FM / filemin

/usr/share/usermin/filemin

Name	Size	Mode	Actions
images/	-	0755	rm
lang/	-	0755	rm
unauthenticated/	-	0755	rm
acl_security.pl	2571	0644	edit dl rm
bookmark.cgi	326	0755	edit dl rm
CHANGELOG	9440	0644	edit dl rm
chattr.cgi	1007	0755	edit dl rm
chcon.cgi	979	0755	edit dl rm
chmod.cgi	2475	0755	edit dl rm
chown.cgi	983	0755	edit dl rm
compress.cgi	1187	0755	edit dl rm
config	20	0644	edit dl rm
config.cgi	2581	0755	edit dl rm
config.info	260	0644	edit dl rm
config.info.ar	97	0644	edit dl rm
config.info.ca	52	0644	edit dl rm
config.info.de	61	0644	edit dl rm
config.info.fr	60	0644	edit dl rm
config.info.it	199	0644	edit dl rm
config.info.uk	260	0644	edit dl rm
copy.cgi	362	0755	edit dl rm
create_file.cgi	559	0755	edit dl rm
create_folder.cgi	550	0755	edit dl rm
cut.cgi	361	0755	edit dl rm
defaultacl	375	0644	edit dl rm
defaultuconf	180	0644	edit dl rm
delete.cgi	463	0755	edit dl rm
download.cgi	799	0755	edit dl rm
edit_file.cgi	1811	0755	edit dl rm
extract.cgi	1530	0755	edit dl rm
filemin-lib.pl	26357	0644	edit dl rm
http_download.cgi	1371	0755	edit dl rm
index.cgi	3522	0755	edit dl rm
module.info	137	0644	edit dl rm
module.info.ar	116	0644	edit dl rm
module.info.ar.auto	32	0644	edit dl rm
module.info.bg	0	0644	edit dl rm
module.info.bg.auto	164	0644	edit dl rm
module.info.ca	89	0644	edit dl rm
module.info.ca.auto	24	0644	edit dl rm
module.info.cs	0	0644	edit dl rm
module.info.cs.auto	115	0644	edit dl rm
module.info.da	0	0644	edit dl rm
module.info.da.auto	101	0644	edit dl rm
module.info.de	88	0644	edit dl rm
module.info.de.auto	21	0644	edit dl rm
module.info.el	0	0644	edit dl rm
module.info.el.auto	209	0644	edit dl rm
module.info.es	0	0644	edit dl rm
module.info.es.auto	140	0644	edit dl rm
module.info.eu	0	0644	edit dl rm
module.info.eu.auto	131	0644	edit dl rm
module.info.fa	0	0644	edit dl rm
module.info.fa.auto	137	0644	edit dl rm
module.info.fi	0	0644	edit dl rm
module.info.fi.auto	110	0644	edit dl rm
module.info.fr	0	0644	edit dl rm
module.info.fr.auto	136	0644	edit dl rm
module.info.hr	0	0644	edit dl rm
module.info.hr.auto	118	0644	edit dl rm
module.info.hu	0	0644	edit dl rm
module.info.hu.auto	109	0644	edit dl rm
module.info.it	104	0644	edit dl rm
module.info.ja	0	0644	edit dl rm
module.info.ja.auto	137	0644	edit dl rm
module.info.ko	0	0644	edit dl rm
module.info.ko.auto	118	0644	edit dl rm
module.info.ms	0	0644	edit dl rm
module.info.ms.auto	113	0644	edit dl rm
module.info.nl	0	0644	edit dl rm
module.info.nl.auto	108	0644	edit dl rm
module.info.no	22	0644	edit dl rm
module.info.no.auto	75	0644	edit dl rm
module.info.pl	96	0644	edit dl rm
module.info.pl.auto	115	0644	edit dl rm
module.info.pt	0	0644	edit dl rm
module.info.pt.auto	133	0644	edit dl rm
module.info.pt_BR	0	0644	edit dl rm
module.info.pt_BR.auto	142	0644	edit dl rm
module.info.ru	0	0644	edit dl rm
module.info.ru.auto	194	0644	edit dl rm
module.info.sk	0	0644	edit dl rm
module.info.sk.auto	126	0644	edit dl rm
module.info.sv	0	0644	edit dl rm
module.info.sv.auto	99	0644	edit dl rm
module.info.tr	0	0644	edit dl rm
module.info.tr.auto	121	0644	edit dl rm
module.info.uk	367	0644	edit dl rm
module.info.uk.auto	188	0644	edit dl rm
module.info.zh	0	0644	edit dl rm
module.info.zh.auto	101	0644	edit dl rm
module.info.zh_TW	0	0644	edit dl rm
module.info.zh_TW.auto	110	0644	edit dl rm
paste.cgi	1408	0755	edit dl rm
prefs.info	10	0644	edit dl rm
rename.cgi	545	0755	edit dl rm
safeacl	50	0644	edit dl rm
save_config.cgi	975	0755	edit dl rm
save_file.cgi	804	0755	edit dl rm
search.cgi	572	0755	edit dl rm
setfacl.cgi	1689	0755	edit dl rm
upload.cgi	5356	0755	edit dl rm

