Uploaded Files:
\n\n\n`;
foreach my $file (@files)
{
my $displayname = $file;
if($displayname =~ /(\d{15,})(\..{1,6})$/)
{
my ($to_replace,$end) = ($1,$2);
my ($replacement) = ($to_replace =~ /^(\d{12})/);
$displayname =~ s/$to_replace$end/$replacement...$end/;
}
print qq`$displayname`;
print qq` [delete]` if admin_is_logged_in();
print qq`
\n`; } print qq`\n
\n\n`;
print_footer_links('back');
finish_html_output('power');
}
sub start_html_output
{
my $title = shift;
my $css = shift;
my $js = shift;
$css = get_css() if $css;
$js = get_js() if $js;
unless($output_started)
{
print "Cache-Control: no-store, no-cache\n";
print "Content-type: text/html\n\n";
$output_started = 1;
}
print  qq``
. qq`\n`
. qq`\n`
. qq`\n`
. qq`\n`
    . qq`\n`
. qq`\n\n`; } print qq`\n
`
. qq`\n`;
}
sub finish_html_output
{
my $power = shift;
print_powered_by() if $power;
print  qq`\n
\n`;
if(($CGI::VERSION < 3.03) Â && Â ($PREF{ignore_version_error} !~ /yes/i))
{
print  qq`\n`
. qq`The version of the CGI.pm Perl module on your server is $CGI::VERSION.`
. qq`
The progress bar probably won't work unless you upgrade to at least version 3.03.` . qq`
To disable this message, add \$PREF{ignore_version_error}='yes'; near the top of this script.` . qq`
`
. qq`\n`;
}
print  qq`\n\n`;
}
sub print_footer_links
{
my @links = ();
while(my $i = shift)
{
 if($i =~ /back/) { push @links, qq`Uploader`; }
elsif($i =~ /home/) { push @links, qq`Home`; }
elsif($i =~ /enc/) { push @links, get_powered_by(); }
elsif($i =~ /list/) { push (@links, qq`List Files`) if $PREF{show_link_to_uploads} =~ /yes/i; }
elsif($i =~ /logout/) { push (@links, qq`Logout`) if user_is_logged_in(); }
elsif($i =~ /login/) { push (@links, qq`Login`) if (login_features_enabled() && !user_is_logged_in()); }
}
print  qq`\n`;
}
sub print_powered_by
{
print  qq`The progress bar probably won't work unless you upgrade to at least version 3.03.` . qq`
To disable this message, add \$PREF{ignore_version_error}='yes'; near the top of this script.` . qq`
\n`;
print get_powered_by();
print  qq`
\n`;
}
sub get_powered_by
{
return qq`Powered by Encodable`;
}
sub make_password_hash
{
if($ENV{REQUEST_METHOD} =~ /post/i)
{
use Digest::MD5 'md5_hex';
use CGI ':param';
my $hashed_password = md5_hex(param('password'));
start_html_output('Here is your hashed password...', 'css', 'js');
print  qq`The hashed version of the password you just entered is:
$hashed_password
`
. qq`\n`;
print_footer_links('back');
finish_html_output('power');
}
else
{
start_html_output('Enter your new password', 'css', 'js');
print  qq``
. qq`\n`;
print_footer_links('back');
finish_html_output('power');
}
}
sub user_is_logged_in
{
my $hashed_password_in_cookie = get_cookie('enc-uploader-password');
return 0 unless $hashed_password_in_cookie;
return( Â $hashed_password_in_cookie eq $PREF{admin_password_hash} Â || Â $hashed_password_in_cookie eq $PREF{member_password_hash} Â );
}
sub admin_is_logged_in
{
my $hashed_password_in_cookie = get_cookie('enc-uploader-password');
return 0 unless $hashed_password_in_cookie;
return($hashed_password_in_cookie eq $PREF{admin_password_hash});
}
sub do_authentication
{
return 1 if !login_features_enabled();
my $target = shift;
my $mode = shift;
my $hashed_password_in_cookie = get_cookie('enc-uploader-password');
if($PREF{"must_be_admin_to_$target"} =~ /yes/i)
{
if(!$hashed_password_in_cookie  ||  ($hashed_password_in_cookie ne $PREF{admin_password_hash}))
{
if($mode eq 'redirect')
{
print_needlogin_error($target);
}
else
{
return 0;
}
}
else
{
return 1;
}
}
elsif($PREF{"must_be_member_to_$target"} =~ /yes/i)
{
# the admin is considered a member too, i.e. if you have the
# admin password, then you meet the requirements for being a
# member too.
if( !$hashed_password_in_cookie
||
(
$hashed_password_in_cookie ne $PREF{member_password_hash}
&&
$hashed_password_in_cookie ne $PREF{admin_password_hash}
)
)
{
if($mode eq 'redirect')
{
print_needlogin_error($target);
}
else
{
return 0;
}
}
else
{
return 1;
}
}
}
sub print_needlogin_error
{
my $target = shift;
start_html_output('Error: Authentication Required', 'css', 'js');
print  qq`$hashed_password
Error: Authentication Required
` . qq`\nYou must log in first.
