check_controller_access($controller, $_POST)) { UI::exitError(getMLText("document_title", array("documentname" => "")),getMLText("access_denied")); } if (isset($_GET["version"])) { /* {{{ */ // document download if (!isset($_GET["documentid"]) || !is_numeric($_GET["documentid"]) || intval($_GET["documentid"])<1) { UI::exitError(getMLText("document_title", array("documentname" => getMLText("invalid_doc_id"))),getMLText("invalid_doc_id")); } $documentid = $_GET["documentid"]; $document = $dms->getDocument($documentid); if (!is_object($document)) { UI::exitError(getMLText("document_title", array("documentname" => getMLText("invalid_doc_id"))),getMLText("invalid_doc_id")); } $folder = $document->getFolder(); $docPathHTML = getFolderPathHTML($folder, true). " / ".$document->getName().""; if ($document->getAccessMode($user) < M_READ) { UI::exitError(getMLText("document_title", array("documentname" => $document->getName())),getMLText("access_denied")); } if (!is_numeric($_GET["version"]) || intval($_GET["version"])<1) { UI::exitError(getMLText("document_title", array("documentname" => $document->getName())),getMLText("invalid_version")); } $version = $_GET["version"]; $content = $document->getContentByVersion($version); if (!is_object($content)) { UI::exitError(getMLText("document_title", array("documentname" => $document->getName())),getMLText("invalid_version")); } $controller->setParam('content', $content); $controller->version(); } /* }}} */ elseif (isset($_GET["file"])) { /* {{{ */ // file download if (!isset($_GET["documentid"]) || !is_numeric($_GET["documentid"]) || intval($_GET["documentid"])<1) { UI::exitError(getMLText("document_title", array("documentname" => getMLText("invalid_doc_id"))),getMLText("invalid_doc_id")); } $documentid = $_GET["documentid"]; $document = $dms->getDocument($documentid); if (!is_object($document)) { UI::exitError(getMLText("document_title", array("documentname" => getMLText("invalid_doc_id"))),getMLText("invalid_doc_id")); } $folder = $document->getFolder(); $docPathHTML = getFolderPathHTML($folder, true). " / ".$document->getName().""; if ($document->getAccessMode($user) < M_READ) { UI::exitError(getMLText("document_title", array("documentname" => $document->getName())),getMLText("access_denied")); } if (!is_numeric($_GET["file"]) || intval($_GET["file"])<1) { UI::exitError(getMLText("document_title", array("documentname" => $document->getName())),getMLText("invalid_file_id")); } $fileid = $_GET["file"]; $file = $document->getDocumentFile($fileid); if (!is_object($file)) { UI::exitError(getMLText("document_title", array("documentname" => $document->getName())),getMLText("invalid_file_id")); } $controller->setParam('file', $file); $controller->setParam('type', 'file'); $controller->run(); } /* }}} */ elseif (isset($_GET["arkname"])) { /* {{{ */ $filename = basename($_GET["arkname"]); // backup download if (!$user->isAdmin()) { UI::exitError(getMLText("admin_tools"),getMLText("access_denied")); } if (!isset($filename)) { UI::exitError(getMLText("admin_tools"),getMLText("unknown_id")); } if($settings->_backupDir && file_exists($settings->_backupDir)) $basedir = $settings->_backupDir; else $basedir = $settings->_contentDir; if (!file_exists($basedir.$filename) ) { UI::exitError(getMLText("admin_tools"),getMLText("missing_file")); } $controller->setParam('basedir', $basedir); $controller->setParam('file', $filename); $controller->archive(); } /* }}} */ elseif (isset($_GET["logname"])) { /* {{{ */ $filename = basename($_GET["logname"]); // log download if (!$user->isAdmin()) { UI::exitError(getMLText("admin_tools"),getMLText("access_denied")); } if (!isset($filename)) { UI::exitError(getMLText("admin_tools"),getMLText("unknown_id")); } if (!file_exists($settings->_contentDir.