Edit: /usr/share/usermin/filemin/filemin-lib.pl (26357B)

# filemin-lib.pl

BEGIN { push(@INC, ".."); };
use WebminCore;
&init_config();

use POSIX;
use Encode qw(decode encode);
use File::Basename;
eval "use File::MimeInfo";

sub get_acls_status {
  return has_command('getfacl');
}

sub get_list_acls_command {
  return has_command('getfacl') . " -p ";
}

sub get_attr_status {
  return has_command('lsattr');
}

sub get_attr_command {
  return 'lsattr -d ';
}

sub get_selinux_status {
  return is_selinux_enabled();
}

sub get_selinux_command_type {
  my $out = backquote_command("ls --help 2>&1 </dev/null");
  return $out =~ /--scontext/ ? 1 : 0;
}

sub get_selinux_command {
  return get_selinux_command_type() ? 'ls -d --scontext ' : 'ls -dmZ ';
}

sub can_write {
    my ($file) = @_;
    # No restrictions for root
    if (&webmin_user_is_admin()) {
        return 1;
    }
    # If strict check is enabled or if safe user check for write
    # access explicitly
    if ($access{'work_as_user_strict'} || $access{'_safe'}) {
        # Check if the file is a symbolic link
        if (-l $file) {
            # Resolve symbolic link
            my $resolved_file = readlink($file);
            # If the link is broken, allow writing to the link itself
            return -w $file if (!$resolved_file);
            # Otherwise, check the resolved file
            $file = $resolved_file;
        }
        # Check if the file itself is writable
        return -w $file;
    }
    # Otherwise, allow writing depending on Unix permissions
    else {
        return 1;
    }
}

sub can_move {
    my ($file, $sdir, $tdir) = @_;
    # Check if the file itself is writable
    return 0 if (!&can_write($file));
    # Check if the source directory is writable
    return 0 if (!-w $sdir);
    # Check if the target directory is writable (if given)
    return 1 if (!$tdir);
    return -w $tdir;
    # All checks passed
    return 1;
}

sub get_paths {
    %access = &get_module_acl();

# Get path from URL params
    if ($in{'path'} =~ /^%2F/) {
        $path = un_urlize($in{'path'}, 1) || '';
    } else {
        $path = $in{'path'} || '';
    }
    $quote_escaped_path = quote_escape($path);
    $urlized_path = urlize($path);

# Switch to the correct user
    if (&get_product_name() eq 'usermin') {
        # In Usermin, the module only ever runs as the connected user
        &switch_to_remote_user();
        &create_user_config_dirs();
    }
    elsif ($access{'work_as_root'}) {
        # Root user, so no switching
        @remote_user_info = getpwnam('root');
	@WebminCore::remote_user_info = @remote_user_info;
    }
    elsif ($access{'work_as_dir'}) {
	# User is based on the directory
	my $switchto;
	foreach my $du (split(/\s+/, $access{'work_as_dir'})) {
		my ($user, $dir) = split(/:/, $du, 2);
		if (&is_under_directory($dir, $path)) {
			$switchto = $user;
			last;
		}
	}
	$switchto ||= $access{'work_as_user'};
        @remote_user_info = getpwnam($switchto);
        @remote_user_info ||
            &error("Unix user $switchto does not exist!");
        &switch_to_unix_user(\@remote_user_info);
	@WebminCore::remote_user_info = @remote_user_info;
    }
    elsif ($access{'work_as_user'}) {
        # A specific user
        @remote_user_info = getpwnam($access{'work_as_user'});
        @remote_user_info ||
            &error("Unix user $access{'work_as_user'} does not exist!");
        &switch_to_unix_user(\@remote_user_info);
	@WebminCore::remote_user_info = @remote_user_info;
    }
    else {
        # Run as the Webmin user we are connected as
        &switch_to_remote_user();
    }

