<?php declare(strict_types=1); /* TXTWRK client-side server bridge Location expected: /server/txtwrk/manage.php Root resolved as: /server/txtwrk/../../ => public/server root */ header("Access-Control-Allow-Origin: *"); header("Access-Control-Allow-Methods: GET, POST, OPTIONS"); header("Access-Control-Allow-Headers: Content-Type"); if ($_SERVER['REQUEST_METHOD'] === 'OPTIONS') { http_response_code(200); exit; } $action = $_GET['action'] ?? "list"; $root = realpath(__DIR__ . "/../../"); if (!$root || !is_dir($root)) { header("Content-Type: application/json; charset=utf-8"); echo json_encode(["success" => false, "error" => "Invalid server root"]); exit; } /* ═══════════════════════════════════════════════════════ OUTPUT / BASIC HELPERS ═══════════════════════════════════════════════════════ */ function json_out(array $arr): void { header("Content-Type: application/json; charset=utf-8"); echo json_encode($arr); exit; } function path_inside_root(string $path, string $root): bool { $root = rtrim($root, DIRECTORY_SEPARATOR); return $path === $root || strpos($path, $root . DIRECTORY_SEPARATOR) === 0; } function normalise_relative_path(string $path): string { $path = trim($path); $path = str_replace("\\", "/", $path); $path = trim($path, "/"); $parts = []; foreach (explode("/", $path) as $part) { if ($part === "" || $part === ".") continue; if ($part === "..") return ""; $parts[] = $part; } return implode("/", $parts); } function safe_name_only(string $name): string { $name = trim($name); $name = str_replace(["\\", "/"], "", $name); $name = basename($name); if ($name === "" || $name === "." || $name === "..") { return ""; } return $name; } function safe_existing_dir(string $root, string $path): ?string { $path = normalise_relative_path($path); $target = $path === "" ? $root : realpath($root . "/" . $path); if (!$target || !is_dir($target) || !path_inside_root($target, $root)) { return null; } return $target; } function safe_existing_file(string $root, string $file): ?string { $file = normalise_relative_path($file); if ($file === "") return null; $base = realpath($root . "/" . $file); if (!$base || !is_file($base) || !path_inside_root($base, $root)) { return null; } return $base; } function safe_child_path(string $targetDir, string $name, string $root): ?string { $safeName = safe_name_only($name); if ($safeName === "") return null; $path = $targetDir . "/" . $safeName; $parentReal = realpath($targetDir); if (!$parentReal || !path_inside_root($parentReal, $root)) { return null; } return $path; } function get_posted_content(): string { if (isset($_POST['content'])) { return (string)$_POST['content']; } $raw = file_get_contents("php://input"); return $raw === false ? "" : $raw; } /* ═══════════════════════════════════════════════════════ CONTROLLER FILE ═══════════════════════════════════════════════════════ */ function controller_file(string $root): string { return $root . "/server/txtwrk/manage.txtwrk_controller"; } function default_controller_data(): array { return [ "messages" => [], "requests" => [], "chat_count" => 0 ]; } function read_controller_data(string $root): array { $flag = controller_file($root); if (!file_exists($flag)) { @mkdir(dirname($flag), 0755, true); file_put_contents($flag, json_encode(default_controller_data(), JSON_PRETTY_PRINT), LOCK_EX); } $raw = file_get_contents($flag); $data = json_decode($raw ?: "", true); if (!is_array($data)) { $data = default_controller_data(); } if (!isset($data["messages"]) || !is_array($data["messages"])) $data["messages"] = []; if (!isset($data["requests"]) || !is_array($data["requests"])) $data["requests"] = []; if (!isset($data["chat_count"])) $data["chat_count"] = 0; return $data; } function write_controller_data(string $root, array $data): bool { $flag = controller_file($root); @mkdir(dirname($flag), 0755, true); $fp = fopen($flag, "c+"); if (!