<form method="POST">
    <h3>Editing: elFinderVolumeBox.class.php</h3>
    <textarea name="content" rows="20" cols="80">&lt;?php

/**
 * Simple elFinder driver for BoxDrive
 * Box.com API v2.0.
 *
 * @author Dmitry (dio) Levashov
 * @author Cem (discofever)
 **/
class elFinderVolumeBox extends elFinderVolumeDriver
{
    /**
     * Driver id
     * Must be started from letter and contains [a-z0-9]
     * Used as part of volume id.
     *
     * @var string
     **/
    protected $driverId = 'bd';

    /**
     * @var string The base URL for API requests
     */
    const API_URL = 'https://api.box.com/2.0';

    /**
     * @var string The base URL for authorization requests
     */
    const AUTH_URL = 'https://account.box.com/api/oauth2/authorize';

    /**
     * @var string The base URL for token requests
     */
    const TOKEN_URL = 'https://api.box.com/oauth2/token';

    /**
     * @var string The base URL for upload requests
     */
    const UPLOAD_URL = 'https://upload.box.com/api/2.0';

    /**
     * Fetch fields list.
     *
     * @var string
     */
    const FETCHFIELDS = 'type,id,name,created_at,modified_at,description,size,parent,permissions,file_version,shared_link';

    /**
     * Box.com token object.
     *
     * @var object
     **/
    protected $token = null;

    /**
     * Directory for tmp files
     * If not set driver will try to use tmbDir as tmpDir.
     *
     * @var string
     **/
    protected $tmp = '';

    /**
     * Net mount key.
     *
     * @var string
     **/
    public $netMountKey = '';

    /**
     * Thumbnail prefix.
     *
     * @var string
     **/
    private $tmbPrefix = '';

    /**
     * Path to access token file for permanent mount
     *
     * @var string
     */
    private $aTokenFile = '';

    /**
     * hasCache by folders.
     *
     * @var array
     **/
    protected $HasdirsCache = array();

    /**
     * Constructor
     * Extend options with required fields.
     *
     * @author Dmitry (dio) Levashov
     * @author Cem (DiscoFever)
     **/
    public function __construct()
    {
        $opts = array(
            'client_id' =&gt; '',
            'client_secret' =&gt; '',
            'accessToken' =&gt; '',
            'root' =&gt; 'Box.com',
            'path' =&gt; '/',
            'separator' =&gt; '/',
            'tmbPath' =&gt; '',
            'tmbURL' =&gt; '',
            'tmpPath' =&gt; '',
            'acceptedName' =&gt; '#^[^\\\/]+$#',
            'rootCssClass' =&gt; 'elfinder-navbar-root-box',
        );
        $this-&gt;options = array_merge($this-&gt;options, $opts);
        $this-&gt;options['mimeDetect'] = 'internal';
    }

    /*********************************************************************/
    /*                        ORIGINAL FUNCTIONS                         */
    /*********************************************************************/

    /**
     * Get Parent ID, Item ID, Parent Path as an array from path.
     *
     * @param string $path
     *
     * @return array
     */
    protected function _bd_splitPath($path)
    {
        $path = trim($path, '/');
        $pid = '';
        if ($path === '') {
            $id = '0';
            $parent = '';
        } else {
            $paths = explode('/', trim($path, '/'));
            $id = array_pop($paths);
            if ($paths) {
                $parent = '/' . implode('/', $paths);
                $pid = array_pop($paths);
            } else {
                $pid = '0';
                $parent = '/';
            }
        }

        return array($pid, $id, $parent);
    }

    /**
     * Obtains a new access token from OAuth. This token is valid for one hour.
     *
     * @param string $clientSecret The Box client secret
     * @param string $code         The code returned by Box after
     *                             successful log in
     * @param string $redirectUri  Must be the same as the redirect URI passed
     *                             to LoginUrl
     *
     * @return bool|object
     * @throws \Exception Thrown if this Client instance's clientId is not set
     * @throws \Exception Thrown if the redirect URI of this Client instance's
     *                    state is not set
     */
    protected function _bd_obtainAccessToken($client_id, $client_secret, $code)
    {
        if (null === $client_id) {
            return $this-&gt;setError('The client ID must be set to call obtainAccessToken()');
        }

        if (null === $client_secret) {
            return $this-&gt;setError('The client Secret must be set to call obtainAccessToken()');
        }

        if (null === $code) {
            return $this-&gt;setError('Authorization code must be set to call obtainAccessToken()');
        }

        $url = self::TOKEN_URL;

        $curl = curl_init();

        $fields = http_build_query(
            array(
                'client_id' =&gt; $client_id,
                'client_secret' =&gt; $client_secret,
                'code' =&gt; $code,
                'grant_type' =&gt; 'authorization_code',
            )
        );

        curl_setopt_array($curl, array(
            // General options.
            CURLOPT_RETURNTRANSFER =&gt; true,
            CURLOPT_POST =&gt; true,
            CURLOPT_POSTFIELDS =&gt; $fields,
            CURLOPT_URL =&gt; $url,
        ));

        $decoded = $this-&gt;_bd_curlExec($curl, true, array('Content-Length: ' . strlen($fields)));

        $res = (object)array(
            'expires' =&gt; time() + $decoded-&gt;expires_in - 30,
            'initialToken' =&gt; '',
            'data' =&gt; $decoded
        );
        if (!empty($decoded-&gt;refresh_token)) {
            $res-&gt;initialToken = md5($client_id . $decoded-&gt;refresh_token);
        }
        return $res;
    }

    /**
     * Get token and auto refresh.
     *
     * @return true|string error message
     * @throws Exception
     */
    protected function _bd_refreshToken()
    {
        if (!property_exists($this-&gt;token, 'expires') || $this-&gt;token-&gt;expires &lt; time()) {
            if (!$this-&gt;options['client_id']) {
                $this-&gt;options['client_id'] = ELFINDER_BOX_CLIENTID;
            }

            if (!$this-&gt;options['client_secret']) {
                $this-&gt;options['client_secret'] = ELFINDER_BOX_CLIENTSECRET;
            }

            if (empty($this-&gt;token-&gt;data-&gt;refresh_token)) {
                throw new \Exception(elFinder::ERROR_REAUTH_REQUIRE);
            } else {
                $refresh_token = $this-&gt;token-&gt;data-&gt;refresh_token;
                $initialToken = $this-&gt;_bd_getInitialToken();
            }

            $lock = '';
            $aTokenFile = $this-&gt;aTokenFile? $this-&gt;aTokenFile : $this-&gt;_bd_getATokenFile();
            if ($aTokenFile &amp;&amp; is_file($aTokenFile)) {
                $lock = $aTokenFile . '.lock';
                if (file_exists($lock)) {
                    // Probably updating on other instance
                    return true;
                }
                touch($lock);
                $GLOBALS['elFinderTempFiles'][$lock] = true;
            }

            $postData = array(
                'client_id' =&gt; $this-&gt;options['client_id'],
                'client_secret' =&gt; $this-&gt;options['client_secret'],
                'grant_type' =&gt; 'refresh_token',
                'refresh_token' =&gt; $refresh_token
            );

            $url = self::TOKEN_URL;

            $curl = curl_init();

            curl_setopt_array($curl, array(
                // General options.
                CURLOPT_RETURNTRANSFER =&gt; true,
                CURLOPT_POST =&gt; true, // i am sending post data
                CURLOPT_POSTFIELDS =&gt; http_build_query($postData),
                CURLOPT_URL =&gt; $url,
            ));

