884 lines
38 KiB
PHP
884 lines
38 KiB
PHP
<?php
|
||
|
||
function getcache($str)
|
||
{
|
||
$cache = null;
|
||
$cache = new \Doctrine\Common\Cache\FilesystemCache(sys_get_temp_dir(), __DIR__.'Onedrive');
|
||
return $cache->fetch($str);
|
||
}
|
||
|
||
function savecache($key, $value, $exp = 3300)
|
||
{
|
||
$cache = null;
|
||
$cache = new \Doctrine\Common\Cache\FilesystemCache(sys_get_temp_dir(), __DIR__.'Onedrive');
|
||
$cache->save($key, $value, $exp);
|
||
}
|
||
|
||
function getconstStr($str)
|
||
{
|
||
global $constStr;
|
||
if ($constStr[$str][$constStr['language']]!='') return $constStr[$str][$constStr['language']];
|
||
return $constStr[$str]['en-us'];
|
||
}
|
||
|
||
function config_oauth()
|
||
{
|
||
$_SERVER['sitename'] = getConfig('sitename');
|
||
if (empty($_SERVER['sitename'])) $_SERVER['sitename'] = getconstStr('defaultSitename');
|
||
$_SERVER['redirect_uri'] = 'https://scfonedrive.github.io';
|
||
|
||
if (getConfig('Onedrive_ver')=='MS') {
|
||
// MS
|
||
// https://portal.azure.com
|
||
$_SERVER['client_id'] = '4da3e7f2-bf6d-467c-aaf0-578078f0bf7c';
|
||
$_SERVER['client_secret'] = '7/+ykq2xkfx:.DWjacuIRojIaaWL0QI6';
|
||
$_SERVER['oauth_url'] = 'https://login.microsoftonline.com/common/oauth2/v2.0/';
|
||
$_SERVER['api_url'] = 'https://graph.microsoft.com/v1.0/me/drive/root';
|
||
$_SERVER['scope'] = 'https://graph.microsoft.com/Files.ReadWrite.All offline_access';
|
||
}
|
||
if (getConfig('Onedrive_ver')=='CN') {
|
||
// CN
|
||
// https://portal.azure.cn
|
||
$_SERVER['client_id'] = '04c3ca0b-8d07-4773-85ad-98b037d25631';
|
||
$_SERVER['client_secret'] = 'h8@B7kFVOmj0+8HKBWeNTgl@pU/z4yLB';
|
||
$_SERVER['oauth_url'] = 'https://login.partner.microsoftonline.cn/common/oauth2/v2.0/';
|
||
$_SERVER['api_url'] = 'https://microsoftgraph.chinacloudapi.cn/v1.0/me/drive/root';
|
||
$_SERVER['scope'] = 'https://microsoftgraph.chinacloudapi.cn/Files.ReadWrite.All offline_access';
|
||
}
|
||
if (getConfig('Onedrive_ver')=='MSC') {
|
||
// MS Customer
|
||
// https://portal.azure.com
|
||
$_SERVER['client_id'] = getConfig('client_id');
|
||
$_SERVER['client_secret'] = getConfig('client_secret');
|
||
$_SERVER['oauth_url'] = 'https://login.microsoftonline.com/common/oauth2/v2.0/';
|
||
$_SERVER['api_url'] = 'https://graph.microsoft.com/v1.0/me/drive/root';
|
||
$_SERVER['scope'] = 'https://graph.microsoft.com/Files.ReadWrite.All offline_access';
|
||
}
|
||
|
||
$_SERVER['client_secret'] = urlencode($_SERVER['client_secret']);
|
||
$_SERVER['scope'] = urlencode($_SERVER['scope']);
|
||
}
|
||
|
||
function getListpath($domain)
|
||
{
|
||
$domain_path1 = getConfig('domain_path');
|
||
$public_path = getConfig('public_path');
|
||
$tmp_path='';
|
||
if ($domain_path1!='') {
|
||
$tmp = explode("|",$domain_path1);
|
||
foreach ($tmp as $multidomain_paths){
|
||
$pos = strpos($multidomain_paths,":");
|
||
if ($pos>0) {
|
||
$domain1 = substr($multidomain_paths,0,$pos);
|
||
$tmp_path = path_format(substr($multidomain_paths,$pos+1));
|
||
$domain_path[$domain1] = $tmp_path;
|
||
if ($public_path=='') $public_path = $tmp_path;
|
||
//if (substr($multidomain_paths,0,$pos)==$host_name) $private_path=$tmp_path;
|
||
}
|
||
}
|
||
}
|
||
if (isset($domain_path[$domain])) return spurlencode($domain_path[$domain],'/');
|
||
return spurlencode($public_path,'/');
|
||
}
|
||
|
||
function path_format($path)
|
||
{
|
||
$path = '/' . $path;
|
||
while (strpos($path, '//') !== FALSE) {
|
||
$path = str_replace('//', '/', $path);
|
||
}
|
||
return $path;
|
||
}
|
||
|
||
function spurlencode($str,$splite='')
|
||
{
|
||
$str = str_replace(' ', '%20',$str);
|
||
$tmp='';
|
||
if ($splite!='') {
|
||
$tmparr=explode($splite,$str);
|
||
for($x=0;$x<count($tmparr);$x++) {
|
||
if ($tmparr[$x]!='') $tmp .= $splite . urlencode($tmparr[$x]);
|
||
}
|
||
} else {
|
||
$tmp = urlencode($str);
|
||
}
|
||
$tmp = str_replace('%2520', '%20',$tmp);
|
||
return $tmp;
|
||
}
|
||
|
||
function is_guestup_path($path)
|
||
{
|
||
if (path_format('/'.path_format(urldecode($_SERVER['list_path'].path_format($path))).'/')==path_format('/'.path_format(getConfig('guestup_path')).'/')&&getConfig('guestup_path')!='') return 1;
|
||
return 0;
|
||
}
|
||
|
||
