astroport/www/LOVELand/podcast/core/admin/sendfile.php

318 lines
11 KiB
PHP
Executable File

<?php
############################################################
# PODCAST GENERATOR
#
# Created by Alberto Betella
# http://www.podcastgenerator.net
#
# This is Free Software released under the GNU/GPL License.
############################################################
########### Security code, avoids cross-site scripting (Register Globals ON)
if (isset($_REQUEST['GLOBALS']) OR isset($_REQUEST['absoluteurl']) OR isset($_REQUEST['amilogged']) OR isset($_REQUEST['theme_path'])) { exit; }
########### End
### Check if user is logged ###
if (!isUserLogged()) { exit; }
###
if (isset($_FILES['userfile']) AND $_FILES['userfile']!=NULL AND isset($_POST['title']) AND $_POST['title']!=NULL AND isset($_POST['description']) AND $_POST['description']!=NULL){ //001
$file= $_FILES['userfile'] ['name']; //episode file
// if (isset($_FILES['image'])) $img= $_FILES['image'] ['name']; // image file
$title = $_POST['title'];
$description = $_POST['description'];
if (isset($_POST['category']) AND $_POST['category'] != NULL) $category = $_POST['category'];
$long_description = $_POST['long_description'];
$keywords = $_POST['keywords'];
$explicit = $_POST['explicit'];
$auth_name = $_POST['auth_name'];
$auth_email = $_POST['auth_email'];
// $errore= $_FILES['userfile']['error'];
$temporaneo= $_FILES['userfile']['tmp_name'];
// echo "<br /><br /><br />$file - err $errore - temp: $temporaneo<br /><br /><br />";
$filesuffix = NULL; // declare variable for duplicated filenames
$image_new_name = NULL; // declare variable for image name
####
## here I check lenght of long description: according to the iTunes technical specifications
## the itunes:summary field can be up to 4000 characters, while the other fields up to 255
$longdescmax = 4000; #set max characters variable. iTunes specifications by Apple say "max 4000 characters" for long description field
if (strlen($long_description)<$longdescmax) { // 002 (if long description IS NOT too long, go on executing...
####
#### INPUT DEPURATION
$title = depurateContent($title); //title
$description = depurateContent($description); //short desc
$long_description = depurateContent($long_description); //long desc
$keywords = depurateContent($keywords); //Keywords
$auth_name = depurateContent($auth_name); //author's name
##############
### processing Long Description
#$PG_mainbody .= "QUI: $long_description<br>lunghezza:".strlen($long_description)."<br>"; //debug
if ($long_description == NULL OR $long_description == " ") { //if user didn't input long description the long description is equal to short description
$PG_mainbody .= "<p>"._("Long description not present (the short description will be used)")."</p>";
$long_description = $description;
}
else {
$PG_mainbody .= "<p>"._("Long Description present")."</p>";
$long_description = str_replace("&nbsp;", " ", $long_description);
}
##############
### processing iTunes KEYWORDS
## iTunes supports a maximum of 12 keywords for searching: don't know how many keywords u can add in a feed. Anyway it's better to add a few keyword, so we display a warning if user submits more than 12 keywords
# $PG_mainbody .= "$keywords<br>"; /debug
if (isset($ituneskeywords) AND $ituneskeywords != NULL) {
$PG_mainbody .= "<p>"._("iTunes Keywords:")." $ituneskeywords</p>";
$singlekeyword=explode(",",$keywords); // divide filename from extension
if ($singlekeyword[12] != NULL) { //if more than 12 keywords
$PG_mainbody .= "<p>- "._("You submitted more than 12 keywords for iTunes...")."</p>";
}
}
##############
### processing Author
if (isset($auth_name) AND $auth_name != NULL) { //if a different author is specified
$PG_mainbody .= "<p>"._("Author specified for this episode...")."</p>";
if (!validate_email($auth_email)) { //if author doesn't have a valid email address, just ignore it and use default author
$PG_mainbody .= "<p>"._("No")."authemail "._("Author will be IGNORED")."</p>";
$auth_name = NULL; //ignore author
$auth_email = NULL; //ignore email
}
}
else { //if author's name doesn't exist unset also email field
$auth_email = NULL; //ignore email
}
#show submitted data (debug purposes)
//$PG_mainbody .= "Dati inseriti:</b><br><br>Titolo: <i>$title</i> <br>Descrizione breve: <i>$description</i> <br>Descrizione lunga: <i>$long_description</i>";
###
## start processing podcast
$PG_mainbody .= "<p><b>"._("Processing episode...")."</b></p>";
$PG_mainbody .= "<p>"._("Original filename:")." <i>$file</i></p>";
$file_parts = divideFilenameFromExtension($file);
$filenameWithoutExtension = $file_parts[0];
$fileExtension = $file_parts[1];
// $PG_mainbody .= "<p>"._("File")."_ext <i>$fileExtension</i></p>"; //display file extension
##############
### processing file extension
$fileData = checkFileType(strtolower($fileExtension),$absoluteurl); //lowercase extension to compare with the accepted extensions array
if (isset($fileData[0])){ //avoids php notice if array [0] doesn't exist
$podcast_filetype=$fileData[0];
}else {
$podcast_filetype=NULL;
}
if ($fileExtension==strtoupper($podcast_filetype)) $podcast_filetype = strtoupper($podcast_filetype); //accept also uppercase extension
if ($fileExtension==$podcast_filetype) { //003 (if file extension is accepted, go on....
