BxDolStorage.php 51 KB

12345678910111213141516171819202122232425262728293031323334353637383940414243444546474849505152535455565758596061626364656667686970717273747576777879808182838485868788899091929394959697989910010110210310410510610710810911011111211311411511611711811912012112212312412512612712812913013113213313413513613713813914014114214314414514614714814915015115215315415515615715815916016116216316416516616716816917017117217317417517617717817918018118218318418518618718818919019119219319419519619719819920020120220320420520620720820921021121221321421521621721821922022122222322422522622722822923023123223323423523623723823924024124224324424524624724824925025125225325425525625725825926026126226326426526626726826927027127227327427527627727827928028128228328428528628728828929029129229329429529629729829930030130230330430530630730830931031131231331431531631731831932032132232332432532632732832933033133233333433533633733833934034134234334434534634734834935035135235335435535635735835936036136236336436536636736836937037137237337437537637737837938038138238338438538638738838939039139239339439539639739839940040140240340440540640740840941041141241341441541641741841942042142242342442542642742842943043143243343443543643743843944044144244344444544644744844945045145245345445545645745845946046146246346446546646746846947047147247347447547647747847948048148248348448548648748848949049149249349449549649749849950050150250350450550650750850951051151251351451551651751851952052152252352452552652752852953053153253353453553653753853954054154254354454554654754854955055155255355455555655755855956056156256356456556656756856957057157257357457557657757857958058158258358458558658758858959059159259359459559659759859960060160260360460560660760860961061161261361461561661761861962062162262362462562662762862963063163263363463563663763863964064164264364464564664764864965065165265365465565665765865966066166266366466566666766866967067167267367467567667767867968068168268368468568668768868969069169269369469569669769869970070170270370470570670770870971071171271371471571671771871972072172272372472572672772872973073173273373473573673773873974074174274374474574674774874975075175275375475575675775875976076176276376476576676776876977077177277377477577677777877978078178278378478578678778878979079179279379479579679779879980080180280380480580680780880981081181281381481581681781881982082182282382482582682782882983083183283383483583683783883984084184284384484584684784884985085185285385485585685785885986086186286386486586686786886987087187287387487587687787887988088188288388488588688788888989089189289389489589689789889990090190290390490590690790890991091191291391491591691791891992092192292392492592692792892993093193293393493593693793893994094194294394494594694794894995095195295395495595695795895996096196296396496596696796896997097197297397497597697797897998098198298398498598698798898999099199299399499599699799899910001001100210031004100510061007100810091010101110121013101410151016101710181019102010211022102310241025102610271028102910301031103210331034103510361037103810391040104110421043104410451046104710481049105010511052105310541055105610571058105910601061106210631064106510661067106810691070107110721073107410751076107710781079108010811082108310841085108610871088108910901091109210931094109510961097109810991100110111021103110411051106110711081109111011111112111311141115111611171118111911201121112211231124112511261127112811291130113111321133113411351136113711381139114011411142114311441145114611471148114911501151115211531154115511561157115811591160116111621163116411651166116711681169117011711172117311741175117611771178117911801181118211831184118511861187118811891190119111921193119411951196119711981199120012011202120312041205120612071208120912101211121212131214121512161217121812191220122112221223122412251226122712281229123012311232123312341235123612371238123912401241124212431244124512461247124812491250125112521253125412551256125712581259126012611262126312641265126612671268126912701271127212731274127512761277127812791280128112821283128412851286128712881289129012911292129312941295129612971298129913001301130213031304130513061307130813091310131113121313131413151316131713181319132013211322132313241325132613271328132913301331133213331334133513361337133813391340134113421343134413451346134713481349135013511352135313541355135613571358135913601361136213631364136513661367136813691370137113721373137413751376137713781379138013811382138313841385138613871388138913901391139213931394139513961397139813991400140114021403140414051406140714081409141014111412141314141415141614171418141914201421142214231424142514261427142814291430143114321433143414351436143714381439144014411442
  1. <?php defined('BX_DOL') or die('hack attempt');
  2. /**
  3. * Copyright (c) UNA, Inc - https://una.io
  4. * MIT License - https://opensource.org/licenses/MIT
  5. *
  6. * @defgroup UnaCore UNA Core
  7. * @{
  8. */
  9. define('BX_DOL_STORAGE_ERR_OK', 0);
  10. // 1-8 are standard upload form errors
  11. /*
  12. UPLOAD_ERR_INI_SIZE
  13. Value: 1; The uploaded file exceeds the upload_max_filesize directive in php.ini.
  14. UPLOAD_ERR_FORM_SIZE
  15. Value: 2; The uploaded file exceeds the MAX_FILE_SIZE directive that was specified in the HTML form.
  16. UPLOAD_ERR_PARTIAL
  17. Value: 3; The uploaded file was only partially uploaded.
  18. UPLOAD_ERR_NO_FILE
  19. Value: 4; No file was uploaded.
  20. UPLOAD_ERR_NO_TMP_DIR
  21. Value: 6; Missing a temporary folder. Introduced in PHP 4.3.10 and PHP 5.0.3.
  22. UPLOAD_ERR_CANT_WRITE
  23. Value: 7; Failed to write file to disk. Introduced in PHP 5.1.0.
  24. UPLOAD_ERR_EXTENSION
  25. Value: 8; A PHP extension stopped the file upload. PHP does not provide a way to ascertain which extension caused the file upload to stop; examining the list of loaded extensions with phpinfo() may help. Introduced in PHP 5.2.0.
  26. */
  27. define('BX_DOL_STORAGE_ERR_NO_INPUT_METHOD', 1000); ///< there is such input method available
  28. define('BX_DOL_STORAGE_ERR_NO_FILE', 1001); ///< there is no file to upload
  29. define('BX_DOL_STORAGE_INVALID_FILE', 1002); ///< uploaded file is invalid or hack attempts
  30. define('BX_DOL_STORAGE_ERR_FILE_TOO_BIG', 1003); ///< file is too big
  31. define('BX_DOL_STORAGE_ERR_WRONG_EXT', 1004); ///< wrong file extension
  32. define('BX_DOL_STORAGE_ERR_USER_QUOTA_EXCEEDED', 1005); ///< user quota exceeded
  33. define('BX_DOL_STORAGE_ERR_OBJECT_QUOTA_EXCEEDED', 1006); ///< storage object quota exceeded
  34. define('BX_DOL_STORAGE_ERR_SITE_QUOTA_EXCEEDED', 1007); ///< site quota exceeded
  35. define('BX_DOL_STORAGE_ERR_ENGINE_ADD', 1008); ///< some other error during file adding occured, related to particular storage engine
  36. define('BX_DOL_STORAGE_ERR_FILE_NOT_FOUND', 2001); ///< file not found
  37. define('BX_DOL_STORAGE_ERR_UNLINK', 2002); ///< file deletion failed
  38. define('BX_DOL_STORAGE_ERR_DB', 5001); ///< database error
  39. define('BX_DOL_STORAGE_ERR_FILESYSTEM_PERM', 5002); ///< filesystem permissions error
  40. define('BX_DOL_STORAGE_ERR_PERMISSION_DENIED', 5003); ///< permission denied
  41. define('BX_DOL_STORAGE_ERR_ENGINE_GET', 5004); ///< some other error during file getting occured, related to particular storage engine
  42. define('BX_DOL_STORAGE_ERR_NOT_IMPLEMENTED', 5005); ///< this feature isn't implemented in storage engine
  43. define('BX_DOL_STORAGE_DEFAULT_MIME_TYPE', 'octet/stream'); ///< default mime type if it is not find by extension
  44. define('BX_DOL_STORAGE_DEFAULT_ICON', 'mime-type-any.png'); ///< default icon if no other icon can be determined by file extension
  45. define('BX_DOL_STORAGE_DEFAULT_ICON_FONT', 'far file'); ///< default font icon if no other icon can be determined by file extension
  46. define('BX_DOL_STORAGE_QUEUED_DELETIONS_PER_RUN', 200); ///< max number of file deletions per one cron run, @see BxDolStorage::pruneDeletions
  47. /**
  48. * This class unify storage.
