439 lines
13 KiB
PHP
439 lines
13 KiB
PHP
<?php
|
|
|
|
namespace Widget;
|
|
|
|
use Typecho\Common;
|
|
use Typecho\Config;
|
|
use Typecho\Date;
|
|
use Typecho\Db\Exception;
|
|
use Typecho\Plugin;
|
|
use Widget\Base\Contents;
|
|
|
|
if (!defined('__TYPECHO_ROOT_DIR__')) {
|
|
exit;
|
|
}
|
|
|
|
/**
|
|
* 上传组件
|
|
*
|
|
* @author qining
|
|
* @category typecho
|
|
* @package Widget
|
|
*/
|
|
class Upload extends Contents implements ActionInterface
|
|
{
|
|
//上传文件目录
|
|
public const UPLOAD_DIR = '/usr/uploads';
|
|
|
|
/**
|
|
* 删除文件
|
|
*
|
|
* @param array $content 文件相关信息
|
|
* @return bool
|
|
*/
|
|
public static function deleteHandle(array $content): bool
|
|
{
|
|
$result = Plugin::factory(Upload::class)->trigger($hasDeleted)->call('deleteHandle', $content);
|
|
if ($hasDeleted) {
|
|
return $result;
|
|
}
|
|
|
|
return @unlink(__TYPECHO_ROOT_DIR__ . '/' . $content['attachment']->path);
|
|
}
|
|
|
|
/**
|
|
* 获取实际文件绝对访问路径
|
|
*
|
|
* @param Config $attachment 文件相关信息
|
|
* @return string
|
|
*/
|
|
public static function attachmentHandle(Config $attachment): string
|
|
{
|
|
$result = Plugin::factory(Upload::class)->trigger($hasPlugged)->call('attachmentHandle', $attachment);
|
|
if ($hasPlugged) {
|
|
return $result;
|
|
}
|
|
|
|
$options = Options::alloc();
|
|
return Common::url(
|
|
$attachment->path,
|
|
defined('__TYPECHO_UPLOAD_URL__') ? __TYPECHO_UPLOAD_URL__ : $options->siteUrl
|
|
);
|
|
}
|
|
|
|
/**
|
|
* 获取实际文件数据
|
|
*
|
|
* @param array $content
|
|
* @return string
|
|
*/
|
|
public static function attachmentDataHandle(array $content): string
|
|
{
|
|
$result = Plugin::factory(Upload::class)->trigger($hasPlugged)->call('attachmentDataHandle', $content);
|
|
if ($hasPlugged) {
|
|
return $result;
|
|
}
|
|
|
|
return file_get_contents(
|
|
Common::url(
|
|
$content['attachment']->path,
|
|
defined('__TYPECHO_UPLOAD_ROOT_DIR__') ? __TYPECHO_UPLOAD_ROOT_DIR__ : __TYPECHO_ROOT_DIR__
|
|
)
|
|
);
|
|
}
|
|
|
|
/**
|
|
* 初始化函数
|
|
*/
|
|
public function action()
|
|
{
|
|
if ($this->user->pass('contributor', true) && $this->request->isPost()) {
|
|
$this->security->protect();
|
|
if ($this->request->is('do=modify&cid')) {
|
|
$this->modify();
|
|
} else {
|
|
$this->upload();
|
|
}
|
|
} else {
|
|
$this->response->setStatus(403);
|
|
}
|
|
}
|
|
|
|
/**
|
|
* 执行升级程序
|
|
*
|
|
* @throws Exception
|
|
*/
|
|
public function modify()
|
|
{
|
|
if (!empty($_FILES)) {
|
|
$file = array_pop($_FILES);
|
|
if (0 == $file['error'] && is_uploaded_file($file['tmp_name'])) {
|
|
$this->db->fetchRow(
|
|
$this->select()->where(
|
|
'table.contents.cid = ?',
|
|
$this->request->filter('int')->get('cid')
|
|
)
|
|
->where('table.contents.type = ?', 'attachment'),
|
|
[$this, 'push']
|
|
);
|
|
|
|
if (!$this->have()) {
|
|
$this->response->setStatus(404);
|
|
exit;
|
|
}
|
|
|
|
if (!$this->allow('edit')) {
|
|
$this->response->setStatus(403);
|
|
exit;
|
|
}
|
|
|
|
// xhr的send无法支持utf8
|
|
if ($this->request->isAjax()) {
|
|
$file['name'] = urldecode($file['name']);
|
|
}
|
|
|
|
$result = self::modifyHandle($this->toColumn(['cid', 'attachment', 'parent']), $file);
|
|
|
|
if (false !== $result) {
|
|
self::pluginHandle()->call('beforeModify', $result);
|
|
|
|
$this->update([
|
|
'text' => json_encode($result)
|
|
], $this->db->sql()->where('cid = ?', $this->cid));
|
|
|
|
$this->db->fetchRow($this->select()->where('table.contents.cid = ?', $this->cid)
|
|
->where('table.contents.type = ?', 'attachment'), [$this, 'push']);
|
|
|
|
/** 增加插件接口 */
|
|
