http://home.arino.jp/ // 2002 Y.MASUI http://masui.net/pukiwiki/ // 2001-2002 Originally written by yu-ji // License: GPL v2 or (at your option) any later version // // File attach plugin // NOTE (PHP > 4.2.3): // This feature is disabled at newer version of PHP. // Set this at php.ini if you want. // Max file size for upload on PHP (PHP default: 2MB) ini_set('upload_max_filesize', '2M'); // Max file size for upload on script of PukiWikiX_FILESIZE define('PLUGIN_ATTACH_MAX_FILESIZE', (1024 * 1024)); // default: 1MB // 管理者だけが添付ファイルをアップロードできるようにする define('PLUGIN_ATTACH_UPLOAD_ADMIN_ONLY', TRUE); // FALSE or TRUE // 管理者だけが添付ファイルを削除できるようにする define('PLUGIN_ATTACH_DELETE_ADMIN_ONLY', TRUE); // FALSE or TRUE // 管理者が添付ファイルを削除するときは、バックアップを作らない // PLUGIN_ATTACH_DELETE_ADMIN_ONLY=TRUEのとき有効 define('PLUGIN_ATTACH_DELETE_ADMIN_NOBACKUP', TRUE); // FALSE or TRUE // アップロード/削除時にパスワードを要求する(ADMIN_ONLYが優先) define('PLUGIN_ATTACH_PASSWORD_REQUIRE', FALSE); // FALSE or TRUE // 添付ファイル名を変更できるようにする define('PLUGIN_ATTACH_RENAME_ENABLE', TRUE); // FALSE or TRUE // ファイルのアクセス権 define('PLUGIN_ATTACH_FILE_MODE', 0644); //define('PLUGIN_ATTACH_FILE_MODE', 0604); // for XREA.COM // File icon image define('PLUGIN_ATTACH_FILE_ICON', '

