### Filename: file_upload_sys.data
## subs in file:
#hook

    $q = new CGI (\&hook);
# Set global value for session id (always members username)
    $sessid = $_un;

# This is the file upload hook, where we can update our session
# file with the dirty details of how the upload is going.
sub hook {
    my ($filename,$buffer,$bytes_read,$file) = @_;

    # Calculate the (rough estimation) of the file size. This isn't
    # accurate because the CONTENT_LENGTH includes not only the file's
    # contents, but also the length of all the other form fields as we
+ll,
    # so it's bound to be at least a few bytes larger than the file si
+ze.
    # This obviously doesn't work out well if you want progress bars o
+n
    # a per-file basis, if uploading many files. This proof-of-concept
+ only
    # supports a single file anyway.
    my $length = $ENV{'CONTENT_LENGTH'};
    my $percent = 0;
    if ($length > 0) { # Don't divide by zero.
        $percent = sprintf("%.1f",
            (( $bytes_read / $length ) * 100)
        );
    }

    # Write this data to the session file.
    open (SES, ">./$sessid.session");
    print SES "$bytes_read:$length:$percent";
    close (SES);
}

    $action = $q->param("view");
    if ($action eq "upl") {
        # Make a file upload hook.
        # They are first submitting the file. This code doesn't really
+ run much
        # until AFTER the file is completely uploaded.
        $filename = $q->param("incoming");
        $handle   = $q->upload("incoming");
        $filename =~ s/(?:\\|\/)([^\\\/]+)$/$1/g;
    
        # Copy the file to its final location.
        open (FILE, ">/home/path/www/Videos/$filename") or die "Can't 
+create file: $!";
        my $buffer;
        while (read($handle,$buffer,2048)) {
            print FILE $buffer;
        }
        close (FILE);
    
        # Delete the session file.
        unlink("./$sessid.session");
    
        # Done.
        $_tfile = "/home/path/www/Videos/" . $filename;
        $type = uploadInfo($filename)->{'Content-Type'};
        ($dev,$ino,$mode,$nlink,$uid,$gid,$rdev,$size,$atime,$mtime,$c
+time,$blksize,$blocks) = stat($_tfile);
        if(-e "/home/path/www/Videos/$filename") {
            $sess_ref->attr("show_message","success|I have successfull
+y uploaded $filename to: http://www.domain.com/Videos/$filename<br />
+File type: $type<br />File size: $size bytes<br />");
            window_redirect("$_url?page=$in{page}&do=$in{do}$sess_id")
+;
        } else {
            $sess_ref->attr("show_message","error|I could not upload t
+he file: $filename to: http://www.domain.com/Videos/$filename<br />Fi
+le type: $type<br />File size: $size bytes<br />$_page_content");
            window_redirect("$_url?page=$in{page}&do=$in{do}$sess_id")
+;
        }
    } elsif ($action eq "ping") {
        # Now the meat of the CGI script.
        print "Content-Type: text/html\n\n";
        # Checking up on the status of the upload.
            # Exists?
        if (-f "./$sessid.session") {
            # Read it.
        open (READ, "./$sessid.session");
                my $data = <READ>;
            close (READ);
            print "$data";
        } else {
            print "Error reading Upload progress...";
        }
        if($sess_ref) {
            $sess_ref->close();
        }
        if($dbh) {
            $dbh->disconnect();
        }
        exit;
    } else {
        # Write this data to the session file.
        $_page_content .= qq~
            <div id="webform">
                <fieldset id="upload_form">
                    <legend>Approved Upload System</legend><br />
                    <br />
                    
                    Hello, you have been verified as allowed to upload
+ files to the Videos
                    directory for the the .net website...<br />
                    <br />
                    Please use the system below to upload files to thi
+s directory.<br />
                    <br />
                    ~ . start_multipart_form(-name=>"uploadFile", -act
+ion=>url(), -method=>"POST", -onSubmit=>"return startUpload();", id=>
+"theform") . 
                    hidden(-name=>"page") . 
                    hidden(-name=>"do") . 
                    hidden(-name=>"view", -value=>"upl", -override=>1)
+ . 
                    $hidden_sess_id . 
                    filefield(-name=>'incoming',
                                -class=>'formfield',
                                -size=>50,
                                -maxlength=>80) . qq~<br />
            <br />
            ~ . submit(-name=>"choice", -value=>"Upload The File", -cl
+ass=>"submit") . qq~<br />
            <br />~ . end_form() . qq~
           </fieldset>
                    <div id="progress-div" style="display: none; width
+: 400px; margin: auto">
                <fieldset>
                        <legend>Upload Progress</legend><br />
                        <br />
                        <div id="trough">
                            <div id="bar" style="width: 0%"></div>
                        </div>
                        Received <span id="received">0</span>/<span id
+="total">0</span> (<span id="percent">0</span>%)
                </fieldset><br />
                <br />
                    </div>
           <br />
           <br />
          </div><br />
          <br />
          <div id="debug"></div>~ . q~
        <script type="text/javascript">
        // a jquery-like function, a shortcut to document.getElementBy
+Id
        function $(o) {
            return document.getElementById(o);
        }
        
