Code Forge

<?php

/**

*

* @package phpBB3

* @version $Id$

* @copyright (c) 2005 phpBB Group

* @license http://opensource.org/licenses/gpl-license.php GNU Public License

*

*/

/**

* @ignore

*/

if (!defined('IN_PHPBB'))

{

        exit;

}

/**

* Responsible for holding all file relevant information, as well as doing file-specific operations.

* The {@link fileupload fileupload class} can be used to upload several files, each of them being this object to operate further on.

* @package phpBB3

*/

class filespec

{

        var $filename = '';

        var $realname = '';

        var $uploadname = '';

        var $mimetype = '';

        var $extension = '';

        var $filesize = 0;

        var $width = 0;

        var $height = 0;

        var $image_info = array();

        var $destination_file = '';

        var $destination_path = '';

        var $file_moved = false;

        var $init_error = false;

        var $local = false;

        var $error = array();

        var $upload = '';

        /**

        * File Class

        * @access private

        */

        function filespec($upload_ary, $upload_namespace)

        {

                if (!isset($upload_ary))

                {

                        $this->init_error = true;

                        return;

                }

                $this->filename = $upload_ary['tmp_name'];

                $this->filesize = $upload_ary['size'];

                $name = (STRIP) ? stripslashes($upload_ary['name']) : $upload_ary['name'];

                $name = trim(utf8_htmlspecialchars(utf8_basename($name)));

                $this->realname = $this->uploadname = $name;

                $this->mimetype = $upload_ary['type'];

                // Opera adds the name to the mime type

                $this->mimetype        = (strpos($this->mimetype, '; name') !== false) ? str_replace(strstr($this->mimetype, '; name'), '', $this->mimetype) : $this->mimetype;

                if (!$this->mimetype)

                {

                        $this->mimetype = 'application/octetstream';

                }

                $this->extension = strtolower($this->get_extension($this->realname));

                // Try to get real filesize from temporary folder (not always working) ;)

                $this->filesize = (@filesize($this->filename)) ? @filesize($this->filename) : $this->filesize;

                $this->width = $this->height = 0;

                $this->file_moved = false;

                $this->local = (isset($upload_ary['local_mode'])) ? true : false;

                $this->upload = $upload_namespace;

        }

        /**

        * Cleans destination filename

        *

        * @param real|unique|unique_ext $mode real creates a realname, filtering some characters, lowering every character. Unique creates an unique filename

        * @param string $prefix Prefix applied to filename

        * @access public

        */

        function clean_filename($mode = 'unique', $prefix = '', $user_id = '')

        {

                if ($this->init_error)

                {

                        return;

                }

                switch ($mode)

                {

                        case 'real':

                                // Remove every extension from filename (to not let the mime bug being exposed)

                                if (strpos($this->realname, '.') !== false)

                                {

                                        $this->realname = substr($this->realname, 0, strpos($this->realname, '.'));

                                }

                                // Replace any chars which may cause us problems with _

                                $bad_chars = array("'", "\\", ' ', '/', ':', '*', '?', '"', '<', '>', '|');

                                $this->realname = rawurlencode(str_replace($bad_chars, '_', strtolower($this->realname)));

                                $this->realname = preg_replace("/%(\w{2})/", '_', $this->realname);

                                $this->realname = $prefix . $this->realname . '.' . $this->extension;

                        break;

                        case 'unique':

                                $this->realname = $prefix . md5(unique_id());

                        break;

                        case 'avatar':

                                $this->extension = strtolower($this->extension);

                                $this->realname = $prefix . $user_id . '.' . $this->extension;

                        break;

                        case 'unique_ext':

                        default:

                                $this->realname = $prefix . md5(unique_id()) . '.' . $this->extension;

                        break;

                }

        }

        /**

        * Get property from file object

        */

        function get($property)

        {

                if ($this->init_error || !isset($this->$property))

                {

                        return false;

                }

                return $this->$property;

        }

        /**

        * Check if file is an image (mimetype)

        *

        * @return true if it is an image, false if not

        */

        function is_image()

        {

                return (strpos($this->mimetype, 'image/') !== false) ? true : false;

        }

        /**

        * Check if the file got correctly uploaded

        *

        * @return true if it is a valid upload, false if not

        */

        function is_uploaded()

        {

                if (!$this->local && !is_uploaded_file($this->filename))

                {

                        return false;

                }

                if ($this->local && !file_exists($this->filename))

                {

                        return false;

                }

                return true;

        }

        /**

        * Remove file

        */

        function remove()

        {

                if ($this->file_moved)

                {

                        @unlink($this->destination_file);

                }

        }

        /**

        * Get file extension

        */

        function get_extension($filename)

        {

                if (strpos($filename, '.') === false)

                {

                        return '';

                }

                $filename = explode('.', $filename);

                return array_pop($filename);

        }

        /**

        * Get mimetype. Utilize mime_content_type if the function exist.