function curl_request($url, $data = false, $headers = [])
|
||
{
|
||
if (!isset($headers['Accept'])) $headers['Accept'] = '*/*';
|
||
if (!isset($headers['Referer'])) $headers['Referer'] = $url;
|
||
if (!isset($headers['Content-Type'])) $headers['Content-Type'] = 'application/x-www-form-urlencoded';
|
||
$sendHeaders = array();
|
||
foreach ($headers as $headerName => $headerVal) {
|
||
$sendHeaders[] = $headerName . ': ' . $headerVal;
|
||
}
|
||
$ch = curl_init();
|
||
curl_setopt($ch, CURLOPT_URL, $url);
|
||
if ($data !== false) {
|
||
curl_setopt($ch, CURLOPT_POST, 1);
|
||
curl_setopt($ch, CURLOPT_POSTFIELDS, $data);
|
||
}
|
||
curl_setopt($ch, CURLOPT_TIMEOUT, 5);
|
||
curl_setopt($ch, CURLOPT_CONNECTTIMEOUT, 10);
|
||
curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1);
|
||
curl_setopt($ch, CURLOPT_HEADER, 0);
|
||
curl_setopt($ch, CURLOPT_SSL_VERIFYHOST, 0);
|
||
curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, 0);
|
||
curl_setopt($ch, CURLOPT_HTTPHEADER, $sendHeaders);
|
||
$response['body'] = curl_exec($ch);
|
||
$response['stat'] = curl_getinfo($ch,CURLINFO_HTTP_CODE);
|
||
curl_close($ch);
|
||
return $response;
|
||
}
|
||
|
||
function clearbehindvalue($path,$page1,$maxpage,$pageinfocache)
|
||
{
|
||
for ($page=$page1+1;$page<$maxpage;$page++) {
|
||
$pageinfocache['nextlink_' . $path . '_page_' . $page] = '';
|
||
}
|
||
return $pageinfocache;
|
||
}
|
||
|
||
function comppass($pass)
|
||
{
|
||
if ($_POST['password1'] !== '') if (md5($_POST['password1']) === $pass ) {
|
||
date_default_timezone_set('UTC');
|
||
$_SERVER['Set-Cookie'] = 'password='.$pass.'; expires='.date(DATE_COOKIE,strtotime('+1hour'));
|
||
date_default_timezone_set(get_timezone($_COOKIE['timezone']));
|
||
return 2;
|
||
}
|
||
if ($_COOKIE['password'] !== '') if ($_COOKIE['password'] === $pass ) return 3;
|
||
return 4;
|
||
}
|
||
|
||
function encode_str_replace($str)
|
||
{
|
||
$str = str_replace('&','&',$str);
|
||
$str = str_replace('+','%2B',$str);
|
||
$str = str_replace('#','%23',$str);
|
||
return $str;
|
||
}
|
||
|
||
function gethiddenpass($path,$passfile)
|
||
{
|
||
$password=getcache($path . '/password');
|
||
if ($password=='') {
|
||
$ispassfile = fetch_files(spurlencode(path_format($path . '/' . $passfile),'/'));
|
||
//echo $path . '<pre>' . json_encode($ispassfile, JSON_PRETTY_PRINT) . '</pre>';
|
||
if (isset($ispassfile['file'])) {
|
||
$arr = curl_request($ispassfile['@microsoft.graph.downloadUrl']);
|
||
if ($arr['stat']==200) {
|
||
$passwordf=explode("\n",$arr['body']);
|
||
$password=$passwordf[0];
|
||
$password=md5($password);
|
||
savecache($path . '/password', $password);
|
||
return $password;
|
||
} else {
|
||
//return md5('DefaultP@sswordWhenNetworkError');
|
||
return md5( md5(time()).rand(1000,9999) );
|
||
}
|
||
} else {
|
||
savecache($path . '/password', 'null');
|
||
if ($path !== '' ) {
|
||
$path = substr($path,0,strrpos($path,'/'));
|
||
return gethiddenpass($path,$passfile);
|
||
} else {
|
||
return '';
|
||
}
|
||
}
|
||
} elseif ($password==='null') {
|
||
if ($path !== '' ) {
|
||
$path = substr($path,0,strrpos($path,'/'));
|
||
return gethiddenpass($path,$passfile);
|
||
} else {
|
||
return '';
|
||
}
|
||
} else return $password;
|
||
// return md5('DefaultP@sswordWhenNetworkError');
|
||
}
|
||
|
||
function get_timezone($timezone = '8')
|
||
{
|
||
$timezones = array(
|
||
'-12'=>'Pacific/Kwajalein',
|
||
'-11'=>'Pacific/Samoa',
|
||
'-10'=>'Pacific/Honolulu',
|
||
'-9'=>'America/Anchorage',
|
||
'-8'=>'America/Los_Angeles',
|
||
'-7'=>'America/Denver',
|
||
'-6'=>'America/Mexico_City',
|
||
'-5'=>'America/New_York',
|
||
'-4'=>'America/Caracas',
|
||
'-3.5'=>'America/St_Johns',
|
||
'-3'=>'America/Argentina/Buenos_Aires',
|
||
'-2'=>'America/Noronha',
|
||
'-1'=>'Atlantic/Azores',
|
||
'0'=>'UTC',
|
||
'1'=>'Europe/Paris',
|
||
'2'=>'Europe/Helsinki',
|
||
'3'=>'Europe/Moscow',
|
||
'3.5'=>'Asia/Tehran',
|
||
'4'=>'Asia/Baku',
|
||
'4.5'=>'Asia/Kabul',
|
||
'5'=>'Asia/Karachi',
|
||
'5.5'=>'Asia/Calcutta', //Asia/Colombo
|
||
'6'=>'Asia/Dhaka',
|
||
'6.5'=>'Asia/Rangoon',
|
||
'7'=>'Asia/Bangkok',
|
||
'8'=>'Asia/Shanghai',
|
||
'9'=>'Asia/Tokyo',
|
||
'9.5'=>'Australia/Darwin',
|
||