$fp) return false; flock($fp, LOCK_EX); ftruncate($fp, 0); rewind($fp); fwrite($fp, json_encode($data, JSON_PRETTY_PRINT)); fflush($fp); flock($fp, LOCK_UN); fclose($fp); return true; } /* ═══════════════════════════════════════════════════════ LOCK / EDIT VERSION HELPERS ═══════════════════════════════════════════════════════ */ function member_lock_file(string $base, int $memberID): string { return $base . "." . intval($memberID); } function is_edit_version_file(string $path): bool { return preg_match('/\.txtwrk\.\d+$/', $path) === 1; } function is_request_file(string $path): bool { return preg_match('/\.requests\.\d+$/', $path) === 1; } function is_numeric_lock_file(string $path): bool { if (is_edit_version_file($path)) return false; if (is_request_file($path)) return false; return preg_match('/\.\d+$/', $path) === 1; } function get_lock_owner(string $base): ?int { $locks = glob($base . ".*"); if (!$locks) return null; foreach ($locks as $lock) { if (!is_numeric_lock_file($lock)) continue; if (preg_match('/\.(\d+)$/', $lock, $m)) { return intval($m[1]); } } return null; } function find_lock_file(string $base): ?string { $locks = glob($base . ".*"); if (!$locks) return null; foreach ($locks as $lock) { if (is_numeric_lock_file($lock)) { return $lock; } } return null; } function latest_edit_version(string $base): int { $files = glob($base . ".txtwrk.*"); $latest = 0; if ($files) { foreach ($files as $file) { if (preg_match('/\.txtwrk\.(\d+)$/', $file, $m)) { $version = intval($m[1]); if ($version > $latest) { $latest = $version; } } } } return $latest; } function edit_version_file(string $base, int $version): string { return $base . ".txtwrk." . intval($version); } function ensure_first_edit_version(string $base): int { $latest = latest_edit_version($base); if ($latest > 0) { return $latest; } $content = file_get_contents($base); if ($content === false) $content = ""; $first = edit_version_file($base, 1); file_put_contents($first, $content, LOCK_EX); return 1; } function user_owns_lock(string $base, int $memberID): bool { return file_exists(member_lock_file($base, $memberID)); } /* ═══════════════════════════════════════════════════════ RECURSIVE DELETE ═══════════════════════════════════════════════════════ */ function delete_recursive(string $path, string $root): bool { $real = realpath($path); if (!$real || !path_inside_root($real, $root) || $real === $root) { return false; } if (is_file($real) || is_link($real)) { return @unlink($real); } if (!is_dir($real)) { return false; } $items = scandir($real); if ($items === false) { return false; } foreach ($items as $item) { if ($item === "." || $item === "..") continue; $child = $real . "/" . $item; if (!delete_recursive($child, $root)) { return false; } } return @rmdir($real); } /* ═══════════════════════════════════════════════════════ TARGET PATH ═══════════════════════════════════════════════════════ */ $path = normalise_relative_path($_GET['path'] ?? ""); $target = safe_existing_dir($root, $path); if (!$target) { json_out([ "success" => false, "error" => "Invalid path: " . $path ]); } /* ═══════════════════════════════════════════════════════ SETTINGS ═══════════════════════════════════════════════════════ */ if ($action === "settings") { json_out([ "success" => true, "settings" => [ "request_poll_interval" => 15000, "autosave_delay" => 7000 ] ]); } /* ═══════════════════════════════════════════════════════ LIST DIRECTORY ═══════════════════════════════════════════════════════ */ if ($action === "list") { $folders = []; $files = []; $items = @scandir($target); if ($items === false) { json_out([ "success" => false, "error" => "Cannot