Blame Identity/Webenv/App/Mantis/1.1.2-1.fc9/proj_doc_update.php

f2e824
f2e824
# Mantis - a php based bugtracking system
f2e824
f2e824
# Copyright (C) 2000 - 2002  Kenzaburo Ito - kenito@300baud.org
f2e824
# Copyright (C) 2002 - 2007  Mantis Team   - mantisbt-dev@lists.sourceforge.net
f2e824
f2e824
# Mantis is free software: you can redistribute it and/or modify
f2e824
# it under the terms of the GNU General Public License as published by
f2e824
# the Free Software Foundation, either version 2 of the License, or
f2e824
# (at your option) any later version.
f2e824
#
f2e824
# Mantis is distributed in the hope that it will be useful,
f2e824
# but WITHOUT ANY WARRANTY; without even the implied warranty of
f2e824
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
f2e824
# GNU General Public License for more details.
f2e824
#
f2e824
# You should have received a copy of the GNU General Public License
f2e824
# along with Mantis.  If not, see <http://www.gnu.org/licenses/>.
f2e824
f2e824
	#------------------------------
f2e824
	#   $Revision: 2643 $
f2e824
	#     $Author: al $    
f2e824
	#       $Date: 2009-06-18 19:06:27 -0400 (Thu, 18 Jun 2009) $  
f2e824
	#------------------------------
f2e824
f2e824
	require_once( 'core.php' );
f2e824
f2e824
	$t_core_path = config_get( 'core_path' );
f2e824
f2e824
	require_once( $t_core_path.'file_api.php' );
f2e824
f2e824
	# helper_ensure_post();
f2e824
f2e824
	# Check if project documentation feature is enabled.
f2e824
	if ( OFF == config_get( 'enable_project_documentation' ) ||
f2e824
		!file_is_uploading_enabled() ||
f2e824
		!file_allow_project_upload() ) {
f2e824
		access_denied();
f2e824
	}
f2e824
f2e824
	$f_file_id = gpc_get_int( 'file_id' );
f2e824
	$f_title = gpc_get_string( 'title' );
f2e824
	$f_description	= gpc_get_string( 'description' );
f2e824
	$f_file = gpc_get_file( 'file' );
f2e824
f2e824
	$t_project_id = file_get_field( $f_file_id, 'project_id', 'project' );
f2e824
f2e824
	access_ensure_project_level( config_get( 'upload_project_file_threshold' ), $t_project_id );
f2e824
f2e824
	if ( is_blank( $f_title ) ) {
f2e824
		trigger_error( ERROR_EMPTY_FIELD, ERROR );
f2e824
	}
f2e824
f2e824
	$c_file_id = db_prepare_int( $f_file_id );
f2e824
	$c_title = db_prepare_string( $f_title );
f2e824
	$c_description = db_prepare_string( $f_description );
f2e824
f2e824
	$t_project_file_table = config_get( 'mantis_project_file_table' );
f2e824
f2e824
	#@@@ (thraxisp) this code should probably be integrated into file_api to share
f2e824
	#  methods used to store files
f2e824
f2e824
	extract( $f_file, EXTR_PREFIX_ALL, 'v' );
f2e824
f2e824
	if ( is_uploaded_file( $v_tmp_name ) ) {
f2e824
		if ( php_version_at_least( '4.2.0' ) ) {
f2e824
		    switch ( (int) $v_error ) {
f2e824
		        case UPLOAD_ERR_INI_SIZE:
f2e824
		        case UPLOAD_ERR_FORM_SIZE:
f2e824
                    trigger_error( ERROR_FILE_TOO_BIG, ERROR );
f2e824
                    break;
f2e824
		        case UPLOAD_ERR_PARTIAL:
f2e824
		        case UPLOAD_ERR_NO_FILE:
f2e824
                    trigger_error( ERROR_FILE_NO_UPLOAD_FAILURE, ERROR );
f2e824
                    break;
f2e824
                default:
f2e824
                    break;
f2e824
            }
f2e824
        }
f2e824
        
