Files and Folders Library

Audio Library implementation

<?php
// -- Configurable settings begin
// Authored by Loloy D, version 2009 06 17, revisited 2010 07 21 made arrays out of os_path and web_path
$os_path_array = array("C:/Users/Public/Music/", "I:/audio/");
$web_path_array  = array("/audio/","/audio_supplemental/");
$ext_array = array('.3gp', '.aac', '.asf', '.avi', '.awb', '.dat', '.flac', '.flv', '.gif', '.htm', '.html', '.iso', '.jpeg', '.jpg', '.m4a', '.mkv', '.mov', '.mp3', '.mp4', '.mpeg', '.mpg', '.nfo', '.nrg', '.ogg', '.png', '.pps', '.ppt', '.ram', '.rar', '.swf', '.txt', '.wav', '.wma', '.wmv', '.zip'); //describes the types of filename extensions that 
$hidden_os_paths = array("thumbs","resize", "index.html"); //hidden from listings, administrative operating directories
$dnode_title = "Audio Library";
$durl_path = "[node:url:path]"; //Token module should be installed and pre-processing enabled for the PHP code input type in Drupal
$daccess_roles = array("authenticated user");
$daccess_role_path = "private content user";
$dintro = "Access to the audio repository is restricted to registered users only.  Check this page regularly for new audio releases.  <a href=\"/?q=audio_library_faq\">Click here to read the Audio Library FAQ.</a><br/>\n";
$dintro .= "<br/>\n";
$dteaser = "<a href=\"/?q=". $durl_path . "\">Click here to zoom in and enter the library.</a><br/>\n";
$dbody = "<br/>\n";
$daccess_denied_msg = "This resource is available only to privileged users.<br/>\n";
$daccess_denied_path_msg = "This resource is available only to privileged users with access to " . $daccess_role_path . ".<br/>\n";
$dfooter = "<br/>Please report errors in operational functionality and listing by sending a comprehensive instance report to loloyd@loloyd.com.<br/>\n";
// -- Configurable settings end
$dnode_name = $durl_path . "_nn";
$anchor = $durl_path . "_a";
$env_script = $_SERVER["REQUEST_URI"];
global $user;

if (strpos($env_script, $durl_path) < 1) { //expose node intro only
  echo $dintro;
  if (count(array_intersect($daccess_roles, $user->roles)) > 0) { // was if (in_array($daccess_role . " user", $user->roles)) {
    echo $dteaser; }
  else {
    echo $daccess_denied_msg; } }
else { //expose zoomed in node body
  $subpath = "";
  if (isset($_REQUEST[$dnode_name."_subpath"])) $subpath = $_REQUEST[$dnode_name."_subpath"];
  if (count(array_intersect($daccess_roles, $user->roles)) < 1) { //if general access is denied, was if (!in_array($daccess_role . " user", $user->roles)) {
    echo $dintro . $daccess_denied_msg; }
  elseif (strpos($subpath, "[" . $daccess_role_path . "]") && !in_array($daccess_role_path, $user->roles)) { //if path access is denied
    echo $dintro . $daccess_denied_path_msg; }
  else { //if access is approved
    require_once "sites/all/files/ld_file_functions.php";
    $subpath = "";
    $parent_path = "";
    echo "<a name=\"".$anchor."\"></a>";
    if (isset($_REQUEST[$dnode_name."_subpath"])) $subpath = $_REQUEST[$dnode_name."_subpath"];
    if (strpos($subpath, "..") > 0 || strpos($subpath,"<") > 0 || strpos($subpath,">") > 0 || strpos($subpath,"..") === 0 || strpos($subpath,"<") === 0 || strpos($subpath,">") === 0) $subpath = ""; //primitive security to prevent os path hacks
    $subpath = rtrim($subpath, "/\\");
    $subpath = ltrim($subpath, "/\\");
    $actual_subpath = false;
    foreach ($os_path_array as $os_path) {
      if (is_dir($os_path."/".$subpath)) $actual_subpath = true;
    }
    if (!$actual_subpath) $subpath = "";
    $web_path = "";
    if ($subpath) {
      $web_path .= $subpath."/";
      if (strrpos($subpath, "/")) $parent_path = substr($subpath, 0, strrpos($subpath, "/")); }
    if (strpos($env_script, $dnode_name."_subpath=")) $env_script = substr($env_script, 0, strpos($env_script, $dnode_name."_subpath="));
    if (!strpos($env_script, "?")) { $env_script .= "?"; }
    elseif (substr($env_script, strlen($env_script) - 1) != "?") {
      $env_script .= "&";
      $env_script = str_replace("&&", "&", $env_script);
    }
// * superseded by $os_path becoming an array: if ($subpath) $os_path .= "/".$subpath;
    $objects_count = 0;
    $ld_path_files = array();
    $ld_path_dirs = array();
    $ld_webpaths = array();

$os_path_index = -1;
    foreach ($os_path_array as $os_path) {
      $os_path_index++;
      if ($subpath) $os_path .= "/" . $subpath . "/";
      $os_path = str_replace("//", "/", $os_path);
      if (file_exists($os_path)) {
        $open = opendir($os_path);
        while ($file = readdir($open)) {
          if ($file != ".." && $file != ".") {
            $fullpath = str_replace("//", "/", $os_path . $file);
            if (! in_array(strtolower($file), $hidden_os_paths)) {
              if (in_array(strtolower(substr($file, -4)), $ext_array) || in_array(strtolower(substr($file, -5)), $ext_array)) {
                $ld_path_files[$fullpath] = $file;
                $ld_webpaths[$fullpath] = $web_path_array[$os_path_index];
                $objects_count++;
              }
            }  //do not generalize lines above with lines below, otherwise other files not included in the ext_array will also be counted!
            if (is_dir($os_path."/".$file)) {
              if (! in_array(strtolower($file), $hidden_os_paths)) {
                $ld_path_dirs[$fullpath] = $file;
                $ld_webpaths[$fullpath] = $web_path_array[$os_path_index];
                $objects_count++;
              }
            }
          }
        }//do not generalize lines above, otherwise other files not included in the ext_array will also be counted!
      }
    }
    natcasesort($ld_path_files);
    natcasesort($ld_path_dirs);

if ($subpath) {
      echo "<b>".$subpath."</b><br/>\n";
      if (strrpos($subpath, "/")) $parent_path = substr($subpath, 0, strrpos($subpath, "/"));
    } else {
      echo $dintro . $dbody;
    }
    if ($objects_count > 0) {
      echo "(";
      if (count($ld_path_files)) {
        echo count($ld_path_files) . " file entr";
        echo (count($ld_path_files) != 1? "ies":"y") . (count($ld_path_dirs)? ", ":""); }
      if (count($ld_path_dirs)) echo count($ld_path_dirs) . " director" , (count($ld_path_dirs) != 1? "ies":"y");
      echo ")<br/>\n";
      if ($subpath) echo "Browse <a href=\"".$env_script.$dnode_name."_subpath=".$parent_path."#".$anchor."\">parent directory</a>.<br/>\n";
      echo "<table border=0 cellspacing=0 cellpadding=0>\n";
      echo "<tr valign=\"top\" bgcolor=\"#ddeedd\"><th>Date</th><th>Size</th><th>Name</th></tr>\n";
      if (count($ld_path_files)) echo "<tr valign=top><th colspan=3>Files</th></tr>";

$key = 0;
      foreach ($ld_path_files as $fullpath => $value) {
        $key++;
        echo "<tr valign=top>";
        echo "<td nowrap>".date ("Y/m/d H:i:s", filemtime($fullpath))."</td>";
        echo "<td nowrap>"; getXFileSize($fullpath); echo "</td>";
        $webpathprefix = $ld_webpaths[$fullpath] . "/" . $subpath . "/";
        $webpathprefix = str_replace("//", "/", $webpathprefix);
        echo "<td nowrap>$key. <a href=\"" . str_replace("//", "/", $webpathprefix . $value) . "\">$value</a></td>";
        echo "</tr>\n";
      }
      if (count($ld_path_files) != $objects_count) echo "<tr valign=top><th colspan=3>Sub-directories</th></tr>";
      $key = 0;
      while (list($fullpath, $value) = each($ld_path_dirs)) {
        $key++;
        echo "<tr valign=top>";
        echo "<td nowrap>".date("Y/m/d H:i:s", filemtime($fullpath))."</td>";
        echo "<td nowrap>"; getXFileSize($fullpath); echo "</td>";
        echo "<td nowrap>";
        if ($subpath) echo "$key. <a href=\"".$env_script.$dnode_name."_subpath=".$subpath."/".$value."#".$anchor."\">".$value."</a>";
        else echo "$key. <a href=\"".$env_script.$dnode_name."_subpath=".$value."#".$anchor."\">".$value."</a>";
        echo "</td></tr>\n";
      }
    }
    echo "</table>There ". ($objects_count != 1? "are":"is") . " currently " . $objects_count . " entr". ($objects_count != 1? "ies":"y") . " in this directory of the " . $dnode_title . ".<br/>\n";
    if ($subpath) echo "Browse <a href=\"".$env_script.$dnode_name."_subpath=".$parent_path."#".$anchor."\">parent directory</a>.<br/>\n";
  }
}
echo $dfooter;
?>

