<?php

// freefile, a free file host
// (C) 2008 Innova and Kristopher Windsor

// v1.3	 update May  20: allows 3 files in one form, shows results in page instead of alerting them, valid HTML strict
// v1.31 update May  25: navigation links do not need JS, fixed bug where login had to be case sensitive, minor CSS enhancements for IE compatibility
// v1.32 update May  29: shows BB code in results box
// v1.4  update July 30: now you can specify a path when uploading files
// v1.5  update Aug  11: pasting available
// v1.6  update Aug  13: redid the pasting: KPaste! and paste.kristopherw.us, can delete files in sub folders, avatars shown on home page
// v1.61 update Aug  24: login info can be accepted by POST, for pasting utilities
// v2.0  update Dec  20: simplified front-end, file blacklisting, xhttp checks to see if file exists
// v2.1  update Mar  14: allowed capitalized filenames; if user overrides JS, it's OK

// todo: offer utilities / pages

$action = 'none';
$alert = '';
$refresh = ''; // only for login / logout
$login = '';
$members = array();

function initialize ()
	{
	global $action, $members, $login;

	if (isset($_GET['action']))
		$action = $_GET['action'];

	// load member list
	if (file_exists('data/members.dat'))
		{
		$c = file_get_contents('data/members.dat');
		$members = explode(';', $c);
		}
	else
		$members = array();

	// see if member is logged in
	if ((isset($_COOKIE['name']) && isset($_COOKIE['password'])) || (isset($_POST['name']) && isset($_POST['password'])))
		{
		if (isset($_COOKIE['name']) && isset($_COOKIE['password']))
			{
			$cn = $_COOKIE['name'];
			$cp = $_COOKIE['password'];
			}
		else
			{
			$cn = $_POST['name'];
			$cp = hash('sha384', $_POST['password']);
			}

		for ($i = 0; $i < count($members); $i += 2)
			{
			if (strtolower($members[$i]) == strtolower($cn) && $members[$i + 1] == $cp)
				{$login = $members[$i];}
			}
		}
	}

function append ($file, $text)
	{
	$f = fopen($file, 'a');
	fputs($f, $text);
	fclose($f);
	}

function vt (&$t, $allowthistoo = "")
	{
	for ($i = 0; $i < strlen($t); $i ++)
		{
		if (strpos('abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789_-' . $allowthistoo, $t[$i]) === false)
			$t[$i] = '_';
		}
	}

function setfilename (&$path, &$file, &$extension)
	{
	global $login;

	// remove file extension from file name to avoid scripting (EXE currently disabled)

	$blacklist = array('com', 'exe', 'htm', 'html', 'js', 'php', 'php4', 'php5', 'pl', 'xhtml', 'xml');
	$temp = explode('/', $file);

	$extensions = explode('.', $temp[count($temp) - 1]); // split filename (less path) by periods
	unset($extensions[0]); // remove filename from list (leaving only extensions only)
	if (count($extensions) == 0)
		$extensions[1] = 'txt';
	else
		$file = substr($file, 0, strlen($file) - strlen(implode('.', $extensions)) - 1); // remove extension from filename

	for ($i = 1; $i <= count($extensions); $i ++)
		{
		vt($extensions[$i]);
		foreach ($blacklist as $item)
			{
			if ($extensions[$i] == $item) //strpos($file, $item) + strlen($item) == strlen($file) && strpos($file, $item) !== false)
				$extensions[$i] = 'txt';
			}
		}
	$extension = '.' . implode('.', $extensions);

	// extract path from filename

	$path_array = explode('/', $file);
	foreach ($path_array as $c => $path_one)
		{
		vt($path_array[$c]);
		if ($path_array[$c] == '' && $c < count($path_array) - 1)
			$path_array[$c] = '_';
		}
	$file = $path_array[count($path_array) - 1];
	unset($path_array[count($path_array) - 1]);
	if (count($path_array) > 0)
		$path = implode('/', $path_array) . '/';
	else
		$path = '';

	if (!is_dir("uploads/" . strtolower($login) . "/$path"))
		mkdir("uploads/" . strtolower($login) . "/$path", 0777, true);
	}

function listfiles_folder ($path)
	{
	global $login;

