DirMaint.prg

<?php

$sharedLibrary= dirname(__FILE__) . "/../../shared/library";

require_once("$sharedLibrary/hcuEnv.i");

$admVars = array();
$admOk = array(
    "action" => array("filter" => FILTER_SANITIZE_STRING),
    "ndir" => array("filter" => FILTER_SANITIZE_STRING),
    "mdir" => array("filter" => FILTER_SANITIZE_STRING),
    "csub" => array("filter" => FILTER_SANITIZE_STRING),
    "newfolder" => array("filter" => FILTER_SANITIZE_STRING),
    "delete" => array("filter" => FILTER_SANITIZE_STRING)
);
HCU_ImportVars($admVars, "DIRMAINT", $admOk);

$dir_search = true;
$top_upload = false;                                    // Allow file upload for the top directory
$top_dir="$home_path/public_html";          // Top Most Directory

// Create two arrays - for files and directories
// these are the viewable files in the top directory
$allowed_dir = array();
$allowed_files = array();

// Settings for Subdirectory Control
$allow_subdir = true;                       // This will control if the user may make subdirectories under the main directories (ie. board employees)
$max_subdir = 15;                               // This is the maximum number of directories allowed in any one directory
$allow_multi_subdir = false;        // This is intended to control creation of subdirectories 2 directories and further below board/employees

// success and error messages
$msg_err = "";
$msg_suc = "";

// Setup the directories allowed
// Add any directories here to include in the html list if they exist
$allowed_dir[] = "employees";
$allowed_dir[] = "board";
$allowed_dir[] = "vendors";             // Add a new directory to the listing mws 6/3/2002
// 6/26/2002 - as requested by Jan - the new folders are: alm, supervisory, and misc
$allowed_dir[] = "alm";
$allowed_dir[] = "supervisory";
$allowed_dir[] = "misc";
$allowed_dir[] = "disaster";
$allowed_dir[] = "images"; // Adding images directory 6/2019

$csubValue = HCU_array_key_value("csub", $admVars['DIRMAINT']);
$csub = $csubValue !== false ? $csubValue : "";

$newfolderValue = HCU_array_key_value("newfolder", $admVars['DIRMAINT']);
$newfolder = $newfolderValue !== false ? $newfolderValue : "";

$mdirValue = HCU_array_key_value("mdir", $admVars['DIRMAINT']);
$mdir = $mdirValue !== false ? $mdirValue : "";

$ndirValue = HCU_array_key_value("ndir", $admVars['DIRMAINT']);
$ndir = $ndirValue !== false ? $ndirValue : "";

$csubValue = HCU_array_key_value("csub", $admVars['DIRMAINT']);
$csub = $csubValue !== false ? $csubValue : "";

if (strlen($ndir) > 0 && strlen($csub) >= 0 && $dir_search) {

    if ($ndir == "..") {
        // Move up the directory -- Need to remove the last directory from the csub piece, this will also be the ndir variable
        $tdir = $csub;      // Setup a temporary variable for the full directory path
        if (strpos(strrev($tdir), "/") !== false) {
            $cdir = substr($tdir, 0, strlen($tdir) - strpos(strrev($tdir), "/") - 1);
            $cpath = $top_dir .
                ($cdir == '' ? "" : "/" . $cdir);
        } else {
            $cdir = '';
            $cpath = $top_dir;
        }
    } else {
        $cdir = $ndir;
        $cpath = $top_dir .
            ($csub == '' ? "" : "/" . $csub) .
            ($ndir == '' ? "" : "/" . $ndir) ;
    }
} elseif (isset($csub) == true) {
    $cpath = $top_dir . ($csub == '' ? "" : "/" . $csub);
    $cdir = substr(strrchr($csub, "/"), 1);
} else {
// Place code here so if any of these variable are NOT set, then we start over on the rotation
// If dir_search is false then make sure to reset all folders
    $cdir = "";
    $csub = "";
    $cpath = "$home_path/public_html";

}

// mws 5/7/2002 - Add code here, that if we are IN the employees or board directory
// we must look for the password file.  If NOT found the open it and save it
if (in_array($cdir, $allowed_dir)) {
    // We are in ONE of these directories, create the search string for the
    // password file
    $pwd_file="$home_path/admin/$cdir";        // Password File - Depends on where it is called from
    if (!file_exists($pwd_file)) {
        // We have searched for the file, and it does NOT exist -- now we must create it
        $fp = fopen($pwd_file, "w");
        fclose($fp);            // Now close the file
    }
}