Video Library implementation

<?php
// -- Configurable settings begin
// Authored by Loloy D, version 2009 06 17, revisited 2010 07 21 made arrays out of os_path and web_path
$os_path_array = array("C:/Users/Public/Videos/", "I:/Video/", "O:/Video/");
$web_path_array  = array("/video/", "/video_i/", "/video_o/");
$ext_array = array('.avi', '.flv', '.mkv', '.mpg', '.mp4', '.mov', '.wmv', '.dat', '.3gp', '.asf', '.nfo', '.txt', '.jpg', '.gif', '.png', '.zip', '.iso,', '.rar', '.nrg', '.ppt', '.pps', '.htm', '.html', '.ram', '.swf', '.mts', '.srt'); //describes the types of filename extensions that will be treated as hard files
$hidden_os_paths = array("thumbs","resize", "index.html"); //hidden from listings, administrative operating directories
$dnode_title = "Video Library";
$durl_path = "[node:url:path]"; //Token module should be installed and pre-processing enabled for the PHP code input type in Drupal
$daccess_roles = array("authenticated user");
$daccess_role_path = "private content user";
$dintro = "Access to my video library is restricted to registered users only.  Check this page regularly for new video releases.  <a href=\"/?q=video_library_faq\">Click here to read the Video Library FAQ.</a><br/>\n";
$dintro .= "<br/>\n";
$dteaser = "<a href=\"/?q=". $durl_path . "\">Click here to zoom in and enter the library.</a><br/>\n";
$dbody = "<br/>\n";
$daccess_denied_msg = "This resource is available only to privileged users.<br/>\n";
$daccess_denied_path_msg = "This resource is available only to privileged users with access to " . $daccess_role_path . ".<br/>\n";
$dfooter = "<br/>Please report errors in operational functionality and listing by sending a comprehensive instance report to loloyd@loloyd.com.<br/>\n";
// -- Configurable settings end
$dnode_name = $durl_path . "_nn";
$anchor = $durl_path . "_a";
$env_script = $_SERVER["REQUEST_URI"];
global $user;

if (strpos($env_script, $durl_path) < 1) { //expose node intro only
  echo $dintro;
  if (count(array_intersect($daccess_roles, $user->roles)) > 0) { // was if (in_array($daccess_role . " user", $user->roles)) {
    echo $dteaser; }
  else {
    echo $daccess_denied_msg; } }
else { //expose zoomed in node body
  $subpath = "";
  if (isset($_REQUEST[$dnode_name."_subpath"])) $subpath = $_REQUEST[$dnode_name."_subpath"];
  if (count(array_intersect($daccess_roles, $user->roles)) < 1) { //if general access is denied, was if (!in_array($daccess_role . " user", $user->roles)) {
    echo $dintro . $daccess_denied_msg; }
  elseif (strpos($subpath, "[" . $daccess_role_path . "]") && !in_array($daccess_role_path, $user->roles)) { //if path access is denied
    echo $dintro . $daccess_denied_path_msg; }
  else { //if access is approved
    require_once "sites/all/files/ld_file_functions.php";
    $subpath = "";
    $parent_path = "";
    echo "<a name=\"".$anchor."\"></a>";
    if (isset($_REQUEST[$dnode_name."_subpath"])) $subpath = $_REQUEST[$dnode_name."_subpath"];
    if (strpos($subpath, "..") > 0 || strpos($subpath,"<") > 0 || strpos($subpath,">") > 0 || strpos($subpath,"..") === 0 || strpos($subpath,"<") === 0 || strpos($subpath,">") === 0) $subpath = ""; //primitive security to prevent os path hacks
    $subpath = rtrim($subpath, "/\\");
    $subpath = ltrim($subpath, "/\\");
    $actual_subpath = false;
    foreach ($os_path_array as $os_path) {
      if (is_dir($os_path."/".$subpath)) $actual_subpath = true;
    }
    if (!$actual_subpath) $subpath = "";
    $web_path = "";
    if ($subpath) {
      $web_path .= $subpath."/";
      if (strrpos($subpath, "/")) $parent_path = substr($subpath, 0, strrpos($subpath, "/")); }
    if (strpos($env_script, $dnode_name."_subpath=")) $env_script = substr($env_script, 0, strpos($env_script, $dnode_name."_subpath="));
    if (!strpos($env_script, "?")) { $env_script .= "?"; }
    elseif (substr($env_script, strlen($env_script) - 1) != "?") {
      $env_script .= "&";
      $env_script = str_replace("&&", "&", $env_script);
    }
// * superseded by $os_path becoming an array: if ($subpath) $os_path .= "/".$subpath;
    $objects_count = 0;
    $ld_path_files = array();
    $ld_path_dirs = array();
    $ld_webpaths = array();

$os_path_index = -1;
    foreach ($os_path_array as $os_path) {
      $os_path_index++;
      if ($subpath) $os_path .= "/" . $subpath . "/";
      $os_path = str_replace("//", "/", $os_path);
      if (file_exists($os_path)) {
        $open = opendir($os_path);
        while ($file = readdir($open)) {
          if ($file != ".." && $file != ".") {
            $fullpath = str_replace("//", "/", $os_path . $file);
            if (! in_array(strtolower($file), $hidden_os_paths)) {
              if (in_array(strtolower(substr($file, -4)), $ext_array) || in_array(strtolower(substr($file, -5)), $ext_array)) {
                $ld_path_files[$fullpath] = $file;
                $ld_webpaths[$fullpath] = $web_path_array[$os_path_index];
                $objects_count++;
              }
            }  //do not generalize lines above with lines below, otherwise other files not included in the ext_array will also be counted!
            if (is_dir($os_path."/".$file)) {
              if (! in_array(strtolower($file), $hidden_os_paths)) {
                $ld_path_dirs[$fullpath] = $file;
                $ld_webpaths[$fullpath] = $web_path_array[$os_path_index];
                $objects_count++;
              }
            }
          }
        }//do not generalize lines above, otherwise other files not included in the ext_array will also be counted!
      }
    }
    natcasesort($ld_path_files);
    natcasesort($ld_path_dirs);

if ($subpath) {
      echo "<b>".$subpath."</b><br/>\n";
      if (strrpos($subpath, "/")) $parent_path = substr($subpath, 0, strrpos($subpath, "/"));
    } else {
      echo $dintro . $dbody;
    }
    if ($objects_count > 0) {
      echo "(";
      if (count($ld_path_files)) {
        echo count($ld_path_files) . " file entr";
        echo (count($ld_path_files) != 1? "ies":"y") . (count($ld_path_dirs)? ", ":""); }
      if (count($ld_path_dirs)) echo count($ld_path_dirs) . " director" , (count($ld_path_dirs) != 1? "ies":"y");
      echo ")<br/>\n";
      if ($subpath) echo "Browse <a href=\"".$env_script.$dnode_name."_subpath=".$parent_path."#".$anchor."\">parent directory</a>.<br/>\n";
      echo "<table border=0 cellspacing=0 cellpadding=0>\n";
      echo "<tr valign=\"top\" bgcolor=\"#ddeedd\"><th>Date</th><th>Size</th><th>Name</th></tr>\n";
      if (count($ld_path_files)) echo "<tr valign=top><th colspan=3>Files</th></tr>";

$key = 0;
      foreach ($ld_path_files as $fullpath => $value) {
        $key++;
        echo "<tr valign=top>";
        echo "<td nowrap>".date ("Y/m/d H:i:s", filemtime($fullpath))."</td>";
        echo "<td nowrap>"; getXFileSize($fullpath); echo "</td>";
        $webpathprefix = $ld_webpaths[$fullpath] . "/" . $subpath . "/";
        $webpathprefix = str_replace("//", "/", $webpathprefix);
        echo "<td nowrap>$key. <a href=\"" . str_replace("//", "/", $webpathprefix . $value) . "\">$value</a></td>";
        echo "</tr>\n";
      }
      if (count($ld_path_files) != $objects_count) echo "<tr valign=top><th colspan=3>Sub-directories</th></tr>";
      $key = 0;
      while (list($fullpath, $value) = each($ld_path_dirs)) {
        $key++;
        echo "<tr valign=top>";
        echo "<td nowrap>".date("Y/m/d H:i:s", filemtime($fullpath))."</td>";
        echo "<td nowrap>"; getXFileSize($fullpath); echo "</td>";
        echo "<td nowrap>";
        if ($subpath) echo "$key. <a href=\"".$env_script.$dnode_name."_subpath=".$subpath."/".$value."#".$anchor."\">".$value."</a>";
        else echo "$key. <a href=\"".$env_script.$dnode_name."_subpath=".$value."#".$anchor."\">".$value."</a>";
        echo "</td></tr>\n";
      }
    }
    echo "</table>There ". ($objects_count != 1? "are":"is") . " currently " . $objects_count . " entr". ($objects_count != 1? "ies":"y") . " in this directory of the " . $dnode_title . ".<br/>\n";
    if ($subpath) echo "Browse <a href=\"".$env_script.$dnode_name."_subpath=".$parent_path."#".$anchor."\">parent directory</a>.<br/>\n";
  }
}
echo $dfooter;
?>