  49. * As the result there are many advantages:
  50. * - files can be stored as on localhost as on remote storage, for example Amazon s3
  51. * - all files are in one place and separated from other files, so the data can be organised more easily,
  52. * for example moved to dedicated disk if there is not enough storage
  53. * - simplicity of usage, there are hight level classes to handle all necessary operations, including upload and security
  54. * - quotas settings, so you always control how much space you are going to use
  55. * - persistent storage; uploaded, but not saved files appear upon page reload or future submission of the same form
  56. *
  57. *
  58. * Usage.
  59. *
  60. * Step 1:
  61. * Add record to 'sys_objects_storage' table, like you doing this for Comments or Voting objects:
  62. * - object - your storage object name, usually it is in the following format - vendor prefix, underscore, module prefix;
  63. * for example for BoonEx Forum module it can be bx_forum.
  64. * - engine - storage engine, for now the following engines are supported:
  65. * 1. Local - local storage, by default files are stored in /storage/ subfolder
  66. * 2. S3 - Amazon S3 storage, files are stored on Amazon S3 storage, you need to point AWS Access Key, AWS Secret Key and AWS Bucket in the settings
  67. * - params - custom storage engine params as php serialized string
  68. * - token_life - life of the security token in seconds for private files
  69. * - cache_control - control browser cache, allow browser to store files in browser's cache for this number of seconds, to disable browser cache,
  70. * or let browser to decide on its own set it to 0(zero)
  71. * - levels - store files in subfolders, generated from filename; it is useful when there is limit of number of files/folders per directory;
  72. * for example if level is 2 and file name is abc.jpg then the file will be stored in a/b/abc.jpg folder, set to to 0(zero) to disable this feature
  73. * - table_files - table where file info is stored, please refer to step 2 for more details
  74. * - ext_mode - file extensions restriction mode:
  75. * 1. allow-deny - allow only file types in ext_allow field and deny all other file types, ext_deny field is ignored.
  76. * 2. deny-allow - allow all files except the ones specified in ext_deny field, ext_allow field is ignored.
  77. * - ext_allow - allowed file extensions, comma separated, it is in effect when ext_mode is allow-deny; example - jpg,gif,png
  78. * - ext_deny - denied file extensions, comma separated, it is in effect when ext_mode is deny-allow; example - exe,com,bat
  79. * - quota_size - storage engine quota in bytes, the summary of all uploaded files can not be bigger than this number
  80. * - current_size - current storage engine usage, the sum of all uploaded file sizes
  81. * - quota_number - max number of files allowed in this storage engine
  82. * - current_number - current number of files in this storage engine
  83. * - max_file_size - max file size for this storage engine, please note that other server settings are used if they are less than this setting option
  84. * - ts - unix timestamp of the last file upload
  85. *
  86. *
  87. * Step 2:
  88. * Create table for files.
  89. *
  90. * @code
  91. * CREATE TABLE `my_sample_files` (
  92. * `id` int(11) NOT NULL AUTO_INCREMENT,
  93. * `profile_id` int(10) unsigned NOT NULL,
  94. * `remote_id` varchar(255) NOT NULL,
  95. * `path` varchar(255) NOT NULL,
  96. * `file_name` varchar(255) NOT NULL,
  97. * `mime_type` varchar(128) NOT NULL,
  98. * `ext` varchar(32) NOT NULL,
  99. * `size` int(11) NOT NULL,
  100. * `added` int(11) NOT NULL,
  101. * `modified` int(11) NOT NULL,
  102. * `private` int(11) NOT NULL,
  103. * PRIMARY KEY (`id`),
  104. * UNIQUE KEY `remote_id` (`remote_id`)
  105. * );
  106. * @endcode
  107. *
  108. * You need to enter this table name in 'table_files' field in 'sys_objects_storage' table, mentioned in step 1.
  109. * The files will be added to this table automatically, all you need is to save 'id' from this table, so you can refer to the file by the 'id'.
  110. * It is not recommended to change this table, it is better to create another table which will be connected with this one by file 'id'.
  111. *
  112. *
  113. * Step 3:
  114. * Handling upload.
  115. *
  116. * Sample HTML form:
  117. * @code
  118. * <form enctype="multipart/form-data" method="POST" action="store_file.php">
  119. * Choose a file to upload:
  120. * <input name="file" type="file" />
  121. * <br />
  122. * <input type="submit" name="add" value="Upload File" />
  123. * </form>
  124. * @endcode
  125. *
  126. * Add server code in sample store_file.php file:
  127. *
  128. * @code
  129. * require_once('./inc/header.inc.php');
  130. * require_once(BX_DIRECTORY_PATH_INC . "design.inc.php");
  131. *
  132. * BxDolStorage::pruning(); // pruning is needed to clear expired security tokens, you can call it on cron when your server is not busy
  133. * $oStorage = BxDolStorage::getObjectInstance('my_module'); // create storage object instance, 'my_module' is value of 'object' field in 'sys_objects_storage' table
  134. *
  135. * if (isset($_POST['add'])) { // if form is submitted
  136. * $iId = $oStorage->storeFileFromForm($_FILES['file'], true, 0); // store file from submitted HTML form, 'file' is input name with field, true means store file as private, 0 is profile id
  137. * if ($iId) { // storeFileFromForm returns file id, not false value means operation is successful.
  138. * // save $iId somewhere, so you can refer to the file after
  139. * $iCount = $oStorage->afterUploadCleanup($iId, $iProfileId); // since we saved $iId, we remove it from the orphans list, so it will not appear on the form next time (persistent storage)
  140. * echo "uploaded file id: " . $iId . "(deleted orphans:" . $iCount . ")";
  141. * } else {
  142. * // something went wrong - print the error
  143. * echo "error uploading file: " . $oStorage->getErrorString()
  144. * }
  145. * }
  146. * @endcode
  147. *
  148. * Please refer to the functions definition for more additional description of functions params.
  149. *
  150. *
  151. * Step 4:
  152. * Displaying the file.
  153. *
  154. * Use the following code to retrieve saved file. Remember you saved filed id somewhere in the previous step.
  155. * Lets assume that the uploaded file is image, then we can show it using the following code:
  156. *
  157. * @code
  158. * require_once('./inc/header.inc.php');
  159. * require_once(BX_DIRECTORY_PATH_INC . "design.inc.php");
  160. *
  161. * $oStorage = BxDolStorage::getObjectInstance('my_module');
  162. *
  163. * $iId = 1234; // since you've saved it somewhere in the previous step, you can retrieve it here
  164. *
  165. * echo "Uploaded image: <img src="' . $oStorage->getFileUrlById($iId) . '" />;";
  166. * @endcode
  167. *
  168. * It will show the file, regardless if it is private or public.
  169. * You need to control it by yourself who will view the file.
  170. * The difference in viewing private files is that link to the file is expiring after N seconds,
  171. * you control this period using 'token_life' field in 'sys_objects_storage' table.
  172. *
  173. */
  174. abstract class BxDolStorage extends BxDolFactory implements iBxDolFactoryObject
  175. {
  176. protected $_aObject; ///< object properties
  177. protected $_iCacheControl; ///< browser cache in seconds, 0 - disabled
  178. protected $_aParams; ///< custom params
  179. protected $_iErrorCode; ///< last error code
  180. protected $_oDb; ///< database relates function are in this object
  181. /**
  182. * constructor
  183. */
  184. protected function __construct($aObject)
  185. {
  186. parent::__construct();
  187. $this->_aObject = $aObject;
  188. $this->_iCacheControl = $aObject['cache_control'];
  189. $this->_aParams = $aObject['params'] ? unserialize($aObject['params']) : '';
  190. $this->_oDb = new BxDolStorageQuery($aObject);
  191. }
  192. /**
  193. * Get storage object instance by object name
  194. * @param $sObject object name
  195. * @return object instance or false on error
  196. */
  197. public static function getObjectInstance($sObject)
  198. {
  199. if (isset($GLOBALS['bxDolClasses']['BxDolStorage!'.$sObject]))
  200. return $GLOBALS['bxDolClasses']['BxDolStorage!'.$sObject];
  201. $aObject = BxDolStorageQuery::getStorageObject($sObject);
  202. if (!$aObject || !is_array($aObject))
  203. return false;
  204. $sClass = 'BxDolStorage' . $aObject['engine'];
  205. $o = new $sClass($aObject);
  206. if (!$o->isInstalled() || !$o->isAvailable())
  207. return false;
  208. return ($GLOBALS['bxDolClasses']['BxDolStorage!'.$sObject] = $o);
  209. }
  210. /**
  211. * Delete old security tokens from database.
