* Maintainer: Hypolite Petovan */ use Friendica\App; use Friendica\Core\Hook; use Friendica\Core\Logger; use Friendica\Core\Renderer; use Friendica\DI; use Friendica\Util\Strings; global $js_upload_jsonresponse; global $js_upload_result; function js_upload_install() { Hook::register('photo_upload_form', __FILE__, 'js_upload_form'); Hook::register('photo_post_init', __FILE__, 'js_upload_post_init'); Hook::register('photo_post_file', __FILE__, 'js_upload_post_file'); Hook::register('photo_post_end', __FILE__, 'js_upload_post_end'); } function js_upload_form(array &$b) { $b['default_upload'] = false; DI::page()->registerStylesheet(__DIR__ . '/file-uploader/client/fileuploader.css'); DI::page()->registerFooterScript(__DIR__ . '/file-uploader/client/fileuploader.js'); $tpl = Renderer::getMarkupTemplate('js_upload.tpl', 'addon/js_upload'); $b['addon_text'] .= Renderer::replaceMacros($tpl, [ '$upload_msg' => DI::l10n()->t('Select files for upload'), '$drop_msg' => DI::l10n()->t('Drop files here to upload'), '$cancel' => DI::l10n()->t('Cancel'), '$failed' => DI::l10n()->t('Failed'), '$post_url' => $b['post_url'], '$maximagesize' => Strings::getBytesFromShorthand(DI::config()->get('system', 'maximagesize')), ]); } function js_upload_post_init(array &$b) { global $js_upload_result, $js_upload_jsonresponse; // list of valid extensions $allowedExtensions = ['jpeg', 'gif', 'png', 'jpg']; // max file size in bytes $sizeLimit = Strings::getBytesFromShorthand(DI::config()->get('system', 'maximagesize')); $uploader = new qqFileUploader($allowedExtensions, $sizeLimit); $result = $uploader->handleUpload(); // to pass data through iframe you will need to encode all html tags $js_upload_jsonresponse = htmlspecialchars(json_encode($result), ENT_NOQUOTES); if (isset($result['error'])) { Logger::info('mod/photos.php: photos_post(): error uploading photo: ' . $result['error']); echo json_encode($result); exit(); } $js_upload_result = $result; } function js_upload_post_file(array &$b) { global $js_upload_result; $result = $js_upload_result; $b['src'] = $result['path']; $b['filename'] = $result['filename']; $b['filesize'] = filesize($b['src']); } function js_upload_post_end(int &$b) { global $js_upload_jsonresponse; Logger::notice('upload_post_end'); if (!empty($js_upload_jsonresponse)) { echo $js_upload_jsonresponse; exit(); } } /** * Handle file uploads via XMLHttpRequest */ class qqUploadedFileXhr { private $pathnm = ''; /** * Save the file in the temp dir. * * @return boolean TRUE on success */ function save() { $input = fopen('php://input', 'r'); $upload_dir = DI::config()->get('system', 'tempdir'); if (!$upload_dir) $upload_dir = sys_get_temp_dir(); $this->pathnm = tempnam($upload_dir, 'frn'); $temp = fopen($this->pathnm, 'w'); $realSize = stream_copy_to_stream($input, $temp); fclose($input); fclose($temp); if ($realSize != $this->getSize()) { return false; } return true; } function getPath() { return $this->pathnm; } function getName() { return $_GET['qqfile']; } function getSize() { if (isset($_SERVER['CONTENT_LENGTH'])) { return (int)$_SERVER['CONTENT_LENGTH']; } else { throw new Exception('Getting content length is not supported.'); } } } /** * Handle file uploads via regular form post (uses the $_FILES array) */ class qqUploadedFileForm { /** * Save the file to the specified path * * @return boolean TRUE on success */ function save() { return true; } function getPath() { return $_FILES['qqfile']['tmp_name']; } function getName() { return $_FILES['qqfile']['name']; } function getSize() { return $_FILES['qqfile']['size']; } } class qqFileUploader { private $allowedExtensions = []; private $sizeLimit = 10485760; private $file; function __construct(array $allowedExtensions = [], $sizeLimit = 10485760) { $allowedExtensions = array_map('strtolower', $allowedExtensions); $this->allowedExtensions = $allowedExtensions; $this->sizeLimit = $sizeLimit; if (isset($_GET['qqfile'])) { $this->file = new qqUploadedFileXhr(); } elseif (isset($_FILES['qqfile'])) { $this->file = new qqUploadedFileForm(); } else { $this->file = false; } } /** * Returns array('success'=>true) or array('error'=>'error message') */ function handleUpload() { if (!$this->file) { return ['error' => DI::l10n()->t('No files were uploaded.')]; } $size = $this->file->getSize(); if ($size == 0) { return ['error' => DI::l10n()->t('Uploaded file is empty')]; } // if ($size > $this->sizeLimit) { // return array('error' => DI::l10n()->t('Uploaded file is too large')); // } $maximagesize = Strings::getBytesFromShorthand(DI::config()->get('system', 'maximagesize')); if (($maximagesize) && ($size > $maximagesize)) { return ['error' => DI::l10n()->t('Image exceeds size limit of %s', Strings::formatBytes($maximagesize))]; } $pathinfo = pathinfo($this->file->getName()); $filename = $pathinfo['filename']; if (!isset($pathinfo['extension'])) { Logger::warning('extension isn\'t set.', ['filename' => $filename]); } $ext = $pathinfo['extension'] ?? ''; if ($this->allowedExtensions && !in_array(strtolower($ext), $this->allowedExtensions)) { return ['error' => DI::l10n()->t('File has an invalid extension, it should be one of %s.', implode(', ', $this->allowedExtensions))]; } if ($this->file->save()) { return [ 'success' => true, 'path' => $this->file->getPath(), 'filename' => $filename . '.' . $ext ]; } else { return [ 'error' => DI::l10n()->t('Upload was cancelled, or server error encountered'), 'path' => $this->file->getPath(), 'filename' => $filename . '.' . $ext ]; } } }