1551 lines
56 KiB
PHP
Executable file
1551 lines
56 KiB
PHP
Executable file
<?php
|
|
declare(strict_types=1);
|
|
/**
|
|
* The model file of file module of ZenTaoPMS.
|
|
*
|
|
* @copyright Copyright 2009-2023 禅道软件（青岛）有限公司(ZenTao Software (Qingdao) Co., Ltd. www.cnezsoft.com)
|
|
* @license ZPL(http://zpl.pub/page/zplv12.html) or AGPL(https://www.gnu.org/licenses/agpl-3.0.en.html)
|
|
* @author Chunsheng Wang <chunsheng@cnezsoft.com>
|
|
* @package file
|
|
* @version $Id: model.php 4976 2013-07-02 08:15:31Z wyd621@gmail.com $
|
|
* @link https://www.zentao.net
|
|
*/
|
|
?>
|
|
<?php
|
|
class fileModel extends model
|
|
{
|
|
public $savePath = '';
|
|
public $webPath = '';
|
|
public $now = 0;
|
|
|
|
/**
|
|
* Construct function.
|
|
*
|
|
* @access public
|
|
* @return void
|
|
*/
|
|
public function __construct()
|
|
{
|
|
parent::__construct();
|
|
$this->now = time();
|
|
$this->setSavePath();
|
|
$this->setWebPath();
|
|
}
|
|
|
|
/**
|
|
* Get files of an object.
|
|
*
|
|
* @param string $objectType
|
|
* @param int|array $objectID
|
|
* @param string $extra
|
|
* @access public
|
|
* @return array
|
|
*/
|
|
public function getByObject(string $objectType, int|array $objectID, string $extra = ''): array
|
|
{
|
|
$files = $this->dao->select('*')->from(TABLE_FILE)
|
|
->where('objectType')->eq($objectType)
|
|
->andWhere('objectID')->in($objectID)
|
|
->andWhere('extra')->ne('editor')
|
|
->beginIF($extra)->andWhere('extra')->in($extra)->fi()
|
|
->andWhere('deleted')->eq('0')
|
|
->orderBy('id')
|
|
->fetchAll('id');
|
|
|
|
foreach($files as $file) $this->setFileWebAndRealPaths($file);
|
|
return $files;
|
|
}
|
|
|
|
/**
|
|
* 按照objectID分组获取附件列表。
|
|
* Get files of an object group by objectID.
|
|
*
|
|
* @param string $objectType
|
|
* @param string|array $objectID
|
|
* @access public
|
|
* @return array
|
|
*/
|
|
public function groupByObjectID(string $objectType, string|array $objectID): array
|
|
{
|
|
$fileGroup = $this->dao->select('*')->from(TABLE_FILE)
|
|
->where('objectType')->eq($objectType)
|
|
->andWhere('objectID')->in($objectID)
|
|
->andWhere('deleted')->eq('0')
|
|
->orderBy('id')
|
|
->fetchGroup('objectID', 'id');
|
|
|
|
foreach($fileGroup as $objectID => $files)
|
|
{
|
|
foreach($files as $file) $this->setFileWebAndRealPaths($file);
|
|
}
|
|
return $fileGroup;
|
|
}
|
|
|
|
/**
|
|
* Delete files by object.
|
|
*
|
|
* @param string $objectType
|
|
* @param int $objectID
|
|
* @access public
|
|
* @return bool
|
|
*/
|
|
public function deleteByObject($objectType, $objectID)
|
|
{
|
|
$files = $this->dao->select('*')->from(TABLE_FILE)
|
|
->where('objectType')->eq($objectType)
|
|
->andWhere('objectID')->in($objectID)
|
|
->andWhere('deleted')->eq('0')
|
|
->fetchAll('id');
|
|
|
|
foreach($files as $file)
|
|
{
|
|
$this->dao->update(TABLE_FILE)->set('deleted')->eq(1)->where('id')->eq($file->id)->exec();
|
|
}
|
|
|
|
return true;
|
|
}
|
|
|
|
/**
|
|
* Get info of a file.
|
|
*
|
|
* @param int $fileID
|
|
* @access public
|
|
* @return object|false
|
|
*/
|
|
public function getById(int $fileID): object|false
|
|
{
|
|
$file = $this->dao->findById($fileID)->from(TABLE_FILE)->fetch();
|
|
if(empty($file)) return false;
|
|
|
|
$this->setFileWebAndRealPaths($file);
|
|
return $file;
|
|
}
|
|
|
|
/**
|
|
* Get file by gid.
|
|
*
|
|
* @param string $gid
|
|
* @access public
|
|
* @return string
|
|
*/
|
|
public function getByGid(string $gid): object|false
|
|
{
|
|
$file = $this->dao->select('*')->from(TABLE_FILE)
|
|
->where('gid')->eq($gid)
|
|
->orWhere('(gid')->eq('')
|
|
->andWhere('title')->eq($gid)
|
|
->markRight(1)
|
|
->fetch();
|
|
if(empty($file)) return false;
|
|
|
|
$this->setFileWebAndRealPaths($file);
|
|
return $file;
|
|
}
|
|
|
|
/**
|
|
* Get file by object.
|
|
*
|
|
* @param string $objectType
|
|
* @param int $objectID
|
|
* @param string $title
|
|
* @param string $extra
|
|
* @access public
|
|
* @return object|false
|
|
*/
|
|
public function query(string $objectType, int $objectID = 0, string $title = '', string $extra = ''): object|false
|
|
{
|
|
$file = $this->dao->select('*')->from(TABLE_FILE)
|
|
->where('objectType')->eq($objectType)
|
|
->beginIF($objectID)->andWhere('objectID')->eq($objectID)->fi()
|
|
->beginIF($title)->andWhere('title')->eq($title)->fi()
|
|
->beginIF($extra)->andWhere('extra')->eq($extra)->fi()
|
|
->fetch();
|
|
if(empty($file)) return false;
|
|
|
|
return $file;
|
|
}
|
|
|
|
/**
|
|
* Get files by ID list.
|
|
*
|
|
* @param string|array $fileIdList
|
|
* @access public
|
|
* @return array
|
|
*/
|
|
public function getByIdList(string|array $fileIdList): array
|
|
{
|
|
if(empty($fileIdList)) return array();
|
|
|
|
$files = $this->dao->select('*')->from(TABLE_FILE)->where('id')->in($fileIdList)->orderBy('id')->fetchAll('id');
|
|
foreach($files as $file) $this->setFileWebAndRealPaths($file);
|
|
|
|
return $files;
|
|
}
|
|
|
|
/**
|
|
* Save upload.
|
|
*
|
|
* @param string $objectType
|
|
* @param int $objectID
|
|
* @param int|string $extra
|
|
* @param string $filesName
|
|
* @param string $labelsName
|
|
* @access public
|
|
* @return array
|
|
*/
|
|
public function saveUpload(string $objectType = '', int $objectID = 0, int|string $extra = '', string $filesName = 'files', string $labelsName = 'labels'): array|false
|
|
{
|
|
$fileTitles = array();
|
|
$now = helper::today();
|
|
$files = $this->getUpload($filesName, $labelsName);
|
|
|
|
foreach($files as $file)
|
|
{
|
|
if(!isset($file['size']) || $file['size'] == 0) continue;
|
|
if(!move_uploaded_file($file['tmpname'], $this->savePath . $this->getSaveName($file['pathname']))) return false;
|
|
|
|
$file = $this->compressImage($file);
|
|
|
|
$file['objectType'] = $objectType;
|
|
$file['objectID'] = $objectID;
|
|
$file['addedBy'] = $this->app->user->account;
|
|
$file['addedDate'] = $now;
|
|
if($extra) $file['extra'] = $extra;
|
|
unset($file['tmpname']);
|
|
$this->dao->insert(TABLE_FILE)->data($file)->exec();
|
|
$fileTitles[$this->dao->lastInsertId()] = $file['title'];
|
|
}
|
|
return $fileTitles;
|
|
}
|
|
|
|
/**
|
|
* Save a file.