Shared Resources Library implementation

<?php
// -- Configurable settings begin
//Authored by Loloy D, version 2009 06 17 - USED FOR SHARED RESOURCES ONLY remove ext_array || true condition below for other file types!
$os_path = "I:\Shared"; //must not end in slash
$web_path = "/shared/"; //must end in slash
$ext_array = array('.3gp', '.asf', '.avi', '.awb', '.dat', '.flac', '.gif', '.htm', '.html', '.iso', '.jpeg', '.jpg', '.mkv', '.mov', '.mp3', '.mp4', '.mpeg', '.mpg', '.nfo', '.nrg', '.ogg', '.png', '.pps', '.ppt', '.ram', '.rar', '.swf', '.txt', '.wav', '.wma', '.wmv', '.zip'); //describes the types of filename extensions that will be treated as hard files
$hidden_os_paths = array("thumbs","resize"); //hidden from listings, administrative operating directories
$dnode_title = "LD TechnoLogics Shared Resources Library.";
$durl_path = "[node:url:path]";
$daccess_roles = array("authenticated user", "anonymous user");
$daccess_role_path = "private content";
$dintro = "The LD TechnoLogics Shared Resources Library is a collection of information technology related productivity tools.<br/>\n";
$dintro .= "<br/>\n";
$dteaser = "<a href=\"?q=". $durl_path . "\">Click here to zoom in and read more.</a>";
$dbody = "Warning: Generating this page completely may take some time.  You can alternatively <a href=\"/shared/\">explore the LD TechnoLogics Shared Resources Library manually</a> by <a href=\"/shared/\">clicking here</a>.<br/>\n";
$dbody .= "<br/>\n";
$dbody .= "You can also <a href=\"/sandbox/search_shared.php\">do a comprehensive search</a> for items inside only the library but this feature will be on beta stage forever.  Its output may not be guaranteed to give complete and reliable results.<br/>\n";
$dbody .= "<br/>\n";
$dbody .= "<form action=\"/sandbox/search_shared.php\" accept-charset=\"UTF-8\" method=\"get\" id=\"shared_search\">\n";
$dbody .= "Search the shared resources library (RegEx aware): <input type=\"text\" maxlength=\"128\" name=\"searchpattern\" id=\"searchpatternshared\" size=\"50\" value=\"\" title=\"Search the shared resources library\" />\n";
$dbody .= "<input type=\"submit\" name=\"searchpatternsubmit\" id=\"searchpatternsharedsubmit\" value=\"Search\" />\n";
$dbody .= "<input type=\"hidden\" name=\"act\" id=\"searchpatternsharedact\" value=\"search\" />\n";
$dbody .= "<input type=\"hidden\" name=\"sortby\" id=\"searchpatternsharedsortby\" value=\"name\" />\n";
$dbody .= "<input type=\"hidden\" name=\"regexpsearch\" id=\"searchpatternsharedregexpsearch\" value=\"true\" />\n";
$dbody .= "</form>\n";
$dbody .= "<strong>The use of Internet Explorer may fail in downloading items from herein.</strong>  You are hereby advised to <a href=\"/shared/firefox/\">use Firefox instead</a> when downloading file items.  \n";
$dbody .= "Optionally, you can <a href=\"/shared/FreeDownloadManager\">use a download manager like FreeDownloadManager to resume broken downloads</a> as these audio files tend to take some time to fully acquire.<br/>\n";
$dbody .= "<br/>\n";
$daccess_denied_msg = "This resource is available only to privileged users.<br/>\n";
$daccess_denied_path_msg = "This resource is available only to privileged users with access to " . $daccess_role_path . ".<br/>\n";
// -- Configurable settings end
$dnode_name = $durl_path . "_nn";
$anchor = $durl_path . "_a";
$env_script = $_SERVER["REQUEST_URI"];
global $user;
$subpath = "";

if (strpos($env_script, $durl_path) < 1) { //expose node intro only
  echo $dintro;
  if (count(array_intersect($daccess_roles, $user->roles)) > 0) { // was if (in_array($daccess_role . " user", $user->roles)) {
    echo $dteaser; }
  else {
    echo $daccess_denied_msg; } }
else { //expose zoomed in node body
  if (count(array_intersect($daccess_roles, $user->roles)) < 1) { //if general access is denied, was if (!in_array($daccess_role . " user", $user->roles)) {
    echo $dintro . $daccess_denied_msg; }
  elseif (strpos($subpath, "[" . $daccess_role_path . "]") && !in_array($daccess_role_path, $user->roles)) { //if path access is denied
    echo $dintro . $daccess_denied_path_msg; }
  else { //if access is approved
    require_once "sites/all/files/ld_file_functions.php";
    $subpath = "";
    $parent_path = "";
    echo "<a name=\"".$anchor."\"></a>";
    if (isset($_REQUEST[$dnode_name."_subpath"])) $subpath = $_REQUEST[$dnode_name."_subpath"];
    if (strpos($subpath, "..") > 0 || strpos($subpath,"<") > 0 || strpos($subpath,">") > 0 || strpos($subpath,"..") === 0 || strpos($subpath,"<") === 0 || strpos($subpath,">") === 0) $subpath = ""; //primitive security to prevent os path hacks
    $subpath = rtrim($subpath, "/\\");
    $subpath = ltrim($subpath, "/\\");
    if (!is_dir($os_path."/".$subpath)) $subpath = "";
    //$web_path = "";
    if ($subpath) {
      $web_path .= $subpath."/";
      if (strrpos($subpath, "/")) $parent_path = substr($subpath, 0, strrpos($subpath, "/")); }
    if (strpos($env_script, $dnode_name."_subpath=")) $env_script = substr($env_script, 0, strpos($env_script, $dnode_name."_subpath="));
    if (!strpos($env_script, "?")) { $env_script .= "?"; }
    elseif (substr($env_script, strlen($env_script) - 1) != "?") {
      $env_script .= "&";
      $env_script = str_replace("&&", "&", $env_script); }
    if ($subpath) $os_path .= "/".$subpath;
    $ld_path_objects = array();
    $ld_path_files = array();
    $ld_path_dirs = array();
    $open = opendir($os_path);
    while ($file = readdir($open)) {
      if ($file != ".." && $file != ".") {
        if (in_array(strtolower(substr($file, -4)), $ext_array) || in_array(strtolower(substr($file, -5)), $ext_array) || is_file($os_path."/".$file)) {
          array_push($ld_path_files, $file);
          array_push($ld_path_objects, $file); } //do not generalize this line, otherwise other files not included in the ext_array will also be counted!
        if (is_dir($os_path."/".$file)) {
          array_push($ld_path_dirs, $file); 
          array_push($ld_path_objects, $file); } } }//do not generalize this line, otherwise other files not included in the ext_array will also be counted!
    if ($subpath) {
      echo "<b>".$subpath."</b><br/>\n"; 
      if (strrpos($subpath, "/")) $parent_path = substr($subpath, 0, strrpos($subpath, "/")); }
    else {
      echo $dintro . $dbody; }
    if (count($ld_path_objects)) {
      echo "(";
      if (count($ld_path_files)) {
        echo count($ld_path_files) . " file entr";
        echo (count($ld_path_files) != 1? "ies":"y") . (count($ld_path_dirs)? ", ":""); }
      if (count($ld_path_dirs)) echo count($ld_path_dirs) . " director" , (count($ld_path_dirs) != 1? "ies":"y");
      echo ")<br/>\n";
      if ($subpath) echo "Browse <a href=\"".$env_script.$dnode_name."_subpath=".$parent_path."#".$anchor."\">parent directory</a>.<br/>\n";
      echo "<table border=0 cellspacing=0 cellpadding=0>\n";
      echo "<tr valign=\"top\" bgcolor=\"#ddeedd\"><td>Date</td><td>Size</td><td>Name</td></tr>\n";
      if (count($ld_path_files)) echo "<tr valign=top><td colspan=3>Files</td></tr>";
      while (list($xxxkeyxxx,$xxxvaluexxx) = each($ld_path_files)) {
        $xxxkeyindexxxx = $xxxkeyxxx + 1;
        $my_file = $os_path."//$xxxvaluexxx";  
        echo "<tr valign=top>";
        echo "<td nowrap>".date ("Y/m/d H:i:s", filemtime($my_file))."</td>";
        echo "<td nowrap>"; getXFileSize($my_file); echo "</td>";
        echo "<td nowrap>$xxxkeyindexxxx. <a href=\"$web_path$xxxvaluexxx\">$xxxvaluexxx</a></td>";
        echo "</tr>\n"; }
      if (count($ld_path_files) != count($ld_path_objects)) echo "<tr valign=top><td colspan=3>Sub-directories</td></tr>";
      while (list($xxxkeyxxx, $xxxvaluexxx) = each($ld_path_dirs)) {
        if (! in_array(strtolower($xxxvaluexxx), $hidden_os_paths)) {
          $my_file = $os_path."/$xxxvaluexxx";
          echo "<tr valign=top>";
          echo "<td nowrap>".date("Y/m/d H:i:s", filemtime($my_file))."</td>";
          echo "<td nowrap>"; getXFileSize($my_file); echo "</td>";
          echo "<td nowrap>";
          if ($subpath) { echo ($xxxkeyxxx + 1).". <a href=\"".$env_script.$dnode_name."_subpath=".$subpath."/".$xxxvaluexxx."#".$anchor."\">".$xxxvaluexxx."</a>"; }
          else { echo ($xxxkeyxxx + 1).". <a href=\"".$env_script.$dnode_name."_subpath=".$xxxvaluexxx."#".$anchor."\">".$xxxvaluexxx."</a>"; }
          echo "</td></tr>\n"; } } }
    $objects_total = count($ld_path_objects);
    echo "</table>There ". (count($ld_path_objects) != 1? "are":"is") . " currently ".count($ld_path_objects)." entr". (count($ld_path_objects) != 1? "ies":"y") . " in this directory of the " . $dnode_title . ".<br/>\n";
    if ($subpath) echo "Browse <a href=\"".$env_script.$dnode_name."_subpath=".$parent_path."#".$anchor."\">parent directory</a>.<br/>\n"; } }
?>

