 | |  |
|
Control file types for upload/delete/rename using zFTPServer with PHP
This example shows how to restrict which file types users are allowed to work with by using php scripts.
Descriptions for configuring each script is in the code comments.
PHP-Script "BeforeUpload.php":
<?PHP
/**
* @author Photonensammler
*/
//pass the username, and the extension of the file to upload
//check whether the upload of this filetype is allowed for user
//be passed as first Parameter the user name and as the 2nd Parameter the filename
//Usage example BeforeUpload.php Username Filename
/*
command line in ZFTPServer event "BeforeUpload"
"C:/PHP/php-win.exe" "C:/Program Files/zFTPServer/Scripts/BeforeUpload.php" "%USERNAME%" "%LOCAL_FILENAME%"
*/
/*
for the user is evaluated the allowed file extension
if the extension is listed in the array, for the user the upload of this filetype is allowed
for users with the extension '*' is the upload of arbitrary files allowed
*/
$allow['User_1'] = array('txt'); //rights for user_1
$allow['User_2'] = array('txt', 'jpg', 'jpeg', 'pdf', 'wmv', ''); // rights for User_2
$allow['User_x'] = array('*'); //all rights for User_x
$allow['Administrator'] = array('*'); //all rights for Administrator
if (isset($_SERVER['argc']) && $_SERVER['argc'] > 2) {
$user = $_SERVER['argv'][1]; //username
if (isset($allow[$user])) {//test whether user exists
if ($allow[$user][0] == '*') {
die(0); //everything is allowed, exit with errorlevel 0
} else {
$ext = preg_split('/\./', $_SERVER['argv'][2]);
if (count($ext) == 1) {
$ext[1] = ''; //for files without extension
}
$ext = strtolower($ext[count($ext) - 1]);
foreach ($allow[$user] as $test_ext) {
if (strtolower($test_ext) == $ext) {
die(0); //is allowed for this user, terminate with errorlevel 0
}
}
}
}
}
die(1); //not allowed
?>
PHP-Script "BeforeRename.php":
<?PHP
/**
* @author Photonensammler
*/
//pass the username, and the extension of the old filename and the new filename to rename
//check whether the rename of this filetype is allowed for user
//be passed as first Parameter the user name, as the 2nd Parameter the old filename and as the 3td parameter the new filename
//Usage example BeforeRename.php Username Filenameold Filenamenew
/*
command line in ZFTPServer event "BeforeRename"
"C:/PHP/php-win.exe" "C:/Program Files/zFTPServer/Scripts/BeforeRename.php" "%USERNAME%" "%LOCAL_FILENAME%" "%LOCAL_FILENAME_NEW%"
*/
/*
for the user is evaluated the allowed file extension
if the extension is listed in the array, for the user the rename of this filetype is allowed
for users with the extension '*' is the rename of arbitrary files allowed
*/
$allow['User_1'] = array('txt'); //rights for user_1
$allow['User_2'] = array('txt', 'jpg', 'jpeg', 'pdf', 'wmv', ''); // rights for User_2
$allow['User_x'] = array('*'); //all rights for User_x
$allow['Administrator'] = array('*'); //all rights for Administrator
if (isset($_SERVER['argc']) && $_SERVER['argc'] > 3) {
$user = $_SERVER['argv'][1]; //username
if (isset($allow[$user])) {//test whether user exists
if ($allow[$user][0] == '*') {
die(0); //everything is allowed, exit with errorlevel 0
} else {
$ext_old = preg_split('/\./', $_SERVER['argv'][2]);
if (count($ext_old) == 1) {
$ext_old[1] = ''; //for files without extension
}
$ext_new = preg_split('/\./', $_SERVER['argv'][3]);
if (count($ext_new) == 1) {
$ext_new[1] = ''; //for files without extension
}
$ext_old = strtolower($ext_old[count($ext_old) - 1]);
$ext_new = strtolower($ext_new[count($ext_new) - 1]);
foreach ($allow[$user] as $test_ext) {
if (strtolower($test_ext) == $ext_old) {
foreach ($allow[$user] as $test_ext) {
if (strtolower($test_ext) == $ext_new) {
die(0); //is allowed for this user, terminate with errorlevel 0
}
}
die(1); //not allowed
}
}
}
}
}
die(1); //not allowed
?>
PHP-Script "BeforeRemoveFile.php":
<?PHP
/**
* @author Photonensammler
*/
//pass the username, and the extension of the file to delete
//check whether the deleting of this filetype is allowed for user
//be passed as first Parameter the user name and as the 2nd Parameter the filename
//Usage example BeforeRemoveFile.php Username Filename
/*
command line in ZFTPServer event "BeforeRemoveFile"
"C:/PHP/php-win.exe" "C:/Program Files/zFTPServer/Scripts/BeforeRemoveFile.php" "%USERNAME%" "%LOCAL_FILENAME%"
*/
/*
for the user is evaluated the allowed file extension
if the extension is listed in the array, for the user the deleting of this filetype is allowed
for users with the extension '*' is the deleting of arbitrary files allowed
*/
$allow['User_1'] = array('txt'); //rights for user_1
$allow['User_2'] = array('txt', 'jpg', 'jpeg', 'pdf', 'wmv', ''); // rights for User_2
