js_upload/js_upload.php

   1 <?php
   2 /**
   3  * Name: JS Uploader
   4  * Description: JavaScript photo/image uploader. Uses Valum 'qq' Uploader.
   5  * Version: 1.0
   6  * Author: Chris Case <http://friendika.openmindspace.org/profile/chris_case>
   7  */
   8
   9 /**
  10  *
  11  * JavaScript Photo/Image Uploader
  12  *
  13  * Uses Valum 'qq' Uploader.
  14  * Module Author: Chris Case
  15  *
  16  */
  17 use Friendica\Core\Addon;
  18 use Friendica\Core\Config;
  19 use Friendica\Core\L10n;
  20
  21 function js_upload_install() {
  22         Addon::registerHook('photo_upload_form', 'addon/js_upload/js_upload.php', 'js_upload_form');
  23         Addon::registerHook('photo_post_init',   'addon/js_upload/js_upload.php', 'js_upload_post_init');
  24         Addon::registerHook('photo_post_file',   'addon/js_upload/js_upload.php', 'js_upload_post_file');
  25         Addon::registerHook('photo_post_end',    'addon/js_upload/js_upload.php', 'js_upload_post_end');
  26 }
  27
  28
  29 function js_upload_uninstall() {
  30         Addon::unregisterHook('photo_upload_form', 'addon/js_upload/js_upload.php', 'js_upload_form');
  31         Addon::unregisterHook('photo_post_init',   'addon/js_upload/js_upload.php', 'js_upload_post_init');
  32         Addon::unregisterHook('photo_post_file',   'addon/js_upload/js_upload.php', 'js_upload_post_file');
  33         Addon::unregisterHook('photo_post_end',    'addon/js_upload/js_upload.php', 'js_upload_post_end');
  34 }
  35
  36
  37 function js_upload_form(&$a,&$b) {
  38
  39         $b['default_upload'] = false;
  40
  41         $b['addon_text'] .= '<link href="' . $a->get_baseurl() . '/addon/js_upload/file-uploader/client/fileuploader.css" rel="stylesheet" type="text/css">';
  42         $b['addon_text'] .= '<script src="' . $a->get_baseurl() . '/addon/js_upload/file-uploader/client/fileuploader.js" type="text/javascript"></script>';
  43
  44         $upload_msg = L10n::t('Select files for upload');
  45         $drop_msg = L10n::t('Drop files here to upload');
  46         $cancel = L10n::t('Cancel');
  47         $failed = L10n::t('Failed');
  48
  49         $maximagesize = intval(Config::get('system','maximagesize'));
  50
  51         $b['addon_text'] .= <<< EOT
  52
  53  <div id="file-uploader-demo1">
  54   <noscript>
  55    <p>Please enable JavaScript to use file uploader.</p>
  56    <!-- or put a simple form for upload here -->
  57   </noscript>
  58  </div>
  59
  60 <script type="text/javascript">
  61 var uploader = null;
  62 function getSelected(opt) {
  63             var selected = new Array();
  64             var index = 0;
  65             for (var intLoop = 0; intLoop < opt.length; intLoop++) {
  66                if ((opt[intLoop].selected) ||
  67                    (opt[intLoop].checked)) {
  68                   index = selected.length;
  69                   //selected[index] = new Object;
  70                   selected[index] = opt[intLoop].value;
  71                   //selected[index] = intLoop;
  72                }
  73             }
  74             return selected;
  75          }
  76 function createUploader() {
  77         uploader = new qq.FileUploader({
  78                 element: document.getElementById('file-uploader-demo1'),
  79                 action: '{$b['post_url']}',
  80
  81         template: '<div class="qq-uploader">' +
  82                 '<div class="qq-upload-drop-area"><span>$drop_msg</span></div>' +
  83                 '<div class="qq-upload-button">$upload_msg</div>' +
  84                 '<ul class="qq-upload-list"></ul>' +
  85              '</div>',
  86
  87         // template for one item in file list
  88         fileTemplate: '<li>' +
  89                 '<span class="qq-upload-file"></span>' +
  90                 '<span class="qq-upload-spinner"></span>' +
  91                 '<span class="qq-upload-size"></span>' +
  92                 '<a class="qq-upload-cancel" href="#">$cancel</a>' +
  93                 '<span class="qq-upload-failed-text">$failed</span>' +
  94             '</li>',
  95
  96                 debug: true,
