album)) {
printPopupStart(clearGalleryTitle(gTranslate('core', "Add items")));
echo gallery_error(
sprintf(gTranslate('core', "Invalid Request. Please go back to %s."),
galleryLink(makeGalleryUrl(), $gallery->app->galleryTitle))
);
exit;
}
// Hack check
if (!$gallery->user->canAddToAlbum($gallery->album)) {
printPopupStart(clearGalleryTitle(gTranslate('core', "Add items")));
gallery_error(sprintf(gTranslate('core', "You are not allowed to perform this action! Please go back to %s."),
galleryLink(makeGalleryUrl(), $gallery->app->galleryTitle))
);
exit;
}
if(!empty($_FILES)) {
$uploadTry = true;
foreach ($_FILES as $name => $attribs) {
foreach($attribs['size'] as $nr => $value) {
if($value == 0) {
foreach($attribs as $attrib => $trash)
unset($_FILES[$name][$attrib][$nr]);
}
}
if(empty($_FILES[$name]['name'])) {
unset($_FILES[$name]);
}
}
}
$image_tags = array();
$info_tags = array();
doctype();
?>
<?php echo gTranslate('core', "Processing and Saving Photos") ?>
';
/* Process all urls first.
* $urls contains all URLs given by the "URL Upload".
* $urls should be empty when using the "Form Upload".
*/
$messages = array();
foreach ($urls as $url) {
/* Get rid of any extra white space */
$url = trim($url);
if(empty($url)) {
continue;
}
/*
* Check to see if the URL is a local directory (inspired by code from Jared (hogalot))
*/
if (fs_is_dir($url)) {
echo gallery_info(
sprintf(gTranslate('core', "Processing '%s' as a local directory."),
'' . htmlspecialchars(strip_tags(urldecode($url))) . '')
);
$handle = fs_opendir($url);
if($handle) {
while (($file = readdir($handle)) != false) {
if (isXSSclean($file)) {
$tag = pathinfo($file);
$tag = strtolower(isset($tag['extension']) ? $tag['extension'] : '');
if (isAcceptableFormat($tag) || canDecompressArchive($tag)) {
/* File seems to be valid, so add to userfile */
if (substr($url,-1) == "/") {
$image_tags[] = fs_export_filename($url . $file);
}
else {
$image_tags[] = fs_export_filename($url . "/" . $file);
}
}
if ($tag == 'csv') {
if (substr($url,-1) == "/") {
$info_tags[] = fs_export_filename($url . $file);
}
else {
$info_tags[] = fs_export_filename($url . "/" . $file);
}
}
}
else {
if ($file != "." && $file != "./" && $file != ".." && $file != "..") {
$badFilesMessages = true;
}
}
}
closedir($handle);
}
continue;
}
// $url is not a dir
else {
echo gallery_info(
sprintf(gTranslate('core', "Processing '%s' as file or URL."),
'' . htmlspecialchars(strip_tags(urldecode($url))) . '')
);
}
$urlParts = parse_url($url);
$urlPathInfo = isset($urlParts['path']) ? pathinfo($urlParts['path']) : '';
$urlExt = isset($urlPathInfo['extension']) ? strtolower($urlPathInfo['extension']) : '';
/* If the URI doesn't start with a scheme, prepend 'http://' */
if (!fs_is_file($url) && !pathIsAbsolute($url)) {
if(! preg_match('!^(http|ftp)\://!', $url)) {
// Unable to find %s locally - trying http
$url = "http://$url";
}
/* Parse URL for name and file type */
$url_stuff = @parse_url($url);
if (!isset($url_stuff["path"])) {
$url_stuff["path"]="";
}
$name = basename($url_stuff["path"]);
}
else {
debugMessage(gTranslate('core', 'local file'), __FILE__, __LINE__, 2);
$name = basename($url);
}
/*
* Try to open the url in lots of creative ways.
* Do NOT use fs_fopen here because that will pre-process
* the URL in win32 style (ie, convert / to \, etc).
