diff --git a/php/elFinderVolumeBox.class.php b/php/elFinderVolumeBox.class.php
new file mode 100644
index 000000000..a44f197af
--- /dev/null
+++ b/php/elFinderVolumeBox.class.php
@@ -0,0 +1,1721 @@
+ '',
+ 'client_secret' => '',
+ 'accessToken' => '',
+ 'root' => 'Box.com',
+ 'BoxApiClient' => '',
+ 'path' => '/',
+ 'separator' => '/',
+ 'tmbPath' => '',
+ 'tmbURL' => '',
+ 'tmpPath' => '',
+ 'acceptedName' => '#^[^/\\?*:|"<>]*[^./\\?*:|"<>]$#',
+ 'rootCssClass' => 'elfinder-navbar-root-box'
+ );
+ $this->options = array_merge($this->options, $opts);
+ $this->options['mimeDetect'] = 'internal';
+ }
+
+
+ /**
+ * Prepare
+ * Call from elFinder::netmout() before volume->mount()
+ *
+ * @return Array
+ * @author Naoki Sawada
+ * @author Raja Sharma updating for Box
+ **/
+ public function netmountPrepare($options)
+ {
+
+ if (empty($options['client_id']) && defined('ELFINDER_BOX_CLIENTID')) {
+ $options['client_id'] = ELFINDER_BOX_CLIENTID;
+ }
+ if (empty($options['client_secret']) && defined('ELFINDER_BOX_CLIENTSECRET')) {
+ $options['client_secret'] = ELFINDER_BOX_CLIENTSECRET;
+ }
+
+
+ if ($options['pass'] === 'reauth') {
+ $options['user'] = 'init';
+ $options['pass'] = '';
+ $this->session->remove('elFinderBoxTokens');
+ $this->session->remove('elFinderBoxAuthTokens');
+ }
+
+ try {
+ if (empty($options['client_id']) || empty($options['client_secret'])) {
+ return array('exit' => true, 'body' => '{msg:errNetMountNoDriver}');
+ }
+
+ if (isset($_GET['code'])) {
+ try {
+ // Obtain the token using the code received by the Box.com API
+ $this->session->set('elFinderBoxAuthTokens',
+ $this->obtainAccessToken($options['client_id'], $options['client_secret'], $_GET['code']));
+
+ $out = array(
+ 'node' => 'elfinder',
+ 'json' => '{"protocol": "box", "mode": "done", "reset": 1}',
+ 'bind' => 'netmount'
+
+ );
+
+ return array('exit' => 'callback', 'out' => $out);
+
+
+ } catch (Exception $e) {
+ return $e->getMessage();
+ }
+ }
+
+ if ($options['user'] === 'init') {
+ if (empty($_GET['code']) && empty($_GET['pass']) && empty($this->session->get('elFinderBoxAuthTokens'))) {
+ $cdata = '';
+ $innerKeys = array('cmd', 'host', 'options', 'pass', 'protocol', 'user');
+ $this->ARGS = $_SERVER['REQUEST_METHOD'] === 'POST'? $_POST : $_GET;
+ foreach ($this->ARGS as $k => $v) {
+ if (! in_array($k, $innerKeys)) {
+ $cdata .= '&' . $k . '=' . rawurlencode($v);
+ }
+ }
+ if (!empty($options['url']) && strpos($options['url'], 'http') !== 0) {
+ $options['url'] = $this->getConnectorUrl();
+ }
+ $callback = $options['url']
+ .'?cmd=netmount&protocol=box&host=box.com&user=init&pass=return&node='.$options['id'].$cdata;
+
+ try {
+ // Instantiates a Box.com client bound to your box application
+
+ //$offline = '';
+
+ //if (! empty($options['offline'])) {
+ //$offline = 'wl.offline_access';
+ //}
+ // Gets a log in URL with sufficient privileges from the Box.com API
+ // Persist the Box client' state for next API requests
+ $this->session->set('elFinderBoxTokens',
+ (object) array(
+ 'redirect_uri' => $this->getConnectorUrl().'?cmd=netmount&protocol=box&host=1',
+ 'token' => null,
+ ));
+
+ $url = self::AUTH_URL . '?' . http_build_query(array('response_type' => 'code', 'client_id' => $options['client_id'], 'redirect_uri' => $this->session->get('elFinderBoxTokens')->redirect_uri));
+
+
+ $url .= '&oauth_callback='.rawurlencode($callback);
+ } catch (Exception $e) {
+ return array('exit' => true, 'body' => '{msg:errAccess}');
+ }
+
+ $html = '';
+ $html .= '';
+
+ return array('exit' => true, 'body' => $html);
+
+ }
+ else{
+ $this->box = $this->session->get('elFinderBoxAuthTokens');
+
+ $result = $this->query('0', $fetch_self = false, $recursive = true);
+ $folders = [];
+
+ foreach ($result as $res) {
+ if($res->type == 'folder'){
+ $folders[$res->id] = $res->name;
+ }
+ }
+
+ natcasesort($folders);
+ $folders = ['root' => 'All Files'] + $folders;
+ $folders = json_encode($folders);
+
+ $json = '{"protocol": "box", "mode": "done", "folders": '.$folders.'}';
+ $html = 'Box.com';
+ $html .= '';
+
+ return array('exit' => true, 'body' => $html);
+
+ }
+ }
+ } catch (Exception $e) {
+ return array('exit' => true, 'body' => '{msg:errNetMountNoDriver}');
+ }
+
+ if ($this->session->get('elFinderBoxAuthTokens')) {
+ $options['accessToken'] = json_encode($this->session->get('elFinderBoxAuthTokens'));
+ }
+
+ unset($options['user'], $options['pass']);
+
+ return $options;
+ }
+
+ /**
+ * process of on netunmount
+ * Drop `box` & rm thumbs
+ *
+ * @param array $options
+ * @return boolean
+ */
+ public function netunmount($netVolumes, $key)
+ {
+ if ($tmbs = glob(rtrim($this->options['tmbPath'], '\\/').DIRECTORY_SEPARATOR.$this->tmbPrefix.'*.png')) {
+ foreach ($tmbs as $file) {
