Gecko [ www.foryou-vip.com ]

Name	Size	Permission	Date
dolistore	[ DIR ]	drwxr-xr-x	2025-11-25 12:58
menus	[ DIR ]	drwxr-xr-x	2025-11-25 13:10
system	[ DIR ]	drwxr-xr-x	2025-11-25 13:10
tools	[ DIR ]	drwxr-xr-x	2025-11-25 13:10
accountant.php	12.01 KB	-rw-r--r--	2025-11-25 13:10
agenda.php	6.71 KB	-rw-r--r--	2025-11-25 13:10
agenda_extrafields.php	4.01 KB	-rw-r--r--	2025-11-25 13:10
agenda_extsites.php	8.17 KB	-rw-r--r--	2025-11-25 13:10
agenda_other.php	13.6 KB	-rw-r--r--	2025-11-25 13:10
agenda_reminder.php	7.6 KB	-rw-r--r--	2025-11-25 13:10
agenda_xcal.php	8.41 KB	-rw-r--r--	2025-11-25 13:10
bank.php	15.95 KB	-rw-r--r--	2025-11-25 13:10
bank_extrafields.php	3.89 KB	-rw-r--r--	2025-11-25 13:10
barcode.php	12.23 KB	-rw-r--r--	2025-11-25 13:10
boxes.php	16.42 KB	-rw-r--r--	2025-11-25 13:10
chequereceipts.php	9.11 KB	-rw-r--r--	2025-11-25 13:10
clicktodial.php	4.94 KB	-rw-r--r--	2025-11-25 13:10
commande.php	22.87 KB	-rw-r--r--	2025-11-25 13:10
company.php	49.4 KB	-rw-r--r--	2025-11-25 13:10
compta.php	5.04 KB	-rw-r--r--	2025-11-25 13:10
confexped.php	4.42 KB	-rw-r--r--	2025-11-25 13:10
const.php	8.74 KB	-rw-r--r--	2025-11-25 13:10
contract.php	16.72 KB	-rw-r--r--	2025-11-25 13:10
dav.php	4.41 KB	-rw-r--r--	2025-11-25 13:10
defaultvalues.php	14.15 KB	-rw-r--r--	2025-11-25 13:10
delais.php	14.2 KB	-rw-r--r--	2025-11-25 13:10
dict.php	96.79 KB	-rw-r--r--	2025-11-25 13:10
ecm.php	2.94 KB	-rw-r--r--	2025-11-25 13:10
events.php	3.23 KB	-rw-r--r--	2025-11-25 13:10
expedition.php	17.26 KB	-rw-r--r--	2025-11-25 13:10
expedition_extrafields.php	4.07 KB	-rw-r--r--	2025-11-25 13:10
expeditiondet_extrafields.php	4.14 KB	-rw-r--r--	2025-11-25 13:10
expensereport.php	16.31 KB	-rw-r--r--	2025-11-25 13:10
expensereport_extrafields.php	4.01 KB	-rw-r--r--	2025-11-25 13:10
expensereport_ik.php	6.13 KB	-rw-r--r--	2025-11-25 13:10
expensereport_rules.php	10.98 KB	-rw-r--r--	2025-11-25 13:10
export.php	2.99 KB	-rw-r--r--	2025-11-25 13:10
external_rss.php	9.69 KB	-rw-r--r--	2025-11-25 13:10
facture.php	29.19 KB	-rw-r--r--	2025-11-25 13:10
fckeditor.php	7.59 KB	-rw-r--r--	2025-11-25 13:10
fichinter.php	21.12 KB	-rw-r--r--	2025-11-25 13:10
geoipmaxmind.php	4.41 KB	-rw-r--r--	2025-11-25 13:10
ihm.php	24.92 KB	-rw-r--r--	2025-11-25 13:10
index.php	4.67 KB	-rw-r--r--	2025-11-25 13:10
ldap.php	12.54 KB	-rw-r--r--	2025-11-25 13:10
ldap_contacts.php	14.88 KB	-rw-r--r--	2025-11-25 13:10
ldap_groups.php	9.08 KB	-rw-r--r--	2025-11-25 13:10
ldap_members.php	19.79 KB	-rw-r--r--	2025-11-25 13:10
ldap_members_types.php	8.71 KB	-rw-r--r--	2025-11-25 13:10
ldap_users.php	19.73 KB	-rw-r--r--	2025-11-25 13:10
limits.php	11.65 KB	-rw-r--r--	2025-11-25 13:10
livraison.php	15.89 KB	-rw-r--r--	2025-11-25 13:10
livraison_extrafields.php	4.07 KB	-rw-r--r--	2025-11-25 13:10
