<?

	$STORAGE = '/users/webs/latincomex.com.ar/htdocs/filemanager/ftparchivos/';
	$maxFileCol = 5;
	$maxDirCol = 5;

	//Seteamos los users
	$users = array();
	$userTxt = file($STORAGE . "user.txt");
	foreach ($userTxt as $txt) {
		$txtArr = explode("=", $txt);

		$userName = trim($txtArr[0]);
		$userPass = trim(doString(array_slice($txtArr, 1), "="));

		$users[$userName] = $userPass;
	}

	session_start();
	//Si se quiere desloguear, lo dejamos
	if (isset($_GET["logout"])) $_SESSION = array();

	//Si viene por post, sacamos el user y la pass y los guardamos
	if ($_POST) {
		if ($_POST["a"] == "login") { //Login
			$username = $_POST["username"];
			$userpass = $_POST["userpass"];

			$_SESSION["user"] = $username;
			$_SESSION["pass"] = $userpass;

			$_SESSION[$username . "_dir"] = "/";
		}
	}
	//Los sacamos de la sesion
	$username = $_SESSION["user"];
	$userpass = $_SESSION["pass"];
	$thisDir = $_SESSION[$username . "_dir"];

	$adminLogin = false;
	//if (isset($_SESSION["adminlogin"])) $adminLogin = true;
	//Nos fijamos si existen
	if (($users[$username] && $users[$username] == $userpass) || $adminLogin) {
		//Existen, mostramos
		if ($adminLogin) { //Admin
			if (isset($_GET["adminlogin"])) $_SESSION["_dir"] = "/";
			$STORAGE = substr($STORAGE, 0, strlen($STORAGE) - 1);
			$username = "";
			$userpass = "";
			$thisDir = $_SESSION["_dir"];
		}
		$userDir = $STORAGE . $username;

		//Si pide cambiar de directorio
		if ($_REQUEST) {
			$dirStat = $_REQUEST["dirstat"];
			$T_MP = explode("/", $dirStat);
			$dirStat = $T_MP[0];
			if ($dirStat) { //Cambia de directorio
				if ($dirStat == ".." || $dirStat == ".") { //Anda uno para abajo
					$dirArr = explode("/", $thisDir);
					$thisDir = doString(array_slice($dirArr, 0, count($dirArr) - 2), "/") . "/";
				} else {
					if (file_exists($userDir . $thisDir . $dirStat . "/")) {
						$thisDir .= $dirStat . "/";
					}
				}
				$_SESSION[$username . "_dir"] = $thisDir;
			}

			$getFile = $_REQUEST["getfile"];
			if ($getFile) { //Envia un archivo
				$T_MP = explode("/", $getFile);
				$getFile = $T_MP[0];
				
				$filePath = $userDir . $thisDir . $getFile;
				if (file_exists($filePath) && is_file($filePath)) {
					if ($adminLogin && $getFile == "user.txt" && $thisDir == "/") { //Es el secreto
					} else {
						$fhFile = fopen($filePath, "rb");

						header("Content-type: " . mime_content_type($filePath));
						header('Content-Disposition: attachment; filename="' . $getFile . '"');

						fpassthru($fhFile);
						fclose($fhFile);
					}
					exit;
				}
			}
		}
		$userDir .= $thisDir;

		$dirArr = explode("/", $thisDir);
		$dirCount = count($dirArr);
		//Subir archivo y otros
		if ($_POST) {
			switch ($_POST["a"]) {
				case "cdir": //Crear directorio
					$dirName = str_replace("/", "", $_POST["dir"]);
					$dirName = str_replace(" ", "_", $dirName);
					if (!file_exists($userDir . $dirName . "/")) { //Puede crear
						mkdir($userDir . $dirName . "/", 0777);
					}
				break;
				case "cfile": //Crear archivo
					if ($_FILES) {
						$file = $_FILES['file'];
						$file["name"] = trim($file["name"]);
						if ($adminLogin && $file["name"] == "user.txt" && $thisDir == "/") { //Todo mal
						} else {
							@move_uploaded_file($file['tmp_name'], $userDir . $file["name"]);
						}
					}
				break;
				case "ddir" : //Borrar directorio
					if ($thisDir != "/") { //Puede borrar
						//Si es admin y esta borrando el user
						if ($adminLogin && count($dirCount) == 2) {
							break;
						}

						shell_exec("rm -r -f " . $userDir);