+ unlink($file);
+ }
+ }
+
+ return true;
+ }
+
+ /**
+ * Get script url
+ *
+ * @return string full URL
+ * @author Naoki Sawada
+ */
+ private function getConnectorUrl()
+ {
+ $url = ((isset($_SERVER['HTTPS']) && strtolower($_SERVER['HTTPS']) !== 'off')? 'https://' : 'http://')
+ . $_SERVER['SERVER_NAME'] // host
+ . ($_SERVER['SERVER_PORT'] == 80 ? '' : ':' . $_SERVER['SERVER_PORT']) // port
+ . $_SERVER['REQUEST_URI']; // path & query
+ list($url) = explode('?', $url);
+
+ return $url;
+ }
+
+ /*********************************************************************/
+ /* INIT AND CONFIGURE */
+ /*********************************************************************/
+
+ /**
+ * Prepare FTP connection
+ * Connect to remote server and check if credentials are correct, if so, store the connection id in $ftp_conn
+ *
+ * @return bool
+ * @author Dmitry (dio) Levashov
+ * @author Cem (DiscoFever)
+ **/
+ protected function init()
+ {
+ if (!$this->options['accessToken']) {
+ return $this->setError('Required options undefined.');
+ }
+
+ // make net mount key
+ $this->netMountKey = md5(join('-', array('box', $this->options['path'])));
+
+ if (! $this->box) {
+ try {
+ $this->options['accessToken'] = json_encode($this->session->get('elFinderBoxAuthTokens'));
+ $this->box = json_decode($this->options['accessToken']);
+ if (true !== ($res = $this->refreshBoxToken($this->box))) {
+ return $this->setError($res);
+ }
+ } catch (InvalidArgumentException $e) {
+ return $this->setError($e->getMessage());
+ }
+ try {
+ $this->box = json_decode($this->options['accessToken']);
+ } catch (Exception $e) {
+ return $this->setError($e->getMessage());
+ }
+ }
+
+ if (! $this->box) {
+ return $this->setError('OAuth extension not loaded.');
+ }
+
+ // normalize root path
+ if ($this->options['path'] == 'root') {
+ $this->options['path'] = '/';
+ }
+
+ $this->root = $this->options['path'] = $this->_normpath($this->options['path']);
+
+ $this->options['root'] == '' ? $this->options['root']= 'Box.com' : $this->options['root'];
+
+ if (empty($this->options['alias'])) {
+ $this->options['alias'] = ($this->options['path'] === '/') ? $this->options['root'] :
+ $this->query(basename($this->options['path']), $fetch_self = true)->name.'@Box.com';
+ }
+
+ $this->rootName = $this->options['alias'];
+
+ $this->tmbPrefix = 'box'.base_convert($this->netMountKey, 10, 32);
+
+ if (!empty($this->options['tmpPath'])) {
+ if ((is_dir($this->options['tmpPath']) || mkdir($this->options['tmpPath'])) && is_writable($this->options['tmpPath']))
+ {
+ $this->tmp = $this->options['tmpPath'];
+ }
+ }
+
+ if (!$this->tmp && is_writable($this->options['tmbPath'])) {
+ $this->tmp = $this->options['tmbPath'];
+ }
+ if (!$this->tmp && ($tmp = elFinder::getStaticVar('commonTempPath'))) {
+ $this->tmp = $tmp;
+ }
+
+ // This driver dose not support `syncChkAsTs`
+ $this->options['syncChkAsTs'] = false;
+
+ // 'lsPlSleep' minmum 10 sec
+ $this->options['lsPlSleep'] = max(10, $this->options['lsPlSleep']);
+
+ return true;
+ }
+
+
+ /**
+ * Configure after successfull mount.
+ *
+ * @return void
+ * @author Dmitry (dio) Levashov
+ **/
+ protected function configure()
+ {
+ parent::configure();
+
+ $this->disabled[] = 'archive';
+ $this->disabled[] = 'extract';
+ }
+
+ /**
+ * Obtains a new access token from OAuth. This token is valid for one hour.
+ *
+ * @param string $clientSecret The Box client secret.
+ * @param string $code The code returned by Box after
+ * successful log in.
+ * @param string $redirectUri Must be the same as the redirect URI passed
+ * to LoginUrl.
+ *
+ * @throws \Exception Thrown if this Client instance's clientId is not set.
+ * @throws \Exception Thrown if the redirect URI of this Client instance's
+ * state is not set.
+ */
+ protected function obtainAccessToken($client_id, $client_secret, $code)
+ {
+ if (null === $client_id) {
+ return $this->setError('The client ID must be set to call obtainAccessToken()');
+ }
+
+ if (null === $client_secret) {
+ return $this->setError('The client Secret must be set to call obtainAccessToken()');
+ }
+
+ if (null === $code) {
+ return $this->setError('Authorization code must be set to call obtainAccessToken()');
+ }
+
+ $url = self::TOKEN_URL;
+
+ $curl = curl_init();
+
+ $fields = http_build_query(
+ array(
+ 'client_id' => $client_id,
+ 'client_secret' => $client_secret,
+ 'code' => $code,
+ 'grant_type' => 'authorization_code',
+ )
+ );
+
+ curl_setopt_array($curl, array(
+ // General options.
+ CURLOPT_RETURNTRANSFER => true,
+ CURLOPT_FOLLOWLOCATION => true,
+ CURLOPT_AUTOREFERER => true,
+ CURLOPT_POST => true,
+ CURLOPT_POSTFIELDS => $fields,
+
+ CURLOPT_HTTPHEADER => array(
+ 'Content-Length: ' . strlen($fields),
+ ),
+
+ // SSL options.