	$fullpath = './uploads/' . strtolower($login) . $path;
	$displayed = 0;

	if ($handle = opendir($fullpath))
		{
		while (false !== ($file = readdir($handle)))
			{
        		if ($file != '.' && $file != '..')
				{
				if (is_dir($fullpath . '/' . $file))
					listfiles_folder($path . '/' . $file);
				else
					{
					$displayed ++;
					if ($displayed <= 5)
						{
						$f = $path . '/';
						echo '<option>' . substr($f, 1) . $file . '</option>';
						}
					}
				}
			}
		closedir($handle);
		}
	}

function listfiles ()
	{
	echo '<select name="filename"><option>- Select -</option>';
	listfiles_folder('');
	echo '</select><br><br><input type="submit" value="Delete">';
	}

function register ()
	{
	global $alert, $members;

	if (isset($_POST['name']) && isset($_POST['password']) && isset($_POST['spamcheck']))
		{
		$name = $_POST['name'];
		$password = $_POST['password'];
		$spamcheck = $_POST['spamcheck'];

		vt($name);
		vt($password);

		// spam check
		if ($spamcheck != "Free Basic is great!")
			{$alert = "You have failed the spam check!"; return;}

		// validate name and password

		if ($name == "" || $password == "")
			{$alert = "The name or password is blank!"; return;}

		for ($i = 0; $i < count($members); $i += 2)
			{
			if (strtolower($name) == strtolower($members[$i]))
				{$alert = "This account has already been registered!"; return;}
			}

		// append member data to file and make folder
		if (file_exists('data/members.dat'))
			append('data/members.dat', ';' . $name . ';' . hash('sha384', $password));
		else
			{
			file_put_contents('data/members.dat', $name . ';' . hash('sha384', $password));
			chmod('data/members.dat', 0700);
			}
		mkdir('uploads/' . strtolower($name));
		chmod('uploads/' . strtolower($name), 0777);

		$alert = "Member $name is now registered!";
		}
	}

function login ()
	{
	global $alert, $refresh, $members;

	if (isset($_POST['name']) && isset($_POST['password']))
		{
		$name = $_POST['name'];
		$password = $_POST['password'];

		vt($name);
		vt($password);

		if ($name == "")
			{
			if (isset($_COOKIE['name']) && $password == "")
				{
				setcookie('name');
				setcookie('password');
				$refresh = 'You have been logged out!';
				}
			else
				$alert = "No name was entered!";
			}
		else
			{
			if ($password == "")
				{
				$alert = "No password was entered!";
				return;
				}

			$cp = ""; // the password (must match the cookie); if blank, the user does not exist

			// find member in list to see what his password should be
			for ($i = 0; $i < count($members); $i += 2)
				{
				if (strtolower($name) == strtolower($members[$i]))
					{$cp = $members[$i + 1];}
				}

			if ($cp == "")
				{
				$alert = "This member does not exist!";
				return;
				}

			if (hash('sha384', $password) == $cp)
				{
				setcookie('name', $name, time() + 3600 * 24 * 3650);
				setcookie('password', hash('sha384', $password), time() + 3600 * 24 * 3650);
				$refresh = 'You are now logged in!';
				return;
				}
			else
				{
				$alert = "This password is incorrect!";
				return;
				}
			}
		}
	}

function paste ()
	{
	global $alert, $login;

	if ($login == '')
		{$alert = 'You are not logged in!'; return;}

	if (!isset($_POST['paste']) || !isset($_POST['pastename']))
		return;

	// get paste
	$paste = trim(stripslashes($_POST['paste']));
	if ($paste == '')
		{$alert = 'The paste is blank!'; return;}

	// filename
	$file = $_POST['pastename'];
	setfilename($path, $file, $extension);
	$filer = "uploads/" . strtolower($login) . "/$path$file.txt";
	$download_destination = getcwd() . "/$filer";

	// duplicates
	if (file_exists($download_destination) && !isset($_POST['overwrite']))
		{$alert = "The <a href=\"$filer\">paste</a> already exists!"; return;}

	// save file
	file_put_contents($download_destination, $paste);
	append('data/files.dat', ";$filer");

