| Server IP : 49.231.201.246 / Your IP : 216.73.216.149 Web Server : Apache/2.4.18 (Ubuntu) System : Linux 246 4.4.0-210-generic #242-Ubuntu SMP Fri Apr 16 09:57:56 UTC 2021 x86_64 User : root ( 0) PHP Version : 7.0.33-0ubuntu0.16.04.16 Disable Function : exec,passthru,shell_exec,system,proc_open,popen,pcntl_exec MySQL : OFF | cURL : ON | WGET : ON | Perl : ON | Python : ON | Sudo : ON | Pkexec : ON Directory : /var/www/html/old/libraries/kunena/forum/message/attachment/ |
Upload File : |
<?php
/**
* Kunena Component
* @package Kunena.Framework
* @subpackage Forum.Message.Attachment
*
* @copyright (C) 2008 - 2014 Kunena Team. All rights reserved.
* @license http://www.gnu.org/copyleft/gpl.html GNU/GPL
* @link http://www.kunena.org
**/
defined ( '_JEXEC' ) or die ();
/**
* Class KunenaForumMessageAttachment
*
* @property int $id
* @property int $userid
* @property int $mesid
* @property string $hash
* @property int $size
* @property string $folder
* @property string $filetype
* @property string $filename
*/
class KunenaForumMessageAttachment extends JObject {
protected $_exists = false;
protected $_db = null;
protected $_shortname = null;
protected $_shorttime = null;
protected $_textLink = null;
protected $_imagelink = null;
protected $_thumblink = null;
/**
* @var bool
*/
public $disabled = false;
protected static $_directory = 'media/kunena/attachments';
/**
* @param int $identifier
*
* @internal
*/
public function __construct($identifier = 0) {
// Always load the attachment -- if attachment does not exist: fill empty data
$this->_db = JFactory::getDBO ();
$this->load ( $identifier );
}
public function __destruct() {
if (!$this->exists()) {
$this->deleteFile();
}
}
/**
* @param mixed $identifier
* @param bool $reload
*
* @return KunenaForumMessageAttachment
*/
static public function getInstance($identifier = null, $reload = false) {
return KunenaForumMessageAttachmentHelper::get($identifier, $reload);
}
/**
* @param null|bool $exists
*
* @return bool
*/
function exists($exists = null) {
$return = $this->_exists;
if ($exists !== null) $this->_exists = $exists;
return $return;
}
/**
* @param string $mime
*
* @return bool
*/
function isImage($mime) {
return (stripos ( $mime, 'image/' ) !== false);
}
/**
* @return string
*/
function getTextLink() {
$this->generate();
return $this->_textLink;
}
/**
* @return string
*/
function getImageLink() {
$this->generate();
return $this->_imagelink;
}
/**
* @return string
*/
function getThumbnailLink() {
$this->generate();
return $this->_thumblink;
}
protected function generate() {
if (!isset($this->_shorttype)) {
$this->_shorttype = $this->isImage($this->filetype) ? 'image' : $this->filetype;
$this->_shortname = KunenaForumMessageAttachmentHelper::shortenFileName($this->filename);
$config = KunenaFactory::getConfig();
$this->_imagelink = null;
switch (strtolower ( $this->_shorttype )) {
case 'image' :
// Check for thumbnail and if available, use for display
if (file_exists ( JPATH_ROOT . '/' . $this->folder . '/thumb/' . $this->filename )) {
$thumb = $this->folder . '/thumb/' . $this->filename;
$imgsize = '';
} else {
$thumb = $this->folder . '/' . $this->filename;
$imgsize = 'width="' . $config->thumbwidth . 'px" height="' . $config->thumbheight . 'px"';
}
$img = '<img title="' . $this->escape ( $this->filename ) . '" ' . $imgsize . ' src="' . JUri::root() . $thumb . '" alt="' . $this->escape ( $this->filename ) . '" />';
$this->_thumblink = $this->_getAttachementLink ( $this->escape ( $this->folder ), $this->escape ( $this->filename ), $img, KunenaForumMessageAttachmentHelper::shortenFileName($this->escape($this->filename), 0,7), ($config->lightbox)? 'lightbox[thumb' . intval ( $this->mesid ). ']':'' );
$img = '<img title="' . $this->escape ( $this->filename ) . '" src="' . JUri::root() . $this->escape ( $this->folder ) . '/' . $this->escape ( $this->filename ) . '" alt="' . $this->escape ( $this->filename ) . '" />';
