<?
// This is Ali's ZIP2SFTP Interface - version for uploading files from any server
// Script created by Savas Ali Tokmen - https://ali.tokmen.com/
// Date: 16 November 2024, version 2024.11.16

// STARTUP PARAMETERS
// You can call Ali's ZIP 2 SFTP Interface with the following paramaters
//     [filename].php?host=HOST&user=USER&pass=PASS&port=PORT&folder=FOLDER&zipFile=ZIPFILE
//
// WHERE:
// HOST is the host name
// USER is the user name
// PASS is the password
// PORT is the port number
// FOLDER is the folder name
// ZIPFILE is the address of the remote ZIP file to upload
//
// Of course, all those items are optional. The first option should be called
// preceeded by a "?" sign and the others by a "&" sign.
//
// This way, you can launch without much pain the ZIP 2 SFTP Interface with the
// parameters you want. The user would then only have to choose a ZIP file
// and press "Go !" :)

// Read a php.ini-style value, defaults to megabytes
function return_mbytes($val) {
	$val = trim($val);
	$last = strtolower($val[strlen($val)-1]);
	switch($last) {
		// The 'G' modifier is available since PHP 5.1.0
		case 'g':
			$val *= 1024;
		case 'm':
			$val = intval($val);
			break;
		case 'k':
			$val /= 1024;
	}

	return $val;
}

// Finds out the maximal POST upload size, in MB
function getMaxULSize() {
	$post = return_mbytes(ini_get('post_max_size'));
	$memory = return_mbytes(ini_get('memory_limit'));

	if($memory < 1) {
		return $post;
	}

	return $memory;
}

// Maximal size of ZIP files, in megabytes
$zipFileSizeLimit_MB=getMaxULSize();

error_reporting(E_ERROR);
extract($_REQUEST);

// PHP < 4.1.0 DIDN'T HAVE $_* BUT $HTTP_*_VARS
if(version_compare(phpversion(),"4.1.0")==-1){
	$_SERVER = $HTTP_SERVER_VARS;
	$_SESSION = $HTTP_SESSION_VARS;
	$_FILES = $HTTP_POST_FILES;
}

function filterHTML($what){
	return str_replace(array("&","<",">","\""),array("&amp;","&lt;","&gt;","&quot;"),$what);
}
function unfilterHTML($what){
	return str_replace(array("&lt;","&gt;","&quot;","&amp;"),array("<",">","\"","&"),$what);
}

$scriptName=basename($_SERVER["SCRIPT_NAME"]);
$scriptName=filterHTML($scriptName);

if($do=="getSource"){
	// Download method depends on the browser
	$user_agent=strtolower($_SERVER["HTTP_USER_AGENT"]);
	header("Content-type: application/force-download");
	if((is_integer(strpos($user_agent,"msie")))&&(is_integer(strpos($user_agent,"win")))){
		header("Content-Disposition: filename=\"zip2sftp.php\"");
	}else{
		header("Content-Disposition: attachment; filename=\"zip2ftp.php\"");
	}
	header("Content-Description: File Transfert");

	// Send file
	readfile($scriptName);

	// Send e-mail if needed (for usage statistics)
	if (strpos($user_agent,"bot") === false && strpos($_SERVER["SERVER_NAME"], "alishomepage.com") === false) {
		mail(
			"opensource@alishomepage.com",
			"ZIP2SFTP Interface (Remote Edition): another one downloaded :)",
				"This part will be referred to when the browser sends out no referrer information\n\n" .
				"Server name: ".$_SERVER["SERVER_NAME"]."\n" .
				"Script name: ".$_SERVER["SCRIPT_NAME"]."\n" .
				"Translated path: ".$_SERVER["PATH_TRANSLATED"]."\n\n" .
				"Downloader's info (the referrer is most useful, user agent is to detect bots)\n\n" .
				"User agent: ".$_SERVER["HTTP_USER_AGENT"]."\n" .
				"Referrer: ".$_SERVER["HTTP_REFERER"]."\n" .
				"Request URL: ".$_SERVER["REQUEST_URI"]);
	}
	die();
}

