actions = array("get", "getThumbHref", "download", "upload", "delete", "rename"); $this->app = $app; $this->options = $app->get_options(); } public function apply() { $action = use_request_param("action"); json_fail(100, "unsupported request", !in_array($action, $this->actions)); $methodname = "on_$action"; $this->$methodname(); } private function on_get() { $response = array(); if (has_request_param("setup")) { use_request_param("setup"); $response["setup"] = $this->app->get_setup(); } if (has_request_param("options")) { use_request_param("options"); $response["options"] = $this->app->get_options(); } if (has_request_param("types")) { use_request_param("types"); $response["types"] = $this->app->get_types(); } if (has_request_param("theme")) { use_request_param("theme"); $response["theme"] = $this->app->get_theme(); } if (has_request_param("langs")) { use_request_param("langs"); $response["langs"] = $this->app->get_l10n_list(); } if (has_request_param("l10n")) { use_request_param("l10n"); $iso_codes = use_request_param("l10nCodes"); $iso_codes = explode(":", $iso_codes); $response["l10n"] = $this->app->get_l10n($iso_codes); } if (has_request_param("custom")) { use_request_param("custom"); $url = use_request_param("customHref"); $response["custom"] = $this->app->get_customizations($url); } if (has_request_param("items")) { use_request_param("items"); $url = use_request_param("itemsHref"); $what = use_request_param("itemsWhat"); $what = is_numeric($what) ? intval($what, 10) : 1; $response["items"] = $this->app->get_items($url, $what); } if (count($_REQUEST)) { $response["unused"] = $_REQUEST; } json_exit($response); } private function on_getThumbHref() { json_fail(1, "thumbnails disabled", !$this->options["thumbnails"]["enabled"]); json_fail(2, "thumbnails not supported", !HAS_PHP_JPG); $type = use_request_param("type"); $src_url = use_request_param("href"); $mode = use_request_param("mode"); $width = use_request_param("width"); $height = use_request_param("height"); $thumb = new Thumb($this->app); $thumb_url = $thumb->thumb($type, $src_url, $mode, $width, $height); json_fail(3, "thumbnail creation failed", $thumb_url === null); json_exit(array("absHref" => $thumb_url)); } private function on_download() { json_fail(1, "downloads disabled", !$this->options["download"]["enabled"]); $as = use_request_param("as"); $type = use_request_param("type"); $hrefs = use_request_param("hrefs"); $archive = new Archive($this->app); $hrefs = explode("|:|", trim($hrefs)); set_time_limit(0); header("Content-Type: application/octet-stream"); header("Content-Disposition: attachment; filename=\"$as\""); header("Connection: close"); $rc = $archive->output($type, $hrefs); json_fail(2, "packaging failed", $rc !== 0); exit; } private function on_upload() { $href = use_request_param("href"); json_fail(1, "wrong HTTP method", strtolower($_SERVER["REQUEST_METHOD"]) !== "post"); json_fail(2, "something went wrong", !array_key_exists("userfile", $_FILES)); $userfile = $_FILES["userfile"]; json_fail(3, "something went wrong [" . $userfile["error"] . "]", $userfile["error"] !== 0); json_fail(4, "folders not supported", file_get_contents($userfile["tmp_name"]) === "null"); $upload_dir = $this->app->to_path($href); json_fail(5, "upload dir no h5ai folder or ignored", !$this->app->is_managed_url($href) || $this->app->is_ignored($upload_dir)); $dest = $upload_dir . "/" . utf8_encode($userfile["name"]); json_fail(6, "already exists", file_exists($dest)); json_fail(7, "can't move uploaded file", !move_uploaded_file($userfile["tmp_name"], $dest)); json_exit(); } private function on_delete() { json_fail(1, "deletion disabled", !$this->options["delete"]["enabled"]); $hrefs = use_request_param("hrefs"); $hrefs = explode("|:|", trim($hrefs)); $errors = array(); foreach ($hrefs as $href) { $d = normalize_path(dirname($href), true); $n = basename($href); if ($this->app->is_managed_url($href) && !$this->app->is_ignored($n)) { $path = $this->app->to_path($href); if (!delete_path($path, true)) { $errors[] = $href; } } } json_fail(2, "deletion failed for some", count($errors) > 0); json_exit(); } private function on_rename() { json_fail(1, "renaming disabled", !$this->options["rename"]["enabled"]); $href = use_request_param("href"); $name = use_request_param("name"); $d = normalize_path(dirname($href), true); $n = basename($href); if ($this->app->is_managed_url($d) && !$this->app->is_ignored($n)) { $path = $this->app->to_path($href); $folder = normalize_path(dirname($path)); if (!rename($path, $folder . "/" . $name)) { json_fail(2, "renaming failed"); } } json_exit(); } }