Your IP : 192.168.165.1
<?php
/**
* Class
*/
class H5peditorFile {
private $result, $field, $interface;
public $type, $name, $path, $mime, $size;
/**
* Constructor. Process data for file uploaded through the editor.
*/
function __construct($interface) {
$field = filter_input(INPUT_POST, 'field', FILTER_SANITIZE_STRING, FILTER_FLAG_NO_ENCODE_QUOTES);
// Check for file upload.
if ($field === NULL || empty($_FILES) || !isset($_FILES['file'])) {
return;
}
$this->interface = $interface;
// Create a new result object.
$this->result = new stdClass();
// Get the field.
$this->field = json_decode($field);
// Handle temporarily uploaded form file
if (function_exists('finfo_file')) {
$finfo = finfo_open(FILEINFO_MIME_TYPE);
$this->type = finfo_file($finfo, $_FILES['file']['tmp_name']);
finfo_close($finfo);
}
elseif (function_exists('mime_content_type')) {
// Deprecated, only when finfo isn't available.
$this->type = mime_content_type($_FILES['file']['tmp_name']);
}
else {
$this->type = $_FILES['file']['type'];
}
$this->extension = pathinfo($_FILES['file']['name'], PATHINFO_EXTENSION);
$this->size = $_FILES['file']['size'];
}
/**
* Indicates if an uploaded file was found or not.
*
* @return boolean
*/
public function isLoaded() {
return is_object($this->result);
}
/**
* Check current file up agains mime types and extensions in the given list.
*
* @param array $mimes List to check against.
* @return boolean
*/
public function check($mimes) {
$ext = strtolower($this->extension);
foreach ($mimes as $mime => $extension) {
if (is_array($extension)) {
// Multiple extensions
if (in_array($ext, $extension)) {
$this->type = $mime;
return TRUE;
}
}
elseif (/*$this->type === $mime && */$ext === $extension) {
// TODO: Either remove everything that has to do with mime types, or make it work
// Currently we're experiencing trouble with mime types on different servers...
$this->type = $mime;
return TRUE;
}
}
return FALSE;
}
/**
* Validate the file.
*
* @return boolean
*/
public function validate() {
if (isset($this->result->error)) {
return FALSE;
}
// Check for field type.
if (!isset($this->field->type)) {
$this->result->error = $this->interface->t('Unable to get field type.');
return FALSE;
}
$whitelist = explode(' ', $this->interface->getWhitelist(
FALSE,
H5PCore::$defaultContentWhitelist,
H5PCore::$defaultLibraryWhitelistExtras
));
// Check if mime type is allowed.
$isValidMime = !isset($this->field->mimes) || in_array($this->type, $this->field->mimes);
$isPhp = substr($this->extension, 0, 3) === 'php';
$isWhitelisted = in_array(strtolower($this->extension), $whitelist);
if (!$isValidMime || !$isWhitelisted || $isPhp) {
$this->result->error = $this->interface->t("File type isn't allowed.");
return FALSE;
}
// Type specific validations.
switch ($this->field->type) {
default:
$this->result->error = $this->interface->t('Invalid field type.');
return FALSE;
case 'image':
$allowed = array(
'image/png' => 'png',
'image/jpeg' => array('jpg', 'jpeg'),
'image/gif' => 'gif',
);
if (!$this->check($allowed)) {
$this->result->error = $this->interface->t('Invalid image file format. Use jpg, png or gif.');
return FALSE;
}
// Image size from temp file
$image = @getimagesize($_FILES['file']['tmp_name']);
if (!$image) {
$this->result->error = $this->interface->t('File is not an image.');
return FALSE;
}
$this->result->width = $image[0];
$this->result->height = $image[1];
$this->result->mime = $this->type;
break;
case 'audio':
$allowed = array(
'audio/mpeg' => 'mp3',
'audio/mp3' => 'mp3',
'audio/mp4' => 'm4a',
'audio/x-wav' => 'wav',
'audio/wav' => 'wav',
//'application/ogg' => 'ogg',
'audio/ogg' => 'ogg',
//'video/ogg' => 'ogg',
);
if (!$this->check($allowed)) {
$this->result->error = $this->interface->t('Invalid audio file format. Use mp3 or wav.');
return FALSE;
}
$this->result->mime = $this->type;
break;
case 'video':
$allowed = array(
'video/mp4' => 'mp4',
'video/webm' => 'webm',
// 'application/ogg' => 'ogv',
'video/ogg' => 'ogv',
);
if (!$this->check($allowed)) {
$this->result->error = $this->interface->t('Invalid video file format. Use mp4 or webm.');
return FALSE;
}
$this->result->mime = $this->type;
break;
case 'file':
// TODO: Try to get file extension for type and check that it matches the current extension.
$this->result->mime = $this->type;
}
return TRUE;
}
/**
* Get the type of the current file.
*
* @return string
*/
public function getType() {
return $this->field->type;
}
/**
* Get the name of the current file.
*
* @return string
*/
public function getName() {
static $name;
if (empty($name)) {
$name = uniqid($this->field->name . '-');
$matches = array();
preg_match('/([a-z0-9]{1,})$/i', $_FILES['file']['name'], $matches);
if (isset($matches[0])) {
$name .= '.' . $matches[0];
}
}
return $name;
}
/**
* Get result from file processing.
*/
public function getResult() {
return json_encode($this->result);
}
/**
* Print result from file processing.
*/
public function printResult() {
$this->result->path = $this->getType() . 's/' . $this->getName() . '#tmp';
// text/plain is used to support IE
header('Cache-Control: no-cache');
header('Content-Type: text/plain; charset=utf-8');
print $this->getResult();
}
}