2011-04-17 01:18:06 +04:00
|
|
|
<?php
|
|
|
|
|
|
|
|
// Firefox and Konqueror tries to download application/json for me. --Arthur
|
2012-05-03 14:23:29 +04:00
|
|
|
OCP\JSON::setContentTypeHeader('text/plain');
|
2011-04-17 01:18:06 +04:00
|
|
|
|
2013-06-25 14:24:14 +04:00
|
|
|
// If a directory token is sent along check if public upload is permitted.
|
|
|
|
// If not, check the login.
|
|
|
|
// If no token is sent along, rely on login only
|
|
|
|
|
2013-01-19 03:31:09 +04:00
|
|
|
$l = OC_L10N::get('files');
|
2013-07-01 17:39:11 +04:00
|
|
|
if (empty($_POST['dirToken'])) {
|
2013-07-01 17:37:52 +04:00
|
|
|
// The standard case, files are uploaded through logged in users :)
|
|
|
|
OCP\JSON::checkLoggedIn();
|
|
|
|
$dir = isset($_POST['dir']) ? $_POST['dir'] : "";
|
|
|
|
if (!$dir || empty($dir) || $dir === false) {
|
|
|
|
OCP\JSON::error(array('data' => array_merge(array('message' => $l->t('Unable to set upload directory.')))));
|
|
|
|
die();
|
|
|
|
}
|
2013-06-25 14:24:14 +04:00
|
|
|
} else {
|
2013-07-01 17:37:52 +04:00
|
|
|
$linkItem = OCP\Share::getShareByToken($_POST['dirToken']);
|
|
|
|
if ($linkItem === false) {
|
|
|
|
OCP\JSON::error(array('data' => array_merge(array('message' => $l->t('Invalid Token')))));
|
|
|
|
die();
|
|
|
|
}
|
|
|
|
|
|
|
|
if (!($linkItem['permissions'] & OCP\PERMISSION_CREATE)) {
|
|
|
|
OCP\JSON::checkLoggedIn();
|
|
|
|
} else {
|
2013-07-05 19:39:41 +04:00
|
|
|
// resolve reshares
|
|
|
|
$rootLinkItem = OCP\Share::resolveReShare($linkItem);
|
|
|
|
|
|
|
|
// Setup FS with owner
|
2013-07-05 15:45:21 +04:00
|
|
|
OC_Util::tearDownFS();
|
2013-07-05 19:39:41 +04:00
|
|
|
OC_Util::setupFS($rootLinkItem['uid_owner']);
|
2013-07-01 17:37:52 +04:00
|
|
|
|
|
|
|
// The token defines the target directory (security reasons)
|
2013-07-05 19:39:41 +04:00
|
|
|
$path = \OC\Files\Filesystem::getPath($linkItem['file_source']);
|
2013-07-01 17:37:52 +04:00
|
|
|
$dir = sprintf(
|
|
|
|
"/%s/%s",
|
2013-07-05 19:39:41 +04:00
|
|
|
$path,
|
2013-07-01 17:37:52 +04:00
|
|
|
isset($_POST['subdir']) ? $_POST['subdir'] : ''
|
|
|
|
);
|
|
|
|
|
|
|
|
if (!$dir || empty($dir) || $dir === false) {
|
|
|
|
OCP\JSON::error(array('data' => array_merge(array('message' => $l->t('Unable to set upload directory.')))));
|
|
|
|
die();
|
|
|
|
}
|
|
|
|
}
|
2013-06-25 14:24:14 +04:00
|
|
|
}
|
|
|
|
|
|
|
|
|
|
|
|
OCP\JSON::callCheck();
|
2011-04-17 01:18:06 +04:00
|
|
|
|
2013-02-01 23:29:02 +04:00
|
|
|
|
2013-01-19 03:31:09 +04:00
|
|
|
// get array with current storage stats (e.g. max file size)
|
|
|
|
$storageStats = \OCA\files\lib\Helper::buildFileStorageStatistics($dir);
|
2012-12-20 20:16:01 +04:00
|
|
|
|
2011-09-23 22:03:39 +04:00
|
|
|
if (!isset($_FILES['files'])) {
|
2013-01-19 03:31:09 +04:00
|
|
|
OCP\JSON::error(array('data' => array_merge(array('message' => $l->t('No file was uploaded. Unknown error')), $storageStats)));
