Initial commit

Signed-off-by: Luke Tainton <luke@tainton.uk>
2020-02-26 12:23:50 +00:00
commit 39782c53ef
500 changed files with 141257 additions and 0 deletions
--- a/hesk/inc/attachments.inc.php
+++ b/hesk/inc/attachments.inc.php
@@ -0,0 +1,112 @@
+<?php
+/**
+ *
+ * This file is part of HESK - PHP Help Desk Software.
+ *
+ * (c) Copyright Klemen Stirn. All rights reserved.
+ * https://www.hesk.com
+ *
+ * For the full copyright and license agreement information visit
+ * https://www.hesk.com/eula.php
+ *
+ */
+
+/* Check if this is a valid include */
+if (!defined('IN_SCRIPT')) {die('Invalid attempt');} 
+
+/***************************
+Function hesk_uploadFiles()
+***************************/
+function hesk_uploadFile($i)
+{
+	global $hesk_settings, $hesklang, $trackingID, $hesk_error_buffer;
+
+	/* Return if name is empty */
+	if (empty($_FILES['attachment']['name'][$i])) {return '';}
+
+    /* Parse the name */
+	$file_realname = hesk_cleanFileName($_FILES['attachment']['name'][$i]);
+
+	/* Check file extension */
+	$ext = strtolower(strrchr($file_realname, "."));
+	if ( ! in_array($ext,$hesk_settings['attachments']['allowed_types']))
+	{
+        return hesk_fileError(sprintf($hesklang['type_not_allowed'], $ext, $file_realname));
+	}
+
+	/* Check file size */
+	if ($_FILES['attachment']['size'][$i] > $hesk_settings['attachments']['max_size'])
+	{
+	    return hesk_fileError(sprintf($hesklang['file_too_large'], $file_realname));
+	}
+	else
+	{
+	    $file_size = $_FILES['attachment']['size'][$i];
+	}
+
+	/* Generate a random file name */
+	$useChars='AEUYBDGHJLMNPQRSTVWXZ123456789';
+	$tmp = uniqid();
+	for($j=1;$j<10;$j++)
+	{
+	    $tmp .= $useChars[mt_rand(0,29)];
+	}
+
+    if (defined('KB'))
+    {
+    	$file_name = substr(md5($tmp . $file_realname), 0, 200) . $ext;
+    }
+    else
+    {
+    	$file_name = substr($trackingID . '_' . md5($tmp . $file_realname), 0, 200) . $ext;
+    }
+
+    // Does the temporary file exist? If not, probably server-side configuration limits have been reached
+    // Uncomment this for debugging purposes
+    /*
+    if ( ! file_exists($_FILES['attachment']['tmp_name'][$i]) )
+    {
+		return hesk_fileError($hesklang['fnuscphp']);
+    }
+    */
+
+	/* If upload was successful let's create the headers */
+	if ( ! move_uploaded_file($_FILES['attachment']['tmp_name'][$i], dirname(dirname(__FILE__)).'/'.$hesk_settings['attach_dir'].'/'.$file_name))
+	{
+	    return hesk_fileError($hesklang['cannot_move_tmp']);
+	}
+
+	$info = array(
+	    'saved_name'=> $file_name,
+	    'real_name' => $file_realname,
+	    'size'      => $file_size
+	);
+
+	return $info;
+} // End hesk_uploadFile()
+
+
+function hesk_fileError($error)
+{
+	global $hesk_settings, $hesklang, $trackingID;
+    global $hesk_error_buffer;
+
+	$hesk_error_buffer['attachments'] = $error;
+
+	return false;
+} // End hesk_fileError()
+
+
+function hesk_removeAttachments($attachments)
+{
+	global $hesk_settings, $hesklang;
+
+	$hesk_settings['server_path'] = dirname(dirname(__FILE__)).'/'.$hesk_settings['attach_dir'].'/';
+
+	foreach ($attachments as $myatt)
+	{
+		hesk_unlink($hesk_settings['server_path'].$myatt['saved_name']);
+	}
+
+	return true;
+} // End hesk_removeAttachments()