  212. * It is alutomatically called upin cron execution, usually once in a day.
  213. * @return number of deleted records
  214. */
  215. public static function pruning()
  216. {
  217. $iDeleted = 0;
  218. $a = BxDolStorageQuery::getStorageObjects();
  219. foreach ($a as $aObject) {
  220. $oDb = new BxDolStorageQuery($aObject);
  221. $iDeleted += $oDb->prune();
  222. }
  223. return $iDeleted;
  224. }
  225. /**
  226. * Delete files queued for deletions
  227. * It is alutomatically called upin cron execution, usually one time per minute.
  228. * Max number of deletetion per time is defined in @see BX_DOL_STORAGE_QUEUED_DELETIONS_PER_RUN
  229. * @return number of deleted records
  230. */
  231. public static function pruneDeletions()
  232. {
  233. $iDeleted = 0;
  234. $a = BxDolStorageQuery::getQueuedFilesForDeletion(BX_DOL_STORAGE_QUEUED_DELETIONS_PER_RUN);
  235. foreach ($a as $r) {
  236. $o = BxDolStorage::getObjectInstance($r['object']);
  237. $iDeleted += ($o && $o->deleteFile($r['file_id']) ? 1 : 0);
  238. }
  239. return $iDeleted;
  240. }
  241. /**
  242. * Check if module has any files pending for deletion, it is supposed that all module storage object names are prefixed with module name
  243. * @param $sPrefix - usually module name
  244. * @return number of files pending for deletion which were found by prefix
  245. */
  246. public static function isQueuedFilesForDeletion ($sPrefix)
  247. {
  248. return BxDolStorageQuery::isQueuedFilesForDeletion($sPrefix);
  249. }
  250. /**
  251. * Get file token for private files.
  252. * @param $iFileId file
  253. * @return file token string
  254. */
  255. public function genToken($iFileId)
  256. {
  257. return $this->_oDb->genToken($iFileId);
  258. }
  259. /**
  260. * Change storage engine. It's possible to change it when there is no files in storage engine.
  261. * @param $sEngine new storage engine
  262. * @return true on success or false on error
  263. */
  264. public function changeStorageEngine ($sEngine)
  265. {
  266. if (0 == $this->_aObject['current_size'] && 0 == $this->_aObject['current_number'])
  267. return $this->_oDb->changeStorageEngine($sEngine);
  268. return false;
  269. }
  270. /**
  271. * Is storage engine available?
  272. * @return boolean
  273. */
  274. function isAvailable()
  275. {
  276. return true;
  277. }
  278. /**
  279. * Are required php modules installed for this storage engine ?
  280. * @return boolean
  281. */
  282. public function isInstalled()
  283. {
  284. return true;
  285. }
  286. public function getObject()
  287. {
  288. return $this->_aObject['object'];
  289. }
  290. public function getObjectData()
  291. {
  292. return $this->_aObject;
  293. }
  294. /**
  295. * Get error code from the last occured error
  296. * @return error code
  297. */
  298. public function getErrorCode()
  299. {
  300. return $this->_iErrorCode;
  301. }
  302. /**
  303. * Get error string from the last occured error
  304. * @return error string
  305. */
  306. public function getErrorString()
  307. {
  308. bx_import('BxDolLanguages');
  309. $a = array (
  310. 1000 => '_sys_storage_err_no_input_method',
  311. 1001 => '_sys_storage_err_no_file',
  312. 1002 => '_sys_storage_invalid_file',
  313. 1003 => '_sys_storage_err_file_too_big',
  314. 1004 => '_sys_storage_err_wrong_ext',
  315. 1005 => '_sys_storage_err_user_quota_exceeded',
  316. 1006 => '_sys_storage_err_object_quota_exceeded',
  317. 1007 => '_sys_storage_err_site_quota_exceeded',
  318. 1008 => '_sys_storage_err_engine_add',
  319. 2001 => '_sys_storage_err_file_not_found',
  320. 2002 => '_sys_storage_err_unlink',
  321. 5001 => '_sys_storage_err_db',
  322. 5002 => '_sys_storage_err_filesystem_perm',
  323. 5003 => '_sys_storage_err_permission_denied',
  324. 5004 => '_sys_storage_err_engine_get',
  325. 5005 => '_sys_storage_err_not_implemented',
  326. );
  327. return _t($a[$this->_iErrorCode]);
  328. }
  329. /**
  330. * Get max file size allowed for current user, it checks user quota, object quota, site quota and php setting
  331. * @param $iProfileId profile id to check quota for
  332. * @return quota size in bytes
  333. */
  334. public function getMaxUploadFileSize ($iProfileId)
  335. {
  336. $iMin = PHP_INT_MAX;
  337. $aUserQuota = $this->_oDb->getUserQuota($iProfileId);
  338. if ($aUserQuota['max_file_size'] && $aUserQuota['max_file_size'] < $iMin)
  339. $iMin = $aUserQuota['max_file_size'];
  340. $aObjectQuota = $this->_oDb->getStorageObjectQuota();
  341. if ($aObjectQuota['max_file_size'] && $aObjectQuota['max_file_size'] < $iMin)
  342. $iMin = $aObjectQuota['max_file_size'];
  343. // TODO: get and check site quota
  344. if (!defined('BX_DOL_CRON_EXECUTE')) {
  345. $iUploadMaxFilesize = return_bytes(ini_get('upload_max_filesize'));
  346. if ($iUploadMaxFilesize && $iUploadMaxFilesize < $iMin)
  347. $iMin = $iUploadMaxFilesize;
  348. }
  349. return $iMin;
  350. }
  351. /**
  352. * Store file in the storage area. It is not recommended to use this function directly,
  353. * use other funtions like: storeFileFromForm, storeFileFromXhr, storeFileFromPath, storeFileFromUrl
  354. * @param $sMethod upload method, like regular Form upload, upload from URL, etc
  355. * @param $aMethodParams upload method params
  356. * @param $sName file name with extention
  357. * @param $isPrivate private or public file
  358. * @param $iProfileId profile id of the upload action performer
  359. * @param $iContentId content id to associate with ghost file
  360. * @return id of added file on success, false on error - to get exact error string call getErrorString()
  361. */
  362. public function storeFile($sMethod, $aMethodParams, $sName = false, $isPrivate = true, $iProfileId = 0, $iContentId = 0)
  363. {
  364. // setup input source using helper classes, like $_FILES or some URL for example
  365. $sHelperClass = 'BxDolStorageHelper' . $sMethod;
  366. if (!class_exists($sHelperClass)) {
  367. $this->setErrorCode(BX_DOL_STORAGE_ERR_NO_INPUT_METHOD);
  368. return false;
  369. }
  370. $oHelper = new $sHelperClass($aMethodParams);
  371. // check for errors, like size and extentions checking
  372. if ($iImmediateError = $oHelper->getImmediateError()) {
  373. $this->setErrorCode($iImmediateError);
  374. return false;
  375. }
  376. $sExt = $this->getFileExt($oHelper->getName());
  377. $sMimeType = $this->getMimeTypeByFileName($oHelper->getName());
  378. if (!$this->isValidExt($sExt)) {
  379. $this->setErrorCode(BX_DOL_STORAGE_ERR_WRONG_EXT);
  380. return false;
  381. }
  382. // before upload callback + additional checking
  383. if (!$this->onBeforeFileAdd (array(
  384. 'profile_id' => $iProfileId,
  385. 'content_id' => $iContentId,
  386. 'file_name' => $oHelper->getName(),
  387. 'mime_type' => $sMimeType,
  388. 'ext' => $sExt,
  389. 'size' => $oHelper->getSize(),
