2010-03-10 15:03:40 +03:00
|
|
|
<?php
|
2015-02-26 13:37:37 +03:00
|
|
|
|
2010-03-10 15:03:40 +03:00
|
|
|
/**
|
2015-02-26 13:37:37 +03:00
|
|
|
* ownCloud
|
2012-10-22 00:05:29 +04:00
|
|
|
*
|
2015-02-26 13:37:37 +03:00
|
|
|
* @author Frank Karlitschek
|
|
|
|
* @copyright 2012 Frank Karlitschek frank@owncloud.org
|
2012-10-22 00:05:29 +04:00
|
|
|
*
|
2015-02-26 13:37:37 +03:00
|
|
|
* This library is free software; you can redistribute it and/or
|
|
|
|
* modify it under the terms of the GNU AFFERO GENERAL PUBLIC LICENSE
|
|
|
|
* License as published by the Free Software Foundation; either
|
|
|
|
* version 3 of the License, or any later version.
|
2012-10-22 00:05:29 +04:00
|
|
|
*
|
2015-02-26 13:37:37 +03:00
|
|
|
* This library is distributed in the hope that it will be useful,
|
2012-10-22 00:05:29 +04:00
|
|
|
* but WITHOUT ANY WARRANTY; without even the implied warranty of
|
2015-02-26 13:37:37 +03:00
|
|
|
* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
|
|
|
* GNU AFFERO GENERAL PUBLIC LICENSE for more details.
|
2012-10-22 00:05:29 +04:00
|
|
|
*
|
2015-02-26 13:37:37 +03:00
|
|
|
* You should have received a copy of the GNU Affero General Public
|
|
|
|
* License along with this library. If not, see <http://www.gnu.org/licenses/>.
|
2012-10-22 00:05:29 +04:00
|
|
|
*
|
|
|
|
*/
|
2015-02-26 13:37:37 +03:00
|
|
|
|
2014-02-20 19:36:37 +04:00
|
|
|
// TODO: get rid of this using proper composer packages
|
|
|
|
require_once 'mcnetic/phpzipstreamer/ZipStreamer.php';
|
2010-03-10 15:03:40 +03:00
|
|
|
|
|
|
|
/**
|
2014-02-20 19:36:37 +04:00
|
|
|
* Class for file server access
|
2010-03-10 15:03:40 +03:00
|
|
|
*
|
|
|
|
*/
|
2011-07-29 23:36:03 +04:00
|
|
|
class OC_Files {
|
2014-11-26 14:56:54 +03:00
|
|
|
const FILE = 1;
|
|
|
|
const ZIP_FILES = 2;
|
|
|
|
const ZIP_DIR = 3;
|
2012-11-16 01:08:08 +04:00
|
|
|
|
2014-02-19 12:31:54 +04:00
|
|
|
/**
|
2014-02-20 19:36:37 +04:00
|
|
|
* @param string $filename
|
|
|
|
* @param string $name
|
|
|
|
* @param bool $zip
|
2014-02-19 12:31:54 +04:00
|
|
|
*/
|
2014-01-16 20:21:19 +04:00
|
|
|
private static function sendHeaders($filename, $name, $zip = false) {
|
|
|
|
OC_Response::setContentDispositionHeader($name, 'attachment');
|
|
|
|
header('Content-Transfer-Encoding: binary');
|
|
|
|
OC_Response::disableCaching();
|
|
|
|
if ($zip) {
|
|
|
|
header('Content-Type: application/zip');
|
|
|
|
} else {
|
|
|
|
$filesize = \OC\Files\Filesystem::filesize($filename);
|
2014-09-08 17:57:39 +04:00
|
|
|
header('Content-Type: '.\OC_Helper::getSecureMimeType(\OC\Files\Filesystem::getMimeType($filename)));
|
2014-01-16 20:21:19 +04:00
|
|
|
if ($filesize > -1) {
|
|
|
|
header("Content-Length: ".$filesize);
|
|
|
|
}
|
|
|
|
}
|