LD File Functions (sites/all/files/ld_file_functions..php, circa 2009)

<?php
function getXFileSize($strfilename) {
  if (file_exists($strfilename)) {
    $strsize = humanize_size(filesize($strfilename));
    if ($strsize > 0) echo($strsize); }
  return; }
function humanize_size($size) {
  for($si = 0; $size >= 1024; $size /= 1024, $si++);
  return round($size, 1).substr('bkMG', $si, 1); }
function slideshowformation_photosets_v2($startindex, $sscolor, $slideshow_default, $slideshow, $env_script, $imgindex) {
  //this line may not work when using older php versions so it has been disabled - global $sscolor, $slideshow_default, $slideshow, $env_script, $imgindex;
  echo "<script language=\"JavaScript\" type=\"text/JavaScript\"></script>"; }
?>

Virtual Resource Mapping System implementation

1. AuReLiSe (Audio Resource Library Service)

Drupal Shell Page

audio_resources_library.php

<?php
/** Extremely Important Implementation Notes
1. Use the single quote character to encapsulate target local filesystem objects in order to avoid pesky auto escape-sequencing inherent in double quote character encapsulators.
**/

date_default_timezone_set("Asia/Manila");

$echo_body = "";
$path_root = "/volume1/Audio";
$web_path = "audio/";
$entries = glob($path_root . '/*/*', GLOB_NOESCAPE);
if (count($entries)) {
  $entries_dir = array();
  $entries_file = array();
  $file_max_filesize_strlen = 1;
  foreach($entries as $entry) {
    if (is_dir($entry)) array_push($entries_dir, $entry);
    if (is_file($entry)) {
      array_push($entries_file, $entry);
      if (strlen(number_format(filesize($entry))) > $file_max_filesize_strlen) $file_max_filesize_strlen = strlen(number_format(filesize($entry)));
    }
  }
  $dir_max_index_strlen = strlen(count($entries_dir));
  $file_max_index_strlen = strlen(count($entries_file));      
  if (count($entries_dir)) { //part 1: list all dir entries        
    $echo_body .= "<strong>Directories</strong>";
    $echo_body .= "<table border='0' cellspacing='0' class='sortable' id='table-glob-star-dir'>\n";
    $echo_body .= "<tr>\n  <th class='disabledwrap'> </th>\n  <th class='disabledwrap'>Modified</th>\n  <th class='disabledwrap'>Type</th>\n  <th class='dwar'>Index</th>\n  <th>Name</th>\n</tr>\n";
    $list_index = 0;
    foreach($entries_dir as $entry_key => $entry) {
      $list_index++;
      $mimetype = "DIR";
      $name_elements = pathinfo($entry);
      $subpath_segments = explode('/', $name_elements['dirname']);
      $subpath = end($subpath_segments);
      $dir_validated = str_replace('//', '/', $web_path . $subpath);
      while (strpos($dir_validated, '//')) $dir_validated = str_replace('//', '/', $dir_validated);
      while (substr($dir_validated, -1) == '/') $dir_validated = substr($dir_validated, 0, -1);
      $echo_body .= "<tr>\n  <td>  </td>\n";
      $echo_body .= "  <td class='disabledwrap'>  " . date("Y/m/d H:i:s", filemtime($entry)) . "</td>\n";
      $echo_body .= "  <td>  " . $mimetype . "</td>\n";
      $echo_body .= "  <td class='dwar'>  " . str_pad($list_index, $dir_max_index_strlen, " ", STR_PAD_LEFT) . "</td>\n";
      $echo_body .= "  <td nowrap>  <a href=" . '"' . "vrmsx?d=" . $dir_validated . "/" . basename($entry) . '">' . basename($entry) . "</a></td>\n</tr>\n";
    }
    $echo_body .= "</table>";
  }
  if (count($entries_file)) { //part 2: list all file entries
    $echo_body .= "<strong>Files</strong>";
    $echo_body .= "<table border='0' cellspacing='0' class='sortable' id='table-glob-star-file'>\n";
    $echo_body .= "<tr>\n  <th class='disabledwrap'> </th>\n  <th class='dwar'>Size</th>\n  <th class='disabledwrap'>Modified</th>\n  <th class='disabledwrap'>Type</th>\n  <th class='dwar'>Index</th>\n  <th>Name</th>\n</tr>\n";
    $list_index = 0;
    foreach($entries_file as $entry_key => $entry) {
      //$mimetype = strtolower(end(explode('.', $entry)));
      $list_index++;
      $name_elements = pathinfo($entry);
      $mimetype = $name_elements['extension'];
      $subpath_segments = explode('/', $name_elements['dirname']);
      $subpath = end($subpath_segments);
      $dir_validated = str_replace("//", "/", $web_path . $subpath);
      while (strpos($dir_validated, '//')) $dir_validated = str_replace('//', '/', $dir_validated);
      while (substr($dir_validated, -1) == '/') $dir_validated = substr($dir_validated, 0, -1);
      $echo_body .= "<tr>\n    <td>  </td>\n";
      $echo_body .= "  <td class='dwar'>" . str_pad(number_format(filesize($entry)), $file_max_filesize_strlen, " ", STR_PAD_LEFT) . "</td>\n";
      $echo_body .= "  <td class='disabledwrap'>  " . date("Y/m/d H:i:s", filemtime($entry)) . "</td>\n";
      $echo_body .= "  <td>  " . $mimetype . "</td>\n";
      $echo_body .= "  <td class='dwar'>  " . str_pad($list_index, $file_max_index_strlen, " ", STR_PAD_LEFT) . "</td>\n";
      $echo_body .= "  <td class='disabledwrap'>  <a href=" . '"vrms_get_file.php?df=' . $dir_validated . "/" . basename($entry) . '">' . basename($entry) . "</a></td>\n</tr>\n";
    }
    $echo_body .= "</table>";
  }
  //$echo_header = "<html>\n<head>\n<title>LD TechnoLogics Aurelise Directory Listing of " . $dir_validated . "</title>\n";
  $echo_header = "<h2>LD TechnoLogics Aurelise Directory Listing</h2>";
  $echo_header .= "Aurelise stands for <strong>Au</strong>dio <strong>Re</strong>sources <strong>Li</strong>brary <strong>Se</strong>rvice.<br/>\n";
  $echo_header .= "<script type='text/javascript' src='/sortable.js'></script>\n<style type='text/css'>\n";
  //$echo_header .= "body {  background-image: url('/backgrounds/image_rotator.php');\n  background-repeat: no-repeat;\n  background-position: center;\n  font-family: Arial, Helvetica;\n  font-size: 80%;\n}\n";
  $echo_header .= "body {\n  font-family: Arial, Helvetica;\n  font-size: 80%;\n}\n";
  $echo_header .= "a { text-decoration: none; }\n";
  $echo_header .= "a img { border: 0; text-decoration: none; }\n";
  $echo_header .= "table.sortable {  border-spacing: 0;\n  border-collapse: collapse;\n  font-family: Arial, Helvetica;\n  font-size: 100%;\n}\n";
  $echo_header .= "table.sortable th, table.sortable td, table.sortable a {\n  padding: 2px 4px 2px 4px;\n  text-decoration: none;\n}\n";
  $echo_header .= "table.sortable th {\n  background-color: #008000;\n}\n";
  $echo_header .= "table.sortable th a {\n  border-width: 0px 1px 1px 1px;\n  font-family: Arial, Helvetica;\n  color: #ffffff;\n}\n";
  $echo_header .= "table.sortable th.disabledwrap {\n  overflow: hidden;\n  white-space: nowrap;\n}\n";
  $echo_header .= "table.sortable th.dwar {\n  overflow: hidden;\n  white-space: nowrap;\n  text-align: right;\n}\n";
  $echo_header .= "table.sortable th.alignright {\n  text-align: right;\n}\n";
  $echo_header .= "table.sortable td {\n  border-width: 0px 1px 0px 1px;\n  font-family: Arial, Helvetica;\n  color: #008000;\n}\n";
  $echo_header .= "table.sortable td.disabledwrap {\n  overflow: hidden;\n  white-space: nowrap;\n}\n";
  $echo_header .= "table.sortable td.dwar {\n  overflow: hidden;\n  white-space: nowrap;\n  text-align: right;\n}\n";
  $echo_header .= "table.sortable td.alignright {\n  text-align: right;\n}\n";
  $echo_header .= "table.sortable tr.odd td { background-color: #d2e2d2; vertical-align: text-top; }\n";
  $echo_header .= "table.sortable tr.even td { background-color: #e2f2e2; vertical-align: text-top; }\n";
  $echo_header .= "table.sortable tr.sortbottom td {\n  background-color: #ccffcc;\n  font-weight: bold;\n}\n";
  $echo_header .= "th, td {\n  font-family: Arial, Helvetica;\n  vertical-align: top;\n}\n";
  $echo_header .= "</style>\n";
  echo $echo_header . $echo_body;
  echo "<hr/>\n";
} else {
  echo $echo_body . "<br/>No enumerable items found.\n";
}
?>