// Create the directory name that is on top of the top_dir
// So if the current directory is /home/xyz/public_html/employees/sample
// This should return employees/sample
if (strpos($cpath, $top_dir) !== false) {
    $dir_pos = strpos($cpath, $top_dir);
    $cspath = substr($cpath, $dir_pos + 1 + strlen($top_dir));              // This should be the just the path information past the top_dir
} else {
    $dir_pos = strpos($cpath, $top_dir);
    $cspath = '';
}

$action = (empty($action) ? "none" : $action);
$action = strtolower($action);

switch ($action) {
    case "delete":
        delete_files();
        print_status();
        break;
    case "view":
        view_form();
        break;
    case "upload":
        // Post all information on the form, then reload the print_status screen
        post_form();
        print_status();
        break;
    case "createsub":
        create_subdir();
        print_status();
        break;
    case "create":
        create_dir();
        print_status();
        break;
    default:
        print_status();
        break;
    }

/* ------------------------------------- */
    function print_directory_list() {
        global $cpath, $top_dir, $dir_search, $allowed_files, $allowed_dir, $allow_subdir, $max_subdir, $self, $cspath, $chome, $ndir;

        $dirlistReturn = array(
            "active" => array(),
            "activeTitle" => "Active Directories",
            "inactive" => array(),
        );

        $url = GetEnvSetting('TICKET_DOMAIN') ? GetEnvSetting('TICKET_DOMAIN') : 'localhost:8000';
        $httpprotocol = GetEnvSetting('REQUIRE_ENCRYPTION') ? 'https' : 'http';
        $finalurl = $httpprotocol . '://' . $url;

        $dirlist = array();
        $filelist = array();
        if ($fhandle = @opendir($cpath)) {
            while (false !== ($file = readdir($fhandle))) {
                if (($file == "..") && ($dir_search == true)) {
                    // This is the parent directory
                    // Make sure we will let them see this, it must not meet the top most directory
                    // Only let them go as High as top_dir
                    // Only include if the top_dir is located in the current path
                    // also do NOT show the parent if the current directory is the same as the top directory
                    if ((strpos($cpath, $top_dir) !== false) && ($cpath != $top_dir)) {
                        $dirlist[count($dirlist)] = $file;
                        // ONLY include IF the current directory and topmost path do NOT equal the current path
                        // This is an attempt to NOT allow directory viewing further up the tree then allowed
                    }
                } elseif (($cpath == $top_dir)) {
                    // If the current path equals the top directory then ONLY show the
                    if (is_file($cpath . "/" . $file)) {
                        // Now check to see if the file is a viewable file
                        if (in_array($file, $allowed_files))
                            $filelist[count($filelist)] = $file;
                    } elseif ($dir_search == true) {
                        // Check to see if the directory is viewable
                        if (in_array($file, $allowed_dir))
                            $dirlist[count($dirlist)] = $file;
                    }
                    // Don't show any hidden files, which start with a "."
                } elseif (($file != ".") && ($file != "..") && (substr($file, 0, 1) != ".")) {
                    // Don't inlcude the current directory information
                    // Now check to see if this is a directory or file
                    if (is_file($cpath . "/" . $file))
                        $filelist[count($filelist)] = $file;
                    elseif($dir_search == true)
                        $dirlist[count($dirlist)] = $file;
                }
            }
        } else {
            //echo "Unable to Open";
        }

        // BUILD USER LINK
        // password maintenance not needed for images folder
        if (in_array($cspath, $allowed_dir) && $cspath !== 'images') {
            $maintDirName = ucfirst($cspath) . " Password Maintenance";
            $dirlistReturn['active'][] = array(
                "icon" => "fa-key",
                "name" => "$maintDirName",
                "link" => "main.prg?ft=26&tdir=$cspath",
                "mod" => "",
                "delete" => false,
                "new" => false
            );
        }

        // SORT and BUILD DIRECTORY LIST
        $dirlist_count = count($dirlist);
        if ($dirlist_count > 0) {
            // -- Sort the directories before printing them
            array_multisort ($dirlist, SORT_ASC, SORT_STRING);
            reset($dirlist);
            foreach ($dirlist as $shortname) {
                $ftime=date("m/d/y g:i:s A",filemtime("$cpath/$shortname"));
                if ($shortname == "..") {
                    $dirlistReturn["active"][] = array(
                        "icon" => "fa-arrow-left",
                        "name" => "Parent Folder",
                        "link" => "$self&ndir=$shortname&csub=$cspath",
                        "mod" => "$ftime",
                        "delete" => false,
                        "new" => false
                    );

                    // Add first crumb out side
                    $crumbArray = explode("/", $cspath);
                    $crumbSlice = array_slice($crumbArray, 0, 1);
                    $crumbString = implode("/", $crumbSlice);