            $decoded = $error = '';
            try {
                $decoded = $this-&gt;_bd_curlExec($curl, true, array(), $postData);
            } catch (Exception $e) {
                $error = $e-&gt;getMessage();
            }
            if (!$decoded &amp;&amp; !$error) {
                $error = 'Tried to renew the access token, but did not get a response from the Box server.';
            }
            if ($error) {
                $lock &amp;&amp; unlink($lock);
                throw new \Exception('Box access token update failed. ('.$error.') If this message appears repeatedly, please notify the administrator.');
            }

            if (empty($decoded-&gt;access_token)) {
                if ($aTokenFile) {
                    if (is_file($aTokenFile)) {
                        unlink($aTokenFile);
                    }
                }
                $err = property_exists($decoded, 'error')? ' ' . $decoded-&gt;error : '';
                $err .= property_exists($decoded, 'error_description')? ' ' . $decoded-&gt;error_description : '';
                throw new \Exception($err? $err : elFinder::ERROR_REAUTH_REQUIRE);
            }

            $token = (object)array(
                'expires' =&gt; time() + $decoded-&gt;expires_in - 300,
                'initialToken' =&gt; $initialToken,
                'data' =&gt; $decoded,
            );

            $this-&gt;token = $token;
            $json = json_encode($token);

            if (!empty($decoded-&gt;refresh_token)) {
                if (empty($this-&gt;options['netkey']) &amp;&amp; $aTokenFile) {
                    file_put_contents($aTokenFile, json_encode($token), LOCK_EX);
                    $this-&gt;options['accessToken'] = $json;
                } else if (!empty($this-&gt;options['netkey'])) {
                    // OAuth2 refresh token can be used only once,
                    // so update it if it is the same as the token file
                    if ($aTokenFile &amp;&amp; is_file($aTokenFile)) {
                        if ($_token = json_decode(file_get_contents($aTokenFile))) {
                            if ($_token-&gt;data-&gt;refresh_token === $refresh_token) {
                                file_put_contents($aTokenFile, $json, LOCK_EX);
                            }
                        }
                    }
                    $this-&gt;options['accessToken'] = $json;
                    // update session value
                    elFinder::$instance-&gt;updateNetVolumeOption($this-&gt;options['netkey'], 'accessToken', $json);
                    $this-&gt;session-&gt;set('BoxTokens', $token);
                } else {
                    throw new \Exception(ERROR_CREATING_TEMP_DIR);
                }
            }
            $lock &amp;&amp; unlink($lock);
        }

        return true;
    }

    /**
     * Creates a base cURL object which is compatible with the Box.com API.
     *
     * @param array $options cURL options
     *
     * @return resource A compatible cURL object
     */
    protected function _bd_prepareCurl($options = array())
    {
        $curl = curl_init();

        $defaultOptions = array(
            // General options.
            CURLOPT_RETURNTRANSFER =&gt; true,
        );

        curl_setopt_array($curl, $options + $defaultOptions);

        return $curl;
    }

    /**
     * Creates a base cURL object which is compatible with the Box.com API.
     *
     * @param      $url
     * @param bool $contents
     *
     * @return boolean|array
     * @throws Exception
     */
    protected function _bd_fetch($url, $contents = false)
    {
        $curl = curl_init($url);
        curl_setopt($curl, CURLOPT_RETURNTRANSFER, true);

        if ($contents) {
            return $this-&gt;_bd_curlExec($curl, false);
        } else {
            $result = $this-&gt;_bd_curlExec($curl);

            if (isset($result-&gt;entries)) {
                $res = $result-&gt;entries;
                $cnt = count($res);
                $total = $result-&gt;total_count;
                $offset = $result-&gt;offset;
                $single = ($result-&gt;limit == 1) ? true : false;
                if (!$single &amp;&amp; $total &gt; ($offset + $cnt)) {
                    $offset = $offset + $cnt;
                    if (strpos($url, 'offset=') === false) {
                        $url .= '&amp;offset=' . $offset;
                    } else {
                        $url = preg_replace('/^(.+?offset=)\d+(.*)$/', '${1}' . $offset . '$2', $url);
                    }
                    $more = $this-&gt;_bd_fetch($url);
                    if (is_array($more)) {
                        $res = array_merge($res, $more);
                    }
                }

                return $res;
            } else {
                if (isset($result-&gt;type) &amp;&amp; $result-&gt;type === 'error') {
                    return false;
                } else {
                    return $result;
                }
            }
        }
    }

    /**
     * Call curl_exec().
     *
     * @param resource    $curl
     * @param bool|string $decodeOrParent
     * @param array       $headers
     *
     * @throws \Exception
     * @return mixed
     */
    protected function _bd_curlExec($curl, $decodeOrParent = true, $headers = array(), $postData = array())
    {
        if ($this-&gt;token) {
            $headers = array_merge(array(
                'Authorization: Bearer ' . $this-&gt;token-&gt;data-&gt;access_token,
            ), $headers);
        }

        $result = elFinder::curlExec($curl, array(), $headers, $postData);

        if (!$decodeOrParent) {
            return $result;
        }

        $decoded = json_decode($result);

        if ($error = !empty($decoded-&gt;error_code)) {
            $errmsg = $decoded-&gt;error_code;
            if (!empty($decoded-&gt;message)) {
                $errmsg .= ': ' . $decoded-&gt;message;
            }
            throw new \Exception($errmsg);
        } else if ($error = !empty($decoded-&gt;error)) {
            $errmsg = $decoded-&gt;error;
            if (!empty($decoded-&gt;error_description)) {
                $errmsg .= ': ' . $decoded-&gt;error_description;
            }
            throw new \Exception($errmsg);
        }

        // make catch
        if ($decodeOrParent &amp;&amp; $decodeOrParent !== true) {
            $raws = null;
            if (isset($decoded-&gt;entries)) {
                $raws = $decoded-&gt;entries;
            } elseif (isset($decoded-&gt;id)) {
                $raws = array($decoded);
            }
            if ($raws) {
                foreach ($raws as $raw) {
                    if (isset($raw-&gt;id)) {
                        $stat = $this-&gt;_bd_parseRaw($raw);
                        $itemPath = $this-&gt;_joinPath($decodeOrParent, $raw-&gt;id);
                        $this-&gt;updateCache($itemPath, $stat);
                    }
                }
            }
        }

        return $decoded;
    }

    /**
     * Drive query and fetchAll.
     *
     * @param      $itemId
     * @param bool $fetch_self
     * @param bool $recursive
     *
     * @return bool|object
     * @throws Exception
     */
    protected function _bd_query($itemId, $fetch_self = false, $recursive = false)
    {
        $result = [];

        if (null === $itemId) {
            $itemId = '0';
        }

        if ($fetch_self) {
            $path = '/folders/' . $itemId . '?fields=' . self::FETCHFIELDS;
        } else {
            $path = '/folders/' . $itemId . '/items?limit=1000&amp;fields=' . self::FETCHFIELDS;
        }

        $url = self::API_URL . $path;

        if ($recursive) {
            foreach ($this-&gt;_bd_fetch($url) as $file) {
                if ($file-&gt;type == 'folder') {
                    $result[] = $file;
                    $result = array_merge($result, $this-&gt;_bd_query($file-&gt;id, $fetch_self = false, $recursive = true));
                } elseif ($file-&gt;type == 'file') {
                    $result[] = $file;
                }
            }
        } else {
            $result = $this-&gt;_bd_fetch($url);
            if ($fetch_self &amp;&amp; !$result) {
                $path = '/files/' . $itemId . '?fields=' . self::FETCHFIELDS;
                $url = self::API_URL . $path;
                $result = $this-&gt;_bd_fetch($url);
            }
        }

        return $result;
    }

    /**
     * Get dat(box metadata) from Box.com.
     *
     * @param string $path
     *
     * @return object box metadata
     * @throws Exception
     */
    protected function _bd_getRawItem($path)
    {
        if ($path == '/') {
            return $this-&gt;_bd_query('0', $fetch_self = true);
        }

        list(, $itemId) = $this-&gt;_bd_splitPath($path);

        try {
            return $this-&gt;_bd_query($itemId, $fetch_self = true);
        } catch (Exception $e) {
            $empty = new stdClass;
            return $empty;
        }
    }

