File Manager - BorneoXploit

Editing: compress.cgi

#!/usr/bin/perl

#
# Authentic Theme (https://github.com/authentic-theme/authentic-theme)
# Copyright Ilia Rostovtsev <ilia@virtualmin.com>
# Licensed under MIT (https://github.com/authentic-theme/authentic-theme/blob/master/LICENSE)
#
use strict;

our (%in, %text, %config, $cwd, $path);

require($ENV{'THEME_ROOT'}."/extensions/file-manager/file-manager-lib.pl");

if (!$in{'arch'}) {
	redirect_local('list.cgi?path='.urlize($path).'&module=filemin');
	}

my %errors;
my $command;

my @entries_list = get_entries_list();
my $delete = $in{'arcmove'} ? 1 : 0;
my $encrypt = $in{'arcencr'} ? 1 : 0;
my $password = $in{'arcencr_val'};
my $key_id = quotemeta($in{'arkkey'});
my $status;
my $safe_mode = $in{'overwrite_efiles'} ne 'true';
my $follow_symlinks = $in{'follow_symlinks'} eq 'true';

if ($in{'method'} =~ /tar/ || $in{'method'} eq 'zip') {
	my $list = transname();
	open my $fh, ">", $list or die $!;
	print $fh "$_\n" for @entries_list;
	close $fh;

if ($in{'method'} =~ /tar/) {
		if (!has_command('tar')) {
			$errors{$text{'theme_xhred_global_error'}} =
			    text('theme_xhred_global_no_such_command', 'tar');
			}
		if (!has_command('xz') && $in{'method'} eq 'xz-tar') {
			$errors{$text{'theme_xhred_global_error'}} =
			    text('theme_xhred_global_no_such_command', 'xz');
			}
		if (!has_command('zstd') && $in{'method'} eq 'zstd-tar') {
			$errors{$text{'theme_xhred_global_error'}} =
			    text('theme_xhred_global_no_such_command', 'zstd');
			}

my $tarcmd = 'tar cz';    # gzip is default
		my $extension = 'tar.gz';
		if ($in{'method'} eq 'xz-tar') {
			$tarcmd = 'tar cJ';    # xz
			$extension = 'tar.xz';
			}
		elsif ($in{'method'} eq 'zstd-tar') {
			$tarcmd = 'ZSTD_CLEVEL=19 tar --zstd -c';    # zstd
			$extension = 'zst';
			}
		elsif ($in{'method'} eq 'plain-tar') {
			$tarcmd = 'tar c';    # tar, with no compression
			$extension = 'tar';
			}

my $file = fm_checked_cwd_path_or_error("$in{'arch'}.$extension");
		if (-e $file && $safe_mode) {
			my $__ = 1;
			for (; ;) {
				my $new_file = fm_checked_cwd_path_or_error(
					"$in{'arch'}(".$__++ .").$extension");
				if (!-e $new_file) {
					$file = $new_file;
					last;
					}
				}
			}
		my $fileq = quotemeta($file);
		my $gnu_tar_param = get_tar_verbatim();
		my $follow_symlinks = $follow_symlinks ? 'h' : '';
		$command =
		    "${tarcmd}f$follow_symlinks ".
		    $fileq." -C ".
		    quotemeta($cwd).
		    "$gnu_tar_param -T ".
		    $list;
		$status = system($command);

if ($encrypt && $key_id) {
			my %webminconfig = foreign_config("webmin");
			my $gpgpath = quotemeta($webminconfig{'gpg'} || "gpg");
			my $gpg =
			    "$gpgpath --encrypt --always-trust --recipient $key_id $fileq";

if (!has_command($gpgpath)) {
				$errors{$text{'theme_xhred_global_error'}} =
				    text('theme_xhred_global_no_such_command',
					$gpgpath);
				}
			$status = system($gpg);
			if ($status != 0) {
				$errors{$file} =
				    "$text{'filemanager_archive_gpg_error'}: $?";
				}
			else {
				unlink_file($file);
				}
			}
		}
	elsif ($in{'method'} eq 'zip') {
		if (!has_command('zip')) {
			$errors{$text{'theme_xhred_global_error'}} =
			    text('theme_xhred_global_no_such_command', 'zip');
			}
		my $pparam;
		if ($encrypt && $password) {
			$pparam = (" -P ".quotemeta($password)." ");
			}
		my $zipped_file = fm_checked_cwd_path_or_error("$in{'arch'}.zip");
		if (-e $zipped_file && $safe_mode) {
			my $__ = 1;
			for (; ;) {
				my $new_zipped_file = fm_checked_cwd_path_or_error(
					"$in{'arch'}(".$__++ .").zip");
				if (!-e $new_zipped_file) {
					$zipped_file = $new_zipped_file;
					last;
					}
				}
			}
		my $not_follow_symlinks = $follow_symlinks ? '' : ' -y';
		$command =
		    "cd ".
		    quotemeta($cwd).
		    " && zip$not_follow_symlinks $pparam -r ".
		    quotemeta($zipped_file).' -@'.
		    " < $list";
		$status = system($command);
		}

if ($delete) {
		if (!%errors && $status == 0) {
			foreach my $name (@entries_list) {
				my $file = fm_checked_cwd_path_or_error($name);
				unlink_file($file);
				}
			}
		else {
			$errors{$text{'theme_xhred_filemanager_archive_move_to'}} =
			    $text{'filemanager_archive_move_to_archive_failed'};
			}

}
	}

redirect_local('list.cgi?path='.
	    urlize($path).
	    '&module=filemin'.
	    '&error='.
	    get_errors(\%errors).
	    extra_query());

Cancel