  390. 'private' => $isPrivate ? 1 : 0,
  391. ))) {
  392. return false;
  393. }
  394. // create tmp file
  395. $sTmpFile = tempnam(BX_DIRECTORY_PATH_TMP, $this->_aObject['object']);
  396. if (!$oHelper->save($sTmpFile)) {
  397. $this->setErrorCode(BX_DOL_STORAGE_INVALID_FILE);
  398. return false;
  399. }
  400. // store file to storage engine
  401. $sLocalId = $this->genRandName();
  402. $sPath = $this->genPath($sLocalId, $this->_aObject['levels']);
  403. $sRemoteNamePath = $this->genRemoteNamePath ($sPath, $sLocalId, $sExt);
  404. if (!$this->addFileToEngine($sTmpFile, $sLocalId, $oHelper->getName(), $isPrivate, $iProfileId)) {
  405. unlink($sTmpFile);
  406. $this->setErrorCode(BX_DOL_STORAGE_ERR_ENGINE_ADD);
  407. return false;
  408. }
  409. unlink($sTmpFile);
  410. // add record in db
  411. $iTime = time();
  412. $iSize = $oHelper->getSize();
  413. $bFileAdded = $this->_oDb->addFile($iProfileId, $sLocalId, $sRemoteNamePath, $oHelper->getName(), $sMimeType, $sExt, $iSize, $iTime, $isPrivate);
  414. $iId = $this->_oDb->lastId();
  415. if (!$bFileAdded || !$iId) {
  416. $this->deleteFileFromEngine($sPath . $sLocalId, $isPrivate);
  417. $this->setErrorCode(BX_DOL_STORAGE_ERR_DB);
  418. return false;
  419. }
  420. // after upload callback + triggers update
  421. if (!$this->onFileAdded (array(
  422. 'id' => $iId,
  423. 'profile_id' => $iProfileId,
  424. 'content_id' => $iContentId,
  425. 'remote_id' => $sLocalId,
  426. 'path' => $sPath . $sLocalId,
  427. 'file_name' => $oHelper->getName(),
  428. 'mime_type' => $sMimeType,
  429. 'size' => $iSize,
  430. 'private' => $isPrivate ? 1 : 0,
  431. ))) {
  432. $this->deleteFileFromEngine($sPath . $sLocalId, $isPrivate);
  433. $this->_oDb->deleteFile($iId);
  434. return false;
  435. }
  436. return $iId;
  437. }
  438. /**
  439. * convert default multiple files array into more logical one
  440. */
  441. public function convertMultipleFilesArray($aFiles)
  442. {
  443. if (!is_array($aFiles) || !is_array($aFiles['name']))
  444. return false;
  445. $aRet = array ();
  446. foreach ($aFiles['name'] as $i => $sName) {
  447. foreach ($aFiles as $sKey => $r) {
  448. if (!$aFiles['name'][$i])
  449. break;
  450. $aRet[$i][$sKey] = $aFiles[$sKey][$i];
  451. }
  452. }
  453. return $aRet;
  454. }
  455. /**
  456. * the same as storeFile, but it tries to do it directly from uploaded file
  457. */
  458. public function storeFileFromForm($aFile, $isPrivate = true, $iProfileId = 0, $iContentId = 0)
  459. {
  460. return $this->storeFile('Form', array('file' => $aFile), false, $isPrivate, $iProfileId, $iContentId);
  461. }
  462. /**
  463. * the same as storeFile, but it tries to do it directly from HTML5 file upload method
  464. */
  465. public function storeFileFromXhr($sName, $isPrivate = true, $iProfileId = 0, $iContentId = 0)
  466. {
  467. return $this->storeFile('Xhr', array('name' => $sName), false, $isPrivate, $iProfileId, $iContentId);
  468. }
  469. /**
  470. * the same as storeFile, but it tries to do it directly from local file
  471. */
  472. public function storeFileFromPath($sPath, $isPrivate = true, $iProfileId = 0, $iContentId = 0)
  473. {
  474. return $this->storeFile('Path', array('path' => $sPath), false, $isPrivate, $iProfileId, $iContentId);
  475. }
  476. /**
  477. * the same as storeFileFromPath, but it tries to do it from URL
  478. */
  479. public function storeFileFromUrl($sUrl, $isPrivate = true, $iProfileId = 0, $iContentId = 0)
  480. {
  481. return $this->storeFile('Url', array('url' => $sUrl), false, $isPrivate, $iProfileId, $iContentId);
  482. }
  483. /**
  484. * the same as storeFile, but it tries to do it directly from the same or another storage by file id
  485. * @param $aParams['id'] - file ID in the storage
  486. * @param $aParams['storage'] - the storage name
  487. */
  488. public function storeFileFromStorage($aParams, $isPrivate = true, $iProfileId = 0, $iContentId = 0)
  489. {
  490. if (!isset($aParams['id']) || !(int)$aParams['id'])
  491. $aParams['id'] = 0;
  492. if (!isset($aParams['storage']))
  493. $aParams['storage'] = $this->_aObject['object'];
  494. return $this->storeFile('Storage', $aParams, false, $isPrivate, $iProfileId, $iContentId = 0);
  495. }
  496. /**
  497. * Delete file by file id.
  498. */
  499. public function deleteFile($iFileId, $iProfileId = 0)
  500. {
  501. $aFile = $this->_oDb->getFileById ($iFileId);
  502. if (!$aFile) {
  503. $this->setErrorCode(BX_DOL_STORAGE_ERR_FILE_NOT_FOUND);
  504. return false;
  505. }
  506. if (!$this->onBeforeFileDelete ($aFile, $iProfileId)) {
  507. return false;
  508. }
  509. if (!$this->deleteFileFromEngine($aFile['path'], $aFile['private'])) {
  510. return false;
  511. }
  512. $aGhost = $this->_oDb->getGhost($aFile['id']);
  513. if (!$this->_oDb->deleteFile($aFile['id'])) {
  514. $this->setErrorCode(BX_DOL_STORAGE_ERR_DB);
  515. return false;
  516. }
  517. if (!$this->onFileDeleted ($aFile, $iProfileId, $aGhost)) {
  518. return false;
  519. }
  520. return true;
  521. }
  522. /**
  523. * Queue file(s) for deletion. File(s) will be deleted later upon cron call (usually every minute).
  524. * @param $mixedFileId file id or array of file ids.
  525. * @return number of queued files
  526. */
  527. public function queueFilesForDeletion($mixedFileId)
  528. {
  529. if (!is_array($mixedFileId))
  530. $mixedFileId = array ($mixedFileId);
  531. bx_import('BxDolForm');
  532. $oChecker = new BxDolFormCheckerHelper();
  533. return $this->_oDb->queueFilesForDeletion (array_unique($oChecker->passInt($mixedFileId)));
  534. }
  535. /**
  536. * Queue file(s) for deletion by getting neccesary files from ghosts table by profile id and content id
  537. * @param $iProfileId profile id associated with files
  538. * @param $iContentId content id associated with files, or false if to check by profile id only
  539. * @return number of queued files
  540. */
  541. public function queueFilesForDeletionFromGhosts($iProfileId, $iContentId = false)
  542. {
  543. $aFiles = $this->getGhosts ($iProfileId, $iContentId);
  544. return $this->queueFiles($aFiles);
  545. }
  546. /**
  547. * Queue file(s) for deletion of the whole storage object
  548. * @return number of queued files
  549. */
  550. public function queueFilesForDeletionFromObject()
  551. {
  552. $aFiles = $this->getFiles (false);
  553. return $this->queueFiles($aFiles);
  554. }
  555. /**
  556. * Download file.
  557. * @param array $aFile downloading file info.
  558. */
  559. public function download ($aFile)
  560. {
  561. $bRet = true;
  562. bx_alert($this->_aObject['object'], 'file_downloaded', $aFile['id'], bx_get_logged_profile_id(), array(
  563. 'profile_ip' => getVisitorIP(),
  564. 'file_info' => $aFile,
  565. 'return_value' => &$bRet
  566. ));
  567. return $bRet;
  568. }
  569. /**
  570. * Set file private or public.
