Index: branches/5.1.x/core/units/helpers/file_helper.php
===================================================================
diff -u -N -r13086 -r13569
--- branches/5.1.x/core/units/helpers/file_helper.php	(.../file_helper.php)	(revision 13086)
+++ branches/5.1.x/core/units/helpers/file_helper.php	(.../file_helper.php)	(revision 13569)
@@ -1,6 +1,6 @@
 <?php
 /**
-* @version	$Id: file_helper.php 13086 2010-01-12 19:47:40Z alex $
+* @version	$Id: file_helper.php 13569 2010-05-18 15:25:01Z alex $
 * @package	In-Portal
 * @copyright	Copyright (C) 1997 - 2009 Intechnic. All rights reserved.
 * @license      GNU/GPL
@@ -52,6 +52,8 @@
 			$table_name = $this->Application->getUnitOption('#file', 'TableName');
 			$max_file_count = $this->Application->getUnitOption($object->Prefix, 'FileCount'); // $this->Application->ConfigValue($object->Prefix.'_MaxImageCount');
 
+			$this->CheckFolder(FULL_PATH . ITEM_FILES_PATH);
+
 			$i = 0;
 			while ($i < $max_file_count) {
 				$field = 'File'.($i + 1);
@@ -230,4 +232,42 @@
 			readfile($filename);
 			flush();
 		}
+
+		/**
+		 * Creates folder with given $path
+		 *
+		 * @param string $path
+		 * @return bool
+		 */
+		function CheckFolder($path)
+		{
+			$result = true;
+
+			if (!file_exists($path) || !is_dir($path)) {
+				$parent_path = preg_replace('#/[^/]+/?$#', '', $path);
+				$result = $this->CheckFolder($parent_path);
+
+				if ($result) {
+					$result = mkdir($path);
+
+					if ($result) {
+						chmod($path, 0777);
+
+						// don't commit any files from created folder
+						if (file_exists(FULL_PATH . '/CVS')) {
+							$cvsignore = fopen($path . '/.cvsignore', 'w');
+							fwrite($cvsignore, '*.*');
+							fclose($cvsignore);
+							chmod($path . '/.cvsignore', 0777);
+						}
+					}
+					else {
+						trigger_error('Cannot create directory "<strong>' . $path . '</strong>"', E_USER_WARNING);
+						return false;
+					}
+				}
+			}
+
+			return $result;
+		}
 	}
\ No newline at end of file
Index: branches/5.1.x/core/units/configuration/configuration_tag_processor.php
===================================================================
diff -u -N -r13545 -r13569
--- branches/5.1.x/core/units/configuration/configuration_tag_processor.php	(.../configuration_tag_processor.php)	(revision 13545)
+++ branches/5.1.x/core/units/configuration/configuration_tag_processor.php	(.../configuration_tag_processor.php)	(revision 13569)
@@ -1,6 +1,6 @@
 <?php
 /**
-* @version	$Id: configuration_tag_processor.php 13545 2010-05-11 19:19:58Z alex $
+* @version	$Id: configuration_tag_processor.php 13569 2010-05-18 15:25:01Z alex $
 * @package	In-Portal
 * @copyright	Copyright (C) 1997 - 2009 Intechnic. All rights reserved.
 * @license      GNU/GPL
@@ -240,10 +240,4 @@
 
 		return $cached_sections[$var_name];
 	}
-
-	function IsWritablePath($params)
-	{
-		return is_writable($this->ConfigValue($params));
-	}
-
 }
\ No newline at end of file
Index: branches/5.1.x/core/units/helpers/csv_helper.php
===================================================================
diff -u -N -r13545 -r13569
--- branches/5.1.x/core/units/helpers/csv_helper.php	(.../csv_helper.php)	(revision 13545)
+++ branches/5.1.x/core/units/helpers/csv_helper.php	(.../csv_helper.php)	(revision 13569)
@@ -1,6 +1,6 @@
 <?php
 /**
-* @version	$Id: csv_helper.php 13545 2010-05-11 19:19:58Z alex $
+* @version	$Id: csv_helper.php 13569 2010-05-18 15:25:01Z alex $
 * @package	In-Portal
 * @copyright	Copyright (C) 1997 - 2009 Intechnic. All rights reserved.
 * @license      GNU/GPL
@@ -58,6 +58,11 @@
 				$first_step = true;
 			}
 