# Get and check allowed paths
    @allowed_paths = split(/\s+/, $access{'allowed_paths'});
    if (&get_product_name() eq 'usermin') {
        # Add paths from Usermin config
        push(@allowed_paths, split(/\t+/, $config{'allowed_paths'}));
    }
    if ($remote_user_info[0] eq 'root' && @allowed_paths == 1 &&
        ($allowed_paths[0] eq '$HOME' || $allowed_paths[0] eq '$ROOT')) {
	# If the user is running as root and the only allowed path is $HOME
	# or $ROOT, assume that all files are allowed
        $base = "/";
        @allowed_paths = ( $base );
    } else {
	# Resolve actual allowed paths
        @allowed_paths = map { $_ eq '$HOME' ? @remote_user_info[7] :
			       $_ eq '$ROOT' ? '/' : $_ } @allowed_paths;
        @allowed_paths = map { s/\$USER/$remote_user/g; $_ } @allowed_paths;
        @allowed_paths = &unique(@allowed_paths);
	@allowed_paths = map { my $p = $_; $p =~ s/\/\.\//\//; $p }
			     @allowed_paths;
        if (scalar(@allowed_paths) == 1) {
            $base = $allowed_paths[0];
        } else {
            $base = '/';
        }
    }
    @allowed_paths = map { &simplify_path($_) } &unique(@allowed_paths);
    
    # Work out max upload size
    if (&get_product_name() eq 'usermin') {
	$upload_max = $config{'max'};
    } else {
	$upload_max = $access{'max'};
    }

# Check that current directory is one of those that is allowed
    $cwd = &simplify_path($base.$path);
    my $error = 1;
    for $allowed_path (@allowed_paths) {
        if (&is_under_directory($allowed_path, $cwd) ||
            $allowed_path =~ /^\Q$cwd\E/) {
            $error = 0;
        }
    }
    if ($error) {
        &error(&text('notallowed', '`' . &html_escape($cwd) . '`',
                                   '`' . &html_escape(join(" , ", @allowed_paths)) . '`.'));
    }

if (index($cwd, $base) == -1)
    {
        $cwd = $base;
    }

# Initiate per user config
    $confdir = "$remote_user_info[7]/.filemin";
    if(!-e $confdir) {
        mkdir $confdir or &error("$text{'error_creating_conf'}: $!");
    }
    if(!-e "$confdir/.config") {
        &read_file_cached("$module_root_directory/defaultuconf", \%userconfig);
    } else {
        &read_file_cached("$confdir/.config", \%userconfig);
    }
    &load_module_preferences(&get_module_name(), \%userconfig);
}

sub print_template {
    $template_name = @_[0];
    if (open(my $fh, '<:encoding(UTF-8)', $template_name)) {
      while (my $row = <$fh>) {
        print (eval "qq($row)");
      }
    } else {
      print "$text{'error_load_template'} '$template_name' $!";
    }
}

sub print_errors {
    my (@errors) = @_;
    &ui_print_header(undef, $module_info{'name'}, "");
    print "<tt>$text{'errors_occured'}</tt><br>";
    print "<ul class=\"err-body\">";
    foreach $error(@errors) {
        print("<li><tt>$error</tt></li>");
    }
    print "</ul>";
    print "<script>if(typeof print_errors_post==='function'){print_errors_post('$module_name')}</script>";
    &ui_print_footer("index.cgi?path=".&urlize($path), $text{'previous_page'});
}

sub print_interface {
    # Some vars for "upload" functionality
    local $upid = time().$$;
    $bookmarks = get_bookmarks();
    @allowed_for_edit = split(/\s+/, $access{'allowed_for_edit'});
    # Some experimental MIME types are now recognized
    push(@allowed_for_edit, map { (my $__ = $_) =~ s/-x-/-/;
        $__ ne $_ ? $__ : () } @allowed_for_edit);
    %allowed_for_edit = map { $_ => 1} @allowed_for_edit;
    my %tinfo = &get_theme_info($current_theme);