  571. */
  572. public function setFilePrivate($iFileId, $isPrivate = true)
  573. {
  574. if (!$this->_oDb->modifyFilePrivate ($iFileId, $isPrivate)) {
  575. $this->setErrorCode(BX_DOL_STORAGE_ERR_DB);
  576. return false;
  577. }
  578. return true;
  579. }
  580. /**
  581. * Get file url.
  582. * @param $iFileId file id
  583. * @return file url or false on error
  584. */
  585. public function getFileUrlById($iFileId) { }
  586. /**
  587. * Get file info array by file id.
  588. * @param $iFileId file id
  589. * @return array
  590. */
  591. public function getFile($iFileId)
  592. {
  593. return $this->_oDb->getFileById($iFileId);
  594. }
  595. /**
  596. * Get ghost file info array by file id.
  597. * @param $iFileId file id
  598. * @return array
  599. */
  600. public function getGhost($iFileId)
  601. {
  602. return $this->_oDb->getGhost($iFileId);
  603. }
  604. /**
  605. * check if file is private or public
  606. * @param $iFileId file id
  607. * @return boolean
  608. */
  609. public function isFilePrivate($iFileId)
  610. {
  611. $aFile = $this->getFile ($iFileId);
  612. return $aFile['private'] ? true : false;
  613. }
  614. /**
  615. * Call this function after saving/associate just uploaded file id, so file is not orphaned/ghost.
  616. * Ghost files appear on download form automaticaly during next upload,
  617. * for example if file was uploaded but was not submitted for some reason.
  618. * This mechanism ensure that the file is not lost.
  619. * @param $mixedFileIds array of file ids or just one file id
  620. * @param $iProfileId profile id
  621. * @param return number of deleted ghost files
  622. */
  623. public function afterUploadCleanup($mixedFileIds, $iProfileId, $iContentId = false)
  624. {
  625. return $this->_oDb->deleteGhosts($mixedFileIds, $iProfileId, $iContentId);
  626. }
  627. /**
  628. * Get ghost/orphaned files for particular user.
  629. * @param $iProfileId profile id
  630. * @param $iContentId content id, or false to not consider content id at all
  631. * @param $isCheckAllAccountProfiles get all files associated with all account profiles
  632. * @param $isAdmin if true, then don't check files ownership, it makes sense when $iContentId is provided, so it will return all files assiciated with content
  633. * @return array of arrays
  634. */
  635. public function getGhosts($iProfileId, $iContentId = false, $isCheckAllAccountProfiles = false, $isAdmin = false)
  636. {
  637. if ($isCheckAllAccountProfiles && ($oProfile = BxDolProfile::getInstance($iProfileId))) {
  638. $oAccount = $oProfile->getAccountObject();
  639. $aProfiles = $oAccount->getProfilesIds(false, false);
  640. return $this->_oDb->getGhosts($aProfiles, $iContentId, $isAdmin);
  641. }
  642. return $this->_oDb->getGhosts($iProfileId, $iContentId, $isAdmin);
  643. }
  644. /**
  645. * Update ghosts' content id.
  646. * @param $mixedFileIds array of file ids or just one file id
  647. * @param $iProfileId profile id
  648. * @param $iContentId content id
  649. * @param $isAdmin if true, then don't check files ownership
  650. * @return true on success or false otherwise
  651. */
  652. public function updateGhostsContentId($mixedFileIds, $iProfileId, $iContentId, $isAdmin = false)
  653. {
  654. $aProfiles = array();
  655. if ($oProfile = BxDolProfile::getInstance($iProfileId)) {
  656. $oAccount = $oProfile->getAccountObject();
  657. $aProfiles = $oAccount->getProfilesIds(false);
  658. }
  659. return $this->_oDb->updateGhostsContentId($mixedFileIds, $iProfileId, $iContentId, $aProfiles, $isAdmin);
  660. }
  661. /**
  662. * Get files list for particular user.
  663. * @param $iProfileId profile id
  664. * @return array of arrays
  665. */
  666. public function getFiles($iProfileId)
  667. {
  668. return $this->_oDb->getFiles($iProfileId);
  669. }
  670. /**
  671. * Get all files in the storage
  672. */
  673. public function getFilesAll($iStart = 0, $iPerPage = 1000)
  674. {
  675. return $this->_oDb->getFilesAll($iStart, $iPerPage);
  676. }
  677. /**
  678. * Get readable representation of restrictions by file extentions.
  679. * @param $iProfileId profile id
  680. * @return string
  681. */
  682. public function getRestrictionsTextExtensions ($iProfileId)
  683. {
  684. switch ($this->_aObject['ext_mode']) {
  685. case 'allow-deny':
  686. if (!$this->_aObject['ext_allow'])
  687. return _t('_sys_storage_restriction_ext_all_denied');
  688. return _t('_sys_storage_restriction_ext_allowed', _t_format_extensions($this->_aObject['ext_allow']));
  689. case 'deny-allow':
  690. if (!$this->_aObject['ext_deny'])
  691. return _t('_sys_storage_restriction_ext_all_allowed');
  692. return _t('_sys_storage_restriction_ext_denied', _t_format_extensions($this->_aObject['ext_deny']));
  693. default:
  694. return _t('_sys_storage_restriction_ext_all_denied');
  695. }
  696. }
  697. /**
  698. * @return list of allowed extensions, if ext_mode = 'allow-deny', returns false otherwise.
  699. */
  700. public function getAllowedExtensions ()
  701. {
  702. if ('allow-deny' == $this->_aObject['ext_mode'])
  703. return _t_format_extensions($this->_aObject['ext_allow']);
  704. return null;
  705. }
  706. /**
  707. * Get readable representation of restrictions by file size.
  708. * @param $iProfileId profile id
  709. * @return string
  710. */
  711. public function getRestrictionsTextFileSize ($iProfileId)
  712. {
  713. return _t('_sys_storage_restriction_size', _t_format_size($this->getMaxUploadFileSize($iProfileId)));
  714. }
  715. /**
  716. * Get readable representation of all restrictions.
  717. * @param $iProfileId profile id
  718. * @return array of strings
  719. */
  720. public function getRestrictionsTextArray ($iProfileId)
  721. {
  722. $aTypes = array('Extensions', 'FileSize');
  723. $aRet = array();
  724. foreach ($aTypes as $sType) {
  725. $sFunc = 'getRestrictionsText' . $sType;
  726. $s = $this->$sFunc ($iProfileId);
  727. if ($s)
  728. $aRet[] = $s;
  729. }
  730. return $aRet;
  731. }
  732. /**
  733. * Reread available mimetypes from particular file.
  734. * It clears 'sys_storage_mime_types' table and fill it with data form provided file.
  735. * The format of file is: mime/type _space_or_tab_ extentions_sperated_by_space.
  736. * Usually the file is mime.types file from apache or /etc/mime.types from unix systems.
  737. * @param $sFile file to read mime types from
  738. * @return false if file was not found or can not be read, string with result on other case - it can contains file markup errors or localized "Success" string if everything went fine.