+			$file_helper =& $this->Application->recallObject('FileHelper');
+			/* @var $file_helper FileHelper */
+
+			$file_helper->CheckFolder( dirname($export_data['file_name']) );
+
 			$file = fopen($export_data['file_name'], $first_step ? 'w' : 'a');
 
 			$prefix_elems = split('\.|_', $export_data['prefix']);
@@ -163,9 +168,9 @@
 		{
 			safeDefine('DBG_SKIP_REPORTING', 1);
 
-			$export_data = unserialize($this->Application->RecallVar('export_data'));			
+			$export_data = unserialize($this->Application->RecallVar('export_data'));
 			$filename = preg_replace('/(.*)\.csv$/', '\1', basename($export_data['file_name'])) . '.csv';
-			
+
 			header('Content-type: text/csv');
 			header('Content-Disposition: attachment; filename="' . $filename . '"');
 			readfile($export_data['file_name']);
Index: branches/5.1.x/core/admin_templates/tools/backup1.tpl
===================================================================
diff -u -N -r12657 -r13569
--- branches/5.1.x/core/admin_templates/tools/backup1.tpl	(.../backup1.tpl)	(revision 12657)
+++ branches/5.1.x/core/admin_templates/tools/backup1.tpl	(.../backup1.tpl)	(revision 13569)
@@ -41,15 +41,12 @@
 			<inp2:m_inc param="tab_index" by="1"/>
 			<td class="text" style="width: 300px;">
 				<inp2:m_Phrase label="la_prompt_Backup_Path"/>
-				<inp2:m_if check="conf_IsWritablePath" name="Backup_Path" inverse="1">
-					<br /><span class="error"><inp2:m_Phrase label="la_Text_backup_access"/></span>
-					<script type="text/javascript">
-						a_toolbar.DisableButton('next');
-					</script>
-				</inp2:m_if>
 			</td>
 			<td valign="top" colspan="2">
-	 	  		<input type="text" name="conf[<inp2:conf_GetVariableID name="Backup_Path"/>][VariableValue]" class="text" value='<inp2:conf_ConfigValue name="Backup_Path"/>' style="width:80%">
+				<inp2:m_if check="m_Get" name="error_msg">
+					<span class="error"><inp2:m_Get name="error_msg"/></span><br />
+				</inp2:m_if>
+	 	  		<input type="text" name="conf[<inp2:conf_GetVariableID name='Backup_Path'/>][VariableValue]" class="text" value="<inp2:conf_ConfigValue name='Backup_Path'/>" style="width:80%">
 	 	  		<input class="button" type="button" onclick="submit_event('conf', 'OnUpdate');" value="Update">
 	 	  	<!--##
 	 	  		<input type="hidden" name="section" value="in-portal:configure_general"/>
Index: branches/5.1.x/core/units/languages/languages_event_handler.php
===================================================================
diff -u -N -r13559 -r13569
--- branches/5.1.x/core/units/languages/languages_event_handler.php	(.../languages_event_handler.php)	(revision 13559)
+++ branches/5.1.x/core/units/languages/languages_event_handler.php	(.../languages_event_handler.php)	(revision 13569)
@@ -1,6 +1,6 @@
 <?php
 /**
-* @version	$Id: languages_event_handler.php 13559 2010-05-12 09:36:46Z alex $
+* @version	$Id: languages_event_handler.php 13569 2010-05-18 15:25:01Z alex $
 * @package	In-Portal
 * @copyright	Copyright (C) 1997 - 2009 Intechnic. All rights reserved.
 * @license      GNU/GPL
@@ -424,6 +424,11 @@
 					return ;
 				}
 