|
|
*
|
|
* @param array $file
|
|
* @param string $objectType
|
|
* @param int $objectID
|
|
* @param string $extra
|
|
* @param string $filesName
|
|
* @param string $labelsName
|
|
* @access public
|
|
* @return object
|
|
*/
|
|
public function saveAFile(array $file, string $objectType = '', int $objectID = 0, string $extra = '', string $filesName = 'files', string $labelsName = 'labels'): object|false
|
|
{
|
|
$now = helper::today();
|
|
|
|
if(!move_uploaded_file($file['tmpname'], $this->savePath . $this->getSaveName($file['pathname']))) return false;
|
|
|
|
$file = $this->compressImage($file);
|
|
|
|
$file['objectType'] = $objectType;
|
|
$file['objectID'] = $objectID;
|
|
$file['addedBy'] = $this->app->user->account;
|
|
$file['addedDate'] = $now;
|
|
$file['extra'] = $extra;
|
|
unset($file['tmpname']);
|
|
$this->dao->insert(TABLE_FILE)->data($file)->exec();
|
|
|
|
$fileTitle = new stdclass();
|
|
$fileTitle->id = $this->dao->lastInsertId();
|
|
$fileTitle->title = $file['title'];
|
|
|
|
return $fileTitle;
|
|
}
|
|
|
|
/**
|
|
* Get counts of uploaded files.
|
|
*
|
|
* @access public
|
|
* @return int
|
|
*/
|
|
public function getCount(): int
|
|
{
|
|
return count($this->getUpload());
|
|
}
|
|
|
|
/**
|
|
* Get info of uploaded files.
|
|
*
|
|
* @param string $htmlTagName
|
|
* @param string $labelsName
|
|
* @access public
|
|
* @return array
|
|
*/
|
|
public function getUpload(string $htmlTagName = 'files', string $labelsName = 'labels'): array
|
|
{
|
|
$files = array();
|
|
if(!isset($_FILES[$htmlTagName])) return $files;
|
|
if(!is_array($_FILES[$htmlTagName]['error']) && $_FILES[$htmlTagName]['error'] != 0) return $_FILES[$htmlTagName];
|
|
if(is_array($_FILES[$htmlTagName]['error']) && reset($_FILES[$htmlTagName]['error']) != 0)
|
|
{
|
|
$_FILES[$htmlTagName]['error'] = reset($_FILES[$htmlTagName]['error']);
|
|
return $_FILES[$htmlTagName];
|
|
}
|
|
|
|
$purifier = $this->app->loadClass('purifier');
|
|
|
|
/* If the file var name is an array. */
|
|
if(is_array($_FILES[$htmlTagName]['name']))
|
|
{
|
|
extract($_FILES[$htmlTagName]);
|
|
foreach($name as $id => $filename)
|
|
{
|
|
if(empty($filename)) continue;
|
|
if(!validater::checkFileName($filename)) continue;
|
|
|
|
$title = isset($_POST[$labelsName][$id]) ? $_POST[$labelsName][$id] : '';
|
|
$file['extension'] = $this->getExtension($filename, $tmp_name[$id]);
|
|
$file['pathname'] = $this->setPathName($id, $file['extension']);
|
|
$file['title'] = (!empty($title) and $title != $filename) ? htmlSpecialString($title) : $filename;
|
|
$file['title'] = $purifier->purify($file['title']);
|
|
$file['size'] = $size[$id];
|
|
$file['tmpname'] = $tmp_name[$id];
|
|
$file['extra'] = !empty($extra[$id]) ? $extra[$id] : '';
|
|
$files[] = $file;
|
|
}
|
|
}
|
|
else
|
|
{
|
|
if(empty($_FILES[$htmlTagName]['name'])) return $files;
|
|
extract($_FILES[$htmlTagName]);
|
|
if(!validater::checkFileName($name)) return array();
|
|
$title = isset($_POST[$labelsName][0]) ? $_POST[$labelsName][0] : '';
|
|
$file['extension'] = $this->getExtension($name, $tmp_name);
|
|
$file['pathname'] = $this->setPathName(0, $file['extension']);
|
|
$file['title'] = (!empty($title) && $title != $name) ? htmlSpecialString($title) : $name;
|
|
$file['title'] = $purifier->purify($file['title']);
|
|
$file['size'] = $size;
|
|
$file['tmpname'] = $tmp_name;
|
|
return array($file);
|
|
}
|
|
return $files;
|
|
}
|
|
|
|
/**
|
|
* get uploaded file from zui.uploader.
|
|
*
|
|
* @access public
|
|
* @return array
|
|
*/
|
|
public function getChunkedFile(): array
|
|
{
|
|
$name = urldecode(zget($_SERVER, 'HTTP_X_FILENAME', ''));
|
|
if(!validater::checkFileName($name) or empty($name)) return array();
|
|
|
|
$purifier = $this->app->loadClass('purifier');
|
|
|
|
$file = array();
|
|
$file['id'] = 0;
|
|
$file['extension'] = $this->getExtension($name);
|
|
$file['title'] = $purifier->purify(substr($name, 0, strpos($name, $file['extension']) - 1));
|
|
$file['size'] = zget($_SERVER, 'HTTP_X_FILESIZE', 0);
|
|
$file['pathname'] = md5($file['title']);
|
|
$file['chunks'] = zget($_SERVER, 'HTTP_X_TOTAL_CHUNKS', 0);
|
|
$file['chunkIndex'] = zget($_SERVER, 'HTTP_X_CHUNK_INDEX', 0);
|
|
|
|
if(stripos($this->config->file->allowed, ",{$file['extension']},") === false) $file['pathname'] = $file['pathname'] . '.notAllowed';
|
|
return $file;
|
|
}
|
|
|
|
/**
|
|
* Save uploaded file by chunk.
|
|
*
|
|
* @param array $file
|
|
* @param int $uid
|
|
* @access public
|
|
* @return array
|
|
*/
|
|
public function saveChunkedFile(array $file, string $uid): array
|
|
{
|
|
if($file['chunks'] == 0) return array();
|
|
|
|
$tmpFilePath = $this->app->getTmpRoot() . 'uploadfiles/';
|
|
$tmpFileSavePath = $tmpFilePath . $uid . '/';
|
|
if(!is_dir($tmpFileSavePath)) mkdir($tmpFileSavePath, 0777, true);
|
|
|
|
$file['realpath'] = $tmpFileSavePath . basename($this->getSaveName($file['pathname']));
|
|
file_put_contents($file['realpath'], file_get_contents('php://input'), $file['chunkIndex'] == 0 ? 0 : FILE_APPEND);
|
|
|
|
$uploadFile = array();
|
|
$uploadFile['extension'] = $file['extension'];
|
|
$uploadFile['pathname'] = $file['pathname'];
|
|
$uploadFile['title'] = $file['title'];
|
|
$uploadFile['realpath'] = $file['realpath'];
|
|
$uploadFile['size'] = $file['size'];
|
|
|
|
return $uploadFile;
|
|
}
|
|
|
|
/**
|
|
* Get extension of a file.
|
|
*
|
|
* @param string $filename
|
|
* @param string $filePath
|
|
* @access public
|
|
* @return string
|
|
*/
|
|
public function getExtension(string $filename, string $filePath = ''): string
|
|
{
|
|
$extension = trim(strtolower(pathinfo($filename, PATHINFO_EXTENSION)));
|
|
if($extension and strpos($extension, '::') !== false) $extension = substr($extension, 0, strpos($extension, '::'));
|
|
|
|
if(in_array($extension, $this->config->file->imageExtensions) && !empty($filePath))
|
|
{
|
|
$imagesize = getimagesize($filePath);
|
|
if(!isset($imagesize[2])) return 'txt';
|
|
|
|
$realExtension = image_type_to_extension($imagesize[2], false);
|
|
$extension = $extension == 'jpg' && $realExtension == 'jpeg' ? 'jpg' : $realExtension;
|
|
}
|
|
|
|
if(empty($extension) or stripos(",{$this->config->file->dangers},", ",{$extension},") !== false) return 'txt';
|
|
if(empty($extension) or stripos(",{$this->config->file->allowed},", ",{$extension},") === false) return 'txt';
|
|
if($extension == 'php') return 'txt';
|
|
return $extension;
|
|
}
|
|
|
|
/**
|
|
* Get save name.
|
|
*
|
|
* @param string $pathName
|
|
* @access public
|
|
* @return string
|
|
*/
|
|
public function getSaveName(string $pathName): string
|
|
{
|
|
$position = strrpos($pathName, '.');
|
|
return $position === false ? $pathName : substr($pathName, 0, $position);
|
|
}
|
|
|
|
/**
|
|
* Get real path name.