						$userDir = $STORAGE . $username;
						while (!file_exists($userDir . $thisDir) && !is_dir($userDir . $thisDir) && $thisDir != "/") {
							$dirArr = explode("/", $thisDir);
							$thisDir = doString(array_slice($dirArr, 0, count($dirArr) - 2), "/") . "/";
						}

						$userDir .= $thisDir;
						$dirArr = explode("/", $thisDir);
						$dirCount = count($dirArr);
						$_SESSION[$username . "_dir"] = $thisDir;
					}
				break;
				case "dfile" : //Borrar archivo
					$fileName = $_POST["file"];
					$filePath = $userDir . $fileName;
					if (file_exists($filePath) && is_file($filePath)) { //Puede borrar
						if ($adminLogin && $file["name"] == "user.txt" && $thisDir == "/") { //Casi...
						} else {
							@unlink($filePath);
						}
					}
				break;
				case "kdir" : //Limpiar directorio
					if ($thisDir == "/" || ($dirCount == 3 && $adminLogin)) { //Puede borrar
						shell_exec("rm -r -f " . $userDir . "*");
					}
				break;

			}
		}
		$files = scandir($userDir);
?>
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN"
  "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
<html dir="ltr" xml:lang="es" lang="es" xmlns="http://www.w3.org/1999/xhtml">
<head>
	<title>LatinComEx: Gestión online</title>
	<link href="styles.css" rel="stylesheet" type="text/css" />
	<meta content="text/html; charset=iso-8859-1" http-equiv="Content-Type" dir="ltr" />
	<meta name="language" content="es" />
</head>

<body>
<div id="wrap">
	<!-- HEADER -->
	<div id="header">
	<table width="100%">
		<tr>
			<td class="logo"><a href="index.php"><img src="images/logo-latincomex.gif" alt="LatinComEx - Ingeniería Comercial para Latinoamérica" /></a></td>
			<td class="subtitle">GESTION ONLINE<br /><span class="sectionName">Administrador de archivos</span></td>
			<td class="headerMenu">Usuario: <? echo $username ?> &nbsp;|&nbsp; <a href='index.php?logout=1' class="white">Cerrar sesion</a></td>
		</tr>
	</table>
	</div>
	<div id="content">
	<table width="100%">
		<tr>
			<td class="path">Usted est&aacute; en: <b><? echo $username . $thisDir ?></b></td>
		</tr>
		<tr>
			<td>
				<div>
				<table class="rowHeader" width="100%">
					<tr>
						<td class="type"></td>
						<td class="file">NOMBRE</td>
						<td class="size">TAMAÑO</td>
						<td class="delete"></td>
				  </tr>
				</table>
				<table class="rowFile" width="100%">
				<?
				foreach ($files as $file) {
					if (is_dir($userDir . $file)) { //Se fija si es un directorio
						if ($file == "..") {
							if ($thisDir <> "/") {
							echo "<tr class='fileDir' style='cursor:pointer;' onclick='window.location=\"index.php?dirstat=..\"'>";
							echo "<td class='type'><img src='images/back-icon.png' alt='Atrás' /></td>";
							echo "<td class='file'><b>..</b></td>";
							echo "<td class='size'>&nbsp;</td>";
							echo "<td class='delete'>&nbsp;</td>";
							echo "</tr>";
							}
						} else if ($file == ".") {
						} else {
							echo "<tr class='fileDir'>";
							echo "<td class='type hand' onclick='window.location=\"index.php?dirstat=$file\"'><img src='images/folder-closed-icon.png' alt='Folder' /></td>";
							echo "<td class='file hand' onclick='window.location=\"index.php?dirstat=$file\"'><b>" . trunc($file) . "</b></td>";
 							echo "<td class='size'>&nbsp;</td>";
							echo "<td class='delete'>";
							echo "<form action='index.php' method='post' onsubmit='";	
							echo "return window.confirm(\"Esta seguro de que quiere borrar el directorio &laquo;" . $file . "&raquo; y todo su contenido?\")'>";
							echo "<div>";
							echo "<input type='hidden' name='a' value='ddir' />";
							echo "<input type='hidden' name='dirstat' value='$file' />";
							echo "<input type='image' value='eliminar' src='images/delete-icon.png' />";
							echo "</div>";
							echo "</form>";
							echo "</td>";
							echo "</tr>";
						}
					}
				}
				