livraisondet_extrafields.php	4.14 KB	-rw-r--r--	2025-11-25 13:10
loan.php	3.22 KB	-rw-r--r--	2025-11-25 13:10
mailing.php	5.39 KB	-rw-r--r--	2025-11-25 13:10
mailman.php	7.63 KB	-rw-r--r--	2025-11-25 13:10
mails.php	37.08 KB	-rw-r--r--	2025-11-25 13:10
mails_emailing.php	25.19 KB	-rw-r--r--	2025-11-25 13:10
mails_senderprofile_list.php	19.76 KB	-rw-r--r--	2025-11-25 13:10
mails_templates.php	44.67 KB	-rw-r--r--	2025-11-25 13:10
menus.php	9.84 KB	-rw-r--r--	2025-11-25 13:10
modulehelp.php	18.65 KB	-rw-r--r--	2025-11-25 13:10
modules.php	43.45 KB	-rw-r--r--	2025-11-25 13:10
multicurrency.php	12.72 KB	-rw-r--r--	2025-11-25 13:10
notification.php	10.17 KB	-rw-r--r--	2025-11-25 13:10
oauth.php	4.73 KB	-rw-r--r--	2025-11-25 13:10
oauthlogintokens.php	13.28 KB	-rw-r--r--	2025-11-25 13:10
order_extrafields.php	3.95 KB	-rw-r--r--	2025-11-25 13:10
orderdet_extrafields.php	4.03 KB	-rw-r--r--	2025-11-25 13:10
payment.php	9.84 KB	-rw-r--r--	2025-11-25 13:10
pdf.php	24.66 KB	-rw-r--r--	2025-11-25 13:10
perms.php	6.56 KB	-rw-r--r--	2025-11-25 13:10
prelevement.php	17.78 KB	-rw-r--r--	2025-11-25 13:10
propal.php	21.95 KB	-rw-r--r--	2025-11-25 13:10
proxy.php	6.73 KB	-rw-r--r--	2025-11-25 13:10
receiptprinter.php	16.72 KB	-rw-r--r--	2025-11-25 13:10
resource.php	4.13 KB	-rw-r--r--	2025-11-25 13:10
resource_extrafields.php	3.92 KB	-rw-r--r--	2025-11-25 13:10
salaries.php	3.22 KB	-rw-r--r--	2025-11-25 13:10
security.php	15.43 KB	-rw-r--r--	2025-11-25 13:10
security_file.php	6.87 KB	-rw-r--r--	2025-11-25 13:10
security_other.php	6.07 KB	-rw-r--r--	2025-11-25 13:10
sms.php	11.25 KB	-rw-r--r--	2025-11-25 13:10
spip.php	4.72 KB	-rw-r--r--	2025-11-25 13:10
stock.php	23.42 KB	-rw-r--r--	2025-11-25 13:10
supplier_invoice.php	18.36 KB	-rw-r--r--	2025-11-25 13:10
supplier_order.php	20.44 KB	-rw-r--r--	2025-11-25 13:10
supplier_payment.php	16.34 KB	-rw-r--r--	2025-11-25 13:10
supplier_proposal.php	20.24 KB	-rw-r--r--	2025-11-25 13:10
supplierinvoice_extrafields.php	4.15 KB	-rw-r--r--	2025-11-25 13:10
supplierinvoicedet_extrafields.php	4.16 KB	-rw-r--r--	2025-11-25 13:10
supplierorder_extrafields.php	4.01 KB	-rw-r--r--	2025-11-25 13:10
supplierorderdet_extrafields.php	4.08 KB	-rw-r--r--	2025-11-25 13:10
syslog.php	10.08 KB	-rw-r--r--	2025-11-25 13:10
taxes.php	8.76 KB	-rw-r--r--	2025-11-25 13:10
ticket.php	25.76 KB	-rw-r--r--	2025-11-25 13:10
ticket_extrafields.php	3.75 KB	-rw-r--r--	2025-11-25 13:10
translation.php	22.54 KB	-rw-r--r--	2025-11-25 13:10
triggers.php	2.69 KB	-rw-r--r--	2025-11-25 13:10
user.php	11.37 KB	-rw-r--r--	2025-11-25 13:10
usergroup.php	10.09 KB	-rw-r--r--	2025-11-25 13:10
website.php	22.92 KB	-rw-r--r--	2025-11-25 13:10
website_options.php	4.64 KB	-rw-r--r--	2025-11-25 13:10
workflow.php	6.59 KB	-rw-r--r--	2025-11-25 13:10