self::pluginHandle()->call('modify', $this);
|
|
|
|
$this->response->throwJson([$this->attachment->url, [
|
|
'cid' => $this->cid,
|
|
'title' => $this->attachment->name,
|
|
'type' => $this->attachment->type,
|
|
'size' => $this->attachment->size,
|
|
'bytes' => number_format(ceil($this->attachment->size / 1024)) . ' Kb',
|
|
'isImage' => $this->attachment->isImage,
|
|
'url' => $this->attachment->url,
|
|
'permalink' => $this->permalink
|
|
]]);
|
|
}
|
|
}
|
|
}
|
|
|
|
$this->response->throwJson(false);
|
|
}
|
|
|
|
/**
|
|
* 修改文件处理函数,如果需要实现自己的文件哈希或者特殊的文件系统,请在options表里把modifyHandle改成自己的函数
|
|
*
|
|
* @param array $content 老文件
|
|
* @param array $file 新上传的文件
|
|
* @return mixed
|
|
*/
|
|
public static function modifyHandle(array $content, array $file)
|
|
{
|
|
if (empty($file['name'])) {
|
|
return false;
|
|
}
|
|
|
|
$result = self::pluginHandle()->trigger($hasModified)->call('modifyHandle', $content, $file);
|
|
if ($hasModified) {
|
|
return $result;
|
|
}
|
|
|
|
$ext = self::getSafeName($file['name']);
|
|
|
|
if ($content['attachment']->type != $ext) {
|
|
return false;
|
|
}
|
|
|
|
$path = Common::url(
|
|
$content['attachment']->path,
|
|
defined('__TYPECHO_UPLOAD_ROOT_DIR__') ? __TYPECHO_UPLOAD_ROOT_DIR__ : __TYPECHO_ROOT_DIR__
|
|
);
|
|
$dir = dirname($path);
|
|
|
|
//创建上传目录
|
|
if (!is_dir($dir)) {
|
|
if (!self::makeUploadDir($dir)) {
|
|
return false;
|
|
}
|
|
}
|
|
|
|
if (isset($file['tmp_name'])) {
|
|
@unlink($path);
|
|
|
|
//移动上传文件
|
|
if (!@move_uploaded_file($file['tmp_name'], $path)) {
|
|
return false;
|
|
}
|
|
} elseif (isset($file['bytes'])) {
|
|
@unlink($path);
|
|
|
|
//直接写入文件
|
|
if (!file_put_contents($path, $file['bytes'])) {
|
|
return false;
|
|
}
|
|
} elseif (isset($file['bits'])) {
|
|
@unlink($path);
|
|
|
|
//直接写入文件
|
|
if (!file_put_contents($path, $file['bits'])) {
|
|
return false;
|
|
}
|
|
} else {
|
|
return false;
|
|
}
|
|
|
|
if (!isset($file['size'])) {
|
|
$file['size'] = filesize($path);
|
|
}
|
|
|
|
//返回相对存储路径
|
|
return [
|
|
'name' => $content['attachment']->name,
|
|
'path' => $content['attachment']->path,
|
|
'size' => $file['size'],
|
|
'type' => $content['attachment']->type,
|
|
'mime' => $content['attachment']->mime
|
|
];
|
|
}
|
|
|
|
/**
|
|
* 获取安全的文件名
|
|
*
|
|
* @param string $name
|
|
* @return string
|
|
*/
|
|
private static function getSafeName(string &$name): string
|
|
{
|
|
$name = str_replace(['"', '<', '>'], '', $name);
|
|
$name = str_replace('\\', '/', $name);
|
|
$name = false === strpos($name, '/') ? ('a' . $name) : str_replace('/', '/a', $name);
|
|
$info = pathinfo($name);
|
|
$name = substr($info['basename'], 1);
|
|
|
|
return isset($info['extension']) ? strtolower($info['extension']) : '';
|
|
}
|
|
|
|
/**
|
|
* 创建上传路径
|
|
*
|
|
* @param string $path 路径
|
|
* @return boolean
|
|
*/
|
|
private static function makeUploadDir(string $path): bool
|
|
{
|
|
$path = preg_replace("/\\\+/", '/', $path);
|
|
$current = rtrim($path, '/');
|
|
$last = $current;
|
|
|
|
while (!is_dir($current) && false !== strpos($path, '/')) {
|
|
$last = $current;
|
|
$current = dirname($current);
|
|
}
|
|
|
|
if ($last == $current) {
|
|
return true;
|
|
}
|
|
|
|
if (!@mkdir($last, 0755)) {
|
|
return false;
|
|
}
|
|
|
|
return self::makeUploadDir($path);
|
|
}
|
|
|
|
/**
|
|
* 执行升级程序
|
|
*
|
|
* @throws Exception
|
|
*/
|
|
public function upload()
|
|
{
|
|
if (!empty($_FILES)) {
|
|
$file = array_pop($_FILES);
|
|
if (0 == $file['error'] && is_uploaded_file($file['tmp_name'])) {
|
|
// xhr的send无法支持utf8
|
|
if ($this->request->isAjax()) {