        
        // This function is called when submitting the form.
        function startUpload() {
            // Hide the form.
            document.getElementById('upload_form').style.display = "no
+ne";
        
            // Show the progress div.
            document.getElementById('progress-div').style.display = "b
+lock";
        
            // Begin making ajax requests.
            setTimeout("ping()", 1000);
        
            // Allow the form to continue submitting.
            return true;
        }
        
        // Make an ajax request to check up on the status of the uploa
+d
        function ping() {
            var ajax = new XMLHttpRequest();
            ajax.open("GET", "index.cgi?page=BackOffice&do=$in{do}&vie
+w=ping&nw=2&rand=" + Math.floor(Math.random()*99999) + "$sess_id", tr
+ue);
            ajax.onreadystatechange = function () {
                if (ajax.readyState == 4) {
                    parse(ajax.responseText);
                }
            };
            ajax.send(null);
        }
        
        // React to the returned value of our ping test
        function parse(txt) {
            document.getElementById("debug").innerHTML = "received fro
+m server: " + txt;
            var parts = txt.split(":");
            if (parts.length == 3) {
                document.getElementById("received").innerHTML = parts[
+0];
                document.getElementById("total").innerHTML = parts[1];
                document.getElementById("percent").innerHTML = parts[2
+];
                document.getElementById("bar").style.width = parts[2] 
++ "%";
            }
        
            // Ping again!
            setTimeout("ping()", 1000);
        }
        </script>~;
    }
    

1;
[download]

#!/usr/bin/perl -w

use strict;
use warnings;
use CGI;
use CGI::Carp "fatalsToBrowser";

# Make a file upload hook.
my $q = new CGI (\&hook);

# This is the file upload hook, where we can update our session
# file with the dirty details of how the upload is going.
sub hook {
    my ($filename,$buffer,$bytes_read,$file) = @_;

    # Get our sessid from the form submission.
    my ($sessid) = $ENV{QUERY_STRING};
    $sessid =~ s/[^A-F0-9]//g;

    # Calculate the (rough estimation) of the file size. This isn't
    # accurate because the CONTENT_LENGTH includes not only the file's
    # contents, but also the length of all the other form fields as we
+ll,
    # so it's bound to be at least a few bytes larger than the file si
+ze.
    # This obviously doesn't work out well if you want progress bars o
+n
    # a per-file basis, if uploading many files. This proof-of-concept
+ only
    # supports a single file anyway.
    my $length = $ENV{'CONTENT_LENGTH'};
    my $percent = 0;
    if ($length > 0) { # Don't divide by zero.
        $percent = sprintf("%.1f",
            (( $bytes_read / $length ) * 100)
        );
    }

    # Write this data to the session file.
    open (SES, ">$sessid.session");
    print SES "$bytes_read:$length:$percent";
    close (SES);
}

# Now the meat of the CGI script.
print "Content-Type: text/html\n\n";

my $action = $q->param("do") || "unknown";
if ($action eq "upload") {
    # They are first submitting the file. This code doesn't really run
+ much
    # until AFTER the file is completely uploaded.
    my $filename = $q->param("incoming");
    my $handle   = $q->upload("incoming");
    my $sessid   = $q->param("sessid");
    $sessid     =~ s/[^A-F0-9]//g;
    $filename =~ s/(?:\\|\/)([^\\\/]+)$/$1/g;

    # Copy the file to its final location.
    open (FILE, ">./files/$filename") or die "Can't create file: $!";
    my $buffer;
    while (read($handle,$buffer,2048)) {
        print FILE $buffer;
    }
    close (FILE);

    # Delete the session file.
    unlink("./$sessid.session");

    # Done.
    print "Thank you for your file. <a href=\"files/$filename\">Here i
+t is again.</a>";
}
elsif ($action eq "ping") {
    # Checking up on the status of the upload.
    my $sessid = $q->param("sessid");
    $sessid =~ s/[^A-F0-9]//g;

    # Exists?
    if (-f "./$sessid.session") {
        # Read it.
        open (READ, "./$sessid.session");
        my $data = <READ>;
        close (READ);
        print $data;
    }
    else {
        print "0:0:0:error session $sessid doesn't exist";
    }
}
else {
    print "0:0:0:error invalid action $action";
}
[download]