	$alert = "Pasted: <a href=\"$filer\">$file</a> <a href=\"javascript:showbbcode('[url]http://" . $_SERVER['HTTP_HOST'] . '/' . $filer . '[/url]\')">[url]</a>!';
	}

function upload_file ($filenumber)
	{
	global $login;

	if (!isset($_POST['filename' . $filenumber]) || !isset($_FILES['file' . $filenumber]))
		return;

	if ($_FILES['file' . $filenumber]['error'] == 4)
		return;

	$filename = $_POST['filename' . $filenumber];
	setfilename($path, $filename, $fileextension);

	if ($_FILES['file' . $filenumber]['error'] != 0)
		return "Upload error #" . $_FILES['file' . $filenumber]['error'] . " has occured!";

	$filer = "uploads/" . strtolower($login) . "/$path$filename$fileextension";
	$download_destination = getcwd() . "/$filer";

	if (file_exists($download_destination) && !isset($_POST['overwrite']))
		return "The <a href=\"$filer\">file</a> already exists!";

	if (move_uploaded_file($_FILES['file' . $filenumber]['tmp_name'], $download_destination))
		{
		chmod($download_destination, 0777);
		if (file_exists('data/files.dat'))
			append('data/files.dat', ";$filer");
		else
			{
			file_put_contents('data/files.dat', $filer);
			chmod('data/files.dat', 0700);
			}
		$r = "Uploaded: <a href=\"$filer\">$filename</a> <a href=\"javascript:showbbcode('[url]http://" . $_SERVER['HTTP_HOST'] . '/' . $filer . '[/url]\')">[url]</a>';
		if ($fileextension == '.jpg' || $fileextension == '.png' || $fileextension == '.gif')
			$r .= " <a href=\"javascript:showbbcode('[img]http://" . $_SERVER['HTTP_HOST'] . '/' . $filer . '[/img]\')">[img]</a>';
		return $r . '!';
		}
	else
		return "This file cannot be uploaded!";
	}

function upload ()
	{
	global $alert, $login;

	if ($login == '')
		{$alert = 'You are not logged in!'; return;}

	setcookie('lastpage', 'upload', time() + 3600 * 24 * 3650);

	for ($i = 1; $i <= 3; $i ++)
		{
		$result = upload_file($i);
		if ($result != '')
			$alert .= "File #$i: $result<br>";
		}
	}

function manage ()
	{
	global $alert, $login;

	if (isset($_POST['filename']))
		{
		if ($login == '')
			{$alert = 'You are not logged in!'; return;}

		$filename = $_POST['filename'];
		setfilename($path, $filename, $extension);

		$filename = "$path$filename$extension";
		$fullfile = 'uploads/' . strtolower($login) . "/$filename";

		if (is_dir('./' . $fullfile))
			{$alert = $filename . ' cannot be deleted (is a directory)!'; return;}

		if (!file_exists('./' . $fullfile))
			{$alert = $filename . ' cannot be deleted (does not exist)!'; return;}

		if (unlink('./' . $fullfile))
			$alert = $filename . ' was deleted!';
		else
			$alert = $filename . ' cannot be deleted!';
		}
	}

function recentfiles ()
	{
	global $login;

	// load file list
	if (file_exists('data/files.dat'))
		{
		$c = file_get_contents('data/files.dat');
		$files = explode(';', $c);
		}
	else
		$c = array();

	if ($login != '')
		{
		$displaytotal = 0;
		echo '<ul><li>Recent files:</li>';
		for ($i = count($files) - 1; $displaytotal < 8 && $i >= 0; $i --)
			{
			$path = explode('/', $files[$i]);

			if ($path[1] == strtolower($login))
				{
				$displaytotal ++;
				$filename = $path[count($path) - 1];
				echo "<li><a href=\"" . $files[$i] . "\">$filename</a></li> ";
				}
			}
		if ($displaytotal == 0)
			echo '<li>None! :-(</li>';
		echo "</ul>";
		}
	}

function results ()
	{
	global $action, $alert;

	if ($action == 'showmessage' && isset($_GET['message']))
		$alert = $_GET['message'];

	if ($alert == '') return;