+ CURLOPT_SSL_VERIFYHOST => true,
+ CURLOPT_SSL_VERIFYPEER => true,
+ CURLOPT_URL => $url,
+ ));
+
+ $result = curl_exec($curl);
+
+ if (false === $result) {
+ if (curl_errno($curl)) {
+ throw new \Exception('curl_setopt_array() failed: '
+ . curl_error($curl));
+ } else {
+ throw new \Exception('curl_setopt_array(): empty response');
+ }
+ }
+
+ $decoded = json_decode($result);
+
+ if (null === $decoded) {
+ throw new \Exception('json_decode() failed');
+ }
+
+ $token = $this->session->get('elFinderBoxDriveTokens');
+ $token->redirect_uri = null;
+
+ $token->token = (object) array(
+ 'obtained' => time(),
+ 'data' => $decoded,
+ );
+
+ return $token;
+ }
+
+ /**
+ * Get token and auto refresh
+ *
+ * @param object $box Box API client
+ * @return true|string error message
+ */
+ protected function refreshBoxToken($box)
+ {
+ try {
+ if(!array_key_exists('refresh_token', $box->token->data) || null === $box->token->data->refresh_token) {
+ return $this->setError('The refresh token is not set or no permission for renew the token.');
+ }
+ if (null === $this->options['client_id']) {
+ $this->options['client_id'] = ELFINDER_BOX_CLIENTID;
+ }
+
+ if (null === $this->options['client_secret']) {
+ $this->options['client_secret'] = ELFINDER_BOX_CLIENTSECRET;
+ }
+
+
+ if (0 >= ($box->token->obtained + $box->token->data->expires_in - time())) {
+ $url = self::TOKEN_URL;
+
+ $curl = curl_init();
+
+ curl_setopt_array($curl, array(
+ // General options.
+ CURLOPT_RETURNTRANSFER => true,
+ CURLOPT_FOLLOWLOCATION => true,
+ CURLOPT_AUTOREFERER => true,
+ CURLOPT_POST => true, // i am sending post data
+ CURLOPT_POSTFIELDS => 'client_id=' . urlencode($this->options['client_id'])
+ . '&client_secret=' . urlencode($this->options['client_secret'])
+ . '&grant_type=refresh_token'
+ . '&refresh_token=' . urlencode($box->token->data->refresh_token),
+
+ // SSL options.
+ CURLOPT_SSL_VERIFYHOST => true,
+ CURLOPT_SSL_VERIFYPEER => true,
+ CURLOPT_URL => $url,
+ ));
+
+ $result = curl_exec($curl);
+
+ if (false === $result) {
+ if (curl_errno($curl)) {
+ throw new \Exception('curl_setopt_array() failed: ' . curl_error($curl));
+ } else {
+ throw new \Exception('curl_setopt_array(): empty response');
+ }
+ }
+
+ $decoded = json_decode($result);
+
+ if (null === $decoded) {
+ throw new \Exception('json_decode() failed');
+ }
+
+ $box->token = (object) array(
+ 'obtained' => time(),
+ 'data' => $decoded,
+ );
+
+ $this->session->set('elFinderBoxAuthTokens', $box);
+ $this->options['accessToken'] = json_encode($this->session->get('elFinderBoxAuthTokens'));
+ $this->box = json_decode($this->options['accessToken']);
+
+ }
+ } catch (Exception $e) {
+ return $e->getMessage();
+ }
+ return true;
+ }
+
+ /**
+ * Creates a base cURL object which is compatible with the Box.com API.
+ *
+ * @return resource A compatible cURL object.
+ */
+ private function _prepareCurl()
+ {
+ $curl = curl_init();
+
+ $defaultOptions = array(
+ // General options.
+ CURLOPT_RETURNTRANSFER => true,
+ CURLOPT_FOLLOWLOCATION => true,
+ CURLOPT_AUTOREFERER => true,
+ CURLOPT_SSL_VERIFYHOST => true,
+ CURLOPT_SSL_VERIFYPEER => true,
+ );
+
+ curl_setopt_array($curl, $defaultOptions);
+ return $curl;
+ }
+
+ /**
+ * Creates a base cURL object which is compatible with the Box.com API.
+ *
+ * @param string $path The path of the API call (eg. /folders/0).
+ *
+ * @return resource A compatible cURL object.
+ */
+ private function _createCurl($path, $contents =false)
+ {
+ $curl = curl_init($path);
+ curl_setopt($curl, CURLOPT_FAILONERROR, true);
+ curl_setopt($curl, CURLOPT_FOLLOWLOCATION, true);
+ curl_setopt($curl, CURLOPT_RETURNTRANSFER, true);
+ curl_setopt($curl, CURLOPT_SSL_VERIFYHOST, true);
+ curl_setopt($curl, CURLOPT_SSL_VERIFYPEER, true);
+
+ if($contents){
+ return curl_exec($curl);
+ }else{
+ $result = json_decode(curl_exec($curl));
+ if(isset($result->entries)){
+ return $result->entries;
+ }else{
+ return $result;
+ }
+ }
+ }
+
+ /**
+ * Drive query and fetchAll
+ *
+ * @param string $sql
+ * @return boolean|array
+ */
+ private function query($itemId, $fetch_self = false, $recursive = false)
+ {
+ $result = [];
+
+ if (null === $itemId) {
+ $itemId = '0';
+ }
+
+ if($fetch_self == true){
+ $path = '/folders/'.$itemId.'?fields='.self::FETCHFIELDS;
+ }else{
+ $path = '/folders/'.$itemId.'/items?fields='.self::FETCHFIELDS;
+ }
+
+ if(!$this->_createCurl(self::API_URL.$path.'&access_token='.urlencode($this->box->token->data->access_token))){
+ $path = '/files/'.$itemId.'?fields='.self::FETCHFIELDS;
+ }
+
+ $url = self::API_URL . $path
+ . '&access_token=' . urlencode($this->box->token->data->access_token);