+				$file_helper =& $this->Application->recallObject('FileHelper');
+				/* @var $file_helper FileHelper */
+
+				$file_helper->CheckFolder(EXPORT_PATH);
+
 				if (!is_writable(EXPORT_PATH)) {
 					$event->status = erFAIL;
 					$object->SetError('LangFile', 'write_error', 'la_ExportFolderNotWritable');
@@ -504,10 +509,10 @@
 				'l' . $object->GetID() . '_Body' => NULL,
 			);
 			$this->Conn->doUpdate($fields_hash, $this->Application->getUnitOption('emailevents', 'TableName'), 1);
-			
+
 			// clean Phrases table
 			$fields_hash = Array (
-				'l' . $object->GetID() . '_Translation' => NULL,			
+				'l' . $object->GetID() . '_Translation' => NULL,
 			);
 			$this->Conn->doUpdate($fields_hash, $this->Application->getUnitOption('phrases', 'TableName'), 1);
 		}
Index: branches/5.1.x/system/backupdata/.htaccess
===================================================================
diff -u -N
--- branches/5.1.x/system/backupdata/.htaccess	(revision 12657)
+++ branches/5.1.x/system/backupdata/.htaccess	(revision 0)
@@ -1 +0,0 @@
-deny from all
\ No newline at end of file
Index: branches/5.1.x/core/units/admin/admin_events_handler.php
===================================================================
diff -u -N -r13433 -r13569
--- branches/5.1.x/core/units/admin/admin_events_handler.php	(.../admin_events_handler.php)	(revision 13433)
+++ branches/5.1.x/core/units/admin/admin_events_handler.php	(.../admin_events_handler.php)	(revision 13569)
@@ -1,6 +1,6 @@
 <?php
 /**
-* @version	$Id: admin_events_handler.php 13433 2010-04-27 10:23:52Z alex $
+* @version	$Id: admin_events_handler.php 13569 2010-05-18 15:25:01Z alex $
 * @package	In-Portal
 * @copyright	Copyright (C) 1997 - 2009 Intechnic. All rights reserved.
 * @license      GNU/GPL
@@ -681,7 +681,18 @@
 	 */
 	function OnBackup(&$event)
 	{
+		$backup_path = $this->Application->ConfigValue('Backup_Path');
 
+		$file_helper =& $this->Application->recallObject('FileHelper');
+		/* @var $file_helper FileHelper */
+
+		if (!$file_helper->CheckFolder($backup_path) || !is_writable($backup_path)) {
+			$event->status = erFAIL;
+
+			$this->Application->SetVar('error_msg', $this->Application->Phrase('la_Text_backup_access'));
+			return ;
+		}
+
 		$a_tables = $this->Conn->GetCol('SHOW TABLES'); //  array_keys($tables);
 		$TableNames = Array();
 		for($x=0;$x<count($a_tables);$x++)
@@ -693,15 +704,13 @@
 		  	  	}
 		  	}
 		}
-//			echo "<pre>"; print_r($TableNames); echo "</pre>";
-//			exit;
 