|
|
*
|
|
* @param string $pathName
|
|
* @access public
|
|
* @return string
|
|
*/
|
|
public function getRealPathName(string $pathName): string
|
|
{
|
|
$realPath = $this->savePath . $pathName;
|
|
if(file_exists($realPath)) return $pathName;
|
|
|
|
return $this->getSaveName($pathName);
|
|
}
|
|
|
|
/**
|
|
* Get export tpl.
|
|
*
|
|
* @param string $module
|
|
* @access public
|
|
* @return array
|
|
*/
|
|
public function getExportTemplate(string $module): array
|
|
{
|
|
return $this->dao->select('id,title,content,public')->from(TABLE_USERTPL)
|
|
->where('type')->eq("export$module")
|
|
->andwhere('account', true)->eq($this->app->user->account)
|
|
->orWhere('public')->eq('1')
|
|
->markRight(1)
|
|
->orderBy('id')
|
|
->fetchAll();
|
|
}
|
|
|
|
/**
|
|
* Get tmp import path.
|
|
*
|
|
* @access public
|
|
* @return string
|
|
*/
|
|
public function getPathOfImportedFile(): string
|
|
{
|
|
$path = $this->app->getTmpRoot() . 'import';
|
|
if(!is_dir($path)) mkdir($path, 0755, true);
|
|
|
|
return $path;
|
|
}
|
|
|
|
/**
|
|
* Save export template.
|
|
*
|
|
* @param string $module
|
|
* @access public
|
|
* @return int|false
|
|
*/
|
|
public function saveExportTemplate(string $module): int|false
|
|
{
|
|
$template = fixer::input('post')
|
|
->add('account', $this->app->user->account)
|
|
->add('type', "export$module")
|
|
->join('content', ',')
|
|
->get();
|
|
|
|
if($template->title == $this->lang->file->defaultTPL)
|
|
{
|
|
dao::$errors[] = sprintf($this->lang->error->unique, $this->lang->file->tplTitle, $this->lang->file->defaultTPL);
|
|
return false;
|
|
}
|
|
|
|
$condition = "`type`='export$module' and account='{$this->app->user->account}'";
|
|
$this->dao->insert(TABLE_USERTPL)->data($template)->batchCheck('title, content', 'notempty')->check('title', 'unique', $condition)->exec();
|
|
return $this->dao->lastInsertId();
|
|
}
|
|
|
|
/**
|
|
* Set path name of the uploaded file to be saved.
|
|
*
|
|
* @param string|int $fileID
|
|
* @param string $extension
|
|
* @access public
|
|
* @return string
|
|
*/
|
|
public function setPathName(string|int $fileID, string $extension): string
|
|
{
|
|
$sessionID = session_id();
|
|
$randString = substr($sessionID, mt_rand(0, strlen($sessionID) - 5), 3);
|
|
return date('Ym/dHis', $this->now) . $fileID . mt_rand(0, 10000) . $randString . '.' . $extension;
|
|
}
|
|
|
|
/**
|
|
* Set save path.
|
|
*
|
|
* @access public
|
|
* @return void
|
|
*/
|
|
public function setSavePath(): void
|
|
{
|
|
$companyID = isset($this->app->company->id) ? $this->app->company->id : 1;
|
|
$savePath = $this->app->getAppRoot() . "www/data/upload/{$companyID}/" . date('Ym/', $this->now);
|
|
|
|
$parentDir = dirname($savePath);
|
|
while(!isset($parentCanWrite))
|
|
{
|
|
if(file_exists($parentDir)) $parentCanWrite = is_writable($parentDir);
|
|
$parentDir = dirname($parentDir);
|
|
}
|
|
|
|
if(!file_exists($savePath) && $parentCanWrite)
|
|
{
|
|
mkdir($savePath, 0777, true);
|
|
touch($savePath . 'index.html');
|
|
}
|
|
$this->savePath = dirname($savePath) . '/';
|
|
}
|
|
|
|
/**
|
|
* Set the web path of upload files.
|
|
*
|
|
* @access public
|
|
* @return void
|
|
*/
|
|
public function setWebPath(): void
|
|
{
|
|
$companyID = isset($this->app->company->id) ? $this->app->company->id : 1;
|
|
$this->webPath = $this->app->getWebRoot() . "data/upload/{$companyID}/";
|
|
}
|
|
|
|
/**
|
|
* Set paths: realPath and webPath.
|
|
*
|
|
* @param object $file
|
|
* @access public
|
|
* @return void
|
|
*/
|
|
public function setFileWebAndRealPaths(object $file): void
|
|
{
|
|
if($file->objectType == 'traincourse' or $file->objectType == 'traincontents')
|
|
{
|
|
$file->realPath = $this->app->getWwwRoot() . 'data/course/' . $file->pathname;
|
|
$file->webPath = $this->config->webRoot . 'data/course/' . $file->pathname;
|
|
}
|
|
else
|
|
{
|
|
$pathName = $this->getRealPathName($file->pathname);
|
|
$file->realPath = $this->savePath . $pathName;
|
|
$file->webPath = $this->webPath . $pathName;
|
|
}
|
|
if(!isset($file->name)) $file->name = $file->title;
|
|
if(!isset($file->url)) $file->url = helper::createLink('file', 'download', "fileID={$file->id}");
|
|
}
|
|
|
|
/**
|
|
* Insert the set image size code.
|
|
*
|
|
* @param string|null $content
|
|
* @param int $maxSize
|
|
* @access public
|
|
* @return string|null
|
|
*/
|
|
public function setImgSize(string|null $content, int $maxSize = 0): string
|
|
{
|
|
$content = (string)$content;
|
|
if(empty($content)) return $content;
|
|
|
|
static $fileLink, $imageLink;
|
|
if(empty($fileLink)) $fileLink = helper::createLink('file', 'read', 'fileID=(%fileID%)', '\w+');
|
|
if(empty($imageLink)) $imageLink = helper::createLink('file', 'read', "fileID=$1", "$3");
|
|
|
|
$readLinkReg = str_replace(array('%fileID%', '/', '.', '?'), array('[0-9]+', '\/', '\.', '\?'), $fileLink);
|
|
|
|
$content = preg_replace('/ src="(' . $readLinkReg . ')" /', ' onload="setImageSize(this,' . $maxSize . ')" src="$1" ', $content);
|
|
$content = preg_replace('/ src="{([0-9]+)(\.(\w+))?}" /', ' onload="setImageSize(this,' . $maxSize . ')" src="' . $imageLink . '" ', $content);
|
|
|
|
return str_replace(' src="data/upload', ' onload="setImageSize(this,' . $maxSize . ')" src="data/upload', $content);
|
|
}
|
|
|
|
/**
|
|
* Check file exists or not.
|
|
*
|
|
* @param object $file
|
|
* @access public
|
|
* @return bool
|
|
*/
|
|
public function fileExists(object $file): bool
|
|
{
|
|
if(empty($file->realPath)) return false;
|
|
return file_exists($file->realPath);
|
|
}
|
|
|
|
/**
|
|
* Unlink file.
|
|
*
|
|
* @param object $file
|
|
* @access public
|
|
* @return bool|null
|
|
*/
|
|
public function unlinkFile(object $file): bool|null
|
|
{
|
|
if(empty($file->realPath)) return false;
|
|
return @unlink($file->realPath);
|
|
}
|
|
|
|
/**
|
|
* Replace a file.
|
|
*
|
|
* @access public
|
|
* @return bool
|
|
*/
|
|
public function replaceFile(int $fileID, string $postName = 'upFile'): bool
|
|
{
|
|
$files = $this->getUpload($postName);
|
|
if(empty($files)) return false;
|
|
|
|
$pathName = $this->dao->select('pathname')->from(TABLE_FILE)->where('id')->eq($fileID)->fetch('pathname');
|
|
if(empty($pathName)) return false;
|
|
|
|
$file = $files[0];
|
|
$realPathName = $this->savePath . $this->getRealPathName($pathName);
|
|
$parentDir = dirname($realPathName);
|
|
if(!is_dir($parentDir) and is_writable(dirname($parentDir))) mkdir($parentDir);
|
|
move_uploaded_file($file['tmpname'], $realPathName);
|
|
|
|
$file['pathname'] = $pathName;
|
|
$file = $this->compressImage($file);
|
|
|
|
$fileInfo = new stdclass();
|
|
$fileInfo->addedBy = $this->app->user->account;
|
|
$fileInfo->addedDate = helper::now();
|
|
$fileInfo->size = $file['size'];
|
|
$this->dao->update(TABLE_FILE)->data($fileInfo)->where('id')->eq($fileID)->exec();
|
|
return true;
|
|
}
|
|
|
|
/**
|
|
* Check file priv.
