drg_elfinder 0.1.0

data/app/assets/javascripts/elfinder/php/elFinderConnector.class.php

@@ -0,0 +1,380 @@
+<?php
+
+/**
+ * Default elFinder connector
+ *
+ * @author Dmitry (dio) Levashov
+ **/
+class elFinderConnector
+{
+    /**
+     * elFinder instance
+     *
+     * @var elFinder
+     **/
+    protected $elFinder;
+
+    /**
+     * Options
+     *
+     * @var array
+     **/
+    protected $options = array();
+
+    /**
+     * Must be use output($data) $data['header']
+     *
+     * @var string
+     * @deprecated
+     **/
+    protected $header = '';
+
+    /**
+     * HTTP request method
+     *
+     * @var string
+     */
+    protected $reqMethod = '';
+
+    /**
+     * Content type of output JSON
+     *
+     * @var string
+     */
+    protected static $contentType = 'Content-Type: application/json; charset=utf-8';
+
+    /**
+     * Constructor
+     *
+     * @param      $elFinder
+     * @param bool $debug
+     *
+     * @author Dmitry (dio) Levashov
+     */
+    public function __construct($elFinder, $debug = false)
+    {
+
+        $this->elFinder = $elFinder;
+        $this->reqMethod = strtoupper($_SERVER["REQUEST_METHOD"]);
+        if ($debug) {
+            self::$contentType = 'Content-Type: text/plain; charset=utf-8';
+        }
+    }
+
+    /**
+     * Execute elFinder command and output result
+     *
+     * @return void
+     * @throws Exception
+     * @author Dmitry (dio) Levashov
+     */
+    public function run()
+    {
+        $isPost = $this->reqMethod === 'POST';
+        $src = $isPost ? array_merge($_GET, $_POST) : $_GET;
+        $maxInputVars = (!$src || isset($src['targets'])) ? ini_get('max_input_vars') : null;
+        if ((!$src || $maxInputVars) && $rawPostData = file_get_contents('php://input')) {
+            // for max_input_vars and supports IE XDomainRequest()
+            $parts = explode('&', $rawPostData);
+            if (!$src || $maxInputVars < count($parts)) {
+                $src = array();
+                foreach ($parts as $part) {
+                    list($key, $value) = array_pad(explode('=', $part), 2, '');
+                    $key = rawurldecode($key);
+                    if (preg_match('/^(.+?)\[([^\[\]]*)\]$/', $key, $m)) {
+                        $key = $m[1];
+                        $idx = $m[2];
+                        if (!isset($src[$key])) {
+                            $src[$key] = array();
+                        }
+                        if ($idx) {
+                            $src[$key][$idx] = rawurldecode($value);
+                        } else {
+                            $src[$key][] = rawurldecode($value);
+                        }
+                    } else {
+                        $src[$key] = rawurldecode($value);
+                    }
+                }
+                $_POST = $this->input_filter($src);
+                $_REQUEST = $this->input_filter(array_merge_recursive($src, $_REQUEST));
+            }
+        }
+
+        if (isset($src['targets']) && $this->elFinder->maxTargets && count($src['targets']) > $this->elFinder->maxTargets) {
+            $this->output(array('error' => $this->elFinder->error(elFinder::ERROR_MAX_TARGTES)));
+        }
+
+        $cmd = isset($src['cmd']) ? $src['cmd'] : '';
+        $args = array();
+
+        if (!function_exists('json_encode')) {
+            $error = $this->elFinder->error(elFinder::ERROR_CONF, elFinder::ERROR_CONF_NO_JSON);
+            $this->output(array('error' => '{"error":["' . implode('","', $error) . '"]}', 'raw' => true));
+        }
+
+        if (!$this->elFinder->loaded()) {
+            $this->output(array('error' => $this->elFinder->error(elFinder::ERROR_CONF, elFinder::ERROR_CONF_NO_VOL), 'debug' => $this->elFinder->mountErrors));
+        }
+
+        // telepat_mode: on
+        if (!$cmd && $isPost) {
+            $this->output(array('error' => $this->elFinder->error(elFinder::ERROR_UPLOAD, elFinder::ERROR_UPLOAD_TOTAL_SIZE), 'header' => 'Content-Type: text/html'));
+        }
+        // telepat_mode: off
+
+        if (!$this->elFinder->commandExists($cmd)) {
+            $this->output(array('error' => $this->elFinder->error(elFinder::ERROR_UNKNOWN_CMD)));
+        }
+
+        // collect required arguments to exec command
+        $hasFiles = false;