$this->_imagelink = $this->_getAttachementLink ( $this->escape ( $this->folder ), $this->escape ( $this->filename ), $img, KunenaForumMessageAttachmentHelper::shortenFileName($this->escape ( $this->filename ), 0,7), ($config->lightbox)?'lightbox[imagelink' . intval ( $this->mesid ) .']':'' );
$this->_textLink = $this->_getAttachementLink ( $this->escape ( $this->folder ), $this->escape ( $this->filename ), $this->escape ( $this->_shortname ), KunenaForumMessageAttachmentHelper::shortenFileName($this->escape($this->filename), 0,7), ($config->lightbox)?'lightbox[simple' . $this->mesid . ']' . ' nofollow':' nofollow' ) . ' (' . number_format ( intval ( $this->size ) / 1024, 0, '', ',' ) . 'KB)';
break;
default :
// Filetype without thumbnail or icon support - use default file icon
$img = '<img src="' . JUri::root(). 'media/kunena/images/attach_generic.png" alt="' . JText::_ ( 'COM_KUNENA_ATTACH' ) . '" />';
$this->_thumblink = $this->_getAttachementLink ( $this->escape ( $this->folder ), $this->escape ( $this->filename ), $img, $this->escape ( $this->filename ), 'nofollow' );
$this->_textLink = $this->_getAttachementLink ( $this->escape ( $this->folder ), $this->escape ( $this->filename ), $this->escape ( $this->_shortname ), $this->escape ( $this->filename ), 'nofollow' ) . ' (' . number_format ( intval ( $this->size ) / 1024, 0, '', ',' ) . 'KB)';
}
$this->disabled = false;
if (! KunenaUserHelper::getMyself()->exists()) {
if ($this->_shorttype == 'image' && ! $config->showimgforguest) {
$this->disabled = true;
$this->_textLink = JText::_ ( 'COM_KUNENA_SHOWIMGFORGUEST_HIDEIMG' );
}
if ($this->_shorttype != 'image' && ! $config->showfileforguest) {
$this->disabled = true;
$this->_textLink = JText::_ ( 'COM_KUNENA_SHOWIMGFORGUEST_HIDEFILE' );
}
if ($this->disabled) {
$this->_thumblink = '<img src="' . JUri::root() .'media/kunena/images/attach_generic.png" alt="' . JText::_ ( 'COM_KUNENA_ATTACH' ) . '" />';
$this->_imagelink = null;
$this->size = 0;
}
}
}
}
/**
* @return KunenaForumMessage
*/
public function getMessage() {
return KunenaForumMessageHelper::get($this->mesid);
}
/**
* @param string $action
* @param mixed $user
* @param bool $silent
*
* @return bool
*/
public function authorise($action='read', $user=null, $silent=false) {
static $actions = array(
'read'=>array('Read'),
'create'=>array(),
'delete'=>array('Exists', 'Own'),
);
$user = KunenaUserHelper::get($user);
if (!isset($actions[$action])) {
if (!$silent) $this->setError ( __CLASS__.'::'.__FUNCTION__.'(): '.JText::sprintf ( 'COM_KUNENA_LIB_AUTHORISE_INVALID_ACTION', $action ) );
return false;
}
$message = $this->getMessage();
$auth = $message->authorise('attachment.'.$action, $user, $silent);
if (!$auth) {
if (!$silent) $this->setError ( $message->getError() );
return false;
}
foreach ($actions[$action] as $function) {
$authFunction = 'authorise'.$function;
if (! method_exists($this, $authFunction) || ! $this->$authFunction($user)) {
if (!$silent) $this->setError ( JText::_ ( 'COM_KUNENA_NO_ACCESS' ) );
return false;
}
}
return true;
}
/**
* @param string $key
* @param null|int $catid
*
* @return bool
*/
function upload($key='kattachment', $catid=null) {
require_once (KPATH_SITE . '/lib/kunena.upload.class.php');
$path = JPATH_ROOT . '/media/kunena/attachments/' . $this->userid;
$upload = new CKunenaUpload($catid);
$upload->uploadFile($path, $key, '', false);
$fileinfo = $upload->getFileInfo();
if ($fileinfo ['status'] && $fileinfo['ready'] === true) {
$this->hash =$fileinfo ['hash'];
$this->size = $fileinfo ['size'];
$this->folder = '/media/kunena/attachments/' . $this->userid;
$this->filetype = $fileinfo ['mime'];
$this->filename = $fileinfo ['name'];
return true;
}
$this->setError(
JText::sprintf('COM_KUNENA_UPLOAD_FAILED', htmlspecialchars($fileinfo['name'], ENT_COMPAT, 'UTF-8'))
. ': ' . htmlspecialchars($fileinfo['error'], ENT_COMPAT, 'UTF-8'));
return false;
}
/**
* Method to get the table object.
*
* @param string $type The messages table name to be used.
* @param string $prefix The messages table prefix to be used.
*
* @return KunenaTable
*/
public function getTable($type = 'KunenaAttachments', $prefix = 'Table') {
static $tabletype = null;
//Set a custom table type is defined
if ($tabletype === null || $type != $tabletype ['name'] || $prefix != $tabletype ['prefix']) {
$tabletype ['name'] = $type;
$tabletype ['prefix'] = $prefix;
}
// Create the user table object
return JTable::getInstance ( $tabletype ['name'], $tabletype ['prefix'] );
}
/**
* @param array $data
* @param array $ignore
*/
public function bind(array $data, array $ignore = array()) {
$data = array_diff_key($data, array_flip($ignore));
$this->setProperties ( $data );
}
/**
* Method to load a KunenaForumMessageAttachment object by id.
*
* @param int $id The message id to be loaded.
*
* @return bool True on success.
*/
public function load($id) {
// Create the table object
$table = $this->getTable ();
// Load the KunenaTable object based on id
$this->_exists = $table->load ( $id );
// Assuming all is well at this point lets bind the data
$this->setProperties ( $table->getProperties () );
return $this->_exists;
}
/**
* Method to save the object to the database.
*
* @param bool $updateOnly Save the object only if not a new message.
*
* @return bool|null True on success.
*/
public function save($updateOnly = false) {
// Do not save altered message
if ($this->disabled) return null;
// Create the messages table object
$table = $this->getTable ();
$table->bind ( $this->getProperties () );
$table->exists ( $this->_exists );
if ($this->getError()) {
return false;
}
// Check and store the object.
if (! $table->check ()) {
$this->setError ( $table->getError () );
return false;
}
//are we creating a new message
$isnew = ! $this->_exists;
// If we aren't allowed to create new message return
if ($isnew && $updateOnly) {
return true;
}
//Store the message data in the database
if (! $result = $table->store ()) {
$this->setError ( $table->getError () );
}
// Set the id for the KunenaForumMessageAttachment object in case we created a new message.
if ($result && $isnew) {
$this->load ( $table->get ( 'id' ) );
$this->_exists = true;
}
return $result;
}
/**
* Method to delete this object from the database.
*
* @return bool True on success.
*/
public function delete() {
if (!$this->exists()) {
return true;
}
// Create the table object
$table = $this->getTable ();
$result = $table->delete ( $this->id );
if (! $result) {
$this->setError ( $table->getError () );
return false;
}
$this->_exists = false;
return $result;
}
// Internal functions
protected function check() {
//$author = KunenaUserHelper::get($this->userid);
}
protected function deleteFile() {
if (self::$_directory != substr($this->folder, 0, strlen(self::$_directory)))
return;
jimport('joomla.filesystem.file');
$path = JPATH_ROOT."/{$this->folder}";
$filetoDelete = $path.'/'.$this->filename;
if (JFile::exists($filetoDelete)) {
JFile::delete($filetoDelete);
}
$filetoDelete = $path.'/raw/'.$this->filename;
if (JFile::exists($filetoDelete)) {
JFile::delete($filetoDelete);
}
$filetoDelete = $path.'/thumb/'.$this->filename;
if (JFile::exists($filetoDelete)) {
JFile::delete($filetoDelete);
}
}
/**
* @param string $var
*
* @return string
*/
protected function escape($var) {
return htmlspecialchars($var, ENT_COMPAT, 'UTF-8');
}
/**
* @param KunenaUser $user
*
* @return bool
*/
protected function authoriseExists(KunenaUser $user) {
// Checks if attachment exists
if (!$this->exists()) {
$this->setError ( JText::_ ( 'COM_KUNENA_NO_ACCESS' ) );
return false;
}
return true;
}
/**
* @param KunenaUser $user
*
* @return bool
*/
protected function authoriseRead(KunenaUser $user) {
// Checks if attachment exists
if (!$this->exists()) {
$this->setError ( JText::_ ( 'COM_KUNENA_NO_ACCESS' ) );
return false;
}
$this->generate();
// TODO: In the future we might want to separate read and peak
/*
if ($this->disabled) {
$this->setError ( JText::_ ( 'COM_KUNENA_NO_ACCESS' ) );
return false;
}
*/
return true;
}
/**
* @param KunenaUser $user
*
* @return bool
*/
protected function authoriseOwn(KunenaUser $user) {
// Checks if attachment is users own or user is moderator in the category (or global)
if (($user->userid && $this->userid != $user->userid) && !$user->isModerator($this->getMessage()->getCategory())) {
$this->setError ( JText::_ ( 'COM_KUNENA_NO_ACCESS' ) );
return false;
}
return true;
}
/**
* @param string $folder
* @param string $filename
* @param string $name
* @param string $title
* @param string $rel
*
* @return string
*/
protected function _getAttachementLink($folder, $filename, $name, $title = '', $rel = 'nofollow') {
$link = JURI::ROOT()."{$folder}/{$filename}";
return '<a href="'.$link.'" title="'.$title.'" rel="'.$rel.'">'.$name.'</a>';
}
}