|
|
*
|
|
* @param object $file
|
|
* @access public
|
|
* @return bool
|
|
*/
|
|
public function checkPriv(object $file): bool
|
|
{
|
|
if(!$file->objectType || !$file->objectID) return true;
|
|
if(!$this->loadModel('user')->isLogon()) return true;
|
|
if($file->extra == 'editor') return true;
|
|
|
|
$objectType = $file->objectType;
|
|
$objectID = $file->objectID;
|
|
$table = zget($this->config->objectTables, $objectType, '');
|
|
|
|
if(!$table) return true;
|
|
|
|
$groupName = zget($this->config->file->objectGroup, $objectType, '');
|
|
if(!empty($groupName))
|
|
{
|
|
$groupID = $this->dao->findByID($objectID)->from($table)->fetch($groupName);
|
|
if($objectType == 'testcase' && $groupID == 0) return true;
|
|
return $this->loadModel($groupName)->checkPriv((int)$groupID);
|
|
}
|
|
|
|
if($objectType == 'build')
|
|
{
|
|
$build = $this->dao->select('project,execution')->from(TABLE_BUILD)->where('id')->eq($objectID)->fetch();
|
|
if($build->execution) return $this->loadModel('execution')->checkPriv($build->execution);
|
|
return $this->loadModel('project')->checkPriv($build->project);
|
|
}
|
|
|
|
if($objectType == 'release')
|
|
{
|
|
$release = $this->dao->select('project,product')->from(TABLE_RELEASE)->where('id')->eq($objectID)->fetch();
|
|
return $this->loadModel('product')->checkPriv($release->product);
|
|
}
|
|
|
|
if($objectType == 'doc')
|
|
{
|
|
$doc = $this->dao->findById($objectID)->from(TABLE_DOC)->fetch();
|
|
return $this->loadModel('doc')->checkPrivDoc($doc);
|
|
}
|
|
|
|
if($objectType == 'feedback')
|
|
{
|
|
$productID = $this->dao->findById($objectID)->from(TABLE_FEEDBACK)->fetch('product');
|
|
$grantProducts = $this->loadModel('feedback')->getGrantProducts();
|
|
return in_array($productID, array_keys($grantProducts));
|
|
}
|
|
|
|
return true;
|
|
}
|
|
|
|
/**
|
|
* Compress image to config configured size.
|
|
*
|
|
* @param string $rawImage
|
|
* @param string $target
|
|
* @param int $x
|
|
* @param int $y
|
|
* @param int $width
|
|
* @param int $height
|
|
* @param int $resizeWidth
|
|
* @param int $resizeHeight
|
|
* @access public
|
|
* @return void
|
|
*/
|
|
public function cropImage($rawImage, $target, $x, $y, $width, $height, $resizeWidth = 0, $resizeHeight = 0)
|
|
{
|
|
$this->app->loadClass('phpthumb', true);
|
|
|
|
if(!extension_loaded('gd')) return false;
|
|
|
|
$croper = new phpthumb($rawImage);
|
|
if($resizeWidth > 0) $croper->resize($resizeWidth, $resizeHeight);
|
|
$croper->crop($x, $y, $width, $height);
|
|
$croper->save($target);
|
|
}
|
|
|
|
/**
|
|
* Paste image in kindeditor at firefox and chrome.
|
|
*
|
|
* @param string $data
|
|
* @param string $uid
|
|
* @param bool $safe
|
|
* @access public
|
|
* @return string
|
|
*/
|
|
public function pasteImage(string $data, string $uid = '', bool $safe = false): string
|
|
{
|
|
if(empty($data)) return '';
|
|
|
|
$dataLength = strlen($data);
|
|
if(ini_get('pcre.backtrack_limit') < $dataLength) ini_set('pcre.backtrack_limit', $dataLength);
|
|
preg_match_all('/<img src="(data:image\/(\S+);base64,(\S+))".*\/>/U', $data, $out);
|
|
if($out[3])
|
|
{
|
|
foreach($out[3] as $key => $base64Image)
|
|
{
|
|
$base64Image = str_replace('\"', '"', $base64Image);
|
|
$extension = strtolower($out[2][$key]);
|
|
if(!in_array($extension, $this->config->file->imageExtensions)) helper::end();
|
|
$imageData = base64_decode($base64Image);
|
|
|
|
$file['extension'] = $extension;
|
|
$file['pathname'] = $this->setPathName($key, $file['extension']);
|
|
$file['size'] = strlen($imageData);
|
|
$file['addedBy'] = $this->app->user->account;
|
|
$file['addedDate'] = helper::today();
|
|
$file['title'] = str_replace(".$extension", '', basename($file['pathname']));
|
|
|
|
$imagePath = $this->savePath . $this->getSaveName($file['pathname']);
|
|
if(is_writable(dirname($imagePath))) file_put_contents($imagePath, $imageData);
|
|
$this->dao->insert(TABLE_FILE)->data($file)->exec();
|
|
$fileID = $this->dao->lastInsertID();
|
|
if($uid) $_SESSION['album'][$uid][] = $fileID;
|
|
|
|
$data = str_replace($out[1][$key], helper::createLink('file', 'read', "fileID=$fileID", $file['extension']), $data);
|
|
}
|
|
}
|
|
elseif($safe)
|
|
{
|
|
$data = fixer::stripDataTags(rawurldecode($data));
|
|
}
|
|
|
|
return $data;
|
|
}
|
|
|
|
/**
|
|
* Parse CSV.
|
|
*
|
|
* @param string $csvFile
|
|
* @access public
|
|
* @return array
|
|
*/
|
|
public function parseCSV(string $csvFile): array
|
|
{
|
|
/* Parse file only in zentao. */
|
|
if(strpos($csvFile, $this->app->getBasePath()) !== 0) return array();
|
|
if(!file_exists($csvFile)) return array();
|
|
|
|
$fh = fopen($csvFile, "r");
|
|
$data = array();
|
|
while(($row = fgetcsv($fh, 0, ",", "\"", "\\")) !== false) $data[] = $row;
|
|
fclose($fh);
|
|
|
|
return $data;
|
|
}
|
|
|
|
/**
|
|
* Process editor.