|
2011-09-23 22:03:39 +04:00
|
|
|
exit();
|
|
|
|
}
|
2013-01-03 01:15:43 +04:00
|
|
|
|
2011-09-23 22:03:39 +04:00
|
|
|
foreach ($_FILES['files']['error'] as $error) {
|
|
|
|
if ($error != 0) {
|
|
|
|
$errors = array(
|
2013-01-29 00:09:18 +04:00
|
|
|
UPLOAD_ERR_OK => $l->t('There is no error, the file uploaded with success'),
|
|
|
|
UPLOAD_ERR_INI_SIZE => $l->t('The uploaded file exceeds the upload_max_filesize directive in php.ini: ')
|
2013-07-01 17:37:52 +04:00
|
|
|
. ini_get('upload_max_filesize'),
|
2013-02-15 19:04:18 +04:00
|
|
|
UPLOAD_ERR_FORM_SIZE => $l->t('The uploaded file exceeds the MAX_FILE_SIZE directive that was specified in the HTML form'),
|
2013-01-29 00:09:18 +04:00
|
|
|
UPLOAD_ERR_PARTIAL => $l->t('The uploaded file was only partially uploaded'),
|
|
|
|
UPLOAD_ERR_NO_FILE => $l->t('No file was uploaded'),
|
2013-01-19 03:31:09 +04:00
|
|
|
UPLOAD_ERR_NO_TMP_DIR => $l->t('Missing a temporary folder'),
|
|
|
|
UPLOAD_ERR_CANT_WRITE => $l->t('Failed to write to disk'),
|
2011-09-23 22:03:39 +04:00
|
|
|
);
|
2013-01-19 03:31:09 +04:00
|
|
|
OCP\JSON::error(array('data' => array_merge(array('message' => $errors[$error]), $storageStats)));
|
2011-09-23 22:03:39 +04:00
|
|
|
exit();
|
|
|
|
}
|
|
|
|
}
|
2013-01-19 03:31:09 +04:00
|
|
|
$files = $_FILES['files'];
|
2011-07-19 22:23:33 +04:00
|
|
|
|
2013-09-06 19:53:58 +04:00
|
|
|
$error = false;
|
2011-08-15 22:37:50 +04:00
|
|
|
|
2013-07-05 19:39:41 +04:00
|
|
|
$maxUploadFileSize = $storageStats['uploadMaxFilesize'];
|
|
|
|
$maxHumanFileSize = OCP\Util::humanFileSize($maxUploadFileSize);
|
2013-01-29 00:09:18 +04:00
|
|
|
|
2013-01-19 03:31:09 +04:00
|
|
|
$totalSize = 0;
|
|
|
|
foreach ($files['size'] as $size) {
|
|
|
|
$totalSize += $size;
|
2011-08-15 22:37:50 +04:00
|
|
|
}
|
2013-07-05 19:39:41 +04:00
|
|
|
if ($maxUploadFileSize >= 0 and $totalSize > $maxUploadFileSize) {
|
2013-02-08 02:59:14 +04:00
|
|
|
OCP\JSON::error(array('data' => array('message' => $l->t('Not enough storage available'),
|
2013-07-05 19:39:41 +04:00
|
|
|
'uploadMaxFilesize' => $maxUploadFileSize,
|
|
|
|
'maxHumanFilesize' => $maxHumanFileSize)));
|
2011-08-15 22:37:50 +04:00
|
|
|
exit();
|
|
|
|
}
|
|
|
|
|
2013-01-19 03:31:09 +04:00
|
|
|
$result = array();
|
|
|
|
if (strpos($dir, '..') === false) {
|
|
|
|
$fileCount = count($files['name']);
|
|
|
|
for ($i = 0; $i < $fileCount; $i++) {
|
2012-11-16 14:50:57 +04:00
|
|
|
// $path needs to be normalized - this failed within drag'n'drop upload to a sub-folder
|
2013-09-06 19:53:58 +04:00
|
|
|
if (isset($_POST['resolution']) && $_POST['resolution']==='autorename') {
|
|
|
|
// append a number in brackets like 'filename (2).ext'
|
|
|
|
$target = OCP\Files::buildNotExistingFileName(stripslashes($dir), $files['name'][$i]);
|
2013-08-12 14:33:22 +04:00