2012-11-16 01:08:08 +04:00
|
|
|
}
|
|
|
|
|
2010-04-25 16:21:04 +04:00
|
|
|
/**
|
2013-01-29 08:51:35 +04:00
|
|
|
* return the content of a file or return a zip file containing multiple files
|
2012-10-22 00:05:29 +04:00
|
|
|
*
|
2012-10-24 17:32:29 +04:00
|
|
|
* @param string $dir
|
2014-02-06 19:30:58 +04:00
|
|
|
* @param string $files ; separated list of files to download
|
2012-10-22 00:05:29 +04:00
|
|
|
* @param boolean $only_header ; boolean to only send header of the request
|
|
|
|
*/
|
|
|
|
public static function get($dir, $files, $only_header = false) {
|
2012-10-19 02:11:20 +04:00
|
|
|
$xsendfile = false;
|
2013-06-20 01:44:45 +04:00
|
|
|
if (isset($_SERVER['MOD_X_SENDFILE_ENABLED']) ||
|
|
|
|
isset($_SERVER['MOD_X_SENDFILE2_ENABLED']) ||
|
2012-10-31 02:37:31 +04:00
|
|
|
isset($_SERVER['MOD_X_ACCEL_REDIRECT_ENABLED'])) {
|
2012-10-19 02:11:20 +04:00
|
|
|
$xsendfile = true;
|
2012-10-31 02:37:31 +04:00
|
|
|
}
|
2013-03-07 17:15:02 +04:00
|
|
|
|
2014-01-17 17:26:17 +04:00
|
|
|
if (is_array($files) && count($files) === 1) {
|
2013-03-07 17:15:02 +04:00
|
|
|
$files = $files[0];
|
2010-05-02 01:09:36 +04:00
|
|
|
}
|
2011-06-19 17:08:28 +04:00
|
|
|
|
2012-10-22 00:05:29 +04:00
|
|
|
if (is_array($files)) {
|
2014-11-26 14:56:54 +03:00
|
|
|
$get_type = self::ZIP_FILES;
|
2013-03-07 17:24:18 +04:00
|
|
|
$basename = basename($dir);
|
|
|
|
if ($basename) {
|
|
|
|
$name = $basename . '.zip';
|
|
|
|
} else {
|
2014-01-21 15:41:10 +04:00
|
|
|
$name = 'download.zip';
|
2013-03-07 17:24:18 +04:00
|
|
|
}
|
2014-02-20 19:36:37 +04:00
|
|
|
|
2014-01-16 20:21:19 +04:00
|
|
|
$filename = $dir . '/' . $name;
|
|
|
|
} else {
|
|
|
|
$filename = $dir . '/' . $files;
|
|
|
|
if (\OC\Files\Filesystem::is_dir($dir . '/' . $files)) {
|
2014-11-26 14:56:54 +03:00
|
|
|
$get_type = self::ZIP_DIR;
|
2014-02-20 19:36:37 +04:00
|
|
|
// downloading root ?
|
|
|
|
if ($files === '') {
|
|
|
|
$name = 'download.zip';
|
|
|
|
} else {
|
|
|
|
$name = $files . '.zip';
|
|
|
|
}
|
|
|
|
|
2014-02-13 23:20:00 +04:00
|
|
|
} else {
|
2014-11-26 14:56:54 +03:00
|
|
|
$get_type = self::FILE;
|
2014-01-16 20:21:19 +04:00
|
|
|
$name = $files;
|
2014-02-13 23:20:00 +04:00
|
|
|
}
|
2014-01-16 20:21:19 +04:00
|
|
|
}
|
|
|
|
|
2014-11-26 14:56:54 +03:00
|
|
|
if ($get_type === self::FILE) {
|
2012-10-22 00:05:29 +04:00
|
|
|
$zip = false;
|
2013-11-14 11:46:15 +04:00
|
|
|
if ($xsendfile && OC_App::isEnabled('files_encryption')) {
|
|
|
|
$xsendfile = false;
|
|
|
|
}
|
2014-01-16 20:21:19 +04:00
|
|
|
} else {
|
2014-01-22 15:49:52 +04:00
|
|
|
$zip = new ZipStreamer(false);
|
2010-04-25 16:21:04 +04:00
|
|
|
}
|
2012-11-29 21:01:21 +04:00
|
|
|
OC_Util::obEnd();
|
2012-12-28 00:49:48 +04:00
|
|
|