                    $dirlistReturn['activeTitle'] = "<a href=\"$self&ndir=$shortname&csub=$crumbString\">Active Directories</a>";

                    // Each successive breadcrumb link must include the next crumb in the exploded
                    // array. So we slice the array from index 0 to i+1 length and implode it with slashes.
                    foreach ($crumbArray as $key => $value) {
                        $crumbSlice = array_slice($crumbArray, 0, $key + 2);
                        $crumbString = implode("/", $crumbSlice);

                        if ($key == count($crumbArray) - 1) {
                            $dirlistReturn['activeTitle'] .= " / {$crumbArray[$key]}";
                        } else {
                            $dirlistReturn['activeTitle'] .= " / <a href=\"$self&ndir=$shortname&csub=$crumbString\">{$crumbArray[$key]}</a>";
                        }
                    }

                    // IF allowed to add new subdirectories, add New Folder
                    // row after parent. Only allowed if number of sub dirs
                    // has not met max.

                    // Use <= because the parent is always in dirlist.
                    if ($allow_subdir && $dirlist_count <= $max_subdir) {
                        // only allow one level of subdirectory
                        // EX: alm/sub/no mor subs here
                        if (in_array($cspath, $allowed_dir)) {
                            $dirlistReturn["active"][] = array(
                                "icon" => "fa-folder",
                                "name" => "New Folder",
                                "link" => $cspath,
                                "mod" => "",
                                "delete" => false,
                                "new" => true
                            );
                        }
                    }
                } else {
                    $dirDelete = ($cpath != $top_dir) && (sizeof(scandir("$cpath/$shortname")) == 2);
                    $dirlistReturn["active"][] = array(
                        "icon" => "fa-folder-open",
                        "name" => "$shortname",
                        "link" => "$self&ndir=$shortname&csub=$cspath",
                        "mod" => "$ftime",
                        "delete" => $dirDelete,
                        "new" => false
                    );
                }
            }
        }

        // BUILD FILES LIST
        if (count($filelist) > 0) {
            natsort($filelist);
            reset($filelist);
            foreach ($filelist as $shortname) {
                $ftime=date("m/d/y g:i:s A",filemtime("$cpath/$shortname"));
                $urlencode = urlencode("$shortname");
                $filepath = ($cspath == "" ? "$urlencode" : "$cspath/$urlencode");
                // check if images folder or child folder in images
                if (substr($cspath, 0, 6) === 'images') {
                    $dirlistReturn["active"][] = array(
                        "icon" => "fa-file",
                        "name" => "$shortname",
                        "link" => "/fi/$chome/$filepath",
                        "copy" => $finalurl . "/fi/$chome/$filepath",
                        "mod" => "$ftime",
                        "delete" => true,
                        "new" => false
                    );
                } else {
                    $dirlistReturn["active"][] = array(
                        "icon" => "fa-file",
                        "name" => "$shortname",
                        "link" => "/fi/$chome/$filepath",
                        "mod" => "$ftime",
                        "delete" => true,
                        "new" => false
                    );
                }
            }
        }

        // Now print any directories that have NOT been created
        // then post to this script and allowing them to make the directories
        // If the allowed_dir and dirlist arrays do not have the same count then list the drop-down
        // Only allow viewing in the top directory
        if ((count($dirlist) < count($allowed_dir)) && ($cpath == $top_dir)) {

            reset($allowed_dir);
            foreach ($allowed_dir as $key => $value) {
                if (!in_array($value, $dirlist)) {
                    $dirlistReturn["inactive"][] = array(
                        "icon" => "fa-folder",
                        "name" => $value,
                        "link" => $key,
                        "mod" => "",
                        "delete" => false,
                        "new" => false
                    );
                }
            }
        }

        return $dirlistReturn;
    }

// removed the function page_header, only called cu_header mws 1/2/03
/* ------------------------------------- */
    function create_dir() {
        global $msg_err, $msg_suc, $Cn, $Cu, $mdir, $allowed_dir, $top_dir, $home_path, $chome;

        $dir_to_create = "";
        // This will attempt to create the directory in the credit unions public_html directory
        $mdir = intval($mdir);
        $path_to_dir = "";