'); // mime-typeを記述したページ define('PLUGIN_ATTACH_CONFIG_PAGE_MIME', 'plugin/attach/mime-type'); //-------- convert function plugin_attach_convert() { global $vars; $page = isset($vars['page']) ? $vars['page'] : ''; $nolist = $noform = FALSE; if (func_num_args() > 0) { foreach (func_get_args() as $arg) { $arg = strtolower($arg); $nolist |= ($arg == 'nolist'); $noform |= ($arg == 'noform'); } } $ret = ''; if (! $nolist) { $obj = & new AttachPages($page); $ret .= $obj->toString($page, TRUE); } if (! $noform) { $ret .= attach_form($page); } return $ret; } //-------- action function plugin_attach_action() { global $vars, $_attach_messages; // Backward compatible if (isset($vars['openfile'])) { $vars['file'] = $vars['openfile']; $vars['pcmd'] = 'open'; } if (isset($vars['delfile'])) { $vars['file'] = $vars['delfile']; $vars['pcmd'] = 'delete'; } $pcmd = isset($vars['pcmd']) ? $vars['pcmd'] : ''; $refer = isset($vars['refer']) ? $vars['refer'] : ''; $pass = isset($vars['pass']) ? $vars['pass'] : NULL; $page = isset($vars['page']) ? $vars['page'] : ''; if ($refer != '' && is_pagename($refer)) { if(in_array($pcmd, array('info', 'open', 'list'))) { check_readable($refer); } else { check_editable($refer); } } // Dispatch if (isset($_FILES['attach_file'])) { // Upload return attach_upload($_FILES['attach_file'], $refer, $pass); } else { switch ($pcmd) { case 'delete': /*FALLTHROUGH*/ case 'freeze': case 'unfreeze': if (PKWK_READONLY) die_message('PKWK_READONLY prohibits editing'); } // K1 ↓ switch ($pcmd) { case 'delete': case 'info': case 'unfreeze': case 'rename': case 'upload': $obj = new expan_session(); if (!$obj->check()) { die_message('Not Login'); } } // K1 ↑ switch ($pcmd) { case 'info' : return attach_info(); case 'delete' : return attach_delete(); case 'open' : return attach_open(); case 'list' : return attach_list(); case 'freeze' : return attach_freeze(TRUE); case 'unfreeze' : return attach_freeze(FALSE); case 'rename' : return attach_rename(); case 'upload' : return attach_showform(); } if ($page == '' || ! is_page($page)) { return attach_list(); } else { return attach_showform(); } } } //-------- call from skin function attach_filelist() { global $vars, $_attach_messages; $page = isset($vars['page']) ? $vars['page'] : ''; $obj = & new AttachPages($page, 0); if (! isset($obj->pages[$page])) { return ''; } else { return $_attach_messages['msg_file'] . ': ' . $obj->toString($page, TRUE) . "\n"; } } //-------- 実体 // ファイルアップロード // $pass = NULL : パスワードが指定されていない // $pass = TRUE : アップロード許可 function attach_upload($file, $page, $pass = NULL) { global $_attach_messages, $notify, $notify_subject; if (PKWK_READONLY) die_message('PKWK_READONLY prohibits editing'); // Check query-string $query = 'plugin=attach&pcmd=info&refer=' . rawurlencode($page) . '&file=' . rawurlencode($file['name']); if (PKWK_QUERY_STRING_MAX && strlen($query) > PKWK_QUERY_STRING_MAX) { pkwk_common_headers(); echo('Query string (page name and/or file name) too long'); exit; } else if (! is_page($page)) { die_message('No such page'); } else if ($file['tmp_name'] == '' || ! is_uploaded_file($file['tmp_name'])) { return array('result'=>FALSE); } else if ($file['size'] > PLUGIN_ATTACH_MAX_FILESIZE) { return array( 'result'=>FALSE, 'msg'=>$_attach_messages['err_exceed']); } else if (! is_pagename($page) || ($pass !== TRUE && ! is_editable($page))) { return array( 'result'=>FALSE,' msg'=>$_attach_messages['err_noparm']); } else if (PLUGIN_ATTACH_UPLOAD_ADMIN_ONLY && $pass !== TRUE && ($pass === NULL || ! pkwk_login($pass))) { return array( 'result'=>FALSE, 'msg'=>$_attach_messages['err_adminpass']); } $obj = & new AttachFile($page, $file['name']); if ($obj->exist) return array('result'=>FALSE, 'msg'=>$_attach_messages['err_exists']); if (move_uploaded_file($file['tmp_name'], $obj->filename)) chmod($obj->filename, PLUGIN_ATTACH_FILE_MODE); if (is_page($page)) touch(get_filename($page)); $obj->getstatus(); $obj->status['pass'] = ($pass !== TRUE && $pass !