[svn r17801] more ajaxfilemanager functionality enabled in my profile and edit portal home page

main/inc/lib/fckeditor/editor/plugins/ajaxfilemanager/ajax_create_folder.php

@@ -5,17 +5,21 @@
 	 * @link www.phpletter.com
 	 * @since 22/May/2007
 	 *
+	 * Modify for Dokeos
+	 * @author Juan Carlos Raña
+	 * @since 18/January/2009
 	 */
 
 	require_once(dirname(__FILE__) . DIRECTORY_SEPARATOR . "inc" . DIRECTORY_SEPARATOR . "config.php");	
-	@ob_start();
-	displayArray($_POST);
-	writeInfo(@ob_get_clean());	
+	
 	echo "{";
 	$error = "";
 	$info = "";	
 /*	$_POST['new_folder'] = substr(md5(time()), 1, 5);
 	$_POST['currentFolderPath'] = "../../uploaded/";*/
+	$_POST['new_folder']=htmlentities($_POST['new_folder'],ENT_QUOTES);//Dokeos improve security 
+	$_POST['currentFolderPath']=htmlentities($_POST['currentFolderPath'],ENT_QUOTES);//Dokeos improve security 
+	
 	if(CONFIG_SYS_VIEW_ONLY || !CONFIG_OPTIONS_NEWFOLDER)
 	{
 		$error = SYS_DISABLED;

main/inc/lib/fckeditor/editor/plugins/ajaxfilemanager/ajax_image_editor.php

@@ -11,7 +11,7 @@
 	{
 		die(SYS_DISABLED);
 	}
-		$session->gc();
+		
 		$_GET['path'] = empty($_GET['path'])?CONFIG_SYS_ROOT_PATH . "ajax_image_editor_demo.jpg":$_GET['path'];
 		if(!empty($_GET['path']) && file_exists($_GET['path']) && is_file($_GET['path']) && isUnderRoot($_GET['path']))
 		{
@@ -56,10 +56,6 @@
 <script type="text/javascript" src="jscripts/ajaximageeditor.js"></script>
 
 
-
-
-
-
 <script type="text/javascript">
 	var imageHistory = false;
 	var currentFolder =  '<?php echo removeTrailingSlash(backslashToSlash(dirname($path))); ?>';

main/inc/lib/fckeditor/editor/plugins/ajaxfilemanager/inc/config.base.php

@@ -39,28 +39,40 @@
 	
 	//User Permissions
 	//Hack by Juan Carlos Raña Trabado
-	
-	if(api_is_allowed_to_edit())
-	{	
-	//api_is_allowed_to_edit() from Dokeos
-		define('CONFIG_OPTIONS_DELETE', false);
-		define('CONFIG_OPTIONS_CUT', false);
-		define('CONFIG_OPTIONS_COPY', false);
-		define('CONFIG_OPTIONS_NEWFOLDER', false);
-		define('CONFIG_OPTIONS_RENAME', false);
+	if(empty($_course['path']))
+	{
+		define('CONFIG_OPTIONS_DELETE', true);
+		define('CONFIG_OPTIONS_CUT', true);
+		define('CONFIG_OPTIONS_COPY', true);
+		define('CONFIG_OPTIONS_NEWFOLDER', true);
+		define('CONFIG_OPTIONS_RENAME', true);
 		define('CONFIG_OPTIONS_UPLOAD', true); //
-		define('CONFIG_OPTIONS_EDITABLE', false); //disable image editor and text editor
-
+		define('CONFIG_OPTIONS_EDITABLE', false); //disable image editor and text editor	
 	}
 	else
-	{		
-		define('CONFIG_OPTIONS_DELETE', false);
-		define('CONFIG_OPTIONS_CUT', false);
-		define('CONFIG_OPTIONS_COPY', false);
-		define('CONFIG_OPTIONS_NEWFOLDER', false);
-		define('CONFIG_OPTIONS_RENAME', false);
-		define('CONFIG_OPTIONS_UPLOAD', true); //
-		define('CONFIG_OPTIONS_EDITABLE', false); //disable image editor and text editor
+	{
+		if(api_is_allowed_to_edit())
+		{	
+		//api_is_allowed_to_edit() from Dokeos
+			define('CONFIG_OPTIONS_DELETE', false);
+			define('CONFIG_OPTIONS_CUT', false);
+			define('CONFIG_OPTIONS_COPY', false);
+			define('CONFIG_OPTIONS_NEWFOLDER', false);
+			define('CONFIG_OPTIONS_RENAME', false);
+			define('CONFIG_OPTIONS_UPLOAD', true); //
+			define('CONFIG_OPTIONS_EDITABLE', false); //disable image editor and text editor
+	
+		}
+		else
+		{		
+			define('CONFIG_OPTIONS_DELETE', false);
+			define('CONFIG_OPTIONS_CUT', false);
+			define('CONFIG_OPTIONS_COPY', false);
+			define('CONFIG_OPTIONS_NEWFOLDER', false);
+			define('CONFIG_OPTIONS_RENAME', false);
+			define('CONFIG_OPTIONS_UPLOAD', true); //
+			define('CONFIG_OPTIONS_EDITABLE', false); //disable image editor and text editor
+		}
 	}
 		
 		

main/inc/lib/fckeditor/editor/plugins/ajaxfilemanager/langs/en.php

@@ -128,7 +128,7 @@
 	define('SEARCH_TYPE_UNKNOWN', 'Unknown');
 	define('SEARCH_TYPE_XML', 'XML');
 	define('SEARCH_ALL_FILE_TYPES', 'All File Types');
-	define('LBL_SEARCH_RECURSIVELY', 'Search Recursively:');
+	define('LBL_SEARCH_RECURSIVELY', 'Search all:');
 	define('LBL_RECURSIVELY_YES', 'Yes');
 	define('LBL_RECURSIVELY_NO', 'No');
 	define('BTN_SEARCH', 'Search Now');