# User and group lists for acls
    if (&has_command('setfacl')) {
        our $acl_user_select = &ui_user_textbox("user", $realuser);
        our $acl_group_select = &ui_user_textbox("group", $realuser);
        our $acl_manual = &ui_details(
            { title => $text{'acls_manual'},
              content => &ui_textbox("manual", undef, 40,
                    undef, undef, "placeholder='-m u:root:rw-,g:stream:r-x -R'"),
              html => 1 } );
        }

# Interface for Bootstrap powered themes
    if ($tinfo{'bootstrap'}) {

# Set icons variables
        $edit_icon = "<i class='fa fa-edit' alt='$text{'edit'}'></i>";
        $rename_icon = "<i class='fa fa-font' title='$text{'rename'}'></i>";
        $extract_icon = "<i class='fa fa-external-link' alt='$text{'extract_archive'}'></i>";
        $goto_icon = "<i class='fa fa-arrow-right' alt='$text{'goto_folder'}'></i>";

# Add static files
        print "<link rel=\"stylesheet\" type=\"text/css\" href=\"unauthenticated/css/style.css\" />";
        print "<script type=\"text/javascript\" src=\"unauthenticated/js/main.js\"></script>";
        print "<script type=\"text/javascript\" src=\"unauthenticated/js/chmod-calculator.js\"></script>";
        print "<script type=\"text/javascript\" src=\"unauthenticated/js/bootstrap-hover-dropdown.min.js\"></script>";

# Set "root" icon
        if($base eq '/') {
            $root_icon = "<i class='fa fa-hdd-o'></i>";
        } else {
            $root_icon = "~";
        }

# Breadcrumbs
        print "<ol class='breadcrumb pull-left'><li><a href='index.cgi?path='>$root_icon</a></li>";
        my @breadcr = split('/', $path);
        my $cp = '';
        for(my $i = 1; $i <= scalar(@breadcr)-1; $i++) {
            chomp($breadcr[$i]);
            $cp = $cp.'/'.$breadcr[$i];
            print "<li><a href='index.cgi?path=".&urlize($cp)."'>".
                  &html_escape($breadcr[$i])."</a></li>";
        }
        print "</ol>";

$page = 1;
        $pagelimit = 4294967295; # The number of maximum files in a directory for EXT4. 9000+ is way to little
        
        # And toolbar
        print_template("unauthenticated/templates/menu.html");
        print_template("unauthenticated/templates/dialogs.html");
    }

# Interface for legacy themes
    else {
        
        # Set icons variables
        $edit_icon = "<img src='images/icons/quick/edit.png' alt='$text{'edit'}' />";
        $rename_icon = "<img src='images/icons/quick/rename.png' alt='$text{'rename'}' />";
        $extract_icon = "<img src='images/icons/quick/extract.png' alt='$text{'extract_archive'}' />";
        $goto_icon = "<img src='images/icons/quick/go-next.png' alt='$text{'goto_folder'}'";

# Add static files
        $head = "<link rel=\"stylesheet\" type=\"text/css\" href=\"unauthenticated/css/style.css\" />";
        $head.= "<script type=\"text/javascript\" src=\"unauthenticated/jquery/jquery.min.js\"></script>";
        $head.= "<script type=\"text/javascript\" src=\"unauthenticated/jquery/jquery-ui.min.js\"></script>";
        $head.= "<script type=\"text/javascript\" src=\"unauthenticated/js/legacy.js\"></script>";
        $head.= "<link rel=\"stylesheet\" type=\"text/css\" href=\"unauthenticated/jquery/jquery-ui.min.css\" />";
        $head.= "<script type=\"text/javascript\" src=\"unauthenticated/js/chmod-calculator.js\"></script>";
        $head.= "<link rel=\"stylesheet\" type=\"text/css\" href=\"unauthenticated/dropdown/fg.menu.css\" />";
        $head.= "<script type=\"text/javascript\" src=\"unauthenticated/dropdown/fg.menu.js\"></script>";
        print $head;

