<?php

/**
 * uploader control panel
 *
 * Type:
 * Name:
 * Date:
 * Purpose:
 * Input:
 *
 * @author NoWhereMan <real_nowhereman at users dot sf dot com>
 *        
 */
class admin_uploader extends AdminPanel {

	var $panelname = 'uploader';

	var $actions = array(
		'default' => true
	);
	
}

class admin_uploader_default extends AdminPanelAction {

	var $events = array(
		'upload'
	);

	function main() {
		if ($f = sess_remove('admin_uploader_files'))
			$this->smarty->assign('uploaded_files', $f);
	}

	function onupload() {
		$success = false;
		
		if (!file_exists(IMAGES_DIR))
			fs_mkdir(IMAGES_DIR);
		
		if (!file_exists(ATTACHS_DIR))
			fs_mkdir(ATTACHS_DIR);
		
		$imgs = array(
			'.jpg',
			'.gif',
			'.png',
			'.jpeg'
		);
		$forbidden = array(
			'.php',
			'.php3',
			'.php4',
			'.php5',
			'.php7',
			'.phtml'
		);
		
		// intentionally
		// I've not put BMPs
		
		$uploaded_files = array();
		
		foreach ($_FILES ["upload"] ["error"] as $key => $error) {
			
			if ($error == UPLOAD_ERR_OK) {
				$tmp_name = $_FILES ["upload"] ["tmp_name"] [$key];
				$name = $_FILES ["upload"] ["name"] [$key];
				
				$dir = ATTACHS_DIR;
				
				$ext = strtolower(strrchr($name, '.'));
				
				if (in_array($ext, $forbidden)) {
					$success = false;
					continue;
				}
				if (in_array($ext, $imgs)) {
					$dir = IMAGES_DIR;
				}
				
				$name = sanitize_title(substr($name, 0, -strlen($ext))) . $ext;
				
				$target = "$dir/$name";
				@umask(022);
				$success = move_uploaded_file($tmp_name, $target);
				@chmod($target, 0766);
				
				$uploaded_files [] = $name;
				
				// one failure will make $success == false :)
				$success &= $success;
			}
		}
		
		if ($uploaded_files) {
			$this->smarty->assign('success', $success ? 1 : -1);
			sess_add('admin_uploader_files', $uploaded_files);
		}
		
		return 1;
	}
	
}

?>