'10'=>'Pacific/Guam',
|
||
'11'=>'Asia/Magadan',
|
||
'12'=>'Asia/Kamchatka'
|
||
);
|
||
if ($timezone=='') $timezone = '8';
|
||
return $timezones[$timezone];
|
||
}
|
||
|
||
function message($message, $title = 'Message', $statusCode = 200)
|
||
{
|
||
return output('<html><meta charset=utf-8><body><h1>' . $title . '</h1><p>' . $message . '</p></body></html>', $statusCode);
|
||
}
|
||
|
||
function needUpdate()
|
||
{
|
||
$current_ver = file_get_contents(__DIR__ . '/../version');
|
||
$current_ver = substr($current_ver, strpos($current_ver, '.')+1);
|
||
$current_ver = explode(urldecode('%0A'),$current_ver)[0];
|
||
$current_ver = explode(urldecode('%0D'),$current_ver)[0];
|
||
$github_version = file_get_contents('https://raw.githubusercontent.com/qkqpttgf/OneManager-php/master/version');
|
||
$github_ver = substr($github_version, strpos($github_version, '.')+1);
|
||
$github_ver = explode(urldecode('%0A'),$github_ver)[0];
|
||
$github_ver = explode(urldecode('%0D'),$github_ver)[0];
|
||
if ($current_ver != $github_ver) {
|
||
$_SERVER['github_version'] = $github_version;
|
||
return 1;
|
||
}
|
||
return 0;
|
||
}
|
||
|
||
function output($body, $statusCode = 200, $headers = ['Content-Type' => 'text/html'], $isBase64Encoded = false)
|
||
{
|
||
return [
|
||
'isBase64Encoded' => $isBase64Encoded,
|
||
'statusCode' => $statusCode,
|
||
'headers' => $headers,
|
||
'body' => $body
|
||
];
|
||
}
|
||
|
||
function passhidden($path)
|
||
{
|
||
$path = str_replace('+','%2B',$path);
|
||
$path = str_replace('&','&', path_format(urldecode($path)));
|
||
if (getConfig('passfile') != '') {
|
||
if (substr($path,-1)=='/') $path=substr($path,0,-1);
|
||
$hiddenpass=gethiddenpass($path,getConfig('passfile'));
|
||
if ($hiddenpass != '') {
|
||
return comppass($hiddenpass);
|
||
} else {
|
||
return 1;
|
||
}
|
||
} else {
|
||
return 0;
|
||
}
|
||
return 4;
|
||
}
|
||
|
||
function size_format($byte)
|
||
{
|
||
$i = 0;
|
||
while (abs($byte) >= 1024) {
|
||
$byte = $byte / 1024;
|
||
$i++;
|
||
if ($i == 3) break;
|
||
}
|
||
$units = array('B', 'KB', 'MB', 'GB', 'TB');
|
||
$ret = round($byte, 2);
|
||
return ($ret . ' ' . $units[$i]);
|
||
}
|
||
|
||
function time_format($ISO)
|
||
{
|
||
$ISO = str_replace('T', ' ', $ISO);
|
||
$ISO = str_replace('Z', ' ', $ISO);
|
||
//return $ISO;
|
||
return date('Y-m-d H:i:s',strtotime($ISO . " UTC"));
|
||
}
|
||
|
||
function get_thumbnails_url($path = '/')
|
||
{
|
||
$path1 = path_format($path);
|
||
$path = path_format($_SERVER['list_path'] . path_format($path));
|
||
$thumb_url = getcache($path);
|
||
if ($thumb_url!='') return output($thumb_url);
|
||
$url = $_SERVER['api_url'];
|
||
if ($path !== '/') {
|
||
$url .= ':' . $path;
|
||
if (substr($url,-1)=='/') $url=substr($url,0,-1);
|
||
}
|
||
$url .= ':/thumbnails/0/medium';
|
||
$files = json_decode(curl_request($url, false, ['Authorization' => 'Bearer ' . $_SERVER['access_token']])['body'], true);
|
||
if (isset($files['url'])) {
|
||
savecache($path, $files['url']);
|
||
return output($files['url']);
|
||
}
|
||
return output('', 404);
|
||
}
|
||
|
||
function bigfileupload($path)
|
||
{
|
||
$path1 = path_format($_SERVER['list_path'] . path_format($path));
|
||
if (substr($path1,-1)=='/') $path1=substr($path1,0,-1);
|
||
if ($_GET['upbigfilename']!=''&&$_GET['filesize']>0) {
|
||
$fileinfo['name'] = $_GET['upbigfilename'];
|
||
$fileinfo['size'] = $_GET['filesize'];
|
||
$fileinfo['lastModified'] = $_GET['lastModified'];
|
||
$filename = spurlencode( $fileinfo['name'] );
|
||
$cachefilename = '.' . $fileinfo['lastModified'] . '_' . $fileinfo['size'] . '_' . $filename . '.tmp';
|
||
$getoldupinfo=fetch_files(path_format($path . '/' . $cachefilename));
|
||
//echo json_encode($getoldupinfo, JSON_PRETTY_PRINT);
|
||
if (isset($getoldupinfo['file'])&&$getoldupinfo['size']<5120) {
|
||
$getoldupinfo_j = curl_request($getoldupinfo['@microsoft.graph.downloadUrl']);
|
||
$getoldupinfo = json_decode($getoldupinfo_j , true);
|
||
if ( json_decode( curl_request($getoldupinfo['uploadUrl']), true)['@odata.context']!='' ) return output($getoldupinfo_j);
|
||
}
|
||
if (!$_SERVER['admin']) $filename = spurlencode( $fileinfo['name'] ) . '.scfupload';
|
||