|
|
$file['name'] = urldecode($file['name']);
|
|
}
|
|
$result = self::uploadHandle($file);
|
|
|
|
if (false !== $result) {
|
|
self::pluginHandle()->call('beforeUpload', $result);
|
|
|
|
$struct = [
|
|
'title' => $result['name'],
|
|
'slug' => $result['name'],
|
|
'type' => 'attachment',
|
|
'status' => 'publish',
|
|
'text' => json_encode($result),
|
|
'allowComment' => 1,
|
|
'allowPing' => 0,
|
|
'allowFeed' => 1
|
|
];
|
|
|
|
if (isset($this->request->cid)) {
|
|
$cid = $this->request->filter('int')->get('cid');
|
|
|
|
if ($this->isWriteable($this->db->sql()->where('cid = ?', $cid))) {
|
|
$struct['parent'] = $cid;
|
|
}
|
|
}
|
|
|
|
$insertId = $this->insert($struct);
|
|
|
|
$this->db->fetchRow($this->select()->where('table.contents.cid = ?', $insertId)
|
|
->where('table.contents.type = ?', 'attachment'), [$this, 'push']);
|
|
|
|
/** 增加插件接口 */
|
|
self::pluginHandle()->call('upload', $this);
|
|
|
|
$this->response->throwJson([$this->attachment->url, [
|
|
'cid' => $insertId,
|
|
'title' => $this->attachment->name,
|
|
'type' => $this->attachment->type,
|
|
'size' => $this->attachment->size,
|
|
'bytes' => number_format(ceil($this->attachment->size / 1024)) . ' Kb',
|
|
'isImage' => $this->attachment->isImage,
|
|
'url' => $this->attachment->url,
|
|
'permalink' => $this->permalink
|
|
]]);
|
|
}
|
|
}
|
|
}
|
|
|
|
$this->response->throwJson(false);
|
|
}
|
|
|
|
/**
|
|
* 上传文件处理函数,如果需要实现自己的文件哈希或者特殊的文件系统,请在options表里把uploadHandle改成自己的函数
|
|
*
|
|
* @param array $file 上传的文件
|
|
* @return mixed
|
|
*/
|
|
public static function uploadHandle(array $file)
|
|
{
|
|
if (empty($file['name'])) {
|
|
return false;
|
|
}
|
|
|
|
$result = self::pluginHandle()->trigger($hasUploaded)->call('uploadHandle', $file);
|
|
if ($hasUploaded) {
|
|
return $result;
|
|
}
|
|
|
|
$ext = self::getSafeName($file['name']);
|
|
|
|
if (!self::checkFileType($ext)) {
|
|
return false;
|
|
}
|
|
|
|
$date = new Date();
|
|
$path = Common::url(
|
|
defined('__TYPECHO_UPLOAD_DIR__') ? __TYPECHO_UPLOAD_DIR__ : self::UPLOAD_DIR,
|
|
defined('__TYPECHO_UPLOAD_ROOT_DIR__') ? __TYPECHO_UPLOAD_ROOT_DIR__ : __TYPECHO_ROOT_DIR__
|
|
) . '/' . $date->year . '/' . $date->month;
|
|
|
|
//创建上传目录
|
|
if (!is_dir($path)) {
|
|
if (!self::makeUploadDir($path)) {
|
|
return false;
|
|
}
|
|
}
|
|
|
|
//获取文件名
|
|
$fileName = sprintf('%u', crc32(uniqid())) . '.' . $ext;
|
|
$path = $path . '/' . $fileName;
|
|
|
|
if (isset($file['tmp_name'])) {
|
|
//移动上传文件
|
|
if (!@move_uploaded_file($file['tmp_name'], $path)) {
|
|
return false;
|
|
}
|
|
} elseif (isset($file['bytes'])) {
|
|
//直接写入文件
|
|
if (!file_put_contents($path, $file['bytes'])) {
|
|
return false;
|
|
}
|
|
} elseif (isset($file['bits'])) {
|
|
//直接写入文件
|
|
if (!file_put_contents($path, $file['bits'])) {
|
|
return false;
|
|
}
|
|
} else {
|
|
return false;
|
|
}
|
|
|
|
if (!isset($file['size'])) {
|
|
$file['size'] = filesize($path);
|
|
}
|
|
|
|
//返回相对存储路径
|
|
return [
|
|
'name' => $file['name'],
|
|
'path' => (defined('__TYPECHO_UPLOAD_DIR__') ? __TYPECHO_UPLOAD_DIR__ : self::UPLOAD_DIR)
|
|
. '/' . $date->year . '/' . $date->month . '/' . $fileName,
|
|
'size' => $file['size'],
|
|
'type' => $ext,
|
|
'mime' => Common::mimeContentType($path)
|
|
];
|
|
}
|
|
|
|
/**
|
|
* 检查文件名
|
|
*
|
|
* @access private
|
|
* @param string $ext 扩展名
|
|
* @return boolean
|
|
*/
|
|
public static function checkFileType(string $ext): bool
|
|
{
|
|
$options = Options::alloc();
|
|
return in_array($ext, $options->allowedAttachmentTypes);
|
|
}
|
|
}
|