== NULL) ? md5($pass) : ''; $obj->putstatus(); if ($notify) { $footer['ACTION'] = 'File attached'; $footer['FILENAME'] = & $file['name']; $footer['FILESIZE'] = & $file['size']; $footer['PAGE'] = & $page; $footer['URI'] = get_script_uri() . //'?' . rawurlencode($page); // MD5 may heavy '?plugin=attach' . '&refer=' . rawurlencode($page) . '&file=' . rawurlencode($file['name']) . '&pcmd=info'; $footer['USER_AGENT'] = TRUE; $footer['REMOTE_ADDR'] = TRUE; pkwk_mail_notify($notify_subject, "\n", $footer) or die('pkwk_mail_notify(): Failed'); } return array( 'result'=>TRUE, 'msg'=>$_attach_messages['msg_uploaded']); } // 詳細フォームを表示 function attach_info($err = '') { global $vars, $_attach_messages; foreach (array('refer', 'file', 'age') as $var) ${$var} = isset($vars[$var]) ? $vars[$var] : ''; $obj = & new AttachFile($refer, $file, $age); return $obj->getstatus() ? $obj->info($err) : array('msg'=>$_attach_messages['err_notfound']); } // 削除 function attach_delete() { global $vars, $_attach_messages; foreach (array('refer', 'file', 'age', 'pass') as $var) ${$var} = isset($vars[$var]) ? $vars[$var] : ''; if (is_freeze($refer) || ! is_editable($refer)) return array('msg'=>$_attach_messages['err_noparm']); $obj = & new AttachFile($refer, $file, $age); if (! $obj->getstatus()) return array('msg'=>$_attach_messages['err_notfound']); return $obj->delete($pass); } // 凍結 function attach_freeze($freeze) { global $vars, $_attach_messages; foreach (array('refer', 'file', 'age', 'pass') as $var) { ${$var} = isset($vars[$var]) ? $vars[$var] : ''; } if (is_freeze($refer) || ! is_editable($refer)) { return array('msg'=>$_attach_messages['err_noparm']); } else { $obj = & new AttachFile($refer, $file, $age); return $obj->getstatus() ? $obj->freeze($freeze, $pass) : array('msg'=>$_attach_messages['err_notfound']); } } // リネーム function attach_rename() { global $vars, $_attach_messages; foreach (array('refer', 'file', 'age', 'pass', 'newname') as $var) { ${$var} = isset($vars[$var]) ? $vars[$var] : ''; } if (is_freeze($refer) || ! is_editable($refer)) { return array('msg'=>$_attach_messages['err_noparm']); } $obj = & new AttachFile($refer, $file, $age); if (! $obj->getstatus()) return array('msg'=>$_attach_messages['err_notfound']); return $obj->rename($pass, $newname); } // ダウンロード function attach_open() { global $vars, $_attach_messages; foreach (array('refer', 'file', 'age') as $var) { ${$var} = isset($vars[$var]) ? $vars[$var] : ''; } $obj = & new AttachFile($refer, $file, $age); return $obj->getstatus() ? $obj->open() : array('msg'=>$_attach_messages['err_notfound']); } // 一覧取得 function attach_list() { global $vars, $_attach_messages; $refer = isset($vars['refer']) ? $vars['refer'] : ''; $obj = & new AttachPages($refer); $msg = $_attach_messages[($refer == '') ? 'msg_listall' : 'msg_listpage']; $body = ($refer == '' || isset($obj->pages[$refer])) ? $obj->toString($refer, FALSE) : $_attach_messages['err_noexist']; return array('msg'=>$msg, 'body'=>$body); } // アップロードフォームを表示 (action時) function attach_showform() { global $vars, $_attach_messages; $page = isset($vars['page']) ? $vars['page'] : ''; $vars['refer'] = $page; $body = attach_form($page); return array('msg'=>$_attach_messages['msg_upload'], 'body'=>$body); } //-------- サービス // mime-typeの決定 function attach_mime_content_type($filename) { $type = 'application/octet-stream'; // default if (! file_exists($filename)) return $type; $size = @getimagesize($filename); if (is_array($size)) { switch ($size[2]) { case 1: return 'image/gif'; case 2: return 'image/jpeg'; case 3: return 'image/png'; case 4: return 'application/x-shockwave-flash'; } } $matches = array(); if (! preg_match('/_((?:[0-9A-F]{2})+)(?:\.\d+)?$/', $filename, $matches)) return $type; $filename = decode($matches[1]); // mime-type一覧表を取得 $config = new Config(PLUGIN_ATTACH_CONFIG_PAGE_MIME); $table = $config->read() ? $config->get('mime-type') : array(); unset($config); // メモリ節約 foreach ($table as $row) { $_type = trim($row[0]); $exts = preg_split('/\s+|,/', trim($row[1]), -1, PREG_SPLIT_NO_EMPTY); foreach ($exts as $ext) { if (preg_match("/\.$ext$/i", $filename)) return $_type; } } return $type; } // アップロードフォームの出力 function attach_form($page) { global $script, $vars, $_attach_messages; $r_page = rawurlencode($page); $s_page = htmlspecialchars($page); $navi = << [{$_attach_messages['msg_list']}] [{$_attach_messages['msg_listall']}]
EOD; if (! ini_get('file_uploads')) return '#attach(): file_uploads disabled
' . $navi; if (! is_page($page)) return '#attach(): No such page
' . $navi; $maxsize = PLUGIN_ATTACH_MAX_FILESIZE; $msg_maxsize = sprintf($_attach_messages['msg_maxsize'], number_format($maxsize/1024) . 'KB'); $pass = ''; if (PLUGIN_ATTACH_PASSWORD_REQUIRE || PLUGIN_ATTACH_UPLOAD_ADMIN_ONLY) { $title = $_attach_messages[PLUGIN_ATTACH_UPLOAD_ADMIN_ONLY ? 'msg_adminpass' : 'msg_password']; $pass = '
' . $title . ': '; } return <<