 		$backupProgress = Array (
 			'table_num' => 0,
 			'table_names' => $TableNames,
 			'table_count' => count($TableNames),
 			'record_count' => 0,
-			'file_name' => $this->Application->ConfigValue('Backup_Path')."/dump".adodb_mktime().".txt",
+			'file_name' => $backup_path."/dump".adodb_mktime().".txt",
 		);
 		$this->Application->RemoveVar('adm.backupcomplete_filename');
 		$this->Application->RemoveVar('adm.backupcomplete_filesize');
Index: branches/5.1.x/system/downloads/.htaccess
===================================================================
diff -u -N
--- branches/5.1.x/system/downloads/.htaccess	(revision 12127)
+++ branches/5.1.x/system/downloads/.htaccess	(revision 0)
@@ -1 +0,0 @@
-Deny from all
\ No newline at end of file
Index: branches/5.1.x/core/units/stylesheets/stylesheets_item.php
===================================================================
diff -u -N -r13086 -r13569
--- branches/5.1.x/core/units/stylesheets/stylesheets_item.php	(.../stylesheets_item.php)	(revision 13086)
+++ branches/5.1.x/core/units/stylesheets/stylesheets_item.php	(.../stylesheets_item.php)	(revision 13569)
@@ -1,6 +1,6 @@
 <?php
 /**
-* @version	$Id: stylesheets_item.php 13086 2010-01-12 19:47:40Z alex $
+* @version	$Id: stylesheets_item.php 13569 2010-05-18 15:25:01Z alex $
 * @package	In-Portal
 * @copyright	Copyright (C) 1997 - 2009 Intechnic. All rights reserved.
 * @license      GNU/GPL
@@ -38,6 +38,11 @@
 			$compile_ts = adodb_mktime();
 			$css_path = WRITEABLE . '/stylesheets/';
 
+			$file_helper =& $this->Application->recallObject('FileHelper');
+			/* @var $file_helper FileHelper */
+
+			$file_helper->CheckFolder($css_path);
+
 			$css_file = $css_path.mb_strtolower($this->GetDBField('Name')).'-'.$compile_ts.'.css';
 
 			$fp = fopen($css_file,'w');
Index: branches/5.1.x/core/units/helpers/image_helper.php
===================================================================
diff -u -N -r13545 -r13569
--- branches/5.1.x/core/units/helpers/image_helper.php	(.../image_helper.php)	(revision 13545)
+++ branches/5.1.x/core/units/helpers/image_helper.php	(.../image_helper.php)	(revision 13569)
@@ -1,6 +1,6 @@
 <?php
 /**
-* @version	$Id: image_helper.php 13545 2010-05-11 19:19:58Z alex $
+* @version	$Id: image_helper.php 13569 2010-05-18 15:25:01Z alex $
 * @package	In-Portal
 * @copyright	Copyright (C) 1997 - 2009 Intechnic. All rights reserved.
 * @license      GNU/GPL
@@ -17,6 +17,20 @@
 	class ImageHelper extends kHelper {
 
 		/**
+		 * File helper reference
+		 *
+		 * @var FileHelper
+		 */
+		var $fileHelper = null;
+
+		function ImageHelper()
+		{
+			parent::kHelper();
+
+			$this->fileHelper =& $this->Application->recallObject('FileHelper');
+		}
+
+		/**
 		 * Parses format string into array
 		 *
 		 * @param string $format sample format: "resize:300x500;wm:inc/wm.png|c|-20"
@@ -101,6 +115,9 @@
 				if ($needs_resize || array_intersect(array_keys($params), $transform_keys)) {
 					// resize required OR watermarking required -> change resulting image name !
 					$dst_image = preg_replace('/^'.preg_quote($src_path, '/').'(.*)\.(.*)$/', $src_path . DIRECTORY_SEPARATOR . 'resized\\1_' . crc32(serialize($params)) . '.\\2', $src_image);
+
+					$this->fileHelper->CheckFolder( dirname($dst_image) );
+
 					if (!file_exists($dst_image) || filemtime($src_image) > filemtime($dst_image)) {
 						// resized image not available OR should be recreated due source image change
 						$params['dst_image'] = $dst_image;
Index: branches/5.1.x/core/kernel/utility/formatters/upload_formatter.php
===================================================================
diff -u -N -r13086 -r13569
--- branches/5.1.x/core/kernel/utility/formatters/upload_formatter.php	(.../upload_formatter.php)	(revision 13086)
+++ branches/5.1.x/core/kernel/utility/formatters/upload_formatter.php	(.../upload_formatter.php)	(revision 13569)
@@ -1,6 +1,6 @@
 <?php
 /**
-* @version	$Id: upload_formatter.php 13086 2010-01-12 19:47:40Z alex $
+* @version	$Id: upload_formatter.php 13569 2010-05-18 15:25:01Z alex $
 * @package	In-Portal
 * @copyright	Copyright (C) 1997 - 2009 Intechnic. All rights reserved.
 * @license      GNU/GPL
@@ -17,16 +17,24 @@
 	var $DestinationPath;
 	var $FullPath;
 