2. ViReLiSe (Video Resource Library Service)

Drupal Shell Page

video_resources_library.php

<?php
/** Extremely Important Implementation Notes
1. Use the single quote character to encapsulate target local filesystem objects in order to avoid pesky auto escape-sequencing inherent in double quote character encapsulators.
**/

date_default_timezone_set("Asia/Manila");

$echo_body = "";
$path_root = "/volume1/Video/Movies";
$web_path = "video/Movies/";
$entries = glob($path_root . '/*/*', GLOB_NOESCAPE);
if (count($entries)) {
  $entries_dir = array();
  $entries_file = array();
  $file_max_filesize_strlen = 1;
  foreach($entries as $entry) {
    if (is_dir($entry)) array_push($entries_dir, $entry);
    if (is_file($entry)) {
      array_push($entries_file, $entry);
      if (strlen(number_format(filesize($entry))) > $file_max_filesize_strlen) $file_max_filesize_strlen = strlen(number_format(filesize($entry)));
    }
  }
  $dir_max_index_strlen = strlen(count($entries_dir));
  $file_max_index_strlen = strlen(count($entries_file));      
  if (count($entries_dir)) { //part 1: list all dir entries        
    $echo_body .= "<strong>Directories</strong>";
    $echo_body .= "<table border='0' cellspacing='0' class='sortable' id='table-glob-star-dir'>\n";
    $echo_body .= "<tr>\n  <th class='disabledwrap'> </th>\n  <th class='disabledwrap'>Modified</th>\n  <th class='disabledwrap'>Type</th>\n  <th class='dwar'>Index</th>\n  <th>Name</th>\n</tr>\n";
    $list_index = 0;
    foreach($entries_dir as $entry_key => $entry) {
      $list_index++;
      $mimetype = "DIR";
      $name_elements = pathinfo($entry);
      $subpath_segments = explode('/', $name_elements['dirname']);
      $subpath = end($subpath_segments);
      $dir_validated = str_replace('//', '/', $web_path . $subpath);
      while (strpos($dir_validated, '//')) $dir_validated = str_replace('//', '/', $dir_validated);
      while (substr($dir_validated, -1) == '/') $dir_validated = substr($dir_validated, 0, -1);
      $echo_body .= "<tr>\n  <td>  </td>\n";
      $echo_body .= "  <td class='disabledwrap'>  " . date("Y/m/d H:i:s", filemtime($entry)) . "</td>\n";
      $echo_body .= "  <td>  " . $mimetype . "</td>\n";
      $echo_body .= "  <td class='dwar'>  " . str_pad($list_index, $dir_max_index_strlen, " ", STR_PAD_LEFT) . "</td>\n";
      $echo_body .= "  <td nowrap>  <a href=" . '"' . "vrmsx?d=" . $dir_validated . "/" . basename($entry) . '">' . basename($entry) . "</a></td>\n</tr>\n";
    }
    $echo_body .= "</table>";
  }
  if (count($entries_file)) { //part 2: list all file entries
    $echo_body .= "<strong>Files</strong>";
    $echo_body .= "<table border='0' cellspacing='0' class='sortable' id='table-glob-star-file'>\n";
    $echo_body .= "<tr>\n  <th class='disabledwrap'> </th>\n  <th class='dwar'>Size</th>\n  <th class='disabledwrap'>Modified</th>\n  <th class='disabledwrap'>Type</th>\n  <th class='dwar'>Index</th>\n  <th>Name</th>\n</tr>\n";
    $list_index = 0;
    foreach($entries_file as $entry_key => $entry) {
      //$mimetype = strtolower(end(explode('.', $entry)));
      $list_index++;
      $name_elements = pathinfo($entry);
      $mimetype = $name_elements['extension'];
      $subpath_segments = explode('/', $name_elements['dirname']);
      $subpath = end($subpath_segments);
      $dir_validated = str_replace("//", "/", $web_path . $subpath);
      while (strpos($dir_validated, '//')) $dir_validated = str_replace('//', '/', $dir_validated);
      while (substr($dir_validated, -1) == '/') $dir_validated = substr($dir_validated, 0, -1);
      $echo_body .= "<tr>\n    <td>  </td>\n";
      $echo_body .= "  <td class='dwar'>" . str_pad(number_format(filesize($entry)), $file_max_filesize_strlen, " ", STR_PAD_LEFT) . "</td>\n";
      $echo_body .= "  <td class='disabledwrap'>  " . date("Y/m/d H:i:s", filemtime($entry)) . "</td>\n";
      $echo_body .= "  <td>  " . $mimetype . "</td>\n";
      $echo_body .= "  <td class='dwar'>  " . str_pad($list_index, $file_max_index_strlen, " ", STR_PAD_LEFT) . "</td>\n";
      $echo_body .= "  <td class='disabledwrap'>  <a href=" . '"vrms_get_file.php?df=' . $dir_validated . "/" . basename($entry) . '">' . basename($entry) . "</a></td>\n</tr>\n";
    }
    $echo_body .= "</table>";
  }
  //$echo_header = "<html>\n<head>\n<title>LD TechnoLogics Aurelise Directory Listing of " . $dir_validated . "</title>\n";
  $echo_header = "<h2>LD TechnoLogics Virelise Directory Listing</h2>";
  $echo_header .= "Virelise stands for <strong>Vi</strong>deo <strong>Re</strong>sources <strong>Li</strong>brary <strong>Se</strong>rvice.<br/>\n";
  $echo_header .= "<script type='text/javascript' src='/sortable.js'></script>\n<style type='text/css'>\n";
  //$echo_header .= "body {  background-image: url('/backgrounds/image_rotator.php');\n  background-repeat: no-repeat;\n  background-position: center;\n  font-family: Arial, Helvetica;\n  font-size: 80%;\n}\n";
  $echo_header .= "body {\n  font-family: Arial, Helvetica;\n  font-size: 80%;\n}\n";
  $echo_header .= "a { text-decoration: none; }\n";
  $echo_header .= "a img { border: 0; text-decoration: none; }\n";
  $echo_header .= "table.sortable {  border-spacing: 0;\n  border-collapse: collapse;\n  font-family: Arial, Helvetica;\n  font-size: 100%;\n}\n";
  $echo_header .= "table.sortable th, table.sortable td, table.sortable a {\n  padding: 2px 4px 2px 4px;\n  text-decoration: none;\n}\n";
  $echo_header .= "table.sortable th {\n  background-color: #008000;\n}\n";
  $echo_header .= "table.sortable th a {\n  border-width: 0px 1px 1px 1px;\n  font-family: Arial, Helvetica;\n  color: #ffffff;\n}\n";
  $echo_header .= "table.sortable th.disabledwrap {\n  overflow: hidden;\n  white-space: nowrap;\n}\n";
  $echo_header .= "table.sortable th.dwar {\n  overflow: hidden;\n  white-space: nowrap;\n  text-align: right;\n}\n";
  $echo_header .= "table.sortable th.alignright {\n  text-align: right;\n}\n";
  $echo_header .= "table.sortable td {\n  border-width: 0px 1px 0px 1px;\n  font-family: Arial, Helvetica;\n  color: #008000;\n}\n";
  $echo_header .= "table.sortable td.disabledwrap {\n  overflow: hidden;\n  white-space: nowrap;\n}\n";
  $echo_header .= "table.sortable td.dwar {\n  overflow: hidden;\n  white-space: nowrap;\n  text-align: right;\n}\n";
  $echo_header .= "table.sortable td.alignright {\n  text-align: right;\n}\n";
  $echo_header .= "table.sortable tr.odd td { background-color: #d2e2d2; vertical-align: text-top; }\n";
  $echo_header .= "table.sortable tr.even td { background-color: #e2f2e2; vertical-align: text-top; }\n";
  $echo_header .= "table.sortable tr.sortbottom td {\n  background-color: #ccffcc;\n  font-weight: bold;\n}\n";
  $echo_header .= "th, td {\n  font-family: Arial, Helvetica;\n  vertical-align: top;\n}\n";
  $echo_header .= "</style>\n";
  echo $echo_header . $echo_body;
  echo "<hr/>\n";
} else {
  echo $echo_body . "<br/>No enumerable items found.\n";
}
?>