$port=intval($port);
if(!$port || $port<1 || $port>65535){
	$port=22;
}

// PHP < 5 didn't have sys_get_temp_dir
if(!is_callable('sys_get_temp_dir',false)) {
	function sys_get_temp_dir() {
		$temp="";
		if($temp=getenv('TMP')){
			return $temp;
		}
		if($temp=getenv('TEMP')){
			return $temp;
		}
		if($temp=getenv('TMPDIR')){
			return $temp;
		}
		$temp=tempnam('', '');
		if(file_exists($temp)){
			unlink($temp);
			return dirname($temp);
		}
		return $temp;
	}
}

// On some systems, the zip functions do not exist. In this case, try to use
// the "unzip" command (available by default on most Linux systems)
// Code written by bisqwit at iki dot fi on the zip_open function's comments
// on the PHP manual. Thanks to Radek from Poland for telling me about it.
if(!is_callable("zip_open",false)){
	function ShellFix($s) {
		return "'". str_replace("'", "'\''", $s)."'";
	}

	function zip_open ($s) {
		$fp = @fopen ($s, 'rb');
		if(!$fp ) return false;

		$lines = Array(); 
		$cmd = 'unzip -v '.shellfix( $s);
		exec($cmd, $lines);

		$contents = Array();
		$ok=false;
		foreach($lines as $line)  
		{
			if($line[0]== '-') {
				$ok=!$ok;
				continue;
			}
			if(!$ok) {
				continue;
			}

			$length = (int)$line ;
			$fn = trim(substr ($line,58));

			$contents[] = Array('name' => $fn, 'length' => $length);
		}

		return Array('fp'		=> $fp,  
					 'name'		=> $s ,
					 'contents'	=> $contents ,
					 'pointer'	=> -1);
	}

	function zip_read(&$fp) {
		if(!$fp ) return false; 

		$next = $fp ['pointer'] + 1;
		if( $next >= count($fp['contents' ])) return false;

		$fp['pointer' ] = $next;
		return $fp['contents'][$next];
	}

	function zip_entry_name (&$res) {
		if(!$res) return false ;
		return $res['name' ];
	}

	function zip_entry_filesize(&$res ) {
		if(!$res) return false;
		return $res['length'];
	}

	function zip_entry_open (&$fp, &$res) {
		if(!$res ) return false;

		$cmd = 'unzip -p '.shellfix($fp['name' ]).' '.shellfix($res[ 'name']);

		$res['fp'] = popen($cmd, 'r');
		return !! $res['fp'];  
	}

	function zip_entry_read(&$res, $nbytes) {
		$contents = '';
		while (!feof($res['fp'])) {
			$contents .= fread($res['fp'], 8192);
		}
		return $contents;
	}

	function zip_entry_close(&$res) { 
		fclose($res['fp' ]);
		unset($res['fp']);
	}

	function zip_close(&$fp) {
		fclose( $fp['fp']);
	}
}
?>
<html>
<head>
<meta http-equiv='Content-Type' content='text/html;charset=UTF-8'>
<title>ZIP 2 SFTP</title>
<style>
BODY{
	background:#FEFEFE;
	font-family:tahoma,arial,helvetica;
	font-size:13;
	color:#000000;
	cursor:default;
	-moz-user-select:none
}

input{
	font-family:tahoma,arial,helvetica;
	font-size:13;
	color:#000000;
	-moz-user-select:normal
}

select{
	font-family:tahoma,arial,helvetica;
	font-size:13;
	color:#000000;
	-moz-user-select:normal
}

TD{
	font-size:13
}

H1{
	font-size:20
}

A{
	text-decoration:none;
	color:#2B5796
}

A:hover{
	color:#FF6262;
	text-decoration:underline
}
</style>
</head>
<body>
<center><h1>Ali's ZIP 2 SFTP Interface</h1>
<?

