HEX
Server: Apache/2.4.52 (Ubuntu)
System: Linux aritmodecarnaval.es 5.15.0-79-generic #86-Ubuntu SMP Mon Jul 10 16:07:21 UTC 2023 x86_64
User: www-data (33)
PHP: 7.4.33
Disabled: pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wifcontinued,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_get_handler,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority,pcntl_async_signals,pcntl_unshare,
Upload Files
File: //home/www/aritmodecarnaval/wp-content/plugins/photo-gallery/filemanager/model.php
<?php
/**
 * Author: Rob
 * Date: 6/24/13
 * Time: 11:31 AM
 */

$p_dir;
$s_order;

class FilemanagerModel {
  private $controller;
  private $element_load_count = 60;

  public function __construct($controller) {
    $this->controller = $controller;
  }

  public function get_file_manager_data() {
    $session_data = array();
    $session_data['sort_by'] = $this->get_from_session('sort_by', 'date_modified');
    $session_data['sort_order'] = $this->get_from_session('sort_order', 'desc');
    $session_data['items_view'] = $this->get_from_session('items_view', 'thumbs');
    $session_data['clipboard_task'] = $this->get_from_session('clipboard_task', '');
    $session_data['clipboard_files'] = $this->get_from_session('clipboard_files', '');
    $session_data['clipboard_src'] = $this->get_from_session('clipboard_src', '');
    $session_data['clipboard_dest'] = $this->get_from_session('clipboard_dest', '');

    $data = array();
    $data['session_data'] = $session_data;
    $data['path_components'] = $this->get_path_components();
    $data['dir'] = $this->controller->get_uploads_dir() . (isset($_REQUEST['dir']) ? esc_html($_REQUEST['dir']) : '');
    $data['dir'] = str_replace('../', '', $data['dir']);
    $get_files_data =  $this->get_files($session_data['sort_by'], $session_data['sort_order']);
    $data['files'] = $get_files_data['files'];
    $data['files_count'] = $get_files_data['files_count'];
    $data['all_files'] = $get_files_data['all_files'];
    $data['element_load_count'] = $this->element_load_count;
    $data['extensions'] = (isset($_REQUEST['extensions']) ? esc_html($_REQUEST['extensions']) : '');
    $data['callback'] = (isset($_REQUEST['callback']) ? esc_html($_REQUEST['callback']) : '');
    return $data;
  }

  private function get_from_session($key, $default) {
    if (isset($_REQUEST[$key])) {
      $_REQUEST[$key] = stripslashes($_REQUEST[$key]);
    }
    else {
      $_REQUEST[$key] = stripslashes($default);
    }
    return esc_html(stripslashes($_REQUEST[$key]));
  }

  public function get_path_components() {
    $dir_names = explode('/', (isset($_REQUEST['dir']) ? str_replace('../', '', esc_html($_REQUEST['dir'])) : ''));
    $path = '';

    $components = array();
    $component = array();
    
    $component['name'] = BWG()->upload_dir;
    $component['path'] = $path;
    $components[] = $component;
    for ($i = 0; $i < count($dir_names); $i++) {
      $dir_name = $dir_names[$i];
      if ($dir_name == '') {
          continue;
      }
      $path .= (($path == '') ? $dir_name : '/' . $dir_name);
      $component = array();
      $component['name'] = $dir_name;
      $component['path'] = $path;
      $components[] = $component;
    }
    return $components;
  }

  function get_files($sort_by, $sort_order) {
    $icons_dir_url = BWG()->plugin_url . '/filemanager/images';
    $valid_types = explode(',', isset($_REQUEST['extensions']) ? strtolower(esc_html($_REQUEST['extensions'])) : '*');
    $dir = (isset($_REQUEST['dir']) ? '/' . htmlspecialchars_decode(stripslashes(esc_html(str_replace('../', '', $_REQUEST['dir']))), ENT_COMPAT | ENT_QUOTES) : '');
    $parent_dir = $this->controller->get_uploads_dir() . $dir;
    $parent_dir = str_replace('../', '', $parent_dir);
    $parent_dir_url = $this->controller->get_uploads_url() . $dir;

    $file_names = $this->get_sorted_file_names($parent_dir, $sort_by, $sort_order);

