $this->request->query_boolean('search.ignorecase', false);
87 | $search = new Search($this->context);
88 | $response['search'] = $search->get_items($href, $pattern, $ignorecase);
89 | }
90 |
91 | if ($this->request->query('thumbs', false)) {
92 | Util::json_fail(Util::ERR_DISABLED, 'thumbnails disabled', !$this->context->query_option('thumbnails.enabled', false));
93 | Util::json_fail(Util::ERR_UNSUPPORTED, 'thumbnails not supported', !$this->setup->get('HAS_PHP_JPEG'));
94 | $thumbs = $this->request->query_array('thumbs');
95 | $response['thumbs'] = $this->context->get_thumbs($thumbs);
96 | }
97 |
98 | Util::json_exit($response);
99 | }
100 |
101 | private function on_login() {
102 | $pass = $this->request->query('pass');
103 | Util::json_exit(['asAdmin' => $this->context->login_admin($pass)]);
104 | }
105 |
106 | private function on_logout() {
107 | Util::json_exit(['asAdmin' => $this->context->logout_admin()]);
108 | }
109 | }
110 |
--------------------------------------------------------------------------------
/_h5ai/public/images/themes/comity/ar-deb.svg:
--------------------------------------------------------------------------------
1 |
--------------------------------------------------------------------------------
/_h5ai/public/images/themes/comity/txt-go.svg:
--------------------------------------------------------------------------------
1 |
--------------------------------------------------------------------------------
/_h5ai/private/php/ext/class-archive.php:
--------------------------------------------------------------------------------
1 | context = $context;
17 | }
18 |
19 | public function output($type, $base_href, $hrefs) {
20 | $this->base_path = $this->context->to_path($base_href);
21 | if (!$this->context->is_managed_path($this->base_path)) {
22 | return false;
23 | }
24 |
25 | $this->dirs = [];
26 | $this->files = [];
27 |
28 | $this->add_hrefs($hrefs);
29 |
30 | if (count($this->dirs) === 0 && count($this->files) === 0) {
31 | if ($type === 'php-tar') {
32 | $this->add_dir($this->base_path, '/');
33 | } else {
34 | $this->add_dir($this->base_path, '.');
35 | }
36 | }
37 |
38 | if ($type === 'php-tar') {
39 | return $this->php_tar($this->dirs, $this->files);
40 | } elseif ($type === 'shell-tar') {
41 | return $this->shell_cmd(Archive::$TAR_PASSTHRU_CMD);
42 | } elseif ($type === 'shell-zip') {
43 | return $this->shell_cmd(Archive::$ZIP_PASSTHRU_CMD);
44 | }
45 | return false;
46 | }
47 |
48 | private function shell_cmd($cmd) {
49 | $cmd = str_replace('[ROOTDIR]', escapeshellarg($this->base_path), $cmd);
50 | $cmd = str_replace('[DIRS]', count($this->dirs) ? implode(' ', array_map('escapeshellarg', $this->dirs)) : '', $cmd);
51 | $cmd = str_replace('[FILES]', count($this->files) ? implode(' ', array_map('escapeshellarg', $this->files)) : '', $cmd);
52 | try {
53 | Util::passthru_cmd($cmd);
54 | } catch (Exeption $err) {
55 | return false;
56 | }
57 | return true;
58 | }
59 |
60 | private function php_tar($dirs, $files) {
61 | $filesizes = [];
62 | $total_size = 512 * count($dirs);
63 | foreach (array_keys($files) as $real_file) {
64 | $size = filesize($real_file);
65 |
66 | $filesizes[$real_file] = $size;
67 | $total_size += 512 + $size;
68 | if ($size % 512 != 0) {
69 | $total_size += 512 - ($size % 512);
70 | }
71 | }
72 |
73 | header('Content-Length: ' . $total_size);
74 |
75 | foreach ($dirs as $real_dir => $archived_dir) {