+        foreach ($this->elFinder->commandArgsList($cmd) as $name => $req) {
+            if ($name === 'FILES') {
+                if (isset($_FILES)) {
+                    $hasFiles = true;
+                } elseif ($req) {
+                    $this->output(array('error' => $this->elFinder->error(elFinder::ERROR_INV_PARAMS, $cmd)));
+                }
+            } else {
+                $arg = isset($src[$name]) ? $src[$name] : '';
+
+                if (!is_array($arg) && $req !== '') {
+                    $arg = trim($arg);
+                }
+                if ($req && $arg === '') {
+                    $this->output(array('error' => $this->elFinder->error(elFinder::ERROR_INV_PARAMS, $cmd)));
+                }
+                $args[$name] = $arg;
+            }
+        }
+
+        $args['debug'] = isset($src['debug']) ? !!$src['debug'] : false;
+
+        $args = $this->input_filter($args);
+        if ($hasFiles) {
+            $args['FILES'] = $_FILES;
+        }
+
+        try {
+            $this->output($this->elFinder->exec($cmd, $args));
+        } catch (elFinderAbortException $e) {
+            // connection aborted
+            // unlock session data for multiple access
+            $this->elFinder->getSession()->close();
+            // HTTP response code
+            header('HTTP/1.0 204 No Content');
+            // clear output buffer
+            while (ob_get_level() && ob_end_clean()) {
+            }
+            exit();
+        }
+    }
+
+    /**
+     * Sets the header.
+     *
+     * @param array|string  $value HTTP header(s)
+     */
+    public function setHeader($value)
+    {
+        $this->header = $value;
+    }
+
+    /**
+     * Output json
+     *
+     * @param  array  data to output
+     *
+     * @return void
+     * @throws elFinderAbortException
+     * @author Dmitry (dio) Levashov
+     */
+    protected function output(array $data)
+    {
+        // unlock session data for multiple access
+        $this->elFinder->getSession()->close();
+        // client disconnect should abort
+        ignore_user_abort(false);
+
+        if ($this->header) {
+            self::sendHeader($this->header);
+        }
+
+        if (isset($data['pointer'])) {
+            // set time limit to 0
+            elFinder::extendTimeLimit(0);
+
+            // send optional header
+            if (!empty($data['header'])) {
+                self::sendHeader($data['header']);
+            }
+
+            // clear output buffer
+            while (ob_get_level() && ob_end_clean()) {
+            }
+
+            $toEnd = true;
+            $fp = $data['pointer'];
+            $sendData = !($this->reqMethod === 'HEAD' || !empty($data['info']['xsendfile']));
+            $psize = null;
+            if (($this->reqMethod === 'GET' || !$sendData)
+                && (elFinder::isSeekableStream($fp) || elFinder::isSeekableUrl($fp))
+                && (array_search('Accept-Ranges: none', headers_list()) === false)) {
+                header('Accept-Ranges: bytes');
+                if (!empty($_SERVER['HTTP_RANGE'])) {
+                    $size = $data['info']['size'];
+                    $end = $size - 1;
+                    if (preg_match('/bytes=(\d*)-(\d*)(,?)/i', $_SERVER['HTTP_RANGE'], $matches)) {
+                        if (empty($matches[3])) {
+                            if (empty($matches[1]) && $matches[1] !== '0') {
+                                $start = $size - $matches[2];
+                            } else {
+                                $start = intval($matches[1]);
+                                if (!empty($matches[2])) {
+                                    $end = intval($matches[2]);
+                                    if ($end >= $size) {
+                                        $end = $size - 1;
+                                    }
+                                    $toEnd = ($end == ($size - 1));
+                                }
+                            }
+                            $psize = $end - $start + 1;
+
+                            header('HTTP/1.1 206 Partial Content');
+                            header('Content-Length: ' . $psize);
+                            header('Content-Range: bytes ' . $start . '-' . $end . '/' . $size);
+
+                            // Apache mod_xsendfile dose not support range request