|
|
*
|
|
* @param object $data
|
|
* @param string|array $editorList
|
|
* @param mixed $uid
|
|
* @access public
|
|
* @return object
|
|
*/
|
|
public function processImgURL(object $data, string|array $editorList, mixed $uid = ''): object
|
|
{
|
|
if(!is_string($uid)) return $data;
|
|
|
|
if(is_string($editorList)) $editorList = explode(',', str_replace(' ', '', $editorList));
|
|
if(empty($editorList)) return $data;
|
|
|
|
$readLinkReg = helper::createLink('file', 'read', 'fileID=(%fileID%)', '(%viewType%)');
|
|
$readLinkReg = str_replace(array('%fileID%', '%viewType%', '?', '/'), array('[0-9]+', '\w+', '\?', '\/'), $readLinkReg);
|
|
$imageIdList = array();
|
|
foreach($editorList as $editorID)
|
|
{
|
|
if(empty($editorID) or empty($data->$editorID)) continue;
|
|
|
|
$imgURL = $this->config->requestType == 'GET' ? '{$2.$1}' : '{$1.$2}';
|
|
|
|
$content = $this->pasteImage($data->$editorID, $uid);
|
|
if($content) $data->$editorID = $content;
|
|
|
|
$data->$editorID = preg_replace("/ src=\"$readLinkReg\" /", ' src="' . $imgURL . '" ', $data->$editorID);
|
|
$data->$editorID = preg_replace("/ src=\"" . htmlSpecialString($readLinkReg) . "\" /", ' src="' . $imgURL . '" ', $data->$editorID);
|
|
|
|
preg_match_all('/ src="{([0-9]+)\.\w+}"/', $data->$editorID, $matches);
|
|
if($matches[1])
|
|
{
|
|
foreach($matches[1] as $imageID) $imageIdList[$imageID] = $imageID;
|
|
}
|
|
}
|
|
|
|
if(!empty($_SESSION['album'][$uid]))
|
|
{
|
|
foreach($_SESSION['album'][$uid] as $imageID)
|
|
{
|
|
if(isset($imageIdList[$imageID])) $_SESSION['album']['used'][$uid][$imageID] = $imageID;
|
|
}
|
|
}
|
|
return $data;
|
|
}
|
|
|
|
/**
|
|
* Compress image
|
|
*
|
|
* @param array $file
|
|
* @access public
|
|
* @return array
|
|
*/
|
|
public function compressImage(array $file): array
|
|
{
|
|
if(!extension_loaded('gd') or !function_exists('imagecreatefromjpeg')) return $file;
|
|
|
|
$pathName = $file['pathname'];
|
|
$fileName = $this->savePath . $this->getSaveName($pathName);
|
|
$suffix = $file['extension'];
|
|
$lowerSuffix = strtolower($suffix);
|
|
|
|
if(!in_array($lowerSuffix, $this->config->file->image2Compress)) return $file;
|
|
|
|
$quality = 85;
|
|
$newSuffix = '.jpg';
|
|
$compressedName = str_replace($suffix, $newSuffix, $pathName);
|
|
|
|
$res = $lowerSuffix == '.bmp' ? $this->imagecreatefrombmp($fileName) : imagecreatefromjpeg($fileName);
|
|
imagejpeg($res, $fileName, $quality);
|
|
|
|
$file['pathname'] = $compressedName;
|
|
$file['extension'] = ltrim($newSuffix, '.');
|
|
$file['size'] = filesize($fileName);
|
|
return $file;
|
|
}
|
|
|
|
/**
|
|
* Read 24bit BMP files
|
|
* Author: de77
|
|
* Licence: MIT
|
|
* Webpage: de77.com
|
|
* Version: 07.02.2010
|
|
* Source : https://github.com/acustodioo/pic/blob/master/imagecreatefrombmp.function.php
|
|
*
|
|
* @param string $filename
|
|
* @access public
|
|
* @return resource
|
|
*/
|
|
public function imagecreatefrombmp(string $filename): GdImage|false
|
|
{
|
|
$f = fopen($filename, "rb");
|
|
|
|
//read header
|
|
$header = fread($f, 54);
|
|
$header = unpack('c2identifier/Vfile_size/Vreserved/Vbitmap_data/Vheader_size/'.
|
|
'Vwidth/Vheight/vplanes/vbits_per_pixel/Vcompression/Vdata_size/'.
|
|
'Vh_resolution/Vv_resolution/Vcolors/Vimportant_colors', $header);
|
|
|
|
if ($header['identifier1'] != 66 or $header['identifier2'] != 77) return false;
|
|
if ($header['bits_per_pixel'] != 24) return false;
|
|
|
|
$wid2 = ceil((3 * $header['width']) / 4) * 4;
|
|
|
|
$wid = $header['width'];
|
|
$hei = $header['height'];
|
|
|
|
$img = imagecreatetruecolor($header['width'], $header['height']);
|
|
|
|
//read pixels
|
|
for($y = $hei - 1; $y >= 0; $y--)
|
|
{
|
|
$row = fread($f, $wid2);
|
|
$pixels = str_split($row, 3);
|
|
|
|
for ($x = 0; $x < $wid; $x++) imagesetpixel($img, $x, $y, $this->dwordize($pixels[$x]));
|
|
}
|
|
fclose($f);
|
|
return $img;
|
|
}
|
|
|
|
/**
|
|
* Dwordize for imagecreatefrombmp
|
|
*
|
|
* @param string $str
|
|
* @access private
|
|
* @return int
|
|
*/
|
|
private function dwordize(string $str): int
|
|
{
|
|
$a = ord($str[0]);
|
|
$b = ord($str[1]);
|
|
$c = ord($str[2]);
|
|
return $c * 256 * 256 + $b * 256 + $a;
|
|
}
|
|
|
|
/**
|
|
* Update objectID.
|
|
*
|
|
* @param array|string|bool $uid
|
|
* @param int $objectID
|
|
* @param string $objectType
|
|
* @access public
|
|
* @return bool
|
|
*/
|
|
public function updateObjectID(array|string|bool $uid, int $objectID, string $objectType): bool
|
|
{
|
|
if(empty($uid)) return true;
|
|
|
|
if(is_string($uid)) $uid = array($uid);
|
|
if(!is_array($uid)) return true;
|
|
|
|
foreach($uid as $value)
|
|
{
|
|
if(empty($_SESSION['album']['used'][$value])) continue;
|
|
|
|
$data = new stdclass();
|
|
$data->objectID = $objectID;
|
|
$data->objectType = $objectType;
|
|
if(!defined('RUN_MODE') || RUN_MODE != 'api') $data->extra = 'editor';
|
|
|
|
$this->dao->update(TABLE_FILE)->data($data)->where('id')->in($_SESSION['album']['used'][$value])->exec();
|
|
}
|
|
return !dao::isError();
|
|
}
|
|
|
|
/**
|
|
* Get upload by uid.
|
|
*
|
|
* @param array|string|bool $uid
|
|
* @param string $filesName
|
|
* @param string $labelsName
|
|
* @access public
|
|
* @return array
|
|
*/
|
|
public function getUploadByUID(array|string|bool $uid, string $filesName = 'files', string $labelsName = 'labels'): array
|
|
{
|
|
if(empty($uid)) return array();
|
|
|
|
if(is_string($uid)) $uid = array($uid);
|
|
if(!is_array($uid)) return array();
|
|
|
|
$files = array();
|
|
foreach($uid as $value)
|
|
{
|
|
if(empty($_SESSION['album']['used'][$value])) continue;
|
|
|
|
$uidFiles = $this->dao->select('id, title')->from(TABLE_FILE)->where('id')->in($_SESSION['album']['used'][$value])->fetchPairs();
|
|
foreach($uidFiles as $fileID => $fileName)
|
|
{
|
|
$files[$fileID] = $fileName;
|
|
}
|
|
}
|
|
return $files;
|
|
}
|
|
|
|
/**
|
|
* Revert real src.
|
|
*
|
|
* @param object $data
|
|
* @param string $fields
|
|
* @access public
|
|
* @return object
|
|
*/
|
|
public function replaceImgURL(object $data, string $fields): object
|
|
{
|
|
$moduleName = $this->app->getModuleName();
|
|
$methodName = $this->app->getMethodName();
|
|
if($moduleName == 'story' && isset($data->type)) $moduleName = $data->type;
|
|
if(is_string($fields)) $fields = explode(',', str_replace(' ', '', $fields));
|
|
|
|
$textareaFields = $this->dao->select('id,field')->from(TABLE_WORKFLOWFIELD)->where('module')->eq($moduleName)->andWhere('control')->eq('richtext')->andWhere('buildin')->eq('0')->fetchPairs();
|
|
if($textareaFields) $fields = array_merge($fields, $textareaFields);
|
|
|
|
foreach($fields as $field)
|
|
{
|
|
if(empty($field) or empty($data->$field)) continue;
|
|
if(is_numeric($data->$field)) $data->$field = (string)$data->$field;
|
|
$data->$field = preg_replace('/ src="{([0-9]+)(\.(\w+))?}" /', ' src="' . helper::createLink('file', 'read', "fileID=$1", "$3") . '" ', $data->$field);
|
|
|
|
/* Convert plain text URLs into HTML hyperlinks. */
|
|
if(isset($this->config->file->convertURL['common'][$methodName]) or isset($this->config->file->convertURL[$moduleName][$methodName]))
|
|
{
|
|
$fieldData = $data->$field;
|
|
preg_match_all('/(<a[^>]*>.*<\/a>)/Ui', $fieldData, $aTags);
|
|
preg_match_all('/(<img[^>]*>)/i', $fieldData, $imgTags);
|
|
preg_match_all('/(<iframe[^>]*>[^<]*<\/iframe>)/i', $fieldData, $iframeTags);
|
|
preg_match_all('/(<embed[^>]*>)/i', $fieldData, $embedTags);
|
|
preg_match_all('/(<pre[^>]*>.*<\/pre>)/sUi', $fieldData, $preTags);
|
|
|
|
foreach($aTags[0] as $i => $aTag) $fieldData = str_replace($aTag, "<A_{$i}>", $fieldData);
|
|
foreach($imgTags[0] as $i => $imgTag) $fieldData = str_replace($imgTag, "<IMG_{$i}>", $fieldData);
|
|
foreach($iframeTags[0] as $i => $iframeTag) $fieldData = str_replace($iframeTag, "<IFRAME_{$i}>", $fieldData);
|
|
foreach($embedTags[0] as $i => $embedTag) $fieldData = str_replace($embedTag, "<EMBED_{$i}>", $fieldData);
|
|
foreach($preTags[0] as $i => $preTag) $fieldData = str_replace($preTag, "<PRE_{$i}>", $fieldData);
|
|
|
|
$fieldData = preg_replace('/(http:\/\/|https:\/\/)((\w|=|\?|\.|\/|\&|-|%|;)+)/i', "<a href=\"\\0\" target=\"_blank\">\\0</a>", $fieldData);
|
|
|
|
foreach($aTags[0] as $i => $aTag) $fieldData = str_replace("<A_{$i}>", $aTag, $fieldData);
|
|
foreach($imgTags[0] as $i => $imgTag) $fieldData = str_replace("<IMG_{$i}>", $imgTag, $fieldData);
|
|
foreach($iframeTags[0] as $i => $iframeTag) $fieldData = str_replace("<IFRAME_{$i}>", $iframeTag, $fieldData);
|
|
foreach($embedTags[0] as $i => $embedTag) $fieldData = str_replace("<EMBED_{$i}>", $embedTag, $fieldData);
|
|
foreach($preTags[0] as $i => $preTag) $fieldData = str_replace("<PRE_{$i}>", $preTag, $fieldData);
|
|
|
|
$data->$field = $fieldData;
|
|
}
|
|
}
|
|
|
|
return $data;
|
|
}
|
|
|
|
/**
|
|
* Auto delete useless image.