if ($zip or \OC\Files\Filesystem::isReadable($filename)) {
|
2014-01-16 20:21:19 +04:00
|
|
|
self::sendHeaders($filename, $name, $zip);
|
|
|
|
} elseif (!\OC\Files\Filesystem::file_exists($filename)) {
|
2010-06-25 15:24:27 +04:00
|
|
|
header("HTTP/1.0 404 Not Found");
|
2012-10-22 00:05:29 +04:00
|
|
|
$tmpl = new OC_Template('', '404', 'guest');
|
2011-04-18 15:16:32 +04:00
|
|
|
$tmpl->printPage();
|
2012-10-22 00:05:29 +04:00
|
|
|
} else {
|
2010-06-25 15:24:27 +04:00
|
|
|
header("HTTP/1.0 403 Forbidden");
|
|
|
|
die('403 Forbidden');
|
2010-05-08 00:50:59 +04:00
|
|
|
}
|
2012-09-07 17:22:01 +04:00
|
|
|
if($only_header) {
|
2012-05-25 02:48:10 +04:00
|
|
|
return ;
|
|
|
|
}
|
2012-10-22 00:05:29 +04:00
|
|
|
if ($zip) {
|
2014-01-16 20:21:19 +04:00
|
|
|
$executionTime = intval(ini_get('max_execution_time'));
|
|
|
|
set_time_limit(0);
|
2014-11-26 14:56:54 +03:00
|
|
|
if ($get_type === self::ZIP_FILES) {
|
2014-01-16 20:21:19 +04:00
|
|
|
foreach ($files as $file) {
|
|
|
|
$file = $dir . '/' . $file;
|
|
|
|
if (\OC\Files\Filesystem::is_file($file)) {
|
2014-01-22 15:49:52 +04:00
|
|
|
$fh = \OC\Files\Filesystem::fopen($file, 'r');
|
|
|
|
$zip->addFileFromStream($fh, basename($file));
|
|
|
|
fclose($fh);
|
2014-01-16 20:21:19 +04:00
|
|
|
} elseif (\OC\Files\Filesystem::is_dir($file)) {
|
|
|
|
self::zipAddDir($file, $zip);
|
|
|
|
}
|
2012-05-01 22:32:13 +04:00
|
|
|
}
|
2014-11-26 14:56:54 +03:00
|
|
|
} elseif ($get_type === self::ZIP_DIR) {
|
2014-01-16 20:21:19 +04:00
|
|
|
$file = $dir . '/' . $files;
|
|
|
|
self::zipAddDir($file, $zip);
|
2012-05-01 22:32:13 +04:00
|
|
|
}
|
2014-01-22 15:49:52 +04:00
|
|
|
$zip->finalize();
|
2014-01-16 20:21:19 +04:00
|
|
|
set_time_limit($executionTime);
|
|
|
|
} else {
|
|
|
|
if ($xsendfile) {
|
2014-03-26 21:14:35 +04:00
|
|
|
$view = \OC\Files\Filesystem::getView();
|
2014-02-20 19:36:37 +04:00
|
|
|
/** @var $storage \OC\Files\Storage\Storage */
|
2014-03-26 21:14:35 +04:00
|
|
|
list($storage) = $view->resolvePath($filename);
|
2014-02-20 19:36:37 +04:00
|
|
|
if ($storage->isLocal()) {
|
2014-04-04 07:46:54 +04:00
|
|
|
self::addSendfileHeader($filename);
|
2014-01-16 20:21:19 +04:00
|
|
|
} else {
|
|
|
|
\OC\Files\Filesystem::readfile($filename);
|
|
|
|
}
|
|
|
|
} else {
|
|
|
|
\OC\Files\Filesystem::readfile($filename);
|
2010-05-08 00:50:59 +04:00
|
|
|
}
|
2010-04-25 16:21:04 +04:00
|
|
|
}
|
|
|
|
}
|
2010-05-04 00:26:34 +04:00
|
|
|
|
2014-02-06 19:30:58 +04:00
|
|
|
/**
|
|
|
|
* @param false|string $filename
|
|
|
|
*/
|
2012-10-19 02:11:20 +04:00
|
|
|
private static function addSendfileHeader($filename) {
|
2014-12-31 00:36:13 +03:00
|
|
|
$filename = \OC\Files\Filesystem::getLocalFile($filename);
|
2012-10-19 02:11:20 +04:00