+                            if (isset($data['info']['xsendfile']) && strtolower($data['info']['xsendfile']) === 'x-sendfile') {
+                                if (function_exists('header_remove')) {
+                                    header_remove($data['info']['xsendfile']);
+                                } else {
+                                    header($data['info']['xsendfile'] . ':');
+                                }
+                                unset($data['info']['xsendfile']);
+                                if ($this->reqMethod !== 'HEAD') {
+                                    $sendData = true;
+                                }
+                            }
+
+                            $sendData && !elFinder::isSeekableUrl($fp) && fseek($fp, $start);
+                        }
+                    }
+                }
+                if ($sendData && is_null($psize)) {
+                    elFinder::rewind($fp);
+                }
+            } else {
+                header('Accept-Ranges: none');
+                if (isset($data['info']) && !$data['info']['size']) {
+                    if (function_exists('header_remove')) {
+                        header_remove('Content-Length');
+                    } else {
+                        header('Content-Length:');
+                    }
+                }
+            }
+
+            if ($sendData) {
+                if ($toEnd || elFinder::isSeekableUrl($fp)) {
+                    // PHP < 5.6 has a bug of fpassthru
+                    // see https://bugs.php.net/bug.php?id=66736
+                    if (version_compare(PHP_VERSION, '5.6', '<')) {
+                        file_put_contents('php://output', $fp);
+                    } else {
+                        fpassthru($fp);
+                    }
+                } else {
+                    $out = fopen('php://output', 'wb');
+                    stream_copy_to_stream($fp, $out, $psize);
+                    fclose($out);
+                }
+            }
+
+            if (!empty($data['volume'])) {
+                $data['volume']->close($fp, $data['info']['hash']);
+            } else {
+                fclose($fp);
+            }
+            exit();
+        } else {
+            self::outputJson($data);
+            exit(0);
+        }
+    }
+
+    /**
+     * Remove null & stripslashes applies on "magic_quotes_gpc"
+     *
+     * @param  mixed $args
+     *
+     * @return mixed
+     * @author Naoki Sawada
+     */
+    protected function input_filter($args)
+    {
+        static $magic_quotes_gpc = NULL;
+
+        if ($magic_quotes_gpc === NULL)
+            $magic_quotes_gpc = (version_compare(PHP_VERSION, '5.4', '<') && get_magic_quotes_gpc());
+
+        if (is_array($args)) {
+            return array_map(array(& $this, 'input_filter'), $args);
+        }
+        $res = str_replace("\0", '', $args);
+        $magic_quotes_gpc && ($res = stripslashes($res));
+        return $res;
+    }
+
+    /**
+     * Send HTTP header
+     *
+     * @param string|array $header optional header
+     */
+    protected static function sendHeader($header = null)
+    {
+        if ($header) {
+            if (is_array($header)) {
+                foreach ($header as $h) {
+                    header($h);
+                }
+            } else {
+                header($header);
+            }
+        }
+    }
+
+    /**
+     * Output JSON
+     *
+     * @param array $data
+     */
+    public static function outputJson($data)
+    {
+        // send header
+        $header = isset($data['header']) ? $data['header'] : self::$contentType;
+        self::sendHeader($header);
+
+        unset($data['header']);
+
+        if (!empty($data['raw']) && isset($data['error'])) {
+            $out = $data['error'];
+        } else {
+            if (isset($data['debug']) && isset($data['debug']['backendErrors'])) {
+                $data['debug']['backendErrors'] = array_merge($data['debug']['backendErrors'], elFinder::$phpErrors);
+            }
+            $out = json_encode($data);
+        }
+
+        // clear output buffer
+        while (ob_get_level() && ob_end_clean()) {
+        }
+
+        header('Content-Length: ' . strlen($out));
+
+        echo $out;
+
+        flush();
+    }
+}// END class