				foreach ($files as $file) {
					if (is_file($userDir . $file)) { //Se fija si es un archivo
						echo "<tr>";
						echo "<td class='type hand' onclick='window.location=\"index.php?getfile=$file\"'><img src='images/document-icon.png' alt='Document' /></td>";
						echo "<td class='file hand' onclick='window.location=\"index.php?getfile=$file\"'><b>" . trunc($file, 100) . "</b></td>";
						echo "<td class='size'>" . getSize(filesize($userDir . $file)) . "</td>";
						echo "<td class='delete'>";
						echo "<form action='index.php' method='post' onsubmit='";
						echo "return window.confirm(\"Esta seguro de que quiere borrar el archivo &laquo;" . $file . "&raquo;\")'>";
						echo "<div>";
						echo "<input type='hidden' name='a' value='dfile' />";
						echo "<input type='hidden' name='file' value='$file' />";
						echo "<input type='image' value='X' src='images/delete-icon.png' />";
						echo "</div>";
						echo "</form>";
						echo "</td>";
						echo "</tr>";
					}
				}
				?>
				</table>
				</div>
				<div id="add">
				<table>
					<tr>
						<td class="inputObjectLeft">
							<form action='index.php' method='post'>
								<table>
									<tr>
										<td class="title"><img src="images/add-folder-icon.png" alt="" /> Crear directorio:</td>
									</tr>
									<tr>
										<td class="inputArea">
											<input type='hidden' name='a' value='cdir' />
											<input type='text' name='dir' size='30' />
										</td>
									</tr>
									<tr>
										<td><input type='submit' value='Crear' /></td>
									</tr>
								</table>
							</form>
						</td>
						<td class="inputObjectRight">
							<form action='index.php' method='post' enctype="multipart/form-data">
								<table>
									<tr>
										<td class="title"><img src="images/upload-file-icon.png" alt="" /> Subir archivo:</td>
									</tr>
									<tr>
										<td class="inputArea">
											<input type='hidden' name='a' value='cfile' />
											<input type='file' name='file' size='30' />
										</td>
									</tr>
									<tr>
										<td><input type='submit' value='Subir' /></td>
									</tr>
								</table>
							</form>
						</td>
					</tr>
				</table>
				</div>
			</td>
		</tr>
	</table>
	</div>
</div>
	<?
	} else {
	//No existen, mostramos login
	?>
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN"
  "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
<html dir="ltr" xml:lang="es" lang="es" xmlns="http://www.w3.org/1999/xhtml">
<head>
	<title>LatinComEx: Gestión online</title>
	<link href="styles.css" rel="stylesheet" type="text/css" />
	<meta content="text/html; charset=iso-8859-1" http-equiv="Content-Type" dir="ltr" />
	<meta name="language" content="es" />
</head>

<body>
<div id="wrap">
	<div id="loginLogo">
		<div class="loginLogoInner"><img src="images/logo-latincomex-home.gif" alt="LatinComEx: Gestión Online" /></div>
	</div>
	<div id="loginForm">
	<form action='index.php' method='post'>
	<table>
		<tr>
			<td class="title">Nombre de usuario:</td>
			<td class="inputArea">
				<input type='hidden' name='a' value='login' />
				<input type='text' name='username' size='15' />
			</td>
		</tr>
		<tr>
			<td class="title">Contrase&ntilde;a:</td>
			<td class="inputArea"><input type='password' name='userpass' size='15' /></td>
		</tr>
		<tr>
			<td>&nbsp;</td>
			<td><input type='submit' value='Ingresar' /></td>
		</tr>
	</table> 
	</form>
	</div>
</div>

	<?
	}
	function doString($arr, $str) {
		$first = true;
		$toReturn = "";
		foreach ($arr as $text) {
			if ($first) {
				$first = false;
			} else {
				$toReturn .= $str;
			}

			$toReturn .= $text;
		}
		return $toReturn;
	}
	function trunc($str, $len = 100) {
		if (strlen($str) > $len) {
			return substr($str, 0, $len - 3) . "...";
		}
		return $str;
	}
	
	function getSize($bytes) {
		$stat = 0;
		while ($bytes > 1024) {
			$bytes = ($bytes / 1024);
			$stat ++;
		}
		
		$size = ((int) ($bytes * 100)) / 100;
		switch ($stat) {
			case 0:
				return $size . "B";
				break;
			case 1:
				return $size . "KB";
				break;
			case 2:
				return $size . "MB";
				break;
			case 3:
				return $size . "GB";
				break;
			case 4:
				return $size . "TB";
				break;
		}
		return "Gigante";
	}
?>

</body>
</html>