76 | echo $this->php_tar_header($archived_dir, 0, @filemtime($real_dir . DIRECTORY_SEPARATOR . '.'), 5);
77 | }
78 |
79 | foreach ($files as $real_file => $archived_file) {
80 | $size = $filesizes[$real_file];
81 |
82 | echo $this->php_tar_header($archived_file, $size, @filemtime($real_file), 0);
83 | $this->print_file($real_file);
84 |
85 | if ($size % 512 != 0) {
86 | echo str_repeat(Archive::NULL_BYTE, 512 - ($size % 512));
87 | }
88 | }
89 |
90 | return true;
91 | }
92 |
93 | private function php_tar_header($filename, $size, $mtime, $type) {
94 | $name = substr(basename($filename), -99);
95 | $prefix = substr(Util::normalize_path(dirname($filename)), -154);
96 | if ($prefix === '.') {
97 | $prefix = '';
98 | }
99 |
100 | $header =
101 | str_pad($name, 100, Archive::NULL_BYTE) // filename [100]
102 | . '0000755' . Archive::NULL_BYTE // file mode [8]
103 | . '0000000' . Archive::NULL_BYTE // uid [8]
104 | . '0000000' . Archive::NULL_BYTE // gid [8]
105 | . str_pad(decoct($size), 11, '0', STR_PAD_LEFT) . Archive::NULL_BYTE // file size [12]
106 | . str_pad(decoct($mtime), 11, '0', STR_PAD_LEFT) . Archive::NULL_BYTE // file modification time [12]
107 | . ' ' // checksum [8]
108 | . str_pad($type, 1) // file type [1]
109 | . str_repeat(Archive::NULL_BYTE, 100) // linkname [100]
110 | . 'ustar' . Archive::NULL_BYTE // magic [6]
111 | . '00' // version [2]
112 | . str_repeat(Archive::NULL_BYTE, 80) // uname, gname, defmajor, devminor [32 + 32 + 8 + 8]
113 | . str_pad($prefix, 155, Archive::NULL_BYTE) // filename [155]
114 | . str_repeat(Archive::NULL_BYTE, 12); // fill [12]
115 | assert(strlen($header) === 512);
116 |
117 | // checksum
118 | $checksum = array_sum(array_map('ord', str_split($header)));
119 | $checksum = str_pad(decoct($checksum), 6, '0', STR_PAD_LEFT) . Archive::NULL_BYTE . ' ';
120 | $header = substr_replace($header, $checksum, 148, 8);
121 |
122 | return $header;
123 | }
124 |
125 | private function print_file($file) {
126 | // Send file content in segments to not hit PHP's memory limit (default: 128M)
127 | if ($fd = fopen($file, 'rb')) {
128 | while (!feof($fd)) {
129 | print fread($fd, Archive::$SEGMENT_SIZE);
130 | @ob_flush();
131 | @flush();
132 | }
133 | fclose($fd);
134 | }
135 | }
136 |
137 | private function add_hrefs($hrefs) {
138 | foreach ($hrefs as $href) {
139 | if (trim($href) === '') {
140 | continue;
141 | }
142 |
143 | $d = Util::normalize_path(dirname($href), true);
144 | $n = basename($href);
145 |
146 | if ($this->context->is_managed_href($d) && !$this->context->is_hidden($n)) {
147 |
148 | $real_file = $this->context->to_path($href);
149 | $archived_file = preg_replace('!^' . preg_quote(Util::normalize_path($this->base_path, true)) . '!', '', $real_file);
150 |
151 | if (is_dir($real_file)) {
152 | $this->add_dir($real_file, $archived_file);
153 | } else {
154 | $this->add_file($real_file, $archived_file);
155 | }
156 | }
157 | }
158 | }
159 |
160 | private function add_file($real_file, $archived_file) {
161 | if (is_readable($real_file)) {
162 | $this->files[$real_file] = $archived_file;
163 | }
164 | }
165 |
166 | private function add_dir($real_dir, $archived_dir) {
167 | if ($this->context->is_managed_path($real_dir)) {
168 | $this->dirs[$real_dir] = $archived_dir;
169 |
170 | $files = $this->context->read_dir($real_dir);
171 | foreach ($files as $file) {
172 | $real_file = $real_dir . '/' . $file;
173 | $archived_file = $archived_dir . '/' . $file;
