diff options
Diffstat (limited to 'lib/private/files.php')
-rw-r--r-- | lib/private/files.php | 321 |
1 files changed, 321 insertions, 0 deletions
diff --git a/lib/private/files.php b/lib/private/files.php new file mode 100644 index 00000000000..c705d2adb1a --- /dev/null +++ b/lib/private/files.php @@ -0,0 +1,321 @@ +<?php + +/** + * ownCloud + * + * @author Frank Karlitschek + * @copyright 2012 Frank Karlitschek frank@owncloud.org + * + * This library is free software; you can redistribute it and/or + * modify it under the terms of the GNU AFFERO GENERAL PUBLIC LICENSE + * License as published by the Free Software Foundation; either + * version 3 of the License, or any later version. + * + * This library is distributed in the hope that it will be useful, + * but WITHOUT ANY WARRANTY; without even the implied warranty of + * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the + * GNU AFFERO GENERAL PUBLIC LICENSE for more details. + * + * You should have received a copy of the GNU Affero General Public + * License along with this library. If not, see <http://www.gnu.org/licenses/>. + * + */ + +/** + * Class for fileserver access + * + */ +class OC_Files { + static $tmpFiles = array(); + + static public function getFileInfo($path){ + return \OC\Files\Filesystem::getFileInfo($path); + } + + static public function getDirectoryContent($path){ + return \OC\Files\Filesystem::getDirectoryContent($path); + } + + /** + * return the content of a file or return a zip file containing multiple files + * + * @param string $dir + * @param string $file ; separated list of files to download + * @param boolean $only_header ; boolean to only send header of the request + */ + public static function get($dir, $files, $only_header = false) { + $xsendfile = false; + if (isset($_SERVER['MOD_X_SENDFILE_ENABLED']) || + isset($_SERVER['MOD_X_SENDFILE2_ENABLED']) || + isset($_SERVER['MOD_X_ACCEL_REDIRECT_ENABLED'])) { + $xsendfile = true; + } + + if (is_array($files) && count($files) == 1) { + $files = $files[0]; + } + + if (is_array($files)) { + self::validateZipDownload($dir, $files); + $executionTime = intval(ini_get('max_execution_time')); + set_time_limit(0); + $zip = new ZipArchive(); + $filename = OC_Helper::tmpFile('.zip'); + if ($zip->open($filename, ZIPARCHIVE::CREATE | ZIPARCHIVE::OVERWRITE)!==true) { + $l = OC_L10N::get('lib'); + throw new Exception($l->t('cannot open "%s"', array($filename))); + } + foreach ($files as $file) { + $file = $dir . '/' . $file; + if (\OC\Files\Filesystem::is_file($file)) { + $tmpFile = \OC\Files\Filesystem::toTmpFile($file); + self::$tmpFiles[] = $tmpFile; + $zip->addFile($tmpFile, basename($file)); + } elseif (\OC\Files\Filesystem::is_dir($file)) { + self::zipAddDir($file, $zip); + } + } + $zip->close(); + if ($xsendfile) { + $filename = OC_Helper::moveToNoClean($filename); + } + $basename = basename($dir); + if ($basename) { + $name = $basename . '.zip'; + } else { + $name = 'owncloud.zip'; + } + + set_time_limit($executionTime); + } elseif (\OC\Files\Filesystem::is_dir($dir . '/' . $files)) { + self::validateZipDownload($dir, $files); + $executionTime = intval(ini_get('max_execution_time')); + set_time_limit(0); + $zip = new ZipArchive(); + $filename = OC_Helper::tmpFile('.zip'); + if ($zip->open($filename, ZIPARCHIVE::CREATE | ZIPARCHIVE::OVERWRITE)!==true) { + $l = OC_L10N::get('lib'); + throw new Exception($l->t('cannot open "%s"', array($filename))); + } + $file = $dir . '/' . $files; + self::zipAddDir($file, $zip); + $zip->close(); + if ($xsendfile) { + $filename = OC_Helper::moveToNoClean($filename); + } + $name = $files . '.zip'; + set_time_limit($executionTime); + } else { + $zip = false; + $filename = $dir . '/' . $files; + $name = $files; + } + OC_Util::obEnd(); + if ($zip or \OC\Files\Filesystem::isReadable($filename)) { + if ( preg_match( "/MSIE/", $_SERVER["HTTP_USER_AGENT"] ) ) { + header( 'Content-Disposition: attachment; filename="' . rawurlencode($name) . '"' ); + } else { + header( 'Content-Disposition: attachment; filename*=UTF-8\'\'' . rawurlencode($name) + . '; filename="' . rawurlencode($name) . '"' ); + } + header('Content-Transfer-Encoding: binary'); + OC_Response::disableCaching(); + if ($zip) { + ini_set('zlib.output_compression', 'off'); + header('Content-Type: application/zip'); + header('Content-Length: ' . filesize($filename)); + self::addSendfileHeader($filename); + }else{ + $filesize = \OC\Files\Filesystem::filesize($filename); + header('Content-Type: '.\OC\Files\Filesystem::getMimeType($filename)); + if ($filesize > -1) { + header("Content-Length: ".$filesize); + } + list($storage) = \OC\Files\Filesystem::resolvePath($filename); + if ($storage instanceof \OC\Files\Storage\Local) { + self::addSendfileHeader(\OC\Files\Filesystem::getLocalFile($filename)); + } + } + } elseif ($zip or !