|
|
*
|
|
* @param string $uid
|
|
* @access public
|
|
* @return void
|
|
*/
|
|
public function autoDelete(string $uid): void
|
|
{
|
|
if(empty($_SESSION['album'][$uid])) return;
|
|
|
|
foreach($_SESSION['album'][$uid] as $imageID)
|
|
{
|
|
if(isset($_SESSION['album']['used'][$uid][$imageID])) continue;
|
|
|
|
$file = $this->getById($imageID);
|
|
if(empty($file)) continue;
|
|
|
|
$this->dao->delete()->from(TABLE_FILE)->where('id')->eq($imageID)->exec();
|
|
$this->unlinkFile($file);
|
|
}
|
|
unset($_SESSION['album'][$uid]);
|
|
}
|
|
|
|
/**
|
|
* Send the download header to the client.
|
|
*
|
|
* @param string $fileName
|
|
* @param string $fileType
|
|
* @param string $content
|
|
* @access public
|
|
* @return void
|
|
*/
|
|
public function sendDownHeader(string $fileName, string $fileType, string $content, string $type = 'content'): void
|
|
{
|
|
/* Clean the ob content to make sure no space or utf-8 bom output. */
|
|
$obLevel = ob_get_level();
|
|
for($i = 0; $i < $obLevel; $i++) ob_end_clean();
|
|
|
|
/* Set the downloading cookie, thus the export form page can use it to judge whether to close the window or not. */
|
|
helper::setcookie('downloading', 1, 0, $this->config->webRoot, '', $this->config->cookieSecure, false);
|
|
|
|
/* Append the extension name auto. */
|
|
$extension = $fileType ? ('.' . $fileType) : '';
|
|
if($extension && strpos(strtolower($fileName), $extension) === false) $fileName .= $extension;
|
|
|
|
/* Judge the content type. */
|
|
$mimes = $this->config->file->mimes;
|
|
$contentType = isset($mimes[$fileType]) ? $mimes[$fileType] : $mimes['default'];
|
|
|
|
/* Safari浏览器下载文件名乱码问题。 */
|
|
if(isset($_SERVER['CONTENT_TYPE']) && isset($_SERVER['HTTP_USER_AGENT']) && $_SERVER['CONTENT_TYPE'] == 'application/x-www-form-urlencoded' && preg_match("/Safari/", $_SERVER["HTTP_USER_AGENT"]))
|
|
{
|
|
$fileName = rawurlencode($fileName);
|
|
$attachment = 'attachment; filename*=utf-8\'\'' . $fileName;
|
|
}
|
|
else
|
|
{
|
|
$fileName = str_replace("+", "%20", urlencode($fileName));
|
|
$attachment = "attachment; filename=\"{$fileName}\";";
|
|
}
|
|
|
|
helper::header('Content-type', $contentType);
|
|
helper::header('Content-Disposition', $attachment);
|
|
helper::header('Pragma', 'no-cache');
|
|
helper::header('Expires', '0');
|
|
if($type == 'content') helper::end($content);
|
|
if($type == 'file' and file_exists($content))
|
|
{
|
|
if(stripos($content, $this->app->getBasePath()) !== 0) helper::end();
|
|
|
|
set_time_limit(0);
|
|
$chunkSize = 10 * 1024 * 1024;
|
|
$handle = fopen($content, "r");
|
|
while(!feof($handle)) echo fread($handle, $chunkSize);
|
|
fclose($handle);
|
|
helper::end();
|
|
}
|
|
}
|
|
|
|
/**
|
|
* Get image size.
|
|
*
|
|
* @param object $file
|
|
* @access public
|
|
* @return array|false
|
|
*/
|
|
public function getImageSize(object $file): array|false
|
|
{
|
|
if(empty($file->realPath)) return array();
|
|
if($this->config->file->storageType == 'fs')
|
|
{
|
|
return file_exists($file->realPath) ? getimagesize($file->realPath) : array(0, 0, $file->extension);
|
|
}
|
|
elseif($this->config->file->storageType == 's3')
|
|
{
|
|
$this->app->loadClass('ossclient', true);
|
|
|
|
$config = $this->config->file;
|
|
$ossClient = new ossclient($config->accessKeyId, $config->accessKeySecret, $config->endpoint, $config->bucket);
|
|
$info = $ossClient->getImageInfo($file->pathname);
|
|
|
|
return array($info->ImageWidth->value, $info->ImageHeight->value, 'img');
|
|
}
|
|
}
|
|
|
|
/**
|
|
* Get file pairs.
|
|
*
|
|
* @param string $idList
|
|
* @param string $value
|
|
* @access public
|
|
* @return array
|
|
*/
|
|
public function getPairs(string $idList, string $value = 'title'): array
|
|
{
|
|
return $this->dao->select("id,$value")->from(TABLE_FILE)->where('id')->in($idList)->fetchPairs();
|
|
}
|
|
|
|
/**
|
|
* Update test case version.
|
|
*
|
|
* @param object $file
|
|
* @access public
|
|
* @return void
|
|
*/
|
|
public function updateTestcaseVersion(object $file): void
|
|
{
|
|
$oldCase = $this->dao->select('*')->from(TABLE_CASE)->where('fromCaseID')->eq($file->objectID)->fetch();
|
|
if(empty($oldCase)) return;
|
|
|
|
$isLibCase = $oldCase->lib && empty($oldCase->product);
|
|
if($isLibCase)
|
|
{
|
|
$fromcaseVersion = $oldCase->fromCaseVersion + 1;
|
|
$this->dao->update(TABLE_CASE)->set('`fromCaseVersion`')->eq($fromcaseVersion)->where('`fromCaseID`')->eq($file->objectID)->exec();
|
|
}
|
|
}
|
|
|
|
/**
|
|
* Update story files.
|
|
*
|
|
* @param int $storyID
|
|
* @access public
|
|
* @return void
|
|
*/
|
|
public function updateStoryFiles(int $storyID): void
|
|
{
|
|
$storySpec = $this->dao->select('id')->from(TABLE_STORYSPEC)->where('story')->eq($storyID)->orderBy('id desc')->limit(1)->fetch();
|
|
if(empty($storySpec)) return;
|
|
|
|
$files = $this->dao->select('id')->from(TABLE_FILE)
|
|
->where('objectType')->eq('story')
|
|
->andWhere('objectID')->eq($storyID)
|
|
->orderBy('id')
|
|
->fetchAll();
|
|
|
|
$storyFiles = [];
|
|
foreach($files as $file) $storyFiles[] = $file->id;
|
|
|
|
$this->dao->update(TABLE_STORYSPEC)->set('files')->eq(implode(',', $storyFiles))->where('id')->eq($storySpec->id)->exec();
|
|
}
|
|
|
|
/**
|
|
* Process file info for object.
