{

global $file_base_path, $file_statuses, $txp_user, $event;

pagetop(gTxt('tab_file'), $message);

extract(gpsa(array(

'page',

'sort',

'dir',

'crit',

'search_method',

)));

if ($sort === '') {

$sort = get_pref('file_sort_column', 'filename');

} else {

if (!in_array($sort, array('id', 'category', 'title', 'date', 'modified', 'downloads', 'author', 'size'))) {

$sort = 'filename';

}

set_pref('file_sort_column', $sort, 'file', PREF_HIDDEN, '', 0, PREF_PRIVATE);

}

if ($dir === '') {

$dir = get_pref('file_sort_dir', 'asc');

} else {

$dir = ($dir == 'asc') ? "asc" : "desc";

set_pref('file_sort_dir', $dir, 'file', PREF_HIDDEN, '', 0, PREF_PRIVATE);

}

switch ($sort) {

case 'id':

$sort_sql = "txp_file.id $dir";

break;

case 'date':

$sort_sql = "txp_file.created $dir, txp_file.id ASC";

break;

case 'modified':

$sort_sql = "txp_file.modified $dir, txp_file.id ASC";

break;

case 'category':

$sort_sql = "txp_category.title $dir, txp_file.filename DESC";

break;

case 'title':

$sort_sql = "txp_file.title $dir, txp_file.filename DESC";

break;

case 'size':

$sort_sql = "txp_file.size $dir, txp_file.id ASC";

break;

case 'downloads':

$sort_sql = "txp_file.downloads $dir, txp_file.filename DESC";

break;

case 'author':

$sort_sql = "txp_users.RealName $dir, txp_file.id ASC";

break;

default:

$sort = 'filename';

$sort_sql = "txp_file.filename $dir";

break;

}

$switch_dir = ($dir == 'desc') ? 'asc' : 'desc';

$search = new Filter(

$event,

array(

'id' => array(

'column' => 'txp_file.id',

'label' => gTxt('id'),

'type' => 'integer',

),

'filename' => array(

'column' => 'txp_file.filename',

'label' => gTxt('name'),

),

'title' => array(

'column' => 'txp_file.title',

'label' => gTxt('title'),

),

'description' => array(

'column' => 'txp_file.description',

'label' => gTxt('description'),

),

'category' => array(

'column' => array('txp_file.category', 'txp_category.title'),

'label' => gTxt('category'),

),

'status' => array(

'column' => array('txp_file.status'),

'label' => gTxt('status'),

'type' => 'boolean',

),

'author' => array(

'column' => array('txp_file.author', 'txp_users.RealName'),

'label' => gTxt('author'),

),

'created' => array(

'column' => array('txp_file.created'),

'label' => gTxt('date'),

'options' => array('case_sensitive' => true),

),

'modified' => array(

'column' => array('txp_file.modified'),

'label' => gTxt('modified'),

'options' => array('case_sensitive' => true),

),

)

);

$search->setAliases('status', $file_statuses);

list($criteria, $crit, $search_method) = $search->getFilter(array('id' => array('can_list' => true)));

$search_render_options = array('placeholder' => 'search_files');

$sql_from =

safe_pfx_j('txp_file') . "

LEFT JOIN " . safe_pfx_j('txp_category') . " ON txp_category.name = txp_file.category AND txp_category.type = 'file'

LEFT JOIN " . safe_pfx_j('txp_users') . " ON txp_users.name = txp_file.author";

if ($crit === '') {

$total = safe_count('txp_file', $criteria);

} else {

$total = getThing("SELECT COUNT(*) FROM $sql_from WHERE $criteria");

}

$searchBlock =

n . tag(

$search->renderForm('file_list', $search_render_options),

'div', array(

'class' => 'txp-layout-4col-3span',

'id' => $event . '_control',

'style' => $total || $crit === '' ? false : 'display:none',

)

);

$createBlock = array();

if (!is_dir($file_base_path) || !is_writeable($file_base_path)) {

$createBlock[] =

graf(

span(null, array('class' => 'ui-icon ui-icon-alert')) . ' ' .

gTxt('file_dir_not_writeable', array('{filedir}' => $file_base_path)),

array('class' => 'alert-block warning')

);

} elseif (has_privs('file.edit.own')) {

$categories = event_category_popup('file', '', 'file_category');

$createBlock[] =

n . tag_start('div', array('class' => 'txp-control-panel')) .

n . file_upload_form(

'upload_file', 'upload', 'file_insert[]', '', '', 'async', '',

array('postinput' => ($categories

? n . tag(

n . tag(gTxt('category'), 'label', array('for' => 'file_category')) . $categories . n,

'span',

array('class' => 'inline-file-uploader-actions')

)

: ''

))

);

if ($existing_files = get_filenames()) {

$selected = count($existing_files) >= 5 ? array() : null;

$createBlock[] =

form(

eInput('file') .

sInput('file_create') .

tag(gTxt('existing_file'), 'label', array('for' => 'file-existing')) .

selectInput('filename', $existing_files, $selected, false, '', 'file-existing') .

fInput('submit', '', gTxt('import')),

'', '', 'post', 'assign-existing-form', '', 'assign_file'

);

}

$createBlock[] = tag_end('div');

}

$createBlock = implode(n, $createBlock);

$contentBlock = '';

$paginator = new \Textpattern\Admin\Paginator();

$limit = $paginator->getLimit();

list($page, $offset, $numPages) = pager($total, $limit, $page);

if ($total < 1) {

$contentBlock .= graf(

span(null, array('class' => 'ui-icon ui-icon-info')) . ' ' .

gTxt($crit === '' ? 'no_files_recorded' : 'no_results_found'),

array('class' => 'alert-block information')

);

} else {

$rs = safe_query(

"SELECT

);

if ($rs && numRows($rs)) {

$show_authors = !has_single_author('txp_file');

$contentBlock .= n . tag_start('form', array(

'class' => 'multi_edit_form',

'id' => 'files_form',

'name' => 'longform',

'method' => 'post',

'action' => 'index.php',

)) .

n . tag_start('div', array(

'class' => 'txp-listtables',

'tabindex' => 0,

'aria-label' => gTxt('list'),

)) .

n . tag_start('table', array('class' => 'txp-list')) .

n . tag_start('thead') .

tr(

hCell(

'<label for="select_all" class="txp-accessibility">' . gTxt('toggle_all_selected') . '</label>'.

fInput('checkbox', 'select_all', 0, '', '', '', '', '', 'select_all'),

'', ' class="txp-list-col-multi-edit" scope="col"'

) .

column_head(

'ID', 'id', 'file', true, $switch_dir, $crit, $search_method,

(('id' == $sort) ? "$dir " : '') . 'txp-list-col-id'

) .

column_head(

'name', 'filename', 'file', true, $switch_dir, $crit, $search_method,

(('filename' == $sort) ? "$dir " : '') . 'txp-list-col-filename'

) .

column_head(

'title', 'title', 'file', true, $switch_dir, $crit, $search_method,

(('title' == $sort) ? "$dir " : '') . 'txp-list-col-title'

) .

column_head(

'date', 'date', 'file', true, $switch_dir, $crit, $search_method,

(('date' == $sort) ? "$dir " : '') . 'txp-list-col-created date'

) .

column_head(

'modified', 'modified', 'file', true, $switch_dir, $crit, $search_method,

(('modified' == $sort) ? "$dir " : '') . 'txp-list-col-modified date'

) .

column_head(

'category', 'category', 'file', true, $switch_dir, $crit, $search_method,

(('category' == $sort) ? "$dir " : '') . 'txp-list-col-category category'

) .

(has_privs('tag')

? hCell(gTxt(

'tags'

), '', ' class="txp-list-col-tag-build" scope="col"')

: ''

) .

hCell(gTxt(

'status'

), '', ' class="txp-list-col-status" scope="col"') .

hCell(gTxt(

'condition'

), '', ' class="txp-list-col-condition" scope="col"') .

column_head(

'file_size', 'size', 'file', true, $switch_dir, $crit, $search_method,

(('size' == $sort) ? "$dir " : '') . 'txp-list-col-filesize'

) .

column_head(

'downloads', 'downloads', 'file', true, $switch_dir, $crit, $search_method,

(('downloads' == $sort) ? "$dir " : '') . 'txp-list-col-downloads'

) .

