anonymous upload feature #2780
There are no files selected for viewing
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,105 @@ | ||
| <?php | ||
|
|
||
| // Init owncloud | ||
|
|
||
|
|
||
| // Temporary login as user for anonymous uploading | ||
| if(isset($_POST['public_uploading'])) { | ||
| $_SESSION['user_id'] = $_POST['uidOwner']; | ||
| } | ||
|
|
||
| // Firefox and Konqueror tries to download application/json for me. --Arthur | ||
| OCP\JSON::setContentTypeHeader('text/plain'); | ||
|
|
||
| OCP\JSON::checkLoggedIn(); | ||
| OCP\JSON::callCheck(); | ||
| $l = OC_L10N::get('files'); | ||
|
|
||
|
|
||
| $dir = $_POST['dir']; | ||
| // get array with current storage stats (e.g. max file size) | ||
| $storageStats = \OCA\files\lib\Helper::buildFileStorageStatistics($dir); | ||
|
|
||
| if (!isset($_FILES['files'])) { | ||
| OCP\JSON::error(array('data' => array_merge(array('message' => $l->t('No file was uploaded. Unknown error')), $storageStats))); | ||
| if(isset($_POST['public_uploading'])) { | ||
| $_SESSION['user_id'] = ''; | ||
| } | ||
| exit(); | ||
| } | ||
|
|
||
| foreach ($_FILES['files']['error'] as $error) { | ||
| if ($error != 0) { | ||
| $errors = array( | ||
| UPLOAD_ERR_OK => $l->t('There is no error, the file uploaded with success'), | ||
| UPLOAD_ERR_INI_SIZE => $l->t('The uploaded file exceeds the upload_max_filesize directive in php.ini: ') | ||
| . ini_get('upload_max_filesize'), | ||
| UPLOAD_ERR_FORM_SIZE => $l->t('The uploaded file exceeds the MAX_FILE_SIZE directive that was specified in the HTML form'), | ||
| UPLOAD_ERR_PARTIAL => $l->t('The uploaded file was only partially uploaded'), | ||
| UPLOAD_ERR_NO_FILE => $l->t('No file was uploaded'), | ||
| UPLOAD_ERR_NO_TMP_DIR => $l->t('Missing a temporary folder'), | ||
| UPLOAD_ERR_CANT_WRITE => $l->t('Failed to write to disk'), | ||
| ); | ||
| OCP\JSON::error(array('data' => array_merge(array('message' => $errors[$error]), $storageStats))); | ||
| if(isset($_POST['public_uploading'])) { | ||
| $_SESSION['user_id'] = ''; | ||
| } | ||
| exit(); | ||
| } | ||
| } | ||
| $files = $_FILES['files']; | ||
|
|
||
| $error = ''; | ||
|
|
||
| $maxUploadFilesize = OCP\Util::maxUploadFilesize($dir); | ||
| $maxHumanFilesize = OCP\Util::humanFileSize($maxUploadFilesize); | ||
|
|
||
| $totalSize = 0; | ||
| foreach ($files['size'] as $size) { | ||
| $totalSize += $size; | ||
| } | ||
| if ($totalSize > $maxUploadFilesize) { | ||
| OCP\JSON::error(array('data' => array('message' => $l->t('Not enough storage available'), | ||
| 'uploadMaxFilesize' => $maxUploadFilesize, | ||
| 'maxHumanFilesize' => $maxHumanFilesize))); | ||
| if(isset($_POST['public_uploading'])) { | ||
| $_SESSION['user_id'] = ''; | ||
| } | ||
| exit(); | ||
| } | ||
|
|
||
| $result = array(); | ||
| if (strpos($dir, '..') === false) { | ||
| $fileCount = count($files['name']); | ||
| for ($i = 0; $i < $fileCount; $i++) { | ||
| $target = OCP\Files::buildNotExistingFileName(stripslashes($dir), $files['name'][$i]); | ||
| // $path needs to be normalized - this failed within drag'n'drop upload to a sub-folder | ||
| $target = \OC\Files\Filesystem::normalizePath($target); //$tmp=$files['size'][0]; `echo $tmp > /tmp/bla`; | ||
| if (is_uploaded_file($files['tmp_name'][$i]) and \OC\Files\Filesystem::fromTmpFile($files['tmp_name'][$i], $target)) { | ||
| $meta = \OC\Files\Filesystem::getFileInfo($target); | ||
| // updated max file size after upload | ||