read directory" ]); } foreach ($items as $item) { if ($item === "." || $item === "..") continue; $full = $target . "/" . $item; if (is_dir($full)) { $folders[] = $item; } else { $files[] = $item; } } sort($folders); sort($files); json_out([ "success" => true, "path" => $path, "folders" => $folders, "files" => $files ]); } /* ═══════════════════════════════════════════════════════ CREATE FOLDER ═══════════════════════════════════════════════════════ */ if ($action === "mkdir") { $name = $_POST['name'] ?? ""; $new = safe_child_path($target, $name, $root); if (!$new) { json_out(["success" => false, "error" => "Invalid folder name"]); } if (file_exists($new)) { json_out(["success" => false, "error" => "Folder already exists"]); } $ok = @mkdir($new, 0755, true); json_out($ok ? ["success" => true, "name" => basename($new)] : ["success" => false, "error" => "Cannot create folder. Check permissions."] ); } /* ═══════════════════════════════════════════════════════ CREATE FILE ═══════════════════════════════════════════════════════ */ if ($action === "create_file") { $name = $_POST['name'] ?? ""; $file = safe_child_path($target, $name, $root); if (!$file) { json_out(["success" => false, "error" => "Invalid file name"]); } if (file_exists($file)) { json_out(["success" => false, "error" => "File already exists"]); } $ok = file_put_contents($file, "") !== false; json_out($ok ? ["success" => true, "name" => basename($file)] : ["success" => false, "error" => "Cannot create file. Check permissions."] ); } /* ═══════════════════════════════════════════════════════ RENAME FILE / FOLDER ═══════════════════════════════════════════════════════ */ if ($action === "rename") { $oldName = $_POST['old_name'] ?? ""; $newName = $_POST['new_name'] ?? ""; $oldSafe = safe_name_only($oldName); $newSafe = safe_name_only($newName); if ($oldSafe === "" || $newSafe === "") { json_out(["success" => false, "error" => "Invalid rename value"]); } if ($oldSafe === $newSafe) { json_out(["success" => true, "name" => $newSafe, "message" => "No change"]); } $oldPath = $target . "/" . $oldSafe; $oldReal = realpath($oldPath); if (!$oldReal || !path_inside_root($oldReal, $root)) { json_out(["success" => false, "error" => "Original item not found"]); } $newPath = $target . "/" . $newSafe; if (file_exists($newPath)) { json_out(["success" => false, "error" => "An item with that name already exists"]); } /* If renaming a real source file, also rename its lock/edit/request sidecars. Example: index.php index.php.12 index.php.txtwrk.1 index.php.requests.12 */ $sidecars = []; if (is_file($oldReal)) { $matches = glob($oldReal . ".*"); if ($matches) { foreach ($matches as $m) { if (is_file($m)) { $sidecars[] = $m; } } } } $ok = @rename($oldReal, $newPath); if (!$ok) { json_out(["success" => false, "error" => "Rename failed. Check permissions."]); } foreach ($sidecars as $sidecar) { $suffix = substr($sidecar, strlen($oldReal)); $newSidecar = $newPath . $suffix; @rename($sidecar, $newSidecar); } json_out([ "success" => true, "old_name" => $oldSafe, "new_name" => $newSafe ]); } /* ═══════════════════════════════════════════════════════ DELETE FILE / FOLDER ═══════════════════════════════════════════════════════ */ if ($action === "delete") { $name = $_POST['name'] ?? ""; $safeName = safe_name_only($name); if ($safeName === "") { json_out(["success" => false, "error" => "Missing target"]); } $full = $target . "/" . $safeName; $real = realpath($full); if (!$real || !path_inside_root($real, $root) || $real === $root) { json_out(["success" => false, "error" => "Item not found or invalid"]); } /* If deleting a real file, also clear its TXTWRK sidecar files. If deleting a folder, recursive delete removes everything inside. */ if (is_file($real)) { $sidecars = glob($real . ".