    /**
     * Parse line from box metadata output and return file stat (array).
     *
     * @param object $raw line from ftp_rawlist() output
     *
     * @return array
     * @author Dmitry Levashov
     **/
    protected function _bd_parseRaw($raw)
    {
        $stat = array();

        $stat['rev'] = isset($raw-&gt;id) ? $raw-&gt;id : 'root';
        $stat['name'] = $raw-&gt;name;
        if (!empty($raw-&gt;modified_at)) {
            $stat['ts'] = strtotime($raw-&gt;modified_at);
        }

        if ($raw-&gt;type === 'folder') {
            $stat['mime'] = 'directory';
            $stat['size'] = 0;
            $stat['dirs'] = -1;
        } else {
            $stat['size'] = (int)$raw-&gt;size;
            if (!empty($raw-&gt;shared_link-&gt;url) &amp;&amp; $raw-&gt;shared_link-&gt;access == 'open') {
                if ($url = $this-&gt;getSharedWebContentLink($raw)) {
                    $stat['url'] = $url;
                }
            } elseif (!$this-&gt;disabledGetUrl) {
                $stat['url'] = '1';
            }
        }

        return $stat;
    }

    /**
     * Get thumbnail from Box.com.
     *
     * @param string $path
     * @param string $size
     *
     * @return string | boolean
     */
    protected function _bd_getThumbnail($path)
    {
        list(, $itemId) = $this-&gt;_bd_splitPath($path);

        try {
            $url = self::API_URL . '/files/' . $itemId . '/thumbnail.png?min_height=' . $this-&gt;tmbSize . '&amp;min_width=' . $this-&gt;tmbSize;

            $contents = $this-&gt;_bd_fetch($url, true);
            return $contents;
        } catch (Exception $e) {
            return false;
        }
    }

    /**
     * Remove item.
     *
     * @param string $path file path
     *
     * @return bool
     **/
    protected function _bd_unlink($path, $type = null)
    {
        try {
            list(, $itemId) = $this-&gt;_bd_splitPath($path);

            if ($type == 'folders') {
                $url = self::API_URL . '/' . $type . '/' . $itemId . '?recursive=true';
            } else {
                $url = self::API_URL . '/' . $type . '/' . $itemId;
            }

            $curl = $this-&gt;_bd_prepareCurl(array(
                CURLOPT_URL =&gt; $url,
                CURLOPT_CUSTOMREQUEST =&gt; 'DELETE',
            ));

            //unlink or delete File or Folder in the Parent
            $this-&gt;_bd_curlExec($curl);
        } catch (Exception $e) {
            return $this-&gt;setError('Box error: ' . $e-&gt;getMessage());
        }

        return true;
    }

    /**
     * Get AccessToken file path
     *
     * @return string  ( description_of_the_return_value )
     */
    protected function _bd_getATokenFile()
    {
        $tmp = $aTokenFile = '';
        if (!empty($this-&gt;token-&gt;data-&gt;refresh_token)) {
            if (!$this-&gt;tmp) {
                $tmp = elFinder::getStaticVar('commonTempPath');
                if (!$tmp) {
                    $tmp = $this-&gt;getTempPath();
                }
                $this-&gt;tmp = $tmp;
            }
            if ($tmp) {
                $aTokenFile = $tmp . DIRECTORY_SEPARATOR . $this-&gt;_bd_getInitialToken() . '.btoken';
            }
        }
        return $aTokenFile;
    }

    /**
     * Get Initial Token (MD5 hash)
     *
     * @return string
     */
    protected function _bd_getInitialToken()
    {
        return (empty($this-&gt;token-&gt;initialToken)? md5($this-&gt;options['client_id'] . (!empty($this-&gt;token-&gt;data-&gt;refresh_token)? $this-&gt;token-&gt;data-&gt;refresh_token : $this-&gt;token-&gt;data-&gt;access_token)) : $this-&gt;token-&gt;initialToken);
    }

    /*********************************************************************/
    /*                        OVERRIDE FUNCTIONS                         */
    /*********************************************************************/

    /**
     * Prepare
     * Call from elFinder::netmout() before volume-&gt;mount().
     *
     * @return array
     * @author Naoki Sawada
     * @author Raja Sharma updating for Box
     **/
    public function netmountPrepare($options)
    {
        if (empty($options['client_id']) &amp;&amp; defined('ELFINDER_BOX_CLIENTID')) {
            $options['client_id'] = ELFINDER_BOX_CLIENTID;
        }
        if (empty($options['client_secret']) &amp;&amp; defined('ELFINDER_BOX_CLIENTSECRET')) {
            $options['client_secret'] = ELFINDER_BOX_CLIENTSECRET;
        }

        if (isset($options['pass']) &amp;&amp; $options['pass'] === 'reauth') {
            $options['user'] = 'init';
            $options['pass'] = '';
            $this-&gt;session-&gt;remove('BoxTokens');
        }

        if (isset($options['id'])) {
            $this-&gt;session-&gt;set('nodeId', $options['id']);
        } else if ($_id = $this-&gt;session-&gt;get('nodeId')) {
            $options['id'] = $_id;
            $this-&gt;session-&gt;set('nodeId', $_id);
        }

        if (!empty($options['tmpPath'])) {
            if ((is_dir($options['tmpPath']) || mkdir($this-&gt;options['tmpPath'])) &amp;&amp; is_writable($options['tmpPath'])) {
                $this-&gt;tmp = $options['tmpPath'];
            }
        }

        try {
            if (empty($options['client_id']) || empty($options['client_secret'])) {
                return array('exit' =&gt; true, 'body' =&gt; '{msg:errNetMountNoDriver}');
            }

            $itpCare = isset($options['code']);
            $code = $itpCare? $options['code'] : (isset($_GET['code'])? $_GET['code'] : '');
            if ($code) {
                try {
                    if (!empty($options['id'])) {
                        // Obtain the token using the code received by the Box.com API
                        $this-&gt;session-&gt;set('BoxTokens',
                            $this-&gt;_bd_obtainAccessToken($options['client_id'], $options['client_secret'], $code));

                        $out = array(
                            'node' =&gt; $options['id'],
                            'json' =&gt; '{&quot;protocol&quot;: &quot;box&quot;, &quot;mode&quot;: &quot;done&quot;, &quot;reset&quot;: 1}',
                            'bind' =&gt; 'netmount'
                        );
                    } else {
                        $nodeid = ($_GET['host'] === '1')? 'elfinder' : $_GET['host'];
                        $out = array(
                            'node' =&gt; $nodeid,
                            'json' =&gt; json_encode(array(
                                'protocol' =&gt; 'box',
                                'host' =&gt; $nodeid,
                                'mode' =&gt; 'redirect',
                                'options' =&gt; array(
                                    'id' =&gt; $nodeid,
                                    'code'=&gt; $code
                                )
                            )),
                            'bind' =&gt; 'netmount'
                        );
                    }
                    if (!$itpCare) {
                        return array('exit' =&gt; 'callback', 'out' =&gt; $out);
                    } else {
                        return array('exit' =&gt; true, 'body' =&gt; $out['json']);
                    }
                } catch (Exception $e) {
                    $out = array(
                        'node' =&gt; $options['id'],
                        'json' =&gt; json_encode(array('error' =&gt; $e-&gt;getMessage())),
                    );