##############
##############
### file name depuration!!!! Important... By default Podcastgen uses a "strict" depuration policy (just characters from a to z and numbers... no accents and other characters).
if ($strictfilenamepolicy == "yes") {
#enable this to have a very strict filename policy
$filenameWithoutExtension = renamefilestrict ($filenameWithoutExtension);
}
else {
# LESS strict renaming policy
$filenameWithoutExtension = renamefile ($filenameWithoutExtension);
}
$fileExtension = strtolower ($fileExtension); //lowercase file extension
##############
############## end filename depuration
if ($strictfilenamepolicy == "yes") $filenamechanged = date('Y-m-d')."_".$filenameWithoutExtension; //add date, to order files in mp3 players
else $filenamechanged = $filenameWithoutExtension;
$uploadFile = $upload_dir . $filenamechanged.".".$fileExtension ;
$uploadFileXML = $upload_dir . $filenamechanged.".xml" ;
while (file_exists("$uploadFile") OR file_exists("$uploadFileXML")) { //if file already exists add an incremental suffix
$filesuffix++;
# $PG_mainbody .= "$filesuffix"; //debug
$uploadFile = $absoluteurl . $upload_dir . $filenamechanged . $filesuffix.".".$fileExtension ;
$uploadFileXML = $absoluteurl . $upload_dir . $filenamechanged . $filesuffix.".xml" ;
}
$PG_mainbody .= _("File Renamed:")." <i>$filenamechanged$filesuffix.$fileExtension</i><br />";
$uploadFile == NULL ;
#$PG_mainbody .= "<br>Uploaded file:$uploadFile<br>";
//move file from the temp directory to the upload directory
if (move_uploaded_file($_FILES['userfile']['tmp_name'], $uploadFile))
{
############################################
# START CHANGE DATE
//print_r($_POST);
if (isset($_POST['Day']) AND isset($_POST['Month']) AND isset($_POST['Year']) AND isset($_POST['Hour']) AND isset($_POST['Minute'])) {
$filefullpath = $absoluteurl.$upload_dir.$filenamechanged.$filesuffix.'.'.$fileExtension;
//$oradelfile = filemtime($filefullpath);
$oracambiata = mktime($_POST['Hour'],$_POST['Minute'],0,$_POST['Month'],$_POST['Day'],$_POST['Year']); //seconds are simply 0, no need to handle them
// echo $oracambiata;
if ($oracambiata > time() AND checkdate($_POST['Month'],$_POST['Day'],$_POST['Year']) == TRUE) {
touch($filefullpath,$oracambiata);
$PG_mainbody .= "<p>"._("The episode date has been set to future. This episode won't show up till then.")."</p>";
}
}
# END CHANGE DATE
############################################
$thisEpisodeData = array($title,$description,$long_description,$image_new_name,$category,$keywords,$explicit,$auth_name,$auth_email);
$episodeXMLDBAbsPath = $absoluteurl.$upload_dir.$filenamechanged.$filesuffix.'.xml'; // extension = XML
//// Creating xml file associated to episode
writeEpisodeXMLDB($thisEpisodeData,$absoluteurl,$filefullpath,$episodeXMLDBAbsPath,$filenamechanged.$filesuffix,TRUE);
$PG_mainbody .= "<p><b><font color=\"green\">"._("File sent")."</font></b></p>"; // If upload is successful.
########## REGENERATE FEED
//include ("$absoluteurl"."core/admin/feedgenerate.php"); //(re)generate XML feed
$episodesCounter = generatePodcastFeed(TRUE,NULL,FALSE); //Output in file
##########
$PG_mainbody .= "<p><a href=\"$url\">"._("Go to the homepage")."</a> - <a href=\"?p=admin&do=upload\">"._("Upload another episode")."</a></p>";
}
else //If upload is not successful
{
$PG_mainbody .= "<p><b><font color=\"red\">"._("FILE ERROR")." "._("Upload Failed")."</font></b></p>";
$PG_mainbody .= "<p><b>"._("FILE ERROR")."1</b></p>";
$PG_mainbody .= "<p> - "._("You didn't assign writing permission to the media folder and the uploaded file can't be saved on the server.")."</p>";
$PG_mainbody .= "<p> - "._("Your file is bigger than upload max filesize on your server.")."</p>";
$PG_mainbody .= "<p><b>"._("Useful information for debugging:")."</b> <a href=\"?p=admin&amp;do=serverinfo\">"._("Your server configuration")."</a></p>";
$PG_mainbody .= "<p>"._("FILE ERROR")." <a href=\"http://www.podcastgenerator.net/\" target=\"_blank\">"._("Podcast Generator web page")."</a></p>";
$PG_mainbody .= '<p><form>
<input type="button" value="'._("Back").'" class="btn btn-danger btn-small" onClick="history.back()">
</form></p>';
}
} // 003 (if file extension is not accepted)
else {
$PG_mainbody .= "<p><i>$fileExtension</i> "._("is not a supported extension or your filename contains forbidden characters.")."</p>";
$PG_mainbody .= '<form>
<input type="button" value="'._("Back").'" class="btn btn-danger btn-small" onClick="history.back()">
</form>';
}
} // 002
else { //if long description is more than max characters allowed
$PG_mainbody .= "<b>"._("Long Description")."toolong</b><p>"._("Long Description")."maxchar $longdescmax "._("characters")." - "._("Actual Length")." <font color=red>".strlen($long_description)."</font> "._("characters").".</p>";
$PG_mainbody .= '<form>
<input type="button" value="'._("Back").'" class="btn btn-danger btn-small" onClick=\"history.back()\">
</form>';
}
#### end of long desc lenght checking
} //001
else { //if file, description or title not present...
$PG_mainbody .= '<p>'._("Error: No file, description or title present").'
<br />
<form>
<input type="button" value="&laquo; '._("Back").'" onClick="history.back()" class="btn btn-danger btn-small" />
</form>
</p>
';
}
?>