$response=MSAPI('createUploadSession',path_format($path1 . '/' . $filename),'{"item": { "@microsoft.graph.conflictBehavior": "fail" }}',$_SERVER['access_token']);
|
||
$responsearry = json_decode($response['body'],true);
|
||
if (isset($responsearry['error'])) return output($response['body'], $response['stat']);
|
||
$fileinfo['uploadUrl'] = $responsearry['uploadUrl'];
|
||
MSAPI('PUT', path_format($path1 . '/' . $cachefilename), json_encode($fileinfo, JSON_PRETTY_PRINT), $_SERVER['access_token'])['body'];
|
||
return output($response['body'], $response['stat']);
|
||
}
|
||
return output('error', 400);
|
||
}
|
||
|
||
function main($path)
|
||
{
|
||
global $exts;
|
||
global $constStr;
|
||
config_oauth();
|
||
$constStr['language'] = $_COOKIE['language'];
|
||
if ($constStr['language']=='') $constStr['language'] = getConfig('language');
|
||
if ($constStr['language']=='') $constStr['language'] = 'en-us';
|
||
$_SERVER['list_path'] = getListpath($_SERVER['HTTP_HOST']);
|
||
if ($_SERVER['list_path']=='') $_SERVER['list_path'] = '/';
|
||
$_SERVER['is_guestup_path'] = is_guestup_path($path);
|
||
$_SERVER['PHP_SELF'] = path_format($_SERVER['base_path'] . $path);
|
||
$_SERVER['ajax']=0;
|
||
if (isset($_SERVER['HTTP_X_REQUESTED_WITH'])) if ($_SERVER['HTTP_X_REQUESTED_WITH']=='XMLHttpRequest') $_SERVER['ajax']=1;
|
||
|
||
$refresh_token = getConfig('refresh_token');
|
||
if (!$refresh_token) return get_refresh_token();
|
||
|
||
if (!($_SERVER['access_token'] = getcache('access_token'))) {
|
||
$response = curl_request( $_SERVER['oauth_url'] . 'token', 'client_id='. $_SERVER['client_id'] .'&client_secret='. $_SERVER['client_secret'] .'&grant_type=refresh_token&requested_token_use=on_behalf_of&refresh_token=' . $refresh_token );
|
||
if ($response['stat']==200) $ret = json_decode($response['body'], true);
|
||
if (!isset($ret['access_token'])) {
|
||
error_log('failed to get access_token. response' . json_encode($ret));
|
||
throw new Exception($response['stat'].'failed to get access_token.'.$response['body']);
|
||
}
|
||
error_log('Get access token:'.json_encode($ret, JSON_PRETTY_PRINT));
|
||
$_SERVER['access_token'] = $ret['access_token'];
|
||
savecache('access_token', $_SERVER['access_token']);
|
||
if (time()>getConfig('token_expires')) setConfig([ 'refresh_token' => $ret['refresh_token'], 'token_expires' => time()+30*24*60*60 ]);
|
||
}
|
||
|
||
if (getConfig('adminloginpage')=='') {
|
||
$adminloginpage = 'admin';
|
||
} else {
|
||
$adminloginpage = getConfig('adminloginpage');
|
||
}
|
||
if ($_GET[$adminloginpage]) {
|
||
if ($_GET['preview']) {
|
||
$url = $_SERVER['PHP_SELF'] . '?preview';
|
||
} else {
|
||
$url = path_format($_SERVER['PHP_SELF'] . '/');
|
||
}
|
||
if (getConfig('admin')!='') {
|
||
if ($_POST['password1']==getConfig('admin')) {
|
||
return adminform('admin',md5($_POST['password1']),$url);
|
||
} else return adminform();
|
||
} else {
|
||
return output('', 302, [ 'Location' => $url ]);
|
||
}
|
||
}
|
||
if (getConfig('admin')!='')
|
||
if ( $_COOKIE['admin']==md5(getConfig('admin')) || $_POST['password1']==getConfig('admin') ) {
|
||
$_SERVER['admin']=1;
|
||
$_SERVER['needUpdate'] = needUpdate();
|
||
} else {
|
||
$_SERVER['admin']=0;
|
||
}
|
||
if ($_GET['setup'])
|
||
if ($_SERVER['admin']) {
|
||
// setup Environments. 设置，对环境变量操作
|
||
return EnvOpt($_SERVER['function_name'], $_SERVER['needUpdate']);
|
||
} else {
|
||
$url = path_format($_SERVER['PHP_SELF'] . '/');
|
||
return output('<script>alert(\''.getconstStr('SetSecretsFirst').'\');</script>', 302, [ 'Location' => $url ]);
|
||
}
|
||
$_SERVER['retry'] = 0;
|
||
|
||
if ($_SERVER['ajax']) {
|
||
if ($_GET['action']=='del_upload_cache'&&substr($_GET['filename'],-4)=='.tmp') {
|
||
// del '.tmp' without login. 无需登录即可删除.tmp后缀文件
|
||
$tmp = MSAPI('DELETE',path_format(path_format($_SERVER['list_path'] . path_format($path)) . '/' . spurlencode($_GET['filename']) ),'',$_SERVER['access_token']);
|
||
$path1 = path_format($_SERVER['list_path'] . path_format($path));
|
||
savecache('path_' . $path1, json_decode('{}',true), 1);
|
||
return output($tmp['body'],$tmp['stat']);
|
||
}
|
||
if ($_GET['action']=='uploaded_rename') {
|
||
// rename .scfupload file without login.
