1 files changed, 32 insertions, 0 deletions
diff --git a/files/ajax/upload.php b/files/ajax/upload.php
new file mode 100644
index 00000000000..b3facf96723
--- /dev/null
+++ b/files/ajax/upload.php
@@ -0,0 +1,32 @@
+<?php
+
+// Init owncloud
+require_once('../../lib/base.php');
+
+// We send json data
+// header( "Content-Type: application/json" );
+// Firefox and Konqueror tries to download application/json for me.  --Arthur
+header( "Content-Type: text/plain" );
+
+// Check if we are a user
+if( !OC_USER::isLoggedIn()){
+	echo json_encode( array( "status" => "error", "data" => "Authentication error" ));
+	exit();
+}
+
+$fileName=$_FILES['file']['name'];
+$source=$_FILES['file']['tmp_name'];
+$dir = $_POST['dir'];
+if(!empty($dir)) $dir .= '/';
+$target='/' . stripslashes($dir) . $fileName;
+if(isset($_SESSION['username'])
+and $_SESSION['username'] and strpos($dir,'..') === false){
+	if(OC_FILESYSTEM::fromTmpFile($source,$target)){
+		echo json_encode(array( "status" => "success"));
+		exit();
+	}
+}
+
+echo json_encode(array( "status" => "error"));
+
+?>