f2e824
	    if ( ( '' == $v_tmp_name ) || ( '' == $v_name ) ) {
f2e824
		    trigger_error( ERROR_FILE_NO_UPLOAD_FAILURE, ERROR );
f2e824
        }
f2e824
		if ( !file_type_check( $v_name ) ) {
f2e824
			trigger_error( ERROR_FILE_NOT_ALLOWED, ERROR );
f2e824
		}
f2e824
f2e824
		if ( !is_readable( $v_tmp_name ) ) {
f2e824
			trigger_error( ERROR_UPLOAD_FAILURE, ERROR );
f2e824
		}
f2e824
f2e824
		$t_project_id = helper_get_current_project();
f2e824
f2e824
		# grab the original file path and name
f2e824
		$t_disk_file_name = file_get_field( $f_file_id, 'diskfile', 'project' );
f2e824
		$t_file_path = dirname( $t_disk_file_name );
f2e824
f2e824
		# prepare variables for insertion
f2e824
		$c_file_name = db_prepare_string( $v_name );
f2e824
		$c_file_type = db_prepare_string( $v_type );
f2e824
		$t_file_size = filesize( $v_tmp_name );
f2e824
		$t_max_file_size = (int)min( ini_get_number( 'upload_max_filesize' ), ini_get_number( 'post_max_size' ), config_get( 'max_file_size' ) );
f2e824
        if ( $t_file_size > $t_max_file_size ) {
f2e824
            trigger_error( ERROR_FILE_TOO_BIG, ERROR );
f2e824
        }
f2e824
		$c_file_size = db_prepare_int( $t_file_size );
f2e824
f2e824
		$t_method = config_get( 'file_upload_method' );
f2e824
		switch ( $t_method ) {
f2e824
			case FTP:
f2e824
			case DISK:
f2e824
				file_ensure_valid_upload_path( $t_file_path );
f2e824
f2e824
				if ( FTP == $t_method ) {
f2e824
					$conn_id = file_ftp_connect();
f2e824
					file_ftp_delete ( $conn_id, $t_disk_file_name );
f2e824
					file_ftp_put ( $conn_id, $t_disk_file_name, $v_tmp_name );
f2e824
					file_ftp_disconnect ( $conn_id );
f2e824
				}
f2e824
				if ( file_exists( $t_disk_file_name ) ) {
f2e824
					file_delete_local( $t_disk_file_name );
f2e824
				}
f2e824
				if ( !move_uploaded_file( $v_tmp_name, $t_disk_file_name ) ) {
f2e824
					trigger_error( FILE_MOVE_FAILED, ERROR );
f2e824
				}
f2e824
				chmod( $t_disk_file_name, config_get( 'attachments_file_permissions' ) );
f2e824
f2e824
				$c_content = '';
f2e824
				break;
f2e824
			case DATABASE:
f2e824
				$c_content = db_prepare_string( fread ( fopen( $v_tmp_name, 'rb' ), $v_size ) );
f2e824
				break;
f2e824
			default:
f2e824
				# @@@ Such errors should be checked in the admin checks
f2e824
				trigger_error( ERROR_GENERIC, ERROR );
f2e824
		}
f2e824
		$t_now = db_now();
f2e824
		$query = "UPDATE $t_project_file_table
f2e824
			SET title='$c_title', description='$c_description', date_added=$t_now,
f2e824
				filename='$c_file_name', filesize=$c_file_size, file_type='$c_file_type', content='$c_content'
f2e824
				WHERE id='$c_file_id'";
f2e824
	} else {
f2e824
		$query = "UPDATE $t_project_file_table
f2e824
				SET title='$c_title', description='$c_description'
f2e824
				WHERE id='$c_file_id'";
f2e824
	}
f2e824
f2e824
	$result = db_query( $query );
f2e824
	if ( !$result ) {
f2e824
		trigger_error( ERROR_GENERIC, ERROR  );
f2e824
	}
f2e824
f2e824
	$t_redirect_url = 'proj_doc_page.php';
f2e824
f2e824
	html_page_top1();
f2e824
	html_meta_redirect( $t_redirect_url );
f2e824
	html_page_top2();
f2e824
?>
f2e824
f2e824
f2e824
f2e824
	echo '

' . lang_get( 'operation_successful' ).'

';
f2e824
	print_bracket_link( $t_redirect_url, lang_get( 'proceed' ) );
f2e824
?>
f2e824
f2e824
f2e824