Initial commit

alaska/upload.php

@@ -0,0 +1,62 @@
+<?php
+require 'php/classes/page.php';
+require 'functions/func_filesystem.php';
+require 'functions/func_file.php';
+
+$page = new Page();
+$user = $page->user();
+
+# process a login if attempted
+if(isset($_POST['username']) && isset($_POST['password']))
+{
+  if(!$user->login($_POST['username'],$_POST['password']))
+  {
+    $page->addError('Username and/or password incorrect.');
+  }
+}
+# if a file is being uploaded
+else if(isset($_FILES['doc_file']) && $user->exists())
+{
+  # true flag allows this upload to overwrite any files with the same name
+  if($cleanName = file_process_upload('doc_file',$DOCROOT.'/uploads',true))
+  {
+    if(!chmod($DOCROOT.'/uploads/'.$cleanName,0777))
+      $page->addError('Could not change permissions on file.');
+    $page->addMessage('File successfully uploaded.');
+  }
+  else
+    $page->addError('File upload failed.');
+}
+# if a file is being deleted
+else if($_GET['do'] == 'delete' && $user->exists())
+{
+  if(isset($_GET['id']) && file_exists($DOCROOT.'/uploads/'.$_GET['id']))
+  {
+    $fileName = file_sanitize_name($_GET['id']);
+    if(unlink($DOCROOT.'/uploads/'.$fileName))
+      $page->addMessage('File deleted.');
+  }
+  else
+    $page->addError('File does not exist.  Deletion unsuccessful.');
+}
+# if a user already is present, then go to upload page
+# otherwise go to login page
+if($user->exists())
+{
+  # get the list of files
+  $files = filesys_get_wanted_children($DOCROOT.'/uploads','folders',"/\.doc$/");
+  
+  $page->data('files',$files);
+  $page->attr('title','Upload');
+  $page->content('home.php');
+}
+else
+{
+  $page->display('menu',false);
+  $page->attr('title','Login');
+  $page->content('login.php');
+}
+
+$page->process();
+
+?>