$filename) ) { UI::exitError(getMLText("admin_tools"),getMLText("missing_file")); } $controller->setParam('file', $filename); $controller->setParam('basedir', $settings->_contentDir); $controller->log(); } /* }}} */ elseif (isset($_GET["vfile"])) { /* {{{ */ // versioning info download $documentid = $_GET["documentid"]; $document = $dms->getDocument($documentid); if (!is_object($document)) { UI::exitError(getMLText("document_title", array("documentname" => getMLText("invalid_doc_id"))),getMLText("invalid_doc_id")); } // update infos createVersionigFile($document); header("Content-Type: text/plain; name=\"" . $settings->_versioningFileName . "\""); //header("Content-Type: application/force-download; name=\"" . $settings->_versioningFileName . "\""); header("Content-Transfer-Encoding: binary"); header("Content-Length: " . filesize($dms->contentDir.$document->getDir().$settings->_versioningFileName )."\""); $efilename = rawurlencode($settings->_versioningFileName); header("Content-Disposition: attachment; filename=\"". $efilename . "\""); //header("Expires: 0"); //header("Content-Type: " . $content->getMimeType()); //header("Cache-Control: no-cache, must-revalidate"); header("Cache-Control: must-revalidate"); //header("Pragma: no-cache"); ob_clean(); readfile($dms->contentDir . $document->getDir() .$settings->_versioningFileName); } /* }}} */ elseif (isset($_GET["dumpname"])) { /* {{{ */ $filename = basename($_GET["dumpname"]); // dump file download if (!$user->isAdmin()) { UI::exitError(getMLText("admin_tools"),getMLText("access_denied")); } if (!isset($filename)) { UI::exitError(getMLText("admin_tools"),getMLText("unknown_id")); } if($settings->_backupDir && file_exists($settings->_backupDir)) $basedir = $settings->_backupDir; else $basedir = $settings->_contentDir; if (!file_exists($basedir.$filename) ) { UI::exitError(getMLText("admin_tools"),getMLText("missing_file")); } $controller->setParam('basedir', $basedir); $controller->setParam('file', $filename); $controller->sqldump(); } /* }}} */ elseif (isset($_GET["reviewlogid"])) { /* {{{ */ if (!isset($_GET["documentid"]) || !is_numeric($_GET["documentid"]) || intval($_GET["documentid"])<1) { UI::exitError(getMLText("document_title", array("documentname" => getMLText("invalid_doc_id"))),getMLText("invalid_doc_id")); } if (!isset($_GET["reviewlogid"]) || !is_numeric($_GET["reviewlogid"]) || intval($_GET["reviewlogid"])<1) { UI::exitError(getMLText("document_title", array("documentname" => htmlspecialchars($document->getName()))),getMLText("invalid_reviewlog_id")); } $documentid = $_GET["documentid"]; $document = $dms->getDocument($documentid); if (!is_object($document)) { UI::exitError(getMLText("document_title", array("documentname" => htmlspecialchars($document->getName()))),getMLText("invalid_doc_id")); } if ($document->getAccessMode($user) < M_READ) { UI::exitError(getMLText("document_title", array("documentname" => htmlspecialchars($document->getName()))),getMLText("access_denied")); } $controller->setParam('document', $document); $controller->setParam('reviewlogid', (int) $_GET['reviewlogid']); $controller->setParam('type', 'review'); $controller->run(); switch($controller->getErrorNo()) { case 1: UI::exitError(getMLText("admin_tools"),getMLText("missing_file")); break; } } /* }}} */ elseif (isset($_GET["approvelogid"])) { /* {{{ */ if (!isset($_GET["documentid"]) || !is_numeric($_GET["documentid"]) || intval($_GET["documentid"])<1) { UI::exitError(getMLText("document_title", array("documentname" => getMLText("invalid_doc_id"))),getMLText("invalid_doc_id")); } if (!isset($_GET["approvelogid"]) || !is_numeric($_GET["approvelogid"]) || intval($_GET["approvelogid"])<1) { UI::exitError(getMLText("document_title", array("documentname" => htmlspecialchars($document->getName()))),getMLText("invalid_approvelog_id")); } $documentid = $_GET["documentid"]; $document = $dms->getDocument($documentid); if (!is_object($document)) { UI::exitError(getMLText("document_title", array("documentname" => htmlspecialchars($document->getName()))),getMLText("invalid_doc_id")); } if ($document->getAccessMode($user) < M_READ) { UI::exitError(getMLText("document_title", array("documentname" => htmlspecialchars($document->getName()))),getMLText("access_denied")); } $controller->setParam('document', $document); $controller->setParam('reviewlogid', (int) $_GET['approvelogid']); $controller->setParam('type', 'approval'); $controller->run(); switch($controller->getErrorNo()) { case 1: UI::exitError(getMLText("admin_tools"),getMLText("missing_file")); break; } } /* }}} */ add_log_line(); exit();