# Set "root" icon
        if($base eq '/') {
            $root_icon = "<img src=\"images/icons/quick/drive-harddisk.png\" class=\"hdd-icon\" />";
        } else {
            $root_icon = "~";
        }
        # Legacy breadcrumbs
        print "<div id='bread' style='float: left; padding-bottom: 2px;'><a href='index.cgi?path='>$root_icon</a> / ";
        my @breadcr = split('/', $path);
        my $cp = '';
        for(my $i = 1; $i <= scalar(@breadcr)-1; $i++) {
            chomp($breadcr[$i]);
            $cp = $cp.'/'.$breadcr[$i];
            print "<a href='index.cgi?path=".&urlize($cp)."'>".
                  &html_escape($breadcr[$i])."</a> / ";
        }
        print "<br />";
        # And pagination
        $page = $in{'page'};
        $pagelimit = $userconfig{'per_page'};
        $pages = ceil((scalar(@list))/$pagelimit);
        if (not defined $page or $page > $pages) { $page = 1; }
        print "Pages: ";
        for(my $i = 1;$i <= $pages;$i++) {
            if($page eq $i) {
                print "<a class='pages active' ".
                      "href='?path=".&urlize($path).
                      "&page=$i".
                      "&query=".&urlize($query).
                      "'>".&html_escape($i)."</a>";
            } else {
                print "<a class='pages' ".
                      "href='?path=".&urlize($path).
                      "&page=$i".
                      "&query=".&urlize($query)."'>".&html_escape($i)."</a>";
            }
        }
        print "</div>";

# And toolbar
        print_template("unauthenticated/templates/legacy_quicks.html");
        print_template("unauthenticated/templates/legacy_dialogs.html");
        }
    my $info_total;
    my $info_files = scalar @files;
    my $info_folders = scalar @folders;

if ($info_files eq 1 && $info_folders eq 1) {
        $info_total = 'info_total1'
    } elsif ($info_files ne 1 && $info_folders eq 1) {
        $info_total = 'info_total2'
    } elsif ($info_files eq 1 && $info_folders ne 1) {
        $info_total = 'info_total3'
    } else {
        $info_total = 'info_total4'
    }

print "<div class='total'>" . &text($info_total, scalar @files, scalar @folders) . "</div>";

# Render current directory entries
    print &ui_form_start("", "post", undef, "id='list_form'");
    @ui_columns = (
            '<input class="_select-unselect_" type="checkbox" onclick="selectUnselect(this)" />',
            ''
        );
    push @ui_columns, ('<span data-head-name>' . $text{'name'} . '</span>');
    push @ui_columns, ('<span data-head-type>' . $text{'type'} . '</span>') if($userconfig{'columns'} =~ /type/);
    push @ui_columns, ('<span data-head-actions>' . $text{'actions'} . '</span>');
    push @ui_columns, ('<span data-head-size>' . $text{'size'} . '</span>') if($userconfig{'columns'} =~ /size/);
    push @ui_columns, ('<span data-head-owner_user>' . $text{'ownership'} . '</span>') if($userconfig{'columns'} =~ /owner_user/);
    push @ui_columns, ('<span data-head-permissions>' . $text{'permissions'} . '</span>') if($userconfig{'columns'} =~ /permissions/);
    push @ui_columns, ('<span data-head-acls>' . $text{'acls'} . '</span>') if(get_acls_status() && $userconfig{'columns'} =~ /acls/);
    push @ui_columns, ('<span data-head-attributes>' . $text{'attributes'} . '</span>') if(get_attr_status() && $userconfig{'columns'} =~ /attributes/);
    push @ui_columns, ('<span data-head-selinux>' . $text{'selinux'} . '</span>') if(get_selinux_status() && $userconfig{'columns'} =~ /selinux/);
    push @ui_columns, ('<span data-head-last_mod_time>' . $text{'last_mod_time'} . '</span>') if($userconfig{'columns'} =~ /last_mod_time/);

print &ui_columns_start(\@ui_columns);
    #foreach $link (@list) {
    for(my $count = 1 + $pagelimit*($page-1);$count <= $pagelimit+$pagelimit*($page-1);$count++) {
        if ($count > scalar(@list)) { last; }
        my $class = $count & 1 ? "odd" : "even";
        my $link = $list[$count - 1][0];
        my $acls;
        my $attributes;
        my $selinux;
        $link =~ s/\Q$cwd\E\///;
        $link =~ s/^\///g;
        $vlink = html_escape($link);
        $vlink = quote_escape($vlink);
        my $hlink = html_escape($vlink);
        $vpath = quote_escape($vpath);

