|
+-----------------------------------------------------------------------+
$Id: upload.inc 1434 2008-05-27 14:58:04Z thomasb $
*/
if (!$_SESSION['compose']) {
die("Invalid session var!");
}
// use common temp dir for file uploads
$temp_dir = unslashify($CONFIG['temp_dir']);
if (!is_array($_SESSION['compose']['attachments']))
$_SESSION['compose']['attachments'] = array();
// clear all stored output properties (like scripts and env vars)
$OUTPUT->reset();
if (is_array($_FILES['_attachments']['tmp_name']))
{
foreach ($_FILES['_attachments']['tmp_name'] as $i => $filepath)
{
$tmpfname = tempnam($temp_dir, 'rcmAttmnt');
if (move_uploaded_file($filepath, $tmpfname))
{
$id = count($_SESSION['compose']['attachments']);
$_SESSION['compose']['attachments'][] = array('name' => $_FILES['_attachments']['name'][$i],
'mimetype' => $_FILES['_attachments']['type'][$i],
'path' => $tmpfname);
if (is_file($CONFIG['skin_path'] . '/images/icons/remove-attachment.png'))
$button = sprintf(
'
',
$CONFIG['skin_path'],
Q(rcube_label('delete')));
else
$button = Q(rcube_label('delete'));
$content = sprintf(
'%s%s',
JS_OBJECT_NAME,
$id,
Q(rcube_label('delete')),
$button,
Q($_FILES['_attachments']['name'][$i]));
$OUTPUT->command('add2attachment_list', "rcmfile$id", $content);
}
else // upload failed
{
$err = $_FILES['_attachments']['error'][$i];
if ($err == UPLOAD_ERR_INI_SIZE || $err == UPLOAD_ERR_FORM_SIZE)
$msg = rcube_label(array('name' => 'filesizeerror', 'vars' => array('size' => show_bytes(parse_bytes(ini_get('upload_max_filesize'))))));
else
$msg = rcube_label('fileuploaderror');
$OUTPUT->command('display_message', $msg, 'error');
}
}
}
else if ($_SERVER['REQUEST_METHOD'] == 'POST')
{
$OUTPUT->command('display_message', rcube_label('fileuploaderror'), 'error');
}
// send html page with JS calls as response
$OUTPUT->command('show_attachment_form', false);
$OUTPUT->command('auto_save_start', false);
$OUTPUT->send('iframe');
?>