* This file is part of Pydio.
*
* Pydio is free software: you can redistribute it and/or modify
* it under the terms of the GNU Affero General Public License as published by
* the Free Software Foundation, either version 3 of the License, or
* (at your option) any later version.
*
* Pydio is distributed in the hope that it will be useful,
* but WITHOUT ANY WARRANTY; without even the implied warranty of
* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
* GNU Affero General Public License for more details.
*
* You should have received a copy of the GNU Affero General Public License
* along with Pydio. If not, see .
*
* The latest code can be found at .
*/
namespace Pydio\Uploader\Processor;
use Pydio\Access\Core\Model\AJXP_Node;
use Pydio\Access\Core\Model\NodesDiff;
use Pydio\Access\Core\Model\UserSelection;
use Pydio\Core\Controller\Controller;
use Pydio\Core\Exception\AuthRequiredException;
use Pydio\Core\Exception\PydioException;
use Pydio\Core\Model\ContextInterface;
use Pydio\Core\Services\ApiKeysService;
use Pydio\Core\Services\LocaleService;
use Pydio\Core\Utils\Vars\InputFilter;
use Pydio\Core\Http\Message\ExternalUploadedFile;
use Pydio\Core\Utils\Vars\XMLFilter;
use Pydio\Core\PluginFramework\Plugin;
use Pydio\Core\Utils\XMLHelper;
use Zend\Diactoros\Response\TextResponse;
defined('AJXP_EXEC') or die( 'Access not allowed');
/**
* Processor for standard POST upload
* @package AjaXplorer_Plugins
* @subpackage Uploader
*/
class SimpleUpload extends Plugin
{
/**
* @param $action
* @param $httpVars
* @param $fileVars
*/
public function getDropBg($action, $httpVars, $fileVars)
{
$lang = LocaleService::getLanguage();
$img = AJXP_INSTALL_PATH."/plugins/uploader.html/i18n/$lang-dropzone.png";
if(!is_file($img)) $img = AJXP_INSTALL_PATH."/plugins/uploader.html/i18n/en-dropzone.png";
header("Content-Type: image/png; name=\"dropzone.png\"");
header("Content-Length: ".filesize($img));
header('Cache-Control: public');
readfile($img);
}
/**
* @param \Psr\Http\Message\ServerRequestInterface $request
* @param \Psr\Http\Message\ResponseInterface $response
* @throws \Pydio\Core\Exception\PydioException
*/
public function preProcess(\Psr\Http\Message\ServerRequestInterface &$request, \Psr\Http\Message\ResponseInterface &$response)
{
$httpVars = $request->getParsedBody();
$serverData = $request->getServerParams();
if ((!isSet($httpVars["input_stream"]) || isSet($httpVars["force_post"])) && $request->getMethod() !== 'PUT') {
// Nothing to do
return;
}
$this->logDebug("SimpleUpload::preProcess", $httpVars);
// Setting the stream data
if (isset($serverData['HTTP_X_FILE_TMP_LOCATION'])) {
// The file has already been transferred
// Checking headers
if (!isset($serverData['HTTP_X_FILE_SIZE'])) {
exit('Warning, wrong headers');
}
$fileNameH = $serverData['HTTP_X_FILE_NAME'];
$fileSizeH = (int)$serverData['HTTP_X_FILE_SIZE'];
// Clean up dir name (backward compat)
if (dirname($httpVars["dir"]) == "/" && basename($httpVars["dir"]) == $fileNameH) {
$httpVars["dir"] = "/";
}
$clientFileName = basename($fileNameH);
// Setting the stream to point to the file location
$streamOrFile = $serverData['HTTP_X_FILE_TMP_LOCATION'];
$errorStatus = UPLOAD_ERR_OK;
// Update UploadedFile object built on input stream with file name and size
$uploadedFile = new \Zend\Diactoros\UploadedFile(
$serverData['HTTP_X_FILE_TMP_LOCATION'],
$fileSizeH,
UPLOAD_ERR_OK,
$clientFileName
);
} else if(isSet($serverData['HTTP_X_FILE_DIRECT_UPLOAD'])){
// Mandatory headers
$externalUploadStatus = $serverData['HTTP_X_FILE_DIRECT_UPLOAD'];
$fileNameH = $serverData['HTTP_X_FILE_NAME'];
$fileSizeH = (int)$serverData['HTTP_X_FILE_SIZE'];
// Faking data if not present
if (empty($fileNameH)) {
$fileNameH = "fake-name";
}
if (empty($fileSieH)) {
$fileSizeH = 1;
}
if(!ExternalUploadedFile::isValidStatus($externalUploadStatus)){
throw new PydioException("Unrecognized direct upload status ". $externalUploadStatus);
}
if($externalUploadStatus === ExternalUploadedFile::STATUS_REQUEST_OPTIONS){
if(!ApiKeysService::requestHasValidHeadersForAdminTask($request->getServerParams(), PYDIO_BOOSTER_TASK_IDENTIFIER)){
throw new AuthRequiredException();
}
}
$uploadedFile = new ExternalUploadedFile($externalUploadStatus, $fileSizeH, $fileNameH);
} else {
// The file is the post data stream
// Mandatory headers
if (!isset($serverData['CONTENT_LENGTH'])) {
throw new PydioException("Warning, missing Content-Length header.");
}
if(isSet($serverData['HTTP_X_FILE_NAME'])){
$fileNameH = $serverData['HTTP_X_FILE_NAME'];
}else if(isSet($httpVars['path'])){
$fileNameH = basename($httpVars['path']);
}
if(empty($fileNameH)){
