From 015f8bb4553727386babad8b73e1edb11f1722c6 Mon Sep 17 00:00:00 2001
From: Chuck Brazie <brazie@us.ibm.com>
Date: Wed, 22 Feb 2017 11:40:29 -0500
Subject: [PATCH] New file

Change-Id: I0559cdd03f6f7dba7c757ba23d995556e97067fe
---
 xCAT-UI/lib/uploadfile.php | 63 ++++++++++++++++++++++++++++++++++++++
 1 file changed, 63 insertions(+)
 create mode 100644 xCAT-UI/lib/uploadfile.php

diff --git a/xCAT-UI/lib/uploadfile.php b/xCAT-UI/lib/uploadfile.php
new file mode 100644
index 000000000..fa382c587
--- /dev/null
+++ b/xCAT-UI/lib/uploadfile.php
@@ -0,0 +1,63 @@
+<?php
+/**
+ * Upload a given file into /var/tmp
+ */
+$TOPDIR = '..';
+require_once "$TOPDIR/lib/functions.php";
+require_once "$TOPDIR/lib/jsonwrapper.php";
+
+session_start();
+
+if (!is_logged()) {
+	echo "You are not logged in!";
+	return;
+}
+
+// Set the file upload size limit (not sure if this actually works)
+ini_set('upload_max_filesize', '4096M');
+ini_set('post_max_size', '4096M');
+ini_set('max_input_time', -1);
+
+// Set time limit on how long this can run
+set_time_limit(1200);
+
+// Grab the target destination and file type
+$dest =  $_GET["destination"];
+
+// Only allow uploads onto /install
+if (strcmp(substr($dest, 0, 9), "/install/") != 0) {
+	echo "You are only authorized to upload onto /install subdirectories";
+	return;
+}
+
+$file = $_FILES["file"]["name"];
+$path = $dest . "/" . $file;
+	
+if (move_uploaded_file($_FILES["file"]["tmp_name"], $path)) {
+	echo "File successfully uploaded";
+	chmod($path, 0755);  // Change file to be executable
+} else {
+	echo "Failed to upload file to $path. ";
+	
+	// Obtain the reason for failure
+	$reason = "";
+	switch ($_FILES["file"]["error"]) {
+		case 1:
+			$reason = "The file is bigger than the PHP installation allows.";
+			break;
+		case 2:
+			$reason = "The file is bigger than this form allows.";
+			break;
+		case 3:
+			$reason = "Only part of the file was uploaded.";
+			break;
+		case 4:
+			$reason = "No file was uploaded.";
+			break;
+		default:
+			$reason = "Unknown error.";
+	}
+	
+	echo $reason;
+}
+?>
\ No newline at end of file