	echo '<div class="results">Results:<br>';
	echo $alert;
	echo "<br><br><a href=\"javascript:history.go(-1)\"><img src=\"img/back.png\" alt=\"Go Back (try again because of incorrect form data)\"" .
		"title=\"Go Back (try again because of incorrect form data)\"></a> ";
	echo "<a href=\"javascript:location.href = 'index.php?action=none'\"><img src=\"img/forward.png\" alt=\"Go Forward (close results dialog)\" title=\"Go Forward (close results dialog)\"></a> ";
	echo "<a href=\"javascript:location.reload(true)\"><img src=\"img/refresh.png\" alt=\"Refresh (try again because of network errors)\" title=\"Refresh (try again because of network errors)\"></a>";
	echo '<div id="bbcode" class="bbcode"></div>';
	echo '</div>';
	}

function refresh ()
	{
	global $refresh;

	if ($refresh != '')
		echo "<script>location.href = 'index.php?action=showmessage&message=$refresh';</script>";
	}

initialize(); // load member list, attempt login validation, etc.

switch ($action)
	{
	case 'register':
		register(); // register a member
		break;
	case 'login':
		login(); // log a member in or out (set cookie)
		break;
	case 'paste':
		paste(); // paste text
		break;
	case 'upload':
		upload(); // upload a file
		break;
	case 'manage':
		manage(); //manage (delete) a file
		break;
	}
?>

<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01//EN" "http://www.w3.org/TR/html4/strict.dtd">

<html>
<head>
	<title>FreeFile Hosting</title>
	<link href="new-style.css" rel="stylesheet" type="text/css">
	<meta http-equiv="Content-Type" content="text/html;charset=utf-8">
	<meta name="description" content="FreeFile offers file hosting! Upload your files! Ad-free and supports hotlinking!">
	<meta name="keywords" content="file host, freefile, freebasic, uploads, uploading, kristopherwindsor, mediafire, file-pasta">

	<script type="text/javascript">
		var islogged = <?php if ($login == "") echo "false"; else echo "true"; ?>;
		var xml_object = new Array(4);

		function initialize ()
			{
			var sp = <?php

			// if you requested the paste page, then load the home or upload page first, then load the paste page (see below)

			isset($_GET['showpage']) ? $sp = $_GET['showpage']: $sp = '';

			if ($sp != '' && $sp != 'paste' && $login != '')
				{
				switch ($sp)
					{
					case 'register': echo "'register'"; break;
					case 'login': echo "'login'"; break;
					case 'upload': echo "'upload'"; break;
					case 'manage': echo "'manage'"; break;
					case 'paste': echo "'paste'"; break;
					default: echo "'home'";
					}
				}
			else
				{
				if ($login == '')
					echo "'home'";
				else
					echo "'upload'";
				}
			?>;

			showfilecontainer('1');
			show(sp);

			<?php
			if (isset($_GET['showpage']))
				{
				if ($_GET['showpage'] == 'paste')
					echo "show('paste');";
				}
			?>

			document.getElementById('fbtop50').innerHTML =
				'<a href="http://www.fbtop50.com/"><img src="http://www.fbtop50.com/button.php?u=KristopherWindsor" alt="FreeBasic Top 50"><\/a>';
			}

		function changefilename (filenumber)
			{
			var file_element, filename_element, fn;

			file_element = document.getElementById('file' + filenumber);
			filename_element = document.getElementById('filename' + filenumber);

			fn = file_element.value.toLowerCase();

			filename_element.value = fn.substr(fn.lastIndexOf("\\") + 1, fn.length);
			checkfilename(filenumber);
			}

		function checkfilename (filenumber)
			{
			xml_object[filenumber] = null;

			if (window.XMLHttpRequest)
				xml_object[filenumber] = new XMLHttpRequest();
			else if (window.ActiveXObject)
				xml_object[filenumber] = new ActiveXObject("Microsoft.XMLHTTP");

			if (xml_object[filenumber] == null)
				return true;

			xml_object[filenumber].onreadystatechange = function () {checkfilename_report(filenumber);};
			xml_object[filenumber].open("GET",
				'uploads/<?php if (isset($login)) echo strtolower($login); ?>/' + document.getElementById('filename' + filenumber).value, true);
			xml_object[filenumber].send(null);
			}

