File Manager

<?php
if (!isset($gCms))
	exit;

// Check permissions
if (!$this->CheckPermission('Use Gallery'))
{
	echo $this->ShowErrors(lang('needpermissionto', 'Use Gallery'));
	return;
}

if (empty($params['gid']) || (empty($params['fid']) && empty($params['imgselect'])))
{
	$params['module_error'] = lang('missingparams');
	$this->Redirect($id, 'defaultadmin', '', $params);
}

$gid = $params['gid'];
$nopermission = 0;

// check permission to edit
if ($this->CheckPermission('Gallery - Edit all galleries'))
{
	$permission_to_edit = 'all';
}
else
{
	$userid = get_userid();
	$galleryinfo = Gallery_utils::Getgalleryinfobyid($gid);
	$editors = explode(';', $galleryinfo['editors']);
	if (Gallery_utils::CheckEditor($userid, $gid, $editors))
	{
		$permission_to_edit = 'this';
	}
	else
	{
		$permission_to_edit = 'no';
	}
}


if (empty($params['fid']))
{
	$fid_array = is_array($params['imgselect']) ? array_keys($params['imgselect']) : explode(',', $params['imgselect']);
}
else
{
	$fid_array = array($params['fid']);
}

$fids = '';
if ($params['multiaction'] == 'active' || $params['multiaction'] == 'inactive' || $params['multiaction'] == 'switchactive')
{
	foreach ($fid_array as $fid)
	{
		$fileinfo = Gallery_utils::Getgalleryinfobyid($fid);
		$editors = explode(';', $fileinfo['editors']);
		if (strpos($fileinfo['filename'], "/") === FALSE && ($permission_to_edit == 'all' || $permission_to_edit == 'this'))
		{
			$fids .= $fid . ',';
		}
		elseif (strpos($fileinfo['filename'], "/") > 0 && Gallery_utils::CheckEditor($userid, $fid, $editors))
		{
			$fids .= $fid . ',';
		}
		else
		{
			$nopermission++;
		}
	}
}
$fids = trim($fids, ',');


switch ($params['multiaction'])
{
	case 'delete': {
			if ($permission_to_edit == 'all')
			{
				foreach ($fid_array as $fid)
				{
					$fileinfo = Gallery_utils::Getgalleryinfobyid($fid);
					if (strpos($fileinfo['filename'], "/") === FALSE)
					{
						// delete only one file
						Gallery_utils::DeleteGalleryDB('do_not_delete_directory', $fid);
					}
					else
					{
						// delete directory and files
						Gallery_utils::DeleteGalleryDB($fileinfo['filepath'] . $fileinfo['filename'], $fid);
					}
				}
				$gid = empty($params['gid']) ? $fileinfo['galleryid'] : $params['gid'];
			}
			else
			{
				$nopermission += count($fid_array);
			}
			break;
		}

	case 'rotateclockwise':
	case 'rotateanticlockwise': {
			if ($permission_to_edit == 'all' || $permission_to_edit == 'this')
			{
				foreach ($fid_array as $fid)
				{
					$fileinfo = Gallery_utils::Getgalleryinfobyid($fid);
					$image = '../' . DEFAULT_GALLERY_PATH . $fileinfo['filepath'] . $fileinfo['filename'];
					$degrees = $params['multiaction'] == 'rotateclockwise' ? 270 : 90;
					Gallery_utils::RotateImage($image, $degrees);
				}
			}
			else
			{
				$nopermission++;
			}
			break;
		}

	case 'active': {
			$query = "UPDATE " . cms_db_prefix() . "module_gallery SET active = 1 WHERE fileid IN (" . $fids . ")";
			$db->Execute($query);
			break;
		}

	case 'inactive': {
			$query = "UPDATE " . cms_db_prefix() . "module_gallery SET active = 0 WHERE fileid IN (" . $fids . ")";
			$db->Execute($query);
			break;
		}

	case 'switchactive': {
			$query = "UPDATE " . cms_db_prefix() . "module_gallery SET active = active^1 WHERE fileid IN (" . $fids . ")";
			$db->Execute($query);
			break;
		}

	case 'move': {
			$galleryinfo = Gallery_utils::Getgalleryinfobyid($params['moveto']);
			$newdir = $galleryinfo['filepath'] . $galleryinfo['filename'];
			$editors = explode(';', $galleryinfo['editors']);
			if (Gallery_utils::CheckEditor($userid, $params['moveto'], $editors))
			{
				// permission to edit destination dir
				foreach ($fid_array as $fid)
				{
					if ($fid != 1)
					{
						$fileinfo = Gallery_utils::Getgalleryinfobyid($fid);
						$newpath = '../' . DEFAULT_GALLERY_PATH . $newdir . $fileinfo['filename'];
						$oldpath = '../' . DEFAULT_GALLERY_PATH . $fileinfo['filepath'] . $fileinfo['filename'];
						if (strpos($fileinfo['filename'], "/") === FALSE)
						{
							// move only one file, let's don't forget the thumb
							if ($permission_to_edit == 'all' || $permission_to_edit == 'this')
							{
								if (@rename($oldpath, $newpath))
								{
									$newpath = '../' . DEFAULT_GALLERY_PATH . $newdir . IM_PREFIX . $fileinfo['filename'];
									$oldpath = '../' . DEFAULT_GALLERY_PATH . $fileinfo['filepath'] . IM_PREFIX . $fileinfo['filename'];
									@rename($oldpath, $newpath);
									$query = "UPDATE " . cms_db_prefix() . "module_gallery SET filepath = ?, galleryid = ? WHERE fileid = ?";
									$db->Execute($query, array($newdir, $params['moveto'], $fid));
								}
							}
							else
							{
								$nopermission++;
							}
						}
						else
						{
							// move directory
							$editors = explode(';', $fileinfo['editors']);
							if (Gallery_utils::CheckEditor($userid, $fid, $editors))
							{
								if (@rename($oldpath, $newpath))
								{
									$query = "UPDATE " . cms_db_prefix() . "module_gallery SET filepath = ?, galleryid = ? WHERE fileid = ?";
									$db->Execute($query, array($newdir, $params['moveto'], $fid));

									//move content
									$oldpath = $fileinfo['filepath'] . $fileinfo['filename'];
									$newpath = $newdir . $fileinfo['filename'];
									$query = "UPDATE " . cms_db_prefix() . "module_gallery SET filepath = REPLACE(filepath,?,?) WHERE filepath = ? OR filepath LIKE ?";
									$db->Execute($query, array($oldpath, $newpath, $oldpath, $oldpath . '%'));
								}
							}
							else
							{
								$nopermission++;
							}
						}
					}
				}
			}
			else
			{
				$nopermission += count($fid_array);
			}
			break;
		}
}

$origaction = $params['origaction'];
switch ($origaction)
{
	case 'editgallery': {
			$params = array('gid' => $gid, 'mode' => 'edit', 'fids' => $fids);
			break;
		}
	case 'defaultadmin': {
			$params = array();
			break;
		}
}

$this->Redirect($id, $origaction, $returnid, $params);
?>