forked from openemr/openemr
-
Notifications
You must be signed in to change notification settings - Fork 0
Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
Added administrative page for editing and uploading site-specific files.
- Loading branch information
1 parent
b2f2276
commit 60a7087
Showing
5 changed files
with
188 additions
and
1 deletion.
There are no files selected for viewing
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,180 @@ | ||
| <?php | ||
| // Copyright (C) 2010 Rod Roark <[email protected]> | ||
| // | ||
| // This program is free software; you can redistribute it and/or | ||
| // modify it under the terms of the GNU General Public License | ||
| // as published by the Free Software Foundation; either version 2 | ||
| // of the License, or (at your option) any later version. | ||
|
|
||
| // This module provides for editing site-specific text files and | ||
| // for uploading site-specific image files. | ||
|
|
||
| // Disable magic quotes and fake register globals. | ||
| $sanitize_all_escapes = true; | ||
| $fake_register_globals = false; | ||
|
|
||
| require_once("../globals.php"); | ||
| require_once("$srcdir/acl.inc"); | ||
| require_once("$srcdir/formdata.inc.php"); | ||
|
|
||
| if (!acl_check('admin', 'super')) die(xl('Not authorized','','','!')); | ||
|
|
||
| // Prepare array of names of editable files, relative to the site directory. | ||
| $my_files = array( | ||
| "clickoptions.txt", | ||
| "config.php", | ||
| "faxcover.txt", | ||
| "faxtitle.eps", | ||
| "referral_template.html", | ||
| "statement.inc.php", | ||
| "letter_templates/custom_pdf.php", | ||
| ); | ||
| // Append LBF plugin filenames to the array. | ||
| $lres = sqlStatement("SELECT * FROM list_options " . | ||
| "WHERE list_id = 'lbfnames' ORDER BY seq, title"); | ||
| while ($lrow = sqlFetchArray($lres)) { | ||
| $option_id = $lrow['option_id']; // should start with LBF | ||
| $title = $lrow['title']; | ||
| $my_files[] = "LBF/$option_id.plugin.php"; | ||
| } | ||
|
|
||
| $form_filename = strip_escape_custom($_REQUEST['form_filename']); | ||
| // Sanity check to prevent evildoing. | ||
| if (!in_array($form_filename, $my_files)) $form_filename = ''; | ||
| $filepath = "$OE_SITE_DIR/$form_filename"; | ||
|
|
||
| $imagedir = "$OE_SITE_DIR/images"; | ||
|
|
||
| if (!empty($_POST['bn_save'])) { | ||
| if ($form_filename) { | ||
| // Textareas, at least in Firefox, return a \r\n at the end of each line | ||
| // even though only \n was originally there. For consistency with | ||
| // normal OpenEMR usage we translate those back. | ||
| file_put_contents($filepath, str_replace("\r\n", "\n", | ||
| strip_escape_custom($_POST['form_filedata']))); | ||
| $form_filename = ''; | ||
| } | ||
|
|
||
| // Handle uploads. | ||
| if (is_uploaded_file($_FILES['form_image']['tmp_name']) && $_FILES['form_image']['size']) { | ||
| $form_dest_filename = strip_escape_custom($_POST['form_dest_filename']); | ||
| if ($form_dest_filename == '') { | ||
| $form_dest_filename = $_FILES['form_image']['name']; | ||
| } | ||
| $form_dest_filename = basename($form_dest_filename); | ||
| if ($form_dest_filename == '') { | ||
| die(xl('Cannot find a destination filename')); | ||
| } | ||
| $imagepath = "$imagedir/$form_dest_filename"; | ||
| // If the site's image directory does not yet exist, create it. | ||
| if (!is_dir($imagedir)) { | ||
| mkdir($imagedir); | ||
| } | ||
| if (is_file($imagepath)) unlink($imagepath); | ||