my $type = $list[$count - 1][14];
        $type =~ s/\//\-/g;

my $img = "images/icons/mime/$type.png";
        unless (-e $img) { $img = "images/icons/mime/unknown.png"; }
        $size = &nice_size($list[$count - 1][8]);
        $user = getpwuid($list[$count - 1][5]) ? getpwuid($list[$count - 1][5]) : $list[$count - 1][5];
        $group = getgrgid($list[$count - 1][6]) ? getgrgid($list[$count - 1][6]) : $list[$count - 1][6];
        $permissions = sprintf("%04o", $list[$count - 1][3] & 07777);

if(get_selinux_status() && $userconfig{'columns'} =~ /selinux/) {
          $selinux = $list[$count - 1][17];
        }

if(get_attr_status() && $userconfig{'columns'} =~ /attributes/) {
          $attributes = $list[$count - 1][18];
        }

if(get_acls_status() && $userconfig{'columns'} =~ /acls/) {
          $acls = $list[$count - 1][19];
        }

$mod_time = POSIX::strftime('%Y/%m/%d - %T', localtime($list[$count - 1][10]));

$actions = "<a class='action-link' href='javascript:void(0)' onclick='renameDialog(\"$vlink\")' title='$text{'rename'}' data-container='body'>$rename_icon</a>";

if ( $list[ $count - 1 ][15] == 1 ) {
            $href = "index.cgi?path=" . &urlize("$path/$link");
        } else {
            $href = "download.cgi?file=".&urlize($link)."&path=".&urlize($path);
            if($0 =~ /search.cgi/) {
                ($fname,$fpath,$fsuffix) = fileparse($list[$count - 1][0]);
                if($base ne '/') {
                    $fpath =~ s/^\Q$base\E//g;
                }
                $actions = "$actions<a class='action-link' ".
                           "href='index.cgi?path=".&urlize($fpath)."' ".
                           "title='$text{'goto_folder'}'>$goto_icon</a>";
            }
            if (
                index($type, "text-") != -1 or
                exists($allowed_for_edit{$type})
            ) {
                $actions = "$actions<a class='action-link' href='edit_file.cgi?file=".&urlize($link)."&path=".&urlize($path)."' title='$text{'edit'}' data-container='body'>$edit_icon</a>";
            }
            if ((index($type, "application-zip") != -1             && has_command('unzip')) ||
              (
                ( index($type, "application-x-7z-compressed") != -1 ||
                  index($type, "x-raw-disk-image") != -1 ||
                  index($type, "x-cd-image") != -1
                ) && has_command('7z'))    ||
              ((index($type, "application-x-rar") != -1 || index($type, "application-vnd.rar") != -1) && has_command('unrar')) ||
              (index($type, "application-x-rpm") != -1 && has_command('rpm2cpio') && has_command('cpio')) ||
              (index($type, "application-x-deb") != -1 && has_command('dpkg'))
              ||
              (
                  (index($type, "x-compressed-tar") != -1 ||
                   index($type, "-x-tar") != -1           ||
                   (index($type, "-x-bzip") != -1 && has_command('bzip2')) ||
                   (index($type, "-gzip") != -1   && has_command('gzip'))  ||
                   (index($type, "zstd") != -1   && has_command('zstd'))  ||
                   (index($type, "-x-xz") != -1   && has_command('xz'))
                  ) &&
                  has_command('tar')))
          {
              $actions =
                "$actions <a class='action-link' href='extract.cgi?path=" . &urlize($path) .
                "&file=" . &urlize($link) . "' title='$text{'extract_archive'}' data-container='body'>$extract_icon</a> ";
          }