        $dir_to_create = trim($allowed_dir[$mdir]);
        if (strlen($dir_to_create) == 0) {
            $msg_err = "Problem creating the directory.  Please select again.";
        } else {
            $path_to_dir = $top_dir . "/" . $dir_to_create;
            // Now look to see if the directory is created
            if (is_dir($path_to_dir)) {
                $msg_err = "The directory already exists.  It was not created.";
            } else {
                // here is where I try to create the directory
                if (@mkdir($path_to_dir, 0755) === false) {
                    // Problem creating the directory, it failed
                    $msg_err = "Unknown error creating the directory.  <br>
                    You may need to contact HomeCU to enable private directories.";
                } else {
                    // All is okay, so here I need to create the .htaccess file in the new directory
                    $ht_file = $path_to_dir . "/.htaccess";       // path to htaccess
                    $pwd_file = "$home_path/admin/$dir_to_create";
                    if (!file_exists($ht_file)) {
                        // Create the file with the options specified
                        $hp = fopen($ht_file, "w");

                        fwrite ($hp, "AuthName \"" . strtoupper($chome) . " " . ucfirst($dir_to_create) . "\"\n");
                        fwrite ($hp, "AuthType Basic\n");
                        fwrite ($hp, "require valid-user\n");
                        fwrite ($hp, "AuthUserFile $pwd_file\n");

                        fclose($hp);
                    }
                }
            }
        }
    }

/* ------------------------------------- */
    function create_subdir() {
        global $msg_err, $msg_suc, $Cn, $Cu, $allowed_dir, $top_dir, $home_path, $chome, $allow_subdir, $allow_multi_subdir, $max_subdir, $csub, $newfolder;

        // Values from url --
        // csub -- Current subdirectory the user was in, before trying to create a new folder
        // newfolder -- the name of the new folder the credit union wants to make

        // First start with the most basic of tests
        // 1. Are we allowing creation of subdirectories
        if ($allow_subdir == true) {
            $dir_to_create = "";
            // This will attempt to create the directory in the credit unions public_html directory
            $path_to_dir = "";

            // need to make sure csub and newfolder do not contain any weird characters
            $newfolder = preg_replace("/\W/", "", $newfolder);
            // $csub = preg_replace("/\W/", "", $csub);

            $dir_to_create = trim($csub) . "/" . $newfolder;
            if (strlen($dir_to_create) == 0) {
                $msg_err = "Problem creating the directory.  Please select again.";
            } else {
                // Okay so we are here --
                // Now need to be sure they are not creating a multi-subdirectory
                if ($allow_multi_subdir == true || ((array_search($csub, $allowed_dir) !== false))) {
                    // We are getting closer, but NOW we must be sure they have not
                    // exceeded the maximum number of subdirectories allowed

                    $dirpath = $top_dir . "/" . $csub;
                    $dirlist = array();

                    if ($fhandle = @opendir($dirpath)) {
                        while (false !== ($file = readdir($fhandle))) {
                            if (($file != ".") && ($file != "..") && (substr($file, 0, 1) != ".")) {
                                // Don't inlcude the current directory information
                                // Now check to see if this is a directory or file
                                if (is_dir($dirpath . "/" . $file)) {
                                    // Only add directory names
                                    $dirlist[count($dirlist)] = $file;
                                }
                            }
                        }
                    }

                    $dirlist_count = count($dirlist);

                    if ($dirlist_count < $max_subdir) {
                        $path_to_dir = $top_dir . "/" . $dir_to_create;
                        // Now look to see if the directory is created
                        if (is_dir($path_to_dir)) {
                            $msg_err = "The directory already exists.  It can not be created.";
                        } else {
                            // here is where I try to create the directory
                            if (@mkdir($path_to_dir, 0755) === false) {
                                // Problem creating the directory, it failed
                                $msg_err = "Unknown error creating the directory.  <br>
                                You may need to contact HomeCU for additional help .";
                            } else {
                                // All is okay, so here I need to create the .htaccess file in the new directory
                                // Operation a success -- tell the user
                                $msg_suc = "A new folder named '$newfolder' was created.";
                            }
                        }
                    } else {
                        // There are too many sub directories already, don't allow any more
                        $msg_err = "Maximum number of folders has been reached.  You will need to remove a folder before adding additional.";
                    }
                } else {
                    // We are NOT allowed subdirectories under subdirectories
                    $msg_err = "Unable to create the new folder.  Custom folders are only allowed in the top most folder.";
                }
            }
        } else {
            // We are not allowing creation of subdirectories
            // Possibly report that here
            $msg_err = "Creating subdirectories is NOT allowed.";
        }
    }

/* ------------------------------------- */
    function delete_files() {
        global $admVars, $msg_err, $msg_suc, $csub, $top_dir;

        $filesList = $admVars['DIRMAINT']['delete'];
        $files = explode(",", $filesList);

        foreach ($files as $filename) {
            // Be sure there are not / or \ in the file name
            $us_file_name = str_replace("/", "", $filename);
            $us_file_name = str_replace("\\", "", $us_file_name);