174 |
175 | if (is_dir($real_file)) {
176 | $this->add_dir($real_file, $archived_file);
177 | } else {
178 | $this->add_file($real_file, $archived_file);
179 | }
180 | }
181 | }
182 | }
183 | }
184 |
--------------------------------------------------------------------------------
/_h5ai/private/php/core/class-setup.php:
--------------------------------------------------------------------------------
1 | store = [];
9 | $this->refresh = $refresh;
10 |
11 | $this->add_globals_and_envs();
12 | $this->add_php_checks();
13 | $this->add_app_metadata();
14 | $this->add_server_metadata_and_check();
15 | $this->add_paths();
16 | $this->add_sys_cmd_checks();
17 | }
18 |
19 | private function set($key, $value) {
20 | if (array_key_exists($key, $this->store)) {
21 | Logger::log('setup key already taken', [
22 | 'key' => $key,
23 | 'value' => $value,
24 | 'found' => $this->store[$key]
25 | ]);
26 | exit;
27 | }
28 | if (!is_string($value) && !is_bool($value)) {
29 | Logger::log('setup value neither string nor boolean', [
30 | 'key' => $key,
31 | 'value' => $value
32 | ]);
33 | exit;
34 | }
35 |
36 | $this->store[$key] = $value;
37 | }
38 |
39 | public function get($key) {
40 | if (!array_key_exists($key, $this->store)) {
41 | Logger::log('setup key not found', ['key' => $key]);
42 | exit;
43 | }
44 |
45 | return $this->store[$key];
46 | }
47 |
48 | private function add_globals_and_envs() {
49 | $this->set('PHP_VERSION', PHP_VERSION);
50 | $this->set('MIN_PHP_VERSION', MIN_PHP_VERSION);
51 | $this->set('PHP_ARCH', (PHP_INT_SIZE * 8) . '-bit');
52 |
53 | $this->set('REQUEST_METHOD', $_SERVER['REQUEST_METHOD']);
54 | $this->set('REQUEST_HREF', parse_url($_SERVER['REQUEST_URI'], PHP_URL_PATH));
55 | $this->set('SCRIPT_NAME', $_SERVER['SCRIPT_NAME']);
56 | $this->set('SERVER_SOFTWARE', $_SERVER['SERVER_SOFTWARE']);
57 | $this->set('HTTP_USER_AGENT', $_SERVER['HTTP_USER_AGENT']);
58 | }
59 |
60 | private function add_php_checks() {
61 | $this->set('HAS_PHP_EXIF', function_exists('exif_thumbnail'));
62 |
63 | $has_php_jpeg = false;
64 | if (function_exists('gd_info')) {
65 | $infos = gd_info();
66 | $has_php_jpeg = array_key_exists('JPEG Support', $infos) && $infos['JPEG Support'];
67 | }
68 | $this->set('HAS_PHP_JPEG', $has_php_jpeg);
69 | }
70 |
71 | private function add_app_metadata() {
72 | $this->set('NAME', 'h5ai');
73 | $this->set('VERSION', H5AI_VERSION);
74 | $this->set('FILE_PREFIX', '_h5ai');
75 | }
76 |
77 | private function add_server_metadata_and_check() {
78 | $server_software = $this->get('SERVER_SOFTWARE');
79 | $server_name = null;
80 | $server_version = null;
81 |
82 | if ($server_software && preg_match('#^(.*?)(?:/(.*?))?(?: |$)#', strtolower($server_software), $matches)) {
83 | $server_name = $matches[1];
84 | $server_version = count($matches) > 2 ? $matches[2] : '';
85 | }
86 |
87 | $this->set('SERVER_NAME', $server_name);
88 | $this->set('SERVER_VERSION', $server_version);
89 | $this->set('HAS_SERVER', in_array($server_name, ['apache', 'lighttpd', 'nginx', 'cherokee']));
90 | }
91 |
92 | private function add_paths() {
93 | $script_name = $this->get('SCRIPT_NAME');
94 | if ($this->get('SERVER_NAME') === 'lighttpd') {
95 | $script_name = preg_replace('#^.*?//#', '/', $script_name);
96 | }
97 |
98 | $this->set('H5AI_HREF', Util::normalize_path(dirname(dirname($script_name)), true));
99 | $this->set('H5AI_PATH', Util::normalize_path(dirname(dirname(dirname(dirname(__FILE__)))), false));