}
        @row_data = (
            "<a href='$href'><img src=\"$img\"></a>",
            "<a href=\"$href\" data-filemin-path=\"$href\" data-filemin-link=\"$hlink\">$vlink</a>"
        );
        push @row_data, $type if($userconfig{'columns'} =~ /type/);
        push @row_data, $actions;
        push @row_data, $size if($userconfig{'columns'} =~ /size/);
        push @row_data, $user.':'.$group if($userconfig{'columns'} =~ /owner_user/);
        push @row_data, $permissions if($userconfig{'columns'} =~ /permissions/);
        push @row_data, $acls if(get_acls_status() && $userconfig{'columns'} =~ /acls/);
        push @row_data, $attributes if(get_attr_status() && $userconfig{'columns'} =~ /attributes/);
        push @row_data, $selinux if(get_selinux_status() && $userconfig{'columns'} =~ /selinux/);
        push @row_data, $mod_time if($userconfig{'columns'} =~ /last_mod_time/);

print &ui_checked_columns_row(\@row_data, "", "name", $vlink);
    }
    print ui_columns_end();
    print &ui_hidden("path", $path),"\n";
    print &ui_form_end();
}

sub get_bookmarks {
    $confdir = "$remote_user_info[7]/.filemin";
    if(!-e "$confdir/.bookmarks") {
        return "<li><a>$text{'no_bookmarks'}</a></li>";
    }
    my $bookmarks = &read_file_lines($confdir.'/.bookmarks', 1);
    $result = '';
    foreach $bookmark(@$bookmarks) {
        $result .=
          "<li><a href='index.cgi?path=" . &urlize($bookmark) . "'>" . &html_escape($bookmark) . "</a></li>";
    }
    return $result;
}

# get_paste_buffer_file()
# Returns the location of the file for temporary copy/paste state
sub get_paste_buffer_file
{
    if (&get_product_name() eq 'usermin') {
        return $user_module_config_directory."/.buffer";
    }
    else {
        my $tmpdir = "$remote_user_info[7]/.filemin";
        &make_dir($tmpdir, 0700) if (!-d $tmpdir);
        return $tmpdir."/.buffer";
    }
}

# check_allowed_path(file)
# Calls error if some path isn't allowed
sub check_allowed_path
{
my ($file) = @_;
$file = &simplify_path($file);
my $error = 1;
foreach my $allowed_path (@allowed_paths) {
	if (&is_under_directory($allowed_path, $file)) {
		$error = 0;
		}
	}
$error && &error(&text('notallowed', '`' . &html_escape($file) . '`',
		   '`' . &html_escape(join(" , ", @allowed_paths)) . '`.'));
}

sub clean_mimetype
{
my ($f) = @_;
my $t = mimetype($f);
eval { utf8::encode($t) if (utf8::is_utf8($t)) };
return $t;
}

sub test_allowed_paths
{
if (@allowed_paths == 1 && $allowed_paths[0] eq '/') {
	return 0;
	}
return 1;
}

sub extract_files
{
my ($files_to_extract, $delete) = @_;
my @errors;
foreach my $fref (@{$files_to_extract}) {
    my $status = -1;

my $cwd = $fref->{'path'};
    my $name = $fref->{'file'};

my $extract_to = $cwd;
    if (!$in{'overwrite_existing'}) {
        my ($file_name) = $name =~ /(?|(.*)\.((?|tar|wbm|wbt)\..*)|(.*)\.([a-zA-Z]+\.(?|gpg|pgp))|(.*)\.(?=(.*))|(.*)())/;
        if (!-e "$cwd/$file_name") {
            $extract_to = "$cwd/$file_name";
        } else {
            my $__ = 1;
            for (;;) {
                my $new_dir_name = "$file_name(" . $__++ . ")";
                if (!-e "$cwd/$new_dir_name") {
                    $extract_to = "$cwd/$new_dir_name";
                    last;
                }
            }
        }
    }
    mkdir("$extract_to");
    
    my $archive_type = mimetype($cwd . '/' . $name);