        * Not used at the moment...

        */

        function get_mimetype($filename)

        {

                $mimetype = '';

                if (function_exists('mime_content_type'))

                {

                        $mimetype = mime_content_type($filename);

                }

                // Some browsers choke on a mimetype of application/octet-stream

                if (!$mimetype || $mimetype == 'application/octet-stream')

                {

                        $mimetype = 'application/octetstream';

                }

                return $mimetype;

        }

        /**

        * Get filesize

        */

        function get_filesize($filename)

        {

                return @filesize($filename);

        }

        /**

        * Check the first 256 bytes for forbidden content

        */

        function check_content($disallowed_content)

        {

                if (empty($disallowed_content))

                {

                        return true;

                }

                $fp = @fopen($this->filename, 'rb');

                if ($fp !== false)

                {

                        $ie_mime_relevant = fread($fp, 256);

                        fclose($fp);

                        foreach ($disallowed_content as $forbidden)

                        {

                                if (stripos($ie_mime_relevant, '<' . $forbidden) !== false)

                                {

                                        return false;

                                }

                        }

                }

                return true;

        }

        /**

        * Move file to destination folder

        * The phpbb_root_path variable will be applied to the destination path

        *

        * @param string $destination_path Destination path, for example $config['avatar_path']

        * @param bool $overwrite If set to true, an already existing file will be overwritten

        * @param string $chmod Permission mask for chmodding the file after a successful move. The mode entered here reflects the mode defined by {@link phpbb_chmod()}

        *

        * @access public

        */

        function move_file($destination, $overwrite = false, $skip_image_check = false, $chmod = false)

        {

                global $user, $phpbb_root_path;

                if (sizeof($this->error))

                {

                        return false;

                }

                $chmod = ($chmod === false) ? CHMOD_READ | CHMOD_WRITE : $chmod;

                // We need to trust the admin in specifying valid upload directories and an attacker not being able to overwrite it...

                $this->destination_path = $phpbb_root_path . $destination;

                // Check if the destination path exist...

                if (!file_exists($this->destination_path))

                {

                        @unlink($this->filename);

                        return false;

                }

                $upload_mode = (@ini_get('open_basedir') || @ini_get('safe_mode') || strtolower(@ini_get('safe_mode')) == 'on') ? 'move' : 'copy';

                $upload_mode = ($this->local) ? 'local' : $upload_mode;

                $this->destination_file = $this->destination_path . '/' . utf8_basename($this->realname);

                // Check if the file already exist, else there is something wrong...

                if (file_exists($this->destination_file) && !$overwrite)

                {

                        @unlink($this->filename);

                }

                else

                {

                        if (file_exists($this->destination_file))

                        {

                                @unlink($this->destination_file);

                        }

                        switch ($upload_mode)

                        {

                                case 'copy':

                                        if (!@copy($this->filename, $this->destination_file))

                                        {

                                                if (!@move_uploaded_file($this->filename, $this->destination_file))

                                                {

                                                        $this->error[] = sprintf($user->lang[$this->upload->error_prefix . 'GENERAL_UPLOAD_ERROR'], $this->destination_file);

                                                }

                                        }

                                break;

                                case 'move':

                                        if (!@move_uploaded_file($this->filename, $this->destination_file))

                                        {

                                                if (!@copy($this->filename, $this->destination_file))

                                                {

                                                        $this->error[] = sprintf($user->lang[$this->upload->error_prefix . 'GENERAL_UPLOAD_ERROR'], $this->destination_file);

                                                }

                                        }

                                break;

                                case 'local':

                                        if (!@copy($this->filename, $this->destination_file))

                                        {

                                                $this->error[] = sprintf($user->lang[$this->upload->error_prefix . 'GENERAL_UPLOAD_ERROR'], $this->destination_file);