|
|
*
|
|
* @param string $objectType
|
|
* @param object $oldObject
|
|
* @param object $newObject
|
|
* @param string $extra
|
|
* @param string $filesName
|
|
* @param string $labelsName
|
|
* @access public
|
|
* @return void
|
|
*/
|
|
public function processFile4Object(string $objectType, object $oldObject, object $newObject, string $extra = '', string $filesName = 'files', string $labelsName = 'labels'): void
|
|
{
|
|
if(empty($oldObject->id)) return;
|
|
|
|
$oldFiles = empty($oldObject->files) ? '' : implode(',', array_keys($oldObject->files));
|
|
$deleteFiles = $newObject->deleteFiles ?? null;
|
|
if(!empty($deleteFiles))
|
|
{
|
|
if(!isset($this->config->file->logicalDeletionType[$objectType]))
|
|
{
|
|
$this->dao->delete()->from(TABLE_FILE)->where('id')->in($deleteFiles)->exec();
|
|
foreach($deleteFiles as $fileID)
|
|
{
|
|
$this->unlinkFile($oldObject->files[$fileID]);
|
|
$oldFiles = empty($oldFiles) ? '' : trim(str_replace(",$fileID,", ',', ",$oldFiles,"), ',');
|
|
}
|
|
}
|
|
else
|
|
{
|
|
foreach($deleteFiles as $fileID)
|
|
{
|
|
$this->dao->update(TABLE_FILE)->set('deleted')->eq(1)->where('id')->eq($fileID)->exec();
|
|
$oldFiles = empty($oldFiles) ? '' : trim(str_replace(",$fileID,", ',', ",$oldFiles,"), ',');
|
|
}
|
|
}
|
|
}
|
|
|
|
$this->updateObjectID($this->post->uid, $oldObject->id, $objectType);
|
|
$addedFiles = $this->saveUpload($objectType, $oldObject->id, $extra, $filesName, $labelsName);
|
|
$addedFiles = empty($addedFiles) ? '' : ',' . implode(',', array_keys($addedFiles));
|
|
|
|
$newObject->files = trim($oldFiles . $addedFiles, ',');
|
|
$oldObject->files = $oldFiles;
|
|
}
|
|
|
|
/**
|
|
* Print file in view/edit page.
|
|
*
|
|
* @param object $file
|
|
* @param string $method
|
|
* @param bool $showDelete
|
|
* @param bool $showEdit
|
|
* @param object|null $object
|
|
* @access public
|
|
* @return string
|
|
*/
|
|
public function printFile(object $file, string $method, bool $showDelete, bool $showEdit, object|null $object): string
|
|
{
|
|
$html = '';
|
|
|
|
$sessionString = session_name() . '=' . session_id();
|
|
$uploadDate = $this->lang->file->uploadDate . substr($file->addedDate, 0, 10);
|
|
$fileTitle = "<i class='icon icon-file-text'></i> " . $file->title;
|
|
$fileSize = helper::formatKB((float)$file->size);
|
|
if(strpos($file->title, ".{$file->extension}") === false && $file->extension != 'txt') $fileTitle .= ".{$file->extension}";
|
|
$imageWidth = 0;
|
|
if(stripos('jpg|jpeg|gif|png|bmp', $file->extension) !== false)
|
|
{
|
|
$imageSize = $this->getImageSize($file);
|
|
$imageWidth = $imageSize[0] ?? 0;
|
|
}
|
|
|
|
$downloadLink = helper::createLink('file', 'download', "fileID=$file->id");
|
|
$downloadLink .= strpos($downloadLink, '?') === false ? '?' : '&';
|
|
$downloadLink .= $sessionString;
|
|
$fileTitleLink = common::hasPriv('file', 'download') ? html::a($downloadLink, $fileTitle . " <span class='text-gray'>({$fileSize})</span>", '_blank', "id='fileTitle$file->id'") : "<div id='fileTitle$file->id' style='display: inline-block'>" . $fileTitle . " <span class='text-gray'>({$fileSize})</span></div>";
|
|
|
|
$objectType = zget($this->config->file->objectType, $file->objectType);
|
|
$viewMethod = $objectType == 'feedback' && $this->config->vision != 'lite' ? 'adminView' : 'view';
|
|
|
|
$html .= "<li class='mb-2 file' title='{$uploadDate}'>" . $fileTitleLink;
|
|
if(strpos('view,edit', $method) !== false)
|
|
{
|
|
if(common::hasPriv($objectType, $viewMethod, $object)) $html = $this->buildFileActions($html, $downloadLink, $imageWidth, $showEdit, $showDelete, $file, $object);
|
|
}
|
|
else
|
|
{
|
|
if(common::hasPriv($objectType, 'edit', $object))
|
|
{
|
|
$html .= "<span class='right-icon'> ";
|
|
if(common::hasPriv('file', 'edit')) $html .= html::a(helper::createLink('file', 'edit', "fileID=$file->id"), $this->lang->file->edit, '', "data-width='400' class='fileAction btn btn-link' title='{$this->lang->file->edit}'");
|
|
if(common::hasPriv('file', 'delete')) $html .= html::a('###', $this->lang->delete, '', "class='fileAction btn btn-link' onclick='deleteFile($file->id)' title='{$this->lang->delete}'");
|
|
$html .= '</span>';
|
|
}
|
|
}
|
|
|
|
$html .= '</li>';
|
|
|
|
return $html;
|
|
}
|
|
|
|
/**
|
|
* Build file actions.
|
|
*
|
|
* @param string $html
|
|
* @param string $downloadLink
|
|
* @param bool $showEdit
|
|
* @param bool $showEdit
|
|
* @param bool $showDelete
|
|
* @param object $file
|
|
* @param object|null $object
|
|
* @access public
|
|
* @return string
|
|
*/
|
|
public function buildFileActions(string $html, string $downloadLink, int $imageWidth, bool $showEdit, bool $showDelete, object $file, object|null $object): string
|
|
{
|
|
$objectType = zget($this->config->file->objectType, $file->objectType);
|
|
$html .= "<span class='right-icon hidden'> ";
|
|
|
|
/* Determines whether the file supports preview. */
|
|
if($file->extension == 'txt')
|
|
{
|
|
$extension = 'txt';
|
|
if(($position = strrpos($file->title, '.')) !== false) $extension = substr($file->title, $position + 1);
|
|
$file->extension = $extension;
|
|
}
|
|
|
|
/* For the open source version of the file judgment. */
|
|
$canPreview = false;
|
|
$officeTypes = 'doc|docx|xls|xlsx|ppt|pptx|pdf';
|
|
$isOfficeFile = stripos($officeTypes, $file->extension) !== false;
|
|
if(stripos('txt|jpg|jpeg|gif|png|bmp|mp4', $file->extension) !== false) $canPreview = true;
|
|
if(isset($this->config->file->libreOfficeTurnon) and $this->config->file->libreOfficeTurnon == 1 && $isOfficeFile) $canPreview = true;
|
|
|
|
if($canPreview && common::hasPriv('file', 'preview'))
|
|
{
|
|
$dataToggle = $isOfficeFile ? '' : " data-toggle='modal' data-size='lg'";
|
|
$html .= html::a(helper::createLink('file', 'preview', "fileID=$file->id&mouse=left"), "<i class='icon icon-eye'></i>", $isOfficeFile ? '_blank' : '', "class='fileAction btn btn-link text-primary' title='{$this->lang->file->preview}' {$dataToggle}");
|
|
}
|
|
if(common::hasPriv('file', 'download')) $html .= html::a($downloadLink, "<i class='icon icon-download'></i>", '_blank', "class='fileAction btn btn-link text-primary' title='{$this->lang->file->downloadFile}'");
|
|
if(common::hasPriv($objectType, 'edit', $object))
|
|
{
|
|
if($showEdit and common::hasPriv('file', 'edit')) $html .= html::a('###', "<i class='icon icon-pencil-alt'></i>", '', "id='renameFile$file->id' class='fileAction btn btn-link edit text-primary' onclick='showRenameBox($file->id)' title='{$this->lang->file->edit}'");
|
|
if($showDelete and common::hasPriv('file', 'delete')) $html .= html::a('###', "<i class='icon icon-trash'></i>", '', "class='fileAction btn btn-link text-primary' onclick='deleteFile($file->id, this)' title='{$this->lang->delete}'");
|
|
}
|
|
|
|
$html .= '</span>';
|
|
$html .= '</li>';
|
|
|
|
$fileTitle = $file->title;
|
|
if(strrpos($fileTitle, '.') !== false)
|
|
{
|
|
/* Fix the file name exe.exe */
|
|
$title = explode('.', $fileTitle);
|
|
$extension = end($title);
|
|
if($file->extension == 'txt' && $extension != $file->extension) $file->extension = $extension;
|
|
array_pop($title);
|
|
$fileTitle = implode('.', $title);
|
|
}
|
|
|
|
$html .= "<li class='file hidden'><div>";
|
|
$html .= "<div class='renameFile w-300px' id='renameBox{$file->id}'><i class='icon icon-file-text'></i>";
|
|
$html .= "<div class='input-group'>";
|
|
$html .= "<input type='text' id='fileName{$file->id}' value='{$fileTitle}' class='form-control'/>";
|
|
$html .= "<input type='hidden' id='extension{$file->id}' value='{$file->extension}'/>";
|
|
$html .= "<strong class='input-group-addon'>.{$file->extension}</strong></div>";
|
|
$html .= "<div class='input-group-btn'>";
|
|
$html .= "<button type='button' class='btn btn-success file-name-confirm' onclick='setFileName({$file->id})' style='border-radius: 0px 2px 2px 0px; border-left-color: transparent;'><i class='icon icon-check'></i></button>";
|
|
$html .= "<button type='button' class='btn btn-gray file-name-cancel' onclick='showFile({$file->id})' style='border-radius: 0px 2px 2px 0px; border-left-color: transparent;'><i class='icon icon-close'></i></button>";
|
|
$html .= '</div></div></div></li>';
|
|
|
|
return $html;
|
|
}
|
|
|
|
/**
|
|
* Get last modified timestamp of file.