| $tmp_name = $_FILES['form_image']['tmp_name']; | ||
| if (!move_uploaded_file($_FILES['form_image']['tmp_name'], $imagepath)) { | ||
| die(xl('Unable to create') . " '$imagepath'"); | ||
| } | ||
| } | ||
| } | ||
| ?> | ||
| <html> | ||
|
|
||
| <head> | ||
| <title><?php xl('File management','e'); ?></title> | ||
| <link rel="stylesheet" href='<?php echo $css_header ?>' type='text/css'> | ||
|
|
||
| <style type="text/css"> | ||
| .dehead { color:#000000; font-family:sans-serif; font-size:10pt; font-weight:bold } | ||
| .detail { color:#000000; font-family:sans-serif; font-size:10pt; font-weight:normal } | ||
| </style> | ||
|
|
||
| <script language="JavaScript"> | ||
| // This is invoked when a filename selection changes in the drop-list. | ||
| // In this case anything else entered into the form is discarded. | ||
| function msfFileChanged() { | ||
| top.restoreSession(); | ||
| document.forms[0].submit(); | ||
| } | ||
| </script> | ||
|
|
||
| </head> | ||
|
|
||
| <body class="body_top"> | ||
| <form method='post' action='manage_site_files.php' enctype='multipart/form-data' | ||
| onsubmit='return top.restoreSession()'> | ||
|
|
||
| <center> | ||
|
|
||
| <p> | ||
| <table border='1' width='95%'> | ||
|
|
||
| <tr bgcolor='#dddddd' class='dehead'> | ||
| <td colspan='2' align='center'><?php echo xl('Edit File in') . " $OE_SITE_DIR"; ?></td> | ||
| </tr> | ||
|
|
||
| <tr> | ||
| <td valign='top' class='detail' nowrap> | ||
| <select name='form_filename' onchange='msfFileChanged()'> | ||
| <option value=''></option> | ||
| <?php | ||
| foreach ($my_files as $filename) { | ||
| echo " <option value='$filename'"; | ||
| if ($filename == $form_filename) echo " selected"; | ||
| echo ">$filename</option>\n"; | ||
| } | ||
| ?> | ||
| </select> | ||
| <br /> | ||
| <textarea name='form_filedata' rows='30' style='width:100%'><?php | ||
| if ($form_filename) { | ||
| echo htmlspecialchars(@file_get_contents($filepath)); | ||
| } | ||
| ?></textarea> | ||
| </td> | ||
| </tr> | ||
|
|
||
| <tr bgcolor='#dddddd' class='dehead'> | ||
| <td colspan='2' align='center'><?php echo xl('Upload Image to') . " $imagedir"; ?></td> | ||
| </tr> | ||
|
|
||
| <tr> | ||
| <td valign='top' class='detail' nowrap> | ||
| <?php xl('Source File','e'); ?>: | ||
| <input type="hidden" name="MAX_FILE_SIZE" value="12000000" /> | ||
| <input type="file" name="form_image" size="40" /> | ||
| <?php xl('Destination Filename','e') ?>: | ||
| <select name='form_dest_filename'> | ||
| <option value=''>(<?php xl('Use source filename','e') ?>)</option> | ||
| <?php | ||
| $dh = opendir($imagedir); | ||
| if (!$dh) die(xl('Cannot read directory') . " '$imagedir'"); | ||
| $imagesslist = array(); | ||
| while (false !== ($sfname = readdir($dh))) { | ||
| if (substr($sfname, 0, 1) == '.') continue; | ||
| if ($sfname == 'CVS' ) continue; | ||
| $imageslist[$sfname] = $sfname; | ||
| } | ||
| closedir($dh); | ||
| ksort($imageslist); | ||
| foreach ($imageslist as $sfname) { | ||
| echo " <option value='$sfname'"; | ||
| echo ">$sfname</option>\n"; | ||
| } | ||
| ?> | ||
| </select> | ||
| </td> | ||
| </tr> | ||
|
|
||
| </table> | ||
|
|
||
| <p> | ||
| <input type='submit' name='bn_save' value='<?php xl('Save','e') ?>' /> | ||
| </p> | ||
|
|
||
| </center> | ||
|
|
||
| </form> | ||
| </body> | ||
| </html> | ||
|
|
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
File renamed without changes