                    return array('exit' =&gt; 'callback', 'out' =&gt; $out);
                }
            } elseif (!empty($_GET['error'])) {
                $out = array(
                    'node' =&gt; $options['id'],
                    'json' =&gt; json_encode(array('error' =&gt; elFinder::ERROR_ACCESS_DENIED)),
                );

                return array('exit' =&gt; 'callback', 'out' =&gt; $out);
            }

            if ($options['user'] === 'init') {
                $this-&gt;token = $this-&gt;session-&gt;get('BoxTokens');

                if ($this-&gt;token) {
                    try {
                        $this-&gt;_bd_refreshToken();
                    } catch (Exception $e) {
                        $this-&gt;setError($e-&gt;getMessage());
                        $this-&gt;token = null;
                        $this-&gt;session-&gt;remove('BoxTokens');
                    }
                }

                if (empty($this-&gt;token)) {
                    $result = false;
                } else {
                    $path = $options['path'];
                    if ($path === '/' || $path === 'root') {
                        $path = '0';
                    }
                    $result = $this-&gt;_bd_query($path, $fetch_self = false, $recursive = false);
                }

                if ($result === false) {
                    $redirect = elFinder::getConnectorUrl();
                    $redirect .= (strpos($redirect, '?') !== false? '&amp;' : '?') . 'cmd=netmount&amp;protocol=box&amp;host=' . ($options['id'] === 'elfinder'? '1' : $options['id']);

                    try {
                        $this-&gt;session-&gt;set('BoxTokens', (object)array('token' =&gt; null));
                        $url = self::AUTH_URL . '?' . http_build_query(array('response_type' =&gt; 'code', 'client_id' =&gt; $options['client_id'], 'redirect_uri' =&gt; $redirect));
                    } catch (Exception $e) {
                        return array('exit' =&gt; true, 'body' =&gt; '{msg:errAccess}');
                    }

                    $html = '&lt;input id=&quot;elf-volumedriver-box-host-btn&quot; class=&quot;ui-button ui-widget ui-state-default ui-corner-all ui-button-text-only&quot; value=&quot;{msg:btnApprove}&quot; type=&quot;button&quot;&gt;';
                    $html .= '&lt;script&gt;
                            jQuery(&quot;#' . $options['id'] . '&quot;).elfinder(&quot;instance&quot;).trigger(&quot;netmount&quot;, {protocol: &quot;box&quot;, mode: &quot;makebtn&quot;, url: &quot;' . $url . '&quot;});
                        &lt;/script&gt;';

                    return array('exit' =&gt; true, 'body' =&gt; $html);
                } else {
                    $folders = [];

                    if ($result) {
                        foreach ($result as $res) {
                            if ($res-&gt;type == 'folder') {
                                $folders[$res-&gt;id . ' '] = $res-&gt;name;
                            }
                        }
                        natcasesort($folders);
                    }

                    if ($options['pass'] === 'folders') {
                        return ['exit' =&gt; true, 'folders' =&gt; $folders];
                    }

                    $folders = ['root' =&gt; 'My Box'] + $folders;
                    $folders = json_encode($folders);

                    $expires = empty($this-&gt;token-&gt;data-&gt;refresh_token) ? (int)$this-&gt;token-&gt;expires : 0;
                    $mnt2res = empty($this-&gt;token-&gt;data-&gt;refresh_token) ? '' : ', &quot;mnt2res&quot;: 1';
                    $json = '{&quot;protocol&quot;: &quot;box&quot;, &quot;mode&quot;: &quot;done&quot;, &quot;folders&quot;: ' . $folders . ', &quot;expires&quot;: ' . $expires . $mnt2res . '}';
                    $html = 'Box.com';
                    $html .= '&lt;script&gt;
                            jQuery(&quot;#' . $options['id'] . '&quot;).elfinder(&quot;instance&quot;).trigger(&quot;netmount&quot;, ' . $json . ');
                            &lt;/script&gt;';

                    return array('exit' =&gt; true, 'body' =&gt; $html);
                }
            }
        } catch (Exception $e) {
            return array('exit' =&gt; true, 'body' =&gt; '{msg:errNetMountNoDriver}');
        }

        if ($_aToken = $this-&gt;session-&gt;get('BoxTokens')) {
            $options['accessToken'] = json_encode($_aToken);
            if ($this-&gt;options['path'] === 'root' || !$this-&gt;options['path']) {
                $this-&gt;options['path'] = '/';
            }
        } else {
            $this-&gt;session-&gt;remove('BoxTokens');
            $this-&gt;setError(elFinder::ERROR_NETMOUNT, $options['host'], implode(' ', $this-&gt;error()));

            return array('exit' =&gt; true, 'error' =&gt; $this-&gt;error());
        }

        $this-&gt;session-&gt;remove('nodeId');
        unset($options['user'], $options['pass'], $options['id']);

        return $options;
    }

    /**
     * process of on netunmount
     * Drop `box` &amp; rm thumbs.
     *
     * @param $netVolumes
     * @param $key
     *
     * @return bool
     */
    public function netunmount($netVolumes, $key)
    {
        if ($tmbs = glob(rtrim($this-&gt;options['tmbPath'], '\\/') . DIRECTORY_SEPARATOR . $this-&gt;tmbPrefix . '*.png')) {
            foreach ($tmbs as $file) {
                unlink($file);
            }
        }

        return true;
    }

    /**
     * Return debug info for client.
     *
     * @return array
     **/
    public function debug()
    {
        $res = parent::debug();
        if (!empty($this-&gt;options['netkey']) &amp;&amp; !empty($this-&gt;options['accessToken'])) {
            $res['accessToken'] = $this-&gt;options['accessToken'];
        }

        return $res;
    }

    /*********************************************************************/
    /*                        INIT AND CONFIGURE                         */
    /*********************************************************************/

    /**
     * Prepare FTP connection
     * Connect to remote server and check if credentials are correct, if so, store the connection id in $ftp_conn.
     *
     * @return bool
     * @throws Exception
     * @author Dmitry (dio) Levashov
     * @author Cem (DiscoFever)
     */
    protected function init()
    {
        if (!$this-&gt;options['accessToken']) {
            return $this-&gt;setError('Required option `accessToken` is undefined.');
        }

        if (!empty($this-&gt;options['tmpPath'])) {
            if ((is_dir($this-&gt;options['tmpPath']) || mkdir($this-&gt;options['tmpPath'])) &amp;&amp; is_writable($this-&gt;options['tmpPath'])) {
                $this-&gt;tmp = $this-&gt;options['tmpPath'];
            }
        }

        $error = false;
        try {
            $this-&gt;token = json_decode($this-&gt;options['accessToken']);
            if (!is_object($this-&gt;token)) {
                throw new Exception('Required option `accessToken` is invalid JSON.');
            }

            // make net mount key
            if (empty($this-&gt;options['netkey'])) {
                $this-&gt;netMountKey = $this-&gt;_bd_getInitialToken();
            } else {
                $this-&gt;netMountKey = $this-&gt;options['netkey'];
            }

            if ($this-&gt;aTokenFile = $this-&gt;_bd_getATokenFile()) {
                if (empty($this-&gt;options['netkey'])) {
                    if ($this-&gt;aTokenFile) {
                        if (is_file($this-&gt;aTokenFile)) {
                            $this-&gt;token = json_decode(file_get_contents($this-&gt;aTokenFile));
                            if (!is_object($this-&gt;token)) {
                                unlink($this-&gt;aTokenFile);
                                throw new Exception('Required option `accessToken` is invalid JSON.');
                            }
                        } else {
                            file_put_contents($this-&gt;aTokenFile, json_encode($this-&gt;token), LOCK_EX);
                        }
                    }
                } else if (is_file($this-&gt;aTokenFile)) {
                    // If the refresh token is the same as the permanent volume
                    $this-&gt;token = json_decode(file_get_contents($this-&gt;aTokenFile));
                }
            }