if ($archive_type =~ /x-tar/ || $archive_type =~ /-compressed-tar/) {
        my $tar_cmd = has_command('tar');
        if (!$tar_cmd) {
            push(@errors, &text('extract_cmd_not_avail', "<tt>" . &html_escape($name) . "</tt>", '<tt>tar</tt>'));
        } else {
            $status = system("$tar_cmd xpf " . quotemeta("$cwd/$name") . " -C " . quotemeta($extract_to));
        }
    } elsif ($archive_type =~ /x-bzip/) {
        my $tar_cmd = has_command('tar');
        if (!$tar_cmd) {
            push(@errors, &text('extract_cmd_not_avail', "<tt>" . &html_escape($name) . "</tt>", '<tt>tar</tt>'));
        } else {
            $status = system("$tar_cmd xjfp " . quotemeta("$cwd/$name") . " -C " . quotemeta($extract_to));
        }
    } elsif ($archive_type =~ /\/gzip/) {
        my $gz_cmd = has_command('gunzip') || has_command('gzip');
        if (!$gz_cmd) {
            push(@errors, &text('extract_cmd_not_avail', "<tt>" . &html_escape($name) . "</tt>", '<tt>gzip/gunzip</tt>'));
        } else {
            $status = system("$gz_cmd -d -f -k " . quotemeta("$cwd/$name"));
        }
    } elsif ($archive_type =~ /x-xz/) {
        my $xz_cmd = has_command('xz');
        if (!$xz_cmd) {
            push(@errors, &text('extract_cmd_not_avail', "<tt>" . &html_escape($name) . "</tt>", '<tt>xz</tt>'));
        } else {
            $status = system("$xz_cmd -d -f -k " . quotemeta("$cwd/$name"));
        }
    } elsif ($archive_type =~ /x-7z/ ||
             $archive_type =~ /x-raw-disk-image/ ||
             $archive_type =~ /x-cd-image/) {
        my $x7z_cmd = has_command('7z');
        if (!$x7z_cmd) {
            push(@errors, &text('extract_cmd_not_avail', "<tt>" . &html_escape($name) . "</tt>", '<tt>7z</tt>'));
        } else {
            $status = system("$x7z_cmd x -aoa " . quotemeta("$cwd/$name") . " -o" . quotemeta($extract_to));
        }
    } elsif ($archive_type =~ /\/zip/) {
        my $unzip_cmd = has_command('unzip');
        if (!$unzip_cmd) {
            push(@errors, &text('extract_cmd_not_avail', "<tt>" . &html_escape($name) . "</tt>", '<tt>unzip</tt>'));
        } else {
            my $unzip_out = `unzip --help`;
            my $uu        = ($unzip_out =~ /-UU/ ? '-UU' : undef);
            $status = system("$unzip_cmd $uu -q -o " . quotemeta("$cwd/$name") . " -d " . quotemeta($extract_to));
        }
    } elsif ($archive_type =~ /\/x-rar|\/vnd\.rar/) {
        my $unrar_cmd = has_command('unar') || has_command('unrar');
        if (!$unrar_cmd) {
            push(@errors, &text('extract_cmd_not_avail', "<tt>" . &html_escape($name) . "</tt>", '<tt>unrar/unar</tt>'));
        } else {
            if ($unrar_cmd =~ /unar$/) {
                $status = system("$unrar_cmd " . quotemeta("$cwd/$name") . " -o " . quotemeta($extract_to));
            } else {    
                $status = system("$unrar_cmd x -r -y -o+ " . quotemeta("$cwd/$name") . " " . quotemeta($extract_to));
            }
        }
    } elsif ($archive_type =~ /\/x-rpm/) {
        my $rpm2cpio_cmd = has_command('rpm2cpio');
        my $cpio_cmd     = has_command('cpio');
        if (!$rpm2cpio_cmd) {
            push(@errors, &text('extract_cmd_not_avail', "<tt>" . &html_escape($name) . "</tt>", '<tt>rpm2cpio</tt>'));

} elsif (!$cpio_cmd) {
            push(@errors, &text('extract_cmd_not_avail', "<tt>" . &html_escape($name) . "</tt>", '<tt>cpio</tt>'));
        } else {
            $status = system("($rpm2cpio_cmd " . quotemeta("$cwd/$name") . " | (cd " . quotemeta($extract_to) . "; $cpio_cmd -idmv))");
        }

} elsif ($archive_type =~ /\/x-deb|debian\.binary-package/) {
        my $dpkg_cmd = has_command('dpkg');
        if (!$dpkg_cmd) {
            push(@errors, &text('extract_cmd_not_avail', "<tt>" . &html_escape($name) . "</tt>", '<tt>dpkg</tt>'));
        } else {
            $status = system("$dpkg_cmd -x " . quotemeta("$cwd/$name") . " " . quotemeta($extract_to));
        }
    }

# Set permissions for all extracted files
    my @perms = stat("$cwd/$name");
    system("chown -R $perms[4]:$perms[5] " . quotemeta($extract_to));

# Delete empty extraction
    rmdir($extract_to);
    
    # Delete if no error
    if ($delete && $status == 0) {
        unlink_file("$cwd/$name");
    }
}
return @errors;
}

cmd: