<%@ CodePage=65001 Language="VBScript"%> <% Option Explicit Response.Buffer = True %> <% If ( ConfigIsEnabled = False ) Then SendError 1, "This connector is disabled. Please check the ""editor/filemanager/browser/default/connectors/asp/config.asp"" file" End If ' Get the "UserFiles" path. Dim sUserFilesPath If ( Not IsEmpty( ConfigUserFilesPath ) ) Then sUserFilesPath = ConfigUserFilesPath If ( Right( sUserFilesPath, 1 ) <> "/" ) Then sUserFilesPath = sUserFilesPath & "/" End If Else sUserFilesPath = "/userfiles/" End If ' Map the "UserFiles" path to a local directory. Dim sUserFilesDirectory sUserFilesDirectory = Server.MapPath( sUserFilesPath ) If ( Right( sUserFilesDirectory, 1 ) <> "\" ) Then sUserFilesDirectory = sUserFilesDirectory & "\" End If DoResponse Sub DoResponse() Dim sCommand, sResourceType, sCurrentFolder ' Get the main request information. sCommand = Request.QueryString("Command") If ( sCommand = "" ) Then Exit Sub sResourceType = Request.QueryString("Type") If ( sResourceType = "" ) Then Exit Sub sCurrentFolder = Request.QueryString("CurrentFolder") If ( sCurrentFolder = "" ) Then Exit Sub ' Check if it is an allower resource type. if ( Not IsAllowedType( sResourceType ) ) Then Exit Sub ' Check the current folder syntax (must begin and start with a slash). If ( Right( sCurrentFolder, 1 ) <> "/" ) Then sCurrentFolder = sCurrentFolder & "/" If ( Left( sCurrentFolder, 1 ) <> "/" ) Then sCurrentFolder = "/" & sCurrentFolder ' Check for invalid folder paths (..) If ( InStr( 1, sCurrentFolder, ".." ) <> 0 OR InStr( 1, sResourceType, ".." ) <> 0 ) Then SendError 102, "" End If ' File Upload doesn't have to Return XML, so it must be intercepted before anything. If ( sCommand = "FileUpload" ) Then FileUpload sResourceType, sCurrentFolder Exit Sub End If SetXmlHeaders CreateXmlHeader sCommand, sResourceType, sCurrentFolder ' Execute the required command. Select Case sCommand Case "GetFolders" GetFolders sResourceType, sCurrentFolder Case "GetFoldersAndFiles" GetFoldersAndFiles sResourceType, sCurrentFolder Case "CreateFolder" CreateFolder sResourceType, sCurrentFolder End Select CreateXmlFooter Response.End End Sub Function IsAllowedType( resourceType ) Dim oRE Set oRE = New RegExp oRE.IgnoreCase = True oRE.Global = True oRE.Pattern = "^(File|Image|Flash|Media)$" IsAllowedType = oRE.Test( resourceType ) Set oRE = Nothing End Function %>