Ümit Tunç
42 lines
1.2 KiB
PHP
42 lines
1.2 KiB
PHP
<?php
|
|
|
|
namespace App\Http\Middleware;
|
|
|
|
use Closure;
|
|
use Illuminate\Http\Request;
|
|
|
|
class ElFinderProtectMainFolder
|
|
{
|
|
public function handle(Request $request, Closure $next)
|
|
{
|
|
$cmd = $request->input('cmd');
|
|
$target = $request->input('target');
|
|
|
|
// Mevcut tüm ilk seviye klasörleri al
|
|
$documentsPath = storage_path('documents');
|
|
$firstLevelDirs = array_map(
|
|
fn($path) => basename($path),
|
|
glob($documentsPath . '/*', GLOB_ONLYDIR)
|
|
);
|
|
|
|
$firstLevelDirs[] = "/";
|
|
|
|
// Hedef klasörün gerçek yolunu al
|
|
if ($target && strpos($target, 'l1_') === 0) {
|
|
$decodedTarget = base64_decode(substr($target, 3));
|
|
|
|
if (in_array($decodedTarget, $firstLevelDirs)) {
|
|
|
|
$restrictedCommands = ['rm', 'rename', 'move'];
|
|
|
|
if (in_array($cmd, $restrictedCommands)) {
|
|
return response()->json([
|
|
'error' => 'You cannot perform this operation on directories in the main folder!'
|
|
]);
|
|
}
|
|
}
|
|
}
|
|
|
|
return $next($request);
|
|
}
|
|
}
|