load all directories [names] into array?

[Anon]

hello all.

i am trying to load all directory names in
my site into a single array. this means
sub-directories and so on.

i want to do this, for a directory validation
check, so that users cannot enter a non-valid
directory name.

if i have the array, i can check the entered
value against the array containing every
directory name in my site.

now, i can opendir and readdir, and such, but
i am having difficulty with recursive
functions and reading results into the master
array.

i have some example code that i am trying to
work from, but i am having no luck. maybe
someone can help me on my first post? 😉

code

function allDirectories($directory){
$handle = opendir("$directory");
while ($listing = readdir($handle)){
if ($listing != "." && $listing != ".."){
if (is_dir($listing)){
$directoryArray[] = $listing;
}
for($n = 0; $n < count($directoryArray); $n++){
$directoryPath = $directory."/".$directoryArray[$n];
chdir("$directoryPath");
allDirectories($directoryPath);
chdir("..");
}
}
}
closedir($handle);
for($n=0; $n<count($directoryArray); $n++){
print($directoryArray[$n]);
}
}
allDirectories();

/code

thanks tons,
mikeD

[[deleted]]

"if i have the array, i can check the entered
value against the array containing every
directory name in my site."

why don't you just use 'is_dir()' to see if the directory exists?

[Anon]

well, i could use is_dir, but, to simulate
directory browsing, my script will also
accept "c:" or "d:" or anything, and attempt
to display it. it will display a erroneous
directory name, but with no information.

so, is_dir will solve half of the problem,
but not the c:/d: display issue.

it WILL display c: [the root of the web
server it self] and d:, and that is a bad
thing.

i am trying to limit directory selections to
ONLY directories within my website. 🙁

unfortunately, this is a glaring security
issue i need to resolve quickly.

thanks!
mikeD

[[deleted]]

If you just want to use dirs in the webroot,
you can just prepend the webroot directory to the directoryname automatically:

//the input from the form
$sInput = "c:\path\to\file";

//prepend the webroot
$sInput = "c:\path\to\webroot\".$sInput

//check for existance
if (!is_dir($sInput))
{
echo 'dir does not exist';
}
else
{
echo 'dir is ok';
}

you will have to add a check to make sure the input does not start with '......' though!

[Anon]

vincent,

thanks you so much for you help! after some
fooling around, i finally fixed the issue.

i do not know why i did not include the
wwwroot path before for validation, i just
zoned out on that one completely.

i also added a check for "../", etc.

here is a quick sample:

if (ereg(".", $directory)){
print ($directory." is an invalid entry");
} else {
if (is_dir($wwwroot.$directory)){

we do our opendir functions, etc.
} else {
print ($directory. "is not a valid directory. try again");
}
}
}

it works like a charm, test it out here:
http://www.antipersonnel.org

thanks again for you timely help 🙂

sincerely,
mikeD

[[deleted]]

Nice :-)