+
+ if ($recursive) {
+ foreach ($this->_createCurl($url) as $file) {
+ if($file->type == 'folder'){
+ $result[] = $file;
+ $result = array_merge($result, $this->query($file->id, $fetch_self = false, $recursive = true));
+ }else{
+ $result[] = $file;
+ }
+ }
+ }else{
+ $result = $this->_createCurl($url);
+ }
+
+ return $result;
+ }
+
+ /**
+ * Get dat(box metadata) from Box.com
+ *
+ * @param string $path
+ * @return array box metadata
+ */
+ private function getDBdat($path)
+ {
+ if($path == '/'){
+ return $this->query('0', $fetch_self = true);
+ }
+
+ empty($this->HasdirsCache[$path]) ? $HasPath = $path : $HasPath = $this->HasdirsCache[$path][0];
+
+ $itemId = basename($HasPath);
+
+ try {
+ return $this->query($itemId, $fetch_self = true);
+ } catch (Exception $e) {
+ return array();
+ }
+ }
+
+
+ /*********************************************************************/
+ /* FS API */
+ /*********************************************************************/
+
+ /**
+ * Close opened connection
+ *
+ * @return void
+ * @author Dmitry (dio) Levashov
+ **/
+ public function umount()
+ {
+ }
+
+ /**
+ * Parse line from box metadata output and return file stat (array)
+ *
+ * @param string $raw line from ftp_rawlist() output
+ * @return array
+ * @author Dmitry Levashov
+ **/
+ protected function parseRaw($raw)
+ {
+ $stat = array();
+
+ $stat['rev'] = isset($raw->id) ? $raw->id : 'root';
+ $stat['pid'] = isset($raw->parent->id) ? $raw->parent->id : '0';
+ $stat['name'] = $raw->name;
+ $stat['mime'] = $raw->type =='folder' ? 'directory' : parent::$mimetypes[pathinfo($raw->name, PATHINFO_EXTENSION)];
+ $stat['size'] = $raw->type =='folder' ? 0 : (int)$raw->size;
+ $stat['ts'] = $raw->modified_at !== null ? strtotime($raw->modified_at) : $_SERVER['REQUEST_TIME'];
+ $stat['dirs'] = 0;
+
+ if($raw->type == 'folder') {
+ $stat['dirs'] = (int)$this->_subdirs($stat['rev']);
+ }
+
+ $stat['url'] = '1';
+
+ return $stat;
+ }
+
+ /**
+ * Cache dir contents
+ *
+ * @param string $path dir path
+ * @return void
+ * @author Dmitry Levashov
+ **/
+ protected function cacheDir($path)
+ {
+ $path == '/' ? $HasPath= '/' : (empty($this->HasdirsCache[$path]) ? $HasPath = $path : $HasPath = $this->HasdirsCache[$path][0]);
+ if($HasPath == '/'){
+ $items = $this->query('0', $fetch_self=true); // get root directory with folder & files
+ $itemId = $items->id;
+ }else{
+ $itemId = basename($HasPath);
+ }
+
+
+ $this->dirsCache[$path] = array();
+ $res = $this->query($itemId);
+
+ $path == '/' ? $mountPath = '/' : $mountPath = $this->_normpath($HasPath.'/');
+
+ if ($res) {
+ foreach ($res as $raw) {
+ if ($stat = $this->parseRaw($raw)) {
+ $stat = $this->updateCache($mountPath.$raw->id, $stat);
+ if (empty($stat['hidden']) && $path !== $mountPath.$raw->id) {
+ $this->dirsCache[$path][] = $mountPath.$raw->id;
+ $this->HasdirsCache[$this->_normpath($path.'/'.$raw->name)][] = $mountPath.$raw->id;
+ }
+ }
+ }
+ }
+
+
+ return $this->dirsCache[$path];
+ }
+
+ /**
+ * Recursive files search
+ *
+ * @param string $path dir path
+ * @param string $q search string
+ * @param array $mimes
+ * @return array
+ * @author Naoki Sawada
+ **/
+ protected function doSearch($path, $q, $mimes)
+ {
+ $path == '/' ? $itemId= '0' : $itemId= basename($path);
+ empty($mimes) ? $mimeType = parent::$mimetypes[strtolower($q)] :
+ $mimeType = parent::$mimetypes[strtolower(explode("/",$mimes[0])[1])];
+
+ $path = $this->_normpath($path.'/');
+ $result = [];
+
+ $res = $this->query($itemId);
+
+ foreach ($res as $raw) {
+ if ($raw->type =='folder') {
+ $result = array_merge($result, $this->doSearch($path.$raw->id, $q, $mimes));
+ }
+ else
+ {
+ $timeout = $this->options['searchTimeout']? $this->searchStart + $this->options['searchTimeout'] : 0;
+
+ if ($timeout && $timeout < time()) {
+ $this->setError(elFinder::ERROR_SEARCH_TIMEOUT, $this->path($this->encode($path)));
+ break;
+ }
+ if ((!empty($mimeType) && parent::$mimetypes[pathinfo($raw->name, PATHINFO_EXTENSION)] !== $mimeType) || (empty($mimeType) && strcasecmp($raw->name,$q))){
+ continue;
+ }
+ if ($stat = $this->parseRaw($raw)) {
+ if (!isset($this->cache[$path.$raw->id])) {
+ $stat = $this->updateCache($path.$raw->id, $stat);
+ }
+ if (!empty($stat['hidden']) || ($mimes && $stat['mime'] === 'directory') || !$this->mimeAccepted($stat['mime'], $mimes)) {
+ continue;
+ }
+
+ $stat = $this->stat($path.$raw->id);
+ $stat['path'] = $this->path($stat['hash']);
+ $result[] = $stat;
+ }
+
+ }
+ }
+
+ return $result;
+ }
+
+ /**
+ * Copy file/recursive copy dir only in current volume.
+ * Return new file path or false.