|
||
// 无需登录即可重命名.scfupload后缀文件，filemd5为用户提交，可被构造，问题不大，以后处理
|
||
$oldname = spurlencode($_GET['filename']);
|
||
$pos = strrpos($oldname, '.');
|
||
if ($pos>0) $ext = strtolower(substr($oldname, $pos));
|
||
$oldname = path_format(path_format($_SERVER['list_path'] . path_format($path)) . '/' . $oldname . '.scfupload' );
|
||
$data = '{"name":"' . $_GET['filemd5'] . $ext . '"}';
|
||
//echo $oldname .'<br>'. $data;
|
||
$tmp = MSAPI('PATCH',$oldname,$data,$_SERVER['access_token']);
|
||
if ($tmp['stat']==409) MSAPI('DELETE',$oldname,'',$_SERVER['access_token'])['body'];
|
||
$path1 = path_format($_SERVER['list_path'] . path_format($path));
|
||
savecache('path_' . $path1, json_decode('{}',true), 1);
|
||
return output($tmp['body'],$tmp['stat']);
|
||
}
|
||
if ($_GET['action']=='upbigfile') return bigfileupload($path);
|
||
}
|
||
if ($_SERVER['admin']) {
|
||
$tmp = adminoperate($path);
|
||
if ($tmp['statusCode'] > 0) {
|
||
$path1 = path_format($_SERVER['list_path'] . path_format($path));
|
||
savecache('path_' . $path1, json_decode('{}',true), 1);
|
||
return $tmp;
|
||
}
|
||
} else {
|
||
if ($_SERVER['ajax']) return output(getconstStr('RefleshtoLogin'),401);
|
||
}
|
||
$_SERVER['ishidden'] = passhidden($path);
|
||
if ($_GET['thumbnails']) {
|
||
if ($_SERVER['ishidden']<4) {
|
||
if (in_array(strtolower(substr($path, strrpos($path, '.') + 1)), $exts['img'])) {
|
||
return get_thumbnails_url($path);
|
||
} else return output(json_encode($exts['img']),400);
|
||
} else return output('',401);
|
||
}
|
||
$files = list_files($path);
|
||
if (isset($files['file']) && !$_GET['preview']) {
|
||
// is file && not preview mode
|
||
if ($_SERVER['ishidden']<4) return output('', 302, [ 'Location' => $files['@microsoft.graph.downloadUrl'] ]);
|
||
}
|
||
if ( isset($files['folder']) || isset($files['file']) ) {
|
||
return render_list($path, $files);
|
||
} else {
|
||
return message('<div style="margin:8px;">' . $files['error']['message'] . '</div><a href="javascript:history.back(-1)">'.getconstStr('Back').'</a>', $files['error']['code'], $files['error']['stat']);
|
||
}
|
||
}
|
||
|
||
function list_files($path)
|
||
{
|
||
$path = path_format($path);
|
||
if ($_SERVER['is_guestup_path']&&!$_SERVER['admin']) {
|
||
$files = json_decode('{"folder":{}}', true);
|
||
} elseif ($_SERVER['ishidden']==4) {
|
||
$files = json_decode('{"folder":{}}', true);
|
||
} else {
|
||
$files = fetch_files($path);
|
||
}
|
||
if ( isset($files['folder']) || isset($files['file']) || isset($files['error']) ) {
|
||
return $files;
|
||
} else {
|
||
error_log( json_encode($files) . ' Network Error<br>' );
|
||
$_SERVER['retry']++;
|
||
if ($_SERVER['retry'] < 3) {
|
||
return list_files($path);
|
||
} else return $files;
|
||
}
|
||
}
|
||
|
||
function adminform($name = '', $pass = '', $path = '')
|
||
{
|
||
$statusCode = 401;
|
||
$html = '<html><head><title>'.getconstStr('AdminLogin').'</title><meta charset=utf-8></head>';
|
||
if ($name!=''&&$pass!='') {
|
||
$html .= '<body>'.getconstStr('LoginSuccess').'</body></html>';
|
||
$statusCode = 302;
|
||
date_default_timezone_set('UTC');
|
||
$header = [
|
||
'Set-Cookie' => $name.'='.$pass.'; path=/; expires='.date(DATE_COOKIE,strtotime('+1hour')),
|
||
'Location' => $path,
|
||
'Content-Type' => 'text/html'
|
||
];
|
||
return output($html,$statusCode,$header);
|
||
}
|
||
$html .= '
|
||
<body>
|
||
<div>
|
||
<center><h4>'.getconstStr('InputPassword').'</h4>
|
||
<form action="" method="post">
|
||
<div>
|
||
<input name="password1" type="password"/>
|
||
<input type="submit" value="'.getconstStr('Login').'">
|
||
</div>
|
||
</form>
|
||
</center>
|
||
</div>
|
||
';
|
||
$html .= '</body></html>';
|
||
return output($html,$statusCode);
|
||
}
|
||
|
||
function adminoperate($path)
|
||
{
|
||
$path1 = path_format($_SERVER['list_path'] . path_format($path));
|
||
if (substr($path1,-1)=='/') $path1=substr($path1,0,-1);
|
||
$tmparr['statusCode'] = 0;
|
||
if ($_GET['rename_newname']!=$_GET['rename_oldname'] && $_GET['rename_newname']!='') {
|
||
// rename 重命名
|
||
$oldname = spurlencode($_GET['rename_oldname']);
|
||
$oldname = path_format($path1 . '/' . $oldname);
|
||
$data = '{"name":"' . $_GET['rename_newname'] . '"}';
|
||
//echo $oldname;
|
||
$result = MSAPI('PATCH',$oldname,$data,$_SERVER['access_token']);
|
||
//savecache('path_' . $path1, json_decode('{}',true), 1);
|
||
return output($result['body'], $result['stat']);
|
||
}
|
||
if ($_GET['delete_name']!='') {
|
||
// delete 删除
|
||
$filename = spurlencode($_GET['delete_name']);
|
||
$filename = path_format($path1 . '/' . $filename);
|
||
//echo $filename;
|
||
$result = MSAPI('DELETE', $filename, '', $_SERVER['access_token']);
|
||
//savecache('path_' . $path1, json_decode('{}',true), 1);
|
||
return output($result['body'], $result['stat']);
|
||
}
|
||
if ($_GET['operate_action']==getconstStr('encrypt')) {
|
||
// encrypt 加密
|
||
if (getConfig('passfile')=='') return message(getconstStr('SetpassfileBfEncrypt'),'',403);
|
||
if ($_GET['encrypt_folder']=='/') $_GET['encrypt_folder']=='';
|
||
$foldername = spurlencode($_GET['encrypt_folder']);
|
||
$filename = path_format($path1 . '/' . $foldername . '/' . getConfig('passfile'));