            $delete_file = $top_dir . ($csub == '' ? "" : "/$csub") . "/" . $us_file_name;

            if (file_exists($delete_file)) {
                if (is_file($delete_file)) {
                    if (!@unlink ($delete_file)) {
                        // This will unlink the file from this directory
                        $msg_err .= "Unable to delete the file!  Please try again.<br>";
                    } else {
                        $msg_suc .= "The file '$filename' was deleted successfully.<br>";
                    }
                } elseif (is_dir($delete_file)) {
                    $directory_empty = TRUE;
                    $directory = dir($delete_file);
                    while (FALSE !== ($item = $directory->read())) {
                        // If an item is not "." or "..", dir is not empty
                        if ($item != '.' && $item != '..')  {
                            $directory_empty = FALSE;
                            break;
                        }
                    }
                    $directory->close();
                    if(($directory_empty == TRUE) && ( @rmdir ($delete_file))) {
                        $msg_suc .= "The folder '$filename' was deleted successfully.<br>";
                    } else {
                        $msg_err .= "Unable to delete folder '$filename'!  Please be sure the folder is empty.<br>";
                    }
                }
            }
        }
    }

/* ------------------------------------- */
    function print_status() {
        global $msg_err, $msg_suc, $dir, $self, $Cn, $Cu, $cdir, $cpath, $dir_search, $top_dir, $cspath, $csub, $allowed_dir, $allowed_files, $chome, $allow_subdir, $allow_multi_subdir, $max_subdir, $top_upload, $delurl;

        $directoryList = print_directory_list();

        $url = GetEnvSetting('TICKET_DOMAIN') ? GetEnvSetting('TICKET_DOMAIN') : 'localhost:8000';
        $httpprotocol = GetEnvSetting('REQUIRE_ENCRYPTION') ? 'https' : 'http';
        $finalurl = $httpprotocol . '://' . $url;

        header("Expires: Sat 20 May 1995 03:32:38 GMT");
        header("Pragma: no-cache");
        header("Cache-Control: no-cache, must-revalidate");
    ?>

    <!-- Clipboard.js -->
    <script type='text/javascript' src='/admcom/static/js/clipboard.min.js'></script>
    <!-- NEW HTML / JS -->
    <script type="text/javascript">

    new ClipboardJS('.btn');

    var windowStack = [];

    var gridActive = null;
    var gridInactive = null;
    var gridData = <?php echo HCU_JsonEncode($directoryList); ?>;

    var fileUploader = null;
    var fileNameToUpload = null;
    var fileSizeToBeUploaded = null;

    // Messages
    var msg_err = "<?php echo $msg_err; ?>";
    var msg_suc = "<?php echo $msg_suc; ?>";

    // Display Errors here, since every actions required page load
    if (msg_err.length > 0) {
        $.homecuValidator.homecuResetMessage = true;
        $.homecuValidator.displayMessage(msg_err, $.homecuValidator.settings.statusError);
    } else if (msg_suc.length > 0) {
        $.homecuValidator.homecuResetMessage = true;
        $.homecuValidator.displayMessage(msg_suc, $.homecuValidator.settings.statusSuccess);
    }

    $(document).ready(function(e) {
        gridActive = $("#gridActive").kendoGrid({
            dataSource: {
                data: gridData.active
            },
            noRecords: {
                template: "No active directories found."
            },
            columns: [{
                headerTemplate: gridData.activeTitle,
                field: "name"
            },{
                title: ""
            },{
                title: "",
                width: 25,
                headerTemplate: "<input type=\"checkbox\" name=\"chk_delete_all\" />"
            }],
            rowTemplate: kendo.template($("#rowTemplateActive").html()),
            dataBound: function(e) {
                // Select all option, select all checkboxes in grid
                // for deletion.
                $("input[name=\"chk_delete_all\"]").on("change", function(e) {
                    var checked = $(this).prop("checked");

                    $("input[name=\"chk_delete\"]").prop("checked", checked);

                    // Disable / Enable delete button
                    $("#btn_delete").prop("disabled", !checked);
                });

                $("input[name=\"chk_delete\"]").on("change", function(e) {
                    var checked = $(this).prop("checked");

                    // Get number of boxes and number of checked boxes.
                    var numBoxes = $("input[name=\"chk_delete\"]").length;
                    var numChecked = $("input[name=\"chk_delete\"]:checked").length;

                    if (checked) {
                        // If all checkboxes are now checked, check the
                        // select all box at the top.
                        if (numBoxes == numChecked) {
                            $("input[name=\"chk_delete_all\"]").prop("checked", true);
                        }
                    } else {
                        // Unchecking any single checkbox will uncheck
                        // the select all checkbox.
                        $("input[name=\"chk_delete_all\"]").prop("checked", false);
                    }

