0b7e2d0a5b
- Created complete documentation in docs/ directory - Added PROJECT_OVERVIEW.md with feature highlights and getting started guide - Added ARCHITECTURE.md with system design and technical details - Added SECURITY.md with comprehensive security implementation guide - Added DEVELOPMENT.md with development workflows and best practices - Added DEPLOYMENT.md with production deployment instructions - Added API.md with complete REST API documentation - Added CONTRIBUTING.md with contribution guidelines - Added CHANGELOG.md with version history and migration notes - Reorganized all documentation files into docs/ directory for better organization - Updated README.md with proper documentation links and quick navigation - Enhanced project structure with professional documentation standards
479 lines
22 KiB
PHP
479 lines
22 KiB
PHP
<?php
|
|
/*******************************************************************************************************************
|
|
| Software Name : EasyStream
|
|
| Software Description : High End YouTube Clone Script with Videos, Shorts, Streams, Images, Audio, Documents, Blogs
|
|
| Software Author : (c) Sami Ahmed
|
|
|*******************************************************************************************************************
|
|
|
|
|
|*******************************************************************************************************************
|
|
| This source file is subject to the EasyStream Proprietary License Agreement.
|
|
|
|
|
| By using this software, you acknowledge having read this Agreement and agree to be bound thereby.
|
|
|*******************************************************************************************************************
|
|
| Copyright (c) 2025 Sami Ahmed. All rights reserved.
|
|
|*******************************************************************************************************************/
|
|
|
|
defined('_ISVALID') or header('Location: /error');
|
|
|
|
class VUpload
|
|
{
|
|
/* update db on upload */
|
|
public function dbUpdate($type, $be = '', $up_id = '', $up_key = '', $upload_short = false)
|
|
{
|
|
global $class_filter, $class_database, $cfg, $db;
|
|
|
|
$type = $type == 'document' ? 'doc' : $type;
|
|
$db_tbl_info = 'db_' . $type . 'files';
|
|
$db_tbl_perm = 'db_' . $type . 'files';
|
|
$db_tbl_que = 'db_' . $type . 'que';
|
|
$db_approved = ($cfg['file_approval'] == 1 ? 0 : 1);
|
|
if ($up_key == '') {
|
|
$up_key = $class_database->singleFieldValue('db_accountuser', 'usr_key', 'usr_id', ((int) $up_id > 0 ? $up_id : $_SESSION['USER_ID']));
|
|
}
|
|
$usr_id = $be == '' ? $up_id : $class_database->singleFieldValue('db_accountuser', 'usr_id', 'usr_key', $up_key);
|
|
|
|
$filesrc = (preg_match('/"/', $_POST['UFNAME']) or preg_match('/`/', $_POST['UFNAME'])) ? str_replace(array('"', '`'), array("'", "'"), $_POST['UFNAME']) : $_POST['UFNAME'];
|
|
$filename = $class_filter->clr_str($filesrc);
|
|
$filehash = md5($filename);
|
|
$nfilename = $class_filter->clr_str($_POST['UFSIZE'] . '.' . strtolower(pathinfo($filesrc, PATHINFO_EXTENSION)));