$navi $msg_maxsize
{$_attach_messages['msg_file']}: $pass

EOD; } //-------- クラス // ファイル class AttachFile { var $page, $file, $age, $basename, $filename, $logname; var $time = 0; var $size = 0; var $time_str = ''; var $size_str = ''; var $status = array('count'=>array(0), 'age'=>'', 'pass'=>'', 'freeze'=>FALSE); function AttachFile($page, $file, $age = 0) { $this->page = $page; $this->file = preg_replace('#^.*/#','',$file); $this->age = is_numeric($age) ? $age : 0; $this->basename = UPLOAD_DIR . encode($page) . '_' . encode($this->file); $this->filename = $this->basename . ($age ? '.' . $age : ''); $this->logname = $this->basename . '.log'; $this->exist = file_exists($this->filename); $this->time = $this->exist ? filemtime($this->filename) - LOCALZONE : 0; $this->md5hash = $this->exist ? md5_file($this->filename) : ''; } // ファイル情報取得 function getstatus() { if (! $this->exist) return FALSE; // ログファイル取得 if (file_exists($this->logname)) { $data = file($this->logname); foreach ($this->status as $key=>$value) { $this->status[$key] = chop(array_shift($data)); } $this->status['count'] = explode(',', $this->status['count']); } $this->time_str = get_date('Y/m/d H:i:s', $this->time); $this->size = filesize($this->filename); $this->size_str = sprintf('%01.1f', round($this->size/1024, 1)) . 'KB'; $this->type = attach_mime_content_type($this->filename); return TRUE; } // ステータス保存 function putstatus() { $this->status['count'] = join(',', $this->status['count']); $fp = fopen($this->logname, 'wb') or die_message('cannot write ' . $this->logname); set_file_buffer($fp, 0); flock($fp, LOCK_EX); rewind($fp); foreach ($this->status as $key=>$value) { fwrite($fp, $value . "\n"); } flock($fp, LOCK_UN); fclose($fp); } // 日付の比較関数 function datecomp($a, $b) { return ($a->time == $b->time) ? 0 : (($a->time > $b->time) ? -1 : 1); } function toString($showicon, $showinfo) { global $script, $_attach_messages; $this->getstatus(); $param = '&file=' . rawurlencode($this->file) . '&refer=' . rawurlencode($this->page) . ($this->age ? '&age=' . $this->age : ''); $title = $this->time_str . ' ' . $this->size_str; $label = ($showicon ? PLUGIN_ATTACH_FILE_ICON : '') . htmlspecialchars($this->file); if ($this->age) { $label .= ' (backup No.' . $this->age . ')'; } $info = $count = ''; if ($showinfo) { $_title = str_replace('$1', rawurlencode($this->file), $_attach_messages['msg_info']); $info = "\n[{$_attach_messages['btn_info']}]\n"; $count = ($showicon && ! empty($this->status['count'][$this->age])) ? sprintf($_attach_messages['msg_count'], $this->status['count'][$this->age]) : ''; } return "$label$count$info"; } // 情報表示 function info($err) { global $script, $_attach_messages; $r_page = rawurlencode($this->page); $s_page = htmlspecialchars($this->page); $s_file = htmlspecialchars($this->file); $s_err = ($err == '') ? '' : '

' . $_attach_messages[$err] . '

'; $msg_rename = ''; if ($this->age) { $msg_freezed = ''; $msg_delete = '' . '' . $_attach_messages['msg_delete'] . $_attach_messages['msg_require'] . '
'; $msg_freeze = ''; } else { if ($this->status['freeze']) { $msg_freezed = "