if(!is_callable("ssh2_connect",false)){
	echo "Please enable the <a href=https://www.php.net/manual/en/ssh2.setup.php target=_blank>PHP SSH2 extensions</a>.";
	die();
}

if($serverName){
	if(strpos($zipFile,"http://")!==0 && strpos($zipFile,"https://")!==0 && strpos($zipFile,"ftp://")!==0){
		echo "Please give an HTTP, HTTPS or FTP resource address!";
	}else{
		echo "</center>";

		if(!$username || strlen($username)<1) {
			$username="anonymous";
		}
		$portNumber=intval($portNumber);
		if(!$portNumber || $portNumber<1 || $portNumber>65535){
			$portNumber=22;
		}
		$zip=zip_open($_FILES["uplFile"]["tmp_name"]);
		$uplTotal=0;

		if($zip){
			if($conn_id=ssh2_connect($serverName,$portNumber)){
				if(ssh2_auth_password($conn_id,$userName,$passWord)){
					if($conn_sftp=ssh2_sftp($conn_id)){
						$folder=str_replace(array("&slash;","&amp;"),array("/","&"),stripslashes(str_replace(array("<","&","\\\\"),array("&lt;","&amp;","&slash;"),$folder)));
						if(strlen($folder)<1){
							$folder=".";
						}
						if($folder[0]!=='/'){
							$folder=ssh2_sftp_realpath($conn_sftp,$folder);
						}
						if(!file_exists("ssh2.sftp://$conn_sftp$folder")){
							if(!ssh2_sftp_mkdir($conn_sftp,$folder,0750,true)){
								echo "Cannot change current directory to <b>$folder</b>. Please check that the user has the correct access to create folders.\n";
								die();
							}
						}
						echo "Changed current directory to <b>$folder</b><ul>\n";
						$current_path="";
						while($zip_entry=zip_read($zip)){
							$size=zip_entry_filesize($zip_entry);
							if($size>0 && zip_entry_compressionmethod($zip_entry)){
								if(dirname(zip_entry_name($zip_entry))!="."){
									$complete_path=dirname(zip_entry_name($zip_entry));
								}else{
									$complete_path="";
								}
								if($complete_path!=$current_path){
									if(!file_exists("ssh2.sftp://$conn_sftp$folder/$complete_path")){
										if(!ssh2_sftp_mkdir($conn_sftp,"$folder/$complete_path",0750,true)){
											echo "Cannot change current directory to <b>$complete_path</b>. Please check that the user has the correct access to create folders.\n";
											die();
										}
									}
									$current_path=$complete_path;
								}
								if(strlen($complete_path)>0){
									$complete_path="$complete_path/";
								}
								$complete_name=basename($path.zip_entry_name($zip_entry));
								$tempName;
								if(zip_entry_open($zip,$zip_entry,"r")){
									$tempDir=sys_get_temp_dir();
									$tempName=tempnam($tempDir, "zip2sftp");
									$fd=fopen($tempName,'w');
									fwrite($fd,zip_entry_read($zip_entry,$size));
									fclose($fd);
									zip_entry_close($zip_entry);
									if(filesize($tempName)==0){
										unlink($tempName);
										continue;
									}
								}else{
									echo "Cannot open entry file <b>$complete_path$complete_name</b>. Please check that the ZIP file is not corrupted.";
									die();
								}
								if(ssh2_scp_send($conn_id,$tempName,"$folder/$complete_path$complete_name",0750)){
									echo "Upload file <b>$complete_path$complete_name</b> OK ($size bytes)<br>\n";
									$uplTotal++;
								}else{
									echo "Upload file <b>$complete_path$complete_name</b> FAILED. Please check that the user has the correct access to create files.";
									unlink($tempName);
									die();
								}
								unlink($tempName);
							}
						}
						echo "Upload of $uplTotal files OK";
					}else{
						echo "Opening SFTP session with <b>".htmlspecialchars($serverName)."</b> as <b>".htmlspecialchars($userName)."</b> failed!";
					}
				}else{
					echo "Log in to <b>".htmlspecialchars($serverName)."</b> as <b>".htmlspecialchars($userName)."</b> failed!";
				}
				ssh2_disconnect($conn_id);
			}else{
				echo "Connection to <b>".htmlspecialchars($serverName)."</b> failed!";
			}
			zip_close($zip);
		}else{
			echo "ZIP file is not valid!";
		}
		echo "<center>";
	}
}else{

