index.php

<?php

require './czkdir/inc.php';

$c = isset($_GET['p'])?trim($_GET['p']):'home';

$x = new DirList();

switch($c){
    case 'hash':
        if(!checkRefererHost())exit('{"code":403}');
        if($conf['file_hash'] != '1')echo_json(['code'=>-1,'msg'=>'没有开启文件hash功能']);
        $path = isset($_POST['path'])?trim($_POST['path']):'';
        try{
            $r = $x->get_file_hash($path);
        }catch(Exception $e){
            $r = ['code'=>-1, 'msg'=>$e->getMessage()];
        }
        echo_json($r);
        break;
    case 'video':
    case 'audio':
    case 'markdown':
    case 'text':
        if(!checkRefererHost())exit('Access Denied');
        $path = isset($_GET['path'])?trim($_GET['path']):'';
        try{
            $path = './'.$x->set_dir_path($path, true);
        }catch(Exception $e){
            $errmsg = $e->getMessage();
            sysmsg($errmsg);
        }
        $name = basename($path);
        $ext = $x->get_file_ext($path);
        $url = implode('/', array_map('rawurlencode', explode('/', $path)));
        include PAGE_ROOT.$c.'.php';
        break;
    case 'search':
        $s = isset($_GET['s'])?trim($_GET['s']):'';
        if($s == '') exit("<script language='javascript'>window.location.href='./';</script>");
        try{
            $list = $x->search_files($s);
            $r = ['list'=>$list];
        }catch(Exception $e){
            $errmsg = $e->getMessage();
        }
        $s = htmlspecialchars($s);
        include PAGE_ROOT.'home.php';
        break;
    case 'home':
        $dir = isset($_GET['dir'])?trim($_GET['dir']):'';
        try{
            $r = $x->list_dir($dir);
        }catch(Exception $e){
            $errmsg = $e->getMessage();
            $r = $x->list_dir();
        }
        if(!empty($r['passwd']) && isset($_POST['passwd'])){
            if($errmsg) echo_json(['code'=>-1, 'msg'=>$errmsg]);
            if(password_verify($_POST['passwd'], $r['passwd'])){
                setcookie('dir_passwd', md5($r['passwd']));
                echo_json(['code'=>0]);
            }else{
                echo_json(['code'=>-1, 'msg'=>'出错了，请检查目录密码重试']);
            }
        }
        include PAGE_ROOT.'home.php';
        break;
    case 'admin':
        if(!$islogin) exit("<script language='javascript'>window.location.href='./?p=login';</script>");
        include PAGE_ROOT.'admin.php';
        break;
    case 'upload':
        if(!$islogin) exit("<script language='javascript'>window.location.href='./?p=login';</script>");
        $path = isset($_GET['path'])?trim($_GET['path']):'';
        try{
            $path = $x->set_dir_path($path);
        }catch(Exception $e){
            sysmsg($e->getMessage());
        }
        include PAGE_ROOT.'upload.php';
        break;
    case 'filemgr':
        if(!$islogin) exit("<script language='javascript'>window.location.href='./?p=login';</script>");
        $path = isset($_POST['path'])?trim($_POST['path']):'';
        $do = isset($_POST['do'])?trim($_POST['do']):echo_json(['code'=>-1, 'msg'=>'param error']);
        try{
            $path = $x->set_dir_path($path);
        }catch(Exception $e){
            echo_json(['code'=>-1, 'msg'=>$e->getMessage()]);
        }
        $mgr = new FileMgr($path);
        if(!method_exists($mgr, $do))echo_json(['code'=>-1, 'msg'=>'action error']);
        try{
            $result = $mgr->$do();
            echo_json(['code'=>0, 'data'=>$result]);
        }catch(Exception $e){
            echo_json(['code'=>-1, 'msg'=>$e->getMessage()]);
        }
        break;
    case 'editor':
        if(!$islogin) exit("<script language='javascript'>window.location.href='./?p=login';</script>");
        $path = isset($_GET['path'])?trim($_GET['path']):'';
        try{
            $path = $x->set_dir_path($path, true);
        }catch(Exception $e){
            $errmsg = $e->getMessage();
            sysmsg($errmsg);
        }
        include PAGE_ROOT.'editor.php';
        break;
    case 'login':
        include PAGE_ROOT.'login.php';
        break;
    default:
        break;
}