                    // Disable / Enable delete button
                    $("#btn_delete").prop("disabled", (numChecked == 0));
                });
            }
        }).data("kendoGrid");

        // Only show this grid if on root directory
        <?php if ($cpath == $top_dir) { ?>
        gridInactive = $("#gridInactive").kendoGrid({
            dataSource: {
                data: gridData.inactive
            },
            noRecords: {
                template: "No inactive directories found."
            },
            columns: [{
                title: "Inactive Directories",
                field: "name"
            }],
            rowTemplate: kendo.template($("#rowTemplateInactive").html())
        }).data("kendoGrid");
        <?php } ?>

        $("#btn_delete").on("click", check_delete);
        $("#btn_upload").on("click", check_upload);
        fileUploader = $("#upload").kendoUpload({
            multiple: false,
            autoUpload: false,
            validation: {
                maxFileSize: 40000000
            },
            select: function(e) {
                fileNameToUpload = e.files[0].name;
                fileSizeToBeUploaded = e.files[0].size;
                console.log(fileSizeToBeUploaded);
            }
        }).data("kendoUpload");
    });

    $(document).on("click", ".k-overlay", function() {
      if (windowStack.length > 0) {
        var openWindow = windowStack[windowStack.length - 1];
        openWindow.close();
      }
    });
    </script>

    <!-- GRID ROW TEMPLATE -->
    <script type="text/x-kendo-tmpl" id="rowTemplateActive">
        <tr data-uid="#: uid #">
            <td>
                <span class="fa #: data.icon #"></span>&emsp;
                # if (data.new) { #
                <a href="\\#" onclick="new_folder('#: data.link #')">#: data.name #</a>
                # } else { #
                    # if (data.icon == "fa-file") { #
                        <a href="#: data.link #" target="_blank">#: data.name #</a>

                        # if (data.copy) { #
                            <img src="/admcom/static/img/clippy.png" class="btn" data-clipboard-text="#: data.copy #" alt="Copy to clipboard">
                        # } #

                    # } else { #
                        <a href="#: data.link #">#: data.name #</a>
                    # } #
                # } #
            </td>
            <td>#: data.mod #</td>
            # if (data.delete) { #
            <td>
                <input type="checkbox" name="chk_delete" value="#: data.name #" />
            </td>
            # } else { #
            <td></td>
            # } #
        </tr>
    </script>

    <!-- This grid will only display if user is on root directory -->
    <script type="text/x-kendo-tmpl" id="rowTemplateInactive">
        <tr data-uid="#: uid #">
            <td>
                <span class="fa #: data.icon #"></span>&emsp;
                <a href="\\#" onclick="confirm_dir('#:data.name#', '#: data.link #')">#: data.name #</a>
            </td>
        </tr>
    </script>

    <div class="container-fluid">
        <div id="dirMaintPopout"></div>
        <h2>Private Directories</h2>
        <form id="pdForm" method="post" action="<?php echo $self ?>" enctype="multipart/form-data">
            <input type="hidden" name="action" value="upload">
            <input type="hidden" name="delete" value="">
            <input type="hidden" name="csub" value="<?php echo $cspath; ?>">

            <!-- Only show upload for non root directory -->
            <?php if ($cpath != $top_dir) { ?>
            <p>
                <label>Directory Access Link: </label>
                <a href="<?php echo $finalurl . "/fi/$chome/$cspath"; ?>"><?php echo $finalurl ."/fi/$chome/$cspath"; ?></a>
            </p>
            <div class="well well-sm">
                <input type="file" name="upload" id="upload">
                <p style="padding-top: 1em; text-align: right;">
                    <button type="button" class="k-button k-primary" id="btn_upload"><span class="fa fa-upload">&ensp;</span>Upload</button>
                </p>
            </div>
            <?php } ?>

            <div id="gridActive"></div>

            <?php if ($cpath != $top_dir) { ?>
            <div class="hcu-template">
                <div class="hcu-edit-buttons k-state-default">
                    <button type="button" id="btn_delete" class="k-button" disabled>
                        <i class="fa fa-trash fa-lg"></i>Delete
                    </button>
                </div>
            </div>
            <?php } ?>

            <br>
            <!-- Only show inactive grid if on root directory -->
            <?php if ($cpath == $top_dir) { ?>
            <div class="hcu-secondary">
              <div class="vsgSecondary">
                <span>To activate a private directory, click on the directory name.</span>
              </div>
            </div>
            <div id="gridInactive"></div>
            <?php } ?>
        </form>
    </div>