+	/**
+	 * File helper reference
+	 *
+	 * @var FileHelper
+	 */
+	var $fileHelper = null;
+
 	function kUploadFormatter()
 	{
-		parent::kBase();
+		parent::kFormatter();
 
+		$this->fileHelper =& $this->Application->recallObject('FileHelper');
+
 		if ($this->DestinationPath) {
 			$this->FullPath = FULL_PATH.$this->DestinationPath;
 		}
 	}
 
-
 	/**
 	 * Processes file uploads from form
 	 *
@@ -45,6 +53,8 @@
 			$this->FullPath = FULL_PATH.$this->DestinationPath;
 		}
 
+		$this->fileHelper->CheckFolder($this->FullPath);
+
 		// SWF Uploader
 		if (is_array($value) && isset($value['tmp_ids'])) {
 			if ($value['tmp_deleted']) {
@@ -314,12 +324,10 @@
 
 		return $new_name;
 	}
-
 }
 
 class kPictureFormatter extends kUploadFormatter
 {
-
 	function kPictureFormatter()
 	{
 		$this->NakeLookupPath = IMAGES_PATH; // used ?
@@ -340,5 +348,4 @@
 
 		return parent::GetFormatted($value, $field_name, $object, $format);
 	}
-
 }
\ No newline at end of file
Index: branches/5.1.x/core/units/helpers/cat_dbitem_export_helper.php
===================================================================
diff -u -N -r13545 -r13569
--- branches/5.1.x/core/units/helpers/cat_dbitem_export_helper.php	(.../cat_dbitem_export_helper.php)	(revision 13545)
+++ branches/5.1.x/core/units/helpers/cat_dbitem_export_helper.php	(.../cat_dbitem_export_helper.php)	(revision 13569)
@@ -1,6 +1,6 @@
 <?php
 /**
-* @version	$Id: cat_dbitem_export_helper.php 13545 2010-05-11 19:19:58Z alex $
+* @version	$Id: cat_dbitem_export_helper.php 13569 2010-05-18 15:25:01Z alex $
 * @package	In-Portal
 * @copyright	Copyright (C) 1997 - 2009 Intechnic. All rights reserved.
 * @license      GNU/GPL
@@ -352,7 +352,7 @@
 		{
 			$extension = $this->getFileExtension();
 			$filename = preg_replace('/(.*)\.' . $extension . '$/', '\1', $this->exportOptions['ExportFilename']) . '.' . $extension;
-			
+
 			return EXPORT_PATH . DIRECTORY_SEPARATOR . $filename;
 		}
 
@@ -363,6 +363,11 @@
 		 */
 		function openFile(&$event)
 		{
+			$file_helper =& $this->Application->recallObject('FileHelper');
+			/* @var $file_helper FileHelper */
+
+			$file_helper->CheckFolder(EXPORT_PATH);
+
 			if ($event->Special == 'export') {
 				$write_mode = ($this->exportOptions['start_from'] == 0) ? 'w' : 'a';
 				$this->filePointer = fopen($this->getExportFilename(), $write_mode);
@@ -1286,6 +1291,11 @@
 
 			$import_filenames = Array();
 