|
|
$ufilename = time() . '.' . strtolower(pathinfo($filesrc, PATHINFO_EXTENSION));
|
|
$filesize = intval($_POST['UFSIZE']);
|
|
$filecateg = $be == '' ? intval($_POST['file_category_sel']) : intval($_POST['file_category_0']);
|
|
|
|
if (!is_dir($cfg['upload_files_dir'] . '/' . $up_key . '/' . $type[0])) {
|
|
mkdir($cfg['upload_files_dir'] . '/' . $up_key . '/' . $type[0], 0777);
|
|
}
|
|
if (!is_dir($cfg['media_files_dir'] . '/' . $up_key . '/' . $type[0])) {
|
|
mkdir($cfg['media_files_dir'] . '/' . $up_key . '/' . $type[0], 0777);
|
|
}
|
|
|
|
$filepath = $cfg['upload_files_dir'] . '/' . $up_key . '/' . $type[0] . '/' . html_entity_decode($nfilename, ENT_QUOTES, 'UTF-8');
|
|
$ufilepath = $cfg['upload_files_dir'] . '/' . $up_key . '/' . $type[0] . '/' . html_entity_decode($ufilename, ENT_QUOTES, 'UTF-8');
|
|
|
|
if (strpos($filename, '.php') !== false or strpos($filename, '.pl') !== false or strpos($filename, '.asp') !== false or strpos($filename, '.htm') !== false or strpos($filename, '.cgi') !== false or strpos($filename, '.py') !== false or strpos($filename, '.sh') !== false or strpos($filename, '.cin') !== false) {return;}
|
|
if (strpos($nfilename, '.php') !== false or strpos($nfilename, '.pl') !== false or strpos($nfilename, '.asp') !== false or strpos($nfilename, '.htm') !== false or strpos($nfilename, '.cgi') !== false or strpos($nfilename, '.py') !== false or strpos($nfilename, '.sh') !== false or strpos($nfilename, '.cin') !== false) {return;}
|
|
|
|
if (!file_exists($filepath) or filesize($filepath) <= 16) {
|
|
error_log('{"jsonrpc php" : "2.0", "error" : {"code": 108, "message": "Connection failure when uploading. Please check your connection and again."}, "id" : "id"}');
|
|
return '';
|
|
} elseif (file_exists($filepath) and filesize($filepath) >= 16) {
|
|
if (rename($filepath, $ufilepath)) {
|
|
$filepath = $ufilepath;
|
|
$nfilename = $ufilename;
|
|
}
|
|
}
|
|
|
|
$filetitle = substr($filename, 0, strrpos($filename, '.'));
|
|
$filetitle = str_replace("%20", " ", $filetitle);
|
|
$fileext = VFileinfo::getEXtension($filename);
|
|
$filekey = VUserinfo::generateRandomString(10);
|
|
|
|
for ($i = 1; $i <= 10; $i++) {
|
|
$chk = $class_database->singleFieldValue($db_tbl_perm, 'db_id', 'file_key', $filekey);
|
|
|
|
if ($chk) {
|
|
$filekey = VUserinfo::generateRandomString(10);
|
|
} else {
|
|
break;
|
|
}
|
|
}
|
|
$embedkey = $filekey;
|
|
|
|
if (strtolower($filename) === 'image.jpg') {
|
|
$new_filename = 'image_' . time() . '.jpg';
|
|
$src = $cfg['upload_files_dir'] . '/' . $up_key . '/i/' . $filename;
|
|
$dst = $cfg['upload_files_dir'] . '/' . $up_key . '/i/' . $new_filename;
|
|
|
|
if (rename($src, $dst)) {
|
|
$nfilename = $new_filename;
|
|
}
|
|
}
|
|
|
|
$v_info = array(
|
|
"usr_id" => $usr_id,
|
|
"file_key" => $filekey,
|
|
"old_file_key" => 0,
|
|
"file_type" => $fileext,
|
|
"file_name" => str_replace(strtoupper($fileext), strtolower($fileext), $nfilename),
|
|
"file_hash" => $filehash,
|
|