|
||
//echo $foldername;
|
||
$result = MSAPI('PUT', $filename, $_GET['encrypt_newpass'], $_SERVER['access_token']);
|
||
//savecache('path_' . $path1, json_decode('{}',true), 1);
|
||
return output($result['body'], $result['stat']);
|
||
}
|
||
if ($_GET['move_folder']!='') {
|
||
// move 移动
|
||
$moveable = 1;
|
||
if ($path == '/' && $_GET['move_folder'] == '/../') $moveable=0;
|
||
if ($_GET['move_folder'] == $_GET['move_name']) $moveable=0;
|
||
if ($moveable) {
|
||
$filename = spurlencode($_GET['move_name']);
|
||
$filename = path_format($path1 . '/' . $filename);
|
||
$foldername = path_format('/'.urldecode($path1).'/'.$_GET['move_folder']);
|
||
$data = '{"parentReference":{"path": "/drive/root:'.$foldername.'"}}';
|
||
$result = MSAPI('PATCH', $filename, $data, $_SERVER['access_token']);
|
||
//savecache('path_' . $path1, json_decode('{}',true), 1);
|
||
if ($_GET['move_folder'] == '/../') $path2 = path_format( substr($path1, 0, strrpos($path1, '/')) . '/' );
|
||
else $path2 = path_format( $path1 . '/' . $_GET['move_folder'] . '/' );
|
||
savecache('path_' . $path2, json_decode('{}',true), 1);
|
||
return output($result['body'], $result['stat']);
|
||
} else {
|
||
return output('{"error":"Can not Move!"}', 403);
|
||
}
|
||
}
|
||
if ($_POST['editfile']!='') {
|
||
// edit 编辑
|
||
$data = $_POST['editfile'];
|
||
/*TXT一般不会超过4M，不用二段上传
|
||
$filename = $path1 . ':/createUploadSession';
|
||
$response=MSAPI('POST',$filename,'{"item": { "@microsoft.graph.conflictBehavior": "replace" }}',$_SERVER['access_token']);
|
||
$uploadurl=json_decode($response,true)['uploadUrl'];
|
||
echo MSAPI('PUT',$uploadurl,$data,$_SERVER['access_token']);*/
|
||
$result = MSAPI('PUT', $path1, $data, $_SERVER['access_token'])['body'];
|
||
//echo $result;
|
||
$resultarry = json_decode($result,true);
|
||
if (isset($resultarry['error'])) return message($resultarry['error']['message']. '<hr><a href="javascript:history.back(-1)">上一页</a>','Error',403);
|
||
}
|
||
if ($_GET['create_name']!='') {
|
||
// create 新建
|
||
if ($_GET['create_type']=='file') {
|
||
$filename = spurlencode($_GET['create_name']);
|
||
$filename = path_format($path1 . '/' . $filename);
|
||
$result = MSAPI('PUT', $filename, $_GET['create_text'], $_SERVER['access_token']);
|
||
}
|
||
if ($_GET['create_type']=='folder') {
|
||
$data = '{ "name": "' . $_GET['create_name'] . '", "folder": { }, "@microsoft.graph.conflictBehavior": "rename" }';
|
||
$result = MSAPI('children', $path1, $data, $_SERVER['access_token']);
|
||
}
|
||
//savecache('path_' . $path1, json_decode('{}',true), 1);
|
||
return output($result['body'], $result['stat']);
|
||
}
|
||
if ($_GET['RefreshCache']) {
|
||
//savecache('path_' . $path1, json_decode('{}',true), 1);
|
||
savecache($path . '/password', '', 1);
|
||
return output('<meta http-equiv="refresh" content="2;URL=./">'.getconstStr('RefreshCache'), 302);
|
||
}
|
||
return $tmparr;
|
||
}
|
||
|
||
function MSAPI($method, $path, $data = '', $access_token)
|
||
{
|
||
if (substr($path,0,7) == 'http://' or substr($path,0,8) == 'https://') {
|
||
$url=$path;
|
||
$lenth=strlen($data);
|
||
$headers['Content-Length'] = $lenth;
|
||
$lenth--;
|
||
$headers['Content-Range'] = 'bytes 0-' . $lenth . '/' . $headers['Content-Length'];
|
||
} else {
|
||
$url = $_SERVER['api_url'];
|
||
if ($path=='' or $path=='/') {
|
||
$url .= '/';
|
||
} else {
|
||
$url .= ':' . $path;
|
||
if (substr($url,-1)=='/') $url=substr($url,0,-1);
|
||
}
|
||
if ($method=='PUT') {
|
||
if ($path=='' or $path=='/') {
|
||
$url .= 'content';
|
||
} else {
|
||
$url .= ':/content';
|
||
}
|
||
$headers['Content-Type'] = 'text/plain';
|
||
} elseif ($method=='PATCH') {
|
||
$headers['Content-Type'] = 'application/json';
|
||
} elseif ($method=='POST') {
|
||
$headers['Content-Type'] = 'application/json';
|
||
} elseif ($method=='DELETE') {
|
||
$headers['Content-Type'] = 'application/json';
|
||
} else {
|
||
if ($path=='' or $path=='/') {
|
||
$url .= $method;
|
||
} else {
|
||
$url .= ':/' . $method;
|
||
}
|
||
$method='POST';
|
||
$headers['Content-Type'] = 'application/json';
|
||
}
|
||
}
|
||
$headers['Authorization'] = 'Bearer ' . $access_token;
|
||
if (!isset($headers['Accept'])) $headers['Accept'] = '*/*';
|
||
if (!isset($headers['Referer'])) $headers['Referer'] = $url;
|
||
$sendHeaders = array();
|
||
foreach ($headers as $headerName => $headerVal) {
|
||
$sendHeaders[] = $headerName . ': ' . $headerVal;
|
||
}
|
||
$ch = curl_init();
|
||
curl_setopt($ch, CURLOPT_URL, $url);
|
||
curl_setopt($ch, CURLOPT_CUSTOMREQUEST,$method);
|
||
curl_setopt($ch, CURLOPT_POSTFIELDS,$data);
|
||
curl_setopt($ch, CURLOPT_TIMEOUT, 5);
|
||
curl_setopt($ch, CURLOPT_CONNECTTIMEOUT, 10);
|
||
curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1);
|
||
curl_setopt($ch, CURLOPT_HEADER, 0);
|
||
curl_setopt($ch, CURLOPT_SSL_VERIFYHOST, 0);
|
||
curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, 0);
|
||
curl_setopt($ch, CURLOPT_HTTPHEADER, $sendHeaders);
|
||
$response['body'] = curl_exec($ch);
|
||
$response['stat'] = curl_getinfo($ch,CURLINFO_HTTP_CODE);
|
||
curl_close($ch);
|
||
error_log($response['stat'].'
