scratch – Blame information for rev 96

Subversion Repositories:
Rev:
Rev Author Line No. Line
7 office 1 <?php
2  
3 ###########################################################################
4 ## Copyright (C) Wizardry and Steamworks 2017 - License: GNU GPLv3 ##
5 ###########################################################################
6  
66 office 7 require_once('php/pseudocrypt.php');
8 require_once('php/functions.php');
87 office 9 require_once('vendor/autoload.php');
7 office 10  
67 office 11 ### Load configuration.
12 $config = spyc_load_file('config.yaml');
13  
52 office 14 #### POST -> upload / GET -> download
15 switch ($_SERVER['REQUEST_METHOD']) {
16 case 'POST':
93 office 17 #### Script restrictions.
96 office 18 session_start();
19 if (empty($_POST['token']) || !hash_equals($_SESSION['token'], $_POST['token'])) {
93 office 20 http_response_code(403);
21 die('Forbidden.');
22 }
52 office 23 #### Retrieve uploaded file.
24 if (!empty($_FILES['file']) and
25 is_uploaded_file($_FILES['file']['tmp_name'])) {
67 office 26 if($_FILES['file']['size'] > $config['ALLOWED_ASSET_SIZE'] * 1048576) {
81 office 27 http_response_code(403);
28 die('File size exceeds '.$config['ALLOWED_ASSET_SIZE'].'MiB.');
57 office 29 }
52 office 30 # Regular multipart/form-data upload.
31 $name = $_FILES['file']['name'];
57 office 32 $data = atomized_get_contents($_FILES['file']['tmp_name']);
52 office 33 } else {
67 office 34 if((int)get_file_size("php://input") > $config['ALLOWED_ASSET_SIZE'] * 1048576) {
81 office 35 http_response_code(403);
36 die('File size exceeds '.$config['ALLOWED_ASSET_SIZE'].'MiB.');
57 office 37 }
52 office 38 # Raw POST data.
39 $name = urldecode(@$_SERVER['HTTP_X_FILE_NAME']);
57 office 40 $data = atomized_get_contents("php://input");
52 office 41 }
7 office 42  
52 office 43 #### Grab the file extension.
44 $fileExtension = pathinfo($name, PATHINFO_EXTENSION);
11 office 45  
52 office 46 #### If the extension is not allowed then change it to a text extension.
47 if (!isset($fileExtension) ||
48 !in_array(strtoupper($fileExtension),
67 office 49 array_map('strtoupper', $config['ALLOWED_FILE_EXTENSIONS']))) {
81 office 50 http_response_code(403);
51 die('File extension not allowed.');
52 office 52 }
14 office 53  
52 office 54 #### Hash filename.
55 $file = strtolower(
56 PseudoCrypt::hash(
57 preg_replace(
58 '/\D/',
59 '',
60 hash(
61 'sha512',
62 $data
63 )
64 ),
67 office 65 $config['ASSET_HASH_SIZE']
7 office 66 )
52 office 67 );
14 office 68  
52 office 69 #### Build the user path.
70 $userPath = join(
71 DIRECTORY_SEPARATOR,
72 array(
67 office 73 $config['STORE_FOLDER'],
52 office 74 $file
75 )
76 );
11 office 77  
52 office 78 #### Check for path traversals
79 $pathPart = pathinfo($userPath.'.'.$fileExtension);
80 if (strcasecmp(
67 office 81 realpath($pathPart['dirname']), realpath($config['STORE_FOLDER'])) != 0) {
81 office 82 http_response_code(500);
83 die('Internal server error.');
52 office 84 }
7 office 85  
52 office 86 #### Store the file.
81 office 87 $timestamp = atomized_put_contents($userPath.'.'.$fileExtension, $data);
14 office 88  
90 office 89 ### Hook for various file extensions.
90 $opengraph = FALSE;
91 switch(strtoupper($fileExtension)) {
92 case 'GIF':
93 $opengraph = TRUE;
94 break;
95 }
96  
52 office 97 ### Return the URL to the file.
98 header('Content-Type: text/plain; charset=utf-8');
81 office 99 echo json_encode(
100 array(
101 "hash" => $file,
90 office 102 "timestamp" => $timestamp,
103 "opengraph" => $opengraph
81 office 104 )
105 );
52 office 106 break;
107 case 'GET':
83 office 108 ### Tell browser not to cache files.
109 header("Cache-Control: no-store, no-cache, must-revalidate, max-age=0");
110 header("Cache-Control: post-check=0, pre-check=0", false);
111 header("Pragma: no-cache");
112  
52 office 113 ### If no file has been specified for download then return.
81 office 114 if (!isset($_GET['hash']) or empty($_GET['hash'])) {
115 http_response_code(404);
116 die('File not found.');
52 office 117 }
118  
53 office 119 ### Find the requested file.
52 office 120 $file = array_shift(
121 preg_grep(
81 office 122 '/'.$_GET['hash'].'/',
67 office 123 scandir($config['STORE_FOLDER'])
52 office 124 )
125 );
126  
81 office 127 if (!isset($file) or empty($file)) {
128 http_response_code(404);
129 die('File not found.');
130 }
53 office 131  
132 ### Check the path for path traversals.
133 $fileExtension = pathinfo($file, PATHINFO_EXTENSION);
52 office 134  
53 office 135 #### If the extension is not allowed then return.
136 if (!isset($fileExtension) ||
137 !in_array(strtoupper($fileExtension),
67 office 138 array_map('strtoupper', $config['ALLOWED_FILE_EXTENSIONS']))) {
81 office 139 http_response_code(403);
140 die('File extension not allowed.');
52 office 141 }
53 office 142  
143 #### Build the user path.
144 $userPath = join(
145 DIRECTORY_SEPARATOR,
146 array(
67 office 147 $config['STORE_FOLDER'],
53 office 148 $file
149 )
150 );
52 office 151  
53 office 152 #### Check for path traversals
153 $pathPart = pathinfo($userPath);
154 if (strcasecmp(
67 office 155 realpath($pathPart['dirname']), realpath($config['STORE_FOLDER'])) != 0) {
81 office 156 http_response_code(500);
157 die('Internal server error.');
53 office 158 }
159  
83 office 160 ### Hook for various file extensions.
53 office 161 switch(strtoupper($fileExtension)) {
162 case "HTML":
163 case "HTM":
164 header('Content-type: text/html');
165 break;
166 break;
83 office 167 case "URL":
91 office 168 if(preg_match(
169 "/URL=(https?:\/\/[\-_\.\+!\*'\(\),a-zA-Z0-9]+:?[0-9]{0,5}\/.*?)\n/",
170 file_get_contents($userPath), $matches)) {
83 office 171 header('Location: '.$matches[1]);
172 return;
173 }
174 break;
53 office 175 default:
176 ### Open MIME info database and send the content type.
177 $finfo = finfo_open(FILEINFO_MIME_TYPE);
178 if (!$finfo) {
81 office 179 http_response_code(500);
180 die('Internal server error.');
53 office 181 }
182 header('Content-type: '.finfo_file($finfo, $userPath));
183 finfo_close($finfo);
184 break;
185 }
186  
52 office 187 ### Send the file along with the inline content disposition.
53 office 188 header('Content-length: '.(int)get_file_size($userPath));
189 header('Content-Disposition: inline; filename="' . basename($userPath) . '"');
190 header('Content-Transfer-Encoding: binary');
191 header('X-Sendfile: '.$userPath);
52 office 192 break;
193 }