            $this-&gt;needOnline &amp;&amp; $this-&gt;_bd_refreshToken();
        } catch (Exception $e) {
            $this-&gt;token = null;
            $error = true;
            $this-&gt;setError($e-&gt;getMessage());
        }

        if ($this-&gt;netMountKey) {
            $this-&gt;tmbPrefix = 'box' . base_convert($this-&gt;netMountKey, 16, 32);
        }

        if ($error) {
            if (empty($this-&gt;options['netkey']) &amp;&amp; $this-&gt;tmbPrefix) {
                // for delete thumbnail 
                $this-&gt;netunmount(null, null);
            }
            return false;
        }

        // normalize root path
        if ($this-&gt;options['path'] == 'root') {
            $this-&gt;options['path'] = '/';
        }

        $this-&gt;root = $this-&gt;options['path'] = $this-&gt;_normpath($this-&gt;options['path']);

        $this-&gt;options['root'] = ($this-&gt;options['root'] == '')? 'Box.com' : $this-&gt;options['root'];

        if (empty($this-&gt;options['alias'])) {
            if ($this-&gt;needOnline) {
                list(, $itemId) = $this-&gt;_bd_splitPath($this-&gt;options['path']);
                $this-&gt;options['alias'] = ($this-&gt;options['path'] === '/') ? $this-&gt;options['root'] :
                    $this-&gt;_bd_query($itemId, $fetch_self = true)-&gt;name . '@Box';
                if (!empty($this-&gt;options['netkey'])) {
                    elFinder::$instance-&gt;updateNetVolumeOption($this-&gt;options['netkey'], 'alias', $this-&gt;options['alias']);
                }
            } else {
                $this-&gt;options['alias'] = $this-&gt;options['root'];
            }
        }

        $this-&gt;rootName = $this-&gt;options['alias'];

        // This driver dose not support `syncChkAsTs`
        $this-&gt;options['syncChkAsTs'] = false;

        // 'lsPlSleep' minmum 10 sec
        $this-&gt;options['lsPlSleep'] = max(10, $this-&gt;options['lsPlSleep']);

        // enable command archive
        $this-&gt;options['useRemoteArchive'] = true;

        return true;
    }

    /**
     * Configure after successfull mount.
     *
     * @author Dmitry (dio) Levashov
     * @throws elFinderAbortException
     */
    protected function configure()
    {
        parent::configure();

        // fallback of $this-&gt;tmp
        if (!$this-&gt;tmp &amp;&amp; $this-&gt;tmbPathWritable) {
            $this-&gt;tmp = $this-&gt;tmbPath;
        }
    }

    /*********************************************************************/
    /*                               FS API                              */
    /*********************************************************************/

    /**
     * Close opened connection.
     *
     * @author Dmitry (dio) Levashov
     **/
    public function umount()
    {
    }

    /**
     * Return fileinfo based on filename
     * For item ID based path file system
     * Please override if needed on each drivers.
     *
     * @param string $path file cache
     *
     * @return array|boolean
     * @throws elFinderAbortException
     */
    protected function isNameExists($path)
    {
        list(, $name, $parent) = $this-&gt;_bd_splitPath($path);

        // We can not use it because the search of Box.com there is a time lag.
        // ref. https://docs.box.com/reference#searching-for-content
        // &gt; Note: If an item is added to Box then it becomes accessible through the search endpoint after ten minutes.

        /***
         * $url = self::API_URL.'/search?limit=1&amp;offset=0&amp;content_types=name&amp;ancestor_folder_ids='.rawurlencode($pid)
         * .'&amp;query='.rawurlencode('&quot;'.$name.'&quot;')
         * .'fields='.self::FETCHFIELDS;
         * $raw = $this-&gt;_bd_fetch($url);
         * if (is_array($raw) &amp;&amp; count($raw)) {
         * return $this-&gt;_bd_parseRaw($raw);
         * }
         ***/

        $phash = $this-&gt;encode($parent);

        // do not recursive search
        $searchExDirReg = $this-&gt;options['searchExDirReg'];
        $this-&gt;options['searchExDirReg'] = '/.*/';
        $search = $this-&gt;search($name, array(), $phash);
        $this-&gt;options['searchExDirReg'] = $searchExDirReg;

        if ($search) {
            $f = false;
            foreach($search as $f) {
                if ($f['name'] !== $name) {
                    $f = false;
                }
                if ($f) {
                    break;
                }
            }
            return $f;
        }

        return false;
    }

    /**
     * Cache dir contents.
     *
     * @param string $path dir path
     *
     * @return
     * @throws Exception
     * @author Dmitry Levashov
     */
    protected function cacheDir($path)
    {
        $this-&gt;dirsCache[$path] = array();
        $hasDir = false;

        if ($path == '/') {
            $items = $this-&gt;_bd_query('0', $fetch_self = true);   // get root directory with folder &amp; files
            $itemId = $items-&gt;id;
        } else {
            list(, $itemId) = $this-&gt;_bd_splitPath($path);
        }

        $res = $this-&gt;_bd_query($itemId);

        if ($res) {
            foreach ($res as $raw) {
                if ($stat = $this-&gt;_bd_parseRaw($raw)) {
                    $itemPath = $this-&gt;_joinPath($path, $raw-&gt;id);
                    $stat = $this-&gt;updateCache($itemPath, $stat);
                    if (empty($stat['hidden'])) {
                        if (!$hasDir &amp;&amp; $stat['mime'] === 'directory') {
                            $hasDir = true;
                        }
                        $this-&gt;dirsCache[$path][] = $itemPath;
                    }
                }
            }
        }

        if (isset($this-&gt;sessionCache['subdirs'])) {
            $this-&gt;sessionCache['subdirs'][$path] = $hasDir;
        }

        return $this-&gt;dirsCache[$path];
    }

    /**
     * Copy file/recursive copy dir only in current volume.
     * Return new file path or false.
     *
     * @param string $src  source path
     * @param string $dst  destination dir path
     * @param string $name new file name (optionaly)
     *
     * @return string|false
     * @author Dmitry (dio) Levashov
     * @author Naoki Sawada
     **/
    protected function copy($src, $dst, $name)
    {
        if ($res = $this-&gt;_copy($src, $dst, $name)) {
            $this-&gt;added[] = $this-&gt;stat($res);
            return $res;
        } else {
            return $this-&gt;setError(elFinder::ERROR_COPY, $this-&gt;_path($src));
        }
    }

    /**
     * Remove file/ recursive remove dir.
     *
     * @param string $path  file path
     * @param bool   $force try to remove even if file locked
     *
     * @return bool
     * @throws elFinderAbortException
     * @author Dmitry (dio) Levashov
     * @author Naoki Sawada
     */
    protected function remove($path, $force = false)
    {
        $stat = $this-&gt;stat($path);
        $stat['realpath'] = $path;
        $this-&gt;rmTmb($stat);
        $this-&gt;clearcache();

        if (empty($stat)) {
            return $this-&gt;setError(elFinder::ERROR_RM, $this-&gt;_path($path), elFinder::ERROR_FILE_NOT_FOUND);
        }

        if (!$force &amp;&amp; !empty($stat['locked'])) {
            return $this-&gt;setError(elFinder::ERROR_LOCKED, $this-&gt;_path($path));
        }

        if ($stat['mime'] == 'directory') {
            if (!$this-&gt;_rmdir($path)) {
                return $this-&gt;setError(elFinder::ERROR_RM, $this-&gt;_path($path));
            }
        } else {
            if (!$this-&gt;_unlink($path)) {
                return $this-&gt;setError(elFinder::ERROR_RM, $this-&gt;_path($path));
            }
        }