  739. */
  740. public function reloadMimeTypesFromFile ($sFile)
  741. {
  742. $sResult = '';
  743. /*
  744. * These mime types must be manually added/replaced if they aren't defined in the mime type file
  745. *
  746. text/x-php php
  747. text/x-coffeescript coffee
  748. text/x-common-lisp lsp lisp
  749. text/x-diff diff
  750. text/x-go go
  751. text/x-java java
  752. text/x-lua lua
  753. text/x-perl pl prl perl
  754. text/x-python py
  755. text/nginx nginx
  756. text/x-ini ini
  757. text/x-ruby rb
  758. text/x-sass sass
  759. text/x-sh bash sh
  760. text/x-swift swift
  761. text/x-vb vb
  762. text/vbscript vbs
  763. text/x-vue vue
  764. text/x-yaml yaml
  765. text/x-sql sql
  766. text/x-markdown md
  767. application/xquery xq xquery
  768. application/x-powershell ps1
  769. application/x-aspx aps
  770. application/x-jsp jsp
  771. */
  772. $aIconsFont = array (
  773. 'far file-pdf' => array('pdf'),
  774. 'far file-word' => array('doc', 'docx'),
  775. 'far file-excel' => array('xls', 'xlt', 'xlsx', 'sxc', 'stc', 'ods', 'ots', 'sdc', 'csv', 'dif', 'slk', 'pxl'),
  776. 'far file-powerpoint' => array('ppt', 'pptx', 'sxi', 'sti', 'odp', 'sdp', 'sdd'),
  777. 'far file-code' => array('1st', 'aspx', 'asp', 'json', 'js', 'jsp', 'java', 'php', 'xml', 'html', 'xhtml', 'htm', 'rdf', 'xsd', 'xsl', 'xslt', 'sax', 'rss', 'dtd', 'cfm', 'js', 'asm', 'pl', 'prl', 'bas', 'b', 'fs', 'src', 'cs', 'ws', 'cgi', 'bat', 'py', 'c', 'cpp', 'cc', 'cp', 'h', 'hh', 'cxx', 'hxx', 'c++', 'm', 'lua', 'swift', 'sh', 'as', 'cob', 'tpl', 'lsp', 'x', 'cmd', 'rb', 'cbl', 'pas', 'pp', 'vb', 'vbs', 'f', 'perl', 'jl', 'lol', 'bal', 'pli', 'css', 'less', 'sass', 'saas', 'scss', 'bcc', 'coffee', 'jade', 'j', 'tea', 'c#', 'sas', 'diff', 'pro', 'for', 'sh', 'bsh', 'bash', 'twig', 'csh', 'lisp', 'lsp', 'cobol', 'pl', 'd', 'git', 'rb', 'hrl', 'cr', 'inp', 'a', 'go', 'as3', 'm', 'sql', 'md', 'mbox', 'nginx', 'pgp', 'asc', 'sig', 'ps1', 'rq', 'ttl', 'vue', 'xquery', 'xq'),
  778. 'far file-image' => 'image/',
  779. 'far file-video' => 'video/',
  780. 'far file-audio' => 'audio/',
  781. 'far file-alt' => 'text/',
  782. 'far file-archive' => array('7z', '7zip', 'aar', 'ace', 'alz', 'arj', 'bz2', 'bza', 'bzip2', 'bzp', 'bzp2', 'cab', 'czip', 'gnutar', 'gz', 'gza', 'gzi', 'gzip', 'ha', 'lhz', 'lzma', 'pzip', 'rar', 'roo', 's7z', 'tar', 'tar-gz', 'tar-lzma', 'tar-z', 'taz', 'tbz', 'tbz2', 'tgz', 'tz', 'z', 'zip', 'zipx', 'zix', 'zoo'),
  783. );
  784. $aIcons = array (
  785. 'mime-type-psd.png' => array('psd'),
  786. 'mime-type-png.png' => array('png'),
  787. 'mime-type-image.png' => 'image/',
  788. 'mime-type-video.png' => 'video/',
  789. 'mime-type-audio.png' => 'audio/',
  790. 'mime-type-presentation.png' => array('ppt', 'pptx', 'sxi', 'sti', 'odp', 'sdp', 'sdd'),
  791. 'mime-type-spreadsheet.png' => array('xls', 'xlt', 'xlsx', 'sxc', 'stc', 'ods', 'ots', 'sdc', 'csv', 'dif', 'slk', 'pxl'),
  792. 'mime-type-document.png' => array('doc', 'docx', 'odt', 'ott', 'sxw', 'stw', 'rtf', 'sdw', 'txt', 'pdb', 'psw', 'pdf'),
  793. 'mime-type-vector.png' => array('ac5', 'ac6', 'aff', 'agd1', 'ai', 'ait', 'art', 'awg', 'b2f', 'cag', 'cbd', 'cdl', 'cdr', 'cdr3', 'cdr4', 'cdr5', 'cdr6', 'cdrw', 'cdx', 'cgm', 'cht', 'cil', 'cit', 'cnv', 'csl', 'ctn', 'cv5', 'cvg', 'cvi', 'cvl', 'cvs', 'cvx', 'dcs', 'ddoc', 'ddrw', 'ded', 'design', 'dmw', 'do', 'dpp', 'dpr', 'draw', 'drw', 'dsf', 'dsf', 'dsx', 'dvg', 'dxb', 'emb', 'evf', 'fcd', 'fh', 'fhd', 'fmv', 'fs', 'ft10', 'ft11', 'ft9', 'ft8', 'gem', 'gl2', 'graffle', 'gsd', 'gsd', 'hpg', 'hpgl', 'hpgl2', 'hpl', 'hplj', 'hpp', 'hppcl', 'idw', 'ima', 'macdraw', 'mgcb', 'mgs', 'mvg', 'nap', 'naplps', 'odg', 'p10', 'pat', 'pct', 'pd', 'pdw', 'pgs', 'pic', 'pif', 'pix', 'plo', 'plot', 'plt', 'ps', 'psid', 'pws', 'rdl', 's57', 'sdw', 'sif', 'sk2', 'slddwg', 'sp', 'spa', 'svf', 'svg', 'svgb', 'svgz', 'sxd', 'tdr', 'tlc', 'tng', 'vbr', 'vec', 'vect', 'veh', 'vml', 'vss', 'web', 'web', 'web', 'yal'),
  794. 'mime-type-archive.png' => array('7z', '7zip', 'aar', 'ace', 'alz', 'arj', 'bz2', 'bza', 'bzip2', 'bzp', 'bzp2', 'cab', 'czip', 'gnutar', 'gz', 'gza', 'gzi', 'gzip', 'ha', 'lhz', 'lzma', 'pzip', 'rar', 'roo', 's7z', 'tar', 'tar-gz', 'tar-lzma', 'tar-z', 'taz', 'tbz', 'tbz2', 'tgz', 'tz', 'z', 'zip', 'zipx', 'zix', 'zoo'),
  795. );
  796. $f = fopen ($sFile, 'r');
  797. if (!$f)
  798. return false;
  799. $this->_oDb->clearAllMimeTypes();
  800. while (!feof($f) && ($s = fgets($f, 4096)) !== false) {
  801. $s = trim($s);
  802. if (!$s || '#' == $s[0])
  803. continue;
  804. $a = preg_split ("/[\s\\b]+/", $s, 2);
  805. if (!isset($a[0]) || !isset($a[1]))
  806. continue;
  807. $sMimeType = $a[0];
  808. $aExts = preg_split ("/[\s]+/", $a[1]);
  809. foreach ($aExts as $sExt) {
  810. $sIcon = $this->determineIcon($aIcons, $sExt, $sMimeType);
  811. $sIconFont = $this->determineIcon($aIconsFont, $sExt, $sMimeType);
  812. if (!$this->_oDb->addMimeType($sMimeType, $sExt, $sIcon, $sIconFont))
  813. $sResult .= _t('_Error') . ': ' . $sMimeType . "\t" . $sExt . "\n";
  814. }
  815. }
  816. fclose($f);
  817. if (!$sResult)
  818. $sResult = _t('_Success');
  819. return $sResult;
  820. }
  821. protected function determineIcon($aIcons, $sExt, $sMimeType)
  822. {
  823. foreach ($aIcons as $sIc => $if) {
  824. if (!(is_array($if) && in_array($sExt, $if)) && !(is_string($if) && 0 === strncmp($if, $sMimeType, strlen($if))))
  825. continue;
  826. return $sIc;
  827. }
  828. return false;
  829. }
  830. /**
  831. * Get file extension by file name.
  832. * @param $sFileName file name
  833. * @return file extention string
  834. */
  835. public function getFileExt ($sFileName)
  836. {
  837. return strtolower(pathinfo($sFileName, PATHINFO_EXTENSION));
  838. }
  839. /**
  840. * Get file title by file name, actually file title is file name without extension.
  841. * @param $sFileName file name
  842. * @return file title string
  843. */
  844. public function getFileTitle ($sFileName)
  845. {
  846. return pathinfo($sFileName, PATHINFO_FILENAME);
  847. }
  848. /**
  849. * Get file mime/type by file name.