    <!-- END NEW HTML / JS -->
    <script language="javascript">

        // This function will first check
        function check_upload() {
            // Check if upload selection already exists
            var fileFound = false;
            for (var i = 0; i < gridData.active.length; i++) {
                var name = gridData.active[i].name;
                if (name == fileNameToUpload) {
                    fileFound = true;
                    break;
                }
            }

            if (fileSizeToBeUploaded > 40000000) {
                // ERROR, This is caught by the uploader validation
                // I will leave this here in case it is needed later on.
                return false;
            }

            if (fileFound) {
                var confirmOverwrite = $("<div></div>").kendoDialog({
                    title: "Upload File",
                    modal: true,
                    visible: false,
                    resizable: false,
                    minWidth: 300,
                    maxWidth: 500,
                    show: function(e) {
                        windowStack.push(this);
                    },
                    close: function(e) {
                        windowStack.pop();
                        this.destroy();
                    },
                    actions: [
                        { text: "No" },
                        {
                            text: "Yes", primary: true,
                            action: function(e) {
                                // User is OK with overwriting file
                                $("#pdForm").submit();
                            }
                        }
                    ],
                    content: "<div class=\"col-xs-12\"><p><strong>You are about to overwrite the file '" + fileNameToUpload + "'.</strong></p><p>Do you wish to continue?</p></div>"
                }).data("kendoDialog");

                confirmOverwrite.open().center();
            } else {
                // File doesn't exist already, submit form
                $("#pdForm").submit();
            }
        }

        function check_delete() {
            // Check if any rows are selected for deletion
            var numChecked = $("input[name=\"chk_delete\"]:checked").length;

            if (numChecked > 0) {
                var dialogConfirmDelete = $("<div></div>").kendoDialog({
                    title: "Delete Files",
                    modal: true,
                    visible: false,
                    resizable: false,
                    minWidth: 300,
                    maxWidth: 500,
                    show: function(e) {
                        windowStack.push(this);
                    },
                    close: function(e) {
                        windowStack.pop();
                        this.destroy();
                    },
                    actions: [
                        { text: "No" },
                        {
                            text: "Yes", primary: true,
                            action: function(e) {
                                // Add file names to string and send to server
                                var delete_files = [];
                                $("input[name=\"chk_delete\"]:checked").each(function(e) {
                                    delete_files.push($(this).val());
                                });

                                // Combine into comma separated list.
                                var delete_files_string = delete_files.join(",");

                                // Add data to hidden delete field and submit form
                                $("input[name=\"delete\"]").val(delete_files_string);
                                $("input[name=\"action\"]").val("delete");
                                $("#pdForm").submit();
                            }
                        }
                    ],
                    content: "<div class=\"col-xs-12\"><p><strong>You are about to delete the delected files or folders.</strong></p><p>Do you wish to continue?</p></div>"
                }).data("kendoDialog");

                dialogConfirmDelete.open().center();
            }
        }

        function confirm_dir(sdir, idir) {
            // This function will be used to confirm if they
            // want to create the desired directory
            var confirmActivate = $("<div></div>").kendoDialog({
                title: "Activate Directory",
                modal: true,
                visible: false,
                resizable: false,
                minWidth: 300,
                maxWidth: 500,
                show: function(e) {
                    windowStack.push(this);
                },
                close: function(e) {
                    windowStack.pop();
                    this.destroy();
                },
                actions: [
                    { text: "No" },
                    {
                        text: "Yes", primary: true,
                        action: function(e) {
                            var url = "<?php echo $self; ?>&action=create&mdir=" + idir;
                            document.location = url;
                        }
                    }
                ],
                content: "<div class=\"col-xs-12\"><p><strong>This will create the private directory '" + sdir + "'</strong></p><p>Do you wish to continue?</p></div>"
            }).data("kendoDialog");

            confirmActivate.open().center();
        }
        function new_folder(cur_sub) {
            var confirmNewFolder = $("<div></div>").kendoDialog({
                title: "Activate Directory",
                modal: true,
                visible: false,
                resizable: false,
                minWidth: 300,
                maxWidth: 500,
                show: function(e) {
                    windowStack.push(this);
                },
                close: function(e) {
                    windowStack.pop();
                    this.destroy();
                },
                actions: [
                    { text: "No" },
                    {
                        text: "Yes", primary: true,
                        action: function(e) {
                            var newFolderField = $("#newFolder");