*/
$urlArray = array($url, "$url/");
if (!ereg("http", $url)) {
$urlArray[] = "http://$url";
$urlArray[] = "http://$url/";
}
// Dont output warning messages if we cant open url
do {
$tryUrl = array_shift($urlArray);
$id = @fopen($tryUrl, "rb");
}
while (!$id && !empty($urlArray));
if (!$id) {
echo gallery_error(gTranslate('core', "Could not open as URL, file or directory."));
$invalidUrls++;
continue;
}
else {
debugMessage(sprintf(gTranslate('core', "Opened '%s' successfully"), $url), __FILE__, __LINE__, 2);
}
/*
* If this is an image or movie -
* copy it locally and add it to the processor array
*/
if (isAcceptableFormat($urlExt) || isAcceptableArchive($urlExt)) {
/* copy file locally
* use fopen instead of fs_fopen to prevent directory and filename disclosure
*/
$file = $gallery->app->tmpDir . "/upload." . genGUID();
$od = @fopen($file, "wb");
if ($id && $od) {
while (!feof($id)) {
fwrite($od, fread($id, 65536));
set_time_limit($gallery->app->timeLimit);
}
fclose($id);
fclose($od);
}
/* Make sure we delete this file when we're through... */
$temp_files[$file]=1;
/* Add it to userfile */
$_FILES['userfile']['name'][] = $name;
$_FILES['userfile']['tmp_name'][] = $file;
debugMessage(gTranslate('core', "Copy file locally"), __FILE__, __LINE__, 2);
}
else {
/* Slurp the file */
processingMsg(sprintf(gTranslate('core', "Parsing %s for images..."), $url));
$contents = fs_file_get_contents($url);
/* We'll need to add some stuff to relative links */
$base_url = $url_stuff["scheme"] . '://' . $url_stuff["host"];
$base_dir = '';
if (isset($url_stuff["port"])) {
$base_url .= ':' . $url_stuff["port"];
}
/* Hack to account for broken dirname
* This has to make the ugly assumption that the URL is either a
* directory (with or without trailing /), or a filename containing a "."
* This prevents a directory without a trailing / from being inadvertantly
* dropped from resulting URLs.
*/
if (ereg("/$", $url_stuff["path"]) || !ereg("\.", $name)) {
$base_dir = $url_stuff["path"];
}
else {
$base_dir = dirname($url_stuff["path"]);
}
/* Make sure base_dir ends in a / ( accounts for empty base_dir ) */
if (!ereg("/$", $base_dir)) {
$base_dir .= '/';
}
$things = array();
$results =array();
if (preg_match_all('{(?:src|href)\s*=\s*(["\'])([^\'">]+\.'. acceptableFormatRegexp() .')(?:\1)}i', $contents, $matches)) {
foreach ($matches[2] as $url) {
$things[$url] = 1;
}
}
/* Add each unique link to an array we scan later */
foreach (array_keys($things) as $thing) {
/*
* Some sites (slashdot) have images that start with // and this
* confuses Gallery. Prepend 'http:'
*/
if (substr($thing, 0, 2) == '//') {
$thing = "http:$thing";
}
/* Absolute Link ( http://www.foo.com/bar ) */
if (substr($thing, 0, 4) == 'http') {
$image_tags[] = $thing;
}
/* Relative link to the host ( /foo.bar )*/
elseif (substr($thing, 0, 1) == '/') {
$image_tags[] = $base_url . $thing;
}
/* Relative link to the dir ( foo.bar ) */
else {
$image_tags[] = $base_url . $base_dir . $thing;
}
}
/* Tell user how many links we found, but delay processing */
processingMsg(sprintf(gTranslate('core', "Found %d images"), count($image_tags)));
}
}
} /* if ($urls) */
// Begin Metadata fetching and preprocessing
$image_info = array();
// Get meta data
if (!empty($meta)) {
echo gallery_info(gTranslate('core',"Metainfo found."));
foreach ($meta as $data) {
$image_info = array_merge($image_info, parse_csv(fs_export_filename($data),";"));
}
}
if(!empty($_FILES['metafile'])) {
if (!isset($meta) || isDebugging()) {
echo gallery_info(gTranslate('core', "Metainfo found"));
}
$image_info = array();
for($i = 0; $i < sizeof($_FILES['metafile']['name']); $i++) {
$name = $_FILES['metafile']['name'][$i];
if(isXSSclean($name)) {
echo debugMessage("name $name", __FILE__, __LINE__);
$file = $_FILES['metafile']['tmp_name'][$i];
echo debugMessage("file $file", __FILE__, __LINE__);
// image_info is the array that contains the parsed from the csv file(s)
$image_info = array_merge($image_info, parse_csv(fs_export_filename($file),";"));
}
}
$exampleMetaData = $image_info[0];
// Find the key of the file name field
foreach (array_keys($exampleMetaData) as $currKey) {
if (eregi("^\"?file\ ?name\"?$", $currKey)) {
$filenameKey = $currKey;
}
}
if(!isset($filenameKey)) {
echo gallery_error(sprintf(gTRanslate('core', "Filename-column not found! CSV data not valid and is not used.")));
}
/* $captionMetaFields is an array that containes possible fields for the caption.
* Ordered in priority from high to low.
*/
$captionMetaFields = array("Caption", "Title", "Description");
}
// End Metadata preprocessing
$upload_started = false;
echo "\n";
echo debugMessage("Now we start processing the given Files. (If they were given)", __FILE__, __LINE__,1);
/* Delete file with malicious characters. */
if(!empty($_FILES['userfile'])) {
foreach ($_FILES['userfile']['name'] as $nr => $filename) {
if(! isXSSclean($filename)) {
unset($_FILES['userfile']['name'][$nr]);
unset($_FILES['userfile']['tmp_name'][$nr]);
}
}
}
$photoCount = isset($_FILES['userfile']) ? sizeof($_FILES['userfile']['name']) : 0;
if(isset($uploadTry) || $photoCount > 0) {
echo '";
}
echo '