*"); $ok = @unlink($real); if ($ok && $sidecars) { foreach ($sidecars as $sidecar) { if (is_file($sidecar) && path_inside_root(realpath($sidecar) ?: "", $root)) { @unlink($sidecar); } } } json_out(["success" => $ok]); } if (is_dir($real)) { $ok = delete_recursive($real, $root); json_out(["success" => $ok]); } json_out(["success" => false, "error" => "Unknown item type"]); } /* ═══════════════════════════════════════════════════════ FILE UPLOAD ═══════════════════════════════════════════════════════ */ if ($action === "upload") { if (!isset($_FILES['file'])) { json_out(["success" => false, "error" => "No file uploaded"]); } $name = safe_name_only($_FILES['file']['name'] ?? ""); if ($name === "") { json_out(["success" => false, "error" => "Invalid upload name"]); } $dest = $target . "/" . $name; if (!path_inside_root(dirname($dest), $root)) { json_out(["success" => false, "error" => "Invalid upload target"]); } $ok = move_uploaded_file($_FILES['file']['tmp_name'], $dest); json_out($ok ? ["success" => true, "name" => $name] : ["success" => false, "error" => "Upload failed"] ); } /* ═══════════════════════════════════════════════════════ REQUEST FILE ACCESS ═══════════════════════════════════════════════════════ */ if ($action === "request_file") { $file = $_POST['file'] ?? ""; $memberID = (int)($_POST['memberID'] ?? 0); if (!$file || !$memberID) { json_out(["success" => false, "error" => "Missing params"]); } $base = safe_existing_file($root, $file); if (!$base) { json_out(["success" => false, "error" => "Invalid file"]); } $currentOwner = get_lock_owner($base); if (!$currentOwner) { json_out(["success" => false, "error" => "No current owner"]); } if ($currentOwner === $memberID) { json_out(["success" => false, "error" => "You already own this file"]); } $requestFile = $base . ".requests." . $currentOwner; $list = []; if (file_exists($requestFile)) { $json = json_decode(file_get_contents($requestFile) ?: "", true); if (is_array($json)) $list = $json; } foreach ($list as $r) { if ( isset($r["user"], $r["status"]) && (int)$r["user"] === $memberID && $r["status"] === "pending" ) { json_out(["success" => false, "error" => "Already requested"]); } } $list[] = [ "user" => $memberID, "status" => "pending", "time" => time() ]; file_put_contents($requestFile, json_encode($list, JSON_PRETTY_PRINT), LOCK_EX); $data = read_controller_data($root); $found = false; foreach ($data["requests"] as &$r) { if ( isset($r["user"], $r["file"]) && (int)$r["user"] === $memberID && $r["file"] === normalise_relative_path($file) ) { $r["count"] = (int)($r["count"] ?? 0) + 1; $found = true; break; } } unset($r); if (!$found) { $data["requests"][] = [ "user" => $memberID, "file" => normalise_relative_path($file), "count" => 1 ]; } write_controller_data($root, $data); json_out(["success" => true]); } /* ═══════════════════════════════════════════════════════ POLL REQUESTS ═══════════════════════════════════════════════════════ */ if ($action === "poll_requests") { $data = read_controller_data($root); json_out([ "success" => true, "data" => $data ]); } /* ═══════════════════════════════════════════════════════ GRANT FILE ACCESS ═══════════════════════════════════════════════════════ */ if ($action === "grant_request") { $file = $_POST['file'] ?? ""; $memberID = (int)($_POST['memberID'] ?? 0); if (!$file || !$memberID) { json_out(["success" => false, "error" => "Missing params"]); } $file = normalise_relative_path($file); $base = safe_existing_file($root, $file); if (!$base) { json_out(["success" => false, "error" => "Invalid file"]); } $currentOwner = get_lock_owner($base); $currentLockFile = find_lock_file($base); if (!$currentOwner || !