www.akwariom.com - UnknownSec 403

upload mass deface mass delete console info server
name : model.php
 <?php
/**
 * Class FilemanagerModel
 */
class FilemanagerModel {

	private $controller;

	public function __construct($controller) {
		$this->controller = $controller;
	}

	public function get_path_components( $dir = '' ) {
		$dir_names = explode('/', $dir);
		$path = '';

		$components = array();
		$component = array();

		$component['name'] = BWG()->upload_dir;
		$component['path'] = $path;
		$components[] = $component;

		for ( $i = 0; $i < count($dir_names); $i++ ) {
			$dir_name = $dir_names[$i];
			if ( $dir_name == '' ) {
				continue;
			}
			$path .= ( ($path == '') ? $dir_name : '/' . $dir_name );
			$component = array();
			$component['name'] = $dir_name;
			$component['path'] = $path;
			$components[] = $component;
		}
		return $components;
	}

  /**
   * Get file lists.
   *
   * @param array $params
   * @return array
   */
	public function get_file_lists( $params = array() ) {
		global $wpdb;
		$results = array();
		$results['num_rows'] = 0;
		$results['files'] = array();
		$dir = $params['dir'];
		$orderby = $params['orderby'];
		$order = $params['order'];
    if ( $orderby != 'size' && $orderby != 'name' ) {
      $orderby = 'date_modified';
    }
    if ( $order != 'asc' ) {
      $order = 'desc';
    }
		$search = $params['search'];
		$page_num = $params['page_num'];
		$page_per = $params['page_per'];

		$query  = ' SELECT * FROM `' . $wpdb->prefix . 'bwg_file_paths`';
		$query .= ' WHERE `path` = "' . $dir . '"';
		if ( $search ) {
			$query .= ' AND ((filename LIKE "%' . $search . '%") OR (alt LIKE "%' . $search . '%")) ';
		}
		if ( $orderby == 'size') {
			$orderby = 'CAST('. $orderby .' AS unsigned)';
		}
		$query .= ' ORDER BY `is_dir` DESC, '. $orderby . ' ' . $order;
		// Get total num rows.
		$results['page_per'] = $page_per;
		$results['num_rows'] = $wpdb->get_var( str_replace('SELECT *', 'SELECT COUNT(*)', $query) );
		$query .= ' LIMIT ' . ($page_num * $page_per) . ',' . $page_per;
		$items = $wpdb->get_results($query, 'ARRAY_A');
		if ( empty($items) && empty($search) ) {
			$params['dir'] = BWG()->upload_dir . $dir;
			$params['path'] = $dir;
			$this->files_parsing_db( $params );
			$items = $wpdb->get_results($query, 'ARRAY_A');
			$results['num_rows'] = $wpdb->get_var( str_replace('SELECT *', 'SELECT COUNT(*)', $query) );
		}
		if ( !empty($items) ) {
		  foreach( $items as $item ) {
			$thumb = BWG()->plugin_url . $item['thumb'];
			if ( $item['is_dir'] == 0 ) {
			  $thumb = $this->controller->get_uploads_url() .''. $item['path'] .''. $item['thumb'];
			}
			$item['thumb'] = $thumb;
			$results['files'][] = $item;
		  }
		}
		return $results;
	}

  /**
   * Is img.
   * @param $file_type
   *
   * @return bool
   */
	private function is_img($file_type) {
		switch ($file_type) {
			case 'jpg':
			case 'jpeg':
			case 'png':
			case 'bmp':
			case 'gif':
				return true;
			break;
		}
		return false;
	}

  /**
   * Get dir contents.
   *
   * @param        $dir
   * @param string $filter
   * @param array  $results
   *
   * @return array
   */
	function get_dir_contents( $dir, $filter = '', &$results = array() ) {
		$files = scandir($dir);
		if ( !empty($files) ) {
			foreach ( $files as $key => $value ) {
				if ( in_array($value, array('.','..','thumb','.original') ) ) continue;
				$path = realpath($dir.DIRECTORY_SEPARATOR.$value);
				if ( !is_dir($path) ) {
					if ( empty($filter) || preg_match($filter, $path) ) {
						$results[] = $path;
					}
				} else {
					$results[] = $path;
					// is recursive
					// $this->get_dir_contents($path, $filter, $results);
				}
			}
		}
		return $results;
	}

  /**
   * Get all files.
   *
   * @param array $params
   *
   * @return array
   */
	function get_all_files( $params = array() ) {
		global $wpdb;
		$dir = $params['dir'];
		$search = $params['search'];
		$orderby = $params['orderby'];
		$order = $params['order'];
    if ( $orderby != 'size' && $orderby != 'name' ) {
      $orderby = 'date_modified';
    }
    if ( $order != 'asc' ) {
      $order = 'desc';
    }