|
|
|
if (isset($_SERVER['MOD_X_SENDFILE_ENABLED'])) {
|
|
|
|
header("X-Sendfile: " . $filename);
|
2013-06-19 17:36:48 +04:00
|
|
|
}
|
|
|
|
if (isset($_SERVER['MOD_X_SENDFILE2_ENABLED'])) {
|
2014-01-16 20:21:19 +04:00
|
|
|
if (isset($_SERVER['HTTP_RANGE']) &&
|
2013-06-20 18:46:36 +04:00
|
|
|
preg_match("/^bytes=([0-9]+)-([0-9]*)$/", $_SERVER['HTTP_RANGE'], $range)) {
|
|
|
|
$filelength = filesize($filename);
|
2014-01-17 17:26:17 +04:00
|
|
|
if ($range[2] === "") {
|
2013-06-20 18:46:36 +04:00
|
|
|
$range[2] = $filelength - 1;
|
|
|
|
}
|
|
|
|
header("Content-Range: bytes $range[1]-$range[2]/" . $filelength);
|
|
|
|
header("HTTP/1.1 206 Partial content");
|
|
|
|
header("X-Sendfile2: " . str_replace(",", "%2c", rawurlencode($filename)) . " $range[1]-$range[2]");
|
|
|
|
} else {
|
|
|
|
header("X-Sendfile: " . $filename);
|
|
|
|
}
|
2012-10-19 02:11:20 +04:00
|
|
|
}
|
2014-01-16 20:21:19 +04:00
|
|
|
|
2012-10-31 02:37:31 +04:00
|
|
|
if (isset($_SERVER['MOD_X_ACCEL_REDIRECT_ENABLED'])) {
|
2012-10-19 02:11:20 +04:00
|
|
|
header("X-Accel-Redirect: " . $filename);
|
2012-10-31 02:37:31 +04:00
|
|
|
}
|
2012-10-19 02:11:20 +04:00
|
|
|
}
|
|
|
|
|
2014-02-06 19:30:58 +04:00
|
|
|
/**
|
|
|
|
* @param string $dir
|
2014-02-20 19:36:37 +04:00
|
|
|
* @param ZipStreamer $zip
|
|
|
|
* @param string $internalDir
|
2014-02-06 19:30:58 +04:00
|
|
|
*/
|
2014-10-24 16:13:40 +04:00
|
|
|
public static function zipAddDir($dir, ZipStreamer $zip, $internalDir='') {
|
2011-09-18 22:57:05 +04:00
|
|
|
$dirname=basename($dir);
|
2014-02-20 19:36:37 +04:00
|
|
|
$rootDir = $internalDir.$dirname;
|
|
|
|
if (!empty($rootDir)) {
|
|
|
|
$zip->addEmptyDir($rootDir);
|
|
|
|
}
|
2011-09-18 22:57:05 +04:00
|
|
|
$internalDir.=$dirname.='/';
|
2014-02-13 23:20:00 +04:00
|
|
|
// prevent absolute dirs
|
|
|
|
$internalDir = ltrim($internalDir, '/');
|
2014-02-20 19:36:37 +04:00
|
|
|
|
|
|
|
$files=\OC\Files\Filesystem::getDirectoryContent($dir);
|
2012-09-07 17:22:01 +04:00
|
|
|
foreach($files as $file) {
|
2011-09-18 22:57:05 +04:00
|
|
|
$filename=$file['name'];
|
|
|
|
$file=$dir.'/'.$filename;
|
2012-11-18 17:07:52 +04:00
|
|
|
if(\OC\Files\Filesystem::is_file($file)) {
|
2014-01-22 15:49:52 +04:00
|
|
|
$fh = \OC\Files\Filesystem::fopen($file, 'r');
|
|
|
|
$zip->addFileFromStream($fh, $internalDir.$filename);
|
|
|
|
fclose($fh);
|
2012-11-18 17:07:52 +04:00
|
|
|
}elseif(\OC\Files\Filesystem::is_dir($file)) {
|
2012-10-22 00:05:29 +04:00
|
|
|
self::zipAddDir($file, $zip, $internalDir);
|
2011-09-18 22:57:05 +04:00
|
|
|
}
|
|
|
|
}
|
|
|
|
}
|
2012-10-22 00:05:29 +04:00
|
|
|
|
2011-05-29 19:43:13 +04:00
|
|
|
/**
|
|
|
|
* set the maximum upload size limit for apache hosts using .htaccess
