GSP/Panel
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

litefm fixes

Browse source
This commit is contained in:
Frank Harris 2026-06-10 19:39:39 -04:00
parent 68d2113c76
commit 784901be2f
4 changed files with 71 additions and 8 deletions
Download patch file Download diff file Expand all files Collapse all files

20
Panel/modules/litefm/fm_dir.php
View file

@ -68,13 +68,33 @@ function exec_ogp_module()
if (!isset($_SESSION[$cwd_session_key]) || !is_string($_SESSION[$cwd_session_key])) {
$_SESSION[$cwd_session_key] = '';
}
// Validate cached path and recover from bad cached paths
$path = litefm_safe_join_home_path($home_cfg['home_path'], $_SESSION[$cwd_session_key]);
if ($path === false)
{
// If we had a cached path and it's invalid, reset it and try again with root
if ($_SESSION[$cwd_session_key] !== '')
{
print_success("Invalid saved path was reset to the server root.");
$_SESSION[$cwd_session_key] = '';
$path = litefm_safe_join_home_path($home_cfg['home_path'], '');
// If even root is invalid, that's a real error
if ($path === false)
{
print_failure("Could not access server home directory");
echo "<table class='center'><tr><td><a href='?m=gamemanager&amp;p=game_monitor&amp;home_id=".$home_cfg['home_id']."'><< ".get_lang('back')."</a></td></tr></table>";
return;
}
}
else
{
// Empty path but still invalid - real error
print_failure(get_lang("unallowed_char"));
echo "<table class='center'><tr><td><a href='?m=gamemanager&amp;p=game_monitor&amp;home_id=".$home_cfg['home_id']."'><< ".get_lang('back')."</a></td></tr></table>";
return;
}
}
$home_root = clean_path($home_cfg['home_path']);
if (!$remote->rfile_exists($home_root))

16
Panel/modules/litefm/fm_read.php
View file

@ -60,7 +60,19 @@ function exec_ogp_module()
if (litefm_check($home_id) === FALSE)
return;
$show_path = litefm_display_home_path($home_cfg['home_path'], isset($_SESSION['fm_cwd_'.$home_id]) ? $_SESSION['fm_cwd_'.$home_id] : '');
// Validate and recover from bad cached paths
$cwd_session_key = 'fm_cwd_' . $home_id;
if (isset($_SESSION[$cwd_session_key]) && $_SESSION[$cwd_session_key] !== '')
{
$testPath = litefm_safe_join_home_path($home_cfg['home_path'], $_SESSION[$cwd_session_key]);
if ($testPath === false)
{
print_success("Invalid saved path was reset to the server root.");
$_SESSION[$cwd_session_key] = '';
}
}
$show_path = litefm_display_home_path($home_cfg['home_path'], isset($_SESSION[$cwd_session_key]) ? $_SESSION[$cwd_session_key] : '');
if ($show_path === false)
$show_path = clean_path($home_cfg['home_path']);
echo "<table class='center' style='width:100%;'>".show_back($home_id)."</table>";
@ -70,7 +82,7 @@ function exec_ogp_module()
//Logic to open the file we're editing
$remote = new OGPRemoteLibrary($home_cfg['agent_ip'], $home_cfg['agent_port'], $home_cfg['encryption_key'], $home_cfg['timeout']);
$data = "";
$rel_path = isset($_SESSION['fm_cwd_'.$home_id]) ? $_SESSION['fm_cwd_'.$home_id]:'';
$rel_path = isset($_SESSION[$cwd_session_key]) ? $_SESSION[$cwd_session_key]:'';
$filepath = litefm_safe_join_home_path($home_cfg['home_path'], $rel_path);
if ($filepath === false)
{

18
Panel/modules/litefm/fm_write.php
View file

@ -55,12 +55,26 @@ function exec_ogp_module()
return;
}
$home_id = $home_cfg['home_id'];
// Validate and recover from bad cached paths early
$cwd_session_key = 'fm_cwd_' . $home_id;
if (isset($_SESSION[$cwd_session_key]) && $_SESSION[$cwd_session_key] !== '')
{
$testPath = litefm_safe_join_home_path($home_cfg['home_path'], $_SESSION[$cwd_session_key]);
if ($testPath === false)
{
print_success("Invalid saved path was reset to the server root.");
$_SESSION[$cwd_session_key] = '';
}
}
if ( isset($_REQUEST['save_file']) )
{
$_REQUEST['file_content'] = strip_real_escape_string($_REQUEST['file_content']);
$remote = new OGPRemoteLibrary($home_cfg['agent_ip'], $home_cfg['agent_port'], $home_cfg['encryption_key'], $home_cfg['timeout']);
$target_path = litefm_safe_join_home_path($home_cfg['home_path'], isset($_SESSION['fm_cwd_'.$home_id]) ? $_SESSION['fm_cwd_'.$home_id] : '');
$target_path = litefm_safe_join_home_path($home_cfg['home_path'], isset($_SESSION[$cwd_session_key]) ? $_SESSION[$cwd_session_key] : '');
if ($target_path === false)
{
print_failure(get_lang('unallowed_char'));
@ -70,7 +84,7 @@ function exec_ogp_module()
if ( $file_info === 1 )
{
print_success(get_lang('wrote_changes'));
$db->logger(get_lang('wrote_changes')." ( ".$home_cfg['home_name']." - ".litefm_display_home_path($home_cfg['home_path'], isset($_SESSION['fm_cwd_'.$home_id]) ? $_SESSION['fm_cwd_'.$home_id] : '')." )");
$db->logger(get_lang('wrote_changes')." ( ".$home_cfg['home_name']." - ".litefm_display_home_path($home_cfg['home_path'], isset($_SESSION[$cwd_session_key]) ? $_SESSION[$cwd_session_key] : '')." )");
}
else if ( $file_info === 0 )
print_failure(get_lang('failed_write'));

19
Panel/modules/litefm/get_file.php
View file

@ -45,6 +45,17 @@ function exec_ogp_module()
if ( preg_match("/f/",$home_cfg['access_rights']) != 1 )
return;
// Validate and recover from bad cached paths early
$cwd_session_key = 'fm_cwd_' . $home_id;
if (isset($_SESSION[$cwd_session_key]) && $_SESSION[$cwd_session_key] !== '')
{
$testPath = litefm_safe_join_home_path($home_cfg['home_path'], $_SESSION[$cwd_session_key]);
if ($testPath === false)
{
$_SESSION[$cwd_session_key] = '';
}
}
$downloads_folder = "modules/litefm/downloads";
if(isset($_GET['remove_did']))
@ -82,7 +93,13 @@ function exec_ogp_module()
set_time_limit(0);
$remote = new OGPRemoteLibrary($home_cfg['agent_ip'], $home_cfg['agent_port'], $home_cfg['encryption_key'], $home_cfg['timeout']);
$fp = fopen("$downloads_folder/$did", "w");
$_SESSION['download'][$did]['offset'] = $remote->remote_get_file_part($home_cfg['home_path']."/".$_SESSION['download'][$did]['fileph'], $_SESSION['download'][$did]['offset'], $data);
$filePath = litefm_safe_join_home_path($home_cfg['home_path'], isset($_SESSION['download'][$did]['fileph']) ? $_SESSION['download'][$did]['fileph'] : '');
if ($filePath === false)
{
print_failure("Invalid file path");
return;
}
$_SESSION['download'][$did]['offset'] = $remote->remote_get_file_part($filePath, $_SESSION['download'][$did]['offset'], $data);
if($_SESSION['download'][$did]['offset'] != -1)
fwrite($fp,$data);
fclose($fp);