@model String@using Nop.Web.Framework.UI;@{    Html.AddCssFileParts("~/Content/kindeditor/themes/default/default.css");    Html.AddScriptParts("~/Content/kindeditor/kindeditor-all-min.js");}<script>    KindEditor.ready(function (K) {        window.editor = K.create(‘#@ViewData.TemplateInfo.GetFullHtmlFieldId(string.Empty)‘, {            width: 1050,            height: 650,            uploadJson: ‘@Url.Action("ProcessRequest", "KindEditor", new{ a= "UPLOAD" })‘,            fileManagerJson: ‘@Url.Action("ProcessRequest", "KindEditor", new { a = "MANAGE" })‘,            allowFileManager: true         });    });</script>@Html.TextArea(string.Empty, /* Name suffix */    ViewData.TemplateInfo.FormattedModelValue /* Initial value */)

using System;using System.Collections;using System.Collections.Generic;using System.Drawing;using System.Drawing.Imaging;using System.IO;using System.IO.Compression;using System.Text.RegularExpressions;using System.Web;using Nop.Core;using Nop.Services.Security;using Nop.Web.Framework.Security;using System.Globalization;
//Copyright@Tony Han 
//http://qbit.cnblogs.com/
//2016-12-3 23:33:19
//http://www.cnblogs.com/Qbit/p/NopCommerce_KindEditor.html

namespace Nop.Admin.Controllers{    //Controller for Roxy fileman (http://www.roxyfileman.com/) for TinyMCE editor    //the original file was \RoxyFileman-1.4.3-net\fileman\asp_net\main.ashx    //some custom changes by wooncherk contribution    //do not validate request token (XSRF)    [AdminAntiForgery(true)]    public class KindEditorController : BaseAdminController    {        #region Fields        //custom code by nopCommerce team        private readonly IPermissionService _permissionService;        private readonly HttpContextBase context;        private readonly HttpResponseBase response;        #endregion        #region Ctor        //custom code by nopCommerce team        public KindEditorController(IPermissionService permissionService, HttpContextBase context)        {            this._permissionService = permissionService;            this.context = context;            this.response = this.context.Response;        }        #endregion        #region Methods        public void ProcessRequest()        {            string action = "UPLOAD";            //custom code by nopCommerce team            if (!_permissionService.Authorize(StandardPermissionProvider.HtmlEditorManagePictures))                showError("You don‘t have required permission");            try            {                if (context.Request["a"] != null)                    action = (string)context.Request["a"];                switch (action.ToUpper())                {                    case "UPLOAD":                        Upload(context);                        break;                    case "MANAGE":                        Manage(context);                        break;                    default:                        break;                }            }            catch (Exception ex)            {                showError(ex.ToString());            }        }        private void Manage(HttpContextBase context)        {            String aspxUrl = context.Request.Path.Substring(0, context.Request.Path.LastIndexOf("/") + 1);            //根目录路径，相对路径            String rootPath = "/Content/attached/";            //根目录URL，可以指定绝对路径，比如 http://www.yoursite.com/attached/            String rootUrl =  "/Content/attached/";            //图片扩展名            String fileTypes = "gif,jpg,jpeg,png,bmp";            String currentPath = "";            String currentUrl = "";            String currentDirPath = "";            String moveupDirPath = "";            String dirPath = context.Server.MapPath(rootPath);            String dirName = context.Request.QueryString["dir"];            if (!String.IsNullOrEmpty(dirName))            {                if (Array.IndexOf("image,flash,media,file".Split(‘,‘), dirName) == -1)                {                    context.Response.Write("Invalid Directory name.");                    context.Response.End();                }                dirPath += dirName + "/";                rootUrl += dirName + "/";                if (!Directory.Exists(dirPath))                {                    Directory.CreateDirectory(dirPath);                }            }            //根据path参数，设置各路径和URL            String path = context.Request.QueryString["path"];            path = String.IsNullOrEmpty(path) ? "" : path;            if (path == "")            {                currentPath = dirPath;                currentUrl = rootUrl;                currentDirPath = "";                moveupDirPath = "";            }            else            {                currentPath = dirPath + path;                currentUrl = rootUrl + path;                currentDirPath = path;                moveupDirPath = Regex.Replace(currentDirPath, @"(.*?)[^\/]+\/$", "$1");            }            //排序形式，name or size or type            String order = context.Request.QueryString["order"];            order = String.IsNullOrEmpty(order) ? "" : order.ToLower();            //不允许使用..移动到上一级目录            if (Regex.IsMatch(path, @"\.\."))            {                context.Response.Write("Access is not allowed.");                context.Response.End();            }            //最后一个字符不是/            if (path != "" && !path.EndsWith("/"))            {                context.Response.Write("Parameter is not valid.");                context.Response.End();            }            //目录不存在或不是目录            if (!Directory.Exists(currentPath))            {                context.Response.Write("Directory does not exist.");                context.Response.End();            }            //遍历目录取得文件信息            string[] dirList = Directory.GetDirectories(currentPath);            string[] fileList = Directory.GetFiles(currentPath);            switch (order)            {                case "size":                    Array.Sort(dirList, new NameSorter());                    Array.Sort(fileList, new SizeSorter());                    break;                case "type":                    Array.Sort(dirList, new NameSorter());                    Array.Sort(fileList, new TypeSorter());                    break;                case "name":                default:                    Array.Sort(dirList, new NameSorter());                    Array.Sort(fileList, new NameSorter());                    break;            }            Hashtable result = new Hashtable();            result["moveup_dir_path"] = moveupDirPath;            result["current_dir_path"] = currentDirPath;            result["current_url"] = currentUrl;            