|
||
'.$response['body'].'
|
||
');
|
||
return $response;
|
||
}
|
||
|
||
function fetch_files($path = '/')
|
||
{
|
||
$path1 = path_format($path);
|
||
$path = path_format($_SERVER['list_path'] . path_format($path));
|
||
if (!($files = getcache('path_' . $path))) {
|
||
// https://docs.microsoft.com/en-us/graph/api/driveitem-get?view=graph-rest-1.0
|
||
// https://docs.microsoft.com/zh-cn/graph/api/driveitem-put-content?view=graph-rest-1.0&tabs=http
|
||
// https://developer.microsoft.com/zh-cn/graph/graph-explorer
|
||
$url = $_SERVER['api_url'];
|
||
if ($path !== '/') {
|
||
$url .= ':' . $path;
|
||
if (substr($url,-1)=='/') $url=substr($url,0,-1);
|
||
}
|
||
$url .= '?expand=children(select=name,size,file,folder,parentReference,lastModifiedDateTime)';
|
||
$arr = curl_request($url, false, ['Authorization' => 'Bearer ' . $_SERVER['access_token']]);
|
||
if ($arr['stat']<500) {
|
||
$files = json_decode($arr['body'], true);
|
||
// echo $path . '<br><pre>' . json_encode($files, JSON_PRETTY_PRINT) . '</pre>';
|
||
if (isset($files['folder'])) {
|
||
if ($files['folder']['childCount']>200) {
|
||
// files num > 200 , then get nextlink
|
||
$page = $_POST['pagenum']==''?1:$_POST['pagenum'];
|
||
$files=fetch_files_children($files, $path, $page);
|
||
} else {
|
||
// files num < 200 , then cache
|
||
savecache('path_' . $path, $files);
|
||
}
|
||
}
|
||
if (isset($files['error'])) {
|
||
$files['error']['stat'] = $arr['stat'];
|
||
}
|
||
} else {
|
||
error_log($arr['body']);
|
||
$files = json_decode( '{"unknownError":{ "stat":'.$arr['stat'].',"message":"'.$arr['body'].'"}}', true);
|
||
}
|
||
}
|
||
return $files;
|
||
}
|
||
|
||
function fetch_files_children($files, $path, $page)
|
||
{
|
||
$cachefilename = '.SCFcache_'.$_SERVER['function_name'];
|
||
$maxpage = ceil($files['folder']['childCount']/200);
|
||
if (!($files['children'] = getcache('files_' . $path . '_page_' . $page))) {
|
||
// down cache file get jump info. 下载cache文件获取跳页链接
|
||
$cachefile = fetch_files(path_format($path1 . '/' .$cachefilename));
|
||
if ($cachefile['size']>0) {
|
||
$pageinfo = curl_request($cachefile['@microsoft.graph.downloadUrl'])['body'];
|
||
$pageinfo = json_decode($pageinfo,true);
|
||
for ($page4=1;$page4<$maxpage;$page4++) {
|
||
savecache('nextlink_' . $path . '_page_' . $page4, $pageinfo['nextlink_' . $path . '_page_' . $page4]);
|
||
$pageinfocache['nextlink_' . $path . '_page_' . $page4] = $pageinfo['nextlink_' . $path . '_page_' . $page4];
|
||
}
|
||
}
|
||
$pageinfochange=0;
|
||
for ($page1=$page;$page1>=1;$page1--) {
|
||
$page3=$page1-1;
|
||
$url = getcache('nextlink_' . $path . '_page_' . $page3);
|
||
if ($url == '') {
|
||
if ($page1==1) {
|
||
$url = $_SERVER['api_url'];
|
||
if ($path !== '/') {
|
||
$url .= ':' . $path;
|
||
if (substr($url,-1)=='/') $url=substr($url,0,-1);
|
||
$url .= ':/children?$select=name,size,file,folder,parentReference,lastModifiedDateTime';
|
||
} else {
|
||
$url .= '/children?$select=name,size,file,folder,parentReference,lastModifiedDateTime';
|
||
}
|
||
$children = json_decode(curl_request($url, false, ['Authorization' => 'Bearer ' . $_SERVER['access_token']])['body'], true);
|
||
// echo $url . '<br><pre>' . json_encode($children, JSON_PRETTY_PRINT) . '</pre>';
|
||
savecache('files_' . $path . '_page_' . $page1, $children['value']);
|
||
$nextlink=getcache('nextlink_' . $path . '_page_' . $page1);
|
||
if ($nextlink!=$children['@odata.nextLink']) {
|
||
savecache('nextlink_' . $path . '_page_' . $page1, $children['@odata.nextLink']);
|
||
$pageinfocache['nextlink_' . $path . '_page_' . $page1] = $children['@odata.nextLink'];
|
||
$pageinfocache = clearbehindvalue($path,$page1,$maxpage,$pageinfocache);
|
||
$pageinfochange = 1;
|
||
}
|
||
$url = $children['@odata.nextLink'];
|
||
for ($page2=$page1+1;$page2<=$page;$page2++) {
|
||
sleep(1);
|
||
$children = json_decode(curl_request($url, false, ['Authorization' => 'Bearer ' . $_SERVER['access_token']])['body'], true);
|
||
savecache('files_' . $path . '_page_' . $page2, $children['value']);
|
||
$nextlink=getcache('nextlink_' . $path . '_page_' . $page2);
|
||
if ($nextlink!=$children['@odata.nextLink']) {
|
||
savecache('nextlink_' . $path . '_page_' . $page2, $children['@odata.nextLink']);
|
||
