nextcloud/lib/private/files.php

322 lines
9.7 KiB
PHP
Raw Normal View History

2010-03-10 15:03:40 +03:00
<?php
/**
2012-10-22 00:05:29 +04:00
* ownCloud
*
* @author Frank Karlitschek
* @copyright 2012 Frank Karlitschek frank@owncloud.org
*
* This library is free software; you can redistribute it and/or
* modify it under the terms of the GNU AFFERO GENERAL PUBLIC LICENSE
* License as published by the Free Software Foundation; either
* version 3 of the License, or any later version.
*
* This library is distributed in the hope that it will be useful,
* but WITHOUT ANY WARRANTY; without even the implied warranty of
* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
* GNU AFFERO GENERAL PUBLIC LICENSE for more details.
*
* You should have received a copy of the GNU Affero General Public
* License along with this library. If not, see <http://www.gnu.org/licenses/>.
*
*/
2010-03-10 15:03:40 +03:00
/**
* Class for fileserver access
*
*/
2011-07-29 23:36:03 +04:00
class OC_Files {
2012-10-22 00:05:29 +04:00
static $tmpFiles = array();
2010-04-25 16:21:04 +04:00
static public function getFileInfo($path, $includeMountPoints = true){
return \OC\Files\Filesystem::getFileInfo($path, $includeMountPoints);
}
2012-12-15 05:22:09 +04:00
static public function getDirectoryContent($path){
return \OC\Files\Filesystem::getDirectoryContent($path);
}
2010-04-25 16:21:04 +04:00
/**
* return the content of a file or return a zip file containing multiple files
2012-10-22 00:05:29 +04:00
*
2012-10-24 17:32:29 +04:00
* @param string $dir
* @param string $file ; separated list of files to download
2012-10-22 00:05:29 +04:00
* @param boolean $only_header ; boolean to only send header of the request
*/
public static function get($dir, $files, $only_header = false) {
$xsendfile = false;
2013-06-20 01:44:45 +04:00
if (isset($_SERVER['MOD_X_SENDFILE_ENABLED']) ||
isset($_SERVER['MOD_X_SENDFILE2_ENABLED']) ||
isset($_SERVER['MOD_X_ACCEL_REDIRECT_ENABLED'])) {
$xsendfile = true;
}
2013-03-07 17:15:02 +04:00
if (is_array($files) && count($files) == 1) {
2013-03-07 17:15:02 +04:00
$files = $files[0];
2010-05-02 01:09:36 +04:00
}
2011-06-19 17:08:28 +04:00
2012-10-22 00:05:29 +04:00
if (is_array($files)) {
self::validateZipDownload($dir, $files);
$executionTime = intval(ini_get('max_execution_time'));
set_time_limit(0);
2010-04-25 16:21:04 +04:00
$zip = new ZipArchive();
$filename = OC_Helper::tmpFile('.zip');
if ($zip->open($filename, ZIPARCHIVE::CREATE | ZIPARCHIVE::OVERWRITE)!==true) {
2013-07-23 01:04:14 +04:00
$l = OC_L10N::get('lib');
throw new Exception($l->t('cannot open "%s"', array($filename)));
2010-04-25 16:21:04 +04:00
}
2012-10-22 00:05:29 +04:00
foreach ($files as $file) {
$file = $dir . '/' . $file;
if (\OC\Files\Filesystem::is_file($file)) {
2012-10-24 17:32:29 +04:00
$tmpFile = \OC\Files\Filesystem::toTmpFile($file);
2012-10-22 00:05:29 +04:00
self::$tmpFiles[] = $tmpFile;
$zip->addFile($tmpFile, basename($file));
} elseif (\OC\Files\Filesystem::is_dir($file)) {
self::zipAddDir($file, $zip);
2010-04-25 16:21:04 +04:00
}
}
$zip->close();
if ($xsendfile) {
$filename = OC_Helper::moveToNoClean($filename);
}
$basename = basename($dir);
if ($basename) {
$name = $basename . '.zip';
} else {
$name = 'download.zip';
}
set_time_limit($executionTime);
2012-10-22 00:05:29 +04:00
} elseif (\OC\Files\Filesystem::is_dir($dir . '/' . $files)) {
self::validateZipDownload($dir, $files);
$executionTime = intval(ini_get('max_execution_time'));
set_time_limit(0);
2010-04-25 16:21:04 +04:00
$zip = new ZipArchive();
$filename = OC_Helper::tmpFile('.zip');
if ($zip->open($filename, ZIPARCHIVE::CREATE | ZIPARCHIVE::OVERWRITE)!==true) {
2013-07-23 01:04:14 +04:00
$l = OC_L10N::get('lib');
throw new Exception($l->t('cannot open "%s"', array($filename)));
2010-04-25 16:21:04 +04:00
}
2012-10-22 00:05:29 +04:00
$file = $dir . '/' . $files;
self::zipAddDir($file, $zip);
2010-04-25 16:21:04 +04:00
$zip->close();
if ($xsendfile) {