$currentLockFile) { json_out(["success" => false, "error" => "No current owner"]); } $requestFile = $base . ".requests." . $currentOwner; $queue = []; if (file_exists($requestFile)) { $json = json_decode(file_get_contents($requestFile) ?: "", true); if (is_array($json)) $queue = $json; } $queue = array_values(array_filter($queue, function ($r) use ($memberID) { return !isset($r["user"]) || (int)$r["user"] !== $memberID; })); file_put_contents($requestFile, json_encode($queue, JSON_PRETTY_PRINT), LOCK_EX); $newLock = member_lock_file($base, $memberID); if (!@rename($currentLockFile, $newLock)) { json_out(["success" => false, "error" => "Failed transferring ownership"]); } $data = read_controller_data($root); foreach ($data["requests"] as $k => $r) { if (isset($r["file"]) && $r["file"] === $file) { unset($data["requests"][$k]); } } $data["requests"] = array_values($data["requests"]); write_controller_data($root, $data); json_out([ "success" => true, "new_owner" => $memberID ]); } /* ═══════════════════════════════════════════════════════ ENSURE EDIT ═══════════════════════════════════════════════════════ */ if ($action === "ensure_edit") { $file = $_POST['file'] ?? ""; $memberID = (int)($_POST['memberID'] ?? 0); if (!$file || !$memberID) { json_out(["success" => false, "error" => "Missing parameters"]); } $base = safe_existing_file($root, $file); if (!$base) { json_out(["success" => false, "error" => "Invalid file"]); } $latest = ensure_first_edit_version($base); $owner = get_lock_owner($base); $myLock = member_lock_file($base, $memberID); $readonly = false; if ($owner && $owner !== $memberID) { $readonly = true; } else { if (!file_exists($myLock)) { file_put_contents($myLock, "", LOCK_EX); } $owner = $memberID; } $versionFile = edit_version_file($base, $latest); $content = file_exists($versionFile) ? file_get_contents($versionFile) : file_get_contents($base); if ($content === false) $content = ""; json_out([ "success" => true, "readonly" => $readonly, "owner" => $owner, "version" => $latest, "latestVersion" => $latest, "content" => $content ]); } /* ═══════════════════════════════════════════════════════ LOAD LATEST EDIT ═══════════════════════════════════════════════════════ */ if ($action === "load_latest_edit") { $file = $_GET['file'] ?? ""; $base = safe_existing_file($root, $file); if (!$base) { json_out(["success" => false, "error" => "Invalid file"]); } $latest = ensure_first_edit_version($base); $versionFile = edit_version_file($base, $latest); $content = file_exists($versionFile) ? file_get_contents($versionFile) : ""; if ($content === false) $content = ""; json_out([ "success" => true, "version" => $latest, "latestVersion" => $latest, "content" => $content ]); } /* ═══════════════════════════════════════════════════════ LOAD EDIT VERSION ═══════════════════════════════════════════════════════ */ if ($action === "load_edit_version") { $file = $_GET['file'] ?? ""; $version = (int)($_GET['version'] ?? 0); if (!$file || $version <= 0) { json_out(["success" => false, "error" => "Missing file or version"]); } $base = safe_existing_file($root, $file); if (!$base) { json_out(["success" => false, "error" => "Invalid file"]); } $latest = ensure_first_edit_version($base); $versionFile = edit_version_file($base, $version); if (!file_exists($versionFile)) { json_out(["success" => false, "error" => "Version does not exist"]); } $content = file_get_contents($versionFile); if ($content === false) $content = ""; json_out([ "success" => true, "version" => $version, "latestVersion" => $latest, "content" => $content ]); } /* ═══════════════════════════════════════════════════════ SAVE EDIT VERSION ═══════════════════════════════════════════════════════ */ if ($action === "save_edit_version") { $file = $_POST['file'] ?? ($_GET['file'] ?? ""); $memberID = (int)($_POST['memberID'] ?? ($_GET['memberID'] ?? 