+			$file_helper =& $this->Application->recallObject('FileHelper');
+			/* @var $file_helper FileHelper */
+
+			$file_helper->CheckFolder(EXPORT_PATH);
+
 			if ($folder_handle = opendir(EXPORT_PATH)) {
 				while (false !== ($file = readdir($folder_handle))) {
 					if (is_dir(EXPORT_PATH.'/'.$file) || substr($file, 0, 1) == '.' || strtolower($file) == 'cvs' || strtolower($file) == 'dummy' || filesize(EXPORT_PATH.'/'.$file) == 0) continue;
Index: branches/5.1.x/core/install.php
===================================================================
diff -u -N -r13400 -r13569
--- branches/5.1.x/core/install.php	(.../install.php)	(revision 13400)
+++ branches/5.1.x/core/install.php	(.../install.php)	(revision 13569)
@@ -1,6 +1,6 @@
 <?php
 /**
-* @version	$Id: install.php 13400 2010-04-25 12:37:19Z alex $
+* @version	$Id: install.php 13569 2010-05-18 15:25:01Z alex $
 * @package	In-Portal
 * @copyright	Copyright (C) 1997 - 2009 Intechnic. All rights reserved.
 * @license      GNU/GPL
@@ -100,19 +100,9 @@
 		var $writeableFolders = Array (
 			'$1',
 			'$1/images',
-			'$1/images/resized',
 			'$1/images/pending',
-			'$1/images/pending/resized',
 			'$1/images/emoticons', // for "In-Bulletin"
-			'$1/images/manufacturers', // for "In-Commerce"
-			'$1/images/manufacturers/resized', // for "In-Commerce"
-			'$1/images/polls', // for "In-Bulletin"
-			'$1/images/polls/resized', // for "In-Bulletin"
-			'$1/backupdata',
-			'$1/export',
-			'$1/stylesheets',
 			'$1/user_files',
-			'$1/user_files/submission_log',
 			'$1/cache',
 		);
 
Index: branches/5.1.x/core/units/admin/admin_tag_processor.php
===================================================================
diff -u -N -r13559 -r13569
--- branches/5.1.x/core/units/admin/admin_tag_processor.php	(.../admin_tag_processor.php)	(revision 13559)
+++ branches/5.1.x/core/units/admin/admin_tag_processor.php	(.../admin_tag_processor.php)	(revision 13569)
@@ -1,6 +1,6 @@
 <?php
 /**
-* @version	$Id: admin_tag_processor.php 13559 2010-05-12 09:36:46Z alex $
+* @version	$Id: admin_tag_processor.php 13569 2010-05-18 15:25:01Z alex $
 * @package	In-Portal
 * @copyright	Copyright (C) 1997 - 2009 Intechnic. All rights reserved.
 * @license      GNU/GPL
@@ -934,7 +934,12 @@
 
 		function getDirList ($dirName)
 		{
-		    $fileinfo = array();
+		    $file_helper =& $this->Application->recallObject('FileHelper');
+			/* @var $file_helper FileHelper */
+
+			$file_helper->CheckFolder($dirName);
+
+			$fileinfo = array();
 		    $d = dir($dirName);
 
 		    while($entry = $d->read())
Index: branches/5.1.x/core/kernel/db/db_event_handler.php
===================================================================
diff -u -N -r13545 -r13569
--- branches/5.1.x/core/kernel/db/db_event_handler.php	(.../db_event_handler.php)	(revision 13545)
+++ branches/5.1.x/core/kernel/db/db_event_handler.php	(.../db_event_handler.php)	(revision 13569)
@@ -1,6 +1,6 @@
 <?php
 /**
-* @version	$Id: db_event_handler.php 13545 2010-05-11 19:19:58Z alex $
+* @version	$Id: db_event_handler.php 13569 2010-05-18 15:25:01Z alex $
 * @package	In-Portal
 * @copyright	Copyright (C) 1997 - 2009 Intechnic. All rights reserved.
 * @license      GNU/GPL
@@ -2618,7 +2618,7 @@
 			$fields = $this->Application->getUnitOption($event->Prefix, 'Fields');
 			$upload_dir = $fields[ $this->Application->GetVar('field') ]['upload_dir'];
 
-			if (!is_writable($tmp_path) || !is_writable(FULL_PATH . $upload_dir)) {
+			if (!is_writable($tmp_path)) {
 				// 500 Internal Server Error
 				// check both temp and live upload directory
 				header('HTTP/1.0 500 Write permissions not set on the server');