100 |
101 | $this->set('ROOT_HREF', Util::normalize_path(dirname($this->get('H5AI_HREF')), true));
102 | $this->set('ROOT_PATH', Util::normalize_path(dirname($this->get('H5AI_PATH')), false));
103 |
104 | $this->set('PUBLIC_HREF', Util::normalize_path($this->get('H5AI_HREF') . '/public/', true));
105 | $this->set('PUBLIC_PATH', Util::normalize_path($this->get('H5AI_PATH') . '/public/', false));
106 |
107 | $this->set('INDEX_HREF', Util::normalize_path($this->get('PUBLIC_HREF') . '/index.php', false));
108 | $this->set('CACHE_PUB_HREF', Util::normalize_path($this->get('PUBLIC_HREF') . '/cache', true));
109 | $this->set('CACHE_PUB_PATH', Util::normalize_path($this->get('PUBLIC_PATH') . '/cache', false));
110 | $this->set('HAS_WRITABLE_CACHE_PUB', @is_writable($this->get('CACHE_PUB_PATH')));
111 |
112 | $this->set('PRIVATE_PATH', Util::normalize_path($this->get('H5AI_PATH') . '/private', false));
113 | $this->set('CONF_PATH', Util::normalize_path($this->get('PRIVATE_PATH') . '/conf', false));
114 | $this->set('CACHE_PRV_PATH', Util::normalize_path($this->get('PRIVATE_PATH') . '/cache', false));
115 | $this->set('HAS_WRITABLE_CACHE_PRV', @is_writable($this->get('CACHE_PRV_PATH')));
116 | }
117 |
118 | private function add_sys_cmd_checks() {
119 | $cmds_cache_path = Util::normalize_path($this->get('CACHE_PRV_PATH') . '/cmds.json', false);
120 |
121 | $cmds = Json::load($cmds_cache_path);
122 | if (sizeof($cmds) === 0 || $this->refresh) {
123 | $cmds['command'] = Util::exec_0('command -v command');
124 | $cmds['which'] = Util::exec_0('which which') || Util::exec_0('which which.exe');
125 |
126 | $cmd = false;
127 | if ($cmds['command']) {
128 | $cmd = 'command -v';
129 | } elseif ($cmds['which']) {
130 | $cmd = 'which';
131 | }
132 |
133 | foreach (['avconv', 'convert', 'du', 'ffmpeg', 'gm', 'tar', 'zip'] as $c) {
134 | $cmds[$c] = ($cmd !== false) && (Util::exec_0($cmd . ' ' . $c) || Util::exec_0($cmd . ' ' . $c . '.exe'));
135 | }
136 |
137 | Json::save($cmds_cache_path, $cmds);
138 | }
139 | foreach ($cmds as $c => $has) {
140 | $this->set('HAS_CMD_' . strtoupper($c), $has);
141 | }
142 | }
143 |
144 | public function to_jsono($as_admin = false) {
145 | $keys = [
146 | 'PUBLIC_HREF',
147 | 'ROOT_HREF'
148 | ];
149 |
150 | if ($as_admin) {
151 | $keys = array_merge($keys, [
152 | 'VERSION',
153 |
154 | 'PHP_VERSION',
155 | 'MIN_PHP_VERSION',
156 | 'PHP_ARCH',
157 | 'HAS_PHP_EXIF',
158 | 'HAS_PHP_JPEG',
159 |
160 | 'SERVER_NAME',
161 | 'SERVER_VERSION',
162 | 'HAS_SERVER',
163 |
164 | 'INDEX_HREF',
165 |
166 | 'HAS_WRITABLE_CACHE_PUB',
167 | 'HAS_WRITABLE_CACHE_PRV',
168 |
169 | 'HAS_CMD_AVCONV',
170 | 'HAS_CMD_CONVERT',
171 | 'HAS_CMD_DU',
172 | 'HAS_CMD_FFMPEG',
173 | 'HAS_CMD_GM',
174 | 'HAS_CMD_TAR',
175 | 'HAS_CMD_ZIP'
176 | ]);
177 | }
178 |
179 | $jsono = ['AS_ADMIN' => $as_admin];
180 | foreach ($keys as $key) {
181 | $jsono[$key] = $this->get($key);
182 | }
183 | return $jsono;
184 | }
185 | }
186 |
--------------------------------------------------------------------------------
/_h5ai/.htaccess:
--------------------------------------------------------------------------------
1 | ## details here: https://github.com/h5bp/server-configs-apache
2 |
3 |
4 |
5 | ## SECURITY ###################################################################
6 |
7 | DirectoryIndex disabled
8 | FileETag None
9 | ServerSignature Off
10 |
11 | # Apache < 2.3
12 |