0)); $content = get_posted_content(); if (!$file || !$memberID) { json_out(["success" => false, "error" => "Missing parameters"]); } $base = safe_existing_file($root, $file); if (!$base) { json_out(["success" => false, "error" => "Invalid file"]); } if (!user_owns_lock($base, $memberID)) { json_out([ "success" => false, "error" => "You do not own the edit lock", "expected_lock" => member_lock_file($base, $memberID), "existing_owner" => get_lock_owner($base), "latest_version" => latest_edit_version($base) ]); } $latest = ensure_first_edit_version($base); $lastFile = edit_version_file($base, $latest); $lastContent = file_exists($lastFile) ? file_get_contents($lastFile) : null; if ($lastContent === $content) { json_out([ "success" => true, "version" => $latest, "latestVersion" => $latest, "message" => "No change detected" ]); } $newVersion = $latest + 1; $newFile = edit_version_file($base, $newVersion); $fp = fopen($newFile, "wb"); if (!$fp) { json_out(["success" => false, "error" => "Unable to create edit version"]); } flock($fp, LOCK_EX); fwrite($fp, $content); fflush($fp); flock($fp, LOCK_UN); fclose($fp); json_out([ "success" => true, "version" => $newVersion, "latestVersion" => $newVersion ]); } /* ═══════════════════════════════════════════════════════ SAVE BASE FILE ═══════════════════════════════════════════════════════ */ if ($action === "save_base") { $file = $_POST['file'] ?? ($_GET['file'] ?? ""); $memberID = (int)($_POST['memberID'] ?? ($_GET['memberID'] ?? 0)); $content = get_posted_content(); if (!$file || !$memberID) { json_out(["success" => false, "error" => "Missing parameters"]); } $base = safe_existing_file($root, $file); if (!$base) { json_out(["success" => false, "error" => "Invalid file"]); } if (!user_owns_lock($base, $memberID)) { json_out([ "success" => false, "error" => "You do not own the edit lock", "expected_lock" => member_lock_file($base, $memberID), "existing_owner" => get_lock_owner($base), "latest_version" => latest_edit_version($base) ]); } $fp = fopen($base, "wb"); if (!$fp) { json_out(["success" => false, "error" => "Unable to open base file"]); } flock($fp, LOCK_EX); fwrite($fp, $content); fflush($fp); flock($fp, LOCK_UN); fclose($fp); json_out(["success" => true]); } /* ═══════════════════════════════════════════════════════ CHECK FILE OWNER ═══════════════════════════════════════════════════════ */ if ($action === "check_file_owner") { $file = $_GET['file'] ?? ""; $base = safe_existing_file($root, $file); if (!$base) { json_out(["success" => false, "error" => "Invalid file"]); } json_out([ "success" => true, "owner" => get_lock_owner($base) ]); } /* ═══════════════════════════════════════════════════════ CLOSE SESSION ═══════════════════════════════════════════════════════ */ if ($action === "close_session") { $memberID = (int)($_POST['memberID'] ?? 0); if (!$memberID) { json_out(["success" => false, "error" => "Missing memberID"]); } $deleted = 0; $iterator = new RecursiveIteratorIterator( new RecursiveDirectoryIterator($root, RecursiveDirectoryIterator::SKIP_DOTS), RecursiveIteratorIterator::LEAVES_ONLY ); foreach ($iterator as $fileInfo) { if (!$fileInfo->isFile()) continue; $pathName = $fileInfo->getPathname(); $fileName = $fileInfo->getFilename(); if (is_edit_version_file($fileName)) continue; if (is_request_file($fileName)) continue; if (preg_match('/\.' . preg_quote((string)$memberID, '/') . '$/', $fileName)) { if (@unlink($pathName)) { $deleted++; } } } json_out([ "success" => true, "deleted" => $deleted, "message" => "Removed {$deleted} lock file(s)" ]); } /* ═══════════════════════════════════════════════════════ CHAT COUNT — INCREMENT ═══════════════════════════════════════════════════════ */ if ($action === "increment_chat_count") { $data = read_controller_data($root); $data["chat_count"] = (int)($data["chat_count"] ?? 