"file_size" => $filesize,
|
|
"upload_date" => date("Y-m-d H:i:s"),
|
|
"is_subscription" => ($be == '' ? intval($cfg['paid_memberships']) : 0),
|
|
"file_views" => 0,
|
|
"file_comments" => 0,
|
|
"file_responses" => 0,
|
|
"file_like" => 0,
|
|
"file_dislike" => 0,
|
|
"embed_key" => $embedkey,
|
|
"file_title" => $filetitle,
|
|
"file_description" => $filetitle,
|
|
"file_tags" => VForm::clearTag($filetitle),
|
|
"file_category" => $filecateg,
|
|
"approved" => $db_approved,
|
|
"privacy" => "public",
|
|
"comments" => "all",
|
|
"comment_votes" => 1,
|
|
"rating" => 1,
|
|
"responding" => "all",
|
|
"embedding" => 1,
|
|
"social" => 1,
|
|
);
|
|
|
|
if ($cfg["conversion_" . ($type == 'doc' ? 'document' : $type) . "_que"] == 1) {
|
|
$v_que = array(
|
|
"file_key" => $filekey,
|
|
"usr_key" => $up_key,
|
|
);
|
|
}
|
|
|
|
if ($cfg['paid_memberships'] == 1 and $be == '') {
|
|
$sql = sprintf("UPDATE `db_packusers` SET `pk_usedspace`=`pk_usedspace`+%s, `pk_usedbw`=`pk_usedbw`+%s, `pk_total_%s`=`pk_total_%s`+1 WHERE `usr_id`='%s' LIMIT 1;", $filesize, $filesize, $type, $type, $usr_id);
|
|
$db_dub = $db->execute($sql);
|
|
}
|
|
|
|
$do_db = $class_database->doInsert($db_tbl_info, $v_info);
|
|
|
|
if ($cfg["conversion_" . ($type == 'doc' ? 'document' : $type) . "_que"] == 1) {
|
|
$class_database->doInsert($db_tbl_que, $v_que);
|
|
$db->execute(sprintf("UPDATE `%s` SET `approved`='0' WHERE `file_key`='%s' LIMIT 1;", $db_tbl_perm, $filekey));
|
|
}
|
|
|
|
if ($db->Affected_Rows() > 0) {
|
|
/* file count */
|
|
$ct_update = $db->execute(sprintf("UPDATE `db_accountuser` SET `usr_%s_count`=`usr_%s_count`+1 WHERE `usr_id`='%s' LIMIT 1;", $type[0], $type[0], $usr_id));
|
|
/* responses */
|
|
if ($_GET['r'] != '') {
|
|
$r_key = $class_filter->clr_str($_GET['r']);
|
|
if (strlen($r_key) == 10) {
|
|
$db_resp = VResponses::submitResponse(1, $filekey);
|
|
}
|
|
}
|
|
$success = $filekey;
|
|
} else {
|
|
$success = null;
|
|
}
|
|
|
|
$log = ($cfg['activity_logging'] == 1 and $action = new VActivity($usr_id, 0)) ? $action->addTo('log_upload', $type . ':' . $filekey) : null;
|
|
|
|
return $success;
|
|
}
|
|
/* conversion process init */
|
|
public function initConversion($db_id, $conversion_type, $be = '', $upload_short = false)
|
|
{
|
|
$function = 'do' . ucfirst($conversion_type) . 'Conversion';
|
|
|
|
$start = $db_id != '' ? self::$function($db_id, $be, $upload_short) : null;
|
|
}
|
|
/* start video conversion */
|
|
public function doVideoConversion($db_id, $be = '', $upload_short = false)
|
|
{
|
|
global $class_database, $cfg, $db, $class_filter;
|
|
|
|
if ($be == '' and ($_SESSION['USER_KEY'] == '' or strlen($db_id) != 10)) {
|
|
return false;
|
|
}
|
|
|
|
$cfg[] = $class_database->getConfigurations('server_path_php');
|
|
$user_key = $be == '' ? $class_filter->clr_str($_SESSION['USER_KEY']) : $_SESSION['file_owner'];
|
|
$convert = 'convert_video.php';
|
|
$cmd = $cfg['server_path_php'] . ' ' . $cfg['main_dir'] . '/f_modules/m_frontend/m_file/' . $convert . ' ' . $db_id . ' ' . $user_key . ' ' . $be;