|
|
*
|
|
* @param object $file
|
|
* @access public
|
|
* @return int|false
|
|
*/
|
|
public function fileMTime(object $file): int|false
|
|
{
|
|
if(empty($file->realPath) or !file_exists($file->realPath)) return false;
|
|
return filemtime($file->realPath);
|
|
}
|
|
|
|
/**
|
|
* Get file size.
|
|
*
|
|
* @param object $file
|
|
* @access public
|
|
* @return int
|
|
*/
|
|
public function fileSize(object $file): int|false
|
|
{
|
|
if(empty($file->realPath) or !file_exists($file->realPath)) return false;
|
|
return filesize($file->realPath);
|
|
}
|
|
|
|
/**
|
|
* Save file to local storage temporarily.
|
|
*
|
|
* @param object $file
|
|
* @access public
|
|
* @return string
|
|
*/
|
|
public function saveAsTempFile(object $file): string
|
|
{
|
|
if(empty($file->realPath)) return '';
|
|
|
|
/* If the storage type is local, do nothing. */
|
|
if($this->config->file->storageType == 'fs') return $file->realPath;
|
|
return '';
|
|
}
|
|
|
|
/**
|
|
* 保存默认文件。
|
|
* Save default files.
|
|
*
|
|
* @param array $fileList
|
|
* @param string $objectType
|
|
* @param int|array $objectID
|
|
* @param string|int $extra
|
|
* @access public
|
|
*/
|
|
public function saveDefaultFiles(array $fileList, string $objectType, int|array $objectIdList, string|int $extra = '')
|
|
{
|
|
if(empty($fileList)) return;
|
|
|
|
if(is_int($objectIdList)) $objectIdList = array($objectIdList);
|
|
|
|
if(!empty($_POST['deleteFiles']))
|
|
{
|
|
foreach($this->post->deleteFiles as $deletedFileID) unset($fileList[$deletedFileID]);
|
|
}
|
|
if(!empty($_POST['renameFiles']))
|
|
{
|
|
foreach($this->post->renameFiles as $renamedFileID => $newName) $fileList[$renamedFileID]['title'] = $newName;
|
|
}
|
|
|
|
foreach($objectIdList as $objectID)
|
|
{
|
|
$fileIdList = '';
|
|
foreach($fileList as $file)
|
|
{
|
|
unset($file['id']);
|
|
$file['objectType'] = $objectType;
|
|
$file['objectID'] = $objectID;
|
|
$file['extra'] = $extra;
|
|
$fileIdList .= ',' . $this->fileTao->saveFile($file, 'url,deleted,realPath,webPath,name,url');
|
|
}
|
|
if($objectType == 'story') $this->dao->update(TABLE_STORYSPEC)->set("files = CONCAT(files, '{$fileIdList}')")->where('story')->eq($objectID)->exec();
|
|
}
|
|
|
|
foreach($objectIdList as $objectID)
|
|
{
|
|
$uid = $this->post->uid ? $this->post->uid : '';
|
|
$this->updateObjectID($uid, $objectID, $objectType);
|
|
$this->saveUpload($objectType, $objectID, $extra);
|
|
}
|
|
}
|
|
|
|
/**
|
|
* Process file differcences for object.
|
|
*
|
|
* @param string $objectType
|
|
* @param object $oldObject
|
|
* @param object $newObject
|
|
* @param string $extra
|
|
* @param string $filesName
|
|
* @param string $labelsName
|
|
* @access public
|
|
* @return void
|
|
*/
|
|
public function processFileDiffsForObject(string $objectType, object $oldObject, object $newObject, string $extra = '', string $filesName = 'files', string $labelsName = 'labels'): void
|
|
{
|
|
if(empty($oldObject->id)) return;
|
|
|
|
$deleteFiles = array();
|
|
if(!empty($newObject->deleteFiles))
|
|
{
|
|
if(!isset($this->config->file->logicalDeletionType[$objectType]))
|
|
{
|
|
$this->dao->delete()->from(TABLE_FILE)->where('id')->in($newObject->deleteFiles)->exec();
|
|
foreach($newObject->deleteFiles as $fileID)
|
|
{
|
|
if(!isset($oldObject->{$filesName}[$fileID])) continue;
|
|
$this->unlinkFile($oldObject->{$filesName}[$fileID]);
|
|
$deleteFiles[] = isset($oldObject->{$filesName}[$fileID]) ? $oldObject->{$filesName}[$fileID]->title : '';
|
|
}
|
|
}
|
|
else
|
|
{
|
|
$this->dao->update(TABLE_FILE)->set('deleted')->eq(1)->where('id')->in($newObject->deleteFiles)->exec();
|
|
foreach($newObject->deleteFiles as $fileID) $deleteFiles[$fileID] = isset($oldObject->{$filesName}[$fileID]) ? $oldObject->{$filesName}[$fileID]->title : '';
|
|
}
|
|
}
|
|
|
|
$renameFiles = array();
|
|
if(!empty($newObject->renameFiles))
|
|
{
|
|
foreach($newObject->renameFiles as $renamedFileID => $newName)
|
|
{
|
|
$this->dao->update(TABLE_FILE)->set('title')->eq($newName)->where('id')->in($renamedFileID)->exec();
|
|
$renameFiles[$renamedFileID] = array('old' => isset($oldObject->{$filesName}[$renamedFileID]) ? $oldObject->{$filesName}[$renamedFileID]->title : '', 'new' => $newName);
|
|
}
|
|
}
|
|
|
|
$addedFiles = $this->saveUpload($objectType, $oldObject->id, $extra, $filesName, $labelsName);
|
|
|
|
if(defined('RUN_MODE') && RUN_MODE === 'api')
|
|
{
|
|
$uidFiles = $this->getUploadByUID($this->post->uid, $filesName, $labelsName);
|
|
|
|
$addedFiles = $addedFiles + $uidFiles;
|
|
}
|
|
|
|
if(!isset($oldObject->{$filesName})) $oldObject->{$filesName} = array();
|
|
$files = array_diff(array_keys($oldObject->{$filesName}), array_keys($deleteFiles));
|
|
$files = array_merge($files, array_keys($addedFiles));
|
|
|
|
$newObject->addedFiles = $addedFiles;
|
|
$newObject->renameFiles = $renameFiles;
|
|
$newObject->deleteFiles = $deleteFiles;
|
|
$newObject->{$filesName} = implode(',', $files);
|
|
}
|
|
}
|