3. VRMS (Virtual Resource Mapping System) in Drupal

Drupal Shell Page

vrms_in_drupal.php

<?php
/** Extremely Important Implementation Notes
1. In order to support virtually unlimited file sizes, the final stage file object delivery is incompatible with Drupal's hard handling of output buffering.  Consequently, that PHP code should therefore not reside in any Drupal nugget container.
2. Use the single quote character to encapsulate target local filesystem objects in order to avoid pesky auto escape-sequencing inherent in double quote character encapsulators.
3. Unimplemented yet: For Drupal security tie-in, explore session cookie handling.  While /vrms?f= is executed in Drupal, print its session cookie and Drupal username in a session-cookies file table.  Then pass the query string to /vrms.php.  In vrms.php, if the session cookie matches from the Drupal session and the session username matches with that from the session-cookies file table, the authorization to deliver the file becomes valid.
**/
date_default_timezone_set("Asia/Manila");

$vrms_maps_file = "vrms_maps.php"; //re-configurable settings file that contains the authoritative maps and security policies.  The variables $vrms_dir_table and $vrms_access_table should be defined and populated from within this file
require_once $vrms_maps_file;
$vrms_info = "This Virtual Resource Mapping System (VRMS) is a web-based resource-abstraction software+plug-in system developed by the LD TechnoLogics Research and Development Team that works like URL-Rewriting, wherein the site administrator can `hide`, `obfuscate` and/or `secure` the actual location of the requested resource from the web user.  One of the reasons for employing VRMS is to make any specific resource from the server side categorically but safely available to the web user without exposing the web server-accessible filesystem in a more straightforward manner.  The VRMS utilizes a resource-location mapping table in order to functionally operate.<br></br>VRMS is an open-source development initiative project of the LD TechnoLogics Research and Development Team.\n";
$display_vrms_info = true;

if (isset($_GET["df"]) || isset($_GET["f"])) {
  $file_requested = "";
  $type_requested = "";
  if (isset($_GET["df"])) {
    $file_requested = htmlentities($_GET["df"]);
    $type_requested = "df";
  } elseif (isset($_GET["f"])) {
    $file_requested = htmlentities($_GET["f"]);
    $type_requested = "f";
  }
  if ($file_requested != "") {
    $access_granted = false;
    if (isset($vrms_access_table[$file_requested])) {
      if (count(array_intersect($vrms_access_table[$file_requested], $GLOBALS["user"]->roles)) > 0) $access_granted = true;
    } else {
      $access_granted = true;
    }
    if ($access_granted) {
      $_SESSION['vrms_approved'] = true;
      $session_name = session_name();
/**
  echo "session name " . session_name() . "<br></br>";
  echo "session approval " . $_SESSION['vrms_approved'];
  http_redirect("/vrms.php?df=" . $file_requested);
  echo "<script>\n";
  echo "  window.location.assign('/vrms.php?f=" . $_GET["f"] . "');";
  echo "</script>\n";
**/  
      echo "Downloading: " . basename($file_requested);
      echo '<br/><br/><a href="/vrms.php?' . $type_requested ."=" . $file_requested . "&auth_key=" . $session_name . "&auth_value=" . $_COOKIE[$session_name] . '">[Continue]</a>';
    } else {
      include("vrms_access_denied.php");
    }
  } else {
      echo "<h2>Missing Parameter</h2>An expected parameter value is missing.";
  }
  $display_vrms_info = false;
}

//setcookie("vrms_session_username", $GLOBALS["user"]->name);
//setcookie("vrms_session_username", $GLOBALS["user"]->name);

$admin_requested = "";
if (isset($_REQUEST["admin"]) || isset($_REQUEST["a"])) {
  if (count(array_intersect(array("administrator"), $GLOBALS["user"]->roles)) > 0) {
    if (isset($_REQUEST["admin"])) $admin_requested = htmlentities($_REQUEST["admin"]);
    else if (isset($_REQUEST["a"])) $admin_requested = htmlentities($_REQUEST["a"]);
    if (stripos($admin_requested, "phpinfo") !== FALSE) phpinfo();
    if (stripos($admin_requested, "globals") !== FALSE) {
      echo "<pre>";
      print_r($GLOBALS);
      echo "</pre>";
    }
    if (stripos($admin_requested, "dir_maps") !== FALSE) {
      echo "<pre>";
      print_r($vrms_dir_table);
      echo "</pre>";
    }
    if (stripos($admin_requested, "help") !== FALSE) {
      echo "<h3>Accepted values for variable a</h4>";
      echo "<dl><dt><a href='vrms?a=dir_maps'>dir_maps</a></dt><dd>Show virtual directory maps</dd></dl>";
      echo "<dl><dt><a href='vrms?a=dir_mappings_edit'>dir_mappings_edit</a></dt><dd>Edit virtual directory maps</dd></dl>";
      echo "<dl><dt><a href='vrms?a=globals'>globals</a></dt><dd>Show global variables available for programmatic consideration</dd></dl>";
      echo "<dl><dt><a href='vrms?a=help'>help</a></dt><dd>Show this help information</dd></dl>";
      echo "<dl><dt><a href='vrms?a=info'>info</a></dt><dd>Display VRMS information</dd></dl>";
      echo "<dl><dt><a href='vrms?a=maps'>maps</a></dt><dd>Show all pre-configured maps</dd></dl>";
      echo "<dl><dt><a href='vrms?a=phpinfo'>phpinfo</a></dt><dd>Shows PHP environment details and information</dd></dl>";
      echo "<dl><dt>a</dt><dd>dir_maps</dd><dd>globals</dd><dd>help</dd><dd>info</dd><dd>phpinfo</dd></dl>";
      echo "<h3>Accepted values for variable d</h3>";
      echo "<dl><dt>d</dt></dl>";
      echo "<h3>Accepted values for variable f</h3>";
      echo "<dl><dt>f</dt></dl>";
      echo "To add to a mapping record, specify values for the variables <strong>add_token</strong>, <strong>add_value</strong> and <strong>add_type</strong>.";
      echo "<hr/>";
    }
    if (stripos($admin_requested, "info") !== FALSE) echo $vrms_info;
    if (stripos($admin_requested, "maps") !== FALSE) {
      echo $vrms_info;
      echo "<pre>";
      echo "vrms_dir_table = "; print_r($vrms_dir_table);
      echo "<br/>vrms_files_table = "; print_r($vrms_files_table);
      echo "<br/>vrms_access_table = "; print_r($vrms_access_table);
      echo "</pre>";
    }
    if (stripos($admin_requested, "dir_mappings_edit") !== FALSE) {
      echo "<form method='post' action='vrms?a=dir_mappings_edit'>";
      echo "<table>\n";
      echo "<tr><th>VRMS Key</th><th>VRMS Value</th></tr>\n";
      $vrms_token_index = 0;
      foreach($vrms_dir_table as $vrms_token_key => $vrms_token_value) {
        $vrms_token_index++;
        echo "<tr><td><input type='text' size='25' autocomplete='on' name='vrms_key_" . $vrms_token_index . "' value='" . $vrms_token_key . "' /></td>";
        echo "<td><input type='text' size='80' autocomplete='on' name='vrms_value_" . $vrms_token_index . "' value='" . $vrms_token_value . "' /></td></tr>";
      }
      $vrms_token_index++;
      echo "<tr><td><input type='text' size='25' autocomplete='on' name='vrms_key_" . $vrms_token_index ."'  value='' /></td>";
      echo "<td><input type='text' size='80' autocomplete='on' name='vrms_value_" . $vrms_token_index ."' value='' /></td></tr>";
      $vrms_token_index++;
      echo "<tr><td><input type='text' size='25' autocomplete='on' name='vrms_key_" . $vrms_token_index ."' value='' /></td>";
      echo "<td><input type='text' size='80' autocomplete='on' name='vrms_value_" . $vrms_token_index ."' value='' /></td></tr>";
      $vrms_token_index++;
      echo "<tr><td><input type='text' size='25' autocomplete='on' name='vrms_key_" . $vrms_token_index ."' value='' /></td>";
      echo "<td><input type='text' size='80' autocomplete='on' name='vrms_value_" . $vrms_token_index ."' value='' /></td></tr>";
      echo "<tr><td colspan='2'><input type='submit' value='Apply Changes' /></td></tr>";
      echo "</table></form>\n";
    }
    $display_vrms_info = false;
  }
}
/*
$add_token = "";
$add_value = "";
$add_type = "";
*/
$dir_requested = "";
if (isset($_GET["d"])) $dir_requested = htmlentities($_GET["d"]);
if (stripos($dir_requested, '/..')) $dir_requested = "";
if (stripos($dir_requested, '\..')) $dir_requested = "";