+ *
+ * @param string $src source path
+ * @param string $dst destination dir path
+ * @param string $name new file name (optionaly)
+ * @return string|false
+ * @author Dmitry (dio) Levashov
+ * @author Naoki Sawada
+ **/
+ protected function copy($src, $dst, $name)
+ {
+ $this->clearcache();
+
+ if (explode(".",basename($src))[0] == 'folder') {
+ $itemId = basename($this->_mkdir($dst, $name));
+ $path = $this->_joinPath($dst, $itemId);
+
+ $res = $this->query(basename($src));
+ foreach ($res as $raw) {
+ $raw->type =='folder' ? $this->copy($src.'/'.$raw->id, $path, $raw->name) : $this->_copy($src.'/'.$raw->id, $path, $raw->name);
+ }
+
+ return $itemId
+ ? $this->_joinPath($dst, $itemId)
+ : $this->setError(elFinder::ERROR_COPY, $this->_path($src));
+ } else {
+ $itemId = $this->_copy($src, $dst, $name);
+ return $itemId
+ ? $this->_joinPath($dst, $itemId)
+ : $this->setError(elFinder::ERROR_COPY, $this->_path($src));
+ }
+ }
+
+ /**
+ * Remove file/ recursive remove dir
+ *
+ * @param string $path file path
+ * @param bool $force try to remove even if file locked
+ * @return bool
+ * @author Dmitry (dio) Levashov
+ * @author Naoki Sawada
+ **/
+ protected function remove($path, $force = false, $recursive = false)
+ {
+ $stat = $this->stat($path);
+ $stat['realpath'] = $path;
+ $this->rmTmb($stat);
+ $this->clearcache();
+
+ if (empty($stat)) {
+ return $this->setError(elFinder::ERROR_RM, $this->_path($path), elFinder::ERROR_FILE_NOT_FOUND);
+ }
+
+ if (!$force && !empty($stat['locked'])) {
+ return $this->setError(elFinder::ERROR_LOCKED, $this->_path($path));
+ }
+
+ if ($stat['mime'] == 'directory') {
+ if (!$recursive && !$this->_rmdir($path)) {
+ return $this->setError(elFinder::ERROR_RM, $this->_path($path));
+ }
+ } else {
+ if (!$recursive && !$this->_unlink($path, 'files')) {
+ return $this->setError(elFinder::ERROR_RM, $this->_path($path));
+ }
+ }
+
+ $this->removed[] = $stat;
+ return true;
+ }
+
+ /**
+ * Create thumnbnail and return it's URL on success
+ *
+ * @param string $path file path
+ * @param string $mime file mime type
+
+ * @return string|false
+ * @author Dmitry (dio) Levashov
+ * @author Naoki Sawada
+ **/
+ protected function createTmb($path, $stat)
+ {
+ if (!$stat || !$this->canCreateTmb($path, $stat)) {
+ return false;
+ }
+
+ $name = $this->tmbname($stat);
+ $tmb = $this->tmbPath.DIRECTORY_SEPARATOR.$name;
+
+ // copy image into tmbPath so some drivers does not store files on local fs
+ if (! $data = $this->getThumbnail($path)) {
+ return false;
+ }
+ if (! file_put_contents($tmb, $data)) {
+ return false;
+ }
+
+ $result = false;
+
+ $tmbSize = $this->tmbSize;
+
+ if (($s = getimagesize($tmb)) == false) {
+ return false;
+ }
+
+ /* If image smaller or equal thumbnail size - just fitting to thumbnail square */
+ if ($s[0] <= $tmbSize && $s[1] <= $tmbSize) {
+ $result = $this->imgSquareFit($tmb, $tmbSize, $tmbSize, 'center', 'middle', $this->options['tmbBgColor'], 'png');
+ } else {
+ if ($this->options['tmbCrop']) {
+
+ /* Resize and crop if image bigger than thumbnail */
+ if (!(($s[0] > $tmbSize && $s[1] <= $tmbSize) || ($s[0] <= $tmbSize && $s[1] > $tmbSize)) || ($s[0] > $tmbSize && $s[1] > $tmbSize)) {
+ $result = $this->imgResize($tmb, $tmbSize, $tmbSize, true, false, 'png');
+ }
+
+ if (($s = getimagesize($tmb)) != false) {
+ $x = $s[0] > $tmbSize ? intval(($s[0] - $tmbSize)/2) : 0;
+ $y = $s[1] > $tmbSize ? intval(($s[1] - $tmbSize)/2) : 0;
+ $result = $this->imgCrop($tmb, $tmbSize, $tmbSize, $x, $y, 'png');
+ }
+ } else {
+ $result = $this->imgResize($tmb, $tmbSize, $tmbSize, true, true, 'png');
+ }
+
+ $result = $this->imgSquareFit($tmb, $tmbSize, $tmbSize, 'center', 'middle', $this->options['tmbBgColor'], 'png');
+ }
+
+ if (!$result) {
+ unlink($tmb);
+ return false;
+ }
+
+ return $name;
+ }
+
+ /**
+ * Return thumbnail file name for required file
+ *
+ * @param array $stat file stat
+ * @return string
+ * @author Dmitry (dio) Levashov
+ **/
+ protected function tmbname($stat)
+ {
+ return $this->tmbPrefix.$stat['rev'].$stat['ts'].'.png';
+ }
+
+ /**
+ * Get thumbnail from Box.com
+ * @param string $path
+ * @param string $size
+ * @return string | boolean
+ */
+ protected function getThumbnail($path)
+ {
+ $itemId = basename($path);
+
+ try {
+ $url = self::API_URL . '/files/'.$itemId.'/content'
+ . '?access_token=' . urlencode($this->box->token->data->access_token);
+
+ $contents = $this->_createCurl($url, true);
+ return $contents;
+
+ } catch (Exception $e) {
+ return false;
+ }
+ }
+
+
+ /**
+ * Return content URL
+ *
+ * @param string $hash file hash
+ * @param array $options options
+ * @return array
+ * @author Naoki Sawada
+ **/
+ public function getContentUrl($hash, $options = array())
+ {
+
+ if (($file = $this->file($hash)) == false || !$file['url'] || $file['url'] == 1) {
+ $path = $this->decode($hash);
+
+ $itemId = basename($path);
+ $file = $this->query($itemId,$fetch_self =true);
+ $url = self::API_URL . '/files/' . $itemId . '/content'
+ . '?access_token=' . urlencode($this->box->token->data->access_token);
+
+ $res = $this->_createCurl($url, true);
+ if($res) {
+ return $res;
+ }
+
+ }
+
+ return $file['url'];
+ }
+
+ /*********************** paths/urls *************************/
+
+ /**
+ * Return parent directory path
+ *
+ * @param string $path file path
+ * @return string
+ * @author Dmitry (dio) Levashov
+ **/
+ protected function _dirname($path)
+ {
+ return $this->_normpath(dirname($path));
+ }
+
+ /**
+ * Return file name
+ *
+ * @param string $path file path
+ * @return string
+ * @author Dmitry (dio) Levashov
+ **/
+ protected function _basename($path)
+ {
+ return basename($path);
+ }
+
+ /**
+ * Join dir name and file name and retur full path
+ *
+ * @param string $dir
+ * @param string $name
+ * @return string
+ * @author Dmitry (dio) Levashov
+ **/
+ protected function _joinPath($dir, $name)
+ {
+ return $this->_normpath($dir.'/'.$name);
+ }
+
+ /**
+ * Return normalized path, this works the same as os.path.normpath() in Python
+ *
+ * @param string $path path
+ * @return string
+ * @author Troex Nevelin
+ **/
+ protected function _normpath($path)
+ {
+ if (DIRECTORY_SEPARATOR !== '/') {
+ $path = str_replace(DIRECTORY_SEPARATOR, '/', $path);
+ }
+ $path = '/' . ltrim($path, '/');
+
+ return $path;
+ }
+
+ /**
+ * Return file path related to root dir
+ *
+ * @param string $path file path
+ * @return string
+ * @author Dmitry (dio) Levashov
+ **/
+ protected function _relpath($path)
+ {
+ return $path;
+ }
+
+ /**
+ * Convert path related to root dir into real path
+ *
+ * @param string $path file path
+ * @return string
+ * @author Dmitry (dio) Levashov
+ **/
+ protected function _abspath($path)
+ {
+ return $path;
+ }
+
+ /**
+ * Return fake path started from root dir
+ *
+ * @param string $path file path
+ * @return string
+ * @author Dmitry (dio) Levashov
+ **/
+ protected function _path($path)
+ {
+ return $this->rootName . $this->_normpath(substr($path, strlen($this->root)));
+ }
+
+ /**
+ * Return true if $path is children of $parent
+ *
+ * @param string $path path to check
+ * @param string $parent parent path
+ * @return bool
+ * @author Dmitry (dio) Levashov
+ **/
+ protected function _inpath($path, $parent)
+ {
+ return $path == $parent || strpos($path, $parent.'/') === 0;
+ }
+
+ /***************** file stat ********************/
+ /**
+ * Return stat for given path.