|
|
|
|
exec(escapeshellcmd($cmd) . ' >/dev/null &');
|
|
}
|
|
/* start short conversion */
|
|
public function doShortConversion($db_id, $be = '', $upload_short = false)
|
|
{
|
|
global $class_database, $cfg, $db, $class_filter;
|
|
|
|
if ($be == '' and ($_SESSION['USER_KEY'] == '' or strlen($db_id) != 10)) {
|
|
return false;
|
|
}
|
|
|
|
$cfg[] = $class_database->getConfigurations('server_path_php');
|
|
$user_key = $be == '' ? $class_filter->clr_str($_SESSION['USER_KEY']) : $_SESSION['file_owner'];
|
|
$convert = 'convert_short.php';
|
|
$cmd = $cfg['server_path_php'] . ' ' . $cfg['main_dir'] . '/f_modules/m_frontend/m_file/' . $convert . ' ' . $db_id . ' ' . $user_key . ' ' . $be;
|
|
|
|
exec(escapeshellcmd($cmd) . ' >/dev/null &');
|
|
}
|
|
/* start image conversion */
|
|
public function doImageConversion($db_id, $be = '')
|
|
{
|
|
global $class_database, $cfg, $db, $class_filter;
|
|
|
|
if ($be == '' and ($_SESSION['USER_KEY'] == '' or strlen($db_id) != 10)) {
|
|
return false;
|
|
}
|
|
|
|
$cfg[] = $class_database->getConfigurations('server_path_php');
|
|
$user_key = $be == '' ? $class_filter->clr_str($_SESSION['USER_KEY']) : $_SESSION['file_owner'];
|
|
$cmd = $cfg['server_path_php'] . ' ' . $cfg['main_dir'] . '/f_modules/m_frontend/m_file/convert_image.php ' . $db_id . ' ' . $user_key . ' ' . $be;
|
|
|
|
exec(escapeshellcmd($cmd) . ' >/dev/null &');
|
|
}
|
|
/* start audio conversion */
|
|
public function doAudioConversion($db_id, $be = '')
|
|
{
|
|
global $class_database, $cfg, $db, $class_filter;
|
|
|
|
if ($be == '' and ($_SESSION['USER_KEY'] == '' or strlen($db_id) != 10)) {
|
|
return false;
|
|
}
|
|
|
|
$cfg[] = $class_database->getConfigurations('server_path_php');
|
|
$user_key = $be == '' ? $class_filter->clr_str($_SESSION['USER_KEY']) : $_SESSION['file_owner'];
|
|
$cmd = $cfg['server_path_php'] . ' ' . $cfg['main_dir'] . '/f_modules/m_frontend/m_file/convert_audio.php ' . $db_id . ' ' . $user_key . ' ' . $be;
|
|
|
|
exec(escapeshellcmd($cmd) . ' >/dev/null &');
|
|
}
|
|
/* start document conversion */
|
|
public function doDocConversion($db_id, $be = '')
|
|
{
|
|
global $class_database, $cfg, $db, $class_filter;
|
|
|
|
if ($be == '' and ($_SESSION['USER_KEY'] == '' or strlen($db_id) != 10)) {
|
|
return false;
|
|
}
|
|
|
|
$cfg[] = $class_database->getConfigurations('server_path_php');
|
|
$user_key = $be == '' ? $class_filter->clr_str($_SESSION['USER_KEY']) : $_SESSION['file_owner'];
|
|
$cmd = $cfg['server_path_php'] . ' ' . $cfg['main_dir'] . '/f_modules/m_frontend/m_file/convert_doc.php ' . $db_id . ' ' . $user_key . ' ' . $be;
|
|
|
|
exec(escapeshellcmd($cmd) . ' >/dev/null &');
|
|
}
|
|
/* notifying subscribers and admin of new uploads */
|
|
public function notifySubscribers($usr_id, $type, $filekey, $be_mail = '', $be = '')
|
|
{
|
|
global $db, $class_database, $language, $cfg;
|
|
|
|
$cfg[] = $class_database->getConfigurations('backend_notification_upload,backend_email');
|
|