Rename

<?php
/* Copyright (C) 2004-2017	Laurent Destailleur	<eldy@users.sourceforge.net>
 * Copyright (C) 2005-2017	Regis Houssin		<regis.houssin@capnetworks.com>
 * Copyright (C) 2013		Juanjo Menent		<jmenent@2byte.es>
 *
 * This program is free software; you can redistribute it and/or modify
 * it under the terms of the GNU General Public License as published by
 * the Free Software Foundation; either version 3 of the License, or
 * (at your option) any later version.
 *
 * This program is distributed in the hope that it will be useful,
 * but WITHOUT ANY WARRANTY; without even the implied warranty of
 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
 * GNU General Public License for more details.
 *
 * You should have received a copy of the GNU General Public License
 * along with this program. If not, see <http://www.gnu.org/licenses/>.
 */

/**
 *	    \file       htdocs/admin/security_file.php
 *      \ingroup    core
 *      \brief      Security options setup
 */

require '../main.inc.php';
require_once DOL_DOCUMENT_ROOT.'/core/lib/admin.lib.php';
require_once DOL_DOCUMENT_ROOT.'/core/lib/files.lib.php';
require_once DOL_DOCUMENT_ROOT.'/core/class/html.formfile.class.php';

// Load translation files required by the page
$langs->loadLangs(array('users', 'admin', 'other'));

if (! $user->admin)
	accessforbidden();

$action=GETPOST('action','alpha');

$upload_dir=$conf->admin->dir_temp;

/*
 * Actions
 */

if (GETPOST('sendit') && ! empty($conf->global->MAIN_UPLOAD_DOC))
{
    require_once DOL_DOCUMENT_ROOT.'/core/lib/files.lib.php';

dol_add_file_process($upload_dir, 0, 0, 'userfile');
}

if ($action == 'updateform')
{
	$antivircommand = GETPOST('MAIN_ANTIVIRUS_COMMAND','none');			// Use GETPOST none because we must accept ". Example c:\Progra~1\ClamWin\bin\clamscan.exe
	$antivirparam = GETPOST('MAIN_ANTIVIRUS_PARAM','none');				// Use GETPOST none because we must accept ". Example --database="C:\Program Files (x86)\ClamWin\lib"
	$antivircommand = dol_string_nospecial($antivircommand, '', array("|", ";", "<", ">", "&"));	// Sanitize command
	$antivirparam = dol_string_nospecial($antivirparam, '', array("|", ";", "<", ">", "&"));		// Sanitize params

$res3=dolibarr_set_const($db, 'MAIN_UPLOAD_DOC',GETPOST('MAIN_UPLOAD_DOC','alpha'),'chaine',0,'',$conf->entity);
	$res4=dolibarr_set_const($db, "MAIN_UMASK", GETPOST('MAIN_UMASK','alpha'),'chaine',0,'',$conf->entity);
	$res5=dolibarr_set_const($db, "MAIN_ANTIVIRUS_COMMAND", trim($antivircommand),'chaine',0,'',$conf->entity);
	$res6=dolibarr_set_const($db, "MAIN_ANTIVIRUS_PARAM", trim($antivirparam),'chaine',0,'',$conf->entity);
	if ($res3 && $res4 && $res5 && $res6) setEventMessages($langs->trans("RecordModifiedSuccessfully"), null, 'mesgs');
}

// Delete file
else if ($action == 'delete')
{
	$langs->load("other");
	$file = $conf->admin->dir_temp . '/' . GETPOST('urlfile','alpha');	// Do not use urldecode here ($_GET and $_REQUEST are already decoded by PHP).
	$ret=dol_delete_file($file);
	if ($ret) setEventMessages($langs->trans("FileWasRemoved", GETPOST('urlfile','alpha')), null, 'mesgs');
	else setEventMessages($langs->trans("ErrorFailToDeleteFile", GETPOST('urlfile','alpha')), null, 'errors');
	Header('Location: '.$_SERVER["PHP_SELF"]);
	exit;
}

/*
 * View
 */

$form = new Form($db);