		$query  = ' SELECT * FROM `' . $wpdb->prefix . 'bwg_file_paths`';
		$query .= ' WHERE `path` = "' . $dir . '"';
		if ( $search ) {
			$query .= ' AND ((filename LIKE "%' . $search . '%") OR (alt LIKE "%' . $search . '%")) ';
		}
		$query .= ' ORDER BY `is_dir` DESC, `' . $orderby . '` ' . $order;
		$items = $wpdb->get_results($query, 'ARRAY_A');
		$results = array();
		if ( !empty($items) ) {
		  foreach( $items as $item ) {
			$thumb = BWG()->plugin_url . $item['thumb'];
			if ( $item['is_dir'] == 0 ) {
			  $thumb = $this->controller->get_uploads_url() .''. $item['path'] .''. $item['thumb'];
			}
			$item['thumb'] = $thumb;
			$results[] = $item;
		  }
		}
		return $results;
	}

  /**
   * Files parsing db.
   *
   * @param array $params
   */
	function files_parsing_db( $params = array() ) {
		global $wpdb;
		$dir = $params['dir'];
		$path = $params['path'];
		$valid_types = $params['valid_types'];
		$truncate = !empty($params['truncate']) ? true : false;

		$dir = str_replace('/', DIRECTORY_SEPARATOR , $dir);
		$data = array();
		$dirs = array();
		$files = array();
		$items = $this->get_dir_contents($dir);
		if ( !empty($items) ) {
			foreach ( $items as $item ) {
				$value = str_replace($dir, '', $item);
				$value = explode(DIRECTORY_SEPARATOR, $value);
				$name = end($value);
				/*
				$paths = $value;
				array_pop($paths);
				$implode_path = implode($paths,'/');
				$path = !empty($implode_path) ? '/'. $implode_path . '/' : '/';
				*/
				if ( is_dir($item) == TRUE ) {
					$file = array();
					$file['is_dir'] = 1;
					$file['path'] = $path;
					$file['name'] = $name;
					$file['filename'] = str_replace("_", " ", $name);
					$file['alt'] = str_replace("_", " ", $name);
					$file['thumb'] = '/filemanager/images/dir.png';
					$dirs[] = $file;
				}
				else {
					$file = array();
					$file['is_dir'] = 0;
					$file['path'] = $path;
					$file['name'] = $name;
					$filename = substr($name, 0, strrpos($name, '.'));
					$file['filename'] = str_replace("_", " ", $filename);
					$file_extension = explode('.', $name);
					$file['type'] = strtolower(end($file_extension));
					$file['thumb'] = 'thumb/' . $name;
					if (($valid_types[0] != '*') && (in_array($file['type'], $valid_types) == FALSE)) {
					  continue;
					}
					$file_size_kb = (int)(filesize($item) / 1024);
					$file['size'] = $file_size_kb . ' KB';
					$image_info = getimagesize(htmlspecialchars_decode($item, ENT_COMPAT | ENT_QUOTES));
					$file['resolution'] = $this->is_img($file['type']) ? $image_info[0]  . ' x ' . $image_info[1] . ' px' : '';
					$file['resolution_thumb'] = WDWLibrary::get_thumb_size($file['thumb'] );
					$exif = WDWLibrary::read_image_metadata( $dir . '/.original/' . $name );
					$file['alt'] = BWG()->options->read_metadata && $exif['title'] ? $exif['title'] : str_replace("_", " ", $filename);
					$file['credit'] = !empty($exif['credit']) ? $exif['credit'] : '';
					$file['aperture'] = !empty($exif['aperture']) ? $exif['aperture'] : '';
					$file['camera'] = !empty($exif['camera']) ? $exif['camera'] : '';
					$file['caption'] = !empty($exif['caption']) ? $exif['caption'] : '';
					$file['iso'] = !empty($exif['iso']) ? $exif['iso'] : '';
					$file['orientation'] = !empty($exif['orientation']) ? $exif['orientation'] : '';
					$file['copyright'] = !empty($exif['copyright']) ? $exif['copyright']: '';
					$file['tags'] = !empty($exif['tags']) ? $exif['tags'] : '';
					$file['date_modified'] = date("Y-m-d H:i:s", filemtime($item));
					$files[] = $file;
				}
			}
			$data = array_merge($dirs,$files);
			$insert = 0;
			$tbl = $wpdb->prefix . 'bwg_file_paths';
			if( !empty($params['refresh']) ) {
				$wpdb->delete($tbl, array('path' => $path ) );
			}
			foreach( $data as $val ) {
				$insert = $wpdb->insert($tbl, $val );
			}
			return $insert;
		}
	}

  /**
   * Get from session.
   * @param $key
   * @param $default
   *
   * @return mixed
   */
	public function get_from_session( $key, $default ) {
		if (isset($_REQUEST[$key])) {
			$_REQUEST[$key] = stripslashes($_REQUEST[$key]);
		}
		else {
			$_REQUEST[$key] = stripslashes($default);
		}

		return esc_html(stripslashes($_REQUEST[$key]));
	}
}
UnknownSec Shell