		function checkfilename_report (filenumber)
			{
			var elem = document.getElementById('filecheck' + filenumber);

			if (xml_object[filenumber].readyState == 4)
				{
				if (xml_object[filenumber].status == 404)
					elem.innerHTML = '<span style="color: green">New file<\/span>';
				else if (xml_object[filenumber].status == 200)
					elem.innerHTML = '<span style="color: red">Already exists!<\/span>';
				else
					elem.innerHTML = '<span style="color: red">XHTTP error!<\/span>';
				}
			}

		function clearlogin ()
			{
			var name_element, password_element;

			name_element = document.getElementById('name');
			password_element = document.getElementById('password');

			name_element.value = '';
			password_element.value = '';
			}

		function show (content)
			{
			var content_home, content_register, content_login, content_upload, content_manage, content_paste;

			if (content == 'upload' && islogged == false)
				{
				alert("You cannot upload files because you are not logged in!");
				return;
				}

			if (content == 'manage' && islogged == false)
				{
				alert("You cannot manage files because you are not logged in!");
				return;
				}

			if (content == 'paste' && islogged == false)
				{
				alert("You cannot paste because you are not logged in!");
				return;
				}

			content_home = document.getElementById('content_home');
			content_register = document.getElementById('content_register');
			content_login = document.getElementById('content_login');
			content_upload = document.getElementById('content_upload');
			content_manage = document.getElementById('content_manage');
			content_paste = document.getElementById('content_paste');

			content_home.style.display = "none";
			content_register.style.display = "none";
			content_login.style.display = "none";
			content_upload.style.display = "none";
			content_manage.style.display = "none";
			content_paste.style.display = "none";

			switch (content)
				{
				case "home": content_home.style.display = "block"; break;
				case "register": content_register.style.display = "block"; break;
				case "login": content_login.style.display = "block"; break;
				case "upload": content_upload.style.display = "block"; break;
				case "manage": content_manage.style.display = "block"; break;
				case "paste": content_paste.style.display = "block"; break;
				}
			}

		function showbbcode (content)
			{
			document.getElementById('bbcode').innerHTML = content;
			}

		function showfilecontainer (filenumber)
			{
			document.getElementById('file_container' + filenumber).style.display = 'block';
			}
	</script>
</head>

<body onLoad="initialize();">
	<div class="container">
		<ul class="navigation">
			<li>Welcome, <a href="uploads/<?php
				if ($login != "")
					echo strtolower($login);
				echo '">';
				if ($login == "")
					echo 'Stranger';
				else
					echo $login;
				?></a>!</li>
			<li><a href="index.php?showpage=home" onClick="show('home'); return false">Home</a></li>
			<li><a href="index.php?showpage=register" onClick="show('register'); return false">Register</a></li>
			<li><a href="index.php?showpage=login" onClick="show('login'); return false">Login</a></li>
			<li><a href="index.php?showpage=upload" onClick="show('upload'); return false">Upload</a></li>
			<li><a href="index.php?showpage=paste" onClick="show('paste'); return false">Paste</a></li>
			<li><a href="index.php?showpage=manage" onClick="show('manage'); return false">Manage</a></li>
		</ul>

		<div class="content" id="content_home">
			<div class="legend">
				Welcome to FreeFile, the host for the files!
				We offer cost-free and ad-free file hosting for files up to <?php echo ini_get('upload_max_filesize'); ?>!
				Allows unlimited bandwidth and hotlinking!
			</div>
			<div class="legend">
				FreeFile was made to murder Mediafire.
				If you need help or want to see the source code, you can <a href="mailto:kristopherwindsor@gmail.com">email</a> the admin.
				&copy; 2008 Innova and Kristopher Windsor
			</div>
			<div class="legend">
				<a href="http://paste.kristopherw.us/"><img src="img/kpaste-small.png" alt="KPaste!"></a>
				<a href="http://freefile.kristopherw.us/"><img src="img/banner.png" alt="FreeFile"></a>
				<div class="fbtop50" id="fbtop50"></div>
			</div>
		</div>