|
|
|
} else {
|
2013-09-06 19:53:58 +04:00
|
|
|
$target = \OC\Files\Filesystem::normalizePath(stripslashes($dir).'/'.$files['name'][$i]);
|
2013-08-12 14:33:22 +04:00
|
|
|
}
|
2013-09-06 19:53:58 +04:00
|
|
|
|
|
|
|
if ( ! \OC\Files\Filesystem::file_exists($target)
|
|
|
|
|| (isset($_POST['resolution']) && $_POST['resolution']==='replace')
|
|
|
|
) {
|
|
|
|
// upload and overwrite file
|
|
|
|
if (is_uploaded_file($files['tmp_name'][$i]) and \OC\Files\Filesystem::fromTmpFile($files['tmp_name'][$i], $target)) {
|
2013-09-06 20:16:40 +04:00
|
|
|
|
2013-09-06 19:53:58 +04:00
|
|
|
// updated max file size after upload
|
|
|
|
$storageStats = \OCA\files\lib\Helper::buildFileStorageStatistics($dir);
|
|
|
|
|
2013-09-06 20:16:40 +04:00
|
|
|
$meta = \OC\Files\Filesystem::getFileInfo($target);
|
|
|
|
if ($meta === false) {
|
|
|
|
$error = $l->t('Upload failed. Could not get file info.');
|
|
|
|
} else {
|
|
|
|
$result[] = array('status' => 'success',
|
|
|
|
'mime' => $meta['mimetype'],
|
|
|
|
'mtime' => $meta['mtime'],
|
|
|
|
'size' => $meta['size'],
|
|
|
|
'id' => $meta['fileid'],
|
|
|
|
'name' => basename($target),
|
|
|
|
'originalname' => $files['tmp_name'][$i],
|
|
|
|
'uploadMaxFilesize' => $maxUploadFileSize,
|
2013-09-19 19:00:54 +04:00
|
|
|
'maxHumanFilesize' => $maxHumanFileSize,
|
|
|
|
'permissions' => $meta['permissions'],
|
2013-09-06 20:16:40 +04:00
|
|
|
);
|
|
|
|
}
|
|
|
|
|
2013-09-06 19:53:58 +04:00
|
|
|
} else {
|
|
|
|
$error = $l->t('Upload failed. Could not find uploaded file');
|
|
|
|
}
|
|
|
|
|
2013-08-12 14:33:22 +04:00
|
|
|
} else {
|
2013-09-06 19:53:58 +04:00
|
|
|
// file already exists
|
2013-09-06 20:16:40 +04:00
|
|
|
$meta = \OC\Files\Filesystem::getFileInfo($target);
|
|
|
|
if ($meta === false) {
|
|
|
|
$error = $l->t('Upload failed. Could not get file info.');
|
|
|
|
} else {
|
|
|
|
$result[] = array('status' => 'existserror',
|
|
|
|
'mime' => $meta['mimetype'],
|
|
|
|
'mtime' => $meta['mtime'],
|
|
|
|
'size' => $meta['size'],
|
|
|
|
'id' => $meta['fileid'],
|
|
|
|
'name' => basename($target),
|
|
|
|
'originalname' => $files['tmp_name'][$i],
|
|
|
|
'uploadMaxFilesize' => $maxUploadFileSize,
|
2013-09-18 13:22:29 +04:00
|
|
|
'maxHumanFilesize' => $maxHumanFileSize,
|
2013-09-19 01:42:36 +04:00
|
|
|
'permissions' => $meta['permissions'],
|
2013-09-06 20:16:40 +04:00
|
|
|
);
|
|
|
|
}
|
2011-07-19 22:23:33 +04:00
|
|
|
}
|
2011-04-17 01:18:06 +04:00
|
|
|
}
|
2012-08-29 02:50:12 +04:00
|
|
|
} else {
|
2013-01-19 03:31:09 +04:00
|
|
|
$error = $l->t('Invalid directory.');
|
2011-04-17 01:18:06 +04:00
|
|
|
}
|
|
|
|
|
2013-09-06 20:16:40 +04:00
|
|
|
if ($error === false) {
|
|
|
|
OCP\JSON::encodedPrint($result);
|
|
|
|
exit();
|
|
|
|
} else {
|
|
|
|
OCP\JSON::error(array('data' => array_merge(array('message' => $error), $storageStats)));
|
|
|
|
}
|