+ * Stat contains following fields:
+ * - (int) size file size in b. required
+ * - (int) ts file modification time in unix time. required
+ * - (string) mime mimetype. required for folders, others - optionally
+ * - (bool) read read permissions. required
+ * - (bool) write write permissions. required
+ * - (bool) locked is object locked. optionally
+ * - (bool) hidden is object hidden. optionally
+ * - (string) alias for symlinks - link target path relative to root path. optionally
+ * - (string) target for symlinks - link target path. optionally
+ *
+ * If file does not exists - returns empty array or false.
+ *
+ * @param string $path file path
+ * @return array|false
+ * @author Dmitry (dio) Levashov
+ **/
+ protected function _stat($path)
+ {
+ if ($raw = $this->getDBdat($path)) {
+
+ return $this->parseRaw($raw);
+ }
+ return false;
+ }
+
+ /**
+ * Return true if path is dir and has at least one childs directory
+ *
+ * @param string $path dir path
+ * @return bool
+ * @author Dmitry (dio) Levashov
+ **/
+ protected function _subdirs($path)
+ {
+ if($path == '/'){
+ $itemId = '0';
+ }else{
+ $itemId = basename($path);
+ }
+
+ $res = $this->query($itemId);
+ if($res[0]->type == 'folder'){
+ return true;
+ }
+
+ return false;
+ }
+
+ /**
+ * Return object width and height
+ * Ususaly used for images, but can be realize for video etc...
+ *
+ * @param string $path file path
+ * @param string $mime file mime type
+ * @return string
+ * @author Dmitry (dio) Levashov
+ **/
+ protected function _dimensions($path, $mime)
+ {
+ if (strpos($mime, 'image') !== 0) {
+ return '';
+ }
+
+ $ret = '';
+ if ($work = $this->getWorkFile($path)) {
+ if ($size = @getimagesize($work)) {
+ $cache['width'] = $size[0];
+ $cache['height'] = $size[1];
+ $ret = $size[0].'x'.$size[1];
+ }
+ }
+ is_file($work) && @unlink($work);
+ return $ret;
+ }
+
+ /******************** file/dir content *********************/
+
+ /**
+ * Return files list in directory.
+ *
+ * @param string $path dir path
+ * @return array
+ * @author Dmitry (dio) Levashov
+ * @author Cem (DiscoFever)
+ **/
+ protected function _scandir($path)
+ {
+ return isset($this->dirsCache[$path])
+ ? $this->dirsCache[$path]
+ : $this->cacheDir($path);
+ }
+
+ /**
+ * Open file and return file pointer
+ *
+ * @param string $path file path
+ * @param bool $write open file for writing
+ * @return resource|false
+ * @author Dmitry (dio) Levashov
+ **/
+ protected function _fopen($path, $mode='rb')
+ {
+ if (($mode == 'rb' || $mode == 'r')) {
+ try {
+ $itemId = basename($path);
+ $url = self::API_URL . '/files/'.$itemId.'/content'
+ . '?access_token=' . urlencode($this->box->token->data->access_token);
+
+ $contents = $this->_createCurl($url, true);
+
+ $fp = tmpfile();
+ fputs($fp , $contents);
+ rewind($fp);
+
+ return $fp;
+ } catch (Exception $e) {
+ return false;
+ }
+ }
+
+ if ($this->tmp) {
+ $contents = $this->_getContents($path);
+
+ if ($contents === false) {
+ return false;
+ }
+
+ if ($local = $this->getTempFile($path)) {
+ if (file_put_contents($local, $contents, LOCK_EX) !== false) {
+ return @fopen($local, $mode);
+ }
+ }
+ }
+
+ return false;
+ }
+
+ /**
+ * Close opened file
+ *
+ * @param resource $fp file pointer
+ * @return bool
+ * @author Dmitry (dio) Levashov
+ **/
+ protected function _fclose($fp, $path='')
+ {
+ fclose($fp);
+ if ($path) {
+ unlink($this->getTempFile($path));
+ }
+ }
+
+ /******************** file/dir manipulations *************************/
+
+ /**
+ * Create dir and return created dir path or false on failed
+ *
+ * @param string $path parent dir path
+ * @param string $name new directory name
+ * @return string|bool
+ * @author Dmitry (dio) Levashov
+ **/
+ protected function _mkdir($path, $name)
+ {
+ $path = $this->_normpath($path.'/'.$name);
+ basename(dirname($path)) == '' ? $parentId = '0' : $parentId = basename(dirname($path));
+
+ try {
+ $params = array('name' => $name, 'parent' => array('id' => $parentId));
+
+ $url = self::API_URL . '/folders'
+ . '?access_token=' . urlencode($this->box->token->data->access_token);
+
+ $curl = $this->_prepareCurl();
+
+ curl_setopt_array($curl, array(
+ CURLOPT_URL => $url,
+ CURLOPT_POST => true,
+ CURLOPT_POSTFIELDS => json_encode($params),
+ ));
+
+ //create the Folder in the Parent
+ $result = curl_exec($curl);
+ $folder = json_decode($result);
+
+ basename(dirname($path)) == '' ? $path = '/'.$folder->id : $path = dirname($path).'/'.$folder->id;
+
+ } catch (Exception $e) {
+ return $this->setError('Box error: '.$e->getMessage());
+ }
+
+ return $path;
+ }
+
+ /**
+ * Create file and return it's path or false on failed
+ *
+ * @param string $path parent dir path
+ * @param string $name new file name
+ * @return string|bool
+ * @author Dmitry (dio) Levashov
+ **/
+ protected function _mkfile($path, $name)
+ {
+ $path == '/' ? $path = $path.$name : $path = $path.'/'.$name;
+ return $this->_filePutContents($path, '');
+ }
+
+ /**
+ * Create symlink. FTP driver does not support symlinks.