(

$show_authors

? column_head(

'author', 'author', 'file', true, $switch_dir, $crit, $search_method,

(('author' == $sort) ? "$dir " : '') . 'txp-list-col-author name'

)

: ''

)

) .

n . tag_end('thead') .

n . tag_start('tbody');

$validator = new Validator();

while ($a = nextRow($rs)) {

extract($a);

$filename = sanitizeForFile($filename);

$edit_url = array(

'event' => 'file',

'step' => 'file_edit',

'id' => $id,

'sort' => $sort,

'dir' => $dir,

'page' => $page,

'search_method' => $search_method,

'crit' => $crit,

);

$tagName = 'file_download_link';

$tag_url = array(

'id' => $id,

'description' => $description,

'filename' => $filename,

'step' => 'build',

);

$file_exists = is_file(build_file_path($file_base_path, $filename));

$can_edit = has_privs('file.edit') || ($author === $txp_user && has_privs('file.edit.own'));

$validator->setConstraints(array(new CategoryConstraint($category, array('type' => 'file'))));

if ($validator->validate()) {

$vc = '';

} else {

$vc = ' error';

}

if ($file_exists) {

$downloads = make_download_link($id, $downloads, $filename);

$condition = tag(gTxt('status_ok'), 'small', array('class' => 'alert-block alert-pill success'));

} else {

$condition = tag(gTxt('status_missing'), 'small', array('class' => 'alert-block alert-pill error'));

}

if ($category) {

$category = span(txpspecialchars($category_title), array(

'title' => $category,

));

}

if ($can_edit) {

$name = href(txpspecialchars($filename), $edit_url, array('title' => gTxt('edit')));

} else {

$name = txpspecialchars($filename);

}

if ($can_edit) {

$id_column = href($id, $edit_url, array('title' => gTxt('edit')));

$multi_edit = '<label for="bulk_select-' . $id . '" class="txp-accessibility">' . gTxt('bulk_select_row', array('{id}' => $id)) .

'</label>'.fInput('checkbox', 'selected[]', $id, '', '', '', '', '', 'bulk_select-'.$id);

} else {

$id_column = $id;

$multi_edit = '';

}

if (isset($file_statuses[$status])) {

$status = $file_statuses[$status];

} else {

$status = span(gTxt('none'), array('class' => 'error'));

}

$contentBlock .= tr(

td(

$multi_edit, '', 'txp-list-col-multi-edit'

) .

hCell(

$id_column, '', array(

'class' => 'txp-list-col-id',

'scope' => 'row',

)

) .

td(

$name, '', 'txp-list-col-filename txp-contain'

) .

td(

txpspecialchars($title), '', 'txp-list-col-title'

) .

td(

gTime($uDate), '', 'txp-list-col-created date'

) .

td(

gTime($mDate), '', 'txp-list-col-modified date'

) .

td(

$category, '', 'txp-list-col-category category' . $vc

) .

(has_privs('tag')

? td(

popTag($tagName, 'Textile', array('type' => 'textile') + $tag_url) .

sp . span('&#124;', array('role' => 'separator')) .

sp . popTag($tagName, 'Textpattern', array('type' => 'textpattern') + $tag_url) .

sp . span('&#124;', array('role' => 'separator')) .

sp . popTag($tagName, 'HTML', array('type' => 'html') + $tag_url), '', 'txp-list-col-tag-build'

)

: ''

) .

td(

$status, '', 'txp-list-col-status'

) .

td(

$condition, '', 'txp-list-col-condition'

) .

td(

format_filesize($size), '', 'txp-list-col-filesize'

) .

td(

$downloads, '', 'txp-list-col-downloads'

) .

(

$show_authors

? td(span(txpspecialchars($realname), array('title' => $author)), '', 'txp-list-col-author name')

: ''

)

);

}

$contentBlock .=

n . tag_end('tbody') .

n . tag_end('table') .

n . tag_end('div') . // End of .txp-listtables.

file_multiedit_form($page, $sort, $dir, $crit, $search_method) .

tInput() .

n . tag_end('form');

}

}

$pageBlock = $paginator->render() .

nav_form($event, $page, $numPages, $sort, $dir, $crit, $search_method, $total, $limit);

$table = new \Textpattern\Admin\Table($event);

echo $table->render(compact('total', 'crit'), $searchBlock, $createBlock, $contentBlock, $pageBlock) .

n . tag(

null,

'div', array(

'class' => 'txp-tagbuilder-content',

'id' => 'tagbuild_links',

'title' => gTxt('tagbuilder'),

)

);

{

global $file_statuses, $all_file_cats, $all_file_authors;

$categories = $all_file_cats ? treeSelectInput('category', $all_file_cats, '') : '';

$authors = $all_file_authors ? selectInput('author', $all_file_authors, '', true) : '';

$status = selectInput('status', $file_statuses, '', true);