if ($dir_requested != "") {
  while (strpos($dir_requested, '//')) $dir_requested = str_replace('//', '/', $dir_requested);
  while (substr($dir_requested, -1) == '/') $dir_requested = substr($dir_requested, 0, -1);
  $dir_requested_root = $dir_requested;
  $dir_requested_array = explode("/", $dir_requested);
  if (stripos($dir_requested, '/') > 1) $dir_requested_root = reset($dir_requested_array);
  $access_granted = false;
  if (isset($vrms_access_table[$dir_requested_root])) {
    if (count(array_intersect($vrms_access_table[$dir_requested_root], $GLOBALS["user"]->roles)) > 0) $access_granted = true;
  } else {
    $access_granted = true;    
  }
  if (isset($vrms_dir_table[$dir_requested_root]) && $access_granted) {
    $target = $vrms_dir_table[$dir_requested_root];
    if (count($dir_requested_array)) {
      foreach($dir_requested_array as $array_key => $subdir) {
        if ($array_key > 0) $target .= "/" . $subdir;
      }
    }
    $dir_validated = "";
    $vrms_body = "<h2>VRMS Directory Listing";
    if (is_dir($target) && file_exists($target)) {
      $dir_validated = $dir_requested;
      $vrms_body .= " of "" . $dir_validated . """;
    }
    $vrms_body .= "</h2>\n";
    if (count($dir_requested_array) > 1) {
      $vrms_body .= "Go up to ";
      $dir_segment = "";
      foreach($dir_requested_array as $array_key => $subdir) {
        if ($array_key < count($dir_requested_array) - 1) {
          if ($array_key > 0) $dir_segment .= "/" . $subdir; else $dir_segment .= $subdir; 
          if ($array_key > 0) $vrms_body .= " / ";
          $vrms_body .= "<a href='/vrmsx?d=" . $dir_segment . "'>" . $subdir . "</a>";
        }
      }          
      $vrms_body .= "<br>\n";
    }
    $target = preg_replace('/(\*|\?|\[)/', '[$1]', $target);
    $entries = glob($target . '/*', GLOB_NOESCAPE);
    if (count($entries)) {
      $entries_dir = array();
      $entries_file = array();
      $file_max_filesize_strlen = 1;
      foreach($entries as $entry) {
        if (is_dir($entry)) array_push($entries_dir, $entry);
        if (is_file($entry)) {
          array_push($entries_file, $entry);
          if (strlen(number_format(filesize($entry))) > $file_max_filesize_strlen) $file_max_filesize_strlen = strlen(number_format(filesize($entry)));
        }
      }
      $dir_max_index_strlen = strlen(count($entries_dir));
      $file_max_index_strlen = strlen(count($entries_file));      
      if (count($entries_dir)) { //part 1: list all dir entries        
        $vrms_body .= "<strong>Directories</strong>";
        $vrms_body .= "<table border='0' cellspacing='0' class='sortable' id='table-glob-star-dir'>\n";
        $vrms_body .= "<tr>\n    <th class='disabledwrap'> </th>\n    <th class='disabledwrap'>Modified</th>\n    <th class='disabledwrap'>Type</th>\n    <th class='dwar'>Index</th>\n    <th>Name</th>\n</tr>\n";
        $list_index = 0;
        foreach($entries_dir as $entry_key => $entry) {
          $mimetype = "DIR";
          $list_index++;
          $vrms_body .= "<tr>\n    <td>  </td>\n    <td class='disabledwrap'>  " . date("Y/m/d H:i:s", filemtime($entry)) . "</td>\n    <td>  " . $mimetype . "</td>\n    <td class='dwar'>  " . str_pad($list_index, $dir_max_index_strlen, " ", STR_PAD_LEFT) . "</td>\n    <td nowrap>  <a href=" . '"/vrmsx?d=' . $dir_validated . "/" . basename($entry) . '">' . basename($entry) . "</a></td>\n</tr>\n";
        }
        $vrms_body .= "</table>";
      }
      if (count($entries_file)) { //part 2: list all file entries
        $vrms_body .= "<strong>Files</strong>";
        $vrms_body .= "<table border='0' cellspacing='0' class='sortable' id='table-glob-star-file'>\n";
        $vrms_body .= "<tr>\n    <th class='disabledwrap'> </th>\n    <th class='dwar'>Size</th>\n    <th class='disabledwrap'>Modified</th>\n    <th class='disabledwrap'>Type</th>\n    <th class='dwar'>Index</th>\n    <th>Name</th>\n</tr>\n";
        $list_index = 0;
        foreach($entries_file as $entry_key => $entry) {
          //$mimetype = strtolower(end(explode('.', $entry)));
          //$name_elements = explode('.', $entry);
          //$mimetype = strtolower(end($name_elements));
          //if (strlen($mimetype) > 5) $mimetype = "Undetected";
          $mimetype = pathinfo($entry, PATHINFO_EXTENSION);
          $list_index++;
          $vrms_body .= "<tr>\n  <td>  </td>\n";
          //$vrms_body .= "<tr>\n  <td><a href='/vrms_get_file.php?df=" . $dir_validated . '/' . basename($entry1) . "'>" . basename($entry1) . "</a></td>\n";
          $vrms_body .= "  <td class='dwar'>" . str_pad(number_format(filesize($entry)), $file_max_filesize_strlen, " ", STR_PAD_LEFT) . "</td>\n";
          $vrms_body .= "  <td class='disabledwrap'>  " . date("Y/m/d H:i:s", filemtime($entry)) . "</td>\n";
          $vrms_body .= "  <td>  " . $mimetype . "</td>\n";
          $vrms_body .= "  <td class='dwar'>  " . str_pad($list_index, $file_max_index_strlen, " ", STR_PAD_LEFT) . "</td>\n";
          $entry_link = $entry;
          $catch_replacement = array("#" => "x0hb0x");
          foreach($catch_replacement as $catch => $replacement) {
            if (strpos($entry, $catch)) $entry_link = str_replace($catch, $replacement, $entry);
          }
          $vrms_body .= "  <td class='disabledwrap'>  <a href=" . '"/vrms_get_file.php?df=' . $dir_validated . "/" . basename($entry_link) . '">' . basename($entry) . "</a></td>\n</tr>\n";
        }
        $vrms_body .= "</table>";
      }
      //$vrms_header = "<html>\n<head>\n<title>LD TechnoLogics RnD Directory Listing of " . $dir_validated . "</title>\n";
      $vrms_header = "";
      $vrms_header .= "<script type='text/javascript' src='/sortable.js'></script>\n<style type='text/css'>\n";
      //$vrms_header .= "body {  background-image: url('/backgrounds/image_rotator.php');\n  background-repeat: no-repeat;\n  background-position: center;\n  font-family: Arial, Helvetica;\n  font-size: 80%;\n}\n";
      $vrms_header .= "body {\n  font-family: Arial, Helvetica;\n  font-size: 80%;\n}\n";
      $vrms_header .= "a { text-decoration: none; }\n";
      $vrms_header .= "a img { border: 0; text-decoration: none; }\n";
      $vrms_header .= "table.sortable {  border-spacing: 0;\n  border-collapse: collapse;\n  font-family: Arial, Helvetica;\n  font-size: 80%;\n}\n";
      $vrms_header .= "table.sortable th, table.sortable td, table.sortable a {\n  padding: 2px 4px 2px 4px;\n  text-decoration: none;\n}\n";
      $vrms_header .= "table.sortable th {\n  border-width: 0px 1px 1px 1px;\n  background-color: #008000;\n  font-family: Arial, Helvetica;\n}\n";
      $vrms_header .= "table.sortable th.disabledwrap {\n  overflow: hidden;\n  white-space: nowrap;\n}\n";
      $vrms_header .= "table.sortable th.dwar {\n  overflow: hidden;\n  white-space: nowrap;\n  text-align: right;\n}\n";
      $vrms_header .= "table.sortable th.alignright {\n  text-align: right;\n}\n";
      $vrms_header .= "table.sortable td {\n  border-width: 0px 1px 0px 1px;\n  font-family: Arial, Helvetica;\n}\n";      
      $vrms_header .= "table.sortable td.disabledwrap {\n  overflow: hidden;\n  white-space: nowrap;\n}\n";
      $vrms_header .= "table.sortable td.dwar {\n  overflow: hidden;\n  white-space: nowrap;\n  text-align: right;\n}\n";
      $vrms_header .= "table.sortable td.alignright {\n  text-align: right;\n}\n";
      $vrms_header .= "table.sortable tr.odd td { background-color: #e0e0e0; vertical-align: text-top; }\n";
      $vrms_header .= "table.sortable tr.even td { background-color: #d0d0d0; vertical-align: text-top; }\n";
      $vrms_header .= "table.sortable tr.sortbottom td {\n  background-color: #ccffcc;\n  font-weight: bold;\n}\n";
      $vrms_header .= "th, td {\n  font-family: Arial, Helvetica;\n  vertical-align: top;\n}\n";
      $vrms_header .= "</style>\n";
      echo $vrms_header . $vrms_body;
      echo "<hr/>\n";
    } else {
      echo $vrms_body . "<br/>No enumerable items found.\n";
    }
  } else {
    include("vrms_access_denied.php");
  }
  $display_vrms_info = false;
}

