# Custom even scripts

<article id="bkmrk-custom-php-scripts-c">Custom PHP scripts can be automatically executed when the users perform one of the monitored actions ([Actions\_keynames](http://docs.filerun.com/e-mail_notification_system#actions_keynames "e-mail_notification_system")).

For example, to automatically run custom PHP code after a file is uploaded, you can simply place a PHP file named “upload.php” inside the folder “customizables/events/”.

Here's an example script:

Set file permissions after upload:

<div><div><div><div><div>```
<?php
$data = <a href="http://php.net/unserialize" rel="noopener" target="_blank">unserialize</a>($data['data']);
<a href="http://php.net/chmod" rel="noopener" target="_blank">chmod</a>($data['full_path'], 0644);
```

</div></div></div></div></div>If you want the code to be executed before the file is saved to the folder, so that you can process it and perhaps reject the uploaded file, you need to name the script file “file.upload.php”.

Here's how an example script would look like in this case:

Clamscan antivirus check on upload:

<div><div><div><div><div>```
<?php
global $auth;
$data = <a href="http://php.net/unserialize" rel="noopener" target="_blank">unserialize</a>($data['data']);
$out = '';
$int = -1;
<a href="http://php.net/exec" rel="noopener" target="_blank">exec</a>($command, $out, $int);
<a href="http://php.net/exec" rel="noopener" target="_blank">exec</a>("clamscan ".<a href="http://php.net/escapeshellarg" rel="noopener" target="_blank">escapeshellarg</a>($data['full_path']), $out, $int);
if ($int != 0) {
return <a href="http://php.net/array" rel="noopener" target="_blank">array</a>(
	'error' => <a href="http://php.net/array" rel="noopener" target="_blank">array</a>('code' => 100, 'msg' => 'This file has been rejected as it contains viruses!'),
	'return' => false
);
}
```

</div></div></div></div></div>Prevent non-admin users to delete files labeled as APPROVED.

Place the following code inside “customizables/events/file.delete.php”:

<div><div><div><div><div>```
<?php
global $auth;
if (!\WebFileShare\Perms::isSuperUser() && !\WebFileShare\Perms::isSimpleAdmin() && !\WebFileShare\Perms::isIndependentAdmin()) {
	$metaFileInfo = \WebFileShare\MetaFiles::getByPath("*", $extra['filePath']);
	if ($metaFileInfo['id']) {
		$label = \WebFileShare\Labels::getByFileId($metaFileInfo['id']);
		$v = \WebFileShare\Labels::parseValue($label);
		if (<a href="http://php.net/strtoupper" rel="noopener" target="_blank">strtoupper</a>($v['text']) == 'APPROVED') {
			return <a href="http://php.net/array" rel="noopener" target="_blank">array</a>(
				'error' => <a href="http://php.net/array" rel="noopener" target="_blank">array</a>('code' => 100, 'msg' => 'Approved files cannot be deleted!'),
				'return' => false
			);
		}
	}
}
```

</div></div></div></div></div>For running a script when folders are being deleted the file needs to be named “folder.delete.php”. To run a script when files are being downloaded, name the script file “file.download.php”.

Calculate and store the files' MD5 checksum values in a metadata field

Please follow these steps:

<div><div><div><div><div>- <div>Go to “Control Panel » System configuration » Metadata » Fieldsets » Create new”</div>
- <div>Set the “Fieldset name” (Something like “Info”, it doesn't really matter)</div>
- <div>Tick the “Generic fieldset” checkbox. (So that all files show this fieldset)</div>
- <div>Click “Save” to add the fieldset.</div>
- <div>Click “Manage Fields &gt; Create new”</div>
- <div>Type “Checksum” for the “Field name” and click “Save”</div>
- <div>By holding the mouse cursor over the newly created field name you can find out its ID, from the link's URL (……&amp;fid=X)</div>
- <div>Create the text file “customizables/events/upload.php” and paste the following code inside:</div>

```
<?php
 
$fieldId = 15; //set here the ID of the metadata field that will be hold the filename
 
/*-----------------------------------------------------------------*/
 
global $db, $fm;
$data = <a href="http://php.net/unserialize" rel="noopener" target="_blank">unserialize</a>($data['data']);
$metaFileInfo = \WebFileShare\MetaFiles::getByPath("*", $data['full_path']);//get file metadata record
 
if (!$metaFileInfo['id']) {
	$id = \WebFileShare\MetaFiles::addFile($data['full_path']);//add file metadata record if not found
	if ($id) {
		$metaFileInfo['path'] = $data['full_path'];
		$metaFileInfo['id'] = $id;
	}
}
 
$hash = <a href="http://php.net/md5" rel="noopener" target="_blank">md5</a>(<a href="http://php.net/file_get_contents" rel="noopener" target="_blank">file_get_contents</a>($data['full_path']));
 
\WebFileShare\MetaValues::set($metaFileInfo['id'], $fieldId, $hash);//set hash as metadata
```

</div></div></div></div></div>\* Replace the “XXXX” with the ID of your “Checksum” metadata field on the first line of the script file.

The “upload.php” script will execute each time a user uploads a file, and it will calculate the file's hash and store it in the file's “Hash” metadata field.

Being a metadata field, you can also display it as a column in the file list view.

Please note that with this method, PHP reads the entire file's contents into memory. This can be slow and might not even work for files larger than PHP's configured “memory\_limit” value. A solution available for Unix type of servers is to replace the line “$hash = [md5](http://php.net/md5)([file\_get\_contents](http://php.net/file_get_contents)($data\['full\_path'\]));”, with the following one:

$hash = [exec](http://php.net/exec)("md5sum \\"".[escapeshellcmd](http://php.net/escapeshellcmd)($data\['full\_path'\])."\\"");

</article><div id="bkmrk-%C2%A0">[](http://docs.filerun.com/custom_event_scripts?do=login&sectok=eb4e30fc66dda17082111c691eb4f9a0 "Log In")</div>