  97                 sizeLimit: $maximagesize,
  98                 onSubmit: function(id,filename) {
  99                         var newalbumElm = document.getElementById('photos-upload-newalbum');
 100                         var albumElm = document.getElementById('photos-upload-album-select');
 101
 102                         var newalbum = newalbumElm ? newalbumElm.value : "";
 103                         var album = albumElm ? albumElm.value : "";
 104
 105                         if (typeof acl != "undefined"){
 106                                 uploader.setParams( {
 107                                         newalbum      : newalbum,
 108                                         album         : album,
 109                                         not_visible   : document.getElementById('photos-upload-noshare').checked,
 110                                         group_allow   : acl.allow_gid.join(','),
 111                                         contact_allow : acl.allow_cid.join(','),
 112                                         group_deny    : acl.deny_gid.join(','),
 113                                         contact_deny  : acl.deny_cid.join(',')
 114                                 });
 115                         } else {
 116                                 uploader.setParams( {
 117                                         newalbum      : newalbum,
 118                                         album         : album,
 119                                         not_visible   : document.getElementById('photos-upload-noshare').checked,
 120                                         group_allow   : getSelected(document.getElementById('group_allow')).join(','),
 121                                         contact_allow : getSelected(document.getElementById('contact_allow')).join(','),
 122                                         group_deny    : getSelected(document.getElementById('group_deny')).join(','),
 123                                         contact_deny  : getSelected(document.getElementById('contact_deny')).join(',')
 124                                 });
 125                         }
 126                 }
 127         });
 128 }
 129
 130
 131 // in your app create uploader as soon as the DOM is ready
 132 // don't wait for the window to load
 133 window.onload = createUploader;
 134
 135
 136 </script>
 137
 138 EOT;
 139
 140
 141 }
 142
 143 function js_upload_post_init(&$a,&$b) {
 144
 145         // list of valid extensions, ex. array("jpeg", "xml", "bmp")
 146
 147         $allowedExtensions = ["jpeg","gif","png","jpg"];
 148
 149         // max file size in bytes
 150
 151         $sizeLimit = Config::get('system','maximagesize'); //6 * 1024 * 1024;
 152
 153         $uploader = new qqFileUploader($allowedExtensions, $sizeLimit);
 154
 155         $result = $uploader->handleUpload();
 156
 157
 158         // to pass data through iframe you will need to encode all html tags
 159         $a->data['upload_jsonresponse'] =  htmlspecialchars(json_encode($result), ENT_NOQUOTES);
 160
 161         if(isset($result['error'])) {
 162                 logger('mod/photos.php: photos_post(): error uploading photo: ' . $result['error'] , 'LOGGER_DEBUG');
 163                 echo json_encode($result);
 164                 killme();
 165         }
 166
 167         $a->data['upload_result'] = $result;
 168
 169 }
 170
 171 function js_upload_post_file(&$a,&$b) {
 172
 173         $result = $a->data['upload_result'];
 174
 175         $b['src']               = $result['path'];
 176         $b['filename']  = $result['filename'];
 177         $b['filesize']  = filesize($b['src']);
 178
 179 }
 180
 181
 182 function js_upload_post_end(&$a,&$b) {
 183
 184 logger('upload_post_end');
 185         if(x($a->data,'upload_jsonresponse')) {
 186                 echo $a->data['upload_jsonresponse'];
 187                 killme();
 188         }
 189
 190 }
 191
 192
 193 /**
 194  * Handle file uploads via XMLHttpRequest
 195  */
 196 class qqUploadedFileXhr {
 197
 198         private $pathnm = '';
 199
 200     /**
 201      * Save the file in the temp dir.