if ($display_vrms_info) echo $vrms_info;

?>

5. VRMS (Virtual Resource Mapping System) Maps

vrms_maps.php

6. VRMS (Virtual Resource Mapping System) File Getter

vrms_get_file.php

<?php
//Warning: This file has no security access checking layer!
if (substr($_SERVER['HTTP_REFERER'], 0, 4) == 'http') {
  //first check for df in request
  $df = "";
  if (isset($_GET["df"])) {
    $df = htmlentities($_GET["df"]);
    $catch_replacement = array("#" => "x0hb0x");
    foreach($catch_replacement as $catch => $replacement) {
      if (strpos($df, $replacement)) $df = str_replace($replacement, $catch, $df);
    }
    include_once('vrms_maps.php');
    $df_components = explode("/", $df);
    if (array_key_exists($df_components[0], $vrms_dir_table)) {
      $df_components[0] = $vrms_dir_table[$df_components[0]];
      $path_to_local_file = implode("/", $df_components);
//echo "The local file appears to be " . $path_to_local_file;
      if (is_readable($path_to_local_file)) {
        header('Content-Description: File Transfer');
        header('Content-Type: application/octet-stream');
        header('Content-Disposition: attachment; filename=' . preg_replace("/ /", "_", basename($path_to_local_file)));
        header('Content-Transfer-Encoding: binary');
        header('Expires: 0');
        header('Cache-Control: must-revalidate, post-check=0, pre-check=0');
        header('Pragma: public');
        header('Content-Length: ' . filesize($path_to_local_file));
        ob_clean();
        ob_end_clean();
        flush();
        @readfile($path_to_local_file);
        exit;
      } else {
        echo "<h2>Object Unreachable</h2>The specified target file is currently unreachable - " . basename($path_to_local_file) . ".";
      }
    } else {
      echo "<h2>Object Not Found</h2>The specified object does not exist.";
    }
  } else {
    echo "<h2>Unknown Directive</h2>There is nothing to do.";
  }
} else { //no referer means hot linked
  echo "<h2>Access Denied</h2>You currently lack the sufficient access credentials to authoritatively obtain this resource.  Actually, hot-linking is not permissible on this web server.\n";
}
?>

7. VRMS (Virtual Resource Mapping System) Core

vrms.php

<?php
session_start();
$vrms_access_granted = false;
$vrms_maps_file = "vrms_maps.php"; //re-configurable settings file that contains the authoritative maps and security policies.  The variables $vrms_dir_table and $vrms_access_table should be defined and populated from within this file
require_once $vrms_maps_file;
$vrms_info = "This Virtual Resource Mapping System (VRMS) is a web-based resource-abstraction software+plug-in system developed by the LD TechnoLogics Research and Development Team that works like URL-Rewriting, wherein the site administrator can `hide`, `obfuscate` and/or `secure` the actual location of the requested resource from the web user.  One of the reasons for employing VRMS is to make any specific resource from the server side categorically but safely available to the web user without exposing the web server-accessible filesystem in a more straightforward manner.  The VRMS utilizes a resource-location mapping table in order to functionally operate.\n";

//Extremely Important: use single quote to encapsulate target local filesystem object to remove pesky auto escape-sequencing
//In order to support a virtually unlimited file size, this virtual resource mapping system final stage file delivery is incompatible with Drupal's hard handling of output buffering.  This PHP code should therefore not reside in any Drupal nugget container.

//echo "file requested is now " . $file_requested;

//check to see if it's ok to give the file by checking the security access policy table and then the session table
if (isset($_GET["auth_key"]) && isset($_GET["auth_value"])) {
  if (!isset($_SESSION[$_GET["auth_key"]])) {
    if ($_COOKIE[$_GET["auth_key"]] == $_GET["auth_value"]) $vrms_access_granted = true;
  } elseif ($_SESSION[$session_name] == $_GET["auth_key"]) {
    $vrms_access_granted = true;
  }
}

//echo "<pre>";
//print_r($GLOBALS);
//print_r($_SESSION);
//print_r($_COOKIE);
//echo "</pre>";

$file_requested = "";
if (isset($_GET["f"])) {
  $file_requested = htmlentities($_GET["f"]);
  if (isset($vrms_files_table[$file_requested])) $file_requested = $vrms_files_table[$file_requested];
}

if (isset($_GET["df"])) {
  $file_requested = htmlentities($_GET["df"]);
  $filename_split = explode("/", $file_requested);
  $file_requested = $vrms_dir_table[$filename_split[0]];
  foreach($filename_split as $name_chunk_index => $name_chunk) {
    if ($name_chunk_index > 0) $file_requested .= "/" . $name_chunk;
  }
  //echo $file_requested;
}

if ($vrms_access_granted) {
  $vrms_target_file = $file_requested;
  if (is_readable($vrms_target_file)) {
    header('Content-Description: File Transfer');
    header('Content-Type: application/octet-stream');
    header('Content-Disposition: attachment; filename=' . preg_replace("/ /", "_", basename($vrms_target_file)));
    header('Content-Transfer-Encoding: binary');
    header('Expires: 0');
    header('Cache-Control: must-revalidate, post-check=0, pre-check=0');
    header('Pragma: public');
    header('Content-Length: ' . filesize($vrms_target_file));
    ob_clean();
    ob_end_clean();
    flush();
    readfile($vrms_target_file);
    exit;
  } else {
    echo "<h2>Object Unreachable</h2>The specified target file is currently unreachable - " . basename($vrms_target_file) . ".";
  }
} else {
  echo "<h2>Access Denied</h2>You currently lack the sufficient access credentials to authoritatively obtain this resource.\n";
}

/**
if (count(array_intersect($daccess_roles, $user->roles)) > 0) { // was if (in_array($daccess_role . " user", $user->roles)) {
  echo "You are allowed to download.";
  $file = "I:/Shared/Shared Unsorted/php/php_manual_en5.2.2.chm";
  header('Content-Description: File Transfer');
  header('Content-Type: application/octet-stream');
  header('Content-Disposition: attachment; filename='.basename($file));
  header('Content-Transfer-Encoding: binary');
  header('Expires: 0');
  header('Cache-Control: must-revalidate, post-check=0, pre-check=0');
  header('Pragma: public');
  header('Content-Length: ' . filesize($file));
  ob_clean();
  flush();
  @readfile($file);
  exit;
}
else {
  echo "You are not allowed to download.";
}
**/
?>

8. VRMS (Virtual Resource Mapping System) Access Denied

vrms_access_denied.php

File:

Attachment	Size
arrow-down.gif	73 bytes
arrow-none.gif	71 bytes
arrow-up.gif	73 bytes
audio_resources_library.php.txt	7.41 KB
sortable.js.txt	8.75 KB
video_movies_resources_library.php.txt	7.42 KB
vrms.php.txt	4.15 KB
vrms_access_denied.php.txt	143 bytes
vrms_get_file.php.txt	1.97 KB
vrms_in_drupal.php.txt	16.59 KB
vrms_maps.php.txt	540 bytes

Tags:

Code

Main menu

You are here

Tags: