mirror of
https://github.com/HaschekSolutions/pictshare.git
synced 2025-11-12 03:06:22 +00:00
89 lines
3.3 KiB
PHP
89 lines
3.3 KiB
PHP
<?php
|
|
// basic path definitions
|
|
define('DS', DIRECTORY_SEPARATOR);
|
|
define('ROOT', dirname(__FILE__).'/..');
|
|
|
|
//loading default settings if exist
|
|
if(!file_exists(ROOT.DS.'inc'.DS.'config.inc.php'))
|
|
exit('Rename /inc/example.config.inc.php to /inc/config.inc.php first!');
|
|
include_once(ROOT.DS.'inc'.DS.'config.inc.php');
|
|
|
|
//loading core and controllers
|
|
include_once(ROOT . DS . 'inc' . DS. 'core.php');
|
|
require_once(ROOT . DS . 'content-controllers' . DS. 'image'. DS . 'image.controller.php');
|
|
require_once(ROOT . DS . 'content-controllers' . DS. 'text'. DS . 'text.controller.php');
|
|
require_once(ROOT . DS . 'content-controllers' . DS. 'url'. DS . 'url.controller.php');
|
|
require_once(ROOT . DS . 'content-controllers' . DS. 'video'. DS . 'video.controller.php');
|
|
|
|
// check write permissions first
|
|
if(!isFolderWritable(ROOT.DS.'data'))
|
|
exit(json_encode(array('status'=>'err','reason'=>'Data directory not writable')));
|
|
else if(!isFolderWritable(ROOT.DS.'tmp'))
|
|
exit(json_encode(array('status'=>'err','reason'=>'Temp directory not writable')));
|
|
|
|
// check if client has permission to upload
|
|
if(defined('ALLOWED_SUBNET') && !isIPInRange( getUserIP(), ALLOWED_SUBNET ))
|
|
exit(json_encode(array('status'=>'err','reason'=> 'Access denied')));
|
|
|
|
$hash = sanatizeString(trim($_REQUEST['hash']))?sanatizeString(trim($_REQUEST['hash'])):false;
|
|
|
|
// check for POST upload
|
|
if ($_FILES['file']["error"] == UPLOAD_ERR_OK)
|
|
{
|
|
//get the file type
|
|
$type = getTypeOfFile($_FILES['file']["tmp_name"]);
|
|
|
|
//check for duplicates
|
|
$sha1 = sha1_file($_FILES['file']["tmp_name"]);
|
|
$ehash = sha1Exists($sha1);
|
|
if($ehash && file_exists(ROOT.DS.'data'.DS.$ehash.DS.$ehash))
|
|
exit(json_encode(array('status'=>'ok','hash'=>$ehash,'filetype'=>$type,'url'=>URL.$ehash)));
|
|
|
|
//cross check filetype for controllers
|
|
//
|
|
//image?
|
|
if(in_array($type,(new ImageController)->getRegisteredExtensions()))
|
|
{
|
|
$answer = (new ImageController())->handleUpload($_FILES['file']['tmp_name'],$hash);
|
|
}
|
|
//or, a text
|
|
else if($type=='text')
|
|
{
|
|
$answer = (new TextController())->handleUpload($_FILES['file']['tmp_name'],$hash);
|
|
}
|
|
//or, a video
|
|
else if(in_array($type,(new VideoController)->getRegisteredExtensions()))
|
|
{
|
|
$answer = (new VideoController())->handleUpload($_FILES['file']['tmp_name'],$hash);
|
|
}
|
|
|
|
if(!$answer)
|
|
$answer = array('status'=>'err','reason'=>'Unsupported filetype: '.$type,'filetype'=>$type);
|
|
|
|
if($answer['hash'] && $answer['status']=='ok')
|
|
{
|
|
$answer['filetype'] = $type;
|
|
//add this sha1 to the list
|
|
addSha1($answer['hash'],$sha1);
|
|
|
|
if(getDeleteCodeOfHash($answer['hash']))
|
|
{
|
|
$answer['delete_code'] = getDeleteCodeOfHash($answer['hash']);
|
|
$answer['delete_url'] = URL.'delete_'.getDeleteCodeOfHash($answer['hash']).'/'.$answer['hash'];
|
|
}
|
|
|
|
|
|
// Lets' check all storage controllers and tell them that a new file was uploaded
|
|
$sc = getStorageControllers();
|
|
foreach($sc as $contr)
|
|
{
|
|
if((new $contr())->isEnabled()===true)
|
|
(new $contr())->pushFile($answer['hash']);
|
|
}
|
|
}
|
|
|
|
echo json_encode($answer);
|
|
}
|
|
else
|
|
exit(json_encode(array('status'=>'err','reason'=>'Upload error')));
|