+ *
+ * @param string $target link target
+ * @param string $path symlink path
+ * @return bool
+ * @author Dmitry (dio) Levashov
+ **/
+ protected function _symlink($target, $path, $name)
+ {
+ return false;
+ }
+
+ /**
+ * Copy file into another file
+ *
+ * @param string $source source file path
+ * @param string $targetDir target directory path
+ * @param string $name new file name
+ * @return bool
+ * @author Dmitry (dio) Levashov
+ **/
+ protected function _copy($source, $targetDir, $name)
+ {
+ $path = $this->_normpath($targetDir.'/'.$name);
+
+ try {
+ //Set the Parent id
+ $targetDir == '/' ? $parentId = '0' : $parentId = basename($targetDir);
+ $properties = array('destination'=>$parentId);
+
+ $url = self::API_URL . basename($source);
+ $data = (object) $properties;
+
+ $curl = $this->_prepareCurl();
+
+ curl_setopt_array($curl, array(
+ CURLOPT_URL => $url,
+ CURLOPT_CUSTOMREQUEST => 'COPY',
+
+ CURLOPT_HTTPHEADER => array(
+ // The data is sent as JSON as per Box documentation.
+ 'Content-Type: application/json',
+
+ 'Authorization: Bearer ' . $this->box->token->data->access_token,
+ ),
+
+ CURLOPT_POSTFIELDS => json_encode($data),
+ ));
+
+ //copy File or Folder in the Parent
+ $result = json_decode(curl_exec($curl));
+
+ return $result->id;
+
+ } catch (Exception $e) {
+ return $this->setError('Box error: '.$e->getMessage());
+ }
+ return true;
+ }
+
+ /**
+ * Move file into another parent dir.
+ * Return new file path or false.
+ *
+ * @param string $source source file path
+ * @param string $target target dir path
+ * @param string $name file name
+ * @return string|bool
+ * @author Dmitry (dio) Levashov
+ **/
+ protected function _move($source, $targetDir, $name)
+ {
+ try {
+ //moving and renaming a file or directory
+ //Set new Parent and remove old parent
+ $targetDir == '/' ? $targetParentId = '0' : $targetParentId = basename($targetDir);
+ $target = $this->_normpath($targetDir.'/'.basename($source));
+
+ $itemId = basename($source);
+
+ //rename or move file or folder in destination target
+ $properties = array('name' => $name, 'parent' => array('id' => $targetParentId));
+ $mimeType = parent::$mimetypes[strtolower(explode('.',$name)[1])];
+
+ empty($mimeType) ? $type = 'folders' : $type = 'files';
+
+ $url = self::API_URL . '/'.$type.'/'.$itemId;
+ $data = (object) $properties;
+
+ $curl = $this->_prepareCurl();
+
+ curl_setopt_array($curl, array(
+ CURLOPT_URL => $url,
+ CURLOPT_CUSTOMREQUEST => 'PUT',
+
+ CURLOPT_HTTPHEADER => array(
+ // The data is sent as JSON as per Box documentation.
+ 'Content-Type: application/json',
+ 'Authorization: Bearer ' . $this->box->token->data->access_token,
+ ),
+
+ CURLOPT_POSTFIELDS => json_encode($data),
+ ));
+
+ $result = curl_exec($curl);
+
+
+ } catch (Exception $e) {
+ return $this->setError('Box error: '.$e->getMessage());
+ }
+
+ return $target;
+ }
+
+
+ /**
+ * Remove file
+ *
+ * @param string $path file path
+ * @return bool
+ * @author Dmitry (dio) Levashov
+ **/
+ protected function _unlink($path, $type = null)
+ {
+ try {
+ $itemId = basename($path);
+
+ if($type == 'folders'){
+ $url = self::API_URL . '/' . $type . '/' . $itemId . '?recursive=true'
+ . '&access_token=' . urlencode($this->box->token->data->access_token);
+ }else{
+ $url = self::API_URL . '/' . $type . '/' . $itemId
+ . '?access_token=' . urlencode($this->box->token->data->access_token);
+ }
+
+ $curl = $this->_prepareCurl();
+ curl_setopt_array($curl, array(
+ CURLOPT_URL => $url,
+ CURLOPT_CUSTOMREQUEST => 'DELETE',
+ ));
+
+ //unlink or delete File or Folder in the Parent
+ $result = curl_exec($curl);
+
+ } catch (Exception $e) {
+ return $this->setError('Box error: '.$e->getMessage());
+ }
+ return true;
+ }
+
+ /**
+ * Remove dir
+ *
+ * @param string $path dir path
+ * @return bool
+ * @author Dmitry (dio) Levashov
+ **/
+ protected function _rmdir($path)
+ {
+ return $this->_unlink($path, 'folders');
+ }
+
+ /**
+ * Create new file and write into it from file pointer.
+ * Return new file path or false on error.