$methods = array(

'changestatus' => array(

'label' => gTxt('changestatus'),

'html' => $status,

),

'changecategory' => array(

'label' => gTxt('changecategory'),

'html' => $categories,

),

'changeauthor' => array(

'label' => gTxt('changeauthor'),

'html' => $authors,

),

'changecount' => array('label' => gTxt('reset_download_count')),

'delete' => gTxt('delete'),

);

if (!$categories) {

unset($methods['changecategory']);

}

if (has_single_author('txp_file') || !has_privs('file.edit')) {

unset($methods['changeauthor']);

}

if (!has_privs('file.delete.own') && !has_privs('file.delete')) {

unset($methods['delete']);

}

return multi_edit($methods, 'file', 'file_multi_edit', $page, $sort, $dir, $crit, $search_method);

{

global $txp_user, $all_file_cats, $all_file_authors;

// Empty entry to permit clearing the category.

$categories = array('');

foreach ($all_file_cats as $row) {

$categories[] = $row['name'];

}

$selected = ps('selected');

if (!$selected || !is_array($selected)) {

return file_list();

}

$selected = array_map('assert_int', $selected);

$method = ps('edit_method');

$changed = array();

$key = '';

switch ($method) {

case 'delete':

return file_delete($selected);

break;

case 'changecategory':

$val = ps('category');

if (in_array($val, $categories)) {

$key = 'category';

}

break;

case 'changeauthor':

$val = ps('author');

if (has_privs('file.edit') && isset($all_file_authors[$val])) {

$key = 'author';

}

break;

case 'changecount':

$key = 'downloads';

$val = 0;

break;

case 'changestatus':

$key = 'status';

$val = ps('status');

// Do not allow to be set to an empty value.

if (!$val) {

$selected = array();

}

break;

default:

$key = '';

$val = '';

break;

}

// Remove bogus (false) entries to prevent SQL syntax errors being thrown.

$selected = array_filter($selected);

if (!has_privs('file.edit')) {

if ($selected && has_privs('file.edit.own')) {

$selected = safe_column("id", 'txp_file', "id IN (" . join(',', $selected) . ") AND author = '" . doSlash($txp_user) . "'");

} else {

$selected = array();

}

}

if ($selected && $key) {

foreach ($selected as $id) {

if (safe_update('txp_file', "$key = '" . doSlash($val) . "'", "id = '$id'")) {

$changed[] = $id;

}

}

}

if ($changed) {

update_lastmod('file_updated', $changed);

return file_list(gTxt('file_updated', array('{name}' => join(', ', $changed))));

}

return file_list();

{

global $file_base_path, $levels, $file_statuses, $txp_user, $event, $all_file_cats;

extract(gpsa(array(

'name',

'title',

'category',

'permissions',

'description',

'sort',

'dir',

'page',

'crit',

'search_method',

'publish_now',

)));

if (!$id) {

$id = gps('id');

}

$id = assert_int($id);

$rs = safe_row("*, TIMESTAMPDIFF(SECOND, COALESCE(FROM_UNIXTIME(0), FROM_UNIXTIME(1)), created) AS created, TIMESTAMPDIFF(SECOND, COALESCE(FROM_UNIXTIME(0), FROM_UNIXTIME(1)), modified) AS modified", 'txp_file', "id = '$id'");

if ($rs) {

extract($rs);

$filename = sanitizeForFile($filename);

if (!has_privs('file.edit') && !($author === $txp_user && has_privs('file.edit.own'))) {

require_privs();

}

pagetop(gTxt('edit_file'), $message);

$fieldSizes = Txp::get('\Textpattern\DB\Core')->columnSizes('txp_file', 'filename, title');

if ($permissions == '') {

$permissions = '-1';

}

if (!has_privs('file.publish') && $status >= STATUS_LIVE) {

$status = STATUS_PENDING;

}

$file_exists = is_file(build_file_path($file_base_path, $filename));

$existing_files = get_filenames();

$existing_files = empty($existing_files)

? ''

: tag(tag(gTxt('existing_file'), 'label', 'for="existing_file"') .

selectInput('newfile', $existing_files, '', 1, '', 'existing_file') .

hInput('perms', ($permissions == '-1') ? '' : $permissions), 'div', 'id="existing_container"');

$can_delete = has_privs('file.delete') || ($author == $txp_user && has_privs('file.delete.own'));

$is_writable = is_dir($file_base_path) && is_writeable($file_base_path);

if ($is_writable) {

$replace = ($file_exists)