|
2012-10-22 00:05:29 +04:00
|
|
|
*
|
2014-02-20 19:36:37 +04:00
|
|
|
* @param int $size file size in bytes
|
|
|
|
* @return bool false on failure, size on success
|
2011-05-29 19:43:13 +04:00
|
|
|
*/
|
2012-09-07 17:22:01 +04:00
|
|
|
static function setUploadLimit($size) {
|
2012-04-13 13:25:38 +04:00
|
|
|
//don't allow user to break his config -- upper boundary
|
2012-10-22 00:05:29 +04:00
|
|
|
if ($size > PHP_INT_MAX) {
|
2012-04-13 13:25:38 +04:00
|
|
|
//max size is always 1 byte lower than computerFileSize returns
|
2012-10-22 00:05:29 +04:00
|
|
|
if ($size > PHP_INT_MAX + 1)
|
2012-04-13 13:25:38 +04:00
|
|
|
return false;
|
2012-10-22 00:05:29 +04:00
|
|
|
$size -= 1;
|
2012-04-13 13:25:38 +04:00
|
|
|
} else {
|
2014-04-03 03:17:28 +04:00
|
|
|
$size = OC_Helper::phpFileSize($size);
|
2012-04-13 13:25:38 +04:00
|
|
|
}
|
2012-04-13 12:43:19 +04:00
|
|
|
|
2012-04-13 13:25:38 +04:00
|
|
|
//don't allow user to break his config -- broken or malicious size input
|
2014-01-17 17:26:17 +04:00
|
|
|
if (intval($size) === 0) {
|
2012-04-13 12:43:19 +04:00
|
|
|
return false;
|
|
|
|
}
|
|
|
|
|
2014-02-20 19:36:37 +04:00
|
|
|
//suppress errors in case we don't have permissions for
|
|
|
|
$htaccess = @file_get_contents(OC::$SERVERROOT . '/.htaccess');
|
2012-10-22 00:05:29 +04:00
|
|
|
if (!$htaccess) {
|
2012-04-13 12:43:19 +04:00
|
|
|
return false;
|
|
|
|
}
|
|
|
|
|
|
|
|
$phpValueKeys = array(
|
|
|
|
'upload_max_filesize',
|
|
|
|
'post_max_size'
|
|
|
|
);
|
|
|
|
|
2012-10-22 00:05:29 +04:00
|
|
|
foreach ($phpValueKeys as $key) {
|
|
|
|
$pattern = '/php_value ' . $key . ' (\S)*/';
|
|
|
|
$setting = 'php_value ' . $key . ' ' . $size;
|
|
|
|
$hasReplaced = 0;
|
|
|
|
$content = preg_replace($pattern, $setting, $htaccess, 1, $hasReplaced);
|
|
|
|
if ($content !== null) {
|
2012-04-13 12:43:19 +04:00
|
|
|
$htaccess = $content;
|
|
|
|
}
|
2014-01-17 17:26:17 +04:00
|
|
|
if ($hasReplaced === 0) {
|
2012-04-13 12:43:19 +04:00
|
|
|
$htaccess .= "\n" . $setting;
|
|
|
|
}
|
|
|
|
}
|
|
|
|
|
2012-06-05 13:50:21 +04:00
|
|
|
//check for write permissions
|
2012-10-22 00:05:29 +04:00
|
|
|
if (is_writable(OC::$SERVERROOT . '/.htaccess')) {
|
|
|
|
file_put_contents(OC::$SERVERROOT . '/.htaccess', $htaccess);
|
2012-08-29 10:38:33 +04:00
|
|
|
return OC_Helper::computerFileSize($size);
|
2012-10-22 00:05:29 +04:00
|
|
|
} else {
|
2013-02-11 20:44:02 +04:00
|
|
|
OC_Log::write('files',
|
|
|
|
'Can\'t write upload limit to ' . OC::$SERVERROOT . '/.htaccess. Please check the file permissions',
|
|
|
|
OC_Log::WARN);
|
2012-10-22 00:05:29 +04:00
|
|
|
}
|
2012-04-13 12:43:19 +04:00
|
|
|
return false;
|
2011-05-29 19:43:13 +04:00
|
|
|
}
|
2010-04-25 16:21:04 +04:00
|
|
|
}
|