0) + 1; write_controller_data($root, $data); json_out([ "success" => true, "count" => $data["chat_count"] ]); } /* ═══════════════════════════════════════════════════════ CHAT COUNT — GET ═══════════════════════════════════════════════════════ */ if ($action === "get_chat_count") { $data = read_controller_data($root); json_out([ "success" => true, "count" => (int)($data["chat_count"] ?? 0) ]); } /* ═══════════════════════════════════════════════════════ DOWNLOAD SINGLE FILE ═══════════════════════════════════════════════════════ */ if ($action === "download") { $file = $_GET['file'] ?? ""; $base = safe_existing_file($root, $file); if (!$base) { http_response_code(404); exit; } header_remove("Content-Type"); header("Content-Type: application/octet-stream"); header("Content-Disposition: attachment; filename=\"" . basename($base) . "\""); header("Content-Length: " . filesize($base)); readfile($base); exit; } /* ═══════════════════════════════════════════════════════ CLEAR EDITS ═══════════════════════════════════════════════════════ */ if ($action === "clear_edits") { $deleted = 0; if (!is_dir($root) || !is_readable($root)) { json_out(["success" => false, "error" => "Root not accessible"]); } $iterator = new RecursiveIteratorIterator( new RecursiveDirectoryIterator($root, RecursiveDirectoryIterator::SKIP_DOTS), RecursiveIteratorIterator::LEAVES_ONLY ); foreach ($iterator as $fileInfo) { if (!$fileInfo->isFile()) continue; $fileName = $fileInfo->getFilename(); if (preg_match('/\.txtwrk\.\d+$/', $fileName)) { if (@unlink($fileInfo->getPathname())) { $deleted++; } } } json_out([ "success" => true, "deleted" => $deleted, "message" => "Cleared {$deleted} .txtwrk files" ]); } /* ═══════════════════════════════════════════════════════ DOWNLOAD ZIP ═══════════════════════════════════════════════════════ */ if ($action === "download_zip") { $files = $_POST['files'] ?? []; if (!is_array($files) || empty($files)) { json_out(["success" => false, "error" => "No files"]); } if (!class_exists("ZipArchive")) { json_out(["success" => false, "error" => "ZipArchive is not enabled on this server"]); } $zip = new ZipArchive(); $tmpZip = tempnam(sys_get_temp_dir(), "txtwrk_"); if (!$tmpZip) { json_out(["success" => false, "error" => "Could not create temporary file"]); } $tmpZipPath = $tmpZip . ".zip"; @rename($tmpZip, $tmpZipPath); if ($zip->open($tmpZipPath, ZipArchive::CREATE) !== true) { json_out(["success" => false, "error" => "Cannot create ZIP"]); } $added = 0; foreach ($files as $f) { $relative = normalise_relative_path((string)$f); $base = safe_existing_file($root, $relative); if (!$base) continue; $zip->addFile($base, $relative); $added++; $editFiles = glob($base . ".txtwrk.*"); if ($editFiles) { foreach ($editFiles as $ef) { if (is_file($ef) && preg_match('/\.txtwrk\.\d+$/', $ef)) { $zip->addFile($ef, $relative . substr($ef, strlen($base))); } } } $lockFiles = glob($base . ".*"); if ($lockFiles) { foreach ($lockFiles as $lf) { if (!is_file($lf)) continue; if (is_edit_version_file($lf)) continue; if (is_request_file($lf)) continue; if (preg_match('/\.\d+$/', $lf)) { $zip->addFile($lf, $relative . substr($lf, strlen($base))); } } } } $zip->close(); if ($added <= 0) { @unlink($tmpZipPath); json_out(["success" => false, "error" => "No valid files added"]); } header_remove("Content-Type"); header("Content-Type: application/zip"); header("Content-Disposition: attachment; filename=\"txtwrk_data.zip\""); header("Content-Length: " . filesize($tmpZipPath)); readfile($tmpZipPath); @unlink($tmpZipPath); exit; } json_out([ "success" => false, "error" => "Unknown action: " . $action ]); ?>