This file is indexed.

/usr/share/horde/ansel/templates/image/preview_image.inc is in php-horde-ansel 3.0.5+debian0-1.

This file is owned by root:root, with mode 0o644.

The actual contents of the file can be viewed below.

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
<h1 class="header"><?php echo htmlspecialchars($title) ?></h1>
<?php
$base_url = Horde::url('image.php')->add(
        array_merge(
            array('gallery' => $gallery_id,
                  'image' => $image_id,
                  'page' => $page,
                  'watermark' => $watermark,
                  'whalign' => $watermark_halign,
                  'wvalign' => $watermark_valign,
                  'font' => $watermark_font),
            $date));

$edit_url = $base_url->copy()->add('actionID', 'editimage');
$save_url = $base_url->copy()->add('actionID', $action);
$image_url = $base_url->copy()->add(array('actionID' => 'image' . $action,
                                          'view' => 'screen'));
?>
<div class="control anselActions" style="text-align:center;">
<?php
if ($gallery->hasPermission($GLOBALS['registry']->getAuth(), Horde_Perms::EDIT)) {
    echo $save_url->link(array('title' => _("Save Change")))
             . Horde::img('save.png') . ' ' . _("Save Change") . '</a> ';
}
if ($gallery->hasPermission($GLOBALS['registry']->getAuth(), Horde_Perms::EDIT)) {
    echo $edit_url->link(array('title' => _("Cancel Change")))
             . Horde::img('delete.png') . ' ' . _("Cancel Change") . '</a>';
}
?>
</div>
<br />
<div align="center">
<?php echo '<img src="' . $image_url . '" alt="[preview]" />' ?>
<br />
<?php $caption = $image->caption ? $image->caption : $image->filename; echo $GLOBALS['injector']->getInstance('Horde_Core_Factory_TextFilter')->filter($caption, 'text2html', array('parselevel' => Horde_Text_Filter_Text2html::MICRO)) ?>
</div>