		<div class="content" id="content_register">
			<div class="legend">
				You can register instantly, for free.
				Only letters, numbers, hyphens, and underscores are allowed for the username and password.
				You can register multiple accounts.
			</div>
			<fieldset>
				<legend>Register an account</legend>
				<form action="index.php?action=register" method="post"><div class="formcontent">
					Name<br>
					<input type="text" name="name"><br>
					Password<br>
					<input type="password" name="password"><br>
					Spam check<br>
					<select name="spamcheck">
						<option>Free Basic is bad!</option>
						<option>Free Basic is great!</option>
						<option>I'm a spam bot!</option>
					</select><br>
					<br>
					<input type="submit" value="Register">
				</div></form>
			</fieldset>
		</div>

		<div class="content" id="content_login">
			<div class="legend">
				You can log in after you have registered.
				Leave the form blank to log out.
				If you forgot your member name, check the member list at the <a href="uploads/">Uploads Page</a>.
			</div>
			<fieldset>
				<legend>Log into an account</legend>
				<form action="index.php?action=login" method="post"><div class="formcontent">
					Name<br>
					<input type="text" id="name" name="name"><br>
					Password<br>
					<input type="password" id="password" name="password"><br>
					<br>
					<input type="submit" value="Login">
					<input type="submit" value="Logout" onClick="clearlogin()">
				</div></form>
			</fieldset>
		</div>

		<div class="content" id="content_upload">
			<div class="legend">
				You can upload unlimited files, up to <?php echo ini_get('upload_max_filesize'); ?> in size.
				Upload avatar.jpg to be listed at the <a href="uploads/">Uploads Page</a>!
				Keep it clean!
			</div>
			<fieldset>
				<legend>Upload files</legend>
				<form action="index.php?action=upload" method="post" enctype="multipart/form-data"><div class="formcontent">
					<input type="hidden" name="MAX_FILE_SIZE" value="<?php echo (ini_get('upload_max_filesize') * 1024 * 1024); ?>">

					<div class="filecontainer" id="file_container1">
						File #1<br>
						<input type="file" id="file1" name="file1" onChange="changefilename('1'); showfilecontainer('2');"><br>
						<input type="text" id="filename1" name="filename1" onChange="checkfilename('1')"> <div class="filecheck" id="filecheck1"></div><br>
					</div>

					<div class="filecontainer" id="file_container2">
						File #2<br>
						<input type="file" id="file2" name="file2" onChange="changefilename('2'); showfilecontainer('3')"><br>
						<input type="text" id="filename2" name="filename2" onChange="checkfilename('2')"> <div class="filecheck" id="filecheck2"></div><br>
					</div>

					<div class="filecontainer" id="file_container3">
						File #3<br>
						<input type="file" id="file3" name="file3" onChange="changefilename('3')"><br>
						<input type="text" id="filename3" name="filename3" onChange="checkfilename('3')"> <div class="filecheck" id="filecheck3"></div><br>
					</div>

					<br>
					Allow uploads to overwrite existing files?
					<input type="checkbox" name="overwrite"><br>
					<br>
					<input type="submit" value="Upload">
				</div></form>
			</fieldset>

			<?php results(); ?>

		</div>

		<div class="content" id="content_manage">
			<div class="legend">
				You can delete any files you have uploaded.
			</div>
			<fieldset>
				<legend>Delete a file</legend>
				<form action="index.php?action=manage" method="post" enctype="multipart/form-data"><div class="formcontent">
					<?php listfiles(); ?>
				</div></form>
			</fieldset>
		</div>

		<div class="content" id="content_paste">
			<div class="legend">
				Welcome to KPaste! Download the tool <a href="kpaste.exe">here</a> for one-click pasting!
			</div>
			<fieldset>
				<legend>KPaste</legend>
				<form action="index.php?action=paste" method="post" enctype="multipart/form-data"><div class="formcontent">
					<input type="text" name="pastename" value="paste/<?php echo time(); ?>"><br>
					<textarea name="paste" rows="8" cols="32"></textarea><br>
					<br>
					Allow paste to overwrite existing pastes?
					<input type="checkbox" name="overwrite"><br>
					<br>
					<input type="submit" value="Paste">
				</div></form>
			</fieldset>
		</div>
	</div>

	<div class="recentfiles">
		<?php recentfiles(); ?>
	</div>

	<?php refresh(); ?>
</body>
</html>