  850. * @param $sFileName file name
  851. * @return file mime type string
  852. */
  853. public function getMimeTypeByFileName ($sFileName)
  854. {
  855. $sExt = $this->getFileExt($sFileName);
  856. $sMimeType = $this->_oDb->getMimeTypeByExt($sExt);
  857. if (!$sMimeType)
  858. $sMimeType = BX_DOL_STORAGE_DEFAULT_MIME_TYPE;
  859. return $sMimeType;
  860. }
  861. /**
  862. * Get file icon by file name.
  863. * File icon is just icon filename without patch or URL.
  864. * File icons must be located in images/icons directory in your template subfolder.
  865. * @param $sFileName file name
  866. * @return file icon string
  867. */
  868. public function getIconNameByFileName ($sFileName)
  869. {
  870. $sExt = $this->getFileExt($sFileName);
  871. $sIcon = $this->_oDb->getIconByExt($sExt);
  872. if (!$sIcon)
  873. $sIcon = BX_DOL_STORAGE_DEFAULT_ICON;
  874. return $sIcon;
  875. }
  876. /**
  877. * Get file font icon by file name.
  878. * Actually just a class name of icon is returnted.
  879. * @param $sFileName file name
  880. * @return file icon string
  881. */
  882. public function getFontIconNameByFileName ($sFileName)
  883. {
  884. $sExt = $this->getFileExt($sFileName);
  885. $sIcon = $this->_oDb->getIconFontByExt($sExt);
  886. if (!$sIcon)
  887. $sIcon = BX_DOL_STORAGE_DEFAULT_ICON_FONT;
  888. return $sIcon;
  889. }
  890. // ------------ internal functions - events
  891. protected function onBeforeFileAdd ($aFileInfo)
  892. {
  893. if ($aFileInfo['size'] > $this->getMaxUploadFileSize($aFileInfo['profile_id'])) {
  894. $this->setErrorCode(BX_DOL_STORAGE_ERR_FILE_TOO_BIG);
  895. return false;
  896. }
  897. // TODO: check site quota - BX_DOL_STORAGE_ERR_SITE_QUOTA_EXCEEDED
  898. $aObjectQuota = $this->_oDb->getStorageObjectQuota();
  899. if (
  900. ($aObjectQuota['quota_size'] && ($aObjectQuota['current_size'] + $aFileInfo['size'] > $aObjectQuota['quota_size']))
  901. ||
  902. ($aObjectQuota['quota_number'] && ($aObjectQuota['current_number'] + 1 > $aObjectQuota['quota_number']))
  903. ) {
  904. $this->setErrorCode(BX_DOL_STORAGE_ERR_OBJECT_QUOTA_EXCEEDED);
  905. return false;
  906. }
  907. $aUserQuota = $this->_oDb->getUserQuota($aFileInfo['profile_id']);
  908. if (
  909. ($aUserQuota['quota_size'] && ($aUserQuota['current_size'] + $aFileInfo['size'] > $aUserQuota['quota_size']))
  910. ||
  911. ($aUserQuota['quota_number'] && ($aUserQuota['current_number'] + 1 > $aUserQuota['quota_number']))
  912. ) {
  913. $this->setErrorCode(BX_DOL_STORAGE_ERR_USER_QUOTA_EXCEEDED);
  914. return false;
  915. }
  916. $this->setErrorCode(BX_DOL_STORAGE_ERR_OK);
  917. $bRet = true;
  918. bx_alert($this->_aObject['object'], 'before_file_add', 0, $aFileInfo['profile_id'], array('file_info' => $aFileInfo, 'return_value' => &$bRet));
  919. return $bRet;
  920. }
  921. protected function onFileAdded ($aFileInfo)
  922. {
  923. // TODO: update site quota - BX_DOL_STORAGE_ERR_SITE_QUOTA_EXCEEDED
  924. if (!$this->_oDb->updateStorageObjectQuota($aFileInfo['size'], 1)) {
  925. $this->setErrorCode(BX_DOL_STORAGE_ERR_DB);
  926. return false;
  927. }
  928. if (!$this->_oDb->updateUserQuota($aFileInfo['profile_id'], $aFileInfo['size'], 1)) {
  929. $this->setErrorCode(BX_DOL_STORAGE_ERR_DB);
  930. return false;
  931. }
  932. if (!$this->insertGhost ($aFileInfo['id'], $aFileInfo['profile_id'], $aFileInfo['content_id'])) {
  933. $this->setErrorCode(BX_DOL_STORAGE_ERR_DB);
  934. return false;
  935. }
  936. $this->setErrorCode(BX_DOL_STORAGE_ERR_OK);
  937. $bRet = true;
  938. bx_alert($this->_aObject['object'], 'file_added', $aFileInfo['id'], $aFileInfo['profile_id'], array('file_info' => $aFileInfo, 'return_value' => &$bRet));
  939. return $bRet;
  940. }
  941. function insertGhost($iFileId, $iProfileId, $iContentId = 0)
  942. {
  943. return $this->_oDb->insertGhosts ($iFileId, $iProfileId, $iContentId);
  944. }
  945. function onBeforeFileDelete ($aFileInfo, $iProfileId)
  946. {
  947. $this->setErrorCode(BX_DOL_STORAGE_ERR_OK);
  948. $bRet = true;
  949. bx_alert($this->_aObject['object'], 'before_file_delete', $aFileInfo['id'], $iProfileId, array('file_info' => $aFileInfo, 'return_value' => &$bRet));
  950. return $bRet;
  951. }
  952. function onFileDeleted ($aFileInfo, $iProfileId, $aGhost = false)
  953. {
  954. // TODO: update site quota
  955. if (!$this->_oDb->updateStorageObjectQuota(-$aFileInfo['size'], -1)) {
  956. $this->setErrorCode(BX_DOL_STORAGE_ERR_DB);
  957. return false;
  958. }
  959. if (!$this->_oDb->updateUserQuota($aFileInfo['profile_id'], -$aFileInfo['size'], -1)) {
  960. $this->setErrorCode(BX_DOL_STORAGE_ERR_DB);
  961. return false;
  962. }
  963. $this->setErrorCode(BX_DOL_STORAGE_ERR_OK);
  964. $bRet = true;
  965. bx_alert($this->_aObject['object'], 'file_deleted', $aFileInfo['id'], $iProfileId, array('file_info' => $aFileInfo, 'ghost' => $aGhost, 'return_value' => &$bRet));
  966. return $bRet;
  967. }
  968. // ------------ internal functions
  969. protected function setErrorCode($i)
  970. {
  971. return ($this->_iErrorCode = $i);
  972. }
  973. protected function genRandName($isCheckForUniq = true)
  974. {
  975. $sRandName = strtolower(genRndPwd(32, false));
  976. if ($isCheckForUniq) {
  977. $iTries = 10;
  978. do {
  979. $aFile = $this->_oDb->getFileByRemoteId($sRandName);
  980. $bExist = is_array($aFile) && $aFile;
  981. } while (--$iTries && $bExist);
  982. }
  983. return $sRandName;
  984. }
  985. protected function genPath($s, $iLevels)
  986. {
  987. $sRet = '';
  988. $i = 1;
  989. while ($iLevels-- > 0)
  990. $sRet .= substr($s, 0, $i++) . '/';
  991. return $sRet;
  992. }
  993. protected function genRemoteNamePath ($sPath, $sLocalId, $sExt)
  994. {
  995. return $sPath . $sLocalId;
  996. }
  997. protected function isValidExt ($sExt)
  998. {
  999. switch ($this->_aObject['ext_mode']) {
  1000. case 'allow-deny':
  1001. if ($this->isAllowedExt($sExt))
  1002. return true;
  1003. return false;
  1004. case 'deny-allow':
  1005. if ($this->isDeniedExt($sExt))
  1006. return false;
  1007. return true;
  1008. default:
  1009. return false;
  1010. }
  1011. }
  1012. protected function isAllowedExt ($sExt)
  1013. {
  1014. return $this->isAllowedDeniedExt($sExt, 'ext_allow');
  1015. }
  1016. protected function isDeniedExt ($sExt)
  1017. {
  1018. return $this->isAllowedDeniedExt($sExt, 'ext_deny');
  1019. }
  1020. protected function isAllowedDeniedExt ($sExt, $sExtMode)