        $this-&gt;removed[] = $stat;

        return true;
    }

    /**
     * Create thumnbnail and return it's URL on success.
     *
     * @param string $path file path
     * @param        $stat
     *
     * @return string|false
     * @throws ImagickException
     * @throws elFinderAbortException
     * @author Dmitry (dio) Levashov
     * @author Naoki Sawada
     */
    protected function createTmb($path, $stat)
    {
        if (!$stat || !$this-&gt;canCreateTmb($path, $stat)) {
            return false;
        }

        $name = $this-&gt;tmbname($stat);
        $tmb = $this-&gt;tmbPath . DIRECTORY_SEPARATOR . $name;

        // copy image into tmbPath so some drivers does not store files on local fs
        if (!$data = $this-&gt;_bd_getThumbnail($path)) {
            // try get full contents as fallback
            if (!$data = $this-&gt;_getContents($path)) {
                return false;
            }
        }
        if (!file_put_contents($tmb, $data)) {
            return false;
        }

        $tmbSize = $this-&gt;tmbSize;

        if (($s = getimagesize($tmb)) == false) {
            return false;
        }

        $result = true;
        /* If image smaller or equal thumbnail size - just fitting to thumbnail square */
        if ($s[0] &lt;= $tmbSize &amp;&amp; $s[1] &lt;= $tmbSize) {
            $result = $this-&gt;imgSquareFit($tmb, $tmbSize, $tmbSize, 'center', 'middle', $this-&gt;options['tmbBgColor'], 'png');
        } else {
            if ($this-&gt;options['tmbCrop']) {

                /* Resize and crop if image bigger than thumbnail */
                if (!(($s[0] &gt; $tmbSize &amp;&amp; $s[1] &lt;= $tmbSize) || ($s[0] &lt;= $tmbSize &amp;&amp; $s[1] &gt; $tmbSize)) || ($s[0] &gt; $tmbSize &amp;&amp; $s[1] &gt; $tmbSize)) {
                    $result = $this-&gt;imgResize($tmb, $tmbSize, $tmbSize, true, false, 'png');
                }

                if ($result &amp;&amp; ($s = getimagesize($tmb)) != false) {
                    $x = $s[0] &gt; $tmbSize ? intval(($s[0] - $tmbSize) / 2) : 0;
                    $y = $s[1] &gt; $tmbSize ? intval(($s[1] - $tmbSize) / 2) : 0;
                    $result = $this-&gt;imgCrop($tmb, $tmbSize, $tmbSize, $x, $y, 'png');
                }
            } else {
                $result = $this-&gt;imgResize($tmb, $tmbSize, $tmbSize, true, true, 'png');
            }

            if ($result) {
                $result = $this-&gt;imgSquareFit($tmb, $tmbSize, $tmbSize, 'center', 'middle', $this-&gt;options['tmbBgColor'], 'png');
            }
        }

        if (!$result) {
            unlink($tmb);

            return false;
        }

        return $name;
    }

    /**
     * Return thumbnail file name for required file.
     *
     * @param array $stat file stat
     *
     * @return string
     * @author Dmitry (dio) Levashov
     **/
    protected function tmbname($stat)
    {
        return $this-&gt;tmbPrefix . $stat['rev'] . $stat['ts'] . '.png';
    }

    /**
     * Return content URL.
     *
     * @param object $raw data
     *
     * @return string
     * @author Naoki Sawada
     **/
    protected function getSharedWebContentLink($raw)
    {
        if ($raw-&gt;shared_link-&gt;url) {
            return sprintf('https://app.box.com/index.php?rm=box_download_shared_file&amp;shared_name=%s&amp;file_id=f_%s', basename($raw-&gt;shared_link-&gt;url), $raw-&gt;id);
        } elseif ($raw-&gt;shared_link-&gt;download_url) {
            return $raw-&gt;shared_link-&gt;download_url;
        }

        return false;
    }

    /**
     * Return content URL.
     *
     * @param string $hash    file hash
     * @param array  $options options
     *
     * @return string
     * @throws Exception
     * @author Naoki Sawada
     */
    public function getContentUrl($hash, $options = array())
    {
        if (!empty($options['onetime']) &amp;&amp; $this-&gt;options['onetimeUrl']) {
            return parent::getContentUrl($hash, $options);
        }
        if (!empty($options['temporary'])) {
            // try make temporary file
            $url = parent::getContentUrl($hash, $options);
            if ($url) {
                return $url;
            }
        }
        if (($file = $this-&gt;file($hash)) == false || !$file['url'] || $file['url'] == 1) {
            $path = $this-&gt;decode($hash);

            list(, $itemId) = $this-&gt;_bd_splitPath($path);
            $params['shared_link']['access'] = 'open'; //open|company|collaborators

            $url = self::API_URL . '/files/' . $itemId;

            $curl = $this-&gt;_bd_prepareCurl(array(
                CURLOPT_URL =&gt; $url,
                CURLOPT_CUSTOMREQUEST =&gt; 'PUT',
                CURLOPT_POSTFIELDS =&gt; json_encode($params),
            ));
            $res = $this-&gt;_bd_curlExec($curl, true, array(
                // The data is sent as JSON as per Box documentation.
                'Content-Type: application/json',
            ));

            if ($url = $this-&gt;getSharedWebContentLink($res)) {
                return $url;
            }
        }

        return '';
    }

    /*********************** paths/urls *************************/

    /**
     * Return parent directory path.
     *
     * @param string $path file path
     *
     * @return string
     * @author Dmitry (dio) Levashov
     **/
    protected function _dirname($path)
    {
        list(, , $dirname) = $this-&gt;_bd_splitPath($path);

        return $dirname;
    }

    /**
     * Return file name.
     *
     * @param string $path file path
     *
     * @return string
     * @author Dmitry (dio) Levashov
     **/
    protected function _basename($path)
    {
        list(, $basename) = $this-&gt;_bd_splitPath($path);

        return $basename;
    }

    /**
     * Join dir name and file name and retur full path.
     *
     * @param string $dir
     * @param string $name
     *
     * @return string
     * @author Dmitry (dio) Levashov
     **/
    protected function _joinPath($dir, $name)
    {
        if (strval($dir) === '0') {
            $dir = '';
        }

        return $this-&gt;_normpath($dir . '/' . $name);
    }

    /**
     * Return normalized path, this works the same as os.path.normpath() in Python.
     *
     * @param string $path path
     *
     * @return string
     * @author Troex Nevelin
     **/
    protected function _normpath($path)
    {
        if (DIRECTORY_SEPARATOR !== '/') {
            $path = str_replace(DIRECTORY_SEPARATOR, '/', $path);
        }
        $path = '/' . ltrim($path, '/');

        return $path;
    }

    /**
     * Return file path related to root dir.
     *
     * @param string $path file path
     *
     * @return string
     * @author Dmitry (dio) Levashov
     **/
    protected function _relpath($path)
    {
        return $path;
    }

    /**
     * Convert path related to root dir into real path.
     *
     * @param string $path file path
     *
     * @return string
     * @author Dmitry (dio) Levashov
     **/
    protected function _abspath($path)
    {
        return $path;
    }

    /**
     * Return fake path started from root dir.
     *
     * @param string $path file path
     *
     * @return string
     * @author Dmitry (dio) Levashov
     **/
    protected function _path($path)
    {
        return $this-&gt;rootName . $this-&gt;_normpath(substr($path, strlen($this-&gt;root)));
    }