                                        }

                                break;

                        }

                        // Remove temporary filename

                        @unlink($this->filename);

                        if (sizeof($this->error))

                        {

                                return false;

                        }

                        phpbb_chmod($this->destination_file, $chmod);

                }

                // Try to get real filesize from destination folder

                $this->filesize = (@filesize($this->destination_file)) ? @filesize($this->destination_file) : $this->filesize;

                if ($this->is_image() && !$skip_image_check)

                {

                        $this->width = $this->height = 0;

                        if (($this->image_info = @getimagesize($this->destination_file)) !== false)

                        {

                                $this->width = $this->image_info[0];

                                $this->height = $this->image_info[1];

                                if (!empty($this->image_info['mime']))

                                {

                                        $this->mimetype = $this->image_info['mime'];

                                }

                                // Check image type

                                $types = $this->upload->image_types();

                                if (!isset($types[$this->image_info[2]]) || !in_array($this->extension, $types[$this->image_info[2]]))

                                {

                                        if (!isset($types[$this->image_info[2]]))

                                        {

                                                $this->error[] = sprintf($user->lang['IMAGE_FILETYPE_INVALID'], $this->image_info[2], $this->mimetype);

                                        }

                                        else

                                        {

                                                $this->error[] = sprintf($user->lang['IMAGE_FILETYPE_MISMATCH'], $types[$this->image_info[2]][0], $this->extension);

                                        }

                                }

                                // Make sure the dimensions match a valid image

                                if (empty($this->width) || empty($this->height))

                                {

                                        $this->error[] = $user->lang['ATTACHED_IMAGE_NOT_IMAGE'];

                                }

                        }

                        else

                        {

                                $this->error[] = $user->lang['UNABLE_GET_IMAGE_SIZE'];

                        }

                }

                $this->file_moved = true;

                $this->additional_checks();

                unset($this->upload);

                return true;

        }

        /**

        * Performing additional checks

        */

        function additional_checks()

        {

                global $user;

                if (!$this->file_moved)

                {

                        return false;

                }

                // Filesize is too big or it's 0 if it was larger than the maxsize in the upload form

                if ($this->upload->max_filesize && ($this->get('filesize') > $this->upload->max_filesize || $this->filesize == 0))

                {

                        $max_filesize = get_formatted_filesize($this->upload->max_filesize, false);

                        $this->error[] = sprintf($user->lang[$this->upload->error_prefix . 'WRONG_FILESIZE'], $max_filesize['value'], $max_filesize['unit']);

                        return false;

                }

                if (!$this->upload->valid_dimensions($this))

                {

                        $this->error[] = sprintf($user->lang[$this->upload->error_prefix . 'WRONG_SIZE'], $this->upload->min_width, $this->upload->min_height, $this->upload->max_width, $this->upload->max_height, $this->width, $this->height);

                        return false;

                }

                return true;

        }

}

/**

* Class for assigning error messages before a real filespec class can be assigned

*

* @package phpBB3

*/

class fileerror extends filespec

{

        function fileerror($error_msg)

        {

                $this->error[] = $error_msg;

        }

}

/**

* File upload class

* Init class (all parameters optional and able to be set/overwritten separately) - scope is global and valid for all uploads

*

* @package phpBB3

*/

class fileupload

{

        var $allowed_extensions = array();

        var $disallowed_content = array('body', 'head', 'html', 'img', 'plaintext', 'a href', 'pre', 'script', 'table', 'title');

        var $max_filesize = 0;

        var $min_width = 0;

        var $min_height = 0;

        var $max_width = 0;

        var $max_height = 0;

        var $error_prefix = '';

        /**

        * Init file upload class.