$main_be = ($cfg['backend_notification_upload'] == 1 and $be_mail == '') ? VNotify::queInit('new_upload_be', array($cfg['backend_email']), $type[0] . $filekey, ($be != '' ? $class_database->singleFieldValue('db_accountuser', 'usr_user', 'usr_key', $be) : null)) : null;
|
|
|
|
if ($usr_id == 0) {
|
|
return false;
|
|
}
|
|
|
|
$usr_array = array();
|
|
$sub_ids = array();
|
|
|
|
if ($cfg['user_subscriptions'] == 1) {
|
|
$rs = $db->execute(sprintf("SELECT A.`usr_id`, A.`sub_id`, B.`usr_email` FROM `db_subscribers` A, `db_accountuser` B WHERE A.`usr_id`='%s' AND A.`mail_new_uploads`='1' AND A.`sub_id`=B.`usr_id`", $usr_id));
|
|
|
|
if ($rs->fields['usr_id']) {
|
|
while (!$rs->EOF) {
|
|
$usr_array[] = $rs->fields['usr_email'];
|
|
$sub_ids[] = $rs->fields['sub_id'];
|
|
|
|
$rs->MoveNext();
|
|
}
|
|
}
|
|
}
|
|
|
|
if ($cfg['user_follows'] == 1) {
|
|
$rs = $db->execute(sprintf("SELECT A.`usr_id`, A.`sub_id`, B.`usr_email` FROM `db_followers` A, `db_accountuser` B WHERE A.`usr_id`='%s' AND A.`mail_new_uploads`='1' AND A.`sub_id`=B.`usr_id`", $usr_id));
|
|
|
|
if ($rs->fields['usr_id']) {
|
|
while (!$rs->EOF) {
|
|
if (!in_array($rs->fields['sub_id'], $sub_ids)) {
|
|
$usr_array[] = $rs->fields['usr_email'];
|
|
$sub_ids[] = $rs->fields['sub_id'];
|
|
}
|
|
|
|
$rs->MoveNext();
|
|
}
|
|
}
|
|
}
|
|
|
|
if (isset($usr_array[0])) {
|
|
$mail_do = VNotify::queInit('new_upload', $usr_array, $type[0] . $filekey, VUserinfo::getUserName($usr_id));
|
|
}
|
|
}
|
|
/* check subscription limits */
|
|
public function subscriptionLimit($type)
|
|
{
|
|
global $db, $class_filter;
|
|
|
|
$uid = intval($_SESSION['USER_ID']);
|
|
$t = $type == 'document' ? 'doc' : $type;
|
|
$res = $db->execute(sprintf("SELECT A.`pk_total_%s`, B.`pk_%slimit` FROM `db_packusers` A, `db_packtypes` B WHERE A.`pk_id`=B.`pk_id` AND A.`usr_id`='%s' LIMIT 1;", $t, $t[0], $uid));
|
|
|
|
if ($res->fields["pk_" . $t[0] . "limit"] > 0 and $res->fields["pk_total_" . $t] >= $res->fields["pk_" . $t[0] . "limit"]) {
|
|
return true;
|
|
} else {
|
|
return false;
|
|
}
|
|
|
|
}
|
|
/* check subscription limits */
|
|
public static function subscriptionCheck($m, $q = '')
|
|
{
|
|
global $db, $smarty, $language;
|
|
|
|
$m = $m != 'document' ? $m : 'doc';
|
|
$arr = array();
|
|
$sql = sprintf("SELECT A.`pk_usedspace`, A.`pk_usedbw`, A.`pk_total_%s`, B.`pk_space`, B.`pk_bw`, B.`pk_%slimit` FROM `db_packusers` A, `db_packtypes` B WHERE A.`usr_id`='%s' AND A.`pk_id`=B.`pk_id`;", $m, $m[0], intval($_SESSION['USER_ID']));
|
|
$rs = $db->execute($sql);
|
|
|
|
$pk_usedspace = $rs->fields['pk_usedspace'] / (1024 * 1024);
|
|
$pk_usedbw = $rs->fields['pk_usedbw'] / (1024 * 1024);
|
|
$pk_filenr = $rs->fields["pk_total_" . $m];
|
|
|
|
$pk_space = $rs->fields['pk_space'];
|
|
$pk_bw = $rs->fields['pk_bw'];
|
|
$pk_limit = $rs->fields["pk_" . $m[0] . "limit"];
|
|
|
|
$err1 = str_replace('##TYPE##', $language["frontend.global." . $m[0]], $language['upload.err.msg.9']) . ' ' . $pk_limit . ' ' . $language['upload.err.msg.12'];
|
|
$err2 = $language['upload.err.msg.10'];