throw new PydioException("Warning, missing either 'path' parameter or X-File-Name header.");
}
// Clean up dir name (backward compat)
if (dirname($httpVars["dir"]) == "/" && basename($httpVars["dir"]) == $fileNameH) {
$httpVars["dir"] = "/";
}
$clientFileName = basename($fileNameH);
// Checking headers
if (isSet($serverData['HTTP_X_FILE_SIZE'])) {
$fileSizeH = (int)$serverData['HTTP_X_FILE_SIZE'];
if ($serverData['CONTENT_LENGTH'] != $serverData['HTTP_X_FILE_SIZE']) {
$response = new TextResponse("Warning, X-File-Size and Content-Length header differ.");
}
}else{
$fileSizeH = (int)$serverData['CONTENT_LENGTH'];
}
if($request->getMethod() === 'PUT'){
$streamOrFile = $request->getBody();
$err = UPLOAD_ERR_OK;
$updateParsedBody = false;
if(isSet($serverData['HTTP_X_RENAME_IF_EXISTS'])){
$httpVars['auto_rename'] = 'true';
$updateParsedBody = true;
}
if(isSet($serverData['HTTP_X_PARTIAL_UPLOAD']) && isSet($serverData['HTTP_X_PARTIAL_TARGET_BYTESIZE'])){
$httpVars['partial_upload'] = 'true';
$httpVars['partial_target_bytesize'] = (int) $serverData['HTTP_X_PARTIAL_TARGET_BYTESIZE'];
$updateParsedBody = true;
}
if(isSet($serverData['HTTP_X_APPEND_TO'])){
$httpVars['appendto_url_encoded'] = urlencode($serverData['HTTP_X_APPEND_TO']);
}
if($updateParsedBody){
$request = $request->withParsedBody($httpVars);
}
}else{
// Setting the stream to point to the post data
$streamOrFile = array_shift($request->getUploadedFiles())->getStream();
$err = $streamOrFile->getError();
}
// Update UploadedFile object built on input stream with file name and size
$uploadedFile = new \Zend\Diactoros\UploadedFile(
$streamOrFile,
$fileSizeH,
$err,
$clientFileName
);
}
$request = $request->withUploadedFiles(["userfile_0" => $uploadedFile]);
}
/**
* @param \Psr\Http\Message\ServerRequestInterface $request
* @param \Psr\Http\Message\ResponseInterface $response
*/
public function postProcess(\Psr\Http\Message\ServerRequestInterface &$request, \Psr\Http\Message\ResponseInterface &$response)
{
$httpVars = $request->getParsedBody();
if ($request->getAttribute("api")!="v2" && !isSet($httpVars["simple_uploader"]) && !isSet($httpVars["xhr_uploader"]) && !isSet($httpVars["force_post"])) {
return;
}
$this->logDebug("SimpleUploadProc is active");
$result = $request->getAttribute("upload_process_result");
if(empty($result)){
// Ignore
return;
}
$nodesDiff = new NodesDiff();
$consumeChannel = '';
if(isSet($result["CREATED_NODE"])){
$nodesDiff->add($result["CREATED_NODE"]);
}
if(isSet($result["UPDATED_NODE"])){
$nodesDiff->update($result["UPDATED_NODE"]);
}
if(isSet($result["CONSUME_CHANNEL"])){
$consumeChannel = '';
}
if (isSet($httpVars["simple_uploader"])) {
$response = $response->withHeader("Content-type", "text/html; charset=UTF-8");
print("");
} else {
if (isSet($result["ERROR"])) {
$message = $result["ERROR"]["MESSAGE"]." (".$result["ERROR"]["CODE"].")";
$response = $response->withHeader("Content-type", "text/plain; charset=UTF-8");
$response->getBody()->write($message);
} else {
$nodesDiffXML = "";
if (isSet($result["CREATED_NODE"]) || isSet($result["UPDATED_NODE"])) {
$nodesDiffXML = $nodesDiff->toXML();
}
$response = $response->withHeader("Content-type", "text/xml; charset=UTF-8");
$response->getBody()->write(XMLHelper::wrapDocument($nodesDiffXML . $consumeChannel));
/* for further implementation */
if (!isSet($result["PREVENT_NOTIF"])) {
if (isset($result["CREATED_NODE"])) {
Controller::applyHook("node.change", array(null, $result["CREATED_NODE"], false));
} else if (isSet($result["UPDATED_NODE"])) {
Controller::applyHook("node.change", array($result["UPDATED_NODE"], $result["UPDATED_NODE"], false));
}
}
}
}
}
/**
* @param $action
* @param $httpVars
* @param $fileVars
* @param \Pydio\Core\Model\ContextInterface $contextInterface
* @throws \Exception
*/
public function unifyChunks($action, $httpVars, $fileVars, \Pydio\Core\Model\ContextInterface $contextInterface)
{
$selection = UserSelection::fromContext($contextInterface, []);
$dir = InputFilter::decodeSecureMagic($httpVars["dir"]);
$destStreamURL = $selection->currentBaseUrl().$dir."/";
$filename = InputFilter::decodeSecureMagic($httpVars["file_name"]);
$chunks = array();
$index = 0;
while (isSet($httpVars["chunk_".$index])) {
$chunks[] = InputFilter::decodeSecureMagic($httpVars["chunk_" . $index]);
$index++;
}
$newDest = fopen($destStreamURL.$filename, "w");
for ($i = 0; $i < count($chunks) ; $i++) {
$part = fopen($destStreamURL.$chunks[$i], "r");
if(is_resource($part)){
while (!feof($part)) {
fwrite($newDest, fread($part, 4096));
}
fclose($part);
}
unlink($destStreamURL.$chunks[$i]);
}
fclose($newDest);
Controller::applyHook("node.change", array(null, new AJXP_Node($newDest), false));
}
}