1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
<?
session_start();
include ('../init.php');
include ('fn_common.php');
checkUserSession();
if(@$_GET['file'] == 'logo_png')
{
if ($_SESSION["cpanel_privileges"] != 'super_admin')
{
die;
}
$postdata = file_get_contents("php://input");
if (isset($postdata))
{
$imageData = $postdata;
$filteredData = substr($imageData, strpos($imageData, ",")+1);
$unencodedData=base64_decode($filteredData);
$file_path = $gsValues['PATH_ROOT'].'img/logo.png';
$fp = fopen( $file_path, 'wb' );
fwrite( $fp, $unencodedData);
fclose( $fp );
$file_url = $gsValues['URL_ROOT'].'/img/logo.png';
echo $file_url;
}
}
if(@$_GET['file'] == 'logo_svg')
{
if ($_SESSION["cpanel_privileges"] != 'super_admin')
{
die;
}
$postdata = file_get_contents("php://input");
if (isset($postdata))
{
$imageData = $postdata;
$filteredData = substr($imageData, strpos($imageData, ",")+1);
$unencodedData=base64_decode($filteredData);
$file_path = $gsValues['PATH_ROOT'].'img/logo.svg';
$fp = fopen( $file_path, 'wb' );
fwrite( $fp, $unencodedData);
fclose( $fp );
$file_url = $gsValues['URL_ROOT'].'/img/logo.svg';
echo $file_url;
}
}
if(@$_GET['file'] == 'driver_photo')
{
$postdata = file_get_contents("php://input");
if (isset($postdata))
{
$imageData = $postdata;
$filteredData = substr($imageData, strpos($imageData, ",")+1);
$unencodedData=base64_decode($filteredData);
$file_path = $gsValues['PATH_ROOT'].'data/user/drivers/'.$_SESSION["user_id"].'_temp.png';
$file_url = $gsValues['URL_ROOT'].'/data/user/drivers/'.$_SESSION["user_id"].'_temp.png';
$fp = fopen( $file_path, 'wb' );
fwrite( $fp, $unencodedData);
fclose( $fp );
echo $file_url;
}
}
if(@$_GET['file'] == 'object_icon_png')
{
$postdata = file_get_contents("php://input");
if (isset($postdata))
{
$imageData = $postdata;
$filteredData = substr($imageData, strpos($imageData, ",")+1);
$unencodedData=base64_decode($filteredData);
$file_path = $gsValues['PATH_ROOT'].'data/user/objects/'.$_SESSION["user_id"].'_'.md5(gmdate("Y-m-d H:i:s")).'.png';
$fp = fopen( $file_path, 'wb' );
fwrite( $fp, $unencodedData);
fclose( $fp );
}
}
if(@$_GET['file'] == 'object_icon_svg')
{
$postdata = file_get_contents("php://input");
if (isset($postdata))
{
$imageData = $postdata;
$filteredData = substr($imageData, strpos($imageData, ",")+1);
$unencodedData=base64_decode($filteredData);
$file_path = $gsValues['PATH_ROOT'].'data/user/objects/'.$_SESSION["user_id"].'_'.md5(gmdate("Y-m-d H:i:s")).'.svg';
$fp = fopen( $file_path, 'wb' );
fwrite( $fp, $unencodedData);
fclose( $fp );
}
}
if(@$_GET['file'] == 'places_icon_png')
{
$postdata = file_get_contents("php://input");
if (isset($postdata))
{
$imageData = $postdata;
$filteredData = substr($imageData, strpos($imageData, ",")+1);
$unencodedData=base64_decode($filteredData);
$file_path = $gsValues['PATH_ROOT'].'data/user/places/'.$_SESSION["user_id"].'_'.md5(gmdate("Y-m-d H:i:s")).'.png';
$fp = fopen( $file_path, 'wb' );
fwrite( $fp, $unencodedData);
fclose( $fp );
}
}
if(@$_GET['file'] == 'places_icon_svg')
{
$postdata = file_get_contents("php://input");
if (isset($postdata))
{
$imageData = $postdata;
$filteredData = substr($imageData, strpos($imageData, ",")+1);
$unencodedData=base64_decode($filteredData);
$file_path = $gsValues['PATH_ROOT'].'data/user/places/'.$_SESSION["user_id"].'_'.md5(gmdate("Y-m-d H:i:s")).'.svg';
$fp = fopen( $file_path, 'wb' );
fwrite( $fp, $unencodedData);
fclose( $fp );
}
}
?>