| $storageStats = \OCA\files\lib\Helper::buildFileStorageStatistics($dir); | ||
|
|
||
| $result[] = array('status' => 'success', | ||
| 'mime' => $meta['mimetype'], | ||
| 'size' => $meta['size'], | ||
| 'id' => $meta['fileid'], | ||
| 'name' => basename($target), | ||
| 'uploadMaxFilesize' => $maxUploadFilesize, | ||
| 'maxHumanFilesize' => $maxHumanFilesize | ||
| ); | ||
| } | ||
| } | ||
| OCP\JSON::encodedPrint($result); | ||
| if(isset($_POST['public_uploading'])) { | ||
| $_SESSION['user_id'] = ''; | ||
| } | ||
| exit(); | ||
| } else { | ||
| $error = $l->t('Invalid directory.'); | ||
| } | ||
|
|
||
| OCP\JSON::error(array('data' => array_merge(array('message' => $error), $storageStats))); | ||
| if(isset($_POST['public_uploading'])) { | ||
| $_SESSION['user_id'] = ''; | ||
| } | ||
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
|
|
@@ -172,6 +172,33 @@ public static function getShareByToken($token) { | |
| return $result->fetchRow(); | ||
| } | ||
|
|
||
| /* | ||
| * @brief Get the upload permission of a item | ||
| * @param string Item type | ||
| * @param string Item source | ||
| * @return Boelean | ||
| */ | ||
| public static function getUploadPermission($itemType, $itemSource) { | ||
| $query = \OC_DB::prepare('SELECT `uploadable` FROM `*PREFIX*share` WHERE `item_Type` = ? AND `item_Source` = ?'); | ||
| $result = $query->execute(array($itemType, $itemSource))->fetchRow(); | ||
|
|
||
| return $result['uploadable']; | ||
| } | ||
|
|
||
| /* | ||
| * @brief Set the upload permission for a item | ||
| * @param string Item type | ||
| * @param string Item source | ||
| * @param string | ||
| * @return Boelean | ||
| */ | ||
| public static function setUploadPermission($itemType, $itemSource, $allow) { | ||
| $query = \OC_DB::prepare('UPDATE `*PREFIX*share` SET `uploadable` = ? WHERE `item_Type` = ? AND item_Source = ?'); | ||
|
There was a problem hiding this comment. Also item_type not item_Type and item_source not item_Source There was a problem hiding this comment. http://www.riceparty.com louis vuitton outlet There was a problem hiding this comment. @rgeber There was a problem hiding this comment. great item fast shipping |
||
| $query->execute(array($allow, $itemType, $itemSource)); | ||
|
|
||
| return "1"; | ||
| } | ||
|
|
||
| /** | ||
| * @brief Get the shared items of item type owned by the current user | ||
| * @param string Item type | ||
|
|
||
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
This is absolutely insecure - 👎
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
5Michael Kors Bags Michael Kors Handbags Michael Kors Hamilton Michael Kors Outlet Online Michael Kors Bags Cheap Michael Kors Michael Kors Outlet ahdi Michael Kors Factory Outlet cdq Michael Kors Outlet bdi Michael Kors Outlet sjq Lebron James Shoes vlq Nike Lebron 12 bma Lebron 12 vda Lebron 12 aju Cheap Lebron 12 ymi Lebron James Shoes Cheap Lebron 12 vlg Nike Lebron 12 vmu Nike Lebron 12 vju Lebron 12 For Sale weji Louis Vuitton Outlet Store wemg Louis Vuitton Handbags smi Louis Vuitton Purses smi Louis Vuitton Handbags Outlet ahma Louis Vuitton Outlet blq Louis Vuitton Belt wedi Louis Vuitton Purses cmg Louis Vuitton Outlet ala Louis Vuitton Handbags Outlet vmi Louis Vuitton Backpack weja
[url=http://www.sanchoasociados.com]Sport Blue 14s For Sale[/url]
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Sorry, I have also never worked with the CRUDS system and therefore can't help you much :-(