$wikihelp='EN:Setup_Security|FR:Paramétrage_Sécurité|ES:Configuración_Seguridad';
llxHeader('',$langs->trans("Files"),$wikihelp);

print load_fiche_titre($langs->trans("SecuritySetup"),'','title_setup');

print $langs->trans("SecurityFilesDesc")."<br>\n";
print "<br>\n";

print '<form action="'.$_SERVER["PHP_SELF"].'" method="POST">';
print '<input type="hidden" name="token" value="'.$_SESSION['newtoken'].'">';
print '<input type="hidden" name="action" value="updateform">';

$head=security_prepare_head();

dol_fiche_head($head, 'file', $langs->trans("Security"), -1);

// Upload options
$var=false;

print '<div class="div-table-responsive-no-min">';
print '<table class="noborder" width="100%">';
print '<tr class="liste_titre">';
print '<td colspan="2">'.$langs->trans("Parameters").'</td>';
print '<td>'.$langs->trans("Value").'</td>';
print '</tr>';

print '<tr class="oddeven">';
print '<td colspan="2">'.$langs->trans("MaxSizeForUploadedFiles").'.';
$max=@ini_get('upload_max_filesize');
if ($max) print ' '.$langs->trans("MustBeLowerThanPHPLimit",$max*1024,$langs->trans("Kb")).'.';
else print ' '.$langs->trans("NoMaxSizeByPHPLimit").'.';
print '</td>';
print '<td class="nowrap">';
print '<input class="flat" name="MAIN_UPLOAD_DOC" type="text" size="6" value="'.htmlentities($conf->global->MAIN_UPLOAD_DOC).'"> '.$langs->trans("Kb");
print '</td>';
print '</tr>';

print '<tr class="oddeven">';
print '<td>'.$langs->trans("UMask").'</td><td align="right">';
print $form->textwithpicto('',$langs->trans("UMaskExplanation"));
print '</td>';
print '<td class="nowrap">';
print '<input class="flat" name="MAIN_UMASK" type="text" size="6" value="'.htmlentities($conf->global->MAIN_UMASK).'">';
print '</td>';
print '</tr>';

// Use anti virus

print '<tr class="oddeven">';
print '<td colspan="2">'.$langs->trans("AntiVirusCommand").'<br>';
print $langs->trans("AntiVirusCommandExample");
// Check command in inside safe_mode
print '</td>';
print '<td>';
if (ini_get('safe_mode') && ! empty($conf->global->MAIN_ANTIVIRUS_COMMAND))
{
    $langs->load("errors");
    $basedir=preg_replace('/"/','',dirname($conf->global->MAIN_ANTIVIRUS_COMMAND));
    $listdir=explode(';',ini_get('safe_mode_exec_dir'));
    if (! in_array($basedir,$listdir))
    {
        print img_warning($langs->trans('WarningSafeModeOnCheckExecDir'));
        dol_syslog("safe_mode is on, basedir is ".$basedir.", safe_mode_exec_dir is ".ini_get('safe_mode_exec_dir'), LOG_WARNING);
    }
}
print '<input type="text" name="MAIN_ANTIVIRUS_COMMAND" class="minwidth500imp" value="'.(! empty($conf->global->MAIN_ANTIVIRUS_COMMAND)?dol_escape_htmltag($conf->global->MAIN_ANTIVIRUS_COMMAND):'').'">';
print "</td>";
print '</tr>';

// Use anti virus

print '<tr class="oddeven">';
print '<td colspan="2">'.$langs->trans("AntiVirusParam").'<br>';
print $langs->trans("AntiVirusParamExample");
print '</td>';
print '<td>';
print '<input type="text" name="MAIN_ANTIVIRUS_PARAM" class="minwidth500imp" value="'.(! empty($conf->global->MAIN_ANTIVIRUS_PARAM)?dol_escape_htmltag($conf->global->MAIN_ANTIVIRUS_PARAM):'').'">';
print "</td>";
print '</tr>';

print '</table>';
print '</div>';

dol_fiche_end();

print '<div class="center"><input type="submit" class="button" name="button" value="'.$langs->trans("Modify").'"></div>';

print '</form>';

// Form to test upload
print '<br>';
$formfile=new FormFile($db);
$formfile->form_attach_new_file($_SERVER['PHP_SELF'], $langs->trans("FormToTestFileUploadForm"), 0, 0, 1, 50, '', '', 1, '', 0);

// List of document
$filearray=dol_dir_list($upload_dir, "files", 0, '', '', 'name', SORT_ASC, 1);
$formfile->list_of_documents($filearray, null, 'admin_temp', '');

llxFooter();
$db->close();