? file_upload_form('replace_file', 'file_replace', 'file_replace', $id, 'file_replace', 'async replace-file', array('div', 'div'), array('postinput' => $existing_files))

: file_upload_form('file_relink', 'file_reassign', 'file_replace', $id, 'file_reassign', 'async upload-file', array('div', 'div'), array('postinput' => $existing_files));

$delete = $can_delete

? form(

eInput('file') .

sInput('file_multi_edit') .

hInput('edit_method', 'delete') .

hInput('selected[]', $id),

'', '', 'post', '', '', 'delete-file'

)

: '';

} else {

$replace = $delete = '';

}

$condition = span((($file_exists)

? gTxt('status_ok')

: gTxt('status_missing')

), array('class' => 'alert-block alert-pill ' . (($file_exists) ? 'success' : 'error')));

$downloadlink = ($file_exists) ? make_download_link($id, '', $filename) : '';

$created =

inputLabel(

'year',

tsi('year', '%Y', $rs['created'], '', 'year') .

' <span role="separator">/</span> ' .

tsi('month', '%m', $rs['created'], '', 'month') .

' <span role="separator">/</span> ' .

tsi('day', '%d', $rs['created'], '', 'day'),

'publish_date',

array('timestamp_file', 'instructions_file_date'),

array('class' => 'txp-form-field date posted')

) .

inputLabel(

'hour',

tsi('hour', '%H', $rs['created'], '', 'hour') .

' <span role="separator">:</span> ' .

tsi('minute', '%M', $rs['created'], '', 'minute') .

' <span role="separator">:</span> ' .

tsi('second', '%S', $rs['created'], '', 'second'),

'publish_time',

array('', 'instructions_file_time'),

array('class' => 'txp-form-field time posted')

) .

n . tag(

checkbox('publish_now', '1', $publish_now, '', 'publish_now') .

n . tag(gTxt('set_to_now'), 'label', array('for' => 'publish_now')),

'div', array('class' => 'txp-form-field-shim posted-now')

);

echo tag(

hed(gTxt('edit_file'), 2, array('class' => 'txp-heading')) .

($replace ? tag($replace . n . $delete, 'div') : '') .

n . form(

inputLabel(

'condition',

$condition,

'', '', array('class' => 'txp-form-field edit-file-condition')

) .

inputLabel(

'id',

$id,

'', '', array('class' => 'txp-form-field edit-file-id')

) .

inputLabel(

'filename',

Txp::get('\Textpattern\UI\Input', 'filename', 'text', $filename)->setAtts(array(

'id' => 'filename',

'size' => INPUT_REGULAR,

'maxlength' => $fieldSizes['filename'],

)),

'name', '', array('class' => 'txp-form-field edit-file-name')

) . inputLabel(

'file_status',

selectInput('status', $file_statuses, $status, false, '', 'file_status'),

'file_status', '', array('class' => 'txp-form-field edit-file-status')

) .

inputLabel(

'file_category',

event_category_popup('file', $category, 'file_category') .

n . eLink('category', 'list', '', '', gTxt('edit'), '', '', '', 'txp-option-link'),

'category', '', array('class' => 'txp-form-field edit-file-category')

) .

inputLabel(

'file_title',

Txp::get('\Textpattern\UI\Input', 'title', 'text', $title)->setAtts(array(

'id' => 'file_title',

'size' => INPUT_REGULAR,

'maxlength' => $fieldSizes['title'],

)),

'title', '', array('class' => 'txp-form-field edit-file-title')

) .

inputLabel(

'file_description',

'<textarea id="file_description" name="description" cols="' . INPUT_LARGE . '" rows="' . TEXTAREA_HEIGHT_SMALL . '">' . htmlspecialchars($description, ENT_NOQUOTES) . '</textarea>',

'description', '', array('class' => 'txp-form-field txp-form-field-textarea edit-file-description')

) .

pluggable_ui('file_ui', 'extend_detail_form', '', $rs) .