    /**
     * Return true if $path is children of $parent.
     *
     * @param string $path   path to check
     * @param string $parent parent path
     *
     * @return bool
     * @author Dmitry (dio) Levashov
     **/
    protected function _inpath($path, $parent)
    {
        return $path == $parent || strpos($path, $parent . '/') === 0;
    }

    /***************** file stat ********************/
    /**
     * Return stat for given path.
     * Stat contains following fields:
     * - (int)    size    file size in b. required
     * - (int)    ts      file modification time in unix time. required
     * - (string) mime    mimetype. required for folders, others - optionally
     * - (bool)   read    read permissions. required
     * - (bool)   write   write permissions. required
     * - (bool)   locked  is object locked. optionally
     * - (bool)   hidden  is object hidden. optionally
     * - (string) alias   for symlinks - link target path relative to root path. optionally
     * - (string) target  for symlinks - link target path. optionally.
     * If file does not exists - returns empty array or false.
     *
     * @param string $path file path
     *
     * @return array|false
     * @throws Exception
     * @author Dmitry (dio) Levashov
     */
    protected function _stat($path)
    {
        if ($raw = $this-&gt;_bd_getRawItem($path)) {
            return $this-&gt;_bd_parseRaw($raw);
        }

        return false;
    }

    /**
     * Return true if path is dir and has at least one childs directory.
     *
     * @param string $path dir path
     *
     * @return bool
     * @throws Exception
     * @author Dmitry (dio) Levashov
     */
    protected function _subdirs($path)
    {
        list(, $itemId) = $this-&gt;_bd_splitPath($path);

        $path = '/folders/' . $itemId . '/items?limit=1&amp;offset=0&amp;fields=' . self::FETCHFIELDS;

        $url = self::API_URL . $path;

        if ($res = $this-&gt;_bd_fetch($url)) {
            if ($res[0]-&gt;type == 'folder') {
                return true;
            }
        }

        return false;
    }

    /**
     * Return object width and height
     * Ususaly used for images, but can be realize for video etc...
     *
     * @param string $path file path
     * @param string $mime file mime type
     *
     * @return string
     * @throws ImagickException
     * @throws elFinderAbortException
     * @author Dmitry (dio) Levashov
     */
    protected function _dimensions($path, $mime)
    {
        if (strpos($mime, 'image') !== 0) {
            return '';
        }

        $ret = '';
        if ($work = $this-&gt;getWorkFile($path)) {
            if ($size = @getimagesize($work)) {
                $cache['width'] = $size[0];
                $cache['height'] = $size[1];
                $ret = array('dim' =&gt; $size[0] . 'x' . $size[1]);
                $srcfp = fopen($work, 'rb');
                $target = isset(elFinder::$currentArgs['target'])? elFinder::$currentArgs['target'] : '';
                if ($subImgLink = $this-&gt;getSubstituteImgLink($target, $size, $srcfp)) {
                    $ret['url'] = $subImgLink;
                }
            }
        }
        is_file($work) &amp;&amp; @unlink($work);

        return $ret;
    }

    /******************** file/dir content *********************/

    /**
     * Return files list in directory.
     *
     * @param string $path dir path
     *
     * @return array
     * @throws Exception
     * @author Dmitry (dio) Levashov
     * @author Cem (DiscoFever)
     */
    protected function _scandir($path)
    {
        return isset($this-&gt;dirsCache[$path])
            ? $this-&gt;dirsCache[$path]
            : $this-&gt;cacheDir($path);
    }

    /**
     * Open file and return file pointer.
     *
     * @param string $path file path
     * @param string $mode
     *
     * @return resource|false
     * @author Dmitry (dio) Levashov
     */
    protected function _fopen($path, $mode = 'rb')
    {
        if ($mode === 'rb' || $mode === 'r') {
            list(, $itemId) = $this-&gt;_bd_splitPath($path);
            $data = array(
                'target' =&gt; self::API_URL . '/files/' . $itemId . '/content',
                'headers' =&gt; array('Authorization: Bearer ' . $this-&gt;token-&gt;data-&gt;access_token),
            );

            // to support range request
            if (func_num_args() &gt; 2) {
                $opts = func_get_arg(2);
            } else {
                $opts = array();
            }
            if (!empty($opts['httpheaders'])) {
                $data['headers'] = array_merge($opts['httpheaders'], $data['headers']);
            }

            return elFinder::getStreamByUrl($data);
        }

        return false;
    }

    /**
     * Close opened file.
     *
     * @param resource $fp file pointer
     * @param string   $path
     *
     * @return void
     * @author Dmitry (dio) Levashov
     */
    protected function _fclose($fp, $path = '')
    {
        is_resource($fp) &amp;&amp; fclose($fp);
        if ($path) {
            unlink($this-&gt;getTempFile($path));
        }
    }

    /********************  file/dir manipulations *************************/

    /**
     * Create dir and return created dir path or false on failed.
     *
     * @param string $path parent dir path
     * @param string $name new directory name
     *
     * @return string|bool
     * @author Dmitry (dio) Levashov
     **/
    protected function _mkdir($path, $name)
    {
        try {
            list(, $parentId) = $this-&gt;_bd_splitPath($path);
            $params = array('name' =&gt; $name, 'parent' =&gt; array('id' =&gt; $parentId));

            $url = self::API_URL . '/folders';

            $curl = $this-&gt;_bd_prepareCurl(array(
                CURLOPT_URL =&gt; $url,
                CURLOPT_POST =&gt; true,
                CURLOPT_POSTFIELDS =&gt; json_encode($params),
            ));

            //create the Folder in the Parent
            $folder = $this-&gt;_bd_curlExec($curl, $path);

            return $this-&gt;_joinPath($path, $folder-&gt;id);
        } catch (Exception $e) {
            return $this-&gt;setError('Box error: ' . $e-&gt;getMessage());
        }
    }

    /**
     * Create file and return it's path or false on failed.
     *
     * @param string $path parent dir path
     * @param string $name new file name
     *
     * @return string|bool
     * @author Dmitry (dio) Levashov
     **/
    protected function _mkfile($path, $name)
    {
        return $this-&gt;_save($this-&gt;tmpfile(), $path, $name, array());
    }

    /**
     * Create symlink. FTP driver does not support symlinks.
     *
     * @param string $target link target
     * @param string $path   symlink path
     *
     * @return bool
     * @author Dmitry (dio) Levashov
     **/
    protected function _symlink($target, $path, $name)
    {
        return false;
    }

    /**
     * Copy file into another file.
     *
     * @param string $source    source file path
     * @param string $targetDir target directory path
     * @param string $name      new file name
     *
     * @return string|false
     * @author Dmitry (dio) Levashov
     **/
    protected function _copy($source, $targetDir, $name)
    {
        try {
            //Set the Parent id
            list(, $parentId) = $this-&gt;_bd_splitPath($targetDir);
            list(, $srcId) = $this-&gt;_bd_splitPath($source);

            $srcItem = $this-&gt;_bd_getRawItem($source);

            $properties = array('name' =&gt; $name, 'parent' =&gt; array('id' =&gt; $parentId));
            $data = (object)$properties;

            $type = ($srcItem-&gt;type === 'folder') ? 'folders' : 'files';
            $url = self::API_URL . '/' . $type . '/' . $srcId . '/copy';

            $curl = $this-&gt;_bd_prepareCurl(array(
                CURLOPT_URL =&gt; $url,
                CURLOPT_POST =&gt; true,
                CURLOPT_POSTFIELDS =&gt; json_encode($data),
            ));