+ *
+ * @param resource $fp file pointer
+ * @param string $dir target dir path
+ * @param string $name file name
+ * @param array $stat file stat (required by some virtual fs)
+ * @return bool|string
+ * @author Dmitry (dio) Levashov
+ **/
+ protected function _save($fp, $path, $name, $stat)
+ {
+ if ($name) {
+ $path .= '/'.$name;
+ }
+ $path = $this->_normpath($path);
+
+ empty(basename(dirname($path))) ? $parentId ='0' : $parentId = basename(dirname($path));
+ isset($stat['name']) ? $name = $stat['name'] : $name = basename($path);
+
+ $file_exists = '';
+ if(empty($stat['rev']) && empty($stat['pid'])){
+ $file = $this->query($parentId);
+ if($file){
+ foreach($file as $f){
+ if($f->name == $name || $f->id == basename($path)){
+ $name = $f->name;
+ $file_exists = 'true';
+ break;
+ }
+ }
+ }
+ }
+
+ try {
+
+ //Create or Update a file
+ if($file_exists == 'true' && !empty($stat) && empty($stat['rev'])){
+ return $this->_normpath(dirname($path).'/'.$f->id);
+ }
+
+ if (is_resource($fp)) {
+ $stream = $fp;
+ } else {
+ $options = array(
+ 'stream_back_end' => 'php://temp',
+ );
+
+ $stream = fopen($options['stream_back_end'], 'rw+b');
+
+ if (false === $stream) {
+ throw new \Exception('fopen() failed');
+ }
+
+ if (false === fwrite($stream, $fp)) {
+ fclose($stream);
+ throw new \Exception('fwrite() failed');
+ }
+
+ if (!rewind($stream)) {
+ fclose($stream);
+ throw new \Exception('rewind() failed');
+ }
+ }
+
+ //rename or move file or folder in destination target
+ $properties = array('name' => $name, 'parent' => array('id' => $parentId));
+
+ $data = (object) $properties;
+
+ $curl = $this->_prepareCurl();
+
+ $url = self::UPLOAD_URL . '/files/content?'. json_encode($data)
+ . '&access_token=' . urlencode($this->box->token->data->access_token);
+ debug($url);
+ $curl = $this->_prepareCurl();
+ $stats = fstat($stream);
+
+ $options = array(
+ CURLOPT_URL => $url,
+ CURLOPT_POST=> true,
+ CURLOPT_POSTFIELDS => $params,
+ CURLOPT_POSTFIELDS => $properties,
+ CURLOPT_INFILE => $stream,
+ CURLOPT_INFILESIZE => $stats[7], // Size
+ );
+
+ curl_setopt_array($curl, $options);
+
+ //create or update File in the Target
+ $file = json_decode(curl_exec($curl));
+
+ if (!is_resource($fp)) {
+ fclose($stream);
+ }
+
+
+
+ } catch (Exception $e) {
+ return $this->setError('Box error: '.$e->getMessage());
+ }
+ $path = $this->_normpath(dirname($path).'/'.$file->id);
+
+ return $path;
+ }
+
+ /**
+ * Get file contents
+ *
+ * @param string $path file path
+ * @return string|false
+ * @author Dmitry (dio) Levashov
+ **/
+ protected function _getContents($path)
+ {
+ $contents = '';
+
+ try {
+ $itemId = basename($path);
+ $url = self::API_URL . '/files/'.$itemId.'/content'
+ . '?access_token=' . urlencode($this->box->token->data->access_token);
+
+ $contents = $this->_createCurl($url, true);
+
+ } catch (Exception $e) {
+ return $this->setError('Box error: '.$e->getMessage());
+ }
+
+ return $contents;
+ }
+
+ /**
+ * Write a string to a file
+ *
+ * @param string $path file path
+ * @param string $content new file content
+ * @return bool
+ * @author Dmitry (dio) Levashov
+ **/
+ protected function _filePutContents($path, $content)
+ {
+ $res = false;
+
+ if ($local = $this->getTempFile($path)) {
+ if (file_put_contents($local, $content, LOCK_EX) !== false
+ && ($fp = fopen($local, 'rb'))) {
+ clearstatcache();
+ $res = $this->_save($fp, $path, '', array());
+ fclose($fp);
+
+ }
+ file_exists($local) && unlink($local);
+ }
+
+ return $res;
+ }
+
+
+ /**
+ * Detect available archivers
+ *
+ * @return void
+ **/
+ protected function _checkArchivers()
+ {
+ // die('Not yet implemented. (_checkArchivers)');
+ return array();
+ }
+
+ /**
+ * chmod implementation
+ *
+ * @return bool
+ **/
+ protected function _chmod($path, $mode)
+ {
+ return false;
+ }
+
+ /**
+ * Unpack archive
+ *
+ * @param string $path archive path
+ * @param array $arc archiver command and arguments (same as in $this->archivers)
+ * @return true
+ * @return void
+ * @author Dmitry (dio) Levashov
+ * @author Alexey Sukhotin
+ **/
+ protected function _unpack($path, $arc)
+ {
+ die('Not yet implemented. (_unpack)');
+ //return false;
+ }
+
+ /**
+ * Recursive symlinks search
+ *
+ * @param string $path file/dir path
+ * @return bool
+ * @author Dmitry (dio) Levashov
+ **/
+ protected function _findSymlinks($path)
+ {
+ die('Not yet implemented. (_findSymlinks)');
+ }
+
+ /**
+ * Extract files from archive
+ *
+ * @param string $path archive path
+ * @param array $arc archiver command and arguments (same as in $this->archivers)
+ * @return true
+ * @author Dmitry (dio) Levashov,
+ * @author Alexey Sukhotin
+ **/
+ protected function _extract($path, $arc)
+ {
+ die('Not yet implemented. (_extract)');
+ }
+
+ /**
+ * Create archive and return its path
+ *
+ * @param string $dir target dir
+ * @param array $files files names list
+ * @param string $name archive name
+ * @param array $arc archiver options
+ * @return string|bool
+ * @author Dmitry (dio) Levashov,
+ * @author Alexey Sukhotin
+ **/
+ protected function _archive($dir, $files, $name, $arc)
+ {
+ die('Not yet implemented. (_archive)');
+ }
+} // END class
+