result["total_count"] = dirList.Length + fileList.Length;            List<Hashtable> dirFileList = new List<Hashtable>();            result["file_list"] = dirFileList;            for (int i = 0; i < dirList.Length; i++)            {                DirectoryInfo dir = new DirectoryInfo(dirList[i]);                Hashtable hash = new Hashtable();                hash["is_dir"] = true;                hash["has_file"] = (dir.GetFileSystemInfos().Length > 0);                hash["filesize"] = 0;                hash["is_photo"] = false;                hash["filetype"] = "";                hash["filename"] = dir.Name;                hash["datetime"] = dir.LastWriteTime.ToString("yyyy-MM-dd HH:mm:ss");                dirFileList.Add(hash);            }            for (int i = 0; i < fileList.Length; i++)            {                FileInfo file = new FileInfo(fileList[i]);                Hashtable hash = new Hashtable();                hash["is_dir"] = false;                hash["has_file"] = false;                hash["filesize"] = file.Length;                hash["is_photo"] = (Array.IndexOf(fileTypes.Split(‘,‘), file.Extension.Substring(1).ToLower()) >= 0);                hash["filetype"] = file.Extension.Substring(1);                hash["filename"] = file.Name;                hash["datetime"] = file.LastWriteTime.ToString("yyyy-MM-dd HH:mm:ss");                dirFileList.Add(hash);            }             context.Response.Write(Newtonsoft.Json.JsonConvert.SerializeObject(result));            context.Response.End();        }        public void Upload(HttpContextBase context)        {            String aspxUrl = context.Request.Path.Substring(0, context.Request.Path.LastIndexOf("/") + 1);            //文件保存目录路径            String savePath = "/Content/attached/";            //文件保存目录URL            String saveUrl =  "/Content/attached/";            //定义允许上传的文件扩展名            Hashtable extTable = new Hashtable();            extTable.Add("image", "gif,jpg,jpeg,png,bmp");            extTable.Add("flash", "swf,flv");            extTable.Add("media", "swf,flv,mp3,wav,wma,wmv,mid,avi,mpg,asf,rm,rmvb");            extTable.Add("file", "doc,docx,xls,xlsx,ppt,htm,html,txt,zip,rar,gz,bz2");            //最大文件大小            int maxSize = 1000000;            var imgFile = context.Request.Files["imgFile"];            if (imgFile == null)            {                showError("请选择文件。");            }            String dirPath = context.Server.MapPath(savePath);            if (!Directory.Exists(dirPath))            {                showError("上传目录不存在。");            }            String dirName = context.Request.QueryString["dir"];            if (String.IsNullOrEmpty(dirName))            {                dirName = "image";            }            if (!extTable.ContainsKey(dirName))            {                showError("目录名不正确。");            }            String fileName = imgFile.FileName;            String fileExt = Path.GetExtension(fileName).ToLower();            if (imgFile.InputStream == null || imgFile.InputStream.Length > maxSize)            {                showError("上传文件大小超过限制。");            }            if (String.IsNullOrEmpty(fileExt) || Array.IndexOf(((String)extTable[dirName]).Split(‘,‘), fileExt.Substring(1).ToLower()) == -1)            {                showError("上传文件扩展名是不允许的扩展名。\n只允许" + ((String)extTable[dirName]) + "格式。");            }            //创建文件夹            dirPath += dirName + "/";            saveUrl += dirName + "/";            if (!Directory.Exists(dirPath))            {                Directory.CreateDirectory(dirPath);            }            String ymd = DateTime.Now.ToString("yyyyMMdd", DateTimeFormatInfo.InvariantInfo);            dirPath += ymd + "/";            saveUrl += ymd + "/";            if (!Directory.Exists(dirPath))            {                Directory.CreateDirectory(dirPath);            }            String newFileName = DateTime.Now.ToString("yyyyMMddHHmmss_ffff", DateTimeFormatInfo.InvariantInfo) + fileExt;            String filePath = dirPath + newFileName;            imgFile.SaveAs(filePath);            String fileUrl = saveUrl + newFileName;            Hashtable hash = new Hashtable();            hash["error"] = 0;            hash["url"] = fileUrl;             context.Response.Write(Newtonsoft.Json.JsonConvert.SerializeObject(hash));            context.Response.End();        }        #endregion        #region Utitlies        private void showError(string message)        {            Hashtable hash = new Hashtable();            hash["error"] = 1;            hash["message"] = message;             context.Response.Write(Newtonsoft.Json.JsonConvert.SerializeObject(hash));            context.Response.End();        }        #region KindEditorClass        public class NameSorter : IComparer        {            public int Compare(object x, object y)            {                if (x == null && y == null)                {                    return 0;                }                if (x == null)                {                    return -1;                }                if (y == null)                {                    return 1;                }                FileInfo xInfo = new FileInfo(x.ToString());                FileInfo yInfo = new FileInfo(y.ToString());                return xInfo.FullName.CompareTo(yInfo.FullName);            }        }        public class SizeSorter : IComparer        {            public int Compare(object x, object y)            {                if (x == null && y == null)                {                    return 0;                }                if (x == null)                {                    return -1;                }                if (y == null)                {                    return 1;                }                FileInfo xInfo = new FileInfo(x.ToString());                FileInfo yInfo = new FileInfo(y.ToString());                return xInfo.Length.CompareTo(yInfo.Length);            }        }        public class TypeSorter : IComparer        {            public int Compare(object x, object y)            {                if (x == null && y == null)                {                    return 0;                }                if (x == null)                {                    return -1;                }                if (y == null)                {                    return 1;                }                FileInfo xInfo = new FileInfo(x.ToString());                FileInfo yInfo = new FileInfo(y.ToString());                return xInfo.Extension.CompareTo(yInfo.Extension);            }        }        #endregion        #endregion    }}