admin) { access::forbidden(); } $item = ORM::factory("item", $id); $view = new View("server_add_tree_dialog.html"); $view->action = url::abs_site("__ARGS__/{$id}__TASK_ID__?csrf=" . access::csrf_token()); $view->parents = $item->parents(); $view->album_title = $item->title; $tree = new View("server_add_tree.html"); $tree->data = array(); $tree->checked = false; $tree->tree_id = "tree_$id"; foreach (array_keys($paths) as $path) { $tree->data[$path] = array("path" => $path, "is_dir" => true); } $view->tree = $tree->__toString(); print $view; } public function children() { if (!user::active()->admin) { access::forbidden(); } $paths = unserialize(module::get_var("server_add", "authorized_paths")); $path_valid = false; $path = $this->input->post("path"); $checked = $this->input->post("checked") == "true"; foreach (array_keys($paths) as $valid_path) { if ($path_valid = strpos($path, $valid_path) === 0) { break; } } if (empty($path_valid)) { throw new Exception("@todo BAD_PATH"); } if (!is_readable($path) || is_link($path)) { kohana::show_404(); } $tree = new View("server_add_tree.html"); $tree->data = $this->_get_children($path); $tree->checked = $checked; $tree->tree_id = "tree_" . md5($path); print $tree; } function start($id) { if (!user::active()->admin) { access::forbidden(); } access::verify_csrf(); $item = ORM::factory("item", $id); $paths = unserialize(module::get_var("server_add", "authorized_paths")); $input_files = $this->input->post("path"); $collapsed = $this->input->post("collapsed"); $files = array(); $total_count = 0; foreach (array_keys($paths) as $valid_path) { $path_length = strlen($valid_path); foreach ($input_files as $key => $path) { if (!empty($path) && $valid_path != $path && strpos($path, $valid_path) === 0) { $relative_path = substr(dirname($path), $path_length); $name = basename($path); $files[$valid_path][] = array("path" => $relative_path, "parent_id" => $id, "name" => basename($path), "type" => is_dir($path) ? "album" : "file"); $total_count++; if ($collapsed[$key] === "true") { $total_count += $this->_select_children($id, $valid_path, $path, $files[$valid_path]); } unset($input_files[$key]); } } } if ($total_count == 0) { print json_encode(array("result" => "success", "url" => "", "task" => array( "id" => -1, "done" => 1, "percent_complete" => 100, "status" => t("No Eligible files, import cancelled")))); return; } $task_def = Task_Definition::factory() ->callback("server_add_task::add_from_server") ->description(t("Add photos or movies from the local server")) ->name(t("Add from server")); $task = task::create($task_def, array("item_id" => $id, "next_path" => 0, "files" => $files, "counter" => 0, "position" => 0, "total" => $total_count)); batch::start(); print json_encode(array("result" => "started", "url" => url::site("server_add/add_photo/{$task->id}?csrf=" . access::csrf_token()), "task" => array( "id" => $task->id, "percent_complete" => $task->percent_complete, "status" => $task->status, "done" => $task->done))); } function add_photo($task_id) { if (!user::active()->admin) { access::forbidden(); } access::verify_csrf(); $task = task::run($task_id); // @todo the task is already run... its a little late to check the access if (!$task->loaded || $task->owner_id != user::active()->id) { access::forbidden(); } if ($task->done) { switch ($task->state) { case "success": message::success(t("Add from server completed")); break; case "error": message::warning(t("Add from server completed with errors")); break; } print json_encode(array("result" => "success", "task" => array( "id" => $task->id, "percent_complete" => $task->percent_complete, "status" => $task->status, "done" => $task->done))); } else { print json_encode(array("result" => "in_progress", "task" => array( "id" => $task->id, "percent_complete" => $task->percent_complete, "status" => $task->status, "done" => $task->done))); } } public function finish($id, $task_id) { if (!user::active()->admin) { access::forbidden(); } access::verify_csrf(); $task = ORM::factory("task", $task_id); if (!$task->loaded || $task->owner_id != user::active()->id) { access::forbidden(); } if (!$task->done) { message::warning(t("Add from server was cancelled prior to completion")); } batch::stop(); print json_encode(array("result" => "success")); } public function pause($id, $task_id) { if (!user::active()->admin) { access::forbidden(); } access::verify_csrf(); $task = ORM::factory("task", $task_id); if (!$task->loaded || $task->owner_id != user::active()->id) { access::forbidden(); } message::warning(t("Add from server was cancelled prior to completion")); batch::stop(); print json_encode(array("result" => "success")); } private function _select_children($id, $valid_path, $path, &$files) { $count = 0; $children = new RecursiveIteratorIterator( new RecursiveDirectoryIterator($path), RecursiveIteratorIterator::SELF_FIRST); $path_length = strlen($valid_path); foreach($children as $name => $file){ if ($file->isLink()) { continue; } $filename = $file->getFilename(); if ($filename[0] != ".") { if ($file->isDir()) { $relative_path = substr(dirname($file->getPathname()), $path_length); $files[] = array("path" => $relative_path, "parent_id" => $id, "name" => $filename, "type" => "album"); $count++; } else { $extension = strtolower(substr(strrchr($filename, '.'), 1)); if ($file->isReadable() && in_array($extension, array("gif", "jpeg", "jpg", "png", "flv", "mp4"))) { $relative_path = substr(dirname($file->getPathname()), $path_length); $files[] = array("path" => $relative_path, "parent_id" => $id, "name" => $filename, "type" => "file"); $count++; } } } } return $count; } private function _get_children($path) { $directory_list = $file_list = array(); $files = new DirectoryIterator($path); foreach ($files as $file) { if ($file->isDot() || $file->isLink()) { continue; } $filename = $file->getFilename(); if ($filename[0] != ".") { if ($file->isDir()) { $directory_list[$filename] = array("path" => $file->getPathname(), "is_dir" => true); } else { $extension = strtolower(substr(strrchr($filename, '.'), 1)); if ($file->isReadable() && in_array($extension, array("gif", "jpeg", "jpg", "png", "flv", "mp4"))) { $file_list[$filename] = array("path" => $file->getPathname(), "is_dir" => false); } } } } ksort($directory_list); ksort($file_list); // We can't use array_merge here because if a file name is numeric, it will // get renumbered, so lets do it ourselves foreach ($file_list as $file => $fileinfo) { $directory_list[$file] = $fileinfo; } return $directory_list; } }