                            if (newFolderField) {
                                var folderName = newFolderField.val();
                                // Strip all non-alpha-numeric characters
                                folderName = folderName.replace(/\W/g, "");
                                var url = "<?php echo $self; ?>&action=createsub&csub=" + escape(cur_sub) + "&newfolder=" + folderName;
                                document.location = url;
                            }
                        }
                    }
                ],
                content: "<div class=\"col-xs-12\"><p>Please enter a name for the new directory</p><input class=\"k-textbox hcu-all-100\" type=\"text\" name=\"newFolder\" id=\"newFolder\" maxlength=\"10\"></div>"
            }).data("kendoDialog");

            confirmNewFolder.open().center();
        }
        // -->
    </script>

<?php }

function view_form() {
    global $dir;
    global $cspath;
    global $file;
    global $self;
    global $top_dir;

    $file_path = "$top_dir/$cspath/$file";
    $form = file($file_path);
    if (is_array($form)){
        print implode("", $form);
    }else{
        print "Cannot open $file_path";
    }
}

function post_form() {
    // Here we will post all the variables from the form and execute as needed
        global $msg_err, $msg_suc, $replace, $csub, $top_dir, $err_msg;

            // Don't allow a file size of 0 bytes
        $up_err = "";
        if (!is_uploaded_file($_FILES['upload']['tmp_name']) || ($_FILES['upload']['size'] < 1)) {
            switch ($_FILES['upload']['error']) {
                case 0:
                    $msg_suc = "0: No error, the file was uploaded successfully";
                    break;
                case 1:
                    $msg_err = "1: The upload is larger than the amount allowable by the upload_max_filesize directive in the php.ini";
                    $msg_err = "1: The file you tried to upload is just too big.  The allowable limit is 40mb.";
                    break;
                case 2:
                    $msg_err = "2: The upload is larger than the MAX_FILE_SIZE directive that was specified via html";
                    $msg_err = "2: The file you tried to upload is just too big.  The allowable limit is 40mb.";
                    break;
                case 3:
                    $msg_err = "3: The file was only partially uploaded";
                    break;
                case 3:
                    $msg_err = "4: no file was uploaded";
                    break;
                default:
                    $msg_err = "NOT SET";
            }
        } else {
                // The file name will always be that of the file being uploaded
                $filedir = $top_dir . ($csub == '' ? "" : "/$csub");

                // strip these characters '/', '\', ';', and ' ' replace with an '_'.
                $find_ary = array("\\", "/", " ", ";");         // instead of these...
                $rpl_ary = array("_", "_", "_", "_");               // use the _ character
                $us_file_name = str_replace($find_ary, $rpl_ary, $_FILES['upload']['name']);
            # make sure we still have a valid file name:
            if ("$us_file_name" == "") {
                $up_err = "Error Reported - Invalid Upload to Private Directory";
            }

            // Success message
            $msg_suc = "The file '$us_file_name' was uploaded successfully.";
        }
        if ($msg_err != "") {
                $msg = "
Upload File Error --\n
Client Information \n
    Client Filename: {$_FILES['upload']['name']}\n
    Client Filesize: {$_FILES['upload']['size']}\n
    Client Filetype: {$_FILES['upload']['type']}\n\n
    Client IP: {$_SERVER['REMOTE_ADDR']}\n\n
Web Server Information \n
    Temp File Name - {$_FILES['upload']['tmp_name']}
    Error Reported - $up_err\n\n

                            ";
                $notify = new ErrorMail;
                $notify->line = __LINE__;
                $notify->file = __FILE__;
                $notify->callingfunction = __FUNCTION__;
                $notify->sql = $msg;
                $notify->cu = "$Cu";
                $notify->mailto = "custmnt1@homecu.net";
                $notify->subject = "Private Directories upload error";
                $notify->SendErr();
                // IF we got here, the file is NOT an uploaded file report an error

                // An error may occur here if the file is too large, this can be set in the php.ini file the variable is upload_max_filesize
                print <<< print_html
                    <center>
                    <br>
                    There was an error uploading the file <b>{$_FILES['upload']['name']}</b>.<br>
                    The error reported was: <b>$up_err</b>.<br>
                    Please retry uploading the file.<br>
                    If the problem persists call HomeCU and report the problem.

                    </center>
print_html;
            } else {
                $filename = $filedir . "/" . $us_file_name;
                // move the file into the selected private directory
                if (!move_uploaded_file($_FILES['upload']['tmp_name'], $filename)) {
                    unlink ($_FILES['upload']['tmp_name']);
                // Print error screen -- couldn't move file
                print <<< html_text
                    <br><br>
                    Uh-oh, couldn't post the file where it belongs.  Not sure what happened.  Better call HomeCU.
html_text;
                } else {
                    // File was moved change the mod settings
                    $rc = @chmod($filename, 0644);
        }
}
    }
?>