{$_attach_messages['msg_isfreeze']}

"; $msg_delete = ''; $msg_freeze = '' . '' . $_attach_messages['msg_unfreeze'] . $_attach_messages['msg_require'] . '
'; } else { $msg_freezed = ''; $msg_delete = '' . '' . $_attach_messages['msg_delete']; if (PLUGIN_ATTACH_DELETE_ADMIN_ONLY || $this->age) $msg_delete .= $_attach_messages['msg_require']; $msg_delete .= '
'; $msg_freeze = '' . '' . $_attach_messages['msg_freeze'] . $_attach_messages['msg_require'] . '
'; if (PLUGIN_ATTACH_RENAME_ENABLE) { $msg_rename = '' . '' . $_attach_messages['msg_rename'] . $_attach_messages['msg_require'] . '
' . '' . $_attach_messages['msg_newname'] . ': ' . '
'; } } } $info = $this->toString(TRUE, FALSE); $retval = array('msg'=>sprintf($_attach_messages['msg_info'], htmlspecialchars($this->file))); $retval['body'] = <<< EOD

[{$_attach_messages['msg_list']}] [{$_attach_messages['msg_listall']}]

$info: {$_attach_messages['msg_page']}:$s_page; {$_attach_messages['msg_filename']}:{$this->filename}; {$_attach_messages['msg_md5hash']}:{$this->md5hash}; {$_attach_messages['msg_filesize']}:{$this->size_str} ({$this->size} bytes); Content-type:{$this->type}; {$_attach_messages['msg_date']}:{$this->time_str}; {$_attach_messages['msg_dlcount']}:{$this->status['count'][$this->age]}

$s_err EOD; return $retval; } function delete($pass) { global $_attach_messages, $notify, $notify_subject; if ($this->status['freeze']) return attach_info('msg_isfreeze'); if (! pkwk_login($pass)) { if (PLUGIN_ATTACH_DELETE_ADMIN_ONLY || $this->age) { return attach_info('err_adminpass'); } else if (PLUGIN_ATTACH_PASSWORD_REQUIRE && md5($pass) != $this->status['pass']) { return attach_info('err_password'); } } // バックアップ if ($this->age || (PLUGIN_ATTACH_DELETE_ADMIN_ONLY && PLUGIN_ATTACH_DELETE_ADMIN_NOBACKUP)) { @unlink($this->filename); } else { do { $age = ++$this->status['age']; } while (file_exists($this->basename . '.' . $age)); if (! rename($this->basename,$this->basename . '.' . $age)) { // 削除失敗 why? return array('msg'=>$_attach_messages['err_delete']); } $this->status['count'][$age] = $this->status['count'][0]; $this->status['count'][0] = 0; $this->putstatus(); } if (is_page($this->page)) touch(get_filename($this->page)); if ($notify) { $footer['ACTION'] = 'File deleted'; $footer['FILENAME'] = & $this->file; $footer['PAGE'] = & $this->page; $footer['URI'] = get_script_uri() . '?' . rawurlencode($this->page); $footer['USER_AGENT'] = TRUE; $footer['REMOTE_ADDR'] = TRUE; pkwk_mail_notify($notify_subject, "\n", $footer) or die('pkwk_mail_notify(): Failed'); } return array('msg'=>$_attach_messages['msg_deleted']); } function rename($pass, $newname) { global $_attach_messages, $notify, $notify_subject; if ($this->status['freeze']) return attach_info('msg_isfreeze'); if (! pkwk_login($pass)) { if (PLUGIN_ATTACH_DELETE_ADMIN_ONLY || $this->age) { return attach_info('err_adminpass'); } else if (PLUGIN_ATTACH_PASSWORD_REQUIRE && md5($pass) != $this->status['pass']) { return attach_info('err_password'); } } $newbase = UPLOAD_DIR . encode($this->page) . '_' . encode($newname); if (file_exists($newbase)) { return array('msg'=>$_attach_messages['err_exists']); } if (! PLUGIN_ATTACH_RENAME_ENABLE || ! rename($this->basename, $newbase)) { return array('msg'=>$_attach_messages['err_rename']); } return array('msg'=>$_attach_messages['msg_renamed']); } function freeze($freeze, $pass) { global $_attach_messages; if (! pkwk_login($pass)) return attach_info('err_adminpass'); $this->getstatus(); $this->status['freeze'] = $freeze; $this->putstatus(); return array('msg'=>$_attach_messages[$freeze ? 'msg_freezed' : 'msg_unfreezed']); } function open() { $this->getstatus(); $this->status['count'][$this->age]++; $this->putstatus(); $filename = $this->file; // Care for Japanese-character-included file name if (LANG == 'ja') { switch(UA_NAME . '/' . UA_PROFILE){ case 'Opera/default': // Care for using _auto-encode-detecting_ function $filename = mb_convert_encoding($filename, 'UTF-8', 'auto'); break; case 'MSIE/default': $filename = mb_convert_encoding($filename, 'SJIS', 'auto'); break; } } $filename = htmlspecialchars($filename); ini_set('default_charset', ''); mb_http_output('pass'); pkwk_common_headers(); header('Content-Disposition: inline; filename="' . $filename . '"'); header('Content-Length: ' . $this->size); header('Content-Type: ' . $this->type); @readfile($this->filename); exit; } } // ファイルコンテナ class AttachFiles { var $page; var $files = array(); function AttachFiles($page) { $this->page = $page; } function add($file, $age) { $this->files[$file][$age] = & new AttachFile($this->page, $file, $age); } // ファイル一覧を取得 function toString($flat) { global $_title_cannotread; if (! check_readable($this->page, FALSE, FALSE)) { return str_replace('$1', make_pagelink($this->page), $_title_cannotread); } else if ($flat) { return $this->to_flat(); } $ret = ''; $files = array_keys($this->files); sort($files); foreach ($files as $file) { $_files = array(); foreach (array_keys($this->files[$file]) as $age) { $_files[$age] = $this->files[$file][$age]->toString(FALSE, TRUE); } if (! isset($_files[0])) { $_files[0] = htmlspecialchars($file); } ksort($_files); $_file = $_files[0]; unset($_files[0]); $ret .= "