$filename = OC_Helper::moveToNoClean($filename);
}
$name = $files . '.zip';
set_time_limit($executionTime);
2012-10-22 00:05:29 +04:00
} else {
$zip = false;
$filename = $dir . '/' . $files;
$name = $files;
if ($xsendfile && OC_App::isEnabled('files_encryption')) {
$xsendfile = false;
}
2010-04-25 16:21:04 +04:00
}
OC_Util::obEnd();
if ($zip or \OC\Files\Filesystem::isReadable($filename)) {
OC_Response::setContentDispositionHeader($name, 'attachment');
header('Content-Transfer-Encoding: binary');
OC_Response::disableCaching();
2012-10-22 00:05:29 +04:00
if ($zip) {
ini_set('zlib.output_compression', 'off');
2010-09-26 21:09:16 +04:00
header('Content-Type: application/zip');
header('Content-Length: ' . filesize($filename));
self::addSendfileHeader($filename);
}else{
$filesize = \OC\Files\Filesystem::filesize($filename);
2012-11-18 17:07:52 +04:00
header('Content-Type: '.\OC\Files\Filesystem::getMimeType($filename));
if ($filesize > -1) {
header("Content-Length: ".$filesize);
}
if ($xsendfile) {
list($storage) = \OC\Files\Filesystem::resolvePath(\OC\Files\Filesystem::getView()->getAbsolutePath($filename));
if ($storage instanceof \OC\Files\Storage\Local) {
self::addSendfileHeader(\OC\Files\Filesystem::getLocalFile($filename));
}
}
}
2012-10-22 00:05:29 +04:00
} elseif ($zip or !\OC\Files\Filesystem::file_exists($filename)) {
header("HTTP/1.0 404 Not Found");
2012-10-22 00:05:29 +04:00
$tmpl = new OC_Template('', '404', 'guest');
$tmpl->assign('file', $name);
2011-04-18 15:16:32 +04:00
$tmpl->printPage();
2012-10-22 00:05:29 +04:00
} else {
header("HTTP/1.0 403 Forbidden");
die('403 Forbidden');
}
2012-09-07 17:22:01 +04:00
if($only_header) {
return ;
}
2012-10-22 00:05:29 +04:00
if ($zip) {
$handle = fopen($filename, 'r');
if ($handle) {
2012-10-22 00:05:29 +04:00
$chunkSize = 8 * 1024; // 1 MB chunks
while (!feof($handle)) {
echo fread($handle, $chunkSize);
flush();
}
}
if (!$xsendfile) {
unlink($filename);
}
}else{
2012-10-10 15:18:36 +04:00
\OC\Files\Filesystem::readfile($filename);
}
2012-10-22 00:05:29 +04:00
foreach (self::$tmpFiles as $tmpFile) {
if (file_exists($tmpFile) and is_file($tmpFile)) {
unlink($tmpFile);
}
2010-04-25 16:21:04 +04:00
}
}
2010-05-04 00:26:34 +04:00
private static function addSendfileHeader($filename) {
if (isset($_SERVER['MOD_X_SENDFILE_ENABLED'])) {
header("X-Sendfile: " . $filename);
}
if (isset($_SERVER['MOD_X_SENDFILE2_ENABLED'])) {
if (isset($_SERVER['HTTP_RANGE']) &&
preg_match("/^bytes=([0-9]+)-([0-9]*)$/", $_SERVER['HTTP_RANGE'], $range)) {
$filelength = filesize($filename);
if ($range[2] == "") {
$range[2] = $filelength - 1;
}
header("Content-Range: bytes $range[1]-$range[2]/" . $filelength);
header("HTTP/1.1 206 Partial content");
header("X-Sendfile2: " . str_replace(",", "%2c", rawurlencode($filename)) . " $range[1]-$range[2]");
} else {
header("X-Sendfile: " . $filename);
}
}
2013-06-20 13:23:25 +04:00
if (isset($_SERVER['MOD_X_ACCEL_REDIRECT_ENABLED'])) {
header("X-Accel-Redirect: " . $filename);
}
}
2012-11-02 22:53:02 +04:00
public static function zipAddDir($dir, $zip, $internalDir='') {
2011-09-18 22:57:05 +04:00
$dirname=basename($dir);
$zip->addEmptyDir($internalDir.$dirname);
$internalDir.=$dirname.='/';
$files=OC_Files::getDirectoryContent($dir);
2012-09-07 17:22:01 +04:00
foreach($files as $file) {
2011-09-18 22:57:05 +04:00
$filename=$file['name'];
$file=$dir.'/'.$filename;
2012-11-18 17:07:52 +04:00
if(\OC\Files\Filesystem::is_file($file)) {
$tmpFile=\OC\Files\Filesystem::toTmpFile($file);
2011-09-18 22:57:05 +04:00
OC_Files::$tmpFiles[]=$tmpFile;
$zip->addFile($tmpFile, $internalDir.$filename);
2012-11-18 17:07:52 +04:00
}elseif(\OC\Files\Filesystem::is_dir($file)) {
2012-10-22 00:05:29 +04:00
self::zipAddDir($file, $zip, $internalDir);
2011-09-18 22:57:05 +04:00
}
}
}
2012-10-22 00:05:29 +04:00
/**
2012-10-22 00:05:29 +04:00
* checks if the selected files are within the size constraint. If not, outputs an error page.
