. // Per-user "file sandboxes" for job submission. // These are stored in project-root/sandbox/USERID/ // // The entries in a sandbox directory have contents // size md5 // // The actual files are stored in the download hierarchy, // with sb_userid_MD5 as the physical name // NOTE: PHP's default max file upload size is 2MB. // To increase this, edit /etc/php.ini, and change, e.g. // // upload_max_filesize = 64M // post_max_size = 64M error_reporting(E_ALL); ini_set('display_errors', true); ini_set('display_startup_errors', true); require_once("../inc/sandbox.inc"); require_once("../inc/submit_db.inc"); function list_files($user, $err_msg) { $dir = sandbox_dir($user); $d = opendir($dir); if (!$d) error_page("Can't open sandbox directory"); page_head("File sandbox for $user->name"); echo "
$err_msg
(click to view)
", "Modified", "Size (bytes)", "MD5", "Delete","Download"); foreach ($files as $f) { $path = "$dir/$f"; list($error, $size, $md5) = sandbox_parse_link_file($path); if ($error) { table_row($f, "Can't parse link file", "", "delete"); continue; } $p = sandbox_physical_path($user, $md5); if (!is_file($p)) { table_row($f, "Physical file not found", "", ""); continue; } $ct = time_str(filemtime($path)); table_row( "$f", $ct, $size, $md5, button_text( "sandbox.php?action=delete_file&name=$f", "Delete" ), button_text( "sandbox.php?action=download_file&name=$f", "Download" ) ); } end_table(); } page_tail(); } function upload_file($user) { $notice = ""; $count = count($_FILES['new_file']['tmp_name']); for ($i = 0; $i < $count; $i++) { $tmp_name = $_FILES['new_file']['tmp_name'][$i]; if (!is_uploaded_file($tmp_name)) { error_page("$tmp_name is not uploaded file"); } $name = $_FILES['new_file']['name'][$i]; if (strstr($name, "/")) { error_page("no / allowed"); } $md5 = md5_file($tmp_name); $s = stat($tmp_name); $size = $s['size']; list($exist, $elf) = sandbox_lf_exist($user, $md5); if ($exist){ $notice .= "Notice: Invalid Upload\n"; readfile($p); echo "\n"; } $user = get_logged_in_user(); //print_r($user); $user_submit = BoincUserSubmit::lookup_userid($user->id); if (!$user_submit) error_page("no job submission access"); $action = get_str('action', true); if (!$action) $action = post_str('action', true); switch ($action) { case '': list_files($user,""); break; case 'upload_file': upload_file($user); break; case 'delete_file': delete_file($user); break; case 'download_file': download_file($user); break; case 'view_file': view_file($user); break; default: error_page("no such action: $action"); } ?>