$_file\n"; if (count($_files)) { $ret .= "

" . join("
", $_files) . "

\n"; } $ret .= "

\n"; } return make_pagelink($this->page) . "\n

\n$ret\n"; } // ファイル一覧を取得(inline) function to_flat() { $ret = ''; $files = array(); foreach (array_keys($this->files) as $file) { if (isset($this->files[$file][0])) { $files[$file] = & $this->files[$file][0]; } } uasort($files, array('AttachFile', 'datecomp')); foreach (array_keys($files) as $file) { $ret .= $files[$file]->toString(TRUE, TRUE) . ' '; } return $ret; } } // ページコンテナ class AttachPages { var $pages = array(); function AttachPages($page = '', $age = NULL) { $dir = opendir(UPLOAD_DIR) or die('directory ' . UPLOAD_DIR . ' is not exist or not readable.'); $page_pattern = ($page == '') ? '(?:[0-9A-F]{2})+' : preg_quote(encode($page), '/'); $age_pattern = ($age === NULL) ? '(?:\.([0-9]+))?' : ($age ? "\.($age)" : ''); $pattern = "/^({$page_pattern})_((?:[0-9A-F]{2})+){$age_pattern}$/"; $matches = array(); while ($file = readdir($dir)) { if (! preg_match($pattern, $file, $matches)) continue; $_page = decode($matches[1]); $_file = decode($matches[2]); $_age = isset($matches[3]) ? $matches[3] : 0; if (! isset($this->pages[$_page])) { $this->pages[$_page] = & new AttachFiles($_page); } $this->pages[$_page]->add($_file, $_age); } closedir($dir); } function toString($page = '', $flat = FALSE) { if ($page != '') { if (! isset($this->pages[$page])) { return ''; } else { return $this->pages[$page]->toString($flat); } } $ret = ''; $pages = array_keys($this->pages); sort($pages); foreach ($pages as $page) { if (check_non_list($page)) continue; $ret .= '

' . $this->pages[$page]->toString($flat) . '

' . "\n"; } return "\n" . '

' . "\n" . $ret . '' . "\n"; } } ?>