*
* @param dir $dir
* @param files $files
*/
static function validateZipDownload($dir, $files) {
2012-10-22 00:05:29 +04:00
if (!OC_Config::getValue('allowZipDownload', true)) {
2012-08-31 01:51:44 +04:00
$l = OC_L10N::get('lib');
header("HTTP/1.0 409 Conflict");
2013-07-22 00:30:32 +04:00
OC_Template::printErrorPage(
$l->t('ZIP download is turned off.'),
$l->t('Files need to be downloaded one by one.')
. '<br/><a href="javascript:history.back()">' . $l->t('Back to Files') . '</a>'
);
exit;
}
$zipLimit = OC_Config::getValue('maxZipInputSize', OC_Helper::computerFileSize('800 MB'));
2012-10-22 00:05:29 +04:00
if ($zipLimit > 0) {
$totalsize = 0;
if(!is_array($files)) {
$files = array($files);
}
foreach ($files as $file) {
$path = $dir . '/' . $file;
if(\OC\Files\Filesystem::is_dir($path)) {
foreach (\OC\Files\Filesystem::getDirectoryContent($path) as $i) {
$totalsize += $i['size'];
}
} else {
$totalsize += \OC\Files\Filesystem::filesize($path);
}
}
2012-10-22 00:05:29 +04:00
if ($totalsize > $zipLimit) {
2012-08-31 01:51:44 +04:00
$l = OC_L10N::get('lib');
header("HTTP/1.0 409 Conflict");
2013-07-22 00:30:32 +04:00
OC_Template::printErrorPage(
$l->t('Selected files too large to generate zip file.'),
$l->t('Please download the files separately in smaller chunks or kindly ask your administrator.')
2013-07-23 01:04:14 +04:00
.'<br/><a href="javascript:history.back()">'
2013-07-22 00:30:32 +04:00
. $l->t('Back to Files') . '</a>'
);
exit;
}
}
}
/**
* set the maximum upload size limit for apache hosts using .htaccess
2012-10-22 00:05:29 +04:00
*
* @param int size filesisze in bytes
* @return false on failure, size on success
*/
2012-09-07 17:22:01 +04:00
static function setUploadLimit($size) {
//don't allow user to break his config -- upper boundary
2012-10-22 00:05:29 +04:00
if ($size > PHP_INT_MAX) {
//max size is always 1 byte lower than computerFileSize returns
2012-10-22 00:05:29 +04:00
if ($size > PHP_INT_MAX + 1)
return false;
2012-10-22 00:05:29 +04:00
$size -= 1;
} else {
2012-10-22 00:05:29 +04:00
$size = OC_Helper::humanFileSize($size);
$size = substr($size, 0, -1); //strip the B
$size = str_replace(' ', '', $size); //remove the space between the size and the postfix
}
//don't allow user to break his config -- broken or malicious size input
2012-10-22 00:05:29 +04:00
if (intval($size) == 0) {
return false;
}
2012-10-22 00:05:29 +04:00
$htaccess = @file_get_contents(OC::$SERVERROOT . '/.htaccess'); //supress errors in case we don't have permissions for
if (!$htaccess) {
return false;
}
$phpValueKeys = array(
'upload_max_filesize',
'post_max_size'
);
2012-10-22 00:05:29 +04:00
foreach ($phpValueKeys as $key) {
$pattern = '/php_value ' . $key . ' (\S)*/';
$setting = 'php_value ' . $key . ' ' . $size;
$hasReplaced = 0;
$content = preg_replace($pattern, $setting, $htaccess, 1, $hasReplaced);
if ($content !== null) {
$htaccess = $content;
}
2012-10-22 00:05:29 +04:00
if ($hasReplaced == 0) {
$htaccess .= "\n" . $setting;
}
}
//check for write permissions
2012-10-22 00:05:29 +04:00
if (is_writable(OC::$SERVERROOT . '/.htaccess')) {
file_put_contents(OC::$SERVERROOT . '/.htaccess', $htaccess);
2012-08-29 10:38:33 +04:00
return OC_Helper::computerFileSize($size);
2012-10-22 00:05:29 +04:00
} else {
2013-02-11 20:44:02 +04:00
OC_Log::write('files',
'Can\'t write upload limit to ' . OC::$SERVERROOT . '/.htaccess. Please check the file permissions',
OC_Log::WARN);
2012-10-22 00:05:29 +04:00
}
return false;
}
2010-04-25 16:21:04 +04:00
}