  1021. {
  1022. if ('' == $this->_aObject[$sExtMode])
  1023. return false;
  1024. if (!is_array($this->_aObject[$sExtMode]))
  1025. $this->_aObject[$sExtMode] = explode(',', $this->_aObject[$sExtMode]);
  1026. return in_array ($sExt, $this->_aObject[$sExtMode]);
  1027. }
  1028. protected function queueFiles($aFiles)
  1029. {
  1030. if (!$aFiles)
  1031. return 0;
  1032. $a = array();
  1033. foreach ($aFiles as $aFile)
  1034. $a[] = $aFile['id'];
  1035. return $this->queueFilesForDeletion($a);
  1036. }
  1037. }
  1038. /**
  1039. * Handle file uploads via XMLHttpRequest
  1040. */
  1041. class BxDolStorageHelperXhr
  1042. {
  1043. protected $sName;
  1044. function __construct ($aParams)
  1045. {
  1046. $this->sName = $aParams['name'];
  1047. }
  1048. function getImmediateError()
  1049. {
  1050. return BX_DOL_STORAGE_ERR_OK;
  1051. }
  1052. function save($path)
  1053. {
  1054. $input = fopen("php://input", "r");
  1055. $temp = tmpfile();
  1056. $realSize = stream_copy_to_stream($input, $temp);
  1057. fclose($input);
  1058. if (false === $this->getSize() || $realSize != $this->getSize())
  1059. return false;
  1060. $target = fopen($path, "w");
  1061. fseek($temp, 0, SEEK_SET);
  1062. stream_copy_to_stream($temp, $target);
  1063. fclose($target);
  1064. fclose($temp);
  1065. return true;
  1066. }
  1067. function getName()
  1068. {
  1069. return $this->sName;
  1070. }
  1071. function getSize()
  1072. {
  1073. if (isset($_SERVER["CONTENT_LENGTH"]))
  1074. return (int)$_SERVER["CONTENT_LENGTH"];
  1075. else
  1076. return false;
  1077. }
  1078. }
  1079. /**
  1080. * Handle file uploads via regular form post (uses the $_FILES array)
  1081. */
  1082. class BxDolStorageHelperForm
  1083. {
  1084. protected $aFile;
  1085. function __construct ($aParams)
  1086. {
  1087. $this->aFile = $aParams['file'];
  1088. }
  1089. function getImmediateError()
  1090. {
  1091. if (!$this->aFile['size'] || !$this->aFile['tmp_name'])
  1092. return BX_DOL_STORAGE_ERR_NO_FILE;
  1093. if (UPLOAD_ERR_OK != $this->aFile['error'])
  1094. return (int)$this->aFile['error'];
  1095. return BX_DOL_STORAGE_ERR_OK;
  1096. }
  1097. function save($path)
  1098. {
  1099. if (!move_uploaded_file($this->aFile['tmp_name'], $path)){
  1100. return false;
  1101. }
  1102. return true;
  1103. }
  1104. function getName()
  1105. {
  1106. return $this->aFile['name'];
  1107. }
  1108. function getSize()
  1109. {
  1110. return $this->aFile['size'];
  1111. }
  1112. }
  1113. /**
  1114. * Store file from local file path
  1115. */
  1116. class BxDolStorageHelperPath
  1117. {
  1118. protected $sPath;
  1119. function __construct ($aParams)
  1120. {
  1121. $this->sPath = $aParams['path'];
  1122. }
  1123. function getImmediateError()
  1124. {
  1125. if (!$this->sPath || !file_exists($this->sPath))
  1126. return BX_DOL_STORAGE_ERR_NO_FILE;
  1127. return BX_DOL_STORAGE_ERR_OK;
  1128. }
  1129. function save($path)
  1130. {
  1131. if (!copy($this->sPath, $path)) {
  1132. return false;
  1133. }
  1134. return true;
  1135. }
  1136. function getName()
  1137. {
  1138. return pathinfo($this->sPath, PATHINFO_BASENAME);
  1139. }
  1140. function getSize()
  1141. {
  1142. return filesize($this->sPath);
  1143. }
  1144. }
  1145. /**
  1146. * Store file from URL
  1147. */
  1148. class BxDolStorageHelperUrl extends BxDolStorageHelperPath
  1149. {
  1150. protected $aMime2Ext = array (
  1151. 'image/bmp' => 'bmp',
  1152. 'image/gif' => 'gif',
  1153. 'image/jpeg' => 'jpg',
  1154. 'image/pjpeg' => 'jpg',
  1155. 'image/png' => 'png',
  1156. );
  1157. function __construct ($aParams)
  1158. {
  1159. $aParams['path'] = '';
  1160. $sExt = pathinfo(parse_url($aParams['url'], PHP_URL_PATH), PATHINFO_EXTENSION);
  1161. if ($sTmpFilename = tempnam(BX_DIRECTORY_PATH_TMP, '')) {
  1162. $s = '';
  1163. if (!$sExt) {
  1164. $s = @file_get_contents($aParams['url']);
  1165. $oFinfo = new finfo(FILEINFO_MIME_TYPE);
  1166. $sMime = $oFinfo->buffer($s);
  1167. if (isset($this->aMime2Ext[$sMime]))
  1168. $sExt = $this->aMime2Ext[$sMime];
  1169. }
  1170. $aParams['path'] = $sTmpFilename . '.' . $sExt;
  1171. @rename($sTmpFilename, $aParams['path']);
  1172. if ($s) {
  1173. file_put_contents($aParams['path'], $s);
  1174. }
  1175. else {
  1176. $hRead = fopen($aParams['url'], "rb");
  1177. $hWrite = fopen($aParams['path'], "wb");
  1178. if (false !== $hRead && false !== $hWrite) {
  1179. while (!feof($hRead)) {
  1180. $data = fread($hRead, 8192);
  1181. if (false === fwrite($hWrite, $data)) {
  1182. fclose($hWrite);
  1183. file_put_contents($aParams['path'], '');
  1184. break;
  1185. }
  1186. }
  1187. fclose($hRead);
  1188. fclose($hWrite);
  1189. }
  1190. }
  1191. }
  1192. parent::__construct($aParams);
  1193. }
  1194. function getImmediateError()
  1195. {
  1196. $iRet = parent::getImmediateError();
  1197. if (BX_DOL_STORAGE_ERR_OK != $iRet)
  1198. return $iRet;
  1199. return $this->getSize() > 0 ? BX_DOL_STORAGE_ERR_OK : BX_DOL_STORAGE_INVALID_FILE;
  1200. }
  1201. function __destruct()
  1202. {
  1203. @unlink($this->sPath);
  1204. }
  1205. }
  1206. /**
  1207. * Handle file uploads from the same or another storage object
  1208. */
  1209. class BxDolStorageHelperStorage
  1210. {
  1211. protected $iFileId;
  1212. protected $oStorage;
  1213. protected $aFile;
  1214. function __construct ($aParams)
  1215. {
  1216. $this->iFileId = $aParams['id'];
  1217. $this->oStorage = BxDolStorage::getObjectInstance($aParams['storage']);
  1218. $this->aFile = false;
  1219. if ($this->oStorage)
  1220. $this->aFile = $this->oStorage->getFile($this->iFileId);
  1221. }
  1222. function getImmediateError()
  1223. {
  1224. if (!$this->iFileId)
  1225. return BX_DOL_STORAGE_ERR_NO_FILE;
  1226. if (!$this->oStorage)
  1227. return BX_DOL_STORAGE_ERR_ENGINE_GET;
  1228. if (!$this->aFile)
  1229. return BX_DOL_STORAGE_ERR_NO_FILE;
  1230. return BX_DOL_STORAGE_ERR_OK;
  1231. }
  1232. function save($path)
  1233. {
  1234. $s = bx_file_get_contents ($this->oStorage->getFileUrlById($this->iFileId));
  1235. if (!$s)
  1236. return false;
  1237. return file_put_contents($path, $s) ? true : false;
  1238. }
  1239. function getName()
  1240. {
  1241. return $this->aFile['file_name'];
  1242. }
  1243. function getSize()
  1244. {
  1245. return $this->aFile['size'];
  1246. }
  1247. }
  1248. /** @} */