?>
<script>
function onSelectStart() {
	if (window.event.srcElement.tagName != "INPUT") {
		window.event.returnValue = false
		window.event.cancelBubble = true
	}
}

document.onselectstart=onSelectStart
</script>
<form action="<?echo $scriptName;?>" method=POST enctype=multipart/form-data>
<table width=100% border=0 cellpadding=3>
<tr><td align=right width=47%>Hostname : </td><td><input size=20 name=serverName type=text maxlength=128 value="<?echo str_replace(array("\\'","\\\"","\""),array("'","\"","&quot;"),$host);?>"></td></tr>
<tr><td align=right>Username : </td><td><input size=20 name=userName type=text maxlength=128 value="<?echo str_replace(array("\\'","\\\"","\""),array("'","\"","&quot;"),$user);?>"></td></tr>
<tr><td align=right>Password : </td><td><input size=20 name=passWord type=password maxlength=128 value="<?echo str_replace(array("\\'","\\\"","\""),array("'","\"","&quot;"),$pass);?>"></td></tr>
<tr><td align=right>Port (standard is 22) : </td><td><input size=20 name=portNumber type=text maxlength=5 value=<?echo $port?>></td></tr>
<tr><td align=right>Folder in which to upload : </td><td><input size=20 name=folder type=text value="<?echo str_replace(array("\\'","\\\"","\""),array("'","\"","&quot;"),$folder);?>"></td></tr>
<tr><td align=right>ZIP file's URL : </td><td><input size=20 name=zipFile type=text value="<?echo str_replace(array("\\'","\\\"","\""),array("'","\"","&quot;"),$zipFile);?>"></td></tr></table><br>
<input type=submit value='Go !'></form>
<b>WHAT THIS SCRIPT DOES</b>: This script will download the ZIP file from the URL you've specified and decompress it in the given folder on the SFTP server you've specified. While doing it, it will also give you information about what it has done at the end of this page...<br><br>
<b>HINT</b>: if you need to do some more complex FTP tasks, you may find <a href=https://myftp.alishomepage.com target=_blank>Ali's FTP Interface</a> quite useful! ;)<br><br>
<b>HINT II</b>: if the ZIP file you want to decompress is on your machine, please use <a href=https://myftp.alishomepage.com/zip2ftp.php target=_blank>Ali's ZIP 2 FTP Interface: User Upload Edition</a> instead.<br><br>
<b>HINT III</b>: if you want to send your ZIP file to an SFTP server instead, please use <a href=https://myftp.alishomepage.com/zip2sftp.php target=_blank>Ali's ZIP 2 SFTP Interface: User Upload Edition</a> instead.<br><br>
<b>HINT IV</b>: if the ZIP file you want to decompress is on a web server (like a PHP forum, for instance), you can directly use <a href=https://myftp.alishomepage.com/zip2ftp_remote.php target=_blank>Ali's ZIP 2 FTP Interface: Remote Edition</a> and avoid the file download-upload phase.<br><br>
<font size=1>(click <a href="<?echo $scriptName;?>?do=getSource">here</a> to get the PHP source of this ZIP 2 FTP interface)</font>
<?

}

?>
<font size=2><br><br></font>
<font size=1>Ali's ZIP 2 SFTP interface created by Savas Ali Tokmen</font>
<font size=2><br><br></font>
<font size=1><a href=https://contact.ali.tokmen.com/ target=_blank>https://contact.ali.tokmen.com/</a><br>
<a href=https://ali.tokmen.com/ target=_blank>https://ali.tokmen.com/</a><br>&nbsp;</font>
</center>
</body>
</html>