        *

        * @param string $error_prefix Used error messages will get prefixed by this string

        * @param array $allowed_extensions Array of allowed extensions, for example array('jpg', 'jpeg', 'gif', 'png')

        * @param int $max_filesize Maximum filesize

        * @param int $min_width Minimum image width (only checked for images)

        * @param int $min_height Minimum image height (only checked for images)

        * @param int $max_width Maximum image width (only checked for images)

        * @param int $max_height Maximum image height (only checked for images)

        *

        */

        function fileupload($error_prefix = '', $allowed_extensions = false, $max_filesize = false, $min_width = false, $min_height = false, $max_width = false, $max_height = false, $disallowed_content = false)

        {

                $this->set_allowed_extensions($allowed_extensions);

                $this->set_max_filesize($max_filesize);

                $this->set_allowed_dimensions($min_width, $min_height, $max_width, $max_height);

                $this->set_error_prefix($error_prefix);

                $this->set_disallowed_content($disallowed_content);

        }

        /**

        * Reset vars

        */

        function reset_vars()

        {

                $this->max_filesize = 0;

                $this->min_width = $this->min_height = $this->max_width = $this->max_height = 0;

                $this->error_prefix = '';

                $this->allowed_extensions = array();

                $this->disallowed_content = array();

        }

        /**

        * Set allowed extensions

        */

        function set_allowed_extensions($allowed_extensions)

        {

                if ($allowed_extensions !== false && is_array($allowed_extensions))

                {

                        $this->allowed_extensions = $allowed_extensions;

                }

        }

        /**

        * Set allowed dimensions

        */

        function set_allowed_dimensions($min_width, $min_height, $max_width, $max_height)

        {

                $this->min_width = (int) $min_width;

                $this->min_height = (int) $min_height;

                $this->max_width = (int) $max_width;

                $this->max_height = (int) $max_height;

        }

        /**

        * Set maximum allowed filesize

        */

        function set_max_filesize($max_filesize)

        {

                if ($max_filesize !== false && (int) $max_filesize)

                {

                        $this->max_filesize = (int) $max_filesize;

                }

        }

        /**

        * Set disallowed strings

        */

        function set_disallowed_content($disallowed_content)

        {

                if ($disallowed_content !== false && is_array($disallowed_content))

                {

                        $this->disallowed_content = array_diff($disallowed_content, array(''));

                }

        }

        /**

        * Set error prefix

        */

        function set_error_prefix($error_prefix)

        {

                $this->error_prefix = $error_prefix;

        }

        /**

        * Form upload method

        * Upload file from users harddisk

        *

        * @param string $form_name Form name assigned to the file input field (if it is an array, the key has to be specified)

        * @return object $file Object "filespec" is returned, all further operations can be done with this object

        * @access public

        */

        function form_upload($form_name)

        {

                global $user;

                unset($_FILES[$form_name]['local_mode']);

                $file = new filespec($_FILES[$form_name], $this);

                if ($file->init_error)

                {

                        $file->error[] = '';

                        return $file;

                }

                // Error array filled?

                if (isset($_FILES[$form_name]['error']))

                {

                        $error = $this->assign_internal_error($_FILES[$form_name]['error']);

                        if ($error !== false)

                        {

                                $file->error[] = $error;

                                return $file;

                        }

                }

                // Check if empty file got uploaded (not catched by is_uploaded_file)

                if (isset($_FILES[$form_name]['size']) && $_FILES[$form_name]['size'] == 0)

                {

                        $file->error[] = $user->lang[$this->error_prefix . 'EMPTY_FILEUPLOAD'];

                        return $file;

                }

                // PHP Upload filesize exceeded

                if ($file->get('filename') == 'none')

                {

                        $max_filesize = @ini_get('upload_max_filesize');

                        $unit = 'MB';

                        if (!empty($max_filesize))

                        {

                                $unit = strtolower(substr($max_filesize, -1, 1));

                                $max_filesize = (int) $max_filesize;

                                $unit = ($unit == 'k') ? 'KB' : (($unit == 'g') ? 'GB' : 'MB');

                        }

                        $file->error[] = (empty($max_filesize)) ? $user->lang[$this->error_prefix . 'PHP_SIZE_NA'] : sprintf($user->lang[$this->error_prefix . 'PHP_SIZE_OVERRUN'], $max_filesize, $user->lang[$unit]);

                        return $file;

                }

                // Not correctly uploaded

                if (!$file->is_uploaded())

                {

                        $file->error[] = $user->lang[$this->error_prefix . 'NOT_UPLOADED'];

                        return $file;

                }

                $this->common_checks($file);

                return $file;

        }

        /**

        * Move file from another location to phpBB

        */

        function local_upload($source_file, $filedata = false)

        {

                global $user;

                $form_name = 'local';

                $_FILES[$form_name]['local_mode'] = true;

                $_FILES[$form_name]['tmp_name'] = $source_file;

                if ($filedata === false)