|
|
$err3 = $language['upload.err.msg.11'];
|
|
|
|
$error_message = ($pk_limit > 0 and $pk_filenr >= $pk_limit) ? $err1 : (($pk_space > 0 and $pk_usedspace >= $pk_space) ? $err3 : (($pk_bw > 0 and $pk_usedbw >= $pk_bw) ? $err2 : null));
|
|
|
|
if ($q == '') {
|
|
$smarty->assign('error_message', $error_message);
|
|
if ($error_message != '') {
|
|
return $error_message;
|
|
}
|
|
} else {
|
|
if ($error_message != '') {
|
|
$js = 'var uploader = $("#uploader").pluploadQueue(); uploader.splice(); $(".plupload_buttons").detach(); $(".plupload_wrapper.plupload_scroll").next().detach(); $(".plupload_droptext").html("' . $error_message . '");';
|
|
|
|
echo VGenerate::declareJS($js);
|
|
}
|
|
}
|
|
}
|
|
/* upload cfg */
|
|
public function initCFG($be = '')
|
|
{
|
|
global $cfg, $smarty, $class_filter, $class_database, $db, $language;
|
|
|
|
$get_type = $class_filter->clr_str($_GET['t']);
|
|
$sub_check = ($be == '' and $cfg['paid_memberships'] == 1) ? self::subscriptionCheck($get_type) : null;
|
|
$types = array();
|
|
$allowed_types = explode(",", $cfg[($get_type == 'doc' ? 'document' : $get_type) . "_file_types"]);
|
|
|
|
foreach ($allowed_types as $key => $val) {
|
|
$types[$key] = $val;
|
|
}
|
|
$types_js = '(' . implode(", ", $types) . ')';
|
|
$types_cfg = implode(",", $types);
|
|
|
|
if ($be == 1) {
|
|
$chk = $db->execute("SELECT `usr_key`, `usr_user` FROM `db_accountuser` WHERE `usr_status`='1' ORDER BY `usr_user` LIMIT 1;");
|
|
$smarty->assign('user_list', VbeSettings::username_selectList());
|
|
$err = $chk->fields['usr_key'] == '' ? $smarty->assign("error_message", $language['upload.err.msg.13']) : null;
|
|
}
|
|
|
|
$smarty->assign("allowed_file_types", $types_js);
|
|
$smarty->assign("allowed_file_cfg", $types_cfg);
|
|
$smarty->assign("file_limit", $cfg[($get_type == 'doc' ? 'document' : $get_type) . "_limit"]);
|
|
$smarty->assign("file_category", VFiles::fileCategorySelect('upload'));
|
|
$smarty->assign("upload_session", session_id());
|
|
|
|
if ($be == '' and $cfg['paid_memberships'] == 1) {
|
|
$sql = sprintf("SELECT A.`pk_id`, A.`pk_usedspace`, A.`pk_usedbw`, A.`pk_total_%s`,
|
|
B.`pk_space`, B.`pk_bw`, B.`pk_%slimit`
|
|
FROM `db_packusers` A, `db_packtypes` B WHERE A.`usr_id`='%s' AND A.`pk_id`=B.`pk_id` AND B.`pk_active`='1';", ($get_type == 'document' ? 'doc' : $get_type), $get_type[0], intval($_SESSION['USER_ID']));
|
|
$rs = $db->execute($sql);
|
|
$pk_space = $rs->fields['pk_space'];
|
|
$pk_space_u = $rs->fields['pk_usedspace'];
|
|
$pk_bw = $rs->fields['pk_bw'];
|
|
$pk_bw_u = $rs->fields['pk_usedbw'];
|
|
|
|
$units = array('B', 'KB', 'MB', 'GB', 'TB', 'PB', 'EB', 'ZB', 'YB');
|
|
$sp_power = $pk_space_u > 0 ? floor(log($pk_space_u, 1024)) : 3;
|
|
$bw_power = $pk_bw_u > 0 ? floor(log($pk_bw_u, 1024)) : 3;
|
|
|
|
$s = 1024;
|
|
if ($sp_power == 2) {
|
|
$s = (1024 * 1024);
|
|
} elseif ($sp_power == 3) {
|
|
$s = (1024 * 1024 * 1024);
|
|
}
|
|
$b = 1024;
|
|
if ($bw_power == 2) {
|
|
$b = (1024 * 1024);
|
|
} elseif ($bw_power == 3) {