 202      * @return boolean TRUE on success
 203      */
 204     function save() {
 205         $input = fopen("php://input", "r");
 206
 207                 $upload_dir = Config::get('system','tempdir');
 208                 if(! $upload_dir)
 209                         $upload_dir = sys_get_temp_dir();
 210
 211         $this->pathnm = tempnam($upload_dir,'frn');
 212
 213                 $temp = fopen($this->pathnm,"w");
 214         $realSize = stream_copy_to_stream($input, $temp);
 215
 216         fclose($input);
 217                 fclose($temp);
 218
 219         if ($realSize != $this->getSize()){
 220             return false;
 221         }
 222         return true;
 223     }
 224
 225         function getPath() {
 226                 return $this->pathnm;
 227         }
 228
 229     function getName() {
 230         return $_GET['qqfile'];
 231     }
 232
 233     function getSize() {
 234         if (isset($_SERVER["CONTENT_LENGTH"])){
 235             return (int)$_SERVER["CONTENT_LENGTH"];
 236         } else {
 237             throw new Exception('Getting content length is not supported.');
 238         }
 239     }
 240 }
 241
 242 /**
 243  * Handle file uploads via regular form post (uses the $_FILES array)
 244  */
 245
 246 class qqUploadedFileForm {
 247
 248
 249     /**
 250      * Save the file to the specified path
 251      * @return boolean TRUE on success
 252      */
 253
 254
 255     function save() {
 256         return true;
 257     }
 258
 259         function getPath() {
 260                 return $_FILES['qqfile']['tmp_name'];
 261         }
 262
 263     function getName() {
 264         return $_FILES['qqfile']['name'];
 265     }
 266     function getSize() {
 267         return $_FILES['qqfile']['size'];
 268     }
 269 }
 270
 271 class qqFileUploader {
 272     private $allowedExtensions = [];
 273     private $sizeLimit = 10485760;
 274     private $file;
 275
 276     function __construct(array $allowedExtensions = [], $sizeLimit = 10485760){
 277         $allowedExtensions = array_map("strtolower", $allowedExtensions);
 278
 279         $this->allowedExtensions = $allowedExtensions;
 280         $this->sizeLimit = $sizeLimit;
 281
 282         if (isset($_GET['qqfile'])) {
 283             $this->file = new qqUploadedFileXhr();
 284         } elseif (isset($_FILES['qqfile'])) {
 285             $this->file = new qqUploadedFileForm();
 286         } else {
 287             $this->file = false;
 288         }
 289
 290     }
 291
 292
 293     private function toBytes($str){
 294         $val = trim($str);
 295         $last = strtolower($str[strlen($str)-1]);
 296         switch($last) {
 297             case 'g': $val *= 1024;
 298             case 'm': $val *= 1024;
 299             case 'k': $val *= 1024;
 300         }
 301         return $val;
 302     }
 303
 304     /**
 305      * Returns array('success'=>true) or array('error'=>'error message')
 306      */
 307     function handleUpload(){
 308
 309         if (!$this->file){
 310             return ['error' => L10n::t('No files were uploaded.')];
 311         }
 312
 313         $size = $this->file->getSize();
 314
 315         if ($size == 0) {
 316             return ['error' => L10n::t('Uploaded file is empty')];
 317         }
 318
 319 //        if ($size > $this->sizeLimit) {
 320
 321 //            return array('error' => L10n::t('Uploaded file is too large'));
 322 //        }
 323
 324
 325                 $maximagesize = Config::get('system','maximagesize');
 326
 327                 if(($maximagesize) && ($size > $maximagesize)) {
 328                         return ['error' => L10n::t('Image exceeds size limit of ') . $maximagesize ];
 329
 330                 }
 331
 332         $pathinfo = pathinfo($this->file->getName());
 333         $filename = $pathinfo['filename'];
 334
 335         $ext = $pathinfo['extension'];
 336
 337         if($this->allowedExtensions && !in_array(strtolower($ext), $this->allowedExtensions)){
 338             $these = implode(', ', $this->allowedExtensions);
 339             return ['error' => L10n::t('File has an invalid extension, it should be one of ') . $these . '.'];
 340         }
 341
 342         if ($this->file->save()){
 343             return [
 344                                 'success'=>true,
 345                                 'path' => $this->file->getPath(),
 346                                 'filename' => $filename . '.' . $ext
 347                         ];
 348         } else {
 349             return [
 350                                 'error'=> L10n::t('Upload was cancelled, or server error encountered'),
 351                                 'path' => $this->file->getPath(),
 352                                 'filename' => $filename . '.' . $ext
 353                         ];
 354         }
 355
 356     }
 357 }