$created .

inputLabel(

'modified',

gTime($modified),

'', '', array('class' => 'txp-form-field edit-file-modified')

) .

inputLabel(

'file_size',

format_filesize($size),

'', '', array('class' => 'txp-form-field edit-file-size')

) .

inputLabel(

'downloads',

Txp::get('\Textpattern\UI\Number', 'downloads', $downloads)

->setAtts(array('class' => 'input-small', 'min' => 0), array('strip' => TEXTPATTERN_STRIP_NONE)) . n . $downloadlink,

'download_count', '', array('class' => 'txp-form-field edit-file-download-count')

) .

graf(

($can_delete

? tag_void('input', array(

'class' => 'caution',

'name' => 'file_delete',

'type' => 'submit',

'form' => 'delete-file',

'value' => gTxt('delete'),

'disabled' => !$is_writable,

))

: ''

) .

href(gTxt('go_back'), array(

'event' => 'file',

'sort' => $sort,

'dir' => $dir,

'page' => $page,

'search_method' => $search_method,

'crit' => $crit,

), array('class' => 'txp-button')) .

fInput('submit', '', gTxt('save'), 'publish'),

array('class' => 'txp-edit-actions')

) .

eInput('file') .

sInput('file_save') .

hInput(compact('id', 'sort', 'dir', 'page', 'search_method', 'crit')),

'', '', 'post', 'file-detail ' . (($file_exists) ? '' : 'not-') . 'exists', '', 'file_details'

),

// inputLabel(

// 'perms',

// selectInput('perms', $levels, $permissions),

// 'permissions'

// ).

'div', array('class' => 'txp-edit')

);

}

{

global $txp_user;

if (trim($filename) === '') {

return false;

}

$qs = quote_list(

array('author' => $txp_user) + compact('filename', 'title', 'category', 'permissions', 'description', 'size')

) + array(

'created' => 'NOW()',

'modified' => 'NOW()',

);

$rs = safe_insert('txp_file', join_qs($qs, ','));

if ($rs) {

return $GLOBALS['ID'] = $rs;

}

return false;

{

global $txp_user, $file_base_path;

require_privs('file.edit.own');

extract(array_map('assert_string', gpsa(array(

'title',

'category',

'permissions',

'description',

))));

$filename = array_filter((array) gps('filename'));

$success = $failed = $notFound = $invalid = $ids = array();

foreach ($filename as $file) {

$safe_filename = sanitizeForFile($file);

if ($safe_filename != $file) {

$invalid[] = $file;

continue;

}

$size = filesize(build_file_path($file_base_path, $safe_filename));

$id = file_db_add($safe_filename, $category, $permissions, $description, $size, $title);

if ($id === false) {

$failed[] = $safe_filename;

} else {

$newpath = build_file_path($file_base_path, $safe_filename);

if (is_file($newpath)) {

file_set_perm($newpath);

$ids[] = $id;

$success[] = $safe_filename;

} else {

$notFound[] = $safe_filename;

}

}

}

$messages = array();

if ($success) {

$messages[] = array(gTxt('linked_to_file', array('{list}' => join(', ', $success))), 0);

}

if ($failed) {

$messages[] = array(gTxt('file_upload_failed', array('{list}' => join(', ', $failed))), E_ERROR);

}

if ($notFound) {

$messages[] = array(gTxt('file_not_found', array('{list}' => join(', ', $notFound))), E_ERROR);

}

if ($invalid) {

$messages[] = array(gTxt('invalid_filename', array('{list}' => join(', ', $invalid))), E_ERROR);

}

if ($ids) {

now('created', true);

update_lastmod('file_created', compact('ids', 'filename', 'title', 'category', 'description'));

}

$response = '';

foreach ($messages as $message) {

$response .= 'textpattern.Console.addMessage(' . json_encode($message, TEXTPATTERN_JSON) . ');' . n;

}

script_js($response, false);

file_list();

{

global $txp_user, $file_base_path, $file_max_upload_size, $app_mode;

require_privs('file.edit.own');

$messages = $ids = array();

$fileshandler = Txp::get('\Textpattern\Server\Files');

$files = $fileshandler->refactor($_FILES['thefile']);

$titles = gps('title');

extract(array_map('assert_string', gpsa(array(

'category',

'permissions',

'description',

))));

// Call pre-file-upload plugins.

callback_event('files_uploaded', '', true);

foreach ($files as $i => $file) {

$chunked = $fileshandler->dechunk($file);

extract($file);

$newname = sanitizeForFile($name);

$newpath = build_file_path($file_base_path, $newname);

if ($error || !$size && $chunked) {

$messages[] = array(gTxt('file_upload_failed', array('{list}' => $newname)) . " - " . upload_get_errormsg($error ? $error : UPLOAD_ERR_PARTIAL), E_ERROR);

} elseif ($file_max_upload_size < $size) {

$messages[] = array(gTxt('file_upload_failed', array('{list}' => $newname)) . " - " . upload_get_errormsg(UPLOAD_ERR_FORM_SIZE), E_ERROR);