$allow['User_x'] = array('*'); //all rights for User_x
$allow['Administrator'] = array('*'); //all rights for Administrator
if (isset($_SERVER['argc']) && $_SERVER['argc'] > 2) {
$user = $_SERVER['argv'][1]; //username
if (isset($allow[$user])) {//test whether user exists
if ($allow[$user][0] == '*') {
die(0); //everything is allowed, exit with errorlevel 0
} else {
$ext = preg_split('/\./', $_SERVER['argv'][2]);
if (count($ext) == 1) {
$ext[1] = ''; //for files without extension
}
$ext = strtolower($ext[count($ext) - 1]);
foreach ($allow[$user] as $test_ext) {
if (strtolower($test_ext) == $ext) {
die(0); //is allowed for this user, terminate with errorlevel 0
}
}
}
}
}
die(1); //not allowed
?>
PHP-Script "BeforeDownload.php":
<?PHP
/**
* @author Photonensammler
*/
//pass the username, and the extension of the file to download
//check whether the download of this filetype is allowed for user
//be passed as first Parameter the user name and as the 2nd Parameter the filename
//Usage example BeforeDownload.php Username Filename
/*
command line in ZFTPServer event "BeforeDownload"
"C:/PHP/php-win.exe" "C:/Program Files/zFTPServer/Scripts/BeforeDownload.php" "%USERNAME%" "%LOCAL_FILENAME%"
*/
/*
for the user is evaluated the allowed file extension
if the extension is listed in the array, for the user the download of this filetype is allowed
for users with the extension '*' is the download of arbitrary files allowed
*/
$allow['User_1'] = array('txt'); //rights for user_1
$allow['User_2'] = array('txt', 'jpg', 'jpeg', 'pdf', 'wmv', ''); // rights for User_2
$allow['User_x'] = array('*'); //all rights for User_x
$allow['Administrator'] = array('*'); //all rights for Administrator
if (isset($_SERVER['argc']) && $_SERVER['argc'] > 2) {
$user = $_SERVER['argv'][1]; //username
if (isset($allow[$user])) {//test whether user exists
if ($allow[$user][0] == '*') {
die(0); //everything is allowed, exit with errorlevel 0
} else {
$ext = preg_split('/\./', $_SERVER['argv'][2]);
if (count($ext) == 1) {
$ext[1] = ''; //for files without extension
}
$ext = strtolower($ext[count($ext) - 1]);
foreach ($allow[$user] as $test_ext) {
if (strtolower($test_ext) == $ext) {
die(0); //is allowed for this user, terminate with errorlevel 0
}
}
}
}
}
die(1); //not allowed
?>
PHP-Script "BeforeCreateDirectory.php":
<?PHP
/**
* @author Photonensammler
*/
//pass the username, check whether the creation of Directorys is allowed for this user
/*
command line in ZFTPServer event "BeforeCreateDirectory"
"C:/PHP/php-win.exe" "C:/Program Files/zFTPServer/Scripts/BeforeCreateDirectory.php" "%USERNAME%"
*/
/*
for the user is only evaluated '*', for users with '*' is the creation of Directorys allowed
users without '*' dont have authorization to create Directorys
*/
$allow['User_1'] = ''; //no rights for user_1
$allow['User_2'] = ''; //no rights for User_2
$allow['User_x'] = '*'; //all rights for User_x
$allow['Administrator'] = '*'; //all rights for Administrator
//this is the compact code
die(isset($_SERVER['argc']) ? (isset($allow[$_SERVER['argv'][1]]) ? ($allow[$_SERVER['argv'][1]] == '*' ? 0 : 1) : 1) : 1);
/* This is the clear code
if(!isset($_SERVER['argc'])){
die(1); //errorlevel 1 -> called without parameters
}
$user=$_SERVER['argv'][1]; //username
if(!isset($allow[$user])){//test whether user exists
die(1); //no user
}else{
if($allow[$user]=='*'){
die(0); //is allowed to exit with errorlevel 0
}
}
die(1); //not allowed
*/
?>
PHP-Script "BeforeRemoveDirectory.php":
<?PHP
/**
* @author Photonensammler
*/
//pass the username, check whether the deletion of Directorys is allowed for this user
/*
command line in ZFTPServer event "BeforeRemoveDirectorys"
"C:/PHP/php-win.exe" "C:/Program Files/zFTPServer/Scripts/BeforeRemoveDirectory.php" "%USERNAME%"
*/
/*
for the user is only evaluated '*', for users with '*' is the deletion of Directorys allowed
users without '*' dont have authorization to delete Directorys
*/
$allow['User_1'] = ''; //no rights for user_1
$allow['User_2'] = ''; //no rights for User_2
$allow['User_x'] = '*'; //all rights for User_x
$allow['Administrator'] = '*'; //all rights for Administrator
//this is the compact code
die(isset($_SERVER['argc']) ? (isset($allow[$_SERVER['argv'][1]]) ? ($allow[$_SERVER['argv'][1]] == '*' ? 0 : 1) : 1) : 1);
/* This is the clear code
if(!isset($_SERVER['argc'])){
die(1); //errorlevel 1 -> called without parameters
}
$user=$_SERVER['argv'][1]; //username
if(!isset($allow[$user])){//test whether user exists
die(1); //no user
}else{
if($allow[$user]=='*'){
die(0); //is allowed to exit with errorlevel 0
}
}
die(1); //not allowed
*/
?>
|
|
|
|
|
|