$pageinfocache['nextlink_' . $path . '_page_' . $page2] = $children['@odata.nextLink'];
|
||
$pageinfocache = clearbehindvalue($path,$page2,$maxpage,$pageinfocache);
|
||
$pageinfochange = 1;
|
||
}
|
||
$url = $children['@odata.nextLink'];
|
||
}
|
||
//echo $url . '<br><pre>' . json_encode($children, JSON_PRETTY_PRINT) . '</pre>';
|
||
$files['children'] = $children['value'];
|
||
$files['folder']['page']=$page;
|
||
$pageinfocache['filenum'] = $files['folder']['childCount'];
|
||
$pageinfocache['dirsize'] = $files['size'];
|
||
$pageinfocache['cachesize'] = $cachefile['size'];
|
||
$pageinfocache['size'] = $files['size']-$cachefile['size'];
|
||
if ($pageinfochange == 1) MSAPI('PUT', path_format($path.'/'.$cachefilename), json_encode($pageinfocache, JSON_PRETTY_PRINT), $_SERVER['access_token'])['body'];
|
||
return $files;
|
||
}
|
||
} else {
|
||
for ($page2=$page3+1;$page2<=$page;$page2++) {
|
||
sleep(1);
|
||
$children = json_decode(curl_request($url, false, ['Authorization' => 'Bearer ' . $_SERVER['access_token']])['body'], true);
|
||
savecache('files_' . $path . '_page_' . $page2, $children['value'], 3300);
|
||
$nextlink=getcache('nextlink_' . $path . '_page_' . $page2);
|
||
if ($nextlink!=$children['@odata.nextLink']) {
|
||
savecache('nextlink_' . $path . '_page_' . $page2, $children['@odata.nextLink'], 3300);
|
||
$pageinfocache['nextlink_' . $path . '_page_' . $page2] = $children['@odata.nextLink'];
|
||
$pageinfocache = clearbehindvalue($path,$page2,$maxpage,$pageinfocache);
|
||
$pageinfochange = 1;
|
||
}
|
||
$url = $children['@odata.nextLink'];
|
||
}
|
||
//echo $url . '<br><pre>' . json_encode($children, JSON_PRETTY_PRINT) . '</pre>';
|
||
$files['children'] = $children['value'];
|
||
$files['folder']['page']=$page;
|
||
$pageinfocache['filenum'] = $files['folder']['childCount'];
|
||
$pageinfocache['dirsize'] = $files['size'];
|
||
$pageinfocache['cachesize'] = $cachefile['size'];
|
||
$pageinfocache['size'] = $files['size']-$cachefile['size'];
|
||
if ($pageinfochange == 1) MSAPI('PUT', path_format($path.'/'.$cachefilename), json_encode($pageinfocache, JSON_PRETTY_PRINT), $_SERVER['access_token'])['body'];
|
||
return $files;
|
||
}
|
||
}
|
||
} else {
|
||
$files['folder']['page']=$page;
|
||
for ($page4=1;$page4<=$maxpage;$page4++) {
|
||
if (!($url = getcache('nextlink_' . $path . '_page_' . $page4))) {
|
||
if ($files['folder'][$path.'_'.$page4]!='') savecache('nextlink_' . $path . '_page_' . $page4, $files['folder'][$path.'_'.$page4]);
|
||
} else {
|
||
$files['folder'][$path.'_'.$page4] = $url;
|
||
}
|
||
}
|
||
}
|
||
return $files;
|
||
}
|
||
|
||
function render_list($path, $files)
|
||
{
|
||
global $exts;
|
||
global $constStr;
|
||
|
||
$path = str_replace('%20','%2520',$path);
|
||
$path = str_replace('+','%2B',$path);
|
||
$path = str_replace('&','&',path_format(urldecode($path))) ;
|
||
$path = str_replace('%20',' ',$path);
|
||
$path = str_replace('#','%23',$path);
|
||
$p_path='';
|
||
if ($path !== '/') {
|
||
if (isset($files['file'])) {
|
||
$pretitle = str_replace('&','&', $files['name']);
|
||
$n_path=$pretitle;
|
||
} else {
|
||
$pretitle = substr($path,-1)=='/'?substr($path,0,-1):$path;
|
||
$n_path=substr($pretitle,strrpos($pretitle,'/')+1);
|
||
$pretitle = substr($pretitle,1);
|
||
}
|
||
if (strrpos($path,'/')!=0) {
|
||
$p_path=substr($path,0,strrpos($path,'/'));
|
||
$p_path=substr($p_path,strrpos($p_path,'/')+1);
|
||
}
|
||
} else {
|
||
$pretitle = getconstStr('Home');
|
||
$n_path=$pretitle;
|
||
}
|
||
$n_path=str_replace('&','&',$n_path);
|
||
$p_path=str_replace('&','&',$p_path);
|
||
$pretitle = str_replace('%23','#',$pretitle);
|
||
$statusCode=200;
|
||
date_default_timezone_set(get_timezone($_COOKIE['timezone']));
|
||
@ob_start();
|
||
|
||
$theme = getConfig('theme');
|
||
if ( $theme=='' || !file_exists('theme/'.$theme) ) $theme = 'classic.php';
|
||
$htmlpage = include 'theme/'.$theme;
|
||
|
||
$html = '<!--
|
||
github ： https://github.com/qkqpttgf/OneManager-php
|
||
-->' . ob_get_clean();
|
||
if (isset($htmlpage['statusCode'])) return $htmlpage;
|
||
if ($_SERVER['Set-Cookie']!='') return output($html, $statusCode, [ 'Set-Cookie' => $_SERVER['Set-Cookie'], 'Content-Type' => 'text/html' ]);
|
||
return output($html,$statusCode);
|
||
}
|