\OC\Files\Filesystem::file_exists($filename)) { + header("HTTP/1.0 404 Not Found"); + $tmpl = new OC_Template('', '404', 'guest'); + $tmpl->assign('file', $name); + $tmpl->printPage(); + } else { + header("HTTP/1.0 403 Forbidden"); + die('403 Forbidden'); + } + if($only_header) { + return ; + } + if ($zip) { + $handle = fopen($filename, 'r'); + if ($handle) { + $chunkSize = 8 * 1024; // 1 MB chunks + while (!feof($handle)) { + echo fread($handle, $chunkSize); + flush(); + } + } + if (!$xsendfile) { + unlink($filename); + } + }else{ + \OC\Files\Filesystem::readfile($filename); + } + foreach (self::$tmpFiles as $tmpFile) { + if (file_exists($tmpFile) and is_file($tmpFile)) { + unlink($tmpFile); + } + } + } + + private static function addSendfileHeader($filename) { + if (isset($_SERVER['MOD_X_SENDFILE_ENABLED'])) { + header("X-Sendfile: " . $filename); + } + if (isset($_SERVER['MOD_X_SENDFILE2_ENABLED'])) { + if (isset($_SERVER['HTTP_RANGE']) && + preg_match("/^bytes=([0-9]+)-([0-9]*)$/", $_SERVER['HTTP_RANGE'], $range)) { + $filelength = filesize($filename); + if ($range[2] == "") { + $range[2] = $filelength - 1; + } + header("Content-Range: bytes $range[1]-$range[2]/" . $filelength); + header("HTTP/1.1 206 Partial content"); + header("X-Sendfile2: " . str_replace(",", "%2c", rawurlencode($filename)) . " $range[1]-$range[2]"); + } else { + header("X-Sendfile: " . $filename); + } + } + + if (isset($_SERVER['MOD_X_ACCEL_REDIRECT_ENABLED'])) { + header("X-Accel-Redirect: " . $filename); + } + } + + public static function zipAddDir($dir, $zip, $internalDir='') { + $dirname=basename($dir); + $zip->addEmptyDir($internalDir.$dirname); + $internalDir.=$dirname.='/'; + $files=OC_Files::getDirectoryContent($dir); + foreach($files as $file) { + $filename=$file['name']; + $file=$dir.'/'.$filename; + if(\OC\Files\Filesystem::is_file($file)) { + $tmpFile=\OC\Files\Filesystem::toTmpFile($file); + OC_Files::$tmpFiles[]=$tmpFile; + $zip->addFile($tmpFile, $internalDir.$filename); + }elseif(\OC\Files\Filesystem::is_dir($file)) { + self::zipAddDir($file, $zip, $internalDir); + } + } + } + + /** + * checks if the selected files are within the size constraint. If not, outputs an error page. + * + * @param dir $dir + * @param files $files + */ + static function validateZipDownload($dir, $files) { + if (!OC_Config::getValue('allowZipDownload', true)) { + $l = OC_L10N::get('lib'); + header("HTTP/1.0 409 Conflict"); + OC_Template::printErrorPage( + $l->t('ZIP download is turned off.'), + $l->t('Files need to be downloaded one by one.') + . '<br/><a href="javascript:history.back()">' . $l->t('Back to Files') . '</a>' + ); + exit; + } + + $zipLimit = OC_Config::getValue('maxZipInputSize', OC_Helper::computerFileSize('800 MB')); + if ($zipLimit > 0) { + $totalsize = 0; + if(!is_array($files)) { + $files = array($files); + } + foreach ($files as $file) { + $path = $dir . '/' . $file; + if(\OC\Files\Filesystem::is_dir($path)) { + foreach (\OC\Files\Filesystem::getDirectoryContent($path) as $i) { + $totalsize += $i['size']; + } + } else { + $totalsize += \OC\Files\Filesystem::filesize($path); + } + } + if ($totalsize > $zipLimit) { + $l = OC_L10N::get('lib'); + header("HTTP/1.0 409 Conflict"); + OC_Template::printErrorPage( + $l->t('Selected files too large to generate zip file.'), + $l->t('Download the files in smaller chunks, seperately or kindly ask your administrator.') + .'<br/><a href="javascript:history.back()">' + . $l->t('Back to Files') . '</a>' + ); + exit; + } + } + } + + /** + * set the maximum upload size limit for apache hosts using .htaccess + * + * @param int size filesisze in bytes + * @return false on failure, size on success + */ + static function setUploadLimit($size) { + //don't allow user to break his config -- upper boundary + if ($size > PHP_INT_MAX) { + //max size is always 1 byte lower than computerFileSize returns + if ($size > PHP_INT_MAX + 1) + return false; + $size -= 1; + } else { + $size = OC_Helper::humanFileSize($size); + $size = substr($size, 0, -1); //strip the B + $size = str_replace(' ', '', $size); //remove the space between the size and the postfix + } + + //don't allow user to break his config -- broken or malicious size input + if (intval($size) == 0) { + return false; + } + + $htaccess = @file_get_contents(OC::$SERVERROOT . '/.htaccess'); //supress errors in case we don't have permissions for + if (!$htaccess) { + return false; + } + + $phpValueKeys = array( + 'upload_max_filesize', + 'post_max_size' + ); + + foreach ($phpValueKeys as $key) { + $pattern = '/php_value ' . $key . ' (\S)*/'; + $setting = 'php_value ' . $key . ' ' . $size; + $hasReplaced = 0; + $content = preg_replace($pattern, $setting, $htaccess, 1, $hasReplaced); + if ($content !== null) { + $htaccess = $content; + } + if ($hasReplaced == 0) { + $htaccess .= "\n" . $setting; + } + } + + //check for write permissions + if (is_writable(OC::$SERVERROOT . '/.htaccess')) { + file_put_contents(OC::$SERVERROOT . '/.htaccess', $htaccess); + return OC_Helper::computerFileSize($size); + } else { + OC_Log::write('files', + 'Can\'t write upload limit to ' . OC::$SERVERROOT . '/.htaccess. Please check the file permissions', + OC_Log::WARN); + } + return false; + } +} |