`
. qq`\n`;
finish_html_output('power');
exit;
}
sub do_login
{
my $target = shift;
if($ENV{REQUEST_METHOD} =~ /post/i)
{
use Digest::MD5 'md5_hex';
use CGI ':param';
if(param('password') !~ /\S/) # don't allow blank passwords.
{
start_html_output&
('Error', 'css');
print qq`You must enter the password.
`;
finish_html_output
('power');
exit;
}
my $hashed_password = md5_hex(param('password'));
my $expiry = ();
if(param('persist') eq 'on')
{
$expiry = "+$PREF{num_days_login_lasts}d";
}
if($hashed_password eq $PREF{admin_password_hash} Â || Â $hashed_password eq $PREF{member_password_hash})
{
set_cookie('enc-uploader-password', $hashed_password, $expiry);
if($target eq 'list_files')
{
print "Location: http://$ENV{HTTP_HOST}$PREF{here}?listfiles\n\n";
}
else # default to the front page (the upload page).
{
print "Location: http://$ENV{HTTP_HOST}$PREF{here}\n\n";
}
}
else
{
start_html_output&
('Invalid Login', 'css');
print &
nbsp; Â qq`The password you entered is incorrect.
Go back and try again.
`
. qq`\n`;
finish_html_output
('power');
}
}
else
{
my $scripttarget = $target ? "action=login&target=$target" : 'login';
start_html_output('Enter the password', 'css');
print  qq``
. qq`\n`;
finish_html_output('power');
}
}
sub get_cookies()
{
use CGI ':standard';
use CGI::Cookie;
my %cookies = fetch CGI::Cookie;
return %cookies;
}
sub get_cookie($)
{
my $which = shift;
my %jar = get_cookies();
my $value;
if(exists $jar{$which})
{
$value = $jar{$which}->value;
}
return $value;
}
sub set_cookie($$$)
{
my $name = shift;
my $value = shift;
my $expiry = shift;
my $cookie;
if($expiry eq "") # cookie expires at end of this session.
{
$cookie = new CGI::Cookie( -name   => $name,
-value  => $value,
-path   => '/');
}
else
{
$cookie = new CGI::Cookie( -name   => $name,
-value  => $value,
-expires => $expiry,
-path   => '/');
}
print "Set-Cookie: $cookie\n";
}
sub login_features_enabled
{
if(
(
$PREF{member_password_hash} =~ /\S/
||
$PREF{admin_password_hash} =~ /\S/
)
&&
(
$PREF{must_be_member_to_upload} =~ /yes/i
||
$PREF{must_be_admin_to_upload} =~ /yes/i
||
$PREF{must_be_member_to_list_files} =~ /yes/i
||
$PREF{must_be_admin_to_list_files} =~ /yes/i
)
)
{
return 1;
}
}
sub user_has_list_rights
{
return do_authentication('list_files');
}
sub do_logout()
{
set_cookie('enc-uploader-password', 'blank', '-1d');
# Remove the "logout" from the referrer, otherwise we'll get stuck
# in an infinite logout loop with this Location: call.
$ENV{HTTP_REFERER} =~ s/\?logout$//;
my $go = $ENV{HTTP_REFERER} ? $ENV{HTTP_REFERER} : "http://$ENV{HTTP_HOST}$PREF{here}";
print "Location: $go\n\n";
}
sub delete_file
{
my $file = shift;
my $really = shift;
unless(admin_is_logged_in())
{
start_html_output('Error: Authentication Required', 'css', 'js');
print  qq`Go back and try again.
Error: Authentication Required
` . qq`\nYou must log in as admin to do that.
`
. qq`\n`;
print_footer_links('back','list');
finish_html_output('power');
}
my $displayname = $file;
$displayname =~ s/%([A-Fa-f\d]{2})/chr hex $1/eg;
if($displayname =~ /(\d{15,})(\..{1,6})$/)
{
my ($to_replace,$end) = ($1,$2);
my ($replacement) = ($to_replace =~ /^(\d{12})/);
$displayname =~ s/$to_replace$end/$replacement...$end/;
}
if($really)
{
my $diskfile = $file;
$diskfile =~ s/%([A-Fa-f\d]{2})/chr hex $1/eg;
$diskfile = "$PREF{DOCROOT}$PREF{uploaded_files_dir}/$diskfile";
unlink($diskfile) or die "$0: couldn't delete \"$diskfile\": $!\n";
start_html_output('File deleted', 'css');
print  qq`File deleted successfully:
` . qq`\n$displayname
`
. qq`\n`;
print_footer_links('back','list');
finish_html_output('power');
}
else
{
start_html_output('Confirm deletion', 'css');
print  qq`