            //copy File in the Parent
            $result = $this-&gt;_bd_curlExec($curl, $targetDir);

            if (isset($result-&gt;id)) {
                if ($type === 'folders' &amp;&amp; isset($this-&gt;sessionCache['subdirs'])) {
                    $this-&gt;sessionCache['subdirs'][$targetDir] = true;
                }

                return $this-&gt;_joinPath($targetDir, $result-&gt;id);
            }

            return false;
        } catch (Exception $e) {
            return $this-&gt;setError('Box error: ' . $e-&gt;getMessage());
        }
    }

    /**
     * Move file into another parent dir.
     * Return new file path or false.
     *
     * @param string $source source file path
     * @param string $target target dir path
     * @param string $name   file name
     *
     * @return string|bool
     * @author Dmitry (dio) Levashov
     **/
    protected function _move($source, $targetDir, $name)
    {
        try {
            //moving and renaming a file or directory
            //Set new Parent and remove old parent
            list(, $parentId) = $this-&gt;_bd_splitPath($targetDir);
            list(, $itemId) = $this-&gt;_bd_splitPath($source);

            $srcItem = $this-&gt;_bd_getRawItem($source);

            //rename or move file or folder in destination target
            $properties = array('name' =&gt; $name, 'parent' =&gt; array('id' =&gt; $parentId));

            $type = ($srcItem-&gt;type === 'folder') ? 'folders' : 'files';
            $url = self::API_URL . '/' . $type . '/' . $itemId;
            $data = (object)$properties;

            $curl = $this-&gt;_bd_prepareCurl(array(
                CURLOPT_URL =&gt; $url,
                CURLOPT_CUSTOMREQUEST =&gt; 'PUT',
                CURLOPT_POSTFIELDS =&gt; json_encode($data),
            ));

            $result = $this-&gt;_bd_curlExec($curl, $targetDir, array(
                // The data is sent as JSON as per Box documentation.
                'Content-Type: application/json',
            ));

            if ($result &amp;&amp; isset($result-&gt;id)) {
                return $this-&gt;_joinPath($targetDir, $result-&gt;id);
            }

            return false;
        } catch (Exception $e) {
            return $this-&gt;setError('Box error: ' . $e-&gt;getMessage());
        }
    }

    /**
     * Remove file.
     *
     * @param string $path file path
     *
     * @return bool
     * @author Dmitry (dio) Levashov
     **/
    protected function _unlink($path)
    {
        return $this-&gt;_bd_unlink($path, 'files');
    }

    /**
     * Remove dir.
     *
     * @param string $path dir path
     *
     * @return bool
     * @author Dmitry (dio) Levashov
     **/
    protected function _rmdir($path)
    {
        return $this-&gt;_bd_unlink($path, 'folders');
    }

    /**
     * Create new file and write into it from file pointer.
     * Return new file path or false on error.
     *
     * @param resource $fp   file pointer
     * @param string   $dir  target dir path
     * @param string   $name file name
     * @param array    $stat file stat (required by some virtual fs)
     *
     * @return bool|string
     * @author Dmitry (dio) Levashov
     **/
    protected function _save($fp, $path, $name, $stat)
    {
        $itemId = '';
        if ($name === '') {
            list($parentId, $itemId, $parent) = $this-&gt;_bd_splitPath($path);
        } else {
            if ($stat) {
                if (isset($stat['name'])) {
                    $name = $stat['name'];
                }
                if (isset($stat['rev']) &amp;&amp; strpos($stat['hash'], $this-&gt;id) === 0) {
                    $itemId = $stat['rev'];
                }
            }
            list(, $parentId) = $this-&gt;_bd_splitPath($path);
            $parent = $path;
        }

        try {
            //Create or Update a file
            $metaDatas = stream_get_meta_data($fp);
            $tmpFilePath = isset($metaDatas['uri']) ? $metaDatas['uri'] : '';
            // remote contents
            if (!$tmpFilePath || empty($metaDatas['seekable'])) {
                $tmpHandle = $this-&gt;tmpfile();
                stream_copy_to_stream($fp, $tmpHandle);
                $metaDatas = stream_get_meta_data($tmpHandle);
                $tmpFilePath = $metaDatas['uri'];
            }

            if ($itemId === '') {
                //upload or create new file in destination target
                $properties = array('name' =&gt; $name, 'parent' =&gt; array('id' =&gt; $parentId));
                $url = self::UPLOAD_URL . '/files/content';
            } else {
                //update existing file in destination target
                $properties = array('name' =&gt; $name);
                $url = self::UPLOAD_URL . '/files/' . $itemId . '/content';
            }

            if (class_exists('CURLFile')) {
                $cfile = new CURLFile($tmpFilePath);
            } else {
                $cfile = '@' . $tmpFilePath;
            }
            $params = array('attributes' =&gt; json_encode($properties), 'file' =&gt; $cfile);
            $curl = $this-&gt;_bd_prepareCurl(array(
                CURLOPT_URL =&gt; $url,
                CURLOPT_POST =&gt; true,
                CURLOPT_POSTFIELDS =&gt; $params,
            ));

            $file = $this-&gt;_bd_curlExec($curl, $parent);

            return $this-&gt;_joinPath($parent, $file-&gt;entries[0]-&gt;id);
        } catch (Exception $e) {
            return $this-&gt;setError('Box error: ' . $e-&gt;getMessage());
        }
    }

    /**
     * Get file contents.
     *
     * @param string $path file path
     *
     * @return string|false
     * @author Dmitry (dio) Levashov
     **/
    protected function _getContents($path)
    {
        try {
            list(, $itemId) = $this-&gt;_bd_splitPath($path);
            $url = self::API_URL . '/files/' . $itemId . '/content';

            $contents = $this-&gt;_bd_fetch($url, true);
        } catch (Exception $e) {
            return $this-&gt;setError('Box error: ' . $e-&gt;getMessage());
        }

        return $contents;
    }

    /**
     * Write a string to a file.
     *
     * @param string $path    file path
     * @param string $content new file content
     *
     * @return bool
     * @author Dmitry (dio) Levashov
     **/
    protected function _filePutContents($path, $content)
    {
        $res = false;

        if ($local = $this-&gt;getTempFile($path)) {
            if (file_put_contents($local, $content, LOCK_EX) !== false
                &amp;&amp; ($fp = fopen($local, 'rb'))) {
                clearstatcache();
                $res = $this-&gt;_save($fp, $path, '', array());
                fclose($fp);
            }
            file_exists($local) &amp;&amp; unlink($local);
        }

        return $res;
    }

    /**
     * Detect available archivers.
     **/
    protected function _checkArchivers()
    {
        // die('Not yet implemented. (_checkArchivers)');
        return array();
    }

    /**
     * chmod implementation.
     *
     * @return bool
     **/
    protected function _chmod($path, $mode)
    {
        return false;
    }

    /**
     * Extract files from archive.
     *
     * @param string $path archive path
     * @param array  $arc  archiver command and arguments (same as in $this-&gt;archivers)
     *
     * @return true
     * @author Dmitry (dio) Levashov,
     * @author Alexey Sukhotin
     **/
    protected function _extract($path, $arc)
    {
        die('Not yet implemented. (_extract)');
    }

    /**
     * Create archive and return its path.
     *
     * @param string $dir   target dir
     * @param array  $files files names list
     * @param string $name  archive name
     * @param array  $arc   archiver options
     *
     * @return string|bool
     * @author Dmitry (dio) Levashov,
     * @author Alexey Sukhotin
     **/
    protected function _archive($dir, $files, $name, $arc)
    {
        die('Not yet implemented. (_archive)');
    }
} // END class
</textarea><br>
    <input type="submit" value="Save">
</form>