|
|
$b = (1024 * 1024 * 1024);
|
|
}
|
|
|
|
$_fsp = ($pk_space - round($pk_space_u / $s));
|
|
$_fbw = ($pk_bw - round($pk_bw_u / $b));
|
|
|
|
$smarty->assign("subscription_limit", $rs->fields["pk_" . $get_type[0] . "limit"]);
|
|
$smarty->assign("subscription_used", $rs->fields["pk_total_" . ($get_type == 'document' ? 'doc' : $get_type)]);
|
|
$smarty->assign("subscription_bw", $_fbw);
|
|
$smarty->assign("subscription_space", $_fsp);
|
|
$smarty->assign("the_stats", VUseraccount::subscriptionStats());
|
|
}
|
|
}
|
|
/* more checks */
|
|
public function checkRdr($section)
|
|
{
|
|
global $cfg;
|
|
|
|
$sect_arr = array("video", "short", "image", "audio", "document");
|
|
if ($section != '') {
|
|
unset($sect_arr[$section]);
|
|
}
|
|
|
|
foreach ($sect_arr as $key => $val) {
|
|
if ($cfg[$val . "_module"] == 1 and $cfg[$val . "_uploads"] == 1) {
|
|
return '?t=' . $val;
|
|
}
|
|
|
|
}
|
|
}
|
|
/* checking allowed functions */
|
|
public function checkSection($section)
|
|
{
|
|
global $cfg;
|
|
|
|
$rd_to = self::checkRdr($section);
|
|
$hd_to = $rd_to != '' ? $cfg['main_url'] . "/" . VHref::getKey("upload") . $rd_to : $cfg['main_url'] . "/" . VHref::getKey("account");
|
|
|
|
header("Location: " . $hd_to);exit;
|
|
}
|
|
/* type init */
|
|
public function typeInit($upload_type = 'video')
|
|
{
|
|
global $cfg, $class_filter;
|
|
|
|
$sect_arr = array("video", "short", "image", "audio", "document");
|
|
|
|
if (in_array($upload_type, $sect_arr)) {
|
|
if ($cfg[$upload_type . "_module"] == 1 and $cfg[$upload_type . "_uploads"] == 1) {
|
|
return $upload_type;
|
|
}
|
|
}
|
|
}
|
|
/* checking for verified email */
|
|
public function verifiedEmailCheck()
|
|
{
|
|
global $db, $language, $smarty;
|
|
|
|
$usr_id = intval($_SESSION['USER_ID']);
|
|
$res = $db->execute(sprintf("SELECT `usr_email`, `usr_verified` FROM `db_accountuser` WHERE `usr_id`='%s' LIMIT 1;", $usr_id));
|
|
$usr_ver = $res->fields['usr_verified'];
|
|
$usr_mail = $res->fields['usr_email'];
|
|
|
|
if ($usr_ver == 0) {
|
|
$smarty->assign('usr_verified', $usr_ver);
|
|
$smarty->assign('usr_mail', $usr_mail);
|
|
$smarty->assign('c_rand', rand(1, 9999));
|
|
}
|
|
}
|
|
/* process sending verification email */
|
|
public function processVerify()
|
|
{
|
|
global $cfg, $language, $class_filter;
|
|
|
|
$user_email = $class_filter->clr_str($_POST['verify_email']);
|
|
$error_message = $_POST['verification_captcha'] != $_SESSION['signin_captcha'] ? $language['upload.err.msg.8'] : null;
|
|
$notice_message = $error_message == '' ? $language['notif.success.request'] : null;
|
|
echo $notice_js = $error_message == '' ? VGenerate::declareJS('$("#c-image").attr("src", "' . $cfg['main_url'] . '/' . VHref::getKey("captcha") . '?t=' . rand(1, 9999) . '"); $("#verification-captcha").val("");') : null;
|
|
$notification = $error_message == '' ? VNotify::queInit('account_email_verification', array($user_email), '') : null;
|
|
|
|
echo VGenerate::noticeTpl(' no-top-padding', $error_message, $notice_message);
|
|
}
|
|
}
|