                {

                        $_FILES[$form_name]['name'] = utf8_basename($source_file);

                        $_FILES[$form_name]['size'] = 0;

                        $mimetype = '';

                        if (function_exists('mime_content_type'))

                        {

                                $mimetype = mime_content_type($source_file);

                        }

                        // Some browsers choke on a mimetype of application/octet-stream

                        if (!$mimetype || $mimetype == 'application/octet-stream')

                        {

                                $mimetype = 'application/octetstream';

                        }

                        $_FILES[$form_name]['type'] = $mimetype;

                }

                else

                {

                        $_FILES[$form_name]['name'] = $filedata['realname'];

                        $_FILES[$form_name]['size'] = $filedata['size'];

                        $_FILES[$form_name]['type'] = $filedata['type'];

                }

                $file = new filespec($_FILES[$form_name], $this);

                if ($file->init_error)

                {

                        $file->error[] = '';

                        return $file;

                }

                if (isset($_FILES[$form_name]['error']))

                {

                        $error = $this->assign_internal_error($_FILES[$form_name]['error']);

                        if ($error !== false)

                        {

                                $file->error[] = $error;

                                return $file;

                        }

                }

                // PHP Upload filesize exceeded

                if ($file->get('filename') == 'none')

                {

                        $max_filesize = @ini_get('upload_max_filesize');

                        $unit = 'MB';

                        if (!empty($max_filesize))

                        {

                                $unit = strtolower(substr($max_filesize, -1, 1));

                                $max_filesize = (int) $max_filesize;

                                $unit = ($unit == 'k') ? 'KB' : (($unit == 'g') ? 'GB' : 'MB');

                        }

                        $file->error[] = (empty($max_filesize)) ? $user->lang[$this->error_prefix . 'PHP_SIZE_NA'] : sprintf($user->lang[$this->error_prefix . 'PHP_SIZE_OVERRUN'], $max_filesize, $user->lang[$unit]);

                        return $file;

                }

                // Not correctly uploaded

                if (!$file->is_uploaded())

                {

                        $file->error[] = $user->lang[$this->error_prefix . 'NOT_UPLOADED'];

                        return $file;

                }

                $this->common_checks($file);

                return $file;

        }

        /**

        * Remote upload method

        * Uploads file from given url

        *

        * @param string $upload_url URL pointing to file to upload, for example http://www.foobar.com/example.gif

        * @return object $file Object "filespec" is returned, all further operations can be done with this object

        * @access public

        */

        function remote_upload($upload_url)

        {

                global $user, $phpbb_root_path;

                $upload_ary = array();

                $upload_ary['local_mode'] = true;

                if (!preg_match('#^(https?://).*?\.(' . implode('|', $this->allowed_extensions) . ')$#i', $upload_url, $match))

                {

                        $file = new fileerror($user->lang[$this->error_prefix . 'URL_INVALID']);

                        return $file;

                }

                if (empty($match[2]))

                {

                        $file = new fileerror($user->lang[$this->error_prefix . 'URL_INVALID']);

                        return $file;

                }

                $url = parse_url($upload_url);

                $host = $url['host'];

                $path = $url['path'];

                $port = (!empty($url['port'])) ? (int) $url['port'] : 80;

                $upload_ary['type'] = 'application/octet-stream';

                $url['path'] = explode('.', $url['path']);

                $ext = array_pop($url['path']);

                $url['path'] = implode('', $url['path']);

                $upload_ary['name'] = utf8_basename($url['path']) . (($ext) ? '.' . $ext : '');

                $filename = $url['path'];

                $filesize = 0;

                $errno = 0;

                $errstr = '';

                if (!($fsock = @fsockopen($host, $port, $errno, $errstr)))

                {

                        $file = new fileerror($user->lang[$this->error_prefix . 'NOT_UPLOADED']);

                        return $file;

                }

                // Make sure $path not beginning with /

                if (strpos($path, '/') === 0)

                {

                        $path = substr($path, 1);

                }

                fputs($fsock, 'GET /' . $path . " HTTP/1.1\r\n");

                fputs($fsock, "HOST: " . $host . "\r\n");

                fputs($fsock, "Connection: close\r\n\r\n");

                $get_info = false;

                $data = '';

                while (!@feof($fsock))

                {

                        if ($get_info)