    $dirs = array();
    $files = array();
    foreach ($file_names as $file_name) {
      if (($file_name == '.') || ($file_name == '..') || ($file_name == 'thumb') || ($file_name == '.original')) {
        continue;
      }
      if (is_dir($parent_dir . '/' . $file_name) == TRUE) {
        $file = array();
        $file['is_dir'] = TRUE;
        $file['name'] = $file_name;
        $file['alt'] = str_replace("_", " ", $file_name);
        $file['filename'] = str_replace("_", " ", $file_name);
        $file['type'] = '';
        $file['thumb'] = $icons_dir_url . '/dir.png';
        $file['size'] = '';
        $file['date_modified'] = '';
        $file['resolution'] = '';
        $dirs[] = $file;
      }
      else {
        $file = array();
        $file['is_dir'] = FALSE;
        $file['name'] = $file_name;
        $filename = substr($file_name, 0, strrpos($file_name, '.'));
        $file['alt'] = str_replace("_", " ", $filename);
        $file['filename'] = str_replace("_", " ", $filename);
        $file_extension = explode('.', $file_name);
        $file['type'] = strtolower(end($file_extension));
        $file['thumb'] = $parent_dir_url . '/thumb/' . $file_name;
        if (($valid_types[0] != '*') && (in_array($file['type'], $valid_types) == FALSE)) {
          continue;
        }
        $file_size_kb = (int)(filesize($parent_dir . '/' . $file_name) / 1024);
        // $file_size_mb = (int)($file_size_kb / 1024);
        // $file['size'] = $file_size_kb < 1024 ? (string)$file_size_kb . 'KB' : (string)$file_size_mb . 'MB';
        $file['size'] = $file_size_kb . ' KB';
        $file['date_modified'] = date('d F Y, H:i', filemtime($parent_dir . '/' . $file_name));
        $image_info = getimagesize(htmlspecialchars_decode($parent_dir . '/' . $file_name, ENT_COMPAT | ENT_QUOTES));
        $file['resolution'] = $this->is_img($file['type']) ? $image_info[0]  . ' x ' . $image_info[1] . ' px' : '';
        $exif = WDWLibrary::read_image_metadata( $parent_dir . '/.original/' . $file_name );
        $file['credit'] = $exif['credit'];
        $file['aperture'] = $exif['aperture'];
        $file['camera'] = $exif['camera'];
        $file['caption'] = $exif['caption'];
        $file['iso'] = $exif['iso'];
        $file['orientation'] = $exif['orientation'];
        $file['copyright'] = $exif['copyright'];
        $files[] = $file;
      }
    }

    // $result = $sort_order == 'asc' ? array_merge($dirs, $files) : array_merge($files, $dirs);
    $result = array_merge($dirs, $files);
    $files_count = count($result);
    $all_files = $result;
    $result = array_slice($result, 0, $this->element_load_count, true);
    return array("files" => $result, "all_files"=>$all_files, "files_count" => $files_count);
  }

  private function get_sorted_file_names($parent_dir, $sort_by, $sort_order) {
    $file_names = scandir($parent_dir);

    global $p_dir;
    global $s_order;

    $p_dir = $parent_dir;
    $s_order = $sort_order;

    function sort_by_size ($a, $b) {
      global $p_dir;
      global $s_order;

      $size_of_a = filesize($p_dir . '/' . $a);
      $size_of_b = filesize($p_dir . '/' . $b);
      return $s_order == 'asc' ? $size_of_a > $size_of_b : $size_of_a < $size_of_b;
    }

    function sort_by_date($a, $b) {
      global $p_dir;
      global $s_order;

      $m_time_a = filemtime($p_dir . '/' . $a);
      $m_time_b = filemtime($p_dir . '/' . $b);
      return $s_order == 'asc' ? $m_time_a > $m_time_b : $m_time_a < $m_time_b;
    }

    switch ($sort_by) {
      case 'name':
        natcasesort($file_names);
        if ($sort_order == 'desc') {
          $file_names = array_reverse($file_names);
        }
        break;
      case 'size':
        usort($file_names, 'sort_by_size');
        break;
      case 'date_modified':
        usort($file_names, 'sort_by_date');
        break;
    }
    return $file_names;
  }

  private function is_img($file_type) {
    switch ($file_type) {
      case 'jpg':
      case 'jpeg':
      case 'png':
      case 'bmp':
      case 'gif':
        return true;
        break;
    }
    return false;
  }
}